[Tue Nov 11 02:24:12.981821 2025] [:error] [pid 24225:tid 24247] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Nov 11 02:24:13.434228 2025] [:error] [pid 24225:tid 24252] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Nov 11 02:24:13.908536 2025] [:error] [pid 24225:tid 24255] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Nov 11 02:24:14.135134 2025] [:error] [pid 24225:tid 24233] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Tue Nov 11 02:24:15.386862 2025] [:error] [pid 24225:tid 24243] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Tue Nov 11 02:24:15.819483 2025] [:error] [pid 24225:tid 24244] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/article.php
[Tue Nov 11 02:24:16.051557 2025] [:error] [pid 24225:tid 24245] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Nov 11 02:24:16.283049 2025] [:error] [pid 24225:tid 24251] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Nov 11 02:24:16.940417 2025] [:error] [pid 24225:tid 24246] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Tue Nov 11 02:24:17.157154 2025] [:error] [pid 24225:tid 24242] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Tue Nov 11 02:24:17.376081 2025] [:error] [pid 24225:tid 24254] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue Nov 11 02:24:17.587654 2025] [:error] [pid 24225:tid 24237] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Nov 11 02:24:17.840010 2025] [:error] [pid 24225:tid 24248] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Nov 11 02:24:18.055708 2025] [:error] [pid 24225:tid 24257] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Nov 11 02:24:18.268443 2025] [:error] [pid 24225:tid 24241] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Nov 11 02:24:20.419832 2025] [:error] [pid 24225:tid 24243] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Nov 11 02:24:21.291822 2025] [:error] [pid 24225:tid 24246] [client 172.172.115.6:3403] [client 172.172.115.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.172.115.6, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aRIt1Z2rrdiHvhXEioWEYwAAAk0"]
[Tue Nov 11 02:24:24.452838 2025] [:error] [pid 24225:tid 24240] [client 172.172.115.6:3403] [client 172.172.115.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.172.115.6, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aRIt2J2rrdiHvhXEioWEbgAAAkc"]
[Tue Nov 11 02:24:24.897302 2025] [:error] [pid 24225:tid 24255] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Tue Nov 11 02:24:25.982643 2025] [:error] [pid 24225:tid 24251] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Nov 11 02:24:30.622856 2025] [:error] [pid 24225:tid 24235] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Nov 11 02:24:30.836264 2025] [:error] [pid 24225:tid 24233] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Nov 11 02:24:31.535927 2025] [:error] [pid 24225:tid 24245] [client 172.172.115.6:3403] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Nov 11 05:27:10.565453 2025] [:error] [pid 34002:tid 34023] [client 104.179.122.251:58524] [client 104.179.122.251] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRJYrtNx46Ag0u620oqbOgAAABE"], referer: https://www.google.com
[Tue Nov 11 05:27:26.091287 2025] [:error] [pid 33932:tid 33987] [client 104.179.122.251:59116] [client 104.179.122.251] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRJYvpdn2hP2rg5PoHI2NgAAAVQ"]
[Tue Nov 11 05:27:26.091659 2025] [:error] [pid 33932:tid 33987] [client 104.179.122.251:59116] [client 104.179.122.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.179.122.251, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRJYvpdn2hP2rg5PoHI2NgAAAVQ"]
[Tue Nov 11 05:27:26.096396 2025] [:error] [pid 33932:tid 33987] [client 104.179.122.251:59116] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 11 05:27:30.754222 2025] [:error] [pid 33932:tid 33978] [client 104.179.122.251:59358] [client 104.179.122.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.179.122.251, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aRJYwpdn2hP2rg5PoHI2VwAAAUs"], referer: https://www.google.com
[Tue Nov 11 05:27:30.759780 2025] [:error] [pid 33932:tid 33978] [client 104.179.122.251:59358] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Tue Nov 11 05:27:38.051241 2025] [:error] [pid 33931:tid 33954] [client 104.179.122.251:59472] [client 104.179.122.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.179.122.251, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aRJYyknJb679KZEjo-PQqQAAAQ4"], referer: https://www.google.com
[Tue Nov 11 05:27:38.055325 2025] [:error] [pid 33931:tid 33954] [client 104.179.122.251:59472] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Tue Nov 11 09:46:25.160409 2025] [:error] [pid 59670:tid 59692] [client 45.153.34.41:60836] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRKVcak2Cnts0y-hpfpm_wAAAJM"]
[Tue Nov 11 10:29:26.611993 2025] [:error] [pid 53356:tid 53400] [client 45.153.34.41:35836] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRKfhukdmt0kzjVcUN9D_QAAAE8"]
[Tue Nov 11 13:37:25.458661 2025] [:error] [pid 53414:tid 53430] [client 172.58.11.26:59055] [client 172.58.11.26] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aRLLlQs6pHd_Z5oc1edTxAAAAQ4"], referer: https://www.google.com
[Tue Nov 11 13:37:46.508475 2025] [:error] [pid 53355:tid 53368] [client 172.58.11.26:18158] [client 172.58.11.26] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLLqoB5X5A3rMc4_nAXwAAAAAo"]
[Tue Nov 11 13:37:46.508774 2025] [:error] [pid 53355:tid 53368] [client 172.58.11.26:18158] [client 172.58.11.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.58.11.26, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRLLqoB5X5A3rMc4_nAXwAAAAAo"]
[Tue Nov 11 13:37:46.513677 2025] [:error] [pid 53355:tid 53368] [client 172.58.11.26:18158] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 11 13:38:06.501406 2025] [:error] [pid 53356:tid 53402] [client 172.58.11.26:58790] [client 172.58.11.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.58.11.26, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aRLLvukdmt0kzjVcUN-EfwAAAFE"], referer: https://www.google.com
[Tue Nov 11 13:38:06.505911 2025] [:error] [pid 53356:tid 53402] [client 172.58.11.26:58790] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Tue Nov 11 13:38:17.736119 2025] [:error] [pid 53414:tid 53426] [client 172.58.11.26:55460] [client 172.58.11.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.58.11.26, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aRLLyQs6pHd_Z5oc1edUfgAAAQo"], referer: https://www.google.com
[Tue Nov 11 13:38:17.740694 2025] [:error] [pid 53414:tid 53426] [client 172.58.11.26:55460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Tue Nov 11 15:32:49.168066 2025] [:error] [pid 53356:tid 53400] [client 159.65.170.140:46526] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRLmoekdmt0kzjVcUN-tdwAAAE8"]
[Tue Nov 11 15:32:56.175976 2025] [:error] [pid 59670:tid 59680] [client 159.65.170.140:59846] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRLmqKk2Cnts0y-hpfoaOQAAAIc"]
[Tue Nov 11 15:45:59.396646 2025] [:error] [pid 53356:tid 53396] [client 159.65.170.140:34260] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRLpt-kdmt0kzjVcUN-xxAAAAEs"]
[Tue Nov 11 15:46:01.199244 2025] [:error] [pid 53355:tid 53366] [client 159.65.170.140:54286] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRLpuYB5X5A3rMc4_nBEmAAAAAg"]
[Wed Nov 12 00:54:24.458401 2025] [:error] [pid 54701:tid 54990] [client 159.65.170.140:38940] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRNqQBf-2zu56UfbUVKz7QAAAUU"]
[Wed Nov 12 00:54:30.073055 2025] [:error] [pid 54701:tid 54989] [client 159.65.170.140:36666] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRNqRhf-2zu56UfbUVKz_AAAAUQ"]
[Wed Nov 12 04:34:31.493421 2025] [:error] [pid 57222:tid 57234] [client 159.65.170.140:37502] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aROd12GJazH5XCcA91cZqgAAAAc"]
[Wed Nov 12 04:34:35.130321 2025] [:error] [pid 57222:tid 57248] [client 159.65.170.140:54734] [client 159.65.170.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aROd22GJazH5XCcA91cZrgAAABU"]
[Wed Nov 12 06:07:42.409706 2025] [:error] [pid 57224:tid 57287] [client 47.15.93.43:61321] [client 47.15.93.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.15.93.43, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aROzrhs7oZ7imwCSdAkMPgAAAIM"]
[Wed Nov 12 06:07:42.415709 2025] [:error] [pid 57224:tid 57287] [client 47.15.93.43:61321] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 12 22:12:50.018115 2025] [:error] [pid 23737:tid 23772] [client 18.194.233.167:34684] [client 18.194.233.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRSV4hQUsVVfOZWgW_XkdgAAAZc"]
[Thu Nov 13 00:42:01.679474 2025] [:error] [pid 12744:tid 12769] [client 103.153.143.206:53230] [client 103.153.143.206] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.153.143.206, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRS42Z1cp_ouUvkFj0WySAAAARU"]
[Thu Nov 13 00:42:01.686733 2025] [:error] [pid 12744:tid 12769] [client 103.153.143.206:53230] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 13 03:21:09.934964 2025] [:error] [pid 60097:tid 60175] [client 195.178.110.159:59272] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aRTeJcdT5oio_TbWpi_kMAAAANY"]
[Thu Nov 13 07:26:59.479794 2025] [:error] [pid 22222:tid 22237] [client 85.203.36.134:40007] [client 85.203.36.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aRUXwzL-5qXvQuZkA4HClAAAAAs"]
[Thu Nov 13 17:55:44.432488 2025] [:error] [pid 62215:tid 62230] [client 150.241.107.255:56660] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aRWrIEvClof1c6XaOBWsLQAAAMs"]
[Thu Nov 13 17:55:44.978673 2025] [:error] [pid 44354:tid 44371] [client 150.241.107.255:56875] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aRWrIHqKopQhy3G4s3l0hwAAAYw"]
[Thu Nov 13 17:55:45.526472 2025] [:error] [pid 62217:tid 62280] [client 150.241.107.255:57282] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIRjGU3T9wKBmdNc29gAAAEY"]
[Fri Nov 14 02:27:48.950723 2025] [:error] [pid 56586:tid 56605] [client 152.42.214.53:57316] [client 152.42.214.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aRYjJK7eYD3G9deYMP5aXwAAAY4"]
[Sat Nov 15 02:59:03.423334 2025] [:error] [pid 45907:tid 45935] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Nov 15 02:59:03.633899 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Nov 15 02:59:03.857292 2025] [:error] [pid 45907:tid 45921] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/efsd.php
[Sat Nov 15 02:59:04.071360 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/13ede.php
[Sat Nov 15 02:59:04.284427 2025] [:error] [pid 45907:tid 45925] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sat Nov 15 02:59:04.510965 2025] [:error] [pid 45907:tid 45918] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/xvent.php
[Sat Nov 15 02:59:04.734008 2025] [:error] [pid 45907:tid 45915] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Nov 15 02:59:04.944964 2025] [:error] [pid 45907:tid 45928] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Nov 15 02:59:05.156134 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Sat Nov 15 02:59:05.367374 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:65164] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Sat Nov 15 02:59:05.574366 2025] [:error] [pid 45907:tid 45931] [client 4.205.91.17:65164] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aRd7-VAqmYxCpnT9gJGm2QAAAVQ"]
[Sat Nov 15 02:59:06.135858 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:65255] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aRd7-mWG19mWwZX7KauEUQAAABU"]
[Sat Nov 15 02:59:06.588434 2025] [:error] [pid 45908:tid 45955] [client 4.205.91.17:65162] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aRd7-mWG19mWwZX7KauEUwAAABE"]
[Sat Nov 15 02:59:07.079670 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:65214] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aRd7-8fhZrb6EV4SvFvprAAAAgw"]
[Sat Nov 15 02:59:07.723704 2025] [:error] [pid 45995:tid 46000] [client 4.205.91.17:64393] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "aRd7-8fhZrb6EV4SvFvprgAAAgA"]
[Sat Nov 15 02:59:08.472173 2025] [:error] [pid 45908:tid 45954] [client 4.205.91.17:65248] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "aRd7_GWG19mWwZX7KauEWQAAABA"]
[Sat Nov 15 02:59:08.948448 2025] [:error] [pid 45907:tid 45924] [client 4.205.91.17:64477] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "aRd7_FAqmYxCpnT9gJGm3AAAAU0"]
[Sat Nov 15 02:59:09.464170 2025] [:error] [pid 45995:tid 46015] [client 4.205.91.17:64385] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "aRd7_cfhZrb6EV4SvFvprwAAAg8"]
[Sat Nov 15 02:59:09.926483 2025] [:error] [pid 45995:tid 46019] [client 4.205.91.17:65230] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRd7_cfhZrb6EV4SvFvpsgAAAhM"]
[Sat Nov 15 02:59:10.508778 2025] [:error] [pid 45909:tid 45976] [client 4.205.91.17:64384] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRd7_sZqItrYybG86ki4QwAAAcs"]
[Sat Nov 15 02:59:11.116810 2025] [:error] [pid 45907:tid 45930] [client 4.205.91.17:64481] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRd7_1AqmYxCpnT9gJGm3gAAAVM"]
[Sat Nov 15 02:59:11.652940 2025] [:error] [pid 45908:tid 45956] [client 4.205.91.17:64398] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aRd7_2WG19mWwZX7KauEYAAAABI"]
[Sat Nov 15 02:59:12.150681 2025] [:error] [pid 45909:tid 45977] [client 4.205.91.17:64386] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aRd8AMZqItrYybG86ki4RwAAAcw"]
[Sat Nov 15 02:59:12.739185 2025] [:error] [pid 18513:tid 18537] [client 4.205.91.17:64459] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aRd8APc94upQFzRWlUn4MAAAAFM"]
[Sat Nov 15 02:59:13.292322 2025] [:error] [pid 45907:tid 45926] [client 4.205.91.17:65247] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aRd8AVAqmYxCpnT9gJGm4QAAAU8"]
[Sat Nov 15 02:59:13.859390 2025] [:error] [pid 45909:tid 45965] [client 4.205.91.17:65170] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aRd8AcZqItrYybG86ki4SgAAAcA"]
[Sat Nov 15 02:59:14.388315 2025] [:error] [pid 18513:tid 18532] [client 4.205.91.17:65213] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aRd8Avc94upQFzRWlUn4NwAAAE4"]
[Sat Nov 15 02:59:15.025786 2025] [:error] [pid 45907:tid 45924] [client 4.205.91.17:65275] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aRd8A1AqmYxCpnT9gJGm6AAAAU0"]
[Sat Nov 15 02:59:15.515045 2025] [:error] [pid 18513:tid 18528] [client 4.205.91.17:65236] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aRd8A_c94upQFzRWlUn4PgAAAEo"]
[Sat Nov 15 02:59:16.081945 2025] [:error] [pid 45907:tid 45927] [client 4.205.91.17:64387] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aRd8BFAqmYxCpnT9gJGm7AAAAVA"]
[Sat Nov 15 02:59:16.749669 2025] [:error] [pid 18513:tid 18541] [client 4.205.91.17:65278] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aRd8BPc94upQFzRWlUn4QQAAAFc"]
[Sat Nov 15 02:59:17.317637 2025] [:error] [pid 18513:tid 18518] [client 4.205.91.17:64462] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aRd8Bfc94upQFzRWlUn4RAAAAEA"]
[Sat Nov 15 02:59:17.942171 2025] [:error] [pid 45909:tid 45967] [client 4.205.91.17:63901] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aRd8BcZqItrYybG86ki4UgAAAcI"]
[Sat Nov 15 02:59:18.477581 2025] [:error] [pid 18513:tid 18523] [client 4.205.91.17:64457] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aRd8Bvc94upQFzRWlUn4SwAAAEU"]
[Sat Nov 15 02:59:19.013643 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:64479] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aRd8B8ZqItrYybG86ki4UwAAAc0"]
[Sat Nov 15 02:59:19.578944 2025] [:error] [pid 18513:tid 18541] [client 4.205.91.17:64476] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aRd8B_c94upQFzRWlUn4TgAAAFc"]
[Sat Nov 15 02:59:20.201293 2025] [:error] [pid 45909:tid 45984] [client 4.205.91.17:65220] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aRd8CMZqItrYybG86ki4VAAAAdM"]
[Sat Nov 15 02:59:20.764473 2025] [:error] [pid 45909:tid 45985] [client 4.205.91.17:64497] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aRd8CMZqItrYybG86ki4VgAAAdQ"]
[Sat Nov 15 02:59:21.437877 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:64465] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aRd8CWWG19mWwZX7KauErAAAABU"]
[Sat Nov 15 02:59:21.937720 2025] [:error] [pid 45908:tid 45957] [client 4.205.91.17:65182] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aRd8CWWG19mWwZX7KauErQAAABM"]
[Sat Nov 15 02:59:22.477939 2025] [:error] [pid 45908:tid 45954] [client 4.205.91.17:64487] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aRd8CmWG19mWwZX7KauEsAAAABA"]
[Sat Nov 15 02:59:23.086638 2025] [:error] [pid 45995:tid 46002] [client 4.205.91.17:65258] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aRd8C8fhZrb6EV4SvFvpxAAAAgI"]
[Sat Nov 15 02:59:23.594967 2025] [:error] [pid 45995:tid 46013] [client 4.205.91.17:64455] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aRd8C8fhZrb6EV4SvFvpxwAAAg0"]
[Sat Nov 15 02:59:24.211563 2025] [:error] [pid 45909:tid 45967] [client 4.205.91.17:65194] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aRd8DMZqItrYybG86ki4XwAAAcI"]
[Sat Nov 15 02:59:24.795855 2025] [:error] [pid 45995:tid 46016] [client 4.205.91.17:65254] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aRd8DMfhZrb6EV4SvFvpygAAAhA"]
[Sat Nov 15 02:59:25.325627 2025] [:error] [pid 45909:tid 45976] [client 4.205.91.17:64491] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aRd8DcZqItrYybG86ki4YwAAAcs"]
[Sat Nov 15 02:59:25.967451 2025] [:error] [pid 45909:tid 45986] [client 4.205.91.17:65277] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aRd8DcZqItrYybG86ki4ZgAAAdU"]
[Sat Nov 15 02:59:26.446624 2025] [:error] [pid 18513:tid 18523] [client 4.205.91.17:65190] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aRd8Dvc94upQFzRWlUn4WgAAAEU"]
[Sat Nov 15 02:59:26.954345 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:64482] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aRd8DlAqmYxCpnT9gJGm-gAAAVY"]
[Sat Nov 15 02:59:27.600879 2025] [:error] [pid 18513:tid 18538] [client 4.205.91.17:65260] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aRd8D_c94upQFzRWlUn4XwAAAFQ"]
[Sat Nov 15 02:59:28.060367 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:63940] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ut.php"] [unique_id "aRd8EMZqItrYybG86ki4bQAAAc4"]
[Sat Nov 15 02:59:28.699429 2025] [:error] [pid 45908:tid 45948] [client 4.205.91.17:64467] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ut.php"] [unique_id "aRd8EGWG19mWwZX7KauEtAAAAAo"]
[Sat Nov 15 02:59:29.222799 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:65201] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ut.php"] [unique_id "aRd8EVAqmYxCpnT9gJGm_AAAAUI"]
[Sat Nov 15 02:59:29.723480 2025] [:error] [pid 45909:tid 45987] [client 4.205.91.17:64507] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ut.php"] [unique_id "aRd8EcZqItrYybG86ki4cwAAAdY"]
[Sat Nov 15 02:59:30.192221 2025] [:error] [pid 18513:tid 18541] [client 4.205.91.17:64490] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aRd8Evc94upQFzRWlUn4aQAAAFc"]
[Sat Nov 15 02:59:30.900284 2025] [:error] [pid 18513:tid 18519] [client 4.205.91.17:63941] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aRd8Evc94upQFzRWlUn4bAAAAEE"]
[Sat Nov 15 02:59:31.515475 2025] [:error] [pid 45909:tid 45984] [client 4.205.91.17:65222] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aRd8E8ZqItrYybG86ki4dwAAAdM"]
[Sat Nov 15 02:59:32.034813 2025] [:error] [pid 18513:tid 18532] [client 4.205.91.17:65264] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aRd8FPc94upQFzRWlUn4bwAAAE4"]
[Sat Nov 15 02:59:32.637991 2025] [:error] [pid 45907:tid 45921] [client 4.205.91.17:65212] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRd8FFAqmYxCpnT9gJGm_gAAAUo"]
[Sat Nov 15 02:59:33.071508 2025] [:error] [pid 45907:tid 45929] [client 4.205.91.17:65196] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRd8FVAqmYxCpnT9gJGm_wAAAVI"]
[Sat Nov 15 02:59:33.514419 2025] [:error] [pid 45908:tid 45962] [client 4.205.91.17:65166] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRd8FWWG19mWwZX7KauEtgAAABg"]
[Sat Nov 15 02:59:34.027676 2025] [:error] [pid 45909:tid 45987] [client 4.205.91.17:64458] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aRd8FsZqItrYybG86ki4ggAAAdY"]
[Sat Nov 15 02:59:34.841961 2025] [:error] [pid 45909:tid 45966] [client 4.205.91.17:64391] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thh.php"] [unique_id "aRd8FsZqItrYybG86ki4hAAAAcE"]
[Sat Nov 15 02:59:35.419545 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:65234] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thh.php"] [unique_id "aRd8F2WG19mWwZX7KauEuQAAABU"]
[Sat Nov 15 02:59:35.861743 2025] [:error] [pid 45908:tid 45956] [client 4.205.91.17:64413] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thh.php"] [unique_id "aRd8F2WG19mWwZX7KauEugAAABI"]
[Sat Nov 15 02:59:36.372383 2025] [:error] [pid 45995:tid 46019] [client 4.205.91.17:65160] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thh.php"] [unique_id "aRd8GMfhZrb6EV4SvFvp2gAAAhM"]
[Sat Nov 15 02:59:36.815147 2025] [:error] [pid 45907:tid 45918] [client 4.205.91.17:65168] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "aRd8GFAqmYxCpnT9gJGnCAAAAUc"]
[Sat Nov 15 02:59:37.294591 2025] [:error] [pid 45907:tid 45911] [client 4.205.91.17:65188] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "aRd8GVAqmYxCpnT9gJGnCgAAAUA"]
[Sat Nov 15 02:59:37.877493 2025] [:error] [pid 45995:tid 46021] [client 4.205.91.17:65268] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "aRd8GcfhZrb6EV4SvFvp3AAAAhU"]
[Sat Nov 15 02:59:38.343509 2025] [:error] [pid 18513:tid 18520] [client 4.205.91.17:64508] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "aRd8Gvc94upQFzRWlUn4cgAAAEI"]
[Sat Nov 15 02:59:38.821248 2025] [:error] [pid 18513:tid 18531] [client 4.205.91.17:64460] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aRd8Gvc94upQFzRWlUn4cwAAAE0"]
[Sat Nov 15 02:59:39.252942 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:64485] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aRd8G1AqmYxCpnT9gJGnCwAAAUM"]
[Sat Nov 15 02:59:39.743235 2025] [:error] [pid 45995:tid 46009] [client 4.205.91.17:65261] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aRd8G8fhZrb6EV4SvFvp4QAAAgk"]
[Sat Nov 15 02:59:40.205539 2025] [:error] [pid 45908:tid 45940] [client 4.205.91.17:63916] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aRd8HGWG19mWwZX7KauEwQAAAAI"]
[Sat Nov 15 02:59:40.661156 2025] [:error] [pid 45909:tid 45974] [client 4.205.91.17:65210] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fileas.php"] [unique_id "aRd8HMZqItrYybG86ki4igAAAck"]
[Sat Nov 15 02:59:41.129612 2025] [:error] [pid 45909:tid 45977] [client 4.205.91.17:64488] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fileas.php"] [unique_id "aRd8HcZqItrYybG86ki4jAAAAcw"]
[Sat Nov 15 02:59:41.675367 2025] [:error] [pid 45907:tid 45925] [client 4.205.91.17:63961] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fileas.php"] [unique_id "aRd8HVAqmYxCpnT9gJGnDgAAAU4"]
[Sat Nov 15 02:59:42.216362 2025] [:error] [pid 45908:tid 45956] [client 4.205.91.17:65263] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fileas.php"] [unique_id "aRd8HmWG19mWwZX7KauExgAAABI"]
[Sat Nov 15 02:59:42.735450 2025] [:error] [pid 45908:tid 45952] [client 4.205.91.17:64453] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aRd8HmWG19mWwZX7KauEyQAAAA4"]
[Sat Nov 15 02:59:43.208599 2025] [:error] [pid 45908:tid 45950] [client 4.205.91.17:63938] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aRd8H2WG19mWwZX7KauEywAAAAw"]
[Sat Nov 15 02:59:43.713696 2025] [:error] [pid 45908:tid 45951] [client 4.205.91.17:65235] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aRd8H2WG19mWwZX7KauEzQAAAA0"]
[Sat Nov 15 02:59:44.333511 2025] [:error] [pid 45907:tid 45915] [client 4.205.91.17:63926] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aRd8IFAqmYxCpnT9gJGnDwAAAUQ"]
[Sat Nov 15 02:59:44.837658 2025] [:error] [pid 45907:tid 45924] [client 4.205.91.17:65193] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wfile.php"] [unique_id "aRd8IFAqmYxCpnT9gJGnEAAAAU0"]
[Sat Nov 15 02:59:45.347654 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:65257] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wfile.php"] [unique_id "aRd8IcfhZrb6EV4SvFvp7wAAAgw"]
[Sat Nov 15 02:59:46.252358 2025] [:error] [pid 45908:tid 45955] [client 4.205.91.17:65183] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wfile.php"] [unique_id "aRd8ImWG19mWwZX7KauEzgAAABE"]
[Sat Nov 15 02:59:46.796390 2025] [:error] [pid 18513:tid 18528] [client 4.205.91.17:64448] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wfile.php"] [unique_id "aRd8Ivc94upQFzRWlUn4fgAAAEo"]
[Sat Nov 15 02:59:47.401689 2025] [:error] [pid 18513:tid 18539] [client 4.205.91.17:63949] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aRd8I_c94upQFzRWlUn4ggAAAFU"]
[Sat Nov 15 02:59:47.893418 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:64401] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aRd8I8fhZrb6EV4SvFvp8QAAAhg"]
[Sat Nov 15 02:59:48.465177 2025] [:error] [pid 18513:tid 18542] [client 4.205.91.17:64423] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aRd8JPc94upQFzRWlUn4iQAAAFg"]
[Sat Nov 15 02:59:48.927508 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:65156] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aRd8JFAqmYxCpnT9gJGnFgAAAUM"]
[Sat Nov 15 02:59:49.569762 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:64427] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aRd8JcfhZrb6EV4SvFvp8wAAAgo"]
[Sat Nov 15 02:59:50.020651 2025] [:error] [pid 18513:tid 18541] [client 4.205.91.17:65273] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aRd8Jvc94upQFzRWlUn4jQAAAFc"]
[Sat Nov 15 02:59:50.540131 2025] [:error] [pid 45907:tid 45919] [client 4.205.91.17:65172] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aRd8JlAqmYxCpnT9gJGnHQAAAUg"]
[Sat Nov 15 02:59:51.187001 2025] [:error] [pid 45909:tid 45975] [client 4.205.91.17:64474] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aRd8J8ZqItrYybG86ki4mwAAAco"]
[Sat Nov 15 02:59:52.008084 2025] [:error] [pid 45907:tid 45920] [client 4.205.91.17:64495] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aRd8KFAqmYxCpnT9gJGnIQAAAUk"]
[Sat Nov 15 02:59:52.564277 2025] [:error] [pid 18513:tid 18533] [client 4.205.91.17:64389] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aRd8KPc94upQFzRWlUn4lgAAAE8"]
[Sat Nov 15 02:59:53.143481 2025] [:error] [pid 45909:tid 45970] [client 4.205.91.17:65187] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aRd8KcZqItrYybG86ki4nQAAAcU"]
[Sat Nov 15 02:59:53.677455 2025] [:error] [pid 45995:tid 46020] [client 4.205.91.17:65232] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aRd8KcfhZrb6EV4SvFvqAAAAAhQ"]
[Sat Nov 15 02:59:54.280413 2025] [:error] [pid 18513:tid 18534] [client 4.205.91.17:65199] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aRd8Kvc94upQFzRWlUn4mwAAAFA"]
[Sat Nov 15 02:59:54.813302 2025] [:error] [pid 45995:tid 46000] [client 4.205.91.17:65269] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aRd8KsfhZrb6EV4SvFvqAgAAAgA"]
[Sat Nov 15 02:59:55.453091 2025] [:error] [pid 18513:tid 18537] [client 4.205.91.17:63979] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aRd8K_c94upQFzRWlUn4oAAAAFM"]
[Sat Nov 15 02:59:56.157900 2025] [:error] [pid 45909:tid 45973] [client 4.205.91.17:65178] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aRd8LMZqItrYybG86ki4qAAAAcg"]
[Sat Nov 15 02:59:56.631786 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:64469] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "aRd8LMfhZrb6EV4SvFvqCgAAAhg"]
[Sat Nov 15 02:59:57.110323 2025] [:error] [pid 45995:tid 46016] [client 4.205.91.17:65167] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "aRd8LcfhZrb6EV4SvFvqDQAAAhA"]
[Sat Nov 15 02:59:57.617204 2025] [:error] [pid 45995:tid 46014] [client 4.205.91.17:65256] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "aRd8LcfhZrb6EV4SvFvqEQAAAg4"]
[Sat Nov 15 02:59:58.098278 2025] [:error] [pid 45907:tid 45925] [client 4.205.91.17:63973] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "aRd8LlAqmYxCpnT9gJGnKQAAAU4"]
[Sat Nov 15 02:59:58.670507 2025] [:error] [pid 45908:tid 45947] [client 4.205.91.17:63963] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wb.php"] [unique_id "aRd8LmWG19mWwZX7KauE3QAAAAk"]
[Sat Nov 15 02:59:59.146713 2025] [:error] [pid 45995:tid 46009] [client 4.205.91.17:64411] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wb.php"] [unique_id "aRd8L8fhZrb6EV4SvFvqFgAAAgk"]
[Sat Nov 15 02:59:59.713786 2025] [:error] [pid 45995:tid 46020] [client 4.205.91.17:65223] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wb.php"] [unique_id "aRd8L8fhZrb6EV4SvFvqFwAAAhQ"]
[Sat Nov 15 03:00:00.291955 2025] [:error] [pid 45909:tid 45980] [client 4.205.91.17:65209] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wb.php"] [unique_id "aRd8MMZqItrYybG86ki4rwAAAc8"]
[Sat Nov 15 03:00:00.771139 2025] [:error] [pid 45908:tid 45956] [client 4.205.91.17:64422] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aRd8MGWG19mWwZX7KauE4AAAABI"]
[Sat Nov 15 03:00:01.328403 2025] [:error] [pid 45907:tid 45920] [client 4.205.91.17:63952] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aRd8MVAqmYxCpnT9gJGnMAAAAUk"]
[Sat Nov 15 03:00:01.930751 2025] [:error] [pid 45995:tid 46015] [client 4.205.91.17:64454] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aRd8McfhZrb6EV4SvFvqGwAAAg8"]
[Sat Nov 15 03:00:02.477340 2025] [:error] [pid 45995:tid 46006] [client 4.205.91.17:65262] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aRd8MsfhZrb6EV4SvFvqHQAAAgY"]
[Sat Nov 15 03:00:02.992004 2025] [:error] [pid 45909:tid 45974] [client 4.205.91.17:65224] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aRd8MsZqItrYybG86ki4tAAAAck"]
[Sat Nov 15 03:00:03.553344 2025] [:error] [pid 45908:tid 45961] [client 4.205.91.17:65251] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aRd8M2WG19mWwZX7KauE5AAAABc"]
[Sat Nov 15 03:00:04.065961 2025] [:error] [pid 45909:tid 45968] [client 4.205.91.17:64426] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aRd8NMZqItrYybG86ki4twAAAcM"]
[Sat Nov 15 03:00:04.557620 2025] [:error] [pid 45907:tid 45911] [client 4.205.91.17:65174] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aRd8NFAqmYxCpnT9gJGnMwAAAUA"]
[Sat Nov 15 03:00:05.146029 2025] [:error] [pid 45908:tid 45948] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Nov 15 03:00:05.378509 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Nov 15 03:00:05.600435 2025] [:error] [pid 45908:tid 45941] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Nov 15 03:00:05.834455 2025] [:error] [pid 45908:tid 45962] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 15 03:00:06.044554 2025] [:error] [pid 45908:tid 45955] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Nov 15 03:00:06.254455 2025] [:error] [pid 45908:tid 45953] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Nov 15 03:00:06.482391 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Nov 15 03:00:06.702671 2025] [:error] [pid 45908:tid 45945] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Sat Nov 15 03:00:06.929051 2025] [:error] [pid 45908:tid 45952] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sat Nov 15 03:00:07.313604 2025] [:error] [pid 45908:tid 45957] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Sat Nov 15 03:00:07.577112 2025] [:error] [pid 45908:tid 45949] [client 4.205.91.17:65163] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Sat Nov 15 03:00:07.848307 2025] [:error] [pid 45908:tid 45951] [client 4.205.91.17:65163] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aRd8N2WG19mWwZX7KauE9AAAAA0"]
[Sat Nov 15 03:00:08.582850 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:65249] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aRd8OMfhZrb6EV4SvFvqJgAAAgo"]
[Sat Nov 15 03:00:09.043480 2025] [:error] [pid 18513:tid 18521] [client 4.205.91.17:64451] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aRd8Ofc94upQFzRWlUn4wwAAAEM"]
[Sat Nov 15 03:00:09.742631 2025] [:error] [pid 45995:tid 46019] [client 4.205.91.17:64414] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aRd8OcfhZrb6EV4SvFvqKwAAAhM"]
[Sat Nov 15 03:00:10.350622 2025] [:error] [pid 45995:tid 46007] [client 4.205.91.17:65154] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "aRd8OsfhZrb6EV4SvFvqLAAAAgc"]
[Sat Nov 15 03:00:10.846780 2025] [:error] [pid 45907:tid 45922] [client 4.205.91.17:64496] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "aRd8OlAqmYxCpnT9gJGnPQAAAUs"]
[Sat Nov 15 03:00:11.352530 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:64443] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "aRd8O8ZqItrYybG86ki4vgAAAc0"]
[Sat Nov 15 03:00:11.882225 2025] [:error] [pid 18513:tid 18534] [client 4.205.91.17:65221] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "aRd8O_c94upQFzRWlUn4ywAAAFA"]
[Sat Nov 15 03:00:12.493873 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:64472] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aRd8PFAqmYxCpnT9gJGnPwAAAUY"]
[Sat Nov 15 03:00:12.992683 2025] [:error] [pid 18513:tid 18520] [client 4.205.91.17:65175] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aRd8PPc94upQFzRWlUn4zgAAAEI"]
[Sat Nov 15 03:00:13.511884 2025] [:error] [pid 45995:tid 46004] [client 4.205.91.17:65179] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aRd8PcfhZrb6EV4SvFvqMwAAAgQ"]
[Sat Nov 15 03:00:14.130826 2025] [:error] [pid 45995:tid 46011] [client 4.205.91.17:64503] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aRd8PsfhZrb6EV4SvFvqNAAAAgs"]
[Sat Nov 15 03:00:14.851494 2025] [:error] [pid 45907:tid 45912] [client 4.205.91.17:63936] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aRd8PlAqmYxCpnT9gJGnQwAAAUE"]
[Sat Nov 15 03:00:15.316215 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:65253] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aRd8P1AqmYxCpnT9gJGnRAAAAVc"]
[Sat Nov 15 03:00:15.766752 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:64406] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aRd8P1AqmYxCpnT9gJGnRQAAAVY"]
[Sat Nov 15 03:00:16.239326 2025] [:error] [pid 45995:tid 46022] [client 4.205.91.17:63992] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aRd8QMfhZrb6EV4SvFvqOAAAAhY"]
[Sat Nov 15 03:00:16.807559 2025] [:error] [pid 45909:tid 45970] [client 4.205.91.17:65195] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aRd8QMZqItrYybG86ki4wwAAAcU"]
[Sat Nov 15 03:00:17.349677 2025] [:error] [pid 45909:tid 45982] [client 4.205.91.17:65228] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aRd8QcZqItrYybG86ki4xAAAAdE"]
[Sat Nov 15 03:00:17.802815 2025] [:error] [pid 45908:tid 45946] [client 4.205.91.17:65219] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aRd8QWWG19mWwZX7KauE_AAAAAg"]
[Sat Nov 15 03:00:18.341444 2025] [:error] [pid 18513:tid 18521] [client 4.205.91.17:65171] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aRd8Qvc94upQFzRWlUn43AAAAEM"]
[Sat Nov 15 03:00:18.820243 2025] [:error] [pid 45995:tid 46003] [client 4.205.91.17:63883] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "aRd8QsfhZrb6EV4SvFvqPwAAAgM"]
[Sat Nov 15 03:00:19.292193 2025] [:error] [pid 18513:tid 18542] [client 4.205.91.17:63881] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "aRd8Q_c94upQFzRWlUn43gAAAFg"]
[Sat Nov 15 03:00:19.750087 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:63946] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "aRd8Q8ZqItrYybG86ki4ywAAAc4"]
[Sat Nov 15 03:00:20.241808 2025] [:error] [pid 45909:tid 45975] [client 4.205.91.17:65225] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "aRd8RMZqItrYybG86ki4zwAAAco"]
[Sat Nov 15 03:00:20.822711 2025] [:error] [pid 45995:tid 46017] [client 4.205.91.17:65265] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aRd8RMfhZrb6EV4SvFvqQgAAAhE"]
[Sat Nov 15 03:00:21.265514 2025] [:error] [pid 45907:tid 45913] [client 4.205.91.17:64499] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aRd8RVAqmYxCpnT9gJGnSAAAAUI"]
[Sat Nov 15 03:00:21.720811 2025] [:error] [pid 45908:tid 45940] [client 4.205.91.17:65233] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aRd8RWWG19mWwZX7KauFAQAAAAI"]
[Sat Nov 15 03:00:22.176031 2025] [:error] [pid 45995:tid 46022] [client 4.205.91.17:64418] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aRd8RsfhZrb6EV4SvFvqQwAAAhY"]
[Sat Nov 15 03:00:22.691669 2025] [:error] [pid 45995:tid 46013] [client 4.205.91.17:64484] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aRd8RsfhZrb6EV4SvFvqRQAAAg0"]
[Sat Nov 15 03:00:23.230619 2025] [:error] [pid 45995:tid 46014] [client 4.205.91.17:64492] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aRd8R8fhZrb6EV4SvFvqRgAAAg4"]
[Sat Nov 15 03:00:23.703687 2025] [:error] [pid 45907:tid 45917] [client 4.205.91.17:65192] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aRd8R1AqmYxCpnT9gJGnSgAAAUY"]
[Sat Nov 15 03:00:24.131184 2025] [:error] [pid 18513:tid 18529] [client 4.205.91.17:63995] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aRd8SPc94upQFzRWlUn45wAAAEs"]
[Sat Nov 15 03:00:24.648783 2025] [:error] [pid 45907:tid 45912] [client 4.205.91.17:64412] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aRd8SFAqmYxCpnT9gJGnTwAAAUE"]
[Sat Nov 15 03:00:25.081870 2025] [:error] [pid 45907:tid 45915] [client 4.205.91.17:64397] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aRd8SVAqmYxCpnT9gJGnUQAAAUQ"]
[Sat Nov 15 03:00:25.541413 2025] [:error] [pid 18513:tid 18519] [client 4.205.91.17:64471] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aRd8Sfc94upQFzRWlUn46gAAAEE"]
[Sat Nov 15 03:00:25.995488 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:63192] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aRd8SVAqmYxCpnT9gJGnVAAAAVY"]
[Sat Nov 15 03:00:26.440214 2025] [:error] [pid 18513:tid 18532] [client 4.205.91.17:63934] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/enclas.php"] [unique_id "aRd8Svc94upQFzRWlUn47wAAAE4"]
[Sat Nov 15 03:00:26.899681 2025] [:error] [pid 18513:tid 18529] [client 4.205.91.17:65250] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/enclas.php"] [unique_id "aRd8Svc94upQFzRWlUn48gAAAEs"]
[Sat Nov 15 03:00:27.325415 2025] [:error] [pid 45995:tid 46004] [client 4.205.91.17:65179] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/enclas.php"] [unique_id "aRd8S8fhZrb6EV4SvFvqTgAAAgQ"]
[Sat Nov 15 03:00:27.759307 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:64410] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/enclas.php"] [unique_id "aRd8S8fhZrb6EV4SvFvqUAAAAgU"]
[Sat Nov 15 03:00:28.239312 2025] [:error] [pid 45995:tid 46021] [client 4.205.91.17:65216] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8TMfhZrb6EV4SvFvqUQAAAhU"]
[Sat Nov 15 03:00:28.738307 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:63117] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8TMfhZrb6EV4SvFvqVAAAAhg"]
[Sat Nov 15 03:00:29.200001 2025] [:error] [pid 45907:tid 45921] [client 4.205.91.17:64493] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8TVAqmYxCpnT9gJGnVwAAAUo"]
[Sat Nov 15 03:00:29.695260 2025] [:error] [pid 45907:tid 45930] [client 4.205.91.17:64504] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8TVAqmYxCpnT9gJGnWQAAAVM"]
[Sat Nov 15 03:00:30.194164 2025] [:error] [pid 45907:tid 45932] [client 4.205.91.17:64405] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aRd8TlAqmYxCpnT9gJGnWwAAAVU"]
[Sat Nov 15 03:00:30.632598 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:65237] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aRd8TsfhZrb6EV4SvFvqVwAAAgw"]
[Sat Nov 15 03:00:31.178427 2025] [:error] [pid 45909:tid 45972] [client 4.205.91.17:65205] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aRd8T8ZqItrYybG86ki42gAAAcc"]
[Sat Nov 15 03:00:31.888329 2025] [:error] [pid 45907:tid 45931] [client 4.205.91.17:63956] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aRd8T1AqmYxCpnT9gJGnXwAAAVQ"]
[Sat Nov 15 03:00:32.386242 2025] [:error] [pid 45909:tid 45968] [client 4.205.91.17:63919] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8UMZqItrYybG86ki42wAAAcM"]
[Sat Nov 15 03:00:32.916922 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:64501] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8UFAqmYxCpnT9gJGnYgAAAUM"]
[Sat Nov 15 03:00:33.407859 2025] [:error] [pid 45907:tid 45924] [client 4.205.91.17:64449] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8UVAqmYxCpnT9gJGnZgAAAU0"]
[Sat Nov 15 03:00:33.906528 2025] [:error] [pid 18513:tid 18518] [client 4.205.91.17:63932] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8Ufc94upQFzRWlUn5BQAAAEA"]
[Sat Nov 15 03:00:34.450871 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:63162] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/image.php"] [unique_id "aRd8UlAqmYxCpnT9gJGnagAAAVc"]
[Sat Nov 15 03:00:35.023541 2025] [:error] [pid 45908:tid 45955] [client 4.205.91.17:65161] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/image.php"] [unique_id "aRd8U2WG19mWwZX7KauFCgAAABE"]
[Sat Nov 15 03:00:35.573063 2025] [:error] [pid 18513:tid 18520] [client 4.205.91.17:65227] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/image.php"] [unique_id "aRd8U_c94upQFzRWlUn5CgAAAEI"]
[Sat Nov 15 03:00:36.103811 2025] [:error] [pid 45995:tid 46003] [client 4.205.91.17:63886] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/image.php"] [unique_id "aRd8VMfhZrb6EV4SvFvqYQAAAgM"]
[Sat Nov 15 03:00:36.666513 2025] [:error] [pid 45908:tid 45945] [client 4.205.91.17:63893] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aRd8VGWG19mWwZX7KauFDwAAAAc"]
[Sat Nov 15 03:00:37.206811 2025] [:error] [pid 45907:tid 45915] [client 4.205.91.17:63982] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aRd8VVAqmYxCpnT9gJGnbwAAAUQ"]
[Sat Nov 15 03:00:37.703024 2025] [:error] [pid 45908:tid 45961] [client 4.205.91.17:64436] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aRd8VWWG19mWwZX7KauFEQAAABc"]
[Sat Nov 15 03:00:38.241785 2025] [:error] [pid 45908:tid 45958] [client 4.205.91.17:64506] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aRd8VmWG19mWwZX7KauFEgAAABQ"]
[Sat Nov 15 03:00:38.828063 2025] [:error] [pid 45908:tid 45950] [client 4.205.91.17:64390] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aRd8VmWG19mWwZX7KauFFAAAAAw"]
[Sat Nov 15 03:00:39.342514 2025] [:error] [pid 18513:tid 18518] [client 4.205.91.17:64444] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aRd8V_c94upQFzRWlUn5DgAAAEA"]
[Sat Nov 15 03:00:39.919337 2025] [:error] [pid 45908:tid 45955] [client 4.205.91.17:65177] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aRd8V2WG19mWwZX7KauFGAAAABE"]
[Sat Nov 15 03:00:40.441782 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:63925] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aRd8WFAqmYxCpnT9gJGndgAAAVc"]
[Sat Nov 15 03:00:41.188480 2025] [:error] [pid 45909:tid 45984] [client 4.205.91.17:64445] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aRd8WcZqItrYybG86ki45QAAAdM"]
[Sat Nov 15 03:00:41.798624 2025] [:error] [pid 45907:tid 45922] [client 4.205.91.17:65245] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aRd8WVAqmYxCpnT9gJGnegAAAUs"]
[Sat Nov 15 03:00:42.273007 2025] [:error] [pid 45908:tid 45949] [client 4.205.91.17:64450] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aRd8WmWG19mWwZX7KauFIgAAAAs"]
[Sat Nov 15 03:00:42.854367 2025] [:error] [pid 45909:tid 45976] [client 4.205.91.17:65175] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aRd8WsZqItrYybG86ki45gAAAcs"]
[Sat Nov 15 03:00:43.439800 2025] [:error] [pid 45909:tid 45965] [client 4.205.91.17:63874] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aRd8W8ZqItrYybG86ki45wAAAcA"]
[Sat Nov 15 03:00:44.020692 2025] [:error] [pid 45995:tid 46017] [client 4.205.91.17:63962] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aRd8XMfhZrb6EV4SvFvqZwAAAhE"]
[Sat Nov 15 03:00:44.545235 2025] [:error] [pid 18513:tid 18534] [client 4.205.91.17:63965] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aRd8XPc94upQFzRWlUn5GAAAAFA"]
[Sat Nov 15 03:00:45.045484 2025] [:error] [pid 45995:tid 46003] [client 4.205.91.17:65238] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aRd8XcfhZrb6EV4SvFvqaAAAAgM"]
[Sat Nov 15 03:00:45.714960 2025] [:error] [pid 45907:tid 45920] [client 4.205.91.17:64475] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aRd8XVAqmYxCpnT9gJGngQAAAUk"]
[Sat Nov 15 03:00:46.235972 2025] [:error] [pid 45909:tid 45974] [client 4.205.91.17:63892] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aRd8XsZqItrYybG86ki47wAAAck"]
[Sat Nov 15 03:00:46.910659 2025] [:error] [pid 45995:tid 46013] [client 4.205.91.17:63180] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aRd8XsfhZrb6EV4SvFvqbQAAAg0"]
[Sat Nov 15 03:00:47.468094 2025] [:error] [pid 45995:tid 46021] [client 4.205.91.17:64473] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aRd8X8fhZrb6EV4SvFvqbwAAAhU"]
[Sat Nov 15 03:00:47.965628 2025] [:error] [pid 45909:tid 45977] [client 4.205.91.17:63976] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aRd8X8ZqItrYybG86ki49AAAAcw"]
[Sat Nov 15 03:00:48.692473 2025] [:error] [pid 45907:tid 45926] [client 4.205.91.17:65244] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aRd8YFAqmYxCpnT9gJGnhQAAAU8"]
[Sat Nov 15 03:00:49.326009 2025] [:error] [pid 45909:tid 45988] [client 4.205.91.17:65158] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aRd8YcZqItrYybG86ki4-QAAAdc"]
[Sat Nov 15 03:00:49.856321 2025] [:error] [pid 45907:tid 45928] [client 4.205.91.17:65173] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aRd8YVAqmYxCpnT9gJGnhwAAAVE"]
[Sat Nov 15 03:00:50.319911 2025] [:error] [pid 45907:tid 45934] [client 4.205.91.17:65243] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aRd8YlAqmYxCpnT9gJGniAAAAVc"]
[Sat Nov 15 03:00:50.784303 2025] [:error] [pid 18513:tid 18523] [client 4.205.91.17:65180] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aRd8Yvc94upQFzRWlUn5IgAAAEU"]
[Sat Nov 15 03:00:51.386367 2025] [:error] [pid 45907:tid 45920] [client 4.205.91.17:64430] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aRd8Y1AqmYxCpnT9gJGniwAAAUk"]
[Sat Nov 15 03:00:51.873334 2025] [:error] [pid 45907:tid 45933] [client 4.205.91.17:65200] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aRd8Y1AqmYxCpnT9gJGnjAAAAVY"]
[Sat Nov 15 03:00:52.413980 2025] [:error] [pid 45995:tid 46007] [client 4.205.91.17:64478] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aRd8ZMfhZrb6EV4SvFvqgAAAAgc"]
[Sat Nov 15 03:00:52.894707 2025] [:error] [pid 18513:tid 18526] [client 4.205.91.17:63880] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aRd8ZPc94upQFzRWlUn5JgAAAEg"]
[Sat Nov 15 03:00:53.383055 2025] [:error] [pid 18513:tid 18535] [client 4.205.91.17:63990] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aRd8Zfc94upQFzRWlUn5KAAAAFE"]
[Sat Nov 15 03:00:53.886448 2025] [:error] [pid 45909:tid 45965] [client 4.205.91.17:65229] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aRd8ZcZqItrYybG86ki5AAAAAcA"]
[Sat Nov 15 03:00:54.403413 2025] [:error] [pid 18513:tid 18536] [client 4.205.91.17:64419] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aRd8Zvc94upQFzRWlUn5KgAAAFI"]
[Sat Nov 15 03:00:54.931825 2025] [:error] [pid 18513:tid 18523] [client 4.205.91.17:64403] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aRd8Zvc94upQFzRWlUn5LgAAAEU"]
[Sat Nov 15 03:00:55.407609 2025] [:error] [pid 18513:tid 18518] [client 4.205.91.17:64494] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aRd8Z_c94upQFzRWlUn5MAAAAEA"]
[Sat Nov 15 03:00:55.882363 2025] [:error] [pid 45909:tid 45968] [client 4.205.91.17:64510] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aRd8Z8ZqItrYybG86ki5AgAAAcM"]
[Sat Nov 15 03:00:56.365323 2025] [:error] [pid 45995:tid 46013] [client 4.205.91.17:64435] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filer.php"] [unique_id "aRd8aMfhZrb6EV4SvFvqhwAAAg0"]
[Sat Nov 15 03:00:56.779915 2025] [:error] [pid 45908:tid 45938] [client 4.205.91.17:65203] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filer.php"] [unique_id "aRd8aGWG19mWwZX7KauFLAAAAAA"]
[Sat Nov 15 03:00:57.254170 2025] [:error] [pid 45908:tid 45950] [client 4.205.91.17:64456] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filer.php"] [unique_id "aRd8aWWG19mWwZX7KauFLQAAAAw"]
[Sat Nov 15 03:00:57.773927 2025] [:error] [pid 18513:tid 18519] [client 4.205.91.17:63987] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filer.php"] [unique_id "aRd8afc94upQFzRWlUn5NQAAAEE"]
[Sat Nov 15 03:00:58.263774 2025] [:error] [pid 18513:tid 18521] [client 4.205.91.17:64466] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aRd8avc94upQFzRWlUn5NgAAAEM"]
[Sat Nov 15 03:00:58.703200 2025] [:error] [pid 45995:tid 46021] [client 4.205.91.17:65186] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aRd8asfhZrb6EV4SvFvqkwAAAhU"]
[Sat Nov 15 03:00:59.220899 2025] [:error] [pid 18513:tid 18535] [client 4.205.91.17:65165] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aRd8a_c94upQFzRWlUn5OQAAAFE"]
[Sat Nov 15 03:00:59.705190 2025] [:error] [pid 45908:tid 45949] [client 4.205.91.17:64388] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aRd8a2WG19mWwZX7KauFMQAAAAs"]
[Sat Nov 15 03:01:00.167744 2025] [:error] [pid 18513:tid 18536] [client 4.205.91.17:64428] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aRd8bPc94upQFzRWlUn5OgAAAFI"]
[Sat Nov 15 03:01:00.804263 2025] [:error] [pid 45909:tid 45985] [client 4.205.91.17:65198] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aRd8bMZqItrYybG86ki5CQAAAdQ"]
[Sat Nov 15 03:01:01.307632 2025] [:error] [pid 45907:tid 45923] [client 4.205.91.17:63873] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aRd8bVAqmYxCpnT9gJGnkwAAAUw"]
[Sat Nov 15 03:01:01.847872 2025] [:error] [pid 45908:tid 45939] [client 4.205.91.17:63969] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aRd8bWWG19mWwZX7KauFMgAAAAE"]
[Sat Nov 15 03:01:02.320520 2025] [:error] [pid 45909:tid 45966] [client 4.205.91.17:64446] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aRd8bsZqItrYybG86ki5DAAAAcE"]
[Sat Nov 15 03:01:02.807483 2025] [:error] [pid 45995:tid 46022] [client 4.205.91.17:64394] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aRd8bsfhZrb6EV4SvFvqmgAAAhY"]
[Sat Nov 15 03:01:03.348905 2025] [:error] [pid 18513:tid 18521] [client 4.205.91.17:65208] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aRd8b_c94upQFzRWlUn5QAAAAEM"]
[Sat Nov 15 03:01:03.861397 2025] [:error] [pid 45908:tid 45958] [client 4.205.91.17:64409] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aRd8b2WG19mWwZX7KauFOAAAABQ"]
[Sat Nov 15 03:01:04.401200 2025] [:error] [pid 45909:tid 45980] [client 4.205.91.17:65244] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aRd8cMZqItrYybG86ki5DQAAAc8"]
[Sat Nov 15 03:01:04.877982 2025] [:error] [pid 45995:tid 46011] [client 4.205.91.17:63882] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aRd8cMfhZrb6EV4SvFvqnQAAAgs"]
[Sat Nov 15 03:01:05.363225 2025] [:error] [pid 45909:tid 45976] [client 4.205.91.17:63894] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aRd8ccZqItrYybG86ki5DgAAAcs"]
[Sat Nov 15 03:01:05.846600 2025] [:error] [pid 45909:tid 45969] [client 4.205.91.17:63964] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aRd8ccZqItrYybG86ki5DwAAAcQ"]
[Sat Nov 15 03:01:06.295389 2025] [:error] [pid 18513:tid 18539] [client 4.205.91.17:63105] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aRd8cvc94upQFzRWlUn5SQAAAFU"]
[Sat Nov 15 03:01:06.757307 2025] [:error] [pid 18513:tid 18529] [client 4.205.91.17:64498] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aRd8cvc94upQFzRWlUn5TAAAAEs"]
[Sat Nov 15 03:01:07.246773 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Nov 15 03:01:07.456332 2025] [:error] [pid 45908:tid 45941] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/he.php
[Sat Nov 15 03:01:07.681250 2025] [:error] [pid 45908:tid 45940] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/aves.php
[Sat Nov 15 03:01:07.891977 2025] [:error] [pid 45908:tid 45955] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Nov 15 03:01:08.110211 2025] [:error] [pid 45908:tid 45947] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/gorila.php
[Sat Nov 15 03:01:08.321804 2025] [:error] [pid 45908:tid 45958] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/vanta.php
[Sat Nov 15 03:01:08.534158 2025] [:error] [pid 45908:tid 45951] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/sh3ll.php
[Sat Nov 15 03:01:08.763644 2025] [:error] [pid 45908:tid 45957] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Sat Nov 15 03:01:08.975248 2025] [:error] [pid 45908:tid 45950] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/filesss.php
[Sat Nov 15 03:01:09.228850 2025] [:error] [pid 45908:tid 45953] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aaa.php
[Sat Nov 15 03:01:09.439193 2025] [:error] [pid 45908:tid 45956] [client 4.205.91.17:63971] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Nov 15 03:01:09.650859 2025] [:error] [pid 45908:tid 45954] [client 4.205.91.17:63971] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8dWWG19mWwZX7KauFTAAAABA"]
[Sat Nov 15 03:01:10.133243 2025] [:error] [pid 45995:tid 46006] [client 4.205.91.17:63947] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8dsfhZrb6EV4SvFvqqAAAAgY"]
[Sat Nov 15 03:01:10.570441 2025] [:error] [pid 18513:tid 18535] [client 4.205.91.17:62676] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8dvc94upQFzRWlUn5VgAAAFE"]
[Sat Nov 15 03:01:11.006708 2025] [:error] [pid 18513:tid 18541] [client 4.205.91.17:63152] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aRd8d_c94upQFzRWlUn5WAAAAFc"]
[Sat Nov 15 03:01:11.581872 2025] [:error] [pid 18513:tid 18542] [client 4.205.91.17:65267] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8d_c94upQFzRWlUn5WwAAAFg"]
[Sat Nov 15 03:01:12.065977 2025] [:error] [pid 18513:tid 18535] [client 4.205.91.17:65204] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8ePc94upQFzRWlUn5XwAAAFE"]
[Sat Nov 15 03:01:12.583478 2025] [:error] [pid 18513:tid 18542] [client 4.205.91.17:63895] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8ePc94upQFzRWlUn5ZAAAAFg"]
[Sat Nov 15 03:01:13.033207 2025] [:error] [pid 45995:tid 46022] [client 4.205.91.17:63970] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aRd8ecfhZrb6EV4SvFvqrQAAAhY"]
[Sat Nov 15 03:01:13.509879 2025] [:error] [pid 45909:tid 45982] [client 4.205.91.17:63953] [client 4.205.91.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aRd8ecZqItrYybG86ki5FAAAAdE"]
[Sat Nov 15 03:01:13.969932 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:63216] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aRd8ecfhZrb6EV4SvFvqsAAAAgo"]
[Sat Nov 15 03:01:14.406768 2025] [:error] [pid 45907:tid 45914] [client 4.205.91.17:63112] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aRd8elAqmYxCpnT9gJGnpwAAAUM"]
[Sat Nov 15 03:01:14.936853 2025] [:error] [pid 45995:tid 46017] [client 4.205.91.17:63966] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aRd8esfhZrb6EV4SvFvqtQAAAhE"]
[Sat Nov 15 03:01:15.535963 2025] [:error] [pid 45995:tid 46018] [client 4.205.91.17:63191] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aRd8e8fhZrb6EV4SvFvqtgAAAhI"]
[Sat Nov 15 03:01:16.085798 2025] [:error] [pid 45995:tid 46000] [client 4.205.91.17:64417] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aRd8fMfhZrb6EV4SvFvquAAAAgA"]
[Sat Nov 15 03:01:16.632538 2025] [:error] [pid 45995:tid 46005] [client 4.205.91.17:65202] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aRd8fMfhZrb6EV4SvFvquwAAAgU"]
[Sat Nov 15 03:01:17.122830 2025] [:error] [pid 18513:tid 18519] [client 4.205.91.17:63989] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aRd8ffc94upQFzRWlUn5cQAAAEE"]
[Sat Nov 15 03:01:17.642503 2025] [:error] [pid 45907:tid 45921] [client 4.205.91.17:63881] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aRd8fVAqmYxCpnT9gJGnqgAAAUo"]
[Sat Nov 15 03:01:18.122724 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:65218] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aRd8fsZqItrYybG86ki5HAAAAc4"]
[Sat Nov 15 03:01:18.665264 2025] [:error] [pid 45909:tid 45988] [client 4.205.91.17:63187] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aRd8fsZqItrYybG86ki5HQAAAdc"]
[Sat Nov 15 03:01:19.146994 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:64442] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aRd8f8fhZrb6EV4SvFvqwAAAAgw"]
[Sat Nov 15 03:01:19.803378 2025] [:error] [pid 45909:tid 45989] [client 4.205.91.17:65176] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aRd8f8ZqItrYybG86ki5IQAAAdg"]
[Sat Nov 15 03:01:20.226463 2025] [:error] [pid 45909:tid 45984] [client 4.205.91.17:63986] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aRd8gMZqItrYybG86ki5JAAAAdM"]
[Sat Nov 15 03:01:20.666922 2025] [:error] [pid 45907:tid 45931] [client 4.205.91.17:63996] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aRd8gFAqmYxCpnT9gJGnrgAAAVQ"]
[Sat Nov 15 03:01:21.151640 2025] [:error] [pid 45907:tid 45912] [client 4.205.91.17:63981] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aRd8gVAqmYxCpnT9gJGnsAAAAUE"]
[Sat Nov 15 03:01:21.590429 2025] [:error] [pid 45907:tid 45918] [client 4.205.91.17:63132] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aRd8gVAqmYxCpnT9gJGnsQAAAUc"]
[Sat Nov 15 03:01:22.132370 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:65184] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aRd8gsfhZrb6EV4SvFvqyQAAAgw"]
[Sat Nov 15 03:01:22.607485 2025] [:error] [pid 45907:tid 45916] [client 4.205.91.17:63985] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aRd8glAqmYxCpnT9gJGntgAAAUU"]
[Sat Nov 15 03:01:23.037281 2025] [:error] [pid 45908:tid 45960] [client 4.205.91.17:64502] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aRd8g2WG19mWwZX7KauFTQAAABY"]
[Sat Nov 15 03:01:23.467586 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:65191] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aRd8g2WG19mWwZX7KauFTgAAAAU"]
[Sat Nov 15 03:01:23.905953 2025] [:error] [pid 45909:tid 45967] [client 4.205.91.17:63223] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aRd8g8ZqItrYybG86ki5KAAAAcI"]
[Sat Nov 15 03:01:24.397983 2025] [:error] [pid 45909:tid 45978] [client 4.205.91.17:63175] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aRd8hMZqItrYybG86ki5KgAAAc0"]
[Sat Nov 15 03:01:24.954658 2025] [:error] [pid 45909:tid 45975] [client 4.205.91.17:65239] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aRd8hMZqItrYybG86ki5LAAAAco"]
[Sat Nov 15 03:01:25.372223 2025] [:error] [pid 45995:tid 46010] [client 4.205.91.17:65242] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aRd8hcfhZrb6EV4SvFvqzQAAAgo"]
[Sat Nov 15 03:01:25.878864 2025] [:error] [pid 45908:tid 45952] [client 4.205.91.17:64480] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aRd8hWWG19mWwZX7KauFUwAAAA4"]
[Sat Nov 15 03:01:26.333482 2025] [:error] [pid 45908:tid 45954] [client 4.205.91.17:63111] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aRd8hmWG19mWwZX7KauFVQAAABA"]
[Sat Nov 15 03:01:26.820051 2025] [:error] [pid 45995:tid 46008] [client 4.205.91.17:63922] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aRd8hsfhZrb6EV4SvFvq0QAAAgg"]
[Sat Nov 15 03:01:27.269787 2025] [:error] [pid 18513:tid 18536] [client 4.205.91.17:64509] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aRd8h_c94upQFzRWlUn5ggAAAFI"]
[Sat Nov 15 03:01:27.813152 2025] [:error] [pid 18513:tid 18521] [client 4.205.91.17:63902] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aRd8h_c94upQFzRWlUn5gwAAAEM"]
[Sat Nov 15 03:01:28.344798 2025] [:error] [pid 45908:tid 45941] [client 4.205.91.17:63974] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aRd8iGWG19mWwZX7KauFWAAAAAM"]
[Sat Nov 15 03:01:28.808058 2025] [:error] [pid 45909:tid 45979] [client 4.205.91.17:64420] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aRd8iMZqItrYybG86ki5MgAAAc4"]
[Sat Nov 15 03:01:29.441946 2025] [:error] [pid 45995:tid 46018] [client 4.205.91.17:63942] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aRd8icfhZrb6EV4SvFvq1QAAAhI"]
[Sat Nov 15 03:01:29.893804 2025] [:error] [pid 18513:tid 18534] [client 4.205.91.17:65266] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aRd8ifc94upQFzRWlUn5hAAAAFA"]
[Sat Nov 15 03:01:30.552165 2025] [:error] [pid 18513:tid 18540] [client 4.205.91.17:63214] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aRd8ivc94upQFzRWlUn5iQAAAFY"]
[Sat Nov 15 03:01:31.096829 2025] [:error] [pid 18513:tid 18519] [client 4.205.91.17:64392] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aRd8i_c94upQFzRWlUn5jQAAAEE"]
[Sat Nov 15 03:01:31.808346 2025] [:error] [pid 18513:tid 18520] [client 4.205.91.17:62663] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aRd8i_c94upQFzRWlUn5kQAAAEI"]
[Sat Nov 15 03:01:32.506789 2025] [:error] [pid 45908:tid 45954] [client 4.205.91.17:64483] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aRd8jGWG19mWwZX7KauFXQAAABA"]
[Sat Nov 15 03:01:33.077365 2025] [:error] [pid 18513:tid 18521] [client 4.205.91.17:64399] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aRd8jfc94upQFzRWlUn5mAAAAEM"]
[Sat Nov 15 03:01:33.693765 2025] [:error] [pid 45908:tid 45959] [client 4.205.91.17:63185] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aRd8jWWG19mWwZX7KauFYQAAABU"]
[Sat Nov 15 03:01:34.751676 2025] [:error] [pid 18513:tid 18536] [client 4.205.91.17:63984] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aRd8jvc94upQFzRWlUn5ngAAAFI"]
[Sat Nov 15 03:01:35.436145 2025] [:error] [pid 45995:tid 46011] [client 4.205.91.17:65207] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aRd8j8fhZrb6EV4SvFvq2gAAAgs"]
[Sat Nov 15 03:01:36.389002 2025] [:error] [pid 45995:tid 46004] [client 4.205.91.17:63205] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aRd8kMfhZrb6EV4SvFvq3QAAAgQ"]
[Sat Nov 15 03:01:37.024663 2025] [:error] [pid 45995:tid 46024] [client 4.205.91.17:65185] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aRd8kcfhZrb6EV4SvFvq3wAAAhg"]
[Sat Nov 15 03:01:37.597989 2025] [:error] [pid 18513:tid 18535] [client 4.205.91.17:63110] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aRd8kfc94upQFzRWlUn5pAAAAFE"]
[Sat Nov 15 03:01:38.118524 2025] [:error] [pid 45908:tid 45943] [client 4.205.91.17:63921] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aRd8kmWG19mWwZX7KauFZQAAAAU"]
[Sat Nov 15 03:01:38.981903 2025] [:error] [pid 18513:tid 18520] [client 4.205.91.17:63951] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aRd8kvc94upQFzRWlUn5pQAAAEI"]
[Sat Nov 15 03:01:39.952309 2025] [:error] [pid 18513:tid 18542] [client 4.205.91.17:63230] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aRd8k_c94upQFzRWlUn5qAAAAFg"]
[Sat Nov 15 03:01:40.718104 2025] [:error] [pid 45908:tid 45939] [client 4.205.91.17:64425] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "aRd8lGWG19mWwZX7KauFbQAAAAE"]
[Sat Nov 15 03:01:41.488436 2025] [:error] [pid 45909:tid 45987] [client 4.205.91.17:63897] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "aRd8lcZqItrYybG86ki5OQAAAdY"]
[Sat Nov 15 03:01:42.070371 2025] [:error] [pid 45909:tid 45970] [client 4.205.91.17:63928] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "aRd8lsZqItrYybG86ki5PAAAAcU"]
[Sat Nov 15 03:01:43.020987 2025] [:error] [pid 45908:tid 45953] [client 4.205.91.17:63935] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "aRd8l2WG19mWwZX7KauFcgAAAA8"]
[Sat Nov 15 03:01:43.921494 2025] [:error] [pid 45907:tid 45922] [client 4.205.91.17:63118] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aRd8l1AqmYxCpnT9gJGn2wAAAUs"]
[Sat Nov 15 03:01:44.798203 2025] [:error] [pid 45995:tid 46012] [client 4.205.91.17:64396] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aRd8mMfhZrb6EV4SvFvrAgAAAgw"]
[Sat Nov 15 03:01:45.812697 2025] [:error] [pid 45908:tid 45939] [client 4.205.91.17:63131] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aRd8mWWG19mWwZX7KauFeQAAAAE"]
[Sat Nov 15 03:01:47.798874 2025] [:error] [pid 45908:tid 45960] [client 4.205.91.17:63200] [client 4.205.91.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aRd8m2WG19mWwZX7KauFfAAAABY"]
[Sat Nov 15 04:51:57.531450 2025] [:error] [pid 27997:tid 28004] [client 145.239.10.137:38750] File does not exist: /usr/local/apache/htdocs/suspended-page/opsn.php, referer: http://dbservices.com.au/opsn.php
[Sat Nov 15 14:28:58.482347 2025] [:error] [pid 20346:tid 20369] [client 103.240.35.138:41204] [client 103.240.35.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.240.35.138, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRgdqp7hsydZdIoVTlvzqgAAAxQ"]
[Sat Nov 15 14:28:58.487589 2025] [:error] [pid 20346:tid 20369] [client 103.240.35.138:41204] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 15 17:28:44.251136 2025] [:error] [pid 19959:tid 19990] [client 20.2.83.141:51431] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/"] [unique_id "aRhHzMjejiTUP1-IawPJZgAAAZg"], referer: binance.com
[Sat Nov 15 17:28:50.085411 2025] [:error] [pid 27997:tid 28009] [client 20.2.83.141:53427] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aRhH0tpja_6cDxKbxFnLsAAAAMo"], referer: binance.com
[Sat Nov 15 17:28:56.360422 2025] [:error] [pid 19961:tid 20001] [client 20.2.83.141:55813] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aRhH2Dar7Si-84EApVRrmgAAAcg"], referer: binance.com
[Sat Nov 15 20:26:25.924859 2025] [:error] [pid 19961:tid 19995] [client 45.134.79.103:63105] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxcTar7Si-84EApVSFhAAAAcI"]
[Sun Nov 16 00:22:52.527562 2025] [:error] [pid 27911:tid 27973] [client 193.138.218.212:46626] [client 193.138.218.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aRio3MGzUdrhGBIfiKSQjgAAAIU"]
[Sun Nov 16 00:22:52.533898 2025] [:error] [pid 19959:tid 19983] [client 193.138.218.212:46644] [client 193.138.218.212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aRio3MjejiTUP1-IawMPXQAAAZE"]
[Tue Nov 18 02:30:47.057224 2025] [:error] [pid 39189:tid 39198] [client 35.227.95.71:41526] [client 35.227.95.71] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aRtp15JJLi753QwyqGz7IwAAAIU"]
[Tue Nov 18 07:53:51.783044 2025] [:error] [pid 9935:tid 9940] [client 198.46.154.59:52116] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aRu1jwWOMXsrZFRF6sjrxQAAAYM"]
[Tue Nov 18 07:54:02.292920 2025] [:error] [pid 28635:tid 28654] [client 198.46.154.59:52303] [client 198.46.154.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aRu1mmB61AnWhG54Xz3C1AAAAdA"]
[Tue Nov 18 13:51:44.124274 2025] [:error] [pid 44471:tid 44511] [client 141.98.11.16:65311] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Nov 18 20:35:12.726096 2025] [:error] [pid 44471:tid 44520] [client 84.247.191.22:58299] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aRxoAO_6m0bQO14XwtNxnAAAARA"], referer: binance.com
[Tue Nov 18 20:35:16.867373 2025] [:error] [pid 44470:tid 44498] [client 84.247.191.22:52036] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/"] [unique_id "aRxoBDv-RLYfULjlgDbrEQAAAFc"], referer: binance.com
[Tue Nov 18 20:35:18.894446 2025] [:error] [pid 44470:tid 44494] [client 84.247.191.22:59948] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aRxoBjv-RLYfULjlgDbrFQAAAFM"], referer: binance.com
[Tue Nov 18 20:35:21.048260 2025] [:error] [pid 44472:tid 44541] [client 84.247.191.22:56944] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aRxoCYKhGwkiLjv8BQwQogAAAUo"], referer: binance.com
[Tue Nov 18 21:37:28.831459 2025] [:error] [pid 3500:tid 3503] [client 45.134.79.103:52774] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aRx2mPCbRC7k2D7mjbSTegAAAcE"]
[Tue Nov 18 21:37:29.526488 2025] [:error] [pid 44471:tid 44511] [client 45.134.79.103:63884] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aRx2me_6m0bQO14XwtOCwAAAAQc"]
[Tue Nov 18 21:37:30.202638 2025] [:error] [pid 44470:tid 44493] [client 45.134.79.103:53253] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mjv-RLYfULjlgDb_OAAAAFI"]
[Tue Nov 18 23:02:59.142026 2025] [:error] [pid 44560:tid 44584] [client 41.210.143.205:55831] [client 41.210.143.205] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.210.143.205, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aRyKownbP7etF3q5-5vf-gAAAM0"]
[Tue Nov 18 23:02:59.146837 2025] [:error] [pid 44560:tid 44584] [client 41.210.143.205:55831] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 19 20:35:57.600689 2025] [:error] [pid 6554:tid 6581] [client 104.196.176.201:57975] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rd8rvPWLafJFqmX7YAAAABU"]
[Thu Nov 20 12:10:19.989567 2025] [:error] [pid 55340:tid 55360] [client 98.81.111.26:57685] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aR6Uq_OxD-NeMydTybBJdwAAAA8"]
[Thu Nov 20 12:10:20.397382 2025] [:error] [pid 34444:tid 34460] [client 98.81.111.26:53305] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aR6UrFNEol4jlmmA_GPwuAAAAU4"]
[Thu Nov 20 12:10:20.809612 2025] [:error] [pid 55430:tid 55437] [client 98.81.111.26:64657] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aR6UrPPZXaIMEU4pE7ugYQAAAMQ"]
[Thu Nov 20 12:10:21.209519 2025] [:error] [pid 55340:tid 55357] [client 98.81.111.26:52753] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aR6UrfOxD-NeMydTybBJkgAAAAw"]
[Thu Nov 20 12:10:21.612382 2025] [:error] [pid 34405:tid 34431] [client 98.81.111.26:63555] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aR6UrTFpvu8oRK7ATfvJDgAAARg"]
[Fri Nov 21 11:47:46.161379 2025] [:error] [pid 13412:tid 13433] [client 106.215.143.189:29908] [client 106.215.143.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.143.189, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aR_g4n3-knz3ZB6HogEHEgAAANA"]
[Fri Nov 21 11:47:46.165240 2025] [:error] [pid 13412:tid 13433] [client 106.215.143.189:29908] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Nov 21 14:33:10.420172 2025] [:error] [pid 25430:tid 25483] [client 213.21.239.4:51512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSAHpqpnWJcWt_4foXkRaQAAAFc"]
[Fri Nov 21 15:04:44.737013 2025] [:error] [pid 25554:tid 25580] [client 213.21.239.4:33536] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSAPDB-NtB-9AzFZrk4erAAAARY"]
[Fri Nov 21 15:32:12.881907 2025] [:error] [pid 25554:tid 25561] [client 213.21.239.4:36988] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAVfB-NtB-9AzFZrk41BwAAAQM"]
[Fri Nov 21 16:03:49.241239 2025] [:error] [pid 25431:tid 25501] [client 213.21.239.4:34772] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAc5cklhXxmoIExII03RAAAAI4"]
[Fri Nov 21 16:04:05.942973 2025] [:error] [pid 25431:tid 25506] [client 128.251.11.144:26604] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Nov 21 16:04:06.199585 2025] [:error] [pid 25431:tid 25501] [client 128.251.11.144:26604] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Nov 21 16:04:07.278699 2025] [:error] [pid 25431:tid 25502] [client 128.251.11.144:26604] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Nov 21 16:04:07.534287 2025] [:error] [pid 25431:tid 25491] [client 128.251.11.144:26604] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Nov 21 16:04:07.814428 2025] [:error] [pid 25431:tid 25492] [client 128.251.11.144:26604] File does not exist: /usr/local/apache/htdocs/suspended-page/mpvloi.php
[Fri Nov 21 16:04:08.081889 2025] [:error] [pid 25431:tid 25505] [client 128.251.11.144:26604] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSAc-MklhXxmoIExII03fAAAAJI"]
[Fri Nov 21 16:04:10.421303 2025] [:error] [pid 25431:tid 25495] [client 128.251.11.144:26504] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Fri Nov 21 16:04:10.722951 2025] [:error] [pid 25431:tid 25499] [client 128.251.11.144:26504] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Fri Nov 21 16:04:10.975342 2025] [:error] [pid 25431:tid 25508] [client 128.251.11.144:26504] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aSAc-sklhXxmoIExII03igAAAJU"]
[Fri Nov 21 16:04:13.219238 2025] [:error] [pid 25554:tid 25570] [client 128.251.11.144:26576] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aSAc_R-NtB-9AzFZrk5YWgAAAQw"]
[Fri Nov 21 16:04:14.652386 2025] [:error] [pid 25554:tid 25563] [client 128.251.11.144:26580] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aSAc_h-NtB-9AzFZrk5YYwAAAQU"]
[Fri Nov 21 16:04:15.635525 2025] [:error] [pid 25430:tid 25473] [client 128.251.11.144:26612] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aSAc_6pnWJcWt_4foXlH1gAAAE0"]
[Fri Nov 21 16:04:17.295985 2025] [:error] [pid 25430:tid 25469] [client 128.251.11.144:26585] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aSAdAapnWJcWt_4foXlH2gAAAEk"]
[Fri Nov 21 16:04:18.596098 2025] [:error] [pid 25430:tid 25463] [client 128.251.11.144:26599] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aSAdAqpnWJcWt_4foXlH3AAAAEM"]
[Fri Nov 21 16:04:19.329432 2025] [:error] [pid 25554:tid 25569] [client 128.251.11.144:26587] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aSAdAx-NtB-9AzFZrk5YfQAAAQs"]
[Fri Nov 21 16:04:20.274056 2025] [:error] [pid 25431:tid 25508] [client 128.251.11.144:26512] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aSAdBMklhXxmoIExII03uQAAAJU"]
[Fri Nov 21 16:04:20.991619 2025] [:error] [pid 25431:tid 25489] [client 128.251.11.144:26620] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aSAdBMklhXxmoIExII03vQAAAII"]
[Fri Nov 21 16:04:21.883540 2025] [:error] [pid 25521:tid 25539] [client 128.251.11.144:26510] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/kses.php"] [unique_id "aSAdBfhXnBMilDddn3XrjwAAANA"]
[Fri Nov 21 16:04:22.986001 2025] [:error] [pid 25431:tid 25498] [client 128.251.11.144:26498] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jagoan.php"] [unique_id "aSAdBsklhXxmoIExII03yAAAAIs"]
[Fri Nov 21 16:04:23.747522 2025] [:error] [pid 25521:tid 25543] [client 128.251.11.144:26439] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jagoan.php"] [unique_id "aSAdB_hXnBMilDddn3XrlgAAANQ"]
[Fri Nov 21 16:04:24.987792 2025] [:error] [pid 25429:tid 25436] [client 128.251.11.144:26507] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jagoan.php"] [unique_id "aSAdCD4rZbRSr7vu-NOsSQAAAAM"]
[Fri Nov 21 16:04:25.822525 2025] [:error] [pid 25430:tid 25470] [client 128.251.11.144:26534] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jagoan.php"] [unique_id "aSAdCapnWJcWt_4foXlH8wAAAEo"]
[Fri Nov 21 16:04:27.191593 2025] [:error] [pid 25521:tid 25534] [client 128.251.11.144:26584] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/g3.php"] [unique_id "aSAdC_hXnBMilDddn3XrpwAAAMs"]
[Fri Nov 21 16:04:28.353130 2025] [:error] [pid 25431:tid 25496] [client 128.251.11.144:26515] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/g3.php"] [unique_id "aSAdDMklhXxmoIExII032AAAAIk"]
[Fri Nov 21 16:04:29.511848 2025] [:error] [pid 25521:tid 25532] [client 128.251.11.144:26511] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/g3.php"] [unique_id "aSAdDfhXnBMilDddn3XrrQAAAMk"]
[Fri Nov 21 16:04:30.316784 2025] [:error] [pid 46939:tid 46943] [client 128.251.11.144:26610] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/g3.php"] [unique_id "aSAdDu0OmVoxD4VZ_Zl2hwAAAUE"]
[Fri Nov 21 16:04:31.001132 2025] [:error] [pid 25521:tid 25533] [client 128.251.11.144:26513] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSAdD_hXnBMilDddn3XrtAAAAMo"]
[Fri Nov 21 16:04:32.500744 2025] [:error] [pid 25554:tid 25576] [client 128.251.11.144:26567] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSAdEB-NtB-9AzFZrk5YpgAAARI"]
[Fri Nov 21 16:04:33.845459 2025] [:error] [pid 25554:tid 25571] [client 128.251.11.144:26568] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSAdER-NtB-9AzFZrk5YrgAAAQ0"]
[Fri Nov 21 16:04:35.120854 2025] [:error] [pid 46939:tid 46955] [client 128.251.11.144:26569] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/zaza.php"] [unique_id "aSAdE-0OmVoxD4VZ_Zl2qQAAAU0"]
[Fri Nov 21 16:04:35.866423 2025] [:error] [pid 25431:tid 25509] [client 128.251.11.144:26579] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSAdE8klhXxmoIExII037QAAAJY"]
[Fri Nov 21 16:04:36.803312 2025] [:error] [pid 25431:tid 25491] [client 128.251.11.144:26597] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSAdFMklhXxmoIExII038gAAAIQ"]
[Fri Nov 21 16:04:37.640006 2025] [:error] [pid 25431:tid 25499] [client 128.251.11.144:26616] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSAdFcklhXxmoIExII039AAAAIw"]
[Fri Nov 21 16:04:38.406297 2025] [:error] [pid 25554:tid 25582] [client 128.251.11.144:26596] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/myip.php"] [unique_id "aSAdFh-NtB-9AzFZrk5YwAAAARg"]
[Fri Nov 21 16:04:39.864482 2025] [:error] [pid 25429:tid 25449] [client 128.251.11.144:26480] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aSAdFz4rZbRSr7vu-NOsdgAAABA"]
[Fri Nov 21 16:04:40.733991 2025] [:error] [pid 25554:tid 25563] [client 128.251.11.144:26618] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aSAdGB-NtB-9AzFZrk5YxgAAAQU"]
[Fri Nov 21 16:04:41.733471 2025] [:error] [pid 25431:tid 25491] [client 128.251.11.144:26611] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aSAdGcklhXxmoIExII04AgAAAIQ"]
[Fri Nov 21 16:04:42.891828 2025] [:error] [pid 25429:tid 25435] [client 128.251.11.144:26560] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aSAdGj4rZbRSr7vu-NOshgAAAAI"]
[Fri Nov 21 16:04:43.707483 2025] [:error] [pid 25431:tid 25506] [client 128.251.11.144:26525] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aSAdG8klhXxmoIExII04CQAAAJM"]
[Fri Nov 21 16:04:46.659611 2025] [:error] [pid 25521:tid 25524] [client 128.251.11.144:26535] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aSAdHvhXnBMilDddn3Xr-wAAAME"]
[Fri Nov 21 16:04:47.406419 2025] [:error] [pid 25431:tid 25506] [client 128.251.11.144:26622] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aSAdH8klhXxmoIExII04GAAAAJM"]
[Fri Nov 21 16:04:49.360925 2025] [:error] [pid 46939:tid 46952] [client 128.251.11.144:26593] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aSAdIe0OmVoxD4VZ_Zl3DwAAAUo"]
[Fri Nov 21 16:04:50.481564 2025] [:error] [pid 46939:tid 46948] [client 128.251.11.144:26564] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aSAdIu0OmVoxD4VZ_Zl3FQAAAUY"]
[Fri Nov 21 16:04:51.196829 2025] [:error] [pid 25521:tid 25533] [client 128.251.11.144:26544] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aSAdI_hXnBMilDddn3XsCwAAAMo"]
[Fri Nov 21 16:04:52.475190 2025] [:error] [pid 25431:tid 25511] [client 128.251.11.144:26617] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aSAdJMklhXxmoIExII04LgAAAJg"]
[Fri Nov 21 16:04:54.514837 2025] [:error] [pid 25429:tid 25452] [client 128.251.11.144:26614] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aSAdJj4rZbRSr7vu-NOsrwAAABM"]
[Fri Nov 21 16:04:56.464163 2025] [:error] [pid 25431:tid 25507] [client 128.251.11.144:26508] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hob.php"] [unique_id "aSAdKMklhXxmoIExII04OAAAAJQ"]
[Fri Nov 21 16:04:57.560477 2025] [:error] [pid 25430:tid 25469] [client 128.251.11.144:26600] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hob.php"] [unique_id "aSAdKapnWJcWt_4foXlIUgAAAEk"]
[Fri Nov 21 16:04:58.590503 2025] [:error] [pid 25554:tid 25581] [client 128.251.11.144:26573] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hob.php"] [unique_id "aSAdKh-NtB-9AzFZrk5ZQAAAARc"]
[Fri Nov 21 16:04:59.542283 2025] [:error] [pid 25554:tid 25571] [client 128.251.11.144:26613] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hob.php"] [unique_id "aSAdKx-NtB-9AzFZrk5ZRwAAAQ0"]
[Fri Nov 21 16:05:00.677231 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26445] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aSAdLB-NtB-9AzFZrk5ZVgAAAQg"]
[Fri Nov 21 16:05:02.543287 2025] [:error] [pid 25430:tid 25466] [client 128.251.11.144:26566] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aSAdLqpnWJcWt_4foXlIXwAAAEY"]
[Fri Nov 21 16:05:03.463619 2025] [:error] [pid 25554:tid 25564] [client 128.251.11.144:26589] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aSAdLx-NtB-9AzFZrk5ZbAAAAQY"]
[Fri Nov 21 16:05:05.310401 2025] [:error] [pid 25521:tid 25538] [client 128.251.11.144:26583] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aSAdMfhXnBMilDddn3XsKwAAAM8"]
[Fri Nov 21 16:05:05.947495 2025] [:error] [pid 25431:tid 25508] [client 128.251.11.144:26505] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aSAdMcklhXxmoIExII04ZwAAAJU"]
[Fri Nov 21 16:05:06.743283 2025] [:error] [pid 25430:tid 25465] [client 128.251.11.144:26501] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aSAdMqpnWJcWt_4foXlIagAAAEU"]
[Fri Nov 21 16:05:08.465618 2025] [:error] [pid 25521:tid 25523] [client 128.251.11.144:26502] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aSAdNPhXnBMilDddn3XsMgAAAMA"]
[Fri Nov 21 16:05:10.467986 2025] [:error] [pid 46939:tid 46966] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wlx.php
[Fri Nov 21 16:05:10.764083 2025] [:error] [pid 46939:tid 46949] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/kal.php
[Fri Nov 21 16:05:12.349843 2025] [:error] [pid 46939:tid 46949] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/fv.php
[Fri Nov 21 16:05:12.613179 2025] [:error] [pid 46939:tid 46945] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Fri Nov 21 16:05:12.883743 2025] [:error] [pid 46939:tid 46957] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/w1w.php
[Fri Nov 21 16:05:13.172263 2025] [:error] [pid 46939:tid 46964] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/cafe.php
[Fri Nov 21 16:05:13.610539 2025] [:error] [pid 46939:tid 46962] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Fri Nov 21 16:05:13.868788 2025] [:error] [pid 46939:tid 46946] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Fri Nov 21 16:05:14.131891 2025] [:error] [pid 46939:tid 46942] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/ww4.php
[Fri Nov 21 16:05:14.390388 2025] [:error] [pid 46939:tid 46963] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Nov 21 16:05:14.645363 2025] [:error] [pid 46939:tid 46943] [client 128.251.11.144:26586] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Fri Nov 21 16:05:14.897743 2025] [:error] [pid 46939:tid 46961] [client 128.251.11.144:26586] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aSAdOu0OmVoxD4VZ_Zl3mQAAAVM"]
[Fri Nov 21 16:05:15.503565 2025] [:error] [pid 46939:tid 46964] [client 128.251.11.144:26571] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aSAdO-0OmVoxD4VZ_Zl3nAAAAVY"]
[Fri Nov 21 16:05:16.609042 2025] [:error] [pid 25429:tid 25436] [client 128.251.11.144:26524] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aSAdPD4rZbRSr7vu-NOs8QAAAAM"]
[Fri Nov 21 16:05:17.543764 2025] [:error] [pid 25431:tid 25499] [client 128.251.11.144:26543] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aSAdPcklhXxmoIExII04hAAAAIw"]
[Fri Nov 21 16:05:18.627037 2025] [:error] [pid 25554:tid 25575] [client 128.251.11.144:26537] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aSAdPh-NtB-9AzFZrk5ZogAAARE"]
[Fri Nov 21 16:05:19.716069 2025] [:error] [pid 46939:tid 46964] [client 128.251.11.144:26529] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aSAdP-0OmVoxD4VZ_Zl3uQAAAVY"]
[Fri Nov 21 16:05:20.390831 2025] [:error] [pid 25431:tid 25491] [client 128.251.11.144:26557] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aSAdQMklhXxmoIExII04kAAAAIQ"]
[Fri Nov 21 16:05:21.063107 2025] [:error] [pid 46939:tid 46961] [client 128.251.11.144:26594] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aSAdQe0OmVoxD4VZ_Zl3yAAAAVM"]
[Fri Nov 21 16:05:22.154690 2025] [:error] [pid 46939:tid 46952] [client 128.251.11.144:26577] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aSAdQu0OmVoxD4VZ_Zl30AAAAUo"]
[Fri Nov 21 16:05:22.927669 2025] [:error] [pid 25554:tid 25560] [client 128.251.11.144:26588] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aSAdQh-NtB-9AzFZrk5ZrQAAAQI"]
[Fri Nov 21 16:05:23.900087 2025] [:error] [pid 25431:tid 25511] [client 128.251.11.144:26440] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aSAdQ8klhXxmoIExII04lQAAAJg"]
[Fri Nov 21 16:05:25.591488 2025] [:error] [pid 46939:tid 46966] [client 128.251.11.144:26521] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aSAdRe0OmVoxD4VZ_Zl34AAAAVg"]
[Fri Nov 21 16:05:27.417035 2025] [:error] [pid 25430:tid 25475] [client 128.251.11.144:26582] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aSAdR6pnWJcWt_4foXlIkAAAAE8"]
[Fri Nov 21 16:05:28.930042 2025] [:error] [pid 25431:tid 25507] [client 128.251.11.144:26506] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aSAdSMklhXxmoIExII04qQAAAJQ"]
[Fri Nov 21 16:05:29.657052 2025] [:error] [pid 25554:tid 25569] [client 128.251.11.144:26619] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aSAdSR-NtB-9AzFZrk5ZvwAAAQs"]
[Fri Nov 21 16:05:30.465864 2025] [:error] [pid 25430:tid 25467] [client 128.251.11.144:26438] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aSAdSqpnWJcWt_4foXlIngAAAEc"]
[Fri Nov 21 16:05:31.468997 2025] [:error] [pid 25429:tid 25443] [client 128.251.11.144:26550] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aSAdSz4rZbRSr7vu-NOtFwAAAAo"]
[Fri Nov 21 16:05:32.566625 2025] [:error] [pid 25429:tid 25447] [client 128.251.11.144:26496] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aSAdTD4rZbRSr7vu-NOtHwAAAA4"]
[Fri Nov 21 16:05:33.869738 2025] [:error] [pid 25431:tid 25500] [client 128.251.11.144:26526] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aSAdTcklhXxmoIExII04xwAAAI0"]
[Fri Nov 21 16:05:34.592331 2025] [:error] [pid 25521:tid 25538] [client 128.251.11.144:26527] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aSAdTvhXnBMilDddn3XsoAAAAM8"]
[Fri Nov 21 16:05:35.638652 2025] [:error] [pid 25429:tid 25453] [client 128.251.11.144:26447] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSAdTz4rZbRSr7vu-NOtMgAAABQ"]
[Fri Nov 21 16:05:36.617035 2025] [:error] [pid 25431:tid 25490] [client 128.251.11.144:26608] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSAdUMklhXxmoIExII04ygAAAIM"]
[Fri Nov 21 16:05:37.326964 2025] [:error] [pid 46939:tid 46958] [client 128.251.11.144:26598] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSAdUe0OmVoxD4VZ_Zl4DgAAAVA"]
[Fri Nov 21 16:05:37.981777 2025] [:error] [pid 25430:tid 25470] [client 128.251.11.144:26539] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aSAdUapnWJcWt_4foXlIvAAAAEo"]
[Fri Nov 21 16:05:39.310104 2025] [:error] [pid 25430:tid 25471] [client 128.251.11.144:26499] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAdU6pnWJcWt_4foXlIvgAAAEs"]
[Fri Nov 21 16:05:40.172722 2025] [:error] [pid 25521:tid 25541] [client 128.251.11.144:26605] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAdVPhXnBMilDddn3XsxgAAANI"]
[Fri Nov 21 16:05:41.040602 2025] [:error] [pid 25429:tid 25454] [client 128.251.11.144:26561] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAdVT4rZbRSr7vu-NOtSwAAABU"]
[Fri Nov 21 16:05:42.181915 2025] [:error] [pid 46939:tid 46950] [client 128.251.11.144:26449] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/index.php"] [unique_id "aSAdVu0OmVoxD4VZ_Zl4JAAAAUg"]
[Fri Nov 21 16:05:43.333816 2025] [:error] [pid 25431:tid 25505] [client 128.251.11.144:26592] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSAdV8klhXxmoIExII040gAAAJI"]
[Fri Nov 21 16:05:45.527876 2025] [:error] [pid 46939:tid 46951] [client 128.251.11.144:26519] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSAdWe0OmVoxD4VZ_Zl4MQAAAUk"]
[Fri Nov 21 16:05:46.570736 2025] [:error] [pid 25521:tid 25532] [client 128.251.11.144:26435] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSAdWvhXnBMilDddn3Xs7AAAAMk"]
[Fri Nov 21 16:05:48.551225 2025] [:error] [pid 25431:tid 25502] [client 128.251.11.144:26503] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSAdXMklhXxmoIExII042AAAAI8"]
[Fri Nov 21 16:05:49.547253 2025] [:error] [pid 25521:tid 25545] [client 128.251.11.144:26574] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSAdXfhXnBMilDddn3XtAAAAANY"]
[Fri Nov 21 16:05:50.464608 2025] [:error] [pid 25431:tid 25506] [client 128.251.11.144:26460] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSAdXsklhXxmoIExII043QAAAJM"]
[Fri Nov 21 16:05:51.983593 2025] [:error] [pid 25554:tid 25569] [client 128.251.11.144:26602] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSAdXx-NtB-9AzFZrk5aAwAAAQs"]
[Fri Nov 21 16:05:53.658151 2025] [:error] [pid 25554:tid 25579] [client 128.251.11.144:26563] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aSAdYR-NtB-9AzFZrk5aCAAAARU"]
[Fri Nov 21 16:05:54.582943 2025] [:error] [pid 25431:tid 25487] [client 128.251.11.144:26572] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aSAdYsklhXxmoIExII046wAAAIA"]
[Fri Nov 21 16:05:55.926187 2025] [:error] [pid 46939:tid 46963] [client 128.251.11.144:26536] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aSAdY-0OmVoxD4VZ_Zl4bgAAAVU"]
[Fri Nov 21 16:05:57.186651 2025] [:error] [pid 46939:tid 46952] [client 128.251.11.144:26538] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aSAdZe0OmVoxD4VZ_Zl4cgAAAUo"]
[Fri Nov 21 16:05:59.919626 2025] [:error] [pid 25431:tid 25503] [client 128.251.11.144:26522] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aSAdZ8klhXxmoIExII049wAAAJA"]
[Fri Nov 21 16:06:01.394859 2025] [:error] [pid 25430:tid 25480] [client 128.251.11.144:26551] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aSAdaapnWJcWt_4foXlI-QAAAFQ"]
[Fri Nov 21 16:06:02.351452 2025] [:error] [pid 25429:tid 25456] [client 128.251.11.144:26542] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aSAdaj4rZbRSr7vu-NOt4wAAABc"]
[Fri Nov 21 16:06:03.449967 2025] [:error] [pid 46939:tid 46946] [client 128.251.11.144:26454] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aSAda-0OmVoxD4VZ_Zl4iQAAAUQ"]
[Fri Nov 21 16:06:04.434006 2025] [:error] [pid 25554:tid 25563] [client 128.251.11.144:26531] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aSAdbB-NtB-9AzFZrk5aEgAAAQU"]
[Fri Nov 21 16:06:05.785940 2025] [:error] [pid 25429:tid 25440] [client 128.251.11.144:26444] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aSAdbT4rZbRSr7vu-NOt8AAAAAc"]
[Fri Nov 21 16:06:07.391676 2025] [:error] [pid 25521:tid 25527] [client 128.251.11.144:26533] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aSAdb_hXnBMilDddn3XtbQAAAMQ"]
[Fri Nov 21 16:06:08.706632 2025] [:error] [pid 46939:tid 46966] [client 128.251.11.144:26497] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aSAdcO0OmVoxD4VZ_Zl4pgAAAVg"]
[Fri Nov 21 16:06:10.670511 2025] [:error] [pid 25430:tid 25464] [client 128.251.11.144:26595] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aSAdcqpnWJcWt_4foXlJBQAAAEQ"]
[Fri Nov 21 16:06:13.153763 2025] [:error] [pid 25431:tid 25507] [client 128.251.11.144:26552] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aSAddcklhXxmoIExII05MQAAAJQ"]
[Fri Nov 21 16:06:16.625415 2025] [:error] [pid 46939:tid 46951] [client 128.251.11.144:26591] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Nov 21 16:06:16.880498 2025] [:error] [pid 46939:tid 46958] [client 128.251.11.144:26591] File does not exist: /usr/local/apache/htdocs/suspended-page/13k.php
[Fri Nov 21 16:06:17.579481 2025] [:error] [pid 46939:tid 46957] [client 128.251.11.144:26591] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Nov 21 16:06:17.835989 2025] [:error] [pid 46939:tid 46953] [client 128.251.11.144:26591] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Fri Nov 21 16:06:18.109585 2025] [:error] [pid 46939:tid 46965] [client 128.251.11.144:26591] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Nov 21 16:06:18.398436 2025] [:error] [pid 46939:tid 46942] [client 128.251.11.144:26591] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Fri Nov 21 16:06:18.680569 2025] [:error] [pid 46939:tid 46959] [client 128.251.11.144:26591] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Nov 21 16:06:19.273096 2025] [:error] [pid 46939:tid 46946] [client 128.251.11.144:26591] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSAde-0OmVoxD4VZ_Zl5AQAAAUQ"]
[Fri Nov 21 16:06:20.757222 2025] [:error] [pid 25431:tid 25495] [client 128.251.11.144:26470] File does not exist: /usr/local/apache/htdocs/suspended-page/termps.php
[Fri Nov 21 16:06:21.011220 2025] [:error] [pid 25431:tid 25488] [client 128.251.11.144:26470] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Fri Nov 21 16:06:21.294096 2025] [:error] [pid 25431:tid 25489] [client 128.251.11.144:26470] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Nov 21 16:06:21.548703 2025] [:error] [pid 25431:tid 25506] [client 128.251.11.144:26470] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Nov 21 16:06:21.802169 2025] [:error] [pid 25431:tid 25498] [client 128.251.11.144:26470] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSAdfcklhXxmoIExII05YAAAAIs"]
[Fri Nov 21 16:06:22.568850 2025] [:error] [pid 25429:tid 25452] [client 128.251.11.144:26549] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSAdfj4rZbRSr7vu-NOuQwAAABM"]
[Fri Nov 21 16:06:23.717658 2025] [:error] [pid 25554:tid 25580] [client 128.251.11.144:26493] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSAdfx-NtB-9AzFZrk5aPgAAARY"]
[Fri Nov 21 16:06:24.782783 2025] [:error] [pid 25429:tid 25447] [client 128.251.11.144:26570] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSAdgD4rZbRSr7vu-NOuSQAAAA4"]
[Fri Nov 21 16:06:25.602605 2025] [:error] [pid 25521:tid 25533] [client 128.251.11.144:26514] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAdgfhXnBMilDddn3XtzQAAAMo"]
[Fri Nov 21 16:06:26.718503 2025] [:error] [pid 46939:tid 46948] [client 128.251.11.144:26434] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAdgu0OmVoxD4VZ_Zl5IgAAAUY"]
[Fri Nov 21 16:06:27.641494 2025] [:error] [pid 25430:tid 25482] [client 128.251.11.144:26478] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAdg6pnWJcWt_4foXlJRAAAAFY"]
[Fri Nov 21 16:06:28.567838 2025] [:error] [pid 25429:tid 25455] [client 128.251.11.144:26601] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAdhD4rZbRSr7vu-NOuVwAAABY"]
[Fri Nov 21 16:06:29.470591 2025] [:error] [pid 25429:tid 25454] [client 128.251.11.144:26518] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSAdhT4rZbRSr7vu-NOuWgAAABU"]
[Fri Nov 21 16:06:30.431702 2025] [:error] [pid 25430:tid 25462] [client 128.251.11.144:26509] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSAdhqpnWJcWt_4foXlJUAAAAEI"]
[Fri Nov 21 16:06:31.580885 2025] [:error] [pid 25554:tid 25575] [client 128.251.11.144:26575] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSAdhx-NtB-9AzFZrk5aUQAAARE"]
[Fri Nov 21 16:06:32.238676 2025] [:error] [pid 25431:tid 25487] [client 128.251.11.144:26377] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSAdiMklhXxmoIExII05mAAAAIA"]
[Fri Nov 21 16:06:33.102862 2025] [:error] [pid 46939:tid 46959] [client 128.251.11.144:26471] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aSAdie0OmVoxD4VZ_Zl5OQAAAVE"]
[Fri Nov 21 16:06:34.018509 2025] [:error] [pid 25521:tid 25525] [client 128.251.11.144:26451] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aSAdivhXnBMilDddn3Xt8AAAAMI"]
[Fri Nov 21 16:06:34.707406 2025] [:error] [pid 25430:tid 25482] [client 128.251.11.144:26558] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aSAdiqpnWJcWt_4foXlJaQAAAFY"]
[Fri Nov 21 16:06:35.376372 2025] [:error] [pid 25429:tid 25433] [client 128.251.11.144:26541] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aSAdiz4rZbRSr7vu-NOueQAAAAA"]
[Fri Nov 21 16:06:36.416243 2025] [:error] [pid 25554:tid 25565] [client 128.251.11.144:26541] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aSAdjB-NtB-9AzFZrk5aWwAAAQc"]
[Fri Nov 21 16:06:37.367196 2025] [:error] [pid 25430:tid 25478] [client 128.251.11.144:26475] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aSAdjapnWJcWt_4foXlJdgAAAFI"]
[Fri Nov 21 16:06:38.282481 2025] [:error] [pid 46939:tid 46943] [client 128.251.11.144:26452] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aSAdju0OmVoxD4VZ_Zl5TQAAAUE"]
[Fri Nov 21 16:06:39.510912 2025] [:error] [pid 25521:tid 25536] [client 128.251.11.144:26523] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/function.php"] [unique_id "aSAdj_hXnBMilDddn3XuCwAAAM0"]
[Fri Nov 21 16:06:40.322278 2025] [:error] [pid 46939:tid 46942] [client 128.251.11.144:26547] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aSAdkO0OmVoxD4VZ_Zl5VgAAAUA"]
[Fri Nov 21 16:06:41.252706 2025] [:error] [pid 25430:tid 25473] [client 128.251.11.144:26623] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aSAdkapnWJcWt_4foXlJhQAAAE0"]
[Fri Nov 21 16:06:42.454451 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26477] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aSAdkh-NtB-9AzFZrk5aZgAAAQg"]
[Fri Nov 21 16:06:43.842512 2025] [:error] [pid 25429:tid 25438] [client 128.251.11.144:26520] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aSAdkz4rZbRSr7vu-NOujwAAAAU"]
[Fri Nov 21 16:06:45.346774 2025] [:error] [pid 46939:tid 46963] [client 128.251.11.144:26500] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSAdle0OmVoxD4VZ_Zl5bQAAAVU"]
[Fri Nov 21 16:06:45.999636 2025] [:error] [pid 25430:tid 25474] [client 128.251.11.144:26492] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSAdlapnWJcWt_4foXlJlQAAAE4"]
[Fri Nov 21 16:06:48.480992 2025] [:error] [pid 25431:tid 25503] [client 128.251.11.144:26490] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSAdmMklhXxmoIExII054gAAAJA"]
[Fri Nov 21 16:06:49.133465 2025] [:error] [pid 25521:tid 25541] [client 128.251.11.144:26545] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSAdmfhXnBMilDddn3XuKQAAANI"]
[Fri Nov 21 16:06:50.209735 2025] [:error] [pid 25431:tid 25508] [client 128.251.11.144:26370] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aSAdmsklhXxmoIExII057gAAAJU"]
[Fri Nov 21 16:06:51.083759 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26382] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aSAdmx-NtB-9AzFZrk5acwAAAQg"]
[Fri Nov 21 16:06:52.540428 2025] [:error] [pid 25554:tid 25564] [client 128.251.11.144:26450] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aSAdnB-NtB-9AzFZrk5adQAAAQY"]
[Fri Nov 21 16:06:53.864592 2025] [:error] [pid 25429:tid 25439] [client 128.251.11.144:25604] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aSAdnT4rZbRSr7vu-NOuogAAAAY"]
[Fri Nov 21 16:06:55.222565 2025] [:error] [pid 25430:tid 25482] [client 128.251.11.144:26446] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aSAdn6pnWJcWt_4foXlJtAAAAFY"]
[Fri Nov 21 16:06:56.042856 2025] [:error] [pid 25554:tid 25575] [client 128.251.11.144:26606] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aSAdoB-NtB-9AzFZrk5aggAAARE"]
[Fri Nov 21 16:06:57.515729 2025] [:error] [pid 25430:tid 25474] [client 128.251.11.144:26442] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aSAdoapnWJcWt_4foXlJvAAAAE4"]
[Fri Nov 21 16:06:58.418671 2025] [:error] [pid 46939:tid 46946] [client 128.251.11.144:26474] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aSAdou0OmVoxD4VZ_Zl5sQAAAUQ"]
[Fri Nov 21 16:06:59.698110 2025] [:error] [pid 25430:tid 25484] [client 128.251.11.144:26461] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSAdo6pnWJcWt_4foXlJvwAAAFg"]
[Fri Nov 21 16:07:01.180207 2025] [:error] [pid 25429:tid 25444] [client 128.251.11.144:26441] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSAdpT4rZbRSr7vu-NOusAAAAAs"]
[Fri Nov 21 16:07:02.011635 2025] [:error] [pid 46939:tid 46942] [client 128.251.11.144:26436] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSAdpu0OmVoxD4VZ_Zl5vgAAAUA"]
[Fri Nov 21 16:07:03.193644 2025] [:error] [pid 25554:tid 25572] [client 128.251.11.144:26441] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSAdpx-NtB-9AzFZrk5alAAAAQ4"]
[Fri Nov 21 16:07:04.858896 2025] [:error] [pid 25431:tid 25498] [client 128.251.11.144:26484] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSAdqMklhXxmoIExII06IgAAAIs"]
[Fri Nov 21 16:07:06.296707 2025] [:error] [pid 25554:tid 25558] [client 128.251.11.144:26459] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSAdqh-NtB-9AzFZrk5anAAAAQA"]
[Fri Nov 21 16:07:07.026701 2025] [:error] [pid 25431:tid 25489] [client 128.251.11.144:26414] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSAdq8klhXxmoIExII06KQAAAII"]
[Fri Nov 21 16:07:09.603791 2025] [:error] [pid 25521:tid 25526] [client 128.251.11.144:26481] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSAdrfhXnBMilDddn3XuZgAAAMM"]
[Fri Nov 21 16:07:11.564931 2025] [:error] [pid 25431:tid 25488] [client 128.251.11.144:26457] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSAdr8klhXxmoIExII06LgAAAIE"]
[Fri Nov 21 16:07:14.782130 2025] [:error] [pid 46939:tid 46950] [client 128.251.11.144:26468] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSAdsu0OmVoxD4VZ_Zl56wAAAUg"]
[Fri Nov 21 16:07:19.445933 2025] [:error] [pid 46939:tid 46956] [client 128.251.11.144:26621] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aSAdt-0OmVoxD4VZ_Zl57wAAAU4"]
[Fri Nov 21 16:07:21.776877 2025] [:error] [pid 25554:tid 25569] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Nov 21 16:07:22.071531 2025] [:error] [pid 25554:tid 25578] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri Nov 21 16:07:22.325770 2025] [:error] [pid 25554:tid 25579] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Nov 21 16:07:22.580277 2025] [:error] [pid 25554:tid 25580] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Nov 21 16:07:22.835378 2025] [:error] [pid 25554:tid 25559] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Nov 21 16:07:23.090714 2025] [:error] [pid 25554:tid 25560] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Nov 21 16:07:23.347623 2025] [:error] [pid 25554:tid 25567] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Nov 21 16:07:23.604313 2025] [:error] [pid 25554:tid 25575] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Nov 21 16:07:23.871980 2025] [:error] [pid 25554:tid 25577] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Nov 21 16:07:24.178286 2025] [:error] [pid 25554:tid 25565] [client 128.251.11.144:26371] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Fri Nov 21 16:07:24.465317 2025] [:error] [pid 25554:tid 25558] [client 128.251.11.144:26371] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSAdvB-NtB-9AzFZrk5a6gAAAQA"]
[Fri Nov 21 16:07:26.404974 2025] [:error] [pid 25430:tid 25472] [client 128.251.11.144:26530] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSAdvqpnWJcWt_4foXlKKgAAAEw"]
[Fri Nov 21 16:07:27.131791 2025] [:error] [pid 25521:tid 25545] [client 128.251.11.144:26565] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSAdv_hXnBMilDddn3XumwAAANY"]
[Fri Nov 21 16:07:28.096171 2025] [:error] [pid 25431:tid 25507] [client 128.251.11.144:26546] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSAdwMklhXxmoIExII06VAAAAJQ"]
[Fri Nov 21 16:07:29.102528 2025] [:error] [pid 25554:tid 25576] [client 128.251.11.144:26548] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aSAdwR-NtB-9AzFZrk5a8gAAARI"]
[Fri Nov 21 16:07:30.078714 2025] [:error] [pid 46939:tid 46951] [client 128.251.11.144:26528] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aSAdwu0OmVoxD4VZ_Zl59wAAAUk"]
[Fri Nov 21 16:07:30.788512 2025] [:error] [pid 25429:tid 25445] [client 128.251.11.144:26437] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aSAdwj4rZbRSr7vu-NOu8QAAAAw"]
[Fri Nov 21 16:07:32.113357 2025] [:error] [pid 46939:tid 46942] [client 128.251.11.144:26472] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aSAdxO0OmVoxD4VZ_Zl5-QAAAUA"]
[Fri Nov 21 16:07:33.432868 2025] [:error] [pid 25521:tid 25526] [client 128.251.11.144:26559] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aSAdxfhXnBMilDddn3XutAAAAMM"]
[Fri Nov 21 16:07:34.147493 2025] [:error] [pid 25429:tid 25442] [client 128.251.11.144:26590] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aSAdxj4rZbRSr7vu-NOu-QAAAAk"]
[Fri Nov 21 16:07:35.457331 2025] [:error] [pid 25429:tid 25436] [client 128.251.11.144:26372] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aSAdxz4rZbRSr7vu-NOu_QAAAAM"]
[Fri Nov 21 16:07:36.660614 2025] [:error] [pid 25431:tid 25498] [client 128.251.11.144:26463] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aSAdyMklhXxmoIExII06ZgAAAIs"]
[Fri Nov 21 16:07:37.767016 2025] [:error] [pid 46939:tid 46945] [client 128.251.11.144:26403] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSAdye0OmVoxD4VZ_Zl6AwAAAUM"]
[Fri Nov 21 16:07:38.737490 2025] [:error] [pid 25431:tid 25487] [client 128.251.11.144:26465] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSAdysklhXxmoIExII06cAAAAIA"]
[Fri Nov 21 16:07:40.310269 2025] [:error] [pid 25431:tid 25500] [client 128.251.11.144:26378] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSAdzMklhXxmoIExII06dwAAAI0"]
[Fri Nov 21 16:07:41.954699 2025] [:error] [pid 46939:tid 46958] [client 128.251.11.144:26448] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSAdze0OmVoxD4VZ_Zl6CAAAAVA"]
[Fri Nov 21 16:07:43.158748 2025] [:error] [pid 46939:tid 46956] [client 128.251.11.144:26462] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSAdz-0OmVoxD4VZ_Zl6DAAAAU4"]
[Fri Nov 21 16:07:45.674050 2025] [:error] [pid 25430:tid 25460] [client 128.251.11.144:26495] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSAd0apnWJcWt_4foXlKSgAAAEA"]
[Fri Nov 21 16:07:46.558323 2025] [:error] [pid 25429:tid 25438] [client 128.251.11.144:26562] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSAd0j4rZbRSr7vu-NOvHQAAAAU"]
[Fri Nov 21 16:07:47.723809 2025] [:error] [pid 25430:tid 25467] [client 128.251.11.144:26424] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSAd06pnWJcWt_4foXlKTQAAAEc"]
[Fri Nov 21 16:07:48.948200 2025] [:error] [pid 46939:tid 46949] [client 128.251.11.144:26479] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSAd1O0OmVoxD4VZ_Zl6FQAAAUc"]
[Fri Nov 21 16:07:50.734078 2025] [:error] [pid 25431:tid 25509] [client 128.251.11.144:26516] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSAd1sklhXxmoIExII06kgAAAJY"]
[Fri Nov 21 16:07:51.531784 2025] [:error] [pid 25521:tid 25526] [client 128.251.11.144:26603] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSAd1_hXnBMilDddn3Xu0QAAAMM"]
[Fri Nov 21 16:07:52.503968 2025] [:error] [pid 25429:tid 25434] [client 128.251.11.144:26458] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSAd2D4rZbRSr7vu-NOvOAAAAAE"]
[Fri Nov 21 16:07:53.358024 2025] [:error] [pid 46939:tid 46964] [client 128.251.11.144:26384] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSAd2e0OmVoxD4VZ_Zl6HQAAAVY"]
[Fri Nov 21 16:07:54.444040 2025] [:error] [pid 25431:tid 25495] [client 128.251.11.144:26398] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSAd2sklhXxmoIExII06qgAAAIg"]
[Fri Nov 21 16:07:55.445982 2025] [:error] [pid 46939:tid 46963] [client 128.251.11.144:26391] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSAd2-0OmVoxD4VZ_Zl6IAAAAVU"]
[Fri Nov 21 16:07:56.205639 2025] [:error] [pid 25431:tid 25505] [client 128.251.11.144:26456] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSAd3MklhXxmoIExII06sQAAAJI"]
[Fri Nov 21 16:07:57.687085 2025] [:error] [pid 25431:tid 25510] [client 128.251.11.144:26529] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSAd3cklhXxmoIExII06tgAAAJc"]
[Fri Nov 21 16:07:58.552792 2025] [:error] [pid 46939:tid 46942] [client 128.251.11.144:26456] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSAd3u0OmVoxD4VZ_Zl6JQAAAUA"]
[Fri Nov 21 16:07:59.295617 2025] [:error] [pid 46939:tid 46946] [client 128.251.11.144:26615] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSAd3-0OmVoxD4VZ_Zl6JwAAAUQ"]
[Fri Nov 21 16:07:59.972626 2025] [:error] [pid 25554:tid 25574] [client 128.251.11.144:26469] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSAd3x-NtB-9AzFZrk5bKgAAARA"]
[Fri Nov 21 16:08:01.225173 2025] [:error] [pid 25521:tid 25545] [client 128.251.11.144:26482] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aSAd4fhXnBMilDddn3Xu5AAAANY"]
[Fri Nov 21 16:08:02.154251 2025] [:error] [pid 25554:tid 25567] [client 128.251.11.144:26555] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aSAd4h-NtB-9AzFZrk5bLwAAAQk"]
[Fri Nov 21 16:08:03.411916 2025] [:error] [pid 46939:tid 46951] [client 128.251.11.144:26466] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aSAd4-0OmVoxD4VZ_Zl6MwAAAUk"]
[Fri Nov 21 16:08:04.706390 2025] [:error] [pid 25429:tid 25449] [client 128.251.11.144:26455] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aSAd5D4rZbRSr7vu-NOvZAAAABA"]
[Fri Nov 21 16:08:06.125797 2025] [:error] [pid 46939:tid 46965] [client 128.251.11.144:26489] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aSAd5u0OmVoxD4VZ_Zl6OwAAAVc"]
[Fri Nov 21 16:08:07.765432 2025] [:error] [pid 25554:tid 25571] [client 128.251.11.144:26423] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aSAd5x-NtB-9AzFZrk5bSAAAAQ0"]
[Fri Nov 21 16:08:08.936610 2025] [:error] [pid 25554:tid 25564] [client 128.251.11.144:26385] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aSAd6B-NtB-9AzFZrk5bTQAAAQY"]
[Fri Nov 21 16:08:10.262480 2025] [:error] [pid 25554:tid 25574] [client 128.251.11.144:26416] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aSAd6h-NtB-9AzFZrk5bUgAAARA"]
[Fri Nov 21 16:08:11.475281 2025] [:error] [pid 25431:tid 25490] [client 128.251.11.144:26517] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSAd68klhXxmoIExII063QAAAIM"]
[Fri Nov 21 16:08:12.220295 2025] [:error] [pid 25429:tid 25436] [client 128.251.11.144:26401] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSAd7D4rZbRSr7vu-NOvcgAAAAM"]
[Fri Nov 21 16:08:13.363661 2025] [:error] [pid 25431:tid 25503] [client 128.251.11.144:26532] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSAd7cklhXxmoIExII064gAAAJA"]
[Fri Nov 21 16:08:14.409831 2025] [:error] [pid 25554:tid 25562] [client 128.251.11.144:26556] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSAd7h-NtB-9AzFZrk5bYgAAAQQ"]
[Fri Nov 21 16:08:15.464468 2025] [:error] [pid 25430:tid 25461] [client 128.251.11.144:25602] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAd76pnWJcWt_4foXlKdQAAAEE"]
[Fri Nov 21 16:08:16.509200 2025] [:error] [pid 25431:tid 25488] [client 128.251.11.144:26396] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAd8MklhXxmoIExII068AAAAIE"]
[Fri Nov 21 16:08:17.978105 2025] [:error] [pid 25554:tid 25558] [client 128.251.11.144:26369] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAd8R-NtB-9AzFZrk5bcAAAAQA"]
[Fri Nov 21 16:08:19.409868 2025] [:error] [pid 25521:tid 25528] [client 128.251.11.144:26417] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSAd8_hXnBMilDddn3XvLAAAAMU"]
[Fri Nov 21 16:08:20.241985 2025] [:error] [pid 46939:tid 46948] [client 128.251.11.144:26433] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aSAd9O0OmVoxD4VZ_Zl6YgAAAUY"]
[Fri Nov 21 16:08:21.479245 2025] [:error] [pid 25521:tid 25534] [client 128.251.11.144:26381] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aSAd9fhXnBMilDddn3XvNwAAAMs"]
[Fri Nov 21 16:08:22.686040 2025] [:error] [pid 25554:tid 25562] [client 128.251.11.144:25615] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aSAd9h-NtB-9AzFZrk5bjAAAAQQ"]
[Fri Nov 21 16:08:25.375293 2025] [:error] [pid 25429:tid 25455] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Fri Nov 21 16:08:25.888884 2025] [:error] [pid 25429:tid 25454] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Fri Nov 21 16:08:26.408506 2025] [:error] [pid 25429:tid 25436] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/article.php
[Fri Nov 21 16:08:26.664164 2025] [:error] [pid 25429:tid 25446] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Nov 21 16:08:26.929918 2025] [:error] [pid 25429:tid 25448] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Nov 21 16:08:27.218371 2025] [:error] [pid 25429:tid 25444] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Nov 21 16:08:27.626684 2025] [:error] [pid 25429:tid 25444] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri Nov 21 16:08:27.883625 2025] [:error] [pid 25429:tid 25449] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Nov 21 16:08:28.158594 2025] [:error] [pid 25429:tid 25453] [client 128.251.11.144:26387] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Nov 21 16:08:28.412699 2025] [:error] [pid 25429:tid 25450] [client 128.251.11.144:26387] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aSAd_D4rZbRSr7vu-NOv2AAAABE"]
[Fri Nov 21 16:08:29.898641 2025] [:error] [pid 25521:tid 25531] [client 128.251.11.144:26393] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aSAd_fhXnBMilDddn3XvXgAAAMg"]
[Fri Nov 21 16:08:32.146917 2025] [:error] [pid 46939:tid 46958] [client 128.251.11.144:26464] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aSAeAO0OmVoxD4VZ_Zl6kwAAAVA"]
[Fri Nov 21 16:08:33.804892 2025] [:error] [pid 25554:tid 25579] [client 128.251.11.144:26412] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aSAeAR-NtB-9AzFZrk5boQAAARU"]
[Fri Nov 21 16:08:35.198677 2025] [:error] [pid 25554:tid 25563] [client 128.251.11.144:26432] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aSAeAx-NtB-9AzFZrk5btwAAAQU"]
[Fri Nov 21 16:08:36.214004 2025] [:error] [pid 25521:tid 25540] [client 128.251.11.144:26379] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aSAeBPhXnBMilDddn3XvaAAAANE"]
[Fri Nov 21 16:08:37.039774 2025] [:error] [pid 25429:tid 25457] [client 128.251.11.144:26397] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aSAeBT4rZbRSr7vu-NOv4wAAABg"]
[Fri Nov 21 16:08:37.869513 2025] [:error] [pid 25521:tid 25524] [client 128.251.11.144:26487] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aSAeBfhXnBMilDddn3XvbQAAAME"]
[Fri Nov 21 16:08:39.721580 2025] [:error] [pid 25554:tid 25568] [client 128.251.11.144:26578] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSAeBx-NtB-9AzFZrk5bxAAAAQo"]
[Fri Nov 21 16:08:41.082447 2025] [:error] [pid 25521:tid 25544] [client 128.251.11.144:26443] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSAeCfhXnBMilDddn3XvdgAAANU"]
[Fri Nov 21 16:08:42.111497 2025] [:error] [pid 25431:tid 25487] [client 128.251.11.144:26534] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSAeCsklhXxmoIExII07YgAAAIA"]
[Fri Nov 21 16:08:43.261421 2025] [:error] [pid 25554:tid 25578] [client 128.251.11.144:26554] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSAeCx-NtB-9AzFZrk5bzQAAARQ"]
[Fri Nov 21 16:08:44.402901 2025] [:error] [pid 46939:tid 46943] [client 128.251.11.144:26376] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aSAeDO0OmVoxD4VZ_Zl6rAAAAUE"]
[Fri Nov 21 16:08:45.190478 2025] [:error] [pid 25431:tid 25510] [client 128.251.11.144:25609] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSAeDcklhXxmoIExII07awAAAJc"]
[Fri Nov 21 16:08:45.984703 2025] [:error] [pid 25521:tid 25524] [client 128.251.11.144:25648] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSAeDfhXnBMilDddn3XvfgAAAME"]
[Fri Nov 21 16:08:46.843559 2025] [:error] [pid 25431:tid 25487] [client 128.251.11.144:26507] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSAeDsklhXxmoIExII07bgAAAIA"]
[Fri Nov 21 16:08:47.534223 2025] [:error] [pid 25429:tid 25440] [client 128.251.11.144:26607] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSAeDz4rZbRSr7vu-NOv9AAAAAc"]
[Fri Nov 21 16:08:48.609791 2025] [:error] [pid 46939:tid 46950] [client 128.251.11.144:26375] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSAeEO0OmVoxD4VZ_Zl6tQAAAUg"]
[Fri Nov 21 16:08:50.890914 2025] [:error] [pid 25521:tid 25528] [client 128.251.11.144:26585] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSAeEvhXnBMilDddn3XviwAAAMU"]
[Fri Nov 21 16:08:51.818490 2025] [:error] [pid 25521:tid 25524] [client 128.251.11.144:26504] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSAeE_hXnBMilDddn3XvjgAAAME"]
[Fri Nov 21 16:08:52.507488 2025] [:error] [pid 25431:tid 25498] [client 128.251.11.144:26405] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSAeFMklhXxmoIExII07igAAAIs"]
[Fri Nov 21 16:08:53.183877 2025] [:error] [pid 25429:tid 25434] [client 128.251.11.144:25662] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSAeFT4rZbRSr7vu-NOv-AAAAAE"]
[Fri Nov 21 16:08:54.317067 2025] [:error] [pid 25430:tid 25478] [client 128.251.11.144:26513] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSAeFqpnWJcWt_4foXlK1wAAAFI"]
[Fri Nov 21 16:08:55.746710 2025] [:error] [pid 25521:tid 25529] [client 128.251.11.144:26389] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSAeF_hXnBMilDddn3XvlgAAAMY"]
[Fri Nov 21 16:08:57.345836 2025] [:error] [pid 25429:tid 25443] [client 128.251.11.144:26488] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSAeGT4rZbRSr7vu-NOv_AAAAAo"]
[Fri Nov 21 16:08:58.682462 2025] [:error] [pid 25430:tid 25470] [client 128.251.11.144:26394] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSAeGqpnWJcWt_4foXlK3gAAAEo"]
[Fri Nov 21 16:08:59.613559 2025] [:error] [pid 25521:tid 25523] [client 128.251.11.144:26568] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aSAeG_hXnBMilDddn3XvrAAAAMA"]
[Fri Nov 21 16:09:00.454565 2025] [:error] [pid 25554:tid 25576] [client 128.251.11.144:26569] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aSAeHB-NtB-9AzFZrk5b8QAAARI"]
[Fri Nov 21 16:09:01.560480 2025] [:error] [pid 25430:tid 25465] [client 128.251.11.144:26596] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aSAeHapnWJcWt_4foXlK5QAAAEU"]
[Fri Nov 21 16:09:02.334168 2025] [:error] [pid 46939:tid 46949] [client 128.251.11.144:26581] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aSAeHu0OmVoxD4VZ_Zl6wgAAAUc"]
[Fri Nov 21 16:09:03.546942 2025] [:error] [pid 46939:tid 46961] [client 128.251.11.144:26611] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSAeH-0OmVoxD4VZ_Zl6xwAAAVM"]
[Fri Nov 21 16:09:04.578018 2025] [:error] [pid 25431:tid 25491] [client 128.251.11.144:25608] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSAeIMklhXxmoIExII07zAAAAIQ"]
[Fri Nov 21 16:09:05.217783 2025] [:error] [pid 25430:tid 25469] [client 128.251.11.144:26494] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSAeIapnWJcWt_4foXlK8AAAAEk"]
[Fri Nov 21 16:09:06.325903 2025] [:error] [pid 46939:tid 46960] [client 128.251.11.144:26373] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSAeIu0OmVoxD4VZ_Zl6ygAAAVI"]
[Fri Nov 21 16:09:07.500218 2025] [:error] [pid 25521:tid 25524] [client 128.251.11.144:25628] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSAeI_hXnBMilDddn3XvwgAAAME"]
[Fri Nov 21 16:09:09.107781 2025] [:error] [pid 25431:tid 25493] [client 128.251.11.144:26622] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSAeJcklhXxmoIExII072wAAAIY"]
[Fri Nov 21 16:09:09.885782 2025] [:error] [pid 25431:tid 25498] [client 128.251.11.144:25623] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSAeJcklhXxmoIExII073wAAAIs"]
[Fri Nov 21 16:09:11.150348 2025] [:error] [pid 25430:tid 25477] [client 128.251.11.144:26584] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSAeJ6pnWJcWt_4foXlK9gAAAFE"]
[Fri Nov 21 16:09:12.092036 2025] [:error] [pid 25431:tid 25492] [client 128.251.11.144:25630] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSAeKMklhXxmoIExII075wAAAIU"]
[Fri Nov 21 16:09:13.308692 2025] [:error] [pid 46939:tid 46945] [client 128.251.11.144:26368] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSAeKe0OmVoxD4VZ_Zl60QAAAUM"]
[Fri Nov 21 16:09:14.117870 2025] [:error] [pid 25431:tid 25509] [client 128.251.11.144:26553] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSAeKsklhXxmoIExII077gAAAJY"]
[Fri Nov 21 16:09:15.475949 2025] [:error] [pid 25431:tid 25488] [client 128.251.11.144:26525] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSAeK8klhXxmoIExII079gAAAIE"]
[Fri Nov 21 16:09:17.465605 2025] [:error] [pid 25429:tid 25438] [client 128.251.11.144:25659] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSAeLT4rZbRSr7vu-NOwQgAAAAU"]
[Fri Nov 21 16:09:21.125226 2025] [:error] [pid 25521:tid 25540] [client 128.251.11.144:26485] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSAeMfhXnBMilDddn3Xv2wAAANE"]
[Fri Nov 21 16:09:23.246070 2025] [:error] [pid 25554:tid 25580] [client 128.251.11.144:25614] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSAeMx-NtB-9AzFZrk5cOQAAARY"]
[Fri Nov 21 16:09:24.372543 2025] [:error] [pid 46939:tid 46947] [client 128.251.11.144:26425] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSAeNO0OmVoxD4VZ_Zl64AAAAUU"]
[Fri Nov 21 16:09:25.736511 2025] [:error] [pid 25431:tid 25490] [client 128.251.11.144:26467] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSAeNcklhXxmoIExII08EgAAAIM"]
[Fri Nov 21 16:09:28.510164 2025] [:error] [pid 46939:tid 46957] [client 128.251.11.144:26502] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSAeOO0OmVoxD4VZ_Zl66QAAAU8"]
[Fri Nov 21 16:09:30.529086 2025] [:error] [pid 25429:tid 25444] [client 128.251.11.144:26380] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSAeOj4rZbRSr7vu-NOwWQAAAAs"]
[Fri Nov 21 16:09:32.555823 2025] [:error] [pid 25430:tid 25484] [client 128.251.11.144:26566] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aSAePKpnWJcWt_4foXlLLgAAAFg"]
[Fri Nov 21 16:09:34.051391 2025] [:error] [pid 25430:tid 25466] [client 128.251.11.144:25632] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSAePqpnWJcWt_4foXlLMQAAAEY"]
[Fri Nov 21 16:09:35.533118 2025] [:error] [pid 46939:tid 46960] [client 128.251.11.144:26508] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Fri Nov 21 16:09:35.793408 2025] [:error] [pid 46939:tid 46957] [client 128.251.11.144:26508] File does not exist: /usr/local/apache/htdocs/suspended-page/qqq.php
[Fri Nov 21 16:09:36.523223 2025] [:error] [pid 46939:tid 46963] [client 128.251.11.144:26508] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSAeQO0OmVoxD4VZ_Zl6-gAAAVU"]
[Fri Nov 21 16:09:37.741132 2025] [:error] [pid 25554:tid 25561] [client 128.251.11.144:26374] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Nov 21 16:09:40.428916 2025] [:error] [pid 25554:tid 25560] [client 128.251.11.144:26374] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSAeRB-NtB-9AzFZrk5cYAAAAQI"]
[Fri Nov 21 16:09:41.447145 2025] [:error] [pid 46939:tid 46951] [client 128.251.11.144:26420] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSAeRe0OmVoxD4VZ_Zl7BwAAAUk"]
[Fri Nov 21 16:09:42.444188 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26537] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSAeRh-NtB-9AzFZrk5cZwAAAQg"]
[Fri Nov 21 16:09:43.818902 2025] [:error] [pid 25554:tid 25569] [client 128.251.11.144:26427] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSAeRx-NtB-9AzFZrk5cagAAAQs"]
[Fri Nov 21 16:09:45.148472 2025] [:error] [pid 25430:tid 25477] [client 128.251.11.144:26604] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSAeSapnWJcWt_4foXlLPgAAAFE"]
[Fri Nov 21 16:09:46.728865 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26589] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSAeSh-NtB-9AzFZrk5ccgAAAQg"]
[Fri Nov 21 16:09:47.894195 2025] [:error] [pid 46939:tid 46956] [client 128.251.11.144:26402] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSAeS-0OmVoxD4VZ_Zl7EwAAAU4"]
[Fri Nov 21 16:09:49.000980 2025] [:error] [pid 46939:tid 46942] [client 128.251.11.144:26480] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSAeTe0OmVoxD4VZ_Zl7FQAAAUA"]
[Fri Nov 21 16:09:49.771391 2025] [:error] [pid 46939:tid 46965] [client 128.251.11.144:26406] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSAeTe0OmVoxD4VZ_Zl7GwAAAVc"]
[Fri Nov 21 16:09:51.414669 2025] [:error] [pid 46939:tid 46963] [client 128.251.11.144:26557] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSAeT-0OmVoxD4VZ_Zl7HQAAAVU"]
[Fri Nov 21 16:09:52.324098 2025] [:error] [pid 25431:tid 25502] [client 128.251.11.144:26499] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSAeUMklhXxmoIExII08WwAAAI8"]
[Fri Nov 21 16:09:53.389695 2025] [:error] [pid 25431:tid 25493] [client 128.251.11.144:26407] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSAeUcklhXxmoIExII08XQAAAIY"]
[Fri Nov 21 16:09:54.360749 2025] [:error] [pid 25554:tid 25581] [client 128.251.11.144:26439] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAeUh-NtB-9AzFZrk5chwAAARc"]
[Fri Nov 21 16:09:55.493727 2025] [:error] [pid 46939:tid 46955] [client 128.251.11.144:26506] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAeU-0OmVoxD4VZ_Zl7KAAAAU0"]
[Fri Nov 21 16:09:57.509641 2025] [:error] [pid 25429:tid 25455] [client 128.251.11.144:26524] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAeVT4rZbRSr7vu-NOwiwAAABY"]
[Fri Nov 21 16:09:58.502670 2025] [:error] [pid 25429:tid 25445] [client 128.251.11.144:26399] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAeVj4rZbRSr7vu-NOwjwAAAAw"]
[Fri Nov 21 16:10:02.069502 2025] [:error] [pid 25431:tid 25503] [client 128.251.11.144:26550] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSAeWsklhXxmoIExII08dwAAAJA"]
[Fri Nov 21 16:10:04.740714 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26594] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSAeXB-NtB-9AzFZrk5cmgAAAQg"]
[Fri Nov 21 16:10:07.569799 2025] [:error] [pid 25429:tid 25441] [client 128.251.11.144:26561] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSAeXz4rZbRSr7vu-NOwmQAAAAg"]
[Fri Nov 21 16:10:09.109239 2025] [:error] [pid 25554:tid 25579] [client 128.251.11.144:26592] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSAeYR-NtB-9AzFZrk5cpAAAARU"]
[Fri Nov 21 16:10:10.537823 2025] [:error] [pid 25429:tid 25457] [client 128.251.11.144:26503] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSAeYj4rZbRSr7vu-NOwoAAAABg"]
[Fri Nov 21 16:10:11.627494 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26383] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSAeYx-NtB-9AzFZrk5cqAAAAQg"]
[Fri Nov 21 16:10:12.645480 2025] [:error] [pid 25429:tid 25452] [client 128.251.11.144:25647] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSAeZD4rZbRSr7vu-NOwpgAAABM"]
[Fri Nov 21 16:10:13.722223 2025] [:error] [pid 46939:tid 46957] [client 128.251.11.144:26586] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aSAeZe0OmVoxD4VZ_Zl7TgAAAU8"]
[Fri Nov 21 16:10:14.601321 2025] [:error] [pid 46939:tid 46950] [client 128.251.11.144:26599] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSAeZu0OmVoxD4VZ_Zl7XQAAAUg"]
[Fri Nov 21 16:10:15.588514 2025] [:error] [pid 25554:tid 25576] [client 128.251.11.144:26511] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSAeZx-NtB-9AzFZrk5cwQAAARI"]
[Fri Nov 21 16:10:16.267993 2025] [:error] [pid 46939:tid 46953] [client 128.251.11.144:26491] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSAeaO0OmVoxD4VZ_Zl7YwAAAUs"]
[Fri Nov 21 16:10:17.173177 2025] [:error] [pid 25429:tid 25453] [client 128.251.11.144:26536] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aSAeaT4rZbRSr7vu-NOwywAAABQ"]
[Fri Nov 21 16:10:18.227385 2025] [:error] [pid 25521:tid 25528] [client 128.251.11.144:26617] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSAeavhXnBMilDddn3XwNgAAAMU"]
[Fri Nov 21 16:10:19.589985 2025] [:error] [pid 25429:tid 25455] [client 128.251.11.144:26510] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSAeaz4rZbRSr7vu-NOwzAAAABY"]
[Fri Nov 21 16:10:20.401485 2025] [:error] [pid 25429:tid 25450] [client 128.251.11.144:26419] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSAebD4rZbRSr7vu-NOwzgAAABE"]
[Fri Nov 21 16:10:21.507354 2025] [:error] [pid 46939:tid 46958] [client 128.251.11.144:26583] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aSAebe0OmVoxD4VZ_Zl7dAAAAVA"]
[Fri Nov 21 16:10:22.313522 2025] [:error] [pid 25429:tid 25441] [client 128.251.11.144:26600] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSAebj4rZbRSr7vu-NOw0wAAAAg"]
[Fri Nov 21 16:10:23.791407 2025] [:error] [pid 25554:tid 25575] [client 128.251.11.144:26618] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSAebx-NtB-9AzFZrk5c0AAAARE"]
[Fri Nov 21 16:10:24.999884 2025] [:error] [pid 25431:tid 25509] [client 128.251.11.144:25634] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSAecMklhXxmoIExII08qwAAAJY"]
[Fri Nov 21 16:10:26.618132 2025] [:error] [pid 25431:tid 25507] [client 128.251.11.144:26498] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aSAecsklhXxmoIExII08rQAAAJQ"]
[Fri Nov 21 16:10:27.462000 2025] [:error] [pid 25429:tid 25455] [client 128.251.11.144:26613] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aSAecz4rZbRSr7vu-NOw2wAAABY"]
[Fri Nov 21 16:10:28.466719 2025] [:error] [pid 46939:tid 46961] [client 128.251.11.144:26531] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aSAedO0OmVoxD4VZ_Zl7fQAAAVM"]
[Fri Nov 21 16:10:29.509590 2025] [:error] [pid 25430:tid 25464] [client 128.251.11.144:26531] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aSAedapnWJcWt_4foXlLogAAAEQ"]
[Fri Nov 21 16:10:30.773955 2025] [:error] [pid 25554:tid 25575] [client 128.251.11.144:26527] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aSAedh-NtB-9AzFZrk5c3QAAARE"]
[Fri Nov 21 16:10:31.447257 2025] [:error] [pid 25554:tid 25565] [client 128.251.11.144:26577] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aSAedx-NtB-9AzFZrk5c4QAAAQc"]
[Fri Nov 21 16:10:32.269687 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26497] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aSAeeB-NtB-9AzFZrk5c4wAAAQg"]
[Fri Nov 21 16:10:32.851429 2025] [:error] [pid 25429:tid 25448] [client 128.251.11.144:26445] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aSAeeD4rZbRSr7vu-NOw4QAAAA8"]
[Fri Nov 21 16:10:33.953490 2025] [:error] [pid 46939:tid 46946] [client 128.251.11.144:26329] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aSAeee0OmVoxD4VZ_Zl7jgAAAUQ"]
[Fri Nov 21 16:10:34.780751 2025] [:error] [pid 25521:tid 25529] [client 128.251.11.144:26447] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aSAeevhXnBMilDddn3XwVQAAAMY"]
[Fri Nov 21 16:10:35.435923 2025] [:error] [pid 25430:tid 25472] [client 128.251.11.144:25606] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aSAee6pnWJcWt_4foXlLrwAAAEw"]
[Fri Nov 21 16:10:36.185967 2025] [:error] [pid 25430:tid 25465] [client 128.251.11.144:26312] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aSAefKpnWJcWt_4foXlLsgAAAEU"]
[Fri Nov 21 16:10:36.997782 2025] [:error] [pid 25429:tid 25439] [client 128.251.11.144:26415] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aSAefD4rZbRSr7vu-NOw5gAAAAY"]
[Fri Nov 21 16:10:37.846138 2025] [:error] [pid 25431:tid 25487] [client 128.251.11.144:26422] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAefcklhXxmoIExII08xwAAAIA"]
[Fri Nov 21 16:10:38.565043 2025] [:error] [pid 25554:tid 25572] [client 128.251.11.144:26483] [client 128.251.11.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSAefh-NtB-9AzFZrk5c8QAAAQ4"]
[Fri Nov 21 16:10:39.233825 2025] [:error] [pid 25554:tid 25564] [client 128.251.11.144:26620] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSAefx-NtB-9AzFZrk5c8gAAAQY"]
[Fri Nov 21 16:10:39.822987 2025] [:error] [pid 25521:tid 25534] [client 128.251.11.144:26602] [client 128.251.11.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSAef_hXnBMilDddn3XwXwAAAMs"]
[Fri Nov 21 16:10:40.612508 2025] [:error] [pid 25554:tid 25574] [client 128.251.11.144:26580] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Nov 21 16:10:41.223518 2025] [:error] [pid 25554:tid 25567] [client 128.251.11.144:26580] File does not exist: /usr/local/apache/htdocs/suspended-page/bge.php
[Fri Nov 21 16:10:41.480320 2025] [:error] [pid 25554:tid 25560] [client 128.251.11.144:26580] File does not exist: /usr/local/apache/htdocs/suspended-page/ifm.php
[Fri Nov 21 16:10:41.738730 2025] [:error] [pid 25554:tid 25575] [client 128.251.11.144:26580] File does not exist: /usr/local/apache/htdocs/suspended-page/ww5.php
[Fri Nov 21 16:10:41.994862 2025] [:error] [pid 25554:tid 25559] [client 128.251.11.144:26580] File does not exist: /usr/local/apache/htdocs/suspended-page/thxt.php
[Fri Nov 21 16:10:42.291125 2025] [:error] [pid 25554:tid 25579] [client 128.251.11.144:26580] File does not exist: /usr/local/apache/htdocs/suspended-page/kairolin.php
[Fri Nov 21 16:10:42.547547 2025] [:error] [pid 25554:tid 25566] [client 128.251.11.144:26580] File does not exist: /usr/local/apache/htdocs/suspended-page/siln.php
[Fri Nov 21 23:47:12.645598 2025] [:error] [pid 39979:tid 39997] [client 159.65.177.126:44172] [client 159.65.177.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSCJgMBTn4w4bKlE6arIjgAAAY8"]
[Sat Nov 22 03:27:57.536221 2025] [:error] [pid 36794:tid 36832] [client 159.65.177.126:41262] [client 159.65.177.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSC9PQ-ml21Xojf-P4RgUAAAAEA"]
[Sat Nov 22 03:52:55.771726 2025] [:error] [pid 53566:tid 53574] [client 103.167.150.158:59706] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDF8bSHDBkRbwMbd7wkQAAAMY"]
[Sat Nov 22 06:56:48.060928 2025] [:error] [pid 25856:tid 25881] [client 212.116.231.26:51856] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Nov 22 06:56:48.482602 2025] [:error] [pid 25856:tid 25876] [client 212.116.231.26:51856] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Nov 22 06:56:48.903680 2025] [:error] [pid 25856:tid 25882] [client 212.116.231.26:51856] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Nov 22 06:56:49.320975 2025] [:error] [pid 25856:tid 25879] [client 212.116.231.26:51856] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSDuMRsTP0wy94zKUvHnwQAAARU"]
[Sat Nov 22 06:56:50.154029 2025] [:error] [pid 9547:tid 9575] [client 212.116.231.26:45908] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSDuMtClOR5qk7DoMeGl6gAAAVY"]
[Sat Nov 22 06:56:50.965618 2025] [:error] [pid 53477:tid 53490] [client 212.116.231.26:46416] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSDuMn7Lu30Ku9O40aIHJAAAAAk"]
[Sat Nov 22 06:56:51.797404 2025] [:error] [pid 53566:tid 53572] [client 212.116.231.26:46920] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSDuM8bSHDBkRbwMbd5n7gAAAMQ"]
[Sat Nov 22 06:56:52.614770 2025] [:error] [pid 53479:tid 53546] [client 212.116.231.26:47360] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSDuNG6cicFF3Aas-oSh2QAAAIo"]
[Sat Nov 22 06:56:53.446675 2025] [:error] [pid 25856:tid 25877] [client 212.116.231.26:47804] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNRsTP0wy94zKUvHoFgAAARM"]
[Sat Nov 22 06:56:54.291486 2025] [:error] [pid 9547:tid 9559] [client 212.116.231.26:48218] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNtClOR5qk7DoMeGmOAAAAUY"]
[Sat Nov 22 06:56:55.123415 2025] [:error] [pid 25856:tid 25881] [client 212.116.231.26:48582] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNxsTP0wy94zKUvHoJQAAARc"]
[Sat Nov 22 06:56:55.954430 2025] [:error] [pid 53477:tid 53489] [client 212.116.231.26:48888] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuN37Lu30Ku9O40aIHbQAAAAg"]
[Sat Nov 22 06:56:56.765705 2025] [:error] [pid 25856:tid 25882] [client 212.116.231.26:49138] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOBsTP0wy94zKUvHoPQAAARg"]
[Sat Nov 22 07:48:47.155289 2025] [:error] [pid 53477:tid 53487] [client 159.203.89.146:36214] [client 159.203.89.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSD6X37Lu30Ku9O40aIUJAAAAAY"]
[Sat Nov 22 11:28:51.300520 2025] [:error] [pid 25856:tid 25870] [client 159.203.89.146:57564] [client 159.203.89.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSEt8xsTP0wy94zKUvFHfwAAAQw"]
[Sat Nov 22 12:31:00.700942 2025] [:error] [pid 9547:tid 9556] [client 85.215.194.205:57797] [client 85.215.194.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSE8hNClOR5qk7DoMeE6fAAAAUM"]
[Sat Nov 22 12:31:01.220118 2025] [:error] [pid 25856:tid 25867] [client 85.215.194.205:51438] [client 85.215.194.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aSE8hRsTP0wy94zKUvFWQgAAAQk"]
[Sat Nov 22 12:31:01.739584 2025] [:error] [pid 53566:tid 53589] [client 85.215.194.205:49286] [client 85.215.194.205] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSE8hcbSHDBkRbwMbd7RFQAAANU"]
[Sat Nov 22 21:16:12.478274 2025] [:error] [pid 53477:tid 53483] [client 48.210.12.181:30607] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Sat Nov 22 21:16:12.594336 2025] [:error] [pid 53477:tid 53494] [client 48.210.12.181:30607] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Nov 22 21:16:12.741970 2025] [:error] [pid 53477:tid 53501] [client 48.210.12.181:30607] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Sat Nov 22 21:16:12.858989 2025] [:error] [pid 53477:tid 53496] [client 48.210.12.181:30607] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Nov 22 21:16:12.982293 2025] [:error] [pid 53477:tid 53492] [client 48.210.12.181:30607] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 22 21:16:13.122669 2025] [:error] [pid 53477:tid 53500] [client 48.210.12.181:30607] [client 48.210.12.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aSG3nX7Lu30Ku9O40aLr2QAAABM"]
[Sat Nov 22 21:16:13.708178 2025] [:error] [pid 53477:tid 53498] [client 48.210.12.181:30701] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Nov 22 21:16:14.634031 2025] [:error] [pid 53477:tid 53498] [client 48.210.12.181:30701] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Sat Nov 22 21:16:14.750612 2025] [:error] [pid 53477:tid 53482] [client 48.210.12.181:30701] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Nov 22 21:16:14.867450 2025] [:error] [pid 53477:tid 53504] [client 48.210.12.181:30701] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Sat Nov 22 21:16:15.009635 2025] [:error] [pid 53477:tid 53503] [client 48.210.12.181:30701] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Nov 22 21:16:15.133327 2025] [:error] [pid 53477:tid 53495] [client 48.210.12.181:30701] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aSG3n37Lu30Ku9O40aLr4AAAAA4"]
[Sat Nov 22 21:16:15.541366 2025] [:error] [pid 53479:tid 53548] [client 48.210.12.181:30678] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aSG3n26cicFF3Aas-oTHOAAAAIw"]
[Sat Nov 22 21:16:15.927523 2025] [:error] [pid 53478:tid 53519] [client 48.210.12.181:30620] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aSG3nwhUYdXBbQswAdQlAQAAAEo"]
[Sat Nov 22 21:16:16.536530 2025] [:error] [pid 44259:tid 44284] [client 48.210.12.181:30664] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aSG3oHXe1xL-_YOdRmTC3AAAAZY"]
[Sat Nov 22 21:16:16.830707 2025] [:error] [pid 53477:tid 53497] [client 48.210.12.181:30691] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aSG3oH7Lu30Ku9O40aLr4wAAABA"]
[Sat Nov 22 21:16:17.175461 2025] [:error] [pid 9547:tid 9568] [client 48.210.12.181:30595] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aSG3odClOR5qk7DoMeHzLwAAAU8"]
[Sat Nov 22 21:16:17.489395 2025] [:error] [pid 44259:tid 44272] [client 48.210.12.181:30692] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aSG3oXXe1xL-_YOdRmTC4AAAAYo"]
[Sat Nov 22 21:16:17.820915 2025] [:error] [pid 9547:tid 9560] [client 48.210.12.181:30709] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aSG3odClOR5qk7DoMeHzMAAAAUc"]
[Sat Nov 22 21:16:18.208114 2025] [:error] [pid 53479:tid 53541] [client 48.210.12.181:30695] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSG3om6cicFF3Aas-oTHOwAAAIU"]
[Sat Nov 22 21:16:18.501146 2025] [:error] [pid 44259:tid 44283] [client 48.210.12.181:30675] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSG3onXe1xL-_YOdRmTC5gAAAZU"]
[Sat Nov 22 21:16:18.836080 2025] [:error] [pid 44259:tid 44281] [client 48.210.12.181:30677] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSG3onXe1xL-_YOdRmTC5wAAAZM"]
[Sat Nov 22 21:16:19.133582 2025] [:error] [pid 53479:tid 53542] [client 48.210.12.181:30614] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSG3o26cicFF3Aas-oTHPQAAAIY"]
[Sat Nov 22 21:16:19.425823 2025] [:error] [pid 44259:tid 44274] [client 48.210.12.181:30598] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aSG3o3Xe1xL-_YOdRmTC6QAAAYw"]
[Sat Nov 22 21:16:19.818018 2025] [:error] [pid 53477:tid 53496] [client 48.210.12.181:30599] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aSG3o37Lu30Ku9O40aLr5QAAAA8"]
[Sat Nov 22 21:16:20.293581 2025] [:error] [pid 53478:tid 53521] [client 48.210.12.181:30705] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aSG3pAhUYdXBbQswAdQlBQAAAEw"]
[Sat Nov 22 21:16:20.609088 2025] [:error] [pid 53478:tid 53525] [client 48.210.12.181:30666] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aSG3pAhUYdXBbQswAdQlCAAAAFA"]
[Sat Nov 22 21:16:20.898236 2025] [:error] [pid 53477:tid 53492] [client 48.210.12.181:30667] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSG3pH7Lu30Ku9O40aLr5gAAAAs"]
[Sat Nov 22 21:16:21.351411 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:30693] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSG3pXXe1xL-_YOdRmTC7wAAAY4"]
[Sat Nov 22 21:16:21.715756 2025] [:error] [pid 25856:tid 25867] [client 48.210.12.181:30659] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSG3pRsTP0wy94zKUvHsqgAAAQk"]
[Sat Nov 22 21:16:22.069691 2025] [:error] [pid 25856:tid 25861] [client 48.210.12.181:30713] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aSG3phsTP0wy94zKUvHsrQAAAQM"]
[Sat Nov 22 21:16:22.367509 2025] [:error] [pid 53477:tid 53499] [client 48.210.12.181:30704] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aSG3pn7Lu30Ku9O40aLr6wAAABI"]
[Sat Nov 22 21:16:22.686359 2025] [:error] [pid 25856:tid 25866] [client 48.210.12.181:30685] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aSG3phsTP0wy94zKUvHssAAAAQg"]
[Sat Nov 22 21:16:23.137227 2025] [:error] [pid 53479:tid 53556] [client 48.210.12.181:30600] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aSG3p26cicFF3Aas-oTHQQAAAJQ"]
[Sat Nov 22 21:16:23.472259 2025] [:error] [pid 9547:tid 9570] [client 48.210.12.181:30697] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aSG3p9ClOR5qk7DoMeHzNgAAAVE"]
[Sat Nov 22 21:16:23.704973 2025] [:error] [pid 44259:tid 44266] [client 48.210.12.181:30617] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aSG3p3Xe1xL-_YOdRmTC8QAAAYQ"]
[Sat Nov 22 21:16:24.089697 2025] [:error] [pid 53566:tid 53590] [client 48.210.12.181:30660] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aSG3qMbSHDBkRbwMbd5cWAAAANY"]
[Sat Nov 22 21:16:24.415238 2025] [:error] [pid 53566:tid 53582] [client 48.210.12.181:30679] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aSG3qMbSHDBkRbwMbd5cWQAAAM4"]
[Sat Nov 22 21:16:24.684160 2025] [:error] [pid 53479:tid 53537] [client 48.210.12.181:30532] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aSG3qG6cicFF3Aas-oTHQwAAAIE"]
[Sat Nov 22 21:16:25.056560 2025] [:error] [pid 9547:tid 9561] [client 48.210.12.181:30711] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aSG3qdClOR5qk7DoMeHzPAAAAUg"]
[Sat Nov 22 21:16:25.371206 2025] [:error] [pid 53477:tid 53485] [client 48.210.12.181:30605] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aSG3qX7Lu30Ku9O40aLr8AAAAAQ"]
[Sat Nov 22 21:16:26.152483 2025] [:error] [pid 53479:tid 53544] [client 48.210.12.181:30694] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aSG3qm6cicFF3Aas-oTHRgAAAIg"]
[Sat Nov 22 21:16:26.539975 2025] [:error] [pid 53478:tid 53533] [client 48.210.12.181:30706] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aSG3qghUYdXBbQswAdQlDwAAAFg"]
[Sat Nov 22 21:16:26.864731 2025] [:error] [pid 53478:tid 53528] [client 48.210.12.181:30681] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aSG3qghUYdXBbQswAdQlEAAAAFM"]
[Sat Nov 22 21:16:27.128463 2025] [:error] [pid 53478:tid 53514] [client 48.210.12.181:30608] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aSG3qwhUYdXBbQswAdQlEgAAAEU"]
[Sat Nov 22 21:16:27.432577 2025] [:error] [pid 53566:tid 53592] [client 48.210.12.181:30662] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aSG3q8bSHDBkRbwMbd5cXwAAANg"]
[Sat Nov 22 21:16:27.717380 2025] [:error] [pid 53477:tid 53494] [client 48.210.12.181:30703] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aSG3q37Lu30Ku9O40aLr9gAAAA0"]
[Sat Nov 22 21:16:27.978435 2025] [:error] [pid 53478:tid 53513] [client 48.210.12.181:30690] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aSG3qwhUYdXBbQswAdQlFQAAAEQ"]
[Sat Nov 22 21:16:28.348302 2025] [:error] [pid 53566:tid 53570] [client 48.210.12.181:30541] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aSG3rMbSHDBkRbwMbd5cYAAAAMI"]
[Sat Nov 22 21:16:28.620462 2025] [:error] [pid 53478:tid 53510] [client 48.210.12.181:30622] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aSG3rAhUYdXBbQswAdQlFgAAAEE"]
[Sat Nov 22 21:16:28.918261 2025] [:error] [pid 53566:tid 53577] [client 48.210.12.181:30596] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aSG3rMbSHDBkRbwMbd5cYQAAAMk"]
[Sat Nov 22 21:16:29.171820 2025] [:error] [pid 53478:tid 53517] [client 48.210.12.181:30606] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dejavu.php"] [unique_id "aSG3rQhUYdXBbQswAdQlGAAAAEg"]
[Sat Nov 22 21:16:29.458379 2025] [:error] [pid 53478:tid 53522] [client 48.210.12.181:30668] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dejavu.php"] [unique_id "aSG3rQhUYdXBbQswAdQlGgAAAE0"]
[Sat Nov 22 21:16:29.720483 2025] [:error] [pid 9547:tid 9576] [client 48.210.12.181:30669] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dejavu.php"] [unique_id "aSG3rdClOR5qk7DoMeHzRQAAAVc"]
[Sat Nov 22 21:16:30.042940 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30626] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dejavu.php"] [unique_id "aSG3rnXe1xL-_YOdRmTC9wAAAZA"]
[Sat Nov 22 21:16:30.346361 2025] [:error] [pid 9547:tid 9569] [client 48.210.12.181:30619] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aSG3rtClOR5qk7DoMeHzRgAAAVA"]
[Sat Nov 22 21:16:30.606432 2025] [:error] [pid 44259:tid 44270] [client 48.210.12.181:30637] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aSG3rnXe1xL-_YOdRmTC-QAAAYg"]
[Sat Nov 22 21:16:30.881123 2025] [:error] [pid 9547:tid 9570] [client 48.210.12.181:30657] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aSG3rtClOR5qk7DoMeHzSQAAAVE"]
[Sat Nov 22 21:16:31.392923 2025] [:error] [pid 53479:tid 53552] [client 48.210.12.181:30700] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aSG3r26cicFF3Aas-oTHSwAAAJA"]
[Sat Nov 22 21:16:31.708142 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:30592] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSG3r3Xe1xL-_YOdRmTC_AAAAY4"]
[Sat Nov 22 21:16:31.962526 2025] [:error] [pid 53479:tid 53547] [client 48.210.12.181:30718] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSG3r26cicFF3Aas-oTHTQAAAIs"]
[Sat Nov 22 21:16:32.232064 2025] [:error] [pid 44259:tid 44263] [client 48.210.12.181:30597] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSG3sHXe1xL-_YOdRmTDAAAAAYE"]
[Sat Nov 22 21:16:32.566465 2025] [:error] [pid 53479:tid 53540] [client 48.210.12.181:30609] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSG3sG6cicFF3Aas-oTHTgAAAIQ"]
[Sat Nov 22 21:16:32.864370 2025] [:error] [pid 53479:tid 53551] [client 48.210.12.181:30665] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSG3sG6cicFF3Aas-oTHUAAAAI8"]
[Sat Nov 22 21:16:33.136036 2025] [:error] [pid 53479:tid 53553] [client 48.210.12.181:30658] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSG3sW6cicFF3Aas-oTHUgAAAJE"]
[Sat Nov 22 21:16:33.432320 2025] [:error] [pid 53479:tid 53538] [client 48.210.12.181:30716] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSG3sW6cicFF3Aas-oTHVAAAAII"]
[Sat Nov 22 21:16:33.709517 2025] [:error] [pid 9547:tid 9562] [client 48.210.12.181:30712] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aSG3sdClOR5qk7DoMeHzYQAAAUk"]
[Sat Nov 22 21:16:34.137500 2025] [:error] [pid 53566:tid 53573] [client 48.210.12.181:30635] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aSG3ssbSHDBkRbwMbd5cagAAAMU"]
[Sat Nov 22 21:16:34.491296 2025] [:error] [pid 44259:tid 44265] [client 48.210.12.181:30537] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aSG3snXe1xL-_YOdRmTDCAAAAYM"]
[Sat Nov 22 21:16:34.764737 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30638] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aSG3snXe1xL-_YOdRmTDCgAAAZA"]
[Sat Nov 22 21:16:35.138923 2025] [:error] [pid 9547:tid 9564] [client 48.210.12.181:30612] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aSG3s9ClOR5qk7DoMeHzbgAAAUs"]
[Sat Nov 22 21:16:35.403513 2025] [:error] [pid 53478:tid 53510] [client 48.210.12.181:30630] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSG3swhUYdXBbQswAdQlIAAAAEE"]
[Sat Nov 22 21:16:35.912460 2025] [:error] [pid 53479:tid 53550] [client 48.210.12.181:30574] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSG3s26cicFF3Aas-oTHWAAAAI4"]
[Sat Nov 22 21:16:36.198084 2025] [:error] [pid 53566:tid 53569] [client 48.210.12.181:30672] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSG3tMbSHDBkRbwMbd5cbQAAAME"]
[Sat Nov 22 21:16:36.496982 2025] [:error] [pid 53477:tid 53498] [client 48.210.12.181:30627] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSG3tH7Lu30Ku9O40aLr_gAAABE"]
[Sat Nov 22 21:16:36.880785 2025] [:error] [pid 53479:tid 53540] [client 48.210.12.181:30663] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aSG3tG6cicFF3Aas-oTHWwAAAIQ"]
[Sat Nov 22 21:16:37.194466 2025] [:error] [pid 53566:tid 53588] [client 48.210.12.181:30702] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aSG3tcbSHDBkRbwMbd5cbwAAANQ"]
[Sat Nov 22 21:16:37.459986 2025] [:error] [pid 53479:tid 53538] [client 48.210.12.181:30570] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aSG3tW6cicFF3Aas-oTHXgAAAII"]
[Sat Nov 22 21:16:37.719361 2025] [:error] [pid 9547:tid 9556] [client 48.210.12.181:30719] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aSG3tdClOR5qk7DoMeHzggAAAUM"]
[Sat Nov 22 21:16:38.169578 2025] [:error] [pid 53479:tid 53559] [client 48.210.12.181:30623] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aSG3tm6cicFF3Aas-oTHYAAAAJc"]
[Sat Nov 22 21:16:38.452957 2025] [:error] [pid 25856:tid 25870] [client 48.210.12.181:30611] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aSG3thsTP0wy94zKUvHs1QAAAQw"]
[Sat Nov 22 21:16:38.701326 2025] [:error] [pid 44259:tid 44276] [client 48.210.12.181:30602] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aSG3tnXe1xL-_YOdRmTDDgAAAY4"]
[Sat Nov 22 21:16:38.995621 2025] [:error] [pid 44259:tid 44277] [client 48.210.12.181:30674] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aSG3tnXe1xL-_YOdRmTDDwAAAY8"]
[Sat Nov 22 21:16:39.290243 2025] [:error] [pid 53477:tid 53497] [client 48.210.12.181:30642] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSG3t37Lu30Ku9O40aLsBAAAABA"]
[Sat Nov 22 21:16:39.658148 2025] [:error] [pid 53566:tid 53591] [client 48.210.12.181:30613] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSG3t8bSHDBkRbwMbd5ccQAAANc"]
[Sat Nov 22 21:16:39.909719 2025] [:error] [pid 53566:tid 53574] [client 48.210.12.181:30632] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSG3t8bSHDBkRbwMbd5ccgAAAMY"]
[Sat Nov 22 21:16:40.195078 2025] [:error] [pid 53478:tid 53516] [client 48.210.12.181:30588] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aSG3uAhUYdXBbQswAdQlLAAAAEc"]
[Sat Nov 22 21:16:40.677614 2025] [:error] [pid 53477:tid 53494] [client 48.210.12.181:30534] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSG3uH7Lu30Ku9O40aLsBwAAAA0"]
[Sat Nov 22 21:16:40.934050 2025] [:error] [pid 53477:tid 53489] [client 48.210.12.181:30707] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSG3uH7Lu30Ku9O40aLsCAAAAAg"]
[Sat Nov 22 21:16:41.251880 2025] [:error] [pid 25856:tid 25862] [client 48.210.12.181:30624] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSG3uRsTP0wy94zKUvHs1gAAAQQ"]
[Sat Nov 22 21:16:41.749218 2025] [:error] [pid 53478:tid 53530] [client 48.210.12.181:30676] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSG3uQhUYdXBbQswAdQlLgAAAFU"]
[Sat Nov 22 21:16:42.003598 2025] [:error] [pid 53477:tid 53488] [client 48.210.12.181:30604] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSG3un7Lu30Ku9O40aLsCgAAAAc"]
[Sat Nov 22 21:16:42.277264 2025] [:error] [pid 53479:tid 53560] [client 48.210.12.181:30543] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSG3um6cicFF3Aas-oTHZAAAAJg"]
[Sat Nov 22 21:16:42.628069 2025] [:error] [pid 9547:tid 9569] [client 48.210.12.181:30651] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSG3utClOR5qk7DoMeHziAAAAVA"]
[Sat Nov 22 21:16:43.075517 2025] [:error] [pid 53566:tid 53586] [client 48.210.12.181:30689] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSG3u8bSHDBkRbwMbd5ceAAAANI"]
[Sat Nov 22 21:16:43.412767 2025] [:error] [pid 53479:tid 53536] [client 48.210.12.181:30699] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aSG3u26cicFF3Aas-oTHZgAAAIA"]
[Sat Nov 22 21:16:43.684266 2025] [:error] [pid 53479:tid 53552] [client 48.210.12.181:30687] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aSG3u26cicFF3Aas-oTHZwAAAJA"]
[Sat Nov 22 21:16:44.120485 2025] [:error] [pid 53478:tid 53527] [client 48.210.12.181:30715] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aSG3vAhUYdXBbQswAdQlMwAAAFI"]
[Sat Nov 22 21:16:44.390446 2025] [:error] [pid 44259:tid 44262] [client 48.210.12.181:30555] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aSG3vHXe1xL-_YOdRmTDFAAAAYA"]
[Sat Nov 22 21:16:44.646085 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:30618] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aSG3vNClOR5qk7DoMeHzigAAAUY"]
[Sat Nov 22 21:16:44.884890 2025] [:error] [pid 25856:tid 25858] [client 48.210.12.181:30469] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aSG3vBsTP0wy94zKUvHs2wAAAQA"]
[Sat Nov 22 21:16:45.161654 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30488] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aSG3vXXe1xL-_YOdRmTDFQAAAZA"]
[Sat Nov 22 21:16:45.437006 2025] [:error] [pid 44259:tid 44285] [client 48.210.12.181:30633] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aSG3vXXe1xL-_YOdRmTDFgAAAZc"]
[Sat Nov 22 21:16:45.690408 2025] [:error] [pid 44259:tid 44270] [client 48.210.12.181:30649] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cool.php"] [unique_id "aSG3vXXe1xL-_YOdRmTDFwAAAYg"]
[Sat Nov 22 21:16:45.921970 2025] [:error] [pid 53566:tid 53575] [client 48.210.12.181:30565] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cool.php"] [unique_id "aSG3vcbSHDBkRbwMbd5cfAAAAMc"]
[Sat Nov 22 21:16:46.178460 2025] [:error] [pid 44259:tid 44281] [client 48.210.12.181:30546] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cool.php"] [unique_id "aSG3vnXe1xL-_YOdRmTDGAAAAZM"]
[Sat Nov 22 21:16:46.423087 2025] [:error] [pid 53478:tid 53517] [client 48.210.12.181:30654] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cool.php"] [unique_id "aSG3vghUYdXBbQswAdQlOQAAAEg"]
[Sat Nov 22 21:16:46.655494 2025] [:error] [pid 44259:tid 44269] [client 48.210.12.181:30644] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSG3vnXe1xL-_YOdRmTDGgAAAYc"]
[Sat Nov 22 21:16:46.892166 2025] [:error] [pid 44259:tid 44284] [client 48.210.12.181:30631] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSG3vnXe1xL-_YOdRmTDGwAAAZY"]
[Sat Nov 22 21:16:47.124391 2025] [:error] [pid 53477:tid 53494] [client 48.210.12.181:30572] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSG3v37Lu30Ku9O40aLsGAAAAA0"]
[Sat Nov 22 21:16:47.423002 2025] [:error] [pid 9547:tid 9561] [client 48.210.12.181:30708] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSG3v9ClOR5qk7DoMeHzjQAAAUg"]
[Sat Nov 22 21:16:47.687351 2025] [:error] [pid 53566:tid 53569] [client 48.210.12.181:30682] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aSG3v8bSHDBkRbwMbd5cfwAAAME"]
[Sat Nov 22 21:16:47.935348 2025] [:error] [pid 53566:tid 53588] [client 48.210.12.181:30603] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aSG3v8bSHDBkRbwMbd5cgAAAANQ"]
[Sat Nov 22 21:16:48.242969 2025] [:error] [pid 9547:tid 9567] [client 48.210.12.181:30593] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aSG3wNClOR5qk7DoMeHzjgAAAU4"]
[Sat Nov 22 21:16:48.581425 2025] [:error] [pid 53478:tid 53519] [client 48.210.12.181:30544] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aSG3wAhUYdXBbQswAdQlPgAAAEo"]
[Sat Nov 22 21:16:48.985090 2025] [:error] [pid 53478:tid 53528] [client 48.210.12.181:30710] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aSG3wAhUYdXBbQswAdQlQQAAAFM"]
[Sat Nov 22 21:16:49.326027 2025] [:error] [pid 9547:tid 9560] [client 48.210.12.181:30569] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aSG3wdClOR5qk7DoMeHzkAAAAUc"]
[Sat Nov 22 21:16:49.612088 2025] [:error] [pid 9547:tid 9574] [client 48.210.12.181:30717] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aSG3wdClOR5qk7DoMeHzkgAAAVU"]
[Sat Nov 22 21:16:50.140663 2025] [:error] [pid 53479:tid 53545] [client 48.210.12.181:30684] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aSG3wm6cicFF3Aas-oTHbwAAAIk"]
[Sat Nov 22 21:16:50.458775 2025] [:error] [pid 9547:tid 9553] [client 48.210.12.181:30536] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aSG3wtClOR5qk7DoMeHzlQAAAUA"]
[Sat Nov 22 21:16:50.891730 2025] [:error] [pid 9547:tid 9572] [client 48.210.12.181:30686] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aSG3wtClOR5qk7DoMeHzlgAAAVM"]
[Sat Nov 22 21:16:51.268487 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:30553] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aSG3w9ClOR5qk7DoMeHzmAAAAUY"]
[Sat Nov 22 21:16:51.677664 2025] [:error] [pid 53478:tid 53518] [client 48.210.12.181:30567] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aSG3wwhUYdXBbQswAdQlRwAAAEk"]
[Sat Nov 22 21:16:52.054426 2025] [:error] [pid 53477:tid 53498] [client 48.210.12.181:30551] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aSG3xH7Lu30Ku9O40aLsHwAAABE"]
[Sat Nov 22 21:16:52.369126 2025] [:error] [pid 53479:tid 53551] [client 48.210.12.181:30589] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aSG3xG6cicFF3Aas-oTHcgAAAI8"]
[Sat Nov 22 21:16:52.733077 2025] [:error] [pid 53479:tid 53552] [client 48.210.12.181:30584] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aSG3xG6cicFF3Aas-oTHcwAAAJA"]
[Sat Nov 22 21:16:52.991609 2025] [:error] [pid 53479:tid 53553] [client 48.210.12.181:30645] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aSG3xG6cicFF3Aas-oTHdgAAAJE"]
[Sat Nov 22 21:16:53.333071 2025] [:error] [pid 53479:tid 53546] [client 48.210.12.181:30556] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aSG3xW6cicFF3Aas-oTHdwAAAIo"]
[Sat Nov 22 21:16:53.943300 2025] [:error] [pid 9547:tid 9558] [client 48.210.12.181:30634] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aSG3xdClOR5qk7DoMeHzmwAAAUU"]
[Sat Nov 22 21:16:54.279724 2025] [:error] [pid 44259:tid 44277] [client 48.210.12.181:30610] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aSG3xnXe1xL-_YOdRmTDHgAAAY8"]
[Sat Nov 22 21:16:54.816671 2025] [:error] [pid 53479:tid 53548] [client 48.210.12.181:30648] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aSG3xm6cicFF3Aas-oTHegAAAIw"]
[Sat Nov 22 21:16:55.647256 2025] [:error] [pid 9547:tid 9555] [client 48.210.12.181:30530] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aSG3x9ClOR5qk7DoMeHznwAAAUI"]
[Sat Nov 22 21:16:56.060957 2025] [:error] [pid 44259:tid 44282] [client 48.210.12.181:30531] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aSG3yHXe1xL-_YOdRmTDIAAAAZQ"]
[Sat Nov 22 21:16:56.392914 2025] [:error] [pid 44259:tid 44264] [client 48.210.12.181:30652] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aSG3yHXe1xL-_YOdRmTDIgAAAYI"]
[Sat Nov 22 21:16:56.712453 2025] [:error] [pid 53479:tid 53539] [client 48.210.12.181:30714] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aSG3yG6cicFF3Aas-oTHgwAAAIM"]
[Sat Nov 22 21:16:57.068019 2025] [:error] [pid 53478:tid 53521] [client 48.210.12.181:30661] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl.php"] [unique_id "aSG3yQhUYdXBbQswAdQlVgAAAEw"]
[Sat Nov 22 21:16:57.349367 2025] [:error] [pid 53479:tid 53560] [client 48.210.12.181:30547] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl.php"] [unique_id "aSG3yW6cicFF3Aas-oTHhQAAAJg"]
[Sat Nov 22 21:16:57.621821 2025] [:error] [pid 44259:tid 44285] [client 48.210.12.181:30671] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl.php"] [unique_id "aSG3yXXe1xL-_YOdRmTDKQAAAZc"]
[Sat Nov 22 21:16:57.929094 2025] [:error] [pid 44259:tid 44268] [client 48.210.12.181:30564] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl.php"] [unique_id "aSG3yXXe1xL-_YOdRmTDLAAAAYY"]
[Sat Nov 22 21:16:58.203014 2025] [:error] [pid 53477:tid 53484] [client 48.210.12.181:30529] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aSG3yn7Lu30Ku9O40aLsKAAAAAM"]
[Sat Nov 22 21:16:58.505919 2025] [:error] [pid 53477:tid 53502] [client 48.210.12.181:30563] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aSG3yn7Lu30Ku9O40aLsKwAAABU"]
[Sat Nov 22 21:16:58.861877 2025] [:error] [pid 53477:tid 53490] [client 48.210.12.181:30559] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aSG3yn7Lu30Ku9O40aLsLQAAAAk"]
[Sat Nov 22 21:16:59.191668 2025] [:error] [pid 9547:tid 9553] [client 48.210.12.181:30639] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aSG3y9ClOR5qk7DoMeHzogAAAUA"]
[Sat Nov 22 21:16:59.643540 2025] [:error] [pid 53479:tid 53544] [client 48.210.12.181:30465] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pepe.php"] [unique_id "aSG3y26cicFF3Aas-oTHiQAAAIg"]
[Sat Nov 22 21:16:59.935182 2025] [:error] [pid 25856:tid 25860] [client 48.210.12.181:30581] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pepe.php"] [unique_id "aSG3yxsTP0wy94zKUvHs7AAAAQI"]
[Sat Nov 22 21:17:00.274095 2025] [:error] [pid 25856:tid 25869] [client 48.210.12.181:30550] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pepe.php"] [unique_id "aSG3zBsTP0wy94zKUvHs7QAAAQs"]
[Sat Nov 22 21:17:00.548399 2025] [:error] [pid 9547:tid 9566] [client 48.210.12.181:30507] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pepe.php"] [unique_id "aSG3zNClOR5qk7DoMeHzpQAAAU0"]
[Sat Nov 22 21:17:00.789050 2025] [:error] [pid 9547:tid 9557] [client 48.210.12.181:30580] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSG3zNClOR5qk7DoMeHzpgAAAUQ"]
[Sat Nov 22 21:17:01.046274 2025] [:error] [pid 53479:tid 53557] [client 48.210.12.181:30698] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSG3zW6cicFF3Aas-oTHjAAAAJU"]
[Sat Nov 22 21:17:01.348401 2025] [:error] [pid 53566:tid 53591] [client 48.210.12.181:30616] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSG3zcbSHDBkRbwMbd5ckQAAANc"]
[Sat Nov 22 21:17:01.616342 2025] [:error] [pid 53566:tid 53574] [client 48.210.12.181:30557] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSG3zcbSHDBkRbwMbd5ckgAAAMY"]
[Sat Nov 22 21:17:01.856978 2025] [:error] [pid 25856:tid 25872] [client 48.210.12.181:30653] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aSG3zRsTP0wy94zKUvHs8wAAAQ4"]
[Sat Nov 22 21:17:02.094499 2025] [:error] [pid 44259:tid 44269] [client 48.210.12.181:30587] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aSG3znXe1xL-_YOdRmTDSwAAAYc"]
[Sat Nov 22 21:17:02.328999 2025] [:error] [pid 25856:tid 25873] [client 48.210.12.181:30625] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aSG3zhsTP0wy94zKUvHs9QAAAQ8"]
[Sat Nov 22 21:17:02.642748 2025] [:error] [pid 9547:tid 9571] [client 48.210.12.181:30540] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aSG3ztClOR5qk7DoMeHzqwAAAVI"]
[Sat Nov 22 21:17:02.961097 2025] [:error] [pid 53477:tid 53499] [client 48.210.12.181:30561] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSG3zn7Lu30Ku9O40aLsPQAAABI"]
[Sat Nov 22 21:17:03.246721 2025] [:error] [pid 53477:tid 53498] [client 48.210.12.181:30539] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSG3z37Lu30Ku9O40aLsPgAAABE"]
[Sat Nov 22 21:17:03.522152 2025] [:error] [pid 53477:tid 53482] [client 48.210.12.181:30554] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSG3z37Lu30Ku9O40aLsPwAAAAE"]
[Sat Nov 22 21:17:03.795628 2025] [:error] [pid 53477:tid 53504] [client 48.210.12.181:30477] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSG3z37Lu30Ku9O40aLsQAAAABc"]
[Sat Nov 22 21:17:04.179102 2025] [:error] [pid 53478:tid 53533] [client 48.210.12.181:30583] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/faq.php"] [unique_id "aSG30AhUYdXBbQswAdQldgAAAFg"]
[Sat Nov 22 21:17:04.582611 2025] [:error] [pid 53478:tid 53521] [client 48.210.12.181:30535] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/faq.php"] [unique_id "aSG30AhUYdXBbQswAdQleAAAAEw"]
[Sat Nov 22 21:17:04.839081 2025] [:error] [pid 53478:tid 53518] [client 48.210.12.181:30494] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/faq.php"] [unique_id "aSG30AhUYdXBbQswAdQlegAAAEk"]
[Sat Nov 22 21:17:05.138847 2025] [:error] [pid 53479:tid 53541] [client 48.210.12.181:30549] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/faq.php"] [unique_id "aSG30W6cicFF3Aas-oTHkQAAAIU"]
[Sat Nov 22 21:17:05.553823 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30558] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aSG30XXe1xL-_YOdRmTDVgAAAZA"]
[Sat Nov 22 21:17:05.908830 2025] [:error] [pid 9547:tid 9553] [client 48.210.12.181:30566] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aSG30dClOR5qk7DoMeHzsgAAAUA"]
[Sat Nov 22 21:17:06.289181 2025] [:error] [pid 53479:tid 53546] [client 48.210.12.181:30528] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aSG30m6cicFF3Aas-oTHkgAAAIo"]
[Sat Nov 22 21:17:06.569484 2025] [:error] [pid 53479:tid 53538] [client 48.210.12.181:30640] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aSG30m6cicFF3Aas-oTHkwAAAII"]
[Sat Nov 22 21:17:06.827627 2025] [:error] [pid 53566:tid 53586] [client 48.210.12.181:30533] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aSG30sbSHDBkRbwMbd5cmAAAANI"]
[Sat Nov 22 21:17:07.171371 2025] [:error] [pid 53477:tid 53497] [client 48.210.12.181:30483] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aSG3037Lu30Ku9O40aLsSgAAABA"]
[Sat Nov 22 21:17:07.480602 2025] [:error] [pid 53479:tid 53542] [client 48.210.12.181:30629] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aSG3026cicFF3Aas-oTHlAAAAIY"]
[Sat Nov 22 21:17:07.858730 2025] [:error] [pid 53477:tid 53501] [client 48.210.12.181:30647] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aSG3037Lu30Ku9O40aLsTgAAABQ"]
[Sat Nov 22 21:17:08.137917 2025] [:error] [pid 53478:tid 53514] [client 48.210.12.181:30594] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aSG31AhUYdXBbQswAdQlkAAAAEU"]
[Sat Nov 22 21:17:08.385262 2025] [:error] [pid 9547:tid 9559] [client 48.210.12.181:30496] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aSG31NClOR5qk7DoMeHztwAAAUY"]
[Sat Nov 22 21:17:08.678529 2025] [:error] [pid 9547:tid 9570] [client 48.210.12.181:30680] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aSG31NClOR5qk7DoMeHzuAAAAVE"]
[Sat Nov 22 21:17:08.970097 2025] [:error] [pid 44259:tid 44269] [client 48.210.12.181:30487] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aSG31HXe1xL-_YOdRmTDagAAAYc"]
[Sat Nov 22 21:17:09.379406 2025] [:error] [pid 53479:tid 53544] [client 48.210.12.181:30696] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSG31W6cicFF3Aas-oTHlQAAAIg"]
[Sat Nov 22 21:17:09.805100 2025] [:error] [pid 44259:tid 44275] [client 48.210.12.181:30478] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSG31XXe1xL-_YOdRmTDbgAAAY0"]
[Sat Nov 22 21:17:10.452411 2025] [:error] [pid 53478:tid 53510] [client 48.210.12.181:30578] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSG31ghUYdXBbQswAdQlmAAAAEE"]
[Sat Nov 22 21:17:10.808971 2025] [:error] [pid 53479:tid 53550] [client 48.210.12.181:30474] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "aSG31m6cicFF3Aas-oTHlgAAAI4"]
[Sat Nov 22 21:17:11.228434 2025] [:error] [pid 44259:tid 44271] [client 48.210.12.181:30538] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aSG313Xe1xL-_YOdRmTDcwAAAYk"]
[Sat Nov 22 21:17:11.604567 2025] [:error] [pid 53479:tid 53545] [client 48.210.12.181:30571] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aSG3126cicFF3Aas-oTHmAAAAIk"]
[Sat Nov 22 21:17:11.909083 2025] [:error] [pid 53479:tid 53557] [client 48.210.12.181:30628] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aSG3126cicFF3Aas-oTHmgAAAJU"]
[Sat Nov 22 21:17:12.272798 2025] [:error] [pid 53479:tid 53543] [client 48.210.12.181:30636] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aSG32G6cicFF3Aas-oTHmwAAAIc"]
[Sat Nov 22 21:17:12.553856 2025] [:error] [pid 44259:tid 44278] [client 48.210.12.181:30646] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSG32HXe1xL-_YOdRmTDdwAAAZA"]
[Sat Nov 22 21:17:12.907773 2025] [:error] [pid 44259:tid 44267] [client 48.210.12.181:30576] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSG32HXe1xL-_YOdRmTDeQAAAYU"]
[Sat Nov 22 21:17:13.286721 2025] [:error] [pid 9547:tid 9572] [client 48.210.12.181:30673] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSG32dClOR5qk7DoMeHzvgAAAVM"]
[Sat Nov 22 21:17:13.828121 2025] [:error] [pid 53479:tid 53551] [client 48.210.12.181:30655] [client 48.210.12.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-logiin.php"] [unique_id "aSG32W6cicFF3Aas-oTHnAAAAI8"]
[Sun Nov 23 02:29:13.415029 2025] [:error] [pid 39713:tid 39725] [client 216.126.225.91:42786] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSIA-UUgrb325CIAjPqw_QAAAAQ"]
[Sun Nov 23 04:28:41.538884 2025] [:error] [pid 38824:tid 38836] [client 49.205.156.158:64067] [client 49.205.156.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.156.158, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSIc-U8WZjXLvbHTHPeveQAAAMk"]
[Sun Nov 23 04:28:41.546198 2025] [:error] [pid 38824:tid 38836] [client 49.205.156.158:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 23 05:25:33.436621 2025] [:error] [pid 38739:tid 38775] [client 193.37.33.248:56155] [client 193.37.33.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.248, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSIqTQdvEgJm2n2cDmr-fgAAAEY"]
[Sun Nov 23 05:25:33.441006 2025] [:error] [pid 38739:tid 38775] [client 193.37.33.248:56155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 09:19:14.864305 2025] [:error] [pid 44652:tid 44729] [client 54.226.125.235:42206] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSJhEtiQFwsyXQDhwyATqAAAARc"]
[Sun Nov 23 11:10:48.279406 2025] [:error] [pid 38740:tid 38818] [client 165.227.89.248:55735] [client 165.227.89.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.89.248, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSJ7OA13QPZSi6O8umUByAAAAJY"]
[Sun Nov 23 11:10:48.283318 2025] [:error] [pid 38740:tid 38818] [client 165.227.89.248:55735] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 11:57:25.240153 2025] [:error] [pid 38738:tid 38759] [client 172.70.251.242:14272] [client 172.70.251.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSKGJQytc6TL9XavPmNZ6gAAABE"]
[Sun Nov 23 13:16:57.991198 2025] [:error] [pid 44652:tid 44710] [client 54.226.125.235:40926] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSKYydiQFwsyXQDhwyBSSgAAAQQ"]
[Sun Nov 23 16:09:33.006424 2025] [:error] [pid 38739:tid 38784] [client 170.64.150.212:64355] [client 170.64.150.212] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.150.212, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSLBPQdvEgJm2n2cDmrziAAAAE8"]
[Sun Nov 23 16:09:33.010083 2025] [:error] [pid 38739:tid 38784] [client 170.64.150.212:64355] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 23 16:32:36.613090 2025] [:error] [pid 38738:tid 38758] [client 176.65.132.18:41934] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSLGpAytc6TL9XavPmPHsgAAABA"]
[Sun Nov 23 16:46:48.310649 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Nov 23 16:46:48.408199 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Nov 23 16:46:48.505286 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Nov 23 16:46:48.625757 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:46:49.061917 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 16:46:49.173399 2025] [:error] [pid 17534:tid 17545] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Nov 23 16:46:49.319395 2025] [:error] [pid 17534:tid 17555] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Nov 23 16:46:49.426274 2025] [:error] [pid 17534:tid 17545] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 16:46:49.698962 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Nov 23 16:46:50.083400 2025] [:error] [pid 17534:tid 17538] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Nov 23 16:46:50.210282 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Nov 23 16:46:50.305580 2025] [:error] [pid 17534:tid 17545] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 16:46:50.402412 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Nov 23 16:46:50.502847 2025] [:error] [pid 17534:tid 17538] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Nov 23 16:46:50.664333 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Nov 23 16:46:50.791511 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 16:46:50.897483 2025] [:error] [pid 17534:tid 17538] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Nov 23 16:46:51.059230 2025] [:error] [pid 17534:tid 17543] [client 140.99.1.73:23945] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Nov 23 16:46:52.987594 2025] [:error] [pid 17534:tid 17553] [client 140.99.1.73:23945] [client 140.99.1.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aSLJ_HPX9nXBrhgM8swwawAAAdE"]
[Sun Nov 23 16:46:53.233074 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.73:56023] [client 140.99.1.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/uploads/bn_1_1754420677.phtml"] [unique_id "aSLJ_Q13QPZSi6O8umWrEAAAAJg"]
[Sun Nov 23 16:46:53.793246 2025] [:error] [pid 17534:tid 17537] [client 140.99.1.77:25587] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJ_XPX9nXBrhgM8swwiAAAAcE"]
[Sun Nov 23 16:46:53.992299 2025] [:error] [pid 17534:tid 17543] [client 140.99.1.32:58587] [client 140.99.1.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "aSLJ_XPX9nXBrhgM8swwlAAAAcc"]
[Sun Nov 23 16:46:54.766201 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.47:31145] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJ_tiQFwsyXQDhwyC_qAAAAQg"]
[Sun Nov 23 16:46:55.781861 2025] [:error] [pid 17534:tid 17546] [client 140.99.1.49:41531] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 16:46:56.172309 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.49:41531] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLKAHPX9nXBrhgM8swxJQAAAcw"]
[Sun Nov 23 16:46:56.806936 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.71:55635] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Nov 23 16:46:56.933167 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.71:55635] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLKAAytc6TL9XavPmMOqgAAAAo"]
[Sun Nov 23 16:46:57.344274 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.10:55271] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Nov 23 16:46:58.145406 2025] [:error] [pid 38739:tid 38773] [client 140.99.1.10:55271] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLKAgdvEgJm2n2cDmo7qwAAAEQ"]
[Sun Nov 23 16:46:58.497394 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.37:38583] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLKAnPX9nXBrhgM8swxuQAAAdI"]
[Sun Nov 23 16:46:58.807355 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.74:51495] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLKAtiQFwsyXQDhwyDACQAAAQM"]
[Sun Nov 23 16:46:59.003496 2025] [:error] [pid 16066:tid 16076] [client 140.99.1.10:59165] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLKA_q-c47Q5mW5E9F9ugAAAYc"]
[Sun Nov 23 16:46:59.297415 2025] [:error] [pid 17534:tid 17559] [client 140.99.1.62:54361] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLKA3PX9nXBrhgM8swx5wAAAdc"]
[Sun Nov 23 16:46:59.497662 2025] [:error] [pid 17534:tid 17539] [client 140.99.1.49:64453] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLKA3PX9nXBrhgM8swx-AAAAcM"]
[Sun Nov 23 16:47:00.091362 2025] [:error] [pid 17534:tid 17555] [client 140.99.1.38:53289] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLKBHPX9nXBrhgM8swyFAAAAdM"]
[Sun Nov 23 16:47:00.416665 2025] [:error] [pid 17534:tid 17557] [client 140.99.1.71:37437] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Nov 23 16:47:00.528309 2025] [:error] [pid 17534:tid 17537] [client 140.99.1.71:37437] [client 140.99.1.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aSLKBHPX9nXBrhgM8swyKgAAAcE"]
[Sun Nov 23 16:47:01.261436 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.39:31567] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aSLKBdiQFwsyXQDhwyDAOQAAAQE"]
[Sun Nov 23 16:47:02.793387 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.11:61289] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLKBtiQFwsyXQDhwyDAVgAAARQ"]
[Sun Nov 23 16:47:04.156413 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.6:65535] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLKCPq-c47Q5mW5E9F-DwAAAYE"]
[Sun Nov 23 16:47:04.382082 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.70:44823] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Nov 23 16:47:04.473480 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.70:44823] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLKCHPX9nXBrhgM8swzUgAAAcw"]
[Sun Nov 23 16:47:04.719693 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.32:20825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Nov 23 16:47:05.084171 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.32:20825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Nov 23 16:47:05.579411 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.32:20825] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLKCdiQFwsyXQDhwyDAfAAAAQc"]
[Sun Nov 23 16:47:05.763283 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.17:27211] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Nov 23 16:47:05.866092 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.17:27211] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLKCdiQFwsyXQDhwyDAgAAAAQ4"]
[Sun Nov 23 16:47:06.186504 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.24:25061] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Nov 23 16:47:06.410286 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.24:25061] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLKCk8WZjXLvbHTHPfGIAAAAMQ"]
[Sun Nov 23 16:47:06.872698 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.46:38645] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLKCgdvEgJm2n2cDmo8XAAAAEg"]
[Sun Nov 23 16:47:07.265973 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.17:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Nov 23 16:47:07.697269 2025] [:error] [pid 16066:tid 16077] [client 140.99.1.17:37067] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Nov 23 16:47:07.972390 2025] [:error] [pid 16066:tid 16074] [client 140.99.1.17:37067] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLKC_q-c47Q5mW5E9F-TQAAAYU"]
[Sun Nov 23 16:47:08.290863 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.13:56625] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLKDPq-c47Q5mW5E9F-UgAAAZE"]
[Sun Nov 23 16:47:08.672346 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.63:55111] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLKDNiQFwsyXQDhwyDArwAAARc"]
[Sun Nov 23 16:47:09.099054 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.37:43623] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLKDfq-c47Q5mW5E9F-YQAAAYE"]
[Sun Nov 23 16:47:09.343583 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.67:34857] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLKDdiQFwsyXQDhwyDAtwAAAQw"]
[Sun Nov 23 16:47:09.781028 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.32:34821] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Nov 23 16:47:09.876642 2025] [:error] [pid 14602:tid 14643] [client 140.99.1.32:34821] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLKDR-I77jdD81pU-mqJgAAAVY"]
[Sun Nov 23 16:47:10.105153 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.52:65009] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLKDtiQFwsyXQDhwyDAywAAAQc"]
[Sun Nov 23 16:47:10.384069 2025] [:error] [pid 16066:tid 16071] [client 140.99.1.30:34959] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLKDvq-c47Q5mW5E9F-eAAAAYI"]
[Sun Nov 23 16:47:10.975611 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.65:40079] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Nov 23 16:47:11.270084 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.65:40079] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Nov 23 16:47:11.991463 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.65:40079] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLKD08WZjXLvbHTHPfGdQAAAME"]
[Sun Nov 23 16:47:12.610178 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.78:57195] [client 140.99.1.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.78, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLKEAdvEgJm2n2cDmo9AQAAAFQ"]
[Sun Nov 23 16:47:12.733761 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.78:57195] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 23 16:47:13.468152 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.78:57195] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Nov 23 16:47:13.582675 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.78:57195] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Nov 23 16:47:14.132161 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.78:57195] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLKEgdvEgJm2n2cDmo9QgAAAEA"]
[Sun Nov 23 16:47:14.594172 2025] [:error] [pid 16066:tid 16081] [client 140.99.1.11:26347] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Nov 23 16:47:14.777588 2025] [:error] [pid 16066:tid 16078] [client 140.99.1.11:26347] [client 140.99.1.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.11, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLKEvq-c47Q5mW5E9F-2AAAAYk"]
[Sun Nov 23 16:47:15.046236 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.11:26347] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLKE_q-c47Q5mW5E9F-4wAAAZE"]
[Sun Nov 23 16:47:24.918136 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.32:22781] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Nov 23 16:47:25.293455 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.32:22781] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Nov 23 16:47:25.513284 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.32:22781] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLKHQdvEgJm2n2cDmo-qgAAAFY"]
[Sun Nov 23 16:47:25.750559 2025] [:error] [pid 14602:tid 14640] [client 140.99.1.13:58331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Nov 23 16:47:26.131015 2025] [:error] [pid 14602:tid 14633] [client 140.99.1.13:58331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Nov 23 16:47:26.380613 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.13:58331] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Nov 23 16:47:26.655078 2025] [:error] [pid 14602:tid 14627] [client 140.99.1.13:58331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Nov 23 16:47:26.818612 2025] [:error] [pid 14602:tid 14637] [client 140.99.1.13:58331] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLKHh-I77jdD81pU-msDQAAAVA"]
[Sun Nov 23 16:47:27.058329 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.8:36367] [client 140.99.1.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aSLKHwytc6TL9XavPmMRDAAAAAk"]
[Sun Nov 23 16:47:27.315531 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.65:21075] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Nov 23 16:47:27.498202 2025] [:error] [pid 38739:tid 38779] [client 140.99.1.65:21075] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 16:47:27.681957 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.65:21075] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLKHwdvEgJm2n2cDmo-6AAAAEE"]
[Sun Nov 23 16:47:28.119744 2025] [:error] [pid 17534:tid 17557] [client 140.99.1.28:40825] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Nov 23 16:47:28.508428 2025] [:error] [pid 17534:tid 17537] [client 140.99.1.28:40825] [client 140.99.1.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.28, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLKIHPX9nXBrhgM8sw2jwAAAcE"]
[Sun Nov 23 16:47:28.638868 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.28:40825] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLKIHPX9nXBrhgM8sw2lwAAAdI"]
[Sun Nov 23 16:47:30.452026 2025] [:error] [pid 14602:tid 14639] [client 140.99.1.44:27561] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Nov 23 16:48:03.602367 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.47:28923] [client 140.99.1.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/cakil/"] [unique_id "aSLKQ08WZjXLvbHTHPfJgQAAAMo"]
[Sun Nov 23 16:48:09.388093 2025] [:error] [pid 17534:tid 17546] [client 140.99.1.74:54637] [client 140.99.1.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aSLKSXPX9nXBrhgM8sw8RwAAAco"]
[Sun Nov 23 19:02:30.131484 2025] [:error] [pid 14602:tid 14632] [client 174.85.231.170:43062] [client 174.85.231.170] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSLpxh-I77jdD81pU-nZbwAAAUs"], referer: https://www.google.com
[Sun Nov 23 19:02:36.905077 2025] [:error] [pid 38740:tid 38800] [client 174.85.231.170:43237] [client 174.85.231.170] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSLpzA13QPZSi6O8umXexQAAAIQ"]
[Sun Nov 23 19:02:36.905459 2025] [:error] [pid 38740:tid 38800] [client 174.85.231.170:43237] [client 174.85.231.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 174.85.231.170, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSLpzA13QPZSi6O8umXexQAAAIQ"]
[Sun Nov 23 19:02:36.909780 2025] [:error] [pid 38740:tid 38800] [client 174.85.231.170:43237] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 23 19:02:39.950666 2025] [:error] [pid 44652:tid 44719] [client 174.85.231.170:43334] [client 174.85.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.85.231.170, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSLpz9iQFwsyXQDhwyAAlQAAAQ0"], referer: https://www.google.com
[Sun Nov 23 19:02:39.955067 2025] [:error] [pid 44652:tid 44719] [client 174.85.231.170:43334] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Sun Nov 23 19:02:44.995488 2025] [:error] [pid 14602:tid 14637] [client 174.85.231.170:43449] [client 174.85.231.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 174.85.231.170, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSLp1B-I77jdD81pU-nZdgAAAVA"], referer: https://www.google.com
[Sun Nov 23 19:02:44.999686 2025] [:error] [pid 14602:tid 14637] [client 174.85.231.170:43449] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Sun Nov 23 19:22:21.076977 2025] [:error] [pid 38739:tid 38776] [client 167.71.203.246:54204] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Nov 24 00:45:15.491635 2025] [:error] [pid 1589:tid 1605] [client 176.65.132.18:40920] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSM6G4I2fvripjU0EatsEgAAAU4"]
[Mon Nov 24 01:26:03.780246 2025] [:error] [pid 1454:tid 1529] [client 167.71.203.246:64600] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Mon Nov 24 02:03:56.705887 2025] [:error] [pid 1453:tid 1496] [client 172.70.246.132:13754] [client 172.70.246.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSNMjBUBCt7LU0bO_GBaEAAAAIs"]
[Mon Nov 24 07:23:52.632328 2025] [:error] [pid 12999:tid 13016] [client 73.240.95.2:38146] [client 73.240.95.2] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aSOXiFtj_teEYJ8vu7E_bwAAAM0"], referer: https://www.google.com
[Mon Nov 24 07:23:58.130080 2025] [:error] [pid 12999:tid 13016] [client 73.240.95.2:60570] [client 73.240.95.2] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOXjltj_teEYJ8vu7E_fgAAAM0"]
[Mon Nov 24 07:23:58.130452 2025] [:error] [pid 12999:tid 13016] [client 73.240.95.2:60570] [client 73.240.95.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 73.240.95.2, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSOXjltj_teEYJ8vu7E_fgAAAM0"]
[Mon Nov 24 07:23:58.135230 2025] [:error] [pid 12999:tid 13016] [client 73.240.95.2:60570] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Nov 24 07:24:01.575592 2025] [:error] [pid 12912:tid 12973] [client 73.240.95.2:60584] [client 73.240.95.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 73.240.95.2, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSOXkZMj_Lgt36UonYLlZQAAAIQ"], referer: https://www.google.com
[Mon Nov 24 07:24:01.582043 2025] [:error] [pid 12912:tid 12973] [client 73.240.95.2:60584] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Mon Nov 24 07:24:05.179930 2025] [:error] [pid 12911:tid 12960] [client 73.240.95.2:38888] [client 73.240.95.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 73.240.95.2, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSOXlUDMbk9464jnIl4PhwAAAFI"], referer: https://www.google.com
[Mon Nov 24 07:24:05.184842 2025] [:error] [pid 12911:tid 12960] [client 73.240.95.2:38888] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Mon Nov 24 08:16:42.418095 2025] [:error] [pid 48599:tid 48617] [client 103.65.237.124:50126] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aSOj6pzvu6PDJiRKE3Ko8QAAAY4"]
[Mon Nov 24 08:16:42.749413 2025] [:error] [pid 48601:tid 48662] [client 103.65.237.124:53390] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSOj6oMM4MaVTk74-AYmaQAAAgU"]
[Mon Nov 24 15:34:13.918365 2025] [:error] [pid 9630:tid 9654] [client 107.21.82.254:57024] [client 107.21.82.254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSQKdSrSgUgPGkizt2rV5AAAAFY"]
[Mon Nov 24 21:45:37.095529 2025] [:error] [pid 48600:tid 48638] [client 193.32.126.212:52640] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSRhgftOzSUAQvWVjBeh-wAAAcg"]
[Mon Nov 24 21:45:37.588937 2025] [:error] [pid 16516:tid 16541] [client 193.32.126.212:53456] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgfqZbniwaNwL8XkMYwAAARY"]
[Tue Nov 25 00:15:42.005828 2025] [:error] [pid 49900:tid 49908] [client 43.130.34.74:53082] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSSErjCyPLrvg06aorlqnAAAAAY"]
[Tue Nov 25 01:17:10.411137 2025] [:error] [pid 48601:tid 48659] [client 35.199.47.178:59739] [client 35.199.47.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.199.47.178, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSTFoMM4MaVTk74-AYQqQAAAgI"]
[Tue Nov 25 01:17:10.414842 2025] [:error] [pid 48601:tid 48659] [client 35.199.47.178:59739] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 25 01:17:13.132562 2025] [:error] [pid 48601:tid 48677] [client 35.199.47.178:59739] [client 35.199.47.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSSTGYMM4MaVTk74-AYQuAAAAhQ"]
[Tue Nov 25 01:17:13.850174 2025] [:error] [pid 48601:tid 48676] [client 35.199.47.178:57975] [client 35.199.47.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSSTGYMM4MaVTk74-AYQuwAAAhM"]
[Tue Nov 25 01:17:14.497504 2025] [:error] [pid 48599:tid 48614] [client 35.199.47.178:52901] [client 35.199.47.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSSTGpzvu6PDJiRKE3J0zgAAAYs"]
[Tue Nov 25 01:17:15.254080 2025] [:error] [pid 9630:tid 9633] [client 35.199.47.178:60243] [client 35.199.47.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSSTGyrSgUgPGkizt2ptjQAAAEE"]
[Tue Nov 25 01:17:15.787996 2025] [:error] [pid 16441:tid 16463] [client 35.199.47.178:59547] [client 35.199.47.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSSTG4q_bc5MOa9HflncpgAAAJM"]
[Tue Nov 25 01:17:16.435952 2025] [:error] [pid 48688:tid 48699] [client 35.199.47.178:58159] [client 35.199.47.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSSTHBm2q1FkzLam7A30oAAAAkc"]
[Tue Nov 25 01:21:48.383633 2025] [:error] [pid 16441:tid 16465] [client 49.205.240.214:19240] [client 49.205.240.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.205.240.214, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSULIq_bc5MOa9Hflnd-QAAAJU"]
[Tue Nov 25 01:21:48.388648 2025] [:error] [pid 16441:tid 16465] [client 49.205.240.214:19240] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 25 01:21:54.954757 2025] [:error] [pid 16516:tid 16540] [client 176.123.16.229:4916] [client 176.123.16.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.123.16.229, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSSUMvqZbniwaNwL8Xks0gAAARU"]
[Tue Nov 25 01:21:54.959782 2025] [:error] [pid 16516:tid 16540] [client 176.123.16.229:4916] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 25 02:51:05.705030 2025] [:error] [pid 48688:tid 48715] [client 110.166.71.39:36165] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSSpGRm2q1FkzLam7A0ESAAAAlc"]
[Tue Nov 25 03:35:17.962221 2025] [:error] [pid 33474:tid 33480] [client 104.234.32.32:31429] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Nov 25 03:35:19.270855 2025] [:error] [pid 33474:tid 33488] [client 104.234.32.32:31429] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Nov 25 03:35:19.955265 2025] [:error] [pid 33474:tid 33501] [client 104.234.32.32:31429] [client 104.234.32.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSSzd7RfYt5X3GZs3zaewQAAARg"]
[Tue Nov 25 03:35:21.354483 2025] [:error] [pid 30879:tid 30881] [client 104.234.32.34:57579] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Nov 25 03:35:21.989580 2025] [:error] [pid 30879:tid 30896] [client 104.234.32.34:57579] [client 104.234.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSSzebe3-juUJ90ov0hUvwAAAM8"]
[Tue Nov 25 03:35:23.459750 2025] [:error] [pid 33474:tid 33484] [client 104.234.32.39:27857] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Tue Nov 25 03:35:24.783900 2025] [:error] [pid 33474:tid 33478] [client 104.234.32.39:27857] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 25 03:35:25.475116 2025] [:error] [pid 33474:tid 33493] [client 104.234.32.39:27857] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Nov 25 03:35:26.176888 2025] [:error] [pid 33474:tid 33501] [client 104.234.32.39:27857] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Nov 25 03:35:27.564935 2025] [:error] [pid 33474:tid 33490] [client 104.234.32.39:27857] [client 104.234.32.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSSzf7RfYt5X3GZs3zae1wAAAQ0"]
[Tue Nov 25 03:35:30.264692 2025] [:error] [pid 30783:tid 30869] [client 104.234.32.28:57603] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Nov 25 03:35:30.993490 2025] [:error] [pid 30783:tid 30854] [client 104.234.32.28:57603] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue Nov 25 03:35:31.772785 2025] [:error] [pid 30783:tid 30849] [client 104.234.32.28:57603] [client 104.234.32.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSSzg93oFLZhRUZW1vzrUAAAAIM"]
[Tue Nov 25 03:35:33.165118 2025] [:error] [pid 33474:tid 33499] [client 104.234.32.42:31347] [client 104.234.32.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSSzhbRfYt5X3GZs3zae2gAAARY"]
[Tue Nov 25 03:35:34.571578 2025] [:error] [pid 30879:tid 30892] [client 104.234.32.24:48667] [client 104.234.32.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSSzhre3-juUJ90ov0hUwgAAAMs"]
[Tue Nov 25 03:35:36.669254 2025] [:error] [pid 30879:tid 30899] [client 104.234.32.30:54885] [client 104.234.32.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSSziLe3-juUJ90ov0hUxQAAANI"]
[Tue Nov 25 03:35:38.769606 2025] [:error] [pid 33474:tid 33496] [client 181.215.65.89:42401] [client 181.215.65.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSSzirRfYt5X3GZs3zae3wAAARM"]
[Tue Nov 25 03:35:41.366639 2025] [:error] [pid 33474:tid 33500] [client 181.215.65.86:30399] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Nov 25 03:35:43.286964 2025] [:error] [pid 33474:tid 33480] [client 181.215.65.86:30399] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue Nov 25 03:35:43.974888 2025] [:error] [pid 33474:tid 33486] [client 181.215.65.86:30399] [client 181.215.65.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSSzj7RfYt5X3GZs3zae7gAAAQk"]
[Tue Nov 25 03:35:46.454992 2025] [:error] [pid 30783:tid 30869] [client 104.234.32.34:47453] [client 104.234.32.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSSzkt3oFLZhRUZW1vzrXAAAAJc"]
[Tue Nov 25 03:35:48.579712 2025] [:error] [pid 33474:tid 33497] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Tue Nov 25 03:35:49.282043 2025] [:error] [pid 33474:tid 33482] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Tue Nov 25 03:35:49.977461 2025] [:error] [pid 33474:tid 33493] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Nov 25 03:35:50.586789 2025] [:error] [pid 33474:tid 33489] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Nov 25 03:35:51.264033 2025] [:error] [pid 33474:tid 33480] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Tue Nov 25 03:35:51.974987 2025] [:error] [pid 33474:tid 33483] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Tue Nov 25 03:35:52.668865 2025] [:error] [pid 33474:tid 33492] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Tue Nov 25 03:35:53.292318 2025] [:error] [pid 33474:tid 33496] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Nov 25 03:35:53.990800 2025] [:error] [pid 33474:tid 33477] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Nov 25 03:35:54.690070 2025] [:error] [pid 33474:tid 33494] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Nov 25 03:35:55.368608 2025] [:error] [pid 33474:tid 33501] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Tue Nov 25 03:35:56.067135 2025] [:error] [pid 33474:tid 33481] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Nov 25 03:35:56.770716 2025] [:error] [pid 33474:tid 33499] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Nov 25 03:35:57.468683 2025] [:error] [pid 33474:tid 33491] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Tue Nov 25 03:35:58.167130 2025] [:error] [pid 33474:tid 33498] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Tue Nov 25 03:35:58.860462 2025] [:error] [pid 33474:tid 33487] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Nov 25 03:35:59.492830 2025] [:error] [pid 33474:tid 33480] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Tue Nov 25 03:36:00.083478 2025] [:error] [pid 33474:tid 33484] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue Nov 25 03:36:00.892157 2025] [:error] [pid 33474:tid 33488] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Tue Nov 25 03:36:01.571845 2025] [:error] [pid 33474:tid 33486] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Nov 25 03:36:02.213648 2025] [:error] [pid 33474:tid 33483] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Tue Nov 25 03:36:02.890739 2025] [:error] [pid 33474:tid 33492] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Nov 25 03:36:03.571471 2025] [:error] [pid 33474:tid 33477] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Nov 25 03:36:04.267245 2025] [:error] [pid 33474:tid 33494] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Nov 25 03:36:05.074664 2025] [:error] [pid 33474:tid 33481] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Tue Nov 25 03:36:05.680290 2025] [:error] [pid 33474:tid 33500] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Nov 25 03:36:06.363736 2025] [:error] [pid 33474:tid 33490] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Tue Nov 25 03:36:06.976066 2025] [:error] [pid 33474:tid 33478] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Tue Nov 25 03:36:07.670063 2025] [:error] [pid 33474:tid 33497] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Tue Nov 25 03:36:08.283909 2025] [:error] [pid 33474:tid 33482] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Tue Nov 25 03:36:09.674122 2025] [:error] [pid 33474:tid 33493] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Tue Nov 25 03:36:10.465203 2025] [:error] [pid 33474:tid 33480] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Tue Nov 25 03:36:11.164487 2025] [:error] [pid 33474:tid 33479] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue Nov 25 03:36:11.856522 2025] [:error] [pid 33474:tid 33484] [client 104.234.32.27:44893] [client 104.234.32.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.32.27, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSSzq7RfYt5X3GZs3zafHQAAAQc"]
[Tue Nov 25 03:36:11.860590 2025] [:error] [pid 33474:tid 33484] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 03:36:13.267332 2025] [:error] [pid 33474:tid 33492] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Tue Nov 25 03:36:13.887503 2025] [:error] [pid 33474:tid 33496] [client 104.234.32.27:44893] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Tue Nov 25 03:36:15.271913 2025] [:error] [pid 33474:tid 33477] [client 104.234.32.27:44893] [client 104.234.32.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSSzr7RfYt5X3GZs3zafIQAAAQA"]
[Tue Nov 25 03:36:16.778318 2025] [:error] [pid 33474:tid 33499] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Tue Nov 25 03:36:17.462893 2025] [:error] [pid 33474:tid 33500] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Nov 25 03:36:18.780807 2025] [:error] [pid 33474:tid 33490] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Tue Nov 25 03:36:19.480633 2025] [:error] [pid 33474:tid 33478] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Tue Nov 25 03:36:20.195084 2025] [:error] [pid 33474:tid 33495] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Tue Nov 25 03:36:20.862318 2025] [:error] [pid 33474:tid 33497] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Tue Nov 25 03:36:21.484687 2025] [:error] [pid 33474:tid 33498] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Tue Nov 25 03:36:22.189221 2025] [:error] [pid 33474:tid 33482] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Tue Nov 25 03:36:22.885878 2025] [:error] [pid 33474:tid 33493] [client 181.215.65.81:55129] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Tue Nov 25 03:36:24.252490 2025] [:error] [pid 33474:tid 33479] [client 181.215.65.81:55129] [client 181.215.65.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSSzuLRfYt5X3GZs3zafMAAAAQI"]
[Tue Nov 25 03:36:26.565140 2025] [:error] [pid 30781:tid 30832] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Tue Nov 25 03:36:27.262598 2025] [:error] [pid 30781:tid 30831] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Tue Nov 25 03:36:30.844741 2025] [:error] [pid 30781:tid 30836] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Nov 25 03:36:31.490914 2025] [:error] [pid 30781:tid 30837] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Tue Nov 25 03:36:33.268361 2025] [:error] [pid 30781:tid 30834] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Tue Nov 25 03:36:33.887651 2025] [:error] [pid 30781:tid 30843] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Tue Nov 25 03:36:34.574984 2025] [:error] [pid 30781:tid 30826] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Tue Nov 25 03:36:37.862999 2025] [:error] [pid 30781:tid 30822] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Tue Nov 25 03:36:38.573802 2025] [:error] [pid 30781:tid 30828] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Tue Nov 25 03:36:39.278019 2025] [:error] [pid 30781:tid 30823] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Tue Nov 25 03:36:39.970438 2025] [:error] [pid 30781:tid 30831] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Tue Nov 25 03:36:40.582997 2025] [:error] [pid 30781:tid 30833] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Tue Nov 25 03:36:41.294627 2025] [:error] [pid 30781:tid 30839] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Tue Nov 25 03:36:41.968882 2025] [:error] [pid 30781:tid 30840] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Tue Nov 25 03:36:43.283482 2025] [:error] [pid 30781:tid 30836] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Tue Nov 25 03:36:43.985865 2025] [:error] [pid 30781:tid 30837] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Tue Nov 25 03:36:45.292568 2025] [:error] [pid 30781:tid 30835] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Tue Nov 25 03:36:45.976992 2025] [:error] [pid 30781:tid 30843] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Tue Nov 25 03:36:46.594939 2025] [:error] [pid 30781:tid 30827] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Tue Nov 25 03:36:47.283113 2025] [:error] [pid 30781:tid 30829] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Tue Nov 25 03:36:47.964974 2025] [:error] [pid 30781:tid 30822] [client 104.234.32.45:60813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Tue Nov 25 03:36:48.578788 2025] [:error] [pid 30781:tid 30823] [client 104.234.32.45:60813] [client 104.234.32.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSSz0OeJDTiMacdh4w2qBgAAAEQ"]
[Tue Nov 25 03:53:14.905275 2025] [:error] [pid 34695:tid 34756] [client 3.86.214.214:60180] [client 3.86.214.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSS3qiwTx_MzUP3xQvkdigAAAFQ"]
[Tue Nov 25 08:03:54.292335 2025] [:error] [pid 14077:tid 14113] [client 43.166.224.244:45988] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSTyahG9n7UHEkwDTyh4wwAAAEM"]
[Tue Nov 25 08:43:18.159904 2025] [:error] [pid 14077:tid 14133] [client 213.21.239.4:43012] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/assets../.git/config"] [unique_id "aST7phG9n7UHEkwDTyiJ_gAAAFc"]
[Tue Nov 25 08:43:18.168321 2025] [:error] [pid 1103:tid 1111] [client 213.21.239.4:43116] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/;/.git/config"] [unique_id "aST7po0LETdqOlq63sQ8-wAAAUI"]
[Tue Nov 25 08:43:18.168404 2025] [:error] [pid 14077:tid 14125] [client 213.21.239.4:43186] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dev/.git/config"] [unique_id "aST7phG9n7UHEkwDTyiKAQAAAE8"]
[Tue Nov 25 08:43:18.169259 2025] [:error] [pid 1103:tid 1130] [client 213.21.239.4:42994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/database/.git/config"] [unique_id "aST7po0LETdqOlq63sQ8_AAAAVU"]
[Tue Nov 25 08:43:18.172083 2025] [:error] [pid 14168:tid 14185] [client 213.21.239.4:43184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/developer/.git/config"] [unique_id "aST7pvR-ZDU0QEgAIIuqOQAAAM4"]
[Tue Nov 25 08:43:18.172978 2025] [:error] [pid 14168:tid 14183] [client 213.21.239.4:43084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.git/config"] [unique_id "aST7pvR-ZDU0QEgAIIuqOgAAAMw"]
[Tue Nov 25 08:43:18.174792 2025] [:error] [pid 14688:tid 14709] [client 213.21.239.4:43196] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/content../.git/config"] [unique_id "aST7pm9vYrBoEsiDniwXgwAAARM"]
[Tue Nov 25 08:43:18.176501 2025] [:error] [pid 14078:tid 14138] [client 213.21.239.4:43086] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.git/config"] [unique_id "aST7ptVXYbb0ii_rVoJ-AAAAAIE"]
[Tue Nov 25 08:43:18.177823 2025] [:error] [pid 14078:tid 14147] [client 213.21.239.4:42990] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.git/config"] [unique_id "aST7ptVXYbb0ii_rVoJ-AQAAAIo"]
[Tue Nov 25 08:43:18.178675 2025] [:error] [pid 14078:tid 14143] [client 213.21.239.4:43034] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices../.git/config"] [unique_id "aST7ptVXYbb0ii_rVoJ-AgAAAIY"]
[Tue Nov 25 08:43:18.179430 2025] [:error] [pid 14078:tid 14155] [client 213.21.239.4:43142] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/static../.git/config"] [unique_id "aST7ptVXYbb0ii_rVoJ-AwAAAJI"]
[Tue Nov 25 08:43:18.181487 2025] [:error] [pid 14688:tid 14708] [client 213.21.239.4:43100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.git/config;.."] [unique_id "aST7pm9vYrBoEsiDniwXhAAAARI"]
[Tue Nov 25 08:43:18.184349 2025] [:error] [pid 14688:tid 14704] [client 213.21.239.4:43082] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.git/%0Aconfig"] [unique_id "aST7pm9vYrBoEsiDniwXhQAAAQ4"]
[Tue Nov 25 08:43:18.184426 2025] [:error] [pid 14078:tid 14141] [client 213.21.239.4:43176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.git/config"] [unique_id "aST7ptVXYbb0ii_rVoJ-BAAAAIQ"]
[Tue Nov 25 08:43:18.184721 2025] [:error] [pid 14688:tid 14706] [client 213.21.239.4:43140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/application/.git/config"] [unique_id "aST7pm9vYrBoEsiDniwXhgAAARA"]
[Tue Nov 25 08:43:18.185392 2025] [:error] [pid 14078:tid 14156] [client 213.21.239.4:43178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/common/.git/config"] [unique_id "aST7ptVXYbb0ii_rVoJ-BQAAAJM"]
[Tue Nov 25 08:43:18.192377 2025] [:error] [pid 14168:tid 14189] [client 213.21.239.4:43208] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/css../.git/config"] [unique_id "aST7pvR-ZDU0QEgAIIuqPQAAANI"]
[Tue Nov 25 08:43:18.192399 2025] [:error] [pid 14168:tid 14171] [client 213.21.239.4:43148] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.git/config;"] [unique_id "aST7pvR-ZDU0QEgAIIuqPAAAAMA"]
[Tue Nov 25 08:43:18.193065 2025] [:error] [pid 14168:tid 14192] [client 213.21.239.4:43172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backup/.git/config"] [unique_id "aST7pvR-ZDU0QEgAIIuqPgAAANU"]
[Tue Nov 25 08:43:18.193564 2025] [:error] [pid 14688:tid 14698] [client 213.21.239.4:43024] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/..;/.git/config"] [unique_id "aST7pm9vYrBoEsiDniwXhwAAAQg"]
[Tue Nov 25 08:43:20.383411 2025] [:error] [pid 14077:tid 14119] [client 213.21.239.4:43284] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/config;.."] [unique_id "aST7qBG9n7UHEkwDTyiKBwAAAEk"]
[Tue Nov 25 08:43:20.383416 2025] [:error] [pid 1103:tid 1114] [client 213.21.239.4:43252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/config;"] [unique_id "aST7qI0LETdqOlq63sQ9AAAAAUU"]
[Tue Nov 25 08:43:20.386947 2025] [:error] [pid 14076:tid 14104] [client 213.21.239.4:43350] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/message-api/.git/config"] [unique_id "aST7qHsB4Gz6Qw-pvBs5ogAAABc"]
[Tue Nov 25 08:43:20.387017 2025] [:error] [pid 14076:tid 14084] [client 213.21.239.4:43344] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aST7qHsB4Gz6Qw-pvBs5owAAAAM"]
[Tue Nov 25 08:43:20.391518 2025] [:error] [pid 14076:tid 14100] [client 213.21.239.4:43388] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/;/.git/config"] [unique_id "aST7qHsB4Gz6Qw-pvBs5pAAAABM"]
[Tue Nov 25 08:43:20.391805 2025] [:error] [pid 1103:tid 1126] [client 213.21.239.4:43384] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/%0Aconfig"] [unique_id "aST7qI0LETdqOlq63sQ9AQAAAVE"]
[Tue Nov 25 08:43:20.392354 2025] [:error] [pid 1103:tid 1117] [client 213.21.239.4:43220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/config"] [unique_id "aST7qI0LETdqOlq63sQ9AgAAAUg"]
[Tue Nov 25 08:43:20.392526 2025] [:error] [pid 14077:tid 14118] [client 213.21.239.4:43402] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au../.git/config"] [unique_id "aST7qBG9n7UHEkwDTyiKCQAAAEg"]
[Tue Nov 25 08:43:20.393224 2025] [:error] [pid 1103:tid 1129] [client 213.21.239.4:43242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aST7qI0LETdqOlq63sQ9AwAAAVQ"]
[Tue Nov 25 08:43:20.395366 2025] [:error] [pid 14688:tid 14703] [client 213.21.239.4:43274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config;.."] [unique_id "aST7qG9vYrBoEsiDniwXiwAAAQ0"]
[Tue Nov 25 08:43:20.395981 2025] [:error] [pid 1103:tid 1119] [client 213.21.239.4:43428] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/js../.git/config"] [unique_id "aST7qI0LETdqOlq63sQ9BQAAAUo"]
[Tue Nov 25 08:43:20.395979 2025] [:error] [pid 1103:tid 1124] [client 213.21.239.4:43426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/img../.git/config"] [unique_id "aST7qI0LETdqOlq63sQ9BAAAAU8"]
[Tue Nov 25 08:43:20.399406 2025] [:error] [pid 1103:tid 1113] [client 213.21.239.4:43300] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/m/.git/config"] [unique_id "aST7qI0LETdqOlq63sQ9BgAAAUQ"]
[Tue Nov 25 08:43:20.403186 2025] [:error] [pid 14168:tid 14184] [client 213.21.239.4:43380] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/;/.git/config"] [unique_id "aST7qPR-ZDU0QEgAIIuqQQAAAM0"]
[Tue Nov 25 08:43:20.409643 2025] [:error] [pid 14077:tid 14121] [client 213.21.239.4:43236] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib../.git/config"] [unique_id "aST7qBG9n7UHEkwDTyiKCgAAAEs"]
[Tue Nov 25 08:43:20.410463 2025] [:error] [pid 14688:tid 14708] [client 213.21.239.4:43362] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/live/.git/config"] [unique_id "aST7qG9vYrBoEsiDniwXjAAAARI"]
[Tue Nov 25 08:43:20.411181 2025] [:error] [pid 14688:tid 14709] [client 213.21.239.4:43360] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/..;/.git/config"] [unique_id "aST7qG9vYrBoEsiDniwXjQAAARM"]
[Tue Nov 25 08:43:20.412135 2025] [:error] [pid 14078:tid 14159] [client 213.21.239.4:43410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/images../.git/config"] [unique_id "aST7qNVXYbb0ii_rVoJ-CQAAAJY"]
[Tue Nov 25 08:43:20.412326 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:43268] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config;"] [unique_id "aST7qNVXYbb0ii_rVoJ-CgAAAIc"]
[Tue Nov 25 08:43:20.413050 2025] [:error] [pid 1103:tid 1125] [client 213.21.239.4:43336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/git/.git/config"] [unique_id "aST7qI0LETdqOlq63sQ9BwAAAVA"]
[Tue Nov 25 08:43:20.413106 2025] [:error] [pid 14688:tid 14704] [client 213.21.239.4:43372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/..;/.git/config"] [unique_id "aST7qG9vYrBoEsiDniwXjgAAAQ4"]
[Tue Nov 25 08:43:20.413503 2025] [:error] [pid 14077:tid 14111] [client 213.21.239.4:43328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/static../.git/config"] [unique_id "aST7qBG9n7UHEkwDTyiKDAAAAEE"]
[Tue Nov 25 08:43:22.399338 2025] [:error] [pid 14076:tid 14097] [client 213.21.239.4:44016] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/qa/.git/config"] [unique_id "aST7qnsB4Gz6Qw-pvBs5pQAAABA"]
[Tue Nov 25 08:43:22.401256 2025] [:error] [pid 14078:tid 14154] [client 213.21.239.4:43994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/config;"] [unique_id "aST7qtVXYbb0ii_rVoJ-EAAAAJE"]
[Tue Nov 25 08:43:22.401891 2025] [:error] [pid 1103:tid 1123] [client 213.21.239.4:43954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.git/config"] [unique_id "aST7qo0LETdqOlq63sQ9CgAAAU4"]
[Tue Nov 25 08:43:22.405567 2025] [:error] [pid 14078:tid 14153] [client 213.21.239.4:43930] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/new/.git/config"] [unique_id "aST7qtVXYbb0ii_rVoJ-EQAAAJA"]
[Tue Nov 25 08:43:22.406750 2025] [:error] [pid 1103:tid 1121] [client 213.21.239.4:44052] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au../.git/config"] [unique_id "aST7qo0LETdqOlq63sQ9CwAAAUw"]
[Tue Nov 25 08:43:22.413460 2025] [:error] [pid 14077:tid 14122] [client 213.21.239.4:44010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/;/.git/config"] [unique_id "aST7qhG9n7UHEkwDTyiKEwAAAEw"]
[Tue Nov 25 08:43:22.413495 2025] [:error] [pid 14076:tid 14081] [client 213.21.239.4:44036] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/%0Aconfig"] [unique_id "aST7qnsB4Gz6Qw-pvBs5pgAAAAA"]
[Tue Nov 25 08:43:22.414498 2025] [:error] [pid 14077:tid 14129] [client 213.21.239.4:43980] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/config;.."] [unique_id "aST7qhG9n7UHEkwDTyiKFAAAAFM"]
[Tue Nov 25 08:43:22.418677 2025] [:error] [pid 14077:tid 14128] [client 213.21.239.4:43976] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/prod/.git/config"] [unique_id "aST7qhG9n7UHEkwDTyiKFQAAAFI"]
[Tue Nov 25 08:43:22.419240 2025] [:error] [pid 14077:tid 14116] [client 213.21.239.4:43970] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/static../.git/config"] [unique_id "aST7qhG9n7UHEkwDTyiKFwAAAEY"]
[Tue Nov 25 08:43:22.421018 2025] [:error] [pid 14077:tid 14124] [client 213.21.239.4:43942] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.git/config"] [unique_id "aST7qhG9n7UHEkwDTyiKGQAAAE4"]
[Tue Nov 25 08:43:22.423231 2025] [:error] [pid 1103:tid 1127] [client 213.21.239.4:44064] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/..;/.git/config"] [unique_id "aST7qo0LETdqOlq63sQ9DAAAAVI"]
[Tue Nov 25 08:43:23.370291 2025] [:error] [pid 14077:tid 14117] [client 213.21.239.4:44084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config;.."] [unique_id "aST7qxG9n7UHEkwDTyiKHAAAAEc"]
[Tue Nov 25 08:43:23.370470 2025] [:error] [pid 14078:tid 14142] [client 213.21.239.4:44120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aST7q9VXYbb0ii_rVoJ-EgAAAIU"]
[Tue Nov 25 08:43:23.372318 2025] [:error] [pid 1103:tid 1124] [client 213.21.239.4:44150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config;"] [unique_id "aST7q40LETdqOlq63sQ9DgAAAU8"]
[Tue Nov 25 08:43:23.372367 2025] [:error] [pid 1103:tid 1119] [client 213.21.239.4:44122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/;/.git/config"] [unique_id "aST7q40LETdqOlq63sQ9DwAAAUo"]
[Tue Nov 25 08:43:23.377935 2025] [:error] [pid 14688:tid 14695] [client 213.21.239.4:44164] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aST7q29vYrBoEsiDniwXjwAAAQU"]
[Tue Nov 25 08:43:23.380467 2025] [:error] [pid 1103:tid 1113] [client 213.21.239.4:44096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/..;/.git/config"] [unique_id "aST7q40LETdqOlq63sQ9EAAAAUQ"]
[Tue Nov 25 08:43:23.380654 2025] [:error] [pid 14078:tid 14161] [client 213.21.239.4:44076] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.git;/config"] [unique_id "aST7q9VXYbb0ii_rVoJ-EwAAAJg"]
[Tue Nov 25 08:43:23.382136 2025] [:error] [pid 14076:tid 14103] [client 213.21.239.4:44136] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/../.git/config"] [unique_id "aST7q3sB4Gz6Qw-pvBs5qAAAABY"]
[Tue Nov 25 08:43:23.382390 2025] [:error] [pid 14078:tid 14149] [client 213.21.239.4:44138] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/../config"] [unique_id "aST7q9VXYbb0ii_rVoJ-FAAAAIw"]
[Tue Nov 25 08:43:23.387256 2025] [:error] [pid 14168:tid 14179] [client 213.21.239.4:44110] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config"] [unique_id "aST7q_R-ZDU0QEgAIIuqRgAAAMg"]
[Tue Nov 25 08:43:25.377343 2025] [:error] [pid 14688:tid 14707] [client 213.21.239.4:44204] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aST7rW9vYrBoEsiDniwXkgAAARE"]
[Tue Nov 25 08:43:25.382961 2025] [:error] [pid 14076:tid 14099] [client 213.21.239.4:44226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-content/.git/config"] [unique_id "aST7rXsB4Gz6Qw-pvBs5qwAAABI"]
[Tue Nov 25 08:43:25.383945 2025] [:error] [pid 14168:tid 14177] [client 213.21.239.4:44192] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/static../.git/config"] [unique_id "aST7rfR-ZDU0QEgAIIuqSgAAAMY"]
[Tue Nov 25 08:43:25.384239 2025] [:error] [pid 14688:tid 14692] [client 213.21.239.4:44198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/uat/.git/config"] [unique_id "aST7rW9vYrBoEsiDniwXkwAAAQI"]
[Tue Nov 25 08:43:25.384265 2025] [:error] [pid 14077:tid 14115] [client 213.21.239.4:44230] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/web/.git/config"] [unique_id "aST7rRG9n7UHEkwDTyiKIwAAAEU"]
[Tue Nov 25 08:43:25.386776 2025] [:error] [pid 14077:tid 14131] [client 213.21.239.4:44212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/staging/.git/config"] [unique_id "aST7rRG9n7UHEkwDTyiKJAAAAFU"]
[Tue Nov 25 08:43:25.392165 2025] [:error] [pid 14688:tid 14690] [client 213.21.239.4:44178] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/static../.git/config"] [unique_id "aST7rW9vYrBoEsiDniwXlAAAAQA"]
[Tue Nov 25 08:43:25.402362 2025] [:error] [pid 14077:tid 14133] [client 213.21.239.4:44242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aST7rRG9n7UHEkwDTyiKJQAAAFc"]
[Tue Nov 25 08:43:25.414648 2025] [:error] [pid 14168:tid 14195] [client 213.21.239.4:44266] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.git;/config"] [unique_id "aST7rfR-ZDU0QEgAIIuqSwAAANg"]
[Tue Nov 25 08:43:25.419280 2025] [:error] [pid 1103:tid 1123] [client 213.21.239.4:44250] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/../config"] [unique_id "aST7rY0LETdqOlq63sQ9EQAAAU4"]
[Tue Nov 25 08:43:25.421311 2025] [:error] [pid 1103:tid 1121] [client 213.21.239.4:44268] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config"] [unique_id "aST7rY0LETdqOlq63sQ9EgAAAUw"]
[Tue Nov 25 09:03:44.925705 2025] [:error] [pid 14077:tid 14125] [client 43.153.36.110:49466] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSUAcBG9n7UHEkwDTyiVcQAAAE8"]
[Tue Nov 25 10:59:20.446300 2025] [:error] [pid 14076:tid 14087] [client 154.213.160.125:54531] [client 154.213.160.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aSUbiHsB4Gz6Qw-pvBtefgAAAAY"]
[Tue Nov 25 10:59:22.730673 2025] [:error] [pid 14076:tid 14086] [client 154.213.160.26:26033] [client 154.213.160.26] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSUbinsB4Gz6Qw-pvBtehAAAAAU"]
[Tue Nov 25 10:59:24.079537 2025] [:error] [pid 28740:tid 28806] [client 45.3.55.89:58573] [client 45.3.55.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aSUbjFppQCoYxWW6V0X1wQAAAk8"]
[Tue Nov 25 11:49:10.078758 2025] [:error] [pid 14076:tid 14098] [client 44.250.195.123:46014] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSUnNnsB4Gz6Qw-pvBt1KAAAABE"]
[Tue Nov 25 11:49:10.801659 2025] [:error] [pid 14078:tid 14151] [client 44.250.195.123:46016] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aSUnNtVXYbb0ii_rVoK2YAAAAI4"]
[Tue Nov 25 11:49:11.523901 2025] [:error] [pid 14168:tid 14187] [client 44.250.195.123:46032] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "aSUnN_R-ZDU0QEgAIIveSQAAANA"]
[Tue Nov 25 11:49:12.249661 2025] [:error] [pid 28842:tid 29026] [client 44.250.195.123:46040] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod"] [unique_id "aSUnONNmoaPf6T4-6C34CQAAA1g"]
[Tue Nov 25 11:49:12.974823 2025] [:error] [pid 14077:tid 14111] [client 44.250.195.123:46046] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aSUnOBG9n7UHEkwDTyjNtQAAAEE"]
[Tue Nov 25 11:49:13.700121 2025] [:error] [pid 28842:tid 29024] [client 44.250.195.123:46062] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aSUnOdNmoaPf6T4-6C34DAAAA1Y"]
[Tue Nov 25 11:49:14.424547 2025] [:error] [pid 14077:tid 14123] [client 44.250.195.123:51768] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aSUnOhG9n7UHEkwDTyjNtgAAAE0"]
[Tue Nov 25 11:49:15.150654 2025] [:error] [pid 28609:tid 28629] [client 44.250.195.123:51772] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aSUnOyGGdT-nZJVs3x1UNQAAAYs"]
[Tue Nov 25 11:49:15.873006 2025] [:error] [pid 28836:tid 29006] [client 44.250.195.123:51776] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aSUnO5wNRsoxcLQGkTdI_gAAAtA"]
[Tue Nov 25 11:49:16.599273 2025] [:error] [pid 14688:tid 14711] [client 44.250.195.123:51784] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env~"] [unique_id "aSUnPG9vYrBoEsiDnixFTAAAARU"]
[Tue Nov 25 11:49:17.330074 2025] [:error] [pid 28836:tid 29007] [client 44.250.195.123:51792] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aSUnPZwNRsoxcLQGkTdJAQAAAtE"]
[Tue Nov 25 11:49:18.056158 2025] [:error] [pid 28609:tid 28642] [client 44.250.195.123:51804] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aSUnPiGGdT-nZJVs3x1UNwAAAZg"]
[Tue Nov 25 11:49:18.789099 2025] [:error] [pid 28836:tid 29014] [client 44.250.195.123:51818] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aSUnPpwNRsoxcLQGkTdJBQAAAtg"]
[Tue Nov 25 11:49:19.520862 2025] [:error] [pid 14688:tid 14705] [client 44.250.195.123:51826] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aSUnP29vYrBoEsiDnixFUwAAAQ8"]
[Tue Nov 25 11:49:20.254888 2025] [:error] [pid 14688:tid 14691] [client 44.250.195.123:51832] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.orig"] [unique_id "aSUnQG9vYrBoEsiDnixFVwAAAQE"]
[Tue Nov 25 11:49:20.979882 2025] [:error] [pid 14168:tid 14193] [client 44.250.195.123:51842] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.swp"] [unique_id "aSUnQPR-ZDU0QEgAIIveUQAAANY"]
[Tue Nov 25 11:49:21.703657 2025] [:error] [pid 28836:tid 28966] [client 44.250.195.123:51858] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.tmp"] [unique_id "aSUnQZwNRsoxcLQGkTdJCwAAAss"]
[Tue Nov 25 11:49:22.433814 2025] [:error] [pid 14688:tid 14695] [client 44.250.195.123:51870] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dist"] [unique_id "aSUnQm9vYrBoEsiDnixFZgAAAQU"]
[Tue Nov 25 11:49:23.163741 2025] [:error] [pid 28836:tid 28960] [client 44.250.195.123:51878] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aSUnQ5wNRsoxcLQGkTdJDQAAAsU"]
[Tue Nov 25 11:49:23.887244 2025] [:error] [pid 14168:tid 14192] [client 44.250.195.123:51890] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.save"] [unique_id "aSUnQ_R-ZDU0QEgAIIveYQAAANU"]
[Tue Nov 25 11:49:24.611823 2025] [:error] [pid 28836:tid 28964] [client 44.250.195.123:49818] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.bak"] [unique_id "aSUnRJwNRsoxcLQGkTdJDwAAAsk"]
[Tue Nov 25 11:49:25.342834 2025] [:error] [pid 14078:tid 14149] [client 44.250.195.123:49828] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.old"] [unique_id "aSUnRdVXYbb0ii_rVoK2ZQAAAIw"]
[Tue Nov 25 11:49:26.068599 2025] [:error] [pid 28739:tid 28785] [client 44.250.195.123:49834] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aSUnRhxGpKmlkG4FexQONAAAAhc"]
[Tue Nov 25 11:49:26.792128 2025] [:error] [pid 14076:tid 14094] [client 44.250.195.123:49844] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.save"] [unique_id "aSUnRnsB4Gz6Qw-pvBt1RgAAAA0"]
[Tue Nov 25 11:49:27.522306 2025] [:error] [pid 28740:tid 28795] [client 44.250.195.123:49854] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.bak"] [unique_id "aSUnR1ppQCoYxWW6V0X_zgAAAkQ"]
[Tue Nov 25 11:49:28.248983 2025] [:error] [pid 14688:tid 14711] [client 44.250.195.123:49866] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.old"] [unique_id "aSUnSG9vYrBoEsiDnixFawAAARU"]
[Tue Nov 25 11:49:28.973417 2025] [:error] [pid 14168:tid 14174] [client 44.250.195.123:49874] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aSUnSPR-ZDU0QEgAIIveZQAAAMM"]
[Tue Nov 25 11:49:29.701226 2025] [:error] [pid 28609:tid 28629] [client 44.250.195.123:49876] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.save"] [unique_id "aSUnSSGGdT-nZJVs3x1UPQAAAYs"]
[Tue Nov 25 11:49:30.426071 2025] [:error] [pid 14168:tid 14189] [client 44.250.195.123:49880] [client 44.250.195.123] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.bak"] [unique_id "aSUnSvR-ZDU0QEgAIIveZwAAANI"]
[Tue Nov 25 13:57:44.765614 2025] [:error] [pid 28836:tid 29014] [client 170.106.84.136:48732] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSVFWJwNRsoxcLQGkTdy6gAAAtg"]
[Tue Nov 25 15:21:41.526281 2025] [:error] [pid 28836:tid 28986] [client 182.44.67.97:42906] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSVZBZwNRsoxcLQGkTeEYwAAAs8"]
[Tue Nov 25 18:53:12.159783 2025] [:error] [pid 28609:tid 28632] [client 138.199.60.187:53120] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Nov 25 18:53:12.311914 2025] [:error] [pid 28609:tid 28636] [client 138.199.60.187:53120] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Nov 25 18:53:12.442802 2025] [:error] [pid 28609:tid 28622] [client 138.199.60.187:53120] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKmCGGdT-nZJVs3x24-gAAAYQ"]
[Tue Nov 25 18:53:12.678809 2025] [:error] [pid 14076:tid 14091] [client 138.199.60.187:53448] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKmHsB4Gz6Qw-pvBsKUgAAAAo"]
[Tue Nov 25 18:53:12.943609 2025] [:error] [pid 28842:tid 29022] [client 138.199.60.187:53650] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKmNNmoaPf6T4-6C2DvQAAA1Q"]
[Tue Nov 25 18:53:13.218924 2025] [:error] [pid 28609:tid 28619] [client 138.199.60.187:53754] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKmSGGdT-nZJVs3x24_wAAAYE"]
[Tue Nov 25 18:53:13.431702 2025] [:error] [pid 14077:tid 14120] [client 138.199.60.187:53940] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aSWKmRG9n7UHEkwDTyh-UQAAAEo"]
[Tue Nov 25 18:53:14.019620 2025] [:error] [pid 28740:tid 28807] [client 138.199.60.187:54170] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKmlppQCoYxWW6V0VykgAAAlA"]
[Tue Nov 25 18:53:15.297320 2025] [:error] [pid 28740:tid 28811] [client 138.199.60.187:55010] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKm1ppQCoYxWW6V0VyywAAAlQ"]
[Tue Nov 25 18:53:15.596537 2025] [:error] [pid 28740:tid 28813] [client 138.199.60.187:55234] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKm1ppQCoYxWW6V0Vy3AAAAlY"]
[Tue Nov 25 18:53:15.850435 2025] [:error] [pid 28609:tid 28641] [client 138.199.60.187:55508] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKmyGGdT-nZJVs3x25FAAAAZc"]
[Tue Nov 25 18:53:16.141439 2025] [:error] [pid 28740:tid 28811] [client 138.199.60.187:55754] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnFppQCoYxWW6V0Vy9gAAAlQ"]
[Tue Nov 25 19:40:54.855498 2025] [:error] [pid 28739:tid 28780] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/tj.php
[Tue Nov 25 19:40:54.995230 2025] [:error] [pid 28739:tid 28767] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Tue Nov 25 19:40:55.136981 2025] [:error] [pid 28739:tid 28786] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Tue Nov 25 19:40:55.310189 2025] [:error] [pid 28739:tid 28774] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/f8moue.php
[Tue Nov 25 19:40:55.448720 2025] [:error] [pid 28739:tid 28762] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/3i8som87avh59dosfymtvCakc.php
[Tue Nov 25 19:40:57.056809 2025] [:error] [pid 28739:tid 28762] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/nonesoterically.php
[Tue Nov 25 19:40:57.380122 2025] [:error] [pid 28739:tid 28764] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/palsy.php
[Tue Nov 25 19:40:57.545785 2025] [:error] [pid 28739:tid 28777] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Tue Nov 25 19:40:57.699479 2025] [:error] [pid 28739:tid 28765] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/asciferous.php
[Tue Nov 25 19:40:57.841012 2025] [:error] [pid 28739:tid 28766] [client 4.241.179.168:64578] File does not exist: /usr/local/apache/htdocs/suspended-page/coenoecic.php
[Tue Nov 25 19:40:57.976640 2025] [:error] [pid 28739:tid 28778] [client 4.241.179.168:64578] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSWVyRxGpKmlkG4FexR7-QAAAhA"]
[Tue Nov 25 19:41:00.471971 2025] [:error] [pid 28609:tid 28620] [client 4.241.179.168:64535] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSWVzCGGdT-nZJVs3x3EfgAAAYI"]
[Tue Nov 25 19:41:03.666911 2025] [:error] [pid 2987:tid 2989] [client 4.241.179.168:64615] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSWVz8-djEt-pTzPxnyhkQAAAUA"]
[Tue Nov 25 19:41:05.754453 2025] [:error] [pid 28739:tid 28767] [client 4.241.179.168:64601] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cyanamids.php"] [unique_id "aSWV0RxGpKmlkG4FexR7_gAAAgU"]
[Tue Nov 25 19:41:08.706896 2025] [:error] [pid 28836:tid 28962] [client 4.241.179.168:64600] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disengaging.php"] [unique_id "aSWV1JwNRsoxcLQGkTfD8gAAAsc"]
[Tue Nov 25 19:41:10.452961 2025] [:error] [pid 14168:tid 14186] [client 4.241.179.168:64523] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disengaging.php"] [unique_id "aSWV1vR-ZDU0QEgAIItoKAAAAM8"]
[Tue Nov 25 19:41:11.293892 2025] [:error] [pid 14077:tid 14113] [client 4.241.179.168:64519] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disengaging.php"] [unique_id "aSWV1xG9n7UHEkwDTyiUXwAAAEM"]
[Tue Nov 25 19:41:13.349984 2025] [:error] [pid 28609:tid 28621] [client 4.241.179.168:29680] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disengaging.php"] [unique_id "aSWV2SGGdT-nZJVs3x3EkAAAAYM"]
[Tue Nov 25 19:41:16.198324 2025] [:error] [pid 14077:tid 14128] [client 4.241.179.168:64532] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disquiet.php"] [unique_id "aSWV3BG9n7UHEkwDTyiUaAAAAFI"]
[Tue Nov 25 19:41:17.302208 2025] [:error] [pid 28836:tid 28959] [client 4.241.179.168:64558] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disquiet.php"] [unique_id "aSWV3ZwNRsoxcLQGkTfD_wAAAsQ"]
[Tue Nov 25 19:41:23.508530 2025] [:error] [pid 14076:tid 14093] [client 4.241.179.168:64516] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disquiet.php"] [unique_id "aSWV43sB4Gz6Qw-pvBsXFwAAAAw"]
[Tue Nov 25 19:41:25.322748 2025] [:error] [pid 28836:tid 29014] [client 4.241.179.168:64539] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disquiet.php"] [unique_id "aSWV5ZwNRsoxcLQGkTfECQAAAtg"]
[Tue Nov 25 19:41:28.836354 2025] [:error] [pid 28740:tid 28804] [client 4.241.179.168:64579] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duplicand.php"] [unique_id "aSWV6FppQCoYxWW6V0WDbgAAAk0"]
[Tue Nov 25 19:41:29.682123 2025] [:error] [pid 28740:tid 28799] [client 4.241.179.168:64530] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duplicand.php"] [unique_id "aSWV6VppQCoYxWW6V0WDbwAAAkg"]
[Tue Nov 25 19:41:30.018619 2025] [:error] [pid 28739:tid 28774] [client 4.241.179.168:64629] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duplicand.php"] [unique_id "aSWV6hxGpKmlkG4FexR8EQAAAgw"]
[Tue Nov 25 19:41:33.351047 2025] [:error] [pid 14077:tid 14130] [client 4.241.179.168:64589] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duplicand.php"] [unique_id "aSWV7RG9n7UHEkwDTyiUigAAAFQ"]
[Tue Nov 25 19:41:36.146723 2025] [:error] [pid 28609:tid 28630] [client 4.241.179.168:64513] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/parturiency.php"] [unique_id "aSWV8CGGdT-nZJVs3x3EpwAAAYw"]
[Tue Nov 25 19:41:38.625745 2025] [:error] [pid 14077:tid 14116] [client 4.241.179.168:64590] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/parturiency.php"] [unique_id "aSWV8hG9n7UHEkwDTyiUjwAAAEY"]
[Tue Nov 25 19:41:40.483904 2025] [:error] [pid 28609:tid 28619] [client 4.241.179.168:64512] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/parturiency.php"] [unique_id "aSWV9CGGdT-nZJVs3x3ErAAAAYE"]
[Tue Nov 25 19:41:41.550123 2025] [:error] [pid 14077:tid 14119] [client 4.241.179.168:64577] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/parturiency.php"] [unique_id "aSWV9RG9n7UHEkwDTyiUmAAAAEk"]
[Tue Nov 25 19:41:42.309375 2025] [:error] [pid 28842:tid 29022] [client 4.241.179.168:64580] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tithings.php"] [unique_id "aSWV9tNmoaPf6T4-6C2VowAAA1Q"]
[Tue Nov 25 19:41:43.408787 2025] [:error] [pid 28836:tid 29007] [client 4.241.179.168:64606] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tithings.php"] [unique_id "aSWV95wNRsoxcLQGkTfEIQAAAtE"]
[Tue Nov 25 19:41:45.189898 2025] [:error] [pid 28836:tid 28955] [client 4.241.179.168:64604] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tithings.php"] [unique_id "aSWV-ZwNRsoxcLQGkTfEIgAAAsA"]
[Tue Nov 25 19:41:46.473928 2025] [:error] [pid 14076:tid 14084] [client 4.241.179.168:64597] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tithings.php"] [unique_id "aSWV-nsB4Gz6Qw-pvBsXQQAAAAM"]
[Tue Nov 25 19:41:48.784380 2025] [:error] [pid 28740:tid 28813] [client 4.241.179.168:64534] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "aSWV_FppQCoYxWW6V0WDkgAAAlY"]
[Tue Nov 25 19:41:51.352450 2025] [:error] [pid 14077:tid 14127] [client 4.241.179.168:64518] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "aSWV_xG9n7UHEkwDTyiU1QAAAFE"]
[Tue Nov 25 19:41:52.888477 2025] [:error] [pid 28842:tid 29018] [client 4.241.179.168:64520] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "aSWWANNmoaPf6T4-6C2V8gAAA1E"]
[Tue Nov 25 19:41:54.502949 2025] [:error] [pid 28739:tid 28778] [client 4.241.179.168:64517] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "aSWWAhxGpKmlkG4FexR8JAAAAhA"]
[Tue Nov 25 19:42:03.192497 2025] [:error] [pid 14076:tid 14104] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Tue Nov 25 19:42:03.337430 2025] [:error] [pid 14076:tid 14092] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Tue Nov 25 19:42:03.675518 2025] [:error] [pid 14076:tid 14105] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/edd.php
[Tue Nov 25 19:42:03.814749 2025] [:error] [pid 14076:tid 14082] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Tue Nov 25 19:42:03.975971 2025] [:error] [pid 14076:tid 14089] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/bn.php
[Tue Nov 25 19:42:04.206288 2025] [:error] [pid 14076:tid 14083] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/fishmen.php
[Tue Nov 25 19:42:04.345001 2025] [:error] [pid 14076:tid 14103] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/obfuscous.php
[Tue Nov 25 19:42:04.511656 2025] [:error] [pid 14076:tid 14095] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/oitava.php
[Tue Nov 25 19:42:04.835579 2025] [:error] [pid 14076:tid 14093] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/phrensying.php
[Tue Nov 25 19:42:05.352061 2025] [:error] [pid 14076:tid 14081] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/pyrometry.php
[Tue Nov 25 19:42:06.426110 2025] [:error] [pid 14076:tid 14081] [client 4.241.179.168:64614] File does not exist: /usr/local/apache/htdocs/suspended-page/unprecipitously.php
[Tue Nov 25 19:42:06.598170 2025] [:error] [pid 14076:tid 14090] [client 4.241.179.168:64614] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbefittingly.php"] [unique_id "aSWWDnsB4Gz6Qw-pvBsXZQAAAAk"]
[Tue Nov 25 19:42:12.345758 2025] [:error] [pid 28740:tid 28798] [client 4.241.179.168:64526] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbefittingly.php"] [unique_id "aSWWFFppQCoYxWW6V0WD7wAAAkc"]
[Tue Nov 25 19:42:14.465543 2025] [:error] [pid 28739:tid 28780] [client 4.241.179.168:64515] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbefittingly.php"] [unique_id "aSWWFhxGpKmlkG4FexR8LwAAAhI"]
[Tue Nov 25 19:42:15.563813 2025] [:error] [pid 28836:tid 28955] [client 4.241.179.168:64635] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbefittingly.php"] [unique_id "aSWWF5wNRsoxcLQGkTfETgAAAsA"]
[Tue Nov 25 19:42:19.608227 2025] [:error] [pid 28836:tid 28962] [client 4.241.179.168:64633] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aSWWG5wNRsoxcLQGkTfEUgAAAsc"]
[Tue Nov 25 19:42:21.278417 2025] [:error] [pid 14077:tid 14114] [client 4.241.179.168:64626] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aSWWHRG9n7UHEkwDTyiVHwAAAEQ"]
[Tue Nov 25 19:42:23.347869 2025] [:error] [pid 2987:tid 3011] [client 4.241.179.168:64628] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aSWWH8-djEt-pTzPxnyiOwAAAVY"]
[Tue Nov 25 19:42:24.477282 2025] [:error] [pid 14078:tid 14158] [client 4.241.179.168:64521] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aSWWINVXYbb0ii_rVoJHUAAAAJU"]
[Tue Nov 25 19:42:25.593820 2025] [:error] [pid 28609:tid 28620] [client 4.241.179.168:64531] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWWISGGdT-nZJVs3x3E1AAAAYI"]
[Tue Nov 25 19:42:28.499324 2025] [:error] [pid 28836:tid 29014] [client 4.241.179.168:64631] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWWJJwNRsoxcLQGkTfEaQAAAtg"]
[Tue Nov 25 19:42:32.086945 2025] [:error] [pid 14078:tid 14142] [client 4.241.179.168:64608] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWWKNVXYbb0ii_rVoJHWgAAAIU"]
[Tue Nov 25 19:42:37.536906 2025] [:error] [pid 28609:tid 28625] [client 4.241.179.168:64582] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-securitiy.php"] [unique_id "aSWWLSGGdT-nZJVs3x3E9AAAAYc"]
[Tue Nov 25 19:42:39.446420 2025] [:error] [pid 14077:tid 14119] [client 4.241.179.168:64574] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ac.php"] [unique_id "aSWWLxG9n7UHEkwDTyiVQwAAAEk"]
[Tue Nov 25 19:42:40.614441 2025] [:error] [pid 14078:tid 14154] [client 4.241.179.168:64543] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ac.php"] [unique_id "aSWWMNVXYbb0ii_rVoJHdwAAAJE"]
[Tue Nov 25 19:42:42.051962 2025] [:error] [pid 28836:tid 29008] [client 4.241.179.168:29650] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ac.php"] [unique_id "aSWWMpwNRsoxcLQGkTfEhgAAAtI"]
[Tue Nov 25 19:42:42.910493 2025] [:error] [pid 14077:tid 14130] [client 4.241.179.168:64591] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ac.php"] [unique_id "aSWWMhG9n7UHEkwDTyiVRgAAAFQ"]
[Tue Nov 25 19:42:44.955380 2025] [:error] [pid 14077:tid 14127] [client 4.241.179.168:64605] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nof.php"] [unique_id "aSWWNBG9n7UHEkwDTyiVWQAAAFE"]
[Tue Nov 25 19:42:46.453599 2025] [:error] [pid 28842:tid 28997] [client 4.241.179.168:64620] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nof.php"] [unique_id "aSWWNtNmoaPf6T4-6C2WJgAAA0c"]
[Tue Nov 25 19:42:48.182603 2025] [:error] [pid 14076:tid 14092] [client 4.241.179.168:64538] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nof.php"] [unique_id "aSWWOHsB4Gz6Qw-pvBsXqAAAAAs"]
[Tue Nov 25 19:42:50.756712 2025] [:error] [pid 2987:tid 2994] [client 4.241.179.168:64550] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nof.php"] [unique_id "aSWWOs-djEt-pTzPxnyixwAAAUU"]
[Tue Nov 25 19:42:53.150835 2025] [:error] [pid 14077:tid 14120] [client 4.241.179.168:64536] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aSWWPRG9n7UHEkwDTyiViQAAAEo"]
[Tue Nov 25 19:42:54.256174 2025] [:error] [pid 28739:tid 28768] [client 4.241.179.168:64567] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aSWWPhxGpKmlkG4FexR8TAAAAgY"]
[Tue Nov 25 19:42:56.786548 2025] [:error] [pid 14077:tid 14134] [client 4.241.179.168:29633] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aSWWQBG9n7UHEkwDTyiVkwAAAFg"]
[Tue Nov 25 19:42:58.908607 2025] [:error] [pid 14168:tid 14173] [client 4.241.179.168:64624] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aSWWQvR-ZDU0QEgAIItogQAAAMI"]
[Tue Nov 25 19:43:00.403803 2025] [:error] [pid 28842:tid 28995] [client 4.241.179.168:64540] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWWRNNmoaPf6T4-6C2WMgAAA0U"]
[Tue Nov 25 19:43:03.149823 2025] [:error] [pid 28842:tid 28996] [client 4.241.179.168:29636] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWWR9NmoaPf6T4-6C2WNgAAA0Y"]
[Tue Nov 25 19:43:04.378252 2025] [:error] [pid 28739:tid 28786] [client 4.241.179.168:29642] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWWSBxGpKmlkG4FexR8WAAAAhg"]
[Tue Nov 25 19:43:05.829643 2025] [:error] [pid 28836:tid 28955] [client 4.241.179.168:64563] [client 4.241.179.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aSWWSZwNRsoxcLQGkTfEmAAAAsA"]
[Tue Nov 25 19:43:07.413435 2025] [:error] [pid 14078:tid 14143] [client 4.241.179.168:64609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-front.php
[Tue Nov 25 19:43:07.789432 2025] [:error] [pid 14078:tid 14143] [client 4.241.179.168:64609] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-advaced.php
[Tue Nov 25 19:43:07.910675 2025] [:error] [pid 14078:tid 14152] [client 4.241.179.168:64609] File does not exist: /usr/local/apache/htdocs/suspended-page/poliomyelopathy.php
[Tue Nov 25 19:43:08.029954 2025] [:error] [pid 14078:tid 14141] [client 4.241.179.168:64609] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Tue Nov 25 22:14:25.734668 2025] [:error] [pid 14078:tid 14156] [client 49.206.14.225:41761] [client 49.206.14.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.206.14.225, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSW5wdVXYbb0ii_rVoKRxwAAAJM"]
[Tue Nov 25 22:14:25.740602 2025] [:error] [pid 14078:tid 14156] [client 49.206.14.225:41761] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 26 00:01:25.178568 2025] [:error] [pid 2987:tid 3005] [client 139.59.30.253:52658] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aSXS1c-djEt-pTzPxnzx4gAAAVA"], referer: binance.com
[Wed Nov 26 04:46:34.040043 2025] [:error] [pid 3010:tid 3025] [client 43.157.147.3:41390] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSYVqkWl16-roARWvItVrwAAAAs"]
[Wed Nov 26 16:49:54.728946 2025] [:error] [pid 45685:tid 45754] [client 216.126.239.203:37126] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSa_Mlj3f_NRdgU0DQ60wQAAAQw"]
[Wed Nov 26 19:29:39.662485 2025] [:error] [pid 46443:tid 46462] [client 4.233.91.203:51186] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Wed Nov 26 23:22:37.365545 2025] [:error] [pid 45769:tid 45773] [client 43.173.1.57:51832] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aScbPVdG5Eht9c3yy4NUuAAAAcE"]
[Thu Nov 27 00:48:22.342202 2025] [:error] [pid 8184:tid 8254] [client 103.77.107.57:57864] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aScvVr-M2IHkRYVrcbN5XwAAAFA"]
[Thu Nov 27 01:57:07.305789 2025] [:error] [pid 8184:tid 8259] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Thu Nov 27 01:57:07.424204 2025] [:error] [pid 8184:tid 8251] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Thu Nov 27 01:57:07.543375 2025] [:error] [pid 8184:tid 8257] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Nov 27 01:57:07.663217 2025] [:error] [pid 8184:tid 8236] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/pn.php
[Thu Nov 27 01:57:07.780074 2025] [:error] [pid 8184:tid 8256] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Thu Nov 27 01:57:07.899254 2025] [:error] [pid 8184:tid 8243] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Thu Nov 27 01:57:08.015938 2025] [:error] [pid 8184:tid 8237] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Thu Nov 27 01:57:08.133228 2025] [:error] [pid 8184:tid 8241] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Thu Nov 27 01:57:08.251580 2025] [:error] [pid 8184:tid 8252] [client 130.33.50.246:50136] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Nov 27 01:57:08.365679 2025] [:error] [pid 8184:tid 8242] [client 130.33.50.246:50136] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSc_dL-M2IHkRYVrcbOS9AAAAEY"]
[Thu Nov 27 01:57:08.595830 2025] [:error] [pid 54723:tid 54751] [client 130.33.50.246:50166] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSc_dA2CEg7QoyDosdICzAAAABU"]
[Thu Nov 27 01:57:08.824218 2025] [:error] [pid 25262:tid 25338] [client 130.33.50.246:50115] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSc_dE3p81VU3bYILBVLoAAAAhE"]
[Thu Nov 27 01:57:09.050995 2025] [:error] [pid 24814:tid 25095] [client 130.33.50.246:50134] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aSc_dQPn1NMGCdo6RsitDwAAAVQ"]
[Thu Nov 27 01:57:09.287900 2025] [:error] [pid 54723:tid 54752] [client 130.33.50.246:50058] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aSc_dQ2CEg7QoyDosdIC1wAAABY"]
[Thu Nov 27 01:57:09.514558 2025] [:error] [pid 54723:tid 54746] [client 130.33.50.246:50054] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aSc_dQ2CEg7QoyDosdIC2wAAABA"]
[Thu Nov 27 01:57:09.742293 2025] [:error] [pid 24814:tid 25081] [client 130.33.50.246:50135] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aSc_dQPn1NMGCdo6RsitFAAAAUY"]
[Thu Nov 27 01:57:09.969717 2025] [:error] [pid 25262:tid 25326] [client 130.33.50.246:50124] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aSc_dU3p81VU3bYILBVLoQAAAgU"]
[Thu Nov 27 01:57:10.200136 2025] [:error] [pid 54723:tid 54743] [client 130.33.50.246:50052] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wander.php"] [unique_id "aSc_dg2CEg7QoyDosdIC4gAAAA0"]
[Thu Nov 27 01:57:10.428124 2025] [:error] [pid 25262:tid 25341] [client 130.33.50.246:50149] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wander.php"] [unique_id "aSc_dk3p81VU3bYILBVLogAAAhQ"]
[Thu Nov 27 01:57:10.654247 2025] [:error] [pid 25180:tid 25200] [client 130.33.50.246:50121] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wander.php"] [unique_id "aSc_dr-owhtiwMHXYlzdzgAAAZI"]
[Thu Nov 27 01:57:10.880285 2025] [:error] [pid 25262:tid 25322] [client 130.33.50.246:50085] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wander.php"] [unique_id "aSc_dk3p81VU3bYILBVLowAAAgE"]
[Thu Nov 27 01:57:11.108050 2025] [:error] [pid 24826:tid 25137] [client 130.33.50.246:50170] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aSc_d1EvPXLVl-nh-yLphwAAARU"]
[Thu Nov 27 01:57:11.336330 2025] [:error] [pid 25262:tid 25324] [client 130.33.50.246:50116] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aSc_d03p81VU3bYILBVLpAAAAgM"]
[Thu Nov 27 01:57:11.563603 2025] [:error] [pid 25262:tid 25321] [client 130.33.50.246:50072] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aSc_d03p81VU3bYILBVLpQAAAgA"]
[Thu Nov 27 01:57:11.790772 2025] [:error] [pid 24826:tid 25119] [client 130.33.50.246:50050] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aSc_d1EvPXLVl-nh-yLpiAAAAQQ"]
[Thu Nov 27 01:57:12.018895 2025] [:error] [pid 24814:tid 25090] [client 130.33.50.246:50073] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSc_eAPn1NMGCdo6RsitFwAAAU8"]
[Thu Nov 27 01:57:12.246720 2025] [:error] [pid 25262:tid 25328] [client 130.33.50.246:50140] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSc_eE3p81VU3bYILBVLpgAAAgc"]
[Thu Nov 27 01:57:12.477890 2025] [:error] [pid 8184:tid 8254] [client 130.33.50.246:50146] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSc_eL-M2IHkRYVrcbOTBAAAAFA"]
[Thu Nov 27 01:57:12.704533 2025] [:error] [pid 25262:tid 25323] [client 130.33.50.246:50155] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aSc_eE3p81VU3bYILBVLpwAAAgI"]
[Thu Nov 27 01:57:12.931630 2025] [:error] [pid 54723:tid 54735] [client 130.33.50.246:50175] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aSc_eA2CEg7QoyDosdIC7AAAAAU"]
[Thu Nov 27 01:57:13.158889 2025] [:error] [pid 24826:tid 25120] [client 130.33.50.246:50158] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aSc_eVEvPXLVl-nh-yLpiQAAAQU"]
[Thu Nov 27 01:57:13.385397 2025] [:error] [pid 25180:tid 25205] [client 130.33.50.246:50107] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aSc_eb-owhtiwMHXYlzdzwAAAZc"]
[Thu Nov 27 01:57:13.612291 2025] [:error] [pid 25262:tid 25329] [client 130.33.50.246:50081] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aSc_eU3p81VU3bYILBVLqQAAAgg"]
[Thu Nov 27 01:57:13.839316 2025] [:error] [pid 24826:tid 25126] [client 130.33.50.246:50066] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aSc_eVEvPXLVl-nh-yLpigAAAQs"]
[Thu Nov 27 01:57:14.065344 2025] [:error] [pid 24814:tid 25097] [client 130.33.50.246:50080] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aSc_egPn1NMGCdo6RsitGAAAAVY"]
[Thu Nov 27 01:57:14.291934 2025] [:error] [pid 24826:tid 25117] [client 130.33.50.246:50138] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aSc_elEvPXLVl-nh-yLpiwAAAQI"]
[Thu Nov 27 01:57:14.529970 2025] [:error] [pid 24826:tid 25132] [client 130.33.50.246:50169] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aSc_elEvPXLVl-nh-yLpjAAAARA"]
[Thu Nov 27 01:57:14.778382 2025] [:error] [pid 24826:tid 25122] [client 130.33.50.246:50069] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aSc_elEvPXLVl-nh-yLpjgAAAQc"]
[Thu Nov 27 01:57:15.004650 2025] [:error] [pid 54723:tid 54748] [client 130.33.50.246:50150] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aSc_ew2CEg7QoyDosdIC7QAAABI"]
[Thu Nov 27 01:57:15.235152 2025] [:error] [pid 54723:tid 54741] [client 130.33.50.246:15353] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aSc_ew2CEg7QoyDosdIC7gAAAAs"]
[Thu Nov 27 01:57:15.462251 2025] [:error] [pid 54723:tid 54740] [client 130.33.50.246:50065] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aSc_ew2CEg7QoyDosdIC8AAAAAo"]
[Thu Nov 27 01:57:15.694404 2025] [:error] [pid 8184:tid 8239] [client 130.33.50.246:50157] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aSc_e7-M2IHkRYVrcbOTCAAAAEM"]
[Thu Nov 27 01:57:15.921792 2025] [:error] [pid 8184:tid 8250] [client 130.33.50.246:50062] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aSc_e7-M2IHkRYVrcbOTCgAAAEw"]
[Thu Nov 27 01:57:16.150496 2025] [:error] [pid 25262:tid 25336] [client 130.33.50.246:50142] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aSc_fE3p81VU3bYILBVLqwAAAg8"]
[Thu Nov 27 01:57:16.377754 2025] [:error] [pid 24814:tid 25082] [client 130.33.50.246:50049] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aSc_fAPn1NMGCdo6RsitGgAAAUc"]
[Thu Nov 27 01:57:16.607235 2025] [:error] [pid 25262:tid 25345] [client 130.33.50.246:50122] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aSc_fE3p81VU3bYILBVLrAAAAhg"]
[Thu Nov 27 01:57:16.834391 2025] [:error] [pid 24826:tid 25138] [client 130.33.50.246:50126] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aSc_fFEvPXLVl-nh-yLpjwAAARY"]
[Thu Nov 27 01:57:17.061090 2025] [:error] [pid 25180:tid 25191] [client 130.33.50.246:50153] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aSc_fb-owhtiwMHXYlzd0QAAAYk"]
[Thu Nov 27 01:57:17.288252 2025] [:error] [pid 24826:tid 25124] [client 130.33.50.246:50173] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aSc_fVEvPXLVl-nh-yLpkAAAAQk"]
[Thu Nov 27 01:57:17.515152 2025] [:error] [pid 25262:tid 25327] [client 130.33.50.246:50112] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_fU3p81VU3bYILBVLrgAAAgY"]
[Thu Nov 27 01:57:17.744051 2025] [:error] [pid 25262:tid 25332] [client 130.33.50.246:50061] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_fU3p81VU3bYILBVLrwAAAgs"]
[Thu Nov 27 01:57:17.970020 2025] [:error] [pid 25262:tid 25344] [client 130.33.50.246:50053] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_fU3p81VU3bYILBVLsAAAAhc"]
[Thu Nov 27 01:57:18.196454 2025] [:error] [pid 25262:tid 25337] [client 130.33.50.246:50060] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_fk3p81VU3bYILBVLsQAAAhA"]
[Thu Nov 27 01:57:18.428906 2025] [:error] [pid 24826:tid 25140] [client 130.33.50.246:50063] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aSc_flEvPXLVl-nh-yLpkQAAARg"]
[Thu Nov 27 01:57:18.655416 2025] [:error] [pid 8184:tid 8240] [client 130.33.50.246:50082] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aSc_fr-M2IHkRYVrcbOTDAAAAEQ"]
[Thu Nov 27 01:57:18.882220 2025] [:error] [pid 24826:tid 25125] [client 130.33.50.246:50145] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aSc_flEvPXLVl-nh-yLpkgAAAQo"]
[Thu Nov 27 01:57:19.109097 2025] [:error] [pid 25180:tid 25204] [client 130.33.50.246:50114] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aSc_f7-owhtiwMHXYlzd1AAAAZY"]
[Thu Nov 27 01:57:19.339078 2025] [:error] [pid 25180:tid 25186] [client 130.33.50.246:50085] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aSc_f7-owhtiwMHXYlzd1wAAAYQ"]
[Thu Nov 27 01:57:19.565751 2025] [:error] [pid 25180:tid 25188] [client 130.33.50.246:50071] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aSc_f7-owhtiwMHXYlzd2AAAAYY"]
[Thu Nov 27 01:57:19.796173 2025] [:error] [pid 25180:tid 25192] [client 130.33.50.246:50129] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aSc_f7-owhtiwMHXYlzd2wAAAYo"]
[Thu Nov 27 01:57:20.030375 2025] [:error] [pid 25180:tid 25206] [client 130.33.50.246:50148] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aSc_gL-owhtiwMHXYlzd3AAAAZg"]
[Thu Nov 27 01:57:20.261789 2025] [:error] [pid 25180:tid 25197] [client 130.33.50.246:50075] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aSc_gL-owhtiwMHXYlzd3gAAAY8"]
[Thu Nov 27 01:57:20.488506 2025] [:error] [pid 24826:tid 25133] [client 130.33.50.246:50141] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aSc_gFEvPXLVl-nh-yLpkwAAARE"]
[Thu Nov 27 01:57:20.716749 2025] [:error] [pid 25262:tid 25334] [client 130.33.50.246:50152] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aSc_gE3p81VU3bYILBVLswAAAg0"]
[Thu Nov 27 01:57:20.943562 2025] [:error] [pid 25262:tid 25339] [client 130.33.50.246:15308] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aSc_gE3p81VU3bYILBVLtAAAAhI"]
[Thu Nov 27 01:57:21.175442 2025] [:error] [pid 24826:tid 25116] [client 130.33.50.246:50147] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSc_gVEvPXLVl-nh-yLplAAAAQE"]
[Thu Nov 27 01:57:21.403453 2025] [:error] [pid 25262:tid 25341] [client 130.33.50.246:50165] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSc_gU3p81VU3bYILBVLuAAAAhQ"]
[Thu Nov 27 01:57:21.634465 2025] [:error] [pid 24814:tid 25077] [client 130.33.50.246:50168] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSc_gQPn1NMGCdo6RsitGwAAAUI"]
[Thu Nov 27 01:57:21.861706 2025] [:error] [pid 8184:tid 8257] [client 130.33.50.246:50151] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aSc_gb-M2IHkRYVrcbOTEAAAAFM"]
[Thu Nov 27 01:57:22.088795 2025] [:error] [pid 24826:tid 25137] [client 130.33.50.246:50137] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aSc_glEvPXLVl-nh-yLpnAAAARU"]
[Thu Nov 27 01:57:22.315767 2025] [:error] [pid 25180:tid 25200] [client 130.33.50.246:50051] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aSc_gr-owhtiwMHXYlzd4AAAAZI"]
[Thu Nov 27 01:57:22.542526 2025] [:error] [pid 24826:tid 25120] [client 130.33.50.246:50132] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aSc_glEvPXLVl-nh-yLpnwAAAQU"]
[Thu Nov 27 01:57:22.770335 2025] [:error] [pid 25180:tid 25183] [client 130.33.50.246:15324] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aSc_gr-owhtiwMHXYlzd4QAAAYE"]
[Thu Nov 27 01:57:22.997205 2025] [:error] [pid 25180:tid 25205] [client 130.33.50.246:50068] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSc_gr-owhtiwMHXYlzd4gAAAZc"]
[Thu Nov 27 01:57:23.225138 2025] [:error] [pid 24826:tid 25126] [client 130.33.50.246:50088] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSc_g1EvPXLVl-nh-yLpoAAAAQs"]
[Thu Nov 27 01:57:23.459175 2025] [:error] [pid 8184:tid 8256] [client 130.33.50.246:15327] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSc_g7-M2IHkRYVrcbOTEgAAAFI"]
[Thu Nov 27 01:57:23.686713 2025] [:error] [pid 25180:tid 25193] [client 130.33.50.246:50084] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aSc_g7-owhtiwMHXYlzd5AAAAYs"]
[Thu Nov 27 01:57:23.920924 2025] [:error] [pid 24814:tid 25085] [client 130.33.50.246:15339] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSc_gwPn1NMGCdo6RsitHwAAAUo"]
[Thu Nov 27 01:57:24.148357 2025] [:error] [pid 8184:tid 8243] [client 130.33.50.246:15304] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSc_hL-M2IHkRYVrcbOTEwAAAEc"]
[Thu Nov 27 01:57:24.385090 2025] [:error] [pid 25262:tid 25331] [client 130.33.50.246:50120] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSc_hE3p81VU3bYILBVLvwAAAgo"]
[Thu Nov 27 01:57:24.612133 2025] [:error] [pid 54723:tid 54754] [client 130.33.50.246:50056] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aSc_hA2CEg7QoyDosdIC9gAAABg"]
[Thu Nov 27 01:57:24.839343 2025] [:error] [pid 24826:tid 25122] [client 130.33.50.246:50133] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSc_hFEvPXLVl-nh-yLpogAAAQc"]
[Thu Nov 27 01:57:25.066410 2025] [:error] [pid 24826:tid 25138] [client 130.33.50.246:50111] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSc_hVEvPXLVl-nh-yLpowAAARY"]
[Thu Nov 27 01:57:25.296266 2025] [:error] [pid 24826:tid 25140] [client 130.33.50.246:50089] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSc_hVEvPXLVl-nh-yLppQAAARg"]
[Thu Nov 27 01:57:25.537950 2025] [:error] [pid 24826:tid 25125] [client 130.33.50.246:15321] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSc_hVEvPXLVl-nh-yLppgAAAQo"]
[Thu Nov 27 01:57:25.765545 2025] [:error] [pid 24826:tid 25139] [client 130.33.50.246:50127] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSc_hVEvPXLVl-nh-yLppwAAARc"]
[Thu Nov 27 01:57:25.994947 2025] [:error] [pid 24826:tid 25133] [client 130.33.50.246:50098] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSc_hVEvPXLVl-nh-yLpqAAAARE"]
[Thu Nov 27 01:57:26.222695 2025] [:error] [pid 8184:tid 8248] [client 130.33.50.246:50131] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSc_hr-M2IHkRYVrcbOTFQAAAEs"]
[Thu Nov 27 01:57:26.448704 2025] [:error] [pid 24826:tid 25136] [client 130.33.50.246:15317] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aSc_hlEvPXLVl-nh-yLpqQAAARQ"]
[Thu Nov 27 01:57:26.677440 2025] [:error] [pid 25262:tid 25345] [client 130.33.50.246:15300] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aSc_hk3p81VU3bYILBVLwgAAAhg"]
[Thu Nov 27 01:57:26.905193 2025] [:error] [pid 8184:tid 8252] [client 130.33.50.246:15320] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aSc_hr-M2IHkRYVrcbOTFwAAAE4"]
[Thu Nov 27 01:57:27.132807 2025] [:error] [pid 8184:tid 8239] [client 130.33.50.246:50156] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aSc_h7-M2IHkRYVrcbOTGAAAAEM"]
[Thu Nov 27 01:57:27.361794 2025] [:error] [pid 8184:tid 8238] [client 130.33.50.246:15313] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aSc_h7-M2IHkRYVrcbOTGgAAAEI"]
[Thu Nov 27 01:57:27.588324 2025] [:error] [pid 8184:tid 8258] [client 130.33.50.246:50119] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSc_h7-M2IHkRYVrcbOTGwAAAFQ"]
[Thu Nov 27 01:57:27.819014 2025] [:error] [pid 54723:tid 54753] [client 130.33.50.246:50143] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSc_hw2CEg7QoyDosdIC-QAAABc"]
[Thu Nov 27 01:57:28.045626 2025] [:error] [pid 25180:tid 25196] [client 130.33.50.246:50172] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSc_iL-owhtiwMHXYlzd5QAAAY4"]
[Thu Nov 27 01:57:28.272499 2025] [:error] [pid 24814:tid 25079] [client 130.33.50.246:15340] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aSc_iAPn1NMGCdo6RsitIQAAAUQ"]
[Thu Nov 27 01:57:28.498680 2025] [:error] [pid 24814:tid 25083] [client 130.33.50.246:50103] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aSc_iAPn1NMGCdo6RsitIgAAAUg"]
[Thu Nov 27 01:57:28.726062 2025] [:error] [pid 25262:tid 25337] [client 130.33.50.246:15341] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aSc_iE3p81VU3bYILBVLxQAAAhA"]
[Thu Nov 27 01:57:28.952936 2025] [:error] [pid 25262:tid 25334] [client 130.33.50.246:50168] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aSc_iE3p81VU3bYILBVLxgAAAg0"]
[Thu Nov 27 01:57:29.190395 2025] [:error] [pid 25180:tid 25201] [client 130.33.50.246:50171] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aSc_ib-owhtiwMHXYlzd5gAAAZM"]
[Thu Nov 27 01:57:29.417559 2025] [:error] [pid 25180:tid 25192] [client 130.33.50.246:50104] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aSc_ib-owhtiwMHXYlzd5wAAAYo"]
[Thu Nov 27 01:57:29.645883 2025] [:error] [pid 25180:tid 25206] [client 130.33.50.246:15310] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aSc_ib-owhtiwMHXYlzd6AAAAZg"]
[Thu Nov 27 01:57:29.872991 2025] [:error] [pid 24814:tid 25081] [client 130.33.50.246:50079] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aSc_iQPn1NMGCdo6RsitJAAAAUY"]
[Thu Nov 27 01:57:30.111099 2025] [:error] [pid 8184:tid 8251] [client 130.33.50.246:50099] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aSc_ir-M2IHkRYVrcbOTHwAAAE0"]
[Thu Nov 27 01:57:30.336631 2025] [:error] [pid 25180:tid 25197] [client 130.33.50.246:15318] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-22.php"] [unique_id "aSc_ir-owhtiwMHXYlzd6QAAAY8"]
[Thu Nov 27 01:57:30.563824 2025] [:error] [pid 8184:tid 8246] [client 130.33.50.246:50108] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-22.php"] [unique_id "aSc_ir-M2IHkRYVrcbOTIQAAAEk"]
[Thu Nov 27 01:57:30.814484 2025] [:error] [pid 25180:tid 25195] [client 130.33.50.246:50118] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-22.php"] [unique_id "aSc_ir-owhtiwMHXYlzd6gAAAY0"]
[Thu Nov 27 01:57:31.045646 2025] [:error] [pid 24814:tid 25087] [client 130.33.50.246:15337] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-22.php"] [unique_id "aSc_iwPn1NMGCdo6RsitJQAAAUw"]
[Thu Nov 27 01:57:31.274820 2025] [:error] [pid 8184:tid 8256] [client 130.33.50.246:50105] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSc_i7-M2IHkRYVrcbOTIwAAAFI"]
[Thu Nov 27 01:57:31.509609 2025] [:error] [pid 24814:tid 25097] [client 130.33.50.246:15336] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSc_iwPn1NMGCdo6RsitJgAAAVY"]
[Thu Nov 27 01:57:31.736754 2025] [:error] [pid 24814:tid 25098] [client 130.33.50.246:50139] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSc_iwPn1NMGCdo6RsitJwAAAVc"]
[Thu Nov 27 01:57:31.972702 2025] [:error] [pid 8184:tid 8237] [client 130.33.50.246:15344] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aSc_i7-M2IHkRYVrcbOTJAAAAEE"]
[Thu Nov 27 01:57:32.199157 2025] [:error] [pid 24814:tid 25082] [client 130.33.50.246:50057] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aSc_jAPn1NMGCdo6RsitKAAAAUc"]
[Thu Nov 27 01:57:32.437209 2025] [:error] [pid 8184:tid 8252] [client 130.33.50.246:15322] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aSc_jL-M2IHkRYVrcbOTJQAAAE4"]
[Thu Nov 27 01:57:32.672437 2025] [:error] [pid 24814:tid 25088] [client 130.33.50.246:15301] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aSc_jAPn1NMGCdo6RsitKQAAAU0"]
[Thu Nov 27 01:57:32.899294 2025] [:error] [pid 24814:tid 25089] [client 130.33.50.246:50167] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aSc_jAPn1NMGCdo6RsitLAAAAU4"]
[Thu Nov 27 01:57:33.128084 2025] [:error] [pid 8184:tid 8254] [client 130.33.50.246:50048] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aSc_jb-M2IHkRYVrcbOTJgAAAFA"]
[Thu Nov 27 01:57:33.358744 2025] [:error] [pid 25180:tid 25198] [client 130.33.50.246:50166] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aSc_jb-owhtiwMHXYlzd7AAAAZA"]
[Thu Nov 27 01:57:33.590703 2025] [:error] [pid 54723:tid 54748] [client 130.33.50.246:15319] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aSc_jQ2CEg7QoyDosdIC_AAAABI"]
[Thu Nov 27 01:57:33.821030 2025] [:error] [pid 54723:tid 54741] [client 130.33.50.246:50091] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aSc_jQ2CEg7QoyDosdIC_QAAAAs"]
[Thu Nov 27 01:57:34.048832 2025] [:error] [pid 54723:tid 54740] [client 130.33.50.246:15232] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_jg2CEg7QoyDosdIC_gAAAAo"]
[Thu Nov 27 01:57:34.280854 2025] [:error] [pid 54723:tid 54734] [client 130.33.50.246:15243] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_jg2CEg7QoyDosdIC_wAAAAQ"]
[Thu Nov 27 01:57:34.510629 2025] [:error] [pid 54723:tid 54730] [client 130.33.50.246:15303] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_jg2CEg7QoyDosdIDAAAAAAE"]
[Thu Nov 27 01:57:34.737974 2025] [:error] [pid 54723:tid 54743] [client 130.33.50.246:50094] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_jg2CEg7QoyDosdIDAQAAAA0"]
[Thu Nov 27 01:57:34.968945 2025] [:error] [pid 54723:tid 54742] [client 130.33.50.246:15334] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_jg2CEg7QoyDosdIDAgAAAAw"]
[Thu Nov 27 01:57:35.196426 2025] [:error] [pid 54723:tid 54750] [client 130.33.50.246:15298] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_jw2CEg7QoyDosdIDAwAAABQ"]
[Thu Nov 27 01:57:35.423717 2025] [:error] [pid 54723:tid 54733] [client 130.33.50.246:50159] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_jw2CEg7QoyDosdIDBAAAAAM"]
[Thu Nov 27 01:57:35.654041 2025] [:error] [pid 54723:tid 54737] [client 130.33.50.246:50064] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_jw2CEg7QoyDosdIDBgAAAAc"]
[Thu Nov 27 01:57:35.883794 2025] [:error] [pid 54723:tid 54745] [client 130.33.50.246:15289] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aSc_jw2CEg7QoyDosdIDBwAAAA8"]
[Thu Nov 27 01:57:36.112072 2025] [:error] [pid 25262:tid 25326] [client 130.33.50.246:15307] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aSc_kE3p81VU3bYILBVLygAAAgU"]
[Thu Nov 27 01:57:36.345107 2025] [:error] [pid 54723:tid 54744] [client 130.33.50.246:15342] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aSc_kA2CEg7QoyDosdIDCAAAAA4"]
[Thu Nov 27 01:57:36.579317 2025] [:error] [pid 54723:tid 54732] [client 130.33.50.246:15247] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aSc_kA2CEg7QoyDosdIDCQAAAAI"]
[Thu Nov 27 01:57:36.820804 2025] [:error] [pid 25180:tid 25203] [client 130.33.50.246:50090] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_kL-owhtiwMHXYlzd7gAAAZU"]
[Thu Nov 27 01:57:37.048462 2025] [:error] [pid 25180:tid 25187] [client 130.33.50.246:15239] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_kb-owhtiwMHXYlzd7wAAAYU"]
[Thu Nov 27 01:57:37.278096 2025] [:error] [pid 24814:tid 25085] [client 130.33.50.246:15315] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_kQPn1NMGCdo6RsitLQAAAUo"]
[Thu Nov 27 01:57:37.506039 2025] [:error] [pid 24826:tid 25117] [client 130.33.50.246:15330] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aSc_kVEvPXLVl-nh-yLprgAAAQI"]
[Thu Nov 27 01:57:37.736923 2025] [:error] [pid 25262:tid 25324] [client 130.33.50.246:15259] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aSc_kU3p81VU3bYILBVLzAAAAgM"]
[Thu Nov 27 01:57:37.966912 2025] [:error] [pid 24814:tid 25099] [client 130.33.50.246:50078] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aSc_kQPn1NMGCdo6RsitLgAAAVg"]
[Thu Nov 27 01:57:38.194088 2025] [:error] [pid 25262:tid 25323] [client 130.33.50.246:15269] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aSc_kk3p81VU3bYILBVLzQAAAgI"]
[Thu Nov 27 01:57:38.427494 2025] [:error] [pid 24814:tid 25094] [client 130.33.50.246:15235] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aSc_kgPn1NMGCdo6RsitLwAAAVM"]
[Thu Nov 27 01:57:38.665936 2025] [:error] [pid 25262:tid 25325] [client 130.33.50.246:15348] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aSc_kk3p81VU3bYILBVLzgAAAgQ"]
[Thu Nov 27 01:57:38.894515 2025] [:error] [pid 24814:tid 25095] [client 130.33.50.246:50113] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aSc_kgPn1NMGCdo6RsitMAAAAVQ"]
[Thu Nov 27 01:57:39.121752 2025] [:error] [pid 25262:tid 25321] [client 130.33.50.246:50117] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aSc_k03p81VU3bYILBVLzwAAAgA"]
[Thu Nov 27 01:57:39.348698 2025] [:error] [pid 8184:tid 8241] [client 130.33.50.246:50092] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aSc_k7-M2IHkRYVrcbOTKQAAAEU"]
[Thu Nov 27 01:57:39.586676 2025] [:error] [pid 8184:tid 8255] [client 130.33.50.246:15316] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aSc_k7-M2IHkRYVrcbOTMAAAAFE"]
[Thu Nov 27 01:57:39.822003 2025] [:error] [pid 8184:tid 8251] [client 130.33.50.246:50055] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aSc_k7-M2IHkRYVrcbOTMwAAAE0"]
[Thu Nov 27 01:57:40.049778 2025] [:error] [pid 25262:tid 25342] [client 130.33.50.246:15314] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aSc_lE3p81VU3bYILBVL1AAAAhU"]
[Thu Nov 27 01:57:40.280846 2025] [:error] [pid 24826:tid 25127] [client 130.33.50.246:15266] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aSc_lFEvPXLVl-nh-yLpsAAAAQw"]
[Thu Nov 27 01:57:40.509890 2025] [:error] [pid 8184:tid 8241] [client 130.33.50.246:15347] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSc_lL-M2IHkRYVrcbOTQQAAAEU"]
[Thu Nov 27 01:57:40.736614 2025] [:error] [pid 8184:tid 8240] [client 130.33.50.246:15312] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSc_lL-M2IHkRYVrcbOTRQAAAEQ"]
[Thu Nov 27 01:57:40.968607 2025] [:error] [pid 25180:tid 25195] [client 130.33.50.246:15284] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSc_lL-owhtiwMHXYlzeAQAAAY0"]
[Thu Nov 27 01:57:41.195306 2025] [:error] [pid 24826:tid 25122] [client 130.33.50.246:50128] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSc_lVEvPXLVl-nh-yLpsQAAAQc"]
[Thu Nov 27 01:57:41.423611 2025] [:error] [pid 54723:tid 54740] [client 130.33.50.246:15268] [client 130.33.50.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSc_lQ2CEg7QoyDosdIDDgAAAAo"]
[Thu Nov 27 01:57:41.660625 2025] [:error] [pid 54723:tid 54730] [client 130.33.50.246:50070] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aSc_lQ2CEg7QoyDosdIDDwAAAAE"]
[Thu Nov 27 01:57:41.887018 2025] [:error] [pid 8184:tid 8262] [client 130.33.50.246:15280] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aSc_lb-M2IHkRYVrcbOTTwAAAFg"]
[Thu Nov 27 01:57:42.115836 2025] [:error] [pid 8184:tid 8238] [client 130.33.50.246:15305] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aSc_lr-M2IHkRYVrcbOTVAAAAEI"]
[Thu Nov 27 01:57:42.341806 2025] [:error] [pid 24814:tid 25076] [client 130.33.50.246:50154] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aSc_lgPn1NMGCdo6RsitMQAAAUE"]
[Thu Nov 27 01:57:42.568688 2025] [:error] [pid 8184:tid 8240] [client 130.33.50.246:15338] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_lr-M2IHkRYVrcbOTXAAAAEQ"]
[Thu Nov 27 01:57:42.795186 2025] [:error] [pid 54723:tid 54750] [client 130.33.50.246:50087] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_lg2CEg7QoyDosdIDEQAAABQ"]
[Thu Nov 27 01:57:43.022102 2025] [:error] [pid 54723:tid 54737] [client 130.33.50.246:50097] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_lw2CEg7QoyDosdIDEwAAAAc"]
[Thu Nov 27 01:57:43.250859 2025] [:error] [pid 54723:tid 54744] [client 130.33.50.246:15331] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_lw2CEg7QoyDosdIDFQAAAA4"]
[Thu Nov 27 01:57:43.477713 2025] [:error] [pid 24826:tid 25134] [client 130.33.50.246:50164] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aSc_l1EvPXLVl-nh-yLpuAAAARI"]
[Thu Nov 27 01:57:43.704557 2025] [:error] [pid 25180:tid 25184] [client 130.33.50.246:50109] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aSc_l7-owhtiwMHXYlzeDAAAAYI"]
[Thu Nov 27 01:57:43.931559 2025] [:error] [pid 8184:tid 8255] [client 130.33.50.246:50074] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aSc_l7-M2IHkRYVrcbOTdAAAAFE"]
[Thu Nov 27 01:57:44.184367 2025] [:error] [pid 8184:tid 8247] [client 130.33.50.246:50161] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aSc_mL-M2IHkRYVrcbOTdwAAAEo"]
[Thu Nov 27 01:57:44.410251 2025] [:error] [pid 24814:tid 25096] [client 130.33.50.246:15306] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aSc_mAPn1NMGCdo6RsitMgAAAVU"]
[Thu Nov 27 01:57:44.637909 2025] [:error] [pid 25180:tid 25200] [client 130.33.50.246:15352] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aSc_mL-owhtiwMHXYlzeDQAAAZI"]
[Thu Nov 27 01:57:44.864120 2025] [:error] [pid 24826:tid 25135] [client 130.33.50.246:50095] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aSc_mFEvPXLVl-nh-yLpwQAAARM"]
[Thu Nov 27 01:57:45.094072 2025] [:error] [pid 25180:tid 25202] [client 130.33.50.246:15265] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aSc_mb-owhtiwMHXYlzeDgAAAZQ"]
[Thu Nov 27 01:57:45.335116 2025] [:error] [pid 8184:tid 8253] [client 130.33.50.246:15311] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kk.php"] [unique_id "aSc_mb-M2IHkRYVrcbOThAAAAE8"]
[Thu Nov 27 01:57:45.566104 2025] [:error] [pid 54723:tid 54730] [client 130.33.50.246:15345] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kk.php"] [unique_id "aSc_mQ2CEg7QoyDosdIDJAAAAAE"]
[Thu Nov 27 01:57:45.792886 2025] [:error] [pid 25180:tid 25196] [client 130.33.50.246:15357] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kk.php"] [unique_id "aSc_mb-owhtiwMHXYlzeEAAAAY4"]
[Thu Nov 27 01:57:46.022059 2025] [:error] [pid 25180:tid 25188] [client 130.33.50.246:50077] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kk.php"] [unique_id "aSc_mr-owhtiwMHXYlzeEQAAAYY"]
[Thu Nov 27 01:57:46.248337 2025] [:error] [pid 24814:tid 25079] [client 130.33.50.246:15309] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aSc_mgPn1NMGCdo6RsitMwAAAUQ"]
[Thu Nov 27 01:57:46.474218 2025] [:error] [pid 8184:tid 8243] [client 130.33.50.246:15350] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aSc_mr-M2IHkRYVrcbOTjQAAAEc"]
[Thu Nov 27 01:57:46.704600 2025] [:error] [pid 25262:tid 25326] [client 130.33.50.246:50102] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aSc_mk3p81VU3bYILBVL-AAAAgU"]
[Thu Nov 27 01:57:46.931331 2025] [:error] [pid 24814:tid 25083] [client 130.33.50.246:15212] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aSc_mgPn1NMGCdo6RsitNAAAAUg"]
[Thu Nov 27 01:57:47.161527 2025] [:error] [pid 8184:tid 8240] [client 130.33.50.246:15354] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSc_m7-M2IHkRYVrcbOTjgAAAEQ"]
[Thu Nov 27 01:57:47.388525 2025] [:error] [pid 54723:tid 54744] [client 130.33.50.246:15323] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSc_mw2CEg7QoyDosdIDKwAAAA4"]
[Thu Nov 27 01:57:47.617937 2025] [:error] [pid 8184:tid 8258] [client 130.33.50.246:50093] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSc_m7-M2IHkRYVrcbOTkQAAAFQ"]
[Thu Nov 27 01:57:47.848758 2025] [:error] [pid 8184:tid 8254] [client 130.33.50.246:50110] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aSc_m7-M2IHkRYVrcbOTkgAAAFA"]
[Thu Nov 27 01:57:48.078131 2025] [:error] [pid 25180:tid 25195] [client 130.33.50.246:15351] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_nL-owhtiwMHXYlzeFQAAAY0"]
[Thu Nov 27 01:57:48.313102 2025] [:error] [pid 25262:tid 25322] [client 130.33.50.246:50076] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_nE3p81VU3bYILBVL-QAAAgE"]
[Thu Nov 27 01:57:48.542274 2025] [:error] [pid 8184:tid 8242] [client 130.33.50.246:50100] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_nL-M2IHkRYVrcbOTkwAAAEY"]
[Thu Nov 27 01:57:48.799393 2025] [:error] [pid 24826:tid 25136] [client 130.33.50.246:15255] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aSc_nFEvPXLVl-nh-yLpywAAARQ"]
[Thu Nov 27 01:57:49.027754 2025] [:error] [pid 25262:tid 25323] [client 130.33.50.246:15269] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aSc_nU3p81VU3bYILBVL-wAAAgI"]
[Thu Nov 27 01:57:49.254779 2025] [:error] [pid 8184:tid 8250] [client 130.33.50.246:15329] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aSc_nb-M2IHkRYVrcbOTlQAAAEw"]
[Thu Nov 27 01:57:49.481629 2025] [:error] [pid 24826:tid 25115] [client 130.33.50.246:50174] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aSc_nVEvPXLVl-nh-yLpzAAAAQA"]
[Thu Nov 27 01:57:49.712547 2025] [:error] [pid 8184:tid 8259] [client 130.33.50.246:50067] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aSc_nb-M2IHkRYVrcbOTlgAAAFU"]
[Thu Nov 27 01:57:49.940104 2025] [:error] [pid 24814:tid 25086] [client 130.33.50.246:50086] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aSc_nQPn1NMGCdo6RsitOAAAAUs"]
[Thu Nov 27 01:57:50.173446 2025] [:error] [pid 24826:tid 25121] [client 130.33.50.246:15296] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aSc_nlEvPXLVl-nh-yLpzQAAAQY"]
[Thu Nov 27 01:57:50.403122 2025] [:error] [pid 24826:tid 25130] [client 130.33.50.246:15273] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aSc_nlEvPXLVl-nh-yLpzwAAAQ8"]
[Thu Nov 27 01:57:50.630121 2025] [:error] [pid 25180:tid 25185] [client 130.33.50.246:15328] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aSc_nr-owhtiwMHXYlzeFgAAAYM"]
[Thu Nov 27 01:57:50.857690 2025] [:error] [pid 24826:tid 25118] [client 130.33.50.246:15233] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aSc_nlEvPXLVl-nh-yLp0QAAAQM"]
[Thu Nov 27 01:57:51.083801 2025] [:error] [pid 8184:tid 8261] [client 130.33.50.246:15326] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aSc_n7-M2IHkRYVrcbOTnAAAAFc"]
[Thu Nov 27 01:57:51.310609 2025] [:error] [pid 8184:tid 8252] [client 130.33.50.246:15267] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aSc_n7-M2IHkRYVrcbOTnwAAAE4"]
[Thu Nov 27 01:57:51.537354 2025] [:error] [pid 25262:tid 25345] [client 130.33.50.246:15249] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aSc_n03p81VU3bYILBVMAAAAAhg"]
[Thu Nov 27 01:57:51.764748 2025] [:error] [pid 8184:tid 8238] [client 130.33.50.246:15356] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aSc_n7-M2IHkRYVrcbOTpAAAAEI"]
[Thu Nov 27 01:57:51.990585 2025] [:error] [pid 25262:tid 25344] [client 130.33.50.246:15205] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aSc_n03p81VU3bYILBVMBQAAAhc"]
[Thu Nov 27 01:57:52.217690 2025] [:error] [pid 25262:tid 25339] [client 130.33.50.246:15277] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aSc_oE3p81VU3bYILBVMCAAAAhI"]
[Thu Nov 27 01:57:52.444527 2025] [:error] [pid 25262:tid 25335] [client 130.33.50.246:50163] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aSc_oE3p81VU3bYILBVMCgAAAg4"]
[Thu Nov 27 01:57:52.672184 2025] [:error] [pid 25262:tid 25326] [client 130.33.50.246:15250] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_oE3p81VU3bYILBVMDAAAAgU"]
[Thu Nov 27 01:57:52.905052 2025] [:error] [pid 8184:tid 8247] [client 130.33.50.246:15174] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_oL-M2IHkRYVrcbOTrQAAAEo"]
[Thu Nov 27 01:57:53.131715 2025] [:error] [pid 8184:tid 8246] [client 130.33.50.246:15226] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_ob-M2IHkRYVrcbOTsAAAAEk"]
[Thu Nov 27 01:57:53.358889 2025] [:error] [pid 8184:tid 8236] [client 130.33.50.246:15248] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aSc_ob-M2IHkRYVrcbOTsQAAAEA"]
[Thu Nov 27 01:57:53.586528 2025] [:error] [pid 54723:tid 54735] [client 130.33.50.246:15261] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aSc_oQ2CEg7QoyDosdIDLgAAAAU"]
[Thu Nov 27 01:57:53.815818 2025] [:error] [pid 8184:tid 8256] [client 130.33.50.246:15189] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aSc_ob-M2IHkRYVrcbOTsgAAAFI"]
[Thu Nov 27 01:57:54.043483 2025] [:error] [pid 8184:tid 8261] [client 130.33.50.246:15262] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aSc_or-M2IHkRYVrcbOTswAAAFc"]
[Thu Nov 27 01:57:54.272442 2025] [:error] [pid 8184:tid 8237] [client 130.33.50.246:15190] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aSc_or-M2IHkRYVrcbOTtQAAAEE"]
[Thu Nov 27 01:57:54.514373 2025] [:error] [pid 8184:tid 8240] [client 130.33.50.246:15182] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_or-M2IHkRYVrcbOTtgAAAEQ"]
[Thu Nov 27 01:57:54.741132 2025] [:error] [pid 54723:tid 54729] [client 130.33.50.246:15291] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_og2CEg7QoyDosdIDLwAAAAA"]
[Thu Nov 27 01:57:54.973807 2025] [:error] [pid 54723:tid 54748] [client 130.33.50.246:15257] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_og2CEg7QoyDosdIDMAAAABI"]
[Thu Nov 27 01:57:55.201833 2025] [:error] [pid 24826:tid 25127] [client 130.33.50.246:50123] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aSc_o1EvPXLVl-nh-yLp3AAAAQw"]
[Thu Nov 27 01:57:55.428390 2025] [:error] [pid 24826:tid 25125] [client 130.33.50.246:15302] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aSc_o1EvPXLVl-nh-yLp3QAAAQo"]
[Thu Nov 27 01:57:55.661972 2025] [:error] [pid 54723:tid 54740] [client 130.33.50.246:15335] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aSc_ow2CEg7QoyDosdIDMQAAAAo"]
[Thu Nov 27 01:57:55.899104 2025] [:error] [pid 25180:tid 25194] [client 130.33.50.246:15119] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aSc_o7-owhtiwMHXYlzeGwAAAYw"]
[Thu Nov 27 01:57:56.147838 2025] [:error] [pid 8184:tid 8258] [client 130.33.50.246:50162] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "aSc_pL-M2IHkRYVrcbOTuAAAAFQ"]
[Thu Nov 27 01:57:56.377167 2025] [:error] [pid 24814:tid 25086] [client 130.33.50.246:50125] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pAPn1NMGCdo6RsitTQAAAUs"]
[Thu Nov 27 01:57:56.610313 2025] [:error] [pid 8184:tid 8262] [client 130.33.50.246:15272] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pL-M2IHkRYVrcbOTuQAAAFg"]
[Thu Nov 27 01:57:56.838612 2025] [:error] [pid 8184:tid 8238] [client 130.33.50.246:15176] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pL-M2IHkRYVrcbOTugAAAEI"]
[Thu Nov 27 01:57:57.073856 2025] [:error] [pid 8184:tid 8239] [client 130.33.50.246:15238] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pb-M2IHkRYVrcbOTuwAAAEM"]
[Thu Nov 27 01:57:57.300890 2025] [:error] [pid 8184:tid 8253] [client 130.33.50.246:15358] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pb-M2IHkRYVrcbOTvAAAAE8"]
[Thu Nov 27 01:57:57.540974 2025] [:error] [pid 8184:tid 8259] [client 130.33.50.246:50101] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pb-M2IHkRYVrcbOTvQAAAFU"]
[Thu Nov 27 01:57:57.778419 2025] [:error] [pid 25262:tid 25329] [client 130.33.50.246:15168] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pU3p81VU3bYILBVMDwAAAgg"]
[Thu Nov 27 01:57:58.011166 2025] [:error] [pid 8184:tid 8251] [client 130.33.50.246:15357] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSc_pr-M2IHkRYVrcbOTvgAAAE0"]
[Thu Nov 27 01:57:58.238729 2025] [:error] [pid 54723:tid 54730] [client 130.33.50.246:15343] [client 130.33.50.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSc_pg2CEg7QoyDosdIDMwAAAAE"]
[Thu Nov 27 01:57:58.467322 2025] [:error] [pid 24814:tid 25098] [client 130.33.50.246:15325] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aSc_pgPn1NMGCdo6RsitTgAAAVc"]
[Thu Nov 27 01:57:58.694346 2025] [:error] [pid 24826:tid 25139] [client 130.33.50.246:50102] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aSc_plEvPXLVl-nh-yLp3wAAARc"]
[Thu Nov 27 01:57:58.926705 2025] [:error] [pid 24826:tid 25115] [client 130.33.50.246:15285] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aSc_plEvPXLVl-nh-yLp4AAAAQA"]
[Thu Nov 27 01:57:59.153784 2025] [:error] [pid 25180:tid 25191] [client 130.33.50.246:15275] [client 130.33.50.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSc_p7-owhtiwMHXYlzeHAAAAYk"]
[Thu Nov 27 01:57:59.383286 2025] [:error] [pid 54723:tid 54742] [client 130.33.50.246:15181] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aSc_pw2CEg7QoyDosdIDNAAAAAw"]
[Thu Nov 27 01:57:59.614348 2025] [:error] [pid 8184:tid 8245] [client 130.33.50.246:15279] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aSc_p7-M2IHkRYVrcbOTvwAAAEg"]
[Thu Nov 27 01:57:59.842492 2025] [:error] [pid 8184:tid 8247] [client 130.33.50.246:15240] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aSc_p7-M2IHkRYVrcbOTwAAAAEo"]
[Thu Nov 27 01:58:00.069399 2025] [:error] [pid 8184:tid 8255] [client 130.33.50.246:15236] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aSc_qL-M2IHkRYVrcbOTwQAAAFE"]
[Thu Nov 27 01:58:00.299494 2025] [:error] [pid 25180:tid 25184] [client 130.33.50.246:15214] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aSc_qL-owhtiwMHXYlzeHQAAAYI"]
[Thu Nov 27 01:58:00.526178 2025] [:error] [pid 24814:tid 25087] [client 130.33.50.246:50106] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aSc_qAPn1NMGCdo6RsitTwAAAUw"]
[Thu Nov 27 01:58:00.752499 2025] [:error] [pid 24814:tid 25082] [client 130.33.50.246:15253] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aSc_qAPn1NMGCdo6RsitUAAAAUc"]
[Thu Nov 27 01:58:00.979788 2025] [:error] [pid 25180:tid 25202] [client 130.33.50.246:15283] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aSc_qL-owhtiwMHXYlzeHwAAAZQ"]
[Thu Nov 27 01:58:01.207514 2025] [:error] [pid 24826:tid 25116] [client 130.33.50.246:15346] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aSc_qVEvPXLVl-nh-yLp4QAAAQE"]
[Thu Nov 27 01:58:01.445138 2025] [:error] [pid 24826:tid 25130] [client 130.33.50.246:15197] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aSc_qVEvPXLVl-nh-yLp4gAAAQ8"]
[Thu Nov 27 01:58:01.671728 2025] [:error] [pid 24826:tid 25128] [client 130.33.50.246:15224] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aSc_qVEvPXLVl-nh-yLp5AAAAQ0"]
[Thu Nov 27 01:58:01.902301 2025] [:error] [pid 8184:tid 8246] [client 130.33.50.246:15246] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aSc_qb-M2IHkRYVrcbOTwwAAAEk"]
[Thu Nov 27 01:58:02.130852 2025] [:error] [pid 54723:tid 54743] [client 130.33.50.246:15242] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aSc_qg2CEg7QoyDosdIDNgAAAA0"]
[Thu Nov 27 01:58:02.358676 2025] [:error] [pid 8184:tid 8236] [client 130.33.50.246:15237] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aSc_qr-M2IHkRYVrcbOTxAAAAEA"]
[Thu Nov 27 01:58:02.585518 2025] [:error] [pid 54723:tid 54745] [client 130.33.50.246:15110] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aSc_qg2CEg7QoyDosdIDNwAAAA8"]
[Thu Nov 27 01:58:02.811519 2025] [:error] [pid 54723:tid 54744] [client 130.33.50.246:15191] [client 130.33.50.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aSc_qg2CEg7QoyDosdIDOAAAAA4"]
[Thu Nov 27 02:41:58.043486 2025] [:error] [pid 25180:tid 25199] [client 145.239.10.137:42677] File does not exist: /usr/local/apache/htdocs/suspended-page/13k.php, referer: http://dbservices.com.au/13k.php
[Thu Nov 27 04:41:00.414071 2025] [:error] [pid 6201:tid 6209] [client 152.42.186.218:54324] [client 152.42.186.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aSdl3DkSJeRkIQGTjzwfBQAAAAQ"]
[Thu Nov 27 06:03:42.155017 2025] [:error] [pid 21017:tid 21059] [client 101.91.148.219:50139] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSd5PqZA663ub03MMQum7QAAAQA"]
[Thu Nov 27 07:38:52.720760 2025] [:error] [pid 40994:tid 41022] [client 68.183.9.16:56638] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSePjBEaoaa-CIBg8ekJKgAAABc"]
[Thu Nov 27 07:38:53.695732 2025] [:error] [pid 41333:tid 41358] [client 68.183.9.16:56678] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/graphql"] [unique_id "aSePjcPZlsys_ig6DWmV2QAAAJU"]
[Thu Nov 27 07:38:54.661447 2025] [:error] [pid 40994:tid 41023] [client 68.183.9.16:56714] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api"] [unique_id "aSePjhEaoaa-CIBg8ekJNgAAABg"]
[Thu Nov 27 07:38:55.689894 2025] [:error] [pid 40904:tid 40958] [client 68.183.9.16:56736] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/graphql"] [unique_id "aSePj3J1jozOs8KgKmtNLwAAARQ"]
[Thu Nov 27 07:38:56.655594 2025] [:error] [pid 40903:tid 40926] [client 68.183.9.16:56778] [client 68.183.9.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/graphql/api"] [unique_id "aSePkGamXKAP8yZholwnygAAAY8"]
[Thu Nov 27 07:39:01.927713 2025] [:error] [pid 42088:tid 42102] [client 159.65.18.197:40548] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2/api-docs"] [unique_id "aSePlTlPQoEY3cJv4drsrwAAAUg"]
[Thu Nov 27 07:39:02.441655 2025] [:error] [pid 42184:tid 42186] [client 159.65.18.197:40560] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3/api-docs"] [unique_id "aSePllOoQLWBrBCHw2ULGgAAAEA"]
[Thu Nov 27 07:39:02.991741 2025] [:error] [pid 42091:tid 42156] [client 159.65.18.197:40566] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aSePlgR7Ph3mn6av61CliAAAAIQ"]
[Thu Nov 27 07:39:03.486382 2025] [:error] [pid 42089:tid 42133] [client 159.65.18.197:40568] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/api/swagger.json"] [unique_id "aSePl3pFRQlv2EE5acDyBQAAAAk"]
[Thu Nov 27 07:39:03.977073 2025] [:error] [pid 42091:tid 42160] [client 159.65.18.197:40570] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/@vite/env"] [unique_id "aSePlwR7Ph3mn6av61CljAAAAIg"]
[Thu Nov 27 07:39:04.473075 2025] [:error] [pid 42089:tid 42137] [client 159.65.18.197:40586] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/actuator/env"] [unique_id "aSePmHpFRQlv2EE5acDyBgAAAA0"]
[Thu Nov 27 07:39:04.969319 2025] [:error] [pid 42089:tid 42139] [client 159.65.18.197:40588] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/server"] [unique_id "aSePmHpFRQlv2EE5acDyBwAAAA8"]
[Thu Nov 27 07:39:05.491998 2025] [:error] [pid 42091:tid 42166] [client 159.65.18.197:40596] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aSePmQR7Ph3mn6av61CljwAAAI4"]
[Thu Nov 27 07:39:05.977896 2025] [:error] [pid 42089:tid 42142] [client 159.65.18.197:40598] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about"] [unique_id "aSePmXpFRQlv2EE5acDyCwAAABI"]
[Thu Nov 27 07:39:06.468424 2025] [:error] [pid 42089:tid 42148] [client 159.65.18.197:40614] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/debug/default/view"] [unique_id "aSePmnpFRQlv2EE5acDyDwAAABg"]
[Thu Nov 27 07:39:06.959778 2025] [:error] [pid 42089:tid 42125] [client 159.65.18.197:40618] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2/_catalog"] [unique_id "aSePmnpFRQlv2EE5acDyEQAAAAM"]
[Thu Nov 27 07:39:07.494942 2025] [:error] [pid 42091:tid 42175] [client 159.65.18.197:40622] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSePmwR7Ph3mn6av61ClmAAAAJc"]
[Thu Nov 27 07:39:07.981196 2025] [:error] [pid 42089:tid 42130] [client 159.65.18.197:40626] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/server-status"] [unique_id "aSePm3pFRQlv2EE5acDyFQAAAAg"]
[Thu Nov 27 07:39:08.476975 2025] [:error] [pid 42088:tid 42101] [client 159.65.18.197:40640] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/login.action"] [unique_id "aSePnDlPQoEY3cJv4drtGgAAAUc"]
[Thu Nov 27 07:39:08.970492 2025] [:error] [pid 42089:tid 42140] [client 159.65.18.197:40648] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/_all_dbs"] [unique_id "aSePnHpFRQlv2EE5acDyHQAAABA"]
[Thu Nov 27 07:39:09.461458 2025] [:error] [pid 42184:tid 42205] [client 159.65.18.197:34886] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.DS_Store"] [unique_id "aSePnVOoQLWBrBCHw2ULPAAAAFM"]
[Thu Nov 27 07:39:09.957443 2025] [:error] [pid 42091:tid 42173] [client 159.65.18.197:34888] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aSePnQR7Ph3mn6av61ClqAAAAJU"]
[Thu Nov 27 07:39:10.454920 2025] [:error] [pid 42088:tid 42102] [client 159.65.18.197:34892] [client 159.65.18.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSePnjlPQoEY3cJv4drtNgAAAUg"]
[Thu Nov 27 07:39:10.974478 2025] [:error] [pid 42184:tid 42192] [client 159.65.18.197:34898] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSePnlOoQLWBrBCHw2ULYwAAAEY"]
[Thu Nov 27 07:39:11.464104 2025] [:error] [pid 42091:tid 42160] [client 159.65.18.197:34904] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/config.json"] [unique_id "aSePnwR7Ph3mn6av61ClwwAAAIg"]
[Thu Nov 27 07:39:11.955012 2025] [:error] [pid 42091:tid 42162] [client 159.65.18.197:34918] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/telescope/requests"] [unique_id "aSePnwR7Ph3mn6av61ClxAAAAIo"]
[Thu Nov 27 07:39:12.441123 2025] [:error] [pid 42184:tid 42201] [client 159.65.18.197:34930] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aSePoFOoQLWBrBCHw2ULbwAAAE8"]
[Thu Nov 27 07:39:12.927683 2025] [:error] [pid 42089:tid 42130] [client 159.65.18.197:34946] [client 159.65.18.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSePoHpFRQlv2EE5acDyNwAAAAg"]
[Thu Nov 27 10:03:08.802865 2025] [:error] [pid 48062:tid 48077] [client 43.130.34.74:45066] [client 43.130.34.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSexXHxZNMlQSzievzBjLQAAAYs"]
[Thu Nov 27 11:29:36.904096 2025] [:error] [pid 20859:tid 20894] [client 170.106.187.106:44098] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSfFoMdz0RxQsRyAhbSR2gAAAIQ"]
[Thu Nov 27 11:35:59.607373 2025] [:error] [pid 20858:tid 20870] [client 213.21.239.4:33768] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/api/.git/config"] [unique_id "aSfHH1exMQcaxyQE6og64gAAAAc"]
[Thu Nov 27 11:35:59.613887 2025] [:error] [pid 22708:tid 22713] [client 213.21.239.4:33740] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/backup/.git/config"] [unique_id "aSfHH0F1ibvGym-WoX0cNAAAAQM"]
[Thu Nov 27 11:35:59.616363 2025] [:error] [pid 20858:tid 20863] [client 213.21.239.4:33858] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices/static../.git/config"] [unique_id "aSfHH1exMQcaxyQE6og65AAAAAA"]
[Thu Nov 27 11:35:59.617200 2025] [:error] [pid 22708:tid 22712] [client 213.21.239.4:33766] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/admin/.git/config"] [unique_id "aSfHH0F1ibvGym-WoX0cNgAAAQI"]
[Thu Nov 27 11:35:59.617268 2025] [:error] [pid 22708:tid 22726] [client 213.21.239.4:33764] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/common/.git/config"] [unique_id "aSfHH0F1ibvGym-WoX0cNQAAARA"]
[Thu Nov 27 11:35:59.619400 2025] [:error] [pid 22708:tid 22715] [client 213.21.239.4:33824] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/app/.git/config"] [unique_id "aSfHH0F1ibvGym-WoX0cNwAAAQU"]
[Thu Nov 27 11:35:59.620320 2025] [:error] [pid 20859:tid 20891] [client 213.21.239.4:33804] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dev/.git/config"] [unique_id "aSfHH8dz0RxQsRyAhbSS8QAAAIE"]
[Thu Nov 27 11:35:59.620626 2025] [:error] [pid 20858:tid 20886] [client 213.21.239.4:33892] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices/.git/config;.."] [unique_id "aSfHH1exMQcaxyQE6og65QAAABc"]
[Thu Nov 27 11:35:59.624617 2025] [:error] [pid 20859:tid 20913] [client 213.21.239.4:33776] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/content../.git/config"] [unique_id "aSfHH8dz0RxQsRyAhbSS8gAAAJc"]
[Thu Nov 27 11:35:59.625931 2025] [:error] [pid 20858:tid 20885] [client 213.21.239.4:33758] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/developer/.git/config"] [unique_id "aSfHH1exMQcaxyQE6og65wAAABY"]
[Thu Nov 27 11:35:59.627178 2025] [:error] [pid 20859:tid 20894] [client 213.21.239.4:33866] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/assets../.git/config"] [unique_id "aSfHH8dz0RxQsRyAhbSS8wAAAIQ"]
[Thu Nov 27 11:35:59.627218 2025] [:error] [pid 20858:tid 20873] [client 213.21.239.4:33840] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/application/.git/config"] [unique_id "aSfHH1exMQcaxyQE6og66AAAAAo"]
[Thu Nov 27 11:35:59.627786 2025] [:error] [pid 20859:tid 20896] [client 213.21.239.4:33846] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/database/.git/config"] [unique_id "aSfHH8dz0RxQsRyAhbSS9AAAAIY"]
[Thu Nov 27 11:35:59.633514 2025] [:error] [pid 20858:tid 20865] [client 213.21.239.4:33814] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/css../.git/config"] [unique_id "aSfHH1exMQcaxyQE6og66QAAAAI"]
[Thu Nov 27 11:35:59.635317 2025] [:error] [pid 20827:tid 20844] [client 213.21.239.4:33916] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices/.git/%0Aconfig"] [unique_id "aSfHH5pT00GeFaRQvTfMvQAAAM8"]
[Thu Nov 27 11:35:59.636158 2025] [:error] [pid 20827:tid 20835] [client 213.21.239.4:33952] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices/.git/config"] [unique_id "aSfHH5pT00GeFaRQvTfMvgAAAMY"]
[Thu Nov 27 11:35:59.636473 2025] [:error] [pid 20858:tid 20871] [client 213.21.239.4:33906] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices/..;/.git/config"] [unique_id "aSfHH1exMQcaxyQE6og66wAAAAg"]
[Thu Nov 27 11:35:59.637283 2025] [:error] [pid 20858:tid 20872] [client 213.21.239.4:33932] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices../.git/config"] [unique_id "aSfHH1exMQcaxyQE6og67AAAAAk"]
[Thu Nov 27 11:35:59.637420 2025] [:error] [pid 20859:tid 20900] [client 213.21.239.4:33934] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices/.git/config;"] [unique_id "aSfHH8dz0RxQsRyAhbSS9QAAAIo"]
[Thu Nov 27 11:35:59.641630 2025] [:error] [pid 20827:tid 20840] [client 213.21.239.4:33790] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices/;/.git/config"] [unique_id "aSfHH5pT00GeFaRQvTfMvwAAAMs"]
[Thu Nov 27 11:36:02.434838 2025] [:error] [pid 20827:tid 20834] [client 213.21.239.4:40894] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au/.git/config;.."] [unique_id "aSfHIppT00GeFaRQvTfMxQAAAMU"]
[Thu Nov 27 11:36:02.435289 2025] [:error] [pid 20920:tid 20946] [client 213.21.239.4:40914] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au/;/.git/config"] [unique_id "aSfHIpSa1DjTOfWcHhxjyAAAAFg"]
[Thu Nov 27 11:36:02.436090 2025] [:error] [pid 20859:tid 20906] [client 213.21.239.4:40954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au/.git/config;"] [unique_id "aSfHIsdz0RxQsRyAhbSS9wAAAJA"]
[Thu Nov 27 11:36:02.441813 2025] [:error] [pid 22708:tid 22726] [client 213.21.239.4:40870] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au../.git/config"] [unique_id "aSfHIkF1ibvGym-WoX0cPgAAARA"]
[Thu Nov 27 11:36:02.442103 2025] [:error] [pid 20827:tid 20838] [client 213.21.239.4:40880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au/.git/config"] [unique_id "aSfHIppT00GeFaRQvTfMxgAAAMk"]
[Thu Nov 27 11:36:02.443771 2025] [:error] [pid 25405:tid 25419] [client 213.21.239.4:41008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/;/.git/config"] [unique_id "aSfHIpMl4uAUBtYol34MkgAAAUw"]
[Thu Nov 27 11:36:02.446712 2025] [:error] [pid 25405:tid 25430] [client 213.21.239.4:41010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au/static../.git/config"] [unique_id "aSfHIpMl4uAUBtYol34MkwAAAVc"]
[Thu Nov 27 11:36:02.448109 2025] [:error] [pid 20920:tid 20929] [client 213.21.239.4:40930] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSfHIpSa1DjTOfWcHhxjygAAAEc"]
[Thu Nov 27 11:36:02.450721 2025] [:error] [pid 22708:tid 22715] [client 213.21.239.4:41014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSfHIkF1ibvGym-WoX0cPwAAAQU"]
[Thu Nov 27 11:36:02.453691 2025] [:error] [pid 25405:tid 25422] [client 213.21.239.4:40980] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config;.."] [unique_id "aSfHIpMl4uAUBtYol34MlQAAAU8"]
[Thu Nov 27 11:36:02.454722 2025] [:error] [pid 22708:tid 22729] [client 213.21.239.4:41072] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/images../.git/config"] [unique_id "aSfHIkF1ibvGym-WoX0cQAAAARM"]
[Thu Nov 27 11:36:02.455943 2025] [:error] [pid 22708:tid 22728] [client 213.21.239.4:41054] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/js../.git/config"] [unique_id "aSfHIkF1ibvGym-WoX0cQQAAARI"]
[Thu Nov 27 11:36:02.456799 2025] [:error] [pid 25405:tid 25415] [client 213.21.239.4:41090] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/message-api/.git/config"] [unique_id "aSfHIpMl4uAUBtYol34MlwAAAUg"]
[Thu Nov 27 11:36:02.456890 2025] [:error] [pid 20827:tid 20831] [client 213.21.239.4:40878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au/..;/.git/config"] [unique_id "aSfHIppT00GeFaRQvTfMxwAAAMI"]
[Thu Nov 27 11:36:02.459025 2025] [:error] [pid 20827:tid 20846] [client 213.21.239.4:40966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config;"] [unique_id "aSfHIppT00GeFaRQvTfMyAAAANE"]
[Thu Nov 27 11:36:02.463914 2025] [:error] [pid 25405:tid 25426] [client 213.21.239.4:41040] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/lib../.git/config"] [unique_id "aSfHIpMl4uAUBtYol34MmAAAAVM"]
[Thu Nov 27 11:36:02.464282 2025] [:error] [pid 20920:tid 20923] [client 213.21.239.4:40938] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/..;/.git/config"] [unique_id "aSfHIpSa1DjTOfWcHhxjywAAAEE"]
[Thu Nov 27 11:36:02.464624 2025] [:error] [pid 25405:tid 25416] [client 213.21.239.4:41080] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/live/.git/config"] [unique_id "aSfHIpMl4uAUBtYol34MmQAAAUk"]
[Thu Nov 27 11:36:02.465522 2025] [:error] [pid 20920:tid 20931] [client 213.21.239.4:41102] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/m/.git/config"] [unique_id "aSfHIpSa1DjTOfWcHhxjzAAAAEk"]
[Thu Nov 27 11:36:02.466474 2025] [:error] [pid 20920:tid 20934] [client 213.21.239.4:41030] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www.dbservices.com.au/.git/%0Aconfig"] [unique_id "aSfHIpSa1DjTOfWcHhxjzQAAAEw"]
[Thu Nov 27 11:36:02.467197 2025] [:error] [pid 20920:tid 20933] [client 213.21.239.4:41066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/img../.git/config"] [unique_id "aSfHIpSa1DjTOfWcHhxjzgAAAEs"]
[Thu Nov 27 11:36:02.473365 2025] [:error] [pid 20920:tid 20942] [client 213.21.239.4:41108] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/git/.git/config"] [unique_id "aSfHIpSa1DjTOfWcHhxj0AAAAFQ"]
[Thu Nov 27 11:36:05.432415 2025] [:error] [pid 25405:tid 25429] [client 213.21.239.4:41134] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/;/.git/config"] [unique_id "aSfHJZMl4uAUBtYol34MrAAAAVY"]
[Thu Nov 27 11:36:05.433021 2025] [:error] [pid 22708:tid 22734] [client 213.21.239.4:41198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www/..;/.git/config"] [unique_id "aSfHJUF1ibvGym-WoX0cRgAAARg"]
[Thu Nov 27 11:36:05.436027 2025] [:error] [pid 22708:tid 22716] [client 213.21.239.4:41226] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/new/.git/config"] [unique_id "aSfHJUF1ibvGym-WoX0cRwAAAQY"]
[Thu Nov 27 11:36:05.437730 2025] [:error] [pid 25405:tid 25423] [client 213.21.239.4:41120] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/.git/config;.."] [unique_id "aSfHJZMl4uAUBtYol34MrQAAAVA"]
[Thu Nov 27 11:36:05.437959 2025] [:error] [pid 22708:tid 22719] [client 213.21.239.4:41252] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www/;/.git/config"] [unique_id "aSfHJUF1ibvGym-WoX0cSAAAAQk"]
[Thu Nov 27 11:36:05.441660 2025] [:error] [pid 22708:tid 22717] [client 213.21.239.4:41184] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www../.git/config"] [unique_id "aSfHJUF1ibvGym-WoX0cSgAAAQc"]
[Thu Nov 27 11:36:05.441925 2025] [:error] [pid 20920:tid 20933] [client 213.21.239.4:41294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/qa/.git/config"] [unique_id "aSfHJZSa1DjTOfWcHhxj0gAAAEs"]
[Thu Nov 27 11:36:05.444165 2025] [:error] [pid 20859:tid 20909] [client 213.21.239.4:41222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www/.git/config;.."] [unique_id "aSfHJcdz0RxQsRyAhbSS-AAAAJM"]
[Thu Nov 27 11:36:05.446086 2025] [:error] [pid 22708:tid 22720] [client 213.21.239.4:41206] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www/.git/config;"] [unique_id "aSfHJUF1ibvGym-WoX0cSwAAAQo"]
[Thu Nov 27 11:36:05.448086 2025] [:error] [pid 25405:tid 25427] [client 213.21.239.4:41280] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/public/.git/config"] [unique_id "aSfHJZMl4uAUBtYol34MrgAAAVQ"]
[Thu Nov 27 11:36:05.451429 2025] [:error] [pid 25405:tid 25413] [client 213.21.239.4:41320] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/.git/%0Aconfig"] [unique_id "aSfHJZMl4uAUBtYol34MsAAAAUY"]
[Thu Nov 27 11:36:05.452952 2025] [:error] [pid 25405:tid 25417] [client 213.21.239.4:41170] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www/.git/%0Aconfig"] [unique_id "aSfHJZMl4uAUBtYol34MsQAAAUo"]
[Thu Nov 27 11:36:05.454040 2025] [:error] [pid 22708:tid 22714] [client 213.21.239.4:41144] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/static../.git/config"] [unique_id "aSfHJUF1ibvGym-WoX0cTQAAAQQ"]
[Thu Nov 27 11:36:05.455299 2025] [:error] [pid 25405:tid 25412] [client 213.21.239.4:41298] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au../config"] [unique_id "aSfHJZMl4uAUBtYol34MsgAAAUU"]
[Thu Nov 27 11:36:05.455520 2025] [:error] [pid 25405:tid 25425] [client 213.21.239.4:41212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www/.git/config"] [unique_id "aSfHJZMl4uAUBtYol34MswAAAVI"]
[Thu Nov 27 11:36:05.456952 2025] [:error] [pid 25405:tid 25419] [client 213.21.239.4:41338] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/.git/config"] [unique_id "aSfHJZMl4uAUBtYol34MtAAAAUw"]
[Thu Nov 27 11:36:05.457731 2025] [:error] [pid 22708:tid 22731] [client 213.21.239.4:41242] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/www/.git;/config"] [unique_id "aSfHJUF1ibvGym-WoX0cTgAAARU"]
[Thu Nov 27 11:36:05.458030 2025] [:error] [pid 25405:tid 25430] [client 213.21.239.4:41358] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au../.git/config"] [unique_id "aSfHJZMl4uAUBtYol34MtQAAAVc"]
[Thu Nov 27 11:36:05.458938 2025] [:error] [pid 22708:tid 22727] [client 213.21.239.4:41266] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/prod/.git/config"] [unique_id "aSfHJUF1ibvGym-WoX0cTwAAARE"]
[Thu Nov 27 11:36:05.462598 2025] [:error] [pid 25405:tid 25414] [client 213.21.239.4:41308] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/config"] [unique_id "aSfHJZMl4uAUBtYol34MtgAAAUc"]
[Thu Nov 27 11:36:05.463877 2025] [:error] [pid 25405:tid 25422] [client 213.21.239.4:41328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/..;/.git/config"] [unique_id "aSfHJZMl4uAUBtYol34MtwAAAU8"]
[Thu Nov 27 11:36:05.464587 2025] [:error] [pid 25405:tid 25415] [client 213.21.239.4:41348] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/.git/config;"] [unique_id "aSfHJZMl4uAUBtYol34MuAAAAUg"]
[Thu Nov 27 11:36:07.474717 2025] [:error] [pid 22708:tid 22715] [client 213.21.239.4:41374] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au../config"] [unique_id "aSfHJ0F1ibvGym-WoX0cVwAAAQU"]
[Thu Nov 27 11:36:07.486593 2025] [:error] [pid 25405:tid 25426] [client 213.21.239.4:41376] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/www/.git;/config"] [unique_id "aSfHJ5Ml4uAUBtYol34MwgAAAVM"]
[Thu Nov 27 11:36:07.495284 2025] [:error] [pid 22708:tid 22729] [client 213.21.239.4:41386] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dbservices.com.au/config"] [unique_id "aSfHJ0F1ibvGym-WoX0cWAAAARM"]
[Thu Nov 27 11:36:08.435918 2025] [:error] [pid 22708:tid 22714] [client 213.21.239.4:41404] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/static../.git/config"] [unique_id "aSfHKEF1ibvGym-WoX0cWQAAAQQ"]
[Thu Nov 27 11:36:08.454019 2025] [:error] [pid 20858:tid 20867] [client 213.21.239.4:41408] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/uat/.git/config"] [unique_id "aSfHKFexMQcaxyQE6og67gAAAAQ"]
[Thu Nov 27 11:36:08.454493 2025] [:error] [pid 20859:tid 20910] [client 213.21.239.4:41432] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSfHKMdz0RxQsRyAhbSS-QAAAJQ"]
[Thu Nov 27 11:36:08.454713 2025] [:error] [pid 22708:tid 22721] [client 213.21.239.4:41390] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/staging/.git/config"] [unique_id "aSfHKEF1ibvGym-WoX0cWgAAAQs"]
[Thu Nov 27 11:36:08.454977 2025] [:error] [pid 20858:tid 20882] [client 213.21.239.4:41440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/web/.git/config"] [unique_id "aSfHKFexMQcaxyQE6og67wAAABM"]
[Thu Nov 27 11:36:08.456132 2025] [:error] [pid 20858:tid 20864] [client 213.21.239.4:41456] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSfHKFexMQcaxyQE6og68AAAAAE"]
[Thu Nov 27 11:36:08.456148 2025] [:error] [pid 20858:tid 20874] [client 213.21.239.4:41422] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSfHKFexMQcaxyQE6og68QAAAAs"]
[Thu Nov 27 11:36:08.456349 2025] [:error] [pid 20859:tid 20905] [client 213.21.239.4:41462] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/www/static../.git/config"] [unique_id "aSfHKMdz0RxQsRyAhbSS-gAAAI8"]
[Thu Nov 27 11:50:22.866123 2025] [:error] [pid 22708:tid 22712] [client 35.84.182.128:53612] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSfKfkF1ibvGym-WoX0hlwAAAQI"]
[Thu Nov 27 11:50:23.598293 2025] [:error] [pid 22708:tid 22719] [client 35.84.182.128:53758] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aSfKf0F1ibvGym-WoX0hmQAAAQk"]
[Thu Nov 27 11:50:24.332524 2025] [:error] [pid 20858:tid 20887] [client 35.84.182.128:53868] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "aSfKgFexMQcaxyQE6og9rgAAABg"]
[Thu Nov 27 11:50:25.066513 2025] [:error] [pid 20920:tid 20945] [client 35.84.182.128:54014] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.remote"] [unique_id "aSfKgZSa1DjTOfWcHhxnCgAAAFc"]
[Thu Nov 27 11:50:25.794500 2025] [:error] [pid 25405:tid 25417] [client 35.84.182.128:54156] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "aSfKgZMl4uAUBtYol34QuQAAAUo"]
[Thu Nov 27 11:50:26.525695 2025] [:error] [pid 20858:tid 20885] [client 35.84.182.128:54290] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/vendor/.env"] [unique_id "aSfKglexMQcaxyQE6og9sAAAABY"]
[Thu Nov 27 11:50:27.259436 2025] [:error] [pid 22708:tid 22712] [client 35.84.182.128:54426] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/lib/.env"] [unique_id "aSfKg0F1ibvGym-WoX0hngAAAQI"]
[Thu Nov 27 11:50:27.993213 2025] [:error] [pid 20859:tid 20907] [client 35.84.182.128:54536] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/lab/.env"] [unique_id "aSfKg8dz0RxQsRyAhbSVpwAAAJE"]
[Thu Nov 27 11:50:28.727104 2025] [:error] [pid 20827:tid 20845] [client 35.84.182.128:54672] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "aSfKhJpT00GeFaRQvTfQFgAAANA"]
[Thu Nov 27 11:50:29.455346 2025] [:error] [pid 22708:tid 22722] [client 35.84.182.128:54770] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/cron/.env"] [unique_id "aSfKhUF1ibvGym-WoX0hogAAAQw"]
[Thu Nov 27 11:50:30.186390 2025] [:error] [pid 20827:tid 20841] [client 35.84.182.128:54902] [client 35.84.182.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/core/.env"] [unique_id "aSfKhppT00GeFaRQvTfQFwAAAMw"]
[Thu Nov 27 12:05:22.261773 2025] [:error] [pid 20920:tid 20935] [client 3.99.221.159:44294] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSfOApSa1DjTOfWcHhxqJAAAAE0"]
[Thu Nov 27 12:05:23.129703 2025] [:error] [pid 22708:tid 22711] [client 3.99.221.159:44364] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSfOA0F1ibvGym-WoX0nXQAAAQE"]
[Thu Nov 27 12:05:24.008029 2025] [:error] [pid 22708:tid 22718] [client 3.99.221.159:44438] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aSfOBEF1ibvGym-WoX0nXwAAAQg"]
[Thu Nov 27 12:05:24.876258 2025] [:error] [pid 20859:tid 20912] [client 3.99.221.159:44516] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aSfOBMdz0RxQsRyAhbSYggAAAJY"]
[Thu Nov 27 12:05:25.746224 2025] [:error] [pid 22708:tid 22725] [client 3.99.221.159:44580] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aSfOBUF1ibvGym-WoX0nYgAAAQ8"]
[Thu Nov 27 12:05:26.623511 2025] [:error] [pid 20859:tid 20911] [client 3.99.221.159:44656] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/vendor/.env"] [unique_id "aSfOBsdz0RxQsRyAhbSYgwAAAJU"]
[Thu Nov 27 12:05:27.489270 2025] [:error] [pid 22708:tid 22715] [client 3.99.221.159:44744] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib/.env"] [unique_id "aSfOB0F1ibvGym-WoX0nZAAAAQU"]
[Thu Nov 27 12:05:28.366614 2025] [:error] [pid 22708:tid 22726] [client 3.99.221.159:44830] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lab/.env"] [unique_id "aSfOCEF1ibvGym-WoX0naAAAARA"]
[Thu Nov 27 12:05:29.245455 2025] [:error] [pid 20827:tid 20850] [client 3.99.221.159:44920] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "aSfOCZpT00GeFaRQvTfTYQAAANU"]
[Thu Nov 27 12:05:30.113220 2025] [:error] [pid 20859:tid 20894] [client 3.99.221.159:45000] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cron/.env"] [unique_id "aSfOCsdz0RxQsRyAhbSYhwAAAIQ"]
[Thu Nov 27 12:05:30.980435 2025] [:error] [pid 20859:tid 20906] [client 3.99.221.159:45102] [client 3.99.221.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aSfOCsdz0RxQsRyAhbSYiAAAAJA"]
[Thu Nov 27 12:21:27.834370 2025] [:error] [pid 20859:tid 20891] [client 203.2.64.59:49769] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSfRx8dz0RxQsRyAhbSbTgAAAIE"]
[Thu Nov 27 16:16:53.063224 2025] [:error] [pid 42363:tid 42378] [client 146.190.114.66:59025] [client 146.190.114.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.114.66, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSgI9eWMsZu69508FYALsAAAAE0"]
[Thu Nov 27 16:16:53.068364 2025] [:error] [pid 42363:tid 42378] [client 146.190.114.66:59025] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 27 16:39:59.832652 2025] [:error] [pid 42363:tid 42374] [client 187.18.215.247:13942] [client 187.18.215.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.18.215.247, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSgOX-WMsZu69508FYAQQwAAAEk"]
[Thu Nov 27 16:39:59.838644 2025] [:error] [pid 42363:tid 42374] [client 187.18.215.247:13942] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 27 18:44:49.699495 2025] [:error] [pid 58484:tid 58489] [client 113.141.91.58:58929] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSgroS37R1UmgRwdeQSKBAAAAQM"]
[Thu Nov 27 21:54:30.961607 2025] [:error] [pid 5447:tid 5462] [client 4.216.85.120:63009] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aShYFuIZYIJeFQV4nEgfkAAAAU0"]
[Thu Nov 27 21:54:31.190353 2025] [:error] [pid 5447:tid 5455] [client 4.216.85.120:32899] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aShYF-IZYIJeFQV4nEgfkgAAAUY"]
[Thu Nov 27 21:54:31.446992 2025] [:error] [pid 5477:tid 5505] [client 4.216.85.120:63036] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aShYFxE-eNdvARcbXETZLwAAABg"]
[Thu Nov 27 21:54:31.780656 2025] [:error] [pid 5478:tid 5516] [client 4.216.85.120:62988] [client 4.216.85.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aShYF-hzZWazcfEzqI2XhgAAAMg"]
[Fri Nov 28 01:23:52.293305 2025] [:error] [pid 3882:tid 3957] [client 222.79.103.59:59283] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSiJKOBkYoz3-AxCad_F_QAAAdM"]
[Fri Nov 28 01:54:41.683349 2025] [:error] [pid 3968:tid 3977] [client 159.65.132.48:54748] [client 159.65.132.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSiQYSCkRPBiCvBkrb1dpQAAAQc"]
[Fri Nov 28 07:32:51.780862 2025] [:error] [pid 3918:tid 3932] [client 222.79.104.23:44642] [client 222.79.104.23] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSjfoyatPxvogaBrbgOvIwAAAIs"]
[Fri Nov 28 09:59:01.851322 2025] [:error] [pid 36363:tid 36366] [client 52.14.205.219:39506] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aSkB5XsscbfVg6wHsKjVewAAAIE"]
[Fri Nov 28 09:59:02.981258 2025] [:error] [pid 36363:tid 36389] [client 52.14.205.219:39508] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSkB5nsscbfVg6wHsKjVfgAAAJg"]
[Fri Nov 28 09:59:02.981853 2025] [:error] [pid 36363:tid 36379] [client 52.14.205.219:39522] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cron/.env"] [unique_id "aSkB5nsscbfVg6wHsKjVfwAAAI4"]
[Fri Nov 28 09:59:02.982276 2025] [:error] [pid 36363:tid 36383] [client 52.14.205.219:39514] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/vendor/.env"] [unique_id "aSkB5nsscbfVg6wHsKjVgAAAAJI"]
[Fri Nov 28 09:59:02.982530 2025] [:error] [pid 36363:tid 36380] [client 52.14.205.219:39512] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSkB5nsscbfVg6wHsKjVgQAAAI8"]
[Fri Nov 28 09:59:02.982654 2025] [:error] [pid 36363:tid 36384] [client 52.14.205.219:39510] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aSkB5nsscbfVg6wHsKjVggAAAJM"]
[Fri Nov 28 09:59:02.982921 2025] [:error] [pid 36363:tid 36369] [client 52.14.205.219:39516] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aSkB5nsscbfVg6wHsKjVgwAAAIQ"]
[Fri Nov 28 09:59:03.179970 2025] [:error] [pid 36363:tid 36387] [client 52.14.205.219:39518] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lab/.env"] [unique_id "aSkB53sscbfVg6wHsKjVhAAAAJY"]
[Fri Nov 28 09:59:03.181175 2025] [:error] [pid 36363:tid 36378] [client 52.14.205.219:39524] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "aSkB53sscbfVg6wHsKjVhgAAAI0"]
[Fri Nov 28 09:59:03.181279 2025] [:error] [pid 36363:tid 36372] [client 52.14.205.219:39528] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aSkB53sscbfVg6wHsKjVhwAAAIc"]
[Fri Nov 28 09:59:03.181315 2025] [:error] [pid 36363:tid 36365] [client 52.14.205.219:39526] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/app/.env"] [unique_id "aSkB53sscbfVg6wHsKjVhQAAAIA"]
[Fri Nov 28 09:59:03.182111 2025] [:error] [pid 36397:tid 36421] [client 52.14.205.219:39642] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/database/.env"] [unique_id "aSkB5ypVnqePWFQ8TSPx8AAAAVU"]
[Fri Nov 28 09:59:03.182197 2025] [:error] [pid 36398:tid 36429] [client 52.14.205.219:39530] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib/.env"] [unique_id "aSkB5w_enx_M-xd--vKKcQAAAYI"]
[Fri Nov 28 09:59:03.182348 2025] [:error] [pid 36398:tid 36435] [client 52.14.205.219:39644] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aSkB5w_enx_M-xd--vKKcgAAAYg"]
[Fri Nov 28 09:59:03.182752 2025] [:error] [pid 36363:tid 36376] [client 52.14.205.219:39648] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/assets/.env"] [unique_id "aSkB53sscbfVg6wHsKjViAAAAIs"]
[Fri Nov 28 09:59:03.182896 2025] [:error] [pid 36363:tid 36375] [client 52.14.205.219:39646] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSkB53sscbfVg6wHsKjViQAAAIo"]
[Fri Nov 28 09:59:03.868233 2025] [:error] [pid 36363:tid 36374] [client 52.14.205.219:39748] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aSkB53sscbfVg6wHsKjVigAAAIk"]
[Fri Nov 28 09:59:05.300482 2025] [:error] [pid 36398:tid 36441] [client 52.14.205.219:40050] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/uploads/.env"] [unique_id "aSkB6Q_enx_M-xd--vKKfAAAAY4"]
[Fri Nov 28 09:59:05.360524 2025] [:error] [pid 36363:tid 36388] [client 52.14.205.219:39966] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/apps/.env"] [unique_id "aSkB6XsscbfVg6wHsKjVjwAAAJc"]
[Fri Nov 28 09:59:05.821563 2025] [:error] [pid 36398:tid 36447] [client 52.14.205.219:40604] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aSkB6Q_enx_M-xd--vKKgAAAAZQ"]
[Fri Nov 28 09:59:07.084146 2025] [:error] [pid 36363:tid 36389] [client 52.14.205.219:44230] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.env"] [unique_id "aSkB63sscbfVg6wHsKjVkQAAAJg"]
[Fri Nov 28 09:59:07.216980 2025] [:error] [pid 36471:tid 36497] [client 52.14.205.219:44348] [client 52.14.205.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/en/.env"] [unique_id "aSkB6ynVfcm0v1Kyj-0KfgAAAdg"]
[Fri Nov 28 13:46:42.633904 2025] [:error] [pid 34292:tid 34301] [client 182.42.111.156:53609] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSk3Qn3F38HO0odRi1S4iAAAAAc"]
[Fri Nov 28 14:06:12.094188 2025] [:error] [pid 59559:tid 59593] [client 104.28.244.128:27002] [client 104.28.244.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.244.128, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSk71Bqw_7c4pIN46wkEbAAAAMQ"]
[Fri Nov 28 14:06:12.100051 2025] [:error] [pid 59559:tid 59593] [client 104.28.244.128:27002] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Nov 28 14:07:42.634316 2025] [:error] [pid 59645:tid 59662] [client 138.197.92.248:56662] [client 138.197.92.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.92.248, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSk8LiAY8JAkoCJBYqzg7wAAAI4"]
[Fri Nov 28 14:07:42.638195 2025] [:error] [pid 59645:tid 59662] [client 138.197.92.248:56662] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 28 15:24:08.341354 2025] [:error] [pid 59559:tid 59613] [client 129.212.237.19:52229] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Nov 28 16:19:13.158644 2025] [:error] [pid 59559:tid 59612] [client 43.156.202.34:40246] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSlbARqw_7c4pIN46wkwLwAAANc"]
[Sat Nov 29 00:04:59.373907 2025] [:error] [pid 38347:tid 38387] [client 103.167.150.158:56437] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSnIK14FzQmoUx27MAm4YQAAAEo"]
[Sat Nov 29 01:01:37.593270 2025] [:error] [pid 9656:tid 9730] [client 43.130.150.80:39670] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSnVcY_4AfnhtHpInunJmwAAAJI"]
[Sat Nov 29 01:08:31.349242 2025] [:error] [pid 9751:tid 9776] [client 169.150.227.229:62456] [client 169.150.227.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSnXD6qNNTs_lWy2XeHgdgAAAdc"]
[Sat Nov 29 02:07:04.402507 2025] [:error] [pid 9907:tid 9916] [client 103.133.214.127:55996] [client 103.133.214.127] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSnkyOFoCqXx6ihYWZwM0QAAAQc"]
[Sat Nov 29 02:50:27.988958 2025] [:error] [pid 9751:tid 9757] [client 182.44.2.148:40139] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSnu86qNNTs_lWy2XeEBZAAAAcQ"]
[Sat Nov 29 04:16:06.444162 2025] [:error] [pid 53819:tid 53890] [client 159.203.125.106:52220] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSoDBrrEG0migocqTWepbQAAAI4"]
[Sat Nov 29 04:16:07.762061 2025] [:error] [pid 53819:tid 53895] [client 159.203.125.106:33280] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSoDB7rEG0migocqTWepbgAAAJM"]
[Sat Nov 29 04:37:12.722126 2025] [:error] [pid 53819:tid 53876] [client 45.130.203.150:35979] [client 45.130.203.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aSoH-LrEG0migocqTWetnAAAAIA"]
[Sat Nov 29 05:17:22.178481 2025] [:error] [pid 53906:tid 53913] [client 213.209.157.81:58492] [client 213.209.157.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSoRYpaQHRVpydtRoVf7VwAAAMU"]
[Sat Nov 29 06:03:46.758808 2025] [:error] [pid 53906:tid 53920] [client 217.146.83.115:36184] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSocQpaQHRVpydtRoVcLoAAAAMw"]
[Sat Nov 29 06:03:47.270717 2025] [:error] [pid 53819:tid 53879] [client 217.146.83.115:47824] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSocQ7rEG0migocqTWfA8wAAAIM"]
[Sat Nov 29 06:03:47.786816 2025] [:error] [pid 22939:tid 22964] [client 217.146.83.115:48130] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSocQ9Rbdh0p_UmbHuCIyQAAAZc"]
[Sat Nov 29 06:03:48.303001 2025] [:error] [pid 22280:tid 22303] [client 217.146.83.115:48378] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSocRJFKJ7cA_ndzTYs1FAAAAVU"]
[Sat Nov 29 06:03:48.817134 2025] [:error] [pid 53906:tid 53916] [client 217.146.83.115:48594] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aSocRJaQHRVpydtRoVcL2wAAAMg"]
[Sat Nov 29 06:03:49.331029 2025] [:error] [pid 19562:tid 19585] [client 217.146.83.115:48750] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocRV4oDK0S9prYl7lqQwAAARU"]
[Sat Nov 29 06:03:49.849265 2025] [:error] [pid 22280:tid 22295] [client 217.146.83.115:48838] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocRZFKJ7cA_ndzTYs1LQAAAU0"]
[Sat Nov 29 06:03:50.364399 2025] [:error] [pid 53819:tid 53879] [client 217.146.83.115:48948] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocRrrEG0migocqTWfBMwAAAIM"]
[Sat Nov 29 06:03:50.878564 2025] [:error] [pid 22280:tid 22290] [client 217.146.83.115:49080] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocRpFKJ7cA_ndzTYs1RgAAAUg"]
[Sat Nov 29 06:03:51.395253 2025] [:error] [pid 53906:tid 53930] [client 217.146.83.115:49160] [client 217.146.83.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSocR5aQHRVpydtRoVcMIQAAANY"]
[Sat Nov 29 06:26:08.322733 2025] [:error] [pid 53906:tid 53920] [client 196.251.100.27:65474] [client 196.251.100.27] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSohgJaQHRVpydtRoVchewAAAMw"]
[Sat Nov 29 08:55:47.357396 2025] [:error] [pid 20915:tid 20919] [client 36.41.75.167:35715] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSpEk1OOtKw1QZ3TPERZugAAAMI"]
[Sat Nov 29 10:09:38.888510 2025] [:error] [pid 32136:tid 32150] [client 3.71.105.88:35076] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSpV4sSj_WSVQM1psKoZTwAAAQw"]
[Sat Nov 29 10:09:38.889067 2025] [:error] [pid 32136:tid 32141] [client 3.71.105.88:35146] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aSpV4sSj_WSVQM1psKoZUAAAAQM"]
[Sat Nov 29 10:09:38.889166 2025] [:error] [pid 20827:tid 20868] [client 3.71.105.88:35082] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aSpV4oR9B7FcLfh1rSEfUAAAAEo"]
[Sat Nov 29 10:09:38.889818 2025] [:error] [pid 20826:tid 20832] [client 3.71.105.88:35078] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aSpV4vABfBqk70vKX9RJuAAAAAI"]
[Sat Nov 29 10:09:38.889874 2025] [:error] [pid 20826:tid 20854] [client 3.71.105.88:35148] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aSpV4vABfBqk70vKX9RJuQAAABg"]
[Sat Nov 29 10:09:38.889980 2025] [:error] [pid 20827:tid 20875] [client 3.71.105.88:35080] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aSpV4oR9B7FcLfh1rSEfUQAAAFE"]
[Sat Nov 29 10:09:39.443335 2025] [:error] [pid 32136:tid 32145] [client 3.71.105.88:35318] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aSpV48Sj_WSVQM1psKoZUQAAAQc"]
[Sat Nov 29 10:09:39.443533 2025] [:error] [pid 32136:tid 32155] [client 3.71.105.88:35316] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aSpV48Sj_WSVQM1psKoZUwAAARE"]
[Sat Nov 29 10:09:39.443638 2025] [:error] [pid 32136:tid 32148] [client 3.71.105.88:35314] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aSpV48Sj_WSVQM1psKoZUgAAAQo"]
[Sat Nov 29 10:09:39.829381 2025] [:error] [pid 20827:tid 20879] [client 3.71.105.88:35386] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aSpV44R9B7FcLfh1rSEfUgAAAFU"]
[Sat Nov 29 10:09:40.850607 2025] [:error] [pid 32136:tid 32151] [client 3.71.105.88:35472] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aSpV5MSj_WSVQM1psKoZVAAAAQ0"]
[Sat Nov 29 10:09:41.696902 2025] [:error] [pid 20828:tid 20907] [client 3.71.105.88:35654] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aSpV5eqW2f0jLRABAOQowgAAAJU"]
[Sat Nov 29 10:09:41.697355 2025] [:error] [pid 20828:tid 20909] [client 3.71.105.88:35764] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/vendor/.env"] [unique_id "aSpV5eqW2f0jLRABAOQowwAAAJc"]
[Sat Nov 29 10:09:42.153997 2025] [:error] [pid 20827:tid 20858] [client 3.71.105.88:35958] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib/.env"] [unique_id "aSpV5oR9B7FcLfh1rSEfVwAAAEA"]
[Sat Nov 29 10:09:42.428214 2025] [:error] [pid 20828:tid 20890] [client 3.71.105.88:36340] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lab/.env"] [unique_id "aSpV5uqW2f0jLRABAOQoxAAAAIU"]
[Sat Nov 29 10:09:42.899324 2025] [:error] [pid 32136:tid 32159] [client 3.71.105.88:36562] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "aSpV5sSj_WSVQM1psKoZWQAAARU"]
[Sat Nov 29 10:09:43.443201 2025] [:error] [pid 20915:tid 20934] [client 3.71.105.88:37464] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/app/.env"] [unique_id "aSpV51OOtKw1QZ3TPERvLwAAANE"]
[Sat Nov 29 10:09:44.030978 2025] [:error] [pid 32136:tid 32153] [client 3.71.105.88:38036] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/database/.env"] [unique_id "aSpV6MSj_WSVQM1psKoZWwAAAQ8"]
[Sat Nov 29 10:09:44.172939 2025] [:error] [pid 32136:tid 32154] [client 3.71.105.88:38196] [client 3.71.105.88] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aSpV6MSj_WSVQM1psKoZXQAAARA"]
[Sat Nov 29 11:22:38.287387 2025] [:error] [pid 20828:tid 20898] [client 97.205.154.15:49344] [client 97.205.154.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.205.154.15, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSpm_uqW2f0jLRABAOQ8rQAAAI0"]
[Sat Nov 29 11:22:38.292085 2025] [:error] [pid 20828:tid 20898] [client 97.205.154.15:49344] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 29 15:00:48.796496 2025] [:error] [pid 20828:tid 20909] [client 207.154.216.0:55776] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSqaIOqW2f0jLRABAORe8QAAAJc"]
[Sat Nov 29 15:00:49.536379 2025] [:error] [pid 32136:tid 32156] [client 207.154.216.0:61768] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSqaIcSj_WSVQM1psKpYcQAAARI"]
[Sat Nov 29 15:00:50.169825 2025] [:error] [pid 25341:tid 25363] [client 207.154.216.0:56690] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSqaIvWK8JdN03Mg7dz6-gAAAdI"]
[Sat Nov 29 15:00:50.767160 2025] [:error] [pid 20828:tid 20900] [client 207.154.216.0:53417] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSqaIuqW2f0jLRABAORfMwAAAI8"]
[Sat Nov 29 15:00:51.330622 2025] [:error] [pid 20826:tid 20849] [client 207.154.216.0:61139] [client 207.154.216.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSqaI_ABfBqk70vKX9SDkQAAABM"]
[Sat Nov 29 15:14:22.707734 2025] [:error] [pid 20827:tid 20874] [client 207.154.216.0:49463] [client 207.154.216.0] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-json/"] [unique_id "aSqdToR9B7FcLfh1rSFuGwAAAFA"]
[Sat Nov 29 18:08:10.210139 2025] [:error] [pid 62619:tid 62632] [client 43.153.48.240:53000] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSrGCtk7ZYKT63FfVSVavgAAAUs"]
[Sat Nov 29 18:13:37.679459 2025] [:error] [pid 20827:tid 20877] [client 18.171.222.78:48468] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSrHUYR9B7FcLfh1rSGJQQAAAFM"]
[Sat Nov 29 18:13:38.241674 2025] [:error] [pid 20828:tid 20906] [client 18.171.222.78:48470] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aSrHUuqW2f0jLRABAOR_fAAAAJQ"]
[Sat Nov 29 18:13:38.242078 2025] [:error] [pid 25341:tid 25361] [client 18.171.222.78:48500] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aSrHUvWK8JdN03Mg7dwf_wAAAdA"]
[Sat Nov 29 18:13:38.936072 2025] [:error] [pid 20915:tid 20934] [client 18.171.222.78:48600] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aSrHUlOOtKw1QZ3TPETSVwAAANE"]
[Sat Nov 29 18:13:38.936345 2025] [:error] [pid 20915:tid 20937] [client 18.171.222.78:48656] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aSrHUlOOtKw1QZ3TPETSWAAAANQ"]
[Sat Nov 29 18:13:39.645521 2025] [:error] [pid 25341:tid 25365] [client 18.171.222.78:48720] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aSrHU_WK8JdN03Mg7dwgAgAAAdQ"]
[Sat Nov 29 18:13:40.021568 2025] [:error] [pid 37490:tid 37492] [client 18.171.222.78:48876] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aSrHVJjG6OUSCUo6XZ0hlgAAAgA"]
[Sat Nov 29 18:13:40.021654 2025] [:error] [pid 37490:tid 37495] [client 18.171.222.78:48840] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aSrHVJjG6OUSCUo6XZ0hlQAAAgM"]
[Sat Nov 29 18:13:40.923467 2025] [:error] [pid 37490:tid 37514] [client 18.171.222.78:48974] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aSrHVJjG6OUSCUo6XZ0hlwAAAhY"]
[Sat Nov 29 18:13:40.923727 2025] [:error] [pid 25341:tid 25363] [client 18.171.222.78:49098] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aSrHVPWK8JdN03Mg7dwgBAAAAdI"]
[Sat Nov 29 18:13:41.297407 2025] [:error] [pid 37490:tid 37503] [client 18.171.222.78:49278] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aSrHVZjG6OUSCUo6XZ0hmAAAAgs"]
[Sat Nov 29 18:13:41.943820 2025] [:error] [pid 20915:tid 20920] [client 18.171.222.78:49498] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aSrHVVOOtKw1QZ3TPETSWQAAAMM"]
[Sat Nov 29 18:13:42.716704 2025] [:error] [pid 32136:tid 32138] [client 18.171.222.78:49724] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/vendor/.env"] [unique_id "aSrHVsSj_WSVQM1psKqKrAAAAQA"]
[Sat Nov 29 18:13:42.887973 2025] [:error] [pid 25341:tid 25366] [client 18.171.222.78:50026] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib/.env"] [unique_id "aSrHVvWK8JdN03Mg7dwgBgAAAdU"]
[Sat Nov 29 18:13:43.237589 2025] [:error] [pid 32136:tid 32146] [client 18.171.222.78:50274] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lab/.env"] [unique_id "aSrHV8Sj_WSVQM1psKqKrgAAAQg"]
[Sat Nov 29 18:13:43.814206 2025] [:error] [pid 32136:tid 32139] [client 18.171.222.78:50586] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "aSrHV8Sj_WSVQM1psKqKrwAAAQE"]
[Sat Nov 29 18:13:44.056839 2025] [:error] [pid 25341:tid 25367] [client 18.171.222.78:51154] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cron/.env"] [unique_id "aSrHWPWK8JdN03Mg7dwgCQAAAdY"]
[Sat Nov 29 18:13:44.419255 2025] [:error] [pid 25341:tid 25360] [client 18.171.222.78:51528] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aSrHWPWK8JdN03Mg7dwgCwAAAc8"]
[Sat Nov 29 18:13:45.308179 2025] [:error] [pid 25341:tid 25350] [client 18.171.222.78:52684] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/app/.env"] [unique_id "aSrHWfWK8JdN03Mg7dwgDQAAAcU"]
[Sat Nov 29 18:13:46.474679 2025] [:error] [pid 37490:tid 37493] [client 18.171.222.78:53260] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/Datavase/.env"] [unique_id "aSrHWpjG6OUSCUo6XZ0hmQAAAgE"]
[Sat Nov 29 18:13:47.640168 2025] [:error] [pid 32136:tid 32143] [client 18.171.222.78:53696] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/database/.env"] [unique_id "aSrHW8Sj_WSVQM1psKqKtAAAAQU"]
[Sat Nov 29 18:13:48.322602 2025] [:error] [pid 20915:tid 20922] [client 18.171.222.78:53846] [client 18.171.222.78] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aSrHXFOOtKw1QZ3TPETSWwAAAMU"]
[Sat Nov 29 18:38:57.983020 2025] [:error] [pid 25341:tid 25361] [client 159.203.125.106:60836] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSrNQfWK8JdN03Mg7dw8bgAAAdA"]
[Sat Nov 29 18:39:01.519872 2025] [:error] [pid 37490:tid 37508] [client 159.203.125.106:54446] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSrNRZjG6OUSCUo6XZ0vfwAAAhA"]
[Sat Nov 29 21:26:13.163725 2025] [:error] [pid 37490:tid 37501] [client 159.203.125.106:59388] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSr0dZjG6OUSCUo6XZ1TkQAAAgk"]
[Sat Nov 29 21:26:14.937747 2025] [:error] [pid 20915:tid 20922] [client 159.203.125.106:59020] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSr0dlOOtKw1QZ3TPEQHrwAAAMU"]
[Sat Nov 29 22:16:27.336113 2025] [:error] [pid 20827:tid 20863] [client 185.242.245.51:50351] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Sat Nov 29 23:47:40.288771 2025] [:error] [pid 20827:tid 20876] [client 18.183.141.228:55732] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSsVnIR9B7FcLfh1rSHCqAAAAFI"]
[Sat Nov 29 23:47:40.824736 2025] [:error] [pid 16610:tid 16627] [client 18.183.141.228:55742] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSsVnATu2dLzNk_QISo79AAAAY8"]
[Sat Nov 29 23:47:41.363669 2025] [:error] [pid 20827:tid 20859] [client 18.183.141.228:55744] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aSsVnYR9B7FcLfh1rSHCrQAAAEE"]
[Sat Nov 29 23:47:41.900646 2025] [:error] [pid 20827:tid 20878] [client 18.183.141.228:55746] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aSsVnYR9B7FcLfh1rSHCsAAAAFQ"]
[Sat Nov 29 23:47:42.440468 2025] [:error] [pid 37490:tid 37509] [client 18.183.141.228:55754] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aSsVnpjG6OUSCUo6XZ149QAAAhE"]
[Sat Nov 29 23:47:42.975587 2025] [:error] [pid 62619:tid 62625] [client 18.183.141.228:55770] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aSsVntk7ZYKT63FfVSWp4wAAAUQ"]
[Sat Nov 29 23:47:43.513979 2025] [:error] [pid 20826:tid 20851] [client 18.183.141.228:55786] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aSsVn_ABfBqk70vKX9T5WQAAABU"]
[Sat Nov 29 23:47:48.944025 2025] [:error] [pid 20915:tid 20931] [client 18.183.141.228:56240] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/config.ini"] [unique_id "aSsVpFOOtKw1QZ3TPEQpZgAAAM4"]
[Sat Nov 29 23:47:49.484601 2025] [:error] [pid 62619:tid 62627] [client 18.183.141.228:56248] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Nov 29 23:47:50.565214 2025] [:error] [pid 16610:tid 16615] [client 18.183.141.228:56270] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings"] [unique_id "aSsVpgTu2dLzNk_QISo7-AAAAYM"]
[Sat Nov 29 23:47:51.106464 2025] [:error] [pid 20826:tid 20832] [client 18.183.141.228:56280] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.json"] [unique_id "aSsVp_ABfBqk70vKX9T5XgAAAAI"]
[Sat Nov 29 23:47:51.643744 2025] [:error] [pid 62619:tid 62643] [client 18.183.141.228:56286] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.config.js"] [unique_id "aSsVp9k7ZYKT63FfVSWp6wAAAVY"]
[Sat Nov 29 23:47:52.182006 2025] [:error] [pid 20826:tid 20843] [client 18.183.141.228:56294] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aSsVqPABfBqk70vKX9T5YQAAAA0"]
[Sat Nov 29 23:47:52.722438 2025] [:error] [pid 20827:tid 20861] [client 18.183.141.228:56308] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aSsVqIR9B7FcLfh1rSHCzwAAAEM"]
[Sat Nov 29 23:47:53.265317 2025] [:error] [pid 25341:tid 25366] [client 18.183.141.228:56322] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aSsVqfWK8JdN03Mg7dyBQgAAAdU"]
[Sat Nov 29 23:47:53.805946 2025] [:error] [pid 16610:tid 16634] [client 18.183.141.228:56326] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aSsVqQTu2dLzNk_QISo7_AAAAZY"]
[Sat Nov 29 23:47:54.340512 2025] [:error] [pid 25341:tid 25367] [client 18.183.141.228:56332] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin"] [unique_id "aSsVqvWK8JdN03Mg7dyBRAAAAdY"]
[Sat Nov 29 23:47:54.877119 2025] [:error] [pid 62619:tid 62625] [client 18.183.141.228:56336] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSsVqtk7ZYKT63FfVSWp7wAAAUQ"]
[Sat Nov 29 23:47:55.417068 2025] [:error] [pid 62619:tid 62642] [client 18.183.141.228:56340] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aSsVq9k7ZYKT63FfVSWp8QAAAVU"]
[Sat Nov 29 23:47:55.960211 2025] [:error] [pid 16610:tid 16619] [client 18.183.141.228:59268] [client 18.183.141.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/composer.json"] [unique_id "aSsVqwTu2dLzNk_QISo7_QAAAYc"]
[Sat Nov 29 23:47:56.499608 2025] [:error] [pid 16610:tid 16629] [client 18.183.141.228:59274] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/config"] [unique_id "aSsVrATu2dLzNk_QISo7_wAAAZE"]
[Sat Nov 29 23:47:57.037075 2025] [:error] [pid 16610:tid 16636] [client 18.183.141.228:59288] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aSsVrQTu2dLzNk_QISo8AQAAAZg"]
[Sat Nov 29 23:47:57.576041 2025] [:error] [pid 20828:tid 20901] [client 18.183.141.228:59302] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/config"] [unique_id "aSsVreqW2f0jLRABAOS_IwAAAJA"]
[Sat Nov 29 23:47:58.112384 2025] [:error] [pid 25341:tid 25346] [client 18.183.141.228:59314] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/credentials"] [unique_id "aSsVrvWK8JdN03Mg7dyBSAAAAcE"]
[Sat Nov 29 23:47:58.647912 2025] [:error] [pid 37490:tid 37511] [client 18.183.141.228:59330] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.json"] [unique_id "aSsVrpjG6OUSCUo6XZ14_wAAAhM"]
[Sat Nov 29 23:47:59.183276 2025] [:error] [pid 20828:tid 20898] [client 18.183.141.228:59336] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/credentials"] [unique_id "aSsVr-qW2f0jLRABAOS_KgAAAI0"]
[Sat Nov 29 23:47:59.721222 2025] [:error] [pid 20827:tid 20874] [client 18.183.141.228:59350] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.json"] [unique_id "aSsVr4R9B7FcLfh1rSHC0wAAAFA"]
[Sat Nov 29 23:48:00.260631 2025] [:error] [pid 25341:tid 25361] [client 18.183.141.228:59356] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/keys.js"] [unique_id "aSsVsPWK8JdN03Mg7dyBTgAAAdA"]
[Sat Nov 29 23:48:00.801454 2025] [:error] [pid 37490:tid 37508] [client 18.183.141.228:59370] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-keys.js"] [unique_id "aSsVsJjG6OUSCUo6XZ15AgAAAhA"]
[Sat Nov 29 23:48:01.340015 2025] [:error] [pid 16610:tid 16621] [client 18.183.141.228:59380] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun"] [unique_id "aSsVsQTu2dLzNk_QISo8BQAAAYk"]
[Sat Nov 29 23:48:01.879463 2025] [:error] [pid 32136:tid 32153] [client 18.183.141.228:59390] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun.json"] [unique_id "aSsVscSj_WSVQM1psKrWVAAAAQ8"]
[Sat Nov 29 23:48:02.424325 2025] [:error] [pid 32136:tid 32149] [client 18.183.141.228:59404] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun/config"] [unique_id "aSsVssSj_WSVQM1psKrWVQAAAQs"]
[Sat Nov 29 23:48:02.965783 2025] [:error] [pid 32136:tid 32152] [client 18.183.141.228:59406] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun.php"] [unique_id "aSsVssSj_WSVQM1psKrWVgAAAQ4"]
[Sat Nov 29 23:48:03.507474 2025] [:error] [pid 20826:tid 20843] [client 18.183.141.228:59408] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid"] [unique_id "aSsVs_ABfBqk70vKX9T5aQAAAA0"]
[Sat Nov 29 23:48:04.046585 2025] [:error] [pid 62619:tid 62643] [client 18.183.141.228:59420] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid.json"] [unique_id "aSsVtNk7ZYKT63FfVSWp9gAAAVY"]
[Sat Nov 29 23:48:04.583636 2025] [:error] [pid 20827:tid 20869] [client 18.183.141.228:59432] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid/config"] [unique_id "aSsVtIR9B7FcLfh1rSHC2gAAAEs"]
[Sat Nov 29 23:48:05.126286 2025] [:error] [pid 20826:tid 20852] [client 18.183.141.228:59436] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid.php"] [unique_id "aSsVtfABfBqk70vKX9T5agAAABY"]
[Sat Nov 29 23:48:05.667640 2025] [:error] [pid 32136:tid 32161] [client 18.183.141.228:45096] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid.env"] [unique_id "aSsVtcSj_WSVQM1psKrWWgAAARc"]
[Sat Nov 29 23:48:06.205351 2025] [:error] [pid 20915:tid 20928] [client 18.183.141.228:45098] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo"] [unique_id "aSsVtlOOtKw1QZ3TPEQpcAAAAMs"]
[Sat Nov 29 23:48:06.745666 2025] [:error] [pid 20826:tid 20846] [client 18.183.141.228:45104] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo.json"] [unique_id "aSsVtvABfBqk70vKX9T5bgAAABA"]
[Sat Nov 29 23:48:07.284181 2025] [:error] [pid 32136:tid 32158] [client 18.183.141.228:45112] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo/config"] [unique_id "aSsVt8Sj_WSVQM1psKrWWwAAARQ"]
[Sat Nov 29 23:48:07.838708 2025] [:error] [pid 20828:tid 20893] [client 18.183.141.228:45124] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo.php"] [unique_id "aSsVt-qW2f0jLRABAOS_MgAAAIg"]
[Sat Nov 29 23:48:08.384610 2025] [:error] [pid 20915:tid 20920] [client 18.183.141.228:45138] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php"] [unique_id "aSsVuFOOtKw1QZ3TPEQpdAAAAMM"]
[Sat Nov 29 23:48:08.924495 2025] [:error] [pid 20828:tid 20897] [client 18.183.141.228:45154] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info"] [unique_id "aSsVuOqW2f0jLRABAOS_NAAAAIw"]
[Sat Nov 29 23:48:09.466267 2025] [:error] [pid 62619:tid 62640] [client 18.183.141.228:45158] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo"] [unique_id "aSsVudk7ZYKT63FfVSWp-gAAAVM"]
[Sat Nov 29 23:48:10.010542 2025] [:error] [pid 25341:tid 25356] [client 18.183.141.228:45164] [client 18.183.141.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSsVuvWK8JdN03Mg7dyBVgAAAcs"]
[Sun Nov 30 00:48:43.573820 2025] [:error] [pid 42252:tid 42277] [client 3.71.99.99:48254] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSsj67weMxCk051n8_-olQAAAVc"]
[Sun Nov 30 00:48:44.545414 2025] [:error] [pid 42164:tid 42225] [client 3.71.99.99:48270] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aSsj7Nip8Nhatsq7KxzOOQAAAQM"]
[Sun Nov 30 00:48:45.507947 2025] [:error] [pid 42252:tid 42276] [client 3.71.99.99:48286] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "aSsj7bweMxCk051n8_-onwAAAVY"]
[Sun Nov 30 00:48:46.479406 2025] [:error] [pid 42252:tid 42271] [client 3.71.99.99:48288] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "aSsj7rweMxCk051n8_-oogAAAVE"]
[Sun Nov 30 00:48:47.448144 2025] [:error] [pid 58730:tid 58772] [client 3.71.99.99:48300] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aSsj76DQq6rwusUXQKjOOgAAAAc"]
[Sun Nov 30 00:48:48.411895 2025] [:error] [pid 42163:tid 42204] [client 3.71.99.99:41656] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "aSsj8JnaEs-eGc51wg2FOQAAAMk"]
[Sun Nov 30 00:48:49.372823 2025] [:error] [pid 42252:tid 42263] [client 3.71.99.99:41658] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.example"] [unique_id "aSsj8bweMxCk051n8_-orAAAAUk"]
[Sun Nov 30 00:48:59.235373 2025] [:error] [pid 42162:tid 42184] [client 3.71.99.99:59906] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dbservices.com.au"] [uri "/config.ini"] [unique_id "aSsj-9ePpz4Ije-_EjrkUgAAAJE"]
[Sun Nov 30 00:49:00.200771 2025] [:error] [pid 42163:tid 42207] [client 3.71.99.99:59910] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 30 00:49:02.136253 2025] [:error] [pid 58730:tid 58780] [client 3.71.99.99:59932] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/settings"] [unique_id "aSsj_qDQq6rwusUXQKjOZAAAAA8"]
[Sun Nov 30 00:49:03.096874 2025] [:error] [pid 42164:tid 42234] [client 3.71.99.99:59948] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/settings.json"] [unique_id "aSsj_9ip8Nhatsq7KxzORgAAAQw"]
[Sun Nov 30 00:49:04.066062 2025] [:error] [pid 42252:tid 42274] [client 3.71.99.99:59956] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app.config.js"] [unique_id "aSskALweMxCk051n8_-otwAAAVQ"]
[Sun Nov 30 00:49:05.033695 2025] [:error] [pid 42164:tid 42235] [client 3.71.99.99:59962] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aSskAdip8Nhatsq7KxzOSAAAAQ0"]
[Sun Nov 30 00:49:06.004497 2025] [:error] [pid 58730:tid 58771] [client 3.71.99.99:59964] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aSskAqDQq6rwusUXQKjObgAAAAY"]
[Sun Nov 30 00:49:06.965822 2025] [:error] [pid 42252:tid 42261] [client 3.71.99.99:59976] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aSskArweMxCk051n8_-ovwAAAUc"]
[Sun Nov 30 00:49:07.933726 2025] [:error] [pid 42164:tid 42226] [client 3.71.99.99:59988] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/test.php"] [unique_id "aSskA9ip8Nhatsq7KxzOUAAAAQQ"]
[Sun Nov 30 00:49:08.904491 2025] [:error] [pid 42252:tid 42273] [client 3.71.99.99:45146] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin"] [unique_id "aSskBLweMxCk051n8_-owgAAAVM"]
[Sun Nov 30 00:49:09.867922 2025] [:error] [pid 42163:tid 42202] [client 3.71.99.99:45162] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aSskBZnaEs-eGc51wg2FbAAAAMc"]
[Sun Nov 30 00:49:10.838973 2025] [:error] [pid 42164:tid 42242] [client 3.71.99.99:45170] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aSskBtip8Nhatsq7KxzOUwAAARQ"]
[Sun Nov 30 00:49:11.810302 2025] [:error] [pid 42164:tid 42236] [client 3.71.99.99:45178] [client 3.71.99.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/composer.json"] [unique_id "aSskB9ip8Nhatsq7KxzOVgAAAQ4"]
[Sun Nov 30 00:49:12.781863 2025] [:error] [pid 58730:tid 58786] [client 3.71.99.99:45192] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.aws/config"] [unique_id "aSskCKDQq6rwusUXQKjOeQAAABQ"]
[Sun Nov 30 00:49:13.751038 2025] [:error] [pid 58730:tid 58777] [client 3.71.99.99:45198] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aSskCaDQq6rwusUXQKjOfQAAAAw"]
[Sun Nov 30 00:49:14.711866 2025] [:error] [pid 42162:tid 42170] [client 3.71.99.99:45202] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws/config"] [unique_id "aSskCtePpz4Ije-_EjrkcQAAAIM"]
[Sun Nov 30 00:49:15.679870 2025] [:error] [pid 58730:tid 58779] [client 3.71.99.99:45218] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws/credentials"] [unique_id "aSskC6DQq6rwusUXQKjOgwAAAA4"]
[Sun Nov 30 00:49:16.649105 2025] [:error] [pid 42162:tid 42183] [client 3.71.99.99:45230] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws.json"] [unique_id "aSskDNePpz4Ije-_EjrkeQAAAJA"]
[Sun Nov 30 00:49:17.609219 2025] [:error] [pid 42164:tid 42225] [client 3.71.99.99:45234] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/credentials"] [unique_id "aSskDdip8Nhatsq7KxzOZAAAAQM"]
[Sun Nov 30 00:49:18.568966 2025] [:error] [pid 42252:tid 42254] [client 3.71.99.99:52642] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/secrets.json"] [unique_id "aSskDrweMxCk051n8_-o0QAAAUA"]
[Sun Nov 30 00:49:19.535959 2025] [:error] [pid 42163:tid 42208] [client 3.71.99.99:52656] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/keys.js"] [unique_id "aSskD5naEs-eGc51wg2FeAAAAM0"]
[Sun Nov 30 00:49:20.503755 2025] [:error] [pid 42163:tid 42210] [client 3.71.99.99:52664] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws-keys.js"] [unique_id "aSskEJnaEs-eGc51wg2FfgAAAM8"]
[Sun Nov 30 00:49:21.465195 2025] [:error] [pid 42252:tid 42269] [client 3.71.99.99:52676] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun"] [unique_id "aSskEbweMxCk051n8_-o1QAAAU8"]
[Sun Nov 30 00:49:22.429434 2025] [:error] [pid 42164:tid 42236] [client 3.71.99.99:52680] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun.json"] [unique_id "aSskEtip8Nhatsq7KxzObQAAAQ4"]
[Sun Nov 30 00:49:23.398798 2025] [:error] [pid 42163:tid 42208] [client 3.71.99.99:52690] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun/config"] [unique_id "aSskE5naEs-eGc51wg2FhAAAAM0"]
[Sun Nov 30 00:49:24.366756 2025] [:error] [pid 42164:tid 42242] [client 3.71.99.99:52692] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun.php"] [unique_id "aSskFNip8Nhatsq7KxzOcgAAARQ"]
[Sun Nov 30 00:49:25.336990 2025] [:error] [pid 42164:tid 42231] [client 3.71.99.99:52700] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid"] [unique_id "aSskFdip8Nhatsq7KxzOdgAAAQk"]
[Sun Nov 30 00:49:26.299661 2025] [:error] [pid 42164:tid 42225] [client 3.71.99.99:52714] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.json"] [unique_id "aSskFtip8Nhatsq7KxzOeQAAAQM"]
[Sun Nov 30 00:49:27.274721 2025] [:error] [pid 42252:tid 42258] [client 3.71.99.99:52730] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid/config"] [unique_id "aSskF7weMxCk051n8_-o5QAAAUQ"]
[Sun Nov 30 00:49:28.237337 2025] [:error] [pid 42162:tid 42172] [client 3.71.99.99:39116] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.php"] [unique_id "aSskGNePpz4Ije-_EjrkhwAAAIU"]
[Sun Nov 30 00:49:29.206699 2025] [:error] [pid 42252:tid 42272] [client 3.71.99.99:39128] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.env"] [unique_id "aSskGbweMxCk051n8_-o6gAAAVI"]
[Sun Nov 30 00:49:30.174860 2025] [:error] [pid 42164:tid 42235] [client 3.71.99.99:39130] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo"] [unique_id "aSskGtip8Nhatsq7KxzOhQAAAQ0"]
[Sun Nov 30 00:49:31.143110 2025] [:error] [pid 42252:tid 42267] [client 3.71.99.99:39132] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo.json"] [unique_id "aSskG7weMxCk051n8_-o8gAAAU0"]
[Sun Nov 30 00:49:32.104433 2025] [:error] [pid 58730:tid 58773] [client 3.71.99.99:39144] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo/config"] [unique_id "aSskHKDQq6rwusUXQKjOowAAAAg"]
[Sun Nov 30 00:49:33.072864 2025] [:error] [pid 42252:tid 42260] [client 3.71.99.99:39152] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo.php"] [unique_id "aSskHbweMxCk051n8_-o-QAAAUY"]
[Sun Nov 30 00:49:34.044934 2025] [:error] [pid 42252:tid 42258] [client 3.71.99.99:39160] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/php"] [unique_id "aSskHrweMxCk051n8_-pAAAAAUQ"]
[Sun Nov 30 00:49:35.004647 2025] [:error] [pid 42164:tid 42229] [client 3.71.99.99:39172] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info"] [unique_id "aSskH9ip8Nhatsq7KxzOjgAAAQc"]
[Sun Nov 30 00:49:35.978532 2025] [:error] [pid 42162:tid 42190] [client 3.71.99.99:39184] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo"] [unique_id "aSskH9ePpz4Ije-_EjrkkwAAAJc"]
[Sun Nov 30 00:49:36.945949 2025] [:error] [pid 58730:tid 58771] [client 3.71.99.99:39186] [client 3.71.99.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSskIKDQq6rwusUXQKjOpAAAAAY"]
[Sun Nov 30 01:46:09.702955 2025] [:error] [pid 42164:tid 42223] [client 159.203.125.106:40726] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSsxYdip8Nhatsq7KxzhoQAAAQE"]
[Sun Nov 30 01:46:12.804305 2025] [:error] [pid 29714:tid 29730] [client 159.203.125.106:52216] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSsxZL76_KNwefuiUY93lwAAAE4"]
[Sun Nov 30 02:35:13.512937 2025] [:error] [pid 42164:tid 42226] [client 57.181.27.17:52220] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSs84dip8Nhatsq7Kxzs6gAAAQQ"]
[Sun Nov 30 02:35:14.057045 2025] [:error] [pid 58730:tid 58775] [client 57.181.27.17:52222] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aSs84qDQq6rwusUXQKjrKwAAAAo"]
[Sun Nov 30 02:35:14.600214 2025] [:error] [pid 42162:tid 42187] [client 57.181.27.17:52232] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aSs84tePpz4Ije-_Ejr92AAAAJQ"]
[Sun Nov 30 02:35:15.141466 2025] [:error] [pid 42252:tid 42265] [client 57.181.27.17:52244] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aSs847weMxCk051n8__FvQAAAUs"]
[Sun Nov 30 02:35:15.681527 2025] [:error] [pid 58730:tid 58771] [client 57.181.27.17:59894] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aSs846DQq6rwusUXQKjrLgAAAAY"]
[Sun Nov 30 02:35:16.224149 2025] [:error] [pid 33337:tid 33355] [client 57.181.27.17:59910] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aSs85D7HzFQftKzaJgJ-EQAAAc4"]
[Sun Nov 30 02:35:16.771572 2025] [:error] [pid 33376:tid 33395] [client 57.181.27.17:59914] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aSs85Hpx_7viPEhKF36ZowAAAhA"]
[Sun Nov 30 02:35:22.221246 2025] [:error] [pid 33303:tid 33325] [client 57.181.27.17:59978] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/config.ini"] [unique_id "aSs86vvL3Xz3V8uL8l59hAAAAZQ"]
[Sun Nov 30 02:35:22.760865 2025] [:error] [pid 33337:tid 33342] [client 57.181.27.17:59992] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 30 02:35:23.845266 2025] [:error] [pid 42252:tid 42268] [client 57.181.27.17:60012] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings"] [unique_id "aSs867weMxCk051n8__FxQAAAU4"]
[Sun Nov 30 02:35:24.384565 2025] [:error] [pid 33376:tid 33380] [client 57.181.27.17:60028] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.json"] [unique_id "aSs87Hpx_7viPEhKF36ZpQAAAgE"]
[Sun Nov 30 02:35:24.928924 2025] [:error] [pid 42252:tid 42274] [client 57.181.27.17:60040] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.config.js"] [unique_id "aSs87LweMxCk051n8__FxgAAAVQ"]
[Sun Nov 30 02:35:25.468304 2025] [:error] [pid 29714:tid 29726] [client 57.181.27.17:41888] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aSs87b76_KNwefuiUY-B1AAAAEo"]
[Sun Nov 30 02:35:26.008745 2025] [:error] [pid 42163:tid 42214] [client 57.181.27.17:41896] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aSs87pnaEs-eGc51wg2eeAAAANM"]
[Sun Nov 30 02:35:26.551438 2025] [:error] [pid 42252:tid 42277] [client 57.181.27.17:41910] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aSs87rweMxCk051n8__FyAAAAVc"]
[Sun Nov 30 02:35:27.087032 2025] [:error] [pid 33303:tid 33326] [client 57.181.27.17:41922] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aSs87_vL3Xz3V8uL8l59jQAAAZU"]
[Sun Nov 30 02:35:27.628224 2025] [:error] [pid 33303:tid 33313] [client 57.181.27.17:41932] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin"] [unique_id "aSs87_vL3Xz3V8uL8l59jwAAAYg"]
[Sun Nov 30 02:35:28.167251 2025] [:error] [pid 33337:tid 33356] [client 57.181.27.17:41948] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aSs88D7HzFQftKzaJgJ-IAAAAc8"]
[Sun Nov 30 02:35:28.707220 2025] [:error] [pid 33376:tid 33387] [client 57.181.27.17:41964] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aSs88Hpx_7viPEhKF36ZqAAAAgg"]
[Sun Nov 30 02:35:29.245291 2025] [:error] [pid 42162:tid 42191] [client 57.181.27.17:41966] [client 57.181.27.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/composer.json"] [unique_id "aSs88dePpz4Ije-_Ejr96QAAAJg"]
[Sun Nov 30 02:35:29.781355 2025] [:error] [pid 33337:tid 33343] [client 57.181.27.17:41974] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/config"] [unique_id "aSs88T7HzFQftKzaJgJ-IQAAAcI"]
[Sun Nov 30 02:35:30.319807 2025] [:error] [pid 42252:tid 42273] [client 57.181.27.17:41976] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aSs88rweMxCk051n8__FzQAAAVM"]
[Sun Nov 30 02:35:30.858833 2025] [:error] [pid 58730:tid 58783] [client 57.181.27.17:41980] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/config"] [unique_id "aSs88qDQq6rwusUXQKjrMwAAABI"]
[Sun Nov 30 02:35:31.396466 2025] [:error] [pid 42164:tid 42243] [client 57.181.27.17:41994] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/credentials"] [unique_id "aSs889ip8Nhatsq7Kxzs8AAAARU"]
[Sun Nov 30 02:35:31.935929 2025] [:error] [pid 33303:tid 33310] [client 57.181.27.17:42002] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.json"] [unique_id "aSs88_vL3Xz3V8uL8l59kwAAAYU"]
[Sun Nov 30 02:35:32.471182 2025] [:error] [pid 58730:tid 58774] [client 57.181.27.17:42004] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/credentials"] [unique_id "aSs89KDQq6rwusUXQKjrNAAAAAk"]
[Sun Nov 30 02:35:33.006507 2025] [:error] [pid 42163:tid 42206] [client 57.181.27.17:42014] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.json"] [unique_id "aSs89ZnaEs-eGc51wg2efAAAAMs"]
[Sun Nov 30 02:35:33.546380 2025] [:error] [pid 33376:tid 33398] [client 57.181.27.17:42016] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/keys.js"] [unique_id "aSs89Xpx_7viPEhKF36ZsAAAAhM"]
[Sun Nov 30 02:35:34.083998 2025] [:error] [pid 33376:tid 33390] [client 57.181.27.17:42032] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-keys.js"] [unique_id "aSs89npx_7viPEhKF36ZsgAAAgs"]
[Sun Nov 30 02:35:34.623624 2025] [:error] [pid 58730:tid 58776] [client 57.181.27.17:42048] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun"] [unique_id "aSs89qDQq6rwusUXQKjrOAAAAAs"]
[Sun Nov 30 02:35:35.162123 2025] [:error] [pid 42252:tid 42262] [client 57.181.27.17:42060] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun.json"] [unique_id "aSs897weMxCk051n8__F0AAAAUg"]
[Sun Nov 30 02:35:35.702646 2025] [:error] [pid 42252:tid 42261] [client 57.181.27.17:58038] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun/config"] [unique_id "aSs897weMxCk051n8__F0QAAAUc"]
[Sun Nov 30 02:35:36.242774 2025] [:error] [pid 42164:tid 42228] [client 57.181.27.17:58044] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mailgun.php"] [unique_id "aSs8-Nip8Nhatsq7Kxzs8wAAAQY"]
[Sun Nov 30 02:35:36.779477 2025] [:error] [pid 42163:tid 42216] [client 57.181.27.17:58046] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid"] [unique_id "aSs8-JnaEs-eGc51wg2efgAAANU"]
[Sun Nov 30 02:35:37.319176 2025] [:error] [pid 42162:tid 42185] [client 57.181.27.17:58060] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid.json"] [unique_id "aSs8-dePpz4Ije-_Ejr97wAAAJI"]
[Sun Nov 30 02:35:37.853585 2025] [:error] [pid 42252:tid 42255] [client 57.181.27.17:58070] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid/config"] [unique_id "aSs8-bweMxCk051n8__F1AAAAUE"]
[Sun Nov 30 02:35:38.391879 2025] [:error] [pid 29714:tid 29738] [client 57.181.27.17:58084] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid.php"] [unique_id "aSs8-r76_KNwefuiUY-B3gAAAFY"]
[Sun Nov 30 02:35:38.931064 2025] [:error] [pid 33303:tid 33309] [client 57.181.27.17:58096] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sendgrid.env"] [unique_id "aSs8-vvL3Xz3V8uL8l59mAAAAYQ"]
[Sun Nov 30 02:35:39.469585 2025] [:error] [pid 42252:tid 42266] [client 57.181.27.17:58102] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo"] [unique_id "aSs8-7weMxCk051n8__F1gAAAUw"]
[Sun Nov 30 02:35:40.009596 2025] [:error] [pid 42164:tid 42233] [client 57.181.27.17:58114] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo.json"] [unique_id "aSs8_Nip8Nhatsq7Kxzs9wAAAQs"]
[Sun Nov 30 02:35:40.551654 2025] [:error] [pid 42162:tid 42173] [client 57.181.27.17:58122] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo/config"] [unique_id "aSs8_NePpz4Ije-_Ejr98QAAAIY"]
[Sun Nov 30 02:35:41.090364 2025] [:error] [pid 29714:tid 29724] [client 57.181.27.17:58136] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brevo.php"] [unique_id "aSs8_b76_KNwefuiUY-B4QAAAEg"]
[Sun Nov 30 02:35:41.626140 2025] [:error] [pid 33337:tid 33357] [client 57.181.27.17:58142] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php"] [unique_id "aSs8_T7HzFQftKzaJgJ-JwAAAdA"]
[Sun Nov 30 02:35:42.163364 2025] [:error] [pid 42252:tid 42270] [client 57.181.27.17:58146] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info"] [unique_id "aSs8_rweMxCk051n8__F3QAAAVA"]
[Sun Nov 30 02:35:42.701867 2025] [:error] [pid 33303:tid 33317] [client 57.181.27.17:58160] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo"] [unique_id "aSs8_vvL3Xz3V8uL8l59mwAAAYw"]
[Sun Nov 30 02:35:43.255840 2025] [:error] [pid 33303:tid 33312] [client 57.181.27.17:58166] [client 57.181.27.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSs8__vL3Xz3V8uL8l59nAAAAYc"]
[Sun Nov 30 02:36:58.217488 2025] [:error] [pid 42163:tid 42209] [client 213.21.239.4:34254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dev/.svn/wc.db"] [unique_id "aSs9SpnaEs-eGc51wg2epwAAAM4"]
[Sun Nov 30 02:36:58.218531 2025] [:error] [pid 42163:tid 42202] [client 213.21.239.4:34278] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/data/.svn/wc.db"] [unique_id "aSs9SpnaEs-eGc51wg2eqAAAAMc"]
[Sun Nov 30 02:36:58.219925 2025] [:error] [pid 42162:tid 42184] [client 213.21.239.4:34322] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/beta/.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-IwAAAJE"]
[Sun Nov 30 02:36:58.221028 2025] [:error] [pid 42162:tid 42177] [client 213.21.239.4:34426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/amphtml/.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-JAAAAIo"]
[Sun Nov 30 02:36:58.223619 2025] [:error] [pid 42163:tid 42216] [client 213.21.239.4:34216] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.svn/wc.db"] [unique_id "aSs9SpnaEs-eGc51wg2eqQAAANU"]
[Sun Nov 30 02:36:58.226165 2025] [:error] [pid 42162:tid 42174] [client 213.21.239.4:34466] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/build/.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-JQAAAIc"]
[Sun Nov 30 02:36:58.227312 2025] [:error] [pid 42162:tid 42169] [client 213.21.239.4:34242] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/content../.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-JgAAAII"]
[Sun Nov 30 02:36:58.230239 2025] [:error] [pid 33337:tid 33356] [client 213.21.239.4:34366] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices../wc.db"] [unique_id "aSs9Sj7HzFQftKzaJgJ-SQAAAc8"]
[Sun Nov 30 02:36:58.230986 2025] [:error] [pid 33376:tid 33395] [client 213.21.239.4:34440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/AWSconf.svn/wc.db"] [unique_id "aSs9Snpx_7viPEhKF36Z-AAAAhA"]
[Sun Nov 30 02:36:58.231069 2025] [:error] [pid 42162:tid 42191] [client 213.21.239.4:34208] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/a/.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-JwAAAJg"]
[Sun Nov 30 02:36:58.231481 2025] [:error] [pid 42164:tid 42236] [client 213.21.239.4:34352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/blog/wp-content/themes/.svn/wc.db"] [unique_id "aSs9Stip8Nhatsq7KxztMgAAAQ4"]
[Sun Nov 30 02:36:58.232424 2025] [:error] [pid 42163:tid 42212] [client 213.21.239.4:34394] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backup/.svn/wc.db"] [unique_id "aSs9SpnaEs-eGc51wg2eqgAAANE"]
[Sun Nov 30 02:36:58.235103 2025] [:error] [pid 42162:tid 42168] [client 213.21.239.4:34436] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/blog/.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-KAAAAIE"]
[Sun Nov 30 02:36:58.235103 2025] [:error] [pid 42162:tid 42190] [client 213.21.239.4:34438] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-KQAAAJc"]
[Sun Nov 30 02:36:58.237886 2025] [:error] [pid 42164:tid 42230] [client 213.21.239.4:34336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/common/.svn/wc.db"] [unique_id "aSs9Stip8Nhatsq7KxztMwAAAQg"]
[Sun Nov 30 02:36:58.238397 2025] [:error] [pid 42252:tid 42262] [client 213.21.239.4:34298] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cms/.svn/wc.db"] [unique_id "aSs9SrweMxCk051n8__GBQAAAUg"]
[Sun Nov 30 02:36:58.241826 2025] [:error] [pid 42164:tid 42233] [client 213.21.239.4:34228] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/developer/.svn/wc.db"] [unique_id "aSs9Stip8Nhatsq7KxztNAAAAQs"]
[Sun Nov 30 02:36:58.242782 2025] [:error] [pid 42162:tid 42188] [client 213.21.239.4:34270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/database/.svn/wc.db"] [unique_id "aSs9StePpz4Ije-_Ejr-KgAAAJU"]
[Sun Nov 30 02:36:58.243743 2025] [:error] [pid 33303:tid 33306] [client 213.21.239.4:34378] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/css../.svn/wc.db"] [unique_id "aSs9SvvL3Xz3V8uL8l595wAAAYE"]
[Sun Nov 30 02:36:58.244883 2025] [:error] [pid 33303:tid 33316] [client 213.21.239.4:34310] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/demo/.svn/wc.db"] [unique_id "aSs9SvvL3Xz3V8uL8l596AAAAYs"]
[Sun Nov 30 02:36:58.245669 2025] [:error] [pid 33303:tid 33328] [client 213.21.239.4:34414] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/application/.svn/wc.db"] [unique_id "aSs9SvvL3Xz3V8uL8l596QAAAZc"]
[Sun Nov 30 02:36:58.247987 2025] [:error] [pid 33303:tid 33327] [client 213.21.239.4:34480] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.svn/wc.db"] [unique_id "aSs9SvvL3Xz3V8uL8l596gAAAZY"]
[Sun Nov 30 02:36:58.248883 2025] [:error] [pid 33303:tid 33325] [client 213.21.239.4:34482] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/assets../.svn/wc.db"] [unique_id "aSs9SvvL3Xz3V8uL8l596wAAAZQ"]
[Sun Nov 30 02:36:58.249687 2025] [:error] [pid 42252:tid 42277] [client 213.21.239.4:34410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/aomanalyzer/.svn/wc.db"] [unique_id "aSs9SrweMxCk051n8__GBgAAAVc"]
[Sun Nov 30 02:36:58.253811 2025] [:error] [pid 33303:tid 33309] [client 213.21.239.4:34294] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/wc.db"] [unique_id "aSs9SvvL3Xz3V8uL8l597AAAAYQ"]
[Sun Nov 30 02:37:01.523705 2025] [:error] [pid 42164:tid 42242] [client 213.21.239.4:34532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.svn/wc.db"] [unique_id "aSs9Tdip8Nhatsq7KxztNgAAARQ"]
[Sun Nov 30 02:37:01.524533 2025] [:error] [pid 42164:tid 42223] [client 213.21.239.4:34534] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices../.svn/wc.db"] [unique_id "aSs9Tdip8Nhatsq7KxztNwAAAQE"]
[Sun Nov 30 02:37:01.527118 2025] [:error] [pid 33303:tid 33314] [client 213.21.239.4:34628] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/%0Awc.db"] [unique_id "aSs9TfvL3Xz3V8uL8l598AAAAYk"]
[Sun Nov 30 02:37:01.527914 2025] [:error] [pid 33303:tid 33317] [client 213.21.239.4:34564] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au../wc.db"] [unique_id "aSs9TfvL3Xz3V8uL8l597wAAAYw"]
[Sun Nov 30 02:37:01.529861 2025] [:error] [pid 33303:tid 33311] [client 213.21.239.4:34502] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/flock/.svn/wc.db"] [unique_id "aSs9TfvL3Xz3V8uL8l598QAAAYY"]
[Sun Nov 30 02:37:01.531222 2025] [:error] [pid 33376:tid 33381] [client 213.21.239.4:34496] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aAwAAAgI"]
[Sun Nov 30 02:37:01.531771 2025] [:error] [pid 33303:tid 33323] [client 213.21.239.4:34574] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.svn/wc.db;.."] [unique_id "aSs9TfvL3Xz3V8uL8l598gAAAZI"]
[Sun Nov 30 02:37:01.533346 2025] [:error] [pid 33337:tid 33341] [client 213.21.239.4:34598] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/wc.db"] [unique_id "aSs9TT7HzFQftKzaJgJ-SwAAAcA"]
[Sun Nov 30 02:37:01.534782 2025] [:error] [pid 33337:tid 33348] [client 213.21.239.4:34712] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/wc.db;.."] [unique_id "aSs9TT7HzFQftKzaJgJ-TAAAAcc"]
[Sun Nov 30 02:37:01.535176 2025] [:error] [pid 33337:tid 33347] [client 213.21.239.4:34516] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.svn/%0Awc.db"] [unique_id "aSs9TT7HzFQftKzaJgJ-TQAAAcY"]
[Sun Nov 30 02:37:01.535421 2025] [:error] [pid 33337:tid 33354] [client 213.21.239.4:34656] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/events../.svn/wc.db"] [unique_id "aSs9TT7HzFQftKzaJgJ-TgAAAc0"]
[Sun Nov 30 02:37:01.536722 2025] [:error] [pid 33303:tid 33308] [client 213.21.239.4:34662] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au../.svn/wc.db"] [unique_id "aSs9TfvL3Xz3V8uL8l598wAAAYM"]
[Sun Nov 30 02:37:01.537265 2025] [:error] [pid 33376:tid 33383] [client 213.21.239.4:34718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn;/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aBAAAAgQ"]
[Sun Nov 30 02:37:01.538996 2025] [:error] [pid 58730:tid 58783] [client 213.21.239.4:34740] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/static../.svn/wc.db"] [unique_id "aSs9TaDQq6rwusUXQKjrdAAAABI"]
[Sun Nov 30 02:37:01.540722 2025] [:error] [pid 33376:tid 33387] [client 213.21.239.4:34556] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/..;/.svn/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aBQAAAgg"]
[Sun Nov 30 02:37:01.541503 2025] [:error] [pid 33376:tid 33402] [client 213.21.239.4:34708] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/wc.db;"] [unique_id "aSs9TXpx_7viPEhKF36aBgAAAhc"]
[Sun Nov 30 02:37:01.543210 2025] [:error] [pid 33376:tid 33395] [client 213.21.239.4:34614] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/;/.svn/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aBwAAAhA"]
[Sun Nov 30 02:37:01.546972 2025] [:error] [pid 58730:tid 58782] [client 213.21.239.4:34650] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dot.svn/wc.db"] [unique_id "aSs9TaDQq6rwusUXQKjrdQAAABE"]
[Sun Nov 30 02:37:01.547896 2025] [:error] [pid 33376:tid 33401] [client 213.21.239.4:34694] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aCAAAAhY"]
[Sun Nov 30 02:37:01.548327 2025] [:error] [pid 33376:tid 33400] [client 213.21.239.4:34548] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/.svn/wc.db;"] [unique_id "aSs9TXpx_7viPEhKF36aCQAAAhU"]
[Sun Nov 30 02:37:01.548940 2025] [:error] [pid 33376:tid 33403] [client 213.21.239.4:34730] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/;/.svn/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aCgAAAhg"]
[Sun Nov 30 02:37:01.551050 2025] [:error] [pid 33376:tid 33380] [client 213.21.239.4:34582] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices/.svn;/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aCwAAAgE"]
[Sun Nov 30 02:37:01.553112 2025] [:error] [pid 58730:tid 58775] [client 213.21.239.4:34678] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/..;/.svn/wc.db"] [unique_id "aSs9TaDQq6rwusUXQKjrdwAAAAo"]
[Sun Nov 30 02:37:01.554092 2025] [:error] [pid 33376:tid 33394] [client 213.21.239.4:34642] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices/static../.svn/wc.db"] [unique_id "aSs9TXpx_7viPEhKF36aDAAAAg8"]
[Sun Nov 30 02:37:01.554139 2025] [:error] [pid 33376:tid 33388] [client 213.21.239.4:34756] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSs9TXpx_7viPEhKF36aDQAAAgk"]
[Sun Nov 30 02:37:04.523346 2025] [:error] [pid 58730:tid 58766] [client 213.21.239.4:53340] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/message-api/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrgQAAAAE"]
[Sun Nov 30 02:37:04.525520 2025] [:error] [pid 58730:tid 58780] [client 213.21.239.4:53274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au../wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrgAAAAA8"]
[Sun Nov 30 02:37:04.526755 2025] [:error] [pid 58730:tid 58765] [client 213.21.239.4:53268] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/media../.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrggAAAAA"]
[Sun Nov 30 02:37:04.530223 2025] [:error] [pid 58730:tid 58779] [client 213.21.239.4:53302] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/new/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrgwAAAA4"]
[Sun Nov 30 02:37:04.532031 2025] [:error] [pid 58730:tid 58784] [client 213.21.239.4:53360] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrhAAAABM"]
[Sun Nov 30 02:37:04.532847 2025] [:error] [pid 58730:tid 58768] [client 213.21.239.4:53328] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/prod/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrhQAAAAM"]
[Sun Nov 30 02:37:04.533020 2025] [:error] [pid 58730:tid 58789] [client 213.21.239.4:53334] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/__MACOSX/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrhwAAABc"]
[Sun Nov 30 02:37:04.536945 2025] [:error] [pid 58730:tid 58772] [client 213.21.239.4:53312] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/old-cuburn/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjriAAAAAc"]
[Sun Nov 30 02:37:04.537068 2025] [:error] [pid 58730:tid 58774] [client 213.21.239.4:53354] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/m/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjriQAAAAk"]
[Sun Nov 30 02:37:04.538267 2025] [:error] [pid 42162:tid 42188] [client 213.21.239.4:53352] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.svn/wc.db"] [unique_id "aSs9UNePpz4Ije-_Ejr-LQAAAJU"]
[Sun Nov 30 02:37:04.538610 2025] [:error] [pid 58730:tid 58777] [client 213.21.239.4:53290] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrigAAAAw"]
[Sun Nov 30 02:37:04.541384 2025] [:error] [pid 58730:tid 58776] [client 213.21.239.4:53408] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/svn/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjriwAAAAs"]
[Sun Nov 30 02:37:04.541631 2025] [:error] [pid 33376:tid 33384] [client 213.21.239.4:53356] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSs9UHpx_7viPEhKF36aDwAAAgU"]
[Sun Nov 30 02:37:04.542086 2025] [:error] [pid 33376:tid 33398] [client 213.21.239.4:53450] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/live/.svn/wc.db"] [unique_id "aSs9UHpx_7viPEhKF36aEAAAAhM"]
[Sun Nov 30 02:37:04.543052 2025] [:error] [pid 58730:tid 58782] [client 213.21.239.4:53260] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/qa/.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrjAAAABE"]
[Sun Nov 30 02:37:04.544871 2025] [:error] [pid 58730:tid 58775] [client 213.21.239.4:53374] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSs9UKDQq6rwusUXQKjrjQAAAAo"]
[Sun Nov 30 02:37:04.545960 2025] [:error] [pid 42164:tid 42230] [client 213.21.239.4:53424] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/images../.svn/wc.db"] [unique_id "aSs9UNip8Nhatsq7KxztPAAAAQg"]
[Sun Nov 30 02:37:04.546839 2025] [:error] [pid 33303:tid 33329] [client 213.21.239.4:53440] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib../.svn/wc.db"] [unique_id "aSs9UPvL3Xz3V8uL8l59-QAAAZg"]
[Sun Nov 30 02:37:04.547947 2025] [:error] [pid 58730:tid 58787] [client 213.21.239.4:53426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/img../.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrjgAAABU"]
[Sun Nov 30 02:37:04.548885 2025] [:error] [pid 29714:tid 29717] [client 213.21.239.4:53472] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aSs9UL76_KNwefuiUY-CEgAAAEE"]
[Sun Nov 30 02:37:04.552060 2025] [:error] [pid 42164:tid 42233] [client 213.21.239.4:53392] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSs9UNip8Nhatsq7KxztPQAAAQs"]
[Sun Nov 30 02:37:04.552924 2025] [:error] [pid 58730:tid 58781] [client 213.21.239.4:53438] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/js../.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrjwAAABA"]
[Sun Nov 30 02:37:04.556964 2025] [:error] [pid 58730:tid 58790] [client 213.21.239.4:53458] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/prod.svn/wc.db"] [unique_id "aSs9UKDQq6rwusUXQKjrkAAAABg"]
[Sun Nov 30 02:37:04.558018 2025] [:error] [pid 42163:tid 42205] [client 213.21.239.4:53460] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSs9UJnaEs-eGc51wg2ergAAAMo"]
[Sun Nov 30 02:37:07.530833 2025] [:error] [pid 42162:tid 42176] [client 213.21.239.4:53484] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/repos/.svn/wc.db"] [unique_id "aSs9U9ePpz4Ije-_Ejr-LgAAAIk"]
[Sun Nov 30 02:37:07.531891 2025] [:error] [pid 42164:tid 42243] [client 213.21.239.4:53512] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/repository/.svn/wc.db"] [unique_id "aSs9U9ip8Nhatsq7KxztQgAAARU"]
[Sun Nov 30 02:37:07.535019 2025] [:error] [pid 42164:tid 42238] [client 213.21.239.4:53508] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/..;/.svn/wc.db"] [unique_id "aSs9U9ip8Nhatsq7KxztQwAAARA"]
[Sun Nov 30 02:37:07.536008 2025] [:error] [pid 33303:tid 33327] [client 213.21.239.4:53580] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/..;/.svn/wc.db"] [unique_id "aSs9U_vL3Xz3V8uL8l59_gAAAZY"]
[Sun Nov 30 02:37:07.536783 2025] [:error] [pid 42164:tid 42227] [client 213.21.239.4:53522] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aSs9U9ip8Nhatsq7KxztRAAAAQU"]
[Sun Nov 30 02:37:07.539097 2025] [:error] [pid 42164:tid 42225] [client 213.21.239.4:53582] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/wc.db;"] [unique_id "aSs9U9ip8Nhatsq7KxztRQAAAQM"]
[Sun Nov 30 02:37:07.541135 2025] [:error] [pid 42164:tid 42246] [client 213.21.239.4:53524] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db;"] [unique_id "aSs9U9ip8Nhatsq7KxztRgAAARg"]
[Sun Nov 30 02:37:07.541978 2025] [:error] [pid 33303:tid 33309] [client 213.21.239.4:53604] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/s3/.svn/wc.db"] [unique_id "aSs9U_vL3Xz3V8uL8l59_wAAAYQ"]
[Sun Nov 30 02:37:07.542053 2025] [:error] [pid 33376:tid 33391] [client 213.21.239.4:53546] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/;/.svn/wc.db"] [unique_id "aSs9U3px_7viPEhKF36aFAAAAgw"]
[Sun Nov 30 02:37:07.544807 2025] [:error] [pid 42164:tid 42237] [client 213.21.239.4:53550] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/shop/.svn/wc.db"] [unique_id "aSs9U9ip8Nhatsq7KxztRwAAAQ8"]
[Sun Nov 30 02:37:07.546425 2025] [:error] [pid 33303:tid 33325] [client 213.21.239.4:53500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/../.svn/wc.db"] [unique_id "aSs9U_vL3Xz3V8uL8l5-AAAAAZQ"]
[Sun Nov 30 02:37:07.547347 2025] [:error] [pid 42164:tid 42244] [client 213.21.239.4:53562] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/%0Awc.db"] [unique_id "aSs9U9ip8Nhatsq7KxztSAAAARY"]
[Sun Nov 30 02:37:07.549049 2025] [:error] [pid 42162:tid 42181] [client 213.21.239.4:53564] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSs9U9ePpz4Ije-_Ejr-LwAAAI4"]
[Sun Nov 30 02:37:07.549260 2025] [:error] [pid 42252:tid 42273] [client 213.21.239.4:53610] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/samples/.svn/wc.db"] [unique_id "aSs9U7weMxCk051n8__GDwAAAVM"]
[Sun Nov 30 02:37:07.550456 2025] [:error] [pid 33376:tid 33398] [client 213.21.239.4:53588] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/wc.db;.."] [unique_id "aSs9U3px_7viPEhKF36aFQAAAhM"]
[Sun Nov 30 02:37:07.552758 2025] [:error] [pid 33303:tid 33313] [client 213.21.239.4:53566] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au../.svn/wc.db"] [unique_id "aSs9U_vL3Xz3V8uL8l5-AQAAAYg"]
[Sun Nov 30 02:37:07.553329 2025] [:error] [pid 33376:tid 33384] [client 213.21.239.4:53532] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/.svn;/wc.db"] [unique_id "aSs9U3px_7viPEhKF36aFgAAAgU"]
[Sun Nov 30 02:37:07.554179 2025] [core:error] [pid 33376:tid 33385] [client 213.21.239.4:53624] AH10244: invalid URI path (/../wc.db)
[Sun Nov 30 02:37:07.556646 2025] [:error] [pid 42162:tid 42170] [client 213.21.239.4:53626] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/;/.svn/wc.db"] [unique_id "aSs9U9ePpz4Ije-_Ejr-MAAAAIM"]
[Sun Nov 30 02:37:07.558755 2025] [:error] [pid 33303:tid 33305] [client 213.21.239.4:53658] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/%0Awc.db"] [unique_id "aSs9U_vL3Xz3V8uL8l5-AgAAAYA"]
[Sun Nov 30 02:37:07.558767 2025] [:error] [pid 33376:tid 33392] [client 213.21.239.4:53646] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn/wc.db"] [unique_id "aSs9U3px_7viPEhKF36aGAAAAg0"]
[Sun Nov 30 02:37:07.558907 2025] [:error] [pid 42252:tid 42257] [client 213.21.239.4:53628] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/wc.db"] [unique_id "aSs9U7weMxCk051n8__GEAAAAUM"]
[Sun Nov 30 02:37:07.560284 2025] [:error] [pid 33303:tid 33307] [client 213.21.239.4:53592] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/.svn;/wc.db"] [unique_id "aSs9U_vL3Xz3V8uL8l5-AwAAAYI"]
[Sun Nov 30 02:37:07.564667 2025] [:error] [pid 33376:tid 33389] [client 213.21.239.4:53618] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db;.."] [unique_id "aSs9U3px_7viPEhKF36aGQAAAgo"]
[Sun Nov 30 02:37:07.565898 2025] [:error] [pid 33376:tid 33386] [client 213.21.239.4:53636] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dbservices.com.au/static../.svn/wc.db"] [unique_id "aSs9U3px_7viPEhKF36aGgAAAgc"]
[Sun Nov 30 02:37:10.525766 2025] [:error] [pid 29714:tid 29725] [client 213.21.239.4:53692] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-content/.svn/wc.db"] [unique_id "aSs9Vr76_KNwefuiUY-CFwAAAEk"]
[Sun Nov 30 02:37:10.529906 2025] [:error] [pid 29714:tid 29740] [client 213.21.239.4:53682] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/web/.svn/wc.db"] [unique_id "aSs9Vr76_KNwefuiUY-CGAAAAFg"]
[Sun Nov 30 02:37:10.530369 2025] [:error] [pid 42164:tid 42238] [client 213.21.239.4:53670] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wiki/.svn/wc.db"] [unique_id "aSs9Vtip8Nhatsq7KxztTAAAARA"]
[Sun Nov 30 02:37:10.530992 2025] [:error] [pid 29714:tid 29724] [client 213.21.239.4:53758] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/static/.svn/wc.db"] [unique_id "aSs9Vr76_KNwefuiUY-CGQAAAEg"]
[Sun Nov 30 02:37:10.531314 2025] [:error] [pid 33337:tid 33361] [client 213.21.239.4:53718] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/static../.svn/wc.db"] [unique_id "aSs9Vj7HzFQftKzaJgJ-VgAAAdQ"]
[Sun Nov 30 02:37:10.533412 2025] [:error] [pid 42164:tid 42225] [client 213.21.239.4:53768] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/store/.svn/wc.db"] [unique_id "aSs9Vtip8Nhatsq7KxztTQAAAQM"]
[Sun Nov 30 02:37:10.534396 2025] [:error] [pid 42164:tid 42227] [client 213.21.239.4:53720] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/uat/.svn/wc.db"] [unique_id "aSs9Vtip8Nhatsq7KxztTgAAAQU"]
[Sun Nov 30 02:37:10.536513 2025] [:error] [pid 33337:tid 33359] [client 213.21.239.4:53706] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/site/.svn/wc.db"] [unique_id "aSs9Vj7HzFQftKzaJgJ-VwAAAdI"]
[Sun Nov 30 02:37:10.539712 2025] [:error] [pid 29714:tid 29730] [client 213.21.239.4:53710] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/staging/.svn/wc.db"] [unique_id "aSs9Vr76_KNwefuiUY-CGgAAAE4"]
[Sun Nov 30 02:37:10.540417 2025] [:error] [pid 33337:tid 33351] [client 213.21.239.4:53744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/.svn/wc.db"] [unique_id "aSs9Vj7HzFQftKzaJgJ-WAAAAco"]
[Sun Nov 30 02:37:10.541069 2025] [:error] [pid 42164:tid 42246] [client 213.21.239.4:53762] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/.svn/wc.db"] [unique_id "aSs9Vtip8Nhatsq7KxztTwAAARg"]
[Sun Nov 30 02:37:10.543125 2025] [:error] [pid 42163:tid 42203] [client 213.21.239.4:53730] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/vendor/.svn/wc.db"] [unique_id "aSs9VpnaEs-eGc51wg2erwAAAMg"]
[Sun Nov 30 02:37:10.544968 2025] [:error] [pid 33337:tid 33352] [client 213.21.239.4:53782] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/.svn/wc.db"] [unique_id "aSs9Vj7HzFQftKzaJgJ-WQAAAcs"]
[Sun Nov 30 02:41:58.189778 2025] [:error] [pid 33376:tid 33381] [client 159.203.125.106:48102] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSs-dnpx_7viPEhKF36bVAAAAgI"]
[Sun Nov 30 02:42:00.705972 2025] [:error] [pid 42163:tid 42218] [client 159.203.125.106:53220] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSs-eJnaEs-eGc51wg2fbwAAANc"]
[Sun Nov 30 04:50:13.699302 2025] [:error] [pid 28588:tid 28596] [client 54.75.156.205:58386] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aStchSYl5J2n_isyWOlYgQAAAkY"]
[Sun Nov 30 04:50:13.699452 2025] [:error] [pid 60913:tid 60922] [client 54.75.156.205:58392] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aStchV4SUvyDn5e4S0JbYgAAAsc"]
[Sun Nov 30 04:50:13.700395 2025] [:error] [pid 24971:tid 24984] [client 54.75.156.205:58388] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aStchTUZcbcCmcDjhQ_IcQAAAMs"]
[Sun Nov 30 04:50:13.700879 2025] [:error] [pid 26121:tid 26125] [client 54.75.156.205:58390] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aStche3yAGZUIB-ACmA3HwAAAcI"]
[Sun Nov 30 04:50:14.371229 2025] [:error] [pid 54236:tid 54278] [client 54.75.156.205:58604] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aStchpLzwJzIgo8dntB8DQAAARc"]
[Sun Nov 30 04:50:14.546517 2025] [:error] [pid 60913:tid 60916] [client 54.75.156.205:58614] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aStchl4SUvyDn5e4S0JbZAAAAsE"]
[Sun Nov 30 04:50:14.547181 2025] [:error] [pid 54236:tid 54279] [client 54.75.156.205:58606] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aStchpLzwJzIgo8dntB8DgAAARg"]
[Sun Nov 30 04:50:14.548084 2025] [:error] [pid 28588:tid 28599] [client 54.75.156.205:58610] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aStchiYl5J2n_isyWOlYgwAAAkk"]
[Sun Nov 30 04:50:14.549258 2025] [:error] [pid 54236:tid 54277] [client 54.75.156.205:58616] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib/.env"] [unique_id "aStchpLzwJzIgo8dntB8DwAAARY"]
[Sun Nov 30 04:50:14.550379 2025] [:error] [pid 63468:tid 63487] [client 54.75.156.205:58608] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aStchqGdTyPw0PxgJetqMAAAABE"]
[Sun Nov 30 04:50:14.550416 2025] [:error] [pid 28588:tid 28601] [client 54.75.156.205:58602] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aStchiYl5J2n_isyWOlYhAAAAks"]
[Sun Nov 30 04:50:14.551173 2025] [:error] [pid 60913:tid 60920] [client 54.75.156.205:58600] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aStchl4SUvyDn5e4S0JbZQAAAsU"]
[Sun Nov 30 04:50:14.551217 2025] [:error] [pid 60369:tid 60374] [client 54.75.156.205:58618] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/vendor/.env"] [unique_id "aStchtR1zCWWHJK7KyEK-wAAAYM"]
[Sun Nov 30 04:50:14.552083 2025] [:error] [pid 60913:tid 60939] [client 54.75.156.205:58612] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aStchl4SUvyDn5e4S0JbZgAAAtg"]
[Sun Nov 30 04:50:14.687260 2025] [:error] [pid 28588:tid 28590] [client 54.75.156.205:58620] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lab/.env"] [unique_id "aStchiYl5J2n_isyWOlYhQAAAkA"]
[Sun Nov 30 04:50:15.034328 2025] [:error] [pid 24971:tid 24988] [client 54.75.156.205:58700] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aStchzUZcbcCmcDjhQ_IcgAAAM8"]
[Sun Nov 30 04:50:15.034966 2025] [:error] [pid 24971:tid 24975] [client 54.75.156.205:58696] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "aStchzUZcbcCmcDjhQ_IcwAAAMI"]
[Sun Nov 30 04:50:15.036142 2025] [:error] [pid 24971:tid 24994] [client 54.75.156.205:58698] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cron/.env"] [unique_id "aStchzUZcbcCmcDjhQ_IdAAAANU"]
[Sun Nov 30 04:50:15.469646 2025] [:error] [pid 26121:tid 26133] [client 54.75.156.205:58730] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/app/.env"] [unique_id "aStch-3yAGZUIB-ACmA3JgAAAco"]
[Sun Nov 30 04:50:15.470249 2025] [:error] [pid 26121:tid 26147] [client 54.75.156.205:58732] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/Datavase/.env"] [unique_id "aStch-3yAGZUIB-ACmA3JwAAAdg"]
[Sun Nov 30 04:50:15.470353 2025] [:error] [pid 54236:tid 54275] [client 54.75.156.205:58734] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/database/.env"] [unique_id "aStch5LzwJzIgo8dntB8FQAAARQ"]
[Sun Nov 30 04:50:17.352261 2025] [:error] [pid 60369:tid 60395] [client 54.75.156.205:58952] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aStcidR1zCWWHJK7KyELAgAAAZg"]
[Sun Nov 30 04:50:17.352256 2025] [:error] [pid 24971:tid 24977] [client 54.75.156.205:58954] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/assets/.env"] [unique_id "aStciTUZcbcCmcDjhQ_IegAAAMQ"]
[Sun Nov 30 04:50:17.524610 2025] [:error] [pid 60913:tid 60935] [client 54.75.156.205:59162] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aStciV4SUvyDn5e4S0JbawAAAtQ"]
[Sun Nov 30 04:50:18.450011 2025] [:error] [pid 54236:tid 54275] [client 54.75.156.205:60692] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/saas/.env"] [unique_id "aStcipLzwJzIgo8dntB8IQAAARQ"]
[Sun Nov 30 04:50:19.126257 2025] [:error] [pid 60572:tid 60579] [client 54.75.156.205:33850] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/exapi/.env"] [unique_id "aStci4Vcy1tAF6kmNWngXQAAAgU"]
[Sun Nov 30 04:50:19.614003 2025] [:error] [pid 25002:tid 25032] [client 54.75.156.205:34076] [client 54.75.156.205] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/site/.env"] [unique_id "aStci22Hykst8BxxTdJMjwAAAUA"]
[Sun Nov 30 05:17:19.911754 2025] [:error] [pid 60369:tid 60394] [client 159.203.125.106:35436] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSti39R1zCWWHJK7KyETSAAAAZc"]
[Sun Nov 30 05:17:21.741001 2025] [:error] [pid 60913:tid 60930] [client 159.203.125.106:57238] [client 159.203.125.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSti4V4SUvyDn5e4S0JpOQAAAs8"]
[Sun Nov 30 07:56:35.626498 2025] [:error] [pid 47328:tid 47340] [client 56.124.86.215:41194] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSuIM-EgW9nZATP4uDG5pQAAAMg"]
[Sun Nov 30 07:56:36.908937 2025] [:error] [pid 47388:tid 47404] [client 56.124.86.215:41210] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aSuINK4bdWdKxWfLl-ezBwAAAg0"]
[Sun Nov 30 07:56:38.191279 2025] [:error] [pid 39624:tid 39674] [client 56.124.86.215:51552] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "aSuINqGpxBXjm3k1gp8UnwAAAxQ"]
[Sun Nov 30 07:56:39.467938 2025] [:error] [pid 26121:tid 26139] [client 56.124.86.215:51554] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "aSuIN-3yAGZUIB-ACmBhxAAAAdA"]
[Sun Nov 30 07:56:40.743938 2025] [:error] [pid 39624:tid 39659] [client 56.124.86.215:51558] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aSuIOKGpxBXjm3k1gp8UowAAAwU"]
[Sun Nov 30 07:56:42.023179 2025] [:error] [pid 47389:tid 47430] [client 56.124.86.215:51570] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "aSuIOip04fPeCs_EYV4QqwAAA8w"]
[Sun Nov 30 07:56:43.299851 2025] [:error] [pid 47234:tid 47247] [client 56.124.86.215:51584] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.example"] [unique_id "aSuIO8h05B0pfOg1lf2t4wAAAEI"]
[Sun Nov 30 07:56:56.153371 2025] [:error] [pid 47329:tid 47364] [client 56.124.86.215:52078] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dbservices.com.au"] [uri "/config.ini"] [unique_id "aSuISEpC2UanbyXmBqaXVAAAAYU"]
[Sun Nov 30 07:56:57.439371 2025] [:error] [pid 47388:tid 47412] [client 56.124.86.215:52084] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 30 07:56:59.997286 2025] [:error] [pid 47388:tid 47410] [client 56.124.86.215:35892] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/settings"] [unique_id "aSuIS64bdWdKxWfLl-ezGAAAAhM"]
[Sun Nov 30 07:57:01.278112 2025] [:error] [pid 47328:tid 47336] [client 56.124.86.215:35900] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/settings.json"] [unique_id "aSuITeEgW9nZATP4uDG5vAAAAMQ"]
[Sun Nov 30 07:57:02.559658 2025] [:error] [pid 47389:tid 47427] [client 56.124.86.215:35902] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app.config.js"] [unique_id "aSuITip04fPeCs_EYV4QtQAAA8k"]
[Sun Nov 30 07:57:03.836012 2025] [:error] [pid 47234:tid 47245] [client 56.124.86.215:35906] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aSuIT8h05B0pfOg1lf2t7gAAAEA"]
[Sun Nov 30 07:57:05.116637 2025] [:error] [pid 47389:tid 47419] [client 56.124.86.215:35908] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aSuIUSp04fPeCs_EYV4QugAAA8E"]
[Sun Nov 30 07:57:06.424640 2025] [:error] [pid 38508:tid 38536] [client 56.124.86.215:35922] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aSuIUv9ik0lOnKrNBoyCWgAAApI"]
[Sun Nov 30 07:57:07.705621 2025] [:error] [pid 54236:tid 54271] [client 56.124.86.215:35938] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/test.php"] [unique_id "aSuIU5LzwJzIgo8dntCnSgAAARA"]
[Sun Nov 30 07:57:08.987451 2025] [:error] [pid 38508:tid 38525] [client 56.124.86.215:37402] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin"] [unique_id "aSuIVP9ik0lOnKrNBoyCXAAAAoc"]
[Sun Nov 30 07:57:10.271935 2025] [:error] [pid 26121:tid 26135] [client 56.124.86.215:37404] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aSuIVu3yAGZUIB-ACmBh4gAAAcw"]
[Sun Nov 30 07:57:11.547640 2025] [:error] [pid 47389:tid 47432] [client 56.124.86.215:37420] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aSuIVyp04fPeCs_EYV4QwAAAA84"]
[Sun Nov 30 07:57:12.866950 2025] [:error] [pid 47389:tid 47419] [client 56.124.86.215:37422] [client 56.124.86.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/composer.json"] [unique_id "aSuIWCp04fPeCs_EYV4QwQAAA8E"]
[Sun Nov 30 07:57:15.385423 2025] [:error] [pid 39624:tid 39673] [client 56.124.86.215:37432] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.aws/config"] [unique_id "aSuIW6GpxBXjm3k1gp8UtwAAAxM"]
[Sun Nov 30 07:57:16.867635 2025] [:error] [pid 39624:tid 39663] [client 56.124.86.215:37444] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aSuIXKGpxBXjm3k1gp8UvQAAAwk"]
[Sun Nov 30 07:57:19.312783 2025] [:error] [pid 42679:tid 42730] [client 56.124.86.215:40444] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws/config"] [unique_id "aSuIXxye9VvkL-lF3kFdoAAAAlY"]
[Sun Nov 30 07:57:21.847748 2025] [:error] [pid 47329:tid 47373] [client 56.124.86.215:40452] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws/credentials"] [unique_id "aSuIYUpC2UanbyXmBqaXYgAAAY4"]
[Sun Nov 30 07:57:23.330764 2025] [:error] [pid 47329:tid 47382] [client 56.124.86.215:40458] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws.json"] [unique_id "aSuIY0pC2UanbyXmBqaXZwAAAZc"]
[Sun Nov 30 07:57:25.762615 2025] [:error] [pid 26121:tid 26139] [client 56.124.86.215:40472] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/credentials"] [unique_id "aSuIZe3yAGZUIB-ACmBh9QAAAdA"]
[Sun Nov 30 07:57:27.245627 2025] [:error] [pid 54236:tid 54279] [client 56.124.86.215:40488] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/secrets.json"] [unique_id "aSuIZ5LzwJzIgo8dntCnWwAAARg"]
[Sun Nov 30 07:57:28.731846 2025] [:error] [pid 47388:tid 47407] [client 56.124.86.215:51250] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/keys.js"] [unique_id "aSuIaK4bdWdKxWfLl-ezJAAAAhA"]
[Sun Nov 30 07:57:30.218608 2025] [:error] [pid 26121:tid 26142] [client 56.124.86.215:51254] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws-keys.js"] [unique_id "aSuIau3yAGZUIB-ACmBh_QAAAdM"]
[Sun Nov 30 07:57:31.714253 2025] [:error] [pid 47234:tid 47245] [client 56.124.86.215:51262] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun"] [unique_id "aSuIa8h05B0pfOg1lf2t-wAAAEA"]
[Sun Nov 30 07:57:34.265182 2025] [:error] [pid 38508:tid 38539] [client 56.124.86.215:51278] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun.json"] [unique_id "aSuIbv9ik0lOnKrNBoyCiAAAApU"]
[Sun Nov 30 07:57:37.823429 2025] [:error] [pid 47328:tid 47356] [client 56.124.86.215:51282] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun/config"] [unique_id "aSuIceEgW9nZATP4uDG53QAAANg"]
[Sun Nov 30 07:57:39.307281 2025] [:error] [pid 47329:tid 47367] [client 56.124.86.215:34572] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun.php"] [unique_id "aSuIc0pC2UanbyXmBqaXeQAAAYg"]
[Sun Nov 30 07:57:40.800391 2025] [:error] [pid 54236:tid 54260] [client 56.124.86.215:34588] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid"] [unique_id "aSuIdJLzwJzIgo8dntCnbAAAAQU"]
[Sun Nov 30 07:57:42.285422 2025] [:error] [pid 26121:tid 26135] [client 56.124.86.215:34602] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.json"] [unique_id "aSuIdu3yAGZUIB-ACmBimwAAAcw"]
[Sun Nov 30 07:57:43.765791 2025] [:error] [pid 39624:tid 39670] [client 56.124.86.215:34610] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid/config"] [unique_id "aSuId6GpxBXjm3k1gp8UywAAAxA"]
[Sun Nov 30 07:57:45.264266 2025] [:error] [pid 47328:tid 47354] [client 56.124.86.215:34620] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.php"] [unique_id "aSuIeeEgW9nZATP4uDG55QAAANY"]
[Sun Nov 30 07:57:46.765044 2025] [:error] [pid 26121:tid 26137] [client 56.124.86.215:34636] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.env"] [unique_id "aSuIeu3yAGZUIB-ACmBiogAAAc4"]
[Sun Nov 30 07:57:48.249439 2025] [:error] [pid 47388:tid 47402] [client 56.124.86.215:42754] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo"] [unique_id "aSuIfK4bdWdKxWfLl-ezMwAAAgs"]
[Sun Nov 30 07:57:49.728466 2025] [:error] [pid 47329:tid 47380] [client 56.124.86.215:42762] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo.json"] [unique_id "aSuIfUpC2UanbyXmBqaXhQAAAZU"]
[Sun Nov 30 07:57:51.206349 2025] [:error] [pid 39624:tid 39655] [client 56.124.86.215:42764] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo/config"] [unique_id "aSuIf6GpxBXjm3k1gp8U0gAAAwE"]
[Sun Nov 30 07:57:53.631964 2025] [:error] [pid 54236:tid 54274] [client 56.124.86.215:42774] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo.php"] [unique_id "aSuIgZLzwJzIgo8dntCnewAAARM"]
[Sun Nov 30 07:57:55.115468 2025] [:error] [pid 47328:tid 47339] [client 56.124.86.215:42782] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/php"] [unique_id "aSuIg-EgW9nZATP4uDG56QAAAMc"]
[Sun Nov 30 07:57:56.597633 2025] [:error] [pid 47329:tid 47374] [client 56.124.86.215:42794] [client 56.124.86.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info"] [unique_id "aSuIhEpC2UanbyXmBqaXjQAAAY8"]
[Sun Nov 30 09:14:06.376830 2025] [:error] [pid 47388:tid 47415] [client 203.215.174.143:21725] [client 203.215.174.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.215.174.143, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aSuaXq4bdWdKxWfLl-e__gAAAhg"]
[Sun Nov 30 09:14:06.381862 2025] [:error] [pid 47388:tid 47415] [client 203.215.174.143:21725] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 30 10:01:38.692530 2025] [:error] [pid 9694:tid 9701] [client 54.77.43.116:51352] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aSulgsNOaRChkzIC_nUiCgAAAMU"]
[Sun Nov 30 10:01:39.759163 2025] [:error] [pid 12793:tid 12811] [client 54.77.43.116:51356] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aSulg8sEgQeCVydJZ0jWcAAAAFA"]
[Sun Nov 30 10:01:40.828800 2025] [:error] [pid 10608:tid 10648] [client 54.77.43.116:51366] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "aSulhOG4qpknNxmxP5cjSwAAA8s"]
[Sun Nov 30 10:01:41.895201 2025] [:error] [pid 58704:tid 58717] [client 54.77.43.116:51368] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "aSulhVgCdnbXMzbONnOZ2QAAA4o"]
[Sun Nov 30 10:01:42.966819 2025] [:error] [pid 10550:tid 10593] [client 54.77.43.116:51382] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aSulhul_8Vq2nipf7mHn0QAAAo4"]
[Sun Nov 30 10:01:44.033388 2025] [:error] [pid 9374:tid 9385] [client 54.77.43.116:51390] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "aSuliIEwr5jt_cokVdwFdwAAAwg"]
[Sun Nov 30 10:01:45.101406 2025] [:error] [pid 58704:tid 58719] [client 54.77.43.116:51404] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.example"] [unique_id "aSuliVgCdnbXMzbONnOZ2gAAA4w"]
[Sun Nov 30 10:01:55.833726 2025] [:error] [pid 9375:tid 9407] [client 54.77.43.116:55120] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dbservices.com.au"] [uri "/config.ini"] [unique_id "aSulk9-EkWIUe87KIjORGgAAA0M"]
[Sun Nov 30 10:01:56.904696 2025] [:error] [pid 12793:tid 12797] [client 54.77.43.116:55122] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Nov 30 10:01:59.046411 2025] [:error] [pid 9374:tid 9392] [client 54.77.43.116:52676] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/settings"] [unique_id "aSull4Ewr5jt_cokVdwFhwAAAw8"]
[Sun Nov 30 10:02:00.114179 2025] [:error] [pid 10518:tid 10542] [client 54.77.43.116:52690] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/settings.json"] [unique_id "aSulmA8XjrhaEDJ0Rd9dmQAAAVU"]
[Sun Nov 30 10:02:01.180059 2025] [:error] [pid 10608:tid 10646] [client 54.77.43.116:52692] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app.config.js"] [unique_id "aSulmeG4qpknNxmxP5cjVwAAA8k"]
[Sun Nov 30 10:02:02.247451 2025] [:error] [pid 10607:tid 10628] [client 54.77.43.116:52704] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aSulmnMxNFmf1l9xA_FInQAAAtI"]
[Sun Nov 30 10:02:03.315054 2025] [:error] [pid 9374:tid 9393] [client 54.77.43.116:52716] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aSulm4Ewr5jt_cokVdwFigAAAxA"]
[Sun Nov 30 10:02:04.382913 2025] [:error] [pid 9375:tid 9414] [client 54.77.43.116:52728] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aSulnN-EkWIUe87KIjORJQAAA0o"]
[Sun Nov 30 10:02:05.450097 2025] [:error] [pid 10608:tid 10655] [client 54.77.43.116:52740] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/test.php"] [unique_id "aSulneG4qpknNxmxP5cjWwAAA9I"]
[Sun Nov 30 10:02:06.516986 2025] [:error] [pid 10550:tid 10592] [client 54.77.43.116:52748] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin"] [unique_id "aSulnul_8Vq2nipf7mHn2QAAAo0"]
[Sun Nov 30 10:02:07.583940 2025] [:error] [pid 12554:tid 12564] [client 54.77.43.116:52762] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aSulnz7q_kXd01TaAD8UFAAAAAg"]
[Sun Nov 30 10:02:08.649874 2025] [:error] [pid 12793:tid 12809] [client 54.77.43.116:37448] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aSuloMsEgQeCVydJZ0jWkgAAAE4"]
[Sun Nov 30 10:02:09.718660 2025] [:error] [pid 10607:tid 10634] [client 54.77.43.116:37450] [client 54.77.43.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/composer.json"] [unique_id "aSuloXMxNFmf1l9xA_FIpQAAAtg"]
[Sun Nov 30 10:02:10.785882 2025] [:error] [pid 12793:tid 12801] [client 54.77.43.116:37454] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.aws/config"] [unique_id "aSulossEgQeCVydJZ0jWlgAAAEY"]
[Sun Nov 30 10:02:11.853491 2025] [:error] [pid 9694:tid 9706] [client 54.77.43.116:37468] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aSulo8NOaRChkzIC_nUiFwAAAMo"]
[Sun Nov 30 10:02:12.920806 2025] [:error] [pid 12793:tid 12795] [client 54.77.43.116:37478] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws/config"] [unique_id "aSulpMsEgQeCVydJZ0jWlwAAAEA"]
[Sun Nov 30 10:02:13.990505 2025] [:error] [pid 10550:tid 10583] [client 54.77.43.116:37494] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws/credentials"] [unique_id "aSulpel_8Vq2nipf7mHn3QAAAoQ"]
[Sun Nov 30 10:02:15.057767 2025] [:error] [pid 9375:tid 9427] [client 54.77.43.116:37500] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws.json"] [unique_id "aSulp9-EkWIUe87KIjORMQAAA1c"]
[Sun Nov 30 10:02:16.126109 2025] [:error] [pid 12793:tid 12808] [client 54.77.43.116:37504] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/credentials"] [unique_id "aSulqMsEgQeCVydJZ0jWngAAAE0"]
[Sun Nov 30 10:02:17.192501 2025] [:error] [pid 9374:tid 9388] [client 54.77.43.116:37516] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/secrets.json"] [unique_id "aSulqYEwr5jt_cokVdwFlQAAAws"]
[Sun Nov 30 10:02:18.259853 2025] [:error] [pid 9694:tid 9713] [client 54.77.43.116:56654] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/keys.js"] [unique_id "aSulqsNOaRChkzIC_nUiGgAAANE"]
[Sun Nov 30 10:02:19.329372 2025] [:error] [pid 12554:tid 12562] [client 54.77.43.116:56662] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aws-keys.js"] [unique_id "aSulqz7q_kXd01TaAD8UHAAAAAY"]
[Sun Nov 30 10:02:20.397110 2025] [:error] [pid 10607:tid 10610] [client 54.77.43.116:56672] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun"] [unique_id "aSulrHMxNFmf1l9xA_FIpgAAAsA"]
[Sun Nov 30 10:02:21.464505 2025] [:error] [pid 58704:tid 58724] [client 54.77.43.116:56682] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun.json"] [unique_id "aSulrVgCdnbXMzbONnOZ8wAAA5E"]
[Sun Nov 30 10:02:22.531873 2025] [:error] [pid 10518:tid 10526] [client 54.77.43.116:56694] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun/config"] [unique_id "aSulrg8XjrhaEDJ0Rd9drwAAAUU"]
[Sun Nov 30 10:02:23.599232 2025] [:error] [pid 12793:tid 12808] [client 54.77.43.116:56700] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mailgun.php"] [unique_id "aSulr8sEgQeCVydJZ0jWpAAAAE0"]
[Sun Nov 30 10:02:24.665618 2025] [:error] [pid 10607:tid 10634] [client 54.77.43.116:56710] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid"] [unique_id "aSulsHMxNFmf1l9xA_FIrwAAAtg"]
[Sun Nov 30 10:02:25.731439 2025] [:error] [pid 9374:tid 9383] [client 54.77.43.116:56720] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.json"] [unique_id "aSulsYEwr5jt_cokVdwFoQAAAwY"]
[Sun Nov 30 10:02:26.800612 2025] [:error] [pid 9694:tid 9711] [client 54.77.43.116:56732] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid/config"] [unique_id "aSulssNOaRChkzIC_nUiIAAAAM8"]
[Sun Nov 30 10:02:27.868939 2025] [:error] [pid 10608:tid 10642] [client 54.77.43.116:50540] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.php"] [unique_id "aSuls-G4qpknNxmxP5cjdwAAA8U"]
[Sun Nov 30 10:02:28.937302 2025] [:error] [pid 10608:tid 10649] [client 54.77.43.116:50548] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendgrid.env"] [unique_id "aSultOG4qpknNxmxP5cjegAAA8w"]
[Sun Nov 30 10:02:30.008482 2025] [:error] [pid 12793:tid 12801] [client 54.77.43.116:50558] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo"] [unique_id "aSultssEgQeCVydJZ0jWqAAAAEY"]
[Sun Nov 30 10:02:31.075805 2025] [:error] [pid 10608:tid 10651] [client 54.77.43.116:50566] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo.json"] [unique_id "aSult-G4qpknNxmxP5cjfAAAA84"]
[Sun Nov 30 10:02:32.143246 2025] [:error] [pid 10608:tid 10640] [client 54.77.43.116:50580] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo/config"] [unique_id "aSuluOG4qpknNxmxP5cjfQAAA8M"]
[Sun Nov 30 10:02:33.213662 2025] [:error] [pid 58704:tid 58714] [client 54.77.43.116:50584] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/brevo.php"] [unique_id "aSuluVgCdnbXMzbONnOZ-gAAA4c"]
[Sun Nov 30 10:02:34.280705 2025] [:error] [pid 12554:tid 12568] [client 54.77.43.116:50588] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/php"] [unique_id "aSuluj7q_kXd01TaAD8UIwAAAAw"]
[Sun Nov 30 10:02:35.348785 2025] [:error] [pid 10518:tid 10535] [client 54.77.43.116:50600] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info"] [unique_id "aSuluw8XjrhaEDJ0Rd9dtwAAAU4"]
[Sun Nov 30 10:02:36.415592 2025] [:error] [pid 12793:tid 12804] [client 54.77.43.116:50610] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo"] [unique_id "aSulvMsEgQeCVydJZ0jWrQAAAEk"]
[Sun Nov 30 10:02:37.483751 2025] [:error] [pid 10607:tid 10622] [client 54.77.43.116:50626] [client 54.77.43.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSulvXMxNFmf1l9xA_FItgAAAsw"]
[Sun Nov 30 10:35:48.047980 2025] [:error] [pid 12554:tid 12558] [client 125.75.66.97:56539] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSuthD7q_kXd01TaAD8bHwAAAAI"]
[Sun Nov 30 12:31:31.820146 2025] [:error] [pid 58704:tid 58716] [client 147.182.157.193:59905] [client 147.182.157.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 147.182.157.193, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSvIo1gCdnbXMzbONnO_MQAAA4k"]
[Sun Nov 30 12:31:31.823682 2025] [:error] [pid 58704:tid 58716] [client 147.182.157.193:59905] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 30 16:14:40.359987 2025] [:error] [pid 58704:tid 58718] [client 165.227.185.158:60000] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSv88FgCdnbXMzbONnMFFwAAA4s"]
[Sun Nov 30 16:14:41.741179 2025] [:error] [pid 9375:tid 9412] [client 165.227.185.158:34500] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSv88d-EkWIUe87KIjPlxgAAA0g"]
[Sun Nov 30 18:30:38.419799 2025] [:error] [pid 9375:tid 9416] [client 43.165.189.206:41150] [client 43.165.189.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSwczt-EkWIUe87KIjMGmAAAA0w"]
[Sun Nov 30 19:03:55.977098 2025] [:error] [pid 10550:tid 10586] [client 104.131.167.164:64061] [client 104.131.167.164] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.131.167.164, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aSwkm-l_8Vq2nipf7mFPkAAAAoc"]
[Sun Nov 30 19:03:55.980975 2025] [:error] [pid 10550:tid 10586] [client 104.131.167.164:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Nov 30 20:09:22.956521 2025] [:error] [pid 58704:tid 58711] [client 165.227.185.158:34328] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSwz8lgCdnbXMzbONnNYLgAAA4Q"]
[Sun Nov 30 20:09:25.872912 2025] [:error] [pid 9375:tid 9412] [client 165.227.185.158:41740] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aSwz9d-EkWIUe87KIjMbeQAAA0g"]
[Sun Nov 30 23:04:23.790137 2025] [:error] [pid 9375:tid 9418] [client 43.153.192.98:58258] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aSxc99-EkWIUe87KIjNAhAAAA04"]
[Sun Nov 30 23:52:16.497365 2025] [:error] [pid 10518:tid 10541] [client 113.141.91.58:42425] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSxoMA8XjrhaEDJ0Rd_sagAAAVQ"]
[Mon Dec 01 02:38:54.941236 2025] [:error] [pid 32521:tid 32556] [client 103.65.237.153:61008] [client 103.65.237.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aSyPPj-OXioBrWvHoPreuQAAAwQ"]
[Mon Dec 01 08:59:05.172368 2025] [:error] [pid 39036:tid 39053] [client 103.253.147.66:33214] [client 103.253.147.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aSzoWf95AnpDM0hJ8rcjtQAAAI8"]
[Mon Dec 01 09:55:03.607079 2025] [:error] [pid 50172:tid 50183] [client 43.153.19.83:51244] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aSz1d2A_oUkA7PwzMCe6jgAAAEY"]
[Mon Dec 01 10:57:40.654142 2025] [:error] [pid 50143:tid 50164] [client 165.227.185.158:33786] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS0EJA4ii19UTfa9gmYYnAAAABM"]
[Mon Dec 01 10:57:45.481009 2025] [:error] [pid 7182:tid 7206] [client 165.227.185.158:57070] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS0EKX9TcBzcTIZoEPhN2QAAANU"]
[Mon Dec 01 12:22:21.614769 2025] [:error] [pid 60651:tid 60672] [client 106.227.49.113:46673] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aS0X_WFx-k5xX1VD6QL_GQAAAJI"]
[Mon Dec 01 12:48:57.761472 2025] [:error] [pid 7182:tid 7200] [client 165.227.185.158:46840] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS0eOX9TcBzcTIZoEPhroAAAAM8"]
[Mon Dec 01 12:49:03.662306 2025] [:error] [pid 7182:tid 7195] [client 165.227.185.158:42094] [client 165.227.185.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS0eP39TcBzcTIZoEPhrogAAAMo"]
[Mon Dec 01 15:48:40.638053 2025] [:error] [pid 53361:tid 53433] [client 108.143.65.196:50289] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Mon Dec 01 15:48:53.906930 2025] [:error] [pid 56592:tid 56610] [client 108.143.65.196:65349] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Mon Dec 01 15:49:07.434842 2025] [:error] [pid 56592:tid 56615] [client 108.143.65.196:60990] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Mon Dec 01 15:49:20.982975 2025] [:error] [pid 53359:tid 53370] [client 108.143.65.196:57298] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Mon Dec 01 20:03:32.544803 2025] [:error] [pid 3307:tid 3332] [client 43.153.73.200:58330] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aS2EFEhV_0w1hrv72n4BHAAAARc"]
[Mon Dec 01 23:09:30.170267 2025] [:error] [pid 11435:tid 11469] [client 34.23.212.136:57562] [client 34.23.212.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.23.212.136, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aS2vqpIO1XHiDMLlnSvJQwAAAAQ"]
[Mon Dec 01 23:09:30.174278 2025] [:error] [pid 11435:tid 11469] [client 34.23.212.136:57562] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 01 23:09:32.564638 2025] [:error] [pid 11435:tid 11481] [client 34.23.212.136:57562] [client 34.23.212.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aS2vrJIO1XHiDMLlnSvJTwAAABA"]
[Mon Dec 01 23:09:32.982229 2025] [:error] [pid 11434:tid 11447] [client 34.23.212.136:52423] [client 34.23.212.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aS2vrEyMU4X3kjx8Assd0wAAAMk"]
[Mon Dec 01 23:09:33.404141 2025] [:error] [pid 11434:tid 11450] [client 34.23.212.136:49663] [client 34.23.212.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aS2vrUyMU4X3kjx8Assd1AAAAMw"]
[Mon Dec 01 23:09:33.856999 2025] [:error] [pid 11436:tid 11501] [client 34.23.212.136:55391] [client 34.23.212.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aS2vrfBKgw9o1rvGyKWTEgAAAEk"]
[Mon Dec 01 23:09:34.296356 2025] [:error] [pid 11524:tid 11529] [client 34.23.212.136:56801] [client 34.23.212.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aS2vrleLUnPqcqCYYIGfnAAAAII"]
[Mon Dec 01 23:09:34.714843 2025] [:error] [pid 11524:tid 11545] [client 34.23.212.136:52114] [client 34.23.212.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aS2vrleLUnPqcqCYYIGfnQAAAJI"]
[Mon Dec 01 23:09:35.142831 2025] [:error] [pid 11435:tid 11465] [client 34.23.212.136:59776] [client 34.23.212.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aS2vr5IO1XHiDMLlnSvJVgAAAAA"]
[Tue Dec 02 02:20:38.573880 2025] [:error] [pid 46739:tid 46744] [client 103.65.236.149:65300] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aS3cdu25pk0qWmq5PmCGMQAAAAM"]
[Tue Dec 02 03:09:42.959622 2025] [:error] [pid 18826:tid 18843] [client 34.83.19.77:65153] [client 34.83.19.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.19.77, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aS3n9s44B8ytyS-T2IjKBwAAAI8"]
[Tue Dec 02 03:09:42.963379 2025] [:error] [pid 18826:tid 18843] [client 34.83.19.77:65153] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 02 03:09:45.037478 2025] [:error] [pid 18826:tid 18831] [client 34.83.19.77:65153] [client 34.83.19.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aS3n-c44B8ytyS-T2IjKEwAAAIM"]
[Tue Dec 02 03:09:45.394693 2025] [:error] [pid 56397:tid 56408] [client 34.83.19.77:59292] [client 34.83.19.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aS3n-cGKI2_WNDIMokJFzgAAAMk"]
[Tue Dec 02 03:09:45.753952 2025] [:error] [pid 46739:tid 46756] [client 34.83.19.77:57866] [client 34.83.19.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aS3n-e25pk0qWmq5PmCSjAAAAA4"]
[Tue Dec 02 03:09:46.194405 2025] [:error] [pid 56397:tid 56423] [client 34.83.19.77:64758] [client 34.83.19.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aS3n-sGKI2_WNDIMokJF0AAAANg"]
[Tue Dec 02 03:09:46.548234 2025] [:error] [pid 46739:tid 46743] [client 34.83.19.77:64160] [client 34.83.19.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aS3n-u25pk0qWmq5PmCSjgAAAAI"]
[Tue Dec 02 03:09:46.924821 2025] [:error] [pid 46739:tid 46752] [client 34.83.19.77:64249] [client 34.83.19.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aS3n-u25pk0qWmq5PmCSjwAAAAo"]
[Tue Dec 02 03:09:47.279412 2025] [:error] [pid 25307:tid 25333] [client 34.83.19.77:61722] [client 34.83.19.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aS3n-3J-V-CI00LOhTPhVwAAAVg"]
[Tue Dec 02 08:10:38.840402 2025] [:error] [pid 5273:tid 5321] [client 113.141.91.58:50755] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aS4ufiMmXO5H1kNwHHWLSQAAAZM"]
[Tue Dec 02 10:05:24.156653 2025] [:error] [pid 5232:tid 5234] [client 43.135.133.194:54660] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aS5JZAApmO-auDy1ob5RcQAAAQA"]
[Tue Dec 02 12:06:52.056567 2025] [:error] [pid 3649:tid 3727] [client 170.64.167.169:45774] [client 170.64.167.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS5l3LwjL4uqC6YFjxEAWQAAAJA"]
[Tue Dec 02 12:06:52.181453 2025] [:error] [pid 3649:tid 3721] [client 170.64.167.169:36456] [client 170.64.167.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS5l3LwjL4uqC6YFjxEAWgAAAIo"]
[Tue Dec 02 14:27:42.022883 2025] [:error] [pid 3760:tid 3763] [client 182.42.110.255:44830] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aS6G3ljLYEjdWVcKgVUcrgAAAME"]
[Tue Dec 02 16:17:31.218822 2025] [:error] [pid 3647:tid 3656] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Tue Dec 02 16:17:31.380563 2025] [:error] [pid 3647:tid 3671] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Dec 02 16:17:31.543448 2025] [:error] [pid 3647:tid 3658] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Tue Dec 02 16:17:31.868594 2025] [:error] [pid 3647:tid 3657] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Tue Dec 02 16:17:32.031413 2025] [:error] [pid 3647:tid 3655] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/info1.php
[Tue Dec 02 16:17:32.193570 2025] [:error] [pid 3647:tid 3660] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/info2.php
[Tue Dec 02 16:17:32.355785 2025] [:error] [pid 3647:tid 3670] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/info3.php
[Tue Dec 02 16:17:32.518199 2025] [:error] [pid 3647:tid 3674] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Tue Dec 02 16:17:32.681654 2025] [:error] [pid 3647:tid 3669] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Tue Dec 02 16:17:32.846106 2025] [:error] [pid 3647:tid 3653] [client 3.110.84.181:32942] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Tue Dec 02 16:17:33.005036 2025] [:error] [pid 3647:tid 3677] [client 3.110.84.181:32942] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aS6gnVJaqGDFgh_0XI9m1AAAABg"]
[Tue Dec 02 16:17:33.633128 2025] [:error] [pid 5273:tid 5310] [client 3.110.84.181:32946] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_version.php"] [unique_id "aS6gnSMmXO5H1kNwHHUFwAAAAYg"]
[Tue Dec 02 16:17:34.270565 2025] [:error] [pid 3760:tid 3773] [client 3.110.84.181:32956] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/serverinfo.php"] [unique_id "aS6gnljLYEjdWVcKgVU5MAAAAMs"]
[Tue Dec 02 16:17:34.905932 2025] [:error] [pid 5272:tid 5275] [client 3.110.84.181:32958] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.php"] [unique_id "aS6gnuwbFoRzPGfZYVQvrwAAAUA"]
[Tue Dec 02 16:17:35.538437 2025] [:error] [pid 48650:tid 48665] [client 3.110.84.181:32960] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aS6gn4QuWSn3xrJsXbk2mAAAAco"]
[Tue Dec 02 16:17:36.166119 2025] [:error] [pid 3647:tid 3668] [client 3.110.84.181:32972] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diagnostic.php"] [unique_id "aS6goFJaqGDFgh_0XI9m1gAAAA8"]
[Tue Dec 02 16:17:36.795251 2025] [:error] [pid 5273:tid 5312] [client 3.110.84.181:32988] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phptest.php"] [unique_id "aS6goCMmXO5H1kNwHHUFxAAAAYo"]
[Tue Dec 02 16:17:37.434652 2025] [:error] [pid 3648:tid 3703] [client 3.110.84.181:32996] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aS6goeQEp5icp6XOJr2h2gAAAFM"]
[Tue Dec 02 16:17:38.064207 2025] [:error] [pid 3647:tid 3664] [client 3.110.84.181:33004] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/probe.php"] [unique_id "aS6golJaqGDFgh_0XI9m2gAAAAs"]
[Tue Dec 02 16:17:38.688458 2025] [:error] [pid 3648:tid 3702] [client 3.110.84.181:51938] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aS6gouQEp5icp6XOJr2h3wAAAFI"]
[Tue Dec 02 16:17:39.325473 2025] [:error] [pid 5232:tid 5243] [client 3.110.84.181:51940] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aS6gowApmO-auDy1ob6-xAAAAQk"]
[Tue Dec 02 16:17:39.950252 2025] [:error] [pid 5273:tid 5321] [client 3.110.84.181:51946] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aS6goyMmXO5H1kNwHHUFxwAAAZM"]
[Tue Dec 02 16:17:40.579486 2025] [:error] [pid 3648:tid 3690] [client 3.110.84.181:51952] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aS6gpOQEp5icp6XOJr2h5QAAAEY"]
[Tue Dec 02 16:17:41.211233 2025] [:error] [pid 48650:tid 48657] [client 3.110.84.181:51962] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aS6gpYQuWSn3xrJsXbk2nQAAAcI"]
[Tue Dec 02 16:17:41.843690 2025] [:error] [pid 3647:tid 3658] [client 3.110.84.181:51966] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aS6gpVJaqGDFgh_0XI9m3gAAAAU"]
[Tue Dec 02 16:17:42.472069 2025] [:error] [pid 3647:tid 3670] [client 3.110.84.181:51982] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info_php.php"] [unique_id "aS6gplJaqGDFgh_0XI9m4QAAABE"]
[Tue Dec 02 16:17:43.100868 2025] [:error] [pid 3649:tid 3715] [client 3.110.84.181:51998] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php-info.php"] [unique_id "aS6gp7wjL4uqC6YFjxFczQAAAIQ"]
[Tue Dec 02 16:17:43.726837 2025] [:error] [pid 3647:tid 3669] [client 3.110.84.181:52014] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infophp.php"] [unique_id "aS6gp1JaqGDFgh_0XI9m5AAAABA"]
[Tue Dec 02 16:17:44.362456 2025] [:error] [pid 3647:tid 3677] [client 3.110.84.181:52018] [client 3.110.84.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testphp.php"] [unique_id "aS6gqFJaqGDFgh_0XI9m5gAAABg"]
[Tue Dec 02 16:17:44.995596 2025] [:error] [pid 3648:tid 3703] [client 3.110.84.181:52022] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS6gqOQEp5icp6XOJr2h6AAAAFM"]
[Tue Dec 02 16:17:45.622653 2025] [:error] [pid 3647:tid 3673] [client 3.110.84.181:52024] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aS6gqVJaqGDFgh_0XI9m5wAAABQ"]
[Tue Dec 02 16:17:46.246115 2025] [:error] [pid 3647:tid 3664] [client 3.110.84.181:52030] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aS6gqlJaqGDFgh_0XI9m6gAAAAs"]
[Tue Dec 02 16:17:46.877167 2025] [:error] [pid 5232:tid 5234] [client 3.110.84.181:52032] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aS6gqgApmO-auDy1ob6-0AAAAQA"]
[Tue Dec 02 16:17:47.507745 2025] [:error] [pid 5232:tid 5246] [client 3.110.84.181:52040] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aS6gqwApmO-auDy1ob6-1QAAAQw"]
[Tue Dec 02 16:17:48.140905 2025] [:error] [pid 3649:tid 3730] [client 3.110.84.181:52056] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aS6grLwjL4uqC6YFjxFc1AAAAJM"]
[Tue Dec 02 16:17:48.763018 2025] [:error] [pid 3647:tid 3659] [client 3.110.84.181:45040] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aS6grFJaqGDFgh_0XI9m7QAAAAY"]
[Tue Dec 02 16:17:49.387250 2025] [:error] [pid 5273:tid 5311] [client 3.110.84.181:45052] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aS6grSMmXO5H1kNwHHUFzgAAAYk"]
[Tue Dec 02 16:17:50.024560 2025] [:error] [pid 5273:tid 5316] [client 3.110.84.181:45058] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aS6griMmXO5H1kNwHHUF0AAAAY4"]
[Tue Dec 02 16:17:50.653220 2025] [:error] [pid 3648:tid 3707] [client 3.110.84.181:45060] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aS6gruQEp5icp6XOJr2h7AAAAFc"]
[Tue Dec 02 16:17:51.291819 2025] [:error] [pid 5273:tid 5313] [client 3.110.84.181:45072] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aS6gryMmXO5H1kNwHHUF0gAAAYs"]
[Tue Dec 02 16:17:51.922394 2025] [:error] [pid 5273:tid 5314] [client 3.110.84.181:45076] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aS6gryMmXO5H1kNwHHUF1gAAAYw"]
[Tue Dec 02 16:17:52.546311 2025] [:error] [pid 3648:tid 3695] [client 3.110.84.181:45078] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aS6gsOQEp5icp6XOJr2h7wAAAEs"]
[Tue Dec 02 16:17:53.171146 2025] [:error] [pid 5232:tid 5252] [client 3.110.84.181:45094] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.1"] [unique_id "aS6gsQApmO-auDy1ob6-3wAAARI"]
[Tue Dec 02 16:17:53.794484 2025] [:error] [pid 3760:tid 3767] [client 3.110.84.181:45098] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.2"] [unique_id "aS6gsVjLYEjdWVcKgVU5OQAAAMU"]
[Tue Dec 02 16:17:54.427741 2025] [:error] [pid 48650:tid 48655] [client 3.110.84.181:45104] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod.local"] [unique_id "aS6gsoQuWSn3xrJsXbk2tAAAAcA"]
[Tue Dec 02 16:17:55.056789 2025] [:error] [pid 5273:tid 5318] [client 3.110.84.181:45118] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev.local"] [unique_id "aS6gsyMmXO5H1kNwHHUF-wAAAZA"]
[Tue Dec 02 16:17:55.698337 2025] [:error] [pid 3760:tid 3772] [client 3.110.84.181:45130] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/vendor/.env"] [unique_id "aS6gs1jLYEjdWVcKgVU5OwAAAMo"]
[Tue Dec 02 16:17:56.329344 2025] [:error] [pid 5273:tid 5322] [client 3.110.84.181:45144] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lib/.env"] [unique_id "aS6gtCMmXO5H1kNwHHUGAQAAAZQ"]
[Tue Dec 02 16:17:56.956513 2025] [:error] [pid 3647:tid 3668] [client 3.110.84.181:45150] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lab/.env"] [unique_id "aS6gtFJaqGDFgh_0XI9nBAAAAA8"]
[Tue Dec 02 16:17:57.588275 2025] [:error] [pid 48650:tid 48667] [client 3.110.84.181:45156] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "aS6gtYQuWSn3xrJsXbk2xQAAAcw"]
[Tue Dec 02 16:17:58.214648 2025] [:error] [pid 5272:tid 5282] [client 3.110.84.181:45158] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/cron/.env"] [unique_id "aS6gtuwbFoRzPGfZYVQvuwAAAUc"]
[Tue Dec 02 16:17:58.839734 2025] [:error] [pid 48650:tid 48659] [client 3.110.84.181:58470] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aS6gtoQuWSn3xrJsXbk2yAAAAcQ"]
[Tue Dec 02 16:17:59.468360 2025] [:error] [pid 48650:tid 48660] [client 3.110.84.181:58480] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/app/.env"] [unique_id "aS6gt4QuWSn3xrJsXbk2ygAAAcU"]
[Tue Dec 02 16:18:00.107811 2025] [:error] [pid 5273:tid 5308] [client 3.110.84.181:58490] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/Datavase/.env"] [unique_id "aS6guCMmXO5H1kNwHHUGBAAAAYY"]
[Tue Dec 02 16:18:00.740030 2025] [:error] [pid 3760:tid 3784] [client 3.110.84.181:58504] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/database/.env"] [unique_id "aS6guFjLYEjdWVcKgVU5PwAAANY"]
[Tue Dec 02 16:18:01.365738 2025] [:error] [pid 48650:tid 48664] [client 3.110.84.181:58516] [client 3.110.84.181] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aS6guYQuWSn3xrJsXbk2ywAAAck"]
[Tue Dec 02 16:40:43.053307 2025] [:error] [pid 3649:tid 3716] [client 64.227.140.134:58316] [client 64.227.140.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.140.134, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aS6mC7wjL4uqC6YFjxFjJAAAAIU"]
[Tue Dec 02 16:40:43.059285 2025] [:error] [pid 3649:tid 3716] [client 64.227.140.134:58316] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Dec 02 19:33:12.544385 2025] [:error] [pid 3648:tid 3697] [client 136.119.63.146:50780] [client 136.119.63.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aS7OeOQEp5icp6XOJr3cWAAAAE0"]
[Tue Dec 02 19:33:13.348166 2025] [:error] [pid 48650:tid 48661] [client 136.119.63.146:50796] [client 136.119.63.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dbservices.com.au"] [uri "/favicon.ico"] [unique_id "aS7OeYQuWSn3xrJsXbmGigAAAcY"]
[Tue Dec 02 19:33:16.134130 2025] [:error] [pid 3760:tid 3767] [client 136.113.244.29:37468] [client 136.113.244.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aS7OfFjLYEjdWVcKgVVf-wAAAMU"]
[Tue Dec 02 19:33:16.944812 2025] [:error] [pid 3760:tid 3774] [client 136.113.244.29:37480] [client 136.113.244.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/favicon.ico"] [unique_id "aS7OfFjLYEjdWVcKgVVf_AAAAMw"]
[Tue Dec 02 20:13:22.708231 2025] [:error] [pid 3648:tid 3689] [client 135.181.4.161:38406] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "aS7X4uQEp5icp6XOJr3o4wAAAEU"]
[Tue Dec 02 20:13:23.268163 2025] [:error] [pid 5232:tid 5249] [client 135.181.4.161:38410] [client 135.181.4.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "aS7X4wApmO-auDy1ob70uQAAAQ8"]
[Tue Dec 02 21:02:26.649904 2025] [:error] [pid 5232:tid 5239] [client 182.43.70.143:38801] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aS7jYgApmO-auDy1ob4CQgAAAQU"]
[Tue Dec 02 22:58:37.565357 2025] [:error] [pid 3760:tid 3771] [client 43.166.224.244:38350] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aS7-nVjLYEjdWVcKgVWQEAAAAMk"]
[Wed Dec 03 00:59:55.726750 2025] [:error] [pid 25475:tid 25529] [client 34.182.51.129:50783] [client 34.182.51.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.182.51.129, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8bCx7VdEeEe8GnPSUTQAAAARE"]
[Wed Dec 03 00:59:55.731797 2025] [:error] [pid 25475:tid 25529] [client 34.182.51.129:50783] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 03 00:59:58.952739 2025] [:error] [pid 25475:tid 25521] [client 34.182.51.129:50783] [client 34.182.51.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aS8bDh7VdEeEe8GnPSUTVgAAAQk"]
[Wed Dec 03 00:59:59.729661 2025] [:error] [pid 47068:tid 47102] [client 34.182.51.129:51451] [client 34.182.51.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aS8bDyDFatpzeF4tcYV6FgAAAEI"]
[Wed Dec 03 01:00:00.408784 2025] [:error] [pid 47158:tid 47179] [client 34.182.51.129:49227] [client 34.182.51.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aS8bEF3-jeg4VwJRw7EEjQAAANM"]
[Wed Dec 03 01:00:01.079326 2025] [:error] [pid 47067:tid 47076] [client 34.182.51.129:54970] [client 34.182.51.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aS8bEQcYJkWYuBnpVaoubwAAAAQ"]
[Wed Dec 03 01:00:01.758723 2025] [:error] [pid 47158:tid 47173] [client 34.182.51.129:58906] [client 34.182.51.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aS8bEV3-jeg4VwJRw7EEkQAAAM0"]
[Wed Dec 03 01:00:02.629710 2025] [:error] [pid 47067:tid 47089] [client 34.182.51.129:58746] [client 34.182.51.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aS8bEgcYJkWYuBnpVaoudwAAABE"]
[Wed Dec 03 01:38:27.695841 2025] [:error] [pid 25475:tid 25522] [client 223.223.141.64:63810] [client 223.223.141.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.223.141.64, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aS8kEx7VdEeEe8GnPSUx9QAAAQo"]
[Wed Dec 03 01:38:27.702874 2025] [:error] [pid 25475:tid 25522] [client 223.223.141.64:63810] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 03 05:53:59.788346 2025] [:error] [pid 46995:tid 47072] [client 135.181.180.59:17242] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "aS9f9y49R77DGA8IkDAkawAAAJI"]
[Wed Dec 03 05:54:04.057680 2025] [:error] [pid 33526:tid 33545] [client 135.181.180.59:17266] [client 135.181.180.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "aS9f_GkHVvyO7JLEhwYMKAAAApE"]
[Wed Dec 03 08:03:18.471466 2025] [:error] [pid 22083:tid 22090] [client 138.197.47.164:50170] [client 138.197.47.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS9-RvicvKZCy0M9-zyo6wAAAEU"]
[Wed Dec 03 08:03:19.968197 2025] [:error] [pid 21970:tid 21984] [client 138.197.47.164:45464] [client 138.197.47.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS9-R2YwAeqEfyJIWdRwywAAAAg"]
[Wed Dec 03 08:20:45.305839 2025] [:error] [pid 22013:tid 22040] [client 138.197.47.164:43494] [client 138.197.47.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS-CXYpUogO0aqsrpMV4ggAAANU"]
[Wed Dec 03 08:20:47.877049 2025] [:error] [pid 22013:tid 22022] [client 138.197.47.164:39938] [client 138.197.47.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aS-CX4pUogO0aqsrpMV4hgAAAMM"]
[Wed Dec 03 23:14:59.667474 2025] [:error] [pid 47815:tid 47834] [client 106.215.85.182:12090] [client 106.215.85.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.85.182, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTBT80TsjPA8HXY_dpH3CQAAANE"]
[Wed Dec 03 23:14:59.672126 2025] [:error] [pid 47815:tid 47834] [client 106.215.85.182:12090] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 03 23:15:44.469226 2025] [:error] [pid 20607:tid 20616] [client 180.194.87.56:23885] [client 180.194.87.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.194.87.56, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTBUIPpiIcI2BRWBwqyo1gAAAEY"]
[Wed Dec 03 23:15:44.477320 2025] [:error] [pid 20607:tid 20616] [client 180.194.87.56:23885] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 03 23:25:44.719156 2025] [:error] [pid 47815:tid 47817] [client 114.29.224.135:45563] [client 114.29.224.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.29.224.135, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTBWeETsjPA8HXY_dpH4QQAAAMA"]
[Wed Dec 03 23:25:44.727562 2025] [:error] [pid 47815:tid 47817] [client 114.29.224.135:45563] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 04 03:05:49.030702 2025] [:error] [pid 3842:tid 3913] [client 34.86.230.96:65374] [client 34.86.230.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.230.96, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTCKDSaILLkuuVMSmjssEgAAAYo"]
[Thu Dec 04 03:05:49.034318 2025] [:error] [pid 3842:tid 3913] [client 34.86.230.96:65374] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 04 03:05:51.629922 2025] [:error] [pid 3842:tid 3912] [client 34.86.230.96:65374] [client 34.86.230.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTCKDyaILLkuuVMSmjssHwAAAYk"]
[Thu Dec 04 03:05:52.073836 2025] [:error] [pid 63344:tid 63360] [client 34.86.230.96:54236] [client 34.86.230.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTCKELFn6Z8FbZz0IjmKAgAAAAs"]
[Thu Dec 04 03:05:52.503979 2025] [:error] [pid 3840:tid 3859] [client 34.86.230.96:54189] [client 34.86.230.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTCKEJF_IDAg4wPRjg7WdgAAAEs"]
[Thu Dec 04 03:05:52.960038 2025] [:error] [pid 3938:tid 3954] [client 34.86.230.96:49924] [client 34.86.230.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTCKECAHKAmSjlzEts4vTQAAAg4"]
[Thu Dec 04 03:05:53.424355 2025] [:error] [pid 63344:tid 63353] [client 34.86.230.96:49214] [client 34.86.230.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTCKEbFn6Z8FbZz0IjmKBgAAAAQ"]
[Thu Dec 04 03:05:53.882096 2025] [:error] [pid 3938:tid 3950] [client 34.86.230.96:49380] [client 34.86.230.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTCKESAHKAmSjlzEts4vUAAAAgo"]
[Thu Dec 04 03:05:54.312516 2025] [:error] [pid 3938:tid 3957] [client 34.86.230.96:53539] [client 34.86.230.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTCKEiAHKAmSjlzEts4vUgAAAhE"]
[Thu Dec 04 04:22:45.191390 2025] [:error] [pid 2244:tid 2263] [client 34.240.210.242:48700] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTCcFZm00CCLpKa0F737OAAAANE"]
[Thu Dec 04 04:22:46.312193 2025] [:error] [pid 2244:tid 2258] [client 34.240.210.242:48712] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTCcFpm00CCLpKa0F737PAAAAMw"]
[Thu Dec 04 04:22:47.421232 2025] [:error] [pid 2160:tid 2201] [client 34.240.210.242:48726] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aTCcF0NDGjl4u2feUD-p8QAAAEs"]
[Thu Dec 04 04:22:48.537133 2025] [:error] [pid 2159:tid 2178] [client 34.240.210.242:48736] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aTCcGD3GVdXg3ORUAG19QgAAAA8"]
[Thu Dec 04 04:22:49.659170 2025] [:error] [pid 2244:tid 2257] [client 34.240.210.242:48750] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aTCcGZm00CCLpKa0F737RQAAAMs"]
[Thu Dec 04 04:22:50.780519 2025] [:error] [pid 2160:tid 2193] [client 34.240.210.242:53542] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aTCcGkNDGjl4u2feUD-p-gAAAEM"]
[Thu Dec 04 04:22:51.892249 2025] [:error] [pid 2161:tid 2228] [client 34.240.210.242:53550] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aTCcGyjiGdnP9Am2woVCxgAAAIs"]
[Thu Dec 04 04:22:52.999354 2025] [:error] [pid 2244:tid 2255] [client 34.240.210.242:53556] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aTCcHJm00CCLpKa0F737TAAAAMk"]
[Thu Dec 04 04:23:05.311038 2025] [:error] [pid 2159:tid 2167] [client 34.240.210.242:40410] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/config.ini"] [unique_id "aTCcKT3GVdXg3ORUAG19egAAAAQ"]
[Thu Dec 04 04:23:07.547655 2025] [:error] [pid 2161:tid 2221] [client 34.240.210.242:40422] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration"] [unique_id "aTCcKyjiGdnP9Am2woVC2AAAAIQ"]
[Thu Dec 04 04:23:08.669636 2025] [:error] [pid 2244:tid 2253] [client 34.240.210.242:40424] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings"] [unique_id "aTCcLJm00CCLpKa0F737dAAAAMc"]
[Thu Dec 04 04:23:09.791014 2025] [:error] [pid 2159:tid 2167] [client 34.240.210.242:40440] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.json"] [unique_id "aTCcLT3GVdXg3ORUAG19jQAAAAQ"]
[Thu Dec 04 04:23:10.912760 2025] [:error] [pid 2161:tid 2234] [client 34.240.210.242:59258] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.py"] [unique_id "aTCcLijiGdnP9Am2woVC4AAAAJE"]
[Thu Dec 04 04:23:12.033105 2025] [:error] [pid 2161:tid 2226] [client 34.240.210.242:59266] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.rb"] [unique_id "aTCcMCjiGdnP9Am2woVC6wAAAIk"]
[Thu Dec 04 04:23:13.153413 2025] [:error] [pid 2159:tid 2176] [client 34.240.210.242:59272] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.config.js"] [unique_id "aTCcMT3GVdXg3ORUAG19nQAAAA0"]
[Thu Dec 04 04:23:14.261607 2025] [:error] [pid 2160:tid 2192] [client 34.240.210.242:59280] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/local.settings.json"] [unique_id "aTCcMkNDGjl4u2feUD-qUAAAAEI"]
[Thu Dec 04 04:23:15.370673 2025] [:error] [pid 2159:tid 2177] [client 34.240.210.242:59292] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.json"] [unique_id "aTCcMz3GVdXg3ORUAG19nwAAAA4"]
[Thu Dec 04 04:23:16.493259 2025] [:error] [pid 2159:tid 2185] [client 34.240.210.242:59300] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aTCcND3GVdXg3ORUAG19owAAABY"]
[Thu Dec 04 04:23:17.614007 2025] [:error] [pid 2161:tid 2223] [client 34.240.210.242:59316] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aTCcNSjiGdnP9Am2woVC_QAAAIY"]
[Thu Dec 04 04:23:18.734379 2025] [:error] [pid 2160:tid 2211] [client 34.240.210.242:59330] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aTCcNkNDGjl4u2feUD-qUwAAAFU"]
[Thu Dec 04 04:23:19.853775 2025] [:error] [pid 2244:tid 2271] [client 34.240.210.242:59336] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aTCcN5m00CCLpKa0F737ngAAANg"]
[Thu Dec 04 04:23:20.972800 2025] [:error] [pid 2159:tid 2186] [client 34.240.210.242:35084] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTCcOD3GVdXg3ORUAG19pwAAABc"]
[Thu Dec 04 04:23:22.091199 2025] [:error] [pid 2159:tid 2178] [client 34.240.210.242:35088] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aTCcOj3GVdXg3ORUAG19qwAAAA8"]
[Thu Dec 04 04:23:23.212212 2025] [:error] [pid 2244:tid 2258] [client 34.240.210.242:35094] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/composer.json"] [unique_id "aTCcO5m00CCLpKa0F737rQAAAMw"]
[Thu Dec 04 04:23:24.335032 2025] [:error] [pid 2160:tid 2209] [client 34.240.210.242:35100] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aTCcPENDGjl4u2feUD-qZQAAAFM"]
[Thu Dec 04 04:23:25.454679 2025] [:error] [pid 2161:tid 2222] [client 34.240.210.242:35116] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.php"] [unique_id "aTCcPSjiGdnP9Am2woVDKQAAAIU"]
[Thu Dec 04 04:23:26.574870 2025] [:error] [pid 2161:tid 2238] [client 34.240.210.242:35130] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.php"] [unique_id "aTCcPijiGdnP9Am2woVDMAAAAJU"]
[Thu Dec 04 04:23:27.682511 2025] [:error] [pid 2159:tid 2164] [client 34.240.210.242:35144] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/config"] [unique_id "aTCcPz3GVdXg3ORUAG19tQAAAAE"]
[Thu Dec 04 04:23:28.790833 2025] [:error] [pid 2160:tid 2192] [client 34.240.210.242:35150] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aTCcQENDGjl4u2feUD-qawAAAEI"]
[Thu Dec 04 04:23:29.911498 2025] [:error] [pid 2244:tid 2255] [client 34.240.210.242:59374] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/config"] [unique_id "aTCcQZm00CCLpKa0F737ugAAAMk"]
[Thu Dec 04 04:23:31.031119 2025] [:error] [pid 2161:tid 2223] [client 34.240.210.242:59390] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/credentials"] [unique_id "aTCcQyjiGdnP9Am2woVDQAAAAIY"]
[Thu Dec 04 04:23:32.139884 2025] [:error] [pid 2244:tid 2251] [client 34.240.210.242:59394] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.json"] [unique_id "aTCcRJm00CCLpKa0F737xQAAAMU"]
[Thu Dec 04 04:23:33.259624 2025] [:error] [pid 2244:tid 2254] [client 34.240.210.242:59408] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-credentials.json"] [unique_id "aTCcRZm00CCLpKa0F737ywAAAMg"]
[Thu Dec 04 04:23:34.378448 2025] [:error] [pid 2159:tid 2178] [client 34.240.210.242:59414] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-config.js"] [unique_id "aTCcRj3GVdXg3ORUAG19vgAAAA8"]
[Thu Dec 04 04:23:35.488604 2025] [:error] [pid 2161:tid 2222] [client 34.240.210.242:59428] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-keys.json"] [unique_id "aTCcRyjiGdnP9Am2woVDRwAAAIU"]
[Thu Dec 04 04:23:36.597770 2025] [:error] [pid 2161:tid 2224] [client 34.240.210.242:59442] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/secrets.yaml"] [unique_id "aTCcSCjiGdnP9Am2woVDSQAAAIc"]
[Thu Dec 04 04:23:37.709922 2025] [:error] [pid 2244:tid 2254] [client 34.240.210.242:59454] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/access-keys.js"] [unique_id "aTCcSZm00CCLpKa0F7372QAAAMg"]
[Thu Dec 04 04:23:38.829194 2025] [:error] [pid 2161:tid 2233] [client 34.240.210.242:59462] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/config.ini"] [unique_id "aTCcSijiGdnP9Am2woVDSwAAAJA"]
[Thu Dec 04 04:23:39.937969 2025] [:error] [pid 2161:tid 2220] [client 34.240.210.242:34534] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/credentials.bak"] [unique_id "aTCcSyjiGdnP9Am2woVDTgAAAIM"]
[Thu Dec 04 04:23:41.046882 2025] [:error] [pid 2244:tid 2251] [client 34.240.210.242:34540] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/secrets"] [unique_id "aTCcTZm00CCLpKa0F7374AAAAMU"]
[Thu Dec 04 04:23:42.154459 2025] [:error] [pid 2160:tid 2196] [client 34.240.210.242:34554] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-env.json"] [unique_id "aTCcTkNDGjl4u2feUD-qfQAAAEY"]
[Thu Dec 04 04:23:43.263242 2025] [:error] [pid 2244:tid 2266] [client 34.240.210.242:34556] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-keys.env"] [unique_id "aTCcT5m00CCLpKa0F7376AAAANM"]
[Thu Dec 04 04:23:44.383463 2025] [:error] [pid 2160:tid 2194] [client 34.240.210.242:34558] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/config.bak"] [unique_id "aTCcUENDGjl4u2feUD-qgAAAAEQ"]
[Thu Dec 04 04:23:45.503563 2025] [:error] [pid 2161:tid 2233] [client 34.240.210.242:34568] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/secrets.json"] [unique_id "aTCcUSjiGdnP9Am2woVDVgAAAJA"]
[Thu Dec 04 04:23:46.613361 2025] [:error] [pid 2161:tid 2232] [client 34.240.210.242:34572] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws/config.properties"] [unique_id "aTCcUijiGdnP9Am2woVDWgAAAI8"]
[Thu Dec 04 04:23:47.722351 2025] [:error] [pid 2159:tid 2174] [client 34.240.210.242:34586] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/credentials.json"] [unique_id "aTCcUz3GVdXg3ORUAG192AAAAAs"]
[Thu Dec 04 04:23:48.843302 2025] [:error] [pid 2244:tid 2269] [client 34.240.210.242:34596] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws_keys.py"] [unique_id "aTCcVJm00CCLpKa0F737_gAAANY"]
[Thu Dec 04 04:23:49.952540 2025] [:error] [pid 2244:tid 2258] [client 34.240.210.242:57582] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe/config"] [unique_id "aTCcVZm00CCLpKa0F738CQAAAMw"]
[Thu Dec 04 04:23:51.073329 2025] [:error] [pid 2244:tid 2249] [client 34.240.210.242:57596] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe.json"] [unique_id "aTCcV5m00CCLpKa0F738DgAAAMM"]
[Thu Dec 04 04:23:52.195227 2025] [:error] [pid 2244:tid 2259] [client 34.240.210.242:57606] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe.js"] [unique_id "aTCcWJm00CCLpKa0F738FQAAAM0"]
[Thu Dec 04 04:23:53.315481 2025] [:error] [pid 2161:tid 2239] [client 34.240.210.242:57622] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe-config.yaml"] [unique_id "aTCcWSjiGdnP9Am2woVDZQAAAJY"]
[Thu Dec 04 04:23:54.424677 2025] [:error] [pid 2244:tid 2254] [client 34.240.210.242:57636] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe-keys.json"] [unique_id "aTCcWpm00CCLpKa0F738IwAAAMg"]
[Thu Dec 04 04:23:55.544531 2025] [:error] [pid 2244:tid 2260] [client 34.240.210.242:57648] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe/credentials"] [unique_id "aTCcW5m00CCLpKa0F738JwAAAM4"]
[Thu Dec 04 04:23:56.665668 2025] [:error] [pid 2244:tid 2258] [client 34.240.210.242:57654] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe/secrets.yml"] [unique_id "aTCcXJm00CCLpKa0F738MAAAAMw"]
[Thu Dec 04 04:23:57.785622 2025] [:error] [pid 2244:tid 2251] [client 34.240.210.242:57664] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe.env"] [unique_id "aTCcXZm00CCLpKa0F738OAAAAMU"]
[Thu Dec 04 04:23:58.893178 2025] [:error] [pid 2244:tid 2260] [client 34.240.210.242:57678] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe/config.php"] [unique_id "aTCcXpm00CCLpKa0F738PgAAAM4"]
[Thu Dec 04 04:24:00.014074 2025] [:error] [pid 2244:tid 2265] [client 34.240.210.242:47052] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.stripe/keys"] [unique_id "aTCcYJm00CCLpKa0F738RAAAANI"]
[Thu Dec 04 04:24:01.133710 2025] [:error] [pid 2244:tid 2259] [client 34.240.210.242:47056] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe_api.json"] [unique_id "aTCcYZm00CCLpKa0F738SAAAAM0"]
[Thu Dec 04 04:24:02.254460 2025] [:error] [pid 2161:tid 2223] [client 34.240.210.242:47072] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/stripe.rb"] [unique_id "aTCcYijiGdnP9Am2woVDbgAAAIY"]
[Thu Dec 04 04:24:03.364254 2025] [:error] [pid 2244:tid 2266] [client 34.240.210.242:47086] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe_keys.py"] [unique_id "aTCcY5m00CCLpKa0F738UgAAANM"]
[Thu Dec 04 04:24:04.472898 2025] [:error] [pid 2159:tid 2165] [client 34.240.210.242:47102] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe.ini"] [unique_id "aTCcZD3GVdXg3ORUAG19_AAAAAI"]
[Thu Dec 04 04:24:05.595003 2025] [:error] [pid 2159:tid 2172] [client 34.240.210.242:47112] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe.properties"] [unique_id "aTCcZT3GVdXg3ORUAG1-BAAAAAk"]
[Thu Dec 04 04:24:08.957559 2025] [:error] [pid 2159:tid 2182] [client 34.240.210.242:47138] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.stripe"] [unique_id "aTCcaD3GVdXg3ORUAG1-EAAAABM"]
[Thu Dec 04 04:24:14.548660 2025] [:error] [pid 2244:tid 2255] [client 34.240.210.242:42018] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.django"] [unique_id "aTCcbpm00CCLpKa0F738qQAAAMk"]
[Thu Dec 04 04:24:21.287522 2025] [:error] [pid 2160:tid 2193] [client 34.240.210.242:53388] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/settings/production.py"] [unique_id "aTCcdUNDGjl4u2feUD-qrAAAAEM"]
[Thu Dec 04 04:24:22.397569 2025] [:error] [pid 2244:tid 2255] [client 34.240.210.242:53396] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/django/secrets.json"] [unique_id "aTCcdpm00CCLpKa0F738twAAAMk"]
[Thu Dec 04 04:24:23.518761 2025] [:error] [pid 2159:tid 2182] [client 34.240.210.242:53404] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.pythonenv"] [unique_id "aTCcdz3GVdXg3ORUAG1-JwAAABM"]
[Thu Dec 04 04:24:24.627974 2025] [:error] [pid 2160:tid 2194] [client 34.240.210.242:53410] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/local.py"] [unique_id "aTCceENDGjl4u2feUD-qsgAAAEQ"]
[Thu Dec 04 04:24:25.736012 2025] [:error] [pid 2161:tid 2236] [client 34.240.210.242:53426] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/django.ini"] [unique_id "aTCceSjiGdnP9Am2woVDvQAAAJM"]
[Thu Dec 04 04:24:26.855975 2025] [:error] [pid 2161:tid 2219] [client 34.240.210.242:53440] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/database.yml"] [unique_id "aTCceijiGdnP9Am2woVDyQAAAII"]
[Thu Dec 04 04:24:27.975509 2025] [:error] [pid 2244:tid 2252] [client 34.240.210.242:53452] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/secrets.yml"] [unique_id "aTCce5m00CCLpKa0F738wwAAAMY"]
[Thu Dec 04 04:24:29.097002 2025] [:error] [pid 2159:tid 2169] [client 34.240.210.242:53466] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/credentials.yml.enc"] [unique_id "aTCcfT3GVdXg3ORUAG1-LAAAAAY"]
[Thu Dec 04 04:24:30.219018 2025] [:error] [pid 2159:tid 2165] [client 34.240.210.242:41438] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/master.key"] [unique_id "aTCcfj3GVdXg3ORUAG1-LgAAAAI"]
[Thu Dec 04 04:24:31.339460 2025] [:error] [pid 2161:tid 2220] [client 34.240.210.242:41442] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/application.rb"] [unique_id "aTCcfyjiGdnP9Am2woVD4QAAAIM"]
[Thu Dec 04 04:24:32.448296 2025] [:error] [pid 2244:tid 2256] [client 34.240.210.242:41452] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/environment.rb"] [unique_id "aTCcgJm00CCLpKa0F738ywAAAMo"]
[Thu Dec 04 04:24:33.557960 2025] [:error] [pid 2161:tid 2218] [client 34.240.210.242:41456] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.yml"] [unique_id "aTCcgSjiGdnP9Am2woVD8AAAAIE"]
[Thu Dec 04 04:24:34.679524 2025] [:error] [pid 2161:tid 2240] [client 34.240.210.242:41464] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.rb"] [unique_id "aTCcgijiGdnP9Am2woVD-QAAAJc"]
[Thu Dec 04 04:24:35.799314 2025] [:error] [pid 2161:tid 2233] [client 34.240.210.242:41472] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/local_env.yml"] [unique_id "aTCcgyjiGdnP9Am2woVD_wAAAJA"]
[Thu Dec 04 04:24:36.918204 2025] [:error] [pid 2161:tid 2230] [client 34.240.210.242:41484] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rails.env"] [unique_id "aTCchCjiGdnP9Am2woVEBgAAAI0"]
[Thu Dec 04 04:24:38.037293 2025] [:error] [pid 2159:tid 2170] [client 34.240.210.242:41500] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/initializers/secret_token.rb"] [unique_id "aTCchj3GVdXg3ORUAG1-NgAAAAc"]
[Thu Dec 04 04:24:39.147015 2025] [:error] [pid 2159:tid 2175] [client 34.240.210.242:41508] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/cable.yml"] [unique_id "aTCchz3GVdXg3ORUAG1-OgAAAAw"]
[Thu Dec 04 04:24:40.266591 2025] [:error] [pid 2160:tid 2203] [client 34.240.210.242:47762] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Gemfile.lock"] [unique_id "aTCciENDGjl4u2feUD-qywAAAE0"]
[Thu Dec 04 04:24:41.375774 2025] [:error] [pid 2159:tid 2170] [client 34.240.210.242:47770] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/puma.rb"] [unique_id "aTCciT3GVdXg3ORUAG1-SwAAAAc"]
[Thu Dec 04 04:24:42.484454 2025] [:error] [pid 2244:tid 2248] [client 34.240.210.242:47772] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/routes.rb"] [unique_id "aTCcipm00CCLpKa0F7381QAAAMI"]
[Thu Dec 04 04:24:43.594044 2025] [:error] [pid 2244:tid 2256] [client 34.240.210.242:47788] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.ruby-version"] [unique_id "aTCci5m00CCLpKa0F7382gAAAMo"]
[Thu Dec 04 04:24:44.703001 2025] [:error] [pid 2244:tid 2254] [client 34.240.210.242:47804] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/application.yml"] [unique_id "aTCcjJm00CCLpKa0F7383AAAAMg"]
[Thu Dec 04 04:24:45.817904 2025] [:error] [pid 2160:tid 2207] [client 34.240.210.242:47808] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.yml.enc"] [unique_id "aTCcjUNDGjl4u2feUD-q1QAAAFE"]
[Thu Dec 04 04:24:46.926972 2025] [:error] [pid 2244:tid 2262] [client 34.240.210.242:47824] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/master.key.bak"] [unique_id "aTCcjpm00CCLpKa0F7383wAAANA"]
[Thu Dec 04 04:24:48.035313 2025] [:error] [pid 2160:tid 2195] [client 34.240.210.242:47834] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/database.json"] [unique_id "aTCckENDGjl4u2feUD-q2wAAAEU"]
[Thu Dec 04 04:24:49.145534 2025] [:error] [pid 2161:tid 2232] [client 34.240.210.242:47846] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.js"] [unique_id "aTCckSjiGdnP9Am2woVEGgAAAI8"]
[Thu Dec 04 04:24:50.255314 2025] [:error] [pid 2161:tid 2219] [client 34.240.210.242:59946] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api_keys.js"] [unique_id "aTCckijiGdnP9Am2woVEGwAAAII"]
[Thu Dec 04 04:24:51.363890 2025] [:error] [pid 2161:tid 2220] [client 34.240.210.242:59958] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.js"] [unique_id "aTCckyjiGdnP9Am2woVEHgAAAIM"]
[Thu Dec 04 04:24:52.475400 2025] [:error] [pid 2244:tid 2270] [client 34.240.210.242:59964] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/package.json"] [unique_id "aTCclJm00CCLpKa0F7385AAAANc"]
[Thu Dec 04 04:24:53.584221 2025] [:error] [pid 2160:tid 2211] [client 34.240.210.242:59980] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.js"] [unique_id "aTCclUNDGjl4u2feUD-q4gAAAFU"]
[Thu Dec 04 04:24:54.695602 2025] [:error] [pid 2160:tid 2191] [client 34.240.210.242:59990] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.js"] [unique_id "aTCclkNDGjl4u2feUD-q5gAAAEE"]
[Thu Dec 04 04:24:55.805069 2025] [:error] [pid 2161:tid 2224] [client 34.240.210.242:59996] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/env.js"] [unique_id "aTCclyjiGdnP9Am2woVEJQAAAIc"]
[Thu Dec 04 04:24:56.919570 2025] [:error] [pid 2244:tid 2268] [client 34.240.210.242:60006] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.js"] [unique_id "aTCcmJm00CCLpKa0F7386AAAANU"]
[Thu Dec 04 04:24:58.040325 2025] [:error] [pid 2244:tid 2271] [client 34.240.210.242:60020] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/node.config.json"] [unique_id "aTCcmpm00CCLpKa0F7387gAAANg"]
[Thu Dec 04 04:24:59.150623 2025] [:error] [pid 2159:tid 2170] [client 34.240.210.242:60022] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/secrets.json"] [unique_id "aTCcmz3GVdXg3ORUAG1-eAAAAAc"]
[Thu Dec 04 04:25:00.271614 2025] [:error] [pid 2160:tid 2198] [client 34.240.210.242:35452] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/client/config.js"] [unique_id "aTCcnENDGjl4u2feUD-q5wAAAEg"]
[Thu Dec 04 04:25:01.380337 2025] [:error] [pid 2244:tid 2253] [client 34.240.210.242:35466] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/config.js"] [unique_id "aTCcnZm00CCLpKa0F7389wAAAMc"]
[Thu Dec 04 04:25:02.488596 2025] [:error] [pid 2161:tid 2217] [client 34.240.210.242:35482] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src/config/api.js"] [unique_id "aTCcnijiGdnP9Am2woVEMQAAAIA"]
[Thu Dec 04 04:25:03.597559 2025] [:error] [pid 2244:tid 2252] [client 34.240.210.242:35494] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/node_modules/.bin/env"] [unique_id "aTCcn5m00CCLpKa0F738_QAAAMY"]
[Thu Dec 04 04:25:04.719236 2025] [:error] [pid 2160:tid 2195] [client 34.240.210.242:35496] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.npmrc"] [unique_id "aTCcoENDGjl4u2feUD-q6QAAAEU"]
[Thu Dec 04 04:25:05.839288 2025] [:error] [pid 2160:tid 2192] [client 34.240.210.242:35512] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yarn.lock"] [unique_id "aTCcoUNDGjl4u2feUD-q6gAAAEI"]
[Thu Dec 04 04:25:06.952117 2025] [:error] [pid 2160:tid 2197] [client 34.240.210.242:35516] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/client.js"] [unique_id "aTCcokNDGjl4u2feUD-q7AAAAEc"]
[Thu Dec 04 04:25:08.061810 2025] [:error] [pid 2159:tid 2187] [client 34.240.210.242:35532] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/config.js"] [unique_id "aTCcpD3GVdXg3ORUAG1-ggAAABg"]
[Thu Dec 04 04:25:09.170747 2025] [:error] [pid 2161:tid 2222] [client 34.240.210.242:35542] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/frontend/env.json"] [unique_id "aTCcpSjiGdnP9Am2woVEPAAAAIU"]
[Thu Dec 04 04:25:10.279261 2025] [:error] [pid 2161:tid 2237] [client 34.240.210.242:56082] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backend/secrets.js"] [unique_id "aTCcpijiGdnP9Am2woVEPQAAAJQ"]
[Thu Dec 04 04:25:11.387612 2025] [:error] [pid 2161:tid 2225] [client 34.240.210.242:56088] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application.properties"] [unique_id "aTCcpyjiGdnP9Am2woVEQgAAAIg"]
[Thu Dec 04 04:25:12.508775 2025] [:error] [pid 2161:tid 2233] [client 34.240.210.242:56090] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.properties"] [unique_id "aTCcqCjiGdnP9Am2woVERAAAAJA"]
[Thu Dec 04 04:25:13.619636 2025] [:error] [pid 2244:tid 2247] [client 34.240.210.242:56094] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.properties"] [unique_id "aTCcqZm00CCLpKa0F739CgAAAME"]
[Thu Dec 04 04:25:14.728974 2025] [:error] [pid 2161:tid 2229] [client 34.240.210.242:56110] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.ini"] [unique_id "aTCcqijiGdnP9Am2woVESgAAAIw"]
[Thu Dec 04 04:25:15.850006 2025] [:error] [pid 2159:tid 2179] [client 34.240.210.242:56112] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/local.ini"] [unique_id "aTCcqz3GVdXg3ORUAG1-hwAAABA"]
[Thu Dec 04 04:25:16.959750 2025] [:error] [pid 2160:tid 2197] [client 34.240.210.242:56116] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.ini"] [unique_id "aTCcrENDGjl4u2feUD-q9gAAAEc"]
[Thu Dec 04 04:25:18.080650 2025] [:error] [pid 2160:tid 2205] [client 34.240.210.242:56124] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.json"] [unique_id "aTCcrkNDGjl4u2feUD-q-QAAAE8"]
[Thu Dec 04 04:25:19.190856 2025] [:error] [pid 2159:tid 2187] [client 34.240.210.242:56126] [client 34.240.210.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/secrets.json"] [unique_id "aTCcrz3GVdXg3ORUAG1-iwAAABg"]
[Thu Dec 04 04:25:24.800454 2025] [:error] [pid 2160:tid 2213] [client 34.240.210.242:59908] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/php.ini"] [unique_id "aTCctENDGjl4u2feUD-rAQAAAFc"]
[Thu Dec 04 04:25:28.154468 2025] [:error] [pid 2244:tid 2268] [client 34.240.210.242:59932] [client 34.240.210.242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/system.ini"] [unique_id "aTCcuJm00CCLpKa0F739HAAAANU"]
[Thu Dec 04 05:25:35.308324 2025] [:error] [pid 2159:tid 2176] [client 182.42.111.156:54568] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTCqzz3GVdXg3ORUAG2V6gAAAA0"]
[Thu Dec 04 11:39:19.511462 2025] [:error] [pid 63383:tid 63434] [client 143.110.180.207:51306] [client 143.110.180.207] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aTECZ1JYyG_QEWdAPIUAhgAAAtE"], referer: binance.com
[Thu Dec 04 11:41:49.995838 2025] [:error] [pid 63381:tid 63462] [client 175.6.217.4:54630] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTEC_eidz_S5muoRMEy38QAAAlM"]
[Thu Dec 04 13:00:59.250596 2025] [:error] [pid 38403:tid 38421] [client 159.89.127.165:37090] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2/api-docs"] [unique_id "aTEViwBCL4g8TXcskwmxcgAAAQ0"]
[Thu Dec 04 13:01:00.251933 2025] [:error] [pid 63381:tid 63446] [client 159.89.127.165:37096] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3/api-docs"] [unique_id "aTEVjOidz_S5muoRMEzLzwAAAkM"]
[Thu Dec 04 13:01:01.266727 2025] [:error] [pid 63381:tid 63449] [client 159.89.127.165:37104] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aTEVjeidz_S5muoRMEzL0gAAAkY"]
[Thu Dec 04 13:01:02.255158 2025] [:error] [pid 2161:tid 2234] [client 159.89.127.165:37108] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/swagger.json"] [unique_id "aTEVjijiGdnP9Am2woXVlAAAAJE"]
[Thu Dec 04 13:01:03.254946 2025] [:error] [pid 63382:tid 63480] [client 159.89.127.165:37110] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/@vite/env"] [unique_id "aTEVj0vJv09BlzBS6SSWkwAAAos"]
[Thu Dec 04 13:01:04.253754 2025] [:error] [pid 63381:tid 63462] [client 159.89.127.165:33522] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/actuator/env"] [unique_id "aTEVkOidz_S5muoRMEzL2gAAAlM"]
[Thu Dec 04 13:01:05.256114 2025] [:error] [pid 63379:tid 63393] [client 159.89.127.165:33532] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server"] [unique_id "aTEVkcvuHYNZ2IuzoJeZdAAAAgY"]
[Thu Dec 04 13:01:06.258842 2025] [:error] [pid 2244:tid 2266] [client 159.89.127.165:33534] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aTEVkpm00CCLpKa0F72ZygAAANM"]
[Thu Dec 04 13:01:08.257977 2025] [:error] [pid 2244:tid 2261] [client 159.89.127.165:33546] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about"] [unique_id "aTEVlJm00CCLpKa0F72ZzwAAAM8"]
[Thu Dec 04 13:01:09.260496 2025] [:error] [pid 63379:tid 63406] [client 159.89.127.165:33552] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug/default/view"] [unique_id "aTEVlcvuHYNZ2IuzoJeZeAAAAhM"]
[Thu Dec 04 13:01:10.259113 2025] [:error] [pid 63383:tid 63417] [client 159.89.127.165:33562] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2/_catalog"] [unique_id "aTEVllJYyG_QEWdAPIUYcwAAAsA"]
[Thu Dec 04 13:01:11.257915 2025] [:error] [pid 2244:tid 2262] [client 159.89.127.165:33570] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aTEVl5m00CCLpKa0F72Z1QAAANA"]
[Thu Dec 04 13:01:12.259011 2025] [:error] [pid 38403:tid 38429] [client 159.89.127.165:33584] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server-status"] [unique_id "aTEVmABCL4g8TXcskwmxfQAAARU"]
[Thu Dec 04 13:01:13.261703 2025] [:error] [pid 63322:tid 63353] [client 159.89.127.165:33590] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login.action"] [unique_id "aTEVmYvm-cfAnelmlGeo_gAAAcI"]
[Thu Dec 04 13:01:14.259933 2025] [:error] [pid 63382:tid 63479] [client 159.89.127.165:45290] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_all_dbs"] [unique_id "aTEVmkvJv09BlzBS6SSWpAAAAoo"]
[Thu Dec 04 13:01:15.261691 2025] [:error] [pid 2161:tid 2238] [client 159.89.127.165:45298] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.DS_Store"] [unique_id "aTEVmyjiGdnP9Am2woXVowAAAJU"]
[Thu Dec 04 13:01:16.263782 2025] [:error] [pid 63383:tid 63420] [client 159.89.127.165:45314] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTEVnFJYyG_QEWdAPIUYegAAAsM"]
[Thu Dec 04 13:01:18.265661 2025] [:error] [pid 38403:tid 38427] [client 159.89.127.165:45316] [client 159.89.127.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTEVngBCL4g8TXcskwmxggAAARM"]
[Thu Dec 04 13:01:19.260908 2025] [:error] [pid 63381:tid 63458] [client 159.89.127.165:45324] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aTEVn-idz_S5muoRMEzL-gAAAk8"]
[Thu Dec 04 13:01:20.261363 2025] [:error] [pid 63381:tid 63444] [client 159.89.127.165:45326] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.json"] [unique_id "aTEVoOidz_S5muoRMEzL-wAAAkE"]
[Thu Dec 04 13:01:21.265369 2025] [:error] [pid 63382:tid 63475] [client 159.89.127.165:45334] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/telescope/requests"] [unique_id "aTEVoUvJv09BlzBS6SSWqQAAAoY"]
[Thu Dec 04 13:01:22.262776 2025] [:error] [pid 38403:tid 38421] [client 159.89.127.165:45346] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aTEVogBCL4g8TXcskwmxhAAAAQ0"]
[Thu Dec 04 13:01:23.264874 2025] [:error] [pid 63383:tid 63428] [client 159.89.127.165:45354] [client 159.89.127.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTEVo1JYyG_QEWdAPIUYjQAAAss"]
[Thu Dec 04 21:26:56.768068 2025] [:error] [pid 2244:tid 2259] [client 108.143.65.196:49781] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Thu Dec 04 21:27:09.176052 2025] [:error] [pid 2244:tid 2270] [client 108.143.65.196:62227] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Thu Dec 04 21:27:22.124809 2025] [:error] [pid 63381:tid 63459] [client 108.143.65.196:51180] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Thu Dec 04 21:27:35.433257 2025] [:error] [pid 2244:tid 2271] [client 108.143.65.196:58342] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Thu Dec 04 21:44:06.615088 2025] [:error] [pid 63321:tid 63341] [client 27.5.221.94:55670] [client 27.5.221.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.5.221.94, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGQJrNTbeTF3WLMl8zl_wAAAZE"]
[Thu Dec 04 21:44:06.621021 2025] [:error] [pid 63321:tid 63341] [client 27.5.221.94:55670] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 04 21:48:56.700999 2025] [:error] [pid 63381:tid 63444] [client 49.204.225.146:53913] [client 49.204.225.146] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.204.225.146, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTGRSOidz_S5muoRMExIZAAAAkE"]
[Thu Dec 04 21:48:56.706797 2025] [:error] [pid 63381:tid 63444] [client 49.204.225.146:53913] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 05 09:05:35.962681 2025] [:error] [pid 53923:tid 53943] [client 43.130.116.87:53854] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTIv37l8ebZN0VCAVXBdtAAAANI"]
[Fri Dec 05 09:34:45.358791 2025] [:error] [pid 24010:tid 24023] [client 182.40.104.255:49662] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTI2tatjRoDpxa46mwexFwAAAQs"]
[Fri Dec 05 11:53:39.125296 2025] [:error] [pid 53923:tid 53925] [client 176.65.132.18:59856] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTJXQ7l8ebZN0VCAVXC3QgAAAMA"]
[Fri Dec 05 15:43:45.046200 2025] [:error] [pid 53837:tid 53864] [client 192.144.148.122:37306] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTKNMTbsUyTxys8OiMLjAwAAABY"]
[Fri Dec 05 16:50:57.842314 2025] [:error] [pid 24010:tid 24025] [client 64.226.100.57:50829] [client 64.226.100.57] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.100.57, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aTKc8atjRoDpxa46mwczuwAAAQ0"]
[Fri Dec 05 16:50:57.846645 2025] [:error] [pid 24010:tid 24025] [client 64.226.100.57:50829] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Dec 05 20:17:51.108827 2025] [:error] [pid 18579:tid 18606] [client 108.143.65.196:54740] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Dec 05 20:18:06.977954 2025] [:error] [pid 35962:tid 35981] [client 108.143.65.196:54009] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Dec 05 20:18:11.079943 2025] [:error] [pid 18521:tid 18575] [client 108.143.65.196:62333] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Dec 05 20:18:21.156164 2025] [:error] [pid 18521:tid 18570] [client 108.143.65.196:64110] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Dec 05 21:14:21.876389 2025] [:error] [pid 18614:tid 18630] [client 13.125.205.229:44920] [client 13.125.205.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTLarXHum9jj9plt7MVp8wAAAU4"]
[Fri Dec 05 21:54:58.979310 2025] [:error] [pid 18579:tid 18598] [client 182.42.111.213:43478] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTLkMsAUSulJty2JiBq2fQAAAA0"]
[Fri Dec 05 21:59:29.527260 2025] [:error] [pid 18614:tid 18617] [client 13.235.67.199:37926] [client 13.235.67.199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aTLlQXHum9jj9plt7MV6IQAAAUE"]
[Sat Dec 06 09:50:16.837173 2025] [:error] [pid 61216:tid 61264] [client 122.51.236.174:43558] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTOL2DHlXXVdP5ewviWoqwAAAFI"]
[Sat Dec 06 10:02:37.032481 2025] [:error] [pid 61216:tid 61262] [client 43.157.82.252:34388] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTOOvTHlXXVdP5ewviWqVAAAAFA"]
[Sat Dec 06 10:12:49.338155 2025] [:error] [pid 61217:tid 61273] [client 184.169.240.7:39832] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTORIVdSKQYfLI3fYo46UAAAAIA"]
[Sat Dec 06 10:12:50.015807 2025] [:error] [pid 61217:tid 61275] [client 184.169.240.7:39836] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/error.log"] [unique_id "aTORIldSKQYfLI3fYo46UQAAAII"]
[Sat Dec 06 10:12:50.360078 2025] [:error] [pid 61217:tid 61288] [client 184.169.240.7:39836] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aTORIldSKQYfLI3fYo46UwAAAI8"]
[Sat Dec 06 10:12:51.823681 2025] [:error] [pid 61217:tid 61284] [client 184.169.240.7:39836] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/database.sql"] [unique_id "aTORI1dSKQYfLI3fYo46VAAAAIs"]
[Sat Dec 06 10:12:52.013390 2025] [:error] [pid 61217:tid 61277] [client 184.169.240.7:39836] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/backup.sql"] [unique_id "aTORJFdSKQYfLI3fYo46VQAAAIQ"]
[Sat Dec 06 10:12:52.184717 2025] [:error] [pid 61217:tid 61282] [client 184.169.240.7:39836] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/debug.log"] [unique_id "aTORJFdSKQYfLI3fYo46VgAAAIk"]
[Sat Dec 06 10:12:52.531765 2025] [:error] [pid 61217:tid 61291] [client 184.169.240.7:39836] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dump.sql"] [unique_id "aTORJFdSKQYfLI3fYo46WAAAAJI"]
[Sat Dec 06 10:12:52.699705 2025] [:error] [pid 61217:tid 61280] [client 184.169.240.7:39836] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aTORJFdSKQYfLI3fYo46WQAAAIc"]
[Sat Dec 06 10:12:53.547620 2025] [:error] [pid 35621:tid 35641] [client 184.169.240.7:39852] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat Dec 06 10:12:53.721638 2025] [:error] [pid 35621:tid 35636] [client 184.169.240.7:39852] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Dec 06 10:12:53.890984 2025] [:error] [pid 35621:tid 35633] [client 184.169.240.7:39852] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aTORJUQGb3oZH9SdKQViTQAAAUk"]
[Sat Dec 06 10:12:54.567521 2025] [:error] [pid 35591:tid 35595] [client 184.169.240.7:41880] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat Dec 06 10:12:54.735356 2025] [:error] [pid 35591:tid 35610] [client 184.169.240.7:41880] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aTORJobmw-7bFvTxc9PDjwAAARE"]
[Sat Dec 06 10:12:55.410814 2025] [:error] [pid 61215:tid 61220] [client 184.169.240.7:41890] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/db_backup.sql"] [unique_id "aTORJ-OOZ8nTCBYuI-z8oQAAAAE"]
[Sat Dec 06 10:12:56.099509 2025] [:error] [pid 61215:tid 61227] [client 184.169.240.7:41890] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aTORKOOOZ8nTCBYuI-z8qAAAAAg"]
[Sat Dec 06 10:12:56.776312 2025] [:error] [pid 35591:tid 35617] [client 184.169.240.7:41906] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aTORKIbmw-7bFvTxc9PDoAAAARg"]
[Sat Dec 06 10:12:57.809735 2025] [:error] [pid 35591:tid 35602] [client 184.169.240.7:41914] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aTORKYbmw-7bFvTxc9PDsgAAAQk"]
[Sat Dec 06 10:12:58.492714 2025] [:error] [pid 35591:tid 35617] [client 184.169.240.7:41926] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sat Dec 06 10:12:58.662154 2025] [:error] [pid 35591:tid 35610] [client 184.169.240.7:41926] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aTORKobmw-7bFvTxc9PDuAAAARE"]
[Sat Dec 06 10:12:59.332783 2025] [:error] [pid 35622:tid 35674] [client 184.169.240.7:41930] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docker-compose.yml"] [unique_id "aTORKyOSP_9DVLgFwI5w2QAAAZc"]
[Sat Dec 06 10:13:00.010989 2025] [:error] [pid 35621:tid 35626] [client 184.169.240.7:41936] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws-config.json"] [unique_id "aTORLEQGb3oZH9SdKQViUQAAAUI"]
[Sat Dec 06 10:13:00.686851 2025] [:error] [pid 61216:tid 61251] [client 184.169.240.7:41944] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev.local"] [unique_id "aTORLDHlXXVdP5ewviWriQAAAEU"]
[Sat Dec 06 10:13:01.359946 2025] [:error] [pid 61303:tid 61316] [client 184.169.240.7:41960] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod.local"] [unique_id "aTORLdwK_fe00OH7zy4tbAAAAMo"]
[Sat Dec 06 10:13:02.038255 2025] [:error] [pid 61303:tid 61311] [client 184.169.240.7:41972] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.1"] [unique_id "aTORLtwK_fe00OH7zy4tbQAAAMU"]
[Sat Dec 06 10:13:02.707843 2025] [:error] [pid 61216:tid 61259] [client 184.169.240.7:41984] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aTORLjHlXXVdP5ewviWrjAAAAE0"]
[Sat Dec 06 10:13:03.387238 2025] [:error] [pid 52809:tid 52820] [client 184.169.240.7:41994] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aTORL-rRwgsmpIJQ2qYefQAAAgk"]
[Sat Dec 06 10:13:04.062328 2025] [:error] [pid 35621:tid 35645] [client 184.169.240.7:42004] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.php"] [unique_id "aTORMEQGb3oZH9SdKQViUgAAAVU"]
[Sat Dec 06 10:13:04.741259 2025] [:error] [pid 52809:tid 52822] [client 184.169.240.7:46414] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/v1/config"] [unique_id "aTORMOrRwgsmpIJQ2qYefgAAAgs"]
[Sat Dec 06 10:13:05.413950 2025] [:error] [pid 61217:tid 61290] [client 184.169.240.7:46422] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_error.log"] [unique_id "aTORMVdSKQYfLI3fYo46XQAAAJE"]
[Sat Dec 06 10:13:06.105175 2025] [:error] [pid 61215:tid 61238] [client 184.169.240.7:46428] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/app/etc/local.xml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/etc/local.xml"] [unique_id "aTORMuOOZ8nTCBYuI-z8sgAAABM"]
[Sat Dec 06 10:13:06.782648 2025] [:error] [pid 61215:tid 61223] [client 184.169.240.7:46432] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "aTORMuOOZ8nTCBYuI-z8tAAAAAQ"]
[Sat Dec 06 10:13:07.458408 2025] [:error] [pid 61216:tid 61261] [client 184.169.240.7:46434] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sites/default/settings.php"] [unique_id "aTORMzHlXXVdP5ewviWrkgAAAE8"]
[Sat Dec 06 10:13:08.131400 2025] [:error] [pid 48399:tid 48408] [client 184.169.240.7:46442] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.DS_Store"] [unique_id "aTORNOjNPOrIshd8EwduyQAAAcc"]
[Sat Dec 06 10:13:08.803967 2025] [:error] [pid 61215:tid 61236] [client 184.169.240.7:46444] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.zip"] [unique_id "aTORNOOOZ8nTCBYuI-z8uQAAABE"]
[Sat Dec 06 10:13:09.475567 2025] [:error] [pid 52809:tid 52826] [client 184.169.240.7:46454] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.txt"] [unique_id "aTORNerRwgsmpIJQ2qYehgAAAg8"]
[Sat Dec 06 10:13:10.146999 2025] [:error] [pid 35621:tid 35634] [client 184.169.240.7:46470] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.json"] [unique_id "aTORNkQGb3oZH9SdKQViVgAAAUo"]
[Sat Dec 06 10:13:10.822337 2025] [:error] [pid 52809:tid 52816] [client 184.169.240.7:46474] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aTORNurRwgsmpIJQ2qYehwAAAgU"]
[Sat Dec 06 10:13:11.497489 2025] [:error] [pid 61303:tid 61323] [client 184.169.240.7:46488] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aTORN9wK_fe00OH7zy4tcQAAANA"]
[Sat Dec 06 10:13:12.174079 2025] [:error] [pid 35622:tid 35659] [client 184.169.240.7:46496] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i.php"] [unique_id "aTOROCOSP_9DVLgFwI5w4gAAAYg"]
[Sat Dec 06 10:13:12.843790 2025] [:error] [pid 52809:tid 52832] [client 184.169.240.7:46508] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "aTOROOrRwgsmpIJQ2qYeiAAAAhU"]
[Sat Dec 06 10:13:13.521035 2025] [:error] [pid 35621:tid 35639] [client 184.169.240.7:46520] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/errors.log"] [unique_id "aTOROUQGb3oZH9SdKQViWwAAAU8"]
[Sat Dec 06 10:13:14.202723 2025] [:error] [pid 35622:tid 35670] [client 184.169.240.7:46536] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/etc/env.php"] [unique_id "aTOROiOSP_9DVLgFwI5w5AAAAZM"]
[Sat Dec 06 10:13:14.893252 2025] [:error] [pid 35622:tid 35662] [client 184.169.240.7:50742] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logs/application.log"] [unique_id "aTOROiOSP_9DVLgFwI5w5QAAAYs"]
[Sat Dec 06 10:13:15.569679 2025] [:error] [pid 35591:tid 35600] [client 184.169.240.7:50748] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/logs/dev.log"] [unique_id "aTORO4bmw-7bFvTxc9PDvQAAAQc"]
[Sat Dec 06 10:13:16.252447 2025] [:error] [pid 35622:tid 35666] [client 184.169.240.7:50762] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/logs/prod.log"] [unique_id "aTORPCOSP_9DVLgFwI5w6AAAAY8"]
[Sat Dec 06 10:13:16.921057 2025] [:error] [pid 61215:tid 61240] [client 184.169.240.7:50766] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Thumbs.db"] [unique_id "aTORPOOOZ8nTCBYuI-z8vwAAABU"]
[Sat Dec 06 10:13:17.592451 2025] [:error] [pid 35622:tid 35658] [client 184.169.240.7:50782] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site-backup.zip"] [unique_id "aTORPSOSP_9DVLgFwI5w7AAAAYc"]
[Sat Dec 06 10:13:18.263911 2025] [:error] [pid 52809:tid 52829] [client 184.169.240.7:50786] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.tar.gz"] [unique_id "aTORPurRwgsmpIJQ2qYejQAAAhI"]
[Sat Dec 06 10:13:18.975108 2025] [:error] [pid 48399:tid 48424] [client 184.169.240.7:50800] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k8s-config.yml"] [unique_id "aTORPujNPOrIshd8EwduzgAAAdc"]
[Sat Dec 06 10:13:19.645713 2025] [:error] [pid 52809:tid 52831] [client 184.169.240.7:50806] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kubernetes.yml"] [unique_id "aTORP-rRwgsmpIJQ2qYejwAAAhQ"]
[Sat Dec 06 10:13:20.321388 2025] [:error] [pid 35622:tid 35673] [client 184.169.240.7:50816] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dockerignore"] [unique_id "aTORQCOSP_9DVLgFwI5w7wAAAZY"]
[Sat Dec 06 10:13:21.013225 2025] [:error] [pid 61217:tid 61285] [client 184.169.240.7:50826] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.docker/config.json"] [unique_id "aTORQVdSKQYfLI3fYo46ZQAAAIw"]
[Sat Dec 06 10:13:21.695357 2025] [:error] [pid 61215:tid 61234] [client 184.169.240.7:50840] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dockerenv"] [unique_id "aTORQeOOZ8nTCBYuI-z8xQAAAA8"]
[Sat Dec 06 10:13:22.378109 2025] [:error] [pid 61217:tid 61295] [client 184.169.240.7:50848] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docker-compose.override.yml"] [unique_id "aTORQldSKQYfLI3fYo46bAAAAJY"]
[Sat Dec 06 10:13:23.059785 2025] [:error] [pid 35622:tid 35660] [client 184.169.240.7:50860] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docker-compose.yaml"] [unique_id "aTORQyOSP_9DVLgFwI5w8QAAAYk"]
[Sat Dec 06 10:13:23.732677 2025] [:error] [pid 61215:tid 61221] [client 184.169.240.7:50874] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/security.txt"] [unique_id "aTORQ-OOZ8nTCBYuI-z8xwAAAAI"]
[Sat Dec 06 10:13:24.406474 2025] [:error] [pid 52809:tid 52830] [client 184.169.240.7:50888] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/v2/config"] [unique_id "aTORROrRwgsmpIJQ2qYekwAAAhM"]
[Sat Dec 06 10:13:25.090281 2025] [:error] [pid 35622:tid 35668] [client 184.169.240.7:44174] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.secrets"] [unique_id "aTORRSOSP_9DVLgFwI5w8gAAAZE"]
[Sat Dec 06 10:13:25.771071 2025] [:error] [pid 61217:tid 61293] [client 184.169.240.7:44186] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oauth.json"] [unique_id "aTORRVdSKQYfLI3fYo46bQAAAJQ"]
[Sat Dec 06 10:13:26.446093 2025] [:error] [pid 61303:tid 61319] [client 184.169.240.7:44188] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tokens.json"] [unique_id "aTORRtwK_fe00OH7zy4thwAAAM0"]
[Sat Dec 06 10:13:27.119075 2025] [:error] [pid 61303:tid 61329] [client 184.169.240.7:44190] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/keys.json"] [unique_id "aTORR9wK_fe00OH7zy4tiQAAANY"]
[Sat Dec 06 10:13:27.798332 2025] [:error] [pid 61303:tid 61314] [client 184.169.240.7:44194] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/credentials.json"] [unique_id "aTORR9wK_fe00OH7zy4tiwAAAMg"]
[Sat Dec 06 10:13:28.481590 2025] [:error] [pid 61217:tid 61274] [client 184.169.240.7:44202] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.api_keys"] [unique_id "aTORSFdSKQYfLI3fYo46cQAAAIE"]
[Sat Dec 06 10:13:29.152212 2025] [:error] [pid 61217:tid 61287] [client 184.169.240.7:44210] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/apikeys.json"] [unique_id "aTORSVdSKQYfLI3fYo46dQAAAI4"]
[Sat Dec 06 10:13:29.822793 2025] [:error] [pid 61217:tid 61273] [client 184.169.240.7:44226] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api_keys.json"] [unique_id "aTORSVdSKQYfLI3fYo46dgAAAIA"]
[Sat Dec 06 10:13:30.501666 2025] [:error] [pid 52809:tid 52829] [client 184.169.240.7:44234] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.yml"] [unique_id "aTORSurRwgsmpIJQ2qYelgAAAhI"]
[Sat Dec 06 10:13:31.176061 2025] [:error] [pid 35591:tid 35610] [client 184.169.240.7:44240] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secrets.json"] [unique_id "aTORS4bmw-7bFvTxc9PD3wAAARE"]
[Sat Dec 06 10:13:31.848468 2025] [:error] [pid 61215:tid 61228] [client 184.169.240.7:44252] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.azure/credentials"] [unique_id "aTORS-OOZ8nTCBYuI-z8zQAAAAk"]
[Sat Dec 06 10:13:32.533646 2025] [:error] [pid 35622:tid 35653] [client 184.169.240.7:44260] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azure.json"] [unique_id "aTORTCOSP_9DVLgFwI5w8wAAAYI"]
[Sat Dec 06 10:13:33.206125 2025] [:error] [pid 48399:tid 48403] [client 184.169.240.7:44274] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gcp-credentials.json"] [unique_id "aTORTejNPOrIshd8Ewdu0QAAAcI"]
[Sat Dec 06 10:13:33.888615 2025] [:error] [pid 61215:tid 61229] [client 184.169.240.7:44278] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.gcloud/credentials"] [unique_id "aTORTeOOZ8nTCBYuI-z80AAAAAo"]
[Sat Dec 06 10:13:34.577864 2025] [:error] [pid 61215:tid 61237] [client 184.169.240.7:42606] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s3.yml"] [unique_id "aTORTuOOZ8nTCBYuI-z80gAAABI"]
[Sat Dec 06 10:13:35.262030 2025] [:error] [pid 61216:tid 61255] [client 184.169.240.7:42610] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.s3cfg"] [unique_id "aTORTzHlXXVdP5ewviWrqQAAAEk"]
[Sat Dec 06 10:13:35.937588 2025] [:error] [pid 61215:tid 61221] [client 184.169.240.7:42622] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.aws/config"] [unique_id "aTORT-OOZ8nTCBYuI-z81QAAAAI"]
[Sat Dec 06 10:13:36.619341 2025] [:error] [pid 48399:tid 48408] [client 184.169.240.7:42626] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.2"] [unique_id "aTORUOjNPOrIshd8Ewdu1wAAAcc"]
[Sat Dec 06 10:13:37.299460 2025] [:error] [pid 61216:tid 61266] [client 184.169.240.7:42640] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aTORUTHlXXVdP5ewviWrwQAAAFQ"]
[Sat Dec 06 10:13:37.973898 2025] [:error] [pid 35622:tid 35665] [client 184.169.240.7:42642] [client 184.169.240.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aTORUSOSP_9DVLgFwI5w-QAAAY4"]
[Sat Dec 06 10:13:38.649470 2025] [:error] [pid 48399:tid 48419] [client 184.169.240.7:42650] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testphp.php"] [unique_id "aTORUujNPOrIshd8Ewdu2AAAAdI"]
[Sat Dec 06 10:13:39.330240 2025] [:error] [pid 61217:tid 61289] [client 184.169.240.7:42658] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infophp.php"] [unique_id "aTORU1dSKQYfLI3fYo46eAAAAJA"]
[Sat Dec 06 10:13:40.003743 2025] [:error] [pid 35622:tid 35657] [client 184.169.240.7:42674] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php-info.php"] [unique_id "aTORVCOSP_9DVLgFwI5xAAAAAYY"]
[Sat Dec 06 10:13:40.682411 2025] [:error] [pid 35591:tid 35603] [client 184.169.240.7:42684] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info_php.php"] [unique_id "aTORVIbmw-7bFvTxc9PD6AAAAQo"]
[Sat Dec 06 10:13:41.355875 2025] [:error] [pid 61216:tid 61258] [client 184.169.240.7:42690] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aTORVTHlXXVdP5ewviWr4AAAAEw"]
[Sat Dec 06 10:13:42.028747 2025] [:error] [pid 48399:tid 48410] [client 184.169.240.7:42704] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aTORVujNPOrIshd8Ewdu2wAAAck"]
[Sat Dec 06 10:13:42.698476 2025] [:error] [pid 61215:tid 61239] [client 184.169.240.7:42714] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aTORVuOOZ8nTCBYuI-z86QAAABQ"]
[Sat Dec 06 10:13:43.372336 2025] [:error] [pid 35591:tid 35612] [client 184.169.240.7:42716] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aTORV4bmw-7bFvTxc9PD7gAAARM"]
[Sat Dec 06 10:13:44.067807 2025] [:error] [pid 35622:tid 35661] [client 184.169.240.7:42730] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aTORWCOSP_9DVLgFwI5xBAAAAYo"]
[Sat Dec 06 10:13:44.740353 2025] [:error] [pid 61217:tid 61273] [client 184.169.240.7:48544] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/probe.php"] [unique_id "aTORWFdSKQYfLI3fYo46ggAAAIA"]
[Sat Dec 06 10:13:45.421762 2025] [:error] [pid 35591:tid 35601] [client 184.169.240.7:48558] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aTORWYbmw-7bFvTxc9PD8AAAAQg"]
[Sat Dec 06 10:13:46.098114 2025] [:error] [pid 61303:tid 61318] [client 184.169.240.7:48572] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phptest.php"] [unique_id "aTORWtwK_fe00OH7zy4tlwAAAMw"]
[Sat Dec 06 10:13:46.779395 2025] [:error] [pid 61217:tid 61294] [client 184.169.240.7:48586] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diagnostic.php"] [unique_id "aTORWldSKQYfLI3fYo46hAAAAJU"]
[Sat Dec 06 10:13:47.460701 2025] [:error] [pid 48399:tid 48404] [client 184.169.240.7:48592] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aTORW-jNPOrIshd8Ewdu3QAAAcM"]
[Sat Dec 06 10:13:48.147245 2025] [:error] [pid 61303:tid 61328] [client 184.169.240.7:48598] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/serverinfo.php"] [unique_id "aTORXNwK_fe00OH7zy4tmAAAANU"]
[Sat Dec 06 10:13:48.818721 2025] [:error] [pid 61215:tid 61225] [client 184.169.240.7:48610] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpversion.php"] [unique_id "aTORXOOOZ8nTCBYuI-z87gAAAAY"]
[Sat Dec 06 10:13:49.495413 2025] [:error] [pid 48399:tid 48403] [client 184.169.240.7:48618] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info3.php"] [unique_id "aTORXejNPOrIshd8Ewdu3gAAAcI"]
[Sat Dec 06 10:13:50.179372 2025] [:error] [pid 35621:tid 35641] [client 184.169.240.7:48624] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info2.php"] [unique_id "aTORXkQGb3oZH9SdKQViZwAAAVE"]
[Sat Dec 06 10:13:50.855480 2025] [:error] [pid 35622:tid 35661] [client 184.169.240.7:48630] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info1.php"] [unique_id "aTORXiOSP_9DVLgFwI5xDgAAAYo"]
[Sat Dec 06 10:13:51.531137 2025] [:error] [pid 48399:tid 48413] [client 184.169.240.7:48646] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_info.php"] [unique_id "aTORX-jNPOrIshd8Ewdu4gAAAcw"]
[Sat Dec 06 10:13:52.215601 2025] [:error] [pid 48399:tid 48414] [client 184.169.240.7:48656] [client 184.169.240.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_version.php"] [unique_id "aTORYOjNPOrIshd8Ewdu4wAAAc0"]
[Sat Dec 06 15:53:38.417848 2025] [:error] [pid 1838:tid 1870] [client 182.42.105.144:58544] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTPhAi5zgnu67Yo7vrbIvgAAApg"]
[Sat Dec 06 18:58:02.355451 2025] [:error] [pid 1838:tid 1859] [client 35.163.58.243:44348] [client 35.163.58.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/"] [unique_id "aTQMOi5zgnu67Yo7vrb8YgAAAo0"]
[Sat Dec 06 18:58:03.124218 2025] [:error] [pid 52809:tid 52830] [client 35.163.58.243:56294] [client 35.163.58.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aTQMO-rRwgsmpIJQ2qZv-wAAAhM"]
[Sat Dec 06 22:04:52.437949 2025] [:error] [pid 61216:tid 61257] [client 49.233.45.47:56248] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTQ4BDHlXXVdP5ewviU-pgAAAEs"]
[Sun Dec 07 04:10:24.516166 2025] [:error] [pid 54256:tid 54269] [client 192.144.148.122:51694] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTSNsE7RqH3iYqnrtafhkwAAAMs"]
[Sun Dec 07 04:11:46.186657 2025] [:error] [pid 34108:tid 34114] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Sun Dec 07 04:11:46.452182 2025] [:error] [pid 34108:tid 34131] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Sun Dec 07 04:11:46.473493 2025] [:error] [pid 34108:tid 34128] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o2.php
[Sun Dec 07 04:11:46.668507 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/777.php
[Sun Dec 07 04:11:46.704603 2025] [:error] [pid 34108:tid 34119] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Dec 07 04:11:46.724408 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/raw.php
[Sun Dec 07 04:11:46.757757 2025] [:error] [pid 34108:tid 34136] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sun Dec 07 04:11:46.783157 2025] [:error] [pid 34108:tid 34137] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Dec 07 04:11:46.803894 2025] [:error] [pid 34108:tid 34130] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/efile.php
[Sun Dec 07 04:11:46.824083 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:39691] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Dec 07 04:11:46.860239 2025] [:error] [pid 34108:tid 34113] [client 4.197.100.82:39691] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTSOAqLvdvAppF-gXov7fwAAAAA"]
[Sun Dec 07 04:11:47.228561 2025] [:error] [pid 34109:tid 34148] [client 4.197.100.82:41773] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTSOA4jE_vucgM_xD4TNUwAAAEg"]
[Sun Dec 07 04:11:47.834646 2025] [:error] [pid 34110:tid 34183] [client 4.197.100.82:39734] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTSOAwndtmtsHiXHBO1s9gAAAJA"]
[Sun Dec 07 04:11:48.606409 2025] [:error] [pid 34109:tid 34156] [client 4.197.100.82:9468] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTSOBIjE_vucgM_xD4TNVQAAAFA"]
[Sun Dec 07 04:11:49.477071 2025] [:error] [pid 34108:tid 34121] [client 4.197.100.82:41774] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aTSOBaLvdvAppF-gXov7gAAAAAg"]
[Sun Dec 07 04:11:49.961008 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:41781] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aTSOBRrSxOOdwv3vX3wmTgAAAMc"]
[Sun Dec 07 04:11:50.416272 2025] [:error] [pid 34110:tid 34167] [client 4.197.100.82:41747] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aTSOBgndtmtsHiXHBO1s-gAAAIA"]
[Sun Dec 07 04:11:51.029975 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:41737] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aTSOB4jE_vucgM_xD4TNWQAAAEY"]
[Sun Dec 07 04:11:51.699645 2025] [:error] [pid 34110:tid 34170] [client 4.197.100.82:9439] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aTSOBwndtmtsHiXHBO1s_AAAAIM"]
[Sun Dec 07 04:11:52.446830 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:41779] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aTSOCBrSxOOdwv3vX3wmTwAAAMU"]
[Sun Dec 07 04:11:52.945779 2025] [:error] [pid 34109:tid 34162] [client 4.197.100.82:9428] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aTSOCIjE_vucgM_xD4TNXAAAAFY"]
[Sun Dec 07 04:11:54.781373 2025] [:error] [pid 34108:tid 34127] [client 4.197.100.82:39709] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aTSOCqLvdvAppF-gXov7hQAAAA4"]
[Sun Dec 07 04:11:55.843793 2025] [:error] [pid 34108:tid 34114] [client 4.197.100.82:9438] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aTSOC6LvdvAppF-gXov7hwAAAAE"]
[Sun Dec 07 04:11:56.867460 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:39730] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aTSODBrSxOOdwv3vX3wmVAAAANI"]
[Sun Dec 07 04:11:57.614376 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:39681] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aTSODaLvdvAppF-gXov7iAAAABM"]
[Sun Dec 07 04:11:58.289503 2025] [:error] [pid 34110:tid 34175] [client 4.197.100.82:39706] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aTSODgndtmtsHiXHBO1s_gAAAIg"]
[Sun Dec 07 04:11:58.798430 2025] [:error] [pid 34110:tid 34174] [client 4.197.100.82:39717] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aTSODgndtmtsHiXHBO1tAAAAAIc"]
[Sun Dec 07 04:11:59.492064 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:41740] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aTSOD6LvdvAppF-gXov7iwAAABU"]
[Sun Dec 07 04:11:59.844515 2025] [:error] [pid 34108:tid 34136] [client 4.197.100.82:9459] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aTSOD6LvdvAppF-gXov7jAAAABc"]
[Sun Dec 07 04:11:59.994063 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:9444] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aTSODxrSxOOdwv3vX3wmYQAAAMY"]
[Sun Dec 07 04:12:00.754065 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:41736] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "aTSOEKLvdvAppF-gXov7kQAAAAo"]
[Sun Dec 07 04:12:01.156129 2025] [:error] [pid 34108:tid 34113] [client 4.197.100.82:41750] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "aTSOEaLvdvAppF-gXov7kgAAAAA"]
[Sun Dec 07 04:12:01.471476 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:39712] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "aTSOERrSxOOdwv3vX3wmYwAAAMc"]
[Sun Dec 07 04:12:01.992324 2025] [:error] [pid 34108:tid 34121] [client 4.197.100.82:41777] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "aTSOEaLvdvAppF-gXov7kwAAAAg"]
[Sun Dec 07 04:12:02.172871 2025] [:error] [pid 34108:tid 34120] [client 4.197.100.82:41790] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aTSOEqLvdvAppF-gXov7lgAAAAc"]
[Sun Dec 07 04:12:03.117441 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:9430] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aTSOExrSxOOdwv3vX3wmZwAAANM"]
[Sun Dec 07 04:12:03.704735 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:9425] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aTSOExrSxOOdwv3vX3wmaAAAAMM"]
[Sun Dec 07 04:12:03.890960 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:41735] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aTSOExrSxOOdwv3vX3wmaQAAANg"]
[Sun Dec 07 04:12:04.318610 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:9451] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTSOFAndtmtsHiXHBO1tBgAAAI4"]
[Sun Dec 07 04:12:05.094654 2025] [:error] [pid 34110:tid 34186] [client 4.197.100.82:39692] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTSOFQndtmtsHiXHBO1tCQAAAJM"]
[Sun Dec 07 04:12:05.488051 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:9421] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTSOFaLvdvAppF-gXov7nAAAABU"]
[Sun Dec 07 04:12:05.754543 2025] [:error] [pid 34108:tid 34136] [client 4.197.100.82:39727] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTSOFaLvdvAppF-gXov7nQAAABc"]
[Sun Dec 07 04:12:06.563712 2025] [:error] [pid 34108:tid 34131] [client 4.197.100.82:9436] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTSOFqLvdvAppF-gXov7pAAAABI"]
[Sun Dec 07 04:12:07.015433 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:41791] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTSOFxrSxOOdwv3vX3wmbAAAAMA"]
[Sun Dec 07 04:12:08.245668 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:39738] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTSOGKLvdvAppF-gXov7rgAAABU"]
[Sun Dec 07 04:12:08.466108 2025] [:error] [pid 34195:tid 34211] [client 4.197.100.82:9411] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTSOGBrSxOOdwv3vX3wmcAAAAM0"]
[Sun Dec 07 04:12:08.723754 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:39705] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTSOGIjE_vucgM_xD4TNZwAAAFI"]
[Sun Dec 07 04:12:09.085566 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:39736] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTSOGQndtmtsHiXHBO1tDAAAAII"]
[Sun Dec 07 04:12:09.703701 2025] [:error] [pid 34110:tid 34173] [client 4.197.100.82:39704] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTSOGQndtmtsHiXHBO1tDwAAAIY"]
[Sun Dec 07 04:12:09.974184 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:9820] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTSOGRrSxOOdwv3vX3wmcwAAAM8"]
[Sun Dec 07 04:12:10.642125 2025] [:error] [pid 34195:tid 34208] [client 4.197.100.82:9410] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aTSOGhrSxOOdwv3vX3wmdgAAAMo"]
[Sun Dec 07 04:12:10.962773 2025] [:error] [pid 34195:tid 34210] [client 4.197.100.82:9806] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aTSOGhrSxOOdwv3vX3wmeAAAAMw"]
[Sun Dec 07 04:12:11.303624 2025] [:error] [pid 34109:tid 34161] [client 4.197.100.82:41782] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aTSOG4jE_vucgM_xD4TNagAAAFU"]
[Sun Dec 07 04:12:12.090086 2025] [:error] [pid 34110:tid 34183] [client 4.197.100.82:39685] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aTSOHAndtmtsHiXHBO1tEQAAAJA"]
[Sun Dec 07 04:12:12.718801 2025] [:error] [pid 34109:tid 34141] [client 4.197.100.82:41754] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTSOHIjE_vucgM_xD4TNbAAAAEE"]
[Sun Dec 07 04:12:13.397704 2025] [:error] [pid 34109:tid 34154] [client 4.197.100.82:41761] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTSOHYjE_vucgM_xD4TNbwAAAE4"]
[Sun Dec 07 04:12:14.015722 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:10209] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTSOHojE_vucgM_xD4TNcQAAAEo"]
[Sun Dec 07 04:12:15.184751 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:41787] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTSOHxrSxOOdwv3vX3wmfQAAANU"]
[Sun Dec 07 04:12:15.838847 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:41729] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "aTSOH4jE_vucgM_xD4TNdgAAAFI"]
[Sun Dec 07 04:12:17.132209 2025] [:error] [pid 34110:tid 34167] [client 4.197.100.82:39728] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "aTSOIQndtmtsHiXHBO1tFgAAAIA"]
[Sun Dec 07 04:12:18.062600 2025] [:error] [pid 34109:tid 34144] [client 4.197.100.82:10231] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "aTSOIojE_vucgM_xD4TNeQAAAEQ"]
[Sun Dec 07 04:12:18.793829 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:9450] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "aTSOIqLvdvAppF-gXov7ugAAABM"]
[Sun Dec 07 04:12:19.539851 2025] [:error] [pid 34109:tid 34140] [client 4.197.100.82:9453] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTSOI4jE_vucgM_xD4TNgAAAAEA"]
[Sun Dec 07 04:12:19.991685 2025] [:error] [pid 34108:tid 34130] [client 4.197.100.82:41751] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTSOI6LvdvAppF-gXov7vAAAABE"]
[Sun Dec 07 04:12:21.556767 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:39684] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTSOJYjE_vucgM_xD4TNhAAAAFI"]
[Sun Dec 07 04:12:21.945376 2025] [:error] [pid 34110:tid 34171] [client 4.197.100.82:10210] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTSOJQndtmtsHiXHBO1tGwAAAIQ"]
[Sun Dec 07 04:12:22.580638 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:41758] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aTSOJhrSxOOdwv3vX3wmgQAAANQ"]
[Sun Dec 07 04:12:24.522613 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:41744] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aTSOKIjE_vucgM_xD4TNiwAAAE0"]
[Sun Dec 07 04:12:25.326537 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:10070] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aTSOKQndtmtsHiXHBO1tIgAAAJU"]
[Sun Dec 07 04:12:25.893709 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:9437] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aTSOKRrSxOOdwv3vX3wmhAAAAM8"]
[Sun Dec 07 04:12:26.917297 2025] [:error] [pid 34195:tid 34208] [client 4.197.100.82:9456] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aTSOKhrSxOOdwv3vX3wmhwAAAMo"]
[Sun Dec 07 04:12:27.270338 2025] [:error] [pid 34110:tid 34184] [client 4.197.100.82:9454] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aTSOKwndtmtsHiXHBO1tKAAAAJE"]
[Sun Dec 07 04:12:28.011701 2025] [:error] [pid 34110:tid 34185] [client 4.197.100.82:41745] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aTSOLAndtmtsHiXHBO1tKgAAAJI"]
[Sun Dec 07 04:12:28.344154 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:41748] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "aTSOLBrSxOOdwv3vX3wmiwAAAMI"]
[Sun Dec 07 04:12:28.624157 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:9412] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aTSOLBrSxOOdwv3vX3wmjQAAANI"]
[Sun Dec 07 04:12:29.166618 2025] [:error] [pid 34108:tid 34127] [client 4.197.100.82:41786] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aTSOLaLvdvAppF-gXov7yAAAAA4"]
[Sun Dec 07 04:12:29.925457 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9449] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aTSOLRrSxOOdwv3vX3wmlAAAAME"]
[Sun Dec 07 04:12:30.347098 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9434] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aTSOLhrSxOOdwv3vX3wmlQAAAM4"]
[Sun Dec 07 04:12:30.599366 2025] [:error] [pid 34109:tid 34142] [client 4.197.100.82:10226] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTSOLojE_vucgM_xD4TNnwAAAEI"]
[Sun Dec 07 04:12:31.035995 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:10224] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTSOL6LvdvAppF-gXov7yQAAABU"]
[Sun Dec 07 04:12:31.504849 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:9427] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTSOLwndtmtsHiXHBO1tLwAAAI4"]
[Sun Dec 07 04:12:31.972619 2025] [:error] [pid 34108:tid 34113] [client 4.197.100.82:9467] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTSOL6LvdvAppF-gXov7zAAAAAA"]
[Sun Dec 07 04:12:32.337650 2025] [:error] [pid 34108:tid 34118] [client 4.197.100.82:9460] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aTSOMKLvdvAppF-gXov7zgAAAAU"]
[Sun Dec 07 04:12:33.288504 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:9464] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aTSOMRrSxOOdwv3vX3wmmwAAANc"]
[Sun Dec 07 04:12:33.849785 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:41776] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aTSOMQndtmtsHiXHBO1tNAAAAIE"]
[Sun Dec 07 04:12:34.598644 2025] [:error] [pid 34110:tid 34191] [client 4.197.100.82:41755] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aTSOMgndtmtsHiXHBO1tNwAAAJg"]
[Sun Dec 07 04:12:35.454497 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:10237] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aTSOM4jE_vucgM_xD4TNqAAAAEs"]
[Sun Dec 07 04:12:36.286160 2025] [:error] [pid 34110:tid 34178] [client 4.197.100.82:9408] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aTSONAndtmtsHiXHBO1tOgAAAIs"]
[Sun Dec 07 04:12:36.788379 2025] [:error] [pid 34108:tid 34128] [client 4.197.100.82:41753] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aTSONKLvdvAppF-gXov71wAAAA8"]
[Sun Dec 07 04:12:37.253354 2025] [:error] [pid 34110:tid 34180] [client 4.197.100.82:39740] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aTSONQndtmtsHiXHBO1tPAAAAI0"]
[Sun Dec 07 04:12:37.466428 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:9443] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTSONQndtmtsHiXHBO1tPQAAAJU"]
[Sun Dec 07 04:12:37.975461 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:9470] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTSONRrSxOOdwv3vX3wmpwAAAMI"]
[Sun Dec 07 04:12:38.748040 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9457] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTSONhrSxOOdwv3vX3wmqwAAAM4"]
[Sun Dec 07 04:12:39.278481 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:41732] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTSONwndtmtsHiXHBO1tQAAAAIw"]
[Sun Dec 07 04:12:39.733315 2025] [:error] [pid 34110:tid 34190] [client 4.197.100.82:10069] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aTSONwndtmtsHiXHBO1tQQAAAJc"]
[Sun Dec 07 04:12:40.417081 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:41763] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aTSOOBrSxOOdwv3vX3wmsQAAANI"]
[Sun Dec 07 04:12:40.645401 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:9419] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aTSOOBrSxOOdwv3vX3wmtQAAAMI"]
[Sun Dec 07 04:12:40.979998 2025] [:error] [pid 34110:tid 34173] [client 4.197.100.82:9463] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aTSOOAndtmtsHiXHBO1tRgAAAIY"]
[Sun Dec 07 04:12:41.542193 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:10235] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-is.php"] [unique_id "aTSOORrSxOOdwv3vX3wmugAAANg"]
[Sun Dec 07 04:12:42.092328 2025] [:error] [pid 34108:tid 34129] [client 4.197.100.82:9798] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-is.php"] [unique_id "aTSOOqLvdvAppF-gXov73gAAABA"]
[Sun Dec 07 04:12:42.424177 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:41762] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-is.php"] [unique_id "aTSOOhrSxOOdwv3vX3wmvwAAANU"]
[Sun Dec 07 04:12:42.887374 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:41764] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-is.php"] [unique_id "aTSOOhrSxOOdwv3vX3wmwQAAAMA"]
[Sun Dec 07 04:12:43.751023 2025] [:error] [pid 34110:tid 34189] [client 4.197.100.82:9420] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aTSOOwndtmtsHiXHBO1tSgAAAJY"]
[Sun Dec 07 04:12:44.616736 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:41765] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aTSOPBrSxOOdwv3vX3wmxwAAANU"]
[Sun Dec 07 04:12:45.316948 2025] [:error] [pid 34110:tid 34184] [client 4.197.100.82:9461] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aTSOPQndtmtsHiXHBO1tTQAAAJE"]
[Sun Dec 07 04:12:46.040397 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun Dec 07 04:12:46.058702 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Sun Dec 07 04:12:46.091857 2025] [:error] [pid 34195:tid 34211] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Dec 07 04:12:46.110040 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Dec 07 04:12:46.154215 2025] [:error] [pid 34195:tid 34208] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Dec 07 04:12:46.319715 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/asas.php
[Sun Dec 07 04:12:46.434070 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sun Dec 07 04:12:46.452745 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Dec 07 04:12:46.472649 2025] [:error] [pid 34195:tid 34209] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Sun Dec 07 04:12:46.494496 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Sun Dec 07 04:12:46.517345 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:41756] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sun Dec 07 04:12:46.677760 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:41756] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "aTSOPhrSxOOdwv3vX3wm2AAAAMY"]
[Sun Dec 07 04:12:47.154909 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:9431] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "aTSOPwndtmtsHiXHBO1tUAAAAII"]
[Sun Dec 07 04:12:47.715263 2025] [:error] [pid 34110:tid 34186] [client 4.197.100.82:9442] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "aTSOPwndtmtsHiXHBO1tUQAAAJM"]
[Sun Dec 07 04:12:48.468941 2025] [:error] [pid 34110:tid 34182] [client 4.197.100.82:10063] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "aTSOQAndtmtsHiXHBO1tWAAAAI8"]
[Sun Dec 07 04:12:48.881163 2025] [:error] [pid 34110:tid 34175] [client 4.197.100.82:9426] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aTSOQAndtmtsHiXHBO1tWQAAAIg"]
[Sun Dec 07 04:12:49.157969 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:9409] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aTSOQRrSxOOdwv3vX3wm2QAAAMM"]
[Sun Dec 07 04:12:50.017986 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:10181] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aTSOQojE_vucgM_xD4TNrgAAAE0"]
[Sun Dec 07 04:12:50.184403 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:39710] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aTSOQojE_vucgM_xD4TNsAAAAEs"]
[Sun Dec 07 04:12:50.330152 2025] [:error] [pid 34108:tid 34124] [client 4.197.100.82:10182] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aTSOQqLvdvAppF-gXov75gAAAAs"]
[Sun Dec 07 04:12:50.651069 2025] [:error] [pid 34108:tid 34121] [client 4.197.100.82:39683] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aTSOQqLvdvAppF-gXov75wAAAAg"]
[Sun Dec 07 04:12:51.456134 2025] [:error] [pid 34108:tid 34129] [client 4.197.100.82:10213] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aTSOQ6LvdvAppF-gXov76gAAABA"]
[Sun Dec 07 04:12:52.491968 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:10179] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aTSORKLvdvAppF-gXov77QAAABY"]
[Sun Dec 07 04:12:52.952078 2025] [:error] [pid 34109:tid 34142] [client 4.197.100.82:39700] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aTSORIjE_vucgM_xD4TNsgAAAEI"]
[Sun Dec 07 04:12:53.758195 2025] [:error] [pid 34108:tid 34137] [client 4.197.100.82:10207] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aTSORaLvdvAppF-gXov78AAAABg"]
[Sun Dec 07 04:12:55.644463 2025] [:error] [pid 34109:tid 34149] [client 4.197.100.82:9416] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aTSOR4jE_vucgM_xD4TNtAAAAEk"]
[Sun Dec 07 04:12:57.146965 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:10065] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "aTSOSRrSxOOdwv3vX3wm4wAAANc"]
[Sun Dec 07 04:12:58.231783 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:10185] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aTSOSojE_vucgM_xD4TNtQAAAEY"]
[Sun Dec 07 04:12:59.598663 2025] [:error] [pid 34110:tid 34178] [client 4.197.100.82:39697] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aTSOSwndtmtsHiXHBO1tZgAAAIs"]
[Sun Dec 07 04:13:01.598671 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:41769] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aTSOTRrSxOOdwv3vX3wm5QAAANA"]
[Sun Dec 07 04:13:01.927006 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:9469] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aTSOTRrSxOOdwv3vX3wm6AAAANY"]
[Sun Dec 07 04:13:02.535229 2025] [:error] [pid 34109:tid 34152] [client 4.197.100.82:9853] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aTSOTojE_vucgM_xD4TNuQAAAEw"]
[Sun Dec 07 04:13:05.299160 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:41775] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aTSOURrSxOOdwv3vX3wm6wAAANI"]
[Sun Dec 07 04:13:05.623463 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9837] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aTSOURrSxOOdwv3vX3wm7AAAAME"]
[Sun Dec 07 04:13:06.239568 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:9462] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "aTSOUhrSxOOdwv3vX3wm7gAAAMc"]
[Sun Dec 07 04:13:06.998267 2025] [:error] [pid 34108:tid 34125] [client 4.197.100.82:9433] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTSOUqLvdvAppF-gXov8BAAAAAw"]
[Sun Dec 07 04:13:08.286221 2025] [:error] [pid 34109:tid 34157] [client 4.197.100.82:9739] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTSOVIjE_vucgM_xD4TNvwAAAFE"]
[Sun Dec 07 04:13:09.249729 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:9414] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTSOVYjE_vucgM_xD4TNwwAAAEY"]
[Sun Dec 07 04:13:09.557903 2025] [:error] [pid 34110:tid 34180] [client 4.197.100.82:39743] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aTSOVQndtmtsHiXHBO1tdgAAAI0"]
[Sun Dec 07 04:13:10.046355 2025] [:error] [pid 34110:tid 34174] [client 4.197.100.82:41742] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTSOVgndtmtsHiXHBO1tdwAAAIc"]
[Sun Dec 07 04:13:10.475929 2025] [:error] [pid 34110:tid 34189] [client 4.197.100.82:41746] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTSOVgndtmtsHiXHBO1teAAAAJY"]
[Sun Dec 07 04:13:12.363546 2025] [:error] [pid 34110:tid 34172] [client 4.197.100.82:9424] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTSOWAndtmtsHiXHBO1tegAAAIU"]
[Sun Dec 07 04:13:13.701680 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:39713] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aTSOWQndtmtsHiXHBO1tgAAAAIw"]
[Sun Dec 07 04:13:14.434674 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:9465] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTSOWhrSxOOdwv3vX3wm_gAAAMc"]
[Sun Dec 07 04:13:15.165617 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:39739] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTSOWxrSxOOdwv3vX3wnAgAAANc"]
[Sun Dec 07 04:13:15.341274 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:9809] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTSOWxrSxOOdwv3vX3wnBgAAAMI"]
[Sun Dec 07 04:13:15.815906 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:9816] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTSOWxrSxOOdwv3vX3wnCAAAANU"]
[Sun Dec 07 04:13:17.673078 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:39737] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTSOXQndtmtsHiXHBO1thQAAAII"]
[Sun Dec 07 04:13:18.076501 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:39720] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTSOXgndtmtsHiXHBO1tiAAAAIE"]
[Sun Dec 07 04:13:19.918567 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:10217] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTSOXxrSxOOdwv3vX3wnDwAAAMY"]
[Sun Dec 07 04:13:21.311963 2025] [:error] [pid 34110:tid 34177] [client 4.197.100.82:10086] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTSOYQndtmtsHiXHBO1tlQAAAIo"]
[Sun Dec 07 04:13:21.756297 2025] [:error] [pid 34110:tid 34167] [client 4.197.100.82:9415] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aTSOYQndtmtsHiXHBO1tlgAAAIA"]
[Sun Dec 07 04:13:22.162347 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:10225] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aTSOYhrSxOOdwv3vX3wnGwAAANQ"]
[Sun Dec 07 04:13:22.246857 2025] [:error] [pid 34109:tid 34163] [client 4.197.100.82:10194] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aTSOYojE_vucgM_xD4TN1QAAAFc"]
[Sun Dec 07 04:13:22.484822 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9792] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aTSOYhrSxOOdwv3vX3wnHQAAAME"]
[Sun Dec 07 04:13:23.203122 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:10203] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aTSOY6LvdvAppF-gXov8FQAAABY"]
[Sun Dec 07 04:13:23.858634 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:9829] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aTSOY4jE_vucgM_xD4TN3QAAAE0"]
[Sun Dec 07 04:13:24.312683 2025] [:error] [pid 34108:tid 34127] [client 4.197.100.82:41739] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aTSOZKLvdvAppF-gXov8FgAAAA4"]
[Sun Dec 07 04:13:24.804217 2025] [:error] [pid 34108:tid 34120] [client 4.197.100.82:10229] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aTSOZKLvdvAppF-gXov8GAAAAAc"]
[Sun Dec 07 04:13:25.091638 2025] [:error] [pid 34109:tid 34157] [client 4.197.100.82:10184] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aTSOZYjE_vucgM_xD4TN4AAAAFE"]
[Sun Dec 07 04:13:25.200518 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:10223] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aTSOZYjE_vucgM_xD4TN4QAAAEY"]
[Sun Dec 07 04:13:25.483539 2025] [:error] [pid 34109:tid 34145] [client 4.197.100.82:10048] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aTSOZYjE_vucgM_xD4TN4gAAAEU"]
[Sun Dec 07 04:13:25.883963 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:9812] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "aTSOZYjE_vucgM_xD4TN5AAAAFI"]
[Sun Dec 07 04:13:26.361362 2025] [:error] [pid 34109:tid 34147] [client 4.197.100.82:10178] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aTSOZojE_vucgM_xD4TN5gAAAEc"]
[Sun Dec 07 04:13:26.604834 2025] [:error] [pid 34110:tid 34173] [client 4.197.100.82:9834] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aTSOZgndtmtsHiXHBO1tpgAAAIY"]
[Sun Dec 07 04:13:26.793155 2025] [:error] [pid 34110:tid 34178] [client 4.197.100.82:39735] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aTSOZgndtmtsHiXHBO1tqAAAAIs"]
[Sun Dec 07 04:13:27.544303 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9446] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aTSOZxrSxOOdwv3vX3wnJAAAAM4"]
[Sun Dec 07 04:13:30.621166 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:10202] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aTSOahrSxOOdwv3vX3wnKgAAAME"]
[Sun Dec 07 04:13:30.872829 2025] [:error] [pid 34108:tid 34115] [client 4.197.100.82:10218] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aTSOaqLvdvAppF-gXov8JAAAAAI"]
[Sun Dec 07 04:13:31.084729 2025] [:error] [pid 34195:tid 34202] [client 4.197.100.82:10056] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aTSOaxrSxOOdwv3vX3wnKwAAAMQ"]
[Sun Dec 07 04:13:31.363995 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:9814] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aTSOa4jE_vucgM_xD4TN8AAAAEo"]
[Sun Dec 07 04:13:32.309986 2025] [:error] [pid 34110:tid 34174] [client 4.197.100.82:9804] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aTSObAndtmtsHiXHBO1tsQAAAIc"]
[Sun Dec 07 04:13:33.185167 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:39714] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aTSObaLvdvAppF-gXov8JwAAAAQ"]
[Sun Dec 07 04:13:34.381564 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:10055] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aTSObgndtmtsHiXHBO1tugAAAIE"]
[Sun Dec 07 04:13:35.053499 2025] [:error] [pid 34109:tid 34164] [client 4.197.100.82:10228] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aTSOb4jE_vucgM_xD4TN9AAAAFg"]
[Sun Dec 07 04:13:35.752238 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:39689] [client 4.197.100.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTSObxrSxOOdwv3vX3wnLgAAAMU"]
[Sun Dec 07 04:13:36.526083 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:10200] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "aTSOcBrSxOOdwv3vX3wnMQAAAMA"]
[Sun Dec 07 04:13:37.886003 2025] [:error] [pid 34110:tid 34189] [client 4.197.100.82:9811] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "aTSOcQndtmtsHiXHBO1twwAAAJY"]
[Sun Dec 07 04:13:38.494087 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:41778] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "aTSOchrSxOOdwv3vX3wnOwAAAME"]
[Sun Dec 07 04:13:39.733473 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:39694] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "aTSOcxrSxOOdwv3vX3wnPwAAANI"]
[Sun Dec 07 04:13:40.161928 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:9447] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aTSOdBrSxOOdwv3vX3wnQAAAANc"]
[Sun Dec 07 04:13:40.414757 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:39695] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aTSOdKLvdvAppF-gXov8KwAAABM"]
[Sun Dec 07 04:13:40.873391 2025] [:error] [pid 34108:tid 34116] [client 4.197.100.82:9458] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aTSOdKLvdvAppF-gXov8LQAAAAM"]
[Sun Dec 07 04:13:41.516698 2025] [:error] [pid 34108:tid 34115] [client 4.197.100.82:39716] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.phphttps://robertatimothy.com/wp-content/packed.php"] [unique_id "aTSOdaLvdvAppF-gXov8LwAAAAI"]
[Sun Dec 07 04:13:41.823890 2025] [:error] [pid 34108:tid 34127] [client 4.197.100.82:10192] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTSOdaLvdvAppF-gXov8MQAAAA4"]
[Sun Dec 07 04:13:42.103301 2025] [:error] [pid 34109:tid 34148] [client 4.197.100.82:9822] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTSOdojE_vucgM_xD4TN_AAAAEg"]
[Sun Dec 07 04:13:42.776148 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:39741] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTSOdqLvdvAppF-gXov8MwAAAAQ"]
[Sun Dec 07 04:13:43.562266 2025] [:error] [pid 34108:tid 34129] [client 4.197.100.82:9825] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTSOd6LvdvAppF-gXov8NQAAABA"]
[Sun Dec 07 04:13:43.850580 2025] [:error] [pid 34109:tid 34155] [client 4.197.100.82:9813] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aTSOd4jE_vucgM_xD4TOAQAAAE8"]
[Sun Dec 07 04:13:44.315475 2025] [:error] [pid 34109:tid 34154] [client 4.197.100.82:10085] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aTSOeIjE_vucgM_xD4TOBQAAAE4"]
[Sun Dec 07 04:13:44.921137 2025] [:error] [pid 34109:tid 34140] [client 4.197.100.82:41760] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aTSOeIjE_vucgM_xD4TOBgAAAEA"]
[Sun Dec 07 04:13:46.386057 2025] [:error] [pid 34110:tid 34187] [client 4.197.100.82:9831] File does not exist: /usr/local/apache/htdocs/suspended-page/nc.php
[Sun Dec 07 04:13:46.405803 2025] [:error] [pid 34110:tid 34175] [client 4.197.100.82:9831] File does not exist: /usr/local/apache/htdocs/suspended-page/file1.php
[Sun Dec 07 04:13:46.426969 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:9831] File does not exist: /usr/local/apache/htdocs/suspended-page/hook.php
[Sun Dec 07 04:13:46.445409 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:9831] [client 4.197.100.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTSOegndtmtsHiXHBO1tzQAAAIw"]
[Sun Dec 07 04:13:46.740388 2025] [:error] [pid 34108:tid 34119] [client 4.197.100.82:9826] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Sun Dec 07 04:13:46.764152 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:9826] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Sun Dec 07 04:13:46.791154 2025] [:error] [pid 34108:tid 34114] [client 4.197.100.82:9826] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Sun Dec 07 04:13:48.298793 2025] [:error] [pid 34108:tid 34114] [client 4.197.100.82:9826] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Dec 07 04:13:48.333722 2025] [:error] [pid 34108:tid 34122] [client 4.197.100.82:9826] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sun Dec 07 04:13:48.494006 2025] [:error] [pid 34108:tid 34125] [client 4.197.100.82:9826] File does not exist: /usr/local/apache/htdocs/suspended-page/wb.php
[Sun Dec 07 04:13:48.513062 2025] [:error] [pid 34108:tid 34128] [client 4.197.100.82:9826] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Dec 07 04:13:48.596731 2025] [:error] [pid 34108:tid 34133] [client 4.197.100.82:9826] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTSOfKLvdvAppF-gXov8QQAAABQ"]
[Sun Dec 07 04:13:48.857481 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:10199] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTSOfAndtmtsHiXHBO1t1AAAAIE"]
[Sun Dec 07 04:13:49.164413 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:9743] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTSOfRrSxOOdwv3vX3wnSgAAANc"]
[Sun Dec 07 04:13:49.556140 2025] [:error] [pid 34108:tid 34115] [client 4.197.100.82:39680] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTSOfaLvdvAppF-gXov8RQAAAAI"]
[Sun Dec 07 04:13:49.828536 2025] [:error] [pid 34108:tid 34121] [client 4.197.100.82:10059] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aTSOfaLvdvAppF-gXov8RgAAAAg"]
[Sun Dec 07 04:13:50.344071 2025] [:error] [pid 34109:tid 34162] [client 4.197.100.82:39696] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aTSOfojE_vucgM_xD4TODQAAAFY"]
[Sun Dec 07 04:13:50.564319 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:10196] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aTSOfojE_vucgM_xD4TODwAAAFI"]
[Sun Dec 07 04:13:50.967056 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:10211] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aTSOfojE_vucgM_xD4TOEQAAAE0"]
[Sun Dec 07 04:13:51.311825 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:10236] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aTSOf6LvdvAppF-gXov8SAAAAAQ"]
[Sun Dec 07 04:13:52.082519 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:41749] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aTSOgBrSxOOdwv3vX3wnTAAAANU"]
[Sun Dec 07 04:13:52.785656 2025] [:error] [pid 34110:tid 34173] [client 4.197.100.82:9841] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aTSOgAndtmtsHiXHBO1t2gAAAIY"]
[Sun Dec 07 04:13:54.284390 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:39715] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aTSOghrSxOOdwv3vX3wnUQAAAMY"]
[Sun Dec 07 04:13:55.819910 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:10176] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "aTSOgxrSxOOdwv3vX3wnVAAAAMI"]
[Sun Dec 07 04:13:57.878523 2025] [:error] [pid 34109:tid 34152] [client 4.197.100.82:9417] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "aTSOhYjE_vucgM_xD4TOFQAAAEw"]
[Sun Dec 07 04:13:58.808654 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:10049] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "aTSOhojE_vucgM_xD4TOGAAAAEo"]
[Sun Dec 07 04:13:59.691831 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:10220] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "aTSOhxrSxOOdwv3vX3wnWAAAANI"]
[Sun Dec 07 04:13:59.885610 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:9423] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aTSOhxrSxOOdwv3vX3wnWgAAANA"]
[Sun Dec 07 04:14:00.204900 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:10180] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aTSOiBrSxOOdwv3vX3wnWwAAAMU"]
[Sun Dec 07 04:14:00.784226 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:9852] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aTSOiKLvdvAppF-gXov8UQAAABM"]
[Sun Dec 07 04:14:01.484025 2025] [:error] [pid 34109:tid 34147] [client 4.197.100.82:9835] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aTSOiYjE_vucgM_xD4TOGQAAAEc"]
[Sun Dec 07 04:14:02.293916 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:39732] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mnkalo.php"] [unique_id "aTSOiqLvdvAppF-gXov8WwAAABU"]
[Sun Dec 07 04:14:03.102221 2025] [:error] [pid 34108:tid 34125] [client 4.197.100.82:39688] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mnkalo.php"] [unique_id "aTSOi6LvdvAppF-gXov8YQAAAAw"]
[Sun Dec 07 04:14:03.267714 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:9735] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mnkalo.php"] [unique_id "aTSOixrSxOOdwv3vX3wnXAAAAMA"]
[Sun Dec 07 04:14:03.851814 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:10050] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mnkalo.php"] [unique_id "aTSOixrSxOOdwv3vX3wnYQAAANg"]
[Sun Dec 07 04:14:04.326299 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:10186] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aTSOjBrSxOOdwv3vX3wnYwAAANM"]
[Sun Dec 07 04:14:05.283123 2025] [:error] [pid 34195:tid 34210] [client 4.197.100.82:9422] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aTSOjRrSxOOdwv3vX3wnZQAAAMw"]
[Sun Dec 07 04:14:05.916620 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:10198] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aTSOjYjE_vucgM_xD4TOGwAAAFI"]
[Sun Dec 07 04:14:06.733444 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:9869] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aTSOjqLvdvAppF-gXov8ZQAAABY"]
[Sun Dec 07 04:14:07.160905 2025] [:error] [pid 34109:tid 34156] [client 4.197.100.82:10098] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "aTSOj4jE_vucgM_xD4TOHgAAAFA"]
[Sun Dec 07 04:14:07.807646 2025] [:error] [pid 34109:tid 34164] [client 4.197.100.82:10083] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "aTSOj4jE_vucgM_xD4TOIAAAAFg"]
[Sun Dec 07 04:14:09.167784 2025] [:error] [pid 34110:tid 34190] [client 4.197.100.82:41741] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "aTSOkQndtmtsHiXHBO1t7wAAAJc"]
[Sun Dec 07 04:14:09.815986 2025] [:error] [pid 34109:tid 34152] [client 4.197.100.82:9803] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "aTSOkYjE_vucgM_xD4TOJgAAAEw"]
[Sun Dec 07 04:14:10.104996 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:9823] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "aTSOkojE_vucgM_xD4TOJwAAAEo"]
[Sun Dec 07 04:14:10.524601 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:9445] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "aTSOkhrSxOOdwv3vX3wnagAAAMA"]
[Sun Dec 07 04:14:11.160476 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:39708] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "aTSOkwndtmtsHiXHBO1t8QAAAII"]
[Sun Dec 07 04:14:11.626239 2025] [:error] [pid 34109:tid 34145] [client 4.197.100.82:41759] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "aTSOk4jE_vucgM_xD4TOKQAAAEU"]
[Sun Dec 07 04:14:12.469900 2025] [:error] [pid 34109:tid 34163] [client 4.197.100.82:41780] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aTSOlIjE_vucgM_xD4TOLQAAAFc"]
[Sun Dec 07 04:14:13.067369 2025] [:error] [pid 34109:tid 34155] [client 4.197.100.82:10234] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aTSOlYjE_vucgM_xD4TOMAAAAE8"]
[Sun Dec 07 04:14:13.514847 2025] [:error] [pid 34109:tid 34159] [client 4.197.100.82:9818] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aTSOlYjE_vucgM_xD4TOMgAAAFM"]
[Sun Dec 07 04:14:13.848609 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:9418] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aTSOlYjE_vucgM_xD4TONQAAAEs"]
[Sun Dec 07 04:14:14.288456 2025] [:error] [pid 34195:tid 34210] [client 4.197.100.82:9751] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTSOlhrSxOOdwv3vX3wncAAAAMw"]
[Sun Dec 07 04:14:14.972160 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9815] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTSOlhrSxOOdwv3vX3wncwAAANQ"]
[Sun Dec 07 04:14:15.307502 2025] [:error] [pid 34110:tid 34187] [client 4.197.100.82:9801] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTSOlwndtmtsHiXHBO1t8gAAAJQ"]
[Sun Dec 07 04:14:15.544351 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:39690] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aTSOlxrSxOOdwv3vX3wndAAAANU"]
[Sun Dec 07 04:14:15.910300 2025] [:error] [pid 34108:tid 34126] [client 4.197.100.82:39719] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the1me.php"] [unique_id "aTSOl6LvdvAppF-gXov8aQAAAA0"]
[Sun Dec 07 04:14:16.269737 2025] [:error] [pid 34108:tid 34129] [client 4.197.100.82:41734] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the1me.php"] [unique_id "aTSOmKLvdvAppF-gXov8agAAABA"]
[Sun Dec 07 04:14:17.146869 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9819] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the1me.php"] [unique_id "aTSOmRrSxOOdwv3vX3wndgAAAME"]
[Sun Dec 07 04:14:17.392054 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:9832] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the1me.php"] [unique_id "aTSOmQndtmtsHiXHBO1t9QAAAJU"]
[Sun Dec 07 04:14:17.758417 2025] [:error] [pid 34109:tid 34160] [client 4.197.100.82:9877] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aTSOmYjE_vucgM_xD4TOOgAAAFQ"]
[Sun Dec 07 04:14:17.966858 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:9736] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aTSOmRrSxOOdwv3vX3wnegAAANc"]
[Sun Dec 07 04:14:18.185419 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:10191] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aTSOmhrSxOOdwv3vX3wnewAAAMU"]
[Sun Dec 07 04:14:18.725301 2025] [:error] [pid 34108:tid 34113] [client 4.197.100.82:10071] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aTSOmqLvdvAppF-gXov8cQAAAAA"]
[Sun Dec 07 04:14:19.114607 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:41785] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aTSOm6LvdvAppF-gXov8cgAAABM"]
[Sun Dec 07 04:14:19.333875 2025] [:error] [pid 34110:tid 34176] [client 4.197.100.82:39724] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aTSOmwndtmtsHiXHBO1t9gAAAIk"]
[Sun Dec 07 04:14:19.740231 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:9762] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aTSOm6LvdvAppF-gXov8dAAAABY"]
[Sun Dec 07 04:14:20.156718 2025] [:error] [pid 34109:tid 34144] [client 4.197.100.82:39702] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aTSOnIjE_vucgM_xD4TOPgAAAEQ"]
[Sun Dec 07 04:14:20.448070 2025] [:error] [pid 34110:tid 34177] [client 4.197.100.82:9432] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTSOnAndtmtsHiXHBO1t-AAAAIo"]
[Sun Dec 07 04:14:20.970881 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:10189] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTSOnAndtmtsHiXHBO1t-gAAAIE"]
[Sun Dec 07 04:14:21.581683 2025] [:error] [pid 34195:tid 34211] [client 4.197.100.82:10072] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTSOnRrSxOOdwv3vX3wnfgAAAM0"]
[Sun Dec 07 04:14:22.279183 2025] [:error] [pid 34108:tid 34137] [client 4.197.100.82:10082] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTSOnqLvdvAppF-gXov8dQAAABg"]
[Sun Dec 07 04:14:22.701631 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:10081] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aTSOnqLvdvAppF-gXov8eAAAABU"]
[Sun Dec 07 04:14:23.392338 2025] [:error] [pid 34108:tid 34126] [client 4.197.100.82:9827] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aTSOn6LvdvAppF-gXov8ewAAAA0"]
[Sun Dec 07 04:14:23.632942 2025] [:error] [pid 34110:tid 34174] [client 4.197.100.82:10232] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aTSOnwndtmtsHiXHBO1uAgAAAIc"]
[Sun Dec 07 04:14:24.662280 2025] [:error] [pid 34110:tid 34175] [client 4.197.100.82:10208] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aTSOoAndtmtsHiXHBO1uBQAAAIg"]
[Sun Dec 07 04:14:26.023461 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:10078] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTSOogndtmtsHiXHBO1uCgAAAI4"]
[Sun Dec 07 04:14:26.350775 2025] [:error] [pid 34109:tid 34163] [client 4.197.100.82:9429] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTSOoojE_vucgM_xD4TORAAAAFc"]
[Sun Dec 07 04:14:27.246782 2025] [:error] [pid 34110:tid 34189] [client 4.197.100.82:9876] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTSOowndtmtsHiXHBO1uEwAAAJY"]
[Sun Dec 07 04:14:28.646020 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:39742] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTSOpBrSxOOdwv3vX3wnhQAAAMY"]
[Sun Dec 07 04:14:29.680447 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:41757] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aTSOpQndtmtsHiXHBO1uFgAAAJU"]
[Sun Dec 07 04:14:31.069122 2025] [:error] [pid 34108:tid 34129] [client 4.197.100.82:9828] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aTSOp6LvdvAppF-gXov8igAAABA"]
[Sun Dec 07 04:14:31.805471 2025] [:error] [pid 34110:tid 34183] [client 4.197.100.82:9760] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aTSOpwndtmtsHiXHBO1uGgAAAJA"]
[Sun Dec 07 04:14:32.352620 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:10188] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aTSOqBrSxOOdwv3vX3wnjAAAAMc"]
[Sun Dec 07 04:14:32.769707 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:9440] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aTSOqBrSxOOdwv3vX3wnjgAAANg"]
[Sun Dec 07 04:14:33.232187 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:10100] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aTSOqRrSxOOdwv3vX3wnkAAAAMg"]
[Sun Dec 07 04:14:33.858395 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:10074] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aTSOqaLvdvAppF-gXov8jAAAAAo"]
[Sun Dec 07 04:14:34.316347 2025] [:error] [pid 34108:tid 34115] [client 4.197.100.82:9781] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aTSOqqLvdvAppF-gXov8jwAAAAI"]
[Sun Dec 07 04:14:34.965757 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:41783] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aTSOqgndtmtsHiXHBO1uHgAAAIE"]
[Sun Dec 07 04:14:35.519493 2025] [:error] [pid 34195:tid 34210] [client 4.197.100.82:10239] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aTSOqxrSxOOdwv3vX3wnlgAAAMw"]
[Sun Dec 07 04:14:35.819978 2025] [:error] [pid 34110:tid 34167] [client 4.197.100.82:9471] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aTSOqwndtmtsHiXHBO1uIwAAAIA"]
[Sun Dec 07 04:14:36.243660 2025] [:error] [pid 34108:tid 34118] [client 4.197.100.82:9836] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aTSOrKLvdvAppF-gXov8lAAAAAU"]
[Sun Dec 07 04:14:36.845051 2025] [:error] [pid 34110:tid 34178] [client 4.197.100.82:10177] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "aTSOrAndtmtsHiXHBO1uJAAAAIs"]
[Sun Dec 07 04:14:37.903008 2025] [:error] [pid 34110:tid 34190] [client 4.197.100.82:10212] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "aTSOrQndtmtsHiXHBO1uKAAAAJc"]
[Sun Dec 07 04:14:38.529385 2025] [:error] [pid 34110:tid 34189] [client 4.197.100.82:9807] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "aTSOrgndtmtsHiXHBO1uKQAAAJY"]
[Sun Dec 07 04:14:39.369152 2025] [:error] [pid 34110:tid 34187] [client 4.197.100.82:41752] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "aTSOrwndtmtsHiXHBO1uKwAAAJQ"]
[Sun Dec 07 04:14:39.811120 2025] [:error] [pid 34108:tid 34120] [client 4.197.100.82:9729] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "aTSOr6LvdvAppF-gXov8nAAAAAc"]
[Sun Dec 07 04:14:40.238497 2025] [:error] [pid 34110:tid 34172] [client 4.197.100.82:10106] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "aTSOsAndtmtsHiXHBO1uLgAAAIU"]
[Sun Dec 07 04:14:40.882756 2025] [:error] [pid 34109:tid 34159] [client 4.197.100.82:9780] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "aTSOsIjE_vucgM_xD4TOSgAAAFM"]
[Sun Dec 07 04:14:41.269016 2025] [:error] [pid 34109:tid 34142] [client 4.197.100.82:41730] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "aTSOsYjE_vucgM_xD4TOSwAAAEI"]
[Sun Dec 07 04:14:42.158253 2025] [:error] [pid 34108:tid 34130] [client 4.197.100.82:9899] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aTSOsqLvdvAppF-gXov8ogAAABE"]
[Sun Dec 07 04:14:43.401935 2025] [:error] [pid 34109:tid 34140] [client 4.197.100.82:9744] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aTSOs4jE_vucgM_xD4TOTwAAAEA"]
[Sun Dec 07 04:14:44.489085 2025] [:error] [pid 34109:tid 34141] [client 4.197.100.82:9856] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aTSOtIjE_vucgM_xD4TOUAAAAEE"]
[Sun Dec 07 04:14:45.040189 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:9776] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aTSOtYjE_vucgM_xD4TOUwAAAEY"]
[Sun Dec 07 04:14:45.441145 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:10096] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aTSOtRrSxOOdwv3vX3wnrwAAANA"]
[Sun Dec 07 04:14:46.113218 2025] [:error] [pid 34108:tid 34113] [client 4.197.100.82:10077] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aTSOtqLvdvAppF-gXov8qgAAAAA"]
[Sun Dec 07 04:14:47.023002 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:9830] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aTSOt4jE_vucgM_xD4TOWQAAAE0"]
[Sun Dec 07 04:14:48.309985 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sun Dec 07 04:14:48.332110 2025] [:error] [pid 34195:tid 34211] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Sun Dec 07 04:14:48.354525 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-903.php
[Sun Dec 07 04:14:48.700761 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sun Dec 07 04:14:48.729990 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/nij.php
[Sun Dec 07 04:14:48.890463 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 07 04:14:48.911918 2025] [:error] [pid 34195:tid 34210] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Dec 07 04:14:50.434979 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sun Dec 07 04:14:50.456041 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Sun Dec 07 04:14:50.672845 2025] [:error] [pid 34195:tid 34211] [client 4.197.100.82:41733] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Sun Dec 07 04:14:51.003396 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:41733] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aTSOuxrSxOOdwv3vX3wnygAAAME"]
[Sun Dec 07 04:14:51.448305 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:9824] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aTSOu4jE_vucgM_xD4TOXgAAAEo"]
[Sun Dec 07 04:14:51.901382 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:10079] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aTSOu6LvdvAppF-gXov8twAAABU"]
[Sun Dec 07 04:14:52.161840 2025] [:error] [pid 34108:tid 34116] [client 4.197.100.82:10201] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aTSOvKLvdvAppF-gXov8uAAAAAM"]
[Sun Dec 07 04:14:53.027226 2025] [:error] [pid 34195:tid 34207] [client 4.197.100.82:10105] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aTSOvRrSxOOdwv3vX3wnzAAAAMk"]
[Sun Dec 07 04:14:53.712805 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:10099] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aTSOvQndtmtsHiXHBO1uQAAAAIw"]
[Sun Dec 07 04:14:54.208319 2025] [:error] [pid 34195:tid 34215] [client 4.197.100.82:39687] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aTSOvhrSxOOdwv3vX3wnzwAAANE"]
[Sun Dec 07 04:14:54.885996 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:9884] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aTSOvhrSxOOdwv3vX3wn0QAAANM"]
[Sun Dec 07 04:14:55.170174 2025] [:error] [pid 34108:tid 34120] [client 4.197.100.82:9795] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTSOv6LvdvAppF-gXov8vQAAAAc"]
[Sun Dec 07 04:14:55.487239 2025] [:error] [pid 34110:tid 34171] [client 4.197.100.82:9817] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTSOvwndtmtsHiXHBO1uSQAAAIQ"]
[Sun Dec 07 04:14:56.030718 2025] [:error] [pid 34108:tid 34122] [client 4.197.100.82:9747] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTSOwKLvdvAppF-gXov8vwAAAAk"]
[Sun Dec 07 04:14:56.337467 2025] [:error] [pid 34109:tid 34144] [client 4.197.100.82:10233] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aTSOwIjE_vucgM_xD4TOaQAAAEQ"]
[Sun Dec 07 04:14:56.576129 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:10091] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aTSOwBrSxOOdwv3vX3wn1AAAANI"]
[Sun Dec 07 04:14:57.255601 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:41788] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aTSOwRrSxOOdwv3vX3wn2AAAAMI"]
[Sun Dec 07 04:14:57.702306 2025] [:error] [pid 34109:tid 34162] [client 4.197.100.82:41767] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aTSOwYjE_vucgM_xD4TOagAAAFY"]
[Sun Dec 07 04:14:58.563591 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9838] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aTSOwhrSxOOdwv3vX3wn3AAAANQ"]
[Sun Dec 07 04:14:59.072182 2025] [:error] [pid 34110:tid 34180] [client 4.197.100.82:10057] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "aTSOwwndtmtsHiXHBO1uVQAAAI0"]
[Sun Dec 07 04:14:59.448048 2025] [:error] [pid 34108:tid 34116] [client 4.197.100.82:39722] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "aTSOw6LvdvAppF-gXov8xwAAAAM"]
[Sun Dec 07 04:14:59.801513 2025] [:error] [pid 34108:tid 34131] [client 4.197.100.82:39733] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "aTSOw6LvdvAppF-gXov8ygAAABI"]
[Sun Dec 07 04:15:00.639798 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:10054] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "aTSOxKLvdvAppF-gXov8zwAAAAo"]
[Sun Dec 07 04:15:01.173361 2025] [:error] [pid 34110:tid 34191] [client 4.197.100.82:33027] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aTSOxQndtmtsHiXHBO1uWAAAAJg"]
[Sun Dec 07 04:15:01.698894 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:9759] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aTSOxRrSxOOdwv3vX3wn4AAAAM8"]
[Sun Dec 07 04:15:02.431389 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:10104] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aTSOxhrSxOOdwv3vX3wn4wAAANg"]
[Sun Dec 07 04:15:02.653417 2025] [:error] [pid 34108:tid 34119] [client 4.197.100.82:10110] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aTSOxqLvdvAppF-gXov80QAAAAY"]
[Sun Dec 07 04:15:04.080643 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9770] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTSOyBrSxOOdwv3vX3wn7wAAAME"]
[Sun Dec 07 04:15:05.266660 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:10215] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTSOyQndtmtsHiXHBO1uXQAAAIw"]
[Sun Dec 07 04:15:05.652003 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:10216] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTSOyRrSxOOdwv3vX3wn-gAAANQ"]
[Sun Dec 07 04:15:06.368238 2025] [:error] [pid 34109:tid 34156] [client 4.197.100.82:9845] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTSOyojE_vucgM_xD4TOdAAAAFA"]
[Sun Dec 07 04:15:06.489697 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9833] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/noe.php"] [unique_id "aTSOyhrSxOOdwv3vX3woAwAAAME"]
[Sun Dec 07 04:15:06.940770 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:9476] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/noe.php"] [unique_id "aTSOyhrSxOOdwv3vX3woDAAAAMc"]
[Sun Dec 07 04:15:07.852113 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:9771] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/noe.php"] [unique_id "aTSOywndtmtsHiXHBO1ubQAAAJU"]
[Sun Dec 07 04:15:08.411025 2025] [:error] [pid 34110:tid 34177] [client 4.197.100.82:9754] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/noe.php"] [unique_id "aTSOzAndtmtsHiXHBO1ucwAAAIo"]
[Sun Dec 07 04:15:08.599740 2025] [:error] [pid 34109:tid 34149] [client 4.197.100.82:9728] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTSOzIjE_vucgM_xD4TOfAAAAEk"]
[Sun Dec 07 04:15:08.948376 2025] [:error] [pid 34108:tid 34133] [client 4.197.100.82:33025] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTSOzKLvdvAppF-gXov81gAAABQ"]
[Sun Dec 07 04:15:10.307785 2025] [:error] [pid 34110:tid 34180] [client 4.197.100.82:9448] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTSOzgndtmtsHiXHBO1uegAAAI0"]
[Sun Dec 07 04:15:11.301452 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:10227] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTSOzxrSxOOdwv3vX3woJAAAANc"]
[Sun Dec 07 04:15:11.687715 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:9855] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "aTSOzxrSxOOdwv3vX3woJQAAAMg"]
[Sun Dec 07 04:15:12.584035 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:10095] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "aTSO0AndtmtsHiXHBO1uewAAAI4"]
[Sun Dec 07 04:15:13.087842 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:39723] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "aTSO0RrSxOOdwv3vX3woJwAAAM8"]
[Sun Dec 07 04:15:13.196741 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:9888] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "aTSO0RrSxOOdwv3vX3woKAAAAMM"]
[Sun Dec 07 04:15:13.315346 2025] [:error] [pid 34110:tid 34191] [client 4.197.100.82:10222] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/te.php"] [unique_id "aTSO0QndtmtsHiXHBO1ufQAAAJg"]
[Sun Dec 07 04:15:13.908633 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:9851] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/te.php"] [unique_id "aTSO0QndtmtsHiXHBO1ufgAAAJU"]
[Sun Dec 07 04:15:14.463728 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:10068] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/te.php"] [unique_id "aTSO0hrSxOOdwv3vX3woKQAAANM"]
[Sun Dec 07 04:15:14.919649 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:10064] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/te.php"] [unique_id "aTSO0qLvdvAppF-gXov83gAAABY"]
[Sun Dec 07 04:15:15.185477 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:9881] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aTSO04jE_vucgM_xD4TOhAAAAFI"]
[Sun Dec 07 04:15:15.494819 2025] [:error] [pid 34109:tid 34164] [client 4.197.100.82:33033] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aTSO04jE_vucgM_xD4TOhgAAAFg"]
[Sun Dec 07 04:15:15.820091 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:9791] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aTSO0xrSxOOdwv3vX3woLwAAANU"]
[Sun Dec 07 04:15:16.061353 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:9910] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aTSO1BrSxOOdwv3vX3woMAAAAM8"]
[Sun Dec 07 04:15:16.208912 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:10195] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aTSO1BrSxOOdwv3vX3woMQAAAMM"]
[Sun Dec 07 04:15:16.680838 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:10187] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aTSO1BrSxOOdwv3vX3woMgAAAMI"]
[Sun Dec 07 04:15:17.359847 2025] [:error] [pid 34110:tid 34170] [client 4.197.100.82:9731] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aTSO1QndtmtsHiXHBO1uggAAAIM"]
[Sun Dec 07 04:15:17.634742 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:9755] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aTSO1YjE_vucgM_xD4TOjQAAAEY"]
[Sun Dec 07 04:15:18.723719 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:10087] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aTSO1hrSxOOdwv3vX3woNQAAAMY"]
[Sun Dec 07 04:15:19.184535 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:33028] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aTSO1xrSxOOdwv3vX3woNwAAANI"]
[Sun Dec 07 04:15:19.744504 2025] [:error] [pid 34195:tid 34202] [client 4.197.100.82:9773] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aTSO1xrSxOOdwv3vX3woOgAAAMQ"]
[Sun Dec 07 04:15:20.198799 2025] [:error] [pid 34110:tid 34189] [client 4.197.100.82:41789] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aTSO2AndtmtsHiXHBO1uhwAAAJY"]
[Sun Dec 07 04:15:20.529136 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:39682] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aTSO2AndtmtsHiXHBO1uiQAAAI4"]
[Sun Dec 07 04:15:20.666266 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9844] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aTSO2BrSxOOdwv3vX3woPgAAAME"]
[Sun Dec 07 04:15:20.815335 2025] [:error] [pid 34109:tid 34155] [client 4.197.100.82:10107] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aTSO2IjE_vucgM_xD4TOkQAAAE8"]
[Sun Dec 07 04:15:21.036519 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:9893] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aTSO2YjE_vucgM_xD4TOkgAAAE0"]
[Sun Dec 07 04:15:21.446766 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:9737] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aTSO2RrSxOOdwv3vX3woQQAAAMI"]
[Sun Dec 07 04:15:22.202464 2025] [:error] [pid 34195:tid 34215] [client 4.197.100.82:10088] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aTSO2hrSxOOdwv3vX3woRAAAANE"]
[Sun Dec 07 04:15:22.588597 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:10205] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aTSO2hrSxOOdwv3vX3woRgAAANQ"]
[Sun Dec 07 04:15:22.695396 2025] [:error] [pid 34195:tid 34202] [client 4.197.100.82:33050] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aTSO2hrSxOOdwv3vX3woRwAAAMQ"]
[Sun Dec 07 04:15:22.899330 2025] [:error] [pid 34108:tid 34128] [client 4.197.100.82:9808] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aTSO2qLvdvAppF-gXov86QAAAA8"]
[Sun Dec 07 04:15:23.153764 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:9772] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aTSO26LvdvAppF-gXov86wAAABY"]
[Sun Dec 07 04:15:23.461174 2025] [:error] [pid 34109:tid 34162] [client 4.197.100.82:9452] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aTSO24jE_vucgM_xD4TOkwAAAFY"]
[Sun Dec 07 04:15:23.964480 2025] [:error] [pid 34108:tid 34130] [client 4.197.100.82:9872] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "aTSO26LvdvAppF-gXov87gAAABE"]
[Sun Dec 07 04:15:24.214263 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:9802] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aTSO3IjE_vucgM_xD4TOlQAAAEs"]
[Sun Dec 07 04:15:24.440466 2025] [:error] [pid 34108:tid 34118] [client 4.197.100.82:10206] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aTSO3KLvdvAppF-gXov88QAAAAU"]
[Sun Dec 07 04:15:24.953433 2025] [:error] [pid 34109:tid 34149] [client 4.197.100.82:33030] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aTSO3IjE_vucgM_xD4TOmgAAAEk"]
[Sun Dec 07 04:15:25.254125 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:10221] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aTSO3RrSxOOdwv3vX3woSwAAANA"]
[Sun Dec 07 04:15:25.548134 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:10203] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTSO3RrSxOOdwv3vX3woTAAAAM8"]
[Sun Dec 07 04:15:25.874335 2025] [:error] [pid 34109:tid 34160] [client 4.197.100.82:33048] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTSO3YjE_vucgM_xD4TOnAAAAFQ"]
[Sun Dec 07 04:15:26.102861 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:9915] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTSO3qLvdvAppF-gXov89QAAAAQ"]
[Sun Dec 07 04:15:26.621744 2025] [:error] [pid 34108:tid 34114] [client 4.197.100.82:10101] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTSO3qLvdvAppF-gXov8-AAAAAE"]
[Sun Dec 07 04:15:27.237529 2025] [:error] [pid 34109:tid 34143] [client 4.197.100.82:10097] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aTSO34jE_vucgM_xD4TOngAAAEM"]
[Sun Dec 07 04:15:28.255786 2025] [:error] [pid 34195:tid 34202] [client 4.197.100.82:9745] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aTSO4BrSxOOdwv3vX3woUAAAAMQ"]
[Sun Dec 07 04:15:28.941177 2025] [:error] [pid 34108:tid 34115] [client 4.197.100.82:10109] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aTSO4KLvdvAppF-gXov8-gAAAAI"]
[Sun Dec 07 04:15:29.357095 2025] [:error] [pid 34110:tid 34173] [client 4.197.100.82:9763] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aTSO4QndtmtsHiXHBO1ulAAAAIY"]
[Sun Dec 07 04:15:29.617431 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:41771] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "aTSO4QndtmtsHiXHBO1ulQAAAIE"]
[Sun Dec 07 04:15:29.866512 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:9890] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "aTSO4RrSxOOdwv3vX3woVgAAAMU"]
[Sun Dec 07 04:15:30.209362 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:10214] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "aTSO4hrSxOOdwv3vX3woWAAAAME"]
[Sun Dec 07 04:15:30.530708 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:9797] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "aTSO4hrSxOOdwv3vX3woWQAAANY"]
[Sun Dec 07 04:15:31.174700 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:10066] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aTSO4xrSxOOdwv3vX3woXQAAAMM"]
[Sun Dec 07 04:15:31.498875 2025] [:error] [pid 34109:tid 34147] [client 4.197.100.82:9782] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aTSO44jE_vucgM_xD4TOpQAAAEc"]
[Sun Dec 07 04:15:32.103042 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:9435] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aTSO5KLvdvAppF-gXov8_QAAABM"]
[Sun Dec 07 04:15:32.487910 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9466] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aTSO5BrSxOOdwv3vX3woYQAAANQ"]
[Sun Dec 07 04:15:32.610329 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:33082] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aTSO5AndtmtsHiXHBO1umQAAAII"]
[Sun Dec 07 04:15:32.703449 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:9848] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aTSO5BrSxOOdwv3vX3woYgAAAMg"]
[Sun Dec 07 04:15:32.866814 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:10052] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aTSO5IjE_vucgM_xD4TOpwAAAEY"]
[Sun Dec 07 04:15:33.301633 2025] [:error] [pid 34110:tid 34175] [client 4.197.100.82:9885] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aTSO5QndtmtsHiXHBO1umwAAAIg"]
[Sun Dec 07 04:15:33.505823 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:39702] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aTSO5QndtmtsHiXHBO1unAAAAJU"]
[Sun Dec 07 04:15:33.994418 2025] [:error] [pid 34195:tid 34209] [client 4.197.100.82:41774] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aTSO5RrSxOOdwv3vX3woZAAAAMs"]
[Sun Dec 07 04:15:34.631613 2025] [:error] [pid 34109:tid 34155] [client 4.197.100.82:9866] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aTSO5ojE_vucgM_xD4TOrAAAAE8"]
[Sun Dec 07 04:15:35.296769 2025] [:error] [pid 34109:tid 34152] [client 4.197.100.82:39729] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aTSO54jE_vucgM_xD4TOrQAAAEw"]
[Sun Dec 07 04:15:35.536822 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:10092] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aTSO5xrSxOOdwv3vX3woZwAAAMA"]
[Sun Dec 07 04:15:36.035947 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:10051] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aTSO6AndtmtsHiXHBO1uogAAAI4"]
[Sun Dec 07 04:15:36.522310 2025] [:error] [pid 34110:tid 34186] [client 4.197.100.82:9871] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aTSO6AndtmtsHiXHBO1upgAAAJM"]
[Sun Dec 07 04:15:37.247165 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:9857] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aTSO6QndtmtsHiXHBO1uqgAAAII"]
[Sun Dec 07 04:15:37.905846 2025] [:error] [pid 34110:tid 34175] [client 4.197.100.82:9880] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTSO6QndtmtsHiXHBO1uqwAAAIg"]
[Sun Dec 07 04:15:38.514027 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:9767] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTSO6hrSxOOdwv3vX3wobwAAAMg"]
[Sun Dec 07 04:15:38.865927 2025] [:error] [pid 34110:tid 34182] [client 4.197.100.82:10053] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTSO6gndtmtsHiXHBO1urwAAAI8"]
[Sun Dec 07 04:15:39.048612 2025] [:error] [pid 34110:tid 34183] [client 4.197.100.82:10075] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTSO6wndtmtsHiXHBO1usAAAAJA"]
[Sun Dec 07 04:15:39.471186 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:9911] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aTSO6xrSxOOdwv3vX3wodQAAANA"]
[Sun Dec 07 04:15:39.648420 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:10062] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aTSO6xrSxOOdwv3vX3wodwAAAM8"]
[Sun Dec 07 04:15:39.961389 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:10084] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aTSO64jE_vucgM_xD4TOtQAAAEs"]
[Sun Dec 07 04:15:40.774486 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:9757] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aTSO7AndtmtsHiXHBO1utAAAAII"]
[Sun Dec 07 04:15:41.338656 2025] [:error] [pid 34108:tid 34124] [client 4.197.100.82:39726] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aTSO7aLvdvAppF-gXov9BgAAAAs"]
[Sun Dec 07 04:15:41.719824 2025] [:error] [pid 34110:tid 34185] [client 4.197.100.82:9750] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aTSO7QndtmtsHiXHBO1uuQAAAJI"]
[Sun Dec 07 04:15:42.007457 2025] [:error] [pid 34108:tid 34136] [client 4.197.100.82:41766] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aTSO7qLvdvAppF-gXov9BwAAABc"]
[Sun Dec 07 04:15:42.175768 2025] [:error] [pid 34109:tid 34148] [client 4.197.100.82:9821] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aTSO7ojE_vucgM_xD4TOuAAAAEg"]
[Sun Dec 07 04:15:42.364293 2025] [:error] [pid 34195:tid 34215] [client 4.197.100.82:9761] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTSO7hrSxOOdwv3vX3wofgAAANE"]
[Sun Dec 07 04:15:43.155802 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:10076] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTSO7xrSxOOdwv3vX3wogAAAAM8"]
[Sun Dec 07 04:15:44.266699 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:41770] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTSO8BrSxOOdwv3vX3wohAAAANQ"]
[Sun Dec 07 04:15:44.944710 2025] [:error] [pid 34108:tid 34126] [client 4.197.100.82:9794] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTSO8KLvdvAppF-gXov9CgAAAA0"]
[Sun Dec 07 04:15:45.910630 2025] [:error] [pid 34108:tid 34125] [client 4.197.100.82:10058] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/sallu.php"] [unique_id "aTSO8aLvdvAppF-gXov9DQAAAAw"]
[Sun Dec 07 04:15:46.815850 2025] [:error] [pid 34110:tid 34185] [client 4.197.100.82:9742] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/sallu.php"] [unique_id "aTSO8gndtmtsHiXHBO1uwQAAAJI"]
[Sun Dec 07 04:15:47.656294 2025] [:error] [pid 34109:tid 34154] [client 4.197.100.82:33037] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/sallu.php"] [unique_id "aTSO84jE_vucgM_xD4TOvgAAAE4"]
[Sun Dec 07 04:15:49.336752 2025] [:error] [pid 34110:tid 34184] [client 4.197.100.82:39686] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/sallu.php"] [unique_id "aTSO9QndtmtsHiXHBO1uyAAAAJE"]
[Sun Dec 07 04:15:50.117904 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Dec 07 04:15:50.142303 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Dec 07 04:15:50.162115 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Dec 07 04:15:50.181227 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Sun Dec 07 04:15:50.200529 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/wcas.php
[Sun Dec 07 04:15:52.005116 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Dec 07 04:15:52.146642 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Sun Dec 07 04:15:52.222998 2025] [:error] [pid 34195:tid 34208] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Dec 07 04:15:52.309375 2025] [:error] [pid 34195:tid 34210] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Sun Dec 07 04:15:52.342180 2025] [:error] [pid 34195:tid 34207] [client 4.197.100.82:9914] File does not exist: /usr/local/apache/htdocs/suspended-page/fileas.php
[Sun Dec 07 04:15:52.358582 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9914] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aTSO-BrSxOOdwv3vX3wonQAAAM4"]
[Sun Dec 07 04:15:52.792689 2025] [:error] [pid 34110:tid 34182] [client 4.197.100.82:9778] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aTSO-AndtmtsHiXHBO1uzgAAAI8"]
[Sun Dec 07 04:15:53.102587 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:9805] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aTSO-QndtmtsHiXHBO1uzwAAAIE"]
[Sun Dec 07 04:15:53.567758 2025] [:error] [pid 34110:tid 34175] [client 4.197.100.82:9492] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aTSO-QndtmtsHiXHBO1u0QAAAIg"]
[Sun Dec 07 04:15:53.937660 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:33068] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "aTSO-aLvdvAppF-gXov9GgAAABY"]
[Sun Dec 07 04:15:54.038527 2025] [:error] [pid 34108:tid 34121] [client 4.197.100.82:9455] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "aTSO-qLvdvAppF-gXov9GwAAAAg"]
[Sun Dec 07 04:15:54.229139 2025] [:error] [pid 34108:tid 34128] [client 4.197.100.82:9777] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "aTSO-qLvdvAppF-gXov9HAAAAA8"]
[Sun Dec 07 04:15:54.348905 2025] [:error] [pid 34109:tid 34141] [client 4.197.100.82:10103] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "aTSO-ojE_vucgM_xD4TOyAAAAEE"]
[Sun Dec 07 04:15:54.427261 2025] [:error] [pid 34109:tid 34157] [client 4.197.100.82:9858] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aTSO-ojE_vucgM_xD4TOyQAAAFE"]
[Sun Dec 07 04:15:54.738347 2025] [:error] [pid 34109:tid 34144] [client 4.197.100.82:10108] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aTSO-ojE_vucgM_xD4TOywAAAEQ"]
[Sun Dec 07 04:15:55.807899 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:9512] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aTSO-xrSxOOdwv3vX3wonwAAAMg"]
[Sun Dec 07 04:15:56.107062 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:33087] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aTSO_IjE_vucgM_xD4TOzwAAAEY"]
[Sun Dec 07 04:15:56.210947 2025] [:error] [pid 34110:tid 34191] [client 4.197.100.82:10193] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell1.php"] [unique_id "aTSO_AndtmtsHiXHBO1u2QAAAJg"]
[Sun Dec 07 04:15:56.715688 2025] [:error] [pid 34108:tid 34137] [client 4.197.100.82:9746] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell1.php"] [unique_id "aTSO_KLvdvAppF-gXov9IAAAABg"]
[Sun Dec 07 04:15:57.516273 2025] [:error] [pid 34108:tid 34118] [client 4.197.100.82:39731] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell1.php"] [unique_id "aTSO_aLvdvAppF-gXov9IwAAAAU"]
[Sun Dec 07 04:15:57.746162 2025] [:error] [pid 34110:tid 34171] [client 4.197.100.82:10230] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell1.php"] [unique_id "aTSO_QndtmtsHiXHBO1u2wAAAIQ"]
[Sun Dec 07 04:15:58.232293 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:9917] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aTSO_ojE_vucgM_xD4TO0AAAAEo"]
[Sun Dec 07 04:15:58.881864 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:9790] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aTSO_gndtmtsHiXHBO1u4QAAAIw"]
[Sun Dec 07 04:15:59.912464 2025] [:error] [pid 34109:tid 34142] [client 4.197.100.82:33072] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aTSO_4jE_vucgM_xD4TO0gAAAEI"]
[Sun Dec 07 04:16:00.382666 2025] [:error] [pid 34108:tid 34126] [client 4.197.100.82:9501] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aTSPAKLvdvAppF-gXov9KgAAAA0"]
[Sun Dec 07 04:16:00.679933 2025] [:error] [pid 34108:tid 34133] [client 4.197.100.82:9886] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aTSPAKLvdvAppF-gXov9LQAAABQ"]
[Sun Dec 07 04:16:01.256379 2025] [:error] [pid 34110:tid 34183] [client 4.197.100.82:9749] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aTSPAQndtmtsHiXHBO1u6gAAAJA"]
[Sun Dec 07 04:16:01.500092 2025] [:error] [pid 34109:tid 34160] [client 4.197.100.82:9799] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aTSPAYjE_vucgM_xD4TO0wAAAFQ"]
[Sun Dec 07 04:16:01.830717 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:9439] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aTSPAaLvdvAppF-gXov9LwAAAAQ"]
[Sun Dec 07 04:16:02.039404 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9901] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTSPAhrSxOOdwv3vX3wopAAAANQ"]
[Sun Dec 07 04:16:02.360345 2025] [:error] [pid 34109:tid 34155] [client 4.197.100.82:10238] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTSPAojE_vucgM_xD4TO1QAAAE8"]
[Sun Dec 07 04:16:02.765735 2025] [:error] [pid 34110:tid 34177] [client 4.197.100.82:39691] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTSPAgndtmtsHiXHBO1u7AAAAIo"]
[Sun Dec 07 04:16:03.236298 2025] [:error] [pid 34195:tid 34209] [client 4.197.100.82:9800] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTSPAxrSxOOdwv3vX3wopQAAAMs"]
[Sun Dec 07 04:16:04.015674 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:9875] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "aTSPBAndtmtsHiXHBO1u7QAAAI4"]
[Sun Dec 07 04:16:04.243211 2025] [:error] [pid 34195:tid 34207] [client 4.197.100.82:33034] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "aTSPBBrSxOOdwv3vX3wopwAAAMk"]
[Sun Dec 07 04:16:04.666323 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9733] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "aTSPBBrSxOOdwv3vX3woqQAAAM4"]
[Sun Dec 07 04:16:04.932249 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:9793] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "aTSPBBrSxOOdwv3vX3woqgAAANg"]
[Sun Dec 07 04:16:05.728903 2025] [:error] [pid 34109:tid 34144] [client 4.197.100.82:9474] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aTSPBYjE_vucgM_xD4TO3AAAAEQ"]
[Sun Dec 07 04:16:06.664951 2025] [:error] [pid 34109:tid 34163] [client 4.197.100.82:33067] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aTSPBojE_vucgM_xD4TO5gAAAFc"]
[Sun Dec 07 04:16:07.316892 2025] [:error] [pid 34109:tid 34162] [client 4.197.100.82:33024] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aTSPB4jE_vucgM_xD4TO6wAAAFY"]
[Sun Dec 07 04:16:07.623850 2025] [:error] [pid 34109:tid 34159] [client 4.197.100.82:41731] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aTSPB4jE_vucgM_xD4TO7wAAAFM"]
[Sun Dec 07 04:16:07.974219 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:9810] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aTSPBxrSxOOdwv3vX3worAAAAMg"]
[Sun Dec 07 04:16:08.280677 2025] [:error] [pid 34110:tid 34191] [client 4.197.100.82:41768] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aTSPCAndtmtsHiXHBO1u7gAAAJg"]
[Sun Dec 07 04:16:08.934705 2025] [:error] [pid 34110:tid 34183] [client 4.197.100.82:39730] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aTSPCAndtmtsHiXHBO1u8AAAAJA"]
[Sun Dec 07 04:16:09.473130 2025] [:error] [pid 34110:tid 34171] [client 4.197.100.82:9530] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aTSPCQndtmtsHiXHBO1u8gAAAIQ"]
[Sun Dec 07 04:16:09.759120 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:39701] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aTSPCRrSxOOdwv3vX3worQAAANc"]
[Sun Dec 07 04:16:10.335889 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:9842] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aTSPCqLvdvAppF-gXov9MwAAAAo"]
[Sun Dec 07 04:16:10.830419 2025] [:error] [pid 34110:tid 34180] [client 4.197.100.82:39707] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aTSPCgndtmtsHiXHBO1u9QAAAI0"]
[Sun Dec 07 04:16:11.001101 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:41750] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "aTSPCxrSxOOdwv3vX3wosQAAAMI"]
[Sun Dec 07 04:16:11.337784 2025] [:error] [pid 34195:tid 34202] [client 4.197.100.82:10080] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "aTSPCxrSxOOdwv3vX3woswAAAMQ"]
[Sun Dec 07 04:16:12.299627 2025] [:error] [pid 34195:tid 34208] [client 4.197.100.82:41790] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "aTSPDBrSxOOdwv3vX3wotgAAAMo"]
[Sun Dec 07 04:16:12.660590 2025] [:error] [pid 34108:tid 34130] [client 4.197.100.82:9459] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "aTSPDKLvdvAppF-gXov9NQAAABE"]
[Sun Dec 07 04:16:14.022461 2025] [:error] [pid 34108:tid 34126] [client 4.197.100.82:9839] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "aTSPDqLvdvAppF-gXov9NgAAAA0"]
[Sun Dec 07 04:16:14.276425 2025] [:error] [pid 34108:tid 34133] [client 4.197.100.82:10190] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "aTSPDqLvdvAppF-gXov9OAAAABQ"]
[Sun Dec 07 04:16:15.025387 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:9748] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "aTSPD6LvdvAppF-gXov9PQAAABY"]
[Sun Dec 07 04:16:15.678105 2025] [:error] [pid 34108:tid 34119] [client 4.197.100.82:41743] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "aTSPD6LvdvAppF-gXov9QAAAAAY"]
[Sun Dec 07 04:16:15.892875 2025] [:error] [pid 34110:tid 34176] [client 4.197.100.82:39698] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "aTSPDwndtmtsHiXHBO1u_QAAAIk"]
[Sun Dec 07 04:16:16.262104 2025] [:error] [pid 34109:tid 34162] [client 4.197.100.82:9413] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aTSPEIjE_vucgM_xD4TO9AAAAFY"]
[Sun Dec 07 04:16:16.459529 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:9785] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aTSPEBrSxOOdwv3vX3wovAAAANI"]
[Sun Dec 07 04:16:16.695031 2025] [:error] [pid 34109:tid 34161] [client 4.197.100.82:10073] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aTSPEIjE_vucgM_xD4TO9gAAAFU"]
[Sun Dec 07 04:16:17.126039 2025] [:error] [pid 34108:tid 34131] [client 4.197.100.82:39736] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aTSPEaLvdvAppF-gXov9QgAAABI"]
[Sun Dec 07 04:16:17.250919 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:33041] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abt.php"] [unique_id "aTSPERrSxOOdwv3vX3wowAAAAMI"]
[Sun Dec 07 04:16:17.997864 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:9480] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abt.php"] [unique_id "aTSPEaLvdvAppF-gXov9RQAAAAo"]
[Sun Dec 07 04:16:18.502454 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:9929] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abt.php"] [unique_id "aTSPEhrSxOOdwv3vX3wowgAAAMM"]
[Sun Dec 07 04:16:19.383908 2025] [:error] [pid 34108:tid 34130] [client 4.197.100.82:9883] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abt.php"] [unique_id "aTSPE6LvdvAppF-gXov9RwAAABE"]
[Sun Dec 07 04:16:19.552819 2025] [:error] [pid 34109:tid 34144] [client 4.197.100.82:9779] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "aTSPE4jE_vucgM_xD4TO-AAAAEQ"]
[Sun Dec 07 04:16:19.722065 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:9740] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "aTSPExrSxOOdwv3vX3woxgAAANY"]
[Sun Dec 07 04:16:19.974080 2025] [:error] [pid 34195:tid 34208] [client 4.197.100.82:41736] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "aTSPExrSxOOdwv3vX3woxwAAAMo"]
[Sun Dec 07 04:16:20.603868 2025] [:error] [pid 34109:tid 34154] [client 4.197.100.82:9843] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "aTSPFIjE_vucgM_xD4TO-QAAAE4"]
[Sun Dec 07 04:16:20.792127 2025] [:error] [pid 34108:tid 34118] [client 4.197.100.82:9865] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aTSPFKLvdvAppF-gXov9SQAAAAU"]
[Sun Dec 07 04:16:21.040257 2025] [:error] [pid 34108:tid 34133] [client 4.197.100.82:9758] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aTSPFaLvdvAppF-gXov9SgAAABQ"]
[Sun Dec 07 04:16:21.809975 2025] [:error] [pid 34108:tid 34114] [client 4.197.100.82:9891] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aTSPFaLvdvAppF-gXov9TQAAAAE"]
[Sun Dec 07 04:16:22.445438 2025] [:error] [pid 34108:tid 34121] [client 4.197.100.82:9676] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aTSPFqLvdvAppF-gXov9TwAAAAg"]
[Sun Dec 07 04:16:22.918580 2025] [:error] [pid 34195:tid 34215] [client 4.197.100.82:9421] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aTSPFhrSxOOdwv3vX3woygAAANE"]
[Sun Dec 07 04:16:23.671093 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:9436] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aTSPF6LvdvAppF-gXov9UQAAABM"]
[Sun Dec 07 04:16:24.832978 2025] [:error] [pid 34195:tid 34211] [client 4.197.100.82:9789] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aTSPGBrSxOOdwv3vX3wozQAAAM0"]
[Sun Dec 07 04:16:25.300187 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:10219] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aTSPGYjE_vucgM_xD4TO-wAAAEY"]
[Sun Dec 07 04:16:25.590561 2025] [:error] [pid 34108:tid 34116] [client 4.197.100.82:9711] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aTSPGaLvdvAppF-gXov9VAAAAAM"]
[Sun Dec 07 04:16:25.872350 2025] [:error] [pid 34108:tid 34129] [client 4.197.100.82:33031] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aTSPGaLvdvAppF-gXov9VwAAABA"]
[Sun Dec 07 04:16:26.061014 2025] [:error] [pid 34108:tid 34127] [client 4.197.100.82:10089] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aTSPGqLvdvAppF-gXov9WAAAAA4"]
[Sun Dec 07 04:16:26.264756 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:9409] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aTSPGqLvdvAppF-gXov9WQAAAAo"]
[Sun Dec 07 04:16:26.521565 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:9912] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aTSPGhrSxOOdwv3vX3wo0AAAANc"]
[Sun Dec 07 04:16:26.957541 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:10060] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aTSPGhrSxOOdwv3vX3wo0QAAAMc"]
[Sun Dec 07 04:16:27.203097 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:9725] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aTSPGxrSxOOdwv3vX3wo0gAAAMA"]
[Sun Dec 07 04:16:27.495276 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:33083] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aTSPGxrSxOOdwv3vX3wo0wAAAME"]
[Sun Dec 07 04:16:27.782146 2025] [:error] [pid 34108:tid 34136] [client 4.197.100.82:9849] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aTSPG6LvdvAppF-gXov9WgAAABc"]
[Sun Dec 07 04:16:28.147681 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:10183] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aTSPHBrSxOOdwv3vX3wo1gAAAMM"]
[Sun Dec 07 04:16:28.460879 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:9894] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aTSPHKLvdvAppF-gXov9XAAAABU"]
[Sun Dec 07 04:16:28.740574 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:9411] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aTSPHKLvdvAppF-gXov9XwAAAAQ"]
[Sun Dec 07 04:16:29.190384 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:9456] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aTSPHRrSxOOdwv3vX3wo1wAAANA"]
[Sun Dec 07 04:16:29.753211 2025] [:error] [pid 34109:tid 34145] [client 4.197.100.82:41772] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aTSPHYjE_vucgM_xD4TO_AAAAEU"]
[Sun Dec 07 04:16:30.383741 2025] [:error] [pid 34195:tid 34207] [client 4.197.100.82:9878] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aTSPHhrSxOOdwv3vX3wo2wAAAMk"]
[Sun Dec 07 04:16:31.865531 2025] [:error] [pid 34195:tid 34210] [client 4.197.100.82:9909] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aTSPHxrSxOOdwv3vX3wo3gAAAMw"]
[Sun Dec 07 04:16:32.865580 2025] [:error] [pid 34108:tid 34131] [client 4.197.100.82:10210] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media.php"] [unique_id "aTSPIKLvdvAppF-gXov9YgAAABI"]
[Sun Dec 07 04:16:33.380831 2025] [:error] [pid 34195:tid 34202] [client 4.197.100.82:10102] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media.php"] [unique_id "aTSPIRrSxOOdwv3vX3wo4wAAAMQ"]
[Sun Dec 07 04:16:33.639447 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:33043] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media.php"] [unique_id "aTSPIRrSxOOdwv3vX3wo5AAAANA"]
[Sun Dec 07 04:16:34.236590 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:41781] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media.php"] [unique_id "aTSPIhrSxOOdwv3vX3wo5gAAAM8"]
[Sun Dec 07 04:16:34.361751 2025] [:error] [pid 34109:tid 34156] [client 4.197.100.82:39684] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aTSPIojE_vucgM_xD4TO_QAAAFA"]
[Sun Dec 07 04:16:34.767614 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9756] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aTSPIhrSxOOdwv3vX3wo5wAAANQ"]
[Sun Dec 07 04:16:35.066332 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:9933] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aTSPI4jE_vucgM_xD4TO_wAAAEo"]
[Sun Dec 07 04:16:35.333268 2025] [:error] [pid 34109:tid 34148] [client 4.197.100.82:9476] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aTSPI4jE_vucgM_xD4TPAQAAAEg"]
[Sun Dec 07 04:16:35.608626 2025] [:error] [pid 34109:tid 34142] [client 4.197.100.82:9930] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aTSPI4jE_vucgM_xD4TPAgAAAEI"]
[Sun Dec 07 04:16:36.220199 2025] [:error] [pid 34109:tid 34141] [client 4.197.100.82:9907] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aTSPJIjE_vucgM_xD4TPAwAAAEE"]
[Sun Dec 07 04:16:36.658385 2025] [:error] [pid 34109:tid 34147] [client 4.197.100.82:9425] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aTSPJIjE_vucgM_xD4TPBAAAAEc"]
[Sun Dec 07 04:16:37.526938 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:39709] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aTSPJYjE_vucgM_xD4TPBwAAAFI"]
[Sun Dec 07 04:16:37.856116 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:9524] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aTSPJRrSxOOdwv3vX3wo7AAAAMY"]
[Sun Dec 07 04:16:38.562541 2025] [:error] [pid 34109:tid 34155] [client 4.197.100.82:9497] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aTSPJojE_vucgM_xD4TPCAAAAE8"]
[Sun Dec 07 04:16:39.184332 2025] [:error] [pid 34110:tid 34177] [client 4.197.100.82:33077] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aTSPJwndtmtsHiXHBO1vBwAAAIo"]
[Sun Dec 07 04:16:39.476467 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:39727] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-conflg.php"] [unique_id "aTSPJxrSxOOdwv3vX3wo7QAAAMA"]
[Sun Dec 07 04:16:39.578416 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:39704] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aTSPJxrSxOOdwv3vX3wo7gAAAME"]
[Sun Dec 07 04:16:39.764962 2025] [:error] [pid 34109:tid 34140] [client 4.197.100.82:9846] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aTSPJ4jE_vucgM_xD4TPDAAAAEA"]
[Sun Dec 07 04:16:40.288805 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:10092] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aTSPKBrSxOOdwv3vX3wo8QAAANU"]
[Sun Dec 07 04:16:40.695756 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:9511] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aTSPKBrSxOOdwv3vX3wo8gAAANA"]
[Sun Dec 07 04:16:41.094174 2025] [:error] [pid 34195:tid 34205] [client 4.197.100.82:39738] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTSPKRrSxOOdwv3vX3wo9QAAAMc"]
[Sun Dec 07 04:16:41.472371 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9766] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTSPKRrSxOOdwv3vX3wo9gAAAM4"]
[Sun Dec 07 04:16:41.897671 2025] [:error] [pid 34195:tid 34203] [client 4.197.100.82:41776] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTSPKRrSxOOdwv3vX3wo-QAAAMU"]
[Sun Dec 07 04:16:42.960300 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:41744] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTSPKhrSxOOdwv3vX3wo_QAAAMg"]
[Sun Dec 07 04:16:43.546335 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:9437] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aTSPKxrSxOOdwv3vX3wo_wAAANY"]
[Sun Dec 07 04:16:43.897283 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:9438] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aTSPKxrSxOOdwv3vX3wpAQAAAMA"]
[Sun Dec 07 04:16:44.616234 2025] [:error] [pid 34110:tid 34178] [client 4.197.100.82:9903] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aTSPLAndtmtsHiXHBO1vCQAAAIs"]
[Sun Dec 07 04:16:45.152905 2025] [:error] [pid 34109:tid 34143] [client 4.197.100.82:9422] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aTSPLYjE_vucgM_xD4TPEwAAAEM"]
[Sun Dec 07 04:16:45.377518 2025] [:error] [pid 34110:tid 34176] [client 4.197.100.82:10224] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aTSPLQndtmtsHiXHBO1vDwAAAIk"]
[Sun Dec 07 04:16:45.491388 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:9428] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aTSPLRrSxOOdwv3vX3wpEgAAAMM"]
[Sun Dec 07 04:16:45.550331 2025] [:error] [pid 34109:tid 34148] [client 4.197.100.82:41754] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aTSPLYjE_vucgM_xD4TPFgAAAEg"]
[Sun Dec 07 04:16:45.696207 2025] [:error] [pid 34195:tid 34199] [client 4.197.100.82:9482] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aTSPLRrSxOOdwv3vX3wpFwAAAME"]
[Sun Dec 07 04:16:45.937285 2025] [:error] [pid 34108:tid 34133] [client 4.197.100.82:39734] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aTSPLaLvdvAppF-gXov9ZgAAABQ"]
[Sun Dec 07 04:16:46.393757 2025] [:error] [pid 34195:tid 34207] [client 4.197.100.82:41737] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aTSPLhrSxOOdwv3vX3wpHgAAAMk"]
[Sun Dec 07 04:16:47.265300 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:10098] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aTSPL4jE_vucgM_xD4TPHwAAAEs"]
[Sun Dec 07 04:16:47.704629 2025] [:error] [pid 34108:tid 34125] [client 4.197.100.82:39699] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rnEPv9.php"] [unique_id "aTSPL6LvdvAppF-gXov9aAAAAAw"]
[Sun Dec 07 04:16:48.051014 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:9699] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aTSPMKLvdvAppF-gXov9aQAAAAQ"]
[Sun Dec 07 04:16:48.484581 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:41751] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aTSPMKLvdvAppF-gXov9agAAABY"]
[Sun Dec 07 04:16:49.342476 2025] [:error] [pid 34108:tid 34121] [client 4.197.100.82:39717] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aTSPMaLvdvAppF-gXov9bAAAAAg"]
[Sun Dec 07 04:16:49.896977 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:9419] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aTSPMRrSxOOdwv3vX3wpPwAAANU"]
[Sun Dec 07 04:16:50.229798 2025] [:error] [pid 34108:tid 34124] [client 4.197.100.82:9430] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aTSPMqLvdvAppF-gXov9bwAAAAs"]
[Sun Dec 07 04:16:51.498759 2025] [:error] [pid 34195:tid 34204] [client 4.197.100.82:41761] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aTSPMxrSxOOdwv3vX3wpRgAAAMY"]
[Sun Dec 07 04:16:51.869561 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:9478] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aTSPMwndtmtsHiXHBO1vHgAAAII"]
[Sun Dec 07 04:16:52.304320 2025] [:error] [pid 34110:tid 34178] [client 4.197.100.82:9444] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sun Dec 07 04:16:52.322374 2025] [:error] [pid 34110:tid 34172] [client 4.197.100.82:9444] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Dec 07 04:16:52.340594 2025] [:error] [pid 34110:tid 34186] [client 4.197.100.82:9444] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Sun Dec 07 04:16:52.366362 2025] [:error] [pid 34110:tid 34181] [client 4.197.100.82:9444] [client 4.197.100.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aTSPNAndtmtsHiXHBO1vIgAAAI4"]
[Sun Dec 07 04:16:52.870791 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/r4f_1.php
[Sun Dec 07 04:16:52.902166 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/ftp.php
[Sun Dec 07 04:16:54.363356 2025] [:error] [pid 34195:tid 34198] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Dec 07 04:16:54.388828 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Dec 07 04:16:54.407334 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Sun Dec 07 04:16:54.427907 2025] [:error] [pid 34195:tid 34219] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Sun Dec 07 04:16:54.446301 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun Dec 07 04:16:54.467645 2025] [:error] [pid 34195:tid 34214] [client 4.197.100.82:9505] File does not exist: /usr/local/apache/htdocs/suspended-page/miansha.php
[Sun Dec 07 04:16:54.482962 2025] [:error] [pid 34195:tid 34207] [client 4.197.100.82:9505] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test2.php"] [unique_id "aTSPNhrSxOOdwv3vX3wpUwAAAMk"]
[Sun Dec 07 04:16:54.925826 2025] [:error] [pid 34108:tid 34131] [client 4.197.100.82:9483] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test2.php"] [unique_id "aTSPNqLvdvAppF-gXov9cgAAABI"]
[Sun Dec 07 04:16:55.147044 2025] [:error] [pid 34110:tid 34184] [client 4.197.100.82:39706] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test2.php"] [unique_id "aTSPNwndtmtsHiXHBO1vIwAAAJE"]
[Sun Dec 07 04:16:55.247945 2025] [:error] [pid 34110:tid 34174] [client 4.197.100.82:9467] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test2.php"] [unique_id "aTSPNwndtmtsHiXHBO1vJAAAAIc"]
[Sun Dec 07 04:16:55.710705 2025] [:error] [pid 34110:tid 34191] [client 4.197.100.82:10231] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTSPNwndtmtsHiXHBO1vJQAAAJg"]
[Sun Dec 07 04:16:57.086065 2025] [:error] [pid 34110:tid 34190] [client 4.197.100.82:39712] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTSPOQndtmtsHiXHBO1vKgAAAJc"]
[Sun Dec 07 04:16:57.523937 2025] [:error] [pid 34110:tid 34180] [client 4.197.100.82:41764] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTSPOQndtmtsHiXHBO1vLAAAAI0"]
[Sun Dec 07 04:16:58.345180 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:9460] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTSPOojE_vucgM_xD4TPLQAAAE0"]
[Sun Dec 07 04:16:58.740234 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:33084] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aTSPOhrSxOOdwv3vX3wpWQAAANc"]
[Sun Dec 07 04:16:58.866473 2025] [:error] [pid 34195:tid 34216] [client 4.197.100.82:9764] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aTSPOhrSxOOdwv3vX3wpWgAAANI"]
[Sun Dec 07 04:16:58.985189 2025] [:error] [pid 34109:tid 34140] [client 4.197.100.82:9896] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aTSPOojE_vucgM_xD4TPMAAAAEA"]
[Sun Dec 07 04:16:59.030695 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:41784] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aTSPOwndtmtsHiXHBO1vLgAAAIw"]
[Sun Dec 07 04:16:59.972786 2025] [:error] [pid 34110:tid 34167] [client 4.197.100.82:39718] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "aTSPOwndtmtsHiXHBO1vLwAAAIA"]
[Sun Dec 07 04:17:00.365780 2025] [:error] [pid 34195:tid 34220] [client 4.197.100.82:41729] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "aTSPPBrSxOOdwv3vX3wpXAAAANY"]
[Sun Dec 07 04:17:00.562003 2025] [:error] [pid 34110:tid 34169] [client 4.197.100.82:10235] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "aTSPPAndtmtsHiXHBO1vMAAAAII"]
[Sun Dec 07 04:17:00.736344 2025] [:error] [pid 34110:tid 34178] [client 4.197.100.82:39700] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "aTSPPAndtmtsHiXHBO1vMQAAAIs"]
[Sun Dec 07 04:17:01.069167 2025] [:error] [pid 34110:tid 34186] [client 4.197.100.82:9408] [client 4.197.100.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aTSPPQndtmtsHiXHBO1vMwAAAJM"]
[Sun Dec 07 04:17:01.792434 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9923] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aTSPPRrSxOOdwv3vX3wpXwAAANQ"]
[Sun Dec 07 04:17:02.446423 2025] [:error] [pid 34108:tid 34135] [client 4.197.100.82:9927] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aTSPPqLvdvAppF-gXov9eAAAABY"]
[Sun Dec 07 04:17:03.151451 2025] [:error] [pid 34110:tid 34176] [client 4.197.100.82:9879] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aTSPPwndtmtsHiXHBO1vNQAAAIk"]
[Sun Dec 07 04:17:04.890016 2025] [:error] [pid 34195:tid 34215] [client 4.197.100.82:10061] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build.php"] [unique_id "aTSPQBrSxOOdwv3vX3wpYwAAANE"]
[Sun Dec 07 04:17:05.707146 2025] [:error] [pid 34108:tid 34118] [client 4.197.100.82:41728] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aTSPQaLvdvAppF-gXov9fgAAAAU"]
[Sun Dec 07 04:17:07.309024 2025] [:error] [pid 34108:tid 34131] [client 4.197.100.82:39692] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aTSPQ6LvdvAppF-gXov9gAAAABI"]
[Sun Dec 07 04:17:08.346775 2025] [:error] [pid 34109:tid 34144] [client 4.197.100.82:9952] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aTSPRIjE_vucgM_xD4TPNAAAAEQ"]
[Sun Dec 07 04:17:08.441134 2025] [:error] [pid 34110:tid 34182] [client 4.197.100.82:9847] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aTSPRAndtmtsHiXHBO1vPwAAAI8"]
[Sun Dec 07 04:17:08.533486 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:39721] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aTSPRAndtmtsHiXHBO1vQAAAAIE"]
[Sun Dec 07 04:17:08.788771 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:9470] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aTSPRAndtmtsHiXHBO1vQgAAAIw"]
[Sun Dec 07 04:17:08.961109 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:9449] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aTSPRBrSxOOdwv3vX3wpZwAAANc"]
[Sun Dec 07 04:17:10.238918 2025] [:error] [pid 34109:tid 34150] [client 4.197.100.82:9753] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aTSPRojE_vucgM_xD4TPNwAAAEo"]
[Sun Dec 07 04:17:13.806266 2025] [:error] [pid 34195:tid 34207] [client 4.197.100.82:39740] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTSPSRrSxOOdwv3vX3wpbwAAAMk"]
[Sun Dec 07 04:17:14.821052 2025] [:error] [pid 34195:tid 34200] [client 4.197.100.82:41763] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTSPShrSxOOdwv3vX3wpcQAAAMI"]
[Sun Dec 07 04:17:15.963784 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:41765] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTSPS4jE_vucgM_xD4TPQQAAAEs"]
[Sun Dec 07 04:17:17.180597 2025] [:error] [pid 34110:tid 34191] [client 4.197.100.82:41758] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTSPTQndtmtsHiXHBO1vYAAAAJg"]
[Sun Dec 07 04:17:18.739993 2025] [:error] [pid 34195:tid 34217] [client 4.197.100.82:41740] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aTSPThrSxOOdwv3vX3wpgQAAANM"]
[Sun Dec 07 04:17:19.012660 2025] [:error] [pid 34110:tid 34183] [client 4.197.100.82:41732] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aTSPTwndtmtsHiXHBO1vYgAAAJA"]
[Sun Dec 07 04:17:19.377941 2025] [:error] [pid 34110:tid 34171] [client 4.197.100.82:9739] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aTSPTwndtmtsHiXHBO1vZAAAAIQ"]
[Sun Dec 07 04:17:19.731168 2025] [:error] [pid 34110:tid 34179] [client 4.197.100.82:9426] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aTSPTwndtmtsHiXHBO1vZgAAAIw"]
[Sun Dec 07 04:17:21.879138 2025] [:error] [pid 34195:tid 34212] [client 4.197.100.82:9495] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTSPURrSxOOdwv3vX3wphgAAAM4"]
[Sun Dec 07 04:17:22.154363 2025] [:error] [pid 34108:tid 34128] [client 4.197.100.82:9796] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTSPUqLvdvAppF-gXov9hQAAAA8"]
[Sun Dec 07 04:17:22.589312 2025] [:error] [pid 34108:tid 34113] [client 4.197.100.82:9463] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTSPUqLvdvAppF-gXov9hgAAAAA"]
[Sun Dec 07 04:17:23.154842 2025] [:error] [pid 34109:tid 34142] [client 4.197.100.82:10070] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTSPU4jE_vucgM_xD4TPTAAAAEI"]
[Sun Dec 07 04:17:23.817885 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:9926] [client 4.197.100.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aTSPU4jE_vucgM_xD4TPTQAAAFI"]
[Sun Dec 07 04:17:24.585049 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:10237] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTSPVBrSxOOdwv3vX3wpigAAANc"]
[Sun Dec 07 04:17:25.147882 2025] [:error] [pid 34109:tid 34153] [client 4.197.100.82:41777] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTSPVYjE_vucgM_xD4TPUwAAAE0"]
[Sun Dec 07 04:17:25.447684 2025] [:error] [pid 34195:tid 34202] [client 4.197.100.82:33038] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTSPVRrSxOOdwv3vX3wpiwAAAMQ"]
[Sun Dec 07 04:17:26.803788 2025] [:error] [pid 34108:tid 34114] [client 4.197.100.82:9809] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTSPVqLvdvAppF-gXov9iwAAAAE"]
[Sun Dec 07 04:17:27.638295 2025] [:error] [pid 34108:tid 34132] [client 4.197.100.82:9424] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aTSPV6LvdvAppF-gXov9jQAAABM"]
[Sun Dec 07 04:17:28.282352 2025] [:error] [pid 34108:tid 34120] [client 4.197.100.82:9853] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aTSPWKLvdvAppF-gXov9kAAAAAc"]
[Sun Dec 07 04:17:30.216988 2025] [:error] [pid 34110:tid 34186] [client 4.197.100.82:9462] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aTSPWgndtmtsHiXHBO1vaQAAAJM"]
[Sun Dec 07 04:17:30.919836 2025] [:error] [pid 34108:tid 34127] [client 4.197.100.82:9453] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CLA.php"] [unique_id "aTSPWqLvdvAppF-gXov9lgAAAA4"]
[Sun Dec 07 04:17:33.264646 2025] [:error] [pid 34195:tid 34218] [client 4.197.100.82:9978] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aTSPXRrSxOOdwv3vX3wplAAAANQ"]
[Sun Dec 07 04:17:33.555517 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:9461] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aTSPXRrSxOOdwv3vX3wplgAAAMg"]
[Sun Dec 07 04:17:37.334337 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:9834] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aTSPYRrSxOOdwv3vX3wpmQAAANg"]
[Sun Dec 07 04:17:38.502914 2025] [:error] [pid 34108:tid 34134] [client 4.197.100.82:9427] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aTSPYqLvdvAppF-gXov9ogAAABU"]
[Sun Dec 07 04:17:39.181355 2025] [:error] [pid 34108:tid 34117] [client 4.197.100.82:9752] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aTSPY6LvdvAppF-gXov9pAAAAAQ"]
[Sun Dec 07 04:17:39.430168 2025] [:error] [pid 34108:tid 34124] [client 4.197.100.82:41755] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aTSPY6LvdvAppF-gXov9pQAAAAs"]
[Sun Dec 07 04:17:41.603783 2025] [:error] [pid 34108:tid 34123] [client 4.197.100.82:39725] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aTSPZaLvdvAppF-gXov9qQAAAAo"]
[Sun Dec 07 04:17:42.675119 2025] [:error] [pid 34195:tid 34201] [client 4.197.100.82:39739] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aTSPZhrSxOOdwv3vX3wpqgAAAMM"]
[Sun Dec 07 04:17:43.001365 2025] [:error] [pid 34195:tid 34213] [client 4.197.100.82:10182] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tgrs.php"] [unique_id "aTSPZxrSxOOdwv3vX3wpqwAAAM8"]
[Sun Dec 07 04:17:44.212648 2025] [:error] [pid 34195:tid 34221] [client 4.197.100.82:39693] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tgrs.php"] [unique_id "aTSPaBrSxOOdwv3vX3wprgAAANc"]
[Sun Dec 07 04:17:44.770286 2025] [:error] [pid 34108:tid 34130] [client 4.197.100.82:9524] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tgrs.php"] [unique_id "aTSPaKLvdvAppF-gXov9qgAAABE"]
[Sun Dec 07 04:17:44.913472 2025] [:error] [pid 34109:tid 34143] [client 4.197.100.82:33040] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tgrs.php"] [unique_id "aTSPaIjE_vucgM_xD4TPXwAAAEM"]
[Sun Dec 07 04:17:45.581715 2025] [:error] [pid 34108:tid 34115] [client 4.197.100.82:39714] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aTSPaaLvdvAppF-gXov9rAAAAAI"]
[Sun Dec 07 04:17:45.931887 2025] [:error] [pid 34109:tid 34158] [client 4.197.100.82:41786] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aTSPaYjE_vucgM_xD4TPYQAAAFI"]
[Sun Dec 07 04:17:46.390017 2025] [:error] [pid 34108:tid 34129] [client 4.197.100.82:39710] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aTSPaqLvdvAppF-gXov9rQAAABA"]
[Sun Dec 07 04:17:47.729181 2025] [:error] [pid 34109:tid 34140] [client 4.197.100.82:10185] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aTSPa4jE_vucgM_xD4TPZAAAAEA"]
[Sun Dec 07 04:17:48.193926 2025] [:error] [pid 34195:tid 34206] [client 4.197.100.82:9442] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTSPbBrSxOOdwv3vX3wpswAAAMg"]
[Sun Dec 07 04:17:49.360663 2025] [:error] [pid 34109:tid 34146] [client 4.197.100.82:10228] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTSPbYjE_vucgM_xD4TPaQAAAEY"]
[Sun Dec 07 04:17:50.196997 2025] [:error] [pid 34195:tid 34222] [client 4.197.100.82:9450] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTSPbhrSxOOdwv3vX3wp0AAAANg"]
[Sun Dec 07 04:17:50.431317 2025] [:error] [pid 34110:tid 34174] [client 4.197.100.82:9446] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTSPbgndtmtsHiXHBO1vfgAAAIc"]
[Sun Dec 07 04:17:50.678248 2025] [:error] [pid 34108:tid 34128] [client 4.197.100.82:9473] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aTSPbqLvdvAppF-gXov9vwAAAA8"]
[Sun Dec 07 04:17:51.276799 2025] [:error] [pid 34110:tid 34188] [client 4.197.100.82:10218] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aTSPbwndtmtsHiXHBO1vgAAAAJU"]
[Sun Dec 07 04:17:51.674253 2025] [:error] [pid 34110:tid 34171] [client 4.197.100.82:9816] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aTSPbwndtmtsHiXHBO1vgQAAAIQ"]
[Sun Dec 07 04:17:52.401732 2025] [:error] [pid 34110:tid 34168] [client 4.197.100.82:33064] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aTSPcAndtmtsHiXHBO1vgwAAAIE"]
[Sun Dec 07 04:17:53.046156 2025] [:error] [pid 34109:tid 34143] [client 4.197.100.82:9812] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aTSPcYjE_vucgM_xD4TPcAAAAEM"]
[Sun Dec 07 04:17:53.352179 2025] [:error] [pid 34109:tid 34142] [client 4.197.100.82:9443] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aTSPcYjE_vucgM_xD4TPcQAAAEI"]
[Sun Dec 07 04:17:53.544817 2025] [:error] [pid 34109:tid 34151] [client 4.197.100.82:9786] [client 4.197.100.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aTSPcYjE_vucgM_xD4TPcwAAAEs"]
[Sun Dec 07 04:17:54.682880 2025] [:error] [pid 34110:tid 34185] [client 4.197.100.82:9414] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Sun Dec 07 05:51:07.962359 2025] [:error] [pid 34109:tid 34150] [client 136.144.43.235:53337] [client 136.144.43.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.43.235, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aTSlS4jE_vucgM_xD4QR0gAAAEo"]
[Sun Dec 07 05:51:07.968073 2025] [:error] [pid 34109:tid 34150] [client 136.144.43.235:53337] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 07 07:45:00.146618 2025] [:error] [pid 34108:tid 34133] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun Dec 07 07:45:00.755660 2025] [:error] [pid 34108:tid 34132] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 07 07:45:01.057007 2025] [:error] [pid 34108:tid 34135] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun Dec 07 07:45:01.360913 2025] [:error] [pid 34108:tid 34127] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Sun Dec 07 07:45:01.663264 2025] [:error] [pid 34108:tid 34113] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun Dec 07 07:45:01.965253 2025] [:error] [pid 34108:tid 34126] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sun Dec 07 07:45:04.067488 2025] [:error] [pid 34108:tid 34118] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sun Dec 07 07:45:04.369193 2025] [:error] [pid 34108:tid 34125] [client 45.86.202.164:24461] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Sun Dec 07 07:45:04.978289 2025] [:error] [pid 34108:tid 34121] [client 45.86.202.164:24461] [client 45.86.202.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTTAAKLvdvAppF-gXotgVwAAAAg"]
[Sun Dec 07 07:45:06.684558 2025] [:error] [pid 34108:tid 34128] [client 45.86.202.177:53061] [client 45.86.202.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aTTAAqLvdvAppF-gXotgWAAAAA8"]
[Sun Dec 07 07:45:17.291478 2025] [:error] [pid 34110:tid 34182] [client 45.86.202.187:48461] [client 45.86.202.187] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aTTADQndtmtsHiXHBO3HYwAAAI8"]
[Sun Dec 07 07:45:17.887805 2025] [:error] [pid 7273:tid 7297] [client 45.86.202.171:58683] [client 45.86.202.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aTTADfpR7YTD7JcHjhHlUAAAAVY"]
[Sun Dec 07 09:28:33.304843 2025] [:error] [pid 25601:tid 25643] [client 5.252.55.178:62648] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTTYQatsSIqGPs4YVxHw3AAAAIg"]
[Sun Dec 07 09:28:34.402013 2025] [:error] [pid 25602:tid 25663] [client 5.252.55.178:61062] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTTYQhMayYLriq9gRdeH6QAAAME"]
[Sun Dec 07 09:28:35.725756 2025] [:error] [pid 25601:tid 25651] [client 5.252.55.178:55872] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTTYQ6tsSIqGPs4YVxHxPQAAAJA"]
[Sun Dec 07 09:28:36.921193 2025] [:error] [pid 25694:tid 25698] [client 5.252.55.178:54351] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTTYREf7996cewJ5N2-3OwAAAQI"]
[Sun Dec 07 09:28:38.080821 2025] [:error] [pid 25600:tid 25618] [client 5.252.55.178:64104] [client 5.252.55.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTTYRoX3SVrXRURpt5L3YgAAAEs"]
[Sun Dec 07 09:51:46.383696 2025] [:error] [pid 25600:tid 25614] [client 114.96.103.33:40221] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTTdsoX3SVrXRURpt5L83gAAAEc"]
[Sun Dec 07 13:08:31.756360 2025] [:error] [pid 25601:tid 25644] [client 85.209.135.111:52400] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTULz6tsSIqGPs4YVxEirgAAAIk"]
[Sun Dec 07 13:08:33.126614 2025] [:error] [pid 25602:tid 25668] [client 85.209.135.111:33464] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTUL0RMayYLriq9gRde_hgAAAMY"]
[Sun Dec 07 13:42:56.524378 2025] [:error] [pid 25600:tid 25614] [client 85.209.135.111:44372] [client 85.209.135.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aTUT4IX3SVrXRURpt5Iu8gAAAEc"]
[Sun Dec 07 16:03:09.018611 2025] [:error] [pid 25600:tid 25623] [client 182.44.2.148:41438] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTU0vYX3SVrXRURpt5JHiwAAAFA"]
[Sun Dec 07 16:05:01.531593 2025] [:error] [pid 36068:tid 36090] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sun Dec 07 16:05:01.841757 2025] [:error] [pid 36068:tid 36081] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun Dec 07 16:05:02.457302 2025] [:error] [pid 36068:tid 36072] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 07 16:05:02.762824 2025] [:error] [pid 36068:tid 36070] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun Dec 07 16:05:03.067761 2025] [:error] [pid 36068:tid 36085] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Sun Dec 07 16:05:03.374366 2025] [:error] [pid 36068:tid 36073] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun Dec 07 16:05:03.681850 2025] [:error] [pid 36068:tid 36092] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sun Dec 07 16:05:04.598937 2025] [:error] [pid 36068:tid 36084] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sun Dec 07 16:05:04.903469 2025] [:error] [pid 36068:tid 36086] [client 45.86.202.175:49471] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Sun Dec 07 16:05:05.509053 2025] [:error] [pid 36068:tid 36091] [client 45.86.202.175:49471] [client 45.86.202.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTU1MVGuxqM4ZYob8lPmUwAAABU"]
[Sun Dec 07 16:05:06.114213 2025] [:error] [pid 39560:tid 39571] [client 45.86.202.180:27867] [client 45.86.202.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aTU1MitL21FvSzcnpi0b_AAAAUk"]
[Sun Dec 07 16:05:06.723817 2025] [:error] [pid 39560:tid 39574] [client 45.86.202.197:24823] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aTU1MitL21FvSzcnpi0cAAAAAUw"]
[Sun Dec 07 16:05:07.326724 2025] [:error] [pid 25602:tid 25682] [client 45.86.202.161:39867] [client 45.86.202.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aTU1MxMayYLriq9gRdffngAAANQ"]
[Sun Dec 07 16:05:07.936208 2025] [:error] [pid 25602:tid 25684] [client 45.86.202.197:26843] [client 45.86.202.197] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aTU1MxMayYLriq9gRdffnwAAANY"]
[Sun Dec 07 18:50:54.929636 2025] [:error] [pid 25602:tid 25681] [client 143.44.192.217:33646] [client 143.44.192.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.44.192.217, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTVcDhMayYLriq9gRdf93AAAANM"]
[Sun Dec 07 18:50:54.934888 2025] [:error] [pid 25602:tid 25681] [client 143.44.192.217:33646] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 07 18:51:12.357824 2025] [:error] [pid 25694:tid 25703] [client 124.217.61.116:53776] [client 124.217.61.116] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.61.116, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTVcIEf7996cewJ5N29RHgAAAQc"]
[Sun Dec 07 18:51:12.363202 2025] [:error] [pid 25694:tid 25703] [client 124.217.61.116:53776] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Dec 07 21:15:17.558285 2025] [:error] [pid 9610:tid 9627] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sun Dec 07 21:15:17.890546 2025] [:error] [pid 9610:tid 9624] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun Dec 07 21:15:18.557727 2025] [:error] [pid 9610:tid 9620] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 07 21:15:18.897250 2025] [:error] [pid 9610:tid 9636] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun Dec 07 21:15:19.236055 2025] [:error] [pid 9610:tid 9615] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Sun Dec 07 21:15:19.568060 2025] [:error] [pid 9610:tid 9633] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun Dec 07 21:15:19.909380 2025] [:error] [pid 9610:tid 9634] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sun Dec 07 21:15:20.923666 2025] [:error] [pid 9610:tid 9632] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sun Dec 07 21:15:21.263023 2025] [:error] [pid 9610:tid 9629] [client 136.144.35.232:28699] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Sun Dec 07 21:15:21.929380 2025] [:error] [pid 9610:tid 9619] [client 136.144.35.232:28699] [client 136.144.35.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTV96cZ4Zl9G0UhQ7w046QAAAQc"]
[Sun Dec 07 21:15:22.589571 2025] [:error] [pid 5224:tid 5281] [client 136.144.35.230:41291] [client 136.144.35.230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aTV96vAAkbWt7RJBoF_pHwAAAMA"]
[Sun Dec 07 21:15:23.566802 2025] [:error] [pid 5224:tid 5294] [client 136.144.35.234:62895] [client 136.144.35.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aTV96_AAkbWt7RJBoF_pIAAAAM0"]
[Sun Dec 07 21:15:24.227261 2025] [:error] [pid 9961:tid 9974] [client 136.144.35.234:48709] [client 136.144.35.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aTV97GQdnfbgcnzr89JdjgAAAUs"]
[Sun Dec 07 21:15:24.892750 2025] [:error] [pid 5224:tid 5288] [client 136.144.35.231:46235] [client 136.144.35.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aTV97PAAkbWt7RJBoF_pIgAAAMc"]
[Mon Dec 08 04:25:04.438565 2025] [:error] [pid 18636:tid 18707] [client 180.102.134.69:56445] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTXioOgdXnohVr6jm70yUgAAAI8"]
[Mon Dec 08 07:33:39.771441 2025] [:error] [pid 63149:tid 63157] [client 3.67.76.136:49548] [client 3.67.76.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTYO0y6lCfxj0bibuYmntwAAAMY"]
[Mon Dec 08 08:08:32.205934 2025] [:error] [pid 39261:tid 39282] [client 189.130.200.41:61290] [client 189.130.200.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.130.200.41, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTYXAHijlEqKrwMitDGyRgAAANE"]
[Mon Dec 08 08:08:32.211341 2025] [:error] [pid 39261:tid 39282] [client 189.130.200.41:61290] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 08 11:46:37.067071 2025] [:error] [pid 43324:tid 43344] [client 45.88.186.148:51950] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTZKHWPgmTVXZPILisbgFgAAAVI"]
[Mon Dec 08 11:46:37.469728 2025] [:error] [pid 43324:tid 43330] [client 45.88.186.148:52048] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTZKHWPgmTVXZPILisbgIQAAAUQ"]
[Mon Dec 08 11:46:37.872348 2025] [:error] [pid 39160:tid 39208] [client 45.88.186.148:52162] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTZKHSm5Ndns0p3OT9CKDAAAAFA"]
[Mon Dec 08 11:46:38.292315 2025] [:error] [pid 39159:tid 39183] [client 45.88.186.148:52277] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTZKHk48HaQt8jqjSbqChgAAABI"]
[Mon Dec 08 11:46:38.701706 2025] [:error] [pid 43361:tid 43380] [client 45.88.186.148:52399] [client 45.88.186.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTZKHsrZJ_dsPpuIXPnQPQAAAZA"]
[Mon Dec 08 17:22:51.636311 2025] [:error] [pid 58758:tid 58773] [client 34.205.26.129:56654] [client 34.205.26.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTaY6wBS5U6_vVkyhEd-zAAAAEs"]
[Mon Dec 08 22:37:11.452762 2025] [:error] [pid 48573:tid 48588] [client 49.235.136.28:59694] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTbil1Iayuqwlm3CEkaknAAAAU0"]
[Mon Dec 08 23:13:23.750898 2025] [:error] [pid 48573:tid 48581] [client 3.76.8.241:34948] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aTbrE1Iayuqwlm3CEkavkgAAAUY"], referer: https://www.google.com/
[Mon Dec 08 23:13:24.344460 2025] [:error] [pid 48573:tid 48594] [client 3.76.8.241:34982] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aTbrFFIayuqwlm3CEkavlQAAAVM"], referer: https://www.google.com/
[Mon Dec 08 23:13:25.018292 2025] [:error] [pid 48481:tid 48492] [client 3.76.8.241:35026] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "aTbrFSe0pzx5KCi3S0I9owAAAMc"], referer: https://www.google.com/
[Mon Dec 08 23:13:25.650087 2025] [:error] [pid 48481:tid 48505] [client 3.76.8.241:35078] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod"] [unique_id "aTbrFSe0pzx5KCi3S0I9pAAAANQ"], referer: https://www.google.com/
[Mon Dec 08 23:13:26.317076 2025] [:error] [pid 48573:tid 48575] [client 3.76.8.241:35126] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aTbrFlIayuqwlm3CEkavmwAAAUA"], referer: https://www.google.com/
[Mon Dec 08 23:13:26.944164 2025] [:error] [pid 48541:tid 48549] [client 3.76.8.241:35174] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aTbrFgSNhJPArxLCdWEuTAAAAQY"], referer: https://www.google.com/
[Mon Dec 08 23:13:27.585435 2025] [:error] [pid 48573:tid 48581] [client 3.76.8.241:35216] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aTbrF1Iayuqwlm3CEkavoAAAAUY"], referer: https://www.google.com/
[Mon Dec 08 23:13:28.285343 2025] [:error] [pid 48573:tid 48580] [client 3.76.8.241:35258] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aTbrGFIayuqwlm3CEkavoQAAAUU"], referer: https://www.google.com/
[Mon Dec 08 23:13:28.864597 2025] [:error] [pid 48541:tid 48561] [client 3.76.8.241:35314] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aTbrGASNhJPArxLCdWEuUAAAARI"], referer: https://www.google.com/
[Mon Dec 08 23:13:29.544678 2025] [:error] [pid 48541:tid 48543] [client 3.76.8.241:35368] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aTbrGQSNhJPArxLCdWEuVAAAAQA"], referer: https://www.google.com/
[Mon Dec 08 23:13:30.128421 2025] [:error] [pid 48541:tid 48554] [client 3.76.8.241:35412] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aTbrGgSNhJPArxLCdWEuVwAAAQs"], referer: https://www.google.com/
[Mon Dec 08 23:13:30.774936 2025] [:error] [pid 48481:tid 48506] [client 3.76.8.241:35456] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aTbrGie0pzx5KCi3S0I9pgAAANU"], referer: https://www.google.com/
[Mon Dec 08 23:13:31.391409 2025] [:error] [pid 48541:tid 48549] [client 3.76.8.241:35492] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aTbrGwSNhJPArxLCdWEuXAAAAQY"], referer: https://www.google.com/
[Mon Dec 08 23:13:32.029373 2025] [:error] [pid 48541:tid 48565] [client 3.76.8.241:35544] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aTbrHASNhJPArxLCdWEuXgAAARY"], referer: https://www.google.com/
[Mon Dec 08 23:13:32.696779 2025] [:error] [pid 50569:tid 50572] [client 3.76.8.241:35576] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.orig"] [unique_id "aTbrHPHhZxyKreYmWzLfKQAAAAA"], referer: https://www.google.com/
[Mon Dec 08 23:13:33.441305 2025] [:error] [pid 50569:tid 50577] [client 3.76.8.241:35620] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.swp"] [unique_id "aTbrHfHhZxyKreYmWzLfLQAAAAU"], referer: https://www.google.com/
[Mon Dec 08 23:13:34.124021 2025] [:error] [pid 48573:tid 48596] [client 3.76.8.241:35650] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env~"] [unique_id "aTbrHlIayuqwlm3CEkavpQAAAVU"], referer: https://www.google.com/
[Mon Dec 08 23:13:34.782938 2025] [:error] [pid 48541:tid 48547] [client 3.76.8.241:35684] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.tmp"] [unique_id "aTbrHgSNhJPArxLCdWEuYAAAAQQ"], referer: https://www.google.com/
[Mon Dec 08 23:13:35.450324 2025] [:error] [pid 50569:tid 50582] [client 3.76.8.241:35734] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dist"] [unique_id "aTbrH_HhZxyKreYmWzLfLwAAAAo"], referer: https://www.google.com/
[Mon Dec 08 23:13:36.122121 2025] [:error] [pid 48573:tid 48588] [client 3.76.8.241:35780] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aTbrIFIayuqwlm3CEkavqQAAAU0"], referer: https://www.google.com/
[Mon Dec 08 23:13:36.687361 2025] [:error] [pid 48541:tid 48563] [client 3.76.8.241:35818] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.save"] [unique_id "aTbrIASNhJPArxLCdWEuZQAAARQ"], referer: https://www.google.com/
[Mon Dec 08 23:13:37.370352 2025] [:error] [pid 48481:tid 48489] [client 3.76.8.241:35846] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.bak"] [unique_id "aTbrISe0pzx5KCi3S0I9qgAAAMQ"], referer: https://www.google.com/
[Mon Dec 08 23:13:37.935361 2025] [:error] [pid 48481:tid 48507] [client 3.76.8.241:35892] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.old"] [unique_id "aTbrISe0pzx5KCi3S0I9qwAAANY"], referer: https://www.google.com/
[Mon Dec 08 23:13:38.494849 2025] [:error] [pid 48573:tid 48578] [client 3.76.8.241:35926] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aTbrIlIayuqwlm3CEkavqwAAAUM"], referer: https://www.google.com/
[Mon Dec 08 23:13:39.227337 2025] [:error] [pid 48573:tid 48586] [client 3.76.8.241:35966] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.save"] [unique_id "aTbrI1Iayuqwlm3CEkavrAAAAUs"], referer: https://www.google.com/
[Mon Dec 08 23:13:39.890147 2025] [:error] [pid 48573:tid 48596] [client 3.76.8.241:36022] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.bak"] [unique_id "aTbrI1Iayuqwlm3CEkavsAAAAVU"], referer: https://www.google.com/
[Mon Dec 08 23:13:40.473809 2025] [:error] [pid 48573:tid 48591] [client 3.76.8.241:36088] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.old"] [unique_id "aTbrJFIayuqwlm3CEkavsgAAAVA"], referer: https://www.google.com/
[Mon Dec 08 23:13:41.088254 2025] [:error] [pid 48541:tid 48561] [client 3.76.8.241:36132] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aTbrJQSNhJPArxLCdWEuZgAAARI"], referer: https://www.google.com/
[Mon Dec 08 23:13:41.652988 2025] [:error] [pid 48481:tid 48502] [client 3.76.8.241:36170] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.save"] [unique_id "aTbrJSe0pzx5KCi3S0I9rwAAANE"], referer: https://www.google.com/
[Mon Dec 08 23:13:42.428611 2025] [:error] [pid 48573:tid 48575] [client 3.76.8.241:36224] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.bak"] [unique_id "aTbrJlIayuqwlm3CEkavtgAAAUA"], referer: https://www.google.com/
[Mon Dec 08 23:13:43.193303 2025] [:error] [pid 48482:tid 48527] [client 3.76.8.241:36272] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.old"] [unique_id "aTbrJ323gV7gRu3vn82m8wAAAI8"], referer: https://www.google.com/
[Mon Dec 08 23:13:44.289984 2025] [:error] [pid 48573:tid 48593] [client 3.76.8.241:36306] [client 3.76.8.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aTbrKFIayuqwlm3CEkavtwAAAVI"], referer: https://www.google.com/
[Tue Dec 09 02:27:04.860623 2025] [:error] [pid 17588:tid 17622] [client 4.230.25.181:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.de/
[Tue Dec 09 02:27:08.657976 2025] [:error] [pid 17588:tid 17630] [client 4.230.25.181:37241] [client 4.230.25.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.25.181, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTcYfDfolJgrovDIxbRyewAAAIo"], referer: https://www.google.fr/
[Tue Dec 09 02:27:08.962115 2025] [:error] [pid 17588:tid 17624] [client 4.230.25.181:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.google.fr/
[Tue Dec 09 02:27:09.262972 2025] [:error] [pid 17588:tid 17641] [client 4.230.25.181:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php, referer: https://www.bing.com/
[Tue Dec 09 02:27:11.986201 2025] [:error] [pid 17588:tid 17635] [client 4.230.25.181:37241] [client 4.230.25.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTcYfzfolJgrovDIxbRykQAAAI8"], referer: https://www.yahoo.com/
[Tue Dec 09 03:05:04.283513 2025] [:error] [pid 17588:tid 17633] [client 35.163.58.243:51218] [client 35.163.58.243] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aTchYDfolJgrovDIxbR5pgAAAI0"]
[Tue Dec 09 04:39:32.543209 2025] [:error] [pid 62039:tid 62051] [client 187.19.156.202:52110] [client 187.19.156.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.156.202, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTc3hK-WdjFepfLrlW5uIwAAAAg"]
[Tue Dec 09 04:39:32.549074 2025] [:error] [pid 62039:tid 62051] [client 187.19.156.202:52110] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 09 04:39:34.188428 2025] [:error] [pid 62039:tid 62050] [client 106.219.183.96:31379] [client 106.219.183.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.183.96, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTc3hq-WdjFepfLrlW5uJgAAAAc"]
[Tue Dec 09 04:39:34.193667 2025] [:error] [pid 62039:tid 62050] [client 106.219.183.96:31379] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 09 04:49:13.264969 2025] [:error] [pid 26689:tid 26749] [client 192.144.148.122:38886] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTc5ydkbfj8nyBvIyRAbFAAAAQ0"]
[Tue Dec 09 04:55:54.689078 2025] [:error] [pid 62039:tid 62043] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php, referer: https://www.google.de/
[Tue Dec 09 04:55:54.965642 2025] [:error] [pid 62039:tid 62066] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.co.uk/
[Tue Dec 09 04:55:55.056729 2025] [:error] [pid 62039:tid 62044] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.de/
[Tue Dec 09 04:55:55.148609 2025] [:error] [pid 62039:tid 62053] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:55.240442 2025] [:error] [pid 62039:tid 62064] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/96i.php, referer: https://www.yahoo.com/
[Tue Dec 09 04:55:55.332630 2025] [:error] [pid 62039:tid 62045] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php, referer: https://www.google.de/
[Tue Dec 09 04:55:55.423787 2025] [:error] [pid 62039:tid 62049] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.fr/
[Tue Dec 09 04:55:55.516005 2025] [:error] [pid 62039:tid 62052] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.bing.com/
[Tue Dec 09 04:55:55.696659 2025] [:error] [pid 62039:tid 62051] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:55.969445 2025] [:error] [pid 62039:tid 62047] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.yahoo.com/
[Tue Dec 09 04:55:56.063054 2025] [:error] [pid 62039:tid 62046] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php, referer: https://www.google.fr/
[Tue Dec 09 04:55:56.154141 2025] [:error] [pid 62039:tid 62058] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.de/
[Tue Dec 09 04:55:56.245131 2025] [:error] [pid 62039:tid 62054] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.bing.com/
[Tue Dec 09 04:55:56.428093 2025] [:error] [pid 62039:tid 62059] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:56.519443 2025] [:error] [pid 62039:tid 62043] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.co.uk/
[Tue Dec 09 04:55:56.612385 2025] [:error] [pid 62039:tid 62057] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.de/
[Tue Dec 09 04:55:56.704175 2025] [:error] [pid 62039:tid 62050] [client 4.194.144.102:33275] [client 4.194.144.102] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.194.144.102, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aTc7XK-WdjFepfLrlW5ybAAAAAc"], referer: https://www.yahoo.com/
[Tue Dec 09 04:55:56.799458 2025] [:error] [pid 62039:tid 62066] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.yahoo.com/
[Tue Dec 09 04:55:56.890729 2025] [:error] [pid 62039:tid 62044] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:56.981467 2025] [:error] [pid 62039:tid 62055] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php, referer: https://www.bing.com/
[Tue Dec 09 04:55:57.071851 2025] [:error] [pid 62039:tid 62053] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.com/
[Tue Dec 09 04:55:57.164367 2025] [:error] [pid 62039:tid 62048] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.yahoo.com/
[Tue Dec 09 04:55:57.255358 2025] [:error] [pid 62039:tid 62064] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/cord.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:57.346234 2025] [:error] [pid 62039:tid 62045] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php, referer: https://www.google.fr/
[Tue Dec 09 04:55:57.437617 2025] [:error] [pid 62039:tid 62060] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:57.528986 2025] [:error] [pid 62039:tid 62049] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:57.621814 2025] [:error] [pid 62039:tid 62052] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.de/
[Tue Dec 09 04:55:57.713703 2025] [:error] [pid 62039:tid 62063] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php, referer: https://www.google.com/
[Tue Dec 09 04:55:57.805467 2025] [:error] [pid 62039:tid 62051] [client 4.194.144.102:33275] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:57.893301 2025] [:error] [pid 62039:tid 62061] [client 4.194.144.102:33275] [client 4.194.144.102] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aTc7Xa-WdjFepfLrlW5yeQAAABI"], referer: https://www.google.com/
[Tue Dec 09 04:55:58.165340 2025] [:error] [pid 34783:tid 34798] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/help.php, referer: https://duckduckgo.com/
[Tue Dec 09 04:55:58.256495 2025] [:error] [pid 34783:tid 34792] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php, referer: https://www.google.com/
[Tue Dec 09 04:55:58.804971 2025] [:error] [pid 34783:tid 34804] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.co.uk/
[Tue Dec 09 04:55:58.897895 2025] [:error] [pid 34783:tid 34808] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.fr/
[Tue Dec 09 04:55:59.079648 2025] [:error] [pid 34783:tid 34805] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://www.bing.com/
[Tue Dec 09 04:55:59.173071 2025] [:error] [pid 34783:tid 34794] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.com/
[Tue Dec 09 04:55:59.267002 2025] [:error] [pid 34783:tid 34789] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php, referer: https://www.google.co.uk/
[Tue Dec 09 04:55:59.359745 2025] [:error] [pid 34783:tid 34802] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php, referer: https://www.bing.com/
[Tue Dec 09 04:55:59.450995 2025] [:error] [pid 34783:tid 34785] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.bing.com/
[Tue Dec 09 04:55:59.543605 2025] [:error] [pid 34783:tid 34803] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/network_xo.php, referer: https://www.google.com/
[Tue Dec 09 04:55:59.634599 2025] [:error] [pid 34783:tid 34788] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Tue Dec 09 04:55:59.727333 2025] [:error] [pid 34783:tid 34807] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/nxc.php, referer: https://www.google.fr/
[Tue Dec 09 04:55:59.817893 2025] [:error] [pid 34783:tid 34791] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php, referer: https://www.google.co.uk/
[Tue Dec 09 04:55:59.908150 2025] [:error] [pid 34783:tid 34793] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.yahoo.com/
[Tue Dec 09 04:56:00.000822 2025] [:error] [pid 34783:tid 34786] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php, referer: https://www.google.de/
[Tue Dec 09 04:56:00.093913 2025] [:error] [pid 34783:tid 34792] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.fr/
[Tue Dec 09 04:56:00.184802 2025] [:error] [pid 34783:tid 34800] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php, referer: https://www.google.com/
[Tue Dec 09 04:56:00.277262 2025] [:error] [pid 34783:tid 34806] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.bing.com/
[Tue Dec 09 04:56:00.459236 2025] [:error] [pid 34783:tid 34801] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php, referer: https://www.google.de/
[Tue Dec 09 04:56:00.551194 2025] [:error] [pid 34783:tid 34804] [client 4.194.144.102:61989] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php, referer: https://www.bing.com/
[Tue Dec 09 06:24:02.059781 2025] [:error] [pid 26689:tid 26756] [client 77.239.108.81:37106] [client 77.239.108.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aTdQAtkbfj8nyBvIyRA-gAAAARQ"]
[Tue Dec 09 10:18:59.478355 2025] [:error] [pid 26689:tid 26743] [client 145.239.10.137:36774] File does not exist: /usr/local/apache/htdocs/suspended-page/o.php, referer: http://dbservices.com.au/o.php
[Tue Dec 09 10:45:10.288495 2025] [:error] [pid 62041:tid 62097] [client 43.138.68.113:45384] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTeNNvOmnJGvfaNPxPOS2QAAAIA"]
[Tue Dec 09 11:22:19.345371 2025] [:error] [pid 62041:tid 62101] [client 45.138.16.233:55641] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/postnews.php"] [unique_id "aTeV6_OmnJGvfaNPxPOZ8AAAAIQ"]
[Tue Dec 09 11:22:19.944455 2025] [:error] [pid 62040:tid 62080] [client 45.138.16.233:55731] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aTeV6_kSVjwLGqZL-9KnAAAAAEo"]
[Tue Dec 09 11:22:20.538197 2025] [:error] [pid 62041:tid 62109] [client 45.138.16.233:55813] [client 45.138.16.233] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aTeV7POmnJGvfaNPxPOZ8wAAAIw"]
[Tue Dec 09 14:42:01.683007 2025] [:error] [pid 7382:tid 7408] [client 43.131.243.61:36504] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTfEuSdEXhamGkzwq-gsZQAAAc4"]
[Tue Dec 09 14:54:24.052172 2025] [:error] [pid 7382:tid 7404] [client 45.138.16.233:49243] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHoCdEXhamGkzwq-gykAAAAco"], referer: www.google.com
[Tue Dec 09 14:54:24.053607 2025] [:error] [pid 7324:tid 7333] [client 45.138.16.233:60488] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHoOf70zXc9zH4rTLUvQAAAUQ"], referer: www.google.com
[Tue Dec 09 14:54:24.072687 2025] [:error] [pid 7324:tid 7345] [client 45.138.16.233:51839] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTfHoOf70zXc9zH4rTLUvgAAAVA"]
[Tue Dec 09 14:54:24.094295 2025] [:error] [pid 7324:tid 7344] [client 45.138.16.233:50131] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHoOf70zXc9zH4rTLUvwAAAU8"], referer: www.google.com
[Tue Dec 09 14:54:24.096329 2025] [:error] [pid 7324:tid 7338] [client 45.138.16.233:50134] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHoOf70zXc9zH4rTLUwAAAAUk"]
[Tue Dec 09 14:54:24.665031 2025] [:error] [pid 59388:tid 59411] [client 45.138.16.233:65389] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHoN7acjYK4IXwCBWkHgAAAJU"], referer: www.google.com
[Tue Dec 09 14:54:24.665192 2025] [:error] [pid 59388:tid 59413] [client 45.138.16.233:65384] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHoN7acjYK4IXwCBWkHwAAAJc"], referer: www.google.com
[Tue Dec 09 14:54:24.668173 2025] [:error] [pid 59388:tid 59395] [client 45.138.16.233:49176] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTfHoN7acjYK4IXwCBWkIAAAAIU"]
[Tue Dec 09 14:54:24.695971 2025] [:error] [pid 59388:tid 59398] [client 45.138.16.233:49790] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHoN7acjYK4IXwCBWkIgAAAIg"]
[Tue Dec 09 14:54:24.695986 2025] [:error] [pid 59388:tid 59396] [client 45.138.16.233:49746] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHoN7acjYK4IXwCBWkIQAAAIY"], referer: www.google.com
[Tue Dec 09 14:54:25.265245 2025] [:error] [pid 59388:tid 59402] [client 45.138.16.233:57976] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHod7acjYK4IXwCBWkPgAAAIw"], referer: www.google.com
[Tue Dec 09 14:54:25.269368 2025] [:error] [pid 59388:tid 59411] [client 45.138.16.233:57974] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHod7acjYK4IXwCBWkQAAAAJU"], referer: www.google.com
[Tue Dec 09 14:54:25.295980 2025] [:error] [pid 12069:tid 12088] [client 45.138.16.233:57977] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTfHoWwNDNgPF6LHYDTdbQAAAFE"]
[Tue Dec 09 14:54:25.313379 2025] [:error] [pid 12069:tid 12095] [client 45.138.16.233:57879] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHoWwNDNgPF6LHYDTdbwAAAFg"]
[Tue Dec 09 14:54:25.316391 2025] [:error] [pid 59388:tid 59413] [client 45.138.16.233:57872] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHod7acjYK4IXwCBWkQgAAAJc"], referer: www.google.com
[Tue Dec 09 14:54:25.864669 2025] [:error] [pid 59388:tid 59393] [client 45.138.16.233:58198] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHod7acjYK4IXwCBWkSgAAAIM"], referer: www.google.com
[Tue Dec 09 14:54:25.864722 2025] [:error] [pid 12069:tid 12081] [client 45.138.16.233:57982] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHoWwNDNgPF6LHYDTdegAAAEo"], referer: www.google.com
[Tue Dec 09 14:54:25.901495 2025] [:error] [pid 7287:tid 7302] [client 45.138.16.233:58116] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTfHof3UQf3HGDaVS5P-PAAAAA0"]
[Tue Dec 09 14:54:25.920171 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:52028] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHod7acjYK4IXwCBWkSwAAAIE"]
[Tue Dec 09 14:54:25.953599 2025] [:error] [pid 59388:tid 59408] [client 45.138.16.233:65359] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHod7acjYK4IXwCBWkTAAAAJI"], referer: www.google.com
[Tue Dec 09 14:54:26.459448 2025] [:error] [pid 7382:tid 7403] [client 45.138.16.233:49176] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-plain.php"] [unique_id "aTfHoidEXhamGkzwq-gyowAAAck"], referer: www.google.com
[Tue Dec 09 14:54:26.459630 2025] [:error] [pid 59388:tid 59392] [client 45.138.16.233:49424] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHot7acjYK4IXwCBWkVgAAAII"], referer: www.google.com
[Tue Dec 09 14:54:26.497626 2025] [:error] [pid 12069:tid 12074] [client 45.138.16.233:57020] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTfHomwNDNgPF6LHYDTdhQAAAEM"]
[Tue Dec 09 14:54:26.532649 2025] [:error] [pid 7324:tid 7342] [client 45.138.16.233:49794] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aTfHouf70zXc9zH4rTLU2AAAAU0"]
[Tue Dec 09 14:54:26.561261 2025] [:error] [pid 7324:tid 7329] [client 45.138.16.233:65475] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHouf70zXc9zH4rTLU2QAAAUA"], referer: www.google.com
[Tue Dec 09 14:54:27.673898 2025] [:error] [pid 59388:tid 59391] [client 45.138.16.233:58332] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHo97acjYK4IXwCBWkYAAAAIE"], referer: www.google.com
[Tue Dec 09 14:54:27.768096 2025] [:error] [pid 7287:tid 7302] [client 45.138.16.233:49929] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHo_3UQf3HGDaVS5P-UwAAAA0"], referer: www.google.com
[Tue Dec 09 14:54:28.865907 2025] [:error] [pid 12069:tid 12095] [client 45.138.16.233:57986] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHpGwNDNgPF6LHYDTdoQAAAFg"], referer: www.google.com
[Tue Dec 09 14:54:29.041633 2025] [:error] [pid 12069:tid 12088] [client 45.138.16.233:49383] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHpWwNDNgPF6LHYDTdrgAAAFE"], referer: www.google.com
[Tue Dec 09 14:54:30.076327 2025] [:error] [pid 7325:tid 7368] [client 45.138.16.233:65384] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHpgqEQlZnpyQAsW1bKQAAAYw"], referer: www.google.com
[Tue Dec 09 14:54:30.247992 2025] [:error] [pid 12069:tid 12075] [client 45.138.16.233:58161] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHpmwNDNgPF6LHYDTd3AAAAEQ"], referer: www.google.com
[Tue Dec 09 14:54:31.281070 2025] [:error] [pid 59388:tid 59396] [client 45.138.16.233:51723] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHp97acjYK4IXwCBWkoQAAAIY"], referer: www.google.com
[Tue Dec 09 14:54:31.439037 2025] [:error] [pid 7382:tid 7415] [client 45.138.16.233:55613] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHpydEXhamGkzwq-gyyAAAAdU"], referer: www.google.com
[Tue Dec 09 14:54:32.491642 2025] [:error] [pid 7324:tid 7333] [client 45.138.16.233:57275] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "aTfHqOf70zXc9zH4rTLVIAAAAUQ"], referer: www.google.com
[Tue Dec 09 14:54:32.643176 2025] [:error] [pid 12069:tid 12091] [client 45.138.16.233:50123] [client 45.138.16.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "aTfHqGwNDNgPF6LHYDTeAgAAAFQ"], referer: www.google.com
[Tue Dec 09 15:00:36.349493 2025] [:error] [pid 7382:tid 7417] [client 103.77.106.81:60218] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aTfJFCdEXhamGkzwq-g1nwAAAdc"]
[Tue Dec 09 16:47:58.625838 2025] [:error] [pid 30499:tid 30535] [client 122.51.236.174:41680] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTfiPk0x3OqZTOPp7cmrZAAAAUU"]
[Tue Dec 09 17:28:20.314443 2025] [:error] [pid 30591:tid 30618] [client 34.148.218.65:52092] [client 34.148.218.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.218.65, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTfrtBG-g76drVdWQUU9hgAAAFg"]
[Tue Dec 09 17:28:20.317888 2025] [:error] [pid 30591:tid 30618] [client 34.148.218.65:52092] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 09 17:28:23.020826 2025] [:error] [pid 30591:tid 30614] [client 34.148.218.65:52092] [client 34.148.218.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTfrtxG-g76drVdWQUU9lQAAAFQ"]
[Tue Dec 09 17:28:23.490037 2025] [:error] [pid 30500:tid 30568] [client 34.148.218.65:55985] [client 34.148.218.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTfrt62eIIK3JPWHCXWNNQAAAYs"]
[Tue Dec 09 17:28:23.916835 2025] [:error] [pid 30499:tid 30548] [client 34.148.218.65:55632] [client 34.148.218.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTfrt00x3OqZTOPp7cm3NQAAAVI"]
[Tue Dec 09 17:28:24.391488 2025] [:error] [pid 30591:tid 30598] [client 34.148.218.65:54069] [client 34.148.218.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTfruBG-g76drVdWQUU9lgAAAEQ"]
[Tue Dec 09 17:28:24.896145 2025] [:error] [pid 30500:tid 30567] [client 34.148.218.65:57493] [client 34.148.218.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTfruK2eIIK3JPWHCXWNPQAAAYo"]
[Tue Dec 09 17:28:25.317607 2025] [:error] [pid 30500:tid 30564] [client 34.148.218.65:63255] [client 34.148.218.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTfrua2eIIK3JPWHCXWNPwAAAYc"]
[Tue Dec 09 17:28:25.770440 2025] [:error] [pid 30500:tid 30572] [client 34.148.218.65:63927] [client 34.148.218.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTfrua2eIIK3JPWHCXWNQQAAAY8"]
[Tue Dec 09 19:53:48.883698 2025] [:error] [pid 30498:tid 30504] [client 35.192.77.233:61200] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTgNzB2mcZJQ5qP_RC0muwAAAAI"]
[Tue Dec 09 19:53:49.328568 2025] [:error] [pid 30591:tid 30616] [client 35.192.77.233:53267] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTgNzRG-g76drVdWQUVtDAAAAFY"]
[Tue Dec 09 19:53:49.741041 2025] [:error] [pid 5276:tid 5282] [client 35.192.77.233:63645] [client 35.192.77.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aTgNzUtSXwbewdwyu-1i8AAAAMQ"]
[Tue Dec 09 22:59:14.948038 2025] [:error] [pid 30500:tid 30558] [client 182.44.67.97:44329] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTg5Qq2eIIK3JPWHCXUhbQAAAYE"]
[Wed Dec 10 01:36:05.358381 2025] [:error] [pid 2277:tid 2288] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Wed Dec 10 01:36:05.478448 2025] [:error] [pid 2277:tid 2283] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/zxl.php
[Wed Dec 10 01:36:05.599798 2025] [:error] [pid 2277:tid 2291] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/dbc.php
[Wed Dec 10 01:36:05.717521 2025] [:error] [pid 2277:tid 2306] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Wed Dec 10 01:36:05.834768 2025] [:error] [pid 2277:tid 2299] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/11092null.php
[Wed Dec 10 01:36:05.954748 2025] [:error] [pid 2277:tid 2302] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/12053null.php
[Wed Dec 10 01:36:06.071064 2025] [:error] [pid 2277:tid 2300] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Wed Dec 10 01:36:06.186680 2025] [:error] [pid 2277:tid 2285] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/0o0.php
[Wed Dec 10 01:36:06.305050 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/see.php
[Wed Dec 10 01:36:06.423851 2025] [:error] [pid 2277:tid 2284] [client 172.192.58.229:21065] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Wed Dec 10 01:36:06.538279 2025] [:error] [pid 2277:tid 2295] [client 172.192.58.229:21065] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aTheBoWGo731r6eS-w5bDwAAAAw"]
[Wed Dec 10 01:36:06.877584 2025] [:error] [pid 37041:tid 37044] [client 172.192.58.229:21058] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aTheBruffDW8UzBwa1aycAAAAEE"]
[Wed Dec 10 01:36:07.104756 2025] [:error] [pid 2277:tid 2282] [client 172.192.58.229:15223] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aTheB4WGo731r6eS-w5bEwAAAAA"]
[Wed Dec 10 01:36:07.331304 2025] [:error] [pid 37041:tid 37062] [client 172.192.58.229:15181] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aTheB7uffDW8UzBwa1aycQAAAFM"]
[Wed Dec 10 01:36:07.557163 2025] [:error] [pid 2280:tid 2345] [client 172.192.58.229:15172] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wo.php"] [unique_id "aTheB3cqIB-8ALgw4ZpXdQAAAIg"]
[Wed Dec 10 01:36:07.787985 2025] [:error] [pid 37041:tid 37061] [client 172.192.58.229:15184] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wo.php"] [unique_id "aTheB7uffDW8UzBwa1aydQAAAFI"]
[Wed Dec 10 01:36:08.028499 2025] [:error] [pid 2280:tid 2361] [client 172.192.58.229:15203] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wo.php"] [unique_id "aTheCHcqIB-8ALgw4ZpXeAAAAJg"]
[Wed Dec 10 01:36:08.255475 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15210] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wo.php"] [unique_id "aTheCHcqIB-8ALgw4ZpXegAAAIQ"]
[Wed Dec 10 01:36:08.488383 2025] [:error] [pid 37041:tid 37060] [client 172.192.58.229:21075] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTheCLuffDW8UzBwa1ayeQAAAFE"]
[Wed Dec 10 01:36:08.716208 2025] [:error] [pid 2280:tid 2352] [client 172.192.58.229:15206] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTheCHcqIB-8ALgw4ZpXfwAAAI8"]
[Wed Dec 10 01:36:08.947941 2025] [:error] [pid 2277:tid 2306] [client 172.192.58.229:15228] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTheCIWGo731r6eS-w5bFgAAABc"]
[Wed Dec 10 01:36:09.178073 2025] [:error] [pid 2366:tid 2381] [client 172.192.58.229:21063] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AxAo.php"] [unique_id "aTheCUAeBjkmsNRkd1NnlQAAAM0"]
[Wed Dec 10 01:36:09.405105 2025] [:error] [pid 2279:tid 2331] [client 172.192.58.229:15205] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aTheCVmpdQscMcJOElW1eQAAAVU"]
[Wed Dec 10 01:36:09.631843 2025] [:error] [pid 2366:tid 2377] [client 172.192.58.229:21068] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aTheCUAeBjkmsNRkd1NnmQAAAMk"]
[Wed Dec 10 01:36:09.862800 2025] [:error] [pid 2280:tid 2353] [client 172.192.58.229:21070] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aTheCXcqIB-8ALgw4ZpXgwAAAJA"]
[Wed Dec 10 01:36:10.090789 2025] [:error] [pid 2280:tid 2358] [client 172.192.58.229:21066] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aTheCncqIB-8ALgw4ZpXhAAAAJU"]
[Wed Dec 10 01:36:10.318441 2025] [:error] [pid 2277:tid 2302] [client 172.192.58.229:15204] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aTheCoWGo731r6eS-w5bFwAAABM"]
[Wed Dec 10 01:36:10.549293 2025] [:error] [pid 2277:tid 2300] [client 172.192.58.229:15229] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aTheCoWGo731r6eS-w5bGAAAABE"]
[Wed Dec 10 01:36:10.778830 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:21071] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aTheCkAeBjkmsNRkd1NnnQAAAME"]
[Wed Dec 10 01:36:11.006007 2025] [:error] [pid 2280:tid 2337] [client 172.192.58.229:21072] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aTheC3cqIB-8ALgw4ZpXhwAAAIA"]
[Wed Dec 10 01:36:11.247467 2025] [:error] [pid 2280:tid 2338] [client 172.192.58.229:15177] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTheC3cqIB-8ALgw4ZpXiAAAAIE"]
[Wed Dec 10 01:36:11.479533 2025] [:error] [pid 2280:tid 2347] [client 172.192.58.229:21084] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTheC3cqIB-8ALgw4ZpXigAAAIo"]
[Wed Dec 10 01:36:11.711330 2025] [:error] [pid 2277:tid 2284] [client 172.192.58.229:15220] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTheC4WGo731r6eS-w5bGwAAAAI"]
[Wed Dec 10 01:36:11.938906 2025] [:error] [pid 2280:tid 2342] [client 172.192.58.229:21099] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aTheC3cqIB-8ALgw4ZpXjgAAAIU"]
[Wed Dec 10 01:36:12.167868 2025] [:error] [pid 2277:tid 2298] [client 172.192.58.229:21029] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aTheDIWGo731r6eS-w5bHQAAAA8"]
[Wed Dec 10 01:36:12.410472 2025] [:error] [pid 2280:tid 2340] [client 172.192.58.229:15230] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aTheDHcqIB-8ALgw4ZpXkAAAAIM"]
[Wed Dec 10 01:36:12.673625 2025] [:error] [pid 2279:tid 2326] [client 172.192.58.229:21077] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aTheDFmpdQscMcJOElW1fgAAAVA"]
[Wed Dec 10 01:36:12.905336 2025] [:error] [pid 2366:tid 2389] [client 172.192.58.229:21097] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aTheDEAeBjkmsNRkd1NnoAAAANU"]
[Wed Dec 10 01:36:13.131976 2025] [:error] [pid 2366:tid 2377] [client 172.192.58.229:21064] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTheDUAeBjkmsNRkd1NnogAAAMk"]
[Wed Dec 10 01:36:13.361453 2025] [:error] [pid 2280:tid 2338] [client 172.192.58.229:15198] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTheDXcqIB-8ALgw4ZpXlgAAAIE"]
[Wed Dec 10 01:36:13.591748 2025] [:error] [pid 2277:tid 2304] [client 172.192.58.229:15221] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTheDYWGo731r6eS-w5bIAAAABU"]
[Wed Dec 10 01:36:13.825003 2025] [:error] [pid 2279:tid 2311] [client 172.192.58.229:21082] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aTheDVmpdQscMcJOElW1gAAAAUE"]
[Wed Dec 10 01:36:14.051544 2025] [:error] [pid 2279:tid 2316] [client 172.192.58.229:15178] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheDlmpdQscMcJOElW1gQAAAUY"]
[Wed Dec 10 01:36:14.279350 2025] [:error] [pid 2366:tid 2373] [client 172.192.58.229:15193] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheDkAeBjkmsNRkd1NnpQAAAMU"]
[Wed Dec 10 01:36:14.506332 2025] [:error] [pid 37041:tid 37044] [client 172.192.58.229:15192] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheDruffDW8UzBwa1ayewAAAEE"]
[Wed Dec 10 01:36:14.732458 2025] [:error] [pid 2277:tid 2289] [client 172.192.58.229:21060] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheDoWGo731r6eS-w5bIgAAAAc"]
[Wed Dec 10 01:36:14.963034 2025] [:error] [pid 2277:tid 2296] [client 172.192.58.229:15200] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aTheDoWGo731r6eS-w5bIwAAAA0"]
[Wed Dec 10 01:36:15.189730 2025] [:error] [pid 2279:tid 2313] [client 172.192.58.229:21057] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aTheD1mpdQscMcJOElW1hgAAAUM"]
[Wed Dec 10 01:36:15.421363 2025] [:error] [pid 2277:tid 2293] [client 172.192.58.229:15218] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aTheD4WGo731r6eS-w5bJAAAAAo"]
[Wed Dec 10 01:36:15.647888 2025] [:error] [pid 37041:tid 37059] [client 172.192.58.229:15188] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aTheD7uffDW8UzBwa1aygAAAAFA"]
[Wed Dec 10 01:36:15.874797 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:21078] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aTheD0AeBjkmsNRkd1NnqQAAAME"]
[Wed Dec 10 01:36:16.100772 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:15183] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aTheEEAeBjkmsNRkd1NnrQAAAMM"]
[Wed Dec 10 01:36:16.328289 2025] [:error] [pid 2366:tid 2372] [client 172.192.58.229:15182] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aTheEEAeBjkmsNRkd1NnrgAAAMQ"]
[Wed Dec 10 01:36:16.559094 2025] [:error] [pid 37041:tid 37047] [client 172.192.58.229:21100] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aTheELuffDW8UzBwa1aygwAAAEQ"]
[Wed Dec 10 01:36:16.785594 2025] [:error] [pid 2277:tid 2288] [client 172.192.58.229:21074] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aTheEIWGo731r6eS-w5bJwAAAAY"]
[Wed Dec 10 01:36:17.031886 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15189] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aTheEXcqIB-8ALgw4ZpXoAAAAIQ"]
[Wed Dec 10 01:36:17.258628 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:21076] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aTheEUAeBjkmsNRkd1NnsAAAANY"]
[Wed Dec 10 01:36:17.496116 2025] [:error] [pid 2366:tid 2382] [client 172.192.58.229:15190] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aTheEUAeBjkmsNRkd1NnsgAAAM4"]
[Wed Dec 10 01:36:17.731691 2025] [:error] [pid 37041:tid 37060] [client 172.192.58.229:21041] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTheEbuffDW8UzBwa1ayhgAAAFE"]
[Wed Dec 10 01:36:17.995614 2025] [:error] [pid 2277:tid 2290] [client 172.192.58.229:15207] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTheEYWGo731r6eS-w5bKQAAAAg"]
[Wed Dec 10 01:36:18.260256 2025] [:error] [pid 2277:tid 2304] [client 172.192.58.229:15211] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTheEoWGo731r6eS-w5bMAAAABU"]
[Wed Dec 10 01:36:18.488248 2025] [:error] [pid 2366:tid 2385] [client 172.192.58.229:21006] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aTheEkAeBjkmsNRkd1NnzAAAANE"]
[Wed Dec 10 01:36:18.717089 2025] [:error] [pid 2280:tid 2349] [client 172.192.58.229:15191] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aTheEncqIB-8ALgw4ZpXtQAAAIw"]
[Wed Dec 10 01:36:18.943147 2025] [:error] [pid 2280:tid 2343] [client 172.192.58.229:15180] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aTheEncqIB-8ALgw4ZpXtwAAAIY"]
[Wed Dec 10 01:36:19.169812 2025] [:error] [pid 2366:tid 2374] [client 172.192.58.229:15216] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aTheE0AeBjkmsNRkd1Nn0QAAAMY"]
[Wed Dec 10 01:36:19.402294 2025] [:error] [pid 2366:tid 2379] [client 172.192.58.229:15199] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aTheE0AeBjkmsNRkd1Nn0wAAAMs"]
[Wed Dec 10 01:36:19.628617 2025] [:error] [pid 2279:tid 2311] [client 172.192.58.229:21008] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aTheE1mpdQscMcJOElW1kwAAAUE"]
[Wed Dec 10 01:36:19.865596 2025] [:error] [pid 2277:tid 2297] [client 172.192.58.229:15212] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aTheE4WGo731r6eS-w5bNwAAAA4"]
[Wed Dec 10 01:36:20.117498 2025] [:error] [pid 2280:tid 2360] [client 172.192.58.229:21073] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aTheFHcqIB-8ALgw4ZpXugAAAJc"]
[Wed Dec 10 01:36:20.351621 2025] [:error] [pid 2279:tid 2333] [client 172.192.58.229:21081] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aTheFFmpdQscMcJOElW1lQAAAVc"]
[Wed Dec 10 01:36:20.606323 2025] [:error] [pid 2279:tid 2318] [client 172.192.58.229:21047] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aTheFFmpdQscMcJOElW1lgAAAUg"]
[Wed Dec 10 01:36:20.833268 2025] [:error] [pid 2279:tid 2319] [client 172.192.58.229:21069] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aTheFFmpdQscMcJOElW1mAAAAUk"]
[Wed Dec 10 01:36:21.062020 2025] [:error] [pid 37041:tid 37051] [client 172.192.58.229:21038] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aTheFbuffDW8UzBwa1ayogAAAEg"]
[Wed Dec 10 01:36:21.289522 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:15224] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aTheFXcqIB-8ALgw4ZpXvAAAAIs"]
[Wed Dec 10 01:36:21.517235 2025] [:error] [pid 2280:tid 2342] [client 172.192.58.229:15209] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aTheFXcqIB-8ALgw4ZpXvQAAAIU"]
[Wed Dec 10 01:36:21.743717 2025] [:error] [pid 2277:tid 2300] [client 172.192.58.229:21004] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aTheFYWGo731r6eS-w5bOAAAABE"]
[Wed Dec 10 01:36:21.978693 2025] [:error] [pid 37041:tid 37063] [client 172.192.58.229:21061] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aTheFbuffDW8UzBwa1aypAAAAFQ"]
[Wed Dec 10 01:36:22.205815 2025] [:error] [pid 37041:tid 37050] [client 172.192.58.229:15213] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aTheFruffDW8UzBwa1aypQAAAEc"]
[Wed Dec 10 01:36:22.432661 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:20996] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aTheFoWGo731r6eS-w5bPAAAABY"]
[Wed Dec 10 01:36:22.659398 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:21106] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aTheFncqIB-8ALgw4ZpXwAAAAIQ"]
[Wed Dec 10 01:36:22.892750 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:21094] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aTheFncqIB-8ALgw4ZpXwgAAAJI"]
[Wed Dec 10 01:36:23.138468 2025] [:error] [pid 37041:tid 37052] [client 172.192.58.229:21022] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aTheF7uffDW8UzBwa1ayqQAAAEk"]
[Wed Dec 10 01:36:23.364894 2025] [:error] [pid 2366:tid 2368] [client 172.192.58.229:20995] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aTheF0AeBjkmsNRkd1Nn1wAAAMA"]
[Wed Dec 10 01:36:23.621068 2025] [:error] [pid 2366:tid 2372] [client 172.192.58.229:21092] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aTheF0AeBjkmsNRkd1Nn2AAAAMQ"]
[Wed Dec 10 01:36:23.859757 2025] [:error] [pid 2366:tid 2383] [client 172.192.58.229:15201] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aTheF0AeBjkmsNRkd1Nn2wAAAM8"]
[Wed Dec 10 01:36:24.098470 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:21107] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aTheGHcqIB-8ALgw4ZpXxwAAAIs"]
[Wed Dec 10 01:36:24.329785 2025] [:error] [pid 2280:tid 2342] [client 172.192.58.229:15169] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aTheGHcqIB-8ALgw4ZpXyAAAAIU"]
[Wed Dec 10 01:36:24.557250 2025] [:error] [pid 2366:tid 2378] [client 172.192.58.229:15225] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aTheGEAeBjkmsNRkd1Nn3gAAAMo"]
[Wed Dec 10 01:36:24.803511 2025] [:error] [pid 2277:tid 2295] [client 172.192.58.229:15170] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aTheGIWGo731r6eS-w5bPwAAAAw"]
[Wed Dec 10 01:36:25.035394 2025] [:error] [pid 2366:tid 2389] [client 172.192.58.229:21119] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aTheGUAeBjkmsNRkd1Nn4gAAANU"]
[Wed Dec 10 01:36:25.267366 2025] [:error] [pid 2366:tid 2385] [client 172.192.58.229:15179] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aTheGUAeBjkmsNRkd1Nn5AAAANE"]
[Wed Dec 10 01:36:25.496437 2025] [:error] [pid 2366:tid 2372] [client 172.192.58.229:20998] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aTheGUAeBjkmsNRkd1Nn5gAAAMQ"]
[Wed Dec 10 01:36:25.728066 2025] [:error] [pid 2277:tid 2293] [client 172.192.58.229:15176] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aTheGYWGo731r6eS-w5bQgAAAAo"]
[Wed Dec 10 01:36:25.987385 2025] [:error] [pid 2366:tid 2368] [client 172.192.58.229:21104] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aTheGUAeBjkmsNRkd1Nn6AAAAMA"]
[Wed Dec 10 01:36:26.245687 2025] [:error] [pid 2366:tid 2378] [client 172.192.58.229:15226] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aTheGkAeBjkmsNRkd1Nn6gAAAMo"]
[Wed Dec 10 01:36:26.477968 2025] [:error] [pid 2366:tid 2389] [client 172.192.58.229:21111] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aTheGkAeBjkmsNRkd1Nn7gAAANU"]
[Wed Dec 10 01:36:26.722828 2025] [:error] [pid 2366:tid 2391] [client 172.192.58.229:21109] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aTheGkAeBjkmsNRkd1Nn8gAAANc"]
[Wed Dec 10 01:36:26.949598 2025] [:error] [pid 2366:tid 2384] [client 172.192.58.229:21093] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aTheGkAeBjkmsNRkd1Nn9QAAANA"]
[Wed Dec 10 01:36:27.183884 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:21105] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aTheG0AeBjkmsNRkd1Nn9wAAANY"]
[Wed Dec 10 01:36:27.410200 2025] [:error] [pid 2277:tid 2294] [client 172.192.58.229:15227] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aTheG4WGo731r6eS-w5bRAAAAAs"]
[Wed Dec 10 01:36:27.647972 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:21079] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aTheG1mpdQscMcJOElW1nwAAAU4"]
[Wed Dec 10 01:36:27.892544 2025] [:error] [pid 2366:tid 2374] [client 172.192.58.229:21085] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aTheG0AeBjkmsNRkd1Nn_AAAAMY"]
[Wed Dec 10 01:36:28.194997 2025] [:error] [pid 2366:tid 2382] [client 172.192.58.229:15214] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTheHEAeBjkmsNRkd1NoAAAAAM4"]
[Wed Dec 10 01:36:28.424827 2025] [:error] [pid 2366:tid 2381] [client 172.192.58.229:15299] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTheHEAeBjkmsNRkd1NoAQAAAM0"]
[Wed Dec 10 01:36:28.651468 2025] [:error] [pid 2366:tid 2373] [client 172.192.58.229:15346] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTheHEAeBjkmsNRkd1NoAgAAAMU"]
[Wed Dec 10 01:36:28.879458 2025] [:error] [pid 2366:tid 2388] [client 172.192.58.229:21013] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aTheHEAeBjkmsNRkd1NoBgAAANQ"]
[Wed Dec 10 01:36:29.105976 2025] [:error] [pid 2279:tid 2323] [client 172.192.58.229:21046] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aTheHVmpdQscMcJOElW1owAAAU0"]
[Wed Dec 10 01:36:29.349095 2025] [:error] [pid 2277:tid 2282] [client 172.192.58.229:21080] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aTheHYWGo731r6eS-w5bSgAAAAA"]
[Wed Dec 10 01:36:29.575723 2025] [:error] [pid 2279:tid 2315] [client 172.192.58.229:21049] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aTheHVmpdQscMcJOElW1pAAAAUU"]
[Wed Dec 10 01:36:29.809492 2025] [:error] [pid 2366:tid 2389] [client 172.192.58.229:21091] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aTheHUAeBjkmsNRkd1NoCgAAANU"]
[Wed Dec 10 01:36:30.036301 2025] [:error] [pid 2279:tid 2320] [client 172.192.58.229:21002] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aTheHlmpdQscMcJOElW1qQAAAUo"]
[Wed Dec 10 01:36:30.265346 2025] [:error] [pid 37041:tid 37058] [client 172.192.58.229:15231] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aTheHruffDW8UzBwa1ayqgAAAE8"]
[Wed Dec 10 01:36:30.492887 2025] [:error] [pid 2366:tid 2387] [client 172.192.58.229:21088] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aTheHkAeBjkmsNRkd1NoDwAAANM"]
[Wed Dec 10 01:36:30.737658 2025] [:error] [pid 2366:tid 2372] [client 172.192.58.229:21096] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aTheHkAeBjkmsNRkd1NoEAAAAMQ"]
[Wed Dec 10 01:36:30.972844 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15196] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTheHkAeBjkmsNRkd1NoEgAAAME"]
[Wed Dec 10 01:36:31.216262 2025] [:error] [pid 2366:tid 2383] [client 172.192.58.229:21102] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTheH0AeBjkmsNRkd1NoFAAAAM8"]
[Wed Dec 10 01:36:31.442969 2025] [:error] [pid 2280:tid 2347] [client 172.192.58.229:15195] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTheH3cqIB-8ALgw4ZpXzgAAAIo"]
[Wed Dec 10 01:36:31.677214 2025] [:error] [pid 2279:tid 2326] [client 172.192.58.229:15322] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTheH1mpdQscMcJOElW1swAAAVA"]
[Wed Dec 10 01:36:31.906971 2025] [:error] [pid 2279:tid 2328] [client 172.192.58.229:21025] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheH1mpdQscMcJOElW1tQAAAVI"]
[Wed Dec 10 01:36:32.133473 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:21014] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheIEAeBjkmsNRkd1NoGAAAAMM"]
[Wed Dec 10 01:36:32.365278 2025] [:error] [pid 37041:tid 37053] [client 172.192.58.229:15313] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheILuffDW8UzBwa1aysQAAAEo"]
[Wed Dec 10 01:36:32.591628 2025] [:error] [pid 2366:tid 2387] [client 172.192.58.229:20992] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheIEAeBjkmsNRkd1NoGwAAANM"]
[Wed Dec 10 01:36:32.821174 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:21023] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aTheIHcqIB-8ALgw4ZpX0wAAAJI"]
[Wed Dec 10 01:36:33.048956 2025] [:error] [pid 2279:tid 2331] [client 172.192.58.229:15197] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aTheIVmpdQscMcJOElW1wgAAAVU"]
[Wed Dec 10 01:36:33.277207 2025] [:error] [pid 37041:tid 37055] [client 172.192.58.229:15186] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aTheIbuffDW8UzBwa1aytAAAAEw"]
[Wed Dec 10 01:36:33.502983 2025] [:error] [pid 2280:tid 2351] [client 172.192.58.229:21003] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aTheIXcqIB-8ALgw4ZpX2QAAAI4"]
[Wed Dec 10 01:36:33.729625 2025] [:error] [pid 2366:tid 2379] [client 172.192.58.229:21043] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aTheIUAeBjkmsNRkd1NoIAAAAMs"]
[Wed Dec 10 01:36:33.956747 2025] [:error] [pid 2277:tid 2293] [client 172.192.58.229:20999] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aTheIYWGo731r6eS-w5baAAAAAo"]
[Wed Dec 10 01:36:34.184004 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:21044] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aTheIoWGo731r6eS-w5bagAAABY"]
[Wed Dec 10 01:36:34.410701 2025] [:error] [pid 37041:tid 37065] [client 172.192.58.229:21040] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aTheIruffDW8UzBwa1ayuQAAAFY"]
[Wed Dec 10 01:36:34.636382 2025] [:error] [pid 37041:tid 37051] [client 172.192.58.229:21050] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTheIruffDW8UzBwa1ayvAAAAEg"]
[Wed Dec 10 01:36:34.863427 2025] [:error] [pid 2366:tid 2391] [client 172.192.58.229:21095] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTheIkAeBjkmsNRkd1NoIwAAANc"]
[Wed Dec 10 01:36:35.091209 2025] [:error] [pid 2277:tid 2307] [client 172.192.58.229:21037] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTheI4WGo731r6eS-w5bawAAABg"]
[Wed Dec 10 01:36:35.318421 2025] [:error] [pid 2277:tid 2289] [client 172.192.58.229:15217] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aTheI4WGo731r6eS-w5bbAAAAAc"]
[Wed Dec 10 01:36:35.545051 2025] [:error] [pid 2277:tid 2283] [client 172.192.58.229:21005] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTheI4WGo731r6eS-w5bbQAAAAE"]
[Wed Dec 10 01:36:35.771888 2025] [:error] [pid 37041:tid 37064] [client 172.192.58.229:21020] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTheI7uffDW8UzBwa1aywQAAAFU"]
[Wed Dec 10 01:36:36.013352 2025] [:error] [pid 2280:tid 2345] [client 172.192.58.229:21026] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTheJHcqIB-8ALgw4ZpX4AAAAIg"]
[Wed Dec 10 01:36:36.238866 2025] [:error] [pid 2277:tid 2291] [client 172.192.58.229:21083] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aTheJIWGo731r6eS-w5bcgAAAAk"]
[Wed Dec 10 01:36:36.466002 2025] [:error] [pid 2279:tid 2329] [client 172.192.58.229:15187] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aTheJFmpdQscMcJOElW1zQAAAVM"]
[Wed Dec 10 01:36:36.692687 2025] [:error] [pid 2277:tid 2290] [client 172.192.58.229:21059] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aTheJIWGo731r6eS-w5bdAAAAAg"]
[Wed Dec 10 01:36:36.920613 2025] [:error] [pid 2366:tid 2376] [client 172.192.58.229:21019] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aTheJEAeBjkmsNRkd1NoJgAAAMg"]
[Wed Dec 10 01:36:37.149453 2025] [:error] [pid 2279:tid 2331] [client 172.192.58.229:15185] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aTheJVmpdQscMcJOElW1zwAAAVU"]
[Wed Dec 10 01:36:37.377802 2025] [:error] [pid 2279:tid 2319] [client 172.192.58.229:21042] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aTheJVmpdQscMcJOElW10AAAAUk"]
[Wed Dec 10 01:36:37.606487 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:21062] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aTheJXcqIB-8ALgw4ZpX5AAAAJI"]
[Wed Dec 10 01:36:37.835021 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:21035] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aTheJUAeBjkmsNRkd1NoKQAAANY"]
[Wed Dec 10 01:36:38.069587 2025] [:error] [pid 2279:tid 2312] [client 172.192.58.229:15301] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aTheJlmpdQscMcJOElW11AAAAUI"]
[Wed Dec 10 01:36:38.319983 2025] [:error] [pid 37041:tid 37059] [client 172.192.58.229:15339] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTheJruffDW8UzBwa1ayxQAAAFA"]
[Wed Dec 10 01:36:38.549651 2025] [:error] [pid 37041:tid 37053] [client 172.192.58.229:15202] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTheJruffDW8UzBwa1ayxgAAAEo"]
[Wed Dec 10 01:36:38.776565 2025] [:error] [pid 2366:tid 2383] [client 172.192.58.229:15175] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTheJkAeBjkmsNRkd1NoLAAAAM8"]
[Wed Dec 10 01:36:39.004354 2025] [:error] [pid 2277:tid 2289] [client 172.192.58.229:21015] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aTheJ4WGo731r6eS-w5begAAAAc"]
[Wed Dec 10 01:36:39.253767 2025] [:error] [pid 2280:tid 2351] [client 172.192.58.229:15171] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aTheJ3cqIB-8ALgw4ZpX6AAAAI4"]
[Wed Dec 10 01:36:39.485898 2025] [:error] [pid 2279:tid 2334] [client 172.192.58.229:21110] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aTheJ1mpdQscMcJOElW11gAAAVg"]
[Wed Dec 10 01:36:39.723897 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:21067] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aTheJ1mpdQscMcJOElW12AAAAU4"]
[Wed Dec 10 01:36:39.951623 2025] [:error] [pid 2280:tid 2354] [client 172.192.58.229:21012] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aTheJ3cqIB-8ALgw4ZpX7gAAAJE"]
[Wed Dec 10 01:36:40.183828 2025] [:error] [pid 2280:tid 2346] [client 172.192.58.229:21000] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheKHcqIB-8ALgw4ZpX8AAAAIk"]
[Wed Dec 10 01:36:40.412523 2025] [:error] [pid 2277:tid 2291] [client 172.192.58.229:20993] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheKIWGo731r6eS-w5bewAAAAk"]
[Wed Dec 10 01:36:40.671141 2025] [:error] [pid 2366:tid 2376] [client 172.192.58.229:21052] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheKEAeBjkmsNRkd1NoMwAAAMg"]
[Wed Dec 10 01:36:40.929565 2025] [:error] [pid 2277:tid 2294] [client 172.192.58.229:21116] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheKIWGo731r6eS-w5bfgAAAAs"]
[Wed Dec 10 01:36:41.162502 2025] [:error] [pid 2277:tid 2299] [client 172.192.58.229:21087] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTheKYWGo731r6eS-w5bfwAAABA"]
[Wed Dec 10 01:36:41.397505 2025] [:error] [pid 2279:tid 2332] [client 172.192.58.229:15296] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTheKVmpdQscMcJOElW13AAAAVY"]
[Wed Dec 10 01:36:41.624233 2025] [:error] [pid 2280:tid 2344] [client 172.192.58.229:15324] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTheKXcqIB-8ALgw4ZpX9AAAAIc"]
[Wed Dec 10 01:36:41.852068 2025] [:error] [pid 2279:tid 2327] [client 172.192.58.229:21055] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTheKVmpdQscMcJOElW13wAAAVE"]
[Wed Dec 10 01:36:42.098112 2025] [:error] [pid 2279:tid 2334] [client 172.192.58.229:21089] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTheKlmpdQscMcJOElW14AAAAVg"]
[Wed Dec 10 01:36:42.325764 2025] [:error] [pid 2277:tid 2284] [client 172.192.58.229:21036] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTheKoWGo731r6eS-w5bgwAAAAI"]
[Wed Dec 10 01:36:42.563491 2025] [:error] [pid 2279:tid 2311] [client 172.192.58.229:21001] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTheKlmpdQscMcJOElW14wAAAUE"]
[Wed Dec 10 01:36:42.791074 2025] [:error] [pid 37041:tid 37061] [client 172.192.58.229:21016] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aTheKruffDW8UzBwa1ayzgAAAFI"]
[Wed Dec 10 01:36:43.053301 2025] [:error] [pid 2366:tid 2372] [client 172.192.58.229:15219] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aTheK0AeBjkmsNRkd1NoOAAAAMQ"]
[Wed Dec 10 01:36:43.284618 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15326] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aTheK3cqIB-8ALgw4ZpX9wAAAIQ"]
[Wed Dec 10 01:36:43.529651 2025] [:error] [pid 2366:tid 2375] [client 172.192.58.229:15305] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aTheK0AeBjkmsNRkd1NoOQAAAMc"]
[Wed Dec 10 01:36:43.777826 2025] [:error] [pid 2277:tid 2303] [client 172.192.58.229:15311] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aTheK4WGo731r6eS-w5biAAAABQ"]
[Wed Dec 10 01:36:44.005331 2025] [:error] [pid 2280:tid 2358] [client 172.192.58.229:15303] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheLHcqIB-8ALgw4ZpX-gAAAJU"]
[Wed Dec 10 01:36:44.233705 2025] [:error] [pid 2279:tid 2312] [client 172.192.58.229:21086] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheLFmpdQscMcJOElW15gAAAUI"]
[Wed Dec 10 01:36:44.468477 2025] [:error] [pid 2277:tid 2294] [client 172.192.58.229:15215] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheLIWGo731r6eS-w5bigAAAAs"]
[Wed Dec 10 01:36:44.699008 2025] [:error] [pid 37041:tid 37047] [client 172.192.58.229:15338] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheLLuffDW8UzBwa1ay1QAAAEQ"]
[Wed Dec 10 01:36:44.929697 2025] [:error] [pid 37041:tid 37055] [client 172.192.58.229:15258] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aTheLLuffDW8UzBwa1ay1wAAAEw"]
[Wed Dec 10 01:36:45.173085 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:15242] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aTheLUAeBjkmsNRkd1NoPAAAAMM"]
[Wed Dec 10 01:36:45.399779 2025] [:error] [pid 2279:tid 2318] [client 172.192.58.229:21098] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aTheLVmpdQscMcJOElW16gAAAUg"]
[Wed Dec 10 01:36:45.627057 2025] [:error] [pid 2280:tid 2359] [client 172.192.58.229:21117] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aTheLXcqIB-8ALgw4ZpX_QAAAJY"]
[Wed Dec 10 01:36:45.855007 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:21114] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTheLXcqIB-8ALgw4ZpYAAAAAJI"]
[Wed Dec 10 01:36:46.083829 2025] [:error] [pid 2280:tid 2353] [client 172.192.58.229:21028] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTheLncqIB-8ALgw4ZpYAQAAAJA"]
[Wed Dec 10 01:36:46.316940 2025] [:error] [pid 37041:tid 37064] [client 172.192.58.229:21030] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTheLruffDW8UzBwa1ay2wAAAFU"]
[Wed Dec 10 01:36:46.598822 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15259] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aTheLkAeBjkmsNRkd1NoPgAAAME"]
[Wed Dec 10 01:36:46.827382 2025] [:error] [pid 2279:tid 2316] [client 172.192.58.229:21024] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheLlmpdQscMcJOElW17wAAAUY"]
[Wed Dec 10 01:36:47.063659 2025] [:error] [pid 2280:tid 2358] [client 172.192.58.229:15309] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheL3cqIB-8ALgw4ZpYBAAAAJU"]
[Wed Dec 10 01:36:47.291259 2025] [:error] [pid 2279:tid 2329] [client 172.192.58.229:15234] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheL1mpdQscMcJOElW18QAAAVM"]
[Wed Dec 10 01:36:47.519503 2025] [:error] [pid 2280:tid 2360] [client 172.192.58.229:21025] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aTheL3cqIB-8ALgw4ZpYBwAAAJc"]
[Wed Dec 10 01:36:47.751672 2025] [:error] [pid 2280:tid 2352] [client 172.192.58.229:21033] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTheL3cqIB-8ALgw4ZpYCAAAAI8"]
[Wed Dec 10 01:36:48.003280 2025] [:error] [pid 2366:tid 2368] [client 172.192.58.229:21010] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTheMEAeBjkmsNRkd1NoQAAAAMA"]
[Wed Dec 10 01:36:48.239800 2025] [:error] [pid 2279:tid 2313] [client 172.192.58.229:15352] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTheMFmpdQscMcJOElW19QAAAUM"]
[Wed Dec 10 01:36:48.467523 2025] [:error] [pid 2366:tid 2375] [client 172.192.58.229:21118] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aTheMEAeBjkmsNRkd1NoQgAAAMc"]
[Wed Dec 10 01:36:48.697506 2025] [:error] [pid 37041:tid 37047] [client 172.192.58.229:21034] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aTheMLuffDW8UzBwa1ay4AAAAEQ"]
[Wed Dec 10 01:36:48.935151 2025] [:error] [pid 2277:tid 2287] [client 172.192.58.229:15343] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aTheMIWGo731r6eS-w5bkwAAAAU"]
[Wed Dec 10 01:36:49.177541 2025] [:error] [pid 2279:tid 2321] [client 172.192.58.229:15314] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aTheMVmpdQscMcJOElW19gAAAUs"]
[Wed Dec 10 01:36:49.424230 2025] [:error] [pid 2280:tid 2350] [client 172.192.58.229:15208] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aTheMXcqIB-8ALgw4ZpYCgAAAI0"]
[Wed Dec 10 01:36:49.653819 2025] [:error] [pid 37041:tid 37065] [client 172.192.58.229:21112] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheMbuffDW8UzBwa1ay5AAAAFY"]
[Wed Dec 10 01:36:49.895392 2025] [:error] [pid 37041:tid 37064] [client 172.192.58.229:15268] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheMbuffDW8UzBwa1ay5QAAAFU"]
[Wed Dec 10 01:36:50.126245 2025] [:error] [pid 2279:tid 2315] [client 172.192.58.229:21032] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheMlmpdQscMcJOElW1-gAAAUU"]
[Wed Dec 10 01:36:50.352806 2025] [:error] [pid 2279:tid 2329] [client 172.192.58.229:21115] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aTheMlmpdQscMcJOElW1-wAAAVM"]
[Wed Dec 10 01:36:50.580967 2025] [:error] [pid 2279:tid 2322] [client 172.192.58.229:15232] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTheMlmpdQscMcJOElW1_AAAAUw"]
[Wed Dec 10 01:36:50.807930 2025] [:error] [pid 37041:tid 37046] [client 172.192.58.229:15332] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTheMruffDW8UzBwa1ay5gAAAEM"]
[Wed Dec 10 01:36:51.034576 2025] [:error] [pid 2366:tid 2378] [client 172.192.58.229:21026] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTheM0AeBjkmsNRkd1NoSAAAAMo"]
[Wed Dec 10 01:36:51.263732 2025] [:error] [pid 2366:tid 2387] [client 172.192.58.229:21021] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aTheM0AeBjkmsNRkd1NoSwAAANM"]
[Wed Dec 10 01:36:51.491125 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15359] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTheM3cqIB-8ALgw4ZpYEAAAAIQ"]
[Wed Dec 10 01:36:51.719341 2025] [:error] [pid 2277:tid 2303] [client 172.192.58.229:21113] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTheM4WGo731r6eS-w5bmAAAABQ"]
[Wed Dec 10 01:36:51.950654 2025] [:error] [pid 2366:tid 2384] [client 172.192.58.229:15300] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTheM0AeBjkmsNRkd1NoTgAAANA"]
[Wed Dec 10 01:36:52.186303 2025] [:error] [pid 2280:tid 2342] [client 172.192.58.229:21103] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aTheNHcqIB-8ALgw4ZpYEQAAAIU"]
[Wed Dec 10 01:36:52.419300 2025] [:error] [pid 2280:tid 2354] [client 172.192.58.229:21011] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aTheNHcqIB-8ALgw4ZpYEwAAAJE"]
[Wed Dec 10 01:36:52.645311 2025] [:error] [pid 37041:tid 37045] [client 172.192.58.229:15304] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aTheNLuffDW8UzBwa1ay6AAAAEI"]
[Wed Dec 10 01:36:52.872677 2025] [:error] [pid 2366:tid 2380] [client 172.192.58.229:15354] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aTheNEAeBjkmsNRkd1NoUAAAAMw"]
[Wed Dec 10 01:36:53.099778 2025] [:error] [pid 37041:tid 37056] [client 172.192.58.229:21031] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aTheNbuffDW8UzBwa1ay6wAAAE0"]
[Wed Dec 10 01:36:53.336791 2025] [:error] [pid 2279:tid 2321] [client 172.192.58.229:15333] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTheNVmpdQscMcJOElW2AwAAAUs"]
[Wed Dec 10 01:36:53.563358 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:21009] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTheNXcqIB-8ALgw4ZpYGAAAAJI"]
[Wed Dec 10 01:36:53.790800 2025] [:error] [pid 2279:tid 2334] [client 172.192.58.229:15306] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTheNVmpdQscMcJOElW2BAAAAVg"]
[Wed Dec 10 01:36:54.028946 2025] [:error] [pid 2280:tid 2349] [client 172.192.58.229:21056] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aTheNncqIB-8ALgw4ZpYGQAAAIw"]
[Wed Dec 10 01:36:54.279446 2025] [:error] [pid 2279:tid 2316] [client 172.192.58.229:15244] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTheNlmpdQscMcJOElW2BQAAAUY"]
[Wed Dec 10 01:36:54.516927 2025] [:error] [pid 2280:tid 2353] [client 172.192.58.229:15245] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTheNncqIB-8ALgw4ZpYGwAAAJA"]
[Wed Dec 10 01:36:54.762935 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:21048] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTheNlmpdQscMcJOElW2BwAAAU4"]
[Wed Dec 10 01:36:54.989472 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15233] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aTheNncqIB-8ALgw4ZpYHAAAAIQ"]
[Wed Dec 10 01:36:55.216528 2025] [:error] [pid 2277:tid 2287] [client 172.192.58.229:15325] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTheN4WGo731r6eS-w5bnAAAAAU"]
[Wed Dec 10 01:36:55.444192 2025] [:error] [pid 2279:tid 2317] [client 172.192.58.229:15349] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTheN1mpdQscMcJOElW2CQAAAUc"]
[Wed Dec 10 01:36:55.712473 2025] [:error] [pid 2280:tid 2347] [client 172.192.58.229:21007] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTheN3cqIB-8ALgw4ZpYIQAAAIo"]
[Wed Dec 10 01:36:55.944832 2025] [:error] [pid 2366:tid 2375] [client 172.192.58.229:15267] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aTheN0AeBjkmsNRkd1NoWQAAAMc"]
[Wed Dec 10 01:36:56.174560 2025] [:error] [pid 2280:tid 2360] [client 172.192.58.229:21111] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTheOHcqIB-8ALgw4ZpYJAAAAJc"]
[Wed Dec 10 01:36:56.401619 2025] [:error] [pid 2279:tid 2325] [client 172.192.58.229:15298] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTheOFmpdQscMcJOElW2CwAAAU8"]
[Wed Dec 10 01:36:56.628539 2025] [:error] [pid 2279:tid 2328] [client 172.192.58.229:15274] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTheOFmpdQscMcJOElW2DAAAAVI"]
[Wed Dec 10 01:36:56.859100 2025] [:error] [pid 2280:tid 2352] [client 172.192.58.229:20994] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aTheOHcqIB-8ALgw4ZpYJgAAAI8"]
[Wed Dec 10 01:36:57.112156 2025] [:error] [pid 2280:tid 2338] [client 172.192.58.229:15227] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTheOXcqIB-8ALgw4ZpYJwAAAIE"]
[Wed Dec 10 01:36:57.364665 2025] [:error] [pid 2277:tid 2307] [client 172.192.58.229:21027] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTheOYWGo731r6eS-w5bngAAABg"]
[Wed Dec 10 01:36:57.591591 2025] [:error] [pid 37041:tid 37061] [client 172.192.58.229:21045] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTheObuffDW8UzBwa1ay8AAAAFI"]
[Wed Dec 10 01:36:57.819106 2025] [:error] [pid 2279:tid 2330] [client 172.192.58.229:20997] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aTheOVmpdQscMcJOElW2EAAAAVQ"]
[Wed Dec 10 01:36:58.046431 2025] [:error] [pid 37041:tid 37051] [client 172.192.58.229:21017] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTheOruffDW8UzBwa1ay8gAAAEg"]
[Wed Dec 10 01:36:58.277032 2025] [:error] [pid 2366:tid 2376] [client 172.192.58.229:15350] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTheOkAeBjkmsNRkd1NoWwAAAMg"]
[Wed Dec 10 01:36:58.506990 2025] [:error] [pid 2366:tid 2374] [client 172.192.58.229:15155] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTheOkAeBjkmsNRkd1NoXAAAAMY"]
[Wed Dec 10 01:36:58.738429 2025] [:error] [pid 37041:tid 37056] [client 172.192.58.229:15253] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aTheOruffDW8UzBwa1ay9QAAAE0"]
[Wed Dec 10 01:36:58.993348 2025] [:error] [pid 37041:tid 37066] [client 172.192.58.229:21097] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTheOruffDW8UzBwa1ay9gAAAFc"]
[Wed Dec 10 01:36:59.221958 2025] [:error] [pid 2366:tid 2381] [client 172.192.58.229:15318] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTheO0AeBjkmsNRkd1NoXQAAAM0"]
[Wed Dec 10 01:36:59.449601 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:15335] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTheO1mpdQscMcJOElW2EwAAAU4"]
[Wed Dec 10 01:36:59.676765 2025] [:error] [pid 2277:tid 2303] [client 172.192.58.229:15310] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aTheO4WGo731r6eS-w5bnwAAABQ"]
[Wed Dec 10 01:36:59.903865 2025] [:error] [pid 2280:tid 2338] [client 172.192.58.229:15283] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aTheO3cqIB-8ALgw4ZpYMAAAAIE"]
[Wed Dec 10 01:37:00.131295 2025] [:error] [pid 2366:tid 2382] [client 172.192.58.229:15317] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThePEAeBjkmsNRkd1NoXwAAAM4"]
[Wed Dec 10 01:37:00.358147 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:15312] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThePHcqIB-8ALgw4ZpYMgAAAIs"]
[Wed Dec 10 01:37:00.584931 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:15237] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aThePEAeBjkmsNRkd1NoYAAAANY"]
[Wed Dec 10 01:37:00.822505 2025] [:error] [pid 37041:tid 37050] [client 172.192.58.229:15271] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aThePLuffDW8UzBwa1ay-gAAAEc"]
[Wed Dec 10 01:37:01.079625 2025] [:error] [pid 37041:tid 37043] [client 172.192.58.229:15131] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aThePbuffDW8UzBwa1ay_AAAAEA"]
[Wed Dec 10 01:37:01.330357 2025] [:error] [pid 2279:tid 2320] [client 172.192.58.229:15323] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aThePVmpdQscMcJOElW2FQAAAUo"]
[Wed Dec 10 01:37:01.561212 2025] [:error] [pid 2366:tid 2368] [client 172.192.58.229:15351] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aThePUAeBjkmsNRkd1NoZAAAAMA"]
[Wed Dec 10 01:37:01.802614 2025] [:error] [pid 2279:tid 2312] [client 172.192.58.229:21054] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aThePVmpdQscMcJOElW2GAAAAUI"]
[Wed Dec 10 01:37:02.035588 2025] [:error] [pid 2366:tid 2383] [client 172.192.58.229:15252] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aThePkAeBjkmsNRkd1NoaAAAAM8"]
[Wed Dec 10 01:37:02.276490 2025] [:error] [pid 2280:tid 2358] [client 172.192.58.229:15260] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aThePncqIB-8ALgw4ZpYNgAAAJU"]
[Wed Dec 10 01:37:02.511881 2025] [:error] [pid 2279:tid 2327] [client 172.192.58.229:21051] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aThePlmpdQscMcJOElW2GgAAAVE"]
[Wed Dec 10 01:37:02.749999 2025] [:error] [pid 2280:tid 2345] [client 172.192.58.229:15256] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aThePncqIB-8ALgw4ZpYNwAAAIg"]
[Wed Dec 10 01:37:02.978540 2025] [:error] [pid 2280:tid 2360] [client 172.192.58.229:15327] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aThePncqIB-8ALgw4ZpYOAAAAJc"]
[Wed Dec 10 01:37:03.206503 2025] [:error] [pid 2366:tid 2389] [client 172.192.58.229:15139] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTheP0AeBjkmsNRkd1NobAAAANU"]
[Wed Dec 10 01:37:03.433709 2025] [:error] [pid 2366:tid 2370] [client 172.192.58.229:15337] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aTheP0AeBjkmsNRkd1NobgAAAMI"]
[Wed Dec 10 01:37:03.673904 2025] [:error] [pid 37041:tid 37058] [client 172.192.58.229:15270] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheP7uffDW8UzBwa1azAQAAAE8"]
[Wed Dec 10 01:37:03.908849 2025] [:error] [pid 2279:tid 2326] [client 172.192.58.229:15261] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheP1mpdQscMcJOElW2HwAAAVA"]
[Wed Dec 10 01:37:04.141636 2025] [:error] [pid 2279:tid 2316] [client 172.192.58.229:15331] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheQFmpdQscMcJOElW2IAAAAUY"]
[Wed Dec 10 01:37:04.389696 2025] [:error] [pid 2279:tid 2314] [client 172.192.58.229:15282] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aTheQFmpdQscMcJOElW2IgAAAUQ"]
[Wed Dec 10 01:37:04.615879 2025] [:error] [pid 2280:tid 2359] [client 172.192.58.229:15194] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTheQHcqIB-8ALgw4ZpYOgAAAJY"]
[Wed Dec 10 01:37:04.853189 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:15348] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTheQHcqIB-8ALgw4ZpYOwAAAIs"]
[Wed Dec 10 01:37:05.098289 2025] [:error] [pid 2279:tid 2310] [client 172.192.58.229:15328] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTheQVmpdQscMcJOElW2JwAAAUA"]
[Wed Dec 10 01:37:05.325769 2025] [:error] [pid 2366:tid 2373] [client 172.192.58.229:15315] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aTheQUAeBjkmsNRkd1NocwAAAMU"]
[Wed Dec 10 01:37:05.555895 2025] [:error] [pid 2280:tid 2349] [client 172.192.58.229:15239] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTheQXcqIB-8ALgw4ZpYPAAAAIw"]
[Wed Dec 10 01:37:05.835160 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:15308] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aTheQUAeBjkmsNRkd1NodgAAAMM"]
[Wed Dec 10 01:37:06.203120 2025] [:error] [pid 2279:tid 2334] [client 172.192.58.229:15276] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Wed Dec 10 01:37:06.440611 2025] [:error] [pid 2279:tid 2326] [client 172.192.58.229:15276] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Dec 10 01:37:06.557878 2025] [:error] [pid 2279:tid 2316] [client 172.192.58.229:15276] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Dec 10 01:37:06.673582 2025] [:error] [pid 2279:tid 2320] [client 172.192.58.229:15276] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed Dec 10 01:37:06.789677 2025] [:error] [pid 2279:tid 2314] [client 172.192.58.229:15276] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed Dec 10 01:37:07.258454 2025] [:error] [pid 2279:tid 2310] [client 172.192.58.229:15276] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Wed Dec 10 01:37:07.371904 2025] [:error] [pid 2279:tid 2332] [client 172.192.58.229:15276] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTheQ1mpdQscMcJOElW2PAAAAVY"]
[Wed Dec 10 01:37:07.600467 2025] [:error] [pid 2279:tid 2334] [client 172.192.58.229:15241] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aTheQ1mpdQscMcJOElW2PQAAAVg"]
[Wed Dec 10 01:37:07.876077 2025] [:error] [pid 2366:tid 2387] [client 172.192.58.229:15255] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aTheQ0AeBjkmsNRkd1NoeQAAANM"]
[Wed Dec 10 01:37:08.108170 2025] [:error] [pid 2279:tid 2330] [client 172.192.58.229:21101] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aTheRFmpdQscMcJOElW2PwAAAVQ"]
[Wed Dec 10 01:37:08.336105 2025] [:error] [pid 2277:tid 2297] [client 172.192.58.229:15247] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aTheRIWGo731r6eS-w5bpQAAAA4"]
[Wed Dec 10 01:37:08.568898 2025] [:error] [pid 2366:tid 2381] [client 172.192.58.229:15340] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTheREAeBjkmsNRkd1NofQAAAM0"]
[Wed Dec 10 01:37:08.805574 2025] [:error] [pid 2277:tid 2295] [client 172.192.58.229:15262] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTheRIWGo731r6eS-w5bpgAAAAw"]
[Wed Dec 10 01:37:09.042894 2025] [:error] [pid 2279:tid 2320] [client 172.192.58.229:15250] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aTheRVmpdQscMcJOElW2QAAAAUo"]
[Wed Dec 10 01:37:09.274774 2025] [:error] [pid 2280:tid 2359] [client 172.192.58.229:15353] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTheRXcqIB-8ALgw4ZpYRwAAAJY"]
[Wed Dec 10 01:37:09.502350 2025] [:error] [pid 2279:tid 2314] [client 172.192.58.229:15320] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTheRVmpdQscMcJOElW2QQAAAUQ"]
[Wed Dec 10 01:37:09.728852 2025] [:error] [pid 2280:tid 2357] [client 172.192.58.229:15111] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTheRXcqIB-8ALgw4ZpYTAAAAJQ"]
[Wed Dec 10 01:37:09.992295 2025] [:error] [pid 37041:tid 37058] [client 172.192.58.229:15257] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aTheRbuffDW8UzBwa1azBAAAAE8"]
[Wed Dec 10 01:37:10.219117 2025] [:error] [pid 37041:tid 37051] [client 172.192.58.229:15358] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTheRruffDW8UzBwa1azBQAAAEg"]
[Wed Dec 10 01:37:10.446483 2025] [:error] [pid 37041:tid 37057] [client 172.192.58.229:21089] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTheRruffDW8UzBwa1azBgAAAE4"]
[Wed Dec 10 01:37:10.673264 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:15149] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTheRkAeBjkmsNRkd1NogAAAAMM"]
[Wed Dec 10 01:37:10.954251 2025] [:error] [pid 2279:tid 2313] [client 172.192.58.229:15113] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aTheRlmpdQscMcJOElW2RAAAAUM"]
[Wed Dec 10 01:37:11.192625 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15321] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aTheR0AeBjkmsNRkd1NoggAAAME"]
[Wed Dec 10 01:37:11.422286 2025] [:error] [pid 2366:tid 2374] [client 172.192.58.229:15243] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTheR0AeBjkmsNRkd1NohQAAAMY"]
[Wed Dec 10 01:37:11.649673 2025] [:error] [pid 2280:tid 2339] [client 172.192.58.229:15047] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTheR3cqIB-8ALgw4ZpYUAAAAII"]
[Wed Dec 10 01:37:11.887743 2025] [:error] [pid 37041:tid 37056] [client 172.192.58.229:15330] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTheR7uffDW8UzBwa1azBwAAAE0"]
[Wed Dec 10 01:37:12.114646 2025] [:error] [pid 2366:tid 2391] [client 172.192.58.229:15124] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aTheSEAeBjkmsNRkd1NoiAAAANc"]
[Wed Dec 10 01:37:12.351732 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:15263] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aTheSIWGo731r6eS-w5brQAAABY"]
[Wed Dec 10 01:37:12.590088 2025] [:error] [pid 2279:tid 2316] [client 172.192.58.229:15104] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aTheSFmpdQscMcJOElW2RgAAAUY"]
[Wed Dec 10 01:37:12.845513 2025] [:error] [pid 2277:tid 2306] [client 172.192.58.229:15293] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aTheSIWGo731r6eS-w5bsAAAABc"]
[Wed Dec 10 01:37:13.090498 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:15336] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aTheSXcqIB-8ALgw4ZpYVgAAAJI"]
[Wed Dec 10 01:37:13.320278 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:21039] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aTheSUAeBjkmsNRkd1NoigAAAMM"]
[Wed Dec 10 01:37:13.560473 2025] [:error] [pid 2280:tid 2343] [client 172.192.58.229:15046] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aTheSXcqIB-8ALgw4ZpYWAAAAIY"]
[Wed Dec 10 01:37:13.793082 2025] [:error] [pid 37041:tid 37049] [client 172.192.58.229:21018] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aTheSbuffDW8UzBwa1azDAAAAEY"]
[Wed Dec 10 01:37:14.023612 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15134] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aTheSncqIB-8ALgw4ZpYWwAAAIQ"]
[Wed Dec 10 01:37:14.252668 2025] [:error] [pid 2280:tid 2356] [client 172.192.58.229:15291] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aTheSncqIB-8ALgw4ZpYXAAAAJM"]
[Wed Dec 10 01:37:14.493403 2025] [:error] [pid 2280:tid 2351] [client 172.192.58.229:15235] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aTheSncqIB-8ALgw4ZpYXQAAAI4"]
[Wed Dec 10 01:37:14.720434 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:15264] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aTheSkAeBjkmsNRkd1NokQAAANY"]
[Wed Dec 10 01:37:14.951363 2025] [:error] [pid 2366:tid 2391] [client 172.192.58.229:15128] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aTheSkAeBjkmsNRkd1NokgAAANc"]
[Wed Dec 10 01:37:15.178427 2025] [:error] [pid 37041:tid 37047] [client 172.192.58.229:15248] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aTheS7uffDW8UzBwa1azDQAAAEQ"]
[Wed Dec 10 01:37:15.409350 2025] [:error] [pid 37041:tid 37064] [client 172.192.58.229:15108] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aTheS7uffDW8UzBwa1azEQAAAFU"]
[Wed Dec 10 01:37:15.641315 2025] [:error] [pid 37041:tid 37063] [client 172.192.58.229:15345] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aTheS7uffDW8UzBwa1azEgAAAFQ"]
[Wed Dec 10 01:37:15.872403 2025] [:error] [pid 37041:tid 37062] [client 172.192.58.229:15105] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aTheS7uffDW8UzBwa1azFQAAAFM"]
[Wed Dec 10 01:37:16.105541 2025] [:error] [pid 37041:tid 37057] [client 172.192.58.229:15273] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTheTLuffDW8UzBwa1azFwAAAE4"]
[Wed Dec 10 01:37:16.334475 2025] [:error] [pid 2366:tid 2385] [client 172.192.58.229:15126] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTheTEAeBjkmsNRkd1NolAAAANE"]
[Wed Dec 10 01:37:16.574243 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:21044] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTheTEAeBjkmsNRkd1NolwAAAMM"]
[Wed Dec 10 01:37:16.802242 2025] [:error] [pid 2366:tid 2368] [client 172.192.58.229:15251] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aTheTEAeBjkmsNRkd1NomAAAAMA"]
[Wed Dec 10 01:37:17.043178 2025] [:error] [pid 37041:tid 37059] [client 172.192.58.229:15347] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aTheTbuffDW8UzBwa1azHQAAAFA"]
[Wed Dec 10 01:37:17.270188 2025] [:error] [pid 37041:tid 37047] [client 172.192.58.229:15165] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aTheTbuffDW8UzBwa1azHgAAAEQ"]
[Wed Dec 10 01:37:17.507150 2025] [:error] [pid 37041:tid 37043] [client 172.192.58.229:15294] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aTheTbuffDW8UzBwa1azIQAAAEA"]
[Wed Dec 10 01:37:17.759043 2025] [:error] [pid 37041:tid 37063] [client 172.192.58.229:15174] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aTheTbuffDW8UzBwa1azIwAAAFQ"]
[Wed Dec 10 01:37:17.994857 2025] [:error] [pid 2366:tid 2370] [client 172.192.58.229:15334] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aTheTUAeBjkmsNRkd1NonAAAAMI"]
[Wed Dec 10 01:37:18.222933 2025] [:error] [pid 2366:tid 2382] [client 172.192.58.229:15342] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aTheTkAeBjkmsNRkd1NongAAAM4"]
[Wed Dec 10 01:37:18.451025 2025] [:error] [pid 2366:tid 2374] [client 172.192.58.229:15285] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aTheTkAeBjkmsNRkd1NonwAAAMY"]
[Wed Dec 10 01:37:18.739377 2025] [:error] [pid 37041:tid 37060] [client 172.192.58.229:15355] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aTheTruffDW8UzBwa1azKQAAAFE"]
[Wed Dec 10 01:37:18.966407 2025] [:error] [pid 2366:tid 2388] [client 172.192.58.229:15307] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTheTkAeBjkmsNRkd1NooQAAANQ"]
[Wed Dec 10 01:37:19.205386 2025] [:error] [pid 2277:tid 2296] [client 172.192.58.229:15286] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTheT4WGo731r6eS-w5bsQAAAA0"]
[Wed Dec 10 01:37:19.449919 2025] [:error] [pid 2280:tid 2344] [client 172.192.58.229:15254] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTheT3cqIB-8ALgw4ZpYYQAAAIc"]
[Wed Dec 10 01:37:19.677228 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15295] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aTheT3cqIB-8ALgw4ZpYYgAAAIQ"]
[Wed Dec 10 01:37:19.904049 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:15071] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTheT1mpdQscMcJOElW2TAAAAU4"]
[Wed Dec 10 01:37:20.133788 2025] [:error] [pid 2279:tid 2313] [client 172.192.58.229:15166] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTheUFmpdQscMcJOElW2TwAAAUM"]
[Wed Dec 10 01:37:20.362161 2025] [:error] [pid 2279:tid 2333] [client 172.192.58.229:21015] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTheUFmpdQscMcJOElW2UAAAAVc"]
[Wed Dec 10 01:37:20.589664 2025] [:error] [pid 2366:tid 2377] [client 172.192.58.229:21108] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aTheUEAeBjkmsNRkd1NoqQAAAMk"]
[Wed Dec 10 01:37:20.829335 2025] [:error] [pid 2279:tid 2328] [client 172.192.58.229:15173] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTheUFmpdQscMcJOElW2UwAAAVI"]
[Wed Dec 10 01:37:21.058202 2025] [:error] [pid 2277:tid 2293] [client 172.192.58.229:15269] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTheUYWGo731r6eS-w5btAAAAAo"]
[Wed Dec 10 01:37:21.288976 2025] [:error] [pid 2279:tid 2316] [client 172.192.58.229:15266] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTheUVmpdQscMcJOElW2VAAAAUY"]
[Wed Dec 10 01:37:21.522610 2025] [:error] [pid 2277:tid 2283] [client 172.192.58.229:15302] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aTheUYWGo731r6eS-w5btgAAAAE"]
[Wed Dec 10 01:37:21.750461 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:15284] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTheUYWGo731r6eS-w5buAAAABY"]
[Wed Dec 10 01:37:21.977773 2025] [:error] [pid 37041:tid 37047] [client 172.192.58.229:15112] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTheUbuffDW8UzBwa1azKwAAAEQ"]
[Wed Dec 10 01:37:22.206153 2025] [:error] [pid 37041:tid 37050] [client 172.192.58.229:15287] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTheUruffDW8UzBwa1azLgAAAEc"]
[Wed Dec 10 01:37:22.447045 2025] [:error] [pid 2366:tid 2379] [client 172.192.58.229:15120] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aTheUkAeBjkmsNRkd1NorgAAAMs"]
[Wed Dec 10 01:37:22.674946 2025] [:error] [pid 2279:tid 2326] [client 172.192.58.229:15145] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTheUlmpdQscMcJOElW2VQAAAVA"]
[Wed Dec 10 01:37:22.907129 2025] [:error] [pid 2277:tid 2297] [client 172.192.58.229:15279] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTheUoWGo731r6eS-w5bvwAAAA4"]
[Wed Dec 10 01:37:23.142269 2025] [:error] [pid 2277:tid 2293] [client 172.192.58.229:15236] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTheU4WGo731r6eS-w5bwAAAAAo"]
[Wed Dec 10 01:37:23.368186 2025] [:error] [pid 2279:tid 2314] [client 172.192.58.229:15137] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTheU1mpdQscMcJOElW2VwAAAUQ"]
[Wed Dec 10 01:37:23.611865 2025] [:error] [pid 2279:tid 2327] [client 172.192.58.229:15280] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTheU1mpdQscMcJOElW2WQAAAVE"]
[Wed Dec 10 01:37:23.838979 2025] [:error] [pid 2366:tid 2380] [client 172.192.58.229:15289] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTheU0AeBjkmsNRkd1NorwAAAMw"]
[Wed Dec 10 01:37:24.067261 2025] [:error] [pid 2366:tid 2384] [client 172.192.58.229:15107] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTheVEAeBjkmsNRkd1NosAAAANA"]
[Wed Dec 10 01:37:24.317310 2025] [:error] [pid 2366:tid 2386] [client 172.192.58.229:15265] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aTheVEAeBjkmsNRkd1NosQAAANI"]
[Wed Dec 10 01:37:24.551567 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:15344] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTheVIWGo731r6eS-w5bxgAAABY"]
[Wed Dec 10 01:37:24.778377 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15114] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTheVEAeBjkmsNRkd1NotgAAAME"]
[Wed Dec 10 01:37:25.005594 2025] [:error] [pid 2279:tid 2323] [client 172.192.58.229:15288] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTheVVmpdQscMcJOElW2XAAAAU0"]
[Wed Dec 10 01:37:25.249925 2025] [:error] [pid 2366:tid 2374] [client 172.192.58.229:15109] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aTheVUAeBjkmsNRkd1NotwAAAMY"]
[Wed Dec 10 01:37:25.493414 2025] [:error] [pid 2366:tid 2379] [client 172.192.58.229:15049] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTheVUAeBjkmsNRkd1NouAAAAMs"]
[Wed Dec 10 01:37:25.722817 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:15092] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTheVVmpdQscMcJOElW2XQAAAU4"]
[Wed Dec 10 01:37:25.952017 2025] [:error] [pid 2280:tid 2340] [client 172.192.58.229:15147] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTheVXcqIB-8ALgw4ZpYZQAAAIM"]
[Wed Dec 10 01:37:26.206200 2025] [:error] [pid 2280:tid 2352] [client 172.192.58.229:15132] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aTheVncqIB-8ALgw4ZpYZgAAAI8"]
[Wed Dec 10 01:37:26.435053 2025] [:error] [pid 2366:tid 2386] [client 172.192.58.229:15297] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTheVkAeBjkmsNRkd1NovAAAANI"]
[Wed Dec 10 01:37:26.703154 2025] [:error] [pid 2280:tid 2342] [client 172.192.58.229:15277] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTheVncqIB-8ALgw4ZpYaAAAAIU"]
[Wed Dec 10 01:37:26.941590 2025] [:error] [pid 2280:tid 2359] [client 172.192.58.229:15292] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTheVncqIB-8ALgw4ZpYaQAAAJY"]
[Wed Dec 10 01:37:27.175716 2025] [:error] [pid 37041:tid 37067] [client 172.192.58.229:15050] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aTheV7uffDW8UzBwa1azMQAAAFg"]
[Wed Dec 10 01:37:27.403964 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:15341] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aTheV3cqIB-8ALgw4ZpYawAAAIs"]
[Wed Dec 10 01:37:27.635265 2025] [:error] [pid 2280:tid 2343] [client 172.192.58.229:15051] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aTheV3cqIB-8ALgw4ZpYbAAAAIY"]
[Wed Dec 10 01:37:27.864325 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:15160] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aTheV3cqIB-8ALgw4ZpYbQAAAJI"]
[Wed Dec 10 01:37:28.110289 2025] [:error] [pid 2366:tid 2377] [client 172.192.58.229:15127] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aTheWEAeBjkmsNRkd1NovQAAAMk"]
[Wed Dec 10 01:37:28.339014 2025] [:error] [pid 2280:tid 2341] [client 172.192.58.229:15316] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aTheWHcqIB-8ALgw4ZpYcAAAAIQ"]
[Wed Dec 10 01:37:28.621710 2025] [:error] [pid 2280:tid 2354] [client 172.192.58.229:15157] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aTheWHcqIB-8ALgw4ZpYcgAAAJE"]
[Wed Dec 10 01:37:28.891818 2025] [:error] [pid 2279:tid 2310] [client 172.192.58.229:15130] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aTheWFmpdQscMcJOElW2ZwAAAUA"]
[Wed Dec 10 01:37:29.125470 2025] [:error] [pid 2279:tid 2319] [client 172.192.58.229:15161] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aTheWVmpdQscMcJOElW2aAAAAUk"]
[Wed Dec 10 01:37:29.365296 2025] [:error] [pid 2279:tid 2325] [client 172.192.58.229:15129] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTheWVmpdQscMcJOElW2agAAAU8"]
[Wed Dec 10 01:37:29.594175 2025] [:error] [pid 2366:tid 2368] [client 172.192.58.229:15238] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTheWUAeBjkmsNRkd1NovwAAAMA"]
[Wed Dec 10 01:37:29.822281 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:15123] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTheWVmpdQscMcJOElW2bQAAAU4"]
[Wed Dec 10 01:37:30.050757 2025] [:error] [pid 2280:tid 2356] [client 172.192.58.229:15356] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aTheWncqIB-8ALgw4ZpYdQAAAJM"]
[Wed Dec 10 01:37:30.293928 2025] [:error] [pid 2366:tid 2387] [client 172.192.58.229:15066] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aTheWkAeBjkmsNRkd1NowQAAANM"]
[Wed Dec 10 01:37:30.520883 2025] [:error] [pid 37041:tid 37057] [client 172.192.58.229:15121] [client 172.192.58.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aTheWruffDW8UzBwa1azOgAAAE4"]
[Wed Dec 10 01:37:30.790807 2025] [:error] [pid 2279:tid 2330] [client 172.192.58.229:15119] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aTheWlmpdQscMcJOElW2cQAAAVQ"]
[Wed Dec 10 01:37:31.028028 2025] [:error] [pid 2279:tid 2317] [client 172.192.58.229:21090] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aTheW1mpdQscMcJOElW2cgAAAUc"]
[Wed Dec 10 01:37:31.293486 2025] [:error] [pid 2279:tid 2318] [client 172.192.58.229:15093] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aTheW1mpdQscMcJOElW2cwAAAUg"]
[Wed Dec 10 01:37:31.520080 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:15224] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTheW0AeBjkmsNRkd1NoxQAAAMM"]
[Wed Dec 10 01:37:31.748107 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:15040] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTheW3cqIB-8ALgw4ZpYegAAAIs"]
[Wed Dec 10 01:37:31.998136 2025] [:error] [pid 2277:tid 2294] [client 172.192.58.229:21061] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTheW4WGo731r6eS-w5b0QAAAAs"]
[Wed Dec 10 01:37:32.224641 2025] [:error] [pid 2277:tid 2295] [client 172.192.58.229:15057] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aTheXIWGo731r6eS-w5b0gAAAAw"]
[Wed Dec 10 01:37:32.452785 2025] [:error] [pid 2366:tid 2376] [client 172.192.58.229:15240] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTheXEAeBjkmsNRkd1NozAAAAMg"]
[Wed Dec 10 01:37:32.679033 2025] [:error] [pid 2366:tid 2377] [client 172.192.58.229:15065] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTheXEAeBjkmsNRkd1NozQAAAMk"]
[Wed Dec 10 01:37:32.955846 2025] [:error] [pid 2366:tid 2389] [client 172.192.58.229:15222] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTheXEAeBjkmsNRkd1NozgAAANU"]
[Wed Dec 10 01:37:33.182349 2025] [:error] [pid 2277:tid 2291] [client 172.192.58.229:21067] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aTheXYWGo731r6eS-w5b0wAAAAk"]
[Wed Dec 10 01:37:33.414398 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:15087] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aTheXVmpdQscMcJOElW2eQAAAU4"]
[Wed Dec 10 01:37:33.693774 2025] [:error] [pid 37041:tid 37043] [client 172.192.58.229:15094] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aTheXbuffDW8UzBwa1azQQAAAEA"]
[Wed Dec 10 01:37:33.922068 2025] [:error] [pid 37041:tid 37045] [client 172.192.58.229:15018] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aTheXbuffDW8UzBwa1azQgAAAEI"]
[Wed Dec 10 01:37:34.168918 2025] [:error] [pid 2279:tid 2330] [client 172.192.58.229:15159] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aTheXlmpdQscMcJOElW2fAAAAVQ"]
[Wed Dec 10 01:37:34.419767 2025] [:error] [pid 2279:tid 2318] [client 172.192.58.229:15319] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aTheXlmpdQscMcJOElW2fgAAAUg"]
[Wed Dec 10 01:37:34.659999 2025] [:error] [pid 2277:tid 2301] [client 172.192.58.229:15080] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aTheXoWGo731r6eS-w5b1gAAABI"]
[Wed Dec 10 01:37:34.930824 2025] [:error] [pid 2277:tid 2302] [client 172.192.58.229:15041] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aTheXoWGo731r6eS-w5b1wAAABM"]
[Wed Dec 10 01:37:35.163986 2025] [:error] [pid 2277:tid 2283] [client 172.192.58.229:15179] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aTheX4WGo731r6eS-w5b2AAAAAE"]
[Wed Dec 10 01:37:35.390942 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15329] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTheX0AeBjkmsNRkd1No1gAAAME"]
[Wed Dec 10 01:37:35.617740 2025] [:error] [pid 2280:tid 2358] [client 172.192.58.229:15122] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTheX3cqIB-8ALgw4ZpYfQAAAJU"]
[Wed Dec 10 01:37:35.846901 2025] [:error] [pid 37041:tid 37055] [client 172.192.58.229:15010] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTheX7uffDW8UzBwa1azQwAAAEw"]
[Wed Dec 10 01:37:36.075325 2025] [:error] [pid 2280:tid 2356] [client 172.192.58.229:15272] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aTheYHcqIB-8ALgw4ZpYfgAAAJM"]
[Wed Dec 10 01:37:36.301576 2025] [:error] [pid 37041:tid 37060] [client 172.192.58.229:15059] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aTheYLuffDW8UzBwa1azRgAAAFE"]
[Wed Dec 10 01:37:36.528178 2025] [:error] [pid 2277:tid 2286] [client 172.192.58.229:15053] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aTheYIWGo731r6eS-w5b3AAAAAQ"]
[Wed Dec 10 01:37:36.782684 2025] [:error] [pid 2366:tid 2375] [client 172.192.58.229:15168] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aTheYEAeBjkmsNRkd1No2QAAAMc"]
[Wed Dec 10 01:37:37.023970 2025] [:error] [pid 2366:tid 2382] [client 172.192.58.229:15290] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aTheYUAeBjkmsNRkd1No2gAAAM4"]
[Wed Dec 10 01:37:37.259977 2025] [:error] [pid 2277:tid 2300] [client 172.192.58.229:15103] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aTheYYWGo731r6eS-w5b3QAAABE"]
[Wed Dec 10 01:37:37.487878 2025] [:error] [pid 2277:tid 2303] [client 172.192.58.229:15060] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aTheYYWGo731r6eS-w5b3wAAABQ"]
[Wed Dec 10 01:37:37.728739 2025] [:error] [pid 2366:tid 2372] [client 172.192.58.229:15136] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aTheYUAeBjkmsNRkd1No3QAAAMQ"]
[Wed Dec 10 01:37:37.977171 2025] [:error] [pid 2366:tid 2378] [client 172.192.58.229:15002] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aTheYUAeBjkmsNRkd1No3wAAAMo"]
[Wed Dec 10 01:37:38.210490 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15042] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aTheYkAeBjkmsNRkd1No4QAAAME"]
[Wed Dec 10 01:37:38.439075 2025] [:error] [pid 2366:tid 2391] [client 172.192.58.229:14985] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aTheYkAeBjkmsNRkd1No4gAAANc"]
[Wed Dec 10 01:37:38.683877 2025] [:error] [pid 2366:tid 2377] [client 172.192.58.229:15281] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aTheYkAeBjkmsNRkd1No5AAAAMk"]
[Wed Dec 10 01:37:38.923886 2025] [:error] [pid 2279:tid 2331] [client 172.192.58.229:15275] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aTheYlmpdQscMcJOElW2gwAAAVU"]
[Wed Dec 10 01:37:39.179914 2025] [:error] [pid 2366:tid 2375] [client 172.192.58.229:15341] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aTheY0AeBjkmsNRkd1No5wAAAMc"]
[Wed Dec 10 01:37:39.425342 2025] [:error] [pid 2366:tid 2374] [client 172.192.58.229:15140] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aTheY0AeBjkmsNRkd1No6wAAAMY"]
[Wed Dec 10 01:37:39.710680 2025] [:error] [pid 2280:tid 2357] [client 172.192.58.229:15117] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aTheY3cqIB-8ALgw4ZpYhQAAAJQ"]
[Wed Dec 10 01:37:39.962767 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:15043] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aTheY0AeBjkmsNRkd1No8QAAAMM"]
[Wed Dec 10 01:37:40.234610 2025] [:error] [pid 2277:tid 2283] [client 172.192.58.229:15106] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aTheZIWGo731r6eS-w5b4wAAAAE"]
[Wed Dec 10 01:37:40.491276 2025] [:error] [pid 2279:tid 2332] [client 172.192.58.229:15156] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aTheZFmpdQscMcJOElW2hwAAAVY"]
[Wed Dec 10 01:37:40.721517 2025] [:error] [pid 2366:tid 2377] [client 172.192.58.229:15070] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aTheZEAeBjkmsNRkd1No8gAAAMk"]
[Wed Dec 10 01:37:40.964521 2025] [:error] [pid 2277:tid 2284] [client 172.192.58.229:15116] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aTheZIWGo731r6eS-w5b5AAAAAI"]
[Wed Dec 10 01:37:41.221392 2025] [:error] [pid 2280:tid 2353] [client 172.192.58.229:15123] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTheZXcqIB-8ALgw4ZpYiAAAAJA"]
[Wed Dec 10 01:37:41.455683 2025] [:error] [pid 2366:tid 2385] [client 172.192.58.229:15078] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTheZUAeBjkmsNRkd1No8wAAANE"]
[Wed Dec 10 01:37:41.734615 2025] [:error] [pid 2280:tid 2350] [client 172.192.58.229:15012] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTheZXcqIB-8ALgw4ZpYjAAAAI0"]
[Wed Dec 10 01:37:41.998411 2025] [:error] [pid 2366:tid 2386] [client 172.192.58.229:15212] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTheZUAeBjkmsNRkd1No9AAAANI"]
[Wed Dec 10 01:37:42.247335 2025] [:error] [pid 2366:tid 2378] [client 172.192.58.229:15151] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aTheZkAeBjkmsNRkd1No9wAAAMo"]
[Wed Dec 10 01:37:42.475881 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15246] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aTheZkAeBjkmsNRkd1No-AAAAME"]
[Wed Dec 10 01:37:42.754056 2025] [:error] [pid 2366:tid 2388] [client 172.192.58.229:15068] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aTheZkAeBjkmsNRkd1No-gAAANQ"]
[Wed Dec 10 01:37:42.981428 2025] [:error] [pid 2280:tid 2340] [client 172.192.58.229:15110] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aTheZncqIB-8ALgw4ZpYjwAAAIM"]
[Wed Dec 10 01:37:43.212099 2025] [:error] [pid 2277:tid 2297] [client 172.192.58.229:15333] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTheZ4WGo731r6eS-w5b6QAAAA4"]
[Wed Dec 10 01:37:43.453267 2025] [:error] [pid 2277:tid 2294] [client 172.192.58.229:15048] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTheZ4WGo731r6eS-w5b6wAAAAs"]
[Wed Dec 10 01:37:43.693034 2025] [:error] [pid 2277:tid 2291] [client 172.192.58.229:15163] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTheZ4WGo731r6eS-w5b7QAAAAk"]
[Wed Dec 10 01:37:43.931223 2025] [:error] [pid 2277:tid 2290] [client 172.192.58.229:15278] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aTheZ4WGo731r6eS-w5b7wAAAAg"]
[Wed Dec 10 01:37:44.191611 2025] [:error] [pid 2277:tid 2302] [client 172.192.58.229:15167] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aTheaIWGo731r6eS-w5b8AAAABM"]
[Wed Dec 10 01:37:44.423812 2025] [:error] [pid 2279:tid 2320] [client 172.192.58.229:15079] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aTheaFmpdQscMcJOElW2jQAAAUo"]
[Wed Dec 10 01:37:44.650589 2025] [:error] [pid 2280:tid 2354] [client 172.192.58.229:15074] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aTheaHcqIB-8ALgw4ZpYlgAAAJE"]
[Wed Dec 10 01:37:44.876312 2025] [:error] [pid 2280:tid 2342] [client 172.192.58.229:14981] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aTheaHcqIB-8ALgw4ZpYlwAAAIU"]
[Wed Dec 10 01:37:45.102396 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:15044] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aTheaVmpdQscMcJOElW2jgAAAU4"]
[Wed Dec 10 01:37:45.329876 2025] [:error] [pid 2280:tid 2340] [client 172.192.58.229:15138] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aTheaXcqIB-8ALgw4ZpYmQAAAIM"]
[Wed Dec 10 01:37:45.566654 2025] [:error] [pid 2280:tid 2355] [client 172.192.58.229:21053] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aTheaXcqIB-8ALgw4ZpYnAAAAJI"]
[Wed Dec 10 01:37:45.797026 2025] [:error] [pid 2279:tid 2330] [client 172.192.58.229:15144] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aTheaVmpdQscMcJOElW2kAAAAVQ"]
[Wed Dec 10 01:37:46.023929 2025] [:error] [pid 2280:tid 2349] [client 172.192.58.229:15357] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aTheancqIB-8ALgw4ZpYngAAAIw"]
[Wed Dec 10 01:37:46.250838 2025] [:error] [pid 2279:tid 2323] [client 172.192.58.229:15125] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aThealmpdQscMcJOElW2kgAAAU0"]
[Wed Dec 10 01:37:46.476589 2025] [:error] [pid 37041:tid 37048] [client 172.192.58.229:21066] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aThearuffDW8UzBwa1azSwAAAEU"]
[Wed Dec 10 01:37:46.754728 2025] [:error] [pid 2279:tid 2329] [client 172.192.58.229:15152] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aThealmpdQscMcJOElW2lwAAAVM"]
[Wed Dec 10 01:37:46.981999 2025] [:error] [pid 2279:tid 2320] [client 172.192.58.229:15058] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aThealmpdQscMcJOElW2mQAAAUo"]
[Wed Dec 10 01:37:47.230769 2025] [:error] [pid 2279:tid 2330] [client 172.192.58.229:15088] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aThea1mpdQscMcJOElW2nAAAAVQ"]
[Wed Dec 10 01:37:47.460932 2025] [:error] [pid 37041:tid 37062] [client 172.192.58.229:15073] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aThea7uffDW8UzBwa1azTAAAAFM"]
[Wed Dec 10 01:37:47.688632 2025] [:error] [pid 37041:tid 37046] [client 172.192.58.229:15164] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aThea7uffDW8UzBwa1azTQAAAEM"]
[Wed Dec 10 01:37:47.914306 2025] [:error] [pid 2279:tid 2327] [client 172.192.58.229:15086] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aThea1mpdQscMcJOElW2ngAAAVE"]
[Wed Dec 10 01:37:48.141402 2025] [:error] [pid 2280:tid 2338] [client 172.192.58.229:15067] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aThebHcqIB-8ALgw4ZpYogAAAIE"]
[Wed Dec 10 01:37:48.379761 2025] [:error] [pid 2277:tid 2300] [client 172.192.58.229:15118] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aThebIWGo731r6eS-w5b9gAAABE"]
[Wed Dec 10 01:37:48.620068 2025] [:error] [pid 2366:tid 2385] [client 172.192.58.229:15085] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aThebEAeBjkmsNRkd1NpBAAAANE"]
[Wed Dec 10 01:37:48.849480 2025] [:error] [pid 37041:tid 37043] [client 172.192.58.229:15153] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aThebLuffDW8UzBwa1azTwAAAEA"]
[Wed Dec 10 01:37:49.075767 2025] [:error] [pid 2366:tid 2376] [client 172.192.58.229:15064] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aThebUAeBjkmsNRkd1NpBQAAAMg"]
[Wed Dec 10 01:37:49.303014 2025] [:error] [pid 37041:tid 37052] [client 172.192.58.229:15055] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aThebbuffDW8UzBwa1azUAAAAEk"]
[Wed Dec 10 01:37:49.543255 2025] [:error] [pid 37041:tid 37055] [client 172.192.58.229:15143] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aThebbuffDW8UzBwa1azUwAAAEw"]
[Wed Dec 10 01:37:49.788049 2025] [:error] [pid 37041:tid 37049] [client 172.192.58.229:15029] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aThebbuffDW8UzBwa1azVAAAAEY"]
[Wed Dec 10 01:37:50.015115 2025] [:error] [pid 37041:tid 37058] [client 172.192.58.229:15141] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aThebruffDW8UzBwa1azVQAAAE8"]
[Wed Dec 10 01:37:50.248503 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:15015] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aThebkAeBjkmsNRkd1NpCwAAANY"]
[Wed Dec 10 01:37:50.491828 2025] [:error] [pid 2366:tid 2379] [client 172.192.58.229:15096] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aThebkAeBjkmsNRkd1NpDAAAAMs"]
[Wed Dec 10 01:37:50.735865 2025] [:error] [pid 2366:tid 2370] [client 172.192.58.229:15115] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aThebkAeBjkmsNRkd1NpDwAAAMI"]
[Wed Dec 10 01:37:50.967699 2025] [:error] [pid 37041:tid 37056] [client 172.192.58.229:14993] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aThebruffDW8UzBwa1azWQAAAE0"]
[Wed Dec 10 01:37:51.194686 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:15135] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aTheb3cqIB-8ALgw4ZpYqQAAAIs"]
[Wed Dec 10 01:37:51.424920 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:15020] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aTheb0AeBjkmsNRkd1NpEwAAANY"]
[Wed Dec 10 01:37:51.652375 2025] [:error] [pid 37041:tid 37044] [client 172.192.58.229:15097] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTheb7uffDW8UzBwa1azWwAAAEE"]
[Wed Dec 10 01:37:51.880520 2025] [:error] [pid 2280:tid 2352] [client 172.192.58.229:14994] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aTheb3cqIB-8ALgw4ZpYqwAAAI8"]
[Wed Dec 10 01:37:52.106977 2025] [:error] [pid 2279:tid 2330] [client 172.192.58.229:15150] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aThecFmpdQscMcJOElW2pwAAAVQ"]
[Wed Dec 10 01:37:52.356957 2025] [:error] [pid 37041:tid 37065] [client 172.192.58.229:14978] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aThecLuffDW8UzBwa1azXAAAAFY"]
[Wed Dec 10 01:37:52.585238 2025] [:error] [pid 2280:tid 2361] [client 172.192.58.229:14855] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aThecHcqIB-8ALgw4ZpYrwAAAJg"]
[Wed Dec 10 01:37:52.813341 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15021] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aThecEAeBjkmsNRkd1NpGQAAAME"]
[Wed Dec 10 01:37:53.062036 2025] [:error] [pid 2279:tid 2318] [client 172.192.58.229:15146] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aThecVmpdQscMcJOElW2qQAAAUg"]
[Wed Dec 10 01:37:53.292760 2025] [:error] [pid 2279:tid 2323] [client 172.192.58.229:15249] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aThecVmpdQscMcJOElW2qgAAAU0"]
[Wed Dec 10 01:37:53.522929 2025] [:error] [pid 2366:tid 2388] [client 172.192.58.229:15142] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aThecUAeBjkmsNRkd1NpHAAAANQ"]
[Wed Dec 10 01:37:53.779632 2025] [:error] [pid 2280:tid 2337] [client 172.192.58.229:14929] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aThecXcqIB-8ALgw4ZpYsQAAAIA"]
[Wed Dec 10 01:37:54.009563 2025] [:error] [pid 2366:tid 2375] [client 172.192.58.229:15162] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aTheckAeBjkmsNRkd1NpHgAAAMc"]
[Wed Dec 10 01:37:54.244594 2025] [:error] [pid 2366:tid 2387] [client 172.192.58.229:14990] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aTheckAeBjkmsNRkd1NpIwAAANM"]
[Wed Dec 10 01:37:54.474142 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:15158] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aTheckAeBjkmsNRkd1NpJQAAAME"]
[Wed Dec 10 01:37:54.701639 2025] [:error] [pid 2279:tid 2333] [client 172.192.58.229:15213] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aTheclmpdQscMcJOElW2rQAAAVc"]
[Wed Dec 10 01:37:54.927817 2025] [:error] [pid 2277:tid 2295] [client 172.192.58.229:14977] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aThecoWGo731r6eS-w5b-AAAAAw"]
[Wed Dec 10 01:37:55.155268 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:15148] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aThec0AeBjkmsNRkd1NpKAAAAMM"]
[Wed Dec 10 01:37:55.382691 2025] [:error] [pid 37041:tid 37050] [client 172.192.58.229:15009] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aThec7uffDW8UzBwa1azXwAAAEc"]
[Wed Dec 10 01:37:55.609294 2025] [:error] [pid 2279:tid 2324] [client 172.192.58.229:15098] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aThec1mpdQscMcJOElW2sAAAAU4"]
[Wed Dec 10 01:37:55.839563 2025] [:error] [pid 2279:tid 2331] [client 172.192.58.229:15052] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aThec1mpdQscMcJOElW2sQAAAVU"]
[Wed Dec 10 01:37:56.067406 2025] [:error] [pid 2280:tid 2344] [client 172.192.58.229:15081] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aThedHcqIB-8ALgw4ZpYswAAAIc"]
[Wed Dec 10 01:37:56.297499 2025] [:error] [pid 2366:tid 2381] [client 172.192.58.229:15095] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aThedEAeBjkmsNRkd1NpLgAAAM0"]
[Wed Dec 10 01:37:56.527285 2025] [:error] [pid 2279:tid 2314] [client 172.192.58.229:15011] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aThedFmpdQscMcJOElW2swAAAUQ"]
[Wed Dec 10 01:37:56.755010 2025] [:error] [pid 2280:tid 2348] [client 172.192.58.229:15006] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aThedHcqIB-8ALgw4ZpYtwAAAIs"]
[Wed Dec 10 01:37:56.992585 2025] [:error] [pid 2279:tid 2322] [client 172.192.58.229:14980] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aThedFmpdQscMcJOElW2tQAAAUw"]
[Wed Dec 10 01:37:57.229392 2025] [:error] [pid 2279:tid 2321] [client 172.192.58.229:14914] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aThedVmpdQscMcJOElW2tgAAAUs"]
[Wed Dec 10 01:37:57.462605 2025] [:error] [pid 2279:tid 2332] [client 172.192.58.229:14987] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aThedVmpdQscMcJOElW2twAAAVY"]
[Wed Dec 10 01:37:57.703515 2025] [:error] [pid 37041:tid 37051] [client 172.192.58.229:14930] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aThedbuffDW8UzBwa1azYwAAAEg"]
[Wed Dec 10 01:37:57.937046 2025] [:error] [pid 37041:tid 37059] [client 172.192.58.229:14912] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aThedbuffDW8UzBwa1azZAAAAFA"]
[Wed Dec 10 01:37:58.164264 2025] [:error] [pid 2366:tid 2391] [client 172.192.58.229:14976] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aThedkAeBjkmsNRkd1NpMgAAANc"]
[Wed Dec 10 01:37:58.396111 2025] [:error] [pid 2280:tid 2347] [client 172.192.58.229:15102] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aThedncqIB-8ALgw4ZpYuwAAAIo"]
[Wed Dec 10 01:37:58.661027 2025] [:error] [pid 2277:tid 2293] [client 172.192.58.229:14953] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aThedoWGo731r6eS-w5b_QAAAAo"]
[Wed Dec 10 01:37:58.888721 2025] [:error] [pid 2277:tid 2304] [client 172.192.58.229:15082] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aThedoWGo731r6eS-w5b_wAAABU"]
[Wed Dec 10 01:37:59.114324 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:14916] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aThed4WGo731r6eS-w5cAAAAABY"]
[Wed Dec 10 01:37:59.340445 2025] [:error] [pid 2366:tid 2382] [client 172.192.58.229:15154] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aThed0AeBjkmsNRkd1NpNQAAAM4"]
[Wed Dec 10 01:37:59.577209 2025] [:error] [pid 2366:tid 2371] [client 172.192.58.229:14949] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aThed0AeBjkmsNRkd1NpNgAAAMM"]
[Wed Dec 10 01:37:59.810610 2025] [:error] [pid 2280:tid 2345] [client 172.192.58.229:14984] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aThed3cqIB-8ALgw4ZpYvwAAAIg"]
[Wed Dec 10 01:38:00.040606 2025] [:error] [pid 2280:tid 2353] [client 172.192.58.229:15133] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheeHcqIB-8ALgw4ZpYwAAAAJA"]
[Wed Dec 10 01:38:00.267797 2025] [:error] [pid 2279:tid 2313] [client 172.192.58.229:15013] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheeFmpdQscMcJOElW2vQAAAUM"]
[Wed Dec 10 01:38:00.496811 2025] [:error] [pid 2277:tid 2297] [client 172.192.58.229:15008] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheeIWGo731r6eS-w5cBAAAAA4"]
[Wed Dec 10 01:38:00.723225 2025] [:error] [pid 2277:tid 2303] [client 172.192.58.229:15084] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aTheeIWGo731r6eS-w5cBQAAABQ"]
[Wed Dec 10 01:38:00.983658 2025] [:error] [pid 2366:tid 2375] [client 172.192.58.229:14982] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTheeEAeBjkmsNRkd1NpPAAAAMc"]
[Wed Dec 10 01:38:01.210443 2025] [:error] [pid 2279:tid 2320] [client 172.192.58.229:15003] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTheeVmpdQscMcJOElW2wQAAAUo"]
[Wed Dec 10 01:38:01.439086 2025] [:error] [pid 2277:tid 2291] [client 172.192.58.229:14938] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTheeYWGo731r6eS-w5cCAAAAAk"]
[Wed Dec 10 01:38:01.665359 2025] [:error] [pid 2277:tid 2307] [client 172.192.58.229:15035] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aTheeYWGo731r6eS-w5cCQAAABg"]
[Wed Dec 10 01:38:01.893031 2025] [:error] [pid 2366:tid 2370] [client 172.192.58.229:14954] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aTheeUAeBjkmsNRkd1NpRQAAAMI"]
[Wed Dec 10 01:38:02.119844 2025] [:error] [pid 2366:tid 2385] [client 172.192.58.229:15077] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aTheekAeBjkmsNRkd1NpSQAAANE"]
[Wed Dec 10 01:38:02.345847 2025] [:error] [pid 2366:tid 2392] [client 172.192.58.229:14947] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aTheekAeBjkmsNRkd1NpTQAAANg"]
[Wed Dec 10 01:38:02.580031 2025] [:error] [pid 2279:tid 2317] [client 172.192.58.229:14924] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aTheelmpdQscMcJOElW2xwAAAUc"]
[Wed Dec 10 01:38:02.808592 2025] [:error] [pid 2277:tid 2302] [client 172.192.58.229:14995] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aTheeoWGo731r6eS-w5cDAAAABM"]
[Wed Dec 10 01:38:03.067463 2025] [:error] [pid 2280:tid 2349] [client 172.192.58.229:15091] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aThee3cqIB-8ALgw4ZpYzQAAAIw"]
[Wed Dec 10 01:38:03.296415 2025] [:error] [pid 2279:tid 2318] [client 172.192.58.229:15034] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aThee1mpdQscMcJOElW2ywAAAUg"]
[Wed Dec 10 01:38:03.538741 2025] [:error] [pid 37041:tid 37066] [client 172.192.58.229:14992] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aThee7uffDW8UzBwa1azbAAAAFc"]
[Wed Dec 10 01:38:03.764914 2025] [:error] [pid 2277:tid 2296] [client 172.192.58.229:15001] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aThee4WGo731r6eS-w5cDwAAAA0"]
[Wed Dec 10 01:38:03.992016 2025] [:error] [pid 2366:tid 2391] [client 172.192.58.229:14988] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aThee0AeBjkmsNRkd1NpUgAAANc"]
[Wed Dec 10 01:38:04.220693 2025] [:error] [pid 2366:tid 2370] [client 172.192.58.229:15022] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aThefEAeBjkmsNRkd1NpVAAAAMI"]
[Wed Dec 10 01:38:04.450987 2025] [:error] [pid 2277:tid 2305] [client 172.192.58.229:15054] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aThefIWGo731r6eS-w5cEQAAABY"]
[Wed Dec 10 01:38:04.680009 2025] [:error] [pid 37041:tid 37047] [client 172.192.58.229:15356] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aThefLuffDW8UzBwa1azcwAAAEQ"]
[Wed Dec 10 01:38:04.906711 2025] [:error] [pid 2366:tid 2389] [client 172.192.58.229:15030] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aThefEAeBjkmsNRkd1NpVgAAANU"]
[Wed Dec 10 01:38:05.133475 2025] [:error] [pid 2277:tid 2288] [client 172.192.58.229:15025] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aThefYWGo731r6eS-w5cFQAAAAY"]
[Wed Dec 10 01:38:05.366471 2025] [:error] [pid 2279:tid 2321] [client 172.192.58.229:15056] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aThefVmpdQscMcJOElW22AAAAUs"]
[Wed Dec 10 01:38:05.592087 2025] [:error] [pid 2366:tid 2383] [client 172.192.58.229:14962] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aThefUAeBjkmsNRkd1NpWAAAAM8"]
[Wed Dec 10 01:38:05.821865 2025] [:error] [pid 2279:tid 2313] [client 172.192.58.229:14863] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aThefVmpdQscMcJOElW23gAAAUM"]
[Wed Dec 10 01:38:06.049211 2025] [:error] [pid 2279:tid 2333] [client 172.192.58.229:14996] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aTheflmpdQscMcJOElW24gAAAVc"]
[Wed Dec 10 01:38:06.283301 2025] [:error] [pid 2366:tid 2392] [client 172.192.58.229:15032] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aThefkAeBjkmsNRkd1NpXAAAANg"]
[Wed Dec 10 01:38:06.510766 2025] [:error] [pid 2277:tid 2303] [client 172.192.58.229:14850] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aThefoWGo731r6eS-w5cGQAAABQ"]
[Wed Dec 10 01:38:06.740102 2025] [:error] [pid 2280:tid 2343] [client 172.192.58.229:14923] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aThefncqIB-8ALgw4ZpY2AAAAIY"]
[Wed Dec 10 01:38:06.979051 2025] [:error] [pid 2280:tid 2360] [client 172.192.58.229:15000] [client 172.192.58.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aThefncqIB-8ALgw4ZpY2wAAAJc"]
[Wed Dec 10 01:38:07.208920 2025] [:error] [pid 2366:tid 2379] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Wed Dec 10 01:38:07.343106 2025] [:error] [pid 2366:tid 2385] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Wed Dec 10 01:38:07.460128 2025] [:error] [pid 2366:tid 2383] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed Dec 10 01:38:07.576537 2025] [:error] [pid 2366:tid 2386] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Wed Dec 10 01:38:07.693341 2025] [:error] [pid 2366:tid 2388] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Wed Dec 10 01:38:07.810497 2025] [:error] [pid 2366:tid 2390] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Wed Dec 10 01:38:07.927875 2025] [:error] [pid 2366:tid 2380] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Wed Dec 10 01:38:08.044636 2025] [:error] [pid 2366:tid 2369] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Wed Dec 10 01:38:08.166155 2025] [:error] [pid 2366:tid 2387] [client 172.192.58.229:14944] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Wed Dec 10 02:18:19.278190 2025] [:error] [pid 2279:tid 2325] [client 31.158.17.100:60746] [client 31.158.17.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 31.158.17.100, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aThn61mpdQscMcJOElXGnwAAAU8"]
[Wed Dec 10 02:18:19.291311 2025] [:error] [pid 2279:tid 2325] [client 31.158.17.100:60746] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 10 02:20:44.204602 2025] [:error] [pid 2366:tid 2373] [client 106.219.121.164:28570] [client 106.219.121.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.121.164, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aThofEAeBjkmsNRkd1OCSwAAAMU"]
[Wed Dec 10 02:20:44.209478 2025] [:error] [pid 2366:tid 2373] [client 106.219.121.164:28570] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 10 14:53:23.477802 2025] [:error] [pid 37062:tid 37071] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/ce.php
[Wed Dec 10 14:53:23.638425 2025] [:error] [pid 37062:tid 37082] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Wed Dec 10 14:53:23.800636 2025] [:error] [pid 37062:tid 37066] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/tithings.php
[Wed Dec 10 14:53:23.965474 2025] [:error] [pid 37062:tid 37070] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed Dec 10 14:53:24.126588 2025] [:error] [pid 37062:tid 37087] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Wed Dec 10 14:53:24.287534 2025] [:error] [pid 37062:tid 37067] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Dec 10 14:53:24.446609 2025] [:error] [pid 37062:tid 37068] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/duplicand.php
[Wed Dec 10 14:53:24.608307 2025] [:error] [pid 37062:tid 37088] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/3i8som87avh59dosfymtvCakc.php
[Wed Dec 10 14:53:24.776653 2025] [:error] [pid 37062:tid 37085] [client 4.217.223.152:9433] File does not exist: /usr/local/apache/htdocs/suspended-page/ww5.php
[Wed Dec 10 14:53:24.938612 2025] [:error] [pid 37062:tid 37064] [client 4.217.223.152:9433] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aTkY5DB0I62HCw8Z5BTs5wAAAAA"]
[Wed Dec 10 14:53:26.987649 2025] [:error] [pid 37062:tid 37068] [client 4.217.223.152:31918] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aTkY5jB0I62HCw8Z5BTs7gAAAAQ"]
[Wed Dec 10 14:53:28.814070 2025] [:error] [pid 36977:tid 37046] [client 4.217.223.152:15558] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aTkY6Mc-JLl-uoL-Au5cZQAAAEw"]
[Wed Dec 10 14:53:30.935034 2025] [:error] [pid 36977:tid 37053] [client 4.217.223.152:57690] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aTkY6sc-JLl-uoL-Au5caAAAAFM"]
[Wed Dec 10 14:53:32.303314 2025] [:error] [pid 36977:tid 37038] [client 4.217.223.152:36842] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aTkY7Mc-JLl-uoL-Au5cbQAAAEQ"]
[Wed Dec 10 14:53:33.225389 2025] [:error] [pid 37062:tid 37067] [client 4.217.223.152:56184] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aTkY7TB0I62HCw8Z5BTs_wAAAAM"]
[Wed Dec 10 14:53:36.167222 2025] [:error] [pid 37062:tid 37076] [client 4.217.223.152:9371] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aTkY8DB0I62HCw8Z5BTtBwAAAAw"]
[Wed Dec 10 14:53:37.727080 2025] [:error] [pid 36975:tid 36985] [client 4.217.223.152:15565] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aTkY8d_ZNQ3zMmb38BEJeQAAAIU"]
[Wed Dec 10 14:53:38.505599 2025] [:error] [pid 36975:tid 36989] [client 4.217.223.152:9402] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nonesoterically.php"] [unique_id "aTkY8t_ZNQ3zMmb38BEJhAAAAIk"]
[Wed Dec 10 14:53:39.682381 2025] [:error] [pid 36977:tid 37051] [client 4.217.223.152:56144] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nonesoterically.php"] [unique_id "aTkY88c-JLl-uoL-Au5chQAAAFE"]
[Wed Dec 10 14:53:40.893611 2025] [:error] [pid 37062:tid 37072] [client 4.217.223.152:42786] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nonesoterically.php"] [unique_id "aTkY9DB0I62HCw8Z5BTtDQAAAAg"]
[Wed Dec 10 14:53:43.885565 2025] [:error] [pid 37062:tid 37086] [client 4.217.223.152:15598] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nonesoterically.php"] [unique_id "aTkY9zB0I62HCw8Z5BTtFAAAABY"]
[Wed Dec 10 14:53:45.963482 2025] [:error] [pid 36976:tid 37024] [client 4.217.223.152:8870] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aTkY-SSpHW5KVaY9tJktBQAAANE"]
[Wed Dec 10 14:53:47.902568 2025] [:error] [pid 36976:tid 37013] [client 4.217.223.152:15610] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aTkY-ySpHW5KVaY9tJktCwAAAMY"]
[Wed Dec 10 14:53:48.938009 2025] [:error] [pid 37062:tid 37078] [client 4.217.223.152:42800] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aTkY_DB0I62HCw8Z5BTtKQAAAA4"]
[Wed Dec 10 14:53:50.852688 2025] [:error] [pid 36976:tid 37007] [client 4.217.223.152:11519] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aTkY_iSpHW5KVaY9tJktFQAAAMA"]
[Wed Dec 10 14:53:52.938199 2025] [:error] [pid 36975:tid 36999] [client 4.217.223.152:8888] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aTkZAN_ZNQ3zMmb38BEJmgAAAJM"]
[Wed Dec 10 14:53:55.340094 2025] [:error] [pid 36976:tid 37028] [client 4.217.223.152:18867] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aTkZAySpHW5KVaY9tJktIQAAANU"]
[Wed Dec 10 14:53:57.331286 2025] [:error] [pid 36975:tid 36992] [client 4.217.223.152:9352] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aTkZBd_ZNQ3zMmb38BEJvQAAAIw"]
[Wed Dec 10 14:53:58.804139 2025] [:error] [pid 37062:tid 37088] [client 4.217.223.152:25297] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aTkZBjB0I62HCw8Z5BTtUwAAABg"]
[Wed Dec 10 14:54:00.070176 2025] [:error] [pid 36977:tid 37041] [client 4.217.223.152:18820] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/palsy.php"] [unique_id "aTkZCMc-JLl-uoL-Au5cxwAAAEc"]
[Wed Dec 10 14:54:01.667698 2025] [:error] [pid 36977:tid 37045] [client 4.217.223.152:29425] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/palsy.php"] [unique_id "aTkZCcc-JLl-uoL-Au5cygAAAEs"]
[Wed Dec 10 14:54:06.473024 2025] [:error] [pid 36976:tid 37020] [client 4.217.223.152:18822] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/palsy.php"] [unique_id "aTkZDiSpHW5KVaY9tJktNQAAAM0"]
[Wed Dec 10 14:54:07.789651 2025] [:error] [pid 36976:tid 37024] [client 4.217.223.152:18816] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/palsy.php"] [unique_id "aTkZDySpHW5KVaY9tJktOAAAANE"]
[Wed Dec 10 14:54:09.824609 2025] [:error] [pid 37062:tid 37077] [client 4.217.223.152:8892] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aTkZETB0I62HCw8Z5BTtYQAAAA0"]
[Wed Dec 10 14:54:12.575618 2025] [:error] [pid 36975:tid 37003] [client 4.217.223.152:29430] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aTkZFN_ZNQ3zMmb38BEJ5AAAAJc"]
[Wed Dec 10 14:54:14.289589 2025] [:error] [pid 36976:tid 37015] [client 4.217.223.152:8857] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aTkZFiSpHW5KVaY9tJktRwAAAMg"]
[Wed Dec 10 14:54:15.664407 2025] [:error] [pid 36976:tid 37024] [client 4.217.223.152:37261] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aTkZFySpHW5KVaY9tJktSgAAANE"]
[Wed Dec 10 14:54:16.839670 2025] [:error] [pid 37062:tid 37067] [client 4.217.223.152:11202] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aTkZGDB0I62HCw8Z5BTtcgAAAAM"]
[Wed Dec 10 14:54:18.577645 2025] [:error] [pid 36975:tid 36988] [client 4.217.223.152:20876] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aTkZGt_ZNQ3zMmb38BEJ8wAAAIg"]
[Wed Dec 10 14:54:21.135388 2025] [:error] [pid 36975:tid 36981] [client 4.217.223.152:38015] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aTkZHd_ZNQ3zMmb38BEJ9gAAAIE"]
[Wed Dec 10 14:54:23.052010 2025] [:error] [pid 37062:tid 37083] [client 4.217.223.152:26216] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aTkZHzB0I62HCw8Z5BTtfAAAABM"]
[Wed Dec 10 14:54:24.814243 2025] [:error] [pid 36977:tid 37043] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Wed Dec 10 14:54:24.965192 2025] [:error] [pid 36977:tid 37046] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-advaced.php
[Wed Dec 10 14:54:25.119688 2025] [:error] [pid 36977:tid 37053] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/cyanamids.php
[Wed Dec 10 14:54:25.269786 2025] [:error] [pid 36977:tid 37048] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/dox.php
[Wed Dec 10 14:54:26.279523 2025] [:error] [pid 36977:tid 37036] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Wed Dec 10 14:54:26.454688 2025] [:error] [pid 36977:tid 37042] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Wed Dec 10 14:54:26.608050 2025] [:error] [pid 36977:tid 37050] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-front.php
[Wed Dec 10 14:54:26.758431 2025] [:error] [pid 36977:tid 37046] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/nof.php
[Wed Dec 10 14:54:26.907872 2025] [:error] [pid 36977:tid 37058] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/disengaging.php
[Wed Dec 10 14:54:27.061587 2025] [:error] [pid 36977:tid 37048] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/rk2.php
[Wed Dec 10 14:54:27.235756 2025] [:error] [pid 36977:tid 37057] [client 4.217.223.152:8205] File does not exist: /usr/local/apache/htdocs/suspended-page/unbefittingly.php
[Wed Dec 10 14:54:28.205871 2025] [:error] [pid 36977:tid 37054] [client 4.217.223.152:8205] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aTkZJMc-JLl-uoL-Au5dBAAAAFQ"]
[Wed Dec 10 14:54:29.585875 2025] [:error] [pid 37062:tid 37088] [client 4.217.223.152:9037] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aTkZJTB0I62HCw8Z5BTtiQAAABg"]
[Wed Dec 10 14:54:31.499462 2025] [:error] [pid 36977:tid 37051] [client 4.217.223.152:23247] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aTkZJ8c-JLl-uoL-Au5dCgAAAFE"]
[Wed Dec 10 14:54:32.307816 2025] [:error] [pid 36977:tid 37034] [client 4.217.223.152:8643] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aTkZKMc-JLl-uoL-Au5dDgAAAEA"]
[Wed Dec 10 14:54:33.949809 2025] [:error] [pid 36977:tid 37037] [client 4.217.223.152:9395] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTkZKcc-JLl-uoL-Au5dFgAAAEM"]
[Wed Dec 10 14:54:35.197495 2025] [:error] [pid 36975:tid 36996] [client 4.217.223.152:8676] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTkZK9_ZNQ3zMmb38BEKBwAAAJA"]
[Wed Dec 10 14:54:36.823705 2025] [:error] [pid 36977:tid 37036] [client 4.217.223.152:22183] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTkZLMc-JLl-uoL-Au5dHgAAAEI"]
[Wed Dec 10 14:54:39.869342 2025] [:error] [pid 36975:tid 36996] [client 4.217.223.152:50300] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aTkZL9_ZNQ3zMmb38BEKEwAAAJA"]
[Wed Dec 10 14:54:41.634265 2025] [:error] [pid 37062:tid 37074] [client 4.217.223.152:24227] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aTkZMTB0I62HCw8Z5BTtnAAAAAo"]
[Wed Dec 10 14:54:43.625972 2025] [:error] [pid 36977:tid 37053] [client 4.217.223.152:32546] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aTkZM8c-JLl-uoL-Au5dKAAAAFM"]
[Wed Dec 10 14:54:47.268713 2025] [:error] [pid 36976:tid 37013] [client 4.217.223.152:9107] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aTkZNySpHW5KVaY9tJktfgAAAMY"]
[Wed Dec 10 14:54:47.859533 2025] [:error] [pid 36975:tid 37000] [client 4.217.223.152:36104] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/poliomyelopathy.php"] [unique_id "aTkZN9_ZNQ3zMmb38BEKJAAAAJQ"]
[Wed Dec 10 14:54:48.268927 2025] [:error] [pid 36976:tid 37019] [client 4.217.223.152:18586] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aTkZOCSpHW5KVaY9tJktgAAAAMw"]
[Wed Dec 10 14:54:49.103919 2025] [:error] [pid 36976:tid 37010] [client 4.217.223.152:8361] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aTkZOSSpHW5KVaY9tJktgwAAAMM"]
[Wed Dec 10 14:54:50.841427 2025] [:error] [pid 36976:tid 37007] [client 4.217.223.152:11441] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aTkZOiSpHW5KVaY9tJktiwAAAMA"]
[Wed Dec 10 14:54:53.339849 2025] [:error] [pid 37062:tid 37084] [client 4.217.223.152:21456] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aTkZPTB0I62HCw8Z5BTtuwAAABQ"]
[Wed Dec 10 14:54:56.035324 2025] [:error] [pid 37062:tid 37080] [client 4.217.223.152:31258] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/naxc.php"] [unique_id "aTkZQDB0I62HCw8Z5BTtxgAAABA"]
[Wed Dec 10 14:54:58.326784 2025] [:error] [pid 36975:tid 36997] [client 4.217.223.152:8951] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/naxc.php"] [unique_id "aTkZQt_ZNQ3zMmb38BEKOAAAAJE"]
[Wed Dec 10 14:55:00.835075 2025] [:error] [pid 37062:tid 37070] [client 4.217.223.152:22684] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/naxc.php"] [unique_id "aTkZRDB0I62HCw8Z5BTt0gAAAAY"]
[Wed Dec 10 14:55:02.209533 2025] [:error] [pid 36977:tid 37041] [client 4.217.223.152:28850] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/naxc.php"] [unique_id "aTkZRsc-JLl-uoL-Au5dVAAAAEc"]
[Wed Dec 10 14:55:04.257674 2025] [:error] [pid 37062:tid 37070] [client 4.217.223.152:20970] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "aTkZSDB0I62HCw8Z5BTt3AAAAAY"]
[Wed Dec 10 14:55:06.506373 2025] [:error] [pid 36977:tid 37042] [client 4.217.223.152:8917] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "aTkZSsc-JLl-uoL-Au5dXQAAAEg"]
[Wed Dec 10 14:55:09.011729 2025] [:error] [pid 36977:tid 37036] [client 4.217.223.152:25616] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "aTkZTcc-JLl-uoL-Au5dYgAAAEI"]
[Wed Dec 10 14:55:11.502070 2025] [:error] [pid 36976:tid 37026] [client 4.217.223.152:28237] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "aTkZTySpHW5KVaY9tJkttQAAANM"]
[Wed Dec 10 14:55:14.008825 2025] [:error] [pid 37062:tid 37081] [client 4.217.223.152:25662] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aTkZUjB0I62HCw8Z5BTuAQAAABE"]
[Wed Dec 10 14:55:15.697139 2025] [:error] [pid 36976:tid 37016] [client 4.217.223.152:25617] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aTkZUySpHW5KVaY9tJktvwAAAMk"]
[Wed Dec 10 14:55:17.613770 2025] [:error] [pid 36977:tid 37042] [client 4.217.223.152:15495] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aTkZVcc-JLl-uoL-Au5dcAAAAEg"]
[Wed Dec 10 14:55:18.573633 2025] [:error] [pid 36976:tid 37024] [client 4.217.223.152:25653] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aTkZViSpHW5KVaY9tJktxAAAANE"]
[Wed Dec 10 14:55:20.313691 2025] [:error] [pid 37062:tid 37068] [client 4.217.223.152:10536] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTkZWDB0I62HCw8Z5BTuEgAAAAQ"]
[Wed Dec 10 14:55:22.397264 2025] [:error] [pid 36975:tid 36988] [client 4.217.223.152:28240] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTkZWt_ZNQ3zMmb38BEKXgAAAIg"]
[Wed Dec 10 14:55:25.505600 2025] [:error] [pid 36975:tid 36984] [client 4.217.223.152:29361] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTkZXd_ZNQ3zMmb38BEKYwAAAIQ"]
[Wed Dec 10 14:55:26.866054 2025] [:error] [pid 37062:tid 37072] [client 4.217.223.152:10533] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aTkZXjB0I62HCw8Z5BTuHgAAAAg"]
[Wed Dec 10 14:55:28.693464 2025] [:error] [pid 36977:tid 37057] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Wed Dec 10 14:55:28.877099 2025] [:error] [pid 36977:tid 37056] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/disquiet.php
[Wed Dec 10 14:55:29.032148 2025] [:error] [pid 36977:tid 37047] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Wed Dec 10 14:55:29.182632 2025] [:error] [pid 36977:tid 37046] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Dec 10 14:55:29.340898 2025] [:error] [pid 36977:tid 37050] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/parturiency.php
[Wed Dec 10 14:55:29.497402 2025] [:error] [pid 36977:tid 37041] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Wed Dec 10 14:55:29.667156 2025] [:error] [pid 36977:tid 37037] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-729.php
[Wed Dec 10 14:55:29.825433 2025] [:error] [pid 36977:tid 37043] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Wed Dec 10 14:55:29.996770 2025] [:error] [pid 36977:tid 37055] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/pn.php
[Wed Dec 10 14:55:30.170161 2025] [:error] [pid 36977:tid 37035] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Wed Dec 10 14:55:30.322497 2025] [:error] [pid 36977:tid 37048] [client 4.217.223.152:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Dec 10 14:55:31.199029 2025] [:error] [pid 36977:tid 37040] [client 4.217.223.152:8473] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTkZY8c-JLl-uoL-Au5dmAAAAEY"]
[Wed Dec 10 14:55:32.388644 2025] [:error] [pid 36976:tid 37022] [client 4.217.223.152:15493] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTkZZCSpHW5KVaY9tJkt5QAAAM8"]
[Wed Dec 10 14:55:34.600622 2025] [:error] [pid 36975:tid 36997] [client 4.217.223.152:37987] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTkZZt_ZNQ3zMmb38BEKcwAAAJE"]
[Wed Dec 10 14:55:36.393486 2025] [:error] [pid 36975:tid 36984] [client 4.217.223.152:15515] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aTkZaN_ZNQ3zMmb38BEKdQAAAIQ"]
[Wed Dec 10 14:55:38.973693 2025] [:error] [pid 36977:tid 37036] [client 4.217.223.152:8474] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTkZasc-JLl-uoL-Au5drAAAAEI"]
[Wed Dec 10 14:55:40.263788 2025] [:error] [pid 36975:tid 36982] [client 4.217.223.152:36192] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTkZbN_ZNQ3zMmb38BEKegAAAII"]
[Wed Dec 10 14:55:41.981085 2025] [:error] [pid 37062:tid 37088] [client 4.217.223.152:25265] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTkZbTB0I62HCw8Z5BTuVgAAABg"]
[Wed Dec 10 14:55:44.165416 2025] [:error] [pid 37062:tid 37074] [client 4.217.223.152:11445] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aTkZcDB0I62HCw8Z5BTuWgAAAAo"]
[Wed Dec 10 14:55:45.113590 2025] [:error] [pid 37062:tid 37078] [client 4.217.223.152:21136] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z57.php"] [unique_id "aTkZcTB0I62HCw8Z5BTuXQAAAA4"]
[Wed Dec 10 14:55:46.428720 2025] [:error] [pid 36976:tid 37010] [client 4.217.223.152:37969] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z57.php"] [unique_id "aTkZciSpHW5KVaY9tJkt_wAAAMM"]
[Wed Dec 10 14:55:49.083015 2025] [:error] [pid 36977:tid 37038] [client 4.217.223.152:21137] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z57.php"] [unique_id "aTkZdcc-JLl-uoL-Au5duQAAAEQ"]
[Wed Dec 10 14:55:50.079195 2025] [:error] [pid 36975:tid 36990] [client 4.217.223.152:25268] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z57.php"] [unique_id "aTkZdt_ZNQ3zMmb38BEKiAAAAIo"]
[Wed Dec 10 14:55:52.332836 2025] [:error] [pid 36977:tid 37051] [client 4.217.223.152:24786] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTkZeMc-JLl-uoL-Au5dwgAAAFE"]
[Wed Dec 10 14:55:54.678187 2025] [:error] [pid 37062:tid 37065] [client 4.217.223.152:25232] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTkZejB0I62HCw8Z5BTudgAAAAE"]
[Wed Dec 10 14:56:01.145098 2025] [:error] [pid 36977:tid 37045] [client 4.217.223.152:34490] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTkZgcc-JLl-uoL-Au5d4AAAAEs"]
[Wed Dec 10 14:56:02.806014 2025] [:error] [pid 36975:tid 36980] [client 4.217.223.152:24800] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an.php"] [unique_id "aTkZgt_ZNQ3zMmb38BEKqQAAAIA"]
[Wed Dec 10 14:56:05.733379 2025] [:error] [pid 36977:tid 37054] [client 4.217.223.152:24779] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aTkZhcc-JLl-uoL-Au5d7wAAAFQ"]
[Wed Dec 10 14:56:08.231107 2025] [:error] [pid 37062:tid 37064] [client 4.217.223.152:26180] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aTkZiDB0I62HCw8Z5BTusgAAAAA"]
[Wed Dec 10 14:56:11.145178 2025] [:error] [pid 36977:tid 37045] [client 4.217.223.152:42858] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aTkZi8c-JLl-uoL-Au5d-wAAAEs"]
[Wed Dec 10 14:56:15.842969 2025] [:error] [pid 36976:tid 37027] [client 4.217.223.152:26222] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-64wscx6shd.php"] [unique_id "aTkZjySpHW5KVaY9tJkuOgAAANQ"]
[Wed Dec 10 14:56:17.681828 2025] [:error] [pid 36975:tid 36981] [client 4.217.223.152:36127] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aTkZkd_ZNQ3zMmb38BEKvgAAAIE"]
[Wed Dec 10 14:56:19.573646 2025] [:error] [pid 36976:tid 37020] [client 4.217.223.152:20778] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aTkZkySpHW5KVaY9tJkuWwAAAM0"]
[Wed Dec 10 14:56:21.679815 2025] [:error] [pid 36975:tid 37004] [client 4.217.223.152:8615] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aTkZld_ZNQ3zMmb38BEKyQAAAJg"]
[Wed Dec 10 14:56:23.032695 2025] [:error] [pid 36975:tid 36980] [client 4.217.223.152:9958] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-home.php"] [unique_id "aTkZl9_ZNQ3zMmb38BEKzQAAAIA"]
[Wed Dec 10 14:56:26.401459 2025] [:error] [pid 36977:tid 37046] [client 4.217.223.152:8635] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aTkZmsc-JLl-uoL-Au5eNAAAAEw"]
[Wed Dec 10 14:56:28.851382 2025] [:error] [pid 36975:tid 36980] [client 4.217.223.152:18592] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aTkZnN_ZNQ3zMmb38BEK0wAAAIA"]
[Wed Dec 10 14:56:30.938369 2025] [:error] [pid 36977:tid 37042] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Wed Dec 10 14:56:31.100824 2025] [:error] [pid 36977:tid 37046] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/khgdl.php
[Wed Dec 10 14:56:31.585379 2025] [:error] [pid 36977:tid 37050] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Wed Dec 10 14:56:31.759990 2025] [:error] [pid 36977:tid 37034] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/asciferous.php
[Wed Dec 10 14:56:31.991460 2025] [:error] [pid 36977:tid 37044] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Wed Dec 10 14:56:32.166931 2025] [:error] [pid 36977:tid 37056] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/f8moue.php
[Wed Dec 10 14:56:32.328162 2025] [:error] [pid 36977:tid 37043] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/fishmen.php
[Wed Dec 10 14:56:32.489178 2025] [:error] [pid 36977:tid 37048] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Wed Dec 10 14:56:32.682242 2025] [:error] [pid 36977:tid 37049] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/coenoecic.php
[Wed Dec 10 14:56:32.842408 2025] [:error] [pid 36977:tid 37052] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Wed Dec 10 14:56:33.003611 2025] [:error] [pid 36977:tid 37054] [client 4.217.223.152:36096] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-securitiy.php
[Wed Dec 10 14:56:33.161614 2025] [:error] [pid 36977:tid 37036] [client 4.217.223.152:36096] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aTkZocc-JLl-uoL-Au5eUAAAAEI"]
[Wed Dec 10 14:56:34.329958 2025] [:error] [pid 36976:tid 37023] [client 4.217.223.152:8628] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aTkZoiSpHW5KVaY9tJkuogAAANA"]
[Wed Dec 10 14:56:36.829390 2025] [:error] [pid 36977:tid 37056] [client 4.217.223.152:38586] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aTkZpMc-JLl-uoL-Au5eVAAAAFY"]
[Wed Dec 10 14:56:38.370651 2025] [:error] [pid 37062:tid 37065] [client 4.217.223.152:19433] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aTkZpjB0I62HCw8Z5BTvAgAAAAE"]
[Wed Dec 10 14:56:40.776710 2025] [:error] [pid 36976:tid 37027] [client 4.217.223.152:56255] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aTkZqCSpHW5KVaY9tJkuqQAAANQ"]
[Wed Dec 10 14:56:42.822136 2025] [:error] [pid 37062:tid 37076] [client 4.217.223.152:18920] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aTkZqjB0I62HCw8Z5BTvEAAAAAw"]
[Wed Dec 10 14:56:46.255314 2025] [:error] [pid 36977:tid 37043] [client 4.217.223.152:8375] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aTkZrsc-JLl-uoL-Au5eWwAAAEk"]
[Wed Dec 10 14:56:49.804182 2025] [:error] [pid 36977:tid 37050] [client 4.217.223.152:18695] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aTkZscc-JLl-uoL-Au5eZQAAAFA"]
[Wed Dec 10 14:56:57.687633 2025] [:error] [pid 37062:tid 37068] [client 4.217.223.152:8321] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aTkZuTB0I62HCw8Z5BTvKwAAAAQ"]
[Wed Dec 10 14:57:00.492824 2025] [:error] [pid 36977:tid 37052] [client 4.217.223.152:37933] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aTkZvMc-JLl-uoL-Au5edAAAAFI"]
[Wed Dec 10 14:57:01.486451 2025] [:error] [pid 36975:tid 36997] [client 4.217.223.152:9116] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aTkZvd_ZNQ3zMmb38BEK5wAAAJE"]
[Wed Dec 10 14:57:04.238655 2025] [:error] [pid 37062:tid 37084] [client 4.217.223.152:9102] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unbalanceable.php"] [unique_id "aTkZwDB0I62HCw8Z5BTvOQAAABQ"]
[Wed Dec 10 14:57:05.735275 2025] [:error] [pid 36975:tid 36998] [client 4.217.223.152:11339] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/obfuscous.php"] [unique_id "aTkZwd_ZNQ3zMmb38BEK7wAAAJI"]
[Wed Dec 10 14:57:08.056647 2025] [:error] [pid 37062:tid 37081] [client 4.217.223.152:11266] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/obfuscous.php"] [unique_id "aTkZxDB0I62HCw8Z5BTvPQAAABE"]
[Wed Dec 10 14:57:12.807922 2025] [:error] [pid 36977:tid 37057] [client 4.217.223.152:31961] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/obfuscous.php"] [unique_id "aTkZyMc-JLl-uoL-Au5egAAAAFc"]
[Wed Dec 10 14:57:14.576650 2025] [:error] [pid 36977:tid 37036] [client 4.217.223.152:9204] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/obfuscous.php"] [unique_id "aTkZysc-JLl-uoL-Au5ehQAAAEI"]
[Wed Dec 10 14:57:22.849310 2025] [:error] [pid 36975:tid 36986] [client 4.217.223.152:50110] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phrensying.php"] [unique_id "aTkZ0t_ZNQ3zMmb38BELEAAAAIY"]
[Wed Dec 10 14:57:25.726207 2025] [:error] [pid 36977:tid 37049] [client 4.217.223.152:8391] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phrensying.php"] [unique_id "aTkZ1cc-JLl-uoL-Au5eqgAAAE8"]
[Wed Dec 10 14:57:28.525207 2025] [:error] [pid 36977:tid 37057] [client 4.217.223.152:8285] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phrensying.php"] [unique_id "aTkZ2Mc-JLl-uoL-Au5esAAAAFc"]
[Wed Dec 10 14:57:31.435692 2025] [:error] [pid 37062:tid 37085] [client 4.217.223.152:34524] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unprecipitously.php"] [unique_id "aTkZ2zB0I62HCw8Z5BTvdgAAABU"]
[Wed Dec 10 14:57:34.027665 2025] [:error] [pid 37062:tid 37071] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/unprecipitously.php
[Wed Dec 10 14:57:34.373712 2025] [:error] [pid 37062:tid 37078] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/pyrometry.php
[Wed Dec 10 14:57:34.525097 2025] [:error] [pid 37062:tid 37066] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Wed Dec 10 14:57:34.675191 2025] [:error] [pid 37062:tid 37067] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Dec 10 14:57:34.825245 2025] [:error] [pid 37062:tid 37079] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/oitava.php
[Wed Dec 10 14:57:35.011289 2025] [:error] [pid 37062:tid 37064] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Wed Dec 10 14:57:35.174019 2025] [:error] [pid 37062:tid 37082] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ac.php
[Wed Dec 10 14:57:35.347897 2025] [:error] [pid 37062:tid 37069] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Wed Dec 10 14:57:35.806496 2025] [:error] [pid 37062:tid 37065] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/bn.php
[Wed Dec 10 14:57:36.441791 2025] [:error] [pid 37062:tid 37068] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Wed Dec 10 14:57:37.286515 2025] [:error] [pid 37062:tid 37086] [client 4.217.223.152:24308] File does not exist: /usr/local/apache/htdocs/suspended-page/edd.php
[Wed Dec 10 14:57:37.435343 2025] [:error] [pid 37062:tid 37087] [client 4.217.223.152:24308] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "aTkZ4TB0I62HCw8Z5BTvkwAAABc"]
[Wed Dec 10 14:57:39.680113 2025] [:error] [pid 36975:tid 36995] [client 4.217.223.152:50313] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "aTkZ49_ZNQ3zMmb38BELNAAAAI8"]
[Wed Dec 10 14:57:41.876670 2025] [:error] [pid 36976:tid 37019] [client 4.217.223.152:33064] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "aTkZ5SSpHW5KVaY9tJku-QAAAMw"]
[Wed Dec 10 14:57:44.561865 2025] [:error] [pid 36977:tid 37056] [client 4.217.223.152:33086] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "aTkZ6Mc-JLl-uoL-Au5exwAAAFY"]
[Wed Dec 10 14:57:45.856262 2025] [:error] [pid 37062:tid 37076] [client 4.217.223.152:44241] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aTkZ6TB0I62HCw8Z5BTvqwAAAAw"]
[Wed Dec 10 14:57:49.217374 2025] [:error] [pid 36977:tid 37047] [client 4.217.223.152:10613] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aTkZ7cc-JLl-uoL-Au5e2AAAAE0"]
[Wed Dec 10 14:57:51.827229 2025] [:error] [pid 36976:tid 37031] [client 4.217.223.152:22732] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aTkZ7ySpHW5KVaY9tJku_QAAANg"]
[Wed Dec 10 14:57:52.977070 2025] [:error] [pid 37062:tid 37065] [client 4.217.223.152:44282] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aTkZ8DB0I62HCw8Z5BTvrwAAAAE"]
[Wed Dec 10 14:57:54.522465 2025] [:error] [pid 36977:tid 37040] [client 4.217.223.152:33073] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kdrex.php"] [unique_id "aTkZ8sc-JLl-uoL-Au5e4gAAAEY"]
[Wed Dec 10 14:57:55.631129 2025] [:error] [pid 37062:tid 37076] [client 4.217.223.152:22738] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kdrex.php"] [unique_id "aTkZ8zB0I62HCw8Z5BTvtAAAAAw"]
[Wed Dec 10 14:57:56.925718 2025] [:error] [pid 37062:tid 37066] [client 4.217.223.152:44254] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kdrex.php"] [unique_id "aTkZ9DB0I62HCw8Z5BTvuQAAAAI"]
[Wed Dec 10 14:57:58.007174 2025] [:error] [pid 36976:tid 37014] [client 4.217.223.152:33028] [client 4.217.223.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kdrex.php"] [unique_id "aTkZ9iSpHW5KVaY9tJkvBAAAAMc"]
[Wed Dec 10 17:52:11.781659 2025] [:error] [pid 36975:tid 37000] [client 35.203.133.253:50442] [client 35.203.133.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.203.133.253, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTlCy9_ZNQ3zMmb38BFHeQAAAJQ"]
[Wed Dec 10 17:52:11.785695 2025] [:error] [pid 36975:tid 37000] [client 35.203.133.253:50442] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 10 17:52:13.808168 2025] [:error] [pid 36975:tid 36985] [client 35.203.133.253:50442] [client 35.203.133.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTlCzd_ZNQ3zMmb38BFHhwAAAIU"]
[Wed Dec 10 17:52:14.180137 2025] [:error] [pid 37062:tid 37072] [client 35.203.133.253:51069] [client 35.203.133.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTlCzjB0I62HCw8Z5BQ1VwAAAAg"]
[Wed Dec 10 17:52:14.554231 2025] [:error] [pid 36976:tid 37012] [client 35.203.133.253:51140] [client 35.203.133.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTlCziSpHW5KVaY9tJl5KwAAAMU"]
[Wed Dec 10 17:52:14.905196 2025] [:error] [pid 36976:tid 37019] [client 35.203.133.253:51231] [client 35.203.133.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTlCziSpHW5KVaY9tJl5LAAAAMw"]
[Wed Dec 10 17:52:15.256183 2025] [:error] [pid 37062:tid 37082] [client 35.203.133.253:51311] [client 35.203.133.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTlCzzB0I62HCw8Z5BQ1WgAAABI"]
[Wed Dec 10 17:52:15.607349 2025] [:error] [pid 46868:tid 46890] [client 35.203.133.253:51407] [client 35.203.133.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTlCz43NdlN2GOOyBjFVAQAAARQ"]
[Wed Dec 10 17:52:15.957431 2025] [:error] [pid 46868:tid 46873] [client 35.203.133.253:51511] [client 35.203.133.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTlCz43NdlN2GOOyBjFVAgAAAQM"]
[Wed Dec 10 22:58:16.220072 2025] [:error] [pid 37062:tid 37075] [client 111.172.249.49:36883] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTmKiDB0I62HCw8Z5BSArQAAAAs"]
[Thu Dec 11 02:23:08.996769 2025] [:error] [pid 10520:tid 10527] [client 131.255.21.123:7728] [client 131.255.21.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.255.21.123, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTm6jENrVZZksrD9M7EqVwAAAQU"]
[Thu Dec 11 02:23:09.002170 2025] [:error] [pid 10520:tid 10527] [client 131.255.21.123:7728] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 11 05:53:37.043686 2025] [:error] [pid 57991:tid 58025] [client 216.24.219.202:36547] [client 216.24.219.202] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.219.202, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aTnr4aPyGmNXA2ZsETbo2gAAAEM"]
[Thu Dec 11 05:53:37.049075 2025] [:error] [pid 57991:tid 58025] [client 216.24.219.202:36547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Dec 11 11:37:31.871018 2025] [:error] [pid 57990:tid 58005] [client 150.109.119.38:54418] [client 150.109.119.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTo8ewqZT_dc36fQdXEGEAAAAAo"]
[Thu Dec 11 17:09:54.128468 2025] [:error] [pid 27459:tid 27477] [client 221.229.106.25:58930] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTqKYlhPEXihPBKMpRMnaAAAARA"]
[Thu Dec 11 17:33:55.680658 2025] [:error] [pid 57992:tid 58066] [client 43.157.95.131:41174] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTqQA-Ueau0BMFF2vHmJqwAAAJE"]
[Thu Dec 11 18:59:31.776127 2025] [:error] [pid 58099:tid 58101] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Dec 11 18:59:31.983091 2025] [:error] [pid 58099:tid 58124] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Dec 11 18:59:33.512439 2025] [:error] [pid 58099:tid 58124] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Dec 11 18:59:33.722240 2025] [:error] [pid 58099:tid 58114] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 11 18:59:33.937512 2025] [:error] [pid 58099:tid 58106] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Dec 11 18:59:34.145361 2025] [:error] [pid 58099:tid 58117] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Dec 11 18:59:34.352811 2025] [:error] [pid 58099:tid 58111] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Dec 11 18:59:34.560977 2025] [:error] [pid 58099:tid 58115] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 11 18:59:34.985567 2025] [:error] [pid 58099:tid 58112] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Dec 11 18:59:35.400434 2025] [:error] [pid 58099:tid 58121] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Dec 11 18:59:35.606563 2025] [:error] [pid 58099:tid 58125] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Dec 11 18:59:35.818854 2025] [:error] [pid 58099:tid 58101] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Dec 11 18:59:36.035974 2025] [:error] [pid 58099:tid 58102] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Dec 11 18:59:36.243588 2025] [:error] [pid 58099:tid 58119] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Dec 11 18:59:36.451833 2025] [:error] [pid 58099:tid 58109] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Dec 11 18:59:36.657759 2025] [:error] [pid 58099:tid 58106] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Dec 11 18:59:36.864774 2025] [:error] [pid 58099:tid 58116] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Dec 11 18:59:37.070614 2025] [:error] [pid 58099:tid 58107] [client 89.187.182.174:55420] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 11 18:59:39.990412 2025] [:error] [pid 58099:tid 58117] [client 89.187.182.174:55420] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aTqkG8KZVSF_bdPFqRj_lwAAANA"]
[Thu Dec 11 18:59:41.012065 2025] [:error] [pid 57991:tid 58046] [client 89.187.182.174:55428] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aTqkHaPyGmNXA2ZsETadugAAAFg"]
[Thu Dec 11 18:59:42.091224 2025] [:error] [pid 58099:tid 58112] [client 89.187.182.174:39878] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Dec 11 18:59:42.712829 2025] [:error] [pid 58099:tid 58121] [client 89.187.182.174:39878] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aTqkHsKZVSF_bdPFqRj_nwAAANQ"]
[Thu Dec 11 18:59:43.542624 2025] [:error] [pid 35112:tid 35115] [client 89.187.182.174:39884] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Dec 11 18:59:43.747673 2025] [:error] [pid 35112:tid 35134] [client 89.187.182.174:39884] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aTqkH59ZpQ0WIeJhsJdWcQAAAVQ"]
[Thu Dec 11 18:59:44.360363 2025] [:error] [pid 48261:tid 48288] [client 89.187.182.174:39892] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Dec 11 18:59:45.380591 2025] [:error] [pid 48261:tid 48286] [client 89.187.182.174:39892] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aTqkIeyPI4WU-4JmiQOrhQAAAZY"]
[Thu Dec 11 18:59:45.984193 2025] [:error] [pid 35112:tid 35117] [client 89.187.182.174:39896] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aTqkIZ9ZpQ0WIeJhsJdWdwAAAUM"]
[Thu Dec 11 18:59:46.383655 2025] [:error] [pid 58814:tid 58821] [client 89.187.182.174:39906] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aTqkItiz0l9AD_3pkMwPogAAAcU"]
[Thu Dec 11 18:59:46.788197 2025] [:error] [pid 27459:tid 27465] [client 89.187.182.174:39916] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aTqkIlhPEXihPBKMpRNF-AAAAQQ"]
[Thu Dec 11 18:59:47.193460 2025] [:error] [pid 57992:tid 58058] [client 89.187.182.174:39928] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aTqkI-Ueau0BMFF2vHme3QAAAIk"]
[Thu Dec 11 18:59:47.603661 2025] [:error] [pid 57992:tid 58067] [client 89.187.182.174:39940] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aTqkI-Ueau0BMFF2vHme4QAAAJI"]
[Thu Dec 11 18:59:48.224744 2025] [:error] [pid 58814:tid 58826] [client 89.187.182.174:39946] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aTqkJNiz0l9AD_3pkMwPpwAAAco"]
[Thu Dec 11 18:59:48.633631 2025] [:error] [pid 58099:tid 58115] [client 89.187.182.174:39962] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Dec 11 18:59:49.043186 2025] [:error] [pid 58099:tid 58123] [client 89.187.182.174:39962] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aTqkJcKZVSF_bdPFqRj_pgAAANY"]
[Thu Dec 11 18:59:49.852993 2025] [:error] [pid 48261:tid 48276] [client 89.187.182.174:39966] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aTqkJeyPI4WU-4JmiQOriwAAAYw"]
[Thu Dec 11 18:59:50.464678 2025] [:error] [pid 48261:tid 48274] [client 89.187.182.174:39972] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aTqkJuyPI4WU-4JmiQOrjwAAAYo"]
[Thu Dec 11 18:59:50.875677 2025] [:error] [pid 48261:tid 48265] [client 89.187.182.174:39974] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Dec 11 18:59:51.078417 2025] [:error] [pid 48261:tid 48284] [client 89.187.182.174:39974] [client 89.187.182.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aTqkJ-yPI4WU-4JmiQOrkgAAAZQ"]
[Thu Dec 11 18:59:51.493468 2025] [:error] [pid 35112:tid 35120] [client 89.187.182.174:55414] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Dec 11 18:59:57.296169 2025] [:error] [pid 48261:tid 48281] [client 195.242.212.150:55430] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Dec 11 18:59:57.902805 2025] [:error] [pid 48261:tid 48273] [client 195.242.212.150:55430] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aTqkLeyPI4WU-4JmiQOroQAAAYk"]
[Thu Dec 11 18:59:58.286235 2025] [:error] [pid 58814:tid 58840] [client 195.242.212.150:55434] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Dec 11 18:59:58.476305 2025] [:error] [pid 58814:tid 58829] [client 195.242.212.150:55434] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aTqkLtiz0l9AD_3pkMwPsAAAAc0"]
[Thu Dec 11 18:59:58.860029 2025] [:error] [pid 58099:tid 58106] [client 195.242.212.150:55440] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Dec 11 18:59:59.253902 2025] [:error] [pid 58099:tid 58103] [client 195.242.212.150:55440] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aTqkL8KZVSF_bdPFqRj_tgAAAMI"]
[Thu Dec 11 18:59:59.835460 2025] [:error] [pid 48261:tid 48277] [client 195.242.212.150:55444] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aTqkL-yPI4WU-4JmiQOrpAAAAY0"]
[Thu Dec 11 19:00:00.443710 2025] [:error] [pid 48261:tid 48288] [client 195.242.212.150:55452] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Dec 11 19:00:00.639320 2025] [:error] [pid 48261:tid 48265] [client 195.242.212.150:55452] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Dec 11 19:00:01.024179 2025] [:error] [pid 48261:tid 48285] [client 195.242.212.150:55452] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aTqkMeyPI4WU-4JmiQOrqwAAAZU"]
[Thu Dec 11 19:00:01.609902 2025] [:error] [pid 35112:tid 35114] [client 195.242.212.150:60596] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aTqkMZ9ZpQ0WIeJhsJdWhAAAAUA"]
[Thu Dec 11 19:00:03.898723 2025] [:error] [pid 58099:tid 58116] [client 195.242.212.150:60612] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aTqkM8KZVSF_bdPFqRj_wQAAAM8"]
[Thu Dec 11 19:00:04.278304 2025] [:error] [pid 58814:tid 58832] [client 195.242.212.150:60628] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aTqkNNiz0l9AD_3pkMwPtAAAAdA"]
[Thu Dec 11 19:00:04.652961 2025] [:error] [pid 35112:tid 35130] [client 195.242.212.150:60642] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aTqkNJ9ZpQ0WIeJhsJdWhgAAAVA"]
[Thu Dec 11 19:00:05.417268 2025] [:error] [pid 57990:tid 58010] [client 195.242.212.150:60658] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Dec 11 19:00:05.608879 2025] [:error] [pid 57990:tid 58006] [client 195.242.212.150:60658] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aTqkNQqZT_dc36fQdXFwmQAAAAs"]
[Thu Dec 11 19:00:05.998606 2025] [:error] [pid 57990:tid 58011] [client 195.242.212.150:60660] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aTqkNQqZT_dc36fQdXFwmgAAABA"]
[Thu Dec 11 19:00:06.404137 2025] [:error] [pid 57990:tid 58014] [client 195.242.212.150:60662] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aTqkNgqZT_dc36fQdXFwnQAAABM"]
[Thu Dec 11 19:00:07.191239 2025] [:error] [pid 57990:tid 58004] [client 195.242.212.150:60668] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Dec 11 19:00:07.586869 2025] [:error] [pid 57990:tid 58008] [client 195.242.212.150:60668] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Dec 11 19:00:08.375310 2025] [:error] [pid 57990:tid 58002] [client 195.242.212.150:60668] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aTqkOAqZT_dc36fQdXFwqQAAAAc"]
[Thu Dec 11 19:00:09.440133 2025] [:error] [pid 57992:tid 58061] [client 195.242.212.150:60680] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aTqkOeUeau0BMFF2vHme-gAAAIw"]
[Thu Dec 11 19:00:09.657993 2025] [:error] [pid 57992:tid 58054] [client 195.242.212.150:60680] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Dec 11 19:00:10.672481 2025] [:error] [pid 57992:tid 58055] [client 195.242.212.150:60680] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Dec 11 19:00:10.872072 2025] [:error] [pid 57992:tid 58056] [client 195.242.212.150:60680] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Dec 11 19:00:11.883515 2025] [:error] [pid 57992:tid 58059] [client 195.242.212.150:60680] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aTqkO-Ueau0BMFF2vHmfBgAAAIo"]
[Thu Dec 11 19:00:12.530397 2025] [:error] [pid 48261:tid 48269] [client 195.242.212.150:58430] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Dec 11 19:00:12.739478 2025] [:error] [pid 48261:tid 48270] [client 195.242.212.150:58430] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aTqkPOyPI4WU-4JmiQOruwAAAYY"]
[Thu Dec 11 19:00:13.152356 2025] [:error] [pid 48261:tid 48287] [client 195.242.212.150:58430] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aTqkPeyPI4WU-4JmiQOrvQAAAZc"]
[Thu Dec 11 19:00:14.414779 2025] [:error] [pid 48261:tid 48284] [client 195.242.212.150:58432] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Dec 11 19:00:14.831050 2025] [:error] [pid 48261:tid 48285] [client 195.242.212.150:58432] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Dec 11 19:00:15.238662 2025] [:error] [pid 48261:tid 48267] [client 195.242.212.150:58432] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aTqkP-yPI4WU-4JmiQOrzAAAAYM"]
[Thu Dec 11 19:00:15.646538 2025] [:error] [pid 27459:tid 27472] [client 195.242.212.150:58440] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Dec 11 19:00:16.276225 2025] [:error] [pid 27459:tid 27478] [client 195.242.212.150:58440] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Dec 11 19:00:16.696406 2025] [:error] [pid 27459:tid 27474] [client 195.242.212.150:58440] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Dec 11 19:00:17.109728 2025] [:error] [pid 27459:tid 27481] [client 195.242.212.150:58440] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Dec 11 19:00:17.319478 2025] [:error] [pid 27459:tid 27470] [client 195.242.212.150:58440] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aTqkQVhPEXihPBKMpRNGGwAAAQk"]
[Thu Dec 11 19:00:17.713818 2025] [:error] [pid 48261:tid 48275] [client 195.242.212.150:58442] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Dec 11 19:00:17.923079 2025] [:error] [pid 48261:tid 48277] [client 195.242.212.150:58442] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Dec 11 19:00:18.134117 2025] [:error] [pid 48261:tid 48264] [client 195.242.212.150:58442] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aTqkQuyPI4WU-4JmiQOr0AAAAYA"]
[Thu Dec 11 19:00:18.741630 2025] [:error] [pid 58814:tid 58828] [client 195.242.212.150:58458] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Dec 11 19:00:19.152865 2025] [:error] [pid 58814:tid 58816] [client 195.242.212.150:58458] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aTqkQ9iz0l9AD_3pkMwPywAAAcA"]
[Thu Dec 11 19:00:19.369527 2025] [:error] [pid 58814:tid 58826] [client 195.242.212.150:58458] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aTqkQ9iz0l9AD_3pkMwPzQAAAco"]
[Thu Dec 11 19:00:21.858237 2025] [:error] [pid 58099:tid 58102] [client 195.242.212.150:58460] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Dec 11 19:00:23.098692 2025] [:error] [pid 58099:tid 58107] [client 195.242.212.150:58460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Dec 11 19:00:23.305636 2025] [:error] [pid 58099:tid 58116] [client 195.242.212.150:58460] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aTqkR8KZVSF_bdPFqRj_5QAAAM8"]
[Thu Dec 11 19:00:23.713420 2025] [:error] [pid 58814:tid 58821] [client 195.242.212.150:58652] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Dec 11 19:00:24.332339 2025] [:error] [pid 58814:tid 58829] [client 195.242.212.150:58652] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aTqkSNiz0l9AD_3pkMwP1wAAAc0"]
[Thu Dec 11 19:00:24.562373 2025] [:error] [pid 58814:tid 58820] [client 195.242.212.150:58652] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Dec 11 19:00:24.785451 2025] [:error] [pid 58814:tid 58823] [client 195.242.212.150:58652] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Dec 11 19:00:25.017058 2025] [:error] [pid 58814:tid 58826] [client 195.242.212.150:58652] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Dec 11 19:00:25.233349 2025] [:error] [pid 58814:tid 58838] [client 195.242.212.150:58652] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aTqkSdiz0l9AD_3pkMwP3gAAAdY"]
[Thu Dec 11 19:00:25.671756 2025] [:error] [pid 57991:tid 58036] [client 195.242.212.150:58668] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Dec 11 19:00:25.877988 2025] [:error] [pid 57991:tid 58034] [client 195.242.212.150:58668] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aTqkSaPyGmNXA2ZsETad2AAAAEw"]
[Thu Dec 11 19:00:26.475881 2025] [:error] [pid 27459:tid 27475] [client 195.242.212.150:58670] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Dec 11 19:00:26.679960 2025] [:error] [pid 27459:tid 27463] [client 195.242.212.150:58670] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aTqkSlhPEXihPBKMpRNGKgAAAQI"]
[Thu Dec 11 19:00:27.513293 2025] [:error] [pid 27459:tid 27468] [client 195.242.212.150:58682] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Dec 11 19:00:27.713324 2025] [:error] [pid 27459:tid 27478] [client 195.242.212.150:58682] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aTqkS1hPEXihPBKMpRNGLwAAARE"]
[Thu Dec 11 19:00:28.109478 2025] [:error] [pid 57992:tid 58056] [client 195.242.212.150:58688] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aTqkTOUeau0BMFF2vHmfEAAAAIc"]
[Thu Dec 11 19:00:28.528517 2025] [:error] [pid 48261:tid 48266] [client 195.242.212.150:58692] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Dec 11 19:00:28.747468 2025] [:error] [pid 48261:tid 48280] [client 195.242.212.150:58692] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Dec 11 19:00:30.948062 2025] [:error] [pid 48261:tid 48278] [client 195.242.212.150:58692] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aTqkTuyPI4WU-4JmiQOr7AAAAY4"]
[Thu Dec 11 19:00:31.578628 2025] [:error] [pid 27459:tid 27484] [client 195.242.212.150:42274] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aTqkT1hPEXihPBKMpRNGMgAAARc"]
[Thu Dec 11 19:00:32.607087 2025] [:error] [pid 58814:tid 58837] [client 195.242.212.150:42284] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aTqkUNiz0l9AD_3pkMwP6AAAAdU"]
[Thu Dec 11 19:00:33.029092 2025] [:error] [pid 48261:tid 48280] [client 195.242.212.150:42294] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Dec 11 19:00:33.444752 2025] [:error] [pid 48261:tid 48288] [client 195.242.212.150:42294] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Dec 11 19:00:33.651785 2025] [:error] [pid 48261:tid 48283] [client 195.242.212.150:42294] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aTqkUeyPI4WU-4JmiQOr8wAAAZM"]
[Thu Dec 11 19:00:34.082084 2025] [:error] [pid 57991:tid 58038] [client 195.242.212.150:42304] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Dec 11 19:00:34.494496 2025] [:error] [pid 57991:tid 58034] [client 195.242.212.150:42304] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aTqkUqPyGmNXA2ZsETad6AAAAEw"]
[Thu Dec 11 19:00:35.511175 2025] [:error] [pid 57991:tid 58041] [client 195.242.212.150:42312] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aTqkU6PyGmNXA2ZsETad7AAAAFM"]
[Thu Dec 11 19:00:36.148116 2025] [:error] [pid 58099:tid 58117] [client 195.242.212.150:42314] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Dec 11 19:00:36.781484 2025] [:error] [pid 58099:tid 58121] [client 195.242.212.150:42314] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Dec 11 19:00:37.192944 2025] [:error] [pid 58099:tid 58107] [client 195.242.212.150:42314] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Dec 11 19:00:37.397302 2025] [:error] [pid 58099:tid 58101] [client 195.242.212.150:42314] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aTqkVcKZVSF_bdPFqRj__gAAAMA"]
[Thu Dec 11 19:00:37.806075 2025] [:error] [pid 57991:tid 58042] [client 195.242.212.150:42316] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aTqkVaPyGmNXA2ZsETad7wAAAFQ"]
[Thu Dec 11 19:00:38.197664 2025] [:error] [pid 27459:tid 27472] [client 195.242.212.150:42322] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aTqkVlhPEXihPBKMpRNGNQAAAQs"]
[Thu Dec 11 19:00:38.594099 2025] [:error] [pid 57991:tid 58044] [client 195.242.212.150:42334] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aTqkVqPyGmNXA2ZsETad8AAAAFY"]
[Thu Dec 11 19:00:38.994723 2025] [:error] [pid 27459:tid 27473] [client 195.242.212.150:42350] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Dec 11 19:00:39.191851 2025] [:error] [pid 27459:tid 27474] [client 195.242.212.150:42350] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aTqkV1hPEXihPBKMpRNGNwAAAQ0"]
[Thu Dec 11 19:00:39.609330 2025] [:error] [pid 27459:tid 27470] [client 195.242.212.150:42362] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aTqkV1hPEXihPBKMpRNGOQAAAQk"]
[Thu Dec 11 19:00:40.032526 2025] [:error] [pid 57991:tid 58038] [client 195.242.212.150:42368] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Dec 11 19:00:40.446889 2025] [:error] [pid 57991:tid 58039] [client 195.242.212.150:42368] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aTqkWKPyGmNXA2ZsETad9AAAAFE"]
[Thu Dec 11 19:00:40.850807 2025] [:error] [pid 58814:tid 58839] [client 195.242.212.150:42384] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aTqkWNiz0l9AD_3pkMwP9QAAAdc"]
[Thu Dec 11 19:00:41.264219 2025] [:error] [pid 57992:tid 58065] [client 195.242.212.150:42270] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aTqkWeUeau0BMFF2vHmfGgAAAJA"]
[Thu Dec 11 19:00:41.692757 2025] [:error] [pid 35112:tid 35120] [client 195.242.212.150:42272] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aTqkWZ9ZpQ0WIeJhsJdWpAAAAUY"]
[Thu Dec 11 19:00:42.297502 2025] [:error] [pid 48261:tid 48276] [client 195.242.212.150:42282] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aTqkWuyPI4WU-4JmiQOsAQAAAYw"]
[Thu Dec 11 19:00:43.109815 2025] [:error] [pid 58099:tid 58109] [client 195.242.212.150:42286] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aTqkW8KZVSF_bdPFqRgABQAAAMg"]
[Thu Dec 11 19:00:43.514889 2025] [:error] [pid 27459:tid 27485] [client 195.242.212.150:42294] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Dec 11 19:00:44.115064 2025] [:error] [pid 27459:tid 27468] [client 195.242.212.150:42294] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Dec 11 19:00:44.314677 2025] [:error] [pid 27459:tid 27471] [client 195.242.212.150:42294] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aTqkXFhPEXihPBKMpRNGQwAAAQo"]
[Thu Dec 11 19:00:44.929114 2025] [:error] [pid 48261:tid 48266] [client 195.242.212.150:42310] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Dec 11 19:00:45.128678 2025] [:error] [pid 48261:tid 48271] [client 195.242.212.150:42310] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Dec 11 19:00:46.155381 2025] [:error] [pid 48261:tid 48265] [client 195.242.212.150:42310] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aTqkXuyPI4WU-4JmiQOsDAAAAYE"]
[Thu Dec 11 19:00:47.202612 2025] [:error] [pid 57991:tid 58046] [client 195.242.212.150:42314] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aTqkX6PyGmNXA2ZsETad_QAAAFg"]
[Thu Dec 11 19:00:47.621351 2025] [:error] [pid 48261:tid 48288] [client 195.242.212.150:42328] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aTqkX-yPI4WU-4JmiQOsDQAAAZg"]
[Thu Dec 11 19:00:48.821875 2025] [:error] [pid 58814:tid 58835] [client 195.242.212.150:42338] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aTqkYNiz0l9AD_3pkMwP_gAAAdM"]
[Thu Dec 11 19:00:49.903032 2025] [:error] [pid 58814:tid 58840] [client 195.242.212.150:42346] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Dec 11 19:00:50.111300 2025] [:error] [pid 58814:tid 58828] [client 195.242.212.150:42346] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Dec 11 19:00:50.319799 2025] [:error] [pid 58814:tid 58816] [client 195.242.212.150:42346] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Dec 11 19:00:50.538191 2025] [:error] [pid 58814:tid 58839] [client 195.242.212.150:42346] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Dec 11 19:00:51.561255 2025] [:error] [pid 58814:tid 58824] [client 195.242.212.150:42346] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aTqkY9iz0l9AD_3pkMwQHwAAAcg"]
[Thu Dec 11 19:00:51.969489 2025] [:error] [pid 57990:tid 58015] [client 195.242.212.150:53720] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aTqkYwqZT_dc36fQdXFwwAAAABQ"]
[Thu Dec 11 19:00:52.378470 2025] [:error] [pid 57990:tid 58010] [client 195.242.212.150:53726] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aTqkZAqZT_dc36fQdXFwwgAAAA8"]
[Thu Dec 11 19:00:52.766780 2025] [:error] [pid 57992:tid 58067] [client 195.242.212.150:53734] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aTqkZOUeau0BMFF2vHmfOQAAAJI"]
[Thu Dec 11 19:00:53.178870 2025] [:error] [pid 35112:tid 35126] [client 195.242.212.150:53740] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aTqkZZ9ZpQ0WIeJhsJdW5wAAAUw"]
[Thu Dec 11 19:00:53.610025 2025] [:error] [pid 57991:tid 58032] [client 195.242.212.150:53748] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aTqkZaPyGmNXA2ZsETaeAwAAAEo"]
[Thu Dec 11 19:00:54.225709 2025] [:error] [pid 58099:tid 58124] [client 195.242.212.150:53760] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aTqkZsKZVSF_bdPFqRgADAAAANc"]
[Thu Dec 11 19:00:54.646431 2025] [:error] [pid 57990:tid 58005] [client 195.242.212.150:53764] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aTqkZgqZT_dc36fQdXFwxAAAAAo"]
[Thu Dec 11 19:00:55.045775 2025] [:error] [pid 57990:tid 58017] [client 195.242.212.150:53766] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aTqkZwqZT_dc36fQdXFwxgAAABY"]
[Thu Dec 11 19:00:55.457928 2025] [:error] [pid 58814:tid 58820] [client 195.242.212.150:53774] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aTqkZ9iz0l9AD_3pkMwQIQAAAcQ"]
[Thu Dec 11 19:00:56.287956 2025] [:error] [pid 57990:tid 57999] [client 195.242.212.150:53790] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aTqkaAqZT_dc36fQdXFwzgAAAAQ"]
[Thu Dec 11 19:00:56.920346 2025] [:error] [pid 58814:tid 58835] [client 195.242.212.150:53802] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aTqkaNiz0l9AD_3pkMwQJAAAAdM"]
[Thu Dec 11 19:00:57.339563 2025] [:error] [pid 57992:tid 58073] [client 195.242.212.150:53804] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Dec 11 19:00:58.605360 2025] [:error] [pid 57992:tid 58066] [client 195.242.212.150:53804] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aTqkauUeau0BMFF2vHmfQAAAAJE"]
[Thu Dec 11 19:01:00.171253 2025] [:error] [pid 48261:tid 48281] [client 195.242.212.150:53810] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aTqkbOyPI4WU-4JmiQOsLgAAAZE"]
[Thu Dec 11 19:01:00.983980 2025] [:error] [pid 58099:tid 58106] [client 195.242.212.150:53814] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Dec 11 19:01:01.187396 2025] [:error] [pid 58099:tid 58103] [client 195.242.212.150:53814] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aTqkbcKZVSF_bdPFqRgALAAAAMI"]
[Thu Dec 11 19:01:01.829342 2025] [:error] [pid 57991:tid 58025] [client 195.242.212.150:57222] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Dec 11 19:01:02.040391 2025] [:error] [pid 57991:tid 58024] [client 195.242.212.150:57222] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Dec 11 19:01:02.259495 2025] [:error] [pid 57991:tid 58040] [client 195.242.212.150:57222] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Dec 11 19:01:02.470842 2025] [:error] [pid 57991:tid 58039] [client 195.242.212.150:57222] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aTqkbqPyGmNXA2ZsETaeDQAAAFE"]
[Thu Dec 11 19:01:02.878674 2025] [:error] [pid 57992:tid 58069] [client 195.242.212.150:57224] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Dec 11 19:01:03.076681 2025] [:error] [pid 57992:tid 58064] [client 195.242.212.150:57224] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aTqkb-Ueau0BMFF2vHmfRwAAAI8"]
[Thu Dec 11 19:01:03.905300 2025] [:error] [pid 27459:tid 27464] [client 195.242.212.150:57230] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Dec 11 19:01:04.119650 2025] [:error] [pid 27459:tid 27485] [client 195.242.212.150:57230] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Dec 11 19:01:04.326020 2025] [:error] [pid 27459:tid 27461] [client 195.242.212.150:57230] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Dec 11 19:01:05.348567 2025] [:error] [pid 27459:tid 27474] [client 195.242.212.150:57230] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Dec 11 19:01:05.562102 2025] [:error] [pid 27459:tid 27481] [client 195.242.212.150:57230] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Dec 11 19:01:05.994723 2025] [:error] [pid 27459:tid 27477] [client 195.242.212.150:57230] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Dec 11 19:01:06.612680 2025] [:error] [pid 27459:tid 27484] [client 195.242.212.150:57230] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Dec 11 19:01:06.818289 2025] [:error] [pid 27459:tid 27464] [client 195.242.212.150:57230] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aTqkclhPEXihPBKMpRNGbgAAAQM"]
[Thu Dec 11 19:01:07.229308 2025] [:error] [pid 58099:tid 58107] [client 195.242.212.150:57234] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aTqkc8KZVSF_bdPFqRgAMQAAAMY"]
[Thu Dec 11 19:01:07.641320 2025] [:error] [pid 57990:tid 58009] [client 195.242.212.150:57246] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aTqkcwqZT_dc36fQdXFw3QAAAA4"]
[Thu Dec 11 19:01:07.645813 2025] [:error] [pid 57990:tid 58009] [client 195.242.212.150:57246] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Dec 11 19:01:07.844907 2025] [:error] [pid 57990:tid 57995] [client 195.242.212.150:57246] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Dec 11 19:01:08.035060 2025] [:error] [pid 57990:tid 58016] [client 195.242.212.150:57246] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aTqkdAqZT_dc36fQdXFw4AAAABU"]
[Thu Dec 11 19:01:08.654300 2025] [:error] [pid 58814:tid 58831] [client 195.242.212.150:57248] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Dec 11 19:01:10.455819 2025] [:error] [pid 58814:tid 58831] [client 195.242.212.150:57248] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aTqkdtiz0l9AD_3pkMwQOAAAAc8"]
[Thu Dec 11 19:01:10.880810 2025] [:error] [pid 35112:tid 35123] [client 195.242.212.150:57262] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aTqkdp9ZpQ0WIeJhsJdW_wAAAUk"]
[Thu Dec 11 19:01:12.124018 2025] [:error] [pid 57991:tid 58031] [client 195.242.212.150:46342] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aTqkeKPyGmNXA2ZsETaeFwAAAEk"]
[Thu Dec 11 19:01:12.529046 2025] [:error] [pid 58099:tid 58115] [client 195.242.212.150:46346] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aTqkeMKZVSF_bdPFqRgANgAAAM4"]
[Thu Dec 11 19:01:13.542613 2025] [:error] [pid 58814:tid 58832] [client 195.242.212.150:46352] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Dec 11 19:01:13.956253 2025] [:error] [pid 58814:tid 58822] [client 195.242.212.150:46352] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aTqkediz0l9AD_3pkMwQQgAAAcY"]
[Thu Dec 11 19:01:14.812771 2025] [:error] [pid 48261:tid 48266] [client 195.242.212.150:46360] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Dec 11 19:01:15.220273 2025] [:error] [pid 48261:tid 48280] [client 195.242.212.150:46360] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aTqke-yPI4WU-4JmiQOsRgAAAZA"]
[Thu Dec 11 19:01:15.632483 2025] [:error] [pid 48261:tid 48281] [client 195.242.212.150:46364] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aTqke-yPI4WU-4JmiQOsRwAAAZE"]
[Thu Dec 11 19:01:16.278018 2025] [:error] [pid 57990:tid 57995] [client 195.242.212.150:46370] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Dec 11 19:01:16.473239 2025] [:error] [pid 57990:tid 58016] [client 195.242.212.150:46370] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aTqkfAqZT_dc36fQdXFw5wAAABU"]
[Thu Dec 11 19:01:16.879005 2025] [:error] [pid 35112:tid 35119] [client 195.242.212.150:46378] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aTqkfJ9ZpQ0WIeJhsJdXBAAAAUU"]
[Thu Dec 11 19:01:18.200222 2025] [:error] [pid 58814:tid 58837] [client 195.242.212.150:46380] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Dec 11 19:01:18.401207 2025] [:error] [pid 58814:tid 58817] [client 195.242.212.150:46380] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Dec 11 19:01:18.808484 2025] [:error] [pid 58814:tid 58827] [client 195.242.212.150:46380] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Dec 11 19:01:19.213505 2025] [:error] [pid 58814:tid 58818] [client 195.242.212.150:46380] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aTqkf9iz0l9AD_3pkMwQUAAAAcI"]
[Thu Dec 11 19:01:19.629766 2025] [:error] [pid 57992:tid 58062] [client 195.242.212.150:46390] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aTqkf-Ueau0BMFF2vHmfTwAAAI0"]
[Thu Dec 11 19:01:20.685434 2025] [:error] [pid 27459:tid 27478] [client 195.242.212.150:46404] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Dec 11 19:01:20.878124 2025] [:error] [pid 27459:tid 27462] [client 195.242.212.150:46404] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aTqkgFhPEXihPBKMpRNGgAAAAQE"]
[Thu Dec 11 19:01:21.291846 2025] [:error] [pid 57990:tid 58017] [client 195.242.212.150:52816] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aTqkgQqZT_dc36fQdXFw8wAAABY"]
[Thu Dec 11 19:01:21.692793 2025] [:error] [pid 48261:tid 48288] [client 195.242.212.150:52820] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aTqkgeyPI4WU-4JmiQOsVAAAAZg"]
[Thu Dec 11 19:01:23.110864 2025] [:error] [pid 27459:tid 27472] [client 195.242.212.150:52834] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Dec 11 19:01:23.315779 2025] [:error] [pid 27459:tid 27481] [client 195.242.212.150:52834] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aTqkg1hPEXihPBKMpRNGjAAAARQ"]
[Thu Dec 11 19:01:23.958086 2025] [:error] [pid 57991:tid 58045] [client 195.242.212.150:52850] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aTqkg6PyGmNXA2ZsETaeJAAAAFc"]
[Thu Dec 11 19:01:24.546085 2025] [:error] [pid 57990:tid 57996] [client 195.242.212.150:52860] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Dec 11 19:01:24.756036 2025] [:error] [pid 57990:tid 58012] [client 195.242.212.150:52860] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Dec 11 19:01:25.168429 2025] [:error] [pid 57990:tid 58014] [client 195.242.212.150:52860] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Dec 11 19:01:25.988085 2025] [:error] [pid 57990:tid 58000] [client 195.242.212.150:52860] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/js/wp-login.php"] [unique_id "aTqkhQqZT_dc36fQdXFxAAAAAAU"]
[Thu Dec 11 19:01:26.408289 2025] [:error] [pid 57990:tid 58017] [client 195.242.212.150:52860] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Dec 11 19:01:26.607516 2025] [:error] [pid 57990:tid 58003] [client 195.242.212.150:52860] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Dec 11 19:01:26.822392 2025] [:error] [pid 57990:tid 58002] [client 195.242.212.150:52860] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Dec 11 19:01:27.231072 2025] [:error] [pid 57990:tid 58010] [client 195.242.212.150:52860] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aTqkhwqZT_dc36fQdXFxBgAAAA8"]
[Thu Dec 11 19:01:27.654848 2025] [:error] [pid 58099:tid 58106] [client 195.242.212.150:52864] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aTqkh8KZVSF_bdPFqRgASAAAAMU"]
[Thu Dec 11 19:01:29.639850 2025] [:error] [pid 58099:tid 58118] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Dec 11 19:01:29.844349 2025] [:error] [pid 58099:tid 58121] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Dec 11 19:01:30.259467 2025] [:error] [pid 58099:tid 58113] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Dec 11 19:01:30.684924 2025] [:error] [pid 58099:tid 58120] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Dec 11 19:01:31.303068 2025] [:error] [pid 58099:tid 58111] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Dec 11 19:01:32.783943 2025] [:error] [pid 58099:tid 58103] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Dec 11 19:01:32.991588 2025] [:error] [pid 58099:tid 58106] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Dec 11 19:01:34.046669 2025] [:error] [pid 58099:tid 58113] [client 195.242.212.150:52864] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Dec 11 19:01:34.462569 2025] [:error] [pid 58099:tid 58120] [client 195.242.212.150:52864] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aTqkjsKZVSF_bdPFqRgAZAAAANM"]
[Thu Dec 11 19:01:35.284861 2025] [:error] [pid 27459:tid 27469] [client 195.242.212.150:56204] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Dec 11 19:01:35.498156 2025] [:error] [pid 27459:tid 27469] [client 195.242.212.150:56204] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aTqkj1hPEXihPBKMpRNGmQAAAQg"]
[Thu Dec 11 19:01:36.097630 2025] [:error] [pid 58814:tid 58832] [client 195.242.212.150:56210] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Dec 11 19:01:36.292482 2025] [:error] [pid 58814:tid 58833] [client 195.242.212.150:56210] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aTqkkNiz0l9AD_3pkMwQaAAAAdE"]
[Thu Dec 11 19:01:38.180438 2025] [:error] [pid 27459:tid 27468] [client 195.242.212.150:56220] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Dec 11 19:01:38.601212 2025] [:error] [pid 27459:tid 27473] [client 195.242.212.150:56220] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Dec 11 19:01:39.021596 2025] [:error] [pid 27459:tid 27467] [client 195.242.212.150:56220] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Dec 11 19:01:39.224538 2025] [:error] [pid 27459:tid 27470] [client 195.242.212.150:56220] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Dec 11 19:01:39.641170 2025] [:error] [pid 27459:tid 27479] [client 195.242.212.150:56220] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aTqkk1hPEXihPBKMpRNGpwAAARI"]
[Thu Dec 11 19:01:40.035925 2025] [:error] [pid 58099:tid 58110] [client 195.242.212.150:56222] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Dec 11 19:01:40.247855 2025] [:error] [pid 58099:tid 58124] [client 195.242.212.150:56222] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Dec 11 19:01:40.452021 2025] [:error] [pid 58099:tid 58114] [client 195.242.212.150:56222] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aTqklMKZVSF_bdPFqRgAaQAAAM0"]
[Thu Dec 11 19:01:41.091477 2025] [:error] [pid 48261:tid 48276] [client 195.242.212.150:56228] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aTqkleyPI4WU-4JmiQOsbwAAAYw"]
[Thu Dec 11 19:01:41.734023 2025] [:error] [pid 35112:tid 35127] [client 195.242.212.150:51346] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Dec 11 19:01:42.361914 2025] [:error] [pid 35112:tid 35137] [client 195.242.212.150:51346] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Dec 11 19:01:42.564800 2025] [:error] [pid 35112:tid 35136] [client 195.242.212.150:51346] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Dec 11 19:01:42.763745 2025] [:error] [pid 35112:tid 35121] [client 195.242.212.150:51346] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aTqklp9ZpQ0WIeJhsJdXFgAAAUc"]
[Thu Dec 11 19:01:43.203734 2025] [:error] [pid 57992:tid 58049] [client 195.242.212.150:51362] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aTqkl-Ueau0BMFF2vHmfcAAAAIA"]
[Thu Dec 11 19:01:44.672788 2025] [:error] [pid 58099:tid 58109] [client 195.242.212.150:51368] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Dec 11 19:01:45.084407 2025] [:error] [pid 58099:tid 58122] [client 195.242.212.150:51368] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aTqkmcKZVSF_bdPFqRgAeAAAANU"]
[Thu Dec 11 19:01:45.681079 2025] [:error] [pid 58814:tid 58818] [client 195.242.212.150:51378] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aTqkmdiz0l9AD_3pkMwQhgAAAcI"]
[Thu Dec 11 19:01:46.314221 2025] [:error] [pid 27459:tid 27478] [client 195.242.212.150:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Dec 11 19:01:46.526125 2025] [:error] [pid 27459:tid 27481] [client 195.242.212.150:51386] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Dec 11 19:01:46.739213 2025] [:error] [pid 27459:tid 27476] [client 195.242.212.150:51386] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aTqkmlhPEXihPBKMpRNGsAAAAQ8"]
[Thu Dec 11 19:01:47.348813 2025] [:error] [pid 57991:tid 58030] [client 195.242.212.150:51400] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Dec 11 19:01:47.560115 2025] [:error] [pid 57991:tid 58028] [client 195.242.212.150:51400] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Dec 11 19:01:47.983002 2025] [:error] [pid 57991:tid 58025] [client 195.242.212.150:51400] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Dec 11 19:01:48.621015 2025] [:error] [pid 57991:tid 58023] [client 195.242.212.150:51400] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aTqknKPyGmNXA2ZsETaeWAAAAEE"]
[Thu Dec 11 19:01:49.021118 2025] [:error] [pid 58814:tid 58836] [client 195.242.212.150:51406] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Dec 11 19:01:49.648511 2025] [:error] [pid 58814:tid 58831] [client 195.242.212.150:51406] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aTqkndiz0l9AD_3pkMwQlwAAAc8"]
[Thu Dec 11 19:01:50.286185 2025] [:error] [pid 57991:tid 58029] [client 195.242.212.150:51412] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Dec 11 19:01:50.906872 2025] [:error] [pid 57991:tid 58035] [client 195.242.212.150:51412] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Dec 11 19:01:51.109380 2025] [:error] [pid 57991:tid 58040] [client 195.242.212.150:51412] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Dec 11 19:01:51.534520 2025] [:error] [pid 57991:tid 58044] [client 195.242.212.150:51412] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aTqkn6PyGmNXA2ZsETaeZAAAAFY"]
[Thu Dec 11 19:01:52.607624 2025] [:error] [pid 57991:tid 58034] [client 195.242.212.150:51412] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aTqkoKPyGmNXA2ZsETaeawAAAEw"]
[Thu Dec 11 19:01:53.018095 2025] [:error] [pid 57992:tid 58061] [client 195.242.212.150:33868] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Dec 11 19:01:53.214316 2025] [:error] [pid 57992:tid 58063] [client 195.242.212.150:33868] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aTqkoeUeau0BMFF2vHmfjgAAAI4"]
[Thu Dec 11 19:01:53.637101 2025] [:error] [pid 35112:tid 35118] [client 195.242.212.150:33876] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Dec 11 19:01:54.065973 2025] [:error] [pid 35112:tid 35129] [client 195.242.212.150:33876] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Dec 11 19:01:54.470757 2025] [:error] [pid 35112:tid 35130] [client 195.242.212.150:33876] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aTqkop9ZpQ0WIeJhsJdXRAAAAVA"]
[Thu Dec 11 19:01:55.105511 2025] [:error] [pid 58814:tid 58821] [client 195.242.212.150:33880] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Dec 11 19:01:55.318808 2025] [:error] [pid 58814:tid 58825] [client 195.242.212.150:33880] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Dec 11 19:01:55.724788 2025] [:error] [pid 58814:tid 58829] [client 195.242.212.150:33880] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aTqko9iz0l9AD_3pkMwQqgAAAc0"]
[Thu Dec 11 19:01:56.349091 2025] [:error] [pid 57991:tid 58046] [client 195.242.212.150:33894] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aTqkpKPyGmNXA2ZsETaecAAAAFg"]
[Thu Dec 11 19:01:56.763436 2025] [:error] [pid 35112:tid 35114] [client 195.242.212.150:33906] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Dec 11 19:01:56.972696 2025] [:error] [pid 35112:tid 35116] [client 195.242.212.150:33906] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Dec 11 19:01:57.457759 2025] [:error] [pid 35112:tid 35127] [client 195.242.212.150:33906] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aTqkpZ9ZpQ0WIeJhsJdXSAAAAU0"]
[Thu Dec 11 19:01:57.848410 2025] [:error] [pid 57991:tid 58044] [client 195.242.212.150:33910] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Dec 11 19:01:58.263396 2025] [:error] [pid 57991:tid 58032] [client 195.242.212.150:33910] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Dec 11 19:01:58.465163 2025] [:error] [pid 57991:tid 58026] [client 195.242.212.150:33910] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aTqkpqPyGmNXA2ZsETaeeQAAAEQ"]
[Thu Dec 11 19:01:59.096349 2025] [:error] [pid 57992:tid 58066] [client 195.242.212.150:33918] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "aTqkp-Ueau0BMFF2vHmfkwAAAJE"]
[Thu Dec 11 19:01:59.527775 2025] [:error] [pid 57991:tid 58031] [client 195.242.212.150:33924] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aTqkp6PyGmNXA2ZsETaeegAAAEk"]
[Thu Dec 11 19:01:59.922705 2025] [:error] [pid 48261:tid 48269] [client 195.242.212.150:33934] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aTqkp-yPI4WU-4JmiQOsgwAAAYU"]
[Thu Dec 11 19:02:00.329878 2025] [:error] [pid 58814:tid 58819] [client 195.242.212.150:33938] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aTqkqNiz0l9AD_3pkMwQtAAAAcM"]
[Thu Dec 11 19:02:00.711936 2025] [:error] [pid 48261:tid 48270] [client 195.242.212.150:33948] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aTqkqOyPI4WU-4JmiQOshAAAAYY"]
[Thu Dec 11 19:02:01.116857 2025] [:error] [pid 27459:tid 27463] [client 195.242.212.150:43984] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aTqkqVhPEXihPBKMpRNGwAAAAQI"]
[Thu Dec 11 19:02:01.946949 2025] [:error] [pid 57990:tid 58008] [client 195.242.212.150:43998] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aTqkqQqZT_dc36fQdXFxaQAAAA0"]
[Thu Dec 11 19:02:02.356901 2025] [:error] [pid 58814:tid 58839] [client 195.242.212.150:44012] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aTqkqtiz0l9AD_3pkMwQuQAAAdc"]
[Thu Dec 11 19:02:02.757609 2025] [:error] [pid 57991:tid 58043] [client 195.242.212.150:44014] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aTqkqqPyGmNXA2ZsETaefgAAAFU"]
[Thu Dec 11 19:02:04.906779 2025] [:error] [pid 57992:tid 58070] [client 195.242.212.150:44026] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aTqkrOUeau0BMFF2vHmfmQAAAJU"]
[Thu Dec 11 19:02:05.732940 2025] [:error] [pid 57991:tid 58040] [client 195.242.212.150:44030] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aTqkraPyGmNXA2ZsETaehAAAAFI"]
[Thu Dec 11 19:02:06.148147 2025] [:error] [pid 48261:tid 48271] [client 195.242.212.150:44046] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Dec 11 19:02:08.301709 2025] [:error] [pid 48261:tid 48266] [client 195.242.212.150:44046] [client 195.242.212.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 195.242.212.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aTqksOyPI4WU-4JmiQOsjgAAAYI"]
[Thu Dec 11 19:02:09.599690 2025] [:error] [pid 48261:tid 48275] [client 195.242.212.150:44046] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aTqkseyPI4WU-4JmiQOslQAAAYs"]
[Thu Dec 11 19:02:10.002183 2025] [:error] [pid 57990:tid 58013] [client 195.242.212.150:44052] [client 195.242.212.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aTqksgqZT_dc36fQdXFxbQAAABI"]
[Thu Dec 11 19:02:11.064853 2025] [:error] [pid 57992:tid 58057] [client 195.242.212.150:44060] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Dec 11 19:02:11.271792 2025] [:error] [pid 57992:tid 58065] [client 195.242.212.150:44060] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Dec 11 19:02:11.884655 2025] [:error] [pid 57992:tid 58070] [client 195.242.212.150:44060] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aTqks-Ueau0BMFF2vHmfqQAAAJU"]
[Thu Dec 11 19:02:12.306206 2025] [:error] [pid 58814:tid 58819] [client 195.242.212.150:53112] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aTqktNiz0l9AD_3pkMwQwwAAAcM"]
[Thu Dec 11 19:02:13.798711 2025] [:error] [pid 57990:tid 58000] [client 195.242.212.150:53126] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aTqktQqZT_dc36fQdXFxdAAAAAU"]
[Thu Dec 11 19:02:14.217381 2025] [:error] [pid 35112:tid 35121] [client 195.242.212.150:53132] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aTqktp9ZpQ0WIeJhsJdXWAAAAUc"]
[Thu Dec 11 19:02:14.639309 2025] [:error] [pid 58099:tid 58121] [client 195.242.212.150:53134] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aTqktsKZVSF_bdPFqRgAngAAANQ"]
[Thu Dec 11 19:02:19.206039 2025] [:error] [pid 57991:tid 58023] [client 195.242.212.150:53138] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/"] [unique_id "aTqku6PyGmNXA2ZsETaesAAAAEE"]
[Thu Dec 11 19:02:19.616426 2025] [:error] [pid 27459:tid 27477] [client 195.242.212.150:53144] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/"] [unique_id "aTqku1hPEXihPBKMpRNGywAAARA"]
[Thu Dec 11 19:02:20.026460 2025] [:error] [pid 57991:tid 58043] [client 195.242.212.150:53150] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/"] [unique_id "aTqkvKPyGmNXA2ZsETaetAAAAFU"]
[Thu Dec 11 19:02:20.446622 2025] [:error] [pid 57992:tid 58068] [client 195.242.212.150:53160] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/"] [unique_id "aTqkvOUeau0BMFF2vHmftgAAAJM"]
[Thu Dec 11 19:02:20.852846 2025] [:error] [pid 48261:tid 48275] [client 195.242.212.150:53166] [client 195.242.212.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/"] [unique_id "aTqkvOyPI4WU-4JmiQOsnwAAAYs"]
[Fri Dec 12 02:48:21.718138 2025] [:error] [pid 47935:tid 47947] [client 168.232.228.106:58576] [client 168.232.228.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.232.228.106, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTsR9Wbjqz-fIxCXK9eWygAAAUk"]
[Fri Dec 12 02:48:21.724272 2025] [:error] [pid 47935:tid 47947] [client 168.232.228.106:58576] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 12 02:48:54.361254 2025] [:error] [pid 48225:tid 48232] [client 189.7.125.217:4507] [client 189.7.125.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.7.125.217, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTsSFhOSxJUkDSBC1ge5vQAAAgQ"]
[Fri Dec 12 02:48:54.366397 2025] [:error] [pid 48225:tid 48232] [client 189.7.125.217:4507] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 12 05:36:30.405352 2025] [:error] [pid 60649:tid 60652] [client 20.58.146.18:34693] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://www.google.fr/
[Fri Dec 12 05:36:30.425763 2025] [:error] [pid 60649:tid 60676] [client 20.58.146.18:34693] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Fri Dec 12 05:36:30.448046 2025] [:error] [pid 60649:tid 60658] [client 20.58.146.18:34693] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php, referer: https://www.google.co.uk/
[Fri Dec 12 05:36:30.470591 2025] [:error] [pid 60649:tid 60665] [client 20.58.146.18:34693] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.de/
[Fri Dec 12 05:36:30.491163 2025] [:error] [pid 60649:tid 60654] [client 20.58.146.18:34693] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.com/
[Fri Dec 12 05:36:30.511406 2025] [:error] [pid 60649:tid 60664] [client 20.58.146.18:34693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Fri Dec 12 10:51:58.840370 2025] [:error] [pid 26521:tid 26583] [client 34.48.237.192:54094] [client 34.48.237.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.237.192, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTuDTpdhcAPU617AKTC70AAAAIQ"]
[Fri Dec 12 10:51:58.843843 2025] [:error] [pid 26521:tid 26583] [client 34.48.237.192:54094] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 12 10:52:01.303173 2025] [:error] [pid 26521:tid 26586] [client 34.48.237.192:54094] [client 34.48.237.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTuDUZdhcAPU617AKTC73QAAAIc"]
[Fri Dec 12 10:52:01.736846 2025] [:error] [pid 26521:tid 26593] [client 34.48.237.192:61113] [client 34.48.237.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTuDUZdhcAPU617AKTC73wAAAI4"]
[Fri Dec 12 10:52:02.168914 2025] [:error] [pid 26521:tid 26580] [client 34.48.237.192:61725] [client 34.48.237.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTuDUpdhcAPU617AKTC74AAAAIE"]
[Fri Dec 12 10:52:02.598229 2025] [:error] [pid 26521:tid 26583] [client 34.48.237.192:58889] [client 34.48.237.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTuDUpdhcAPU617AKTC74gAAAIQ"]
[Fri Dec 12 10:52:03.036600 2025] [:error] [pid 26521:tid 26581] [client 34.48.237.192:60369] [client 34.48.237.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTuDU5dhcAPU617AKTC75AAAAII"]
[Fri Dec 12 10:52:03.466271 2025] [:error] [pid 26521:tid 26589] [client 34.48.237.192:59593] [client 34.48.237.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTuDU5dhcAPU617AKTC75QAAAIo"]
[Fri Dec 12 10:52:03.911007 2025] [:error] [pid 26519:tid 26536] [client 34.48.237.192:62910] [client 34.48.237.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTuDU88TRgSGOeWqEheKuQAAAA0"]
[Fri Dec 12 11:30:42.947143 2025] [:error] [pid 60649:tid 60662] [client 49.235.136.28:36446] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTuMYlOcUGKU3sgfHP-QUgAAAQo"]
[Fri Dec 12 15:02:12.103789 2025] [:error] [pid 27950:tid 27959] [client 3.83.144.56:53597] [client 3.83.144.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 3.83.144.56, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTu99IVLRvkrdsSc1F1SWwAAAUc"]
[Fri Dec 12 15:02:12.108999 2025] [:error] [pid 27950:tid 27959] [client 3.83.144.56:53597] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 12 15:02:14.412067 2025] [:error] [pid 27950:tid 27955] [client 3.83.144.56:53597] [client 3.83.144.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTu99oVLRvkrdsSc1F1SaAAAAUM"]
[Fri Dec 12 15:02:14.819529 2025] [:error] [pid 26521:tid 26587] [client 3.83.144.56:64649] [client 3.83.144.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTu99pdhcAPU617AKTAZPQAAAIg"]
[Fri Dec 12 15:02:15.226470 2025] [:error] [pid 26519:tid 26546] [client 3.83.144.56:49464] [client 3.83.144.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTu9988TRgSGOeWqEhe7NQAAABc"]
[Fri Dec 12 15:02:15.633949 2025] [:error] [pid 27950:tid 27976] [client 3.83.144.56:50645] [client 3.83.144.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTu994VLRvkrdsSc1F1SawAAAVg"]
[Fri Dec 12 15:02:16.041455 2025] [:error] [pid 27950:tid 27960] [client 3.83.144.56:51786] [client 3.83.144.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTu9-IVLRvkrdsSc1F1SbAAAAUg"]
[Fri Dec 12 15:02:16.448000 2025] [:error] [pid 26521:tid 26580] [client 3.83.144.56:53006] [client 3.83.144.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTu9-JdhcAPU617AKTAZQAAAAIE"]
[Fri Dec 12 15:02:16.855768 2025] [:error] [pid 26520:tid 26558] [client 3.83.144.56:54397] [client 3.83.144.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTu9-EG_frlY5vNXu_DHswAAAEY"]
[Fri Dec 12 21:17:36.274872 2025] [:error] [pid 26607:tid 26626] [client 159.89.132.199:62506] [client 159.89.132.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.89.132.199, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTwV8Mb_b0tOEWTL2KmhawAAANE"]
[Fri Dec 12 21:17:36.280844 2025] [:error] [pid 26607:tid 26626] [client 159.89.132.199:62506] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 12 21:17:38.448738 2025] [:error] [pid 26607:tid 26620] [client 159.89.132.199:62506] [client 159.89.132.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aTwV8sb_b0tOEWTL2KmhdgAAAMs"]
[Fri Dec 12 21:17:38.843564 2025] [:error] [pid 26521:tid 26598] [client 159.89.132.199:63995] [client 159.89.132.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aTwV8pdhcAPU617AKTCFEAAAAJM"]
[Fri Dec 12 21:17:39.244889 2025] [:error] [pid 26521:tid 26591] [client 159.89.132.199:64142] [client 159.89.132.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aTwV85dhcAPU617AKTCFEgAAAIw"]
[Fri Dec 12 21:17:39.645794 2025] [:error] [pid 55760:tid 55782] [client 159.89.132.199:64290] [client 159.89.132.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aTwV81ObDQlftFDyGawVwgAAAZQ"]
[Fri Dec 12 21:17:40.046385 2025] [:error] [pid 26521:tid 26595] [client 159.89.132.199:64467] [client 159.89.132.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aTwV9JdhcAPU617AKTCFFQAAAJA"]
[Fri Dec 12 21:17:40.443129 2025] [:error] [pid 60649:tid 60669] [client 159.89.132.199:64646] [client 159.89.132.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aTwV9FOcUGKU3sgfHP_-CwAAARE"]
[Fri Dec 12 21:17:40.841877 2025] [:error] [pid 26519:tid 26523] [client 159.89.132.199:64795] [client 159.89.132.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aTwV9M8TRgSGOeWqEhf22wAAAAA"]
[Sat Dec 13 00:41:09.856955 2025] [:error] [pid 55760:tid 55768] [client 223.25.63.89:32621] [client 223.25.63.89] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.25.63.89, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aTxFpVObDQlftFDyGaxQNQAAAYY"]
[Sat Dec 13 00:41:09.862645 2025] [:error] [pid 55760:tid 55768] [client 223.25.63.89:32621] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Dec 13 00:49:08.323750 2025] [:error] [pid 26521:tid 26599] [client 182.42.104.32:38128] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTxHhJdhcAPU617AKTDR-wAAAJQ"]
[Sat Dec 13 03:46:49.962544 2025] [:error] [pid 23324:tid 23447] [client 38.97.60.82:53291] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aTxxKXghQ59IefnB6COtNAAAAEY"], referer: binance.com
[Sat Dec 13 04:22:48.946110 2025] [:error] [pid 43749:tid 43806] [client 38.97.60.82:63792] [client 38.97.60.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aTx5mHOk7VNylTjPi3xyiAAAAIE"], referer: binance.com
[Sat Dec 13 06:12:19.368014 2025] [:error] [pid 43748:tid 43784] [client 170.106.35.153:45192] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTyTQ6rTT0VzE3gYjcA6DwAAAEU"]
[Sat Dec 13 07:06:39.499582 2025] [:error] [pid 43749:tid 43810] [client 182.40.104.255:55056] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTyf_3Ok7VNylTjPi3ygVAAAAIQ"]
[Sat Dec 13 11:13:05.756892 2025] [:error] [pid 43747:tid 43757] [client 170.106.180.139:53042] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aTzZwZYw3twBd_JQEHjiuAAAAAY"]
[Sat Dec 13 13:00:35.593645 2025] [:error] [pid 8181:tid 8212] [client 45.154.98.18:51201] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTzy84csztoZQ9y1QdUPpwAAAhY"]
[Sat Dec 13 13:00:36.138857 2025] [:error] [pid 43836:tid 43858] [client 45.154.98.18:51977] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTzy9GAEOBirsxb11nbUAgAAANQ"]
[Sat Dec 13 13:00:36.752745 2025] [:error] [pid 43747:tid 43760] [client 45.154.98.18:52845] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTzy9JYw3twBd_JQEHj1CQAAAAk"]
[Sat Dec 13 13:00:37.310352 2025] [:error] [pid 43748:tid 43790] [client 45.154.98.18:53269] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTzy9arTT0VzE3gYjcCIFgAAAEs"]
[Sat Dec 13 13:00:37.922644 2025] [:error] [pid 3418:tid 3431] [client 45.154.98.18:53528] [client 45.154.98.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aTzy9St8_IWm3g-eIu5EoQAAAco"]
[Sat Dec 13 21:30:47.834406 2025] [:error] [pid 22505:tid 22527] [client 43.157.95.239:44442] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aT1qhzvNI-35hW16TnUh-AAAA5Q"]
[Sat Dec 13 23:30:55.037322 2025] [:error] [pid 43747:tid 43775] [client 4.197.221.212:49428] [client 4.197.221.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aT2Gr5Yw3twBd_JQEHhZIwAAABg"]
[Sat Dec 13 23:30:55.314652 2025] [:error] [pid 20799:tid 20810] [client 4.197.221.212:45417] [client 4.197.221.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aT2Gr6Pz3eVRUTzZpOKbHwAAAsk"]
[Sat Dec 13 23:30:56.105727 2025] [:error] [pid 43747:tid 43757] [client 4.197.221.212:58383] [client 4.197.221.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aT2GsJYw3twBd_JQEHhZJgAAAAY"]
[Sat Dec 13 23:30:57.314103 2025] [:error] [pid 22505:tid 22522] [client 4.197.221.212:50248] [client 4.197.221.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aT2GsTvNI-35hW16TnUyNgAAA48"]
[Sat Dec 13 23:50:21.633345 2025] [:error] [pid 39287:tid 39292] [client 45.144.212.58:34350] [client 45.144.212.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aT2LPTBwBW1JRRoCYqahAgAAAQM"]
[Sun Dec 14 02:09:45.104010 2025] [:error] [pid 3720:tid 3733] [client 49.51.47.100:35222] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aT2r6e7_sgsCEY5RMYroFAAAAIs"]
[Sun Dec 14 03:30:39.435842 2025] [:error] [pid 14689:tid 14714] [client 195.178.110.242:52510] [client 195.178.110.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aT2-30Ecifvaa9I7SnmnRQAAAVU"]
[Sun Dec 14 03:30:39.441192 2025] [:error] [pid 3720:tid 3746] [client 195.178.110.242:52508] [client 195.178.110.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aT2-3-7_sgsCEY5RMYr6hAAAAJg"]
[Sun Dec 14 04:55:55.519348 2025] [:error] [pid 39614:tid 39628] [client 43.166.136.202:32808] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aT3S2_xybG8-9MflbDd6RwAAAMw"]
[Sun Dec 14 05:03:03.599806 2025] [:error] [pid 39525:tid 39593] [client 35.88.149.235:34008] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aT3Uh01fX_pB_BrvE_5sngAAAIo"]
[Sun Dec 14 05:03:07.907603 2025] [:error] [pid 39524:tid 39575] [client 35.88.149.235:34020] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aT3Ui2rVGpbDzFtDE9MBcAAAAFM"]
[Sun Dec 14 05:03:13.172126 2025] [:error] [pid 41600:tid 41625] [client 35.88.149.235:59428] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aT3UkdFLTBZjcwNd_VvUbAAAARY"]
[Sun Dec 14 05:03:18.065068 2025] [:error] [pid 39523:tid 39545] [client 35.88.149.235:59436] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod"] [unique_id "aT3UljQTQH1raAj2lkgeCgAAABE"]
[Sun Dec 14 05:03:22.928046 2025] [:error] [pid 39525:tid 39585] [client 35.88.149.235:51498] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.local"] [unique_id "aT3Umk1fX_pB_BrvE_5stwAAAII"]
[Sun Dec 14 05:03:29.071662 2025] [:error] [pid 39614:tid 39622] [client 35.88.149.235:51508] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.live"] [unique_id "aT3UofxybG8-9MflbDd8LwAAAMY"]
[Sun Dec 14 05:03:35.426499 2025] [:error] [pid 41600:tid 41616] [client 35.88.149.235:48068] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.secret"] [unique_id "aT3Up9FLTBZjcwNd_VvUiAAAAQ0"]
[Sun Dec 14 05:03:46.041655 2025] [:error] [pid 39523:tid 39548] [client 35.88.149.235:49546] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.secrets"] [unique_id "aT3UsjQTQH1raAj2lkgeKQAAABQ"]
[Sun Dec 14 05:03:52.153769 2025] [:error] [pid 41600:tid 41611] [client 35.88.149.235:41076] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.private"] [unique_id "aT3UuNFLTBZjcwNd_VvUlQAAAQg"]
[Sun Dec 14 05:03:58.499501 2025] [:error] [pid 39523:tid 39546] [client 35.88.149.235:41090] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aT3UvjQTQH1raAj2lkgeLQAAABI"]
[Sun Dec 14 05:04:03.944732 2025] [:error] [pid 41600:tid 41613] [client 35.88.149.235:45018] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aT3Uw9FLTBZjcwNd_VvUpwAAAQo"]
[Sun Dec 14 05:04:09.836380 2025] [:error] [pid 39524:tid 39563] [client 35.88.149.235:45032] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aT3UyWrVGpbDzFtDE9MBjwAAAEc"]
[Sun Dec 14 05:04:15.229965 2025] [:error] [pid 39525:tid 39605] [client 35.88.149.235:42568] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aT3Uz01fX_pB_BrvE_5s1wAAAJY"]
[Sun Dec 14 05:04:21.052227 2025] [:error] [pid 39525:tid 39598] [client 35.88.149.235:33460] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env_sample"] [unique_id "aT3U1U1fX_pB_BrvE_5s2wAAAI8"]
[Sun Dec 14 05:04:32.858522 2025] [:error] [pid 39523:tid 39529] [client 35.88.149.235:41686] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aT3U4DQTQH1raAj2lkgeOQAAAAE"]
[Sun Dec 14 05:04:43.087271 2025] [:error] [pid 41600:tid 41611] [client 35.88.149.235:46446] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.stage"] [unique_id "aT3U69FLTBZjcwNd_VvUywAAAQg"]
[Sun Dec 14 05:04:53.558354 2025] [:error] [pid 39523:tid 39538] [client 35.88.149.235:59492] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aT3U9TQTQH1raAj2lkgeOwAAAAo"]
[Sun Dec 14 05:05:00.311525 2025] [:error] [pid 39614:tid 39621] [client 35.88.149.235:59494] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.swp"] [unique_id "aT3U_PxybG8-9MflbDd8ZQAAAMU"]
[Sun Dec 14 05:05:03.587890 2025] [:error] [pid 41600:tid 41614] [client 35.88.149.235:48258] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env~"] [unique_id "aT3U_9FLTBZjcwNd_VvU3AAAAQs"]
[Sun Dec 14 05:05:07.374133 2025] [:error] [pid 39523:tid 39533] [client 35.88.149.235:48262] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/portal/.env"] [unique_id "aT3VAzQTQH1raAj2lkgeQAAAAAU"]
[Sun Dec 14 05:05:11.362593 2025] [:error] [pid 39523:tid 39541] [client 35.88.149.235:34822] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/env/.env"] [unique_id "aT3VBzQTQH1raAj2lkgeQwAAAA0"]
[Sun Dec 14 05:05:15.179501 2025] [:error] [pid 41600:tid 41611] [client 35.88.149.235:34830] [client 35.88.149.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aT3VC9FLTBZjcwNd_VvU6QAAAQg"]
[Sun Dec 14 05:39:42.525704 2025] [:error] [pid 39523:tid 39537] [client 45.144.212.58:43844] [client 45.144.212.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aT3dHjQTQH1raAj2lkgm8QAAAAk"]
[Sun Dec 14 05:48:09.168363 2025] [:error] [pid 39523:tid 39548] [client 57.131.35.166:59400] [client 57.131.35.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "aT3fGTQTQH1raAj2lkgpDQAAABQ"]
[Sun Dec 14 08:38:45.965942 2025] [:error] [pid 41600:tid 41616] [client 110.166.71.39:56347] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aT4HFdFLTBZjcwNd_VskKwAAAQ0"]
[Sun Dec 14 08:40:33.659480 2025] [:error] [pid 39524:tid 39568] [client 156.249.125.220:24442] [client 156.249.125.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.249.125.220, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aT4HgWrVGpbDzFtDE9Mx5QAAAEw"]
[Sun Dec 14 08:40:33.663834 2025] [:error] [pid 39524:tid 39568] [client 156.249.125.220:24442] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 14 08:40:34.650943 2025] [:error] [pid 39614:tid 39619] [client 154.193.153.95:13080] [client 154.193.153.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.193.153.95, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aT4HgvxybG8-9MflbDe1ogAAAMM"]
[Sun Dec 14 08:40:34.655193 2025] [:error] [pid 39614:tid 39619] [client 154.193.153.95:13080] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 14 08:40:35.474541 2025] [:error] [pid 39525:tid 39599] [client 156.242.51.251:15112] [client 156.242.51.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.242.51.251, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aT4Hg01fX_pB_BrvE_6htgAAAJA"]
[Sun Dec 14 08:40:35.478220 2025] [:error] [pid 39525:tid 39599] [client 156.242.51.251:15112] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 14 09:04:23.688613 2025] [:error] [pid 39524:tid 39568] [client 45.82.13.170:54076] [client 45.82.13.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aT4NF2rVGpbDzFtDE9M23wAAAEw"]
[Sun Dec 14 19:43:16.516961 2025] [:error] [pid 39524:tid 39557] [client 43.130.14.245:47150] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aT6i1GrVGpbDzFtDE9PbzgAAAEE"]
[Sun Dec 14 22:59:08.772705 2025] [:error] [pid 39523:tid 39528] [client 74.225.222.232:14422] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aT7QvDQTQH1raAj2lkgKLgAAAAA"]
[Sun Dec 14 22:59:11.006235 2025] [:error] [pid 40596:tid 40648] [client 74.225.222.232:14459] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aT7Qv2vZZo4N2X7WoLy81AAAAdY"]
[Sun Dec 14 22:59:11.938480 2025] [:error] [pid 39524:tid 39561] [client 74.225.222.232:14358] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Sun Dec 14 22:59:14.028881 2025] [:error] [pid 39524:tid 39561] [client 74.225.222.232:14358] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/about.php"] [unique_id "aT7QwmrVGpbDzFtDE9MkGgAAAEU"]
[Sun Dec 14 22:59:14.754310 2025] [:error] [pid 40595:tid 40600] [client 74.225.222.232:14365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sun Dec 14 22:59:14.898498 2025] [:error] [pid 40595:tid 40613] [client 74.225.222.232:14365] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/wp.php"] [unique_id "aT7Qwvjrht6y4RN-xKRLvwAAAY4"]
[Sun Dec 14 22:59:15.543288 2025] [:error] [pid 39523:tid 39532] [client 74.225.222.232:14414] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Dec 14 22:59:15.687000 2025] [:error] [pid 39523:tid 39537] [client 74.225.222.232:14414] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aT7QwzQTQH1raAj2lkgKNAAAAAk"]
[Sun Dec 14 22:59:16.081641 2025] [:error] [pid 41600:tid 41614] [client 74.225.222.232:14455] [client 74.225.222.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.222.232, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/chosen.php/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aT7QxNFLTBZjcwNd_VtdTgAAAQs"]
[Sun Dec 14 22:59:16.688094 2025] [:error] [pid 41600:tid 41621] [client 74.225.222.232:14455] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aT7QxNFLTBZjcwNd_VtdUgAAARI"]
[Sun Dec 14 22:59:17.366489 2025] [:error] [pid 13799:tid 13814] [client 74.225.222.232:14434] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT7QxXjPEin01ElFTNZqpwAAAgw"]
[Sun Dec 14 22:59:17.685527 2025] [:error] [pid 41600:tid 41620] [client 74.225.222.232:14445] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aT7QxdFLTBZjcwNd_VtdUwAAARE"]
[Sun Dec 14 22:59:18.166583 2025] [:error] [pid 41600:tid 41622] [client 74.225.222.232:14349] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aT7QxtFLTBZjcwNd_VtdVAAAARM"]
[Sun Dec 14 22:59:18.664760 2025] [:error] [pid 41600:tid 41626] [client 74.225.222.232:14461] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aT7QxtFLTBZjcwNd_VtdVQAAARc"]
[Sun Dec 14 22:59:19.018019 2025] [:error] [pid 39524:tid 39566] [client 74.225.222.232:14423] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aT7Qx2rVGpbDzFtDE9MkHwAAAEo"]
[Sun Dec 14 22:59:19.979596 2025] [:error] [pid 40561:tid 40581] [client 74.225.222.232:14348] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aT7Qx4Y6r869zoqRQkT-JQAAAVA"]
[Sun Dec 14 22:59:21.651422 2025] [:error] [pid 41600:tid 41603] [client 74.225.222.232:14362] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aT7QydFLTBZjcwNd_VtdWQAAAQA"]
[Sun Dec 14 22:59:22.161232 2025] [:error] [pid 39614:tid 39638] [client 74.225.222.232:14463] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aT7QyvxybG8-9MflbDeeTgAAANY"]
[Sun Dec 14 22:59:23.205451 2025] [:error] [pid 39524:tid 39574] [client 74.225.222.232:14417] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aT7Qy2rVGpbDzFtDE9MkJQAAAFI"]
[Sun Dec 14 22:59:24.426018 2025] [:error] [pid 39524:tid 39580] [client 74.225.222.232:14440] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aT7QzGrVGpbDzFtDE9MkJwAAAFg"]
[Sun Dec 14 22:59:25.680607 2025] [:error] [pid 39524:tid 39577] [client 74.225.222.232:14402] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aT7QzWrVGpbDzFtDE9MkKwAAAFU"]
[Sun Dec 14 22:59:26.985137 2025] [:error] [pid 39524:tid 39569] [client 74.225.222.232:14378] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aT7QzmrVGpbDzFtDE9MkLgAAAE0"]
[Sun Dec 14 22:59:27.973069 2025] [:error] [pid 39525:tid 39594] [client 74.225.222.232:14359] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/404.php"] [unique_id "aT7Qz01fX_pB_BrvE_5yaAAAAIs"]
[Sun Dec 14 22:59:29.198118 2025] [:error] [pid 40596:tid 40649] [client 74.225.222.232:14352] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/404.php"] [unique_id "aT7Q0WvZZo4N2X7WoLy82gAAAdc"]
[Sun Dec 14 22:59:31.291048 2025] [:error] [pid 40561:tid 40589] [client 74.225.222.232:14436] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/404.php"] [unique_id "aT7Q04Y6r869zoqRQkT-RQAAAVg"]
[Sun Dec 14 22:59:32.124007 2025] [:error] [pid 41600:tid 41613] [client 74.225.222.232:14347] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/404.php"] [unique_id "aT7Q1NFLTBZjcwNd_VtdegAAAQo"]
[Sun Dec 14 22:59:32.947151 2025] [:error] [pid 39614:tid 39621] [client 74.225.222.232:14435] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT7Q1PxybG8-9MflbDeebQAAAMU"]
[Sun Dec 14 22:59:33.918754 2025] [:error] [pid 39525:tid 39590] [client 74.225.222.232:14430] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT7Q1U1fX_pB_BrvE_5ybAAAAIc"]
[Sun Dec 14 22:59:34.386697 2025] [:error] [pid 40596:tid 40644] [client 74.225.222.232:14432] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT7Q1mvZZo4N2X7WoLy84gAAAdI"]
[Sun Dec 14 22:59:35.389732 2025] [:error] [pid 40595:tid 40620] [client 74.225.222.232:14454] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/asus.php"] [unique_id "aT7Q1_jrht6y4RN-xKRLwgAAAZU"]
[Sun Dec 14 22:59:36.807253 2025] [:error] [pid 39523:tid 39546] [client 74.225.222.232:14401] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT7Q2DQTQH1raAj2lkgKRwAAABI"]
[Sun Dec 14 22:59:40.986434 2025] [:error] [pid 13799:tid 13825] [client 74.225.222.232:14363] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT7Q3HjPEin01ElFTNZq2gAAAhc"]
[Sun Dec 14 22:59:44.842967 2025] [:error] [pid 40596:tid 40648] [client 74.225.222.232:14441] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT7Q4GvZZo4N2X7WoLy87wAAAdY"]
[Sun Dec 14 22:59:50.247857 2025] [:error] [pid 40561:tid 40585] [client 74.225.222.232:14446] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT7Q5oY6r869zoqRQkT-WQAAAVQ"]
[Sun Dec 14 22:59:55.011442 2025] [:error] [pid 13799:tid 13823] [client 74.225.222.232:14437] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aT7Q63jPEin01ElFTNZq7gAAAhU"]
[Sun Dec 14 22:59:57.662807 2025] [:error] [pid 39523:tid 39552] [client 74.225.222.232:14424] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aT7Q7TQTQH1raAj2lkgKUQAAABg"]
[Sun Dec 14 23:00:02.030622 2025] [:error] [pid 39525:tid 39594] [client 74.225.222.232:14397] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aT7Q8k1fX_pB_BrvE_5ykgAAAIs"]
[Sun Dec 14 23:00:11.549086 2025] [:error] [pid 39523:tid 39552] [client 74.225.222.232:14388] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT7Q-zQTQH1raAj2lkgKZAAAABg"]
[Sun Dec 14 23:00:15.229650 2025] [:error] [pid 39614:tid 39620] [client 74.225.222.232:14453] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT7Q__xybG8-9MflbDeekwAAAMQ"]
[Sun Dec 14 23:00:16.984858 2025] [:error] [pid 41600:tid 41603] [client 74.225.222.232:14444] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT7RANFLTBZjcwNd_VtdpgAAAQA"]
[Sun Dec 14 23:00:18.816466 2025] [:error] [pid 41600:tid 41606] [client 74.225.222.232:8137] [client 74.225.222.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.222.232, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aT7RAtFLTBZjcwNd_VtdpwAAAQM"]
[Sun Dec 14 23:00:18.967134 2025] [:error] [pid 41600:tid 41614] [client 74.225.222.232:8137] File does not exist: /usr/local/apache/htdocs/suspended-page/12wudscz.php
[Sun Dec 14 23:00:19.306435 2025] [:error] [pid 41600:tid 41604] [client 74.225.222.232:8137] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aT7RA9FLTBZjcwNd_VtdqwAAAQE"]
[Sun Dec 14 23:00:22.572377 2025] [:error] [pid 39524:tid 39563] [client 74.225.222.232:14346] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Dec 14 23:00:23.905475 2025] [:error] [pid 39524:tid 39573] [client 74.225.222.232:14346] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aT7RB2rVGpbDzFtDE9MkdQAAAFE"]
[Sun Dec 14 23:00:25.457838 2025] [:error] [pid 13799:tid 13820] [client 74.225.222.232:14367] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aT7RCXjPEin01ElFTNZrFAAAAhI"]
[Sun Dec 14 23:00:28.737862 2025] [:error] [pid 39525:tid 39595] [client 74.225.222.232:14338] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aT7RDE1fX_pB_BrvE_5yrQAAAIw"]
[Sun Dec 14 23:00:30.298833 2025] [:error] [pid 40596:tid 40626] [client 74.225.222.232:14360] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Dec 14 23:00:33.223630 2025] [:error] [pid 40596:tid 40631] [client 74.225.222.232:14360] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/chosen.php"] [unique_id "aT7REWvZZo4N2X7WoLy9HwAAAcU"]
[Sun Dec 14 23:00:33.993826 2025] [:error] [pid 13799:tid 13822] [client 74.225.222.232:14381] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/parx.php
[Sun Dec 14 23:00:34.170675 2025] [:error] [pid 13799:tid 13817] [client 74.225.222.232:14381] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aT7REnjPEin01ElFTNZrGAAAAg8"]
[Sun Dec 14 23:00:37.076802 2025] [:error] [pid 39523:tid 39537] [client 74.225.222.232:14405] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aT7RFTQTQH1raAj2lkgKfAAAAAk"]
[Sun Dec 14 23:00:39.084340 2025] [:error] [pid 13799:tid 13825] [client 74.225.222.232:14384] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aT7RF3jPEin01ElFTNZrIAAAAhc"]
[Sun Dec 14 23:00:40.663618 2025] [:error] [pid 41600:tid 41611] [client 74.225.222.232:14336] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aT7RGNFLTBZjcwNd_VtduAAAAQg"]
[Sun Dec 14 23:00:41.778637 2025] [:error] [pid 39614:tid 39628] [client 74.225.222.232:14451] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT7RGfxybG8-9MflbDeesAAAAMw"]
[Sun Dec 14 23:00:42.684103 2025] [:error] [pid 39614:tid 39616] [client 74.225.222.232:14419] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT7RGvxybG8-9MflbDeesQAAAMA"]
[Sun Dec 14 23:00:45.281611 2025] [:error] [pid 39614:tid 39640] [client 74.225.222.232:8181] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT7RHfxybG8-9MflbDeesgAAANg"]
[Sun Dec 14 23:00:47.321854 2025] [:error] [pid 41600:tid 41608] [client 74.225.222.232:14421] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT7RH9FLTBZjcwNd_VtdvQAAAQU"]
[Sun Dec 14 23:00:49.979019 2025] [:error] [pid 39524:tid 39570] [client 74.225.222.232:14411] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT7RIWrVGpbDzFtDE9MkhwAAAE4"]
[Sun Dec 14 23:00:51.430903 2025] [:error] [pid 41600:tid 41614] [client 74.225.222.232:14456] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT7RI9FLTBZjcwNd_VtdxwAAAQs"]
[Sun Dec 14 23:00:52.412215 2025] [:error] [pid 39525:tid 39590] [client 74.225.222.232:14387] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT7RJE1fX_pB_BrvE_5yuQAAAIc"]
[Sun Dec 14 23:00:54.480227 2025] [:error] [pid 39523:tid 39548] [client 74.225.222.232:14429] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aT7RJjQTQH1raAj2lkgKogAAABQ"]
[Sun Dec 14 23:00:55.595114 2025] [:error] [pid 40595:tid 40622] [client 74.225.222.232:8173] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aT7RJ_jrht6y4RN-xKRL4gAAAZc"]
[Sun Dec 14 23:00:56.620108 2025] [:error] [pid 41600:tid 41604] [client 74.225.222.232:8128] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aT7RKNFLTBZjcwNd_Vtd2wAAAQE"]
[Sun Dec 14 23:00:58.197954 2025] [:error] [pid 40561:tid 40578] [client 74.225.222.232:8176] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aT7RKoY6r869zoqRQkT-nAAAAU0"]
[Sun Dec 14 23:00:59.094822 2025] [:error] [pid 39614:tid 39633] [client 74.225.222.232:8068] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aT7RK_xybG8-9MflbDeexQAAANE"]
[Sun Dec 14 23:01:01.716113 2025] [:error] [pid 41600:tid 41608] [client 74.225.222.232:14426] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT7RLdFLTBZjcwNd_Vtd3QAAAQU"]
[Sun Dec 14 23:01:03.355001 2025] [:error] [pid 39614:tid 39623] [client 74.225.222.232:14407] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT7RL_xybG8-9MflbDeeygAAAMc"]
[Sun Dec 14 23:01:04.445716 2025] [:error] [pid 40595:tid 40623] [client 74.225.222.232:14357] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT7RMPjrht6y4RN-xKRL7AAAAZg"]
[Sun Dec 14 23:01:05.471869 2025] [:error] [pid 39524:tid 39576] [client 74.225.222.232:14379] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aT7RMWrVGpbDzFtDE9MknAAAAFQ"]
[Sun Dec 14 23:01:06.575964 2025] [:error] [pid 39524:tid 39572] [client 74.225.222.232:14385] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT7RMmrVGpbDzFtDE9MknwAAAFA"]
[Sun Dec 14 23:01:07.684766 2025] [:error] [pid 39614:tid 39618] [client 74.225.222.232:8138] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT7RM_xybG8-9MflbDee0AAAAMI"]
[Sun Dec 14 23:01:09.209958 2025] [:error] [pid 39523:tid 39535] [client 74.225.222.232:14344] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT7RNTQTQH1raAj2lkgKxQAAAAc"]
[Sun Dec 14 23:01:10.743820 2025] [:error] [pid 40595:tid 40611] [client 74.225.222.232:14377] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aT7RNvjrht6y4RN-xKRL8QAAAYw"]
[Sun Dec 14 23:01:11.876329 2025] [:error] [pid 13799:tid 13824] [client 74.225.222.232:14337] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT7RN3jPEin01ElFTNZrNwAAAhY"]
[Sun Dec 14 23:01:13.045308 2025] [:error] [pid 39524:tid 39556] [client 74.225.222.232:14450] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT7ROWrVGpbDzFtDE9MkpwAAAEA"]
[Sun Dec 14 23:01:13.959897 2025] [:error] [pid 40596:tid 40631] [client 74.225.222.232:8147] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT7ROWvZZo4N2X7WoLy9OwAAAcU"]
[Sun Dec 14 23:01:15.389350 2025] [:error] [pid 40561:tid 40575] [client 74.225.222.232:8158] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aT7RO4Y6r869zoqRQkT-pQAAAUo"]
[Sun Dec 14 23:01:16.827748 2025] [:error] [pid 41600:tid 41625] [client 74.225.222.232:14389] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aT7RPNFLTBZjcwNd_Vtd_QAAARY"]
[Sun Dec 14 23:01:18.155844 2025] [:error] [pid 41600:tid 41609] [client 74.225.222.232:8141] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aT7RPtFLTBZjcwNd_VteBQAAAQY"]
[Sun Dec 14 23:01:18.556497 2025] [:error] [pid 39525:tid 39583] [client 74.225.222.232:8130] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aT7RPk1fX_pB_BrvE_5y0AAAAIA"]
[Sun Dec 14 23:01:19.307975 2025] [:error] [pid 39524:tid 39576] [client 74.225.222.232:14396] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aT7RP2rVGpbDzFtDE9MkzAAAAFQ"]
[Sun Dec 14 23:01:19.629238 2025] [:error] [pid 41600:tid 41603] [client 74.225.222.232:14448] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aT7RP9FLTBZjcwNd_VteCgAAAQA"]
[Sun Dec 14 23:01:20.076004 2025] [:error] [pid 39614:tid 39634] [client 74.225.222.232:14418] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aT7RQPxybG8-9MflbDefCAAAANI"]
[Sun Dec 14 23:01:20.543938 2025] [:error] [pid 13799:tid 13806] [client 74.225.222.232:14438] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aT7RQHjPEin01ElFTNZrVQAAAgQ"]
[Sun Dec 14 23:01:21.347893 2025] [:error] [pid 40595:tid 40600] [client 74.225.222.232:14340] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT7RQfjrht6y4RN-xKRMBAAAAYE"]
[Sun Dec 14 23:01:22.323502 2025] [:error] [pid 13799:tid 13802] [client 74.225.222.232:14398] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT7RQnjPEin01ElFTNZrWwAAAgA"]
[Sun Dec 14 23:01:23.176482 2025] [:error] [pid 40595:tid 40609] [client 74.225.222.232:8135] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT7RQ_jrht6y4RN-xKRMBgAAAYo"]
[Sun Dec 14 23:01:24.288244 2025] [:error] [pid 40561:tid 40584] [client 74.225.222.232:8144] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT7RRIY6r869zoqRQkT-tgAAAVM"]
[Sun Dec 14 23:01:25.166801 2025] [:error] [pid 40596:tid 40649] [client 74.225.222.232:14394] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT7RRWvZZo4N2X7WoLy9RgAAAdc"]
[Sun Dec 14 23:01:26.114205 2025] [:error] [pid 40561:tid 40575] [client 74.225.222.232:14361] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT7RRoY6r869zoqRQkT-uAAAAUo"]
[Sun Dec 14 23:01:27.397479 2025] [:error] [pid 39614:tid 39628] [client 74.225.222.232:14364] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT7RR_xybG8-9MflbDefEQAAAMw"]
[Sun Dec 14 23:01:27.733986 2025] [:error] [pid 40561:tid 40569] [client 74.225.222.232:14403] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aT7RR4Y6r869zoqRQkT-uwAAAUQ"]
[Sun Dec 14 23:01:28.300353 2025] [:error] [pid 39524:tid 39559] [client 74.225.222.232:14343] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT7RSGrVGpbDzFtDE9Mk0AAAAEM"]
[Sun Dec 14 23:01:29.437886 2025] [:error] [pid 40561:tid 40573] [client 74.225.222.232:14354] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT7RSYY6r869zoqRQkT-vAAAAUg"]
[Sun Dec 14 23:01:30.512827 2025] [:error] [pid 40596:tid 40646] [client 74.225.222.232:8188] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT7RSmvZZo4N2X7WoLy9SQAAAdQ"]
[Sun Dec 14 23:01:31.720416 2025] [:error] [pid 40596:tid 40628] [client 74.225.222.232:8139] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aT7RS2vZZo4N2X7WoLy9TgAAAcI"]
[Sun Dec 14 23:01:35.003041 2025] [:error] [pid 41600:tid 41626] [client 74.225.222.232:14442] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Dec 14 23:01:35.796732 2025] [:error] [pid 41600:tid 41607] [client 74.225.222.232:14442] [client 74.225.222.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.222.232, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aT7RT9FLTBZjcwNd_VteLwAAAQQ"]
[Sun Dec 14 23:01:36.106272 2025] [:error] [pid 41600:tid 41606] [client 74.225.222.232:14442] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aT7RUNFLTBZjcwNd_VteMQAAAQM"]
[Sun Dec 14 23:01:41.961500 2025] [:error] [pid 39523:tid 39534] [client 74.225.222.232:14353] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aT7RVTQTQH1raAj2lkgK3QAAAAY"]
[Sun Dec 14 23:01:50.096189 2025] [:error] [pid 41600:tid 41604] [client 74.225.222.232:14439] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aT7RXtFLTBZjcwNd_VteQQAAAQE"]
[Sun Dec 14 23:01:56.890389 2025] [:error] [pid 39614:tid 39634] [client 74.225.222.232:8179] [client 74.225.222.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 74.225.222.232, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aT7RZPxybG8-9MflbDefLwAAANI"]
[Sun Dec 14 23:01:57.060228 2025] [:error] [pid 39614:tid 39639] [client 74.225.222.232:8179] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aT7RZfxybG8-9MflbDefMAAAANc"]
[Sun Dec 14 23:02:03.395801 2025] [:error] [pid 39523:tid 39537] [client 74.225.222.232:14373] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aT7RazQTQH1raAj2lkgK6QAAAAk"]
[Sun Dec 14 23:02:05.423989 2025] [:error] [pid 13799:tid 13826] [client 74.225.222.232:14460] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aT7RbXjPEin01ElFTNZrawAAAhg"]
[Sun Dec 14 23:02:07.186061 2025] [:error] [pid 39525:tid 39583] [client 74.225.222.232:14412] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aT7Rb01fX_pB_BrvE_5y9wAAAIA"]
[Sun Dec 14 23:02:08.836052 2025] [:error] [pid 40596:tid 40639] [client 74.225.222.232:14406] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aT7RcGvZZo4N2X7WoLy9XQAAAc0"]
[Sun Dec 14 23:02:10.217875 2025] [:error] [pid 40595:tid 40601] [client 74.225.222.232:8080] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aT7Rcvjrht6y4RN-xKRMHQAAAYI"]
[Sun Dec 14 23:02:11.381345 2025] [:error] [pid 39524:tid 39575] [client 74.225.222.232:14366] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aT7Rc2rVGpbDzFtDE9Mk9QAAAFM"]
[Sun Dec 14 23:02:12.914080 2025] [:error] [pid 39524:tid 39577] [client 74.225.222.232:14425] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aT7RdGrVGpbDzFtDE9Mk-QAAAFU"]
[Sun Dec 14 23:02:14.360649 2025] [:error] [pid 41600:tid 41605] [client 74.225.222.232:14413] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "aT7RdtFLTBZjcwNd_VteYAAAAQI"]
[Sun Dec 14 23:02:16.714361 2025] [:error] [pid 39525:tid 39585] [client 74.225.222.232:8097] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aT7ReE1fX_pB_BrvE_5zAAAAAII"]
[Sun Dec 14 23:02:18.056184 2025] [:error] [pid 39614:tid 39621] [client 74.225.222.232:8149] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT7RevxybG8-9MflbDefOgAAAMU"]
[Sun Dec 14 23:02:19.947532 2025] [:error] [pid 39525:tid 39598] [client 74.225.222.232:14408] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT7Re01fX_pB_BrvE_5zAwAAAI8"]
[Sun Dec 14 23:02:22.743751 2025] [:error] [pid 13799:tid 13811] [client 74.225.222.232:14375] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT7RfnjPEin01ElFTNZrcAAAAgk"]
[Sun Dec 14 23:02:24.776609 2025] [:error] [pid 13799:tid 13802] [client 74.225.222.232:8162] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT7RgHjPEin01ElFTNZrcwAAAgA"]
[Sun Dec 14 23:02:27.918440 2025] [:error] [pid 40596:tid 40645] [client 74.225.222.232:14342] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aT7Rg2vZZo4N2X7WoLy9cgAAAdM"]
[Sun Dec 14 23:02:32.925255 2025] [:error] [pid 13799:tid 13804] [client 74.225.222.232:14433] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aT7RiHjPEin01ElFTNZrfAAAAgI"]
[Sun Dec 14 23:02:51.704294 2025] [:error] [pid 13799:tid 13819] [client 74.225.222.232:8169] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "aT7Rm3jPEin01ElFTNZrkwAAAhE"]
[Sun Dec 14 23:03:18.357247 2025] [:error] [pid 39524:tid 39575] [client 74.225.222.232:8145] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aT7RtmrVGpbDzFtDE9MlTAAAAFM"]
[Sun Dec 14 23:03:51.439973 2025] [:error] [pid 40561:tid 40566] [client 74.225.222.232:8165] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aT7R14Y6r869zoqRQkT_MgAAAUE"]
[Sun Dec 14 23:04:06.476771 2025] [:error] [pid 39523:tid 39539] [client 74.225.222.232:8134] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/shell.php"] [unique_id "aT7R5jQTQH1raAj2lkgLbwAAAAs"]
[Sun Dec 14 23:04:20.576138 2025] [:error] [pid 40561:tid 40577] [client 74.225.222.232:14352] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aT7R9IY6r869zoqRQkT_RAAAAUw"]
[Sun Dec 14 23:04:55.101847 2025] [:error] [pid 39525:tid 39599] [client 74.225.222.232:14422] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/fm.php"] [unique_id "aT7SF01fX_pB_BrvE_5zZwAAAJA"]
[Sun Dec 14 23:05:03.859735 2025] [:error] [pid 41600:tid 41618] [client 74.225.222.232:14443] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aT7SH9FLTBZjcwNd_VtfIAAAAQ8"]
[Sun Dec 14 23:05:10.318387 2025] [:error] [pid 40595:tid 40608] [client 74.225.222.232:8180] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aT7SJvjrht6y4RN-xKRMtgAAAYk"]
[Sun Dec 14 23:05:17.998109 2025] [:error] [pid 39614:tid 39635] [client 74.225.222.232:14410] [client 74.225.222.232] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aT7SLfxybG8-9MflbDefrQAAANM"]
[Sun Dec 14 23:05:21.042017 2025] [:error] [pid 40561:tid 40577] [client 74.225.222.232:14341] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aT7SMYY6r869zoqRQkT_XwAAAUw"]
[Sun Dec 14 23:05:23.606308 2025] [:error] [pid 13799:tid 13805] [client 74.225.222.232:14400] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Dec 14 23:05:23.753149 2025] [:error] [pid 13799:tid 13804] [client 74.225.222.232:14400] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aT7SM3jPEin01ElFTNZr_QAAAgI"]
[Sun Dec 14 23:05:25.775772 2025] [:error] [pid 39524:tid 39565] [client 74.225.222.232:14416] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/item.php"] [unique_id "aT7SNWrVGpbDzFtDE9MlkQAAAEk"]
[Sun Dec 14 23:05:29.005222 2025] [:error] [pid 39524:tid 39571] [client 74.225.222.232:14441] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aT7SOWrVGpbDzFtDE9MllgAAAE8"]
[Sun Dec 14 23:05:30.094439 2025] [:error] [pid 39523:tid 39548] [client 74.225.222.232:14457] [client 74.225.222.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aT7SOjQTQH1raAj2lkgLlgAAABQ"]
[Sun Dec 14 23:05:30.837799 2025] [:error] [pid 40561:tid 40575] [client 74.225.222.232:14421] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Dec 15 00:24:59.424986 2025] [:error] [pid 8340:tid 8380] [client 101.33.66.34:32950] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aT7k24IT4nh2qy-Ry9pJxgAAAEk"]
[Mon Dec 15 02:08:41.189399 2025] [:error] [pid 8341:tid 8419] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.com/
[Mon Dec 15 02:08:41.281822 2025] [:error] [pid 8341:tid 8406] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.fr/
[Mon Dec 15 02:08:41.373023 2025] [:error] [pid 8341:tid 8412] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.com/
[Mon Dec 15 02:08:41.555394 2025] [:error] [pid 8341:tid 8409] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://duckduckgo.com/
[Mon Dec 15 02:08:41.645482 2025] [:error] [pid 8341:tid 8422] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.com/
[Mon Dec 15 02:08:41.827280 2025] [:error] [pid 8341:tid 8415] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://duckduckgo.com/
[Mon Dec 15 02:08:41.918276 2025] [:error] [pid 8341:tid 8404] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://duckduckgo.com/
[Mon Dec 15 02:08:42.109702 2025] [:error] [pid 8341:tid 8413] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://www.google.fr/
[Mon Dec 15 02:08:42.201094 2025] [:error] [pid 8341:tid 8405] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: https://www.google.fr/
[Mon Dec 15 02:08:42.292772 2025] [:error] [pid 8341:tid 8407] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://duckduckgo.com/
[Mon Dec 15 02:08:42.745911 2025] [:error] [pid 8341:tid 8400] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.bing.com/
[Mon Dec 15 02:08:42.834172 2025] [:error] [pid 8341:tid 8403] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.com/
[Mon Dec 15 02:08:42.924312 2025] [:error] [pid 8341:tid 8401] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Mon Dec 15 02:08:43.016471 2025] [:error] [pid 8341:tid 8414] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.de/
[Mon Dec 15 02:08:43.107125 2025] [:error] [pid 8341:tid 8418] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Mon Dec 15 02:08:43.199097 2025] [:error] [pid 8341:tid 8421] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.co.uk/
[Mon Dec 15 02:08:43.652601 2025] [:error] [pid 8341:tid 8421] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.yahoo.com/
[Mon Dec 15 02:08:43.743016 2025] [:error] [pid 8341:tid 8419] [client 4.194.76.130:13605] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://www.bing.com/
[Mon Dec 15 02:08:44.193449 2025] [:error] [pid 8341:tid 8402] [client 4.194.76.130:13605] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aT79LBOat6dLvzj8EhTlfwAAAIQ"], referer: https://www.google.fr/
[Mon Dec 15 02:08:44.460922 2025] [:error] [pid 8430:tid 8456] [client 4.194.76.130:21538] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aT79LFk7yXaRc6dQclg1XQAAANc"], referer: https://www.google.co.uk/
[Mon Dec 15 02:08:44.733421 2025] [:error] [pid 56645:tid 56652] [client 4.194.76.130:13587] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://www.yahoo.com/
[Mon Dec 15 02:08:44.823974 2025] [:error] [pid 56645:tid 56658] [client 4.194.76.130:13587] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.co.uk/
[Mon Dec 15 02:08:44.914545 2025] [:error] [pid 56645:tid 56670] [client 4.194.76.130:13587] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.de/
[Mon Dec 15 02:08:45.006143 2025] [:error] [pid 56645:tid 56649] [client 4.194.76.130:13587] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://duckduckgo.com/
[Mon Dec 15 02:08:45.096711 2025] [:error] [pid 56645:tid 56664] [client 4.194.76.130:13587] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.bing.com/
[Mon Dec 15 02:08:45.187444 2025] [:error] [pid 56645:tid 56660] [client 4.194.76.130:13587] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Mon Dec 15 02:08:45.280361 2025] [:error] [pid 56645:tid 56662] [client 4.194.76.130:13587] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.yahoo.com/
[Mon Dec 15 02:08:46.936427 2025] [:error] [pid 56645:tid 56654] [client 4.194.76.130:13587] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aT79Lq__GSueqKs4nBnNrwAAAUY"], referer: https://www.bing.com/
[Mon Dec 15 02:08:47.111891 2025] [:error] [pid 8339:tid 8347] [client 4.194.76.130:26511] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aT79L7lqE6mJc-Y6giNBNAAAAAQ"], referer: https://www.google.de/
[Mon Dec 15 02:08:47.470088 2025] [:error] [pid 8341:tid 8411] [client 4.194.76.130:12072] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aT79LxOat6dLvzj8EhTlhAAAAI0"], referer: https://www.google.de/
[Mon Dec 15 02:08:47.829204 2025] [:error] [pid 8430:tid 8449] [client 4.194.76.130:21630] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aT79L1k7yXaRc6dQclg1YQAAANA"], referer: https://duckduckgo.com/
[Mon Dec 15 02:08:48.023589 2025] [:error] [pid 8339:tid 8361] [client 4.194.76.130:23521] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aT79MLlqE6mJc-Y6giNBOAAAABI"], referer: https://www.yahoo.com/
[Mon Dec 15 02:08:48.197376 2025] [:error] [pid 9009:tid 9017] [client 4.194.76.130:12059] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT79MAhxwdgwYWQ8h8WgnQAAAQY"], referer: https://www.yahoo.com/
[Mon Dec 15 02:08:48.374781 2025] [:error] [pid 8430:tid 8450] [client 4.194.76.130:20824] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aT79MFk7yXaRc6dQclg1YgAAANE"], referer: https://www.bing.com/
[Mon Dec 15 02:08:48.550515 2025] [:error] [pid 8339:tid 8365] [client 4.194.76.130:23878] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aT79MLlqE6mJc-Y6giNBPQAAABY"], referer: https://www.google.com/
[Mon Dec 15 02:08:48.816945 2025] [:error] [pid 9009:tid 9024] [client 4.194.76.130:17085] [client 4.194.76.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aT79MAhxwdgwYWQ8h8WgnwAAAQ0"], referer: https://www.google.de/
[Mon Dec 15 02:59:18.356245 2025] [:error] [pid 56645:tid 56659] [client 170.106.110.146:33006] [client 170.106.110.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aT8JBq__GSueqKs4nBnYxwAAAUs"]
[Mon Dec 15 03:48:05.738730 2025] [:error] [pid 55904:tid 55963] [client 192.144.148.122:45798] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aT8UdTjnzi_KlarhcWEiAgAAAE0"]
[Mon Dec 15 10:03:00.210977 2025] [:error] [pid 35019:tid 35026] [client 162.62.231.139:48528] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aT9sVK2LAdKSfjdLIKISJgAAAAM"]
[Mon Dec 15 12:19:19.864868 2025] [:error] [pid 39829:tid 39891] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Dec 15 12:19:20.135732 2025] [:error] [pid 39829:tid 39897] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Dec 15 12:19:20.405807 2025] [:error] [pid 39829:tid 39904] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Mon Dec 15 12:19:20.677273 2025] [:error] [pid 39829:tid 39908] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Mon Dec 15 12:19:20.947216 2025] [:error] [pid 39829:tid 39887] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Mon Dec 15 12:19:21.218981 2025] [:error] [pid 39829:tid 39889] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Mon Dec 15 12:19:21.490382 2025] [:error] [pid 39829:tid 39892] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Dec 15 12:19:22.031523 2025] [:error] [pid 39829:tid 39907] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Dec 15 12:19:22.301692 2025] [:error] [pid 39829:tid 39901] [client 52.138.143.75:10749] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon Dec 15 12:19:22.568710 2025] [:error] [pid 39829:tid 39900] [client 52.138.143.75:10749] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "aT-MSmegGfxg5ldkNehjPAAAAY8"]
[Mon Dec 15 12:19:23.104700 2025] [:error] [pid 39829:tid 39898] [client 52.138.143.75:1255] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "aT-MS2egGfxg5ldkNehjPQAAAY0"]
[Mon Dec 15 12:19:23.638623 2025] [:error] [pid 39829:tid 39888] [client 52.138.143.75:4871] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "aT-MS2egGfxg5ldkNehjPgAAAYM"]
[Mon Dec 15 12:19:24.173671 2025] [:error] [pid 39826:tid 39836] [client 52.138.143.75:8988] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aT-MTIdXWIOU_2oL0XY_ngAAAIU"]
[Mon Dec 15 12:19:24.708531 2025] [:error] [pid 39829:tid 39885] [client 52.138.143.75:1254] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/npcs7k.php"] [unique_id "aT-MTGegGfxg5ldkNehjQQAAAYA"]
[Mon Dec 15 12:19:25.242759 2025] [:error] [pid 44555:tid 44573] [client 52.138.143.75:9446] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/npcs7k.php"] [unique_id "aT-MTWDHW0g-e9AKPr7JdAAAAFA"]
[Mon Dec 15 12:19:25.778670 2025] [:error] [pid 44555:tid 44572] [client 52.138.143.75:1037] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/npcs7k.php"] [unique_id "aT-MTWDHW0g-e9AKPr7JdgAAAE8"]
[Mon Dec 15 12:19:26.314487 2025] [:error] [pid 44555:tid 44559] [client 52.138.143.75:1300] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/npcs7k.php"] [unique_id "aT-MTmDHW0g-e9AKPr7JeAAAAEI"]
[Mon Dec 15 12:19:26.844453 2025] [:error] [pid 39828:tid 39864] [client 52.138.143.75:4910] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT-MTu0Kj9XWFkRmVbTlZQAAAMY"]
[Mon Dec 15 12:19:27.369045 2025] [:error] [pid 44555:tid 44574] [client 52.138.143.75:7729] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT-MT2DHW0g-e9AKPr7JfwAAAFE"]
[Mon Dec 15 12:19:27.897927 2025] [:error] [pid 39826:tid 39840] [client 52.138.143.75:4555] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT-MT4dXWIOU_2oL0XY_pAAAAIk"]
[Mon Dec 15 12:19:28.432822 2025] [:error] [pid 39829:tid 39906] [client 52.138.143.75:7707] [client 52.138.143.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT-MUGegGfxg5ldkNehjSAAAAZU"]
[Mon Dec 15 13:05:02.792472 2025] [:error] [pid 39829:tid 39907] [client 159.65.20.200:58881] [client 159.65.20.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.20.200, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aT-W_megGfxg5ldkNehzUgAAAZY"]
[Mon Dec 15 13:05:02.796532 2025] [:error] [pid 39829:tid 39907] [client 159.65.20.200:58881] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Dec 15 17:42:08.296847 2025] [:error] [pid 31372:tid 31380] [client 34.73.241.105:57785] [client 34.73.241.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.241.105, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aT_X8AN06qRtpJxyxHhYJAAAAIQ"]
[Mon Dec 15 17:42:08.300781 2025] [:error] [pid 31372:tid 31380] [client 34.73.241.105:57785] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 15 17:42:11.312005 2025] [:error] [pid 31372:tid 31390] [client 34.73.241.105:57785] [client 34.73.241.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aT_X8wN06qRtpJxyxHhYOQAAAI4"]
[Mon Dec 15 17:42:11.755800 2025] [:error] [pid 31374:tid 31432] [client 34.73.241.105:52413] [client 34.73.241.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aT_X85zSh8b7uk6RWiEN6QAAAEA"]
[Mon Dec 15 17:42:12.306651 2025] [:error] [pid 31372:tid 31393] [client 34.73.241.105:54687] [client 34.73.241.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aT_X9AN06qRtpJxyxHhYQAAAAJE"]
[Mon Dec 15 17:42:12.796371 2025] [:error] [pid 31373:tid 31425] [client 34.73.241.105:64300] [client 34.73.241.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aT_X9HFdnrU7ASwItVKUNgAAANQ"]
[Mon Dec 15 17:42:13.230350 2025] [:error] [pid 31374:tid 31438] [client 34.73.241.105:62527] [client 34.73.241.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aT_X9ZzSh8b7uk6RWiEN7AAAAEY"]
[Mon Dec 15 17:42:13.712320 2025] [:error] [pid 31374:tid 31441] [client 34.73.241.105:64435] [client 34.73.241.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aT_X9ZzSh8b7uk6RWiEN7QAAAEk"]
[Mon Dec 15 17:42:14.201312 2025] [:error] [pid 31374:tid 31436] [client 34.73.241.105:55278] [client 34.73.241.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aT_X9pzSh8b7uk6RWiEN7wAAAEQ"]
[Mon Dec 15 18:20:27.681796 2025] [:error] [pid 31374:tid 31455] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/berlin.php
[Mon Dec 15 18:20:27.948809 2025] [:error] [pid 31374:tid 31452] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Dec 15 18:20:28.040092 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/xz89.php
[Mon Dec 15 18:20:28.231672 2025] [:error] [pid 31374:tid 31450] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/lopst.php
[Mon Dec 15 18:20:28.322038 2025] [:error] [pid 31374:tid 31442] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/wsvvs.php
[Mon Dec 15 18:20:28.429831 2025] [:error] [pid 31374:tid 31441] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/vbbn.php
[Mon Dec 15 18:20:28.520706 2025] [:error] [pid 31374:tid 31439] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/pn.php
[Mon Dec 15 18:20:28.610696 2025] [:error] [pid 31374:tid 31454] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/fz.php
[Mon Dec 15 18:20:28.738398 2025] [:error] [pid 31374:tid 31437] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/sang.php
[Mon Dec 15 18:20:28.938661 2025] [:error] [pid 31374:tid 31447] [client 4.194.73.234:22233] File does not exist: /usr/local/apache/htdocs/suspended-page/0o0.php
[Mon Dec 15 18:20:29.052222 2025] [:error] [pid 31374:tid 31432] [client 4.194.73.234:22233] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aT_g7ZzSh8b7uk6RWiEkvAAAAEA"]
[Mon Dec 15 18:20:30.545672 2025] [:error] [pid 31373:tid 31409] [client 4.194.73.234:22158] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aT_g7nFdnrU7ASwItVKl_AAAAMQ"]
[Mon Dec 15 18:20:32.397801 2025] [:error] [pid 31374:tid 31439] [client 4.194.73.234:22213] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aT_g8JzSh8b7uk6RWiEkxAAAAEc"]
[Mon Dec 15 18:20:33.525275 2025] [:error] [pid 31373:tid 31417] [client 4.194.73.234:22229] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aT_g8XFdnrU7ASwItVKmBQAAAMw"]
[Mon Dec 15 18:20:34.602215 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:22269] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aT_g8jqerS0TDpViRzsgWgAAABI"]
[Mon Dec 15 18:20:35.952151 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:22255] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aT_g8zqerS0TDpViRzsgkwAAABU"]
[Mon Dec 15 18:20:37.013935 2025] [:error] [pid 31373:tid 31422] [client 4.194.73.234:22225] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aT_g9XFdnrU7ASwItVKmLAAAANE"]
[Mon Dec 15 18:20:38.107858 2025] [:error] [pid 31372:tid 31387] [client 4.194.73.234:22163] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aT_g9gN06qRtpJxyxHhqGAAAAIs"]
[Mon Dec 15 18:20:38.757956 2025] [:error] [pid 31459:tid 31475] [client 4.194.73.234:22214] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT_g9jqerS0TDpViRzsgpAAAAA4"]
[Mon Dec 15 18:20:39.553496 2025] [:error] [pid 31374:tid 31448] [client 4.194.73.234:22164] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT_g95zSh8b7uk6RWiElIgAAAFA"]
[Mon Dec 15 18:20:40.223229 2025] [:error] [pid 31374:tid 31452] [client 4.194.73.234:22186] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT_g-JzSh8b7uk6RWiElJAAAAFQ"]
[Mon Dec 15 18:20:40.891622 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:22250] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aT_g-JzSh8b7uk6RWiElJgAAAEM"]
[Mon Dec 15 18:20:41.966743 2025] [:error] [pid 31459:tid 31480] [client 4.194.73.234:22144] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aT_g-TqerS0TDpViRzsgpwAAABM"]
[Mon Dec 15 18:20:44.006661 2025] [:error] [pid 31459:tid 31464] [client 4.194.73.234:22253] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aT_g_DqerS0TDpViRzsgrgAAAAM"]
[Mon Dec 15 18:20:45.818011 2025] [:error] [pid 31372:tid 31391] [client 4.194.73.234:22232] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aT_g_QN06qRtpJxyxHhqHwAAAI8"]
[Mon Dec 15 18:20:46.647742 2025] [:error] [pid 31373:tid 31418] [client 4.194.73.234:22226] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aT_g_nFdnrU7ASwItVKmNgAAAM0"]
[Mon Dec 15 18:20:46.969421 2025] [:error] [pid 31372:tid 31382] [client 4.194.73.234:22146] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aT_g_gN06qRtpJxyxHhqIAAAAIY"]
[Mon Dec 15 18:20:47.823561 2025] [:error] [pid 31459:tid 31461] [client 4.194.73.234:22148] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aT_g_zqerS0TDpViRzsgywAAAAA"]
[Mon Dec 15 18:20:48.226117 2025] [:error] [pid 31374:tid 31447] [client 4.194.73.234:22231] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aT_hAJzSh8b7uk6RWiElMgAAAE8"]
[Mon Dec 15 18:20:48.664005 2025] [:error] [pid 31459:tid 31485] [client 4.194.73.234:22257] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aT_hADqerS0TDpViRzsg2gAAABg"]
[Mon Dec 15 18:20:49.129663 2025] [:error] [pid 31459:tid 31474] [client 4.194.73.234:22228] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hATqerS0TDpViRzsg3gAAAA0"]
[Mon Dec 15 18:20:49.369596 2025] [:error] [pid 31459:tid 31467] [client 4.194.73.234:22190] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hATqerS0TDpViRzsg3wAAAAY"]
[Mon Dec 15 18:20:49.807519 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:22247] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hAQN06qRtpJxyxHhqJAAAAIQ"]
[Mon Dec 15 18:20:50.341624 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:22266] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hAjqerS0TDpViRzsg5QAAABU"]
[Mon Dec 15 18:20:51.072652 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:22215] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aT_hAzqerS0TDpViRzsg5gAAAAs"]
[Mon Dec 15 18:20:51.321272 2025] [:error] [pid 31372:tid 31386] [client 4.194.73.234:22263] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aT_hAwN06qRtpJxyxHhqKQAAAIo"]
[Mon Dec 15 18:20:52.217787 2025] [:error] [pid 31459:tid 31466] [client 4.194.73.234:22185] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aT_hBDqerS0TDpViRzsg6wAAAAU"]
[Mon Dec 15 18:20:53.189084 2025] [:error] [pid 31372:tid 31391] [client 4.194.73.234:22157] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aT_hBQN06qRtpJxyxHhqLgAAAI8"]
[Mon Dec 15 18:20:53.903597 2025] [:error] [pid 31374:tid 31445] [client 4.194.73.234:10185] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aT_hBZzSh8b7uk6RWiElOwAAAE0"]
[Mon Dec 15 18:20:54.807597 2025] [:error] [pid 31374:tid 31452] [client 4.194.73.234:22245] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aT_hBpzSh8b7uk6RWiElPQAAAFQ"]
[Mon Dec 15 18:20:56.190814 2025] [:error] [pid 31373:tid 31415] [client 4.194.73.234:22147] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aT_hCHFdnrU7ASwItVKmYwAAAMo"]
[Mon Dec 15 18:20:57.374658 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:22210] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aT_hCTqerS0TDpViRzsg9wAAABU"]
[Mon Dec 15 18:20:58.121917 2025] [:error] [pid 31374:tid 31434] [client 4.194.73.234:22258] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aT_hCpzSh8b7uk6RWiElRwAAAEI"]
[Mon Dec 15 18:20:58.872401 2025] [:error] [pid 31373:tid 31418] [client 4.194.73.234:22171] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aT_hCnFdnrU7ASwItVKmZgAAAM0"]
[Mon Dec 15 18:20:59.182500 2025] [:error] [pid 31374:tid 31445] [client 4.194.73.234:22168] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aT_hC5zSh8b7uk6RWiElSgAAAE0"]
[Mon Dec 15 18:20:59.629883 2025] [:error] [pid 31374:tid 31455] [client 4.194.73.234:22243] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aT_hC5zSh8b7uk6RWiElTAAAAFc"]
[Mon Dec 15 18:21:00.138083 2025] [:error] [pid 31372:tid 31400] [client 4.194.73.234:22211] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aT_hDAN06qRtpJxyxHhqMwAAAJg"]
[Mon Dec 15 18:21:00.704532 2025] [:error] [pid 31374:tid 31446] [client 4.194.73.234:10206] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aT_hDJzSh8b7uk6RWiElUwAAAE4"]
[Mon Dec 15 18:21:01.071743 2025] [:error] [pid 31459:tid 31481] [client 4.194.73.234:22246] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aT_hDTqerS0TDpViRzsg-QAAABQ"]
[Mon Dec 15 18:21:01.428106 2025] [:error] [pid 31373:tid 31416] [client 4.194.73.234:10214] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aT_hDXFdnrU7ASwItVKmagAAAMs"]
[Mon Dec 15 18:21:01.723512 2025] [:error] [pid 31373:tid 31428] [client 4.194.73.234:22271] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aT_hDXFdnrU7ASwItVKmawAAANc"]
[Mon Dec 15 18:21:02.043609 2025] [:error] [pid 31373:tid 31417] [client 4.194.73.234:22218] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aT_hDnFdnrU7ASwItVKmbQAAAMw"]
[Mon Dec 15 18:21:02.426762 2025] [:error] [pid 31373:tid 31415] [client 4.194.73.234:22177] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aT_hDnFdnrU7ASwItVKmbgAAAMo"]
[Mon Dec 15 18:21:02.697138 2025] [:error] [pid 31373:tid 31412] [client 4.194.73.234:22238] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aT_hDnFdnrU7ASwItVKmcAAAAMc"]
[Mon Dec 15 18:21:03.054448 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:22208] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aT_hDzqerS0TDpViRzsg_wAAABc"]
[Mon Dec 15 18:21:03.503438 2025] [:error] [pid 31459:tid 31461] [client 4.194.73.234:22234] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aT_hDzqerS0TDpViRzshAAAAAAA"]
[Mon Dec 15 18:21:04.026164 2025] [:error] [pid 31459:tid 31469] [client 4.194.73.234:22173] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aT_hEDqerS0TDpViRzshAQAAAAg"]
[Mon Dec 15 18:21:04.502986 2025] [:error] [pid 31374:tid 31446] [client 4.194.73.234:22251] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aT_hEJzSh8b7uk6RWiElWAAAAE4"]
[Mon Dec 15 18:21:05.082303 2025] [:error] [pid 31374:tid 31434] [client 4.194.73.234:22169] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT_hEZzSh8b7uk6RWiElYgAAAEI"]
[Mon Dec 15 18:21:05.651986 2025] [:error] [pid 31459:tid 31464] [client 4.194.73.234:22260] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT_hETqerS0TDpViRzshGgAAAAM"]
[Mon Dec 15 18:21:05.942602 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:10208] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT_hETqerS0TDpViRzshIAAAABI"]
[Mon Dec 15 18:21:06.347419 2025] [:error] [pid 31374:tid 31441] [client 4.194.73.234:22187] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aT_hEpzSh8b7uk6RWiEldQAAAEk"]
[Mon Dec 15 18:21:07.210353 2025] [:error] [pid 31374:tid 31437] [client 4.194.73.234:22203] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aT_hE5zSh8b7uk6RWiElkAAAAEU"]
[Mon Dec 15 18:21:07.649971 2025] [:error] [pid 31459:tid 31478] [client 4.194.73.234:22152] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aT_hEzqerS0TDpViRzshRQAAABE"]
[Mon Dec 15 18:21:08.215035 2025] [:error] [pid 31459:tid 31475] [client 4.194.73.234:22196] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aT_hFDqerS0TDpViRzshTwAAAA4"]
[Mon Dec 15 18:21:08.520126 2025] [:error] [pid 31374:tid 31444] [client 4.194.73.234:10180] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aT_hFJzSh8b7uk6RWiElqgAAAEw"]
[Mon Dec 15 18:21:08.980083 2025] [:error] [pid 31373:tid 31429] [client 4.194.73.234:10226] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aT_hFHFdnrU7ASwItVKmkgAAANg"]
[Mon Dec 15 18:21:09.915837 2025] [:error] [pid 31372:tid 31381] [client 4.194.73.234:10221] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aT_hFQN06qRtpJxyxHhqOQAAAIU"]
[Mon Dec 15 18:21:10.295961 2025] [:error] [pid 31374:tid 31442] [client 4.194.73.234:22223] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aT_hFpzSh8b7uk6RWiElrwAAAEo"]
[Mon Dec 15 18:21:10.944127 2025] [:error] [pid 31374:tid 31432] [client 4.194.73.234:22209] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aT_hFpzSh8b7uk6RWiElsQAAAEA"]
[Mon Dec 15 18:21:11.345707 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:22181] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aT_hFzqerS0TDpViRzshWQAAABI"]
[Mon Dec 15 18:21:11.844748 2025] [:error] [pid 31459:tid 31485] [client 4.194.73.234:22256] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aT_hFzqerS0TDpViRzshWgAAABg"]
[Mon Dec 15 18:21:12.285352 2025] [:error] [pid 31372:tid 31384] [client 4.194.73.234:22230] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aT_hGAN06qRtpJxyxHhqPwAAAIg"]
[Mon Dec 15 18:21:12.708722 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:22262] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aT_hGAN06qRtpJxyxHhqQQAAAIQ"]
[Mon Dec 15 18:21:13.112358 2025] [:error] [pid 31372:tid 31377] [client 4.194.73.234:22248] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aT_hGQN06qRtpJxyxHhqQgAAAIE"]
[Mon Dec 15 18:21:13.805024 2025] [:error] [pid 31372:tid 31390] [client 4.194.73.234:22161] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aT_hGQN06qRtpJxyxHhqRgAAAI4"]
[Mon Dec 15 18:21:14.237905 2025] [:error] [pid 31372:tid 31392] [client 4.194.73.234:22195] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aT_hGgN06qRtpJxyxHhqSAAAAJA"]
[Mon Dec 15 18:21:15.002292 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:22179] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aT_hGwN06qRtpJxyxHhqSwAAAJU"]
[Mon Dec 15 18:21:16.459266 2025] [:error] [pid 31373:tid 31408] [client 4.194.73.234:22154] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aT_hHHFdnrU7ASwItVKmnAAAAMM"]
[Mon Dec 15 18:21:17.285356 2025] [:error] [pid 31372:tid 31394] [client 4.194.73.234:22160] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aT_hHQN06qRtpJxyxHhqTgAAAJI"]
[Mon Dec 15 18:21:18.005822 2025] [:error] [pid 31374:tid 31453] [client 4.194.73.234:22207] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aT_hHpzSh8b7uk6RWiEluAAAAFU"]
[Mon Dec 15 18:21:19.198794 2025] [:error] [pid 31373:tid 31429] [client 4.194.73.234:22188] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aT_hH3FdnrU7ASwItVKmoQAAANg"]
[Mon Dec 15 18:21:20.091456 2025] [:error] [pid 31373:tid 31416] [client 4.194.73.234:10209] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aT_hIHFdnrU7ASwItVKmogAAAMs"]
[Mon Dec 15 18:21:20.779578 2025] [:error] [pid 31372:tid 31394] [client 4.194.73.234:10207] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aT_hIAN06qRtpJxyxHhqYQAAAJI"]
[Mon Dec 15 18:21:21.457561 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:22224] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aT_hIQN06qRtpJxyxHhqYgAAAIQ"]
[Mon Dec 15 18:21:21.739730 2025] [:error] [pid 31372:tid 31399] [client 4.194.73.234:22184] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aT_hIQN06qRtpJxyxHhqYwAAAJc"]
[Mon Dec 15 18:21:22.047737 2025] [:error] [pid 31373:tid 31422] [client 4.194.73.234:22189] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aT_hInFdnrU7ASwItVKmpgAAANE"]
[Mon Dec 15 18:21:22.528012 2025] [:error] [pid 31374:tid 31438] [client 4.194.73.234:22167] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aT_hIpzSh8b7uk6RWiEl0gAAAEY"]
[Mon Dec 15 18:21:22.821642 2025] [:error] [pid 31373:tid 31423] [client 4.194.73.234:22249] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aT_hInFdnrU7ASwItVKmpwAAANI"]
[Mon Dec 15 18:21:23.165413 2025] [:error] [pid 31374:tid 31440] [client 4.194.73.234:10194] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aT_hI5zSh8b7uk6RWiEl1AAAAEg"]
[Mon Dec 15 18:21:23.412885 2025] [:error] [pid 31374:tid 31452] [client 4.194.73.234:22236] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aT_hI5zSh8b7uk6RWiEl1gAAAFQ"]
[Mon Dec 15 18:21:23.738504 2025] [:error] [pid 31459:tid 31471] [client 4.194.73.234:22159] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aT_hIzqerS0TDpViRzshYwAAAAo"]
[Mon Dec 15 18:21:24.270005 2025] [:error] [pid 31373:tid 31420] [client 4.194.73.234:22176] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aT_hJHFdnrU7ASwItVKmqQAAAM8"]
[Mon Dec 15 18:21:24.618085 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:10184] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aT_hJJzSh8b7uk6RWiEl1wAAAEM"]
[Mon Dec 15 18:21:24.936055 2025] [:error] [pid 31459:tid 31476] [client 4.194.73.234:22244] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aT_hJDqerS0TDpViRzshaAAAAA8"]
[Mon Dec 15 18:21:25.257742 2025] [:error] [pid 31373:tid 31424] [client 4.194.73.234:22264] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aT_hJXFdnrU7ASwItVKmqgAAANM"]
[Mon Dec 15 18:21:25.918574 2025] [:error] [pid 31459:tid 31462] [client 4.194.73.234:10124] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aT_hJTqerS0TDpViRzshbAAAAAE"]
[Mon Dec 15 18:21:26.210293 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:22200] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aT_hJjqerS0TDpViRzshcAAAAAs"]
[Mon Dec 15 18:21:26.550184 2025] [:error] [pid 31459:tid 31468] [client 4.194.73.234:10219] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aT_hJjqerS0TDpViRzshcgAAAAc"]
[Mon Dec 15 18:21:26.847218 2025] [:error] [pid 31459:tid 31476] [client 4.194.73.234:22170] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aT_hJjqerS0TDpViRzshdAAAAA8"]
[Mon Dec 15 18:21:27.178019 2025] [:error] [pid 31373:tid 31411] [client 4.194.73.234:22270] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aT_hJ3FdnrU7ASwItVKmrgAAAMY"]
[Mon Dec 15 18:21:27.441421 2025] [:error] [pid 31372:tid 31378] [client 4.194.73.234:10153] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aT_hJwN06qRtpJxyxHhqZwAAAII"]
[Mon Dec 15 18:21:27.745800 2025] [:error] [pid 31459:tid 31466] [client 4.194.73.234:22172] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aT_hJzqerS0TDpViRzshegAAAAU"]
[Mon Dec 15 18:21:28.275629 2025] [:error] [pid 31372:tid 31387] [client 4.194.73.234:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Dec 15 18:21:28.366669 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Dec 15 18:21:28.460823 2025] [:error] [pid 31372:tid 31396] [client 4.194.73.234:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Dec 15 18:21:28.557161 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Dec 15 18:21:28.707106 2025] [:error] [pid 31372:tid 31399] [client 4.194.73.234:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Dec 15 18:21:28.798860 2025] [:error] [pid 31372:tid 31395] [client 4.194.73.234:10222] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aT_hKAN06qRtpJxyxHhqcAAAAJM"]
[Mon Dec 15 18:21:29.183732 2025] [:error] [pid 31459:tid 31478] [client 4.194.73.234:10134] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Dec 15 18:21:29.273829 2025] [:error] [pid 31459:tid 31465] [client 4.194.73.234:10134] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon Dec 15 18:21:29.382276 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:10134] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon Dec 15 18:21:29.728495 2025] [:error] [pid 31459:tid 31466] [client 4.194.73.234:10134] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Dec 15 18:21:29.816133 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:10134] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aT_hKTqerS0TDpViRzshiQAAABI"]
[Mon Dec 15 18:21:30.454956 2025] [:error] [pid 31459:tid 31471] [client 4.194.73.234:10191] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aT_hKjqerS0TDpViRzshiwAAAAo"]
[Mon Dec 15 18:21:31.115278 2025] [:error] [pid 31459:tid 31464] [client 4.194.73.234:22166] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aT_hKzqerS0TDpViRzshjwAAAAM"]
[Mon Dec 15 18:21:31.597468 2025] [:error] [pid 31373:tid 31409] [client 4.194.73.234:22150] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aT_hK3FdnrU7ASwItVKmtgAAAMQ"]
[Mon Dec 15 18:21:32.196635 2025] [:error] [pid 31459:tid 31468] [client 4.194.73.234:10149] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT_hLDqerS0TDpViRzshkgAAAAc"]
[Mon Dec 15 18:21:32.579571 2025] [:error] [pid 31459:tid 31471] [client 4.194.73.234:10210] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT_hLDqerS0TDpViRzshlAAAAAo"]
[Mon Dec 15 18:21:33.082265 2025] [:error] [pid 31374:tid 31446] [client 4.194.73.234:22216] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT_hLZzSh8b7uk6RWiEl4wAAAE4"]
[Mon Dec 15 18:21:33.417123 2025] [:error] [pid 31372:tid 31384] [client 4.194.73.234:22235] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aT_hLQN06qRtpJxyxHhqeQAAAIg"]
[Mon Dec 15 18:21:34.029802 2025] [:error] [pid 31372:tid 31376] [client 4.194.73.234:22240] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aT_hLgN06qRtpJxyxHhqfAAAAIA"]
[Mon Dec 15 18:21:34.474345 2025] [:error] [pid 31373:tid 31411] [client 4.194.73.234:10128] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aT_hLnFdnrU7ASwItVKmugAAAMY"]
[Mon Dec 15 18:21:34.766491 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:10200] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aT_hLjqerS0TDpViRzshlgAAABA"]
[Mon Dec 15 18:21:35.140741 2025] [:error] [pid 31459:tid 31466] [client 4.194.73.234:10122] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aT_hLzqerS0TDpViRzshmgAAAAU"]
[Mon Dec 15 18:21:35.400408 2025] [:error] [pid 31372:tid 31400] [client 4.194.73.234:22212] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aT_hLwN06qRtpJxyxHhqfwAAAJg"]
[Mon Dec 15 18:21:35.766439 2025] [:error] [pid 31459:tid 31471] [client 4.194.73.234:22261] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aT_hLzqerS0TDpViRzshnQAAAAo"]
[Mon Dec 15 18:21:36.143647 2025] [:error] [pid 31372:tid 31386] [client 4.194.73.234:22259] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aT_hMAN06qRtpJxyxHhqgQAAAIo"]
[Mon Dec 15 18:21:36.521762 2025] [:error] [pid 31372:tid 31391] [client 4.194.73.234:10239] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aT_hMAN06qRtpJxyxHhqggAAAI8"]
[Mon Dec 15 18:21:36.921669 2025] [:error] [pid 31373:tid 31405] [client 4.194.73.234:22241] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hMHFdnrU7ASwItVKmwAAAAMA"]
[Mon Dec 15 18:21:37.224968 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:22149] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hMZzSh8b7uk6RWiEl6gAAAEM"]
[Mon Dec 15 18:21:37.491021 2025] [:error] [pid 31373:tid 31412] [client 4.194.73.234:22156] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hMXFdnrU7ASwItVKmwgAAAMc"]
[Mon Dec 15 18:21:37.742953 2025] [:error] [pid 31373:tid 31425] [client 4.194.73.234:22174] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aT_hMXFdnrU7ASwItVKmxAAAANQ"]
[Mon Dec 15 18:21:38.201825 2025] [:error] [pid 31374:tid 31436] [client 4.194.73.234:10179] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT_hMpzSh8b7uk6RWiEl7QAAAEQ"]
[Mon Dec 15 18:21:38.618646 2025] [:error] [pid 31373:tid 31413] [client 4.194.73.234:22204] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT_hMnFdnrU7ASwItVKmyQAAAMg"]
[Mon Dec 15 18:21:38.971621 2025] [:error] [pid 31374:tid 31443] [client 4.194.73.234:22227] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT_hMpzSh8b7uk6RWiEl8AAAAEs"]
[Mon Dec 15 18:21:39.718420 2025] [:error] [pid 31373:tid 31429] [client 4.194.73.234:22191] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aT_hM3FdnrU7ASwItVKmygAAANg"]
[Mon Dec 15 18:21:40.296994 2025] [:error] [pid 31372:tid 31386] [client 4.194.73.234:10215] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aT_hNAN06qRtpJxyxHhqiAAAAIo"]
[Mon Dec 15 18:21:40.581945 2025] [:error] [pid 31372:tid 31393] [client 4.194.73.234:10195] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aT_hNAN06qRtpJxyxHhqiQAAAJE"]
[Mon Dec 15 18:21:40.897221 2025] [:error] [pid 31372:tid 31379] [client 4.194.73.234:10181] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aT_hNAN06qRtpJxyxHhqigAAAIM"]
[Mon Dec 15 18:21:41.344002 2025] [:error] [pid 31373:tid 31424] [client 4.194.73.234:22183] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aT_hNXFdnrU7ASwItVKmzQAAANM"]
[Mon Dec 15 18:21:41.659677 2025] [:error] [pid 31372:tid 31381] [client 4.194.73.234:10132] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aT_hNQN06qRtpJxyxHhqjQAAAIU"]
[Mon Dec 15 18:21:42.021336 2025] [:error] [pid 31459:tid 31483] [client 4.194.73.234:22205] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aT_hNjqerS0TDpViRzshpgAAABY"]
[Mon Dec 15 18:21:42.396446 2025] [:error] [pid 31372:tid 31392] [client 4.194.73.234:10232] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aT_hNgN06qRtpJxyxHhqjgAAAJA"]
[Mon Dec 15 18:21:42.655597 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:9737] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aT_hNpzSh8b7uk6RWiEl9QAAAEM"]
[Mon Dec 15 18:21:42.905506 2025] [:error] [pid 31374:tid 31449] [client 4.194.73.234:22162] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT_hNpzSh8b7uk6RWiEl9gAAAFE"]
[Mon Dec 15 18:21:43.298598 2025] [:error] [pid 31459:tid 31467] [client 4.194.73.234:22155] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT_hNzqerS0TDpViRzshqgAAAAY"]
[Mon Dec 15 18:21:43.537499 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:10118] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT_hNzqerS0TDpViRzshrAAAABA"]
[Mon Dec 15 18:21:43.789076 2025] [:error] [pid 31459:tid 31478] [client 4.194.73.234:22265] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aT_hNzqerS0TDpViRzshrQAAABE"]
[Mon Dec 15 18:21:44.047161 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:10178] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aT_hOAN06qRtpJxyxHhqkwAAAJU"]
[Mon Dec 15 18:21:44.419747 2025] [:error] [pid 31373:tid 31405] [client 4.194.73.234:22252] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aT_hOHFdnrU7ASwItVKm3wAAAMA"]
[Mon Dec 15 18:21:44.818100 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:10224] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aT_hOHFdnrU7ASwItVKm4wAAAM4"]
[Mon Dec 15 18:21:45.159279 2025] [:error] [pid 31373:tid 31408] [client 4.194.73.234:10233] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aT_hOXFdnrU7ASwItVKm5AAAAMM"]
[Mon Dec 15 18:21:45.557798 2025] [:error] [pid 31373:tid 31417] [client 4.194.73.234:10192] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "aT_hOXFdnrU7ASwItVKm6QAAAMw"]
[Mon Dec 15 18:21:45.824392 2025] [:error] [pid 31373:tid 31410] [client 4.194.73.234:10199] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "aT_hOXFdnrU7ASwItVKm7QAAAMU"]
[Mon Dec 15 18:21:46.275107 2025] [:error] [pid 31373:tid 31420] [client 4.194.73.234:10174] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "aT_hOnFdnrU7ASwItVKm7wAAAM8"]
[Mon Dec 15 18:21:46.594383 2025] [:error] [pid 31372:tid 31398] [client 4.194.73.234:10196] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "aT_hOgN06qRtpJxyxHhqpQAAAJY"]
[Mon Dec 15 18:21:46.814659 2025] [:error] [pid 31373:tid 31409] [client 4.194.73.234:10190] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT_hOnFdnrU7ASwItVKm8QAAAMQ"]
[Mon Dec 15 18:21:47.163815 2025] [:error] [pid 31459:tid 31483] [client 4.194.73.234:22219] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT_hOzqerS0TDpViRzshsQAAABY"]
[Mon Dec 15 18:21:47.451022 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:22254] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT_hOzqerS0TDpViRzshswAAAAw"]
[Mon Dec 15 18:21:47.833815 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:22145] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aT_hOwN06qRtpJxyxHhqpgAAAJU"]
[Mon Dec 15 18:21:48.321369 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:9735] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT_hPDqerS0TDpViRzshtQAAABU"]
[Mon Dec 15 18:21:48.687566 2025] [:error] [pid 31459:tid 31464] [client 4.194.73.234:10235] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT_hPDqerS0TDpViRzshtgAAAAM"]
[Mon Dec 15 18:21:48.980919 2025] [:error] [pid 31459:tid 31475] [client 4.194.73.234:10148] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT_hPDqerS0TDpViRzshuQAAAA4"]
[Mon Dec 15 18:21:49.412434 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:10133] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aT_hPXFdnrU7ASwItVKm9gAAAM4"]
[Mon Dec 15 18:21:49.933794 2025] [:error] [pid 31459:tid 31485] [client 4.194.73.234:10140] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aT_hPTqerS0TDpViRzshvAAAABg"]
[Mon Dec 15 18:21:50.411465 2025] [:error] [pid 31372:tid 31393] [client 4.194.73.234:22217] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aT_hPgN06qRtpJxyxHhqqwAAAJE"]
[Mon Dec 15 18:21:50.681929 2025] [:error] [pid 31372:tid 31388] [client 4.194.73.234:10135] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aT_hPgN06qRtpJxyxHhqrAAAAIw"]
[Mon Dec 15 18:21:50.943430 2025] [:error] [pid 31459:tid 31469] [client 4.194.73.234:10212] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aT_hPjqerS0TDpViRzshvgAAAAg"]
[Mon Dec 15 18:21:51.524133 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:10147] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aT_hPzqerS0TDpViRzshvwAAAAw"]
[Mon Dec 15 18:21:52.203021 2025] [:error] [pid 31374:tid 31440] [client 4.194.73.234:10231] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aT_hQJzSh8b7uk6RWiEmIgAAAEg"]
[Mon Dec 15 18:21:52.803221 2025] [:error] [pid 31373:tid 31429] [client 4.194.73.234:10213] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aT_hQHFdnrU7ASwItVKm_QAAANg"]
[Mon Dec 15 18:21:53.218118 2025] [:error] [pid 31459:tid 31461] [client 4.194.73.234:10202] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aT_hQTqerS0TDpViRzshwwAAAAA"]
[Mon Dec 15 18:21:53.660368 2025] [:error] [pid 31459:tid 31475] [client 4.194.73.234:10156] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aT_hQTqerS0TDpViRzshxQAAAA4"]
[Mon Dec 15 18:21:53.975756 2025] [:error] [pid 31459:tid 31478] [client 4.194.73.234:10142] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aT_hQTqerS0TDpViRzshxgAAABE"]
[Mon Dec 15 18:21:54.489372 2025] [:error] [pid 31372:tid 31396] [client 4.194.73.234:10201] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aT_hQgN06qRtpJxyxHhqrgAAAJQ"]
[Mon Dec 15 18:21:55.138850 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:10229] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aT_hQzqerS0TDpViRzshyAAAABA"]
[Mon Dec 15 18:21:55.532681 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:22201] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aT_hQzqerS0TDpViRzshyQAAAAs"]
[Mon Dec 15 18:21:56.082425 2025] [:error] [pid 31372:tid 31399] [client 4.194.73.234:10159] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aT_hRAN06qRtpJxyxHhqswAAAJc"]
[Mon Dec 15 18:21:56.348216 2025] [:error] [pid 31374:tid 31444] [client 4.194.73.234:22197] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aT_hRJzSh8b7uk6RWiEmKQAAAEw"]
[Mon Dec 15 18:21:56.870707 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:10197] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aT_hRDqerS0TDpViRzshywAAABc"]
[Mon Dec 15 18:21:57.348885 2025] [:error] [pid 31374:tid 31440] [client 4.194.73.234:22199] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aT_hRZzSh8b7uk6RWiEmLQAAAEg"]
[Mon Dec 15 18:21:57.756670 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:22153] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aT_hRTqerS0TDpViRzshzwAAAAw"]
[Mon Dec 15 18:21:58.038397 2025] [:error] [pid 31459:tid 31483] [client 4.194.73.234:10193] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aT_hRjqerS0TDpViRzsh0AAAABY"]
[Mon Dec 15 18:21:58.290896 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:10139] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aT_hRjqerS0TDpViRzsh0QAAABI"]
[Mon Dec 15 18:21:58.598776 2025] [:error] [pid 31374:tid 31455] [client 4.194.73.234:10146] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aT_hRpzSh8b7uk6RWiEmMAAAAFc"]
[Mon Dec 15 18:21:58.866158 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:10237] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aT_hRgN06qRtpJxyxHhqtQAAAIQ"]
[Mon Dec 15 18:21:59.141081 2025] [:error] [pid 31372:tid 31385] [client 4.194.73.234:10204] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aT_hRwN06qRtpJxyxHhqtgAAAIk"]
[Mon Dec 15 18:21:59.371648 2025] [:error] [pid 31373:tid 31420] [client 4.194.73.234:22151] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aT_hR3FdnrU7ASwItVKnCQAAAM8"]
[Mon Dec 15 18:21:59.813103 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:10216] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aT_hRzqerS0TDpViRzsiFAAAABU"]
[Mon Dec 15 18:22:00.322063 2025] [:error] [pid 31372:tid 31400] [client 4.194.73.234:10234] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aT_hSAN06qRtpJxyxHhqtwAAAJg"]
[Mon Dec 15 18:22:01.160368 2025] [:error] [pid 31374:tid 31454] [client 4.194.73.234:10169] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aT_hSZzSh8b7uk6RWiEmhAAAAFY"]
[Mon Dec 15 18:22:01.464450 2025] [:error] [pid 31374:tid 31440] [client 4.194.73.234:22268] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aT_hSZzSh8b7uk6RWiEmhQAAAEg"]
[Mon Dec 15 18:22:01.749939 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:10175] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aT_hSTqerS0TDpViRzsiHgAAAAw"]
[Mon Dec 15 18:22:02.239733 2025] [:error] [pid 31372:tid 31391] [client 4.194.73.234:10176] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aT_hSgN06qRtpJxyxHhquQAAAI8"]
[Mon Dec 15 18:22:02.562769 2025] [:error] [pid 31373:tid 31414] [client 4.194.73.234:10121] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aT_hSnFdnrU7ASwItVKnEQAAAMk"]
[Mon Dec 15 18:22:02.896935 2025] [:error] [pid 31372:tid 31387] [client 4.194.73.234:10203] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aT_hSgN06qRtpJxyxHhqugAAAIs"]
[Mon Dec 15 18:22:03.499588 2025] [:error] [pid 31459:tid 31467] [client 4.194.73.234:22237] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aT_hSzqerS0TDpViRzsiJAAAAAY"]
[Mon Dec 15 18:22:04.381419 2025] [:error] [pid 31459:tid 31465] [client 4.194.73.234:9777] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aT_hTDqerS0TDpViRzsiJgAAAAQ"]
[Mon Dec 15 18:22:05.052016 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:22267] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aT_hTTqerS0TDpViRzsiKQAAAAs"]
[Mon Dec 15 18:22:05.604422 2025] [:error] [pid 31459:tid 31480] [client 4.194.73.234:10182] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aT_hTTqerS0TDpViRzsiKgAAABM"]
[Mon Dec 15 18:22:06.028097 2025] [:error] [pid 31459:tid 31463] [client 4.194.73.234:10119] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aT_hTjqerS0TDpViRzsiLgAAAAI"]
[Mon Dec 15 18:22:06.413379 2025] [:error] [pid 31372:tid 31395] [client 4.194.73.234:22178] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aT_hTgN06qRtpJxyxHhqwAAAAJM"]
[Mon Dec 15 18:22:07.087989 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:10154] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aT_hTwN06qRtpJxyxHhqwgAAAJU"]
[Mon Dec 15 18:22:07.627993 2025] [:error] [pid 31372:tid 31376] [client 4.194.73.234:10238] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aT_hTwN06qRtpJxyxHhqwwAAAIA"]
[Mon Dec 15 18:22:07.907362 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:10114] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aT_hTwN06qRtpJxyxHhqxAAAAIQ"]
[Mon Dec 15 18:22:08.696505 2025] [:error] [pid 31372:tid 31377] [client 4.194.73.234:10198] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aT_hUAN06qRtpJxyxHhqxgAAAIE"]
[Mon Dec 15 18:22:09.354974 2025] [:error] [pid 31459:tid 31464] [client 4.194.73.234:10145] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aT_hUTqerS0TDpViRzsiMwAAAAM"]
[Mon Dec 15 18:22:09.821395 2025] [:error] [pid 31459:tid 31485] [client 4.194.73.234:10144] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aT_hUTqerS0TDpViRzsiNwAAABg"]
[Mon Dec 15 18:22:10.312818 2025] [:error] [pid 31459:tid 31481] [client 4.194.73.234:10115] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aT_hUjqerS0TDpViRzsiOgAAABQ"]
[Mon Dec 15 18:22:10.852863 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:10158] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aT_hUjqerS0TDpViRzsiPQAAAAw"]
[Mon Dec 15 18:22:11.152216 2025] [:error] [pid 31374:tid 31438] [client 4.194.73.234:10129] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aT_hU5zSh8b7uk6RWiEmjQAAAEY"]
[Mon Dec 15 18:22:11.585214 2025] [:error] [pid 31459:tid 31462] [client 4.194.73.234:9781] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aT_hUzqerS0TDpViRzsiPgAAAAE"]
[Mon Dec 15 18:22:11.930226 2025] [:error] [pid 31373:tid 31421] [client 4.194.73.234:10138] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT_hU3FdnrU7ASwItVKnGAAAANA"]
[Mon Dec 15 18:22:12.296357 2025] [:error] [pid 31373:tid 31405] [client 4.194.73.234:10143] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT_hVHFdnrU7ASwItVKnGQAAAMA"]
[Mon Dec 15 18:22:12.731788 2025] [:error] [pid 31373:tid 31412] [client 4.194.73.234:10165] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT_hVHFdnrU7ASwItVKnGgAAAMc"]
[Mon Dec 15 18:22:13.135387 2025] [:error] [pid 31372:tid 31386] [client 4.194.73.234:10131] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aT_hVQN06qRtpJxyxHhqxwAAAIo"]
[Mon Dec 15 18:22:13.538029 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:9741] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT_hVTqerS0TDpViRzsiQgAAABI"]
[Mon Dec 15 18:22:13.778400 2025] [:error] [pid 31374:tid 31447] [client 4.194.73.234:10151] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT_hVZzSh8b7uk6RWiEmlAAAAE8"]
[Mon Dec 15 18:22:14.053860 2025] [:error] [pid 31372:tid 31391] [client 4.194.73.234:10188] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT_hVgN06qRtpJxyxHhqyQAAAI8"]
[Mon Dec 15 18:22:14.385248 2025] [:error] [pid 31374:tid 31441] [client 4.194.73.234:22221] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aT_hVpzSh8b7uk6RWiEmlQAAAEk"]
[Mon Dec 15 18:22:14.688158 2025] [:error] [pid 31372:tid 31378] [client 4.194.73.234:10141] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aT_hVgN06qRtpJxyxHhqywAAAII"]
[Mon Dec 15 18:22:15.223394 2025] [:error] [pid 31372:tid 31383] [client 4.194.73.234:22165] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aT_hVwN06qRtpJxyxHhqzQAAAIc"]
[Mon Dec 15 18:22:15.832406 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:10137] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aT_hVzqerS0TDpViRzsiRgAAABc"]
[Mon Dec 15 18:22:16.291272 2025] [:error] [pid 31374:tid 31450] [client 4.194.73.234:10227] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aT_hWJzSh8b7uk6RWiEmmAAAAFI"]
[Mon Dec 15 18:22:16.649800 2025] [:error] [pid 31373:tid 31413] [client 4.194.73.234:9748] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aT_hWHFdnrU7ASwItVKnIgAAAMg"]
[Mon Dec 15 18:22:17.054148 2025] [:error] [pid 31373:tid 31409] [client 4.194.73.234:10177] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aT_hWXFdnrU7ASwItVKnIwAAAMQ"]
[Mon Dec 15 18:22:17.451017 2025] [:error] [pid 31459:tid 31480] [client 4.194.73.234:10112] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aT_hWTqerS0TDpViRzsiSQAAABM"]
[Mon Dec 15 18:22:17.872675 2025] [:error] [pid 31373:tid 31416] [client 4.194.73.234:9758] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aT_hWXFdnrU7ASwItVKnJQAAAMs"]
[Mon Dec 15 18:22:18.169360 2025] [:error] [pid 31459:tid 31470] [client 4.194.73.234:9773] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aT_hWjqerS0TDpViRzsiTAAAAAk"]
[Mon Dec 15 18:22:18.575459 2025] [:error] [pid 31373:tid 31417] [client 4.194.73.234:10211] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aT_hWnFdnrU7ASwItVKnKAAAAMw"]
[Mon Dec 15 18:22:19.040579 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:10117] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aT_hWzqerS0TDpViRzsiTgAAABI"]
[Mon Dec 15 18:22:19.457111 2025] [:error] [pid 31374:tid 31451] [client 4.194.73.234:10205] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aT_hW5zSh8b7uk6RWiEmnAAAAFM"]
[Mon Dec 15 18:22:19.802564 2025] [:error] [pid 31459:tid 31475] [client 4.194.73.234:9745] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aT_hWzqerS0TDpViRzsiUgAAAA4"]
[Mon Dec 15 18:22:20.197384 2025] [:error] [pid 31373:tid 31427] [client 4.194.73.234:9747] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aT_hXHFdnrU7ASwItVKnKgAAANY"]
[Mon Dec 15 18:22:20.539637 2025] [:error] [pid 31372:tid 31382] [client 4.194.73.234:10220] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aT_hXAN06qRtpJxyxHhqzgAAAIY"]
[Mon Dec 15 18:22:21.119642 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:10223] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aT_hXQN06qRtpJxyxHhq0QAAAJU"]
[Mon Dec 15 18:22:21.472811 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:10161] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aT_hXQN06qRtpJxyxHhq0gAAAIQ"]
[Mon Dec 15 18:22:22.083664 2025] [:error] [pid 31374:tid 31454] [client 4.194.73.234:22242] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aT_hXpzSh8b7uk6RWiEmnwAAAFY"]
[Mon Dec 15 18:22:22.367185 2025] [:error] [pid 31373:tid 31407] [client 4.194.73.234:10189] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT_hXnFdnrU7ASwItVKnLgAAAMI"]
[Mon Dec 15 18:22:22.656092 2025] [:error] [pid 31374:tid 31442] [client 4.194.73.234:9754] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT_hXpzSh8b7uk6RWiEmoQAAAEo"]
[Mon Dec 15 18:22:22.972818 2025] [:error] [pid 31374:tid 31448] [client 4.194.73.234:9761] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT_hXpzSh8b7uk6RWiEmowAAAFA"]
[Mon Dec 15 18:22:23.425873 2025] [:error] [pid 31373:tid 31428] [client 4.194.73.234:10090] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aT_hX3FdnrU7ASwItVKnMgAAANc"]
[Mon Dec 15 18:22:23.929998 2025] [:error] [pid 31373:tid 31420] [client 4.194.73.234:10155] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aT_hX3FdnrU7ASwItVKnNwAAAM8"]
[Mon Dec 15 18:22:24.286367 2025] [:error] [pid 31373:tid 31418] [client 4.194.73.234:10166] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aT_hYHFdnrU7ASwItVKnOgAAAM0"]
[Mon Dec 15 18:22:24.650718 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:10113] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aT_hYHFdnrU7ASwItVKnPAAAAM4"]
[Mon Dec 15 18:22:24.963853 2025] [:error] [pid 31374:tid 31433] [client 4.194.73.234:9746] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aT_hYJzSh8b7uk6RWiEmpQAAAEE"]
[Mon Dec 15 18:22:25.202848 2025] [:error] [pid 31374:tid 31436] [client 4.194.73.234:10173] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aT_hYZzSh8b7uk6RWiEmpgAAAEQ"]
[Mon Dec 15 18:22:25.461566 2025] [:error] [pid 31373:tid 31427] [client 4.194.73.234:10218] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aT_hYXFdnrU7ASwItVKnQAAAANY"]
[Mon Dec 15 18:22:25.902737 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:22180] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aT_hYZzSh8b7uk6RWiEmqwAAAEM"]
[Mon Dec 15 18:22:26.446465 2025] [:error] [pid 31373:tid 31408] [client 4.194.73.234:22175] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aT_hYnFdnrU7ASwItVKnRAAAAMM"]
[Mon Dec 15 18:22:26.922203 2025] [:error] [pid 31373:tid 31407] [client 4.194.73.234:9776] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aT_hYnFdnrU7ASwItVKnRgAAAMI"]
[Mon Dec 15 18:22:27.533159 2025] [:error] [pid 31374:tid 31440] [client 4.194.73.234:22198] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aT_hY5zSh8b7uk6RWiEmrQAAAEg"]
[Mon Dec 15 18:22:28.028346 2025] [:error] [pid 31372:tid 31394] [client 4.194.73.234:22206] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aT_hZAN06qRtpJxyxHhq1QAAAJI"]
[Mon Dec 15 18:22:28.527595 2025] [:error] [pid 31374:tid 31433] [client 4.194.73.234:9734] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aT_hZJzSh8b7uk6RWiEmsgAAAEE"]
[Mon Dec 15 18:22:28.870033 2025] [:error] [pid 31459:tid 31470] [client 4.194.73.234:10073] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aT_hZDqerS0TDpViRzsiXgAAAAk"]
[Mon Dec 15 18:22:29.551127 2025] [:error] [pid 31459:tid 31462] [client 4.194.73.234:9740] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Dec 15 18:22:29.759733 2025] [:error] [pid 31459:tid 31476] [client 4.194.73.234:9740] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Mon Dec 15 18:22:30.394231 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:9740] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aT_hZjqerS0TDpViRzsiaQAAABc"]
[Mon Dec 15 18:22:31.137891 2025] [:error] [pid 31372:tid 31380] [client 4.194.73.234:10004] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aT_hZwN06qRtpJxyxHhq3wAAAIQ"]
[Mon Dec 15 18:22:31.510212 2025] [:error] [pid 31373:tid 31408] [client 4.194.73.234:10123] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aT_hZ3FdnrU7ASwItVKnTwAAAMM"]
[Mon Dec 15 18:22:31.765860 2025] [:error] [pid 31374:tid 31437] [client 4.194.73.234:22193] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aT_hZ5zSh8b7uk6RWiEmtwAAAEU"]
[Mon Dec 15 18:22:32.337286 2025] [:error] [pid 31374:tid 31448] [client 4.194.73.234:10183] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aT_haJzSh8b7uk6RWiEmuwAAAFA"]
[Mon Dec 15 18:22:32.683713 2025] [:error] [pid 31374:tid 31436] [client 4.194.73.234:10236] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT_haJzSh8b7uk6RWiEmvQAAAEQ"]
[Mon Dec 15 18:22:33.201641 2025] [:error] [pid 31459:tid 31474] [client 4.194.73.234:9756] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT_haTqerS0TDpViRzsibAAAAA0"]
[Mon Dec 15 18:22:33.433751 2025] [:error] [pid 31459:tid 31469] [client 4.194.73.234:10150] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT_haTqerS0TDpViRzsibQAAAAg"]
[Mon Dec 15 18:22:34.300640 2025] [:error] [pid 31372:tid 31381] [client 4.194.73.234:9769] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aT_hagN06qRtpJxyxHhq5AAAAIU"]
[Mon Dec 15 18:22:35.026709 2025] [:error] [pid 31459:tid 31483] [client 4.194.73.234:9742] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aT_hazqerS0TDpViRzsibwAAABY"]
[Mon Dec 15 18:22:36.040368 2025] [:error] [pid 31459:tid 31476] [client 4.194.73.234:10125] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aT_hbDqerS0TDpViRzsicwAAAA8"]
[Mon Dec 15 18:22:36.320235 2025] [:error] [pid 31373:tid 31409] [client 4.194.73.234:10170] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aT_hbHFdnrU7ASwItVKnVQAAAMQ"]
[Mon Dec 15 18:22:36.874586 2025] [:error] [pid 31373:tid 31410] [client 4.194.73.234:9743] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aT_hbHFdnrU7ASwItVKnVwAAAMU"]
[Mon Dec 15 18:22:37.859591 2025] [:error] [pid 31374:tid 31451] [client 4.194.73.234:9731] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aT_hbZzSh8b7uk6RWiEmwQAAAFM"]
[Mon Dec 15 18:22:38.677776 2025] [:error] [pid 31372:tid 31382] [client 4.194.73.234:9766] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aT_hbgN06qRtpJxyxHhq6QAAAIY"]
[Mon Dec 15 18:22:38.945308 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:9759] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aT_hbjqerS0TDpViRzsidQAAABc"]
[Mon Dec 15 18:22:39.366253 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:9736] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aT_hbzqerS0TDpViRzsidgAAAAw"]
[Mon Dec 15 18:22:39.912988 2025] [:error] [pid 31459:tid 31480] [client 4.194.73.234:10095] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aT_hbzqerS0TDpViRzsidwAAABM"]
[Mon Dec 15 18:22:40.357265 2025] [:error] [pid 31459:tid 31475] [client 4.194.73.234:9750] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aT_hcDqerS0TDpViRzsieAAAAA4"]
[Mon Dec 15 18:22:40.862142 2025] [:error] [pid 31459:tid 31474] [client 4.194.73.234:10053] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aT_hcDqerS0TDpViRzsiewAAAA0"]
[Mon Dec 15 18:22:41.355063 2025] [:error] [pid 31372:tid 31381] [client 4.194.73.234:10152] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aT_hcQN06qRtpJxyxHhq7QAAAIU"]
[Mon Dec 15 18:22:42.360880 2025] [:error] [pid 31459:tid 31463] [client 4.194.73.234:9770] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aT_hcjqerS0TDpViRzsiggAAAAI"]
[Mon Dec 15 18:22:43.010315 2025] [:error] [pid 31459:tid 31470] [client 4.194.73.234:9782] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aT_hczqerS0TDpViRzsihwAAAAk"]
[Mon Dec 15 18:22:43.701701 2025] [:error] [pid 31459:tid 31481] [client 4.194.73.234:10130] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aT_hczqerS0TDpViRzsiiQAAABQ"]
[Mon Dec 15 18:22:44.973539 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:10097] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aT_hdDqerS0TDpViRzsijgAAABc"]
[Mon Dec 15 18:22:46.177203 2025] [:error] [pid 31373:tid 31412] [client 4.194.73.234:22222] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aT_hdnFdnrU7ASwItVKnYgAAAMc"]
[Mon Dec 15 18:22:47.395817 2025] [:error] [pid 31373:tid 31406] [client 4.194.73.234:9767] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aT_hd3FdnrU7ASwItVKnZQAAAME"]
[Mon Dec 15 18:22:47.968041 2025] [:error] [pid 31373:tid 31410] [client 4.194.73.234:22253] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aT_hd3FdnrU7ASwItVKnZwAAAMU"]
[Mon Dec 15 18:22:48.459868 2025] [:error] [pid 31374:tid 31444] [client 4.194.73.234:10136] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aT_heJzSh8b7uk6RWiEm1gAAAEw"]
[Mon Dec 15 18:22:49.793904 2025] [:error] [pid 31372:tid 31384] [client 4.194.73.234:10164] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aT_heQN06qRtpJxyxHhq9wAAAIg"]
[Mon Dec 15 18:22:50.542002 2025] [:error] [pid 31459:tid 31470] [client 4.194.73.234:10050] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aT_hejqerS0TDpViRzsiowAAAAk"]
[Mon Dec 15 18:22:51.409612 2025] [:error] [pid 31372:tid 31385] [client 4.194.73.234:10071] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aT_hewN06qRtpJxyxHhq-QAAAIk"]
[Mon Dec 15 18:22:51.770652 2025] [:error] [pid 31372:tid 31399] [client 4.194.73.234:10098] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aT_hewN06qRtpJxyxHhq-gAAAJc"]
[Mon Dec 15 18:22:52.399307 2025] [:error] [pid 31373:tid 31412] [client 4.194.73.234:10186] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aT_hfHFdnrU7ASwItVKnbAAAAMc"]
[Mon Dec 15 18:22:53.082961 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:10055] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aT_hfXFdnrU7ASwItVKnbwAAAM4"]
[Mon Dec 15 18:22:53.849894 2025] [:error] [pid 31459:tid 31467] [client 4.194.73.234:10228] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aT_hfTqerS0TDpViRzsiqAAAAAY"]
[Mon Dec 15 18:22:54.174538 2025] [:error] [pid 31374:tid 31454] [client 4.194.73.234:9760] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aT_hfpzSh8b7uk6RWiEm7AAAAFY"]
[Mon Dec 15 18:22:54.800874 2025] [:error] [pid 31372:tid 31376] [client 4.194.73.234:9739] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aT_hfgN06qRtpJxyxHhq_AAAAIA"]
[Mon Dec 15 18:22:55.378406 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:9751] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aT_hfwN06qRtpJxyxHhrAQAAAJU"]
[Mon Dec 15 18:22:55.705613 2025] [:error] [pid 31459:tid 31466] [client 4.194.73.234:9752] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aT_hfzqerS0TDpViRzsisQAAAAU"]
[Mon Dec 15 18:22:56.868780 2025] [:error] [pid 31374:tid 31443] [client 4.194.73.234:9996] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aT_hgJzSh8b7uk6RWiEm7wAAAEs"]
[Mon Dec 15 18:22:58.052127 2025] [:error] [pid 31459:tid 31470] [client 4.194.73.234:22157] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aT_hgjqerS0TDpViRzsiuQAAAAk"]
[Mon Dec 15 18:22:58.625423 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:10163] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aT_hgnFdnrU7ASwItVKndwAAAM4"]
[Mon Dec 15 18:22:59.033768 2025] [:error] [pid 31374:tid 31450] [client 4.194.73.234:10172] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aT_hg5zSh8b7uk6RWiEm9QAAAFI"]
[Mon Dec 15 18:22:59.620057 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:10009] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aT_hgzqerS0TDpViRzsiwAAAABA"]
[Mon Dec 15 18:23:00.131056 2025] [:error] [pid 31459:tid 31483] [client 4.194.73.234:10127] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aT_hhDqerS0TDpViRzsiwQAAABY"]
[Mon Dec 15 18:23:00.535996 2025] [:error] [pid 31374:tid 31456] [client 4.194.73.234:10126] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aT_hhJzSh8b7uk6RWiEm-gAAAFg"]
[Mon Dec 15 18:23:01.526858 2025] [:error] [pid 31459:tid 31470] [client 4.194.73.234:10056] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aT_hhTqerS0TDpViRzsixgAAAAk"]
[Mon Dec 15 18:23:01.943875 2025] [:error] [pid 31372:tid 31400] [client 4.194.73.234:9787] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aT_hhQN06qRtpJxyxHhrCAAAAJg"]
[Mon Dec 15 18:23:02.495622 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:10168] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aT_hhjqerS0TDpViRzsiyAAAABA"]
[Mon Dec 15 18:23:03.389132 2025] [:error] [pid 31374:tid 31450] [client 4.194.73.234:9786] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aT_hh5zSh8b7uk6RWiEnAQAAAFI"]
[Mon Dec 15 18:23:04.321859 2025] [:error] [pid 31372:tid 31388] [client 4.194.73.234:9771] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aT_hiAN06qRtpJxyxHhrDAAAAIw"]
[Mon Dec 15 18:23:04.667732 2025] [:error] [pid 31373:tid 31410] [client 4.194.73.234:10060] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aT_hiHFdnrU7ASwItVKngQAAAMU"]
[Mon Dec 15 18:23:04.916097 2025] [:error] [pid 31459:tid 31471] [client 4.194.73.234:9778] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aT_hiDqerS0TDpViRzsizgAAAAo"]
[Mon Dec 15 18:23:05.150424 2025] [:error] [pid 31372:tid 31396] [client 4.194.73.234:10076] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aT_hiQN06qRtpJxyxHhrEAAAAJQ"]
[Mon Dec 15 18:23:05.448522 2025] [:error] [pid 31459:tid 31476] [client 4.194.73.234:10230] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aT_hiTqerS0TDpViRzsi1AAAAA8"]
[Mon Dec 15 18:23:05.998669 2025] [:error] [pid 31372:tid 31398] [client 4.194.73.234:9790] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aT_hiQN06qRtpJxyxHhrGAAAAJY"]
[Mon Dec 15 18:23:06.328711 2025] [:error] [pid 31373:tid 31422] [client 4.194.73.234:10054] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aT_hinFdnrU7ASwItVKnjAAAANE"]
[Mon Dec 15 18:23:06.820882 2025] [:error] [pid 31373:tid 31417] [client 4.194.73.234:10167] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aT_hinFdnrU7ASwItVKnjwAAAMw"]
[Mon Dec 15 18:23:07.325636 2025] [:error] [pid 31459:tid 31463] [client 4.194.73.234:10091] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aT_hizqerS0TDpViRzsi4QAAAAI"]
[Mon Dec 15 18:23:07.660808 2025] [:error] [pid 31372:tid 31377] [client 4.194.73.234:10225] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aT_hiwN06qRtpJxyxHhrHwAAAIE"]
[Mon Dec 15 18:23:07.976970 2025] [:error] [pid 31374:tid 31440] [client 4.194.73.234:10171] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aT_hi5zSh8b7uk6RWiEnBwAAAEg"]
[Mon Dec 15 18:23:08.370218 2025] [:error] [pid 31372:tid 31376] [client 4.194.73.234:9763] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aT_hjAN06qRtpJxyxHhrJwAAAIA"]
[Mon Dec 15 18:23:08.685386 2025] [:error] [pid 31372:tid 31387] [client 4.194.73.234:9992] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aT_hjAN06qRtpJxyxHhrLQAAAIs"]
[Mon Dec 15 18:23:09.201478 2025] [:error] [pid 31373:tid 31428] [client 4.194.73.234:9753] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aT_hjXFdnrU7ASwItVKnpQAAANc"]
[Mon Dec 15 18:23:09.726886 2025] [:error] [pid 31374:tid 31450] [client 4.194.73.234:10051] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aT_hjZzSh8b7uk6RWiEnCAAAAFI"]
[Mon Dec 15 18:23:10.136703 2025] [:error] [pid 31459:tid 31471] [client 4.194.73.234:10023] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aT_hjjqerS0TDpViRzsi9QAAAAo"]
[Mon Dec 15 18:23:10.536156 2025] [:error] [pid 31373:tid 31418] [client 4.194.73.234:10106] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aT_hjnFdnrU7ASwItVKnqQAAAM0"]
[Mon Dec 15 18:23:10.934860 2025] [:error] [pid 31372:tid 31394] [client 4.194.73.234:10078] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aT_hjgN06qRtpJxyxHhrMgAAAJI"]
[Mon Dec 15 18:23:11.289329 2025] [:error] [pid 31459:tid 31478] [client 4.194.73.234:10183] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aT_hjzqerS0TDpViRzsi-AAAABE"]
[Mon Dec 15 18:23:11.920895 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:9784] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aT_hj3FdnrU7ASwItVKnrwAAAM4"]
[Mon Dec 15 18:23:12.369033 2025] [:error] [pid 31372:tid 31376] [client 4.194.73.234:9756] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aT_hkAN06qRtpJxyxHhrNQAAAIA"]
[Mon Dec 15 18:23:12.748172 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:10107] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aT_hkAN06qRtpJxyxHhrNgAAAJU"]
[Mon Dec 15 18:23:13.196154 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:9757] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aT_hkTqerS0TDpViRzsi_wAAAAs"]
[Mon Dec 15 18:23:13.776153 2025] [:error] [pid 31459:tid 31461] [client 4.194.73.234:10072] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aT_hkTqerS0TDpViRzsjAwAAAAA"]
[Mon Dec 15 18:23:14.199930 2025] [:error] [pid 31459:tid 31462] [client 4.194.73.234:10066] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aT_hkjqerS0TDpViRzsjBQAAAAE"]
[Mon Dec 15 18:23:14.856294 2025] [:error] [pid 31373:tid 31406] [client 4.194.73.234:22202] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aT_hknFdnrU7ASwItVKntAAAAME"]
[Mon Dec 15 18:23:15.363815 2025] [:error] [pid 31372:tid 31386] [client 4.194.73.234:10100] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aT_hkwN06qRtpJxyxHhrPAAAAIo"]
[Mon Dec 15 18:23:16.226454 2025] [:error] [pid 31459:tid 31468] [client 4.194.73.234:10084] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aT_hlDqerS0TDpViRzsjCAAAAAc"]
[Mon Dec 15 18:23:16.852504 2025] [:error] [pid 31374:tid 31433] [client 4.194.73.234:9768] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aT_hlJzSh8b7uk6RWiEnEQAAAEE"]
[Mon Dec 15 18:23:17.142485 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:9744] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aT_hlXFdnrU7ASwItVKntwAAAM4"]
[Mon Dec 15 18:23:17.985226 2025] [:error] [pid 31372:tid 31388] [client 4.194.73.234:10187] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aT_hlQN06qRtpJxyxHhrPwAAAIw"]
[Mon Dec 15 18:23:18.482602 2025] [:error] [pid 31372:tid 31394] [client 4.194.73.234:9732] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aT_hlgN06qRtpJxyxHhrQQAAAJI"]
[Mon Dec 15 18:23:18.716359 2025] [:error] [pid 31374:tid 31442] [client 4.194.73.234:9926] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aT_hlpzSh8b7uk6RWiEnFAAAAEo"]
[Mon Dec 15 18:23:19.127324 2025] [:error] [pid 31372:tid 31396] [client 4.194.73.234:9730] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aT_hlwN06qRtpJxyxHhrRAAAAJQ"]
[Mon Dec 15 18:23:19.650221 2025] [:error] [pid 31374:tid 31441] [client 4.194.73.234:10014] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aT_hl5zSh8b7uk6RWiEnFwAAAEk"]
[Mon Dec 15 18:23:20.105430 2025] [:error] [pid 31373:tid 31416] [client 4.194.73.234:10063] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aT_hmHFdnrU7ASwItVKnuAAAAMs"]
[Mon Dec 15 18:23:20.615981 2025] [:error] [pid 31372:tid 31393] [client 4.194.73.234:9749] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aT_hmAN06qRtpJxyxHhrRQAAAJE"]
[Mon Dec 15 18:23:20.896529 2025] [:error] [pid 31372:tid 31384] [client 4.194.73.234:10075] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aT_hmAN06qRtpJxyxHhrSAAAAIg"]
[Mon Dec 15 18:23:21.254842 2025] [:error] [pid 31372:tid 31379] [client 4.194.73.234:10083] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aT_hmQN06qRtpJxyxHhrSQAAAIM"]
[Mon Dec 15 18:23:21.594037 2025] [:error] [pid 31459:tid 31468] [client 4.194.73.234:22220] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aT_hmTqerS0TDpViRzsjDwAAAAc"]
[Mon Dec 15 18:23:22.048293 2025] [:error] [pid 31459:tid 31473] [client 4.194.73.234:9788] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aT_hmjqerS0TDpViRzsjEwAAAAw"]
[Mon Dec 15 18:23:22.405102 2025] [:error] [pid 31374:tid 31442] [client 4.194.73.234:9729] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aT_hmpzSh8b7uk6RWiEnHQAAAEo"]
[Mon Dec 15 18:23:22.986997 2025] [:error] [pid 31373:tid 31425] [client 4.194.73.234:9762] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aT_hmnFdnrU7ASwItVKnzAAAANQ"]
[Mon Dec 15 18:23:23.526412 2025] [:error] [pid 31374:tid 31436] [client 4.194.73.234:10057] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aT_hm5zSh8b7uk6RWiEnIAAAAEQ"]
[Mon Dec 15 18:23:23.875262 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:9780] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aT_hmwN06qRtpJxyxHhrdAAAAJU"]
[Mon Dec 15 18:23:24.262837 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:9775] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aT_hnDqerS0TDpViRzsjRgAAABA"]
[Mon Dec 15 18:23:24.698908 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:10059] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aT_hnDqerS0TDpViRzsjVAAAABc"]
[Mon Dec 15 18:23:25.038994 2025] [:error] [pid 31459:tid 31471] [client 4.194.73.234:9785] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aT_hnTqerS0TDpViRzsjXQAAAAo"]
[Mon Dec 15 18:23:25.435808 2025] [:error] [pid 31374:tid 31433] [client 4.194.73.234:9755] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aT_hnZzSh8b7uk6RWiEnJAAAAEE"]
[Mon Dec 15 18:23:25.902647 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:10029] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aT_hnTqerS0TDpViRzsjZwAAABc"]
[Mon Dec 15 18:23:26.733158 2025] [:error] [pid 31373:tid 31424] [client 4.194.73.234:9733] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aT_hnnFdnrU7ASwItVKn5wAAANM"]
[Mon Dec 15 18:23:27.951647 2025] [:error] [pid 31459:tid 31485] [client 4.194.73.234:10045] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aT_hnzqerS0TDpViRzsjcgAAABg"]
[Mon Dec 15 18:23:28.294359 2025] [:error] [pid 31372:tid 31397] [client 4.194.73.234:10049] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aT_hoAN06qRtpJxyxHhrmwAAAJU"]
[Mon Dec 15 18:23:28.748671 2025] [:error] [pid 31372:tid 31386] [client 4.194.73.234:9728] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aT_hoAN06qRtpJxyxHhrnAAAAIo"]
[Mon Dec 15 18:23:29.634371 2025] [:error] [pid 31372:tid 31395] [client 4.194.73.234:10116] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aT_hoQN06qRtpJxyxHhrngAAAJM"]
[Mon Dec 15 18:23:30.168891 2025] [:error] [pid 31459:tid 31481] [client 4.194.73.234:22194] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aT_hojqerS0TDpViRzsjewAAABQ"]
[Mon Dec 15 18:23:30.766835 2025] [:error] [pid 31374:tid 31446] [client 4.194.73.234:10025] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aT_hopzSh8b7uk6RWiEnNQAAAE4"]
[Mon Dec 15 18:23:31.604359 2025] [:error] [pid 31372:tid 31378] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Mon Dec 15 18:23:31.719438 2025] [:error] [pid 31372:tid 31392] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Dec 15 18:23:31.809328 2025] [:error] [pid 31372:tid 31399] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Mon Dec 15 18:23:31.922224 2025] [:error] [pid 31372:tid 31385] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Mon Dec 15 18:23:32.013236 2025] [:error] [pid 31372:tid 31381] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Mon Dec 15 18:23:32.103279 2025] [:error] [pid 31372:tid 31384] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Mon Dec 15 18:23:32.193388 2025] [:error] [pid 31372:tid 31390] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Mon Dec 15 18:23:32.298670 2025] [:error] [pid 31372:tid 31379] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Mon Dec 15 18:23:32.389161 2025] [:error] [pid 31372:tid 31400] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Dec 15 18:23:32.525852 2025] [:error] [pid 31372:tid 31398] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Mon Dec 15 18:23:32.615882 2025] [:error] [pid 31372:tid 31382] [client 4.194.73.234:9789] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Dec 15 18:23:32.770805 2025] [:error] [pid 31372:tid 31376] [client 4.194.73.234:9789] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aT_hpAN06qRtpJxyxHhrrQAAAIA"]
[Mon Dec 15 18:23:33.899148 2025] [:error] [pid 31459:tid 31478] [client 4.194.73.234:9738] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aT_hpTqerS0TDpViRzsjgAAAABE"]
[Mon Dec 15 18:23:34.767501 2025] [:error] [pid 31459:tid 31485] [client 4.194.73.234:22192] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aT_hpjqerS0TDpViRzsjggAAABg"]
[Mon Dec 15 18:23:35.288654 2025] [:error] [pid 31374:tid 31445] [client 4.194.73.234:10120] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aT_hp5zSh8b7uk6RWiEnPAAAAE0"]
[Mon Dec 15 18:23:35.997515 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:10010] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aT_hpzqerS0TDpViRzsjhAAAABI"]
[Mon Dec 15 18:23:36.847264 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:9987] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aT_hqDqerS0TDpViRzsjiwAAAAs"]
[Mon Dec 15 18:23:37.908428 2025] [:error] [pid 31374:tid 31452] [client 4.194.73.234:9998] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aT_hqZzSh8b7uk6RWiEnQwAAAFQ"]
[Mon Dec 15 18:23:38.932265 2025] [:error] [pid 31372:tid 31378] [client 4.194.73.234:10052] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aT_hqgN06qRtpJxyxHhrsgAAAII"]
[Mon Dec 15 18:23:40.073960 2025] [:error] [pid 31372:tid 31396] [client 4.194.73.234:10077] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aT_hrAN06qRtpJxyxHhrtgAAAJQ"]
[Mon Dec 15 18:23:42.350819 2025] [:error] [pid 31374:tid 31448] [client 4.194.73.234:10034] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aT_hrpzSh8b7uk6RWiEnXgAAAFA"]
[Mon Dec 15 18:23:42.683685 2025] [:error] [pid 31373:tid 31414] [client 4.194.73.234:10061] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aT_hrnFdnrU7ASwItVKoDQAAAMk"]
[Mon Dec 15 18:23:43.006282 2025] [:error] [pid 31374:tid 31453] [client 4.194.73.234:10109] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aT_hr5zSh8b7uk6RWiEnYQAAAFU"]
[Mon Dec 15 18:23:43.556805 2025] [:error] [pid 31372:tid 31396] [client 4.194.73.234:10067] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/sx.php"] [unique_id "aT_hrwN06qRtpJxyxHhryAAAAJQ"]
[Mon Dec 15 18:23:43.967656 2025] [:error] [pid 31372:tid 31400] [client 4.194.73.234:9774] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aT_hrwN06qRtpJxyxHhrygAAAJg"]
[Mon Dec 15 18:23:44.311767 2025] [:error] [pid 31374:tid 31432] [client 4.194.73.234:10105] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aT_hsJzSh8b7uk6RWiEnawAAAEA"]
[Mon Dec 15 18:23:44.792235 2025] [:error] [pid 31374:tid 31450] [client 4.194.73.234:9735] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aT_hsJzSh8b7uk6RWiEnbgAAAFI"]
[Mon Dec 15 18:23:45.372934 2025] [:error] [pid 31459:tid 31461] [client 4.194.73.234:10064] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aT_hsTqerS0TDpViRzsjzAAAAAA"]
[Mon Dec 15 18:23:46.171135 2025] [:error] [pid 31373:tid 31429] [client 4.194.73.234:9994] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aT_hsnFdnrU7ASwItVKoEAAAANg"]
[Mon Dec 15 18:23:46.636175 2025] [:error] [pid 31459:tid 31483] [client 4.194.73.234:10044] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT_hsjqerS0TDpViRzsj0gAAABY"]
[Mon Dec 15 18:23:47.201450 2025] [:error] [pid 31459:tid 31479] [client 4.194.73.234:10068] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT_hszqerS0TDpViRzsj2AAAABI"]
[Mon Dec 15 18:23:47.572967 2025] [:error] [pid 31374:tid 31434] [client 4.194.73.234:9963] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT_hs5zSh8b7uk6RWiEncgAAAEI"]
[Mon Dec 15 18:23:48.122933 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:10092] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aT_htDqerS0TDpViRzsj3QAAABA"]
[Mon Dec 15 18:23:48.521994 2025] [:error] [pid 31374:tid 31454] [client 4.194.73.234:10111] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aT_htJzSh8b7uk6RWiEndQAAAFY"]
[Mon Dec 15 18:23:49.480249 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:10094] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aT_htTqerS0TDpViRzsj4QAAABU"]
[Mon Dec 15 18:23:50.085012 2025] [:error] [pid 31459:tid 31476] [client 4.194.73.234:10088] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aT_htjqerS0TDpViRzsj5QAAAA8"]
[Mon Dec 15 18:23:50.607399 2025] [:error] [pid 31459:tid 31469] [client 4.194.73.234:9997] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aT_htjqerS0TDpViRzsj6QAAAAg"]
[Mon Dec 15 18:23:51.134907 2025] [:error] [pid 31374:tid 31441] [client 4.194.73.234:10160] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aT_ht5zSh8b7uk6RWiEnfAAAAEk"]
[Mon Dec 15 18:23:51.967789 2025] [:error] [pid 31374:tid 31446] [client 4.194.73.234:9779] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aT_ht5zSh8b7uk6RWiEngAAAAE4"]
[Mon Dec 15 18:23:52.423095 2025] [:error] [pid 31372:tid 31396] [client 4.194.73.234:10170] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aT_huAN06qRtpJxyxHhr0gAAAJQ"]
[Mon Dec 15 18:23:52.961170 2025] [:error] [pid 31374:tid 31454] [client 4.194.73.234:10108] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aT_huJzSh8b7uk6RWiEnhQAAAFY"]
[Mon Dec 15 18:23:53.752511 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:10047] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aT_huTqerS0TDpViRzsj7wAAABU"]
[Mon Dec 15 18:23:54.606311 2025] [:error] [pid 31374:tid 31445] [client 4.194.73.234:10162] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aT_hupzSh8b7uk6RWiEniQAAAE0"]
[Mon Dec 15 18:23:55.357804 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:9985] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aT_huzqerS0TDpViRzsj9AAAAAs"]
[Mon Dec 15 18:23:55.964450 2025] [:error] [pid 31372:tid 31377] [client 4.194.73.234:9929] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aT_huwN06qRtpJxyxHhr2wAAAIE"]
[Mon Dec 15 18:23:56.256356 2025] [:error] [pid 31459:tid 31474] [client 4.194.73.234:10000] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aT_hvDqerS0TDpViRzsj-AAAAA0"]
[Mon Dec 15 18:23:56.717035 2025] [:error] [pid 31372:tid 31376] [client 4.194.73.234:9953] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aT_hvAN06qRtpJxyxHhr3QAAAIA"]
[Mon Dec 15 18:23:57.353001 2025] [:error] [pid 31374:tid 31432] [client 4.194.73.234:9991] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aT_hvZzSh8b7uk6RWiEnkgAAAEA"]
[Mon Dec 15 18:23:57.774025 2025] [:error] [pid 31374:tid 31436] [client 4.194.73.234:9749] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aT_hvZzSh8b7uk6RWiEnkwAAAEQ"]
[Mon Dec 15 18:23:58.151748 2025] [:error] [pid 31372:tid 31381] [client 4.194.73.234:9986] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aT_hvgN06qRtpJxyxHhr4gAAAIU"]
[Mon Dec 15 18:23:58.788069 2025] [:error] [pid 31373:tid 31409] [client 4.194.73.234:10070] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aT_hvnFdnrU7ASwItVKoMQAAAMQ"]
[Mon Dec 15 18:23:59.429905 2025] [:error] [pid 31459:tid 31478] [client 4.194.73.234:10103] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aT_hvzqerS0TDpViRzskBQAAABE"]
[Mon Dec 15 18:24:00.260148 2025] [:error] [pid 31459:tid 31482] [client 4.194.73.234:10089] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aT_hwDqerS0TDpViRzskDAAAABU"]
[Mon Dec 15 18:24:01.021372 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:10102] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aT_hwTqerS0TDpViRzskDwAAABc"]
[Mon Dec 15 18:24:01.513291 2025] [:error] [pid 31459:tid 31477] [client 4.194.73.234:22144] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aT_hwTqerS0TDpViRzskEwAAABA"]
[Mon Dec 15 18:24:02.527437 2025] [:error] [pid 31372:tid 31386] [client 4.194.73.234:10031] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gzone.php"] [unique_id "aT_hwgN06qRtpJxyxHhr5gAAAIo"]
[Mon Dec 15 18:24:03.541540 2025] [:error] [pid 31374:tid 31440] [client 4.194.73.234:10019] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gzone.php"] [unique_id "aT_hw5zSh8b7uk6RWiEnmwAAAEg"]
[Mon Dec 15 18:24:03.945474 2025] [:error] [pid 31372:tid 31390] [client 4.194.73.234:10096] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gzone.php"] [unique_id "aT_hwwN06qRtpJxyxHhr6AAAAI4"]
[Mon Dec 15 18:24:04.386803 2025] [:error] [pid 31374:tid 31453] [client 4.194.73.234:10048] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gzone.php"] [unique_id "aT_hxJzSh8b7uk6RWiEnoAAAAFU"]
[Mon Dec 15 18:24:04.849075 2025] [:error] [pid 31459:tid 31461] [client 4.194.73.234:10080] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ufwodvsa.php"] [unique_id "aT_hxDqerS0TDpViRzskIwAAAAA"]
[Mon Dec 15 18:24:05.462295 2025] [:error] [pid 31374:tid 31452] [client 4.194.73.234:10065] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ufwodvsa.php"] [unique_id "aT_hxZzSh8b7uk6RWiEnpwAAAFQ"]
[Mon Dec 15 18:24:06.050167 2025] [:error] [pid 31459:tid 31469] [client 4.194.73.234:10041] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ufwodvsa.php"] [unique_id "aT_hxjqerS0TDpViRzskLgAAAAg"]
[Mon Dec 15 18:24:06.386692 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:9943] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ufwodvsa.php"] [unique_id "aT_hxjqerS0TDpViRzskNwAAAAs"]
[Mon Dec 15 18:24:06.988259 2025] [:error] [pid 31459:tid 31464] [client 4.194.73.234:10007] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aT_hxjqerS0TDpViRzskQQAAAAM"]
[Mon Dec 15 18:24:07.510743 2025] [:error] [pid 31459:tid 31485] [client 4.194.73.234:9957] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aT_hxzqerS0TDpViRzskSwAAABg"]
[Mon Dec 15 18:24:07.994254 2025] [:error] [pid 31374:tid 31438] [client 4.194.73.234:10087] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aT_hx5zSh8b7uk6RWiEnwgAAAEY"]
[Mon Dec 15 18:24:08.657781 2025] [:error] [pid 31374:tid 31446] [client 4.194.73.234:9864] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aT_hyJzSh8b7uk6RWiEnxwAAAE4"]
[Mon Dec 15 18:24:10.311614 2025] [:error] [pid 31373:tid 31411] [client 4.194.73.234:9954] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aT_hynFdnrU7ASwItVKoQgAAAMY"]
[Mon Dec 15 18:24:10.898578 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:10058] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aT_hypzSh8b7uk6RWiEnzAAAAEM"]
[Mon Dec 15 18:24:11.464308 2025] [:error] [pid 31459:tid 31484] [client 4.194.73.234:9923] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aT_hyzqerS0TDpViRzskXwAAABc"]
[Mon Dec 15 18:24:12.180869 2025] [:error] [pid 31372:tid 31392] [client 4.194.73.234:10062] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aT_hzAN06qRtpJxyxHhr_AAAAJA"]
[Mon Dec 15 18:24:12.655879 2025] [:error] [pid 31372:tid 31377] [client 4.194.73.234:9791] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aT_hzAN06qRtpJxyxHhsAAAAAIE"]
[Mon Dec 15 18:24:13.080679 2025] [:error] [pid 31374:tid 31445] [client 4.194.73.234:9945] [client 4.194.73.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aT_hzZzSh8b7uk6RWiEn0QAAAE0"]
[Mon Dec 15 18:24:13.676211 2025] [:error] [pid 31374:tid 31435] [client 4.194.73.234:9772] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img/wp-login.php"] [unique_id "aT_hzZzSh8b7uk6RWiEn1QAAAEM"]
[Mon Dec 15 18:24:14.168557 2025] [:error] [pid 31374:tid 31441] [client 4.194.73.234:10082] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img/wp-login.php"] [unique_id "aT_hzpzSh8b7uk6RWiEn2AAAAEk"]
[Mon Dec 15 18:24:14.499468 2025] [:error] [pid 31373:tid 31415] [client 4.194.73.234:10002] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img/wp-login.php"] [unique_id "aT_hznFdnrU7ASwItVKoSAAAAMo"]
[Mon Dec 15 18:24:15.309817 2025] [:error] [pid 31373:tid 31419] [client 4.194.73.234:10040] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img/wp-login.php"] [unique_id "aT_hz3FdnrU7ASwItVKoSQAAAM4"]
[Mon Dec 15 18:24:15.669915 2025] [:error] [pid 31372:tid 31392] [client 4.194.73.234:10013] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-damin.php"] [unique_id "aT_hzwN06qRtpJxyxHhsBgAAAJA"]
[Mon Dec 15 18:24:16.082138 2025] [:error] [pid 31374:tid 31445] [client 4.194.73.234:10033] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-damin.php"] [unique_id "aT_h0JzSh8b7uk6RWiEn4gAAAE0"]
[Mon Dec 15 18:24:16.825289 2025] [:error] [pid 31374:tid 31448] [client 4.194.73.234:9993] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-damin.php"] [unique_id "aT_h0JzSh8b7uk6RWiEn5wAAAFA"]
[Mon Dec 15 18:24:17.318171 2025] [:error] [pid 31372:tid 31391] [client 4.194.73.234:10016] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-damin.php"] [unique_id "aT_h0QN06qRtpJxyxHhsCgAAAI8"]
[Mon Dec 15 18:24:17.994009 2025] [:error] [pid 31374:tid 31433] [client 4.194.73.234:9924] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT_h0ZzSh8b7uk6RWiEn7AAAAEE"]
[Mon Dec 15 18:24:19.014079 2025] [:error] [pid 31374:tid 31451] [client 4.194.73.234:9937] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT_h05zSh8b7uk6RWiEn8gAAAFM"]
[Mon Dec 15 18:24:19.481344 2025] [:error] [pid 31374:tid 31439] [client 4.194.73.234:9897] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT_h05zSh8b7uk6RWiEn9QAAAEc"]
[Mon Dec 15 18:24:20.338451 2025] [:error] [pid 31374:tid 31448] [client 4.194.73.234:10015] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cro.php"] [unique_id "aT_h1JzSh8b7uk6RWiEn9gAAAFA"]
[Mon Dec 15 18:24:20.776058 2025] [:error] [pid 31374:tid 31444] [client 4.194.73.234:10011] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aT_h1JzSh8b7uk6RWiEn-AAAAEw"]
[Mon Dec 15 18:24:21.462741 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:10042] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aT_h1TqerS0TDpViRzskegAAAAs"]
[Mon Dec 15 18:24:22.049892 2025] [:error] [pid 31373:tid 31405] [client 4.194.73.234:9990] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aT_h1nFdnrU7ASwItVKoUgAAAMA"]
[Mon Dec 15 18:24:22.447564 2025] [:error] [pid 31372:tid 31388] [client 4.194.73.234:10235] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aT_h1gN06qRtpJxyxHhsEQAAAIw"]
[Mon Dec 15 18:24:22.984478 2025] [:error] [pid 31374:tid 31441] [client 4.194.73.234:9995] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aT_h1pzSh8b7uk6RWiEn_gAAAEk"]
[Mon Dec 15 18:24:23.465760 2025] [:error] [pid 31374:tid 31451] [client 4.194.73.234:10027] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aT_h15zSh8b7uk6RWiEoAAAAAFM"]
[Mon Dec 15 18:24:24.291942 2025] [:error] [pid 31373:tid 31422] [client 4.194.73.234:9764] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aT_h2HFdnrU7ASwItVKoXwAAANE"]
[Mon Dec 15 18:24:25.390765 2025] [:error] [pid 31372:tid 31382] [client 4.194.73.234:10099] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aT_h2QN06qRtpJxyxHhsEwAAAIY"]
[Mon Dec 15 18:24:25.625996 2025] [:error] [pid 31459:tid 31472] [client 4.194.73.234:10018] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aT_h2TqerS0TDpViRzskhAAAAAs"]
[Mon Dec 15 18:24:26.151100 2025] [:error] [pid 31374:tid 31438] [client 4.194.73.234:9932] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aT_h2pzSh8b7uk6RWiEoCAAAAEY"]
[Mon Dec 15 18:24:26.843100 2025] [:error] [pid 31459:tid 31467] [client 4.194.73.234:9967] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aT_h2jqerS0TDpViRzsklAAAAAY"]
[Mon Dec 15 18:24:27.397615 2025] [:error] [pid 31459:tid 31483] [client 4.194.73.234:9930] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aT_h2zqerS0TDpViRzskoAAAABY"]
[Mon Dec 15 18:24:27.801845 2025] [:error] [pid 31373:tid 31409] [client 4.194.73.234:22239] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aT_h23FdnrU7ASwItVKoegAAAMQ"]
[Mon Dec 15 18:24:28.240167 2025] [:error] [pid 31459:tid 31465] [client 4.194.73.234:10069] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aT_h3DqerS0TDpViRzskrQAAAAQ"]
[Mon Dec 15 18:24:28.921053 2025] [:error] [pid 31459:tid 31481] [client 4.194.73.234:9922] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aT_h3DqerS0TDpViRzsktQAAABQ"]
[Mon Dec 15 18:24:29.492367 2025] [:error] [pid 31373:tid 31410] [client 4.194.73.234:10001] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aT_h3XFdnrU7ASwItVKoewAAAMU"]
[Mon Dec 15 18:24:30.079617 2025] [:error] [pid 31372:tid 31385] [client 4.194.73.234:10006] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aT_h3gN06qRtpJxyxHhsYAAAAIk"]
[Mon Dec 15 18:24:30.859652 2025] [:error] [pid 31372:tid 31389] [client 4.194.73.234:10020] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aT_h3gN06qRtpJxyxHhsYQAAAI0"]
[Mon Dec 15 18:24:31.326328 2025] [:error] [pid 31372:tid 31382] [client 4.194.73.234:9928] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aT_h3wN06qRtpJxyxHhsZAAAAIY"]
[Mon Dec 15 18:24:31.962283 2025] [:error] [pid 31373:tid 31407] [client 4.194.73.234:10026] [client 4.194.73.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aT_h33FdnrU7ASwItVKofgAAAMI"]
[Mon Dec 15 18:24:32.475344 2025] [:error] [pid 31459:tid 31461] [client 4.194.73.234:9870] File does not exist: /usr/local/apache/htdocs/suspended-page/conte.php
[Mon Dec 15 22:51:34.608011 2025] [:error] [pid 31373:tid 31414] [client 34.45.81.109:64664] [client 34.45.81.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.45.81.109, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUAgdnFdnrU7ASwItVIaeQAAAMk"]
[Mon Dec 15 22:51:34.610997 2025] [:error] [pid 31373:tid 31414] [client 34.45.81.109:64664] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 15 22:51:37.199070 2025] [:error] [pid 31373:tid 31416] [client 34.45.81.109:64664] [client 34.45.81.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aUAgeXFdnrU7ASwItVIahwAAAMs"]
[Mon Dec 15 22:51:37.692771 2025] [:error] [pid 31374:tid 31449] [client 34.45.81.109:62268] [client 34.45.81.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aUAgeZzSh8b7uk6RWiGgOwAAAFE"]
[Mon Dec 15 22:51:38.127955 2025] [:error] [pid 31459:tid 31461] [client 34.45.81.109:49266] [client 34.45.81.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aUAgejqerS0TDpViRzuqbQAAAAA"]
[Mon Dec 15 22:51:38.584189 2025] [:error] [pid 31374:tid 31453] [client 34.45.81.109:54796] [client 34.45.81.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aUAgepzSh8b7uk6RWiGgQgAAAFU"]
[Mon Dec 15 22:51:39.000108 2025] [:error] [pid 52155:tid 52160] [client 34.45.81.109:51230] [client 34.45.81.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aUAgehaJK6javjid3xwMTwAAAQI"]
[Mon Dec 15 22:51:39.439171 2025] [:error] [pid 31459:tid 31470] [client 34.45.81.109:64181] [client 34.45.81.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aUAgezqerS0TDpViRzuqbgAAAAk"]
[Mon Dec 15 22:51:39.876489 2025] [:error] [pid 52155:tid 52179] [client 34.45.81.109:59758] [client 34.45.81.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aUAgexaJK6javjid3xwMUwAAARU"]
[Tue Dec 16 02:56:24.261773 2025] [:error] [pid 31566:tid 31578] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.de/
[Tue Dec 16 02:56:24.400271 2025] [:error] [pid 31566:tid 31573] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.yahoo.com/
[Tue Dec 16 02:56:24.539463 2025] [:error] [pid 31566:tid 31587] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.com/
[Tue Dec 16 02:56:24.679515 2025] [:error] [pid 31566:tid 31574] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Tue Dec 16 02:56:24.819709 2025] [:error] [pid 31566:tid 31590] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.bing.com/
[Tue Dec 16 02:56:24.960379 2025] [:error] [pid 31566:tid 31592] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.google.fr/
[Tue Dec 16 02:56:25.099201 2025] [:error] [pid 31566:tid 31589] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://duckduckgo.com/
[Tue Dec 16 02:56:25.240870 2025] [:error] [pid 31566:tid 31571] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://duckduckgo.com/
[Tue Dec 16 02:56:25.675029 2025] [:error] [pid 31566:tid 31576] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://www.google.com/
[Tue Dec 16 02:56:25.814049 2025] [:error] [pid 31566:tid 31583] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.bing.com/
[Tue Dec 16 02:56:25.957132 2025] [:error] [pid 31566:tid 31587] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.co.uk/
[Tue Dec 16 02:56:26.095903 2025] [:error] [pid 31566:tid 31575] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.bing.com/
[Tue Dec 16 02:56:26.523456 2025] [:error] [pid 31566:tid 31577] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.fr/
[Tue Dec 16 02:56:26.662026 2025] [:error] [pid 31566:tid 31589] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Tue Dec 16 02:56:26.808053 2025] [:error] [pid 31566:tid 31572] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.yahoo.com/
[Tue Dec 16 02:56:26.954191 2025] [:error] [pid 31566:tid 31571] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.co.uk/
[Tue Dec 16 02:56:27.100008 2025] [:error] [pid 31566:tid 31579] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.bing.com/
[Tue Dec 16 02:56:27.381640 2025] [:error] [pid 31566:tid 31570] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://www.google.fr/
[Tue Dec 16 02:56:27.520877 2025] [:error] [pid 31566:tid 31584] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.de/
[Tue Dec 16 02:56:27.937944 2025] [:error] [pid 31566:tid 31594] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.fr/
[Tue Dec 16 02:56:28.079826 2025] [:error] [pid 31566:tid 31583] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Tue Dec 16 02:56:28.236631 2025] [:error] [pid 31566:tid 31585] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://duckduckgo.com/
[Tue Dec 16 02:56:28.375474 2025] [:error] [pid 31566:tid 31575] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.bing.com/
[Tue Dec 16 02:56:28.653726 2025] [:error] [pid 31566:tid 31590] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.yahoo.com/
[Tue Dec 16 02:56:29.087911 2025] [:error] [pid 31566:tid 31576] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://duckduckgo.com/
[Tue Dec 16 02:56:29.520629 2025] [:error] [pid 31566:tid 31583] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.com/
[Tue Dec 16 02:56:29.662125 2025] [:error] [pid 31566:tid 31585] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.com/
[Tue Dec 16 02:56:32.032643 2025] [:error] [pid 31566:tid 31588] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.bing.com/
[Tue Dec 16 02:56:35.967587 2025] [:error] [pid 31566:tid 31579] [client 20.214.242.147:63946] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.de/
[Tue Dec 16 02:56:36.284006 2025] [:error] [pid 31566:tid 31578] [client 20.214.242.147:63946] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aUBZ5Pp1NDLK4uehYB-e7gAAAIg"], referer: https://www.bing.com/
[Tue Dec 16 02:56:36.708288 2025] [:error] [pid 34495:tid 34521] [client 20.214.242.147:65308] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUBZ5GZCUf_mSR4srxum1gAAAVg"], referer: https://www.yahoo.com/
[Tue Dec 16 02:56:36.984780 2025] [:error] [pid 34495:tid 34513] [client 20.214.242.147:63963] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUBZ5GZCUf_mSR4srxum2AAAAVA"], referer: https://www.bing.com/
[Tue Dec 16 02:56:37.258081 2025] [:error] [pid 34410:tid 34450] [client 20.214.242.147:65314] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aUBZ5cWDXTJsXAHPFUnK5gAAAEk"], referer: https://www.google.co.uk/
[Tue Dec 16 02:56:37.528695 2025] [:error] [pid 34410:tid 34461] [client 20.214.242.147:65348] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUBZ5cWDXTJsXAHPFUnK6AAAAFQ"], referer: https://www.google.de/
[Tue Dec 16 02:56:38.141935 2025] [:error] [pid 34409:tid 34435] [client 20.214.242.147:63951] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUBZ5owgv-_jDvPU81GihgAAANU"], referer: https://duckduckgo.com/
[Tue Dec 16 02:56:38.415216 2025] [:error] [pid 34411:tid 34479] [client 20.214.242.147:65398] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUBZ5h05Egz6aV0buEzg1QAAAAs"], referer: https://www.google.co.uk/
[Tue Dec 16 02:56:38.690503 2025] [:error] [pid 34411:tid 34483] [client 20.214.242.147:65329] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUBZ5h05Egz6aV0buEzg1wAAAA8"], referer: https://www.yahoo.com/
[Tue Dec 16 02:56:39.535070 2025] [:error] [pid 34409:tid 34431] [client 20.214.242.147:2393] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUBZ54wgv-_jDvPU81GijAAAANE"], referer: https://duckduckgo.com/
[Tue Dec 16 02:56:39.809559 2025] [:error] [pid 34409:tid 34428] [client 20.214.242.147:2427] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUBZ54wgv-_jDvPU81GijQAAAM4"], referer: https://www.google.fr/
[Tue Dec 16 02:56:40.085036 2025] [:error] [pid 34495:tid 34508] [client 20.214.242.147:2329] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUBZ6GZCUf_mSR4srxum4AAAAUs"], referer: https://www.google.fr/
[Tue Dec 16 02:56:40.498302 2025] [:error] [pid 34411:tid 34492] [client 20.214.242.147:63985] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUBZ6B05Egz6aV0buEzg3QAAABg"], referer: https://www.google.fr/
[Tue Dec 16 02:56:40.792050 2025] [:error] [pid 34495:tid 34519] [client 20.214.242.147:65383] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUBZ6GZCUf_mSR4srxum4QAAAVY"], referer: https://duckduckgo.com/
[Tue Dec 16 02:56:41.486231 2025] [:error] [pid 34410:tid 34453] [client 20.214.242.147:65328] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUBZ6cWDXTJsXAHPFUnK7wAAAEw"], referer: https://www.google.fr/
[Tue Dec 16 02:56:41.761122 2025] [:error] [pid 31566:tid 31586] [client 20.214.242.147:65302] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUBZ6fp1NDLK4uehYB-e9AAAAJA"], referer: https://www.google.fr/
[Tue Dec 16 02:56:42.061120 2025] [:error] [pid 31566:tid 31578] [client 20.214.242.147:65407] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aUBZ6vp1NDLK4uehYB-e9QAAAIg"], referer: https://www.google.de/
[Tue Dec 16 02:56:42.511644 2025] [:error] [pid 31566:tid 31589] [client 20.214.242.147:65371] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aUBZ6vp1NDLK4uehYB-e-QAAAJM"], referer: https://duckduckgo.com/
[Tue Dec 16 02:56:42.786480 2025] [:error] [pid 34495:tid 34507] [client 20.214.242.147:2423] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUBZ6mZCUf_mSR4srxum4wAAAUo"], referer: https://www.bing.com/
[Tue Dec 16 02:56:43.071753 2025] [:error] [pid 31566:tid 31581] [client 20.214.242.147:2335] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aUBZ6_p1NDLK4uehYB-e_AAAAIs"], referer: https://www.google.fr/
[Tue Dec 16 02:56:43.374250 2025] [:error] [pid 31566:tid 31570] [client 20.214.242.147:65327] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUBZ6_p1NDLK4uehYB-e_QAAAIA"], referer: https://www.google.de/
[Tue Dec 16 02:56:43.661616 2025] [:error] [pid 34409:tid 34415] [client 20.214.242.147:65385] [client 20.214.242.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUBZ64wgv-_jDvPU81GikAAAAME"], referer: https://www.bing.com/
[Tue Dec 16 02:56:44.097708 2025] [:error] [pid 34410:tid 34461] [client 20.214.242.147:2431] [client 20.214.242.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.242.147, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aUBZ7MWDXTJsXAHPFUnK-QAAAFQ"], referer: https://duckduckgo.com/
[Tue Dec 16 02:56:44.103481 2025] [:error] [pid 34410:tid 34461] [client 20.214.242.147:2431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Tue Dec 16 02:56:44.245147 2025] [:error] [pid 34410:tid 34452] [client 20.214.242.147:2431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.google.de/
[Tue Dec 16 02:56:44.391041 2025] [:error] [pid 34410:tid 34451] [client 20.214.242.147:2431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://duckduckgo.com/
[Tue Dec 16 02:56:44.532512 2025] [:error] [pid 34410:tid 34459] [client 20.214.242.147:2431] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.de/
[Tue Dec 16 02:56:44.677505 2025] [:error] [pid 34410:tid 34463] [client 20.214.242.147:2431] [client 20.214.242.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.242.147, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUBZ7MWDXTJsXAHPFUnK_wAAAFY"], referer: https://www.bing.com/
[Tue Dec 16 02:56:44.681683 2025] [:error] [pid 34410:tid 34463] [client 20.214.242.147:2431] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.bing.com/
[Tue Dec 16 02:56:44.819674 2025] [:error] [pid 34410:tid 34458] [client 20.214.242.147:2431] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.fr/
[Tue Dec 16 04:10:41.126772 2025] [:error] [pid 65267:tid 65302] [client 45.154.138.14:57753] [client 45.154.138.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/tflow/"] [unique_id "aUBrQWrHTzAzdGldlZPoJAAAAEQ"]
[Tue Dec 16 04:36:23.143470 2025] [:error] [pid 18408:tid 18428] [client 175.6.217.4:55814] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUBxRzi2Gr8pDzjrVBDc9QAAANI"]
[Tue Dec 16 05:18:23.656060 2025] [:error] [pid 51991:tid 52008] [client 167.71.99.109:37344] [client 167.71.99.109] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aUB7H67zKCVJSuwV1xYt1QAAAQ8"]
[Tue Dec 16 05:42:12.962610 2025] [:error] [pid 18324:tid 18395] [client 174.138.83.242:39136] [client 174.138.83.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aUCAtKG4um2mD1VpJHKTVgAAAI8"]
[Tue Dec 16 07:53:54.942737 2025] [:error] [pid 35998:tid 36023] [client 129.226.213.145:50754] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUCfkhKnhGuuhGxBSLP7hAAAAVY"]
[Tue Dec 16 09:06:05.317663 2025] [:error] [pid 18322:tid 18335] [client 43.130.141.193:56384] [client 43.130.141.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUCwfZsCeWBjrw28XtxOUgAAAAk"]
[Tue Dec 16 10:39:23.483508 2025] [:error] [pid 51991:tid 52007] [client 36.111.67.189:39675] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUDGW67zKCVJSuwV1xbLbQAAAQ4"]
[Tue Dec 16 12:49:49.934322 2025] [:error] [pid 18323:tid 18355] [client 43.157.52.37:51150] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUDk7TJB6UFxIutsA8bK9AAAAEI"]
[Tue Dec 16 14:45:01.197788 2025] [:error] [pid 53940:tid 53956] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-729.php
[Tue Dec 16 14:45:01.314014 2025] [:error] [pid 53940:tid 53958] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Tue Dec 16 14:45:01.436967 2025] [:error] [pid 53940:tid 53949] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Tue Dec 16 14:45:01.529796 2025] [:error] [pid 53940:tid 53954] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/tesTyuj.php
[Tue Dec 16 14:45:01.643788 2025] [:error] [pid 53940:tid 53953] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Tue Dec 16 14:45:01.737321 2025] [:error] [pid 53940:tid 53948] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Dec 16 14:45:01.857217 2025] [:error] [pid 53940:tid 53964] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Tue Dec 16 14:45:01.946688 2025] [:error] [pid 53940:tid 53946] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Tue Dec 16 14:45:02.145708 2025] [:error] [pid 53940:tid 53960] [client 52.163.112.251:27456] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-64wscx6shd.php
[Tue Dec 16 14:45:02.234148 2025] [:error] [pid 53940:tid 53965] [client 52.163.112.251:27456] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aUD_7l91PNbcXLVkpR6pkAAAAdY"]
[Tue Dec 16 14:45:04.866596 2025] [:error] [pid 51991:tid 52007] [client 52.163.112.251:11848] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aUD_8K7zKCVJSuwV1xY0vAAAAQ4"]
[Tue Dec 16 14:45:09.321056 2025] [:error] [pid 35998:tid 36016] [client 52.163.112.251:11417] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aUD_9RKnhGuuhGxBSLNzDgAAAU8"]
[Tue Dec 16 14:45:11.017350 2025] [:error] [pid 18323:tid 18354] [client 52.163.112.251:15053] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aUD_9zJB6UFxIutsA8bpygAAAEE"]
[Tue Dec 16 14:45:13.567824 2025] [:error] [pid 18323:tid 18369] [client 52.163.112.251:9388] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sid.php"] [unique_id "aUD_-TJB6UFxIutsA8bpzAAAAFA"]
[Tue Dec 16 14:45:15.702612 2025] [:error] [pid 53940:tid 53946] [client 52.163.112.251:8490] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sid.php"] [unique_id "aUD_-191PNbcXLVkpR6ppQAAAcM"]
[Tue Dec 16 14:45:16.560759 2025] [:error] [pid 51991:tid 52003] [client 52.163.112.251:15043] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sid.php"] [unique_id "aUD__K7zKCVJSuwV1xY0ygAAAQo"]
[Tue Dec 16 14:45:17.323610 2025] [:error] [pid 51991:tid 52016] [client 52.163.112.251:26625] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sid.php"] [unique_id "aUD__a7zKCVJSuwV1xY0zQAAARc"]
[Tue Dec 16 14:45:19.664120 2025] [:error] [pid 18408:tid 18424] [client 52.163.112.251:15067] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aUD__zi2Gr8pDzjrVBC8mQAAAM4"]
[Tue Dec 16 14:45:20.664969 2025] [:error] [pid 35998:tid 36005] [client 52.163.112.251:11437] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aUEAABKnhGuuhGxBSLNzEwAAAUQ"]
[Tue Dec 16 14:45:23.895972 2025] [:error] [pid 51991:tid 51997] [client 52.163.112.251:26666] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aUEAA67zKCVJSuwV1xY02AAAAQQ"]
[Tue Dec 16 14:45:27.470651 2025] [:error] [pid 12330:tid 12347] [client 52.163.112.251:22021] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aUEAB16iIQEVCIh8V1kuRgAAAY0"]
[Tue Dec 16 14:45:28.276122 2025] [:error] [pid 12330:tid 12355] [client 52.163.112.251:21589] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aUEACF6iIQEVCIh8V1kuSQAAAZU"]
[Tue Dec 16 14:45:32.574934 2025] [:error] [pid 18323:tid 18364] [client 52.163.112.251:1072] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aUEADDJB6UFxIutsA8bp1AAAAEs"]
[Tue Dec 16 14:45:36.125792 2025] [:error] [pid 18408:tid 18422] [client 52.163.112.251:14325] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aUEAEDi2Gr8pDzjrVBC8pgAAAMw"]
[Tue Dec 16 14:45:45.260996 2025] [:error] [pid 18322:tid 18349] [client 52.163.112.251:1651] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUEAGZsCeWBjrw28XtzEEQAAABc"]
[Tue Dec 16 14:45:49.979946 2025] [:error] [pid 18324:tid 18390] [client 52.163.112.251:52963] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUEAHaG4um2mD1VpJHJNDQAAAIo"]
[Tue Dec 16 14:45:52.995728 2025] [:error] [pid 18324:tid 18399] [client 52.163.112.251:52953] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUEAIKG4um2mD1VpJHJNEQAAAJM"]
[Tue Dec 16 14:45:54.430592 2025] [:error] [pid 18323:tid 18360] [client 52.163.112.251:14510] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUEAIjJB6UFxIutsA8bp4AAAAEc"]
[Tue Dec 16 14:45:56.354896 2025] [:error] [pid 18408:tid 18428] [client 52.163.112.251:14523] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-title.php"] [unique_id "aUEAJDi2Gr8pDzjrVBC8sgAAANI"]
[Tue Dec 16 14:45:57.823813 2025] [:error] [pid 18324:tid 18382] [client 52.163.112.251:64263] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-title.php"] [unique_id "aUEAJaG4um2mD1VpJHJNFQAAAII"]
[Tue Dec 16 14:45:59.551526 2025] [:error] [pid 18408:tid 18426] [client 52.163.112.251:25879] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-title.php"] [unique_id "aUEAJzi2Gr8pDzjrVBC8uQAAANA"]
[Tue Dec 16 14:46:01.119313 2025] [:error] [pid 18324:tid 18391] [client 52.163.112.251:22136] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-title.php"] [unique_id "aUEAKaG4um2mD1VpJHJNFwAAAIs"]
[Tue Dec 16 14:46:03.197595 2025] [:error] [pid 53940:tid 53950] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Tue Dec 16 14:46:03.289162 2025] [:error] [pid 53940:tid 53962] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-home.php
[Tue Dec 16 14:46:04.083178 2025] [:error] [pid 53940:tid 53952] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Tue Dec 16 14:46:04.173761 2025] [:error] [pid 53940:tid 53958] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/atex1.php
[Tue Dec 16 14:46:04.265104 2025] [:error] [pid 53940:tid 53956] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/kdgok.php
[Tue Dec 16 14:46:04.357049 2025] [:error] [pid 53940:tid 53949] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/vanda.php
[Tue Dec 16 14:46:04.679118 2025] [:error] [pid 53940:tid 53954] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Dec 16 14:46:04.780657 2025] [:error] [pid 53940:tid 53963] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/sid-file.php
[Tue Dec 16 14:46:04.884044 2025] [:error] [pid 53940:tid 53957] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/l3gi0n.php
[Tue Dec 16 14:46:04.988655 2025] [:error] [pid 53940:tid 53959] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Tue Dec 16 14:46:05.088675 2025] [:error] [pid 53940:tid 53946] [client 52.163.112.251:51335] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Tue Dec 16 14:46:05.191097 2025] [:error] [pid 53940:tid 53955] [client 52.163.112.251:51335] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aUEALV91PNbcXLVkpR6pxwAAAcw"]
[Tue Dec 16 14:46:07.605791 2025] [:error] [pid 35998:tid 36021] [client 52.163.112.251:17640] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aUEALxKnhGuuhGxBSLNzJgAAAVQ"]
[Tue Dec 16 14:46:08.932036 2025] [:error] [pid 18324:tid 18381] [client 52.163.112.251:17641] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aUEAMKG4um2mD1VpJHJNHQAAAIE"]
[Tue Dec 16 14:46:11.723099 2025] [:error] [pid 53940:tid 53944] [client 52.163.112.251:17845] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aUEAM191PNbcXLVkpR6pzQAAAcE"]
[Tue Dec 16 14:46:12.812144 2025] [:error] [pid 35998:tid 36008] [client 52.163.112.251:20857] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Contrller.php"] [unique_id "aUEANBKnhGuuhGxBSLNzKgAAAUc"]
[Tue Dec 16 14:46:17.302802 2025] [:error] [pid 18324:tid 18384] [client 52.163.112.251:20852] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Contrller.php"] [unique_id "aUEAOaG4um2mD1VpJHJNIwAAAIQ"]
[Tue Dec 16 14:46:21.705975 2025] [:error] [pid 18408:tid 18417] [client 52.163.112.251:17825] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Contrller.php"] [unique_id "aUEAPTi2Gr8pDzjrVBC80QAAAMc"]
[Tue Dec 16 14:46:24.089760 2025] [:error] [pid 18324:tid 18390] [client 52.163.112.251:64251] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Contrller.php"] [unique_id "aUEAQKG4um2mD1VpJHJNKwAAAIo"]
[Tue Dec 16 14:46:54.623306 2025] [:error] [pid 18324:tid 18402] [client 52.163.112.251:12784] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aUEAXqG4um2mD1VpJHJNQwAAAJY"]
[Tue Dec 16 14:46:56.395052 2025] [:error] [pid 35998:tid 36013] [client 52.163.112.251:20431] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aUEAYBKnhGuuhGxBSLNzUgAAAUw"]
[Tue Dec 16 14:46:58.281238 2025] [:error] [pid 18408:tid 18431] [client 52.163.112.251:20355] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aUEAYji2Gr8pDzjrVBC8-QAAANU"]
[Tue Dec 16 14:47:00.039219 2025] [:error] [pid 35998:tid 36007] [client 52.163.112.251:34920] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aUEAZBKnhGuuhGxBSLNzWAAAAUY"]
[Tue Dec 16 14:47:03.223659 2025] [:error] [pid 51991:tid 51999] [client 52.163.112.251:1668] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inghl.php"] [unique_id "aUEAZ67zKCVJSuwV1xY1WwAAAQY"]
[Tue Dec 16 14:47:05.496359 2025] [:error] [pid 18408:tid 18427] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/inghl.php
[Tue Dec 16 14:47:06.946597 2025] [:error] [pid 18408:tid 18427] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-securitiy.php
[Tue Dec 16 14:47:07.038112 2025] [:error] [pid 18408:tid 18411] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Tue Dec 16 14:47:07.690753 2025] [:error] [pid 18408:tid 18417] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ac.php
[Tue Dec 16 14:47:07.791645 2025] [:error] [pid 18408:tid 18433] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/krypton.php
[Tue Dec 16 14:47:07.889209 2025] [:error] [pid 18408:tid 18424] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/karma_57c3d4.php
[Tue Dec 16 14:47:08.577053 2025] [:error] [pid 18408:tid 18432] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/fc72f.php
[Tue Dec 16 14:47:08.682615 2025] [:error] [pid 18408:tid 18418] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Dec 16 14:47:08.774401 2025] [:error] [pid 18408:tid 18416] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/jjrpo.php
[Tue Dec 16 14:47:08.865308 2025] [:error] [pid 18408:tid 18423] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Tue Dec 16 14:47:08.968235 2025] [:error] [pid 18408:tid 18428] [client 52.163.112.251:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-advaced.php
[Tue Dec 16 14:47:09.090765 2025] [:error] [pid 18408:tid 18413] [client 52.163.112.251:1113] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aUEAbTi2Gr8pDzjrVBC9FAAAAMM"]
[Tue Dec 16 14:47:11.158892 2025] [:error] [pid 18323:tid 18355] [client 52.163.112.251:1696] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aUEAbzJB6UFxIutsA8bqJAAAAEI"]
[Tue Dec 16 14:47:12.722798 2025] [:error] [pid 51991:tid 52001] [client 52.163.112.251:9695] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aUEAcK7zKCVJSuwV1xY1fgAAAQg"]
[Tue Dec 16 14:47:14.515913 2025] [:error] [pid 18408:tid 18417] [client 52.163.112.251:25376] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aUEAcji2Gr8pDzjrVBC9GgAAAMc"]
[Tue Dec 16 14:47:17.017784 2025] [:error] [pid 35998:tid 36025] [client 52.163.112.251:25930] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aUEAdRKnhGuuhGxBSLNzXgAAAVg"]
[Tue Dec 16 14:47:18.326940 2025] [:error] [pid 53940:tid 53956] [client 52.163.112.251:24351] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aUEAdl91PNbcXLVkpR6qWAAAAc0"]
[Tue Dec 16 14:47:20.851988 2025] [:error] [pid 53940:tid 53961] [client 52.163.112.251:1101] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aUEAeF91PNbcXLVkpR6qWwAAAdI"]
[Tue Dec 16 14:47:23.962151 2025] [:error] [pid 53940:tid 53952] [client 52.163.112.251:20453] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "aUEAe191PNbcXLVkpR6qZAAAAck"]
[Tue Dec 16 14:47:26.777823 2025] [:error] [pid 12330:tid 12347] [client 52.163.112.251:20438] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aUEAfl6iIQEVCIh8V1kuwAAAAY0"]
[Tue Dec 16 14:47:28.847940 2025] [:error] [pid 18408:tid 18420] [client 52.163.112.251:9669] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aUEAgDi2Gr8pDzjrVBC9JAAAAMo"]
[Tue Dec 16 14:47:30.785493 2025] [:error] [pid 18323:tid 18356] [client 52.163.112.251:1107] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aUEAgjJB6UFxIutsA8bqLwAAAEM"]
[Tue Dec 16 14:47:33.817341 2025] [:error] [pid 51991:tid 52003] [client 52.163.112.251:24338] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aUEAha7zKCVJSuwV1xY1mAAAAQo"]
[Tue Dec 16 14:47:35.739648 2025] [:error] [pid 18323:tid 18377] [client 52.163.112.251:25364] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aUEAhzJB6UFxIutsA8bqMwAAAFg"]
[Tue Dec 16 14:47:37.558530 2025] [:error] [pid 18322:tid 18330] [client 52.163.112.251:1132] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aUEAiZsCeWBjrw28XtzEfAAAAAQ"]
[Tue Dec 16 14:47:40.476967 2025] [:error] [pid 53940:tid 53953] [client 52.163.112.251:16275] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aUEAjF91PNbcXLVkpR6qeAAAAco"]
[Tue Dec 16 14:47:42.694654 2025] [:error] [pid 12330:tid 12352] [client 52.163.112.251:24393] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aUEAjl6iIQEVCIh8V1ku0AAAAZI"]
[Tue Dec 16 14:47:44.298693 2025] [:error] [pid 18322:tid 18326] [client 52.163.112.251:11486] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUEAkJsCeWBjrw28XtzEggAAAAA"]
[Tue Dec 16 14:47:49.913079 2025] [:error] [pid 35998:tid 36004] [client 52.163.112.251:25937] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUEAlRKnhGuuhGxBSLNzbgAAAUM"]
[Tue Dec 16 14:47:54.199503 2025] [:error] [pid 51991:tid 52011] [client 52.163.112.251:24425] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUEAmq7zKCVJSuwV1xY1qwAAARI"]
[Tue Dec 16 14:47:55.404237 2025] [:error] [pid 18408:tid 18431] [client 52.163.112.251:1442] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUEAmzi2Gr8pDzjrVBC9OQAAANU"]
[Tue Dec 16 14:48:00.497361 2025] [:error] [pid 12330:tid 12334] [client 52.163.112.251:25975] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUEAoF6iIQEVCIh8V1ku2gAAAYA"]
[Tue Dec 16 14:48:01.662454 2025] [:error] [pid 35998:tid 36006] [client 52.163.112.251:11468] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUEAoRKnhGuuhGxBSLNzdgAAAUU"]
[Tue Dec 16 14:48:03.235052 2025] [:error] [pid 18323:tid 18376] [client 52.163.112.251:9704] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUEAozJB6UFxIutsA8bqSwAAAFc"]
[Tue Dec 16 14:48:06.295144 2025] [:error] [pid 18323:tid 18376] [client 52.163.112.251:16294] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUEApjJB6UFxIutsA8bqVwAAAFc"]
[Tue Dec 16 14:48:10.407708 2025] [:error] [pid 12330:tid 12342] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/jdlqi.php
[Tue Dec 16 14:48:10.499235 2025] [:error] [pid 12330:tid 12358] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Tue Dec 16 14:48:10.752747 2025] [:error] [pid 12330:tid 12356] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/khgdl.php
[Tue Dec 16 14:48:10.844126 2025] [:error] [pid 12330:tid 12335] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Dec 16 14:48:10.934655 2025] [:error] [pid 12330:tid 12348] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/ghreshttryu.php
[Tue Dec 16 14:48:11.026488 2025] [:error] [pid 12330:tid 12349] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/xopvne.php
[Tue Dec 16 14:48:11.120207 2025] [:error] [pid 12330:tid 12357] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/lm18.php
[Tue Dec 16 14:48:11.212303 2025] [:error] [pid 12330:tid 12354] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Tue Dec 16 14:48:11.309232 2025] [:error] [pid 12330:tid 12350] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Dec 16 14:48:11.761470 2025] [:error] [pid 12330:tid 12336] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Tue Dec 16 14:48:11.892194 2025] [:error] [pid 12330:tid 12353] [client 52.163.112.251:1160] File does not exist: /usr/local/apache/htdocs/suspended-page/ce.php
[Tue Dec 16 14:48:12.008964 2025] [:error] [pid 12330:tid 12344] [client 52.163.112.251:1160] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aUEArF6iIQEVCIh8V1ku8gAAAYo"]
[Tue Dec 16 14:48:13.778694 2025] [:error] [pid 51991:tid 52011] [client 52.163.112.251:12445] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aUEAra7zKCVJSuwV1xY19wAAARI"]
[Tue Dec 16 14:48:16.726133 2025] [:error] [pid 51991:tid 52002] [client 52.163.112.251:21787] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aUEAsK7zKCVJSuwV1xY2AQAAAQk"]
[Tue Dec 16 14:48:18.775146 2025] [:error] [pid 51991:tid 51996] [client 52.163.112.251:21548] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aUEAsq7zKCVJSuwV1xY2BgAAAQM"]
[Tue Dec 16 14:48:20.481407 2025] [:error] [pid 53940:tid 53945] [client 52.163.112.251:1155] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aUEAtF91PNbcXLVkpR6qoAAAAcI"]
[Tue Dec 16 14:48:23.565140 2025] [:error] [pid 51991:tid 52017] [client 52.163.112.251:20762] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aUEAt67zKCVJSuwV1xY2FwAAARg"]
[Tue Dec 16 14:48:26.604864 2025] [:error] [pid 51991:tid 51995] [client 52.163.112.251:1185] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aUEAuq7zKCVJSuwV1xY2IQAAAQI"]
[Tue Dec 16 14:48:29.012385 2025] [:error] [pid 35998:tid 36024] [client 52.163.112.251:21819] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aUEAvRKnhGuuhGxBSLNzlAAAAVc"]
[Tue Dec 16 14:48:30.252897 2025] [:error] [pid 18324:tid 18383] [client 52.163.112.251:53449] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aUEAvqG4um2mD1VpJHJNtAAAAIM"]
[Tue Dec 16 14:48:31.904386 2025] [:error] [pid 18324:tid 18396] [client 52.163.112.251:1965] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aUEAv6G4um2mD1VpJHJNuAAAAJA"]
[Tue Dec 16 14:48:34.724132 2025] [:error] [pid 18324:tid 18386] [client 52.163.112.251:1414] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aUEAwqG4um2mD1VpJHJNvAAAAIY"]
[Tue Dec 16 14:48:36.410919 2025] [:error] [pid 18408:tid 18416] [client 52.163.112.251:26718] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aUEAxDi2Gr8pDzjrVBC9oQAAAMY"]
[Tue Dec 16 14:48:39.353893 2025] [:error] [pid 12330:tid 12352] [client 52.163.112.251:11660] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4fk6.php"] [unique_id "aUEAx16iIQEVCIh8V1ku_wAAAZI"]
[Tue Dec 16 14:48:44.433525 2025] [:error] [pid 18323:tid 18357] [client 52.163.112.251:11505] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4fk6.php"] [unique_id "aUEAzDJB6UFxIutsA8bqbAAAAEQ"]
[Tue Dec 16 14:48:47.505511 2025] [:error] [pid 53940:tid 53944] [client 52.163.112.251:16263] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4fk6.php"] [unique_id "aUEAz191PNbcXLVkpR6qtwAAAcE"]
[Tue Dec 16 14:48:50.851716 2025] [:error] [pid 35998:tid 36023] [client 52.163.112.251:1171] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4fk6.php"] [unique_id "aUEA0hKnhGuuhGxBSLNzpQAAAVY"]
[Tue Dec 16 14:48:54.272757 2025] [:error] [pid 18324:tid 18396] [client 52.163.112.251:26113] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z123.php"] [unique_id "aUEA1qG4um2mD1VpJHJN0gAAAJA"]
[Tue Dec 16 14:48:58.402875 2025] [:error] [pid 51991:tid 52012] [client 52.163.112.251:21765] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z123.php"] [unique_id "aUEA2q7zKCVJSuwV1xY2aAAAARM"]
[Tue Dec 16 14:48:58.701344 2025] [:error] [pid 35998:tid 36001] [client 52.163.112.251:21542] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z123.php"] [unique_id "aUEA2hKnhGuuhGxBSLNzqQAAAUA"]
[Tue Dec 16 14:49:04.793616 2025] [:error] [pid 35998:tid 36014] [client 52.163.112.251:21352] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z123.php"] [unique_id "aUEA4BKnhGuuhGxBSLNztQAAAU0"]
[Tue Dec 16 14:49:09.377988 2025] [:error] [pid 12330:tid 12345] [client 52.163.112.251:24428] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dox.php"] [unique_id "aUEA5V6iIQEVCIh8V1kvGAAAAYs"]
[Tue Dec 16 14:49:12.639759 2025] [:error] [pid 18324:tid 18391] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/dox.php
[Tue Dec 16 14:49:13.379407 2025] [:error] [pid 18324:tid 18384] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/ccea.php
[Tue Dec 16 14:49:13.492614 2025] [:error] [pid 18324:tid 18394] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Tue Dec 16 14:49:13.682232 2025] [:error] [pid 18324:tid 18401] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Tue Dec 16 14:49:13.792315 2025] [:error] [pid 18324:tid 18404] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 16 14:49:13.883142 2025] [:error] [pid 18324:tid 18403] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/s121ws2s.php
[Tue Dec 16 14:49:13.973133 2025] [:error] [pid 18324:tid 18396] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Tue Dec 16 14:49:14.063065 2025] [:error] [pid 18324:tid 18397] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Tue Dec 16 14:49:14.153402 2025] [:error] [pid 18324:tid 18389] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Tue Dec 16 14:49:14.247260 2025] [:error] [pid 18324:tid 18384] [client 52.163.112.251:16265] File does not exist: /usr/local/apache/htdocs/suspended-page/783de.php
[Tue Dec 16 14:49:14.857490 2025] [:error] [pid 18324:tid 18394] [client 52.163.112.251:16265] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aUEA6qG4um2mD1VpJHJOAQAAAI4"]
[Tue Dec 16 14:49:19.885745 2025] [:error] [pid 51991:tid 52016] [client 52.163.112.251:1410] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aUEA767zKCVJSuwV1xY2iQAAARc"]
[Tue Dec 16 14:49:24.861493 2025] [:error] [pid 53940:tid 53951] [client 52.163.112.251:24441] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aUEA9F91PNbcXLVkpR6qzwAAAcg"]
[Tue Dec 16 14:49:26.478276 2025] [:error] [pid 18322:tid 18345] [client 52.163.112.251:21533] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aUEA9psCeWBjrw28XtzEvAAAABM"]
[Tue Dec 16 14:49:32.576015 2025] [:error] [pid 12330:tid 12346] [client 52.163.112.251:8502] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aUEA_F6iIQEVCIh8V1kvIwAAAYw"]
[Tue Dec 16 14:49:38.837768 2025] [:error] [pid 51991:tid 51995] [client 52.163.112.251:8456] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aUEBAq7zKCVJSuwV1xY2pwAAAQI"]
[Tue Dec 16 14:49:46.378737 2025] [:error] [pid 35998:tid 36016] [client 52.163.112.251:1930] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aUEBChKnhGuuhGxBSLNzzwAAAU8"]
[Tue Dec 16 14:49:51.645067 2025] [:error] [pid 51991:tid 52001] [client 52.163.112.251:16291] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aUEBD67zKCVJSuwV1xY2swAAAQg"]
[Tue Dec 16 14:49:54.567196 2025] [:error] [pid 51991:tid 52011] [client 52.163.112.251:21571] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aUEBEq7zKCVJSuwV1xY2uAAAARI"]
[Tue Dec 16 14:49:58.619824 2025] [:error] [pid 18323:tid 18372] [client 52.163.112.251:13046] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aUEBFjJB6UFxIutsA8bqkAAAAFM"]
[Tue Dec 16 14:50:00.684163 2025] [:error] [pid 18323:tid 18354] [client 52.163.112.251:1425] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEBGDJB6UFxIutsA8bqlAAAAEE"]
[Tue Dec 16 14:50:04.858648 2025] [:error] [pid 18324:tid 18400] [client 52.163.112.251:22065] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEBHKG4um2mD1VpJHJOGgAAAJQ"]
[Tue Dec 16 14:50:09.274565 2025] [:error] [pid 12330:tid 12355] [client 52.163.112.251:22069] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEBIV6iIQEVCIh8V1kvRQAAAZU"]
[Tue Dec 16 14:50:11.574708 2025] [:error] [pid 51991:tid 52003] [client 52.163.112.251:21788] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3i8som87avh59dosfymtvCakc.php"] [unique_id "aUEBI67zKCVJSuwV1xY2zwAAAQo"]
[Tue Dec 16 14:50:12.915749 2025] [:error] [pid 35998:tid 36025] [client 52.163.112.251:24414] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aUEBJBKnhGuuhGxBSLNz6gAAAVg"]
[Tue Dec 16 14:50:13.787201 2025] [:error] [pid 18324:tid 18403] [client 52.163.112.251:24407] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aUEBJaG4um2mD1VpJHJOSQAAAJc"]
[Tue Dec 16 14:50:15.417152 2025] [:error] [pid 18324:tid 18398] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/rzki.php
[Tue Dec 16 14:50:15.696610 2025] [:error] [pid 18324:tid 18390] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Tue Dec 16 14:50:15.990218 2025] [:error] [pid 18324:tid 18404] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Dec 16 14:50:16.281499 2025] [:error] [pid 18324:tid 18388] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/6kUgr4yGzxN.php
[Tue Dec 16 14:50:16.561625 2025] [:error] [pid 18324:tid 18397] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Tue Dec 16 14:50:16.847288 2025] [:error] [pid 18324:tid 18382] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/rp8zi.php
[Tue Dec 16 14:50:17.596317 2025] [:error] [pid 18324:tid 18382] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/cc3.php
[Tue Dec 16 14:50:17.840376 2025] [:error] [pid 18324:tid 18383] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue Dec 16 14:50:18.082324 2025] [:error] [pid 18324:tid 18396] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Dec 16 14:50:18.586826 2025] [:error] [pid 18324:tid 18391] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Tue Dec 16 14:50:18.834651 2025] [:error] [pid 18324:tid 18403] [client 52.163.112.251:24436] File does not exist: /usr/local/apache/htdocs/suspended-page/qV9GbcJwZgK.php
[Tue Dec 16 14:50:19.093393 2025] [:error] [pid 18324:tid 18399] [client 52.163.112.251:24436] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEBK6G4um2mD1VpJHJOVwAAAJM"]
[Tue Dec 16 14:50:20.422977 2025] [:error] [pid 53940:tid 53954] [client 52.163.112.251:26694] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEBLF91PNbcXLVkpR6rKAAAAcs"]
[Tue Dec 16 14:50:21.889566 2025] [:error] [pid 35998:tid 36019] [client 52.163.112.251:26713] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEBLRKnhGuuhGxBSLNz8gAAAVI"]
[Tue Dec 16 14:50:23.931336 2025] [:error] [pid 18324:tid 18397] [client 52.163.112.251:11490] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qsntqiho.php"] [unique_id "aUEBL6G4um2mD1VpJHJOWwAAAJE"]
[Tue Dec 16 14:50:25.205884 2025] [:error] [pid 18324:tid 18382] [client 52.163.112.251:24404] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEBMaG4um2mD1VpJHJOXAAAAII"]
[Tue Dec 16 14:50:26.932282 2025] [:error] [pid 18323:tid 18365] [client 52.163.112.251:16295] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEBMjJB6UFxIutsA8bqoQAAAEw"]
[Tue Dec 16 14:50:29.142368 2025] [:error] [pid 18322:tid 18348] [client 52.163.112.251:26139] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEBNZsCeWBjrw28XtzFGAAAABY"]
[Tue Dec 16 14:50:30.794954 2025] [:error] [pid 18408:tid 18420] [client 52.163.112.251:18924] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qjaqjahu.php"] [unique_id "aUEBNji2Gr8pDzjrVBC-XAAAAMo"]
[Tue Dec 16 14:50:31.899646 2025] [:error] [pid 53940:tid 53952] [client 52.163.112.251:11517] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEBN191PNbcXLVkpR6rMwAAAck"]
[Tue Dec 16 14:50:35.481901 2025] [:error] [pid 18324:tid 18395] [client 52.163.112.251:21806] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEBO6G4um2mD1VpJHJOagAAAI8"]
[Tue Dec 16 14:50:37.179831 2025] [:error] [pid 53940:tid 53963] [client 52.163.112.251:30760] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEBPV91PNbcXLVkpR6rNwAAAdQ"]
[Tue Dec 16 14:50:42.689835 2025] [:error] [pid 53940:tid 53964] [client 52.163.112.251:1960] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qhLaGswd9DS.php"] [unique_id "aUEBQl91PNbcXLVkpR6rPwAAAdU"]
[Tue Dec 16 14:50:46.044617 2025] [:error] [pid 18324:tid 18399] [client 52.163.112.251:18915] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUEBRqG4um2mD1VpJHJOcQAAAJM"]
[Tue Dec 16 14:50:52.722607 2025] [:error] [pid 53940:tid 53965] [client 52.163.112.251:1940] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUEBTF91PNbcXLVkpR6rTgAAAdY"]
[Tue Dec 16 14:50:57.300751 2025] [:error] [pid 51991:tid 52009] [client 52.163.112.251:26163] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pwyjwrfr.php"] [unique_id "aUEBUa7zKCVJSuwV1xY2_AAAARA"]
[Tue Dec 16 14:50:59.696765 2025] [:error] [pid 12330:tid 12345] [client 52.163.112.251:25614] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUEBU16iIQEVCIh8V1kveQAAAYs"]
[Tue Dec 16 14:51:03.965429 2025] [:error] [pid 18323:tid 18359] [client 52.163.112.251:12948] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUEBVzJB6UFxIutsA8bqvQAAAEY"]
[Tue Dec 16 14:51:07.462658 2025] [:error] [pid 35998:tid 36013] [client 52.163.112.251:1322] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUEBWxKnhGuuhGxBSLN0DwAAAUw"]
[Tue Dec 16 14:51:09.368677 2025] [:error] [pid 18324:tid 18387] [client 52.163.112.251:11652] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pNRzcP6wtYy.php"] [unique_id "aUEBXaG4um2mD1VpJHJOfwAAAIc"]
[Tue Dec 16 14:51:11.870933 2025] [:error] [pid 12330:tid 12346] [client 52.163.112.251:21782] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUEBX16iIQEVCIh8V1kvgQAAAYw"]
[Tue Dec 16 14:51:12.859845 2025] [:error] [pid 12330:tid 12356] [client 52.163.112.251:21766] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUEBYF6iIQEVCIh8V1kvgwAAAZY"]
[Tue Dec 16 14:51:15.854484 2025] [:error] [pid 18322:tid 18333] [client 52.163.112.251:52991] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUEBY5sCeWBjrw28XtzFQgAAAAc"]
[Tue Dec 16 14:51:17.239495 2025] [:error] [pid 51991:tid 52017] [client 52.163.112.251:9875] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox8xhkkw.php"] [unique_id "aUEBZa7zKCVJSuwV1xY3CwAAARg"]
[Tue Dec 16 14:51:18.768212 2025] [:error] [pid 51991:tid 52015] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/oc460l3x.php
[Tue Dec 16 14:51:18.976248 2025] [:error] [pid 51991:tid 51998] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/NWqz649FIe7.php
[Tue Dec 16 14:51:19.206357 2025] [:error] [pid 51991:tid 51994] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/nucqsqeg.php
[Tue Dec 16 14:51:19.418607 2025] [:error] [pid 51991:tid 52010] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/mhpglaje.php
[Tue Dec 16 14:51:20.502461 2025] [:error] [pid 51991:tid 52000] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/LvCBeZWaSgQ.php
[Tue Dec 16 14:51:20.720769 2025] [:error] [pid 51991:tid 52008] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/KV7EGJmhHzX.php
[Tue Dec 16 14:51:20.977700 2025] [:error] [pid 51991:tid 51996] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/ijNdPI1Orya.php
[Tue Dec 16 14:51:21.225637 2025] [:error] [pid 51991:tid 51995] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/HPum4ZEBJRC.php
[Tue Dec 16 14:51:22.662618 2025] [:error] [pid 51991:tid 51995] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Tue Dec 16 14:51:22.886781 2025] [:error] [pid 51991:tid 52016] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/8xg5Bv6XIUw.php
[Tue Dec 16 14:51:23.130762 2025] [:error] [pid 51991:tid 51998] [client 52.163.112.251:52943] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-header.php
[Tue Dec 16 14:51:23.343477 2025] [:error] [pid 51991:tid 51993] [client 52.163.112.251:52943] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEBa67zKCVJSuwV1xY3IgAAAQA"]
[Tue Dec 16 14:51:24.639415 2025] [:error] [pid 18322:tid 18335] [client 52.163.112.251:20188] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEBbJsCeWBjrw28XtzFSAAAAAk"]
[Tue Dec 16 14:51:25.018699 2025] [:error] [pid 18322:tid 18344] [client 52.163.112.251:21885] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEBbZsCeWBjrw28XtzFSQAAABI"]
[Tue Dec 16 14:51:25.349323 2025] [:error] [pid 18322:tid 18336] [client 52.163.112.251:33510] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aGeTbFjB5Zu.php"] [unique_id "aUEBbZsCeWBjrw28XtzFSwAAAAo"]
[Tue Dec 16 14:51:25.663580 2025] [:error] [pid 51991:tid 52001] [client 52.163.112.251:1882] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEBba7zKCVJSuwV1xY3JAAAAQg"]
[Tue Dec 16 14:51:26.267404 2025] [:error] [pid 18408:tid 18419] [client 52.163.112.251:33523] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEBbji2Gr8pDzjrVBC-hQAAAMk"]
[Tue Dec 16 14:51:33.344231 2025] [:error] [pid 51991:tid 52014] [client 52.163.112.251:34852] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEBda7zKCVJSuwV1xY3MwAAARU"]
[Tue Dec 16 14:51:39.079662 2025] [:error] [pid 18322:tid 18345] [client 52.163.112.251:12744] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BMjXQkgwpeb.php"] [unique_id "aUEBe5sCeWBjrw28XtzFUwAAABM"]
[Tue Dec 16 14:51:46.045143 2025] [:error] [pid 35998:tid 36001] [client 52.163.112.251:34895] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEBghKnhGuuhGxBSLN0KQAAAUA"]
[Tue Dec 16 14:51:49.510283 2025] [:error] [pid 18408:tid 18424] [client 52.163.112.251:52915] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FSCMNvnjPX4.php"] [unique_id "aUEBhTi2Gr8pDzjrVBC-qAAAAM4"]
[Tue Dec 16 14:52:10.468814 2025] [:error] [pid 18324:tid 18384] [client 52.163.112.251:9624] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aUEBmqG4um2mD1VpJHJPMwAAAIQ"]
[Tue Dec 16 14:52:21.477322 2025] [:error] [pid 12330:tid 12354] [client 52.163.112.251:65421] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUEBpV6iIQEVCIh8V1kv2AAAAZQ"]
[Tue Dec 16 14:52:37.060999 2025] [:error] [pid 51991:tid 52005] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Dec 16 14:52:37.154855 2025] [:error] [pid 51991:tid 52010] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 16 14:52:37.246987 2025] [:error] [pid 51991:tid 51998] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Tue Dec 16 14:52:37.359223 2025] [:error] [pid 51991:tid 52012] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Dec 16 14:52:37.453303 2025] [:error] [pid 51991:tid 51997] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Dec 16 14:52:37.547431 2025] [:error] [pid 51991:tid 52009] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Tue Dec 16 14:52:37.668567 2025] [:error] [pid 51991:tid 51995] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue Dec 16 14:52:37.760991 2025] [:error] [pid 51991:tid 52015] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Dec 16 14:52:37.853692 2025] [:error] [pid 51991:tid 52004] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/dejavu.php
[Tue Dec 16 14:52:37.970376 2025] [:error] [pid 51991:tid 52002] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Tue Dec 16 14:52:38.063381 2025] [:error] [pid 51991:tid 52011] [client 52.163.112.251:16451] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Tue Dec 16 14:52:38.178633 2025] [:error] [pid 51991:tid 52006] [client 52.163.112.251:16451] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUEBtq7zKCVJSuwV1xY31gAAAQ0"]
[Tue Dec 16 14:52:47.177044 2025] [:error] [pid 51991:tid 52017] [client 52.163.112.251:1481] [client 52.163.112.251] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUEBv67zKCVJSuwV1xY3-AAAARg"]
[Tue Dec 16 16:06:47.355219 2025] [:error] [pid 18323:tid 18369] [client 185.112.59.5:60793] [client 185.112.59.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUETFzJB6UFxIutsA8YAMwAAAFA"]
[Tue Dec 16 16:52:32.537598 2025] [:error] [pid 51991:tid 52015] [client 175.6.217.4:51726] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUEd0K7zKCVJSuwV1xZt4QAAARY"]
[Tue Dec 16 22:16:16.769095 2025] [:error] [pid 35998:tid 36013] [client 132.255.158.138:13282] [client 132.255.158.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 132.255.158.138, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUFpsBKnhGuuhGxBSLPPnQAAAUw"]
[Tue Dec 16 22:16:16.773917 2025] [:error] [pid 35998:tid 36013] [client 132.255.158.138:13282] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 16 22:16:29.742466 2025] [:error] [pid 18408:tid 18430] [client 106.215.181.85:14348] [client 106.215.181.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.181.85, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUFpvTi2Gr8pDzjrVBBM9gAAANQ"]
[Tue Dec 16 22:16:29.747602 2025] [:error] [pid 18408:tid 18430] [client 106.215.181.85:14348] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 16 22:17:05.590076 2025] [:error] [pid 12330:tid 12348] [client 27.7.139.158:50866] [client 27.7.139.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.7.139.158, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUFp4V6iIQEVCIh8V1mpjQAAAY4"]
[Tue Dec 16 22:17:05.596323 2025] [:error] [pid 12330:tid 12348] [client 27.7.139.158:50866] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 16 23:05:43.269157 2025] [:error] [pid 18323:tid 18362] [client 43.130.72.177:53454] [client 43.130.72.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUF1RzJB6UFxIutsA8ZZowAAAEk"]
[Wed Dec 17 05:38:37.127608 2025] [:error] [pid 13216:tid 13251] [client 1.15.52.154:45722] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUHRXdkjYVDtADMjze4VJAAAAEQ"]
[Wed Dec 17 17:59:04.713740 2025] [:error] [pid 45621:tid 45648] [client 14.215.163.132:38623] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUJ-6OVNGQfJ1rR90pRA8gAAANY"]
[Wed Dec 17 22:16:32.537296 2025] [:error] [pid 16861:tid 16902] [client 187.188.233.36:11860] [client 187.188.233.36] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.188.233.36, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUK7QFmas3wxi8EVIZrX1wAAAo8"]
[Wed Dec 17 22:16:32.541544 2025] [:error] [pid 16861:tid 16902] [client 187.188.233.36:11860] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Dec 18 00:32:39.543512 2025] [:error] [pid 63337:tid 63347] [client 43.138.68.113:49540] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aULbJ9Sc2ofHSwVzjx-QfgAAAQg"]
[Thu Dec 18 01:46:03.028368 2025] [:error] [pid 43495:tid 43575] [client 104.28.214.122:39198] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aULsW5PwJsDLQYFUP-ZJiAAAANU"]
[Thu Dec 18 06:33:33.172269 2025] [:error] [pid 21100:tid 21125] [client 49.234.192.248:48646] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUMvvSmdf0GusoIGpFXtoAAAANY"]
[Thu Dec 18 06:47:29.979858 2025] [:error] [pid 23557:tid 23610] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Dec 18 06:47:30.324179 2025] [:error] [pid 23557:tid 23604] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Dec 18 06:47:30.776568 2025] [:error] [pid 23557:tid 23612] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Dec 18 06:47:31.206446 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 18 06:47:31.592094 2025] [:error] [pid 23557:tid 23588] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Dec 18 06:47:32.012794 2025] [:error] [pid 23557:tid 23612] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Dec 18 06:47:32.386319 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Dec 18 06:47:32.795003 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Dec 18 06:47:33.592175 2025] [:error] [pid 23557:tid 23611] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Dec 18 06:47:35.289707 2025] [:error] [pid 23557:tid 23592] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Dec 18 06:47:35.687156 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Dec 18 06:47:36.096138 2025] [:error] [pid 23557:tid 23608] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Dec 18 06:47:36.496679 2025] [:error] [pid 23557:tid 23609] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Dec 18 06:47:36.896922 2025] [:error] [pid 23557:tid 23596] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Dec 18 06:47:37.277781 2025] [:error] [pid 23557:tid 23590] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Dec 18 06:47:37.669485 2025] [:error] [pid 23557:tid 23594] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Dec 18 06:47:38.044769 2025] [:error] [pid 23557:tid 23592] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Dec 18 06:47:38.444963 2025] [:error] [pid 23557:tid 23606] [client 193.19.109.176:28179] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 18 06:47:44.040842 2025] [:error] [pid 23557:tid 23599] [client 193.19.109.176:28179] [client 193.19.109.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUMzEBYcs6rFVxbdP_kqWgAAAEs"]
[Thu Dec 18 06:47:54.726124 2025] [:error] [pid 23556:tid 23560] [client 193.19.109.182:23745] [client 193.19.109.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUMzGhnmLlk3u5yt9kH9vAAAAAA"]
[Thu Dec 18 06:47:56.688856 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.169:44675] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Dec 18 06:47:57.889310 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.169:44675] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUMzHRYcs6rFVxbdP_krPgAAAEE"]
[Thu Dec 18 06:47:59.429620 2025] [:error] [pid 24542:tid 24566] [client 193.19.109.181:59649] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Dec 18 06:47:59.826035 2025] [:error] [pid 24542:tid 24553] [client 193.19.109.181:59649] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUMzH0tQz4H2oS3NrDYIzwAAAUk"]
[Thu Dec 18 06:48:01.045334 2025] [:error] [pid 23558:tid 23621] [client 193.19.109.198:62887] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Dec 18 06:48:03.204487 2025] [:error] [pid 23558:tid 23632] [client 193.19.109.198:62887] [client 193.19.109.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUMzI-Ham9NbgPQa9uYueQAAANE"]
[Thu Dec 18 06:48:04.471969 2025] [:error] [pid 24433:tid 24445] [client 193.19.109.169:49109] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUMzJJ4pN9ycmipm8TgWZAAAAQk"]
[Thu Dec 18 06:48:05.183789 2025] [:error] [pid 23557:tid 23604] [client 193.19.109.181:40743] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUMzJRYcs6rFVxbdP_krmAAAAFA"]
[Thu Dec 18 06:48:06.005420 2025] [:error] [pid 24433:tid 24438] [client 193.19.109.170:62085] [client 193.19.109.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUMzJZ4pN9ycmipm8TgWigAAAQI"]
[Thu Dec 18 06:48:06.761912 2025] [:error] [pid 24433:tid 24438] [client 193.19.109.190:57059] [client 193.19.109.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUMzJp4pN9ycmipm8TgWmAAAAQI"]
[Thu Dec 18 06:48:07.512972 2025] [:error] [pid 23557:tid 23590] [client 193.19.109.169:42193] [client 193.19.109.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUMzJxYcs6rFVxbdP_krsQAAAEI"]
[Thu Dec 18 06:48:08.689380 2025] [:error] [pid 23556:tid 23562] [client 193.19.109.168:42645] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUMzKBnmLlk3u5yt9kH-oQAAAAI"]
[Thu Dec 18 06:48:09.556355 2025] [:error] [pid 23558:tid 23616] [client 193.19.109.206:63569] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Dec 18 06:48:10.323289 2025] [:error] [pid 23558:tid 23627] [client 193.19.109.206:63569] [client 193.19.109.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aUMzKuHam9NbgPQa9uYu7AAAAMw"]
[Thu Dec 18 06:48:11.807674 2025] [:error] [pid 24542:tid 24549] [client 193.19.109.165:41563] [client 193.19.109.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUMzK0tQz4H2oS3NrDYJfAAAAUU"]
[Thu Dec 18 06:48:12.922165 2025] [:error] [pid 23557:tid 23589] [client 193.19.109.186:23815] [client 193.19.109.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUMzLBYcs6rFVxbdP_ksPgAAAEE"]
[Thu Dec 18 06:48:13.697131 2025] [:error] [pid 23645:tid 23653] [client 193.19.109.179:35455] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Dec 18 06:48:14.205734 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.179:35455] [client 193.19.109.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUMzLjf_Rx0Y0ao_QJiABgAAAII"]
[Thu Dec 18 06:48:14.962161 2025] [:error] [pid 23645:tid 23666] [client 193.19.109.197:38107] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Dec 18 06:48:16.081935 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.197:38107] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Dec 18 06:48:17.292684 2025] [:error] [pid 23645:tid 23666] [client 193.19.109.197:38107] [client 193.19.109.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUMzMTf_Rx0Y0ao_QJiAUgAAAJM"]
[Thu Dec 18 06:48:18.051876 2025] [:error] [pid 23558:tid 23625] [client 193.19.109.173:53121] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Dec 18 06:48:18.416946 2025] [:error] [pid 23558:tid 23632] [client 193.19.109.173:53121] [client 193.19.109.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUMzMuHam9NbgPQa9uYvlwAAANE"]
[Thu Dec 18 06:48:20.198026 2025] [:error] [pid 24433:tid 24439] [client 193.19.109.164:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Dec 18 06:48:20.966249 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.164:58273] [client 193.19.109.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUMzNJ4pN9ycmipm8TgXpwAAAQQ"]
[Thu Dec 18 06:48:29.076847 2025] [:error] [pid 24542:tid 24546] [client 193.19.109.199:38607] [client 193.19.109.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUMzPUtQz4H2oS3NrDYLAgAAAUI"]
[Thu Dec 18 06:48:30.318717 2025] [:error] [pid 24433:tid 24451] [client 193.19.109.181:30235] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Dec 18 06:48:30.722625 2025] [:error] [pid 24433:tid 24454] [client 193.19.109.181:30235] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Dec 18 06:48:31.501052 2025] [:error] [pid 24433:tid 24436] [client 193.19.109.181:30235] [client 193.19.109.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUMzP54pN9ycmipm8TgYHQAAAQA"]
[Thu Dec 18 06:48:32.677589 2025] [:error] [pid 23645:tid 23649] [client 193.19.109.194:37859] [client 193.19.109.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUMzQDf_Rx0Y0ao_QJiBhgAAAII"]
[Thu Dec 18 06:48:34.048978 2025] [:error] [pid 24433:tid 24443] [client 193.19.109.168:60043] [client 193.19.109.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUMzQp4pN9ycmipm8TgYSgAAAQc"]
[Thu Dec 18 06:48:34.753266 2025] [:error] [pid 23556:tid 23568] [client 193.19.109.166:26613] [client 193.19.109.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUMzQhnmLlk3u5yt9kEAqAAAAAg"]
[Thu Dec 18 06:48:35.562977 2025] [:error] [pid 23557:tid 23607] [client 193.19.109.207:24375] [client 193.19.109.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUMzQxYcs6rFVxbdP_kt5QAAAFM"]
[Thu Dec 18 06:48:37.104953 2025] [:error] [pid 24433:tid 24458] [client 193.19.109.196:43219] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Dec 18 06:48:37.525809 2025] [:error] [pid 24433:tid 24436] [client 193.19.109.196:43219] [client 193.19.109.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUMzRZ4pN9ycmipm8TgYkgAAAQA"]
[Thu Dec 18 06:48:38.379420 2025] [:error] [pid 23557:tid 23603] [client 193.19.109.187:27641] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUMzRhYcs6rFVxbdP_kuHgAAAE8"]
[Thu Dec 18 06:48:39.081462 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.187:39733] [client 193.19.109.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUMzR0tQz4H2oS3NrDYL1AAAAUQ"]
[Thu Dec 18 06:48:40.713396 2025] [:error] [pid 23556:tid 23581] [client 193.19.109.174:44271] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Dec 18 06:48:41.491853 2025] [:error] [pid 23556:tid 23583] [client 193.19.109.174:44271] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Dec 18 06:48:43.312581 2025] [:error] [pid 23556:tid 23564] [client 193.19.109.174:44271] [client 193.19.109.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUMzSxnmLlk3u5yt9kEBOwAAAAQ"]
[Thu Dec 18 06:48:45.408346 2025] [:error] [pid 24542:tid 24555] [client 193.19.109.198:57947] [client 193.19.109.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.198, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUMzTUtQz4H2oS3NrDYMrQAAAUs"]
[Thu Dec 18 06:48:45.817057 2025] [:error] [pid 24542:tid 24548] [client 193.19.109.198:57947] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Dec 18 06:48:47.823127 2025] [:error] [pid 24542:tid 24563] [client 193.19.109.198:57947] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Dec 18 06:49:11.017433 2025] [:error] [pid 24542:tid 24563] [client 193.19.109.198:57947] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Dec 18 06:49:27.940095 2025] [:error] [pid 24433:tid 24455] [client 193.19.109.172:23053] [client 193.19.109.172] ModSecurity: collection_store: Failed to exclusivly lock DBM file "/tmp/ip": Resource deadlock avoided [hostname "dbservices.com.au"] [uri "/index.html"] [unique_id "aUMzd54pN9ycmipm8TgcLgAAARM"]
[Thu Dec 18 06:49:52.269044 2025] [:error] [pid 24958:tid 24973] [client 193.19.109.162:50795] [client 193.19.109.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/owfsmac/"] [unique_id "aUMzkMkDOrUkd0wNm2EIMQAAAYw"]
[Thu Dec 18 06:50:18.992802 2025] [:error] [pid 24433:tid 24440] [client 193.19.109.174:23031] [client 193.19.109.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ubh/"] [unique_id "aUMzqp4pN9ycmipm8TgfKgAAAQQ"]
[Thu Dec 18 09:06:55.350959 2025] [:error] [pid 24433:tid 24443] [client 43.156.204.134:58450] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUNTr54pN9ycmipm8ThPogAAAQc"]
[Thu Dec 18 17:39:34.522605 2025] [:error] [pid 24958:tid 24981] [client 141.11.36.26:50731] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Thu Dec 18 17:39:38.017741 2025] [:error] [pid 24542:tid 24563] [client 141.11.36.35:48939] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Thu Dec 18 17:39:42.799833 2025] [:error] [pid 24542:tid 24559] [client 141.11.36.26:64027] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Thu Dec 18 17:39:58.415618 2025] [:error] [pid 12239:tid 12265] [client 141.11.36.42:64343] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Dec 19 01:46:14.676033 2025] [:error] [pid 45825:tid 45840] [client 182.42.105.144:60763] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUQ95tES1ifyzuzFwz8mmQAAAE0"]
[Fri Dec 19 03:48:34.153067 2025] [:error] [pid 61923:tid 61986] [client 134.199.174.228:51172] [client 134.199.174.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aURakuIJyAkgoURyh1i3jgAAAIc"]
[Fri Dec 19 03:48:35.930009 2025] [:error] [pid 62008:tid 62035] [client 134.199.174.228:51180] [client 134.199.174.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aURak5JCOG7NAlbm_OQ30QAAANg"]
[Fri Dec 19 06:58:27.540196 2025] [:error] [pid 61922:tid 61971] [client 162.62.213.165:48934] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUSHExsDXYvsvN0FFlBHyAAAAFM"]
[Fri Dec 19 07:49:39.925994 2025] [:error] [pid 62008:tid 62027] [client 122.51.236.174:51498] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUSTE5JCOG7NAlbm_OSXKAAAANA"]
[Fri Dec 19 09:07:50.216265 2025] [:error] [pid 61923:tid 61988] [client 43.165.135.242:45726] [client 43.165.135.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUSlZuIJyAkgoURyh1gFoAAAAIk"]
[Fri Dec 19 09:43:36.936964 2025] [:error] [pid 41956:tid 41971] [client 156.239.157.242:47476] [client 156.239.157.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.239.157.242, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aUStyJFF_rXxx-Pv5gmsAwAAAY0"]
[Fri Dec 19 09:43:36.943228 2025] [:error] [pid 41956:tid 41971] [client 156.239.157.242:47476] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Dec 19 09:43:38.104474 2025] [:error] [pid 41956:tid 41965] [client 156.239.216.55:29134] [client 156.239.216.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.239.216.55, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aUStypFF_rXxx-Pv5gmsCgAAAYc"]
[Fri Dec 19 09:43:38.110452 2025] [:error] [pid 41956:tid 41965] [client 156.239.216.55:29134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Dec 19 09:43:38.933313 2025] [:error] [pid 41956:tid 41974] [client 156.239.221.136:43462] [client 156.239.221.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.239.221.136, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aUStypFF_rXxx-Pv5gmsFAAAAZA"]
[Fri Dec 19 09:43:38.937318 2025] [:error] [pid 41956:tid 41974] [client 156.239.221.136:43462] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Dec 19 10:04:22.626809 2025] [:error] [pid 41858:tid 41869] [client 43.166.142.76:60698] [client 43.166.142.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUSypp0PV23R6CcTulWv_gAAAEk"]
[Fri Dec 19 15:03:26.173995 2025] [:error] [pid 20675:tid 20701] [client 43.157.174.69:57938] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUT4vrMyJ3XqeDRsbQkHkgAAAQ0"]
[Fri Dec 19 19:42:15.253368 2025] [:error] [pid 20675:tid 20708] [client 4.213.154.99:47072] File does not exist: /usr/local/apache/htdocs/suspended-page/index4.php
[Fri Dec 19 19:42:15.456920 2025] [:error] [pid 20675:tid 20691] [client 4.213.154.99:47072] File does not exist: /usr/local/apache/htdocs/suspended-page/panelx.php
[Fri Dec 19 19:42:15.864111 2025] [:error] [pid 20675:tid 20694] [client 4.213.154.99:47072] File does not exist: /usr/local/apache/htdocs/suspended-page/bekle.php
[Fri Dec 19 19:42:16.538781 2025] [:error] [pid 20675:tid 20698] [client 4.213.154.99:47072] File does not exist: /usr/local/apache/htdocs/suspended-page/auths.php
[Fri Dec 19 19:42:16.731897 2025] [:error] [pid 20675:tid 20709] [client 4.213.154.99:47072] File does not exist: /usr/local/apache/htdocs/suspended-page/rasp.php
[Fri Dec 19 19:42:16.917734 2025] [:error] [pid 20675:tid 20688] [client 4.213.154.99:47072] File does not exist: /usr/local/apache/htdocs/suspended-page/_inc-rasberry0342.php
[Fri Dec 19 19:42:17.087124 2025] [:error] [pid 20675:tid 20693] [client 4.213.154.99:47072] File does not exist: /usr/local/apache/htdocs/suspended-page/router.php
[Fri Dec 19 19:42:17.255748 2025] [:error] [pid 20675:tid 20703] [client 4.213.154.99:47072] [client 4.213.154.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aUU6GbMyJ3XqeDRsbQmK9wAAAQ8"]
[Fri Dec 19 19:42:23.430600 2025] [:error] [pid 20675:tid 20695] [client 4.213.154.99:40394] File does not exist: /usr/local/apache/htdocs/suspended-page/blackhat.php
[Fri Dec 19 19:42:23.618922 2025] [:error] [pid 20675:tid 20707] [client 4.213.154.99:40394] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Fri Dec 19 19:42:24.905324 2025] [:error] [pid 20675:tid 20700] [client 4.213.154.99:40394] File does not exist: /usr/local/apache/htdocs/suspended-page/1s.php
[Fri Dec 19 19:42:25.095888 2025] [:error] [pid 20675:tid 20697] [client 4.213.154.99:40394] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aUU6IbMyJ3XqeDRsbQmLEQAAAQk"]
[Fri Dec 19 19:42:37.255666 2025] [:error] [pid 20582:tid 20645] [client 4.213.154.99:46033] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aUU6LcpAnrkQKZ4b5gYhVwAAAMM"]
[Fri Dec 19 19:42:45.578597 2025] [:error] [pid 41451:tid 41474] [client 4.213.154.99:47094] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logs.php"] [unique_id "aUU6NQYXFn-DbZghZBHLEgAAABQ"]
[Fri Dec 19 19:42:47.751216 2025] [:error] [pid 20675:tid 20694] [client 4.213.154.99:10097] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logs.php"] [unique_id "aUU6N7MyJ3XqeDRsbQmLRwAAAQY"]
[Fri Dec 19 19:42:50.653368 2025] [:error] [pid 41451:tid 41465] [client 4.213.154.99:47678] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logs.php"] [unique_id "aUU6OgYXFn-DbZghZBHLHgAAAAs"]
[Fri Dec 19 19:42:56.010367 2025] [:error] [pid 20582:tid 20650] [client 4.213.154.99:41932] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logs.php"] [unique_id "aUU6QMpAnrkQKZ4b5gYhcgAAAMg"]
[Fri Dec 19 19:42:59.223496 2025] [:error] [pid 20582:tid 20653] [client 4.213.154.99:9956] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aUU6Q8pAnrkQKZ4b5gYhfQAAAMs"]
[Fri Dec 19 19:44:26.911991 2025] [:error] [pid 41451:tid 41478] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/dump.php
[Fri Dec 19 19:44:27.098801 2025] [:error] [pid 41451:tid 41469] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/joomla_hashes.php
[Fri Dec 19 19:44:27.306961 2025] [:error] [pid 41451:tid 41468] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/indexs.php
[Fri Dec 19 19:44:27.503898 2025] [:error] [pid 41451:tid 41461] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Fri Dec 19 19:44:27.709179 2025] [:error] [pid 41451:tid 41474] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Dec 19 19:44:27.899519 2025] [:error] [pid 41451:tid 41463] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/mage.php
[Fri Dec 19 19:44:28.069335 2025] [:error] [pid 41451:tid 41475] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/conf.php
[Fri Dec 19 19:44:28.230222 2025] [:error] [pid 41451:tid 41455] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Dec 19 19:44:28.397438 2025] [:error] [pid 41451:tid 41464] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/newsletter_signup.php
[Fri Dec 19 19:44:28.569884 2025] [:error] [pid 41451:tid 41460] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/index-2.php
[Fri Dec 19 19:44:28.747141 2025] [:error] [pid 41451:tid 41470] [client 4.213.154.99:46538] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Fri Dec 19 19:44:28.920171 2025] [:error] [pid 41451:tid 41467] [client 4.213.154.99:46538] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/personal.php"] [unique_id "aUU6nAYXFn-DbZghZBHMDgAAAA0"]
[Fri Dec 19 19:44:31.648486 2025] [:error] [pid 20675:tid 20709] [client 4.213.154.99:10211] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/personal.php"] [unique_id "aUU6n7MyJ3XqeDRsbQmMjAAAARU"]
[Fri Dec 19 19:44:35.725864 2025] [:error] [pid 20582:tid 20658] [client 4.213.154.99:46537] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/personal.php"] [unique_id "aUU6o8pAnrkQKZ4b5gYijQAAANA"]
[Fri Dec 19 19:44:42.489233 2025] [:error] [pid 20580:tid 20589] [client 4.213.154.99:45589] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/personal.php"] [unique_id "aUU6qkmd1op_YdAdgR2POgAAAEM"]
[Fri Dec 19 19:44:47.442430 2025] [:error] [pid 20581:tid 20624] [client 4.213.154.99:46554] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mob.php"] [unique_id "aUU6r_xEv7WXNhnFD1l2ZgAAAIk"]
[Fri Dec 19 19:44:52.681536 2025] [:error] [pid 20580:tid 20607] [client 4.213.154.99:46564] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mob.php"] [unique_id "aUU6tEmd1op_YdAdgR2PQgAAAFU"]
[Fri Dec 19 19:45:34.277164 2025] [:error] [pid 20581:tid 20632] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/shippings.php
[Fri Dec 19 19:45:34.943757 2025] [:error] [pid 20581:tid 20622] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.6.6.php
[Fri Dec 19 19:45:35.141799 2025] [:error] [pid 20581:tid 20627] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.6.5.php
[Fri Dec 19 19:45:35.390799 2025] [:error] [pid 20581:tid 20620] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.6.4.php
[Fri Dec 19 19:45:35.582748 2025] [:error] [pid 20581:tid 20629] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/logout.php
[Fri Dec 19 19:45:35.767891 2025] [:error] [pid 20581:tid 20638] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/signin.php
[Fri Dec 19 19:45:35.975250 2025] [:error] [pid 20581:tid 20617] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/weblinks.php
[Fri Dec 19 19:45:36.161084 2025] [:error] [pid 20581:tid 20634] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/vbv.php
[Fri Dec 19 19:45:36.336145 2025] [:error] [pid 20581:tid 20630] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.0.php
[Fri Dec 19 19:45:36.546459 2025] [:error] [pid 20581:tid 20639] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/loginfailed.php
[Fri Dec 19 19:45:36.738662 2025] [:error] [pid 20581:tid 20623] [client 4.213.154.99:9546] File does not exist: /usr/local/apache/htdocs/suspended-page/logins.php
[Fri Dec 19 19:45:36.934874 2025] [:error] [pid 20581:tid 20616] [client 4.213.154.99:9546] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pac.php"] [unique_id "aUU64PxEv7WXNhnFD1l2kgAAAIE"]
[Fri Dec 19 19:45:39.761491 2025] [:error] [pid 20581:tid 20621] [client 4.213.154.99:41352] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pac.php"] [unique_id "aUU64_xEv7WXNhnFD1l2lAAAAIY"]
[Fri Dec 19 19:45:46.042034 2025] [:error] [pid 20582:tid 20660] [client 4.213.154.99:42436] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pac.php"] [unique_id "aUU66spAnrkQKZ4b5gYi6wAAANI"]
[Fri Dec 19 19:45:47.751809 2025] [:error] [pid 20675:tid 20699] [client 4.213.154.99:46412] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pac.php"] [unique_id "aUU667MyJ3XqeDRsbQmNAwAAAQs"]
[Fri Dec 19 19:46:27.737505 2025] [:error] [pid 20582:tid 20652] [client 4.213.154.99:17629] [client 4.213.154.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer-4.7.3.php"] [unique_id "aUU7E8pAnrkQKZ4b5gYjLAAAAMo"]
[Fri Dec 19 19:46:43.891576 2025] [:error] [pid 20581:tid 20621] [client 4.213.154.99:39964] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.4.php
[Fri Dec 19 19:46:44.074919 2025] [:error] [pid 20581:tid 20631] [client 4.213.154.99:39964] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.5.php
[Fri Dec 19 19:46:44.295772 2025] [:error] [pid 20581:tid 20639] [client 4.213.154.99:39964] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.7.6.php
[Fri Dec 19 19:46:44.496207 2025] [:error] [pid 20581:tid 20624] [client 4.213.154.99:39964] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.2.3-en.php
[Fri Dec 19 20:24:59.408794 2025] [:error] [pid 18438:tid 18446] [client 122.163.154.155:53808] [client 122.163.154.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.163.154.155, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUVEG5RArClWV1iij_SJlgAAAYU"]
[Fri Dec 19 20:24:59.413946 2025] [:error] [pid 18438:tid 18446] [client 122.163.154.155:53808] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 19 22:23:17.960123 2025] [:error] [pid 16026:tid 16052] [client 43.133.91.48:34486] [client 43.133.91.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUVf1ULVfhf4Jb3enmNTQAAAAVc"]
[Sat Dec 20 00:21:40.130858 2025] [:error] [pid 35626:tid 35689] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sat Dec 20 00:21:40.223131 2025] [:error] [pid 35626:tid 35702] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Dec 20 00:21:40.404599 2025] [:error] [pid 35626:tid 35684] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sat Dec 20 00:21:40.497042 2025] [:error] [pid 35626:tid 35692] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sat Dec 20 00:21:40.588424 2025] [:error] [pid 35626:tid 35685] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Dec 20 00:21:40.679557 2025] [:error] [pid 35626:tid 35686] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sat Dec 20 00:21:40.773388 2025] [:error] [pid 35626:tid 35693] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Sat Dec 20 00:21:40.963966 2025] [:error] [pid 35626:tid 35700] [client 4.193.193.22:6243] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sat Dec 20 00:21:41.816913 2025] [:error] [pid 35626:tid 35700] [client 4.193.193.22:6243] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aUV7lRzVxeBEODU8mCBq6QAAANI"]
[Sat Dec 20 00:21:41.996697 2025] [:error] [pid 39268:tid 39310] [client 4.193.193.22:6250] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aUV7leTCMRSRXPuXZF_tiwAAAQA"]
[Sat Dec 20 00:21:42.178975 2025] [:error] [pid 35711:tid 35716] [client 4.193.193.22:6211] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aUV7lixTWUmlILwAM_eccQAAAAM"]
[Sat Dec 20 00:21:42.352844 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:6254] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aUV7lixTWUmlILwAM_eccgAAAAg"]
[Sat Dec 20 00:21:42.539110 2025] [:error] [pid 35711:tid 35718] [client 4.193.193.22:7116] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aUV7lixTWUmlILwAM_eccwAAAAU"]
[Sat Dec 20 00:21:42.722460 2025] [:error] [pid 35624:tid 35632] [client 4.193.193.22:6224] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aUV7lkJMTU3r4hb8qAlHHQAAAEQ"]
[Sat Dec 20 00:21:42.896744 2025] [:error] [pid 35625:tid 35677] [client 4.193.193.22:6237] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aUV7lo12VmSu4NX34PTKRQAAAJY"]
[Sat Dec 20 00:21:43.074340 2025] [:error] [pid 35624:tid 35649] [client 4.193.193.22:6245] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aUV7l0JMTU3r4hb8qAlHHwAAAFU"]
[Sat Dec 20 00:21:43.257255 2025] [:error] [pid 35711:tid 35714] [client 4.193.193.22:6217] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aUV7lyxTWUmlILwAM_ecdQAAAAE"]
[Sat Dec 20 00:21:43.438490 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:7136] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aUV7lyxTWUmlILwAM_ecdwAAAA8"]
[Sat Dec 20 00:21:43.613710 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:7111] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aUV7l-TCMRSRXPuXZF_tjgAAARM"]
[Sat Dec 20 00:21:43.795221 2025] [:error] [pid 35711:tid 35734] [client 4.193.193.22:6251] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aUV7lyxTWUmlILwAM_eceQAAABU"]
[Sat Dec 20 00:21:43.971596 2025] [:error] [pid 39268:tid 39322] [client 4.193.193.22:6220] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aUV7l-TCMRSRXPuXZF_tkAAAAQw"]
[Sat Dec 20 00:21:44.170690 2025] [:error] [pid 39268:tid 39312] [client 4.193.193.22:7106] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aUV7mOTCMRSRXPuXZF_tkQAAAQI"]
[Sat Dec 20 00:21:44.377282 2025] [:error] [pid 35624:tid 35639] [client 4.193.193.22:7119] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aUV7mEJMTU3r4hb8qAlHIAAAAEs"]
[Sat Dec 20 00:21:44.554120 2025] [:error] [pid 35626:tid 35701] [client 4.193.193.22:6255] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aUV7mBzVxeBEODU8mCBq6gAAANM"]
[Sat Dec 20 00:21:44.731538 2025] [:error] [pid 35626:tid 35697] [client 4.193.193.22:6239] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aUV7mBzVxeBEODU8mCBq6wAAAM8"]
[Sat Dec 20 00:21:44.905520 2025] [:error] [pid 35626:tid 35682] [client 4.193.193.22:6235] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aUV7mBzVxeBEODU8mCBq7AAAAMA"]
[Sat Dec 20 00:21:45.090782 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:6214] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aUV7mRzVxeBEODU8mCBq7QAAANA"]
[Sat Dec 20 00:21:45.264409 2025] [:error] [pid 35711:tid 35735] [client 4.193.193.22:6265] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aUV7mSxTWUmlILwAM_ecfAAAABY"]
[Sat Dec 20 00:21:45.441478 2025] [:error] [pid 35625:tid 35679] [client 4.193.193.22:6241] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aUV7mY12VmSu4NX34PTKSQAAAJg"]
[Sat Dec 20 00:21:45.615976 2025] [:error] [pid 35626:tid 35705] [client 4.193.193.22:6221] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aUV7mRzVxeBEODU8mCBq7wAAANc"]
[Sat Dec 20 00:21:45.794820 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:6238] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aUV7mUJMTU3r4hb8qAlHIgAAAE4"]
[Sat Dec 20 00:21:45.979776 2025] [:error] [pid 35626:tid 35687] [client 4.193.193.22:7121] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aUV7mRzVxeBEODU8mCBq8QAAAMU"]
[Sat Dec 20 00:21:46.153395 2025] [:error] [pid 35711:tid 35719] [client 4.193.193.22:7113] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aUV7mixTWUmlILwAM_ecfgAAAAY"]
[Sat Dec 20 00:21:46.390620 2025] [:error] [pid 35624:tid 35646] [client 4.193.193.22:6264] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aUV7mkJMTU3r4hb8qAlHIwAAAFI"]
[Sat Dec 20 00:21:46.599739 2025] [:error] [pid 39268:tid 39315] [client 4.193.193.22:6210] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aUV7muTCMRSRXPuXZF_tlAAAAQU"]
[Sat Dec 20 00:21:46.804597 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:7127] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aUV7mixTWUmlILwAM_ecfwAAAAg"]
[Sat Dec 20 00:21:47.001417 2025] [:error] [pid 35625:tid 35663] [client 4.193.193.22:6218] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUV7m412VmSu4NX34PTKSgAAAIg"]
[Sat Dec 20 00:21:47.198618 2025] [:error] [pid 35626:tid 35699] [client 4.193.193.22:7122] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUV7mxzVxeBEODU8mCBq8gAAANE"]
[Sat Dec 20 00:21:47.396542 2025] [:error] [pid 35711:tid 35730] [client 4.193.193.22:6259] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUV7myxTWUmlILwAM_ecgQAAABE"]
[Sat Dec 20 00:21:47.587872 2025] [:error] [pid 35711:tid 35718] [client 4.193.193.22:6258] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUV7myxTWUmlILwAM_ecggAAAAU"]
[Sat Dec 20 00:21:47.782568 2025] [:error] [pid 39268:tid 39314] [client 4.193.193.22:6263] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aUV7m-TCMRSRXPuXZF_tmAAAAQQ"]
[Sat Dec 20 00:21:47.967654 2025] [:error] [pid 35711:tid 35732] [client 4.193.193.22:6247] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aUV7myxTWUmlILwAM_ecgwAAABM"]
[Sat Dec 20 00:21:48.148829 2025] [:error] [pid 35711:tid 35727] [client 4.193.193.22:7157] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aUV7nCxTWUmlILwAM_echAAAAA4"]
[Sat Dec 20 00:21:48.330606 2025] [:error] [pid 35624:tid 35635] [client 4.193.193.22:6223] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aUV7nEJMTU3r4hb8qAlHJgAAAEc"]
[Sat Dec 20 00:21:48.527127 2025] [:error] [pid 35626:tid 35684] [client 4.193.193.22:7128] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUV7nBzVxeBEODU8mCBq9QAAAMI"]
[Sat Dec 20 00:21:48.712003 2025] [:error] [pid 35626:tid 35692] [client 4.193.193.22:6212] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUV7nBzVxeBEODU8mCBq9gAAAMo"]
[Sat Dec 20 00:21:48.899460 2025] [:error] [pid 35711:tid 35714] [client 4.193.193.22:7130] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUV7nCxTWUmlILwAM_echQAAAAE"]
[Sat Dec 20 00:21:49.098820 2025] [:error] [pid 35711:tid 35725] [client 4.193.193.22:7152] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUV7nSxTWUmlILwAM_echgAAAAw"]
[Sat Dec 20 00:21:49.284111 2025] [:error] [pid 35625:tid 35655] [client 4.193.193.22:6231] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aUV7nY12VmSu4NX34PTKSwAAAIA"]
[Sat Dec 20 00:21:49.487329 2025] [:error] [pid 35624:tid 35634] [client 4.193.193.22:6208] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aUV7nUJMTU3r4hb8qAlHKAAAAEY"]
[Sat Dec 20 00:21:49.677121 2025] [:error] [pid 35626:tid 35683] [client 4.193.193.22:6248] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aUV7nRzVxeBEODU8mCBq9wAAAME"]
[Sat Dec 20 00:21:49.855778 2025] [:error] [pid 35625:tid 35657] [client 4.193.193.22:7164] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aUV7nY12VmSu4NX34PTKTAAAAII"]
[Sat Dec 20 00:21:50.039928 2025] [:error] [pid 35624:tid 35630] [client 4.193.193.22:7107] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aUV7nkJMTU3r4hb8qAlHKgAAAEI"]
[Sat Dec 20 00:21:50.222073 2025] [:error] [pid 39268:tid 39317] [client 4.193.193.22:6252] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aUV7nuTCMRSRXPuXZF_togAAAQc"]
[Sat Dec 20 00:21:50.404021 2025] [:error] [pid 35626:tid 35695] [client 4.193.193.22:6229] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aUV7nhzVxeBEODU8mCBq-gAAAM0"]
[Sat Dec 20 00:21:50.582163 2025] [:error] [pid 39268:tid 39332] [client 4.193.193.22:7112] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aUV7nuTCMRSRXPuXZF_tpAAAARY"]
[Sat Dec 20 00:21:50.764133 2025] [:error] [pid 35624:tid 35648] [client 4.193.193.22:7135] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aUV7nkJMTU3r4hb8qAlHKwAAAFQ"]
[Sat Dec 20 00:21:50.944926 2025] [:error] [pid 35626:tid 35706] [client 4.193.193.22:7126] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aUV7nhzVxeBEODU8mCBq-wAAANg"]
[Sat Dec 20 00:21:51.130363 2025] [:error] [pid 35626:tid 35697] [client 4.193.193.22:7144] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aUV7nxzVxeBEODU8mCBq_AAAAM8"]
[Sat Dec 20 00:21:51.314312 2025] [:error] [pid 35626:tid 35682] [client 4.193.193.22:6257] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aUV7nxzVxeBEODU8mCBq_QAAAMA"]
[Sat Dec 20 00:21:51.495541 2025] [:error] [pid 35711:tid 35735] [client 4.193.193.22:6219] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aUV7nyxTWUmlILwAM_ecigAAABY"]
[Sat Dec 20 00:21:51.672235 2025] [:error] [pid 35711:tid 35737] [client 4.193.193.22:6270] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aUV7nyxTWUmlILwAM_ecjAAAABg"]
[Sat Dec 20 00:21:51.890039 2025] [:error] [pid 39268:tid 39330] [client 4.193.193.22:6249] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aUV7n-TCMRSRXPuXZF_tpwAAARQ"]
[Sat Dec 20 00:21:52.097189 2025] [:error] [pid 35624:tid 35633] [client 4.193.193.22:6240] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aUV7oEJMTU3r4hb8qAlHLgAAAEU"]
[Sat Dec 20 00:21:52.305218 2025] [:error] [pid 35711:tid 35718] [client 4.193.193.22:7057] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV7oCxTWUmlILwAM_ecjwAAAAU"]
[Sat Dec 20 00:21:52.491030 2025] [:error] [pid 35711:tid 35726] [client 4.193.193.22:7065] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV7oCxTWUmlILwAM_eckQAAAA0"]
[Sat Dec 20 00:21:52.672678 2025] [:error] [pid 35711:tid 35732] [client 4.193.193.22:6234] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV7oCxTWUmlILwAM_eckwAAABM"]
[Sat Dec 20 00:21:52.847023 2025] [:error] [pid 35626:tid 35687] [client 4.193.193.22:7047] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV7oBzVxeBEODU8mCBq_gAAAMU"]
[Sat Dec 20 00:21:53.026614 2025] [:error] [pid 35626:tid 35691] [client 4.193.193.22:6262] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUV7oRzVxeBEODU8mCBq_wAAAMk"]
[Sat Dec 20 00:21:53.215256 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:7046] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUV7oUJMTU3r4hb8qAlHMgAAAE4"]
[Sat Dec 20 00:21:53.420525 2025] [:error] [pid 35625:tid 35658] [client 4.193.193.22:6268] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUV7oY12VmSu4NX34PTKUAAAAIM"]
[Sat Dec 20 00:21:53.615039 2025] [:error] [pid 35625:tid 35677] [client 4.193.193.22:6269] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUV7oY12VmSu4NX34PTKUwAAAJY"]
[Sat Dec 20 00:21:53.801481 2025] [:error] [pid 39268:tid 39334] [client 4.193.193.22:7120] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUV7oeTCMRSRXPuXZF_tqwAAARg"]
[Sat Dec 20 00:21:53.995668 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:7099] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUV7oSxTWUmlILwAM_eclAAAAA8"]
[Sat Dec 20 00:21:54.171068 2025] [:error] [pid 35626:tid 35699] [client 4.193.193.22:6233] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUV7ohzVxeBEODU8mCBrAgAAANE"]
[Sat Dec 20 00:21:54.346330 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:7118] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUV7ouTCMRSRXPuXZF_trwAAAQY"]
[Sat Dec 20 00:21:54.533645 2025] [:error] [pid 39268:tid 39331] [client 4.193.193.22:7105] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUV7ouTCMRSRXPuXZF_tsQAAARU"]
[Sat Dec 20 00:21:54.739491 2025] [:error] [pid 35625:tid 35662] [client 4.193.193.22:7045] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUV7oo12VmSu4NX34PTKVgAAAIc"]
[Sat Dec 20 00:21:54.914836 2025] [:error] [pid 35711:tid 35723] [client 4.193.193.22:7163] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUV7oixTWUmlILwAM_eclQAAAAo"]
[Sat Dec 20 00:21:55.093726 2025] [:error] [pid 35711:tid 35722] [client 4.193.193.22:6991] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aUV7oyxTWUmlILwAM_ecmAAAAAk"]
[Sat Dec 20 00:21:55.269727 2025] [:error] [pid 35624:tid 35630] [client 4.193.193.22:7147] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUV7o0JMTU3r4hb8qAlHNgAAAEI"]
[Sat Dec 20 00:21:55.444003 2025] [:error] [pid 35626:tid 35683] [client 4.193.193.22:7117] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUV7oxzVxeBEODU8mCBrBAAAAME"]
[Sat Dec 20 00:21:55.690059 2025] [:error] [pid 35711:tid 35715] [client 4.193.193.22:7054] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUV7oyxTWUmlILwAM_ecmQAAAAI"]
[Sat Dec 20 00:21:55.921985 2025] [:error] [pid 35711:tid 35734] [client 4.193.193.22:7148] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aUV7oyxTWUmlILwAM_ecnAAAABU"]
[Sat Dec 20 00:21:56.140167 2025] [:error] [pid 35711:tid 35737] [client 4.193.193.22:6261] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aUV7pCxTWUmlILwAM_ecnQAAABg"]
[Sat Dec 20 00:21:56.323645 2025] [:error] [pid 35625:tid 35679] [client 4.193.193.22:7077] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aUV7pI12VmSu4NX34PTKVwAAAJg"]
[Sat Dec 20 00:21:56.505786 2025] [:error] [pid 35626:tid 35695] [client 4.193.193.22:7140] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aUV7pBzVxeBEODU8mCBrBgAAAM0"]
[Sat Dec 20 00:21:56.699561 2025] [:error] [pid 35711:tid 35732] [client 4.193.193.22:6222] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aUV7pCxTWUmlILwAM_ecoAAAABM"]
[Sat Dec 20 00:21:56.880583 2025] [:error] [pid 39268:tid 39333] [client 4.193.193.22:7091] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aUV7pOTCMRSRXPuXZF_ttwAAARc"]
[Sat Dec 20 00:21:57.060541 2025] [:error] [pid 35626:tid 35697] [client 4.193.193.22:7056] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aUV7pRzVxeBEODU8mCBrBwAAAM8"]
[Sat Dec 20 00:21:57.255961 2025] [:error] [pid 35626:tid 35682] [client 4.193.193.22:7100] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aUV7pRzVxeBEODU8mCBrCQAAAMA"]
[Sat Dec 20 00:21:57.446512 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:7104] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aUV7pRzVxeBEODU8mCBrCgAAANA"]
[Sat Dec 20 00:21:57.636598 2025] [:error] [pid 39268:tid 39330] [client 4.193.193.22:7109] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aUV7peTCMRSRXPuXZF_tugAAARQ"]
[Sat Dec 20 00:21:57.853876 2025] [:error] [pid 39268:tid 39311] [client 4.193.193.22:7068] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aUV7peTCMRSRXPuXZF_tvAAAAQE"]
[Sat Dec 20 00:21:58.032644 2025] [:error] [pid 39268:tid 39334] [client 4.193.193.22:6271] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aUV7puTCMRSRXPuXZF_tvgAAARg"]
[Sat Dec 20 00:21:58.217598 2025] [:error] [pid 39268:tid 39314] [client 4.193.193.22:7146] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aUV7puTCMRSRXPuXZF_tvwAAAQQ"]
[Sat Dec 20 00:21:58.398848 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:6209] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUV7puTCMRSRXPuXZF_twAAAAQY"]
[Sat Dec 20 00:21:58.587194 2025] [:error] [pid 39268:tid 39326] [client 4.193.193.22:6266] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUV7puTCMRSRXPuXZF_twQAAARA"]
[Sat Dec 20 00:21:58.778885 2025] [:error] [pid 35711:tid 35723] [client 4.193.193.22:7103] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUV7pixTWUmlILwAM_ecogAAAAo"]
[Sat Dec 20 00:21:58.954644 2025] [:error] [pid 35711:tid 35736] [client 4.193.193.22:7165] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUV7pixTWUmlILwAM_ecowAAABc"]
[Sat Dec 20 00:21:59.132345 2025] [:error] [pid 35711:tid 35731] [client 4.193.193.22:6232] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7pyxTWUmlILwAM_ecpQAAABI"]
[Sat Dec 20 00:21:59.309129 2025] [:error] [pid 35626:tid 35705] [client 4.193.193.22:7050] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7pxzVxeBEODU8mCBrCwAAANc"]
[Sat Dec 20 00:21:59.494136 2025] [:error] [pid 35624:tid 35649] [client 4.193.193.22:6260] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7p0JMTU3r4hb8qAlHOAAAAFU"]
[Sat Dec 20 00:21:59.668594 2025] [:error] [pid 35624:tid 35631] [client 4.193.193.22:7150] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7p0JMTU3r4hb8qAlHOQAAAEM"]
[Sat Dec 20 00:21:59.847168 2025] [:error] [pid 35626:tid 35691] [client 4.193.193.22:7166] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUV7pxzVxeBEODU8mCBrDQAAAMk"]
[Sat Dec 20 00:22:00.040626 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:7069] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUV7qEJMTU3r4hb8qAlHOgAAAE4"]
[Sat Dec 20 00:22:00.263338 2025] [:error] [pid 35625:tid 35670] [client 4.193.193.22:7137] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUV7qI12VmSu4NX34PTKWgAAAI8"]
[Sat Dec 20 00:22:00.486970 2025] [:error] [pid 35626:tid 35703] [client 4.193.193.22:7167] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUV7qBzVxeBEODU8mCBrDwAAANU"]
[Sat Dec 20 00:22:00.701638 2025] [:error] [pid 35625:tid 35668] [client 4.193.193.22:7090] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUV7qI12VmSu4NX34PTKXAAAAI0"]
[Sat Dec 20 00:22:00.894876 2025] [:error] [pid 35625:tid 35678] [client 4.193.193.22:7115] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUV7qI12VmSu4NX34PTKXQAAAJc"]
[Sat Dec 20 00:22:01.078481 2025] [:error] [pid 35626:tid 35702] [client 4.193.193.22:6253] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUV7qRzVxeBEODU8mCBrEQAAANQ"]
[Sat Dec 20 00:22:01.266146 2025] [:error] [pid 35625:tid 35667] [client 4.193.193.22:7095] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUV7qY12VmSu4NX34PTKXgAAAIw"]
[Sat Dec 20 00:22:01.462467 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:7129] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUV7qeTCMRSRXPuXZF_twgAAARM"]
[Sat Dec 20 00:22:01.656870 2025] [:error] [pid 39268:tid 39312] [client 4.193.193.22:7043] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUV7qeTCMRSRXPuXZF_twwAAAQI"]
[Sat Dec 20 00:22:01.878651 2025] [:error] [pid 35625:tid 35660] [client 4.193.193.22:6236] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUV7qY12VmSu4NX34PTKXwAAAIU"]
[Sat Dec 20 00:22:02.062078 2025] [:error] [pid 35625:tid 35666] [client 4.193.193.22:7052] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUV7qo12VmSu4NX34PTKYQAAAIs"]
[Sat Dec 20 00:22:02.245491 2025] [:error] [pid 39268:tid 39317] [client 4.193.193.22:6215] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7quTCMRSRXPuXZF_txQAAAQc"]
[Sat Dec 20 00:22:02.436457 2025] [:error] [pid 39268:tid 39323] [client 4.193.193.22:7153] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7quTCMRSRXPuXZF_txgAAAQ0"]
[Sat Dec 20 00:22:02.620627 2025] [:error] [pid 39268:tid 39333] [client 4.193.193.22:7158] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7quTCMRSRXPuXZF_txwAAARc"]
[Sat Dec 20 00:22:02.803497 2025] [:error] [pid 35625:tid 35673] [client 4.193.193.22:7110] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7qo12VmSu4NX34PTKYwAAAJI"]
[Sat Dec 20 00:22:03.019996 2025] [:error] [pid 39268:tid 39325] [client 4.193.193.22:7142] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUV7q-TCMRSRXPuXZF_tyQAAAQ8"]
[Sat Dec 20 00:22:03.208629 2025] [:error] [pid 39268:tid 39330] [client 4.193.193.22:7053] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUV7q-TCMRSRXPuXZF_tygAAARQ"]
[Sat Dec 20 00:22:03.402531 2025] [:error] [pid 39268:tid 39328] [client 4.193.193.22:7124] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUV7q-TCMRSRXPuXZF_tzAAAARI"]
[Sat Dec 20 00:22:03.587873 2025] [:error] [pid 35624:tid 35636] [client 4.193.193.22:7125] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUV7q0JMTU3r4hb8qAlHPwAAAEg"]
[Sat Dec 20 00:22:03.763218 2025] [:error] [pid 35711:tid 35735] [client 4.193.193.22:7123] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aUV7qyxTWUmlILwAM_ecpwAAABY"]
[Sat Dec 20 00:22:03.950331 2025] [:error] [pid 39268:tid 39318] [client 4.193.193.22:6226] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aUV7q-TCMRSRXPuXZF_tzgAAAQg"]
[Sat Dec 20 00:22:04.140719 2025] [:error] [pid 35626:tid 35690] [client 4.193.193.22:7108] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aUV7rBzVxeBEODU8mCBrEgAAAMg"]
[Sat Dec 20 00:22:04.319439 2025] [:error] [pid 35626:tid 35692] [client 4.193.193.22:6919] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aUV7rBzVxeBEODU8mCBrEwAAAMo"]
[Sat Dec 20 00:22:04.498544 2025] [:error] [pid 35711:tid 35734] [client 4.193.193.22:7059] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7rCxTWUmlILwAM_ecqAAAABU"]
[Sat Dec 20 00:22:04.673234 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:6225] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7rOTCMRSRXPuXZF_t0gAAAQY"]
[Sat Dec 20 00:22:04.847148 2025] [:error] [pid 39268:tid 39331] [client 4.193.193.22:7145] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7rOTCMRSRXPuXZF_t0wAAARU"]
[Sat Dec 20 00:22:05.029545 2025] [:error] [pid 35624:tid 35643] [client 4.193.193.22:7114] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUV7rUJMTU3r4hb8qAlHQQAAAE8"]
[Sat Dec 20 00:22:05.204091 2025] [:error] [pid 35625:tid 35663] [client 4.193.193.22:7049] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUV7rY12VmSu4NX34PTKZgAAAIg"]
[Sat Dec 20 00:22:05.394231 2025] [:error] [pid 35626:tid 35704] [client 4.193.193.22:7067] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUV7rRzVxeBEODU8mCBrFAAAANY"]
[Sat Dec 20 00:22:05.604744 2025] [:error] [pid 35625:tid 35655] [client 4.193.193.22:7073] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUV7rY12VmSu4NX34PTKZwAAAIA"]
[Sat Dec 20 00:22:05.784412 2025] [:error] [pid 39268:tid 39328] [client 4.193.193.22:7004] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUV7reTCMRSRXPuXZF_t1gAAARI"]
[Sat Dec 20 00:22:06.009306 2025] [:error] [pid 39268:tid 39311] [client 4.193.193.22:7131] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aUV7ruTCMRSRXPuXZF_t2QAAAQE"]
[Sat Dec 20 00:22:06.186607 2025] [:error] [pid 35625:tid 35668] [client 4.193.193.22:7072] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aUV7ro12VmSu4NX34PTKaQAAAI0"]
[Sat Dec 20 00:22:06.359758 2025] [:error] [pid 39268:tid 39320] [client 4.193.193.22:7074] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aUV7ruTCMRSRXPuXZF_t3AAAAQo"]
[Sat Dec 20 00:22:06.542440 2025] [:error] [pid 35625:tid 35664] [client 4.193.193.22:7063] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aUV7ro12VmSu4NX34PTKagAAAIk"]
[Sat Dec 20 00:22:06.719522 2025] [:error] [pid 39268:tid 39313] [client 4.193.193.22:7089] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aUV7ruTCMRSRXPuXZF_t3QAAAQM"]
[Sat Dec 20 00:22:06.907204 2025] [:error] [pid 35711:tid 35726] [client 4.193.193.22:7066] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aUV7rixTWUmlILwAM_ecqgAAAA0"]
[Sat Dec 20 00:22:07.121610 2025] [:error] [pid 35625:tid 35671] [client 4.193.193.22:6982] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aUV7r412VmSu4NX34PTKawAAAJA"]
[Sat Dec 20 00:22:07.316441 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:6985] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aUV7r-TCMRSRXPuXZF_t4AAAARM"]
[Sat Dec 20 00:22:07.505024 2025] [:error] [pid 39268:tid 39324] [client 4.193.193.22:7151] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUV7r-TCMRSRXPuXZF_t4QAAAQ4"]
[Sat Dec 20 00:22:07.692812 2025] [:error] [pid 39268:tid 39317] [client 4.193.193.22:7143] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUV7r-TCMRSRXPuXZF_t4wAAAQc"]
[Sat Dec 20 00:22:07.874509 2025] [:error] [pid 35624:tid 35629] [client 4.193.193.22:7041] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUV7r0JMTU3r4hb8qAlHQgAAAEE"]
[Sat Dec 20 00:22:08.054045 2025] [:error] [pid 39268:tid 39328] [client 4.193.193.22:6933] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aUV7sOTCMRSRXPuXZF_t5AAAARI"]
[Sat Dec 20 00:22:08.238198 2025] [:error] [pid 39268:tid 39320] [client 4.193.193.22:7064] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUV7sOTCMRSRXPuXZF_t5gAAAQo"]
[Sat Dec 20 00:22:08.418237 2025] [:error] [pid 39268:tid 39327] [client 4.193.193.22:6267] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUV7sOTCMRSRXPuXZF_t5wAAARE"]
[Sat Dec 20 00:22:08.607890 2025] [:error] [pid 39268:tid 39313] [client 4.193.193.22:6980] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUV7sOTCMRSRXPuXZF_t6AAAAQM"]
[Sat Dec 20 00:22:08.786826 2025] [:error] [pid 39268:tid 39319] [client 4.193.193.22:7080] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUV7sOTCMRSRXPuXZF_t6gAAAQk"]
[Sat Dec 20 00:22:08.965454 2025] [:error] [pid 39268:tid 39326] [client 4.193.193.22:7048] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUV7sOTCMRSRXPuXZF_t6wAAARA"]
[Sat Dec 20 00:22:09.145561 2025] [:error] [pid 39268:tid 39324] [client 4.193.193.22:7071] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUV7seTCMRSRXPuXZF_t7AAAAQ4"]
[Sat Dec 20 00:22:09.320362 2025] [:error] [pid 39268:tid 39325] [client 4.193.193.22:7000] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUV7seTCMRSRXPuXZF_t7gAAAQ8"]
[Sat Dec 20 00:22:09.514510 2025] [:error] [pid 39268:tid 39311] [client 4.193.193.22:7021] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUV7seTCMRSRXPuXZF_t8QAAAQE"]
[Sat Dec 20 00:22:09.718662 2025] [:error] [pid 35626:tid 35687] [client 4.193.193.22:7084] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUV7sRzVxeBEODU8mCBrGAAAAMU"]
[Sat Dec 20 00:22:09.964256 2025] [:error] [pid 35625:tid 35674] [client 4.193.193.22:6979] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUV7sY12VmSu4NX34PTKcAAAAJM"]
[Sat Dec 20 00:22:10.142530 2025] [:error] [pid 39268:tid 39323] [client 4.193.193.22:7132] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUV7suTCMRSRXPuXZF_t8gAAAQ0"]
[Sat Dec 20 00:22:10.319862 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:7044] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aUV7suTCMRSRXPuXZF_t8wAAAQY"]
[Sat Dec 20 00:22:10.502459 2025] [:error] [pid 39268:tid 39313] [client 4.193.193.22:7060] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aUV7suTCMRSRXPuXZF_t9AAAAQM"]
[Sat Dec 20 00:22:10.681685 2025] [:error] [pid 39268:tid 39330] [client 4.193.193.22:7070] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aUV7suTCMRSRXPuXZF_t9QAAARQ"]
[Sat Dec 20 00:22:10.870390 2025] [:error] [pid 39268:tid 39334] [client 4.193.193.22:6256] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aUV7suTCMRSRXPuXZF_t9gAAARg"]
[Sat Dec 20 00:22:11.049642 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:7037] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aUV7s-TCMRSRXPuXZF_t-QAAARM"]
[Sat Dec 20 00:22:11.233425 2025] [:error] [pid 39268:tid 39331] [client 4.193.193.22:6913] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUV7s-TCMRSRXPuXZF_t-gAAARU"]
[Sat Dec 20 00:22:11.411528 2025] [:error] [pid 39268:tid 39325] [client 4.193.193.22:7075] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUV7s-TCMRSRXPuXZF_t-wAAAQ8"]
[Sat Dec 20 00:22:11.596008 2025] [:error] [pid 39268:tid 39311] [client 4.193.193.22:7087] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUV7s-TCMRSRXPuXZF_uAAAAAQE"]
[Sat Dec 20 00:22:11.780234 2025] [:error] [pid 35625:tid 35675] [client 4.193.193.22:6957] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUV7s412VmSu4NX34PTKcgAAAJQ"]
[Sat Dec 20 00:22:11.959726 2025] [:error] [pid 35625:tid 35665] [client 4.193.193.22:7156] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7s412VmSu4NX34PTKcwAAAIo"]
[Sat Dec 20 00:22:12.169812 2025] [:error] [pid 35624:tid 35633] [client 4.193.193.22:6981] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7tEJMTU3r4hb8qAlHRQAAAEU"]
[Sat Dec 20 00:22:12.373556 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:7094] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7tEJMTU3r4hb8qAlHRgAAAE4"]
[Sat Dec 20 00:22:12.560779 2025] [:error] [pid 39268:tid 39314] [client 4.193.193.22:7009] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7tOTCMRSRXPuXZF_uBQAAAQQ"]
[Sat Dec 20 00:22:12.751636 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:6986] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUV7tOTCMRSRXPuXZF_uBgAAARM"]
[Sat Dec 20 00:22:12.927383 2025] [:error] [pid 39268:tid 39324] [client 4.193.193.22:6978] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUV7tOTCMRSRXPuXZF_uCAAAAQ4"]
[Sat Dec 20 00:22:13.131051 2025] [:error] [pid 35711:tid 35732] [client 4.193.193.22:6227] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUV7tSxTWUmlILwAM_ecrAAAABM"]
[Sat Dec 20 00:22:13.314314 2025] [:error] [pid 39268:tid 39318] [client 4.193.193.22:7013] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aUV7teTCMRSRXPuXZF_uCgAAAQg"]
[Sat Dec 20 00:22:13.488861 2025] [:error] [pid 35711:tid 35727] [client 4.193.193.22:7002] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUV7tSxTWUmlILwAM_ecrgAAAA4"]
[Sat Dec 20 00:22:13.708226 2025] [:error] [pid 35711:tid 35729] [client 4.193.193.22:7092] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUV7tSxTWUmlILwAM_ecsAAAABA"]
[Sat Dec 20 00:22:13.915090 2025] [:error] [pid 35624:tid 35645] [client 4.193.193.22:6983] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUV7tUJMTU3r4hb8qAlHRwAAAFE"]
[Sat Dec 20 00:22:14.110233 2025] [:error] [pid 35624:tid 35638] [client 4.193.193.22:7162] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aUV7tkJMTU3r4hb8qAlHSAAAAEo"]
[Sat Dec 20 00:22:14.297000 2025] [:error] [pid 35625:tid 35663] [client 4.193.193.22:7141] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUV7to12VmSu4NX34PTKdAAAAIg"]
[Sat Dec 20 00:22:14.482630 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:7082] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUV7tuTCMRSRXPuXZF_uCwAAAQY"]
[Sat Dec 20 00:22:14.670418 2025] [:error] [pid 35625:tid 35659] [client 4.193.193.22:7101] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUV7to12VmSu4NX34PTKdQAAAIQ"]
[Sat Dec 20 00:22:14.846811 2025] [:error] [pid 35711:tid 35715] [client 4.193.193.22:6998] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aUV7tixTWUmlILwAM_ecuQAAAAI"]
[Sat Dec 20 00:22:15.035080 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:6996] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUV7tyxTWUmlILwAM_ecugAAAAg"]
[Sat Dec 20 00:22:15.253480 2025] [:error] [pid 35711:tid 35733] [client 4.193.193.22:6993] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUV7tyxTWUmlILwAM_ecvAAAABQ"]
[Sat Dec 20 00:22:15.433465 2025] [:error] [pid 35711:tid 35718] [client 4.193.193.22:7139] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUV7tyxTWUmlILwAM_ecvQAAAAU"]
[Sat Dec 20 00:22:15.660339 2025] [:error] [pid 35626:tid 35699] [client 4.193.193.22:6988] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aUV7txzVxeBEODU8mCBrGgAAANE"]
[Sat Dec 20 00:22:15.844198 2025] [:error] [pid 35711:tid 35736] [client 4.193.193.22:7098] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUV7tyxTWUmlILwAM_ecvgAAABc"]
[Sat Dec 20 00:22:16.046111 2025] [:error] [pid 35625:tid 35671] [client 4.193.193.22:7022] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUV7uI12VmSu4NX34PTKdwAAAJA"]
[Sat Dec 20 00:22:16.225399 2025] [:error] [pid 39268:tid 39327] [client 4.193.193.22:6990] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUV7uOTCMRSRXPuXZF_uDwAAARE"]
[Sat Dec 20 00:22:16.402517 2025] [:error] [pid 39268:tid 39314] [client 4.193.193.22:7055] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUV7uOTCMRSRXPuXZF_uEAAAAQQ"]
[Sat Dec 20 00:22:16.597109 2025] [:error] [pid 35625:tid 35658] [client 4.193.193.22:7061] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aUV7uI12VmSu4NX34PTKeAAAAIM"]
[Sat Dec 20 00:22:16.775424 2025] [:error] [pid 35625:tid 35667] [client 4.193.193.22:7081] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aUV7uI12VmSu4NX34PTKeQAAAIw"]
[Sat Dec 20 00:22:16.955639 2025] [:error] [pid 35711:tid 35735] [client 4.193.193.22:6994] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aUV7uCxTWUmlILwAM_ecxAAAABY"]
[Sat Dec 20 00:22:17.165609 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:7102] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aUV7uSxTWUmlILwAM_ecxwAAAAg"]
[Sat Dec 20 00:22:17.344114 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:7097] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUV7ueTCMRSRXPuXZF_uEQAAARM"]
[Sat Dec 20 00:22:17.527590 2025] [:error] [pid 35711:tid 35737] [client 4.193.193.22:6984] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUV7uSxTWUmlILwAM_eczAAAABg"]
[Sat Dec 20 00:22:17.708373 2025] [:error] [pid 35711:tid 35730] [client 4.193.193.22:6917] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUV7uSxTWUmlILwAM_eczwAAABE"]
[Sat Dec 20 00:22:17.889772 2025] [:error] [pid 35711:tid 35727] [client 4.193.193.22:6863] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aUV7uSxTWUmlILwAM_ec0QAAAA4"]
[Sat Dec 20 00:22:18.106885 2025] [:error] [pid 35626:tid 35702] [client 4.193.193.22:6995] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7uhzVxeBEODU8mCBrHAAAANQ"]
[Sat Dec 20 00:22:18.289795 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:7159] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7uixTWUmlILwAM_ec0wAAAA8"]
[Sat Dec 20 00:22:18.477311 2025] [:error] [pid 35711:tid 35724] [client 4.193.193.22:6230] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7uixTWUmlILwAM_ec1gAAAAs"]
[Sat Dec 20 00:22:18.673632 2025] [:error] [pid 35711:tid 35725] [client 4.193.193.22:7010] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUV7uixTWUmlILwAM_ec1wAAAAw"]
[Sat Dec 20 00:22:18.857399 2025] [:error] [pid 35624:tid 35635] [client 4.193.193.22:6244] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUV7ukJMTU3r4hb8qAlHSQAAAEc"]
[Sat Dec 20 00:22:19.041987 2025] [:error] [pid 35624:tid 35637] [client 4.193.193.22:7085] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUV7u0JMTU3r4hb8qAlHSgAAAEk"]
[Sat Dec 20 00:22:19.231219 2025] [:error] [pid 35625:tid 35660] [client 4.193.193.22:6999] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUV7u412VmSu4NX34PTKegAAAIU"]
[Sat Dec 20 00:22:19.418526 2025] [:error] [pid 35624:tid 35650] [client 4.193.193.22:6246] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUV7u0JMTU3r4hb8qAlHTQAAAFY"]
[Sat Dec 20 00:22:19.610269 2025] [:error] [pid 35624:tid 35647] [client 4.193.193.22:7051] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUV7u0JMTU3r4hb8qAlHTgAAAFM"]
[Sat Dec 20 00:22:19.813609 2025] [:error] [pid 35624:tid 35636] [client 4.193.193.22:7040] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUV7u0JMTU3r4hb8qAlHTwAAAEg"]
[Sat Dec 20 00:22:20.002254 2025] [:error] [pid 39268:tid 39334] [client 4.193.193.22:7076] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUV7vOTCMRSRXPuXZF_uEwAAARg"]
[Sat Dec 20 00:22:20.192940 2025] [:error] [pid 35711:tid 35734] [client 4.193.193.22:7014] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aUV7vCxTWUmlILwAM_ec2QAAABU"]
[Sat Dec 20 00:22:20.383443 2025] [:error] [pid 35711:tid 35715] [client 4.193.193.22:7093] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aUV7vCxTWUmlILwAM_ec2gAAAAI"]
[Sat Dec 20 00:22:20.570695 2025] [:error] [pid 35711:tid 35737] [client 4.193.193.22:7154] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aUV7vCxTWUmlILwAM_ec2wAAABg"]
[Sat Dec 20 00:22:20.751682 2025] [:error] [pid 35625:tid 35678] [client 4.193.193.22:7149] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aUV7vI12VmSu4NX34PTKewAAAJc"]
[Sat Dec 20 00:22:20.956305 2025] [:error] [pid 35624:tid 35629] [client 4.193.193.22:7029] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aUV7vEJMTU3r4hb8qAlHUQAAAEE"]
[Sat Dec 20 00:22:21.146693 2025] [:error] [pid 35625:tid 35656] [client 4.193.193.22:6977] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUV7vY12VmSu4NX34PTKfgAAAIE"]
[Sat Dec 20 00:22:21.327754 2025] [:error] [pid 35624:tid 35640] [client 4.193.193.22:7015] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUV7vUJMTU3r4hb8qAlHUwAAAEw"]
[Sat Dec 20 00:22:21.520717 2025] [:error] [pid 35624:tid 35639] [client 4.193.193.22:7036] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUV7vUJMTU3r4hb8qAlHVAAAAEs"]
[Sat Dec 20 00:22:21.698724 2025] [:error] [pid 35625:tid 35661] [client 4.193.193.22:7058] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aUV7vY12VmSu4NX34PTKgQAAAIY"]
[Sat Dec 20 00:22:21.877088 2025] [:error] [pid 35625:tid 35679] [client 4.193.193.22:7079] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7vY12VmSu4NX34PTKggAAAJg"]
[Sat Dec 20 00:22:22.058706 2025] [:error] [pid 35625:tid 35669] [client 4.193.193.22:7025] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7vo12VmSu4NX34PTKgwAAAI4"]
[Sat Dec 20 00:22:22.256484 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:6918] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7vuTCMRSRXPuXZF_uGQAAAQY"]
[Sat Dec 20 00:22:22.446457 2025] [:error] [pid 39268:tid 39314] [client 4.193.193.22:6242] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aUV7vuTCMRSRXPuXZF_uGwAAAQQ"]
[Sat Dec 20 00:22:22.641692 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:7005] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aUV7vuTCMRSRXPuXZF_uHQAAARM"]
[Sat Dec 20 00:22:22.829182 2025] [:error] [pid 35626:tid 35685] [client 4.193.193.22:6961] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aUV7vhzVxeBEODU8mCBrHQAAAMM"]
[Sat Dec 20 00:22:23.020122 2025] [:error] [pid 35626:tid 35683] [client 4.193.193.22:6992] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aUV7vxzVxeBEODU8mCBrHgAAAME"]
[Sat Dec 20 00:22:23.226786 2025] [:error] [pid 35624:tid 35649] [client 4.193.193.22:6989] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aUV7v0JMTU3r4hb8qAlHVQAAAFU"]
[Sat Dec 20 00:22:23.424347 2025] [:error] [pid 35625:tid 35668] [client 4.193.193.22:6997] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aUV7v412VmSu4NX34PTKhgAAAI0"]
[Sat Dec 20 00:22:23.617182 2025] [:error] [pid 35624:tid 35641] [client 4.193.193.22:7033] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aUV7v0JMTU3r4hb8qAlHVgAAAE0"]
[Sat Dec 20 00:22:23.808160 2025] [:error] [pid 35626:tid 35692] [client 4.193.193.22:7001] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aUV7vxzVxeBEODU8mCBrHwAAAMo"]
[Sat Dec 20 00:22:24.000911 2025] [:error] [pid 35624:tid 35633] [client 4.193.193.22:6228] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aUV7v0JMTU3r4hb8qAlHVwAAAEU"]
[Sat Dec 20 00:22:24.198493 2025] [:error] [pid 35711:tid 35723] [client 4.193.193.22:6942] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aUV7wCxTWUmlILwAM_ec3QAAAAo"]
[Sat Dec 20 00:22:24.416425 2025] [:error] [pid 35624:tid 35645] [client 4.193.193.22:7088] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aUV7wEJMTU3r4hb8qAlHWgAAAFE"]
[Sat Dec 20 00:22:24.639021 2025] [:error] [pid 35626:tid 35704] [client 4.193.193.22:6955] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aUV7wBzVxeBEODU8mCBrIQAAANY"]
[Sat Dec 20 00:22:24.842526 2025] [:error] [pid 35711:tid 35718] [client 4.193.193.22:6976] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aUV7wCxTWUmlILwAM_ec3wAAAAU"]
[Sat Dec 20 00:22:25.036355 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:7019] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aUV7wSxTWUmlILwAM_ec4AAAAA8"]
[Sat Dec 20 00:22:25.241065 2025] [:error] [pid 35626:tid 35682] [client 4.193.193.22:7038] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aUV7wRzVxeBEODU8mCBrIgAAAMA"]
[Sat Dec 20 00:22:25.421649 2025] [:error] [pid 35624:tid 35637] [client 4.193.193.22:7133] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aUV7wUJMTU3r4hb8qAlHXAAAAEk"]
[Sat Dec 20 00:22:25.625657 2025] [:error] [pid 39268:tid 39314] [client 4.193.193.22:7161] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aUV7weTCMRSRXPuXZF_uLAAAAQQ"]
[Sat Dec 20 00:22:25.812169 2025] [:error] [pid 35626:tid 35705] [client 4.193.193.22:7096] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUV7wRzVxeBEODU8mCBrJAAAANc"]
[Sat Dec 20 00:22:25.999205 2025] [:error] [pid 35626:tid 35687] [client 4.193.193.22:6972] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUV7wRzVxeBEODU8mCBrJQAAAMU"]
[Sat Dec 20 00:22:26.190479 2025] [:error] [pid 35626:tid 35691] [client 4.193.193.22:7008] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUV7whzVxeBEODU8mCBrJgAAAMk"]
[Sat Dec 20 00:22:26.375765 2025] [:error] [pid 35626:tid 35694] [client 4.193.193.22:7160] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aUV7whzVxeBEODU8mCBrJwAAAMw"]
[Sat Dec 20 00:22:26.561801 2025] [:error] [pid 35711:tid 35724] [client 4.193.193.22:6912] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUV7wixTWUmlILwAM_ec4QAAAAs"]
[Sat Dec 20 00:22:26.751839 2025] [:error] [pid 35626:tid 35693] [client 4.193.193.22:6935] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUV7whzVxeBEODU8mCBrKQAAAMs"]
[Sat Dec 20 00:22:26.947467 2025] [:error] [pid 35624:tid 35630] [client 4.193.193.22:7042] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUV7wkJMTU3r4hb8qAlHXwAAAEI"]
[Sat Dec 20 00:22:27.135264 2025] [:error] [pid 35711:tid 35725] [client 4.193.193.22:6930] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aUV7wyxTWUmlILwAM_ec4gAAAAw"]
[Sat Dec 20 00:22:27.344000 2025] [:error] [pid 39268:tid 39324] [client 4.193.193.22:6945] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aUV7w-TCMRSRXPuXZF_uLQAAAQ4"]
[Sat Dec 20 00:22:27.534131 2025] [:error] [pid 39268:tid 39331] [client 4.193.193.22:7007] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aUV7w-TCMRSRXPuXZF_uLgAAARU"]
[Sat Dec 20 00:22:27.726789 2025] [:error] [pid 35625:tid 35664] [client 4.193.193.22:7012] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aUV7w412VmSu4NX34PTKhwAAAIk"]
[Sat Dec 20 00:22:27.921015 2025] [:error] [pid 39268:tid 39330] [client 4.193.193.22:6920] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aUV7w-TCMRSRXPuXZF_uMAAAARQ"]
[Sat Dec 20 00:22:28.111839 2025] [:error] [pid 39268:tid 39333] [client 4.193.193.22:7138] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUV7xOTCMRSRXPuXZF_uMQAAARc"]
[Sat Dec 20 00:22:28.325524 2025] [:error] [pid 35711:tid 35719] [client 4.193.193.22:7049] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aUV7xCxTWUmlILwAM_ec5AAAAAY"]
[Sat Dec 20 00:22:28.530155 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:6925] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aUV7xOTCMRSRXPuXZF_uMwAAAQY"]
[Sat Dec 20 00:22:28.746426 2025] [:error] [pid 39268:tid 39315] [client 4.193.193.22:7006] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aUV7xOTCMRSRXPuXZF_uNQAAAQU"]
[Sat Dec 20 00:22:28.951030 2025] [:error] [pid 39268:tid 39313] [client 4.193.193.22:6914] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUV7xOTCMRSRXPuXZF_uNwAAAQM"]
[Sat Dec 20 00:22:29.143184 2025] [:error] [pid 35711:tid 35735] [client 4.193.193.22:6987] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUV7xSxTWUmlILwAM_ec5QAAABY"]
[Sat Dec 20 00:22:29.346129 2025] [:error] [pid 35626:tid 35703] [client 4.193.193.22:6849] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUV7xRzVxeBEODU8mCBrKwAAANU"]
[Sat Dec 20 00:22:29.547648 2025] [:error] [pid 35711:tid 35734] [client 4.193.193.22:6952] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUV7xSxTWUmlILwAM_ec5gAAABU"]
[Sat Dec 20 00:22:29.772202 2025] [:error] [pid 35626:tid 35688] [client 4.193.193.22:7155] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aUV7xRzVxeBEODU8mCBrLAAAAMY"]
[Sat Dec 20 00:22:29.970678 2025] [:error] [pid 35624:tid 35632] [client 4.193.193.22:7016] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUV7xUJMTU3r4hb8qAlHYQAAAEQ"]
[Sat Dec 20 00:22:30.163501 2025] [:error] [pid 35626:tid 35699] [client 4.193.193.22:7030] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUV7xhzVxeBEODU8mCBrLgAAANE"]
[Sat Dec 20 00:22:30.365455 2025] [:error] [pid 35625:tid 35667] [client 4.193.193.22:6916] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUV7xo12VmSu4NX34PTKiQAAAIw"]
[Sat Dec 20 00:22:30.551621 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:6924] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aUV7xuTCMRSRXPuXZF_uOAAAARM"]
[Sat Dec 20 00:22:30.781657 2025] [:error] [pid 35624:tid 35639] [client 4.193.193.22:6944] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUV7xkJMTU3r4hb8qAlHYwAAAEs"]
[Sat Dec 20 00:22:30.975421 2025] [:error] [pid 35711:tid 35733] [client 4.193.193.22:7024] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUV7xixTWUmlILwAM_ec6QAAABQ"]
[Sat Dec 20 00:22:31.173891 2025] [:error] [pid 35711:tid 35737] [client 4.193.193.22:7078] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUV7xyxTWUmlILwAM_ec6gAAABg"]
[Sat Dec 20 00:22:31.363742 2025] [:error] [pid 35624:tid 35651] [client 4.193.193.22:6879] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aUV7x0JMTU3r4hb8qAlHZQAAAFc"]
[Sat Dec 20 00:22:31.551689 2025] [:error] [pid 35626:tid 35704] [client 4.193.193.22:6922] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUV7xxzVxeBEODU8mCBrMAAAANY"]
[Sat Dec 20 00:22:31.730545 2025] [:error] [pid 35626:tid 35695] [client 4.193.193.22:7020] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aUV7xxzVxeBEODU8mCBrMQAAAM0"]
[Sat Dec 20 00:22:31.926978 2025] [:error] [pid 35626:tid 35682] [client 4.193.193.22:7031] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aUV7xxzVxeBEODU8mCBrMgAAAMA"]
[Sat Dec 20 00:22:32.111398 2025] [:error] [pid 35624:tid 35644] [client 4.193.193.22:6959] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aUV7yEJMTU3r4hb8qAlHZwAAAFA"]
[Sat Dec 20 00:22:32.289777 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:7003] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aUV7yBzVxeBEODU8mCBrNQAAANA"]
[Sat Dec 20 00:22:32.464176 2025] [:error] [pid 39268:tid 39312] [client 4.193.193.22:6267] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUV7yOTCMRSRXPuXZF_uOQAAAQI"]
[Sat Dec 20 00:22:32.638350 2025] [:error] [pid 35626:tid 35687] [client 4.193.193.22:6943] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUV7yBzVxeBEODU8mCBrNgAAAMU"]
[Sat Dec 20 00:22:32.824483 2025] [:error] [pid 35626:tid 35691] [client 4.193.193.22:6867] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUV7yBzVxeBEODU8mCBrNwAAAMk"]
[Sat Dec 20 00:22:33.003180 2025] [:error] [pid 35626:tid 35686] [client 4.193.193.22:6936] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aUV7yRzVxeBEODU8mCBrOAAAAMQ"]
[Sat Dec 20 00:22:33.178035 2025] [:error] [pid 39268:tid 39310] [client 4.193.193.22:7027] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUV7yeTCMRSRXPuXZF_uOgAAAQA"]
[Sat Dec 20 00:22:33.364975 2025] [:error] [pid 39268:tid 39331] [client 4.193.193.22:6216] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aUV7yeTCMRSRXPuXZF_uOwAAARU"]
[Sat Dec 20 00:22:33.555132 2025] [:error] [pid 39268:tid 39333] [client 4.193.193.22:7071] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aUV7yeTCMRSRXPuXZF_uPQAAARc"]
[Sat Dec 20 00:22:33.741207 2025] [:error] [pid 39268:tid 39327] [client 4.193.193.22:7086] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aUV7yeTCMRSRXPuXZF_uPgAAARE"]
[Sat Dec 20 00:22:33.927804 2025] [:error] [pid 35625:tid 35672] [client 4.193.193.22:6946] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aUV7yY12VmSu4NX34PTKiwAAAJE"]
[Sat Dec 20 00:22:34.102238 2025] [:error] [pid 35625:tid 35656] [client 4.193.193.22:6958] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aUV7yo12VmSu4NX34PTKjAAAAIE"]
[Sat Dec 20 00:22:34.280406 2025] [:error] [pid 35626:tid 35688] [client 4.193.193.22:6880] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aUV7yhzVxeBEODU8mCBrOwAAAMY"]
[Sat Dec 20 00:22:34.459149 2025] [:error] [pid 35625:tid 35673] [client 4.193.193.22:7062] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aUV7yo12VmSu4NX34PTKkQAAAJI"]
[Sat Dec 20 00:22:34.655329 2025] [:error] [pid 35626:tid 35699] [client 4.193.193.22:6213] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aUV7yhzVxeBEODU8mCBrPAAAANE"]
[Sat Dec 20 00:22:34.876109 2025] [:error] [pid 35626:tid 35706] [client 4.193.193.22:6971] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aUV7yhzVxeBEODU8mCBrPQAAANg"]
[Sat Dec 20 00:22:35.051202 2025] [:error] [pid 35626:tid 35684] [client 4.193.193.22:6865] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aUV7yxzVxeBEODU8mCBrPgAAAMI"]
[Sat Dec 20 00:22:35.224708 2025] [:error] [pid 35711:tid 35716] [client 4.193.193.22:6975] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aUV7yyxTWUmlILwAM_ec7QAAAAM"]
[Sat Dec 20 00:22:35.408028 2025] [:error] [pid 35626:tid 35689] [client 4.193.193.22:7035] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUV7yxzVxeBEODU8mCBrPwAAAMc"]
[Sat Dec 20 00:22:35.592971 2025] [:error] [pid 35626:tid 35704] [client 4.193.193.22:7034] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUV7yxzVxeBEODU8mCBrQAAAANY"]
[Sat Dec 20 00:22:35.772127 2025] [:error] [pid 35626:tid 35690] [client 4.193.193.22:6951] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUV7yxzVxeBEODU8mCBrQwAAAMg"]
[Sat Dec 20 00:22:35.955176 2025] [:error] [pid 35626:tid 35697] [client 4.193.193.22:6853] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aUV7yxzVxeBEODU8mCBrRQAAAM8"]
[Sat Dec 20 00:22:36.128958 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:6668] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUV7zBzVxeBEODU8mCBrSAAAANA"]
[Sat Dec 20 00:22:36.307959 2025] [:error] [pid 35625:tid 35655] [client 4.193.193.22:7018] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUV7zI12VmSu4NX34PTKkgAAAIA"]
[Sat Dec 20 00:22:36.481139 2025] [:error] [pid 35711:tid 35727] [client 4.193.193.22:6937] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUV7zCxTWUmlILwAM_ec7gAAAA4"]
[Sat Dec 20 00:22:36.661303 2025] [:error] [pid 39268:tid 39328] [client 4.193.193.22:7017] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aUV7zOTCMRSRXPuXZF_uPwAAARI"]
[Sat Dec 20 00:22:36.858904 2025] [:error] [pid 35626:tid 35691] [client 4.193.193.22:6938] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aUV7zBzVxeBEODU8mCBrSQAAAMk"]
[Sat Dec 20 00:22:37.041210 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:7011] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aUV7zSxTWUmlILwAM_ec8AAAAA8"]
[Sat Dec 20 00:22:37.214073 2025] [:error] [pid 39268:tid 39316] [client 4.193.193.22:6900] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aUV7zeTCMRSRXPuXZF_uQQAAAQY"]
[Sat Dec 20 00:22:37.387256 2025] [:error] [pid 39268:tid 39322] [client 4.193.193.22:7083] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aUV7zeTCMRSRXPuXZF_uQgAAAQw"]
[Sat Dec 20 00:22:37.567704 2025] [:error] [pid 35625:tid 35665] [client 4.193.193.22:6929] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUV7zY12VmSu4NX34PTKkwAAAIo"]
[Sat Dec 20 00:22:37.742013 2025] [:error] [pid 35624:tid 35636] [client 4.193.193.22:6968] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUV7zUJMTU3r4hb8qAlHagAAAEg"]
[Sat Dec 20 00:22:37.918834 2025] [:error] [pid 35625:tid 35668] [client 4.193.193.22:6901] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUV7zY12VmSu4NX34PTKlQAAAI0"]
[Sat Dec 20 00:22:38.099344 2025] [:error] [pid 35711:tid 35724] [client 4.193.193.22:6927] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aUV7zixTWUmlILwAM_ec8gAAAAs"]
[Sat Dec 20 00:22:38.279460 2025] [:error] [pid 35625:tid 35664] [client 4.193.193.22:7023] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUV7zo12VmSu4NX34PTKlgAAAIk"]
[Sat Dec 20 00:22:38.454959 2025] [:error] [pid 35626:tid 35693] [client 4.193.193.22:6859] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUV7zhzVxeBEODU8mCBrSgAAAMs"]
[Sat Dec 20 00:22:38.641847 2025] [:error] [pid 35625:tid 35657] [client 4.193.193.22:6949] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUV7zo12VmSu4NX34PTKlwAAAII"]
[Sat Dec 20 00:22:38.816649 2025] [:error] [pid 35625:tid 35667] [client 4.193.193.22:6864] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aUV7zo12VmSu4NX34PTKmAAAAIw"]
[Sat Dec 20 00:22:38.990305 2025] [:error] [pid 35624:tid 35634] [client 4.193.193.22:7032] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUV7zkJMTU3r4hb8qAlHbAAAAEY"]
[Sat Dec 20 00:22:39.163790 2025] [:error] [pid 35624:tid 35643] [client 4.193.193.22:6874] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUV7z0JMTU3r4hb8qAlHbQAAAE8"]
[Sat Dec 20 00:22:39.338441 2025] [:error] [pid 35625:tid 35656] [client 4.193.193.22:7026] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUV7z412VmSu4NX34PTKmwAAAIE"]
[Sat Dec 20 00:22:39.514018 2025] [:error] [pid 35626:tid 35703] [client 4.193.193.22:6890] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aUV7zxzVxeBEODU8mCBrSwAAANU"]
[Sat Dec 20 00:22:39.725657 2025] [:error] [pid 35626:tid 35688] [client 4.193.193.22:6893] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUV7zxzVxeBEODU8mCBrTAAAAMY"]
[Sat Dec 20 00:22:39.920353 2025] [:error] [pid 35626:tid 35706] [client 4.193.193.22:6854] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aUV7zxzVxeBEODU8mCBrTQAAANg"]
[Sat Dec 20 00:22:40.771473 2025] [:error] [pid 35626:tid 35700] [client 4.193.193.22:6921] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Dec 20 00:22:40.862995 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:6921] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Sat Dec 20 00:22:42.376542 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:6921] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUV70hzVxeBEODU8mCBrYgAAANA"]
[Sat Dec 20 00:22:42.563220 2025] [:error] [pid 35711:tid 35732] [client 4.193.193.22:6664] [client 4.193.193.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aUV70ixTWUmlILwAM_ec-AAAABM"]
[Sat Dec 20 00:22:42.743537 2025] [:error] [pid 35626:tid 35685] [client 4.193.193.22:6956] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Dec 20 00:22:42.834662 2025] [:error] [pid 35626:tid 35705] [client 4.193.193.22:6956] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Dec 20 00:22:42.925588 2025] [:error] [pid 35626:tid 35694] [client 4.193.193.22:6956] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUV70hzVxeBEODU8mCBraAAAAMw"]
[Sat Dec 20 00:22:43.113830 2025] [:error] [pid 35626:tid 35696] [client 4.193.193.22:6923] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUV70xzVxeBEODU8mCBragAAAM4"]
[Sat Dec 20 00:22:43.293839 2025] [:error] [pid 35624:tid 35645] [client 4.193.193.22:6962] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUV700JMTU3r4hb8qAlHcgAAAFE"]
[Sat Dec 20 00:22:43.484772 2025] [:error] [pid 35624:tid 35631] [client 4.193.193.22:6960] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aUV700JMTU3r4hb8qAlHdAAAAEM"]
[Sat Dec 20 00:22:43.663628 2025] [:error] [pid 35711:tid 35723] [client 4.193.193.22:6878] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aUV70yxTWUmlILwAM_ec-wAAAAo"]
[Sat Dec 20 00:22:43.868611 2025] [:error] [pid 39268:tid 39313] [client 4.193.193.22:6857] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aUV70-TCMRSRXPuXZF_uRQAAAQM"]
[Sat Dec 20 00:22:44.066201 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:6934] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aUV71CxTWUmlILwAM_ec_AAAAA8"]
[Sat Dec 20 00:22:44.255699 2025] [:error] [pid 35624:tid 35637] [client 4.193.193.22:6877] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aUV71EJMTU3r4hb8qAlHdQAAAEk"]
[Sat Dec 20 00:22:44.431712 2025] [:error] [pid 35711:tid 35724] [client 4.193.193.22:6928] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aUV71CxTWUmlILwAM_ec_QAAAAs"]
[Sat Dec 20 00:22:44.619429 2025] [:error] [pid 35626:tid 35683] [client 4.193.193.22:6848] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aUV71BzVxeBEODU8mCBrbQAAAME"]
[Sat Dec 20 00:22:44.800821 2025] [:error] [pid 35626:tid 35695] [client 4.193.193.22:6885] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aUV71BzVxeBEODU8mCBrbwAAAM0"]
[Sat Dec 20 00:22:44.976774 2025] [:error] [pid 35626:tid 35706] [client 4.193.193.22:6953] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aUV71BzVxeBEODU8mCBrcgAAANg"]
[Sat Dec 20 00:22:45.177486 2025] [:error] [pid 35624:tid 35650] [client 4.193.193.22:6222] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aUV71UJMTU3r4hb8qAlHdgAAAFY"]
[Sat Dec 20 00:22:45.360007 2025] [:error] [pid 35626:tid 35686] [client 4.193.193.22:6856] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aUV71RzVxeBEODU8mCBrcwAAAMQ"]
[Sat Dec 20 00:22:45.536673 2025] [:error] [pid 35711:tid 35717] [client 4.193.193.22:6855] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aUV71SxTWUmlILwAM_ec_wAAAAQ"]
[Sat Dec 20 00:22:45.712136 2025] [:error] [pid 35626:tid 35701] [client 4.193.193.22:6866] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aUV71RzVxeBEODU8mCBrdAAAANM"]
[Sat Dec 20 00:22:45.896098 2025] [:error] [pid 35624:tid 35630] [client 4.193.193.22:7028] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUV71UJMTU3r4hb8qAlHeAAAAEI"]
[Sat Dec 20 00:22:46.105954 2025] [:error] [pid 35625:tid 35669] [client 4.193.193.22:6967] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUV71o12VmSu4NX34PTKnwAAAI4"]
[Sat Dec 20 00:22:46.281863 2025] [:error] [pid 35625:tid 35655] [client 4.193.193.22:6871] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUV71o12VmSu4NX34PTKoAAAAIA"]
[Sat Dec 20 00:22:46.456343 2025] [:error] [pid 39268:tid 39311] [client 4.193.193.22:6876] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUV71uTCMRSRXPuXZF_uRgAAAQE"]
[Sat Dec 20 00:22:46.630055 2025] [:error] [pid 35711:tid 35737] [client 4.193.193.22:6661] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aUV71ixTWUmlILwAM_edAwAAABg"]
[Sat Dec 20 00:22:46.809422 2025] [:error] [pid 39268:tid 39317] [client 4.193.193.22:6850] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aUV71uTCMRSRXPuXZF_uRwAAAQc"]
[Sat Dec 20 00:22:46.995438 2025] [:error] [pid 39268:tid 39332] [client 4.193.193.22:6891] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aUV71uTCMRSRXPuXZF_uSAAAARY"]
[Sat Dec 20 00:22:47.171729 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:6665] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aUV71-TCMRSRXPuXZF_uSQAAARM"]
[Sat Dec 20 00:22:47.350524 2025] [:error] [pid 35625:tid 35677] [client 4.193.193.22:6875] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aUV71412VmSu4NX34PTKpQAAAJY"]
[Sat Dec 20 00:22:47.529906 2025] [:error] [pid 35625:tid 35657] [client 4.193.193.22:6872] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aUV71412VmSu4NX34PTKpgAAAII"]
[Sat Dec 20 00:22:47.704291 2025] [:error] [pid 35626:tid 35699] [client 4.193.193.22:6947] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aUV71xzVxeBEODU8mCBrfAAAANE"]
[Sat Dec 20 00:22:47.887661 2025] [:error] [pid 35624:tid 35643] [client 4.193.193.22:6883] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aUV710JMTU3r4hb8qAlHegAAAE8"]
[Sat Dec 20 00:22:48.062039 2025] [:error] [pid 35626:tid 35689] [client 4.193.193.22:6696] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aUV72BzVxeBEODU8mCBrfgAAAMc"]
[Sat Dec 20 00:22:48.236879 2025] [:error] [pid 35626:tid 35706] [client 4.193.193.22:6970] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aUV72BzVxeBEODU8mCBrfwAAANg"]
[Sat Dec 20 00:22:48.410542 2025] [:error] [pid 35624:tid 35629] [client 4.193.193.22:6873] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aUV72EJMTU3r4hb8qAlHewAAAEE"]
[Sat Dec 20 00:22:48.586299 2025] [:error] [pid 35624:tid 35638] [client 4.193.193.22:6939] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aUV72EJMTU3r4hb8qAlHfQAAAEo"]
[Sat Dec 20 00:22:48.762609 2025] [:error] [pid 35624:tid 35628] [client 4.193.193.22:6954] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUV72EJMTU3r4hb8qAlHfgAAAEA"]
[Sat Dec 20 00:22:48.949194 2025] [:error] [pid 35624:tid 35651] [client 4.193.193.22:6941] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUV72EJMTU3r4hb8qAlHfwAAAFc"]
[Sat Dec 20 00:22:49.124186 2025] [:error] [pid 35624:tid 35649] [client 4.193.193.22:6672] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUV72UJMTU3r4hb8qAlHgAAAAFU"]
[Sat Dec 20 00:22:49.297672 2025] [:error] [pid 35626:tid 35690] [client 4.193.193.22:6701] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUV72RzVxeBEODU8mCBrgQAAAMg"]
[Sat Dec 20 00:22:49.471423 2025] [:error] [pid 35626:tid 35697] [client 4.193.193.22:6926] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aUV72RzVxeBEODU8mCBrggAAAM8"]
[Sat Dec 20 00:22:49.645620 2025] [:error] [pid 39268:tid 39321] [client 4.193.193.22:6862] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aUV72eTCMRSRXPuXZF_uSwAAAQs"]
[Sat Dec 20 00:22:49.828373 2025] [:error] [pid 39268:tid 39324] [client 4.193.193.22:6904] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aUV72eTCMRSRXPuXZF_uTAAAAQ4"]
[Sat Dec 20 00:22:50.005162 2025] [:error] [pid 39268:tid 39331] [client 4.193.193.22:6884] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aUV72uTCMRSRXPuXZF_uTQAAARU"]
[Sat Dec 20 00:22:50.208990 2025] [:error] [pid 35711:tid 35735] [client 4.193.193.22:6869] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUV72ixTWUmlILwAM_edDAAAABY"]
[Sat Dec 20 00:22:50.389568 2025] [:error] [pid 35711:tid 35725] [client 4.193.193.22:6950] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUV72ixTWUmlILwAM_edDgAAAAw"]
[Sat Dec 20 00:22:50.566570 2025] [:error] [pid 35625:tid 35658] [client 4.193.193.22:6974] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUV72o12VmSu4NX34PTKqQAAAIM"]
[Sat Dec 20 00:22:50.744239 2025] [:error] [pid 35625:tid 35672] [client 4.193.193.22:6915] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUV72o12VmSu4NX34PTKqgAAAJE"]
[Sat Dec 20 00:22:50.918676 2025] [:error] [pid 35711:tid 35729] [client 4.193.193.22:6676] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aUV72ixTWUmlILwAM_edEQAAABA"]
[Sat Dec 20 00:22:51.093250 2025] [:error] [pid 35625:tid 35656] [client 4.193.193.22:6948] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aUV72412VmSu4NX34PTKqwAAAIE"]
[Sat Dec 20 00:22:51.276204 2025] [:error] [pid 35711:tid 35731] [client 4.193.193.22:6897] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aUV72yxTWUmlILwAM_edEwAAABI"]
[Sat Dec 20 00:22:51.454844 2025] [:error] [pid 35624:tid 35645] [client 4.193.193.22:7038] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aUV720JMTU3r4hb8qAlHggAAAFE"]
[Sat Dec 20 00:22:51.628931 2025] [:error] [pid 35711:tid 35732] [client 4.193.193.22:6868] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aUV72yxTWUmlILwAM_edFQAAABM"]
[Sat Dec 20 00:22:51.804411 2025] [:error] [pid 35625:tid 35662] [client 4.193.193.22:6907] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aUV72412VmSu4NX34PTKrAAAAIc"]
[Sat Dec 20 00:22:51.978004 2025] [:error] [pid 35711:tid 35713] [client 4.193.193.22:6858] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aUV72yxTWUmlILwAM_edFwAAAAA"]
[Sat Dec 20 00:22:52.156696 2025] [:error] [pid 35625:tid 35673] [client 4.193.193.22:6887] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aUV73I12VmSu4NX34PTKrQAAAJI"]
[Sat Dec 20 00:22:52.360899 2025] [:error] [pid 35624:tid 35652] [client 4.193.193.22:6673] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aUV73EJMTU3r4hb8qAlHhQAAAFg"]
[Sat Dec 20 00:22:52.545526 2025] [:error] [pid 35626:tid 35693] [client 4.193.193.22:6860] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aUV73BzVxeBEODU8mCBrgwAAAMs"]
[Sat Dec 20 00:22:52.728910 2025] [:error] [pid 35624:tid 35650] [client 4.193.193.22:6932] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aUV73EJMTU3r4hb8qAlHhgAAAFY"]
[Sat Dec 20 00:22:52.910496 2025] [:error] [pid 39268:tid 39328] [client 4.193.193.22:6898] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aUV73OTCMRSRXPuXZF_uUAAAARI"]
[Sat Dec 20 00:22:53.085739 2025] [:error] [pid 35711:tid 35720] [client 4.193.193.22:6973] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aUV73SxTWUmlILwAM_edHAAAAAc"]
[Sat Dec 20 00:22:53.267465 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:6896] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aUV73SxTWUmlILwAM_edHQAAAA8"]
[Sat Dec 20 00:22:53.446797 2025] [:error] [pid 35625:tid 35674] [client 4.193.193.22:6677] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aUV73Y12VmSu4NX34PTKrgAAAJM"]
[Sat Dec 20 00:22:53.633224 2025] [:error] [pid 35626:tid 35705] [client 4.193.193.22:6886] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aUV73RzVxeBEODU8mCBrhAAAANc"]
[Sat Dec 20 00:22:53.806885 2025] [:error] [pid 35711:tid 35735] [client 4.193.193.22:6851] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aUV73SxTWUmlILwAM_edHwAAABY"]
[Sat Dec 20 00:22:53.991365 2025] [:error] [pid 35624:tid 35630] [client 4.193.193.22:6882] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aUV73UJMTU3r4hb8qAlHhwAAAEI"]
[Sat Dec 20 00:22:54.172377 2025] [:error] [pid 35624:tid 35636] [client 4.193.193.22:6905] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aUV73kJMTU3r4hb8qAlHiAAAAEg"]
[Sat Dec 20 00:22:54.347017 2025] [:error] [pid 35624:tid 35643] [client 4.193.193.22:6910] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aUV73kJMTU3r4hb8qAlHigAAAE8"]
[Sat Dec 20 00:22:54.522891 2025] [:error] [pid 35625:tid 35659] [client 4.193.193.22:6691] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUV73o12VmSu4NX34PTKsAAAAIQ"]
[Sat Dec 20 00:22:54.705618 2025] [:error] [pid 35711:tid 35717] [client 4.193.193.22:6804] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUV73ixTWUmlILwAM_edIwAAAAQ"]
[Sat Dec 20 00:22:54.893227 2025] [:error] [pid 35711:tid 35729] [client 4.193.193.22:6658] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUV73ixTWUmlILwAM_edJAAAABA"]
[Sat Dec 20 00:22:55.073967 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:7039] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUV73yxTWUmlILwAM_edJQAAAAg"]
[Sat Dec 20 00:22:55.255120 2025] [:error] [pid 35625:tid 35655] [client 4.193.193.22:6704] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aUV73412VmSu4NX34PTKsgAAAIA"]
[Sat Dec 20 00:22:55.432607 2025] [:error] [pid 35711:tid 35731] [client 4.193.193.22:6964] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aUV73yxTWUmlILwAM_edJwAAABI"]
[Sat Dec 20 00:22:55.614965 2025] [:error] [pid 35711:tid 35737] [client 4.193.193.22:6687] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aUV73yxTWUmlILwAM_edKQAAABg"]
[Sat Dec 20 00:22:55.803489 2025] [:error] [pid 35625:tid 35663] [client 4.193.193.22:6790] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aUV73412VmSu4NX34PTKswAAAIg"]
[Sat Dec 20 00:22:56.005808 2025] [:error] [pid 35625:tid 35665] [client 4.193.193.22:6659] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aUV74I12VmSu4NX34PTKtAAAAIo"]
[Sat Dec 20 00:22:56.192117 2025] [:error] [pid 35711:tid 35713] [client 4.193.193.22:6662] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aUV74CxTWUmlILwAM_edLAAAAAA"]
[Sat Dec 20 00:22:56.439508 2025] [:error] [pid 35626:tid 35699] [client 4.193.193.22:6684] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aUV74BzVxeBEODU8mCBrhgAAANE"]
[Sat Dec 20 00:22:56.617760 2025] [:error] [pid 35624:tid 35632] [client 4.193.193.22:6709] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aUV74EJMTU3r4hb8qAlHjwAAAEQ"]
[Sat Dec 20 00:22:56.800180 2025] [:error] [pid 35624:tid 35641] [client 4.193.193.22:6699] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aUV74EJMTU3r4hb8qAlHkQAAAE0"]
[Sat Dec 20 00:22:56.973530 2025] [:error] [pid 35626:tid 35683] [client 4.193.193.22:6220] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aUV74BzVxeBEODU8mCBrhwAAAME"]
[Sat Dec 20 00:22:57.168029 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:6888] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aUV74UJMTU3r4hb8qAlHkgAAAE4"]
[Sat Dec 20 00:22:57.387079 2025] [:error] [pid 35626:tid 35688] [client 4.193.193.22:6674] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aUV74RzVxeBEODU8mCBriAAAAMY"]
[Sat Dec 20 00:22:57.581228 2025] [:error] [pid 35626:tid 35689] [client 4.193.193.22:6666] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUV74RzVxeBEODU8mCBriQAAAMc"]
[Sat Dec 20 00:22:57.773669 2025] [:error] [pid 35624:tid 35631] [client 4.193.193.22:6969] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUV74UJMTU3r4hb8qAlHkwAAAEM"]
[Sat Dec 20 00:22:57.970457 2025] [:error] [pid 35626:tid 35695] [client 4.193.193.22:6708] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUV74RzVxeBEODU8mCBriwAAAM0"]
[Sat Dec 20 00:22:58.154990 2025] [:error] [pid 35711:tid 35718] [client 4.193.193.22:6908] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aUV74ixTWUmlILwAM_edMgAAAAU"]
[Sat Dec 20 00:22:58.340355 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:7031] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aUV74ixTWUmlILwAM_edNAAAAA8"]
[Sat Dec 20 00:22:58.515901 2025] [:error] [pid 35711:tid 35724] [client 4.193.193.22:6656] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aUV74ixTWUmlILwAM_edNQAAAAs"]
[Sat Dec 20 00:22:58.739650 2025] [:error] [pid 35624:tid 35646] [client 4.193.193.22:6713] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aUV74kJMTU3r4hb8qAlHlQAAAFI"]
[Sat Dec 20 00:22:58.928763 2025] [:error] [pid 39268:tid 39318] [client 4.193.193.22:6906] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aUV74uTCMRSRXPuXZF_uUQAAAQg"]
[Sat Dec 20 00:22:59.145199 2025] [:error] [pid 39268:tid 39334] [client 4.193.193.22:6966] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aUV74-TCMRSRXPuXZF_uUgAAARg"]
[Sat Dec 20 00:22:59.335270 2025] [:error] [pid 35624:tid 35629] [client 4.193.193.22:6686] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aUV740JMTU3r4hb8qAlHmAAAAEE"]
[Sat Dec 20 00:22:59.541210 2025] [:error] [pid 35624:tid 35634] [client 4.193.193.22:6931] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aUV740JMTU3r4hb8qAlHmgAAAEY"]
[Sat Dec 20 00:22:59.718037 2025] [:error] [pid 35625:tid 35676] [client 4.193.193.22:6911] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aUV74412VmSu4NX34PTKtwAAAJU"]
[Sat Dec 20 00:22:59.902416 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:6801] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUV74xzVxeBEODU8mCBrjgAAANA"]
[Sat Dec 20 00:23:00.175529 2025] [:error] [pid 35624:tid 35628] [client 4.193.193.22:6892] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUV75EJMTU3r4hb8qAlHmwAAAEA"]
[Sat Dec 20 00:23:00.378864 2025] [:error] [pid 35625:tid 35671] [client 4.193.193.22:6838] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUV75I12VmSu4NX34PTKugAAAJA"]
[Sat Dec 20 00:23:00.616853 2025] [:error] [pid 35624:tid 35632] [client 4.193.193.22:6626] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUV75EJMTU3r4hb8qAlHnAAAAEQ"]
[Sat Dec 20 00:23:00.813175 2025] [:error] [pid 35711:tid 35729] [client 4.193.193.22:6812] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aUV75CxTWUmlILwAM_edPAAAABA"]
[Sat Dec 20 00:23:00.988149 2025] [:error] [pid 35625:tid 35660] [client 4.193.193.22:6971] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aUV75I12VmSu4NX34PTKuwAAAIU"]
[Sat Dec 20 00:23:01.169291 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:7134] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aUV75UJMTU3r4hb8qAlHngAAAE4"]
[Sat Dec 20 00:23:01.354851 2025] [:error] [pid 35624:tid 35631] [client 4.193.193.22:6940] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aUV75UJMTU3r4hb8qAlHoAAAAEM"]
[Sat Dec 20 00:23:01.569606 2025] [:error] [pid 35624:tid 35652] [client 4.193.193.22:6667] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aUV75UJMTU3r4hb8qAlHogAAAFg"]
[Sat Dec 20 00:23:01.787034 2025] [:error] [pid 39268:tid 39320] [client 4.193.193.22:6680] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aUV75eTCMRSRXPuXZF_uVQAAAQo"]
[Sat Dec 20 00:23:02.011291 2025] [:error] [pid 39268:tid 39325] [client 4.193.193.22:6690] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aUV75uTCMRSRXPuXZF_uVgAAAQ8"]
[Sat Dec 20 00:23:02.215239 2025] [:error] [pid 35625:tid 35662] [client 4.193.193.22:6903] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aUV75o12VmSu4NX34PTKvAAAAIc"]
[Sat Dec 20 00:23:02.414259 2025] [:error] [pid 35624:tid 35638] [client 4.193.193.22:6717] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aUV75kJMTU3r4hb8qAlHpQAAAEo"]
[Sat Dec 20 00:23:02.645019 2025] [:error] [pid 35625:tid 35673] [client 4.193.193.22:6593] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aUV75o12VmSu4NX34PTKvQAAAJI"]
[Sat Dec 20 00:23:02.853012 2025] [:error] [pid 35626:tid 35693] [client 4.193.193.22:6712] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aUV75hzVxeBEODU8mCBrkAAAAMs"]
[Sat Dec 20 00:23:03.062839 2025] [:error] [pid 35625:tid 35678] [client 4.193.193.22:6669] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aUV75412VmSu4NX34PTKvgAAAJc"]
[Sat Dec 20 00:23:03.272671 2025] [:error] [pid 35626:tid 35702] [client 4.193.193.22:6794] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aUV75xzVxeBEODU8mCBrkQAAANQ"]
[Sat Dec 20 00:23:03.500304 2025] [:error] [pid 35626:tid 35703] [client 4.193.193.22:6803] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aUV75xzVxeBEODU8mCBrkgAAANU"]
[Sat Dec 20 00:23:03.735004 2025] [:error] [pid 35626:tid 35694] [client 4.193.193.22:6861] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aUV75xzVxeBEODU8mCBrlAAAAMw"]
[Sat Dec 20 00:23:03.945160 2025] [:error] [pid 35711:tid 35734] [client 4.193.193.22:6894] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aUV75yxTWUmlILwAM_edQwAAABU"]
[Sat Dec 20 00:23:04.170901 2025] [:error] [pid 35626:tid 35695] [client 4.193.193.22:6692] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aUV76BzVxeBEODU8mCBrlwAAAM0"]
[Sat Dec 20 00:23:04.396122 2025] [:error] [pid 35625:tid 35659] [client 4.193.193.22:6791] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aUV76I12VmSu4NX34PTKwAAAAIQ"]
[Sat Dec 20 00:23:04.635629 2025] [:error] [pid 35626:tid 35704] [client 4.193.193.22:6870] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aUV76BzVxeBEODU8mCBrmAAAANY"]
[Sat Dec 20 00:23:04.858936 2025] [:error] [pid 35626:tid 35684] [client 4.193.193.22:6682] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aUV76BzVxeBEODU8mCBrmgAAAMI"]
[Sat Dec 20 00:23:05.045999 2025] [:error] [pid 35711:tid 35718] [client 4.193.193.22:6899] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV76SxTWUmlILwAM_edSQAAAAU"]
[Sat Dec 20 00:23:05.239537 2025] [:error] [pid 35624:tid 35632] [client 4.193.193.22:6909] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV76UJMTU3r4hb8qAlHqQAAAEQ"]
[Sat Dec 20 00:23:05.426777 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:6817] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV76UJMTU3r4hb8qAlHqwAAAE4"]
[Sat Dec 20 00:23:05.614307 2025] [:error] [pid 35711:tid 35728] [client 4.193.193.22:6813] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aUV76SxTWUmlILwAM_edSwAAAA8"]
[Sat Dec 20 00:23:05.878369 2025] [:error] [pid 35711:tid 35724] [client 4.193.193.22:6793] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aUV76SxTWUmlILwAM_edTAAAAAs"]
[Sat Dec 20 00:23:06.082129 2025] [:error] [pid 35711:tid 35725] [client 4.193.193.22:6697] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aUV76ixTWUmlILwAM_edTgAAAAw"]
[Sat Dec 20 00:23:06.290834 2025] [:error] [pid 35626:tid 35698] [client 4.193.193.22:6711] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aUV76hzVxeBEODU8mCBrnAAAANA"]
[Sat Dec 20 00:23:06.486502 2025] [:error] [pid 35711:tid 35717] [client 4.193.193.22:6706] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aUV76ixTWUmlILwAM_edUQAAAAQ"]
[Sat Dec 20 00:23:06.749690 2025] [:error] [pid 35624:tid 35639] [client 4.193.193.22:6785] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aUV76kJMTU3r4hb8qAlHrAAAAEs"]
[Sat Dec 20 00:23:07.050906 2025] [:error] [pid 35626:tid 35701] [client 4.193.193.22:6685] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aUV76xzVxeBEODU8mCBrnQAAANM"]
[Sat Dec 20 00:23:07.279918 2025] [:error] [pid 35626:tid 35691] [client 4.193.193.22:6695] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aUV76xzVxeBEODU8mCBrngAAAMk"]
[Sat Dec 20 00:23:07.488451 2025] [:error] [pid 35625:tid 35669] [client 4.193.193.22:6657] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aUV76412VmSu4NX34PTKwgAAAI4"]
[Sat Dec 20 00:23:07.703871 2025] [:error] [pid 35626:tid 35685] [client 4.193.193.22:6689] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aUV76xzVxeBEODU8mCBrnwAAAMM"]
[Sat Dec 20 00:23:07.895995 2025] [:error] [pid 35626:tid 35682] [client 4.193.193.22:6994] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aUV76xzVxeBEODU8mCBroAAAAMA"]
[Sat Dec 20 00:23:08.077904 2025] [:error] [pid 35711:tid 35734] [client 4.193.193.22:6811] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aUV77CxTWUmlILwAM_edVwAAABU"]
[Sat Dec 20 00:23:08.267159 2025] [:error] [pid 35624:tid 35629] [client 4.193.193.22:6852] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aUV77EJMTU3r4hb8qAlHsQAAAEE"]
[Sat Dec 20 00:23:08.477563 2025] [:error] [pid 35711:tid 35730] [client 4.193.193.22:6683] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aUV77CxTWUmlILwAM_edWwAAABE"]
[Sat Dec 20 00:23:08.738064 2025] [:error] [pid 35624:tid 35630] [client 4.193.193.22:6815] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aUV77EJMTU3r4hb8qAlHsgAAAEI"]
[Sat Dec 20 00:23:08.970454 2025] [:error] [pid 35624:tid 35634] [client 4.193.193.22:6681] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aUV77EJMTU3r4hb8qAlHtAAAAEY"]
[Sat Dec 20 00:23:09.172932 2025] [:error] [pid 35624:tid 35633] [client 4.193.193.22:6889] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aUV77UJMTU3r4hb8qAlHtQAAAEU"]
[Sat Dec 20 00:23:09.351901 2025] [:error] [pid 39268:tid 39332] [client 4.193.193.22:6703] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aUV77eTCMRSRXPuXZF_uXAAAARY"]
[Sat Dec 20 00:23:09.529632 2025] [:error] [pid 39268:tid 39329] [client 4.193.193.22:6702] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aUV77eTCMRSRXPuXZF_uXQAAARM"]
[Sat Dec 20 00:23:09.746436 2025] [:error] [pid 35624:tid 35649] [client 4.193.193.22:6718] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aUV77UJMTU3r4hb8qAlHtwAAAFU"]
[Sat Dec 20 00:23:09.949904 2025] [:error] [pid 35711:tid 35725] [client 4.193.193.22:6670] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aUV77SxTWUmlILwAM_edYgAAAAw"]
[Sat Dec 20 00:23:10.125681 2025] [:error] [pid 39268:tid 39310] [client 4.193.193.22:6663] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aUV77uTCMRSRXPuXZF_uXgAAAQA"]
[Sat Dec 20 00:23:10.358508 2025] [:error] [pid 35711:tid 35724] [client 4.193.193.22:6678] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aUV77ixTWUmlILwAM_edZAAAAAs"]
[Sat Dec 20 00:23:10.574090 2025] [:error] [pid 35624:tid 35639] [client 4.193.193.22:6786] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aUV77kJMTU3r4hb8qAlHugAAAEs"]
[Sat Dec 20 00:23:10.765823 2025] [:error] [pid 35625:tid 35655] [client 4.193.193.22:6825] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aUV77o12VmSu4NX34PTKwwAAAIA"]
[Sat Dec 20 00:23:10.961724 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:6732] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aUV77ixTWUmlILwAM_edZwAAAAg"]
[Sat Dec 20 00:23:11.145199 2025] [:error] [pid 35626:tid 35703] [client 4.193.193.22:6635] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aUV77xzVxeBEODU8mCBrogAAANU"]
[Sat Dec 20 00:23:11.337571 2025] [:error] [pid 35711:tid 35715] [client 4.193.193.22:6693] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aUV77yxTWUmlILwAM_edagAAAAI"]
[Sat Dec 20 00:23:11.556060 2025] [:error] [pid 35711:tid 35719] [client 4.193.193.22:6847] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aUV77yxTWUmlILwAM_edbAAAAAY"]
[Sat Dec 20 00:23:11.739109 2025] [:error] [pid 35711:tid 35723] [client 4.193.193.22:6675] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aUV77yxTWUmlILwAM_edcAAAAAo"]
[Sat Dec 20 00:23:11.955888 2025] [:error] [pid 35625:tid 35663] [client 4.193.193.22:6965] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aUV77412VmSu4NX34PTKxAAAAIg"]
[Sat Dec 20 00:23:12.144436 2025] [:error] [pid 35711:tid 35716] [client 4.193.193.22:6710] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aUV78CxTWUmlILwAM_edcwAAAAM"]
[Sat Dec 20 00:23:12.330347 2025] [:error] [pid 35625:tid 35665] [client 4.193.193.22:6961] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aUV78I12VmSu4NX34PTKxQAAAIo"]
[Sat Dec 20 00:23:12.579599 2025] [:error] [pid 39268:tid 39327] [client 4.193.193.22:6800] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUV78OTCMRSRXPuXZF_uYQAAARE"]
[Sat Dec 20 00:23:12.772310 2025] [:error] [pid 35625:tid 35677] [client 4.193.193.22:6828] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUV78I12VmSu4NX34PTKxgAAAJY"]
[Sat Dec 20 00:23:12.969343 2025] [:error] [pid 39268:tid 39334] [client 4.193.193.22:6884] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUV78OTCMRSRXPuXZF_uYwAAARg"]
[Sat Dec 20 00:23:13.152727 2025] [:error] [pid 35625:tid 35668] [client 4.193.193.22:6832] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUV78Y12VmSu4NX34PTKxwAAAI0"]
[Sat Dec 20 00:23:13.333514 2025] [:error] [pid 35624:tid 35634] [client 4.193.193.22:6823] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aUV78UJMTU3r4hb8qAlHvgAAAEY"]
[Sat Dec 20 00:23:13.525425 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:6963] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aUV78SxTWUmlILwAM_edegAAAAg"]
[Sat Dec 20 00:23:13.721711 2025] [:error] [pid 35625:tid 35664] [client 4.193.193.22:6810] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aUV78Y12VmSu4NX34PTKyAAAAIk"]
[Sat Dec 20 00:23:13.935310 2025] [:error] [pid 35624:tid 35633] [client 4.193.193.22:6799] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aUV78UJMTU3r4hb8qAlHvwAAAEU"]
[Sat Dec 20 00:23:14.123512 2025] [:error] [pid 35625:tid 35676] [client 4.193.193.22:6789] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aUV78o12VmSu4NX34PTKyQAAAJU"]
[Sat Dec 20 00:23:14.296944 2025] [:error] [pid 35625:tid 35671] [client 4.193.193.22:6705] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aUV78o12VmSu4NX34PTKygAAAJA"]
[Sat Dec 20 00:23:14.477651 2025] [:error] [pid 35625:tid 35660] [client 4.193.193.22:6798] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aUV78o12VmSu4NX34PTKywAAAIU"]
[Sat Dec 20 00:23:14.661845 2025] [:error] [pid 39268:tid 39315] [client 4.193.193.22:6829] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aUV78uTCMRSRXPuXZF_uZwAAAQU"]
[Sat Dec 20 00:23:14.855647 2025] [:error] [pid 39268:tid 39313] [client 4.193.193.22:6671] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aUV78uTCMRSRXPuXZF_uaAAAAQM"]
[Sat Dec 20 00:23:15.052538 2025] [:error] [pid 35625:tid 35667] [client 4.193.193.22:6796] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aUV78412VmSu4NX34PTKzAAAAIw"]
[Sat Dec 20 00:23:15.260144 2025] [:error] [pid 35625:tid 35658] [client 4.193.193.22:7008] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aUV78412VmSu4NX34PTKzQAAAIM"]
[Sat Dec 20 00:23:15.476798 2025] [:error] [pid 35625:tid 35657] [client 4.193.193.22:6826] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aUV78412VmSu4NX34PTKzgAAAII"]
[Sat Dec 20 00:23:15.669213 2025] [:error] [pid 35624:tid 35649] [client 4.193.193.22:6902] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aUV780JMTU3r4hb8qAlHwAAAAFU"]
[Sat Dec 20 00:23:15.846744 2025] [:error] [pid 35711:tid 35732] [client 4.193.193.22:6841] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aUV78yxTWUmlILwAM_edhQAAABM"]
[Sat Dec 20 00:23:16.020980 2025] [:error] [pid 35624:tid 35637] [client 4.193.193.22:6707] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aUV79EJMTU3r4hb8qAlHwQAAAEk"]
[Sat Dec 20 00:23:16.203728 2025] [:error] [pid 35624:tid 35642] [client 4.193.193.22:6839] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aUV79EJMTU3r4hb8qAlHwgAAAE4"]
[Sat Dec 20 00:23:16.423285 2025] [:error] [pid 35624:tid 35640] [client 4.193.193.22:6808] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aUV79EJMTU3r4hb8qAlHwwAAAEw"]
[Sat Dec 20 00:23:16.631908 2025] [:error] [pid 35625:tid 35673] [client 4.193.193.22:6822] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aUV79I12VmSu4NX34PTK0AAAAJI"]
[Sat Dec 20 00:23:16.831456 2025] [:error] [pid 35625:tid 35675] [client 4.193.193.22:6631] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aUV79I12VmSu4NX34PTK0gAAAJQ"]
[Sat Dec 20 00:23:17.049835 2025] [:error] [pid 35626:tid 35703] [client 4.193.193.22:6797] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aUV79RzVxeBEODU8mCBrtAAAANU"]
[Sat Dec 20 00:23:17.261425 2025] [:error] [pid 39268:tid 39321] [client 4.193.193.22:6726] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aUV79eTCMRSRXPuXZF_uawAAAQs"]
[Sat Dec 20 00:23:17.449035 2025] [:error] [pid 35626:tid 35694] [client 4.193.193.22:6594] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aUV79RzVxeBEODU8mCBrtQAAAMw"]
[Sat Dec 20 00:23:17.635075 2025] [:error] [pid 39268:tid 39331] [client 4.193.193.22:6660] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aUV79eTCMRSRXPuXZF_ubAAAARU"]
[Sat Dec 20 00:23:17.842821 2025] [:error] [pid 35711:tid 35721] [client 4.193.193.22:6715] [client 4.193.193.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aUV79SxTWUmlILwAM_ediwAAAAg"]
[Sat Dec 20 07:40:32.384973 2025] [:error] [pid 14247:tid 14266] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 20 07:40:32.695159 2025] [:error] [pid 14247:tid 14254] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Dec 20 07:40:33.017658 2025] [:error] [pid 14247:tid 14255] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Dec 20 07:40:33.352723 2025] [:error] [pid 14247:tid 14257] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Dec 20 07:40:33.669931 2025] [:error] [pid 14247:tid 14265] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Dec 20 07:40:33.968414 2025] [:error] [pid 14247:tid 14256] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 07:40:34.273594 2025] [:error] [pid 14247:tid 14258] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 07:40:34.563569 2025] [:error] [pid 14247:tid 14264] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Dec 20 07:40:35.147177 2025] [:error] [pid 14247:tid 14265] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Dec 20 07:40:35.764099 2025] [:error] [pid 14247:tid 14263] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Dec 20 07:40:36.062427 2025] [:error] [pid 14247:tid 14265] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Dec 20 07:40:36.350410 2025] [:error] [pid 14247:tid 14249] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Dec 20 07:40:36.652201 2025] [:error] [pid 14247:tid 14250] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Dec 20 07:40:36.961237 2025] [:error] [pid 14247:tid 14251] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Dec 20 07:40:37.282564 2025] [:error] [pid 14247:tid 14256] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Dec 20 07:40:37.583897 2025] [:error] [pid 14247:tid 14257] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Dec 20 07:40:37.925288 2025] [:error] [pid 14247:tid 14265] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Dec 20 07:40:43.756008 2025] [:error] [pid 14247:tid 14265] [client 45.86.202.67:32505] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Dec 20 07:40:56.159731 2025] [:error] [pid 39493:tid 39557] [client 45.86.202.221:60905] [client 45.86.202.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUXiiGhjL2VG_FmIHqAq2QAAAIg"]
[Sat Dec 20 07:40:58.733656 2025] [:error] [pid 39577:tid 39586] [client 45.86.202.90:49313] [client 45.86.202.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUXiirviRnt1rJiSOfyjfwAAAMc"]
[Sat Dec 20 07:41:00.210870 2025] [:error] [pid 39492:tid 39522] [client 45.86.202.88:33963] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 07:41:01.296643 2025] [:error] [pid 39492:tid 39532] [client 45.86.202.88:33963] [client 45.86.202.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUXijYs_ZYP1UQNM9ha3dAAAAEo"]
[Sat Dec 20 07:41:02.448157 2025] [:error] [pid 39493:tid 39573] [client 45.86.202.54:63807] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Dec 20 07:41:02.734432 2025] [:error] [pid 39493:tid 39550] [client 45.86.202.54:63807] [client 45.86.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUXijmhjL2VG_FmIHqArGAAAAIE"]
[Sat Dec 20 07:41:03.642883 2025] [:error] [pid 39493:tid 39566] [client 45.86.202.82:37303] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Dec 20 07:41:05.149529 2025] [:error] [pid 39493:tid 39551] [client 45.86.202.82:37303] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUXikWhjL2VG_FmIHqArLgAAAII"]
[Sat Dec 20 07:41:07.058457 2025] [:error] [pid 39493:tid 39570] [client 45.86.202.76:64007] [client 45.86.202.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUXik2hjL2VG_FmIHqArQAAAAJU"]
[Sat Dec 20 07:41:07.666148 2025] [:error] [pid 39492:tid 39542] [client 45.86.202.64:36065] [client 45.86.202.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUXik4s_ZYP1UQNM9ha4BQAAAFQ"]
[Sat Dec 20 07:41:08.247943 2025] [:error] [pid 39493:tid 39562] [client 45.86.202.75:42393] [client 45.86.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUXilGhjL2VG_FmIHqArUAAAAI0"]
[Sat Dec 20 07:41:08.858682 2025] [:error] [pid 39577:tid 39579] [client 45.86.202.220:55167] [client 45.86.202.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUXilLviRnt1rJiSOfyjzAAAAMA"]
[Sat Dec 20 07:41:09.493805 2025] [:error] [pid 18807:tid 18827] [client 45.86.202.94:48899] [client 45.86.202.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUXilWRP9n5OCTllYeUSYQAAAZI"]
[Sat Dec 20 07:41:10.369340 2025] [:error] [pid 39491:tid 39518] [client 45.86.202.72:32323] [client 45.86.202.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUXilltw2ggYvDxu2EDg-gAAABc"]
[Sat Dec 20 07:41:10.934676 2025] [:error] [pid 39492:tid 39537] [client 45.86.202.82:31415] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Dec 20 07:41:11.509623 2025] [:error] [pid 39492:tid 39522] [client 45.86.202.82:31415] [client 45.86.202.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aUXil4s_ZYP1UQNM9ha4SgAAAEA"]
[Sat Dec 20 07:41:12.652215 2025] [:error] [pid 39577:tid 39599] [client 45.86.202.91:26829] [client 45.86.202.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUXimLviRnt1rJiSOfyj6gAAANQ"]
[Sat Dec 20 07:41:13.554755 2025] [:error] [pid 39493:tid 39568] [client 45.86.202.54:50865] [client 45.86.202.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUXimWhjL2VG_FmIHqArgQAAAJM"]
[Sat Dec 20 07:41:14.151466 2025] [:error] [pid 39491:tid 39508] [client 45.86.202.75:34217] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Dec 20 07:41:14.440085 2025] [:error] [pid 39491:tid 39500] [client 45.86.202.75:34217] [client 45.86.202.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUXimltw2ggYvDxu2EDhSQAAAAU"]
[Sat Dec 20 07:41:15.018710 2025] [:error] [pid 39577:tid 39594] [client 45.86.202.57:31675] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Dec 20 07:41:15.926657 2025] [:error] [pid 39577:tid 39594] [client 45.86.202.57:31675] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Dec 20 07:41:16.822458 2025] [:error] [pid 39577:tid 39581] [client 45.86.202.57:31675] [client 45.86.202.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUXinLviRnt1rJiSOfykEgAAAMI"]
[Sat Dec 20 07:41:17.389932 2025] [:error] [pid 39492:tid 39529] [client 45.86.202.100:54383] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Dec 20 07:41:17.669365 2025] [:error] [pid 39492:tid 39542] [client 45.86.202.100:54383] [client 45.86.202.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUXinYs_ZYP1UQNM9ha4tQAAAFQ"]
[Sat Dec 20 07:41:18.283826 2025] [:error] [pid 39577:tid 39600] [client 45.86.202.89:55471] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Dec 20 07:41:18.870853 2025] [:error] [pid 39577:tid 39589] [client 45.86.202.89:55471] [client 45.86.202.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUXinrviRnt1rJiSOfykJAAAAMo"]
[Sat Dec 20 07:41:19.700561 2025] [:error] [pid 39492:tid 39527] [client 45.86.202.67:60189] [client 45.86.202.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUXin4s_ZYP1UQNM9ha4zwAAAEU"]
[Sat Dec 20 07:41:20.600642 2025] [:error] [pid 18807:tid 18811] [client 45.86.202.65:28085] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Dec 20 07:41:20.893422 2025] [:error] [pid 18807:tid 18814] [client 45.86.202.65:28085] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Dec 20 07:41:21.505754 2025] [:error] [pid 18807:tid 18821] [client 45.86.202.65:28085] [client 45.86.202.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUXioWRP9n5OCTllYeUTUwAAAYw"]
[Sat Dec 20 07:41:22.448091 2025] [:error] [pid 14286:tid 14306] [client 45.86.202.81:32329] [client 45.86.202.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUXiop7rbXIrw6rGSdbLGwAAAVA"]
[Sat Dec 20 07:41:23.350211 2025] [:error] [pid 39492:tid 39545] [client 45.86.202.78:20797] [client 45.86.202.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUXio4s_ZYP1UQNM9ha5BAAAAFc"]
[Sat Dec 20 07:41:23.955479 2025] [:error] [pid 18807:tid 18833] [client 45.86.202.56:40259] [client 45.86.202.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUXio2RP9n5OCTllYeUTjgAAAZg"]
[Sat Dec 20 07:41:24.553418 2025] [:error] [pid 14286:tid 14309] [client 45.86.202.98:50979] [client 45.86.202.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUXipJ7rbXIrw6rGSdbLPQAAAVM"]
[Sat Dec 20 07:41:25.777910 2025] [:error] [pid 14247:tid 14265] [client 45.86.202.74:51861] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Dec 20 07:41:26.071108 2025] [:error] [pid 14247:tid 14263] [client 45.86.202.74:51861] [client 45.86.202.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUXipiDv9TtKKdJQn9ltdAAAAQ4"]
[Sat Dec 20 07:41:26.660910 2025] [:error] [pid 39577:tid 39596] [client 45.86.202.87:41043] [client 45.86.202.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUXiprviRnt1rJiSOfykaQAAANE"]
[Sat Dec 20 07:41:27.278229 2025] [:error] [pid 39492:tid 39546] [client 45.86.202.84:35015] [client 45.86.202.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUXip4s_ZYP1UQNM9ha5OAAAAFg"]
[Sat Dec 20 07:41:29.466361 2025] [:error] [pid 39492:tid 39546] [client 45.86.202.51:65059] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Dec 20 07:41:30.048111 2025] [:error] [pid 39492:tid 39543] [client 45.86.202.51:65059] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Dec 20 07:41:31.264237 2025] [:error] [pid 39492:tid 39525] [client 45.86.202.51:65059] [client 45.86.202.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUXiq4s_ZYP1UQNM9ha5bgAAAEM"]
[Sat Dec 20 07:42:13.256004 2025] [:error] [pid 39577:tid 39587] [client 45.86.202.75:62613] [client 45.86.202.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aUXi1bviRnt1rJiSOfyoKgAAAMg"]
[Sat Dec 20 09:11:35.488104 2025] [:error] [pid 18807:tid 18818] [client 43.166.136.24:56018] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUX3x2RP9n5OCTllYeVH6AAAAYk"]
[Sat Dec 20 10:05:47.160053 2025] [:error] [pid 14286:tid 14304] [client 124.156.226.179:38434] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUYEe57rbXIrw6rGSdb67QAAAU4"]
[Sat Dec 20 11:38:25.038990 2025] [:error] [pid 14247:tid 14257] [client 49.51.183.75:46578] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUYaMSDv9TtKKdJQn9mtjAAAAQg"]
[Sat Dec 20 20:44:59.419236 2025] [:error] [pid 33687:tid 33694] [client 170.106.147.63:56000] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUaaSzYMR4qK1N4g7vjCIQAAAkQ"]
[Sat Dec 20 21:42:12.895831 2025] [:error] [pid 39493:tid 39569] [client 85.203.34.4:32029] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Dec 20 21:42:13.516541 2025] [:error] [pid 39493:tid 39549] [client 85.203.34.4:32029] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Dec 20 21:42:13.843406 2025] [:error] [pid 39493:tid 39566] [client 85.203.34.4:32029] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUantWhjL2VG_FmIHqD5pAAAAJE"]
[Sat Dec 20 21:42:15.507773 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.28:44373] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Dec 20 21:42:15.802387 2025] [:error] [pid 39577:tid 39596] [client 85.203.34.28:44373] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aUant7viRnt1rJiSOfxhnAAAANE"]
[Sat Dec 20 21:42:16.389935 2025] [:error] [pid 33570:tid 33586] [client 85.203.34.19:57445] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Dec 20 21:42:16.984758 2025] [:error] [pid 33570:tid 33589] [client 85.203.34.19:57445] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Dec 20 21:42:17.292460 2025] [:error] [pid 33570:tid 33584] [client 85.203.34.19:57445] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 21:42:17.598610 2025] [:error] [pid 33570:tid 33599] [client 85.203.34.19:57445] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Dec 20 21:42:18.221428 2025] [:error] [pid 33570:tid 33579] [client 85.203.34.19:57445] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aUanuoTNveA-c6YcSrIMAwAAAcM"]
[Sat Dec 20 21:42:18.823849 2025] [:error] [pid 33687:tid 33705] [client 85.203.34.43:39281] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Dec 20 21:42:19.122385 2025] [:error] [pid 33687:tid 33693] [client 85.203.34.43:39281] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Dec 20 21:42:19.411238 2025] [:error] [pid 33687:tid 33696] [client 85.203.34.43:39281] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aUanuzYMR4qK1N4g7vjMNAAAAkY"]
[Sat Dec 20 21:42:20.007712 2025] [:error] [pid 33793:tid 33818] [client 85.203.34.33:41687] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aUanvFSicyB0BFmbRMzQlwAAAtc"]
[Sat Dec 20 21:42:20.640069 2025] [:error] [pid 14247:tid 14273] [client 85.203.34.6:62345] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aUanvCDv9TtKKdJQn9kSlAAAARg"]
[Sat Dec 20 21:42:22.518970 2025] [:error] [pid 33844:tid 33864] [client 85.203.34.11:38641] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aUanviaNtwGsyqqVmQH0SQAAAxI"]
[Sat Dec 20 21:42:23.471403 2025] [:error] [pid 39493:tid 39560] [client 85.203.34.49:23867] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aUanv2hjL2VG_FmIHqD55gAAAIs"]
[Sat Dec 20 21:42:24.625624 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.9:29519] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Dec 20 21:42:25.550328 2025] [:error] [pid 62124:tid 62132] [client 85.203.34.9:29519] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Dec 20 21:42:25.860657 2025] [:error] [pid 62124:tid 62138] [client 85.203.34.9:29519] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aUanwVs94zPA9ULQOjl8SAAAAAw"]
[Sat Dec 20 21:42:26.438599 2025] [:error] [pid 33793:tid 33814] [client 85.203.34.47:29833] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aUanwlSicyB0BFmbRMzQrwAAAtM"]
[Sat Dec 20 21:42:27.374819 2025] [:error] [pid 62124:tid 62140] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Dec 20 21:42:27.674044 2025] [:error] [pid 62124:tid 62144] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Sat Dec 20 21:42:27.977810 2025] [:error] [pid 62124:tid 62126] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Dec 20 21:42:28.289345 2025] [:error] [pid 62124:tid 62149] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Dec 20 21:42:28.815081 2025] [:error] [pid 62124:tid 62141] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Dec 20 21:42:29.135724 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sat Dec 20 21:42:29.442271 2025] [:error] [pid 62124:tid 62145] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Sat Dec 20 21:42:29.753660 2025] [:error] [pid 62124:tid 62148] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Dec 20 21:42:30.059798 2025] [:error] [pid 62124:tid 62143] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Sat Dec 20 21:42:30.371003 2025] [:error] [pid 62124:tid 62128] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Dec 20 21:42:30.668537 2025] [:error] [pid 62124:tid 62147] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Sat Dec 20 21:42:30.975610 2025] [:error] [pid 62124:tid 62133] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Dec 20 21:42:31.298272 2025] [:error] [pid 62124:tid 62127] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Dec 20 21:42:31.609266 2025] [:error] [pid 62124:tid 62129] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Sat Dec 20 21:42:32.139291 2025] [:error] [pid 62124:tid 62147] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Sat Dec 20 21:42:32.420165 2025] [:error] [pid 62124:tid 62135] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Dec 20 21:42:32.727625 2025] [:error] [pid 62124:tid 62150] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sat Dec 20 21:42:33.031405 2025] [:error] [pid 62124:tid 62142] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Dec 20 21:42:33.313501 2025] [:error] [pid 62124:tid 62147] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Sat Dec 20 21:42:33.612984 2025] [:error] [pid 62124:tid 62145] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Dec 20 21:42:33.918907 2025] [:error] [pid 62124:tid 62139] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Sat Dec 20 21:42:34.212741 2025] [:error] [pid 62124:tid 62149] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Dec 20 21:42:34.750429 2025] [:error] [pid 62124:tid 62129] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Dec 20 21:42:35.055492 2025] [:error] [pid 62124:tid 62138] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Dec 20 21:42:35.354991 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Dec 20 21:42:35.648377 2025] [:error] [pid 62124:tid 62126] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Dec 20 21:42:35.952739 2025] [:error] [pid 62124:tid 62140] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Dec 20 21:42:36.237258 2025] [:error] [pid 62124:tid 62129] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Sat Dec 20 21:42:36.559904 2025] [:error] [pid 62124:tid 62142] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Sat Dec 20 21:42:36.852349 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Dec 20 21:42:37.363735 2025] [:error] [pid 62124:tid 62140] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Sat Dec 20 21:42:37.683323 2025] [:error] [pid 62124:tid 62143] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Sat Dec 20 21:42:37.999940 2025] [:error] [pid 62124:tid 62138] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Dec 20 21:42:38.534336 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.26:40503] [client 85.203.34.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.26, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aUanzls94zPA9ULQOjl87QAAAAo"]
[Sat Dec 20 21:42:38.538177 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Dec 20 21:42:39.383647 2025] [:error] [pid 62124:tid 62133] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Dec 20 21:42:39.928083 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.26:40503] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Dec 20 21:42:40.247561 2025] [:error] [pid 62124:tid 62137] [client 85.203.34.26:40503] [client 85.203.34.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aUan0Fs94zPA9ULQOjl9CAAAAAs"]
[Sat Dec 20 21:42:40.823161 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Sat Dec 20 21:42:41.125381 2025] [:error] [pid 33749:tid 33766] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Dec 20 21:42:41.760468 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Sat Dec 20 21:42:42.063383 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Sat Dec 20 21:42:42.600945 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Sat Dec 20 21:42:42.910350 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Sat Dec 20 21:42:43.198065 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Sat Dec 20 21:42:43.518783 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Sat Dec 20 21:42:43.803201 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.20:24797] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Sat Dec 20 21:42:44.624704 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.20:24797] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aUan1NoInXJnb96wei9aaQAAAos"]
[Sat Dec 20 21:42:45.235405 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Sat Dec 20 21:42:45.555790 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Sat Dec 20 21:42:47.518231 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Dec 20 21:42:47.860674 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Sat Dec 20 21:42:48.381133 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Sat Dec 20 21:42:49.525901 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Sat Dec 20 21:42:49.830428 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Sat Dec 20 21:42:50.736036 2025] [:error] [pid 33749:tid 33775] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Sat Dec 20 21:42:51.051262 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Sat Dec 20 21:42:51.358661 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Sat Dec 20 21:42:51.670693 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Sat Dec 20 21:42:51.979205 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Sat Dec 20 21:42:52.274837 2025] [:error] [pid 33749:tid 33768] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Sat Dec 20 21:42:52.615487 2025] [:error] [pid 33749:tid 33772] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Sat Dec 20 21:42:53.232983 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Sat Dec 20 21:42:53.544074 2025] [:error] [pid 33749:tid 33768] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Sat Dec 20 21:42:54.148513 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Sat Dec 20 21:42:54.680943 2025] [:error] [pid 33749:tid 33775] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Sat Dec 20 21:42:54.970246 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Sat Dec 20 21:42:55.280197 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat Dec 20 21:42:55.567036 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.23:46201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Sat Dec 20 21:42:55.859093 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.23:46201] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aUan39oInXJnb96wei9a9AAAAoo"]
[Sat Dec 20 21:42:57.229331 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Sat Dec 20 21:42:57.516963 2025] [:error] [pid 39577:tid 39587] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Sat Dec 20 21:42:57.808056 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Sat Dec 20 21:42:58.105137 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Sat Dec 20 21:42:58.384500 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Sat Dec 20 21:42:58.690414 2025] [:error] [pid 39577:tid 39596] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Dec 20 21:42:58.986051 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Sat Dec 20 21:42:59.296801 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Sat Dec 20 21:42:59.582662 2025] [:error] [pid 39577:tid 39599] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Sat Dec 20 21:42:59.874153 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Sat Dec 20 21:43:00.177177 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Dec 20 21:43:00.473129 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Sat Dec 20 21:43:00.856521 2025] [:error] [pid 39577:tid 39599] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Sat Dec 20 21:43:01.161612 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Sat Dec 20 21:43:01.458452 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Sat Dec 20 21:43:01.766379 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Sat Dec 20 21:43:02.111609 2025] [:error] [pid 39577:tid 39599] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Sat Dec 20 21:43:02.408968 2025] [:error] [pid 39577:tid 39592] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Sat Dec 20 21:43:02.925999 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Sat Dec 20 21:43:03.233021 2025] [:error] [pid 39577:tid 39589] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Sat Dec 20 21:43:03.521081 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Sat Dec 20 21:43:03.822534 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Dec 20 21:43:04.130951 2025] [:error] [pid 39577:tid 39592] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Sat Dec 20 21:43:04.402428 2025] [:error] [pid 39577:tid 39595] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Sat Dec 20 21:43:04.692689 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Sat Dec 20 21:43:05.015443 2025] [:error] [pid 39577:tid 39603] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Dec 20 21:43:05.320812 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Sat Dec 20 21:43:05.602817 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Dec 20 21:43:05.916697 2025] [:error] [pid 39577:tid 39590] [client 85.203.34.46:64857] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Sat Dec 20 21:43:13.987804 2025] [:error] [pid 39577:tid 39592] [client 85.203.34.46:64857] [client 85.203.34.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/css-ready-sel/file.php"] [unique_id "aUan8bviRnt1rJiSOfxkdwAAAM0"]
[Sat Dec 20 21:43:17.401909 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.32:57377] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aUan9doInXJnb96wei9cKgAAAog"]
[Sat Dec 20 21:43:18.299065 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Sat Dec 20 21:43:21.183060 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Sat Dec 20 21:43:21.482512 2025] [:error] [pid 33749:tid 33761] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Sat Dec 20 21:43:21.800613 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Sat Dec 20 21:43:23.186664 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Sat Dec 20 21:43:25.235322 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Sat Dec 20 21:43:25.541603 2025] [:error] [pid 33749:tid 33768] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Dec 20 21:43:25.859156 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Dec 20 21:43:26.181466 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Dec 20 21:43:26.503173 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Dec 20 21:43:26.800284 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.44:49185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Sat Dec 20 21:43:27.674272 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.44:49185] [client 85.203.34.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUan_9oInXJnb96wei9cmwAAAoU"]
[Sat Dec 20 21:43:28.257460 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.48:60789] [client 85.203.34.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.203.34.48, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUaoANoInXJnb96wei9cowAAApA"]
[Sat Dec 20 21:43:28.262285 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.48:60789] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Dec 20 21:43:28.554658 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.48:60789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Dec 20 21:43:29.147477 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.48:60789] [client 85.203.34.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUaoAdoInXJnb96wei9crAAAApM"]
[Sat Dec 20 21:43:29.995508 2025] [:error] [pid 39577:tid 39588] [client 85.203.34.33:42849] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Sat Dec 20 21:43:31.737941 2025] [:error] [pid 39577:tid 39581] [client 85.203.34.33:42849] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Dec 20 21:43:32.370722 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.33:42849] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat Dec 20 21:43:32.668351 2025] [:error] [pid 39577:tid 39581] [client 85.203.34.33:42849] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUaoBLviRnt1rJiSOfxldAAAAMI"]
[Sat Dec 20 21:43:33.239443 2025] [:error] [pid 33844:tid 33857] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Sat Dec 20 21:43:33.541694 2025] [:error] [pid 33844:tid 33869] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Sat Dec 20 21:43:34.054471 2025] [:error] [pid 33844:tid 33864] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sat Dec 20 21:43:35.488294 2025] [:error] [pid 33844:tid 33847] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Sat Dec 20 21:43:35.793211 2025] [:error] [pid 33844:tid 33846] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 21:43:36.089681 2025] [:error] [pid 33844:tid 33852] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Dec 20 21:43:36.423686 2025] [:error] [pid 33844:tid 33856] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Sat Dec 20 21:43:37.659471 2025] [:error] [pid 33844:tid 33861] [client 185.92.25.139:24235] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sat Dec 20 21:43:38.287380 2025] [:error] [pid 33844:tid 33864] [client 185.92.25.139:24235] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUaoCiaNtwGsyqqVmQH37wAAAxI"]
[Sat Dec 20 21:43:38.916932 2025] [:error] [pid 62124:tid 62139] [client 85.203.34.6:29755] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUaoCls94zPA9ULQOjl_PAAAAA0"]
[Sat Dec 20 21:43:39.469422 2025] [:error] [pid 33687:tid 33695] [client 85.203.34.46:23571] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aUaoCzYMR4qK1N4g7vjObwAAAkU"]
[Sat Dec 20 21:43:40.323428 2025] [:error] [pid 14247:tid 14272] [client 85.203.34.33:52741] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aUaoDCDv9TtKKdJQn9kVCQAAARc"]
[Sat Dec 20 21:43:40.947988 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.49:35969] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Sat Dec 20 21:43:41.241895 2025] [:error] [pid 39577:tid 39593] [client 85.203.34.49:35969] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Sat Dec 20 21:43:41.833362 2025] [:error] [pid 39577:tid 39592] [client 85.203.34.49:35969] [client 85.203.34.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.49, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aUaoDbviRnt1rJiSOfxl8gAAAM0"]
[Sat Dec 20 21:43:43.906124 2025] [:error] [pid 39577:tid 39592] [client 85.203.34.49:35969] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Dec 20 21:43:44.537049 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.49:35969] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Dec 20 21:43:46.424111 2025] [:error] [pid 39577:tid 39588] [client 85.203.34.49:35969] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aUaoErviRnt1rJiSOfxmJAAAAMk"]
[Sat Dec 20 21:43:47.039065 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.25:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Dec 20 21:43:47.959613 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.25:61491] [client 85.203.34.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.25, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aUaoE9oInXJnb96wei9dfQAAApA"]
[Sat Dec 20 21:43:48.262357 2025] [:error] [pid 33749:tid 33771] [client 85.203.34.25:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Sat Dec 20 21:43:48.873024 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.25:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sat Dec 20 21:43:49.176180 2025] [:error] [pid 33749:tid 33756] [client 85.203.34.25:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Sat Dec 20 21:43:49.791412 2025] [:error] [pid 33749:tid 33760] [client 85.203.34.25:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Dec 20 21:43:50.092272 2025] [:error] [pid 33749:tid 33769] [client 85.203.34.25:61491] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Dec 20 21:43:50.417161 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.25:61491] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aUaoFtoInXJnb96wei9dtAAAApA"]
[Sat Dec 20 21:43:51.015690 2025] [:error] [pid 33687:tid 33709] [client 85.203.34.3:35471] [client 85.203.34.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aUaoFzYMR4qK1N4g7vjO_gAAAlM"]
[Sat Dec 20 21:43:51.632205 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Sat Dec 20 21:43:51.942591 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sat Dec 20 21:43:52.248122 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Dec 20 21:43:52.549589 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Dec 20 21:43:53.165452 2025] [:error] [pid 14286:tid 14298] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Sat Dec 20 21:43:54.466658 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/zmFM.php
[Sat Dec 20 21:43:57.544871 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Sat Dec 20 21:43:57.870516 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Dec 20 21:43:58.181606 2025] [:error] [pid 14286:tid 14299] [client 85.203.34.33:24859] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sat Dec 20 21:43:58.797630 2025] [:error] [pid 14286:tid 14300] [client 85.203.34.33:24859] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUaoHp7rbXIrw6rGSdaEHgAAAUo"]
[Sat Dec 20 21:44:00.904890 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.5:56289] [client 85.203.34.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aUaoILviRnt1rJiSOfxmxAAAAMc"]
[Sat Dec 20 21:44:01.535427 2025] [:error] [pid 33687:tid 33700] [client 85.203.34.35:26841] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Dec 20 21:44:01.859686 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.35:26841] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUaoITYMR4qK1N4g7vjPjAAAAkQ"]
[Sat Dec 20 21:44:03.437881 2025] [:error] [pid 33844:tid 33862] [client 85.203.34.49:42089] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Sat Dec 20 21:44:04.072247 2025] [:error] [pid 33844:tid 33860] [client 85.203.34.49:42089] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Dec 20 21:44:04.382029 2025] [:error] [pid 33844:tid 33866] [client 85.203.34.49:42089] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aUaoJCaNtwGsyqqVmQH4jgAAAxQ"]
[Sat Dec 20 21:44:04.995610 2025] [:error] [pid 39493:tid 39558] [client 85.203.34.36:62321] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUaoJGhjL2VG_FmIHqD-CwAAAIk"]
[Sat Dec 20 21:44:05.574912 2025] [:error] [pid 33749:tid 33766] [client 185.92.25.139:47671] [client 185.92.25.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.139, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aUaoJdoInXJnb96wei9eoAAAAo8"]
[Sat Dec 20 21:44:05.882172 2025] [:error] [pid 33749:tid 33774] [client 185.92.25.139:47671] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Dec 20 21:44:06.739710 2025] [:error] [pid 33749:tid 33769] [client 185.92.25.139:47671] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aUaoJtoInXJnb96wei9evQAAApI"]
[Sat Dec 20 21:44:07.335325 2025] [:error] [pid 33844:tid 33860] [client 85.203.34.37:32219] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 21:44:07.987633 2025] [:error] [pid 33844:tid 33847] [client 85.203.34.37:32219] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Sat Dec 20 21:44:09.883382 2025] [:error] [pid 33844:tid 33857] [client 85.203.34.37:32219] [client 85.203.34.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aUaoKSaNtwGsyqqVmQH4uAAAAws"]
[Sat Dec 20 21:44:10.464460 2025] [:error] [pid 33844:tid 33851] [client 85.203.34.18:56839] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Dec 20 21:44:11.307289 2025] [:error] [pid 33844:tid 33870] [client 85.203.34.18:56839] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aUaoKyaNtwGsyqqVmQH4zwAAAxg"]
[Sat Dec 20 21:44:12.259991 2025] [:error] [pid 14247:tid 14263] [client 85.203.34.29:45967] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Sat Dec 20 21:44:12.567150 2025] [:error] [pid 14247:tid 14250] [client 85.203.34.29:45967] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aUaoLCDv9TtKKdJQn9kV1gAAAQE"]
[Sat Dec 20 21:44:13.917515 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.36:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Sat Dec 20 21:44:14.221469 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.36:43351] [client 85.203.34.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.36, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aUaoLrviRnt1rJiSOfxnTQAAAMw"]
[Sat Dec 20 21:44:15.132453 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.36:43351] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aUaoL7viRnt1rJiSOfxnWgAAAMU"]
[Sat Dec 20 21:44:15.960567 2025] [:error] [pid 14247:tid 14273] [client 85.203.34.18:29949] [client 85.203.34.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUaoLyDv9TtKKdJQn9kV6QAAARg"]
[Sat Dec 20 21:44:17.740472 2025] [:error] [pid 33844:tid 33869] [client 85.203.34.2:38219] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sat Dec 20 21:44:18.643909 2025] [:error] [pid 33844:tid 33857] [client 85.203.34.2:38219] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Dec 20 21:44:25.769564 2025] [:error] [pid 33844:tid 33865] [client 85.203.34.2:38219] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Dec 20 21:44:26.083096 2025] [:error] [pid 33844:tid 33860] [client 85.203.34.2:38219] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Sat Dec 20 21:44:26.734560 2025] [:error] [pid 33844:tid 33847] [client 85.203.34.2:38219] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aUaoOiaNtwGsyqqVmQH5gwAAAwE"]
[Sat Dec 20 21:44:27.898264 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.6:53713] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUaoO1SicyB0BFmbRMzU5wAAAsY"]
[Sat Dec 20 21:44:28.499470 2025] [:error] [pid 14247:tid 14267] [client 85.203.34.29:39793] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aUaoPCDv9TtKKdJQn9kWYgAAARI"]
[Sat Dec 20 21:44:29.109204 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.35:29951] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aUaoPdoInXJnb96wei9gGwAAAos"]
[Sat Dec 20 21:44:29.718045 2025] [:error] [pid 33687:tid 33705] [client 85.203.34.43:58211] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aUaoPTYMR4qK1N4g7vjRLAAAAk8"]
[Sat Dec 20 21:44:31.774950 2025] [:error] [pid 39493:tid 39549] [client 85.203.34.11:45895] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Sat Dec 20 21:44:32.088505 2025] [:error] [pid 39493:tid 39558] [client 85.203.34.11:45895] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aUaoQGhjL2VG_FmIHqD-2QAAAIk"]
[Sat Dec 20 21:44:32.967037 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.25:34077] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Dec 20 21:44:33.273182 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.25:34077] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Sat Dec 20 21:44:33.579610 2025] [:error] [pid 39577:tid 39602] [client 85.203.34.25:34077] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUaoQbviRnt1rJiSOfxodwAAANc"]
[Sat Dec 20 21:44:34.171136 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.34:27369] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Dec 20 21:44:34.492030 2025] [:error] [pid 39577:tid 39587] [client 85.203.34.34:27369] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sat Dec 20 21:44:34.811355 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.34:27369] [client 85.203.34.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUaoQrviRnt1rJiSOfxohgAAAMU"]
[Sat Dec 20 21:44:36.480677 2025] [:error] [pid 39493:tid 39556] [client 185.92.25.139:30449] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Sat Dec 20 21:44:37.798387 2025] [:error] [pid 39493:tid 39555] [client 185.92.25.139:30449] [client 185.92.25.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aUaoRWhjL2VG_FmIHqD_BwAAAIY"]
[Sat Dec 20 21:44:39.330226 2025] [:error] [pid 14286:tid 14293] [client 85.203.34.50:38307] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aUaoR57rbXIrw6rGSdaF-QAAAUM"]
[Sat Dec 20 21:44:40.168178 2025] [:error] [pid 33687:tid 33707] [client 85.203.34.49:31991] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aUaoSDYMR4qK1N4g7vjRngAAAlE"]
[Sat Dec 20 21:44:41.044022 2025] [:error] [pid 33793:tid 33799] [client 85.203.34.8:55171] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aUaoSVSicyB0BFmbRMzVeAAAAsQ"]
[Sat Dec 20 21:44:42.655174 2025] [:error] [pid 33844:tid 33861] [client 85.203.34.49:22067] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 21:44:43.287305 2025] [:error] [pid 33844:tid 33858] [client 85.203.34.49:22067] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sat Dec 20 21:44:43.595454 2025] [:error] [pid 33844:tid 33865] [client 85.203.34.49:22067] [client 85.203.34.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.49, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aUaoSyaNtwGsyqqVmQH6FgAAAxM"]
[Sat Dec 20 21:44:44.225461 2025] [:error] [pid 33844:tid 33863] [client 85.203.34.49:22067] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aUaoTCaNtwGsyqqVmQH6HwAAAxE"]
[Sat Dec 20 21:44:46.171367 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.21:58875] [client 85.203.34.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aUaoTrviRnt1rJiSOfxpIwAAANU"]
[Sat Dec 20 21:44:46.768884 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.15:62719] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Dec 20 21:44:47.065152 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.15:62719] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Dec 20 21:44:48.326760 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.15:62719] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Sat Dec 20 21:44:49.222929 2025] [:error] [pid 39577:tid 39585] [client 85.203.34.15:62719] [client 85.203.34.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.15, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aUaoUbviRnt1rJiSOfxpUQAAAMY"]
[Sat Dec 20 21:44:49.543794 2025] [:error] [pid 39577:tid 39601] [client 85.203.34.15:62719] [client 85.203.34.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aUaoUbviRnt1rJiSOfxpVgAAANY"]
[Sat Dec 20 21:44:50.183868 2025] [:error] [pid 33687:tid 33693] [client 185.92.25.138:32499] [client 185.92.25.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aUaoUjYMR4qK1N4g7vjSFwAAAkM"]
[Sat Dec 20 21:44:50.789670 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.23:35707] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUaoUjYMR4qK1N4g7vjSIAAAAkQ"]
[Sat Dec 20 21:44:52.355257 2025] [:error] [pid 33793:tid 33815] [client 85.203.34.35:39539] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sat Dec 20 21:44:52.673258 2025] [:error] [pid 33793:tid 33810] [client 85.203.34.35:39539] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aUaoVFSicyB0BFmbRMzVywAAAs8"]
[Sat Dec 20 21:44:53.656196 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.14:22427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Sat Dec 20 21:44:55.259673 2025] [:error] [pid 14286:tid 14294] [client 85.203.34.14:22427] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 20 21:44:56.155162 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.14:22427] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sat Dec 20 21:44:56.459032 2025] [:error] [pid 14286:tid 14305] [client 85.203.34.14:22427] [client 85.203.34.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUaoWJ7rbXIrw6rGSdaGqAAAAU8"]
[Sat Dec 20 21:44:57.635813 2025] [:error] [pid 33687:tid 33692] [client 85.203.34.8:42685] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Sat Dec 20 21:44:58.259097 2025] [:error] [pid 33687:tid 33696] [client 85.203.34.8:42685] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUaoWjYMR4qK1N4g7vjSiQAAAkY"]
[Sat Dec 20 21:44:59.184912 2025] [:error] [pid 14286:tid 14305] [client 85.203.34.8:32899] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Dec 20 21:45:00.144968 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.8:32899] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aUaoXJ7rbXIrw6rGSdaG2QAAAU4"]
[Sat Dec 20 21:45:01.069908 2025] [:error] [pid 14286:tid 14308] [client 85.203.34.37:38793] [client 85.203.34.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aUaoXZ7rbXIrw6rGSdaG5wAAAVI"]
[Sat Dec 20 21:45:02.150231 2025] [:error] [pid 33570:tid 33588] [client 85.203.34.1:35371] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUaoXoTNveA-c6YcSrIRJQAAAcw"]
[Sat Dec 20 21:45:03.323389 2025] [:error] [pid 62124:tid 62142] [client 85.203.34.2:21929] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aUaoX1s94zPA9ULQOjmC3QAAABA"]
[Sat Dec 20 21:45:05.206822 2025] [:error] [pid 33844:tid 33869] [client 85.203.34.31:57189] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aUaoYSaNtwGsyqqVmQH7NQAAAxc"]
[Sat Dec 20 21:45:06.539355 2025] [:error] [pid 39577:tid 39600] [client 85.203.34.29:32201] [client 85.203.34.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aUaoYrviRnt1rJiSOfxqDQAAANU"]
[Sat Dec 20 21:45:07.559846 2025] [:error] [pid 33844:tid 33870] [client 85.203.34.34:51503] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Dec 20 21:45:08.201783 2025] [:error] [pid 33844:tid 33861] [client 85.203.34.34:51503] [client 85.203.34.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUaoZCaNtwGsyqqVmQH7RgAAAw8"]
[Sat Dec 20 21:45:09.127100 2025] [:error] [pid 33793:tid 33801] [client 85.203.34.50:33669] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Sat Dec 20 21:45:09.449013 2025] [:error] [pid 33793:tid 33799] [client 85.203.34.50:33669] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Sat Dec 20 21:45:09.771739 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.50:33669] [client 85.203.34.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aUaoZVSicyB0BFmbRMzWbAAAAtE"]
[Sat Dec 20 21:45:11.072823 2025] [:error] [pid 39493:tid 39549] [client 85.203.34.43:37063] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aUaoZ2hjL2VG_FmIHqAAUQAAAIA"]
[Sat Dec 20 21:45:11.708307 2025] [:error] [pid 14247:tid 14249] [client 85.203.34.13:29547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Sat Dec 20 21:45:12.333853 2025] [:error] [pid 14247:tid 14265] [client 85.203.34.13:29547] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Dec 20 21:45:12.946911 2025] [:error] [pid 14247:tid 14264] [client 85.203.34.13:29547] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Dec 20 21:45:13.272013 2025] [:error] [pid 14247:tid 14261] [client 85.203.34.13:29547] [client 85.203.34.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aUaoaSDv9TtKKdJQn9kYtgAAAQw"]
[Sat Dec 20 21:45:14.402910 2025] [:error] [pid 14286:tid 14299] [client 85.203.34.45:23103] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Dec 20 21:45:15.620482 2025] [:error] [pid 14286:tid 14311] [client 85.203.34.45:23103] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sat Dec 20 21:45:15.960322 2025] [:error] [pid 14286:tid 14299] [client 85.203.34.45:23103] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Dec 20 21:45:16.928769 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.45:23103] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Dec 20 21:45:17.247420 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.45:23103] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Sat Dec 20 21:45:18.516060 2025] [:error] [pid 14286:tid 14290] [client 85.203.34.45:23103] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Sat Dec 20 21:45:18.818462 2025] [:error] [pid 14286:tid 14307] [client 85.203.34.45:23103] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aUaobp7rbXIrw6rGSdaIFgAAAVE"]
[Sat Dec 20 21:45:19.388397 2025] [:error] [pid 14286:tid 14299] [client 85.203.34.46:20607] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aUaob57rbXIrw6rGSdaIHQAAAUk"]
[Sat Dec 20 21:45:20.021586 2025] [:error] [pid 33793:tid 33802] [client 85.203.34.16:53405] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Dec 20 21:45:20.350346 2025] [:error] [pid 33793:tid 33800] [client 85.203.34.16:53405] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Dec 20 21:45:20.706648 2025] [:error] [pid 33793:tid 33806] [client 85.203.34.16:53405] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Dec 20 21:45:21.023711 2025] [:error] [pid 33793:tid 33812] [client 85.203.34.16:53405] [client 85.203.34.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUaocVSicyB0BFmbRMzWwwAAAtE"]
[Sat Dec 20 21:45:21.634892 2025] [:error] [pid 62124:tid 62130] [client 85.203.34.25:51301] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUaocVs94zPA9ULQOjmDhwAAAAQ"]
[Sat Dec 20 21:45:22.293744 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.41:36903] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Dec 20 21:45:22.645319 2025] [:error] [pid 33749:tid 33773] [client 85.203.34.41:36903] [client 85.203.34.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aUaoctoInXJnb96wei9jzwAAApY"]
[Sat Dec 20 21:45:23.256726 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.45:42841] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Sat Dec 20 21:45:23.566239 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.45:42841] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Sat Dec 20 21:45:23.872350 2025] [:error] [pid 33749:tid 33751] [client 85.203.34.45:42841] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Sat Dec 20 21:45:24.561208 2025] [:error] [pid 33749:tid 33762] [client 85.203.34.45:42841] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Sat Dec 20 21:45:24.891170 2025] [:error] [pid 33749:tid 33774] [client 85.203.34.45:42841] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 21:45:25.246481 2025] [:error] [pid 33749:tid 33752] [client 85.203.34.45:42841] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aUaoddoInXJnb96wei9kMQAAAoE"]
[Sat Dec 20 21:45:27.190083 2025] [:error] [pid 33570:tid 33580] [client 85.203.34.2:31879] [client 85.203.34.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.2, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUaod4TNveA-c6YcSrISQQAAAcQ"]
[Sat Dec 20 21:45:27.504598 2025] [:error] [pid 33570:tid 33591] [client 85.203.34.2:31879] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Dec 20 21:45:27.816407 2025] [:error] [pid 33570:tid 33579] [client 85.203.34.2:31879] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUaod4TNveA-c6YcSrISSgAAAcM"]
[Sat Dec 20 21:45:28.456888 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.39:30295] [client 85.203.34.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aUaoeJ7rbXIrw6rGSdaIlQAAAU4"]
[Sat Dec 20 21:45:29.689932 2025] [:error] [pid 14286:tid 14303] [client 85.203.34.49:26051] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 20 21:45:30.238691 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.49:26051] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Sat Dec 20 21:45:30.550254 2025] [:error] [pid 14286:tid 14302] [client 85.203.34.49:26051] [client 85.203.34.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aUaoep7rbXIrw6rGSdaItQAAAUw"]
[Sat Dec 20 21:45:31.252513 2025] [:error] [pid 14247:tid 14263] [client 85.203.34.1:42177] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Dec 20 21:45:31.539499 2025] [:error] [pid 14247:tid 14251] [client 85.203.34.1:42177] [client 85.203.34.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aUaoeyDv9TtKKdJQn9kZbwAAAQI"]
[Sat Dec 20 21:45:32.476397 2025] [:error] [pid 39577:tid 39595] [client 85.203.34.43:34051] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Dec 20 21:45:32.816768 2025] [:error] [pid 39577:tid 39602] [client 85.203.34.43:34051] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Dec 20 21:45:33.131750 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.43:34051] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/cloud.php
[Sat Dec 20 21:45:33.673528 2025] [:error] [pid 39577:tid 39593] [client 85.203.34.43:34051] [client 85.203.34.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/wp-conflg.php"] [unique_id "aUaofbviRnt1rJiSOfxrPgAAAM4"]
[Sat Dec 20 21:45:34.915685 2025] [:error] [pid 14286:tid 14292] [client 85.203.34.10:38343] [client 85.203.34.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/about.php"] [unique_id "aUaofp7rbXIrw6rGSdaI8QAAAUI"]
[Sat Dec 20 21:45:36.138856 2025] [:error] [pid 33570:tid 33576] [client 85.203.34.26:24291] [client 85.203.34.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/product.php"] [unique_id "aUaogITNveA-c6YcSrISowAAAcA"]
[Sat Dec 20 21:45:36.719508 2025] [:error] [pid 33687:tid 33693] [client 85.203.34.2:27019] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Sat Dec 20 21:45:37.010008 2025] [:error] [pid 33687:tid 33705] [client 85.203.34.2:27019] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/class_api.php
[Sat Dec 20 21:45:37.589995 2025] [:error] [pid 33687:tid 33707] [client 85.203.34.2:27019] [client 85.203.34.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aUaogTYMR4qK1N4g7vjUdAAAAlE"]
[Sat Dec 20 21:45:38.201511 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.23:29361] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Sat Dec 20 21:45:38.871113 2025] [:error] [pid 33749:tid 33757] [client 85.203.34.23:29361] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Sat Dec 20 21:45:39.210234 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.23:29361] [client 85.203.34.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aUaog9oInXJnb96wei9lNgAAApA"]
[Sat Dec 20 21:45:41.284586 2025] [:error] [pid 39577:tid 39597] [client 85.203.34.11:27909] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Dec 20 21:45:41.822935 2025] [:error] [pid 39577:tid 39602] [client 85.203.34.11:27909] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Dec 20 21:45:42.098888 2025] [:error] [pid 39577:tid 39598] [client 85.203.34.11:27909] [client 85.203.34.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.11, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aUaohrviRnt1rJiSOfxrnAAAANM"]
[Sat Dec 20 21:45:42.104364 2025] [:error] [pid 39577:tid 39598] [client 85.203.34.11:27909] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Dec 20 21:45:43.012719 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.11:27909] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Sat Dec 20 21:45:43.308388 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.11:27909] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Dec 20 21:45:43.916654 2025] [:error] [pid 39577:tid 39582] [client 85.203.34.11:27909] [client 85.203.34.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aUaoh7viRnt1rJiSOfxrsAAAAMM"]
[Sat Dec 20 21:45:44.481653 2025] [:error] [pid 39493:tid 39561] [client 85.203.34.42:30813] [client 85.203.34.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.42, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aUaoiGhjL2VG_FmIHqAB5wAAAIw"]
[Sat Dec 20 21:45:44.779046 2025] [:error] [pid 39493:tid 39564] [client 85.203.34.42:30813] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aUaoiGhjL2VG_FmIHqAB7AAAAI8"]
[Sat Dec 20 21:45:47.554145 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.46:60927] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Dec 20 21:45:48.489065 2025] [:error] [pid 33749:tid 33768] [client 85.203.34.46:60927] [client 85.203.34.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aUaojNoInXJnb96wei9lzAAAApE"]
[Sat Dec 20 21:45:49.093648 2025] [:error] [pid 62124:tid 62143] [client 85.203.34.20:41261] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Dec 20 21:45:49.787575 2025] [:error] [pid 62124:tid 62133] [client 85.203.34.20:41261] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aUaojVs94zPA9ULQOjmE0AAAAAc"]
[Sat Dec 20 21:45:50.681184 2025] [:error] [pid 14286:tid 14292] [client 85.203.34.22:64437] [client 85.203.34.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.22, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aUaojp7rbXIrw6rGSdaJwgAAAUI"]
[Sat Dec 20 21:45:51.625278 2025] [:error] [pid 14286:tid 14298] [client 85.203.34.22:64437] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Sat Dec 20 21:45:51.979747 2025] [:error] [pid 14286:tid 14309] [client 85.203.34.22:64437] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Sat Dec 20 21:45:52.301477 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.22:64437] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Sat Dec 20 21:45:52.974829 2025] [:error] [pid 14286:tid 14307] [client 85.203.34.22:64437] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Sat Dec 20 21:45:53.297116 2025] [:error] [pid 14286:tid 14295] [client 85.203.34.22:64437] [client 85.203.34.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aUaokZ7rbXIrw6rGSdaJ8AAAAUU"]
[Sat Dec 20 21:45:54.274931 2025] [:error] [pid 62124:tid 62148] [client 85.203.34.42:57771] [client 85.203.34.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aUaokls94zPA9ULQOjmFGwAAABY"]
[Sat Dec 20 21:45:54.891248 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.21:35149] [client 85.203.34.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUaokrviRnt1rJiSOfxsfQAAAMQ"]
[Sat Dec 20 21:45:55.484389 2025] [:error] [pid 39493:tid 39568] [client 85.203.34.36:33061] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 20 21:45:55.813242 2025] [:error] [pid 39493:tid 39560] [client 85.203.34.36:33061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Dec 20 21:46:01.479357 2025] [:error] [pid 39493:tid 39559] [client 85.203.34.36:33061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sat Dec 20 21:46:01.763312 2025] [:error] [pid 39493:tid 39572] [client 85.203.34.36:33061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Sat Dec 20 21:46:02.687639 2025] [:error] [pid 39493:tid 39562] [client 85.203.34.36:33061] [client 85.203.34.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aUaommhjL2VG_FmIHqACzAAAAI0"]
[Sat Dec 20 21:46:03.566246 2025] [:error] [pid 62124:tid 62146] [client 85.203.34.17:25533] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aUaom1s94zPA9ULQOjmFqAAAABQ"]
[Sat Dec 20 21:46:04.501307 2025] [:error] [pid 33687:tid 33702] [client 85.203.34.19:27531] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aUaonDYMR4qK1N4g7vjWBwAAAkw"]
[Sat Dec 20 21:46:05.119326 2025] [:error] [pid 33844:tid 33861] [client 85.203.34.17:55983] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Dec 20 21:46:06.666959 2025] [:error] [pid 33844:tid 33870] [client 85.203.34.17:55983] [client 85.203.34.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.17, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aUaoniaNtwGsyqqVmQH9-AAAAxg"]
[Sat Dec 20 21:46:06.981071 2025] [:error] [pid 33844:tid 33857] [client 85.203.34.17:55983] [client 85.203.34.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUaoniaNtwGsyqqVmQH9_gAAAws"]
[Sat Dec 20 21:46:07.596412 2025] [:error] [pid 33749:tid 33754] [client 85.203.34.12:27591] [client 85.203.34.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/file.php"] [unique_id "aUaon9oInXJnb96wei9mpAAAAoM"]
[Sat Dec 20 21:46:09.673626 2025] [:error] [pid 39493:tid 39566] [client 85.203.34.30:24629] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Sat Dec 20 21:46:09.975022 2025] [:error] [pid 39493:tid 39554] [client 85.203.34.30:24629] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Dec 20 21:46:10.572259 2025] [:error] [pid 39493:tid 39558] [client 85.203.34.30:24629] [client 85.203.34.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUaoomhjL2VG_FmIHqADJwAAAIk"]
[Sat Dec 20 21:46:11.174843 2025] [:error] [pid 33687:tid 33694] [client 85.203.34.35:48037] [client 85.203.34.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aUaoozYMR4qK1N4g7vjWWAAAAkQ"]
[Sat Dec 20 21:46:11.768656 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.28:44275] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Sat Dec 20 21:46:13.181670 2025] [:error] [pid 33844:tid 33858] [client 85.203.34.28:44275] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/moon.php
[Sat Dec 20 21:46:14.144305 2025] [:error] [pid 33844:tid 33851] [client 85.203.34.28:44275] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/dropdown.php
[Sat Dec 20 21:46:14.444699 2025] [:error] [pid 33844:tid 33861] [client 85.203.34.28:44275] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aUaopiaNtwGsyqqVmQH-ZgAAAw8"]
[Sat Dec 20 21:46:15.030261 2025] [:error] [pid 62124:tid 62140] [client 85.203.34.8:37517] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Dec 20 21:46:15.312310 2025] [:error] [pid 62124:tid 62137] [client 85.203.34.8:37517] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Sat Dec 20 21:46:15.944095 2025] [:error] [pid 62124:tid 62130] [client 85.203.34.8:37517] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aUaop1s94zPA9ULQOjmGbgAAAAQ"]
[Sat Dec 20 21:46:17.745927 2025] [:error] [pid 62124:tid 62142] [client 85.203.34.6:59969] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Sat Dec 20 21:46:18.812775 2025] [:error] [pid 62124:tid 62130] [client 85.203.34.6:59969] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/blurbs.php
[Sat Dec 20 21:46:19.417328 2025] [:error] [pid 62124:tid 62144] [client 85.203.34.6:59969] [client 85.203.34.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aUaoq1s94zPA9ULQOjmGowAAABI"]
[Sat Dec 20 21:46:21.257286 2025] [:error] [pid 33844:tid 33857] [client 85.203.34.32:57809] [client 85.203.34.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aUaorSaNtwGsyqqVmQH-tgAAAws"]
[Sat Dec 20 21:46:23.379412 2025] [:error] [pid 14247:tid 14254] [client 85.203.34.33:41019] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat Dec 20 21:46:24.340166 2025] [:error] [pid 14247:tid 14267] [client 85.203.34.33:41019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Dec 20 21:46:24.670064 2025] [:error] [pid 14247:tid 14259] [client 85.203.34.33:41019] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Dec 20 21:46:24.997312 2025] [:error] [pid 14247:tid 14266] [client 85.203.34.33:41019] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Dec 20 21:46:25.328078 2025] [:error] [pid 14247:tid 14249] [client 85.203.34.33:41019] [client 85.203.34.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aUaosSDv9TtKKdJQn9kb0wAAAQA"]
[Sat Dec 20 21:46:25.972886 2025] [:error] [pid 33749:tid 33755] [client 85.203.34.23:34081] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/doc.php
[Sat Dec 20 21:46:26.271999 2025] [:error] [pid 33749:tid 33759] [client 85.203.34.23:34081] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Sat Dec 20 21:46:26.837865 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.23:34081] [client 85.203.34.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/index.php"] [unique_id "aUaostoInXJnb96wei9oEQAAAo0"]
[Sat Dec 20 21:46:28.059763 2025] [:error] [pid 14247:tid 14272] [client 85.203.34.45:33659] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Sat Dec 20 21:46:28.339850 2025] [:error] [pid 14247:tid 14273] [client 85.203.34.45:33659] [client 85.203.34.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aUaotCDv9TtKKdJQn9kb9QAAARg"]
[Sat Dec 20 21:46:28.918736 2025] [:error] [pid 33570:tid 33594] [client 85.203.34.12:43989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sat Dec 20 21:46:29.226155 2025] [:error] [pid 33570:tid 33600] [client 85.203.34.12:43989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Dec 20 21:46:29.829846 2025] [:error] [pid 33570:tid 33590] [client 85.203.34.12:43989] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Dec 20 21:46:30.425030 2025] [:error] [pid 33570:tid 33590] [client 85.203.34.12:43989] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Sat Dec 20 21:46:31.454943 2025] [:error] [pid 33570:tid 33593] [client 85.203.34.12:43989] [client 85.203.34.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aUaot4TNveA-c6YcSrIVlgAAAdE"]
[Sat Dec 20 21:46:34.016896 2025] [:error] [pid 33687:tid 33690] [client 85.203.34.31:35955] [client 85.203.34.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.31, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aUaoujYMR4qK1N4g7vjXXQAAAkA"]
[Sat Dec 20 21:46:34.360429 2025] [:error] [pid 33687:tid 33691] [client 85.203.34.31:35955] [client 85.203.34.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.31, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aUaoujYMR4qK1N4g7vjXXwAAAkE"]
[Sat Dec 20 21:46:34.690175 2025] [:error] [pid 33687:tid 33699] [client 85.203.34.31:35955] [client 85.203.34.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aUaoujYMR4qK1N4g7vjXYwAAAkk"]
[Sat Dec 20 21:46:35.313483 2025] [:error] [pid 39493:tid 39556] [client 85.203.34.25:28459] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Dec 20 21:46:37.997718 2025] [:error] [pid 39493:tid 39554] [client 85.203.34.25:28459] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aUaovWhjL2VG_FmIHqAEJQAAAIU"]
[Sat Dec 20 21:46:38.607686 2025] [:error] [pid 62124:tid 62150] [client 85.203.34.47:63677] File does not exist: /usr/local/apache/htdocs/suspended-page/images.php
[Sat Dec 20 21:46:38.918722 2025] [:error] [pid 62124:tid 62147] [client 85.203.34.47:63677] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php
[Sat Dec 20 21:46:39.238512 2025] [:error] [pid 62124:tid 62126] [client 85.203.34.47:63677] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUaov1s94zPA9ULQOjmHhwAAAAA"]
[Sat Dec 20 21:46:41.053276 2025] [:error] [pid 14286:tid 14302] [client 85.203.34.4:30141] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Sat Dec 20 21:46:41.990861 2025] [:error] [pid 14286:tid 14290] [client 85.203.34.4:30141] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/themes.php
[Sat Dec 20 21:46:42.600969 2025] [:error] [pid 14286:tid 14298] [client 85.203.34.4:30141] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aUaowp7rbXIrw6rGSdaMDQAAAUg"]
[Sat Dec 20 21:46:43.219838 2025] [:error] [pid 14247:tid 14269] [client 85.203.34.47:53761] [client 85.203.34.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aUaowyDv9TtKKdJQn9kcmgAAARQ"]
[Sat Dec 20 21:46:43.809247 2025] [:error] [pid 39577:tid 39584] [client 85.203.34.29:25177] [client 85.203.34.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aUaow7viRnt1rJiSOfxvuwAAAMU"]
[Sat Dec 20 21:46:44.712194 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.20:33125] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Dec 20 21:46:45.881021 2025] [:error] [pid 33749:tid 33758] [client 85.203.34.20:33125] [client 85.203.34.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.34.20, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aUaoxdoInXJnb96wei9pfAAAAoc"]
[Sat Dec 20 21:46:47.163334 2025] [:error] [pid 33749:tid 33753] [client 85.203.34.20:33125] [client 85.203.34.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aUaox9oInXJnb96wei9pmwAAAoI"]
[Sat Dec 20 21:46:47.745411 2025] [:error] [pid 33687:tid 33702] [client 85.203.34.19:21331] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Dec 20 21:46:48.048834 2025] [:error] [pid 33687:tid 33696] [client 85.203.34.19:21331] [client 85.203.34.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aUaoyDYMR4qK1N4g7vjX1wAAAkY"]
[Sat Dec 20 21:46:48.697068 2025] [:error] [pid 62124:tid 62149] [client 85.203.34.43:36019] [client 85.203.34.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aUaoyFs94zPA9ULQOjmH3QAAABc"]
[Sat Dec 20 21:46:49.662128 2025] [:error] [pid 33844:tid 33848] [client 85.203.34.40:64667] [client 85.203.34.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUaoySaNtwGsyqqVmQH_6wAAAwI"]
[Sat Dec 20 21:46:50.911150 2025] [:error] [pid 33687:tid 33711] [client 185.92.25.139:40949] [client 185.92.25.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/prayer_intentions.php"] [unique_id "aUaoyjYMR4qK1N4g7vjX9gAAAlU"]
[Sat Dec 20 21:46:51.535770 2025] [:error] [pid 33570:tid 33586] [client 85.203.34.33:26763] [client 85.203.34.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/prayer_intentions.php"] [unique_id "aUaoy4TNveA-c6YcSrIWxQAAAco"]
[Sat Dec 20 21:46:53.492533 2025] [:error] [pid 39493:tid 39567] [client 85.203.34.9:53943] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/parx.php
[Sat Dec 20 21:46:54.145799 2025] [:error] [pid 39493:tid 39551] [client 85.203.34.9:53943] [client 85.203.34.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aUaozmhjL2VG_FmIHqAElgAAAII"]
[Sat Dec 20 21:46:55.066673 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.12:54483] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Dec 20 21:46:55.389452 2025] [:error] [pid 39577:tid 39595] [client 85.203.34.12:54483] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sat Dec 20 21:46:56.579506 2025] [:error] [pid 39577:tid 39579] [client 85.203.34.12:54483] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Dec 20 21:46:56.904926 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.12:54483] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Sat Dec 20 21:46:57.435750 2025] [:error] [pid 39577:tid 39598] [client 85.203.34.12:54483] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sat Dec 20 21:46:57.758512 2025] [:error] [pid 39577:tid 39583] [client 85.203.34.12:54483] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Dec 20 21:46:58.376867 2025] [:error] [pid 39577:tid 39586] [client 85.203.34.12:54483] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Dec 20 21:46:58.905410 2025] [:error] [pid 39577:tid 39595] [client 85.203.34.12:54483] [client 85.203.34.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/apikey/mar.php"] [unique_id "aUao0rviRnt1rJiSOfxwdQAAANA"]
[Sat Dec 20 21:47:01.309308 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.38:32257] [client 85.203.34.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aUao1Z7rbXIrw6rGSdaNggAAAVA"]
[Sat Dec 20 21:47:02.237456 2025] [:error] [pid 62124:tid 62141] [client 85.203.34.25:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Sat Dec 20 21:47:02.525371 2025] [:error] [pid 62124:tid 62136] [client 85.203.34.25:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Dec 20 21:47:02.869745 2025] [:error] [pid 62124:tid 62131] [client 85.203.34.25:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Dec 20 21:47:03.168662 2025] [:error] [pid 62124:tid 62129] [client 85.203.34.25:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Sat Dec 20 21:47:03.794884 2025] [:error] [pid 62124:tid 62146] [client 85.203.34.25:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Sat Dec 20 21:47:04.123880 2025] [:error] [pid 62124:tid 62127] [client 85.203.34.25:27557] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Sat Dec 20 21:47:04.733161 2025] [:error] [pid 62124:tid 62132] [client 85.203.34.25:27557] [client 85.203.34.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aUao2Fs94zPA9ULQOjmITwAAAAY"]
[Sat Dec 20 21:47:06.909480 2025] [:error] [pid 33844:tid 33861] [client 85.203.34.28:29013] [client 85.203.34.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aUao2iaNtwGsyqqVmQEAvAAAAw8"]
[Sat Dec 20 21:47:07.776266 2025] [:error] [pid 33570:tid 33587] [client 85.203.34.48:56215] [client 85.203.34.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aUao24TNveA-c6YcSrIXYQAAAcs"]
[Sat Dec 20 21:47:08.366440 2025] [:error] [pid 14247:tid 14249] [client 85.203.34.9:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Dec 20 21:47:08.678913 2025] [:error] [pid 14247:tid 14257] [client 85.203.34.9:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Sat Dec 20 21:47:08.998235 2025] [:error] [pid 14247:tid 14268] [client 85.203.34.9:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Sat Dec 20 21:47:09.822923 2025] [:error] [pid 14247:tid 14257] [client 85.203.34.9:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/ovatools.php
[Sat Dec 20 21:47:10.160440 2025] [:error] [pid 14247:tid 14252] [client 85.203.34.9:58273] [client 85.203.34.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sidwso.php"] [unique_id "aUao3iDv9TtKKdJQn9kdtgAAAQM"]
[Sat Dec 20 21:47:10.759570 2025] [:error] [pid 14286:tid 14293] [client 85.203.34.21:22361] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Sat Dec 20 21:47:11.061623 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.21:22361] [client 85.203.34.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/worksec.php"] [unique_id "aUao357rbXIrw6rGSdaN4QAAAUs"]
[Sat Dec 20 21:47:11.716055 2025] [:error] [pid 39577:tid 39602] [client 85.203.34.39:60887] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Sat Dec 20 21:47:12.007031 2025] [:error] [pid 39577:tid 39591] [client 85.203.34.39:60887] [client 85.203.34.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aUao4LviRnt1rJiSOfxxHAAAAMw"]
[Sat Dec 20 21:47:12.605822 2025] [:error] [pid 62124:tid 62131] [client 85.203.34.8:44687] [client 85.203.34.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aUao4Fs94zPA9ULQOjmItAAAAAU"]
[Sat Dec 20 21:47:13.497679 2025] [:error] [pid 33687:tid 33706] [client 85.203.34.9:46651] [client 85.203.34.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aUao4TYMR4qK1N4g7vjZJgAAAlA"]
[Sat Dec 20 21:47:14.374700 2025] [:error] [pid 14286:tid 14314] [client 85.203.34.27:53283] [client 85.203.34.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aUao4p7rbXIrw6rGSdaN8wAAAVg"]
[Sat Dec 20 21:47:15.307960 2025] [:error] [pid 33844:tid 33855] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Dec 20 21:47:15.596025 2025] [:error] [pid 33844:tid 33846] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sat Dec 20 21:47:15.997666 2025] [:error] [pid 33844:tid 33863] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Sat Dec 20 21:47:16.293895 2025] [:error] [pid 33844:tid 33858] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scripts.php
[Sat Dec 20 21:47:16.579483 2025] [:error] [pid 33844:tid 33853] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Dec 20 21:47:16.878500 2025] [:error] [pid 33844:tid 33850] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Sat Dec 20 21:47:17.195901 2025] [:error] [pid 33844:tid 33855] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/comfunctions.php
[Sat Dec 20 21:47:17.504808 2025] [:error] [pid 33844:tid 33854] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Dec 20 21:47:17.804624 2025] [:error] [pid 33844:tid 33857] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Sat Dec 20 21:47:18.104596 2025] [:error] [pid 33844:tid 33870] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Dec 20 21:47:18.392169 2025] [:error] [pid 33844:tid 33848] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php
[Sat Dec 20 21:47:18.722520 2025] [:error] [pid 33844:tid 33855] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/qfunctions.php
[Sat Dec 20 21:47:19.016115 2025] [:error] [pid 33844:tid 33866] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php
[Sat Dec 20 21:47:19.302924 2025] [:error] [pid 33844:tid 33861] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Sat Dec 20 21:47:28.175614 2025] [:error] [pid 33844:tid 33861] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Sat Dec 20 21:47:28.471087 2025] [:error] [pid 33844:tid 33857] [client 85.203.34.32:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Sat Dec 20 21:47:28.754708 2025] [:error] [pid 33844:tid 33865] [client 85.203.34.32:49211] [client 85.203.34.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aUao8CaNtwGsyqqVmQEBjgAAAxM"]
[Sat Dec 20 21:47:29.337755 2025] [:error] [pid 14286:tid 14301] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Dec 20 21:47:29.654045 2025] [:error] [pid 14286:tid 14307] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Dec 20 21:47:29.956608 2025] [:error] [pid 14286:tid 14295] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/my-sites.php
[Sat Dec 20 21:47:30.263894 2025] [:error] [pid 14286:tid 14292] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Sat Dec 20 21:47:30.563132 2025] [:error] [pid 14286:tid 14291] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/nav-menus.php
[Sat Dec 20 21:47:31.018627 2025] [:error] [pid 14286:tid 14297] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Dec 20 21:47:31.346776 2025] [:error] [pid 14286:tid 14290] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Sat Dec 20 21:47:31.662599 2025] [:error] [pid 14286:tid 14304] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/revision.php
[Sat Dec 20 21:47:31.987151 2025] [:error] [pid 14286:tid 14295] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Sat Dec 20 21:47:32.328555 2025] [:error] [pid 14286:tid 14291] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Dec 20 21:47:32.624156 2025] [:error] [pid 14286:tid 14294] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Dec 20 21:47:32.908092 2025] [:error] [pid 14286:tid 14313] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Dec 20 21:47:33.273852 2025] [:error] [pid 14286:tid 14295] [client 85.203.34.4:53703] File does not exist: /usr/local/apache/htdocs/suspended-page/moded.php
[Sat Dec 20 21:47:33.567925 2025] [:error] [pid 14286:tid 14306] [client 85.203.34.4:53703] [client 85.203.34.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aUao9Z7rbXIrw6rGSdaOvgAAAVA"]
[Sat Dec 20 21:47:34.126328 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Sat Dec 20 21:47:34.479573 2025] [:error] [pid 33749:tid 33765] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Sat Dec 20 21:47:34.814867 2025] [:error] [pid 33749:tid 33770] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Sat Dec 20 21:47:35.147483 2025] [:error] [pid 33749:tid 33765] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php
[Sat Dec 20 21:47:35.439386 2025] [:error] [pid 33749:tid 33763] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Sat Dec 20 21:47:35.946681 2025] [:error] [pid 33749:tid 33764] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-insqbzk.php
[Sat Dec 20 21:47:36.250294 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Sat Dec 20 21:47:52.010563 2025] [:error] [pid 33749:tid 33767] [client 85.203.34.2:35901] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Sat Dec 20 21:47:52.480496 2025] [autoindex:error] [pid 62124:tid 62135] [client 85.203.34.12:45913] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Dec 20 21:48:11.677610 2025] [:error] [pid 62124:tid 62144] [client 85.203.34.12:45913] [client 85.203.34.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aUapG1s94zPA9ULQOjmK9wAAABI"]
[Sat Dec 20 21:48:41.598885 2025] [:error] [pid 33793:tid 33797] [client 85.203.34.15:22883] [client 85.203.34.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/"] [unique_id "aUapOVSicyB0BFmbRMzf1QAAAsI"]
[Sat Dec 20 21:49:34.092238 2025] [:error] [pid 39493:tid 39568] [client 85.203.34.1:24183] [client 85.203.34.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-content/plugins/rex/l/"] [unique_id "aUapbmhjL2VG_FmIHqALigAAAJM"]
[Sat Dec 20 21:49:47.172220 2025] [:error] [pid 33570:tid 33578] [client 85.203.34.10:54411] [client 85.203.34.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rest-api/"] [unique_id "aUape4TNveA-c6YcSrIejQAAAcI"]
[Sat Dec 20 21:49:49.728222 2025] [:error] [pid 33687:tid 33691] [client 85.203.34.39:39727] [client 85.203.34.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/plupload/"] [unique_id "aUapfTYMR4qK1N4g7vjfWwAAAkE"]
[Sat Dec 20 21:53:03.390148 2025] [:error] [pid 33844:tid 33870] [client 106.227.49.113:38828] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUaqPyaNtwGsyqqVmQEM6gAAAxg"]
[Sat Dec 20 23:39:35.186627 2025] [:error] [pid 33749:tid 33770] [client 43.133.66.51:47966] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUbDN9oInXJnb96wei-0pgAAApM"]
[Sun Dec 21 00:40:59.239149 2025] [:error] [pid 8751:tid 8768] [client 185.223.152.77:37257] [client 185.223.152.77] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.77, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aUbRm2vrnuGjNP7vtDQMJAAAAA8"]
[Sun Dec 21 00:40:59.243089 2025] [:error] [pid 8751:tid 8768] [client 185.223.152.77:37257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Dec 21 01:57:19.750240 2025] [:error] [pid 8751:tid 8769] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://duckduckgo.com/
[Sun Dec 21 01:57:19.919729 2025] [:error] [pid 8751:tid 8767] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.yahoo.com/
[Sun Dec 21 01:57:20.093401 2025] [:error] [pid 8751:tid 8758] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.fr/
[Sun Dec 21 01:57:20.402997 2025] [:error] [pid 8751:tid 8763] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.yahoo.com/
[Sun Dec 21 01:57:20.558088 2025] [:error] [pid 8751:tid 8753] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Sun Dec 21 01:57:20.857637 2025] [:error] [pid 8751:tid 8765] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.bing.com/
[Sun Dec 21 01:57:21.010019 2025] [:error] [pid 8751:tid 8777] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.com/
[Sun Dec 21 01:57:21.303983 2025] [:error] [pid 8751:tid 8756] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://www.google.co.uk/
[Sun Dec 21 01:57:21.453236 2025] [:error] [pid 8751:tid 8762] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: https://www.bing.com/
[Sun Dec 21 01:57:21.599496 2025] [:error] [pid 8751:tid 8755] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.com/
[Sun Dec 21 01:57:22.372562 2025] [:error] [pid 8751:tid 8753] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Sun Dec 21 01:57:22.531595 2025] [:error] [pid 8751:tid 8768] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.bing.com/
[Sun Dec 21 01:57:22.704265 2025] [:error] [pid 8751:tid 8766] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.co.uk/
[Sun Dec 21 01:57:22.867912 2025] [:error] [pid 8751:tid 8765] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.bing.com/
[Sun Dec 21 01:57:23.016675 2025] [:error] [pid 8751:tid 8764] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.bing.com/
[Sun Dec 21 01:57:23.167479 2025] [:error] [pid 8751:tid 8777] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://duckduckgo.com/
[Sun Dec 21 01:57:23.316123 2025] [:error] [pid 8751:tid 8772] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Sun Dec 21 01:57:23.466101 2025] [:error] [pid 8751:tid 8762] [client 20.205.47.252:63303] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://www.yahoo.com/
[Sun Dec 21 01:57:24.131808 2025] [:error] [pid 8751:tid 8759] [client 20.205.47.252:63303] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aUbjhGvrnuGjNP7vtDQ0tQAAAAY"], referer: https://www.google.co.uk/
[Sun Dec 21 01:57:24.537506 2025] [:error] [pid 8641:tid 8696] [client 20.205.47.252:63329] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aUbjhHE703usYSvQGLRoRwAAANE"], referer: https://www.google.co.uk/
[Sun Dec 21 01:57:24.962629 2025] [:error] [pid 22338:tid 22388] [client 20.205.47.252:63945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://duckduckgo.com/
[Sun Dec 21 01:57:25.098253 2025] [:error] [pid 22338:tid 22387] [client 20.205.47.252:63945] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.co.uk/
[Sun Dec 21 01:57:25.233034 2025] [:error] [pid 22338:tid 22395] [client 20.205.47.252:63945] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.com/
[Sun Dec 21 01:57:25.374051 2025] [:error] [pid 22338:tid 22404] [client 20.205.47.252:63945] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://www.bing.com/
[Sun Dec 21 01:57:25.508522 2025] [:error] [pid 22338:tid 22396] [client 20.205.47.252:63945] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.yahoo.com/
[Sun Dec 21 01:57:25.644295 2025] [:error] [pid 22338:tid 22393] [client 20.205.47.252:63945] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.bing.com/
[Sun Dec 21 01:57:25.783396 2025] [:error] [pid 22338:tid 22406] [client 20.205.47.252:63945] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.fr/
[Sun Dec 21 01:57:29.609447 2025] [:error] [pid 22338:tid 22403] [client 20.205.47.252:63945] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUbjiXGYQSUt-opKpSIjjwAAAFI"], referer: https://www.google.de/
[Sun Dec 21 01:57:29.879579 2025] [:error] [pid 8751:tid 8753] [client 20.205.47.252:64565] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbjiWvrnuGjNP7vtDQ0uAAAAAA"], referer: https://duckduckgo.com/
[Sun Dec 21 01:57:30.478806 2025] [:error] [pid 8642:tid 8723] [client 20.205.47.252:65053] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aUbjiiJkiik8k41igp0Y_gAAARI"], referer: https://www.google.de/
[Sun Dec 21 01:57:31.086566 2025] [:error] [pid 8640:tid 8655] [client 20.205.47.252:63889] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aUbji_VclzlEWWhvYtlw9wAAAIU"], referer: https://www.google.co.uk/
[Sun Dec 21 01:57:31.381904 2025] [:error] [pid 22338:tid 22404] [client 20.205.47.252:64586] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aUbji3GYQSUt-opKpSIjkgAAAFM"], referer: https://www.google.de/
[Sun Dec 21 01:57:31.674804 2025] [:error] [pid 8641:tid 8698] [client 20.205.47.252:65136] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aUbji3E703usYSvQGLRoUAAAANI"], referer: https://www.yahoo.com/
[Sun Dec 21 01:57:31.978626 2025] [:error] [pid 8640:tid 8665] [client 20.205.47.252:63905] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/development/index.php"] [unique_id "aUbji_VclzlEWWhvYtlw-AAAAI8"], referer: https://www.google.com/
[Sun Dec 21 01:57:32.240821 2025] [:error] [pid 8751:tid 8773] [client 20.205.47.252:63929] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUbjjGvrnuGjNP7vtDQ0uwAAABQ"], referer: https://www.google.fr/
[Sun Dec 21 01:57:32.593520 2025] [:error] [pid 8751:tid 8769] [client 20.205.47.252:64524] [client 20.205.47.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aUbjjGvrnuGjNP7vtDQ0vQAAABA"], referer: https://www.google.com/
[Sun Dec 21 02:47:31.700312 2025] [:error] [pid 8640:tid 8653] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Dec 21 02:47:31.997642 2025] [:error] [pid 8640:tid 8661] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Dec 21 02:47:32.294577 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Dec 21 02:47:32.618410 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Dec 21 02:47:32.925759 2025] [:error] [pid 8640:tid 8650] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Dec 21 02:47:33.218284 2025] [:error] [pid 8640:tid 8662] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Dec 21 02:47:33.758038 2025] [:error] [pid 8640:tid 8671] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Dec 21 02:47:34.051747 2025] [:error] [pid 8640:tid 8653] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Dec 21 02:47:34.657495 2025] [:error] [pid 8640:tid 8659] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Dec 21 02:47:35.278149 2025] [:error] [pid 8640:tid 8664] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Dec 21 02:47:35.580760 2025] [:error] [pid 8640:tid 8662] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Dec 21 02:47:35.889456 2025] [:error] [pid 8640:tid 8672] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Dec 21 02:47:36.190757 2025] [:error] [pid 8640:tid 8659] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Dec 21 02:47:36.489488 2025] [:error] [pid 8640:tid 8673] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Dec 21 02:47:36.782584 2025] [:error] [pid 8640:tid 8661] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Dec 21 02:47:37.075008 2025] [:error] [pid 8640:tid 8656] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Dec 21 02:47:37.430840 2025] [:error] [pid 8640:tid 8667] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Dec 21 02:47:37.755696 2025] [:error] [pid 8640:tid 8650] [client 31.171.130.129:32501] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Dec 21 02:47:42.323816 2025] [:error] [pid 8640:tid 8663] [client 31.171.130.129:32501] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUbvTvVclzlEWWhvYtmZBgAAAI0"]
[Sun Dec 21 02:47:43.903316 2025] [:error] [pid 44515:tid 44521] [client 31.171.130.133:59735] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUbvT5ZAdBRP9gwGvJ5jIwAAAYM"]
[Sun Dec 21 02:47:45.796969 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.161:28607] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Dec 21 02:47:46.730438 2025] [:error] [pid 8640:tid 8665] [client 31.171.130.161:28607] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUbvUvVclzlEWWhvYtmZNAAAAI8"]
[Sun Dec 21 02:47:47.904240 2025] [:error] [pid 8751:tid 8774] [client 31.171.130.135:59475] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Dec 21 02:47:48.215564 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.135:59475] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUbvVGvrnuGjNP7vtDRt-QAAAAk"]
[Sun Dec 21 02:47:49.186116 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.118:40451] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Dec 21 02:47:50.733665 2025] [:error] [pid 8640:tid 8654] [client 31.171.130.118:40451] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUbvVvVclzlEWWhvYtmZWwAAAIQ"]
[Sun Dec 21 02:47:51.686191 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.156:50945] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUbvV_VclzlEWWhvYtmZYQAAAIU"]
[Sun Dec 21 02:47:52.303495 2025] [:error] [pid 43680:tid 43699] [client 31.171.130.109:59129] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUbvWEDkAAJVjNqC6UXOqQAAAU8"]
[Sun Dec 21 02:47:52.887716 2025] [:error] [pid 44515:tid 44519] [client 31.171.130.119:50383] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUbvWJZAdBRP9gwGvJ5jUwAAAYE"]
[Sun Dec 21 02:47:53.493783 2025] [:error] [pid 44515:tid 44520] [client 31.171.130.132:54085] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUbvWZZAdBRP9gwGvJ5jWgAAAYI"]
[Sun Dec 21 02:47:54.398306 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.141:31463] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUbvWvVclzlEWWhvYtmZcwAAAJI"]
[Sun Dec 21 02:47:55.540704 2025] [:error] [pid 8751:tid 8766] [client 31.171.130.145:51711] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUbvW2vrnuGjNP7vtDRuRQAAAA0"]
[Sun Dec 21 02:47:56.127766 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.122:60767] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Dec 21 02:47:56.702322 2025] [:error] [pid 43680:tid 43704] [client 31.171.130.122:60767] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aUbvXEDkAAJVjNqC6UXOxAAAAVQ"]
[Sun Dec 21 02:47:58.129435 2025] [:error] [pid 44515:tid 44523] [client 31.171.130.150:60331] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUbvXpZAdBRP9gwGvJ5jnwAAAYU"]
[Sun Dec 21 02:47:59.069379 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.118:20287] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUbvX3GYQSUt-opKpSJTdgAAAEE"]
[Sun Dec 21 02:47:59.657797 2025] [:error] [pid 8640:tid 8653] [client 31.171.130.132:54457] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Dec 21 02:47:59.955456 2025] [:error] [pid 8640:tid 8668] [client 31.171.130.132:54457] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUbvX_VclzlEWWhvYtmZpQAAAJI"]
[Sun Dec 21 02:48:00.581170 2025] [:error] [pid 8640:tid 8665] [client 31.171.130.111:34773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Dec 21 02:48:01.662617 2025] [:error] [pid 8640:tid 8674] [client 31.171.130.111:34773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Dec 21 02:48:02.527785 2025] [:error] [pid 8640:tid 8652] [client 31.171.130.111:34773] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aUbvYvVclzlEWWhvYtmZygAAAII"]
[Sun Dec 21 02:48:03.119777 2025] [:error] [pid 8642:tid 8701] [client 31.171.130.149:63997] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Dec 21 02:48:03.405340 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.149:63997] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aUbvYyJkiik8k41igp1DeQAAAQo"]
[Sun Dec 21 02:48:04.006466 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.122:22611] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Dec 21 02:48:04.621414 2025] [:error] [pid 8640:tid 8664] [client 31.171.130.122:22611] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aUbvZPVclzlEWWhvYtmZ5gAAAI4"]
[Sun Dec 21 02:48:05.498379 2025] [:error] [pid 8751:tid 8777] [client 31.171.130.120:30243] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aUbvZWvrnuGjNP7vtDRumAAAABg"]
[Sun Dec 21 02:48:07.409389 2025] [:error] [pid 44515:tid 44537] [client 31.171.130.113:44273] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Dec 21 02:48:07.728886 2025] [:error] [pid 44515:tid 44518] [client 31.171.130.113:44273] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Dec 21 02:48:08.352391 2025] [:error] [pid 44515:tid 44523] [client 31.171.130.113:44273] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aUbvaJZAdBRP9gwGvJ5j-QAAAYU"]
[Sun Dec 21 02:48:09.258664 2025] [:error] [pid 22338:tid 22403] [client 31.171.130.110:21853] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aUbvaXGYQSUt-opKpSJTwQAAAFI"]
[Sun Dec 21 02:48:10.495323 2025] [:error] [pid 22338:tid 22385] [client 31.171.130.144:23301] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aUbvanGYQSUt-opKpSJT1gAAAEE"]
[Sun Dec 21 02:48:11.111898 2025] [:error] [pid 8640:tid 8651] [client 31.171.130.148:29633] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aUbva_VclzlEWWhvYtmaIwAAAIE"]
[Sun Dec 21 02:48:11.684524 2025] [:error] [pid 22338:tid 22406] [client 31.171.130.161:49851] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aUbva3GYQSUt-opKpSJT4gAAAFU"]
[Sun Dec 21 02:48:13.021828 2025] [:error] [pid 43680:tid 43689] [client 31.171.130.133:41791] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Dec 21 02:48:13.322507 2025] [:error] [pid 43680:tid 43693] [client 31.171.130.133:41791] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aUbvbUDkAAJVjNqC6UXPUwAAAUk"]
[Sun Dec 21 02:48:13.953776 2025] [:error] [pid 43680:tid 43694] [client 31.171.130.137:65455] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aUbvbUDkAAJVjNqC6UXPWgAAAUo"]
[Sun Dec 21 02:48:14.569953 2025] [:error] [pid 8641:tid 8681] [client 31.171.130.156:49361] [client 31.171.130.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aUbvbnE703usYSvQGLSTvgAAAMM"]
[Sun Dec 21 02:48:16.118845 2025] [:error] [pid 8642:tid 8716] [client 31.171.130.120:53537] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Dec 21 02:48:16.716753 2025] [:error] [pid 8642:tid 8726] [client 31.171.130.120:53537] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Dec 21 02:48:18.156784 2025] [:error] [pid 8642:tid 8726] [client 31.171.130.120:53537] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aUbvciJkiik8k41igp1D0QAAARU"]
[Sun Dec 21 02:48:20.680307 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.140:29623] [client 31.171.130.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.140, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aUbvdPVclzlEWWhvYtmaYAAAAIU"]
[Sun Dec 21 02:48:21.045860 2025] [:error] [pid 8640:tid 8663] [client 31.171.130.140:29623] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Dec 21 02:48:22.560713 2025] [:error] [pid 8640:tid 8658] [client 31.171.130.140:29623] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Dec 21 02:48:22.858167 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.140:29623] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Dec 21 02:48:24.629536 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.140:29623] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aUbvePVclzlEWWhvYtmajAAAAJA"]
[Sun Dec 21 02:48:25.530689 2025] [:error] [pid 44515:tid 44524] [client 31.171.130.114:44389] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Dec 21 02:48:25.845611 2025] [:error] [pid 44515:tid 44530] [client 31.171.130.114:44389] [client 31.171.130.114] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.114, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aUbveZZAdBRP9gwGvJ5kYQAAAYw"]
[Sun Dec 21 02:48:26.443432 2025] [:error] [pid 44515:tid 44532] [client 31.171.130.114:44389] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aUbvepZAdBRP9gwGvJ5kZAAAAY4"]
[Sun Dec 21 02:48:28.375855 2025] [:error] [pid 8751:tid 8765] [client 31.171.130.118:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Dec 21 02:48:29.003356 2025] [:error] [pid 8751:tid 8756] [client 31.171.130.118:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sun Dec 21 02:48:29.589649 2025] [:error] [pid 8751:tid 8769] [client 31.171.130.118:47919] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aUbvfWvrnuGjNP7vtDRvZgAAABA"]
[Sun Dec 21 02:48:30.212005 2025] [:error] [pid 8640:tid 8660] [client 31.171.130.111:43075] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Dec 21 02:48:31.587720 2025] [:error] [pid 8640:tid 8673] [client 31.171.130.111:43075] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sun Dec 21 02:48:32.188717 2025] [:error] [pid 8640:tid 8656] [client 31.171.130.111:43075] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sun Dec 21 02:48:32.777950 2025] [:error] [pid 8640:tid 8654] [client 31.171.130.111:43075] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Dec 21 02:48:33.138616 2025] [:error] [pid 8640:tid 8664] [client 31.171.130.111:43075] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aUbvgfVclzlEWWhvYtma0wAAAI4"]
[Sun Dec 21 02:48:33.748151 2025] [:error] [pid 43680:tid 43697] [client 31.171.130.112:49575] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Dec 21 02:48:34.066922 2025] [:error] [pid 43680:tid 43707] [client 31.171.130.112:49575] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Dec 21 02:48:34.358397 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.112:49575] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aUbvgkDkAAJVjNqC6UXP-gAAAVI"]
[Sun Dec 21 02:48:38.075441 2025] [:error] [pid 22338:tid 22388] [client 31.171.130.129:21837] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sun Dec 21 02:48:38.660348 2025] [:error] [pid 22338:tid 22387] [client 31.171.130.129:21837] [client 31.171.130.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.129, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aUbvhnGYQSUt-opKpSJU_QAAAEM"]
[Sun Dec 21 02:48:38.974373 2025] [:error] [pid 22338:tid 22408] [client 31.171.130.129:21837] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aUbvhnGYQSUt-opKpSJVAQAAAFc"]
[Sun Dec 21 02:48:43.094882 2025] [:error] [pid 8642:tid 8699] [client 31.171.130.108:33873] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sun Dec 21 02:48:45.138378 2025] [:error] [pid 8642:tid 8729] [client 31.171.130.108:33873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Dec 21 02:48:45.434329 2025] [:error] [pid 8642:tid 8715] [client 31.171.130.108:33873] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aUbvjSJkiik8k41igp1ElgAAAQo"]
[Sun Dec 21 02:48:46.024809 2025] [:error] [pid 43680:tid 43703] [client 31.171.130.142:45151] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Dec 21 02:48:46.957341 2025] [:error] [pid 43680:tid 43698] [client 31.171.130.142:45151] [client 31.171.130.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.142, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aUbvjkDkAAJVjNqC6UXQtwAAAU4"]
[Sun Dec 21 02:48:47.270217 2025] [:error] [pid 43680:tid 43695] [client 31.171.130.142:45151] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sun Dec 21 02:48:47.819561 2025] [:error] [pid 43680:tid 43690] [client 31.171.130.142:45151] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sun Dec 21 02:48:48.132942 2025] [:error] [pid 43680:tid 43684] [client 31.171.130.142:45151] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sun Dec 21 02:48:48.681343 2025] [:error] [pid 43680:tid 43691] [client 31.171.130.142:45151] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aUbvkEDkAAJVjNqC6UXQzAAAAUc"]
[Sun Dec 21 02:48:49.302487 2025] [:error] [pid 43680:tid 43696] [client 31.171.130.122:22169] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Dec 21 02:48:49.622334 2025] [:error] [pid 43680:tid 43705] [client 31.171.130.122:22169] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aUbvkUDkAAJVjNqC6UXQ1wAAAVU"]
[Sun Dec 21 02:48:50.572444 2025] [:error] [pid 8751:tid 8760] [client 31.171.130.121:25187] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Dec 21 02:48:50.885511 2025] [:error] [pid 8751:tid 8772] [client 31.171.130.121:25187] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aUbvkmvrnuGjNP7vtDRv_AAAABM"]
[Sun Dec 21 02:48:52.086901 2025] [:error] [pid 8641:tid 8694] [client 31.171.130.109:32789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sun Dec 21 02:48:52.376386 2025] [:error] [pid 8641:tid 8692] [client 31.171.130.109:32789] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aUbvlHE703usYSvQGLSUxwAAAM0"]
[Sun Dec 21 02:48:52.986475 2025] [:error] [pid 8641:tid 8703] [client 31.171.130.144:51271] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aUbvlHE703usYSvQGLSUygAAANU"]
[Sun Dec 21 02:48:53.892596 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.145:27485] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Dec 21 02:48:54.461615 2025] [:error] [pid 43680:tid 43708] [client 31.171.130.145:27485] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sun Dec 21 02:48:55.750037 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.145:27485] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aUbvl0DkAAJVjNqC6UXRJgAAAVI"]
[Sun Dec 21 02:48:57.670482 2025] [:error] [pid 8751:tid 8767] [client 31.171.130.149:48723] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aUbvmWvrnuGjNP7vtDRwRAAAAA4"]
[Sun Dec 21 02:48:59.249453 2025] [:error] [pid 8642:tid 8722] [client 31.171.130.121:34075] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aUbvmyJkiik8k41igp1FEwAAARE"]
[Sun Dec 21 02:48:59.843986 2025] [:error] [pid 8640:tid 8666] [client 31.171.130.150:43587] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sun Dec 21 02:49:00.487048 2025] [:error] [pid 8640:tid 8673] [client 31.171.130.150:43587] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sun Dec 21 02:49:00.984763 2025] [:error] [pid 8640:tid 8655] [client 31.171.130.150:43587] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aUbvnPVclzlEWWhvYtmbzQAAAIU"]
[Sun Dec 21 02:49:01.719337 2025] [:error] [pid 22338:tid 22384] [client 31.171.130.135:57949] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Dec 21 02:49:02.379438 2025] [:error] [pid 22338:tid 22404] [client 31.171.130.135:57949] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aUbvnnGYQSUt-opKpSJVxQAAAFM"]
[Sun Dec 21 02:49:04.098435 2025] [:error] [pid 44515:tid 44530] [client 31.171.130.139:41263] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aUbvoJZAdBRP9gwGvJ5lLgAAAYw"]
[Sun Dec 21 02:49:05.000034 2025] [:error] [pid 8641:tid 8709] [client 31.171.130.130:44271] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Dec 21 02:49:05.916089 2025] [:error] [pid 8641:tid 8696] [client 31.171.130.130:44271] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sun Dec 21 02:49:06.550242 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.130:44271] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Dec 21 02:49:06.843605 2025] [:error] [pid 8641:tid 8705] [client 31.171.130.130:44271] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aUbvonE703usYSvQGLSVGQAAANY"]
[Sun Dec 21 02:49:07.485472 2025] [:error] [pid 8642:tid 8704] [client 31.171.130.135:44733] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aUbvoyJkiik8k41igp1FTgAAAQM"]
[Sun Dec 21 02:49:08.047329 2025] [:error] [pid 43680:tid 43702] [client 31.171.130.134:62059] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aUbvpEDkAAJVjNqC6UXRyAAAAVI"]
[Sun Dec 21 02:49:08.888512 2025] [:error] [pid 8642:tid 8711] [client 31.171.130.146:55517] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aUbvpCJkiik8k41igp1FUgAAAQc"]
[Sun Dec 21 02:49:09.518089 2025] [:error] [pid 22338:tid 22390] [client 31.171.130.144:31027] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sun Dec 21 02:49:09.815399 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.144:31027] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aUbvpXGYQSUt-opKpSJWIAAAAEI"]
[Sun Dec 21 02:49:10.461459 2025] [:error] [pid 8640:tid 8673] [client 31.171.130.109:42087] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aUbvpvVclzlEWWhvYtmcIAAAAJc"]
[Sun Dec 21 02:49:11.525887 2025] [:error] [pid 22338:tid 22404] [client 31.171.130.115:38627] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sun Dec 21 02:49:12.100179 2025] [:error] [pid 22338:tid 22388] [client 31.171.130.115:38627] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aUbvqHGYQSUt-opKpSJWQgAAAEQ"]
[Sun Dec 21 02:49:12.758958 2025] [:error] [pid 8641:tid 8678] [client 31.171.130.122:31573] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aUbvqHE703usYSvQGLSVUQAAAMA"]
[Sun Dec 21 02:49:13.402445 2025] [:error] [pid 8640:tid 8663] [client 31.171.130.116:21279] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aUbvqfVclzlEWWhvYtmcNQAAAI0"]
[Sun Dec 21 02:49:14.063321 2025] [:error] [pid 22338:tid 22405] [client 31.171.130.112:51669] [client 31.171.130.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aUbvqnGYQSUt-opKpSJWUgAAAFQ"]
[Sun Dec 21 02:49:14.933781 2025] [:error] [pid 8640:tid 8669] [client 31.171.130.110:42283] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aUbvqvVclzlEWWhvYtmcPwAAAJM"]
[Sun Dec 21 02:49:16.202495 2025] [:error] [pid 43680:tid 43701] [client 31.171.130.111:62463] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aUbvrEDkAAJVjNqC6UXSBgAAAVE"]
[Sun Dec 21 02:49:16.805424 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.130:38477] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Dec 21 02:49:17.742381 2025] [:error] [pid 8641:tid 8688] [client 31.171.130.130:38477] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sun Dec 21 02:49:18.052443 2025] [:error] [pid 8641:tid 8700] [client 31.171.130.130:38477] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aUbvrnE703usYSvQGLSVjgAAANM"]
[Sun Dec 21 02:49:18.967523 2025] [:error] [pid 8751:tid 8775] [client 31.171.130.164:39083] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sun Dec 21 02:49:19.529817 2025] [:error] [pid 8751:tid 8759] [client 31.171.130.164:39083] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Dec 21 02:49:21.252392 2025] [:error] [pid 8751:tid 8755] [client 31.171.130.164:39083] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aUbvsWvrnuGjNP7vtDRw9wAAAAI"]
[Sun Dec 21 02:49:22.754437 2025] [:error] [pid 44515:tid 44541] [client 31.171.130.113:45889] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aUbvspZAdBRP9gwGvJ5mDQAAAZc"]
[Sun Dec 21 02:49:23.316205 2025] [:error] [pid 8642:tid 8720] [client 31.171.130.141:32255] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aUbvsyJkiik8k41igp1FzgAAAQ8"]
[Sun Dec 21 02:49:25.150778 2025] [:error] [pid 8642:tid 8727] [client 31.171.130.129:49813] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aUbvtSJkiik8k41igp1F6AAAARY"]
[Sun Dec 21 02:49:26.396712 2025] [:error] [pid 22338:tid 22402] [client 31.171.130.150:57385] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sun Dec 21 02:49:26.679155 2025] [:error] [pid 22338:tid 22386] [client 31.171.130.150:57385] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Dec 21 02:49:26.982872 2025] [:error] [pid 22338:tid 22401] [client 31.171.130.150:57385] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sun Dec 21 02:49:27.279949 2025] [:error] [pid 22338:tid 22389] [client 31.171.130.150:57385] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sun Dec 21 02:49:29.008193 2025] [:error] [pid 22338:tid 22402] [client 31.171.130.150:57385] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aUbvuHGYQSUt-opKpSJW9QAAAFE"]
[Sun Dec 21 02:49:29.635501 2025] [:error] [pid 8751:tid 8770] [client 31.171.130.162:62199] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aUbvuWvrnuGjNP7vtDRxDwAAABE"]
[Sun Dec 21 02:49:30.206375 2025] [:error] [pid 43680:tid 43691] [client 31.171.130.163:57321] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aUbvukDkAAJVjNqC6UXSbwAAAUc"]
[Sun Dec 21 02:49:30.822561 2025] [:error] [pid 22338:tid 22406] [client 31.171.130.165:55743] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aUbvunGYQSUt-opKpSJXAAAAAFU"]
[Sun Dec 21 02:49:31.521317 2025] [:error] [pid 8751:tid 8762] [client 31.171.130.144:57573] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aUbvu2vrnuGjNP7vtDRxFgAAAAk"]
[Sun Dec 21 02:49:32.144434 2025] [:error] [pid 8641:tid 8687] [client 31.171.130.157:39255] [client 31.171.130.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aUbvvHE703usYSvQGLSWIwAAAMk"]
[Sun Dec 21 02:49:33.015442 2025] [:error] [pid 8641:tid 8690] [client 31.171.130.152:26771] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aUbvvXE703usYSvQGLSWLQAAAMw"]
[Sun Dec 21 02:49:36.248564 2025] [:error] [pid 8640:tid 8660] [client 31.171.130.122:56925] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aUbvwPVclzlEWWhvYtmc9QAAAIo"]
[Sun Dec 21 02:49:36.872480 2025] [:error] [pid 44515:tid 44538] [client 31.171.130.162:28889] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aUbvwJZAdBRP9gwGvJ5mXQAAAZQ"]
[Sun Dec 21 02:49:37.840238 2025] [:error] [pid 43680:tid 43684] [client 31.171.130.116:46951] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aUbvwUDkAAJVjNqC6UXSsAAAAUA"]
[Sun Dec 21 02:49:39.020377 2025] [:error] [pid 44515:tid 44519] [client 31.171.130.121:43041] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aUbvw5ZAdBRP9gwGvJ5mZwAAAYE"]
[Sun Dec 21 02:49:40.148404 2025] [:error] [pid 44515:tid 44521] [client 31.171.130.152:63147] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aUbvxJZAdBRP9gwGvJ5mcgAAAYM"]
[Sun Dec 21 04:11:54.898872 2025] [:error] [pid 20760:tid 20786] [client 182.44.10.67:59053] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUcDCuXEVvRTAtWo3gmDTgAAANc"]
[Sun Dec 21 05:49:02.658743 2025] [:error] [pid 20675:tid 20716] [client 43.166.129.247:56694] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUcZzryUvZnd3bHSR3YKFQAAAEo"]
[Sun Dec 21 06:40:32.192407 2025] [:error] [pid 20674:tid 20693] [client 103.65.236.149:55686] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aUcl4NhSbhHOCK6TAw8kkQAAAA8"]
[Sun Dec 21 06:40:32.741788 2025] [:error] [pid 20675:tid 20720] [client 103.65.236.149:51071] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aUcl4LyUvZnd3bHSR3YcIAAAAE4"]
[Sun Dec 21 10:04:38.293045 2025] [:error] [pid 12191:tid 12209] [client 43.153.87.54:46192] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUdVtgM0m463UZmqdiAyvQAAARA"]
[Sun Dec 21 16:27:19.589702 2025] [:error] [pid 20676:tid 20749] [client 117.33.163.216:56946] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUevZ6pSa967F4pOO5xhaAAAAJA"]
[Sun Dec 21 19:25:46.379604 2025] [:error] [pid 59070:tid 59152] [client 104.208.78.224:14673] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUfZOn3dhXne9KX1kgIGewAAAJg"]
[Sun Dec 21 19:25:47.917372 2025] [:error] [pid 59067:tid 59089] [client 104.208.78.224:65336] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUfZO8tpsOP1NfIK_qItagAAAA8"]
[Sun Dec 21 19:25:49.692307 2025] [:error] [pid 59068:tid 59122] [client 104.208.78.224:65338] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUfZPRmLyLqWUlrjwydZpQAAAFU"]
[Sun Dec 21 19:25:55.206974 2025] [:error] [pid 59067:tid 59077] [client 104.208.78.224:14698] [client 104.208.78.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aUfZQ8tpsOP1NfIK_qIteAAAAAM"]
[Sun Dec 21 20:41:52.232394 2025] [:error] [pid 59158:tid 59163] [client 165.227.125.5:55442] [client 165.227.125.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aUfrEI7NvyNF8ab5VgUyagAAAMM"]
[Sun Dec 21 22:56:37.506462 2025] [:error] [pid 59158:tid 59176] [client 182.40.104.255:36452] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUgKpY7NvyNF8ab5VgVwTAAAANA"]
[Sun Dec 21 23:05:11.461144 2025] [:error] [pid 65237:tid 65258] [client 162.62.213.165:58512] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUgMp1VJYjxIpnUJfgJqQQAAAZM"]
[Mon Dec 22 00:09:51.744022 2025] [:error] [pid 45308:tid 45351] [client 201.10.49.40:63937] [client 201.10.49.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 201.10.49.40, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUgbz2QKrTzAeGeriX2xZQAAAIc"]
[Mon Dec 22 00:09:51.749388 2025] [:error] [pid 45308:tid 45351] [client 201.10.49.40:63937] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Dec 22 02:51:29.103907 2025] [:error] [pid 46403:tid 46406] [client 157.245.3.60:50618] [client 157.245.3.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aUhBsVuzQIlydmAwinpwpAAAAYE"]
[Mon Dec 22 07:37:29.692251 2025] [:error] [pid 33472:tid 33516] [client 52.13.171.147:50651] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUiEuZ5p2WQpPIK8HAkwUQAAAY8"]
[Mon Dec 22 07:37:30.079803 2025] [:error] [pid 33643:tid 33665] [client 52.13.171.147:54400] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUiEukoNwyN4xVhAvNONCwAAApM"]
[Mon Dec 22 07:37:30.469373 2025] [:error] [pid 58079:tid 58133] [client 52.13.171.147:62274] [client 52.13.171.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aUiEunxLB7WYaNS5A7jaQAAAAFQ"]
[Mon Dec 22 10:04:51.323327 2025] [:error] [pid 58079:tid 58130] [client 49.51.178.45:37814] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUinQ3xLB7WYaNS5A7j0zgAAAFE"]
[Mon Dec 22 16:19:48.655680 2025] [:error] [pid 33440:tid 33448] [client 43.130.3.120:60512] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUj_JJOsUWKqgxu6QTTwTwAAAQY"]
[Mon Dec 22 19:00:05.669108 2025] [:error] [pid 58172:tid 58175] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Mon Dec 22 19:00:05.808230 2025] [:error] [pid 58172:tid 58176] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Dec 22 19:00:05.924506 2025] [:error] [pid 58172:tid 58177] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Dec 22 19:00:06.040523 2025] [:error] [pid 58172:tid 58198] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Dec 22 19:00:06.178858 2025] [:error] [pid 58172:tid 58194] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Mon Dec 22 19:00:06.314404 2025] [:error] [pid 58172:tid 58182] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Mon Dec 22 19:00:06.443807 2025] [:error] [pid 58172:tid 58187] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Mon Dec 22 19:00:06.565426 2025] [:error] [pid 58172:tid 58188] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Dec 22 19:00:06.687445 2025] [:error] [pid 58172:tid 58178] [client 4.214.48.229:11605] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Mon Dec 22 19:00:06.805447 2025] [:error] [pid 58172:tid 58193] [client 4.214.48.229:11605] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aUkktuSVKDT5jWOcnSXNtgAAANM"]
[Mon Dec 22 19:00:07.057635 2025] [:error] [pid 56155:tid 56235] [client 4.214.48.229:11586] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aUkkt2G8a3wQucsuN67dpAAAA40"]
[Mon Dec 22 19:00:07.322400 2025] [:error] [pid 58078:tid 58097] [client 4.214.48.229:11620] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aUkkt5WKg9Bf8njHlB4adQAAAA4"]
[Mon Dec 22 19:00:07.612440 2025] [:error] [pid 56155:tid 56232] [client 4.214.48.229:11548] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aUkkt2G8a3wQucsuN67dqAAAA4o"]
[Mon Dec 22 19:00:07.920615 2025] [:error] [pid 33472:tid 33504] [client 4.214.48.229:11532] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aUkkt55p2WQpPIK8HAkYVAAAAYM"]
[Mon Dec 22 19:00:08.192462 2025] [:error] [pid 56044:tid 56064] [client 4.214.48.229:11642] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aUkkuO60uUaieriJqP1XvAAAAJA"]
[Mon Dec 22 19:00:08.477187 2025] [:error] [pid 33472:tid 33523] [client 4.214.48.229:11616] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aUkkuJ5p2WQpPIK8HAkYVgAAAZY"]
[Mon Dec 22 19:00:08.776904 2025] [:error] [pid 33472:tid 33522] [client 4.214.48.229:11629] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aUkkuJ5p2WQpPIK8HAkYVwAAAZU"]
[Mon Dec 22 19:00:09.093858 2025] [:error] [pid 33472:tid 33507] [client 4.214.48.229:11526] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aUkkuZ5p2WQpPIK8HAkYWAAAAYY"]
[Mon Dec 22 19:00:09.423256 2025] [:error] [pid 33535:tid 33552] [client 4.214.48.229:11557] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aUkkuWOCI8D9Xtn-n7SodwAAAc8"]
[Mon Dec 22 19:00:09.714725 2025] [:error] [pid 56155:tid 56241] [client 4.214.48.229:11524] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aUkkuWG8a3wQucsuN67dqgAAA5M"]
[Mon Dec 22 19:00:10.025477 2025] [:error] [pid 58172:tid 58189] [client 4.214.48.229:11647] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aUkkuuSVKDT5jWOcnSXNuAAAAM8"]
[Mon Dec 22 19:00:10.332565 2025] [:error] [pid 33472:tid 33509] [client 4.214.48.229:11535] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aUkkup5p2WQpPIK8HAkYXQAAAYg"]
[Mon Dec 22 19:00:10.619382 2025] [:error] [pid 33472:tid 33502] [client 4.214.48.229:11561] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aUkkup5p2WQpPIK8HAkYXgAAAYE"]
[Mon Dec 22 19:00:10.883113 2025] [:error] [pid 58172:tid 58186] [client 4.214.48.229:11596] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aUkkuuSVKDT5jWOcnSXNuwAAAMw"]
[Mon Dec 22 19:00:11.140342 2025] [:error] [pid 33440:tid 33450] [client 4.214.48.229:11551] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aUkku5OsUWKqgxu6QTQaXwAAAQg"]
[Mon Dec 22 19:00:11.410187 2025] [:error] [pid 33472:tid 33524] [client 4.214.48.229:11646] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aUkku55p2WQpPIK8HAkYYQAAAZc"]
[Mon Dec 22 19:00:11.654628 2025] [:error] [pid 56080:tid 56127] [client 4.214.48.229:11644] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aUkku5IHT3YJq9hjDc7RegAAAwM"]
[Mon Dec 22 19:00:11.907958 2025] [:error] [pid 33564:tid 33577] [client 4.214.48.229:11538] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aUkkuwSHeG6oLmMnKY6mmQAAAgo"]
[Mon Dec 22 19:00:12.178460 2025] [:error] [pid 58078:tid 58088] [client 4.214.48.229:11559] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aUkkvJWKg9Bf8njHlB4adwAAAAU"]
[Mon Dec 22 19:00:12.486697 2025] [:error] [pid 33472:tid 33503] [client 4.214.48.229:11552] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aUkkvJ5p2WQpPIK8HAkYZAAAAYI"]
[Mon Dec 22 19:00:12.811563 2025] [:error] [pid 33564:tid 33590] [client 4.214.48.229:11628] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aUkkvASHeG6oLmMnKY6mmwAAAhc"]
[Mon Dec 22 19:00:13.047098 2025] [:error] [pid 33471:tid 33485] [client 4.214.48.229:11588] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aUkkvb5BeNE7regJ7iwz-QAAAUs"]
[Mon Dec 22 19:00:13.295452 2025] [:error] [pid 58172:tid 58177] [client 4.214.48.229:11533] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aUkkveSVKDT5jWOcnSXNvwAAAMM"]
[Mon Dec 22 19:00:13.571135 2025] [:error] [pid 58078:tid 58098] [client 4.214.48.229:11589] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aUkkvZWKg9Bf8njHlB4aegAAAA8"]
[Mon Dec 22 19:00:13.816837 2025] [:error] [pid 56044:tid 56070] [client 4.214.48.229:11606] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aUkkve60uUaieriJqP1XvgAAAJY"]
[Mon Dec 22 19:00:14.044104 2025] [:error] [pid 33535:tid 33554] [client 4.214.48.229:11639] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aUkkvmOCI8D9Xtn-n7SofQAAAdE"]
[Mon Dec 22 19:00:14.302518 2025] [:error] [pid 58172:tid 58194] [client 4.214.48.229:11595] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aUkkvuSVKDT5jWOcnSXNwQAAANQ"]
[Mon Dec 22 19:00:14.531940 2025] [:error] [pid 58172:tid 58197] [client 4.214.48.229:11643] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aUkkvuSVKDT5jWOcnSXNwwAAANc"]
[Mon Dec 22 19:00:14.774221 2025] [:error] [pid 58172:tid 58174] [client 4.214.48.229:11541] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aUkkvuSVKDT5jWOcnSXNxAAAAMA"]
[Mon Dec 22 19:00:15.007821 2025] [:error] [pid 56044:tid 56050] [client 4.214.48.229:11591] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aUkkv-60uUaieriJqP1XvwAAAII"]
[Mon Dec 22 19:00:15.259511 2025] [:error] [pid 58172:tid 58187] [client 4.214.48.229:11584] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aUkkv-SVKDT5jWOcnSXNxQAAAM0"]
[Mon Dec 22 19:00:15.541765 2025] [:error] [pid 58078:tid 58092] [client 4.214.48.229:11564] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aUkkv5WKg9Bf8njHlB4afAAAAAk"]
[Mon Dec 22 19:00:15.862920 2025] [:error] [pid 33471:tid 33498] [client 4.214.48.229:11550] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aUkkv75BeNE7regJ7iwz-wAAAVg"]
[Mon Dec 22 19:00:16.150139 2025] [:error] [pid 33471:tid 33476] [client 4.214.48.229:11617] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aUkkwL5BeNE7regJ7iwz_AAAAUI"]
[Mon Dec 22 19:00:16.430462 2025] [:error] [pid 33440:tid 33457] [client 4.214.48.229:8764] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aUkkwJOsUWKqgxu6QTQaZQAAAQ8"]
[Mon Dec 22 19:00:16.705723 2025] [:error] [pid 33471:tid 33475] [client 4.214.48.229:8759] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUkkwL5BeNE7regJ7iwz_wAAAUE"]
[Mon Dec 22 19:00:16.991240 2025] [:error] [pid 58172:tid 58175] [client 4.214.48.229:11529] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUkkwOSVKDT5jWOcnSXN0AAAAME"]
[Mon Dec 22 19:00:17.227283 2025] [:error] [pid 33535:tid 33560] [client 4.214.48.229:11560] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUkkwWOCI8D9Xtn-n7SofwAAAdc"]
[Mon Dec 22 19:00:17.479442 2025] [:error] [pid 58078:tid 58102] [client 4.214.48.229:11534] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aUkkwZWKg9Bf8njHlB4asgAAABM"]
[Mon Dec 22 19:00:17.760315 2025] [:error] [pid 33564:tid 33574] [client 4.214.48.229:11545] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aUkkwQSHeG6oLmMnKY6moQAAAgc"]
[Mon Dec 22 19:00:18.072622 2025] [:error] [pid 33472:tid 33502] [client 4.214.48.229:11615] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aUkkwp5p2WQpPIK8HAkYZwAAAYE"]
[Mon Dec 22 19:00:18.334524 2025] [:error] [pid 56044:tid 56048] [client 4.214.48.229:8711] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aUkkwu60uUaieriJqP1XwQAAAIA"]
[Mon Dec 22 19:00:18.587561 2025] [:error] [pid 33535:tid 33557] [client 4.214.48.229:11556] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aUkkwmOCI8D9Xtn-n7SoggAAAdQ"]
[Mon Dec 22 19:00:18.836629 2025] [:error] [pid 58078:tid 58092] [client 4.214.48.229:8707] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aUkkwpWKg9Bf8njHlB4azgAAAAk"]
[Mon Dec 22 19:00:19.111044 2025] [:error] [pid 56155:tid 56235] [client 4.214.48.229:11558] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aUkkw2G8a3wQucsuN67dsQAAA40"]
[Mon Dec 22 19:00:19.338615 2025] [:error] [pid 33564:tid 33569] [client 4.214.48.229:11521] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aUkkwwSHeG6oLmMnKY6mowAAAgI"]
[Mon Dec 22 19:00:19.584434 2025] [:error] [pid 33471:tid 33493] [client 4.214.48.229:11622] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aUkkw75BeNE7regJ7iw0BAAAAVM"]
[Mon Dec 22 19:00:19.871591 2025] [:error] [pid 33564:tid 33581] [client 4.214.48.229:11539] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aUkkwwSHeG6oLmMnKY6mpAAAAg4"]
[Mon Dec 22 19:00:20.099890 2025] [:error] [pid 33472:tid 33504] [client 4.214.48.229:11621] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aUkkxJ5p2WQpPIK8HAkYagAAAYM"]
[Mon Dec 22 19:00:20.352404 2025] [:error] [pid 33440:tid 33443] [client 4.214.48.229:11627] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aUkkxJOsUWKqgxu6QTQaZwAAAQE"]
[Mon Dec 22 19:00:20.614140 2025] [:error] [pid 58078:tid 58090] [client 4.214.48.229:8744] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aUkkxJWKg9Bf8njHlB4a2QAAAAc"]
[Mon Dec 22 19:00:20.876125 2025] [:error] [pid 33535:tid 33550] [client 4.214.48.229:11528] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aUkkxGOCI8D9Xtn-n7SohAAAAc0"]
[Mon Dec 22 19:00:21.110166 2025] [:error] [pid 33564:tid 33578] [client 4.214.48.229:11630] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aUkkxQSHeG6oLmMnKY6mpgAAAgs"]
[Mon Dec 22 19:00:21.353412 2025] [:error] [pid 58078:tid 58092] [client 4.214.48.229:11631] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aUkkxZWKg9Bf8njHlB4a2wAAAAk"]
[Mon Dec 22 19:00:21.607559 2025] [:error] [pid 58172:tid 58186] [client 4.214.48.229:11634] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aUkkxeSVKDT5jWOcnSXN4QAAAMw"]
[Mon Dec 22 19:00:21.873884 2025] [:error] [pid 33440:tid 33446] [client 4.214.48.229:8705] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aUkkxZOsUWKqgxu6QTQaaAAAAQQ"]
[Mon Dec 22 19:00:22.122936 2025] [:error] [pid 33472:tid 33521] [client 4.214.48.229:11612] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aUkkxp5p2WQpPIK8HAkYbQAAAZQ"]
[Mon Dec 22 19:00:22.364493 2025] [:error] [pid 58078:tid 58097] [client 4.214.48.229:11537] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aUkkxpWKg9Bf8njHlB4a3gAAAA4"]
[Mon Dec 22 19:00:22.601231 2025] [:error] [pid 33535:tid 33540] [client 4.214.48.229:8738] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aUkkxmOCI8D9Xtn-n7SohwAAAcM"]
[Mon Dec 22 19:00:22.854190 2025] [:error] [pid 56155:tid 56237] [client 4.214.48.229:8762] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aUkkxmG8a3wQucsuN67dtgAAA48"]
[Mon Dec 22 19:00:23.088753 2025] [:error] [pid 56080:tid 56134] [client 4.214.48.229:11641] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aUkkx5IHT3YJq9hjDc7R9wAAAwo"]
[Mon Dec 22 19:00:23.327743 2025] [:error] [pid 33564:tid 33590] [client 4.214.48.229:11549] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aUkkxwSHeG6oLmMnKY6mqAAAAhc"]
[Mon Dec 22 19:00:23.556884 2025] [:error] [pid 33472:tid 33524] [client 4.214.48.229:11530] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aUkkx55p2WQpPIK8HAkYbwAAAZc"]
[Mon Dec 22 19:00:23.827084 2025] [:error] [pid 58172:tid 58184] [client 4.214.48.229:11571] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aUkkx-SVKDT5jWOcnSXN4wAAAMo"]
[Mon Dec 22 19:00:24.066126 2025] [:error] [pid 33471:tid 33481] [client 4.214.48.229:8737] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aUkkyL5BeNE7regJ7iw0BwAAAUc"]
[Mon Dec 22 19:00:24.341073 2025] [:error] [pid 33535:tid 33541] [client 4.214.48.229:11554] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aUkkyGOCI8D9Xtn-n7SoiAAAAcQ"]
[Mon Dec 22 19:00:24.574387 2025] [:error] [pid 33472:tid 33507] [client 4.214.48.229:8906] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aUkkyJ5p2WQpPIK8HAkYcgAAAYY"]
[Mon Dec 22 19:00:24.810146 2025] [:error] [pid 33535:tid 33544] [client 4.214.48.229:11520] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aUkkyGOCI8D9Xtn-n7SoiQAAAcc"]
[Mon Dec 22 19:00:25.068336 2025] [:error] [pid 33440:tid 33463] [client 4.214.48.229:11637] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aUkkyZOsUWKqgxu6QTQaawAAARU"]
[Mon Dec 22 19:00:25.321697 2025] [:error] [pid 33440:tid 33450] [client 4.214.48.229:11574] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aUkkyZOsUWKqgxu6QTQabAAAAQg"]
[Mon Dec 22 19:00:25.554260 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:11609] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aUkkyZWKg9Bf8njHlB4a5AAAABI"]
[Mon Dec 22 19:00:25.802732 2025] [:error] [pid 33535:tid 33561] [client 4.214.48.229:8742] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUkkyWOCI8D9Xtn-n7SoiwAAAdg"]
[Mon Dec 22 19:00:26.048059 2025] [:error] [pid 33440:tid 33464] [client 4.214.48.229:8748] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUkkypOsUWKqgxu6QTQabQAAARY"]
[Mon Dec 22 19:00:26.284014 2025] [:error] [pid 56080:tid 56136] [client 4.214.48.229:11582] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUkkypIHT3YJq9hjDc7R-gAAAww"]
[Mon Dec 22 19:00:26.512541 2025] [:error] [pid 56155:tid 56230] [client 4.214.48.229:11619] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aUkkymG8a3wQucsuN67duAAAA4g"]
[Mon Dec 22 19:00:26.747053 2025] [:error] [pid 58172:tid 58189] [client 4.214.48.229:11645] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUkkyuSVKDT5jWOcnSXN6QAAAM8"]
[Mon Dec 22 19:00:27.030219 2025] [:error] [pid 56080:tid 56127] [client 4.214.48.229:11625] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUkky5IHT3YJq9hjDc7R-wAAAwM"]
[Mon Dec 22 19:00:27.266200 2025] [:error] [pid 33564:tid 33589] [client 4.214.48.229:11523] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUkkywSHeG6oLmMnKY6mrgAAAhY"]
[Mon Dec 22 19:00:27.501654 2025] [:error] [pid 33564:tid 33580] [client 4.214.48.229:11600] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUkkywSHeG6oLmMnKY6mrwAAAg0"]
[Mon Dec 22 19:00:27.748710 2025] [:error] [pid 56044:tid 56051] [client 4.214.48.229:11604] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aUkky-60uUaieriJqP1XxwAAAIM"]
[Mon Dec 22 19:00:27.990837 2025] [:error] [pid 56155:tid 56240] [client 4.214.48.229:11635] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aUkky2G8a3wQucsuN67duwAAA5I"]
[Mon Dec 22 19:00:28.224619 2025] [:error] [pid 56044:tid 56072] [client 4.214.48.229:11579] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aUkkzO60uUaieriJqP1XygAAAJg"]
[Mon Dec 22 19:00:28.460022 2025] [:error] [pid 56155:tid 56244] [client 4.214.48.229:8729] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aUkkzGG8a3wQucsuN67dvgAAA5Y"]
[Mon Dec 22 19:00:28.687103 2025] [:error] [pid 58172:tid 58179] [client 4.214.48.229:11547] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUkkzOSVKDT5jWOcnSXN6gAAAMU"]
[Mon Dec 22 19:00:28.947754 2025] [:error] [pid 33471:tid 33495] [client 4.214.48.229:11573] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUkkzL5BeNE7regJ7iw0CAAAAVU"]
[Mon Dec 22 19:00:29.218188 2025] [:error] [pid 33471:tid 33496] [client 4.214.48.229:11575] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUkkzb5BeNE7regJ7iw0CQAAAVY"]
[Mon Dec 22 19:00:29.457734 2025] [:error] [pid 33440:tid 33449] [client 4.214.48.229:11603] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aUkkzZOsUWKqgxu6QTQacAAAAQc"]
[Mon Dec 22 19:00:29.687045 2025] [:error] [pid 56080:tid 56148] [client 4.214.48.229:11593] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aUkkzZIHT3YJq9hjDc7SCgAAAxg"]
[Mon Dec 22 19:00:29.989783 2025] [:error] [pid 56044:tid 56070] [client 4.214.48.229:11570] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aUkkze60uUaieriJqP1XzgAAAJY"]
[Mon Dec 22 19:00:30.217828 2025] [:error] [pid 56080:tid 56136] [client 4.214.48.229:11540] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aUkkzpIHT3YJq9hjDc7SDQAAAww"]
[Mon Dec 22 19:00:30.445914 2025] [:error] [pid 58172:tid 58176] [client 4.214.48.229:8719] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aUkkzuSVKDT5jWOcnSXN7QAAAMI"]
[Mon Dec 22 19:00:30.672511 2025] [:error] [pid 56080:tid 56126] [client 4.214.48.229:8802] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aUkkzpIHT3YJq9hjDc7SDgAAAwI"]
[Mon Dec 22 19:00:30.898643 2025] [:error] [pid 33564:tid 33569] [client 4.214.48.229:8774] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aUkkzgSHeG6oLmMnKY6msQAAAgI"]
[Mon Dec 22 19:00:31.133809 2025] [:error] [pid 33471:tid 33488] [client 4.214.48.229:11597] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aUkkz75BeNE7regJ7iw0FgAAAU4"]
[Mon Dec 22 19:00:31.380900 2025] [:error] [pid 33472:tid 33523] [client 4.214.48.229:8720] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aUkkz55p2WQpPIK8HAkYeQAAAZY"]
[Mon Dec 22 19:00:31.607018 2025] [:error] [pid 58078:tid 58095] [client 4.214.48.229:8745] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aUkkz5WKg9Bf8njHlB4a5QAAAAw"]
[Mon Dec 22 19:00:31.861353 2025] [:error] [pid 56080:tid 56124] [client 4.214.48.229:11544] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aUkkz5IHT3YJq9hjDc7SEwAAAwA"]
[Mon Dec 22 19:00:32.121608 2025] [:error] [pid 56080:tid 56132] [client 4.214.48.229:8706] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aUkk0JIHT3YJq9hjDc7SFAAAAwg"]
[Mon Dec 22 19:00:32.359280 2025] [:error] [pid 33440:tid 33457] [client 4.214.48.229:11608] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aUkk0JOsUWKqgxu6QTQacwAAAQ8"]
[Mon Dec 22 19:00:32.621913 2025] [:error] [pid 56080:tid 56141] [client 4.214.48.229:11585] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUkk0JIHT3YJq9hjDc7SGAAAAxE"]
[Mon Dec 22 19:00:32.854938 2025] [:error] [pid 33440:tid 33465] [client 4.214.48.229:11576] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUkk0JOsUWKqgxu6QTQadAAAARc"]
[Mon Dec 22 19:00:33.119898 2025] [:error] [pid 33472:tid 33507] [client 4.214.48.229:11624] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUkk0Z5p2WQpPIK8HAkYegAAAYY"]
[Mon Dec 22 19:00:33.356064 2025] [:error] [pid 56080:tid 56144] [client 4.214.48.229:11553] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aUkk0ZIHT3YJq9hjDc7SIgAAAxQ"]
[Mon Dec 22 19:00:33.607219 2025] [:error] [pid 33440:tid 33466] [client 4.214.48.229:11599] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aUkk0ZOsUWKqgxu6QTQadQAAARg"]
[Mon Dec 22 19:00:33.852218 2025] [:error] [pid 56044:tid 56064] [client 4.214.48.229:11566] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aUkk0e60uUaieriJqP1X9AAAAJA"]
[Mon Dec 22 19:00:34.188563 2025] [:error] [pid 56044:tid 56057] [client 4.214.48.229:8728] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aUkk0u60uUaieriJqP1YAAAAAIk"]
[Mon Dec 22 19:00:34.442441 2025] [:error] [pid 56044:tid 56066] [client 4.214.48.229:11632] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aUkk0u60uUaieriJqP1YCgAAAJI"]
[Mon Dec 22 19:00:34.681564 2025] [:error] [pid 58078:tid 58089] [client 4.214.48.229:11638] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk0pWKg9Bf8njHlB4a9AAAAAY"]
[Mon Dec 22 19:00:34.919090 2025] [:error] [pid 33535:tid 33552] [client 4.214.48.229:8769] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk0mOCI8D9Xtn-n7SojQAAAc8"]
[Mon Dec 22 19:00:35.167472 2025] [:error] [pid 58078:tid 58086] [client 4.214.48.229:8725] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk05WKg9Bf8njHlB4a-gAAAAM"]
[Mon Dec 22 19:00:35.398902 2025] [:error] [pid 33440:tid 33461] [client 4.214.48.229:11640] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk05OsUWKqgxu6QTQadwAAARM"]
[Mon Dec 22 19:00:35.652437 2025] [:error] [pid 56044:tid 56053] [client 4.214.48.229:11583] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUkk0-60uUaieriJqP1YLAAAAIU"]
[Mon Dec 22 19:00:35.908141 2025] [:error] [pid 58078:tid 58099] [client 4.214.48.229:8788] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUkk05WKg9Bf8njHlB4bBQAAABA"]
[Mon Dec 22 19:00:36.163492 2025] [:error] [pid 56080:tid 56141] [client 4.214.48.229:11607] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUkk1JIHT3YJq9hjDc7SPgAAAxE"]
[Mon Dec 22 19:00:36.431824 2025] [:error] [pid 33535:tid 33543] [client 4.214.48.229:11531] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aUkk1GOCI8D9Xtn-n7SokAAAAcY"]
[Mon Dec 22 19:00:36.682358 2025] [:error] [pid 33471:tid 33476] [client 4.214.48.229:8722] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUkk1L5BeNE7regJ7iw0HgAAAUI"]
[Mon Dec 22 19:00:36.938083 2025] [:error] [pid 56080:tid 56130] [client 4.214.48.229:8777] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUkk1JIHT3YJq9hjDc7SQwAAAwY"]
[Mon Dec 22 19:00:37.186558 2025] [:error] [pid 58172:tid 58185] [client 4.214.48.229:11562] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUkk1eSVKDT5jWOcnSXN8wAAAMs"]
[Mon Dec 22 19:00:37.451896 2025] [:error] [pid 58172:tid 58195] [client 4.214.48.229:11614] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aUkk1eSVKDT5jWOcnSXN9AAAANU"]
[Mon Dec 22 19:00:37.687653 2025] [:error] [pid 33535:tid 33553] [client 4.214.48.229:11563] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aUkk1WOCI8D9Xtn-n7SokwAAAdA"]
[Mon Dec 22 19:00:37.934482 2025] [:error] [pid 33564:tid 33571] [client 4.214.48.229:8773] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aUkk1QSHeG6oLmMnKY6mtQAAAgQ"]
[Mon Dec 22 19:00:38.163010 2025] [:error] [pid 33440:tid 33460] [client 4.214.48.229:8739] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aUkk1pOsUWKqgxu6QTQaegAAARI"]
[Mon Dec 22 19:00:38.474902 2025] [:error] [pid 33564:tid 33588] [client 4.214.48.229:11590] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aUkk1gSHeG6oLmMnKY6mtgAAAhU"]
[Mon Dec 22 19:00:38.702914 2025] [:error] [pid 33535:tid 33550] [client 4.214.48.229:11580] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk1mOCI8D9Xtn-n7SolQAAAc0"]
[Mon Dec 22 19:00:38.939961 2025] [:error] [pid 33564:tid 33577] [client 4.214.48.229:11610] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk1gSHeG6oLmMnKY6mtwAAAgo"]
[Mon Dec 22 19:00:39.191920 2025] [:error] [pid 33440:tid 33463] [client 4.214.48.229:8717] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk15OsUWKqgxu6QTQaewAAARU"]
[Mon Dec 22 19:00:39.450079 2025] [:error] [pid 33440:tid 33464] [client 4.214.48.229:11542] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk15OsUWKqgxu6QTQafQAAARY"]
[Mon Dec 22 19:00:39.687337 2025] [:error] [pid 56044:tid 56058] [client 4.214.48.229:8735] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUkk1-60uUaieriJqP1YQwAAAIo"]
[Mon Dec 22 19:00:39.952538 2025] [:error] [pid 56044:tid 56050] [client 4.214.48.229:8724] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUkk1-60uUaieriJqP1YRAAAAII"]
[Mon Dec 22 19:00:40.191270 2025] [:error] [pid 58078:tid 58094] [client 4.214.48.229:8765] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUkk2JWKg9Bf8njHlB4bFAAAAAs"]
[Mon Dec 22 19:00:40.458579 2025] [:error] [pid 58078:tid 58099] [client 4.214.48.229:8920] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aUkk2JWKg9Bf8njHlB4bFgAAABA"]
[Mon Dec 22 19:00:40.703908 2025] [:error] [pid 58078:tid 58092] [client 4.214.48.229:8821] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aUkk2JWKg9Bf8njHlB4bGAAAAAk"]
[Mon Dec 22 19:00:40.965128 2025] [:error] [pid 33440:tid 33449] [client 4.214.48.229:8749] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aUkk2JOsUWKqgxu6QTQagQAAAQc"]
[Mon Dec 22 19:00:41.193488 2025] [:error] [pid 33440:tid 33442] [client 4.214.48.229:11555] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aUkk2ZOsUWKqgxu6QTQaggAAAQA"]
[Mon Dec 22 19:00:41.445021 2025] [:error] [pid 58172:tid 58175] [client 4.214.48.229:8928] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aUkk2eSVKDT5jWOcnSXN-gAAAME"]
[Mon Dec 22 19:00:41.692292 2025] [:error] [pid 33440:tid 33451] [client 4.214.48.229:11525] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aUkk2ZOsUWKqgxu6QTQahAAAAQk"]
[Mon Dec 22 19:00:41.993737 2025] [:error] [pid 33472:tid 33503] [client 4.214.48.229:8734] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aUkk2Z5p2WQpPIK8HAkYiQAAAYI"]
[Mon Dec 22 19:00:42.229166 2025] [:error] [pid 33440:tid 33455] [client 4.214.48.229:8785] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aUkk2pOsUWKqgxu6QTQahQAAAQ0"]
[Mon Dec 22 19:00:42.495520 2025] [:error] [pid 33440:tid 33465] [client 4.214.48.229:11565] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aUkk2pOsUWKqgxu6QTQahgAAARc"]
[Mon Dec 22 19:00:42.757355 2025] [:error] [pid 33471:tid 33492] [client 4.214.48.229:8746] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUkk2r5BeNE7regJ7iw0JQAAAVI"]
[Mon Dec 22 19:00:43.005148 2025] [:error] [pid 33440:tid 33445] [client 4.214.48.229:11567] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUkk25OsUWKqgxu6QTQaiAAAAQM"]
[Mon Dec 22 19:00:43.236121 2025] [:error] [pid 56155:tid 56224] [client 4.214.48.229:8771] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUkk22G8a3wQucsuN67d8gAAA4I"]
[Mon Dec 22 19:00:43.469203 2025] [:error] [pid 33535:tid 33544] [client 4.214.48.229:8822] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aUkk22OCI8D9Xtn-n7SonQAAAcc"]
[Mon Dec 22 19:00:43.698430 2025] [:error] [pid 33564:tid 33587] [client 4.214.48.229:8752] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aUkk2wSHeG6oLmMnKY6mvwAAAhQ"]
[Mon Dec 22 19:00:43.950793 2025] [:error] [pid 58078:tid 58085] [client 4.214.48.229:8730] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aUkk25WKg9Bf8njHlB4bHQAAAAI"]
[Mon Dec 22 19:00:44.192322 2025] [:error] [pid 33440:tid 33461] [client 4.214.48.229:8718] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aUkk3JOsUWKqgxu6QTQaiQAAARM"]
[Mon Dec 22 19:00:44.425909 2025] [:error] [pid 33472:tid 33508] [client 4.214.48.229:8767] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aUkk3J5p2WQpPIK8HAkYiwAAAYc"]
[Mon Dec 22 19:00:44.687928 2025] [:error] [pid 33535:tid 33552] [client 4.214.48.229:11611] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUkk3GOCI8D9Xtn-n7SongAAAc8"]
[Mon Dec 22 19:00:44.935951 2025] [:error] [pid 33440:tid 33454] [client 4.214.48.229:8709] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUkk3JOsUWKqgxu6QTQaiwAAAQw"]
[Mon Dec 22 19:00:45.180866 2025] [:error] [pid 58078:tid 58088] [client 4.214.48.229:11522] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUkk3ZWKg9Bf8njHlB4bHgAAAAU"]
[Mon Dec 22 19:00:45.432727 2025] [:error] [pid 33440:tid 33463] [client 4.214.48.229:11644] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUkk3ZOsUWKqgxu6QTQajQAAARU"]
[Mon Dec 22 19:00:45.685603 2025] [:error] [pid 33440:tid 33459] [client 4.214.48.229:8808] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aUkk3ZOsUWKqgxu6QTQakAAAARE"]
[Mon Dec 22 19:00:45.915201 2025] [:error] [pid 56155:tid 56225] [client 4.214.48.229:8760] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aUkk3WG8a3wQucsuN67d9gAAA4M"]
[Mon Dec 22 19:00:46.161594 2025] [:error] [pid 33440:tid 33456] [client 4.214.48.229:8726] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aUkk3pOsUWKqgxu6QTQakwAAAQ4"]
[Mon Dec 22 19:00:46.411600 2025] [:error] [pid 33471:tid 33484] [client 4.214.48.229:8820] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aUkk3r5BeNE7regJ7iw0KAAAAUo"]
[Mon Dec 22 19:00:46.666435 2025] [:error] [pid 56044:tid 56064] [client 4.214.48.229:8829] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUkk3u60uUaieriJqP1YSgAAAJA"]
[Mon Dec 22 19:00:46.914781 2025] [:error] [pid 33471:tid 33483] [client 4.214.48.229:8704] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUkk3r5BeNE7regJ7iw0KwAAAUk"]
[Mon Dec 22 19:00:47.158624 2025] [:error] [pid 33440:tid 33466] [client 4.214.48.229:8897] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUkk35OsUWKqgxu6QTQamgAAARg"]
[Mon Dec 22 19:00:47.385002 2025] [:error] [pid 58172:tid 58187] [client 4.214.48.229:11533] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aUkk3-SVKDT5jWOcnSXOAAAAAM0"]
[Mon Dec 22 19:00:47.613475 2025] [:error] [pid 33440:tid 33454] [client 4.214.48.229:8708] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aUkk35OsUWKqgxu6QTQamwAAAQw"]
[Mon Dec 22 19:00:47.889416 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:11618] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aUkk35WKg9Bf8njHlB4bIwAAABI"]
[Mon Dec 22 19:00:48.149868 2025] [:error] [pid 33440:tid 33459] [client 4.214.48.229:8768] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aUkk4JOsUWKqgxu6QTQanwAAARE"]
[Mon Dec 22 19:00:48.409096 2025] [:error] [pid 33564:tid 33590] [client 4.214.48.229:8712] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aUkk4ASHeG6oLmMnKY6mxwAAAhc"]
[Mon Dec 22 19:00:48.668623 2025] [:error] [pid 33564:tid 33576] [client 4.214.48.229:8815] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk4ASHeG6oLmMnKY6myAAAAgk"]
[Mon Dec 22 19:00:48.953644 2025] [:error] [pid 33440:tid 33456] [client 4.214.48.229:8740] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk4JOsUWKqgxu6QTQaowAAAQ4"]
[Mon Dec 22 19:00:49.196962 2025] [:error] [pid 58078:tid 58095] [client 4.214.48.229:11587] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk4ZWKg9Bf8njHlB4bJAAAAAw"]
[Mon Dec 22 19:00:49.457710 2025] [:error] [pid 33440:tid 33464] [client 4.214.48.229:8751] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk4ZOsUWKqgxu6QTQapQAAARY"]
[Mon Dec 22 19:00:49.705215 2025] [:error] [pid 33564:tid 33580] [client 4.214.48.229:8903] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aUkk4QSHeG6oLmMnKY6mzAAAAg0"]
[Mon Dec 22 19:00:50.022672 2025] [:error] [pid 33564:tid 33591] [client 4.214.48.229:8819] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aUkk4gSHeG6oLmMnKY6mzQAAAhg"]
[Mon Dec 22 19:00:50.301663 2025] [:error] [pid 33440:tid 33453] [client 4.214.48.229:8741] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aUkk4pOsUWKqgxu6QTQapwAAAQs"]
[Mon Dec 22 19:00:50.533211 2025] [:error] [pid 58172:tid 58183] [client 4.214.48.229:8784] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aUkk4uSVKDT5jWOcnSXOBAAAAMk"]
[Mon Dec 22 19:00:50.760779 2025] [:error] [pid 58078:tid 58100] [client 4.214.48.229:8948] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aUkk4pWKg9Bf8njHlB4bJQAAABE"]
[Mon Dec 22 19:00:51.059377 2025] [:error] [pid 58172:tid 58191] [client 4.214.48.229:11566] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aUkk4-SVKDT5jWOcnSXOCAAAANE"]
[Mon Dec 22 19:00:51.298261 2025] [:error] [pid 33472:tid 33517] [client 4.214.48.229:11543] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aUkk455p2WQpPIK8HAkYjwAAAZA"]
[Mon Dec 22 19:00:51.549684 2025] [:error] [pid 56080:tid 56124] [client 4.214.48.229:8770] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aUkk45IHT3YJq9hjDc7SVwAAAwA"]
[Mon Dec 22 19:00:51.787628 2025] [:error] [pid 33535:tid 33548] [client 4.214.48.229:8830] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUkk42OCI8D9Xtn-n7SooAAAAcs"]
[Mon Dec 22 19:00:52.108350 2025] [:error] [pid 56155:tid 56241] [client 4.214.48.229:11594] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUkk5GG8a3wQucsuN67d-gAAA5M"]
[Mon Dec 22 19:00:52.334047 2025] [:error] [pid 33472:tid 33504] [client 4.214.48.229:8766] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUkk5J5p2WQpPIK8HAkYkQAAAYM"]
[Mon Dec 22 19:00:52.562279 2025] [:error] [pid 33472:tid 33513] [client 4.214.48.229:8707] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aUkk5J5p2WQpPIK8HAkYkgAAAYw"]
[Mon Dec 22 19:00:52.804083 2025] [:error] [pid 33471:tid 33495] [client 4.214.48.229:11527] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aUkk5L5BeNE7regJ7iw0LAAAAVU"]
[Mon Dec 22 19:00:53.087467 2025] [:error] [pid 58172:tid 58184] [client 4.214.48.229:8786] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aUkk5eSVKDT5jWOcnSXODAAAAMo"]
[Mon Dec 22 19:00:53.349501 2025] [:error] [pid 33564:tid 33585] [client 4.214.48.229:8721] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aUkk5QSHeG6oLmMnKY6m0QAAAhI"]
[Mon Dec 22 19:00:53.578389 2025] [:error] [pid 56155:tid 56232] [client 4.214.48.229:8825] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aUkk5WG8a3wQucsuN67d-wAAA4o"]
[Mon Dec 22 19:00:53.817094 2025] [:error] [pid 33472:tid 33516] [client 4.214.48.229:8778] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aUkk5Z5p2WQpPIK8HAkYlwAAAY8"]
[Mon Dec 22 19:00:54.052448 2025] [:error] [pid 56155:tid 56233] [client 4.214.48.229:8800] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aUkk5mG8a3wQucsuN67d_AAAA4s"]
[Mon Dec 22 19:00:54.277263 2025] [:error] [pid 58078:tid 58104] [client 4.214.48.229:8743] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aUkk5pWKg9Bf8njHlB4bKQAAABU"]
[Mon Dec 22 19:00:54.509732 2025] [:error] [pid 33535:tid 33544] [client 4.214.48.229:8794] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aUkk5mOCI8D9Xtn-n7SopQAAAcc"]
[Mon Dec 22 19:00:54.768275 2025] [:error] [pid 33535:tid 33561] [client 4.214.48.229:8781] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aUkk5mOCI8D9Xtn-n7SopwAAAdg"]
[Mon Dec 22 19:00:55.053385 2025] [:error] [pid 33535:tid 33552] [client 4.214.48.229:8823] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aUkk52OCI8D9Xtn-n7SoqQAAAc8"]
[Mon Dec 22 19:00:55.318706 2025] [:error] [pid 33535:tid 33551] [client 4.214.48.229:8761] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aUkk52OCI8D9Xtn-n7SoqwAAAc4"]
[Mon Dec 22 19:00:55.605129 2025] [:error] [pid 56155:tid 56226] [client 4.214.48.229:8955] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aUkk52G8a3wQucsuN67eAAAAA4Q"]
[Mon Dec 22 19:00:55.880739 2025] [:error] [pid 58172:tid 58196] [client 4.214.48.229:11601] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aUkk5-SVKDT5jWOcnSXODgAAANY"]
[Mon Dec 22 19:00:56.185219 2025] [:error] [pid 56155:tid 56221] [client 4.214.48.229:8828] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aUkk6GG8a3wQucsuN67eAgAAA4A"]
[Mon Dec 22 19:00:56.506366 2025] [:error] [pid 56155:tid 56240] [client 4.214.48.229:8789] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aUkk6GG8a3wQucsuN67eAwAAA5I"]
[Mon Dec 22 19:00:56.816997 2025] [:error] [pid 58172:tid 58180] [client 4.214.48.229:11536] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aUkk6OSVKDT5jWOcnSXOEQAAAMY"]
[Mon Dec 22 19:00:57.170842 2025] [:error] [pid 56155:tid 56223] [client 4.214.48.229:11626] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aUkk6WG8a3wQucsuN67eBQAAA4E"]
[Mon Dec 22 19:00:57.481368 2025] [:error] [pid 33440:tid 33462] [client 4.214.48.229:8954] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aUkk6ZOsUWKqgxu6QTQasgAAARQ"]
[Mon Dec 22 19:00:57.784803 2025] [:error] [pid 33440:tid 33456] [client 4.214.48.229:8731] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aUkk6ZOsUWKqgxu6QTQatAAAAQ4"]
[Mon Dec 22 19:00:58.090804 2025] [:error] [pid 56044:tid 56071] [client 4.214.48.229:8799] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aUkk6u60uUaieriJqP1YUAAAAJc"]
[Mon Dec 22 19:00:58.397993 2025] [:error] [pid 58078:tid 58084] [client 4.214.48.229:8758] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aUkk6pWKg9Bf8njHlB4bMAAAAAE"]
[Mon Dec 22 19:00:58.681267 2025] [:error] [pid 56155:tid 56242] [client 4.214.48.229:11592] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aUkk6mG8a3wQucsuN67eCgAAA5Q"]
[Mon Dec 22 19:00:58.964981 2025] [:error] [pid 56155:tid 56231] [client 4.214.48.229:8710] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aUkk6mG8a3wQucsuN67eCwAAA4k"]
[Mon Dec 22 19:00:59.200851 2025] [:error] [pid 56080:tid 56142] [client 4.214.48.229:9043] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aUkk65IHT3YJq9hjDc7SZAAAAxI"]
[Mon Dec 22 19:00:59.425990 2025] [:error] [pid 33535:tid 33554] [client 4.214.48.229:8901] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUkk62OCI8D9Xtn-n7SoswAAAdE"]
[Mon Dec 22 19:00:59.686605 2025] [:error] [pid 56155:tid 56245] [client 4.214.48.229:11623] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUkk62G8a3wQucsuN67eDgAAA5c"]
[Mon Dec 22 19:00:59.918890 2025] [:error] [pid 33472:tid 33508] [client 4.214.48.229:8780] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUkk655p2WQpPIK8HAkYmQAAAYc"]
[Mon Dec 22 19:01:00.224704 2025] [:error] [pid 56155:tid 56229] [client 4.214.48.229:11568] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aUkk7GG8a3wQucsuN67eEgAAA4c"]
[Mon Dec 22 19:01:00.473431 2025] [:error] [pid 33535:tid 33556] [client 4.214.48.229:11569] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aUkk7GOCI8D9Xtn-n7SotQAAAdM"]
[Mon Dec 22 19:01:00.718988 2025] [:error] [pid 33535:tid 33544] [client 4.214.48.229:9068] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aUkk7GOCI8D9Xtn-n7SotwAAAcc"]
[Mon Dec 22 19:01:00.952110 2025] [:error] [pid 56080:tid 56133] [client 4.214.48.229:8818] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aUkk7JIHT3YJq9hjDc7SaAAAAwk"]
[Mon Dec 22 19:01:01.210491 2025] [:error] [pid 33535:tid 33547] [client 4.214.48.229:8756] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aUkk7WOCI8D9Xtn-n7SougAAAco"]
[Mon Dec 22 19:01:01.449151 2025] [:error] [pid 33440:tid 33450] [client 4.214.48.229:8757] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aUkk7ZOsUWKqgxu6QTQavgAAAQg"]
[Mon Dec 22 19:01:01.678719 2025] [:error] [pid 33535:tid 33545] [client 4.214.48.229:8943] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aUkk7WOCI8D9Xtn-n7SovAAAAcg"]
[Mon Dec 22 19:01:01.920364 2025] [:error] [pid 58172:tid 58182] [client 4.214.48.229:8782] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aUkk7eSVKDT5jWOcnSXOHAAAAMg"]
[Mon Dec 22 19:01:02.146452 2025] [:error] [pid 56044:tid 56056] [client 4.214.48.229:8723] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aUkk7u60uUaieriJqP1YUwAAAIg"]
[Mon Dec 22 19:01:02.383740 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:8775] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aUkk7pWKg9Bf8njHlB4bNAAAABI"]
[Mon Dec 22 19:01:02.609350 2025] [:error] [pid 33535:tid 33543] [client 4.214.48.229:8732] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aUkk7mOCI8D9Xtn-n7SovQAAAcY"]
[Mon Dec 22 19:01:02.845631 2025] [:error] [pid 33535:tid 33553] [client 4.214.48.229:9117] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aUkk7mOCI8D9Xtn-n7SovwAAAdA"]
[Mon Dec 22 19:01:03.081206 2025] [:error] [pid 33535:tid 33539] [client 4.214.48.229:9057] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aUkk72OCI8D9Xtn-n7SowAAAAcI"]
[Mon Dec 22 19:01:03.346220 2025] [:error] [pid 58172:tid 58180] [client 4.214.48.229:11613] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aUkk7-SVKDT5jWOcnSXOIAAAAMY"]
[Mon Dec 22 19:01:03.576758 2025] [:error] [pid 56080:tid 56141] [client 4.214.48.229:8817] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aUkk75IHT3YJq9hjDc7SagAAAxE"]
[Mon Dec 22 19:01:03.856829 2025] [:error] [pid 33471:tid 33481] [client 4.214.48.229:8733] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aUkk775BeNE7regJ7iw0LgAAAUc"]
[Mon Dec 22 19:01:04.088147 2025] [:error] [pid 33471:tid 33477] [client 4.214.48.229:8776] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aUkk8L5BeNE7regJ7iw0LwAAAUM"]
[Mon Dec 22 19:01:04.368804 2025] [:error] [pid 58078:tid 58100] [client 4.214.48.229:8926] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk8JWKg9Bf8njHlB4bNQAAABE"]
[Mon Dec 22 19:01:04.604266 2025] [:error] [pid 33472:tid 33502] [client 4.214.48.229:11572] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk8J5p2WQpPIK8HAkYnQAAAYE"]
[Mon Dec 22 19:01:04.849604 2025] [:error] [pid 33471:tid 33494] [client 4.214.48.229:8797] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk8L5BeNE7regJ7iw0MQAAAVQ"]
[Mon Dec 22 19:01:05.160666 2025] [:error] [pid 33564:tid 33581] [client 4.214.48.229:11577] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aUkk8QSHeG6oLmMnKY6m1gAAAg4"]
[Mon Dec 22 19:01:05.439538 2025] [:error] [pid 56155:tid 56233] [client 4.214.48.229:8907] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUkk8WG8a3wQucsuN67eGgAAA4s"]
[Mon Dec 22 19:01:05.672851 2025] [:error] [pid 33440:tid 33453] [client 4.214.48.229:8921] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUkk8ZOsUWKqgxu6QTQaxgAAAQs"]
[Mon Dec 22 19:01:05.910772 2025] [:error] [pid 33472:tid 33515] [client 4.214.48.229:8805] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aUkk8Z5p2WQpPIK8HAkYngAAAY4"]
[Mon Dec 22 19:01:06.139652 2025] [:error] [pid 33440:tid 33449] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon Dec 22 19:01:06.256019 2025] [:error] [pid 33440:tid 33442] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/atom.php
[Mon Dec 22 19:01:06.396694 2025] [:error] [pid 33440:tid 33455] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/case.php
[Mon Dec 22 19:01:06.512831 2025] [:error] [pid 33440:tid 33445] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/docs.php
[Mon Dec 22 19:01:06.629810 2025] [:error] [pid 33440:tid 33444] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/ios.php
[Mon Dec 22 19:01:06.746411 2025] [:error] [pid 33440:tid 33461] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Dec 22 19:01:06.863091 2025] [:error] [pid 33440:tid 33448] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Dec 22 19:01:06.979942 2025] [:error] [pid 33440:tid 33446] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Dec 22 19:01:07.112569 2025] [:error] [pid 33440:tid 33465] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Dec 22 19:01:07.229278 2025] [:error] [pid 33440:tid 33443] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Dec 22 19:01:07.351516 2025] [:error] [pid 33440:tid 33450] [client 4.214.48.229:8787] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Mon Dec 22 19:01:07.465695 2025] [:error] [pid 33440:tid 33463] [client 4.214.48.229:8787] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aUkk85OsUWKqgxu6QTQa0wAAARU"]
[Mon Dec 22 19:01:07.703155 2025] [:error] [pid 58172:tid 58178] [client 4.214.48.229:8813] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aUkk8-SVKDT5jWOcnSXOJAAAAMQ"]
[Mon Dec 22 19:01:07.939766 2025] [:error] [pid 58078:tid 58083] [client 4.214.48.229:8743] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aUkk85WKg9Bf8njHlB4bOQAAAAA"]
[Mon Dec 22 19:01:08.166244 2025] [:error] [pid 33535:tid 33561] [client 4.214.48.229:8827] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aUkk9GOCI8D9Xtn-n7SoyAAAAdg"]
[Mon Dec 22 19:01:08.394401 2025] [:error] [pid 58078:tid 58088] [client 4.214.48.229:8902] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aUkk9JWKg9Bf8njHlB4bPAAAAAU"]
[Mon Dec 22 19:01:08.681231 2025] [:error] [pid 56080:tid 56132] [client 4.214.48.229:8804] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aUkk9JIHT3YJq9hjDc7ScQAAAwg"]
[Mon Dec 22 19:01:08.943574 2025] [:error] [pid 33535:tid 33552] [client 4.214.48.229:9025] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aUkk9GOCI8D9Xtn-n7SoyQAAAc8"]
[Mon Dec 22 19:01:09.217558 2025] [:error] [pid 33471:tid 33479] [client 4.214.48.229:8952] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aUkk9b5BeNE7regJ7iw0OAAAAUU"]
[Mon Dec 22 19:01:09.463215 2025] [:error] [pid 33471:tid 33480] [client 4.214.48.229:8727] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUkk9b5BeNE7regJ7iw0OQAAAUY"]
[Mon Dec 22 19:01:09.775451 2025] [:error] [pid 33440:tid 33452] [client 4.214.48.229:8798] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUkk9ZOsUWKqgxu6QTQa1gAAAQo"]
[Mon Dec 22 19:01:10.045248 2025] [:error] [pid 33471:tid 33486] [client 4.214.48.229:8933] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUkk9r5BeNE7regJ7iw0OwAAAUw"]
[Mon Dec 22 19:01:10.295999 2025] [:error] [pid 56080:tid 56140] [client 4.214.48.229:8816] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aUkk9pIHT3YJq9hjDc7SdQAAAxA"]
[Mon Dec 22 19:01:10.585998 2025] [:error] [pid 33471:tid 33493] [client 4.214.48.229:8909] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk9r5BeNE7regJ7iw0PAAAAVM"]
[Mon Dec 22 19:01:10.813217 2025] [:error] [pid 56080:tid 56133] [client 4.214.48.229:8831] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk9pIHT3YJq9hjDc7SdgAAAwk"]
[Mon Dec 22 19:01:11.092507 2025] [:error] [pid 33564:tid 33590] [client 4.214.48.229:8810] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk9wSHeG6oLmMnKY6m3gAAAhc"]
[Mon Dec 22 19:01:11.320764 2025] [:error] [pid 33440:tid 33453] [client 4.214.48.229:8763] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aUkk95OsUWKqgxu6QTQa2QAAAQs"]
[Mon Dec 22 19:01:11.594358 2025] [:error] [pid 56044:tid 56059] [client 4.214.48.229:8755] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aUkk9-60uUaieriJqP1YWgAAAIs"]
[Mon Dec 22 19:01:11.828019 2025] [:error] [pid 58172:tid 58174] [client 4.214.48.229:8932] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aUkk9-SVKDT5jWOcnSXOJgAAAMA"]
[Mon Dec 22 19:01:12.073345 2025] [:error] [pid 56080:tid 56130] [client 4.214.48.229:8938] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aUkk-JIHT3YJq9hjDc7SewAAAwY"]
[Mon Dec 22 19:01:12.312627 2025] [:error] [pid 33440:tid 33451] [client 4.214.48.229:8956] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aUkk-JOsUWKqgxu6QTQa2gAAAQk"]
[Mon Dec 22 19:01:12.554162 2025] [:error] [pid 58078:tid 58086] [client 4.214.48.229:11546] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk-JWKg9Bf8njHlB4bQAAAAAM"]
[Mon Dec 22 19:01:12.796669 2025] [:error] [pid 33472:tid 33516] [client 4.214.48.229:8950] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk-J5p2WQpPIK8HAkYpQAAAY8"]
[Mon Dec 22 19:01:13.028635 2025] [:error] [pid 58172:tid 58186] [client 4.214.48.229:8924] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk-eSVKDT5jWOcnSXOKAAAAMw"]
[Mon Dec 22 19:01:13.283920 2025] [:error] [pid 33564:tid 33589] [client 4.214.48.229:9055] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUkk-QSHeG6oLmMnKY6m4gAAAhY"]
[Mon Dec 22 19:01:13.540739 2025] [:error] [pid 33440:tid 33447] [client 4.214.48.229:9065] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aUkk-ZOsUWKqgxu6QTQa3gAAAQU"]
[Mon Dec 22 19:01:13.833464 2025] [:error] [pid 33440:tid 33455] [client 4.214.48.229:8908] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aUkk-ZOsUWKqgxu6QTQa3wAAAQ0"]
[Mon Dec 22 19:01:14.079452 2025] [:error] [pid 56155:tid 56223] [client 4.214.48.229:8803] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aUkk-mG8a3wQucsuN67eIAAAA4E"]
[Mon Dec 22 19:01:14.326091 2025] [:error] [pid 56155:tid 56244] [client 4.214.48.229:8958] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aUkk-mG8a3wQucsuN67eIQAAA5Y"]
[Mon Dec 22 19:01:14.555070 2025] [:error] [pid 33535:tid 33544] [client 4.214.48.229:8795] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aUkk-mOCI8D9Xtn-n7SozgAAAcc"]
[Mon Dec 22 19:01:14.808166 2025] [:error] [pid 33472:tid 33521] [client 4.214.48.229:8772] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aUkk-p5p2WQpPIK8HAkYqQAAAZQ"]
[Mon Dec 22 19:01:15.059875 2025] [:error] [pid 58172:tid 58185] [client 4.214.48.229:9028] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aUkk--SVKDT5jWOcnSXOKQAAAMs"]
[Mon Dec 22 19:01:15.298138 2025] [:error] [pid 58172:tid 58191] [client 4.214.48.229:8791] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aUkk--SVKDT5jWOcnSXOKgAAANE"]
[Mon Dec 22 19:01:15.559257 2025] [:error] [pid 58078:tid 58103] [client 4.214.48.229:8750] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aUkk-5WKg9Bf8njHlB4bRgAAABQ"]
[Mon Dec 22 19:01:15.842800 2025] [:error] [pid 33471:tid 33485] [client 4.214.48.229:8753] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aUkk-75BeNE7regJ7iw0PgAAAUs"]
[Mon Dec 22 19:01:16.070401 2025] [:error] [pid 58078:tid 58104] [client 4.214.48.229:8935] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aUkk_JWKg9Bf8njHlB4bRwAAABU"]
[Mon Dec 22 19:01:16.310742 2025] [:error] [pid 33471:tid 33476] [client 4.214.48.229:8927] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aUkk_L5BeNE7regJ7iw0PwAAAUI"]
[Mon Dec 22 19:01:16.584770 2025] [:error] [pid 56044:tid 56070] [client 4.214.48.229:8931] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aUkk_O60uUaieriJqP1YXQAAAJY"]
[Mon Dec 22 19:01:16.833978 2025] [:error] [pid 33535:tid 33537] [client 4.214.48.229:8754] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aUkk_GOCI8D9Xtn-n7So0gAAAcA"]
[Mon Dec 22 19:01:17.064620 2025] [:error] [pid 58078:tid 58088] [client 4.214.48.229:8929] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aUkk_ZWKg9Bf8njHlB4bSAAAAAU"]
[Mon Dec 22 19:01:17.332401 2025] [:error] [pid 58078:tid 58105] [client 4.214.48.229:8919] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aUkk_ZWKg9Bf8njHlB4bSgAAABY"]
[Mon Dec 22 19:01:17.558766 2025] [:error] [pid 58078:tid 58085] [client 4.214.48.229:8783] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aUkk_ZWKg9Bf8njHlB4bSwAAAAI"]
[Mon Dec 22 19:01:17.847021 2025] [:error] [pid 58078:tid 58086] [client 4.214.48.229:8713] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aUkk_ZWKg9Bf8njHlB4bTQAAAAM"]
[Mon Dec 22 19:01:18.077082 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:8949] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aUkk_pWKg9Bf8njHlB4bUAAAABI"]
[Mon Dec 22 19:01:18.315859 2025] [:error] [pid 33535:tid 33555] [client 4.214.48.229:9053] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aUkk_mOCI8D9Xtn-n7So1AAAAdI"]
[Mon Dec 22 19:01:18.547004 2025] [:error] [pid 58078:tid 58094] [client 4.214.48.229:11566] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUkk_pWKg9Bf8njHlB4bUwAAAAs"]
[Mon Dec 22 19:01:18.783136 2025] [:error] [pid 33564:tid 33572] [client 4.214.48.229:9084] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUkk_gSHeG6oLmMnKY6m5gAAAgU"]
[Mon Dec 22 19:01:19.063674 2025] [:error] [pid 56044:tid 56068] [client 4.214.48.229:8941] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUkk_-60uUaieriJqP1YYAAAAJQ"]
[Mon Dec 22 19:01:19.318637 2025] [:error] [pid 58078:tid 58105] [client 4.214.48.229:9137] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aUkk_5WKg9Bf8njHlB4bVgAAABY"]
[Mon Dec 22 19:01:19.551058 2025] [:error] [pid 58078:tid 58087] [client 4.214.48.229:9034] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aUkk_5WKg9Bf8njHlB4bVwAAAAQ"]
[Mon Dec 22 19:01:19.808780 2025] [:error] [pid 33564:tid 33577] [client 4.214.48.229:8796] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aUkk_wSHeG6oLmMnKY6m6wAAAgo"]
[Mon Dec 22 19:01:20.041634 2025] [:error] [pid 56044:tid 56065] [client 4.214.48.229:8904] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aUklAO60uUaieriJqP1YYgAAAJE"]
[Mon Dec 22 19:01:20.273818 2025] [:error] [pid 33564:tid 33567] [client 4.214.48.229:9035] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aUklAASHeG6oLmMnKY6m7gAAAgA"]
[Mon Dec 22 19:01:20.507903 2025] [:error] [pid 58078:tid 58086] [client 4.214.48.229:8922] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUklAJWKg9Bf8njHlB4bWwAAAAM"]
[Mon Dec 22 19:01:20.734229 2025] [:error] [pid 58078:tid 58091] [client 4.214.48.229:9056] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUklAJWKg9Bf8njHlB4bXAAAAAg"]
[Mon Dec 22 19:01:21.006260 2025] [:error] [pid 33564:tid 33589] [client 4.214.48.229:9044] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUklAQSHeG6oLmMnKY6m8wAAAhY"]
[Mon Dec 22 19:01:21.266011 2025] [:error] [pid 33564:tid 33591] [client 4.214.48.229:8806] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aUklAQSHeG6oLmMnKY6m9QAAAhg"]
[Mon Dec 22 19:01:21.495606 2025] [:error] [pid 33471:tid 33479] [client 4.214.48.229:8900] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aUklAb5BeNE7regJ7iw0QgAAAUU"]
[Mon Dec 22 19:01:21.728787 2025] [:error] [pid 58078:tid 58098] [client 4.214.48.229:8934] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aUklAZWKg9Bf8njHlB4bXwAAAA8"]
[Mon Dec 22 19:01:21.982021 2025] [:error] [pid 33472:tid 33514] [client 4.214.48.229:9049] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aUklAZ5p2WQpPIK8HAkYrgAAAY0"]
[Mon Dec 22 19:01:22.269971 2025] [:error] [pid 58078:tid 58092] [client 4.214.48.229:9123] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aUklApWKg9Bf8njHlB4bYAAAAAk"]
[Mon Dec 22 19:01:22.501559 2025] [:error] [pid 56155:tid 56228] [client 4.214.48.229:8790] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aUklAmG8a3wQucsuN67eJgAAA4Y"]
[Mon Dec 22 19:01:22.735281 2025] [:error] [pid 56155:tid 56233] [client 4.214.48.229:8912] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aUklAmG8a3wQucsuN67eKQAAA4s"]
[Mon Dec 22 19:01:23.023789 2025] [:error] [pid 56155:tid 56239] [client 4.214.48.229:8826] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aUklA2G8a3wQucsuN67eKgAAA5E"]
[Mon Dec 22 19:01:23.252903 2025] [:error] [pid 56155:tid 56241] [client 4.214.48.229:9070] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aUklA2G8a3wQucsuN67eLAAAA5M"]
[Mon Dec 22 19:01:23.552013 2025] [:error] [pid 33440:tid 33464] [client 4.214.48.229:8953] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUklA5OsUWKqgxu6QTQa5AAAARY"]
[Mon Dec 22 19:01:23.833226 2025] [:error] [pid 58078:tid 58105] [client 4.214.48.229:9038] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUklA5WKg9Bf8njHlB4bZgAAABY"]
[Mon Dec 22 19:01:24.135756 2025] [:error] [pid 56080:tid 56148] [client 4.214.48.229:9027] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUklBJIHT3YJq9hjDc7ShgAAAxg"]
[Mon Dec 22 19:01:24.408502 2025] [:error] [pid 56044:tid 56052] [client 4.214.48.229:8944] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aUklBO60uUaieriJqP1YcAAAAIQ"]
[Mon Dec 22 19:01:24.661349 2025] [:error] [pid 58078:tid 58094] [client 4.214.48.229:9040] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aUklBJWKg9Bf8njHlB4bbAAAAAs"]
[Mon Dec 22 19:01:24.890631 2025] [:error] [pid 58078:tid 58098] [client 4.214.48.229:9098] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aUklBJWKg9Bf8njHlB4bbQAAAA8"]
[Mon Dec 22 19:01:25.146389 2025] [:error] [pid 33535:tid 33540] [client 4.214.48.229:9058] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aUklBWOCI8D9Xtn-n7So2AAAAcM"]
[Mon Dec 22 19:01:25.464145 2025] [:error] [pid 56080:tid 56137] [client 4.214.48.229:9036] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aUklBZIHT3YJq9hjDc7ShwAAAw0"]
[Mon Dec 22 19:01:25.717630 2025] [:error] [pid 33472:tid 33503] [client 4.214.48.229:9144] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUklBZ5p2WQpPIK8HAkYsgAAAYI"]
[Mon Dec 22 19:01:25.944796 2025] [:error] [pid 33535:tid 33547] [client 4.214.48.229:9083] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUklBWOCI8D9Xtn-n7So3AAAAco"]
[Mon Dec 22 19:01:26.236059 2025] [:error] [pid 33472:tid 33509] [client 4.214.48.229:8905] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUklBp5p2WQpPIK8HAkYtAAAAYg"]
[Mon Dec 22 19:01:26.487214 2025] [:error] [pid 56080:tid 56125] [client 4.214.48.229:8814] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUklBpIHT3YJq9hjDc7SiAAAAwE"]
[Mon Dec 22 19:01:26.723067 2025] [:error] [pid 56155:tid 56243] [client 4.214.48.229:8809] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aUklBmG8a3wQucsuN67eLwAAA5U"]
[Mon Dec 22 19:01:26.953822 2025] [:error] [pid 56080:tid 56132] [client 4.214.48.229:8939] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aUklBpIHT3YJq9hjDc7SiQAAAwg"]
[Mon Dec 22 19:01:27.194017 2025] [:error] [pid 33564:tid 33580] [client 4.214.48.229:9103] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aUklBwSHeG6oLmMnKY6nAAAAAg0"]
[Mon Dec 22 19:01:27.419752 2025] [:error] [pid 58078:tid 58106] [client 4.214.48.229:8824] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aUklB5WKg9Bf8njHlB4bdQAAABc"]
[Mon Dec 22 19:01:27.672738 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:8937] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aUklB5WKg9Bf8njHlB4bdgAAABI"]
[Mon Dec 22 19:01:27.900293 2025] [:error] [pid 58078:tid 58090] [client 4.214.48.229:8930] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aUklB5WKg9Bf8njHlB4beQAAAAc"]
[Mon Dec 22 19:01:28.130150 2025] [:error] [pid 56080:tid 56146] [client 4.214.48.229:8811] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aUklCJIHT3YJq9hjDc7SigAAAxY"]
[Mon Dec 22 19:01:28.434998 2025] [:error] [pid 33472:tid 33505] [client 4.214.48.229:8908] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aUklCJ5p2WQpPIK8HAkYvQAAAYQ"]
[Mon Dec 22 19:01:28.683929 2025] [:error] [pid 56080:tid 56136] [client 4.214.48.229:8911] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUklCJIHT3YJq9hjDc7SjAAAAww"]
[Mon Dec 22 19:01:28.938332 2025] [:error] [pid 33564:tid 33571] [client 4.214.48.229:9089] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUklCASHeG6oLmMnKY6nAwAAAgQ"]
[Mon Dec 22 19:01:29.165866 2025] [:error] [pid 33440:tid 33466] [client 4.214.48.229:9033] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUklCZOsUWKqgxu6QTQa5wAAARg"]
[Mon Dec 22 19:01:29.459091 2025] [:error] [pid 33535:tid 33546] [client 4.214.48.229:8807] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aUklCWOCI8D9Xtn-n7So4QAAAck"]
[Mon Dec 22 19:01:29.711827 2025] [:error] [pid 33472:tid 33501] [client 4.214.48.229:8957] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUklCZ5p2WQpPIK8HAkYvgAAAYA"]
[Mon Dec 22 19:01:29.948104 2025] [:error] [pid 33440:tid 33447] [client 4.214.48.229:11633] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUklCZOsUWKqgxu6QTQa6QAAAQU"]
[Mon Dec 22 19:01:30.173400 2025] [:error] [pid 33535:tid 33552] [client 4.214.48.229:8914] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUklCmOCI8D9Xtn-n7So4wAAAc8"]
[Mon Dec 22 19:01:30.451292 2025] [:error] [pid 33440:tid 33445] [client 4.214.48.229:8910] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aUklCpOsUWKqgxu6QTQa7QAAAQM"]
[Mon Dec 22 19:01:30.675743 2025] [:error] [pid 33471:tid 33478] [client 4.214.48.229:8812] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aUklCr5BeNE7regJ7iw0RgAAAUQ"]
[Mon Dec 22 19:01:30.902022 2025] [:error] [pid 58172:tid 58194] [client 4.214.48.229:9054] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aUklCuSVKDT5jWOcnSXOMAAAANQ"]
[Mon Dec 22 19:01:31.162463 2025] [:error] [pid 33535:tid 33545] [client 4.214.48.229:9152] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aUklC2OCI8D9Xtn-n7So5QAAAcg"]
[Mon Dec 22 19:01:31.424649 2025] [:error] [pid 33564:tid 33568] [client 4.214.48.229:9125] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aUklCwSHeG6oLmMnKY6nBQAAAgE"]
[Mon Dec 22 19:01:31.672221 2025] [:error] [pid 56155:tid 56242] [client 4.214.48.229:8714] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aUklC2G8a3wQucsuN67eMwAAA5Q"]
[Mon Dec 22 19:01:31.904367 2025] [:error] [pid 56080:tid 56140] [client 4.214.48.229:9094] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aUklC5IHT3YJq9hjDc7SjwAAAxA"]
[Mon Dec 22 19:01:32.141173 2025] [:error] [pid 56044:tid 56055] [client 4.214.48.229:9031] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aUklDO60uUaieriJqP1YhwAAAIc"]
[Mon Dec 22 19:01:32.371919 2025] [:error] [pid 56080:tid 56135] [client 4.214.48.229:11602] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aUklDJIHT3YJq9hjDc7SkAAAAws"]
[Mon Dec 22 19:01:32.622216 2025] [:error] [pid 58078:tid 58088] [client 4.214.48.229:8817] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aUklDJWKg9Bf8njHlB4bfwAAAAU"]
[Mon Dec 22 19:01:32.866953 2025] [:error] [pid 33440:tid 33450] [client 4.214.48.229:9088] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aUklDJOsUWKqgxu6QTQa8gAAAQg"]
[Mon Dec 22 19:01:33.140300 2025] [:error] [pid 56080:tid 56138] [client 4.214.48.229:8747] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aUklDZIHT3YJq9hjDc7SkgAAAw4"]
[Mon Dec 22 19:01:33.374536 2025] [:error] [pid 56155:tid 56237] [client 4.214.48.229:8946] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aUklDWG8a3wQucsuN67eOgAAA48"]
[Mon Dec 22 19:01:33.617238 2025] [:error] [pid 33564:tid 33576] [client 4.214.48.229:9030] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUklDQSHeG6oLmMnKY6nBgAAAgk"]
[Mon Dec 22 19:01:33.867596 2025] [:error] [pid 58078:tid 58090] [client 4.214.48.229:8917] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUklDZWKg9Bf8njHlB4bhAAAAAc"]
[Mon Dec 22 19:01:34.112349 2025] [:error] [pid 58078:tid 58092] [client 4.214.48.229:9080] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUklDpWKg9Bf8njHlB4bhgAAAAk"]
[Mon Dec 22 19:01:34.365452 2025] [:error] [pid 58078:tid 58083] [client 4.214.48.229:9106] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aUklDpWKg9Bf8njHlB4bhwAAAAA"]
[Mon Dec 22 19:01:34.666221 2025] [:error] [pid 58078:tid 58104] [client 4.214.48.229:8936] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aUklDpWKg9Bf8njHlB4bigAAABU"]
[Mon Dec 22 19:01:34.948600 2025] [:error] [pid 33564:tid 33591] [client 4.214.48.229:9066] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aUklDgSHeG6oLmMnKY6nBwAAAhg"]
[Mon Dec 22 19:01:35.205881 2025] [:error] [pid 56044:tid 56061] [client 4.214.48.229:9032] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aUklD-60uUaieriJqP1YigAAAI0"]
[Mon Dec 22 19:01:35.444895 2025] [:error] [pid 33471:tid 33496] [client 4.214.48.229:9026] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aUklD75BeNE7regJ7iw0SgAAAVY"]
[Mon Dec 22 19:01:35.713089 2025] [:error] [pid 58078:tid 58096] [client 4.214.48.229:8915] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aUklD5WKg9Bf8njHlB4bkAAAAA0"]
[Mon Dec 22 19:01:35.938434 2025] [:error] [pid 33535:tid 33544] [client 4.214.48.229:8806] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aUklD2OCI8D9Xtn-n7So6AAAAcc"]
[Mon Dec 22 19:01:36.163842 2025] [:error] [pid 58078:tid 58106] [client 4.214.48.229:9039] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aUklEJWKg9Bf8njHlB4bkQAAABc"]
[Mon Dec 22 19:01:36.442405 2025] [:error] [pid 58078:tid 58085] [client 4.214.48.229:8899] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aUklEJWKg9Bf8njHlB4bkgAAAAI"]
[Mon Dec 22 19:01:36.716738 2025] [:error] [pid 56155:tid 56244] [client 4.214.48.229:9133] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aUklEGG8a3wQucsuN67eQwAAA5Y"]
[Mon Dec 22 19:01:36.951541 2025] [:error] [pid 56155:tid 56242] [client 4.214.48.229:8743] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aUklEGG8a3wQucsuN67eRQAAA5Q"]
[Mon Dec 22 19:01:37.185480 2025] [:error] [pid 56044:tid 56064] [client 4.214.48.229:9087] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aUklEe60uUaieriJqP1YjgAAAJA"]
[Mon Dec 22 19:01:37.412866 2025] [:error] [pid 58078:tid 58093] [client 4.214.48.229:11578] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aUklEZWKg9Bf8njHlB4blQAAAAo"]
[Mon Dec 22 19:01:37.701915 2025] [:error] [pid 56044:tid 56071] [client 4.214.48.229:8913] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aUklEe60uUaieriJqP1YkAAAAJc"]
[Mon Dec 22 19:01:37.940203 2025] [:error] [pid 33471:tid 33491] [client 4.214.48.229:9051] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aUklEb5BeNE7regJ7iw0TgAAAVE"]
[Mon Dec 22 19:01:38.184029 2025] [:error] [pid 56155:tid 56239] [client 4.214.48.229:9042] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aUklEmG8a3wQucsuN67eSwAAA5E"]
[Mon Dec 22 19:01:38.425348 2025] [:error] [pid 56155:tid 56237] [client 4.214.48.229:9086] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aUklEmG8a3wQucsuN67eTAAAA48"]
[Mon Dec 22 19:01:38.741764 2025] [:error] [pid 33471:tid 33498] [client 4.214.48.229:11636] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aUklEr5BeNE7regJ7iw0UwAAAVg"]
[Mon Dec 22 19:01:38.977216 2025] [:error] [pid 33471:tid 33490] [client 4.214.48.229:9079] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aUklEr5BeNE7regJ7iw0VgAAAVA"]
[Mon Dec 22 19:01:39.209788 2025] [:error] [pid 58078:tid 58104] [client 4.214.48.229:8940] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aUklE5WKg9Bf8njHlB4bnQAAABU"]
[Mon Dec 22 19:01:39.454309 2025] [:error] [pid 58078:tid 58100] [client 4.214.48.229:9063] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aUklE5WKg9Bf8njHlB4bnwAAABE"]
[Mon Dec 22 19:01:39.734877 2025] [:error] [pid 56044:tid 56057] [client 4.214.48.229:8959] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUklE-60uUaieriJqP1YkQAAAIk"]
[Mon Dec 22 19:01:39.965183 2025] [:error] [pid 58078:tid 58106] [client 4.214.48.229:8947] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUklE5WKg9Bf8njHlB4bowAAABc"]
[Mon Dec 22 19:01:40.206452 2025] [:error] [pid 58078:tid 58084] [client 4.214.48.229:9153] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUklFJWKg9Bf8njHlB4bpQAAAAE"]
[Mon Dec 22 19:01:40.463448 2025] [:error] [pid 58078:tid 58083] [client 4.214.48.229:8801] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aUklFJWKg9Bf8njHlB4bqQAAAAA"]
[Mon Dec 22 19:01:40.707173 2025] [:error] [pid 58078:tid 58094] [client 4.214.48.229:9101] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUklFJWKg9Bf8njHlB4bqgAAAAs"]
[Mon Dec 22 19:01:40.987131 2025] [:error] [pid 33440:tid 33442] [client 4.214.48.229:9041] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUklFJOsUWKqgxu6QTQa9gAAAQA"]
[Mon Dec 22 19:01:41.213656 2025] [:error] [pid 58078:tid 58100] [client 4.214.48.229:9142] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUklFZWKg9Bf8njHlB4brQAAABE"]
[Mon Dec 22 19:01:41.456508 2025] [:error] [pid 33564:tid 33582] [client 4.214.48.229:8715] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aUklFQSHeG6oLmMnKY6nDQAAAg8"]
[Mon Dec 22 19:01:41.690692 2025] [:error] [pid 58078:tid 58089] [client 4.214.48.229:9163] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aUklFZWKg9Bf8njHlB4brgAAAAY"]
[Mon Dec 22 19:01:41.989493 2025] [:error] [pid 58078:tid 58107] [client 4.214.48.229:9077] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aUklFZWKg9Bf8njHlB4bsAAAABg"]
[Mon Dec 22 19:01:42.235801 2025] [:error] [pid 33564:tid 33590] [client 4.214.48.229:9037] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aUklFgSHeG6oLmMnKY6nEAAAAhc"]
[Mon Dec 22 19:01:42.463905 2025] [:error] [pid 33564:tid 33567] [client 4.214.48.229:8896] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aUklFgSHeG6oLmMnKY6nEQAAAgA"]
[Mon Dec 22 19:01:42.707242 2025] [:error] [pid 58078:tid 58096] [client 4.214.48.229:9110] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUklFpWKg9Bf8njHlB4bswAAAA0"]
[Mon Dec 22 19:01:42.935087 2025] [:error] [pid 56080:tid 56131] [client 4.214.48.229:9170] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUklFpIHT3YJq9hjDc7SmAAAAwc"]
[Mon Dec 22 19:01:43.160490 2025] [:error] [pid 56080:tid 56137] [client 4.214.48.229:9188] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUklF5IHT3YJq9hjDc7SmQAAAw0"]
[Mon Dec 22 19:01:43.401758 2025] [:error] [pid 33535:tid 33555] [client 4.214.48.229:9071] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aUklF2OCI8D9Xtn-n7So7gAAAdI"]
[Mon Dec 22 19:01:43.642349 2025] [:error] [pid 33564:tid 33591] [client 4.214.48.229:9064] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aUklFwSHeG6oLmMnKY6nFQAAAhg"]
[Mon Dec 22 19:01:43.907871 2025] [:error] [pid 33564:tid 33574] [client 4.214.48.229:9082] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aUklFwSHeG6oLmMnKY6nFgAAAgc"]
[Mon Dec 22 19:01:44.141204 2025] [:error] [pid 58078:tid 58107] [client 4.214.48.229:9158] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aUklGJWKg9Bf8njHlB4bugAAABg"]
[Mon Dec 22 19:01:44.433645 2025] [:error] [pid 33564:tid 33587] [client 4.214.48.229:9062] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aUklGASHeG6oLmMnKY6nGQAAAhQ"]
[Mon Dec 22 19:01:44.659140 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:9114] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aUklGJWKg9Bf8njHlB4bvwAAABI"]
[Mon Dec 22 19:01:44.955473 2025] [:error] [pid 33564:tid 33583] [client 4.214.48.229:9176] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aUklGASHeG6oLmMnKY6nHQAAAhA"]
[Mon Dec 22 19:01:45.181444 2025] [:error] [pid 58078:tid 58092] [client 4.214.48.229:9143] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aUklGZWKg9Bf8njHlB4bwgAAAAk"]
[Mon Dec 22 19:01:45.411147 2025] [:error] [pid 58078:tid 58091] [client 4.214.48.229:9148] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aUklGZWKg9Bf8njHlB4bxQAAAAg"]
[Mon Dec 22 19:01:45.638968 2025] [:error] [pid 58078:tid 58103] [client 4.214.48.229:9072] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aUklGZWKg9Bf8njHlB4bxwAAABQ"]
[Mon Dec 22 19:01:45.864637 2025] [:error] [pid 58078:tid 58107] [client 4.214.48.229:8918] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aUklGZWKg9Bf8njHlB4byQAAABg"]
[Mon Dec 22 19:01:46.119508 2025] [:error] [pid 33564:tid 33573] [client 4.214.48.229:9116] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aUklGgSHeG6oLmMnKY6nIAAAAgY"]
[Mon Dec 22 19:01:46.388003 2025] [:error] [pid 33564:tid 33568] [client 4.214.48.229:9145] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aUklGgSHeG6oLmMnKY6nJAAAAgE"]
[Mon Dec 22 19:01:46.637148 2025] [:error] [pid 58078:tid 58083] [client 4.214.48.229:9073] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUklGpWKg9Bf8njHlB4bzQAAAAA"]
[Mon Dec 22 19:01:46.880254 2025] [:error] [pid 33564:tid 33576] [client 4.214.48.229:9029] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUklGgSHeG6oLmMnKY6nJQAAAgk"]
[Mon Dec 22 19:01:47.142167 2025] [:error] [pid 33472:tid 33502] [client 4.214.48.229:9109] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUklG55p2WQpPIK8HAkYxQAAAYE"]
[Mon Dec 22 19:01:47.386760 2025] [:error] [pid 33564:tid 33574] [client 4.214.48.229:9135] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUklGwSHeG6oLmMnKY6nJwAAAgc"]
[Mon Dec 22 19:01:47.620821 2025] [:error] [pid 56080:tid 56126] [client 4.214.48.229:8942] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUklG5IHT3YJq9hjDc7SnQAAAwI"]
[Mon Dec 22 19:01:47.872558 2025] [:error] [pid 33440:tid 33450] [client 4.214.48.229:9075] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUklG5OsUWKqgxu6QTQa_AAAAQg"]
[Mon Dec 22 19:01:48.125786 2025] [:error] [pid 33472:tid 33520] [client 4.214.48.229:9076] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUklHJ5p2WQpPIK8HAkYxgAAAZM"]
[Mon Dec 22 19:01:48.362775 2025] [:error] [pid 56044:tid 56065] [client 4.214.48.229:11088] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aUklHO60uUaieriJqP1YlAAAAJE"]
[Mon Dec 22 19:01:48.642047 2025] [:error] [pid 58078:tid 58097] [client 4.214.48.229:9204] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aUklHJWKg9Bf8njHlB4b1gAAAA4"]
[Mon Dec 22 19:01:48.913141 2025] [:error] [pid 33472:tid 33514] [client 4.214.48.229:9046] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aUklHJ5p2WQpPIK8HAkYygAAAY0"]
[Mon Dec 22 19:01:49.187519 2025] [:error] [pid 58078:tid 58105] [client 4.214.48.229:9178] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aUklHZWKg9Bf8njHlB4b2gAAABY"]
[Mon Dec 22 19:01:49.418433 2025] [:error] [pid 33472:tid 33523] [client 4.214.48.229:8925] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aUklHZ5p2WQpPIK8HAkYywAAAZY"]
[Mon Dec 22 19:01:49.669923 2025] [:error] [pid 33535:tid 33556] [client 4.214.48.229:9126] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aUklHWOCI8D9Xtn-n7So9AAAAdM"]
[Mon Dec 22 19:01:49.899525 2025] [:error] [pid 56044:tid 56052] [client 4.214.48.229:9107] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aUklHe60uUaieriJqP1YmgAAAIQ"]
[Mon Dec 22 19:01:50.132057 2025] [:error] [pid 33535:tid 33541] [client 4.214.48.229:9173] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aUklHmOCI8D9Xtn-n7So9gAAAcQ"]
[Mon Dec 22 19:01:50.373674 2025] [:error] [pid 33472:tid 33524] [client 4.214.48.229:8779] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aUklHp5p2WQpPIK8HAkYzAAAAZc"]
[Mon Dec 22 19:01:50.643034 2025] [:error] [pid 33471:tid 33474] [client 4.214.48.229:9138] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aUklHr5BeNE7regJ7iw0WwAAAUA"]
[Mon Dec 22 19:01:50.871871 2025] [:error] [pid 58172:tid 58183] [client 4.214.48.229:8793] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aUklHuSVKDT5jWOcnSXOOwAAAMk"]
[Mon Dec 22 19:01:51.110450 2025] [:error] [pid 33471:tid 33493] [client 4.214.48.229:9059] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aUklH75BeNE7regJ7iw0XgAAAVM"]
[Mon Dec 22 19:01:51.398646 2025] [:error] [pid 33472:tid 33512] [client 4.214.48.229:11581] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aUklH55p2WQpPIK8HAkY0AAAAYs"]
[Mon Dec 22 19:01:51.629714 2025] [:error] [pid 33471:tid 33490] [client 4.214.48.229:11012] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aUklH75BeNE7regJ7iw0YgAAAVA"]
[Mon Dec 22 19:01:51.872189 2025] [:error] [pid 58172:tid 58189] [client 4.214.48.229:9047] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aUklH-SVKDT5jWOcnSXOPAAAAM8"]
[Mon Dec 22 19:01:52.099463 2025] [:error] [pid 58172:tid 58181] [client 4.214.48.229:9127] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aUklIOSVKDT5jWOcnSXOPQAAAMc"]
[Mon Dec 22 19:01:52.351102 2025] [:error] [pid 33472:tid 33516] [client 4.214.48.229:8736] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aUklIJ5p2WQpPIK8HAkY0wAAAY8"]
[Mon Dec 22 19:01:52.594496 2025] [:error] [pid 58078:tid 58091] [client 4.214.48.229:9099] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aUklIJWKg9Bf8njHlB4b6AAAAAg"]
[Mon Dec 22 19:01:52.820195 2025] [:error] [pid 58172:tid 58184] [client 4.214.48.229:9024] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aUklIOSVKDT5jWOcnSXOQQAAAMo"]
[Mon Dec 22 19:01:53.065969 2025] [:error] [pid 56080:tid 56145] [client 4.214.48.229:11100] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aUklIZIHT3YJq9hjDc7SpQAAAxU"]
[Mon Dec 22 19:01:53.292566 2025] [:error] [pid 33535:tid 33555] [client 4.214.48.229:9119] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aUklIWOCI8D9Xtn-n7So_AAAAdI"]
[Mon Dec 22 19:01:53.540324 2025] [:error] [pid 33440:tid 33462] [client 4.214.48.229:9104] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aUklIZOsUWKqgxu6QTQbAAAAARQ"]
[Mon Dec 22 19:01:53.767013 2025] [:error] [pid 58078:tid 58090] [client 4.214.48.229:8945] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aUklIZWKg9Bf8njHlB4b7gAAAAc"]
[Mon Dec 22 19:01:54.006682 2025] [:error] [pid 33535:tid 33551] [client 4.214.48.229:9154] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aUklImOCI8D9Xtn-n7So_gAAAc4"]
[Mon Dec 22 19:01:54.250486 2025] [:error] [pid 33472:tid 33515] [client 4.214.48.229:11598] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aUklIp5p2WQpPIK8HAkY2QAAAY4"]
[Mon Dec 22 19:01:54.531197 2025] [:error] [pid 56080:tid 56125] [client 4.214.48.229:9105] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aUklIpIHT3YJq9hjDc7SqgAAAwE"]
[Mon Dec 22 19:01:54.771692 2025] [:error] [pid 56155:tid 56233] [client 4.214.48.229:9139] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aUklImG8a3wQucsuN67eTwAAA4s"]
[Mon Dec 22 19:01:54.997565 2025] [:error] [pid 56080:tid 56144] [client 4.214.48.229:9118] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aUklIpIHT3YJq9hjDc7SqwAAAxQ"]
[Mon Dec 22 19:01:55.223419 2025] [:error] [pid 33440:tid 33453] [client 4.214.48.229:9078] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aUklI5OsUWKqgxu6QTQbBAAAAQs"]
[Mon Dec 22 19:01:55.551026 2025] [:error] [pid 58172:tid 58186] [client 4.214.48.229:8898] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aUklI-SVKDT5jWOcnSXORQAAAMw"]
[Mon Dec 22 19:01:55.805463 2025] [:error] [pid 56080:tid 56129] [client 4.214.48.229:9214] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aUklI5IHT3YJq9hjDc7SrAAAAwU"]
[Mon Dec 22 19:01:56.054318 2025] [:error] [pid 33472:tid 33525] [client 4.214.48.229:9146] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aUklJJ5p2WQpPIK8HAkY3wAAAZg"]
[Mon Dec 22 19:01:56.284937 2025] [:error] [pid 33472:tid 33517] [client 4.214.48.229:9067] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aUklJJ5p2WQpPIK8HAkY4gAAAZA"]
[Mon Dec 22 19:01:56.536164 2025] [:error] [pid 33472:tid 33512] [client 4.214.48.229:8923] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aUklJJ5p2WQpPIK8HAkY4wAAAYs"]
[Mon Dec 22 19:01:56.780202 2025] [:error] [pid 33472:tid 33516] [client 4.214.48.229:9100] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aUklJJ5p2WQpPIK8HAkY5QAAAY8"]
[Mon Dec 22 19:01:57.008728 2025] [:error] [pid 33440:tid 33442] [client 4.214.48.229:9165] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aUklJZOsUWKqgxu6QTQbBgAAAQA"]
[Mon Dec 22 19:01:57.245539 2025] [:error] [pid 33440:tid 33455] [client 4.214.48.229:11095] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aUklJZOsUWKqgxu6QTQbBwAAAQ0"]
[Mon Dec 22 19:01:57.545801 2025] [:error] [pid 58078:tid 58095] [client 4.214.48.229:9108] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aUklJZWKg9Bf8njHlB4b-QAAAAw"]
[Mon Dec 22 19:01:57.835255 2025] [:error] [pid 56155:tid 56237] [client 4.214.48.229:9052] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aUklJWG8a3wQucsuN67eUAAAA48"]
[Mon Dec 22 19:01:58.092392 2025] [:error] [pid 33564:tid 33576] [client 4.214.48.229:11076] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aUklJgSHeG6oLmMnKY6nLQAAAgk"]
[Mon Dec 22 19:01:58.376516 2025] [:error] [pid 33440:tid 33447] [client 4.214.48.229:9050] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aUklJpOsUWKqgxu6QTQbCQAAAQU"]
[Mon Dec 22 19:01:58.677688 2025] [:error] [pid 33472:tid 33518] [client 4.214.48.229:9193] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUklJp5p2WQpPIK8HAkY8AAAAZE"]
[Mon Dec 22 19:01:58.916942 2025] [:error] [pid 33440:tid 33461] [client 4.214.48.229:9164] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUklJpOsUWKqgxu6QTQbCwAAARM"]
[Mon Dec 22 19:01:59.160057 2025] [:error] [pid 33440:tid 33448] [client 4.214.48.229:9186] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUklJ5OsUWKqgxu6QTQbDQAAAQY"]
[Mon Dec 22 19:01:59.395877 2025] [:error] [pid 33564:tid 33572] [client 4.214.48.229:8716] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aUklJwSHeG6oLmMnKY6nNgAAAgU"]
[Mon Dec 22 19:01:59.745905 2025] [:error] [pid 58078:tid 58105] [client 4.214.48.229:9120] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aUklJ5WKg9Bf8njHlB4cCAAAABY"]
[Mon Dec 22 19:01:59.996395 2025] [:error] [pid 58078:tid 58100] [client 4.214.48.229:9102] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aUklJ5WKg9Bf8njHlB4cDQAAABE"]
[Mon Dec 22 19:02:00.270943 2025] [:error] [pid 56155:tid 56226] [client 4.214.48.229:9187] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aUklKGG8a3wQucsuN67eWgAAA4Q"]
[Mon Dec 22 19:02:00.498224 2025] [:error] [pid 33440:tid 33458] [client 4.214.48.229:9155] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aUklKJOsUWKqgxu6QTQbEgAAARA"]
[Mon Dec 22 19:02:00.789838 2025] [:error] [pid 56044:tid 56050] [client 4.214.48.229:9150] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aUklKO60uUaieriJqP1YsAAAAII"]
[Mon Dec 22 19:02:01.033665 2025] [:error] [pid 33535:tid 33560] [client 4.214.48.229:9185] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aUklKWOCI8D9Xtn-n7SpFQAAAdc"]
[Mon Dec 22 19:02:01.309438 2025] [:error] [pid 33471:tid 33489] [client 4.214.48.229:9111] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aUklKb5BeNE7regJ7iw0cQAAAU8"]
[Mon Dec 22 19:02:01.536843 2025] [:error] [pid 33564:tid 33585] [client 4.214.48.229:9160] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aUklKQSHeG6oLmMnKY6nQgAAAhI"]
[Mon Dec 22 19:02:01.803298 2025] [:error] [pid 33471:tid 33483] [client 4.214.48.229:9048] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aUklKb5BeNE7regJ7iw0cwAAAUk"]
[Mon Dec 22 19:02:02.086446 2025] [:error] [pid 56155:tid 56221] [client 4.214.48.229:11081] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aUklKmG8a3wQucsuN67eYwAAA4A"]
[Mon Dec 22 19:02:02.360371 2025] [:error] [pid 56155:tid 56233] [client 4.214.48.229:9134] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aUklKmG8a3wQucsuN67eZAAAA4s"]
[Mon Dec 22 19:02:02.609472 2025] [:error] [pid 56155:tid 56239] [client 4.214.48.229:9130] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aUklKmG8a3wQucsuN67eZwAAA5E"]
[Mon Dec 22 19:02:02.879351 2025] [:error] [pid 33472:tid 33524] [client 4.214.48.229:9060] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aUklKp5p2WQpPIK8HAkY9gAAAZc"]
[Mon Dec 22 19:02:03.118372 2025] [:error] [pid 33564:tid 33578] [client 4.214.48.229:9194] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aUklKwSHeG6oLmMnKY6nTAAAAgs"]
[Mon Dec 22 19:02:03.344438 2025] [:error] [pid 56080:tid 56129] [client 4.214.48.229:9112] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aUklK5IHT3YJq9hjDc7SuwAAAwU"]
[Mon Dec 22 19:02:03.577337 2025] [:error] [pid 58172:tid 58196] [client 4.214.48.229:9113] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aUklK-SVKDT5jWOcnSXOVQAAANY"]
[Mon Dec 22 19:02:03.806480 2025] [:error] [pid 33472:tid 33512] [client 4.214.48.229:9156] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aUklK55p2WQpPIK8HAkY-gAAAYs"]
[Mon Dec 22 19:02:04.037679 2025] [:error] [pid 33440:tid 33457] [client 4.214.48.229:11085] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aUklLJOsUWKqgxu6QTQbHAAAAQ8"]
[Mon Dec 22 19:02:04.294043 2025] [:error] [pid 33564:tid 33573] [client 4.214.48.229:11125] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aUklLASHeG6oLmMnKY6nTwAAAgY"]
[Mon Dec 22 19:02:04.624560 2025] [:error] [pid 33472:tid 33522] [client 4.214.48.229:9212] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aUklLJ5p2WQpPIK8HAkY_gAAAZU"]
[Mon Dec 22 19:02:04.897003 2025] [:error] [pid 58172:tid 58179] [client 4.214.48.229:8951] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aUklLOSVKDT5jWOcnSXOWQAAAMU"]
[Mon Dec 22 19:02:05.133825 2025] [:error] [pid 33440:tid 33461] [client 4.214.48.229:9180] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aUklLZOsUWKqgxu6QTQbIAAAARM"]
[Mon Dec 22 19:02:05.384099 2025] [:error] [pid 56155:tid 56226] [client 4.214.48.229:9149] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aUklLWG8a3wQucsuN67ecwAAA4Q"]
[Mon Dec 22 19:02:05.621053 2025] [:error] [pid 33471:tid 33477] [client 4.214.48.229:9122] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aUklLb5BeNE7regJ7iw0gwAAAUM"]
[Mon Dec 22 19:02:05.877346 2025] [:error] [pid 33472:tid 33505] [client 4.214.48.229:8916] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aUklLZ5p2WQpPIK8HAkZCAAAAYQ"]
[Mon Dec 22 19:02:06.103879 2025] [:error] [pid 33564:tid 33585] [client 4.214.48.229:9091] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aUklLgSHeG6oLmMnKY6nVgAAAhI"]
[Mon Dec 22 19:02:06.354542 2025] [:error] [pid 33471:tid 33492] [client 4.214.48.229:9081] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aUklLr5BeNE7regJ7iw0iAAAAVI"]
[Mon Dec 22 19:02:06.586034 2025] [:error] [pid 33564:tid 33587] [client 4.214.48.229:9177] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aUklLgSHeG6oLmMnKY6nWAAAAhQ"]
[Mon Dec 22 19:02:06.845161 2025] [:error] [pid 58172:tid 58178] [client 4.214.48.229:9069] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aUklLuSVKDT5jWOcnSXOYwAAAMQ"]
[Mon Dec 22 19:02:07.115925 2025] [:error] [pid 58078:tid 58093] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Mon Dec 22 19:02:07.231869 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Dec 22 19:02:09.011692 2025] [:error] [pid 58078:tid 58101] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/wpc.php
[Mon Dec 22 19:02:09.129597 2025] [:error] [pid 58078:tid 58094] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Mon Dec 22 19:02:09.247053 2025] [:error] [pid 58078:tid 58103] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/mlex.php
[Mon Dec 22 19:02:09.364186 2025] [:error] [pid 58078:tid 58100] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Mon Dec 22 19:02:09.899916 2025] [:error] [pid 58078:tid 58100] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Dec 22 19:02:10.017333 2025] [:error] [pid 58078:tid 58104] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/mpvloi.php
[Mon Dec 22 19:02:10.133430 2025] [:error] [pid 58078:tid 58097] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/v1.php
[Mon Dec 22 19:02:10.249590 2025] [:error] [pid 58078:tid 58087] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Mon Dec 22 19:02:10.367266 2025] [:error] [pid 58078:tid 58088] [client 4.214.48.229:11087] File does not exist: /usr/local/apache/htdocs/suspended-page/dex.php
[Mon Dec 22 19:02:10.480681 2025] [:error] [pid 58078:tid 58098] [client 4.214.48.229:11087] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aUklMpWKg9Bf8njHlB4cSwAAAA8"]
[Mon Dec 22 19:02:10.714456 2025] [:error] [pid 58078:tid 58094] [client 4.214.48.229:9096] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aUklMpWKg9Bf8njHlB4cUAAAAAs"]
[Mon Dec 22 19:02:10.957918 2025] [:error] [pid 58172:tid 58191] [client 4.214.48.229:9097] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aUklMuSVKDT5jWOcnSXOgAAAANE"]
[Mon Dec 22 19:02:11.313290 2025] [:error] [pid 33471:tid 33481] [client 4.214.48.229:9184] [client 4.214.48.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aUklM75BeNE7regJ7iw0kAAAAUc"]
[Mon Dec 22 20:47:01.246354 2025] [:error] [pid 58172:tid 58184] [client 103.65.236.153:57771] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aUk9xeSVKDT5jWOcnSXzGQAAAMo"]
[Tue Dec 23 00:20:34.372698 2025] [:error] [pid 40269:tid 40353] [client 103.255.67.192:18187] [client 103.255.67.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.255.67.192, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUlv0i06Z11fTcfdsqTCtAAAARg"]
[Tue Dec 23 00:20:34.377751 2025] [:error] [pid 40269:tid 40353] [client 103.255.67.192:18187] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 23 00:21:43.993657 2025] [:error] [pid 40267:tid 40286] [client 125.166.116.237:4162] [client 125.166.116.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.116.237, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUlwF-TPWWVt2GkrftBIwwAAAA0"]
[Tue Dec 23 00:21:43.998718 2025] [:error] [pid 40267:tid 40286] [client 125.166.116.237:4162] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 23 02:48:51.314304 2025] [:error] [pid 40268:tid 40321] [client 195.24.236.147:55975] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUmSk5WtCyS5tdJAiFx1VAAAANM"]
[Tue Dec 23 02:48:51.959266 2025] [:error] [pid 40361:tid 40384] [client 195.24.236.147:56092] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUmSk-xiDEK95vL2EDr4pwAAAFU"]
[Tue Dec 23 02:48:52.629338 2025] [:error] [pid 40361:tid 40384] [client 195.24.236.147:56229] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUmSlOxiDEK95vL2EDr4wQAAAFU"]
[Tue Dec 23 02:48:53.288792 2025] [:error] [pid 40361:tid 40379] [client 195.24.236.147:56364] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUmSlexiDEK95vL2EDr43wAAAFA"]
[Tue Dec 23 02:48:53.937125 2025] [:error] [pid 12110:tid 12136] [client 195.24.236.147:56510] [client 195.24.236.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUmSlQYatzD_WebWpOrrJwAAAJg"]
[Tue Dec 23 03:30:16.810804 2025] [:error] [pid 40268:tid 40314] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Dec 23 03:30:16.868012 2025] [:error] [pid 40268:tid 40326] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Tue Dec 23 03:30:18.154601 2025] [:error] [pid 40268:tid 40312] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Tue Dec 23 03:30:18.222223 2025] [:error] [pid 40268:tid 40306] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Dec 23 03:30:18.299477 2025] [:error] [pid 40268:tid 40310] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Dec 23 03:30:19.053901 2025] [:error] [pid 40268:tid 40320] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 23 03:30:19.689320 2025] [:error] [pid 40268:tid 40307] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue Dec 23 03:30:19.754444 2025] [:error] [pid 40268:tid 40318] [client 68.218.96.24:15770] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Dec 23 03:30:19.818757 2025] [:error] [pid 40268:tid 40325] [client 68.218.96.24:15770] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aUmcS5WtCyS5tdJAiFyL5gAAANc"]
[Tue Dec 23 03:30:24.837698 2025] [:error] [pid 40361:tid 40363] [client 68.218.96.24:15759] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aUmcUOxiDEK95vL2EDoZLAAAAEA"]
[Tue Dec 23 03:30:26.986054 2025] [:error] [pid 12110:tid 12128] [client 68.218.96.24:15810] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aUmcUgYatzD_WebWpOoW9wAAAJA"]
[Tue Dec 23 03:30:28.559254 2025] [:error] [pid 12110:tid 12131] [client 68.218.96.24:15847] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aUmcVAYatzD_WebWpOoW-wAAAJM"]
[Tue Dec 23 03:30:30.239145 2025] [:error] [pid 40269:tid 40350] [client 68.218.96.24:15816] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUmcVi06Z11fTcfdsqQZngAAARU"]
[Tue Dec 23 03:30:33.023670 2025] [:error] [pid 12110:tid 12112] [client 68.218.96.24:15765] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUmcWQYatzD_WebWpOoXAQAAAIA"]
[Tue Dec 23 03:30:35.492984 2025] [:error] [pid 12110:tid 12124] [client 68.218.96.24:15767] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUmcWwYatzD_WebWpOoXCwAAAIw"]
[Tue Dec 23 03:30:36.368287 2025] [:error] [pid 40361:tid 40385] [client 68.218.96.24:15850] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUmcXOxiDEK95vL2EDoZSAAAAFY"]
[Tue Dec 23 03:30:38.126561 2025] [:error] [pid 40267:tid 40273] [client 68.218.96.24:15829] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aUmcXuTPWWVt2GkrftCtEAAAAAA"]
[Tue Dec 23 03:30:39.512975 2025] [:error] [pid 40267:tid 40293] [client 68.218.96.24:15744] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aUmcX-TPWWVt2GkrftCtEQAAABQ"]
[Tue Dec 23 03:30:43.222975 2025] [:error] [pid 40267:tid 40278] [client 68.218.96.24:15860] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aUmcY-TPWWVt2GkrftCtFwAAAAU"]
[Tue Dec 23 03:31:00.041929 2025] [:error] [pid 28774:tid 28780] [client 68.218.96.24:15752] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUmcdOV-jx8hKghjrvDyXwAAAAI"]
[Tue Dec 23 03:31:00.431247 2025] [:error] [pid 28776:tid 28835] [client 68.218.96.24:15756] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUmcdMVQ1uKEcIEUOhRZMgAAAIA"]
[Tue Dec 23 03:31:02.587163 2025] [:error] [pid 28775:tid 28812] [client 68.218.96.24:15841] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUmcdrIPUGuv8yCXLKfrBgAAAEQ"]
[Tue Dec 23 03:31:04.096288 2025] [:error] [pid 28776:tid 28841] [client 68.218.96.24:15846] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aUmceMVQ1uKEcIEUOhRZOAAAAIY"]
[Tue Dec 23 03:31:08.407834 2025] [:error] [pid 28775:tid 28823] [client 68.218.96.24:15823] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aUmcfLIPUGuv8yCXLKfrDQAAAE8"]
[Tue Dec 23 03:31:10.013423 2025] [:error] [pid 28776:tid 28848] [client 68.218.96.24:15838] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aUmcfsVQ1uKEcIEUOhRZSgAAAI0"]
[Tue Dec 23 03:31:13.580697 2025] [:error] [pid 28775:tid 28808] [client 68.218.96.24:15745] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aUmcgbIPUGuv8yCXLKfrEAAAAEA"]
[Tue Dec 23 03:31:14.703693 2025] [:error] [pid 28864:tid 28869] [client 68.218.96.24:15853] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aUmcgiNzLSnONWdcTch9BAAAAMM"]
[Tue Dec 23 03:31:16.350234 2025] [:error] [pid 28774:tid 28790] [client 68.218.96.24:15758] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aUmchOV-jx8hKghjrvDyfgAAAAw"]
[Tue Dec 23 03:31:17.396418 2025] [:error] [pid 28864:tid 28883] [client 68.218.96.24:15848] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aUmchSNzLSnONWdcTch9CAAAANE"]
[Tue Dec 23 03:31:17.812430 2025] [:error] [pid 28775:tid 28831] [client 68.218.96.24:15794] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aUmchbIPUGuv8yCXLKfrFQAAAFc"]
[Tue Dec 23 03:31:19.274050 2025] [:error] [pid 28864:tid 28869] [client 68.218.96.24:15837] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Dec 23 03:31:24.275738 2025] [:error] [pid 29143:tid 29146] [client 68.218.96.24:15827] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue Dec 23 03:31:24.349001 2025] [:error] [pid 29143:tid 29147] [client 68.218.96.24:15827] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Tue Dec 23 03:31:24.412808 2025] [:error] [pid 29143:tid 29148] [client 68.218.96.24:15827] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Dec 23 03:31:24.477811 2025] [:error] [pid 29143:tid 29149] [client 68.218.96.24:15827] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Tue Dec 23 03:31:24.548580 2025] [:error] [pid 29143:tid 29151] [client 68.218.96.24:15827] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Tue Dec 23 03:31:24.618089 2025] [:error] [pid 29143:tid 29152] [client 68.218.96.24:15827] [client 68.218.96.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aUmcjIOXHKM-bn-r9dxpNQAAAAY"]
[Tue Dec 23 03:31:28.949717 2025] [:error] [pid 29047:tid 29078] [client 68.218.96.24:15764] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Dec 23 03:31:29.440816 2025] [:error] [pid 29047:tid 29082] [client 68.218.96.24:15764] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Dec 23 03:31:29.495674 2025] [:error] [pid 29047:tid 29084] [client 68.218.96.24:15764] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Dec 23 03:31:29.552069 2025] [:error] [pid 29047:tid 29085] [client 68.218.96.24:15764] File does not exist: /usr/local/apache/htdocs/suspended-page/manage.php
[Tue Dec 23 03:31:29.631714 2025] [:error] [pid 29047:tid 29088] [client 68.218.96.24:15764] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aUmckQaidInN0ghsO59wBgAAAMs"]
[Tue Dec 23 03:31:32.444380 2025] [:error] [pid 29246:tid 29266] [client 68.218.96.24:15868] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aUmclC4RWmRBJR5pHCHwfAAAAIM"]
[Tue Dec 23 03:31:45.068841 2025] [:error] [pid 29523:tid 29582] [client 68.218.96.24:15753] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aUmcoc3Iw7NRCPPao7egTQAAAAI"]
[Tue Dec 23 03:31:46.723412 2025] [:error] [pid 29524:tid 29615] [client 68.218.96.24:15818] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aUmcon1JNag5vnuPsWl6QwAAAEE"]
[Tue Dec 23 03:31:48.087249 2025] [:error] [pid 29523:tid 29602] [client 68.218.96.24:15747] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aUmcpM3Iw7NRCPPao7egXAAAABY"]
[Tue Dec 23 03:31:49.574858 2025] [:error] [pid 29697:tid 29711] [client 68.218.96.24:15842] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aUmcpWICuu3K6EzI_bEB2gAAAMQ"]
[Tue Dec 23 03:31:51.113266 2025] [:error] [pid 29523:tid 29590] [client 68.218.96.24:15866] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUmcp83Iw7NRCPPao7egYwAAAAo"]
[Tue Dec 23 03:31:52.195258 2025] [:error] [pid 29697:tid 29713] [client 68.218.96.24:15864] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUmcqGICuu3K6EzI_bEB3AAAAMY"]
[Tue Dec 23 03:31:54.256468 2025] [:error] [pid 29523:tid 29588] [client 68.218.96.24:15769] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUmcqs3Iw7NRCPPao7egaAAAAAg"]
[Tue Dec 23 03:31:56.853998 2025] [:error] [pid 29524:tid 29622] [client 68.218.96.24:15778] [client 68.218.96.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aUmcrH1JNag5vnuPsWl6UgAAAEg"]
[Tue Dec 23 09:05:41.678636 2025] [:error] [pid 49150:tid 49163] [client 170.106.187.106:38104] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUnq5UuL91O4jNPzb4Hy4QAAAMs"]
[Tue Dec 23 18:40:13.983027 2025] [:error] [pid 3406:tid 3479] [client 192.144.148.122:37136] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUpxjfn8DLWxW7TPzpHB3QAAAE8"]
[Tue Dec 23 23:51:04.291088 2025] [:error] [pid 3405:tid 3457] [client 136.158.56.66:21455] [client 136.158.56.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.56.66, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aUq6aLdHHpIDpQ39rwl3EwAAABQ"]
[Tue Dec 23 23:51:04.298591 2025] [:error] [pid 3405:tid 3457] [client 136.158.56.66:21455] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 24 01:12:10.832939 2025] [:error] [pid 17494:tid 17545] [client 43.140.247.223:42768] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUrNaqRJtN8zpyW4DmQArgAAABU"]
[Wed Dec 24 04:44:15.087895 2025] [:error] [pid 16550:tid 16560] [client 4.213.163.196:5076] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Wed Dec 24 04:44:15.641286 2025] [:error] [pid 16550:tid 16552] [client 4.213.163.196:5076] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Wed Dec 24 04:44:15.798290 2025] [:error] [pid 16550:tid 16554] [client 4.213.163.196:5076] File does not exist: /usr/local/apache/htdocs/suspended-page/file12.php
[Wed Dec 24 04:44:16.095614 2025] [:error] [pid 16550:tid 16570] [client 4.213.163.196:5076] File does not exist: /usr/local/apache/htdocs/suspended-page/file14.php
[Wed Dec 24 04:44:16.258586 2025] [:error] [pid 16550:tid 16571] [client 4.213.163.196:5076] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Wed Dec 24 04:44:16.403430 2025] [:error] [pid 16550:tid 16566] [client 4.213.163.196:5076] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Dec 24 04:44:16.560123 2025] [:error] [pid 16550:tid 16556] [client 4.213.163.196:5076] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Wed Dec 24 04:44:17.124920 2025] [:error] [pid 16550:tid 16559] [client 4.213.163.196:5076] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aUr_IaYYcdD-LuO7vrDqZwAAAMc"]
[Wed Dec 24 04:44:20.922200 2025] [:error] [pid 16466:tid 16489] [client 4.213.163.196:4805] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aUr_JLu0JcuKJMjJn6xecgAAABM"]
[Wed Dec 24 04:44:30.352954 2025] [:error] [pid 54139:tid 54148] [client 4.213.163.196:41925] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aUr_LsrYCZenIDzgXuJbEgAAAQc"]
[Wed Dec 24 04:44:34.406939 2025] [:error] [pid 16550:tid 16575] [client 4.213.163.196:5068] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aUr_MqYYcdD-LuO7vrDqbgAAANc"]
[Wed Dec 24 04:44:35.339718 2025] [:error] [pid 16468:tid 16542] [client 4.213.163.196:44206] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aUr_M4dyfuSTFLkCbP-vdQAAAJI"]
[Wed Dec 24 04:44:37.915474 2025] [:error] [pid 16550:tid 16556] [client 4.213.163.196:44176] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aUr_NaYYcdD-LuO7vrDqcQAAAMQ"]
[Wed Dec 24 04:44:44.462214 2025] [:error] [pid 54139:tid 54161] [client 4.213.163.196:38750] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aUr_PMrYCZenIDzgXuJbHwAAARQ"]
[Wed Dec 24 04:44:51.813046 2025] [:error] [pid 54139:tid 54144] [client 4.213.163.196:39190] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless1.php"] [unique_id "aUr_Q8rYCZenIDzgXuJbKwAAAQM"]
[Wed Dec 24 04:44:54.596278 2025] [:error] [pid 54139:tid 54150] [client 4.213.163.196:4957] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless1.php"] [unique_id "aUr_RsrYCZenIDzgXuJbNQAAAQk"]
[Wed Dec 24 04:44:58.931304 2025] [:error] [pid 16550:tid 16576] [client 4.213.163.196:40247] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless1.php"] [unique_id "aUr_SqYYcdD-LuO7vrDqhAAAANg"]
[Wed Dec 24 04:45:09.116093 2025] [:error] [pid 54139:tid 54152] [client 4.213.163.196:40210] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUr_VcrYCZenIDzgXuJbPQAAAQs"]
[Wed Dec 24 04:45:10.778363 2025] [:error] [pid 16467:tid 16513] [client 4.213.163.196:44030] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aUr_Vo0TJMcBxX5slgpzRgAAAFA"]
[Wed Dec 24 04:45:23.965874 2025] [:error] [pid 54139:tid 54157] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php
[Wed Dec 24 04:45:24.111875 2025] [:error] [pid 54139:tid 54150] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Wed Dec 24 04:45:24.254747 2025] [:error] [pid 54139:tid 54152] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/astab.php
[Wed Dec 24 04:45:24.396491 2025] [:error] [pid 54139:tid 54144] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Wed Dec 24 04:45:24.543920 2025] [:error] [pid 54139:tid 54163] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/file25.php
[Wed Dec 24 04:45:24.733975 2025] [:error] [pid 54139:tid 54164] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Wed Dec 24 04:45:24.875733 2025] [:error] [pid 54139:tid 54146] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/mek.php
[Wed Dec 24 04:45:25.024855 2025] [:error] [pid 54139:tid 54149] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Wed Dec 24 04:45:25.265439 2025] [:error] [pid 54139:tid 54161] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed Dec 24 04:45:25.448237 2025] [:error] [pid 54139:tid 54162] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/dlex.php
[Wed Dec 24 04:45:25.618066 2025] [:error] [pid 54139:tid 54165] [client 4.213.163.196:4788] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Wed Dec 24 04:45:25.773962 2025] [:error] [pid 54139:tid 54160] [client 4.213.163.196:4788] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUr_ZcrYCZenIDzgXuJbUgAAARM"]
[Wed Dec 24 04:45:33.254135 2025] [:error] [pid 16466:tid 16474] [client 4.213.163.196:4628] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUr_bbu0JcuKJMjJn6xepQAAAAQ"]
[Wed Dec 24 04:45:36.316164 2025] [:error] [pid 16466:tid 16488] [client 4.213.163.196:39677] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUr_cLu0JcuKJMjJn6xeqQAAABI"]
[Wed Dec 24 04:45:40.040106 2025] [:error] [pid 16467:tid 16497] [client 4.213.163.196:42472] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aUr_dI0TJMcBxX5slgpzTgAAAEA"]
[Wed Dec 24 04:45:43.459311 2025] [:error] [pid 54139:tid 54147] [client 4.213.163.196:40608] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aUr_d8rYCZenIDzgXuJbYAAAAQY"]
[Wed Dec 24 04:45:44.809832 2025] [:error] [pid 16467:tid 16501] [client 4.213.163.196:42744] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aUr_eI0TJMcBxX5slgpzUAAAAEQ"]
[Wed Dec 24 04:45:47.968950 2025] [:error] [pid 54139:tid 54150] [client 4.213.163.196:41863] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aUr_e8rYCZenIDzgXuJbZgAAAQk"]
[Wed Dec 24 04:45:51.068151 2025] [:error] [pid 16466:tid 16477] [client 4.213.163.196:43770] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aUr_f7u0JcuKJMjJn6xeuAAAAAc"]
[Wed Dec 24 04:45:54.074803 2025] [:error] [pid 16550:tid 16560] [client 4.213.163.196:40806] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aUr_gqYYcdD-LuO7vrDqwAAAAMg"]
[Wed Dec 24 04:45:55.220237 2025] [:error] [pid 16550:tid 16566] [client 4.213.163.196:4407] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aUr_g6YYcdD-LuO7vrDqwgAAAM4"]
[Wed Dec 24 04:45:58.502765 2025] [:error] [pid 54139:tid 54151] [client 4.213.163.196:44586] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aUr_hsrYCZenIDzgXuJbbQAAAQo"]
[Wed Dec 24 04:46:08.427979 2025] [:error] [pid 54139:tid 54149] [client 4.213.163.196:4486] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aUr_kMrYCZenIDzgXuJbdAAAAQg"]
[Wed Dec 24 04:46:10.161336 2025] [:error] [pid 54139:tid 54141] [client 4.213.163.196:39410] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aUr_ksrYCZenIDzgXuJbdwAAAQA"]
[Wed Dec 24 04:46:13.182305 2025] [:error] [pid 54139:tid 54147] [client 4.213.163.196:44561] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aUr_lcrYCZenIDzgXuJbeQAAAQY"]
[Wed Dec 24 04:46:16.763912 2025] [:error] [pid 54139:tid 54157] [client 4.213.163.196:38606] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aUr_mMrYCZenIDzgXuJbfQAAARA"]
[Wed Dec 24 04:46:22.799601 2025] [:error] [pid 16466:tid 16473] [client 4.213.163.196:39366] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aUr_nru0JcuKJMjJn6xexgAAAAM"]
[Wed Dec 24 04:46:29.533944 2025] [:error] [pid 16466:tid 16476] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Dec 24 04:46:29.684969 2025] [:error] [pid 16466:tid 16472] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Wed Dec 24 04:46:29.858465 2025] [:error] [pid 16466:tid 16492] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Wed Dec 24 04:46:30.033857 2025] [:error] [pid 16466:tid 16478] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Wed Dec 24 04:46:30.183251 2025] [:error] [pid 16466:tid 16494] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetx.php
[Wed Dec 24 04:46:30.350596 2025] [:error] [pid 16466:tid 16485] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Wed Dec 24 04:46:31.795854 2025] [:error] [pid 16466:tid 16481] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Wed Dec 24 04:46:32.097914 2025] [:error] [pid 16466:tid 16484] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/law.php
[Wed Dec 24 04:46:32.267134 2025] [:error] [pid 16466:tid 16493] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Wed Dec 24 04:46:32.425855 2025] [:error] [pid 16466:tid 16470] [client 4.213.163.196:38602] File does not exist: /usr/local/apache/htdocs/suspended-page/file24.php
[Wed Dec 24 04:46:32.569953 2025] [:error] [pid 16466:tid 16471] [client 4.213.163.196:38602] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aUr_qLu0JcuKJMjJn6xe1gAAAAE"]
[Wed Dec 24 04:46:37.358267 2025] [:error] [pid 16468:tid 16542] [client 4.213.163.196:42716] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aUr_rYdyfuSTFLkCbP-v3gAAAJI"]
[Wed Dec 24 04:46:40.559588 2025] [:error] [pid 16550:tid 16552] [client 4.213.163.196:4207] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aUr_sKYYcdD-LuO7vrDrAAAAAMA"]
[Wed Dec 24 04:46:42.317947 2025] [:error] [pid 16466:tid 16472] [client 4.213.163.196:42724] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aUr_sru0JcuKJMjJn6xe2wAAAAI"]
[Wed Dec 24 04:46:49.369326 2025] [:error] [pid 16468:tid 16537] [client 4.213.163.196:43400] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aUr_uYdyfuSTFLkCbP-v7gAAAI0"]
[Wed Dec 24 04:46:52.023428 2025] [:error] [pid 16468:tid 16541] [client 4.213.163.196:4602] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aUr_vIdyfuSTFLkCbP-v8QAAAJE"]
[Wed Dec 24 04:46:52.912684 2025] [:error] [pid 54139:tid 54164] [client 4.213.163.196:44267] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aUr_vMrYCZenIDzgXuJbnQAAARc"]
[Wed Dec 24 04:46:53.500291 2025] [:error] [pid 16467:tid 16517] [client 4.213.163.196:4568] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aUr_vY0TJMcBxX5slgpzdwAAAFQ"]
[Wed Dec 24 04:46:55.607609 2025] [:error] [pid 16468:tid 16533] [client 4.213.163.196:44275] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file8.php"] [unique_id "aUr_v4dyfuSTFLkCbP-v9wAAAIk"]
[Wed Dec 24 04:46:56.902283 2025] [:error] [pid 16468:tid 16547] [client 4.213.163.196:49567] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file8.php"] [unique_id "aUr_wIdyfuSTFLkCbP-v-wAAAJc"]
[Wed Dec 24 04:47:05.230949 2025] [:error] [pid 54139:tid 54155] [client 4.213.163.196:42430] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file8.php"] [unique_id "aUr_ycrYCZenIDzgXuJbqwAAAQ4"]
[Wed Dec 24 04:47:10.558669 2025] [:error] [pid 16550:tid 16559] [client 4.213.163.196:42131] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUr_zqYYcdD-LuO7vrDrbgAAAMc"]
[Wed Dec 24 04:47:15.964688 2025] [:error] [pid 16468:tid 16541] [client 4.213.163.196:38846] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUr_04dyfuSTFLkCbP-wQgAAAJE"]
[Wed Dec 24 04:47:20.629692 2025] [:error] [pid 16468:tid 16546] [client 4.213.163.196:4177] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUr_2IdyfuSTFLkCbP-wSQAAAJY"]
[Wed Dec 24 04:47:23.161456 2025] [:error] [pid 16468:tid 16526] [client 4.213.163.196:42745] [client 4.213.163.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aUr_24dyfuSTFLkCbP-wTAAAAII"]
[Wed Dec 24 04:47:46.860272 2025] [:error] [pid 16468:tid 16540] [client 4.213.163.196:39368] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Wed Dec 24 04:47:47.037492 2025] [:error] [pid 16468:tid 16525] [client 4.213.163.196:39368] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Dec 24 04:48:01.610213 2025] [:error] [pid 16550:tid 16576] [client 4.213.163.196:40694] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Dec 24 08:25:29.983280 2025] [:error] [pid 16550:tid 16555] [client 178.128.89.25:45596] [client 178.128.89.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-aYYcdD-LuO7vrAnAAAAAMM"]
[Wed Dec 24 08:25:29.985931 2025] [:error] [pid 16466:tid 16486] [client 143.198.210.125:34848] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-bu0JcuKJMjJn6yNvQAAABA"]
[Wed Dec 24 08:25:30.133148 2025] [:error] [pid 16466:tid 16471] [client 178.128.89.25:42640] [client 178.128.89.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-ru0JcuKJMjJn6yNvgAAAAE"]
[Wed Dec 24 08:25:30.137093 2025] [:error] [pid 16466:tid 16488] [client 143.198.210.125:49380] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-ru0JcuKJMjJn6yNvwAAABI"]
[Wed Dec 24 08:25:30.139226 2025] [:error] [pid 16550:tid 16559] [client 143.198.210.125:49390] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnAgAAAMc"]
[Wed Dec 24 08:25:30.155952 2025] [:error] [pid 16550:tid 16561] [client 178.128.89.25:44810] [client 178.128.89.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnAwAAAMk"]
[Wed Dec 24 08:25:30.176625 2025] [:error] [pid 16466:tid 16477] [client 178.128.89.25:35348] [client 178.128.89.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-ru0JcuKJMjJn6yNwAAAAAc"]
[Wed Dec 24 08:25:30.198407 2025] [:error] [pid 16550:tid 16575] [client 143.198.210.125:44656] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnBAAAANc"]
[Wed Dec 24 08:25:30.217046 2025] [:error] [pid 16550:tid 16556] [client 143.198.210.125:28678] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnBQAAAMQ"]
[Wed Dec 24 08:25:30.232874 2025] [:error] [pid 16466:tid 16490] [client 143.198.210.125:46104] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-ru0JcuKJMjJn6yNwQAAABQ"]
[Wed Dec 24 08:25:30.235308 2025] [:error] [pid 16550:tid 16569] [client 143.198.210.125:35350] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnBgAAANE"]
[Wed Dec 24 08:25:30.297405 2025] [:error] [pid 16550:tid 16558] [client 143.198.210.125:41044] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnCQAAAMY"]
[Wed Dec 24 08:25:30.297456 2025] [:error] [pid 16550:tid 16552] [client 143.198.210.125:36176] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnCAAAAMA"]
[Wed Dec 24 08:25:30.301160 2025] [:error] [pid 16550:tid 16553] [client 143.198.210.125:36160] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnCgAAAME"]
[Wed Dec 24 08:25:30.417983 2025] [:error] [pid 16550:tid 16573] [client 178.128.89.25:55076] [client 178.128.89.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUsy-qYYcdD-LuO7vrAnCwAAANU"]
[Wed Dec 24 08:33:48.509111 2025] [:error] [pid 54139:tid 54151] [client 143.198.210.125:55468] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUs07MrYCZenIDzgXuK3FgAAAQo"]
[Wed Dec 24 10:49:45.629214 2025] [:error] [pid 28777:tid 28787] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Dec 24 10:49:45.873866 2025] [:error] [pid 28777:tid 28796] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Dec 24 10:49:46.103998 2025] [:error] [pid 28777:tid 28800] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Wed Dec 24 10:49:46.374174 2025] [:error] [pid 28777:tid 28789] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Dec 24 10:49:46.593505 2025] [:error] [pid 28777:tid 28799] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Dec 24 10:49:46.890007 2025] [:error] [pid 28777:tid 28795] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Dec 24 10:49:47.119666 2025] [:error] [pid 28777:tid 28789] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Dec 24 10:49:47.342473 2025] [:error] [pid 28777:tid 28796] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Dec 24 10:49:47.823301 2025] [:error] [pid 28777:tid 28786] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Dec 24 10:49:48.302224 2025] [:error] [pid 28777:tid 28787] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Wed Dec 24 10:49:48.590164 2025] [:error] [pid 28777:tid 28801] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Dec 24 10:49:48.851895 2025] [:error] [pid 28777:tid 28793] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Dec 24 10:49:56.619862 2025] [:error] [pid 28777:tid 28793] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Dec 24 10:49:56.847308 2025] [:error] [pid 28777:tid 28798] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Dec 24 10:49:57.075689 2025] [:error] [pid 28777:tid 28784] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Dec 24 10:49:57.297021 2025] [:error] [pid 28777:tid 28800] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Dec 24 10:49:57.567195 2025] [:error] [pid 28777:tid 28794] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Dec 24 10:49:57.820153 2025] [:error] [pid 28777:tid 28796] [client 104.234.53.223:27175] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Dec 24 10:50:01.546931 2025] [:error] [pid 28777:tid 28783] [client 104.234.53.223:27175] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aUtU2ZBVBcZ34cSqz8rBTAAAAYQ"]
[Wed Dec 24 10:50:02.730255 2025] [:error] [pid 16466:tid 16488] [client 63.135.161.68:30319] [client 63.135.161.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aUtU2ru0JcuKJMjJn6zBHQAAABI"]
[Wed Dec 24 10:50:03.885246 2025] [:error] [pid 28405:tid 28412] [client 104.234.53.226:41277] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Dec 24 10:50:04.608280 2025] [:error] [pid 28405:tid 28428] [client 104.234.53.226:41277] [client 104.234.53.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aUtU3MKkTWlhmfdXFqboowAAAVI"]
[Wed Dec 24 10:50:05.615864 2025] [:error] [pid 16550:tid 16557] [client 63.135.161.66:55653] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Dec 24 10:50:05.847564 2025] [:error] [pid 16550:tid 16571] [client 63.135.161.66:55653] [client 63.135.161.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aUtU3aYYcdD-LuO7vrBmCgAAANM"]
[Wed Dec 24 10:50:07.587714 2025] [:error] [pid 16550:tid 16552] [client 63.135.161.72:53857] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Dec 24 10:50:08.728048 2025] [:error] [pid 16550:tid 16574] [client 63.135.161.72:53857] [client 63.135.161.72] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/elementor/wp-wjvngrh.php"] [unique_id "aUtU4KYYcdD-LuO7vrBmUQAAANY"]
[Wed Dec 24 10:50:09.628329 2025] [:error] [pid 16550:tid 16558] [client 104.234.53.223:52113] [client 104.234.53.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aUtU4aYYcdD-LuO7vrBmcwAAAMY"]
[Wed Dec 24 10:50:10.462889 2025] [:error] [pid 16467:tid 16517] [client 63.135.161.51:45149] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aUtU4o0TJMcBxX5slgreCwAAAFQ"]
[Wed Dec 24 10:50:11.045147 2025] [:error] [pid 16550:tid 16575] [client 63.135.161.61:62457] [client 63.135.161.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aUtU4qYYcdD-LuO7vrBmngAAANc"]
[Wed Dec 24 10:50:11.535710 2025] [:error] [pid 29371:tid 29390] [client 63.135.161.73:36461] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aUtU43s-DlKLysSq5L8RbAAAAdE"]
[Wed Dec 24 10:50:12.075038 2025] [:error] [pid 28777:tid 28784] [client 63.135.161.55:28015] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aUtU45BVBcZ34cSqz8rB3wAAAYU"]
[Wed Dec 24 10:50:12.574972 2025] [:error] [pid 16550:tid 16560] [client 104.234.53.213:64599] [client 104.234.53.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aUtU5KYYcdD-LuO7vrBm1QAAAMg"]
[Wed Dec 24 10:50:13.297028 2025] [:error] [pid 28405:tid 28423] [client 63.135.161.76:42565] [client 63.135.161.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aUtU5cKkTWlhmfdXFqbo6QAAAU0"]
[Wed Dec 24 10:50:13.815932 2025] [:error] [pid 16550:tid 16575] [client 104.234.53.221:33303] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Wed Dec 24 10:50:14.294021 2025] [:error] [pid 16550:tid 16559] [client 104.234.53.221:33303] [client 104.234.53.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aUtU5qYYcdD-LuO7vrBnDQAAAMc"]
[Wed Dec 24 10:50:15.238098 2025] [:error] [pid 54139:tid 54156] [client 63.135.161.55:32251] [client 63.135.161.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aUtU58rYCZenIDzgXuL_XwAAAQ8"]
[Wed Dec 24 10:50:15.941910 2025] [:error] [pid 54139:tid 54149] [client 63.135.161.73:28625] [client 63.135.161.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aUtU58rYCZenIDzgXuL_bQAAAQg"]
[Wed Dec 24 10:50:16.449285 2025] [:error] [pid 16550:tid 16564] [client 63.135.161.51:21895] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Wed Dec 24 10:50:16.680254 2025] [:error] [pid 16550:tid 16564] [client 63.135.161.51:21895] [client 63.135.161.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aUtU6KYYcdD-LuO7vrBnUgAAAMw"]
[Wed Dec 24 10:50:17.228401 2025] [:error] [pid 16468:tid 16544] [client 63.135.161.74:50107] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Wed Dec 24 10:50:18.056414 2025] [:error] [pid 16468:tid 16536] [client 63.135.161.74:50107] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed Dec 24 10:50:18.393244 2025] [:error] [pid 16468:tid 16532] [client 63.135.161.74:50107] [client 63.135.161.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aUtU6odyfuSTFLkCbP8jggAAAIg"]
[Wed Dec 24 10:50:30.039130 2025] [:error] [pid 16466:tid 16474] [client 63.135.161.50:37419] [client 63.135.161.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/11/"] [unique_id "aUtU9ru0JcuKJMjJn6zCbgAAAAQ"]
[Wed Dec 24 10:50:39.767703 2025] [:error] [pid 54139:tid 54143] [client 104.234.53.215:30611] [client 104.234.53.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aUtU_8rYCZenIDzgXuIBRAAAAQI"]
[Wed Dec 24 10:51:13.588244 2025] [:error] [pid 54139:tid 54159] [client 63.135.161.59:51079] [client 63.135.161.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aUtVIcrYCZenIDzgXuID-gAAARI"]
[Wed Dec 24 13:23:07.318797 2025] [:error] [pid 28405:tid 28423] [client 221.229.106.25:46730] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUt4u8KkTWlhmfdXFqYYPwAAAU0"]
[Wed Dec 24 19:55:47.179334 2025] [:error] [pid 54139:tid 54158] [client 182.42.105.144:41646] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUvUw8rYCZenIDzgXuKl2QAAARE"]
[Thu Dec 25 04:19:30.295502 2025] [:error] [pid 31570:tid 31613] [client 178.128.89.25:38992] [client 178.128.89.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUxK0mPy2DpAzW_4a2iCrAAAAE0"]
[Thu Dec 25 04:45:33.953586 2025] [:error] [pid 2996:tid 3002] [client 170.106.15.3:37414] [client 170.106.15.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUxQ7arrTp0EWNyhaIQtewAAAQQ"]
[Thu Dec 25 08:28:32.529805 2025] [:error] [pid 31655:tid 31674] [client 106.119.167.146:43631] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aUyFMJozPMk9HPtIJPMVvAAAANE"]
[Thu Dec 25 14:58:16.263107 2025] [:error] [pid 31570:tid 31614] [client 43.167.239.66:33212] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aUzgiGPy2DpAzW_4a2gJ4AAAAE4"]
[Thu Dec 25 19:23:30.773640 2025] [:error] [pid 64820:tid 64847] [client 43.159.148.221:44478] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aU0essSuTdTvkipi540-mwAAAVc"]
[Thu Dec 25 19:46:32.387182 2025] [:error] [pid 64910:tid 64950] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Dec 25 19:46:33.667685 2025] [:error] [pid 64910:tid 64946] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Dec 25 19:46:33.801227 2025] [:error] [pid 64910:tid 64942] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Thu Dec 25 19:46:33.958920 2025] [:error] [pid 64910:tid 64954] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/file8.php
[Thu Dec 25 19:46:34.135144 2025] [:error] [pid 64910:tid 64956] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Dec 25 19:46:34.328980 2025] [:error] [pid 64910:tid 64953] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Thu Dec 25 19:46:34.471793 2025] [:error] [pid 64910:tid 64965] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Thu Dec 25 19:46:34.625333 2025] [:error] [pid 64910:tid 64959] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Thu Dec 25 19:46:34.776680 2025] [:error] [pid 64910:tid 64952] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Dec 25 19:46:35.122472 2025] [:error] [pid 64910:tid 64961] [client 4.194.57.10:42115] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Dec 25 19:46:35.594890 2025] [:error] [pid 64910:tid 64964] [client 4.194.57.10:42115] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aU0kG-es2ob7vYHBZqB7CgAAAhc"]
[Thu Dec 25 19:46:36.958904 2025] [:error] [pid 31569:tid 31583] [client 4.194.57.10:65227] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aU0kHGiSFBH7Ee_uldXj7AAAAAo"]
[Thu Dec 25 19:46:37.719325 2025] [:error] [pid 64820:tid 64825] [client 4.194.57.10:65293] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aU0kHcSuTdTvkipi541FhwAAAUE"]
[Thu Dec 25 19:46:39.630008 2025] [:error] [pid 64820:tid 64847] [client 4.194.57.10:65286] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aU0kH8SuTdTvkipi541FjAAAAVc"]
[Thu Dec 25 19:46:41.580259 2025] [:error] [pid 31570:tid 31603] [client 4.194.57.10:64540] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aU0kIWPy2DpAzW_4a2hN5QAAAEM"]
[Thu Dec 25 19:46:43.961955 2025] [:error] [pid 31570:tid 31609] [client 4.194.57.10:64473] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aU0kI2Py2DpAzW_4a2hN6AAAAEk"]
[Thu Dec 25 19:46:46.566079 2025] [:error] [pid 31569:tid 31581] [client 4.194.57.10:65313] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aU0kJmiSFBH7Ee_uldXj7wAAAAg"]
[Thu Dec 25 19:46:49.309088 2025] [:error] [pid 31655:tid 31678] [client 4.194.57.10:42145] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aU0kKZozPMk9HPtIJPOnbAAAANU"]
[Thu Dec 25 19:46:53.255149 2025] [:error] [pid 64820:tid 64840] [client 4.194.57.10:42132] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aU0kLcSuTdTvkipi541FngAAAVA"]
[Thu Dec 25 19:46:55.352031 2025] [:error] [pid 64971:tid 64978] [client 4.194.57.10:65242] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aU0kL6qyk1GkxTrDJixNYQAAAkE"]
[Thu Dec 25 19:46:57.665739 2025] [:error] [pid 31570:tid 31603] [client 4.194.57.10:65333] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aU0kMWPy2DpAzW_4a2hN9AAAAEM"]
[Thu Dec 25 19:47:02.131710 2025] [:error] [pid 64820:tid 64842] [client 4.194.57.10:65251] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aU0kNsSuTdTvkipi541FpwAAAVI"]
[Thu Dec 25 19:47:05.261712 2025] [:error] [pid 31655:tid 31671] [client 4.194.57.10:42153] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aU0kOZozPMk9HPtIJPOncwAAAM4"]
[Thu Dec 25 19:47:07.877116 2025] [:error] [pid 64820:tid 64825] [client 4.194.57.10:64545] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aU0kO8SuTdTvkipi541FrQAAAUE"]
[Thu Dec 25 19:47:10.144021 2025] [:error] [pid 31570:tid 31619] [client 4.194.57.10:65307] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aU0kPmPy2DpAzW_4a2hN_gAAAFM"]
[Thu Dec 25 19:47:13.433351 2025] [:error] [pid 31571:tid 31640] [client 4.194.57.10:62502] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aU0kQe7e_lLK2X5wU8nE8QAAAI0"]
[Thu Dec 25 19:47:16.996502 2025] [:error] [pid 64820:tid 64848] [client 4.194.57.10:65240] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU0kRMSuTdTvkipi541FuAAAAVg"]
[Thu Dec 25 19:47:19.805266 2025] [:error] [pid 64971:tid 64982] [client 4.194.57.10:64532] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU0kR6qyk1GkxTrDJixNeAAAAkU"]
[Thu Dec 25 19:47:22.780680 2025] [:error] [pid 31570:tid 31620] [client 4.194.57.10:42118] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU0kSmPy2DpAzW_4a2hOCQAAAFQ"]
[Thu Dec 25 19:47:24.185587 2025] [:error] [pid 31570:tid 31619] [client 4.194.57.10:65255] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU0kTGPy2DpAzW_4a2hOCgAAAFM"]
[Thu Dec 25 19:47:25.713294 2025] [:error] [pid 64910:tid 64958] [client 4.194.57.10:64574] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aU0kTees2ob7vYHBZqB7FwAAAhE"]
[Thu Dec 25 19:47:28.130686 2025] [:error] [pid 31570:tid 31615] [client 4.194.57.10:65329] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aU0kUGPy2DpAzW_4a2hODwAAAE8"]
[Thu Dec 25 19:47:31.493821 2025] [:error] [pid 64910:tid 64946] [client 4.194.57.10:42144] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aU0kU-es2ob7vYHBZqB7GAAAAgU"]
[Thu Dec 25 19:47:35.986413 2025] [:error] [pid 31569:tid 31589] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Dec 25 19:47:36.150387 2025] [:error] [pid 31569:tid 31594] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Thu Dec 25 19:47:36.316527 2025] [:error] [pid 31569:tid 31593] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/php-info.php
[Thu Dec 25 19:47:36.483592 2025] [:error] [pid 31569:tid 31591] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Thu Dec 25 19:47:37.125510 2025] [:error] [pid 31569:tid 31574] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php
[Thu Dec 25 19:47:37.304450 2025] [:error] [pid 31569:tid 31573] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Thu Dec 25 19:47:37.494247 2025] [:error] [pid 31569:tid 31584] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Thu Dec 25 19:47:37.687632 2025] [:error] [pid 31569:tid 31575] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/file12.php
[Thu Dec 25 19:47:37.874122 2025] [:error] [pid 31569:tid 31585] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/file13.php
[Thu Dec 25 19:47:38.072030 2025] [:error] [pid 31569:tid 31580] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/law2.php
[Thu Dec 25 19:47:38.261117 2025] [:error] [pid 31569:tid 31579] [client 4.194.57.10:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/file19.php
[Thu Dec 25 19:47:38.446365 2025] [:error] [pid 31569:tid 31578] [client 4.194.57.10:64470] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU0kWmiSFBH7Ee_uldXkDQAAAAU"]
[Thu Dec 25 19:47:46.072044 2025] [:error] [pid 31570:tid 31607] [client 4.194.57.10:64535] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU0kYmPy2DpAzW_4a2hOHwAAAEc"]
[Thu Dec 25 19:47:46.960758 2025] [:error] [pid 31655:tid 31659] [client 4.194.57.10:64466] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU0kYpozPMk9HPtIJPOn1AAAAMI"]
[Thu Dec 25 19:47:47.846858 2025] [:error] [pid 64910:tid 64950] [client 4.194.57.10:42146] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU0kY-es2ob7vYHBZqB7JwAAAgk"]
[Thu Dec 25 19:47:49.925153 2025] [:error] [pid 64975:tid 65072] [client 4.194.57.10:64460] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aU0kZSXyboSuXIThjj6YhwAAAw4"]
[Thu Dec 25 19:47:52.963504 2025] [:error] [pid 64909:tid 64917] [client 4.194.57.10:64565] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aU0kaB45RBsBaT7_YDVkKAAAAcM"]
[Thu Dec 25 19:47:55.031523 2025] [:error] [pid 64971:tid 65001] [client 4.194.57.10:65260] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aU0ka6qyk1GkxTrDJixNjAAAAlg"]
[Thu Dec 25 19:47:57.144784 2025] [:error] [pid 64971:tid 64985] [client 4.194.57.10:64548] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aU0kbaqyk1GkxTrDJixNjgAAAkg"]
[Thu Dec 25 19:48:00.436119 2025] [:error] [pid 64975:tid 65082] [client 4.194.57.10:64537] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aU0kcCXyboSuXIThjj6YkwAAAxg"]
[Thu Dec 25 19:48:03.283438 2025] [:error] [pid 31569:tid 31583] [client 4.194.57.10:65274] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aU0kc2iSFBH7Ee_uldXkHAAAAAo"]
[Thu Dec 25 19:48:06.684272 2025] [:error] [pid 64820:tid 64825] [client 4.194.57.10:64558] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aU0kdsSuTdTvkipi541F9QAAAUE"]
[Thu Dec 25 19:48:08.562255 2025] [:error] [pid 31655:tid 31659] [client 4.194.57.10:65323] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aU0keJozPMk9HPtIJPOn5gAAAMI"]
[Thu Dec 25 19:48:10.543334 2025] [:error] [pid 64820:tid 64846] [client 4.194.57.10:65233] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU0kesSuTdTvkipi541F_AAAAVY"]
[Thu Dec 25 19:48:13.837126 2025] [:error] [pid 64820:tid 64831] [client 4.194.57.10:42124] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU0kfcSuTdTvkipi541GBgAAAUc"]
[Thu Dec 25 19:48:15.957469 2025] [:error] [pid 31570:tid 31602] [client 4.194.57.10:64528] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU0kf2Py2DpAzW_4a2hOMQAAAEI"]
[Thu Dec 25 19:48:18.589403 2025] [:error] [pid 64975:tid 65062] [client 4.194.57.10:64562] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU0kgiXyboSuXIThjj6YoQAAAwQ"]
[Thu Dec 25 19:48:22.893642 2025] [:error] [pid 64820:tid 64824] [client 4.194.57.10:65273] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU0khsSuTdTvkipi541GHAAAAUA"]
[Thu Dec 25 19:48:25.608055 2025] [:error] [pid 31655:tid 31680] [client 4.194.57.10:42137] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU0kiZozPMk9HPtIJPOn8QAAANc"]
[Thu Dec 25 19:48:28.153367 2025] [:error] [pid 64971:tid 64978] [client 4.194.57.10:64554] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU0kjKqyk1GkxTrDJixNmgAAAkE"]
[Thu Dec 25 19:48:30.424716 2025] [:error] [pid 64909:tid 64931] [client 4.194.57.10:61861] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU0kjh45RBsBaT7_YDVkOAAAAdE"]
[Thu Dec 25 19:48:32.425614 2025] [:error] [pid 31655:tid 31673] [client 4.194.57.10:42147] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aU0kkJozPMk9HPtIJPOn9AAAANA"]
[Thu Dec 25 19:48:34.105433 2025] [:error] [pid 31571:tid 31631] [client 4.194.57.10:65230] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aU0kku7e_lLK2X5wU8nFNQAAAIQ"]
[Thu Dec 25 19:48:36.137619 2025] [:error] [pid 64975:tid 65068] [client 4.194.57.10:64525] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aU0klCXyboSuXIThjj6YqgAAAwo"]
[Thu Dec 25 19:48:38.454012 2025] [:error] [pid 64975:tid 65077] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Dec 25 19:48:38.625032 2025] [:error] [pid 64975:tid 65071] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Dec 25 19:48:38.796341 2025] [:error] [pid 64975:tid 65061] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Thu Dec 25 19:48:38.985268 2025] [:error] [pid 64975:tid 65082] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/law.php
[Thu Dec 25 19:48:39.158176 2025] [:error] [pid 64975:tid 65069] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/faq.php
[Thu Dec 25 19:48:39.380416 2025] [:error] [pid 64975:tid 65073] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Thu Dec 25 19:48:39.544283 2025] [:error] [pid 64975:tid 65072] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/bs2.php
[Thu Dec 25 19:48:39.739467 2025] [:error] [pid 64975:tid 65080] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Dec 25 19:48:39.923506 2025] [:error] [pid 64975:tid 65063] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Dec 25 19:48:40.086824 2025] [:error] [pid 64975:tid 65060] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Dec 25 19:48:40.274059 2025] [:error] [pid 64975:tid 65065] [client 4.194.57.10:64571] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Dec 25 19:48:40.440364 2025] [:error] [pid 64975:tid 65059] [client 4.194.57.10:64571] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aU0kmCXyboSuXIThjj6YtgAAAwE"]
[Thu Dec 25 19:48:43.004803 2025] [:error] [pid 64909:tid 64932] [client 4.194.57.10:42154] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aU0kmx45RBsBaT7_YDVkVgAAAdI"]
[Thu Dec 25 19:48:47.518052 2025] [:error] [pid 64910:tid 64954] [client 4.194.57.10:42152] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aU0kn-es2ob7vYHBZqB7OwAAAg0"]
[Thu Dec 25 19:48:52.145612 2025] [:error] [pid 31569:tid 31577] [client 4.194.57.10:65237] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aU0kpGiSFBH7Ee_uldXkLAAAAAQ"]
[Thu Dec 25 19:48:58.158801 2025] [:error] [pid 64973:tid 65020] [client 4.194.57.10:61832] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU0kquqHYEKj6K8dhUE4FQAAApA"]
[Thu Dec 25 19:49:01.250262 2025] [:error] [pid 64820:tid 64837] [client 4.194.57.10:65341] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU0krcSuTdTvkipi541GuQAAAU0"]
[Thu Dec 25 19:49:02.842997 2025] [:error] [pid 64973:tid 65009] [client 4.194.57.10:42135] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU0kruqHYEKj6K8dhUE4FwAAAoU"]
[Thu Dec 25 19:49:04.086165 2025] [:error] [pid 31570:tid 31624] [client 4.194.57.10:42169] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU0ksGPy2DpAzW_4a2hOWQAAAFg"]
[Thu Dec 25 19:49:05.970307 2025] [:error] [pid 31655:tid 31668] [client 4.194.57.10:64521] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aU0ksZozPMk9HPtIJPOoFQAAAMs"]
[Thu Dec 25 19:49:08.523096 2025] [:error] [pid 31571:tid 31627] [client 4.194.57.10:65264] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aU0ktO7e_lLK2X5wU8nFSAAAAIA"]
[Thu Dec 25 19:49:10.894626 2025] [:error] [pid 64971:tid 64994] [client 4.194.57.10:42131] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aU0ktqqyk1GkxTrDJixNuQAAAlE"]
[Thu Dec 25 19:49:15.208351 2025] [:error] [pid 64975:tid 65060] [client 4.194.57.10:64487] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aU0kuyXyboSuXIThjj6YwwAAAwI"]
[Thu Dec 25 19:49:16.560443 2025] [:error] [pid 64909:tid 64932] [client 4.194.57.10:65287] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aU0kvB45RBsBaT7_YDVkYgAAAdI"]
[Thu Dec 25 19:49:19.432349 2025] [:error] [pid 64909:tid 64936] [client 4.194.57.10:42112] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aU0kvx45RBsBaT7_YDVkZAAAAdY"]
[Thu Dec 25 19:49:21.934180 2025] [:error] [pid 31655:tid 31669] [client 4.194.57.10:65298] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aU0kwZozPMk9HPtIJPOoGAAAAMw"]
[Thu Dec 25 19:49:23.612005 2025] [:error] [pid 31569:tid 31585] [client 4.194.57.10:65250] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aU0kw2iSFBH7Ee_uldXkPwAAAAw"]
[Thu Dec 25 19:49:26.756288 2025] [:error] [pid 64820:tid 64841] [client 4.194.57.10:64561] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU0kxsSuTdTvkipi541G0gAAAVE"]
[Thu Dec 25 19:49:29.871814 2025] [:error] [pid 31569:tid 31576] [client 4.194.57.10:62473] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU0kyWiSFBH7Ee_uldXkRAAAAAM"]
[Thu Dec 25 19:49:32.467811 2025] [:error] [pid 64820:tid 64830] [client 4.194.57.10:42163] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU0kzMSuTdTvkipi541G2QAAAUY"]
[Thu Dec 25 19:49:35.767118 2025] [:error] [pid 64975:tid 65069] [client 4.194.57.10:65282] [client 4.194.57.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU0kzyXyboSuXIThjj6Y3QAAAws"]
[Thu Dec 25 20:44:57.597525 2025] [:error] [pid 22045:tid 22104] [client 174.138.85.139:55592] [client 174.138.85.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aU0xyasGGmXjDnvlmHtO_wAAAUI"], referer: binance.com
[Fri Dec 26 00:08:20.203378 2025] [:error] [pid 22044:tid 22093] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Fri Dec 26 00:08:20.484283 2025] [:error] [pid 22044:tid 22098] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Fri Dec 26 00:08:20.892486 2025] [:error] [pid 22044:tid 22091] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Fri Dec 26 00:08:21.042908 2025] [:error] [pid 22044:tid 22089] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Fri Dec 26 00:08:21.182929 2025] [:error] [pid 22044:tid 22092] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/ws13.php
[Fri Dec 26 00:08:21.323270 2025] [:error] [pid 22044:tid 22084] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/ss1.php
[Fri Dec 26 00:08:21.465920 2025] [:error] [pid 22044:tid 22082] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/ww7.php
[Fri Dec 26 00:08:21.621316 2025] [:error] [pid 22044:tid 22095] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Fri Dec 26 00:08:21.769065 2025] [:error] [pid 22044:tid 22086] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Fri Dec 26 00:08:21.903225 2025] [:error] [pid 22044:tid 22075] [client 40.115.248.236:18273] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Fri Dec 26 00:08:22.038048 2025] [:error] [pid 22044:tid 22077] [client 40.115.248.236:18273] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aU1hdnPTC5rQKTB0FQ_N6AAAAMI"]
[Fri Dec 26 00:08:23.048194 2025] [:error] [pid 22045:tid 22108] [client 40.115.248.236:18266] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aU1hd6sGGmXjDnvlmHuSvgAAAUY"]
[Fri Dec 26 00:08:24.092613 2025] [:error] [pid 22044:tid 22081] [client 40.115.248.236:18283] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aU1heHPTC5rQKTB0FQ_N8QAAAMY"]
[Fri Dec 26 00:08:25.785732 2025] [:error] [pid 22131:tid 22155] [client 40.115.248.236:18303] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aU1heZvVMtSTB4lX2fZbHwAAAFM"]
[Fri Dec 26 00:08:27.291260 2025] [:error] [pid 22045:tid 22121] [client 40.115.248.236:18294] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU1he6sGGmXjDnvlmHuSyQAAAVM"]
[Fri Dec 26 00:08:28.202403 2025] [:error] [pid 22044:tid 22084] [client 40.115.248.236:18269] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU1hfHPTC5rQKTB0FQ_OAAAAAMk"]
[Fri Dec 26 00:08:29.008730 2025] [:error] [pid 27869:tid 27875] [client 40.115.248.236:18242] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU1hfRNK7_n86kBD7qcUrAAAAIQ"]
[Fri Dec 26 00:08:30.299860 2025] [:error] [pid 22131:tid 22152] [client 40.115.248.236:18185] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU1hfpvVMtSTB4lX2fZbKgAAAFE"]
[Fri Dec 26 00:08:30.836943 2025] [:error] [pid 22131:tid 22158] [client 40.115.248.236:18255] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU1hfpvVMtSTB4lX2fZbLAAAAFY"]
[Fri Dec 26 00:08:33.460815 2025] [:error] [pid 22044:tid 22094] [client 40.115.248.236:18284] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU1hgXPTC5rQKTB0FQ_ODwAAANM"]
[Fri Dec 26 00:08:34.792145 2025] [:error] [pid 22044:tid 22092] [client 40.115.248.236:18271] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU1hgnPTC5rQKTB0FQ_OFwAAANE"]
[Fri Dec 26 00:08:37.161137 2025] [:error] [pid 22043:tid 22052] [client 40.115.248.236:18244] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU1hhT4YVtlb2Iz_QE52hQAAAAQ"]
[Fri Dec 26 00:08:39.135086 2025] [:error] [pid 22043:tid 22070] [client 40.115.248.236:18293] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU1hhz4YVtlb2Iz_QE52iQAAABY"]
[Fri Dec 26 00:08:41.628387 2025] [:error] [pid 27869:tid 27879] [client 40.115.248.236:18249] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU1hiRNK7_n86kBD7qcU0AAAAIg"]
[Fri Dec 26 00:08:45.330861 2025] [:error] [pid 27869:tid 27877] [client 40.115.248.236:18187] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU1hjRNK7_n86kBD7qcU3AAAAIY"]
[Fri Dec 26 00:08:46.054740 2025] [:error] [pid 22131:tid 22151] [client 40.115.248.236:18291] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU1hjpvVMtSTB4lX2fZbTgAAAFA"]
[Fri Dec 26 00:08:47.325839 2025] [:error] [pid 22043:tid 22065] [client 40.115.248.236:18275] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU1hjz4YVtlb2Iz_QE52nQAAABE"]
[Fri Dec 26 00:08:47.991117 2025] [:error] [pid 22131:tid 22134] [client 40.115.248.236:18276] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU1hj5vVMtSTB4lX2fZbUQAAAEE"]
[Fri Dec 26 00:08:49.057394 2025] [:error] [pid 22131:tid 22157] [client 40.115.248.236:18262] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU1hkZvVMtSTB4lX2fZbXAAAAFU"]
[Fri Dec 26 00:08:49.532423 2025] [:error] [pid 22043:tid 22059] [client 40.115.248.236:18194] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU1hkT4YVtlb2Iz_QE52ogAAAAs"]
[Fri Dec 26 00:08:50.731315 2025] [:error] [pid 22044:tid 22075] [client 40.115.248.236:5092] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU1hknPTC5rQKTB0FQ_OLgAAAMA"]
[Fri Dec 26 00:08:52.855980 2025] [:error] [pid 27869:tid 27894] [client 40.115.248.236:18250] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU1hlBNK7_n86kBD7qcU-gAAAJc"]
[Fri Dec 26 00:08:53.905449 2025] [:error] [pid 22045:tid 22117] [client 40.115.248.236:18230] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU1hlasGGmXjDnvlmHuTDgAAAU8"]
[Fri Dec 26 00:08:55.743030 2025] [:error] [pid 27869:tid 27874] [client 40.115.248.236:18277] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU1hlxNK7_n86kBD7qcVCwAAAIM"]
[Fri Dec 26 00:08:56.364963 2025] [:error] [pid 27869:tid 27885] [client 40.115.248.236:18229] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU1hmBNK7_n86kBD7qcVDgAAAI4"]
[Fri Dec 26 00:08:58.316303 2025] [:error] [pid 22045:tid 22126] [client 40.115.248.236:18178] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU1hmqsGGmXjDnvlmHuTFQAAAVg"]
[Fri Dec 26 00:08:59.037211 2025] [:error] [pid 22131:tid 22133] [client 40.115.248.236:18240] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU1hm5vVMtSTB4lX2fZbZgAAAEA"]
[Fri Dec 26 00:08:59.781400 2025] [:error] [pid 22045:tid 22117] [client 40.115.248.236:18252] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU1hm6sGGmXjDnvlmHuTFwAAAU8"]
[Fri Dec 26 00:09:00.601439 2025] [:error] [pid 22045:tid 22122] [client 40.115.248.236:18282] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU1hnKsGGmXjDnvlmHuTGAAAAVQ"]
[Fri Dec 26 00:09:02.180062 2025] [:error] [pid 22045:tid 22113] [client 40.115.248.236:18180] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU1hnqsGGmXjDnvlmHuTGgAAAUs"]
[Fri Dec 26 00:09:03.530464 2025] [:error] [pid 22045:tid 22111] [client 40.115.248.236:18280] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU1hn6sGGmXjDnvlmHuTHAAAAUk"]
[Fri Dec 26 00:09:04.361319 2025] [:error] [pid 22043:tid 22065] [client 40.115.248.236:18205] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU1hoD4YVtlb2Iz_QE52uwAAABE"]
[Fri Dec 26 00:09:05.900065 2025] [:error] [pid 22131:tid 22137] [client 40.115.248.236:18245] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU1hoZvVMtSTB4lX2fZbgwAAAEQ"]
[Fri Dec 26 00:09:07.508857 2025] [:error] [pid 22045:tid 22106] [client 40.115.248.236:18254] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU1ho6sGGmXjDnvlmHuTIAAAAUQ"]
[Fri Dec 26 00:09:08.870990 2025] [:error] [pid 27869:tid 27876] [client 40.115.248.236:18292] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU1hpBNK7_n86kBD7qcVKgAAAIU"]
[Fri Dec 26 00:09:10.116175 2025] [:error] [pid 22131:tid 22139] [client 40.115.248.236:18183] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU1hppvVMtSTB4lX2fZbkAAAAEU"]
[Fri Dec 26 00:09:11.466748 2025] [:error] [pid 27869:tid 27893] [client 40.115.248.236:18176] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU1hpxNK7_n86kBD7qcVMwAAAJY"]
[Fri Dec 26 00:09:12.766039 2025] [:error] [pid 27869:tid 27883] [client 40.115.248.236:5066] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU1hqBNK7_n86kBD7qcVOAAAAIw"]
[Fri Dec 26 00:09:15.459493 2025] [:error] [pid 22045:tid 22115] [client 40.115.248.236:18295] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU1hq6sGGmXjDnvlmHuTJgAAAU0"]
[Fri Dec 26 00:09:17.348379 2025] [:error] [pid 22043:tid 22054] [client 40.115.248.236:18182] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU1hrT4YVtlb2Iz_QE522QAAAAY"]
[Fri Dec 26 00:09:19.760430 2025] [:error] [pid 22043:tid 22053] [client 40.115.248.236:18195] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aU1hrz4YVtlb2Iz_QE523wAAAAU"]
[Fri Dec 26 00:09:20.570883 2025] [:error] [pid 27869:tid 27894] [client 40.115.248.236:18184] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aU1hsBNK7_n86kBD7qcVXwAAAJc"]
[Fri Dec 26 00:09:21.945686 2025] [:error] [pid 22043:tid 22049] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/shoyo.php
[Fri Dec 26 00:09:22.126089 2025] [:error] [pid 22043:tid 22056] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Dec 26 00:09:22.242810 2025] [:error] [pid 22043:tid 22066] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/waq.php
[Fri Dec 26 00:09:22.381084 2025] [:error] [pid 22043:tid 22072] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/wakak.php
[Fri Dec 26 00:09:22.514731 2025] [:error] [pid 22043:tid 22054] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Dec 26 00:09:22.808330 2025] [:error] [pid 22043:tid 22064] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Dec 26 00:09:22.943428 2025] [:error] [pid 22043:tid 22051] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/xse25.php
[Fri Dec 26 00:09:23.061147 2025] [:error] [pid 22043:tid 22059] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Fri Dec 26 00:09:23.199267 2025] [:error] [pid 22043:tid 22068] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Fri Dec 26 00:09:23.330407 2025] [:error] [pid 22043:tid 22048] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Dec 26 00:09:23.449927 2025] [:error] [pid 22043:tid 22070] [client 40.115.248.236:18302] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Fri Dec 26 00:09:23.583976 2025] [:error] [pid 22043:tid 22065] [client 40.115.248.236:18302] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU1hsz4YVtlb2Iz_QE528QAAABE"]
[Fri Dec 26 00:09:24.305083 2025] [:error] [pid 22045:tid 22124] [client 40.115.248.236:5069] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU1htKsGGmXjDnvlmHuTKgAAAVY"]
[Fri Dec 26 00:09:25.332542 2025] [:error] [pid 27869:tid 27885] [client 40.115.248.236:18218] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU1htRNK7_n86kBD7qcVbQAAAI4"]
[Fri Dec 26 00:09:25.834864 2025] [:error] [pid 27869:tid 27879] [client 40.115.248.236:18193] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU1htRNK7_n86kBD7qcVcAAAAIg"]
[Fri Dec 26 00:09:28.726152 2025] [:error] [pid 22131:tid 22156] [client 40.115.248.236:18198] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU1huJvVMtSTB4lX2fZbqwAAAFQ"]
[Fri Dec 26 00:09:29.656143 2025] [:error] [pid 22043:tid 22054] [client 40.115.248.236:18225] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU1huT4YVtlb2Iz_QE53CgAAAAY"]
[Fri Dec 26 00:09:30.696564 2025] [:error] [pid 22043:tid 22059] [client 40.115.248.236:18192] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU1huj4YVtlb2Iz_QE53DwAAAAs"]
[Fri Dec 26 00:09:31.532075 2025] [:error] [pid 22044:tid 22094] [client 40.115.248.236:18289] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU1hu3PTC5rQKTB0FQ_OawAAANM"]
[Fri Dec 26 00:09:32.051369 2025] [:error] [pid 22045:tid 22119] [client 40.115.248.236:18296] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1hvKsGGmXjDnvlmHuTLgAAAVE"]
[Fri Dec 26 00:09:33.009223 2025] [:error] [pid 27869:tid 27881] [client 40.115.248.236:18197] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1hvRNK7_n86kBD7qcVhwAAAIo"]
[Fri Dec 26 00:09:34.487762 2025] [:error] [pid 22044:tid 22095] [client 40.115.248.236:18222] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1hvnPTC5rQKTB0FQ_ObgAAANQ"]
[Fri Dec 26 00:09:35.571307 2025] [:error] [pid 22043:tid 22068] [client 40.115.248.236:18301] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1hvz4YVtlb2Iz_QE53HQAAABQ"]
[Fri Dec 26 00:09:37.165676 2025] [:error] [pid 22044:tid 22076] [client 40.115.248.236:18223] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU1hwXPTC5rQKTB0FQ_OcQAAAME"]
[Fri Dec 26 00:09:38.361729 2025] [:error] [pid 22044:tid 22092] [client 40.115.248.236:5100] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU1hwnPTC5rQKTB0FQ_OdQAAANE"]
[Fri Dec 26 00:09:38.945750 2025] [:error] [pid 22043:tid 22066] [client 40.115.248.236:18206] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU1hwj4YVtlb2Iz_QE53JAAAABI"]
[Fri Dec 26 00:09:40.263640 2025] [:error] [pid 22045:tid 22123] [client 40.115.248.236:18279] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU1hxKsGGmXjDnvlmHuTPQAAAVU"]
[Fri Dec 26 00:09:40.862658 2025] [:error] [pid 27869:tid 27873] [client 40.115.248.236:18259] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU1hxBNK7_n86kBD7qcVlQAAAII"]
[Fri Dec 26 00:09:41.353461 2025] [:error] [pid 22045:tid 22126] [client 40.115.248.236:18191] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU1hxasGGmXjDnvlmHuTQwAAAVg"]
[Fri Dec 26 00:09:42.255494 2025] [:error] [pid 22131:tid 22133] [client 40.115.248.236:18247] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU1hxpvVMtSTB4lX2fZbxwAAAEA"]
[Fri Dec 26 00:09:43.367631 2025] [:error] [pid 22043:tid 22068] [client 40.115.248.236:18199] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU1hxz4YVtlb2Iz_QE53LQAAABQ"]
[Fri Dec 26 00:09:44.989086 2025] [:error] [pid 27869:tid 27880] [client 40.115.248.236:18188] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU1hyBNK7_n86kBD7qcVogAAAIk"]
[Fri Dec 26 00:09:46.819840 2025] [:error] [pid 27869:tid 27880] [client 40.115.248.236:18203] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU1hyhNK7_n86kBD7qcVtQAAAIk"]
[Fri Dec 26 00:09:47.823435 2025] [:error] [pid 22045:tid 22118] [client 40.115.248.236:18270] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU1hy6sGGmXjDnvlmHuTUwAAAVA"]
[Fri Dec 26 00:09:48.832488 2025] [:error] [pid 27869:tid 27884] [client 40.115.248.236:18232] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU1hzBNK7_n86kBD7qcVuwAAAI0"]
[Fri Dec 26 00:09:49.457662 2025] [:error] [pid 22043:tid 22067] [client 40.115.248.236:18200] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU1hzT4YVtlb2Iz_QE53NQAAABM"]
[Fri Dec 26 00:09:50.288286 2025] [:error] [pid 22043:tid 22060] [client 40.115.248.236:18253] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU1hzj4YVtlb2Iz_QE53NwAAAAw"]
[Fri Dec 26 00:09:51.034476 2025] [:error] [pid 22044:tid 22092] [client 40.115.248.236:5089] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU1hz3PTC5rQKTB0FQ_OhQAAANE"]
[Fri Dec 26 00:09:52.516489 2025] [:error] [pid 27869:tid 27874] [client 40.115.248.236:18224] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU1h0BNK7_n86kBD7qcVxAAAAIM"]
[Fri Dec 26 00:09:53.548154 2025] [:error] [pid 22044:tid 22093] [client 40.115.248.236:5063] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU1h0XPTC5rQKTB0FQ_OjAAAANI"]
[Fri Dec 26 00:09:54.203842 2025] [:error] [pid 22045:tid 22119] [client 40.115.248.236:18261] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU1h0qsGGmXjDnvlmHuTXgAAAVE"]
[Fri Dec 26 00:09:55.163944 2025] [:error] [pid 22131:tid 22156] [client 40.115.248.236:18251] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU1h05vVMtSTB4lX2fZb1wAAAFQ"]
[Fri Dec 26 00:09:57.772365 2025] [:error] [pid 22043:tid 22067] [client 40.115.248.236:18186] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU1h1T4YVtlb2Iz_QE53RgAAABM"]
[Fri Dec 26 00:09:58.788549 2025] [:error] [pid 22043:tid 22060] [client 40.115.248.236:18264] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU1h1j4YVtlb2Iz_QE53SQAAAAw"]
[Fri Dec 26 00:09:59.590701 2025] [:error] [pid 27869:tid 27893] [client 40.115.248.236:18234] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU1h1xNK7_n86kBD7qcV0wAAAJY"]
[Fri Dec 26 00:10:00.140920 2025] [:error] [pid 27869:tid 27877] [client 40.115.248.236:5088] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU1h2BNK7_n86kBD7qcV1wAAAIY"]
[Fri Dec 26 00:10:01.070084 2025] [:error] [pid 22045:tid 22122] [client 40.115.248.236:5078] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU1h2asGGmXjDnvlmHuTZgAAAVQ"]
[Fri Dec 26 00:10:02.146750 2025] [:error] [pid 22043:tid 22071] [client 40.115.248.236:18211] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aU1h2j4YVtlb2Iz_QE53VgAAABc"]
[Fri Dec 26 00:10:03.434974 2025] [:error] [pid 22044:tid 22087] [client 40.115.248.236:18278] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aU1h23PTC5rQKTB0FQ_OmAAAAMw"]
[Fri Dec 26 00:10:04.379765 2025] [:error] [pid 27869:tid 27876] [client 40.115.248.236:18209] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aU1h3BNK7_n86kBD7qcV6AAAAIU"]
[Fri Dec 26 00:10:05.383774 2025] [:error] [pid 22044:tid 22099] [client 40.115.248.236:18179] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aU1h3XPTC5rQKTB0FQ_OngAAANg"]
[Fri Dec 26 00:10:06.146170 2025] [:error] [pid 22131:tid 22147] [client 40.115.248.236:18265] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU1h3pvVMtSTB4lX2fZb4wAAAEw"]
[Fri Dec 26 00:10:07.079769 2025] [:error] [pid 22131:tid 22156] [client 40.115.248.236:18290] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU1h35vVMtSTB4lX2fZb5AAAAFQ"]
[Fri Dec 26 00:10:08.096418 2025] [:error] [pid 27869:tid 27883] [client 40.115.248.236:18288] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU1h4BNK7_n86kBD7qcV_QAAAIw"]
[Fri Dec 26 00:10:08.519532 2025] [:error] [pid 22045:tid 22112] [client 40.115.248.236:5095] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU1h4KsGGmXjDnvlmHuTcwAAAUo"]
[Fri Dec 26 00:10:09.065379 2025] [:error] [pid 22045:tid 22121] [client 40.115.248.236:5067] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU1h4asGGmXjDnvlmHuTdQAAAVM"]
[Fri Dec 26 00:10:10.080462 2025] [:error] [pid 22044:tid 22096] [client 40.115.248.236:18246] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU1h4nPTC5rQKTB0FQ_OpQAAANU"]
[Fri Dec 26 00:10:11.116680 2025] [:error] [pid 27869:tid 27887] [client 40.115.248.236:18272] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU1h4xNK7_n86kBD7qcWCgAAAJA"]
[Fri Dec 26 00:10:11.515035 2025] [:error] [pid 22045:tid 22124] [client 40.115.248.236:18213] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU1h46sGGmXjDnvlmHuTewAAAVY"]
[Fri Dec 26 00:10:12.305380 2025] [:error] [pid 22131:tid 22135] [client 40.115.248.236:18219] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU1h5JvVMtSTB4lX2fZb6gAAAEI"]
[Fri Dec 26 00:10:14.630655 2025] [:error] [pid 27869:tid 27889] [client 40.115.248.236:18210] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU1h5hNK7_n86kBD7qcWDgAAAJI"]
[Fri Dec 26 00:10:15.226602 2025] [:error] [pid 27869:tid 27893] [client 40.115.248.236:18236] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU1h5xNK7_n86kBD7qcWDwAAAJY"]
[Fri Dec 26 00:10:15.988493 2025] [:error] [pid 27869:tid 27894] [client 40.115.248.236:5113] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU1h5xNK7_n86kBD7qcWEQAAAJc"]
[Fri Dec 26 00:10:17.047021 2025] [:error] [pid 22045:tid 22126] [client 40.115.248.236:5084] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU1h6asGGmXjDnvlmHuTgwAAAVg"]
[Fri Dec 26 00:10:17.376235 2025] [:error] [pid 22131:tid 22159] [client 40.115.248.236:5097] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU1h6ZvVMtSTB4lX2fZb8wAAAFc"]
[Fri Dec 26 00:10:18.056789 2025] [:error] [pid 27869:tid 27873] [client 40.115.248.236:18243] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU1h6hNK7_n86kBD7qcWGAAAAII"]
[Fri Dec 26 00:10:19.027731 2025] [:error] [pid 27869:tid 27887] [client 40.115.248.236:5062] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU1h6xNK7_n86kBD7qcWGwAAAJA"]
[Fri Dec 26 00:10:19.841736 2025] [:error] [pid 27869:tid 27895] [client 40.115.248.236:18286] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU1h6xNK7_n86kBD7qcWHwAAAJg"]
[Fri Dec 26 00:10:20.935494 2025] [:error] [pid 22045:tid 22108] [client 40.115.248.236:18299] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU1h7KsGGmXjDnvlmHuTiwAAAUY"]
[Fri Dec 26 00:10:21.900751 2025] [:error] [pid 22043:tid 22068] [client 40.115.248.236:5080] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU1h7T4YVtlb2Iz_QE53dAAAABQ"]
[Fri Dec 26 00:10:22.645104 2025] [:error] [pid 27869:tid 27879] [client 40.115.248.236:18281] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU1h7hNK7_n86kBD7qcWKAAAAIg"]
[Fri Dec 26 00:10:23.180075 2025] [:error] [pid 22044:tid 22079] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Fri Dec 26 00:10:23.398720 2025] [:error] [pid 22044:tid 22077] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Fri Dec 26 00:10:23.519646 2025] [:error] [pid 22044:tid 22080] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Fri Dec 26 00:10:23.649202 2025] [:error] [pid 22044:tid 22081] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Dec 26 00:10:23.773025 2025] [:error] [pid 22044:tid 22096] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Dec 26 00:10:24.041709 2025] [:error] [pid 22044:tid 22091] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Dec 26 00:10:24.188273 2025] [:error] [pid 22044:tid 22083] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Dec 26 00:10:24.454893 2025] [:error] [pid 22044:tid 22086] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs15.php
[Fri Dec 26 00:10:24.715867 2025] [:error] [pid 22044:tid 22089] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Dec 26 00:10:24.924298 2025] [:error] [pid 22044:tid 22078] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Fri Dec 26 00:10:26.360223 2025] [:error] [pid 22044:tid 22078] [client 40.115.248.236:18190] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Fri Dec 26 00:10:26.571921 2025] [:error] [pid 22044:tid 22098] [client 40.115.248.236:18190] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU1h8nPTC5rQKTB0FQ_OzQAAANc"]
[Fri Dec 26 00:10:27.116608 2025] [:error] [pid 22044:tid 22088] [client 40.115.248.236:5057] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU1h83PTC5rQKTB0FQ_OzgAAAM0"]
[Fri Dec 26 00:10:28.385499 2025] [:error] [pid 22131:tid 22144] [client 40.115.248.236:4998] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU1h9JvVMtSTB4lX2fZcBgAAAEo"]
[Fri Dec 26 00:10:28.854512 2025] [:error] [pid 22131:tid 22140] [client 40.115.248.236:18196] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU1h9JvVMtSTB4lX2fZcCQAAAEY"]
[Fri Dec 26 00:10:29.768295 2025] [:error] [pid 22045:tid 22119] [client 40.115.248.236:18285] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aU1h9asGGmXjDnvlmHuTmwAAAVE"]
[Fri Dec 26 00:10:31.429443 2025] [:error] [pid 22045:tid 22124] [client 40.115.248.236:18177] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aU1h96sGGmXjDnvlmHuTnQAAAVY"]
[Fri Dec 26 00:10:32.848535 2025] [:error] [pid 27869:tid 27881] [client 40.115.248.236:5110] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aU1h-BNK7_n86kBD7qcWQwAAAIo"]
[Fri Dec 26 00:10:34.377908 2025] [:error] [pid 22131:tid 22147] [client 40.115.248.236:5021] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aU1h-pvVMtSTB4lX2fZcFwAAAEw"]
[Fri Dec 26 00:10:35.589640 2025] [:error] [pid 22044:tid 22078] [client 40.115.248.236:5070] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aU1h-3PTC5rQKTB0FQ_O2wAAAMM"]
[Fri Dec 26 00:10:36.149412 2025] [:error] [pid 22044:tid 22099] [client 40.115.248.236:5090] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aU1h_HPTC5rQKTB0FQ_O3gAAANg"]
[Fri Dec 26 00:10:36.899222 2025] [:error] [pid 27869:tid 27894] [client 40.115.248.236:5015] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aU1h_BNK7_n86kBD7qcWTQAAAJc"]
[Fri Dec 26 00:10:37.765609 2025] [:error] [pid 27869:tid 27875] [client 40.115.248.236:5104] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aU1h_RNK7_n86kBD7qcWUQAAAIQ"]
[Fri Dec 26 00:10:38.461387 2025] [:error] [pid 22044:tid 22096] [client 40.115.248.236:18263] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1h_nPTC5rQKTB0FQ_O5QAAANU"]
[Fri Dec 26 00:10:38.894776 2025] [:error] [pid 27869:tid 27880] [client 40.115.248.236:5056] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1h_hNK7_n86kBD7qcWVgAAAIk"]
[Fri Dec 26 00:10:39.976654 2025] [:error] [pid 22131:tid 22160] [client 40.115.248.236:18202] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1h_5vVMtSTB4lX2fZcHgAAAFg"]
[Fri Dec 26 00:10:40.853859 2025] [:error] [pid 27869:tid 27882] [client 40.115.248.236:5076] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1iABNK7_n86kBD7qcWXAAAAIs"]
[Fri Dec 26 00:10:41.913287 2025] [:error] [pid 27869:tid 27888] [client 40.115.248.236:5007] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU1iARNK7_n86kBD7qcWXwAAAJE"]
[Fri Dec 26 00:10:43.259451 2025] [:error] [pid 22044:tid 22079] [client 40.115.248.236:4994] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU1iA3PTC5rQKTB0FQ_O8QAAAMQ"]
[Fri Dec 26 00:10:44.702675 2025] [:error] [pid 22045:tid 22122] [client 40.115.248.236:5096] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU1iBKsGGmXjDnvlmHuTsQAAAVQ"]
[Fri Dec 26 00:10:45.361696 2025] [:error] [pid 22043:tid 22059] [client 40.115.248.236:5098] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU1iBT4YVtlb2Iz_QE53kQAAAAs"]
[Fri Dec 26 00:10:46.911532 2025] [:error] [pid 22043:tid 22068] [client 40.115.248.236:18268] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU1iBj4YVtlb2Iz_QE53lQAAABQ"]
[Fri Dec 26 00:10:47.829170 2025] [:error] [pid 22044:tid 22099] [client 40.115.248.236:18221] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU1iB3PTC5rQKTB0FQ_O-QAAANg"]
[Fri Dec 26 00:10:49.127370 2025] [:error] [pid 22044:tid 22081] [client 40.115.248.236:5108] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU1iCXPTC5rQKTB0FQ_O_QAAAMY"]
[Fri Dec 26 00:10:49.789175 2025] [:error] [pid 22044:tid 22083] [client 40.115.248.236:18217] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU1iCXPTC5rQKTB0FQ_PAAAAAMg"]
[Fri Dec 26 00:10:50.627701 2025] [:error] [pid 22045:tid 22111] [client 40.115.248.236:18208] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU1iCqsGGmXjDnvlmHuTuwAAAUk"]
[Fri Dec 26 00:10:52.172628 2025] [:error] [pid 22045:tid 22112] [client 40.115.248.236:5059] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU1iDKsGGmXjDnvlmHuTvwAAAUo"]
[Fri Dec 26 00:10:53.349746 2025] [:error] [pid 27869:tid 27881] [client 40.115.248.236:5058] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU1iDRNK7_n86kBD7qcWdgAAAIo"]
[Fri Dec 26 00:10:53.831774 2025] [:error] [pid 22131:tid 22139] [client 40.115.248.236:18267] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU1iDZvVMtSTB4lX2fZcNQAAAEU"]
[Fri Dec 26 00:10:54.400562 2025] [:error] [pid 22043:tid 22057] [client 40.115.248.236:18181] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU1iDj4YVtlb2Iz_QE53mAAAAAk"]
[Fri Dec 26 00:10:55.313534 2025] [:error] [pid 27869:tid 27891] [client 40.115.248.236:18298] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU1iDxNK7_n86kBD7qcWfAAAAJQ"]
[Fri Dec 26 00:10:55.954016 2025] [:error] [pid 22045:tid 22125] [client 40.115.248.236:4992] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU1iD6sGGmXjDnvlmHuTxQAAAVc"]
[Fri Dec 26 00:10:56.664050 2025] [:error] [pid 22045:tid 22119] [client 40.115.248.236:18207] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU1iEKsGGmXjDnvlmHuTygAAAVE"]
[Fri Dec 26 00:10:57.504440 2025] [:error] [pid 22043:tid 22061] [client 40.115.248.236:5061] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU1iET4YVtlb2Iz_QE53mQAAAA0"]
[Fri Dec 26 00:10:58.380128 2025] [:error] [pid 22044:tid 22097] [client 40.115.248.236:5002] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU1iEnPTC5rQKTB0FQ_PEAAAANY"]
[Fri Dec 26 00:10:59.649075 2025] [:error] [pid 22044:tid 22075] [client 40.115.248.236:5117] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU1iE3PTC5rQKTB0FQ_PFQAAAMA"]
[Fri Dec 26 00:11:00.703833 2025] [:error] [pid 27869:tid 27890] [client 40.115.248.236:18227] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU1iFBNK7_n86kBD7qcWhQAAAJM"]
[Fri Dec 26 00:11:01.615522 2025] [:error] [pid 22045:tid 22107] [client 40.115.248.236:5086] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU1iFasGGmXjDnvlmHuT1gAAAUU"]
[Fri Dec 26 00:11:02.345485 2025] [:error] [pid 22043:tid 22069] [client 40.115.248.236:5019] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU1iFj4YVtlb2Iz_QE53oAAAABU"]
[Fri Dec 26 00:11:03.105254 2025] [:error] [pid 22044:tid 22085] [client 40.115.248.236:5049] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU1iF3PTC5rQKTB0FQ_PHwAAAMo"]
[Fri Dec 26 00:11:03.805466 2025] [:error] [pid 22045:tid 22120] [client 40.115.248.236:5009] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU1iF6sGGmXjDnvlmHuT2wAAAVI"]
[Fri Dec 26 00:11:04.545943 2025] [:error] [pid 22045:tid 22102] [client 40.115.248.236:18189] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU1iGKsGGmXjDnvlmHuT3gAAAUA"]
[Fri Dec 26 00:11:05.109283 2025] [:error] [pid 22045:tid 22122] [client 40.115.248.236:18241] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU1iGasGGmXjDnvlmHuT4gAAAVQ"]
[Fri Dec 26 00:11:05.668283 2025] [:error] [pid 22045:tid 22104] [client 40.115.248.236:18216] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU1iGasGGmXjDnvlmHuT5AAAAUI"]
[Fri Dec 26 00:11:06.004559 2025] [:error] [pid 22045:tid 22125] [client 40.115.248.236:5106] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU1iGqsGGmXjDnvlmHuT5gAAAVc"]
[Fri Dec 26 00:11:06.644928 2025] [:error] [pid 22131:tid 22144] [client 40.115.248.236:18212] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1iGpvVMtSTB4lX2fZcPwAAAEo"]
[Fri Dec 26 00:11:07.075054 2025] [:error] [pid 22044:tid 22076] [client 40.115.248.236:18220] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1iG3PTC5rQKTB0FQ_PIwAAAME"]
[Fri Dec 26 00:11:07.662891 2025] [:error] [pid 22044:tid 22077] [client 40.115.248.236:18201] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1iG3PTC5rQKTB0FQ_PJQAAAMI"]
[Fri Dec 26 00:11:08.257759 2025] [:error] [pid 22045:tid 22103] [client 40.115.248.236:5072] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU1iHKsGGmXjDnvlmHuT6gAAAUE"]
[Fri Dec 26 00:11:09.411322 2025] [:error] [pid 22044:tid 22081] [client 40.115.248.236:5109] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1iHXPTC5rQKTB0FQ_PKgAAAMY"]
[Fri Dec 26 00:11:09.944794 2025] [:error] [pid 22131:tid 22143] [client 40.115.248.236:5081] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1iHZvVMtSTB4lX2fZcSAAAAEk"]
[Fri Dec 26 00:11:10.379851 2025] [:error] [pid 27869:tid 27893] [client 40.115.248.236:18274] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1iHhNK7_n86kBD7qcWkgAAAJY"]
[Fri Dec 26 00:11:11.157111 2025] [:error] [pid 22131:tid 22150] [client 40.115.248.236:18238] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU1iH5vVMtSTB4lX2fZcSwAAAE8"]
[Fri Dec 26 00:11:11.931810 2025] [:error] [pid 27869:tid 27877] [client 40.115.248.236:5114] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU1iHxNK7_n86kBD7qcWnAAAAIY"]
[Fri Dec 26 00:11:12.903484 2025] [:error] [pid 22045:tid 22125] [client 40.115.248.236:5023] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU1iIKsGGmXjDnvlmHuT8wAAAVc"]
[Fri Dec 26 00:11:13.581521 2025] [:error] [pid 27869:tid 27894] [client 40.115.248.236:4930] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU1iIRNK7_n86kBD7qcWpQAAAJc"]
[Fri Dec 26 00:11:14.352447 2025] [:error] [pid 22044:tid 22094] [client 40.115.248.236:18231] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU1iInPTC5rQKTB0FQ_PMAAAANM"]
[Fri Dec 26 00:11:14.985236 2025] [:error] [pid 22045:tid 22107] [client 40.115.248.236:18215] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU1iIqsGGmXjDnvlmHuT9QAAAUU"]
[Fri Dec 26 00:11:15.464597 2025] [:error] [pid 22044:tid 22099] [client 40.115.248.236:5101] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU1iI3PTC5rQKTB0FQ_PNAAAANg"]
[Fri Dec 26 00:11:16.253879 2025] [:error] [pid 22131:tid 22140] [client 40.115.248.236:18235] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU1iJJvVMtSTB4lX2fZcTwAAAEY"]
[Fri Dec 26 00:11:16.759435 2025] [:error] [pid 27869:tid 27876] [client 40.115.248.236:5077] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU1iJBNK7_n86kBD7qcWrwAAAIU"]
[Fri Dec 26 00:11:17.076823 2025] [:error] [pid 22131:tid 22135] [client 40.115.248.236:5028] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU1iJZvVMtSTB4lX2fZcVAAAAEI"]
[Fri Dec 26 00:11:17.777395 2025] [:error] [pid 22044:tid 22090] [client 40.115.248.236:18297] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU1iJXPTC5rQKTB0FQ_PNwAAAM8"]
[Fri Dec 26 00:11:18.444685 2025] [:error] [pid 22045:tid 22120] [client 40.115.248.236:5119] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU1iJqsGGmXjDnvlmHuT-AAAAVI"]
[Fri Dec 26 00:11:19.261254 2025] [:error] [pid 22045:tid 22102] [client 40.115.248.236:5026] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU1iJ6sGGmXjDnvlmHuT-wAAAUA"]
[Fri Dec 26 00:11:20.757888 2025] [:error] [pid 22045:tid 22105] [client 40.115.248.236:5046] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU1iKKsGGmXjDnvlmHuT_gAAAUM"]
[Fri Dec 26 00:11:22.109994 2025] [:error] [pid 22045:tid 22118] [client 40.115.248.236:5006] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU1iKqsGGmXjDnvlmHuUAgAAAVA"]
[Fri Dec 26 00:11:23.194051 2025] [:error] [pid 27869:tid 27874] [client 40.115.248.236:18256] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU1iKxNK7_n86kBD7qcWuQAAAIM"]
[Fri Dec 26 00:11:25.578092 2025] [:error] [pid 22044:tid 22082] [client 40.115.248.236:18237] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU1iLXPTC5rQKTB0FQ_PQQAAAMc"]
[Fri Dec 26 00:11:26.633045 2025] [:error] [pid 22044:tid 22083] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Dec 26 00:11:26.762322 2025] [:error] [pid 22044:tid 22081] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Dec 26 00:11:26.904054 2025] [:error] [pid 22044:tid 22094] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Dec 26 00:11:27.051813 2025] [:error] [pid 22044:tid 22089] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Dec 26 00:11:27.199063 2025] [:error] [pid 22044:tid 22096] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Fri Dec 26 00:11:27.669403 2025] [:error] [pid 22044:tid 22099] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Fri Dec 26 00:11:27.875924 2025] [:error] [pid 22044:tid 22090] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Dec 26 00:11:27.996602 2025] [:error] [pid 22044:tid 22087] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Fri Dec 26 00:11:28.138502 2025] [:error] [pid 22044:tid 22095] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Fri Dec 26 00:11:28.380341 2025] [:error] [pid 22044:tid 22085] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Dec 26 00:11:28.501620 2025] [:error] [pid 22044:tid 22097] [client 40.115.248.236:5030] File does not exist: /usr/local/apache/htdocs/suspended-page/tx1.php
[Fri Dec 26 00:11:28.617892 2025] [:error] [pid 22044:tid 22088] [client 40.115.248.236:5030] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU1iMHPTC5rQKTB0FQ_PZAAAAM0"]
[Fri Dec 26 00:11:29.337435 2025] [:error] [pid 22045:tid 22107] [client 40.115.248.236:5064] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU1iMasGGmXjDnvlmHuUEgAAAUU"]
[Fri Dec 26 00:11:29.885602 2025] [:error] [pid 22043:tid 22062] [client 40.115.248.236:18239] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU1iMT4YVtlb2Iz_QE53zQAAAA4"]
[Fri Dec 26 00:11:31.341662 2025] [:error] [pid 22045:tid 22119] [client 40.115.248.236:5105] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU1iM6sGGmXjDnvlmHuUFwAAAVE"]
[Fri Dec 26 00:11:31.935497 2025] [:error] [pid 22131:tid 22148] [client 40.115.248.236:5079] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU1iM5vVMtSTB4lX2fZcYAAAAE0"]
[Fri Dec 26 00:11:32.305195 2025] [:error] [pid 22045:tid 22120] [client 40.115.248.236:18287] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU1iNKsGGmXjDnvlmHuUGQAAAVI"]
[Fri Dec 26 00:11:33.773048 2025] [:error] [pid 22043:tid 22048] [client 40.115.248.236:5082] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU1iNT4YVtlb2Iz_QE530AAAAAA"]
[Fri Dec 26 00:11:34.839345 2025] [:error] [pid 22045:tid 22126] [client 40.115.248.236:18260] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU1iNqsGGmXjDnvlmHuUHQAAAVg"]
[Fri Dec 26 00:11:35.518565 2025] [:error] [pid 22044:tid 22077] [client 40.115.248.236:4973] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU1iN3PTC5rQKTB0FQ_PngAAAMI"]
[Fri Dec 26 00:11:36.308485 2025] [:error] [pid 22043:tid 22065] [client 40.115.248.236:5094] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU1iOD4YVtlb2Iz_QE530wAAABE"]
[Fri Dec 26 00:11:37.118194 2025] [:error] [pid 27869:tid 27892] [client 40.115.248.236:5073] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU1iORNK7_n86kBD7qcW4QAAAJU"]
[Fri Dec 26 00:11:38.167595 2025] [:error] [pid 27869:tid 27882] [client 40.115.248.236:5091] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU1iOhNK7_n86kBD7qcW6gAAAIs"]
[Fri Dec 26 00:11:38.774514 2025] [:error] [pid 27869:tid 27893] [client 40.115.248.236:5041] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU1iOhNK7_n86kBD7qcW7AAAAJY"]
[Fri Dec 26 00:11:40.469641 2025] [:error] [pid 22131:tid 22151] [client 40.115.248.236:4942] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU1iPJvVMtSTB4lX2fZcbQAAAFA"]
[Fri Dec 26 00:11:41.371284 2025] [:error] [pid 22131:tid 22150] [client 40.115.248.236:5054] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU1iPZvVMtSTB4lX2fZccQAAAE8"]
[Fri Dec 26 00:11:42.340175 2025] [:error] [pid 22131:tid 22135] [client 40.115.248.236:4932] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU1iPpvVMtSTB4lX2fZcdgAAAEI"]
[Fri Dec 26 00:11:43.265999 2025] [:error] [pid 22131:tid 22159] [client 40.115.248.236:5074] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU1iP5vVMtSTB4lX2fZcegAAAFc"]
[Fri Dec 26 00:11:43.997984 2025] [:error] [pid 22044:tid 22097] [client 40.115.248.236:5012] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU1iP3PTC5rQKTB0FQ_PuwAAANY"]
[Fri Dec 26 00:11:44.365541 2025] [:error] [pid 22044:tid 22081] [client 40.115.248.236:5102] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU1iQHPTC5rQKTB0FQ_PvAAAAMY"]
[Fri Dec 26 00:11:45.309431 2025] [:error] [pid 27869:tid 27873] [client 40.115.248.236:5014] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU1iQRNK7_n86kBD7qcXCgAAAII"]
[Fri Dec 26 00:11:46.347123 2025] [:error] [pid 22045:tid 22124] [client 40.115.248.236:5013] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU1iQqsGGmXjDnvlmHuUJwAAAVY"]
[Fri Dec 26 00:11:47.677114 2025] [:error] [pid 27869:tid 27880] [client 40.115.248.236:5075] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU1iQxNK7_n86kBD7qcXFQAAAIk"]
[Fri Dec 26 00:11:48.864958 2025] [:error] [pid 22131:tid 22150] [client 40.115.248.236:5071] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU1iRJvVMtSTB4lX2fZckQAAAE8"]
[Fri Dec 26 00:11:50.191140 2025] [:error] [pid 22044:tid 22085] [client 40.115.248.236:5018] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU1iRnPTC5rQKTB0FQ_P0AAAAMo"]
[Fri Dec 26 00:11:51.157511 2025] [:error] [pid 27869:tid 27881] [client 40.115.248.236:18233] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU1iRxNK7_n86kBD7qcXJgAAAIo"]
[Fri Dec 26 00:11:52.369961 2025] [:error] [pid 22044:tid 22099] [client 40.115.248.236:5004] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU1iSHPTC5rQKTB0FQ_P1AAAANg"]
[Fri Dec 26 00:11:52.930628 2025] [:error] [pid 22043:tid 22066] [client 40.115.248.236:4945] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU1iSD4YVtlb2Iz_QE535QAAABI"]
[Fri Dec 26 00:11:53.697497 2025] [:error] [pid 22044:tid 22088] [client 40.115.248.236:5047] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU1iSXPTC5rQKTB0FQ_P3AAAAM0"]
[Fri Dec 26 00:11:54.428081 2025] [:error] [pid 27869:tid 27877] [client 40.115.248.236:4868] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU1iShNK7_n86kBD7qcXMAAAAIY"]
[Fri Dec 26 00:11:54.955358 2025] [:error] [pid 22045:tid 22115] [client 40.115.248.236:5068] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU1iSqsGGmXjDnvlmHuULwAAAU0"]
[Fri Dec 26 00:11:55.431521 2025] [:error] [pid 22131:tid 22160] [client 40.115.248.236:5048] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU1iS5vVMtSTB4lX2fZcmgAAAFg"]
[Fri Dec 26 00:11:55.982873 2025] [:error] [pid 22044:tid 22077] [client 40.115.248.236:4928] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU1iS3PTC5rQKTB0FQ_P5gAAAMI"]
[Fri Dec 26 00:11:56.635350 2025] [:error] [pid 22131:tid 22158] [client 40.115.248.236:5107] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1iTJvVMtSTB4lX2fZcnwAAAFY"]
[Fri Dec 26 00:11:57.870426 2025] [:error] [pid 22044:tid 22092] [client 40.115.248.236:5035] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1iTXPTC5rQKTB0FQ_P6wAAANE"]
[Fri Dec 26 00:11:58.533451 2025] [:error] [pid 22044:tid 22083] [client 40.115.248.236:5020] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1iTnPTC5rQKTB0FQ_P8AAAAMg"]
[Fri Dec 26 00:11:59.354806 2025] [:error] [pid 22044:tid 22098] [client 40.115.248.236:18257] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU1iT3PTC5rQKTB0FQ_P9AAAANc"]
[Fri Dec 26 00:12:00.377981 2025] [:error] [pid 22045:tid 22124] [client 40.115.248.236:5103] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cheka.php"] [unique_id "aU1iUKsGGmXjDnvlmHuUPAAAAVY"]
[Fri Dec 26 00:12:01.228493 2025] [:error] [pid 22045:tid 22113] [client 40.115.248.236:5010] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cheka.php"] [unique_id "aU1iUasGGmXjDnvlmHuUQQAAAUs"]
[Fri Dec 26 00:12:02.530383 2025] [:error] [pid 22044:tid 22088] [client 40.115.248.236:4985] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cheka.php"] [unique_id "aU1iUnPTC5rQKTB0FQ_P-QAAAM0"]
[Fri Dec 26 00:12:03.873010 2025] [:error] [pid 22131:tid 22153] [client 40.115.248.236:4979] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cheka.php"] [unique_id "aU1iU5vVMtSTB4lX2fZcuAAAAFI"]
[Fri Dec 26 00:12:05.387381 2025] [:error] [pid 22044:tid 22099] [client 40.115.248.236:4901] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aU1iVXPTC5rQKTB0FQ_QBgAAANg"]
[Fri Dec 26 00:12:06.258495 2025] [:error] [pid 22131:tid 22150] [client 40.115.248.236:5053] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aU1iVpvVMtSTB4lX2fZcwgAAAE8"]
[Fri Dec 26 00:12:06.952536 2025] [:error] [pid 22044:tid 22096] [client 40.115.248.236:5050] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aU1iVnPTC5rQKTB0FQ_QDgAAANU"]
[Fri Dec 26 00:12:08.352599 2025] [:error] [pid 22044:tid 22094] [client 40.115.248.236:5115] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aU1iWHPTC5rQKTB0FQ_QFAAAANM"]
[Fri Dec 26 00:12:08.900894 2025] [:error] [pid 22131:tid 22158] [client 40.115.248.236:4938] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aU1iWJvVMtSTB4lX2fZc0wAAAFY"]
[Fri Dec 26 00:12:09.893781 2025] [:error] [pid 22131:tid 22139] [client 40.115.248.236:5065] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aU1iWZvVMtSTB4lX2fZc2AAAAEU"]
[Fri Dec 26 00:12:11.115601 2025] [:error] [pid 22045:tid 22103] [client 40.115.248.236:5093] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aU1iW6sGGmXjDnvlmHuUUQAAAUE"]
[Fri Dec 26 00:12:12.312043 2025] [:error] [pid 22131:tid 22159] [client 40.115.248.236:4940] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aU1iXJvVMtSTB4lX2fZc5QAAAFc"]
[Fri Dec 26 00:12:13.067002 2025] [:error] [pid 22044:tid 22094] [client 40.115.248.236:5034] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsz.php"] [unique_id "aU1iXXPTC5rQKTB0FQ_QJgAAANM"]
[Fri Dec 26 00:12:13.546078 2025] [:error] [pid 27869:tid 27871] [client 40.115.248.236:5112] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsz.php"] [unique_id "aU1iXRNK7_n86kBD7qcXRwAAAIA"]
[Fri Dec 26 00:12:14.698372 2025] [:error] [pid 27869:tid 27883] [client 40.115.248.236:5029] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsz.php"] [unique_id "aU1iXhNK7_n86kBD7qcXTQAAAIw"]
[Fri Dec 26 00:12:16.195085 2025] [:error] [pid 27869:tid 27880] [client 40.115.248.236:4873] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsz.php"] [unique_id "aU1iYBNK7_n86kBD7qcXWgAAAIk"]
[Fri Dec 26 00:12:17.947547 2025] [:error] [pid 22131:tid 22142] [client 40.115.248.236:5085] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaza.php"] [unique_id "aU1iYZvVMtSTB4lX2fZc_gAAAEg"]
[Fri Dec 26 00:12:19.435282 2025] [:error] [pid 27869:tid 27872] [client 40.115.248.236:18204] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaza.php"] [unique_id "aU1iYxNK7_n86kBD7qcXWwAAAIE"]
[Fri Dec 26 00:12:20.620593 2025] [:error] [pid 22044:tid 22078] [client 40.115.248.236:4996] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaza.php"] [unique_id "aU1iZHPTC5rQKTB0FQ_QMwAAAMM"]
[Fri Dec 26 00:12:21.889040 2025] [:error] [pid 22043:tid 22063] [client 40.115.248.236:18228] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaza.php"] [unique_id "aU1iZT4YVtlb2Iz_QE54CAAAAA8"]
[Fri Dec 26 00:12:22.484835 2025] [:error] [pid 27869:tid 27883] [client 40.115.248.236:5022] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aU1iZhNK7_n86kBD7qcXaAAAAIw"]
[Fri Dec 26 00:12:23.326758 2025] [:error] [pid 27869:tid 27885] [client 40.115.248.236:5027] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aU1iZxNK7_n86kBD7qcXbwAAAI4"]
[Fri Dec 26 00:12:24.309962 2025] [:error] [pid 22131:tid 22160] [client 40.115.248.236:5039] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aU1iaJvVMtSTB4lX2fZdEwAAAFg"]
[Fri Dec 26 00:12:24.690415 2025] [:error] [pid 22131:tid 22140] [client 40.115.248.236:4814] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "aU1iaJvVMtSTB4lX2fZdFQAAAEY"]
[Fri Dec 26 00:12:25.303083 2025] [:error] [pid 22043:tid 22064] [client 40.115.248.236:5037] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bby.php"] [unique_id "aU1iaT4YVtlb2Iz_QE54CgAAABA"]
[Fri Dec 26 00:12:26.220406 2025] [:error] [pid 22131:tid 22155] [client 40.115.248.236:18248] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bby.php"] [unique_id "aU1iapvVMtSTB4lX2fZdGgAAAFM"]
[Fri Dec 26 00:12:26.772480 2025] [:error] [pid 22131:tid 22159] [client 40.115.248.236:4955] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bby.php"] [unique_id "aU1iapvVMtSTB4lX2fZdHgAAAFc"]
[Fri Dec 26 00:12:28.125372 2025] [:error] [pid 22131:tid 22157] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/bby.php
[Fri Dec 26 00:12:28.620000 2025] [:error] [pid 22131:tid 22140] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/get.php
[Fri Dec 26 00:12:28.738375 2025] [:error] [pid 22131:tid 22158] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/xtride.php
[Fri Dec 26 00:12:28.865171 2025] [:error] [pid 22131:tid 22142] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/ws29.php
[Fri Dec 26 00:12:28.980859 2025] [:error] [pid 22131:tid 22155] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Fri Dec 26 00:12:29.248992 2025] [:error] [pid 22131:tid 22150] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/s11.php
[Fri Dec 26 00:12:29.384158 2025] [:error] [pid 22131:tid 22147] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Dec 26 00:12:29.505050 2025] [:error] [pid 22131:tid 22136] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/aqw.php
[Fri Dec 26 00:12:29.625106 2025] [:error] [pid 22131:tid 22135] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/ca1.php
[Fri Dec 26 00:12:29.741857 2025] [:error] [pid 22131:tid 22144] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/abouta.php
[Fri Dec 26 00:12:29.875845 2025] [:error] [pid 22131:tid 22157] [client 40.115.248.236:5042] File does not exist: /usr/local/apache/htdocs/suspended-page/fclas.php
[Fri Dec 26 00:12:30.004802 2025] [:error] [pid 22131:tid 22152] [client 40.115.248.236:5042] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU1ibpvVMtSTB4lX2fZdOQAAAFE"]
[Fri Dec 26 00:12:30.788937 2025] [:error] [pid 22045:tid 22122] [client 40.115.248.236:4957] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU1ibqsGGmXjDnvlmHuUYgAAAVQ"]
[Fri Dec 26 00:12:31.709762 2025] [:error] [pid 22044:tid 22098] [client 40.115.248.236:5005] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU1ib3PTC5rQKTB0FQ_QTAAAANc"]
[Fri Dec 26 00:12:33.918619 2025] [:error] [pid 22045:tid 22119] [client 40.115.248.236:4993] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU1icasGGmXjDnvlmHuUbQAAAVE"]
[Fri Dec 26 00:12:34.668108 2025] [:error] [pid 22045:tid 22113] [client 40.115.248.236:5016] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU1icqsGGmXjDnvlmHuUcgAAAUs"]
[Fri Dec 26 00:12:36.013784 2025] [:error] [pid 22131:tid 22153] [client 40.115.248.236:4947] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU1idJvVMtSTB4lX2fZdSQAAAFI"]
[Fri Dec 26 00:12:36.703858 2025] [:error] [pid 22045:tid 22103] [client 40.115.248.236:4935] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU1idKsGGmXjDnvlmHuUdwAAAUE"]
[Fri Dec 26 00:12:38.008012 2025] [:error] [pid 22043:tid 22053] [client 40.115.248.236:4941] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU1idj4YVtlb2Iz_QE54EwAAAAU"]
[Fri Dec 26 00:12:38.481322 2025] [:error] [pid 22045:tid 22117] [client 40.115.248.236:4866] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU1idqsGGmXjDnvlmHuUfwAAAU8"]
[Fri Dec 26 00:12:39.261020 2025] [:error] [pid 22045:tid 22114] [client 40.115.248.236:4981] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU1id6sGGmXjDnvlmHuUhAAAAUw"]
[Fri Dec 26 00:12:41.442153 2025] [:error] [pid 22044:tid 22078] [client 40.115.248.236:4953] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU1ieXPTC5rQKTB0FQ_QZgAAAMM"]
[Fri Dec 26 00:12:42.029621 2025] [:error] [pid 22045:tid 22126] [client 40.115.248.236:5044] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU1ieqsGGmXjDnvlmHuUiwAAAVg"]
[Fri Dec 26 00:12:43.058047 2025] [:error] [pid 22131:tid 22145] [client 40.115.248.236:18258] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU1ie5vVMtSTB4lX2fZdWQAAAEs"]
[Fri Dec 26 00:12:43.474946 2025] [:error] [pid 22131:tid 22137] [client 40.115.248.236:5003] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU1ie5vVMtSTB4lX2fZdXAAAAEQ"]
[Fri Dec 26 00:12:44.802239 2025] [:error] [pid 22044:tid 22085] [client 40.115.248.236:4894] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU1ifHPTC5rQKTB0FQ_QcQAAAMo"]
[Fri Dec 26 00:12:45.900268 2025] [:error] [pid 22131:tid 22141] [client 40.115.248.236:4982] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU1ifZvVMtSTB4lX2fZdYgAAAEc"]
[Fri Dec 26 00:12:46.755441 2025] [:error] [pid 27869:tid 27886] [client 40.115.248.236:18226] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU1ifhNK7_n86kBD7qcXoQAAAI8"]
[Fri Dec 26 00:12:48.264940 2025] [:error] [pid 22131:tid 22144] [client 40.115.248.236:5017] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU1igJvVMtSTB4lX2fZdbAAAAEo"]
[Fri Dec 26 00:12:49.938443 2025] [:error] [pid 22043:tid 22059] [client 40.115.248.236:4886] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU1igT4YVtlb2Iz_QE54JwAAAAs"]
[Fri Dec 26 00:12:50.980477 2025] [:error] [pid 22044:tid 22093] [client 40.115.248.236:4929] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU1ignPTC5rQKTB0FQ_QgwAAANI"]
[Fri Dec 26 00:12:52.798513 2025] [:error] [pid 22043:tid 22058] [client 40.115.248.236:5043] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU1ihD4YVtlb2Iz_QE54MgAAAAo"]
[Fri Dec 26 00:12:53.888832 2025] [:error] [pid 27869:tid 27895] [client 40.115.248.236:4891] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU1ihRNK7_n86kBD7qcXsAAAAJg"]
[Fri Dec 26 00:12:55.406496 2025] [:error] [pid 22044:tid 22097] [client 40.115.248.236:4871] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU1ih3PTC5rQKTB0FQ_QhgAAANY"]
[Fri Dec 26 00:12:56.050161 2025] [:error] [pid 27869:tid 27881] [client 40.115.248.236:5083] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU1iiBNK7_n86kBD7qcXugAAAIo"]
[Fri Dec 26 00:12:57.000596 2025] [:error] [pid 22131:tid 22133] [client 40.115.248.236:4914] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU1iiJvVMtSTB4lX2fZdggAAAEA"]
[Fri Dec 26 00:12:58.089775 2025] [:error] [pid 22131:tid 22156] [client 40.115.248.236:4939] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU1iipvVMtSTB4lX2fZdiAAAAFQ"]
[Fri Dec 26 00:12:59.244821 2025] [:error] [pid 22044:tid 22081] [client 40.115.248.236:5116] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU1ii3PTC5rQKTB0FQ_QjAAAAMY"]
[Fri Dec 26 00:12:59.995183 2025] [:error] [pid 22131:tid 22133] [client 40.115.248.236:4934] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aU1ii5vVMtSTB4lX2fZdkQAAAEA"]
[Fri Dec 26 00:13:01.532502 2025] [:error] [pid 22043:tid 22050] [client 40.115.248.236:4943] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU1ijT4YVtlb2Iz_QE54PgAAAAI"]
[Fri Dec 26 00:13:03.404969 2025] [:error] [pid 22045:tid 22112] [client 40.115.248.236:5001] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU1ij6sGGmXjDnvlmHuUoAAAAUo"]
[Fri Dec 26 00:13:04.122942 2025] [:error] [pid 27869:tid 27895] [client 40.115.248.236:5111] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU1ikBNK7_n86kBD7qcX0wAAAJg"]
[Fri Dec 26 00:13:05.360208 2025] [:error] [pid 27869:tid 27879] [client 40.115.248.236:4964] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU1ikRNK7_n86kBD7qcX2QAAAIg"]
[Fri Dec 26 00:13:06.240166 2025] [:error] [pid 27869:tid 27880] [client 40.115.248.236:18284] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU1ikhNK7_n86kBD7qcX3QAAAIk"]
[Fri Dec 26 00:13:09.611201 2025] [:error] [pid 24862:tid 24869] [client 40.115.248.236:4933] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU1ilbt-eeEEuo-2JKgTwAAAAAM"]
[Fri Dec 26 00:13:10.397790 2025] [:error] [pid 24863:tid 24897] [client 40.115.248.236:4885] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU1ilh8SaH2KMpp43vfONAAAAMQ"]
[Fri Dec 26 00:13:10.991498 2025] [:error] [pid 24862:tid 24875] [client 40.115.248.236:18303] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU1ilrt-eeEEuo-2JKgT1gAAAAk"]
[Fri Dec 26 00:13:12.313040 2025] [:error] [pid 24946:tid 24949] [client 40.115.248.236:5000] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU1imFfyLYxv3Jn9S70YTgAAAEE"]
[Fri Dec 26 00:13:13.298322 2025] [:error] [pid 24863:tid 24912] [client 40.115.248.236:4967] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU1imR8SaH2KMpp43vfOQAAAANM"]
[Fri Dec 26 00:13:14.324365 2025] [:error] [pid 24862:tid 24878] [client 40.115.248.236:4987] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU1imrt-eeEEuo-2JKgT3QAAAAw"]
[Fri Dec 26 00:13:14.969685 2025] [:error] [pid 24946:tid 24951] [client 40.115.248.236:4898] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU1imlfyLYxv3Jn9S70YUQAAAEM"]
[Fri Dec 26 00:13:16.788130 2025] [:error] [pid 24864:tid 24929] [client 40.115.248.236:5060] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU1inMu59XOK5DpQQdBzrwAAAUk"]
[Fri Dec 26 00:13:17.448134 2025] [:error] [pid 24862:tid 24874] [client 40.115.248.236:4974] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU1inbt-eeEEuo-2JKgT4gAAAAg"]
[Fri Dec 26 00:13:18.149204 2025] [:error] [pid 24863:tid 24915] [client 40.115.248.236:4980] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU1inh8SaH2KMpp43vfOVAAAANY"]
[Fri Dec 26 00:13:19.421691 2025] [:error] [pid 24863:tid 24904] [client 40.115.248.236:18283] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU1inx8SaH2KMpp43vfOXQAAAMs"]
[Fri Dec 26 00:13:20.245625 2025] [:error] [pid 24864:tid 24935] [client 40.115.248.236:4875] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU1ioMu59XOK5DpQQdBzswAAAU8"]
[Fri Dec 26 00:13:20.752677 2025] [:error] [pid 24863:tid 24913] [client 40.115.248.236:5036] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU1ioB8SaH2KMpp43vfOZAAAANQ"]
[Fri Dec 26 00:13:22.058884 2025] [:error] [pid 24946:tid 24954] [client 40.115.248.236:5087] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU1iolfyLYxv3Jn9S70YfAAAAEY"]
[Fri Dec 26 00:13:22.620182 2025] [:error] [pid 24946:tid 24969] [client 40.115.248.236:4963] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU1iolfyLYxv3Jn9S70YggAAAFU"]
[Fri Dec 26 00:13:23.168834 2025] [:error] [pid 24946:tid 24964] [client 40.115.248.236:5045] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU1io1fyLYxv3Jn9S70YhgAAAFA"]
[Fri Dec 26 00:13:24.107307 2025] [:error] [pid 24946:tid 24967] [client 40.115.248.236:18250] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU1ipFfyLYxv3Jn9S70YjwAAAFM"]
[Fri Dec 26 00:13:24.891669 2025] [:error] [pid 24862:tid 24890] [client 40.115.248.236:18262] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU1ipLt-eeEEuo-2JKgT6gAAABg"]
[Fri Dec 26 00:13:25.909656 2025] [:error] [pid 24946:tid 24963] [client 40.115.248.236:18214] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU1ipVfyLYxv3Jn9S70YlgAAAE8"]
[Fri Dec 26 00:13:26.993929 2025] [:error] [pid 24863:tid 24904] [client 40.115.248.236:18194] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aU1iph8SaH2KMpp43vfObAAAAMs"]
[Fri Dec 26 00:13:28.307642 2025] [:error] [pid 24946:tid 24956] [client 40.115.248.236:18229] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aU1iqFfyLYxv3Jn9S70YrgAAAEg"]
[Fri Dec 26 00:13:28.948149 2025] [:error] [pid 24863:tid 24906] [client 40.115.248.236:4986] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aU1iqB8SaH2KMpp43vfOcAAAAM0"]
[Fri Dec 26 00:13:29.726684 2025] [:error] [pid 24862:tid 24883] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Fri Dec 26 00:13:30.180622 2025] [:error] [pid 24862:tid 24887] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Fri Dec 26 00:13:30.550645 2025] [:error] [pid 24862:tid 24890] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Dec 26 00:13:30.667894 2025] [:error] [pid 24862:tid 24881] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Fri Dec 26 00:13:30.785108 2025] [:error] [pid 24862:tid 24878] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Dec 26 00:13:30.902862 2025] [:error] [pid 24862:tid 24871] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Fri Dec 26 00:13:31.019591 2025] [:error] [pid 24862:tid 24869] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/enclas.php
[Fri Dec 26 00:13:31.256101 2025] [:error] [pid 24862:tid 24879] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/he.php
[Fri Dec 26 00:13:31.377878 2025] [:error] [pid 24862:tid 24877] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/vanta.php
[Fri Dec 26 00:13:31.504580 2025] [:error] [pid 24862:tid 24875] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/thai.php
[Fri Dec 26 00:13:31.634809 2025] [:error] [pid 24862:tid 24868] [client 40.115.248.236:4878] File does not exist: /usr/local/apache/htdocs/suspended-page/fffff.php
[Fri Dec 26 00:13:31.750632 2025] [:error] [pid 24862:tid 24872] [client 40.115.248.236:4878] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid.php"] [unique_id "aU1iq7t-eeEEuo-2JKgUHQAAAAY"]
[Fri Dec 26 00:13:32.593353 2025] [:error] [pid 24864:tid 24940] [client 40.115.248.236:5038] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid.php"] [unique_id "aU1irMu59XOK5DpQQdB0DgAAAVQ"]
[Fri Dec 26 00:13:33.030940 2025] [:error] [pid 24946:tid 24953] [client 40.115.248.236:4880] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid.php"] [unique_id "aU1irVfyLYxv3Jn9S70YygAAAEU"]
[Fri Dec 26 00:13:33.860670 2025] [:error] [pid 24863:tid 24908] [client 40.115.248.236:4864] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid.php"] [unique_id "aU1irR8SaH2KMpp43vfOfgAAAM8"]
[Fri Dec 26 00:13:34.531826 2025] [:error] [pid 24863:tid 24909] [client 40.115.248.236:4956] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aU1irh8SaH2KMpp43vfOgwAAANA"]
[Fri Dec 26 00:13:34.965067 2025] [:error] [pid 24863:tid 24913] [client 40.115.248.236:5052] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aU1irh8SaH2KMpp43vfOhAAAANQ"]
[Fri Dec 26 00:13:35.474741 2025] [:error] [pid 24864:tid 24927] [client 40.115.248.236:4808] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aU1ir8u59XOK5DpQQdB0FAAAAUc"]
[Fri Dec 26 00:13:36.148222 2025] [:error] [pid 24864:tid 24929] [client 40.115.248.236:4882] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aU1isMu59XOK5DpQQdB0FwAAAUk"]
[Fri Dec 26 00:13:36.813377 2025] [:error] [pid 24864:tid 24933] [client 40.115.248.236:4925] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aU1isMu59XOK5DpQQdB0GAAAAU0"]
[Fri Dec 26 00:13:37.282799 2025] [:error] [pid 24864:tid 24938] [client 40.115.248.236:4966] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aU1iscu59XOK5DpQQdB0HAAAAVI"]
[Fri Dec 26 00:13:37.887848 2025] [:error] [pid 24946:tid 24957] [client 40.115.248.236:4872] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aU1isVfyLYxv3Jn9S70Y0QAAAEk"]
[Fri Dec 26 00:13:38.428415 2025] [:error] [pid 24946:tid 24951] [client 40.115.248.236:4976] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zde.php"] [unique_id "aU1islfyLYxv3Jn9S70Y0wAAAEM"]
[Fri Dec 26 00:13:39.084028 2025] [:error] [pid 24864:tid 24923] [client 40.115.248.236:18183] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/see.php"] [unique_id "aU1is8u59XOK5DpQQdB0IQAAAUM"]
[Fri Dec 26 00:13:39.603797 2025] [:error] [pid 24863:tid 24894] [client 40.115.248.236:18185] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/see.php"] [unique_id "aU1isx8SaH2KMpp43vfOhwAAAME"]
[Fri Dec 26 00:13:40.029733 2025] [:error] [pid 24864:tid 24925] [client 40.115.248.236:4990] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/see.php"] [unique_id "aU1itMu59XOK5DpQQdB0JAAAAUU"]
[Fri Dec 26 00:13:40.820794 2025] [:error] [pid 24862:tid 24890] [client 40.115.248.236:18275] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/see.php"] [unique_id "aU1itLt-eeEEuo-2JKgUJAAAABg"]
[Fri Dec 26 00:13:41.562148 2025] [:error] [pid 24862:tid 24881] [client 40.115.248.236:18240] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssss.php"] [unique_id "aU1itbt-eeEEuo-2JKgUJQAAAA8"]
[Fri Dec 26 00:13:42.707307 2025] [:error] [pid 24864:tid 24940] [client 40.115.248.236:4991] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssss.php"] [unique_id "aU1itsu59XOK5DpQQdB0KwAAAVQ"]
[Fri Dec 26 00:13:43.830919 2025] [:error] [pid 24862:tid 24880] [client 40.115.248.236:5040] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssss.php"] [unique_id "aU1it7t-eeEEuo-2JKgUKgAAAA4"]
[Fri Dec 26 00:13:44.378002 2025] [:error] [pid 24946:tid 24958] [client 40.115.248.236:4899] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssss.php"] [unique_id "aU1iuFfyLYxv3Jn9S70Y4AAAAEo"]
[Fri Dec 26 00:13:45.783624 2025] [:error] [pid 24862:tid 24882] [client 40.115.248.236:4908] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aU1iubt-eeEEuo-2JKgULAAAABA"]
[Fri Dec 26 00:13:46.952043 2025] [:error] [pid 24862:tid 24884] [client 40.115.248.236:4999] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aU1iurt-eeEEuo-2JKgUMQAAABI"]
[Fri Dec 26 00:13:47.889046 2025] [:error] [pid 24946:tid 24963] [client 40.115.248.236:18242] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aU1iu1fyLYxv3Jn9S70Y6AAAAE8"]
[Fri Dec 26 00:13:48.985100 2025] [:error] [pid 24864:tid 24925] [client 40.115.248.236:4975] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aU1ivMu59XOK5DpQQdB0MwAAAUU"]
[Fri Dec 26 00:13:49.723665 2025] [:error] [pid 24864:tid 24929] [client 40.115.248.236:4840] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aU1ivcu59XOK5DpQQdB0NQAAAUk"]
[Fri Dec 26 00:13:50.770617 2025] [:error] [pid 24864:tid 24936] [client 40.115.248.236:4867] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aU1ivsu59XOK5DpQQdB0OwAAAVA"]
[Fri Dec 26 00:13:51.812907 2025] [:error] [pid 24946:tid 24972] [client 40.115.248.236:4995] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aU1iv1fyLYxv3Jn9S70Y7wAAAFg"]
[Fri Dec 26 00:13:52.666826 2025] [:error] [pid 24863:tid 24912] [client 40.115.248.236:18276] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aU1iwB8SaH2KMpp43vfOjwAAANM"]
[Fri Dec 26 00:13:53.642430 2025] [:error] [pid 24863:tid 24893] [client 40.115.248.236:4949] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aU1iwR8SaH2KMpp43vfOkgAAAMA"]
[Fri Dec 26 00:13:54.194083 2025] [:error] [pid 24946:tid 24963] [client 40.115.248.236:18292] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aU1iwlfyLYxv3Jn9S70Y9QAAAE8"]
[Fri Dec 26 00:13:54.520930 2025] [:error] [pid 24946:tid 24962] [client 40.115.248.236:4817] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aU1iwlfyLYxv3Jn9S70Y9gAAAE4"]
[Fri Dec 26 00:13:56.024876 2025] [:error] [pid 24946:tid 24960] [client 40.115.248.236:4954] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aU1ixFfyLYxv3Jn9S70Y_gAAAEw"]
[Fri Dec 26 00:13:57.041947 2025] [:error] [pid 24864:tid 24931] [client 40.115.248.236:4893] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aU1ixcu59XOK5DpQQdB0RQAAAUs"]
[Fri Dec 26 00:13:57.804278 2025] [:error] [pid 24946:tid 24956] [client 40.115.248.236:4937] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aU1ixVfyLYxv3Jn9S70ZAAAAAEg"]
[Fri Dec 26 00:13:58.769367 2025] [:error] [pid 24946:tid 24957] [client 40.115.248.236:18300] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aU1ixlfyLYxv3Jn9S70ZBAAAAEk"]
[Fri Dec 26 00:13:59.948336 2025] [:error] [pid 24946:tid 24952] [client 40.115.248.236:18176] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aU1ix1fyLYxv3Jn9S70ZBwAAAEQ"]
[Fri Dec 26 00:14:00.501583 2025] [:error] [pid 24946:tid 24972] [client 40.115.248.236:5033] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aU1iyFfyLYxv3Jn9S70ZCAAAAFg"]
[Fri Dec 26 00:14:03.088235 2025] [:error] [pid 24862:tid 24866] [client 40.115.248.236:18289] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aU1iy7t-eeEEuo-2JKgUPAAAAAA"]
[Fri Dec 26 00:14:03.672162 2025] [:error] [pid 24864:tid 24937] [client 40.115.248.236:4810] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aU1iy8u59XOK5DpQQdB0UgAAAVE"]
[Fri Dec 26 00:14:04.388564 2025] [:error] [pid 24864:tid 24928] [client 40.115.248.236:18296] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aU1izMu59XOK5DpQQdB0VgAAAUg"]
[Fri Dec 26 00:14:05.090736 2025] [:error] [pid 24946:tid 24963] [client 40.115.248.236:4951] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1izVfyLYxv3Jn9S70ZDwAAAE8"]
[Fri Dec 26 00:14:05.505784 2025] [:error] [pid 24864:tid 24940] [client 40.115.248.236:18205] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1izcu59XOK5DpQQdB0WAAAAVQ"]
[Fri Dec 26 00:14:05.911338 2025] [:error] [pid 24946:tid 24948] [client 40.115.248.236:5069] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1izVfyLYxv3Jn9S70ZEwAAAEA"]
[Fri Dec 26 00:14:06.967293 2025] [:error] [pid 24862:tid 24890] [client 40.115.248.236:4978] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aU1izrt-eeEEuo-2JKgUQgAAABg"]
[Fri Dec 26 00:14:07.797205 2025] [:error] [pid 24946:tid 24971] [client 40.115.248.236:18244] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1iz1fyLYxv3Jn9S70ZFgAAAFc"]
[Fri Dec 26 00:14:09.104457 2025] [:error] [pid 24864:tid 24936] [client 40.115.248.236:18273] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1i0cu59XOK5DpQQdB0XgAAAVA"]
[Fri Dec 26 00:14:09.810464 2025] [:error] [pid 24864:tid 24928] [client 40.115.248.236:18254] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1i0cu59XOK5DpQQdB0ZAAAAUg"]
[Fri Dec 26 00:14:10.714185 2025] [:error] [pid 24864:tid 24927] [client 40.115.248.236:4961] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU1i0su59XOK5DpQQdB0awAAAUc"]
[Fri Dec 26 00:14:11.349604 2025] [:error] [pid 24946:tid 24958] [client 40.115.248.236:18180] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU1i01fyLYxv3Jn9S70ZIgAAAEo"]
[Fri Dec 26 00:14:12.257906 2025] [:error] [pid 24946:tid 24969] [client 40.115.248.236:18302] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU1i1FfyLYxv3Jn9S70ZJgAAAFU"]
[Fri Dec 26 00:14:12.651810 2025] [:error] [pid 24946:tid 24967] [client 40.115.248.236:18259] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU1i1FfyLYxv3Jn9S70ZKAAAAFM"]
[Fri Dec 26 00:14:13.578334 2025] [:error] [pid 24946:tid 24961] [client 40.115.248.236:18230] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU1i1VfyLYxv3Jn9S70ZLgAAAE0"]
[Fri Dec 26 00:14:14.976869 2025] [:error] [pid 24863:tid 24908] [client 40.115.248.236:18291] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1i1h8SaH2KMpp43vfOrQAAAM8"]
[Fri Dec 26 00:14:15.861987 2025] [:error] [pid 24946:tid 24951] [client 40.115.248.236:18255] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1i11fyLYxv3Jn9S70ZMgAAAEM"]
[Fri Dec 26 00:14:16.629606 2025] [:error] [pid 24946:tid 24967] [client 40.115.248.236:5092] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1i2FfyLYxv3Jn9S70ZNQAAAFM"]
[Fri Dec 26 00:14:17.643590 2025] [:error] [pid 24862:tid 24890] [client 40.115.248.236:4897] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU1i2bt-eeEEuo-2JKgUTQAAABg"]
[Fri Dec 26 00:14:18.388309 2025] [:error] [pid 24864:tid 24926] [client 40.115.248.236:18182] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1i2su59XOK5DpQQdB0dAAAAUY"]
[Fri Dec 26 00:14:19.491593 2025] [:error] [pid 24864:tid 24932] [client 40.115.248.236:18294] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1i28u59XOK5DpQQdB0dwAAAUw"]
[Fri Dec 26 00:14:20.595499 2025] [:error] [pid 24864:tid 24925] [client 40.115.248.236:4946] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1i3Mu59XOK5DpQQdB0fwAAAUU"]
[Fri Dec 26 00:14:21.259580 2025] [:error] [pid 24864:tid 24935] [client 40.115.248.236:18215] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU1i3cu59XOK5DpQQdB0hAAAAU8"]
[Fri Dec 26 00:14:22.202336 2025] [:error] [pid 24946:tid 24961] [client 40.115.248.236:18252] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU1i3lfyLYxv3Jn9S70ZPQAAAE0"]
[Fri Dec 26 00:14:23.727494 2025] [:error] [pid 24864:tid 24921] [client 40.115.248.236:18301] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU1i38u59XOK5DpQQdB0jAAAAUE"]
[Fri Dec 26 00:14:24.649369 2025] [:error] [pid 24946:tid 24966] [client 40.115.248.236:18197] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU1i4FfyLYxv3Jn9S70ZQAAAAFI"]
[Fri Dec 26 00:14:26.613611 2025] [:error] [pid 24862:tid 24874] [client 40.115.248.236:4801] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU1i4rt-eeEEuo-2JKgUVQAAAAg"]
[Fri Dec 26 00:14:27.549454 2025] [:error] [pid 24862:tid 24888] [client 40.115.248.236:18261] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1i47t-eeEEuo-2JKgUVgAAABY"]
[Fri Dec 26 00:14:28.588731 2025] [:error] [pid 24864:tid 24939] [client 40.115.248.236:18249] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1i5Mu59XOK5DpQQdB0kgAAAVM"]
[Fri Dec 26 00:14:29.605548 2025] [:error] [pid 24863:tid 24916] [client 40.115.248.236:5063] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1i5R8SaH2KMpp43vfOwAAAANc"]
[Fri Dec 26 00:14:30.442356 2025] [:error] [pid 24864:tid 24929] [client 40.115.248.236:18203] [client 40.115.248.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU1i5su59XOK5DpQQdB0lwAAAUk"]
[Fri Dec 26 00:14:31.619181 2025] [:error] [pid 24946:tid 24958] [client 40.115.248.236:4917] [client 40.115.248.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aU1i51fyLYxv3Jn9S70ZTQAAAEo"]
[Fri Dec 26 02:36:17.918188 2025] [:error] [pid 24864:tid 24924] [client 162.62.213.165:36830] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aU2EIcu59XOK5DpQQdC0jQAAAUQ"]
[Fri Dec 26 03:56:07.279379 2025] [:error] [pid 9948:tid 9966] [client 125.94.144.102:45119] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aU2W1_7npb7jtJwLI49FgAAAANA"]
[Fri Dec 26 04:50:53.170464 2025] [:error] [pid 28269:tid 28316] [client 103.189.130.111:54507] [client 103.189.130.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.189.130.111, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aU2jrZ3ZK8bJ-c9-kjM6GQAAAE4"]
[Fri Dec 26 04:50:53.175351 2025] [:error] [pid 28269:tid 28316] [client 103.189.130.111:54507] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Dec 26 14:33:43.425488 2025] [:error] [pid 28355:tid 28372] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Dec 26 14:33:44.339828 2025] [:error] [pid 28355:tid 28363] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Dec 26 14:33:44.800303 2025] [:error] [pid 28355:tid 28379] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Dec 26 14:33:45.280924 2025] [:error] [pid 28355:tid 28370] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Dec 26 14:33:45.816861 2025] [:error] [pid 28355:tid 28374] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Dec 26 14:33:46.307068 2025] [:error] [pid 28355:tid 28369] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Dec 26 14:33:46.857783 2025] [:error] [pid 28355:tid 28371] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Dec 26 14:33:47.721624 2025] [:error] [pid 28355:tid 28375] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Dec 26 14:33:48.729612 2025] [:error] [pid 28355:tid 28372] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Dec 26 14:33:49.696895 2025] [:error] [pid 28355:tid 28378] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Dec 26 14:33:50.195969 2025] [:error] [pid 28355:tid 28359] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Dec 26 14:33:50.674682 2025] [:error] [pid 28355:tid 28365] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Dec 26 14:33:51.170435 2025] [:error] [pid 28355:tid 28373] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Dec 26 14:33:51.684129 2025] [:error] [pid 28355:tid 28379] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Dec 26 14:33:52.151908 2025] [:error] [pid 28355:tid 28380] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Dec 26 14:33:52.656869 2025] [:error] [pid 28355:tid 28358] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Dec 26 14:33:53.141597 2025] [:error] [pid 28355:tid 28365] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Dec 26 14:33:53.645607 2025] [:error] [pid 28355:tid 28357] [client 203.159.81.37:38087] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Dec 26 14:34:00.675378 2025] [:error] [pid 28355:tid 28380] [client 203.159.81.37:38087] [client 203.159.81.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aU4sWLsFqKXf7ADZcTaxHAAAANc"]
[Fri Dec 26 14:34:04.182562 2025] [:error] [pid 28269:tid 28318] [client 203.159.81.35:57001] [client 203.159.81.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aU4sXJ3ZK8bJ-c9-kjPgWAAAAFA"]
[Fri Dec 26 14:34:07.233653 2025] [:error] [pid 15063:tid 15086] [client 203.159.81.28:59361] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Dec 26 14:34:09.136183 2025] [:error] [pid 15063:tid 15074] [client 203.159.81.28:59361] [client 203.159.81.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aU4sYeDsf_aL46Jy7z-U1gAAAQk"]
[Fri Dec 26 14:35:59.999490 2025] [:error] [pid 15063:tid 15087] [client 203.159.81.20:47365] [client 203.159.81.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/"] [unique_id "aU4sz-Dsf_aL46Jy7z-ZzQAAARY"]
[Fri Dec 26 20:58:07.453030 2025] [:error] [pid 28268:tid 28281] [client 52.164.187.143:11711] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Dec 26 20:58:07.735778 2025] [:error] [pid 28268:tid 28275] [client 52.164.187.143:11711] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Dec 26 20:58:07.994839 2025] [:error] [pid 28268:tid 28289] [client 52.164.187.143:11711] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Dec 26 20:58:08.246851 2025] [:error] [pid 28268:tid 28296] [client 52.164.187.143:11711] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Dec 26 20:58:08.550716 2025] [:error] [pid 28268:tid 28286] [client 52.164.187.143:11711] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Dec 26 20:58:09.216668 2025] [:error] [pid 28268:tid 28285] [client 52.164.187.143:11711] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Dec 26 20:58:09.730148 2025] [:error] [pid 28268:tid 28284] [client 52.164.187.143:11711] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU6GYXc_KuO_55-uPTS3hQAAAAk"]
[Fri Dec 26 20:58:10.749254 2025] [:error] [pid 28270:tid 28340] [client 52.164.187.143:8316] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Dec 26 20:58:11.100494 2025] [:error] [pid 28270:tid 28330] [client 52.164.187.143:8316] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Dec 26 20:58:11.372546 2025] [:error] [pid 28270:tid 28336] [client 52.164.187.143:8316] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aU6GY19Ac79_ckdPN5JcxgAAAIc"]
[Fri Dec 26 20:58:12.479925 2025] [:error] [pid 28355:tid 28377] [client 52.164.187.143:3988] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aU6GZLsFqKXf7ADZcTYe_gAAANQ"]
[Fri Dec 26 20:58:13.472975 2025] [:error] [pid 28355:tid 28358] [client 52.164.187.143:11670] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aU6GZbsFqKXf7ADZcTYfAAAAAME"]
[Fri Dec 26 20:58:14.378849 2025] [:error] [pid 15063:tid 15080] [client 52.164.187.143:5673] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aU6GZuDsf_aL46Jy7z8WGAAAAQ8"]
[Fri Dec 26 20:58:15.728162 2025] [:error] [pid 7160:tid 7184] [client 52.164.187.143:11667] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aU6GZ-w_ihNZR5L8vEWKqQAAAZU"]
[Fri Dec 26 20:58:17.415418 2025] [:error] [pid 7160:tid 7166] [client 52.164.187.143:2298] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "aU6Gaew_ihNZR5L8vEWKrwAAAYM"]
[Fri Dec 26 20:58:18.463772 2025] [:error] [pid 28270:tid 28332] [client 52.164.187.143:15044] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aU6Gal9Ac79_ckdPN5Jc3AAAAIM"]
[Fri Dec 26 20:58:19.187658 2025] [:error] [pid 28270:tid 28347] [client 52.164.187.143:2908] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aU6Ga19Ac79_ckdPN5Jc4QAAAJI"]
[Fri Dec 26 20:58:19.812171 2025] [:error] [pid 7160:tid 7165] [client 52.164.187.143:4750] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU6Ga-w_ihNZR5L8vEWKtwAAAYI"]
[Fri Dec 26 20:58:20.440499 2025] [:error] [pid 7160:tid 7179] [client 52.164.187.143:11419] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU6GbOw_ihNZR5L8vEWKugAAAZA"]
[Fri Dec 26 20:58:21.112639 2025] [:error] [pid 34865:tid 34884] [client 52.164.187.143:15064] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU6Gbai4zjVVKBdvuTTxYAAAAVE"]
[Fri Dec 26 20:58:22.964225 2025] [:error] [pid 7160:tid 7168] [client 52.164.187.143:13597] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aU6Gbuw_ihNZR5L8vEWKzgAAAYU"]
[Fri Dec 26 20:58:24.259842 2025] [:error] [pid 34865:tid 34881] [client 52.164.187.143:15835] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU6GcKi4zjVVKBdvuTTxYwAAAU4"]
[Fri Dec 26 20:58:24.994466 2025] [:error] [pid 7160:tid 7171] [client 52.164.187.143:5649] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU6GcOw_ihNZR5L8vEWK1wAAAYg"]
[Fri Dec 26 20:58:25.652702 2025] [:error] [pid 28270:tid 28351] [client 52.164.187.143:2071] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU6GcV9Ac79_ckdPN5Jc-wAAAJY"]
[Fri Dec 26 20:58:26.416155 2025] [:error] [pid 28268:tid 28287] [client 52.164.187.143:5471] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU6Gcnc_KuO_55-uPTS3kQAAAAw"]
[Fri Dec 26 20:58:27.428270 2025] [:error] [pid 28269:tid 28317] [client 52.164.187.143:2068] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aU6Gc53ZK8bJ-c9-kjOB9AAAAE8"]
[Fri Dec 26 20:58:28.503006 2025] [:error] [pid 34865:tid 34891] [client 52.164.187.143:11408] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6GdKi4zjVVKBdvuTTxZwAAAVg"]
[Fri Dec 26 20:58:29.780921 2025] [:error] [pid 15063:tid 15068] [client 52.164.187.143:9394] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6GdeDsf_aL46Jy7z8WJwAAAQM"]
[Fri Dec 26 20:58:30.556940 2025] [:error] [pid 15063:tid 15065] [client 52.164.187.143:15195] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6GduDsf_aL46Jy7z8WKAAAAQA"]
[Fri Dec 26 20:58:32.792855 2025] [:error] [pid 28269:tid 28312] [client 52.164.187.143:11415] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/admin.php"] [unique_id "aU6GeJ3ZK8bJ-c9-kjOCDgAAAEo"]
[Fri Dec 26 20:58:34.277010 2025] [:error] [pid 28269:tid 28314] [client 52.164.187.143:9801] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/admin.php"] [unique_id "aU6Gep3ZK8bJ-c9-kjOCFwAAAEw"]
[Fri Dec 26 20:58:36.130907 2025] [:error] [pid 7160:tid 7178] [client 52.164.187.143:7755] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aU6GfOw_ihNZR5L8vEWK6gAAAY8"]
[Fri Dec 26 20:58:36.989604 2025] [:error] [pid 28355:tid 28381] [client 52.164.187.143:7269] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aU6GfLsFqKXf7ADZcTYfJQAAANg"]
[Fri Dec 26 20:58:37.846959 2025] [:error] [pid 28268:tid 28299] [client 52.164.187.143:7961] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aU6GfXc_KuO_55-uPTS3rAAAABg"]
[Fri Dec 26 20:58:38.976163 2025] [:error] [pid 28268:tid 28287] [client 52.164.187.143:2075] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aU6Gfnc_KuO_55-uPTS3rwAAAAw"]
[Fri Dec 26 20:58:40.249894 2025] [:error] [pid 28270:tid 28344] [client 52.164.187.143:15354] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aU6GgF9Ac79_ckdPN5JdHQAAAI8"]
[Fri Dec 26 20:58:41.156808 2025] [:error] [pid 7160:tid 7175] [client 52.164.187.143:10495] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aU6Ggew_ihNZR5L8vEWK-AAAAYw"]
[Fri Dec 26 20:58:41.977391 2025] [:error] [pid 28269:tid 28304] [client 52.164.187.143:4857] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aU6GgZ3ZK8bJ-c9-kjOCKgAAAEI"]
[Fri Dec 26 20:58:43.038716 2025] [:error] [pid 28269:tid 28311] [client 52.164.187.143:10444] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aU6Gg53ZK8bJ-c9-kjOCLQAAAEk"]
[Fri Dec 26 20:58:44.440470 2025] [:error] [pid 28268:tid 28294] [client 52.164.187.143:1188] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aU6GhHc_KuO_55-uPTS3vAAAABM"]
[Fri Dec 26 20:58:46.101905 2025] [:error] [pid 28269:tid 28305] [client 52.164.187.143:7791] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aU6Ghp3ZK8bJ-c9-kjOCNwAAAEM"]
[Fri Dec 26 20:58:47.455313 2025] [:error] [pid 28269:tid 28313] [client 52.164.187.143:7783] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "aU6Gh53ZK8bJ-c9-kjOCOQAAAEs"]
[Fri Dec 26 20:58:49.574120 2025] [:error] [pid 28270:tid 28347] [client 52.164.187.143:6189] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU6GiV9Ac79_ckdPN5JdKgAAAJI"]
[Fri Dec 26 20:58:51.312238 2025] [:error] [pid 28269:tid 28303] [client 52.164.187.143:10471] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aU6Gi53ZK8bJ-c9-kjOCQgAAAEE"]
[Fri Dec 26 20:58:52.897447 2025] [:error] [pid 28269:tid 28314] [client 52.164.187.143:2720] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aU6GjJ3ZK8bJ-c9-kjOCUAAAAEw"]
[Fri Dec 26 20:58:55.312094 2025] [:error] [pid 34865:tid 34887] [client 52.164.187.143:7793] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aU6Gj6i4zjVVKBdvuTTxdQAAAVQ"]
[Fri Dec 26 20:58:59.869052 2025] [:error] [pid 28270:tid 28343] [client 52.164.187.143:15038] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU6Gk19Ac79_ckdPN5JdMwAAAI4"]
[Fri Dec 26 20:59:03.409072 2025] [:error] [pid 28269:tid 28308] [client 52.164.187.143:8107] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aU6Gl53ZK8bJ-c9-kjOCWwAAAEY"]
[Fri Dec 26 20:59:07.525240 2025] [:error] [pid 15063:tid 15076] [client 52.164.187.143:15030] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aU6Gm-Dsf_aL46Jy7z8WaQAAAQs"]
[Fri Dec 26 20:59:09.665172 2025] [:error] [pid 15063:tid 15082] [client 52.164.187.143:2726] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aU6GneDsf_aL46Jy7z8WawAAARE"]
[Fri Dec 26 20:59:17.044190 2025] [:error] [pid 28270:tid 28353] [client 52.164.187.143:12243] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Dec 26 20:59:17.299081 2025] [:error] [pid 28270:tid 28350] [client 52.164.187.143:12243] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Fri Dec 26 20:59:17.580651 2025] [:error] [pid 28270:tid 28352] [client 52.164.187.143:12243] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aU6GpV9Ac79_ckdPN5JdYAAAAJc"]
[Fri Dec 26 21:00:18.071882 2025] [:error] [pid 28355:tid 28372] [client 52.164.187.143:6037] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Fri Dec 26 21:00:18.610629 2025] [:error] [pid 28355:tid 28360] [client 52.164.187.143:6037] [client 52.164.187.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.164.187.143, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aU6G4rsFqKXf7ADZcTYfsAAAAMM"]
[Fri Dec 26 21:00:19.401938 2025] [:error] [pid 28355:tid 28379] [client 52.164.187.143:6037] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Fri Dec 26 21:00:19.698981 2025] [:error] [pid 28355:tid 28377] [client 52.164.187.143:6037] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aU6G47sFqKXf7ADZcTYftAAAANQ"]
[Fri Dec 26 21:00:49.371165 2025] [:error] [pid 34865:tid 34877] [client 52.164.187.143:5527] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Dec 26 21:00:49.668884 2025] [:error] [pid 34865:tid 34870] [client 52.164.187.143:5527] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Dec 26 21:00:50.234729 2025] [:error] [pid 34865:tid 34876] [client 52.164.187.143:5527] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aU6HAqi4zjVVKBdvuTTyGwAAAUk"]
[Fri Dec 26 21:01:33.559877 2025] [:error] [pid 28269:tid 28322] [client 52.164.187.143:13937] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aU6HLZ3ZK8bJ-c9-kjOEFQAAAFQ"]
[Fri Dec 26 21:03:32.290344 2025] [:error] [pid 28355:tid 28365] [client 52.164.187.143:15954] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Dec 26 21:03:33.647068 2025] [:error] [pid 28355:tid 28365] [client 52.164.187.143:15954] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Dec 26 21:03:33.906912 2025] [:error] [pid 28355:tid 28379] [client 52.164.187.143:15954] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Fri Dec 26 21:03:34.721385 2025] [:error] [pid 28355:tid 28371] [client 52.164.187.143:15954] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Dec 26 21:03:35.547876 2025] [:error] [pid 28355:tid 28370] [client 52.164.187.143:15954] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Dec 26 21:03:35.813864 2025] [:error] [pid 28355:tid 28362] [client 52.164.187.143:15954] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aU6Hp7sFqKXf7ADZcTYgzAAAAMU"]
[Fri Dec 26 21:04:09.366522 2025] [:error] [pid 28270:tid 28329] [client 52.164.187.143:8991] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Dec 26 21:04:09.631170 2025] [:error] [pid 28270:tid 28349] [client 52.164.187.143:8991] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "aU6HyV9Ac79_ckdPN5JfFgAAAJQ"]
[Fri Dec 26 21:05:15.048130 2025] [:error] [pid 7160:tid 7170] [client 52.164.187.143:12281] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aU6IC-w_ihNZR5L8vEWNdgAAAYc"]
[Fri Dec 26 21:06:30.862329 2025] [:error] [pid 15063:tid 15082] [client 52.164.187.143:7761] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Dec 26 21:06:31.708070 2025] [:error] [pid 15063:tid 15070] [client 52.164.187.143:7761] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Dec 26 21:06:32.276491 2025] [:error] [pid 15063:tid 15080] [client 52.164.187.143:7761] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aU6IWODsf_aL46Jy7z8ZLgAAAQ8"]
[Fri Dec 26 21:06:53.075796 2025] [:error] [pid 7160:tid 7187] [client 52.164.187.143:10378] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aU6Ibew_ihNZR5L8vEWN6gAAAZg"]
[Fri Dec 26 21:06:58.758810 2025] [:error] [pid 34865:tid 34873] [client 52.164.187.143:2684] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-load.php"] [unique_id "aU6Icqi4zjVVKBdvuTTzqQAAAUY"]
[Fri Dec 26 21:07:00.974108 2025] [:error] [pid 28269:tid 28303] [client 52.164.187.143:11460] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU6IdJ3ZK8bJ-c9-kjOGLAAAAEE"]
[Fri Dec 26 21:07:05.730952 2025] [:error] [pid 28269:tid 28314] [client 52.164.187.143:14710] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/priv.php"] [unique_id "aU6IeZ3ZK8bJ-c9-kjOGMgAAAEw"]
[Fri Dec 26 21:07:09.592706 2025] [:error] [pid 7160:tid 7180] [client 52.164.187.143:6085] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/priv.php"] [unique_id "aU6Ifew_ihNZR5L8vEWN9wAAAZE"]
[Fri Dec 26 21:07:17.032769 2025] [:error] [pid 28355:tid 28379] [client 52.164.187.143:14039] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aU6IhbsFqKXf7ADZcTYhkQAAANY"]
[Fri Dec 26 21:07:33.467144 2025] [:error] [pid 15063:tid 15088] [client 52.164.187.143:13659] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/IXR/allez.php"] [unique_id "aU6IleDsf_aL46Jy7z8ZVgAAARc"]
[Fri Dec 26 21:07:34.670433 2025] [:error] [pid 28355:tid 28369] [client 52.164.187.143:11564] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/IXR/allez.php"] [unique_id "aU6IlrsFqKXf7ADZcTYhqAAAAMw"]
[Fri Dec 26 21:07:35.622130 2025] [:error] [pid 28355:tid 28378] [client 52.164.187.143:15540] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aU6Il7sFqKXf7ADZcTYhqwAAANU"]
[Fri Dec 26 21:07:36.810474 2025] [:error] [pid 15063:tid 15071] [client 52.164.187.143:12639] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/404.php"] [unique_id "aU6ImODsf_aL46Jy7z8ZWwAAAQY"]
[Fri Dec 26 21:07:37.922443 2025] [:error] [pid 34865:tid 34886] [client 52.164.187.143:5323] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/404.php"] [unique_id "aU6Imai4zjVVKBdvuTTzywAAAVM"]
[Fri Dec 26 21:07:41.766393 2025] [:error] [pid 7160:tid 7180] [client 52.164.187.143:11689] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/admin.php"] [unique_id "aU6Inew_ihNZR5L8vEWOFwAAAZE"]
[Fri Dec 26 21:07:44.905679 2025] [:error] [pid 28268:tid 28296] [client 52.164.187.143:9192] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aU6IoHc_KuO_55-uPTS6nAAAABU"]
[Fri Dec 26 21:07:47.238204 2025] [:error] [pid 34865:tid 34873] [client 52.164.187.143:6104] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aU6Io6i4zjVVKBdvuTTzzQAAAUY"]
[Fri Dec 26 21:07:49.405832 2025] [:error] [pid 34865:tid 34877] [client 52.164.187.143:6720] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aU6Ipai4zjVVKBdvuTTzzgAAAUo"]
[Fri Dec 26 21:07:53.519393 2025] [:error] [pid 15063:tid 15067] [client 52.164.187.143:9250] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aU6IqeDsf_aL46Jy7z8ZaQAAAQI"]
[Fri Dec 26 21:07:55.438517 2025] [:error] [pid 34865:tid 34869] [client 52.164.187.143:15479] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aU6Iq6i4zjVVKBdvuTTz0QAAAUI"]
[Fri Dec 26 21:07:57.086807 2025] [:error] [pid 15063:tid 15068] [client 52.164.187.143:9264] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aU6IreDsf_aL46Jy7z8ZagAAAQM"]
[Fri Dec 26 21:07:58.994640 2025] [:error] [pid 34865:tid 34888] [client 52.164.187.143:6849] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aU6Irqi4zjVVKBdvuTTz1QAAAVU"]
[Fri Dec 26 21:08:03.096978 2025] [:error] [pid 28269:tid 28321] [client 52.164.187.143:15051] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/themes.php
[Fri Dec 26 21:08:04.112060 2025] [:error] [pid 28269:tid 28312] [client 52.164.187.143:15051] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/makeasmtp.php
[Fri Dec 26 21:08:04.619812 2025] [:error] [pid 28269:tid 28316] [client 52.164.187.143:15051] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Dec 26 21:08:04.872090 2025] [:error] [pid 28269:tid 28303] [client 52.164.187.143:15051] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwsi.php
[Fri Dec 26 21:08:05.377514 2025] [:error] [pid 28269:tid 28322] [client 52.164.187.143:15051] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mariju.php
[Fri Dec 26 21:08:05.630145 2025] [:error] [pid 28269:tid 28325] [client 52.164.187.143:15051] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Dec 26 21:08:05.879907 2025] [:error] [pid 28269:tid 28317] [client 52.164.187.143:15051] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aU6ItZ3ZK8bJ-c9-kjOGfwAAAE8"]
[Fri Dec 26 21:08:09.315909 2025] [:error] [pid 7160:tid 7172] [client 52.164.187.143:13910] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aU6Iuew_ihNZR5L8vEWOKQAAAYk"]
[Fri Dec 26 21:08:10.619964 2025] [:error] [pid 34865:tid 34882] [client 52.164.187.143:8087] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aU6Iuqi4zjVVKBdvuTTz4QAAAU8"]
[Fri Dec 26 21:08:11.989853 2025] [:error] [pid 15063:tid 15087] [client 52.164.187.143:9659] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU6Iu-Dsf_aL46Jy7z8ZdwAAARY"]
[Fri Dec 26 21:08:13.887088 2025] [:error] [pid 28269:tid 28315] [client 52.164.187.143:10291] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU6IvZ3ZK8bJ-c9-kjOGhAAAAE0"]
[Fri Dec 26 21:08:16.581564 2025] [:error] [pid 28270:tid 28347] [client 52.164.187.143:5154] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU6IwF9Ac79_ckdPN5JfmwAAAJI"]
[Fri Dec 26 21:08:17.793611 2025] [:error] [pid 15063:tid 15069] [client 52.164.187.143:1715] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU6IweDsf_aL46Jy7z8ZfAAAAQQ"]
[Fri Dec 26 21:08:19.411499 2025] [:error] [pid 28268:tid 28292] [client 52.164.187.143:12191] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU6Iw3c_KuO_55-uPTS6rAAAABE"]
[Fri Dec 26 21:08:22.010617 2025] [:error] [pid 7160:tid 7173] [client 52.164.187.143:1683] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aU6Ixuw_ihNZR5L8vEWOKwAAAYo"]
[Fri Dec 26 21:08:27.373008 2025] [:error] [pid 28269:tid 28302] [client 52.164.187.143:2752] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6Iy53ZK8bJ-c9-kjOGlQAAAEA"]
[Fri Dec 26 21:08:28.834140 2025] [:error] [pid 34865:tid 34880] [client 52.164.187.143:8197] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6IzKi4zjVVKBdvuTTz5wAAAU0"]
[Fri Dec 26 21:08:31.470294 2025] [:error] [pid 28268:tid 28286] [client 52.164.187.143:1133] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aU6Iz3c_KuO_55-uPTS6rwAAAAs"]
[Fri Dec 26 21:08:32.634428 2025] [:error] [pid 28355:tid 28368] [client 52.164.187.143:5929] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aU6I0LsFqKXf7ADZcTYh2AAAAMs"]
[Fri Dec 26 21:08:34.514082 2025] [:error] [pid 34865:tid 34882] [client 52.164.187.143:15882] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aU6I0qi4zjVVKBdvuTTz7wAAAU8"]
[Fri Dec 26 21:08:36.211131 2025] [:error] [pid 28270:tid 28334] [client 52.164.187.143:6805] [client 52.164.187.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/wp-login.php"] [unique_id "aU6I1F9Ac79_ckdPN5JfrQAAAIU"]
[Fri Dec 26 21:08:37.083298 2025] [:error] [pid 28268:tid 28277] [client 52.164.187.143:11922] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aU6I1Xc_KuO_55-uPTS6sQAAAAI"]
[Fri Dec 26 21:08:39.134939 2025] [:error] [pid 15063:tid 15084] [client 52.164.187.143:12861] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aU6I1-Dsf_aL46Jy7z8ZiAAAARM"]
[Fri Dec 26 21:08:40.164297 2025] [:error] [pid 34865:tid 34881] [client 52.164.187.143:4152] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aU6I2Ki4zjVVKBdvuTTz8gAAAU4"]
[Fri Dec 26 21:08:41.494028 2025] [:error] [pid 7160:tid 7171] [client 52.164.187.143:15310] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aU6I2ew_ihNZR5L8vEWOOgAAAYg"]
[Fri Dec 26 21:19:43.187812 2025] [:error] [pid 15063:tid 15067] [client 119.28.177.175:48234] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aU6Lb-Dsf_aL46Jy7z8cSgAAAQI"]
[Fri Dec 26 21:55:48.097009 2025] [:error] [pid 28355:tid 28376] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Dec 26 21:55:48.252299 2025] [:error] [pid 28355:tid 28370] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Dec 26 21:55:49.023284 2025] [:error] [pid 28355:tid 28369] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/maint.php
[Fri Dec 26 21:55:49.161379 2025] [:error] [pid 28355:tid 28374] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Dec 26 21:55:49.303747 2025] [:error] [pid 28355:tid 28361] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Dec 26 21:55:49.424880 2025] [:error] [pid 28355:tid 28377] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Dec 26 21:55:49.549286 2025] [:error] [pid 28355:tid 28368] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Dec 26 21:55:49.677334 2025] [:error] [pid 28355:tid 28371] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Fri Dec 26 21:55:49.806654 2025] [:error] [pid 28355:tid 28357] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Dec 26 21:55:49.933523 2025] [:error] [pid 28355:tid 28364] [client 4.194.184.64:4627] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Dec 26 21:55:50.055867 2025] [:error] [pid 28355:tid 28360] [client 4.194.184.64:4627] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aU6T5rsFqKXf7ADZcTYsAgAAAMM"]
[Fri Dec 26 21:55:50.589955 2025] [:error] [pid 34865:tid 34877] [client 4.194.184.64:4650] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aU6T5qi4zjVVKBdvuTT_EgAAAUo"]
[Fri Dec 26 21:55:51.301265 2025] [:error] [pid 28270:tid 28342] [client 4.194.184.64:4626] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aU6T519Ac79_ckdPN5JpAAAAAI0"]
[Fri Dec 26 21:55:52.508926 2025] [:error] [pid 28269:tid 28313] [client 4.194.184.64:4248] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aU6T6J3ZK8bJ-c9-kjOX2wAAAEs"]
[Fri Dec 26 21:55:53.922605 2025] [:error] [pid 7160:tid 7163] [client 4.194.184.64:4658] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6T6ew_ihNZR5L8vEWbuAAAAYA"]
[Fri Dec 26 21:55:55.033942 2025] [:error] [pid 28268:tid 28290] [client 4.194.184.64:4666] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6T63c_KuO_55-uPTTFKgAAAA8"]
[Fri Dec 26 21:55:55.835662 2025] [:error] [pid 28355:tid 28366] [client 4.194.184.64:4225] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6T67sFqKXf7ADZcTYsBQAAAMk"]
[Fri Dec 26 21:55:56.423751 2025] [:error] [pid 15063:tid 15077] [client 4.194.184.64:4647] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6T7ODsf_aL46Jy7z8mKgAAAQw"]
[Fri Dec 26 21:55:57.401958 2025] [:error] [pid 15063:tid 15074] [client 4.194.184.64:4629] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU6T7eDsf_aL46Jy7z8mLAAAAQk"]
[Fri Dec 26 21:55:58.339780 2025] [:error] [pid 28268:tid 28275] [client 4.194.184.64:4621] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU6T7nc_KuO_55-uPTTFLQAAAAA"]
[Fri Dec 26 21:55:59.742206 2025] [:error] [pid 15063:tid 15081] [client 4.194.184.64:4616] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU6T7-Dsf_aL46Jy7z8mMwAAARA"]
[Fri Dec 26 21:56:01.965358 2025] [:error] [pid 7160:tid 7166] [client 4.194.184.64:4615] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aU6T8ew_ihNZR5L8vEWbuQAAAYM"]
[Fri Dec 26 21:56:04.519686 2025] [:error] [pid 28270:tid 28343] [client 4.194.184.64:4236] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aU6T9F9Ac79_ckdPN5JpHAAAAI4"]
[Fri Dec 26 21:56:05.471869 2025] [:error] [pid 28270:tid 28341] [client 4.194.184.64:4273] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aU6T9V9Ac79_ckdPN5JpHgAAAIw"]
[Fri Dec 26 21:56:06.873657 2025] [:error] [pid 28268:tid 28286] [client 4.194.184.64:4268] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aU6T9nc_KuO_55-uPTTFOQAAAAs"]
[Fri Dec 26 21:56:07.725595 2025] [:error] [pid 34865:tid 34878] [client 4.194.184.64:4671] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aU6T96i4zjVVKBdvuTT_FgAAAUs"]
[Fri Dec 26 21:56:08.636214 2025] [:error] [pid 34865:tid 34887] [client 4.194.184.64:4638] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin2.php"] [unique_id "aU6T-Ki4zjVVKBdvuTT_FwAAAVQ"]
[Fri Dec 26 21:56:09.185637 2025] [:error] [pid 28268:tid 28295] [client 4.194.184.64:4632] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin2.php"] [unique_id "aU6T-Xc_KuO_55-uPTTFOwAAABQ"]
[Fri Dec 26 21:56:09.618983 2025] [:error] [pid 7160:tid 7184] [client 4.194.184.64:4237] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin2.php"] [unique_id "aU6T-ew_ihNZR5L8vEWbvQAAAZU"]
[Fri Dec 26 21:56:10.300269 2025] [:error] [pid 28270:tid 28335] [client 4.194.184.64:4229] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin2.php"] [unique_id "aU6T-l9Ac79_ckdPN5JpJQAAAIY"]
[Fri Dec 26 21:56:10.867844 2025] [:error] [pid 28268:tid 28299] [client 4.194.184.64:4240] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aU6T-nc_KuO_55-uPTTFPgAAABg"]
[Fri Dec 26 21:56:12.129679 2025] [:error] [pid 28269:tid 28308] [client 4.194.184.64:4667] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aU6T_J3ZK8bJ-c9-kjOX8wAAAEY"]
[Fri Dec 26 21:56:12.839569 2025] [:error] [pid 15063:tid 15081] [client 4.194.184.64:4664] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aU6T_ODsf_aL46Jy7z8mQgAAARA"]
[Fri Dec 26 21:56:13.951500 2025] [:error] [pid 15063:tid 15070] [client 4.194.184.64:4235] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aU6T_eDsf_aL46Jy7z8mRgAAAQU"]
[Fri Dec 26 21:56:15.080175 2025] [:error] [pid 28355:tid 28377] [client 4.194.184.64:4612] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aU6T_7sFqKXf7ADZcTYsHQAAANQ"]
[Fri Dec 26 21:56:15.538479 2025] [:error] [pid 15063:tid 15082] [client 4.194.184.64:4559] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aU6T_-Dsf_aL46Jy7z8mRwAAARE"]
[Fri Dec 26 21:56:15.873939 2025] [:error] [pid 15063:tid 15073] [client 4.194.184.64:4652] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aU6T_-Dsf_aL46Jy7z8mSAAAAQg"]
[Fri Dec 26 21:56:16.708185 2025] [:error] [pid 28270:tid 28342] [client 4.194.184.64:4662] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aU6UAF9Ac79_ckdPN5JpMgAAAI0"]
[Fri Dec 26 21:56:17.768450 2025] [:error] [pid 15063:tid 15074] [client 4.194.184.64:4630] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6UAeDsf_aL46Jy7z8mTAAAAQk"]
[Fri Dec 26 21:56:18.653470 2025] [:error] [pid 7160:tid 7178] [client 4.194.184.64:4263] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6UAuw_ihNZR5L8vEWbxQAAAY8"]
[Fri Dec 26 21:56:19.113025 2025] [:error] [pid 28355:tid 28359] [client 4.194.184.64:4249] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6UA7sFqKXf7ADZcTYsHwAAAMI"]
[Fri Dec 26 21:56:19.520656 2025] [:error] [pid 28269:tid 28325] [client 4.194.184.64:4582] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6UA53ZK8bJ-c9-kjOX-gAAAFc"]
[Fri Dec 26 21:56:19.873640 2025] [:error] [pid 28355:tid 28360] [client 4.194.184.64:4645] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6UA7sFqKXf7ADZcTYsIQAAAMM"]
[Fri Dec 26 21:56:20.359155 2025] [:error] [pid 7160:tid 7173] [client 4.194.184.64:4639] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6UBOw_ihNZR5L8vEWbxwAAAYo"]
[Fri Dec 26 21:56:20.989287 2025] [:error] [pid 7160:tid 7163] [client 4.194.184.64:4653] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6UBOw_ihNZR5L8vEWbyAAAAYA"]
[Fri Dec 26 21:56:21.378693 2025] [:error] [pid 7160:tid 7166] [client 4.194.184.64:4663] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6UBew_ihNZR5L8vEWbyQAAAYM"]
[Fri Dec 26 21:56:21.977521 2025] [:error] [pid 28270:tid 28350] [client 4.194.184.64:4622] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6UBV9Ac79_ckdPN5JpPAAAAJU"]
[Fri Dec 26 21:56:22.403696 2025] [:error] [pid 28270:tid 28349] [client 4.194.184.64:4247] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6UBl9Ac79_ckdPN5JpPgAAAJQ"]
[Fri Dec 26 21:56:22.907289 2025] [:error] [pid 28270:tid 28352] [client 4.194.184.64:4614] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6UBl9Ac79_ckdPN5JpPwAAAJc"]
[Fri Dec 26 21:56:24.674784 2025] [:error] [pid 7160:tid 7170] [client 4.194.184.64:4224] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6UCOw_ihNZR5L8vEWbywAAAYc"]
[Fri Dec 26 21:56:25.586596 2025] [:error] [pid 28355:tid 28378] [client 4.194.184.64:4624] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aU6UCbsFqKXf7ADZcTYsMgAAANU"]
[Fri Dec 26 21:56:27.499471 2025] [:error] [pid 34865:tid 34888] [client 4.194.184.64:4656] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aU6UC6i4zjVVKBdvuTT_IQAAAVU"]
[Fri Dec 26 21:56:28.414588 2025] [:error] [pid 7160:tid 7164] [client 4.194.184.64:4238] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aU6UDOw_ihNZR5L8vEWb0QAAAYE"]
[Fri Dec 26 21:56:29.242883 2025] [:error] [pid 28355:tid 28363] [client 4.194.184.64:4255] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aU6UDbsFqKXf7ADZcTYsMwAAAMY"]
[Fri Dec 26 21:56:30.111597 2025] [:error] [pid 28355:tid 28372] [client 4.194.184.64:4232] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ki1k.php"] [unique_id "aU6UDrsFqKXf7ADZcTYsNQAAAM8"]
[Fri Dec 26 21:56:31.228863 2025] [:error] [pid 34865:tid 34869] [client 4.194.184.64:4243] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ki1k.php"] [unique_id "aU6UD6i4zjVVKBdvuTT_JwAAAUI"]
[Fri Dec 26 21:56:31.633189 2025] [:error] [pid 34865:tid 34880] [client 4.194.184.64:4234] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ki1k.php"] [unique_id "aU6UD6i4zjVVKBdvuTT_KAAAAU0"]
[Fri Dec 26 21:56:32.805163 2025] [:error] [pid 28269:tid 28325] [client 4.194.184.64:4659] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ki1k.php"] [unique_id "aU6UEJ3ZK8bJ-c9-kjOYEQAAAFc"]
[Fri Dec 26 21:56:33.962476 2025] [:error] [pid 28269:tid 28319] [client 4.194.184.64:4660] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup-config.php"] [unique_id "aU6UEZ3ZK8bJ-c9-kjOYEwAAAFE"]
[Fri Dec 26 21:56:35.750237 2025] [:error] [pid 7160:tid 7180] [client 4.194.184.64:4546] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup-config.php"] [unique_id "aU6UE-w_ihNZR5L8vEWb1AAAAZE"]
[Fri Dec 26 21:56:36.883650 2025] [:error] [pid 28355:tid 28373] [client 4.194.184.64:4610] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup-config.php"] [unique_id "aU6UFLsFqKXf7ADZcTYsOQAAANA"]
[Fri Dec 26 21:56:38.271933 2025] [:error] [pid 28269:tid 28306] [client 4.194.184.64:4643] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup-config.php"] [unique_id "aU6UFp3ZK8bJ-c9-kjOYGAAAAEQ"]
[Fri Dec 26 21:56:39.145859 2025] [:error] [pid 28269:tid 28324] [client 4.194.184.64:4230] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU6UF53ZK8bJ-c9-kjOYGQAAAFY"]
[Fri Dec 26 21:56:39.738954 2025] [:error] [pid 28355:tid 28369] [client 4.194.184.64:4664] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU6UF7sFqKXf7ADZcTYsOgAAAMw"]
[Fri Dec 26 21:56:40.256140 2025] [:error] [pid 28268:tid 28287] [client 4.194.184.64:4231] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU6UGHc_KuO_55-uPTTFSgAAAAw"]
[Fri Dec 26 21:56:41.356382 2025] [:error] [pid 28269:tid 28304] [client 4.194.184.64:4556] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU6UGZ3ZK8bJ-c9-kjOYHAAAAEI"]
[Fri Dec 26 21:56:42.592059 2025] [:error] [pid 28270:tid 28336] [client 4.194.184.64:4250] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/product.php"] [unique_id "aU6UGl9Ac79_ckdPN5JpUgAAAIc"]
[Fri Dec 26 21:56:43.597761 2025] [:error] [pid 34865:tid 34869] [client 4.194.184.64:4550] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/product.php"] [unique_id "aU6UG6i4zjVVKBdvuTT_MgAAAUI"]
[Fri Dec 26 21:56:44.276968 2025] [:error] [pid 34865:tid 34883] [client 4.194.184.64:4665] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/product.php"] [unique_id "aU6UHKi4zjVVKBdvuTT_NAAAAVA"]
[Fri Dec 26 21:56:44.863336 2025] [:error] [pid 28269:tid 28325] [client 4.194.184.64:4641] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/product.php"] [unique_id "aU6UHJ3ZK8bJ-c9-kjOYIAAAAFc"]
[Fri Dec 26 21:56:45.457936 2025] [:error] [pid 28269:tid 28302] [client 4.194.184.64:4620] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "aU6UHZ3ZK8bJ-c9-kjOYIQAAAEA"]
[Fri Dec 26 21:56:46.798899 2025] [:error] [pid 28269:tid 28309] [client 4.194.184.64:4625] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "aU6UHp3ZK8bJ-c9-kjOYJAAAAEc"]
[Fri Dec 26 21:56:47.420908 2025] [:error] [pid 28269:tid 28318] [client 4.194.184.64:4578] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "aU6UH53ZK8bJ-c9-kjOYJgAAAFA"]
[Fri Dec 26 21:56:48.329334 2025] [:error] [pid 28268:tid 28275] [client 4.194.184.64:4254] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "aU6UIHc_KuO_55-uPTTFUgAAAAA"]
[Fri Dec 26 21:56:48.712972 2025] [:error] [pid 28269:tid 28317] [client 4.194.184.64:4239] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aU6UIJ3ZK8bJ-c9-kjOYKwAAAE8"]
[Fri Dec 26 21:56:49.354040 2025] [:error] [pid 34865:tid 34871] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Dec 26 21:56:49.461954 2025] [:error] [pid 34865:tid 34875] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Fri Dec 26 21:56:49.623455 2025] [:error] [pid 34865:tid 34890] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Dec 26 21:56:49.723952 2025] [:error] [pid 34865:tid 34876] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Fri Dec 26 21:56:49.842172 2025] [:error] [pid 34865:tid 34868] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Dec 26 21:56:49.950509 2025] [:error] [pid 34865:tid 34877] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Fri Dec 26 21:56:50.060754 2025] [:error] [pid 34865:tid 34870] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/brand.php
[Fri Dec 26 21:56:50.165464 2025] [:error] [pid 34865:tid 34889] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Fri Dec 26 21:56:50.291261 2025] [:error] [pid 34865:tid 34886] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/pwnd.php
[Fri Dec 26 21:56:50.397782 2025] [:error] [pid 34865:tid 34891] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Dec 26 21:56:50.503476 2025] [:error] [pid 34865:tid 34888] [client 4.194.184.64:4227] File does not exist: /usr/local/apache/htdocs/suspended-page/admin_250714170928.php
[Fri Dec 26 21:56:50.601622 2025] [:error] [pid 34865:tid 34882] [client 4.194.184.64:4227] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU6UIqi4zjVVKBdvuTT_QQAAAU8"]
[Fri Dec 26 21:56:51.375362 2025] [:error] [pid 15063:tid 15085] [client 4.194.184.64:4271] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU6UI-Dsf_aL46Jy7z8maQAAARQ"]
[Fri Dec 26 21:56:52.720259 2025] [:error] [pid 28269:tid 28303] [client 4.194.184.64:4633] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU6UJJ3ZK8bJ-c9-kjOYNwAAAEE"]
[Fri Dec 26 21:56:54.955175 2025] [:error] [pid 28268:tid 28282] [client 4.194.184.64:4282] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin_250714203832.php"] [unique_id "aU6UJnc_KuO_55-uPTTFVwAAAAc"]
[Fri Dec 26 21:56:55.737241 2025] [:error] [pid 28355:tid 28364] [client 4.194.184.64:4545] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aU6UJ7sFqKXf7ADZcTYsQAAAAMc"]
[Fri Dec 26 21:56:56.322665 2025] [:error] [pid 28355:tid 28379] [client 4.194.184.64:4600] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aU6UKLsFqKXf7ADZcTYsQQAAANY"]
[Fri Dec 26 21:56:57.209313 2025] [:error] [pid 28355:tid 28363] [client 4.194.184.64:4226] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aU6UKbsFqKXf7ADZcTYsRAAAAMY"]
[Fri Dec 26 21:56:57.563711 2025] [:error] [pid 28355:tid 28358] [client 4.194.184.64:4657] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aU6UKbsFqKXf7ADZcTYsRQAAAME"]
[Fri Dec 26 21:56:57.875384 2025] [:error] [pid 28355:tid 28376] [client 4.194.184.64:4259] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-post.php"] [unique_id "aU6UKbsFqKXf7ADZcTYsSAAAANM"]
[Fri Dec 26 21:56:59.361140 2025] [:error] [pid 28355:tid 28373] [client 4.194.184.64:4265] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-post.php"] [unique_id "aU6UK7sFqKXf7ADZcTYsSgAAANA"]
[Fri Dec 26 21:57:00.771699 2025] [:error] [pid 28268:tid 28297] [client 4.194.184.64:4555] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-post.php"] [unique_id "aU6ULHc_KuO_55-uPTTFYQAAABY"]
[Fri Dec 26 21:57:01.334524 2025] [:error] [pid 7160:tid 7168] [client 4.194.184.64:4670] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-post.php"] [unique_id "aU6ULew_ihNZR5L8vEWb6QAAAYU"]
[Fri Dec 26 21:57:02.209613 2025] [:error] [pid 28269:tid 28310] [client 4.194.184.64:4241] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aU6ULp3ZK8bJ-c9-kjOYUwAAAEg"]
[Fri Dec 26 21:57:03.410631 2025] [:error] [pid 28269:tid 28323] [client 4.194.184.64:4287] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aU6UL53ZK8bJ-c9-kjOYVwAAAFU"]
[Fri Dec 26 21:57:04.483511 2025] [:error] [pid 28269:tid 28307] [client 4.194.184.64:4272] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aU6UMJ3ZK8bJ-c9-kjOYWwAAAEU"]
[Fri Dec 26 21:57:05.261012 2025] [:error] [pid 15063:tid 15069] [client 4.194.184.64:4741] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aU6UMeDsf_aL46Jy7z8mcgAAAQQ"]
[Fri Dec 26 21:57:05.912678 2025] [:error] [pid 28269:tid 28326] [client 4.194.184.64:4552] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "aU6UMZ3ZK8bJ-c9-kjOYXwAAAFg"]
[Fri Dec 26 21:57:06.905827 2025] [:error] [pid 15063:tid 15067] [client 4.194.184.64:4245] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "aU6UMuDsf_aL46Jy7z8mdwAAAQI"]
[Fri Dec 26 21:57:07.771416 2025] [:error] [pid 15063:tid 15075] [client 4.194.184.64:4619] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "aU6UM-Dsf_aL46Jy7z8meQAAAQo"]
[Fri Dec 26 21:57:08.156160 2025] [:error] [pid 28268:tid 28280] [client 4.194.184.64:4278] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "aU6UNHc_KuO_55-uPTTFZAAAAAU"]
[Fri Dec 26 21:57:08.658702 2025] [:error] [pid 28268:tid 28290] [client 4.194.184.64:4740] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aU6UNHc_KuO_55-uPTTFZQAAAA8"]
[Fri Dec 26 21:57:09.826032 2025] [:error] [pid 34865:tid 34867] [client 4.194.184.64:4233] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aU6UNai4zjVVKBdvuTT_RwAAAUA"]
[Fri Dec 26 21:57:10.225630 2025] [:error] [pid 34865:tid 34883] [client 4.194.184.64:4649] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aU6UNqi4zjVVKBdvuTT_SQAAAVA"]
[Fri Dec 26 21:57:10.561767 2025] [:error] [pid 7160:tid 7187] [client 4.194.184.64:4277] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aU6UNuw_ihNZR5L8vEWb7QAAAZg"]
[Fri Dec 26 21:57:10.932471 2025] [:error] [pid 7160:tid 7186] [client 4.194.184.64:4274] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/priv.php"] [unique_id "aU6UNuw_ihNZR5L8vEWb7wAAAZc"]
[Fri Dec 26 21:57:11.834972 2025] [:error] [pid 28269:tid 28319] [client 4.194.184.64:4738] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/priv.php"] [unique_id "aU6UN53ZK8bJ-c9-kjOYYwAAAFE"]
[Fri Dec 26 21:57:12.659970 2025] [:error] [pid 34865:tid 34875] [client 4.194.184.64:4668] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/priv.php"] [unique_id "aU6UOKi4zjVVKBdvuTT_SgAAAUg"]
[Fri Dec 26 21:57:13.671687 2025] [:error] [pid 28355:tid 28358] [client 4.194.184.64:4279] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/priv.php"] [unique_id "aU6UObsFqKXf7ADZcTYsUwAAAME"]
[Fri Dec 26 21:57:14.016829 2025] [:error] [pid 34865:tid 34889] [client 4.194.184.64:4594] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/allez.php"] [unique_id "aU6UOqi4zjVVKBdvuTT_TQAAAVY"]
[Fri Dec 26 21:57:14.371937 2025] [:error] [pid 34865:tid 34888] [client 4.194.184.64:4548] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/allez.php"] [unique_id "aU6UOqi4zjVVKBdvuTT_TwAAAVU"]
[Fri Dec 26 21:57:14.691012 2025] [:error] [pid 34865:tid 34882] [client 4.194.184.64:4628] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/allez.php"] [unique_id "aU6UOqi4zjVVKBdvuTT_UQAAAU8"]
[Fri Dec 26 21:57:15.147745 2025] [:error] [pid 7160:tid 7166] [client 4.194.184.64:4244] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/allez.php"] [unique_id "aU6UO-w_ihNZR5L8vEWb9QAAAYM"]
[Fri Dec 26 21:57:15.506992 2025] [:error] [pid 7160:tid 7169] [client 4.194.184.64:4285] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aU6UO-w_ihNZR5L8vEWb9wAAAYY"]
[Fri Dec 26 21:57:16.192365 2025] [:error] [pid 34865:tid 34874] [client 4.194.184.64:4575] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aU6UPKi4zjVVKBdvuTT_VgAAAUc"]
[Fri Dec 26 21:57:16.698647 2025] [:error] [pid 7160:tid 7168] [client 4.194.184.64:4648] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aU6UPOw_ihNZR5L8vEWb-gAAAYU"]
[Fri Dec 26 21:57:17.577975 2025] [:error] [pid 28270:tid 28343] [client 4.194.184.64:4644] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aU6UPV9Ac79_ckdPN5JpZwAAAI4"]
[Fri Dec 26 21:57:18.502379 2025] [:error] [pid 28355:tid 28371] [client 4.194.184.64:4270] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/functions.php"] [unique_id "aU6UPrsFqKXf7ADZcTYsWwAAAM4"]
[Fri Dec 26 21:57:19.065387 2025] [:error] [pid 28270:tid 28332] [client 4.194.184.64:4246] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/functions.php"] [unique_id "aU6UP19Ac79_ckdPN5JpawAAAIM"]
[Fri Dec 26 21:57:19.593164 2025] [:error] [pid 28355:tid 28360] [client 4.194.184.64:4560] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/functions.php"] [unique_id "aU6UP7sFqKXf7ADZcTYsYwAAAMM"]
[Fri Dec 26 21:57:19.955645 2025] [:error] [pid 28355:tid 28363] [client 4.194.184.64:4617] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/functions.php"] [unique_id "aU6UP7sFqKXf7ADZcTYsZQAAAMY"]
[Fri Dec 26 21:57:20.371337 2025] [:error] [pid 28355:tid 28365] [client 4.194.184.64:4642] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aU6UQLsFqKXf7ADZcTYsZwAAAMg"]
[Fri Dec 26 21:57:21.300385 2025] [:error] [pid 28270:tid 28339] [client 4.194.184.64:4236] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aU6UQV9Ac79_ckdPN5JpbgAAAIo"]
[Fri Dec 26 21:57:21.766974 2025] [:error] [pid 28355:tid 28360] [client 4.194.184.64:4262] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aU6UQbsFqKXf7ADZcTYscgAAAMM"]
[Fri Dec 26 21:57:22.202010 2025] [:error] [pid 28270:tid 28336] [client 4.194.184.64:4544] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aU6UQl9Ac79_ckdPN5JpdAAAAIc"]
[Fri Dec 26 21:57:22.949957 2025] [:error] [pid 28270:tid 28348] [client 4.194.184.64:4283] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU6UQl9Ac79_ckdPN5JpdwAAAJM"]
[Fri Dec 26 21:57:23.400043 2025] [:error] [pid 28270:tid 28345] [client 4.194.184.64:4631] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU6UQ19Ac79_ckdPN5JpegAAAJA"]
[Fri Dec 26 21:57:24.536214 2025] [:error] [pid 28270:tid 28351] [client 4.194.184.64:4654] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU6URF9Ac79_ckdPN5JpgQAAAJY"]
[Fri Dec 26 21:57:25.976397 2025] [:error] [pid 28270:tid 28336] [client 4.194.184.64:4570] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-envato-market-github.php"] [unique_id "aU6URV9Ac79_ckdPN5JpgwAAAIc"]
[Fri Dec 26 21:57:26.742616 2025] [:error] [pid 7160:tid 7178] [client 4.194.184.64:4602] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsoyanz.php"] [unique_id "aU6URuw_ihNZR5L8vEWb_gAAAY8"]
[Fri Dec 26 21:57:27.608770 2025] [:error] [pid 28269:tid 28326] [client 4.194.184.64:4256] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsoyanz.php"] [unique_id "aU6UR53ZK8bJ-c9-kjOYdAAAAFg"]
[Fri Dec 26 21:57:28.524382 2025] [:error] [pid 7160:tid 7185] [client 4.194.184.64:4569] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsoyanz.php"] [unique_id "aU6USOw_ihNZR5L8vEWcBgAAAZY"]
[Fri Dec 26 21:57:29.170270 2025] [:error] [pid 28270:tid 28352] [client 4.194.184.64:4634] [client 4.194.184.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsoyanz.php"] [unique_id "aU6USV9Ac79_ckdPN5JphQAAAJc"]
[Fri Dec 26 23:34:38.846413 2025] [:error] [pid 28269:tid 28314] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Dec 26 23:34:38.988413 2025] [:error] [pid 28269:tid 28316] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Dec 26 23:34:39.263121 2025] [:error] [pid 28269:tid 28305] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Fri Dec 26 23:34:39.400680 2025] [:error] [pid 28269:tid 28303] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Fri Dec 26 23:34:39.578784 2025] [:error] [pid 28269:tid 28308] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Dec 26 23:34:40.217305 2025] [:error] [pid 28269:tid 28304] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Fri Dec 26 23:34:40.357337 2025] [:error] [pid 28269:tid 28306] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Fri Dec 26 23:34:40.789463 2025] [:error] [pid 28269:tid 28311] [client 4.217.252.121:1623] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Dec 26 23:34:40.924365 2025] [:error] [pid 28269:tid 28322] [client 4.217.252.121:1623] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU6rEJ3ZK8bJ-c9-kjOxAwAAAFQ"]
[Fri Dec 26 23:34:41.209734 2025] [:error] [pid 28268:tid 28292] [client 4.217.252.121:1551] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU6rEXc_KuO_55-uPTTXuwAAABE"]
[Fri Dec 26 23:34:41.736488 2025] [:error] [pid 7160:tid 7177] [client 4.217.252.121:1611] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU6rEew_ihNZR5L8vEW2oAAAAY4"]
[Fri Dec 26 23:34:42.212322 2025] [:error] [pid 7160:tid 7163] [client 4.217.252.121:1618] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU6rEuw_ihNZR5L8vEW2owAAAYA"]
[Fri Dec 26 23:34:42.751049 2025] [:error] [pid 28355:tid 28381] [client 4.217.252.121:1638] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU6rErsFqKXf7ADZcTY-mwAAANg"]
[Fri Dec 26 23:34:43.176260 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:1640] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU6rE-w_ihNZR5L8vEW2pgAAAY0"]
[Fri Dec 26 23:34:43.495807 2025] [:error] [pid 28270:tid 28340] [client 4.217.252.121:1538] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU6rE19Ac79_ckdPN5J-KgAAAIs"]
[Fri Dec 26 23:34:44.748113 2025] [:error] [pid 28269:tid 28315] [client 4.217.252.121:1540] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU6rFJ3ZK8bJ-c9-kjOxBAAAAE0"]
[Fri Dec 26 23:34:45.352715 2025] [:error] [pid 28355:tid 28358] [client 4.217.252.121:1619] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aU6rFbsFqKXf7ADZcTY-nAAAAME"]
[Fri Dec 26 23:34:46.106851 2025] [:error] [pid 28355:tid 28363] [client 4.217.252.121:1567] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aU6rFrsFqKXf7ADZcTY-oAAAAMY"]
[Fri Dec 26 23:34:47.293387 2025] [:error] [pid 28269:tid 28305] [client 4.217.252.121:1557] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aU6rF53ZK8bJ-c9-kjOxBgAAAEM"]
[Fri Dec 26 23:34:48.110414 2025] [:error] [pid 15063:tid 15071] [client 4.217.252.121:1626] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aU6rGODsf_aL46Jy7z86twAAAQY"]
[Fri Dec 26 23:34:48.769480 2025] [:error] [pid 7160:tid 7164] [client 4.217.252.121:1555] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU6rGOw_ihNZR5L8vEW2rQAAAYE"]
[Fri Dec 26 23:34:49.623348 2025] [:error] [pid 28355:tid 28361] [client 4.217.252.121:1536] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU6rGbsFqKXf7ADZcTY-pAAAAMQ"]
[Fri Dec 26 23:34:50.202817 2025] [:error] [pid 15063:tid 15070] [client 4.217.252.121:1575] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU6rGuDsf_aL46Jy7z86uAAAAQU"]
[Fri Dec 26 23:34:50.745340 2025] [:error] [pid 15063:tid 15077] [client 4.217.252.121:1564] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU6rGuDsf_aL46Jy7z86uQAAAQw"]
[Fri Dec 26 23:34:51.205146 2025] [:error] [pid 28270:tid 28346] [client 4.217.252.121:1602] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6rG19Ac79_ckdPN5J-LwAAAJE"]
[Fri Dec 26 23:34:51.614965 2025] [:error] [pid 7160:tid 7177] [client 4.217.252.121:1585] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6rG-w_ihNZR5L8vEW2rwAAAY4"]
[Fri Dec 26 23:34:52.456329 2025] [:error] [pid 7160:tid 7167] [client 4.217.252.121:1604] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6rHOw_ihNZR5L8vEW2sQAAAYQ"]
[Fri Dec 26 23:34:53.746160 2025] [:error] [pid 28355:tid 28372] [client 4.217.252.121:1588] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aU6rHbsFqKXf7ADZcTY-pgAAAM8"]
[Fri Dec 26 23:34:54.654365 2025] [:error] [pid 28269:tid 28306] [client 4.217.252.121:1603] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aU6rHp3ZK8bJ-c9-kjOxCwAAAEQ"]
[Fri Dec 26 23:34:55.357016 2025] [:error] [pid 28269:tid 28324] [client 4.217.252.121:1566] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aU6rH53ZK8bJ-c9-kjOxDAAAAFY"]
[Fri Dec 26 23:34:55.884790 2025] [:error] [pid 28355:tid 28379] [client 4.217.252.121:1634] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aU6rH7sFqKXf7ADZcTY-qAAAANY"]
[Fri Dec 26 23:34:56.801542 2025] [:error] [pid 15063:tid 15065] [client 4.217.252.121:1687] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aU6rIODsf_aL46Jy7z86vQAAAQA"]
[Fri Dec 26 23:34:57.856099 2025] [:error] [pid 28269:tid 28311] [client 4.217.252.121:1552] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU6rIZ3ZK8bJ-c9-kjOxDgAAAEk"]
[Fri Dec 26 23:34:58.212983 2025] [:error] [pid 15063:tid 15073] [client 4.217.252.121:1573] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU6rIuDsf_aL46Jy7z86vwAAAQg"]
[Fri Dec 26 23:34:58.900057 2025] [:error] [pid 28270:tid 28336] [client 4.217.252.121:1654] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU6rIl9Ac79_ckdPN5J-MgAAAIc"]
[Fri Dec 26 23:35:00.108452 2025] [:error] [pid 7160:tid 7172] [client 4.217.252.121:1559] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU6rJOw_ihNZR5L8vEW2tQAAAYk"]
[Fri Dec 26 23:35:01.465431 2025] [:error] [pid 28268:tid 28279] [client 4.217.252.121:1587] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU6rJXc_KuO_55-uPTTXxQAAAAQ"]
[Fri Dec 26 23:35:01.847789 2025] [:error] [pid 15063:tid 15067] [client 4.217.252.121:1627] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU6rJeDsf_aL46Jy7z86wwAAAQI"]
[Fri Dec 26 23:35:02.571833 2025] [:error] [pid 34865:tid 34887] [client 4.217.252.121:1558] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU6rJqi4zjVVKBdvuTQVeAAAAVQ"]
[Fri Dec 26 23:35:03.476429 2025] [:error] [pid 7160:tid 7178] [client 4.217.252.121:1574] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU6rJ-w_ihNZR5L8vEW2twAAAY8"]
[Fri Dec 26 23:35:04.073021 2025] [:error] [pid 15063:tid 15087] [client 4.217.252.121:1548] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU6rKODsf_aL46Jy7z86xgAAARY"]
[Fri Dec 26 23:35:04.735066 2025] [:error] [pid 34865:tid 34872] [client 4.217.252.121:1650] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU6rKKi4zjVVKBdvuTQVfAAAAUU"]
[Fri Dec 26 23:35:05.189716 2025] [:error] [pid 7160:tid 7168] [client 4.217.252.121:1545] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU6rKew_ihNZR5L8vEW2vAAAAYU"]
[Fri Dec 26 23:35:05.756309 2025] [:error] [pid 15063:tid 15071] [client 4.217.252.121:1642] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU6rKeDsf_aL46Jy7z86xwAAAQY"]
[Fri Dec 26 23:35:06.408334 2025] [:error] [pid 28270:tid 28338] [client 4.217.252.121:1600] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU6rKl9Ac79_ckdPN5J-OQAAAIk"]
[Fri Dec 26 23:35:07.073656 2025] [:error] [pid 34865:tid 34879] [client 4.217.252.121:1612] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU6rK6i4zjVVKBdvuTQVfgAAAUw"]
[Fri Dec 26 23:35:07.908309 2025] [:error] [pid 34865:tid 34870] [client 4.217.252.121:1646] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU6rK6i4zjVVKBdvuTQVfwAAAUM"]
[Fri Dec 26 23:35:09.081623 2025] [:error] [pid 34865:tid 34876] [client 4.217.252.121:1544] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU6rLai4zjVVKBdvuTQVgAAAAUk"]
[Fri Dec 26 23:35:09.831111 2025] [:error] [pid 28355:tid 28360] [client 4.217.252.121:1539] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU6rLbsFqKXf7ADZcTY-tAAAAMM"]
[Fri Dec 26 23:35:10.406257 2025] [:error] [pid 28269:tid 28326] [client 4.217.252.121:1641] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU6rLp3ZK8bJ-c9-kjOxFQAAAFg"]
[Fri Dec 26 23:35:10.910487 2025] [:error] [pid 34865:tid 34884] [client 4.217.252.121:1727] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU6rLqi4zjVVKBdvuTQVhAAAAVE"]
[Fri Dec 26 23:35:11.685837 2025] [:error] [pid 34865:tid 34874] [client 4.217.252.121:1586] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU6rL6i4zjVVKBdvuTQVhgAAAUc"]
[Fri Dec 26 23:35:12.258401 2025] [:error] [pid 7160:tid 7165] [client 4.217.252.121:1648] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU6rMOw_ihNZR5L8vEW2vwAAAYI"]
[Fri Dec 26 23:35:35.123293 2025] [:error] [pid 28268:tid 28299] [client 4.217.252.121:43531] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU6rR3c_KuO_55-uPTTX0QAAABg"]
[Fri Dec 26 23:35:35.856685 2025] [:error] [pid 15063:tid 15067] [client 4.217.252.121:43601] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU6rR-Dsf_aL46Jy7z866wAAAQI"]
[Fri Dec 26 23:35:36.558382 2025] [:error] [pid 15063:tid 15072] [client 4.217.252.121:43556] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU6rSODsf_aL46Jy7z867QAAAQc"]
[Fri Dec 26 23:35:37.464738 2025] [:error] [pid 34865:tid 34875] [client 4.217.252.121:43533] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU6rSai4zjVVKBdvuTQVmQAAAUg"]
[Fri Dec 26 23:35:37.824659 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:43618] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU6rSew_ihNZR5L8vEW27wAAAY0"]
[Fri Dec 26 23:35:38.479578 2025] [:error] [pid 7160:tid 7178] [client 4.217.252.121:43605] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU6rSuw_ihNZR5L8vEW28QAAAY8"]
[Fri Dec 26 23:35:38.971708 2025] [:error] [pid 7160:tid 7180] [client 4.217.252.121:44183] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU6rSuw_ihNZR5L8vEW28wAAAZE"]
[Fri Dec 26 23:35:39.420421 2025] [:error] [pid 15063:tid 15083] [client 4.217.252.121:1849] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU6rS-Dsf_aL46Jy7z868AAAARI"]
[Fri Dec 26 23:35:39.871534 2025] [:error] [pid 15063:tid 15080] [client 4.217.252.121:1429] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU6rS-Dsf_aL46Jy7z868gAAAQ8"]
[Fri Dec 26 23:35:40.243184 2025] [:error] [pid 28269:tid 28309] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Dec 26 23:35:40.383623 2025] [:error] [pid 28269:tid 28307] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Dec 26 23:35:40.538787 2025] [:error] [pid 28269:tid 28311] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Dec 26 23:35:41.128346 2025] [:error] [pid 28269:tid 28320] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Dec 26 23:35:41.271099 2025] [:error] [pid 28269:tid 28325] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Dec 26 23:35:41.424746 2025] [:error] [pid 28269:tid 28319] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Dec 26 23:35:41.571337 2025] [:error] [pid 28269:tid 28317] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Dec 26 23:35:41.858201 2025] [:error] [pid 28269:tid 28304] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Dec 26 23:35:42.009581 2025] [:error] [pid 28269:tid 28302] [client 4.217.252.121:1113] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Dec 26 23:35:42.167258 2025] [:error] [pid 28269:tid 28310] [client 4.217.252.121:1113] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aU6rTp3ZK8bJ-c9-kjOxJwAAAEg"]
[Fri Dec 26 23:35:42.974091 2025] [:error] [pid 34865:tid 34873] [client 4.217.252.121:1508] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU6rTqi4zjVVKBdvuTQVngAAAUY"]
[Fri Dec 26 23:35:43.565494 2025] [:error] [pid 34865:tid 34867] [client 4.217.252.121:44687] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU6rT6i4zjVVKBdvuTQVnwAAAUA"]
[Fri Dec 26 23:35:44.261397 2025] [:error] [pid 7160:tid 7183] [client 4.217.252.121:1703] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU6rUOw_ihNZR5L8vEW29gAAAZQ"]
[Fri Dec 26 23:35:45.010863 2025] [:error] [pid 7160:tid 7165] [client 4.217.252.121:17101] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU6rUew_ihNZR5L8vEW2-QAAAYI"]
[Fri Dec 26 23:35:45.666966 2025] [:error] [pid 7160:tid 7173] [client 4.217.252.121:1371] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6rUew_ihNZR5L8vEW2-wAAAYo"]
[Fri Dec 26 23:35:46.071937 2025] [:error] [pid 15063:tid 15081] [client 4.217.252.121:1786] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6rUuDsf_aL46Jy7z86_AAAARA"]
[Fri Dec 26 23:35:46.925694 2025] [:error] [pid 34865:tid 34870] [client 4.217.252.121:1728] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6rUqi4zjVVKBdvuTQVogAAAUM"]
[Fri Dec 26 23:35:47.721172 2025] [:error] [pid 28355:tid 28377] [client 4.217.252.121:44663] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU6rU7sFqKXf7ADZcTY-zAAAANQ"]
[Fri Dec 26 23:35:48.194656 2025] [:error] [pid 15063:tid 15084] [client 4.217.252.121:44614] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU6rVODsf_aL46Jy7z86_gAAARM"]
[Fri Dec 26 23:35:48.636692 2025] [:error] [pid 15063:tid 15078] [client 4.217.252.121:1316] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU6rVODsf_aL46Jy7z87AAAAAQ0"]
[Fri Dec 26 23:35:49.592428 2025] [:error] [pid 28355:tid 28376] [client 4.217.252.121:1303] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU6rVbsFqKXf7ADZcTY-zQAAANM"]
[Fri Dec 26 23:35:50.574637 2025] [:error] [pid 15063:tid 15075] [client 4.217.252.121:1108] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU6rVuDsf_aL46Jy7z87AwAAAQo"]
[Fri Dec 26 23:35:51.598081 2025] [:error] [pid 15063:tid 15068] [client 4.217.252.121:1343] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6rV-Dsf_aL46Jy7z87BAAAAQM"]
[Fri Dec 26 23:35:52.665758 2025] [:error] [pid 34865:tid 34871] [client 4.217.252.121:1125] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6rWKi4zjVVKBdvuTQVpgAAAUQ"]
[Fri Dec 26 23:35:53.543946 2025] [:error] [pid 34865:tid 34883] [client 4.217.252.121:1848] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6rWai4zjVVKBdvuTQVqQAAAVA"]
[Fri Dec 26 23:35:54.390909 2025] [:error] [pid 34865:tid 34890] [client 4.217.252.121:1583] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU6rWqi4zjVVKBdvuTQVrQAAAVc"]
[Fri Dec 26 23:35:54.898339 2025] [:error] [pid 28270:tid 28340] [client 4.217.252.121:1824] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU6rWl9Ac79_ckdPN5J-SQAAAIs"]
[Fri Dec 26 23:35:55.669709 2025] [:error] [pid 15063:tid 15067] [client 4.217.252.121:1591] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU6rW-Dsf_aL46Jy7z87BQAAAQI"]
[Fri Dec 26 23:35:56.296271 2025] [:error] [pid 15063:tid 15076] [client 4.217.252.121:1806] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU6rXODsf_aL46Jy7z87BgAAAQs"]
[Fri Dec 26 23:35:57.944079 2025] [:error] [pid 15063:tid 15071] [client 4.217.252.121:1586] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU6rXeDsf_aL46Jy7z87DQAAAQY"]
[Fri Dec 26 23:35:58.532154 2025] [:error] [pid 15063:tid 15084] [client 4.217.252.121:1845] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU6rXuDsf_aL46Jy7z87EAAAARM"]
[Fri Dec 26 23:35:59.419737 2025] [:error] [pid 15063:tid 15073] [client 4.217.252.121:17067] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU6rX-Dsf_aL46Jy7z87EgAAAQg"]
[Fri Dec 26 23:36:00.167496 2025] [:error] [pid 7160:tid 7175] [client 4.217.252.121:17069] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU6rYOw_ihNZR5L8vEW3AAAAAYw"]
[Fri Dec 26 23:36:01.574996 2025] [:error] [pid 7160:tid 7186] [client 4.217.252.121:1963] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU6rYew_ihNZR5L8vEW3BQAAAZc"]
[Fri Dec 26 23:36:02.546390 2025] [:error] [pid 15063:tid 15069] [client 4.217.252.121:17061] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU6rYuDsf_aL46Jy7z87FgAAAQQ"]
[Fri Dec 26 23:36:03.904039 2025] [:error] [pid 28269:tid 28324] [client 4.217.252.121:17082] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU6rY53ZK8bJ-c9-kjOxNAAAAFY"]
[Fri Dec 26 23:36:04.400110 2025] [:error] [pid 28269:tid 28315] [client 4.217.252.121:1981] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU6rZJ3ZK8bJ-c9-kjOxNQAAAE0"]
[Fri Dec 26 23:36:05.128945 2025] [:error] [pid 28269:tid 28314] [client 4.217.252.121:1980] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU6rZZ3ZK8bJ-c9-kjOxNgAAAEw"]
[Fri Dec 26 23:36:05.862851 2025] [:error] [pid 28269:tid 28320] [client 4.217.252.121:1940] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU6rZZ3ZK8bJ-c9-kjOxOQAAAFI"]
[Fri Dec 26 23:36:06.485193 2025] [:error] [pid 15063:tid 15080] [client 4.217.252.121:17087] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU6rZuDsf_aL46Jy7z87GAAAAQ8"]
[Fri Dec 26 23:36:07.358588 2025] [:error] [pid 7160:tid 7167] [client 4.217.252.121:1973] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU6rZ-w_ihNZR5L8vEW3CgAAAYQ"]
[Fri Dec 26 23:36:08.795165 2025] [:error] [pid 28268:tid 28294] [client 4.217.252.121:1955] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU6raHc_KuO_55-uPTTX1wAAABM"]
[Fri Dec 26 23:36:10.220048 2025] [:error] [pid 28270:tid 28346] [client 4.217.252.121:1952] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU6ral9Ac79_ckdPN5J-TgAAAJE"]
[Fri Dec 26 23:36:12.102392 2025] [:error] [pid 34865:tid 34889] [client 4.217.252.121:17034] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU6rbKi4zjVVKBdvuTQVtgAAAVY"]
[Fri Dec 26 23:36:13.913701 2025] [:error] [pid 28268:tid 28283] [client 4.217.252.121:17073] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU6rbXc_KuO_55-uPTTX2wAAAAg"]
[Fri Dec 26 23:36:15.151077 2025] [:error] [pid 7160:tid 7185] [client 4.217.252.121:1927] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU6rb-w_ihNZR5L8vEW3EgAAAZY"]
[Fri Dec 26 23:36:16.871856 2025] [:error] [pid 28269:tid 28303] [client 4.217.252.121:1970] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU6rcJ3ZK8bJ-c9-kjOxPgAAAEE"]
[Fri Dec 26 23:36:17.628974 2025] [:error] [pid 15063:tid 15067] [client 4.217.252.121:1942] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU6rceDsf_aL46Jy7z87JAAAAQI"]
[Fri Dec 26 23:36:18.310046 2025] [:error] [pid 7160:tid 7177] [client 4.217.252.121:17064] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU6rcuw_ihNZR5L8vEW3GAAAAY4"]
[Fri Dec 26 23:36:19.266888 2025] [:error] [pid 7160:tid 7175] [client 4.217.252.121:1925] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU6rc-w_ihNZR5L8vEW3GwAAAYw"]
[Fri Dec 26 23:36:20.177502 2025] [:error] [pid 7160:tid 7169] [client 4.217.252.121:1800] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6rdOw_ihNZR5L8vEW3IQAAAYY"]
[Fri Dec 26 23:36:21.153880 2025] [:error] [pid 15063:tid 15071] [client 4.217.252.121:1948] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6rdeDsf_aL46Jy7z87JgAAAQY"]
[Fri Dec 26 23:36:21.768318 2025] [:error] [pid 28355:tid 28361] [client 4.217.252.121:1962] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6rdbsFqKXf7ADZcTY-2QAAAMQ"]
[Fri Dec 26 23:36:22.674575 2025] [:error] [pid 15063:tid 15070] [client 4.217.252.121:17037] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU6rduDsf_aL46Jy7z87KgAAAQU"]
[Fri Dec 26 23:36:23.409980 2025] [:error] [pid 34865:tid 34882] [client 4.217.252.121:1965] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU6rd6i4zjVVKBdvuTQVvQAAAU8"]
[Fri Dec 26 23:36:24.001184 2025] [:error] [pid 34865:tid 34886] [client 4.217.252.121:1975] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU6rd6i4zjVVKBdvuTQVwAAAAVM"]
[Fri Dec 26 23:36:24.595812 2025] [:error] [pid 34865:tid 34868] [client 4.217.252.121:1953] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU6reKi4zjVVKBdvuTQVwQAAAUE"]
[Fri Dec 26 23:36:26.536010 2025] [:error] [pid 15063:tid 15074] [client 4.217.252.121:17050] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aU6reuDsf_aL46Jy7z87MwAAAQk"]
[Fri Dec 26 23:36:27.138952 2025] [:error] [pid 28270:tid 28350] [client 4.217.252.121:17025] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU6re19Ac79_ckdPN5J-VgAAAJU"]
[Fri Dec 26 23:36:28.756366 2025] [:error] [pid 28268:tid 28276] [client 4.217.252.121:1836] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU6rfHc_KuO_55-uPTTX5gAAAAE"]
[Fri Dec 26 23:36:29.838409 2025] [:error] [pid 7160:tid 7178] [client 4.217.252.121:17084] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU6rfew_ihNZR5L8vEW3LQAAAY8"]
[Fri Dec 26 23:36:30.728885 2025] [:error] [pid 34865:tid 34874] [client 4.217.252.121:17054] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aU6rfqi4zjVVKBdvuTQVxgAAAUc"]
[Fri Dec 26 23:36:31.474593 2025] [:error] [pid 28269:tid 28306] [client 4.217.252.121:17074] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU6rf53ZK8bJ-c9-kjOxQwAAAEQ"]
[Fri Dec 26 23:36:32.358677 2025] [:error] [pid 34865:tid 34877] [client 4.217.252.121:1969] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU6rgKi4zjVVKBdvuTQVyAAAAUo"]
[Fri Dec 26 23:36:33.210999 2025] [:error] [pid 7160:tid 7171] [client 4.217.252.121:1956] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU6rgew_ihNZR5L8vEW3NAAAAYg"]
[Fri Dec 26 23:36:33.717594 2025] [:error] [pid 7160:tid 7182] [client 4.217.252.121:1977] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aU6rgew_ihNZR5L8vEW3NQAAAZM"]
[Fri Dec 26 23:36:34.787020 2025] [:error] [pid 28270:tid 28335] [client 4.217.252.121:1943] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU6rgl9Ac79_ckdPN5J-WQAAAIY"]
[Fri Dec 26 23:36:35.840218 2025] [:error] [pid 15063:tid 15070] [client 4.217.252.121:1937] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU6rg-Dsf_aL46Jy7z87QQAAAQU"]
[Fri Dec 26 23:36:36.694053 2025] [:error] [pid 28270:tid 28353] [client 4.217.252.121:1855] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU6rhF9Ac79_ckdPN5J-XAAAAJg"]
[Fri Dec 26 23:36:38.227113 2025] [:error] [pid 7160:tid 7173] [client 4.217.252.121:17086] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aU6rhuw_ihNZR5L8vEW3OQAAAYo"]
[Fri Dec 26 23:36:39.128742 2025] [:error] [pid 34865:tid 34875] [client 4.217.252.121:17030] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6rh6i4zjVVKBdvuTQVzgAAAUg"]
[Fri Dec 26 23:36:39.414128 2025] [:error] [pid 15063:tid 15073] [client 4.217.252.121:17038] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6rh-Dsf_aL46Jy7z87QgAAAQg"]
[Fri Dec 26 23:36:40.175261 2025] [:error] [pid 34865:tid 34871] [client 4.217.252.121:1968] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6riKi4zjVVKBdvuTQV0QAAAUQ"]
[Fri Dec 26 23:36:41.140687 2025] [:error] [pid 15063:tid 15077] [client 4.217.252.121:1938] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6rieDsf_aL46Jy7z87RQAAAQw"]
[Fri Dec 26 23:36:43.321451 2025] [:error] [pid 28269:tid 28310] [client 4.217.252.121:1920] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Dec 26 23:36:43.505766 2025] [:error] [pid 28269:tid 28322] [client 4.217.252.121:1920] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Dec 26 23:36:43.790141 2025] [:error] [pid 28269:tid 28323] [client 4.217.252.121:1920] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Dec 26 23:36:43.929756 2025] [:error] [pid 28269:tid 28324] [client 4.217.252.121:1920] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Fri Dec 26 23:36:44.219964 2025] [:error] [pid 28269:tid 28315] [client 4.217.252.121:1920] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Fri Dec 26 23:36:44.355174 2025] [:error] [pid 28269:tid 28314] [client 4.217.252.121:1920] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6rjJ3ZK8bJ-c9-kjOxVQAAAEw"]
[Fri Dec 26 23:36:44.818673 2025] [:error] [pid 34865:tid 34889] [client 4.217.252.121:1964] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6rjKi4zjVVKBdvuTQV0wAAAVY"]
[Fri Dec 26 23:36:45.563033 2025] [:error] [pid 34865:tid 34891] [client 4.217.252.121:17083] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6rjai4zjVVKBdvuTQV1gAAAVg"]
[Fri Dec 26 23:36:46.343508 2025] [:error] [pid 7160:tid 7179] [client 4.217.252.121:1966] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU6rjuw_ihNZR5L8vEW3PwAAAZA"]
[Fri Dec 26 23:36:47.244711 2025] [:error] [pid 7160:tid 7175] [client 4.217.252.121:1933] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6rj-w_ihNZR5L8vEW3QAAAAYw"]
[Fri Dec 26 23:36:47.767726 2025] [:error] [pid 28268:tid 28293] [client 4.217.252.121:17051] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6rj3c_KuO_55-uPTTX6AAAABI"]
[Fri Dec 26 23:36:48.454730 2025] [:error] [pid 28269:tid 28319] [client 4.217.252.121:1558] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6rkJ3ZK8bJ-c9-kjOxWQAAAFE"]
[Fri Dec 26 23:36:48.918311 2025] [:error] [pid 7160:tid 7187] [client 4.217.252.121:17062] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU6rkOw_ihNZR5L8vEW3QgAAAZg"]
[Fri Dec 26 23:36:50.298821 2025] [:error] [pid 28355:tid 28360] [client 4.217.252.121:1193] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU6rkrsFqKXf7ADZcTY-6QAAAMM"]
[Fri Dec 26 23:36:51.071509 2025] [:error] [pid 28269:tid 28308] [client 4.217.252.121:17029] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU6rk53ZK8bJ-c9-kjOxXAAAAEY"]
[Fri Dec 26 23:36:51.906455 2025] [:error] [pid 28355:tid 28369] [client 4.217.252.121:17063] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU6rk7sFqKXf7ADZcTY-7AAAAMw"]
[Fri Dec 26 23:36:52.511476 2025] [:error] [pid 28355:tid 28374] [client 4.217.252.121:1974] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aU6rlLsFqKXf7ADZcTY-7QAAANE"]
[Fri Dec 26 23:36:53.247797 2025] [:error] [pid 7160:tid 7179] [client 4.217.252.121:1577] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aU6rlew_ihNZR5L8vEW3SwAAAZA"]
[Fri Dec 26 23:36:53.780840 2025] [:error] [pid 15063:tid 15088] [client 4.217.252.121:17078] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aU6rleDsf_aL46Jy7z87TwAAARc"]
[Fri Dec 26 23:36:54.600447 2025] [:error] [pid 7160:tid 7185] [client 4.217.252.121:17033] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aU6rluw_ihNZR5L8vEW3UQAAAZY"]
[Fri Dec 26 23:36:55.354176 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:17024] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aU6rl-w_ihNZR5L8vEW3VgAAAY0"]
[Fri Dec 26 23:36:56.544035 2025] [:error] [pid 28269:tid 28323] [client 4.217.252.121:1921] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6rmJ3ZK8bJ-c9-kjOxYAAAAFU"]
[Fri Dec 26 23:36:57.978581 2025] [:error] [pid 28355:tid 28380] [client 4.217.252.121:1841] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6rmbsFqKXf7ADZcTY-8AAAANc"]
[Fri Dec 26 23:36:59.160592 2025] [:error] [pid 28270:tid 28333] [client 4.217.252.121:17056] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6rm19Ac79_ckdPN5J-bwAAAIQ"]
[Fri Dec 26 23:37:00.210133 2025] [:error] [pid 28355:tid 28381] [client 4.217.252.121:1538] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU6rnLsFqKXf7ADZcTY-9AAAANg"]
[Fri Dec 26 23:37:00.961641 2025] [:error] [pid 28268:tid 28296] [client 4.217.252.121:1967] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU6rnHc_KuO_55-uPTTX7wAAABU"]
[Fri Dec 26 23:37:01.725037 2025] [:error] [pid 28355:tid 28369] [client 4.217.252.121:17044] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU6rnbsFqKXf7ADZcTY-9wAAAMw"]
[Fri Dec 26 23:37:02.291131 2025] [:error] [pid 28355:tid 28363] [client 4.217.252.121:1802] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU6rnrsFqKXf7ADZcTY--AAAAMY"]
[Fri Dec 26 23:37:03.056637 2025] [:error] [pid 15063:tid 15081] [client 4.217.252.121:1543] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU6rn-Dsf_aL46Jy7z87WAAAARA"]
[Fri Dec 26 23:37:03.478497 2025] [:error] [pid 15063:tid 15077] [client 4.217.252.121:17065] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU6rn-Dsf_aL46Jy7z87WQAAAQw"]
[Fri Dec 26 23:37:04.451340 2025] [:error] [pid 7160:tid 7183] [client 4.217.252.121:17081] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU6roOw_ihNZR5L8vEW3YwAAAZQ"]
[Fri Dec 26 23:37:06.045824 2025] [:error] [pid 34865:tid 34891] [client 4.217.252.121:1939] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU6roqi4zjVVKBdvuTQV4AAAAVg"]
[Fri Dec 26 23:37:06.969472 2025] [:error] [pid 34865:tid 34878] [client 4.217.252.121:1564] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aU6roqi4zjVVKBdvuTQV4QAAAUs"]
[Fri Dec 26 23:37:07.589138 2025] [:error] [pid 28270:tid 28341] [client 4.217.252.121:17079] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU6ro19Ac79_ckdPN5J-cgAAAIw"]
[Fri Dec 26 23:37:08.193196 2025] [:error] [pid 28355:tid 28359] [client 4.217.252.121:1840] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU6rpLsFqKXf7ADZcTY_AwAAAMI"]
[Fri Dec 26 23:37:08.726442 2025] [:error] [pid 28269:tid 28316] [client 4.217.252.121:1795] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU6rpJ3ZK8bJ-c9-kjOxZAAAAE4"]
[Fri Dec 26 23:37:09.398295 2025] [:error] [pid 28270:tid 28336] [client 4.217.252.121:44183] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU6rpV9Ac79_ckdPN5J-cwAAAIc"]
[Fri Dec 26 23:37:09.949843 2025] [:error] [pid 15063:tid 15068] [client 4.217.252.121:17085] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aU6rpeDsf_aL46Jy7z87XAAAAQM"]
[Fri Dec 26 23:37:10.518460 2025] [:error] [pid 28270:tid 28346] [client 4.217.252.121:1929] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aU6rpl9Ac79_ckdPN5J-dAAAAJE"]
[Fri Dec 26 23:37:11.228872 2025] [:error] [pid 28268:tid 28278] [client 4.217.252.121:1565] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aU6rp3c_KuO_55-uPTTX-QAAAAM"]
[Fri Dec 26 23:37:11.911632 2025] [:error] [pid 28269:tid 28306] [client 4.217.252.121:17077] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aU6rp53ZK8bJ-c9-kjOxaAAAAEQ"]
[Fri Dec 26 23:37:12.755437 2025] [:error] [pid 34865:tid 34871] [client 4.217.252.121:1982] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU6rqKi4zjVVKBdvuTQV6QAAAUQ"]
[Fri Dec 26 23:37:13.426914 2025] [:error] [pid 28355:tid 28375] [client 4.217.252.121:1931] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU6rqbsFqKXf7ADZcTY_CQAAANI"]
[Fri Dec 26 23:37:14.106058 2025] [:error] [pid 7160:tid 7171] [client 4.217.252.121:1949] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU6rquw_ihNZR5L8vEW3fgAAAYg"]
[Fri Dec 26 23:37:14.671231 2025] [:error] [pid 28270:tid 28345] [client 4.217.252.121:1961] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU6rql9Ac79_ckdPN5J-ewAAAJA"]
[Fri Dec 26 23:37:15.093606 2025] [:error] [pid 28270:tid 28342] [client 4.217.252.121:1585] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU6rq19Ac79_ckdPN5J-fQAAAI0"]
[Fri Dec 26 23:37:15.494180 2025] [:error] [pid 7160:tid 7169] [client 4.217.252.121:1947] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aU6rq-w_ihNZR5L8vEW3lgAAAYY"]
[Fri Dec 26 23:37:16.112413 2025] [:error] [pid 28355:tid 28358] [client 4.217.252.121:1946] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU6rrLsFqKXf7ADZcTY_CwAAAME"]
[Fri Dec 26 23:37:16.699751 2025] [:error] [pid 34865:tid 34879] [client 4.217.252.121:1797] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU6rrKi4zjVVKBdvuTQV8gAAAUw"]
[Fri Dec 26 23:37:17.481006 2025] [:error] [pid 28269:tid 28302] [client 4.217.252.121:1960] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU6rrZ3ZK8bJ-c9-kjOxbAAAAEA"]
[Fri Dec 26 23:37:18.583306 2025] [:error] [pid 28270:tid 28332] [client 4.217.252.121:17055] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU6rrl9Ac79_ckdPN5J-gQAAAIM"]
[Fri Dec 26 23:37:19.917144 2025] [:error] [pid 7160:tid 7180] [client 4.217.252.121:17072] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU6rr-w_ihNZR5L8vEW3yAAAAZE"]
[Fri Dec 26 23:37:20.822483 2025] [:error] [pid 28355:tid 28373] [client 4.217.252.121:1941] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU6rsLsFqKXf7ADZcTY_EAAAANA"]
[Fri Dec 26 23:37:21.318648 2025] [:error] [pid 28355:tid 28368] [client 4.217.252.121:1805] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU6rsbsFqKXf7ADZcTY_EwAAAMs"]
[Fri Dec 26 23:37:22.541947 2025] [:error] [pid 28268:tid 28276] [client 4.217.252.121:1926] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aU6rsnc_KuO_55-uPTTYBQAAAAE"]
[Fri Dec 26 23:37:23.209953 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:1819] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU6rs-w_ihNZR5L8vEW3zwAAAY0"]
[Fri Dec 26 23:37:24.119365 2025] [:error] [pid 28270:tid 28349] [client 4.217.252.121:1934] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU6rtF9Ac79_ckdPN5J-hAAAAJQ"]
[Fri Dec 26 23:37:25.654300 2025] [:error] [pid 28355:tid 28377] [client 4.217.252.121:17036] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU6rtbsFqKXf7ADZcTY_FQAAANQ"]
[Fri Dec 26 23:37:26.445103 2025] [:error] [pid 34865:tid 34888] [client 4.217.252.121:1958] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU6rtqi4zjVVKBdvuTQWCgAAAVU"]
[Fri Dec 26 23:37:27.427911 2025] [:error] [pid 28268:tid 28288] [client 4.217.252.121:1957] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU6rt3c_KuO_55-uPTTYCAAAAA0"]
[Fri Dec 26 23:37:28.699263 2025] [:error] [pid 15063:tid 15072] [client 4.217.252.121:1828] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aU6ruODsf_aL46Jy7z87aQAAAQc"]
[Fri Dec 26 23:37:30.544852 2025] [:error] [pid 28268:tid 28284] [client 4.217.252.121:1821] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aU6runc_KuO_55-uPTTYDAAAAAk"]
[Fri Dec 26 23:37:31.022815 2025] [:error] [pid 28270:tid 28342] [client 4.217.252.121:1839] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aU6ru19Ac79_ckdPN5J-iQAAAI0"]
[Fri Dec 26 23:37:31.790437 2025] [:error] [pid 28270:tid 28337] [client 4.217.252.121:1935] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aU6ru19Ac79_ckdPN5J-jgAAAIg"]
[Fri Dec 26 23:37:32.441727 2025] [:error] [pid 28269:tid 28326] [client 4.217.252.121:1549] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU6rvJ3ZK8bJ-c9-kjOxcAAAAFg"]
[Fri Dec 26 23:37:33.004626 2025] [:error] [pid 7160:tid 7187] [client 4.217.252.121:17070] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU6rvew_ihNZR5L8vEW31AAAAZg"]
[Fri Dec 26 23:37:33.449479 2025] [:error] [pid 28270:tid 28330] [client 4.217.252.121:1578] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU6rvV9Ac79_ckdPN5J-kQAAAIE"]
[Fri Dec 26 23:37:34.200026 2025] [:error] [pid 34865:tid 34870] [client 4.217.252.121:17035] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU6rvqi4zjVVKBdvuTQWIgAAAUM"]
[Fri Dec 26 23:37:35.075800 2025] [:error] [pid 7160:tid 7177] [client 4.217.252.121:17052] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aU6rv-w_ihNZR5L8vEW31QAAAY4"]
[Fri Dec 26 23:37:36.071955 2025] [:error] [pid 28355:tid 28362] [client 4.217.252.121:1959] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aU6rwLsFqKXf7ADZcTY_IAAAAMU"]
[Fri Dec 26 23:37:36.470012 2025] [:error] [pid 34865:tid 34890] [client 4.217.252.121:1117] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aU6rwKi4zjVVKBdvuTQWKAAAAVc"]
[Fri Dec 26 23:37:36.866469 2025] [:error] [pid 28270:tid 28337] [client 4.217.252.121:1846] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aU6rwF9Ac79_ckdPN5J-mAAAAIg"]
[Fri Dec 26 23:37:37.622254 2025] [:error] [pid 28270:tid 28332] [client 4.217.252.121:1559] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aU6rwV9Ac79_ckdPN5J-nQAAAIM"]
[Fri Dec 26 23:37:38.238501 2025] [:error] [pid 34865:tid 34873] [client 4.217.252.121:1946] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU6rwqi4zjVVKBdvuTQWLgAAAUY"]
[Fri Dec 26 23:37:38.736419 2025] [:error] [pid 28270:tid 28344] [client 4.217.252.121:1183] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU6rwl9Ac79_ckdPN5J-ogAAAI8"]
[Fri Dec 26 23:37:40.018965 2025] [:error] [pid 28269:tid 28306] [client 4.217.252.121:1794] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU6rxJ3ZK8bJ-c9-kjOxdAAAAEQ"]
[Fri Dec 26 23:37:40.639662 2025] [:error] [pid 15063:tid 15065] [client 4.217.252.121:1803] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU6rxODsf_aL46Jy7z87cgAAAQA"]
[Fri Dec 26 23:37:41.425323 2025] [:error] [pid 34865:tid 34889] [client 4.217.252.121:1798] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU6rxai4zjVVKBdvuTQWOAAAAVY"]
[Fri Dec 26 23:37:42.765921 2025] [:error] [pid 7160:tid 7169] [client 4.217.252.121:1983] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU6rxuw_ihNZR5L8vEW32wAAAYY"]
[Fri Dec 26 23:37:43.470138 2025] [:error] [pid 7160:tid 7165] [client 4.217.252.121:1547] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU6rx-w_ihNZR5L8vEW33wAAAYI"]
[Fri Dec 26 23:37:44.993900 2025] [:error] [pid 28268:tid 28290] [client 4.217.252.121:17076] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Dec 26 23:37:45.315204 2025] [:error] [pid 28268:tid 28286] [client 4.217.252.121:17076] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Fri Dec 26 23:37:45.907412 2025] [:error] [pid 28268:tid 28280] [client 4.217.252.121:17076] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU6ryXc_KuO_55-uPTTYJQAAAAU"]
[Fri Dec 26 23:37:47.339361 2025] [:error] [pid 34865:tid 34886] [client 4.217.252.121:1817] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU6ry6i4zjVVKBdvuTQWRQAAAVM"]
[Fri Dec 26 23:37:48.151218 2025] [:error] [pid 34865:tid 34876] [client 4.217.252.121:1831] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU6rzKi4zjVVKBdvuTQWRgAAAUk"]
[Fri Dec 26 23:37:48.873703 2025] [:error] [pid 34865:tid 34871] [client 4.217.252.121:17039] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU6rzKi4zjVVKBdvuTQWSQAAAUQ"]
[Fri Dec 26 23:37:49.471618 2025] [:error] [pid 28268:tid 28289] [client 4.217.252.121:1930] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU6rzXc_KuO_55-uPTTYKAAAAA4"]
[Fri Dec 26 23:37:49.888560 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:1822] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU6rzew_ihNZR5L8vEW37gAAAY0"]
[Fri Dec 26 23:37:50.397042 2025] [:error] [pid 34865:tid 34891] [client 4.217.252.121:1199] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU6rzqi4zjVVKBdvuTQWTAAAAVg"]
[Fri Dec 26 23:37:50.987269 2025] [:error] [pid 28268:tid 28275] [client 4.217.252.121:1837] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU6rznc_KuO_55-uPTTYKQAAAAA"]
[Fri Dec 26 23:37:52.125448 2025] [:error] [pid 7160:tid 7183] [client 4.217.252.121:1972] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU6r0Ow_ihNZR5L8vEW39AAAAZQ"]
[Fri Dec 26 23:37:52.838934 2025] [:error] [pid 28269:tid 28317] [client 4.217.252.121:1581] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aU6r0J3ZK8bJ-c9-kjOxfwAAAE8"]
[Fri Dec 26 23:37:53.250771 2025] [:error] [pid 28355:tid 28372] [client 4.217.252.121:1808] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aU6r0bsFqKXf7ADZcTY_JgAAAM8"]
[Fri Dec 26 23:37:54.200030 2025] [:error] [pid 7160:tid 7178] [client 4.217.252.121:1978] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aU6r0uw_ihNZR5L8vEW3-QAAAY8"]
[Fri Dec 26 23:37:54.854259 2025] [:error] [pid 7160:tid 7168] [client 4.217.252.121:1850] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aU6r0uw_ihNZR5L8vEW3_QAAAYU"]
[Fri Dec 26 23:37:55.800484 2025] [:error] [pid 34865:tid 34868] [client 4.217.252.121:1810] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6r06i4zjVVKBdvuTQWTQAAAUE"]
[Fri Dec 26 23:37:56.469781 2025] [:error] [pid 28270:tid 28340] [client 4.217.252.121:1922] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6r1F9Ac79_ckdPN5J-rQAAAIs"]
[Fri Dec 26 23:37:57.884273 2025] [:error] [pid 34865:tid 34883] [client 4.217.252.121:17071] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6r1ai4zjVVKBdvuTQWUgAAAVA"]
[Fri Dec 26 23:37:58.791230 2025] [:error] [pid 28269:tid 28326] [client 4.217.252.121:1163] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU6r1p3ZK8bJ-c9-kjOxgAAAAFg"]
[Fri Dec 26 23:37:59.308348 2025] [:error] [pid 7160:tid 7163] [client 4.217.252.121:1552] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU6r1-w_ihNZR5L8vEW4AgAAAYA"]
[Fri Dec 26 23:38:00.080918 2025] [:error] [pid 28355:tid 28379] [client 4.217.252.121:1832] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU6r2LsFqKXf7ADZcTY_KAAAANY"]
[Fri Dec 26 23:38:00.492732 2025] [:error] [pid 34865:tid 34872] [client 4.217.252.121:1179] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU6r2Ki4zjVVKBdvuTQWVwAAAUU"]
[Fri Dec 26 23:38:01.182021 2025] [:error] [pid 15063:tid 15073] [client 4.217.252.121:1155] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU6r2eDsf_aL46Jy7z87ewAAAQg"]
[Fri Dec 26 23:38:02.006041 2025] [:error] [pid 7160:tid 7181] [client 4.217.252.121:1171] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aU6r2uw_ihNZR5L8vEW4BAAAAZI"]
[Fri Dec 26 23:38:02.326457 2025] [:error] [pid 7160:tid 7185] [client 4.217.252.121:1588] [client 4.217.252.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aU6r2uw_ihNZR5L8vEW4BQAAAZY"]
[Fri Dec 26 23:38:03.185785 2025] [:error] [pid 28268:tid 28291] [client 4.217.252.121:1571] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU6r23c_KuO_55-uPTTYMQAAABA"]
[Fri Dec 26 23:38:04.279610 2025] [:error] [pid 28270:tid 28336] [client 4.217.252.121:1924] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU6r3F9Ac79_ckdPN5J-tQAAAIc"]
[Fri Dec 26 23:38:04.738819 2025] [:error] [pid 7160:tid 7183] [client 4.217.252.121:17057] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU6r3Ow_ihNZR5L8vEW4DQAAAZQ"]
[Fri Dec 26 23:38:05.157650 2025] [:error] [pid 7160:tid 7167] [client 4.217.252.121:1154] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU6r3ew_ihNZR5L8vEW4DgAAAYQ"]
[Fri Dec 26 23:38:05.840006 2025] [:error] [pid 28268:tid 28282] [client 4.217.252.121:1170] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU6r3Xc_KuO_55-uPTTYMgAAAAc"]
[Fri Dec 26 23:38:06.179465 2025] [:error] [pid 28355:tid 28380] [client 4.217.252.121:1561] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU6r3rsFqKXf7ADZcTY_LAAAANc"]
[Fri Dec 26 23:38:07.105595 2025] [:error] [pid 28269:tid 28317] [client 4.217.252.121:1536] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU6r353ZK8bJ-c9-kjOxlQAAAE8"]
[Fri Dec 26 23:38:07.712355 2025] [:error] [pid 28355:tid 28373] [client 4.217.252.121:1971] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU6r37sFqKXf7ADZcTY_LgAAANA"]
[Fri Dec 26 23:38:08.336470 2025] [:error] [pid 28269:tid 28325] [client 4.217.252.121:1590] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU6r4J3ZK8bJ-c9-kjOxmAAAAFc"]
[Fri Dec 26 23:38:08.822350 2025] [:error] [pid 28270:tid 28339] [client 4.217.252.121:1843] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU6r4F9Ac79_ckdPN5J-vgAAAIo"]
[Fri Dec 26 23:38:09.941205 2025] [:error] [pid 28268:tid 28279] [client 4.217.252.121:17042] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU6r4Xc_KuO_55-uPTTYNAAAAAQ"]
[Fri Dec 26 23:38:10.611886 2025] [:error] [pid 28268:tid 28285] [client 4.217.252.121:1143] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU6r4nc_KuO_55-uPTTYNQAAAAo"]
[Fri Dec 26 23:38:11.332243 2025] [:error] [pid 7160:tid 7178] [client 4.217.252.121:1546] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aU6r4-w_ihNZR5L8vEW4HQAAAY8"]
[Fri Dec 26 23:38:11.930412 2025] [:error] [pid 34865:tid 34889] [client 4.217.252.121:1574] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aU6r46i4zjVVKBdvuTQWbAAAAVY"]
[Fri Dec 26 23:38:12.277428 2025] [:error] [pid 28270:tid 28345] [client 4.217.252.121:17027] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aU6r5F9Ac79_ckdPN5J-wQAAAJA"]
[Fri Dec 26 23:38:12.777923 2025] [:error] [pid 34865:tid 34874] [client 4.217.252.121:1842] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aU6r5Ki4zjVVKBdvuTQWbQAAAUc"]
[Fri Dec 26 23:38:13.125004 2025] [:error] [pid 34865:tid 34875] [client 4.217.252.121:1932] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU6r5ai4zjVVKBdvuTQWbgAAAUg"]
[Fri Dec 26 23:38:13.591435 2025] [:error] [pid 28270:tid 28331] [client 4.217.252.121:1176] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU6r5V9Ac79_ckdPN5J-wwAAAII"]
[Fri Dec 26 23:38:14.619209 2025] [:error] [pid 28270:tid 28350] [client 4.217.252.121:1815] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU6r5l9Ac79_ckdPN5J-yQAAAJU"]
[Fri Dec 26 23:38:16.075370 2025] [:error] [pid 28270:tid 28329] [client 4.217.252.121:1556] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU6r6F9Ac79_ckdPN5J-ywAAAIA"]
[Fri Dec 26 23:38:17.339966 2025] [:error] [pid 7160:tid 7187] [client 4.217.252.121:1929] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU6r6ew_ihNZR5L8vEW4IAAAAZg"]
[Fri Dec 26 23:38:18.554518 2025] [:error] [pid 34865:tid 34879] [client 4.217.252.121:1165] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU6r6qi4zjVVKBdvuTQWcwAAAUw"]
[Fri Dec 26 23:38:19.930454 2025] [:error] [pid 28268:tid 28290] [client 4.217.252.121:1091] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU6r63c_KuO_55-uPTTYOQAAAA8"]
[Fri Dec 26 23:38:20.988264 2025] [:error] [pid 28355:tid 28377] [client 4.217.252.121:1156] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU6r7LsFqKXf7ADZcTY_NAAAANQ"]
[Fri Dec 26 23:38:21.535709 2025] [:error] [pid 28355:tid 28364] [client 4.217.252.121:17060] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aU6r7bsFqKXf7ADZcTY_NgAAAMc"]
[Fri Dec 26 23:38:22.021468 2025] [:error] [pid 7160:tid 7173] [client 4.217.252.121:1100] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aU6r7uw_ihNZR5L8vEW4IgAAAYo"]
[Fri Dec 26 23:38:22.607376 2025] [:error] [pid 15063:tid 15067] [client 4.217.252.121:1827] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aU6r7uDsf_aL46Jy7z87nQAAAQI"]
[Fri Dec 26 23:38:23.150514 2025] [:error] [pid 34865:tid 34871] [client 4.217.252.121:1823] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aU6r76i4zjVVKBdvuTQWeQAAAUQ"]
[Fri Dec 26 23:38:23.625968 2025] [:error] [pid 15063:tid 15084] [client 4.217.252.121:1796] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aU6r7-Dsf_aL46Jy7z87ngAAARM"]
[Fri Dec 26 23:38:24.009414 2025] [:error] [pid 7160:tid 7179] [client 4.217.252.121:17080] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aU6r8Ow_ihNZR5L8vEW4IwAAAZA"]
[Fri Dec 26 23:38:24.580329 2025] [:error] [pid 28268:tid 28276] [client 4.217.252.121:1175] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aU6r8Hc_KuO_55-uPTTYPAAAAAE"]
[Fri Dec 26 23:38:25.076837 2025] [:error] [pid 34865:tid 34875] [client 4.217.252.121:1177] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aU6r8ai4zjVVKBdvuTQWegAAAUg"]
[Fri Dec 26 23:38:25.687476 2025] [:error] [pid 34865:tid 34878] [client 4.217.252.121:1184] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aU6r8ai4zjVVKBdvuTQWfAAAAUs"]
[Fri Dec 26 23:38:26.493337 2025] [:error] [pid 7160:tid 7164] [client 4.217.252.121:1979] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aU6r8uw_ihNZR5L8vEW4JwAAAYE"]
[Fri Dec 26 23:38:26.920961 2025] [:error] [pid 7160:tid 7181] [client 4.217.252.121:1207] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aU6r8uw_ihNZR5L8vEW4KQAAAZI"]
[Fri Dec 26 23:38:27.392415 2025] [:error] [pid 34865:tid 34888] [client 4.217.252.121:1928] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aU6r86i4zjVVKBdvuTQWgAAAAVU"]
[Fri Dec 26 23:38:27.844024 2025] [:error] [pid 34865:tid 34879] [client 4.217.252.121:1826] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aU6r86i4zjVVKBdvuTQWgQAAAUw"]
[Fri Dec 26 23:38:28.289068 2025] [:error] [pid 28270:tid 28335] [client 4.217.252.121:1811] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aU6r9F9Ac79_ckdPN5J-3AAAAIY"]
[Fri Dec 26 23:38:28.810688 2025] [:error] [pid 34865:tid 34890] [client 4.217.252.121:1593] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aU6r9Ki4zjVVKBdvuTQWgwAAAVc"]
[Fri Dec 26 23:38:29.640356 2025] [:error] [pid 34865:tid 34873] [client 4.217.252.121:1566] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aU6r9ai4zjVVKBdvuTQWhQAAAUY"]
[Fri Dec 26 23:38:30.292969 2025] [:error] [pid 34865:tid 34874] [client 4.217.252.121:17058] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU6r9qi4zjVVKBdvuTQWiAAAAUc"]
[Fri Dec 26 23:38:30.742038 2025] [:error] [pid 7160:tid 7172] [client 4.217.252.121:1851] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU6r9uw_ihNZR5L8vEW4LAAAAYk"]
[Fri Dec 26 23:38:31.078051 2025] [:error] [pid 7160:tid 7174] [client 4.217.252.121:1575] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU6r9-w_ihNZR5L8vEW4LQAAAYs"]
[Fri Dec 26 23:38:31.410866 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:1166] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU6r9-w_ihNZR5L8vEW4LwAAAY0"]
[Fri Dec 26 23:38:31.849460 2025] [:error] [pid 15063:tid 15080] [client 4.217.252.121:1160] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU6r9-Dsf_aL46Jy7z87pgAAAQ8"]
[Fri Dec 26 23:38:32.502953 2025] [:error] [pid 7160:tid 7173] [client 4.217.252.121:17048] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU6r-Ow_ihNZR5L8vEW4MAAAAYo"]
[Fri Dec 26 23:38:33.878055 2025] [:error] [pid 7160:tid 7168] [client 4.217.252.121:1539] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU6r-ew_ihNZR5L8vEW4MwAAAYU"]
[Fri Dec 26 23:38:35.312299 2025] [:error] [pid 28355:tid 28375] [client 4.217.252.121:17026] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU6r-7sFqKXf7ADZcTY_PAAAANI"]
[Fri Dec 26 23:38:36.273765 2025] [:error] [pid 28268:tid 28299] [client 4.217.252.121:1950] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU6r_Hc_KuO_55-uPTTYRAAAABg"]
[Fri Dec 26 23:38:36.847823 2025] [:error] [pid 28268:tid 28292] [client 4.217.252.121:1161] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU6r_Hc_KuO_55-uPTTYRQAAABE"]
[Fri Dec 26 23:38:37.495597 2025] [:error] [pid 28269:tid 28314] [client 4.217.252.121:1830] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU6r_Z3ZK8bJ-c9-kjOxuQAAAEw"]
[Fri Dec 26 23:38:37.990395 2025] [:error] [pid 15063:tid 15081] [client 4.217.252.121:1116] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU6r_eDsf_aL46Jy7z87qgAAARA"]
[Fri Dec 26 23:38:38.548723 2025] [:error] [pid 34865:tid 34869] [client 4.217.252.121:1545] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU6r_qi4zjVVKBdvuTQWkQAAAUI"]
[Fri Dec 26 23:38:38.968522 2025] [:error] [pid 34865:tid 34872] [client 4.217.252.121:17028] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU6r_qi4zjVVKBdvuTQWkgAAAUU"]
[Fri Dec 26 23:38:39.340110 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:17053] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU6r_-w_ihNZR5L8vEW4QQAAAY0"]
[Fri Dec 26 23:38:39.980770 2025] [:error] [pid 7160:tid 7184] [client 4.217.252.121:17046] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU6r_-w_ihNZR5L8vEW4QwAAAZU"]
[Fri Dec 26 23:38:40.320246 2025] [:error] [pid 34865:tid 34871] [client 4.217.252.121:1544] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aU6sAKi4zjVVKBdvuTQWmAAAAUQ"]
[Fri Dec 26 23:38:41.057445 2025] [:error] [pid 28269:tid 28303] [client 4.217.252.121:1823] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aU6sAZ3ZK8bJ-c9-kjOxwAAAAEE"]
[Fri Dec 26 23:38:41.809196 2025] [:error] [pid 15063:tid 15076] [client 4.217.252.121:1853] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aU6sAeDsf_aL46Jy7z87qwAAAQs"]
[Fri Dec 26 23:38:42.714667 2025] [:error] [pid 28269:tid 28323] [client 4.217.252.121:1182] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aU6sAp3ZK8bJ-c9-kjOxxQAAAFU"]
[Fri Dec 26 23:38:43.438888 2025] [:error] [pid 28269:tid 28315] [client 4.217.252.121:1818] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aU6sA53ZK8bJ-c9-kjOxxwAAAE0"]
[Fri Dec 26 23:38:44.013968 2025] [:error] [pid 7160:tid 7170] [client 4.217.252.121:1576] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aU6sBOw_ihNZR5L8vEW4SQAAAYc"]
[Fri Dec 26 23:38:44.617309 2025] [:error] [pid 28268:tid 28286] [client 4.217.252.121:1809] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aU6sBHc_KuO_55-uPTTYSQAAAAs"]
[Fri Dec 26 23:38:45.312166 2025] [:error] [pid 7160:tid 7166] [client 4.217.252.121:1579] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aU6sBew_ihNZR5L8vEW4SwAAAYM"]
[Fri Dec 26 23:38:46.071160 2025] [:error] [pid 34865:tid 34871] [client 4.217.252.121:1169] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aU6sBqi4zjVVKBdvuTQWogAAAUQ"]
[Fri Dec 26 23:38:46.561564 2025] [:error] [pid 7160:tid 7175] [client 4.217.252.121:1542] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aU6sBuw_ihNZR5L8vEW4TAAAAYw"]
[Fri Dec 26 23:38:47.129699 2025] [:error] [pid 34865:tid 34885] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Fri Dec 26 23:38:47.267831 2025] [:error] [pid 34865:tid 34882] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Fri Dec 26 23:38:47.429490 2025] [:error] [pid 34865:tid 34890] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Dec 26 23:38:47.567755 2025] [:error] [pid 34865:tid 34886] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Dec 26 23:38:47.730100 2025] [:error] [pid 34865:tid 34867] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Fri Dec 26 23:38:47.874133 2025] [:error] [pid 34865:tid 34869] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Dec 26 23:38:48.152111 2025] [:error] [pid 34865:tid 34873] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Fri Dec 26 23:38:48.300623 2025] [:error] [pid 34865:tid 34883] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Fri Dec 26 23:38:48.438652 2025] [:error] [pid 34865:tid 34889] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Dec 26 23:38:48.576204 2025] [:error] [pid 34865:tid 34876] [client 4.217.252.121:1137] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Fri Dec 26 23:38:48.713710 2025] [:error] [pid 34865:tid 34877] [client 4.217.252.121:1137] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU6sCKi4zjVVKBdvuTQWsgAAAUo"]
[Fri Dec 26 23:38:49.375336 2025] [:error] [pid 28269:tid 28321] [client 4.217.252.121:1211] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU6sCZ3ZK8bJ-c9-kjOxygAAAFM"]
[Fri Dec 26 23:38:49.812101 2025] [:error] [pid 7160:tid 7172] [client 4.217.252.121:1145] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU6sCew_ihNZR5L8vEW4TgAAAYk"]
[Fri Dec 26 23:38:50.448289 2025] [:error] [pid 7160:tid 7176] [client 4.217.252.121:1936] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU6sCuw_ihNZR5L8vEW4UQAAAY0"]
[Fri Dec 26 23:38:50.846332 2025] [:error] [pid 28269:tid 28317] [client 4.217.252.121:1205] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU6sCp3ZK8bJ-c9-kjOxzQAAAE8"]
[Fri Dec 26 23:38:51.211214 2025] [:error] [pid 28269:tid 28326] [client 4.217.252.121:1945] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU6sC53ZK8bJ-c9-kjOxzgAAAFg"]
[Fri Dec 26 23:38:51.734194 2025] [:error] [pid 28355:tid 28364] [client 4.217.252.121:1548] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU6sC7sFqKXf7ADZcTY_QAAAAMc"]
[Fri Dec 26 23:38:52.145135 2025] [:error] [pid 28355:tid 28376] [client 4.217.252.121:1299] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU6sDLsFqKXf7ADZcTY_QQAAANM"]
[Fri Dec 26 23:38:52.484651 2025] [:error] [pid 28269:tid 28303] [client 4.217.252.121:1124] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aU6sDJ3ZK8bJ-c9-kjOxzwAAAEE"]
[Fri Dec 26 23:38:52.916689 2025] [:error] [pid 7160:tid 7177] [client 4.217.252.121:1847] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aU6sDOw_ihNZR5L8vEW4VQAAAY4"]
[Fri Dec 26 23:38:53.422750 2025] [:error] [pid 28269:tid 28312] [client 4.217.252.121:1172] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aU6sDZ3ZK8bJ-c9-kjOx0gAAAEo"]
[Fri Dec 26 23:38:53.809344 2025] [:error] [pid 28355:tid 28371] [client 4.217.252.121:1126] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aU6sDbsFqKXf7ADZcTY_RQAAAM4"]
[Fri Dec 26 23:38:54.433153 2025] [:error] [pid 34865:tid 34870] [client 4.217.252.121:1188] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aU6sDqi4zjVVKBdvuTQWtQAAAUM"]
[Fri Dec 26 23:38:54.762884 2025] [:error] [pid 7160:tid 7180] [client 4.217.252.121:1572] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aU6sDuw_ihNZR5L8vEW4WgAAAZE"]
[Fri Dec 26 23:38:55.231244 2025] [:error] [pid 7160:tid 7166] [client 4.217.252.121:1854] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aU6sD-w_ihNZR5L8vEW4WwAAAYM"]
[Fri Dec 26 23:38:55.854779 2025] [:error] [pid 7160:tid 7174] [client 4.217.252.121:1159] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aU6sD-w_ihNZR5L8vEW4XAAAAYs"]
[Fri Dec 26 23:38:56.406157 2025] [:error] [pid 28355:tid 28366] [client 4.217.252.121:17040] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU6sELsFqKXf7ADZcTY_SgAAAMk"]
[Fri Dec 26 23:38:57.018896 2025] [:error] [pid 28355:tid 28374] [client 4.217.252.121:17078] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU6sEbsFqKXf7ADZcTY_UAAAANE"]
[Fri Dec 26 23:38:57.398491 2025] [:error] [pid 7160:tid 7171] [client 4.217.252.121:1112] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU6sEew_ihNZR5L8vEW4YwAAAYg"]
[Fri Dec 26 23:38:58.011401 2025] [:error] [pid 34865:tid 34890] [client 4.217.252.121:1103] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU6sEqi4zjVVKBdvuTQWugAAAVc"]
[Fri Dec 26 23:38:58.459275 2025] [:error] [pid 34865:tid 34867] [client 4.217.252.121:1104] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aU6sEqi4zjVVKBdvuTQWvQAAAUA"]
[Fri Dec 26 23:38:58.971007 2025] [:error] [pid 34865:tid 34873] [client 4.217.252.121:1976] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aU6sEqi4zjVVKBdvuTQWvgAAAUY"]
[Fri Dec 26 23:38:59.362748 2025] [:error] [pid 34865:tid 34889] [client 4.217.252.121:1596] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aU6sE6i4zjVVKBdvuTQWvwAAAVY"]
[Fri Dec 26 23:38:59.794170 2025] [:error] [pid 7160:tid 7169] [client 4.217.252.121:1331] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aU6sE-w_ihNZR5L8vEW4ZAAAAYY"]
[Fri Dec 26 23:39:00.761294 2025] [:error] [pid 28269:tid 28323] [client 4.217.252.121:1541] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU6sFJ3ZK8bJ-c9-kjOx1gAAAFU"]
[Fri Dec 26 23:39:01.395716 2025] [:error] [pid 7160:tid 7164] [client 4.217.252.121:1099] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU6sFew_ihNZR5L8vEW4aQAAAYE"]
[Fri Dec 26 23:39:01.738688 2025] [:error] [pid 28269:tid 28315] [client 4.217.252.121:17047] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU6sFZ3ZK8bJ-c9-kjOx1wAAAE0"]
[Fri Dec 26 23:39:02.602657 2025] [:error] [pid 28268:tid 28285] [client 4.217.252.121:1814] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aU6sFnc_KuO_55-uPTTYUwAAAAo"]
[Fri Dec 26 23:39:03.237033 2025] [:error] [pid 28269:tid 28321] [client 4.217.252.121:1201] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aU6sF53ZK8bJ-c9-kjOx2wAAAFM"]
[Fri Dec 26 23:39:03.686612 2025] [:error] [pid 7160:tid 7185] [client 4.217.252.121:1202] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aU6sF-w_ihNZR5L8vEW4cgAAAZY"]
[Fri Dec 26 23:39:04.097605 2025] [:error] [pid 28270:tid 28336] [client 4.217.252.121:1329] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aU6sGF9Ac79_ckdPN5J-4wAAAIc"]
[Fri Dec 26 23:39:04.425088 2025] [:error] [pid 28269:tid 28320] [client 4.217.252.121:1178] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aU6sGJ3ZK8bJ-c9-kjOx3QAAAFI"]
[Fri Dec 26 23:39:04.836178 2025] [:error] [pid 28269:tid 28319] [client 4.217.252.121:1089] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aU6sGJ3ZK8bJ-c9-kjOx3gAAAFE"]
[Fri Dec 26 23:39:05.607519 2025] [:error] [pid 28268:tid 28278] [client 4.217.252.121:1197] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aU6sGXc_KuO_55-uPTTYWAAAAAM"]
[Fri Dec 26 23:39:06.281736 2025] [:error] [pid 28269:tid 28325] [client 4.217.252.121:1135] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aU6sGp3ZK8bJ-c9-kjOx3wAAAFc"]
[Fri Dec 26 23:39:06.692957 2025] [:error] [pid 28355:tid 28374] [client 4.217.252.121:1562] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aU6sGrsFqKXf7ADZcTY_WAAAANE"]
[Fri Dec 26 23:39:07.373973 2025] [:error] [pid 7160:tid 7163] [client 4.217.252.121:1570] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU6sG-w_ihNZR5L8vEW4eAAAAYA"]
[Fri Dec 26 23:39:07.801909 2025] [:error] [pid 15063:tid 15079] [client 4.217.252.121:1587] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU6sG-Dsf_aL46Jy7z87wwAAAQ4"]
[Fri Dec 26 23:39:08.253187 2025] [:error] [pid 7160:tid 7175] [client 4.217.252.121:1835] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU6sHOw_ihNZR5L8vEW4eQAAAYw"]
[Fri Dec 26 23:39:08.639191 2025] [:error] [pid 28269:tid 28306] [client 4.217.252.121:1584] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aU6sHJ3ZK8bJ-c9-kjOx4gAAAEQ"]
[Fri Dec 26 23:39:09.091545 2025] [:error] [pid 7160:tid 7171] [client 4.217.252.121:17059] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aU6sHew_ihNZR5L8vEW4fAAAAYg"]
[Fri Dec 26 23:39:09.449943 2025] [:error] [pid 28355:tid 28376] [client 4.217.252.121:1825] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aU6sHbsFqKXf7ADZcTY_XgAAANM"]
[Fri Dec 26 23:39:09.901084 2025] [:error] [pid 28270:tid 28347] [client 4.217.252.121:1599] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aU6sHV9Ac79_ckdPN5J-5gAAAJI"]
[Fri Dec 26 23:39:10.421000 2025] [:error] [pid 28270:tid 28349] [client 4.217.252.121:1555] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aU6sHl9Ac79_ckdPN5J-5wAAAJQ"]
[Fri Dec 26 23:39:10.853922 2025] [:error] [pid 15063:tid 15071] [client 4.217.252.121:1598] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aU6sHuDsf_aL46Jy7z87xwAAAQY"]
[Fri Dec 26 23:39:11.274194 2025] [:error] [pid 28269:tid 28302] [client 4.217.252.121:1540] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aU6sH53ZK8bJ-c9-kjOx6wAAAEA"]
[Fri Dec 26 23:39:11.680704 2025] [:error] [pid 28268:tid 28281] [client 4.217.252.121:1107] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aU6sH3c_KuO_55-uPTTYWwAAAAY"]
[Fri Dec 26 23:39:12.131437 2025] [:error] [pid 28268:tid 28283] [client 4.217.252.121:1557] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aU6sIHc_KuO_55-uPTTYXAAAAAg"]
[Fri Dec 26 23:39:12.499587 2025] [:error] [pid 28269:tid 28320] [client 4.217.252.121:1150] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aU6sIJ3ZK8bJ-c9-kjOx7QAAAFI"]
[Fri Dec 26 23:39:12.896172 2025] [:error] [pid 7160:tid 7179] [client 4.217.252.121:1294] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aU6sIOw_ihNZR5L8vEW4gAAAAZA"]
[Fri Dec 26 23:39:13.328364 2025] [:error] [pid 28270:tid 28351] [client 4.217.252.121:1923] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aU6sIV9Ac79_ckdPN5J-6AAAAJY"]
[Fri Dec 26 23:39:13.697222 2025] [:error] [pid 28268:tid 28299] [client 4.217.252.121:1208] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aU6sIXc_KuO_55-uPTTYYQAAABg"]
[Fri Dec 26 23:39:14.241858 2025] [:error] [pid 28269:tid 28303] [client 4.217.252.121:1314] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aU6sIp3ZK8bJ-c9-kjOx7wAAAEE"]
[Fri Dec 26 23:39:14.718515 2025] [:error] [pid 34865:tid 34867] [client 4.217.252.121:1834] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aU6sIqi4zjVVKBdvuTQWxwAAAUA"]
[Fri Dec 26 23:39:15.397042 2025] [:error] [pid 7160:tid 7165] [client 4.217.252.121:1168] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aU6sI-w_ihNZR5L8vEW4gwAAAYI"]
[Fri Dec 26 23:39:15.816196 2025] [:error] [pid 15063:tid 15072] [client 4.217.252.121:1204] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aU6sI-Dsf_aL46Jy7z87ygAAAQc"]
[Fri Dec 26 23:39:16.235395 2025] [:error] [pid 7160:tid 7180] [client 4.217.252.121:1554] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aU6sJOw_ihNZR5L8vEW4iAAAAZE"]
[Fri Dec 26 23:39:16.709656 2025] [:error] [pid 34865:tid 34873] [client 4.217.252.121:1099] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aU6sJKi4zjVVKBdvuTQWyAAAAUY"]
[Fri Dec 26 23:39:17.342997 2025] [:error] [pid 34865:tid 34874] [client 4.217.252.121:1152] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aU6sJai4zjVVKBdvuTQWzAAAAUc"]
[Fri Dec 26 23:39:17.738717 2025] [:error] [pid 7160:tid 7184] [client 4.217.252.121:17031] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aU6sJew_ihNZR5L8vEW4iwAAAZU"]
[Fri Dec 26 23:39:18.233831 2025] [:error] [pid 28270:tid 28352] [client 4.217.252.121:1206] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU6sJl9Ac79_ckdPN5J-7AAAAJc"]
[Fri Dec 26 23:39:18.796233 2025] [:error] [pid 28269:tid 28308] [client 4.217.252.121:1568] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU6sJp3ZK8bJ-c9-kjOx8gAAAEY"]
[Fri Dec 26 23:39:19.393906 2025] [:error] [pid 7160:tid 7183] [client 4.217.252.121:1589] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU6sJ-w_ihNZR5L8vEW4jwAAAZQ"]
[Fri Dec 26 23:39:19.817166 2025] [:error] [pid 28269:tid 28324] [client 4.217.252.121:1305] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aU6sJ53ZK8bJ-c9-kjOx9AAAAFY"]
[Fri Dec 26 23:39:20.464782 2025] [:error] [pid 28269:tid 28307] [client 4.217.252.121:1954] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU6sKJ3ZK8bJ-c9-kjOx9QAAAEU"]
[Fri Dec 26 23:39:20.966025 2025] [:error] [pid 7160:tid 7182] [client 4.217.252.121:1097] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU6sKOw_ihNZR5L8vEW4kwAAAZM"]
[Fri Dec 26 23:39:21.466035 2025] [:error] [pid 7160:tid 7180] [client 4.217.252.121:1807] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU6sKew_ihNZR5L8vEW4lQAAAZE"]
[Fri Dec 26 23:39:21.860979 2025] [:error] [pid 28355:tid 28376] [client 4.217.252.121:1131] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aU6sKbsFqKXf7ADZcTY_ZwAAANM"]
[Fri Dec 26 23:39:22.409972 2025] [:error] [pid 28269:tid 28302] [client 4.217.252.121:17045] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aU6sKp3ZK8bJ-c9-kjOx-AAAAEA"]
[Fri Dec 26 23:39:23.028475 2025] [:error] [pid 28355:tid 28378] [client 4.217.252.121:1194] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aU6sK7sFqKXf7ADZcTY_aAAAANU"]
[Fri Dec 26 23:39:23.713949 2025] [:error] [pid 28270:tid 28342] [client 4.217.252.121:1951] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aU6sK19Ac79_ckdPN5J-8QAAAI0"]
[Fri Dec 26 23:39:24.848158 2025] [:error] [pid 28268:tid 28295] [client 4.217.252.121:1187] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aU6sLHc_KuO_55-uPTTYYwAAABQ"]
[Fri Dec 26 23:39:25.470590 2025] [:error] [pid 28355:tid 28361] [client 4.217.252.121:17068] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU6sLbsFqKXf7ADZcTY_aQAAAMQ"]
[Fri Dec 26 23:39:26.005032 2025] [:error] [pid 15063:tid 15089] [client 4.217.252.121:1852] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU6sLuDsf_aL46Jy7z87zgAAARg"]
[Fri Dec 26 23:39:26.425258 2025] [:error] [pid 15063:tid 15082] [client 4.217.252.121:1286] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU6sLuDsf_aL46Jy7z870AAAARE"]
[Fri Dec 26 23:39:27.016947 2025] [:error] [pid 28355:tid 28371] [client 4.217.252.121:1288] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aU6sL7sFqKXf7ADZcTY_bAAAAM4"]
[Fri Dec 26 23:39:27.576591 2025] [:error] [pid 28355:tid 28380] [client 4.217.252.121:1801] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU6sL7sFqKXf7ADZcTY_bgAAANc"]
[Fri Dec 26 23:39:27.952643 2025] [:error] [pid 15063:tid 15083] [client 4.217.252.121:1132] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU6sL-Dsf_aL46Jy7z870gAAARI"]
[Fri Dec 26 23:39:28.376495 2025] [:error] [pid 28268:tid 28276] [client 4.217.252.121:1164] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU6sMHc_KuO_55-uPTTYZQAAAAE"]
[Fri Dec 26 23:39:28.834512 2025] [:error] [pid 28355:tid 28381] [client 4.217.252.121:1285] [client 4.217.252.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aU6sMLsFqKXf7ADZcTY_bwAAANg"]
[Sat Dec 27 09:08:01.197185 2025] [:error] [pid 45373:tid 45375] [client 43.157.82.252:49700] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aU8xcS7p_wFcbpu46HX21gAAAUA"]
[Sat Dec 27 19:45:44.889946 2025] [:error] [pid 45373:tid 45377] [client 143.198.210.125:49820] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aU_G6C7p_wFcbpu46HV0egAAAUI"]
[Sat Dec 27 23:02:59.681137 2025] [:error] [pid 3114:tid 3137] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/mda.php
[Sat Dec 27 23:02:59.797792 2025] [:error] [pid 3114:tid 3126] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/cheka.php
[Sat Dec 27 23:02:59.914993 2025] [:error] [pid 3114:tid 3133] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Sat Dec 27 23:03:00.031068 2025] [:error] [pid 3114:tid 3131] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/classgoto24.php
[Sat Dec 27 23:03:00.148637 2025] [:error] [pid 3114:tid 3132] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/zsz.php
[Sat Dec 27 23:03:00.265651 2025] [:error] [pid 3114:tid 3136] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Sat Dec 27 23:03:00.382736 2025] [:error] [pid 3114:tid 3122] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Sat Dec 27 23:03:00.498966 2025] [:error] [pid 3114:tid 3134] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/bby.php
[Sat Dec 27 23:03:00.616315 2025] [:error] [pid 3114:tid 3119] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/get.php
[Sat Dec 27 23:03:00.739889 2025] [:error] [pid 3114:tid 3128] [client 4.241.200.78:10777] File does not exist: /usr/local/apache/htdocs/suspended-page/xtride.php
[Sat Dec 27 23:03:00.858469 2025] [:error] [pid 3114:tid 3138] [client 4.241.200.78:10777] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws29.php"] [unique_id "aU_1JGJGrIkLOdbPpJjDHAAAAZQ"]
[Sat Dec 27 23:03:01.084513 2025] [:error] [pid 32191:tid 32210] [client 4.241.200.78:10858] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws29.php"] [unique_id "aU_1JbPNtMgrjVCHIdFMaQAAAA8"]
[Sat Dec 27 23:03:01.313748 2025] [:error] [pid 32192:tid 32236] [client 4.241.200.78:10767] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws29.php"] [unique_id "aU_1JS_q0VFe066lbk9wvAAAAE0"]
[Sat Dec 27 23:03:01.540670 2025] [:error] [pid 15939:tid 15948] [client 4.241.200.78:10846] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws29.php"] [unique_id "aU_1JeZ7qdnFxikanML84AAAAQc"]
[Sat Dec 27 23:03:01.767314 2025] [:error] [pid 32278:tid 32290] [client 4.241.200.78:10865] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aU_1JX-IfCN2Cy9GcchHlQAAAMo"]
[Sat Dec 27 23:03:01.994269 2025] [:error] [pid 45373:tid 45386] [client 4.241.200.78:10855] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aU_1JS7p_wFcbpu46HWc7gAAAUs"]
[Sat Dec 27 23:03:02.222405 2025] [:error] [pid 32193:tid 32260] [client 4.241.200.78:10845] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aU_1Jhgw0eCOc2qYqaLFnwAAAIo"]
[Sat Dec 27 23:03:02.463276 2025] [:error] [pid 32278:tid 32296] [client 4.241.200.78:10822] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aU_1Jn-IfCN2Cy9GcchHlwAAANA"]
[Sat Dec 27 23:03:02.689282 2025] [:error] [pid 45373:tid 45396] [client 4.241.200.78:10770] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s11.php"] [unique_id "aU_1Ji7p_wFcbpu46HWc8AAAAVU"]
[Sat Dec 27 23:03:02.916670 2025] [:error] [pid 32193:tid 32255] [client 4.241.200.78:10869] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s11.php"] [unique_id "aU_1Jhgw0eCOc2qYqaLFoAAAAIU"]
[Sat Dec 27 23:03:03.149794 2025] [:error] [pid 45373:tid 45381] [client 4.241.200.78:10850] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s11.php"] [unique_id "aU_1Jy7p_wFcbpu46HWc8QAAAUY"]
[Sat Dec 27 23:03:03.377652 2025] [:error] [pid 45373:tid 45388] [client 4.241.200.78:10797] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s11.php"] [unique_id "aU_1Jy7p_wFcbpu46HWc8wAAAU0"]
[Sat Dec 27 23:03:03.603456 2025] [:error] [pid 45373:tid 45384] [client 4.241.200.78:10766] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dir.php"] [unique_id "aU_1Jy7p_wFcbpu46HWc9AAAAUk"]
[Sat Dec 27 23:03:03.832123 2025] [:error] [pid 32278:tid 32301] [client 4.241.200.78:10841] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dir.php"] [unique_id "aU_1J3-IfCN2Cy9GcchHmQAAANU"]
[Sat Dec 27 23:03:04.058617 2025] [:error] [pid 32278:tid 32302] [client 4.241.200.78:10856] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dir.php"] [unique_id "aU_1KH-IfCN2Cy9GcchHmwAAANY"]
[Sat Dec 27 23:03:04.284963 2025] [:error] [pid 45373:tid 45399] [client 4.241.200.78:10758] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dir.php"] [unique_id "aU_1KC7p_wFcbpu46HWc9gAAAVg"]
[Sat Dec 27 23:03:04.514938 2025] [:error] [pid 45373:tid 45389] [client 4.241.200.78:10809] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqw.php"] [unique_id "aU_1KC7p_wFcbpu46HWc9wAAAU4"]
[Sat Dec 27 23:03:04.763792 2025] [:error] [pid 32192:tid 32231] [client 4.241.200.78:10778] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqw.php"] [unique_id "aU_1KC_q0VFe066lbk9wvQAAAEg"]
[Sat Dec 27 23:03:04.991336 2025] [:error] [pid 32192:tid 32243] [client 4.241.200.78:10874] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqw.php"] [unique_id "aU_1KC_q0VFe066lbk9wvgAAAFQ"]
[Sat Dec 27 23:03:05.218229 2025] [:error] [pid 32192:tid 32237] [client 4.241.200.78:10868] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqw.php"] [unique_id "aU_1KS_q0VFe066lbk9wvwAAAE4"]
[Sat Dec 27 23:03:05.446001 2025] [:error] [pid 32193:tid 32272] [client 4.241.200.78:10813] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca1.php"] [unique_id "aU_1KRgw0eCOc2qYqaLFoQAAAJY"]
[Sat Dec 27 23:03:05.673915 2025] [:error] [pid 15939:tid 15953] [client 4.241.200.78:10757] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca1.php"] [unique_id "aU_1KeZ7qdnFxikanML85AAAAQw"]
[Sat Dec 27 23:03:05.905344 2025] [:error] [pid 32193:tid 32271] [client 4.241.200.78:10837] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca1.php"] [unique_id "aU_1KRgw0eCOc2qYqaLFogAAAJU"]
[Sat Dec 27 23:03:06.131846 2025] [:error] [pid 45373:tid 45377] [client 4.241.200.78:10862] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca1.php"] [unique_id "aU_1Ki7p_wFcbpu46HWc-wAAAUI"]
[Sat Dec 27 23:03:06.364722 2025] [:error] [pid 32191:tid 32199] [client 4.241.200.78:10824] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file51.php"] [unique_id "aU_1KrPNtMgrjVCHIdFMbwAAAAQ"]
[Sat Dec 27 23:03:06.593234 2025] [:error] [pid 45373:tid 45386] [client 4.241.200.78:10775] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file51.php"] [unique_id "aU_1Ki7p_wFcbpu46HWc_AAAAUs"]
[Sat Dec 27 23:03:06.822630 2025] [:error] [pid 45373:tid 45376] [client 4.241.200.78:10768] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file51.php"] [unique_id "aU_1Ki7p_wFcbpu46HWc_QAAAUE"]
[Sat Dec 27 23:03:07.049510 2025] [:error] [pid 45373:tid 45390] [client 4.241.200.78:10852] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file51.php"] [unique_id "aU_1Ky7p_wFcbpu46HWc_wAAAU8"]
[Sat Dec 27 23:03:07.278402 2025] [:error] [pid 45373:tid 45396] [client 4.241.200.78:10772] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouta.php"] [unique_id "aU_1Ky7p_wFcbpu46HWdAAAAAVU"]
[Sat Dec 27 23:03:07.508771 2025] [:error] [pid 15939:tid 15960] [client 4.241.200.78:10833] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouta.php"] [unique_id "aU_1K-Z7qdnFxikanML85gAAARM"]
[Sat Dec 27 23:03:07.736725 2025] [:error] [pid 15939:tid 15955] [client 4.241.200.78:10861] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouta.php"] [unique_id "aU_1K-Z7qdnFxikanML85wAAAQ4"]
[Sat Dec 27 23:03:07.962701 2025] [:error] [pid 45373:tid 45385] [client 4.241.200.78:10851] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouta.php"] [unique_id "aU_1Ky7p_wFcbpu46HWdAQAAAUo"]
[Sat Dec 27 23:03:08.192331 2025] [:error] [pid 32193:tid 32258] [client 4.241.200.78:10771] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fclas.php"] [unique_id "aU_1LBgw0eCOc2qYqaLFowAAAIg"]
[Sat Dec 27 23:03:08.422311 2025] [:error] [pid 45373:tid 45397] [client 4.241.200.78:10828] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fclas.php"] [unique_id "aU_1LC7p_wFcbpu46HWdAwAAAVY"]
[Sat Dec 27 23:03:08.651391 2025] [:error] [pid 45373:tid 45384] [client 4.241.200.78:10219] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fclas.php"] [unique_id "aU_1LC7p_wFcbpu46HWdBAAAAUk"]
[Sat Dec 27 23:03:08.879700 2025] [:error] [pid 45373:tid 45383] [client 4.241.200.78:10864] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fclas.php"] [unique_id "aU_1LC7p_wFcbpu46HWdBQAAAUg"]
[Sat Dec 27 23:03:09.106358 2025] [:error] [pid 45373:tid 45379] [client 4.241.200.78:10840] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/File.php"] [unique_id "aU_1LS7p_wFcbpu46HWdBgAAAUQ"]
[Sat Dec 27 23:03:09.333302 2025] [:error] [pid 45373:tid 45389] [client 4.241.200.78:10808] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/File.php"] [unique_id "aU_1LS7p_wFcbpu46HWdBwAAAU4"]
[Sat Dec 27 23:03:09.559517 2025] [:error] [pid 45373:tid 45393] [client 4.241.200.78:10879] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/File.php"] [unique_id "aU_1LS7p_wFcbpu46HWdCAAAAVI"]
[Sat Dec 27 23:03:09.788165 2025] [:error] [pid 32278:tid 32295] [client 4.241.200.78:10774] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/File.php"] [unique_id "aU_1LX-IfCN2Cy9GcchHnwAAAM8"]
[Sat Dec 27 23:03:10.014356 2025] [:error] [pid 45373:tid 45391] [client 4.241.200.78:10769] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/all.php"] [unique_id "aU_1Li7p_wFcbpu46HWdCQAAAVA"]
[Sat Dec 27 23:03:10.254443 2025] [:error] [pid 45373:tid 45377] [client 4.241.200.78:10857] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/all.php"] [unique_id "aU_1Li7p_wFcbpu46HWdCgAAAUI"]
[Sat Dec 27 23:03:10.481022 2025] [:error] [pid 32191:tid 32198] [client 4.241.200.78:10835] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/all.php"] [unique_id "aU_1LrPNtMgrjVCHIdFMcAAAAAM"]
[Sat Dec 27 23:03:10.707964 2025] [:error] [pid 32192:tid 32241] [client 4.241.200.78:10843] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/all.php"] [unique_id "aU_1Li_q0VFe066lbk9wxQAAAFI"]
[Sat Dec 27 23:03:10.941715 2025] [:error] [pid 32278:tid 32280] [client 4.241.200.78:10838] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU_1Ln-IfCN2Cy9GcchHoQAAAMA"]
[Sat Dec 27 23:03:11.167706 2025] [:error] [pid 15939:tid 15941] [client 4.241.200.78:10753] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU_1L-Z7qdnFxikanML87AAAAQA"]
[Sat Dec 27 23:03:11.393852 2025] [:error] [pid 32278:tid 32286] [client 4.241.200.78:10210] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU_1L3-IfCN2Cy9GcchHogAAAMY"]
[Sat Dec 27 23:03:11.620496 2025] [:error] [pid 32192:tid 32228] [client 4.241.200.78:10863] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbn.php"] [unique_id "aU_1Ly_q0VFe066lbk9wxwAAAEU"]
[Sat Dec 27 23:03:11.848111 2025] [:error] [pid 32278:tid 32289] [client 4.241.200.78:10839] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aU_1L3-IfCN2Cy9GcchHowAAAMk"]
[Sat Dec 27 23:03:12.074624 2025] [:error] [pid 45373:tid 45378] [client 4.241.200.78:10801] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aU_1MC7p_wFcbpu46HWdDAAAAUM"]
[Sat Dec 27 23:03:12.301054 2025] [:error] [pid 15939:tid 15964] [client 4.241.200.78:10211] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aU_1MOZ7qdnFxikanML87wAAARc"]
[Sat Dec 27 23:03:12.534765 2025] [:error] [pid 45373:tid 45387] [client 4.241.200.78:10188] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aU_1MC7p_wFcbpu46HWdDQAAAUw"]
[Sat Dec 27 23:03:12.761430 2025] [:error] [pid 31933:tid 31949] [client 4.241.200.78:10812] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU_1MMGr1WIJr39uqaoSSQAAAc4"]
[Sat Dec 27 23:03:12.988534 2025] [:error] [pid 32278:tid 32296] [client 4.241.200.78:10819] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU_1MH-IfCN2Cy9GcchHpQAAANA"]
[Sat Dec 27 23:03:13.230509 2025] [:error] [pid 32278:tid 32287] [client 4.241.200.78:10829] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU_1MX-IfCN2Cy9GcchHpgAAAMc"]
[Sat Dec 27 23:03:13.493404 2025] [:error] [pid 31933:tid 31958] [client 4.241.200.78:10192] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aU_1McGr1WIJr39uqaoSSgAAAdc"]
[Sat Dec 27 23:03:13.720467 2025] [:error] [pid 31933:tid 31947] [client 4.241.200.78:10781] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU_1McGr1WIJr39uqaoSSwAAAcw"]
[Sat Dec 27 23:03:13.951597 2025] [:error] [pid 31933:tid 31946] [client 4.241.200.78:10872] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU_1McGr1WIJr39uqaoSTAAAAcs"]
[Sat Dec 27 23:03:14.179835 2025] [:error] [pid 45373:tid 45390] [client 4.241.200.78:10811] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU_1Mi7p_wFcbpu46HWdDwAAAU8"]
[Sat Dec 27 23:03:14.461090 2025] [:error] [pid 45373:tid 45380] [client 4.241.200.78:10755] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xz89.php"] [unique_id "aU_1Mi7p_wFcbpu46HWdEAAAAUU"]
[Sat Dec 27 23:03:14.700095 2025] [:error] [pid 31933:tid 31954] [client 4.241.200.78:10866] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aU_1MsGr1WIJr39uqaoSTQAAAdM"]
[Sat Dec 27 23:03:14.926180 2025] [:error] [pid 31933:tid 31957] [client 4.241.200.78:10227] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aU_1MsGr1WIJr39uqaoSTgAAAdY"]
[Sat Dec 27 23:03:15.153393 2025] [:error] [pid 31933:tid 31955] [client 4.241.200.78:10876] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aU_1M8Gr1WIJr39uqaoSTwAAAdQ"]
[Sat Dec 27 23:03:15.380082 2025] [:error] [pid 32278:tid 32294] [client 4.241.200.78:10763] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thai.php"] [unique_id "aU_1M3-IfCN2Cy9GcchHqgAAAM4"]
[Sat Dec 27 23:03:15.607181 2025] [:error] [pid 32278:tid 32291] [client 4.241.200.78:10213] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aU_1M3-IfCN2Cy9GcchHqwAAAMs"]
[Sat Dec 27 23:03:15.833915 2025] [:error] [pid 32278:tid 32292] [client 4.241.200.78:10854] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aU_1M3-IfCN2Cy9GcchHrQAAAMw"]
[Sat Dec 27 23:03:16.069169 2025] [:error] [pid 31933:tid 31952] [client 4.241.200.78:10780] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aU_1NMGr1WIJr39uqaoSUAAAAdE"]
[Sat Dec 27 23:03:16.295225 2025] [:error] [pid 15939:tid 15957] [client 4.241.200.78:10760] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aU_1NOZ7qdnFxikanML88AAAARA"]
[Sat Dec 27 23:03:16.521711 2025] [:error] [pid 31933:tid 31948] [client 4.241.200.78:10848] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU_1NMGr1WIJr39uqaoSUQAAAc0"]
[Sat Dec 27 23:03:16.753937 2025] [:error] [pid 31933:tid 31945] [client 4.241.200.78:10198] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU_1NMGr1WIJr39uqaoSUgAAAco"]
[Sat Dec 27 23:03:16.987537 2025] [:error] [pid 31933:tid 31959] [client 4.241.200.78:10789] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU_1NMGr1WIJr39uqaoSUwAAAdg"]
[Sat Dec 27 23:03:17.215100 2025] [:error] [pid 32278:tid 32295] [client 4.241.200.78:10761] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "aU_1NX-IfCN2Cy9GcchHrgAAAM8"]
[Sat Dec 27 23:03:17.441730 2025] [:error] [pid 45373:tid 45375] [client 4.241.200.78:10877] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU_1NS7p_wFcbpu46HWdFAAAAUA"]
[Sat Dec 27 23:03:17.687192 2025] [:error] [pid 45373:tid 45384] [client 4.241.200.78:10226] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU_1NS7p_wFcbpu46HWdFQAAAUk"]
[Sat Dec 27 23:03:17.918903 2025] [:error] [pid 31933:tid 31956] [client 4.241.200.78:10844] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU_1NcGr1WIJr39uqaoSVgAAAdU"]
[Sat Dec 27 23:03:18.152565 2025] [:error] [pid 45373:tid 45383] [client 4.241.200.78:10870] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aU_1Ni7p_wFcbpu46HWdFgAAAUg"]
[Sat Dec 27 23:03:18.382888 2025] [:error] [pid 45373:tid 45379] [client 4.241.200.78:10216] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU_1Ni7p_wFcbpu46HWdFwAAAUQ"]
[Sat Dec 27 23:03:18.612153 2025] [:error] [pid 31933:tid 31944] [client 4.241.200.78:10837] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU_1NsGr1WIJr39uqaoSWAAAAck"]
[Sat Dec 27 23:03:18.839973 2025] [:error] [pid 45373:tid 45389] [client 4.241.200.78:10796] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU_1Ni7p_wFcbpu46HWdGAAAAU4"]
[Sat Dec 27 23:03:19.066172 2025] [:error] [pid 31933:tid 31936] [client 4.241.200.78:10224] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aU_1N8Gr1WIJr39uqaoSWgAAAcE"]
[Sat Dec 27 23:03:19.293899 2025] [:error] [pid 45373:tid 45391] [client 4.241.200.78:10798] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "aU_1Ny7p_wFcbpu46HWdGgAAAVA"]
[Sat Dec 27 23:03:19.520147 2025] [:error] [pid 32278:tid 32289] [client 4.241.200.78:10878] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "aU_1N3-IfCN2Cy9GcchHsgAAAMk"]
[Sat Dec 27 23:03:19.795321 2025] [:error] [pid 45373:tid 45392] [client 4.241.200.78:10214] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "aU_1Ny7p_wFcbpu46HWdHAAAAVE"]
[Sat Dec 27 23:03:20.023024 2025] [:error] [pid 32193:tid 32251] [client 4.241.200.78:10818] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "aU_1OBgw0eCOc2qYqaLFqQAAAIE"]
[Sat Dec 27 23:03:20.248993 2025] [:error] [pid 32278:tid 32296] [client 4.241.200.78:10859] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU_1OH-IfCN2Cy9GcchHtAAAANA"]
[Sat Dec 27 23:03:20.481134 2025] [:error] [pid 32278:tid 32287] [client 4.241.200.78:10860] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU_1OH-IfCN2Cy9GcchHtQAAAMc"]
[Sat Dec 27 23:03:20.707382 2025] [:error] [pid 32193:tid 32254] [client 4.241.200.78:10826] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU_1OBgw0eCOc2qYqaLFqgAAAIQ"]
[Sat Dec 27 23:03:20.935624 2025] [:error] [pid 45373:tid 45394] [client 4.241.200.78:10762] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aU_1OC7p_wFcbpu46HWdHQAAAVM"]
[Sat Dec 27 23:03:21.164831 2025] [:error] [pid 32278:tid 32281] [client 4.241.200.78:10212] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU_1OX-IfCN2Cy9GcchHtwAAAME"]
[Sat Dec 27 23:03:21.397906 2025] [:error] [pid 32193:tid 32252] [client 4.241.200.78:10788] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU_1ORgw0eCOc2qYqaLFqwAAAII"]
[Sat Dec 27 23:03:21.633231 2025] [:error] [pid 32192:tid 32229] [client 4.241.200.78:10234] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU_1OS_q0VFe066lbk9wzAAAAEY"]
[Sat Dec 27 23:03:21.863227 2025] [:error] [pid 45373:tid 45386] [client 4.241.200.78:10849] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aU_1OS7p_wFcbpu46HWdIAAAAUs"]
[Sat Dec 27 23:03:22.095146 2025] [:error] [pid 45373:tid 45376] [client 4.241.200.78:10814] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU_1Oi7p_wFcbpu46HWdIgAAAUE"]
[Sat Dec 27 23:03:22.326804 2025] [:error] [pid 45373:tid 45380] [client 4.241.200.78:10820] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU_1Oi7p_wFcbpu46HWdIwAAAUU"]
[Sat Dec 27 23:03:22.558624 2025] [:error] [pid 32193:tid 32270] [client 4.241.200.78:10784] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU_1Ohgw0eCOc2qYqaLFrAAAAJQ"]
[Sat Dec 27 23:03:22.785132 2025] [:error] [pid 32193:tid 32273] [client 4.241.200.78:10193] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aU_1Ohgw0eCOc2qYqaLFrQAAAJc"]
[Sat Dec 27 23:03:23.011685 2025] [:error] [pid 32278:tid 32290] [client 4.241.200.78:10783] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU_1O3-IfCN2Cy9GcchHugAAAMo"]
[Sat Dec 27 23:03:23.244019 2025] [:error] [pid 15939:tid 15953] [client 4.241.200.78:10803] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU_1O-Z7qdnFxikanML88gAAAQw"]
[Sat Dec 27 23:03:23.472701 2025] [:error] [pid 32192:tid 32224] [client 4.241.200.78:10776] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU_1Oy_q0VFe066lbk9wzQAAAEE"]
[Sat Dec 27 23:03:23.699618 2025] [:error] [pid 32193:tid 32272] [client 4.241.200.78:10217] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aU_1Oxgw0eCOc2qYqaLFsQAAAJY"]
[Sat Dec 27 23:03:23.927374 2025] [:error] [pid 32278:tid 32284] [client 4.241.200.78:10200] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU_1O3-IfCN2Cy9GcchHvAAAAMQ"]
[Sat Dec 27 23:03:24.157676 2025] [:error] [pid 15939:tid 15963] [client 4.241.200.78:10178] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU_1POZ7qdnFxikanML89QAAARY"]
[Sat Dec 27 23:03:24.388924 2025] [:error] [pid 32192:tid 32232] [client 4.241.200.78:10227] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU_1PC_q0VFe066lbk9wzgAAAEk"]
[Sat Dec 27 23:03:24.617315 2025] [:error] [pid 32192:tid 32242] [client 4.241.200.78:10827] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aU_1PC_q0VFe066lbk9wzwAAAFM"]
[Sat Dec 27 23:03:24.843894 2025] [:error] [pid 32193:tid 32253] [client 4.241.200.78:10179] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU_1PBgw0eCOc2qYqaLFswAAAIM"]
[Sat Dec 27 23:03:25.070667 2025] [:error] [pid 31933:tid 31947] [client 4.241.200.78:10779] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU_1PcGr1WIJr39uqaoSXQAAAcw"]
[Sat Dec 27 23:03:25.297243 2025] [:error] [pid 32278:tid 32280] [client 4.241.200.78:10785] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU_1PX-IfCN2Cy9GcchHwAAAAMA"]
[Sat Dec 27 23:03:25.534484 2025] [:error] [pid 32192:tid 32238] [client 4.241.200.78:10875] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aU_1PS_q0VFe066lbk9w0AAAAE8"]
[Sat Dec 27 23:03:25.787812 2025] [:error] [pid 32191:tid 32213] [client 4.241.200.78:10181] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU_1PbPNtMgrjVCHIdFMcQAAABI"]
[Sat Dec 27 23:03:26.015170 2025] [:error] [pid 32193:tid 32265] [client 4.241.200.78:10236] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU_1Phgw0eCOc2qYqaLFtQAAAI8"]
[Sat Dec 27 23:03:26.242236 2025] [:error] [pid 32193:tid 32267] [client 4.241.200.78:10164] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU_1Phgw0eCOc2qYqaLFtgAAAJE"]
[Sat Dec 27 23:03:26.469980 2025] [:error] [pid 32191:tid 32214] [client 4.241.200.78:10759] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aU_1PrPNtMgrjVCHIdFMcwAAABM"]
[Sat Dec 27 23:03:26.697344 2025] [:error] [pid 32191:tid 32205] [client 4.241.200.78:10773] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aU_1PrPNtMgrjVCHIdFMdAAAAAo"]
[Sat Dec 27 23:03:26.925208 2025] [:error] [pid 32193:tid 32256] [client 4.241.200.78:10816] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aU_1Phgw0eCOc2qYqaLFugAAAIY"]
[Sat Dec 27 23:03:27.153427 2025] [:error] [pid 32193:tid 32251] [client 4.241.200.78:10787] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aU_1Pxgw0eCOc2qYqaLFuwAAAIE"]
[Sat Dec 27 23:03:27.387233 2025] [:error] [pid 32191:tid 32219] [client 4.241.200.78:10121] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aU_1P7PNtMgrjVCHIdFMdQAAABg"]
[Sat Dec 27 23:03:27.613821 2025] [:error] [pid 32278:tid 32296] [client 4.241.200.78:10239] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aU_1P3-IfCN2Cy9GcchHwwAAANA"]
[Sat Dec 27 23:03:27.864923 2025] [:error] [pid 32193:tid 32252] [client 4.241.200.78:10185] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aU_1Pxgw0eCOc2qYqaLFvQAAAII"]
[Sat Dec 27 23:03:28.096167 2025] [:error] [pid 32192:tid 32247] [client 4.241.200.78:10799] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aU_1QC_q0VFe066lbk9w0QAAAFg"]
[Sat Dec 27 23:03:28.333826 2025] [:error] [pid 32278:tid 32297] [client 4.241.200.78:10123] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aU_1QH-IfCN2Cy9GcchHxQAAANE"]
[Sat Dec 27 23:03:28.571160 2025] [:error] [pid 32191:tid 32206] [client 4.241.200.78:10205] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1QLPNtMgrjVCHIdFMeAAAAAs"]
[Sat Dec 27 23:03:28.799242 2025] [:error] [pid 32191:tid 32210] [client 4.241.200.78:10756] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1QLPNtMgrjVCHIdFMegAAAA8"]
[Sat Dec 27 23:03:29.025995 2025] [:error] [pid 3114:tid 3124] [client 4.241.200.78:10180] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1QWJGrIkLOdbPpJjDHgAAAYY"]
[Sat Dec 27 23:03:29.263269 2025] [:error] [pid 3114:tid 3130] [client 4.241.200.78:10203] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1QWJGrIkLOdbPpJjDHwAAAYw"]
[Sat Dec 27 23:03:29.489967 2025] [:error] [pid 3114:tid 3132] [client 4.241.200.78:10823] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aU_1QWJGrIkLOdbPpJjDIQAAAY4"]
[Sat Dec 27 23:03:29.719477 2025] [:error] [pid 32191:tid 32208] [client 4.241.200.78:10795] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aU_1QbPNtMgrjVCHIdFMfAAAAA0"]
[Sat Dec 27 23:03:30.012437 2025] [:error] [pid 32191:tid 32197] [client 4.241.200.78:10792] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aU_1QrPNtMgrjVCHIdFMfQAAAAI"]
[Sat Dec 27 23:03:30.341726 2025] [:error] [pid 32278:tid 32290] [client 4.241.200.78:10232] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aU_1Qn-IfCN2Cy9GcchHxwAAAMo"]
[Sat Dec 27 23:03:30.675580 2025] [:error] [pid 45373:tid 45395] [client 4.241.200.78:10805] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aU_1Qi7p_wFcbpu46HWdKAAAAVQ"]
[Sat Dec 27 23:03:30.930661 2025] [:error] [pid 45373:tid 45394] [client 4.241.200.78:10790] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aU_1Qi7p_wFcbpu46HWdKQAAAVM"]
[Sat Dec 27 23:03:31.253770 2025] [:error] [pid 3114:tid 3119] [client 4.241.200.78:10195] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aU_1Q2JGrIkLOdbPpJjDJwAAAYE"]
[Sat Dec 27 23:03:31.487172 2025] [:error] [pid 45373:tid 45386] [client 4.241.200.78:10237] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwe.php"] [unique_id "aU_1Qy7p_wFcbpu46HWdKwAAAUs"]
[Sat Dec 27 23:03:31.729500 2025] [:error] [pid 45373:tid 45390] [client 4.241.200.78:10208] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aU_1Qy7p_wFcbpu46HWdLQAAAU8"]
[Sat Dec 27 23:03:31.963402 2025] [:error] [pid 3114:tid 3138] [client 4.241.200.78:10817] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aU_1Q2JGrIkLOdbPpJjDKgAAAZQ"]
[Sat Dec 27 23:03:32.192705 2025] [:error] [pid 3114:tid 3135] [client 4.241.200.78:10202] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aU_1RGJGrIkLOdbPpJjDKwAAAZE"]
[Sat Dec 27 23:03:32.451856 2025] [:error] [pid 3114:tid 3127] [client 4.241.200.78:10831] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aU_1RGJGrIkLOdbPpJjDLQAAAYk"]
[Sat Dec 27 23:03:32.680758 2025] [:error] [pid 3114:tid 3126] [client 4.241.200.78:10825] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU_1RGJGrIkLOdbPpJjDLwAAAYg"]
[Sat Dec 27 23:03:32.909376 2025] [:error] [pid 31933:tid 31953] [client 4.241.200.78:10161] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU_1RMGr1WIJr39uqaoSXwAAAdI"]
[Sat Dec 27 23:03:33.137662 2025] [:error] [pid 31933:tid 31948] [client 4.241.200.78:10873] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU_1RcGr1WIJr39uqaoSYAAAAc0"]
[Sat Dec 27 23:03:33.365849 2025] [:error] [pid 32193:tid 32272] [client 4.241.200.78:10161] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aU_1RRgw0eCOc2qYqaLFvwAAAJY"]
[Sat Dec 27 23:03:33.610510 2025] [:error] [pid 32278:tid 32295] [client 4.241.200.78:10186] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU_1RX-IfCN2Cy9GcchHzQAAAM8"]
[Sat Dec 27 23:03:33.837624 2025] [:error] [pid 3114:tid 3132] [client 4.241.200.78:10764] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU_1RWJGrIkLOdbPpJjDMAAAAY4"]
[Sat Dec 27 23:03:34.068117 2025] [:error] [pid 32278:tid 32282] [client 4.241.200.78:10116] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU_1Rn-IfCN2Cy9GcchHzwAAAMI"]
[Sat Dec 27 23:03:34.299631 2025] [:error] [pid 32191:tid 32204] [client 4.241.200.78:10807] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aU_1RrPNtMgrjVCHIdFMfwAAAAk"]
[Sat Dec 27 23:03:34.528784 2025] [:error] [pid 15939:tid 15954] [client 4.241.200.78:10120] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU_1RuZ7qdnFxikanML8-QAAAQ0"]
[Sat Dec 27 23:03:34.756493 2025] [:error] [pid 32192:tid 32234] [client 4.241.200.78:10802] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU_1Ri_q0VFe066lbk9w1AAAAEs"]
[Sat Dec 27 23:03:34.984925 2025] [:error] [pid 32278:tid 32285] [client 4.241.200.78:10786] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU_1Rn-IfCN2Cy9GcchH0AAAAMU"]
[Sat Dec 27 23:03:35.217177 2025] [:error] [pid 45373:tid 45388] [client 4.241.200.78:10752] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aU_1Ry7p_wFcbpu46HWdLwAAAU0"]
[Sat Dec 27 23:03:35.459851 2025] [:error] [pid 32193:tid 32263] [client 4.241.200.78:10177] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU_1Rxgw0eCOc2qYqaLFwQAAAI0"]
[Sat Dec 27 23:03:35.701152 2025] [:error] [pid 32193:tid 32258] [client 4.241.200.78:10199] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU_1Rxgw0eCOc2qYqaLFwgAAAIg"]
[Sat Dec 27 23:03:35.926647 2025] [:error] [pid 32278:tid 32293] [client 4.241.200.78:10187] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU_1R3-IfCN2Cy9GcchH0wAAAM0"]
[Sat Dec 27 23:03:36.156491 2025] [:error] [pid 15939:tid 15949] [client 4.241.200.78:10765] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aU_1SOZ7qdnFxikanML8-wAAAQg"]
[Sat Dec 27 23:03:36.383121 2025] [:error] [pid 32191:tid 32214] [client 4.241.200.78:10229] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU_1SLPNtMgrjVCHIdFMggAAABM"]
[Sat Dec 27 23:03:36.618459 2025] [:error] [pid 32192:tid 32225] [client 4.241.200.78:10197] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU_1SC_q0VFe066lbk9w1QAAAEI"]
[Sat Dec 27 23:03:36.845492 2025] [:error] [pid 32192:tid 32246] [client 4.241.200.78:10221] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU_1SC_q0VFe066lbk9w1gAAAFc"]
[Sat Dec 27 23:03:37.075574 2025] [:error] [pid 32192:tid 32244] [client 4.241.200.78:10170] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aU_1SS_q0VFe066lbk9w2AAAAFU"]
[Sat Dec 27 23:03:37.302621 2025] [:error] [pid 15939:tid 15952] [client 4.241.200.78:10782] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU_1SeZ7qdnFxikanML8_AAAAQs"]
[Sat Dec 27 23:03:37.534797 2025] [:error] [pid 32192:tid 32231] [client 4.241.200.78:10113] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU_1SS_q0VFe066lbk9w2gAAAEg"]
[Sat Dec 27 23:03:37.761979 2025] [:error] [pid 32192:tid 32233] [client 4.241.200.78:10804] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU_1SS_q0VFe066lbk9w2wAAAEo"]
[Sat Dec 27 23:03:37.989832 2025] [:error] [pid 45373:tid 45393] [client 4.241.200.78:10133] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aU_1SS7p_wFcbpu46HWdMQAAAVI"]
[Sat Dec 27 23:03:38.224820 2025] [:error] [pid 15939:tid 15946] [client 4.241.200.78:10184] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU_1SuZ7qdnFxikanML9AAAAAQU"]
[Sat Dec 27 23:03:38.455038 2025] [:error] [pid 15939:tid 15961] [client 4.241.200.78:10220] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU_1SuZ7qdnFxikanML9AQAAARQ"]
[Sat Dec 27 23:03:38.689648 2025] [:error] [pid 32278:tid 32300] [client 4.241.200.78:10152] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU_1Sn-IfCN2Cy9GcchH1QAAANQ"]
[Sat Dec 27 23:03:38.919481 2025] [:error] [pid 32191:tid 32216] [client 4.241.200.78:10182] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aU_1SrPNtMgrjVCHIdFMhgAAABU"]
[Sat Dec 27 23:03:39.146373 2025] [:error] [pid 32192:tid 32243] [client 4.241.200.78:10784] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU_1Sy_q0VFe066lbk9w3QAAAFQ"]
[Sat Dec 27 23:03:39.373493 2025] [:error] [pid 32192:tid 32237] [client 4.241.200.78:10157] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU_1Sy_q0VFe066lbk9w3gAAAE4"]
[Sat Dec 27 23:03:39.599685 2025] [:error] [pid 32192:tid 32232] [client 4.241.200.78:10871] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU_1Sy_q0VFe066lbk9w3wAAAEk"]
[Sat Dec 27 23:03:39.827079 2025] [:error] [pid 32192:tid 32238] [client 4.241.200.78:10233] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aU_1Sy_q0VFe066lbk9w4AAAAE8"]
[Sat Dec 27 23:03:40.074134 2025] [:error] [pid 32191:tid 32196] [client 4.241.200.78:10132] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU_1TLPNtMgrjVCHIdFMhwAAAAE"]
[Sat Dec 27 23:03:40.304285 2025] [:error] [pid 32193:tid 32269] [client 4.241.200.78:10207] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU_1TBgw0eCOc2qYqaLFxAAAAJM"]
[Sat Dec 27 23:03:40.533304 2025] [:error] [pid 15939:tid 15953] [client 4.241.200.78:10834] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU_1TOZ7qdnFxikanML9AwAAAQw"]
[Sat Dec 27 23:03:40.759739 2025] [:error] [pid 15939:tid 15960] [client 4.241.200.78:10129] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aU_1TOZ7qdnFxikanML9BAAAARM"]
[Sat Dec 27 23:03:40.989972 2025] [:error] [pid 45373:tid 45392] [client 4.241.200.78:10124] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU_1TC7p_wFcbpu46HWdNgAAAVE"]
[Sat Dec 27 23:03:41.218314 2025] [:error] [pid 32192:tid 32223] [client 4.241.200.78:10206] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU_1TS_q0VFe066lbk9w5AAAAEA"]
[Sat Dec 27 23:03:41.451847 2025] [:error] [pid 45373:tid 45395] [client 4.241.200.78:10183] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU_1TS7p_wFcbpu46HWdNwAAAVQ"]
[Sat Dec 27 23:03:41.678982 2025] [:error] [pid 31933:tid 31943] [client 4.241.200.78:10230] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aU_1TcGr1WIJr39uqaoSZQAAAcg"]
[Sat Dec 27 23:03:41.907092 2025] [:error] [pid 32278:tid 32291] [client 4.241.200.78:10156] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU_1TX-IfCN2Cy9GcchH1wAAAMs"]
[Sat Dec 27 23:03:42.133591 2025] [:error] [pid 15939:tid 15945] [client 4.241.200.78:10867] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU_1TuZ7qdnFxikanML9CAAAAQQ"]
[Sat Dec 27 23:03:42.371335 2025] [:error] [pid 15939:tid 15958] [client 4.241.200.78:10065] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU_1TuZ7qdnFxikanML9CQAAARE"]
[Sat Dec 27 23:03:42.604176 2025] [:error] [pid 32278:tid 32298] [client 4.241.200.78:10150] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aU_1Tn-IfCN2Cy9GcchH2QAAANI"]
[Sat Dec 27 23:03:42.833755 2025] [:error] [pid 3114:tid 3140] [client 4.241.200.78:10754] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU_1TmJGrIkLOdbPpJjDNQAAAZY"]
[Sat Dec 27 23:03:43.059915 2025] [:error] [pid 3114:tid 3127] [client 4.241.200.78:10830] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU_1T2JGrIkLOdbPpJjDNgAAAYk"]
[Sat Dec 27 23:03:43.286442 2025] [:error] [pid 3114:tid 3126] [client 4.241.200.78:10163] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU_1T2JGrIkLOdbPpJjDNwAAAYg"]
[Sat Dec 27 23:03:43.567765 2025] [:error] [pid 32278:tid 32304] [client 4.241.200.78:10853] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU_1T3-IfCN2Cy9GcchH2gAAANg"]
[Sat Dec 27 23:03:43.833563 2025] [:error] [pid 3114:tid 3142] [client 4.241.200.78:10063] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU_1T2JGrIkLOdbPpJjDOAAAAZg"]
[Sat Dec 27 23:03:44.095321 2025] [:error] [pid 32191:tid 32197] [client 4.241.200.78:10128] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU_1ULPNtMgrjVCHIdFMiAAAAAI"]
[Sat Dec 27 23:03:44.325417 2025] [:error] [pid 45373:tid 45386] [client 4.241.200.78:10794] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU_1UC7p_wFcbpu46HWdOQAAAUs"]
[Sat Dec 27 23:03:44.576521 2025] [:error] [pid 3114:tid 3124] [client 4.241.200.78:10119] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aU_1UGJGrIkLOdbPpJjDOwAAAYY"]
[Sat Dec 27 23:03:44.805135 2025] [:error] [pid 32278:tid 32289] [client 4.241.200.78:10223] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU_1UH-IfCN2Cy9GcchH3AAAAMk"]
[Sat Dec 27 23:03:45.119502 2025] [:error] [pid 32192:tid 32231] [client 4.241.200.78:10176] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU_1US_q0VFe066lbk9w6AAAAEg"]
[Sat Dec 27 23:03:45.394497 2025] [:error] [pid 15939:tid 15957] [client 4.241.200.78:10209] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU_1UeZ7qdnFxikanML9EQAAARA"]
[Sat Dec 27 23:03:45.660441 2025] [:error] [pid 32191:tid 32217] [client 4.241.200.78:10196] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aU_1UbPNtMgrjVCHIdFMiwAAABY"]
[Sat Dec 27 23:03:45.886998 2025] [:error] [pid 32191:tid 32198] [client 4.241.200.78:10228] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU_1UbPNtMgrjVCHIdFMjAAAAAM"]
[Sat Dec 27 23:03:46.114061 2025] [:error] [pid 32191:tid 32215] [client 4.241.200.78:10142] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU_1UrPNtMgrjVCHIdFMjQAAABQ"]
[Sat Dec 27 23:03:46.362917 2025] [:error] [pid 32278:tid 32287] [client 4.241.200.78:10153] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU_1Un-IfCN2Cy9GcchH3QAAAMc"]
[Sat Dec 27 23:03:46.606453 2025] [:error] [pid 32191:tid 32200] [client 4.241.200.78:10158] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aU_1UrPNtMgrjVCHIdFMjwAAAAU"]
[Sat Dec 27 23:03:46.843092 2025] [:error] [pid 32191:tid 32205] [client 4.241.200.78:10055] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU_1UrPNtMgrjVCHIdFMkAAAAAo"]
[Sat Dec 27 23:03:47.084732 2025] [:error] [pid 32191:tid 32219] [client 4.241.200.78:10112] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU_1U7PNtMgrjVCHIdFMkgAAABg"]
[Sat Dec 27 23:03:47.317825 2025] [:error] [pid 3114:tid 3122] [client 4.241.200.78:10201] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU_1U2JGrIkLOdbPpJjDPAAAAYQ"]
[Sat Dec 27 23:03:47.585331 2025] [:error] [pid 32192:tid 32237] [client 4.241.200.78:10125] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aU_1Uy_q0VFe066lbk9w7AAAAE4"]
[Sat Dec 27 23:03:47.812670 2025] [:error] [pid 32193:tid 32270] [client 4.241.200.78:10235] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aU_1Uxgw0eCOc2qYqaLFzQAAAJQ"]
[Sat Dec 27 23:03:48.039560 2025] [:error] [pid 45373:tid 45398] [client 4.241.200.78:10127] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aU_1VC7p_wFcbpu46HWdPAAAAVc"]
[Sat Dec 27 23:03:48.269866 2025] [:error] [pid 32278:tid 32302] [client 4.241.200.78:10151] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aU_1VH-IfCN2Cy9GcchH4AAAANY"]
[Sat Dec 27 23:03:48.497496 2025] [:error] [pid 32278:tid 32290] [client 4.241.200.78:10138] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aU_1VH-IfCN2Cy9GcchH4gAAAMo"]
[Sat Dec 27 23:03:48.726290 2025] [:error] [pid 32278:tid 32294] [client 4.241.200.78:10806] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aU_1VH-IfCN2Cy9GcchH5AAAAM4"]
[Sat Dec 27 23:03:48.953315 2025] [:error] [pid 32278:tid 32284] [client 4.241.200.78:10215] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aU_1VH-IfCN2Cy9GcchH5gAAAMQ"]
[Sat Dec 27 23:03:49.189732 2025] [:error] [pid 32278:tid 32299] [client 4.241.200.78:10231] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aU_1VX-IfCN2Cy9GcchH5wAAANM"]
[Sat Dec 27 23:03:49.422114 2025] [:error] [pid 3114:tid 3130] [client 4.241.200.78:10075] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aU_1VWJGrIkLOdbPpJjDPQAAAYw"]
[Sat Dec 27 23:03:49.664077 2025] [:error] [pid 32278:tid 32304] [client 4.241.200.78:10165] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1VX-IfCN2Cy9GcchH6QAAANg"]
[Sat Dec 27 23:03:49.914479 2025] [:error] [pid 32193:tid 32262] [client 4.241.200.78:10148] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1VRgw0eCOc2qYqaLF0AAAAIw"]
[Sat Dec 27 23:03:50.146799 2025] [:error] [pid 32193:tid 32268] [client 4.241.200.78:10832] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1Vhgw0eCOc2qYqaLF0QAAAJI"]
[Sat Dec 27 23:03:50.373962 2025] [:error] [pid 32191:tid 32206] [client 4.241.200.78:10137] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1VrPNtMgrjVCHIdFMlAAAAAs"]
[Sat Dec 27 23:03:50.602022 2025] [:error] [pid 45373:tid 45382] [client 4.241.200.78:10836] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU_1Vi7p_wFcbpu46HWdPgAAAUc"]
[Sat Dec 27 23:03:50.827107 2025] [:error] [pid 3114:tid 3125] [client 4.241.200.78:10146] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU_1VmJGrIkLOdbPpJjDQQAAAYc"]
[Sat Dec 27 23:03:51.053317 2025] [:error] [pid 32278:tid 32293] [client 4.241.200.78:10100] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU_1V3-IfCN2Cy9GcchH7gAAAM0"]
[Sat Dec 27 23:03:51.284623 2025] [:error] [pid 32278:tid 32296] [client 4.241.200.78:10847] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aU_1V3-IfCN2Cy9GcchH8AAAANA"]
[Sat Dec 27 23:03:51.512247 2025] [:error] [pid 32193:tid 32267] [client 4.241.200.78:10067] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aU_1Vxgw0eCOc2qYqaLF2AAAAJE"]
[Sat Dec 27 23:03:51.760304 2025] [:error] [pid 32191:tid 32209] [client 4.241.200.78:10064] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU_1V7PNtMgrjVCHIdFMlQAAAA4"]
[Sat Dec 27 23:03:51.987380 2025] [:error] [pid 45373:tid 45392] [client 4.241.200.78:10078] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU_1Vy7p_wFcbpu46HWdRwAAAVE"]
[Sat Dec 27 23:03:52.213525 2025] [:error] [pid 45373:tid 45375] [client 4.241.200.78:10169] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aU_1WC7p_wFcbpu46HWdSgAAAUA"]
[Sat Dec 27 23:03:52.446018 2025] [:error] [pid 32278:tid 32284] [client 4.241.200.78:10238] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1WH-IfCN2Cy9GcchH9QAAAMQ"]
[Sat Dec 27 23:03:52.686401 2025] [:error] [pid 31933:tid 31944] [client 4.241.200.78:10144] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1WMGr1WIJr39uqaoSaAAAAck"]
[Sat Dec 27 23:03:52.918131 2025] [:error] [pid 45373:tid 45381] [client 4.241.200.78:10115] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1WC7p_wFcbpu46HWdUQAAAUY"]
[Sat Dec 27 23:03:53.152266 2025] [:error] [pid 32278:tid 32304] [client 4.241.200.78:10130] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1WX-IfCN2Cy9GcchH-QAAANg"]
[Sat Dec 27 23:03:53.379711 2025] [:error] [pid 3114:tid 3121] [client 4.241.200.78:10002] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU_1WWJGrIkLOdbPpJjDRAAAAYM"]
[Sat Dec 27 23:03:53.605688 2025] [:error] [pid 32193:tid 32250] [client 4.241.200.78:10085] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU_1WRgw0eCOc2qYqaLF3gAAAIA"]
[Sat Dec 27 23:03:53.832148 2025] [:error] [pid 32278:tid 32283] [client 4.241.200.78:10810] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU_1WX-IfCN2Cy9GcchH-wAAAMM"]
[Sat Dec 27 23:03:54.068089 2025] [:error] [pid 32278:tid 32286] [client 4.241.200.78:10126] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aU_1Wn-IfCN2Cy9GcchH_gAAAMY"]
[Sat Dec 27 23:03:54.297631 2025] [:error] [pid 32278:tid 32302] [client 4.241.200.78:10122] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU_1Wn-IfCN2Cy9GcchIAAAAANY"]
[Sat Dec 27 23:03:54.523779 2025] [:error] [pid 45373:tid 45397] [client 4.241.200.78:10167] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU_1Wi7p_wFcbpu46HWdVgAAAVY"]
[Sat Dec 27 23:03:54.752942 2025] [:error] [pid 32278:tid 32290] [client 4.241.200.78:10189] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU_1Wn-IfCN2Cy9GcchIAQAAAMo"]
[Sat Dec 27 23:03:54.978933 2025] [:error] [pid 32193:tid 32262] [client 4.241.200.78:10083] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aU_1Whgw0eCOc2qYqaLF3wAAAIw"]
[Sat Dec 27 23:03:55.205982 2025] [:error] [pid 32192:tid 32236] [client 4.241.200.78:10080] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1Wy_q0VFe066lbk9w_wAAAE0"]
[Sat Dec 27 23:03:55.434067 2025] [:error] [pid 32278:tid 32281] [client 4.241.200.78:10160] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1W3-IfCN2Cy9GcchIAgAAAME"]
[Sat Dec 27 23:03:55.663108 2025] [:error] [pid 32278:tid 32284] [client 4.241.200.78:10793] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1W3-IfCN2Cy9GcchIAwAAAMQ"]
[Sat Dec 27 23:03:55.898430 2025] [:error] [pid 32191:tid 32202] [client 4.241.200.78:10060] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aU_1W7PNtMgrjVCHIdFMmAAAAAc"]
[Sat Dec 27 23:03:56.125498 2025] [:error] [pid 3114:tid 3123] [client 4.241.200.78:10061] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU_1XGJGrIkLOdbPpJjDRQAAAYU"]
[Sat Dec 27 23:03:56.366352 2025] [:error] [pid 3114:tid 3137] [client 4.241.200.78:10842] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU_1XGJGrIkLOdbPpJjDRgAAAZM"]
[Sat Dec 27 23:03:56.595193 2025] [:error] [pid 45373:tid 45375] [client 4.241.200.78:10167] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU_1XC7p_wFcbpu46HWdWgAAAUA"]
[Sat Dec 27 23:03:56.823615 2025] [:error] [pid 3114:tid 3142] [client 4.241.200.78:10111] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aU_1XGJGrIkLOdbPpJjDSAAAAZg"]
[Sat Dec 27 23:03:57.050495 2025] [:error] [pid 31933:tid 31939] [client 4.241.200.78:10053] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU_1XcGr1WIJr39uqaoSaQAAAcQ"]
[Sat Dec 27 23:03:57.277011 2025] [:error] [pid 32191:tid 32207] [client 4.241.200.78:10049] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU_1XbPNtMgrjVCHIdFMmgAAAAw"]
[Sat Dec 27 23:03:57.516051 2025] [:error] [pid 32191:tid 32204] [client 4.241.200.78:10068] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU_1XbPNtMgrjVCHIdFMnAAAAAk"]
[Sat Dec 27 23:03:57.753565 2025] [:error] [pid 32278:tid 32288] [client 4.241.200.78:10172] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aU_1XX-IfCN2Cy9GcchIBgAAAMg"]
[Sat Dec 27 23:03:57.989432 2025] [:error] [pid 3114:tid 3122] [client 4.241.200.78:9991] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1XWJGrIkLOdbPpJjDTAAAAYQ"]
[Sat Dec 27 23:03:58.223527 2025] [:error] [pid 32193:tid 32263] [client 4.241.200.78:10162] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1Xhgw0eCOc2qYqaLF5AAAAI0"]
[Sat Dec 27 23:03:58.455328 2025] [:error] [pid 32193:tid 32265] [client 4.241.200.78:10136] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1Xhgw0eCOc2qYqaLF5QAAAI8"]
[Sat Dec 27 23:03:58.681614 2025] [:error] [pid 32192:tid 32237] [client 4.241.200.78:10131] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aU_1Xi_q0VFe066lbk9xAQAAAE4"]
[Sat Dec 27 23:03:58.912341 2025] [:error] [pid 32192:tid 32229] [client 4.241.200.78:10071] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU_1Xi_q0VFe066lbk9xAgAAAEY"]
[Sat Dec 27 23:03:59.138777 2025] [:error] [pid 32193:tid 32266] [client 4.241.200.78:10069] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU_1Xxgw0eCOc2qYqaLF6AAAAJA"]
[Sat Dec 27 23:03:59.368301 2025] [:error] [pid 45373:tid 45391] [client 4.241.200.78:10139] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU_1Xy7p_wFcbpu46HWdWwAAAVA"]
[Sat Dec 27 23:03:59.595264 2025] [:error] [pid 45373:tid 45380] [client 4.241.200.78:10071] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aU_1Xy7p_wFcbpu46HWdXAAAAUU"]
[Sat Dec 27 23:03:59.845289 2025] [:error] [pid 3114:tid 3118] [client 4.241.200.78:10105] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aU_1X2JGrIkLOdbPpJjDTQAAAYA"]
[Sat Dec 27 23:04:00.076189 2025] [:error] [pid 31933:tid 31935] [client 4.241.200.78:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Dec 27 23:04:00.192991 2025] [:error] [pid 31933:tid 31958] [client 4.241.200.78:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Dec 27 23:04:00.310475 2025] [:error] [pid 31933:tid 31949] [client 4.241.200.78:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Dec 27 23:04:00.427853 2025] [:error] [pid 31933:tid 31947] [client 4.241.200.78:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Dec 27 23:04:00.545715 2025] [:error] [pid 31933:tid 31946] [client 4.241.200.78:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Sat Dec 27 23:04:01.137160 2025] [:error] [pid 31933:tid 31952] [client 4.241.200.78:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Dec 27 23:04:01.254247 2025] [:error] [pid 31933:tid 31945] [client 4.241.200.78:10222] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Dec 27 23:04:01.367328 2025] [:error] [pid 31933:tid 31955] [client 4.241.200.78:10222] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1YcGr1WIJr39uqaoSdwAAAdQ"]
[Sat Dec 27 23:04:01.599402 2025] [:error] [pid 31933:tid 31959] [client 4.241.200.78:10166] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1YcGr1WIJr39uqaoSeAAAAdg"]
[Sat Dec 27 23:04:01.827077 2025] [:error] [pid 3114:tid 3134] [client 4.241.200.78:10191] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1YWJGrIkLOdbPpJjDTwAAAZA"]
[Sat Dec 27 23:04:02.056484 2025] [:error] [pid 3114:tid 3119] [client 4.241.200.78:10090] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aU_1YmJGrIkLOdbPpJjDUAAAAYE"]
[Sat Dec 27 23:04:02.308459 2025] [:error] [pid 15939:tid 15965] [client 4.241.200.78:10117] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU_1YuZ7qdnFxikanML9FgAAARg"]
[Sat Dec 27 23:04:02.625361 2025] [:error] [pid 15939:tid 15941] [client 4.241.200.78:10815] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU_1YuZ7qdnFxikanML9FwAAAQA"]
[Sat Dec 27 23:04:02.860036 2025] [:error] [pid 32191:tid 32218] [client 4.241.200.78:10094] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU_1YrPNtMgrjVCHIdFMoQAAABc"]
[Sat Dec 27 23:04:03.104938 2025] [:error] [pid 15939:tid 15956] [client 4.241.200.78:10089] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aU_1Y-Z7qdnFxikanML9GgAAAQ8"]
[Sat Dec 27 23:04:03.333767 2025] [:error] [pid 3114:tid 3125] [client 4.241.200.78:10140] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU_1Y2JGrIkLOdbPpJjDUQAAAYc"]
[Sat Dec 27 23:04:03.566968 2025] [:error] [pid 32192:tid 32241] [client 4.241.200.78:10030] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU_1Yy_q0VFe066lbk9xBQAAAFI"]
[Sat Dec 27 23:04:03.801665 2025] [:error] [pid 32278:tid 32295] [client 4.241.200.78:10074] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU_1Y3-IfCN2Cy9GcchICQAAAM8"]
[Sat Dec 27 23:04:04.032797 2025] [:error] [pid 32191:tid 32209] [client 4.241.200.78:10190] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aU_1ZLPNtMgrjVCHIdFMpgAAAA4"]
[Sat Dec 27 23:04:04.259467 2025] [:error] [pid 3114:tid 3140] [client 4.241.200.78:10077] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU_1ZGJGrIkLOdbPpJjDVAAAAZY"]
[Sat Dec 27 23:04:04.498808 2025] [:error] [pid 32192:tid 32246] [client 4.241.200.78:10088] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU_1ZC_q0VFe066lbk9xBgAAAFc"]
[Sat Dec 27 23:04:04.728737 2025] [:error] [pid 3114:tid 3137] [client 4.241.200.78:10017] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU_1ZGJGrIkLOdbPpJjDVwAAAZM"]
[Sat Dec 27 23:04:04.966825 2025] [:error] [pid 32192:tid 32239] [client 4.241.200.78:10020] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aU_1ZC_q0VFe066lbk9xCAAAAFA"]
[Sat Dec 27 23:04:05.194411 2025] [:error] [pid 32192:tid 32244] [client 4.241.200.78:10101] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU_1ZS_q0VFe066lbk9xCQAAAFU"]
[Sat Dec 27 23:04:05.421072 2025] [:error] [pid 32192:tid 32234] [client 4.241.200.78:10800] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU_1ZS_q0VFe066lbk9xCwAAAEs"]
[Sat Dec 27 23:04:05.658143 2025] [:error] [pid 3114:tid 3124] [client 4.241.200.78:9985] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU_1ZWJGrIkLOdbPpJjDWAAAAYY"]
[Sat Dec 27 23:04:05.884789 2025] [:error] [pid 32192:tid 32243] [client 4.241.200.78:10082] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aU_1ZS_q0VFe066lbk9xDQAAAFQ"]
[Sat Dec 27 23:04:06.121802 2025] [:error] [pid 3114:tid 3128] [client 4.241.200.78:10087] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU_1ZmJGrIkLOdbPpJjDWgAAAYo"]
[Sat Dec 27 23:04:06.349131 2025] [:error] [pid 15939:tid 15964] [client 4.241.200.78:10084] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU_1ZuZ7qdnFxikanML9HAAAARc"]
[Sat Dec 27 23:04:06.576801 2025] [:error] [pid 32192:tid 32229] [client 4.241.200.78:9990] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU_1Zi_q0VFe066lbk9xDgAAAEY"]
[Sat Dec 27 23:04:06.804833 2025] [:error] [pid 32193:tid 32259] [client 4.241.200.78:10019] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aU_1Zhgw0eCOc2qYqaLF7gAAAIk"]
[Sat Dec 27 23:04:07.032600 2025] [:error] [pid 32191:tid 32207] [client 4.241.200.78:10099] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU_1Z7PNtMgrjVCHIdFMqQAAAAw"]
[Sat Dec 27 23:04:07.271326 2025] [:error] [pid 32191:tid 32199] [client 4.241.200.78:10155] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU_1Z7PNtMgrjVCHIdFMqwAAAAQ"]
[Sat Dec 27 23:04:07.508178 2025] [:error] [pid 32191:tid 32215] [client 4.241.200.78:10159] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU_1Z7PNtMgrjVCHIdFMrgAAABQ"]
[Sat Dec 27 23:04:07.733917 2025] [:error] [pid 32191:tid 32218] [client 4.241.200.78:10225] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aU_1Z7PNtMgrjVCHIdFMrwAAABc"]
[Sat Dec 27 23:04:07.965126 2025] [:error] [pid 32278:tid 32300] [client 4.241.200.78:10086] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU_1Z3-IfCN2Cy9GcchIDAAAANQ"]
[Sat Dec 27 23:04:08.194337 2025] [:error] [pid 32278:tid 32296] [client 4.241.200.78:10147] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU_1aH-IfCN2Cy9GcchIDQAAANA"]
[Sat Dec 27 23:04:08.424112 2025] [:error] [pid 32278:tid 32303] [client 4.241.200.78:10093] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU_1aH-IfCN2Cy9GcchIDgAAANc"]
[Sat Dec 27 23:04:08.661268 2025] [:error] [pid 32278:tid 32302] [client 4.241.200.78:9995] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aU_1aH-IfCN2Cy9GcchIDwAAANY"]
[Sat Dec 27 23:04:08.898188 2025] [:error] [pid 32278:tid 32301] [client 4.241.200.78:10048] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aU_1aH-IfCN2Cy9GcchIEAAAANU"]
[Sat Dec 27 23:04:09.127472 2025] [:error] [pid 32191:tid 32210] [client 4.241.200.78:10024] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU_1abPNtMgrjVCHIdFMswAAAA8"]
[Sat Dec 27 23:04:09.357153 2025] [:error] [pid 32191:tid 32214] [client 4.241.200.78:10174] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU_1abPNtMgrjVCHIdFMtAAAABM"]
[Sat Dec 27 23:04:09.589544 2025] [:error] [pid 32191:tid 32195] [client 4.241.200.78:9989] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU_1abPNtMgrjVCHIdFMtQAAAAA"]
[Sat Dec 27 23:04:09.817453 2025] [:error] [pid 32278:tid 32299] [client 4.241.200.78:10044] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aU_1aX-IfCN2Cy9GcchIEgAAANM"]
[Sat Dec 27 23:04:10.047279 2025] [:error] [pid 32278:tid 32294] [client 4.241.200.78:9988] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aU_1an-IfCN2Cy9GcchIEwAAAM4"]
[Sat Dec 27 23:04:10.274425 2025] [:error] [pid 32191:tid 32199] [client 4.241.200.78:10001] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU_1arPNtMgrjVCHIdFMtwAAAAQ"]
[Sat Dec 27 23:04:10.504610 2025] [:error] [pid 32191:tid 32204] [client 4.241.200.78:10134] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU_1arPNtMgrjVCHIdFMuQAAAAk"]
[Sat Dec 27 23:04:10.730254 2025] [:error] [pid 45373:tid 45395] [client 4.241.200.78:10076] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aU_1ai7p_wFcbpu46HWdYwAAAVQ"]
[Sat Dec 27 23:04:10.977283 2025] [:error] [pid 32278:tid 32304] [client 4.241.200.78:10175] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU_1an-IfCN2Cy9GcchIFAAAANg"]
[Sat Dec 27 23:04:11.206201 2025] [:error] [pid 32278:tid 32283] [client 4.241.200.78:10031] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU_1a3-IfCN2Cy9GcchIFQAAAMM"]
[Sat Dec 27 23:04:11.444788 2025] [:error] [pid 32278:tid 32282] [client 4.241.200.78:9938] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU_1a3-IfCN2Cy9GcchIFwAAAMI"]
[Sat Dec 27 23:04:11.676239 2025] [:error] [pid 3114:tid 3129] [client 4.241.200.78:10103] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aU_1a2JGrIkLOdbPpJjDXAAAAYs"]
[Sat Dec 27 23:04:11.905528 2025] [:error] [pid 32193:tid 32260] [client 4.241.200.78:10052] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aU_1axgw0eCOc2qYqaLF7wAAAIo"]
[Sat Dec 27 23:04:12.139495 2025] [:error] [pid 31933:tid 31941] [client 4.241.200.78:10066] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU_1bMGr1WIJr39uqaoSewAAAcY"]
[Sat Dec 27 23:04:13.030874 2025] [:error] [pid 3114:tid 3141] [client 4.241.200.78:10091] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU_1bWJGrIkLOdbPpJjDXQAAAZc"]
[Sat Dec 27 23:04:13.262498 2025] [:error] [pid 45373:tid 45383] [client 4.241.200.78:10070] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aU_1bS7p_wFcbpu46HWdZgAAAUg"]
[Sat Dec 27 23:04:13.491790 2025] [:error] [pid 32193:tid 32273] [client 4.241.200.78:10004] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aU_1bRgw0eCOc2qYqaLF8AAAAJc"]
[Sat Dec 27 23:04:13.718571 2025] [:error] [pid 32193:tid 32258] [client 4.241.200.78:10000] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aU_1bRgw0eCOc2qYqaLF8QAAAIg"]
[Sat Dec 27 23:04:13.953490 2025] [:error] [pid 3114:tid 3125] [client 4.241.200.78:10173] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aU_1bWJGrIkLOdbPpJjDYQAAAYc"]
[Sat Dec 27 23:04:14.220485 2025] [:error] [pid 45373:tid 45390] [client 4.241.200.78:10791] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aU_1bi7p_wFcbpu46HWdZwAAAU8"]
[Sat Dec 27 23:04:14.446605 2025] [:error] [pid 31933:tid 31951] [client 4.241.200.78:10143] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU_1bsGr1WIJr39uqaoSgAAAAdA"]
[Sat Dec 27 23:04:14.676401 2025] [:error] [pid 32278:tid 32288] [client 4.241.200.78:10095] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU_1bn-IfCN2Cy9GcchIIAAAAMg"]
[Sat Dec 27 23:04:14.919218 2025] [:error] [pid 15939:tid 15960] [client 4.241.200.78:10821] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU_1buZ7qdnFxikanML9HQAAARM"]
[Sat Dec 27 23:04:15.147148 2025] [:error] [pid 32278:tid 32304] [client 4.241.200.78:10114] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aU_1b3-IfCN2Cy9GcchIIQAAANg"]
[Sat Dec 27 23:04:15.384347 2025] [:error] [pid 45373:tid 45391] [client 4.241.200.78:10096] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU_1by7p_wFcbpu46HWdaAAAAVA"]
[Sat Dec 27 23:04:15.652195 2025] [:error] [pid 45373:tid 45398] [client 4.241.200.78:10171] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU_1by7p_wFcbpu46HWdaQAAAVc"]
[Sat Dec 27 23:04:15.901022 2025] [:error] [pid 31933:tid 31935] [client 4.241.200.78:9993] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU_1b8Gr1WIJr39uqaoSgQAAAcA"]
[Sat Dec 27 23:04:16.128718 2025] [:error] [pid 45373:tid 45381] [client 4.241.200.78:10067] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aU_1cC7p_wFcbpu46HWdawAAAUY"]
[Sat Dec 27 23:04:16.385776 2025] [:error] [pid 32193:tid 32256] [client 4.241.200.78:9932] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU_1cBgw0eCOc2qYqaLF9AAAAIY"]
[Sat Dec 27 23:04:16.624060 2025] [:error] [pid 3114:tid 3120] [client 4.241.200.78:10168] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU_1cGJGrIkLOdbPpJjDYwAAAYI"]
[Sat Dec 27 23:04:16.860050 2025] [:error] [pid 15939:tid 15950] [client 4.241.200.78:10102] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU_1cOZ7qdnFxikanML9HwAAAQk"]
[Sat Dec 27 23:04:17.086474 2025] [:error] [pid 32193:tid 32266] [client 4.241.200.78:10040] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aU_1cRgw0eCOc2qYqaLF9QAAAJA"]
[Sat Dec 27 23:04:17.313999 2025] [:error] [pid 15939:tid 15947] [client 4.241.200.78:10037] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU_1ceZ7qdnFxikanML9IAAAAQY"]
[Sat Dec 27 23:04:17.550118 2025] [:error] [pid 15939:tid 15945] [client 4.241.200.78:10079] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU_1ceZ7qdnFxikanML9IQAAAQQ"]
[Sat Dec 27 23:04:17.785537 2025] [:error] [pid 45373:tid 45393] [client 4.241.200.78:10010] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU_1cS7p_wFcbpu46HWdbQAAAVI"]
[Sat Dec 27 23:04:18.012432 2025] [:error] [pid 15939:tid 15951] [client 4.241.200.78:10097] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aU_1cuZ7qdnFxikanML9IgAAAQo"]
[Sat Dec 27 23:04:18.262761 2025] [:error] [pid 15939:tid 15959] [client 4.241.200.78:9951] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aU_1cuZ7qdnFxikanML9JAAAARI"]
[Sat Dec 27 23:04:18.491102 2025] [:error] [pid 45373:tid 45379] [client 4.241.200.78:10145] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aU_1ci7p_wFcbpu46HWdcgAAAUQ"]
[Sat Dec 27 23:04:18.719172 2025] [:error] [pid 32193:tid 32271] [client 4.241.200.78:10028] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aU_1chgw0eCOc2qYqaLF9wAAAJU"]
[Sat Dec 27 23:04:18.988276 2025] [:error] [pid 45373:tid 45396] [client 4.241.200.78:10027] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aU_1ci7p_wFcbpu46HWdcwAAAVU"]
[Sat Dec 27 23:04:19.267301 2025] [:error] [pid 45373:tid 45375] [client 4.241.200.78:9994] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU_1cy7p_wFcbpu46HWddAAAAUA"]
[Sat Dec 27 23:04:19.581928 2025] [:error] [pid 45373:tid 45392] [client 4.241.200.78:9945] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU_1cy7p_wFcbpu46HWddQAAAVE"]
[Sat Dec 27 23:04:19.907383 2025] [:error] [pid 15939:tid 15949] [client 4.241.200.78:9933] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU_1c-Z7qdnFxikanML9JQAAAQg"]
[Sat Dec 27 23:04:20.182141 2025] [:error] [pid 3114:tid 3128] [client 4.241.200.78:10135] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aU_1dGJGrIkLOdbPpJjDawAAAYo"]
[Sat Dec 27 23:04:20.422715 2025] [:error] [pid 31933:tid 31953] [client 4.241.200.78:9992] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU_1dMGr1WIJr39uqaoShAAAAdI"]
[Sat Dec 27 23:04:20.648300 2025] [:error] [pid 31933:tid 31948] [client 4.241.200.78:9959] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU_1dMGr1WIJr39uqaoShgAAAc0"]
[Sat Dec 27 23:04:20.891206 2025] [:error] [pid 31933:tid 31937] [client 4.241.200.78:9936] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU_1dMGr1WIJr39uqaoShwAAAcI"]
[Sat Dec 27 23:04:21.122593 2025] [:error] [pid 31933:tid 31943] [client 4.241.200.78:10051] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aU_1dcGr1WIJr39uqaoSiwAAAcg"]
[Sat Dec 27 23:04:21.351941 2025] [:error] [pid 15939:tid 15962] [client 4.241.200.78:10013] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU_1deZ7qdnFxikanML9LQAAARU"]
[Sat Dec 27 23:04:21.600040 2025] [:error] [pid 45373:tid 45387] [client 4.241.200.78:10194] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU_1dS7p_wFcbpu46HWdfQAAAUw"]
[Sat Dec 27 23:04:21.844610 2025] [:error] [pid 32191:tid 32202] [client 4.241.200.78:10023] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU_1dbPNtMgrjVCHIdFMxgAAAAc"]
[Sat Dec 27 23:04:22.080212 2025] [:error] [pid 32193:tid 32268] [client 4.241.200.78:10036] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aU_1dhgw0eCOc2qYqaLF_wAAAJI"]
[Sat Dec 27 23:04:22.311128 2025] [:error] [pid 31933:tid 31954] [client 4.241.200.78:10118] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aU_1dsGr1WIJr39uqaoSlAAAAdM"]
[Sat Dec 27 23:04:22.538136 2025] [:error] [pid 3114:tid 3141] [client 4.241.200.78:10018] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU_1dmJGrIkLOdbPpJjDcgAAAZc"]
[Sat Dec 27 23:04:22.765690 2025] [:error] [pid 31933:tid 31956] [client 4.241.200.78:10218] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU_1dsGr1WIJr39uqaoSmgAAAdU"]
[Sat Dec 27 23:04:22.996528 2025] [:error] [pid 32191:tid 32211] [client 4.241.200.78:9924] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU_1drPNtMgrjVCHIdFMygAAABA"]
[Sat Dec 27 23:04:23.253603 2025] [:error] [pid 3114:tid 3119] [client 4.241.200.78:9987] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aU_1d2JGrIkLOdbPpJjDdgAAAYE"]
[Sat Dec 27 23:04:23.488609 2025] [:error] [pid 32191:tid 32216] [client 4.241.200.78:10050] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU_1d7PNtMgrjVCHIdFMzAAAABU"]
[Sat Dec 27 23:04:23.715124 2025] [:error] [pid 32192:tid 32242] [client 4.241.200.78:10062] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU_1dy_q0VFe066lbk9xEAAAAFM"]
[Sat Dec 27 23:04:23.968737 2025] [:error] [pid 32193:tid 32273] [client 4.241.200.78:9920] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU_1dxgw0eCOc2qYqaLGAwAAAJc"]
[Sat Dec 27 23:04:24.201522 2025] [:error] [pid 3114:tid 3136] [client 4.241.200.78:10154] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aU_1eGJGrIkLOdbPpJjDeAAAAZI"]
[Sat Dec 27 23:04:24.518202 2025] [:error] [pid 32193:tid 32269] [client 4.241.200.78:10057] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU_1eBgw0eCOc2qYqaLGBAAAAJM"]
[Sat Dec 27 23:04:24.793885 2025] [:error] [pid 3114:tid 3135] [client 4.241.200.78:9992] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU_1eGJGrIkLOdbPpJjDewAAAZE"]
[Sat Dec 27 23:04:25.115402 2025] [:error] [pid 31933:tid 31958] [client 4.241.200.78:9961] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU_1ecGr1WIJr39uqaoSpwAAAdc"]
[Sat Dec 27 23:04:25.412200 2025] [:error] [pid 15939:tid 15951] [client 4.241.200.78:9869] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aU_1eeZ7qdnFxikanML9OQAAAQo"]
[Sat Dec 27 23:04:25.714350 2025] [:error] [pid 3114:tid 3128] [client 4.241.200.78:9945] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU_1eWJGrIkLOdbPpJjDgwAAAYo"]
[Sat Dec 27 23:04:26.022980 2025] [:error] [pid 15939:tid 15963] [client 4.241.200.78:9928] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU_1euZ7qdnFxikanML9OwAAARY"]
[Sat Dec 27 23:04:26.308706 2025] [:error] [pid 45373:tid 45386] [client 4.241.200.78:9931] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU_1ei7p_wFcbpu46HWdiQAAAUs"]
[Sat Dec 27 23:04:26.618250 2025] [:error] [pid 32191:tid 32213] [client 4.241.200.78:10081] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aU_1erPNtMgrjVCHIdFM1QAAABI"]
[Sat Dec 27 23:04:26.938821 2025] [:error] [pid 45373:tid 45390] [client 4.241.200.78:10016] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU_1ei7p_wFcbpu46HWdiwAAAU8"]
[Sat Dec 27 23:04:27.238210 2025] [:error] [pid 3114:tid 3132] [client 4.241.200.78:10104] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU_1e2JGrIkLOdbPpJjDhgAAAY4"]
[Sat Dec 27 23:04:27.541317 2025] [:error] [pid 32191:tid 32199] [client 4.241.200.78:9954] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU_1e7PNtMgrjVCHIdFM2AAAAAQ"]
[Sat Dec 27 23:04:27.862447 2025] [:error] [pid 45373:tid 45391] [client 4.241.200.78:10098] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aU_1ey7p_wFcbpu46HWdjAAAAVA"]
[Sat Dec 27 23:04:28.175643 2025] [:error] [pid 31933:tid 31956] [client 4.241.200.78:10058] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU_1fMGr1WIJr39uqaoSrQAAAdU"]
[Sat Dec 27 23:04:28.535267 2025] [:error] [pid 3114:tid 3130] [client 4.241.200.78:10056] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU_1fGJGrIkLOdbPpJjDigAAAYw"]
[Sat Dec 27 23:04:28.909776 2025] [:error] [pid 3114:tid 3134] [client 4.241.200.78:10109] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU_1fGJGrIkLOdbPpJjDiwAAAZA"]
[Sat Dec 27 23:04:29.230925 2025] [:error] [pid 45373:tid 45387] [client 4.241.200.78:9974] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aU_1fS7p_wFcbpu46HWdjQAAAUw"]
[Sat Dec 27 23:04:29.539835 2025] [:error] [pid 3114:tid 3125] [client 4.241.200.78:10092] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU_1fWJGrIkLOdbPpJjDjQAAAYc"]
[Sat Dec 27 23:04:29.863906 2025] [:error] [pid 32191:tid 32204] [client 4.241.200.78:10141] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU_1fbPNtMgrjVCHIdFM2gAAAAk"]
[Sat Dec 27 23:04:30.201242 2025] [:error] [pid 15939:tid 15962] [client 4.241.200.78:10006] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU_1fuZ7qdnFxikanML9PgAAARU"]
[Sat Dec 27 23:04:30.533887 2025] [:error] [pid 3114:tid 3135] [client 4.241.200.78:10035] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aU_1fmJGrIkLOdbPpJjDjwAAAZE"]
[Sat Dec 27 23:04:30.846092 2025] [:error] [pid 31933:tid 31955] [client 4.241.200.78:9898] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU_1fsGr1WIJr39uqaoSrgAAAdQ"]
[Sat Dec 27 23:04:31.084740 2025] [:error] [pid 31933:tid 31959] [client 4.241.200.78:10009] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU_1f8Gr1WIJr39uqaoSrwAAAdg"]
[Sat Dec 27 23:04:31.348811 2025] [:error] [pid 32278:tid 32287] [client 4.241.200.78:9986] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU_1f3-IfCN2Cy9GcchILwAAAMc"]
[Sat Dec 27 23:04:31.706532 2025] [:error] [pid 31933:tid 31941] [client 4.241.200.78:9998] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aU_1f8Gr1WIJr39uqaoSsQAAAcY"]
[Sat Dec 27 23:04:32.056299 2025] [:error] [pid 32191:tid 32208] [client 4.241.200.78:10047] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU_1gLPNtMgrjVCHIdFM2wAAAA0"]
[Sat Dec 27 23:04:32.459464 2025] [:error] [pid 45373:tid 45389] [client 4.241.200.78:10108] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU_1gC7p_wFcbpu46HWdkgAAAU4"]
[Sat Dec 27 23:04:32.862146 2025] [:error] [pid 32278:tid 32285] [client 4.241.200.78:9925] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU_1gH-IfCN2Cy9GcchIMAAAAMU"]
[Sat Dec 27 23:04:33.171282 2025] [:error] [pid 31933:tid 31935] [client 4.241.200.78:10021] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aU_1gcGr1WIJr39uqaoSswAAAcA"]
[Sat Dec 27 23:04:33.471901 2025] [:error] [pid 32193:tid 32270] [client 4.241.200.78:10006] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU_1gRgw0eCOc2qYqaLGDAAAAJQ"]
[Sat Dec 27 23:04:33.778487 2025] [:error] [pid 45373:tid 45395] [client 4.241.200.78:10110] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU_1gS7p_wFcbpu46HWdlAAAAVQ"]
[Sat Dec 27 23:04:34.163193 2025] [:error] [pid 15939:tid 15957] [client 4.241.200.78:9929] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU_1guZ7qdnFxikanML9QwAAARA"]
[Sat Dec 27 23:04:34.516595 2025] [:error] [pid 3114:tid 3128] [client 4.241.200.78:10026] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aU_1gmJGrIkLOdbPpJjDkQAAAYo"]
[Sat Dec 27 23:04:34.902976 2025] [:error] [pid 31933:tid 31958] [client 4.241.200.78:10204] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU_1gsGr1WIJr39uqaoStAAAAdc"]
[Sat Dec 27 23:04:35.311847 2025] [:error] [pid 32193:tid 32259] [client 4.241.200.78:10041] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU_1gxgw0eCOc2qYqaLGDwAAAIk"]
[Sat Dec 27 23:04:35.679172 2025] [:error] [pid 32193:tid 32260] [client 4.241.200.78:9937] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU_1gxgw0eCOc2qYqaLGEQAAAIo"]
[Sat Dec 27 23:04:36.033683 2025] [:error] [pid 31933:tid 31946] [client 4.241.200.78:9966] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aU_1hMGr1WIJr39uqaoStQAAAcs"]
[Sat Dec 27 23:04:36.502771 2025] [:error] [pid 31933:tid 31949] [client 4.241.200.78:10039] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU_1hMGr1WIJr39uqaoSuAAAAc4"]
[Sat Dec 27 23:04:36.956674 2025] [:error] [pid 32192:tid 32234] [client 4.241.200.78:9863] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU_1hC_q0VFe066lbk9xFQAAAEs"]
[Sat Dec 27 23:04:37.266899 2025] [:error] [pid 32193:tid 32269] [client 4.241.200.78:10012] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU_1hRgw0eCOc2qYqaLGEwAAAJM"]
[Sat Dec 27 23:04:37.873310 2025] [:error] [pid 32192:tid 32236] [client 4.241.200.78:9824] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aU_1hS_q0VFe066lbk9xFwAAAE0"]
[Sat Dec 27 23:04:38.297861 2025] [:error] [pid 45373:tid 45383] [client 4.241.200.78:10054] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU_1hi7p_wFcbpu46HWdmQAAAUg"]
[Sat Dec 27 23:04:38.684834 2025] [:error] [pid 31933:tid 31956] [client 4.241.200.78:9962] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU_1hsGr1WIJr39uqaoSvAAAAdU"]
[Sat Dec 27 23:04:39.100914 2025] [:error] [pid 32192:tid 32227] [client 4.241.200.78:9947] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU_1hy_q0VFe066lbk9xGgAAAEQ"]
[Sat Dec 27 23:04:39.448859 2025] [:error] [pid 31933:tid 31941] [client 4.241.200.78:10072] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aU_1h8Gr1WIJr39uqaoSvQAAAcY"]
[Sat Dec 27 23:04:40.056754 2025] [:error] [pid 3114:tid 3133] [client 4.241.200.78:9997] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU_1iGJGrIkLOdbPpJjDkwAAAY8"]
[Sat Dec 27 23:04:40.644771 2025] [:error] [pid 32193:tid 32265] [client 4.241.200.78:9894] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU_1iBgw0eCOc2qYqaLGFwAAAI8"]
[Sat Dec 27 23:04:40.938092 2025] [:error] [pid 32278:tid 32301] [client 4.241.200.78:9860] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU_1iH-IfCN2Cy9GcchINAAAANU"]
[Sat Dec 27 23:04:41.368691 2025] [:error] [pid 31933:tid 31951] [client 4.241.200.78:9956] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aU_1icGr1WIJr39uqaoSvwAAAdA"]
[Sat Dec 27 23:04:41.766422 2025] [:error] [pid 31933:tid 31944] [client 4.241.200.78:9979] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU_1icGr1WIJr39uqaoSwAAAAck"]
[Sat Dec 27 23:04:42.658420 2025] [:error] [pid 32278:tid 32284] [client 4.241.200.78:10025] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU_1in-IfCN2Cy9GcchINgAAAMQ"]
[Sat Dec 27 23:04:43.400809 2025] [:error] [pid 32192:tid 32241] [client 4.241.200.78:10149] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU_1iy_q0VFe066lbk9xHwAAAFI"]
[Sat Dec 27 23:04:43.913253 2025] [:error] [pid 32278:tid 32288] [client 4.241.200.78:10046] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aU_1i3-IfCN2Cy9GcchIOAAAAMg"]
[Sat Dec 27 23:04:44.444784 2025] [:error] [pid 45373:tid 45375] [client 4.241.200.78:9999] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU_1jC7p_wFcbpu46HWdpQAAAUA"]
[Sat Dec 27 23:04:44.866995 2025] [:error] [pid 32192:tid 32233] [client 4.241.200.78:10045] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU_1jC_q0VFe066lbk9xJgAAAEo"]
[Sat Dec 27 23:04:45.372837 2025] [:error] [pid 15939:tid 15956] [client 4.241.200.78:10007] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU_1jeZ7qdnFxikanML9SwAAAQ8"]
[Sat Dec 27 23:04:45.723963 2025] [:error] [pid 3114:tid 3121] [client 4.241.200.78:9922] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aU_1jWJGrIkLOdbPpJjDsgAAAYM"]
[Sat Dec 27 23:04:46.157843 2025] [:error] [pid 32278:tid 32282] [client 4.241.200.78:10005] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU_1jn-IfCN2Cy9GcchIOgAAAMI"]
[Sat Dec 27 23:04:46.504455 2025] [:error] [pid 32278:tid 32297] [client 4.241.200.78:10073] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU_1jn-IfCN2Cy9GcchIPAAAANE"]
[Sat Dec 27 23:04:46.799006 2025] [:error] [pid 32193:tid 32250] [client 4.241.200.78:10011] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU_1jhgw0eCOc2qYqaLGHQAAAIA"]
[Sat Dec 27 23:04:47.225247 2025] [:error] [pid 15939:tid 15962] [client 4.241.200.78:9856] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aU_1j-Z7qdnFxikanML9TAAAARU"]
[Sat Dec 27 23:04:47.575315 2025] [:error] [pid 15939:tid 15943] [client 4.241.200.78:9878] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aU_1j-Z7qdnFxikanML9TQAAAQI"]
[Sat Dec 27 23:04:47.917484 2025] [:error] [pid 32191:tid 32196] [client 4.241.200.78:9921] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aU_1j7PNtMgrjVCHIdFM4AAAAAE"]
[Sat Dec 27 23:04:48.246005 2025] [:error] [pid 32278:tid 32300] [client 4.241.200.78:9942] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aU_1kH-IfCN2Cy9GcchIQAAAANQ"]
[Sat Dec 27 23:04:48.581901 2025] [:error] [pid 3114:tid 3134] [client 4.241.200.78:9879] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aU_1kGJGrIkLOdbPpJjDugAAAZA"]
[Sat Dec 27 23:04:49.056358 2025] [:error] [pid 32193:tid 32260] [client 4.241.200.78:9875] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs15.php"] [unique_id "aU_1kRgw0eCOc2qYqaLGHwAAAIo"]
[Sat Dec 27 23:04:49.484741 2025] [:error] [pid 45373:tid 45398] [client 4.241.200.78:10029] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs15.php"] [unique_id "aU_1kS7p_wFcbpu46HWdqgAAAVc"]
[Sat Dec 27 23:04:49.810158 2025] [:error] [pid 45373:tid 45385] [client 4.241.200.78:10015] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs15.php"] [unique_id "aU_1kS7p_wFcbpu46HWdrAAAAUo"]
[Sat Dec 27 23:04:50.160188 2025] [:error] [pid 31933:tid 31938] [client 4.241.200.78:9935] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs15.php"] [unique_id "aU_1ksGr1WIJr39uqaoSwgAAAcM"]
[Sat Dec 27 23:04:50.524351 2025] [:error] [pid 32193:tid 32253] [client 4.241.200.78:9934] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aU_1khgw0eCOc2qYqaLGIAAAAIM"]
[Sat Dec 27 23:04:50.873243 2025] [:error] [pid 31933:tid 31958] [client 4.241.200.78:9944] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aU_1ksGr1WIJr39uqaoSxAAAAdc"]
[Sat Dec 27 23:04:51.222051 2025] [:error] [pid 32193:tid 32269] [client 4.241.200.78:9822] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aU_1kxgw0eCOc2qYqaLGIgAAAJM"]
[Sat Dec 27 23:04:51.565193 2025] [:error] [pid 3114:tid 3142] [client 4.241.200.78:10107] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aU_1k2JGrIkLOdbPpJjD0QAAAZg"]
[Sat Dec 27 23:04:51.897571 2025] [:error] [pid 32193:tid 32258] [client 4.241.200.78:9918] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU_1kxgw0eCOc2qYqaLGIwAAAIg"]
[Sat Dec 27 23:04:52.185102 2025] [:error] [pid 31933:tid 31947] [client 4.241.200.78:9880] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU_1lMGr1WIJr39uqaoSxgAAAcw"]
[Sat Dec 27 23:04:52.491467 2025] [:error] [pid 31933:tid 31943] [client 4.241.200.78:9996] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU_1lMGr1WIJr39uqaoSygAAAcg"]
[Sat Dec 27 23:04:52.748532 2025] [:error] [pid 31933:tid 31940] [client 4.241.200.78:10038] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aU_1lMGr1WIJr39uqaoSzAAAAcU"]
[Sat Dec 27 23:04:53.075494 2025] [:error] [pid 32193:tid 32274] [client 4.241.200.78:9943] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aU_1lRgw0eCOc2qYqaLGJgAAAJg"]
[Sat Dec 27 23:04:53.391854 2025] [:error] [pid 31933:tid 31955] [client 4.241.200.78:9910] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aU_1lcGr1WIJr39uqaoSzwAAAdQ"]
[Sat Dec 27 23:04:54.681185 2025] [:error] [pid 32278:tid 32301] [client 4.241.200.78:9967] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aU_1ln-IfCN2Cy9GcchIQwAAANU"]
[Sat Dec 27 23:04:54.938839 2025] [:error] [pid 15939:tid 15959] [client 4.241.200.78:9858] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aU_1luZ7qdnFxikanML9VAAAARI"]
[Sat Dec 27 23:04:55.215096 2025] [:error] [pid 45373:tid 45390] [client 4.241.200.78:9871] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aU_1ly7p_wFcbpu46HWdtgAAAU8"]
[Sat Dec 27 23:04:55.594233 2025] [:error] [pid 32278:tid 32299] [client 4.241.200.78:9848] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aU_1l3-IfCN2Cy9GcchIRgAAANM"]
[Sat Dec 27 23:04:55.844648 2025] [:error] [pid 32191:tid 32207] [client 4.241.200.78:10154] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aU_1l7PNtMgrjVCHIdFM5AAAAAw"]
[Sat Dec 27 23:04:56.137735 2025] [:error] [pid 32191:tid 32199] [client 4.241.200.78:9970] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aU_1mLPNtMgrjVCHIdFM5QAAAAQ"]
[Sat Dec 27 23:04:56.451047 2025] [:error] [pid 32193:tid 32266] [client 4.241.200.78:9941] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aU_1mBgw0eCOc2qYqaLGJwAAAJA"]
[Sat Dec 27 23:04:56.730232 2025] [:error] [pid 31933:tid 31942] [client 4.241.200.78:9901] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aU_1mMGr1WIJr39uqaoS1QAAAcc"]
[Sat Dec 27 23:04:57.003834 2025] [:error] [pid 45373:tid 45394] [client 4.241.200.78:10003] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aU_1mS7p_wFcbpu46HWdtwAAAVM"]
[Sat Dec 27 23:04:57.311416 2025] [:error] [pid 32278:tid 32284] [client 4.241.200.78:9872] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aU_1mX-IfCN2Cy9GcchIRwAAAMQ"]
[Sat Dec 27 23:04:57.579650 2025] [:error] [pid 32193:tid 32267] [client 4.241.200.78:9953] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aU_1mRgw0eCOc2qYqaLGKQAAAJE"]
[Sat Dec 27 23:04:57.848429 2025] [:error] [pid 32191:tid 32208] [client 4.241.200.78:9930] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aU_1mbPNtMgrjVCHIdFM5wAAAA0"]
[Sat Dec 27 23:04:58.098580 2025] [:error] [pid 32191:tid 32219] [client 4.241.200.78:9881] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aU_1mrPNtMgrjVCHIdFM6AAAABg"]
[Sat Dec 27 23:04:58.357883 2025] [:error] [pid 3114:tid 3125] [client 4.241.200.78:10032] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aU_1mmJGrIkLOdbPpJjD1gAAAYc"]
[Sat Dec 27 23:04:58.616285 2025] [:error] [pid 31933:tid 31939] [client 4.241.200.78:10059] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU_1msGr1WIJr39uqaoS1gAAAcQ"]
[Sat Dec 27 23:04:58.867000 2025] [:error] [pid 31933:tid 31935] [client 4.241.200.78:9940] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU_1msGr1WIJr39uqaoS2AAAAcA"]
[Sat Dec 27 23:04:59.124063 2025] [:error] [pid 3114:tid 3140] [client 4.241.200.78:9887] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU_1m2JGrIkLOdbPpJjD1wAAAZY"]
[Sat Dec 27 23:04:59.377077 2025] [:error] [pid 32192:tid 32244] [client 4.241.200.78:10022] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aU_1my_q0VFe066lbk9xLwAAAFU"]
[Sat Dec 27 23:04:59.629891 2025] [:error] [pid 15939:tid 15952] [client 4.241.200.78:10014] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU_1m-Z7qdnFxikanML9WQAAAQs"]
[Sat Dec 27 23:04:59.886527 2025] [:error] [pid 3114:tid 3141] [client 4.241.200.78:9908] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU_1m2JGrIkLOdbPpJjD2AAAAZc"]
[Sat Dec 27 23:05:00.141029 2025] [:error] [pid 32192:tid 32226] [client 4.241.200.78:9963] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU_1nC_q0VFe066lbk9xMAAAAEM"]
[Sat Dec 27 23:05:00.411263 2025] [:error] [pid 31933:tid 31936] [client 4.241.200.78:10043] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aU_1nMGr1WIJr39uqaoS2QAAAcE"]
[Sat Dec 27 23:05:00.673880 2025] [:error] [pid 31933:tid 31958] [client 4.241.200.78:9884] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU_1nMGr1WIJr39uqaoS2gAAAdc"]
[Sat Dec 27 23:05:00.941652 2025] [:error] [pid 31933:tid 31946] [client 4.241.200.78:9984] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aU_1nMGr1WIJr39uqaoS2wAAAcs"]
[Sat Dec 27 23:05:01.211627 2025] [:error] [pid 31933:tid 31949] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sat Dec 27 23:05:01.345481 2025] [:error] [pid 31933:tid 31948] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Sat Dec 27 23:05:01.482289 2025] [:error] [pid 31933:tid 31943] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Sat Dec 27 23:05:01.616815 2025] [:error] [pid 31933:tid 31940] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Sat Dec 27 23:05:01.750622 2025] [:error] [pid 31933:tid 31959] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Sat Dec 27 23:05:01.886059 2025] [:error] [pid 31933:tid 31945] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Sat Dec 27 23:05:02.017873 2025] [:error] [pid 31933:tid 31950] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sat Dec 27 23:05:02.152155 2025] [:error] [pid 31933:tid 31951] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat Dec 27 23:05:02.285598 2025] [:error] [pid 31933:tid 31957] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Dec 27 23:05:02.431284 2025] [:error] [pid 31933:tid 31944] [client 4.241.200.78:9978] [client 4.241.200.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.241.200.78, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aU_1nsGr1WIJr39uqaoS6QAAAck"]
[Sat Dec 27 23:05:02.435898 2025] [:error] [pid 31933:tid 31944] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Dec 27 23:05:02.561564 2025] [:error] [pid 31933:tid 31939] [client 4.241.200.78:9978] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Dec 27 23:05:02.686892 2025] [:error] [pid 31933:tid 31938] [client 4.241.200.78:9978] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aU_1nsGr1WIJr39uqaoS6wAAAcM"]
[Sat Dec 27 23:05:02.970926 2025] [:error] [pid 45373:tid 45387] [client 4.241.200.78:9976] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aU_1ni7p_wFcbpu46HWduwAAAUw"]
[Sat Dec 27 23:05:03.271115 2025] [:error] [pid 45373:tid 45385] [client 4.241.200.78:9889] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aU_1ny7p_wFcbpu46HWdvAAAAUo"]
[Sat Dec 27 23:05:03.579973 2025] [:error] [pid 32193:tid 32262] [client 4.241.200.78:9736] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse25.php"] [unique_id "aU_1nxgw0eCOc2qYqaLGLQAAAIw"]
[Sat Dec 27 23:05:03.899075 2025] [:error] [pid 32192:tid 32232] [client 4.241.200.78:9965] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aU_1ny_q0VFe066lbk9xMgAAAEk"]
[Sat Dec 27 23:05:04.210975 2025] [:error] [pid 3114:tid 3136] [client 4.241.200.78:9969] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aU_1oGJGrIkLOdbPpJjD3QAAAZI"]
[Sat Dec 27 23:05:05.487659 2025] [:error] [pid 45373:tid 45384] [client 4.241.200.78:9873] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aU_1oS7p_wFcbpu46HWdwQAAAUk"]
[Sat Dec 27 23:05:05.793068 2025] [:error] [pid 3114:tid 3133] [client 4.241.200.78:9977] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aU_1oWJGrIkLOdbPpJjD4AAAAY8"]
[Sat Dec 27 23:05:06.056756 2025] [:error] [pid 3114:tid 3135] [client 4.241.200.78:9983] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aU_1omJGrIkLOdbPpJjD4QAAAZE"]
[Sat Dec 27 23:05:06.366017 2025] [:error] [pid 31933:tid 31953] [client 4.241.200.78:9971] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aU_1osGr1WIJr39uqaoS7wAAAdI"]
[Sat Dec 27 23:05:06.641115 2025] [:error] [pid 3114:tid 3140] [client 4.241.200.78:10106] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aU_1omJGrIkLOdbPpJjD4wAAAZY"]
[Sat Dec 27 23:05:06.960438 2025] [:error] [pid 45373:tid 45377] [client 4.241.200.78:9759] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aU_1oi7p_wFcbpu46HWdwgAAAUI"]
[Sat Dec 27 23:05:07.271179 2025] [:error] [pid 3114:tid 3124] [client 4.241.200.78:9838] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aU_1o2JGrIkLOdbPpJjD5AAAAYY"]
[Sat Dec 27 23:05:07.585352 2025] [:error] [pid 45373:tid 45381] [client 4.241.200.78:9923] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aU_1oy7p_wFcbpu46HWdwwAAAUY"]
[Sat Dec 27 23:05:07.905034 2025] [:error] [pid 45373:tid 45386] [client 4.241.200.78:9981] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aU_1oy7p_wFcbpu46HWdxAAAAUs"]
[Sat Dec 27 23:05:08.227043 2025] [:error] [pid 31933:tid 31948] [client 4.241.200.78:9892] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aU_1pMGr1WIJr39uqaoS8QAAAc0"]
[Sat Dec 27 23:05:08.525925 2025] [:error] [pid 32193:tid 32272] [client 4.241.200.78:9866] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aU_1pBgw0eCOc2qYqaLGMAAAAJY"]
[Sat Dec 27 23:05:08.809510 2025] [:error] [pid 32278:tid 32293] [client 4.241.200.78:9972] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aU_1pH-IfCN2Cy9GcchITQAAAM0"]
[Sat Dec 27 23:05:09.099005 2025] [:error] [pid 32193:tid 32263] [client 4.241.200.78:10134] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aU_1pRgw0eCOc2qYqaLGMQAAAI0"]
[Sat Dec 27 23:05:09.418501 2025] [:error] [pid 32278:tid 32300] [client 4.241.200.78:9865] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aU_1pX-IfCN2Cy9GcchIUAAAANQ"]
[Sat Dec 27 23:05:09.764116 2025] [:error] [pid 31933:tid 31940] [client 4.241.200.78:9813] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aU_1pcGr1WIJr39uqaoS8wAAAcU"]
[Sat Dec 27 23:05:10.084902 2025] [:error] [pid 31933:tid 31952] [client 4.241.200.78:10042] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aU_1psGr1WIJr39uqaoS9AAAAdE"]
[Sat Dec 27 23:05:10.435544 2025] [:error] [pid 32278:tid 32296] [client 4.241.200.78:9913] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aU_1pn-IfCN2Cy9GcchIUgAAANA"]
[Sat Dec 27 23:05:10.761794 2025] [:error] [pid 31933:tid 31945] [client 4.241.200.78:9915] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aU_1psGr1WIJr39uqaoS9QAAAco"]
[Sat Dec 27 23:05:11.090768 2025] [:error] [pid 45373:tid 45391] [client 4.241.200.78:9793] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aU_1py7p_wFcbpu46HWdxgAAAVA"]
[Sat Dec 27 23:05:11.414309 2025] [:error] [pid 32193:tid 32274] [client 4.241.200.78:9939] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aU_1pxgw0eCOc2qYqaLGNAAAAJg"]
[Sat Dec 27 23:05:11.713077 2025] [:error] [pid 45373:tid 45394] [client 4.241.200.78:9765] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aU_1py7p_wFcbpu46HWdxwAAAVM"]
[Sat Dec 27 23:05:12.003204 2025] [:error] [pid 32193:tid 32266] [client 4.241.200.78:9927] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aU_1qBgw0eCOc2qYqaLGNgAAAJA"]
[Sat Dec 27 23:05:12.312227 2025] [:error] [pid 32193:tid 32254] [client 4.241.200.78:9844] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aU_1qBgw0eCOc2qYqaLGNwAAAIQ"]
[Sat Dec 27 23:05:12.635891 2025] [:error] [pid 31933:tid 31957] [client 4.241.200.78:9893] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aU_1qMGr1WIJr39uqaoS-AAAAdY"]
[Sat Dec 27 23:05:12.967307 2025] [:error] [pid 32278:tid 32284] [client 4.241.200.78:9751] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aU_1qH-IfCN2Cy9GcchIVgAAAMQ"]
[Sat Dec 27 23:05:13.285592 2025] [:error] [pid 32193:tid 32267] [client 4.241.200.78:9867] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aU_1qRgw0eCOc2qYqaLGOAAAAJE"]
[Sat Dec 27 23:05:13.582434 2025] [:error] [pid 32193:tid 32270] [client 4.241.200.78:9958] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aU_1qRgw0eCOc2qYqaLGOQAAAJQ"]
[Sat Dec 27 23:05:13.863343 2025] [:error] [pid 32191:tid 32202] [client 4.241.200.78:9973] [client 4.241.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/index.php"] [unique_id "aU_1qbPNtMgrjVCHIdFM8QAAAAc"]
[Sat Dec 27 23:05:14.146741 2025] [:error] [pid 32193:tid 32250] [client 4.241.200.78:9955] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU_1qhgw0eCOc2qYqaLGOgAAAIA"]
[Sat Dec 27 23:05:14.405710 2025] [:error] [pid 32191:tid 32211] [client 4.241.200.78:9896] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU_1qrPNtMgrjVCHIdFM9QAAABA"]
[Sat Dec 27 23:05:14.728576 2025] [:error] [pid 45373:tid 45379] [client 4.241.200.78:10008] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU_1qi7p_wFcbpu46HWdzAAAAUQ"]
[Sat Dec 27 23:05:15.025202 2025] [:error] [pid 31933:tid 31937] [client 4.241.200.78:9812] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aU_1q8Gr1WIJr39uqaoS-wAAAcI"]
[Sat Dec 27 23:05:15.318599 2025] [:error] [pid 32193:tid 32259] [client 4.241.200.78:9903] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU_1qxgw0eCOc2qYqaLGPAAAAIk"]
[Sat Dec 27 23:05:15.581920 2025] [:error] [pid 32193:tid 32252] [client 4.241.200.78:9877] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU_1qxgw0eCOc2qYqaLGPQAAAII"]
[Sat Dec 27 23:05:15.878357 2025] [:error] [pid 32191:tid 32200] [client 4.241.200.78:9946] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU_1q7PNtMgrjVCHIdFM9gAAAAU"]
[Sat Dec 27 23:05:16.169899 2025] [:error] [pid 31933:tid 31946] [client 4.241.200.78:9826] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aU_1rMGr1WIJr39uqaoS_QAAAcs"]
[Sat Dec 27 23:05:16.449829 2025] [:error] [pid 31933:tid 31953] [client 4.241.200.78:9868] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aU_1rMGr1WIJr39uqaoS_gAAAdI"]
[Sat Dec 27 23:05:16.716185 2025] [:error] [pid 32192:tid 32223] [client 4.241.200.78:9842] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aU_1rC_q0VFe066lbk9xNgAAAEA"]
[Sat Dec 27 23:05:17.015418 2025] [:error] [pid 3114:tid 3118] [client 4.241.200.78:9833] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aU_1rWJGrIkLOdbPpJjD6AAAAYA"]
[Sat Dec 27 23:05:17.291564 2025] [:error] [pid 32191:tid 32201] [client 4.241.200.78:9911] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah24.php"] [unique_id "aU_1rbPNtMgrjVCHIdFM9wAAAAY"]
[Sat Dec 27 23:05:17.602184 2025] [:error] [pid 31933:tid 31948] [client 4.241.200.78:9797] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU_1rcGr1WIJr39uqaoS_wAAAc0"]
[Sat Dec 27 23:05:17.896105 2025] [:error] [pid 32191:tid 32203] [client 4.241.200.78:10064] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU_1rbPNtMgrjVCHIdFM-AAAAAg"]
[Sat Dec 27 23:05:18.195411 2025] [:error] [pid 31933:tid 31949] [client 4.241.200.78:9821] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU_1rsGr1WIJr39uqaoTAAAAAc4"]
[Sat Dec 27 23:05:18.489785 2025] [:error] [pid 31933:tid 31943] [client 4.241.200.78:9820] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aU_1rsGr1WIJr39uqaoTAQAAAcg"]
[Sat Dec 27 23:05:18.781780 2025] [:error] [pid 31933:tid 31947] [client 4.241.200.78:9968] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU_1rsGr1WIJr39uqaoTAgAAAcw"]
[Sat Dec 27 23:05:19.048286 2025] [:error] [pid 32278:tid 32287] [client 4.241.200.78:9852] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU_1r3-IfCN2Cy9GcchIWAAAAMc"]
[Sat Dec 27 23:05:19.328077 2025] [:error] [pid 32278:tid 32283] [client 4.241.200.78:9845] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU_1r3-IfCN2Cy9GcchIWwAAAMM"]
[Sat Dec 27 23:05:19.659350 2025] [:error] [pid 32191:tid 32214] [client 4.241.200.78:9814] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aU_1r7PNtMgrjVCHIdFM_AAAABM"]
[Sat Dec 27 23:05:19.978036 2025] [:error] [pid 32191:tid 32207] [client 4.241.200.78:9980] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU_1r7PNtMgrjVCHIdFM_QAAAAw"]
[Sat Dec 27 23:05:20.293397 2025] [:error] [pid 45373:tid 45394] [client 4.241.200.78:9855] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU_1sC7p_wFcbpu46HWd0QAAAVM"]
[Sat Dec 27 23:05:20.574566 2025] [:error] [pid 45373:tid 45378] [client 4.241.200.78:9949] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU_1sC7p_wFcbpu46HWd0gAAAUM"]
[Sat Dec 27 23:05:20.866811 2025] [:error] [pid 45373:tid 45387] [client 4.241.200.78:9905] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aU_1sC7p_wFcbpu46HWd1AAAAUw"]
[Sat Dec 27 23:05:21.140443 2025] [:error] [pid 45373:tid 45392] [client 4.241.200.78:9803] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU_1sS7p_wFcbpu46HWd1QAAAVE"]
[Sat Dec 27 23:05:21.426107 2025] [:error] [pid 3114:tid 3137] [client 4.241.200.78:9876] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU_1sWJGrIkLOdbPpJjD6gAAAZM"]
[Sat Dec 27 23:05:21.753689 2025] [:error] [pid 32191:tid 32204] [client 4.241.200.78:10193] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU_1sbPNtMgrjVCHIdFNAAAAAAk"]
[Sat Dec 27 23:05:22.043820 2025] [:error] [pid 3114:tid 3133] [client 4.241.200.78:9806] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "aU_1smJGrIkLOdbPpJjD7QAAAY8"]
[Sat Dec 27 23:05:22.345015 2025] [:error] [pid 32193:tid 32263] [client 4.241.200.78:9957] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU_1shgw0eCOc2qYqaLGQwAAAI0"]
[Sat Dec 27 23:05:22.681077 2025] [:error] [pid 32193:tid 32258] [client 4.241.200.78:9735] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU_1shgw0eCOc2qYqaLGRAAAAIg"]
[Sat Dec 27 23:05:22.986085 2025] [:error] [pid 32193:tid 32256] [client 4.241.200.78:9948] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU_1shgw0eCOc2qYqaLGRQAAAIY"]
[Sat Dec 27 23:05:23.272354 2025] [:error] [pid 32193:tid 32274] [client 4.241.200.78:9857] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aU_1sxgw0eCOc2qYqaLGRgAAAJg"]
[Sat Dec 27 23:05:23.579721 2025] [:error] [pid 32192:tid 32246] [client 4.241.200.78:9919] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU_1sy_q0VFe066lbk9xOQAAAFc"]
[Sat Dec 27 23:05:23.895292 2025] [:error] [pid 3114:tid 3120] [client 4.241.200.78:9964] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU_1s2JGrIkLOdbPpJjD7gAAAYI"]
[Sat Dec 27 23:05:24.203077 2025] [:error] [pid 32191:tid 32198] [client 4.241.200.78:9737] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU_1tLPNtMgrjVCHIdFNAgAAAAM"]
[Sat Dec 27 23:05:24.467373 2025] [:error] [pid 32278:tid 32303] [client 4.241.200.78:9960] [client 4.241.200.78] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/claa.php"] [unique_id "aU_1tH-IfCN2Cy9GcchIXwAAANc"]
[Sun Dec 28 02:17:23.554031 2025] [:error] [pid 46653:tid 46658] [client 172.86.91.124:54877] File does not exist: /usr/local/apache/htdocs/suspended-page/unzipper.php
[Sun Dec 28 04:58:44.725357 2025] [:error] [pid 42294:tid 42362] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Sun Dec 28 04:58:44.887897 2025] [:error] [pid 42294:tid 42353] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php, referer: https://www.yahoo.com/
[Sun Dec 28 04:58:46.241898 2025] [:error] [pid 42294:tid 42353] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php, referer: https://duckduckgo.com/
[Sun Dec 28 04:58:46.415036 2025] [:error] [pid 42294:tid 42369] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.bing.com/
[Sun Dec 28 04:58:46.587788 2025] [:error] [pid 42294:tid 42355] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.fr/
[Sun Dec 28 04:58:46.767701 2025] [:error] [pid 42294:tid 42350] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.co.uk/
[Sun Dec 28 04:58:47.124075 2025] [:error] [pid 42294:tid 42372] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.co.uk/
[Sun Dec 28 04:58:47.292282 2025] [:error] [pid 42294:tid 42367] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.google.co.uk/
[Sun Dec 28 04:58:47.467913 2025] [:error] [pid 42294:tid 42356] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.bing.com/
[Sun Dec 28 04:58:47.605404 2025] [:error] [pid 42294:tid 42364] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.co.uk/
[Sun Dec 28 04:58:47.882175 2025] [:error] [pid 42294:tid 42357] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php, referer: https://www.google.fr/
[Sun Dec 28 04:58:48.020384 2025] [:error] [pid 42294:tid 42363] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.co.uk/
[Sun Dec 28 04:58:49.382563 2025] [:error] [pid 42294:tid 42363] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.yahoo.com/
[Sun Dec 28 04:58:49.522539 2025] [:error] [pid 42294:tid 42371] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.yahoo.com/
[Sun Dec 28 04:58:49.660265 2025] [:error] [pid 42294:tid 42352] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php, referer: https://duckduckgo.com/
[Sun Dec 28 04:58:49.798429 2025] [:error] [pid 42294:tid 42373] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/htaccess.php, referer: https://www.yahoo.com/
[Sun Dec 28 04:58:50.216504 2025] [:error] [pid 42294:tid 42374] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Sun Dec 28 04:58:50.354438 2025] [:error] [pid 42294:tid 42362] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php, referer: https://www.google.fr/
[Sun Dec 28 04:58:50.498522 2025] [:error] [pid 42294:tid 42353] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php, referer: https://www.yahoo.com/
[Sun Dec 28 04:58:52.451384 2025] [:error] [pid 42294:tid 42371] [client 4.230.45.150:21264] [client 4.230.45.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.230.45.150, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aVBIjNTE5kYcYCOzl9FCUAAAAJU"], referer: https://www.bing.com/
[Sun Dec 28 04:58:53.562627 2025] [:error] [pid 42294:tid 42355] [client 4.230.45.150:21264] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fclass.php, referer: https://www.google.de/
[Sun Dec 28 04:58:53.977877 2025] [:error] [pid 42294:tid 42350] [client 4.230.45.150:21264] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVBIjdTE5kYcYCOzl9FCXAAAAIA"], referer: https://www.google.co.uk/
[Sun Dec 28 04:58:54.258207 2025] [:error] [pid 42292:tid 42317] [client 4.230.45.150:15546] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/alfa-rex.php"] [unique_id "aVBIjpyOrM_vaFx1osbKYwAAABU"], referer: https://www.google.de/
[Sun Dec 28 04:58:54.670419 2025] [:error] [pid 42293:tid 42341] [client 4.230.45.150:53462] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aVBIjsvc9B-5cwN385IYVgAAAFI"], referer: https://www.google.de/
[Sun Dec 28 04:58:55.089197 2025] [:error] [pid 42293:tid 42333] [client 4.230.45.150:38756] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aVBIj8vc9B-5cwN385IYWAAAAEo"], referer: https://www.yahoo.com/
[Sun Dec 28 04:58:55.404369 2025] [:error] [pid 43789:tid 43805] [client 4.230.45.150:58567] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aVBIjwa-tUppni4CcCa1-gAAAQ4"], referer: https://www.google.com/
[Sun Dec 28 04:58:55.735374 2025] [:error] [pid 42378:tid 42393] [client 4.230.45.150:20747] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aVBIjzgtcN-KHAjWrX-augAAAM0"], referer: https://www.bing.com/
[Sun Dec 28 04:58:56.430902 2025] [:error] [pid 42378:tid 42404] [client 4.230.45.150:21785] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aVBIkDgtcN-KHAjWrX-avwAAANg"], referer: https://www.google.co.uk/
[Sun Dec 28 04:58:56.880406 2025] [:error] [pid 42292:tid 42307] [client 4.230.45.150:21770] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVBIkJyOrM_vaFx1osbKZgAAAAs"], referer: https://www.google.co.uk/
[Sun Dec 28 04:58:57.177757 2025] [:error] [pid 42292:tid 42297] [client 4.230.45.150:15235] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVBIkZyOrM_vaFx1osbKZwAAAAE"], referer: https://www.google.com/
[Sun Dec 28 04:58:57.479967 2025] [:error] [pid 42292:tid 42311] [client 4.230.45.150:15523] [client 4.230.45.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aVBIkZyOrM_vaFx1osbKagAAAA8"], referer: https://www.google.fr/
[Sun Dec 28 04:58:57.895360 2025] [:error] [pid 42294:tid 42364] [client 4.230.45.150:45787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php, referer: https://www.google.fr/
[Sun Dec 28 04:58:58.049615 2025] [:error] [pid 42294:tid 42366] [client 4.230.45.150:45787] [client 4.230.45.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.230.45.150, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVBIktTE5kYcYCOzl9FCYAAAAJA"], referer: https://www.yahoo.com/
[Sun Dec 28 04:58:58.054267 2025] [:error] [pid 42294:tid 42366] [client 4.230.45.150:45787] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.yahoo.com/
[Sun Dec 28 11:12:19.879898 2025] [:error] [pid 29436:tid 29440] [client 159.89.181.56:62836] [client 159.89.181.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aVCgE7chzOOtNL9VPNJxYgAAAYE"], referer: binance.com
[Sun Dec 28 15:38:17.097577 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Sun Dec 28 15:38:17.120708 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Dec 28 15:38:17.139140 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/Cachex.php
[Sun Dec 28 15:38:17.194043 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/wpup.php
[Sun Dec 28 15:38:17.222731 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sun Dec 28 15:38:17.254003 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/wpupex.php
[Sun Dec 28 15:38:17.289010 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/halo.php
[Sun Dec 28 15:38:17.315649 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/nck.php
[Sun Dec 28 15:38:17.471667 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:16603] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Dec 28 15:38:17.486802 2025] [:error] [pid 42293:tid 42333] [client 4.196.149.150:16603] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVDeacvc9B-5cwN385Kj1wAAAEo"]
[Sun Dec 28 15:38:17.735366 2025] [:error] [pid 29437:tid 29485] [client 4.196.149.150:16589] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVDeaRhDotAbVk6pZLeFpAAAAdM"]
[Sun Dec 28 15:38:17.956094 2025] [:error] [pid 29388:tid 29407] [client 4.196.149.150:16532] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVDeadoLv2L2zI_SpdWolAAAAUs"]
[Sun Dec 28 15:38:18.334689 2025] [:error] [pid 43789:tid 43798] [client 4.196.149.150:16615] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVDeaga-tUppni4CcCYCNwAAAQc"]
[Sun Dec 28 15:38:18.729966 2025] [:error] [pid 29436:tid 29455] [client 4.196.149.150:16586] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVDearchzOOtNL9VPNKaOQAAAZA"]
[Sun Dec 28 15:38:18.827678 2025] [:error] [pid 42294:tid 42370] [client 4.196.149.150:16620] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVDeatTE5kYcYCOzl9GM4AAAAJQ"]
[Sun Dec 28 15:38:18.902362 2025] [:error] [pid 43789:tid 43794] [client 4.196.149.150:16623] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVDeaga-tUppni4CcCYCOAAAAQM"]
[Sun Dec 28 15:38:18.987395 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:16541] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVDeahhDotAbVk6pZLeFpQAAAcA"]
[Sun Dec 28 15:38:19.076351 2025] [:error] [pid 42294:tid 42371] [client 4.196.149.150:16530] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVDea9TE5kYcYCOzl9GM4QAAAJU"]
[Sun Dec 28 15:38:19.201283 2025] [:error] [pid 42292:tid 42296] [client 4.196.149.150:16521] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVDea5yOrM_vaFx1osYZNwAAAAA"]
[Sun Dec 28 15:38:19.321614 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:16592] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVDeaxhDotAbVk6pZLeFpgAAAcs"]
[Sun Dec 28 15:38:19.434617 2025] [:error] [pid 29437:tid 29480] [client 4.196.149.150:16616] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVDeaxhDotAbVk6pZLeFpwAAAc4"]
[Sun Dec 28 15:38:19.671266 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:16621] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVDeazgtcN-KHAjWrX_p7gAAAMk"]
[Sun Dec 28 15:38:19.854189 2025] [:error] [pid 42292:tid 42297] [client 4.196.149.150:16593] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVDea5yOrM_vaFx1osYZOAAAAAE"]
[Sun Dec 28 15:38:19.929962 2025] [:error] [pid 29436:tid 29446] [client 4.196.149.150:16599] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVDea7chzOOtNL9VPNKaOwAAAYc"]
[Sun Dec 28 15:38:19.980482 2025] [:error] [pid 42378:tid 42397] [client 4.196.149.150:16598] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVDeazgtcN-KHAjWrX_p7wAAANE"]
[Sun Dec 28 15:38:20.247735 2025] [:error] [pid 42294:tid 42366] [client 4.196.149.150:16543] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDebNTE5kYcYCOzl9GM4wAAAJA"]
[Sun Dec 28 15:38:20.547375 2025] [:error] [pid 29436:tid 29460] [client 4.196.149.150:16553] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDebLchzOOtNL9VPNKaPAAAAZU"]
[Sun Dec 28 15:38:20.647928 2025] [:error] [pid 42292:tid 42314] [client 4.196.149.150:16634] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDebJyOrM_vaFx1osYZOQAAABI"]
[Sun Dec 28 15:38:20.755429 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:16631] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDebAa-tUppni4CcCYCOgAAAQQ"]
[Sun Dec 28 15:38:20.794790 2025] [:error] [pid 42378:tid 42382] [client 4.196.149.150:16529] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVDebDgtcN-KHAjWrX_p8AAAAMI"]
[Sun Dec 28 15:38:20.868477 2025] [:error] [pid 29388:tid 29404] [client 4.196.149.150:16542] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVDebNoLv2L2zI_SpdWolgAAAUg"]
[Sun Dec 28 15:38:20.953545 2025] [:error] [pid 42294:tid 42354] [client 4.196.149.150:16565] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVDebNTE5kYcYCOzl9GM5AAAAIQ"]
[Sun Dec 28 15:38:20.995437 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:16525] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVDebBhDotAbVk6pZLeFqQAAAcc"]
[Sun Dec 28 15:38:21.114982 2025] [:error] [pid 43789:tid 43814] [client 4.196.149.150:16627] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVDebQa-tUppni4CcCYCOwAAARc"]
[Sun Dec 28 15:38:21.288966 2025] [:error] [pid 42294:tid 42357] [client 4.196.149.150:16528] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVDebdTE5kYcYCOzl9GM5QAAAIc"]
[Sun Dec 28 15:38:21.390992 2025] [:error] [pid 29388:tid 29411] [client 4.196.149.150:16518] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVDebdoLv2L2zI_SpdWolwAAAU8"]
[Sun Dec 28 15:38:21.617898 2025] [:error] [pid 29437:tid 29469] [client 4.196.149.150:16626] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVDebRhDotAbVk6pZLeFqgAAAcM"]
[Sun Dec 28 15:38:21.690647 2025] [:error] [pid 29388:tid 29420] [client 4.196.149.150:16602] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVDebdoLv2L2zI_SpdWomQAAAVg"]
[Sun Dec 28 15:38:21.773900 2025] [:error] [pid 42378:tid 42392] [client 4.196.149.150:16630] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVDebTgtcN-KHAjWrX_p8QAAAMw"]
[Sun Dec 28 15:38:21.922696 2025] [:error] [pid 43789:tid 43807] [client 4.196.149.150:16622] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVDebQa-tUppni4CcCYCPAAAARA"]
[Sun Dec 28 15:38:21.981636 2025] [:error] [pid 42294:tid 42351] [client 4.196.149.150:16563] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVDebdTE5kYcYCOzl9GM5gAAAIE"]
[Sun Dec 28 15:38:22.067566 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:16590] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVDebrchzOOtNL9VPNKaPQAAAYY"]
[Sun Dec 28 15:38:22.228349 2025] [:error] [pid 43789:tid 43799] [client 4.196.149.150:16638] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVDebga-tUppni4CcCYCPgAAAQg"]
[Sun Dec 28 15:38:22.366382 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:16571] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVDebpyOrM_vaFx1osYZOgAAAAI"]
[Sun Dec 28 15:38:22.469890 2025] [:error] [pid 29388:tid 29398] [client 4.196.149.150:16514] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVDebtoLv2L2zI_SpdWomwAAAUI"]
[Sun Dec 28 15:38:22.608309 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:10179] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVDebhhDotAbVk6pZLeFrAAAAdg"]
[Sun Dec 28 15:38:22.675755 2025] [:error] [pid 43789:tid 43797] [client 4.196.149.150:16636] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVDebga-tUppni4CcCYCPwAAAQY"]
[Sun Dec 28 15:38:22.796704 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:16639] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVDebjgtcN-KHAjWrX_p8wAAAMU"]
[Sun Dec 28 15:38:22.844488 2025] [:error] [pid 42294:tid 42367] [client 4.196.149.150:16535] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVDebtTE5kYcYCOzl9GM5wAAAJE"]
[Sun Dec 28 15:38:22.912528 2025] [:error] [pid 42292:tid 42303] [client 4.196.149.150:16609] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVDebpyOrM_vaFx1osYZPAAAAAc"]
[Sun Dec 28 15:38:22.961073 2025] [:error] [pid 42294:tid 42359] [client 4.196.149.150:16575] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVDebtTE5kYcYCOzl9GM6AAAAIk"]
[Sun Dec 28 15:38:23.087490 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:16624] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVDebxhDotAbVk6pZLeFrQAAAcI"]
[Sun Dec 28 15:38:23.186090 2025] [:error] [pid 29436:tid 29457] [client 4.196.149.150:16512] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVDeb7chzOOtNL9VPNKaPwAAAZI"]
[Sun Dec 28 15:38:23.315870 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:16524] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVDeb8vc9B-5cwN385Kj2gAAAEw"]
[Sun Dec 28 15:38:23.386946 2025] [:error] [pid 29388:tid 29401] [client 4.196.149.150:10177] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVDeb9oLv2L2zI_SpdWonAAAAUU"]
[Sun Dec 28 15:38:23.578331 2025] [:error] [pid 42294:tid 42353] [client 4.196.149.150:16595] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVDeb9TE5kYcYCOzl9GM6QAAAIM"]
[Sun Dec 28 15:38:23.719711 2025] [:error] [pid 43789:tid 43809] [client 4.196.149.150:16522] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVDebwa-tUppni4CcCYCQAAAARI"]
[Sun Dec 28 15:38:23.810430 2025] [:error] [pid 29388:tid 29419] [client 4.196.149.150:16533] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVDeb9oLv2L2zI_SpdWonQAAAVc"]
[Sun Dec 28 15:38:24.013868 2025] [:error] [pid 29437:tid 29476] [client 4.196.149.150:16560] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVDecBhDotAbVk6pZLeFrgAAAco"]
[Sun Dec 28 15:38:24.106814 2025] [:error] [pid 29437:tid 29474] [client 4.196.149.150:16539] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVDecBhDotAbVk6pZLeFrwAAAcg"]
[Sun Dec 28 15:38:24.229865 2025] [:error] [pid 42294:tid 42369] [client 4.196.149.150:10194] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVDecNTE5kYcYCOzl9GM6gAAAJM"]
[Sun Dec 28 15:38:24.293620 2025] [:error] [pid 29437:tid 29482] [client 4.196.149.150:16605] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVDecBhDotAbVk6pZLeFsAAAAdA"]
[Sun Dec 28 15:38:24.369994 2025] [:error] [pid 42292:tid 42316] [client 4.196.149.150:16614] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVDecJyOrM_vaFx1osYZPQAAABQ"]
[Sun Dec 28 15:38:24.539185 2025] [:error] [pid 42293:tid 42344] [client 4.196.149.150:16555] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVDecMvc9B-5cwN385Kj3AAAAFU"]
[Sun Dec 28 15:38:24.701514 2025] [:error] [pid 42292:tid 42319] [client 4.196.149.150:10236] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVDecJyOrM_vaFx1osYZPgAAABc"]
[Sun Dec 28 15:38:24.883021 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:16549] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVDecNoLv2L2zI_SpdWonwAAAUc"]
[Sun Dec 28 15:38:25.125909 2025] [:error] [pid 29437:tid 29488] [client 4.196.149.150:16513] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVDecRhDotAbVk6pZLeFsQAAAdY"]
[Sun Dec 28 15:38:25.299659 2025] [:error] [pid 29388:tid 29409] [client 4.196.149.150:10195] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVDecdoLv2L2zI_SpdWooAAAAU0"]
[Sun Dec 28 15:38:25.402010 2025] [:error] [pid 29437:tid 29486] [client 4.196.149.150:16618] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVDecRhDotAbVk6pZLeFswAAAdQ"]
[Sun Dec 28 15:38:25.559156 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:16517] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVDecTgtcN-KHAjWrX_p9QAAAM8"]
[Sun Dec 28 15:38:25.798258 2025] [:error] [pid 42292:tid 42307] [client 4.196.149.150:16562] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVDecZyOrM_vaFx1osYZPwAAAAs"]
[Sun Dec 28 15:38:25.949505 2025] [:error] [pid 42292:tid 42315] [client 4.196.149.150:16580] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVDecZyOrM_vaFx1osYZQAAAABM"]
[Sun Dec 28 15:38:26.111566 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:16520] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVDecpyOrM_vaFx1osYZQQAAAA0"]
[Sun Dec 28 15:38:26.238468 2025] [:error] [pid 42293:tid 42324] [client 4.196.149.150:16552] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVDecsvc9B-5cwN385Kj3gAAAEE"]
[Sun Dec 28 15:38:26.456517 2025] [:error] [pid 29437:tid 29471] [client 4.196.149.150:16558] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVDechhDotAbVk6pZLeFuAAAAcU"]
[Sun Dec 28 15:38:26.530962 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:16523] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVDecsvc9B-5cwN385Kj4gAAAEQ"]
[Sun Dec 28 15:38:26.664378 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:10114] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVDecsvc9B-5cwN385Kj5QAAAFg"]
[Sun Dec 28 15:38:26.932039 2025] [:error] [pid 43789:tid 43812] [client 4.196.149.150:16568] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVDecga-tUppni4CcCYCUAAAARU"]
[Sun Dec 28 15:38:27.181717 2025] [:error] [pid 43789:tid 43807] [client 4.196.149.150:10232] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVDecwa-tUppni4CcCYCUwAAARA"]
[Sun Dec 28 15:38:27.429292 2025] [:error] [pid 42292:tid 42305] [client 4.196.149.150:16536] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVDec5yOrM_vaFx1osYZQgAAAAk"]
[Sun Dec 28 15:38:27.477768 2025] [:error] [pid 29437:tid 29486] [client 4.196.149.150:10193] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVDecxhDotAbVk6pZLeFxgAAAdQ"]
[Sun Dec 28 15:38:27.588243 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:16610] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVDecxhDotAbVk6pZLeFyQAAAcA"]
[Sun Dec 28 15:38:27.928710 2025] [:error] [pid 43789:tid 43803] [client 4.196.149.150:10208] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVDecwa-tUppni4CcCYCWwAAAQw"]
[Sun Dec 28 15:38:28.180896 2025] [:error] [pid 29437:tid 29487] [client 4.196.149.150:16585] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVDedBhDotAbVk6pZLeF0wAAAdU"]
[Sun Dec 28 15:38:28.381306 2025] [:error] [pid 29388:tid 29407] [client 4.196.149.150:16578] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVDedNoLv2L2zI_SpdWopAAAAUs"]
[Sun Dec 28 15:38:28.602877 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:16546] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVDedMvc9B-5cwN385Kj7QAAAEw"]
[Sun Dec 28 15:38:28.712839 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:10206] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVDedLchzOOtNL9VPNKaRAAAAZM"]
[Sun Dec 28 15:38:28.754171 2025] [:error] [pid 29388:tid 29399] [client 4.196.149.150:16625] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVDedNoLv2L2zI_SpdWopQAAAUM"]
[Sun Dec 28 15:38:28.866050 2025] [:error] [pid 42292:tid 42312] [client 4.196.149.150:16581] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVDedJyOrM_vaFx1osYZRAAAABA"]
[Sun Dec 28 15:38:29.050347 2025] [:error] [pid 29388:tid 29420] [client 4.196.149.150:10189] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVDeddoLv2L2zI_SpdWopgAAAVg"]
[Sun Dec 28 15:38:29.235134 2025] [:error] [pid 42292:tid 42301] [client 4.196.149.150:16570] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVDedZyOrM_vaFx1osYZRQAAAAU"]
[Sun Dec 28 15:38:29.432227 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:16537] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVDedTgtcN-KHAjWrX_p9gAAANM"]
[Sun Dec 28 15:38:29.567563 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:16617] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVDedcvc9B-5cwN385Kj8AAAAFI"]
[Sun Dec 28 15:38:29.921243 2025] [:error] [pid 42378:tid 42380] [client 4.196.149.150:16611] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVDedTgtcN-KHAjWrX_p9wAAAMA"]
[Sun Dec 28 15:38:30.002746 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:10220] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVDedsvc9B-5cwN385Kj8QAAAEA"]
[Sun Dec 28 15:38:30.056720 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:10227] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVDedsvc9B-5cwN385Kj9AAAAEY"]
[Sun Dec 28 15:38:30.090471 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:16527] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVDedsvc9B-5cwN385Kj9QAAAEQ"]
[Sun Dec 28 15:38:30.204073 2025] [:error] [pid 29437:tid 29486] [client 4.196.149.150:16619] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVDedhhDotAbVk6pZLeF1wAAAdQ"]
[Sun Dec 28 15:38:30.261798 2025] [:error] [pid 42293:tid 42336] [client 4.196.149.150:10190] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVDedsvc9B-5cwN385Kj9gAAAE0"]
[Sun Dec 28 15:38:30.363626 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:16637] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVDedjgtcN-KHAjWrX_p-QAAAM4"]
[Sun Dec 28 15:38:30.554798 2025] [:error] [pid 29437:tid 29470] [client 4.196.149.150:16596] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVDedhhDotAbVk6pZLeF2AAAAcQ"]
[Sun Dec 28 15:38:30.596299 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:10226] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVDedsvc9B-5cwN385Kj9wAAAEk"]
[Sun Dec 28 15:38:30.631839 2025] [:error] [pid 29437:tid 29484] [client 4.196.149.150:16600] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVDedhhDotAbVk6pZLeF2QAAAdI"]
[Sun Dec 28 15:38:30.672844 2025] [:error] [pid 29437:tid 29479] [client 4.196.149.150:16588] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVDedhhDotAbVk6pZLeF2gAAAc0"]
[Sun Dec 28 15:38:30.725996 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:16597] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVDedhhDotAbVk6pZLeF2wAAAcA"]
[Sun Dec 28 15:38:30.779381 2025] [:error] [pid 42292:tid 42320] [client 4.196.149.150:16540] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVDedpyOrM_vaFx1osYZRgAAABg"]
[Sun Dec 28 15:38:30.829825 2025] [:error] [pid 42378:tid 42387] [client 4.196.149.150:16594] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVDedjgtcN-KHAjWrX_p-gAAAMc"]
[Sun Dec 28 15:38:30.897599 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:10198] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVDedsvc9B-5cwN385Kj-AAAAFg"]
[Sun Dec 28 15:38:30.992408 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:10138] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVDedrchzOOtNL9VPNKaSAAAAYM"]
[Sun Dec 28 15:38:31.442107 2025] [:error] [pid 42293:tid 42343] [client 4.196.149.150:16628] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDed8vc9B-5cwN385Kj-wAAAFQ"]
[Sun Dec 28 15:38:32.474618 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:16576] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDeeMvc9B-5cwN385Kj_wAAAFc"]
[Sun Dec 28 15:38:32.888597 2025] [:error] [pid 42378:tid 42393] [client 4.196.149.150:16633] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDeeDgtcN-KHAjWrX_p-wAAAM0"]
[Sun Dec 28 15:38:33.333062 2025] [:error] [pid 42378:tid 42396] [client 4.196.149.150:10200] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDeeTgtcN-KHAjWrX_p_AAAANA"]
[Sun Dec 28 15:38:33.630777 2025] [:error] [pid 29436:tid 29449] [client 4.196.149.150:16572] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVDeebchzOOtNL9VPNKaSgAAAYo"]
[Sun Dec 28 15:38:34.964648 2025] [:error] [pid 43789:tid 43794] [client 4.196.149.150:10164] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVDeega-tUppni4CcCYCYwAAAQM"]
[Sun Dec 28 15:38:35.032787 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:16531] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVDeezgtcN-KHAjWrX_p_gAAANU"]
[Sun Dec 28 15:38:35.117346 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:16556] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVDee8vc9B-5cwN385KkAgAAAEQ"]
[Sun Dec 28 15:38:35.202510 2025] [:error] [pid 42293:tid 42336] [client 4.196.149.150:16551] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVDee8vc9B-5cwN385KkAwAAAE0"]
[Sun Dec 28 15:38:35.286731 2025] [:error] [pid 42378:tid 42391] [client 4.196.149.150:10237] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVDeezgtcN-KHAjWrX_p_wAAAMs"]
[Sun Dec 28 15:38:35.401835 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:16629] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVDee8vc9B-5cwN385KkBAAAAE4"]
[Sun Dec 28 15:38:35.454502 2025] [:error] [pid 42293:tid 42339] [client 4.196.149.150:16607] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVDee8vc9B-5cwN385KkBQAAAFA"]
[Sun Dec 28 15:38:35.497612 2025] [:error] [pid 29436:tid 29457] [client 4.196.149.150:16519] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVDee7chzOOtNL9VPNKaTgAAAZI"]
[Sun Dec 28 15:38:35.804044 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:10209] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVDee8vc9B-5cwN385KkCAAAAFY"]
[Sun Dec 28 15:38:35.955519 2025] [:error] [pid 42292:tid 42297] [client 4.196.149.150:10141] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVDee5yOrM_vaFx1osYZSgAAAAE"]
[Sun Dec 28 15:38:36.180721 2025] [:error] [pid 29388:tid 29406] [client 4.196.149.150:16587] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVDefNoLv2L2zI_SpdWoqQAAAUo"]
[Sun Dec 28 15:38:36.370537 2025] [:error] [pid 42292:tid 42314] [client 4.196.149.150:10151] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVDefJyOrM_vaFx1osYZSwAAABI"]
[Sun Dec 28 15:38:36.448111 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:10191] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVDefJyOrM_vaFx1osYZTAAAAAI"]
[Sun Dec 28 15:38:36.707644 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:10197] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVDefNoLv2L2zI_SpdWorAAAAUc"]
[Sun Dec 28 15:38:36.931839 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:10187] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVDefMvc9B-5cwN385KkCQAAAEc"]
[Sun Dec 28 15:38:37.070166 2025] [:error] [pid 42294:tid 42369] [client 4.196.149.150:10212] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVDefdTE5kYcYCOzl9GM-gAAAJM"]
[Sun Dec 28 15:38:37.451930 2025] [:error] [pid 42378:tid 42397] [client 4.196.149.150:16632] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVDefTgtcN-KHAjWrX_qAAAAANE"]
[Sun Dec 28 15:38:37.708935 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:16554] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVDefQa-tUppni4CcCYCZQAAAQQ"]
[Sun Dec 28 15:38:37.861229 2025] [:error] [pid 42294:tid 42350] [client 4.196.149.150:10221] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVDefdTE5kYcYCOzl9GM-wAAAIA"]
[Sun Dec 28 15:38:37.971389 2025] [:error] [pid 29436:tid 29463] [client 4.196.149.150:10210] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVDefbchzOOtNL9VPNKaTwAAAZg"]
[Sun Dec 28 15:38:38.255862 2025] [:error] [pid 29388:tid 29402] [client 4.196.149.150:10183] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVDeftoLv2L2zI_SpdWorwAAAUY"]
[Sun Dec 28 15:38:38.576333 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:10238] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVDefsvc9B-5cwN385KkCwAAAEw"]
[Sun Dec 28 15:38:38.634956 2025] [:error] [pid 29388:tid 29405] [client 4.196.149.150:16564] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVDeftoLv2L2zI_SpdWosAAAAUk"]
[Sun Dec 28 15:38:38.792475 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:10049] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVDefjgtcN-KHAjWrX_qAQAAAMM"]
[Sun Dec 28 15:38:38.934863 2025] [:error] [pid 29388:tid 29412] [client 4.196.149.150:16574] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVDeftoLv2L2zI_SpdWosQAAAVA"]
[Sun Dec 28 15:38:39.035542 2025] [:error] [pid 43789:tid 43807] [client 4.196.149.150:10118] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVDefwa-tUppni4CcCYCZgAAARA"]
[Sun Dec 28 15:38:39.113130 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:10230] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVDef7chzOOtNL9VPNKaUQAAAZM"]
[Sun Dec 28 15:38:39.285446 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:10123] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDef9oLv2L2zI_SpdWosgAAAUQ"]
[Sun Dec 28 15:38:39.352081 2025] [:error] [pid 42292:tid 42308] [client 4.196.149.150:16612] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDef5yOrM_vaFx1osYZTgAAAAw"]
[Sun Dec 28 15:38:39.465510 2025] [:error] [pid 42378:tid 42381] [client 4.196.149.150:10211] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDefzgtcN-KHAjWrX_qAwAAAME"]
[Sun Dec 28 15:38:39.543982 2025] [:error] [pid 29388:tid 29413] [client 4.196.149.150:10214] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDef9oLv2L2zI_SpdWoswAAAVE"]
[Sun Dec 28 15:38:39.621183 2025] [:error] [pid 29388:tid 29407] [client 4.196.149.150:16577] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVDef9oLv2L2zI_SpdWotAAAAUs"]
[Sun Dec 28 15:38:39.708992 2025] [:error] [pid 42378:tid 42392] [client 4.196.149.150:10166] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVDefzgtcN-KHAjWrX_qBAAAAMw"]
[Sun Dec 28 15:38:39.787759 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:16559] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVDef8vc9B-5cwN385KkDQAAAEM"]
[Sun Dec 28 15:38:39.849525 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:16515] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVDef8vc9B-5cwN385KkDgAAAFM"]
[Sun Dec 28 15:38:39.902218 2025] [:error] [pid 42292:tid 42319] [client 4.196.149.150:10178] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVDef5yOrM_vaFx1osYZTwAAABc"]
[Sun Dec 28 15:38:40.014683 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:10234] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVDegDgtcN-KHAjWrX_qBQAAAMU"]
[Sun Dec 28 15:38:40.325496 2025] [:error] [pid 29388:tid 29404] [client 4.196.149.150:16534] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVDegNoLv2L2zI_SpdWotQAAAUg"]
[Sun Dec 28 15:38:40.871685 2025] [:error] [pid 42378:tid 42402] [client 4.196.149.150:10233] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVDegDgtcN-KHAjWrX_qBgAAANY"]
[Sun Dec 28 15:38:40.994610 2025] [:error] [pid 29388:tid 29397] [client 4.196.149.150:10157] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVDegNoLv2L2zI_SpdWouAAAAUE"]
[Sun Dec 28 15:38:41.168681 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:10223] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVDegcvc9B-5cwN385KkEAAAAEY"]
[Sun Dec 28 15:38:41.225969 2025] [:error] [pid 29388:tid 29418] [client 4.196.149.150:10213] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVDegdoLv2L2zI_SpdWougAAAVY"]
[Sun Dec 28 15:38:41.319508 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:10192] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVDegcvc9B-5cwN385KkEQAAAEQ"]
[Sun Dec 28 15:38:41.433032 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:16538] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDegRhDotAbVk6pZLeF3gAAAdg"]
[Sun Dec 28 15:38:41.525512 2025] [:error] [pid 29437:tid 29483] [client 4.196.149.150:10218] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDegRhDotAbVk6pZLeF3wAAAdE"]
[Sun Dec 28 15:38:41.582557 2025] [:error] [pid 29388:tid 29398] [client 4.196.149.150:10161] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDegdoLv2L2zI_SpdWouwAAAUI"]
[Sun Dec 28 15:38:41.673037 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:16547] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDegbchzOOtNL9VPNKaUwAAAYg"]
[Sun Dec 28 15:38:41.753327 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:16584] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVDegbchzOOtNL9VPNKaVAAAAYM"]
[Sun Dec 28 15:38:41.853390 2025] [:error] [pid 42292:tid 42315] [client 4.196.149.150:10229] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVDegZyOrM_vaFx1osYZUAAAABM"]
[Sun Dec 28 15:38:41.948951 2025] [:error] [pid 42378:tid 42384] [client 4.196.149.150:10180] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVDegTgtcN-KHAjWrX_qBwAAAMQ"]
[Sun Dec 28 15:38:42.156393 2025] [:error] [pid 42293:tid 42336] [client 4.196.149.150:10136] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVDegsvc9B-5cwN385KkEgAAAE0"]
[Sun Dec 28 15:38:42.531556 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:10147] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVDegsvc9B-5cwN385KkEwAAAE4"]
[Sun Dec 28 15:38:42.869124 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:16567] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVDegsvc9B-5cwN385KkFAAAAEk"]
[Sun Dec 28 15:38:43.149001 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:10143] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVDeg8vc9B-5cwN385KkFgAAAFg"]
[Sun Dec 28 15:38:43.446789 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:16516] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVDeg9oLv2L2zI_SpdWovQAAAUc"]
[Sun Dec 28 15:38:43.806225 2025] [:error] [pid 42292:tid 42301] [client 4.196.149.150:10196] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVDeg5yOrM_vaFx1osYZVAAAAAU"]
[Sun Dec 28 15:38:43.951358 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:10116] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVDeg7chzOOtNL9VPNKaWQAAAYY"]
[Sun Dec 28 15:38:44.174310 2025] [:error] [pid 29436:tid 29451] [client 4.196.149.150:10176] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVDehLchzOOtNL9VPNKaWgAAAYw"]
[Sun Dec 28 15:38:44.595520 2025] [:error] [pid 29388:tid 29402] [client 4.196.149.150:10186] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVDehNoLv2L2zI_SpdWovgAAAUY"]
[Sun Dec 28 15:38:44.763111 2025] [:error] [pid 29388:tid 29416] [client 4.196.149.150:16548] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVDehNoLv2L2zI_SpdWovwAAAVQ"]
[Sun Dec 28 15:38:45.230073 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:10134] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVDehcvc9B-5cwN385KkGAAAAFE"]
[Sun Dec 28 15:38:45.434094 2025] [:error] [pid 42292:tid 42310] [client 4.196.149.150:10115] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVDehZyOrM_vaFx1osYZVQAAAA4"]
[Sun Dec 28 15:38:45.655228 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:16544] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVDehcvc9B-5cwN385KkGQAAAEc"]
[Sun Dec 28 15:38:45.846638 2025] [:error] [pid 29437:tid 29489] [client 4.196.149.150:10224] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVDehRhDotAbVk6pZLeF4gAAAdc"]
[Sun Dec 28 15:38:46.229700 2025] [:error] [pid 42378:tid 42387] [client 4.196.149.150:10217] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVDehjgtcN-KHAjWrX_qCgAAAMc"]
[Sun Dec 28 15:38:46.496676 2025] [:error] [pid 29437:tid 29472] [client 4.196.149.150:16561] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVDehhhDotAbVk6pZLeF5QAAAcY"]
[Sun Dec 28 15:38:46.918768 2025] [:error] [pid 29388:tid 29405] [client 4.196.149.150:10150] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVDehtoLv2L2zI_SpdWowAAAAUk"]
[Sun Dec 28 15:38:47.323754 2025] [:error] [pid 29388:tid 29396] [client 4.196.149.150:10216] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVDeh9oLv2L2zI_SpdWowQAAAUA"]
[Sun Dec 28 15:38:47.527384 2025] [:error] [pid 42378:tid 42398] [client 4.196.149.150:10121] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVDehzgtcN-KHAjWrX_qCwAAANI"]
[Sun Dec 28 15:38:47.664913 2025] [:error] [pid 42378:tid 42393] [client 4.196.149.150:10175] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVDehzgtcN-KHAjWrX_qDAAAAM0"]
[Sun Dec 28 15:38:47.839338 2025] [:error] [pid 29436:tid 29440] [client 4.196.149.150:16608] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVDeh7chzOOtNL9VPNKaXAAAAYE"]
[Sun Dec 28 15:38:48.003618 2025] [:error] [pid 42292:tid 42302] [client 4.196.149.150:10139] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVDeiJyOrM_vaFx1osYZWAAAAAY"]
[Sun Dec 28 15:38:48.379239 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:16566] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVDeiJyOrM_vaFx1osYZWQAAAAI"]
[Sun Dec 28 15:38:49.030288 2025] [:error] [pid 29388:tid 29408] [client 4.196.149.150:10158] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVDeidoLv2L2zI_SpdWowgAAAUw"]
[Sun Dec 28 15:38:49.728187 2025] [:error] [pid 42294:tid 42365] [client 4.196.149.150:10165] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVDeidTE5kYcYCOzl9GM_wAAAI8"]
[Sun Dec 28 15:38:49.847092 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:16550] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVDeidoLv2L2zI_SpdWowwAAAUQ"]
[Sun Dec 28 15:38:49.886002 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:10054] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVDeiTgtcN-KHAjWrX_qDgAAANU"]
[Sun Dec 28 15:38:50.029462 2025] [:error] [pid 42294:tid 42352] [client 4.196.149.150:10060] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVDeitTE5kYcYCOzl9GNAQAAAII"]
[Sun Dec 28 15:38:50.167010 2025] [:error] [pid 29388:tid 29404] [client 4.196.149.150:16535] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVDeitoLv2L2zI_SpdWoxQAAAUg"]
[Sun Dec 28 15:38:50.403819 2025] [:error] [pid 42293:tid 42324] [client 4.196.149.150:10222] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVDeisvc9B-5cwN385KkHAAAAEE"]
[Sun Dec 28 15:38:51.543723 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:10199] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVDei8vc9B-5cwN385KkHgAAAEQ"]
[Sun Dec 28 15:38:51.828916 2025] [:error] [pid 29388:tid 29397] [client 4.196.149.150:16635] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVDei9oLv2L2zI_SpdWoxwAAAUE"]
[Sun Dec 28 15:38:52.098333 2025] [:error] [pid 29388:tid 29399] [client 4.196.149.150:10188] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVDejNoLv2L2zI_SpdWoyAAAAUM"]
[Sun Dec 28 15:38:52.135742 2025] [:error] [pid 29436:tid 29443] [client 4.196.149.150:10205] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDejLchzOOtNL9VPNKaYAAAAYQ"]
[Sun Dec 28 15:38:52.187282 2025] [:error] [pid 29388:tid 29417] [client 4.196.149.150:16601] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDejNoLv2L2zI_SpdWoyQAAAVU"]
[Sun Dec 28 15:38:52.357107 2025] [:error] [pid 29388:tid 29411] [client 4.196.149.150:16606] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDejNoLv2L2zI_SpdWoygAAAU8"]
[Sun Dec 28 15:38:52.680293 2025] [:error] [pid 43789:tid 43791] [client 4.196.149.150:10142] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDejAa-tUppni4CcCYCaQAAAQA"]
[Sun Dec 28 15:38:52.960465 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:10170] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVDejMvc9B-5cwN385KkIQAAAFg"]
[Sun Dec 28 15:38:53.217191 2025] [:error] [pid 42293:tid 42339] [client 4.196.149.150:10185] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVDejcvc9B-5cwN385KkIgAAAFA"]
[Sun Dec 28 15:38:53.496281 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:10215] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVDejTgtcN-KHAjWrX_qEAAAAMk"]
[Sun Dec 28 15:38:53.630189 2025] [:error] [pid 29388:tid 29401] [client 4.196.149.150:10239] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVDejdoLv2L2zI_SpdWozgAAAUU"]
[Sun Dec 28 15:38:54.049908 2025] [:error] [pid 42378:tid 42397] [client 4.196.149.150:16557] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVDejjgtcN-KHAjWrX_qEQAAANE"]
[Sun Dec 28 15:38:54.257564 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:10228] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVDejjgtcN-KHAjWrX_qEgAAAMM"]
[Sun Dec 28 15:38:54.496018 2025] [:error] [pid 29388:tid 29405] [client 4.196.149.150:10203] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVDejtoLv2L2zI_SpdWo0QAAAUk"]
[Sun Dec 28 15:38:55.142320 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:10219] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVDej9oLv2L2zI_SpdWo1AAAAUQ"]
[Sun Dec 28 15:38:55.853078 2025] [:error] [pid 29388:tid 29399] [client 4.196.149.150:16545] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVDej9oLv2L2zI_SpdWo1wAAAUM"]
[Sun Dec 28 15:38:56.126648 2025] [:error] [pid 29388:tid 29401] [client 4.196.149.150:10140] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVDekNoLv2L2zI_SpdWo2QAAAUU"]
[Sun Dec 28 15:38:56.219704 2025] [:error] [pid 29388:tid 29419] [client 4.196.149.150:10174] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVDekNoLv2L2zI_SpdWo2wAAAVc"]
[Sun Dec 28 15:38:56.290320 2025] [:error] [pid 43789:tid 43815] [client 4.196.149.150:10085] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVDekAa-tUppni4CcCYCagAAARg"]
[Sun Dec 28 15:38:56.401998 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:10235] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVDekNoLv2L2zI_SpdWo3AAAAUc"]
[Sun Dec 28 15:38:56.500414 2025] [:error] [pid 29388:tid 29420] [client 4.196.149.150:10156] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVDekNoLv2L2zI_SpdWo3QAAAVg"]
[Sun Dec 28 15:38:56.559944 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:10149] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVDekMvc9B-5cwN385KkIwAAAFY"]
[Sun Dec 28 15:38:56.723997 2025] [:error] [pid 42378:tid 42382] [client 4.196.149.150:10064] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVDekDgtcN-KHAjWrX_qEwAAAMI"]
[Sun Dec 28 15:38:57.032857 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:10084] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVDekZyOrM_vaFx1osYZXQAAAA0"]
[Sun Dec 28 15:38:57.196326 2025] [:error] [pid 29388:tid 29405] [client 4.196.149.150:10112] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVDekdoLv2L2zI_SpdWo4AAAAUk"]
[Sun Dec 28 15:38:57.249123 2025] [:error] [pid 42294:tid 42354] [client 4.196.149.150:10145] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVDekdTE5kYcYCOzl9GNBQAAAIQ"]
[Sun Dec 28 15:38:57.303416 2025] [:error] [pid 29436:tid 29446] [client 4.196.149.150:10132] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVDekbchzOOtNL9VPNKaYgAAAYc"]
[Sun Dec 28 15:38:57.426769 2025] [:error] [pid 42294:tid 42357] [client 4.196.149.150:10146] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVDekdTE5kYcYCOzl9GNBgAAAIc"]
[Sun Dec 28 15:38:57.521352 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:10120] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVDekcvc9B-5cwN385KkJAAAAFE"]
[Sun Dec 28 15:38:57.560897 2025] [:error] [pid 42378:tid 42381] [client 4.196.149.150:10059] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVDekTgtcN-KHAjWrX_qFQAAAME"]
[Sun Dec 28 15:38:57.619173 2025] [:error] [pid 42293:tid 42328] [client 4.196.149.150:10127] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVDekcvc9B-5cwN385KkJQAAAEU"]
[Sun Dec 28 15:38:57.726457 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:10220] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aVDekTgtcN-KHAjWrX_qFwAAAMU"]
[Sun Dec 28 15:38:57.827200 2025] [:error] [pid 29388:tid 29409] [client 4.196.149.150:10160] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aVDekdoLv2L2zI_SpdWo4QAAAU0"]
[Sun Dec 28 15:38:57.889178 2025] [:error] [pid 29388:tid 29408] [client 4.196.149.150:10099] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aVDekdoLv2L2zI_SpdWo4gAAAUw"]
[Sun Dec 28 15:38:58.229649 2025] [:error] [pid 29436:tid 29455] [client 4.196.149.150:10074] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php7"] [unique_id "aVDekrchzOOtNL9VPNKaYwAAAZA"]
[Sun Dec 28 15:38:58.535347 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:16604] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aVDeksvc9B-5cwN385KkJgAAAEc"]
[Sun Dec 28 15:38:59.141445 2025] [:error] [pid 29436:tid 29453] [client 4.196.149.150:10111] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aVDek7chzOOtNL9VPNKaZwAAAY4"]
[Sun Dec 28 15:38:59.677830 2025] [:error] [pid 29436:tid 29463] [client 4.196.149.150:10102] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aVDek7chzOOtNL9VPNKaagAAAZg"]
[Sun Dec 28 15:39:00.798709 2025] [:error] [pid 43789:tid 43801] [client 4.196.149.150:10073] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rss.php"] [unique_id "aVDelAa-tUppni4CcCYCbQAAAQo"]
[Sun Dec 28 15:39:01.642770 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:10181] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aVDelbchzOOtNL9VPNKacQAAAYM"]
[Sun Dec 28 15:39:02.095059 2025] [:error] [pid 42378:tid 42384] [client 4.196.149.150:10202] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aVDeljgtcN-KHAjWrX_qGAAAAMQ"]
[Sun Dec 28 15:39:02.636463 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:10058] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aVDelhhDotAbVk6pZLeF7QAAAcI"]
[Sun Dec 28 15:39:03.444511 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:16556] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pekok.php"] [unique_id "aVDel8vc9B-5cwN385KkKQAAAFI"]
[Sun Dec 28 15:39:04.050133 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:10126] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVDemMvc9B-5cwN385KkLAAAAEg"]
[Sun Dec 28 15:39:04.404192 2025] [:error] [pid 29437:tid 29472] [client 4.196.149.150:16573] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVDemBhDotAbVk6pZLeF7wAAAcY"]
[Sun Dec 28 15:39:04.499970 2025] [:error] [pid 42378:tid 42398] [client 4.196.149.150:16569] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVDemDgtcN-KHAjWrX_qHAAAANI"]
[Sun Dec 28 15:39:04.608644 2025] [:error] [pid 29388:tid 29401] [client 4.196.149.150:10201] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVDemNoLv2L2zI_SpdWo5QAAAUU"]
[Sun Dec 28 15:39:04.775016 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:10162] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aVDemMvc9B-5cwN385KkMAAAAE4"]
[Sun Dec 28 15:39:05.413181 2025] [:error] [pid 29436:tid 29450] [client 4.196.149.150:10105] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aVDembchzOOtNL9VPNKadgAAAYs"]
[Sun Dec 28 15:39:06.054681 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:10125] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aVDemsvc9B-5cwN385KkNAAAAEc"]
[Sun Dec 28 15:39:06.151080 2025] [:error] [pid 29436:tid 29443] [client 4.196.149.150:10144] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aa.php"] [unique_id "aVDemrchzOOtNL9VPNKaeAAAAYQ"]
[Sun Dec 28 15:39:06.256322 2025] [:error] [pid 42294:tid 42353] [client 4.196.149.150:10159] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aVDemtTE5kYcYCOzl9GNCAAAAIM"]
[Sun Dec 28 15:39:06.360877 2025] [:error] [pid 42378:tid 42396] [client 4.196.149.150:10048] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aVDemjgtcN-KHAjWrX_qHgAAANA"]
[Sun Dec 28 15:39:06.494283 2025] [:error] [pid 42378:tid 42391] [client 4.196.149.150:10090] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aVDemjgtcN-KHAjWrX_qHwAAAMs"]
[Sun Dec 28 15:39:06.850625 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:16526] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart.php"] [unique_id "aVDemrchzOOtNL9VPNKaeQAAAYM"]
[Sun Dec 28 15:39:07.312056 2025] [:error] [pid 29436:tid 29462] [client 4.196.149.150:10106] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aVDem7chzOOtNL9VPNKaegAAAZc"]
[Sun Dec 28 15:39:07.613496 2025] [:error] [pid 43789:tid 43792] [client 4.196.149.150:10076] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aVDemwa-tUppni4CcCYCbwAAAQE"]
[Sun Dec 28 15:39:07.741428 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:16582] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aVDem8vc9B-5cwN385KkNQAAAEI"]
[Sun Dec 28 15:39:07.841491 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:10077] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/compare.php"] [unique_id "aVDem8vc9B-5cwN385KkNgAAAFM"]
[Sun Dec 28 15:39:08.004801 2025] [:error] [pid 42293:tid 42344] [client 4.196.149.150:10167] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aVDenMvc9B-5cwN385KkNwAAAFU"]
[Sun Dec 28 15:39:08.198694 2025] [:error] [pid 42378:tid 42388] [client 4.196.149.150:10207] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aVDenDgtcN-KHAjWrX_qJAAAAMg"]
[Sun Dec 28 15:39:08.370168 2025] [:error] [pid 42293:tid 42343] [client 4.196.149.150:10036] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aVDenMvc9B-5cwN385KkOAAAAFQ"]
[Sun Dec 28 15:39:08.611931 2025] [:error] [pid 29436:tid 29455] [client 4.196.149.150:16613] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aVDenLchzOOtNL9VPNKaewAAAZA"]
[Sun Dec 28 15:39:08.769898 2025] [:error] [pid 42292:tid 42320] [client 4.196.149.150:10119] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDenJyOrM_vaFx1osYZYAAAABg"]
[Sun Dec 28 15:39:08.895169 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:10061] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDenBhDotAbVk6pZLeF8wAAAcs"]
[Sun Dec 28 15:39:09.346241 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:10130] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDencvc9B-5cwN385KkOwAAAEg"]
[Sun Dec 28 15:39:09.435267 2025] [:error] [pid 42292:tid 42310] [client 4.196.149.150:10117] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVDenZyOrM_vaFx1osYZYQAAAA4"]
[Sun Dec 28 15:39:09.521279 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:10056] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aVDenRhDotAbVk6pZLeF9QAAAcw"]
[Sun Dec 28 15:39:09.552948 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:10025] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aVDencvc9B-5cwN385KkPAAAAEY"]
[Sun Dec 28 15:39:09.645288 2025] [:error] [pid 42292:tid 42317] [client 4.196.149.150:10087] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aVDenZyOrM_vaFx1osYZYgAAABU"]
[Sun Dec 28 15:39:09.790281 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:10040] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aVDenRhDotAbVk6pZLeF9gAAAcI"]
[Sun Dec 28 15:39:09.956077 2025] [:error] [pid 42293:tid 42346] [client 4.196.149.150:10071] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atom.php"] [unique_id "aVDencvc9B-5cwN385KkPwAAAFc"]
[Sun Dec 28 15:39:10.048719 2025] [:error] [pid 29437:tid 29469] [client 4.196.149.150:10129] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atom.php"] [unique_id "aVDenhhDotAbVk6pZLeF9wAAAcM"]
[Sun Dec 28 15:39:10.249669 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:10163] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atom.php"] [unique_id "aVDenrchzOOtNL9VPNKafAAAAYY"]
[Sun Dec 28 15:39:10.515376 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:10153] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atom.php"] [unique_id "aVDenhhDotAbVk6pZLeF-QAAAcc"]
[Sun Dec 28 15:39:10.582264 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:16591] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVDensvc9B-5cwN385KkQAAAAEk"]
[Sun Dec 28 15:39:10.756011 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:10080] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVDenrchzOOtNL9VPNKafgAAAYk"]
[Sun Dec 28 15:39:10.927054 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:10231] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVDenhhDotAbVk6pZLeF-gAAAdg"]
[Sun Dec 28 15:39:11.121583 2025] [:error] [pid 42293:tid 42328] [client 4.196.149.150:10096] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVDen8vc9B-5cwN385KkQgAAAEU"]
[Sun Dec 28 15:39:11.310088 2025] [:error] [pid 29437:tid 29476] [client 4.196.149.150:10066] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVDenxhDotAbVk6pZLeF-wAAAco"]
[Sun Dec 28 15:39:11.431154 2025] [:error] [pid 42294:tid 42362] [client 4.196.149.150:10067] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVDen9TE5kYcYCOzl9GNDQAAAIw"]
[Sun Dec 28 15:39:11.526011 2025] [:error] [pid 42294:tid 42365] [client 4.196.149.150:10053] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVDen9TE5kYcYCOzl9GNDgAAAI8"]
[Sun Dec 28 15:39:11.697742 2025] [:error] [pid 29437:tid 29467] [client 4.196.149.150:10172] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVDenxhDotAbVk6pZLeF_QAAAcE"]
[Sun Dec 28 15:39:11.732696 2025] [:error] [pid 42294:tid 42352] [client 4.196.149.150:10171] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVDen9TE5kYcYCOzl9GNDwAAAII"]
[Sun Dec 28 15:39:11.774285 2025] [:error] [pid 29436:tid 29456] [client 4.196.149.150:10081] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVDen7chzOOtNL9VPNKafwAAAZE"]
[Sun Dec 28 15:39:11.865277 2025] [:error] [pid 29437:tid 29481] [client 4.196.149.150:10094] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVDenxhDotAbVk6pZLeF_gAAAc8"]
[Sun Dec 28 15:39:11.903424 2025] [:error] [pid 42294:tid 42370] [client 4.196.149.150:10107] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVDen9TE5kYcYCOzl9GNEAAAAJQ"]
[Sun Dec 28 15:39:11.957462 2025] [:error] [pid 29436:tid 29459] [client 4.196.149.150:10098] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVDen7chzOOtNL9VPNKagAAAAZQ"]
[Sun Dec 28 15:39:12.137028 2025] [:error] [pid 29437:tid 29484] [client 4.196.149.150:10031] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVDeoBhDotAbVk6pZLeGAQAAAdI"]
[Sun Dec 28 15:39:12.274929 2025] [:error] [pid 29436:tid 29463] [client 4.196.149.150:9995] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVDeoLchzOOtNL9VPNKagQAAAZg"]
[Sun Dec 28 15:39:12.373326 2025] [:error] [pid 29436:tid 29450] [client 4.196.149.150:9863] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVDeoLchzOOtNL9VPNKaggAAAYs"]
[Sun Dec 28 15:39:12.469987 2025] [:error] [pid 29437:tid 29470] [client 4.196.149.150:10204] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVDeoBhDotAbVk6pZLeGAgAAAcQ"]
[Sun Dec 28 15:39:12.579594 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:10050] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVDeoLchzOOtNL9VPNKagwAAAZM"]
[Sun Dec 28 15:39:12.654233 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:10052] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVDeoBhDotAbVk6pZLeGAwAAAcA"]
[Sun Dec 28 15:39:12.790815 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:10122] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVDeoBhDotAbVk6pZLeGBAAAAcw"]
[Sun Dec 28 15:39:12.899404 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:10101] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVDeoMvc9B-5cwN385KkRAAAAEc"]
[Sun Dec 28 15:39:12.929609 2025] [:error] [pid 29437:tid 29475] [client 4.196.149.150:10004] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVDeoBhDotAbVk6pZLeGBQAAAck"]
[Sun Dec 28 15:39:12.989110 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:10173] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVDeoMvc9B-5cwN385KkRQAAAEw"]
[Sun Dec 28 15:39:13.095565 2025] [:error] [pid 42293:tid 42326] [client 4.196.149.150:9989] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVDeocvc9B-5cwN385KkRgAAAEM"]
[Sun Dec 28 15:39:13.206046 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:10051] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVDeocvc9B-5cwN385KkRwAAAEI"]
[Sun Dec 28 15:39:13.240514 2025] [:error] [pid 29436:tid 29453] [client 4.196.149.150:10152] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVDeobchzOOtNL9VPNKahAAAAY4"]
[Sun Dec 28 15:39:13.545957 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:10028] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVDeocvc9B-5cwN385KkSQAAAFM"]
[Sun Dec 28 15:39:13.928094 2025] [:error] [pid 29437:tid 29483] [client 4.196.149.150:10055] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVDeoRhDotAbVk6pZLeGCAAAAdE"]
[Sun Dec 28 15:39:14.068988 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:10007] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVDeohhDotAbVk6pZLeGCQAAAcc"]
[Sun Dec 28 15:39:14.437452 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:10012] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVDeosvc9B-5cwN385KkSgAAAEg"]
[Sun Dec 28 15:39:14.585188 2025] [:error] [pid 42378:tid 42402] [client 4.196.149.150:16583] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVDeojgtcN-KHAjWrX_qJQAAANY"]
[Sun Dec 28 15:39:14.638271 2025] [:error] [pid 42294:tid 42374] [client 4.196.149.150:10011] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVDeotTE5kYcYCOzl9GNFgAAAJg"]
[Sun Dec 28 15:39:14.672276 2025] [:error] [pid 42294:tid 42359] [client 4.196.149.150:9985] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVDeotTE5kYcYCOzl9GNFwAAAIk"]
[Sun Dec 28 15:39:14.737469 2025] [:error] [pid 42292:tid 42296] [client 4.196.149.150:10131] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVDeopyOrM_vaFx1osYZYwAAAAA"]
[Sun Dec 28 15:39:14.783504 2025] [:error] [pid 42294:tid 42353] [client 4.196.149.150:10086] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVDeotTE5kYcYCOzl9GNGAAAAIM"]
[Sun Dec 28 15:39:14.822200 2025] [:error] [pid 42294:tid 42350] [client 4.196.149.150:9979] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVDeotTE5kYcYCOzl9GNGQAAAIA"]
[Sun Dec 28 15:39:14.856256 2025] [:error] [pid 42292:tid 42297] [client 4.196.149.150:10044] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVDeopyOrM_vaFx1osYZZAAAAAE"]
[Sun Dec 28 15:39:14.920335 2025] [:error] [pid 42294:tid 42364] [client 4.196.149.150:10093] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVDeotTE5kYcYCOzl9GNGwAAAI4"]
[Sun Dec 28 15:39:14.968780 2025] [:error] [pid 42294:tid 42369] [client 4.196.149.150:10135] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVDeotTE5kYcYCOzl9GNHAAAAJM"]
[Sun Dec 28 15:39:15.006007 2025] [:error] [pid 42294:tid 42361] [client 4.196.149.150:9984] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVDeo9TE5kYcYCOzl9GNHQAAAIs"]
[Sun Dec 28 15:39:15.068791 2025] [:error] [pid 42294:tid 42365] [client 4.196.149.150:10089] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVDeo9TE5kYcYCOzl9GNHwAAAI8"]
[Sun Dec 28 15:39:15.110081 2025] [:error] [pid 42294:tid 42352] [client 4.196.149.150:10082] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVDeo9TE5kYcYCOzl9GNIAAAAII"]
[Sun Dec 28 15:39:15.170445 2025] [:error] [pid 42294:tid 42356] [client 4.196.149.150:10001] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVDeo9TE5kYcYCOzl9GNIQAAAIY"]
[Sun Dec 28 15:39:15.204697 2025] [:error] [pid 42378:tid 42392] [client 4.196.149.150:10109] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVDeozgtcN-KHAjWrX_qJgAAAMw"]
[Sun Dec 28 15:39:15.243400 2025] [:error] [pid 42292:tid 42314] [client 4.196.149.150:10133] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVDeo5yOrM_vaFx1osYZZQAAABI"]
[Sun Dec 28 15:39:15.320928 2025] [:error] [pid 42378:tid 42384] [client 4.196.149.150:10095] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVDeozgtcN-KHAjWrX_qJwAAAMQ"]
[Sun Dec 28 15:39:15.350870 2025] [:error] [pid 42293:tid 42329] [client 4.196.149.150:10013] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVDeo8vc9B-5cwN385KkTAAAAEY"]
[Sun Dec 28 15:39:15.385388 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:10092] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVDeo8vc9B-5cwN385KkTQAAAFI"]
[Sun Dec 28 15:39:15.519087 2025] [:error] [pid 42293:tid 42336] [client 4.196.149.150:9921] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDeo8vc9B-5cwN385KkTgAAAE0"]
[Sun Dec 28 15:39:15.805147 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:9940] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDeozgtcN-KHAjWrX_qKAAAAM8"]
[Sun Dec 28 15:39:16.051485 2025] [:error] [pid 42292:tid 42316] [client 4.196.149.150:9997] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDepJyOrM_vaFx1osYZZwAAABQ"]
[Sun Dec 28 15:39:16.320297 2025] [:error] [pid 42292:tid 42308] [client 4.196.149.150:10062] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVDepJyOrM_vaFx1osYZaAAAAAw"]
[Sun Dec 28 15:39:16.612323 2025] [:error] [pid 29388:tid 29406] [client 4.196.149.150:9928] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVDepNoLv2L2zI_SpdWo5wAAAUo"]
[Sun Dec 28 15:39:16.645406 2025] [:error] [pid 42292:tid 42319] [client 4.196.149.150:10079] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVDepJyOrM_vaFx1osYZaQAAABc"]
[Sun Dec 28 15:39:16.697097 2025] [:error] [pid 43789:tid 43804] [client 4.196.149.150:10070] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVDepAa-tUppni4CcCYCcAAAAQ0"]
[Sun Dec 28 15:39:16.765078 2025] [:error] [pid 42294:tid 42371] [client 4.196.149.150:9967] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVDepNTE5kYcYCOzl9GNIgAAAJU"]
[Sun Dec 28 15:39:16.799421 2025] [:error] [pid 43789:tid 43800] [client 4.196.149.150:9867] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDepAa-tUppni4CcCYCcQAAAQk"]
[Sun Dec 28 15:39:16.885833 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:9996] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVDepDgtcN-KHAjWrX_qKQAAAM4"]
[Sun Dec 28 15:39:17.045236 2025] [:error] [pid 42378:tid 42380] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Dec 28 15:39:17.066458 2025] [:error] [pid 42378:tid 42400] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Sun Dec 28 15:39:17.086261 2025] [:error] [pid 42378:tid 42403] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Sun Dec 28 15:39:17.106470 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Dec 28 15:39:17.129106 2025] [:error] [pid 42378:tid 42387] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun Dec 28 15:39:17.158917 2025] [:error] [pid 42378:tid 42398] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Dec 28 15:39:17.177734 2025] [:error] [pid 42378:tid 42393] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Dec 28 15:39:17.197792 2025] [:error] [pid 42378:tid 42396] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Dec 28 15:39:17.244067 2025] [:error] [pid 42378:tid 42391] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Dec 28 15:39:17.276475 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Dec 28 15:39:17.302154 2025] [:error] [pid 42378:tid 42386] [client 4.196.149.150:10075] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sun Dec 28 15:39:17.347283 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:10075] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVDepTgtcN-KHAjWrX_qNQAAAMk"]
[Sun Dec 28 15:39:17.462369 2025] [:error] [pid 42292:tid 42312] [client 4.196.149.150:10027] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVDepZyOrM_vaFx1osYZawAAABA"]
[Sun Dec 28 15:39:17.514934 2025] [:error] [pid 42293:tid 42323] [client 4.196.149.150:9993] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVDepcvc9B-5cwN385KkUQAAAEA"]
[Sun Dec 28 15:39:17.585168 2025] [:error] [pid 43789:tid 43794] [client 4.196.149.150:10057] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVDepQa-tUppni4CcCYCcwAAAQM"]
[Sun Dec 28 15:39:17.769305 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:10078] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVDepcvc9B-5cwN385KkUgAAAEk"]
[Sun Dec 28 15:39:17.809272 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:10091] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVDepcvc9B-5cwN385KkUwAAAFY"]
[Sun Dec 28 15:39:17.861841 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:9946] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVDepcvc9B-5cwN385KkVAAAAFE"]
[Sun Dec 28 15:39:17.918123 2025] [:error] [pid 42293:tid 42328] [client 4.196.149.150:10148] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVDepcvc9B-5cwN385KkVQAAAEU"]
[Sun Dec 28 15:39:17.947492 2025] [:error] [pid 42293:tid 42330] [client 4.196.149.150:9934] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVDepcvc9B-5cwN385KkVgAAAEc"]
[Sun Dec 28 15:39:17.989565 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:10035] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVDepcvc9B-5cwN385KkVwAAAEw"]
[Sun Dec 28 15:39:18.039602 2025] [:error] [pid 29436:tid 29452] [client 4.196.149.150:9862] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVDeprchzOOtNL9VPNKaiAAAAY0"]
[Sun Dec 28 15:39:18.107462 2025] [:error] [pid 29436:tid 29457] [client 4.196.149.150:10100] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVDeprchzOOtNL9VPNKaiQAAAZI"]
[Sun Dec 28 15:39:18.142319 2025] [:error] [pid 29436:tid 29442] [client 4.196.149.150:9991] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVDeprchzOOtNL9VPNKaigAAAYM"]
[Sun Dec 28 15:39:18.194357 2025] [:error] [pid 29436:tid 29462] [client 4.196.149.150:16579] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVDeprchzOOtNL9VPNKaiwAAAZc"]
[Sun Dec 28 15:39:18.333960 2025] [:error] [pid 29436:tid 29444] [client 4.196.149.150:10110] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVDeprchzOOtNL9VPNKajAAAAYU"]
[Sun Dec 28 15:39:18.408521 2025] [:error] [pid 29436:tid 29446] [client 4.196.149.150:10128] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVDeprchzOOtNL9VPNKajQAAAYc"]
[Sun Dec 28 15:39:18.453106 2025] [:error] [pid 42294:tid 42366] [client 4.196.149.150:9935] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVDeptTE5kYcYCOzl9GNIwAAAJA"]
[Sun Dec 28 15:39:18.495198 2025] [:error] [pid 42294:tid 42355] [client 4.196.149.150:9994] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVDeptTE5kYcYCOzl9GNJAAAAIU"]
[Sun Dec 28 15:39:18.547521 2025] [:error] [pid 42378:tid 42397] [client 4.196.149.150:9998] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVDepjgtcN-KHAjWrX_qNgAAANE"]
[Sun Dec 28 15:39:18.579290 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:10168] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVDepsvc9B-5cwN385KkWAAAAEI"]
[Sun Dec 28 15:39:18.622872 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:9930] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVDepsvc9B-5cwN385KkWgAAAFM"]
[Sun Dec 28 15:39:18.809979 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:10155] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVDepga-tUppni4CcCYCdgAAAQQ"]
[Sun Dec 28 15:39:18.962578 2025] [:error] [pid 42293:tid 42344] [client 4.196.149.150:10108] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVDepsvc9B-5cwN385KkXAAAAFU"]
[Sun Dec 28 15:39:19.257738 2025] [:error] [pid 42293:tid 42338] [client 4.196.149.150:10103] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVDep8vc9B-5cwN385KkXQAAAE8"]
[Sun Dec 28 15:39:19.696486 2025] [:error] [pid 42294:tid 42351] [client 4.196.149.150:10006] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVDep9TE5kYcYCOzl9GNJgAAAIE"]
[Sun Dec 28 15:39:19.788452 2025] [:error] [pid 43789:tid 43797] [client 4.196.149.150:9992] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVDepwa-tUppni4CcCYCdwAAAQY"]
[Sun Dec 28 15:39:20.227438 2025] [:error] [pid 42292:tid 42306] [client 4.196.149.150:10038] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVDeqJyOrM_vaFx1osYZbgAAAAo"]
[Sun Dec 28 15:39:20.594845 2025] [:error] [pid 42292:tid 42305] [client 4.196.149.150:9920] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVDeqJyOrM_vaFx1osYZcAAAAAk"]
[Sun Dec 28 15:39:20.900872 2025] [:error] [pid 42292:tid 42310] [client 4.196.149.150:10000] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVDeqJyOrM_vaFx1osYZcwAAAA4"]
[Sun Dec 28 15:39:20.985677 2025] [:error] [pid 29436:tid 29449] [client 4.196.149.150:10124] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVDeqLchzOOtNL9VPNKajwAAAYo"]
[Sun Dec 28 15:39:21.033936 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:9957] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVDeqTgtcN-KHAjWrX_qNwAAAMM"]
[Sun Dec 28 15:39:21.097230 2025] [:error] [pid 42294:tid 42353] [client 4.196.149.150:9939] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVDeqdTE5kYcYCOzl9GNKAAAAIM"]
[Sun Dec 28 15:39:21.131164 2025] [:error] [pid 29436:tid 29445] [client 4.196.149.150:9859] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVDeqbchzOOtNL9VPNKakAAAAYY"]
[Sun Dec 28 15:39:21.189476 2025] [:error] [pid 42294:tid 42350] [client 4.196.149.150:10104] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVDeqdTE5kYcYCOzl9GNKQAAAIA"]
[Sun Dec 28 15:39:21.256358 2025] [:error] [pid 29436:tid 29460] [client 4.196.149.150:10018] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVDeqbchzOOtNL9VPNKakQAAAZU"]
[Sun Dec 28 15:39:21.422920 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:10021] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVDeqbchzOOtNL9VPNKakgAAAYk"]
[Sun Dec 28 15:39:21.587685 2025] [:error] [pid 43789:tid 43815] [client 4.196.149.150:9999] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVDeqQa-tUppni4CcCYCeQAAARg"]
[Sun Dec 28 15:39:21.699657 2025] [:error] [pid 42378:tid 42390] [client 4.196.149.150:9987] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVDeqTgtcN-KHAjWrX_qOgAAAMo"]
[Sun Dec 28 15:39:21.872088 2025] [:error] [pid 29388:tid 29409] [client 4.196.149.150:9950] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVDeqdoLv2L2zI_SpdWo6gAAAU0"]
[Sun Dec 28 15:39:21.959611 2025] [:error] [pid 42378:tid 42402] [client 4.196.149.150:10065] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVDeqTgtcN-KHAjWrX_qOwAAANY"]
[Sun Dec 28 15:39:22.188189 2025] [:error] [pid 42378:tid 42384] [client 4.196.149.150:10034] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVDeqjgtcN-KHAjWrX_qPAAAAMQ"]
[Sun Dec 28 15:39:22.325971 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:9952] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVDeqjgtcN-KHAjWrX_qPQAAAM8"]
[Sun Dec 28 15:39:22.461070 2025] [:error] [pid 42294:tid 42361] [client 4.196.149.150:9963] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVDeqtTE5kYcYCOzl9GNKwAAAIs"]
[Sun Dec 28 15:39:22.564062 2025] [:error] [pid 43789:tid 43811] [client 4.196.149.150:9953] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVDeqga-tUppni4CcCYCegAAARQ"]
[Sun Dec 28 15:39:22.650992 2025] [:error] [pid 29437:tid 29470] [client 4.196.149.150:9885] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVDeqhhDotAbVk6pZLeGDgAAAcQ"]
[Sun Dec 28 15:39:22.765841 2025] [:error] [pid 42292:tid 42302] [client 4.196.149.150:10005] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVDeqpyOrM_vaFx1osYZdgAAAAY"]
[Sun Dec 28 15:39:22.875566 2025] [:error] [pid 42294:tid 42362] [client 4.196.149.150:10009] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVDeqtTE5kYcYCOzl9GNLgAAAIw"]
[Sun Dec 28 15:39:22.923538 2025] [:error] [pid 42292:tid 42296] [client 4.196.149.150:9925] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVDeqpyOrM_vaFx1osYZdwAAAAA"]
[Sun Dec 28 15:39:22.985124 2025] [:error] [pid 42294:tid 42370] [client 4.196.149.150:10132] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVDeqtTE5kYcYCOzl9GNLwAAAJQ"]
[Sun Dec 28 15:39:23.091255 2025] [:error] [pid 42292:tid 42297] [client 4.196.149.150:9818] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVDeq5yOrM_vaFx1osYZeAAAAAE"]
[Sun Dec 28 15:39:23.180906 2025] [:error] [pid 42378:tid 42380] [client 4.196.149.150:9975] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVDeqzgtcN-KHAjWrX_qPwAAAMA"]
[Sun Dec 28 15:39:23.279665 2025] [:error] [pid 42378:tid 42400] [client 4.196.149.150:9972] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVDeqzgtcN-KHAjWrX_qQAAAANQ"]
[Sun Dec 28 15:39:23.359616 2025] [:error] [pid 42292:tid 42314] [client 4.196.149.150:10032] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVDeq5yOrM_vaFx1osYZeQAAABI"]
[Sun Dec 28 15:39:23.623270 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:10015] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVDeqxhDotAbVk6pZLeGDwAAAcw"]
[Sun Dec 28 15:39:23.830625 2025] [:error] [pid 42293:tid 42324] [client 4.196.149.150:10083] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVDeq8vc9B-5cwN385KkXgAAAEE"]
[Sun Dec 28 15:39:24.007231 2025] [:error] [pid 29436:tid 29450] [client 4.196.149.150:9857] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVDerLchzOOtNL9VPNKalAAAAYs"]
[Sun Dec 28 15:39:24.132641 2025] [:error] [pid 42292:tid 42300] [client 4.196.149.150:9931] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVDerJyOrM_vaFx1osYZewAAAAQ"]
[Sun Dec 28 15:39:24.304253 2025] [:error] [pid 42292:tid 42312] [client 4.196.149.150:9870] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVDerJyOrM_vaFx1osYZfAAAABA"]
[Sun Dec 28 15:39:24.484460 2025] [:error] [pid 42294:tid 42360] [client 4.196.149.150:9986] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVDerNTE5kYcYCOzl9GNMQAAAIo"]
[Sun Dec 28 15:39:24.593508 2025] [:error] [pid 29436:tid 29458] [client 4.196.149.150:10154] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVDerLchzOOtNL9VPNKalQAAAZM"]
[Sun Dec 28 15:39:24.726564 2025] [:error] [pid 42292:tid 42299] [client 4.196.149.150:10046] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVDerJyOrM_vaFx1osYZfgAAAAM"]
[Sun Dec 28 15:39:24.775759 2025] [:error] [pid 42292:tid 42315] [client 4.196.149.150:10088] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVDerJyOrM_vaFx1osYZfwAAABM"]
[Sun Dec 28 15:39:24.814863 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:9947] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVDerBhDotAbVk6pZLeGEQAAAcs"]
[Sun Dec 28 15:39:24.916640 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:9871] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVDerMvc9B-5cwN385KkXwAAAFg"]
[Sun Dec 28 15:39:24.995192 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:10169] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVDerJyOrM_vaFx1osYZgAAAAA0"]
[Sun Dec 28 15:39:25.037858 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:10022] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVDercvc9B-5cwN385KkYQAAAEQ"]
[Sun Dec 28 15:39:25.085148 2025] [:error] [pid 42292:tid 42313] [client 4.196.149.150:10003] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVDerZyOrM_vaFx1osYZgQAAABE"]
[Sun Dec 28 15:39:25.323926 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:9942] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVDercvc9B-5cwN385KkYwAAAEk"]
[Sun Dec 28 15:39:25.421514 2025] [:error] [pid 42293:tid 42328] [client 4.196.149.150:9876] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVDercvc9B-5cwN385KkZAAAAEU"]
[Sun Dec 28 15:39:25.616646 2025] [:error] [pid 29436:tid 29453] [client 4.196.149.150:10045] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVDerbchzOOtNL9VPNKalgAAAY4"]
[Sun Dec 28 15:39:25.728471 2025] [:error] [pid 29436:tid 29441] [client 4.196.149.150:9861] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVDerbchzOOtNL9VPNKamAAAAYI"]
[Sun Dec 28 15:39:25.879775 2025] [:error] [pid 29436:tid 29454] [client 4.196.149.150:10137] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVDerbchzOOtNL9VPNKamQAAAY8"]
[Sun Dec 28 15:39:25.957124 2025] [:error] [pid 29436:tid 29461] [client 4.196.149.150:9872] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVDerbchzOOtNL9VPNKamgAAAZY"]
[Sun Dec 28 15:39:26.274853 2025] [:error] [pid 29436:tid 29452] [client 4.196.149.150:9990] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVDerrchzOOtNL9VPNKamwAAAY0"]
[Sun Dec 28 15:39:26.496120 2025] [:error] [pid 42378:tid 42393] [client 4.196.149.150:10020] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVDerjgtcN-KHAjWrX_qQwAAAM0"]
[Sun Dec 28 15:39:26.643365 2025] [:error] [pid 42292:tid 42320] [client 4.196.149.150:9968] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVDerpyOrM_vaFx1osYZhQAAABg"]
[Sun Dec 28 15:39:26.752050 2025] [:error] [pid 42378:tid 42401] [client 4.196.149.150:9945] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVDerjgtcN-KHAjWrX_qRAAAANU"]
[Sun Dec 28 15:39:26.851778 2025] [:error] [pid 42378:tid 42386] [client 4.196.149.150:10019] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVDerjgtcN-KHAjWrX_qRQAAAMY"]
[Sun Dec 28 15:39:26.994504 2025] [:error] [pid 29436:tid 29457] [client 4.196.149.150:10068] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVDerrchzOOtNL9VPNKanAAAAZI"]
[Sun Dec 28 15:39:27.037003 2025] [:error] [pid 29436:tid 29462] [client 4.196.149.150:9941] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVDer7chzOOtNL9VPNKangAAAZc"]
[Sun Dec 28 15:39:27.067855 2025] [:error] [pid 29436:tid 29444] [client 4.196.149.150:10047] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVDer7chzOOtNL9VPNKanwAAAYU"]
[Sun Dec 28 15:39:27.100207 2025] [:error] [pid 29437:tid 29471] [client 4.196.149.150:9914] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVDerxhDotAbVk6pZLeGEwAAAcU"]
[Sun Dec 28 15:39:27.200655 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:9802] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVDer7chzOOtNL9VPNKaoAAAAYg"]
[Sun Dec 28 15:39:27.290175 2025] [:error] [pid 43789:tid 43803] [client 4.196.149.150:9821] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVDerwa-tUppni4CcCYCewAAAQw"]
[Sun Dec 28 15:39:27.343577 2025] [:error] [pid 42294:tid 42366] [client 4.196.149.150:9898] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVDer9TE5kYcYCOzl9GNMgAAAJA"]
[Sun Dec 28 15:39:27.420476 2025] [:error] [pid 43789:tid 43802] [client 4.196.149.150:9793] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVDerwa-tUppni4CcCYCfAAAAQs"]
[Sun Dec 28 15:39:27.468418 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:10010] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVDer8vc9B-5cwN385KkZgAAAFM"]
[Sun Dec 28 15:39:27.563854 2025] [:error] [pid 43789:tid 43801] [client 4.196.149.150:9933] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVDerwa-tUppni4CcCYCfQAAAQo"]
[Sun Dec 28 15:39:27.637468 2025] [:error] [pid 42293:tid 42344] [client 4.196.149.150:9965] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVDer8vc9B-5cwN385KkZwAAAFU"]
[Sun Dec 28 15:39:27.836377 2025] [:error] [pid 42294:tid 42358] [client 4.196.149.150:10029] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVDer9TE5kYcYCOzl9GNNAAAAIg"]
[Sun Dec 28 15:39:28.034826 2025] [:error] [pid 42378:tid 42397] [client 4.196.149.150:10008] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVDesDgtcN-KHAjWrX_qRwAAANE"]
[Sun Dec 28 15:39:28.207477 2025] [:error] [pid 43789:tid 43805] [client 4.196.149.150:10184] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVDesAa-tUppni4CcCYCfgAAAQ4"]
[Sun Dec 28 15:39:28.320384 2025] [:error] [pid 42294:tid 42354] [client 4.196.149.150:9944] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVDesNTE5kYcYCOzl9GNNQAAAIQ"]
[Sun Dec 28 15:39:28.437628 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:10026] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVDesLchzOOtNL9VPNKapQAAAYk"]
[Sun Dec 28 15:39:28.559224 2025] [:error] [pid 42378:tid 42383] [client 4.196.149.150:9937] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVDesDgtcN-KHAjWrX_qSAAAAMM"]
[Sun Dec 28 15:39:28.688017 2025] [:error] [pid 43789:tid 43804] [client 4.196.149.150:10039] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVDesAa-tUppni4CcCYCgAAAAQ0"]
[Sun Dec 28 15:39:28.798420 2025] [:error] [pid 42294:tid 42351] [client 4.196.149.150:9956] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVDesNTE5kYcYCOzl9GNNwAAAIE"]
[Sun Dec 28 15:39:28.981597 2025] [:error] [pid 42378:tid 42381] [client 4.196.149.150:9886] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVDesDgtcN-KHAjWrX_qSQAAAME"]
[Sun Dec 28 15:39:29.147684 2025] [:error] [pid 42294:tid 42350] [client 4.196.149.150:9880] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVDesdTE5kYcYCOzl9GNOAAAAIA"]
[Sun Dec 28 15:39:29.232027 2025] [:error] [pid 29388:tid 29410] [client 4.196.149.150:9959] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVDesdoLv2L2zI_SpdWo6wAAAU4"]
[Sun Dec 28 15:39:29.372183 2025] [:error] [pid 43789:tid 43794] [client 4.196.149.150:9970] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVDesQa-tUppni4CcCYCgQAAAQM"]
[Sun Dec 28 15:39:29.419352 2025] [:error] [pid 42292:tid 42299] [client 4.196.149.150:9907] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVDesZyOrM_vaFx1osYZhwAAAAM"]
[Sun Dec 28 15:39:29.640728 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:9974] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVDesZyOrM_vaFx1osYZiAAAAA0"]
[Sun Dec 28 15:39:29.730965 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:9964] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVDesTgtcN-KHAjWrX_qTAAAAMU"]
[Sun Dec 28 15:39:29.864427 2025] [:error] [pid 29436:tid 29457] [client 4.196.149.150:10002] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVDesbchzOOtNL9VPNKaqwAAAZI"]
[Sun Dec 28 15:39:29.976219 2025] [:error] [pid 29436:tid 29462] [client 4.196.149.150:9962] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVDesbchzOOtNL9VPNKarAAAAZc"]
[Sun Dec 28 15:39:30.177208 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:9926] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVDestoLv2L2zI_SpdWo7AAAAUQ"]
[Sun Dec 28 15:39:30.267621 2025] [:error] [pid 29437:tid 29469] [client 4.196.149.150:10042] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVDeshhDotAbVk6pZLeGFAAAAcM"]
[Sun Dec 28 15:39:30.438233 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:9988] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVDeshhDotAbVk6pZLeGFQAAAcc"]
[Sun Dec 28 15:39:30.582191 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:9843] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVDessvc9B-5cwN385KkbAAAAE4"]
[Sun Dec 28 15:39:30.795448 2025] [:error] [pid 42293:tid 42347] [client 4.196.149.150:10033] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVDessvc9B-5cwN385KkbgAAAFg"]
[Sun Dec 28 15:39:30.925265 2025] [:error] [pid 42293:tid 42327] [client 4.196.149.150:9929] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVDessvc9B-5cwN385KkbwAAAEQ"]
[Sun Dec 28 15:39:31.003423 2025] [:error] [pid 43789:tid 43798] [client 4.196.149.150:9873] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVDeswa-tUppni4CcCYCgwAAAQc"]
[Sun Dec 28 15:39:31.112671 2025] [:error] [pid 42378:tid 42402] [client 4.196.149.150:10225] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVDeszgtcN-KHAjWrX_qTQAAANY"]
[Sun Dec 28 15:39:31.248954 2025] [:error] [pid 29388:tid 29413] [client 4.196.149.150:9832] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVDes9oLv2L2zI_SpdWo7QAAAVE"]
[Sun Dec 28 15:39:31.292828 2025] [:error] [pid 43789:tid 43813] [client 4.196.149.150:10072] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVDeswa-tUppni4CcCYChAAAARY"]
[Sun Dec 28 15:39:31.375564 2025] [:error] [pid 29388:tid 29404] [client 4.196.149.150:9905] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVDes9oLv2L2zI_SpdWo7wAAAUg"]
[Sun Dec 28 15:39:31.500959 2025] [:error] [pid 29388:tid 29398] [client 4.196.149.150:9882] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVDes9oLv2L2zI_SpdWo8AAAAUI"]
[Sun Dec 28 15:39:31.537160 2025] [:error] [pid 29388:tid 29416] [client 4.196.149.150:10113] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVDes9oLv2L2zI_SpdWo8QAAAVQ"]
[Sun Dec 28 15:39:31.583403 2025] [:error] [pid 43789:tid 43810] [client 4.196.149.150:9878] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVDeswa-tUppni4CcCYChQAAARM"]
[Sun Dec 28 15:39:31.645353 2025] [:error] [pid 29388:tid 29397] [client 4.196.149.150:9891] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVDes9oLv2L2zI_SpdWo8gAAAUE"]
[Sun Dec 28 15:39:31.740822 2025] [:error] [pid 29388:tid 29415] [client 4.196.149.150:9948] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVDes9oLv2L2zI_SpdWo8wAAAVM"]
[Sun Dec 28 15:39:31.795622 2025] [:error] [pid 29436:tid 29450] [client 4.196.149.150:9958] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVDes7chzOOtNL9VPNKatgAAAYs"]
[Sun Dec 28 15:39:31.889518 2025] [:error] [pid 29437:tid 29476] [client 4.196.149.150:9966] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVDesxhDotAbVk6pZLeGGAAAAco"]
[Sun Dec 28 15:39:32.150890 2025] [:error] [pid 42292:tid 42316] [client 4.196.149.150:9884] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVDetJyOrM_vaFx1osYZiwAAABQ"]
[Sun Dec 28 15:39:32.534195 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:9919] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVDetAa-tUppni4CcCYChwAAAQQ"]
[Sun Dec 28 15:39:32.746255 2025] [:error] [pid 42294:tid 42372] [client 4.196.149.150:10014] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVDetNTE5kYcYCOzl9GNPQAAAJY"]
[Sun Dec 28 15:39:32.857751 2025] [:error] [pid 42378:tid 42395] [client 4.196.149.150:9960] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVDetDgtcN-KHAjWrX_qTgAAAM8"]
[Sun Dec 28 15:39:32.907170 2025] [:error] [pid 43789:tid 43807] [client 4.196.149.150:9910] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVDetAa-tUppni4CcCYCiAAAARA"]
[Sun Dec 28 15:39:33.011354 2025] [:error] [pid 29388:tid 29419] [client 4.196.149.150:9875] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVDetdoLv2L2zI_SpdWo9AAAAVc"]
[Sun Dec 28 15:39:33.104229 2025] [:error] [pid 42378:tid 42404] [client 4.196.149.150:9951] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVDetTgtcN-KHAjWrX_qUAAAANg"]
[Sun Dec 28 15:39:33.135318 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:9874] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVDetTgtcN-KHAjWrX_qUgAAAM4"]
[Sun Dec 28 15:39:33.182808 2025] [:error] [pid 43789:tid 43796] [client 4.196.149.150:9865] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVDetQa-tUppni4CcCYCiQAAAQU"]
[Sun Dec 28 15:39:33.229443 2025] [:error] [pid 42293:tid 42332] [client 4.196.149.150:9936] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVDetcvc9B-5cwN385KkcQAAAEk"]
[Sun Dec 28 15:39:33.263476 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:9981] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVDetcvc9B-5cwN385KkcgAAAFY"]
[Sun Dec 28 15:39:33.298819 2025] [:error] [pid 29436:tid 29440] [client 4.196.149.150:9932] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVDetbchzOOtNL9VPNKauwAAAYE"]
[Sun Dec 28 15:39:33.344702 2025] [:error] [pid 42378:tid 42403] [client 4.196.149.150:9904] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aVDetTgtcN-KHAjWrX_qUwAAANc"]
[Sun Dec 28 15:39:33.373704 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:9858] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aVDetcvc9B-5cwN385KkcwAAAFE"]
[Sun Dec 28 15:39:33.425117 2025] [:error] [pid 42378:tid 42387] [client 4.196.149.150:9927] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aVDetTgtcN-KHAjWrX_qVQAAAMc"]
[Sun Dec 28 15:39:33.493022 2025] [:error] [pid 29436:tid 29448] [client 4.196.149.150:10119] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aVDetbchzOOtNL9VPNKavQAAAYk"]
[Sun Dec 28 15:39:33.630138 2025] [:error] [pid 43789:tid 43814] [client 4.196.149.150:9954] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDetQa-tUppni4CcCYCigAAARc"]
[Sun Dec 28 15:39:33.665741 2025] [:error] [pid 42293:tid 42335] [client 4.196.149.150:9810] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDetcvc9B-5cwN385KkdgAAAEw"]
[Sun Dec 28 15:39:33.791474 2025] [:error] [pid 29436:tid 29456] [client 4.196.149.150:9943] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDetbchzOOtNL9VPNKavwAAAZE"]
[Sun Dec 28 15:39:33.929225 2025] [:error] [pid 43789:tid 43797] [client 4.196.149.150:9917] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVDetQa-tUppni4CcCYCiwAAAQY"]
[Sun Dec 28 15:39:34.013519 2025] [:error] [pid 43789:tid 43799] [client 4.196.149.150:9800] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aVDetga-tUppni4CcCYCjAAAAQg"]
[Sun Dec 28 15:39:34.070936 2025] [:error] [pid 42378:tid 42398] [client 4.196.149.150:9803] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aVDetjgtcN-KHAjWrX_qWAAAANI"]
[Sun Dec 28 15:39:34.183542 2025] [:error] [pid 42293:tid 42342] [client 4.196.149.150:9906] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aVDetsvc9B-5cwN385KkeQAAAFM"]
[Sun Dec 28 15:39:34.297694 2025] [:error] [pid 42293:tid 42344] [client 4.196.149.150:9819] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aVDetsvc9B-5cwN385KkegAAAFU"]
[Sun Dec 28 15:39:34.410424 2025] [:error] [pid 43789:tid 43809] [client 4.196.149.150:10024] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aVDetga-tUppni4CcCYCjQAAARI"]
[Sun Dec 28 15:39:34.531392 2025] [:error] [pid 29388:tid 29418] [client 4.196.149.150:9982] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aVDettoLv2L2zI_SpdWo9QAAAVY"]
[Sun Dec 28 15:39:34.726134 2025] [:error] [pid 42294:tid 42354] [client 4.196.149.150:10030] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aVDettTE5kYcYCOzl9GNQAAAAIQ"]
[Sun Dec 28 15:39:35.046343 2025] [:error] [pid 42293:tid 42333] [client 4.196.149.150:10182] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aVDet8vc9B-5cwN385KkfQAAAEo"]
[Sun Dec 28 15:39:35.159797 2025] [:error] [pid 29437:tid 29472] [client 4.196.149.150:9864] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aVDetxhDotAbVk6pZLeGGwAAAcY"]
[Sun Dec 28 15:39:35.332481 2025] [:error] [pid 29388:tid 29403] [client 4.196.149.150:10043] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aVDet9oLv2L2zI_SpdWo9gAAAUc"]
[Sun Dec 28 15:39:35.494547 2025] [:error] [pid 29388:tid 29414] [client 4.196.149.150:9897] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aVDet9oLv2L2zI_SpdWo9wAAAVI"]
[Sun Dec 28 15:39:35.540582 2025] [:error] [pid 29437:tid 29486] [client 4.196.149.150:9866] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aVDetxhDotAbVk6pZLeGHQAAAdQ"]
[Sun Dec 28 15:39:35.640313 2025] [:error] [pid 42292:tid 42307] [client 4.196.149.150:9846] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aVDet5yOrM_vaFx1osYZjQAAAAs"]
[Sun Dec 28 15:39:35.687418 2025] [:error] [pid 29437:tid 29484] [client 4.196.149.150:9806] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aVDetxhDotAbVk6pZLeGHgAAAdI"]
[Sun Dec 28 15:39:35.758374 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:9983] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aVDet8vc9B-5cwN385KkggAAAFY"]
[Sun Dec 28 15:39:35.796815 2025] [:error] [pid 42378:tid 42385] [client 4.196.149.150:9856] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/des.php"] [unique_id "aVDetzgtcN-KHAjWrX_qYQAAAMU"]
[Sun Dec 28 15:39:35.852151 2025] [:error] [pid 42378:tid 42382] [client 4.196.149.150:9890] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aVDetzgtcN-KHAjWrX_qYgAAAMI"]
[Sun Dec 28 15:39:35.903970 2025] [:error] [pid 29437:tid 29479] [client 4.196.149.150:9973] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aVDetxhDotAbVk6pZLeGHwAAAc0"]
[Sun Dec 28 15:39:35.938823 2025] [:error] [pid 29388:tid 29406] [client 4.196.149.150:9852] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aVDet9oLv2L2zI_SpdWo-AAAAUo"]
[Sun Dec 28 15:39:35.982016 2025] [:error] [pid 29388:tid 29420] [client 4.196.149.150:9980] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aVDet9oLv2L2zI_SpdWo-QAAAVg"]
[Sun Dec 28 15:39:36.028368 2025] [:error] [pid 42293:tid 42340] [client 4.196.149.150:9877] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aVDeuMvc9B-5cwN385KkhQAAAFE"]
[Sun Dec 28 15:39:36.062629 2025] [:error] [pid 29437:tid 29470] [client 4.196.149.150:9892] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aVDeuBhDotAbVk6pZLeGIAAAAcQ"]
[Sun Dec 28 15:39:36.262058 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:10016] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aVDeuMvc9B-5cwN385KkkQAAAEg"]
[Sun Dec 28 15:39:36.423760 2025] [:error] [pid 29437:tid 29478] [client 4.196.149.150:10037] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aVDeuBhDotAbVk6pZLeGIQAAAcw"]
[Sun Dec 28 15:39:36.559483 2025] [:error] [pid 42292:tid 42296] [client 4.196.149.150:9881] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVDeuJyOrM_vaFx1osYZkAAAAAA"]
[Sun Dec 28 15:39:36.613235 2025] [:error] [pid 42294:tid 42364] [client 4.196.149.150:9801] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVDeuNTE5kYcYCOzl9GNQgAAAI4"]
[Sun Dec 28 15:39:36.674888 2025] [:error] [pid 42292:tid 42311] [client 4.196.149.150:9834] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVDeuJyOrM_vaFx1osYZkgAAAA8"]
[Sun Dec 28 15:39:36.731264 2025] [:error] [pid 29437:tid 29466] [client 4.196.149.150:9737] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVDeuBhDotAbVk6pZLeGIgAAAcA"]
[Sun Dec 28 15:39:36.788835 2025] [:error] [pid 42293:tid 42341] [client 4.196.149.150:9977] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aVDeuMvc9B-5cwN385KklwAAAFI"]
[Sun Dec 28 15:39:36.821570 2025] [:error] [pid 43789:tid 43806] [client 4.196.149.150:9969] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aVDeuAa-tUppni4CcCYCkgAAAQ8"]
[Sun Dec 28 15:39:36.881601 2025] [:error] [pid 42294:tid 42374] [client 4.196.149.150:9971] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aVDeuNTE5kYcYCOzl9GNRAAAAJg"]
[Sun Dec 28 15:39:36.967417 2025] [:error] [pid 42294:tid 42359] [client 4.196.149.150:9908] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aVDeuNTE5kYcYCOzl9GNRQAAAIk"]
[Sun Dec 28 15:39:37.068951 2025] [:error] [pid 42378:tid 42393] [client 4.196.149.150:10023] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVDeuTgtcN-KHAjWrX_qbQAAAM0"]
[Sun Dec 28 15:39:37.119611 2025] [:error] [pid 42292:tid 42303] [client 4.196.149.150:9889] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVDeuZyOrM_vaFx1osYZlAAAAAc"]
[Sun Dec 28 15:39:37.167046 2025] [:error] [pid 29388:tid 29400] [client 4.196.149.150:9922] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVDeudoLv2L2zI_SpdWo_gAAAUQ"]
[Sun Dec 28 15:39:37.240358 2025] [:error] [pid 42294:tid 42368] [client 4.196.149.150:9915] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVDeudTE5kYcYCOzl9GNRgAAAJI"]
[Sun Dec 28 15:39:37.375517 2025] [:error] [pid 42378:tid 42396] [client 4.196.149.150:9894] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVDeuTgtcN-KHAjWrX_qbwAAANA"]
[Sun Dec 28 15:39:37.496633 2025] [:error] [pid 29388:tid 29413] [client 4.196.149.150:9893] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVDeudoLv2L2zI_SpdWo_wAAAVE"]
[Sun Dec 28 15:39:37.560731 2025] [:error] [pid 43789:tid 43794] [client 4.196.149.150:10017] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVDeuQa-tUppni4CcCYClAAAAQM"]
[Sun Dec 28 15:39:37.697079 2025] [:error] [pid 29437:tid 29477] [client 4.196.149.150:9840] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVDeuRhDotAbVk6pZLeGIwAAAcs"]
[Sun Dec 28 15:39:37.821994 2025] [:error] [pid 29436:tid 29452] [client 4.196.149.150:9740] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVDeubchzOOtNL9VPNKa0gAAAY0"]
[Sun Dec 28 15:39:37.866968 2025] [:error] [pid 29437:tid 29480] [client 4.196.149.150:9912] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVDeuRhDotAbVk6pZLeGJAAAAc4"]
[Sun Dec 28 15:39:37.921724 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:9896] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVDeucvc9B-5cwN385KkngAAAEI"]
[Sun Dec 28 15:39:37.965027 2025] [:error] [pid 42292:tid 42298] [client 4.196.149.150:9868] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVDeuZyOrM_vaFx1osYZlQAAAAI"]
[Sun Dec 28 15:39:38.013325 2025] [:error] [pid 42378:tid 42389] [client 4.196.149.150:9762] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVDeujgtcN-KHAjWrX_qcgAAAMk"]
[Sun Dec 28 15:39:38.193279 2025] [:error] [pid 42294:tid 42361] [client 4.196.149.150:9798] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVDeutTE5kYcYCOzl9GNSAAAAIs"]
[Sun Dec 28 15:39:38.368933 2025] [:error] [pid 29436:tid 29447] [client 4.196.149.150:9812] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVDeurchzOOtNL9VPNKa1QAAAYg"]
[Sun Dec 28 15:39:38.876641 2025] [:error] [pid 42292:tid 42309] [client 4.196.149.150:9911] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVDeupyOrM_vaFx1osYZmAAAAA0"]
[Sun Dec 28 15:39:39.035803 2025] [:error] [pid 29388:tid 29398] [client 4.196.149.150:9825] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVDeu9oLv2L2zI_SpdWpAgAAAUI"]
[Sun Dec 28 15:39:39.087941 2025] [:error] [pid 29437:tid 29471] [client 4.196.149.150:9949] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVDeuxhDotAbVk6pZLeGJQAAAcU"]
[Sun Dec 28 15:39:39.287169 2025] [:error] [pid 29437:tid 29469] [client 4.196.149.150:9842] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVDeuxhDotAbVk6pZLeGJgAAAcM"]
[Sun Dec 28 15:39:39.422608 2025] [:error] [pid 29437:tid 29473] [client 4.196.149.150:10069] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVDeuxhDotAbVk6pZLeGJwAAAcc"]
[Sun Dec 28 15:39:39.502453 2025] [:error] [pid 29388:tid 29416] [client 4.196.149.150:9887] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVDeu9oLv2L2zI_SpdWpAwAAAVQ"]
[Sun Dec 28 15:39:39.600691 2025] [:error] [pid 42293:tid 42331] [client 4.196.149.150:9836] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVDeu8vc9B-5cwN385KkpwAAAEg"]
[Sun Dec 28 15:39:39.767048 2025] [:error] [pid 42292:tid 42313] [client 4.196.149.150:9903] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVDeu5yOrM_vaFx1osYZmQAAABE"]
[Sun Dec 28 15:39:39.873543 2025] [:error] [pid 42293:tid 42345] [client 4.196.149.150:9809] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVDeu8vc9B-5cwN385KkqwAAAFY"]
[Sun Dec 28 15:39:40.142208 2025] [:error] [pid 43789:tid 43795] [client 4.196.149.150:9961] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVDevAa-tUppni4CcCYCmAAAAQQ"]
[Sun Dec 28 15:39:40.289347 2025] [:error] [pid 43789:tid 43807] [client 4.196.149.150:9850] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVDevAa-tUppni4CcCYCmQAAARA"]
[Sun Dec 28 15:39:40.320382 2025] [:error] [pid 29437:tid 29490] [client 4.196.149.150:9664] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVDevBhDotAbVk6pZLeGKAAAAdg"]
[Sun Dec 28 15:39:40.398642 2025] [:error] [pid 29388:tid 29415] [client 4.196.149.150:9916] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVDevNoLv2L2zI_SpdWpBQAAAVM"]
[Sun Dec 28 15:39:40.452006 2025] [:error] [pid 42293:tid 42324] [client 4.196.149.150:9776] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVDevMvc9B-5cwN385KksAAAAEE"]
[Sun Dec 28 15:39:40.507676 2025] [:error] [pid 42293:tid 42325] [client 4.196.149.150:9900] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVDevMvc9B-5cwN385KksQAAAEI"]
[Sun Dec 28 15:39:40.649895 2025] [:error] [pid 29437:tid 29476] [client 4.196.149.150:9848] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVDevBhDotAbVk6pZLeGKQAAAco"]
[Sun Dec 28 15:39:40.805112 2025] [:error] [pid 42378:tid 42394] [client 4.196.149.150:9841] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVDevDgtcN-KHAjWrX_qegAAAM4"]
[Sun Dec 28 15:39:40.900328 2025] [:error] [pid 42378:tid 42403] [client 4.196.149.150:9794] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVDevDgtcN-KHAjWrX_qewAAANc"]
[Sun Dec 28 15:39:40.941376 2025] [:error] [pid 29437:tid 29468] [client 4.196.149.150:9670] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVDevBhDotAbVk6pZLeGKgAAAcI"]
[Sun Dec 28 15:39:41.008008 2025] [:error] [pid 42378:tid 42399] [client 4.196.149.150:9822] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVDevTgtcN-KHAjWrX_qfAAAANM"]
[Sun Dec 28 15:39:41.053515 2025] [:error] [pid 42378:tid 42387] [client 4.196.149.150:9830] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVDevTgtcN-KHAjWrX_qfQAAAMc"]
[Sun Dec 28 15:39:41.165983 2025] [:error] [pid 29437:tid 29467] [client 4.196.149.150:9860] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVDevRhDotAbVk6pZLeGKwAAAcE"]
[Sun Dec 28 15:39:41.232817 2025] [:error] [pid 42292:tid 42306] [client 4.196.149.150:9855] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVDevZyOrM_vaFx1osYZmwAAAAo"]
[Sun Dec 28 15:39:41.307218 2025] [:error] [pid 29437:tid 29482] [client 4.196.149.150:9851] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVDevRhDotAbVk6pZLeGLAAAAdA"]
[Sun Dec 28 15:39:41.482284 2025] [:error] [pid 42293:tid 42337] [client 4.196.149.150:9677] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVDevcvc9B-5cwN385KktgAAAE4"]
[Sun Dec 28 15:39:41.612560 2025] [:error] [pid 42294:tid 42363] [client 4.196.149.150:9879] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVDevdTE5kYcYCOzl9GNTwAAAI0"]
[Sun Dec 28 15:39:41.722718 2025] [:error] [pid 42294:tid 42357] [client 4.196.149.150:9732] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVDevdTE5kYcYCOzl9GNUAAAAIc"]
[Sun Dec 28 15:39:41.833674 2025] [:error] [pid 42294:tid 42351] [client 4.196.149.150:16624] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVDevdTE5kYcYCOzl9GNUQAAAIE"]
[Sun Dec 28 15:39:41.934290 2025] [:error] [pid 43789:tid 43799] [client 4.196.149.150:9845] [client 4.196.149.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVDevQa-tUppni4CcCYCmwAAAQg"]
[Sun Dec 28 16:23:38.932841 2025] [:error] [pid 29436:tid 29444] [client 82.165.73.252:62139] [client 82.165.73.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aVDpCrchzOOtNL9VPNKjLAAAAYU"], referer: www.google.com
[Mon Dec 29 00:14:09.774176 2025] [:error] [pid 46536:tid 46543] [client 203.2.64.59:56543] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVFXUd72_BregW2fmRb0YgAAAAM"]
[Mon Dec 29 03:45:08.863013 2025] [:error] [pid 3288:tid 3303] [client 45.92.229.196:28395] [client 45.92.229.196] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVGIxDEpMpEkXed2nOBOTgAAAAU"]
[Mon Dec 29 03:45:09.678026 2025] [:error] [pid 3390:tid 3404] [client 45.130.83.59:54463] [client 45.130.83.59] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "aVGIxSA_XZ-Xwkb6jb3AEwAAAMc"]
[Mon Dec 29 03:45:10.490452 2025] [:error] [pid 3288:tid 3305] [client 45.92.229.187:41019] [client 45.92.229.187] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aVGIxjEpMpEkXed2nOBOTwAAAAc"]
[Mon Dec 29 04:39:57.007266 2025] [:error] [pid 11540:tid 11557] [client 167.99.61.218:57799] [client 167.99.61.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aVGVnQ1izvtkZ6YWaTxCTAAAAM8"], referer: binance.com
[Mon Dec 29 04:43:34.267389 2025] [:error] [pid 11453:tid 11510] [client 143.198.210.125:39674] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVGWdry-FXnKT7-6pt4rzgAAAIE"]
[Mon Dec 29 18:37:57.557634 2025] [:error] [pid 24307:tid 24329] [client 182.43.70.143:59627] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVJaBS5AURuH8IsFzz52pQAAAdM"]
[Mon Dec 29 23:01:15.640458 2025] [:error] [pid 42293:tid 42301] [client 182.69.176.156:15205] [client 182.69.176.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.69.176.156, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVKXuwpAkHF7zSWhAzF7wwAAAUY"]
[Mon Dec 29 23:01:15.645199 2025] [:error] [pid 42293:tid 42301] [client 182.69.176.156:15205] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Dec 30 02:35:52.079946 2025] [:error] [pid 42521:tid 42542] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://duckduckgo.com/
[Tue Dec 30 02:35:52.217732 2025] [:error] [pid 42521:tid 42535] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.de/
[Tue Dec 30 02:35:52.356218 2025] [:error] [pid 42521:tid 42524] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Tue Dec 30 02:35:52.494701 2025] [:error] [pid 42521:tid 42532] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.fr/
[Tue Dec 30 02:35:52.633659 2025] [:error] [pid 42521:tid 42531] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://duckduckgo.com/
[Tue Dec 30 02:35:52.771786 2025] [:error] [pid 42521:tid 42541] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Tue Dec 30 02:35:52.910826 2025] [:error] [pid 42521:tid 42546] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.co.uk/
[Tue Dec 30 02:35:53.048998 2025] [:error] [pid 42521:tid 42527] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.de/
[Tue Dec 30 02:35:53.186475 2025] [:error] [pid 42521:tid 42525] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Tue Dec 30 02:35:53.323624 2025] [:error] [pid 42521:tid 42539] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.fr/
[Tue Dec 30 02:35:53.462009 2025] [:error] [pid 42521:tid 42543] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Tue Dec 30 02:35:53.599844 2025] [:error] [pid 42521:tid 42530] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.de/
[Tue Dec 30 02:35:53.738362 2025] [:error] [pid 42521:tid 42544] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.fr/
[Tue Dec 30 02:35:53.878244 2025] [:error] [pid 42521:tid 42538] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://www.google.fr/
[Tue Dec 30 02:35:54.013279 2025] [:error] [pid 42521:tid 42540] [client 4.217.250.2:23405] [client 4.217.250.2] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.217.250.2, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVLKCszHehU4LDeKEzoxXAAAAVA"], referer: https://www.bing.com/
[Tue Dec 30 02:35:54.016652 2025] [:error] [pid 42521:tid 42540] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.bing.com/
[Tue Dec 30 02:35:54.154174 2025] [:error] [pid 42521:tid 42533] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.com/
[Tue Dec 30 02:35:54.292173 2025] [:error] [pid 42521:tid 42548] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.de/
[Tue Dec 30 02:35:54.430160 2025] [:error] [pid 42521:tid 42545] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php, referer: https://duckduckgo.com/
[Tue Dec 30 02:35:54.567502 2025] [:error] [pid 42521:tid 42536] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.de/
[Tue Dec 30 02:35:54.706422 2025] [:error] [pid 42521:tid 42534] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.co.uk/
[Tue Dec 30 02:35:54.844834 2025] [:error] [pid 42521:tid 42537] [client 4.217.250.2:23405] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Tue Dec 30 02:35:56.506915 2025] [:error] [pid 42521:tid 42527] [client 4.217.250.2:23405] [client 4.217.250.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVLKDMzHehU4LDeKEzoxbgAAAUM"], referer: https://duckduckgo.com/
[Tue Dec 30 04:59:40.040776 2025] [:error] [pid 55724:tid 55793] [client 143.198.210.125:42100] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVLrvP2xaJh1srfKTGRZXgAAAIg"]
[Tue Dec 30 06:06:57.636209 2025] [:error] [pid 55724:tid 55803] [client 4.190.202.25:11206] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.bing.com/
[Tue Dec 30 06:06:57.760597 2025] [:error] [pid 55724:tid 55801] [client 4.190.202.25:11206] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.fr/
[Tue Dec 30 06:07:00.581949 2025] [:error] [pid 55724:tid 55787] [client 4.190.202.25:11206] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php, referer: https://www.google.fr/
[Tue Dec 30 06:07:00.723717 2025] [:error] [pid 55724:tid 55803] [client 4.190.202.25:11206] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/4.php"] [unique_id "aVL7hP2xaJh1srfKTGRoUQAAAJI"], referer: https://www.google.com/
[Tue Dec 30 06:07:01.330949 2025] [:error] [pid 55722:tid 55773] [client 4.190.202.25:11140] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVL7hdAPH64hQFBaDRiX2wAAAE8"], referer: https://www.google.fr/
[Tue Dec 30 06:07:01.617827 2025] [:error] [pid 55724:tid 55791] [client 4.190.202.25:11216] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aVL7hf2xaJh1srfKTGRoUgAAAIY"], referer: https://www.yahoo.com/
[Tue Dec 30 06:07:01.909273 2025] [:error] [pid 55724:tid 55806] [client 4.190.202.25:11258] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVL7hf2xaJh1srfKTGRoVAAAAJU"], referer: https://www.google.com/
[Tue Dec 30 06:07:03.207749 2025] [:error] [pid 21424:tid 21428] [client 4.190.202.25:11207] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVL7h_6vZjHcdZm1ozC03AAAAQI"], referer: https://www.google.com/
[Tue Dec 30 06:07:03.551476 2025] [:error] [pid 55724:tid 55800] [client 4.190.202.25:11139] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aVL7h_2xaJh1srfKTGRoVgAAAI8"], referer: https://www.yahoo.com/
[Tue Dec 30 06:07:03.807498 2025] [:error] [pid 55722:tid 55778] [client 4.190.202.25:11150] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aVL7h9APH64hQFBaDRiX4QAAAFQ"], referer: https://duckduckgo.com/
[Tue Dec 30 06:07:04.084703 2025] [:error] [pid 55721:tid 55733] [client 4.190.202.25:11145] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aVL7iD7Pjf1FlL091oWqyQAAAAI"], referer: https://www.google.co.uk/
[Tue Dec 30 06:07:04.420099 2025] [:error] [pid 55721:tid 55741] [client 4.190.202.25:11213] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aVL7iD7Pjf1FlL091oWqygAAAAo"], referer: https://www.yahoo.com/
[Tue Dec 30 06:07:04.736264 2025] [:error] [pid 55722:tid 55780] [client 4.190.202.25:11221] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/gelay.php"] [unique_id "aVL7iNAPH64hQFBaDRiX4wAAAFY"], referer: https://www.google.de/
[Tue Dec 30 06:07:05.080989 2025] [:error] [pid 55721:tid 55740] [client 4.190.202.25:11230] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aVL7iT7Pjf1FlL091oWqywAAAAk"], referer: https://www.google.fr/
[Tue Dec 30 06:07:05.667110 2025] [:error] [pid 55722:tid 55760] [client 4.190.202.25:11201] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVL7idAPH64hQFBaDRiX6QAAAEI"], referer: https://www.google.de/
[Tue Dec 30 06:07:05.962238 2025] [:error] [pid 55722:tid 55759] [client 4.190.202.25:11153] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/compat3x/about.php"] [unique_id "aVL7idAPH64hQFBaDRiX6gAAAEE"], referer: https://www.google.com/
[Tue Dec 30 06:07:06.236736 2025] [:error] [pid 55721:tid 55753] [client 4.190.202.25:11203] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/mini.php"] [unique_id "aVL7ij7Pjf1FlL091oWqzwAAABY"], referer: https://www.google.co.uk/
[Tue Dec 30 06:07:06.563961 2025] [:error] [pid 55721:tid 55750] [client 4.190.202.25:11220] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aVL7ij7Pjf1FlL091oWq0QAAABM"], referer: https://www.google.fr/
[Tue Dec 30 06:07:06.851990 2025] [:error] [pid 21424:tid 21449] [client 4.190.202.25:11136] [client 4.190.202.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVL7iv6vZjHcdZm1ozC03gAAARc"], referer: https://www.yahoo.com/
[Tue Dec 30 06:07:07.124630 2025] [:error] [pid 55722:tid 55781] [client 4.190.202.25:11239] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.google.de/
[Tue Dec 30 06:07:07.262267 2025] [:error] [pid 55722:tid 55773] [client 4.190.202.25:11239] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-video.php, referer: https://www.bing.com/
[Tue Dec 30 06:07:07.763573 2025] [:error] [pid 55722:tid 55768] [client 4.190.202.25:11239] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xml.php, referer: https://www.google.com/
[Tue Dec 30 06:07:07.893889 2025] [:error] [pid 55722:tid 55766] [client 4.190.202.25:11239] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://www.google.co.uk/
[Tue Dec 30 06:58:32.454677 2025] [:error] [pid 55722:tid 55763] [client 106.227.49.113:53569] [client 106.227.49.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVMHmNAPH64hQFBaDRihUQAAAEU"]
[Tue Dec 30 10:04:32.236504 2025] [:error] [pid 28824:tid 28856] [client 43.135.182.95:33600] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVMzMH8FhtgLvBhuCR3XOQAAAIs"]
[Tue Dec 30 13:07:54.937169 2025] [:error] [pid 28954:tid 28968] [client 103.77.107.57:49651] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aVNeKqRZgqk7uuu8M0zkTgAAAAw"]
[Tue Dec 30 15:35:48.349225 2025] [:error] [pid 28826:tid 28908] [client 103.65.236.149:53181] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aVOA1POyQggePm1Ed9tmsAAAAQI"]
[Tue Dec 30 15:35:48.951741 2025] [:error] [pid 38777:tid 38798] [client 103.65.236.149:53227] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aVOA1GLn9GPxJXPhnHbezwAAAFI"]
[Tue Dec 30 17:06:57.226215 2025] [:error] [pid 28825:tid 28889] [client 43.166.136.153:55248] [client 43.166.136.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVOWMT6dbc1G2hX-KfQ3LgAAAMo"]
[Tue Dec 30 19:18:03.093087 2025] [:error] [pid 47441:tid 47454] [client 60.188.57.0:35417] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVO06y6d2esGSN6Ne3NC6AAAAUo"]
[Tue Dec 30 20:54:17.205183 2025] [:error] [pid 47441:tid 47455] [client 103.77.106.57:54391] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/postnews.php"] [unique_id "aVPLeS6d2esGSN6Ne3NZkQAAAUs"]
[Tue Dec 30 20:54:18.462241 2025] [:error] [pid 38777:tid 38794] [client 103.77.106.57:54588] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVPLemLn9GPxJXPhnHYY2QAAAE4"]
[Tue Dec 30 20:54:19.924422 2025] [:error] [pid 28824:tid 28855] [client 103.77.106.57:54789] [client 103.77.106.57] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVPLe38FhtgLvBhuCR1M2wAAAIo"]
[Tue Dec 30 23:05:27.571700 2025] [:error] [pid 28825:tid 28885] [client 43.165.65.75:59466] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVPqNz6dbc1G2hX-KfRy5wAAAMY"]
[Tue Dec 30 23:41:42.446068 2025] [:error] [pid 28825:tid 28887] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Tue Dec 30 23:41:42.726651 2025] [:error] [pid 28825:tid 28891] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Dec 30 23:41:43.271175 2025] [:error] [pid 28825:tid 28900] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Tue Dec 30 23:41:43.546393 2025] [:error] [pid 28825:tid 28890] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Tue Dec 30 23:41:43.825326 2025] [:error] [pid 28825:tid 28895] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 30 23:41:44.131522 2025] [:error] [pid 28825:tid 28896] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Tue Dec 30 23:41:44.418594 2025] [:error] [pid 28825:tid 28901] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Tue Dec 30 23:41:44.982427 2025] [:error] [pid 28825:tid 28902] [client 158.158.107.98:9238] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Dec 30 23:41:45.257452 2025] [:error] [pid 28825:tid 28885] [client 158.158.107.98:9238] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVPyuT6dbc1G2hX-KfR7DAAAAMY"]
[Tue Dec 30 23:41:45.851854 2025] [:error] [pid 47553:tid 47573] [client 158.158.107.98:9326] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVPyubvhy9HerwSnwIQ27QAAAZI"]
[Tue Dec 30 23:41:46.433268 2025] [:error] [pid 38777:tid 38783] [client 158.158.107.98:9237] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVPyumLn9GPxJXPhnHY6zwAAAEM"]
[Tue Dec 30 23:41:47.013734 2025] [:error] [pid 28824:tid 28845] [client 158.158.107.98:9224] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVPyu38FhtgLvBhuCR1soAAAAIA"]
[Tue Dec 30 23:41:47.620514 2025] [:error] [pid 28825:tid 28887] [client 158.158.107.98:9310] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVPyuz6dbc1G2hX-KfR7DgAAAMg"]
[Tue Dec 30 23:41:48.167983 2025] [:error] [pid 28824:tid 28855] [client 158.158.107.98:9226] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVPyvH8FhtgLvBhuCR1soQAAAIo"]
[Tue Dec 30 23:41:48.807917 2025] [:error] [pid 38777:tid 38801] [client 158.158.107.98:9298] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVPyvGLn9GPxJXPhnHY60gAAAFU"]
[Tue Dec 30 23:41:49.396398 2025] [:error] [pid 28954:tid 28961] [client 158.158.107.98:9247] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVPyvaRZgqk7uuu8M0xurQAAAAU"]
[Tue Dec 30 23:41:50.005716 2025] [:error] [pid 47441:tid 47462] [client 158.158.107.98:9305] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVPyvi6d2esGSN6Ne3OIYwAAAVI"]
[Tue Dec 30 23:41:50.599962 2025] [:error] [pid 28954:tid 28959] [client 158.158.107.98:9254] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVPyvqRZgqk7uuu8M0xusAAAAAM"]
[Tue Dec 30 23:41:51.162325 2025] [:error] [pid 28954:tid 28966] [client 158.158.107.98:9318] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVPyv6RZgqk7uuu8M0xutQAAAAo"]
[Tue Dec 30 23:41:51.789676 2025] [:error] [pid 28954:tid 28971] [client 158.158.107.98:9320] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVPyv6RZgqk7uuu8M0xutwAAAA8"]
[Tue Dec 30 23:41:52.343963 2025] [:error] [pid 47441:tid 47464] [client 158.158.107.98:9324] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aVPywC6d2esGSN6Ne3OIZAAAAVQ"]
[Tue Dec 30 23:41:52.935405 2025] [:error] [pid 28825:tid 28890] [client 158.158.107.98:9284] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aVPywD6dbc1G2hX-KfR7FgAAAMs"]
[Tue Dec 30 23:41:53.530885 2025] [:error] [pid 28826:tid 28924] [client 158.158.107.98:2040] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aVPywfOyQggePm1Ed9u7yQAAARE"]
[Tue Dec 30 23:41:54.097796 2025] [:error] [pid 28826:tid 28930] [client 158.158.107.98:9234] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aVPywvOyQggePm1Ed9u7ygAAARc"]
[Tue Dec 30 23:41:54.631999 2025] [:error] [pid 28825:tid 28895] [client 158.158.107.98:9296] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aVPywj6dbc1G2hX-KfR7GAAAANA"]
[Tue Dec 30 23:41:55.303598 2025] [:error] [pid 38777:tid 38794] [client 158.158.107.98:9230] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aVPyw2Ln9GPxJXPhnHY61gAAAE4"]
[Tue Dec 30 23:41:55.939500 2025] [:error] [pid 28826:tid 28917] [client 158.158.107.98:9340] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aVPyw_OyQggePm1Ed9u7zAAAAQs"]
[Tue Dec 30 23:41:56.560386 2025] [:error] [pid 47553:tid 47566] [client 158.158.107.98:9280] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aVPyxLvhy9HerwSnwIQ2-QAAAYs"]
[Tue Dec 30 23:41:57.142224 2025] [:error] [pid 28824:tid 28854] [client 158.158.107.98:9220] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aVPyxX8FhtgLvBhuCR1sqQAAAIk"]
[Tue Dec 30 23:41:57.682993 2025] [:error] [pid 28824:tid 28845] [client 158.158.107.98:9241] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aVPyxX8FhtgLvBhuCR1srgAAAIA"]
[Tue Dec 30 23:41:58.236086 2025] [:error] [pid 28824:tid 28852] [client 158.158.107.98:9308] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aVPyxn8FhtgLvBhuCR1srwAAAIc"]
[Tue Dec 30 23:41:58.761756 2025] [:error] [pid 28824:tid 28846] [client 158.158.107.98:9311] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aVPyxn8FhtgLvBhuCR1sswAAAIE"]
[Tue Dec 30 23:41:59.307072 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:9337] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVPyxy6d2esGSN6Ne3OIagAAAU4"]
[Tue Dec 30 23:41:59.894834 2025] [:error] [pid 38777:tid 38779] [client 158.158.107.98:9236] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVPyx2Ln9GPxJXPhnHY62AAAAEA"]
[Tue Dec 30 23:42:00.436210 2025] [:error] [pid 38777:tid 38780] [client 158.158.107.98:9223] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVPyyGLn9GPxJXPhnHY62wAAAEE"]
[Tue Dec 30 23:42:01.008481 2025] [:error] [pid 47441:tid 47452] [client 158.158.107.98:9250] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVPyyS6d2esGSN6Ne3OIbQAAAUg"]
[Tue Dec 30 23:42:01.621925 2025] [:error] [pid 47441:tid 47456] [client 158.158.107.98:9342] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVPyyS6d2esGSN6Ne3OIbgAAAUw"]
[Tue Dec 30 23:42:02.179515 2025] [:error] [pid 47553:tid 47561] [client 158.158.107.98:9328] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVPyyrvhy9HerwSnwIQ3AAAAAYY"]
[Tue Dec 30 23:42:02.767251 2025] [:error] [pid 47441:tid 47468] [client 158.158.107.98:9299] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVPyyi6d2esGSN6Ne3OIcQAAAVg"]
[Tue Dec 30 23:42:03.315501 2025] [:error] [pid 28954:tid 28965] [client 158.158.107.98:9242] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVPyy6RZgqk7uuu8M0xuwwAAAAk"]
[Tue Dec 30 23:42:03.894088 2025] [:error] [pid 28954:tid 28957] [client 158.158.107.98:9295] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVPyy6RZgqk7uuu8M0xuxQAAAAE"]
[Tue Dec 30 23:42:04.513140 2025] [:error] [pid 47441:tid 47453] [client 158.158.107.98:9245] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVPyzC6d2esGSN6Ne3OIdwAAAUk"]
[Tue Dec 30 23:42:05.149121 2025] [:error] [pid 28954:tid 28980] [client 158.158.107.98:9331] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVPyzaRZgqk7uuu8M0xuygAAABg"]
[Tue Dec 30 23:42:05.746179 2025] [:error] [pid 28824:tid 28863] [client 158.158.107.98:9244] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVPyzX8FhtgLvBhuCR1sugAAAJI"]
[Tue Dec 30 23:42:06.334681 2025] [:error] [pid 28826:tid 28913] [client 158.158.107.98:9228] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVPyzvOyQggePm1Ed9u70gAAAQc"]
[Tue Dec 30 23:42:07.094846 2025] [:error] [pid 47441:tid 47449] [client 158.158.107.98:9319] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVPyzy6d2esGSN6Ne3OIfwAAAUU"]
[Tue Dec 30 23:42:07.682677 2025] [:error] [pid 28954:tid 28960] [client 158.158.107.98:9289] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVPyz6RZgqk7uuu8M0xuzwAAAAQ"]
[Tue Dec 30 23:42:08.284388 2025] [:error] [pid 28954:tid 28959] [client 158.158.107.98:9314] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVPy0KRZgqk7uuu8M0xu0AAAAAM"]
[Tue Dec 30 23:42:08.890075 2025] [:error] [pid 28824:tid 28864] [client 158.158.107.98:2012] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aVPy0H8FhtgLvBhuCR1svgAAAJM"]
[Tue Dec 30 23:42:09.469150 2025] [:error] [pid 28824:tid 28849] [client 158.158.107.98:1984] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aVPy0X8FhtgLvBhuCR1svwAAAIQ"]
[Tue Dec 30 23:42:09.993876 2025] [:error] [pid 38777:tid 38782] [client 158.158.107.98:9316] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aVPy0WLn9GPxJXPhnHY64QAAAEI"]
[Tue Dec 30 23:42:10.521452 2025] [:error] [pid 28826:tid 28913] [client 158.158.107.98:1989] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aVPy0vOyQggePm1Ed9u73gAAAQc"]
[Tue Dec 30 23:42:11.130469 2025] [:error] [pid 28826:tid 28911] [client 158.158.107.98:9283] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aVPy0_OyQggePm1Ed9u74wAAAQU"]
[Tue Dec 30 23:42:11.712377 2025] [:error] [pid 47441:tid 47461] [client 158.158.107.98:9334] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aVPy0y6d2esGSN6Ne3OIhgAAAVE"]
[Tue Dec 30 23:42:12.383660 2025] [:error] [pid 28824:tid 28867] [client 158.158.107.98:9321] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aVPy1H8FhtgLvBhuCR1swQAAAJY"]
[Tue Dec 30 23:42:12.970563 2025] [:error] [pid 47553:tid 47563] [client 158.158.107.98:9291] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aVPy1Lvhy9HerwSnwIQ3BwAAAYg"]
[Tue Dec 30 23:42:13.606747 2025] [:error] [pid 28826:tid 28917] [client 158.158.107.98:9288] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aVPy1fOyQggePm1Ed9u75gAAAQs"]
[Tue Dec 30 23:42:14.218136 2025] [:error] [pid 28954:tid 28957] [client 158.158.107.98:9279] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aVPy1qRZgqk7uuu8M0xu3gAAAAE"]
[Tue Dec 30 23:42:14.825224 2025] [:error] [pid 28826:tid 28920] [client 158.158.107.98:9262] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aVPy1vOyQggePm1Ed9u76QAAAQ0"]
[Tue Dec 30 23:42:15.415351 2025] [:error] [pid 28825:tid 28897] [client 158.158.107.98:9216] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aVPy1z6dbc1G2hX-KfR7KwAAANI"]
[Tue Dec 30 23:42:16.034101 2025] [:error] [pid 47553:tid 47557] [client 158.158.107.98:9339] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVPy2Lvhy9HerwSnwIQ3DAAAAYI"]
[Tue Dec 30 23:42:16.736961 2025] [:error] [pid 47553:tid 47567] [client 158.158.107.98:9231] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVPy2Lvhy9HerwSnwIQ3DgAAAYw"]
[Tue Dec 30 23:42:17.358076 2025] [:error] [pid 47553:tid 47578] [client 158.158.107.98:9286] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVPy2bvhy9HerwSnwIQ3DwAAAZc"]
[Tue Dec 30 23:42:17.940362 2025] [:error] [pid 28954:tid 28979] [client 158.158.107.98:9270] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVPy2aRZgqk7uuu8M0xu4gAAABc"]
[Tue Dec 30 23:42:18.509476 2025] [:error] [pid 47441:tid 47451] [client 158.158.107.98:9329] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPy2i6d2esGSN6Ne3OIjgAAAUc"]
[Tue Dec 30 23:42:19.067191 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:9336] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPy2y6d2esGSN6Ne3OIkQAAAU4"]
[Tue Dec 30 23:42:19.702981 2025] [:error] [pid 28825:tid 28883] [client 158.158.107.98:2006] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPy2z6dbc1G2hX-KfR7LwAAAMQ"]
[Tue Dec 30 23:42:20.263323 2025] [:error] [pid 28954:tid 28965] [client 158.158.107.98:1992] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPy3KRZgqk7uuu8M0xu4wAAAAk"]
[Tue Dec 30 23:42:20.893057 2025] [:error] [pid 28825:tid 28900] [client 158.158.107.98:1995] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVPy3D6dbc1G2hX-KfR7MQAAANU"]
[Tue Dec 30 23:42:21.483877 2025] [:error] [pid 47441:tid 47467] [client 158.158.107.98:9217] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVPy3S6d2esGSN6Ne3OIlQAAAVc"]
[Tue Dec 30 23:42:22.120239 2025] [:error] [pid 28954:tid 28976] [client 158.158.107.98:1998] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVPy3qRZgqk7uuu8M0xu6AAAABQ"]
[Tue Dec 30 23:42:22.687378 2025] [:error] [pid 28954:tid 28959] [client 158.158.107.98:9275] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVPy3qRZgqk7uuu8M0xu6gAAAAM"]
[Tue Dec 30 23:42:23.235505 2025] [:error] [pid 28954:tid 28977] [client 158.158.107.98:2038] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aVPy36RZgqk7uuu8M0xu7QAAABU"]
[Tue Dec 30 23:42:23.867588 2025] [:error] [pid 28954:tid 28966] [client 158.158.107.98:9302] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aVPy36RZgqk7uuu8M0xu8QAAAAo"]
[Tue Dec 30 23:42:24.417440 2025] [:error] [pid 28824:tid 28867] [client 158.158.107.98:2016] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aVPy4H8FhtgLvBhuCR1sywAAAJY"]
[Tue Dec 30 23:42:24.973866 2025] [:error] [pid 28826:tid 28928] [client 158.158.107.98:1939] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aVPy4POyQggePm1Ed9u79QAAARU"]
[Tue Dec 30 23:42:25.025167 2025] [:error] [pid 28824:tid 28850] [client 101.33.81.73:42492] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVPy4X8FhtgLvBhuCR1szAAAAIU"]
[Tue Dec 30 23:42:25.529565 2025] [:error] [pid 28825:tid 28892] [client 158.158.107.98:9301] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVPy4T6dbc1G2hX-KfR7NAAAAM0"]
[Tue Dec 30 23:42:26.098147 2025] [:error] [pid 28824:tid 28858] [client 158.158.107.98:9263] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVPy4n8FhtgLvBhuCR1s0AAAAI0"]
[Tue Dec 30 23:42:26.757930 2025] [:error] [pid 28824:tid 28848] [client 158.158.107.98:9287] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVPy4n8FhtgLvBhuCR1s0QAAAIM"]
[Tue Dec 30 23:42:27.403442 2025] [:error] [pid 28825:tid 28899] [client 158.158.107.98:9222] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aVPy4z6dbc1G2hX-KfR7PAAAANQ"]
[Tue Dec 30 23:42:27.935509 2025] [:error] [pid 47441:tid 47465] [client 158.158.107.98:9272] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVPy4y6d2esGSN6Ne3OImgAAAVU"]
[Tue Dec 30 23:42:28.520290 2025] [:error] [pid 28824:tid 28856] [client 158.158.107.98:2025] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVPy5H8FhtgLvBhuCR1s0gAAAIs"]
[Tue Dec 30 23:42:29.138541 2025] [:error] [pid 38777:tid 38796] [client 158.158.107.98:2022] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVPy5WLn9GPxJXPhnHY67QAAAFA"]
[Tue Dec 30 23:42:29.689847 2025] [:error] [pid 28825:tid 28891] [client 158.158.107.98:2037] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aVPy5T6dbc1G2hX-KfR7QgAAAMw"]
[Tue Dec 30 23:42:30.277117 2025] [:error] [pid 28954:tid 28975] [client 158.158.107.98:9232] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVPy5qRZgqk7uuu8M0xu9QAAABM"]
[Tue Dec 30 23:42:30.853919 2025] [:error] [pid 28825:tid 28879] [client 158.158.107.98:9246] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVPy5j6dbc1G2hX-KfR7RwAAAMA"]
[Tue Dec 30 23:42:31.428503 2025] [:error] [pid 47441:tid 47459] [client 158.158.107.98:9219] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVPy5y6d2esGSN6Ne3OIoAAAAU8"]
[Tue Dec 30 23:42:31.953363 2025] [:error] [pid 28826:tid 28906] [client 158.158.107.98:9255] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVPy5_OyQggePm1Ed9u7_gAAAQA"]
[Tue Dec 30 23:42:32.562373 2025] [:error] [pid 38777:tid 38783] [client 158.158.107.98:9225] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aVPy6GLn9GPxJXPhnHY68wAAAEM"]
[Tue Dec 30 23:42:33.133476 2025] [:error] [pid 38777:tid 38795] [client 158.158.107.98:9266] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aVPy6WLn9GPxJXPhnHY6-AAAAE8"]
[Tue Dec 30 23:42:33.767157 2025] [:error] [pid 28954:tid 28958] [client 158.158.107.98:1950] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aVPy6aRZgqk7uuu8M0xu9wAAAAI"]
[Tue Dec 30 23:42:34.314939 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:1995] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aVPy6i6d2esGSN6Ne3OIqgAAAU4"]
[Tue Dec 30 23:42:34.873870 2025] [:error] [pid 28954:tid 28967] [client 158.158.107.98:9229] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVPy6qRZgqk7uuu8M0xu_AAAAAs"]
[Tue Dec 30 23:42:35.491310 2025] [:error] [pid 28824:tid 28853] [client 158.158.107.98:2030] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVPy638FhtgLvBhuCR1s1wAAAIg"]
[Tue Dec 30 23:42:36.198228 2025] [:error] [pid 28825:tid 28881] [client 158.158.107.98:2004] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVPy7D6dbc1G2hX-KfR7UAAAAMI"]
[Tue Dec 30 23:42:36.774994 2025] [:error] [pid 28824:tid 28849] [client 158.158.107.98:9227] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVPy7H8FhtgLvBhuCR1s2AAAAIQ"]
[Tue Dec 30 23:42:37.318360 2025] [:error] [pid 28954:tid 28969] [client 158.158.107.98:9343] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVPy7aRZgqk7uuu8M0xvAAAAAA0"]
[Tue Dec 30 23:42:37.846486 2025] [:error] [pid 28954:tid 28972] [client 158.158.107.98:9325] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVPy7aRZgqk7uuu8M0xvAgAAABA"]
[Tue Dec 30 23:42:38.421106 2025] [:error] [pid 28826:tid 28916] [client 158.158.107.98:9235] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVPy7vOyQggePm1Ed9u8BAAAAQo"]
[Tue Dec 30 23:42:39.007502 2025] [:error] [pid 28824:tid 28846] [client 158.158.107.98:1948] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVPy738FhtgLvBhuCR1s2gAAAIE"]
[Tue Dec 30 23:42:39.564629 2025] [:error] [pid 28825:tid 28891] [client 158.158.107.98:1986] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVPy7z6dbc1G2hX-KfR7WQAAAMw"]
[Tue Dec 30 23:42:40.097074 2025] [:error] [pid 28826:tid 28924] [client 158.158.107.98:9300] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVPy8POyQggePm1Ed9u8BwAAARE"]
[Tue Dec 30 23:42:40.672935 2025] [:error] [pid 28825:tid 28903] [client 158.158.107.98:9282] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVPy8D6dbc1G2hX-KfR7WwAAANg"]
[Tue Dec 30 23:42:41.179471 2025] [:error] [pid 28824:tid 28851] [client 158.158.107.98:9239] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVPy8X8FhtgLvBhuCR1s3wAAAIY"]
[Tue Dec 30 23:42:41.728857 2025] [:error] [pid 28826:tid 28925] [client 158.158.107.98:9327] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVPy8fOyQggePm1Ed9u8CwAAARI"]
[Tue Dec 30 23:42:42.232253 2025] [:error] [pid 28954:tid 28978] [client 158.158.107.98:9267] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVPy8qRZgqk7uuu8M0xvDwAAABY"]
[Tue Dec 30 23:42:42.712751 2025] [:error] [pid 47553:tid 47561] [client 158.158.107.98:2002] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVPy8rvhy9HerwSnwIQ3JAAAAYY"]
[Tue Dec 30 23:42:43.311723 2025] [:error] [pid 47553:tid 47556] [client 158.158.107.98:2000] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVPy87vhy9HerwSnwIQ3JgAAAYE"]
[Tue Dec 30 23:42:43.796563 2025] [:error] [pid 28824:tid 28847] [client 158.158.107.98:9341] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVPy838FhtgLvBhuCR1s4gAAAII"]
[Tue Dec 30 23:42:44.303653 2025] [:error] [pid 38777:tid 38797] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Dec 30 23:42:44.546796 2025] [:error] [pid 38777:tid 38804] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Tue Dec 30 23:42:44.787970 2025] [:error] [pid 38777:tid 38796] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Dec 30 23:42:45.029490 2025] [:error] [pid 38777:tid 38784] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Dec 30 23:42:46.381563 2025] [:error] [pid 38777:tid 38784] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Dec 30 23:42:46.624325 2025] [:error] [pid 38777:tid 38799] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Dec 30 23:42:46.864940 2025] [:error] [pid 38777:tid 38783] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Dec 30 23:42:47.367699 2025] [:error] [pid 38777:tid 38800] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Dec 30 23:42:47.887719 2025] [:error] [pid 38777:tid 38788] [client 158.158.107.98:1999] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Dec 30 23:42:48.142182 2025] [:error] [pid 38777:tid 38794] [client 158.158.107.98:1999] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVPy-GLn9GPxJXPhnHY7GQAAAE4"]
[Tue Dec 30 23:42:48.649280 2025] [:error] [pid 28825:tid 28894] [client 158.158.107.98:2001] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVPy-D6dbc1G2hX-KfR7agAAAM8"]
[Tue Dec 30 23:42:49.258928 2025] [:error] [pid 28826:tid 28911] [client 158.158.107.98:2019] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVPy-fOyQggePm1Ed9u8FAAAAQU"]
[Tue Dec 30 23:42:49.754317 2025] [:error] [pid 28826:tid 28928] [client 158.158.107.98:1991] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVPy-fOyQggePm1Ed9u8GgAAARU"]
[Tue Dec 30 23:42:50.281294 2025] [:error] [pid 28824:tid 28857] [client 158.158.107.98:9315] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVPy-n8FhtgLvBhuCR1s6QAAAIw"]
[Tue Dec 30 23:42:50.771261 2025] [:error] [pid 38777:tid 38784] [client 158.158.107.98:2021] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVPy-mLn9GPxJXPhnHY7HAAAAEQ"]
[Tue Dec 30 23:42:51.275700 2025] [:error] [pid 28825:tid 28883] [client 158.158.107.98:2024] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVPy-z6dbc1G2hX-KfR7bQAAAMQ"]
[Tue Dec 30 23:42:51.834379 2025] [:error] [pid 28825:tid 28879] [client 158.158.107.98:9317] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVPy-z6dbc1G2hX-KfR7cwAAAMA"]
[Tue Dec 30 23:42:52.348675 2025] [:error] [pid 47441:tid 47460] [client 158.158.107.98:9240] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVPy_C6d2esGSN6Ne3OIsgAAAVA"]
[Tue Dec 30 23:42:52.833779 2025] [:error] [pid 28954:tid 28968] [client 158.158.107.98:1935] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVPy_KRZgqk7uuu8M0xvFgAAAAw"]
[Tue Dec 30 23:42:53.317716 2025] [:error] [pid 47553:tid 47571] [client 158.158.107.98:9278] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVPy_bvhy9HerwSnwIQ3MQAAAZA"]
[Tue Dec 30 23:42:53.895143 2025] [:error] [pid 47441:tid 47447] [client 158.158.107.98:1993] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVPy_S6d2esGSN6Ne3OIuQAAAUM"]
[Tue Dec 30 23:42:54.396053 2025] [:error] [pid 47441:tid 47466] [client 158.158.107.98:9268] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVPy_i6d2esGSN6Ne3OIuwAAAVY"]
[Tue Dec 30 23:42:54.892205 2025] [:error] [pid 28826:tid 28910] [client 158.158.107.98:9335] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVPy_vOyQggePm1Ed9u8HwAAAQQ"]
[Tue Dec 30 23:42:55.398276 2025] [:error] [pid 38777:tid 38792] [client 158.158.107.98:9330] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVPy_2Ln9GPxJXPhnHY7IwAAAEw"]
[Tue Dec 30 23:42:56.015090 2025] [:error] [pid 47441:tid 47462] [client 158.158.107.98:2011] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVPzAC6d2esGSN6Ne3OIwQAAAVI"]
[Tue Dec 30 23:42:56.511342 2025] [:error] [pid 28825:tid 28885] [client 158.158.107.98:9252] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzAD6dbc1G2hX-KfR7eAAAAMY"]
[Tue Dec 30 23:42:57.005190 2025] [:error] [pid 28825:tid 28893] [client 158.158.107.98:9218] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzAT6dbc1G2hX-KfR7eQAAAM4"]
[Tue Dec 30 23:42:57.513062 2025] [:error] [pid 47441:tid 47460] [client 158.158.107.98:2028] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzAS6d2esGSN6Ne3OIwwAAAVA"]
[Tue Dec 30 23:42:58.100674 2025] [:error] [pid 47441:tid 47448] [client 158.158.107.98:2029] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzAi6d2esGSN6Ne3OIxAAAAUQ"]
[Tue Dec 30 23:42:58.719070 2025] [:error] [pid 47553:tid 47573] [client 158.158.107.98:2035] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVPzArvhy9HerwSnwIQ3PAAAAZI"]
[Tue Dec 30 23:42:59.330147 2025] [:error] [pid 28954:tid 28980] [client 158.158.107.98:2009] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVPzA6RZgqk7uuu8M0xvIAAAABg"]
[Tue Dec 30 23:43:00.049412 2025] [:error] [pid 28954:tid 28965] [client 158.158.107.98:9251] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVPzBKRZgqk7uuu8M0xvIQAAAAk"]
[Tue Dec 30 23:43:00.613518 2025] [:error] [pid 28825:tid 28886] [client 158.158.107.98:2026] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aVPzBD6dbc1G2hX-KfR7gQAAAMc"]
[Tue Dec 30 23:43:01.199386 2025] [:error] [pid 28954:tid 28958] [client 158.158.107.98:9256] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVPzBaRZgqk7uuu8M0xvJQAAAAI"]
[Tue Dec 30 23:43:01.754244 2025] [:error] [pid 47553:tid 47562] [client 158.158.107.98:9257] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVPzBbvhy9HerwSnwIQ3RAAAAYc"]
[Tue Dec 30 23:43:02.333852 2025] [:error] [pid 28825:tid 28893] [client 158.158.107.98:9303] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVPzBj6dbc1G2hX-KfR7hwAAAM4"]
[Tue Dec 30 23:43:03.246693 2025] [:error] [pid 28954:tid 28975] [client 158.158.107.98:9221] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aVPzB6RZgqk7uuu8M0xvKQAAABM"]
[Tue Dec 30 23:43:03.742993 2025] [:error] [pid 28954:tid 28956] [client 158.158.107.98:9260] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVPzB6RZgqk7uuu8M0xvKwAAAAA"]
[Tue Dec 30 23:43:04.502874 2025] [:error] [pid 28824:tid 28855] [client 158.158.107.98:9285] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVPzCH8FhtgLvBhuCR1tAQAAAIo"]
[Tue Dec 30 23:43:05.141687 2025] [:error] [pid 28825:tid 28887] [client 158.158.107.98:9271] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVPzCT6dbc1G2hX-KfR7jwAAAMg"]
[Tue Dec 30 23:43:05.645741 2025] [:error] [pid 28954:tid 28962] [client 158.158.107.98:2031] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aVPzCaRZgqk7uuu8M0xvLQAAAAY"]
[Tue Dec 30 23:43:06.287111 2025] [:error] [pid 28824:tid 28864] [client 158.158.107.98:1988] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVPzCn8FhtgLvBhuCR1tAwAAAJM"]
[Tue Dec 30 23:43:07.136709 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:2013] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVPzCy6d2esGSN6Ne3OI0AAAAU4"]
[Tue Dec 30 23:43:07.642891 2025] [:error] [pid 47553:tid 47576] [client 158.158.107.98:9323] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVPzC7vhy9HerwSnwIQ3TQAAAZU"]
[Tue Dec 30 23:43:08.227712 2025] [:error] [pid 38777:tid 38794] [client 158.158.107.98:1922] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aVPzDGLn9GPxJXPhnHY7LgAAAE4"]
[Tue Dec 30 23:43:08.811661 2025] [:error] [pid 28824:tid 28845] [client 158.158.107.98:9309] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVPzDH8FhtgLvBhuCR1tCAAAAIA"]
[Tue Dec 30 23:43:09.314472 2025] [:error] [pid 28826:tid 28907] [client 158.158.107.98:9253] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVPzDfOyQggePm1Ed9u8LQAAAQE"]
[Tue Dec 30 23:43:09.984367 2025] [:error] [pid 38777:tid 38799] [client 158.158.107.98:9293] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVPzDWLn9GPxJXPhnHY7MwAAAFM"]
[Tue Dec 30 23:43:10.598224 2025] [:error] [pid 47553:tid 47571] [client 158.158.107.98:9258] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVPzDrvhy9HerwSnwIQ3TwAAAZA"]
[Tue Dec 30 23:43:11.259862 2025] [:error] [pid 28824:tid 28855] [client 158.158.107.98:2043] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aVPzD38FhtgLvBhuCR1tEAAAAIo"]
[Tue Dec 30 23:43:12.095852 2025] [:error] [pid 28826:tid 28925] [client 158.158.107.98:9276] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aVPzEPOyQggePm1Ed9u8MAAAARI"]
[Tue Dec 30 23:43:12.676164 2025] [:error] [pid 28954:tid 28956] [client 158.158.107.98:9322] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aVPzEKRZgqk7uuu8M0xvOwAAAAA"]
[Tue Dec 30 23:43:13.336985 2025] [:error] [pid 28826:tid 28921] [client 158.158.107.98:9248] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aVPzEfOyQggePm1Ed9u8MQAAAQ4"]
[Tue Dec 30 23:43:13.931724 2025] [:error] [pid 47553:tid 47578] [client 158.158.107.98:9338] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVPzEbvhy9HerwSnwIQ3VQAAAZc"]
[Tue Dec 30 23:43:14.483053 2025] [:error] [pid 47553:tid 47562] [client 158.158.107.98:1929] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVPzErvhy9HerwSnwIQ3WAAAAYc"]
[Tue Dec 30 23:43:15.095384 2025] [:error] [pid 28954:tid 28973] [client 158.158.107.98:2007] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVPzE6RZgqk7uuu8M0xvQgAAABE"]
[Tue Dec 30 23:43:15.670618 2025] [:error] [pid 28954:tid 28972] [client 158.158.107.98:1972] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aVPzE6RZgqk7uuu8M0xvRAAAABA"]
[Tue Dec 30 23:43:16.242448 2025] [:error] [pid 38777:tid 38780] [client 158.158.107.98:2034] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVPzFGLn9GPxJXPhnHY7QwAAAEE"]
[Tue Dec 30 23:43:16.849645 2025] [:error] [pid 28825:tid 28890] [client 158.158.107.98:2045] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVPzFD6dbc1G2hX-KfR7lAAAAMs"]
[Tue Dec 30 23:43:17.481730 2025] [:error] [pid 28954:tid 28957] [client 158.158.107.98:1869] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVPzFaRZgqk7uuu8M0xvSgAAAAE"]
[Tue Dec 30 23:43:18.193201 2025] [:error] [pid 28826:tid 28910] [client 158.158.107.98:9249] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVPzFvOyQggePm1Ed9u8NwAAAQQ"]
[Tue Dec 30 23:43:18.755005 2025] [:error] [pid 28826:tid 28923] [client 158.158.107.98:1866] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVPzFvOyQggePm1Ed9u8OAAAARA"]
[Tue Dec 30 23:43:19.320160 2025] [:error] [pid 28825:tid 28900] [client 158.158.107.98:1920] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVPzFz6dbc1G2hX-KfR7mgAAANU"]
[Tue Dec 30 23:43:19.890062 2025] [:error] [pid 47441:tid 47467] [client 158.158.107.98:9261] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVPzFy6d2esGSN6Ne3OI4wAAAVc"]
[Tue Dec 30 23:43:20.539406 2025] [:error] [pid 28954:tid 28958] [client 158.158.107.98:2014] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVPzGKRZgqk7uuu8M0xvTgAAAAI"]
[Tue Dec 30 23:43:21.159135 2025] [:error] [pid 28954:tid 28959] [client 158.158.107.98:9281] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVPzGaRZgqk7uuu8M0xvUAAAAAM"]
[Tue Dec 30 23:43:21.728241 2025] [:error] [pid 38777:tid 38789] [client 158.158.107.98:9233] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVPzGWLn9GPxJXPhnHY7UAAAAEk"]
[Tue Dec 30 23:43:22.378912 2025] [:error] [pid 28954:tid 28973] [client 158.158.107.98:1979] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVPzGqRZgqk7uuu8M0xvVQAAABE"]
[Tue Dec 30 23:43:22.949510 2025] [:error] [pid 28954:tid 28969] [client 158.158.107.98:9265] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aVPzGqRZgqk7uuu8M0xvVwAAAA0"]
[Tue Dec 30 23:43:23.526002 2025] [:error] [pid 28825:tid 28887] [client 158.158.107.98:1996] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aVPzGz6dbc1G2hX-KfR7oQAAAMg"]
[Tue Dec 30 23:43:24.184875 2025] [:error] [pid 28824:tid 28851] [client 158.158.107.98:2027] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aVPzHH8FhtgLvBhuCR1tGAAAAIY"]
[Tue Dec 30 23:43:24.791108 2025] [:error] [pid 28824:tid 28845] [client 158.158.107.98:2018] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aVPzHH8FhtgLvBhuCR1tGwAAAIA"]
[Tue Dec 30 23:43:25.437710 2025] [:error] [pid 47553:tid 47559] [client 158.158.107.98:9294] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aVPzHbvhy9HerwSnwIQ3awAAAYQ"]
[Tue Dec 30 23:43:26.192020 2025] [:error] [pid 38777:tid 38788] [client 158.158.107.98:2015] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVPzHmLn9GPxJXPhnHY7UQAAAEg"]
[Tue Dec 30 23:43:26.859814 2025] [:error] [pid 38777:tid 38785] [client 158.158.107.98:1953] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVPzHmLn9GPxJXPhnHY7UwAAAEU"]
[Tue Dec 30 23:43:27.415093 2025] [:error] [pid 28825:tid 28902] [client 158.158.107.98:9264] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVPzHz6dbc1G2hX-KfR7ogAAANc"]
[Tue Dec 30 23:43:28.086374 2025] [:error] [pid 28825:tid 28900] [client 158.158.107.98:1962] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aVPzID6dbc1G2hX-KfR7pAAAANU"]
[Tue Dec 30 23:43:28.746798 2025] [:error] [pid 28824:tid 28846] [client 158.158.107.98:9277] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzIH8FhtgLvBhuCR1tIgAAAIE"]
[Tue Dec 30 23:43:29.359634 2025] [:error] [pid 28826:tid 28907] [client 158.158.107.98:9332] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzIfOyQggePm1Ed9u8SAAAAQE"]
[Tue Dec 30 23:43:29.877803 2025] [:error] [pid 38777:tid 38784] [client 158.158.107.98:1985] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzIWLn9GPxJXPhnHY7WQAAAEQ"]
[Tue Dec 30 23:43:30.466890 2025] [:error] [pid 28825:tid 28884] [client 158.158.107.98:9297] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVPzIj6dbc1G2hX-KfR7pwAAAMU"]
[Tue Dec 30 23:43:31.045175 2025] [:error] [pid 28954:tid 28964] [client 158.158.107.98:1944] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVPzI6RZgqk7uuu8M0xvXgAAAAg"]
[Tue Dec 30 23:43:31.658522 2025] [:error] [pid 28824:tid 28857] [client 158.158.107.98:1997] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVPzI38FhtgLvBhuCR1tJQAAAIw"]
[Tue Dec 30 23:43:32.241384 2025] [:error] [pid 47553:tid 47559] [client 158.158.107.98:1968] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVPzJLvhy9HerwSnwIQ3dQAAAYQ"]
[Tue Dec 30 23:43:32.890930 2025] [:error] [pid 38777:tid 38797] [client 158.158.107.98:2041] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aVPzJGLn9GPxJXPhnHY7XQAAAFE"]
[Tue Dec 30 23:43:33.519483 2025] [:error] [pid 47441:tid 47457] [client 158.158.107.98:2044] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVPzJS6d2esGSN6Ne3OI8wAAAU0"]
[Tue Dec 30 23:43:34.090087 2025] [:error] [pid 47441:tid 47455] [client 158.158.107.98:1942] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVPzJi6d2esGSN6Ne3OI9wAAAUs"]
[Tue Dec 30 23:43:34.641072 2025] [:error] [pid 38777:tid 38789] [client 158.158.107.98:2003] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVPzJmLn9GPxJXPhnHY7YgAAAEk"]
[Tue Dec 30 23:43:35.197496 2025] [:error] [pid 28954:tid 28968] [client 158.158.107.98:1935] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVPzJ6RZgqk7uuu8M0xvYQAAAAw"]
[Tue Dec 30 23:43:35.846124 2025] [:error] [pid 47441:tid 47464] [client 158.158.107.98:1924] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aVPzJy6d2esGSN6Ne3OI_AAAAVQ"]
[Tue Dec 30 23:43:36.465014 2025] [:error] [pid 28954:tid 28962] [client 158.158.107.98:1896] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aVPzKKRZgqk7uuu8M0xvagAAAAY"]
[Tue Dec 30 23:43:37.137481 2025] [:error] [pid 47441:tid 47467] [client 158.158.107.98:1961] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aVPzKS6d2esGSN6Ne3OI_gAAAVc"]
[Tue Dec 30 23:43:37.767798 2025] [:error] [pid 28824:tid 28849] [client 158.158.107.98:2023] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aVPzKX8FhtgLvBhuCR1tKAAAAIQ"]
[Tue Dec 30 23:43:38.335767 2025] [:error] [pid 28824:tid 28846] [client 158.158.107.98:1959] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aVPzKn8FhtgLvBhuCR1tKwAAAIE"]
[Tue Dec 30 23:43:38.978944 2025] [:error] [pid 28824:tid 28855] [client 158.158.107.98:9290] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aVPzKn8FhtgLvBhuCR1tLQAAAIo"]
[Tue Dec 30 23:43:39.621720 2025] [:error] [pid 28954:tid 28958] [client 158.158.107.98:2039] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aVPzK6RZgqk7uuu8M0xvcwAAAAI"]
[Tue Dec 30 23:43:40.276062 2025] [:error] [pid 38777:tid 38785] [client 158.158.107.98:2047] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aVPzLGLn9GPxJXPhnHY7cAAAAEU"]
[Tue Dec 30 23:43:40.847401 2025] [:error] [pid 28954:tid 28959] [client 158.158.107.98:1871] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVPzLKRZgqk7uuu8M0xvdQAAAAM"]
[Tue Dec 30 23:43:41.407841 2025] [:error] [pid 47553:tid 47556] [client 158.158.107.98:9274] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVPzLbvhy9HerwSnwIQ3hwAAAYE"]
[Tue Dec 30 23:43:41.985106 2025] [:error] [pid 28824:tid 28848] [client 158.158.107.98:9243] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVPzLX8FhtgLvBhuCR1tNAAAAIM"]
[Tue Dec 30 23:43:42.607217 2025] [:error] [pid 28826:tid 28922] [client 158.158.107.98:1923] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aVPzLvOyQggePm1Ed9u8UwAAAQ8"]
[Tue Dec 30 23:43:43.234329 2025] [:error] [pid 28824:tid 28853] [client 158.158.107.98:1927] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVPzL38FhtgLvBhuCR1tNQAAAIg"]
[Tue Dec 30 23:43:43.888911 2025] [:error] [pid 47553:tid 47566] [client 158.158.107.98:2033] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVPzL7vhy9HerwSnwIQ3kAAAAYs"]
[Tue Dec 30 23:43:44.467169 2025] [:error] [pid 47441:tid 47462] [client 158.158.107.98:1893] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVPzMC6d2esGSN6Ne3OJCAAAAVI"]
[Tue Dec 30 23:43:45.111007 2025] [:error] [pid 28824:tid 28852] [client 158.158.107.98:2020] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aVPzMX8FhtgLvBhuCR1tPAAAAIc"]
[Tue Dec 30 23:43:45.688768 2025] [:error] [pid 28826:tid 28916] [client 158.158.107.98:1963] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aVPzMfOyQggePm1Ed9u8XQAAAQo"]
[Tue Dec 30 23:43:46.308483 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:1937] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aVPzMi6d2esGSN6Ne3OJDQAAAU4"]
[Tue Dec 30 23:43:46.860680 2025] [:error] [pid 28954:tid 28980] [client 158.158.107.98:1917] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aVPzMqRZgqk7uuu8M0xvgQAAABg"]
[Tue Dec 30 23:43:47.547204 2025] [:error] [pid 47441:tid 47455] [client 158.158.107.98:2005] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Tue Dec 30 23:43:47.830417 2025] [:error] [pid 47441:tid 47445] [client 158.158.107.98:2005] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVPzMy6d2esGSN6Ne3OJEAAAAUE"]
[Tue Dec 30 23:43:48.872177 2025] [:error] [pid 47441:tid 47463] [client 158.158.107.98:2036] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aVPzNC6d2esGSN6Ne3OJFwAAAVM"]
[Tue Dec 30 23:43:50.228995 2025] [:error] [pid 28824:tid 28853] [client 158.158.107.98:1857] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aVPzNn8FhtgLvBhuCR1tQwAAAIg"]
[Tue Dec 30 23:43:51.326627 2025] [:error] [pid 28954:tid 28956] [client 158.158.107.98:9269] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aVPzN6RZgqk7uuu8M0xvhwAAAAA"]
[Tue Dec 30 23:43:51.922866 2025] [:error] [pid 47441:tid 47446] [client 158.158.107.98:1863] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Tue Dec 30 23:43:52.747954 2025] [:error] [pid 47441:tid 47467] [client 158.158.107.98:1863] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue Dec 30 23:43:53.013291 2025] [:error] [pid 47441:tid 47451] [client 158.158.107.98:1863] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVPzOS6d2esGSN6Ne3OJIgAAAUc"]
[Tue Dec 30 23:43:53.591011 2025] [:error] [pid 47553:tid 47577] [client 158.158.107.98:1975] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVPzObvhy9HerwSnwIQ3ngAAAZY"]
[Tue Dec 30 23:43:54.178818 2025] [:error] [pid 38777:tid 38787] [client 158.158.107.98:1926] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVPzOmLn9GPxJXPhnHY7dQAAAEc"]
[Tue Dec 30 23:43:54.817593 2025] [:error] [pid 28954:tid 28976] [client 158.158.107.98:1925] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aVPzOqRZgqk7uuu8M0xvkQAAABQ"]
[Tue Dec 30 23:43:55.367439 2025] [:error] [pid 47441:tid 47445] [client 158.158.107.98:1883] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aVPzOy6d2esGSN6Ne3OJKAAAAUE"]
[Tue Dec 30 23:43:55.993112 2025] [:error] [pid 47553:tid 47562] [client 158.158.107.98:1921] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aVPzO7vhy9HerwSnwIQ3ogAAAYc"]
[Tue Dec 30 23:43:56.620284 2025] [:error] [pid 28826:tid 28915] [client 158.158.107.98:1940] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aVPzPPOyQggePm1Ed9u8ZwAAAQk"]
[Tue Dec 30 23:43:57.415057 2025] [:error] [pid 28826:tid 28906] [client 158.158.107.98:1945] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aVPzPfOyQggePm1Ed9u8aQAAAQA"]
[Tue Dec 30 23:43:58.093237 2025] [:error] [pid 47553:tid 47559] [client 158.158.107.98:1868] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVPzPrvhy9HerwSnwIQ3pgAAAYQ"]
[Tue Dec 30 23:43:58.694302 2025] [:error] [pid 38777:tid 38785] [client 158.158.107.98:1886] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVPzPmLn9GPxJXPhnHY7eQAAAEU"]
[Tue Dec 30 23:43:59.303402 2025] [:error] [pid 28825:tid 28902] [client 158.158.107.98:1967] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVPzPz6dbc1G2hX-KfR7uwAAANc"]
[Tue Dec 30 23:43:59.896673 2025] [:error] [pid 28826:tid 28926] [client 158.158.107.98:9312] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aVPzP_OyQggePm1Ed9u8bgAAARM"]
[Tue Dec 30 23:44:00.469485 2025] [:error] [pid 28826:tid 28914] [client 158.158.107.98:1983] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVPzQPOyQggePm1Ed9u8cAAAAQg"]
[Tue Dec 30 23:44:01.047414 2025] [:error] [pid 28825:tid 28891] [client 158.158.107.98:1919] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVPzQT6dbc1G2hX-KfR7wAAAAMw"]
[Tue Dec 30 23:44:01.720094 2025] [:error] [pid 38777:tid 38796] [client 158.158.107.98:1915] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVPzQWLn9GPxJXPhnHY7ewAAAFA"]
[Tue Dec 30 23:44:02.330417 2025] [:error] [pid 47441:tid 47465] [client 158.158.107.98:1970] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aVPzQi6d2esGSN6Ne3OJMwAAAVU"]
[Tue Dec 30 23:44:02.935523 2025] [:error] [pid 47441:tid 47459] [client 158.158.107.98:1880] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVPzQi6d2esGSN6Ne3OJNQAAAU8"]
[Tue Dec 30 23:44:03.586858 2025] [:error] [pid 28824:tid 28868] [client 158.158.107.98:1951] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVPzQ38FhtgLvBhuCR1tVAAAAJc"]
[Tue Dec 30 23:44:04.291489 2025] [:error] [pid 28825:tid 28887] [client 158.158.107.98:1912] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVPzRD6dbc1G2hX-KfR7xwAAAMg"]
[Tue Dec 30 23:44:04.919652 2025] [:error] [pid 28825:tid 28902] [client 158.158.107.98:9313] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aVPzRD6dbc1G2hX-KfR7ywAAANc"]
[Tue Dec 30 23:44:05.626527 2025] [:error] [pid 28825:tid 28893] [client 158.158.107.98:1960] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVPzRT6dbc1G2hX-KfR7zAAAAM4"]
[Tue Dec 30 23:44:06.240400 2025] [:error] [pid 38777:tid 38795] [client 158.158.107.98:9304] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVPzRmLn9GPxJXPhnHY7hQAAAE8"]
[Tue Dec 30 23:44:06.880298 2025] [:error] [pid 47441:tid 47461] [client 158.158.107.98:1892] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVPzRi6d2esGSN6Ne3OJOwAAAVE"]
[Tue Dec 30 23:44:07.438513 2025] [:error] [pid 28825:tid 28879] [client 158.158.107.98:1965] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aVPzRz6dbc1G2hX-KfR70gAAAMA"]
[Tue Dec 30 23:44:08.006409 2025] [:error] [pid 28826:tid 28919] [client 158.158.107.98:1947] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVPzSPOyQggePm1Ed9u8fAAAAQw"]
[Tue Dec 30 23:44:08.564946 2025] [:error] [pid 28826:tid 28910] [client 158.158.107.98:1964] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVPzSPOyQggePm1Ed9u8fgAAAQQ"]
[Tue Dec 30 23:44:09.149351 2025] [:error] [pid 28954:tid 28974] [client 158.158.107.98:9259] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVPzSaRZgqk7uuu8M0xvtAAAABI"]
[Tue Dec 30 23:44:09.702506 2025] [:error] [pid 47441:tid 47447] [client 158.158.107.98:1895] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVPzSS6d2esGSN6Ne3OJQwAAAUM"]
[Tue Dec 30 23:44:10.291612 2025] [:error] [pid 28825:tid 28901] [client 158.158.107.98:1943] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVPzSj6dbc1G2hX-KfR71AAAANY"]
[Tue Dec 30 23:44:10.935703 2025] [:error] [pid 47441:tid 47455] [client 158.158.107.98:1936] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVPzSi6d2esGSN6Ne3OJRgAAAUs"]
[Tue Dec 30 23:44:11.613391 2025] [:error] [pid 28954:tid 28958] [client 158.158.107.98:9273] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVPzS6RZgqk7uuu8M0xvuQAAAAI"]
[Tue Dec 30 23:44:12.135562 2025] [:error] [pid 38777:tid 38783] [client 158.158.107.98:1873] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aVPzTGLn9GPxJXPhnHY7lQAAAEM"]
[Tue Dec 30 23:44:12.667224 2025] [:error] [pid 28826:tid 28927] [client 158.158.107.98:1933] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVPzTPOyQggePm1Ed9u8hwAAARQ"]
[Tue Dec 30 23:44:13.251995 2025] [:error] [pid 47553:tid 47562] [client 158.158.107.98:1882] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVPzTbvhy9HerwSnwIQ3rAAAAYc"]
[Tue Dec 30 23:44:13.866988 2025] [:error] [pid 47553:tid 47561] [client 158.158.107.98:1900] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVPzTbvhy9HerwSnwIQ3rwAAAYY"]
[Tue Dec 30 23:44:14.432075 2025] [:error] [pid 28826:tid 28915] [client 158.158.107.98:1958] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aVPzTvOyQggePm1Ed9u8jAAAAQk"]
[Tue Dec 30 23:44:15.020440 2025] [:error] [pid 38777:tid 38794] [client 158.158.107.98:1797] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVPzT2Ln9GPxJXPhnHY7mAAAAE4"]
[Tue Dec 30 23:44:15.604768 2025] [:error] [pid 47441:tid 47461] [client 158.158.107.98:1891] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVPzTy6d2esGSN6Ne3OJSAAAAVE"]
[Tue Dec 30 23:44:16.102990 2025] [:error] [pid 28954:tid 28976] [client 158.158.107.98:1973] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVPzUKRZgqk7uuu8M0xvwAAAABQ"]
[Tue Dec 30 23:44:16.599334 2025] [:error] [pid 28825:tid 28880] [client 158.158.107.98:1908] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aVPzUD6dbc1G2hX-KfR73QAAAME"]
[Tue Dec 30 23:44:17.112034 2025] [:error] [pid 47441:tid 47468] [client 158.158.107.98:1874] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVPzUS6d2esGSN6Ne3OJTAAAAVg"]
[Tue Dec 30 23:44:17.648714 2025] [:error] [pid 47441:tid 47451] [client 158.158.107.98:1903] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVPzUS6d2esGSN6Ne3OJTQAAAUc"]
[Tue Dec 30 23:44:18.155400 2025] [:error] [pid 28954:tid 28968] [client 158.158.107.98:1955] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVPzUqRZgqk7uuu8M0xvwgAAAAw"]
[Tue Dec 30 23:44:18.644598 2025] [:error] [pid 47441:tid 47454] [client 158.158.107.98:1954] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aVPzUi6d2esGSN6Ne3OJUgAAAUo"]
[Tue Dec 30 23:44:19.183390 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:1931] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aVPzUy6d2esGSN6Ne3OJUwAAAU4"]
[Tue Dec 30 23:44:19.700507 2025] [:error] [pid 47441:tid 47447] [client 158.158.107.98:1941] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aVPzUy6d2esGSN6Ne3OJVQAAAUM"]
[Tue Dec 30 23:44:20.181674 2025] [:error] [pid 28954:tid 28956] [client 158.158.107.98:1969] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aVPzVKRZgqk7uuu8M0xvxwAAAAA"]
[Tue Dec 30 23:44:20.697055 2025] [:error] [pid 28954:tid 28958] [client 158.158.107.98:1836] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aVPzVKRZgqk7uuu8M0xvyQAAAAI"]
[Tue Dec 30 23:44:21.226054 2025] [:error] [pid 47441:tid 47461] [client 158.158.107.98:1982] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVPzVS6d2esGSN6Ne3OJWgAAAVE"]
[Tue Dec 30 23:44:21.749103 2025] [:error] [pid 28954:tid 28980] [client 158.158.107.98:2017] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVPzVaRZgqk7uuu8M0xvzAAAABg"]
[Tue Dec 30 23:44:22.356643 2025] [:error] [pid 28825:tid 28879] [client 158.158.107.98:1884] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVPzVj6dbc1G2hX-KfR74gAAAMA"]
[Tue Dec 30 23:44:22.954578 2025] [:error] [pid 47441:tid 47467] [client 158.158.107.98:1990] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVPzVi6d2esGSN6Ne3OJXwAAAVc"]
[Tue Dec 30 23:44:23.539103 2025] [:error] [pid 38777:tid 38793] [client 158.158.107.98:1946] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aVPzV2Ln9GPxJXPhnHY7oAAAAE0"]
[Tue Dec 30 23:44:24.142509 2025] [:error] [pid 47441:tid 47449] [client 158.158.107.98:1826] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aVPzWC6d2esGSN6Ne3OJYQAAAUU"]
[Tue Dec 30 23:44:24.640972 2025] [:error] [pid 47441:tid 47453] [client 158.158.107.98:2046] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aVPzWC6d2esGSN6Ne3OJYwAAAUk"]
[Tue Dec 30 23:44:25.300330 2025] [:error] [pid 47441:tid 47456] [client 158.158.107.98:1914] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aVPzWS6d2esGSN6Ne3OJZgAAAUw"]
[Tue Dec 30 23:44:25.799062 2025] [:error] [pid 38777:tid 38783] [client 158.158.107.98:1737] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aVPzWWLn9GPxJXPhnHY7oQAAAEM"]
[Tue Dec 30 23:44:26.291108 2025] [:error] [pid 28954:tid 28965] [client 158.158.107.98:1731] [client 158.158.107.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aVPzWqRZgqk7uuu8M0xv2QAAAAk"]
[Tue Dec 30 23:44:26.883206 2025] [:error] [pid 38777:tid 38791] [client 158.158.107.98:1876] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVPzWmLn9GPxJXPhnHY7pAAAAEs"]
[Tue Dec 30 23:44:27.497299 2025] [:error] [pid 28954:tid 28961] [client 158.158.107.98:1971] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVPzW6RZgqk7uuu8M0xv3gAAAAU"]
[Tue Dec 30 23:44:28.047044 2025] [:error] [pid 28954:tid 28963] [client 158.158.107.98:1934] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVPzXKRZgqk7uuu8M0xv4gAAAAc"]
[Tue Dec 30 23:44:28.634830 2025] [:error] [pid 28954:tid 28974] [client 158.158.107.98:1902] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVPzXKRZgqk7uuu8M0xv5QAAABI"]
[Tue Dec 30 23:44:29.247281 2025] [:error] [pid 47441:tid 47451] [client 158.158.107.98:1987] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVPzXS6d2esGSN6Ne3OJbQAAAUc"]
[Tue Dec 30 23:44:30.031062 2025] [:error] [pid 47441:tid 47464] [client 158.158.107.98:1887] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVPzXi6d2esGSN6Ne3OJbwAAAVQ"]
[Tue Dec 30 23:44:30.674160 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:1906] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVPzXi6d2esGSN6Ne3OJcQAAAU4"]
[Tue Dec 30 23:44:31.441407 2025] [:error] [pid 28824:tid 28869] [client 158.158.107.98:1911] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVPzX38FhtgLvBhuCR1tnQAAAJg"]
[Tue Dec 30 23:44:31.972377 2025] [:error] [pid 47441:tid 47457] [client 158.158.107.98:1815] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVPzXy6d2esGSN6Ne3OJdQAAAU0"]
[Tue Dec 30 23:44:32.630164 2025] [:error] [pid 28824:tid 28862] [client 158.158.107.98:1862] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVPzYH8FhtgLvBhuCR1toAAAAJE"]
[Tue Dec 30 23:44:33.175179 2025] [:error] [pid 47441:tid 47460] [client 158.158.107.98:1949] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVPzYS6d2esGSN6Ne3OJeQAAAVA"]
[Tue Dec 30 23:44:33.782230 2025] [:error] [pid 47553:tid 47566] [client 158.158.107.98:1838] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aVPzYbvhy9HerwSnwIQ3vwAAAYs"]
[Tue Dec 30 23:44:34.336714 2025] [:error] [pid 38777:tid 38796] [client 158.158.107.98:1872] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVPzYmLn9GPxJXPhnHY7qAAAAFA"]
[Tue Dec 30 23:44:34.934419 2025] [:error] [pid 38777:tid 38779] [client 158.158.107.98:9231] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVPzYmLn9GPxJXPhnHY7rAAAAEA"]
[Tue Dec 30 23:44:35.475334 2025] [:error] [pid 28954:tid 28969] [client 158.158.107.98:2032] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVPzY6RZgqk7uuu8M0xv-AAAAA0"]
[Tue Dec 30 23:44:36.124253 2025] [:error] [pid 47441:tid 47464] [client 158.158.107.98:2010] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVPzZC6d2esGSN6Ne3OJfgAAAVQ"]
[Tue Dec 30 23:44:36.660256 2025] [:error] [pid 28825:tid 28895] [client 158.158.107.98:1844] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVPzZD6dbc1G2hX-KfR76AAAANA"]
[Tue Dec 30 23:44:37.442840 2025] [:error] [pid 47441:tid 47454] [client 158.158.107.98:1796] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVPzZS6d2esGSN6Ne3OJgAAAAUo"]
[Tue Dec 30 23:44:37.939933 2025] [:error] [pid 28825:tid 28886] [client 158.158.107.98:1916] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVPzZT6dbc1G2hX-KfR76wAAAMc"]
[Tue Dec 30 23:44:38.476117 2025] [:error] [pid 28824:tid 28852] [client 158.158.107.98:1909] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVPzZn8FhtgLvBhuCR1tpgAAAIc"]
[Tue Dec 30 23:44:39.033795 2025] [:error] [pid 47441:tid 47455] [client 158.158.107.98:1853] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aVPzZy6d2esGSN6Ne3OJhAAAAUs"]
[Tue Dec 30 23:44:39.544846 2025] [:error] [pid 47441:tid 47450] [client 158.158.107.98:1859] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aVPzZy6d2esGSN6Ne3OJhgAAAUY"]
[Tue Dec 30 23:44:40.151334 2025] [:error] [pid 28824:tid 28863] [client 158.158.107.98:1807] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aVPzaH8FhtgLvBhuCR1tqQAAAJI"]
[Tue Dec 30 23:44:40.650896 2025] [:error] [pid 28954:tid 28956] [client 158.158.107.98:1803] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aVPzaKRZgqk7uuu8M0xv-wAAAAA"]
[Tue Dec 30 23:44:41.286398 2025] [:error] [pid 47441:tid 47466] [client 158.158.107.98:1844] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVPzaS6d2esGSN6Ne3OJjwAAAVY"]
[Tue Dec 30 23:44:41.818073 2025] [:error] [pid 28825:tid 28884] [client 158.158.107.98:1952] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVPzaT6dbc1G2hX-KfR78AAAAMU"]
[Tue Dec 30 23:44:42.379607 2025] [:error] [pid 28825:tid 28894] [client 158.158.107.98:1816] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVPzaj6dbc1G2hX-KfR78wAAAM8"]
[Tue Dec 30 23:44:42.896084 2025] [:error] [pid 47553:tid 47568] [client 158.158.107.98:1889] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVPzarvhy9HerwSnwIQ30wAAAY0"]
[Tue Dec 30 23:44:43.487947 2025] [:error] [pid 47441:tid 47463] [client 158.158.107.98:1860] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aVPzay6d2esGSN6Ne3OJlQAAAVM"]
[Tue Dec 30 23:44:44.047260 2025] [:error] [pid 28954:tid 28974] [client 158.158.107.98:1879] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aVPzbKRZgqk7uuu8M0xv_wAAABI"]
[Tue Dec 30 23:44:44.590038 2025] [:error] [pid 28954:tid 28965] [client 158.158.107.98:1811] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aVPzbKRZgqk7uuu8M0xwAAAAAAk"]
[Tue Dec 30 23:44:45.165424 2025] [:error] [pid 28954:tid 28980] [client 158.158.107.98:9312] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aVPzbaRZgqk7uuu8M0xwAQAAABg"]
[Tue Dec 30 23:44:45.719736 2025] [:error] [pid 28824:tid 28861] [client 158.158.107.98:1901] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aVPzbX8FhtgLvBhuCR1trgAAAJA"]
[Tue Dec 30 23:44:46.270454 2025] [:error] [pid 47441:tid 47444] [client 158.158.107.98:1932] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aVPzbi6d2esGSN6Ne3OJpQAAAUA"]
[Tue Dec 30 23:44:46.787524 2025] [:error] [pid 28824:tid 28856] [client 158.158.107.98:1904] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aVPzbn8FhtgLvBhuCR1trwAAAIs"]
[Tue Dec 30 23:44:47.366125 2025] [:error] [pid 28824:tid 28846] [client 158.158.107.98:1828] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aVPzb38FhtgLvBhuCR1tsQAAAIE"]
[Tue Dec 30 23:44:47.870845 2025] [:error] [pid 47553:tid 47577] [client 158.158.107.98:2008] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aVPzb7vhy9HerwSnwIQ32gAAAZY"]
[Tue Dec 30 23:44:48.392479 2025] [:error] [pid 28824:tid 28850] [client 158.158.107.98:1793] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aVPzcH8FhtgLvBhuCR1tswAAAIU"]
[Tue Dec 30 23:44:49.044902 2025] [:error] [pid 28824:tid 28851] [client 158.158.107.98:1851] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aVPzcX8FhtgLvBhuCR1ttwAAAIY"]
[Tue Dec 30 23:44:49.531887 2025] [:error] [pid 28954:tid 28978] [client 158.158.107.98:9307] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aVPzcaRZgqk7uuu8M0xwDgAAABY"]
[Tue Dec 30 23:44:50.031324 2025] [:error] [pid 28825:tid 28892] [client 158.158.107.98:1829] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVPzcj6dbc1G2hX-KfR79QAAAM0"]
[Tue Dec 30 23:44:50.541565 2025] [:error] [pid 28825:tid 28887] [client 158.158.107.98:1861] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVPzcj6dbc1G2hX-KfR79gAAAMg"]
[Tue Dec 30 23:44:51.080639 2025] [:error] [pid 28954:tid 28961] [client 158.158.107.98:1870] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVPzc6RZgqk7uuu8M0xwGQAAAAU"]
[Tue Dec 30 23:44:51.595939 2025] [:error] [pid 28824:tid 28847] [client 158.158.107.98:1747] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVPzc38FhtgLvBhuCR1tuwAAAII"]
[Tue Dec 30 23:44:52.098981 2025] [:error] [pid 28825:tid 28890] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue Dec 30 23:44:52.341271 2025] [:error] [pid 28825:tid 28886] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Dec 30 23:44:52.587103 2025] [:error] [pid 28825:tid 28902] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Tue Dec 30 23:44:52.829357 2025] [:error] [pid 28825:tid 28882] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Tue Dec 30 23:44:53.080467 2025] [:error] [pid 28825:tid 28889] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Tue Dec 30 23:44:53.323002 2025] [:error] [pid 28825:tid 28893] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Tue Dec 30 23:44:53.573120 2025] [:error] [pid 28825:tid 28885] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Tue Dec 30 23:44:53.836124 2025] [:error] [pid 28825:tid 28900] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Dec 30 23:44:54.085254 2025] [:error] [pid 28825:tid 28891] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Tue Dec 30 23:44:54.327172 2025] [:error] [pid 28825:tid 28881] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Tue Dec 30 23:44:54.596444 2025] [:error] [pid 28825:tid 28897] [client 158.158.107.98:1885] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Dec 30 23:44:54.843068 2025] [:error] [pid 28825:tid 28884] [client 158.158.107.98:1885] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVPzdj6dbc1G2hX-KfR8BAAAAMU"]
[Tue Dec 30 23:44:55.335653 2025] [:error] [pid 47553:tid 47571] [client 158.158.107.98:9333] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVPzd7vhy9HerwSnwIQ34QAAAZA"]
[Tue Dec 30 23:44:55.824203 2025] [:error] [pid 47441:tid 47446] [client 158.158.107.98:1974] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVPzdy6d2esGSN6Ne3OJsgAAAUI"]
[Tue Dec 30 23:44:56.355691 2025] [:error] [pid 47441:tid 47461] [client 158.158.107.98:9306] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aVPzeC6d2esGSN6Ne3OJtAAAAVE"]
[Tue Dec 30 23:44:56.898783 2025] [:error] [pid 28825:tid 28898] [client 158.158.107.98:1976] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVPzeD6dbc1G2hX-KfR8BwAAANM"]
[Tue Dec 30 23:44:57.423908 2025] [:error] [pid 28954:tid 28974] [client 158.158.107.98:1918] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVPzeaRZgqk7uuu8M0xwJAAAABI"]
[Tue Dec 30 23:44:57.916732 2025] [:error] [pid 28954:tid 28965] [client 158.158.107.98:2042] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVPzeaRZgqk7uuu8M0xwKQAAAAk"]
[Tue Dec 30 23:44:58.434054 2025] [:error] [pid 38777:tid 38780] [client 158.158.107.98:1981] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVPzemLn9GPxJXPhnHY7xQAAAEE"]
[Tue Dec 30 23:44:58.970627 2025] [:error] [pid 28826:tid 28915] [client 158.158.107.98:1867] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aVPzevOyQggePm1Ed9u8qAAAAQk"]
[Tue Dec 30 23:44:59.484304 2025] [:error] [pid 28825:tid 28889] [client 158.158.107.98:1744] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aVPzez6dbc1G2hX-KfR8DwAAAMo"]
[Tue Dec 30 23:45:00.000435 2025] [:error] [pid 28954:tid 28967] [client 158.158.107.98:1823] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aVPze6RZgqk7uuu8M0xwMAAAAAs"]
[Tue Dec 30 23:45:00.582467 2025] [:error] [pid 47553:tid 47578] [client 158.158.107.98:1864] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aVPzfLvhy9HerwSnwIQ35wAAAZc"]
[Tue Dec 30 23:45:01.069631 2025] [:error] [pid 28825:tid 28881] [client 158.158.107.98:1978] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVPzfT6dbc1G2hX-KfR8FgAAAMI"]
[Tue Dec 30 23:45:01.643012 2025] [:error] [pid 28825:tid 28894] [client 158.158.107.98:1855] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVPzfT6dbc1G2hX-KfR8GAAAAM8"]
[Tue Dec 30 23:45:02.173798 2025] [:error] [pid 28825:tid 28893] [client 158.158.107.98:1738] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVPzfj6dbc1G2hX-KfR8HgAAAM4"]
[Tue Dec 30 23:45:02.680837 2025] [:error] [pid 47441:tid 47451] [client 158.158.107.98:1814] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVPzfi6d2esGSN6Ne3OJvAAAAUc"]
[Tue Dec 30 23:45:03.190573 2025] [:error] [pid 28824:tid 28850] [client 158.158.107.98:1845] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aVPzf38FhtgLvBhuCR1tygAAAIU"]
[Tue Dec 30 23:45:03.733020 2025] [:error] [pid 28824:tid 28867] [client 158.158.107.98:1875] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aVPzf38FhtgLvBhuCR1tzAAAAJY"]
[Tue Dec 30 23:45:04.273297 2025] [:error] [pid 28954:tid 28957] [client 158.158.107.98:1820] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aVPzgKRZgqk7uuu8M0xwNQAAAAE"]
[Tue Dec 30 23:45:04.795994 2025] [:error] [pid 47441:tid 47453] [client 158.158.107.98:1818] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aVPzgC6d2esGSN6Ne3OJvwAAAUk"]
[Tue Dec 30 23:45:05.358188 2025] [:error] [pid 28824:tid 28857] [client 158.158.107.98:1856] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVPzgX8FhtgLvBhuCR1t0wAAAIw"]
[Tue Dec 30 23:45:05.934657 2025] [:error] [pid 28825:tid 28888] [client 158.158.107.98:1830] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVPzgT6dbc1G2hX-KfR8IQAAAMk"]
[Tue Dec 30 23:45:06.497835 2025] [:error] [pid 47553:tid 47567] [client 158.158.107.98:1799] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVPzgrvhy9HerwSnwIQ38wAAAYw"]
[Tue Dec 30 23:45:07.060874 2025] [:error] [pid 47553:tid 47577] [client 158.158.107.98:1938] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVPzg7vhy9HerwSnwIQ39QAAAZY"]
[Tue Dec 30 23:45:07.653143 2025] [:error] [pid 28826:tid 28927] [client 158.158.107.98:1759] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aVPzg_OyQggePm1Ed9u8sAAAARQ"]
[Tue Dec 30 23:45:08.270257 2025] [:error] [pid 28954:tid 28980] [client 158.158.107.98:1819] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aVPzhKRZgqk7uuu8M0xwOwAAABg"]
[Tue Dec 30 23:45:08.825995 2025] [:error] [pid 38777:tid 38782] [client 158.158.107.98:1824] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aVPzhGLn9GPxJXPhnHY7zQAAAEI"]
[Tue Dec 30 23:45:09.355007 2025] [:error] [pid 28825:tid 28900] [client 158.158.107.98:1847] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aVPzhT6dbc1G2hX-KfR8KwAAANU"]
[Tue Dec 30 23:45:09.941916 2025] [:error] [pid 28826:tid 28920] [client 158.158.107.98:1977] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVPzhfOyQggePm1Ed9u8tAAAAQ0"]
[Tue Dec 30 23:45:10.585271 2025] [:error] [pid 47441:tid 47463] [client 158.158.107.98:1812] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVPzhi6d2esGSN6Ne3OJxAAAAVM"]
[Tue Dec 30 23:45:11.094828 2025] [:error] [pid 28825:tid 28899] [client 158.158.107.98:1894] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVPzhz6dbc1G2hX-KfR8MAAAANQ"]
[Tue Dec 30 23:45:11.643472 2025] [:error] [pid 28825:tid 28896] [client 158.158.107.98:1842] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVPzhz6dbc1G2hX-KfR8MQAAANE"]
[Tue Dec 30 23:45:12.310780 2025] [:error] [pid 28824:tid 28851] [client 158.158.107.98:1664] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aVPziH8FhtgLvBhuCR1t4AAAAIY"]
[Tue Dec 30 23:45:12.865379 2025] [:error] [pid 28954:tid 28961] [client 158.158.107.98:1928] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aVPziKRZgqk7uuu8M0xwQgAAAAU"]
[Tue Dec 30 23:45:13.478442 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:1899] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aVPziS6d2esGSN6Ne3OJyAAAAU4"]
[Tue Dec 30 23:45:13.980479 2025] [:error] [pid 38777:tid 38789] [client 158.158.107.98:1840] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aVPziWLn9GPxJXPhnHY70wAAAEk"]
[Tue Dec 30 23:45:14.528187 2025] [:error] [pid 28825:tid 28880] [client 158.158.107.98:1821] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPzij6dbc1G2hX-KfR8OQAAAME"]
[Tue Dec 30 23:45:15.234382 2025] [:error] [pid 28954:tid 28956] [client 158.158.107.98:1817] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPzi6RZgqk7uuu8M0xwRQAAAAA"]
[Tue Dec 30 23:45:15.787081 2025] [:error] [pid 28824:tid 28852] [client 158.158.107.98:1898] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPzi38FhtgLvBhuCR1t5AAAAIc"]
[Tue Dec 30 23:45:16.324260 2025] [:error] [pid 28824:tid 28845] [client 158.158.107.98:1802] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aVPzjH8FhtgLvBhuCR1t5QAAAIA"]
[Tue Dec 30 23:45:17.090611 2025] [:error] [pid 47553:tid 47575] [client 158.158.107.98:1831] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aVPzjbvhy9HerwSnwIQ4BAAAAZQ"]
[Tue Dec 30 23:45:17.921151 2025] [:error] [pid 28824:tid 28863] [client 158.158.107.98:1980] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aVPzjX8FhtgLvBhuCR1t6gAAAJI"]
[Tue Dec 30 23:45:18.512242 2025] [:error] [pid 28824:tid 28866] [client 158.158.107.98:1748] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aVPzjn8FhtgLvBhuCR1t7AAAAJU"]
[Tue Dec 30 23:45:19.015747 2025] [:error] [pid 28824:tid 28849] [client 158.158.107.98:1745] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aVPzj38FhtgLvBhuCR1t7QAAAIQ"]
[Tue Dec 30 23:45:19.540662 2025] [:error] [pid 47553:tid 47568] [client 158.158.107.98:1798] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aVPzj7vhy9HerwSnwIQ4BwAAAY0"]
[Tue Dec 30 23:45:20.237341 2025] [:error] [pid 28954:tid 28975] [client 158.158.107.98:1810] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aVPzkKRZgqk7uuu8M0xwTAAAABM"]
[Tue Dec 30 23:45:20.796305 2025] [:error] [pid 28826:tid 28923] [client 158.158.107.98:1801] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aVPzkPOyQggePm1Ed9u8wAAAARA"]
[Tue Dec 30 23:45:21.364909 2025] [:error] [pid 47553:tid 47555] [client 158.158.107.98:1753] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aVPzkbvhy9HerwSnwIQ4CwAAAYA"]
[Tue Dec 30 23:45:21.947971 2025] [:error] [pid 28824:tid 28845] [client 158.158.107.98:1794] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aVPzkX8FhtgLvBhuCR1t9AAAAIA"]
[Tue Dec 30 23:45:22.642681 2025] [:error] [pid 28825:tid 28895] [client 158.158.107.98:1805] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aVPzkj6dbc1G2hX-KfR8UgAAANA"]
[Tue Dec 30 23:45:23.173125 2025] [:error] [pid 28825:tid 28898] [client 158.158.107.98:1757] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aVPzkz6dbc1G2hX-KfR8VAAAANM"]
[Tue Dec 30 23:45:23.859955 2025] [:error] [pid 28824:tid 28862] [client 158.158.107.98:1858] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aVPzk38FhtgLvBhuCR1t-wAAAJE"]
[Tue Dec 30 23:45:24.429840 2025] [:error] [pid 38777:tid 38783] [client 158.158.107.98:1777] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVPzlGLn9GPxJXPhnHY73gAAAEM"]
[Tue Dec 30 23:45:24.990427 2025] [:error] [pid 28824:tid 28850] [client 158.158.107.98:1780] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVPzlH8FhtgLvBhuCR1t_QAAAIU"]
[Tue Dec 30 23:45:25.481252 2025] [:error] [pid 28954:tid 28963] [client 158.158.107.98:1881] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVPzlaRZgqk7uuu8M0xwUwAAAAc"]
[Tue Dec 30 23:45:26.026728 2025] [:error] [pid 28824:tid 28865] [client 158.158.107.98:1808] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVPzln8FhtgLvBhuCR1uAQAAAJQ"]
[Tue Dec 30 23:45:26.754622 2025] [:error] [pid 47441:tid 47451] [client 158.158.107.98:1734] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aVPzli6d2esGSN6Ne3OJ0gAAAUc"]
[Tue Dec 30 23:45:27.340012 2025] [:error] [pid 28825:tid 28903] [client 158.158.107.98:1668] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aVPzlz6dbc1G2hX-KfR8WAAAANg"]
[Tue Dec 30 23:45:27.907742 2025] [:error] [pid 28954:tid 28979] [client 158.158.107.98:1877] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aVPzl6RZgqk7uuu8M0xwYQAAABc"]
[Tue Dec 30 23:45:28.418000 2025] [:error] [pid 28825:tid 28895] [client 158.158.107.98:1878] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aVPzmD6dbc1G2hX-KfR8WwAAANA"]
[Tue Dec 30 23:45:29.061988 2025] [:error] [pid 38777:tid 38800] [client 158.158.107.98:1666] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVPzmWLn9GPxJXPhnHY75gAAAFQ"]
[Tue Dec 30 23:45:29.578626 2025] [:error] [pid 28824:tid 28861] [client 158.158.107.98:1813] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVPzmX8FhtgLvBhuCR1uBQAAAJA"]
[Tue Dec 30 23:45:30.108224 2025] [:error] [pid 38777:tid 38789] [client 158.158.107.98:1827] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVPzmmLn9GPxJXPhnHY76wAAAEk"]
[Tue Dec 30 23:45:30.753851 2025] [:error] [pid 28826:tid 28909] [client 158.158.107.98:1994] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVPzmvOyQggePm1Ed9u8yAAAAQM"]
[Tue Dec 30 23:45:31.382208 2025] [:error] [pid 28825:tid 28892] [client 158.158.107.98:1686] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aVPzmz6dbc1G2hX-KfR8ZQAAAM0"]
[Tue Dec 30 23:45:31.915221 2025] [:error] [pid 28825:tid 28888] [client 158.158.107.98:1897] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aVPzmz6dbc1G2hX-KfR8aAAAAMk"]
[Tue Dec 30 23:45:32.438952 2025] [:error] [pid 47441:tid 47445] [client 158.158.107.98:9292] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aVPznC6d2esGSN6Ne3OJ1wAAAUE"]
[Tue Dec 30 23:45:33.018566 2025] [:error] [pid 38777:tid 38780] [client 158.158.107.98:1621] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aVPznWLn9GPxJXPhnHY78QAAAEE"]
[Tue Dec 30 23:45:33.683286 2025] [:error] [pid 28954:tid 28966] [client 158.158.107.98:1910] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aVPznaRZgqk7uuu8M0xwaAAAAAo"]
[Tue Dec 30 23:45:34.165531 2025] [:error] [pid 47553:tid 47564] [client 158.158.107.98:1740] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aVPznrvhy9HerwSnwIQ4GQAAAYk"]
[Tue Dec 30 23:45:34.706648 2025] [:error] [pid 47441:tid 47444] [client 158.158.107.98:1756] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aVPzni6d2esGSN6Ne3OJ3AAAAUA"]
[Tue Dec 30 23:45:35.214820 2025] [:error] [pid 28825:tid 28890] [client 158.158.107.98:1701] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aVPznz6dbc1G2hX-KfR8bwAAAMs"]
[Tue Dec 30 23:45:35.976728 2025] [:error] [pid 47441:tid 47462] [client 158.158.107.98:1742] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVPzny6d2esGSN6Ne3OJ3gAAAVI"]
[Tue Dec 30 23:45:36.716597 2025] [:error] [pid 47441:tid 47468] [client 158.158.107.98:1792] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVPzoC6d2esGSN6Ne3OJ4QAAAVg"]
[Tue Dec 30 23:45:37.259001 2025] [:error] [pid 47553:tid 47556] [client 158.158.107.98:1809] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVPzobvhy9HerwSnwIQ4GwAAAYE"]
[Tue Dec 30 23:45:37.941869 2025] [:error] [pid 28954:tid 28961] [client 158.158.107.98:1848] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aVPzoaRZgqk7uuu8M0xwaQAAAAU"]
[Tue Dec 30 23:45:38.473844 2025] [:error] [pid 47553:tid 47575] [client 158.158.107.98:1865] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aVPzorvhy9HerwSnwIQ4HgAAAZQ"]
[Tue Dec 30 23:45:39.104340 2025] [:error] [pid 47441:tid 47445] [client 158.158.107.98:1966] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aVPzoy6d2esGSN6Ne3OJ5QAAAUE"]
[Tue Dec 30 23:45:39.909612 2025] [:error] [pid 47441:tid 47448] [client 158.158.107.98:1795] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aVPzoy6d2esGSN6Ne3OJ5gAAAUQ"]
[Tue Dec 30 23:45:40.441732 2025] [:error] [pid 28824:tid 28858] [client 158.158.107.98:1684] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aVPzpH8FhtgLvBhuCR1uDAAAAI0"]
[Tue Dec 30 23:45:41.029608 2025] [:error] [pid 47441:tid 47453] [client 158.158.107.98:1837] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aVPzpS6d2esGSN6Ne3OJ6AAAAUk"]
[Tue Dec 30 23:45:41.640980 2025] [:error] [pid 28825:tid 28880] [client 158.158.107.98:1852] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aVPzpT6dbc1G2hX-KfR8eQAAAME"]
[Tue Dec 30 23:45:42.239293 2025] [:error] [pid 28954:tid 28957] [client 158.158.107.98:1751] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aVPzpqRZgqk7uuu8M0xwcAAAAAE"]
[Tue Dec 30 23:45:42.765332 2025] [:error] [pid 28826:tid 28930] [client 158.158.107.98:1683] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aVPzpvOyQggePm1Ed9u80AAAARc"]
[Tue Dec 30 23:45:43.310626 2025] [:error] [pid 47441:tid 47462] [client 158.158.107.98:1930] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVPzpy6d2esGSN6Ne3OJ7QAAAVI"]
[Tue Dec 30 23:45:43.922009 2025] [:error] [pid 47553:tid 47573] [client 158.158.107.98:1854] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVPzp7vhy9HerwSnwIQ4JAAAAZI"]
[Tue Dec 30 23:45:44.410226 2025] [:error] [pid 28824:tid 28865] [client 158.158.107.98:1758] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVPzqH8FhtgLvBhuCR1uFQAAAJQ"]
[Tue Dec 30 23:45:44.998995 2025] [:error] [pid 28954:tid 28974] [client 158.158.107.98:1672] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVPzqKRZgqk7uuu8M0xwcQAAABI"]
[Tue Dec 30 23:45:45.551383 2025] [:error] [pid 47553:tid 47566] [client 158.158.107.98:1765] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVPzqbvhy9HerwSnwIQ4JgAAAYs"]
[Tue Dec 30 23:45:46.044190 2025] [:error] [pid 47441:tid 47458] [client 158.158.107.98:1888] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVPzqi6d2esGSN6Ne3OJ8QAAAU4"]
[Tue Dec 30 23:45:46.604675 2025] [:error] [pid 47441:tid 47448] [client 158.158.107.98:1752] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVPzqi6d2esGSN6Ne3OJ8wAAAUQ"]
[Tue Dec 30 23:45:47.662947 2025] [:error] [pid 28824:tid 28853] [client 158.158.107.98:1741] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVPzq38FhtgLvBhuCR1uGQAAAIg"]
[Tue Dec 30 23:45:48.206766 2025] [:error] [pid 47553:tid 47571] [client 158.158.107.98:1767] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVPzrLvhy9HerwSnwIQ4KgAAAZA"]
[Tue Dec 30 23:45:48.737481 2025] [:error] [pid 28826:tid 28919] [client 158.158.107.98:1841] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVPzrPOyQggePm1Ed9u81wAAAQw"]
[Tue Dec 30 23:45:49.342788 2025] [:error] [pid 47553:tid 47563] [client 158.158.107.98:1677] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVPzrbvhy9HerwSnwIQ4LQAAAYg"]
[Tue Dec 30 23:45:49.889255 2025] [:error] [pid 47553:tid 47560] [client 158.158.107.98:1776] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVPzrbvhy9HerwSnwIQ4LwAAAYU"]
[Tue Dec 30 23:45:50.444250 2025] [:error] [pid 28954:tid 28967] [client 158.158.107.98:1768] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVPzrqRZgqk7uuu8M0xwfQAAAAs"]
[Tue Dec 30 23:45:50.979626 2025] [:error] [pid 47553:tid 47573] [client 158.158.107.98:1850] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVPzrrvhy9HerwSnwIQ4MAAAAZI"]
[Tue Dec 30 23:45:51.478285 2025] [:error] [pid 28954:tid 28972] [client 158.158.107.98:1600] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVPzr6RZgqk7uuu8M0xwfwAAABA"]
[Tue Dec 30 23:45:51.986084 2025] [:error] [pid 47553:tid 47564] [client 158.158.107.98:1846] [client 158.158.107.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVPzr7vhy9HerwSnwIQ4NQAAAYk"]
[Wed Dec 31 00:54:55.934563 2025] [:error] [pid 50068:tid 50086] [client 34.127.46.180:56355] [client 34.127.46.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.46.180, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQD3_Jem-CRnWG3ZuxyNwAAABA"]
[Wed Dec 31 00:54:55.938104 2025] [:error] [pid 50068:tid 50086] [client 34.127.46.180:56355] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 31 00:54:58.084085 2025] [:error] [pid 50068:tid 50070] [client 34.127.46.180:56355] [client 34.127.46.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aVQD4vJem-CRnWG3ZuxyQwAAAAA"]
[Wed Dec 31 00:54:58.464858 2025] [:error] [pid 1651:tid 1691] [client 34.127.46.180:51009] [client 34.127.46.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aVQD4nAnYt-Xi20L7fDjPgAAAUA"]
[Wed Dec 31 00:54:58.845688 2025] [:error] [pid 49983:tid 50058] [client 34.127.46.180:52386] [client 34.127.46.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aVQD4miL1pay2WifcvaGJgAAARA"]
[Wed Dec 31 00:54:59.213356 2025] [:error] [pid 1651:tid 1694] [client 34.127.46.180:50633] [client 34.127.46.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aVQD43AnYt-Xi20L7fDjQQAAAUM"]
[Wed Dec 31 00:54:59.656566 2025] [:error] [pid 1651:tid 1701] [client 34.127.46.180:55281] [client 34.127.46.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aVQD43AnYt-Xi20L7fDjQgAAAUo"]
[Wed Dec 31 00:55:00.041613 2025] [:error] [pid 50068:tid 50090] [client 34.127.46.180:50654] [client 34.127.46.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aVQD5PJem-CRnWG3ZuxyRgAAABQ"]
[Wed Dec 31 00:55:00.411270 2025] [:error] [pid 1651:tid 1705] [client 34.127.46.180:57264] [client 34.127.46.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aVQD5HAnYt-Xi20L7fDjQwAAAU4"]
[Wed Dec 31 02:31:53.547304 2025] [:error] [pid 49981:tid 49992] [client 195.178.110.190:34814] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aVQamZCCXHPw9uuzhEx7rgAAAIc"]
[Wed Dec 31 04:00:56.006522 2025] [:error] [pid 33109:tid 33120] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Wed Dec 31 04:00:56.144744 2025] [:error] [pid 33109:tid 33121] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Wed Dec 31 04:00:56.282596 2025] [:error] [pid 33109:tid 33125] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.yahoo.com/
[Wed Dec 31 04:00:56.419945 2025] [:error] [pid 33109:tid 33114] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.co.uk/
[Wed Dec 31 04:00:56.558655 2025] [:error] [pid 33109:tid 33124] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://duckduckgo.com/
[Wed Dec 31 04:00:56.696186 2025] [:error] [pid 33109:tid 33117] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.bing.com/
[Wed Dec 31 04:00:56.971054 2025] [:error] [pid 33109:tid 33128] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.bing.com/
[Wed Dec 31 04:00:57.108609 2025] [:error] [pid 33109:tid 33116] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Wed Dec 31 04:00:57.246865 2025] [:error] [pid 33109:tid 33118] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.fr/
[Wed Dec 31 04:00:57.382330 2025] [:error] [pid 33109:tid 33132] [client 52.141.42.203:63637] [client 52.141.42.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.141.42.203, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVQvecYN9k_fnLM-n46uHgAAANU"], referer: https://duckduckgo.com/
[Wed Dec 31 04:00:57.385072 2025] [:error] [pid 33109:tid 33132] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://duckduckgo.com/
[Wed Dec 31 04:00:57.522900 2025] [:error] [pid 33109:tid 33122] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php, referer: https://www.google.com/
[Wed Dec 31 04:00:57.660700 2025] [:error] [pid 33109:tid 33120] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.co.uk/
[Wed Dec 31 04:00:57.798633 2025] [:error] [pid 33109:tid 33123] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.co.uk/
[Wed Dec 31 04:00:57.936320 2025] [:error] [pid 33109:tid 33113] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://duckduckgo.com/
[Wed Dec 31 04:00:58.073212 2025] [:error] [pid 33109:tid 33133] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: https://www.google.com/
[Wed Dec 31 04:00:58.210266 2025] [:error] [pid 33109:tid 33125] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php, referer: https://www.google.de/
[Wed Dec 31 04:00:58.356219 2025] [:error] [pid 33109:tid 33111] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://www.google.de/
[Wed Dec 31 04:00:58.493795 2025] [:error] [pid 33109:tid 33114] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xml.php, referer: https://www.google.fr/
[Wed Dec 31 04:00:59.184066 2025] [:error] [pid 33109:tid 33116] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://duckduckgo.com/
[Wed Dec 31 04:00:59.461801 2025] [:error] [pid 33109:tid 33122] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php, referer: https://duckduckgo.com/
[Wed Dec 31 04:00:59.737463 2025] [:error] [pid 33109:tid 33120] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.fr/
[Wed Dec 31 04:00:59.875604 2025] [:error] [pid 33109:tid 33123] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.co.uk/
[Wed Dec 31 04:01:00.022239 2025] [:error] [pid 33109:tid 33121] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php, referer: https://www.google.com/
[Wed Dec 31 04:01:00.162228 2025] [:error] [pid 33109:tid 33133] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.com/
[Wed Dec 31 04:01:00.301230 2025] [:error] [pid 33109:tid 33111] [client 52.141.42.203:63637] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php, referer: https://www.bing.com/
[Wed Dec 31 04:01:00.435977 2025] [:error] [pid 33109:tid 33114] [client 52.141.42.203:63637] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "aVQvfMYN9k_fnLM-n46uOwAAAMM"], referer: https://duckduckgo.com/
[Wed Dec 31 04:01:00.706447 2025] [:error] [pid 33003:tid 33043] [client 52.141.42.203:65487] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/thickbox/thickbox.php"] [unique_id "aVQvfLOkdrCgTt0MxWK-NQAAAEU"], referer: https://www.bing.com/
[Wed Dec 31 04:01:01.956319 2025] [:error] [pid 33003:tid 33060] [client 52.141.42.203:64302] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVQvfbOkdrCgTt0MxWK-PgAAAFY"], referer: https://www.google.com/
[Wed Dec 31 04:01:02.227058 2025] [:error] [pid 33002:tid 33022] [client 52.141.42.203:64204] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVQvfvnsZEcORmTFnriE_QAAAAs"], referer: https://www.yahoo.com/
[Wed Dec 31 04:01:02.637344 2025] [:error] [pid 33109:tid 33129] [client 52.141.42.203:65514] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVQvfsYN9k_fnLM-n46uQQAAANI"], referer: https://www.bing.com/
[Wed Dec 31 04:01:02.907500 2025] [:error] [pid 33002:tid 33018] [client 52.141.42.203:6050] [client 52.141.42.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aVQvfvnsZEcORmTFnriFAgAAAAc"], referer: https://duckduckgo.com/
[Wed Dec 31 04:01:03.181579 2025] [:error] [pid 33109:tid 33123] [client 52.141.42.203:63582] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://duckduckgo.com/
[Wed Dec 31 04:03:50.607339 2025] [:error] [pid 33003:tid 33046] [client 43.130.110.130:39906] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVQwJrOkdrCgTt0MxWK_kAAAAEg"]
[Wed Dec 31 10:03:35.889886 2025] [:error] [pid 20484:tid 20499] [client 49.51.243.95:45068] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVSEd5hjQxR09ihThyT36wAAAQ0"]
[Wed Dec 31 11:26:26.078346 2025] [:error] [pid 48715:tid 48796] [client 43.153.48.240:57800] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVSX4mamQpQY7KfuoW30nAAAAJg"]
[Wed Dec 31 13:59:15.642716 2025] [:error] [pid 48713:tid 48742] [client 43.130.57.46:57432] [client 43.130.57.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVS7s0yNMVAGtWvMliOs4gAAANg"]
[Wed Dec 31 16:27:22.843928 2025] [:error] [pid 48833:tid 48848] [client 172.58.241.128:55460] [client 172.58.241.128] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aVTeamPnRNOqqZ1OQg_LnwAAAE0"], referer: https://www.google.com
[Wed Dec 31 16:27:30.486910 2025] [:error] [pid 48833:tid 48840] [client 172.58.241.128:51948] [client 172.58.241.128] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVTecmPnRNOqqZ1OQg_LqwAAAEU"]
[Wed Dec 31 16:27:30.487209 2025] [:error] [pid 48833:tid 48840] [client 172.58.241.128:51948] [client 172.58.241.128] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.58.241.128, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVTecmPnRNOqqZ1OQg_LqwAAAEU"]
[Wed Dec 31 16:27:30.491754 2025] [:error] [pid 48833:tid 48840] [client 172.58.241.128:51948] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 31 16:27:33.242061 2025] [:error] [pid 48714:tid 48756] [client 172.58.241.128:28313] [client 172.58.241.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.58.241.128, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aVTedb9PcChEHWa6VitskAAAAAs"], referer: https://www.google.com
[Wed Dec 31 16:27:33.245958 2025] [:error] [pid 48714:tid 48756] [client 172.58.241.128:28313] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Dec 31 16:27:51.456022 2025] [:error] [pid 48713:tid 48739] [client 172.58.241.128:4601] [client 172.58.241.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.58.241.128, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aVTeh0yNMVAGtWvMliPLAAAAANU"], referer: https://www.google.com
[Wed Dec 31 16:27:51.462844 2025] [:error] [pid 48713:tid 48739] [client 172.58.241.128:4601] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Dec 31 17:05:58.165441 2025] [:error] [pid 64406:tid 64418] [client 143.198.210.125:54506] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVTndiLRcJYP7e7OhBYBhAAAAQo"]
[Wed Dec 31 17:40:08.227163 2025] [:error] [pid 8068:tid 8082] [client 177.241.166.103:12545] [client 177.241.166.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.241.166.103, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVTveCSVtzoWnijCxFY-HAAAAcw"]
[Wed Dec 31 17:40:08.232410 2025] [:error] [pid 8068:tid 8082] [client 177.241.166.103:12545] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 31 17:40:22.698972 2025] [:error] [pid 7576:tid 7578] [client 49.37.9.226:62605] [client 49.37.9.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.9.226, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVTvhqFUpQkpGJNxC_-a9AAAAUA"]
[Wed Dec 31 17:40:22.705364 2025] [:error] [pid 7576:tid 7578] [client 49.37.9.226:62605] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 31 17:40:24.771383 2025] [:error] [pid 8068:tid 8073] [client 124.217.80.108:3700] [client 124.217.80.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.80.108, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVTviCSVtzoWnijCxFY-ZgAAAcM"]
[Wed Dec 31 17:40:24.774983 2025] [:error] [pid 8068:tid 8073] [client 124.217.80.108:3700] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Dec 31 18:15:03.123269 2025] [:error] [pid 64406:tid 64409] [client 43.157.170.126:38926] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVT3pyLRcJYP7e7OhBYMPgAAAQE"]
[Wed Dec 31 19:59:46.684833 2025] [:error] [pid 48833:tid 48837] [client 192.144.148.122:50576] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVUQMmPnRNOqqZ1OQg_0dwAAAEI"]
[Wed Dec 31 23:07:24.737867 2025] [:error] [pid 8068:tid 8079] [client 170.106.163.48:54538] [client 170.106.163.48] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVU8LCSVtzoWnijCxFaMmQAAAck"]
[Thu Jan 01 01:00:37.643564 2026] [:error] [pid 64406:tid 64423] [client 43.159.145.149:55952] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVVWtSLRcJYP7e7OhBZI8AAAAQ8"]
[Thu Jan 01 02:18:07.644692 2026] [:error] [pid 7576:tid 7582] [client 120.71.59.24:49989] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVVo36FUpQkpGJNxC_8CUAAAAUQ"]
[Thu Jan 01 08:17:03.806415 2026] [:error] [pid 58370:tid 58386] [client 49.233.45.47:54280] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVW8_zkIHVNixymRHHcX8wAAAQ4"]
[Thu Jan 01 08:45:39.162379 2026] [:error] [pid 58817:tid 58848] [client 170.106.113.235:36240] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVXDs1ebWGLeUWiwYf_88gAAABY"]
[Thu Jan 01 09:05:44.327946 2026] [:error] [pid 58370:tid 58389] [client 170.106.187.106:59234] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVXIaDkIHVNixymRHHcqaQAAARE"]
[Thu Jan 01 10:06:29.730160 2026] [:error] [pid 58818:tid 58857] [client 43.130.139.136:44196] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVXWpWr6b3Nsqkrqu80N6wAAAEQ"]
[Thu Jan 01 14:27:41.761699 2026] [:error] [pid 54016:tid 54032] [client 1.15.52.154:56712] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVYT3de606Kc9XfrojGDTQAAAc4"]
[Thu Jan 01 15:44:30.447922 2026] [:error] [pid 26614:tid 26658] [client 43.128.149.102:55636] [client 43.128.149.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVYl3hdl23_Mbe-Eo9gUbgAAAIY"]
[Thu Jan 01 18:15:23.339735 2026] [:error] [pid 36395:tid 36414] [client 43.164.196.57:51324] [client 43.164.196.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVZJO2QHG4-J0nOXDr7knAAAABE"]
[Thu Jan 01 18:31:28.122538 2026] [:error] [pid 10405:tid 10476] [client 154.26.129.117:52710] [client 154.26.129.117] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aVZNAO4Gs0mHZgxXT5nKYAAAAQs"]
[Thu Jan 01 21:53:15.783487 2026] [:error] [pid 63889:tid 63955] [client 49.36.112.76:50737] [client 49.36.112.76] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.112.76, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVZ8S9U3sRpsUcz9MOB-kAAAAAk"]
[Thu Jan 01 21:53:15.788660 2026] [:error] [pid 63889:tid 63955] [client 49.36.112.76:50737] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 01 22:16:09.841120 2026] [:error] [pid 63888:tid 63927] [client 170.106.35.137:60854] [client 170.106.35.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVaBqdoJ3YkVCYrOT1wjFwAAAIg"]
[Thu Jan 01 23:06:20.866024 2026] [:error] [pid 995:tid 998] [client 43.130.154.56:38818] [client 43.130.154.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVaNbGJVFefxwdkvFzgfZwAAAQA"]
[Fri Jan 02 00:49:56.188829 2026] [:error] [pid 19497:tid 19559] [client 43.155.27.244:38720] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aValtKzNNNiUujf1d5FGDAAAAMQ"]
[Fri Jan 02 03:18:13.245245 2026] [:error] [pid 19497:tid 19567] [client 14.215.163.132:43165] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVbIdazNNNiUujf1d5FlQAAAAMw"]
[Fri Jan 02 03:22:04.292210 2026] [:error] [pid 19495:tid 19507] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:04.418809 2026] [:error] [pid 19495:tid 19502] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.bing.com/
[Fri Jan 02 03:22:04.523739 2026] [:error] [pid 19495:tid 19521] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php, referer: https://www.google.com/
[Fri Jan 02 03:22:04.629582 2026] [:error] [pid 19495:tid 19506] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:04.740399 2026] [:error] [pid 19495:tid 19517] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php, referer: https://www.google.de/
[Fri Jan 02 03:22:04.853157 2026] [:error] [pid 19495:tid 19508] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.com/
[Fri Jan 02 03:22:04.959313 2026] [:error] [pid 19495:tid 19519] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:05.068662 2026] [:error] [pid 19495:tid 19505] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:05.180008 2026] [:error] [pid 19495:tid 19504] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.bing.com/
[Fri Jan 02 03:22:05.284985 2026] [:error] [pid 19495:tid 19518] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:05.394993 2026] [:error] [pid 19495:tid 19515] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:05.505753 2026] [:error] [pid 19495:tid 19512] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Fri Jan 02 03:22:05.616858 2026] [:error] [pid 19495:tid 19509] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-header.php, referer: https://www.bing.com/
[Fri Jan 02 03:22:05.729393 2026] [:error] [pid 19495:tid 19513] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.bing.com/
[Fri Jan 02 03:22:05.840332 2026] [:error] [pid 19495:tid 19516] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:05.951544 2026] [:error] [pid 19495:tid 19522] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://duckduckgo.com/
[Fri Jan 02 03:22:06.063953 2026] [:error] [pid 19495:tid 19510] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/alf.php, referer: https://www.google.com/
[Fri Jan 02 03:22:06.173803 2026] [:error] [pid 19495:tid 19514] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:06.285871 2026] [:error] [pid 19495:tid 19520] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:06.396662 2026] [:error] [pid 19495:tid 19524] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.google.com/
[Fri Jan 02 03:22:06.508635 2026] [:error] [pid 19495:tid 19500] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php, referer: https://www.google.de/
[Fri Jan 02 03:22:06.620966 2026] [:error] [pid 19495:tid 19507] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.bing.com/
[Fri Jan 02 03:22:06.733143 2026] [:error] [pid 19495:tid 19502] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:06.843668 2026] [:error] [pid 19495:tid 19521] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://duckduckgo.com/
[Fri Jan 02 03:22:06.951736 2026] [:error] [pid 19495:tid 19506] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:07.062142 2026] [:error] [pid 19495:tid 19517] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php, referer: https://www.google.de/
[Fri Jan 02 03:22:07.172678 2026] [:error] [pid 19495:tid 19508] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Fri Jan 02 03:22:07.288328 2026] [:error] [pid 19495:tid 19519] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:07.398783 2026] [:error] [pid 19495:tid 19523] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php, referer: https://www.google.de/
[Fri Jan 02 03:22:07.510264 2026] [:error] [pid 19495:tid 19505] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:07.621881 2026] [:error] [pid 19495:tid 19503] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:07.736478 2026] [:error] [pid 19495:tid 19501] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:07.874430 2026] [:error] [pid 19495:tid 19515] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:07.988924 2026] [:error] [pid 19495:tid 19512] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/favicon.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:08.103012 2026] [:error] [pid 19495:tid 19509] [client 4.193.190.39:59597] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Fri Jan 02 03:22:08.209526 2026] [:error] [pid 19495:tid 19513] [client 4.193.190.39:59597] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aVbJYMHOHGMziFVGMwAqxAAAAE0"], referer: https://www.google.co.uk/
[Fri Jan 02 03:22:08.425533 2026] [:error] [pid 19583:tid 19597] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/fx.php, referer: https://duckduckgo.com/
[Fri Jan 02 03:22:08.536593 2026] [:error] [pid 19583:tid 19588] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.bing.com/
[Fri Jan 02 03:22:08.650006 2026] [:error] [pid 19583:tid 19586] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:08.761640 2026] [:error] [pid 19583:tid 19592] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:08.872667 2026] [:error] [pid 19583:tid 19606] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://www.google.de/
[Fri Jan 02 03:22:08.974738 2026] [:error] [pid 19583:tid 19608] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:09.087776 2026] [:error] [pid 19583:tid 19604] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/help.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:09.199317 2026] [:error] [pid 19583:tid 19590] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:09.309971 2026] [:error] [pid 19583:tid 19593] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:09.421444 2026] [:error] [pid 19583:tid 19610] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.com/
[Fri Jan 02 03:22:09.531179 2026] [:error] [pid 19583:tid 19609] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:09.641027 2026] [:error] [pid 19583:tid 19587] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:09.753079 2026] [:error] [pid 19583:tid 19603] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:09.862626 2026] [:error] [pid 19583:tid 19596] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php, referer: https://www.google.de/
[Fri Jan 02 03:22:09.969540 2026] [:error] [pid 19583:tid 19601] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://duckduckgo.com/
[Fri Jan 02 03:22:10.080857 2026] [:error] [pid 19583:tid 19600] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.de/
[Fri Jan 02 03:22:10.190485 2026] [:error] [pid 19583:tid 19599] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:10.299985 2026] [:error] [pid 19583:tid 19594] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/root.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:10.407879 2026] [:error] [pid 19583:tid 19597] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://duckduckgo.com/
[Fri Jan 02 03:22:10.516055 2026] [:error] [pid 19583:tid 19588] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:10.624059 2026] [:error] [pid 19583:tid 19586] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/termps.php, referer: https://www.google.de/
[Fri Jan 02 03:22:10.735998 2026] [:error] [pid 19583:tid 19595] [client 4.193.190.39:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php, referer: https://www.google.com/
[Fri Jan 02 03:22:10.842784 2026] [:error] [pid 19583:tid 19592] [client 4.193.190.39:59605] [client 4.193.190.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aVbJYitltYb8hAZpm4ty1gAAAQY"], referer: https://www.google.fr/
[Fri Jan 02 03:22:11.062303 2026] [:error] [pid 19583:tid 19590] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:11.171930 2026] [:error] [pid 19583:tid 19605] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:11.285079 2026] [:error] [pid 19583:tid 19591] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.bing.com/
[Fri Jan 02 03:22:11.396146 2026] [:error] [pid 19583:tid 19589] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.google.de/
[Fri Jan 02 03:22:11.511517 2026] [:error] [pid 19583:tid 19610] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.yahoo.com/
[Fri Jan 02 03:22:11.640014 2026] [:error] [pid 19583:tid 19609] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-include.php, referer: https://www.google.de/
[Fri Jan 02 03:22:11.751098 2026] [:error] [pid 19583:tid 19587] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:11.860632 2026] [:error] [pid 19583:tid 19603] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.google.fr/
[Fri Jan 02 03:22:11.973509 2026] [:error] [pid 19583:tid 19596] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.de/
[Fri Jan 02 03:22:12.083288 2026] [:error] [pid 19583:tid 19601] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.de/
[Fri Jan 02 03:22:12.194205 2026] [:error] [pid 19583:tid 19600] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://www.google.com/
[Fri Jan 02 03:22:12.301761 2026] [:error] [pid 19583:tid 19599] [client 4.193.190.39:61302] [client 4.193.190.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.193.190.39, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aVbJZCtltYb8hAZpm4ty5AAAAQ0"], referer: https://www.google.co.uk/
[Fri Jan 02 03:22:12.305179 2026] [:error] [pid 19583:tid 19599] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.co.uk/
[Fri Jan 02 03:22:12.417722 2026] [:error] [pid 19583:tid 19594] [client 4.193.190.39:61302] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Fri Jan 02 05:07:14.356137 2026] [:error] [pid 63098:tid 63107] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://duckduckgo.com/
[Fri Jan 02 05:07:14.495117 2026] [:error] [pid 63098:tid 63109] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php, referer: https://duckduckgo.com/
[Fri Jan 02 05:07:14.634544 2026] [:error] [pid 63098:tid 63129] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php, referer: https://www.google.fr/
[Fri Jan 02 05:07:14.773127 2026] [:error] [pid 63098:tid 63120] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://www.google.fr/
[Fri Jan 02 05:07:14.913183 2026] [:error] [pid 63098:tid 63110] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Fri Jan 02 05:07:15.053078 2026] [:error] [pid 63098:tid 63111] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.de/
[Fri Jan 02 05:07:15.754113 2026] [:error] [pid 63098:tid 63126] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php, referer: https://www.google.com/
[Fri Jan 02 05:07:15.895360 2026] [:error] [pid 63098:tid 63114] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.de/
[Fri Jan 02 05:07:16.035470 2026] [:error] [pid 63098:tid 63116] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php, referer: https://www.google.fr/
[Fri Jan 02 05:07:16.175015 2026] [:error] [pid 63098:tid 63125] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/networks.php, referer: https://www.google.co.uk/
[Fri Jan 02 05:07:16.314139 2026] [:error] [pid 63098:tid 63115] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.co.uk/
[Fri Jan 02 05:07:16.453558 2026] [:error] [pid 63098:tid 63127] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/luuf.php, referer: https://www.google.co.uk/
[Fri Jan 02 05:07:16.592917 2026] [:error] [pid 63098:tid 63123] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.de/
[Fri Jan 02 05:07:16.733991 2026] [:error] [pid 63098:tid 63122] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.google.de/
[Fri Jan 02 05:07:16.873819 2026] [:error] [pid 63098:tid 63130] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php, referer: https://www.google.co.uk/
[Fri Jan 02 05:07:17.013053 2026] [:error] [pid 63098:tid 63119] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.co.uk/
[Fri Jan 02 05:07:17.157215 2026] [:error] [pid 63098:tid 63117] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.fr/
[Fri Jan 02 05:07:17.297090 2026] [:error] [pid 63098:tid 63112] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Fri Jan 02 05:07:17.437986 2026] [:error] [pid 63098:tid 63118] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Fri Jan 02 05:07:17.577751 2026] [:error] [pid 63098:tid 63108] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php, referer: https://duckduckgo.com/
[Fri Jan 02 05:07:17.718316 2026] [:error] [pid 63098:tid 63128] [client 74.225.136.96:14301] File does not exist: /usr/local/apache/htdocs/suspended-page/tmp.php, referer: https://www.google.com/
[Fri Jan 02 05:07:18.974653 2026] [:error] [pid 63098:tid 63126] [client 74.225.136.96:14301] [client 74.225.136.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVbiBsez9k78gUs48kqDfAAAABM"], referer: https://www.google.fr/
[Fri Jan 02 05:07:19.248027 2026] [:error] [pid 63100:tid 63183] [client 74.225.136.96:14311] [client 74.225.136.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVbiBzuUXUKd3KTnKl-E1QAAAJY"], referer: https://www.google.co.uk/
[Fri Jan 02 05:07:19.521024 2026] [:error] [pid 63098:tid 63125] [client 74.225.136.96:14274] [client 74.225.136.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aVbiB8ez9k78gUs48kqDfQAAABI"], referer: https://www.google.fr/
[Fri Jan 02 05:07:19.793415 2026] [:error] [pid 63100:tid 63173] [client 74.225.136.96:14334] [client 74.225.136.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVbiBzuUXUKd3KTnKl-E1gAAAIw"], referer: https://www.google.de/
[Fri Jan 02 05:07:20.207120 2026] [:error] [pid 63208:tid 63230] [client 74.225.136.96:14326] [client 74.225.136.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVbiCHKLI9INGPLzfndoowAAANM"], referer: https://www.yahoo.com/
[Fri Jan 02 05:07:20.485617 2026] [:error] [pid 63208:tid 63211] [client 74.225.136.96:14277] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php, referer: https://www.google.de/
[Fri Jan 02 05:07:20.766227 2026] [:error] [pid 63208:tid 63233] [client 74.225.136.96:14277] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php, referer: https://www.bing.com/
[Fri Jan 02 05:07:20.905613 2026] [:error] [pid 63208:tid 63223] [client 74.225.136.96:14277] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php, referer: https://www.yahoo.com/
[Fri Jan 02 05:07:21.045322 2026] [:error] [pid 63208:tid 63225] [client 74.225.136.96:14277] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php, referer: https://www.bing.com/
[Fri Jan 02 05:07:21.185025 2026] [:error] [pid 63208:tid 63232] [client 74.225.136.96:14277] File does not exist: /usr/local/apache/htdocs/suspended-page/sa.php, referer: https://duckduckgo.com/
[Fri Jan 02 05:07:21.325730 2026] [:error] [pid 63208:tid 63217] [client 74.225.136.96:14277] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php, referer: https://www.google.com/
[Fri Jan 02 05:07:21.464183 2026] [:error] [pid 63208:tid 63218] [client 74.225.136.96:14277] File does not exist: /usr/local/apache/htdocs/suspended-page/uploaded_script.php, referer: https://duckduckgo.com/
[Fri Jan 02 09:20:27.927734 2026] [:error] [pid 50186:tid 50206] [client 123.187.240.242:57360] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVcdW1XqK_iX4f-S70LEnAAAAZI"]
[Fri Jan 02 10:28:14.155930 2026] [:error] [pid 50046:tid 50067] [client 54.236.84.252:44146] [client 54.236.84.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aVctPizv7fgIiwkQYNBBowAAAVM"]
[Fri Jan 02 12:23:47.597319 2026] [:error] [pid 29316:tid 29328] [client 188.166.45.200:62869] [client 188.166.45.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.45.200, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aVdIU9fT9ty-7jZmgf9OBwAAAQo"]
[Fri Jan 02 12:23:47.600842 2026] [:error] [pid 29316:tid 29328] [client 188.166.45.200:62869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 02 13:48:11.787001 2026] [:error] [pid 43358:tid 43360] [client 164.92.244.53:64740] [client 164.92.244.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.244.53, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aVdcGwncbHK9auzvrA8OVAAAAcA"]
[Fri Jan 02 13:48:11.790646 2026] [:error] [pid 43358:tid 43360] [client 164.92.244.53:64740] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 02 14:55:15.473561 2026] [:error] [pid 63098:tid 63111] [client 54.236.84.252:51634] [client 54.236.84.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aVdr08ez9k78gUs48koHFwAAAAQ"]
[Fri Jan 02 21:59:02.913980 2026] [:error] [pid 50186:tid 50191] [client 36.41.75.167:49719] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVfPJlXqK_iX4f-S70KFsgAAAYM"]
[Fri Jan 02 23:55:50.827321 2026] [:error] [pid 50186:tid 50204] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Jan 02 23:55:51.126884 2026] [:error] [pid 50186:tid 50189] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Jan 02 23:55:51.441472 2026] [:error] [pid 50186:tid 50201] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Jan 02 23:55:51.760883 2026] [:error] [pid 50186:tid 50206] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Jan 02 23:55:52.079257 2026] [:error] [pid 50186:tid 50203] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Jan 02 23:55:52.390199 2026] [:error] [pid 50186:tid 50188] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Jan 02 23:55:52.680221 2026] [:error] [pid 50186:tid 50200] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Jan 02 23:55:53.049257 2026] [:error] [pid 50186:tid 50197] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Jan 02 23:55:53.617175 2026] [:error] [pid 50186:tid 50194] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Jan 02 23:55:54.214192 2026] [:error] [pid 50186:tid 50209] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Jan 02 23:55:54.489900 2026] [:error] [pid 50186:tid 50205] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Jan 02 23:55:54.778351 2026] [:error] [pid 50186:tid 50192] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Jan 02 23:55:55.059412 2026] [:error] [pid 50186:tid 50190] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Jan 02 23:55:55.365350 2026] [:error] [pid 50186:tid 50195] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Jan 02 23:55:55.676879 2026] [:error] [pid 50186:tid 50210] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Jan 02 23:55:57.027439 2026] [:error] [pid 50186:tid 50210] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Jan 02 23:55:57.317221 2026] [:error] [pid 50186:tid 50197] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Jan 02 23:55:57.620505 2026] [:error] [pid 50186:tid 50209] [client 149.34.240.111:47160] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Jan 02 23:56:02.085893 2026] [:error] [pid 50186:tid 50204] [client 149.34.240.111:47160] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aVfqklXqK_iX4f-S70KqPQAAAZA"]
[Fri Jan 02 23:56:03.434059 2026] [:error] [pid 63099:tid 63143] [client 149.34.240.111:46488] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aVfqk8mCZokRPYUhzvjfmwAAAEk"]
[Fri Jan 02 23:56:04.735590 2026] [:error] [pid 63099:tid 63146] [client 149.34.240.111:46498] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Jan 02 23:56:05.491525 2026] [:error] [pid 63099:tid 63150] [client 149.34.240.111:46498] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aVfqlcmCZokRPYUhzvjfogAAAFA"]
[Fri Jan 02 23:56:06.507807 2026] [:error] [pid 50186:tid 50199] [client 149.34.240.111:46048] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Jan 02 23:56:06.790038 2026] [:error] [pid 50186:tid 50202] [client 149.34.240.111:46048] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aVfqllXqK_iX4f-S70KqZwAAAY4"]
[Fri Jan 02 23:56:07.605687 2026] [:error] [pid 29316:tid 29327] [client 149.34.240.111:46054] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Jan 02 23:56:08.962708 2026] [:error] [pid 29316:tid 29324] [client 149.34.240.111:46054] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aVfqmNfT9ty-7jZmgf_edQAAAQY"]
[Fri Jan 02 23:56:09.799756 2026] [:error] [pid 50046:tid 50063] [client 149.34.240.111:46064] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aVfqmSzv7fgIiwkQYNDVGQAAAU8"]
[Fri Jan 02 23:56:10.332026 2026] [:error] [pid 50046:tid 50049] [client 149.34.240.111:46078] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aVfqmizv7fgIiwkQYNDVGgAAAUE"]
[Fri Jan 02 23:56:10.840667 2026] [:error] [pid 63208:tid 63223] [client 149.34.240.111:46094] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aVfqmnKLI9INGPLzfnds7QAAAMw"]
[Fri Jan 02 23:56:11.363630 2026] [:error] [pid 63100:tid 63181] [client 149.34.240.111:46108] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aVfqmzuUXUKd3KTnKl9zOwAAAJQ"]
[Fri Jan 02 23:56:11.948058 2026] [:error] [pid 50046:tid 50057] [client 149.34.240.111:46118] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aVfqmyzv7fgIiwkQYNDVGwAAAUk"]
[Fri Jan 02 23:56:12.721769 2026] [:error] [pid 63098:tid 63127] [client 149.34.240.111:46128] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aVfqnMez9k78gUs48kqcagAAABQ"]
[Fri Jan 02 23:56:13.187927 2026] [:error] [pid 43358:tid 43364] [client 149.34.240.111:46142] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Jan 02 23:56:13.871454 2026] [:error] [pid 43358:tid 43384] [client 149.34.240.111:46142] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aVfqnQncbHK9auzvrA-ADQAAAdg"]
[Fri Jan 02 23:56:15.070660 2026] [:error] [pid 50046:tid 50068] [client 149.34.240.111:46148] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aVfqnyzv7fgIiwkQYNDVHwAAAVQ"]
[Fri Jan 02 23:56:15.850432 2026] [:error] [pid 43358:tid 43369] [client 149.34.240.111:49532] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aVfqnwncbHK9auzvrA-AEQAAAck"]
[Fri Jan 02 23:56:16.415183 2026] [:error] [pid 63100:tid 63162] [client 149.34.240.111:49546] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Jan 02 23:56:16.733390 2026] [:error] [pid 63100:tid 63180] [client 149.34.240.111:49546] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aVfqoDuUXUKd3KTnKl9zRAAAAJM"]
[Fri Jan 02 23:56:17.293921 2026] [:error] [pid 50186:tid 50205] [client 149.34.240.111:49556] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Jan 02 23:56:18.157189 2026] [:error] [pid 50186:tid 50197] [client 149.34.240.111:49556] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Jan 02 23:56:18.983724 2026] [:error] [pid 50186:tid 50194] [client 149.34.240.111:49556] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aVfqolXqK_iX4f-S70KqnQAAAYY"]
[Fri Jan 02 23:56:19.518079 2026] [:error] [pid 43358:tid 43383] [client 149.34.240.111:32720] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Jan 02 23:56:19.841443 2026] [:error] [pid 43358:tid 43367] [client 149.34.240.111:32720] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aVfqowncbHK9auzvrA-AGwAAAcc"]
[Fri Jan 02 23:56:20.385197 2026] [:error] [pid 50046:tid 50060] [client 149.34.240.111:49580] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Jan 02 23:56:20.979567 2026] [:error] [pid 50046:tid 50054] [client 149.34.240.111:49580] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aVfqpCzv7fgIiwkQYNDVIwAAAUY"]
[Fri Jan 02 23:56:21.756346 2026] [:error] [pid 63208:tid 63233] [client 149.34.240.111:49586] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aVfqpXKLI9INGPLzfnds-QAAANY"]
[Fri Jan 02 23:56:22.568915 2026] [:error] [pid 50046:tid 50052] [client 149.34.240.111:49592] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Jan 02 23:56:22.873495 2026] [:error] [pid 50046:tid 50063] [client 149.34.240.111:49592] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Jan 02 23:56:23.442484 2026] [:error] [pid 50046:tid 50049] [client 149.34.240.111:49592] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aVfqpyzv7fgIiwkQYNDVKAAAAUE"]
[Fri Jan 02 23:56:24.251361 2026] [:error] [pid 63100:tid 63173] [client 149.34.240.111:49600] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aVfqqDuUXUKd3KTnKl9zSgAAAIw"]
[Fri Jan 02 23:56:25.120265 2026] [:error] [pid 63098:tid 63118] [client 149.34.240.111:49614] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aVfqqcez9k78gUs48kqccQAAAAs"]
[Fri Jan 02 23:56:25.638430 2026] [:error] [pid 29316:tid 29323] [client 149.34.240.111:48734] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aVfqqdfT9ty-7jZmgf_egQAAAQU"]
[Fri Jan 02 23:56:26.112390 2026] [:error] [pid 50046:tid 50048] [client 149.34.240.111:48736] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aVfqqizv7fgIiwkQYNDVKgAAAUA"]
[Fri Jan 02 23:56:27.273873 2026] [:error] [pid 29316:tid 29318] [client 149.34.240.111:48738] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Jan 02 23:56:27.597610 2026] [:error] [pid 29316:tid 29330] [client 149.34.240.111:48738] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aVfqq9fT9ty-7jZmgf_ehgAAAQw"]
[Fri Jan 02 23:56:28.124335 2026] [:error] [pid 63099:tid 63144] [client 149.34.240.111:48750] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aVfqrMmCZokRPYUhzvjf8wAAAEo"]
[Fri Jan 02 23:56:28.666417 2026] [:error] [pid 63208:tid 63230] [client 149.34.240.111:48760] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aVfqrHKLI9INGPLzfndtAgAAANM"]
[Fri Jan 02 23:56:29.787469 2026] [:error] [pid 50046:tid 50051] [client 149.34.240.111:48768] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Jan 02 23:56:30.422579 2026] [:error] [pid 50046:tid 50061] [client 149.34.240.111:48768] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Jan 02 23:56:31.782815 2026] [:error] [pid 50046:tid 50072] [client 149.34.240.111:48768] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aVfqryzv7fgIiwkQYNDVNQAAAVg"]
[Fri Jan 02 23:56:33.241119 2026] [:error] [pid 29316:tid 29329] [client 149.34.240.111:48772] [client 149.34.240.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.34.240.111, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aVfqsdfT9ty-7jZmgf_ekQAAAQs"]
[Fri Jan 02 23:56:33.549950 2026] [:error] [pid 29316:tid 29324] [client 149.34.240.111:48772] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Jan 02 23:56:35.202408 2026] [:error] [pid 29316:tid 29325] [client 149.34.240.111:48772] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Jan 02 23:56:35.520732 2026] [:error] [pid 29316:tid 29331] [client 149.34.240.111:48772] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Jan 02 23:56:36.980475 2026] [:error] [pid 29316:tid 29322] [client 149.34.240.111:48772] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aVfqtNfT9ty-7jZmgf_eoQAAAQQ"]
[Fri Jan 02 23:56:37.843029 2026] [:error] [pid 63098:tid 63115] [client 149.34.240.111:36544] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Jan 02 23:56:38.130566 2026] [:error] [pid 63098:tid 63121] [client 149.34.240.111:36544] [client 149.34.240.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.34.240.111, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aVfqtsez9k78gUs48kqciQAAAA4"]
[Fri Jan 02 23:56:38.701628 2026] [:error] [pid 63098:tid 63129] [client 149.34.240.111:36544] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aVfqtsez9k78gUs48kqciwAAABY"]
[Fri Jan 02 23:56:40.459320 2026] [:error] [pid 63100:tid 63171] [client 149.34.240.111:36554] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Jan 02 23:56:41.082591 2026] [:error] [pid 63100:tid 63180] [client 149.34.240.111:36554] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Jan 02 23:56:41.749879 2026] [:error] [pid 63100:tid 63182] [client 149.34.240.111:36554] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aVfquTuUXUKd3KTnKl9zZwAAAJU"]
[Fri Jan 02 23:56:42.294752 2026] [:error] [pid 63208:tid 63223] [client 149.34.240.111:36564] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Jan 02 23:56:43.145750 2026] [:error] [pid 63208:tid 63218] [client 149.34.240.111:36564] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Jan 02 23:56:43.689324 2026] [:error] [pid 63208:tid 63214] [client 149.34.240.111:36564] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Jan 02 23:56:44.251900 2026] [:error] [pid 63208:tid 63226] [client 149.34.240.111:36564] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Jan 02 23:56:44.527346 2026] [:error] [pid 63208:tid 63211] [client 149.34.240.111:36564] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aVfqvHKLI9INGPLzfndtHQAAAMA"]
[Fri Jan 02 23:56:45.035102 2026] [:error] [pid 50186:tid 50197] [client 149.34.240.111:36570] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Jan 02 23:56:45.297411 2026] [:error] [pid 50186:tid 50210] [client 149.34.240.111:36570] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Jan 02 23:56:45.571387 2026] [:error] [pid 50186:tid 50209] [client 149.34.240.111:36570] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aVfqvVXqK_iX4f-S70KquQAAAZU"]
[Fri Jan 02 23:56:46.376393 2026] [:error] [pid 63208:tid 63229] [client 149.34.240.111:52820] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Jan 02 23:56:46.994806 2026] [:error] [pid 63208:tid 63220] [client 149.34.240.111:52820] [client 149.34.240.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.34.240.111, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aVfqvnKLI9INGPLzfndtIwAAAMk"]
[Fri Jan 02 23:56:47.292063 2026] [:error] [pid 63208:tid 63235] [client 149.34.240.111:52820] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aVfqv3KLI9INGPLzfndtJAAAANg"]
[Fri Jan 02 23:56:50.741190 2026] [:error] [pid 63208:tid 63235] [client 149.34.240.111:52824] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Jan 02 23:56:53.399709 2026] [:error] [pid 63208:tid 63219] [client 149.34.240.111:52824] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Jan 02 23:56:53.744469 2026] [:error] [pid 63208:tid 63215] [client 149.34.240.111:52824] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aVfqxXKLI9INGPLzfndtPQAAAMQ"]
[Fri Jan 02 23:56:54.280406 2026] [:error] [pid 43358:tid 43377] [client 149.34.240.111:52826] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Jan 02 23:56:55.211468 2026] [:error] [pid 43358:tid 43373] [client 149.34.240.111:52826] [client 149.34.240.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.34.240.111, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aVfqxwncbHK9auzvrA-AXgAAAc0"]
[Fri Jan 02 23:56:55.537716 2026] [:error] [pid 43358:tid 43369] [client 149.34.240.111:52826] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Jan 02 23:56:55.846758 2026] [:error] [pid 43358:tid 43362] [client 149.34.240.111:52826] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Jan 02 23:56:56.184071 2026] [:error] [pid 43358:tid 43380] [client 149.34.240.111:52826] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Jan 02 23:56:56.493754 2026] [:error] [pid 43358:tid 43361] [client 149.34.240.111:52826] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aVfqyAncbHK9auzvrA-AYgAAAcE"]
[Fri Jan 02 23:56:57.054355 2026] [:error] [pid 50186:tid 50195] [client 149.34.240.111:36062] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Jan 02 23:56:57.353518 2026] [:error] [pid 50186:tid 50196] [client 149.34.240.111:36062] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aVfqyVXqK_iX4f-S70KqvwAAAYg"]
[Fri Jan 02 23:56:58.159430 2026] [:error] [pid 50186:tid 50198] [client 149.34.240.111:36068] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Jan 02 23:56:58.476777 2026] [:error] [pid 50186:tid 50208] [client 149.34.240.111:36068] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aVfqylXqK_iX4f-S70KqwgAAAZQ"]
[Fri Jan 02 23:57:00.638935 2026] [:error] [pid 50186:tid 50205] [client 149.34.240.111:36084] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Jan 02 23:57:00.930463 2026] [:error] [pid 50186:tid 50188] [client 149.34.240.111:36084] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aVfqzFXqK_iX4f-S70KqxwAAAYA"]
[Fri Jan 02 23:57:01.421865 2026] [:error] [pid 29316:tid 29330] [client 149.34.240.111:36092] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aVfqzdfT9ty-7jZmgf_esQAAAQw"]
[Fri Jan 02 23:57:01.945208 2026] [:error] [pid 50186:tid 50209] [client 149.34.240.111:36098] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Jan 02 23:57:02.289134 2026] [:error] [pid 50186:tid 50207] [client 149.34.240.111:36098] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Jan 02 23:57:03.382558 2026] [:error] [pid 50186:tid 50194] [client 149.34.240.111:36098] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aVfqz1XqK_iX4f-S70KqzQAAAYY"]
[Fri Jan 02 23:57:04.185833 2026] [:error] [pid 63100:tid 63161] [client 149.34.240.111:36106] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aVfq0DuUXUKd3KTnKl9zgQAAAIA"]
[Fri Jan 02 23:57:05.604173 2026] [:error] [pid 63100:tid 63163] [client 149.34.240.111:36122] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aVfq0TuUXUKd3KTnKl9ziAAAAII"]
[Fri Jan 02 23:57:06.161515 2026] [:error] [pid 50186:tid 50193] [client 149.34.240.111:42732] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Jan 02 23:57:06.773669 2026] [:error] [pid 50186:tid 50202] [client 149.34.240.111:42732] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Jan 02 23:57:07.077046 2026] [:error] [pid 50186:tid 50190] [client 149.34.240.111:42732] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aVfq01XqK_iX4f-S70Kq2AAAAYI"]
[Fri Jan 02 23:57:07.631466 2026] [:error] [pid 63098:tid 63128] [client 149.34.240.111:42736] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Jan 02 23:57:08.134447 2026] [:error] [pid 63098:tid 63119] [client 149.34.240.111:42736] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aVfq1Mez9k78gUs48kqcrQAAAAw"]
[Fri Jan 02 23:57:09.487927 2026] [:error] [pid 63208:tid 63221] [client 149.34.240.111:42748] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aVfq1XKLI9INGPLzfndtTQAAAMo"]
[Fri Jan 02 23:57:11.048866 2026] [:error] [pid 43358:tid 43383] [client 149.34.240.111:42752] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Jan 02 23:57:11.953595 2026] [:error] [pid 43358:tid 43366] [client 149.34.240.111:42752] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Jan 02 23:57:12.532029 2026] [:error] [pid 43358:tid 43365] [client 149.34.240.111:42752] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Jan 02 23:57:12.787486 2026] [:error] [pid 43358:tid 43377] [client 149.34.240.111:42752] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aVfq2AncbHK9auzvrA-AbgAAAdE"]
[Fri Jan 02 23:57:13.277832 2026] [:error] [pid 63208:tid 63212] [client 149.34.240.111:42760] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aVfq2XKLI9INGPLzfndtUgAAAME"]
[Fri Jan 02 23:57:13.747463 2026] [:error] [pid 63099:tid 63156] [client 149.34.240.111:42772] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aVfq2cmCZokRPYUhzvjgCQAAAFY"]
[Fri Jan 02 23:57:14.257172 2026] [:error] [pid 63098:tid 63124] [client 149.34.240.111:42782] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aVfq2sez9k78gUs48kqctgAAABE"]
[Fri Jan 02 23:57:14.801685 2026] [:error] [pid 63098:tid 63130] [client 149.34.240.111:42784] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Jan 02 23:57:15.052160 2026] [:error] [pid 63098:tid 63121] [client 149.34.240.111:42784] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aVfq28ez9k78gUs48kqcvgAAAA4"]
[Fri Jan 02 23:57:15.530825 2026] [:error] [pid 43358:tid 43380] [client 149.34.240.111:49936] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVfq2wncbHK9auzvrA-AcQAAAdQ"]
[Fri Jan 02 23:57:16.013786 2026] [:error] [pid 63099:tid 63146] [client 149.34.240.111:49940] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Jan 02 23:57:16.609716 2026] [:error] [pid 63099:tid 63150] [client 149.34.240.111:49940] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aVfq3MmCZokRPYUhzvjgDwAAAFA"]
[Fri Jan 02 23:57:17.137177 2026] [:error] [pid 63098:tid 63117] [client 149.34.240.111:49956] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aVfq3cez9k78gUs48kqcwwAAAAo"]
[Fri Jan 02 23:57:17.644612 2026] [:error] [pid 50186:tid 50190] [client 149.34.240.111:49958] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aVfq3VXqK_iX4f-S70Kq6AAAAYI"]
[Fri Jan 02 23:57:18.168049 2026] [:error] [pid 29316:tid 29329] [client 149.34.240.111:49962] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aVfq3tfT9ty-7jZmgf_evQAAAQs"]
[Fri Jan 02 23:57:19.022822 2026] [:error] [pid 43358:tid 43374] [client 149.34.240.111:49976] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aVfq3wncbHK9auzvrA-AdAAAAc4"]
[Fri Jan 02 23:57:20.730459 2026] [:error] [pid 63208:tid 63226] [client 149.34.240.111:49988] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aVfq4HKLI9INGPLzfndtYAAAAM8"]
[Fri Jan 02 23:57:21.230866 2026] [:error] [pid 50046:tid 50068] [client 149.34.240.111:50004] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Jan 02 23:57:22.122592 2026] [:error] [pid 50046:tid 50052] [client 149.34.240.111:50004] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Jan 02 23:57:22.397846 2026] [:error] [pid 50046:tid 50065] [client 149.34.240.111:50004] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aVfq4izv7fgIiwkQYNDVhAAAAVE"]
[Fri Jan 02 23:57:23.287090 2026] [:error] [pid 43358:tid 43377] [client 149.34.240.111:50010] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Jan 02 23:57:23.577346 2026] [:error] [pid 43358:tid 43375] [client 149.34.240.111:50010] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Jan 02 23:57:25.052039 2026] [:error] [pid 43358:tid 43362] [client 149.34.240.111:50010] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aVfq5QncbHK9auzvrA-AgAAAAcI"]
[Fri Jan 02 23:57:26.538142 2026] [:error] [pid 63098:tid 63117] [client 149.34.240.111:47520] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aVfq5sez9k78gUs48kqc1gAAAAo"]
[Fri Jan 02 23:57:27.032944 2026] [:error] [pid 63099:tid 63142] [client 149.34.240.111:47532] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aVfq58mCZokRPYUhzvjgGAAAAEg"]
[Fri Jan 02 23:57:28.620878 2026] [:error] [pid 63100:tid 63175] [client 149.34.240.111:47542] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aVfq6DuUXUKd3KTnKl9zrgAAAI4"]
[Fri Jan 02 23:57:29.687491 2026] [:error] [pid 63098:tid 63130] [client 149.34.240.111:47552] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Jan 02 23:57:31.138495 2026] [:error] [pid 63098:tid 63130] [client 149.34.240.111:47552] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Jan 02 23:57:31.402721 2026] [:error] [pid 63098:tid 63107] [client 149.34.240.111:47552] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Jan 02 23:57:31.667869 2026] [:error] [pid 63098:tid 63122] [client 149.34.240.111:47552] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Jan 02 23:57:33.019135 2026] [:error] [pid 63098:tid 63129] [client 149.34.240.111:47552] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVfq7cez9k78gUs48kqc6AAAABY"]
[Fri Jan 02 23:57:33.504535 2026] [:error] [pid 63099:tid 63154] [client 149.34.240.111:47564] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aVfq7cmCZokRPYUhzvjgJAAAAFQ"]
[Fri Jan 02 23:57:33.949811 2026] [:error] [pid 63100:tid 63171] [client 149.34.240.111:47578] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aVfq7TuUXUKd3KTnKl9zswAAAIo"]
[Fri Jan 02 23:57:34.429977 2026] [:error] [pid 63208:tid 63230] [client 149.34.240.111:47580] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aVfq7nKLI9INGPLzfndtbQAAANM"]
[Fri Jan 02 23:57:34.976597 2026] [:error] [pid 43358:tid 43369] [client 149.34.240.111:47592] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aVfq7gncbHK9auzvrA-AkAAAAck"]
[Fri Jan 02 23:57:35.552324 2026] [:error] [pid 43358:tid 43361] [client 149.34.240.111:41940] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aVfq7wncbHK9auzvrA-AkQAAAcE"]
[Fri Jan 02 23:57:36.385821 2026] [:error] [pid 50186:tid 50189] [client 149.34.240.111:41944] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aVfq8FXqK_iX4f-S70Kq_gAAAYE"]
[Fri Jan 02 23:57:36.879434 2026] [:error] [pid 43358:tid 43368] [client 149.34.240.111:41948] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aVfq8AncbHK9auzvrA-AlQAAAcg"]
[Fri Jan 02 23:57:38.788816 2026] [:error] [pid 43358:tid 43382] [client 149.34.240.111:41960] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aVfq8gncbHK9auzvrA-AlwAAAdY"]
[Fri Jan 02 23:57:39.260393 2026] [:error] [pid 63208:tid 63233] [client 149.34.240.111:41970] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aVfq83KLI9INGPLzfndtdAAAANY"]
[Fri Jan 02 23:57:40.364648 2026] [:error] [pid 29316:tid 29339] [client 149.34.240.111:24449] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aVfq9NfT9ty-7jZmgf_e4QAAARU"]
[Fri Jan 02 23:57:41.144375 2026] [:error] [pid 63098:tid 63107] [client 149.34.240.111:41982] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aVfq9cez9k78gUs48kqc8AAAAAA"]
[Fri Jan 02 23:57:41.656245 2026] [:error] [pid 50186:tid 50190] [client 149.34.240.111:41992] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Jan 02 23:57:42.260682 2026] [:error] [pid 50186:tid 50188] [client 149.34.240.111:41992] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aVfq9lXqK_iX4f-S70KrDAAAAYA"]
[Fri Jan 02 23:57:43.664289 2026] [:error] [pid 50186:tid 50203] [client 149.34.240.111:42008] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aVfq91XqK_iX4f-S70KrEAAAAY8"]
[Fri Jan 02 23:57:45.028501 2026] [:error] [pid 50046:tid 50055] [client 149.34.240.111:42010] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Jan 02 23:57:45.338795 2026] [:error] [pid 50046:tid 50052] [client 149.34.240.111:42010] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aVfq-Szv7fgIiwkQYNDVqQAAAUQ"]
[Fri Jan 02 23:57:46.130269 2026] [:error] [pid 43358:tid 43363] [client 149.34.240.111:57548] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Jan 02 23:57:46.410012 2026] [:error] [pid 43358:tid 43376] [client 149.34.240.111:57548] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Fri Jan 02 23:57:46.682670 2026] [:error] [pid 43358:tid 43371] [client 149.34.240.111:57548] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Jan 02 23:57:46.995434 2026] [:error] [pid 43358:tid 43364] [client 149.34.240.111:57548] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aVfq-gncbHK9auzvrA-ApwAAAcQ"]
[Fri Jan 02 23:57:47.508762 2026] [:error] [pid 63100:tid 63179] [client 149.34.240.111:57560] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Jan 02 23:57:47.869376 2026] [:error] [pid 63100:tid 63182] [client 149.34.240.111:57560] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aVfq-zuUXUKd3KTnKl9zxgAAAJU"]
[Fri Jan 02 23:57:49.123935 2026] [:error] [pid 63100:tid 63184] [client 149.34.240.111:45532] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Jan 02 23:57:49.453685 2026] [:error] [pid 63100:tid 63185] [client 149.34.240.111:45532] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 02 23:57:51.273677 2026] [:error] [pid 63100:tid 63185] [client 149.34.240.111:45532] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Fri Jan 02 23:57:52.861391 2026] [:error] [pid 63100:tid 63169] [client 149.34.240.111:45532] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Jan 02 23:57:53.209400 2026] [:error] [pid 63100:tid 63173] [client 149.34.240.111:45532] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Jan 02 23:57:53.892642 2026] [:error] [pid 63100:tid 63175] [client 149.34.240.111:45532] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Fri Jan 02 23:57:54.943070 2026] [:error] [pid 63100:tid 63174] [client 149.34.240.111:45532] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Jan 02 23:57:55.340018 2026] [:error] [pid 63100:tid 63185] [client 149.34.240.111:45532] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aVfrAzuUXUKd3KTnKl9z9gAAAJg"]
[Fri Jan 02 23:57:55.927307 2026] [:error] [pid 63098:tid 63130] [client 149.34.240.111:33560] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aVfrA8ez9k78gUs48kqc_AAAABc"]
[Fri Jan 02 23:57:56.468921 2026] [:error] [pid 43358:tid 43360] [client 149.34.240.111:33572] [client 149.34.240.111] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.34.240.111, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aVfrBAncbHK9auzvrA-ArgAAAcA"]
[Fri Jan 02 23:57:56.473162 2026] [:error] [pid 43358:tid 43360] [client 149.34.240.111:33572] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 02 23:57:56.824611 2026] [:error] [pid 43358:tid 43384] [client 149.34.240.111:33572] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Jan 02 23:57:57.174605 2026] [:error] [pid 43358:tid 43373] [client 149.34.240.111:33572] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aVfrBQncbHK9auzvrA-AsAAAAc0"]
[Fri Jan 02 23:57:58.047476 2026] [:error] [pid 63208:tid 63229] [client 149.34.240.111:33576] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Jan 02 23:57:58.361863 2026] [:error] [pid 63208:tid 63232] [client 149.34.240.111:33576] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aVfrBnKLI9INGPLzfndtggAAANU"]
[Fri Jan 02 23:57:58.902448 2026] [:error] [pid 63100:tid 63180] [client 149.34.240.111:33592] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVfrBjuUXUKd3KTnKl9z_QAAAJM"]
[Fri Jan 02 23:58:00.759910 2026] [:error] [pid 63098:tid 63125] [client 149.34.240.111:33598] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aVfrCMez9k78gUs48kqdCQAAABI"]
[Fri Jan 02 23:58:01.317740 2026] [:error] [pid 63099:tid 63144] [client 149.34.240.111:33604] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aVfrCcmCZokRPYUhzvjgOQAAAEo"]
[Fri Jan 02 23:58:02.741461 2026] [:error] [pid 29316:tid 29331] [client 149.34.240.111:33610] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Jan 02 23:58:03.283349 2026] [:error] [pid 29316:tid 29341] [client 149.34.240.111:33610] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aVfrC9fT9ty-7jZmgf_fCAAAARc"]
[Fri Jan 02 23:58:04.423742 2026] [:error] [pid 50186:tid 50209] [client 149.34.240.111:33616] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Fri Jan 02 23:58:04.985611 2026] [:error] [pid 50186:tid 50212] [client 149.34.240.111:33616] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aVfrDFXqK_iX4f-S70KrIQAAAZg"]
[Fri Jan 02 23:58:05.495220 2026] [:error] [pid 63100:tid 63179] [client 149.34.240.111:37248] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aVfrDTuUXUKd3KTnKl90BwAAAJI"]
[Fri Jan 02 23:58:06.316817 2026] [:error] [pid 29316:tid 29334] [client 149.34.240.111:37260] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Jan 02 23:58:06.600591 2026] [:error] [pid 29316:tid 29328] [client 149.34.240.111:37260] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aVfrDtfT9ty-7jZmgf_fEgAAAQo"]
[Fri Jan 02 23:58:07.107652 2026] [:error] [pid 63098:tid 63112] [client 149.34.240.111:37272] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aVfrD8ez9k78gUs48kqdEAAAAAU"]
[Fri Jan 02 23:58:08.207416 2026] [:error] [pid 63098:tid 63125] [client 149.34.240.111:37282] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Jan 02 23:58:08.464868 2026] [:error] [pid 63098:tid 63126] [client 149.34.240.111:37282] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Fri Jan 02 23:58:09.016197 2026] [:error] [pid 63098:tid 63128] [client 149.34.240.111:37282] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Jan 02 23:58:09.535942 2026] [:error] [pid 63098:tid 63122] [client 149.34.240.111:37282] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aVfrEcez9k78gUs48kqdHAAAAA8"]
[Fri Jan 02 23:58:10.008796 2026] [:error] [pid 63099:tid 63141] [client 149.34.240.111:37290] [client 149.34.240.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aVfrEsmCZokRPYUhzvjgPwAAAEc"]
[Fri Jan 02 23:58:10.528158 2026] [:error] [pid 50186:tid 50199] [client 149.34.240.111:37302] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aVfrElXqK_iX4f-S70KrKAAAAYs"]
[Fri Jan 02 23:58:11.028525 2026] [:error] [pid 63100:tid 63170] [client 149.34.240.111:37304] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aVfrEzuUXUKd3KTnKl90DQAAAIk"]
[Fri Jan 02 23:58:11.488954 2026] [:error] [pid 29316:tid 29340] [client 149.34.240.111:37316] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aVfrE9fT9ty-7jZmgf_fGAAAARY"]
[Fri Jan 02 23:58:12.087708 2026] [:error] [pid 43358:tid 43373] [client 149.34.240.111:37332] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "aVfrFAncbHK9auzvrA-AwgAAAc0"]
[Fri Jan 02 23:58:18.221581 2026] [:error] [pid 63098:tid 63112] [client 149.34.240.111:37340] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "aVfrGsez9k78gUs48kqdNQAAAAU"]
[Fri Jan 02 23:58:18.755115 2026] [:error] [pid 63098:tid 63129] [client 149.34.240.111:50648] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "aVfrGsez9k78gUs48kqdNwAAABY"]
[Fri Jan 02 23:58:19.254250 2026] [:error] [pid 29316:tid 29319] [client 149.34.240.111:50660] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "aVfrG9fT9ty-7jZmgf_fHgAAAQE"]
[Fri Jan 02 23:58:19.768654 2026] [:error] [pid 63208:tid 63212] [client 149.34.240.111:50674] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "aVfrG3KLI9INGPLzfndtjwAAAME"]
[Fri Jan 02 23:58:20.325732 2026] [:error] [pid 29316:tid 29338] [client 149.34.240.111:50690] [client 149.34.240.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/query/"] [unique_id "aVfrHNfT9ty-7jZmgf_fHwAAARQ"]
[Sat Jan 03 02:28:53.435172 2026] [:error] [pid 24660:tid 24717] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sat Jan 03 02:28:53.631748 2026] [:error] [pid 24660:tid 24701] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Jan 03 02:28:53.782665 2026] [:error] [pid 24660:tid 24707] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Jan 03 02:28:54.062483 2026] [:error] [pid 24660:tid 24706] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Sat Jan 03 02:28:54.273041 2026] [:error] [pid 24660:tid 24694] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Sat Jan 03 02:28:54.659653 2026] [:error] [pid 24660:tid 24715] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Sat Jan 03 02:28:54.864565 2026] [:error] [pid 24660:tid 24709] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sat Jan 03 02:28:55.009009 2026] [:error] [pid 24660:tid 24714] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Jan 03 02:28:55.163127 2026] [:error] [pid 24660:tid 24703] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Sat Jan 03 02:28:55.332390 2026] [:error] [pid 24660:tid 24710] [client 135.235.168.239:64656] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Sat Jan 03 02:28:55.468588 2026] [:error] [pid 24660:tid 24702] [client 135.235.168.239:64656] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVgOZ2ZwWsLNsJ3ZH7bnWAAAAEk"]
[Sat Jan 03 02:28:55.915304 2026] [:error] [pid 24661:tid 24741] [client 135.235.168.239:64648] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVgOZxfxsu5kmLDAcZutigAAAJU"]
[Sat Jan 03 02:28:56.344804 2026] [:error] [pid 24661:tid 24743] [client 135.235.168.239:64674] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVgOaBfxsu5kmLDAcZutjAAAAJc"]
[Sat Jan 03 02:28:56.770257 2026] [:error] [pid 24749:tid 24759] [client 135.235.168.239:64733] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVgOaEiv6Q9UlqwBJkZ_sAAAAMg"]
[Sat Jan 03 02:28:57.378334 2026] [:error] [pid 24749:tid 24774] [client 135.235.168.239:64645] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVgOaUiv6Q9UlqwBJkZ_swAAANc"]
[Sat Jan 03 02:28:57.903987 2026] [:error] [pid 24749:tid 24766] [client 135.235.168.239:64732] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVgOaUiv6Q9UlqwBJkZ_twAAAM8"]
[Sat Jan 03 02:28:58.419261 2026] [:error] [pid 24749:tid 24765] [client 135.235.168.239:63444] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVgOakiv6Q9UlqwBJkZ_ugAAAM4"]
[Sat Jan 03 02:28:58.833162 2026] [:error] [pid 24749:tid 24752] [client 135.235.168.239:64668] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVgOakiv6Q9UlqwBJkZ_vgAAAME"]
[Sat Jan 03 02:28:59.378187 2026] [:error] [pid 47234:tid 47240] [client 135.235.168.239:64647] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVgOax2w_O5NbPWiWO_heAAAAQQ"]
[Sat Jan 03 02:29:00.008478 2026] [:error] [pid 24661:tid 24726] [client 135.235.168.239:64751] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVgObBfxsu5kmLDAcZutjQAAAIY"]
[Sat Jan 03 02:29:00.453624 2026] [:error] [pid 24749:tid 24770] [client 135.235.168.239:64653] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVgObEiv6Q9UlqwBJkZ_xgAAANM"]
[Sat Jan 03 02:29:00.994666 2026] [:error] [pid 24749:tid 24754] [client 135.235.168.239:64669] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVgObEiv6Q9UlqwBJkZ_yAAAAMM"]
[Sat Jan 03 02:29:02.010057 2026] [:error] [pid 24660:tid 24712] [client 135.235.168.239:63439] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVgObmZwWsLNsJ3ZH7bnXAAAAFM"]
[Sat Jan 03 02:29:02.558162 2026] [:error] [pid 47234:tid 47244] [client 135.235.168.239:64738] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVgObh2w_O5NbPWiWO_hhAAAAQg"]
[Sat Jan 03 02:29:02.939457 2026] [:error] [pid 24659:tid 24673] [client 135.235.168.239:64650] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVgObmucj-rXdFUnVEtLOgAAAAk"]
[Sat Jan 03 02:29:03.441892 2026] [:error] [pid 24660:tid 24698] [client 135.235.168.239:63441] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVgOb2ZwWsLNsJ3ZH7bnXQAAAEU"]
[Sat Jan 03 02:29:03.855909 2026] [:error] [pid 24661:tid 24734] [client 135.235.168.239:64712] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVgObxfxsu5kmLDAcZutkwAAAI4"]
[Sat Jan 03 02:29:04.272014 2026] [:error] [pid 24660:tid 24695] [client 135.235.168.239:64756] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVgOcGZwWsLNsJ3ZH7bnXwAAAEI"]
[Sat Jan 03 02:29:04.967210 2026] [:error] [pid 24661:tid 24740] [client 135.235.168.239:64741] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVgOcBfxsu5kmLDAcZutlgAAAJQ"]
[Sat Jan 03 02:29:05.855952 2026] [:error] [pid 24660:tid 24697] [client 135.235.168.239:63482] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVgOcWZwWsLNsJ3ZH7bnYQAAAEQ"]
[Sat Jan 03 02:29:06.222207 2026] [:error] [pid 24661:tid 24720] [client 135.235.168.239:63440] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVgOchfxsu5kmLDAcZutmgAAAIA"]
[Sat Jan 03 02:29:06.602192 2026] [:error] [pid 47234:tid 47250] [client 135.235.168.239:64684] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVgOch2w_O5NbPWiWO_hjQAAAQ4"]
[Sat Jan 03 02:29:07.104939 2026] [:error] [pid 47234:tid 47252] [client 135.235.168.239:64692] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVgOcx2w_O5NbPWiWO_hjwAAARA"]
[Sat Jan 03 02:29:07.412618 2026] [:error] [pid 47234:tid 47259] [client 135.235.168.239:64690] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVgOcx2w_O5NbPWiWO_hkQAAARc"]
[Sat Jan 03 02:29:07.879942 2026] [:error] [pid 24749:tid 24766] [client 135.235.168.239:64700] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVgOc0iv6Q9UlqwBJkZ_1AAAAM8"]
[Sat Jan 03 02:29:08.453488 2026] [:error] [pid 24661:tid 24727] [client 135.235.168.239:63436] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVgOdBfxsu5kmLDAcZutngAAAIc"]
[Sat Jan 03 02:29:09.595892 2026] [:error] [pid 24661:tid 24733] [client 135.235.168.239:63401] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVgOdRfxsu5kmLDAcZutnwAAAI0"]
[Sat Jan 03 02:29:10.310606 2026] [:error] [pid 24661:tid 24740] [client 135.235.168.239:64762] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVgOdhfxsu5kmLDAcZutogAAAJQ"]
[Sat Jan 03 02:29:11.115123 2026] [:error] [pid 24661:tid 24729] [client 135.235.168.239:64737] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVgOdxfxsu5kmLDAcZutpAAAAIk"]
[Sat Jan 03 02:29:11.572311 2026] [:error] [pid 47234:tid 47250] [client 135.235.168.239:63448] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVgOdx2w_O5NbPWiWO_hoAAAAQ4"]
[Sat Jan 03 02:29:12.200879 2026] [:error] [pid 24660:tid 24709] [client 135.235.168.239:64744] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVgOeGZwWsLNsJ3ZH7bnZQAAAFA"]
[Sat Jan 03 02:29:12.767888 2026] [:error] [pid 47234:tid 47247] [client 135.235.168.239:63443] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVgOeB2w_O5NbPWiWO_hpQAAAQs"]
[Sat Jan 03 02:29:13.445186 2026] [:error] [pid 47234:tid 47244] [client 135.235.168.239:64745] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVgOeR2w_O5NbPWiWO_hpgAAAQg"]
[Sat Jan 03 02:29:13.763900 2026] [:error] [pid 24749:tid 24761] [client 135.235.168.239:64689] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVgOeUiv6Q9UlqwBJkZ_2wAAAMo"]
[Sat Jan 03 02:29:14.201840 2026] [:error] [pid 24661:tid 24742] [client 135.235.168.239:64713] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVgOehfxsu5kmLDAcZutpgAAAJY"]
[Sat Jan 03 02:29:14.610686 2026] [:error] [pid 47234:tid 47249] [client 135.235.168.239:63458] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVgOeh2w_O5NbPWiWO_hqQAAAQ0"]
[Sat Jan 03 02:29:14.939867 2026] [:error] [pid 24659:tid 24678] [client 135.235.168.239:64750] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVgOemucj-rXdFUnVEtLQgAAAA4"]
[Sat Jan 03 02:29:15.499847 2026] [:error] [pid 47234:tid 47239] [client 135.235.168.239:63426] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVgOex2w_O5NbPWiWO_hqgAAAQM"]
[Sat Jan 03 02:29:16.010485 2026] [:error] [pid 47234:tid 47248] [client 135.235.168.239:64663] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVgOfB2w_O5NbPWiWO_hrAAAAQw"]
[Sat Jan 03 02:29:16.553097 2026] [:error] [pid 24660:tid 24703] [client 135.235.168.239:64729] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVgOfGZwWsLNsJ3ZH7bnZwAAAEo"]
[Sat Jan 03 02:29:16.913215 2026] [:error] [pid 24660:tid 24702] [client 135.235.168.239:64699] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVgOfGZwWsLNsJ3ZH7bnaQAAAEk"]
[Sat Jan 03 02:29:17.256978 2026] [:error] [pid 24660:tid 24696] [client 135.235.168.239:63477] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVgOfWZwWsLNsJ3ZH7bnagAAAEM"]
[Sat Jan 03 02:29:17.622206 2026] [:error] [pid 47234:tid 47258] [client 135.235.168.239:64649] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVgOfR2w_O5NbPWiWO_hsAAAARY"]
[Sat Jan 03 02:29:17.969472 2026] [:error] [pid 47234:tid 47247] [client 135.235.168.239:64665] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVgOfR2w_O5NbPWiWO_htAAAAQs"]
[Sat Jan 03 02:29:18.444216 2026] [:error] [pid 24749:tid 24753] [client 135.235.168.239:64670] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVgOfkiv6Q9UlqwBJkZ_3wAAAMI"]
[Sat Jan 03 02:29:19.120216 2026] [:error] [pid 24661:tid 24731] [client 135.235.168.239:64678] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVgOfxfxsu5kmLDAcZutrAAAAIs"]
[Sat Jan 03 02:29:19.841733 2026] [:error] [pid 24660:tid 24713] [client 135.235.168.239:64651] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVgOf2ZwWsLNsJ3ZH7bnbQAAAFQ"]
[Sat Jan 03 02:29:20.200722 2026] [:error] [pid 47234:tid 47249] [client 135.235.168.239:63452] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVgOgB2w_O5NbPWiWO_huAAAAQ0"]
[Sat Jan 03 02:29:20.634371 2026] [:error] [pid 47234:tid 47243] [client 135.235.168.239:64659] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVgOgB2w_O5NbPWiWO_huwAAAQc"]
[Sat Jan 03 02:29:21.040360 2026] [:error] [pid 24749:tid 24765] [client 135.235.168.239:64694] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVgOgUiv6Q9UlqwBJkZ_6gAAAM4"]
[Sat Jan 03 02:29:21.415129 2026] [:error] [pid 24661:tid 24732] [client 135.235.168.239:64736] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVgOgRfxsu5kmLDAcZutrgAAAIw"]
[Sat Jan 03 02:29:22.286817 2026] [:error] [pid 24660:tid 24695] [client 135.235.168.239:63375] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVgOgmZwWsLNsJ3ZH7bncAAAAEI"]
[Sat Jan 03 02:29:22.671118 2026] [:error] [pid 47234:tid 47246] [client 135.235.168.239:64714] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVgOgh2w_O5NbPWiWO_hvgAAAQo"]
[Sat Jan 03 02:29:23.004346 2026] [:error] [pid 24660:tid 24716] [client 135.235.168.239:64708] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVgOg2ZwWsLNsJ3ZH7bncgAAAFc"]
[Sat Jan 03 02:29:23.436348 2026] [:error] [pid 24660:tid 24699] [client 135.235.168.239:64702] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVgOg2ZwWsLNsJ3ZH7bndAAAAEY"]
[Sat Jan 03 02:29:23.922205 2026] [:error] [pid 47234:tid 47258] [client 135.235.168.239:63397] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVgOgx2w_O5NbPWiWO_hvwAAARY"]
[Sat Jan 03 02:29:24.443334 2026] [:error] [pid 24660:tid 24694] [client 135.235.168.239:64715] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aVgOhGZwWsLNsJ3ZH7bndgAAAEE"]
[Sat Jan 03 02:29:24.926481 2026] [:error] [pid 24660:tid 24715] [client 135.235.168.239:63428] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aVgOhGZwWsLNsJ3ZH7bndwAAAFY"]
[Sat Jan 03 02:29:25.370344 2026] [:error] [pid 24749:tid 24755] [client 135.235.168.239:63432] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aVgOhUiv6Q9UlqwBJkZ_-wAAAMQ"]
[Sat Jan 03 02:29:26.223478 2026] [:error] [pid 24661:tid 24739] [client 135.235.168.239:63454] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aVgOhhfxsu5kmLDAcZutwgAAAJM"]
[Sat Jan 03 02:29:27.120465 2026] [:error] [pid 47234:tid 47245] [client 135.235.168.239:64709] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aVgOhx2w_O5NbPWiWO_hxwAAAQk"]
[Sat Jan 03 02:29:27.920678 2026] [:error] [pid 24660:tid 24707] [client 135.235.168.239:64767] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aVgOh2ZwWsLNsJ3ZH7bnhAAAAE4"]
[Sat Jan 03 02:29:28.563976 2026] [:error] [pid 24661:tid 24740] [client 135.235.168.239:64749] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aVgOiBfxsu5kmLDAcZutzQAAAJQ"]
[Sat Jan 03 02:29:29.117162 2026] [:error] [pid 47234:tid 47240] [client 135.235.168.239:64677] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aVgOiR2w_O5NbPWiWO_hywAAAQQ"]
[Sat Jan 03 02:29:29.610967 2026] [:error] [pid 24661:tid 24742] [client 135.235.168.239:63429] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aVgOiRfxsu5kmLDAcZut0gAAAJY"]
[Sat Jan 03 02:29:30.139875 2026] [:error] [pid 24661:tid 24735] [client 135.235.168.239:63402] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aVgOihfxsu5kmLDAcZut1AAAAI8"]
[Sat Jan 03 02:29:30.713444 2026] [:error] [pid 24661:tid 24736] [client 135.235.168.239:63470] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aVgOihfxsu5kmLDAcZut3QAAAJA"]
[Sat Jan 03 02:29:31.251488 2026] [:error] [pid 47234:tid 47247] [client 135.235.168.239:64723] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aVgOix2w_O5NbPWiWO_hzwAAAQs"]
[Sat Jan 03 02:29:32.050804 2026] [:error] [pid 24660:tid 24702] [client 135.235.168.239:62876] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aVgOjGZwWsLNsJ3ZH7bnjAAAAEk"]
[Sat Jan 03 02:29:32.736529 2026] [:error] [pid 24661:tid 24742] [client 135.235.168.239:63414] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aVgOjBfxsu5kmLDAcZut4wAAAJY"]
[Sat Jan 03 02:29:34.856102 2026] [:error] [pid 24661:tid 24728] [client 135.235.168.239:64697] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aVgOjhfxsu5kmLDAcZut7gAAAIg"]
[Sat Jan 03 02:29:35.330031 2026] [:error] [pid 24661:tid 24725] [client 135.235.168.239:64666] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aVgOjxfxsu5kmLDAcZut8AAAAIU"]
[Sat Jan 03 02:29:36.099485 2026] [:error] [pid 24661:tid 24721] [client 135.235.168.239:63474] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aVgOkBfxsu5kmLDAcZut8wAAAIE"]
[Sat Jan 03 02:29:36.688562 2026] [:error] [pid 24661:tid 24743] [client 135.235.168.239:64685] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aVgOkBfxsu5kmLDAcZut9AAAAJc"]
[Sat Jan 03 02:29:37.200317 2026] [:error] [pid 47234:tid 47238] [client 135.235.168.239:64669] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aVgOkR2w_O5NbPWiWO_h7AAAAQI"]
[Sat Jan 03 02:29:37.634503 2026] [:error] [pid 24749:tid 24756] [client 135.235.168.239:64740] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aVgOkUiv6Q9UlqwBJkaAIAAAAMU"]
[Sat Jan 03 02:29:38.302456 2026] [:error] [pid 24661:tid 24727] [client 135.235.168.239:64688] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aVgOkhfxsu5kmLDAcZut9QAAAIc"]
[Sat Jan 03 02:29:39.048458 2026] [:error] [pid 24749:tid 24766] [client 135.235.168.239:64641] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aVgOk0iv6Q9UlqwBJkaAIgAAAM8"]
[Sat Jan 03 02:29:39.768828 2026] [:error] [pid 24661:tid 24725] [client 135.235.168.239:63455] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aVgOkxfxsu5kmLDAcZut9wAAAIU"]
[Sat Jan 03 02:29:40.225717 2026] [:error] [pid 24749:tid 24773] [client 135.235.168.239:64683] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aVgOlEiv6Q9UlqwBJkaAJgAAANY"]
[Sat Jan 03 02:29:41.036853 2026] [:error] [pid 24749:tid 24772] [client 135.235.168.239:63453] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aVgOlUiv6Q9UlqwBJkaAKwAAANU"]
[Sat Jan 03 02:29:41.436773 2026] [:error] [pid 24661:tid 24723] [client 135.235.168.239:64640] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aVgOlRfxsu5kmLDAcZut-AAAAIM"]
[Sat Jan 03 02:29:42.180919 2026] [:error] [pid 24661:tid 24742] [client 135.235.168.239:64734] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aVgOlhfxsu5kmLDAcZut-QAAAJY"]
[Sat Jan 03 02:29:42.665117 2026] [:error] [pid 24749:tid 24756] [client 135.235.168.239:63372] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aVgOlkiv6Q9UlqwBJkaAMAAAAMU"]
[Sat Jan 03 02:29:43.300235 2026] [:error] [pid 24661:tid 24740] [client 135.235.168.239:63431] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVgOlxfxsu5kmLDAcZut_AAAAJQ"]
[Sat Jan 03 02:29:43.698241 2026] [:error] [pid 24659:tid 24672] [client 135.235.168.239:63393] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVgOl2ucj-rXdFUnVEtLaAAAAAg"]
[Sat Jan 03 02:29:44.618493 2026] [:error] [pid 24660:tid 24705] [client 135.235.168.239:63435] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVgOmGZwWsLNsJ3ZH7bnmwAAAEw"]
[Sat Jan 03 02:29:44.996154 2026] [:error] [pid 24660:tid 24711] [client 135.235.168.239:64735] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVgOmGZwWsLNsJ3ZH7bnnAAAAFI"]
[Sat Jan 03 02:29:45.624171 2026] [:error] [pid 47234:tid 47241] [client 135.235.168.239:62894] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1yade.php"] [unique_id "aVgOmR2w_O5NbPWiWO_h_wAAAQU"]
[Sat Jan 03 02:29:46.510585 2026] [:error] [pid 24749:tid 24754] [client 135.235.168.239:64672] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1yade.php"] [unique_id "aVgOmkiv6Q9UlqwBJkaAMgAAAMM"]
[Sat Jan 03 02:29:46.933565 2026] [:error] [pid 24661:tid 24738] [client 135.235.168.239:64707] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1yade.php"] [unique_id "aVgOmhfxsu5kmLDAcZut_wAAAJI"]
[Sat Jan 03 02:29:47.458388 2026] [:error] [pid 47234:tid 47244] [client 135.235.168.239:62873] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1yade.php"] [unique_id "aVgOmx2w_O5NbPWiWO_iDAAAAQg"]
[Sat Jan 03 02:29:48.095176 2026] [:error] [pid 47234:tid 47259] [client 135.235.168.239:64755] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVgOnB2w_O5NbPWiWO_iDgAAARc"]
[Sat Jan 03 02:29:48.849862 2026] [:error] [pid 47234:tid 47236] [client 135.235.168.239:64743] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVgOnB2w_O5NbPWiWO_iDwAAAQA"]
[Sat Jan 03 02:29:49.840017 2026] [:error] [pid 24659:tid 24665] [client 135.235.168.239:63466] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVgOnWucj-rXdFUnVEtLdQAAAAE"]
[Sat Jan 03 02:29:50.681700 2026] [:error] [pid 47234:tid 47252] [client 135.235.168.239:63459] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVgOnh2w_O5NbPWiWO_iFwAAARA"]
[Sat Jan 03 02:29:51.218844 2026] [:error] [pid 24659:tid 24673] [client 135.235.168.239:64654] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVgOn2ucj-rXdFUnVEtLdwAAAAk"]
[Sat Jan 03 02:29:51.695620 2026] [:error] [pid 24749:tid 24760] [client 135.235.168.239:64748] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVgOn0iv6Q9UlqwBJkaANgAAAMk"]
[Sat Jan 03 02:29:52.567511 2026] [:error] [pid 24749:tid 24771] [client 135.235.168.239:64695] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVgOoEiv6Q9UlqwBJkaAOAAAANQ"]
[Sat Jan 03 02:29:52.975920 2026] [:error] [pid 24660:tid 24693] [client 135.235.168.239:64742] [client 135.235.168.239] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVgOoGZwWsLNsJ3ZH7bnrAAAAEA"]
[Sat Jan 03 04:20:07.543130 2026] [:error] [pid 1931:tid 2036] [client 101.42.46.71:41212] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVgodx8Tyw7ZoIdXlcbr4wAAAIw"]
[Sat Jan 03 05:56:12.049748 2026] [:error] [pid 34260:tid 34283] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sat Jan 03 05:56:12.437479 2026] [:error] [pid 34260:tid 34271] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Jan 03 05:56:12.547386 2026] [:error] [pid 34260:tid 34267] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Jan 03 05:56:12.788823 2026] [:error] [pid 34260:tid 34279] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Sat Jan 03 05:56:12.879968 2026] [:error] [pid 34260:tid 34276] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Sat Jan 03 05:56:12.972755 2026] [:error] [pid 34260:tid 34270] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Sat Jan 03 05:56:13.064473 2026] [:error] [pid 34260:tid 34278] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sat Jan 03 05:56:13.458911 2026] [:error] [pid 34260:tid 34272] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Jan 03 05:56:13.560821 2026] [:error] [pid 34260:tid 34269] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Sat Jan 03 05:56:13.657781 2026] [:error] [pid 34260:tid 34264] [client 4.194.56.148:52294] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Sat Jan 03 05:56:13.745453 2026] [:error] [pid 34260:tid 34285] [client 4.194.56.148:52294] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVg-_UWWhyvZ0O9KNVS1_QAAARc"]
[Sat Jan 03 05:56:14.359636 2026] [:error] [pid 2083:tid 2105] [client 4.194.56.148:12017] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVg-_jVlR_BmlMPnhV7ZFwAAANQ"]
[Sat Jan 03 05:56:15.678447 2026] [:error] [pid 1931:tid 2043] [client 4.194.56.148:54163] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVg-_x8Tyw7ZoIdXlcYSswAAAJM"]
[Sat Jan 03 05:56:16.431141 2026] [:error] [pid 1931:tid 2037] [client 4.194.56.148:52344] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVg_AB8Tyw7ZoIdXlcYStQAAAI0"]
[Sat Jan 03 05:56:17.452020 2026] [:error] [pid 34260:tid 34272] [client 4.194.56.148:52328] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVg_AUWWhyvZ0O9KNVS2CgAAAQo"]
[Sat Jan 03 05:56:18.208301 2026] [:error] [pid 1931:tid 2035] [client 4.194.56.148:18583] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVg_Ah8Tyw7ZoIdXlcYSugAAAIs"]
[Sat Jan 03 05:56:18.943988 2026] [:error] [pid 2083:tid 2088] [client 4.194.56.148:52341] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVg_AjVlR_BmlMPnhV7ZIQAAAMM"]
[Sat Jan 03 05:56:20.716331 2026] [:error] [pid 1931:tid 1999] [client 4.194.56.148:54188] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVg_BB8Tyw7ZoIdXlcYSwgAAAIM"]
[Sat Jan 03 05:56:21.830490 2026] [:error] [pid 2083:tid 2104] [client 4.194.56.148:12028] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVg_BTVlR_BmlMPnhV7ZKQAAANM"]
[Sat Jan 03 05:56:22.484845 2026] [:error] [pid 1930:tid 1976] [client 4.194.56.148:18565] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVg_BpP-6mqhfUDa89zs-QAAAEo"]
[Sat Jan 03 05:56:22.991544 2026] [:error] [pid 2083:tid 2095] [client 4.194.56.148:11999] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVg_BjVlR_BmlMPnhV7ZKgAAAMo"]
[Sat Jan 03 05:56:25.229303 2026] [:error] [pid 1929:tid 1947] [client 4.194.56.148:54186] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVg_CecFqdpu6TNsuWrhzQAAAAk"]
[Sat Jan 03 05:56:26.632441 2026] [:error] [pid 1929:tid 1955] [client 4.194.56.148:18571] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVg_CucFqdpu6TNsuWrhzwAAABE"]
[Sat Jan 03 05:56:28.097761 2026] [:error] [pid 34260:tid 34275] [client 4.194.56.148:18602] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVg_DEWWhyvZ0O9KNVS2GgAAAQ0"]
[Sat Jan 03 05:56:29.005519 2026] [:error] [pid 34260:tid 34285] [client 4.194.56.148:54149] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVg_DUWWhyvZ0O9KNVS2GwAAARc"]
[Sat Jan 03 05:56:29.909428 2026] [:error] [pid 34260:tid 34280] [client 4.194.56.148:18599] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVg_DUWWhyvZ0O9KNVS2IQAAARI"]
[Sat Jan 03 05:56:30.411604 2026] [:error] [pid 2083:tid 2109] [client 4.194.56.148:18614] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVg_DjVlR_BmlMPnhV7ZNwAAANg"]
[Sat Jan 03 05:56:31.391288 2026] [:error] [pid 1931:tid 2035] [client 4.194.56.148:18587] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVg_Dx8Tyw7ZoIdXlcYS1gAAAIs"]
[Sat Jan 03 05:56:32.222474 2026] [:error] [pid 34260:tid 34272] [client 4.194.56.148:54144] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVg_EEWWhyvZ0O9KNVS2KAAAAQo"]
[Sat Jan 03 05:56:32.779790 2026] [:error] [pid 2083:tid 2105] [client 4.194.56.148:18574] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVg_EDVlR_BmlMPnhV7ZOwAAANQ"]
[Sat Jan 03 05:56:33.442214 2026] [:error] [pid 1929:tid 1948] [client 4.194.56.148:52288] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVg_EecFqdpu6TNsuWrh3gAAAAo"]
[Sat Jan 03 05:56:34.573902 2026] [:error] [pid 1931:tid 2027] [client 4.194.56.148:18590] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVg_Eh8Tyw7ZoIdXlcYS3QAAAIQ"]
[Sat Jan 03 05:56:35.463761 2026] [:error] [pid 1929:tid 1956] [client 4.194.56.148:12216] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVg_E-cFqdpu6TNsuWrh5AAAABI"]
[Sat Jan 03 05:56:35.984031 2026] [:error] [pid 1931:tid 2038] [client 4.194.56.148:11981] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVg_Ex8Tyw7ZoIdXlcYS4AAAAI4"]
[Sat Jan 03 05:56:37.869592 2026] [:error] [pid 1929:tid 1939] [client 4.194.56.148:52307] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVg_FecFqdpu6TNsuWrh5wAAAAE"]
[Sat Jan 03 05:56:38.754957 2026] [:error] [pid 1931:tid 2030] [client 4.194.56.148:54166] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVg_Fh8Tyw7ZoIdXlcYS7AAAAIY"]
[Sat Jan 03 05:56:40.596801 2026] [:error] [pid 1930:tid 1968] [client 4.194.56.148:52322] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVg_GJP-6mqhfUDa89ztGQAAAEI"]
[Sat Jan 03 05:56:41.364916 2026] [:error] [pid 1930:tid 1988] [client 4.194.56.148:52343] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVg_GZP-6mqhfUDa89ztHQAAAFY"]
[Sat Jan 03 05:56:42.053811 2026] [:error] [pid 1929:tid 1957] [client 4.194.56.148:11996] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVg_GucFqdpu6TNsuWrh8gAAABM"]
[Sat Jan 03 05:56:43.456744 2026] [:error] [pid 1930:tid 1977] [client 4.194.56.148:52327] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVg_G5P-6mqhfUDa89ztJAAAAEs"]
[Sat Jan 03 05:56:45.355026 2026] [:error] [pid 2083:tid 2108] [client 4.194.56.148:54198] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVg_HTVlR_BmlMPnhV7ZRQAAANc"]
[Sat Jan 03 05:56:45.745264 2026] [:error] [pid 1929:tid 1947] [client 4.194.56.148:54180] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVg_HecFqdpu6TNsuWrh9gAAAAk"]
[Sat Jan 03 05:56:46.982494 2026] [:error] [pid 1929:tid 1940] [client 4.194.56.148:52293] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVg_HucFqdpu6TNsuWrh-AAAAAI"]
[Sat Jan 03 05:56:54.017433 2026] [:error] [pid 1930:tid 1969] [client 4.194.56.148:18622] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVg_JpP-6mqhfUDa89ztNgAAAEM"]
[Sat Jan 03 05:56:55.354120 2026] [:error] [pid 34260:tid 34278] [client 4.194.56.148:54152] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVg_J0WWhyvZ0O9KNVS2UQAAARA"]
[Sat Jan 03 05:56:56.318497 2026] [:error] [pid 1929:tid 1945] [client 4.194.56.148:52334] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVg_KOcFqdpu6TNsuWriDQAAAAc"]
[Sat Jan 03 05:56:59.199115 2026] [:error] [pid 1931:tid 2044] [client 4.194.56.148:52297] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVg_Kx8Tyw7ZoIdXlcYTDAAAAJQ"]
[Sat Jan 03 05:57:01.110829 2026] [:error] [pid 1929:tid 1952] [client 4.194.56.148:54207] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVg_LecFqdpu6TNsuWriEwAAAA4"]
[Sat Jan 03 05:57:01.845057 2026] [:error] [pid 34260:tid 34285] [client 4.194.56.148:11990] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVg_LUWWhyvZ0O9KNVS2YwAAARc"]
[Sat Jan 03 05:57:03.305646 2026] [:error] [pid 2083:tid 2091] [client 4.194.56.148:54182] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVg_LzVlR_BmlMPnhV7ZZgAAAMY"]
[Sat Jan 03 05:57:06.258817 2026] [:error] [pid 1929:tid 1939] [client 4.194.56.148:54185] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVg_MucFqdpu6TNsuWriHQAAAAE"]
[Sat Jan 03 05:57:10.440615 2026] [:error] [pid 2083:tid 2108] [client 4.194.56.148:52324] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVg_NjVlR_BmlMPnhV7ZcwAAANc"]
[Sat Jan 03 05:57:11.245307 2026] [:error] [pid 2083:tid 2095] [client 4.194.56.148:18603] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVg_NzVlR_BmlMPnhV7ZdgAAAMo"]
[Sat Jan 03 05:57:15.964891 2026] [:error] [pid 34260:tid 34271] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/lanz.php
[Sat Jan 03 05:57:16.058172 2026] [:error] [pid 34260:tid 34269] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/xeeex.php
[Sat Jan 03 05:57:16.159367 2026] [:error] [pid 34260:tid 34274] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/tons.php
[Sat Jan 03 05:57:16.542761 2026] [:error] [pid 34260:tid 34283] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/wpup.php
[Sat Jan 03 05:57:16.636362 2026] [:error] [pid 34260:tid 34265] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Jan 03 05:57:16.732314 2026] [:error] [pid 34260:tid 34272] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/f2f.php
[Sat Jan 03 05:57:16.842188 2026] [:error] [pid 34260:tid 34262] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/ths.php
[Sat Jan 03 05:57:16.935834 2026] [:error] [pid 34260:tid 34270] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Jan 03 05:57:17.028066 2026] [:error] [pid 34260:tid 34266] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Sat Jan 03 05:57:17.119016 2026] [:error] [pid 34260:tid 34275] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/d996699999.php
[Sat Jan 03 05:57:17.210319 2026] [:error] [pid 34260:tid 34277] [client 4.194.56.148:43925] File does not exist: /usr/local/apache/htdocs/suspended-page/ierne.php
[Sat Jan 03 05:57:17.297867 2026] [:error] [pid 34260:tid 34279] [client 4.194.56.148:43925] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVg_PUWWhyvZ0O9KNVS2kAAAARE"]
[Sat Jan 03 05:57:20.267022 2026] [:error] [pid 1931:tid 2035] [client 4.194.56.148:43928] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVg_QB8Tyw7ZoIdXlcYTLwAAAIs"]
[Sat Jan 03 05:57:20.696156 2026] [:error] [pid 2083:tid 2096] [client 4.194.56.148:43926] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVg_QDVlR_BmlMPnhV7ZiAAAAMs"]
[Sat Jan 03 05:57:21.946486 2026] [:error] [pid 1930:tid 1977] [client 4.194.56.148:18568] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVg_QZP-6mqhfUDa89ztYwAAAEs"]
[Sat Jan 03 05:57:24.836458 2026] [:error] [pid 1930:tid 1980] [client 4.194.56.148:11980] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1yade.php"] [unique_id "aVg_RJP-6mqhfUDa89ztaQAAAE4"]
[Sat Jan 03 05:57:26.337154 2026] [:error] [pid 34260:tid 34286] [client 4.194.56.148:43939] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1yade.php"] [unique_id "aVg_RkWWhyvZ0O9KNVS2ngAAARg"]
[Sat Jan 03 05:57:29.309988 2026] [:error] [pid 1930:tid 1971] [client 4.194.56.148:52296] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1yade.php"] [unique_id "aVg_SZP-6mqhfUDa89ztdQAAAEU"]
[Sat Jan 03 05:57:43.537318 2026] [:error] [pid 34260:tid 34283] [client 4.194.56.148:52323] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVg_V0WWhyvZ0O9KNVS2rAAAARU"]
[Sat Jan 03 05:57:44.473343 2026] [:error] [pid 2083:tid 2109] [client 4.194.56.148:52981] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVg_WDVlR_BmlMPnhV7ZswAAANg"]
[Sat Jan 03 05:57:47.680477 2026] [:error] [pid 34260:tid 34269] [client 4.194.56.148:54197] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVg_W0WWhyvZ0O9KNVS2sgAAAQc"]
[Sat Jan 03 05:57:48.541181 2026] [:error] [pid 2083:tid 2097] [client 4.194.56.148:18615] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aVg_XDVlR_BmlMPnhV7ZvAAAAMw"]
[Sat Jan 03 05:57:50.921562 2026] [:error] [pid 2083:tid 2087] [client 4.194.56.148:52291] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVg_XjVlR_BmlMPnhV7ZwQAAAMI"]
[Sat Jan 03 05:57:51.612617 2026] [:error] [pid 34260:tid 34281] [client 4.194.56.148:18620] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVg_X0WWhyvZ0O9KNVS3iQAAARM"]
[Sat Jan 03 05:57:54.447947 2026] [:error] [pid 1929:tid 1948] [client 4.194.56.148:54179] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVg_YucFqdpu6TNsuWriZAAAAAo"]
[Sat Jan 03 05:58:00.504724 2026] [:error] [pid 1931:tid 2033] [client 4.194.56.148:54194] [client 4.194.56.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVg_aB8Tyw7ZoIdXlcYTYwAAAIk"]
[Sat Jan 03 08:02:53.464602 2026] [:error] [pid 1929:tid 1962] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.fr/
[Sat Jan 03 08:02:53.603017 2026] [:error] [pid 1929:tid 1953] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php, referer: https://www.google.fr/
[Sat Jan 03 08:02:53.719873 2026] [:error] [pid 1929:tid 1958] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php, referer: https://www.yahoo.com/
[Sat Jan 03 08:02:53.836188 2026] [:error] [pid 1929:tid 1957] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://www.yahoo.com/
[Sat Jan 03 08:02:53.952531 2026] [:error] [pid 1929:tid 1945] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.com/
[Sat Jan 03 08:02:54.068883 2026] [:error] [pid 1929:tid 1960] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.de/
[Sat Jan 03 08:02:54.666726 2026] [:error] [pid 1929:tid 1952] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php, referer: https://www.bing.com/
[Sat Jan 03 08:02:54.793029 2026] [:error] [pid 1929:tid 1954] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.bing.com/
[Sat Jan 03 08:02:54.913289 2026] [:error] [pid 1929:tid 1959] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php, referer: https://www.google.co.uk/
[Sat Jan 03 08:02:55.029275 2026] [:error] [pid 1929:tid 1947] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/networks.php, referer: https://duckduckgo.com/
[Sat Jan 03 08:02:55.146772 2026] [:error] [pid 1929:tid 1955] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.yahoo.com/
[Sat Jan 03 08:02:55.263676 2026] [:error] [pid 1929:tid 1961] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/luuf.php, referer: https://www.google.co.uk/
[Sat Jan 03 08:02:55.383410 2026] [:error] [pid 1929:tid 1944] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://duckduckgo.com/
[Sat Jan 03 08:02:55.500793 2026] [:error] [pid 1929:tid 1948] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.yahoo.com/
[Sat Jan 03 08:02:55.617816 2026] [:error] [pid 1929:tid 1938] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php, referer: https://www.google.com/
[Sat Jan 03 08:02:55.734530 2026] [:error] [pid 1929:tid 1950] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.yahoo.com/
[Sat Jan 03 08:02:55.851322 2026] [:error] [pid 1929:tid 1962] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.yahoo.com/
[Sat Jan 03 08:02:55.968532 2026] [:error] [pid 1929:tid 1953] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.com/
[Sat Jan 03 08:02:56.088394 2026] [:error] [pid 1929:tid 1957] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.co.uk/
[Sat Jan 03 08:02:56.205794 2026] [:error] [pid 1929:tid 1956] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php, referer: https://www.google.de/
[Sat Jan 03 08:02:56.322950 2026] [:error] [pid 1929:tid 1943] [client 74.176.58.226:26771] File does not exist: /usr/local/apache/htdocs/suspended-page/tmp.php, referer: https://www.google.co.uk/
[Sat Jan 03 08:02:57.400959 2026] [:error] [pid 1929:tid 1948] [client 74.176.58.226:26771] [client 74.176.58.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aVhcsecFqdpu6TNsuWobawAAAAo"], referer: https://www.google.de/
[Sat Jan 03 08:02:57.632305 2026] [:error] [pid 2083:tid 2099] [client 74.176.58.226:23512] [client 74.176.58.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aVhcsTVlR_BmlMPnhV4fzgAAAM4"], referer: https://www.google.fr/
[Sat Jan 03 08:02:57.863020 2026] [:error] [pid 31630:tid 31653] [client 74.176.58.226:31209] [client 74.176.58.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/index.php"] [unique_id "aVhcsfUV_PU2SWgLPuiWfQAAAZU"], referer: https://www.google.de/
[Sat Jan 03 08:02:58.096025 2026] [:error] [pid 1930:tid 1988] [client 74.176.58.226:23489] [client 74.176.58.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aVhcspP-6mqhfUDa89woNAAAAFY"], referer: https://www.google.de/
[Sat Jan 03 08:02:58.440402 2026] [:error] [pid 1929:tid 1958] [client 74.176.58.226:21383] [client 74.176.58.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aVhcsucFqdpu6TNsuWobbQAAABQ"], referer: https://www.google.co.uk/
[Sat Jan 03 08:02:58.668561 2026] [:error] [pid 19639:tid 19662] [client 74.176.58.226:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php, referer: https://www.yahoo.com/
[Sat Jan 03 08:02:58.901692 2026] [:error] [pid 19639:tid 19643] [client 74.176.58.226:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php, referer: https://www.google.co.uk/
[Sat Jan 03 08:02:59.019408 2026] [:error] [pid 19639:tid 19657] [client 74.176.58.226:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php, referer: https://www.google.de/
[Sat Jan 03 08:02:59.136663 2026] [:error] [pid 19639:tid 19642] [client 74.176.58.226:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php, referer: https://www.google.co.uk/
[Sat Jan 03 08:02:59.253625 2026] [:error] [pid 19639:tid 19646] [client 74.176.58.226:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/sa.php, referer: https://duckduckgo.com/
[Sat Jan 03 08:02:59.371251 2026] [:error] [pid 19639:tid 19644] [client 74.176.58.226:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php, referer: https://www.google.co.uk/
[Sat Jan 03 08:02:59.488459 2026] [:error] [pid 19639:tid 19650] [client 74.176.58.226:31181] File does not exist: /usr/local/apache/htdocs/suspended-page/uploaded_script.php, referer: https://www.google.de/
[Sat Jan 03 09:08:32.533841 2026] [:error] [pid 31630:tid 31652] [client 43.165.65.180:53528] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVhsEPUV_PU2SWgLPuiszQAAAZQ"]
[Sat Jan 03 10:12:37.393088 2026] [:error] [pid 1929:tid 1953] [client 120.71.59.24:35230] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVh7FecFqdpu6TNsuWpDCwAAAA8"]
[Sat Jan 03 12:09:42.529738 2026] [:error] [pid 34260:tid 34271] [client 43.157.188.74:41458] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aViWhkWWhyvZ0O9KNVRODAAAAQk"]
[Sat Jan 03 16:21:56.552342 2026] [:error] [pid 34260:tid 34283] [client 182.44.12.37:56666] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVjRpEWWhyvZ0O9KNVSsIgAAARU"]
[Sat Jan 03 17:58:52.337144 2026] [:error] [pid 19639:tid 19653] [client 43.155.140.157:37136] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVjoXCQ7fWZUytnlHEzOPgAAAUw"]
[Sat Jan 03 19:53:33.465642 2026] [:error] [pid 1929:tid 1949] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/smklh.php
[Sat Jan 03 19:53:33.603019 2026] [:error] [pid 1929:tid 1942] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/sagym.php
[Sat Jan 03 19:53:34.096109 2026] [:error] [pid 1929:tid 1952] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/qvaaq.php
[Sat Jan 03 19:53:34.267160 2026] [:error] [pid 1929:tid 1960] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Jan 03 19:53:34.407274 2026] [:error] [pid 1929:tid 1943] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/gi.php
[Sat Jan 03 19:53:34.545310 2026] [:error] [pid 1929:tid 1944] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sat Jan 03 19:53:34.703634 2026] [:error] [pid 1929:tid 1958] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Sat Jan 03 19:53:34.843122 2026] [:error] [pid 1929:tid 1947] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/frg.php
[Sat Jan 03 19:53:35.138718 2026] [:error] [pid 1929:tid 1950] [client 20.196.105.200:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/hly.php
[Sat Jan 03 19:53:35.278075 2026] [:error] [pid 1929:tid 1957] [client 20.196.105.200:10381] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aVkDP-cFqdpu6TNsuWrUXQAAABM"]
[Sat Jan 03 19:53:36.259203 2026] [:error] [pid 2083:tid 2102] [client 20.196.105.200:10446] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aVkDQDVlR_BmlMPnhV7_UwAAANE"]
[Sat Jan 03 19:53:36.900345 2026] [:error] [pid 1930:tid 1981] [client 20.196.105.200:10375] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aVkDQJP-6mqhfUDa89zN6gAAAE8"]
[Sat Jan 03 19:53:37.635848 2026] [:error] [pid 31630:tid 31638] [client 20.196.105.200:10478] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aVkDQfUV_PU2SWgLPuhInAAAAYY"]
[Sat Jan 03 19:53:38.256753 2026] [:error] [pid 34260:tid 34279] [client 20.196.105.200:10437] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVkDQkWWhyvZ0O9KNVQDswAAARE"]
[Sat Jan 03 19:53:39.329033 2026] [:error] [pid 31630:tid 31645] [client 20.196.105.200:10384] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVkDQ_UV_PU2SWgLPuhInwAAAY0"]
[Sat Jan 03 19:53:39.887853 2026] [:error] [pid 1930:tid 1974] [client 20.196.105.200:10391] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVkDQ5P-6mqhfUDa89zN7QAAAEg"]
[Sat Jan 03 19:53:40.704945 2026] [:error] [pid 31630:tid 31644] [client 20.196.105.200:10488] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVkDRPUV_PU2SWgLPuhIowAAAYw"]
[Sat Jan 03 19:53:42.324002 2026] [:error] [pid 1931:tid 2043] [client 20.196.105.200:10482] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "aVkDRh8Tyw7ZoIdXlcbmbQAAAJM"]
[Sat Jan 03 19:53:43.296073 2026] [:error] [pid 1931:tid 2038] [client 20.196.105.200:10450] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "aVkDRx8Tyw7ZoIdXlcbmbgAAAI4"]
[Sat Jan 03 19:53:44.089233 2026] [:error] [pid 19639:tid 19652] [client 20.196.105.200:10371] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "aVkDSCQ7fWZUytnlHEzpcgAAAUs"]
[Sat Jan 03 19:53:44.639154 2026] [:error] [pid 34260:tid 34280] [client 20.196.105.200:10390] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "aVkDSEWWhyvZ0O9KNVQDvgAAARI"]
[Sat Jan 03 19:53:45.076694 2026] [:error] [pid 2083:tid 2089] [client 20.196.105.200:3027] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVkDSTVlR_BmlMPnhV7_XAAAAMQ"]
[Sat Jan 03 19:53:45.479780 2026] [:error] [pid 2083:tid 2085] [client 20.196.105.200:10389] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVkDSTVlR_BmlMPnhV7_XgAAAMA"]
[Sat Jan 03 19:53:46.067247 2026] [:error] [pid 19639:tid 19646] [client 20.196.105.200:10374] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVkDSiQ7fWZUytnlHEzpdAAAAUU"]
[Sat Jan 03 19:53:46.480868 2026] [:error] [pid 1930:tid 1970] [client 20.196.105.200:10461] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVkDSpP-6mqhfUDa89zOAwAAAEQ"]
[Sat Jan 03 19:53:47.306665 2026] [:error] [pid 1931:tid 2034] [client 20.196.105.200:10445] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVkDSx8Tyw7ZoIdXlcbmdQAAAIo"]
[Sat Jan 03 19:53:48.103050 2026] [:error] [pid 1931:tid 2040] [client 20.196.105.200:10480] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVkDTB8Tyw7ZoIdXlcbmdwAAAJA"]
[Sat Jan 03 19:53:48.881063 2026] [:error] [pid 2083:tid 2099] [client 20.196.105.200:10430] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVkDTDVlR_BmlMPnhV7_YAAAAM4"]
[Sat Jan 03 19:53:49.460190 2026] [:error] [pid 1931:tid 2043] [client 20.196.105.200:10396] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aVkDTR8Tyw7ZoIdXlcbmegAAAJM"]
[Sat Jan 03 19:53:50.153703 2026] [:error] [pid 1930:tid 1972] [client 20.196.105.200:10493] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVkDTpP-6mqhfUDa89zOCgAAAEY"]
[Sat Jan 03 19:53:50.832996 2026] [:error] [pid 2083:tid 2094] [client 20.196.105.200:10475] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVkDTjVlR_BmlMPnhV7_YwAAAMk"]
[Sat Jan 03 19:53:51.408898 2026] [:error] [pid 2083:tid 2101] [client 20.196.105.200:10438] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVkDTzVlR_BmlMPnhV7_ZAAAANA"]
[Sat Jan 03 19:53:51.922265 2026] [:error] [pid 19639:tid 19642] [client 20.196.105.200:10484] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVkDTyQ7fWZUytnlHEzpewAAAUE"]
[Sat Jan 03 19:53:52.510959 2026] [:error] [pid 1929:tid 1943] [client 20.196.105.200:10458] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aQw.php"] [unique_id "aVkDUOcFqdpu6TNsuWrUbAAAAAU"]
[Sat Jan 03 19:53:52.887710 2026] [:error] [pid 2083:tid 2109] [client 20.196.105.200:10441] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aQw.php"] [unique_id "aVkDUDVlR_BmlMPnhV7_aAAAANg"]
[Sat Jan 03 19:53:53.246673 2026] [:error] [pid 34260:tid 34282] [client 20.196.105.200:10387] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aQw.php"] [unique_id "aVkDUUWWhyvZ0O9KNVQDxAAAARQ"]
[Sat Jan 03 19:53:54.003566 2026] [:error] [pid 34260:tid 34283] [client 20.196.105.200:10395] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aQw.php"] [unique_id "aVkDUkWWhyvZ0O9KNVQDxQAAARU"]
[Sat Jan 03 19:53:54.743761 2026] [:error] [pid 1930:tid 1970] [client 20.196.105.200:10379] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVkDUpP-6mqhfUDa89zOEQAAAEQ"]
[Sat Jan 03 19:53:55.593724 2026] [:error] [pid 1930:tid 1985] [client 20.196.105.200:10440] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVkDU5P-6mqhfUDa89zOFQAAAFM"]
[Sat Jan 03 19:53:56.556253 2026] [:error] [pid 1931:tid 2040] [client 20.196.105.200:10481] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVkDVB8Tyw7ZoIdXlcbmhgAAAJA"]
[Sat Jan 03 19:53:57.209510 2026] [:error] [pid 31630:tid 31640] [client 20.196.105.200:10449] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVkDVfUV_PU2SWgLPuhIswAAAYg"]
[Sat Jan 03 19:53:57.967598 2026] [:error] [pid 1930:tid 1990] [client 20.196.105.200:10376] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aVkDVZP-6mqhfUDa89zOGQAAAFg"]
[Sat Jan 03 19:53:59.402303 2026] [:error] [pid 1931:tid 1999] [client 20.196.105.200:10397] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aVkDVx8Tyw7ZoIdXlcbmigAAAIM"]
[Sat Jan 03 19:54:00.176217 2026] [:error] [pid 1929:tid 1946] [client 20.196.105.200:10447] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aVkDWOcFqdpu6TNsuWrUcQAAAAg"]
[Sat Jan 03 19:54:00.916614 2026] [:error] [pid 19639:tid 19663] [client 20.196.105.200:10442] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sto.php"] [unique_id "aVkDWCQ7fWZUytnlHEzphgAAAVY"]
[Sat Jan 03 19:54:02.728722 2026] [:error] [pid 2083:tid 2105] [client 20.196.105.200:10393] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aVkDWjVlR_BmlMPnhV7_eAAAANQ"]
[Sat Jan 03 19:54:04.060080 2026] [:error] [pid 2083:tid 2089] [client 20.196.105.200:10451] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aVkDXDVlR_BmlMPnhV7_ewAAAMQ"]
[Sat Jan 03 19:54:05.176450 2026] [:error] [pid 31630:tid 31632] [client 20.196.105.200:3008] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aVkDXfUV_PU2SWgLPuhIuQAAAYA"]
[Sat Jan 03 19:54:06.416607 2026] [:error] [pid 2083:tid 2106] [client 20.196.105.200:10463] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aVkDXjVlR_BmlMPnhV7_fQAAANU"]
[Sat Jan 03 19:54:06.967575 2026] [:error] [pid 1930:tid 1986] [client 20.196.105.200:10448] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVkDXpP-6mqhfUDa89zOJgAAAFQ"]
[Sat Jan 03 19:54:07.530520 2026] [:error] [pid 1931:tid 2045] [client 20.196.105.200:10492] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVkDXx8Tyw7ZoIdXlcbmmgAAAJU"]
[Sat Jan 03 19:54:07.896313 2026] [:error] [pid 1931:tid 2048] [client 20.196.105.200:3022] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVkDXx8Tyw7ZoIdXlcbmnQAAAJg"]
[Sat Jan 03 19:54:08.387754 2026] [:error] [pid 1931:tid 2029] [client 20.196.105.200:10370] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aVkDYB8Tyw7ZoIdXlcbmoQAAAIU"]
[Sat Jan 03 19:54:09.766793 2026] [:error] [pid 1929:tid 1953] [client 20.196.105.200:3049] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aVkDYecFqdpu6TNsuWrUewAAAA8"]
[Sat Jan 03 19:54:10.554820 2026] [:error] [pid 2083:tid 2107] [client 20.196.105.200:10416] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aVkDYjVlR_BmlMPnhV7_ggAAANY"]
[Sat Jan 03 19:54:11.901419 2026] [:error] [pid 1929:tid 1945] [client 20.196.105.200:10483] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aVkDY-cFqdpu6TNsuWrUfgAAAAc"]
[Sat Jan 03 19:54:13.990188 2026] [:error] [pid 1929:tid 1951] [client 20.196.105.200:10469] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "aVkDZecFqdpu6TNsuWrUggAAAA0"]
[Sat Jan 03 19:54:16.606584 2026] [:error] [pid 1929:tid 1943] [client 20.196.105.200:3013] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVkDaOcFqdpu6TNsuWrUhQAAAAU"]
[Sat Jan 03 19:54:18.367316 2026] [:error] [pid 31630:tid 31649] [client 20.196.105.200:10378] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVkDavUV_PU2SWgLPuhIzQAAAZE"]
[Sat Jan 03 19:54:21.030830 2026] [:error] [pid 34260:tid 34278] [client 20.196.105.200:10369] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVkDbUWWhyvZ0O9KNVQEBwAAARA"]
[Sat Jan 03 19:54:21.796762 2026] [:error] [pid 19639:tid 19654] [client 20.196.105.200:10435] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVkDbSQ7fWZUytnlHEzplQAAAU0"]
[Sat Jan 03 19:54:23.646819 2026] [:error] [pid 31630:tid 31637] [client 20.196.105.200:10477] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVkDb_UV_PU2SWgLPuhI2gAAAYU"]
[Sat Jan 03 19:54:24.977482 2026] [:error] [pid 19639:tid 19648] [client 20.196.105.200:10380] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVkDcCQ7fWZUytnlHEzpmwAAAUc"]
[Sat Jan 03 19:54:25.722813 2026] [:error] [pid 34260:tid 34273] [client 20.196.105.200:10368] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVkDcUWWhyvZ0O9KNVQEHwAAAQs"]
[Sat Jan 03 19:54:26.772102 2026] [:error] [pid 1931:tid 2042] [client 20.196.105.200:10459] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aVkDch8Tyw7ZoIdXlcbmtwAAAJI"]
[Sat Jan 03 19:54:27.149025 2026] [:error] [pid 34260:tid 34264] [client 20.196.105.200:10444] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVkDc0WWhyvZ0O9KNVQEKAAAAQI"]
[Sat Jan 03 19:54:28.848414 2026] [:error] [pid 34260:tid 34279] [client 20.196.105.200:2964] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVkDdEWWhyvZ0O9KNVQENwAAARE"]
[Sat Jan 03 19:54:29.752581 2026] [:error] [pid 1931:tid 2047] [client 20.196.105.200:10494] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVkDdR8Tyw7ZoIdXlcbmvAAAAJc"]
[Sat Jan 03 19:54:30.471211 2026] [:error] [pid 1931:tid 2045] [client 20.196.105.200:10489] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVkDdh8Tyw7ZoIdXlcbmvwAAAJU"]
[Sat Jan 03 19:54:31.079071 2026] [:error] [pid 34260:tid 34262] [client 20.196.105.200:10394] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nansa.php"] [unique_id "aVkDd0WWhyvZ0O9KNVQEQwAAAQA"]
[Sat Jan 03 19:54:32.331827 2026] [:error] [pid 1931:tid 2037] [client 20.196.105.200:10424] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nansa.php"] [unique_id "aVkDeB8Tyw7ZoIdXlcbmwwAAAI0"]
[Sat Jan 03 19:54:32.816965 2026] [:error] [pid 1930:tid 1987] [client 20.196.105.200:10415] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nansa.php"] [unique_id "aVkDeJP-6mqhfUDa89zOUgAAAFU"]
[Sat Jan 03 19:54:33.681605 2026] [:error] [pid 1929:tid 1952] [client 20.196.105.200:10383] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nansa.php"] [unique_id "aVkDeecFqdpu6TNsuWrUmgAAAA4"]
[Sat Jan 03 19:54:34.493583 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:10470] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVkDekWWhyvZ0O9KNVQESQAAAQ0"]
[Sat Jan 03 19:54:34.794959 2026] [:error] [pid 1929:tid 1958] [client 20.196.105.200:10418] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVkDeucFqdpu6TNsuWrUnQAAABQ"]
[Sat Jan 03 19:54:35.402955 2026] [:error] [pid 1931:tid 2047] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sat Jan 03 19:54:35.540344 2026] [:error] [pid 1931:tid 2030] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Sat Jan 03 19:54:35.856902 2026] [:error] [pid 1931:tid 2045] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/18299.php
[Sat Jan 03 19:54:35.998080 2026] [:error] [pid 1931:tid 2048] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/wl.php
[Sat Jan 03 19:54:36.139821 2026] [:error] [pid 1931:tid 2046] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sat Jan 03 19:54:36.308213 2026] [:error] [pid 1931:tid 2044] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/pn.php
[Sat Jan 03 19:54:36.446563 2026] [:error] [pid 1931:tid 2041] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/x50.php
[Sat Jan 03 19:54:36.587521 2026] [:error] [pid 1931:tid 2027] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Sat Jan 03 19:54:36.727901 2026] [:error] [pid 1931:tid 1994] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/show.php
[Sat Jan 03 19:54:37.195539 2026] [:error] [pid 1931:tid 2037] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/cro.php
[Sat Jan 03 19:54:37.339844 2026] [:error] [pid 1931:tid 1993] [client 20.196.105.200:10432] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Sat Jan 03 19:54:37.474522 2026] [:error] [pid 1931:tid 2039] [client 20.196.105.200:10432] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aVkDfR8Tyw7ZoIdXlcbm1QAAAI8"]
[Sat Jan 03 19:54:38.697402 2026] [:error] [pid 31630:tid 31638] [client 20.196.105.200:10385] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aVkDfvUV_PU2SWgLPuhI8QAAAYY"]
[Sat Jan 03 19:54:39.316216 2026] [:error] [pid 2083:tid 2087] [client 20.196.105.200:10465] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aVkDfzVlR_BmlMPnhV7_tAAAAMI"]
[Sat Jan 03 19:54:40.056606 2026] [:error] [pid 1931:tid 2046] [client 20.196.105.200:10486] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aVkDgB8Tyw7ZoIdXlcbm2wAAAJY"]
[Sat Jan 03 19:54:41.900855 2026] [:error] [pid 1929:tid 1938] [client 20.196.105.200:10476] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqq.php"] [unique_id "aVkDgecFqdpu6TNsuWrUpAAAAAA"]
[Sat Jan 03 19:54:43.211663 2026] [:error] [pid 19639:tid 19650] [client 20.196.105.200:3024] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqq.php"] [unique_id "aVkDgyQ7fWZUytnlHEzpsAAAAUk"]
[Sat Jan 03 19:54:44.029473 2026] [:error] [pid 1930:tid 1981] [client 20.196.105.200:10453] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqq.php"] [unique_id "aVkDhJP-6mqhfUDa89zOXQAAAE8"]
[Sat Jan 03 19:54:45.262801 2026] [:error] [pid 31630:tid 31646] [client 20.196.105.200:10466] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqq.php"] [unique_id "aVkDhfUV_PU2SWgLPuhI9QAAAY4"]
[Sat Jan 03 19:54:46.764223 2026] [:error] [pid 1930:tid 1976] [client 20.196.105.200:10455] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVkDhpP-6mqhfUDa89zOYQAAAEo"]
[Sat Jan 03 19:54:47.317688 2026] [:error] [pid 1931:tid 1999] [client 20.196.105.200:3023] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVkDhx8Tyw7ZoIdXlcbm7AAAAIM"]
[Sat Jan 03 19:54:49.055338 2026] [:error] [pid 1929:tid 1955] [client 20.196.105.200:10490] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVkDiecFqdpu6TNsuWrUrgAAABE"]
[Sat Jan 03 19:54:49.857374 2026] [:error] [pid 2083:tid 2093] [client 20.196.105.200:3066] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aVkDiTVlR_BmlMPnhV7_wAAAAMg"]
[Sat Jan 03 19:54:50.569101 2026] [:error] [pid 1930:tid 1987] [client 20.196.105.200:10386] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aVkDipP-6mqhfUDa89zOaQAAAFU"]
[Sat Jan 03 19:54:51.232261 2026] [:error] [pid 2083:tid 2085] [client 20.196.105.200:10417] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aVkDizVlR_BmlMPnhV7_xAAAAMA"]
[Sat Jan 03 19:54:54.281512 2026] [:error] [pid 1931:tid 1994] [client 20.196.105.200:10431] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aVkDjh8Tyw7ZoIdXlcbm-wAAAIE"]
[Sat Jan 03 19:54:54.703984 2026] [:error] [pid 19639:tid 19651] [client 20.196.105.200:10372] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fz.php"] [unique_id "aVkDjiQ7fWZUytnlHEzpuwAAAUo"]
[Sat Jan 03 19:54:55.204654 2026] [:error] [pid 34260:tid 34274] [client 20.196.105.200:10410] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congab.php"] [unique_id "aVkDj0WWhyvZ0O9KNVQEawAAAQw"]
[Sat Jan 03 19:54:55.952398 2026] [:error] [pid 31630:tid 31653] [client 20.196.105.200:10485] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congab.php"] [unique_id "aVkDj_UV_PU2SWgLPuhI_wAAAZU"]
[Sat Jan 03 19:54:56.613010 2026] [:error] [pid 1931:tid 2031] [client 20.196.105.200:10403] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congab.php"] [unique_id "aVkDkB8Tyw7ZoIdXlcbnAAAAAIc"]
[Sat Jan 03 19:54:57.111486 2026] [:error] [pid 1931:tid 2032] [client 20.196.105.200:10421] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congab.php"] [unique_id "aVkDkR8Tyw7ZoIdXlcbnAgAAAIg"]
[Sat Jan 03 19:54:57.823602 2026] [:error] [pid 2083:tid 2093] [client 20.196.105.200:10434] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVkDkTVlR_BmlMPnhV7_zAAAAMg"]
[Sat Jan 03 19:54:58.646267 2026] [:error] [pid 31630:tid 31640] [client 20.196.105.200:3025] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVkDkvUV_PU2SWgLPuhJAQAAAYg"]
[Sat Jan 03 19:54:59.418447 2026] [:error] [pid 1929:tid 1951] [client 20.196.105.200:10398] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVkDk-cFqdpu6TNsuWrUtAAAAA0"]
[Sat Jan 03 19:55:00.576175 2026] [:error] [pid 1930:tid 1978] [client 20.196.105.200:10402] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aVkDlJP-6mqhfUDa89zObgAAAEw"]
[Sat Jan 03 19:55:01.617163 2026] [:error] [pid 1929:tid 1946] [client 20.196.105.200:3033] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVkDlecFqdpu6TNsuWrUtwAAAAg"]
[Sat Jan 03 19:55:02.273466 2026] [:error] [pid 1930:tid 1990] [client 20.196.105.200:3062] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVkDlpP-6mqhfUDa89zOcQAAAFg"]
[Sat Jan 03 19:55:03.428550 2026] [:error] [pid 1931:tid 2048] [client 20.196.105.200:2987] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVkDlx8Tyw7ZoIdXlcbnCwAAAJg"]
[Sat Jan 03 19:55:04.175314 2026] [:error] [pid 34260:tid 34262] [client 20.196.105.200:10408] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVkDmEWWhyvZ0O9KNVQEfgAAAQA"]
[Sat Jan 03 19:55:04.987894 2026] [:error] [pid 31630:tid 31652] [client 20.196.105.200:2955] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xvent.php"] [unique_id "aVkDmPUV_PU2SWgLPuhJCwAAAZQ"]
[Sat Jan 03 19:55:06.190380 2026] [:error] [pid 34260:tid 34278] [client 20.196.105.200:3043] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xvent.php"] [unique_id "aVkDmkWWhyvZ0O9KNVQEiwAAARA"]
[Sat Jan 03 19:55:07.324764 2026] [:error] [pid 1929:tid 1956] [client 20.196.105.200:10473] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xvent.php"] [unique_id "aVkDm-cFqdpu6TNsuWrUvgAAABI"]
[Sat Jan 03 19:55:08.377882 2026] [:error] [pid 1930:tid 1986] [client 20.196.105.200:10414] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xvent.php"] [unique_id "aVkDnJP-6mqhfUDa89zOegAAAFQ"]
[Sat Jan 03 19:55:09.590156 2026] [:error] [pid 1931:tid 2035] [client 20.196.105.200:3016] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVkDnR8Tyw7ZoIdXlcbnDwAAAIs"]
[Sat Jan 03 19:55:10.415522 2026] [:error] [pid 2083:tid 2104] [client 20.196.105.200:2951] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVkDnjVlR_BmlMPnhV7_1gAAANM"]
[Sat Jan 03 19:55:10.865170 2026] [:error] [pid 34260:tid 34277] [client 20.196.105.200:10439] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVkDnkWWhyvZ0O9KNVQEkQAAAQ8"]
[Sat Jan 03 19:55:11.622988 2026] [:error] [pid 1931:tid 2045] [client 20.196.105.200:3030] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVkDnx8Tyw7ZoIdXlcbnFAAAAJU"]
[Sat Jan 03 19:55:12.374979 2026] [:error] [pid 1929:tid 1940] [client 20.196.105.200:10479] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jatuh.php"] [unique_id "aVkDoOcFqdpu6TNsuWrUxAAAAAI"]
[Sat Jan 03 19:55:13.171477 2026] [:error] [pid 1929:tid 1960] [client 20.196.105.200:10486] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jatuh.php"] [unique_id "aVkDoecFqdpu6TNsuWrUxQAAABY"]
[Sat Jan 03 19:55:14.228842 2026] [:error] [pid 1929:tid 1947] [client 20.196.105.200:10436] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jatuh.php"] [unique_id "aVkDoucFqdpu6TNsuWrUywAAAAk"]
[Sat Jan 03 19:55:14.871141 2026] [:error] [pid 1929:tid 1957] [client 20.196.105.200:2954] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jatuh.php"] [unique_id "aVkDoucFqdpu6TNsuWrUzgAAABM"]
[Sat Jan 03 19:55:15.671737 2026] [:error] [pid 2083:tid 2108] [client 20.196.105.200:10419] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVkDozVlR_BmlMPnhV7_3wAAANc"]
[Sat Jan 03 19:55:16.613109 2026] [:error] [pid 1930:tid 1974] [client 20.196.105.200:10399] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVkDpJP-6mqhfUDa89zOhgAAAEg"]
[Sat Jan 03 19:55:17.407232 2026] [:error] [pid 1929:tid 1943] [client 20.196.105.200:3035] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVkDpecFqdpu6TNsuWrU1gAAAAU"]
[Sat Jan 03 19:55:17.990397 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:10400] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVkDpUWWhyvZ0O9KNVQEoAAAAQk"]
[Sat Jan 03 19:55:18.786288 2026] [:error] [pid 31630:tid 31650] [client 20.196.105.200:3065] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aVkDpvUV_PU2SWgLPuhJDgAAAZI"]
[Sat Jan 03 19:55:19.809155 2026] [:error] [pid 1930:tid 1981] [client 20.196.105.200:3012] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aVkDp5P-6mqhfUDa89zOiAAAAE8"]
[Sat Jan 03 19:55:20.587122 2026] [:error] [pid 31630:tid 31640] [client 20.196.105.200:10428] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aVkDqPUV_PU2SWgLPuhJFQAAAYg"]
[Sat Jan 03 19:55:21.164447 2026] [:error] [pid 34260:tid 34282] [client 20.196.105.200:3028] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0o0.php"] [unique_id "aVkDqUWWhyvZ0O9KNVQEqQAAARQ"]
[Sat Jan 03 19:55:21.713189 2026] [:error] [pid 34260:tid 34274] [client 20.196.105.200:10433] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aVkDqUWWhyvZ0O9KNVQErQAAAQw"]
[Sat Jan 03 19:55:22.522417 2026] [:error] [pid 19639:tid 19663] [client 20.196.105.200:3018] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aVkDqiQ7fWZUytnlHEzpzQAAAVY"]
[Sat Jan 03 19:55:23.293729 2026] [:error] [pid 34260:tid 34280] [client 20.196.105.200:2953] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aVkDq0WWhyvZ0O9KNVQEswAAARI"]
[Sat Jan 03 19:55:24.037402 2026] [:error] [pid 34260:tid 34284] [client 20.196.105.200:10382] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aVkDrEWWhyvZ0O9KNVQEtQAAARY"]
[Sat Jan 03 19:55:24.728649 2026] [:error] [pid 34260:tid 34263] [client 20.196.105.200:3036] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVkDrEWWhyvZ0O9KNVQEtwAAAQE"]
[Sat Jan 03 19:55:25.294841 2026] [:error] [pid 2083:tid 2092] [client 20.196.105.200:3069] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVkDrTVlR_BmlMPnhV7_6gAAAMc"]
[Sat Jan 03 19:55:26.289879 2026] [:error] [pid 19639:tid 19650] [client 20.196.105.200:3015] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVkDriQ7fWZUytnlHEzp1gAAAUk"]
[Sat Jan 03 19:55:27.161348 2026] [:error] [pid 1930:tid 1973] [client 20.196.105.200:10468] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVkDr5P-6mqhfUDa89zOkgAAAEc"]
[Sat Jan 03 19:55:28.342862 2026] [:error] [pid 19639:tid 19657] [client 20.196.105.200:3011] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aVkDsCQ7fWZUytnlHEzp2QAAAVA"]
[Sat Jan 03 19:55:29.115156 2026] [:error] [pid 34260:tid 34279] [client 20.196.105.200:3052] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aVkDsUWWhyvZ0O9KNVQEvQAAARE"]
[Sat Jan 03 19:55:29.527742 2026] [:error] [pid 34260:tid 34285] [client 20.196.105.200:3042] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aVkDsUWWhyvZ0O9KNVQEwAAAARc"]
[Sat Jan 03 19:55:30.510185 2026] [:error] [pid 1929:tid 1945] [client 20.196.105.200:10388] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aVkDsucFqdpu6TNsuWrU6wAAAAc"]
[Sat Jan 03 19:55:32.648732 2026] [:error] [pid 2083:tid 2101] [client 20.196.105.200:3055] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efsd.php"] [unique_id "aVkDtDVlR_BmlMPnhV7_8gAAANA"]
[Sat Jan 03 19:55:34.106151 2026] [:error] [pid 19639:tid 19663] [client 20.196.105.200:3048] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efsd.php"] [unique_id "aVkDtiQ7fWZUytnlHEzp3QAAAVY"]
[Sat Jan 03 19:55:35.260594 2026] [:error] [pid 1929:tid 1956] [client 20.196.105.200:10392] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efsd.php"] [unique_id "aVkDt-cFqdpu6TNsuWrU9AAAABI"]
[Sat Jan 03 19:55:36.107273 2026] [:error] [pid 31630:tid 31645] [client 20.196.105.200:3056] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efsd.php"] [unique_id "aVkDuPUV_PU2SWgLPuhJIQAAAY0"]
[Sat Jan 03 19:55:37.306331 2026] [:error] [pid 1930:tid 1976] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/w1w.php
[Sat Jan 03 19:55:37.444250 2026] [:error] [pid 1930:tid 1985] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Sat Jan 03 19:55:37.585605 2026] [:error] [pid 1930:tid 1990] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Sat Jan 03 19:55:37.748899 2026] [:error] [pid 1930:tid 1984] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sat Jan 03 19:55:37.887342 2026] [:error] [pid 1930:tid 1989] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/hans.php
[Sat Jan 03 19:55:38.052527 2026] [:error] [pid 1930:tid 1987] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/kairolin.php
[Sat Jan 03 19:55:38.223752 2026] [:error] [pid 1930:tid 1972] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Sat Jan 03 19:55:38.386355 2026] [:error] [pid 1930:tid 1968] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/9v6.php
[Sat Jan 03 19:55:38.524118 2026] [:error] [pid 1930:tid 1970] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Sat Jan 03 19:55:38.661658 2026] [:error] [pid 1930:tid 1974] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/zozla.php
[Sat Jan 03 19:55:38.990078 2026] [:error] [pid 1930:tid 1969] [client 20.196.105.200:10423] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Sat Jan 03 19:55:39.367597 2026] [:error] [pid 1930:tid 1980] [client 20.196.105.200:10423] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aVkDu5P-6mqhfUDa89zOqAAAAE4"]
[Sat Jan 03 19:55:40.207126 2026] [:error] [pid 34260:tid 34263] [client 20.196.105.200:2970] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aVkDvEWWhyvZ0O9KNVQE0QAAAQE"]
[Sat Jan 03 19:55:41.132210 2026] [:error] [pid 1930:tid 1986] [client 20.196.105.200:10409] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aVkDvZP-6mqhfUDa89zOqwAAAFQ"]
[Sat Jan 03 19:55:41.741869 2026] [:error] [pid 1929:tid 1938] [client 20.196.105.200:3061] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aVkDvecFqdpu6TNsuWrU_gAAAAA"]
[Sat Jan 03 19:55:42.437032 2026] [:error] [pid 2083:tid 2103] [client 20.196.105.200:3031] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lts.php"] [unique_id "aVkDvjVlR_BmlMPnhV4ABgAAANI"]
[Sat Jan 03 19:55:43.324752 2026] [:error] [pid 2083:tid 2098] [client 20.196.105.200:3020] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lts.php"] [unique_id "aVkDvzVlR_BmlMPnhV4ACwAAAM0"]
[Sat Jan 03 19:55:43.838179 2026] [:error] [pid 19639:tid 19650] [client 20.196.105.200:3068] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lts.php"] [unique_id "aVkDvyQ7fWZUytnlHEzp5QAAAUk"]
[Sat Jan 03 19:55:44.359161 2026] [:error] [pid 2083:tid 2087] [client 20.196.105.200:2952] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lts.php"] [unique_id "aVkDwDVlR_BmlMPnhV4AEQAAAMI"]
[Sat Jan 03 19:55:45.301765 2026] [:error] [pid 34260:tid 34265] [client 20.196.105.200:2960] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aVkDwUWWhyvZ0O9KNVQE1gAAAQM"]
[Sat Jan 03 19:55:45.918161 2026] [:error] [pid 34260:tid 34277] [client 20.196.105.200:10474] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aVkDwUWWhyvZ0O9KNVQE1wAAAQ8"]
[Sat Jan 03 19:55:46.600095 2026] [:error] [pid 1931:tid 2031] [client 20.196.105.200:10462] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aVkDwh8Tyw7ZoIdXlcbnOgAAAIc"]
[Sat Jan 03 19:55:47.463273 2026] [:error] [pid 1931:tid 2042] [client 20.196.105.200:3058] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmm.php"] [unique_id "aVkDwx8Tyw7ZoIdXlcbnOwAAAJI"]
[Sat Jan 03 19:55:47.903495 2026] [:error] [pid 19639:tid 19657] [client 20.196.105.200:2946] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aVkDwyQ7fWZUytnlHEzp6AAAAVA"]
[Sat Jan 03 19:55:48.530432 2026] [:error] [pid 19639:tid 19643] [client 20.196.105.200:10471] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aVkDxCQ7fWZUytnlHEzp6QAAAUI"]
[Sat Jan 03 19:55:49.146741 2026] [:error] [pid 2083:tid 2090] [client 20.196.105.200:3060] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aVkDxTVlR_BmlMPnhV4AGAAAAMU"]
[Sat Jan 03 19:55:50.043324 2026] [:error] [pid 1930:tid 1969] [client 20.196.105.200:2985] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cok.php"] [unique_id "aVkDxpP-6mqhfUDa89zOsgAAAEM"]
[Sat Jan 03 19:55:50.887651 2026] [:error] [pid 19639:tid 19661] [client 20.196.105.200:2884] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aVkDxiQ7fWZUytnlHEzp6wAAAVQ"]
[Sat Jan 03 19:55:51.964143 2026] [:error] [pid 1929:tid 1959] [client 20.196.105.200:2979] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aVkDx-cFqdpu6TNsuWrVFgAAABU"]
[Sat Jan 03 19:55:52.761863 2026] [:error] [pid 1929:tid 1952] [client 20.196.105.200:10425] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aVkDyOcFqdpu6TNsuWrVFwAAAA4"]
[Sat Jan 03 19:55:53.617033 2026] [:error] [pid 2083:tid 2109] [client 20.196.105.200:10495] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aVkDyTVlR_BmlMPnhV4AHwAAANg"]
[Sat Jan 03 19:55:55.286820 2026] [:error] [pid 1930:tid 1971] [client 20.196.105.200:10422] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aVkDy5P-6mqhfUDa89zOuQAAAEU"]
[Sat Jan 03 19:55:57.102843 2026] [:error] [pid 34260:tid 34283] [client 20.196.105.200:2902] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aVkDzUWWhyvZ0O9KNVQE4wAAARU"]
[Sat Jan 03 19:55:58.845688 2026] [:error] [pid 2083:tid 2109] [client 20.196.105.200:3026] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aVkDzjVlR_BmlMPnhV4ALQAAANg"]
[Sat Jan 03 19:56:00.468273 2026] [:error] [pid 2083:tid 2103] [client 20.196.105.200:3005] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aVkD0DVlR_BmlMPnhV4AMQAAANI"]
[Sat Jan 03 19:56:01.888692 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:3064] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aVkD0UWWhyvZ0O9KNVQE9AAAAQ0"]
[Sat Jan 03 19:56:03.819910 2026] [:error] [pid 2083:tid 2106] [client 20.196.105.200:3014] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aVkD0zVlR_BmlMPnhV4AOgAAANU"]
[Sat Jan 03 19:56:04.889422 2026] [:error] [pid 34260:tid 34281] [client 20.196.105.200:10405] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aVkD1EWWhyvZ0O9KNVQFAQAAARM"]
[Sat Jan 03 19:56:06.058701 2026] [:error] [pid 19639:tid 19644] [client 20.196.105.200:3041] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcd.php"] [unique_id "aVkD1iQ7fWZUytnlHEzp9AAAAUM"]
[Sat Jan 03 19:56:07.325441 2026] [:error] [pid 1931:tid 2036] [client 20.196.105.200:2947] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVkD1x8Tyw7ZoIdXlcbnXAAAAIw"]
[Sat Jan 03 19:56:09.120417 2026] [:error] [pid 34260:tid 34266] [client 20.196.105.200:3017] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVkD2UWWhyvZ0O9KNVQFCwAAAQQ"]
[Sat Jan 03 19:56:11.158028 2026] [:error] [pid 31630:tid 31650] [client 20.196.105.200:2972] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVkD2_UV_PU2SWgLPuhJNwAAAZI"]
[Sat Jan 03 19:56:12.391604 2026] [:error] [pid 34260:tid 34265] [client 20.196.105.200:10406] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVkD3EWWhyvZ0O9KNVQFEQAAAQM"]
[Sat Jan 03 19:56:14.093191 2026] [:error] [pid 2083:tid 2088] [client 20.196.105.200:10411] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aVkD3jVlR_BmlMPnhV4AQQAAAMM"]
[Sat Jan 03 19:56:15.065579 2026] [:error] [pid 1929:tid 1947] [client 20.196.105.200:2969] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aVkD3-cFqdpu6TNsuWrVMgAAAAk"]
[Sat Jan 03 19:56:16.773809 2026] [:error] [pid 2083:tid 2098] [client 20.196.105.200:2948] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aVkD4DVlR_BmlMPnhV4ARQAAAM0"]
[Sat Jan 03 19:56:17.338884 2026] [:error] [pid 1930:tid 1988] [client 20.196.105.200:3010] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aVkD4ZP-6mqhfUDa89zOzgAAAFY"]
[Sat Jan 03 19:56:18.184325 2026] [:error] [pid 34260:tid 34281] [client 20.196.105.200:3040] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVkD4kWWhyvZ0O9KNVQFHwAAARM"]
[Sat Jan 03 19:56:18.718039 2026] [:error] [pid 1929:tid 1962] [client 20.196.105.200:10457] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVkD4ucFqdpu6TNsuWrVNQAAABg"]
[Sat Jan 03 19:56:19.289186 2026] [:error] [pid 2083:tid 2109] [client 20.196.105.200:2983] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVkD4zVlR_BmlMPnhV4ARgAAANg"]
[Sat Jan 03 19:56:20.325077 2026] [:error] [pid 19639:tid 19661] [client 20.196.105.200:10373] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVkD5CQ7fWZUytnlHEzqAQAAAVQ"]
[Sat Jan 03 19:56:21.466317 2026] [:error] [pid 34260:tid 34283] [client 20.196.105.200:2957] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/EM.php"] [unique_id "aVkD5UWWhyvZ0O9KNVQFIQAAARU"]
[Sat Jan 03 19:56:22.250784 2026] [:error] [pid 34260:tid 34276] [client 20.196.105.200:3038] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/EM.php"] [unique_id "aVkD5kWWhyvZ0O9KNVQFIgAAAQ4"]
[Sat Jan 03 19:56:23.183016 2026] [:error] [pid 2083:tid 2102] [client 20.196.105.200:2944] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/EM.php"] [unique_id "aVkD5zVlR_BmlMPnhV4ATQAAANE"]
[Sat Jan 03 19:56:24.067584 2026] [:error] [pid 1930:tid 1970] [client 20.196.105.200:2956] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/EM.php"] [unique_id "aVkD6JP-6mqhfUDa89zO1wAAAEQ"]
[Sat Jan 03 19:56:25.182848 2026] [:error] [pid 34260:tid 34280] [client 20.196.105.200:2980] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVkD6UWWhyvZ0O9KNVQFJQAAARI"]
[Sat Jan 03 19:56:25.828661 2026] [:error] [pid 1929:tid 1962] [client 20.196.105.200:2965] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVkD6ecFqdpu6TNsuWrVQQAAABg"]
[Sat Jan 03 19:56:27.247775 2026] [:error] [pid 2083:tid 2091] [client 20.196.105.200:3021] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVkD6zVlR_BmlMPnhV4AVQAAAMY"]
[Sat Jan 03 19:56:29.601630 2026] [:error] [pid 1930:tid 1973] [client 20.196.105.200:3000] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aVkD7ZP-6mqhfUDa89zO4QAAAEc"]
[Sat Jan 03 19:56:31.526294 2026] [:error] [pid 19639:tid 19659] [client 20.196.105.200:2962] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcs.php"] [unique_id "aVkD7yQ7fWZUytnlHEzqDQAAAVI"]
[Sat Jan 03 19:56:32.279936 2026] [:error] [pid 31630:tid 31652] [client 20.196.105.200:3046] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcs.php"] [unique_id "aVkD8PUV_PU2SWgLPuhJWQAAAZQ"]
[Sat Jan 03 19:56:34.077058 2026] [:error] [pid 19639:tid 19648] [client 20.196.105.200:2991] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcs.php"] [unique_id "aVkD8iQ7fWZUytnlHEzqEAAAAUc"]
[Sat Jan 03 19:56:35.168089 2026] [:error] [pid 34260:tid 34284] [client 20.196.105.200:10377] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcs.php"] [unique_id "aVkD80WWhyvZ0O9KNVQFNAAAARY"]
[Sat Jan 03 19:56:36.998211 2026] [:error] [pid 1930:tid 1980] [client 20.196.105.200:2997] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aVkD9JP-6mqhfUDa89zO6AAAAE4"]
[Sat Jan 03 19:56:38.126770 2026] [:error] [pid 34260:tid 34278] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/fh26.php
[Sat Jan 03 19:56:38.280619 2026] [:error] [pid 34260:tid 34276] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/hq.php
[Sat Jan 03 19:56:38.418904 2026] [:error] [pid 34260:tid 34269] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gzone.php
[Sat Jan 03 19:56:38.571293 2026] [:error] [pid 34260:tid 34265] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/f2r4.php
[Sat Jan 03 19:56:38.715491 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/cafe.php
[Sat Jan 03 19:56:38.864119 2026] [:error] [pid 34260:tid 34268] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Sat Jan 03 19:56:39.389997 2026] [:error] [pid 34260:tid 34281] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sat Jan 03 19:56:39.527127 2026] [:error] [pid 34260:tid 34274] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/wsvvs.php
[Sat Jan 03 19:56:39.664310 2026] [:error] [pid 34260:tid 34284] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Jan 03 19:56:39.897699 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat Jan 03 19:56:40.070630 2026] [:error] [pid 34260:tid 34272] [client 20.196.105.200:3070] File does not exist: /usr/local/apache/htdocs/suspended-page/7h.php
[Sat Jan 03 19:56:40.205923 2026] [:error] [pid 34260:tid 34270] [client 20.196.105.200:3070] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVkD-EWWhyvZ0O9KNVQFRgAAAQg"]
[Sat Jan 03 19:56:40.992491 2026] [:error] [pid 1929:tid 1947] [client 20.196.105.200:10443] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVkD-OcFqdpu6TNsuWrVZQAAAAk"]
[Sat Jan 03 19:56:42.298677 2026] [:error] [pid 1931:tid 1996] [client 20.196.105.200:2897] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVkD-h8Tyw7ZoIdXlcbneQAAAII"]
[Sat Jan 03 19:56:42.856516 2026] [:error] [pid 1929:tid 1952] [client 20.196.105.200:10452] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aVkD-ucFqdpu6TNsuWrVaAAAAA4"]
[Sat Jan 03 19:56:44.615354 2026] [:error] [pid 1931:tid 2027] [client 20.196.105.200:10429] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aVkD_B8Tyw7ZoIdXlcbnfAAAAIQ"]
[Sat Jan 03 19:56:46.329451 2026] [:error] [pid 31630:tid 31648] [client 20.196.105.200:3045] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aVkD_vUV_PU2SWgLPuhJawAAAZA"]
[Sat Jan 03 19:56:46.844274 2026] [:error] [pid 2083:tid 2104] [client 20.196.105.200:3039] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aVkD_jVlR_BmlMPnhV4AbQAAANM"]
[Sat Jan 03 19:56:48.189726 2026] [:error] [pid 1930:tid 1978] [client 20.196.105.200:2882] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aVkEAJP-6mqhfUDa89zO-gAAAEw"]
[Sat Jan 03 19:56:49.098523 2026] [:error] [pid 31630:tid 31640] [client 20.196.105.200:2999] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahy66.php"] [unique_id "aVkEAfUV_PU2SWgLPuhJbAAAAYg"]
[Sat Jan 03 19:56:50.298064 2026] [:error] [pid 34260:tid 34270] [client 20.196.105.200:10467] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahy66.php"] [unique_id "aVkEAkWWhyvZ0O9KNVQFUAAAAQg"]
[Sat Jan 03 19:56:52.547758 2026] [:error] [pid 1930:tid 1974] [client 20.196.105.200:10464] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahy66.php"] [unique_id "aVkEBJP-6mqhfUDa89zPAQAAAEg"]
[Sat Jan 03 19:56:53.167930 2026] [:error] [pid 31630:tid 31642] [client 20.196.105.200:2894] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahy66.php"] [unique_id "aVkEBfUV_PU2SWgLPuhJbQAAAYo"]
[Sat Jan 03 19:56:54.237203 2026] [:error] [pid 1929:tid 1956] [client 20.196.105.200:3029] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "aVkEBucFqdpu6TNsuWrVbAAAABI"]
[Sat Jan 03 19:56:55.920302 2026] [:error] [pid 1929:tid 1959] [client 20.196.105.200:2893] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "aVkEB-cFqdpu6TNsuWrVbwAAABU"]
[Sat Jan 03 19:56:56.298675 2026] [:error] [pid 34260:tid 34276] [client 20.196.105.200:3071] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "aVkECEWWhyvZ0O9KNVQFWwAAAQ4"]
[Sat Jan 03 19:56:57.558989 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:2982] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "aVkECUWWhyvZ0O9KNVQFXAAAAQ0"]
[Sat Jan 03 19:56:58.911154 2026] [:error] [pid 1930:tid 1981] [client 20.196.105.200:2895] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aVkECpP-6mqhfUDa89zPDgAAAE8"]
[Sat Jan 03 19:57:00.066117 2026] [:error] [pid 1931:tid 1994] [client 20.196.105.200:10454] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aVkEDB8Tyw7ZoIdXlcbnigAAAIE"]
[Sat Jan 03 19:57:00.882501 2026] [:error] [pid 1929:tid 1948] [client 20.196.105.200:3047] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aVkEDOcFqdpu6TNsuWrVdQAAAAo"]
[Sat Jan 03 19:57:01.384241 2026] [:error] [pid 2083:tid 2086] [client 20.196.105.200:10404] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aVkEDTVlR_BmlMPnhV4AhgAAAME"]
[Sat Jan 03 19:57:02.302285 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:3007] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVkEDkWWhyvZ0O9KNVQFXgAAAQk"]
[Sat Jan 03 19:57:02.874446 2026] [:error] [pid 1930:tid 1966] [client 20.196.105.200:2920] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVkEDpP-6mqhfUDa89zPFAAAAEA"]
[Sat Jan 03 19:57:03.919019 2026] [:error] [pid 19639:tid 19665] [client 20.196.105.200:3051] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVkEDyQ7fWZUytnlHEzqKgAAAVg"]
[Sat Jan 03 19:57:04.558898 2026] [:error] [pid 34260:tid 34283] [client 20.196.105.200:3067] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aVkEEEWWhyvZ0O9KNVQFYAAAARU"]
[Sat Jan 03 19:57:05.375868 2026] [:error] [pid 2083:tid 2103] [client 20.196.105.200:3054] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aVkEETVlR_BmlMPnhV4AigAAANI"]
[Sat Jan 03 19:57:06.110834 2026] [:error] [pid 1930:tid 1981] [client 20.196.105.200:10472] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aVkEEpP-6mqhfUDa89zPGwAAAE8"]
[Sat Jan 03 19:57:06.712484 2026] [:error] [pid 31630:tid 31632] [client 20.196.105.200:10426] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aVkEEvUV_PU2SWgLPuhJfAAAAYA"]
[Sat Jan 03 19:57:07.330845 2026] [:error] [pid 31630:tid 31636] [client 20.196.105.200:2990] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aVkEE_UV_PU2SWgLPuhJfwAAAYQ"]
[Sat Jan 03 19:57:08.357856 2026] [:error] [pid 31630:tid 31638] [client 20.196.105.200:2995] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dbc.php"] [unique_id "aVkEFPUV_PU2SWgLPuhJgwAAAYY"]
[Sat Jan 03 19:57:09.146023 2026] [:error] [pid 1929:tid 1950] [client 20.196.105.200:10460] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dbc.php"] [unique_id "aVkEFecFqdpu6TNsuWrVeQAAAAw"]
[Sat Jan 03 19:57:10.517948 2026] [:error] [pid 34260:tid 34272] [client 20.196.105.200:2988] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dbc.php"] [unique_id "aVkEFkWWhyvZ0O9KNVQFbwAAAQo"]
[Sat Jan 03 19:57:12.054570 2026] [:error] [pid 19639:tid 19650] [client 20.196.105.200:2928] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dbc.php"] [unique_id "aVkEGCQ7fWZUytnlHEzqMQAAAUk"]
[Sat Jan 03 19:57:13.499435 2026] [:error] [pid 1930:tid 1966] [client 20.196.105.200:2900] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aVkEGZP-6mqhfUDa89zPLQAAAEA"]
[Sat Jan 03 19:57:15.084501 2026] [:error] [pid 1930:tid 1971] [client 20.196.105.200:3019] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aVkEG5P-6mqhfUDa89zPLwAAAEU"]
[Sat Jan 03 19:57:16.693785 2026] [:error] [pid 1929:tid 1949] [client 20.196.105.200:3053] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aVkEHOcFqdpu6TNsuWrVhQAAAAs"]
[Sat Jan 03 19:57:18.485034 2026] [:error] [pid 1929:tid 1950] [client 20.196.105.200:3057] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aVkEHucFqdpu6TNsuWrViAAAAAw"]
[Sat Jan 03 19:57:19.087876 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:3009] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVkEH0WWhyvZ0O9KNVQFgwAAAQk"]
[Sat Jan 03 19:57:19.792747 2026] [:error] [pid 34260:tid 34281] [client 20.196.105.200:2929] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVkEH0WWhyvZ0O9KNVQFhAAAARM"]
[Sat Jan 03 19:57:21.734353 2026] [:error] [pid 1930:tid 1985] [client 20.196.105.200:2917] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVkEIZP-6mqhfUDa89zPPAAAAFM"]
[Sat Jan 03 19:57:23.206924 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:3003] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVkEI0WWhyvZ0O9KNVQFjgAAAQk"]
[Sat Jan 03 19:57:27.059720 2026] [:error] [pid 1930:tid 1973] [client 20.196.105.200:2891] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifm.php"] [unique_id "aVkEJ5P-6mqhfUDa89zPRQAAAEc"]
[Sat Jan 03 19:57:28.541374 2026] [:error] [pid 31630:tid 31634] [client 20.196.105.200:2880] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifm.php"] [unique_id "aVkEKPUV_PU2SWgLPuhJsgAAAYI"]
[Sat Jan 03 19:57:29.828367 2026] [:error] [pid 19639:tid 19650] [client 20.196.105.200:2984] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifm.php"] [unique_id "aVkEKSQ7fWZUytnlHEzqSQAAAUk"]
[Sat Jan 03 19:57:30.872742 2026] [:error] [pid 34260:tid 34276] [client 20.196.105.200:2889] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifm.php"] [unique_id "aVkEKkWWhyvZ0O9KNVQFqgAAAQ4"]
[Sat Jan 03 19:57:32.919285 2026] [:error] [pid 31630:tid 31639] [client 20.196.105.200:10491] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bge.php"] [unique_id "aVkELPUV_PU2SWgLPuhJtAAAAYc"]
[Sat Jan 03 19:57:35.440190 2026] [:error] [pid 1931:tid 2035] [client 20.196.105.200:2967] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bge.php"] [unique_id "aVkELx8Tyw7ZoIdXlcbnrAAAAIs"]
[Sat Jan 03 19:57:37.688011 2026] [:error] [pid 19639:tid 19658] [client 20.196.105.200:2963] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bge.php"] [unique_id "aVkEMSQ7fWZUytnlHEzqUQAAAVE"]
[Sat Jan 03 19:57:39.160916 2026] [:error] [pid 19639:tid 19644] [client 20.196.105.200:2959] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bge.php"] [unique_id "aVkEMyQ7fWZUytnlHEzqVAAAAUM"]
[Sat Jan 03 19:57:40.478481 2026] [:error] [pid 34260:tid 34276] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/blox.php
[Sat Jan 03 19:57:40.615257 2026] [:error] [pid 34260:tid 34283] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Sat Jan 03 19:57:40.758784 2026] [:error] [pid 34260:tid 34278] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/x23.php
[Sat Jan 03 19:57:41.153276 2026] [:error] [pid 34260:tid 34265] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/xz89.php
[Sat Jan 03 19:57:41.310718 2026] [:error] [pid 34260:tid 34281] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/wsheet1.php
[Sat Jan 03 19:57:41.448619 2026] [:error] [pid 34260:tid 34274] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/sao.php
[Sat Jan 03 19:57:41.615064 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/zoz.php
[Sat Jan 03 19:57:41.778563 2026] [:error] [pid 34260:tid 34262] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/priv.php
[Sat Jan 03 19:57:42.022774 2026] [:error] [pid 34260:tid 34268] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Sat Jan 03 19:57:42.178010 2026] [:error] [pid 34260:tid 34269] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Sat Jan 03 19:57:42.316327 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:2842] File does not exist: /usr/local/apache/htdocs/suspended-page/ah24.php
[Sat Jan 03 19:57:42.757140 2026] [:error] [pid 34260:tid 34270] [client 20.196.105.200:2842] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aVkENkWWhyvZ0O9KNVQF0QAAAQg"]
[Sat Jan 03 19:57:43.691805 2026] [:error] [pid 31630:tid 31646] [client 20.196.105.200:2905] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aVkEN_UV_PU2SWgLPuhJuwAAAY4"]
[Sat Jan 03 19:57:45.245302 2026] [:error] [pid 31630:tid 31634] [client 20.196.105.200:10407] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aVkEOfUV_PU2SWgLPuhJvQAAAYI"]
[Sat Jan 03 19:57:46.399884 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:10401] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "aVkEOkWWhyvZ0O9KNVQF0wAAAQ0"]
[Sat Jan 03 19:57:47.149285 2026] [:error] [pid 2083:tid 2086] [client 20.196.105.200:2989] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aVkEOzVlR_BmlMPnhV4AvAAAAME"]
[Sat Jan 03 19:57:49.125348 2026] [:error] [pid 2083:tid 2095] [client 20.196.105.200:2887] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aVkEPTVlR_BmlMPnhV4AvgAAAMo"]
[Sat Jan 03 19:57:51.589853 2026] [:error] [pid 2083:tid 2105] [client 20.196.105.200:2971] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aVkEPzVlR_BmlMPnhV4AwQAAANQ"]
[Sat Jan 03 19:57:53.785868 2026] [:error] [pid 1931:tid 2047] [client 20.196.105.200:2974] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "aVkEQR8Tyw7ZoIdXlcbnwQAAAJc"]
[Sat Jan 03 19:57:55.135757 2026] [:error] [pid 31630:tid 31636] [client 20.196.105.200:2892] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww3.php"] [unique_id "aVkEQ_UV_PU2SWgLPuhJygAAAYQ"]
[Sat Jan 03 19:57:56.327173 2026] [:error] [pid 1930:tid 1985] [client 20.196.105.200:2938] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww3.php"] [unique_id "aVkERJP-6mqhfUDa89zPYwAAAFM"]
[Sat Jan 03 19:57:57.722264 2026] [:error] [pid 1929:tid 1938] [client 20.196.105.200:2975] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww3.php"] [unique_id "aVkERecFqdpu6TNsuWrVrAAAAAA"]
[Sat Jan 03 19:57:59.856151 2026] [:error] [pid 19639:tid 19642] [client 20.196.105.200:2774] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww3.php"] [unique_id "aVkERyQ7fWZUytnlHEzqcgAAAUE"]
[Sat Jan 03 19:58:01.232645 2026] [:error] [pid 19639:tid 19662] [client 20.196.105.200:3044] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aVkESSQ7fWZUytnlHEzqdwAAAVU"]
[Sat Jan 03 19:58:02.572405 2026] [:error] [pid 1930:tid 1966] [client 20.196.105.200:2919] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aVkESpP-6mqhfUDa89zPbAAAAEA"]
[Sat Jan 03 19:58:03.819608 2026] [:error] [pid 1929:tid 1957] [client 20.196.105.200:3059] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aVkES-cFqdpu6TNsuWrVrwAAABM"]
[Sat Jan 03 19:58:05.157222 2026] [:error] [pid 1929:tid 1958] [client 20.196.105.200:2961] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sang.php"] [unique_id "aVkETecFqdpu6TNsuWrVsgAAABQ"]
[Sat Jan 03 19:58:05.797303 2026] [:error] [pid 19639:tid 19647] [client 20.196.105.200:2958] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVkETSQ7fWZUytnlHEzqewAAAUY"]
[Sat Jan 03 19:58:07.081073 2026] [:error] [pid 19639:tid 19645] [client 20.196.105.200:2978] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVkETyQ7fWZUytnlHEzqfAAAAUQ"]
[Sat Jan 03 19:58:08.227564 2026] [:error] [pid 1930:tid 1970] [client 20.196.105.200:2816] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVkEUJP-6mqhfUDa89zPeAAAAEQ"]
[Sat Jan 03 19:58:12.041800 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:2899] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aVkEVEWWhyvZ0O9KNVQF_QAAAQk"]
[Sat Jan 03 19:58:13.483370 2026] [:error] [pid 31630:tid 31650] [client 20.196.105.200:2843] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aVkEVfUV_PU2SWgLPuhJ6QAAAZI"]
[Sat Jan 03 19:58:15.223381 2026] [:error] [pid 31630:tid 31641] [client 20.196.105.200:2818] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aVkEV_UV_PU2SWgLPuhJ7AAAAYk"]
[Sat Jan 03 19:58:17.268760 2026] [:error] [pid 31630:tid 31639] [client 20.196.105.200:2912] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aVkEWfUV_PU2SWgLPuhJ8AAAAYc"]
[Sat Jan 03 19:58:18.983543 2026] [:error] [pid 1930:tid 1990] [client 20.196.105.200:2937] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aVkEWpP-6mqhfUDa89zPhgAAAFg"]
[Sat Jan 03 19:58:19.719522 2026] [:error] [pid 1931:tid 2039] [client 20.196.105.200:10487] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yyy.php"] [unique_id "aVkEWx8Tyw7ZoIdXlcbn1QAAAI8"]
[Sat Jan 03 19:58:21.342705 2026] [:error] [pid 2083:tid 2097] [client 20.196.105.200:2925] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yyy.php"] [unique_id "aVkEXTVlR_BmlMPnhV4A5wAAAMw"]
[Sat Jan 03 19:58:22.742744 2026] [:error] [pid 31630:tid 31633] [client 20.196.105.200:10374] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yyy.php"] [unique_id "aVkEXvUV_PU2SWgLPuhJ9wAAAYE"]
[Sat Jan 03 19:58:24.456690 2026] [:error] [pid 1931:tid 2041] [client 20.196.105.200:2869] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yyy.php"] [unique_id "aVkEYB8Tyw7ZoIdXlcbn4AAAAJE"]
[Sat Jan 03 19:58:26.198899 2026] [:error] [pid 1931:tid 2043] [client 20.196.105.200:10413] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aVkEYh8Tyw7ZoIdXlcbn5QAAAJM"]
[Sat Jan 03 19:58:27.571505 2026] [:error] [pid 19639:tid 19645] [client 20.196.105.200:2942] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aVkEYyQ7fWZUytnlHEzqqAAAAUQ"]
[Sat Jan 03 19:58:28.270406 2026] [:error] [pid 2083:tid 2108] [client 20.196.105.200:10420] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aVkEZDVlR_BmlMPnhV4A8gAAANc"]
[Sat Jan 03 19:58:30.038562 2026] [:error] [pid 1929:tid 1940] [client 20.196.105.200:3006] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "aVkEZucFqdpu6TNsuWrVwwAAAAI"]
[Sat Jan 03 19:58:31.030301 2026] [:error] [pid 1930:tid 1966] [client 20.196.105.200:10396] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ana.php"] [unique_id "aVkEZ5P-6mqhfUDa89zPowAAAEA"]
[Sat Jan 03 19:58:31.751812 2026] [:error] [pid 1929:tid 1959] [client 20.196.105.200:10475] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ana.php"] [unique_id "aVkEZ-cFqdpu6TNsuWrVyAAAABU"]
[Sat Jan 03 19:58:33.187352 2026] [:error] [pid 1930:tid 1971] [client 20.196.105.200:10391] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ana.php"] [unique_id "aVkEaZP-6mqhfUDa89zPpgAAAEU"]
[Sat Jan 03 19:58:34.452466 2026] [:error] [pid 2083:tid 2105] [client 20.196.105.200:2940] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ana.php"] [unique_id "aVkEajVlR_BmlMPnhV4BAgAAANQ"]
[Sat Jan 03 19:58:35.649719 2026] [:error] [pid 2083:tid 2107] [client 20.196.105.200:10397] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f8.php"] [unique_id "aVkEazVlR_BmlMPnhV4BBwAAANY"]
[Sat Jan 03 19:58:36.347243 2026] [:error] [pid 1930:tid 1986] [client 20.196.105.200:3050] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f8.php"] [unique_id "aVkEbJP-6mqhfUDa89zPqQAAAFQ"]
[Sat Jan 03 19:58:36.995803 2026] [:error] [pid 34260:tid 34278] [client 20.196.105.200:10437] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f8.php"] [unique_id "aVkEbEWWhyvZ0O9KNVQGFAAAARA"]
[Sat Jan 03 19:58:37.758450 2026] [:error] [pid 1930:tid 1982] [client 20.196.105.200:10488] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f8.php"] [unique_id "aVkEbZP-6mqhfUDa89zPrAAAAFA"]
[Sat Jan 03 19:58:38.706643 2026] [:error] [pid 1929:tid 1959] [client 20.196.105.200:2966] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "aVkEbucFqdpu6TNsuWrV1AAAABU"]
[Sat Jan 03 19:58:39.982587 2026] [:error] [pid 1931:tid 2030] [client 20.196.105.200:2945] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "aVkEbx8Tyw7ZoIdXlcbn9gAAAIY"]
[Sat Jan 03 19:58:41.918964 2026] [:error] [pid 31630:tid 31646] [client 20.196.105.200:10438] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "aVkEcfUV_PU2SWgLPuhKBwAAAY4"]
[Sat Jan 03 19:58:43.067991 2026] [:error] [pid 19639:tid 19663] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sat Jan 03 19:58:43.440542 2026] [:error] [pid 19639:tid 19654] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/AxAo.php
[Sat Jan 03 19:58:43.586602 2026] [:error] [pid 19639:tid 19643] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/vbbn.php
[Sat Jan 03 19:58:43.723964 2026] [:error] [pid 19639:tid 19653] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Sat Jan 03 19:58:44.064834 2026] [:error] [pid 19639:tid 19665] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Sat Jan 03 19:58:44.217746 2026] [:error] [pid 19639:tid 19662] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Sat Jan 03 19:58:44.382087 2026] [:error] [pid 19639:tid 19649] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/Contrller.php
[Sat Jan 03 19:58:44.784785 2026] [:error] [pid 19639:tid 19650] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Sat Jan 03 19:58:44.926383 2026] [:error] [pid 19639:tid 19652] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/lte7.php
[Sat Jan 03 19:58:45.082788 2026] [:error] [pid 19639:tid 19658] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Jan 03 19:58:45.220140 2026] [:error] [pid 19639:tid 19648] [client 20.196.105.200:10451] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Jan 03 19:58:45.374426 2026] [:error] [pid 19639:tid 19646] [client 20.196.105.200:10451] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aVkEdSQ7fWZUytnlHEzqzAAAAUU"]
[Sat Jan 03 19:58:46.917026 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:10482] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aVkEdkWWhyvZ0O9KNVQGJgAAAQ0"]
[Sat Jan 03 19:58:47.856163 2026] [:error] [pid 2083:tid 2093] [client 20.196.105.200:10376] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aVkEdzVlR_BmlMPnhV4BHQAAAMg"]
[Sat Jan 03 19:58:48.830319 2026] [:error] [pid 19639:tid 19645] [client 20.196.105.200:2827] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aVkEeCQ7fWZUytnlHEzq0gAAAUQ"]
[Sat Jan 03 19:58:49.530802 2026] [:error] [pid 1929:tid 1947] [client 20.196.105.200:10440] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fesa.php"] [unique_id "aVkEeecFqdpu6TNsuWrV6QAAAAk"]
[Sat Jan 03 19:58:50.471662 2026] [:error] [pid 1929:tid 1951] [client 20.196.105.200:2941] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fesa.php"] [unique_id "aVkEeucFqdpu6TNsuWrV6gAAAA0"]
[Sat Jan 03 19:58:50.942883 2026] [:error] [pid 1929:tid 1938] [client 20.196.105.200:2923] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fesa.php"] [unique_id "aVkEeucFqdpu6TNsuWrV6wAAAAA"]
[Sat Jan 03 19:58:51.430476 2026] [:error] [pid 1929:tid 1962] [client 20.196.105.200:2832] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fesa.php"] [unique_id "aVkEe-cFqdpu6TNsuWrV7QAAABg"]
[Sat Jan 03 19:58:52.896139 2026] [:error] [pid 1931:tid 2045] [client 20.196.105.200:2981] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsz.php"] [unique_id "aVkEfB8Tyw7ZoIdXlcboAAAAAJU"]
[Sat Jan 03 19:58:53.653738 2026] [:error] [pid 2083:tid 2090] [client 20.196.105.200:10381] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsz.php"] [unique_id "aVkEfTVlR_BmlMPnhV4BJwAAAMU"]
[Sat Jan 03 19:58:54.821656 2026] [:error] [pid 31630:tid 31648] [client 20.196.105.200:2968] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsz.php"] [unique_id "aVkEfvUV_PU2SWgLPuhKEgAAAZA"]
[Sat Jan 03 19:58:55.617603 2026] [:error] [pid 19639:tid 19651] [client 20.196.105.200:2933] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsz.php"] [unique_id "aVkEfyQ7fWZUytnlHEzq2QAAAUo"]
[Sat Jan 03 19:58:56.442385 2026] [:error] [pid 31630:tid 31634] [client 20.196.105.200:10477] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/horeg.php"] [unique_id "aVkEgPUV_PU2SWgLPuhKGAAAAYI"]
[Sat Jan 03 19:58:57.265813 2026] [:error] [pid 34260:tid 34284] [client 20.196.105.200:10375] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/horeg.php"] [unique_id "aVkEgUWWhyvZ0O9KNVQGMwAAARY"]
[Sat Jan 03 19:58:58.332772 2026] [:error] [pid 2083:tid 2109] [client 20.196.105.200:10445] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/horeg.php"] [unique_id "aVkEgjVlR_BmlMPnhV4BMAAAANg"]
[Sat Jan 03 19:58:59.062638 2026] [:error] [pid 1930:tid 1980] [client 20.196.105.200:10481] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/horeg.php"] [unique_id "aVkEg5P-6mqhfUDa89zPxAAAAE4"]
[Sat Jan 03 19:58:59.935265 2026] [:error] [pid 31630:tid 31656] [client 20.196.105.200:2916] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVkEg_UV_PU2SWgLPuhKHwAAAZg"]
[Sat Jan 03 19:59:00.832742 2026] [:error] [pid 19639:tid 19652] [client 20.196.105.200:2907] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVkEhCQ7fWZUytnlHEzq4wAAAUs"]
[Sat Jan 03 19:59:02.706153 2026] [:error] [pid 31630:tid 31654] [client 20.196.105.200:2932] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVkEhvUV_PU2SWgLPuhKJAAAAZY"]
[Sat Jan 03 19:59:03.262120 2026] [:error] [pid 1930:tid 1975] [client 20.196.105.200:10378] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVkEh5P-6mqhfUDa89zPywAAAEk"]
[Sat Jan 03 19:59:04.263180 2026] [:error] [pid 1929:tid 1950] [client 20.196.105.200:10395] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thxt.php"] [unique_id "aVkEiOcFqdpu6TNsuWrV-gAAAAw"]
[Sat Jan 03 19:59:05.423483 2026] [:error] [pid 34260:tid 34280] [client 20.196.105.200:10444] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thxt.php"] [unique_id "aVkEiUWWhyvZ0O9KNVQGRwAAARI"]
[Sat Jan 03 19:59:06.235889 2026] [:error] [pid 2083:tid 2101] [client 20.196.105.200:3002] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thxt.php"] [unique_id "aVkEijVlR_BmlMPnhV4BPwAAANA"]
[Sat Jan 03 19:59:06.787935 2026] [:error] [pid 31630:tid 31652] [client 20.196.105.200:10456] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thxt.php"] [unique_id "aVkEivUV_PU2SWgLPuhKJgAAAZQ"]
[Sat Jan 03 19:59:07.474427 2026] [:error] [pid 1929:tid 1953] [client 20.196.105.200:2908] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVkEi-cFqdpu6TNsuWrV_gAAAA8"]
[Sat Jan 03 19:59:08.081372 2026] [:error] [pid 1929:tid 1947] [client 20.196.105.200:10380] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVkEjOcFqdpu6TNsuWrWAAAAAAk"]
[Sat Jan 03 19:59:08.917675 2026] [:error] [pid 34260:tid 34263] [client 20.196.105.200:10394] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVkEjEWWhyvZ0O9KNVQGUQAAAQE"]
[Sat Jan 03 19:59:09.410974 2026] [:error] [pid 31630:tid 31633] [client 20.196.105.200:10483] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVkEjfUV_PU2SWgLPuhKLAAAAYE"]
[Sat Jan 03 19:59:10.541393 2026] [:error] [pid 31630:tid 31648] [client 20.196.105.200:10447] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVkEjvUV_PU2SWgLPuhKLgAAAZA"]
[Sat Jan 03 19:59:11.393815 2026] [:error] [pid 34260:tid 34282] [client 20.196.105.200:10384] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVkEj0WWhyvZ0O9KNVQGUgAAARQ"]
[Sat Jan 03 19:59:12.378177 2026] [:error] [pid 31630:tid 31650] [client 20.196.105.200:2992] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVkEkPUV_PU2SWgLPuhKNwAAAZI"]
[Sat Jan 03 19:59:13.354610 2026] [:error] [pid 34260:tid 34274] [client 20.196.105.200:3034] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aVkEkUWWhyvZ0O9KNVQGVQAAAQw"]
[Sat Jan 03 19:59:14.671088 2026] [:error] [pid 2083:tid 2103] [client 20.196.105.200:3032] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVkEkjVlR_BmlMPnhV4BSAAAANI"]
[Sat Jan 03 19:59:15.606542 2026] [:error] [pid 31630:tid 31643] [client 20.196.105.200:2949] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVkEk_UV_PU2SWgLPuhKOgAAAYs"]
[Sat Jan 03 19:59:16.446512 2026] [:error] [pid 1931:tid 2027] [client 20.196.105.200:2901] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVkElB8Tyw7ZoIdXlcboIQAAAIQ"]
[Sat Jan 03 19:59:17.437605 2026] [:error] [pid 34260:tid 34286] [client 20.196.105.200:10424] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aVkElUWWhyvZ0O9KNVQGYgAAARg"]
[Sat Jan 03 19:59:18.942845 2026] [:error] [pid 1929:tid 1957] [client 20.196.105.200:10494] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVkElucFqdpu6TNsuWrWCwAAABM"]
[Sat Jan 03 19:59:20.917822 2026] [:error] [pid 34260:tid 34263] [client 20.196.105.200:10446] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVkEmEWWhyvZ0O9KNVQGaQAAAQE"]
[Sat Jan 03 19:59:22.283810 2026] [:error] [pid 1930:tid 1979] [client 20.196.105.200:2765] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVkEmpP-6mqhfUDa89zP2wAAAE0"]
[Sat Jan 03 19:59:23.821790 2026] [:error] [pid 1931:tid 1994] [client 20.196.105.200:10493] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aVkEmx8Tyw7ZoIdXlcboKwAAAIE"]
[Sat Jan 03 19:59:25.700425 2026] [:error] [pid 1929:tid 1942] [client 20.196.105.200:10459] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aVkEnecFqdpu6TNsuWrWDAAAAAQ"]
[Sat Jan 03 19:59:26.558989 2026] [:error] [pid 2083:tid 2098] [client 20.196.105.200:3037] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aVkEnjVlR_BmlMPnhV4BWQAAAM0"]
[Sat Jan 03 19:59:28.058609 2026] [:error] [pid 1930:tid 1979] [client 20.196.105.200:10485] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aVkEoJP-6mqhfUDa89zP5gAAAE0"]
[Sat Jan 03 19:59:29.385757 2026] [:error] [pid 1931:tid 2042] [client 20.196.105.200:10448] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "aVkEoR8Tyw7ZoIdXlcboMgAAAJI"]
[Sat Jan 03 19:59:29.925370 2026] [:error] [pid 1931:tid 2041] [client 20.196.105.200:10415] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aVkEoR8Tyw7ZoIdXlcboMwAAAJE"]
[Sat Jan 03 19:59:30.411404 2026] [:error] [pid 31630:tid 31636] [client 20.196.105.200:10379] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aVkEovUV_PU2SWgLPuhKUAAAAYQ"]
[Sat Jan 03 19:59:31.609348 2026] [:error] [pid 2083:tid 2105] [client 20.196.105.200:10469] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aVkEozVlR_BmlMPnhV4BXwAAANQ"]
[Sat Jan 03 19:59:32.971459 2026] [:error] [pid 1930:tid 1987] [client 20.196.105.200:2977] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aVkEpJP-6mqhfUDa89zP7QAAAFU"]
[Sat Jan 03 19:59:35.244348 2026] [:error] [pid 2083:tid 2097] [client 20.196.105.200:10441] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcre1.php"] [unique_id "aVkEpzVlR_BmlMPnhV4BYwAAAMw"]
[Sat Jan 03 19:59:35.926150 2026] [:error] [pid 1931:tid 1996] [client 20.196.105.200:2973] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcre1.php"] [unique_id "aVkEpx8Tyw7ZoIdXlcboOgAAAII"]
[Sat Jan 03 19:59:36.705302 2026] [:error] [pid 19639:tid 19647] [client 20.196.105.200:2848] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcre1.php"] [unique_id "aVkEqCQ7fWZUytnlHEzrCgAAAUY"]
[Sat Jan 03 19:59:37.410530 2026] [:error] [pid 31630:tid 31633] [client 20.196.105.200:3025] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcre1.php"] [unique_id "aVkEqfUV_PU2SWgLPuhKVwAAAYE"]
[Sat Jan 03 19:59:38.113851 2026] [:error] [pid 19639:tid 19645] [client 20.196.105.200:10466] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVkEqiQ7fWZUytnlHEzrDgAAAUQ"]
[Sat Jan 03 19:59:38.548013 2026] [:error] [pid 31630:tid 31649] [client 20.196.105.200:10435] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVkEqvUV_PU2SWgLPuhKWQAAAZE"]
[Sat Jan 03 19:59:38.963927 2026] [:error] [pid 19639:tid 19665] [client 20.196.105.200:2906] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVkEqiQ7fWZUytnlHEzrDwAAAVg"]
[Sat Jan 03 19:59:39.464637 2026] [:error] [pid 1929:tid 1945] [client 20.196.105.200:10431] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVkEq-cFqdpu6TNsuWrWHQAAAAc"]
[Sat Jan 03 19:59:40.049580 2026] [:error] [pid 34260:tid 34262] [client 20.196.105.200:2885] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVkErEWWhyvZ0O9KNVQGjwAAAQA"]
[Sat Jan 03 19:59:40.551928 2026] [:error] [pid 1929:tid 1938] [client 20.196.105.200:2915] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVkErOcFqdpu6TNsuWrWHwAAAAA"]
[Sat Jan 03 19:59:41.601856 2026] [:error] [pid 34260:tid 34268] [client 20.196.105.200:2998] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVkErUWWhyvZ0O9KNVQGkgAAAQY"]
[Sat Jan 03 19:59:42.932925 2026] [:error] [pid 34260:tid 34270] [client 20.196.105.200:10489] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVkErkWWhyvZ0O9KNVQGnAAAAQg"]
[Sat Jan 03 19:59:44.205436 2026] [:error] [pid 2083:tid 2102] [client 20.196.105.200:10479] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aVkEsDVlR_BmlMPnhV4BbwAAANE"]
[Sat Jan 03 19:59:45.204412 2026] [:error] [pid 34260:tid 34282] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Sat Jan 03 19:59:45.354806 2026] [:error] [pid 34260:tid 34265] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Sat Jan 03 19:59:45.716009 2026] [:error] [pid 34260:tid 34274] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/rtx.php
[Sat Jan 03 19:59:45.858914 2026] [:error] [pid 34260:tid 34277] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/f-401.php
[Sat Jan 03 19:59:46.004208 2026] [:error] [pid 34260:tid 34269] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/see.php
[Sat Jan 03 19:59:46.159208 2026] [:error] [pid 34260:tid 34284] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/xse25.php
[Sat Jan 03 19:59:47.105907 2026] [:error] [pid 34260:tid 34267] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Sat Jan 03 19:59:47.242891 2026] [:error] [pid 34260:tid 34271] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/waw.php
[Sat Jan 03 19:59:47.380779 2026] [:error] [pid 34260:tid 34262] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Jan 03 19:59:47.714201 2026] [:error] [pid 34260:tid 34264] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Sat Jan 03 19:59:47.862261 2026] [:error] [pid 34260:tid 34266] [client 20.196.105.200:3008] File does not exist: /usr/local/apache/htdocs/suspended-page/xpass.php
[Sat Jan 03 19:59:47.997798 2026] [:error] [pid 34260:tid 34281] [client 20.196.105.200:3008] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVkEs0WWhyvZ0O9KNVQGsQAAARM"]
[Sat Jan 03 19:59:49.144979 2026] [:error] [pid 19639:tid 19644] [client 20.196.105.200:3062] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVkEtSQ7fWZUytnlHEzrFQAAAUM"]
[Sat Jan 03 19:59:51.453159 2026] [:error] [pid 2083:tid 2102] [client 20.196.105.200:2986] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVkEtzVlR_BmlMPnhV4BewAAANE"]
[Sat Jan 03 19:59:52.729811 2026] [:error] [pid 34260:tid 34286] [client 20.196.105.200:10387] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aVkEuEWWhyvZ0O9KNVQGtwAAARg"]
[Sat Jan 03 19:59:53.464794 2026] [:error] [pid 31630:tid 31654] [client 20.196.105.200:10492] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVkEufUV_PU2SWgLPuhKYwAAAZY"]
[Sat Jan 03 19:59:54.353848 2026] [:error] [pid 2083:tid 2088] [client 20.196.105.200:10386] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVkEujVlR_BmlMPnhV4BfgAAAMM"]
[Sat Jan 03 19:59:56.694274 2026] [:error] [pid 1929:tid 1953] [client 20.196.105.200:10382] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVkEvOcFqdpu6TNsuWrWKQAAAA8"]
[Sat Jan 03 19:59:57.609436 2026] [:error] [pid 2083:tid 2101] [client 20.196.105.200:10486] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aVkEvTVlR_BmlMPnhV4BhAAAANA"]
[Sat Jan 03 19:59:58.413563 2026] [:error] [pid 1931:tid 2034] [client 20.196.105.200:10399] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "aVkEvh8Tyw7ZoIdXlcboRwAAAIo"]
[Sat Jan 03 19:59:58.943306 2026] [:error] [pid 1929:tid 1938] [client 20.196.105.200:10403] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "aVkEvucFqdpu6TNsuWrWLAAAAAA"]
[Sat Jan 03 20:00:00.356609 2026] [:error] [pid 1930:tid 1988] [client 20.196.105.200:2954] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "aVkEwJP-6mqhfUDa89zQDQAAAFY"]
[Sat Jan 03 20:00:01.631979 2026] [:error] [pid 1930:tid 1985] [client 20.196.105.200:10370] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "aVkEwZP-6mqhfUDa89zQDwAAAFM"]
[Sat Jan 03 20:00:03.987063 2026] [:error] [pid 1931:tid 2029] [client 20.196.105.200:10414] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVkEwx8Tyw7ZoIdXlcboUAAAAIU"]
[Sat Jan 03 20:00:05.045883 2026] [:error] [pid 31630:tid 31643] [client 20.196.105.200:10400] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVkExfUV_PU2SWgLPuhKbQAAAYs"]
[Sat Jan 03 20:00:06.911281 2026] [:error] [pid 34260:tid 34278] [client 20.196.105.200:3027] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVkExkWWhyvZ0O9KNVQGzAAAARA"]
[Sat Jan 03 20:00:08.976658 2026] [:error] [pid 34260:tid 34277] [client 20.196.105.200:10449] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVkEyEWWhyvZ0O9KNVQGzwAAAQ8"]
[Sat Jan 03 20:00:09.631147 2026] [:error] [pid 2083:tid 2106] [client 20.196.105.200:2999] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aVkEyTVlR_BmlMPnhV4BmQAAANU"]
[Sat Jan 03 20:00:10.307393 2026] [:error] [pid 2083:tid 2104] [client 20.196.105.200:3035] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aVkEyjVlR_BmlMPnhV4BnAAAANM"]
[Sat Jan 03 20:00:12.018843 2026] [:error] [pid 2083:tid 2098] [client 20.196.105.200:10385] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aVkEzDVlR_BmlMPnhV4BowAAAM0"]
[Sat Jan 03 20:00:13.299821 2026] [:error] [pid 34260:tid 34273] [client 20.196.105.200:10371] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/quoys.php"] [unique_id "aVkEzUWWhyvZ0O9KNVQG1AAAAQs"]
[Sat Jan 03 20:00:14.144425 2026] [:error] [pid 1931:tid 2029] [client 20.196.105.200:10383] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVkEzh8Tyw7ZoIdXlcboVQAAAIU"]
[Sat Jan 03 20:00:14.850323 2026] [:error] [pid 19639:tid 19644] [client 20.196.105.200:10490] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVkEziQ7fWZUytnlHEzrRAAAAUM"]
[Sat Jan 03 20:00:15.668837 2026] [:error] [pid 1929:tid 1940] [client 20.196.105.200:10419] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVkEz-cFqdpu6TNsuWrWNgAAAAI"]
[Sat Jan 03 20:00:16.540237 2026] [:error] [pid 34260:tid 34277] [client 20.196.105.200:10390] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aVkE0EWWhyvZ0O9KNVQG2wAAAQ8"]
[Sat Jan 03 20:00:16.962373 2026] [:error] [pid 2083:tid 2085] [client 20.196.105.200:10473] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVkE0DVlR_BmlMPnhV4BqgAAAMA"]
[Sat Jan 03 20:00:17.594509 2026] [:error] [pid 34260:tid 34268] [client 20.196.105.200:2970] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVkE0UWWhyvZ0O9KNVQG3QAAAQY"]
[Sat Jan 03 20:00:18.543945 2026] [:error] [pid 19639:tid 19653] [client 20.196.105.200:10369] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVkE0iQ7fWZUytnlHEzrTQAAAUw"]
[Sat Jan 03 20:00:19.229695 2026] [:error] [pid 31630:tid 31654] [client 20.196.105.200:3036] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aVkE0_UV_PU2SWgLPuhKeQAAAZY"]
[Sat Jan 03 20:00:19.627594 2026] [:error] [pid 34260:tid 34279] [client 20.196.105.200:10491] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVkE00WWhyvZ0O9KNVQG3wAAARE"]
[Sat Jan 03 20:00:21.300562 2026] [:error] [pid 19639:tid 19663] [client 20.196.105.200:2921] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVkE1SQ7fWZUytnlHEzrUgAAAVY"]
[Sat Jan 03 20:00:22.767659 2026] [:error] [pid 34260:tid 34275] [client 20.196.105.200:10458] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVkE1kWWhyvZ0O9KNVQG4gAAAQ0"]
[Sat Jan 03 20:00:23.444116 2026] [:error] [pid 31630:tid 31648] [client 20.196.105.200:10416] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aVkE1_UV_PU2SWgLPuhKfwAAAZA"]
[Sat Jan 03 20:00:23.828700 2026] [:error] [pid 19639:tid 19653] [client 20.196.105.200:10389] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVkE1yQ7fWZUytnlHEzrWAAAAUw"]
[Sat Jan 03 20:00:24.784739 2026] [:error] [pid 34260:tid 34264] [client 20.196.105.200:2994] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVkE2EWWhyvZ0O9KNVQG5gAAAQI"]
[Sat Jan 03 20:00:26.054218 2026] [:error] [pid 34260:tid 34279] [client 20.196.105.200:3065] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVkE2kWWhyvZ0O9KNVQG6gAAARE"]
[Sat Jan 03 20:00:26.653625 2026] [:error] [pid 1930:tid 1976] [client 20.196.105.200:10478] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVkE2pP-6mqhfUDa89zQNQAAAEo"]
[Sat Jan 03 20:00:27.501140 2026] [:error] [pid 1931:tid 2040] [client 20.196.105.200:10388] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVkE2x8Tyw7ZoIdXlcboYwAAAJA"]
[Sat Jan 03 20:00:28.354831 2026] [:error] [pid 1931:tid 2036] [client 20.196.105.200:2839] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVkE3B8Tyw7ZoIdXlcboZQAAAIw"]
[Sat Jan 03 20:00:29.326492 2026] [:error] [pid 34260:tid 34280] [client 20.196.105.200:10402] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVkE3UWWhyvZ0O9KNVQG8QAAARI"]
[Sat Jan 03 20:00:30.293846 2026] [:error] [pid 1930:tid 1970] [client 20.196.105.200:3011] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVkE3pP-6mqhfUDa89zQOQAAAEQ"]
[Sat Jan 03 20:00:30.787755 2026] [:error] [pid 31630:tid 31636] [client 20.196.105.200:3031] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aVkE3vUV_PU2SWgLPuhKjwAAAYQ"]
[Sat Jan 03 20:00:31.378505 2026] [:error] [pid 34260:tid 34264] [client 20.196.105.200:10442] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aVkE30WWhyvZ0O9KNVQG9QAAAQI"]
[Sat Jan 03 20:00:32.103500 2026] [:error] [pid 31630:tid 31644] [client 20.196.105.200:3020] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aVkE4PUV_PU2SWgLPuhKkgAAAYw"]
[Sat Jan 03 20:00:32.645144 2026] [:error] [pid 31630:tid 31652] [client 20.196.105.200:2960] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "aVkE4PUV_PU2SWgLPuhKlAAAAZQ"]
[Sat Jan 03 20:00:33.333230 2026] [:error] [pid 1930:tid 1977] [client 20.196.105.200:10372] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVkE4ZP-6mqhfUDa89zQOwAAAEs"]
[Sat Jan 03 20:00:34.142983 2026] [:error] [pid 1929:tid 1962] [client 20.196.105.200:2855] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVkE4ucFqdpu6TNsuWrWRgAAABg"]
[Sat Jan 03 20:00:34.790660 2026] [:error] [pid 2083:tid 2090] [client 20.196.105.200:10471] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVkE4jVlR_BmlMPnhV4BygAAAMU"]
[Sat Jan 03 20:00:35.749653 2026] [:error] [pid 1930:tid 1971] [client 20.196.105.200:10393] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVkE45P-6mqhfUDa89zQPAAAAEU"]
[Sat Jan 03 20:00:37.783749 2026] [:error] [pid 19639:tid 19661] [client 20.196.105.200:2898] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aVkE5SQ7fWZUytnlHEzraAAAAVQ"]
[Sat Jan 03 20:00:39.664620 2026] [:error] [pid 2083:tid 2090] [client 20.196.105.200:10398] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aVkE5zVlR_BmlMPnhV4B1gAAAMU"]
[Sat Jan 03 20:00:41.921605 2026] [:error] [pid 1931:tid 2030] [client 20.196.105.200:3041] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aVkE6R8Tyw7ZoIdXlcbocQAAAIY"]
[Sat Jan 03 20:00:42.823564 2026] [:error] [pid 34260:tid 34272] [client 20.196.105.200:10461] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aVkE6kWWhyvZ0O9KNVQHBgAAAQo"]
[Sat Jan 03 20:00:43.537191 2026] [:error] [pid 31630:tid 31632] [client 20.196.105.200:2910] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVkE6_UV_PU2SWgLPuhKmgAAAYA"]
[Sat Jan 03 20:00:45.120962 2026] [:error] [pid 2083:tid 2090] [client 20.196.105.200:10408] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVkE7TVlR_BmlMPnhV4B3AAAAMU"]
[Sat Jan 03 20:00:45.801748 2026] [:error] [pid 31630:tid 31654] [client 20.196.105.200:10392] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVkE7fUV_PU2SWgLPuhKnwAAAZY"]
[Sat Jan 03 20:00:46.819578 2026] [:error] [pid 1929:tid 1938] [client 20.196.105.200:3030] [client 20.196.105.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVkE7ucFqdpu6TNsuWrWUAAAAAA"]
[Sat Jan 03 20:45:54.050490 2026] [:error] [pid 31222:tid 31247] [client 124.156.226.179:39452] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVkPgqHw6nASHXAc2v_TAgAAAdc"]
[Sun Jan 04 00:52:14.270751 2026] [:error] [pid 49230:tid 49292] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sun Jan 04 00:52:14.410935 2026] [:error] [pid 49230:tid 49308] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sun Jan 04 00:52:14.549805 2026] [:error] [pid 49230:tid 49299] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sun Jan 04 00:52:14.724895 2026] [:error] [pid 49230:tid 49291] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Sun Jan 04 00:52:14.864097 2026] [:error] [pid 49230:tid 49311] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Sun Jan 04 00:52:15.003341 2026] [:error] [pid 49230:tid 49312] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Sun Jan 04 00:52:15.166563 2026] [:error] [pid 49230:tid 49306] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sun Jan 04 00:52:15.318685 2026] [:error] [pid 49230:tid 49301] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Jan 04 00:52:15.457847 2026] [:error] [pid 49230:tid 49303] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Sun Jan 04 00:52:15.599450 2026] [:error] [pid 49230:tid 49295] [client 74.225.203.81:49544] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Sun Jan 04 00:52:15.736459 2026] [:error] [pid 49230:tid 49300] [client 74.225.203.81:49544] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVlJP32klmw7JRfgM3io5AAAAIw"]
[Sun Jan 04 00:52:16.701604 2026] [:error] [pid 49230:tid 49289] [client 74.225.203.81:58113] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVlJQH2klmw7JRfgM3io5QAAAIE"]
[Sun Jan 04 00:52:17.299476 2026] [:error] [pid 49319:tid 49334] [client 74.225.203.81:35454] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVlJQbcNXYLFZOiX4cQa4gAAAM0"]
[Sun Jan 04 00:52:18.371077 2026] [:error] [pid 49319:tid 49330] [client 74.225.203.81:45250] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bras.php"] [unique_id "aVlJQrcNXYLFZOiX4cQa4wAAAMk"]
[Sun Jan 04 00:52:19.249794 2026] [:error] [pid 49228:tid 49245] [client 74.225.203.81:49596] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVlJQ3CPk2c4rRZq2JTmeQAAAAw"]
[Sun Jan 04 00:52:19.729731 2026] [:error] [pid 49228:tid 49235] [client 74.225.203.81:45262] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVlJQ3CPk2c4rRZq2JTmfAAAAAI"]
[Sun Jan 04 00:52:20.744340 2026] [:error] [pid 49230:tid 49299] [client 74.225.203.81:49538] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVlJRH2klmw7JRfgM3io6gAAAIs"]
[Sun Jan 04 00:52:21.667377 2026] [:error] [pid 49319:tid 49340] [client 74.225.203.81:57362] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aVlJRbcNXYLFZOiX4cQa5wAAANM"]
[Sun Jan 04 00:52:22.324484 2026] [:error] [pid 49230:tid 49290] [client 74.225.203.81:35418] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVlJRn2klmw7JRfgM3io7QAAAII"]
[Sun Jan 04 00:52:23.226433 2026] [:error] [pid 49229:tid 49271] [client 74.225.203.81:46250] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVlJR1CM4R1akb8JNI6dBwAAAEo"]
[Sun Jan 04 00:52:23.996917 2026] [:error] [pid 49229:tid 49281] [client 74.225.203.81:45303] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVlJR1CM4R1akb8JNI6dCwAAAFQ"]
[Sun Jan 04 00:52:24.806988 2026] [:error] [pid 49228:tid 49249] [client 74.225.203.81:62858] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aVlJSHCPk2c4rRZq2JTmgQAAABA"]
[Sun Jan 04 00:52:25.180518 2026] [:error] [pid 49228:tid 49252] [client 74.225.203.81:60918] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVlJSXCPk2c4rRZq2JTmgwAAABM"]
[Sun Jan 04 00:52:26.009231 2026] [:error] [pid 49228:tid 49253] [client 74.225.203.81:60911] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVlJSnCPk2c4rRZq2JTmhAAAABQ"]
[Sun Jan 04 00:52:26.659229 2026] [:error] [pid 49319:tid 49341] [client 74.225.203.81:41825] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVlJSrcNXYLFZOiX4cQa7AAAANQ"]
[Sun Jan 04 00:52:26.992873 2026] [:error] [pid 49228:tid 49243] [client 74.225.203.81:49656] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVlJSnCPk2c4rRZq2JTmiAAAAAo"]
[Sun Jan 04 00:52:27.448637 2026] [:error] [pid 49230:tid 49310] [client 74.225.203.81:54232] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVlJS32klmw7JRfgM3io9gAAAJY"]
[Sun Jan 04 00:52:28.153191 2026] [:error] [pid 49230:tid 49292] [client 74.225.203.81:50178] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVlJTH2klmw7JRfgM3io-gAAAIQ"]
[Sun Jan 04 00:52:28.919477 2026] [:error] [pid 49230:tid 49311] [client 74.225.203.81:56162] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVlJTH2klmw7JRfgM3io_QAAAJc"]
[Sun Jan 04 00:52:30.617337 2026] [:error] [pid 49229:tid 49276] [client 74.225.203.81:15051] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aVlJTlCM4R1akb8JNI6dEgAAAE8"]
[Sun Jan 04 00:52:30.956325 2026] [:error] [pid 49319:tid 49336] [client 74.225.203.81:14617] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVlJTrcNXYLFZOiX4cQa8wAAAM8"]
[Sun Jan 04 00:52:31.719215 2026] [:error] [pid 49319:tid 49325] [client 74.225.203.81:14541] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVlJT7cNXYLFZOiX4cQa9wAAAMQ"]
[Sun Jan 04 00:52:32.115048 2026] [:error] [pid 49229:tid 49280] [client 74.225.203.81:54814] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVlJUFCM4R1akb8JNI6dGAAAAFM"]
[Sun Jan 04 00:52:33.042224 2026] [:error] [pid 49230:tid 49296] [client 74.225.203.81:42422] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aVlJUX2klmw7JRfgM3ipCAAAAIg"]
[Sun Jan 04 00:52:34.266208 2026] [:error] [pid 49229:tid 49275] [client 74.225.203.81:59283] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVlJUlCM4R1akb8JNI6dIgAAAE4"]
[Sun Jan 04 00:52:34.930294 2026] [:error] [pid 49229:tid 49276] [client 74.225.203.81:51467] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVlJUlCM4R1akb8JNI6dJQAAAE8"]
[Sun Jan 04 00:52:35.615628 2026] [:error] [pid 49319:tid 49324] [client 74.225.203.81:14497] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVlJU7cNXYLFZOiX4cQa_wAAAMM"]
[Sun Jan 04 00:52:36.235765 2026] [:error] [pid 49228:tid 49253] [client 74.225.203.81:55593] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/family.php"] [unique_id "aVlJVHCPk2c4rRZq2JTmxAAAABQ"]
[Sun Jan 04 00:52:36.874644 2026] [:error] [pid 49228:tid 49233] [client 74.225.203.81:58619] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVlJVHCPk2c4rRZq2JTmxwAAAAA"]
[Sun Jan 04 00:52:37.567649 2026] [:error] [pid 49229:tid 49285] [client 74.225.203.81:14478] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVlJVVCM4R1akb8JNI6dKAAAAFg"]
[Sun Jan 04 00:52:38.738219 2026] [:error] [pid 49229:tid 49283] [client 74.225.203.81:61595] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVlJVlCM4R1akb8JNI6dLQAAAFY"]
[Sun Jan 04 00:52:43.266723 2026] [:error] [pid 49319:tid 49324] [client 74.225.203.81:61568] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aVlJW7cNXYLFZOiX4cQbCQAAAMM"]
[Sun Jan 04 00:52:46.021380 2026] [:error] [pid 49319:tid 49329] [client 74.225.203.81:61139] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVlJXrcNXYLFZOiX4cQbDwAAAMg"]
[Sun Jan 04 00:52:48.768784 2026] [:error] [pid 49228:tid 49238] [client 74.225.203.81:15110] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVlJYHCPk2c4rRZq2JTm2gAAAAU"]
[Sun Jan 04 00:52:50.164092 2026] [:error] [pid 49230:tid 49308] [client 74.225.203.81:15188] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVlJYn2klmw7JRfgM3ipKgAAAJQ"]
[Sun Jan 04 00:52:51.223845 2026] [:error] [pid 49229:tid 49279] [client 74.225.203.81:45789] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aVlJY1CM4R1akb8JNI6dOgAAAFI"]
[Sun Jan 04 00:52:52.579097 2026] [:error] [pid 49229:tid 49285] [client 74.225.203.81:15229] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVlJZFCM4R1akb8JNI6dPgAAAFg"]
[Sun Jan 04 00:52:53.146390 2026] [:error] [pid 49229:tid 49262] [client 74.225.203.81:14507] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVlJZVCM4R1akb8JNI6dQAAAAEE"]
[Sun Jan 04 00:52:54.631374 2026] [:error] [pid 49229:tid 49278] [client 74.225.203.81:42390] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVlJZlCM4R1akb8JNI6dRQAAAFE"]
[Sun Jan 04 00:52:55.433830 2026] [:error] [pid 49229:tid 49263] [client 74.225.203.81:15226] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVlJZ1CM4R1akb8JNI6dRwAAAEI"]
[Sun Jan 04 00:52:56.049973 2026] [:error] [pid 49319:tid 49333] [client 74.225.203.81:61056] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVlJaLcNXYLFZOiX4cQbHQAAAMw"]
[Sun Jan 04 00:52:56.559632 2026] [:error] [pid 49229:tid 49282] [client 74.225.203.81:61073] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVlJaFCM4R1akb8JNI6dSAAAAFU"]
[Sun Jan 04 00:52:57.445898 2026] [:error] [pid 49228:tid 49233] [client 74.225.203.81:42945] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVlJaXCPk2c4rRZq2JTm4gAAAAA"]
[Sun Jan 04 00:52:58.628179 2026] [:error] [pid 49229:tid 49272] [client 74.225.203.81:42947] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVlJalCM4R1akb8JNI6dSQAAAEs"]
[Sun Jan 04 00:52:59.782812 2026] [:error] [pid 49229:tid 49267] [client 74.225.203.81:61084] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVlJa1CM4R1akb8JNI6dTQAAAEY"]
[Sun Jan 04 00:53:00.555351 2026] [:error] [pid 49230:tid 49302] [client 74.225.203.81:51579] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVlJbH2klmw7JRfgM3ipOgAAAI4"]
[Sun Jan 04 00:53:02.060308 2026] [:error] [pid 49230:tid 49311] [client 74.225.203.81:45779] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVlJbn2klmw7JRfgM3ipPQAAAJc"]
[Sun Jan 04 00:53:03.270466 2026] [:error] [pid 49319:tid 49324] [client 74.225.203.81:51541] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVlJb7cNXYLFZOiX4cQbLwAAAMM"]
[Sun Jan 04 00:53:04.328667 2026] [:error] [pid 49230:tid 49300] [client 74.225.203.81:51518] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVlJcH2klmw7JRfgM3ipQQAAAIw"]
[Sun Jan 04 00:53:04.950464 2026] [:error] [pid 49229:tid 49282] [client 74.225.203.81:15409] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVlJcFCM4R1akb8JNI6dVAAAAFU"]
[Sun Jan 04 00:53:06.085035 2026] [:error] [pid 49228:tid 49252] [client 74.225.203.81:15402] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVlJcnCPk2c4rRZq2JTm5gAAABM"]
[Sun Jan 04 00:53:07.506941 2026] [:error] [pid 49228:tid 49246] [client 74.225.203.81:15130] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aVlJc3CPk2c4rRZq2JTm6QAAAA0"]
[Sun Jan 04 00:53:08.197600 2026] [:error] [pid 49230:tid 49302] [client 74.225.203.81:42393] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVlJdH2klmw7JRfgM3ipSgAAAI4"]
[Sun Jan 04 00:53:10.177176 2026] [:error] [pid 49228:tid 49240] [client 74.225.203.81:14875] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVlJdnCPk2c4rRZq2JTm7AAAAAc"]
[Sun Jan 04 00:53:12.842162 2026] [:error] [pid 49319:tid 49325] [client 74.225.203.81:56087] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVlJeLcNXYLFZOiX4cQbPwAAAMQ"]
[Sun Jan 04 00:53:14.235751 2026] [:error] [pid 49229:tid 49285] [client 74.225.203.81:48566] [client 74.225.203.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVlJelCM4R1akb8JNI6dWAAAAFg"]
[Sun Jan 04 00:53:15.425170 2026] [:error] [pid 49319:tid 49333] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sun Jan 04 00:53:15.565710 2026] [:error] [pid 49319:tid 49336] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/f2f.php
[Sun Jan 04 00:53:15.724366 2026] [:error] [pid 49319:tid 49332] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/ths.php
[Sun Jan 04 00:53:15.864648 2026] [:error] [pid 49319:tid 49334] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Jan 04 00:53:16.007449 2026] [:error] [pid 49319:tid 49339] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Sun Jan 04 00:53:16.148985 2026] [:error] [pid 49319:tid 49328] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/d996699999.php
[Sun Jan 04 00:53:16.295068 2026] [:error] [pid 49319:tid 49331] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/ierne.php
[Sun Jan 04 00:53:16.790848 2026] [:error] [pid 49319:tid 49343] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/xde.php
[Sun Jan 04 00:53:16.959355 2026] [:error] [pid 49319:tid 49345] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/1yade.php
[Sun Jan 04 00:53:17.110950 2026] [:error] [pid 49319:tid 49323] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sun Jan 04 00:53:17.252519 2026] [:error] [pid 49319:tid 49329] [client 74.225.203.81:48536] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Sun Jan 04 02:03:54.157037 2026] [:error] [pid 49229:tid 49270] [client 4.217.187.11:54795] [client 4.217.187.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aVlaClCM4R1akb8JNI7C9gAAAEk"]
[Sun Jan 04 02:16:59.996111 2026] [:error] [pid 49319:tid 49334] [client 103.77.106.81:58095] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aVldG7cNXYLFZOiX4cRe8gAAAM0"]
[Sun Jan 04 05:10:19.827361 2026] [:error] [pid 37537:tid 37576] [client 43.166.239.145:57176] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVmFuwjHz7EQ5p_4u2paUQAAAEM"]
[Sun Jan 04 05:21:33.640034 2026] [:error] [pid 37636:tid 37640] [client 103.77.107.178:52052] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aVmIXS3kmZpEf9yy2b08sAAAAMA"]
[Sun Jan 04 09:44:01.511343 2026] [:error] [pid 32486:tid 32492] [client 159.223.64.161:63742] [client 159.223.64.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aVnF4cvDqLAl0_HADuCpfAAAAEA"]
[Sun Jan 04 10:04:30.517175 2026] [:error] [pid 21315:tid 21379] [client 43.153.71.12:34314] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVnKrjQTLlAjQFjwgk0M1AAAA8Q"]
[Sun Jan 04 10:53:35.918662 2026] [:error] [pid 51244:tid 51252] [client 106.119.167.146:38702] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVnWL7pKSCqxpFDQOe-wCgAAAAY"]
[Sun Jan 04 14:27:23.103035 2026] [:error] [pid 1080:tid 1163] [client 170.106.72.178:38334] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVoISyu2Hm9AcIiqg0qWDwAAA9g"]
[Sun Jan 04 17:14:29.036675 2026] [:error] [pid 59250:tid 59266] [client 111.172.249.49:39839] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVovdfPJ-KGeNWdqpudS6wAAAMs"]
[Sun Jan 04 17:44:58.443156 2026] [:error] [pid 1020:tid 1039] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Sun Jan 04 17:44:58.563884 2026] [:error] [pid 1020:tid 1040] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Jan 04 17:44:58.684360 2026] [:error] [pid 1020:tid 1023] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/rezor.php
[Sun Jan 04 17:44:58.805086 2026] [:error] [pid 1020:tid 1037] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/windex.php
[Sun Jan 04 17:44:58.924466 2026] [:error] [pid 1020:tid 1035] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/ajq1s.php
[Sun Jan 04 17:44:59.044771 2026] [:error] [pid 1020:tid 1028] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/world.php
[Sun Jan 04 17:44:59.164370 2026] [:error] [pid 1020:tid 1038] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Sun Jan 04 17:44:59.284204 2026] [:error] [pid 1020:tid 1029] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/spip.php
[Sun Jan 04 17:44:59.405565 2026] [:error] [pid 1020:tid 1044] [client 104.208.65.11:16628] File does not exist: /usr/local/apache/htdocs/suspended-page/Casper.php
[Sun Jan 04 17:44:59.522851 2026] [:error] [pid 1020:tid 1030] [client 104.208.65.11:16628] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geido.php"] [unique_id "aVo2m1zz6-t0R3_Ito01dAAAAUc"]
[Sun Jan 04 17:44:59.762145 2026] [:error] [pid 59250:tid 59271] [client 104.208.65.11:16595] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geido.php"] [unique_id "aVo2m_PJ-KGeNWdqpudYFQAAANA"]
[Sun Jan 04 17:44:59.996474 2026] [:error] [pid 15480:tid 15485] [client 104.208.65.11:16631] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geido.php"] [unique_id "aVo2mxBWKIu3SdvwTFickAAAAIM"]
[Sun Jan 04 17:45:00.230175 2026] [:error] [pid 59250:tid 59279] [client 104.208.65.11:16516] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geido.php"] [unique_id "aVo2nPPJ-KGeNWdqpudYFgAAANg"]
[Sun Jan 04 17:45:00.476278 2026] [:error] [pid 4333:tid 4352] [client 104.208.65.11:16599] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cachex.php"] [unique_id "aVo2nDAH-zZWAfquimAGjAAAABA"]
[Sun Jan 04 17:45:00.708656 2026] [:error] [pid 1020:tid 1046] [client 104.208.65.11:16619] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cachex.php"] [unique_id "aVo2nFzz6-t0R3_Ito01dQAAAVc"]
[Sun Jan 04 17:45:00.945150 2026] [:error] [pid 4426:tid 4447] [client 104.208.65.11:16639] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cachex.php"] [unique_id "aVo2nJAfkrNbrfBUY5VJdQAAAlE"]
[Sun Jan 04 17:45:01.178457 2026] [:error] [pid 4427:tid 4473] [client 104.208.65.11:16635] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cachex.php"] [unique_id "aVo2nT-T5ydE4nJe9DdFNAAAA1A"]
[Sun Jan 04 17:45:01.412069 2026] [:error] [pid 1020:tid 1045] [client 104.208.65.11:16601] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVo2nVzz6-t0R3_Ito01eAAAAVY"]
[Sun Jan 04 17:45:01.645746 2026] [:error] [pid 64248:tid 64264] [client 104.208.65.11:16538] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVo2ncZZ_5Iet2g0ae34RgAAAE4"]
[Sun Jan 04 17:45:01.878305 2026] [:error] [pid 56796:tid 56819] [client 104.208.65.11:16527] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVo2nYXa4dVs9ML_oAYBjQAAAdQ"]
[Sun Jan 04 17:45:02.111404 2026] [:error] [pid 4333:tid 4350] [client 104.208.65.11:16622] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpup.php"] [unique_id "aVo2njAH-zZWAfquimAGoAAAAA4"]
[Sun Jan 04 17:45:02.344060 2026] [:error] [pid 15480:tid 15495] [client 104.208.65.11:16609] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aVo2nhBWKIu3SdvwTFickwAAAI0"]
[Sun Jan 04 17:45:02.591062 2026] [:error] [pid 4333:tid 4343] [client 104.208.65.11:16515] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aVo2njAH-zZWAfquimAGpgAAAAc"]
[Sun Jan 04 17:45:02.824111 2026] [:error] [pid 64248:tid 64262] [client 104.208.65.11:16552] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aVo2nsZZ_5Iet2g0ae34SwAAAEw"]
[Sun Jan 04 17:45:03.056607 2026] [:error] [pid 4333:tid 4346] [client 104.208.65.11:15438] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aVo2nzAH-zZWAfquimAGrgAAAAo"]
[Sun Jan 04 17:45:03.308298 2026] [:error] [pid 4365:tid 4400] [client 104.208.65.11:16560] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aVo2n8Mi25XHOoMs4mdivwAAAYU"]
[Sun Jan 04 17:45:03.546441 2026] [:error] [pid 56796:tid 56818] [client 104.208.65.11:16525] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aVo2n4Xa4dVs9ML_oAYBjgAAAdM"]
[Sun Jan 04 17:45:03.779416 2026] [:error] [pid 4426:tid 4436] [client 104.208.65.11:16531] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aVo2n5AfkrNbrfBUY5VJewAAAkY"]
[Sun Jan 04 17:45:04.014008 2026] [:error] [pid 4426:tid 4444] [client 104.208.65.11:16636] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aVo2oJAfkrNbrfBUY5VJfwAAAk4"]
[Sun Jan 04 17:45:04.249917 2026] [:error] [pid 4426:tid 4437] [client 104.208.65.11:16618] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/halo.php"] [unique_id "aVo2oJAfkrNbrfBUY5VJgAAAAkc"]
[Sun Jan 04 17:45:04.485510 2026] [:error] [pid 4365:tid 4395] [client 104.208.65.11:16584] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/halo.php"] [unique_id "aVo2oMMi25XHOoMs4mdiwQAAAYA"]
[Sun Jan 04 17:45:04.718309 2026] [:error] [pid 4426:tid 4434] [client 104.208.65.11:16562] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/halo.php"] [unique_id "aVo2oJAfkrNbrfBUY5VJgQAAAkQ"]
[Sun Jan 04 17:45:04.951722 2026] [:error] [pid 4426:tid 4443] [client 104.208.65.11:16551] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/halo.php"] [unique_id "aVo2oJAfkrNbrfBUY5VJhAAAAk0"]
[Sun Jan 04 17:45:05.192526 2026] [:error] [pid 4333:tid 4337] [client 104.208.65.11:16550] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nck.php"] [unique_id "aVo2oTAH-zZWAfquimAGsQAAAAE"]
[Sun Jan 04 17:45:05.425607 2026] [:error] [pid 4333:tid 4359] [client 104.208.65.11:16522] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nck.php"] [unique_id "aVo2oTAH-zZWAfquimAGsgAAABc"]
[Sun Jan 04 17:45:05.659615 2026] [:error] [pid 59250:tid 59267] [client 104.208.65.11:16610] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nck.php"] [unique_id "aVo2ofPJ-KGeNWdqpudYGQAAAMw"]
[Sun Jan 04 17:45:05.894114 2026] [:error] [pid 1020:tid 1024] [client 104.208.65.11:16608] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nck.php"] [unique_id "aVo2oVzz6-t0R3_Ito01eQAAAUE"]
[Sun Jan 04 17:45:06.129156 2026] [:error] [pid 4426:tid 4435] [client 104.208.65.11:16638] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVo2opAfkrNbrfBUY5VJigAAAkU"]
[Sun Jan 04 17:45:06.367059 2026] [:error] [pid 15480:tid 15502] [client 104.208.65.11:16598] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVo2ohBWKIu3SdvwTFiclQAAAJQ"]
[Sun Jan 04 17:45:06.614881 2026] [:error] [pid 4427:tid 4461] [client 104.208.65.11:16632] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVo2oj-T5ydE4nJe9DdFNgAAA0Q"]
[Sun Jan 04 17:45:06.853741 2026] [:error] [pid 15480:tid 15493] [client 104.208.65.11:16582] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVo2ohBWKIu3SdvwTFiclgAAAIs"]
[Sun Jan 04 17:45:07.087451 2026] [:error] [pid 4427:tid 4457] [client 104.208.65.11:16597] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVo2oz-T5ydE4nJe9DdFNwAAA0A"]
[Sun Jan 04 17:45:07.319894 2026] [:error] [pid 1020:tid 1033] [client 104.208.65.11:16588] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVo2o1zz6-t0R3_Ito01egAAAUo"]
[Sun Jan 04 17:45:07.554308 2026] [:error] [pid 15480:tid 15496] [client 104.208.65.11:16576] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVo2oxBWKIu3SdvwTFicmQAAAI4"]
[Sun Jan 04 17:45:07.788448 2026] [:error] [pid 56796:tid 56803] [client 104.208.65.11:16589] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aVo2o4Xa4dVs9ML_oAYBkQAAAcQ"]
[Sun Jan 04 17:45:08.022578 2026] [:error] [pid 15480:tid 15504] [client 104.208.65.11:16637] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVo2pBBWKIu3SdvwTFicnQAAAJY"]
[Sun Jan 04 17:45:08.256917 2026] [:error] [pid 4333:tid 4336] [client 104.208.65.11:16591] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVo2pDAH-zZWAfquimAGswAAAAA"]
[Sun Jan 04 17:45:08.490776 2026] [:error] [pid 4365:tid 4403] [client 104.208.65.11:16583] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVo2pMMi25XHOoMs4mdixAAAAYg"]
[Sun Jan 04 17:45:08.726457 2026] [:error] [pid 15480:tid 15500] [client 104.208.65.11:16555] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-activate.php"] [unique_id "aVo2pBBWKIu3SdvwTFicngAAAJI"]
[Sun Jan 04 17:45:08.966394 2026] [:error] [pid 15480:tid 15505] [client 104.208.65.11:16520] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVo2pBBWKIu3SdvwTFicnwAAAJc"]
[Sun Jan 04 17:45:09.199671 2026] [:error] [pid 4365:tid 4409] [client 104.208.65.11:15436] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVo2pcMi25XHOoMs4mdixQAAAY4"]
[Sun Jan 04 17:45:09.432987 2026] [:error] [pid 59250:tid 59255] [client 104.208.65.11:16530] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVo2pfPJ-KGeNWdqpudYHQAAAMA"]
[Sun Jan 04 17:45:09.670463 2026] [:error] [pid 4365:tid 4418] [client 104.208.65.11:16626] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aVo2pcMi25XHOoMs4mdixgAAAZc"]
[Sun Jan 04 17:45:09.905884 2026] [:error] [pid 64248:tid 64257] [client 104.208.65.11:15458] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVo2pcZZ_5Iet2g0ae34YQAAAEc"]
[Sun Jan 04 17:45:10.143880 2026] [:error] [pid 64248:tid 64254] [client 104.208.65.11:16553] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVo2psZZ_5Iet2g0ae34YgAAAEQ"]
[Sun Jan 04 17:45:10.378400 2026] [:error] [pid 4365:tid 4408] [client 104.208.65.11:16543] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVo2psMi25XHOoMs4mdixwAAAY0"]
[Sun Jan 04 17:45:10.611863 2026] [:error] [pid 64248:tid 64250] [client 104.208.65.11:15475] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aVo2psZZ_5Iet2g0ae34ZwAAAEA"]
[Sun Jan 04 17:45:10.881059 2026] [:error] [pid 4365:tid 4414] [client 104.208.65.11:16594] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2psMi25XHOoMs4mdiyAAAAZM"]
[Sun Jan 04 17:45:11.113770 2026] [:error] [pid 4333:tid 4353] [client 104.208.65.11:16621] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2pzAH-zZWAfquimAGtgAAABE"]
[Sun Jan 04 17:45:11.348408 2026] [:error] [pid 4365:tid 4404] [client 104.208.65.11:16526] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2p8Mi25XHOoMs4mdiyQAAAYk"]
[Sun Jan 04 17:45:11.582220 2026] [:error] [pid 1020:tid 1043] [client 104.208.65.11:16606] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2p1zz6-t0R3_Ito01fAAAAVQ"]
[Sun Jan 04 17:45:11.831421 2026] [:error] [pid 1020:tid 1031] [client 104.208.65.11:16557] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVo2p1zz6-t0R3_Ito01fQAAAUg"]
[Sun Jan 04 17:45:12.064704 2026] [:error] [pid 64248:tid 64271] [client 104.208.65.11:15428] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVo2qMZZ_5Iet2g0ae34cAAAAFU"]
[Sun Jan 04 17:45:12.297884 2026] [:error] [pid 4426:tid 4448] [client 104.208.65.11:16565] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVo2qJAfkrNbrfBUY5VJjwAAAlI"]
[Sun Jan 04 17:45:12.530774 2026] [:error] [pid 4426:tid 4439] [client 104.208.65.11:15477] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "aVo2qJAfkrNbrfBUY5VJkgAAAkk"]
[Sun Jan 04 17:45:12.765621 2026] [:error] [pid 4333:tid 4347] [client 104.208.65.11:16517] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVo2qDAH-zZWAfquimAGtwAAAAs"]
[Sun Jan 04 17:45:12.998545 2026] [:error] [pid 4333:tid 4348] [client 104.208.65.11:16546] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVo2qDAH-zZWAfquimAGuAAAAAw"]
[Sun Jan 04 17:45:13.237328 2026] [:error] [pid 1020:tid 1023] [client 104.208.65.11:16523] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVo2qVzz6-t0R3_Ito01gAAAAUA"]
[Sun Jan 04 17:45:13.484469 2026] [:error] [pid 1080:tid 1156] [client 104.208.65.11:16604] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVo2qSu2Hm9AcIiqg0q0dwAAA9E"]
[Sun Jan 04 17:45:13.733303 2026] [:error] [pid 1080:tid 1142] [client 104.208.65.11:15474] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVo2qSu2Hm9AcIiqg0q0eAAAA8M"]
[Sun Jan 04 17:45:13.977487 2026] [:error] [pid 4426:tid 4438] [client 104.208.65.11:16623] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVo2qZAfkrNbrfBUY5VJlAAAAkg"]
[Sun Jan 04 17:45:14.210979 2026] [:error] [pid 1020:tid 1037] [client 104.208.65.11:16602] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVo2qlzz6-t0R3_Ito01gQAAAU4"]
[Sun Jan 04 17:45:14.444056 2026] [:error] [pid 59250:tid 59265] [client 104.208.65.11:16556] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aVo2qvPJ-KGeNWdqpudYJAAAAMo"]
[Sun Jan 04 17:45:14.677268 2026] [:error] [pid 4365:tid 4396] [client 104.208.65.11:16542] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVo2qsMi25XHOoMs4mdiygAAAYE"]
[Sun Jan 04 17:45:14.910410 2026] [:error] [pid 64248:tid 64261] [client 104.208.65.11:16578] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVo2qsZZ_5Iet2g0ae34egAAAEs"]
[Sun Jan 04 17:45:15.143562 2026] [:error] [pid 1020:tid 1028] [client 104.208.65.11:15434] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVo2q1zz6-t0R3_Ito01ggAAAUU"]
[Sun Jan 04 17:45:15.376356 2026] [:error] [pid 4333:tid 4346] [client 104.208.65.11:16615] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "aVo2qzAH-zZWAfquimAGuwAAAAo"]
[Sun Jan 04 17:45:15.608593 2026] [:error] [pid 4333:tid 4358] [client 104.208.65.11:16577] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVo2qzAH-zZWAfquimAGvAAAABY"]
[Sun Jan 04 17:45:15.844158 2026] [:error] [pid 4333:tid 4341] [client 104.208.65.11:15445] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVo2qzAH-zZWAfquimAGvQAAAAU"]
[Sun Jan 04 17:45:16.082263 2026] [:error] [pid 4333:tid 4342] [client 104.208.65.11:16532] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVo2rDAH-zZWAfquimAGvwAAAAY"]
[Sun Jan 04 17:45:16.315378 2026] [:error] [pid 1080:tid 1151] [client 104.208.65.11:15455] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aVo2rCu2Hm9AcIiqg0q0eQAAA8w"]
[Sun Jan 04 17:45:16.560491 2026] [:error] [pid 1020:tid 1044] [client 104.208.65.11:15459] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVo2rFzz6-t0R3_Ito01hAAAAVU"]
[Sun Jan 04 17:45:16.793337 2026] [:error] [pid 4365:tid 4402] [client 104.208.65.11:16629] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVo2rMMi25XHOoMs4mdizQAAAYc"]
[Sun Jan 04 17:45:17.059703 2026] [:error] [pid 4333:tid 4359] [client 104.208.65.11:16634] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVo2rTAH-zZWAfquimAGwwAAABc"]
[Sun Jan 04 17:45:17.292628 2026] [:error] [pid 4365:tid 4398] [client 104.208.65.11:16616] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OK.php"] [unique_id "aVo2rcMi25XHOoMs4mdizwAAAYM"]
[Sun Jan 04 17:45:17.525884 2026] [:error] [pid 59250:tid 59279] [client 104.208.65.11:15371] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVo2rfPJ-KGeNWdqpudYJQAAANg"]
[Sun Jan 04 17:45:17.760519 2026] [:error] [pid 4365:tid 4416] [client 104.208.65.11:16512] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVo2rcMi25XHOoMs4mdi0AAAAZU"]
[Sun Jan 04 17:45:17.994543 2026] [:error] [pid 4427:tid 4468] [client 104.208.65.11:16534] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVo2rT-T5ydE4nJe9DdFOQAAA0s"]
[Sun Jan 04 17:45:18.235167 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:16587] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "aVo2rpAfkrNbrfBUY5VJlwAAAlA"]
[Sun Jan 04 17:45:18.471752 2026] [:error] [pid 64248:tid 64265] [client 104.208.65.11:16624] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVo2rsZZ_5Iet2g0ae34iQAAAE8"]
[Sun Jan 04 17:45:18.727931 2026] [:error] [pid 4426:tid 4452] [client 104.208.65.11:16519] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVo2rpAfkrNbrfBUY5VJmQAAAlY"]
[Sun Jan 04 17:45:18.961596 2026] [:error] [pid 4333:tid 4350] [client 104.208.65.11:16544] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVo2rjAH-zZWAfquimAGxQAAAA4"]
[Sun Jan 04 17:45:19.195068 2026] [:error] [pid 4365:tid 4401] [client 104.208.65.11:16548] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zsec.php"] [unique_id "aVo2r8Mi25XHOoMs4mdi0wAAAYY"]
[Sun Jan 04 17:45:19.428007 2026] [:error] [pid 15480:tid 15485] [client 104.208.65.11:16620] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVo2rxBWKIu3SdvwTFicoAAAAIM"]
[Sun Jan 04 17:45:19.661647 2026] [:error] [pid 4365:tid 4400] [client 104.208.65.11:16547] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVo2r8Mi25XHOoMs4mdi1AAAAYU"]
[Sun Jan 04 17:45:19.901885 2026] [:error] [pid 15480:tid 15497] [client 104.208.65.11:16573] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVo2rxBWKIu3SdvwTFicoQAAAI8"]
[Sun Jan 04 17:45:20.153107 2026] [:error] [pid 4427:tid 4460] [client 104.208.65.11:16537] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arig.php"] [unique_id "aVo2sD-T5ydE4nJe9DdFOgAAA0M"]
[Sun Jan 04 17:45:20.399556 2026] [:error] [pid 64248:tid 64262] [client 104.208.65.11:16580] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVo2sMZZ_5Iet2g0ae34lAAAAEw"]
[Sun Jan 04 17:45:20.634147 2026] [:error] [pid 4365:tid 4406] [client 104.208.65.11:16630] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVo2sMMi25XHOoMs4mdi1gAAAYs"]
[Sun Jan 04 17:45:20.873971 2026] [:error] [pid 1080:tid 1144] [client 104.208.65.11:16513] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVo2sCu2Hm9AcIiqg0q0ewAAA8U"]
[Sun Jan 04 17:45:21.129671 2026] [:error] [pid 4426:tid 4454] [client 104.208.65.11:16563] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aVo2sZAfkrNbrfBUY5VJmwAAAlg"]
[Sun Jan 04 17:45:21.423033 2026] [:error] [pid 1080:tid 1158] [client 104.208.65.11:16559] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVo2sSu2Hm9AcIiqg0q0fAAAA9M"]
[Sun Jan 04 17:45:21.655907 2026] [:error] [pid 4427:tid 4458] [client 104.208.65.11:16540] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVo2sT-T5ydE4nJe9DdFOwAAA0E"]
[Sun Jan 04 17:45:21.902216 2026] [:error] [pid 4365:tid 4415] [client 104.208.65.11:16585] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVo2scMi25XHOoMs4mdi2AAAAZQ"]
[Sun Jan 04 17:45:22.138024 2026] [:error] [pid 4426:tid 4448] [client 104.208.65.11:16529] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aVo2spAfkrNbrfBUY5VJngAAAlI"]
[Sun Jan 04 17:45:22.371821 2026] [:error] [pid 1020:tid 1047] [client 104.208.65.11:16524] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVo2slzz6-t0R3_Ito01hwAAAVg"]
[Sun Jan 04 17:45:22.618806 2026] [:error] [pid 1080:tid 1160] [client 104.208.65.11:15462] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVo2siu2Hm9AcIiqg0q0fgAAA9U"]
[Sun Jan 04 17:45:22.859095 2026] [:error] [pid 1080:tid 1147] [client 104.208.65.11:16571] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVo2siu2Hm9AcIiqg0q0gAAAA8g"]
[Sun Jan 04 17:45:23.091977 2026] [:error] [pid 4333:tid 4340] [client 104.208.65.11:16561] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/af32.php"] [unique_id "aVo2szAH-zZWAfquimAGygAAAAQ"]
[Sun Jan 04 17:45:23.365830 2026] [:error] [pid 64248:tid 64268] [client 104.208.65.11:16533] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVo2s8ZZ_5Iet2g0ae34nQAAAFI"]
[Sun Jan 04 17:45:23.611076 2026] [:error] [pid 4333:tid 4348] [client 104.208.65.11:15369] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVo2szAH-zZWAfquimAGzAAAAAw"]
[Sun Jan 04 17:45:23.846443 2026] [:error] [pid 4427:tid 4464] [client 104.208.65.11:15466] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVo2sz-T5ydE4nJe9DdFPwAAA0c"]
[Sun Jan 04 17:45:24.080702 2026] [:error] [pid 4427:tid 4470] [client 104.208.65.11:16593] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rz.php"] [unique_id "aVo2tD-T5ydE4nJe9DdFQAAAA00"]
[Sun Jan 04 17:45:24.322901 2026] [:error] [pid 4427:tid 4476] [client 104.208.65.11:15464] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVo2tD-T5ydE4nJe9DdFQgAAA1M"]
[Sun Jan 04 17:45:24.556229 2026] [:error] [pid 4365:tid 4407] [client 104.208.65.11:16592] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVo2tMMi25XHOoMs4mdi2QAAAYw"]
[Sun Jan 04 17:45:24.788310 2026] [:error] [pid 4365:tid 4403] [client 104.208.65.11:15450] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVo2tMMi25XHOoMs4mdi2gAAAYg"]
[Sun Jan 04 17:45:25.031395 2026] [:error] [pid 56796:tid 56808] [client 104.208.65.11:16569] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hugo.php"] [unique_id "aVo2tYXa4dVs9ML_oAYBlQAAAck"]
[Sun Jan 04 17:45:25.292566 2026] [:error] [pid 59250:tid 59267] [client 104.208.65.11:16536] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVo2tfPJ-KGeNWdqpudYKAAAAMw"]
[Sun Jan 04 17:45:25.540811 2026] [:error] [pid 56796:tid 56816] [client 104.208.65.11:15424] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVo2tYXa4dVs9ML_oAYBlgAAAdE"]
[Sun Jan 04 17:45:25.791598 2026] [:error] [pid 56796:tid 56807] [client 104.208.65.11:15443] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVo2tYXa4dVs9ML_oAYBlwAAAcg"]
[Sun Jan 04 17:45:26.028844 2026] [:error] [pid 56796:tid 56802] [client 104.208.65.11:15375] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aVo2toXa4dVs9ML_oAYBmgAAAcM"]
[Sun Jan 04 17:45:26.263018 2026] [:error] [pid 1080:tid 1140] [client 104.208.65.11:16528] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVo2tiu2Hm9AcIiqg0q0hwAAA8E"]
[Sun Jan 04 17:45:26.506082 2026] [:error] [pid 4365:tid 4414] [client 104.208.65.11:15432] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVo2tsMi25XHOoMs4mdi3AAAAZM"]
[Sun Jan 04 17:45:26.753686 2026] [:error] [pid 1020:tid 1026] [client 104.208.65.11:15448] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVo2tlzz6-t0R3_Ito01iwAAAUM"]
[Sun Jan 04 17:45:26.994387 2026] [:error] [pid 4365:tid 4396] [client 104.208.65.11:15421] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lzyrj.php"] [unique_id "aVo2tsMi25XHOoMs4mdi3QAAAYE"]
[Sun Jan 04 17:45:27.285432 2026] [:error] [pid 4365:tid 4417] [client 104.208.65.11:16566] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVo2t8Mi25XHOoMs4mdi3gAAAZY"]
[Sun Jan 04 17:45:27.527128 2026] [:error] [pid 15480:tid 15503] [client 104.208.65.11:16518] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVo2txBWKIu3SdvwTFicowAAAJU"]
[Sun Jan 04 17:45:27.759477 2026] [:error] [pid 4426:tid 4439] [client 104.208.65.11:16549] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVo2t5AfkrNbrfBUY5VJoQAAAkk"]
[Sun Jan 04 17:45:28.009695 2026] [:error] [pid 4365:tid 4402] [client 104.208.65.11:15487] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/laudq.php"] [unique_id "aVo2uMMi25XHOoMs4mdi4AAAAYc"]
[Sun Jan 04 17:45:28.253771 2026] [:error] [pid 4365:tid 4411] [client 104.208.65.11:16613] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVo2uMMi25XHOoMs4mdi4QAAAZA"]
[Sun Jan 04 17:45:28.487978 2026] [:error] [pid 1020:tid 1033] [client 104.208.65.11:15435] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVo2uFzz6-t0R3_Ito01jQAAAUo"]
[Sun Jan 04 17:45:28.725617 2026] [:error] [pid 1020:tid 1027] [client 104.208.65.11:15454] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVo2uFzz6-t0R3_Ito01jgAAAUQ"]
[Sun Jan 04 17:45:28.969459 2026] [:error] [pid 1020:tid 1031] [client 104.208.65.11:15426] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anjay.php"] [unique_id "aVo2uFzz6-t0R3_Ito01kAAAAUg"]
[Sun Jan 04 17:45:29.203145 2026] [:error] [pid 56796:tid 56814] [client 104.208.65.11:16564] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVo2uYXa4dVs9ML_oAYBngAAAc8"]
[Sun Jan 04 17:45:29.477300 2026] [:error] [pid 56796:tid 56818] [client 104.208.65.11:15395] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVo2uYXa4dVs9ML_oAYBnwAAAdM"]
[Sun Jan 04 17:45:29.713661 2026] [:error] [pid 64248:tid 64251] [client 104.208.65.11:15401] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVo2ucZZ_5Iet2g0ae34rQAAAEE"]
[Sun Jan 04 17:45:29.960723 2026] [:error] [pid 4426:tid 4444] [client 104.208.65.11:15446] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "aVo2uZAfkrNbrfBUY5VJogAAAk4"]
[Sun Jan 04 17:45:30.194901 2026] [:error] [pid 1020:tid 1039] [client 104.208.65.11:15385] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVo2ulzz6-t0R3_Ito01kQAAAVA"]
[Sun Jan 04 17:45:30.455024 2026] [:error] [pid 4426:tid 4443] [client 104.208.65.11:16539] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVo2upAfkrNbrfBUY5VJowAAAk0"]
[Sun Jan 04 17:45:30.733479 2026] [:error] [pid 4333:tid 4343] [client 104.208.65.11:15451] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVo2ujAH-zZWAfquimAG2QAAAAc"]
[Sun Jan 04 17:45:30.975257 2026] [:error] [pid 4365:tid 4398] [client 104.208.65.11:16535] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aVo2usMi25XHOoMs4mdi4gAAAYM"]
[Sun Jan 04 17:45:31.231799 2026] [:error] [pid 15480:tid 15484] [client 104.208.65.11:15463] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVo2uxBWKIu3SdvwTFicpgAAAII"]
[Sun Jan 04 17:45:31.467047 2026] [:error] [pid 15480:tid 15494] [client 104.208.65.11:15441] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVo2uxBWKIu3SdvwTFicpwAAAIw"]
[Sun Jan 04 17:45:31.703154 2026] [:error] [pid 4426:tid 4442] [client 104.208.65.11:15363] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVo2u5AfkrNbrfBUY5VJpQAAAkw"]
[Sun Jan 04 17:45:31.941309 2026] [:error] [pid 56796:tid 56810] [client 104.208.65.11:16570] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aVo2u4Xa4dVs9ML_oAYBowAAAcs"]
[Sun Jan 04 17:45:32.177791 2026] [:error] [pid 15480:tid 15496] [client 104.208.65.11:15480] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVo2vBBWKIu3SdvwTFicqAAAAI4"]
[Sun Jan 04 17:45:32.449722 2026] [:error] [pid 4426:tid 4435] [client 104.208.65.11:16603] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVo2vJAfkrNbrfBUY5VJqQAAAkU"]
[Sun Jan 04 17:45:32.712890 2026] [:error] [pid 56796:tid 56820] [client 104.208.65.11:15453] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVo2vIXa4dVs9ML_oAYBpgAAAdU"]
[Sun Jan 04 17:45:32.946505 2026] [:error] [pid 56796:tid 56816] [client 104.208.65.11:15468] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pn.php"] [unique_id "aVo2vIXa4dVs9ML_oAYBpwAAAdE"]
[Sun Jan 04 17:45:33.199620 2026] [:error] [pid 4365:tid 4416] [client 104.208.65.11:16568] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVo2vcMi25XHOoMs4mdi4wAAAZU"]
[Sun Jan 04 17:45:33.434571 2026] [:error] [pid 4426:tid 4432] [client 104.208.65.11:15456] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVo2vZAfkrNbrfBUY5VJqgAAAkI"]
[Sun Jan 04 17:45:33.701349 2026] [:error] [pid 4426:tid 4451] [client 104.208.65.11:15416] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVo2vZAfkrNbrfBUY5VJrQAAAlU"]
[Sun Jan 04 17:45:33.938019 2026] [:error] [pid 1080:tid 1151] [client 104.208.65.11:15373] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aVo2vSu2Hm9AcIiqg0q0iwAAA8w"]
[Sun Jan 04 17:45:34.223786 2026] [:error] [pid 1080:tid 1155] [client 104.208.65.11:16625] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVo2viu2Hm9AcIiqg0q0jAAAA9A"]
[Sun Jan 04 17:45:34.459182 2026] [:error] [pid 4427:tid 4457] [client 104.208.65.11:15439] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVo2vj-T5ydE4nJe9DdFRgAAA0A"]
[Sun Jan 04 17:45:34.707898 2026] [:error] [pid 15480:tid 15500] [client 104.208.65.11:15452] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVo2vhBWKIu3SdvwTFicrgAAAJI"]
[Sun Jan 04 17:45:34.941325 2026] [:error] [pid 56796:tid 56815] [client 104.208.65.11:16558] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aVo2voXa4dVs9ML_oAYBqQAAAdA"]
[Sun Jan 04 17:45:35.196075 2026] [:error] [pid 4427:tid 4468] [client 104.208.65.11:16572] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVo2vz-T5ydE4nJe9DdFSAAAA0s"]
[Sun Jan 04 17:45:35.441836 2026] [:error] [pid 56796:tid 56809] [client 104.208.65.11:15467] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVo2v4Xa4dVs9ML_oAYBqwAAAco"]
[Sun Jan 04 17:45:35.674840 2026] [:error] [pid 15480:tid 15485] [client 104.208.65.11:15408] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVo2vxBWKIu3SdvwTFicswAAAIM"]
[Sun Jan 04 17:45:35.918598 2026] [:error] [pid 56796:tid 56814] [client 104.208.65.11:16567] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aVo2v4Xa4dVs9ML_oAYBrQAAAc8"]
[Sun Jan 04 17:45:36.156435 2026] [:error] [pid 4427:tid 4475] [client 104.208.65.11:15380] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVo2wD-T5ydE4nJe9DdFSwAAA1I"]
[Sun Jan 04 17:45:36.388845 2026] [:error] [pid 15480:tid 15486] [client 104.208.65.11:16596] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVo2wBBWKIu3SdvwTFictQAAAIQ"]
[Sun Jan 04 17:45:36.622370 2026] [:error] [pid 56796:tid 56819] [client 104.208.65.11:15379] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVo2wIXa4dVs9ML_oAYBsAAAAdQ"]
[Sun Jan 04 17:45:36.860744 2026] [:error] [pid 1020:tid 1032] [client 104.208.65.11:15430] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aVo2wFzz6-t0R3_Ito01mgAAAUk"]
[Sun Jan 04 17:45:37.106951 2026] [:error] [pid 4333:tid 4341] [client 104.208.65.11:15447] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVo2wTAH-zZWAfquimAG8gAAAAU"]
[Sun Jan 04 17:45:37.344152 2026] [:error] [pid 59250:tid 59263] [client 104.208.65.11:15376] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVo2wfPJ-KGeNWdqpudYMAAAAMg"]
[Sun Jan 04 17:45:37.577096 2026] [:error] [pid 4427:tid 4470] [client 104.208.65.11:15460] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVo2wT-T5ydE4nJe9DdFTQAAA00"]
[Sun Jan 04 17:45:37.809292 2026] [:error] [pid 4426:tid 4440] [client 104.208.65.11:15410] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aVo2wZAfkrNbrfBUY5VJswAAAko"]
[Sun Jan 04 17:45:38.051027 2026] [:error] [pid 4426:tid 4453] [client 104.208.65.11:15366] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVo2wpAfkrNbrfBUY5VJtQAAAlc"]
[Sun Jan 04 17:45:38.308692 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:15365] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVo2wpAfkrNbrfBUY5VJtgAAAlA"]
[Sun Jan 04 17:45:38.552169 2026] [:error] [pid 4426:tid 4447] [client 104.208.65.11:15400] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVo2wpAfkrNbrfBUY5VJuAAAAlE"]
[Sun Jan 04 17:45:38.797101 2026] [:error] [pid 4426:tid 4432] [client 104.208.65.11:15433] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloud.php"] [unique_id "aVo2wpAfkrNbrfBUY5VJuQAAAkI"]
[Sun Jan 04 17:45:39.031297 2026] [:error] [pid 59250:tid 59274] [client 104.208.65.11:16611] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2w_PJ-KGeNWdqpudYMgAAANM"]
[Sun Jan 04 17:45:39.271007 2026] [:error] [pid 4365:tid 4401] [client 104.208.65.11:15399] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2w8Mi25XHOoMs4mdi5QAAAYY"]
[Sun Jan 04 17:45:39.503908 2026] [:error] [pid 4426:tid 4451] [client 104.208.65.11:15427] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2w5AfkrNbrfBUY5VJvQAAAlU"]
[Sun Jan 04 17:45:39.744074 2026] [:error] [pid 4426:tid 4449] [client 104.208.65.11:16545] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo2w5AfkrNbrfBUY5VJvgAAAlM"]
[Sun Jan 04 17:45:39.989668 2026] [:error] [pid 4365:tid 4405] [client 104.208.65.11:16614] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVo2w8Mi25XHOoMs4mdi6AAAAYo"]
[Sun Jan 04 17:45:40.232640 2026] [:error] [pid 4426:tid 4439] [client 104.208.65.11:15370] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVo2xJAfkrNbrfBUY5VJvwAAAkk"]
[Sun Jan 04 17:45:40.473428 2026] [:error] [pid 4365:tid 4415] [client 104.208.65.11:15298] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVo2xMMi25XHOoMs4mdi6wAAAZQ"]
[Sun Jan 04 17:45:40.707433 2026] [:error] [pid 4365:tid 4403] [client 104.208.65.11:15415] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aVo2xMMi25XHOoMs4mdi7AAAAYg"]
[Sun Jan 04 17:45:40.944255 2026] [:error] [pid 4426:tid 4440] [client 104.208.65.11:16627] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVo2xJAfkrNbrfBUY5VJwgAAAko"]
[Sun Jan 04 17:45:41.185562 2026] [:error] [pid 4426:tid 4437] [client 104.208.65.11:16554] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVo2xZAfkrNbrfBUY5VJwwAAAkc"]
[Sun Jan 04 17:45:41.419950 2026] [:error] [pid 4365:tid 4417] [client 104.208.65.11:15420] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVo2xcMi25XHOoMs4mdi8AAAAZY"]
[Sun Jan 04 17:45:41.653918 2026] [:error] [pid 4333:tid 4340] [client 104.208.65.11:15470] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aVo2xTAH-zZWAfquimAHBQAAAAQ"]
[Sun Jan 04 17:45:41.909823 2026] [:error] [pid 15480:tid 15499] [client 104.208.65.11:15372] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVo2xRBWKIu3SdvwTFicugAAAJE"]
[Sun Jan 04 17:45:42.144060 2026] [:error] [pid 15480:tid 15504] [client 104.208.65.11:15374] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVo2xhBWKIu3SdvwTFicuwAAAJY"]
[Sun Jan 04 17:45:42.381318 2026] [:error] [pid 4365:tid 4398] [client 104.208.65.11:16586] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVo2xsMi25XHOoMs4mdi8gAAAYM"]
[Sun Jan 04 17:45:42.619746 2026] [:error] [pid 4365:tid 4413] [client 104.208.65.11:15392] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aVo2xsMi25XHOoMs4mdi9AAAAZI"]
[Sun Jan 04 17:45:42.855093 2026] [:error] [pid 4426:tid 4452] [client 104.208.65.11:16633] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo2xpAfkrNbrfBUY5VJxQAAAlY"]
[Sun Jan 04 17:45:43.088002 2026] [:error] [pid 4365:tid 4401] [client 104.208.65.11:16541] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo2x8Mi25XHOoMs4mdi9wAAAYY"]
[Sun Jan 04 17:45:43.364767 2026] [:error] [pid 4426:tid 4442] [client 104.208.65.11:15431] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo2x5AfkrNbrfBUY5VJxgAAAkw"]
[Sun Jan 04 17:45:43.598166 2026] [:error] [pid 4365:tid 4405] [client 104.208.65.11:15331] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo2x8Mi25XHOoMs4mdi-QAAAYo"]
[Sun Jan 04 17:45:43.833240 2026] [:error] [pid 1080:tid 1147] [client 104.208.65.11:15393] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVo2xyu2Hm9AcIiqg0q0jQAAA8g"]
[Sun Jan 04 17:45:44.109470 2026] [:error] [pid 4426:tid 4431] [client 104.208.65.11:16575] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVo2yJAfkrNbrfBUY5VJxwAAAkE"]
[Sun Jan 04 17:45:44.342022 2026] [:error] [pid 4426:tid 4451] [client 104.208.65.11:15403] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVo2yJAfkrNbrfBUY5VJyAAAAlU"]
[Sun Jan 04 17:45:44.581857 2026] [:error] [pid 4365:tid 4415] [client 104.208.65.11:16612] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aVo2yMMi25XHOoMs4mdi-gAAAZQ"]
[Sun Jan 04 17:45:44.819092 2026] [:error] [pid 4426:tid 4439] [client 104.208.65.11:15442] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVo2yJAfkrNbrfBUY5VJzQAAAkk"]
[Sun Jan 04 17:45:45.059059 2026] [:error] [pid 4365:tid 4403] [client 104.208.65.11:15404] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVo2ycMi25XHOoMs4mdi-wAAAYg"]
[Sun Jan 04 17:45:45.300638 2026] [:error] [pid 4426:tid 4437] [client 104.208.65.11:15478] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVo2yZAfkrNbrfBUY5VJ0AAAAkc"]
[Sun Jan 04 17:45:45.539131 2026] [:error] [pid 15480:tid 15489] [client 104.208.65.11:15472] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aVo2yRBWKIu3SdvwTFicvwAAAIc"]
[Sun Jan 04 17:45:45.783835 2026] [:error] [pid 64248:tid 64271] [client 104.208.65.11:15419] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVo2ycZZ_5Iet2g0ae34sQAAAFU"]
[Sun Jan 04 17:45:46.039615 2026] [:error] [pid 4426:tid 4452] [client 104.208.65.11:16617] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVo2ypAfkrNbrfBUY5VJ0wAAAlY"]
[Sun Jan 04 17:45:46.284733 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:15307] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVo2ypAfkrNbrfBUY5VJ1AAAAlA"]
[Sun Jan 04 17:45:46.516967 2026] [:error] [pid 59250:tid 59271] [client 104.208.65.11:15304] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aVo2yvPJ-KGeNWdqpudYMwAAANA"]
[Sun Jan 04 17:45:46.748955 2026] [:error] [pid 64248:tid 64265] [client 104.208.65.11:15296] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVo2ysZZ_5Iet2g0ae34sgAAAE8"]
[Sun Jan 04 17:45:46.981494 2026] [:error] [pid 64248:tid 64270] [client 104.208.65.11:15479] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVo2ysZZ_5Iet2g0ae34tAAAAFQ"]
[Sun Jan 04 17:45:47.225176 2026] [:error] [pid 4333:tid 4344] [client 104.208.65.11:15396] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVo2yzAH-zZWAfquimAHFgAAAAg"]
[Sun Jan 04 17:45:47.458025 2026] [:error] [pid 4365:tid 4396] [client 104.208.65.11:15241] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aVo2y8Mi25XHOoMs4mdi_AAAAYE"]
[Sun Jan 04 17:45:47.694614 2026] [:error] [pid 1020:tid 1023] [client 104.208.65.11:15429] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVo2y1zz6-t0R3_Ito01oQAAAUA"]
[Sun Jan 04 17:45:47.935491 2026] [:error] [pid 1020:tid 1037] [client 104.208.65.11:15417] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVo2y1zz6-t0R3_Ito01ogAAAU4"]
[Sun Jan 04 17:45:48.168815 2026] [:error] [pid 1020:tid 1044] [client 104.208.65.11:16580] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVo2zFzz6-t0R3_Ito01owAAAVU"]
[Sun Jan 04 17:45:48.401380 2026] [:error] [pid 1020:tid 1029] [client 104.208.65.11:15360] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aVo2zFzz6-t0R3_Ito01pQAAAUY"]
[Sun Jan 04 17:45:48.635138 2026] [:error] [pid 1020:tid 1034] [client 104.208.65.11:15300] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVo2zFzz6-t0R3_Ito01pwAAAUs"]
[Sun Jan 04 17:45:48.880301 2026] [:error] [pid 1020:tid 1036] [client 104.208.65.11:15465] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVo2zFzz6-t0R3_Ito01qQAAAU0"]
[Sun Jan 04 17:45:49.139621 2026] [:error] [pid 56796:tid 56816] [client 104.208.65.11:15425] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVo2zYXa4dVs9ML_oAYBtAAAAdE"]
[Sun Jan 04 17:45:49.372243 2026] [:error] [pid 4333:tid 4352] [client 104.208.65.11:15361] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aVo2zTAH-zZWAfquimAHHwAAABA"]
[Sun Jan 04 17:45:49.604423 2026] [:error] [pid 4333:tid 4342] [client 104.208.65.11:15362] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVo2zTAH-zZWAfquimAHIQAAAAY"]
[Sun Jan 04 17:45:49.836267 2026] [:error] [pid 59250:tid 59266] [client 104.208.65.11:15473] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVo2zfPJ-KGeNWdqpudYNAAAAMs"]
[Sun Jan 04 17:45:50.071626 2026] [:error] [pid 4365:tid 4401] [client 104.208.65.11:15381] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVo2zsMi25XHOoMs4mdjAQAAAYY"]
[Sun Jan 04 17:45:50.304976 2026] [:error] [pid 4333:tid 4343] [client 104.208.65.11:15343] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uana.php"] [unique_id "aVo2zjAH-zZWAfquimAHKAAAAAc"]
[Sun Jan 04 17:45:50.538197 2026] [:error] [pid 4426:tid 4435] [client 104.208.65.11:15461] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVo2zpAfkrNbrfBUY5VJ1wAAAkU"]
[Sun Jan 04 17:45:50.785440 2026] [:error] [pid 4333:tid 4345] [client 104.208.65.11:15405] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVo2zjAH-zZWAfquimAHLAAAAAk"]
[Sun Jan 04 17:45:51.017977 2026] [:error] [pid 4426:tid 4449] [client 104.208.65.11:15368] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVo2z5AfkrNbrfBUY5VJ2AAAAlM"]
[Sun Jan 04 17:45:51.260439 2026] [:error] [pid 4426:tid 4448] [client 104.208.65.11:16600] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aVo2z5AfkrNbrfBUY5VJ2QAAAlI"]
[Sun Jan 04 17:45:51.492700 2026] [:error] [pid 4426:tid 4437] [client 104.208.65.11:16521] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVo2z5AfkrNbrfBUY5VJ2wAAAkc"]
[Sun Jan 04 17:45:51.728707 2026] [:error] [pid 4426:tid 4436] [client 104.208.65.11:15313] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVo2z5AfkrNbrfBUY5VJ3AAAAkY"]
[Sun Jan 04 17:45:51.962271 2026] [:error] [pid 4426:tid 4440] [client 104.208.65.11:15367] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVo2z5AfkrNbrfBUY5VJ3QAAAko"]
[Sun Jan 04 17:45:52.195991 2026] [:error] [pid 4426:tid 4434] [client 104.208.65.11:15406] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aVo20JAfkrNbrfBUY5VJ3gAAAkQ"]
[Sun Jan 04 17:45:52.431385 2026] [:error] [pid 15480:tid 15495] [client 104.208.65.11:15402] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVo20BBWKIu3SdvwTFicwgAAAI0"]
[Sun Jan 04 17:45:52.676734 2026] [:error] [pid 4333:tid 4341] [client 104.208.65.11:16605] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVo20DAH-zZWAfquimAHNwAAAAU"]
[Sun Jan 04 17:45:52.909850 2026] [:error] [pid 15480:tid 15492] [client 104.208.65.11:15389] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVo20BBWKIu3SdvwTFicxQAAAIo"]
[Sun Jan 04 17:45:53.147316 2026] [:error] [pid 4427:tid 4471] [client 104.208.65.11:15238] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aVo20T-T5ydE4nJe9DdFUgAAA04"]
[Sun Jan 04 17:45:53.384871 2026] [:error] [pid 4427:tid 4462] [client 104.208.65.11:15302] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVo20T-T5ydE4nJe9DdFUwAAA0U"]
[Sun Jan 04 17:45:53.617096 2026] [:error] [pid 4426:tid 4441] [client 104.208.65.11:15383] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVo20ZAfkrNbrfBUY5VJ4AAAAks"]
[Sun Jan 04 17:45:53.850372 2026] [:error] [pid 15480:tid 15484] [client 104.208.65.11:15422] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVo20RBWKIu3SdvwTFicxgAAAII"]
[Sun Jan 04 17:45:54.083378 2026] [:error] [pid 4333:tid 4347] [client 104.208.65.11:15251] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aVo20jAH-zZWAfquimAHOgAAAAs"]
[Sun Jan 04 17:45:54.319154 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:15320] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVo20pAfkrNbrfBUY5VJ4QAAAlA"]
[Sun Jan 04 17:45:54.561115 2026] [:error] [pid 64248:tid 64254] [client 104.208.65.11:15481] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVo20sZZ_5Iet2g0ae34ugAAAEQ"]
[Sun Jan 04 17:45:54.794742 2026] [:error] [pid 64248:tid 64262] [client 104.208.65.11:15312] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVo20sZZ_5Iet2g0ae34uwAAAEw"]
[Sun Jan 04 17:45:55.028654 2026] [:error] [pid 4426:tid 4432] [client 104.208.65.11:15349] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aVo205AfkrNbrfBUY5VJ4wAAAkI"]
[Sun Jan 04 17:45:55.276875 2026] [:error] [pid 1020:tid 1024] [client 104.208.65.11:15407] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVo201zz6-t0R3_Ito01qwAAAUE"]
[Sun Jan 04 17:45:55.532775 2026] [:error] [pid 59250:tid 59277] [client 104.208.65.11:15346] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVo20_PJ-KGeNWdqpudYNgAAANY"]
[Sun Jan 04 17:45:55.765785 2026] [:error] [pid 4427:tid 4459] [client 104.208.65.11:15354] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVo20z-T5ydE4nJe9DdFVQAAA0I"]
[Sun Jan 04 17:45:55.999219 2026] [:error] [pid 15480:tid 15488] [client 104.208.65.11:16607] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-rex4.php7"] [unique_id "aVo20xBWKIu3SdvwTFicyQAAAIY"]
[Sun Jan 04 17:45:56.233214 2026] [:error] [pid 4426:tid 4435] [client 104.208.65.11:15309] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVo21JAfkrNbrfBUY5VJ5gAAAkU"]
[Sun Jan 04 17:45:56.468827 2026] [:error] [pid 1020:tid 1033] [client 104.208.65.11:15437] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVo21Fzz6-t0R3_Ito01rQAAAUo"]
[Sun Jan 04 17:45:56.705099 2026] [:error] [pid 15480:tid 15490] [client 104.208.65.11:16612] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVo21BBWKIu3SdvwTFicywAAAIg"]
[Sun Jan 04 17:45:56.938082 2026] [:error] [pid 4427:tid 4466] [client 104.208.65.11:15471] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aVo21D-T5ydE4nJe9DdFVgAAA0k"]
[Sun Jan 04 17:45:57.171682 2026] [:error] [pid 4333:tid 4350] [client 104.208.65.11:15386] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVo21TAH-zZWAfquimAHSAAAAA4"]
[Sun Jan 04 17:45:57.405342 2026] [:error] [pid 59250:tid 59255] [client 104.208.65.11:15364] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVo21fPJ-KGeNWdqpudYOAAAAMA"]
[Sun Jan 04 17:45:57.637386 2026] [:error] [pid 15480:tid 15504] [client 104.208.65.11:15444] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVo21RBWKIu3SdvwTFiczQAAAJY"]
[Sun Jan 04 17:45:57.870567 2026] [:error] [pid 1020:tid 1043] [client 104.208.65.11:15382] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aVo21Vzz6-t0R3_Ito01rwAAAVQ"]
[Sun Jan 04 17:45:58.104041 2026] [:error] [pid 4365:tid 4396] [client 104.208.65.11:15384] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVo21sMi25XHOoMs4mdjBQAAAYE"]
[Sun Jan 04 17:45:58.337497 2026] [:error] [pid 64248:tid 64259] [client 104.208.65.11:15355] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVo21sZZ_5Iet2g0ae34vAAAAEk"]
[Sun Jan 04 17:45:58.570337 2026] [:error] [pid 59250:tid 59270] [client 104.208.65.11:15325] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVo21vPJ-KGeNWdqpudYOgAAAM8"]
[Sun Jan 04 17:45:58.826309 2026] [:error] [pid 15480:tid 15500] [client 104.208.65.11:15486] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/warm.PhP7"] [unique_id "aVo21hBWKIu3SdvwTFiczgAAAJI"]
[Sun Jan 04 17:45:59.182858 2026] [:error] [pid 4426:tid 4437] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php
[Sun Jan 04 17:45:59.303522 2026] [:error] [pid 4426:tid 4440] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/pekok.php
[Sun Jan 04 17:45:59.423526 2026] [:error] [pid 4426:tid 4434] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Jan 04 17:45:59.544342 2026] [:error] [pid 4426:tid 4450] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php
[Sun Jan 04 17:45:59.664051 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/cart.php
[Sun Jan 04 17:45:59.786503 2026] [:error] [pid 4426:tid 4453] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/compare.php
[Sun Jan 04 17:45:59.906258 2026] [:error] [pid 4426:tid 4447] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Jan 04 17:46:00.026667 2026] [:error] [pid 4426:tid 4432] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Sun Jan 04 17:46:00.148609 2026] [:error] [pid 4426:tid 4431] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Jan 04 17:46:00.269065 2026] [:error] [pid 4426:tid 4449] [client 104.208.65.11:15397] File does not exist: /usr/local/apache/htdocs/suspended-page/atom.php
[Sun Jan 04 17:46:00.385246 2026] [:error] [pid 4426:tid 4454] [client 104.208.65.11:15397] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVo22JAfkrNbrfBUY5VJ-wAAAlg"]
[Sun Jan 04 17:46:00.618515 2026] [:error] [pid 4365:tid 4417] [client 104.208.65.11:15324] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVo22MMi25XHOoMs4mdjBwAAAZY"]
[Sun Jan 04 17:46:00.851574 2026] [:error] [pid 4365:tid 4408] [client 104.208.65.11:15482] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVo22MMi25XHOoMs4mdjCAAAAY0"]
[Sun Jan 04 17:46:01.095921 2026] [:error] [pid 4365:tid 4404] [client 104.208.65.11:15387] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/case.php"] [unique_id "aVo22cMi25XHOoMs4mdjCQAAAYk"]
[Sun Jan 04 17:46:01.329467 2026] [:error] [pid 4333:tid 4351] [client 104.208.65.11:15350] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVo22TAH-zZWAfquimAHSwAAAA8"]
[Sun Jan 04 17:46:01.566886 2026] [:error] [pid 4426:tid 4442] [client 104.208.65.11:15476] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVo22ZAfkrNbrfBUY5VJ_wAAAkw"]
[Sun Jan 04 17:46:01.802284 2026] [:error] [pid 4426:tid 4444] [client 104.208.65.11:15337] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVo22ZAfkrNbrfBUY5VKAAAAAk4"]
[Sun Jan 04 17:46:02.038310 2026] [:error] [pid 1020:tid 1037] [client 104.208.65.11:15247] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aVo22lzz6-t0R3_Ito01sAAAAU4"]
[Sun Jan 04 17:46:02.275091 2026] [:error] [pid 1020:tid 1044] [client 104.208.65.11:16574] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVo22lzz6-t0R3_Ito01sQAAAVU"]
[Sun Jan 04 17:46:02.509151 2026] [:error] [pid 1080:tid 1157] [client 104.208.65.11:15308] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVo22iu2Hm9AcIiqg0q0kgAAA9I"]
[Sun Jan 04 17:46:02.742493 2026] [:error] [pid 1080:tid 1159] [client 104.208.65.11:15321] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVo22iu2Hm9AcIiqg0q0kwAAA9Q"]
[Sun Jan 04 17:46:02.974975 2026] [:error] [pid 1020:tid 1029] [client 104.208.65.11:15391] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ios.php"] [unique_id "aVo22lzz6-t0R3_Ito01sgAAAUY"]
[Sun Jan 04 17:46:03.208092 2026] [:error] [pid 1020:tid 1038] [client 104.208.65.11:15378] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVo221zz6-t0R3_Ito01swAAAU8"]
[Sun Jan 04 17:46:03.442423 2026] [:error] [pid 4365:tid 4411] [client 104.208.65.11:15338] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVo228Mi25XHOoMs4mdjDQAAAZA"]
[Sun Jan 04 17:46:03.687232 2026] [:error] [pid 4365:tid 4412] [client 104.208.65.11:15250] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVo228Mi25XHOoMs4mdjDwAAAZE"]
[Sun Jan 04 17:46:03.974308 2026] [:error] [pid 64248:tid 64274] [client 104.208.65.11:15449] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aVo228ZZ_5Iet2g0ae34wgAAAFg"]
[Sun Jan 04 17:46:04.272063 2026] [:error] [pid 64248:tid 64273] [client 104.208.65.11:15173] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVo23MZZ_5Iet2g0ae34xAAAAFc"]
[Sun Jan 04 17:46:04.505072 2026] [:error] [pid 59250:tid 59273] [client 104.208.65.11:15411] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVo23PPJ-KGeNWdqpudYPAAAANI"]
[Sun Jan 04 17:46:04.756459 2026] [:error] [pid 1080:tid 1154] [client 104.208.65.11:15315] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVo23Cu2Hm9AcIiqg0q0lgAAA88"]
[Sun Jan 04 17:46:05.010183 2026] [:error] [pid 56796:tid 56818] [client 104.208.65.11:15326] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aVo23YXa4dVs9ML_oAYBugAAAdM"]
[Sun Jan 04 17:46:05.255973 2026] [:error] [pid 64248:tid 64264] [client 104.208.65.11:15390] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVo23cZZ_5Iet2g0ae34xgAAAE4"]
[Sun Jan 04 17:46:05.491329 2026] [:error] [pid 4365:tid 4419] [client 104.208.65.11:15413] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVo23cMi25XHOoMs4mdjEAAAAZg"]
[Sun Jan 04 17:46:05.726660 2026] [:error] [pid 1080:tid 1145] [client 104.208.65.11:15243] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVo23Su2Hm9AcIiqg0q0lwAAA8Y"]
[Sun Jan 04 17:46:05.997615 2026] [:error] [pid 4333:tid 4352] [client 104.208.65.11:15412] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aVo23TAH-zZWAfquimAHTQAAABA"]
[Sun Jan 04 17:46:06.231545 2026] [:error] [pid 1080:tid 1156] [client 104.208.65.11:15256] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVo23iu2Hm9AcIiqg0q0mQAAA9E"]
[Sun Jan 04 17:46:06.465794 2026] [:error] [pid 56796:tid 56823] [client 104.208.65.11:15423] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVo23oXa4dVs9ML_oAYBvAAAAdg"]
[Sun Jan 04 17:46:06.703194 2026] [:error] [pid 15480:tid 15486] [client 104.208.65.11:15239] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVo23hBWKIu3SdvwTFic0QAAAIQ"]
[Sun Jan 04 17:46:06.936033 2026] [:error] [pid 1080:tid 1152] [client 104.208.65.11:15348] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aVo23iu2Hm9AcIiqg0q0mgAAA80"]
[Sun Jan 04 17:46:07.175298 2026] [:error] [pid 64248:tid 64263] [client 104.208.65.11:15299] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVo238ZZ_5Iet2g0ae34xwAAAE0"]
[Sun Jan 04 17:46:07.410231 2026] [:error] [pid 15480:tid 15491] [client 104.208.65.11:15352] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVo23xBWKIu3SdvwTFic0gAAAIk"]
[Sun Jan 04 17:46:07.647129 2026] [:error] [pid 4333:tid 4357] [client 104.208.65.11:15418] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVo23zAH-zZWAfquimAHTgAAABU"]
[Sun Jan 04 17:46:07.880070 2026] [:error] [pid 1080:tid 1144] [client 104.208.65.11:15347] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aVo23yu2Hm9AcIiqg0q0nAAAA8U"]
[Sun Jan 04 17:46:08.127477 2026] [:error] [pid 56796:tid 56810] [client 104.208.65.11:15342] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVo24IXa4dVs9ML_oAYBvgAAAcs"]
[Sun Jan 04 17:46:08.360435 2026] [:error] [pid 56796:tid 56801] [client 104.208.65.11:15483] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVo24IXa4dVs9ML_oAYBvwAAAcI"]
[Sun Jan 04 17:46:08.592668 2026] [:error] [pid 4426:tid 4432] [client 104.208.65.11:15329] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVo24JAfkrNbrfBUY5VKAwAAAkI"]
[Sun Jan 04 17:46:08.825242 2026] [:error] [pid 64248:tid 64261] [client 104.208.65.11:15377] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat1.php"] [unique_id "aVo24MZZ_5Iet2g0ae34yAAAAEs"]
[Sun Jan 04 17:46:09.061968 2026] [:error] [pid 4426:tid 4435] [client 104.208.65.11:15485] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVo24ZAfkrNbrfBUY5VKBQAAAkU"]
[Sun Jan 04 17:46:09.303855 2026] [:error] [pid 1080:tid 1147] [client 104.208.65.11:15242] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVo24Su2Hm9AcIiqg0q0nwAAA8g"]
[Sun Jan 04 17:46:09.586492 2026] [:error] [pid 56796:tid 56813] [client 104.208.65.11:15235] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVo24YXa4dVs9ML_oAYBwQAAAc4"]
[Sun Jan 04 17:46:09.820653 2026] [:error] [pid 1080:tid 1149] [client 104.208.65.11:15311] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "aVo24Su2Hm9AcIiqg0q0oQAAA8o"]
[Sun Jan 04 17:46:10.131298 2026] [:error] [pid 4365:tid 4415] [client 104.208.65.11:15358] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVo24sMi25XHOoMs4mdjEwAAAZQ"]
[Sun Jan 04 17:46:10.378809 2026] [:error] [pid 1020:tid 1042] [client 104.208.65.11:15359] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVo24lzz6-t0R3_Ito01uAAAAVM"]
[Sun Jan 04 17:46:10.616645 2026] [:error] [pid 1080:tid 1159] [client 104.208.65.11:15316] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVo24iu2Hm9AcIiqg0q0pQAAA9Q"]
[Sun Jan 04 17:46:10.869427 2026] [:error] [pid 59250:tid 59275] [client 104.208.65.11:15318] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "aVo24vPJ-KGeNWdqpudYSQAAANQ"]
[Sun Jan 04 17:46:11.193867 2026] [:error] [pid 59250:tid 59267] [client 104.208.65.11:15323] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVo24_PJ-KGeNWdqpudYSwAAAMw"]
[Sun Jan 04 17:46:11.446644 2026] [:error] [pid 4333:tid 4356] [client 104.208.65.11:15245] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVo24zAH-zZWAfquimAHUQAAABQ"]
[Sun Jan 04 17:46:11.703612 2026] [:error] [pid 1080:tid 1153] [client 104.208.65.11:16547] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVo24yu2Hm9AcIiqg0q0qgAAA84"]
[Sun Jan 04 17:46:11.946975 2026] [:error] [pid 4427:tid 4469] [client 104.208.65.11:15249] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aVo24z-T5ydE4nJe9DdFXwAAA0w"]
[Sun Jan 04 17:46:12.180860 2026] [:error] [pid 59250:tid 59257] [client 104.208.65.11:15188] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo25PPJ-KGeNWdqpudYUAAAAMI"]
[Sun Jan 04 17:46:12.415874 2026] [:error] [pid 64248:tid 64260] [client 104.208.65.11:15330] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo25MZZ_5Iet2g0ae34ywAAAEo"]
[Sun Jan 04 17:46:12.659930 2026] [:error] [pid 4427:tid 4476] [client 104.208.65.11:15341] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo25D-T5ydE4nJe9DdFYQAAA1M"]
[Sun Jan 04 17:46:12.893364 2026] [:error] [pid 1020:tid 1045] [client 104.208.65.11:15357] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aVo25Fzz6-t0R3_Ito01uQAAAVY"]
[Sun Jan 04 17:46:13.126508 2026] [:error] [pid 4426:tid 4449] [client 104.208.65.11:15440] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVo25ZAfkrNbrfBUY5VKBgAAAlM"]
[Sun Jan 04 17:46:13.360522 2026] [:error] [pid 4333:tid 4349] [client 104.208.65.11:15310] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVo25TAH-zZWAfquimAHUgAAAA0"]
[Sun Jan 04 17:46:13.607869 2026] [:error] [pid 64248:tid 64272] [client 104.208.65.11:15305] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVo25cZZ_5Iet2g0ae34zQAAAFY"]
[Sun Jan 04 17:46:13.853992 2026] [:error] [pid 4427:tid 4477] [client 104.208.65.11:15351] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aVo25T-T5ydE4nJe9DdFYwAAA1Q"]
[Sun Jan 04 17:46:14.087387 2026] [:error] [pid 4426:tid 4454] [client 104.208.65.11:15189] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo25pAfkrNbrfBUY5VKBwAAAlg"]
[Sun Jan 04 17:46:14.384709 2026] [:error] [pid 1020:tid 1032] [client 104.208.65.11:15394] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo25lzz6-t0R3_Ito01ugAAAUk"]
[Sun Jan 04 17:46:14.630502 2026] [:error] [pid 59250:tid 59276] [client 104.208.65.11:16626] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo25vPJ-KGeNWdqpudYVAAAANU"]
[Sun Jan 04 17:46:14.883128 2026] [:error] [pid 59250:tid 59265] [client 104.208.65.11:16581] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aVo25vPJ-KGeNWdqpudYVwAAAMo"]
[Sun Jan 04 17:46:15.129753 2026] [:error] [pid 64248:tid 64266] [client 104.208.65.11:15322] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aVo258ZZ_5Iet2g0ae34zgAAAFA"]
[Sun Jan 04 17:46:15.409105 2026] [:error] [pid 4427:tid 4471] [client 104.208.65.11:15414] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aVo25z-T5ydE4nJe9DdFZwAAA04"]
[Sun Jan 04 17:46:15.642259 2026] [:error] [pid 59250:tid 59266] [client 104.208.65.11:15283] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aVo25_PJ-KGeNWdqpudYWgAAAMs"]
[Sun Jan 04 17:46:15.878981 2026] [:error] [pid 4427:tid 4473] [client 104.208.65.11:15332] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "aVo25z-T5ydE4nJe9DdFaQAAA1A"]
[Sun Jan 04 17:46:16.135339 2026] [:error] [pid 4427:tid 4466] [client 104.208.65.11:15286] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aVo26D-T5ydE4nJe9DdFagAAA0k"]
[Sun Jan 04 17:46:16.400086 2026] [:error] [pid 56796:tid 56800] [client 104.208.65.11:15317] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aVo26IXa4dVs9ML_oAYB1QAAAcE"]
[Sun Jan 04 17:46:16.663716 2026] [:error] [pid 4365:tid 4414] [client 104.208.65.11:15253] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aVo26MMi25XHOoMs4mdjFwAAAZM"]
[Sun Jan 04 17:46:16.934179 2026] [:error] [pid 64248:tid 64256] [client 104.208.65.11:15263] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aVo26MZZ_5Iet2g0ae340AAAAEY"]
[Sun Jan 04 17:46:17.182782 2026] [:error] [pid 15480:tid 15484] [client 104.208.65.11:15205] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aVo26RBWKIu3SdvwTFic1gAAAII"]
[Sun Jan 04 17:46:17.481176 2026] [:error] [pid 4426:tid 4430] [client 104.208.65.11:15271] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aVo26ZAfkrNbrfBUY5VKCgAAAkA"]
[Sun Jan 04 17:46:17.732438 2026] [:error] [pid 4427:tid 4477] [client 104.208.65.11:15279] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aVo26T-T5ydE4nJe9DdFcQAAA1Q"]
[Sun Jan 04 17:46:17.970291 2026] [:error] [pid 59250:tid 59272] [client 104.208.65.11:15469] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aVo26fPJ-KGeNWdqpudYXwAAANE"]
[Sun Jan 04 17:46:18.220346 2026] [:error] [pid 4427:tid 4478] [client 104.208.65.11:15335] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aVo26j-T5ydE4nJe9DdFdQAAA1U"]
[Sun Jan 04 17:46:18.477838 2026] [:error] [pid 59250:tid 59258] [client 104.208.65.11:15353] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aVo26vPJ-KGeNWdqpudYYgAAAMM"]
[Sun Jan 04 17:46:18.722700 2026] [:error] [pid 59250:tid 59276] [client 104.208.65.11:15294] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aVo26vPJ-KGeNWdqpudYYwAAANU"]
[Sun Jan 04 17:46:18.961079 2026] [:error] [pid 59250:tid 59270] [client 104.208.65.11:15334] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aVo26vPJ-KGeNWdqpudYZAAAAM8"]
[Sun Jan 04 17:46:19.203691 2026] [:error] [pid 1020:tid 1041] [client 104.208.65.11:15252] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aVo261zz6-t0R3_Ito01uwAAAVI"]
[Sun Jan 04 17:46:19.436885 2026] [:error] [pid 15480:tid 15494] [client 104.208.65.11:15333] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aVo26xBWKIu3SdvwTFic1wAAAIw"]
[Sun Jan 04 17:46:19.677749 2026] [:error] [pid 1020:tid 1024] [client 104.208.65.11:15193] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aVo261zz6-t0R3_Ito01vAAAAUE"]
[Sun Jan 04 17:46:19.912595 2026] [:error] [pid 4426:tid 4443] [client 104.208.65.11:16514] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aVo265AfkrNbrfBUY5VKDAAAAk0"]
[Sun Jan 04 17:46:20.156381 2026] [:error] [pid 4426:tid 4441] [client 104.208.65.11:15303] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVo27JAfkrNbrfBUY5VKEAAAAks"]
[Sun Jan 04 17:46:20.416727 2026] [:error] [pid 59250:tid 59260] [client 104.208.65.11:15240] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVo27PPJ-KGeNWdqpudYaAAAAMU"]
[Sun Jan 04 17:46:20.653814 2026] [:error] [pid 1020:tid 1026] [client 104.208.65.11:15237] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVo27Fzz6-t0R3_Ito01vQAAAUM"]
[Sun Jan 04 17:46:20.895284 2026] [:error] [pid 4426:tid 4432] [client 104.208.65.11:15356] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aVo27JAfkrNbrfBUY5VKEwAAAkI"]
[Sun Jan 04 17:46:21.131962 2026] [:error] [pid 64248:tid 64271] [client 104.208.65.11:15275] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aVo27cZZ_5Iet2g0ae340QAAAFU"]
[Sun Jan 04 17:46:21.374043 2026] [:error] [pid 56796:tid 56811] [client 104.208.65.11:15437] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aVo27YXa4dVs9ML_oAYB4AAAAcw"]
[Sun Jan 04 17:46:21.607499 2026] [:error] [pid 1020:tid 1043] [client 104.208.65.11:16590] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aVo27Vzz6-t0R3_Ito01vwAAAVQ"]
[Sun Jan 04 17:46:21.840513 2026] [:error] [pid 1020:tid 1027] [client 104.208.65.11:15260] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aVo27Vzz6-t0R3_Ito01wAAAAUQ"]
[Sun Jan 04 17:46:22.073119 2026] [:error] [pid 4333:tid 4337] [client 104.208.65.11:15345] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVo27jAH-zZWAfquimAHVQAAAAE"]
[Sun Jan 04 17:46:22.309834 2026] [:error] [pid 1020:tid 1025] [client 104.208.65.11:15273] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVo27lzz6-t0R3_Ito01wgAAAUI"]
[Sun Jan 04 17:46:22.542649 2026] [:error] [pid 4426:tid 4442] [client 104.208.65.11:15185] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVo27pAfkrNbrfBUY5VKGAAAAkw"]
[Sun Jan 04 17:46:22.776012 2026] [:error] [pid 56796:tid 56822] [client 104.208.65.11:15236] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aVo27oXa4dVs9ML_oAYB4gAAAdc"]
[Sun Jan 04 17:46:23.015260 2026] [:error] [pid 56796:tid 56803] [client 104.208.65.11:15287] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aVo274Xa4dVs9ML_oAYB4wAAAcQ"]
[Sun Jan 04 17:46:23.247528 2026] [:error] [pid 4426:tid 4430] [client 104.208.65.11:15259] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aVo275AfkrNbrfBUY5VKGQAAAkA"]
[Sun Jan 04 17:46:23.480785 2026] [:error] [pid 4426:tid 4448] [client 104.208.65.11:15314] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aVo275AfkrNbrfBUY5VKGgAAAlI"]
[Sun Jan 04 17:46:23.714440 2026] [:error] [pid 56796:tid 56800] [client 104.208.65.11:15290] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aVo274Xa4dVs9ML_oAYB5QAAAcE"]
[Sun Jan 04 17:46:23.949108 2026] [:error] [pid 4365:tid 4404] [client 104.208.65.11:15176] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aVo278Mi25XHOoMs4mdjGQAAAYk"]
[Sun Jan 04 17:46:24.181217 2026] [:error] [pid 59250:tid 59263] [client 104.208.65.11:15336] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aVo28PPJ-KGeNWdqpudYbgAAAMg"]
[Sun Jan 04 17:46:24.418280 2026] [:error] [pid 4426:tid 4440] [client 104.208.65.11:15281] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aVo28JAfkrNbrfBUY5VKHgAAAko"]
[Sun Jan 04 17:46:24.679196 2026] [:error] [pid 59250:tid 59268] [client 104.208.65.11:15288] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/go.php"] [unique_id "aVo28PPJ-KGeNWdqpudYcAAAAM0"]
[Sun Jan 04 17:46:24.914293 2026] [:error] [pid 4426:tid 4441] [client 104.208.65.11:15184] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVo28JAfkrNbrfBUY5VKHwAAAks"]
[Sun Jan 04 17:46:25.147316 2026] [:error] [pid 56796:tid 56806] [client 104.208.65.11:15112] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVo28YXa4dVs9ML_oAYB6wAAAcc"]
[Sun Jan 04 17:46:25.381649 2026] [:error] [pid 1080:tid 1153] [client 104.208.65.11:15269] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVo28Su2Hm9AcIiqg0q0vAAAA84"]
[Sun Jan 04 17:46:25.615012 2026] [:error] [pid 4426:tid 4453] [client 104.208.65.11:15233] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aVo28ZAfkrNbrfBUY5VKIQAAAlc"]
[Sun Jan 04 17:46:25.852373 2026] [:error] [pid 4333:tid 4352] [client 104.208.65.11:15168] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVo28TAH-zZWAfquimAHWwAAABA"]
[Sun Jan 04 17:46:26.084181 2026] [:error] [pid 4426:tid 4431] [client 104.208.65.11:15104] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVo28pAfkrNbrfBUY5VKJgAAAkE"]
[Sun Jan 04 17:46:26.317608 2026] [:error] [pid 4426:tid 4449] [client 104.208.65.11:15291] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVo28pAfkrNbrfBUY5VKJwAAAlM"]
[Sun Jan 04 17:46:26.552002 2026] [:error] [pid 4365:tid 4402] [client 104.208.65.11:15388] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aVo28sMi25XHOoMs4mdjGgAAAYc"]
[Sun Jan 04 17:46:26.790504 2026] [:error] [pid 1080:tid 1156] [client 104.208.65.11:15457] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVo28iu2Hm9AcIiqg0q0vQAAA9E"]
[Sun Jan 04 17:46:27.023514 2026] [:error] [pid 59250:tid 59269] [client 104.208.65.11:15169] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVo28_PJ-KGeNWdqpudYcgAAAM4"]
[Sun Jan 04 17:46:27.262157 2026] [:error] [pid 59250:tid 59262] [client 104.208.65.11:15306] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVo28_PJ-KGeNWdqpudYcwAAAMc"]
[Sun Jan 04 17:46:27.497982 2026] [:error] [pid 4427:tid 4461] [client 104.208.65.11:16579] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aVo28z-T5ydE4nJe9DdFdwAAA0Q"]
[Sun Jan 04 17:46:27.756141 2026] [:error] [pid 64248:tid 64253] [client 104.208.65.11:15207] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVo288ZZ_5Iet2g0ae341QAAAEM"]
[Sun Jan 04 17:46:28.061957 2026] [:error] [pid 59250:tid 59266] [client 104.208.65.11:15328] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVo29PPJ-KGeNWdqpudYdQAAAMs"]
[Sun Jan 04 17:46:28.417883 2026] [:error] [pid 59250:tid 59265] [client 104.208.65.11:15248] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVo29PPJ-KGeNWdqpudYdgAAAMo"]
[Sun Jan 04 17:46:28.666773 2026] [:error] [pid 64248:tid 64261] [client 104.208.65.11:15274] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aVo29MZZ_5Iet2g0ae343AAAAEs"]
[Sun Jan 04 17:46:28.971453 2026] [:error] [pid 4426:tid 4437] [client 104.208.65.11:15270] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVo29JAfkrNbrfBUY5VKKwAAAkc"]
[Sun Jan 04 17:46:29.216105 2026] [:error] [pid 4365:tid 4416] [client 104.208.65.11:15297] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVo29cMi25XHOoMs4mdjHQAAAZU"]
[Sun Jan 04 17:46:29.474766 2026] [:error] [pid 64248:tid 64262] [client 104.208.65.11:15181] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVo29cZZ_5Iet2g0ae343QAAAEw"]
[Sun Jan 04 17:46:29.763458 2026] [:error] [pid 64248:tid 64267] [client 104.208.65.11:15264] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aVo29cZZ_5Iet2g0ae343gAAAFE"]
[Sun Jan 04 17:46:30.074779 2026] [:error] [pid 56796:tid 56821] [client 104.208.65.11:15190] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVo29oXa4dVs9ML_oAYB7wAAAdY"]
[Sun Jan 04 17:46:30.311380 2026] [:error] [pid 64248:tid 64251] [client 104.208.65.11:15114] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVo29sZZ_5Iet2g0ae343wAAAEE"]
[Sun Jan 04 17:46:30.604457 2026] [:error] [pid 4427:tid 4475] [client 104.208.65.11:15179] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVo29j-T5ydE4nJe9DdFeQAAA1I"]
[Sun Jan 04 17:46:30.895261 2026] [:error] [pid 4427:tid 4460] [client 104.208.65.11:15206] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aVo29j-T5ydE4nJe9DdFegAAA0M"]
[Sun Jan 04 17:46:31.136467 2026] [:error] [pid 59250:tid 59273] [client 104.208.65.11:15272] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVo29_PJ-KGeNWdqpudYfQAAANI"]
[Sun Jan 04 17:46:31.411049 2026] [:error] [pid 64248:tid 64266] [client 104.208.65.11:15201] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVo298ZZ_5Iet2g0ae344QAAAFA"]
[Sun Jan 04 17:46:31.656558 2026] [:error] [pid 4427:tid 4464] [client 104.208.65.11:15223] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVo29z-T5ydE4nJe9DdFfAAAA0c"]
[Sun Jan 04 17:46:31.974602 2026] [:error] [pid 1080:tid 1142] [client 104.208.65.11:15167] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aVo29yu2Hm9AcIiqg0q0wAAAA8M"]
[Sun Jan 04 17:46:32.207238 2026] [:error] [pid 64248:tid 64265] [client 104.208.65.11:15192] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVo2-MZZ_5Iet2g0ae345AAAAE8"]
[Sun Jan 04 17:46:32.453658 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:15319] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVo2-JAfkrNbrfBUY5VKMQAAAlA"]
[Sun Jan 04 17:46:32.688895 2026] [:error] [pid 4426:tid 4432] [client 104.208.65.11:15301] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVo2-JAfkrNbrfBUY5VKMgAAAkI"]
[Sun Jan 04 17:46:33.011954 2026] [:error] [pid 4427:tid 4469] [client 104.208.65.11:15261] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aVo2-T-T5ydE4nJe9DdFfQAAA0w"]
[Sun Jan 04 17:46:33.308189 2026] [:error] [pid 1080:tid 1143] [client 104.208.65.11:15212] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVo2-Su2Hm9AcIiqg0q0wQAAA8Q"]
[Sun Jan 04 17:46:33.700040 2026] [:error] [pid 4427:tid 4477] [client 104.208.65.11:15277] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVo2-T-T5ydE4nJe9DdFgAAAA1Q"]
[Sun Jan 04 17:46:34.959920 2026] [:error] [pid 4426:tid 4445] [client 104.208.65.11:15229] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVo2-pAfkrNbrfBUY5VKNAAAAk8"]
[Sun Jan 04 17:46:35.212326 2026] [:error] [pid 64248:tid 64267] [client 104.208.65.11:15282] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxl.php"] [unique_id "aVo2-8ZZ_5Iet2g0ae347AAAAFE"]
[Sun Jan 04 17:46:35.446072 2026] [:error] [pid 1080:tid 1158] [client 104.208.65.11:15268] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVo2-yu2Hm9AcIiqg0q0wgAAA9M"]
[Sun Jan 04 17:46:35.682085 2026] [:error] [pid 1080:tid 1147] [client 104.208.65.11:15227] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVo2-yu2Hm9AcIiqg0q0wwAAA8g"]
[Sun Jan 04 17:46:35.939741 2026] [:error] [pid 64248:tid 64260] [client 104.208.65.11:15195] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVo2-8ZZ_5Iet2g0ae347QAAAEo"]
[Sun Jan 04 17:46:36.174501 2026] [:error] [pid 1020:tid 1029] [client 104.208.65.11:15265] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aVo2_Fzz6-t0R3_Ito01xgAAAUY"]
[Sun Jan 04 17:46:36.406392 2026] [:error] [pid 4426:tid 4433] [client 104.208.65.11:15200] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVo2_JAfkrNbrfBUY5VKNQAAAkM"]
[Sun Jan 04 17:46:36.648119 2026] [:error] [pid 64248:tid 64250] [client 104.208.65.11:15226] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVo2_MZZ_5Iet2g0ae347wAAAEA"]
[Sun Jan 04 17:46:36.880537 2026] [:error] [pid 4333:tid 4350] [client 104.208.65.11:15262] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVo2_DAH-zZWAfquimAHXwAAAA4"]
[Sun Jan 04 17:46:37.140202 2026] [:error] [pid 15480:tid 15482] [client 104.208.65.11:15280] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aVo2_RBWKIu3SdvwTFic3QAAAIA"]
[Sun Jan 04 17:46:37.375528 2026] [:error] [pid 1020:tid 1038] [client 104.208.65.11:15230] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVo2_Vzz6-t0R3_Ito01xwAAAU8"]
[Sun Jan 04 17:46:37.609927 2026] [:error] [pid 4426:tid 4442] [client 104.208.65.11:15255] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVo2_ZAfkrNbrfBUY5VKNgAAAkw"]
[Sun Jan 04 17:46:37.842733 2026] [:error] [pid 4426:tid 4438] [client 104.208.65.11:15107] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVo2_ZAfkrNbrfBUY5VKNwAAAkg"]
[Sun Jan 04 17:46:38.077428 2026] [:error] [pid 4426:tid 4451] [client 104.208.65.11:15234] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aVo2_pAfkrNbrfBUY5VKOQAAAlU"]
[Sun Jan 04 17:46:38.321752 2026] [:error] [pid 4426:tid 4443] [client 104.208.65.11:15182] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVo2_pAfkrNbrfBUY5VKOgAAAk0"]
[Sun Jan 04 17:46:38.561871 2026] [:error] [pid 4426:tid 4434] [client 104.208.65.11:15175] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVo2_pAfkrNbrfBUY5VKPAAAAkQ"]
[Sun Jan 04 17:46:38.794416 2026] [:error] [pid 1020:tid 1035] [client 104.208.65.11:15202] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVo2_lzz6-t0R3_Ito01yAAAAUw"]
[Sun Jan 04 17:46:39.032903 2026] [:error] [pid 1020:tid 1046] [client 104.208.65.11:15258] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aVo2_1zz6-t0R3_Ito01yQAAAVc"]
[Sun Jan 04 17:46:39.266255 2026] [:error] [pid 4365:tid 4405] [client 104.208.65.11:15177] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVo2_8Mi25XHOoMs4mdjHwAAAYo"]
[Sun Jan 04 17:46:39.498630 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:15148] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVo2_5AfkrNbrfBUY5VKQAAAAlA"]
[Sun Jan 04 17:46:39.732744 2026] [:error] [pid 1020:tid 1036] [client 104.208.65.11:15266] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVo2_1zz6-t0R3_Ito01ywAAAU0"]
[Sun Jan 04 17:46:39.966202 2026] [:error] [pid 1080:tid 1149] [client 104.208.65.11:15171] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aVo2_yu2Hm9AcIiqg0q0xQAAA8o"]
[Sun Jan 04 17:46:40.226562 2026] [:error] [pid 1080:tid 1161] [client 104.208.65.11:15215] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVo3ACu2Hm9AcIiqg0q0xwAAA9Y"]
[Sun Jan 04 17:46:40.468583 2026] [:error] [pid 1080:tid 1163] [client 104.208.65.11:15487] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVo3ACu2Hm9AcIiqg0q0yQAAA9g"]
[Sun Jan 04 17:46:40.705119 2026] [:error] [pid 4426:tid 4433] [client 104.208.65.11:15217] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVo3AJAfkrNbrfBUY5VKSAAAAkM"]
[Sun Jan 04 17:46:40.939115 2026] [:error] [pid 4426:tid 4438] [client 104.208.65.11:15180] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aVo3AJAfkrNbrfBUY5VKSwAAAkg"]
[Sun Jan 04 17:46:41.172340 2026] [:error] [pid 4333:tid 4347] [client 104.208.65.11:15042] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVo3ATAH-zZWAfquimAHYAAAAAs"]
[Sun Jan 04 17:46:41.405106 2026] [:error] [pid 1020:tid 1031] [client 104.208.65.11:15172] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVo3AVzz6-t0R3_Ito010gAAAUg"]
[Sun Jan 04 17:46:41.639006 2026] [:error] [pid 4333:tid 4340] [client 104.208.65.11:15344] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVo3ATAH-zZWAfquimAHYgAAAAQ"]
[Sun Jan 04 17:46:41.873432 2026] [:error] [pid 64248:tid 64258] [client 104.208.65.11:15186] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/321.php"] [unique_id "aVo3AcZZ_5Iet2g0ae349AAAAEg"]
[Sun Jan 04 17:46:42.106811 2026] [:error] [pid 4426:tid 4450] [client 104.208.65.11:15244] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVo3ApAfkrNbrfBUY5VKUAAAAlQ"]
[Sun Jan 04 17:46:42.340611 2026] [:error] [pid 4426:tid 4447] [client 104.208.65.11:15134] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVo3ApAfkrNbrfBUY5VKUQAAAlE"]
[Sun Jan 04 17:46:42.576830 2026] [:error] [pid 1020:tid 1025] [client 104.208.65.11:15128] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVo3Alzz6-t0R3_Ito010wAAAUI"]
[Sun Jan 04 17:46:42.811268 2026] [:error] [pid 1020:tid 1040] [client 104.208.65.11:15339] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aVo3Alzz6-t0R3_Ito011AAAAVE"]
[Sun Jan 04 17:46:43.044299 2026] [:error] [pid 1080:tid 1143] [client 104.208.65.11:15278] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVo3Ayu2Hm9AcIiqg0q0zwAAA8Q"]
[Sun Jan 04 17:46:43.284496 2026] [:error] [pid 4427:tid 4457] [client 104.208.65.11:15246] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVo3Az-T5ydE4nJe9DdFiQAAA0A"]
[Sun Jan 04 17:46:43.518482 2026] [:error] [pid 4426:tid 4441] [client 104.208.65.11:15044] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVo3A5AfkrNbrfBUY5VKVQAAAks"]
[Sun Jan 04 17:46:43.765651 2026] [:error] [pid 4426:tid 4448] [client 104.208.65.11:15174] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aVo3A5AfkrNbrfBUY5VKVgAAAlI"]
[Sun Jan 04 17:46:43.998302 2026] [:error] [pid 4426:tid 4440] [client 104.208.65.11:15232] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVo3A5AfkrNbrfBUY5VKWAAAAko"]
[Sun Jan 04 17:46:44.231914 2026] [:error] [pid 4426:tid 4443] [client 104.208.65.11:15267] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVo3BJAfkrNbrfBUY5VKWQAAAk0"]
[Sun Jan 04 17:46:44.465101 2026] [:error] [pid 59250:tid 59265] [client 104.208.65.11:15219] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVo3BPPJ-KGeNWdqpudYhAAAAMo"]
[Sun Jan 04 17:46:44.704347 2026] [:error] [pid 59250:tid 59271] [client 104.208.65.11:15133] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/al.php"] [unique_id "aVo3BPPJ-KGeNWdqpudYhQAAANA"]
[Sun Jan 04 17:46:44.937160 2026] [:error] [pid 4426:tid 4452] [client 104.208.65.11:15293] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVo3BJAfkrNbrfBUY5VKXAAAAlY"]
[Sun Jan 04 17:46:45.176220 2026] [:error] [pid 4426:tid 4446] [client 104.208.65.11:15152] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVo3BZAfkrNbrfBUY5VKXgAAAlA"]
[Sun Jan 04 17:46:45.416336 2026] [:error] [pid 4365:tid 4406] [client 104.208.65.11:15118] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVo3BcMi25XHOoMs4mdjIAAAAYs"]
[Sun Jan 04 17:46:45.651994 2026] [:error] [pid 4426:tid 4447] [client 104.208.65.11:15040] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aVo3BZAfkrNbrfBUY5VKXwAAAlE"]
[Sun Jan 04 17:46:45.883921 2026] [:error] [pid 4426:tid 4431] [client 104.208.65.11:15121] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVo3BZAfkrNbrfBUY5VKYQAAAkE"]
[Sun Jan 04 17:46:46.118595 2026] [:error] [pid 56796:tid 56823] [client 104.208.65.11:15047] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVo3BoXa4dVs9ML_oAYB8QAAAdg"]
[Sun Jan 04 17:46:46.351868 2026] [:error] [pid 64248:tid 64251] [client 104.208.65.11:15233] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVo3BsZZ_5Iet2g0ae34-QAAAEE"]
[Sun Jan 04 17:46:46.583933 2026] [:error] [pid 56796:tid 56813] [client 104.208.65.11:15178] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aVo3BoXa4dVs9ML_oAYB8wAAAc4"]
[Sun Jan 04 17:46:46.817624 2026] [:error] [pid 56796:tid 56808] [client 104.208.65.11:15073] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVo3BoXa4dVs9ML_oAYB9AAAAck"]
[Sun Jan 04 17:46:47.051165 2026] [:error] [pid 56796:tid 56799] [client 104.208.65.11:15228] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVo3B4Xa4dVs9ML_oAYB9gAAAcA"]
[Sun Jan 04 17:46:47.284471 2026] [:error] [pid 4427:tid 4469] [client 104.208.65.11:15117] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVo3Bz-T5ydE4nJe9DdFiwAAA0w"]
[Sun Jan 04 17:46:47.517729 2026] [:error] [pid 1020:tid 1038] [client 104.208.65.11:15170] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aVo3B1zz6-t0R3_Ito012AAAAU8"]
[Sun Jan 04 17:46:47.753291 2026] [:error] [pid 4427:tid 4470] [client 104.208.65.11:15276] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVo3Bz-T5ydE4nJe9DdFjQAAA00"]
[Sun Jan 04 17:46:47.986412 2026] [:error] [pid 1020:tid 1036] [client 104.208.65.11:15222] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVo3B1zz6-t0R3_Ito012gAAAU0"]
[Sun Jan 04 17:46:48.218240 2026] [:error] [pid 4333:tid 4338] [client 104.208.65.11:15162] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVo3CDAH-zZWAfquimAHZQAAAAI"]
[Sun Jan 04 17:46:48.450517 2026] [:error] [pid 1080:tid 1149] [client 104.208.65.11:14998] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aVo3CCu2Hm9AcIiqg0q00wAAA8o"]
[Sun Jan 04 17:46:48.683212 2026] [:error] [pid 4427:tid 4478] [client 104.208.65.11:15135] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVo3CD-T5ydE4nJe9DdFjwAAA1U"]
[Sun Jan 04 17:46:48.916001 2026] [:error] [pid 59250:tid 59267] [client 104.208.65.11:15160] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVo3CPPJ-KGeNWdqpudYhwAAAMw"]
[Sun Jan 04 17:46:49.149842 2026] [:error] [pid 59250:tid 59264] [client 104.208.65.11:15054] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVo3CfPJ-KGeNWdqpudYiAAAAMk"]
[Sun Jan 04 17:46:49.397021 2026] [:error] [pid 64248:tid 64266] [client 104.208.65.11:15284] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aVo3CcZZ_5Iet2g0ae34-gAAAFA"]
[Sun Jan 04 17:46:49.629590 2026] [:error] [pid 1020:tid 1047] [client 104.208.65.11:15484] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVo3CVzz6-t0R3_Ito013AAAAVg"]
[Sun Jan 04 17:46:49.867676 2026] [:error] [pid 1080:tid 1151] [client 104.208.65.11:15113] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVo3CSu2Hm9AcIiqg0q01gAAA8w"]
[Sun Jan 04 17:46:50.103388 2026] [:error] [pid 4427:tid 4474] [client 104.208.65.11:15090] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVo3Cj-T5ydE4nJe9DdFkQAAA1E"]
[Sun Jan 04 17:46:50.339012 2026] [:error] [pid 56796:tid 56818] [client 104.208.65.11:15142] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aVo3CoXa4dVs9ML_oAYB-gAAAdM"]
[Sun Jan 04 17:46:50.572353 2026] [:error] [pid 59250:tid 59261] [client 104.208.65.11:15218] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVo3CvPJ-KGeNWdqpudYiQAAAMY"]
[Sun Jan 04 17:46:50.804406 2026] [:error] [pid 1080:tid 1162] [client 104.208.65.11:15129] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVo3Ciu2Hm9AcIiqg0q02AAAA9c"]
[Sun Jan 04 17:46:51.035660 2026] [:error] [pid 56796:tid 56814] [client 104.208.65.11:15196] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVo3C4Xa4dVs9ML_oAYB_AAAAc8"]
[Sun Jan 04 17:46:51.269038 2026] [:error] [pid 4365:tid 4397] [client 104.208.65.11:15194] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aVo3C8Mi25XHOoMs4mdjIgAAAYI"]
[Sun Jan 04 17:46:51.501702 2026] [:error] [pid 59250:tid 59255] [client 104.208.65.11:15139] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVo3C_PJ-KGeNWdqpudYiwAAAMA"]
[Sun Jan 04 17:46:51.735511 2026] [:error] [pid 1080:tid 1140] [client 104.208.65.11:15122] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVo3Cyu2Hm9AcIiqg0q02gAAA8E"]
[Sun Jan 04 17:46:51.982999 2026] [:error] [pid 56796:tid 56821] [client 104.208.65.11:15210] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVo3C4Xa4dVs9ML_oAYB_QAAAdY"]
[Sun Jan 04 17:46:52.215630 2026] [:error] [pid 1020:tid 1027] [client 104.208.65.11:15062] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xo.php"] [unique_id "aVo3DFzz6-t0R3_Ito014gAAAUQ"]
[Sun Jan 04 17:46:52.448841 2026] [:error] [pid 4427:tid 4461] [client 104.208.65.11:15068] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVo3DD-T5ydE4nJe9DdFlgAAA0Q"]
[Sun Jan 04 17:46:52.691930 2026] [:error] [pid 1080:tid 1154] [client 104.208.65.11:15109] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVo3DCu2Hm9AcIiqg0q03AAAA88"]
[Sun Jan 04 17:46:52.927711 2026] [:error] [pid 64248:tid 64270] [client 104.208.65.11:15033] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVo3DMZZ_5Iet2g0ae34_gAAAFQ"]
[Sun Jan 04 17:46:53.161739 2026] [:error] [pid 56796:tid 56815] [client 104.208.65.11:15140] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "aVo3DYXa4dVs9ML_oAYB_gAAAdA"]
[Sun Jan 04 17:46:53.398798 2026] [:error] [pid 1020:tid 1040] [client 104.208.65.11:15136] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVo3DVzz6-t0R3_Ito015AAAAVE"]
[Sun Jan 04 17:46:53.638339 2026] [:error] [pid 15480:tid 15487] [client 104.208.65.11:15143] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVo3DRBWKIu3SdvwTFic3wAAAIU"]
[Sun Jan 04 17:46:53.875975 2026] [:error] [pid 1080:tid 1156] [client 104.208.65.11:15225] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVo3DSu2Hm9AcIiqg0q03QAAA9E"]
[Sun Jan 04 17:46:54.115565 2026] [:error] [pid 1080:tid 1148] [client 104.208.65.11:15094] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aVo3Diu2Hm9AcIiqg0q03wAAA8k"]
[Sun Jan 04 17:46:54.372146 2026] [:error] [pid 64248:tid 64258] [client 104.208.65.11:16590] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVo3DsZZ_5Iet2g0ae35AQAAAEg"]
[Sun Jan 04 17:46:54.615167 2026] [:error] [pid 64248:tid 64263] [client 104.208.65.11:15285] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVo3DsZZ_5Iet2g0ae35AgAAAE0"]
[Sun Jan 04 17:46:54.848812 2026] [:error] [pid 64248:tid 64264] [client 104.208.65.11:15204] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVo3DsZZ_5Iet2g0ae35BAAAAE4"]
[Sun Jan 04 17:46:55.080847 2026] [:error] [pid 64248:tid 64260] [client 104.208.65.11:15150] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aVo3D8ZZ_5Iet2g0ae35BgAAAEo"]
[Sun Jan 04 17:46:55.334600 2026] [:error] [pid 1080:tid 1146] [client 104.208.65.11:15231] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVo3Dyu2Hm9AcIiqg0q04QAAA8c"]
[Sun Jan 04 17:46:55.592684 2026] [:error] [pid 15480:tid 15483] [client 104.208.65.11:15125] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVo3DxBWKIu3SdvwTFic4QAAAIE"]
[Sun Jan 04 17:46:55.826012 2026] [:error] [pid 1080:tid 1158] [client 104.208.65.11:15208] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVo3Dyu2Hm9AcIiqg0q05AAAA9M"]
[Sun Jan 04 17:46:56.068242 2026] [:error] [pid 15480:tid 15491] [client 104.208.65.11:15078] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aVo3EBBWKIu3SdvwTFic5AAAAIk"]
[Sun Jan 04 17:46:56.302415 2026] [:error] [pid 15480:tid 15502] [client 104.208.65.11:15154] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVo3EBBWKIu3SdvwTFic5QAAAJQ"]
[Sun Jan 04 17:46:56.536003 2026] [:error] [pid 15480:tid 15496] [client 104.208.65.11:15057] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVo3EBBWKIu3SdvwTFic6QAAAI4"]
[Sun Jan 04 17:46:56.779134 2026] [:error] [pid 15480:tid 15490] [client 104.208.65.11:15083] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVo3EBBWKIu3SdvwTFic7AAAAIg"]
[Sun Jan 04 17:46:57.021971 2026] [:error] [pid 1080:tid 1141] [client 104.208.65.11:15340] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aVo3ESu2Hm9AcIiqg0q05wAAA8I"]
[Sun Jan 04 17:46:57.258098 2026] [:error] [pid 1080:tid 1151] [client 104.208.65.11:15147] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVo3ESu2Hm9AcIiqg0q06AAAA8w"]
[Sun Jan 04 17:46:57.913382 2026] [:error] [pid 59250:tid 59268] [client 104.208.65.11:15254] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVo3EfPJ-KGeNWdqpudYkAAAAM0"]
[Sun Jan 04 17:46:58.159190 2026] [:error] [pid 1020:tid 1023] [client 104.208.65.11:15295] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVo3Elzz6-t0R3_Ito015QAAAUA"]
[Sun Jan 04 17:46:58.458743 2026] [:error] [pid 15480:tid 15487] [client 104.208.65.11:15149] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aVo3EhBWKIu3SdvwTFic8gAAAIU"]
[Sun Jan 04 17:46:58.704824 2026] [:error] [pid 1020:tid 1044] [client 104.208.65.11:15097] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVo3Elzz6-t0R3_Ito015gAAAVU"]
[Sun Jan 04 17:46:59.015479 2026] [:error] [pid 1020:tid 1038] [client 104.208.65.11:15146] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVo3E1zz6-t0R3_Ito016QAAAU8"]
[Sun Jan 04 17:46:59.374117 2026] [:error] [pid 1020:tid 1046] [client 104.208.65.11:15198] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVo3E1zz6-t0R3_Ito016gAAAVc"]
[Sun Jan 04 17:46:59.655755 2026] [:error] [pid 1020:tid 1032] [client 104.208.65.11:15064] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aVo3E1zz6-t0R3_Ito017QAAAUk"]
[Sun Jan 04 17:46:59.931975 2026] [:error] [pid 64248:tid 64256] [client 104.208.65.11:15115] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mariju.php"] [unique_id "aVo3E8ZZ_5Iet2g0ae35CgAAAEY"]
[Sun Jan 04 17:47:00.175534 2026] [:error] [pid 1020:tid 1041] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sun Jan 04 17:47:00.302047 2026] [:error] [pid 1020:tid 1024] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Jan 04 17:47:00.423680 2026] [:error] [pid 1020:tid 1034] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Jan 04 17:47:00.543679 2026] [:error] [pid 1020:tid 1031] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/zfile.php
[Sun Jan 04 17:47:00.663160 2026] [:error] [pid 1020:tid 1039] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Jan 04 17:47:00.783978 2026] [:error] [pid 1020:tid 1043] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/des.php
[Sun Jan 04 17:47:00.906929 2026] [:error] [pid 1020:tid 1023] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Sun Jan 04 17:47:01.027747 2026] [:error] [pid 1020:tid 1035] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sun Jan 04 17:47:01.147813 2026] [:error] [pid 1020:tid 1046] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Jan 04 17:47:01.270518 2026] [:error] [pid 1020:tid 1030] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/fm.php
[Sun Jan 04 17:47:01.389734 2026] [:error] [pid 1020:tid 1047] [client 104.208.65.11:15113] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Jan 04 17:47:01.506976 2026] [:error] [pid 1020:tid 1032] [client 104.208.65.11:15113] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVo3FVzz6-t0R3_Ito01_gAAAUk"]
[Sun Jan 04 17:47:01.744962 2026] [:error] [pid 1020:tid 1024] [client 104.208.65.11:15137] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVo3FVzz6-t0R3_Ito02AAAAAUE"]
[Sun Jan 04 17:47:02.000856 2026] [:error] [pid 4426:tid 4434] [client 104.208.65.11:15197] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVo3FZAfkrNbrfBUY5VKZQAAAkQ"]
[Sun Jan 04 17:47:02.240952 2026] [:error] [pid 64248:tid 64253] [client 104.208.65.11:15220] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "aVo3FsZZ_5Iet2g0ae35DQAAAEM"]
[Sun Jan 04 17:47:02.492098 2026] [:error] [pid 59250:tid 59256] [client 104.208.65.11:15110] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVo3FvPJ-KGeNWdqpudYlQAAAME"]
[Sun Jan 04 17:47:02.885458 2026] [:error] [pid 64248:tid 64274] [client 104.208.65.11:14982] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVo3FsZZ_5Iet2g0ae35DgAAAFg"]
[Sun Jan 04 17:47:03.179168 2026] [:error] [pid 64248:tid 64258] [client 104.208.65.11:15203] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVo3F8ZZ_5Iet2g0ae35EAAAAEg"]
[Sun Jan 04 17:47:03.627672 2026] [:error] [pid 64248:tid 64261] [client 104.208.65.11:15165] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aVo3F8ZZ_5Iet2g0ae35EQAAAEs"]
[Sun Jan 04 17:47:03.864315 2026] [:error] [pid 1080:tid 1154] [client 104.208.65.11:15213] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVo3Fyu2Hm9AcIiqg0q06wAAA88"]
[Sun Jan 04 17:47:04.223217 2026] [:error] [pid 1080:tid 1148] [client 104.208.65.11:15289] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVo3GCu2Hm9AcIiqg0q07AAAA8k"]
[Sun Jan 04 17:47:04.481210 2026] [:error] [pid 59250:tid 59260] [client 104.208.65.11:15292] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVo3GPPJ-KGeNWdqpudYmgAAAMU"]
[Sun Jan 04 17:47:04.756754 2026] [:error] [pid 15480:tid 15502] [client 104.208.65.11:15257] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mlex.php"] [unique_id "aVo3GBBWKIu3SdvwTFic9QAAAJQ"]
[Sun Jan 04 17:47:05.010737 2026] [:error] [pid 64248:tid 64260] [client 104.208.65.11:15124] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVo3GcZZ_5Iet2g0ae35FAAAAEo"]
[Sun Jan 04 17:47:05.251016 2026] [:error] [pid 4365:tid 4417] [client 104.208.65.11:15156] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVo3GcMi25XHOoMs4mdjJgAAAZY"]
[Sun Jan 04 17:47:05.501158 2026] [:error] [pid 64248:tid 64262] [client 104.208.65.11:15130] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVo3GcZZ_5Iet2g0ae35FgAAAEw"]
[Sun Jan 04 17:47:05.770379 2026] [:error] [pid 59250:tid 59272] [client 104.208.65.11:15043] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aVo3GfPJ-KGeNWdqpudYnQAAANE"]
[Sun Jan 04 17:47:06.061535 2026] [:error] [pid 59250:tid 59278] [client 104.208.65.11:15211] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVo3GvPJ-KGeNWdqpudYngAAANc"]
[Sun Jan 04 17:47:06.312806 2026] [:error] [pid 59250:tid 59276] [client 104.208.65.11:15012] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVo3GvPJ-KGeNWdqpudYogAAANU"]
[Sun Jan 04 17:47:06.618830 2026] [:error] [pid 59250:tid 59256] [client 104.208.65.11:15132] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVo3GvPJ-KGeNWdqpudYpgAAAME"]
[Sun Jan 04 17:47:06.881463 2026] [:error] [pid 15480:tid 15484] [client 104.208.65.11:14999] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aVo3GhBWKIu3SdvwTFic9gAAAII"]
[Sun Jan 04 17:47:07.247974 2026] [:error] [pid 4333:tid 4355] [client 104.208.65.11:15163] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVo3GzAH-zZWAfquimAHagAAABM"]
[Sun Jan 04 17:47:07.737764 2026] [:error] [pid 59250:tid 59257] [client 104.208.65.11:15051] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVo3G_PJ-KGeNWdqpudYsAAAAMI"]
[Sun Jan 04 17:47:08.010507 2026] [:error] [pid 59250:tid 59272] [client 104.208.65.11:15120] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVo3HPPJ-KGeNWdqpudYsgAAANE"]
[Sun Jan 04 17:47:08.253590 2026] [:error] [pid 4333:tid 4342] [client 104.208.65.11:15221] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mpvloi.php"] [unique_id "aVo3HDAH-zZWAfquimAHawAAAAY"]
[Sun Jan 04 17:47:08.490479 2026] [:error] [pid 64248:tid 64272] [client 104.208.65.11:15123] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVo3HMZZ_5Iet2g0ae35GQAAAFY"]
[Sun Jan 04 17:47:08.736273 2026] [:error] [pid 1080:tid 1145] [client 104.208.65.11:15187] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVo3HCu2Hm9AcIiqg0q07wAAA8Y"]
[Sun Jan 04 17:47:08.987340 2026] [:error] [pid 4427:tid 4469] [client 104.208.65.11:15151] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVo3HD-T5ydE4nJe9DdFmwAAA0w"]
[Sun Jan 04 17:47:09.298839 2026] [:error] [pid 4427:tid 4470] [client 104.208.65.11:15072] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aVo3HT-T5ydE4nJe9DdFnQAAA00"]
[Sun Jan 04 17:47:09.629391 2026] [:error] [pid 59250:tid 59266] [client 104.208.65.11:14980] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVo3HfPJ-KGeNWdqpudYtQAAAMs"]
[Sun Jan 04 17:47:09.866339 2026] [:error] [pid 59250:tid 59271] [client 104.208.65.11:15409] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVo3HfPJ-KGeNWdqpudYtwAAANA"]
[Sun Jan 04 17:47:10.127365 2026] [:error] [pid 15480:tid 15490] [client 104.208.65.11:15102] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVo3HhBWKIu3SdvwTFic-QAAAIg"]
[Sun Jan 04 17:47:10.394114 2026] [:error] [pid 1020:tid 1027] [client 104.208.65.11:15014] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aVo3Hlzz6-t0R3_Ito02AgAAAUQ"]
[Sun Jan 04 17:47:10.698811 2026] [:error] [pid 15480:tid 15498] [client 104.208.65.11:15061] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVo3HhBWKIu3SdvwTFic-gAAAJA"]
[Sun Jan 04 17:47:10.991452 2026] [:error] [pid 4426:tid 4445] [client 104.208.65.11:15076] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVo3HpAfkrNbrfBUY5VKagAAAk8"]
[Sun Jan 04 17:47:11.250010 2026] [:error] [pid 1020:tid 1029] [client 104.208.65.11:15135] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVo3H1zz6-t0R3_Ito02BQAAAUY"]
[Sun Jan 04 17:47:11.960662 2026] [:error] [pid 1080:tid 1147] [client 104.208.65.11:15214] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "aVo3Hyu2Hm9AcIiqg0q08gAAA8g"]
[Sun Jan 04 17:47:12.204323 2026] [:error] [pid 1020:tid 1038] [client 104.208.65.11:15199] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVo3IFzz6-t0R3_Ito02BgAAAU8"]
[Sun Jan 04 17:47:12.521889 2026] [:error] [pid 4426:tid 4451] [client 104.208.65.11:15050] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVo3IJAfkrNbrfBUY5VKbAAAAlU"]
[Sun Jan 04 17:47:12.802103 2026] [:error] [pid 59250:tid 59273] [client 104.208.65.11:15085] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVo3IPPJ-KGeNWdqpudYvAAAANI"]
[Sun Jan 04 17:47:13.115336 2026] [:error] [pid 64248:tid 64265] [client 104.208.65.11:15131] [client 104.208.65.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/angelV2.php"] [unique_id "aVo3IcZZ_5Iet2g0ae35HgAAAE8"]
[Sun Jan 04 19:27:53.116445 2026] [:error] [pid 58996:tid 59057] [client 43.166.246.180:58596] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVpOuW1z02w313eb6GDWlwAAA8Q"]
[Sun Jan 04 21:53:27.456959 2026] [:error] [pid 34909:tid 34927] [client 49.51.47.100:36174] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVpw1_apPFwNYuuHrErrZgAAAg4"]
[Sun Jan 04 22:21:59.252224 2026] [:error] [pid 45863:tid 45885] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzw9t.php
[Sun Jan 04 22:21:59.394333 2026] [:error] [pid 45863:tid 45875] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/klwc.php
[Sun Jan 04 22:21:59.534546 2026] [:error] [pid 45863:tid 45888] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/klbnm.php
[Sun Jan 04 22:21:59.675597 2026] [:error] [pid 45863:tid 45884] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Sun Jan 04 22:21:59.814632 2026] [:error] [pid 45863:tid 45868] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/zde.php
[Sun Jan 04 22:21:59.955475 2026] [:error] [pid 45863:tid 45881] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/ifm.php
[Sun Jan 04 22:22:00.097729 2026] [:error] [pid 45863:tid 45886] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/redi.php
[Sun Jan 04 22:22:00.237518 2026] [:error] [pid 45863:tid 45869] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/fns.php
[Sun Jan 04 22:22:00.377654 2026] [:error] [pid 45863:tid 45889] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/pent.php
[Sun Jan 04 22:22:00.517647 2026] [:error] [pid 45863:tid 45883] [client 135.235.152.233:1453] File does not exist: /usr/local/apache/htdocs/suspended-page/wsx.php
[Sun Jan 04 22:22:00.654063 2026] [:error] [pid 45863:tid 45865] [client 135.235.152.233:1453] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r79.php"] [unique_id "aVp3iFGr1mgeue1bWvTZkAAAAAA"]
[Sun Jan 04 22:22:00.926246 2026] [:error] [pid 48633:tid 48652] [client 135.235.152.233:4095] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r79.php"] [unique_id "aVp3iHpmEoQIuLH2aWhJYwAAAFE"]
[Sun Jan 04 22:22:01.197807 2026] [:error] [pid 50286:tid 50297] [client 135.235.152.233:10151] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r79.php"] [unique_id "aVp3iYsZ42BFbcA1SgECvAAAAkc"]
[Sun Jan 04 22:22:01.470987 2026] [:error] [pid 48727:tid 48761] [client 135.235.152.233:1830] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r79.php"] [unique_id "aVp3ifgJtUs-E_QT0ibbiQAAA0Q"]
[Sun Jan 04 22:22:01.743737 2026] [:error] [pid 50288:tid 50362] [client 135.235.152.233:1669] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3.php"] [unique_id "aVp3ia_n0RHxRx0wErHLAwAAA9I"]
[Sun Jan 04 22:22:02.018069 2026] [:error] [pid 50288:tid 50366] [client 135.235.152.233:4065] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3.php"] [unique_id "aVp3iq_n0RHxRx0wErHLBAAAA9Y"]
[Sun Jan 04 22:22:02.290623 2026] [:error] [pid 48633:tid 48656] [client 135.235.152.233:5370] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3.php"] [unique_id "aVp3inpmEoQIuLH2aWhJZQAAAFU"]
[Sun Jan 04 22:22:02.563902 2026] [:error] [pid 50288:tid 50353] [client 135.235.152.233:4807] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3.php"] [unique_id "aVp3iq_n0RHxRx0wErHLBQAAA8k"]
[Sun Jan 04 22:22:02.837026 2026] [:error] [pid 48727:tid 48772] [client 135.235.152.233:3832] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wan.php"] [unique_id "aVp3ivgJtUs-E_QT0ibbigAAA08"]
[Sun Jan 04 22:22:03.113436 2026] [:error] [pid 48633:tid 48645] [client 135.235.152.233:1568] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wan.php"] [unique_id "aVp3i3pmEoQIuLH2aWhJZgAAAEo"]
[Sun Jan 04 22:22:03.386437 2026] [:error] [pid 48727:tid 48758] [client 135.235.152.233:1829] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wan.php"] [unique_id "aVp3i_gJtUs-E_QT0ibbiwAAA0E"]
[Sun Jan 04 22:22:03.658679 2026] [:error] [pid 48727:tid 48778] [client 135.235.152.233:3245] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wan.php"] [unique_id "aVp3i_gJtUs-E_QT0ibbjQAAA1U"]
[Sun Jan 04 22:22:03.931634 2026] [:error] [pid 48727:tid 48760] [client 135.235.152.233:5323] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RsR.php"] [unique_id "aVp3i_gJtUs-E_QT0ibbjgAAA0M"]
[Sun Jan 04 22:22:04.203429 2026] [:error] [pid 48633:tid 48655] [client 135.235.152.233:5191] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RsR.php"] [unique_id "aVp3jHpmEoQIuLH2aWhJZwAAAFQ"]
[Sun Jan 04 22:22:04.475316 2026] [:error] [pid 50286:tid 50301] [client 135.235.152.233:9673] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RsR.php"] [unique_id "aVp3jIsZ42BFbcA1SgECvgAAAks"]
[Sun Jan 04 22:22:04.749432 2026] [:error] [pid 50198:tid 50210] [client 135.235.152.233:1833] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RsR.php"] [unique_id "aVp3jGdhZ-F4hMTchPgNkwAAAIo"]
[Sun Jan 04 22:22:05.022229 2026] [:error] [pid 48727:tid 48773] [client 135.235.152.233:5226] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aVp3jfgJtUs-E_QT0ibbkgAAA1A"]
[Sun Jan 04 22:22:05.295778 2026] [:error] [pid 45863:tid 45866] [client 135.235.152.233:5782] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aVp3jVGr1mgeue1bWvTZkQAAAAE"]
[Sun Jan 04 22:22:05.570994 2026] [:error] [pid 48727:tid 48766] [client 135.235.152.233:6009] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aVp3jfgJtUs-E_QT0ibbkwAAA0k"]
[Sun Jan 04 22:22:05.844818 2026] [:error] [pid 50286:tid 50291] [client 135.235.152.233:3208] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "aVp3jYsZ42BFbcA1SgECvwAAAkE"]
[Sun Jan 04 22:22:06.117435 2026] [:error] [pid 48633:tid 48654] [client 135.235.152.233:5236] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "aVp3jnpmEoQIuLH2aWhJagAAAFM"]
[Sun Jan 04 22:22:06.391545 2026] [:error] [pid 48667:tid 48697] [client 135.235.152.233:2857] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "aVp3jnO6aihVIlrNAPj51gAAAQA"]
[Sun Jan 04 22:22:06.666218 2026] [:error] [pid 42666:tid 42704] [client 135.235.152.233:5341] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "aVp3jvc221c7vwWrOjcWgQAAAwc"]
[Sun Jan 04 22:22:06.939612 2026] [:error] [pid 50286:tid 50294] [client 135.235.152.233:9668] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "aVp3josZ42BFbcA1SgECwQAAAkQ"]
[Sun Jan 04 22:22:07.212534 2026] [:error] [pid 50286:tid 50295] [client 135.235.152.233:9674] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file10.php"] [unique_id "aVp3j4sZ42BFbcA1SgECwwAAAkU"]
[Sun Jan 04 22:22:07.485388 2026] [:error] [pid 50286:tid 50305] [client 135.235.152.233:9333] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file10.php"] [unique_id "aVp3j4sZ42BFbcA1SgECxgAAAk8"]
[Sun Jan 04 22:22:07.759129 2026] [:error] [pid 50229:tid 50246] [client 135.235.152.233:1550] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file10.php"] [unique_id "aVp3j6hKBHGV8WZnitt26gAAAM4"]
[Sun Jan 04 22:22:08.033906 2026] [:error] [pid 48633:tid 48651] [client 135.235.152.233:4068] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file10.php"] [unique_id "aVp3kHpmEoQIuLH2aWhJawAAAFA"]
[Sun Jan 04 22:22:08.310098 2026] [:error] [pid 50288:tid 50351] [client 135.235.152.233:4027] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hmvekhoh.php"] [unique_id "aVp3kK_n0RHxRx0wErHLCgAAA8c"]
[Sun Jan 04 22:22:08.582338 2026] [:error] [pid 50198:tid 50203] [client 135.235.152.233:4094] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hmvekhoh.php"] [unique_id "aVp3kGdhZ-F4hMTchPgNlgAAAIM"]
[Sun Jan 04 22:22:08.856506 2026] [:error] [pid 48667:tid 48718] [client 135.235.152.233:10175] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hmvekhoh.php"] [unique_id "aVp3kHO6aihVIlrNAPj51wAAARU"]
[Sun Jan 04 22:22:09.127888 2026] [:error] [pid 48727:tid 48774] [client 135.235.152.233:3533] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hmvekhoh.php"] [unique_id "aVp3kfgJtUs-E_QT0ibbmgAAA1E"]
[Sun Jan 04 22:22:09.404258 2026] [:error] [pid 50229:tid 50233] [client 135.235.152.233:5823] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex.php"] [unique_id "aVp3kahKBHGV8WZnitt27AAAAME"]
[Sun Jan 04 22:22:09.678764 2026] [:error] [pid 50198:tid 50218] [client 135.235.152.233:3985] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex.php"] [unique_id "aVp3kWdhZ-F4hMTchPgNlwAAAJI"]
[Sun Jan 04 22:22:09.951792 2026] [:error] [pid 50288:tid 50364] [client 135.235.152.233:2925] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex.php"] [unique_id "aVp3ka_n0RHxRx0wErHLDAAAA9Q"]
[Sun Jan 04 22:22:10.225022 2026] [:error] [pid 50286:tid 50292] [client 135.235.152.233:5334] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex.php"] [unique_id "aVp3kosZ42BFbcA1SgECywAAAkI"]
[Sun Jan 04 22:22:10.497617 2026] [:error] [pid 50288:tid 50348] [client 135.235.152.233:9710] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex1.php"] [unique_id "aVp3kq_n0RHxRx0wErHLDQAAA8Q"]
[Sun Jan 04 22:22:10.770613 2026] [:error] [pid 50229:tid 50237] [client 135.235.152.233:2827] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex1.php"] [unique_id "aVp3kqhKBHGV8WZnitt28gAAAMU"]
[Sun Jan 04 22:22:11.043755 2026] [:error] [pid 50229:tid 50240] [client 135.235.152.233:2969] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex1.php"] [unique_id "aVp3k6hKBHGV8WZnitt28wAAAMg"]
[Sun Jan 04 22:22:11.315618 2026] [:error] [pid 48633:tid 48641] [client 135.235.152.233:1595] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex1.php"] [unique_id "aVp3k3pmEoQIuLH2aWhJbgAAAEY"]
[Sun Jan 04 22:22:11.586944 2026] [:error] [pid 50288:tid 50356] [client 135.235.152.233:5317] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex2.php"] [unique_id "aVp3k6_n0RHxRx0wErHLDgAAA8w"]
[Sun Jan 04 22:22:11.862573 2026] [:error] [pid 50288:tid 50346] [client 135.235.152.233:5313] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex2.php"] [unique_id "aVp3k6_n0RHxRx0wErHLEAAAA8I"]
[Sun Jan 04 22:22:12.137167 2026] [:error] [pid 48633:tid 48650] [client 135.235.152.233:5346] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex2.php"] [unique_id "aVp3lHpmEoQIuLH2aWhJcAAAAE8"]
[Sun Jan 04 22:22:12.409930 2026] [:error] [pid 50198:tid 50222] [client 135.235.152.233:4055] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex2.php"] [unique_id "aVp3lGdhZ-F4hMTchPgNmwAAAJY"]
[Sun Jan 04 22:22:12.681280 2026] [:error] [pid 50288:tid 50360] [client 135.235.152.233:9699] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex3.php"] [unique_id "aVp3lK_n0RHxRx0wErHLEgAAA9A"]
[Sun Jan 04 22:22:12.952962 2026] [:error] [pid 48667:tid 48708] [client 135.235.152.233:4580] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex3.php"] [unique_id "aVp3lHO6aihVIlrNAPj52gAAAQs"]
[Sun Jan 04 22:22:13.225669 2026] [:error] [pid 48667:tid 48719] [client 135.235.152.233:4060] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex3.php"] [unique_id "aVp3lXO6aihVIlrNAPj52wAAARY"]
[Sun Jan 04 22:22:13.519824 2026] [:error] [pid 50288:tid 50353] [client 135.235.152.233:5202] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex3.php"] [unique_id "aVp3la_n0RHxRx0wErHLFAAAA8k"]
[Sun Jan 04 22:22:13.796114 2026] [:error] [pid 50229:tid 50252] [client 135.235.152.233:4036] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex4.php"] [unique_id "aVp3lahKBHGV8WZnitt29AAAANQ"]
[Sun Jan 04 22:22:14.068094 2026] [:error] [pid 50288:tid 50358] [client 135.235.152.233:5340] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex4.php"] [unique_id "aVp3lq_n0RHxRx0wErHLFgAAA84"]
[Sun Jan 04 22:22:14.341148 2026] [:error] [pid 50286:tid 50313] [client 135.235.152.233:2945] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex4.php"] [unique_id "aVp3losZ42BFbcA1SgEC0gAAAlc"]
[Sun Jan 04 22:22:14.613481 2026] [:error] [pid 42666:tid 42698] [client 135.235.152.233:5215] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex4.php"] [unique_id "aVp3lvc221c7vwWrOjcWhAAAAwE"]
[Sun Jan 04 22:22:14.885751 2026] [:error] [pid 42666:tid 42699] [client 135.235.152.233:1539] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex5.php"] [unique_id "aVp3lvc221c7vwWrOjcWhQAAAwI"]
[Sun Jan 04 22:22:15.161082 2026] [:error] [pid 42666:tid 42714] [client 135.235.152.233:8458] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex5.php"] [unique_id "aVp3l_c221c7vwWrOjcWhwAAAxE"]
[Sun Jan 04 22:22:15.432901 2026] [:error] [pid 48727:tid 48762] [client 135.235.152.233:4080] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex5.php"] [unique_id "aVp3l_gJtUs-E_QT0ibbngAAA0U"]
[Sun Jan 04 22:22:15.706490 2026] [:error] [pid 45863:tid 45876] [client 135.235.152.233:10065] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex5.php"] [unique_id "aVp3l1Gr1mgeue1bWvTZkwAAAAs"]
[Sun Jan 04 22:22:15.980306 2026] [:error] [pid 48727:tid 48761] [client 135.235.152.233:6803] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex6.php"] [unique_id "aVp3l_gJtUs-E_QT0ibboAAAA0Q"]
[Sun Jan 04 22:22:16.252871 2026] [:error] [pid 48727:tid 48767] [client 135.235.152.233:4066] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex6.php"] [unique_id "aVp3mPgJtUs-E_QT0ibboQAAA0o"]
[Sun Jan 04 22:22:16.528972 2026] [:error] [pid 48727:tid 48778] [client 135.235.152.233:5300] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex6.php"] [unique_id "aVp3mPgJtUs-E_QT0ibbowAAA1U"]
[Sun Jan 04 22:22:16.801975 2026] [:error] [pid 48727:tid 48769] [client 135.235.152.233:2962] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex6.php"] [unique_id "aVp3mPgJtUs-E_QT0ibbpQAAA0w"]
[Sun Jan 04 22:22:17.074681 2026] [:error] [pid 50229:tid 50250] [client 135.235.152.233:5224] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex7.php"] [unique_id "aVp3mahKBHGV8WZnitt29wAAANI"]
[Sun Jan 04 22:22:17.347325 2026] [:error] [pid 42666:tid 42721] [client 135.235.152.233:1598] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex7.php"] [unique_id "aVp3mfc221c7vwWrOjcWiQAAAxg"]
[Sun Jan 04 22:22:17.620145 2026] [:error] [pid 45863:tid 45867] [client 135.235.152.233:5250] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex7.php"] [unique_id "aVp3mVGr1mgeue1bWvTZlgAAAAI"]
[Sun Jan 04 22:22:17.895586 2026] [:error] [pid 42666:tid 42697] [client 135.235.152.233:1564] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex7.php"] [unique_id "aVp3mfc221c7vwWrOjcWigAAAwA"]
[Sun Jan 04 22:22:18.173393 2026] [:error] [pid 42666:tid 42720] [client 135.235.152.233:1962] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex8.php"] [unique_id "aVp3mvc221c7vwWrOjcWjAAAAxc"]
[Sun Jan 04 22:22:18.449100 2026] [:error] [pid 45863:tid 45888] [client 135.235.152.233:2998] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex8.php"] [unique_id "aVp3mlGr1mgeue1bWvTZmQAAABc"]
[Sun Jan 04 22:22:18.722605 2026] [:error] [pid 42666:tid 42700] [client 135.235.152.233:4083] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex8.php"] [unique_id "aVp3mvc221c7vwWrOjcWjQAAAwM"]
[Sun Jan 04 22:22:18.996587 2026] [:error] [pid 45863:tid 45884] [client 135.235.152.233:2993] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex8.php"] [unique_id "aVp3mlGr1mgeue1bWvTZmwAAABM"]
[Sun Jan 04 22:22:19.270015 2026] [:error] [pid 42666:tid 42716] [client 135.235.152.233:1947] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex9.php"] [unique_id "aVp3m_c221c7vwWrOjcWjgAAAxM"]
[Sun Jan 04 22:22:19.542025 2026] [:error] [pid 42666:tid 42711] [client 135.235.152.233:4090] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex9.php"] [unique_id "aVp3m_c221c7vwWrOjcWkQAAAw4"]
[Sun Jan 04 22:22:19.814121 2026] [:error] [pid 42666:tid 42705] [client 135.235.152.233:10077] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex9.php"] [unique_id "aVp3m_c221c7vwWrOjcWkgAAAwg"]
[Sun Jan 04 22:22:20.086467 2026] [:error] [pid 42666:tid 42706] [client 135.235.152.233:10074] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atex9.php"] [unique_id "aVp3nPc221c7vwWrOjcWlQAAAwk"]
[Sun Jan 04 22:22:20.359798 2026] [:error] [pid 45949:tid 45972] [client 135.235.152.233:4071] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/local.settings.php"] [unique_id "aVp3nKWUhIYCdxgkhpBRTwAAAhI"]
[Sun Jan 04 22:22:20.633011 2026] [:error] [pid 50229:tid 50245] [client 135.235.152.233:1591] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/local.settings.php"] [unique_id "aVp3nKhKBHGV8WZnitt2-gAAAM0"]
[Sun Jan 04 22:22:20.905495 2026] [:error] [pid 45949:tid 45965] [client 135.235.152.233:1580] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/local.settings.php"] [unique_id "aVp3nKWUhIYCdxgkhpBRUQAAAgs"]
[Sun Jan 04 22:22:21.177931 2026] [:error] [pid 50198:tid 50221] [client 135.235.152.233:10078] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/local.settings.php"] [unique_id "aVp3nWdhZ-F4hMTchPgNnwAAAJU"]
[Sun Jan 04 22:22:21.451255 2026] [:error] [pid 42666:tid 42708] [client 135.235.152.233:2921] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVp3nfc221c7vwWrOjcWlwAAAws"]
[Sun Jan 04 22:22:21.722608 2026] [:error] [pid 50229:tid 50248] [client 135.235.152.233:8478] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVp3nahKBHGV8WZnitt2-wAAANA"]
[Sun Jan 04 22:22:21.995418 2026] [:error] [pid 50229:tid 50243] [client 135.235.152.233:1589] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVp3nahKBHGV8WZnitt2_gAAAMs"]
[Sun Jan 04 22:22:22.273021 2026] [:error] [pid 48667:tid 48701] [client 135.235.152.233:2990] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aVp3nnO6aihVIlrNAPj53wAAAQQ"]
[Sun Jan 04 22:22:22.545181 2026] [:error] [pid 45949:tid 45963] [client 135.235.152.233:4059] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoaps.php"] [unique_id "aVp3nqWUhIYCdxgkhpBRUwAAAgk"]
[Sun Jan 04 22:22:22.817697 2026] [:error] [pid 48727:tid 48779] [client 135.235.152.233:8453] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoaps.php"] [unique_id "aVp3nvgJtUs-E_QT0ibbqQAAA1Y"]
[Sun Jan 04 22:22:23.090455 2026] [:error] [pid 50288:tid 50360] [client 135.235.152.233:5261] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoaps.php"] [unique_id "aVp3n6_n0RHxRx0wErHLGgAAA9A"]
[Sun Jan 04 22:22:23.365175 2026] [:error] [pid 50288:tid 50345] [client 135.235.152.233:5315] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoaps.php"] [unique_id "aVp3n6_n0RHxRx0wErHLHAAAA8E"]
[Sun Jan 04 22:22:23.639061 2026] [:error] [pid 48727:tid 48761] [client 135.235.152.233:3006] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xadm-log.php"] [unique_id "aVp3n_gJtUs-E_QT0ibbqgAAA0Q"]
[Sun Jan 04 22:22:23.911390 2026] [:error] [pid 48727:tid 48774] [client 135.235.152.233:4063] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xadm-log.php"] [unique_id "aVp3n_gJtUs-E_QT0ibbqwAAA1E"]
[Sun Jan 04 22:22:24.182822 2026] [:error] [pid 50229:tid 50252] [client 135.235.152.233:2979] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xadm-log.php"] [unique_id "aVp3oKhKBHGV8WZnitt3AwAAANQ"]
[Sun Jan 04 22:22:24.455640 2026] [:error] [pid 48667:tid 48712] [client 135.235.152.233:8479] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xadm-log.php"] [unique_id "aVp3oHO6aihVIlrNAPj54QAAAQ8"]
[Sun Jan 04 22:22:24.728340 2026] [:error] [pid 48727:tid 48778] [client 135.235.152.233:8678] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/codex.php"] [unique_id "aVp3oPgJtUs-E_QT0ibbrwAAA1U"]
[Sun Jan 04 22:22:25.000324 2026] [:error] [pid 48727:tid 48760] [client 135.235.152.233:5262] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/codex.php"] [unique_id "aVp3oPgJtUs-E_QT0ibbsAAAA0M"]
[Sun Jan 04 22:22:25.271572 2026] [:error] [pid 48727:tid 48769] [client 135.235.152.233:8458] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/codex.php"] [unique_id "aVp3ofgJtUs-E_QT0ibbsQAAA0w"]
[Sun Jan 04 22:22:25.544170 2026] [:error] [pid 50229:tid 50235] [client 135.235.152.233:1922] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/codex.php"] [unique_id "aVp3oahKBHGV8WZnitt3BAAAAMM"]
[Sun Jan 04 22:22:25.816707 2026] [:error] [pid 48727:tid 48759] [client 135.235.152.233:10056] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/code.php"] [unique_id "aVp3ofgJtUs-E_QT0ibbswAAA0I"]
[Sun Jan 04 22:22:26.090175 2026] [:error] [pid 48727:tid 48773] [client 135.235.152.233:6803] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/code.php"] [unique_id "aVp3ovgJtUs-E_QT0ibbtQAAA1A"]
[Sun Jan 04 22:22:26.363390 2026] [:error] [pid 48667:tid 48702] [client 135.235.152.233:1936] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/code.php"] [unique_id "aVp3onO6aihVIlrNAPj54wAAAQU"]
[Sun Jan 04 22:22:26.635565 2026] [:error] [pid 45949:tid 45955] [client 135.235.152.233:1974] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/code.php"] [unique_id "aVp3oqWUhIYCdxgkhpBRVwAAAgE"]
[Sun Jan 04 22:22:26.908511 2026] [:error] [pid 50229:tid 50256] [client 135.235.152.233:2996] [client 135.235.152.233] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/code.php"] [unique_id "aVp3oqhKBHGV8WZnitt3BQAAANg"]
[Sun Jan 04 22:22:27.183444 2026] [:error] [pid 50286:tid 50310] [client 135.235.152.233:4087] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/neshe.php"] [unique_id "aVp3o4sZ42BFbcA1SgEC2wAAAlQ"]
[Sun Jan 04 22:22:27.455494 2026] [:error] [pid 50229:tid 50253] [client 135.235.152.233:1937] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/neshe.php"] [unique_id "aVp3o6hKBHGV8WZnitt3BwAAANU"]
[Sun Jan 04 22:22:27.729083 2026] [:error] [pid 48727:tid 48770] [client 135.235.152.233:2973] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/neshe.php"] [unique_id "aVp3o_gJtUs-E_QT0ibbtgAAA00"]
[Sun Jan 04 22:22:28.002156 2026] [:error] [pid 48727:tid 48757] [client 135.235.152.233:1593] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asgtt.php"] [unique_id "aVp3pPgJtUs-E_QT0ibbtwAAA0A"]
[Sun Jan 04 22:22:28.281484 2026] [:error] [pid 50288:tid 50367] [client 135.235.152.233:2943] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asgtt.php"] [unique_id "aVp3pK_n0RHxRx0wErHLIAAAA9c"]
[Sun Jan 04 22:22:28.554627 2026] [:error] [pid 50288:tid 50352] [client 135.235.152.233:8656] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asgtt.php"] [unique_id "aVp3pK_n0RHxRx0wErHLIQAAA8g"]
[Sun Jan 04 22:22:28.827475 2026] [:error] [pid 42666:tid 42700] [client 135.235.152.233:2923] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asgtt.php"] [unique_id "aVp3pPc221c7vwWrOjcWmAAAAwM"]
[Sun Jan 04 22:22:29.099316 2026] [:error] [pid 50229:tid 50244] [client 135.235.152.233:8505] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wok.php"] [unique_id "aVp3pahKBHGV8WZnitt3CQAAAMw"]
[Sun Jan 04 22:22:29.372248 2026] [:error] [pid 50229:tid 50249] [client 135.235.152.233:8645] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wok.php"] [unique_id "aVp3pahKBHGV8WZnitt3CgAAANE"]
[Sun Jan 04 22:22:29.645237 2026] [:error] [pid 48667:tid 48705] [client 135.235.152.233:8674] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wok.php"] [unique_id "aVp3pXO6aihVIlrNAPj55QAAAQg"]
[Sun Jan 04 22:22:29.917307 2026] [:error] [pid 50286:tid 50301] [client 135.235.152.233:2984] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wok.php"] [unique_id "aVp3pYsZ42BFbcA1SgEC3AAAAks"]
[Sun Jan 04 22:22:30.189335 2026] [:error] [pid 50198:tid 50206] [client 135.235.152.233:2947] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVp3pmdhZ-F4hMTchPgNoQAAAIY"]
[Sun Jan 04 22:22:30.463687 2026] [:error] [pid 50288:tid 50349] [client 135.235.152.233:10066] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVp3pq_n0RHxRx0wErHLIgAAA8U"]
[Sun Jan 04 22:22:30.735669 2026] [:error] [pid 50286:tid 50291] [client 135.235.152.233:5214] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVp3posZ42BFbcA1SgEC3QAAAkE"]
[Sun Jan 04 22:22:31.007162 2026] [:error] [pid 48727:tid 48779] [client 135.235.152.233:1923] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadis.php"] [unique_id "aVp3p_gJtUs-E_QT0ibbuAAAA1Y"]
[Sun Jan 04 22:22:31.279863 2026] [:error] [pid 48667:tid 48713] [client 135.235.152.233:2970] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aVp3p3O6aihVIlrNAPj55gAAARA"]
[Sun Jan 04 22:22:31.557380 2026] [:error] [pid 50288:tid 50365] [client 135.235.152.233:2974] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aVp3p6_n0RHxRx0wErHLJAAAA9U"]
[Sun Jan 04 22:22:31.829590 2026] [:error] [pid 50288:tid 50351] [client 135.235.152.233:2938] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aVp3p6_n0RHxRx0wErHLJQAAA8c"]
[Sun Jan 04 22:22:32.101921 2026] [:error] [pid 50286:tid 50294] [client 135.235.152.233:2981] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admir.php"] [unique_id "aVp3qIsZ42BFbcA1SgEC3gAAAkQ"]
[Sun Jan 04 22:22:32.375033 2026] [:error] [pid 50288:tid 50359] [client 135.235.152.233:10110] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/xadm-log.php"] [unique_id "aVp3qK_n0RHxRx0wErHLJgAAA88"]
[Sun Jan 04 22:22:32.647809 2026] [:error] [pid 48667:tid 48708] [client 135.235.152.233:7733] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/xadm-log.php"] [unique_id "aVp3qHO6aihVIlrNAPj56AAAAQs"]
[Sun Jan 04 22:22:32.922488 2026] [:error] [pid 50288:tid 50364] [client 135.235.152.233:5333] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/xadm-log.php"] [unique_id "aVp3qK_n0RHxRx0wErHLJwAAA9Q"]
[Sun Jan 04 22:22:33.196547 2026] [:error] [pid 45949:tid 45961] [client 135.235.152.233:1560] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/xadm-log.php"] [unique_id "aVp3qaWUhIYCdxgkhpBRWwAAAgc"]
[Sun Jan 04 22:22:33.469661 2026] [:error] [pid 50288:tid 50348] [client 135.235.152.233:8677] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/xadm-log.php"] [unique_id "aVp3qa_n0RHxRx0wErHLKQAAA8Q"]
[Sun Jan 04 22:22:33.745463 2026] [:error] [pid 50286:tid 50307] [client 135.235.152.233:1570] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/xadm-log.php"] [unique_id "aVp3qYsZ42BFbcA1SgEC4QAAAlE"]
[Sun Jan 04 22:22:34.017395 2026] [:error] [pid 48667:tid 48698] [client 135.235.152.233:2936] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/xadm-log.php"] [unique_id "aVp3qnO6aihVIlrNAPj57AAAAQE"]
[Sun Jan 04 22:22:34.289044 2026] [:error] [pid 50229:tid 50240] [client 135.235.152.233:2912] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/xadm-log.php"] [unique_id "aVp3qqhKBHGV8WZnitt3EAAAAMg"]
[Sun Jan 04 22:22:34.561380 2026] [:error] [pid 50288:tid 50362] [client 135.235.152.233:2899] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tentang_rmol.php"] [unique_id "aVp3qq_n0RHxRx0wErHLKwAAA9I"]
[Sun Jan 04 22:22:34.834500 2026] [:error] [pid 50229:tid 50234] [client 135.235.152.233:2950] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tentang_rmol.php"] [unique_id "aVp3qqhKBHGV8WZnitt3EQAAAMI"]
[Sun Jan 04 22:22:35.107386 2026] [:error] [pid 50288:tid 50357] [client 135.235.152.233:1585] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tentang_rmol.php"] [unique_id "aVp3q6_n0RHxRx0wErHLLAAAA80"]
[Sun Jan 04 22:22:35.380222 2026] [:error] [pid 45949:tid 45954] [client 135.235.152.233:1576] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tentang_rmol.php"] [unique_id "aVp3q6WUhIYCdxgkhpBRXgAAAgA"]
[Sun Jan 04 22:22:35.652098 2026] [:error] [pid 45949:tid 45962] [client 135.235.152.233:5294] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aVp3q6WUhIYCdxgkhpBRXwAAAgg"]
[Sun Jan 04 22:22:35.922655 2026] [:error] [pid 48727:tid 48775] [client 135.235.152.233:1542] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aVp3q_gJtUs-E_QT0ibbuQAAA1I"]
[Sun Jan 04 22:22:36.196025 2026] [:error] [pid 48633:tid 48637] [client 135.235.152.233:4040] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aVp3rHpmEoQIuLH2aWhJdwAAAEI"]
[Sun Jan 04 22:22:36.470697 2026] [:error] [pid 48633:tid 48636] [client 135.235.152.233:2898] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aVp3rHpmEoQIuLH2aWhJeQAAAEE"]
[Sun Jan 04 22:22:36.742863 2026] [:error] [pid 45863:tid 45885] [client 135.235.152.233:8646] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aVp3rFGr1mgeue1bWvTZnwAAABQ"]
[Sun Jan 04 22:22:37.018650 2026] [:error] [pid 48727:tid 48781] [client 135.235.152.233:1963] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aVp3rfgJtUs-E_QT0ibbugAAA1g"]
[Sun Jan 04 22:22:37.290692 2026] [:error] [pid 48667:tid 48706] [client 135.235.152.233:3007] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aVp3rXO6aihVIlrNAPj57QAAAQk"]
[Sun Jan 04 22:22:37.563508 2026] [:error] [pid 48667:tid 48716] [client 135.235.152.233:4039] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asa.php"] [unique_id "aVp3rXO6aihVIlrNAPj57gAAARM"]
[Sun Jan 04 22:22:37.836218 2026] [:error] [pid 42666:tid 42716] [client 135.235.152.233:2916] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lla.php"] [unique_id "aVp3rfc221c7vwWrOjcWmQAAAxM"]
[Sun Jan 04 22:22:38.107201 2026] [:error] [pid 48633:tid 48641] [client 135.235.152.233:2960] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lla.php"] [unique_id "aVp3rnpmEoQIuLH2aWhJegAAAEY"]
[Sun Jan 04 22:22:38.381233 2026] [:error] [pid 50286:tid 50306] [client 135.235.152.233:4859] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lla.php"] [unique_id "aVp3rosZ42BFbcA1SgEC5AAAAlA"]
[Sun Jan 04 22:22:38.652949 2026] [:error] [pid 50286:tid 50311] [client 135.235.152.233:2905] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lla.php"] [unique_id "aVp3rosZ42BFbcA1SgEC5QAAAlU"]
[Sun Jan 04 22:22:38.925040 2026] [:error] [pid 50286:tid 50302] [client 135.235.152.233:8641] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dup.php"] [unique_id "aVp3rosZ42BFbcA1SgEC5gAAAkw"]
[Sun Jan 04 22:22:39.197363 2026] [:error] [pid 50286:tid 50314] [client 135.235.152.233:8650] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dup.php"] [unique_id "aVp3r4sZ42BFbcA1SgEC5wAAAlg"]
[Sun Jan 04 22:22:39.470677 2026] [:error] [pid 50286:tid 50290] [client 135.235.152.233:2933] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dup.php"] [unique_id "aVp3r4sZ42BFbcA1SgEC6AAAAkA"]
[Sun Jan 04 22:22:39.746746 2026] [:error] [pid 50229:tid 50254] [client 135.235.152.233:3978] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dup.php"] [unique_id "aVp3r6hKBHGV8WZnitt3EgAAANY"]
[Sun Jan 04 22:22:40.021065 2026] [:error] [pid 50286:tid 50293] [client 135.235.152.233:7731] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifi.php"] [unique_id "aVp3sIsZ42BFbcA1SgEC6gAAAkM"]
[Sun Jan 04 22:22:40.293726 2026] [:error] [pid 50229:tid 50255] [client 135.235.152.233:10105] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifi.php"] [unique_id "aVp3sKhKBHGV8WZnitt3EwAAANc"]
[Sun Jan 04 22:22:40.566823 2026] [:error] [pid 48633:tid 48650] [client 135.235.152.233:1672] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifi.php"] [unique_id "aVp3sHpmEoQIuLH2aWhJfAAAAE8"]
[Sun Jan 04 22:22:40.845660 2026] [:error] [pid 45863:tid 45875] [client 135.235.152.233:5260] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifi.php"] [unique_id "aVp3sFGr1mgeue1bWvTZoAAAAAo"]
[Sun Jan 04 22:22:41.120344 2026] [:error] [pid 48727:tid 48771] [client 135.235.152.233:8653] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifii.php"] [unique_id "aVp3sfgJtUs-E_QT0ibbvQAAA04"]
[Sun Jan 04 22:22:41.392534 2026] [:error] [pid 48727:tid 48780] [client 135.235.152.233:10076] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifii.php"] [unique_id "aVp3sfgJtUs-E_QT0ibbvwAAA1c"]
[Sun Jan 04 22:22:41.664787 2026] [:error] [pid 50198:tid 50203] [client 135.235.152.233:2883] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifii.php"] [unique_id "aVp3sWdhZ-F4hMTchPgNpAAAAIM"]
[Sun Jan 04 22:22:41.937438 2026] [:error] [pid 42666:tid 42711] [client 135.235.152.233:10108] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fifii.php"] [unique_id "aVp3sfc221c7vwWrOjcWmwAAAw4"]
[Sun Jan 04 22:22:42.209796 2026] [:error] [pid 42666:tid 42704] [client 135.235.152.233:2966] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wteed.php"] [unique_id "aVp3svc221c7vwWrOjcWnAAAAwc"]
[Sun Jan 04 22:22:42.484732 2026] [:error] [pid 50229:tid 50235] [client 135.235.152.233:5284] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wteed.php"] [unique_id "aVp3sqhKBHGV8WZnitt3FAAAAMM"]
[Sun Jan 04 22:22:42.757289 2026] [:error] [pid 50288:tid 50346] [client 135.235.152.233:2919] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wteed.php"] [unique_id "aVp3sq_n0RHxRx0wErHLLQAAA8I"]
[Sun Jan 04 22:22:43.037670 2026] [:error] [pid 45863:tid 45888] [client 135.235.152.233:5335] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wteed.php"] [unique_id "aVp3s1Gr1mgeue1bWvTZoQAAABc"]
[Sun Jan 04 22:22:43.314039 2026] [:error] [pid 45863:tid 45872] [client 135.235.152.233:8652] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rss4.php"] [unique_id "aVp3s1Gr1mgeue1bWvTZogAAAAc"]
[Sun Jan 04 22:22:43.586430 2026] [:error] [pid 42666:tid 42705] [client 135.235.152.233:10290] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rss4.php"] [unique_id "aVp3s_c221c7vwWrOjcWnQAAAwg"]
[Sun Jan 04 22:22:43.861520 2026] [:error] [pid 50288:tid 50366] [client 135.235.152.233:2892] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rss4.php"] [unique_id "aVp3s6_n0RHxRx0wErHLLgAAA9Y"]
[Sun Jan 04 22:22:44.134447 2026] [:error] [pid 48727:tid 48772] [client 135.235.152.233:10268] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rss4.php"] [unique_id "aVp3tPgJtUs-E_QT0ibbwQAAA08"]
[Sun Jan 04 22:22:44.407696 2026] [:error] [pid 50286:tid 50303] [client 135.235.152.233:5302] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aVp3tIsZ42BFbcA1SgEC7AAAAk0"]
[Sun Jan 04 22:22:44.679921 2026] [:error] [pid 42666:tid 42706] [client 135.235.152.233:1938] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aVp3tPc221c7vwWrOjcWoQAAAwk"]
[Sun Jan 04 22:22:44.952855 2026] [:error] [pid 50288:tid 50367] [client 135.235.152.233:10287] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aVp3tK_n0RHxRx0wErHLMQAAA9c"]
[Sun Jan 04 22:22:45.226372 2026] [:error] [pid 50229:tid 50250] [client 135.235.152.233:5308] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aVp3tahKBHGV8WZnitt3GAAAANI"]
[Sun Jan 04 22:22:45.499047 2026] [:error] [pid 50229:tid 50244] [client 135.235.152.233:10102] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zr.php"] [unique_id "aVp3tahKBHGV8WZnitt3GgAAAMw"]
[Sun Jan 04 22:22:45.770200 2026] [:error] [pid 50288:tid 50352] [client 135.235.152.233:7739] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zr.php"] [unique_id "aVp3ta_n0RHxRx0wErHLMgAAA8g"]
[Sun Jan 04 22:22:46.042494 2026] [:error] [pid 50286:tid 50291] [client 135.235.152.233:7697] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zr.php"] [unique_id "aVp3tosZ42BFbcA1SgEC8AAAAkE"]
[Sun Jan 04 22:22:46.315872 2026] [:error] [pid 48633:tid 48643] [client 135.235.152.233:2999] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zr.php"] [unique_id "aVp3tnpmEoQIuLH2aWhJfwAAAEg"]
[Sun Jan 04 22:22:46.591437 2026] [:error] [pid 50198:tid 50205] [client 135.235.152.233:8435] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2020.php"] [unique_id "aVp3tmdhZ-F4hMTchPgNpQAAAIU"]
[Sun Jan 04 22:22:46.863092 2026] [:error] [pid 45863:tid 45884] [client 135.235.152.233:2823] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2020.php"] [unique_id "aVp3tlGr1mgeue1bWvTZpAAAABM"]
[Sun Jan 04 22:22:47.135713 2026] [:error] [pid 50286:tid 50299] [client 135.235.152.233:2956] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2020.php"] [unique_id "aVp3t4sZ42BFbcA1SgEC8gAAAkk"]
[Sun Jan 04 22:22:47.408315 2026] [:error] [pid 45949:tid 45977] [client 135.235.152.233:8396] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2020.php"] [unique_id "aVp3t6WUhIYCdxgkhpBRZQAAAhc"]
[Sun Jan 04 22:22:47.681092 2026] [:error] [pid 45863:tid 45868] [client 135.235.152.233:5274] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ENKI.php"] [unique_id "aVp3t1Gr1mgeue1bWvTZpQAAAAM"]
[Sun Jan 04 22:22:47.954804 2026] [:error] [pid 42666:tid 42698] [client 135.235.152.233:7688] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ENKI.php"] [unique_id "aVp3t_c221c7vwWrOjcWpQAAAwE"]
[Sun Jan 04 22:22:48.227090 2026] [:error] [pid 42666:tid 42714] [client 135.235.152.233:5222] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ENKI.php"] [unique_id "aVp3uPc221c7vwWrOjcWpwAAAxE"]
[Sun Jan 04 22:22:48.503097 2026] [:error] [pid 42666:tid 42721] [client 135.235.152.233:2887] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ENKI.php"] [unique_id "aVp3uPc221c7vwWrOjcWqAAAAxg"]
[Sun Jan 04 22:22:48.775704 2026] [:error] [pid 42666:tid 42697] [client 135.235.152.233:8668] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwebshell.php"] [unique_id "aVp3uPc221c7vwWrOjcWqQAAAwA"]
[Sun Jan 04 22:22:49.046984 2026] [:error] [pid 45949:tid 45955] [client 135.235.152.233:10264] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwebshell.php"] [unique_id "aVp3uaWUhIYCdxgkhpBRaQAAAgE"]
[Sun Jan 04 22:22:49.319420 2026] [:error] [pid 45949:tid 45969] [client 135.235.152.233:7693] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwebshell.php"] [unique_id "aVp3uaWUhIYCdxgkhpBRagAAAg8"]
[Sun Jan 04 22:22:49.591255 2026] [:error] [pid 42666:tid 42720] [client 135.235.152.233:2946] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwebshell.php"] [unique_id "aVp3ufc221c7vwWrOjcWrAAAAxc"]
[Sun Jan 04 22:22:49.862741 2026] [:error] [pid 45949:tid 45961] [client 135.235.152.233:10295] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aVp3uaWUhIYCdxgkhpBRbgAAAgc"]
[Sun Jan 04 22:22:50.135159 2026] [:error] [pid 42666:tid 42700] [client 135.235.152.233:8433] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aVp3uvc221c7vwWrOjcWrQAAAwM"]
[Sun Jan 04 22:22:50.407771 2026] [:error] [pid 50198:tid 50218] [client 135.235.152.233:2911] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aVp3umdhZ-F4hMTchPgNpgAAAJI"]
[Sun Jan 04 22:22:50.679248 2026] [:error] [pid 50286:tid 50313] [client 135.235.152.233:5245] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aVp3uosZ42BFbcA1SgEC8wAAAlc"]
[Sun Jan 04 22:22:50.952959 2026] [:error] [pid 45949:tid 45962] [client 135.235.152.233:2902] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVp3uqWUhIYCdxgkhpBRcgAAAgg"]
[Sun Jan 04 22:22:51.223901 2026] [:error] [pid 50288:tid 50364] [client 135.235.152.233:7727] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVp3u6_n0RHxRx0wErHLNgAAA9Q"]
[Sun Jan 04 22:22:51.503678 2026] [:error] [pid 50288:tid 50348] [client 135.235.152.233:5823] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVp3u6_n0RHxRx0wErHLNwAAA8Q"]
[Sun Jan 04 22:22:51.777392 2026] [:error] [pid 50198:tid 50201] [client 135.235.152.233:1950] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "aVp3u2dhZ-F4hMTchPgNqAAAAIE"]
[Sun Jan 04 22:22:52.050824 2026] [:error] [pid 50198:tid 50222] [client 135.235.152.233:1926] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aVp3vGdhZ-F4hMTchPgNqQAAAJY"]
[Sun Jan 04 22:22:52.324471 2026] [:error] [pid 48727:tid 48765] [client 135.235.152.233:2907] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aVp3vPgJtUs-E_QT0ibbxAAAA0g"]
[Sun Jan 04 22:22:52.601833 2026] [:error] [pid 48727:tid 48759] [client 135.235.152.233:5772] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aVp3vPgJtUs-E_QT0ibbxQAAA0I"]
[Sun Jan 04 22:22:52.874314 2026] [:error] [pid 48727:tid 48768] [client 135.235.152.233:10280] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aVp3vPgJtUs-E_QT0ibbxgAAA0s"]
[Sun Jan 04 22:22:53.147139 2026] [:error] [pid 45949:tid 45958] [client 135.235.152.233:4048] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/135.php"] [unique_id "aVp3vaWUhIYCdxgkhpBRdAAAAgQ"]
[Sun Jan 04 22:22:53.424641 2026] [:error] [pid 50198:tid 50212] [client 135.235.152.233:2994] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/135.php"] [unique_id "aVp3vWdhZ-F4hMTchPgNrQAAAIw"]
[Sun Jan 04 22:22:53.696916 2026] [:error] [pid 50229:tid 50236] [client 135.235.152.233:8390] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/135.php"] [unique_id "aVp3vahKBHGV8WZnitt3HAAAAMQ"]
[Sun Jan 04 22:22:53.969713 2026] [:error] [pid 42666:tid 42708] [client 135.235.152.233:8686] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/135.php"] [unique_id "aVp3vfc221c7vwWrOjcWswAAAws"]
[Sun Jan 04 22:22:54.243624 2026] [:error] [pid 48727:tid 48766] [client 135.235.152.233:8697] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xx.php"] [unique_id "aVp3vvgJtUs-E_QT0ibbyAAAA0k"]
[Sun Jan 04 22:22:54.517138 2026] [:error] [pid 50198:tid 50223] [client 135.235.152.233:4085] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xx.php"] [unique_id "aVp3vmdhZ-F4hMTchPgNrgAAAJc"]
[Sun Jan 04 22:22:54.790602 2026] [:error] [pid 42666:tid 42703] [client 135.235.152.233:8658] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xx.php"] [unique_id "aVp3vvc221c7vwWrOjcWtQAAAwY"]
[Sun Jan 04 22:22:55.061991 2026] [:error] [pid 50198:tid 50211] [client 135.235.152.233:7719] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xx.php"] [unique_id "aVp3v2dhZ-F4hMTchPgNsAAAAIs"]
[Sun Jan 04 22:22:55.334607 2026] [:error] [pid 42666:tid 42721] [client 135.235.152.233:1956] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hq.php"] [unique_id "aVp3v_c221c7vwWrOjcWtwAAAxg"]
[Sun Jan 04 22:22:55.606602 2026] [:error] [pid 50198:tid 50221] [client 135.235.152.233:10088] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hq.php"] [unique_id "aVp3v2dhZ-F4hMTchPgNsgAAAJU"]
[Sun Jan 04 22:22:55.879955 2026] [:error] [pid 50288:tid 50355] [client 135.235.152.233:10246] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hq.php"] [unique_id "aVp3v6_n0RHxRx0wErHLOAAAA8s"]
[Sun Jan 04 22:22:56.152070 2026] [:error] [pid 48667:tid 48702] [client 135.235.152.233:1940] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hq.php"] [unique_id "aVp3wHO6aihVIlrNAPj58gAAAQU"]
[Sun Jan 04 22:22:56.424302 2026] [:error] [pid 48667:tid 48705] [client 135.235.152.233:8693] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aVp3wHO6aihVIlrNAPj58wAAAQg"]
[Sun Jan 04 22:22:56.698333 2026] [:error] [pid 48727:tid 48779] [client 135.235.152.233:1571] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aVp3wPgJtUs-E_QT0ibbzAAAA1Y"]
[Sun Jan 04 22:22:56.969895 2026] [:error] [pid 50288:tid 50345] [client 135.235.152.233:10299] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aVp3wK_n0RHxRx0wErHLOgAAA8E"]
[Sun Jan 04 22:22:57.242670 2026] [:error] [pid 48667:tid 48703] [client 135.235.152.233:10273] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aVp3wXO6aihVIlrNAPj59gAAAQY"]
[Sun Jan 04 22:22:57.515007 2026] [:error] [pid 45863:tid 45866] [client 135.235.152.233:1597] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVp3wVGr1mgeue1bWvTZpwAAAAE"]
[Sun Jan 04 22:22:57.787715 2026] [:error] [pid 45949:tid 45954] [client 135.235.152.233:8439] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVp3waWUhIYCdxgkhpBReQAAAgA"]
[Sun Jan 04 22:22:58.059215 2026] [:error] [pid 50198:tid 50217] [client 135.235.152.233:1966] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVp3wmdhZ-F4hMTchPgNtQAAAJE"]
[Sun Jan 04 22:22:58.332073 2026] [:error] [pid 50288:tid 50367] [client 135.235.152.233:1930] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fso.php"] [unique_id "aVp3wq_n0RHxRx0wErHLPgAAA9c"]
[Sun Jan 04 22:22:58.603867 2026] [:error] [pid 50288:tid 50350] [client 135.235.152.233:8702] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVp3wq_n0RHxRx0wErHLQAAAA8Y"]
[Sun Jan 04 22:22:58.874952 2026] [:error] [pid 50288:tid 50361] [client 135.235.152.233:5347] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVp3wq_n0RHxRx0wErHLQgAAA9E"]
[Sun Jan 04 22:22:59.150470 2026] [:error] [pid 45949:tid 45963] [client 135.235.152.233:8655] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVp3w6WUhIYCdxgkhpBRegAAAgk"]
[Sun Jan 04 22:22:59.422388 2026] [:error] [pid 50288:tid 50349] [client 135.235.152.233:8430] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aVp3w6_n0RHxRx0wErHLRAAAA8U"]
[Sun Jan 04 22:22:59.695456 2026] [:error] [pid 48727:tid 48764] [client 135.235.152.233:7723] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoz.php"] [unique_id "aVp3w_gJtUs-E_QT0ibbzwAAA0c"]
[Sun Jan 04 22:22:59.968293 2026] [:error] [pid 50198:tid 50219] [client 135.235.152.233:5304] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoz.php"] [unique_id "aVp3w2dhZ-F4hMTchPgNtgAAAJM"]
[Sun Jan 04 22:23:00.250249 2026] [:error] [pid 48727:tid 48771] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/zoz.php
[Sun Jan 04 22:23:00.390498 2026] [:error] [pid 48727:tid 48780] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/bless6.php
[Sun Jan 04 22:23:00.530057 2026] [:error] [pid 48727:tid 48774] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/bless10.php
[Sun Jan 04 22:23:00.668993 2026] [:error] [pid 48727:tid 48778] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/xcre1.php
[Sun Jan 04 22:23:00.808379 2026] [:error] [pid 48727:tid 48760] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/jatuh.php
[Sun Jan 04 22:23:00.947323 2026] [:error] [pid 48727:tid 48769] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/fesa.php
[Sun Jan 04 22:23:01.085780 2026] [:error] [pid 48727:tid 48765] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/class-.php
[Sun Jan 04 22:23:01.224720 2026] [:error] [pid 48727:tid 48759] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzgf5.php
[Sun Jan 04 22:23:01.363898 2026] [:error] [pid 48727:tid 48768] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/fs6.php
[Sun Jan 04 22:23:01.504703 2026] [:error] [pid 48727:tid 48773] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/qrops.php
[Sun Jan 04 22:23:01.642947 2026] [:error] [pid 48727:tid 48770] [client 135.235.152.233:2965] File does not exist: /usr/local/apache/htdocs/suspended-page/about25.php
[Sun Jan 04 22:23:01.778447 2026] [:error] [pid 48727:tid 48757] [client 135.235.152.233:2965] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "aVp3xfgJtUs-E_QT0ibb3wAAA0A"]
[Sun Jan 04 22:23:02.050420 2026] [:error] [pid 50198:tid 50209] [client 135.235.152.233:8386] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "aVp3xmdhZ-F4hMTchPgNuAAAAIk"]
[Sun Jan 04 22:23:02.324007 2026] [:error] [pid 45949:tid 45977] [client 135.235.152.233:8406] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "aVp3xqWUhIYCdxgkhpBRfAAAAhc"]
[Sun Jan 04 22:23:02.595137 2026] [:error] [pid 50288:tid 50360] [client 135.235.152.233:8391] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "aVp3xq_n0RHxRx0wErHLSwAAA9A"]
[Sun Jan 04 22:23:02.871010 2026] [:error] [pid 50288:tid 50355] [client 135.235.152.233:8659] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "aVp3xq_n0RHxRx0wErHLTAAAA8s"]
[Sun Jan 04 22:23:03.144376 2026] [:error] [pid 50229:tid 50254] [client 135.235.152.233:1698] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "aVp3x6hKBHGV8WZnitt3HgAAANY"]
[Sun Jan 04 22:23:03.415964 2026] [:error] [pid 50288:tid 50346] [client 135.235.152.233:1549] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "aVp3x6_n0RHxRx0wErHLTQAAA8I"]
[Sun Jan 04 22:23:03.688061 2026] [:error] [pid 50288:tid 50350] [client 135.235.152.233:5298] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "aVp3x6_n0RHxRx0wErHLTwAAA8Y"]
[Sun Jan 04 22:23:03.963816 2026] [:error] [pid 48633:tid 48644] [client 135.235.152.233:8418] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVp3x3pmEoQIuLH2aWhJhwAAAEk"]
[Sun Jan 04 22:23:04.239366 2026] [:error] [pid 50288:tid 50361] [client 135.235.152.233:10080] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVp3yK_n0RHxRx0wErHLUQAAA9E"]
[Sun Jan 04 22:23:04.511059 2026] [:error] [pid 48667:tid 48710] [client 135.235.152.233:4064] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVp3yHO6aihVIlrNAPj5_AAAAQ0"]
[Sun Jan 04 22:23:04.783818 2026] [:error] [pid 50288:tid 50368] [client 135.235.152.233:1983] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siln.php"] [unique_id "aVp3yK_n0RHxRx0wErHLVAAAA9g"]
[Sun Jan 04 22:23:05.054713 2026] [:error] [pid 50288:tid 50364] [client 135.235.152.233:7681] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "aVp3ya_n0RHxRx0wErHLVgAAA9Q"]
[Sun Jan 04 22:23:05.327806 2026] [:error] [pid 50286:tid 50291] [client 135.235.152.233:10243] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "aVp3yYsZ42BFbcA1SgEC-QAAAkE"]
[Sun Jan 04 22:23:05.603022 2026] [:error] [pid 50288:tid 50353] [client 135.235.152.233:1952] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "aVp3ya_n0RHxRx0wErHLWQAAA8k"]
[Sun Jan 04 22:23:05.875655 2026] [:error] [pid 50288:tid 50367] [client 135.235.152.233:10162] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "aVp3ya_n0RHxRx0wErHLWgAAA9c"]
[Sun Jan 04 22:23:06.148465 2026] [:error] [pid 45949:tid 45965] [client 135.235.152.233:2906] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "aVp3yqWUhIYCdxgkhpBRfQAAAgs"]
[Sun Jan 04 22:23:06.419890 2026] [:error] [pid 50288:tid 50348] [client 135.235.152.233:7722] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "aVp3yq_n0RHxRx0wErHLXQAAA8Q"]
[Sun Jan 04 22:23:06.695161 2026] [:error] [pid 48727:tid 48758] [client 135.235.152.233:7743] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "aVp3yvgJtUs-E_QT0ibb4QAAA0E"]
[Sun Jan 04 22:23:06.968062 2026] [:error] [pid 50288:tid 50357] [client 135.235.152.233:2951] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "aVp3yq_n0RHxRx0wErHLXgAAA80"]
[Sun Jan 04 22:23:07.239864 2026] [:error] [pid 50288:tid 50361] [client 135.235.152.233:2958] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puvil.php"] [unique_id "aVp3y6_n0RHxRx0wErHLYAAAA9E"]
[Sun Jan 04 22:23:07.511251 2026] [:error] [pid 50229:tid 50252] [client 135.235.152.233:5286] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puvil.php"] [unique_id "aVp3y6hKBHGV8WZnitt3IgAAANQ"]
[Sun Jan 04 22:23:07.783922 2026] [:error] [pid 50288:tid 50352] [client 135.235.152.233:10104] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puvil.php"] [unique_id "aVp3y6_n0RHxRx0wErHLYgAAA8g"]
[Sun Jan 04 22:23:08.054917 2026] [:error] [pid 50286:tid 50299] [client 135.235.152.233:2978] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puvil.php"] [unique_id "aVp3zIsZ42BFbcA1SgEC-gAAAkk"]
[Sun Jan 04 22:23:08.330559 2026] [:error] [pid 50286:tid 50309] [client 135.235.152.233:10057] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hans.php"] [unique_id "aVp3zIsZ42BFbcA1SgEC-wAAAlM"]
[Sun Jan 04 22:23:08.605494 2026] [:error] [pid 45863:tid 45871] [client 135.235.152.233:5821] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hans.php"] [unique_id "aVp3zFGr1mgeue1bWvTZqgAAAAY"]
[Sun Jan 04 22:23:08.877414 2026] [:error] [pid 50286:tid 50307] [client 135.235.152.233:2884] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hans.php"] [unique_id "aVp3zIsZ42BFbcA1SgEC_AAAAlE"]
[Sun Jan 04 22:23:09.149728 2026] [:error] [pid 50229:tid 50242] [client 135.235.152.233:5192] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hans.php"] [unique_id "aVp3zahKBHGV8WZnitt3JQAAAMo"]
[Sun Jan 04 22:23:09.423276 2026] [:error] [pid 50229:tid 50249] [client 135.235.152.233:7717] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aVp3zahKBHGV8WZnitt3JgAAANE"]
[Sun Jan 04 22:23:09.699487 2026] [:error] [pid 50288:tid 50362] [client 135.235.152.233:8684] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aVp3za_n0RHxRx0wErHLZAAAA9I"]
[Sun Jan 04 22:23:09.971621 2026] [:error] [pid 50286:tid 50296] [client 135.235.152.233:10051] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aVp3zYsZ42BFbcA1SgEC_QAAAkY"]
[Sun Jan 04 22:23:10.243896 2026] [:error] [pid 50229:tid 50245] [client 135.235.152.233:10063] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "aVp3zqhKBHGV8WZnitt3JwAAAM0"]
[Sun Jan 04 22:23:10.517174 2026] [:error] [pid 50229:tid 50243] [client 135.235.152.233:10257] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2%25.php"] [unique_id "aVp3zqhKBHGV8WZnitt3KQAAAMs"]
[Sun Jan 04 22:23:10.789412 2026] [:error] [pid 50229:tid 50236] [client 135.235.152.233:7692] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2%25.php"] [unique_id "aVp3zqhKBHGV8WZnitt3KwAAAMQ"]
[Sun Jan 04 22:23:11.060889 2026] [:error] [pid 50229:tid 50237] [client 135.235.152.233:4091] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2%25.php"] [unique_id "aVp3z6hKBHGV8WZnitt3LAAAAMU"]
[Sun Jan 04 22:23:11.333169 2026] [:error] [pid 45949:tid 45964] [client 135.235.152.233:2891] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2%25.php"] [unique_id "aVp3z6WUhIYCdxgkhpBRfwAAAgo"]
[Sun Jan 04 22:23:11.609637 2026] [:error] [pid 50288:tid 50346] [client 135.235.152.233:8429] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1%25.php"] [unique_id "aVp3z6_n0RHxRx0wErHLZgAAA8I"]
[Sun Jan 04 22:23:11.882588 2026] [:error] [pid 50229:tid 50255] [client 135.235.152.233:8640] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1%25.php"] [unique_id "aVp3z6hKBHGV8WZnitt3MQAAANc"]
[Sun Jan 04 22:23:12.154888 2026] [:error] [pid 45863:tid 45885] [client 135.235.152.233:1979] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1%25.php"] [unique_id "aVp30FGr1mgeue1bWvTZrQAAABQ"]
[Sun Jan 04 22:23:12.438892 2026] [:error] [pid 50286:tid 50295] [client 135.235.152.233:1117] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1%25.php"] [unique_id "aVp30IsZ42BFbcA1SgEDAQAAAkU"]
[Sun Jan 04 22:23:12.711638 2026] [:error] [pid 50229:tid 50253] [client 135.235.152.233:1949] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0%25.php"] [unique_id "aVp30KhKBHGV8WZnitt3NQAAANU"]
[Sun Jan 04 22:23:12.983728 2026] [:error] [pid 45949:tid 45971] [client 135.235.152.233:1920] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0%25.php"] [unique_id "aVp30KWUhIYCdxgkhpBRgAAAAhE"]
[Sun Jan 04 22:23:13.256095 2026] [:error] [pid 50286:tid 50302] [client 135.235.152.233:10086] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0%25.php"] [unique_id "aVp30YsZ42BFbcA1SgEDAwAAAkw"]
[Sun Jan 04 22:23:13.529008 2026] [:error] [pid 45949:tid 45956] [client 135.235.152.233:1101] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0%25.php"] [unique_id "aVp30aWUhIYCdxgkhpBRgQAAAgI"]
[Sun Jan 04 22:23:13.804105 2026] [:error] [pid 50286:tid 50314] [client 135.235.152.233:1095] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hYdXrMgTbH.php"] [unique_id "aVp30YsZ42BFbcA1SgEDBAAAAlg"]
[Sun Jan 04 22:23:14.076352 2026] [:error] [pid 45863:tid 45888] [client 135.235.152.233:8404] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hYdXrMgTbH.php"] [unique_id "aVp30lGr1mgeue1bWvTZrgAAABc"]
[Sun Jan 04 22:23:14.350396 2026] [:error] [pid 50288:tid 50360] [client 135.235.152.233:10054] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hYdXrMgTbH.php"] [unique_id "aVp30q_n0RHxRx0wErHLaAAAA9A"]
[Sun Jan 04 22:23:14.622638 2026] [:error] [pid 50229:tid 50243] [client 135.235.152.233:10048] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hYdXrMgTbH.php"] [unique_id "aVp30qhKBHGV8WZnitt3OgAAAMs"]
[Sun Jan 04 22:23:14.895457 2026] [:error] [pid 45863:tid 45878] [client 135.235.152.233:8672] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fucku.php"] [unique_id "aVp30lGr1mgeue1bWvTZsAAAAA0"]
[Sun Jan 04 22:23:15.167608 2026] [:error] [pid 45863:tid 45868] [client 135.235.152.233:1137] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fucku.php"] [unique_id "aVp301Gr1mgeue1bWvTZswAAAAM"]
[Sun Jan 04 22:23:15.438981 2026] [:error] [pid 45863:tid 45886] [client 135.235.152.233:10265] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fucku.php"] [unique_id "aVp301Gr1mgeue1bWvTZtAAAABU"]
[Sun Jan 04 22:23:15.711218 2026] [:error] [pid 45863:tid 45883] [client 135.235.152.233:4041] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fucku.php"] [unique_id "aVp301Gr1mgeue1bWvTZtQAAABI"]
[Sun Jan 04 22:23:15.983416 2026] [:error] [pid 48667:tid 48713] [client 135.235.152.233:1138] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-damin.php"] [unique_id "aVp303O6aihVIlrNAPj5_gAAARA"]
[Sun Jan 04 22:23:16.256235 2026] [:error] [pid 50286:tid 50298] [client 135.235.152.233:8405] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-damin.php"] [unique_id "aVp31IsZ42BFbcA1SgEDBwAAAkg"]
[Sun Jan 04 22:23:16.530308 2026] [:error] [pid 48633:tid 48657] [client 135.235.152.233:10300] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-damin.php"] [unique_id "aVp31HpmEoQIuLH2aWhJiAAAAFY"]
[Sun Jan 04 22:23:16.801219 2026] [:error] [pid 50229:tid 50234] [client 135.235.152.233:7698] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-damin.php"] [unique_id "aVp31KhKBHGV8WZnitt3PgAAAMI"]
[Sun Jan 04 22:23:17.072533 2026] [:error] [pid 48633:tid 48649] [client 135.235.152.233:5359] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aVp31XpmEoQIuLH2aWhJiQAAAE4"]
[Sun Jan 04 22:23:17.345256 2026] [:error] [pid 50229:tid 50248] [client 135.235.152.233:7695] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aVp31ahKBHGV8WZnitt3PwAAANA"]
[Sun Jan 04 22:23:17.617152 2026] [:error] [pid 50229:tid 50239] [client 135.235.152.233:10062] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aVp31ahKBHGV8WZnitt3QAAAAMc"]
[Sun Jan 04 22:23:17.889744 2026] [:error] [pid 50229:tid 50251] [client 135.235.152.233:5230] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aVp31ahKBHGV8WZnitt3QwAAANM"]
[Sun Jan 04 22:23:18.167042 2026] [:error] [pid 50286:tid 50312] [client 135.235.152.233:1973] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/category.tokens.php"] [unique_id "aVp31osZ42BFbcA1SgEDNwAAAlY"]
[Sun Jan 04 22:23:18.441579 2026] [:error] [pid 50288:tid 50345] [client 135.235.152.233:10252] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/category.tokens.php"] [unique_id "aVp31q_n0RHxRx0wErHLaQAAA8E"]
[Sun Jan 04 22:23:18.717250 2026] [:error] [pid 45863:tid 45866] [client 135.235.152.233:8407] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/category.tokens.php"] [unique_id "aVp31lGr1mgeue1bWvTZuAAAAAE"]
[Sun Jan 04 22:23:18.988713 2026] [:error] [pid 45863:tid 45869] [client 135.235.152.233:10079] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/category.tokens.php"] [unique_id "aVp31lGr1mgeue1bWvTZuQAAAAQ"]
[Sun Jan 04 22:23:19.264607 2026] [:error] [pid 45863:tid 45871] [client 135.235.152.233:3574] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oxshell.php"] [unique_id "aVp311Gr1mgeue1bWvTZugAAAAY"]
[Sun Jan 04 22:23:19.537820 2026] [:error] [pid 50229:tid 50236] [client 135.235.152.233:8454] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oxshell.php"] [unique_id "aVp316hKBHGV8WZnitt3SAAAAMQ"]
[Sun Jan 04 22:23:19.809905 2026] [:error] [pid 45863:tid 45874] [client 135.235.152.233:8422] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oxshell.php"] [unique_id "aVp311Gr1mgeue1bWvTZvQAAAAk"]
[Sun Jan 04 22:23:20.082195 2026] [:error] [pid 45949:tid 45963] [client 135.235.152.233:8689] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oxshell.php"] [unique_id "aVp32KWUhIYCdxgkhpBRhAAAAgk"]
[Sun Jan 04 22:23:20.355638 2026] [:error] [pid 50286:tid 50290] [client 135.235.152.233:2963] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/nomad/aec.php"] [unique_id "aVp32IsZ42BFbcA1SgEDbQAAAkA"]
[Sun Jan 04 22:23:20.628114 2026] [:error] [pid 48633:tid 48653] [client 135.235.152.233:10107] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/nomad/aec.php"] [unique_id "aVp32HpmEoQIuLH2aWhJiwAAAFI"]
[Sun Jan 04 22:23:20.901899 2026] [:error] [pid 48667:tid 48707] [client 135.235.152.233:1931] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/nomad/aec.php"] [unique_id "aVp32HO6aihVIlrNAPj6AgAAAQo"]
[Sun Jan 04 22:23:21.174603 2026] [:error] [pid 50286:tid 50294] [client 135.235.152.233:8445] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/nomad/aec.php"] [unique_id "aVp32YsZ42BFbcA1SgEDcAAAAkQ"]
[Sun Jan 04 22:23:21.453601 2026] [:error] [pid 48667:tid 48720] [client 135.235.152.233:1935] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aec.php"] [unique_id "aVp32XO6aihVIlrNAPj6BAAAARc"]
[Sun Jan 04 22:23:21.725865 2026] [:error] [pid 50229:tid 50234] [client 135.235.152.233:8395] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aec.php"] [unique_id "aVp32ahKBHGV8WZnitt3TQAAAMI"]
[Sun Jan 04 22:23:21.999204 2026] [:error] [pid 50229:tid 50239] [client 135.235.152.233:6011] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aec.php"] [unique_id "aVp32ahKBHGV8WZnitt3TwAAAMc"]
[Sun Jan 04 22:23:22.278958 2026] [:error] [pid 48633:tid 48653] [client 135.235.152.233:1127] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aec.php"] [unique_id "aVp32npmEoQIuLH2aWhJogAAAFI"]
[Sun Jan 04 22:23:22.551467 2026] [:error] [pid 50198:tid 50214] [client 135.235.152.233:2982] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVp32mdhZ-F4hMTchPgNvAAAAI4"]
[Sun Jan 04 22:23:22.824329 2026] [:error] [pid 50198:tid 50217] [client 135.235.152.233:1148] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVp32mdhZ-F4hMTchPgNvQAAAJE"]
[Sun Jan 04 22:23:23.102419 2026] [:error] [pid 50198:tid 50206] [client 135.235.152.233:5816] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVp322dhZ-F4hMTchPgNvwAAAIY"]
[Sun Jan 04 22:23:23.375269 2026] [:error] [pid 50229:tid 50241] [client 135.235.152.233:8644] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aVp326hKBHGV8WZnitt3UQAAAMk"]
[Sun Jan 04 22:23:23.647157 2026] [:error] [pid 48667:tid 48719] [client 135.235.152.233:10267] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVp323O6aihVIlrNAPj6BgAAARY"]
[Sun Jan 04 22:23:23.920040 2026] [:error] [pid 48633:tid 48656] [client 135.235.152.233:5256] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVp323pmEoQIuLH2aWhJpAAAAFU"]
[Sun Jan 04 22:23:24.193259 2026] [:error] [pid 50286:tid 50307] [client 135.235.152.233:1096] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVp33IsZ42BFbcA1SgEDcwAAAlE"]
[Sun Jan 04 22:23:24.466236 2026] [:error] [pid 50286:tid 50296] [client 135.235.152.233:1128] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aVp33IsZ42BFbcA1SgEDdAAAAkY"]
[Sun Jan 04 22:23:24.743073 2026] [:error] [pid 45949:tid 45967] [client 135.235.152.233:1961] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aiman.php"] [unique_id "aVp33KWUhIYCdxgkhpBRhQAAAg0"]
[Sun Jan 04 22:23:25.022164 2026] [:error] [pid 50286:tid 50313] [client 135.235.152.233:1116] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aiman.php"] [unique_id "aVp33YsZ42BFbcA1SgEDdgAAAlc"]
[Sun Jan 04 22:23:25.293489 2026] [:error] [pid 50229:tid 50232] [client 135.235.152.233:7738] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aiman.php"] [unique_id "aVp33ahKBHGV8WZnitt3VAAAAMA"]
[Sun Jan 04 22:23:25.565402 2026] [:error] [pid 50229:tid 50256] [client 135.235.152.233:1975] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aiman.php"] [unique_id "aVp33ahKBHGV8WZnitt3VQAAANg"]
[Sun Jan 04 22:23:25.838869 2026] [:error] [pid 50229:tid 50247] [client 135.235.152.233:8675] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVp33ahKBHGV8WZnitt3WAAAAM8"]
[Sun Jan 04 22:23:26.111115 2026] [:error] [pid 50286:tid 50314] [client 135.235.152.233:5210] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVp33osZ42BFbcA1SgEDeQAAAlg"]
[Sun Jan 04 22:23:26.384306 2026] [:error] [pid 50286:tid 50290] [client 135.235.152.233:7703] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVp33osZ42BFbcA1SgEDfAAAAkA"]
[Sun Jan 04 22:23:26.656525 2026] [:error] [pid 48667:tid 48716] [client 135.235.152.233:6438] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf9.php"] [unique_id "aVp33nO6aihVIlrNAPj6CAAAARM"]
[Sun Jan 04 22:23:26.927931 2026] [:error] [pid 50286:tid 50304] [client 135.235.152.233:6404] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "aVp33osZ42BFbcA1SgEDfgAAAk4"]
[Sun Jan 04 22:23:27.199954 2026] [:error] [pid 48667:tid 48701] [client 135.235.152.233:4047] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "aVp333O6aihVIlrNAPj6CQAAAQQ"]
[Sun Jan 04 22:23:27.473197 2026] [:error] [pid 45949:tid 45975] [client 135.235.152.233:6435] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "aVp336WUhIYCdxgkhpBRhwAAAhU"]
[Sun Jan 04 22:23:27.744716 2026] [:error] [pid 45949:tid 45966] [client 135.235.152.233:10260] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "aVp336WUhIYCdxgkhpBRiAAAAgw"]
[Sun Jan 04 22:23:28.017894 2026] [:error] [pid 45949:tid 45976] [client 135.235.152.233:8696] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9v6.php"] [unique_id "aVp34KWUhIYCdxgkhpBRiQAAAhY"]
[Sun Jan 04 22:23:28.289560 2026] [:error] [pid 50229:tid 50244] [client 135.235.152.233:5822] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9v6.php"] [unique_id "aVp34KhKBHGV8WZnitt3XQAAAMw"]
[Sun Jan 04 22:23:28.565277 2026] [:error] [pid 48667:tid 48700] [client 135.235.152.233:7690] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9v6.php"] [unique_id "aVp34HO6aihVIlrNAPj6CwAAAQM"]
[Sun Jan 04 22:23:28.842195 2026] [:error] [pid 50229:tid 50246] [client 135.235.152.233:5217] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9v6.php"] [unique_id "aVp34KhKBHGV8WZnitt3XgAAAM4"]
[Sun Jan 04 22:23:29.114808 2026] [:error] [pid 42666:tid 42705] [client 135.235.152.233:10275] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lte7.php"] [unique_id "aVp34fc221c7vwWrOjcWuwAAAwg"]
[Sun Jan 04 22:23:29.387408 2026] [:error] [pid 50229:tid 50236] [client 135.235.152.233:8688] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lte7.php"] [unique_id "aVp34ahKBHGV8WZnitt3XwAAAMQ"]
[Sun Jan 04 22:23:29.658790 2026] [:error] [pid 50286:tid 50298] [client 135.235.152.233:7740] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lte7.php"] [unique_id "aVp34YsZ42BFbcA1SgEDgQAAAkg"]
[Sun Jan 04 22:23:29.932029 2026] [:error] [pid 50286:tid 50294] [client 135.235.152.233:4070] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lte7.php"] [unique_id "aVp34YsZ42BFbcA1SgEDggAAAkQ"]
[Sun Jan 04 22:23:30.204695 2026] [:error] [pid 48727:tid 48779] [client 135.235.152.233:7696] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVp34vgJtUs-E_QT0ibb5wAAA1Y"]
[Sun Jan 04 22:23:30.476489 2026] [:error] [pid 42666:tid 42701] [client 135.235.152.233:8417] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVp34vc221c7vwWrOjcWvAAAAwQ"]
[Sun Jan 04 22:23:30.750159 2026] [:error] [pid 45863:tid 45877] [client 135.235.152.233:5213] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVp34lGr1mgeue1bWvTZwAAAAAw"]
[Sun Jan 04 22:23:31.023398 2026] [:error] [pid 42666:tid 42706] [client 135.235.152.233:2930] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1vbqo.php"] [unique_id "aVp34_c221c7vwWrOjcWvQAAAwk"]
[Sun Jan 04 22:23:31.298528 2026] [:error] [pid 50198:tid 50201] [client 135.235.152.233:8425] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVp342dhZ-F4hMTchPgNwwAAAIE"]
[Sun Jan 04 22:23:31.570191 2026] [:error] [pid 42666:tid 42709] [client 135.235.152.233:6976] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVp34_c221c7vwWrOjcWvgAAAww"]
[Sun Jan 04 22:23:31.843156 2026] [:error] [pid 48667:tid 48703] [client 135.235.152.233:1139] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVp343O6aihVIlrNAPj6DQAAAQY"]
[Sun Jan 04 22:23:32.114951 2026] [:error] [pid 45863:tid 45869] [client 135.235.152.233:1546] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "aVp35FGr1mgeue1bWvTZwgAAAAQ"]
[Sun Jan 04 22:23:32.387617 2026] [:error] [pid 50198:tid 50215] [client 135.235.152.233:6459] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVp35GdhZ-F4hMTchPgNxgAAAI8"]
[Sun Jan 04 22:23:32.660695 2026] [:error] [pid 48667:tid 48720] [client 135.235.152.233:6432] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVp35HO6aihVIlrNAPj6DwAAARc"]
[Sun Jan 04 22:23:32.933463 2026] [:error] [pid 42666:tid 42708] [client 135.235.152.233:8700] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVp35Pc221c7vwWrOjcWwQAAAws"]
[Sun Jan 04 22:23:33.206189 2026] [:error] [pid 45863:tid 45865] [client 135.235.152.233:9570] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fdd2.php"] [unique_id "aVp35VGr1mgeue1bWvTZxAAAAAA"]
[Sun Jan 04 22:23:33.479945 2026] [:error] [pid 50286:tid 50305] [client 135.235.152.233:9910] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7h.php"] [unique_id "aVp35YsZ42BFbcA1SgEDhgAAAk8"]
[Sun Jan 04 22:23:33.751263 2026] [:error] [pid 45863:tid 45873] [client 135.235.152.233:10298] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7h.php"] [unique_id "aVp35VGr1mgeue1bWvTZxQAAAAg"]
[Sun Jan 04 22:23:34.023767 2026] [:error] [pid 45863:tid 45879] [client 135.235.152.233:3891] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7h.php"] [unique_id "aVp35lGr1mgeue1bWvTZxgAAAA4"]
[Sun Jan 04 22:23:34.298996 2026] [:error] [pid 45863:tid 45874] [client 135.235.152.233:4200] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7h.php"] [unique_id "aVp35lGr1mgeue1bWvTZxwAAAAk"]
[Sun Jan 04 22:23:34.571845 2026] [:error] [pid 50286:tid 50298] [client 135.235.152.233:9551] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aVp35osZ42BFbcA1SgEDiwAAAkg"]
[Sun Jan 04 22:23:34.845148 2026] [:error] [pid 45863:tid 45876] [client 135.235.152.233:6443] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aVp35lGr1mgeue1bWvTZyAAAAAs"]
[Sun Jan 04 22:23:35.116464 2026] [:error] [pid 45949:tid 45954] [client 135.235.152.233:7039] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aVp356WUhIYCdxgkhpBRlAAAAgA"]
[Sun Jan 04 22:23:35.389083 2026] [:error] [pid 50288:tid 50348] [client 135.235.152.233:3900] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fh26.php"] [unique_id "aVp356_n0RHxRx0wErHLbAAAA8Q"]
[Sun Jan 04 22:23:35.661719 2026] [:error] [pid 48667:tid 48719] [client 135.235.152.233:2980] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVp353O6aihVIlrNAPj6EgAAARY"]
[Sun Jan 04 22:23:35.934252 2026] [:error] [pid 45949:tid 45962] [client 135.235.152.233:5309] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVp356WUhIYCdxgkhpBRlQAAAgg"]
[Sun Jan 04 22:23:36.206979 2026] [:error] [pid 45949:tid 45959] [client 135.235.152.233:9579] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVp36KWUhIYCdxgkhpBRlgAAAgU"]
[Sun Jan 04 22:23:36.482852 2026] [:error] [pid 48727:tid 48771] [client 135.235.152.233:2886] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ixj.php"] [unique_id "aVp36PgJtUs-E_QT0ibb6gAAA04"]
[Sun Jan 04 22:23:36.756520 2026] [:error] [pid 45949:tid 45972] [client 135.235.152.233:6402] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x23.php"] [unique_id "aVp36KWUhIYCdxgkhpBRmAAAAhI"]
[Sun Jan 04 22:23:37.027619 2026] [:error] [pid 42666:tid 42713] [client 135.235.152.233:9554] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x23.php"] [unique_id "aVp36fc221c7vwWrOjcWwgAAAxA"]
[Sun Jan 04 22:23:37.300031 2026] [:error] [pid 50198:tid 50224] [client 135.235.152.233:3874] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x23.php"] [unique_id "aVp36WdhZ-F4hMTchPgNxwAAAJg"]
[Sun Jan 04 22:23:37.572029 2026] [:error] [pid 50198:tid 50211] [client 135.235.152.233:8414] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x23.php"] [unique_id "aVp36WdhZ-F4hMTchPgNyAAAAIs"]
[Sun Jan 04 22:23:37.850645 2026] [:error] [pid 48727:tid 48758] [client 135.235.152.233:9566] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVp36fgJtUs-E_QT0ibb7QAAA0E"]
[Sun Jan 04 22:23:38.123124 2026] [:error] [pid 48727:tid 48763] [client 135.235.152.233:3895] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVp36vgJtUs-E_QT0ibb7gAAA0Y"]
[Sun Jan 04 22:23:38.396155 2026] [:error] [pid 48727:tid 48760] [client 135.235.152.233:1945] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVp36vgJtUs-E_QT0ibb8AAAA0M"]
[Sun Jan 04 22:23:38.669437 2026] [:error] [pid 45863:tid 45888] [client 135.235.152.233:1089] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeu.php"] [unique_id "aVp36lGr1mgeue1bWvTZzAAAABc"]
[Sun Jan 04 22:23:38.942117 2026] [:error] [pid 45863:tid 45880] [client 135.235.152.233:3892] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2r4.php"] [unique_id "aVp36lGr1mgeue1bWvTZzgAAAA8"]
[Sun Jan 04 22:23:39.215009 2026] [:error] [pid 50288:tid 50347] [client 135.235.152.233:8402] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2r4.php"] [unique_id "aVp366_n0RHxRx0wErHLbgAAA8M"]
[Sun Jan 04 22:23:39.487710 2026] [:error] [pid 45863:tid 45878] [client 135.235.152.233:1102] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2r4.php"] [unique_id "aVp361Gr1mgeue1bWvTZzwAAAA0"]
[Sun Jan 04 22:23:39.760172 2026] [:error] [pid 50229:tid 50233] [client 135.235.152.233:10270] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2r4.php"] [unique_id "aVp366hKBHGV8WZnitt3YgAAAME"]
[Sun Jan 04 22:23:40.033309 2026] [:error] [pid 50229:tid 50238] [client 135.235.152.233:9916] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVp37KhKBHGV8WZnitt3YwAAAMY"]
[Sun Jan 04 22:23:40.305472 2026] [:error] [pid 48667:tid 48716] [client 135.235.152.233:8442] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVp37HO6aihVIlrNAPj6KwAAARM"]
[Sun Jan 04 22:23:40.576967 2026] [:error] [pid 50288:tid 50368] [client 135.235.152.233:9552] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVp37K_n0RHxRx0wErHLbwAAA9g"]
[Sun Jan 04 22:23:40.849152 2026] [:error] [pid 50286:tid 50314] [client 135.235.152.233:7023] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "aVp37IsZ42BFbcA1SgEDkAAAAlg"]
[Sun Jan 04 22:23:41.120875 2026] [:error] [pid 50286:tid 50295] [client 135.235.152.233:9902] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVp37YsZ42BFbcA1SgEDkQAAAkU"]
[Sun Jan 04 22:23:41.396345 2026] [:error] [pid 45949:tid 45954] [client 135.235.152.233:5245] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVp37aWUhIYCdxgkhpBRnQAAAgA"]
[Sun Jan 04 22:23:41.669245 2026] [:error] [pid 45949:tid 45973] [client 135.235.152.233:9557] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVp37aWUhIYCdxgkhpBRngAAAhM"]
[Sun Jan 04 22:23:41.941648 2026] [:error] [pid 45863:tid 45883] [client 135.235.152.233:9857] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xs.php"] [unique_id "aVp37VGr1mgeue1bWvTZ0gAAABI"]
[Sun Jan 04 22:23:42.217416 2026] [:error] [pid 50198:tid 50214] [client 135.235.152.233:3853] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVp37mdhZ-F4hMTchPgNyQAAAI4"]
[Sun Jan 04 22:23:42.490336 2026] [:error] [pid 45863:tid 45884] [client 135.235.152.233:6456] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVp37lGr1mgeue1bWvTZ0wAAABM"]
[Sun Jan 04 22:23:42.762902 2026] [:error] [pid 45949:tid 45957] [client 135.235.152.233:6993] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVp37qWUhIYCdxgkhpBRoAAAAgM"]
[Sun Jan 04 22:23:43.034306 2026] [:error] [pid 42666:tid 42699] [client 135.235.152.233:4170] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Zeiss.php"] [unique_id "aVp37_c221c7vwWrOjcWxAAAAwI"]
[Sun Jan 04 22:23:43.308863 2026] [:error] [pid 42666:tid 42721] [client 135.235.152.233:9912] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVp37_c221c7vwWrOjcWxQAAAxg"]
[Sun Jan 04 22:23:43.580728 2026] [:error] [pid 50229:tid 50253] [client 135.235.152.233:3864] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVp376hKBHGV8WZnitt3ZQAAANU"]
[Sun Jan 04 22:23:43.853948 2026] [:error] [pid 50229:tid 50240] [client 135.235.152.233:6451] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVp376hKBHGV8WZnitt3ZgAAAMg"]
[Sun Jan 04 22:23:44.137974 2026] [:error] [pid 48667:tid 48710] [client 135.235.152.233:10240] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0x.php"] [unique_id "aVp38HO6aihVIlrNAPj6LAAAAQ0"]
[Sun Jan 04 22:23:44.410781 2026] [:error] [pid 50288:tid 50365] [client 135.235.152.233:1115] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVp38K_n0RHxRx0wErHLcAAAA9U"]
[Sun Jan 04 22:23:44.683261 2026] [:error] [pid 45949:tid 45963] [client 135.235.152.233:9585] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVp38KWUhIYCdxgkhpBRoQAAAgk"]
[Sun Jan 04 22:23:44.956492 2026] [:error] [pid 45949:tid 45968] [client 135.235.152.233:6448] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVp38KWUhIYCdxgkhpBRogAAAg4"]
[Sun Jan 04 22:23:45.229253 2026] [:error] [pid 42666:tid 42718] [client 135.235.152.233:7004] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adin.php"] [unique_id "aVp38fc221c7vwWrOjcWxwAAAxU"]
[Sun Jan 04 22:23:45.502171 2026] [:error] [pid 48727:tid 48768] [client 135.235.152.233:3865] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "aVp38fgJtUs-E_QT0ibb8QAAA0s"]
[Sun Jan 04 22:23:45.775301 2026] [:error] [pid 50198:tid 50217] [client 135.235.152.233:4081] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "aVp38WdhZ-F4hMTchPgNygAAAJE"]
[Sun Jan 04 22:23:46.050022 2026] [:error] [pid 48727:tid 48766] [client 135.235.152.233:3887] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "aVp38vgJtUs-E_QT0ibb8gAAA0k"]
[Sun Jan 04 22:23:46.322186 2026] [:error] [pid 50198:tid 50204] [client 135.235.152.233:5009] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "aVp38mdhZ-F4hMTchPgNzQAAAIQ"]
[Sun Jan 04 22:23:46.602289 2026] [:error] [pid 50198:tid 50219] [client 135.235.152.233:6442] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jhdnZ.php"] [unique_id "aVp38mdhZ-F4hMTchPgNzgAAAJM"]
[Sun Jan 04 22:23:46.873983 2026] [:error] [pid 48727:tid 48770] [client 135.235.152.233:1118] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jhdnZ.php"] [unique_id "aVp38vgJtUs-E_QT0ibb9AAAA00"]
[Sun Jan 04 22:23:47.144826 2026] [:error] [pid 48727:tid 48757] [client 135.235.152.233:9869] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jhdnZ.php"] [unique_id "aVp38_gJtUs-E_QT0ibb9QAAA0A"]
[Sun Jan 04 22:23:47.416040 2026] [:error] [pid 48667:tid 48702] [client 135.235.152.233:9915] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jhdnZ.php"] [unique_id "aVp383O6aihVIlrNAPj6LgAAAQU"]
[Sun Jan 04 22:23:47.688139 2026] [:error] [pid 45949:tid 45959] [client 135.235.152.233:3875] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aku.php"] [unique_id "aVp386WUhIYCdxgkhpBRowAAAgU"]
[Sun Jan 04 22:23:47.960667 2026] [:error] [pid 50229:tid 50248] [client 135.235.152.233:1132] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aku.php"] [unique_id "aVp386hKBHGV8WZnitt3aQAAANA"]
[Sun Jan 04 22:23:48.234512 2026] [:error] [pid 50229:tid 50252] [client 135.235.152.233:5052] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aku.php"] [unique_id "aVp39KhKBHGV8WZnitt3agAAANQ"]
[Sun Jan 04 22:23:48.508785 2026] [:error] [pid 45949:tid 45958] [client 135.235.152.233:9866] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aku.php"] [unique_id "aVp39KWUhIYCdxgkhpBRpAAAAgQ"]
[Sun Jan 04 22:23:48.781738 2026] [:error] [pid 42666:tid 42715] [client 135.235.152.233:1131] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVp39Pc221c7vwWrOjcWyQAAAxI"]
[Sun Jan 04 22:23:49.056126 2026] [:error] [pid 50198:tid 50207] [client 135.235.152.233:8471] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVp39WdhZ-F4hMTchPgNzwAAAIc"]
[Sun Jan 04 22:23:49.327910 2026] [:error] [pid 48727:tid 48777] [client 135.235.152.233:6996] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVp39fgJtUs-E_QT0ibb9gAAA1Q"]
[Sun Jan 04 22:23:49.599428 2026] [:error] [pid 50229:tid 50244] [client 135.235.152.233:9550] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "aVp39ahKBHGV8WZnitt3awAAAMw"]
[Sun Jan 04 22:23:49.871595 2026] [:error] [pid 50286:tid 50306] [client 135.235.152.233:1119] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aVp39YsZ42BFbcA1SgEDkwAAAlA"]
[Sun Jan 04 22:23:50.144522 2026] [:error] [pid 50286:tid 50311] [client 135.235.152.233:4994] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aVp39osZ42BFbcA1SgEDlAAAAlU"]
[Sun Jan 04 22:23:50.417216 2026] [:error] [pid 50288:tid 50356] [client 135.235.152.233:9562] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aVp39q_n0RHxRx0wErHLcQAAA8w"]
[Sun Jan 04 22:23:50.693259 2026] [:error] [pid 50229:tid 50236] [client 135.235.152.233:8682] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aVp39qhKBHGV8WZnitt3bQAAAMQ"]
[Sun Jan 04 22:23:50.965879 2026] [:error] [pid 50286:tid 50302] [client 135.235.152.233:5240] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aVp39osZ42BFbcA1SgEDlgAAAkw"]
[Sun Jan 04 22:23:51.239842 2026] [:error] [pid 50198:tid 50203] [client 135.235.152.233:7013] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aVp392dhZ-F4hMTchPgN0QAAAIM"]
[Sun Jan 04 22:23:51.514022 2026] [:error] [pid 50198:tid 50218] [client 135.235.152.233:3127] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aVp392dhZ-F4hMTchPgN0wAAAJI"]
[Sun Jan 04 22:23:51.785728 2026] [:error] [pid 50198:tid 50201] [client 135.235.152.233:3103] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "aVp392dhZ-F4hMTchPgN1AAAAIE"]
[Sun Jan 04 22:23:52.058984 2026] [:error] [pid 50229:tid 50243] [client 135.235.152.233:1943] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpssl.php"] [unique_id "aVp3-KhKBHGV8WZnitt3bgAAAMs"]
[Sun Jan 04 22:23:52.331283 2026] [:error] [pid 50286:tid 50293] [client 135.235.152.233:3135] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpssl.php"] [unique_id "aVp3-IsZ42BFbcA1SgEDmAAAAkM"]
[Sun Jan 04 22:23:52.604588 2026] [:error] [pid 50286:tid 50292] [client 135.235.152.233:6463] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpssl.php"] [unique_id "aVp3-IsZ42BFbcA1SgEDmQAAAkI"]
[Sun Jan 04 22:23:52.877297 2026] [:error] [pid 50229:tid 50251] [client 135.235.152.233:6431] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpssl.php"] [unique_id "aVp3-KhKBHGV8WZnitt3cAAAANM"]
[Sun Jan 04 22:23:53.149457 2026] [:error] [pid 50286:tid 50310] [client 135.235.152.233:3865] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmmm.php"] [unique_id "aVp3-YsZ42BFbcA1SgEDmwAAAlQ"]
[Sun Jan 04 22:23:53.422007 2026] [:error] [pid 50288:tid 50360] [client 135.235.152.233:9567] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmmm.php"] [unique_id "aVp3-a_n0RHxRx0wErHLcgAAA9A"]
[Sun Jan 04 22:23:53.694335 2026] [:error] [pid 50229:tid 50232] [client 135.235.152.233:9547] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmmm.php"] [unique_id "aVp3-ahKBHGV8WZnitt3cgAAAMA"]
[Sun Jan 04 22:23:53.966319 2026] [:error] [pid 50286:tid 50297] [client 135.235.152.233:4187] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmmm.php"] [unique_id "aVp3-YsZ42BFbcA1SgEDnQAAAkc"]
[Sun Jan 04 22:23:54.238187 2026] [:error] [pid 50286:tid 50291] [client 135.235.152.233:6999] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "aVp3-osZ42BFbcA1SgEDngAAAkE"]
[Sun Jan 04 22:23:54.515353 2026] [:error] [pid 42666:tid 42700] [client 135.235.152.233:1521] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "aVp3-vc221c7vwWrOjcWywAAAwM"]
[Sun Jan 04 22:23:54.788654 2026] [:error] [pid 42666:tid 42711] [client 135.235.152.233:1094] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "aVp3-vc221c7vwWrOjcWzAAAAw4"]
[Sun Jan 04 22:23:55.062769 2026] [:error] [pid 50286:tid 50307] [client 135.235.152.233:5048] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "aVp3-4sZ42BFbcA1SgEDoAAAAlE"]
[Sun Jan 04 22:23:55.336418 2026] [:error] [pid 42666:tid 42704] [client 135.235.152.233:3584] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxasd.php"] [unique_id "aVp3-_c221c7vwWrOjcWzgAAAwc"]
[Sun Jan 04 22:23:55.608072 2026] [:error] [pid 50229:tid 50235] [client 135.235.152.233:2522] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxasd.php"] [unique_id "aVp3-6hKBHGV8WZnitt3cwAAAMM"]
[Sun Jan 04 22:23:55.880643 2026] [:error] [pid 50286:tid 50309] [client 135.235.152.233:5038] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxasd.php"] [unique_id "aVp3-4sZ42BFbcA1SgEDoQAAAlM"]
[Sun Jan 04 22:23:56.154595 2026] [:error] [pid 50286:tid 50308] [client 135.235.152.233:4182] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxasd.php"] [unique_id "aVp3_IsZ42BFbcA1SgEDogAAAlI"]
[Sun Jan 04 22:23:56.426209 2026] [:error] [pid 50229:tid 50247] [client 135.235.152.233:1492] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpfile.php"] [unique_id "aVp3_KhKBHGV8WZnitt3dAAAAM8"]
[Sun Jan 04 22:23:56.698715 2026] [:error] [pid 50286:tid 50314] [client 135.235.152.233:3073] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpfile.php"] [unique_id "aVp3_IsZ42BFbcA1SgEDowAAAlg"]
[Sun Jan 04 22:23:56.971156 2026] [:error] [pid 50288:tid 50359] [client 135.235.152.233:2546] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpfile.php"] [unique_id "aVp3_K_n0RHxRx0wErHLdAAAA88"]
[Sun Jan 04 22:23:57.245980 2026] [:error] [pid 45949:tid 45976] [client 135.235.152.233:4956] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpfile.php"] [unique_id "aVp3_aWUhIYCdxgkhpBRpwAAAhY"]
[Sun Jan 04 22:23:57.520397 2026] [:error] [pid 45863:tid 45873] [client 135.235.152.233:5027] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/foyhd.php"] [unique_id "aVp3_VGr1mgeue1bWvTZ2gAAAAg"]
[Sun Jan 04 22:23:57.794142 2026] [:error] [pid 45863:tid 45879] [client 135.235.152.233:7315] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/foyhd.php"] [unique_id "aVp3_VGr1mgeue1bWvTZ2wAAAA4"]
[Sun Jan 04 22:23:58.066722 2026] [:error] [pid 50286:tid 50301] [client 135.235.152.233:6394] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/foyhd.php"] [unique_id "aVp3_osZ42BFbcA1SgEDpAAAAks"]
[Sun Jan 04 22:23:58.339468 2026] [:error] [pid 45949:tid 45965] [client 135.235.152.233:1738] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/foyhd.php"] [unique_id "aVp3_qWUhIYCdxgkhpBRqgAAAgs"]
[Sun Jan 04 22:23:58.611829 2026] [:error] [pid 50286:tid 50295] [client 135.235.152.233:7350] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f350.php"] [unique_id "aVp3_osZ42BFbcA1SgEDpQAAAkU"]
[Sun Jan 04 22:23:58.884567 2026] [:error] [pid 48727:tid 48780] [client 135.235.152.233:4979] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f350.php"] [unique_id "aVp3_vgJtUs-E_QT0ibb-gAAA1c"]
[Sun Jan 04 22:23:59.160440 2026] [:error] [pid 50286:tid 50290] [client 135.235.152.233:1758] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f350.php"] [unique_id "aVp3_4sZ42BFbcA1SgEDpwAAAkA"]
[Sun Jan 04 22:23:59.433623 2026] [:error] [pid 48727:tid 48762] [client 135.235.152.233:1733] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f350.php"] [unique_id "aVp3__gJtUs-E_QT0ibb-wAAA0U"]
[Sun Jan 04 22:23:59.705659 2026] [:error] [pid 50288:tid 50344] [client 135.235.152.233:7335] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CmKHK.php"] [unique_id "aVp3_6_n0RHxRx0wErHLdgAAA8A"]
[Sun Jan 04 22:23:59.977716 2026] [:error] [pid 50286:tid 50305] [client 135.235.152.233:6344] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CmKHK.php"] [unique_id "aVp3_4sZ42BFbcA1SgEDqAAAAk8"]
[Sun Jan 04 22:24:00.250785 2026] [:error] [pid 48727:tid 48763] [client 135.235.152.233:2552] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CmKHK.php"] [unique_id "aVp4APgJtUs-E_QT0ibb_AAAA0Y"]
[Sun Jan 04 22:24:00.523348 2026] [:error] [pid 45949:tid 45971] [client 135.235.152.233:4047] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CmKHK.php"] [unique_id "aVp4AKWUhIYCdxgkhpBRrAAAAhE"]
[Sun Jan 04 22:24:00.796030 2026] [:error] [pid 50286:tid 50299] [client 135.235.152.233:1731] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtg.php"] [unique_id "aVp4AIsZ42BFbcA1SgEDqwAAAkk"]
[Sun Jan 04 22:24:01.071912 2026] [:error] [pid 48667:tid 48705] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/rtg.php
[Sun Jan 04 22:24:01.211476 2026] [:error] [pid 48667:tid 48713] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/fluentform.php
[Sun Jan 04 22:24:01.351451 2026] [:error] [pid 48667:tid 48718] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/agqpec.php
[Sun Jan 04 22:24:01.492089 2026] [:error] [pid 48667:tid 48703] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/byuri.php
[Sun Jan 04 22:24:01.632326 2026] [:error] [pid 48667:tid 48720] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/oiko6u.php
[Sun Jan 04 22:24:01.911777 2026] [:error] [pid 48667:tid 48707] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/9WOLF.php
[Sun Jan 04 22:24:02.051656 2026] [:error] [pid 48667:tid 48715] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/crew.php
[Sun Jan 04 22:24:02.191704 2026] [:error] [pid 48667:tid 48714] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/sx_pms.php
[Sun Jan 04 22:24:02.332087 2026] [:error] [pid 48667:tid 48719] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/btex.php
[Sun Jan 04 22:24:02.470931 2026] [:error] [pid 48667:tid 48717] [client 135.235.152.233:6397] File does not exist: /usr/local/apache/htdocs/suspended-page/lptlo.php
[Sun Jan 04 22:24:02.607854 2026] [:error] [pid 48667:tid 48709] [client 135.235.152.233:6397] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xlluw.php"] [unique_id "aVp4AnO6aihVIlrNAPj6PgAAAQw"]
[Sun Jan 04 22:24:02.882738 2026] [:error] [pid 50286:tid 50307] [client 135.235.152.233:1651] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xlluw.php"] [unique_id "aVp4AosZ42BFbcA1SgEDswAAAlE"]
[Sun Jan 04 22:24:03.157312 2026] [:error] [pid 50229:tid 50250] [client 135.235.152.233:1750] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xlluw.php"] [unique_id "aVp4A6hKBHGV8WZnitt3dgAAANI"]
[Sun Jan 04 22:24:03.429976 2026] [:error] [pid 50229:tid 50239] [client 135.235.152.233:4140] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xlluw.php"] [unique_id "aVp4A6hKBHGV8WZnitt3eAAAAMc"]
[Sun Jan 04 22:24:03.702864 2026] [:error] [pid 50229:tid 50238] [client 135.235.152.233:8176] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auot.php"] [unique_id "aVp4A6hKBHGV8WZnitt3eQAAAMY"]
[Sun Jan 04 22:24:03.974411 2026] [:error] [pid 50288:tid 50355] [client 135.235.152.233:4147] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auot.php"] [unique_id "aVp4A6_n0RHxRx0wErHLeAAAA8s"]
[Sun Jan 04 22:24:04.253387 2026] [:error] [pid 48727:tid 48760] [client 135.235.152.233:1649] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auot.php"] [unique_id "aVp4BPgJtUs-E_QT0ibb_QAAA0M"]
[Sun Jan 04 22:24:04.526509 2026] [:error] [pid 50286:tid 50301] [client 135.235.152.233:6363] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auot.php"] [unique_id "aVp4BIsZ42BFbcA1SgEDtQAAAks"]
[Sun Jan 04 22:24:04.799195 2026] [:error] [pid 45949:tid 45969] [client 135.235.152.233:1620] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ymq4nt.php"] [unique_id "aVp4BKWUhIYCdxgkhpBRrQAAAg8"]
[Sun Jan 04 22:24:05.072239 2026] [:error] [pid 50229:tid 50253] [client 135.235.152.233:4143] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ymq4nt.php"] [unique_id "aVp4BahKBHGV8WZnitt3ewAAANU"]
[Sun Jan 04 22:24:05.345608 2026] [:error] [pid 50229:tid 50240] [client 135.235.152.233:1986] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ymq4nt.php"] [unique_id "aVp4BahKBHGV8WZnitt3fAAAAMg"]
[Sun Jan 04 22:24:05.619124 2026] [:error] [pid 48667:tid 48700] [client 135.235.152.233:2015] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ymq4nt.php"] [unique_id "aVp4BXO6aihVIlrNAPj6QgAAAQM"]
[Sun Jan 04 22:24:05.891965 2026] [:error] [pid 50229:tid 50255] [client 135.235.152.233:8132] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inzrw.php"] [unique_id "aVp4BahKBHGV8WZnitt3fQAAANc"]
[Sun Jan 04 22:24:06.165909 2026] [:error] [pid 42666:tid 42710] [client 135.235.152.233:8528] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inzrw.php"] [unique_id "aVp4Bvc221c7vwWrOjcW1AAAAw0"]
[Sun Jan 04 22:24:06.440374 2026] [:error] [pid 48667:tid 48705] [client 135.235.152.233:8537] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inzrw.php"] [unique_id "aVp4BnO6aihVIlrNAPj6RQAAAQg"]
[Sun Jan 04 22:24:06.715029 2026] [:error] [pid 50229:tid 50241] [client 135.235.152.233:8622] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inzrw.php"] [unique_id "aVp4BqhKBHGV8WZnitt3fgAAAMk"]
[Sun Jan 04 22:24:06.991294 2026] [:error] [pid 50229:tid 50248] [client 135.235.152.233:6375] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca.php"] [unique_id "aVp4BqhKBHGV8WZnitt3fwAAANA"]
[Sun Jan 04 22:24:07.265160 2026] [:error] [pid 50288:tid 50357] [client 135.235.152.233:4129] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca.php"] [unique_id "aVp4B6_n0RHxRx0wErHLegAAA80"]
[Sun Jan 04 22:24:07.536811 2026] [:error] [pid 50288:tid 50354] [client 135.235.152.233:8561] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca.php"] [unique_id "aVp4B6_n0RHxRx0wErHLfAAAA8o"]
[Sun Jan 04 22:24:07.808601 2026] [:error] [pid 50229:tid 50244] [client 135.235.152.233:1654] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca.php"] [unique_id "aVp4B6hKBHGV8WZnitt3gQAAAMw"]
[Sun Jan 04 22:24:08.081487 2026] [:error] [pid 48667:tid 48703] [client 135.235.152.233:4133] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iuoqc.php"] [unique_id "aVp4CHO6aihVIlrNAPj6RwAAAQY"]
[Sun Jan 04 22:24:08.354325 2026] [:error] [pid 50229:tid 50236] [client 135.235.152.233:1626] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iuoqc.php"] [unique_id "aVp4CKhKBHGV8WZnitt3ggAAAMQ"]
[Sun Jan 04 22:24:08.628517 2026] [:error] [pid 50288:tid 50347] [client 135.235.152.233:1658] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iuoqc.php"] [unique_id "aVp4CK_n0RHxRx0wErHLfwAAA8M"]
[Sun Jan 04 22:24:08.902031 2026] [:error] [pid 50288:tid 50352] [client 135.235.152.233:6378] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iuoqc.php"] [unique_id "aVp4CK_n0RHxRx0wErHLgQAAA8g"]
[Sun Jan 04 22:24:09.187409 2026] [:error] [pid 48667:tid 48715] [client 135.235.152.233:8624] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1j.php"] [unique_id "aVp4CXO6aihVIlrNAPj6SQAAARI"]
[Sun Jan 04 22:24:09.460230 2026] [:error] [pid 42666:tid 42714] [client 135.235.152.233:3317] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1j.php"] [unique_id "aVp4Cfc221c7vwWrOjcW1wAAAxE"]
[Sun Jan 04 22:24:09.732308 2026] [:error] [pid 42666:tid 42699] [client 135.235.152.233:2030] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1j.php"] [unique_id "aVp4Cfc221c7vwWrOjcW2AAAAwI"]
[Sun Jan 04 22:24:10.005682 2026] [:error] [pid 42666:tid 42698] [client 135.235.152.233:4125] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1j.php"] [unique_id "aVp4Cvc221c7vwWrOjcW2gAAAwE"]
[Sun Jan 04 22:24:10.281202 2026] [:error] [pid 50286:tid 50305] [client 135.235.152.233:8161] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qufsq.php"] [unique_id "aVp4CosZ42BFbcA1SgEDtgAAAk8"]
[Sun Jan 04 22:24:10.553916 2026] [:error] [pid 42666:tid 42718] [client 135.235.152.233:6605] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qufsq.php"] [unique_id "aVp4Cvc221c7vwWrOjcW3AAAAxU"]
[Sun Jan 04 22:24:10.827302 2026] [:error] [pid 48667:tid 48712] [client 135.235.152.233:8620] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qufsq.php"] [unique_id "aVp4CnO6aihVIlrNAPj6SwAAAQ8"]
[Sun Jan 04 22:24:11.100853 2026] [:error] [pid 45863:tid 45880] [client 135.235.152.233:3282] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qufsq.php"] [unique_id "aVp4C1Gr1mgeue1bWvTZ3wAAAA8"]
[Sun Jan 04 22:24:11.373144 2026] [:error] [pid 50288:tid 50360] [client 135.235.152.233:6613] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aVp4C6_n0RHxRx0wErHLhAAAA9A"]
[Sun Jan 04 22:24:11.647638 2026] [:error] [pid 50288:tid 50364] [client 135.235.152.233:6651] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aVp4C6_n0RHxRx0wErHLhQAAA9Q"]
[Sun Jan 04 22:24:11.920340 2026] [:error] [pid 45863:tid 45878] [client 135.235.152.233:8139] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aVp4C1Gr1mgeue1bWvTZ4QAAAA0"]
[Sun Jan 04 22:24:12.199632 2026] [:error] [pid 48727:tid 48768] [client 135.235.152.233:4958] [client 135.235.152.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aVp4DPgJtUs-E_QT0ibcAwAAA0s"]
[Sun Jan 04 23:06:35.095395 2026] [:error] [pid 50198:tid 50218] [client 43.157.150.69:39698] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVqB-2dhZ-F4hMTchPgUPwAAAJI"]
[Mon Jan 05 02:24:41.870732 2026] [:error] [pid 22541:tid 22621] [client 43.133.139.6:38592] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVqwaUkjzS6tgkL3JEu35wAAAhQ"]
[Mon Jan 05 04:53:34.710228 2026] [:error] [pid 5535:tid 5581] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/d996699999.php
[Mon Jan 05 04:53:34.833026 2026] [:error] [pid 5535:tid 5577] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Mon Jan 05 04:53:34.966782 2026] [:error] [pid 5535:tid 5593] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Mon Jan 05 04:53:35.089828 2026] [:error] [pid 5535:tid 5592] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Mon Jan 05 04:53:35.216217 2026] [:error] [pid 5535:tid 5579] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/wpup.php
[Mon Jan 05 04:53:35.340207 2026] [:error] [pid 5535:tid 5588] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/bras.php
[Mon Jan 05 04:53:35.493866 2026] [:error] [pid 5535:tid 5574] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/esp.php
[Mon Jan 05 04:53:35.634537 2026] [:error] [pid 5535:tid 5594] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/f2f.php
[Mon Jan 05 04:53:36.065927 2026] [:error] [pid 5535:tid 5590] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/an8.php
[Mon Jan 05 04:53:36.320510 2026] [:error] [pid 5535:tid 5582] [client 20.189.202.60:34114] File does not exist: /usr/local/apache/htdocs/suspended-page/flower2.php
[Mon Jan 05 04:53:36.462776 2026] [:error] [pid 5535:tid 5572] [client 20.189.202.60:34114] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVrTUGnkedMjhVX0PTV8QQAAAEI"]
[Mon Jan 05 04:53:37.721948 2026] [:error] [pid 5536:tid 5608] [client 20.189.202.60:40780] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVrTUQRtMZNG6xI8yDy8rQAAAIs"]
[Mon Jan 05 04:53:43.121675 2026] [:error] [pid 6680:tid 6686] [client 20.189.202.60:51932] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xde.php"] [unique_id "aVrTV6E58uNoazzTmx3CkAAAAQQ"]
[Mon Jan 05 04:53:54.329081 2026] [:error] [pid 5535:tid 5573] [client 20.189.202.60:34115] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVrTYmnkedMjhVX0PTV8TgAAAEM"]
[Mon Jan 05 04:54:02.297140 2026] [:error] [pid 5632:tid 5668] [client 20.189.202.60:36865] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVrTaoN3ZWvlOh-nbt-agwAAANg"]
[Mon Jan 05 04:54:05.687536 2026] [:error] [pid 5632:tid 5646] [client 20.189.202.60:39178] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVrTbYN3ZWvlOh-nbt-ahgAAAMI"]
[Mon Jan 05 04:54:06.833932 2026] [:error] [pid 6680:tid 6703] [client 20.189.202.60:34960] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aVrTbqE58uNoazzTmx3CpgAAARU"]
[Mon Jan 05 04:54:11.871929 2026] [:error] [pid 5536:tid 5602] [client 20.189.202.60:65272] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVrTcwRtMZNG6xI8yDy82gAAAIU"]
[Mon Jan 05 04:54:16.512156 2026] [:error] [pid 6680:tid 6687] [client 20.189.202.60:32403] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVrTeKE58uNoazzTmx3CtQAAAQU"]
[Mon Jan 05 04:54:17.486221 2026] [:error] [pid 6680:tid 6693] [client 20.189.202.60:36543] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVrTeaE58uNoazzTmx3CtwAAAQs"]
[Mon Jan 05 04:54:21.970999 2026] [:error] [pid 6680:tid 6690] [client 20.189.202.60:45098] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aVrTfaE58uNoazzTmx3CvwAAAQg"]
[Mon Jan 05 04:54:23.106145 2026] [:error] [pid 5534:tid 5552] [client 20.189.202.60:32238] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVrTf5Ns9XmbR6unB0yp1wAAAAk"]
[Mon Jan 05 04:54:27.690875 2026] [:error] [pid 6680:tid 6694] [client 20.189.202.60:34984] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVrTg6E58uNoazzTmx3CxQAAAQw"]
[Mon Jan 05 04:54:31.791122 2026] [:error] [pid 5535:tid 5579] [client 20.189.202.60:32222] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVrTh2nkedMjhVX0PTV8fAAAAEk"]
[Mon Jan 05 04:54:32.831072 2026] [:error] [pid 6680:tid 6692] [client 20.189.202.60:44634] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aVrTiKE58uNoazzTmx3CxwAAAQo"]
[Mon Jan 05 04:54:36.379513 2026] [:error] [pid 5534:tid 5552] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Mon Jan 05 04:54:36.503659 2026] [:error] [pid 5534:tid 5546] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Mon Jan 05 04:54:36.653799 2026] [:error] [pid 5534:tid 5562] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/tons.php
[Mon Jan 05 04:54:36.777503 2026] [:error] [pid 5534:tid 5560] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/out.php
[Mon Jan 05 04:54:37.920694 2026] [:error] [pid 5534:tid 5555] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Mon Jan 05 04:54:38.057048 2026] [:error] [pid 5534:tid 5563] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Mon Jan 05 04:54:38.181917 2026] [:error] [pid 5534:tid 5566] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Mon Jan 05 04:54:38.329698 2026] [:error] [pid 5534:tid 5556] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Mon Jan 05 04:54:38.753339 2026] [:error] [pid 5534:tid 5558] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/87.php
[Mon Jan 05 04:54:38.893729 2026] [:error] [pid 5534:tid 5545] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Mon Jan 05 04:54:39.017610 2026] [:error] [pid 5534:tid 5544] [client 20.189.202.60:36545] File does not exist: /usr/local/apache/htdocs/suspended-page/1yade.php
[Mon Jan 05 04:54:39.140044 2026] [:error] [pid 5534:tid 5547] [client 20.189.202.60:36545] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVrTj5Ns9XmbR6unB0yp8QAAAAQ"]
[Mon Jan 05 04:54:42.596611 2026] [:error] [pid 5535:tid 5582] [client 20.189.202.60:44638] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVrTkmnkedMjhVX0PTV8iQAAAEw"]
[Mon Jan 05 04:54:43.459466 2026] [:error] [pid 5536:tid 5612] [client 20.189.202.60:36570] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVrTkwRtMZNG6xI8yDy84AAAAI8"]
[Mon Jan 05 04:54:45.441436 2026] [:error] [pid 6680:tid 6683] [client 20.189.202.60:36560] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aVrTlaE58uNoazzTmx3C1gAAAQE"]
[Mon Jan 05 04:54:47.445904 2026] [:error] [pid 5632:tid 5665] [client 20.189.202.60:32420] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVrTl4N3ZWvlOh-nbt-apAAAANU"]
[Mon Jan 05 04:54:53.430111 2026] [:error] [pid 5536:tid 5600] [client 20.189.202.60:36493] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVrTnQRtMZNG6xI8yDy88AAAAIM"]
[Mon Jan 05 04:54:56.820420 2026] [:error] [pid 5534:tid 5558] [client 20.189.202.60:32435] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVrToJNs9XmbR6unB0yqDQAAAA8"]
[Mon Jan 05 04:55:00.658173 2026] [:error] [pid 5535:tid 5570] [client 20.189.202.60:42586] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aVrTpGnkedMjhVX0PTV8mQAAAEA"]
[Mon Jan 05 04:55:05.401200 2026] [:error] [pid 6680:tid 6706] [client 20.189.202.60:36555] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aVrTqaE58uNoazzTmx3C_wAAARg"]
[Mon Jan 05 04:55:12.768564 2026] [:error] [pid 5632:tid 5665] [client 20.189.202.60:53292] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aVrTsIN3ZWvlOh-nbt-azgAAANU"]
[Mon Jan 05 04:55:14.002196 2026] [:error] [pid 5534:tid 5552] [client 20.189.202.60:3447] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aVrTspNs9XmbR6unB0yqFgAAAAk"]
[Mon Jan 05 04:55:18.609875 2026] [:error] [pid 5536:tid 5607] [client 20.189.202.60:40341] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVrTtgRtMZNG6xI8yDy9DQAAAIo"]
[Mon Jan 05 04:55:22.266609 2026] [:error] [pid 5536:tid 5597] [client 20.189.202.60:53299] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVrTugRtMZNG6xI8yDy9EQAAAIA"]
[Mon Jan 05 04:55:27.907039 2026] [:error] [pid 5535:tid 5579] [client 20.189.202.60:37948] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aVrTv2nkedMjhVX0PTV8sAAAAEk"]
[Mon Jan 05 04:55:37.400670 2026] [:error] [pid 5535:tid 5576] [client 20.189.202.60:40352] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aVrTyWnkedMjhVX0PTV8twAAAEY"]
[Mon Jan 05 04:55:41.578682 2026] [:error] [pid 5534:tid 5554] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Mon Jan 05 04:55:41.800831 2026] [:error] [pid 5534:tid 5555] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Mon Jan 05 04:55:41.929600 2026] [:error] [pid 5534:tid 5551] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/acwfihfh.php
[Mon Jan 05 04:55:42.053505 2026] [:error] [pid 5534:tid 5566] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/family.php
[Mon Jan 05 04:55:42.193380 2026] [:error] [pid 5534:tid 5562] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Mon Jan 05 04:55:42.319547 2026] [:error] [pid 5534:tid 5556] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/ierne.php
[Mon Jan 05 04:55:42.741365 2026] [:error] [pid 5534:tid 5557] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Mon Jan 05 04:55:42.865406 2026] [:error] [pid 5534:tid 5563] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Mon Jan 05 04:55:43.096775 2026] [:error] [pid 5534:tid 5545] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Mon Jan 05 04:55:43.220603 2026] [:error] [pid 5534:tid 5559] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Jan 05 04:55:43.345282 2026] [:error] [pid 5534:tid 5544] [client 20.189.202.60:39260] File does not exist: /usr/local/apache/htdocs/suspended-page/b374k.php
[Mon Jan 05 04:55:43.878438 2026] [:error] [pid 5534:tid 5547] [client 20.189.202.60:39260] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aVrTz5Ns9XmbR6unB0yqLwAAAAQ"]
[Mon Jan 05 04:55:45.144367 2026] [:error] [pid 5632:tid 5665] [client 20.189.202.60:42562] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aVrT0YN3ZWvlOh-nbt-a9wAAANU"]
[Mon Jan 05 04:55:49.525278 2026] [:error] [pid 5536:tid 5607] [client 20.189.202.60:53311] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aVrT1QRtMZNG6xI8yDy9KwAAAIo"]
[Mon Jan 05 04:55:50.991934 2026] [:error] [pid 5535:tid 5580] [client 20.189.202.60:53285] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aVrT1mnkedMjhVX0PTV83gAAAEo"]
[Mon Jan 05 04:55:52.064035 2026] [:error] [pid 6680:tid 6685] [client 20.189.202.60:3401] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.php"] [unique_id "aVrT2KE58uNoazzTmx3DWwAAAQM"]
[Mon Jan 05 04:55:53.388128 2026] [:error] [pid 5535:tid 5578] [client 20.189.202.60:53248] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.php"] [unique_id "aVrT2WnkedMjhVX0PTV84wAAAEg"]
[Mon Jan 05 04:55:54.971751 2026] [:error] [pid 5534:tid 5543] [client 20.189.202.60:3407] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.php"] [unique_id "aVrT2pNs9XmbR6unB0yqOwAAAAA"]
[Mon Jan 05 04:55:57.708040 2026] [:error] [pid 5535:tid 5576] [client 20.189.202.60:42568] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.php"] [unique_id "aVrT3WnkedMjhVX0PTV85wAAAEY"]
[Mon Jan 05 04:55:59.228479 2026] [:error] [pid 5632:tid 5668] [client 20.189.202.60:3101] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aVrT34N3ZWvlOh-nbt-bAQAAANg"]
[Mon Jan 05 04:56:02.618618 2026] [:error] [pid 6680:tid 6697] [client 20.189.202.60:39255] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aVrT4qE58uNoazzTmx3DZQAAAQ8"]
[Mon Jan 05 04:56:05.755179 2026] [:error] [pid 6680:tid 6706] [client 20.189.202.60:3108] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aVrT5aE58uNoazzTmx3DawAAARg"]
[Mon Jan 05 04:56:07.425437 2026] [:error] [pid 5535:tid 5578] [client 20.189.202.60:3094] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aVrT52nkedMjhVX0PTV88QAAAEg"]
[Mon Jan 05 04:56:09.336807 2026] [:error] [pid 5536:tid 5599] [client 20.189.202.60:3088] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVrT6QRtMZNG6xI8yDy9PQAAAII"]
[Mon Jan 05 04:56:12.782370 2026] [:error] [pid 5632:tid 5662] [client 20.189.202.60:40338] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVrT7IN3ZWvlOh-nbt-bCQAAANI"]
[Mon Jan 05 04:56:14.527779 2026] [:error] [pid 6680:tid 6695] [client 20.189.202.60:34510] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aVrT7qE58uNoazzTmx3DdQAAAQ0"]
[Mon Jan 05 04:56:26.512649 2026] [:error] [pid 5632:tid 5663] [client 20.189.202.60:34549] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/panel.php"] [unique_id "aVrT-oN3ZWvlOh-nbt-bGQAAANM"]
[Mon Jan 05 04:56:31.709567 2026] [:error] [pid 5534:tid 5566] [client 20.189.202.60:39564] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/panel.php"] [unique_id "aVrT_5Ns9XmbR6unB0yqXgAAABc"]
[Mon Jan 05 04:56:37.217330 2026] [:error] [pid 5535:tid 5581] [client 20.189.202.60:37950] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/panel.php"] [unique_id "aVrUBWnkedMjhVX0PTV9FwAAAEs"]
[Mon Jan 05 04:56:39.319247 2026] [:error] [pid 5536:tid 5597] [client 20.189.202.60:35387] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload.php"] [unique_id "aVrUBwRtMZNG6xI8yDy9WQAAAIA"]
[Mon Jan 05 04:56:41.093120 2026] [:error] [pid 5536:tid 5614] [client 20.189.202.60:37625] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload.php"] [unique_id "aVrUCQRtMZNG6xI8yDy9XwAAAJE"]
[Mon Jan 05 04:56:44.683666 2026] [:error] [pid 6680:tid 6682] [client 20.189.202.60:3611] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Mon Jan 05 04:56:44.807536 2026] [:error] [pid 6680:tid 6686] [client 20.189.202.60:3611] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Mon Jan 05 04:56:47.548673 2026] [:error] [pid 6680:tid 6699] [client 20.189.202.60:3611] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVrUD6E58uNoazzTmx3DuAAAARE"]
[Mon Jan 05 04:56:47.988020 2026] [:error] [pid 6680:tid 6694] [client 20.189.202.60:37525] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVrUD6E58uNoazzTmx3DvQAAAQw"]
[Mon Jan 05 04:56:51.408177 2026] [:error] [pid 5632:tid 5645] [client 20.189.202.60:35029] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVrUE4N3ZWvlOh-nbt-bSwAAAME"]
[Mon Jan 05 04:56:54.057624 2026] [:error] [pid 5535:tid 5587] [client 20.189.202.60:39620] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aVrUFmnkedMjhVX0PTV9JAAAAFE"]
[Mon Jan 05 04:56:58.212139 2026] [:error] [pid 5632:tid 5663] [client 20.189.202.60:39660] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/x.php"] [unique_id "aVrUGoN3ZWvlOh-nbt-bVgAAANM"]
[Mon Jan 05 04:57:01.467873 2026] [:error] [pid 5535:tid 5581] [client 20.189.202.60:4008] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/x.php"] [unique_id "aVrUHWnkedMjhVX0PTV9RQAAAEs"]
[Mon Jan 05 04:57:01.984483 2026] [:error] [pid 5535:tid 5571] [client 20.189.202.60:36120] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/x.php"] [unique_id "aVrUHWnkedMjhVX0PTV9TAAAAEE"]
[Mon Jan 05 04:57:19.551365 2026] [:error] [pid 6680:tid 6701] [client 20.189.202.60:38940] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/administrator/shell.php"] [unique_id "aVrUL6E58uNoazzTmx3EbwAAARM"]
[Mon Jan 05 04:57:21.164717 2026] [:error] [pid 6680:tid 6691] [client 20.189.202.60:3583] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/administrator/shell.php"] [unique_id "aVrUMaE58uNoazzTmx3EeAAAAQk"]
[Mon Jan 05 04:57:22.933618 2026] [:error] [pid 5535:tid 5573] [client 20.189.202.60:3533] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/administrator/shell.php"] [unique_id "aVrUMmnkedMjhVX0PTV9hAAAAEM"]
[Mon Jan 05 04:57:28.579047 2026] [:error] [pid 5535:tid 5571] [client 20.189.202.60:39012] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admincp/backdoor.php"] [unique_id "aVrUOGnkedMjhVX0PTV9iwAAAEE"]
[Mon Jan 05 04:57:29.863440 2026] [:error] [pid 6680:tid 6698] [client 20.189.202.60:38964] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admincp/backdoor.php"] [unique_id "aVrUOaE58uNoazzTmx3EzQAAARA"]
[Mon Jan 05 04:57:32.186936 2026] [:error] [pid 5632:tid 5658] [client 20.189.202.60:51875] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admincp/backdoor.php"] [unique_id "aVrUPIN3ZWvlOh-nbt-btAAAAM4"]
[Mon Jan 05 04:57:33.049721 2026] [:error] [pid 5536:tid 5611] [client 20.189.202.60:3542] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admincp/backdoor.php"] [unique_id "aVrUPQRtMZNG6xI8yDy94wAAAI4"]
[Mon Jan 05 04:57:34.043280 2026] [:error] [pid 6680:tid 6686] [client 20.189.202.60:3532] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/controlpanel/cmd.php"] [unique_id "aVrUPqE58uNoazzTmx3E_gAAAQQ"]
[Mon Jan 05 04:57:37.905864 2026] [:error] [pid 6680:tid 6689] [client 20.189.202.60:51841] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/controlpanel/cmd.php"] [unique_id "aVrUQaE58uNoazzTmx3FAgAAAQc"]
[Mon Jan 05 04:57:46.333466 2026] [:error] [pid 5632:tid 5667] [client 20.189.202.60:38587] [client 20.189.202.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/controlpanel/cmd.php"] [unique_id "aVrUSoN3ZWvlOh-nbt-b0QAAANc"]
[Mon Jan 05 04:57:57.573014 2026] [:error] [pid 5534:tid 5545] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/logo.php
[Mon Jan 05 04:57:57.698197 2026] [:error] [pid 5534:tid 5565] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/icon.php
[Mon Jan 05 04:57:57.820177 2026] [:error] [pid 5534:tid 5566] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/image.php
[Mon Jan 05 04:57:57.942653 2026] [:error] [pid 5534:tid 5564] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/style.css.php
[Mon Jan 05 04:57:58.072762 2026] [:error] [pid 5534:tid 5561] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/script.js.php
[Mon Jan 05 04:57:58.195362 2026] [:error] [pid 5534:tid 5552] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Mon Jan 05 04:57:58.338825 2026] [:error] [pid 5534:tid 5547] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/old.php
[Mon Jan 05 04:57:58.475158 2026] [:error] [pid 5534:tid 5553] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/temp.php
[Mon Jan 05 04:57:58.746831 2026] [:error] [pid 5534:tid 5544] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Mon Jan 05 04:57:58.870243 2026] [:error] [pid 5534:tid 5560] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/debug.php
[Mon Jan 05 04:57:59.002921 2026] [:error] [pid 5534:tid 5562] [client 20.189.202.60:41466] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Mon Jan 05 05:44:50.734319 2026] [:error] [pid 5534:tid 5546] [client 122.51.236.174:57850] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVrfUpNs9XmbR6unB0y5oQAAAAM"]
[Mon Jan 05 09:09:04.693908 2026] [:error] [pid 5534:tid 5562] [client 43.166.242.189:58450] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVsPMJNs9XmbR6unB0z55wAAABM"]
[Mon Jan 05 10:04:13.430198 2026] [:error] [pid 5535:tid 5589] [client 43.155.195.141:33526] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVscHWnkedMjhVX0PTXgCAAAAFM"]
[Mon Jan 05 16:43:24.806797 2026] [:error] [pid 5536:tid 5605] [client 43.133.139.6:37980] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVt5rARtMZNG6xI8yDyfjAAAAIg"]
[Mon Jan 05 17:31:05.211438 2026] [:error] [pid 5536:tid 5604] [client 94.130.222.48:60745] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Mon Jan 05 17:31:11.977566 2026] [:error] [pid 5534:tid 5564] [client 94.130.222.48:60639] [client 94.130.222.48] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aVuE35Ns9XmbR6unB0yEQwAAABU"], referer: www.google.com
[Mon Jan 05 18:14:43.608881 2026] [:error] [pid 5632:tid 5661] [client 111.172.249.49:40517] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVuPE4N3ZWvlOh-nbt-npgAAANE"]
[Mon Jan 05 19:01:12.133664 2026] [:error] [pid 5536:tid 5614] [client 43.130.139.136:53454] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVuZ-ARtMZNG6xI8yDzQqwAAAJE"]
[Mon Jan 05 21:17:51.222880 2026] [:error] [pid 5535:tid 5581] [client 20.24.70.117:20049] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Mon Jan 05 21:17:51.358103 2026] [:error] [pid 5535:tid 5585] [client 20.24.70.117:20049] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Mon Jan 05 21:17:51.487105 2026] [:error] [pid 5535:tid 5580] [client 20.24.70.117:20049] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Mon Jan 05 21:17:51.618481 2026] [:error] [pid 5535:tid 5571] [client 20.24.70.117:20049] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Mon Jan 05 23:06:16.303322 2026] [:error] [pid 6680:tid 6695] [client 43.164.197.177:41528] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVvTaKE58uNoazzTmx0orgAAAQ0"]
[Tue Jan 06 00:08:39.876657 2026] [:error] [pid 60510:tid 60564] [client 43.130.57.76:36548] [client 43.130.57.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVviB23HNEkuMRrTL0L3fQAAAJA"]
[Tue Jan 06 00:10:56.304125 2026] [:error] [pid 60510:tid 60569] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/ca4.php
[Tue Jan 06 00:10:56.457582 2026] [:error] [pid 60510:tid 60563] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Tue Jan 06 00:10:56.820811 2026] [:error] [pid 60510:tid 60553] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/inwp.php
[Tue Jan 06 00:10:57.074462 2026] [:error] [pid 60510:tid 60549] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/file22.php
[Tue Jan 06 00:10:57.396857 2026] [:error] [pid 60510:tid 60561] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Tue Jan 06 00:10:57.552130 2026] [:error] [pid 60510:tid 60564] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/tanjiro.php
[Tue Jan 06 00:10:57.700836 2026] [:error] [pid 60510:tid 60550] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Tue Jan 06 00:10:57.839042 2026] [:error] [pid 60510:tid 60555] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/ad1.php
[Tue Jan 06 00:10:58.134116 2026] [:error] [pid 60510:tid 60567] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Tue Jan 06 00:10:58.272634 2026] [:error] [pid 60510:tid 60566] [client 4.217.221.21:58580] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Tue Jan 06 00:10:58.411955 2026] [:error] [pid 60510:tid 60568] [client 4.217.221.21:58580] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aVvikm3HNEkuMRrTL0L4kgAAAJQ"]
[Tue Jan 06 00:10:59.234858 2026] [:error] [pid 60514:tid 60575] [client 4.217.221.21:58862] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aVvik270C0kefOIBEs9IXQAAAMA"]
[Tue Jan 06 00:10:59.997628 2026] [:error] [pid 60509:tid 60545] [client 4.217.221.21:58567] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aVvik6BSiT1_wVwKSvQPygAAAFg"]
[Tue Jan 06 00:11:01.450352 2026] [:error] [pid 60605:tid 60629] [client 4.217.221.21:58823] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aVvilZGdDsTlcaRtgxQrRAAAARY"]
[Tue Jan 06 00:11:03.104997 2026] [:error] [pid 60509:tid 60532] [client 4.217.221.21:58825] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aVvil6BSiT1_wVwKSvQPzgAAAEs"]
[Tue Jan 06 00:11:03.729123 2026] [:error] [pid 60514:tid 60580] [client 4.217.221.21:58844] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aVvil270C0kefOIBEs9IZAAAAMU"]
[Tue Jan 06 00:11:05.080888 2026] [:error] [pid 60509:tid 60535] [client 4.217.221.21:58843] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aVvimaBSiT1_wVwKSvQP0QAAAE4"]
[Tue Jan 06 00:11:05.784402 2026] [:error] [pid 60510:tid 60555] [client 4.217.221.21:58847] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aVvimW3HNEkuMRrTL0L4mgAAAIc"]
[Tue Jan 06 00:11:06.385027 2026] [:error] [pid 60510:tid 60548] [client 4.217.221.21:58600] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aVvimm3HNEkuMRrTL0L4nAAAAIA"]
[Tue Jan 06 00:11:07.552193 2026] [:error] [pid 60510:tid 60557] [client 4.217.221.21:58606] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aVvim23HNEkuMRrTL0L4owAAAIk"]
[Tue Jan 06 00:11:08.662462 2026] [:error] [pid 60605:tid 60624] [client 4.217.221.21:58601] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aVvinJGdDsTlcaRtgxQrVwAAARE"]
[Tue Jan 06 00:11:09.591416 2026] [:error] [pid 60510:tid 60555] [client 4.217.221.21:58584] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aVvinW3HNEkuMRrTL0L4qAAAAIc"]
[Tue Jan 06 00:11:10.257713 2026] [:error] [pid 60510:tid 60567] [client 4.217.221.21:58611] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aVvinm3HNEkuMRrTL0L4qgAAAJM"]
[Tue Jan 06 00:11:10.753751 2026] [:error] [pid 60510:tid 60572] [client 4.217.221.21:58605] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aVvinm3HNEkuMRrTL0L4rAAAAJg"]
[Tue Jan 06 00:11:11.427287 2026] [:error] [pid 60605:tid 60615] [client 4.217.221.21:63148] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aVvin5GdDsTlcaRtgxQrZAAAAQg"]
[Tue Jan 06 00:11:13.410293 2026] [:error] [pid 60605:tid 60623] [client 4.217.221.21:58617] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aVvioZGdDsTlcaRtgxQraQAAARA"]
[Tue Jan 06 00:11:14.275167 2026] [:error] [pid 60605:tid 60627] [client 4.217.221.21:58596] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aVviopGdDsTlcaRtgxQrcQAAARQ"]
[Tue Jan 06 00:11:14.826462 2026] [:error] [pid 60514:tid 60585] [client 4.217.221.21:58871] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aVviom70C0kefOIBEs9IiwAAAMo"]
[Tue Jan 06 00:11:15.826268 2026] [:error] [pid 60605:tid 60623] [client 4.217.221.21:58595] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aVvio5GdDsTlcaRtgxQrdgAAARA"]
[Tue Jan 06 00:11:16.543968 2026] [:error] [pid 60605:tid 60616] [client 4.217.221.21:58847] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aVvipJGdDsTlcaRtgxQregAAAQk"]
[Tue Jan 06 00:11:17.322980 2026] [:error] [pid 60514:tid 60590] [client 4.217.221.21:58867] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aVvipW70C0kefOIBEs9IlwAAAM8"]
[Tue Jan 06 00:11:18.920662 2026] [:error] [pid 60514:tid 60598] [client 4.217.221.21:58588] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aVvipm70C0kefOIBEs9ImwAAANc"]
[Tue Jan 06 00:11:20.039469 2026] [:error] [pid 60605:tid 60625] [client 4.217.221.21:58861] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aVviqJGdDsTlcaRtgxQrggAAARI"]
[Tue Jan 06 00:11:21.079016 2026] [:error] [pid 60514:tid 60592] [client 4.217.221.21:63104] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aVviqW70C0kefOIBEs9IowAAANE"]
[Tue Jan 06 00:11:21.909102 2026] [:error] [pid 60605:tid 60616] [client 4.217.221.21:58574] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aVviqZGdDsTlcaRtgxQriAAAAQk"]
[Tue Jan 06 00:11:22.708466 2026] [:error] [pid 60510:tid 60561] [client 4.217.221.21:58585] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aVviqm3HNEkuMRrTL0L4vwAAAI0"]
[Tue Jan 06 00:11:23.577456 2026] [:error] [pid 60509:tid 60525] [client 4.217.221.21:58594] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aVviq6BSiT1_wVwKSvQP7gAAAEQ"]
[Tue Jan 06 00:11:24.293119 2026] [:error] [pid 60605:tid 60607] [client 4.217.221.21:58578] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aVvirJGdDsTlcaRtgxQrkQAAAQA"]
[Tue Jan 06 00:11:24.816905 2026] [:error] [pid 60514:tid 60584] [client 4.217.221.21:63154] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aVvirG70C0kefOIBEs9IpwAAAMk"]
[Tue Jan 06 00:11:25.790032 2026] [:error] [pid 60605:tid 60623] [client 4.217.221.21:50903] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aVvirZGdDsTlcaRtgxQrmAAAARA"]
[Tue Jan 06 00:11:26.849584 2026] [:error] [pid 60605:tid 60629] [client 4.217.221.21:58836] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aVvirpGdDsTlcaRtgxQroAAAARY"]
[Tue Jan 06 00:11:28.309267 2026] [:error] [pid 60605:tid 60612] [client 4.217.221.21:58830] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aVvisJGdDsTlcaRtgxQrowAAAQU"]
[Tue Jan 06 00:11:29.226246 2026] [:error] [pid 60605:tid 60618] [client 4.217.221.21:50923] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aVvisZGdDsTlcaRtgxQrpwAAAQs"]
[Tue Jan 06 00:11:31.698214 2026] [:error] [pid 60514:tid 60597] [client 4.217.221.21:50924] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aVvis270C0kefOIBEs9ItwAAANY"]
[Tue Jan 06 00:11:32.372696 2026] [:error] [pid 60509:tid 60523] [client 4.217.221.21:58570] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aVvitKBSiT1_wVwKSvQP-gAAAEI"]
[Tue Jan 06 00:11:33.088893 2026] [:error] [pid 60509:tid 60542] [client 4.217.221.21:58623] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aVvitaBSiT1_wVwKSvQP_wAAAFU"]
[Tue Jan 06 00:11:34.207694 2026] [:error] [pid 60514:tid 60576] [client 4.217.221.21:58583] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aVvitm70C0kefOIBEs9IvAAAAME"]
[Tue Jan 06 00:11:36.383938 2026] [:error] [pid 60510:tid 60569] [client 4.217.221.21:58573] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aVviuG3HNEkuMRrTL0L40AAAAJU"]
[Tue Jan 06 00:11:38.883270 2026] [:error] [pid 60605:tid 60622] [client 4.217.221.21:58607] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aVviupGdDsTlcaRtgxQrywAAAQ8"]
[Tue Jan 06 00:11:39.555379 2026] [:error] [pid 60605:tid 60618] [client 4.217.221.21:58571] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aVviu5GdDsTlcaRtgxQr1QAAAQs"]
[Tue Jan 06 00:11:40.302392 2026] [:error] [pid 60509:tid 60524] [client 4.217.221.21:58597] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aVvivKBSiT1_wVwKSvQQEAAAAEM"]
[Tue Jan 06 00:11:41.282934 2026] [:error] [pid 60514:tid 60598] [client 4.217.221.21:58816] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aVvivW70C0kefOIBEs9IzwAAANc"]
[Tue Jan 06 00:11:42.387899 2026] [:error] [pid 60605:tid 60630] [client 4.217.221.21:58846] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aVvivpGdDsTlcaRtgxQr3gAAARc"]
[Tue Jan 06 00:11:43.016508 2026] [:error] [pid 60509:tid 60533] [client 4.217.221.21:58562] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aVviv6BSiT1_wVwKSvQQGAAAAEw"]
[Tue Jan 06 00:11:47.508701 2026] [:error] [pid 60605:tid 60624] [client 4.217.221.21:58840] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aVviw5GdDsTlcaRtgxQr6AAAARE"]
[Tue Jan 06 00:11:51.405393 2026] [:error] [pid 60605:tid 60621] [client 4.217.221.21:58566] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aVvix5GdDsTlcaRtgxQr9wAAAQ4"]
[Tue Jan 06 00:11:52.594128 2026] [:error] [pid 60510:tid 60562] [client 4.217.221.21:63138] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aVviyG3HNEkuMRrTL0L48QAAAI4"]
[Tue Jan 06 00:11:53.140909 2026] [:error] [pid 60605:tid 60627] [client 4.217.221.21:50887] [client 4.217.221.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aVviyZGdDsTlcaRtgxQr-gAAARQ"]
[Tue Jan 06 00:11:59.651251 2026] [:error] [pid 60509:tid 60541] [client 4.217.221.21:58878] File does not exist: /usr/local/apache/htdocs/suspended-page/Rk41.php
[Tue Jan 06 00:11:59.796428 2026] [:error] [pid 60509:tid 60540] [client 4.217.221.21:58878] File does not exist: /usr/local/apache/htdocs/suspended-page/ztv.php
[Tue Jan 06 00:11:59.933369 2026] [:error] [pid 60509:tid 60542] [client 4.217.221.21:58878] File does not exist: /usr/local/apache/htdocs/suspended-page/sef.php
[Tue Jan 06 00:12:00.102300 2026] [:error] [pid 60509:tid 60523] [client 4.217.221.21:58878] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Tue Jan 06 09:08:01.305296 2026] [:error] [pid 45959:tid 45977] [client 43.155.188.157:57746] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVxgcVajdn8P3hjgMYzUnAAAAU8"]
[Tue Jan 06 09:33:32.817157 2026] [:error] [pid 45959:tid 45968] [client 43.130.139.136:58452] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aVxmbFajdn8P3hjgMYzh0QAAAUY"]
[Tue Jan 06 10:06:56.310778 2026] [:error] [pid 44904:tid 44960] [client 170.106.180.139:53812] [client 170.106.180.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aVxuQDtieuI1BJEZcvelDgAAAFM"]
[Tue Jan 06 10:13:44.511338 2026] [:error] [pid 44905:tid 44991] [client 172.81.133.44:63170] [client 172.81.133.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aVxv2Lu7ufwWVst9EAs4-AAAAJc"]
[Tue Jan 06 20:31:40.781456 2026] [:error] [pid 44905:tid 44983] [client 43.157.147.3:52604] [client 43.157.147.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV0ArLu7ufwWVst9EAvbSAAAAI8"]
[Tue Jan 06 22:20:48.076494 2026] [:error] [pid 44905:tid 44992] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Tue Jan 06 22:20:48.229881 2026] [:error] [pid 44905:tid 44985] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Tue Jan 06 22:20:48.390997 2026] [:error] [pid 44905:tid 44981] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Jan 06 22:20:48.533177 2026] [:error] [pid 44905:tid 44975] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Tue Jan 06 22:20:48.862675 2026] [:error] [pid 44905:tid 44973] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Jan 06 22:20:49.138588 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/an8.php
[Tue Jan 06 22:20:49.286726 2026] [:error] [pid 44905:tid 44983] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Jan 06 22:20:49.424070 2026] [:error] [pid 44905:tid 44982] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Jan 06 22:20:49.586113 2026] [:error] [pid 44905:tid 44969] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Tue Jan 06 22:20:49.724091 2026] [:error] [pid 44905:tid 44979] [client 4.230.25.164:31523] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Tue Jan 06 22:20:49.973360 2026] [:error] [pid 44905:tid 44972] [client 4.230.25.164:31523] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aV0aQbu7ufwWVst9EAv8FQAAAIQ"]
[Tue Jan 06 22:20:51.587689 2026] [:error] [pid 44904:tid 44964] [client 4.230.25.164:31700] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aV0aQztieuI1BJEZcvdJuQAAAFc"]
[Tue Jan 06 22:20:52.161293 2026] [:error] [pid 45959:tid 45967] [client 4.230.25.164:18972] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aV0aRFajdn8P3hjgMYwAUwAAAUU"]
[Tue Jan 06 22:20:54.094151 2026] [:error] [pid 45959:tid 45983] [client 4.230.25.164:31699] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aV0aRlajdn8P3hjgMYwAWQAAAVU"]
[Tue Jan 06 22:20:55.554243 2026] [:error] [pid 45012:tid 45032] [client 4.230.25.164:18988] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aV0aRxaMAxCuju1d0uYahwAAANI"]
[Tue Jan 06 22:20:56.968054 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:54743] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aV0aSBaMAxCuju1d0uYaiAAAAMo"]
[Tue Jan 06 22:20:58.645637 2026] [:error] [pid 44905:tid 44977] [client 4.230.25.164:11036] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aV0aSru7ufwWVst9EAv8GQAAAIk"]
[Tue Jan 06 22:20:59.636401 2026] [:error] [pid 45012:tid 45028] [client 4.230.25.164:31733] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "aV0aSxaMAxCuju1d0uYajAAAAM4"]
[Tue Jan 06 22:21:00.848511 2026] [:error] [pid 45012:tid 45030] [client 4.230.25.164:11051] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aV0aTBaMAxCuju1d0uYajgAAANA"]
[Tue Jan 06 22:21:01.841519 2026] [:error] [pid 45959:tid 45970] [client 4.230.25.164:33252] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aV0aTVajdn8P3hjgMYwAcwAAAUg"]
[Tue Jan 06 22:21:03.872594 2026] [:error] [pid 44905:tid 44981] [client 4.230.25.164:33083] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aV0aT7u7ufwWVst9EAv8HQAAAI0"]
[Tue Jan 06 22:21:04.451742 2026] [:error] [pid 44905:tid 44970] [client 4.230.25.164:50834] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aV0aULu7ufwWVst9EAv8HgAAAII"]
[Tue Jan 06 22:21:05.561856 2026] [:error] [pid 45959:tid 45979] [client 4.230.25.164:10756] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aV0aUVajdn8P3hjgMYwAdgAAAVE"]
[Tue Jan 06 22:21:06.954387 2026] [:error] [pid 44905:tid 44978] [client 4.230.25.164:32134] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aV0aUru7ufwWVst9EAv8IQAAAIo"]
[Tue Jan 06 22:21:08.156553 2026] [:error] [pid 44903:tid 44918] [client 4.230.25.164:32165] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aV0aVNhHqjs38zbkQPAuqgAAAAs"]
[Tue Jan 06 22:21:10.108941 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:10763] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws28.php"] [unique_id "aV0aVhaMAxCuju1d0uYalAAAAMo"]
[Tue Jan 06 22:21:11.412319 2026] [:error] [pid 45012:tid 45015] [client 4.230.25.164:10413] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aV0aVxaMAxCuju1d0uYalgAAAME"]
[Tue Jan 06 22:21:15.685745 2026] [:error] [pid 35140:tid 35163] [client 4.230.25.164:10376] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aV0aW3oQaIDFMbT-XMznbwAAARU"]
[Tue Jan 06 22:21:17.350297 2026] [:error] [pid 45959:tid 45985] [client 4.230.25.164:10431] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aV0aXVajdn8P3hjgMYwAgwAAAVc"]
[Tue Jan 06 22:21:19.280283 2026] [:error] [pid 44904:tid 44945] [client 4.230.25.164:56844] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aV0aXztieuI1BJEZcvdJxwAAAEQ"]
[Tue Jan 06 22:21:20.602183 2026] [:error] [pid 35140:tid 35165] [client 4.230.25.164:32153] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aV0aYHoQaIDFMbT-XMzncwAAARc"]
[Tue Jan 06 22:21:24.204460 2026] [:error] [pid 35140:tid 35146] [client 4.230.25.164:27386] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aV0aZHoQaIDFMbT-XMzndQAAAQQ"]
[Tue Jan 06 22:21:26.015154 2026] [:error] [pid 45959:tid 45968] [client 4.230.25.164:10760] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aV0aZlajdn8P3hjgMYwAkQAAAUY"]
[Tue Jan 06 22:21:28.362560 2026] [:error] [pid 44904:tid 44954] [client 4.230.25.164:52392] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aV0aaDtieuI1BJEZcvdJzgAAAE0"]
[Tue Jan 06 22:21:30.080149 2026] [:error] [pid 44903:tid 44923] [client 4.230.25.164:57967] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aV0aathHqjs38zbkQPAusQAAABA"]
[Tue Jan 06 22:21:32.869748 2026] [:error] [pid 45012:tid 45029] [client 4.230.25.164:52354] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aV0abBaMAxCuju1d0uYaogAAAM8"]
[Tue Jan 06 22:21:33.324754 2026] [:error] [pid 45012:tid 45031] [client 4.230.25.164:57957] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aV0abRaMAxCuju1d0uYaowAAANE"]
[Tue Jan 06 22:21:33.687318 2026] [:error] [pid 45012:tid 45021] [client 4.230.25.164:47586] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aV0abRaMAxCuju1d0uYapAAAAMc"]
[Tue Jan 06 22:21:34.581101 2026] [:error] [pid 35140:tid 35164] [client 4.230.25.164:57925] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aV0abnoQaIDFMbT-XMznewAAARY"]
[Tue Jan 06 22:21:38.352092 2026] [:error] [pid 44904:tid 44954] [client 4.230.25.164:48826] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aV0acjtieuI1BJEZcvdJ4QAAAE0"]
[Tue Jan 06 22:21:39.869609 2026] [:error] [pid 44903:tid 44919] [client 4.230.25.164:62998] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aV0ac9hHqjs38zbkQPAuwAAAAAw"]
[Tue Jan 06 22:21:41.811604 2026] [:error] [pid 35140:tid 35146] [client 4.230.25.164:50933] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aV0adXoQaIDFMbT-XMznhwAAAQQ"]
[Tue Jan 06 22:21:43.018055 2026] [:error] [pid 45012:tid 45037] [client 4.230.25.164:31376] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dox.php"] [unique_id "aV0adxaMAxCuju1d0uYaqwAAANc"]
[Tue Jan 06 22:21:44.524433 2026] [:error] [pid 44904:tid 44945] [client 4.230.25.164:50917] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dox.php"] [unique_id "aV0aeDtieuI1BJEZcvdJ6QAAAEQ"]
[Tue Jan 06 22:21:46.355112 2026] [:error] [pid 44904:tid 44961] [client 4.230.25.164:10478] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dox.php"] [unique_id "aV0aejtieuI1BJEZcvdJ6wAAAFQ"]
[Tue Jan 06 22:21:49.310755 2026] [:error] [pid 44905:tid 44992] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/dox.php
[Tue Jan 06 22:21:49.448269 2026] [:error] [pid 44905:tid 44971] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Jan 06 22:21:49.708977 2026] [:error] [pid 44905:tid 44968] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Jan 06 22:21:49.847598 2026] [:error] [pid 44905:tid 44981] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Jan 06 22:21:50.001590 2026] [:error] [pid 44905:tid 44987] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Tue Jan 06 22:21:50.150854 2026] [:error] [pid 44905:tid 44970] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/f8.php
[Tue Jan 06 22:21:50.290287 2026] [:error] [pid 44905:tid 44977] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/moon3.php
[Tue Jan 06 22:21:50.445607 2026] [:error] [pid 44905:tid 44975] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Tue Jan 06 22:21:50.584482 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Tue Jan 06 22:21:50.732474 2026] [:error] [pid 44905:tid 44989] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Tue Jan 06 22:21:51.105338 2026] [:error] [pid 44905:tid 44978] [client 4.230.25.164:28689] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Tue Jan 06 22:21:51.244860 2026] [:error] [pid 44905:tid 44983] [client 4.230.25.164:28689] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aV0af7u7ufwWVst9EAv8UwAAAI8"]
[Tue Jan 06 22:21:52.774623 2026] [:error] [pid 35140:tid 35155] [client 4.230.25.164:10623] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aV0agHoQaIDFMbT-XMznjwAAAQ0"]
[Tue Jan 06 22:21:54.443619 2026] [:error] [pid 45959:tid 45985] [client 4.230.25.164:33023] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aV0aglajdn8P3hjgMYwAyQAAAVc"]
[Tue Jan 06 22:21:55.583483 2026] [:error] [pid 44905:tid 44980] [client 4.230.25.164:10985] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aV0ag7u7ufwWVst9EAv8VAAAAIw"]
[Tue Jan 06 22:22:02.745712 2026] [:error] [pid 45012:tid 45033] [client 4.230.25.164:25373] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aV0aihaMAxCuju1d0uYauAAAANM"]
[Tue Jan 06 22:22:05.609847 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:10944] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aV0ajRaMAxCuju1d0uYaugAAAMo"]
[Tue Jan 06 22:22:07.442116 2026] [:error] [pid 44903:tid 44909] [client 4.230.25.164:30826] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aV0aj9hHqjs38zbkQPAvOAAAAAI"]
[Tue Jan 06 22:22:08.650917 2026] [:error] [pid 45012:tid 45034] [client 4.230.25.164:25350] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aV0akBaMAxCuju1d0uYavQAAANQ"]
[Tue Jan 06 22:22:12.291162 2026] [:error] [pid 45012:tid 45029] [client 4.230.25.164:30794] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aV0alBaMAxCuju1d0uYawAAAAM8"]
[Tue Jan 06 22:22:15.123677 2026] [:error] [pid 44904:tid 44958] [client 4.230.25.164:32984] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aV0alztieuI1BJEZcvdKCgAAAFE"]
[Tue Jan 06 22:22:16.694036 2026] [:error] [pid 45012:tid 45022] [client 4.230.25.164:48893] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aV0amBaMAxCuju1d0uYaxQAAAMg"]
[Tue Jan 06 22:22:17.660617 2026] [:error] [pid 44903:tid 44927] [client 4.230.25.164:25403] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aV0amdhHqjs38zbkQPAvPwAAABQ"]
[Tue Jan 06 22:22:19.929287 2026] [:error] [pid 44903:tid 44919] [client 4.230.25.164:61753] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aV0am9hHqjs38zbkQPAvQAAAAAw"]
[Tue Jan 06 22:22:20.745395 2026] [:error] [pid 44903:tid 44930] [client 4.230.25.164:48859] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aV0anNhHqjs38zbkQPAvQQAAABY"]
[Tue Jan 06 22:22:22.450949 2026] [:error] [pid 45959:tid 45982] [client 4.230.25.164:11003] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aV0anlajdn8P3hjgMYwBHgAAAVQ"]
[Tue Jan 06 22:22:23.870289 2026] [:error] [pid 44903:tid 44926] [client 4.230.25.164:25390] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aV0an9hHqjs38zbkQPAvQwAAABM"]
[Tue Jan 06 22:22:24.822728 2026] [:error] [pid 44903:tid 44928] [client 4.230.25.164:31556] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aV0aoNhHqjs38zbkQPAvRQAAABU"]
[Tue Jan 06 22:22:25.778501 2026] [:error] [pid 35140:tid 35144] [client 4.230.25.164:30796] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aV0aoXoQaIDFMbT-XMznngAAAQI"]
[Tue Jan 06 22:22:31.171511 2026] [:error] [pid 45959:tid 45972] [client 4.230.25.164:30835] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aV0ap1ajdn8P3hjgMYwBKAAAAUo"]
[Tue Jan 06 22:22:31.839076 2026] [:error] [pid 44905:tid 44989] [client 4.230.25.164:23106] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aV0ap7u7ufwWVst9EAv8bAAAAJU"]
[Tue Jan 06 22:22:33.027856 2026] [:error] [pid 45959:tid 45978] [client 4.230.25.164:32464] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aV0aqVajdn8P3hjgMYwBLAAAAVA"]
[Tue Jan 06 22:22:33.867903 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:30832] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aV0aqRaMAxCuju1d0uYa1AAAAMo"]
[Tue Jan 06 22:22:35.201421 2026] [:error] [pid 44903:tid 44913] [client 4.230.25.164:25442] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aV0aq9hHqjs38zbkQPAvSwAAAAY"]
[Tue Jan 06 22:22:36.841922 2026] [:error] [pid 44903:tid 44933] [client 4.230.25.164:30818] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aV0arNhHqjs38zbkQPAvTAAAABg"]
[Tue Jan 06 22:22:39.343210 2026] [:error] [pid 35140:tid 35163] [client 4.230.25.164:32996] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless14.php"] [unique_id "aV0ar3oQaIDFMbT-XMznpAAAARU"]
[Tue Jan 06 22:22:40.805760 2026] [:error] [pid 35140:tid 35150] [client 4.230.25.164:32985] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless14.php"] [unique_id "aV0asHoQaIDFMbT-XMznpgAAAQg"]
[Tue Jan 06 22:22:42.188196 2026] [:error] [pid 35140:tid 35143] [client 4.230.25.164:30831] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless14.php"] [unique_id "aV0asnoQaIDFMbT-XMznqQAAAQE"]
[Tue Jan 06 22:22:43.194612 2026] [:error] [pid 35140:tid 35165] [client 4.230.25.164:30845] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless14.php"] [unique_id "aV0as3oQaIDFMbT-XMznqwAAARc"]
[Tue Jan 06 22:22:44.216408 2026] [:error] [pid 35140:tid 35157] [client 4.230.25.164:32450] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aV0atHoQaIDFMbT-XMznrAAAAQ8"]
[Tue Jan 06 22:22:48.685405 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:33012] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aV0auBaMAxCuju1d0uYa3gAAAMo"]
[Tue Jan 06 22:22:49.921294 2026] [:error] [pid 44904:tid 44950] [client 4.230.25.164:30816] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aV0auTtieuI1BJEZcvdKHQAAAEk"]
[Tue Jan 06 22:22:51.166419 2026] [:error] [pid 45959:tid 45986] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Jan 06 22:22:51.305652 2026] [:error] [pid 45959:tid 45971] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Tue Jan 06 22:22:51.458446 2026] [:error] [pid 45959:tid 45963] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue Jan 06 22:22:51.597121 2026] [:error] [pid 45959:tid 45967] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Jan 06 22:22:51.766653 2026] [:error] [pid 45959:tid 45973] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Jan 06 22:22:51.924741 2026] [:error] [pid 45959:tid 45977] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Tue Jan 06 22:22:52.567239 2026] [:error] [pid 45959:tid 45975] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/ws29.php
[Tue Jan 06 22:22:52.860580 2026] [:error] [pid 45959:tid 45972] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Tue Jan 06 22:22:52.999980 2026] [:error] [pid 45959:tid 45974] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/pass.php
[Tue Jan 06 22:22:53.137333 2026] [:error] [pid 45959:tid 45985] [client 4.230.25.164:31589] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Jan 06 22:22:53.277044 2026] [:error] [pid 45959:tid 45978] [client 4.230.25.164:31589] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aV0avVajdn8P3hjgMYwBSQAAAVA"]
[Tue Jan 06 22:22:55.088999 2026] [:error] [pid 45012:tid 45027] [client 4.230.25.164:10936] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aV0avxaMAxCuju1d0uYa4gAAAM0"]
[Tue Jan 06 22:22:55.844075 2026] [:error] [pid 45012:tid 45032] [client 4.230.25.164:55502] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aV0avxaMAxCuju1d0uYa4wAAANI"]
[Tue Jan 06 22:22:57.073518 2026] [:error] [pid 45012:tid 45025] [client 4.230.25.164:10929] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aV0awRaMAxCuju1d0uYa5AAAAMs"]
[Tue Jan 06 22:22:58.134846 2026] [:error] [pid 45012:tid 45016] [client 4.230.25.164:30964] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sitemaps.php"] [unique_id "aV0awhaMAxCuju1d0uYa5QAAAMI"]
[Tue Jan 06 22:22:59.354324 2026] [:error] [pid 45959:tid 45984] [client 4.230.25.164:51442] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sitemaps.php"] [unique_id "aV0aw1ajdn8P3hjgMYwBUQAAAVY"]
[Tue Jan 06 22:23:00.290245 2026] [:error] [pid 35140:tid 35144] [client 4.230.25.164:10900] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sitemaps.php"] [unique_id "aV0axHoQaIDFMbT-XMznuQAAAQI"]
[Tue Jan 06 22:23:01.856229 2026] [:error] [pid 45012:tid 45031] [client 4.230.25.164:51455] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sitemaps.php"] [unique_id "aV0axRaMAxCuju1d0uYa5wAAANE"]
[Tue Jan 06 22:23:02.593096 2026] [:error] [pid 45012:tid 45028] [client 4.230.25.164:11095] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aV0axhaMAxCuju1d0uYa6AAAAM4"]
[Tue Jan 06 22:23:04.028313 2026] [:error] [pid 44905:tid 44988] [client 4.230.25.164:30645] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aV0ayLu7ufwWVst9EAv8fwAAAJQ"]
[Tue Jan 06 22:23:07.049753 2026] [:error] [pid 44903:tid 44923] [client 4.230.25.164:10889] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aV0ay9hHqjs38zbkQPAvZAAAABA"]
[Tue Jan 06 22:23:08.127398 2026] [:error] [pid 44903:tid 44917] [client 4.230.25.164:51769] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aV0azNhHqjs38zbkQPAvZQAAAAo"]
[Tue Jan 06 22:23:08.695437 2026] [:error] [pid 44903:tid 44909] [client 4.230.25.164:32202] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/install.php"] [unique_id "aV0azNhHqjs38zbkQPAvZwAAAAI"]
[Tue Jan 06 22:23:10.439897 2026] [:error] [pid 45012:tid 45038] [client 4.230.25.164:32193] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/install.php"] [unique_id "aV0azhaMAxCuju1d0uYa7gAAANg"]
[Tue Jan 06 22:23:13.370014 2026] [:error] [pid 44905:tid 44977] [client 4.230.25.164:31937] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/install.php"] [unique_id "aV0a0bu7ufwWVst9EAv8jAAAAIk"]
[Tue Jan 06 22:23:15.138415 2026] [:error] [pid 44904:tid 44958] [client 4.230.25.164:51787] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/install.php"] [unique_id "aV0a0ztieuI1BJEZcvdKKAAAAFE"]
[Tue Jan 06 22:23:17.683727 2026] [:error] [pid 45012:tid 45025] [client 4.230.25.164:51788] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aV0a1RaMAxCuju1d0uYa8wAAAMs"]
[Tue Jan 06 22:23:20.328860 2026] [:error] [pid 44904:tid 44962] [client 4.230.25.164:31925] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aV0a2DtieuI1BJEZcvdKLgAAAFU"]
[Tue Jan 06 22:23:22.288928 2026] [:error] [pid 44905:tid 44992] [client 4.230.25.164:31920] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aV0a2ru7ufwWVst9EAv8jgAAAJg"]
[Tue Jan 06 22:23:23.619411 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:10509] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aV0a2xaMAxCuju1d0uYa-QAAAMo"]
[Tue Jan 06 22:23:24.781025 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:10515] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aV0a3Lu7ufwWVst9EAv8jwAAAJA"]
[Tue Jan 06 22:23:25.882311 2026] [:error] [pid 44903:tid 44917] [client 4.230.25.164:31874] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aV0a3dhHqjs38zbkQPAvdAAAAAo"]
[Tue Jan 06 22:23:26.843252 2026] [:error] [pid 45012:tid 45032] [client 4.230.25.164:57370] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aV0a3haMAxCuju1d0uYbAAAAANI"]
[Tue Jan 06 22:23:28.387222 2026] [:error] [pid 45012:tid 45017] [client 4.230.25.164:32582] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aV0a4BaMAxCuju1d0uYbBAAAAMM"]
[Tue Jan 06 22:23:28.964960 2026] [:error] [pid 45959:tid 45975] [client 4.230.25.164:31997] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aV0a4Fajdn8P3hjgMYwBbgAAAU0"]
[Tue Jan 06 22:23:30.620509 2026] [:error] [pid 45959:tid 45965] [client 4.230.25.164:10549] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aV0a4lajdn8P3hjgMYwBcQAAAUM"]
[Tue Jan 06 22:23:31.486231 2026] [:error] [pid 45959:tid 45962] [client 4.230.25.164:10526] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aV0a41ajdn8P3hjgMYwBdAAAAUA"]
[Tue Jan 06 22:23:32.716818 2026] [:error] [pid 45959:tid 45968] [client 4.230.25.164:10507] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aV0a5Fajdn8P3hjgMYwBdwAAAUY"]
[Tue Jan 06 22:23:34.150240 2026] [:error] [pid 44903:tid 44917] [client 4.230.25.164:31929] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aV0a5thHqjs38zbkQPAvgwAAAAo"]
[Tue Jan 06 22:23:34.582622 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:10540] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aV0a5haMAxCuju1d0uYbBwAAAMo"]
[Tue Jan 06 22:23:35.064625 2026] [:error] [pid 45959:tid 45975] [client 4.230.25.164:51832] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aV0a51ajdn8P3hjgMYwBfAAAAU0"]
[Tue Jan 06 22:23:36.437238 2026] [:error] [pid 45012:tid 45032] [client 4.230.25.164:57367] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aV0a6BaMAxCuju1d0uYbCwAAANI"]
[Tue Jan 06 22:23:37.802723 2026] [:error] [pid 45959:tid 45963] [client 4.230.25.164:31876] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aV0a6Vajdn8P3hjgMYwBgwAAAUE"]
[Tue Jan 06 22:23:38.882129 2026] [:error] [pid 45012:tid 45021] [client 4.230.25.164:32534] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aV0a6haMAxCuju1d0uYbDwAAAMc"]
[Tue Jan 06 22:23:40.111302 2026] [:error] [pid 45959:tid 45977] [client 4.230.25.164:30684] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aV0a7Fajdn8P3hjgMYwBhwAAAU8"]
[Tue Jan 06 22:23:41.792478 2026] [:error] [pid 35140:tid 35146] [client 4.230.25.164:31985] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aV0a7XoQaIDFMbT-XMzn0wAAAQQ"]
[Tue Jan 06 22:23:43.839249 2026] [:error] [pid 45012:tid 45026] [client 4.230.25.164:45355] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aV0a7xaMAxCuju1d0uYbEwAAAMw"]
[Tue Jan 06 22:23:45.394309 2026] [:error] [pid 45959:tid 45978] [client 4.230.25.164:51811] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aV0a8Vajdn8P3hjgMYwBjgAAAVA"]
[Tue Jan 06 22:23:47.665191 2026] [:error] [pid 45959:tid 45971] [client 4.230.25.164:31872] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aV0a81ajdn8P3hjgMYwBlAAAAUk"]
[Tue Jan 06 22:23:49.084964 2026] [:error] [pid 44904:tid 44943] [client 4.230.25.164:30897] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aV0a9TtieuI1BJEZcvdKTAAAAEI"]
[Tue Jan 06 22:23:52.024710 2026] [:error] [pid 44904:tid 44941] [client 4.230.25.164:30872] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aV0a-DtieuI1BJEZcvdKUQAAAEA"]
[Tue Jan 06 22:23:53.235357 2026] [:error] [pid 45012:tid 45032] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Jan 06 22:23:53.387960 2026] [:error] [pid 45012:tid 45036] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Jan 06 22:23:53.743518 2026] [:error] [pid 45012:tid 45034] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Jan 06 22:23:53.896843 2026] [:error] [pid 45012:tid 45021] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sign.php
[Tue Jan 06 22:23:54.034860 2026] [:error] [pid 45012:tid 45027] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/ppp.php
[Tue Jan 06 22:23:54.405426 2026] [:error] [pid 45012:tid 45029] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Jan 06 22:23:54.543538 2026] [:error] [pid 45012:tid 45031] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Tue Jan 06 22:23:54.699422 2026] [:error] [pid 45012:tid 45026] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Jan 06 22:23:55.020245 2026] [:error] [pid 45012:tid 45030] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Tue Jan 06 22:23:55.158417 2026] [:error] [pid 45012:tid 45038] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-help.php
[Tue Jan 06 22:23:55.304265 2026] [:error] [pid 45012:tid 45015] [client 4.230.25.164:30850] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Tue Jan 06 22:23:55.462045 2026] [:error] [pid 45012:tid 45036] [client 4.230.25.164:30850] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV0a-xaMAxCuju1d0uYbNgAAANY"]
[Tue Jan 06 22:23:56.519298 2026] [:error] [pid 44904:tid 44955] [client 4.230.25.164:51760] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV0a_DtieuI1BJEZcvdKUwAAAE4"]
[Tue Jan 06 22:23:58.349373 2026] [:error] [pid 45959:tid 45979] [client 4.230.25.164:23126] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV0a_lajdn8P3hjgMYwBsgAAAVE"]
[Tue Jan 06 22:23:59.608415 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:51428] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/wp-trackback.php"] [unique_id "aV0a_7u7ufwWVst9EAv8nQAAAJA"]
[Tue Jan 06 22:24:01.217596 2026] [:error] [pid 44903:tid 44914] [client 4.230.25.164:23139] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aV0bAdhHqjs38zbkQPAvkwAAAAc"]
[Tue Jan 06 22:24:02.099736 2026] [:error] [pid 44904:tid 44964] [client 4.230.25.164:23122] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aV0bAjtieuI1BJEZcvdKWAAAAFc"]
[Tue Jan 06 22:24:03.286228 2026] [:error] [pid 44905:tid 44971] [client 4.230.25.164:10998] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aV0bA7u7ufwWVst9EAv8pAAAAIM"]
[Tue Jan 06 22:24:03.953906 2026] [:error] [pid 45959:tid 45980] [client 4.230.25.164:61741] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aV0bA1ajdn8P3hjgMYwBxQAAAVI"]
[Tue Jan 06 22:24:06.946047 2026] [:error] [pid 45959:tid 45984] [client 4.230.25.164:46915] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aV0bBlajdn8P3hjgMYwB1QAAAVY"]
[Tue Jan 06 22:24:08.217180 2026] [:error] [pid 44905:tid 44972] [client 4.230.25.164:11171] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aV0bCLu7ufwWVst9EAv8uQAAAIQ"]
[Tue Jan 06 22:24:09.850604 2026] [:error] [pid 44905:tid 44973] [client 4.230.25.164:46311] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aV0bCbu7ufwWVst9EAv8wAAAAIU"]
[Tue Jan 06 22:24:12.396660 2026] [:error] [pid 44903:tid 44920] [client 4.230.25.164:50822] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "aV0bDNhHqjs38zbkQPAvxwAAAA0"]
[Tue Jan 06 22:24:13.283443 2026] [:error] [pid 44905:tid 44969] [client 4.230.25.164:28831] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/text.php"] [unique_id "aV0bDbu7ufwWVst9EAv85QAAAIE"]
[Tue Jan 06 22:24:14.349279 2026] [:error] [pid 35140:tid 35152] [client 4.230.25.164:28813] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/text.php"] [unique_id "aV0bDnoQaIDFMbT-XMzoGAAAAQo"]
[Tue Jan 06 22:24:15.229448 2026] [:error] [pid 44903:tid 44926] [client 4.230.25.164:46321] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/text.php"] [unique_id "aV0bD9hHqjs38zbkQPAv1gAAABM"]
[Tue Jan 06 22:24:16.308645 2026] [:error] [pid 45012:tid 45019] [client 4.230.25.164:28846] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/text.php"] [unique_id "aV0bEBaMAxCuju1d0uYbcAAAAMU"]
[Tue Jan 06 22:24:17.559455 2026] [:error] [pid 44905:tid 44968] [client 4.230.25.164:18950] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aV0bEbu7ufwWVst9EAv9AAAAAIA"]
[Tue Jan 06 22:24:18.503486 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:18951] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aV0bEru7ufwWVst9EAv9CQAAAJA"]
[Tue Jan 06 22:24:20.149333 2026] [:error] [pid 44905:tid 44976] [client 4.230.25.164:18997] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aV0bFLu7ufwWVst9EAv9DAAAAIg"]
[Tue Jan 06 22:24:21.898965 2026] [:error] [pid 45012:tid 45016] [client 4.230.25.164:10684] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aV0bFRaMAxCuju1d0uYbiAAAAMI"]
[Tue Jan 06 22:24:22.430824 2026] [:error] [pid 44904:tid 44955] [client 4.230.25.164:28807] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aV0bFjtieuI1BJEZcvdKuQAAAE4"]
[Tue Jan 06 22:24:22.988977 2026] [:error] [pid 35140:tid 35161] [client 4.230.25.164:50837] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aV0bFnoQaIDFMbT-XMzoSAAAARM"]
[Tue Jan 06 22:24:23.658446 2026] [:error] [pid 45959:tid 45978] [client 4.230.25.164:48075] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aV0bF1ajdn8P3hjgMYwCOwAAAVA"]
[Tue Jan 06 22:24:24.341009 2026] [:error] [pid 45012:tid 45029] [client 4.230.25.164:11011] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aV0bGBaMAxCuju1d0uYbkAAAAM8"]
[Tue Jan 06 22:24:25.197049 2026] [:error] [pid 45959:tid 45963] [client 4.230.25.164:56001] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aV0bGVajdn8P3hjgMYwCRwAAAUE"]
[Tue Jan 06 22:24:26.078324 2026] [:error] [pid 44903:tid 44913] [client 4.230.25.164:10638] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aV0bGthHqjs38zbkQPAwIQAAAAY"]
[Tue Jan 06 22:24:27.451672 2026] [:error] [pid 45012:tid 45019] [client 4.230.25.164:10647] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aV0bGxaMAxCuju1d0uYbrQAAAMU"]
[Tue Jan 06 22:24:28.874486 2026] [:error] [pid 45012:tid 45023] [client 4.230.25.164:54803] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aV0bHBaMAxCuju1d0uYbrgAAAMk"]
[Tue Jan 06 22:24:29.680417 2026] [:error] [pid 45012:tid 45034] [client 4.230.25.164:46872] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aV0bHRaMAxCuju1d0uYbsAAAANQ"]
[Tue Jan 06 22:24:31.044147 2026] [:error] [pid 44904:tid 44949] [client 4.230.25.164:18971] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aV0bHztieuI1BJEZcvdKzQAAAEg"]
[Tue Jan 06 22:24:31.958421 2026] [:error] [pid 44903:tid 44916] [client 4.230.25.164:48065] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aV0bH9hHqjs38zbkQPAwJgAAAAk"]
[Tue Jan 06 22:24:33.135866 2026] [:error] [pid 45959:tid 45971] [client 4.230.25.164:56035] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aV0bIVajdn8P3hjgMYwCVwAAAUk"]
[Tue Jan 06 22:24:35.834571 2026] [:error] [pid 45959:tid 45986] [client 4.230.25.164:53678] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xp.php"] [unique_id "aV0bI1ajdn8P3hjgMYwCXwAAAVg"]
[Tue Jan 06 22:24:38.607289 2026] [:error] [pid 45012:tid 45028] [client 4.230.25.164:56021] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xp.php"] [unique_id "aV0bJhaMAxCuju1d0uYbtwAAAM4"]
[Tue Jan 06 22:24:40.238543 2026] [:error] [pid 35140:tid 35153] [client 4.230.25.164:54844] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xp.php"] [unique_id "aV0bKHoQaIDFMbT-XMzoWAAAAQs"]
[Tue Jan 06 22:24:41.354869 2026] [:error] [pid 44905:tid 44971] [client 4.230.25.164:53633] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xp.php"] [unique_id "aV0bKbu7ufwWVst9EAv9HwAAAIM"]
[Tue Jan 06 22:24:44.677480 2026] [:error] [pid 44904:tid 44947] [client 4.230.25.164:46863] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yes.php"] [unique_id "aV0bLDtieuI1BJEZcvdK1QAAAEY"]
[Tue Jan 06 22:24:45.509253 2026] [:error] [pid 45012:tid 45016] [client 4.230.25.164:56004] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yes.php"] [unique_id "aV0bLRaMAxCuju1d0uYbwQAAAMI"]
[Tue Jan 06 22:24:46.353852 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:10678] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yes.php"] [unique_id "aV0bLru7ufwWVst9EAv9JwAAAJA"]
[Tue Jan 06 22:24:48.787164 2026] [:error] [pid 45012:tid 45035] [client 4.230.25.164:46887] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yes.php"] [unique_id "aV0bMBaMAxCuju1d0uYbxAAAANU"]
[Tue Jan 06 22:24:49.264225 2026] [:error] [pid 44905:tid 44986] [client 4.230.25.164:46869] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/09fa6.php"] [unique_id "aV0bMbu7ufwWVst9EAv9LwAAAJI"]
[Tue Jan 06 22:24:50.872472 2026] [:error] [pid 44905:tid 44991] [client 4.230.25.164:10515] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/09fa6.php"] [unique_id "aV0bMru7ufwWVst9EAv9MwAAAJc"]
[Tue Jan 06 22:24:51.980096 2026] [:error] [pid 44905:tid 44976] [client 4.230.25.164:10635] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/09fa6.php"] [unique_id "aV0bM7u7ufwWVst9EAv9OAAAAIg"]
[Tue Jan 06 22:24:54.375259 2026] [:error] [pid 35140:tid 35154] [client 4.230.25.164:57288] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/09fa6.php"] [unique_id "aV0bNnoQaIDFMbT-XMzoYAAAAQw"]
[Tue Jan 06 22:24:56.197919 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/89.php
[Tue Jan 06 22:24:56.361919 2026] [:error] [pid 44905:tid 44985] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/has.php
[Tue Jan 06 22:24:56.614285 2026] [:error] [pid 44905:tid 44991] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/nax.php
[Tue Jan 06 22:24:56.887255 2026] [:error] [pid 44905:tid 44992] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/ooj.php
[Tue Jan 06 22:24:57.025869 2026] [:error] [pid 44905:tid 44986] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/orm.php
[Tue Jan 06 22:24:57.179883 2026] [:error] [pid 44905:tid 44970] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/yep.php
[Tue Jan 06 22:24:57.319818 2026] [:error] [pid 44905:tid 44980] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/x3.php
[Tue Jan 06 22:24:57.458141 2026] [:error] [pid 44905:tid 44977] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/6erg.php
[Tue Jan 06 22:24:57.597174 2026] [:error] [pid 44905:tid 44976] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/ggfi.php
[Tue Jan 06 22:24:57.736163 2026] [:error] [pid 44905:tid 44971] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Tue Jan 06 22:24:57.920045 2026] [:error] [pid 44905:tid 44968] [client 4.230.25.164:10694] File does not exist: /usr/local/apache/htdocs/suspended-page/jju.php
[Tue Jan 06 22:24:58.059264 2026] [:error] [pid 44905:tid 44975] [client 4.230.25.164:10694] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aV0bOru7ufwWVst9EAv9WgAAAIc"]
[Tue Jan 06 22:24:59.414486 2026] [:error] [pid 35140:tid 35144] [client 4.230.25.164:57304] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aV0bO3oQaIDFMbT-XMzoYgAAAQI"]
[Tue Jan 06 22:25:00.516071 2026] [:error] [pid 44904:tid 44958] [client 4.230.25.164:10876] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aV0bPDtieuI1BJEZcvdK5wAAAFE"]
[Tue Jan 06 22:25:01.113353 2026] [:error] [pid 44904:tid 44955] [client 4.230.25.164:61642] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aV0bPTtieuI1BJEZcvdK6QAAAE4"]
[Tue Jan 06 22:25:01.810153 2026] [:error] [pid 45012:tid 45021] [client 4.230.25.164:30347] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aV0bPRaMAxCuju1d0uYbzwAAAMc"]
[Tue Jan 06 22:25:02.869253 2026] [:error] [pid 45012:tid 45035] [client 4.230.25.164:31494] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aV0bPhaMAxCuju1d0uYb0QAAANU"]
[Tue Jan 06 22:25:05.331969 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:47517] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aV0bQRaMAxCuju1d0uYb0gAAAMo"]
[Tue Jan 06 22:25:09.023926 2026] [:error] [pid 45012:tid 45020] [client 4.230.25.164:25474] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aV0bRRaMAxCuju1d0uYb2gAAAMY"]
[Tue Jan 06 22:25:10.386704 2026] [:error] [pid 45959:tid 45974] [client 4.230.25.164:31710] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aV0bRlajdn8P3hjgMYwCgwAAAUw"]
[Tue Jan 06 22:25:12.513629 2026] [:error] [pid 44904:tid 44947] [client 4.230.25.164:31467] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aV0bSDtieuI1BJEZcvdK8gAAAEY"]
[Tue Jan 06 22:25:13.532058 2026] [:error] [pid 45012:tid 45035] [client 4.230.25.164:54744] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aV0bSRaMAxCuju1d0uYb5QAAANU"]
[Tue Jan 06 22:25:14.811375 2026] [:error] [pid 44905:tid 44985] [client 4.230.25.164:29975] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aV0bSru7ufwWVst9EAv9aQAAAJE"]
[Tue Jan 06 22:25:19.114373 2026] [:error] [pid 45012:tid 45028] [client 4.230.25.164:31700] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "aV0bTxaMAxCuju1d0uYb-gAAAM4"]
[Tue Jan 06 22:25:20.378679 2026] [:error] [pid 45012:tid 45029] [client 4.230.25.164:62912] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "aV0bUBaMAxCuju1d0uYb_gAAAM8"]
[Tue Jan 06 22:25:21.361230 2026] [:error] [pid 44905:tid 44975] [client 4.230.25.164:31501] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "aV0bUbu7ufwWVst9EAv9dQAAAIc"]
[Tue Jan 06 22:25:22.560399 2026] [:error] [pid 35140:tid 35143] [client 4.230.25.164:25499] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "aV0bUnoQaIDFMbT-XMzofgAAAQE"]
[Tue Jan 06 22:25:24.165939 2026] [:error] [pid 45012:tid 45038] [client 4.230.25.164:62956] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aV0bVBaMAxCuju1d0uYcAwAAANg"]
[Tue Jan 06 22:25:24.795770 2026] [:error] [pid 45959:tid 45965] [client 4.230.25.164:51387] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aV0bVFajdn8P3hjgMYwCmwAAAUM"]
[Tue Jan 06 22:25:26.359228 2026] [:error] [pid 44905:tid 44992] [client 4.230.25.164:29983] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aV0bVru7ufwWVst9EAv9ewAAAJg"]
[Tue Jan 06 22:25:27.225045 2026] [:error] [pid 45959:tid 45962] [client 4.230.25.164:25527] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aV0bV1ajdn8P3hjgMYwCpAAAAUA"]
[Tue Jan 06 22:25:28.412424 2026] [:error] [pid 44905:tid 44986] [client 4.230.25.164:54769] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aua.php"] [unique_id "aV0bWLu7ufwWVst9EAv9fAAAAJI"]
[Tue Jan 06 22:25:32.228808 2026] [:error] [pid 45959:tid 45971] [client 4.230.25.164:62970] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aua.php"] [unique_id "aV0bXFajdn8P3hjgMYwCsAAAAUk"]
[Tue Jan 06 22:25:33.989501 2026] [:error] [pid 44905:tid 44975] [client 4.230.25.164:51364] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aua.php"] [unique_id "aV0bXbu7ufwWVst9EAv9hgAAAIc"]
[Tue Jan 06 22:25:38.557830 2026] [:error] [pid 44904:tid 44948] [client 4.230.25.164:25300] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aua.php"] [unique_id "aV0bYjtieuI1BJEZcvdLBwAAAEc"]
[Tue Jan 06 22:25:39.198368 2026] [:error] [pid 35140:tid 35144] [client 4.230.25.164:30737] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aV0bY3oQaIDFMbT-XMzolwAAAQI"]
[Tue Jan 06 22:25:41.122314 2026] [:error] [pid 45959:tid 45963] [client 4.230.25.164:55578] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aV0bZVajdn8P3hjgMYwCwQAAAUE"]
[Tue Jan 06 22:25:41.864847 2026] [:error] [pid 44904:tid 44943] [client 4.230.25.164:63007] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aV0bZTtieuI1BJEZcvdLDAAAAEI"]
[Tue Jan 06 22:25:42.484660 2026] [:error] [pid 45959:tid 45975] [client 4.230.25.164:55562] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aV0bZlajdn8P3hjgMYwCwwAAAU0"]
[Tue Jan 06 22:25:44.133975 2026] [:error] [pid 45959:tid 45966] [client 4.230.25.164:33054] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aV0baFajdn8P3hjgMYwCxQAAAUQ"]
[Tue Jan 06 22:25:46.121426 2026] [:error] [pid 35140:tid 35145] [client 4.230.25.164:62978] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aV0banoQaIDFMbT-XMzopAAAAQM"]
[Tue Jan 06 22:25:46.811647 2026] [:error] [pid 45959:tid 45981] [client 4.230.25.164:32168] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aV0balajdn8P3hjgMYwCzgAAAVM"]
[Tue Jan 06 22:25:47.586337 2026] [:error] [pid 45959:tid 45972] [client 4.230.25.164:56784] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aV0ba1ajdn8P3hjgMYwC0wAAAUo"]
[Tue Jan 06 22:25:49.027492 2026] [:error] [pid 45959:tid 45971] [client 4.230.25.164:32136] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aV0bbVajdn8P3hjgMYwC1gAAAUk"]
[Tue Jan 06 22:25:50.173987 2026] [:error] [pid 44904:tid 44952] [client 4.230.25.164:48825] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aV0bbjtieuI1BJEZcvdLFwAAAEs"]
[Tue Jan 06 22:25:50.896308 2026] [:error] [pid 44905:tid 44970] [client 4.230.25.164:25585] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aV0bbru7ufwWVst9EAv9ogAAAII"]
[Tue Jan 06 22:25:51.482497 2026] [:error] [pid 44905:tid 44979] [client 4.230.25.164:10427] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ot.php"] [unique_id "aV0bb7u7ufwWVst9EAv9owAAAIs"]
[Tue Jan 06 22:25:52.025452 2026] [:error] [pid 44905:tid 44980] [client 4.230.25.164:10421] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmm.php"] [unique_id "aV0bcLu7ufwWVst9EAv9pQAAAIw"]
[Tue Jan 06 22:25:53.147258 2026] [:error] [pid 45959:tid 45981] [client 4.230.25.164:52368] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmm.php"] [unique_id "aV0bcVajdn8P3hjgMYwC4QAAAVM"]
[Tue Jan 06 22:25:54.260723 2026] [:error] [pid 45959:tid 45978] [client 4.230.25.164:48808] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmm.php"] [unique_id "aV0bclajdn8P3hjgMYwC5AAAAVA"]
[Tue Jan 06 22:25:55.263225 2026] [:error] [pid 44905:tid 44983] [client 4.230.25.164:48820] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/witmm.php"] [unique_id "aV0bc7u7ufwWVst9EAv9rwAAAI8"]
[Tue Jan 06 22:25:56.805164 2026] [:error] [pid 35140:tid 35150] [client 4.230.25.164:47563] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ocxla.php"] [unique_id "aV0bdHoQaIDFMbT-XMzosQAAAQg"]
[Tue Jan 06 22:25:59.075894 2026] [:error] [pid 44904:tid 44953] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/ocxla.php
[Tue Jan 06 22:25:59.223333 2026] [:error] [pid 44904:tid 44965] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Tue Jan 06 22:25:59.381437 2026] [:error] [pid 44904:tid 44956] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/resp.php
[Tue Jan 06 22:25:59.539465 2026] [:error] [pid 44904:tid 44963] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/100.kb.php
[Tue Jan 06 22:25:59.685041 2026] [:error] [pid 44904:tid 44959] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/wqqs.php
[Tue Jan 06 22:25:59.837076 2026] [:error] [pid 44904:tid 44962] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq13.php
[Tue Jan 06 22:25:59.976015 2026] [:error] [pid 44904:tid 44954] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/rtx.php
[Tue Jan 06 22:26:00.116182 2026] [:error] [pid 44904:tid 44947] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Tue Jan 06 22:26:00.257066 2026] [:error] [pid 44904:tid 44961] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/fs6.php
[Tue Jan 06 22:26:00.395846 2026] [:error] [pid 44904:tid 44952] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/clasa99.php
[Tue Jan 06 22:26:00.554716 2026] [:error] [pid 44904:tid 44948] [client 4.230.25.164:31394] File does not exist: /usr/local/apache/htdocs/suspended-page/fasx.php
[Tue Jan 06 22:26:00.703032 2026] [:error] [pid 44904:tid 44942] [client 4.230.25.164:31394] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aV0beDtieuI1BJEZcvdLMQAAAEE"]
[Tue Jan 06 22:26:01.700156 2026] [:error] [pid 45959:tid 45968] [client 4.230.25.164:10437] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aV0beVajdn8P3hjgMYwC8wAAAUY"]
[Tue Jan 06 22:26:02.607032 2026] [:error] [pid 44904:tid 44949] [client 4.230.25.164:31364] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aV0bejtieuI1BJEZcvdLMwAAAEg"]
[Tue Jan 06 22:26:04.541694 2026] [:error] [pid 45012:tid 45033] [client 4.230.25.164:11175] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aV0bfBaMAxCuju1d0uYcMgAAANM"]
[Tue Jan 06 22:26:06.266505 2026] [:error] [pid 45012:tid 45014] [client 4.230.25.164:57926] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock1.php"] [unique_id "aV0bfhaMAxCuju1d0uYcNwAAAMA"]
[Tue Jan 06 22:26:07.534053 2026] [:error] [pid 35140:tid 35162] [client 4.230.25.164:27333] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock1.php"] [unique_id "aV0bf3oQaIDFMbT-XMzoxgAAARQ"]
[Tue Jan 06 22:26:09.557652 2026] [:error] [pid 35140:tid 35157] [client 4.230.25.164:10364] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock1.php"] [unique_id "aV0bgXoQaIDFMbT-XMzo1wAAAQ8"]
[Tue Jan 06 22:26:12.011541 2026] [:error] [pid 44904:tid 44957] [client 4.230.25.164:10463] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock1.php"] [unique_id "aV0bhDtieuI1BJEZcvdLbgAAAFA"]
[Tue Jan 06 22:26:15.886362 2026] [:error] [pid 44904:tid 44963] [client 4.230.25.164:31370] [client 4.230.25.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV0bhztieuI1BJEZcvdLdwAAAFY"]
[Tue Jan 06 22:26:18.034436 2026] [:error] [pid 35140:tid 35148] [client 4.230.25.164:31386] [client 4.230.25.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/info.php"] [unique_id "aV0binoQaIDFMbT-XMzo6gAAAQY"]
[Tue Jan 06 22:26:20.904031 2026] [:error] [pid 45012:tid 45019] [client 4.230.25.164:11263] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV0bjBaMAxCuju1d0uYcWQAAAMU"]
[Tue Jan 06 22:26:21.632234 2026] [:error] [pid 45959:tid 45975] [client 4.230.25.164:27471] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV0bjVajdn8P3hjgMYwDUgAAAU0"]
[Tue Jan 06 22:26:22.567963 2026] [:error] [pid 45959:tid 45978] [client 4.230.25.164:10449] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV0bjlajdn8P3hjgMYwDVwAAAVA"]
[Tue Jan 06 22:26:24.522925 2026] [:error] [pid 44903:tid 44920] [client 4.230.25.164:50934] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/en/gastenboek.php"] [unique_id "aV0bkNhHqjs38zbkQPAwfQAAAA0"]
[Tue Jan 06 22:26:25.674659 2026] [:error] [pid 45959:tid 45969] [client 4.230.25.164:50924] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV0bkVajdn8P3hjgMYwDXgAAAUc"]
[Tue Jan 06 22:26:27.547987 2026] [:error] [pid 45959:tid 45982] [client 4.230.25.164:25460] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV0bk1ajdn8P3hjgMYwDYgAAAVQ"]
[Tue Jan 06 22:26:28.011461 2026] [:error] [pid 45959:tid 45963] [client 4.230.25.164:32202] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV0blFajdn8P3hjgMYwDZwAAAUE"]
[Tue Jan 06 22:26:29.594874 2026] [:error] [pid 35140:tid 35151] [client 4.230.25.164:10332] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/third_party/kcfinder/upload.php"] [unique_id "aV0blXoQaIDFMbT-XMzo8QAAAQk"]
[Tue Jan 06 22:26:31.101506 2026] [:error] [pid 44903:tid 44933] [client 4.230.25.164:57929] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock11.php"] [unique_id "aV0bl9hHqjs38zbkQPAwhwAAABg"]
[Tue Jan 06 22:26:31.522557 2026] [:error] [pid 45012:tid 45019] [client 4.230.25.164:31374] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock11.php"] [unique_id "aV0blxaMAxCuju1d0uYcagAAAMU"]
[Tue Jan 06 22:26:33.351852 2026] [:error] [pid 45012:tid 45037] [client 4.230.25.164:25426] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock11.php"] [unique_id "aV0bmRaMAxCuju1d0uYcbQAAANc"]
[Tue Jan 06 22:26:36.477178 2026] [:error] [pid 44903:tid 44926] [client 4.230.25.164:57935] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock11.php"] [unique_id "aV0bnNhHqjs38zbkQPAwjQAAABM"]
[Tue Jan 06 22:26:36.998756 2026] [:error] [pid 35140:tid 35166] [client 4.230.25.164:11204] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aV0bnHoQaIDFMbT-XMzo-AAAARg"]
[Tue Jan 06 22:26:39.023665 2026] [:error] [pid 45012:tid 45026] [client 4.230.25.164:27484] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aV0bnxaMAxCuju1d0uYcewAAAMw"]
[Tue Jan 06 22:26:40.860093 2026] [:error] [pid 45012:tid 45023] [client 4.230.25.164:31391] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aV0boBaMAxCuju1d0uYcgwAAAMk"]
[Tue Jan 06 22:26:41.836431 2026] [:error] [pid 45959:tid 45968] [client 4.230.25.164:31375] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aV0boVajdn8P3hjgMYwDggAAAUY"]
[Tue Jan 06 22:26:44.018803 2026] [:error] [pid 45959:tid 45965] [client 4.230.25.164:31414] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aV0bpFajdn8P3hjgMYwDiAAAAUM"]
[Tue Jan 06 22:26:44.952672 2026] [:error] [pid 35140:tid 35165] [client 4.230.25.164:10978] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aV0bpHoQaIDFMbT-XMzo_wAAARc"]
[Tue Jan 06 22:26:49.384253 2026] [:error] [pid 44905:tid 44979] [client 4.230.25.164:25414] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aV0bqbu7ufwWVst9EAv-GwAAAIs"]
[Tue Jan 06 22:26:52.232578 2026] [:error] [pid 44904:tid 44953] [client 4.230.25.164:11251] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aV0brDtieuI1BJEZcvdLoQAAAEw"]
[Tue Jan 06 22:26:53.194391 2026] [:error] [pid 45959:tid 45968] [client 4.230.25.164:27503] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aV0brVajdn8P3hjgMYwDngAAAUY"]
[Tue Jan 06 22:26:55.291689 2026] [:error] [pid 44904:tid 44944] [client 4.230.25.164:11229] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aV0brztieuI1BJEZcvdLrQAAAEM"]
[Tue Jan 06 22:26:56.213341 2026] [:error] [pid 44903:tid 44918] [client 4.230.25.164:11242] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aV0bsNhHqjs38zbkQPAwpAAAAAs"]
[Tue Jan 06 22:26:57.668369 2026] [:error] [pid 44903:tid 44915] [client 4.230.25.164:32564] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aV0bsdhHqjs38zbkQPAwqQAAAAg"]
[Tue Jan 06 22:26:58.761394 2026] [:error] [pid 44903:tid 44914] [client 4.230.25.164:25449] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v1.php"] [unique_id "aV0bsthHqjs38zbkQPAwrAAAAAc"]
[Tue Jan 06 22:27:02.715261 2026] [:error] [pid 45012:tid 45033] [client 4.230.25.164:46932] File does not exist: /usr/local/apache/htdocs/suspended-page/v1.php
[Tue Jan 06 22:27:03.069217 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:46932] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Jan 06 22:27:03.577912 2026] [:error] [pid 45012:tid 45032] [client 4.230.25.164:46932] File does not exist: /usr/local/apache/htdocs/suspended-page/skinmain.php
[Tue Jan 06 22:27:03.867701 2026] [:error] [pid 45012:tid 45018] [client 4.230.25.164:46932] File does not exist: /usr/local/apache/htdocs/suspended-page/orxnwdbb.php
[Tue Jan 06 22:27:04.011875 2026] [:error] [pid 45012:tid 45022] [client 4.230.25.164:46932] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Tue Jan 06 22:27:04.160927 2026] [:error] [pid 45012:tid 45023] [client 4.230.25.164:46932] File does not exist: /usr/local/apache/htdocs/suspended-page/fs8.php
[Tue Jan 06 22:27:04.673116 2026] [:error] [pid 45012:tid 45026] [client 4.230.25.164:46932] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer-4.5.0-mysql.php
[Tue Jan 06 22:27:04.807666 2026] [:error] [pid 45012:tid 45024] [client 4.230.25.164:46932] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-class.php"] [unique_id "aV0buBaMAxCuju1d0uYctgAAAMo"]
[Tue Jan 06 22:27:06.322424 2026] [:error] [pid 45959:tid 45979] [client 4.230.25.164:25441] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-class.php"] [unique_id "aV0bulajdn8P3hjgMYwDsAAAAVE"]
[Tue Jan 06 22:27:08.754979 2026] [:error] [pid 44904:tid 44965] [client 4.230.25.164:32557] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-class.php"] [unique_id "aV0bvDtieuI1BJEZcvdLxwAAAFg"]
[Tue Jan 06 22:27:09.334700 2026] [:error] [pid 44905:tid 44992] [client 4.230.25.164:25469] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-class.php"] [unique_id "aV0bvbu7ufwWVst9EAv-MAAAAJg"]
[Tue Jan 06 22:27:11.433738 2026] [:error] [pid 45959:tid 45969] [client 4.230.25.164:10609] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/video.php"] [unique_id "aV0bv1ajdn8P3hjgMYwDuAAAAUc"]
[Tue Jan 06 22:27:16.604240 2026] [:error] [pid 45012:tid 45035] [client 4.230.25.164:10968] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/video.php"] [unique_id "aV0bxBaMAxCuju1d0uYc2wAAANU"]
[Tue Jan 06 22:27:17.420124 2026] [:error] [pid 44903:tid 44907] [client 4.230.25.164:10571] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/video.php"] [unique_id "aV0bxdhHqjs38zbkQPAw1AAAAAA"]
[Tue Jan 06 22:27:18.210640 2026] [:error] [pid 45012:tid 45026] [client 4.230.25.164:61736] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/video.php"] [unique_id "aV0bxhaMAxCuju1d0uYc3QAAAMw"]
[Tue Jan 06 22:27:18.990959 2026] [:error] [pid 44905:tid 44979] [client 4.230.25.164:10584] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scgi-bin.php"] [unique_id "aV0bxru7ufwWVst9EAv-PQAAAIs"]
[Tue Jan 06 22:27:19.871968 2026] [:error] [pid 35140:tid 35147] [client 4.230.25.164:28699] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scgi-bin.php"] [unique_id "aV0bx3oQaIDFMbT-XMzpMAAAAQU"]
[Tue Jan 06 22:27:23.294342 2026] [:error] [pid 35140:tid 35148] [client 4.230.25.164:27491] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scgi-bin.php"] [unique_id "aV0by3oQaIDFMbT-XMzpOgAAAQY"]
[Tue Jan 06 22:27:25.146864 2026] [:error] [pid 44905:tid 44988] [client 4.230.25.164:32517] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scgi-bin.php"] [unique_id "aV0bzbu7ufwWVst9EAv-SwAAAJQ"]
[Tue Jan 06 22:27:26.355864 2026] [:error] [pid 45959:tid 45986] [client 4.230.25.164:10979] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/finest09.php"] [unique_id "aV0bzlajdn8P3hjgMYwD0gAAAVg"]
[Tue Jan 06 22:27:27.433392 2026] [:error] [pid 45959:tid 45975] [client 4.230.25.164:25345] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/finest09.php"] [unique_id "aV0bz1ajdn8P3hjgMYwD1wAAAU0"]
[Tue Jan 06 22:27:28.467197 2026] [:error] [pid 45012:tid 45017] [client 4.230.25.164:25348] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/finest09.php"] [unique_id "aV0b0BaMAxCuju1d0uYc6gAAAMM"]
[Tue Jan 06 22:27:30.151294 2026] [:error] [pid 35140:tid 35160] [client 4.230.25.164:61709] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/finest09.php"] [unique_id "aV0b0noQaIDFMbT-XMzpQgAAARI"]
[Tue Jan 06 22:27:31.144314 2026] [:error] [pid 45012:tid 45022] [client 4.230.25.164:30502] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aV0b0xaMAxCuju1d0uYc8wAAAMg"]
[Tue Jan 06 22:27:32.089097 2026] [:error] [pid 44905:tid 44984] [client 4.230.25.164:10952] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aV0b1Lu7ufwWVst9EAv-bwAAAJA"]
[Tue Jan 06 22:27:32.724310 2026] [:error] [pid 44905:tid 44988] [client 4.230.25.164:61702] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aV0b1Lu7ufwWVst9EAv-dAAAAJQ"]
[Tue Jan 06 22:27:34.447564 2026] [:error] [pid 45012:tid 45037] [client 4.230.25.164:46925] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aV0b1haMAxCuju1d0uYc9gAAANc"]
[Tue Jan 06 22:27:35.118466 2026] [:error] [pid 45959:tid 45974] [client 4.230.25.164:10561] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aV0b11ajdn8P3hjgMYwD4wAAAUw"]
[Tue Jan 06 22:27:36.339665 2026] [:error] [pid 44905:tid 44978] [client 4.230.25.164:62309] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aV0b2Lu7ufwWVst9EAv-hQAAAIo"]
[Tue Jan 06 22:27:37.933701 2026] [:error] [pid 45959:tid 45973] [client 4.230.25.164:25376] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aV0b2Vajdn8P3hjgMYwD8AAAAUs"]
[Tue Jan 06 22:27:39.147530 2026] [:error] [pid 45959:tid 45969] [client 4.230.25.164:33054] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aV0b21ajdn8P3hjgMYwD8wAAAUc"]
[Tue Jan 06 22:27:40.491630 2026] [:error] [pid 45012:tid 45014] [client 4.230.25.164:10560] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/config.php"] [unique_id "aV0b3BaMAxCuju1d0uYdBQAAAMA"]
[Tue Jan 06 22:27:41.192407 2026] [:error] [pid 45959:tid 45979] [client 4.230.25.164:48046] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/config.php"] [unique_id "aV0b3Vajdn8P3hjgMYwD_AAAAVE"]
[Tue Jan 06 22:27:41.802586 2026] [:error] [pid 44904:tid 44950] [client 4.230.25.164:62272] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/config.php"] [unique_id "aV0b3TtieuI1BJEZcvdMAQAAAEk"]
[Tue Jan 06 22:27:42.766339 2026] [:error] [pid 45959:tid 45983] [client 4.230.25.164:62276] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/config.php"] [unique_id "aV0b3lajdn8P3hjgMYwECAAAAVU"]
[Tue Jan 06 22:27:43.463446 2026] [:error] [pid 45012:tid 45030] [client 4.230.25.164:32563] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV0b3xaMAxCuju1d0uYdBwAAANA"]
[Tue Jan 06 22:27:44.446727 2026] [:error] [pid 44904:tid 44958] [client 4.230.25.164:28681] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV0b4DtieuI1BJEZcvdMBwAAAFE"]
[Tue Jan 06 22:27:46.902326 2026] [:error] [pid 44903:tid 44919] [client 4.230.25.164:25618] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV0b4thHqjs38zbkQPAw8QAAAAw"]
[Tue Jan 06 22:27:49.788658 2026] [:error] [pid 45959:tid 45975] [client 4.230.25.164:31579] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/ioxi-o.php"] [unique_id "aV0b5Vajdn8P3hjgMYwEFQAAAU0"]
[Tue Jan 06 22:27:50.942148 2026] [:error] [pid 45959:tid 45985] [client 4.230.25.164:62286] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known.php"] [unique_id "aV0b5lajdn8P3hjgMYwEIQAAAVc"]
[Tue Jan 06 22:27:52.465042 2026] [:error] [pid 45959:tid 45970] [client 4.230.25.164:31583] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known.php"] [unique_id "aV0b6Fajdn8P3hjgMYwEJwAAAUg"]
[Tue Jan 06 22:27:52.908604 2026] [:error] [pid 44904:tid 44942] [client 4.230.25.164:25639] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known.php"] [unique_id "aV0b6DtieuI1BJEZcvdMFwAAAEE"]
[Tue Jan 06 22:27:53.527870 2026] [:error] [pid 35140:tid 35144] [client 4.230.25.164:31965] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known.php"] [unique_id "aV0b6XoQaIDFMbT-XMzpTgAAAQI"]
[Tue Jan 06 22:27:55.698878 2026] [:error] [pid 44903:tid 44930] [client 4.230.25.164:25617] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aV0b69hHqjs38zbkQPAxBgAAABY"]
[Tue Jan 06 22:27:56.457794 2026] [:error] [pid 35140:tid 35152] [client 4.230.25.164:25602] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aV0b7HoQaIDFMbT-XMzpVwAAAQo"]
[Tue Jan 06 22:27:58.130258 2026] [:error] [pid 44904:tid 44942] [client 4.230.25.164:30794] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aV0b7jtieuI1BJEZcvdMJQAAAEE"]
[Tue Jan 06 22:27:58.997116 2026] [:error] [pid 45959:tid 45970] [client 4.230.25.164:31925] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/02.php"] [unique_id "aV0b7lajdn8P3hjgMYwENQAAAUg"]
[Tue Jan 06 22:28:00.684308 2026] [:error] [pid 44904:tid 44961] [client 4.230.25.164:53570] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aV0b8DtieuI1BJEZcvdMKQAAAFQ"]
[Tue Jan 06 22:28:01.823474 2026] [:error] [pid 44903:tid 44922] [client 4.230.25.164:57403] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aV0b8dhHqjs38zbkQPAxDgAAAA8"]
[Tue Jan 06 22:28:02.907022 2026] [:error] [pid 45959:tid 45972] [client 4.230.25.164:54290] [client 4.230.25.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aV0b8lajdn8P3hjgMYwESAAAAUo"]
[Tue Jan 06 22:28:04.368077 2026] [:error] [pid 35140:tid 35156] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Tue Jan 06 22:28:04.513414 2026] [:error] [pid 35140:tid 35155] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/2024.php
[Tue Jan 06 22:28:04.651980 2026] [:error] [pid 35140:tid 35151] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Tue Jan 06 22:28:04.789439 2026] [:error] [pid 35140:tid 35158] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/Diff.php
[Tue Jan 06 22:28:04.952028 2026] [:error] [pid 35140:tid 35162] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/Engine.php
[Tue Jan 06 22:28:05.213324 2026] [:error] [pid 35140:tid 35149] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/ID3.php
[Tue Jan 06 22:28:05.351542 2026] [:error] [pid 35140:tid 35150] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/IXR.php
[Tue Jan 06 22:28:05.489880 2026] [:error] [pid 35140:tid 35161] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/SimplePie.php
[Tue Jan 06 22:28:05.628029 2026] [:error] [pid 35140:tid 35157] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/Text.php
[Tue Jan 06 22:28:05.780483 2026] [:error] [pid 35140:tid 35144] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/aahana.php
[Tue Jan 06 22:28:05.918366 2026] [:error] [pid 35140:tid 35143] [client 4.230.25.164:55538] File does not exist: /usr/local/apache/htdocs/suspended-page/ws35.php
[Tue Jan 06 23:04:49.529148 2026] [:error] [pid 45959:tid 45964] [client 43.153.54.14:45746] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV0kkVajdn8P3hjgMYwTXgAAAUI"]
[Tue Jan 06 23:19:37.422949 2026] [:error] [pid 44905:tid 44969] [client 4.247.167.136:4470] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oCbu7ufwWVst9EAsNfgAAAIE"]
[Tue Jan 06 23:19:41.095368 2026] [:error] [pid 45959:tid 45979] [client 4.247.167.136:4416] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oDVajdn8P3hjgMYwY0gAAAVE"]
[Tue Jan 06 23:19:43.493005 2026] [:error] [pid 44905:tid 44989] [client 4.247.167.136:4124] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oD7u7ufwWVst9EAsNtQAAAJU"]
[Tue Jan 06 23:19:48.298342 2026] [:error] [pid 45012:tid 45038] [client 4.247.167.136:4663] [client 4.247.167.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aV0oFBaMAxCuju1d0uYscgAAANg"]
[Tue Jan 06 23:26:28.476376 2026] [:error] [pid 45959:tid 45985] [client 34.27.54.172:61996] [client 34.27.54.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.27.54.172, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aV0ppFajdn8P3hjgMYwcGwAAAVc"]
[Tue Jan 06 23:26:28.480329 2026] [:error] [pid 45959:tid 45985] [client 34.27.54.172:61996] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 06 23:26:30.831950 2026] [:error] [pid 45959:tid 45985] [client 34.27.54.172:61996] [client 34.27.54.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV0pplajdn8P3hjgMYwcLgAAAVc"]
[Tue Jan 06 23:26:31.228058 2026] [:error] [pid 44905:tid 44976] [client 34.27.54.172:61634] [client 34.27.54.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV0pp7u7ufwWVst9EAsQLgAAAIg"]
[Tue Jan 06 23:26:31.631230 2026] [:error] [pid 44905:tid 44986] [client 34.27.54.172:61479] [client 34.27.54.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV0pp7u7ufwWVst9EAsQMAAAAJI"]
[Tue Jan 06 23:26:32.031414 2026] [:error] [pid 44905:tid 44980] [client 34.27.54.172:61818] [client 34.27.54.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV0pqLu7ufwWVst9EAsQMwAAAIw"]
[Tue Jan 06 23:26:32.425967 2026] [:error] [pid 45959:tid 45983] [client 34.27.54.172:51500] [client 34.27.54.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV0pqFajdn8P3hjgMYwcMQAAAVU"]
[Tue Jan 06 23:26:32.858314 2026] [:error] [pid 45959:tid 45967] [client 34.27.54.172:57339] [client 34.27.54.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV0pqFajdn8P3hjgMYwcMwAAAUU"]
[Tue Jan 06 23:26:33.256690 2026] [:error] [pid 45959:tid 45976] [client 34.27.54.172:61835] [client 34.27.54.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV0pqVajdn8P3hjgMYwcNQAAAU4"]
[Wed Jan 07 02:54:43.396604 2026] [:error] [pid 45012:tid 45032] [client 68.183.83.88:51124] [client 68.183.83.88] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 68.183.83.88, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aV1acxaMAxCuju1d0uZ-2QAAANI"], referer: https://www.google.com
[Wed Jan 07 02:54:43.400430 2026] [:error] [pid 45012:tid 45032] [client 68.183.83.88:51124] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Jan 07 07:44:59.420842 2026] [:error] [pid 30634:tid 30710] [client 43.138.68.113:33428] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV2ee4CIPBibObtmZts-3wAAANQ"]
[Wed Jan 07 09:09:51.543806 2026] [:error] [pid 58294:tid 58311] [client 43.166.128.187:47992] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV2yX1fzA7c0ITpf3nGKJAAAAI8"]
[Wed Jan 07 09:26:51.877219 2026] [:error] [pid 30632:tid 30660] [client 88.218.80.161:33441] [client 88.218.80.161] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aV22W-d3_LCpBJzo02d8vgAAABg"], referer: https://www.google.com
[Wed Jan 07 09:27:01.740303 2026] [:error] [pid 58294:tid 58316] [client 88.218.80.161:47175] [client 88.218.80.161] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aV22ZVfzA7c0ITpf3nGPiwAAAJQ"]
[Wed Jan 07 09:27:01.740733 2026] [:error] [pid 58294:tid 58316] [client 88.218.80.161:47175] [client 88.218.80.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.218.80.161, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aV22ZVfzA7c0ITpf3nGPiwAAAJQ"]
[Wed Jan 07 09:27:01.746962 2026] [:error] [pid 58294:tid 58316] [client 88.218.80.161:47175] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 07 09:27:04.539133 2026] [:error] [pid 30634:tid 30711] [client 88.218.80.161:28843] [client 88.218.80.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.218.80.161, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aV22aICIPBibObtmZtte7gAAANU"], referer: https://www.google.com
[Wed Jan 07 09:27:04.543115 2026] [:error] [pid 30634:tid 30711] [client 88.218.80.161:28843] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Jan 07 09:27:10.647218 2026] [:error] [pid 58330:tid 58339] [client 88.218.80.161:53813] [client 88.218.80.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.218.80.161, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aV22bg8kGngKGK7_wndFPAAAAQc"], referer: https://www.google.com
[Wed Jan 07 09:27:10.649976 2026] [:error] [pid 58330:tid 58339] [client 88.218.80.161:53813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Jan 07 10:51:03.570398 2026] [:error] [pid 30633:tid 30678] [client 195.178.110.161:39920] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aV3KF_ZiVWlF7303nMg12AAAAE8"]
[Wed Jan 07 12:08:03.915679 2026] [:error] [pid 58330:tid 58348] [client 170.106.143.6:55598] [client 170.106.143.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV3cIw8kGngKGK7_wneDuQAAARA"]
[Wed Jan 07 12:41:48.543585 2026] [:error] [pid 58294:tid 58298] [client 195.178.110.161:37274] [client 195.178.110.161] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aV3kDFfzA7c0ITpf3nHH2AAAAII"]
[Wed Jan 07 16:21:49.641743 2026] [:error] [pid 58294:tid 58320] [client 43.173.1.69:55958] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV4XnVfzA7c0ITpf3nH5JgAAAJg"]
[Wed Jan 07 18:42:30.951786 2026] [:error] [pid 30632:tid 30646] [client 43.166.136.202:47874] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV44lud3_LCpBJzo02fqHgAAAAo"]
[Wed Jan 07 19:14:11.798451 2026] [:error] [pid 30634:tid 30701] [client 35.223.233.25:53496] [client 35.223.233.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.223.233.25, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aV5AA4CIPBibObtmZtv3jAAAAMs"]
[Wed Jan 07 19:14:11.802255 2026] [:error] [pid 30634:tid 30701] [client 35.223.233.25:53496] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 07 19:14:14.332516 2026] [:error] [pid 30634:tid 30714] [client 35.223.233.25:53496] [client 35.223.233.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV5ABoCIPBibObtmZtv3nAAAANg"]
[Wed Jan 07 19:14:14.790048 2026] [:error] [pid 58330:tid 58348] [client 35.223.233.25:64564] [client 35.223.233.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV5ABg8kGngKGK7_wnfteQAAARA"]
[Wed Jan 07 19:14:15.209826 2026] [:error] [pid 58330:tid 58340] [client 35.223.233.25:61620] [client 35.223.233.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV5ABw8kGngKGK7_wnftewAAAQg"]
[Wed Jan 07 19:14:15.698762 2026] [:error] [pid 30634:tid 30701] [client 35.223.233.25:54804] [client 35.223.233.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV5AB4CIPBibObtmZtv3ngAAAMs"]
[Wed Jan 07 19:14:16.117593 2026] [:error] [pid 30634:tid 30694] [client 35.223.233.25:56212] [client 35.223.233.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV5ACICIPBibObtmZtv3oAAAAMQ"]
[Wed Jan 07 19:14:16.638201 2026] [:error] [pid 30633:tid 30678] [client 35.223.233.25:57550] [client 35.223.233.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV5ACPZiVWlF7303nMic1gAAAE8"]
[Wed Jan 07 19:14:17.034193 2026] [:error] [pid 51128:tid 51147] [client 35.223.233.25:59788] [client 35.223.233.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV5ACUGjtE8U88mrwueUogAAAZE"]
[Wed Jan 07 20:25:18.039612 2026] [:error] [pid 51128:tid 51150] [client 180.110.203.108:52039] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV5QrkGjtE8U88mrwuehugAAAZQ"]
[Wed Jan 07 21:41:55.608177 2026] [:error] [pid 30633:tid 30684] [client 4.189.122.79:16535] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Jan 07 21:41:55.725061 2026] [:error] [pid 30633:tid 30666] [client 4.189.122.79:16535] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed Jan 07 21:41:55.845306 2026] [:error] [pid 30633:tid 30665] [client 4.189.122.79:16535] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Jan 07 21:41:55.958474 2026] [:error] [pid 30633:tid 30678] [client 4.189.122.79:16535] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aV5io_ZiVWlF7303nMi7oQAAAE8"]
[Wed Jan 07 21:41:56.902310 2026] [:error] [pid 58294:tid 58319] [client 4.189.122.79:25304] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aV5ipFfzA7c0ITpf3nExBgAAAJc"]
[Wed Jan 07 21:41:58.780686 2026] [:error] [pid 50905:tid 50927] [client 4.189.122.79:25332] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aV5ipmpNgk5-gt30I7aN7gAAAlQ"]
[Wed Jan 07 21:41:59.305670 2026] [:error] [pid 51128:tid 51146] [client 4.189.122.79:30925] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aV5ip0GjtE8U88mrwuevgAAAAZA"]
[Wed Jan 07 21:41:59.718820 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:19600] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV5ip2pNgk5-gt30I7aN7wAAAlA"]
[Wed Jan 07 21:42:00.307495 2026] [:error] [pid 50870:tid 50887] [client 4.189.122.79:5414] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV5iqBlePfspAt1Bzot8LwAAAg8"]
[Wed Jan 07 21:42:00.794405 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:28027] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV5iqGpNgk5-gt30I7aN8AAAAkI"]
[Wed Jan 07 21:42:01.301885 2026] [:error] [pid 58330:tid 58340] [client 4.189.122.79:27476] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/templates/beez/index.php"] [unique_id "aV5iqQ8kGngKGK7_wncKwgAAAQg"]
[Wed Jan 07 21:42:01.821557 2026] [:error] [pid 30632:tid 30641] [client 4.189.122.79:5722] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5iqed3_LCpBJzo02caRAAAAAU"]
[Wed Jan 07 21:42:02.564205 2026] [:error] [pid 30633:tid 30672] [client 4.189.122.79:27995] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5iqvZiVWlF7303nMi7owAAAEk"]
[Wed Jan 07 21:42:03.051401 2026] [:error] [pid 30633:tid 30663] [client 4.189.122.79:16522] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5iq_ZiVWlF7303nMi7pAAAAEA"]
[Wed Jan 07 21:42:03.477411 2026] [:error] [pid 30633:tid 30685] [client 4.189.122.79:19637] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5iq_ZiVWlF7303nMi7pQAAAFY"]
[Wed Jan 07 21:42:03.968610 2026] [:error] [pid 30632:tid 30650] [client 4.189.122.79:28015] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/upload.php"] [unique_id "aV5iq-d3_LCpBJzo02caRwAAAA4"]
[Wed Jan 07 21:42:04.539195 2026] [:error] [pid 30633:tid 30682] [client 4.189.122.79:28907] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/upload.php"] [unique_id "aV5irPZiVWlF7303nMi7pgAAAFM"]
[Wed Jan 07 21:42:04.913561 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:17327] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/upload.php"] [unique_id "aV5irGpNgk5-gt30I7aN8wAAAk4"]
[Wed Jan 07 21:42:05.377953 2026] [:error] [pid 50870:tid 50891] [client 4.189.122.79:17323] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/upload.php"] [unique_id "aV5irRlePfspAt1Bzot8NwAAAhM"]
[Wed Jan 07 21:42:05.707220 2026] [:error] [pid 30633:tid 30681] [client 4.189.122.79:5430] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "aV5irfZiVWlF7303nMi7qAAAAFI"]
[Wed Jan 07 21:42:06.169835 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:19596] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "aV5irmpNgk5-gt30I7aN9QAAAlg"]
[Wed Jan 07 21:42:06.538778 2026] [:error] [pid 50905:tid 50912] [client 4.189.122.79:25305] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "aV5irmpNgk5-gt30I7aN9gAAAkU"]
[Wed Jan 07 21:42:06.900698 2026] [:error] [pid 30633:tid 30677] [client 4.189.122.79:16534] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "aV5irvZiVWlF7303nMi7qQAAAE4"]
[Wed Jan 07 21:42:07.239980 2026] [:error] [pid 50905:tid 50910] [client 4.189.122.79:19630] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aV5ir2pNgk5-gt30I7aN-AAAAkM"]
[Wed Jan 07 21:42:07.769330 2026] [:error] [pid 50905:tid 50913] [client 4.189.122.79:25308] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aV5ir2pNgk5-gt30I7aN-QAAAkY"]
[Wed Jan 07 21:42:08.602096 2026] [:error] [pid 50905:tid 50914] [client 4.189.122.79:5420] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aV5isGpNgk5-gt30I7aN-wAAAkc"]
[Wed Jan 07 21:42:09.089105 2026] [:error] [pid 50838:tid 50842] [client 4.189.122.79:19646] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aV5isbSweZ27JIN4H8vUlgAAAcI"]
[Wed Jan 07 21:42:09.485904 2026] [:error] [pid 30633:tid 30664] [client 4.189.122.79:30950] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aV5isfZiVWlF7303nMi7qwAAAEE"]
[Wed Jan 07 21:42:10.159513 2026] [:error] [pid 50838:tid 50847] [client 4.189.122.79:28247] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aV5isrSweZ27JIN4H8vUmAAAAcc"]
[Wed Jan 07 21:42:10.673751 2026] [:error] [pid 58294:tid 58305] [client 4.189.122.79:28242] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aV5islfzA7c0ITpf3nExHAAAAIk"]
[Wed Jan 07 21:42:13.055905 2026] [:error] [pid 50905:tid 50922] [client 4.189.122.79:27495] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aV5itWpNgk5-gt30I7aN_wAAAk8"]
[Wed Jan 07 21:42:13.937182 2026] [:error] [pid 58294:tid 58313] [client 4.189.122.79:28249] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inc.php"] [unique_id "aV5itVfzA7c0ITpf3nExHwAAAJE"]
[Wed Jan 07 21:42:14.910298 2026] [:error] [pid 50936:tid 50960] [client 4.189.122.79:19592] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inc.php"] [unique_id "aV5itrDlg80QUdd5qc4XKgAAApY"]
[Wed Jan 07 21:42:16.208489 2026] [:error] [pid 30633:tid 30680] [client 4.189.122.79:20377] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inc.php"] [unique_id "aV5iuPZiVWlF7303nMi7rwAAAFE"]
[Wed Jan 07 21:42:16.850109 2026] [:error] [pid 30633:tid 30684] [client 4.189.122.79:16530] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inc.php"] [unique_id "aV5iuPZiVWlF7303nMi7sQAAAFU"]
[Wed Jan 07 21:42:17.621976 2026] [:error] [pid 58294:tid 58300] [client 4.189.122.79:20366] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/item.php"] [unique_id "aV5iuVfzA7c0ITpf3nExIgAAAIQ"]
[Wed Jan 07 21:42:18.327322 2026] [:error] [pid 30632:tid 30653] [client 4.189.122.79:12887] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/item.php"] [unique_id "aV5iuud3_LCpBJzo02caSgAAABE"]
[Wed Jan 07 21:42:19.103621 2026] [:error] [pid 50870:tid 50883] [client 4.189.122.79:13749] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/item.php"] [unique_id "aV5iuxlePfspAt1Bzot8OAAAAgs"]
[Wed Jan 07 21:42:19.455039 2026] [:error] [pid 58330:tid 58356] [client 4.189.122.79:5958] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/item.php"] [unique_id "aV5iuw8kGngKGK7_wncK0AAAARg"]
[Wed Jan 07 21:42:20.041206 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:12898] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV5ivGpNgk5-gt30I7aOCAAAAkA"]
[Wed Jan 07 21:42:20.459404 2026] [:error] [pid 51128:tid 51146] [client 4.189.122.79:12870] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV5ivEGjtE8U88mrwuevkQAAAZA"]
[Wed Jan 07 21:42:20.952890 2026] [:error] [pid 58330:tid 58342] [client 4.189.122.79:15309] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV5ivA8kGngKGK7_wncK0QAAAQo"]
[Wed Jan 07 21:42:22.101889 2026] [:error] [pid 30634:tid 30710] [client 4.189.122.79:5156] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aV5ivoCIPBibObtmZtsPjQAAANQ"]
[Wed Jan 07 21:42:22.719478 2026] [:error] [pid 58330:tid 58333] [client 4.189.122.79:31603] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5ivg8kGngKGK7_wncK0gAAAQE"]
[Wed Jan 07 21:42:23.506379 2026] [:error] [pid 50936:tid 50948] [client 4.189.122.79:5961] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5iv7Dlg80QUdd5qc4XLgAAAoo"]
[Wed Jan 07 21:42:24.032932 2026] [:error] [pid 58330:tid 58341] [client 4.189.122.79:31573] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5iwA8kGngKGK7_wncK1AAAAQk"]
[Wed Jan 07 21:42:24.506184 2026] [:error] [pid 30634:tid 30714] [client 4.189.122.79:5991] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5iwICIPBibObtmZtsPjgAAANg"]
[Wed Jan 07 21:42:26.308229 2026] [:error] [pid 50936:tid 50941] [client 4.189.122.79:5566] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "aV5iwrDlg80QUdd5qc4XMAAAAoM"]
[Wed Jan 07 21:42:26.644384 2026] [:error] [pid 58294:tid 58316] [client 4.189.122.79:34968] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "aV5iwlfzA7c0ITpf3nExJQAAAJQ"]
[Wed Jan 07 21:42:26.957683 2026] [:error] [pid 50870:tid 50874] [client 4.189.122.79:5120] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "aV5iwhlePfspAt1Bzot8OQAAAgI"]
[Wed Jan 07 21:42:28.062853 2026] [:error] [pid 58294:tid 58309] [client 4.189.122.79:15842] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "aV5ixFfzA7c0ITpf3nExJgAAAI0"]
[Wed Jan 07 21:42:28.913817 2026] [:error] [pid 50936:tid 50954] [client 4.189.122.79:15397] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5ixLDlg80QUdd5qc4XMQAAApA"]
[Wed Jan 07 21:42:29.582244 2026] [:error] [pid 50870:tid 50881] [client 4.189.122.79:15379] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5ixRlePfspAt1Bzot8OwAAAgk"]
[Wed Jan 07 21:42:30.261477 2026] [:error] [pid 51128:tid 51132] [client 4.189.122.79:29909] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5ixkGjtE8U88mrwuevlQAAAYI"]
[Wed Jan 07 21:42:30.851832 2026] [:error] [pid 51128:tid 51138] [client 4.189.122.79:5681] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5ixkGjtE8U88mrwuevlwAAAYg"]
[Wed Jan 07 21:42:31.541121 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:28398] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5ix1fzA7c0ITpf3nExKAAAAJA"]
[Wed Jan 07 21:42:32.191592 2026] [:error] [pid 58294:tid 58306] [client 4.189.122.79:29966] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5iyFfzA7c0ITpf3nExKgAAAIo"]
[Wed Jan 07 21:42:32.724906 2026] [:error] [pid 50905:tid 50926] [client 4.189.122.79:31445] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5iyGpNgk5-gt30I7aOCwAAAlM"]
[Wed Jan 07 21:42:33.319244 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:29634] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5iyWpNgk5-gt30I7aODAAAAk4"]
[Wed Jan 07 21:42:33.793305 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:6043] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp/wso.php"] [unique_id "aV5iyWpNgk5-gt30I7aODgAAAlg"]
[Wed Jan 07 21:42:34.335458 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:29695] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp/wso.php"] [unique_id "aV5iympNgk5-gt30I7aODwAAAkE"]
[Wed Jan 07 21:42:34.794456 2026] [:error] [pid 30633:tid 30677] [client 4.189.122.79:28384] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp/wso.php"] [unique_id "aV5iyvZiVWlF7303nMi7twAAAE4"]
[Wed Jan 07 21:42:35.379601 2026] [:error] [pid 50936:tid 50938] [client 4.189.122.79:29996] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp/wso.php"] [unique_id "aV5iy7Dlg80QUdd5qc4XMgAAAoA"]
[Wed Jan 07 21:42:36.062347 2026] [:error] [pid 51128:tid 51135] [client 4.189.122.79:29667] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aV5izEGjtE8U88mrwuevnAAAAYU"]
[Wed Jan 07 21:42:37.217900 2026] [:error] [pid 51128:tid 51150] [client 4.189.122.79:34958] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aV5izUGjtE8U88mrwuevngAAAZQ"]
[Wed Jan 07 21:42:37.460912 2026] [:error] [pid 30632:tid 30641] [client 4.189.122.79:29648] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aV5ized3_LCpBJzo02caUAAAAAU"]
[Wed Jan 07 21:42:38.074385 2026] [:error] [pid 50870:tid 50888] [client 4.189.122.79:29938] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aV5izhlePfspAt1Bzot8PgAAAhA"]
[Wed Jan 07 21:42:38.568736 2026] [:error] [pid 30632:tid 30636] [client 4.189.122.79:5123] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f.php"] [unique_id "aV5izud3_LCpBJzo02caUQAAAAA"]
[Wed Jan 07 21:42:39.645022 2026] [:error] [pid 30632:tid 30659] [client 4.189.122.79:29936] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f.php"] [unique_id "aV5iz-d3_LCpBJzo02caUwAAABc"]
[Wed Jan 07 21:42:40.539503 2026] [:error] [pid 50936:tid 50947] [client 4.189.122.79:6075] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f.php"] [unique_id "aV5i0LDlg80QUdd5qc4XMwAAAok"]
[Wed Jan 07 21:42:40.877984 2026] [:error] [pid 50870:tid 50893] [client 4.189.122.79:31450] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f.php"] [unique_id "aV5i0BlePfspAt1Bzot8QgAAAhU"]
[Wed Jan 07 21:42:41.240504 2026] [:error] [pid 30632:tid 30650] [client 4.189.122.79:34960] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file/function.php"] [unique_id "aV5i0ed3_LCpBJzo02caVAAAAA4"]
[Wed Jan 07 21:42:41.764419 2026] [:error] [pid 50936:tid 50962] [client 4.189.122.79:29950] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file/function.php"] [unique_id "aV5i0bDlg80QUdd5qc4XNAAAApg"]
[Wed Jan 07 21:42:42.167372 2026] [:error] [pid 58294:tid 58299] [client 4.189.122.79:29670] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file/function.php"] [unique_id "aV5i0lfzA7c0ITpf3nExLwAAAIM"]
[Wed Jan 07 21:42:43.194401 2026] [:error] [pid 50936:tid 50944] [client 4.189.122.79:5676] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file/function.php"] [unique_id "aV5i07Dlg80QUdd5qc4XNQAAAoY"]
[Wed Jan 07 21:42:43.618156 2026] [:error] [pid 58294:tid 58296] [client 4.189.122.79:29979] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/form3.php"] [unique_id "aV5i01fzA7c0ITpf3nExMAAAAIA"]
[Wed Jan 07 21:42:44.284619 2026] [:error] [pid 50905:tid 50924] [client 4.189.122.79:15855] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/form3.php"] [unique_id "aV5i1GpNgk5-gt30I7aOEgAAAlE"]
[Wed Jan 07 21:42:44.916936 2026] [:error] [pid 30633:tid 30668] [client 4.189.122.79:5680] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/form3.php"] [unique_id "aV5i1PZiVWlF7303nMi7uQAAAEU"]
[Wed Jan 07 21:42:45.781974 2026] [:error] [pid 30632:tid 30652] [client 4.189.122.79:29959] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/form3.php"] [unique_id "aV5i1ed3_LCpBJzo02caWQAAABA"]
[Wed Jan 07 21:42:46.116819 2026] [:error] [pid 58330:tid 58349] [client 4.189.122.79:29908] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aV5i1g8kGngKGK7_wncK3AAAARE"]
[Wed Jan 07 21:42:46.604566 2026] [:error] [pid 30633:tid 30664] [client 4.189.122.79:5137] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aV5i1vZiVWlF7303nMi7ugAAAEE"]
[Wed Jan 07 21:42:47.334805 2026] [:error] [pid 50905:tid 50925] [client 4.189.122.79:31482] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aV5i12pNgk5-gt30I7aOFgAAAlI"]
[Wed Jan 07 21:42:48.005749 2026] [:error] [pid 58294:tid 58300] [client 4.189.122.79:28360] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aV5i2FfzA7c0ITpf3nExMgAAAIQ"]
[Wed Jan 07 21:42:49.154587 2026] [:error] [pid 30633:tid 30679] [client 4.189.122.79:28376] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i2fZiVWlF7303nMi7vAAAAFA"]
[Wed Jan 07 21:42:49.633662 2026] [:error] [pid 58294:tid 58310] [client 4.189.122.79:5583] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i2VfzA7c0ITpf3nExNAAAAI4"]
[Wed Jan 07 21:42:50.082826 2026] [:error] [pid 30633:tid 30669] [client 4.189.122.79:29929] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i2vZiVWlF7303nMi7vQAAAEY"]
[Wed Jan 07 21:42:50.429074 2026] [:error] [pid 50870:tid 50895] [client 4.189.122.79:5687] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i2hlePfspAt1Bzot8SAAAAhc"]
[Wed Jan 07 21:42:51.176711 2026] [:error] [pid 51128:tid 51138] [client 4.189.122.79:5683] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV5i20GjtE8U88mrwuevqAAAAYg"]
[Wed Jan 07 21:42:52.135921 2026] [:error] [pid 30633:tid 30680] [client 4.189.122.79:31425] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV5i3PZiVWlF7303nMi7vwAAAFE"]
[Wed Jan 07 21:42:52.770511 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:31455] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV5i3FfzA7c0ITpf3nExNQAAAJg"]
[Wed Jan 07 21:42:53.372733 2026] [:error] [pid 58294:tid 58316] [client 4.189.122.79:30006] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/wp-configs.php"] [unique_id "aV5i3VfzA7c0ITpf3nExNgAAAJQ"]
[Wed Jan 07 21:42:53.726443 2026] [:error] [pid 50870:tid 50891] [client 4.189.122.79:5815] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goods.php"] [unique_id "aV5i3RlePfspAt1Bzot8SgAAAhM"]
[Wed Jan 07 21:42:54.155463 2026] [:error] [pid 58294:tid 58309] [client 4.189.122.79:5691] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goods.php"] [unique_id "aV5i3lfzA7c0ITpf3nExNwAAAI0"]
[Wed Jan 07 21:42:54.587117 2026] [:error] [pid 58294:tid 58302] [client 4.189.122.79:28365] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goods.php"] [unique_id "aV5i3lfzA7c0ITpf3nExOAAAAIY"]
[Wed Jan 07 21:42:55.236823 2026] [:error] [pid 50936:tid 50958] [client 4.189.122.79:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Jan 07 21:42:55.355477 2026] [:error] [pid 50936:tid 50952] [client 4.189.122.79:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/hi.php
[Wed Jan 07 21:42:55.472485 2026] [:error] [pid 50936:tid 50957] [client 4.189.122.79:5816] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Wed Jan 07 21:42:55.585964 2026] [:error] [pid 50936:tid 50949] [client 4.189.122.79:5816] [client 4.189.122.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/id3/admin.php"] [unique_id "aV5i37Dlg80QUdd5qc4XQQAAAos"]
[Wed Jan 07 21:42:56.267148 2026] [:error] [pid 50905:tid 50916] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/420.php
[Wed Jan 07 21:42:56.384953 2026] [:error] [pid 50905:tid 50926] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/xenium4.php
[Wed Jan 07 21:42:57.763363 2026] [:error] [pid 50905:tid 50926] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/sadd5.php
[Wed Jan 07 21:42:57.964940 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/file58.php
[Wed Jan 07 21:42:58.081800 2026] [:error] [pid 50905:tid 50930] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/0w1d.php
[Wed Jan 07 21:42:58.210075 2026] [:error] [pid 50905:tid 50910] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Wed Jan 07 21:42:58.335882 2026] [:error] [pid 50905:tid 50913] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Wed Jan 07 21:42:58.456869 2026] [:error] [pid 50905:tid 50924] [client 4.189.122.79:29958] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Wed Jan 07 21:42:58.573239 2026] [:error] [pid 50905:tid 50914] [client 4.189.122.79:29958] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aV5i4mpNgk5-gt30I7aOJwAAAkc"]
[Wed Jan 07 21:42:59.300733 2026] [:error] [pid 51128:tid 51148] [client 4.189.122.79:16250] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aV5i40GjtE8U88mrwuevvAAAAZI"]
[Wed Jan 07 21:43:00.277193 2026] [:error] [pid 30633:tid 30671] [client 4.189.122.79:31465] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aV5i5PZiVWlF7303nMi70QAAAEg"]
[Wed Jan 07 21:43:00.825976 2026] [:error] [pid 50936:tid 50946] [client 4.189.122.79:5617] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aV5i5LDlg80QUdd5qc4XTQAAAog"]
[Wed Jan 07 21:43:01.265612 2026] [:error] [pid 30632:tid 30637] [client 4.189.122.79:5808] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f8.php"] [unique_id "aV5i5ed3_LCpBJzo02caWwAAAAE"]
[Wed Jan 07 21:43:02.055965 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:30000] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f8.php"] [unique_id "aV5i5mpNgk5-gt30I7aOKQAAAlA"]
[Wed Jan 07 21:43:02.716784 2026] [:error] [pid 30632:tid 30660] [client 4.189.122.79:16212] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f8.php"] [unique_id "aV5i5ud3_LCpBJzo02caXQAAABg"]
[Wed Jan 07 21:43:03.528435 2026] [:error] [pid 58294:tid 58298] [client 4.189.122.79:5764] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f8.php"] [unique_id "aV5i51fzA7c0ITpf3nExOgAAAII"]
[Wed Jan 07 21:43:03.982835 2026] [:error] [pid 30634:tid 30704] [client 4.189.122.79:29949] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower2.php"] [unique_id "aV5i54CIPBibObtmZtsPlwAAAM4"]
[Wed Jan 07 21:43:04.549977 2026] [:error] [pid 58294:tid 58305] [client 4.189.122.79:29983] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower2.php"] [unique_id "aV5i6FfzA7c0ITpf3nExPAAAAIk"]
[Wed Jan 07 21:43:05.177792 2026] [:error] [pid 50870:tid 50875] [client 4.189.122.79:31104] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower2.php"] [unique_id "aV5i6RlePfspAt1Bzot8TgAAAgM"]
[Wed Jan 07 21:43:06.076470 2026] [:error] [pid 30632:tid 30636] [client 4.189.122.79:16138] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower2.php"] [unique_id "aV5i6ud3_LCpBJzo02caXwAAAAA"]
[Wed Jan 07 21:43:06.890243 2026] [:error] [pid 51128:tid 51139] [client 4.189.122.79:5600] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/000.php"] [unique_id "aV5i6kGjtE8U88mrwuevxAAAAYk"]
[Wed Jan 07 21:43:07.154024 2026] [:error] [pid 30634:tid 30710] [client 4.189.122.79:16191] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/000.php"] [unique_id "aV5i64CIPBibObtmZtsPmwAAANQ"]
[Wed Jan 07 21:43:07.705757 2026] [:error] [pid 50936:tid 50958] [client 4.189.122.79:16216] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/000.php"] [unique_id "aV5i67Dlg80QUdd5qc4XUQAAApQ"]
[Wed Jan 07 21:43:08.617245 2026] [:error] [pid 50838:tid 50862] [client 4.189.122.79:30378] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/000.php"] [unique_id "aV5i7LSweZ27JIN4H8vUqgAAAdY"]
[Wed Jan 07 21:43:09.290302 2026] [:error] [pid 30634:tid 30690] [client 4.189.122.79:5775] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aV5i7YCIPBibObtmZtsPnQAAAMA"]
[Wed Jan 07 21:43:09.834317 2026] [:error] [pid 50936:tid 50956] [client 4.189.122.79:16226] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aV5i7bDlg80QUdd5qc4XUwAAApI"]
[Wed Jan 07 21:43:10.337542 2026] [:error] [pid 51128:tid 51140] [client 4.189.122.79:31143] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aV5i7kGjtE8U88mrwuevxQAAAYo"]
[Wed Jan 07 21:43:10.770240 2026] [:error] [pid 30633:tid 30665] [client 4.189.122.79:5577] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aV5i7vZiVWlF7303nMi71QAAAEI"]
[Wed Jan 07 21:43:11.628087 2026] [:error] [pid 30632:tid 30648] [client 4.189.122.79:31780] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aV5i7-d3_LCpBJzo02caYQAAAAw"]
[Wed Jan 07 21:43:12.094254 2026] [:error] [pid 50870:tid 50885] [client 4.189.122.79:31155] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aV5i8BlePfspAt1Bzot8UwAAAg0"]
[Wed Jan 07 21:43:12.626762 2026] [:error] [pid 30633:tid 30682] [client 4.189.122.79:31747] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aV5i8PZiVWlF7303nMi72AAAAFM"]
[Wed Jan 07 21:43:13.415391 2026] [:error] [pid 30633:tid 30674] [client 4.189.122.79:26577] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aV5i8fZiVWlF7303nMi72QAAAEs"]
[Wed Jan 07 21:43:14.100092 2026] [:error] [pid 30633:tid 30686] [client 4.189.122.79:5494] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ss1.php"] [unique_id "aV5i8vZiVWlF7303nMi72gAAAFc"]
[Wed Jan 07 21:43:14.664824 2026] [:error] [pid 50838:tid 50850] [client 4.189.122.79:16159] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ss1.php"] [unique_id "aV5i8rSweZ27JIN4H8vUrgAAAco"]
[Wed Jan 07 21:43:15.051585 2026] [:error] [pid 50870:tid 50890] [client 4.189.122.79:5300] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ss1.php"] [unique_id "aV5i8xlePfspAt1Bzot8WAAAAhI"]
[Wed Jan 07 21:43:15.777681 2026] [:error] [pid 58330:tid 58351] [client 4.189.122.79:20987] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ss1.php"] [unique_id "aV5i8w8kGngKGK7_wncK9AAAARM"]
[Wed Jan 07 21:43:16.332667 2026] [:error] [pid 30633:tid 30663] [client 4.189.122.79:31776] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aV5i9PZiVWlF7303nMi72wAAAEA"]
[Wed Jan 07 21:43:16.814015 2026] [:error] [pid 30633:tid 30683] [client 4.189.122.79:19203] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aV5i9PZiVWlF7303nMi73AAAAFQ"]
[Wed Jan 07 21:43:17.389426 2026] [:error] [pid 51128:tid 51149] [client 4.189.122.79:19228] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aV5i9UGjtE8U88mrwuevyAAAAZM"]
[Wed Jan 07 21:43:18.024800 2026] [:error] [pid 58294:tid 58303] [client 4.189.122.79:5475] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aV5i9lfzA7c0ITpf3nExPQAAAIc"]
[Wed Jan 07 21:43:18.400644 2026] [:error] [pid 50936:tid 50954] [client 4.189.122.79:14934] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aV5i9rDlg80QUdd5qc4XVwAAApA"]
[Wed Jan 07 21:43:18.936783 2026] [:error] [pid 50936:tid 50938] [client 4.189.122.79:5449] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aV5i9rDlg80QUdd5qc4XWAAAAoA"]
[Wed Jan 07 21:43:19.356505 2026] [:error] [pid 58294:tid 58315] [client 4.189.122.79:28977] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aV5i91fzA7c0ITpf3nExPgAAAJM"]
[Wed Jan 07 21:43:20.069210 2026] [:error] [pid 50936:tid 50951] [client 4.189.122.79:26600] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aV5i-LDlg80QUdd5qc4XWwAAAo0"]
[Wed Jan 07 21:43:20.533038 2026] [:error] [pid 50838:tid 50842] [client 4.189.122.79:5301] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i-LSweZ27JIN4H8vUsQAAAcI"]
[Wed Jan 07 21:43:21.209956 2026] [:error] [pid 50905:tid 50930] [client 4.189.122.79:14927] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i-WpNgk5-gt30I7aOMAAAAlc"]
[Wed Jan 07 21:43:21.609468 2026] [:error] [pid 58294:tid 58313] [client 4.189.122.79:27017] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i-VfzA7c0ITpf3nExPwAAAJE"]
[Wed Jan 07 21:43:22.181245 2026] [:error] [pid 51128:tid 51147] [client 4.189.122.79:20722] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aV5i-kGjtE8U88mrwuevyQAAAZE"]
[Wed Jan 07 21:43:22.689267 2026] [:error] [pid 51128:tid 51151] [client 4.189.122.79:12479] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aV5i-kGjtE8U88mrwuevygAAAZU"]
[Wed Jan 07 21:43:23.152843 2026] [:error] [pid 30633:tid 30670] [client 4.189.122.79:18469] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aV5i-_ZiVWlF7303nMi74QAAAEc"]
[Wed Jan 07 21:43:23.626088 2026] [:error] [pid 51128:tid 51148] [client 4.189.122.79:35679] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aV5i-0GjtE8U88mrwuevywAAAZI"]
[Wed Jan 07 21:43:24.050739 2026] [:error] [pid 51128:tid 51138] [client 4.189.122.79:20532] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aV5i_EGjtE8U88mrwuevzAAAAYg"]
[Wed Jan 07 21:43:24.429986 2026] [:error] [pid 50870:tid 50875] [client 4.189.122.79:31006] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aV5i_BlePfspAt1Bzot8WgAAAgM"]
[Wed Jan 07 21:43:24.812222 2026] [:error] [pid 30633:tid 30675] [client 4.189.122.79:12477] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aV5i_PZiVWlF7303nMi74gAAAEw"]
[Wed Jan 07 21:43:25.314848 2026] [:error] [pid 30633:tid 30667] [client 4.189.122.79:28978] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aV5i_fZiVWlF7303nMi75AAAAEQ"]
[Wed Jan 07 21:43:25.626922 2026] [:error] [pid 50905:tid 50913] [client 4.189.122.79:30993] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aV5i_WpNgk5-gt30I7aOMgAAAkY"]
[Wed Jan 07 21:43:26.057386 2026] [:error] [pid 58294:tid 58319] [client 4.189.122.79:20484] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aV5i_lfzA7c0ITpf3nExQQAAAJc"]
[Wed Jan 07 21:43:26.529735 2026] [:error] [pid 50838:tid 50847] [client 4.189.122.79:18435] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aV5i_rSweZ27JIN4H8vUsgAAAcc"]
[Wed Jan 07 21:43:27.100267 2026] [:error] [pid 50838:tid 50864] [client 4.189.122.79:35698] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aV5i_7SweZ27JIN4H8vUswAAAdg"]
[Wed Jan 07 21:43:27.595628 2026] [:error] [pid 30634:tid 30707] [client 4.189.122.79:27041] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aV5i_4CIPBibObtmZtsPogAAANE"]
[Wed Jan 07 21:43:28.090631 2026] [:error] [pid 50905:tid 50924] [client 4.189.122.79:18442] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aV5jAGpNgk5-gt30I7aOMwAAAlE"]
[Wed Jan 07 21:43:28.761796 2026] [:error] [pid 30632:tid 30642] [client 4.189.122.79:34191] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aV5jAOd3_LCpBJzo02caZQAAAAY"]
[Wed Jan 07 21:43:29.573457 2026] [:error] [pid 50936:tid 50961] [client 4.189.122.79:27054] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aV5jAbDlg80QUdd5qc4XXgAAApc"]
[Wed Jan 07 21:43:30.069637 2026] [:error] [pid 30634:tid 30692] [client 4.189.122.79:35664] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aV5jAoCIPBibObtmZtsPpAAAAMI"]
[Wed Jan 07 21:43:30.597244 2026] [:error] [pid 58330:tid 58356] [client 4.189.122.79:14227] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5jAg8kGngKGK7_wncK9gAAARg"]
[Wed Jan 07 21:43:31.185493 2026] [:error] [pid 58330:tid 58342] [client 4.189.122.79:30992] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5jAw8kGngKGK7_wncK9wAAAQo"]
[Wed Jan 07 21:43:31.660007 2026] [:error] [pid 30632:tid 30652] [client 4.189.122.79:26187] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5jA-d3_LCpBJzo02caZgAAABA"]
[Wed Jan 07 21:43:31.977865 2026] [:error] [pid 50936:tid 50960] [client 4.189.122.79:26214] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aV5jA7Dlg80QUdd5qc4XYAAAApY"]
[Wed Jan 07 21:43:32.388286 2026] [:error] [pid 51128:tid 51154] [client 4.189.122.79:35687] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aV5jBEGjtE8U88mrwuev0AAAAZg"]
[Wed Jan 07 21:43:33.081541 2026] [:error] [pid 50838:tid 50848] [client 4.189.122.79:12473] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aV5jBbSweZ27JIN4H8vUtQAAAcg"]
[Wed Jan 07 21:43:33.694428 2026] [:error] [pid 30632:tid 30651] [client 4.189.122.79:35691] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aV5jBed3_LCpBJzo02caZwAAAA8"]
[Wed Jan 07 21:43:33.994833 2026] [:error] [pid 50838:tid 50858] [client 4.189.122.79:12475] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aV5jBbSweZ27JIN4H8vUtgAAAdI"]
[Wed Jan 07 21:43:34.274342 2026] [:error] [pid 30634:tid 30691] [client 4.189.122.79:31314] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5jBoCIPBibObtmZtsPpgAAAME"]
[Wed Jan 07 21:43:34.849635 2026] [:error] [pid 30632:tid 30653] [client 4.189.122.79:35703] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5jBud3_LCpBJzo02caaAAAABE"]
[Wed Jan 07 21:43:35.316683 2026] [:error] [pid 50936:tid 50945] [client 4.189.122.79:17022] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5jB7Dlg80QUdd5qc4XYwAAAoc"]
[Wed Jan 07 21:43:35.694392 2026] [:error] [pid 51128:tid 51136] [client 4.189.122.79:31312] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aV5jB0GjtE8U88mrwuev0wAAAYY"]
[Wed Jan 07 21:43:36.045854 2026] [:error] [pid 30633:tid 30684] [client 4.189.122.79:17236] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aV5jCPZiVWlF7303nMi77AAAAFU"]
[Wed Jan 07 21:43:36.864090 2026] [:error] [pid 30634:tid 30697] [client 4.189.122.79:14237] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aV5jCICIPBibObtmZtsPqAAAAMc"]
[Wed Jan 07 21:43:37.834593 2026] [:error] [pid 50838:tid 50840] [client 4.189.122.79:23307] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aV5jCbSweZ27JIN4H8vUtwAAAcA"]
[Wed Jan 07 21:43:38.268695 2026] [:error] [pid 51128:tid 51133] [client 4.189.122.79:17246] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aV5jCkGjtE8U88mrwuev1QAAAYM"]
[Wed Jan 07 21:43:38.835725 2026] [:error] [pid 30633:tid 30679] [client 4.189.122.79:17227] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aV5jCvZiVWlF7303nMi78AAAAFA"]
[Wed Jan 07 21:43:39.200127 2026] [:error] [pid 30633:tid 30665] [client 4.189.122.79:17279] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aV5jC_ZiVWlF7303nMi78gAAAEI"]
[Wed Jan 07 21:43:39.589354 2026] [:error] [pid 30633:tid 30678] [client 4.189.122.79:17278] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aV5jC_ZiVWlF7303nMi78wAAAE8"]
[Wed Jan 07 21:43:40.035212 2026] [:error] [pid 30634:tid 30698] [client 4.189.122.79:20744] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aV5jDICIPBibObtmZtsPqQAAAMg"]
[Wed Jan 07 21:43:40.800291 2026] [:error] [pid 30634:tid 30699] [client 4.189.122.79:19978] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ar.php"] [unique_id "aV5jDICIPBibObtmZtsPqgAAAMk"]
[Wed Jan 07 21:43:41.270366 2026] [:error] [pid 51128:tid 51146] [client 4.189.122.79:20760] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ar.php"] [unique_id "aV5jDUGjtE8U88mrwuev1gAAAZA"]
[Wed Jan 07 21:43:42.081665 2026] [:error] [pid 58330:tid 58333] [client 4.189.122.79:31250] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ar.php"] [unique_id "aV5jDg8kGngKGK7_wncK-AAAAQE"]
[Wed Jan 07 21:43:42.753450 2026] [:error] [pid 50870:tid 50887] [client 4.189.122.79:34693] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ar.php"] [unique_id "aV5jDhlePfspAt1Bzot8XgAAAg8"]
[Wed Jan 07 21:43:43.730901 2026] [:error] [pid 58330:tid 58339] [client 4.189.122.79:27096] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5jDw8kGngKGK7_wncK-QAAAQc"]
[Wed Jan 07 21:43:44.542970 2026] [:error] [pid 51128:tid 51143] [client 4.189.122.79:23326] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5jEEGjtE8U88mrwuev1wAAAY0"]
[Wed Jan 07 21:43:45.253523 2026] [:error] [pid 51128:tid 51134] [client 4.189.122.79:21446] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5jEUGjtE8U88mrwuev2QAAAYQ"]
[Wed Jan 07 21:43:46.178050 2026] [:error] [pid 30632:tid 30656] [client 4.189.122.79:27122] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aV5jEud3_LCpBJzo02caaQAAABQ"]
[Wed Jan 07 21:43:46.768948 2026] [:error] [pid 30634:tid 30708] [client 4.189.122.79:5230] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aV5jEoCIPBibObtmZtsPrQAAANI"]
[Wed Jan 07 21:43:47.186138 2026] [:error] [pid 50838:tid 50862] [client 4.189.122.79:19995] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aV5jE7SweZ27JIN4H8vUugAAAdY"]
[Wed Jan 07 21:43:48.060943 2026] [:error] [pid 50936:tid 50948] [client 4.189.122.79:5371] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aV5jFLDlg80QUdd5qc4XZQAAAoo"]
[Wed Jan 07 21:43:48.865598 2026] [:error] [pid 50838:tid 50857] [client 4.189.122.79:24283] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aV5jFLSweZ27JIN4H8vUuwAAAdE"]
[Wed Jan 07 21:43:49.286934 2026] [:error] [pid 50936:tid 50955] [client 4.189.122.79:25883] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aV5jFbDlg80QUdd5qc4XZgAAApE"]
[Wed Jan 07 21:43:49.702079 2026] [:error] [pid 30634:tid 30693] [client 4.189.122.79:25866] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aV5jFYCIPBibObtmZtsPrwAAAMM"]
[Wed Jan 07 21:43:50.153377 2026] [:error] [pid 51128:tid 51153] [client 4.189.122.79:33146] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aV5jFkGjtE8U88mrwuev2wAAAZc"]
[Wed Jan 07 21:43:50.630037 2026] [:error] [pid 30634:tid 30702] [client 4.189.122.79:24264] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aV5jFoCIPBibObtmZtsPsAAAAMw"]
[Wed Jan 07 21:43:51.576004 2026] [:error] [pid 50870:tid 50892] [client 4.189.122.79:34695] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5jFxlePfspAt1Bzot8YgAAAhQ"]
[Wed Jan 07 21:43:52.109317 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:18370] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5jGGpNgk5-gt30I7aONwAAAkI"]
[Wed Jan 07 21:43:52.743737 2026] [:error] [pid 50936:tid 50953] [client 4.189.122.79:21502] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5jGLDlg80QUdd5qc4XZwAAAo8"]
[Wed Jan 07 21:43:53.147982 2026] [:error] [pid 51128:tid 51132] [client 4.189.122.79:27570] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aV5jGUGjtE8U88mrwuev3QAAAYI"]
[Wed Jan 07 21:43:53.616861 2026] [:error] [pid 50838:tid 50853] [client 4.189.122.79:5332] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aV5jGbSweZ27JIN4H8vUvwAAAc0"]
[Wed Jan 07 21:43:54.372683 2026] [:error] [pid 58330:tid 58355] [client 4.189.122.79:27580] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aV5jGg8kGngKGK7_wncK-wAAARc"]
[Wed Jan 07 21:43:54.930383 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:5317] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aV5jGmpNgk5-gt30I7aOOQAAAkA"]
[Wed Jan 07 21:43:55.561465 2026] [:error] [pid 58330:tid 58336] [client 4.189.122.79:25878] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aV5jGw8kGngKGK7_wncK_gAAAQQ"]
[Wed Jan 07 21:43:56.225140 2026] [:error] [pid 50905:tid 50920] [client 4.189.122.79:18382] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aV5jHGpNgk5-gt30I7aOOgAAAk0"]
[Wed Jan 07 21:43:57.231906 2026] [:error] [pid 50838:tid 50846] [client 4.189.122.79:18429] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aV5jHbSweZ27JIN4H8vUzwAAAcY"]
[Wed Jan 07 21:43:57.762485 2026] [:error] [pid 50870:tid 50883] [client 4.189.122.79:5832] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aV5jHRlePfspAt1Bzot8ZAAAAgs"]
[Wed Jan 07 21:43:58.258919 2026] [:error] [pid 50870:tid 50884] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Jan 07 21:43:58.376739 2026] [:error] [pid 50870:tid 50881] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Jan 07 21:43:58.494451 2026] [:error] [pid 50870:tid 50875] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Jan 07 21:43:58.635149 2026] [:error] [pid 50870:tid 50886] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Wed Jan 07 21:43:58.752544 2026] [:error] [pid 50870:tid 50873] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Wed Jan 07 21:43:58.872152 2026] [:error] [pid 50870:tid 50872] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Jan 07 21:43:58.988898 2026] [:error] [pid 50870:tid 50889] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Jan 07 21:43:59.110470 2026] [:error] [pid 50870:tid 50879] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Wed Jan 07 21:43:59.227185 2026] [:error] [pid 50870:tid 50888] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Wed Jan 07 21:43:59.344198 2026] [:error] [pid 50870:tid 50887] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/xtride.php
[Wed Jan 07 21:43:59.486956 2026] [:error] [pid 50870:tid 50893] [client 4.189.122.79:33128] File does not exist: /usr/local/apache/htdocs/suspended-page/s11.php
[Wed Jan 07 21:43:59.621833 2026] [:error] [pid 50870:tid 50894] [client 4.189.122.79:33128] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goat.php"] [unique_id "aV5jHxlePfspAt1Bzot8cQAAAhY"]
[Wed Jan 07 21:43:59.993406 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:34727] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goat.php"] [unique_id "aV5jH2pNgk5-gt30I7aOPgAAAlg"]
[Wed Jan 07 21:44:00.516301 2026] [:error] [pid 50905:tid 50912] [client 4.189.122.79:18419] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goat.php"] [unique_id "aV5jIGpNgk5-gt30I7aOPwAAAkU"]
[Wed Jan 07 21:44:01.413381 2026] [:error] [pid 50905:tid 50924] [client 4.189.122.79:32807] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goat.php"] [unique_id "aV5jIWpNgk5-gt30I7aOQgAAAlE"]
[Wed Jan 07 21:44:02.185905 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:21473] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aV5jIlfzA7c0ITpf3nExRQAAAJg"]
[Wed Jan 07 21:44:03.217516 2026] [:error] [pid 50905:tid 50907] [client 4.189.122.79:5850] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aV5jI2pNgk5-gt30I7aORwAAAkA"]
[Wed Jan 07 21:44:03.605449 2026] [:error] [pid 50870:tid 50892] [client 4.189.122.79:32783] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aV5jIxlePfspAt1Bzot8dQAAAhQ"]
[Wed Jan 07 21:44:04.083839 2026] [:error] [pid 50905:tid 50915] [client 4.189.122.79:18391] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aV5jJGpNgk5-gt30I7aOSgAAAkg"]
[Wed Jan 07 21:44:04.549705 2026] [:error] [pid 30632:tid 30649] [client 4.189.122.79:32784] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "aV5jJOd3_LCpBJzo02cabgAAAA0"]
[Wed Jan 07 21:44:05.638052 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:23350] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "aV5jJWpNgk5-gt30I7aOTAAAAlg"]
[Wed Jan 07 21:44:06.126782 2026] [:error] [pid 30634:tid 30707] [client 4.189.122.79:33141] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "aV5jJoCIPBibObtmZtsPsQAAANE"]
[Wed Jan 07 21:44:06.892335 2026] [:error] [pid 50905:tid 50924] [client 4.189.122.79:5847] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "aV5jJmpNgk5-gt30I7aOTwAAAlE"]
[Wed Jan 07 21:44:07.411608 2026] [:error] [pid 30632:tid 30639] [client 4.189.122.79:20295] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lyy.php"] [unique_id "aV5jJ-d3_LCpBJzo02cacQAAAAM"]
[Wed Jan 07 21:44:08.121442 2026] [:error] [pid 50870:tid 50874] [client 4.189.122.79:33107] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lyy.php"] [unique_id "aV5jKBlePfspAt1Bzot8eAAAAgI"]
[Wed Jan 07 21:44:08.943309 2026] [:error] [pid 50905:tid 50920] [client 4.189.122.79:24147] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lyy.php"] [unique_id "aV5jKGpNgk5-gt30I7aOVAAAAk0"]
[Wed Jan 07 21:44:10.196455 2026] [:error] [pid 58294:tid 58307] [client 4.189.122.79:24174] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lyy.php"] [unique_id "aV5jKlfzA7c0ITpf3nExSwAAAIs"]
[Wed Jan 07 21:44:11.016127 2026] [:error] [pid 50870:tid 50872] [client 4.189.122.79:17660] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/galex.php"] [unique_id "aV5jKxlePfspAt1Bzot8egAAAgA"]
[Wed Jan 07 21:44:11.673861 2026] [:error] [pid 50905:tid 50911] [client 4.189.122.79:33657] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/galex.php"] [unique_id "aV5jK2pNgk5-gt30I7aOWAAAAkQ"]
[Wed Jan 07 21:44:12.091043 2026] [:error] [pid 50870:tid 50889] [client 4.189.122.79:24128] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/galex.php"] [unique_id "aV5jLBlePfspAt1Bzot8fAAAAhE"]
[Wed Jan 07 21:44:12.544924 2026] [:error] [pid 50870:tid 50879] [client 4.189.122.79:5861] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/galex.php"] [unique_id "aV5jLBlePfspAt1Bzot8fgAAAgc"]
[Wed Jan 07 21:44:13.099251 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:23313] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aV5jLWpNgk5-gt30I7aOWgAAAk4"]
[Wed Jan 07 21:44:13.658702 2026] [:error] [pid 50870:tid 50893] [client 4.189.122.79:20318] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aV5jLRlePfspAt1Bzot8gAAAAhU"]
[Wed Jan 07 21:44:14.495486 2026] [:error] [pid 50905:tid 50913] [client 4.189.122.79:20340] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aV5jLmpNgk5-gt30I7aOXAAAAkY"]
[Wed Jan 07 21:44:15.183342 2026] [:error] [pid 30634:tid 30690] [client 4.189.122.79:18435] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aV5jL4CIPBibObtmZtsPuQAAAMA"]
[Wed Jan 07 21:44:15.832290 2026] [:error] [pid 50870:tid 50892] [client 4.189.122.79:31289] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aV5jLxlePfspAt1Bzot8hAAAAhQ"]
[Wed Jan 07 21:44:16.820402 2026] [:error] [pid 58330:tid 58339] [client 4.189.122.79:26345] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aV5jMA8kGngKGK7_wncLBQAAAQc"]
[Wed Jan 07 21:44:17.539173 2026] [:error] [pid 30632:tid 30656] [client 4.189.122.79:24171] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aV5jMed3_LCpBJzo02caeAAAABQ"]
[Wed Jan 07 21:44:18.238617 2026] [:error] [pid 30633:tid 30684] [client 4.189.122.79:31284] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aV5jMvZiVWlF7303nMi79gAAAFU"]
[Wed Jan 07 21:44:18.897242 2026] [:error] [pid 50905:tid 50928] [client 4.189.122.79:20292] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pp.php"] [unique_id "aV5jMmpNgk5-gt30I7aOYQAAAlU"]
[Wed Jan 07 21:44:19.306073 2026] [:error] [pid 30633:tid 30681] [client 4.189.122.79:6120] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pp.php"] [unique_id "aV5jM_ZiVWlF7303nMi79wAAAFI"]
[Wed Jan 07 21:44:19.882011 2026] [:error] [pid 58330:tid 58354] [client 4.189.122.79:20330] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pp.php"] [unique_id "aV5jMw8kGngKGK7_wncLBgAAARY"]
[Wed Jan 07 21:44:20.275359 2026] [:error] [pid 30634:tid 30705] [client 4.189.122.79:20297] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pp.php"] [unique_id "aV5jNICIPBibObtmZtsPvQAAAM8"]
[Wed Jan 07 21:44:21.109752 2026] [:error] [pid 50838:tid 50856] [client 4.189.122.79:34709] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aV5jNbSweZ27JIN4H8vU1gAAAdA"]
[Wed Jan 07 21:44:21.689292 2026] [:error] [pid 30633:tid 30677] [client 4.189.122.79:31293] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aV5jNfZiVWlF7303nMi7-QAAAE4"]
[Wed Jan 07 21:44:22.102628 2026] [:error] [pid 50870:tid 50886] [client 4.189.122.79:26307] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aV5jNhlePfspAt1Bzot8iQAAAg4"]
[Wed Jan 07 21:44:22.631237 2026] [:error] [pid 58294:tid 58301] [client 4.189.122.79:35933] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aV5jNlfzA7c0ITpf3nExVgAAAIU"]
[Wed Jan 07 21:44:23.047607 2026] [:error] [pid 50838:tid 50862] [client 4.189.122.79:28067] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV5jN7SweZ27JIN4H8vU1wAAAdY"]
[Wed Jan 07 21:44:24.008191 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:31271] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV5jOFfzA7c0ITpf3nExVwAAAJg"]
[Wed Jan 07 21:44:24.475267 2026] [:error] [pid 50870:tid 50888] [client 4.189.122.79:33646] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV5jOBlePfspAt1Bzot8igAAAhA"]
[Wed Jan 07 21:44:25.155128 2026] [:error] [pid 30633:tid 30687] [client 4.189.122.79:24170] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aV5jOfZiVWlF7303nMi7-gAAAFg"]
[Wed Jan 07 21:44:26.015859 2026] [:error] [pid 50838:tid 50843] [client 4.189.122.79:24178] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV5jOrSweZ27JIN4H8vU2AAAAcM"]
[Wed Jan 07 21:44:26.596190 2026] [:error] [pid 30632:tid 30649] [client 4.189.122.79:26362] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV5jOud3_LCpBJzo02caewAAAA0"]
[Wed Jan 07 21:44:27.059078 2026] [:error] [pid 50870:tid 50887] [client 4.189.122.79:24163] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV5jOxlePfspAt1Bzot8iwAAAg8"]
[Wed Jan 07 21:44:27.448532 2026] [:error] [pid 50936:tid 50944] [client 4.189.122.79:33296] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aV5jO7Dlg80QUdd5qc4XagAAAoY"]
[Wed Jan 07 21:44:27.774465 2026] [:error] [pid 50936:tid 50943] [client 4.189.122.79:6113] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV5jO7Dlg80QUdd5qc4XawAAAoU"]
[Wed Jan 07 21:44:28.122238 2026] [:error] [pid 50838:tid 50850] [client 4.189.122.79:24183] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV5jPLSweZ27JIN4H8vU2gAAAco"]
[Wed Jan 07 21:44:28.823226 2026] [:error] [pid 58294:tid 58307] [client 4.189.122.79:20302] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV5jPFfzA7c0ITpf3nExWQAAAIs"]
[Wed Jan 07 21:44:29.189215 2026] [:error] [pid 50838:tid 50854] [client 4.189.122.79:33317] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aV5jPbSweZ27JIN4H8vU3AAAAc4"]
[Wed Jan 07 21:44:29.764697 2026] [:error] [pid 58330:tid 58348] [client 4.189.122.79:33615] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV5jPQ8kGngKGK7_wncLCgAAARA"]
[Wed Jan 07 21:44:30.153429 2026] [:error] [pid 50936:tid 50951] [client 4.189.122.79:20344] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV5jPrDlg80QUdd5qc4XbAAAAo0"]
[Wed Jan 07 21:44:30.724406 2026] [:error] [pid 30632:tid 30658] [client 4.189.122.79:6099] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV5jPud3_LCpBJzo02cafAAAABY"]
[Wed Jan 07 21:44:31.083433 2026] [:error] [pid 50870:tid 50882] [client 4.189.122.79:33304] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aV5jPxlePfspAt1Bzot8jgAAAgo"]
[Wed Jan 07 21:44:31.828369 2026] [:error] [pid 30634:tid 30700] [client 4.189.122.79:24182] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV5jP4CIPBibObtmZtsPwAAAAMo"]
[Wed Jan 07 21:44:32.210230 2026] [:error] [pid 50838:tid 50851] [client 4.189.122.79:33602] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV5jQLSweZ27JIN4H8vU3QAAAcs"]
[Wed Jan 07 21:44:32.854221 2026] [:error] [pid 58330:tid 58341] [client 4.189.122.79:35929] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV5jQA8kGngKGK7_wncLDAAAAQk"]
[Wed Jan 07 21:44:33.593112 2026] [:error] [pid 30632:tid 30644] [client 4.189.122.79:33283] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aV5jQed3_LCpBJzo02cafQAAAAg"]
[Wed Jan 07 21:44:34.404433 2026] [:error] [pid 30632:tid 30636] [client 4.189.122.79:24180] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV5jQud3_LCpBJzo02cafgAAAAA"]
[Wed Jan 07 21:44:35.270989 2026] [:error] [pid 30632:tid 30639] [client 4.189.122.79:26360] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV5jQ-d3_LCpBJzo02cafwAAAAM"]
[Wed Jan 07 21:44:35.855714 2026] [:error] [pid 30634:tid 30712] [client 4.189.122.79:31288] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV5jQ4CIPBibObtmZtsPwQAAANY"]
[Wed Jan 07 21:44:36.463948 2026] [:error] [pid 30632:tid 30659] [client 4.189.122.79:33298] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aV5jROd3_LCpBJzo02cagAAAABc"]
[Wed Jan 07 21:44:36.807053 2026] [:error] [pid 30632:tid 30648] [client 4.189.122.79:33618] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV5jROd3_LCpBJzo02cagQAAAAw"]
[Wed Jan 07 21:44:40.215672 2026] [:error] [pid 50936:tid 50960] [client 4.189.122.79:33609] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV5jSLDlg80QUdd5qc4XcAAAApY"]
[Wed Jan 07 21:44:40.683490 2026] [:error] [pid 50905:tid 50931] [client 4.189.122.79:33605] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV5jSGpNgk5-gt30I7aOYwAAAlg"]
[Wed Jan 07 21:44:41.041423 2026] [:error] [pid 58294:tid 58315] [client 4.189.122.79:31295] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aV5jSVfzA7c0ITpf3nExXAAAAJM"]
[Wed Jan 07 21:44:41.627400 2026] [:error] [pid 58294:tid 58313] [client 4.189.122.79:26102] [client 4.189.122.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aV5jSVfzA7c0ITpf3nExXQAAAJE"]
[Wed Jan 07 21:44:42.698408 2026] [:error] [pid 58294:tid 58296] [client 4.189.122.79:35995] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV5jSlfzA7c0ITpf3nExXgAAAIA"]
[Wed Jan 07 21:44:44.045121 2026] [:error] [pid 30634:tid 30713] [client 4.189.122.79:25066] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV5jTICIPBibObtmZtsPxAAAANc"]
[Wed Jan 07 21:44:44.830048 2026] [:error] [pid 50838:tid 50845] [client 4.189.122.79:35990] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV5jTLSweZ27JIN4H8vU4gAAAcU"]
[Wed Jan 07 21:44:45.765122 2026] [:error] [pid 50838:tid 50842] [client 4.189.122.79:31251] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aV5jTbSweZ27JIN4H8vU4wAAAcI"]
[Wed Jan 07 21:44:46.222738 2026] [:error] [pid 50936:tid 50957] [client 4.189.122.79:35997] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV5jTrDlg80QUdd5qc4XcgAAApM"]
[Wed Jan 07 21:44:46.579312 2026] [:error] [pid 58330:tid 58333] [client 4.189.122.79:18106] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV5jTg8kGngKGK7_wncLDwAAAQE"]
[Wed Jan 07 21:44:46.976629 2026] [:error] [pid 30632:tid 30650] [client 4.189.122.79:26072] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV5jTud3_LCpBJzo02cagwAAAA4"]
[Wed Jan 07 21:44:47.802025 2026] [:error] [pid 30634:tid 30694] [client 4.189.122.79:17236] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aV5jT4CIPBibObtmZtsPxgAAAMQ"]
[Wed Jan 07 21:44:48.351060 2026] [:error] [pid 51128:tid 51150] [client 4.189.122.79:25055] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aV5jUEGjtE8U88mrwuev4gAAAZQ"]
[Wed Jan 07 21:44:48.991737 2026] [:error] [pid 50936:tid 50956] [client 4.189.122.79:18064] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aV5jULDlg80QUdd5qc4XcwAAApI"]
[Wed Jan 07 21:44:50.082680 2026] [:error] [pid 58294:tid 58308] [client 4.189.122.79:25085] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aV5jUlfzA7c0ITpf3nExXwAAAIw"]
[Wed Jan 07 21:44:50.829611 2026] [:error] [pid 30632:tid 30641] [client 4.189.122.79:22654] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aV5jUud3_LCpBJzo02cahAAAAAU"]
[Wed Jan 07 21:44:51.229905 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:26080] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bel.php"] [unique_id "aV5jU2pNgk5-gt30I7aOZQAAAlA"]
[Wed Jan 07 21:44:52.001845 2026] [:error] [pid 50936:tid 50948] [client 4.189.122.79:26313] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bel.php"] [unique_id "aV5jVLDlg80QUdd5qc4XdQAAAoo"]
[Wed Jan 07 21:44:52.559943 2026] [:error] [pid 30632:tid 30651] [client 4.189.122.79:26304] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bel.php"] [unique_id "aV5jVOd3_LCpBJzo02caiAAAAA8"]
[Wed Jan 07 21:44:53.290318 2026] [:error] [pid 50870:tid 50883] [client 4.189.122.79:35915] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bel.php"] [unique_id "aV5jVRlePfspAt1Bzot8kQAAAgs"]
[Wed Jan 07 21:44:54.099307 2026] [:error] [pid 30632:tid 30637] [client 4.189.122.79:35993] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV5jVud3_LCpBJzo02caigAAAAE"]
[Wed Jan 07 21:44:54.499830 2026] [:error] [pid 58330:tid 58354] [client 4.189.122.79:36003] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV5jVg8kGngKGK7_wncLEgAAARY"]
[Wed Jan 07 21:44:54.891879 2026] [:error] [pid 50905:tid 50910] [client 4.189.122.79:26094] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV5jVmpNgk5-gt30I7aOZgAAAkM"]
[Wed Jan 07 21:44:56.462615 2026] [:error] [pid 30634:tid 30709] [client 4.189.122.79:33307] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/alfa.php"] [unique_id "aV5jWICIPBibObtmZtsPxwAAANM"]
[Wed Jan 07 21:44:57.266741 2026] [:error] [pid 51128:tid 51131] [client 4.189.122.79:25026] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aV5jWUGjtE8U88mrwuev5QAAAYE"]
[Wed Jan 07 21:44:58.087196 2026] [:error] [pid 50905:tid 50912] [client 4.189.122.79:35962] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aV5jWmpNgk5-gt30I7aOZwAAAkU"]
[Wed Jan 07 21:44:59.591827 2026] [:error] [pid 58330:tid 58337] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Wed Jan 07 21:45:00.146102 2026] [:error] [pid 58330:tid 58332] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/bras.php
[Wed Jan 07 21:45:00.420911 2026] [:error] [pid 58330:tid 58334] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Wed Jan 07 21:45:00.727193 2026] [:error] [pid 58330:tid 58342] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Wed Jan 07 21:45:00.844192 2026] [:error] [pid 58330:tid 58338] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/xe.php
[Wed Jan 07 21:45:00.992175 2026] [:error] [pid 58330:tid 58333] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/bipas.php
[Wed Jan 07 21:45:01.125222 2026] [:error] [pid 58330:tid 58339] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Wed Jan 07 21:45:01.314898 2026] [:error] [pid 58330:tid 58343] [client 4.189.122.79:18009] File does not exist: /usr/local/apache/htdocs/suspended-page/cx.php
[Wed Jan 07 21:45:01.459433 2026] [:error] [pid 58330:tid 58355] [client 4.189.122.79:18009] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aV5jXQ8kGngKGK7_wncLIwAAARc"]
[Wed Jan 07 21:45:02.241370 2026] [:error] [pid 50905:tid 50925] [client 4.189.122.79:22603] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aV5jXmpNgk5-gt30I7aOagAAAlI"]
[Wed Jan 07 21:45:02.813066 2026] [:error] [pid 30632:tid 30644] [client 4.189.122.79:18089] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aV5jXud3_LCpBJzo02cajAAAAAg"]
[Wed Jan 07 21:45:03.319764 2026] [:error] [pid 50905:tid 50911] [client 4.189.122.79:36868] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aV5jX2pNgk5-gt30I7aObgAAAkQ"]
[Wed Jan 07 21:45:03.794465 2026] [:error] [pid 30634:tid 30706] [client 4.189.122.79:35938] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aV5jX4CIPBibObtmZtsPyQAAANA"]
[Wed Jan 07 21:45:04.578825 2026] [:error] [pid 50905:tid 50922] [client 4.189.122.79:18100] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aV5jYGpNgk5-gt30I7aOcQAAAk8"]
[Wed Jan 07 21:45:05.154135 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:26074] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aV5jYWpNgk5-gt30I7aOcgAAAkE"]
[Wed Jan 07 21:45:05.904729 2026] [:error] [pid 50905:tid 50921] [client 4.189.122.79:17985] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aV5jYWpNgk5-gt30I7aOcwAAAk4"]
[Wed Jan 07 21:45:06.938174 2026] [:error] [pid 50905:tid 50930] [client 4.189.122.79:35937] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x0x.php"] [unique_id "aV5jYmpNgk5-gt30I7aOdQAAAlc"]
[Wed Jan 07 21:45:07.758048 2026] [:error] [pid 58330:tid 58350] [client 4.189.122.79:26111] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x0x.php"] [unique_id "aV5jYw8kGngKGK7_wncLJAAAARI"]
[Wed Jan 07 21:45:08.157618 2026] [:error] [pid 30632:tid 30650] [client 4.189.122.79:22655] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x0x.php"] [unique_id "aV5jZOd3_LCpBJzo02cakAAAAA4"]
[Wed Jan 07 21:45:08.722998 2026] [:error] [pid 50905:tid 50925] [client 4.189.122.79:20771] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x0x.php"] [unique_id "aV5jZGpNgk5-gt30I7aOeQAAAlI"]
[Wed Jan 07 21:45:09.838103 2026] [:error] [pid 50838:tid 50854] [client 4.189.122.79:25060] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xrr.php"] [unique_id "aV5jZbSweZ27JIN4H8vU6AAAAc4"]
[Wed Jan 07 21:45:10.565051 2026] [:error] [pid 30633:tid 30686] [client 4.189.122.79:26103] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xrr.php"] [unique_id "aV5jZvZiVWlF7303nMi8AQAAAFc"]
[Wed Jan 07 21:45:10.997437 2026] [:error] [pid 50838:tid 50846] [client 4.189.122.79:25057] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xrr.php"] [unique_id "aV5jZrSweZ27JIN4H8vU6gAAAcY"]
[Wed Jan 07 21:45:11.304966 2026] [:error] [pid 50936:tid 50941] [client 4.189.122.79:22601] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xrr.php"] [unique_id "aV5jZ7Dlg80QUdd5qc4XeAAAAoM"]
[Wed Jan 07 21:45:11.944834 2026] [:error] [pid 30632:tid 30642] [client 4.189.122.79:20798] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "aV5jZ-d3_LCpBJzo02cakgAAAAY"]
[Wed Jan 07 21:45:12.566439 2026] [:error] [pid 30633:tid 30672] [client 4.189.122.79:18110] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "aV5jaPZiVWlF7303nMi8AgAAAEk"]
[Wed Jan 07 21:45:13.374173 2026] [:error] [pid 58294:tid 58320] [client 4.189.122.79:22628] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "aV5jaVfzA7c0ITpf3nExbgAAAJg"]
[Wed Jan 07 21:45:13.912761 2026] [:error] [pid 50905:tid 50923] [client 4.189.122.79:36031] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "aV5jaWpNgk5-gt30I7aOgwAAAlA"]
[Wed Jan 07 21:45:14.513631 2026] [:error] [pid 58294:tid 58300] [client 4.189.122.79:25033] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gi.php"] [unique_id "aV5jalfzA7c0ITpf3nExbwAAAIQ"]
[Wed Jan 07 21:45:15.322356 2026] [:error] [pid 50936:tid 50947] [client 4.189.122.79:33328] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gi.php"] [unique_id "aV5ja7Dlg80QUdd5qc4XegAAAok"]
[Wed Jan 07 21:45:16.087365 2026] [:error] [pid 58330:tid 58337] [client 4.189.122.79:20765] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gi.php"] [unique_id "aV5jbA8kGngKGK7_wncLKAAAAQU"]
[Wed Jan 07 21:45:16.358598 2026] [:error] [pid 50838:tid 50858] [client 4.189.122.79:18104] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gi.php"] [unique_id "aV5jbLSweZ27JIN4H8vU7gAAAdI"]
[Wed Jan 07 21:45:17.027904 2026] [:error] [pid 51128:tid 51130] [client 4.189.122.79:18046] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nov.php"] [unique_id "aV5jbUGjtE8U88mrwuev6AAAAYA"]
[Wed Jan 07 21:45:17.569629 2026] [:error] [pid 50936:tid 50944] [client 4.189.122.79:26055] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nov.php"] [unique_id "aV5jbbDlg80QUdd5qc4XewAAAoY"]
[Wed Jan 07 21:45:18.075045 2026] [:error] [pid 58330:tid 58341] [client 4.189.122.79:35973] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nov.php"] [unique_id "aV5jbg8kGngKGK7_wncLKQAAAQk"]
[Wed Jan 07 21:45:19.341889 2026] [:error] [pid 51128:tid 51144] [client 4.189.122.79:35944] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nov.php"] [unique_id "aV5jb0GjtE8U88mrwuev6QAAAY4"]
[Wed Jan 07 21:45:20.097125 2026] [:error] [pid 51128:tid 51142] [client 4.189.122.79:26062] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xo.php"] [unique_id "aV5jcEGjtE8U88mrwuev6gAAAYw"]
[Wed Jan 07 21:45:20.525862 2026] [:error] [pid 58294:tid 58307] [client 4.189.122.79:22610] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xo.php"] [unique_id "aV5jcFfzA7c0ITpf3nExcgAAAIs"]
[Wed Jan 07 21:45:21.108881 2026] [:error] [pid 58294:tid 58312] [client 4.189.122.79:35978] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xo.php"] [unique_id "aV5jcVfzA7c0ITpf3nExdAAAAJA"]
[Wed Jan 07 21:45:21.541520 2026] [:error] [pid 30633:tid 30677] [client 4.189.122.79:26076] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xo.php"] [unique_id "aV5jcfZiVWlF7303nMi8BQAAAE4"]
[Wed Jan 07 21:45:22.136448 2026] [:error] [pid 30633:tid 30687] [client 4.189.122.79:36864] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aV5jcvZiVWlF7303nMi8BgAAAFg"]
[Wed Jan 07 21:45:22.700173 2026] [:error] [pid 30632:tid 30637] [client 4.189.122.79:22625] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aV5jcud3_LCpBJzo02calwAAAAE"]
[Wed Jan 07 21:45:23.413887 2026] [:error] [pid 58330:tid 58334] [client 4.189.122.79:36967] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aV5jcw8kGngKGK7_wncLKwAAAQI"]
[Wed Jan 07 21:45:24.320793 2026] [:error] [pid 58294:tid 58314] [client 4.189.122.79:36898] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aV5jdFfzA7c0ITpf3nExdQAAAJI"]
[Wed Jan 07 21:45:25.170301 2026] [:error] [pid 51128:tid 51141] [client 4.189.122.79:18059] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/des.php"] [unique_id "aV5jdUGjtE8U88mrwuev6wAAAYs"]
[Wed Jan 07 21:45:25.974676 2026] [:error] [pid 30633:tid 30676] [client 4.189.122.79:25040] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/des.php"] [unique_id "aV5jdfZiVWlF7303nMi8BwAAAE0"]
[Wed Jan 07 21:45:26.422532 2026] [:error] [pid 51128:tid 51154] [client 4.189.122.79:22608] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/des.php"] [unique_id "aV5jdkGjtE8U88mrwuev7AAAAZg"]
[Wed Jan 07 21:45:27.006692 2026] [:error] [pid 30633:tid 30675] [client 4.189.122.79:25050] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/des.php"] [unique_id "aV5jd_ZiVWlF7303nMi8CAAAAEw"]
[Wed Jan 07 21:45:27.606516 2026] [:error] [pid 50905:tid 50922] [client 4.189.122.79:36879] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "aV5jd2pNgk5-gt30I7aOiAAAAk8"]
[Wed Jan 07 21:45:28.572793 2026] [:error] [pid 50905:tid 50929] [client 4.189.122.79:18063] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "aV5jeGpNgk5-gt30I7aOiwAAAlY"]
[Wed Jan 07 21:45:29.510916 2026] [:error] [pid 50936:tid 50942] [client 4.189.122.79:18053] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "aV5jebDlg80QUdd5qc4XgAAAAoQ"]
[Wed Jan 07 21:45:29.979559 2026] [:error] [pid 50936:tid 50959] [client 4.189.122.79:25422] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "aV5jebDlg80QUdd5qc4XgQAAApU"]
[Wed Jan 07 21:45:30.426774 2026] [:error] [pid 50936:tid 50958] [client 4.189.122.79:29142] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aV5jerDlg80QUdd5qc4XggAAApQ"]
[Wed Jan 07 21:45:30.982225 2026] [:error] [pid 58294:tid 58308] [client 4.189.122.79:36984] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aV5jelfzA7c0ITpf3nExeAAAAIw"]
[Wed Jan 07 21:45:31.994469 2026] [:error] [pid 58294:tid 58299] [client 4.189.122.79:20774] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aV5je1fzA7c0ITpf3nExeQAAAIM"]
[Wed Jan 07 21:45:32.714891 2026] [:error] [pid 50936:tid 50945] [client 4.189.122.79:36954] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aV5jfLDlg80QUdd5qc4XhAAAAoc"]
[Wed Jan 07 21:45:33.755610 2026] [:error] [pid 51128:tid 51135] [client 4.189.122.79:20785] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-knownold/"] [unique_id "aV5jfUGjtE8U88mrwuev7QAAAYU"]
[Wed Jan 07 21:45:34.233879 2026] [:error] [pid 50838:tid 50862] [client 4.189.122.79:36888] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-knownold/"] [unique_id "aV5jfrSweZ27JIN4H8vU8QAAAdY"]
[Wed Jan 07 21:45:34.752299 2026] [:error] [pid 50936:tid 50949] [client 4.189.122.79:29148] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-knownold/"] [unique_id "aV5jfrDlg80QUdd5qc4XhwAAAos"]
[Wed Jan 07 21:45:35.461238 2026] [:error] [pid 50870:tid 50896] [client 4.189.122.79:23274] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-knownold/"] [unique_id "aV5jfxlePfspAt1Bzot8nQAAAhg"]
[Wed Jan 07 21:45:35.849914 2026] [:error] [pid 50936:tid 50954] [client 4.189.122.79:23294] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV5jf7Dlg80QUdd5qc4XiQAAApA"]
[Wed Jan 07 21:45:36.323729 2026] [:error] [pid 58330:tid 58356] [client 4.189.122.79:36909] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV5jgA8kGngKGK7_wncLLQAAARg"]
[Wed Jan 07 21:45:37.090305 2026] [:error] [pid 58294:tid 58317] [client 4.189.122.79:25443] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV5jgVfzA7c0ITpf3nExegAAAJU"]
[Wed Jan 07 21:45:37.547526 2026] [:error] [pid 50936:tid 50943] [client 4.189.122.79:22529] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aV5jgbDlg80QUdd5qc4XjAAAAoU"]
[Wed Jan 07 21:45:38.037019 2026] [:error] [pid 50936:tid 50951] [client 4.189.122.79:22556] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV5jgrDlg80QUdd5qc4XjQAAAo0"]
[Wed Jan 07 21:45:38.601377 2026] [:error] [pid 51128:tid 51139] [client 4.189.122.79:37253] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV5jgkGjtE8U88mrwuev8AAAAYk"]
[Wed Jan 07 21:45:39.468851 2026] [:error] [pid 30633:tid 30670] [client 4.189.122.79:19385] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV5jg_ZiVWlF7303nMi8CQAAAEc"]
[Wed Jan 07 21:45:39.986929 2026] [:error] [pid 30634:tid 30707] [client 4.189.122.79:21091] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aV5jg4CIPBibObtmZtsP2AAAANE"]
[Wed Jan 07 21:45:40.865011 2026] [:error] [pid 30634:tid 30702] [client 4.189.122.79:19377] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV5jhICIPBibObtmZtsP2QAAAMw"]
[Wed Jan 07 21:45:41.611201 2026] [:error] [pid 50870:tid 50892] [client 4.189.122.79:21059] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV5jhRlePfspAt1Bzot8oAAAAhQ"]
[Wed Jan 07 21:45:41.911609 2026] [:error] [pid 30632:tid 30649] [client 4.189.122.79:21115] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV5jhed3_LCpBJzo02camgAAAA0"]
[Wed Jan 07 21:45:42.299166 2026] [:error] [pid 50870:tid 50883] [client 4.189.122.79:22717] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aV5jhhlePfspAt1Bzot8oQAAAgs"]
[Wed Jan 07 21:45:42.736540 2026] [:error] [pid 30634:tid 30692] [client 4.189.122.79:27631] [client 4.189.122.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aV5jhoCIPBibObtmZtsP2gAAAMI"]
[Wed Jan 07 21:45:43.281871 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:22712] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aV5jh2pNgk5-gt30I7aOkwAAAkI"]
[Wed Jan 07 21:45:43.602888 2026] [:error] [pid 50905:tid 50919] [client 4.189.122.79:25257] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aV5jh2pNgk5-gt30I7aOlQAAAkw"]
[Wed Jan 07 21:45:44.049309 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:22578] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aV5jiGpNgk5-gt30I7aOlgAAAkE"]
[Wed Jan 07 21:45:44.621186 2026] [:error] [pid 50870:tid 50894] [client 4.189.122.79:19349] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aV5jiBlePfspAt1Bzot8ogAAAhY"]
[Wed Jan 07 21:45:44.952251 2026] [:error] [pid 30632:tid 30636] [client 4.189.122.79:28438] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aV5jiOd3_LCpBJzo02camwAAAAA"]
[Wed Jan 07 21:45:45.435563 2026] [:error] [pid 50936:tid 50952] [client 4.189.122.79:28456] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aV5jibDlg80QUdd5qc4XkAAAAo4"]
[Wed Jan 07 21:45:45.831083 2026] [:error] [pid 58294:tid 58300] [client 4.189.122.79:20989] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aV5jiVfzA7c0ITpf3nExfwAAAIQ"]
[Wed Jan 07 21:45:46.290610 2026] [:error] [pid 58330:tid 58347] [client 4.189.122.79:36965] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fffff.php"] [unique_id "aV5jig8kGngKGK7_wncLMQAAAQ8"]
[Wed Jan 07 21:45:46.749455 2026] [:error] [pid 50870:tid 50885] [client 4.189.122.79:28442] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fffff.php"] [unique_id "aV5jihlePfspAt1Bzot8owAAAg0"]
[Wed Jan 07 21:45:47.304388 2026] [:error] [pid 30632:tid 30648] [client 4.189.122.79:36969] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fffff.php"] [unique_id "aV5ji-d3_LCpBJzo02canQAAAAw"]
[Wed Jan 07 21:45:48.065788 2026] [:error] [pid 50870:tid 50891] [client 4.189.122.79:27595] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fffff.php"] [unique_id "aV5jjBlePfspAt1Bzot8pAAAAhM"]
[Wed Jan 07 21:45:48.975264 2026] [:error] [pid 50936:tid 50957] [client 4.189.122.79:22562] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpa.php"] [unique_id "aV5jjLDlg80QUdd5qc4XkQAAApM"]
[Wed Jan 07 21:45:49.420905 2026] [:error] [pid 50905:tid 50910] [client 4.189.122.79:22665] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpa.php"] [unique_id "aV5jjWpNgk5-gt30I7aOmwAAAkM"]
[Wed Jan 07 21:45:50.122873 2026] [:error] [pid 58330:tid 58351] [client 4.189.122.79:22664] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpa.php"] [unique_id "aV5jjg8kGngKGK7_wncLMwAAARM"]
[Wed Jan 07 21:45:51.260920 2026] [:error] [pid 30634:tid 30703] [client 4.189.122.79:25507] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpa.php"] [unique_id "aV5jj4CIPBibObtmZtsP3AAAAM0"]
[Wed Jan 07 21:45:52.009466 2026] [:error] [pid 50905:tid 50915] [client 4.189.122.79:28430] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ant.php"] [unique_id "aV5jkGpNgk5-gt30I7aOnwAAAkg"]
[Wed Jan 07 21:45:52.557129 2026] [:error] [pid 51128:tid 51133] [client 4.189.122.79:27615] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ant.php"] [unique_id "aV5jkEGjtE8U88mrwuev8gAAAYM"]
[Wed Jan 07 21:45:53.186997 2026] [:error] [pid 58330:tid 58348] [client 4.189.122.79:28454] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ant.php"] [unique_id "aV5jkQ8kGngKGK7_wncLNAAAARA"]
[Wed Jan 07 21:45:53.711483 2026] [:error] [pid 50905:tid 50909] [client 4.189.122.79:19387] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ant.php"] [unique_id "aV5jkWpNgk5-gt30I7aOoQAAAkI"]
[Wed Jan 07 21:45:54.689508 2026] [:error] [pid 30634:tid 30699] [client 4.189.122.79:19873] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-rinko.php"] [unique_id "aV5jkoCIPBibObtmZtsP3wAAAMk"]
[Wed Jan 07 21:45:55.509617 2026] [:error] [pid 58294:tid 58302] [client 4.189.122.79:28419] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-rinko.php"] [unique_id "aV5jk1fzA7c0ITpf3nExgwAAAIY"]
[Wed Jan 07 21:45:56.116068 2026] [:error] [pid 50905:tid 50918] [client 4.189.122.79:28447] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-rinko.php"] [unique_id "aV5jlGpNgk5-gt30I7aOogAAAks"]
[Wed Jan 07 21:45:56.540361 2026] [:error] [pid 50905:tid 50908] [client 4.189.122.79:25509] [client 4.189.122.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-rinko.php"] [unique_id "aV5jlGpNgk5-gt30I7aOowAAAkE"]
[Wed Jan 07 22:16:40.277536 2026] [:error] [pid 30633:tid 30685] [client 182.253.238.235:52590] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV5qyPZiVWlF7303nMi_JgAAAFY"]
[Wed Jan 07 22:16:40.904756 2026] [:error] [pid 50838:tid 50861] [client 182.253.238.235:53473] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV5qyLSweZ27JIN4H8vXoQAAAdU"]
[Wed Jan 07 22:16:43.167995 2026] [:error] [pid 50870:tid 50875] [client 182.253.238.235:54022] [client 182.253.238.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aV5qyxlePfspAt1BzouAZQAAAgM"]
[Wed Jan 07 22:29:34.333587 2026] [:error] [pid 30633:tid 30664] [client 34.148.157.126:51407] [client 34.148.157.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.148.157.126, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aV5tzvZiVWlF7303nMjAyAAAAEE"]
[Wed Jan 07 22:29:34.337259 2026] [:error] [pid 30633:tid 30664] [client 34.148.157.126:51407] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 07 22:29:37.081761 2026] [:error] [pid 30633:tid 30682] [client 34.148.157.126:51407] [client 34.148.157.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aV5t0fZiVWlF7303nMjA0wAAAFM"]
[Wed Jan 07 22:29:37.645248 2026] [:error] [pid 50838:tid 50855] [client 34.148.157.126:54328] [client 34.148.157.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aV5t0bSweZ27JIN4H8vYqgAAAc8"]
[Wed Jan 07 22:29:38.123987 2026] [:error] [pid 58294:tid 58309] [client 34.148.157.126:56557] [client 34.148.157.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aV5t0lfzA7c0ITpf3nE3oAAAAI0"]
[Wed Jan 07 22:29:38.554203 2026] [:error] [pid 30634:tid 30705] [client 34.148.157.126:57887] [client 34.148.157.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aV5t0oCIPBibObtmZtsVkQAAAM8"]
[Wed Jan 07 22:29:39.143070 2026] [:error] [pid 30633:tid 30686] [client 34.148.157.126:51388] [client 34.148.157.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aV5t0_ZiVWlF7303nMjA1AAAAFc"]
[Wed Jan 07 22:29:39.694236 2026] [:error] [pid 58294:tid 58310] [client 34.148.157.126:54574] [client 34.148.157.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aV5t01fzA7c0ITpf3nE3ogAAAI4"]
[Wed Jan 07 22:29:40.226452 2026] [:error] [pid 51128:tid 51138] [client 34.148.157.126:56580] [client 34.148.157.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aV5t1EGjtE8U88mrwue0yAAAAYg"]
[Wed Jan 07 22:39:54.809449 2026] [:error] [pid 50905:tid 50928] [client 43.156.228.27:38186] [client 43.156.228.27] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV5wOmpNgk5-gt30I7aZYQAAAlU"]
[Wed Jan 07 23:15:47.977443 2026] [:error] [pid 30632:tid 30642] [client 4.194.8.37:18022] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Wed Jan 07 23:15:48.072867 2026] [:error] [pid 30632:tid 30647] [client 4.194.8.37:18022] File does not exist: /usr/local/apache/htdocs/suspended-page/rkszbxbh.php
[Wed Jan 07 23:15:48.163541 2026] [:error] [pid 30632:tid 30641] [client 4.194.8.37:18022] File does not exist: /usr/local/apache/htdocs/suspended-page/hanna1337.php
[Wed Jan 07 23:15:48.253857 2026] [:error] [pid 30632:tid 30637] [client 4.194.8.37:18022] File does not exist: /usr/local/apache/htdocs/suspended-page/gt.php
[Wed Jan 07 23:15:48.364593 2026] [:error] [pid 30632:tid 30651] [client 4.194.8.37:18022] File does not exist: /usr/local/apache/htdocs/suspended-page/datab.php
[Wed Jan 07 23:15:48.635635 2026] [:error] [pid 30632:tid 30636] [client 4.194.8.37:18022] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "aV54pOd3_LCpBJzo02clfgAAAAA"]
[Wed Jan 07 23:15:48.821589 2026] [:error] [pid 58294:tid 58301] [client 4.194.8.37:17991] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "aV54pFfzA7c0ITpf3nE-jwAAAIU"]
[Wed Jan 07 23:15:49.010376 2026] [:error] [pid 50905:tid 50908] [client 4.194.8.37:17949] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "aV54pWpNgk5-gt30I7aiYAAAAkE"]
[Wed Jan 07 23:15:49.198361 2026] [:error] [pid 58294:tid 58319] [client 4.194.8.37:18005] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "aV54pVfzA7c0ITpf3nE-kQAAAJc"]
[Wed Jan 07 23:15:49.403979 2026] [:error] [pid 50905:tid 50919] [client 4.194.8.37:18040] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "aV54pWpNgk5-gt30I7aiYQAAAkw"]
[Wed Jan 07 23:15:49.595207 2026] [:error] [pid 51128:tid 51154] [client 4.194.8.37:17946] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "aV54pUGjtE8U88mrwue5OwAAAZg"]
[Wed Jan 07 23:15:49.794629 2026] [:error] [pid 50936:tid 50946] [client 4.194.8.37:17970] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "aV54pbDlg80QUdd5qc4g0gAAAog"]
[Wed Jan 07 23:15:49.990920 2026] [:error] [pid 50936:tid 50939] [client 4.194.8.37:18009] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "aV54pbDlg80QUdd5qc4g0wAAAoE"]
[Wed Jan 07 23:15:50.230023 2026] [:error] [pid 50838:tid 50844] [client 4.194.8.37:18011] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "aV54prSweZ27JIN4H8vckgAAAcQ"]
[Wed Jan 07 23:15:50.432112 2026] [:error] [pid 58294:tid 58302] [client 4.194.8.37:18001] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "aV54plfzA7c0ITpf3nE-lQAAAIY"]
[Wed Jan 07 23:15:50.612393 2026] [:error] [pid 58294:tid 58317] [client 4.194.8.37:17922] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "aV54plfzA7c0ITpf3nE-lwAAAJU"]
[Wed Jan 07 23:15:50.802448 2026] [:error] [pid 50905:tid 50909] [client 4.194.8.37:17950] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "aV54pmpNgk5-gt30I7aiZAAAAkI"]
[Wed Jan 07 23:15:51.006834 2026] [:error] [pid 50905:tid 50926] [client 4.194.8.37:17941] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aV54p2pNgk5-gt30I7aiZQAAAlM"]
[Wed Jan 07 23:15:51.230193 2026] [:error] [pid 50905:tid 50907] [client 4.194.8.37:17947] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aV54p2pNgk5-gt30I7aiZwAAAkA"]
[Wed Jan 07 23:15:51.404641 2026] [:error] [pid 51128:tid 51145] [client 4.194.8.37:17951] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aV54p0GjtE8U88mrwue5QQAAAY8"]
[Wed Jan 07 23:15:51.595384 2026] [:error] [pid 50870:tid 50873] [client 4.194.8.37:18016] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aV54pxlePfspAt1BzouGGQAAAgE"]
[Wed Jan 07 23:15:51.786420 2026] [:error] [pid 50936:tid 50943] [client 4.194.8.37:9159] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "aV54p7Dlg80QUdd5qc4g1gAAAoU"]
[Wed Jan 07 23:15:51.979330 2026] [:error] [pid 50936:tid 50954] [client 4.194.8.37:17999] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "aV54p7Dlg80QUdd5qc4g2QAAApA"]
[Wed Jan 07 23:15:52.172477 2026] [:error] [pid 30632:tid 30656] [client 4.194.8.37:18023] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "aV54qOd3_LCpBJzo02clgAAAABQ"]
[Wed Jan 07 23:15:52.420470 2026] [:error] [pid 50905:tid 50930] [client 4.194.8.37:17960] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "aV54qGpNgk5-gt30I7aiawAAAlc"]
[Wed Jan 07 23:15:52.644280 2026] [:error] [pid 58330:tid 58343] [client 4.194.8.37:18039] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "aV54qA8kGngKGK7_wncYRgAAAQs"]
[Wed Jan 07 23:15:52.847973 2026] [:error] [pid 50870:tid 50881] [client 4.194.8.37:18036] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "aV54qBlePfspAt1BzouGHgAAAgk"]
[Wed Jan 07 23:15:53.037382 2026] [:error] [pid 58330:tid 58340] [client 4.194.8.37:17962] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "aV54qQ8kGngKGK7_wncYRwAAAQg"]
[Wed Jan 07 23:15:53.226784 2026] [:error] [pid 50838:tid 50846] [client 4.194.8.37:17920] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "aV54qbSweZ27JIN4H8vclwAAAcY"]
[Wed Jan 07 23:15:53.409945 2026] [:error] [pid 50905:tid 50913] [client 4.194.8.37:18012] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "aV54qWpNgk5-gt30I7aibgAAAkY"]
[Wed Jan 07 23:15:53.597638 2026] [:error] [pid 58330:tid 58332] [client 4.194.8.37:17925] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "aV54qQ8kGngKGK7_wncYSgAAAQA"]
[Wed Jan 07 23:15:53.898524 2026] [:error] [pid 58294:tid 58299] [client 4.194.8.37:18021] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "aV54qVfzA7c0ITpf3nE-oAAAAIM"]
[Wed Jan 07 23:15:54.109481 2026] [:error] [pid 50936:tid 50956] [client 4.194.8.37:17998] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "aV54qrDlg80QUdd5qc4g3AAAApI"]
[Wed Jan 07 23:15:54.342758 2026] [:error] [pid 58330:tid 58349] [client 4.194.8.37:17938] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "aV54qg8kGngKGK7_wncYTQAAARE"]
[Wed Jan 07 23:15:54.531086 2026] [:error] [pid 58330:tid 58350] [client 4.194.8.37:18006] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "aV54qg8kGngKGK7_wncYTgAAARI"]
[Wed Jan 07 23:15:54.706256 2026] [:error] [pid 50870:tid 50889] [client 4.194.8.37:18032] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "aV54qhlePfspAt1BzouGIQAAAhE"]
[Wed Jan 07 23:15:54.892190 2026] [:error] [pid 50870:tid 50883] [client 4.194.8.37:17935] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "aV54qhlePfspAt1BzouGIwAAAgs"]
[Wed Jan 07 23:15:55.084007 2026] [:error] [pid 50838:tid 50856] [client 4.194.8.37:17966] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aV54q7SweZ27JIN4H8vcmQAAAdA"]
[Wed Jan 07 23:15:55.309718 2026] [:error] [pid 50838:tid 50859] [client 4.194.8.37:17988] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aV54q7SweZ27JIN4H8vcmgAAAdM"]
[Wed Jan 07 23:15:55.497843 2026] [:error] [pid 30632:tid 30641] [client 4.194.8.37:17927] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aV54q-d3_LCpBJzo02cliwAAAAU"]
[Wed Jan 07 23:15:55.675058 2026] [:error] [pid 50905:tid 50919] [client 4.194.8.37:18007] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aV54q2pNgk5-gt30I7aicQAAAkw"]
[Wed Jan 07 23:15:55.849435 2026] [:error] [pid 50905:tid 50911] [client 4.194.8.37:17990] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aV54q2pNgk5-gt30I7aicgAAAkQ"]
[Wed Jan 07 23:15:56.053103 2026] [:error] [pid 50838:tid 50840] [client 4.194.8.37:18035] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aV54rLSweZ27JIN4H8vcngAAAcA"]
[Wed Jan 07 23:15:56.230324 2026] [:error] [pid 30634:tid 30701] [client 4.194.8.37:9160] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aV54rICIPBibObtmZtsaSgAAAMs"]
[Wed Jan 07 23:15:56.424964 2026] [:error] [pid 30632:tid 30651] [client 4.194.8.37:18038] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "aV54rOd3_LCpBJzo02cljQAAAA8"]
[Wed Jan 07 23:15:56.633520 2026] [:error] [pid 30634:tid 30693] [client 4.194.8.37:18020] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "aV54rICIPBibObtmZtsaTQAAAMM"]
[Wed Jan 07 23:15:56.839564 2026] [:error] [pid 58330:tid 58344] [client 4.194.8.37:18028] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "aV54rA8kGngKGK7_wncYVAAAAQw"]
[Wed Jan 07 23:15:57.034296 2026] [:error] [pid 51128:tid 51138] [client 4.194.8.37:17944] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "aV54rUGjtE8U88mrwue5SAAAAYg"]
[Wed Jan 07 23:15:57.254637 2026] [:error] [pid 51128:tid 51141] [client 4.194.8.37:17928] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "aV54rUGjtE8U88mrwue5SQAAAYs"]
[Wed Jan 07 23:15:57.444381 2026] [:error] [pid 58330:tid 58339] [client 4.194.8.37:18004] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "aV54rQ8kGngKGK7_wncYVQAAAQc"]
[Wed Jan 07 23:15:57.627513 2026] [:error] [pid 50936:tid 50946] [client 4.194.8.37:17953] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "aV54rbDlg80QUdd5qc4g4QAAAog"]
[Wed Jan 07 23:15:57.803087 2026] [:error] [pid 58330:tid 58338] [client 4.194.8.37:9215] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "aV54rQ8kGngKGK7_wncYWAAAAQY"]
[Wed Jan 07 23:15:58.006991 2026] [:error] [pid 51128:tid 51142] [client 4.194.8.37:18031] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "aV54rkGjtE8U88mrwue5TAAAAYw"]
[Wed Jan 07 23:15:58.209051 2026] [:error] [pid 51128:tid 51140] [client 4.194.8.37:9088] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "aV54rkGjtE8U88mrwue5TQAAAYo"]
[Wed Jan 07 23:15:58.401561 2026] [:error] [pid 30634:tid 30709] [client 4.194.8.37:9177] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "aV54roCIPBibObtmZtsaUQAAANM"]
[Wed Jan 07 23:15:58.578627 2026] [:error] [pid 58294:tid 58314] [client 4.194.8.37:17981] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "aV54rlfzA7c0ITpf3nE-pAAAAJI"]
[Wed Jan 07 23:15:58.803845 2026] [:error] [pid 50905:tid 50914] [client 4.194.8.37:17984] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "aV54rmpNgk5-gt30I7aidgAAAkc"]
[Wed Jan 07 23:15:59.005513 2026] [:error] [pid 50936:tid 50961] [client 4.194.8.37:17957] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aV54r7Dlg80QUdd5qc4g5AAAApc"]
[Wed Jan 07 23:15:59.183932 2026] [:error] [pid 50936:tid 50943] [client 4.194.8.37:17943] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aV54r7Dlg80QUdd5qc4g5QAAAoU"]
[Wed Jan 07 23:15:59.375133 2026] [:error] [pid 30634:tid 30705] [client 4.194.8.37:17959] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aV54r4CIPBibObtmZtsaUgAAAM8"]
[Wed Jan 07 23:15:59.580783 2026] [:error] [pid 51128:tid 51150] [client 4.194.8.37:17933] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aV54r0GjtE8U88mrwue5UgAAAZQ"]
[Wed Jan 07 23:15:59.795644 2026] [:error] [pid 30634:tid 30695] [client 4.194.8.37:9154] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "aV54r4CIPBibObtmZtsaVAAAAMU"]
[Wed Jan 07 23:15:59.989755 2026] [:error] [pid 50936:tid 50953] [client 4.194.8.37:17952] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "aV54r7Dlg80QUdd5qc4g6QAAAo8"]
[Wed Jan 07 23:16:00.188473 2026] [:error] [pid 58294:tid 58303] [client 4.194.8.37:9158] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "aV54sFfzA7c0ITpf3nE-pgAAAIc"]
[Wed Jan 07 23:16:00.396757 2026] [:error] [pid 50936:tid 50959] [client 4.194.8.37:18047] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "aV54sLDlg80QUdd5qc4g6gAAApU"]
[Wed Jan 07 23:16:00.599815 2026] [:error] [pid 58294:tid 58320] [client 4.194.8.37:9206] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "aV54sFfzA7c0ITpf3nE-qAAAAJg"]
[Wed Jan 07 23:16:00.786558 2026] [:error] [pid 58330:tid 58349] [client 4.194.8.37:17926] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "aV54sA8kGngKGK7_wncYWwAAARE"]
[Wed Jan 07 23:16:00.994033 2026] [:error] [pid 50838:tid 50855] [client 4.194.8.37:18027] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "aV54sLSweZ27JIN4H8vcpAAAAc8"]
[Wed Jan 07 23:16:01.240642 2026] [:error] [pid 51128:tid 51147] [client 4.194.8.37:18042] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "aV54sUGjtE8U88mrwue5VQAAAZE"]
[Wed Jan 07 23:16:01.439798 2026] [:error] [pid 58294:tid 58310] [client 4.194.8.37:9200] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aV54sVfzA7c0ITpf3nE-qgAAAI4"]
[Wed Jan 07 23:16:01.684421 2026] [:error] [pid 50936:tid 50949] [client 4.194.8.37:18018] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aV54sbDlg80QUdd5qc4g6wAAAos"]
[Wed Jan 07 23:16:02.011083 2026] [:error] [pid 58294:tid 58316] [client 4.194.8.37:9167] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aV54slfzA7c0ITpf3nE-rwAAAJQ"]
[Wed Jan 07 23:16:02.210407 2026] [:error] [pid 50936:tid 50955] [client 4.194.8.37:17968] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aV54srDlg80QUdd5qc4g7AAAApE"]
[Wed Jan 07 23:16:02.402486 2026] [:error] [pid 58294:tid 58309] [client 4.194.8.37:9164] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "aV54slfzA7c0ITpf3nE-sAAAAI0"]
[Wed Jan 07 23:16:02.601150 2026] [:error] [pid 51128:tid 51140] [client 4.194.8.37:18015] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "aV54skGjtE8U88mrwue5WQAAAYo"]
[Wed Jan 07 23:16:02.793267 2026] [:error] [pid 51128:tid 51146] [client 4.194.8.37:18037] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "aV54skGjtE8U88mrwue5WgAAAZA"]
[Wed Jan 07 23:16:02.983498 2026] [:error] [pid 50838:tid 50846] [client 4.194.8.37:17974] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "aV54srSweZ27JIN4H8vcqAAAAcY"]
[Wed Jan 07 23:16:03.235710 2026] [:error] [pid 51128:tid 51150] [client 4.194.8.37:18024] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "aV54s0GjtE8U88mrwue5XQAAAZQ"]
[Wed Jan 07 23:16:03.489815 2026] [:error] [pid 50838:tid 50856] [client 4.194.8.37:18017] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "aV54s7SweZ27JIN4H8vcqQAAAdA"]
[Wed Jan 07 23:16:03.684866 2026] [:error] [pid 50870:tid 50890] [client 4.194.8.37:17936] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "aV54sxlePfspAt1BzouGKgAAAhI"]
[Wed Jan 07 23:16:03.895764 2026] [:error] [pid 58294:tid 58311] [client 4.194.8.37:17931] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "aV54s1fzA7c0ITpf3nE-sgAAAI8"]
[Wed Jan 07 23:16:04.070154 2026] [:error] [pid 51128:tid 51147] [client 4.194.8.37:17997] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "aV54tEGjtE8U88mrwue5YgAAAZE"]
[Wed Jan 07 23:16:04.247660 2026] [:error] [pid 58330:tid 58356] [client 4.194.8.37:17940] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "aV54tA8kGngKGK7_wncYXgAAARg"]
[Wed Jan 07 23:16:04.490812 2026] [:error] [pid 30634:tid 30694] [client 4.194.8.37:17985] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "aV54tICIPBibObtmZtsaWAAAAMQ"]
[Wed Jan 07 23:16:04.675200 2026] [:error] [pid 30633:tid 30682] [client 4.194.8.37:18013] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "aV54tPZiVWlF7303nMjFbgAAAFM"]
[Wed Jan 07 23:16:04.869453 2026] [:error] [pid 30632:tid 30649] [client 4.194.8.37:9182] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "aV54tOd3_LCpBJzo02cljwAAAA0"]
[Wed Jan 07 23:16:05.058451 2026] [:error] [pid 30632:tid 30648] [client 4.194.8.37:17971] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "aV54ted3_LCpBJzo02clkAAAAAw"]
[Wed Jan 07 23:16:05.277432 2026] [:error] [pid 58294:tid 58297] [client 4.194.8.37:9169] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "aV54tVfzA7c0ITpf3nE-twAAAIE"]
[Wed Jan 07 23:16:05.477367 2026] [:error] [pid 30633:tid 30676] [client 4.194.8.37:17955] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "aV54tfZiVWlF7303nMjFbwAAAE0"]
[Wed Jan 07 23:16:05.674740 2026] [:error] [pid 50870:tid 50892] [client 4.194.8.37:17937] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aV54tRlePfspAt1BzouGKwAAAhQ"]
[Wed Jan 07 23:16:05.898199 2026] [:error] [pid 58330:tid 58344] [client 4.194.8.37:17932] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aV54tQ8kGngKGK7_wncYXwAAAQw"]
[Wed Jan 07 23:16:06.092157 2026] [:error] [pid 50838:tid 50863] [client 4.194.8.37:17921] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aV54trSweZ27JIN4H8vcrAAAAdc"]
[Wed Jan 07 23:16:06.323066 2026] [:error] [pid 50936:tid 50942] [client 4.194.8.37:9192] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aV54trDlg80QUdd5qc4g8AAAAoQ"]
[Wed Jan 07 23:16:06.510462 2026] [:error] [pid 50838:tid 50864] [client 4.194.8.37:9155] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "aV54trSweZ27JIN4H8vcrgAAAdg"]
[Wed Jan 07 23:16:06.691245 2026] [:error] [pid 50905:tid 50911] [client 4.194.8.37:9208] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "aV54tmpNgk5-gt30I7aifwAAAkQ"]
[Wed Jan 07 23:16:06.868033 2026] [:error] [pid 50838:tid 50858] [client 4.194.8.37:9194] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "aV54trSweZ27JIN4H8vcsAAAAdI"]
[Wed Jan 07 23:16:07.069595 2026] [:error] [pid 50838:tid 50853] [client 4.194.8.37:17994] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "aV54t7SweZ27JIN4H8vcsQAAAc0"]
[Wed Jan 07 23:16:07.310697 2026] [:error] [pid 30634:tid 30702] [client 4.194.8.37:17983] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "aV54t4CIPBibObtmZtsaWwAAAMw"]
[Wed Jan 07 23:16:07.518146 2026] [:error] [pid 50905:tid 50918] [client 4.194.8.37:9179] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "aV54t2pNgk5-gt30I7aigQAAAks"]
[Wed Jan 07 23:16:07.712797 2026] [:error] [pid 50936:tid 50957] [client 4.194.8.37:9189] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "aV54t7Dlg80QUdd5qc4g8wAAApM"]
[Wed Jan 07 23:16:07.936415 2026] [:error] [pid 30633:tid 30666] [client 4.194.8.37:17993] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "aV54t_ZiVWlF7303nMjFcQAAAEM"]
[Wed Jan 07 23:16:08.135066 2026] [:error] [pid 30634:tid 30690] [client 4.194.8.37:9129] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV54uICIPBibObtmZtsaXgAAAMA"]
[Wed Jan 07 23:16:08.377447 2026] [:error] [pid 30632:tid 30639] [client 4.194.8.37:18029] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV54uOd3_LCpBJzo02cllAAAAAM"]
[Wed Jan 07 23:16:08.648880 2026] [:error] [pid 30632:tid 30651] [client 4.194.8.37:9119] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV54uOd3_LCpBJzo02cllQAAAA8"]
[Wed Jan 07 23:16:08.849020 2026] [:error] [pid 30632:tid 30645] [client 4.194.8.37:17975] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV54uOd3_LCpBJzo02cllwAAAAk"]
[Wed Jan 07 23:16:09.124807 2026] [:error] [pid 50905:tid 50908] [client 4.194.8.37:9186] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV54uWpNgk5-gt30I7aigwAAAkE"]
[Wed Jan 07 23:16:09.311922 2026] [:error] [pid 51128:tid 51139] [client 4.194.8.37:17929] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV54uUGjtE8U88mrwue5ZQAAAYk"]
[Wed Jan 07 23:16:09.489397 2026] [:error] [pid 50936:tid 50954] [client 4.194.8.37:18025] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV54ubDlg80QUdd5qc4g-gAAApA"]
[Wed Jan 07 23:16:09.695273 2026] [:error] [pid 58294:tid 58308] [client 4.194.8.37:17996] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV54uVfzA7c0ITpf3nE-vQAAAIw"]
[Wed Jan 07 23:16:09.888918 2026] [:error] [pid 58294:tid 58316] [client 4.194.8.37:17992] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "aV54uVfzA7c0ITpf3nE-vgAAAJQ"]
[Wed Jan 07 23:16:10.083156 2026] [:error] [pid 51128:tid 51140] [client 4.194.8.37:9122] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "aV54ukGjtE8U88mrwue5aAAAAYo"]
[Wed Jan 07 23:16:10.279678 2026] [:error] [pid 30633:tid 30665] [client 4.194.8.37:9197] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "aV54uvZiVWlF7303nMjFcgAAAEI"]
[Wed Jan 07 23:16:10.460633 2026] [:error] [pid 50905:tid 50917] [client 4.194.8.37:18014] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "aV54umpNgk5-gt30I7aihgAAAko"]
[Wed Jan 07 23:16:10.642564 2026] [:error] [pid 30633:tid 30669] [client 4.194.8.37:17924] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "aV54uvZiVWlF7303nMjFcwAAAEY"]
[Wed Jan 07 23:16:10.837878 2026] [:error] [pid 50905:tid 50921] [client 4.194.8.37:9089] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "aV54umpNgk5-gt30I7aiiAAAAk4"]
[Wed Jan 07 23:16:11.074121 2026] [:error] [pid 50870:tid 50896] [client 4.194.8.37:18030] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "aV54uxlePfspAt1BzouGLwAAAhg"]
[Wed Jan 07 23:16:11.251063 2026] [:error] [pid 50870:tid 50884] [client 4.194.8.37:17954] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "aV54uxlePfspAt1BzouGMAAAAgw"]
[Wed Jan 07 23:16:11.500145 2026] [:error] [pid 58330:tid 58339] [client 4.194.8.37:18045] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aV54uw8kGngKGK7_wncYYQAAAQc"]
[Wed Jan 07 23:16:11.701464 2026] [:error] [pid 30632:tid 30644] [client 4.194.8.37:17923] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aV54u-d3_LCpBJzo02clnQAAAAg"]
[Wed Jan 07 23:16:11.874251 2026] [:error] [pid 58294:tid 58299] [client 4.194.8.37:9168] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aV54u1fzA7c0ITpf3nE-wgAAAIM"]
[Wed Jan 07 23:16:12.071486 2026] [:error] [pid 30633:tid 30674] [client 4.194.8.37:9174] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aV54vPZiVWlF7303nMjFdwAAAEs"]
[Wed Jan 07 23:16:12.304305 2026] [:error] [pid 50905:tid 50925] [client 4.194.8.37:9176] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "aV54vGpNgk5-gt30I7aiiQAAAlI"]
[Wed Jan 07 23:16:12.480396 2026] [:error] [pid 30632:tid 30653] [client 4.194.8.37:9090] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "aV54vOd3_LCpBJzo02clnwAAABE"]
[Wed Jan 07 23:16:12.662657 2026] [:error] [pid 50905:tid 50913] [client 4.194.8.37:18043] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "aV54vGpNgk5-gt30I7aiigAAAkY"]
[Wed Jan 07 23:16:12.836282 2026] [:error] [pid 51128:tid 51131] [client 4.194.8.37:9162] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "aV54vEGjtE8U88mrwue5bQAAAYE"]
[Wed Jan 07 23:16:13.010119 2026] [:error] [pid 51128:tid 51134] [client 4.194.8.37:17995] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aV54vUGjtE8U88mrwue5bgAAAYQ"]
[Wed Jan 07 23:16:13.202042 2026] [:error] [pid 50905:tid 50923] [client 4.194.8.37:17958] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aV54vWpNgk5-gt30I7aiiwAAAlA"]
[Wed Jan 07 23:16:13.398001 2026] [:error] [pid 50905:tid 50919] [client 4.194.8.37:9203] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aV54vWpNgk5-gt30I7aijAAAAkw"]
[Wed Jan 07 23:16:13.579423 2026] [:error] [pid 30633:tid 30664] [client 4.194.8.37:18019] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aV54vfZiVWlF7303nMjFfwAAAEE"]
[Wed Jan 07 23:16:13.764149 2026] [:error] [pid 50870:tid 50883] [client 4.194.8.37:18034] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "aV54vRlePfspAt1BzouGMwAAAgs"]
[Wed Jan 07 23:16:13.938835 2026] [:error] [pid 51128:tid 51152] [client 4.194.8.37:9196] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "aV54vUGjtE8U88mrwue5bwAAAZY"]
[Wed Jan 07 23:16:14.134276 2026] [:error] [pid 50905:tid 50910] [client 4.194.8.37:18044] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "aV54vmpNgk5-gt30I7aijwAAAkM"]
[Wed Jan 07 23:16:14.308327 2026] [:error] [pid 30633:tid 30682] [client 4.194.8.37:9193] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "aV54vvZiVWlF7303nMjFgwAAAFM"]
[Wed Jan 07 23:16:14.543736 2026] [:error] [pid 51128:tid 51138] [client 4.194.8.37:18046] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "aV54vkGjtE8U88mrwue5cgAAAYg"]
[Wed Jan 07 23:16:14.725027 2026] [:error] [pid 58330:tid 58353] [client 4.194.8.37:9026] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "aV54vg8kGngKGK7_wncYYwAAARU"]
[Wed Jan 07 23:16:14.919472 2026] [:error] [pid 50905:tid 50911] [client 4.194.8.37:18000] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "aV54vmpNgk5-gt30I7aikQAAAkQ"]
[Wed Jan 07 23:16:15.094355 2026] [:error] [pid 50905:tid 50909] [client 4.194.8.37:18033] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "aV54v2pNgk5-gt30I7aikgAAAkI"]
[Wed Jan 07 23:16:15.274952 2026] [:error] [pid 50905:tid 50912] [client 4.194.8.37:17964] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "aV54v2pNgk5-gt30I7aikwAAAkU"]
[Wed Jan 07 23:16:15.450838 2026] [:error] [pid 50905:tid 50914] [client 4.194.8.37:18026] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "aV54v2pNgk5-gt30I7ailAAAAkc"]
[Wed Jan 07 23:16:15.669624 2026] [:error] [pid 50905:tid 50929] [client 4.194.8.37:17987] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "aV54v2pNgk5-gt30I7ailgAAAlY"]
[Wed Jan 07 23:16:15.856235 2026] [:error] [pid 50905:tid 50927] [client 4.194.8.37:17934] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "aV54v2pNgk5-gt30I7aimAAAAlQ"]
[Wed Jan 07 23:16:16.049020 2026] [:error] [pid 30634:tid 30691] [client 4.194.8.37:9181] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "aV54wICIPBibObtmZtsaXwAAAME"]
[Wed Jan 07 23:16:16.222648 2026] [:error] [pid 30633:tid 30676] [client 4.194.8.37:9152] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "aV54wPZiVWlF7303nMjFhAAAAE0"]
[Wed Jan 07 23:16:16.429217 2026] [:error] [pid 50905:tid 50913] [client 4.194.8.37:9045] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "aV54wGpNgk5-gt30I7ainQAAAkY"]
[Wed Jan 07 23:16:16.629354 2026] [:error] [pid 30632:tid 30637] [client 4.194.8.37:17939] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "aV54wOd3_LCpBJzo02clpwAAAAE"]
[Wed Jan 07 23:16:16.805507 2026] [:error] [pid 30632:tid 30657] [client 4.194.8.37:9175] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "aV54wOd3_LCpBJzo02clqQAAABU"]
[Wed Jan 07 23:16:16.997649 2026] [:error] [pid 50870:tid 50891] [client 4.194.8.37:17967] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "aV54wBlePfspAt1BzouGNwAAAhM"]
[Wed Jan 07 23:16:17.177901 2026] [:error] [pid 58330:tid 58343] [client 4.194.8.37:9212] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "aV54wQ8kGngKGK7_wncYZQAAAQs"]
[Wed Jan 07 23:16:17.363336 2026] [:error] [pid 51128:tid 51144] [client 4.194.8.37:9145] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "aV54wUGjtE8U88mrwue5dAAAAY4"]
[Wed Jan 07 23:16:17.579202 2026] [:error] [pid 30632:tid 30655] [client 4.194.8.37:17945] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "aV54wed3_LCpBJzo02clrAAAABM"]
[Wed Jan 07 23:16:17.771296 2026] [:error] [pid 30632:tid 30638] [client 4.194.8.37:9114] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "aV54wed3_LCpBJzo02clrgAAAAI"]
[Wed Jan 07 23:16:17.954090 2026] [:error] [pid 30633:tid 30666] [client 4.194.8.37:9183] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "aV54wfZiVWlF7303nMjFhQAAAEM"]
[Wed Jan 07 23:16:18.129624 2026] [:error] [pid 30633:tid 30686] [client 4.194.8.37:9165] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "aV54wvZiVWlF7303nMjFhgAAAFc"]
[Wed Jan 07 23:16:18.308381 2026] [:error] [pid 50905:tid 50922] [client 4.194.8.37:9141] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aV54wmpNgk5-gt30I7aioAAAAk8"]
[Wed Jan 07 23:16:18.514438 2026] [:error] [pid 58294:tid 58305] [client 4.194.8.37:9171] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aV54wlfzA7c0ITpf3nE-xAAAAIk"]
[Wed Jan 07 23:16:18.737104 2026] [:error] [pid 58294:tid 58306] [client 4.194.8.37:17980] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aV54wlfzA7c0ITpf3nE-xgAAAIo"]
[Wed Jan 07 23:16:18.935670 2026] [:error] [pid 30632:tid 30644] [client 4.194.8.37:9111] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aV54wud3_LCpBJzo02clrwAAAAg"]
[Wed Jan 07 23:16:19.117790 2026] [:error] [pid 50905:tid 50928] [client 4.194.8.37:18019] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "aV54w2pNgk5-gt30I7aipQAAAlU"]
[Wed Jan 07 23:16:19.300650 2026] [:error] [pid 58294:tid 58297] [client 4.194.8.37:9153] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "aV54w1fzA7c0ITpf3nE-xwAAAIE"]
[Wed Jan 07 23:16:19.526124 2026] [:error] [pid 50905:tid 50914] [client 4.194.8.37:9107] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "aV54w2pNgk5-gt30I7aiqAAAAkc"]
[Wed Jan 07 23:16:19.711462 2026] [:error] [pid 58294:tid 58303] [client 4.194.8.37:17986] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "aV54w1fzA7c0ITpf3nE-yAAAAIc"]
[Wed Jan 07 23:16:19.889465 2026] [:error] [pid 30632:tid 30653] [client 4.194.8.37:9109] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "aV54w-d3_LCpBJzo02clsAAAABE"]
[Wed Jan 07 23:16:20.080413 2026] [:error] [pid 50870:tid 50882] [client 4.194.8.37:17977] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "aV54xBlePfspAt1BzouGOQAAAgo"]
[Wed Jan 07 23:16:20.266820 2026] [:error] [pid 30632:tid 30652] [client 4.194.8.37:18008] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "aV54xOd3_LCpBJzo02clsgAAABA"]
[Wed Jan 07 23:16:20.453375 2026] [:error] [pid 50870:tid 50892] [client 4.194.8.37:17942] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "aV54xBlePfspAt1BzouGOgAAAhQ"]
[Wed Jan 07 23:16:20.628839 2026] [:error] [pid 50870:tid 50873] [client 4.194.8.37:9199] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "aV54xBlePfspAt1BzouGPAAAAgE"]
[Wed Jan 07 23:16:20.814727 2026] [:error] [pid 50870:tid 50895] [client 4.194.8.37:17965] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "aV54xBlePfspAt1BzouGPgAAAhc"]
[Wed Jan 07 23:16:21.008950 2026] [:error] [pid 30632:tid 30648] [client 4.194.8.37:17930] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "aV54xed3_LCpBJzo02cltgAAAAw"]
[Wed Jan 07 23:16:21.183987 2026] [:error] [pid 30633:tid 30687] [client 4.194.8.37:9151] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "aV54xfZiVWlF7303nMjFjAAAAFg"]
[Wed Jan 07 23:16:21.364912 2026] [:error] [pid 50870:tid 50881] [client 4.194.8.37:17976] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "aV54xRlePfspAt1BzouGQAAAAgk"]
[Wed Jan 07 23:16:21.572690 2026] [:error] [pid 50905:tid 50916] [client 4.194.8.37:9112] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "aV54xWpNgk5-gt30I7airQAAAkk"]
[Wed Jan 07 23:16:21.750038 2026] [:error] [pid 51128:tid 51142] [client 4.194.8.37:9098] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "aV54xUGjtE8U88mrwue5eAAAAYw"]
[Wed Jan 07 23:16:21.931463 2026] [:error] [pid 30633:tid 30680] [client 4.194.8.37:18041] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "aV54xfZiVWlF7303nMjFjwAAAFE"]
[Wed Jan 07 23:16:22.125661 2026] [:error] [pid 30633:tid 30668] [client 4.194.8.37:9091] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "aV54xvZiVWlF7303nMjFkAAAAEU"]
[Wed Jan 07 23:16:22.304792 2026] [:error] [pid 50905:tid 50931] [client 4.194.8.37:9123] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "aV54xmpNgk5-gt30I7airwAAAlg"]
[Wed Jan 07 23:16:22.482493 2026] [:error] [pid 30633:tid 30670] [client 4.194.8.37:9128] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "aV54xvZiVWlF7303nMjFkQAAAEc"]
[Wed Jan 07 23:16:22.663402 2026] [:error] [pid 50870:tid 50876] [client 4.194.8.37:17956] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "aV54xhlePfspAt1BzouGQgAAAgQ"]
[Wed Jan 07 23:16:22.841577 2026] [:error] [pid 30632:tid 30660] [client 4.194.8.37:18003] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "aV54xud3_LCpBJzo02cluAAAABg"]
[Wed Jan 07 23:16:23.055532 2026] [:error] [pid 51128:tid 51140] [client 4.194.8.37:9105] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "aV54x0GjtE8U88mrwue5ewAAAYo"]
[Wed Jan 07 23:16:23.236265 2026] [:error] [pid 58330:tid 58352] [client 4.194.8.37:9191] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "aV54xw8kGngKGK7_wncYZgAAARQ"]
[Wed Jan 07 23:16:23.425778 2026] [:error] [pid 50870:tid 50883] [client 4.194.8.37:17969] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "aV54xxlePfspAt1BzouGRQAAAgs"]
[Wed Jan 07 23:16:23.619751 2026] [:error] [pid 51128:tid 51149] [client 4.194.8.37:9095] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "aV54x0GjtE8U88mrwue5fAAAAZM"]
[Wed Jan 07 23:16:23.792644 2026] [:error] [pid 50838:tid 50847] [client 4.194.8.37:18010] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "aV54x7SweZ27JIN4H8vctAAAAcc"]
[Wed Jan 07 23:16:24.020277 2026] [:error] [pid 30633:tid 30682] [client 4.194.8.37:9031] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "aV54yPZiVWlF7303nMjFlQAAAFM"]
[Wed Jan 07 23:16:24.211193 2026] [:error] [pid 30633:tid 30666] [client 4.194.8.37:9156] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "aV54yPZiVWlF7303nMjFmAAAAEM"]
[Wed Jan 07 23:16:24.409110 2026] [:error] [pid 30633:tid 30686] [client 4.194.8.37:9102] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "aV54yPZiVWlF7303nMjFmQAAAFc"]
[Wed Jan 07 23:16:24.582851 2026] [:error] [pid 30632:tid 30639] [client 4.194.8.37:9110] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "aV54yOd3_LCpBJzo02cluwAAAAM"]
[Wed Jan 07 23:16:24.774419 2026] [:error] [pid 30633:tid 30684] [client 4.194.8.37:9214] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "aV54yPZiVWlF7303nMjFnQAAAFU"]
[Wed Jan 07 23:16:24.949884 2026] [:error] [pid 50870:tid 50877] [client 4.194.8.37:9099] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "aV54yBlePfspAt1BzouGRgAAAgU"]
[Wed Jan 07 23:16:25.148055 2026] [:error] [pid 50905:tid 50930] [client 4.194.8.37:9187] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "aV54yWpNgk5-gt30I7aisAAAAlc"]
[Wed Jan 07 23:16:25.321788 2026] [:error] [pid 50905:tid 50915] [client 4.194.8.37:9198] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "aV54yWpNgk5-gt30I7aiswAAAkg"]
[Wed Jan 07 23:16:25.501495 2026] [:error] [pid 50870:tid 50889] [client 4.194.8.37:9120] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "aV54yRlePfspAt1BzouGRwAAAhE"]
[Wed Jan 07 23:16:25.688169 2026] [:error] [pid 51128:tid 51131] [client 4.194.8.37:9133] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "aV54yUGjtE8U88mrwue5fgAAAYE"]
[Wed Jan 07 23:16:25.873083 2026] [:error] [pid 30633:tid 30674] [client 4.194.8.37:9043] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "aV54yfZiVWlF7303nMjFnwAAAEs"]
[Wed Jan 07 23:16:26.069909 2026] [:error] [pid 30632:tid 30637] [client 4.194.8.37:9073] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "aV54yud3_LCpBJzo02clvAAAAAE"]
[Wed Jan 07 23:16:26.281517 2026] [:error] [pid 30632:tid 30645] [client 4.194.8.37:17948] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "aV54yud3_LCpBJzo02clvQAAAAk"]
[Wed Jan 07 23:16:26.456322 2026] [:error] [pid 51128:tid 51147] [client 4.194.8.37:17989] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "aV54ykGjtE8U88mrwue5ggAAAZE"]
[Wed Jan 07 23:16:26.636810 2026] [:error] [pid 30633:tid 30670] [client 4.194.8.37:9138] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aV54yvZiVWlF7303nMjFoQAAAEc"]
[Wed Jan 07 23:16:26.829388 2026] [:error] [pid 51128:tid 51133] [client 4.194.8.37:9202] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aV54ykGjtE8U88mrwue5hAAAAYM"]
[Wed Jan 07 23:16:27.010527 2026] [:error] [pid 30632:tid 30636] [client 4.194.8.37:8962] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aV54y-d3_LCpBJzo02clvwAAAAA"]
[Wed Jan 07 23:16:27.195688 2026] [:error] [pid 50870:tid 50875] [client 4.194.8.37:9101] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aV54yxlePfspAt1BzouGSwAAAgM"]
[Wed Jan 07 23:16:27.386786 2026] [:error] [pid 50870:tid 50891] [client 4.194.8.37:17973] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "aV54yxlePfspAt1BzouGTAAAAhM"]
[Wed Jan 07 23:16:27.563461 2026] [:error] [pid 50870:tid 50892] [client 4.194.8.37:9035] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "aV54yxlePfspAt1BzouGTwAAAhQ"]
[Wed Jan 07 23:16:27.779798 2026] [:error] [pid 50905:tid 50911] [client 4.194.8.37:9096] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "aV54y2pNgk5-gt30I7aitQAAAkQ"]
[Wed Jan 07 23:16:27.957364 2026] [:error] [pid 50905:tid 50929] [client 4.194.8.37:9095] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "aV54y2pNgk5-gt30I7aitwAAAlY"]
[Wed Jan 07 23:16:28.132523 2026] [:error] [pid 50905:tid 50926] [client 4.194.8.37:9051] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "aV54zGpNgk5-gt30I7aiugAAAlM"]
[Wed Jan 07 23:16:28.311722 2026] [:error] [pid 50870:tid 50895] [client 4.194.8.37:17982] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "aV54zBlePfspAt1BzouGUgAAAhc"]
[Wed Jan 07 23:16:28.514110 2026] [:error] [pid 50838:tid 50857] [client 4.194.8.37:9025] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "aV54zLSweZ27JIN4H8vctQAAAdE"]
[Wed Jan 07 23:16:28.725602 2026] [:error] [pid 51128:tid 51132] [client 4.194.8.37:9163] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "aV54zEGjtE8U88mrwue5iAAAAYI"]
[Wed Jan 07 23:16:28.923874 2026] [:error] [pid 58294:tid 58310] [client 4.194.8.37:9136] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "aV54zFfzA7c0ITpf3nE-zAAAAI4"]
[Wed Jan 07 23:16:29.176704 2026] [:error] [pid 58294:tid 58308] [client 4.194.8.37:9195] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "aV54zVfzA7c0ITpf3nE-zwAAAIw"]
[Wed Jan 07 23:16:29.408455 2026] [:error] [pid 30633:tid 30685] [client 4.194.8.37:9146] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "aV54zfZiVWlF7303nMjFpQAAAFY"]
[Wed Jan 07 23:16:29.600648 2026] [:error] [pid 30633:tid 30682] [client 4.194.8.37:9127] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "aV54zfZiVWlF7303nMjFpgAAAFM"]
[Wed Jan 07 23:16:29.790237 2026] [:error] [pid 58294:tid 58312] [client 4.194.8.37:17963] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "aV54zVfzA7c0ITpf3nE-0QAAAJA"]
[Wed Jan 07 23:16:29.990959 2026] [:error] [pid 30632:tid 30651] [client 4.194.8.37:9161] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "aV54zed3_LCpBJzo02clwAAAAA8"]
[Wed Jan 07 23:16:30.192531 2026] [:error] [pid 50936:tid 50959] [client 4.194.8.37:9118] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "aV54zrDlg80QUdd5qc4g_QAAApU"]
[Wed Jan 07 23:16:30.366668 2026] [:error] [pid 50905:tid 50914] [client 4.194.8.37:9134] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "aV54zmpNgk5-gt30I7aivAAAAkc"]
[Wed Jan 07 23:16:30.583256 2026] [:error] [pid 30632:tid 30656] [client 4.194.8.37:9185] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "aV54zud3_LCpBJzo02clwQAAABQ"]
[Wed Jan 07 23:16:30.758012 2026] [:error] [pid 58294:tid 58320] [client 4.194.8.37:9054] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "aV54zlfzA7c0ITpf3nE-0gAAAJg"]
[Wed Jan 07 23:16:30.942151 2026] [:error] [pid 58294:tid 58315] [client 4.194.8.37:9121] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "aV54zlfzA7c0ITpf3nE-1wAAAJM"]
[Wed Jan 07 23:16:31.115714 2026] [:error] [pid 50936:tid 50958] [client 4.194.8.37:9157] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "aV54z7Dlg80QUdd5qc4g_gAAApQ"]
[Wed Jan 07 23:16:31.294433 2026] [:error] [pid 50936:tid 50955] [client 4.194.8.37:9144] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "aV54z7Dlg80QUdd5qc4hAAAAApE"]
[Wed Jan 07 23:16:31.471368 2026] [:error] [pid 30633:tid 30683] [client 4.194.8.37:9093] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "aV54z_ZiVWlF7303nMjFqQAAAFQ"]
[Wed Jan 07 23:16:31.666094 2026] [:error] [pid 30633:tid 30673] [client 4.194.8.37:9092] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "aV54z_ZiVWlF7303nMjFqgAAAEo"]
[Wed Jan 07 23:16:31.856465 2026] [:error] [pid 30633:tid 30669] [client 4.194.8.37:9029] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "aV54z_ZiVWlF7303nMjFrQAAAEY"]
[Wed Jan 07 23:16:32.036350 2026] [:error] [pid 30633:tid 30684] [client 4.194.8.37:9213] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aV540PZiVWlF7303nMjFrgAAAFU"]
[Wed Jan 07 23:16:32.248213 2026] [:error] [pid 50936:tid 50942] [client 4.194.8.37:9066] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aV540LDlg80QUdd5qc4hAwAAAoQ"]
[Wed Jan 07 23:16:32.427035 2026] [:error] [pid 30633:tid 30680] [client 4.194.8.37:9117] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aV540PZiVWlF7303nMjFsgAAAFE"]
[Wed Jan 07 23:16:32.617823 2026] [:error] [pid 58294:tid 58306] [client 4.194.8.37:9097] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aV540FfzA7c0ITpf3nE-2AAAAIo"]
[Wed Jan 07 23:16:32.792975 2026] [:error] [pid 50905:tid 50916] [client 4.194.8.37:9086] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aV540GpNgk5-gt30I7aivQAAAkk"]
[Wed Jan 07 23:16:32.998097 2026] [:error] [pid 50838:tid 50855] [client 4.194.8.37:9135] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aV540LSweZ27JIN4H8vctwAAAc8"]
[Wed Jan 07 23:16:33.181500 2026] [:error] [pid 58294:tid 58314] [client 4.194.8.37:9172] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aV540VfzA7c0ITpf3nE-2wAAAJI"]
[Wed Jan 07 23:16:33.394119 2026] [:error] [pid 58294:tid 58317] [client 4.194.8.37:8978] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aV540VfzA7c0ITpf3nE-3QAAAJU"]
[Wed Jan 07 23:16:33.568492 2026] [:error] [pid 51128:tid 51153] [client 4.194.8.37:17961] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV540UGjtE8U88mrwue5kAAAAZc"]
[Wed Jan 07 23:16:33.742507 2026] [:error] [pid 50936:tid 50945] [client 4.194.8.37:9059] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV540bDlg80QUdd5qc4hCAAAAoc"]
[Wed Jan 07 23:16:33.964244 2026] [:error] [pid 50870:tid 50884] [client 4.194.8.37:9166] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV540RlePfspAt1BzouGVAAAAgw"]
[Wed Jan 07 23:16:34.164601 2026] [:error] [pid 30633:tid 30677] [client 4.194.8.37:9115] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "aV540vZiVWlF7303nMjFtQAAAE4"]
[Wed Jan 07 23:16:34.346198 2026] [:error] [pid 30633:tid 30664] [client 4.194.8.37:9062] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV540vZiVWlF7303nMjFtgAAAEE"]
[Wed Jan 07 23:16:34.523731 2026] [:error] [pid 58330:tid 58348] [client 4.194.8.37:8961] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV540g8kGngKGK7_wncYawAAARA"]
[Wed Jan 07 23:16:34.697684 2026] [:error] [pid 58330:tid 58341] [client 4.194.8.37:9188] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV540g8kGngKGK7_wncYbAAAAQk"]
[Wed Jan 07 23:16:34.874481 2026] [:error] [pid 30633:tid 30666] [client 4.194.8.37:8966] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "aV540vZiVWlF7303nMjFuQAAAEM"]
[Wed Jan 07 23:16:35.059130 2026] [:error] [pid 30632:tid 30638] [client 4.194.8.37:9210] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "aV540-d3_LCpBJzo02clxAAAAAI"]
[Wed Jan 07 23:16:35.238335 2026] [:error] [pid 58330:tid 58354] [client 4.194.8.37:9116] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "aV540w8kGngKGK7_wncYcAAAARY"]
[Wed Jan 07 23:16:35.433075 2026] [:error] [pid 58330:tid 58356] [client 4.194.8.37:9060] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "aV540w8kGngKGK7_wncYcQAAARg"]
[Wed Jan 07 23:16:35.653908 2026] [:error] [pid 58330:tid 58345] [client 4.194.8.37:9065] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "aV540w8kGngKGK7_wncYcwAAAQ0"]
[Wed Jan 07 23:16:35.829175 2026] [:error] [pid 51128:tid 51131] [client 4.194.8.37:9211] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aV5400GjtE8U88mrwue5kQAAAYE"]
[Wed Jan 07 23:16:36.046439 2026] [:error] [pid 51128:tid 51148] [client 4.194.8.37:9040] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aV541EGjtE8U88mrwue5kgAAAZI"]
[Wed Jan 07 23:16:36.220077 2026] [:error] [pid 50870:tid 50887] [client 4.194.8.37:9087] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aV541BlePfspAt1BzouGVgAAAg8"]
[Wed Jan 07 23:16:36.398911 2026] [:error] [pid 51128:tid 51152] [client 4.194.8.37:8973] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aV541EGjtE8U88mrwue5kwAAAZY"]
[Wed Jan 07 23:16:36.586836 2026] [:error] [pid 51128:tid 51137] [client 4.194.8.37:9074] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aV541EGjtE8U88mrwue5lgAAAYc"]
[Wed Jan 07 23:16:36.773688 2026] [:error] [pid 51128:tid 51135] [client 4.194.8.37:9143] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aV541EGjtE8U88mrwue5lwAAAYU"]
[Wed Jan 07 23:16:36.954171 2026] [:error] [pid 58294:tid 58310] [client 4.194.8.37:9130] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aV541FfzA7c0ITpf3nE-3wAAAI4"]
[Wed Jan 07 23:16:37.130062 2026] [:error] [pid 50905:tid 50915] [client 4.194.8.37:8987] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aV541WpNgk5-gt30I7aiwgAAAkg"]
[Wed Jan 07 23:16:37.306894 2026] [:error] [pid 30634:tid 30707] [client 4.194.8.37:9173] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aV541YCIPBibObtmZtsaZAAAANE"]
[Wed Jan 07 23:16:37.483590 2026] [:error] [pid 50838:tid 50844] [client 4.194.8.37:8969] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aV541bSweZ27JIN4H8vcuAAAAcQ"]
[Wed Jan 07 23:16:37.665907 2026] [:error] [pid 30633:tid 30683] [client 4.194.8.37:9204] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aV541fZiVWlF7303nMjFugAAAFQ"]
[Wed Jan 07 23:16:37.839456 2026] [:error] [pid 58330:tid 58333] [client 4.194.8.37:9041] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aV541Q8kGngKGK7_wncYdgAAAQE"]
[Wed Jan 07 23:16:38.037664 2026] [:error] [pid 58330:tid 58342] [client 4.194.8.37:9125] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "aV541g8kGngKGK7_wncYeAAAAQo"]
[Wed Jan 07 23:16:38.242628 2026] [:error] [pid 30633:tid 30669] [client 4.194.8.37:18002] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "aV541vZiVWlF7303nMjFvAAAAEY"]
[Wed Jan 07 23:16:38.418760 2026] [:error] [pid 30632:tid 30660] [client 4.194.8.37:9053] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "aV541ud3_LCpBJzo02clygAAABg"]
[Wed Jan 07 23:16:38.602173 2026] [:error] [pid 58330:tid 58352] [client 4.194.8.37:17978] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "aV541g8kGngKGK7_wncYegAAARQ"]
[Wed Jan 07 23:16:38.783985 2026] [:error] [pid 30633:tid 30686] [client 4.194.8.37:9132] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "aV541vZiVWlF7303nMjFvQAAAFc"]
[Wed Jan 07 23:16:38.964187 2026] [:error] [pid 58294:tid 58318] [client 4.194.8.37:9108] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "aV541lfzA7c0ITpf3nE-4AAAAJY"]
[Wed Jan 07 23:16:39.166430 2026] [:error] [pid 30632:tid 30645] [client 4.194.8.37:9207] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "aV541-d3_LCpBJzo02clzwAAAAk"]
[Wed Jan 07 23:16:39.340192 2026] [:error] [pid 58294:tid 58298] [client 4.194.8.37:9113] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "aV5411fzA7c0ITpf3nE-4gAAAII"]
[Wed Jan 07 23:16:39.534662 2026] [:error] [pid 58294:tid 58316] [client 4.194.8.37:9085] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "aV5411fzA7c0ITpf3nE-4wAAAJQ"]
[Wed Jan 07 23:16:39.717400 2026] [:error] [pid 58330:tid 58349] [client 4.194.8.37:9170] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "aV541w8kGngKGK7_wncYfQAAARE"]
[Wed Jan 07 23:16:39.896285 2026] [:error] [pid 30633:tid 30684] [client 4.194.8.37:8970] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "aV541_ZiVWlF7303nMjFvgAAAFU"]
[Wed Jan 07 23:16:40.072484 2026] [:error] [pid 30633:tid 30679] [client 4.194.8.37:9070] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "aV542PZiVWlF7303nMjFvwAAAFA"]
[Wed Jan 07 23:16:40.265891 2026] [:error] [pid 58330:tid 58337] [client 4.194.8.37:9039] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "aV542A8kGngKGK7_wncYgAAAAQU"]
[Wed Jan 07 23:16:40.441472 2026] [:error] [pid 58330:tid 58334] [client 4.194.8.37:9148] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "aV542A8kGngKGK7_wncYgQAAAQI"]
[Wed Jan 07 23:16:40.625183 2026] [:error] [pid 58330:tid 58354] [client 4.194.8.37:9071] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "aV542A8kGngKGK7_wncYgwAAARY"]
[Wed Jan 07 23:16:40.799607 2026] [:error] [pid 58330:tid 58344] [client 4.194.8.37:8898] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "aV542A8kGngKGK7_wncYhQAAAQw"]
[Wed Jan 07 23:16:40.973947 2026] [:error] [pid 50838:tid 50846] [client 4.194.8.37:8907] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "aV542LSweZ27JIN4H8vcvQAAAcY"]
[Wed Jan 07 23:16:41.153750 2026] [:error] [pid 50936:tid 50947] [client 4.194.8.37:8985] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "aV542bDlg80QUdd5qc4hDgAAAok"]
[Wed Jan 07 23:16:41.335587 2026] [:error] [pid 50936:tid 50959] [client 4.194.8.37:8986] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "aV542bDlg80QUdd5qc4hDwAAApU"]
[Wed Jan 07 23:16:41.510394 2026] [:error] [pid 58330:tid 58333] [client 4.194.8.37:9028] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "aV542Q8kGngKGK7_wncYigAAAQE"]
[Wed Jan 07 23:16:41.700087 2026] [:error] [pid 50838:tid 50859] [client 4.194.8.37:8960] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rlpc.php"] [unique_id "aV542bSweZ27JIN4H8vcvwAAAdM"]
[Wed Jan 07 23:16:41.903447 2026] [:error] [pid 50936:tid 50949] [client 4.194.8.37:9061] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rlpc.php"] [unique_id "aV542bDlg80QUdd5qc4hEAAAAos"]
[Wed Jan 07 23:16:42.085528 2026] [:error] [pid 50936:tid 50955] [client 4.194.8.37:9178] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rlpc.php"] [unique_id "aV542rDlg80QUdd5qc4hEQAAApE"]
[Wed Jan 07 23:16:42.286261 2026] [:error] [pid 50936:tid 50938] [client 4.194.8.37:9014] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rlpc.php"] [unique_id "aV542rDlg80QUdd5qc4hEgAAAoA"]
[Wed Jan 07 23:16:42.464651 2026] [:error] [pid 58294:tid 58300] [client 4.194.8.37:9106] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p.php7"] [unique_id "aV542lfzA7c0ITpf3nE-5gAAAIQ"]
[Wed Jan 07 23:16:42.643324 2026] [:error] [pid 58294:tid 58311] [client 4.194.8.37:9038] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p.php7"] [unique_id "aV542lfzA7c0ITpf3nE-6AAAAI8"]
[Wed Jan 07 23:16:42.816761 2026] [:error] [pid 50936:tid 50957] [client 4.194.8.37:9050] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p.php7"] [unique_id "aV542rDlg80QUdd5qc4hFAAAApM"]
[Wed Jan 07 23:16:42.994723 2026] [:error] [pid 50838:tid 50863] [client 4.194.8.37:9075] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p.php7"] [unique_id "aV542rSweZ27JIN4H8vcwAAAAdc"]
[Wed Jan 07 23:16:43.190434 2026] [:error] [pid 50838:tid 50842] [client 4.194.8.37:9036] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aV5427SweZ27JIN4H8vcwQAAAcI"]
[Wed Jan 07 23:16:43.369376 2026] [:error] [pid 50936:tid 50952] [client 4.194.8.37:8971] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aV5427Dlg80QUdd5qc4hGQAAAo4"]
[Wed Jan 07 23:16:43.561630 2026] [:error] [pid 50936:tid 50960] [client 4.194.8.37:8852] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aV5427Dlg80QUdd5qc4hHAAAApY"]
[Wed Jan 07 23:16:43.738244 2026] [:error] [pid 50936:tid 50947] [client 4.194.8.37:9016] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aV5427Dlg80QUdd5qc4hHgAAAok"]
[Wed Jan 07 23:16:43.919305 2026] [:error] [pid 58294:tid 58315] [client 4.194.8.37:9064] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "aV5421fzA7c0ITpf3nE-6QAAAJM"]
[Wed Jan 07 23:16:44.098810 2026] [:error] [pid 58294:tid 58301] [client 4.194.8.37:9000] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "aV543FfzA7c0ITpf3nE-7AAAAIU"]
[Wed Jan 07 23:16:44.274864 2026] [:error] [pid 58330:tid 58352] [client 4.194.8.37:9137] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "aV543A8kGngKGK7_wncYjAAAARQ"]
[Wed Jan 07 23:16:44.465828 2026] [:error] [pid 50936:tid 50938] [client 4.194.8.37:9052] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "aV543LDlg80QUdd5qc4hJAAAAoA"]
[Wed Jan 07 23:16:44.657054 2026] [:error] [pid 50838:tid 50853] [client 4.194.8.37:9103] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "aV543LSweZ27JIN4H8vcxAAAAc0"]
[Wed Jan 07 23:16:44.850642 2026] [:error] [pid 50838:tid 50852] [client 4.194.8.37:9184] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "aV543LSweZ27JIN4H8vcxQAAAcw"]
[Wed Jan 07 23:16:45.032963 2026] [:error] [pid 58330:tid 58351] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/k90.php
[Wed Jan 07 23:16:45.124466 2026] [:error] [pid 58330:tid 58336] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/taff.php
[Wed Jan 07 23:16:45.214920 2026] [:error] [pid 58330:tid 58348] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Wed Jan 07 23:16:45.306039 2026] [:error] [pid 58330:tid 58341] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Wed Jan 07 23:16:45.405234 2026] [:error] [pid 58330:tid 58337] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/ssxsl.php
[Wed Jan 07 23:16:45.494957 2026] [:error] [pid 58330:tid 58334] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/AE5VAL.php
[Wed Jan 07 23:16:45.584887 2026] [:error] [pid 58330:tid 58350] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Wed Jan 07 23:16:45.676592 2026] [:error] [pid 58330:tid 58354] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/gely.php
[Wed Jan 07 23:16:45.768436 2026] [:error] [pid 58330:tid 58356] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/xBrain.php
[Wed Jan 07 23:16:45.860310 2026] [:error] [pid 58330:tid 58344] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/sagafif.php
[Wed Jan 07 23:16:45.951868 2026] [:error] [pid 58330:tid 58339] [client 4.194.8.37:9173] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trc.php
[Wed Jan 07 23:16:46.039209 2026] [:error] [pid 58330:tid 58355] [client 4.194.8.37:9173] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "aV543g8kGngKGK7_wncYmQAAARc"]
[Wed Jan 07 23:16:46.213174 2026] [:error] [pid 50936:tid 50941] [client 4.194.8.37:9024] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "aV543rDlg80QUdd5qc4hJwAAAoM"]
[Wed Jan 07 23:16:46.388322 2026] [:error] [pid 58294:tid 58317] [client 4.194.8.37:9131] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "aV543lfzA7c0ITpf3nE-8QAAAJU"]
[Wed Jan 07 23:16:46.574184 2026] [:error] [pid 30632:tid 30656] [client 4.194.8.37:9048] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "aV543ud3_LCpBJzo02cl0QAAABQ"]
[Wed Jan 07 23:16:46.789953 2026] [:error] [pid 58294:tid 58307] [client 4.194.8.37:8965] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aV543lfzA7c0ITpf3nE-8wAAAIs"]
[Wed Jan 07 23:16:46.971974 2026] [:error] [pid 58294:tid 58318] [client 4.194.8.37:9044] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aV543lfzA7c0ITpf3nE-9AAAAJY"]
[Wed Jan 07 23:16:47.175409 2026] [:error] [pid 50838:tid 50847] [client 4.194.8.37:9057] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aV5437SweZ27JIN4H8vcxwAAAcc"]
[Wed Jan 07 23:16:47.355463 2026] [:error] [pid 50838:tid 50857] [client 4.194.8.37:8968] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aV5437SweZ27JIN4H8vcyQAAAdE"]
[Wed Jan 07 23:16:47.533378 2026] [:error] [pid 51128:tid 51145] [client 4.194.8.37:17972] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "aV5430GjtE8U88mrwue5nQAAAY8"]
[Wed Jan 07 23:16:47.725109 2026] [:error] [pid 30633:tid 30672] [client 4.194.8.37:8972] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "aV543_ZiVWlF7303nMjFyAAAAEk"]
[Wed Jan 07 23:16:47.920252 2026] [:error] [pid 50838:tid 50844] [client 4.194.8.37:9027] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "aV5437SweZ27JIN4H8vcygAAAcQ"]
[Wed Jan 07 23:16:48.103657 2026] [:error] [pid 30632:tid 30658] [client 4.194.8.37:8948] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "aV544Od3_LCpBJzo02cl1AAAABY"]
[Wed Jan 07 23:16:48.296263 2026] [:error] [pid 30632:tid 30653] [client 4.194.8.37:9180] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "aV544Od3_LCpBJzo02cl1QAAABE"]
[Wed Jan 07 23:16:48.476023 2026] [:error] [pid 30632:tid 30643] [client 4.194.8.37:9020] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "aV544Od3_LCpBJzo02cl1gAAAAc"]
[Wed Jan 07 23:16:48.686510 2026] [:error] [pid 50905:tid 50920] [client 4.194.8.37:8916] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "aV544GpNgk5-gt30I7aixgAAAk0"]
[Wed Jan 07 23:16:48.862249 2026] [:error] [pid 30633:tid 30666] [client 4.194.8.37:8964] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "aV544PZiVWlF7303nMjFygAAAEM"]
[Wed Jan 07 23:16:49.039099 2026] [:error] [pid 30633:tid 30683] [client 4.194.8.37:8994] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "aV544fZiVWlF7303nMjFywAAAFQ"]
[Wed Jan 07 23:16:49.218108 2026] [:error] [pid 30632:tid 30649] [client 4.194.8.37:8896] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "aV544ed3_LCpBJzo02cl1wAAAA0"]
[Wed Jan 07 23:16:49.407441 2026] [:error] [pid 50838:tid 50860] [client 4.194.8.37:9184] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "aV544bSweZ27JIN4H8vczQAAAdQ"]
[Wed Jan 07 23:16:49.580850 2026] [:error] [pid 30633:tid 30673] [client 4.194.8.37:9049] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "aV544fZiVWlF7303nMjFzAAAAEo"]
[Wed Jan 07 23:16:49.758387 2026] [:error] [pid 30633:tid 30665] [client 4.194.8.37:8979] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aV544fZiVWlF7303nMjFzQAAAEI"]
[Wed Jan 07 23:16:49.932936 2026] [:error] [pid 30632:tid 30648] [client 4.194.8.37:9056] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aV544ed3_LCpBJzo02cl2AAAAAw"]
[Wed Jan 07 23:16:50.109131 2026] [:error] [pid 58294:tid 58299] [client 4.194.8.37:9190] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aV544lfzA7c0ITpf3nE--QAAAIM"]
[Wed Jan 07 23:16:50.295733 2026] [:error] [pid 58294:tid 58304] [client 4.194.8.37:9069] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aV544lfzA7c0ITpf3nE--gAAAIg"]
[Wed Jan 07 23:16:50.491089 2026] [:error] [pid 30632:tid 30659] [client 4.194.8.37:9002] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aV544ud3_LCpBJzo02cl2QAAABc"]
[Wed Jan 07 23:16:50.671599 2026] [:error] [pid 30632:tid 30642] [client 4.194.8.37:9139] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aV544ud3_LCpBJzo02cl2gAAAAY"]
[Wed Jan 07 23:16:50.861804 2026] [:error] [pid 30633:tid 30679] [client 4.194.8.37:9118] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aV544vZiVWlF7303nMjF0AAAAFA"]
[Wed Jan 07 23:16:51.116100 2026] [:error] [pid 50905:tid 50929] [client 4.194.8.37:17979] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "aV5442pNgk5-gt30I7aiyQAAAlY"]
[Wed Jan 07 23:16:51.319401 2026] [:error] [pid 50905:tid 50926] [client 4.194.8.37:8912] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "aV5442pNgk5-gt30I7aiygAAAlM"]
[Wed Jan 07 23:16:51.495293 2026] [:error] [pid 50905:tid 50918] [client 4.194.8.37:8933] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "aV5442pNgk5-gt30I7aiywAAAks"]
[Wed Jan 07 23:16:51.686313 2026] [:error] [pid 58330:tid 58338] [client 4.194.8.37:8967] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "aV544w8kGngKGK7_wncYmgAAAQY"]
[Wed Jan 07 23:16:51.880953 2026] [:error] [pid 58330:tid 58353] [client 4.194.8.37:9126] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "aV544w8kGngKGK7_wncYmwAAARU"]
[Wed Jan 07 23:16:52.065471 2026] [:error] [pid 58330:tid 58340] [client 4.194.8.37:9063] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "aV545A8kGngKGK7_wncYnQAAAQg"]
[Wed Jan 07 23:16:52.251087 2026] [:error] [pid 58330:tid 58335] [client 4.194.8.37:9006] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "aV545A8kGngKGK7_wncYngAAAQM"]
[Wed Jan 07 23:16:52.427730 2026] [:error] [pid 58330:tid 58343] [client 4.194.8.37:8962] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "aV545A8kGngKGK7_wncYnwAAAQs"]
[Wed Jan 07 23:16:52.615368 2026] [:error] [pid 58330:tid 58332] [client 4.194.8.37:9084] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "aV545A8kGngKGK7_wncYoAAAAQA"]
[Wed Jan 07 23:16:52.793332 2026] [:error] [pid 51128:tid 51143] [client 4.194.8.37:9077] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "aV545EGjtE8U88mrwue5ogAAAY0"]
[Wed Jan 07 23:16:52.978132 2026] [:error] [pid 50905:tid 50907] [client 4.194.8.37:9079] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "aV545GpNgk5-gt30I7aizQAAAkA"]
[Wed Jan 07 23:16:53.157742 2026] [:error] [pid 30634:tid 30694] [client 4.194.8.37:9005] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "aV545YCIPBibObtmZtsaZQAAAMQ"]
[Wed Jan 07 23:16:53.343124 2026] [:error] [pid 30632:tid 30660] [client 4.194.8.37:9094] [client 4.194.8.37] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "aV545ed3_LCpBJzo02cl2wAAABg"]
[Thu Jan 08 01:28:57.359482 2026] [:error] [pid 30632:tid 30650] [client 138.197.32.240:53324] [client 138.197.32.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aV6X2ed3_LCpBJzo02c_SAAAAA4"], referer: binance.com
[Thu Jan 08 01:29:02.670856 2026] [:error] [pid 50838:tid 50847] [client 138.197.32.240:57456] [client 138.197.32.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aV6X3rSweZ27JIN4H8vyDAAAAcc"], referer: binance.com
[Thu Jan 08 02:57:26.021242 2026] [:error] [pid 58294:tid 58313] [client 182.44.8.254:42265] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV6sllfzA7c0ITpf3nF0YgAAAJE"]
[Thu Jan 08 05:49:31.725369 2026] [:error] [pid 2484:tid 2508] [client 43.167.232.38:40218] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV7U6ziDlnlaQQK_AEOG9QAAAVQ"]
[Thu Jan 08 08:26:37.078679 2026] [:error] [pid 15263:tid 15292] [client 170.106.180.246:49984] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV75vdv61bxum7WG_e-AZQAAABQ"]
[Thu Jan 08 09:08:34.974176 2026] [:error] [pid 17404:tid 17417] [client 170.106.11.141:50242] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV8DkmVd_oH193N6AnVA_wAAAYs"]
[Thu Jan 08 09:09:41.059349 2026] [:error] [pid 15263:tid 15296] [client 43.138.68.113:56446] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV8D1dv61bxum7WG_e-OOwAAABg"]
[Thu Jan 08 10:28:05.577906 2026] [:error] [pid 2424:tid 2435] [client 103.77.107.178:64838] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aV8WNbTDJR8aofkBk9SV8gAAAQk"]
[Thu Jan 08 10:28:06.114852 2026] [:error] [pid 17404:tid 17415] [client 103.77.107.178:65047] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aV8WNmVd_oH193N6AnVRFgAAAYk"]
[Thu Jan 08 11:48:34.721032 2026] [:error] [pid 15263:tid 15279] [client 36.77.222.193:49786] [client 36.77.222.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.77.222.193, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aV8pEtv61bxum7WG_e-w1wAAAAc"]
[Thu Jan 08 11:48:34.727644 2026] [:error] [pid 15263:tid 15279] [client 36.77.222.193:49786] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 08 12:43:43.753718 2026] [:error] [pid 15264:tid 15315] [client 43.130.110.130:40918] [client 43.130.110.130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV81_4ov6_kvS0Owh-rODQAAAFA"]
[Thu Jan 08 15:05:01.171677 2026] [:error] [pid 7586:tid 7607] [client 43.165.189.206:44320] [client 43.165.189.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV9XHcJyk37GdXP5TmU1qwAAAdE"]
[Thu Jan 08 15:39:20.008254 2026] [:error] [pid 15265:tid 15345] [client 223.15.245.170:59412] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV9fKKE6VBKhew2LTFQUMgAAAJM"]
[Thu Jan 08 19:01:06.219242 2026] [:error] [pid 15358:tid 15381] [client 43.166.136.202:34142] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV-OcioRk9xWJ3toSBJldwAAAMs"]
[Thu Jan 08 21:13:17.468327 2026] [:error] [pid 17404:tid 17426] [client 43.157.191.20:34494] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aV-tbWVd_oH193N6AnXB1gAAAZQ"]
[Thu Jan 08 23:07:17.781180 2026] [:error] [pid 15265:tid 15341] [client 43.166.131.228:50302] [client 43.166.131.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV_IJaE6VBKhew2LTFRjZQAAAI8"]
[Fri Jan 09 01:09:38.189954 2026] [:error] [pid 15358:tid 15379] [client 162.62.213.165:36856] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aV_k0ioRk9xWJ3toSBK0KwAAAMk"]
[Fri Jan 09 03:26:03.300665 2026] [:error] [pid 5433:tid 5505] [client 185.177.72.60:38340] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aWAEy70YATr-WcMKNUfljwAAAI8"]
[Fri Jan 09 03:26:04.891123 2026] [:error] [pid 5433:tid 5493] [client 185.177.72.60:38354] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aWAEzL0YATr-WcMKNUfllAAAAIM"]
[Fri Jan 09 03:26:08.548199 2026] [:error] [pid 5433:tid 5499] [client 185.177.72.60:39158] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aWAE0L0YATr-WcMKNUflpgAAAIk"]
[Fri Jan 09 03:26:09.850262 2026] [:error] [pid 5433:tid 5508] [client 185.177.72.60:39164] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aWAE0b0YATr-WcMKNUflrAAAAJI"]
[Fri Jan 09 03:26:24.891689 2026] [:error] [pid 5432:tid 5480] [client 185.177.72.60:25482] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 03:26:28.490304 2026] [:error] [pid 5431:tid 5438] [client 185.177.72.60:26418] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Jan 09 03:26:29.928166 2026] [:error] [pid 5527:tid 5541] [client 185.177.72.60:26432] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Fri Jan 09 03:26:31.062895 2026] [:error] [pid 5433:tid 5496] [client 185.177.72.60:26446] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Fri Jan 09 03:26:32.512221 2026] [:error] [pid 5432:tid 5477] [client 185.177.72.60:26458] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Fri Jan 09 03:26:50.105256 2026] [:error] [pid 5432:tid 5485] [client 185.177.72.60:56006] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php.bak"] [unique_id "aWAE-sc-XowhFzrM_dXWnAAAAFY"]
[Fri Jan 09 03:26:58.390395 2026] [:error] [pid 5433:tid 5500] [client 185.177.72.60:52694] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aWAFAr0YATr-WcMKNUfmLgAAAIo"]
[Fri Jan 09 03:27:07.440717 2026] [:error] [pid 5433:tid 5506] [client 185.177.72.60:51120] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aWAFC70YATr-WcMKNUfmRgAAAJA"]
[Fri Jan 09 03:27:10.591384 2026] [:error] [pid 5527:tid 5529] [client 185.177.72.60:51136] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/swagger.json"] [unique_id "aWAFDm-vWBXqudcT6c0m-wAAAMA"]
[Fri Jan 09 03:27:12.025692 2026] [:error] [pid 5431:tid 5447] [client 185.177.72.60:51150] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWAFEPbYxvOuew3DBPjcyQAAAAw"]
[Fri Jan 09 03:27:12.891013 2026] [:error] [pid 5432:tid 5465] [client 185.177.72.60:1100] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWAFEMc-XowhFzrM_dXWrQAAAEI"]
[Fri Jan 09 03:57:54.460256 2026] [:error] [pid 35812:tid 35891] [client 185.177.72.16:51778] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aWAMQkAss1qSj44c-n3OpgAAAJE"]
[Fri Jan 09 03:57:55.374342 2026] [:error] [pid 35810:tid 35834] [client 185.177.72.16:51788] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "aWAMQ4rJrhH8tOUNM5DSuQAAAA8"]
[Fri Jan 09 03:57:58.428745 2026] [:error] [pid 35810:tid 35831] [client 185.177.72.16:13860] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.save"] [unique_id "aWAMRorJrhH8tOUNM5DSvQAAAAw"]
[Fri Jan 09 03:58:09.356241 2026] [:error] [pid 35810:tid 35819] [client 185.177.72.16:21760] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 03:58:12.420498 2026] [:error] [pid 35811:tid 35852] [client 185.177.72.16:21762] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Jan 09 03:58:35.660878 2026] [:error] [pid 35916:tid 35935] [client 185.177.72.16:43472] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dbservices.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dbservices.com.au"] [uri "/config.php.bak"] [unique_id "aWAMa_nSLfzabNjOjwxyvwAAANE"]
[Fri Jan 09 03:58:41.695720 2026] [:error] [pid 35812:tid 35896] [client 185.177.72.16:53456] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aWAMcUAss1qSj44c-n3O2gAAAJY"]
[Fri Jan 09 03:58:50.259007 2026] [:error] [pid 35812:tid 35896] [client 185.177.72.16:23166] [client 185.177.72.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/swagger/v2/swagger.json"] [unique_id "aWAMekAss1qSj44c-n3O6AAAAJY"]
[Fri Jan 09 04:35:04.178373 2026] [:error] [pid 35916:tid 35927] [client 185.177.72.16:4040] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aWAU-PnSLfzabNjOjwyA2AAAAMk"]
[Fri Jan 09 04:35:09.486823 2026] [:error] [pid 35812:tid 35876] [client 185.177.72.16:25692] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aWAU_UAss1qSj44c-n3cvQAAAII"]
[Fri Jan 09 04:35:14.974418 2026] [:error] [pid 35812:tid 35888] [client 185.177.72.16:25702] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod"] [unique_id "aWAVAkAss1qSj44c-n3cwwAAAI4"]
[Fri Jan 09 04:35:16.413377 2026] [:error] [pid 35810:tid 35827] [client 185.177.72.16:25718] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "aWAVBIrJrhH8tOUNM5DelwAAAAg"]
[Fri Jan 09 04:35:23.440547 2026] [:error] [pid 35810:tid 35838] [client 185.177.72.16:54636] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 04:35:24.867878 2026] [:error] [pid 35916:tid 35939] [client 185.177.72.16:54646] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 09 04:35:28.300259 2026] [:error] [pid 10431:tid 10447] [client 185.177.72.16:45794] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Fri Jan 09 04:35:31.613488 2026] [:error] [pid 35811:tid 35863] [client 185.177.72.16:45834] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Fri Jan 09 04:35:49.399771 2026] [:error] [pid 35811:tid 35854] [client 185.177.72.16:16100] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php.bak"] [unique_id "aWAVJW7lx9V0CvYJJf2lCgAAAEc"]
[Fri Jan 09 04:35:51.115459 2026] [:error] [pid 10431:tid 10435] [client 185.177.72.16:16116] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/config.php.bak"] [unique_id "aWAVJykUbiVdwQzsJJSumgAAAQE"]
[Fri Jan 09 04:35:55.389283 2026] [:error] [pid 35916:tid 35934] [client 185.177.72.16:16134] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aWAVK_nSLfzabNjOjwyA_gAAANA"]
[Fri Jan 09 04:35:58.840231 2026] [:error] [pid 10431:tid 10441] [client 185.177.72.16:58804] [client 185.177.72.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.gitignore"] [unique_id "aWAVLikUbiVdwQzsJJSunwAAAQc"]
[Fri Jan 09 04:36:03.168025 2026] [:error] [pid 35811:tid 35858] [client 185.177.72.16:58830] [client 185.177.72.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swagger.json"] [unique_id "aWAVM27lx9V0CvYJJf2lGAAAAEs"]
[Fri Jan 09 04:36:04.316338 2026] [:error] [pid 35811:tid 35864] [client 185.177.72.16:58838] [client 185.177.72.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aWAVNG7lx9V0CvYJJf2lGwAAAFE"]
[Fri Jan 09 04:36:07.475478 2026] [:error] [pid 35916:tid 35942] [client 185.177.72.16:10846] [client 185.177.72.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/swagger.json"] [unique_id "aWAVN_nSLfzabNjOjwyBCAAAANg"]
[Fri Jan 09 04:36:10.048063 2026] [:error] [pid 35812:tid 35879] [client 185.177.72.16:29876] [client 185.177.72.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWAVOkAss1qSj44c-n3c3QAAAIU"]
[Fri Jan 09 04:36:10.618487 2026] [:error] [pid 35811:tid 35852] [client 185.177.72.16:29882] [client 185.177.72.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWAVOm7lx9V0CvYJJf2lJgAAAEU"]
[Fri Jan 09 04:39:53.938085 2026] [:error] [pid 10431:tid 10434] [client 185.177.72.60:14442] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "aWAWGSkUbiVdwQzsJJSv-gAAAQA"]
[Fri Jan 09 04:39:57.563867 2026] [:error] [pid 35810:tid 35819] [client 185.177.72.60:13016] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aWAWHYrJrhH8tOUNM5DfRwAAAAA"]
[Fri Jan 09 04:40:07.009305 2026] [:error] [pid 35916:tid 35927] [client 185.177.72.60:7174] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.prod"] [unique_id "aWAWJ_nSLfzabNjOjwyB6QAAAMk"]
[Fri Jan 09 04:40:08.744047 2026] [:error] [pid 35810:tid 35822] [client 185.177.72.60:7176] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dev"] [unique_id "aWAWKIrJrhH8tOUNM5DfTAAAAAM"]
[Fri Jan 09 04:40:09.882467 2026] [:error] [pid 35916:tid 35922] [client 185.177.72.60:7188] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.staging"] [unique_id "aWAWKfnSLfzabNjOjwyB7wAAAMQ"]
[Fri Jan 09 04:40:16.621673 2026] [:error] [pid 10431:tid 10434] [client 185.177.72.60:14920] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 09 04:40:21.775371 2026] [:error] [pid 35810:tid 35840] [client 185.177.72.60:14934] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Fri Jan 09 04:41:10.444937 2026] [:error] [pid 35810:tid 35836] [client 185.177.72.60:40036] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aWAWZorJrhH8tOUNM5DfYwAAABE"]
[Fri Jan 09 04:41:15.011152 2026] [:error] [pid 10431:tid 10447] [client 185.177.72.60:40046] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aWAWaykUbiVdwQzsJJSwawAAAQ0"]
[Fri Jan 09 04:41:17.608637 2026] [:error] [pid 35811:tid 35860] [client 185.177.72.60:51806] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.old"] [unique_id "aWAWbW7lx9V0CvYJJf2mRAAAAE0"]
[Fri Jan 09 04:41:20.762992 2026] [:error] [pid 35810:tid 35834] [client 185.177.72.60:51820] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.backup"] [unique_id "aWAWcIrJrhH8tOUNM5DfZwAAAA8"]
[Fri Jan 09 04:41:23.330090 2026] [:error] [pid 10431:tid 10450] [client 185.177.72.60:51836] [client 185.177.72.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dev"] [unique_id "aWAWcykUbiVdwQzsJJSweAAAARA"]
[Fri Jan 09 04:41:36.811323 2026] [:error] [pid 35812:tid 35895] [client 185.177.72.60:51382] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Fri Jan 09 04:41:37.378119 2026] [:error] [pid 35916:tid 35942] [client 185.177.72.60:51386] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/i.php"] [unique_id "aWAWgfnSLfzabNjOjwyCMwAAANg"]
[Fri Jan 09 04:41:41.970619 2026] [:error] [pid 35811:tid 35861] [client 185.177.72.60:51412] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.aws/credentials"] [unique_id "aWAWhW7lx9V0CvYJJf2mVgAAAE4"]
[Fri Jan 09 04:41:42.862911 2026] [:error] [pid 35810:tid 35843] [client 185.177.72.60:51426] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/config.json"] [unique_id "aWAWhorJrhH8tOUNM5DfdgAAABg"]
[Fri Jan 09 04:41:45.435383 2026] [:error] [pid 35811:tid 35863] [client 185.177.72.60:51442] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/credentials.json"] [unique_id "aWAWiW7lx9V0CvYJJf2mWQAAAFA"]
[Fri Jan 09 04:41:50.004386 2026] [:error] [pid 35916:tid 35936] [client 185.177.72.60:61256] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/server.js"] [unique_id "aWAWjvnSLfzabNjOjwyCRwAAANI"]
[Fri Jan 09 04:41:52.587160 2026] [:error] [pid 35810:tid 35835] [client 185.177.72.60:61260] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/config.php.bak"] [unique_id "aWAWkIrJrhH8tOUNM5DfhAAAABA"]
[Fri Jan 09 04:41:55.161392 2026] [:error] [pid 35812:tid 35890] [client 185.177.72.60:61264] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/settings.json"] [unique_id "aWAWk0Ass1qSj44c-n3eQAAAAJA"]
[Fri Jan 09 04:42:02.021451 2026] [:error] [pid 35812:tid 35879] [client 185.177.72.60:16848] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.git-credentials"] [unique_id "aWAWmkAss1qSj44c-n3eRgAAAIU"]
[Fri Jan 09 04:42:02.591749 2026] [:error] [pid 35811:tid 35854] [client 185.177.72.60:16860] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.gitconfig"] [unique_id "aWAWmm7lx9V0CvYJJf2maAAAAEc"]
[Fri Jan 09 04:42:05.164332 2026] [:error] [pid 35916:tid 35920] [client 185.177.72.60:16866] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aWAWnfnSLfzabNjOjwyCcQAAAMI"]
[Fri Jan 09 04:42:07.742027 2026] [:error] [pid 10431:tid 10439] [client 185.177.72.60:13680] [client 185.177.72.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/api/swagger.json"] [unique_id "aWAWnykUbiVdwQzsJJSwrQAAAQU"]
[Fri Jan 09 04:47:38.949547 2026] [:error] [pid 35810:tid 35827] [client 185.177.72.12:34744] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "aWAX6orJrhH8tOUNM5DhmAAAAAg"]
[Fri Jan 09 04:47:43.521328 2026] [:error] [pid 35916:tid 35921] [client 185.177.72.12:34746] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "aWAX7_nSLfzabNjOjwyFmAAAAMM"]
[Fri Jan 09 04:47:48.672728 2026] [:error] [pid 35812:tid 35886] [client 185.177.72.12:64144] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.backup"] [unique_id "aWAX9EAss1qSj44c-n3gswAAAIw"]
[Fri Jan 09 04:48:04.151697 2026] [:error] [pid 35812:tid 35886] [client 185.177.72.12:23248] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Fri Jan 09 04:48:04.730045 2026] [:error] [pid 35810:tid 35822] [client 185.177.72.12:23260] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Fri Jan 09 04:48:30.221899 2026] [:error] [pid 35812:tid 35877] [client 185.177.72.12:3212] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.gitignore"] [unique_id "aWAYHkAss1qSj44c-n3hAgAAAIM"]
[Fri Jan 09 05:45:37.988261 2026] [:error] [pid 35916:tid 35938] [client 185.177.72.12:14798] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aWAlgfnSLfzabNjOjwydBwAAANQ"]
[Fri Jan 09 05:45:43.423056 2026] [:error] [pid 35811:tid 35857] [client 185.177.72.12:14804] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aWAlh27lx9V0CvYJJf29VAAAAEo"]
[Fri Jan 09 05:45:46.854842 2026] [:error] [pid 35811:tid 35851] [client 185.177.72.12:14816] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aWAlim7lx9V0CvYJJf29WQAAAEQ"]
[Fri Jan 09 05:45:50.278938 2026] [:error] [pid 35916:tid 35933] [client 185.177.72.12:31094] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "aWAljvnSLfzabNjOjwydHQAAAM8"]
[Fri Jan 09 05:45:57.427356 2026] [:error] [pid 35811:tid 35861] [client 185.177.72.12:31102] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 05:46:00.892892 2026] [:error] [pid 35916:tid 35918] [client 185.177.72.12:53062] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Jan 09 05:46:04.369439 2026] [:error] [pid 35810:tid 35831] [client 185.177.72.12:53070] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Fri Jan 09 05:46:05.820428 2026] [:error] [pid 10431:tid 10458] [client 185.177.72.12:53076] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Fri Jan 09 05:46:34.905266 2026] [:error] [pid 10431:tid 10450] [client 185.177.72.12:49556] [client 185.177.72.12] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.gitignore"] [unique_id "aWAluikUbiVdwQzsJJTSNQAAARA"]
[Fri Jan 09 05:46:43.754652 2026] [:error] [pid 35811:tid 35864] [client 185.177.72.12:30230] [client 185.177.72.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/swagger.json"] [unique_id "aWAlw27lx9V0CvYJJf29mAAAAFE"]
[Fri Jan 09 05:50:13.477475 2026] [:error] [pid 10431:tid 10446] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Jan 09 05:50:13.625649 2026] [:error] [pid 10431:tid 10440] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Fri Jan 09 05:50:13.768743 2026] [:error] [pid 10431:tid 10445] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Fri Jan 09 05:50:13.924326 2026] [:error] [pid 10431:tid 10439] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Jan 09 05:50:14.116345 2026] [:error] [pid 10431:tid 10450] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Fri Jan 09 05:50:14.275710 2026] [:error] [pid 10431:tid 10456] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Fri Jan 09 05:50:14.416589 2026] [:error] [pid 10431:tid 10448] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/b374k.php
[Fri Jan 09 05:50:14.571619 2026] [:error] [pid 10431:tid 10458] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Jan 09 05:50:16.681224 2026] [:error] [pid 10431:tid 10458] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/k8.php
[Fri Jan 09 05:50:16.829612 2026] [:error] [pid 10431:tid 10438] [client 4.213.159.226:3187] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Jan 09 05:50:16.983602 2026] [:error] [pid 10431:tid 10444] [client 4.213.159.226:3187] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aWAmmCkUbiVdwQzsJJTT7QAAAQo"]
[Fri Jan 09 05:50:17.509871 2026] [:error] [pid 35811:tid 35857] [client 4.213.159.226:3199] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aWAmmW7lx9V0CvYJJf2-vQAAAEo"]
[Fri Jan 09 05:50:18.409451 2026] [:error] [pid 35812:tid 35888] [client 4.213.159.226:3136] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aWAmmkAss1qSj44c-n34vgAAAI4"]
[Fri Jan 09 05:50:19.163252 2026] [:error] [pid 35916:tid 35927] [client 4.213.159.226:3181] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aWAmm_nSLfzabNjOjwye0QAAAMk"]
[Fri Jan 09 05:50:20.524661 2026] [:error] [pid 35916:tid 35932] [client 4.213.159.226:3198] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/private.php"] [unique_id "aWAmnPnSLfzabNjOjwye2AAAAM4"]
[Fri Jan 09 05:50:21.334617 2026] [:error] [pid 10431:tid 10443] [client 4.213.159.226:3190] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/private.php"] [unique_id "aWAmnSkUbiVdwQzsJJTUAAAAAQk"]
[Fri Jan 09 05:50:23.051047 2026] [:error] [pid 10431:tid 10457] [client 4.213.159.226:3205] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/private.php"] [unique_id "aWAmnykUbiVdwQzsJJTUCQAAARc"]
[Fri Jan 09 05:50:23.458401 2026] [:error] [pid 10431:tid 10435] [client 4.213.159.226:3215] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/private.php"] [unique_id "aWAmnykUbiVdwQzsJJTUDQAAAQE"]
[Fri Jan 09 05:50:24.007811 2026] [:error] [pid 35812:tid 35880] [client 4.213.159.226:3185] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secret.php"] [unique_id "aWAmoEAss1qSj44c-n34yQAAAIY"]
[Fri Jan 09 05:50:24.490209 2026] [:error] [pid 10431:tid 10436] [client 4.213.159.226:3180] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secret.php"] [unique_id "aWAmoCkUbiVdwQzsJJTUFAAAAQI"]
[Fri Jan 09 05:50:24.863822 2026] [:error] [pid 35812:tid 35877] [client 4.213.159.226:3231] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secret.php"] [unique_id "aWAmoEAss1qSj44c-n34ywAAAIM"]
[Fri Jan 09 05:50:25.607148 2026] [:error] [pid 35916:tid 35924] [client 4.213.159.226:3212] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/secret.php"] [unique_id "aWAmofnSLfzabNjOjwye7wAAAMY"]
[Fri Jan 09 05:50:26.164759 2026] [:error] [pid 35916:tid 35921] [client 4.213.159.226:3171] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWAmovnSLfzabNjOjwye8gAAAMM"]
[Fri Jan 09 05:50:26.938378 2026] [:error] [pid 35916:tid 35937] [client 4.213.159.226:3168] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWAmovnSLfzabNjOjwye_wAAANM"]
[Fri Jan 09 05:50:27.976470 2026] [:error] [pid 35916:tid 35930] [client 4.213.159.226:3172] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWAmo_nSLfzabNjOjwyfBwAAAMw"]
[Fri Jan 09 05:50:28.976778 2026] [:error] [pid 35810:tid 35838] [client 4.213.159.226:3194] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWAmpIrJrhH8tOUNM5D2mwAAABM"]
[Fri Jan 09 05:50:29.622094 2026] [:error] [pid 35916:tid 35921] [client 4.213.159.226:3147] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWAmpfnSLfzabNjOjwyfEQAAAMM"]
[Fri Jan 09 05:50:30.741401 2026] [:error] [pid 35811:tid 35868] [client 4.213.159.226:3211] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWAmpm7lx9V0CvYJJf2-0AAAAFU"]
[Fri Jan 09 05:50:31.606208 2026] [:error] [pid 35810:tid 35841] [client 4.213.159.226:3146] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWAmp4rJrhH8tOUNM5D2oAAAABY"]
[Fri Jan 09 05:50:32.675935 2026] [:error] [pid 35812:tid 35897] [client 4.213.159.226:3153] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWAmqEAss1qSj44c-n342AAAAJc"]
[Fri Jan 09 05:50:33.369928 2026] [:error] [pid 35811:tid 35847] [client 4.213.159.226:3138] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/panel.php"] [unique_id "aWAmqW7lx9V0CvYJJf2-2wAAAEA"]
[Fri Jan 09 05:50:34.067173 2026] [:error] [pid 35810:tid 35828] [client 4.213.159.226:3201] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/panel.php"] [unique_id "aWAmqorJrhH8tOUNM5D2qgAAAAk"]
[Fri Jan 09 05:50:34.421908 2026] [:error] [pid 35811:tid 35852] [client 4.213.159.226:3214] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/panel.php"] [unique_id "aWAmqm7lx9V0CvYJJf2-3AAAAEU"]
[Fri Jan 09 05:50:34.862468 2026] [:error] [pid 35811:tid 35860] [client 4.213.159.226:3164] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/panel.php"] [unique_id "aWAmqm7lx9V0CvYJJf2-3gAAAE0"]
[Fri Jan 09 05:50:35.444908 2026] [:error] [pid 35810:tid 35835] [client 4.213.159.226:3188] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/console.php"] [unique_id "aWAmq4rJrhH8tOUNM5D2rgAAABA"]
[Fri Jan 09 05:50:36.233213 2026] [:error] [pid 35810:tid 35836] [client 4.213.159.226:3140] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/console.php"] [unique_id "aWAmrIrJrhH8tOUNM5D2sQAAABE"]
[Fri Jan 09 05:50:37.192740 2026] [:error] [pid 10431:tid 10436] [client 4.213.159.226:3163] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/console.php"] [unique_id "aWAmrSkUbiVdwQzsJJTUTwAAAQI"]
[Fri Jan 09 05:50:38.718732 2026] [:error] [pid 10431:tid 10451] [client 4.213.159.226:3159] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/console.php"] [unique_id "aWAmrikUbiVdwQzsJJTUVgAAARE"]
[Fri Jan 09 05:50:39.289538 2026] [:error] [pid 35916:tid 35942] [client 4.213.159.226:3240] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/terminal.php"] [unique_id "aWAmr_nSLfzabNjOjwyfJAAAANg"]
[Fri Jan 09 05:50:41.137811 2026] [:error] [pid 35811:tid 35860] [client 4.213.159.226:3229] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/terminal.php"] [unique_id "aWAmsW7lx9V0CvYJJf2-7gAAAE0"]
[Fri Jan 09 05:50:42.165166 2026] [:error] [pid 10431:tid 10439] [client 4.213.159.226:3170] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/terminal.php"] [unique_id "aWAmsikUbiVdwQzsJJTUYgAAAQU"]
[Fri Jan 09 05:50:43.352302 2026] [:error] [pid 35916:tid 35937] [client 4.213.159.226:3174] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/terminal.php"] [unique_id "aWAms_nSLfzabNjOjwyfOwAAANM"]
[Fri Jan 09 05:50:44.504471 2026] [:error] [pid 35810:tid 35824] [client 4.213.159.226:3165] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exec.php"] [unique_id "aWAmtIrJrhH8tOUNM5D2wAAAAAU"]
[Fri Jan 09 05:50:45.350815 2026] [:error] [pid 35812:tid 35895] [client 4.213.159.226:3399] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exec.php"] [unique_id "aWAmtUAss1qSj44c-n34-QAAAJU"]
[Fri Jan 09 05:50:46.677363 2026] [:error] [pid 35812:tid 35883] [client 4.213.159.226:3216] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exec.php"] [unique_id "aWAmtkAss1qSj44c-n34_wAAAIk"]
[Fri Jan 09 05:50:47.275991 2026] [:error] [pid 35810:tid 35837] [client 4.213.159.226:3149] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exec.php"] [unique_id "aWAmt4rJrhH8tOUNM5D2ygAAABI"]
[Fri Jan 09 05:50:47.691754 2026] [:error] [pid 35916:tid 35940] [client 4.213.159.226:3210] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eval.php"] [unique_id "aWAmt_nSLfzabNjOjwyfRgAAANY"]
[Fri Jan 09 05:50:48.224687 2026] [:error] [pid 35916:tid 35939] [client 4.213.159.226:3398] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eval.php"] [unique_id "aWAmuPnSLfzabNjOjwyfSAAAANU"]
[Fri Jan 09 05:50:48.811998 2026] [:error] [pid 35916:tid 35933] [client 4.213.159.226:3182] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eval.php"] [unique_id "aWAmuPnSLfzabNjOjwyfSgAAAM8"]
[Fri Jan 09 05:50:49.258115 2026] [:error] [pid 10431:tid 10458] [client 4.213.159.226:3200] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eval.php"] [unique_id "aWAmuSkUbiVdwQzsJJTUjgAAARg"]
[Fri Jan 09 05:50:49.981063 2026] [:error] [pid 35810:tid 35830] [client 4.213.159.226:3228] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aWAmuYrJrhH8tOUNM5D20QAAAAs"]
[Fri Jan 09 05:50:50.929653 2026] [:error] [pid 35811:tid 35858] [client 4.213.159.226:3193] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aWAmum7lx9V0CvYJJf2_AwAAAEs"]
[Fri Jan 09 05:50:51.611082 2026] [:error] [pid 10431:tid 10450] [client 4.213.159.226:3148] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aWAmuykUbiVdwQzsJJTUmgAAARA"]
[Fri Jan 09 05:50:52.366116 2026] [:error] [pid 35811:tid 35854] [client 4.213.159.226:3206] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aWAmvG7lx9V0CvYJJf2_CQAAAEc"]
[Fri Jan 09 05:50:53.333818 2026] [:error] [pid 35916:tid 35923] [client 4.213.159.226:3169] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWAmvfnSLfzabNjOjwyfVgAAAMU"]
[Fri Jan 09 05:50:54.769591 2026] [:error] [pid 10431:tid 10449] [client 4.213.159.226:3246] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWAmvikUbiVdwQzsJJTUowAAAQ8"]
[Fri Jan 09 05:50:55.163239 2026] [:error] [pid 10431:tid 10435] [client 4.213.159.226:3405] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWAmvykUbiVdwQzsJJTUpwAAAQE"]
[Fri Jan 09 05:50:55.596755 2026] [:error] [pid 35916:tid 35939] [client 4.213.159.226:3237] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWAmv_nSLfzabNjOjwyfWgAAANU"]
[Fri Jan 09 05:50:56.077646 2026] [:error] [pid 35916:tid 35933] [client 4.213.159.226:3223] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWAmwPnSLfzabNjOjwyfXQAAAM8"]
[Fri Jan 09 05:50:56.792793 2026] [:error] [pid 35916:tid 35938] [client 4.213.159.226:3196] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWAmwPnSLfzabNjOjwyfYgAAANQ"]
[Fri Jan 09 05:50:57.771076 2026] [:error] [pid 35916:tid 35922] [client 4.213.159.226:3145] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWAmwfnSLfzabNjOjwyfZwAAAMQ"]
[Fri Jan 09 05:50:58.160424 2026] [:error] [pid 35811:tid 35861] [client 4.213.159.226:3191] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWAmwm7lx9V0CvYJJf2_GwAAAE4"]
[Fri Jan 09 05:50:58.608256 2026] [:error] [pid 35810:tid 35835] [client 4.213.159.226:3432] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aWAmworJrhH8tOUNM5D26QAAABA"]
[Fri Jan 09 05:50:59.217245 2026] [:error] [pid 10431:tid 10434] [client 4.213.159.226:3439] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aWAmwykUbiVdwQzsJJTUtAAAAQA"]
[Fri Jan 09 05:51:00.085747 2026] [:error] [pid 10431:tid 10452] [client 4.213.159.226:3222] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aWAmxCkUbiVdwQzsJJTUugAAARI"]
[Fri Jan 09 05:51:01.843226 2026] [:error] [pid 35812:tid 35894] [client 4.213.159.226:3166] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aWAmxUAss1qSj44c-n35IgAAAJQ"]
[Fri Jan 09 05:51:02.739870 2026] [:error] [pid 10431:tid 10439] [client 4.213.159.226:3224] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dump.php"] [unique_id "aWAmxikUbiVdwQzsJJTUzAAAAQU"]
[Fri Jan 09 05:51:03.408433 2026] [:error] [pid 35812:tid 35893] [client 4.213.159.226:3202] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dump.php"] [unique_id "aWAmx0Ass1qSj44c-n35NgAAAJM"]
[Fri Jan 09 05:51:04.679452 2026] [:error] [pid 35916:tid 35919] [client 4.213.159.226:3394] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dump.php"] [unique_id "aWAmyPnSLfzabNjOjwyfewAAAME"]
[Fri Jan 09 05:51:05.250354 2026] [:error] [pid 10431:tid 10439] [client 4.213.159.226:3189] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dump.php"] [unique_id "aWAmySkUbiVdwQzsJJTU3QAAAQU"]
[Fri Jan 09 05:51:05.859954 2026] [:error] [pid 35812:tid 35885] [client 4.213.159.226:3230] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWAmyUAss1qSj44c-n35RgAAAIs"]
[Fri Jan 09 05:51:06.834090 2026] [:error] [pid 35810:tid 35842] [client 4.213.159.226:3094] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWAmyorJrhH8tOUNM5D29wAAABc"]
[Fri Jan 09 05:51:07.478561 2026] [:error] [pid 35812:tid 35876] [client 4.213.159.226:3141] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWAmy0Ass1qSj44c-n35TAAAAII"]
[Fri Jan 09 05:51:08.170344 2026] [:error] [pid 35812:tid 35891] [client 4.213.159.226:3208] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWAmzEAss1qSj44c-n35TwAAAJE"]
[Fri Jan 09 05:51:09.116195 2026] [:error] [pid 35810:tid 35843] [client 4.213.159.226:3089] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data.php"] [unique_id "aWAmzYrJrhH8tOUNM5D2-wAAABg"]
[Fri Jan 09 05:51:09.642706 2026] [:error] [pid 35812:tid 35884] [client 4.213.159.226:3226] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data.php"] [unique_id "aWAmzUAss1qSj44c-n35VwAAAIo"]
[Fri Jan 09 05:51:10.118916 2026] [:error] [pid 35811:tid 35861] [client 4.213.159.226:3396] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data.php"] [unique_id "aWAmzm7lx9V0CvYJJf2_NgAAAE4"]
[Fri Jan 09 05:51:11.173783 2026] [:error] [pid 10431:tid 10445] [client 4.213.159.226:3232] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data.php"] [unique_id "aWAmzykUbiVdwQzsJJTU8wAAAQs"]
[Fri Jan 09 05:51:11.745310 2026] [:error] [pid 35916:tid 35922] [client 4.213.159.226:3217] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmp.php"] [unique_id "aWAmz_nSLfzabNjOjwyfjQAAAMQ"]
[Fri Jan 09 05:51:12.598883 2026] [:error] [pid 35812:tid 35888] [client 4.213.159.226:3218] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmp.php"] [unique_id "aWAm0EAss1qSj44c-n35ZAAAAI4"]
[Fri Jan 09 05:51:13.601141 2026] [:error] [pid 35811:tid 35867] [client 4.213.159.226:3393] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmp.php"] [unique_id "aWAm0W7lx9V0CvYJJf2_RgAAAFQ"]
[Fri Jan 09 05:51:15.256803 2026] [:error] [pid 10431:tid 10449] [client 4.213.159.226:3152] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmp.php"] [unique_id "aWAm0ykUbiVdwQzsJJTVAgAAAQ8"]
[Fri Jan 09 05:51:17.172156 2026] [:error] [pid 35810:tid 35831] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/temp.php
[Fri Jan 09 05:51:17.311827 2026] [:error] [pid 35810:tid 35828] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Jan 09 05:51:17.452477 2026] [:error] [pid 35810:tid 35836] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Jan 09 05:51:17.777971 2026] [:error] [pid 35810:tid 35825] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Jan 09 05:51:17.919214 2026] [:error] [pid 35810:tid 35820] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Jan 09 05:51:18.148017 2026] [:error] [pid 35810:tid 35829] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/old.php
[Fri Jan 09 05:51:18.288024 2026] [:error] [pid 35810:tid 35840] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Jan 09 05:51:18.456772 2026] [:error] [pid 35810:tid 35826] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Jan 09 05:51:18.771847 2026] [:error] [pid 35810:tid 35837] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Jan 09 05:51:18.916245 2026] [:error] [pid 35810:tid 35834] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Jan 09 05:51:19.056044 2026] [:error] [pid 35810:tid 35841] [client 4.213.159.226:3195] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Fri Jan 09 05:51:19.353704 2026] [:error] [pid 35810:tid 35842] [client 4.213.159.226:3195] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aWAm14rJrhH8tOUNM5D3GQAAABc"]
[Fri Jan 09 05:51:20.242000 2026] [:error] [pid 35812:tid 35874] [client 4.213.159.226:3255] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aWAm2EAss1qSj44c-n35bwAAAIA"]
[Fri Jan 09 05:51:21.401495 2026] [:error] [pid 35811:tid 35857] [client 4.213.159.226:3183] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aWAm2W7lx9V0CvYJJf2_VAAAAEo"]
[Fri Jan 09 05:51:22.512102 2026] [:error] [pid 35812:tid 35876] [client 4.213.159.226:3221] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aWAm2kAss1qSj44c-n35dwAAAII"]
[Fri Jan 09 05:51:23.067775 2026] [:error] [pid 35916:tid 35939] [client 4.213.159.226:3209] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aWAm2_nSLfzabNjOjwyfrwAAANU"]
[Fri Jan 09 05:51:23.549390 2026] [:error] [pid 35916:tid 35927] [client 4.213.159.226:3395] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aWAm2_nSLfzabNjOjwyfsQAAAMk"]
[Fri Jan 09 05:51:24.135460 2026] [:error] [pid 35812:tid 35887] [client 4.213.159.226:3220] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aWAm3EAss1qSj44c-n35eQAAAI0"]
[Fri Jan 09 05:51:24.791428 2026] [:error] [pid 10431:tid 10455] [client 4.213.159.226:3411] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aWAm3CkUbiVdwQzsJJTVIwAAARU"]
[Fri Jan 09 05:51:25.349179 2026] [:error] [pid 10431:tid 10437] [client 4.213.159.226:3242] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aWAm3SkUbiVdwQzsJJTVJwAAAQM"]
[Fri Jan 09 05:51:25.849739 2026] [:error] [pid 10431:tid 10447] [client 4.213.159.226:3197] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aWAm3SkUbiVdwQzsJJTVMAAAAQ0"]
[Fri Jan 09 05:51:26.305646 2026] [:error] [pid 35916:tid 35922] [client 4.213.159.226:3251] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aWAm3vnSLfzabNjOjwyftwAAAMQ"]
[Fri Jan 09 05:51:26.965711 2026] [:error] [pid 35810:tid 35829] [client 4.213.159.226:3160] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aWAm3orJrhH8tOUNM5D3IgAAAAo"]
[Fri Jan 09 05:51:27.858849 2026] [:error] [pid 10431:tid 10436] [client 4.213.159.226:3179] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWAm3ykUbiVdwQzsJJTVOwAAAQI"]
[Fri Jan 09 05:51:28.460144 2026] [:error] [pid 35811:tid 35853] [client 4.213.159.226:3157] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWAm4G7lx9V0CvYJJf2_XwAAAEY"]
[Fri Jan 09 05:51:29.341514 2026] [:error] [pid 35810:tid 35839] [client 4.213.159.226:3150] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWAm4YrJrhH8tOUNM5D3KAAAABQ"]
[Fri Jan 09 05:51:30.649284 2026] [:error] [pid 35812:tid 35879] [client 4.213.159.226:3247] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWAm4kAss1qSj44c-n35gAAAAIU"]
[Fri Jan 09 05:51:31.207332 2026] [:error] [pid 35812:tid 35887] [client 4.213.159.226:3173] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aWAm40Ass1qSj44c-n35hQAAAI0"]
[Fri Jan 09 05:51:31.871445 2026] [:error] [pid 35811:tid 35862] [client 4.213.159.226:3178] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aWAm427lx9V0CvYJJf2_aQAAAE8"]
[Fri Jan 09 05:51:33.305223 2026] [:error] [pid 10431:tid 10456] [client 4.213.159.226:3137] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aWAm5SkUbiVdwQzsJJTVSgAAARY"]
[Fri Jan 09 05:51:34.054690 2026] [:error] [pid 10431:tid 10435] [client 4.213.159.226:3184] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aWAm5ikUbiVdwQzsJJTVTQAAAQE"]
[Fri Jan 09 05:51:34.904330 2026] [:error] [pid 35812:tid 35886] [client 4.213.159.226:3156] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWAm5kAss1qSj44c-n35jQAAAIw"]
[Fri Jan 09 05:51:35.832221 2026] [:error] [pid 35812:tid 35887] [client 4.213.159.226:3441] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWAm50Ass1qSj44c-n35kAAAAI0"]
[Fri Jan 09 05:51:36.546072 2026] [:error] [pid 35916:tid 35924] [client 4.213.159.226:3447] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWAm6PnSLfzabNjOjwyfygAAAMY"]
[Fri Jan 09 05:51:37.571815 2026] [:error] [pid 10431:tid 10456] [client 4.213.159.226:3186] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWAm6SkUbiVdwQzsJJTVVgAAARY"]
[Fri Jan 09 05:51:38.287017 2026] [:error] [pid 10431:tid 10436] [client 4.213.159.226:3233] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/u.php"] [unique_id "aWAm6ikUbiVdwQzsJJTVWQAAAQI"]
[Fri Jan 09 05:51:38.964541 2026] [:error] [pid 10431:tid 10440] [client 4.213.159.226:3204] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/u.php"] [unique_id "aWAm6ikUbiVdwQzsJJTVXAAAAQY"]
[Fri Jan 09 05:51:40.564967 2026] [:error] [pid 35916:tid 35923] [client 4.213.159.226:3177] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/u.php"] [unique_id "aWAm7PnSLfzabNjOjwyfzQAAAMU"]
[Fri Jan 09 05:51:42.191733 2026] [:error] [pid 35811:tid 35848] [client 4.213.159.226:3225] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/u.php"] [unique_id "aWAm7m7lx9V0CvYJJf2_eQAAAEE"]
[Fri Jan 09 05:51:43.241290 2026] [:error] [pid 35811:tid 35862] [client 4.213.159.226:3139] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aWAm727lx9V0CvYJJf2_fQAAAE8"]
[Fri Jan 09 05:51:44.218993 2026] [:error] [pid 10431:tid 10458] [client 4.213.159.226:3175] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aWAm8CkUbiVdwQzsJJTVeQAAARg"]
[Fri Jan 09 05:51:45.382722 2026] [:error] [pid 35812:tid 35885] [client 4.213.159.226:3419] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aWAm8UAss1qSj44c-n35qQAAAIs"]
[Fri Jan 09 05:51:45.866605 2026] [:error] [pid 35812:tid 35878] [client 4.213.159.226:3442] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aWAm8UAss1qSj44c-n35rAAAAIQ"]
[Fri Jan 09 05:51:46.460160 2026] [:error] [pid 35811:tid 35851] [client 4.213.159.226:3227] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aWAm8m7lx9V0CvYJJf2_gwAAAEQ"]
[Fri Jan 09 05:51:47.179838 2026] [:error] [pid 10431:tid 10448] [client 4.213.159.226:3403] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aWAm8ykUbiVdwQzsJJTVgQAAAQ4"]
[Fri Jan 09 05:51:48.089138 2026] [:error] [pid 35916:tid 35938] [client 4.213.159.226:3238] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aWAm9PnSLfzabNjOjwyf6wAAANQ"]
[Fri Jan 09 05:51:50.763404 2026] [:error] [pid 10431:tid 10438] [client 4.213.159.226:3438] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aWAm9ikUbiVdwQzsJJTVjAAAAQQ"]
[Fri Jan 09 05:51:51.697210 2026] [:error] [pid 10431:tid 10437] [client 4.213.159.226:3105] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aWAm9ykUbiVdwQzsJJTVjgAAAQM"]
[Fri Jan 09 05:51:52.228604 2026] [:error] [pid 35810:tid 35819] [client 4.213.159.226:3400] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aWAm-IrJrhH8tOUNM5D3VgAAAAA"]
[Fri Jan 09 05:51:53.635195 2026] [:error] [pid 35810:tid 35840] [client 4.213.159.226:3154] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aWAm-YrJrhH8tOUNM5D3WAAAABU"]
[Fri Jan 09 05:51:54.590706 2026] [:error] [pid 35916:tid 35925] [client 4.213.159.226:3401] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aWAm-vnSLfzabNjOjwyf_AAAAMc"]
[Fri Jan 09 05:51:56.984915 2026] [:error] [pid 35810:tid 35827] [client 4.213.159.226:3414] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWAm_IrJrhH8tOUNM5D3XQAAAAg"]
[Fri Jan 09 05:51:59.947246 2026] [:error] [pid 35811:tid 35871] [client 4.213.159.226:3440] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWAm_27lx9V0CvYJJf2_kwAAAFg"]
[Fri Jan 09 05:52:01.278809 2026] [:error] [pid 10431:tid 10440] [client 4.213.159.226:3134] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWAnASkUbiVdwQzsJJTVnAAAAQY"]
[Fri Jan 09 05:52:03.045865 2026] [:error] [pid 10431:tid 10434] [client 4.213.159.226:3192] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWAnAykUbiVdwQzsJJTVoQAAAQA"]
[Fri Jan 09 05:52:04.130832 2026] [:error] [pid 35916:tid 35919] [client 4.213.159.226:3258] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "aWAnBPnSLfzabNjOjwygEAAAAME"]
[Fri Jan 09 05:52:05.189955 2026] [:error] [pid 35811:tid 35848] [client 4.213.159.226:3162] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "aWAnBW7lx9V0CvYJJf2_nAAAAEE"]
[Fri Jan 09 05:52:06.327905 2026] [:error] [pid 35916:tid 35937] [client 4.213.159.226:3410] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "aWAnBvnSLfzabNjOjwygGwAAANM"]
[Fri Jan 09 05:52:06.809932 2026] [:error] [pid 35916:tid 35919] [client 4.213.159.226:3245] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "aWAnBvnSLfzabNjOjwygHQAAAME"]
[Fri Jan 09 05:52:07.994869 2026] [:error] [pid 35916:tid 35942] [client 4.213.159.226:3252] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aWAnB_nSLfzabNjOjwygIQAAANg"]
[Fri Jan 09 05:52:09.299194 2026] [:error] [pid 35811:tid 35859] [client 4.213.159.226:3219] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aWAnCW7lx9V0CvYJJf2_pgAAAEw"]
[Fri Jan 09 05:52:10.657201 2026] [:error] [pid 35812:tid 35875] [client 4.213.159.226:3176] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aWAnCkAss1qSj44c-n351AAAAIE"]
[Fri Jan 09 05:52:11.551898 2026] [:error] [pid 35811:tid 35868] [client 4.213.159.226:3236] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aWAnC27lx9V0CvYJJf2_qwAAAFU"]
[Fri Jan 09 05:52:12.265972 2026] [:error] [pid 35812:tid 35890] [client 4.213.159.226:3446] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aWAnDEAss1qSj44c-n352AAAAJA"]
[Fri Jan 09 05:52:13.155485 2026] [:error] [pid 35811:tid 35859] [client 4.213.159.226:3121] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aWAnDW7lx9V0CvYJJf2_tQAAAEw"]
[Fri Jan 09 05:52:14.003791 2026] [:error] [pid 35916:tid 35939] [client 4.213.159.226:3248] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aWAnDvnSLfzabNjOjwygLgAAANU"]
[Fri Jan 09 05:52:14.728363 2026] [:error] [pid 35916:tid 35931] [client 4.213.159.226:3412] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aWAnDvnSLfzabNjOjwygMgAAAM0"]
[Fri Jan 09 05:52:15.769820 2026] [:error] [pid 10431:tid 10452] [client 4.213.159.226:3451] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "aWAnDykUbiVdwQzsJJTVswAAARI"]
[Fri Jan 09 05:52:16.604664 2026] [:error] [pid 10431:tid 10436] [client 4.213.159.226:3257] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "aWAnECkUbiVdwQzsJJTVuQAAAQI"]
[Fri Jan 09 05:52:17.272116 2026] [:error] [pid 10431:tid 10443] [client 4.213.159.226:3254] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "aWAnESkUbiVdwQzsJJTVvQAAAQk"]
[Fri Jan 09 05:52:18.617788 2026] [:error] [pid 35812:tid 35889] [client 4.213.159.226:3078] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "aWAnEkAss1qSj44c-n354gAAAI8"]
[Fri Jan 09 05:52:19.306848 2026] [:error] [pid 35916:tid 35921] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Jan 09 05:52:19.649425 2026] [:error] [pid 35916:tid 35928] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Fri Jan 09 05:52:19.817647 2026] [:error] [pid 35916:tid 35938] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Fri Jan 09 05:52:19.971877 2026] [:error] [pid 35916:tid 35934] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Fri Jan 09 05:52:20.174416 2026] [:error] [pid 35916:tid 35932] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Jan 09 05:52:20.319102 2026] [:error] [pid 35916:tid 35919] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/777.php
[Fri Jan 09 05:52:20.481663 2026] [:error] [pid 35916:tid 35925] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/888.php
[Fri Jan 09 05:52:20.669930 2026] [:error] [pid 35916:tid 35927] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/999.php
[Fri Jan 09 05:52:20.943918 2026] [:error] [pid 35916:tid 35942] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Fri Jan 09 05:52:21.087152 2026] [:error] [pid 35916:tid 35918] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/xyz.php
[Fri Jan 09 05:52:21.240750 2026] [:error] [pid 35916:tid 35936] [client 4.213.159.226:3142] File does not exist: /usr/local/apache/htdocs/suspended-page/hack.php
[Fri Jan 09 05:52:21.382198 2026] [:error] [pid 35916:tid 35931] [client 4.213.159.226:3142] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exploit.php"] [unique_id "aWAnFfnSLfzabNjOjwygTgAAAM0"]
[Fri Jan 09 05:52:22.177235 2026] [:error] [pid 35810:tid 35836] [client 4.213.159.226:3235] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exploit.php"] [unique_id "aWAnForJrhH8tOUNM5D3igAAABE"]
[Fri Jan 09 05:52:23.463408 2026] [:error] [pid 10431:tid 10458] [client 4.213.159.226:3234] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exploit.php"] [unique_id "aWAnFykUbiVdwQzsJJTVxQAAARg"]
[Fri Jan 09 05:52:24.179780 2026] [:error] [pid 10431:tid 10434] [client 4.213.159.226:3402] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exploit.php"] [unique_id "aWAnGCkUbiVdwQzsJJTVyAAAAQA"]
[Fri Jan 09 05:52:24.884705 2026] [:error] [pid 35916:tid 35922] [client 4.213.159.226:3207] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aWAnGPnSLfzabNjOjwygVAAAAMQ"]
[Fri Jan 09 05:52:25.877369 2026] [:error] [pid 35811:tid 35853] [client 4.213.159.226:3100] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aWAnGW7lx9V0CvYJJf2_ugAAAEY"]
[Fri Jan 09 05:52:26.791118 2026] [:error] [pid 10431:tid 10444] [client 4.213.159.226:3404] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aWAnGikUbiVdwQzsJJTV0AAAAQo"]
[Fri Jan 09 05:52:28.071878 2026] [:error] [pid 35810:tid 35840] [client 4.213.159.226:3424] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backdoor.php"] [unique_id "aWAnHIrJrhH8tOUNM5D3jwAAABU"]
[Fri Jan 09 05:52:29.359248 2026] [:error] [pid 10431:tid 10456] [client 4.213.159.226:3143] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rce.php"] [unique_id "aWAnHSkUbiVdwQzsJJTV3AAAARY"]
[Fri Jan 09 05:52:30.263701 2026] [:error] [pid 35916:tid 35920] [client 4.213.159.226:3423] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rce.php"] [unique_id "aWAnHvnSLfzabNjOjwygXQAAAMI"]
[Fri Jan 09 05:52:31.281332 2026] [:error] [pid 35916:tid 35941] [client 4.213.159.226:3418] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rce.php"] [unique_id "aWAnH_nSLfzabNjOjwygYwAAANc"]
[Fri Jan 09 05:52:32.907061 2026] [:error] [pid 35812:tid 35876] [client 4.213.159.226:3392] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rce.php"] [unique_id "aWAnIEAss1qSj44c-n36BgAAAII"]
[Fri Jan 09 05:52:33.521205 2026] [:error] [pid 35812:tid 35896] [client 4.213.159.226:3444] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lfi.php"] [unique_id "aWAnIUAss1qSj44c-n36CQAAAJY"]
[Fri Jan 09 05:52:34.323321 2026] [:error] [pid 35811:tid 35852] [client 4.213.159.226:3417] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lfi.php"] [unique_id "aWAnIm7lx9V0CvYJJf2_xgAAAEU"]
[Fri Jan 09 05:52:37.106735 2026] [:error] [pid 35916:tid 35922] [client 4.213.159.226:3113] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lfi.php"] [unique_id "aWAnJfnSLfzabNjOjwygagAAAMQ"]
[Fri Jan 09 05:52:37.915820 2026] [:error] [pid 10431:tid 10448] [client 4.213.159.226:3083] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lfi.php"] [unique_id "aWAnJSkUbiVdwQzsJJTV7gAAAQ4"]
[Fri Jan 09 05:52:38.353501 2026] [:error] [pid 35812:tid 35898] [client 4.213.159.226:3092] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rfi.php"] [unique_id "aWAnJkAss1qSj44c-n36EQAAAJg"]
[Fri Jan 09 05:52:39.715600 2026] [:error] [pid 35812:tid 35883] [client 4.213.159.226:3408] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rfi.php"] [unique_id "aWAnJ0Ass1qSj44c-n36FgAAAIk"]
[Fri Jan 09 05:52:41.612071 2026] [:error] [pid 10431:tid 10451] [client 4.213.159.226:3082] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rfi.php"] [unique_id "aWAnKSkUbiVdwQzsJJTV8wAAARE"]
[Fri Jan 09 05:52:42.688640 2026] [:error] [pid 35811:tid 35849] [client 4.213.159.226:3158] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rfi.php"] [unique_id "aWAnKm7lx9V0CvYJJf2_1QAAAEI"]
[Fri Jan 09 05:52:43.861989 2026] [:error] [pid 35810:tid 35837] [client 4.213.159.226:3203] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.exe"] [unique_id "aWAnK4rJrhH8tOUNM5D3pAAAABI"]
[Fri Jan 09 05:52:45.106129 2026] [:error] [pid 35916:tid 35923] [client 4.213.159.226:3104] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.exe"] [unique_id "aWAnLfnSLfzabNjOjwygcgAAAMU"]
[Fri Jan 09 05:52:45.834807 2026] [:error] [pid 35916:tid 35931] [client 4.213.159.226:3074] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.exe"] [unique_id "aWAnLfnSLfzabNjOjwygdwAAAM0"]
[Fri Jan 09 05:52:46.880239 2026] [:error] [pid 35810:tid 35825] [client 4.213.159.226:3654] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmd.exe"] [unique_id "aWAnLorJrhH8tOUNM5D3qQAAAAY"]
[Fri Jan 09 05:52:47.851629 2026] [:error] [pid 35810:tid 35836] [client 4.213.159.226:3430] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWAnL4rJrhH8tOUNM5D3qwAAABE"]
[Fri Jan 09 05:52:48.756003 2026] [:error] [pid 35916:tid 35937] [client 4.213.159.226:3449] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWAnMPnSLfzabNjOjwyggQAAANM"]
[Fri Jan 09 05:52:50.773541 2026] [:error] [pid 35916:tid 35930] [client 4.213.159.226:3454] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWAnMvnSLfzabNjOjwygjQAAAMw"]
[Fri Jan 09 05:52:52.546571 2026] [:error] [pid 35811:tid 35847] [client 4.213.159.226:3422] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWAnNG7lx9V0CvYJJf2_9QAAAEA"]
[Fri Jan 09 05:52:53.919185 2026] [:error] [pid 10431:tid 10457] [client 4.213.159.226:3241] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.exe"] [unique_id "aWAnNSkUbiVdwQzsJJTWFgAAARc"]
[Fri Jan 09 05:52:55.459123 2026] [:error] [pid 35812:tid 35876] [client 4.213.159.226:3652] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.exe"] [unique_id "aWAnN0Ass1qSj44c-n36RwAAAII"]
[Fri Jan 09 05:52:56.747378 2026] [:error] [pid 35810:tid 35820] [client 4.213.159.226:3416] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.exe"] [unique_id "aWAnOIrJrhH8tOUNM5D3vgAAAAE"]
[Fri Jan 09 05:52:58.793079 2026] [:error] [pid 35811:tid 35870] [client 4.213.159.226:3455] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.exe"] [unique_id "aWAnOm7lx9V0CvYJJf3AAgAAAFc"]
[Fri Jan 09 05:52:59.532837 2026] [:error] [pid 10431:tid 10435] [client 4.213.159.226:3249] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.exe"] [unique_id "aWAnOykUbiVdwQzsJJTWJgAAAQE"]
[Fri Jan 09 05:53:00.894334 2026] [:error] [pid 35812:tid 35878] [client 4.213.159.226:3111] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.exe"] [unique_id "aWAnPEAss1qSj44c-n36WAAAAIQ"]
[Fri Jan 09 05:53:02.960558 2026] [:error] [pid 35811:tid 35867] [client 4.213.159.226:3261] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.exe"] [unique_id "aWAnPm7lx9V0CvYJJf3ACwAAAFQ"]
[Fri Jan 09 05:53:03.693419 2026] [:error] [pid 35810:tid 35833] [client 4.213.159.226:3428] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.exe"] [unique_id "aWAnP4rJrhH8tOUNM5D3ywAAAA4"]
[Fri Jan 09 05:53:04.405146 2026] [:error] [pid 35810:tid 35842] [client 4.213.159.226:3529] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payload.php"] [unique_id "aWAnQIrJrhH8tOUNM5D30gAAABc"]
[Fri Jan 09 05:53:04.957502 2026] [:error] [pid 35812:tid 35893] [client 4.213.159.226:3263] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payload.php"] [unique_id "aWAnQEAss1qSj44c-n36YgAAAJM"]
[Fri Jan 09 05:53:07.265217 2026] [:error] [pid 10431:tid 10446] [client 4.213.159.226:3397] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payload.php"] [unique_id "aWAnQykUbiVdwQzsJJTWLQAAAQw"]
[Fri Jan 09 05:53:08.481516 2026] [:error] [pid 35811:tid 35855] [client 4.213.159.226:3073] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payload.php"] [unique_id "aWAnRG7lx9V0CvYJJf3ADQAAAEg"]
[Fri Jan 09 05:53:09.911517 2026] [:error] [pid 35811:tid 35860] [client 4.213.159.226:3081] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWAnRW7lx9V0CvYJJf3ADwAAAE0"]
[Fri Jan 09 05:53:10.838074 2026] [:error] [pid 35916:tid 35933] [client 4.213.159.226:3661] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWAnRvnSLfzabNjOjwygvAAAAM8"]
[Fri Jan 09 05:53:12.095797 2026] [:error] [pid 35916:tid 35937] [client 4.213.159.226:3076] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWAnSPnSLfzabNjOjwygwgAAANM"]
[Fri Jan 09 05:53:14.134167 2026] [:error] [pid 35812:tid 35896] [client 4.213.159.226:3093] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWAnSkAss1qSj44c-n36cwAAAJY"]
[Fri Jan 09 05:53:15.289594 2026] [:error] [pid 35810:tid 35824] [client 4.213.159.226:3450] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aWAnS4rJrhH8tOUNM5D35QAAAAU"]
[Fri Jan 09 05:53:16.187653 2026] [:error] [pid 35812:tid 35884] [client 4.213.159.226:3253] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aWAnTEAss1qSj44c-n36gQAAAIo"]
[Fri Jan 09 05:53:17.479073 2026] [:error] [pid 35810:tid 35828] [client 4.213.159.226:3250] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aWAnTYrJrhH8tOUNM5D37QAAAAk"]
[Fri Jan 09 05:53:18.130763 2026] [:error] [pid 10431:tid 10447] [client 4.213.159.226:3080] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aWAnTikUbiVdwQzsJJTWQQAAAQ0"]
[Fri Jan 09 05:53:19.037498 2026] [:error] [pid 35812:tid 35897] [client 4.213.159.226:3704] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waf.php"] [unique_id "aWAnT0Ass1qSj44c-n36iAAAAJc"]
[Fri Jan 09 05:53:21.013079 2026] [:error] [pid 35916:tid 35926] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/waf.php
[Fri Jan 09 05:53:21.159318 2026] [:error] [pid 35916:tid 35925] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/attack.php
[Fri Jan 09 05:53:21.302129 2026] [:error] [pid 35916:tid 35939] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/pentest.php
[Fri Jan 09 05:53:21.451574 2026] [:error] [pid 35916:tid 35932] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Fri Jan 09 05:53:21.639748 2026] [:error] [pid 35916:tid 35923] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/scan.php
[Fri Jan 09 05:53:21.788674 2026] [:error] [pid 35916:tid 35938] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/check.php
[Fri Jan 09 05:53:21.935830 2026] [:error] [pid 35916:tid 35937] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/ver.php
[Fri Jan 09 05:53:22.078291 2026] [:error] [pid 35916:tid 35936] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Fri Jan 09 05:53:22.221946 2026] [:error] [pid 35916:tid 35920] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 09 05:53:22.363564 2026] [:error] [pid 35916:tid 35928] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 05:53:22.507417 2026] [:error] [pid 35916:tid 35940] [client 4.213.159.226:3656] File does not exist: /usr/local/apache/htdocs/suspended-page/test123.php
[Fri Jan 09 05:53:22.691006 2026] [:error] [pid 35916:tid 35921] [client 4.213.159.226:3656] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin123.php"] [unique_id "aWAnUvnSLfzabNjOjwyg6AAAAMM"]
[Fri Jan 09 05:53:23.394610 2026] [:error] [pid 35812:tid 35893] [client 4.213.159.226:3124] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin123.php"] [unique_id "aWAnU0Ass1qSj44c-n36lAAAAJM"]
[Fri Jan 09 05:53:24.399457 2026] [:error] [pid 35916:tid 35926] [client 4.213.159.226:3448] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin123.php"] [unique_id "aWAnVPnSLfzabNjOjwyg6wAAAMg"]
[Fri Jan 09 05:53:26.015611 2026] [:error] [pid 35810:tid 35840] [client 4.213.159.226:3244] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin123.php"] [unique_id "aWAnVorJrhH8tOUNM5D3_wAAABU"]
[Fri Jan 09 05:53:27.132061 2026] [:error] [pid 35811:tid 35860] [client 4.213.159.226:3119] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aWAnV27lx9V0CvYJJf3AMgAAAE0"]
[Fri Jan 09 05:53:27.977159 2026] [:error] [pid 10431:tid 10434] [client 4.213.159.226:3086] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aWAnVykUbiVdwQzsJJTWVAAAAQA"]
[Fri Jan 09 05:53:29.777444 2026] [:error] [pid 10431:tid 10457] [client 4.213.159.226:3085] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aWAnWSkUbiVdwQzsJJTWWAAAARc"]
[Fri Jan 09 05:53:30.846368 2026] [:error] [pid 35812:tid 35880] [client 4.213.159.226:3427] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aWAnWkAss1qSj44c-n36ogAAAIY"]
[Fri Jan 09 05:53:32.526907 2026] [:error] [pid 35812:tid 35881] [client 4.213.159.226:3453] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mega.php"] [unique_id "aWAnXEAss1qSj44c-n36pgAAAIc"]
[Fri Jan 09 05:53:33.236526 2026] [:error] [pid 35916:tid 35931] [client 4.213.159.226:3407] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mega.php"] [unique_id "aWAnXfnSLfzabNjOjwyhDwAAAM0"]
[Fri Jan 09 05:53:34.686281 2026] [:error] [pid 10431:tid 10446] [client 4.213.159.226:3167] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mega.php"] [unique_id "aWAnXikUbiVdwQzsJJTWYwAAAQw"]
[Fri Jan 09 05:53:35.553391 2026] [:error] [pid 35916:tid 35936] [client 4.213.159.226:3220] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mega.php"] [unique_id "aWAnX_nSLfzabNjOjwyhFAAAANI"]
[Fri Jan 09 05:53:36.690010 2026] [:error] [pid 10431:tid 10440] [client 4.213.159.226:3426] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ultra.php"] [unique_id "aWAnYCkUbiVdwQzsJJTWawAAAQY"]
[Fri Jan 09 05:53:37.771048 2026] [:error] [pid 35811:tid 35850] [client 4.213.159.226:3445] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ultra.php"] [unique_id "aWAnYW7lx9V0CvYJJf3ARAAAAEM"]
[Fri Jan 09 05:53:39.684324 2026] [:error] [pid 10431:tid 10455] [client 4.213.159.226:3079] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ultra.php"] [unique_id "aWAnYykUbiVdwQzsJJTWcAAAARU"]
[Fri Jan 09 05:53:40.344158 2026] [:error] [pid 10431:tid 10435] [client 4.213.159.226:3096] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ultra.php"] [unique_id "aWAnZCkUbiVdwQzsJJTWdQAAAQE"]
[Fri Jan 09 05:53:41.448295 2026] [:error] [pid 35916:tid 35942] [client 4.213.159.226:3103] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aWAnZfnSLfzabNjOjwyhJgAAANg"]
[Fri Jan 09 05:53:42.701214 2026] [:error] [pid 35916:tid 35925] [client 4.213.159.226:3127] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aWAnZvnSLfzabNjOjwyhKwAAAMc"]
[Fri Jan 09 05:53:43.748257 2026] [:error] [pid 35916:tid 35926] [client 4.213.159.226:3090] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aWAnZ_nSLfzabNjOjwyhLwAAAMg"]
[Fri Jan 09 05:53:45.937422 2026] [:error] [pid 10431:tid 10443] [client 4.213.159.226:3262] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aWAnaSkUbiVdwQzsJJTWuQAAAQk"]
[Fri Jan 09 05:53:46.894657 2026] [:error] [pid 35811:tid 35867] [client 4.213.159.226:3112] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanced.php"] [unique_id "aWAnam7lx9V0CvYJJf3AdQAAAFQ"]
[Fri Jan 09 05:53:48.655666 2026] [:error] [pid 35812:tid 35884] [client 4.213.159.226:3259] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanced.php"] [unique_id "aWAnbEAss1qSj44c-n36uwAAAIo"]
[Fri Jan 09 05:53:49.605621 2026] [:error] [pid 35812:tid 35897] [client 4.213.159.226:3660] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanced.php"] [unique_id "aWAnbUAss1qSj44c-n36wAAAAJc"]
[Fri Jan 09 05:53:50.888143 2026] [:error] [pid 35812:tid 35891] [client 4.213.159.226:3120] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanced.php"] [unique_id "aWAnbkAss1qSj44c-n36wgAAAJE"]
[Fri Jan 09 05:53:52.984497 2026] [:error] [pid 10431:tid 10435] [client 4.213.159.226:3239] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aWAncCkUbiVdwQzsJJTW2wAAAQE"]
[Fri Jan 09 05:53:54.062291 2026] [:error] [pid 35916:tid 35924] [client 4.213.159.226:3130] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aWAncvnSLfzabNjOjwyhSAAAAMY"]
[Fri Jan 09 05:53:55.790789 2026] [:error] [pid 35812:tid 35876] [client 4.213.159.226:3409] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aWAnc0Ass1qSj44c-n36ygAAAII"]
[Fri Jan 09 05:53:57.824511 2026] [:error] [pid 35916:tid 35931] [client 4.213.159.226:3102] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aWAndfnSLfzabNjOjwyhVgAAAM0"]
[Fri Jan 09 05:53:58.221812 2026] [:error] [pid 35811:tid 35848] [client 4.213.159.226:3436] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/basic.php"] [unique_id "aWAndm7lx9V0CvYJJf3AjQAAAEE"]
[Fri Jan 09 05:53:59.365091 2026] [:error] [pid 35811:tid 35849] [client 4.213.159.226:3707] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/basic.php"] [unique_id "aWAnd27lx9V0CvYJJf3AkQAAAEI"]
[Fri Jan 09 05:54:01.024381 2026] [:error] [pid 35812:tid 35876] [client 4.213.159.226:3099] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/basic.php"] [unique_id "aWAneUAss1qSj44c-n362QAAAII"]
[Fri Jan 09 05:54:01.574319 2026] [:error] [pid 10431:tid 10449] [client 4.213.159.226:3665] [client 4.213.159.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/basic.php"] [unique_id "aWAneSkUbiVdwQzsJJTW8AAAAQ8"]
[Fri Jan 09 08:56:19.722057 2026] [:error] [pid 10431:tid 10458] [client 49.51.233.46:54642] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWBSMykUbiVdwQzsJJQ6cwAAARg"]
[Fri Jan 09 11:13:55.950395 2026] [:error] [pid 1366:tid 1371] [client 143.244.141.160:51997] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aWBycxmasveKu8_ec1W8WwAAAYM"], referer: binance.com
[Fri Jan 09 11:14:07.775905 2026] [:error] [pid 30019:tid 30048] [client 143.244.141.160:54758] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aWByf0z3igHGwX5f7Ip9GAAAABg"], referer: binance.com
[Fri Jan 09 12:01:54.790683 2026] [:error] [pid 14831:tid 14848] [client 49.51.72.236:36706] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWB9svaKOMCmJcAyBm3k-gAAAo8"]
[Fri Jan 09 13:47:56.854676 2026] [:error] [pid 14872:tid 14882] [client 93.139.202.247:62059] [client 93.139.202.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.139.202.247, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWCWjKIUELhgYLNp1sb1iAAAAsg"]
[Fri Jan 09 13:47:56.860981 2026] [:error] [pid 14872:tid 14882] [client 93.139.202.247:62059] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 09 17:33:28.272843 2026] [:error] [pid 14872:tid 14893] [client 182.42.105.85:41256] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWDLaKIUELhgYLNp1sYcxwAAAtM"]
[Fri Jan 09 20:00:02.526035 2026] [:error] [pid 1366:tid 1370] [client 16.52.167.153:60164] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aWDtwhmasveKu8_ec1VkkAAAAYI"]
[Fri Jan 09 20:00:03.454238 2026] [:error] [pid 14831:tid 14833] [client 16.52.167.153:60290] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aWDtw_aKOMCmJcAyBm01iwAAAoA"]
[Fri Jan 09 20:00:05.308565 2026] [:error] [pid 14831:tid 14856] [client 16.52.167.153:60618] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/backup.sql"] [unique_id "aWDtxfaKOMCmJcAyBm01jwAAApc"]
[Fri Jan 09 20:00:06.214744 2026] [:error] [pid 44848:tid 44852] [client 16.52.167.153:60776] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/debug.log"] [unique_id "aWDtxqjajoTJAbEk87zEnAAAAEI"]
[Fri Jan 09 20:00:07.077652 2026] [:error] [pid 14801:tid 14827] [client 16.52.167.153:60930] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/database.sql"] [unique_id "aWDtx98UWXrz_OQYgF1goAAAAlg"]
[Fri Jan 09 20:00:07.937495 2026] [:error] [pid 14801:tid 14825] [client 16.52.167.153:32834] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aWDtx98UWXrz_OQYgF1gogAAAlY"]
[Fri Jan 09 20:00:12.302758 2026] [:error] [pid 1366:tid 1388] [client 16.52.167.153:33608] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dump.sql"] [unique_id "aWDtzBmasveKu8_ec1VknwAAAZM"]
[Fri Jan 09 20:00:14.061723 2026] [:error] [pid 30019:tid 30043] [client 16.52.167.153:33864] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aWDtzkz3igHGwX5f7IrjygAAABM"]
[Fri Jan 09 20:00:14.947821 2026] [:error] [pid 1366:tid 1374] [client 16.52.167.153:33960] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/log/error.log"] [unique_id "aWDtzhmasveKu8_ec1VkpQAAAYU"]
[Fri Jan 09 20:00:15.826323 2026] [:error] [pid 44848:tid 44874] [client 16.52.167.153:34068] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "aWDtz6jajoTJAbEk87zEpAAAAFg"]
[Fri Jan 09 20:00:17.588637 2026] [:error] [pid 14831:tid 14847] [client 16.52.167.153:34306] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 20:00:19.327473 2026] [:error] [pid 30021:tid 30092] [client 16.52.167.153:34488] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aWDt0w_M8aRtsTog5J-bKgAAAMs"]
[Fri Jan 09 20:00:20.213941 2026] [:error] [pid 44848:tid 44853] [client 16.52.167.153:34596] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 09 20:00:21.102454 2026] [:error] [pid 14770:tid 14789] [client 16.52.167.153:34674] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aWDt1R5QbaVZ-6newJY4cQAAAhE"]
[Fri Jan 09 20:00:21.985372 2026] [:error] [pid 14770:tid 14783] [client 16.52.167.153:34786] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aWDt1R5QbaVZ-6newJY4cwAAAgs"]
[Fri Jan 09 20:00:22.868732 2026] [:error] [pid 44848:tid 44871] [client 16.52.167.153:34916] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aWDt1qjajoTJAbEk87zEtAAAAFU"]
[Fri Jan 09 20:00:23.748872 2026] [:error] [pid 30019:tid 30045] [client 16.52.167.153:35060] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/laravel/.env"] [unique_id "aWDt10z3igHGwX5f7Irj0wAAABU"]
[Fri Jan 09 20:00:24.619093 2026] [:error] [pid 14872:tid 14880] [client 16.52.167.153:35204] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Jan 09 20:00:25.502635 2026] [:error] [pid 1366:tid 1389] [client 16.52.167.153:35352] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aWDt2RmasveKu8_ec1VkrAAAAZQ"]
[Fri Jan 09 20:00:26.384966 2026] [:error] [pid 30019:tid 30025] [client 16.52.167.153:35516] [client 16.52.167.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aWDt2kz3igHGwX5f7Irj2AAAAAE"]
[Fri Jan 09 22:29:18.768706 2026] [:error] [pid 30021:tid 30088] [client 188.166.70.25:53267] [client 188.166.70.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 188.166.70.25, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWEQvg_M8aRtsTog5J-2WAAAAMc"]
[Fri Jan 09 22:29:18.772389 2026] [:error] [pid 30021:tid 30088] [client 188.166.70.25:53267] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 09 23:56:32.194135 2026] [:error] [pid 14770:tid 14775] [client 16.171.150.99:58202] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aWElMB5QbaVZ-6newJZckwAAAgM"]
[Fri Jan 09 23:56:33.328275 2026] [:error] [pid 1366:tid 1373] [client 16.171.150.99:58442] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aWElMRmasveKu8_ec1WmMAAAAYQ"]
[Fri Jan 09 23:56:35.615151 2026] [:error] [pid 1366:tid 1384] [client 16.171.150.99:58936] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/backup.sql"] [unique_id "aWElMxmasveKu8_ec1WmNwAAAY8"]
[Fri Jan 09 23:56:36.750766 2026] [:error] [pid 14739:tid 14742] [client 16.171.150.99:59172] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/debug.log"] [unique_id "aWElNF63M6_PkLt_IJKGnAAAAcE"]
[Fri Jan 09 23:56:37.888452 2026] [:error] [pid 30021:tid 30093] [client 16.171.150.99:59438] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/database.sql"] [unique_id "aWElNQ_M8aRtsTog5J_EWgAAAMw"]
[Fri Jan 09 23:56:39.012698 2026] [:error] [pid 44848:tid 44860] [client 16.171.150.99:59700] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aWElN6jajoTJAbEk87z2zQAAAEo"]
[Fri Jan 09 23:56:44.674901 2026] [:error] [pid 1366:tid 1369] [client 16.171.150.99:60954] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dump.sql"] [unique_id "aWElPBmasveKu8_ec1WmTAAAAYE"]
[Fri Jan 09 23:56:46.948469 2026] [:error] [pid 44848:tid 44860] [client 16.171.150.99:33452] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aWElPqjajoTJAbEk87z23gAAAEo"]
[Fri Jan 09 23:56:48.095309 2026] [:error] [pid 14770:tid 14791] [client 16.171.150.99:33804] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/log/error.log"] [unique_id "aWElQB5QbaVZ-6newJZcpgAAAhM"]
[Fri Jan 09 23:56:49.240851 2026] [:error] [pid 14831:tid 14841] [client 16.171.150.99:34078] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "aWElQfaKOMCmJcAyBm1ZCQAAAog"]
[Fri Jan 09 23:56:51.521182 2026] [:error] [pid 30020:tid 30065] [client 16.171.150.99:34598] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri Jan 09 23:56:53.908785 2026] [:error] [pid 30021:tid 30099] [client 16.171.150.99:35184] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aWElRQ_M8aRtsTog5J_EdwAAANI"]
[Fri Jan 09 23:56:55.033092 2026] [:error] [pid 14831:tid 14841] [client 16.171.150.99:35614] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 09 23:56:56.168531 2026] [:error] [pid 14770:tid 14779] [client 16.171.150.99:36010] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aWElSB5QbaVZ-6newJZcsAAAAgc"]
[Fri Jan 09 23:56:57.293179 2026] [:error] [pid 14770:tid 14795] [client 16.171.150.99:36360] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aWElSR5QbaVZ-6newJZcswAAAhc"]
[Fri Jan 09 23:56:58.430204 2026] [:error] [pid 44848:tid 44855] [client 16.171.150.99:36716] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aWElSqjajoTJAbEk87z25wAAAEU"]
[Fri Jan 09 23:56:59.565366 2026] [:error] [pid 14872:tid 14896] [client 16.171.150.99:37108] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/laravel/.env"] [unique_id "aWElS6IUELhgYLNp1sZasQAAAtY"]
[Fri Jan 09 23:57:00.720608 2026] [:error] [pid 30020:tid 30074] [client 16.171.150.99:37490] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Jan 09 23:57:01.857220 2026] [:error] [pid 1366:tid 1391] [client 16.171.150.99:37840] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aWElTRmasveKu8_ec1WmYgAAAZY"]
[Fri Jan 09 23:57:02.990686 2026] [:error] [pid 44848:tid 44857] [client 16.171.150.99:38118] [client 16.171.150.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aWElTqjajoTJAbEk87z26AAAAEc"]
[Sat Jan 10 01:45:21.294385 2026] [:error] [pid 1366:tid 1377] [client 161.118.211.239:65090] [client 161.118.211.239] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWE-sRmasveKu8_ec1XFaQAAAYg"]
[Sat Jan 10 01:46:54.812228 2026] [:error] [pid 14872:tid 14874] [client 43.155.195.141:52410] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWE_DqIUELhgYLNp1sZqBwAAAsA"]
[Sat Jan 10 02:53:46.118559 2026] [:error] [pid 30020:tid 30058] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Sat Jan 10 02:53:46.257792 2026] [:error] [pid 30020:tid 30054] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sample-load.php
[Sat Jan 10 02:53:46.447588 2026] [:error] [pid 30020:tid 30055] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header-json.php
[Sat Jan 10 02:53:46.585286 2026] [:error] [pid 30020:tid 30063] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Jan 10 02:53:46.723819 2026] [:error] [pid 30020:tid 30067] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/old.php
[Sat Jan 10 02:53:46.861823 2026] [:error] [pid 30020:tid 30072] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat Jan 10 02:53:47.017686 2026] [:error] [pid 30020:tid 30069] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/ultra.php
[Sat Jan 10 02:53:47.321310 2026] [:error] [pid 30020:tid 30078] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat Jan 10 02:53:47.459738 2026] [:error] [pid 30020:tid 30066] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Jan 10 02:53:47.596738 2026] [:error] [pid 30020:tid 30074] [client 4.218.8.9:10969] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sat Jan 10 02:53:47.733322 2026] [:error] [pid 30020:tid 30075] [client 4.218.8.9:10969] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWFOu8rjc66qOisG6L0LAwAAAJU"]
[Sat Jan 10 02:53:51.724799 2026] [:error] [pid 44848:tid 44873] [client 4.218.8.9:24328] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWFOv6jajoTJAbEk87wYKQAAAFc"]
[Sat Jan 10 02:53:53.782211 2026] [:error] [pid 14831:tid 14850] [client 4.218.8.9:24011] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWFOwfaKOMCmJcAyBm1u7QAAApE"]
[Sat Jan 10 02:54:01.432611 2026] [:error] [pid 14831:tid 14849] [client 4.218.8.9:19146] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aWFOyfaKOMCmJcAyBm1u9wAAApA"]
[Sat Jan 10 02:54:05.925800 2026] [:error] [pid 1366:tid 1385] [client 4.218.8.9:24025] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWFOzRmasveKu8_ec1XVbQAAAZA"]
[Sat Jan 10 02:54:07.716540 2026] [:error] [pid 1366:tid 1382] [client 4.218.8.9:24719] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWFOzxmasveKu8_ec1XVbgAAAY0"]
[Sat Jan 10 02:54:09.377436 2026] [:error] [pid 1366:tid 1379] [client 4.218.8.9:19156] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWFO0RmasveKu8_ec1XVcAAAAYo"]
[Sat Jan 10 02:54:10.946466 2026] [:error] [pid 44848:tid 44856] [client 4.218.8.9:23560] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWFO0qjajoTJAbEk87wYQgAAAEY"]
[Sat Jan 10 02:54:11.973385 2026] [:error] [pid 14831:tid 14833] [client 4.218.8.9:23610] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWFO0_aKOMCmJcAyBm1u_AAAAoA"]
[Sat Jan 10 02:54:13.485916 2026] [:error] [pid 14872:tid 14898] [client 4.218.8.9:24712] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWFO1aIUELhgYLNp1sZysQAAAtg"]
[Sat Jan 10 02:54:18.382108 2026] [:error] [pid 30019:tid 30033] [client 4.218.8.9:23596] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWFO2kz3igHGwX5f7Ior_gAAAAk"]
[Sat Jan 10 02:54:22.067310 2026] [:error] [pid 44848:tid 44854] [client 4.218.8.9:23556] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWFO3qjajoTJAbEk87wYSAAAAEQ"]
[Sat Jan 10 02:54:27.336707 2026] [:error] [pid 14831:tid 14844] [client 4.218.8.9:21797] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWFO4_aKOMCmJcAyBm1vAQAAAos"]
[Sat Jan 10 02:54:28.056860 2026] [:error] [pid 44848:tid 44857] [client 4.218.8.9:24034] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWFO5KjajoTJAbEk87wYUAAAAEc"]
[Sat Jan 10 02:54:28.576086 2026] [:error] [pid 14831:tid 14838] [client 4.218.8.9:22966] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWFO5PaKOMCmJcAyBm1vAwAAAoU"]
[Sat Jan 10 02:54:29.860187 2026] [:error] [pid 14872:tid 14878] [client 4.218.8.9:23571] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWFO5aIUELhgYLNp1sZyvQAAAsQ"]
[Sat Jan 10 02:54:31.882098 2026] [:error] [pid 30020:tid 30078] [client 4.218.8.9:23595] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWFO58rjc66qOisG6L0LEAAAAJg"]
[Sat Jan 10 02:54:32.423462 2026] [:error] [pid 14872:tid 14898] [client 4.218.8.9:20578] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWFO6KIUELhgYLNp1sZyvgAAAtg"]
[Sat Jan 10 02:54:35.746211 2026] [:error] [pid 30020:tid 30075] [client 4.218.8.9:20563] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWFO68rjc66qOisG6L0LEwAAAJU"]
[Sat Jan 10 02:54:37.900365 2026] [:error] [pid 30020:tid 30064] [client 4.218.8.9:20601] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aWFO7crjc66qOisG6L0LFQAAAIo"]
[Sat Jan 10 02:54:39.725838 2026] [:error] [pid 30021:tid 30094] [client 4.218.8.9:24746] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWFO7w_M8aRtsTog5J_fsgAAAM0"]
[Sat Jan 10 02:54:46.551519 2026] [:error] [pid 30021:tid 30099] [client 4.218.8.9:19147] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWFO9g_M8aRtsTog5J_ftwAAANI"]
[Sat Jan 10 02:54:49.251588 2026] [:error] [pid 14739:tid 14760] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Jan 10 02:54:49.399816 2026] [:error] [pid 14739:tid 14756] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/pro.php
[Sat Jan 10 02:54:49.542279 2026] [:error] [pid 14739:tid 14758] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Sat Jan 10 02:54:49.680174 2026] [:error] [pid 14739:tid 14747] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Jan 10 02:54:49.823703 2026] [:error] [pid 14739:tid 14742] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat Jan 10 02:54:49.962805 2026] [:error] [pid 14739:tid 14743] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Jan 10 02:54:51.950230 2026] [:error] [pid 14739:tid 14751] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Jan 10 02:54:52.088282 2026] [:error] [pid 14739:tid 14745] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat Jan 10 02:54:52.236886 2026] [:error] [pid 14739:tid 14753] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Jan 10 02:54:52.374473 2026] [:error] [pid 14739:tid 14750] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Jan 10 02:54:52.512116 2026] [:error] [pid 14739:tid 14759] [client 4.218.8.9:22960] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Jan 10 02:54:53.434923 2026] [:error] [pid 14739:tid 14763] [client 4.218.8.9:22960] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWFO_V63M6_PkLt_IJKZ4AAAAdY"]
[Sat Jan 10 02:54:55.152513 2026] [:error] [pid 14739:tid 14754] [client 4.218.8.9:19076] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWFO_163M6_PkLt_IJKZ4QAAAc0"]
[Sat Jan 10 02:54:59.657950 2026] [:error] [pid 1366:tid 1369] [client 4.218.8.9:22927] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWFPAxmasveKu8_ec1XVjQAAAYE"]
[Sat Jan 10 02:55:02.630566 2026] [:error] [pid 30020:tid 30067] [client 4.218.8.9:18885] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug.php"] [unique_id "aWFPBsrjc66qOisG6L0LHQAAAI0"]
[Sat Jan 10 02:55:06.533123 2026] [:error] [pid 1366:tid 1387] [client 4.218.8.9:21763] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWFPChmasveKu8_ec1XVlQAAAZI"]
[Sat Jan 10 02:55:09.764989 2026] [:error] [pid 14872:tid 14895] [client 4.218.8.9:18901] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWFPDaIUELhgYLNp1sZy8gAAAtU"]
[Sat Jan 10 02:55:11.255032 2026] [:error] [pid 30021:tid 30092] [client 4.218.8.9:25504] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWFPDw_M8aRtsTog5J_fxQAAAMs"]
[Sat Jan 10 02:55:13.645618 2026] [:error] [pid 30019:tid 30036] [client 4.218.8.9:17782] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aWFPEUz3igHGwX5f7IosiQAAAAw"]
[Sat Jan 10 02:55:16.380986 2026] [:error] [pid 30019:tid 30026] [client 4.218.8.9:22381] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWFPFEz3igHGwX5f7IosjQAAAAI"]
[Sat Jan 10 02:55:20.613542 2026] [:error] [pid 1366:tid 1378] [client 4.218.8.9:17750] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWFPGBmasveKu8_ec1XVlwAAAYk"]
[Sat Jan 10 02:55:24.359941 2026] [:error] [pid 1366:tid 1369] [client 4.218.8.9:18942] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWFPHBmasveKu8_ec1XVnQAAAYE"]
[Sat Jan 10 02:55:26.557992 2026] [:error] [pid 1366:tid 1374] [client 4.218.8.9:10520] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aWFPHhmasveKu8_ec1XVoQAAAYU"]
[Sat Jan 10 02:55:29.256636 2026] [:error] [pid 30019:tid 30034] [client 4.218.8.9:10502] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/999.php"] [unique_id "aWFPIUz3igHGwX5f7IoslgAAAAo"]
[Sat Jan 10 02:55:42.633868 2026] [:error] [pid 30019:tid 30033] [client 4.218.8.9:21055] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/999.php"] [unique_id "aWFPLkz3igHGwX5f7IosqwAAAAk"]
[Sat Jan 10 02:55:44.514098 2026] [:error] [pid 14770:tid 14788] [client 4.218.8.9:22633] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aWFPMB5QbaVZ-6newJZyqAAAAhA"]
[Sat Jan 10 02:55:47.379835 2026] [:error] [pid 14801:tid 14821] [client 4.218.8.9:19447] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aWFPM98UWXrz_OQYgF2Z4gAAAlI"]
[Sat Jan 10 02:55:51.516310 2026] [:error] [pid 44848:tid 44865] [client 4.218.8.9:23546] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aWFPN6jajoTJAbEk87wYbAAAAE8"]
[Sat Jan 10 02:55:52.812623 2026] [:error] [pid 1366:tid 1383] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Sat Jan 10 02:55:52.988746 2026] [:error] [pid 1366:tid 1380] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/data.php
[Sat Jan 10 02:55:53.126825 2026] [:error] [pid 1366:tid 1381] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Jan 10 02:55:53.265738 2026] [:error] [pid 1366:tid 1369] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat Jan 10 02:55:53.411229 2026] [:error] [pid 1366:tid 1382] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Jan 10 02:55:53.549268 2026] [:error] [pid 1366:tid 1376] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php
[Sat Jan 10 02:55:53.686200 2026] [:error] [pid 1366:tid 1392] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Jan 10 02:55:53.824305 2026] [:error] [pid 1366:tid 1390] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Sat Jan 10 02:55:53.963786 2026] [:error] [pid 1366:tid 1385] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sat Jan 10 02:55:54.102450 2026] [:error] [pid 1366:tid 1384] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Jan 10 02:55:54.243310 2026] [:error] [pid 1366:tid 1379] [client 4.218.8.9:26307] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Jan 10 02:55:54.378372 2026] [:error] [pid 1366:tid 1371] [client 4.218.8.9:26307] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWFPOhmasveKu8_ec1XVtwAAAYM"]
[Sat Jan 10 02:55:57.779727 2026] [:error] [pid 30021:tid 30093] [client 4.218.8.9:11131] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWFPPQ_M8aRtsTog5J_f0AAAAMw"]
[Sat Jan 10 02:56:01.513973 2026] [:error] [pid 30021:tid 30091] [client 4.218.8.9:20507] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWFPQQ_M8aRtsTog5J_f0gAAAMo"]
[Sat Jan 10 02:56:07.220631 2026] [:error] [pid 30021:tid 30087] [client 4.218.8.9:21497] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWFPRw_M8aRtsTog5J_f1QAAAMY"]
[Sat Jan 10 02:56:11.863307 2026] [:error] [pid 14739:tid 14755] [client 4.218.8.9:20163] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aWFPS163M6_PkLt_IJKZ9gAAAc4"]
[Sat Jan 10 02:56:13.554158 2026] [:error] [pid 1366:tid 1376] [client 4.218.8.9:20164] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aWFPTRmasveKu8_ec1XVwwAAAYc"]
[Sat Jan 10 02:56:20.038318 2026] [:error] [pid 14872:tid 14890] [client 4.218.8.9:20177] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aWFPVKIUELhgYLNp1sZzCwAAAtA"]
[Sat Jan 10 02:56:24.812428 2026] [:error] [pid 14739:tid 14746] [client 4.218.8.9:20049] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWFPWF63M6_PkLt_IJKZ9wAAAcU"]
[Sat Jan 10 02:56:26.240402 2026] [:error] [pid 14770:tid 14787] [client 4.218.8.9:10863] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWFPWh5QbaVZ-6newJZysQAAAg8"]
[Sat Jan 10 02:56:31.842648 2026] [:error] [pid 30021:tid 30091] [client 4.218.8.9:18686] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWFPXw_M8aRtsTog5J_f4QAAAMo"]
[Sat Jan 10 02:56:36.442305 2026] [:error] [pid 14770:tid 14782] [client 4.218.8.9:23571] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aWFPZB5QbaVZ-6newJZyuAAAAgo"]
[Sat Jan 10 02:56:39.950150 2026] [:error] [pid 1366:tid 1383] [client 4.218.8.9:18640] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWFPZxmasveKu8_ec1XVzgAAAY4"]
[Sat Jan 10 02:56:44.507263 2026] [:error] [pid 1366:tid 1373] [client 4.218.8.9:20172] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWFPbBmasveKu8_ec1XV3QAAAYQ"]
[Sat Jan 10 02:56:46.608264 2026] [:error] [pid 30020:tid 30070] [client 4.218.8.9:21831] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWFPbsrjc66qOisG6L0LMgAAAJA"]
[Sat Jan 10 02:56:52.609348 2026] [:error] [pid 14831:tid 14851] [client 4.218.8.9:20222] [client 4.218.8.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.exe"] [unique_id "aWFPdPaKOMCmJcAyBm1vLgAAApI"]
[Sat Jan 10 02:56:55.582151 2026] [:error] [pid 44848:tid 44857] [client 4.218.8.9:36018] File does not exist: /usr/local/apache/htdocs/suspended-page/u.php
[Sat Jan 10 02:56:57.576667 2026] [:error] [pid 44848:tid 44856] [client 4.218.8.9:36018] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Jan 10 02:56:57.734307 2026] [:error] [pid 44848:tid 44869] [client 4.218.8.9:36018] [client 4.218.8.9] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".phpquebecoils.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/info.phpquebecoils.com"] [unique_id "aWFPeajajoTJAbEk87wYeAAAAFM"]
[Sat Jan 10 06:17:15.627276 2026] [:error] [pid 20648:tid 20712] [client 120.71.59.24:50704] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWF-azBnnIoBkEBdx9AMlAAAAIM"]
[Sat Jan 10 10:19:40.764211 2026] [:error] [pid 20744:tid 20764] [client 43.135.140.225:44124] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWG3PEA8oR5jvkFpcP-bcgAAAMc"]
[Sat Jan 10 14:02:05.424047 2026] [:error] [pid 20646:tid 20657] [client 43.135.140.225:34992] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWHrXSKwdq_UhOM64b7rpQAAAAI"]
[Sat Jan 10 18:48:03.784818 2026] [:error] [pid 31369:tid 31372] [client 143.244.141.160:61141] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aWIuY7gqeMKgT1uTxuJ5EAAAAUE"], referer: binance.com
[Sat Jan 10 18:48:13.115687 2026] [:error] [pid 1249:tid 1255] [client 143.244.141.160:63223] [client 143.244.141.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aWIubUtd4KGpcdnrDZWX2gAAAMM"], referer: binance.com
[Sat Jan 10 18:50:46.078413 2026] [:error] [pid 1296:tid 1311] [client 101.91.148.219:40068] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWIvBibQW-fowWjMNKB8lQAAAk0"]
[Sat Jan 10 21:10:17.254441 2026] [:error] [pid 57649:tid 57671] [client 43.157.22.57:41834] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWJPuVcvIwrych3kBno2jQAAApQ"]
[Sat Jan 10 23:06:59.698566 2026] [:error] [pid 1249:tid 1264] [client 43.135.130.202:33466] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWJrE0td4KGpcdnrDZWzbwAAAMw"]
[Sun Jan 11 01:31:03.307021 2026] [:error] [pid 57649:tid 57652] [client 49.7.227.204:59000] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWKM11cvIwrych3kBnpKrQAAAoE"]
[Sun Jan 11 05:02:34.594896 2026] [:error] [pid 5155:tid 5223] [client 49.51.50.147:58060] [client 49.51.50.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWK-algEKFpNs0_zLGmGcQAAAIc"]
[Sun Jan 11 09:09:57.575792 2026] [:error] [pid 35977:tid 35986] [client 43.155.140.157:57362] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWL4ZbDST5RMqStLeP0DKgAAAgY"]
[Sun Jan 11 10:06:03.014527 2026] [:error] [pid 35730:tid 35733] [client 43.152.72.247:49488] [client 43.152.72.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWMFizi7U_mfHtESQHnyugAAAcE"]
[Sun Jan 11 10:54:31.251063 2026] [:error] [pid 5152:tid 5169] [client 170.106.35.187:54814] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWMQ5xm0axGMFrpuXHBZZgAAAAc"]
[Sun Jan 11 13:49:29.551051 2026] [:error] [pid 40191:tid 40217] [client 43.133.14.237:57310] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWM56Um2BH1CV1p0EUGaNgAAAtg"]
[Sun Jan 11 13:58:08.438051 2026] [:error] [pid 5153:tid 5204] [client 110.166.71.39:37909] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWM78M1QbNSPD9bRi76dLgAAAE8"]
[Sun Jan 11 17:46:07.803912 2026] [:error] [pid 35730:tid 35733] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sun Jan 11 17:46:07.894079 2026] [:error] [pid 35730:tid 35737] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxl.php
[Sun Jan 11 17:46:07.987050 2026] [:error] [pid 35730:tid 35732] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sun Jan 11 17:46:08.076752 2026] [:error] [pid 35730:tid 35736] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Sun Jan 11 17:46:08.167925 2026] [:error] [pid 35730:tid 35739] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/d9.php
[Sun Jan 11 17:46:08.257723 2026] [:error] [pid 35730:tid 35746] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wpdb.php
[Sun Jan 11 17:46:08.347117 2026] [:error] [pid 35730:tid 35750] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php
[Sun Jan 11 17:46:08.438130 2026] [:error] [pid 35730:tid 35755] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/lib068.php
[Sun Jan 11 17:46:08.527731 2026] [:error] [pid 35730:tid 35738] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-bar.php
[Sun Jan 11 17:46:08.618963 2026] [:error] [pid 35730:tid 35752] [client 4.194.120.160:9446] File does not exist: /usr/local/apache/htdocs/suspended-page/data_5dc22ab3.php
[Sun Jan 11 17:46:08.705253 2026] [:error] [pid 35730:tid 35745] [client 4.194.120.160:9446] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib751.php"] [unique_id "aWNxYDi7U_mfHtESQHkq1AAAAc0"]
[Sun Jan 11 17:46:08.882784 2026] [:error] [pid 5155:tid 5237] [client 4.194.120.160:9375] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib751.php"] [unique_id "aWNxYFgEKFpNs0_zLGkAOgAAAJU"]
[Sun Jan 11 17:46:09.056876 2026] [:error] [pid 35977:tid 35998] [client 4.194.120.160:9345] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib751.php"] [unique_id "aWNxYbDST5RMqStLeP1XoAAAAhI"]
[Sun Jan 11 17:46:09.230743 2026] [:error] [pid 35730:tid 35741] [client 4.194.120.160:9449] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib751.php"] [unique_id "aWNxYTi7U_mfHtESQHkq1QAAAck"]
[Sun Jan 11 17:46:09.406065 2026] [:error] [pid 5155:tid 5222] [client 4.194.120.160:9458] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWNxYVgEKFpNs0_zLGkAOwAAAIY"]
[Sun Jan 11 17:46:09.580747 2026] [:error] [pid 5152:tid 5184] [client 4.194.120.160:9344] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWNxYRm0axGMFrpuXHB_OAAAABY"]
[Sun Jan 11 17:46:09.754178 2026] [:error] [pid 35977:tid 35990] [client 4.194.120.160:9363] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWNxYbDST5RMqStLeP1XowAAAgo"]
[Sun Jan 11 17:46:09.927452 2026] [:error] [pid 5153:tid 5207] [client 4.194.120.160:9463] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aWNxYc1QbNSPD9bRi76zWAAAAFI"]
[Sun Jan 11 17:46:10.105383 2026] [:error] [pid 5155:tid 5218] [client 4.194.120.160:9412] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib182.php"] [unique_id "aWNxYlgEKFpNs0_zLGkAPQAAAII"]
[Sun Jan 11 17:46:10.284346 2026] [:error] [pid 5155:tid 5225] [client 4.194.120.160:9457] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib182.php"] [unique_id "aWNxYlgEKFpNs0_zLGkAPgAAAIk"]
[Sun Jan 11 17:46:10.463794 2026] [:error] [pid 5152:tid 5185] [client 4.194.120.160:9422] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib182.php"] [unique_id "aWNxYhm0axGMFrpuXHB_OQAAABc"]
[Sun Jan 11 17:46:10.642209 2026] [:error] [pid 35977:tid 35999] [client 4.194.120.160:9425] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib182.php"] [unique_id "aWNxYrDST5RMqStLeP1XpAAAAhM"]
[Sun Jan 11 17:46:10.815364 2026] [:error] [pid 35977:tid 36002] [client 4.194.120.160:9445] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "aWNxYrDST5RMqStLeP1XpQAAAhY"]
[Sun Jan 11 17:46:10.990250 2026] [:error] [pid 5272:tid 5274] [client 4.194.120.160:9357] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "aWNxYlp55bCsukUvYGZRYQAAAMA"]
[Sun Jan 11 17:46:11.164665 2026] [:error] [pid 5153:tid 5195] [client 4.194.120.160:9350] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "aWNxY81QbNSPD9bRi76zWgAAAEY"]
[Sun Jan 11 17:46:11.355055 2026] [:error] [pid 5153:tid 5212] [client 4.194.120.160:9455] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "aWNxY81QbNSPD9bRi76zWwAAAFc"]
[Sun Jan 11 17:46:11.532366 2026] [:error] [pid 35730:tid 35754] [client 4.194.120.160:9448] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aWNxYzi7U_mfHtESQHkq1wAAAdY"]
[Sun Jan 11 17:46:11.710623 2026] [:error] [pid 35730:tid 35747] [client 4.194.120.160:9386] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aWNxYzi7U_mfHtESQHkq2AAAAc8"]
[Sun Jan 11 17:46:11.883464 2026] [:error] [pid 5155:tid 5235] [client 4.194.120.160:9470] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aWNxY1gEKFpNs0_zLGkAQAAAAJM"]
[Sun Jan 11 17:46:12.066051 2026] [:error] [pid 5155:tid 5239] [client 4.194.120.160:9373] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aWNxZFgEKFpNs0_zLGkAQgAAAJc"]
[Sun Jan 11 17:46:12.243289 2026] [:error] [pid 11748:tid 11790] [client 4.194.120.160:9462] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aWNxZAC5xybrWOCNnobmoQAAAYw"]
[Sun Jan 11 17:46:12.422195 2026] [:error] [pid 35730:tid 35753] [client 4.194.120.160:9428] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aWNxZDi7U_mfHtESQHkq2gAAAdU"]
[Sun Jan 11 17:46:12.607806 2026] [:error] [pid 35730:tid 35743] [client 4.194.120.160:9461] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aWNxZDi7U_mfHtESQHkq2wAAAcs"]
[Sun Jan 11 17:46:12.781408 2026] [:error] [pid 11748:tid 11782] [client 4.194.120.160:9424] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "aWNxZAC5xybrWOCNnobmogAAAYQ"]
[Sun Jan 11 17:46:12.969932 2026] [:error] [pid 35730:tid 35756] [client 4.194.120.160:9433] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jjhf.php"] [unique_id "aWNxZDi7U_mfHtESQHkq3AAAAdg"]
[Sun Jan 11 17:46:13.155007 2026] [:error] [pid 11748:tid 11792] [client 4.194.120.160:9398] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jjhf.php"] [unique_id "aWNxZQC5xybrWOCNnobmpAAAAY4"]
[Sun Jan 11 17:46:13.348615 2026] [:error] [pid 11748:tid 11780] [client 4.194.120.160:9468] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jjhf.php"] [unique_id "aWNxZQC5xybrWOCNnobmpQAAAYI"]
[Sun Jan 11 17:46:13.533016 2026] [:error] [pid 5155:tid 5234] [client 4.194.120.160:2020] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jjhf.php"] [unique_id "aWNxZVgEKFpNs0_zLGkARwAAAJI"]
[Sun Jan 11 17:46:13.726398 2026] [:error] [pid 35730:tid 35734] [client 4.194.120.160:9355] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aWNxZTi7U_mfHtESQHkq3QAAAcI"]
[Sun Jan 11 17:46:13.913481 2026] [:error] [pid 35730:tid 35749] [client 4.194.120.160:9370] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aWNxZTi7U_mfHtESQHkq3gAAAdE"]
[Sun Jan 11 17:46:14.086110 2026] [:error] [pid 35730:tid 35733] [client 4.194.120.160:9413] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aWNxZji7U_mfHtESQHkq4AAAAcE"]
[Sun Jan 11 17:46:14.281301 2026] [:error] [pid 5152:tid 5162] [client 4.194.120.160:9348] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aWNxZhm0axGMFrpuXHB_OgAAAAA"]
[Sun Jan 11 17:46:14.478239 2026] [:error] [pid 5152:tid 5175] [client 4.194.120.160:9439] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckv.php"] [unique_id "aWNxZhm0axGMFrpuXHB_OwAAAA0"]
[Sun Jan 11 17:46:14.653894 2026] [:error] [pid 35730:tid 35736] [client 4.194.120.160:9362] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckv.php"] [unique_id "aWNxZji7U_mfHtESQHkq4gAAAcQ"]
[Sun Jan 11 17:46:14.847883 2026] [:error] [pid 35730:tid 35739] [client 4.194.120.160:9365] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckv.php"] [unique_id "aWNxZji7U_mfHtESQHkq4wAAAcc"]
[Sun Jan 11 17:46:15.020945 2026] [:error] [pid 5153:tid 5213] [client 4.194.120.160:2009] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckv.php"] [unique_id "aWNxZ81QbNSPD9bRi76zXwAAAFg"]
[Sun Jan 11 17:46:15.196873 2026] [:error] [pid 5272:tid 5290] [client 4.194.120.160:9401] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aWNxZ1p55bCsukUvYGZRYwAAANA"]
[Sun Jan 11 17:46:15.386995 2026] [:error] [pid 36611:tid 36623] [client 4.194.120.160:9410] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aWNxZz8oZoZHsoTdjhhIpAAAAko"]
[Sun Jan 11 17:46:15.562323 2026] [:error] [pid 36611:tid 36614] [client 4.194.120.160:9430] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aWNxZz8oZoZHsoTdjhhIpQAAAkE"]
[Sun Jan 11 17:46:15.762597 2026] [:error] [pid 11748:tid 11795] [client 4.194.120.160:9466] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aWNxZwC5xybrWOCNnobmqQAAAZE"]
[Sun Jan 11 17:46:15.937253 2026] [:error] [pid 36611:tid 36628] [client 4.194.120.160:2013] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aWNxZz8oZoZHsoTdjhhIpwAAAk8"]
[Sun Jan 11 17:46:16.119306 2026] [:error] [pid 5272:tid 5278] [client 4.194.120.160:9358] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aWNxaFp55bCsukUvYGZRZQAAAMQ"]
[Sun Jan 11 17:46:16.304708 2026] [:error] [pid 35730:tid 35755] [client 4.194.120.160:9422] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aWNxaDi7U_mfHtESQHkq5wAAAdc"]
[Sun Jan 11 17:46:16.496152 2026] [:error] [pid 36611:tid 36615] [client 4.194.120.160:9359] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aWNxaD8oZoZHsoTdjhhIqQAAAkI"]
[Sun Jan 11 17:46:16.671305 2026] [:error] [pid 5153:tid 5209] [client 4.194.120.160:9442] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aWNxaM1QbNSPD9bRi76zYQAAAFQ"]
[Sun Jan 11 17:46:16.844793 2026] [:error] [pid 5152:tid 5176] [client 4.194.120.160:9416] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aWNxaBm0axGMFrpuXHB_PgAAAA4"]
[Sun Jan 11 17:46:17.018160 2026] [:error] [pid 5152:tid 5164] [client 4.194.120.160:9414] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aWNxaRm0axGMFrpuXHB_PwAAAAI"]
[Sun Jan 11 17:46:17.253241 2026] [:error] [pid 36611:tid 36626] [client 4.194.120.160:9351] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "aWNxaT8oZoZHsoTdjhhIqgAAAk0"]
[Sun Jan 11 17:46:17.470874 2026] [:error] [pid 11748:tid 11786] [client 4.194.120.160:9435] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aWNxaQC5xybrWOCNnobmqwAAAYg"]
[Sun Jan 11 17:46:17.687052 2026] [:error] [pid 36611:tid 36632] [client 4.194.120.160:9464] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aWNxaT8oZoZHsoTdjhhIqwAAAlM"]
[Sun Jan 11 17:46:17.876204 2026] [:error] [pid 35730:tid 35752] [client 4.194.120.160:2005] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aWNxaTi7U_mfHtESQHkq6AAAAdQ"]
[Sun Jan 11 17:46:18.063291 2026] [:error] [pid 35730:tid 35745] [client 4.194.120.160:9434] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aWNxaji7U_mfHtESQHkq6QAAAc0"]
[Sun Jan 11 17:46:18.239391 2026] [:error] [pid 11747:tid 11752] [client 4.194.120.160:9459] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yxr6m.php"] [unique_id "aWNxaqRFw84LNpZSk7nKagAAAUE"]
[Sun Jan 11 17:46:18.443300 2026] [:error] [pid 11748:tid 11801] [client 4.194.120.160:9438] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yxr6m.php"] [unique_id "aWNxagC5xybrWOCNnobmrAAAAZc"]
[Sun Jan 11 17:46:18.616771 2026] [:error] [pid 5272:tid 5289] [client 4.194.120.160:9417] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yxr6m.php"] [unique_id "aWNxalp55bCsukUvYGZRZgAAAM8"]
[Sun Jan 11 17:46:18.793055 2026] [:error] [pid 36611:tid 36622] [client 4.194.120.160:9450] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yxr6m.php"] [unique_id "aWNxaj8oZoZHsoTdjhhIrQAAAkk"]
[Sun Jan 11 17:46:18.967461 2026] [:error] [pid 11747:tid 11753] [client 4.194.120.160:9452] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aWNxaqRFw84LNpZSk7nKawAAAUI"]
[Sun Jan 11 17:46:19.150565 2026] [:error] [pid 11748:tid 11800] [client 4.194.120.160:9349] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aWNxawC5xybrWOCNnobmrQAAAZY"]
[Sun Jan 11 17:46:19.331871 2026] [:error] [pid 11748:tid 11781] [client 4.194.120.160:9396] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aWNxawC5xybrWOCNnobmrgAAAYM"]
[Sun Jan 11 17:46:19.506414 2026] [:error] [pid 11748:tid 11784] [client 4.194.120.160:9366] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "aWNxawC5xybrWOCNnobmrwAAAYY"]
[Sun Jan 11 17:46:19.708304 2026] [:error] [pid 5272:tid 5286] [client 4.194.120.160:9381] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data225.php"] [unique_id "aWNxa1p55bCsukUvYGZRZwAAAMw"]
[Sun Jan 11 17:46:19.880495 2026] [:error] [pid 5155:tid 5233] [client 4.194.120.160:2016] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data225.php"] [unique_id "aWNxa1gEKFpNs0_zLGkASQAAAJE"]
[Sun Jan 11 17:46:20.059928 2026] [:error] [pid 11747:tid 11773] [client 4.194.120.160:9397] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data225.php"] [unique_id "aWNxbKRFw84LNpZSk7nKbAAAAVY"]
[Sun Jan 11 17:46:20.234092 2026] [:error] [pid 35730:tid 35754] [client 4.194.120.160:9437] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data225.php"] [unique_id "aWNxbDi7U_mfHtESQHkq6gAAAdY"]
[Sun Jan 11 17:46:20.413448 2026] [:error] [pid 35730:tid 35747] [client 4.194.120.160:9391] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1JkAg3.php"] [unique_id "aWNxbDi7U_mfHtESQHkq6wAAAc8"]
[Sun Jan 11 17:46:20.592132 2026] [:error] [pid 36611:tid 36617] [client 4.194.120.160:2004] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1JkAg3.php"] [unique_id "aWNxbD8oZoZHsoTdjhhIrwAAAkQ"]
[Sun Jan 11 17:46:20.767229 2026] [:error] [pid 5272:tid 5293] [client 4.194.120.160:1985] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1JkAg3.php"] [unique_id "aWNxbFp55bCsukUvYGZRaAAAANM"]
[Sun Jan 11 17:46:20.952505 2026] [:error] [pid 5153:tid 5192] [client 4.194.120.160:9432] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1JkAg3.php"] [unique_id "aWNxbM1QbNSPD9bRi76zZQAAAEM"]
[Sun Jan 11 17:46:21.126143 2026] [:error] [pid 5153:tid 5198] [client 4.194.120.160:9431] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aWNxbc1QbNSPD9bRi76zZgAAAEk"]
[Sun Jan 11 17:46:21.299324 2026] [:error] [pid 35730:tid 35748] [client 4.194.120.160:9404] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aWNxbTi7U_mfHtESQHkq7AAAAdA"]
[Sun Jan 11 17:46:21.479308 2026] [:error] [pid 36611:tid 36633] [client 4.194.120.160:9367] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aWNxbT8oZoZHsoTdjhhIsAAAAlQ"]
[Sun Jan 11 17:46:21.689372 2026] [:error] [pid 5155:tid 5223] [client 4.194.120.160:9383] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aWNxbVgEKFpNs0_zLGkASgAAAIc"]
[Sun Jan 11 17:46:21.880753 2026] [:error] [pid 36611:tid 36631] [client 4.194.120.160:9409] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core990.php"] [unique_id "aWNxbT8oZoZHsoTdjhhIsQAAAlI"]
[Sun Jan 11 17:46:22.054028 2026] [:error] [pid 35730:tid 35756] [client 4.194.120.160:9347] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core990.php"] [unique_id "aWNxbji7U_mfHtESQHkq7gAAAdg"]
[Sun Jan 11 17:46:22.227248 2026] [:error] [pid 11747:tid 11763] [client 4.194.120.160:2008] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core990.php"] [unique_id "aWNxbqRFw84LNpZSk7nKbwAAAUw"]
[Sun Jan 11 17:46:22.405466 2026] [:error] [pid 11747:tid 11762] [client 4.194.120.160:9353] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core990.php"] [unique_id "aWNxbqRFw84LNpZSk7nKcAAAAUs"]
[Sun Jan 11 17:46:22.578691 2026] [:error] [pid 5155:tid 5222] [client 4.194.120.160:2040] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core885.php"] [unique_id "aWNxblgEKFpNs0_zLGkATAAAAIY"]
[Sun Jan 11 17:46:22.751952 2026] [:error] [pid 11747:tid 11770] [client 4.194.120.160:2002] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core885.php"] [unique_id "aWNxbqRFw84LNpZSk7nKcgAAAVM"]
[Sun Jan 11 17:46:22.928253 2026] [:error] [pid 35977:tid 35993] [client 4.194.120.160:2028] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core885.php"] [unique_id "aWNxbrDST5RMqStLeP1XpgAAAg0"]
[Sun Jan 11 17:46:23.127653 2026] [:error] [pid 36611:tid 36635] [client 4.194.120.160:2010] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core885.php"] [unique_id "aWNxbz8oZoZHsoTdjhhItAAAAlY"]
[Sun Jan 11 17:46:23.303514 2026] [:error] [pid 5272:tid 5281] [client 4.194.120.160:9387] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acxx.php"] [unique_id "aWNxb1p55bCsukUvYGZRaQAAAMc"]
[Sun Jan 11 17:46:23.481126 2026] [:error] [pid 5153:tid 5208] [client 4.194.120.160:9403] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acxx.php"] [unique_id "aWNxb81QbNSPD9bRi76zaQAAAFM"]
[Sun Jan 11 17:46:23.654886 2026] [:error] [pid 5153:tid 5189] [client 4.194.120.160:9420] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acxx.php"] [unique_id "aWNxb81QbNSPD9bRi76zagAAAEA"]
[Sun Jan 11 17:46:23.830127 2026] [:error] [pid 36611:tid 36625] [client 4.194.120.160:9453] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acxx.php"] [unique_id "aWNxbz8oZoZHsoTdjhhItQAAAkw"]
[Sun Jan 11 17:46:24.006558 2026] [:error] [pid 35977:tid 35986] [client 4.194.120.160:9402] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aWNxcLDST5RMqStLeP1XpwAAAgY"]
[Sun Jan 11 17:46:24.195778 2026] [:error] [pid 35977:tid 35982] [client 4.194.120.160:9360] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aWNxcLDST5RMqStLeP1XqQAAAgI"]
[Sun Jan 11 17:46:24.379894 2026] [:error] [pid 5152:tid 5163] [client 4.194.120.160:9354] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aWNxcBm0axGMFrpuXHB_QAAAAAE"]
[Sun Jan 11 17:46:24.552606 2026] [:error] [pid 11748:tid 11793] [client 4.194.120.160:9369] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api137.php"] [unique_id "aWNxcAC5xybrWOCNnobmsAAAAY8"]
[Sun Jan 11 17:46:24.728789 2026] [:error] [pid 40191:tid 40203] [client 4.194.120.160:2023] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "aWNxcEm2BH1CV1p0EUG3LQAAAso"]
[Sun Jan 11 17:46:24.901263 2026] [:error] [pid 35730:tid 35735] [client 4.194.120.160:9423] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "aWNxcDi7U_mfHtESQHkq8AAAAcM"]
[Sun Jan 11 17:46:25.076141 2026] [:error] [pid 5153:tid 5201] [client 4.194.120.160:1934] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "aWNxcc1QbNSPD9bRi76zbQAAAEw"]
[Sun Jan 11 17:46:25.250212 2026] [:error] [pid 35730:tid 35749] [client 4.194.120.160:9447] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "aWNxcTi7U_mfHtESQHkq8QAAAdE"]
[Sun Jan 11 17:46:25.450154 2026] [:error] [pid 40191:tid 40202] [client 4.194.120.160:2007] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache795.php"] [unique_id "aWNxcUm2BH1CV1p0EUG3LgAAAsk"]
[Sun Jan 11 17:46:25.636683 2026] [:error] [pid 35730:tid 35740] [client 4.194.120.160:9460] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache795.php"] [unique_id "aWNxcTi7U_mfHtESQHkq8gAAAcg"]
[Sun Jan 11 17:46:25.820687 2026] [:error] [pid 35730:tid 35732] [client 4.194.120.160:1928] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache795.php"] [unique_id "aWNxcTi7U_mfHtESQHkq9AAAAcA"]
[Sun Jan 11 17:46:25.995703 2026] [:error] [pid 35730:tid 35736] [client 4.194.120.160:1990] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache795.php"] [unique_id "aWNxcTi7U_mfHtESQHkq9QAAAcQ"]
[Sun Jan 11 17:46:26.172801 2026] [:error] [pid 5153:tid 5212] [client 4.194.120.160:9361] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWNxcs1QbNSPD9bRi76zbgAAAFc"]
[Sun Jan 11 17:46:26.353046 2026] [:error] [pid 5152:tid 5173] [client 4.194.120.160:9371] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWNxchm0axGMFrpuXHB_QQAAAAs"]
[Sun Jan 11 17:46:26.526914 2026] [:error] [pid 11747:tid 11757] [client 4.194.120.160:9380] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWNxcqRFw84LNpZSk7nKcwAAAUY"]
[Sun Jan 11 17:46:26.705054 2026] [:error] [pid 5272:tid 5282] [client 4.194.120.160:2024] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWNxclp55bCsukUvYGZRbwAAAMg"]
[Sun Jan 11 17:46:26.917092 2026] [:error] [pid 11748:tid 11799] [client 4.194.120.160:2025] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib854.php"] [unique_id "aWNxcgC5xybrWOCNnobmsgAAAZU"]
[Sun Jan 11 17:46:27.091390 2026] [:error] [pid 35730:tid 35739] [client 4.194.120.160:1989] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib854.php"] [unique_id "aWNxczi7U_mfHtESQHkq9wAAAcc"]
[Sun Jan 11 17:46:27.271306 2026] [:error] [pid 36611:tid 36630] [client 4.194.120.160:2018] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib854.php"] [unique_id "aWNxcz8oZoZHsoTdjhhItwAAAlE"]
[Sun Jan 11 17:46:27.450054 2026] [:error] [pid 5153:tid 5204] [client 4.194.120.160:1948] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib854.php"] [unique_id "aWNxc81QbNSPD9bRi76zcAAAAE8"]
[Sun Jan 11 17:46:27.623782 2026] [:error] [pid 5152:tid 5171] [client 4.194.120.160:9344] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aWNxcxm0axGMFrpuXHB_QwAAAAk"]
[Sun Jan 11 17:46:27.799520 2026] [:error] [pid 11748:tid 11782] [client 4.194.120.160:2006] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aWNxcwC5xybrWOCNnobmswAAAYQ"]
[Sun Jan 11 17:46:27.973837 2026] [:error] [pid 36611:tid 36623] [client 4.194.120.160:2019] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aWNxcz8oZoZHsoTdjhhIuAAAAko"]
[Sun Jan 11 17:46:28.172635 2026] [:error] [pid 11747:tid 11760] [client 4.194.120.160:1963] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aWNxdKRFw84LNpZSk7nKdAAAAUk"]
[Sun Jan 11 17:46:28.347124 2026] [:error] [pid 11748:tid 11792] [client 4.194.120.160:1986] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWNxdAC5xybrWOCNnobmtAAAAY4"]
[Sun Jan 11 17:46:28.523413 2026] [:error] [pid 5152:tid 5172] [client 4.194.120.160:9465] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWNxdBm0axGMFrpuXHB_RAAAAAo"]
[Sun Jan 11 17:46:28.723073 2026] [:error] [pid 11748:tid 11780] [client 4.194.120.160:1991] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWNxdAC5xybrWOCNnobmtQAAAYI"]
[Sun Jan 11 17:46:28.921076 2026] [:error] [pid 5155:tid 5219] [client 4.194.120.160:2022] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWNxdFgEKFpNs0_zLGkATwAAAIM"]
[Sun Jan 11 17:46:29.108931 2026] [:error] [pid 35730:tid 35744] [client 4.194.120.160:9364] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config596.php"] [unique_id "aWNxdTi7U_mfHtESQHkq-AAAAcw"]
[Sun Jan 11 17:46:29.341343 2026] [:error] [pid 36611:tid 36628] [client 4.194.120.160:2046] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config596.php"] [unique_id "aWNxdT8oZoZHsoTdjhhIuQAAAk8"]
[Sun Jan 11 17:46:29.527532 2026] [:error] [pid 11747:tid 11755] [client 4.194.120.160:9421] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config596.php"] [unique_id "aWNxdaRFw84LNpZSk7nKdQAAAUQ"]
[Sun Jan 11 17:46:29.709261 2026] [:error] [pid 35730:tid 35738] [client 4.194.120.160:9456] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config596.php"] [unique_id "aWNxdTi7U_mfHtESQHkq-gAAAcY"]
[Sun Jan 11 17:46:29.893245 2026] [:error] [pid 36611:tid 36624] [client 4.194.120.160:9408] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aWNxdT8oZoZHsoTdjhhIugAAAks"]
[Sun Jan 11 17:46:30.110625 2026] [:error] [pid 36611:tid 36615] [client 4.194.120.160:9426] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aWNxdj8oZoZHsoTdjhhIuwAAAkI"]
[Sun Jan 11 17:46:30.295980 2026] [:error] [pid 11748:tid 11783] [client 4.194.120.160:9394] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aWNxdgC5xybrWOCNnobmtgAAAYU"]
[Sun Jan 11 17:46:30.469664 2026] [:error] [pid 36611:tid 36637] [client 4.194.120.160:2032] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aWNxdj8oZoZHsoTdjhhIvAAAAlg"]
[Sun Jan 11 17:46:30.652951 2026] [:error] [pid 11747:tid 11765] [client 4.194.120.160:1960] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data532.php"] [unique_id "aWNxdqRFw84LNpZSk7nKdgAAAU4"]
[Sun Jan 11 17:46:30.830143 2026] [:error] [pid 5152:tid 5186] [client 4.194.120.160:9384] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data532.php"] [unique_id "aWNxdhm0axGMFrpuXHB_RgAAABg"]
[Sun Jan 11 17:46:31.014835 2026] [:error] [pid 5152:tid 5184] [client 4.194.120.160:1992] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data532.php"] [unique_id "aWNxdxm0axGMFrpuXHB_RwAAABY"]
[Sun Jan 11 17:46:31.190038 2026] [:error] [pid 35730:tid 35752] [client 4.194.120.160:1951] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data532.php"] [unique_id "aWNxdzi7U_mfHtESQHkq_AAAAdQ"]
[Sun Jan 11 17:46:31.363698 2026] [:error] [pid 5153:tid 5190] [client 4.194.120.160:9389] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core928.php"] [unique_id "aWNxd81QbNSPD9bRi76zcwAAAEE"]
[Sun Jan 11 17:46:31.551613 2026] [:error] [pid 5153:tid 5200] [client 4.194.120.160:9405] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core928.php"] [unique_id "aWNxd81QbNSPD9bRi76zdAAAAEs"]
[Sun Jan 11 17:46:31.725791 2026] [:error] [pid 35730:tid 35745] [client 4.194.120.160:9346] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core928.php"] [unique_id "aWNxdzi7U_mfHtESQHkq_QAAAc0"]
[Sun Jan 11 17:46:31.899534 2026] [:error] [pid 5153:tid 5191] [client 4.194.120.160:1998] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core928.php"] [unique_id "aWNxd81QbNSPD9bRi76zdQAAAEI"]
[Sun Jan 11 17:46:32.085325 2026] [:error] [pid 11748:tid 11791] [client 4.194.120.160:9419] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu1.php"] [unique_id "aWNxeAC5xybrWOCNnobmtwAAAY0"]
[Sun Jan 11 17:46:32.264530 2026] [:error] [pid 35977:tid 35983] [client 4.194.120.160:9356] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu1.php"] [unique_id "aWNxeLDST5RMqStLeP1XqwAAAgM"]
[Sun Jan 11 17:46:32.441143 2026] [:error] [pid 35977:tid 36003] [client 4.194.120.160:1868] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu1.php"] [unique_id "aWNxeLDST5RMqStLeP1XrAAAAhc"]
[Sun Jan 11 17:46:32.614341 2026] [:error] [pid 5152:tid 5181] [client 4.194.120.160:2001] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu1.php"] [unique_id "aWNxeBm0axGMFrpuXHB_SwAAABM"]
[Sun Jan 11 17:46:32.787161 2026] [:error] [pid 35977:tid 35989] [client 4.194.120.160:9368] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aWNxeLDST5RMqStLeP1XrQAAAgk"]
[Sun Jan 11 17:46:32.964893 2026] [:error] [pid 35977:tid 35992] [client 4.194.120.160:9454] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aWNxeLDST5RMqStLeP1XrgAAAgw"]
[Sun Jan 11 17:46:33.138815 2026] [:error] [pid 5153:tid 5203] [client 4.194.120.160:1999] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aWNxec1QbNSPD9bRi76zdgAAAE4"]
[Sun Jan 11 17:46:33.314354 2026] [:error] [pid 5272:tid 5287] [client 4.194.120.160:9352] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aWNxeVp55bCsukUvYGZRdgAAAM0"]
[Sun Jan 11 17:46:33.488981 2026] [:error] [pid 35730:tid 35754] [client 4.194.120.160:9406] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aWNxeTi7U_mfHtESQHkq_gAAAdY"]
[Sun Jan 11 17:46:33.663301 2026] [:error] [pid 36611:tid 36632] [client 4.194.120.160:1942] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aWNxeT8oZoZHsoTdjhhIvgAAAlM"]
[Sun Jan 11 17:46:33.840262 2026] [:error] [pid 5155:tid 5239] [client 4.194.120.160:9411] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aWNxeVgEKFpNs0_zLGkAUQAAAJc"]
[Sun Jan 11 17:46:34.013432 2026] [:error] [pid 5272:tid 5296] [client 4.194.120.160:1941] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4tBVafYN1Sb.php"] [unique_id "aWNxelp55bCsukUvYGZRdwAAANY"]
[Sun Jan 11 17:46:34.205235 2026] [:error] [pid 11747:tid 11758] [client 4.194.120.160:2011] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/http.php"] [unique_id "aWNxeqRFw84LNpZSk7nKdwAAAUc"]
[Sun Jan 11 17:46:34.387703 2026] [:error] [pid 35730:tid 35747] [client 4.194.120.160:2015] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/http.php"] [unique_id "aWNxeji7U_mfHtESQHkq_wAAAc8"]
[Sun Jan 11 17:46:34.566938 2026] [:error] [pid 40191:tid 40194] [client 4.194.120.160:9372] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/http.php"] [unique_id "aWNxekm2BH1CV1p0EUG3LwAAAsE"]
[Sun Jan 11 17:46:34.743128 2026] [:error] [pid 11748:tid 11794] [client 4.194.120.160:1984] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/http.php"] [unique_id "aWNxegC5xybrWOCNnobmugAAAZA"]
[Sun Jan 11 17:46:34.919496 2026] [:error] [pid 5272:tid 5290] [client 4.194.120.160:1994] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general-template.php"] [unique_id "aWNxelp55bCsukUvYGZReQAAANA"]
[Sun Jan 11 17:46:35.094870 2026] [:error] [pid 36611:tid 36621] [client 4.194.120.160:9407] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general-template.php"] [unique_id "aWNxez8oZoZHsoTdjhhIwAAAAkg"]
[Sun Jan 11 17:46:35.271708 2026] [:error] [pid 5272:tid 5277] [client 4.194.120.160:9454] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general-template.php"] [unique_id "aWNxe1p55bCsukUvYGZRegAAAMM"]
[Sun Jan 11 17:46:35.448641 2026] [:error] [pid 36611:tid 36617] [client 4.194.120.160:9469] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general-template.php"] [unique_id "aWNxez8oZoZHsoTdjhhIwQAAAkQ"]
[Sun Jan 11 17:46:35.648052 2026] [:error] [pid 5155:tid 5220] [client 4.194.120.160:9374] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/query.php"] [unique_id "aWNxe1gEKFpNs0_zLGkAUgAAAIQ"]
[Sun Jan 11 17:46:35.821457 2026] [:error] [pid 5155:tid 5238] [client 4.194.120.160:2012] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/query.php"] [unique_id "aWNxe1gEKFpNs0_zLGkAUwAAAJY"]
[Sun Jan 11 17:46:35.994596 2026] [:error] [pid 36611:tid 36613] [client 4.194.120.160:1888] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/query.php"] [unique_id "aWNxez8oZoZHsoTdjhhIwwAAAkA"]
[Sun Jan 11 17:46:36.178491 2026] [:error] [pid 36611:tid 36629] [client 4.194.120.160:1932] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/query.php"] [unique_id "aWNxfD8oZoZHsoTdjhhIxAAAAlA"]
[Sun Jan 11 17:46:36.354070 2026] [:error] [pid 5272:tid 5278] [client 4.194.120.160:1938] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aWNxfFp55bCsukUvYGZRewAAAMQ"]
[Sun Jan 11 17:46:36.531950 2026] [:error] [pid 5155:tid 5230] [client 4.194.120.160:9376] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aWNxfFgEKFpNs0_zLGkAWAAAAI4"]
[Sun Jan 11 17:46:36.709292 2026] [:error] [pid 35977:tid 35985] [client 4.194.120.160:1997] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aWNxfLDST5RMqStLeP1XrwAAAgU"]
[Sun Jan 11 17:46:36.883059 2026] [:error] [pid 5272:tid 5275] [client 4.194.120.160:2037] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aWNxfFp55bCsukUvYGZRfAAAAME"]
[Sun Jan 11 17:46:37.061400 2026] [:error] [pid 5272:tid 5289] [client 4.194.120.160:1896] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aWNxfVp55bCsukUvYGZRfQAAAM8"]
[Sun Jan 11 17:46:37.234866 2026] [:error] [pid 5272:tid 5286] [client 4.194.120.160:2017] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aWNxfVp55bCsukUvYGZRfgAAAMw"]
[Sun Jan 11 17:46:37.408206 2026] [:error] [pid 5153:tid 5201] [client 4.194.120.160:1957] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aWNxfc1QbNSPD9bRi76zeQAAAEw"]
[Sun Jan 11 17:46:37.584624 2026] [:error] [pid 36611:tid 36635] [client 4.194.120.160:1993] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aWNxfT8oZoZHsoTdjhhIxgAAAlY"]
[Sun Jan 11 17:46:37.783244 2026] [:error] [pid 35977:tid 36000] [client 4.194.120.160:1996] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aWNxfbDST5RMqStLeP1XsAAAAhQ"]
[Sun Jan 11 17:46:37.957722 2026] [:error] [pid 36611:tid 36627] [client 4.194.120.160:2003] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aWNxfT8oZoZHsoTdjhhIxwAAAk4"]
[Sun Jan 11 17:46:38.131910 2026] [:error] [pid 35977:tid 36004] [client 4.194.120.160:1968] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aWNxfrDST5RMqStLeP1XsQAAAhg"]
[Sun Jan 11 17:46:38.318178 2026] [:error] [pid 5272:tid 5298] [client 4.194.120.160:2047] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asus.php"] [unique_id "aWNxflp55bCsukUvYGZRgQAAANg"]
[Sun Jan 11 17:46:38.491345 2026] [:error] [pid 35730:tid 35753] [client 4.194.120.160:1935] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aWNxfji7U_mfHtESQHkrAQAAAdU"]
[Sun Jan 11 17:46:38.664439 2026] [:error] [pid 5272:tid 5291] [client 4.194.120.160:1940] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aWNxflp55bCsukUvYGZRgwAAANE"]
[Sun Jan 11 17:46:38.845715 2026] [:error] [pid 5152:tid 5167] [client 4.194.120.160:1950] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aWNxfhm0axGMFrpuXHB_TQAAAAU"]
[Sun Jan 11 17:46:39.018799 2026] [:error] [pid 5272:tid 5297] [client 4.194.120.160:1944] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aWNxf1p55bCsukUvYGZRhQAAANc"]
[Sun Jan 11 17:46:39.192135 2026] [:error] [pid 36611:tid 36618] [client 4.194.120.160:2014] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aWNxfz8oZoZHsoTdjhhIyAAAAkU"]
[Sun Jan 11 17:46:39.365032 2026] [:error] [pid 36611:tid 36619] [client 4.194.120.160:1945] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aWNxfz8oZoZHsoTdjhhIyQAAAkY"]
[Sun Jan 11 17:46:39.580205 2026] [:error] [pid 36611:tid 36616] [client 4.194.120.160:2035] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aWNxfz8oZoZHsoTdjhhIygAAAkM"]
[Sun Jan 11 17:46:39.753627 2026] [:error] [pid 5272:tid 5295] [client 4.194.120.160:2030] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp670.php"] [unique_id "aWNxf1p55bCsukUvYGZRhgAAANU"]
[Sun Jan 11 17:46:39.926514 2026] [:error] [pid 36611:tid 36614] [client 4.194.120.160:1958] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aWNxfz8oZoZHsoTdjhhIywAAAkE"]
[Sun Jan 11 17:46:40.100711 2026] [:error] [pid 5155:tid 5231] [client 4.194.120.160:9385] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aWNxgFgEKFpNs0_zLGkAXAAAAI8"]
[Sun Jan 11 17:46:40.275176 2026] [:error] [pid 36611:tid 36637] [client 4.194.120.160:1901] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aWNxgD8oZoZHsoTdjhhIzgAAAlg"]
[Sun Jan 11 17:46:40.448684 2026] [:error] [pid 36611:tid 36626] [client 4.194.120.160:1883] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/widgets.php"] [unique_id "aWNxgD8oZoZHsoTdjhhIzwAAAk0"]
[Sun Jan 11 17:46:40.626629 2026] [:error] [pid 36611:tid 36632] [client 4.194.120.160:2045] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/strift.php"] [unique_id "aWNxgD8oZoZHsoTdjhhI0AAAAlM"]
[Sun Jan 11 17:46:40.799495 2026] [:error] [pid 36611:tid 36621] [client 4.194.120.160:1956] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/strift.php"] [unique_id "aWNxgD8oZoZHsoTdjhhI0gAAAkg"]
[Sun Jan 11 17:46:41.019743 2026] [:error] [pid 5155:tid 5237] [client 4.194.120.160:2035] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/strift.php"] [unique_id "aWNxgVgEKFpNs0_zLGkAXgAAAJU"]
[Sun Jan 11 17:46:41.197843 2026] [:error] [pid 36611:tid 36613] [client 4.194.120.160:2033] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/strift.php"] [unique_id "aWNxgT8oZoZHsoTdjhhI1AAAAkA"]
[Sun Jan 11 17:46:41.370979 2026] [:error] [pid 36611:tid 36622] [client 4.194.120.160:1921] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rest-api.php"] [unique_id "aWNxgT8oZoZHsoTdjhhI1QAAAkk"]
[Sun Jan 11 17:46:41.544633 2026] [:error] [pid 35730:tid 35756] [client 4.194.120.160:1937] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rest-api.php"] [unique_id "aWNxgTi7U_mfHtESQHkrAgAAAdg"]
[Sun Jan 11 17:46:41.718386 2026] [:error] [pid 5152:tid 5176] [client 4.194.120.160:1921] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rest-api.php"] [unique_id "aWNxgRm0axGMFrpuXHB_TgAAAA4"]
[Sun Jan 11 17:46:41.891999 2026] [:error] [pid 40191:tid 40212] [client 4.194.120.160:1930] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rest-api.php"] [unique_id "aWNxgUm2BH1CV1p0EUG3MAAAAtM"]
[Sun Jan 11 17:46:42.065332 2026] [:error] [pid 5153:tid 5204] [client 4.194.120.160:1971] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aWNxgs1QbNSPD9bRi76zfAAAAE8"]
[Sun Jan 11 17:46:42.239092 2026] [:error] [pid 5153:tid 5211] [client 4.194.120.160:2021] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aWNxgs1QbNSPD9bRi76zfgAAAFY"]
[Sun Jan 11 17:46:42.413076 2026] [:error] [pid 5153:tid 5210] [client 4.194.120.160:1949] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aWNxgs1QbNSPD9bRi76zfwAAAFU"]
[Sun Jan 11 17:46:42.587187 2026] [:error] [pid 5153:tid 5196] [client 4.194.120.160:1946] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class629.php"] [unique_id "aWNxgs1QbNSPD9bRi76zgAAAAEc"]
[Sun Jan 11 17:46:42.774063 2026] [:error] [pid 5153:tid 5209] [client 4.194.120.160:1974] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k11dSQ.php"] [unique_id "aWNxgs1QbNSPD9bRi76zgQAAAFQ"]
[Sun Jan 11 17:46:42.947663 2026] [:error] [pid 40191:tid 40211] [client 4.194.120.160:9436] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k11dSQ.php"] [unique_id "aWNxgkm2BH1CV1p0EUG3MQAAAtI"]
[Sun Jan 11 17:46:43.123085 2026] [:error] [pid 11748:tid 11797] [client 4.194.120.160:2004] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k11dSQ.php"] [unique_id "aWNxgwC5xybrWOCNnobmuwAAAZM"]
[Sun Jan 11 17:46:43.296101 2026] [:error] [pid 11748:tid 11779] [client 4.194.120.160:1864] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k11dSQ.php"] [unique_id "aWNxgwC5xybrWOCNnobmvAAAAYE"]
[Sun Jan 11 17:46:43.472033 2026] [:error] [pid 5153:tid 5190] [client 4.194.120.160:1952] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index685.php"] [unique_id "aWNxg81QbNSPD9bRi76zggAAAEE"]
[Sun Jan 11 17:46:43.645382 2026] [:error] [pid 40191:tid 40207] [client 4.194.120.160:1825] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index685.php"] [unique_id "aWNxg0m2BH1CV1p0EUG3NAAAAs4"]
[Sun Jan 11 17:46:43.819394 2026] [:error] [pid 35730:tid 35749] [client 4.194.120.160:9443] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index685.php"] [unique_id "aWNxgzi7U_mfHtESQHkrBAAAAdE"]
[Sun Jan 11 17:46:43.994262 2026] [:error] [pid 5153:tid 5200] [client 4.194.120.160:1943] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index685.php"] [unique_id "aWNxg81QbNSPD9bRi76zgwAAAEs"]
[Sun Jan 11 17:46:44.167967 2026] [:error] [pid 40191:tid 40195] [client 4.194.120.160:1895] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aWNxhEm2BH1CV1p0EUG3NgAAAsI"]
[Sun Jan 11 17:46:44.345598 2026] [:error] [pid 5153:tid 5203] [client 4.194.120.160:9418] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aWNxhM1QbNSPD9bRi76zhAAAAE4"]
[Sun Jan 11 17:46:44.520175 2026] [:error] [pid 5153:tid 5192] [client 4.194.120.160:1927] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aWNxhM1QbNSPD9bRi76zhQAAAEM"]
[Sun Jan 11 17:46:44.711239 2026] [:error] [pid 5153:tid 5198] [client 4.194.120.160:9400] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TPR9lLbsVBS.php"] [unique_id "aWNxhM1QbNSPD9bRi76zhgAAAEk"]
[Sun Jan 11 17:46:44.885186 2026] [:error] [pid 5153:tid 5199] [client 4.194.120.160:1995] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data243.php"] [unique_id "aWNxhM1QbNSPD9bRi76zhwAAAEo"]
[Sun Jan 11 17:46:45.059449 2026] [:error] [pid 5153:tid 5208] [client 4.194.120.160:2043] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data243.php"] [unique_id "aWNxhc1QbNSPD9bRi76ziAAAAFM"]
[Sun Jan 11 17:46:45.242353 2026] [:error] [pid 5153:tid 5189] [client 4.194.120.160:1904] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data243.php"] [unique_id "aWNxhc1QbNSPD9bRi76ziQAAAEA"]
[Sun Jan 11 17:46:45.418070 2026] [:error] [pid 5153:tid 5202] [client 4.194.120.160:1894] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/data243.php"] [unique_id "aWNxhc1QbNSPD9bRi76zigAAAE0"]
[Sun Jan 11 17:46:45.591698 2026] [:error] [pid 40191:tid 40206] [client 4.194.120.160:1983] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper043.php"] [unique_id "aWNxhUm2BH1CV1p0EUG3NwAAAs0"]
[Sun Jan 11 17:46:45.767850 2026] [:error] [pid 40191:tid 40198] [client 4.194.120.160:9444] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper043.php"] [unique_id "aWNxhUm2BH1CV1p0EUG3OAAAAsU"]
[Sun Jan 11 17:46:45.968363 2026] [:error] [pid 5153:tid 5206] [client 4.194.120.160:1860] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper043.php"] [unique_id "aWNxhc1QbNSPD9bRi76ziwAAAFE"]
[Sun Jan 11 17:46:46.146647 2026] [:error] [pid 5153:tid 5201] [client 4.194.120.160:2036] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper043.php"] [unique_id "aWNxhs1QbNSPD9bRi76zjAAAAEw"]
[Sun Jan 11 17:46:46.345981 2026] [:error] [pid 35730:tid 35733] [client 4.194.120.160:9471] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-yasd5m7afq.php"] [unique_id "aWNxhji7U_mfHtESQHkrBgAAAcE"]
[Sun Jan 11 17:46:46.580382 2026] [:error] [pid 35730:tid 35737] [client 4.194.120.160:1882] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-yasd5m7afq.php"] [unique_id "aWNxhji7U_mfHtESQHkrBwAAAcU"]
[Sun Jan 11 17:46:46.759258 2026] [:error] [pid 40191:tid 40200] [client 4.194.120.160:1966] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-yasd5m7afq.php"] [unique_id "aWNxhkm2BH1CV1p0EUG3OQAAAsc"]
[Sun Jan 11 17:46:46.945804 2026] [:error] [pid 5153:tid 5195] [client 4.194.120.160:2029] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-yasd5m7afq.php"] [unique_id "aWNxhs1QbNSPD9bRi76zjgAAAEY"]
[Sun Jan 11 17:46:47.132430 2026] [:error] [pid 40191:tid 40210] [client 4.194.120.160:9393] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aWNxh0m2BH1CV1p0EUG3OgAAAtE"]
[Sun Jan 11 17:46:47.333047 2026] [:error] [pid 35730:tid 35732] [client 4.194.120.160:1878] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aWNxhzi7U_mfHtESQHkrCAAAAcA"]
[Sun Jan 11 17:46:47.528891 2026] [:error] [pid 35977:tid 35984] [client 4.194.120.160:1959] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aWNxh7DST5RMqStLeP1XswAAAgQ"]
[Sun Jan 11 17:46:47.709301 2026] [:error] [pid 35730:tid 35736] [client 4.194.120.160:1899] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aWNxhzi7U_mfHtESQHkrCQAAAcQ"]
[Sun Jan 11 17:46:47.898770 2026] [:error] [pid 35730:tid 35746] [client 4.194.120.160:1931] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core461.php"] [unique_id "aWNxhzi7U_mfHtESQHkrCgAAAc4"]
[Sun Jan 11 17:46:48.074434 2026] [:error] [pid 35730:tid 35750] [client 4.194.120.160:1922] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core461.php"] [unique_id "aWNxiDi7U_mfHtESQHkrCwAAAdI"]
[Sun Jan 11 17:46:48.259038 2026] [:error] [pid 35730:tid 35739] [client 4.194.120.160:2026] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core461.php"] [unique_id "aWNxiDi7U_mfHtESQHkrDAAAAcc"]
[Sun Jan 11 17:46:48.450108 2026] [:error] [pid 40191:tid 40201] [client 4.194.120.160:9377] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core461.php"] [unique_id "aWNxiEm2BH1CV1p0EUG3OwAAAsg"]
[Sun Jan 11 17:46:48.623139 2026] [:error] [pid 35977:tid 35994] [client 4.194.120.160:9441] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nav-menu.php"] [unique_id "aWNxiLDST5RMqStLeP1XtAAAAg4"]
[Sun Jan 11 17:46:48.800355 2026] [:error] [pid 40191:tid 40216] [client 4.194.120.160:2039] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nav-menu.php"] [unique_id "aWNxiEm2BH1CV1p0EUG3PAAAAtc"]
[Sun Jan 11 17:46:49.004126 2026] [:error] [pid 40191:tid 40193] [client 4.194.120.160:1890] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nav-menu.php"] [unique_id "aWNxiUm2BH1CV1p0EUG3PgAAAsA"]
[Sun Jan 11 17:46:49.227001 2026] [:error] [pid 35730:tid 35738] [client 4.194.120.160:1955] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nav-menu.php"] [unique_id "aWNxiTi7U_mfHtESQHkrDgAAAcY"]
[Sun Jan 11 17:46:49.401449 2026] [:error] [pid 35730:tid 35752] [client 4.194.120.160:1908] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper766.php"] [unique_id "aWNxiTi7U_mfHtESQHkrDwAAAdQ"]
[Sun Jan 11 17:46:49.590475 2026] [:error] [pid 35977:tid 35988] [client 4.194.120.160:1865] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper766.php"] [unique_id "aWNxibDST5RMqStLeP1XtQAAAgg"]
[Sun Jan 11 17:46:49.768677 2026] [:error] [pid 35730:tid 35745] [client 4.194.120.160:1977] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper766.php"] [unique_id "aWNxiTi7U_mfHtESQHkrEQAAAc0"]
[Sun Jan 11 17:46:49.942399 2026] [:error] [pid 35977:tid 35990] [client 4.194.120.160:9395] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/helper766.php"] [unique_id "aWNxibDST5RMqStLeP1XtgAAAgo"]
[Sun Jan 11 17:46:50.121961 2026] [:error] [pid 40191:tid 40205] [client 4.194.120.160:2031] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aWNxikm2BH1CV1p0EUG3PwAAAsw"]
[Sun Jan 11 17:46:50.323617 2026] [:error] [pid 35977:tid 36001] [client 4.194.120.160:1891] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aWNxirDST5RMqStLeP1XtwAAAhU"]
[Sun Jan 11 17:46:50.501672 2026] [:error] [pid 35977:tid 35999] [client 4.194.120.160:1914] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aWNxirDST5RMqStLeP1XuAAAAhM"]
[Sun Jan 11 17:46:50.680469 2026] [:error] [pid 35977:tid 36002] [client 4.194.120.160:2027] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IMlikd8XOHn.php"] [unique_id "aWNxirDST5RMqStLeP1XuQAAAhY"]
[Sun Jan 11 17:46:50.853502 2026] [:error] [pid 35977:tid 35991] [client 4.194.120.160:1819] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxx.php"] [unique_id "aWNxirDST5RMqStLeP1XugAAAgs"]
[Sun Jan 11 17:46:51.029560 2026] [:error] [pid 5272:tid 5284] [client 4.194.120.160:9451] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxx.php"] [unique_id "aWNxi1p55bCsukUvYGZRlgAAAMo"]
[Sun Jan 11 17:46:51.237674 2026] [:error] [pid 35977:tid 35993] [client 4.194.120.160:1875] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxx.php"] [unique_id "aWNxi7DST5RMqStLeP1XuwAAAg0"]
[Sun Jan 11 17:46:51.412825 2026] [:error] [pid 11748:tid 11786] [client 4.194.120.160:2034] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxx.php"] [unique_id "aWNxiwC5xybrWOCNnobmvQAAAYg"]
[Sun Jan 11 17:46:51.598048 2026] [:error] [pid 5272:tid 5294] [client 4.194.120.160:1794] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aWNxi1p55bCsukUvYGZRmAAAANQ"]
[Sun Jan 11 17:46:51.771971 2026] [:error] [pid 11748:tid 11801] [client 4.194.120.160:9415] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aWNxiwC5xybrWOCNnobmvgAAAZc"]
[Sun Jan 11 17:46:51.951215 2026] [:error] [pid 35730:tid 35747] [client 4.194.120.160:1953] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aWNxizi7U_mfHtESQHkrEwAAAc8"]
[Sun Jan 11 17:46:52.148760 2026] [:error] [pid 35730:tid 35748] [client 4.194.120.160:1962] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aWNxjDi7U_mfHtESQHkrFAAAAdA"]
[Sun Jan 11 17:46:52.329028 2026] [:error] [pid 35730:tid 35753] [client 4.194.120.160:1929] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fonts.php"] [unique_id "aWNxjDi7U_mfHtESQHkrFQAAAdU"]
[Sun Jan 11 17:46:52.524887 2026] [:error] [pid 35730:tid 35743] [client 4.194.120.160:1881] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fonts.php"] [unique_id "aWNxjDi7U_mfHtESQHkrFgAAAcs"]
[Sun Jan 11 17:46:52.709213 2026] [:error] [pid 35730:tid 35749] [client 4.194.120.160:1988] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fonts.php"] [unique_id "aWNxjDi7U_mfHtESQHkrFwAAAdE"]
[Sun Jan 11 17:46:52.882661 2026] [:error] [pid 11748:tid 11796] [client 4.194.120.160:1881] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fonts.php"] [unique_id "aWNxjAC5xybrWOCNnobmvwAAAZI"]
[Sun Jan 11 17:46:53.082200 2026] [:error] [pid 5272:tid 5292] [client 4.194.120.160:1933] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aWNxjVp55bCsukUvYGZRmgAAANI"]
[Sun Jan 11 17:46:53.264504 2026] [:error] [pid 36611:tid 36627] [client 4.194.120.160:1936] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aWNxjT8oZoZHsoTdjhhI1wAAAk4"]
[Sun Jan 11 17:46:53.478510 2026] [:error] [pid 11748:tid 11800] [client 4.194.120.160:1970] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aWNxjQC5xybrWOCNnobmwAAAAZY"]
[Sun Jan 11 17:46:53.702993 2026] [:error] [pid 11748:tid 11781] [client 4.194.120.160:2000] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aWNxjQC5xybrWOCNnobmwQAAAYM"]
[Sun Jan 11 17:46:53.880832 2026] [:error] [pid 5153:tid 5204] [client 4.194.120.160:1981] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aWNxjc1QbNSPD9bRi76zkAAAAE8"]
[Sun Jan 11 17:46:54.069237 2026] [:error] [pid 35977:tid 35986] [client 4.194.120.160:1965] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aWNxjrDST5RMqStLeP1XvAAAAgY"]
[Sun Jan 11 17:46:54.242602 2026] [:error] [pid 11748:tid 11784] [client 4.194.120.160:9390] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aWNxjgC5xybrWOCNnobmwgAAAYY"]
[Sun Jan 11 17:46:54.441264 2026] [:error] [pid 35977:tid 35982] [client 4.194.120.160:2038] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aWNxjrDST5RMqStLeP1XvQAAAgI"]
[Sun Jan 11 17:46:54.613819 2026] [:error] [pid 35730:tid 35735] [client 4.194.120.160:9427] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TXL82e.php"] [unique_id "aWNxjji7U_mfHtESQHkrGAAAAcM"]
[Sun Jan 11 17:46:54.787754 2026] [:error] [pid 11748:tid 11789] [client 4.194.120.160:1857] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TXL82e.php"] [unique_id "aWNxjgC5xybrWOCNnobmwwAAAYs"]
[Sun Jan 11 17:46:54.987728 2026] [:error] [pid 40191:tid 40211] [client 4.194.120.160:1918] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TXL82e.php"] [unique_id "aWNxjkm2BH1CV1p0EUG3QQAAAtI"]
[Sun Jan 11 17:46:55.164670 2026] [:error] [pid 11748:tid 11793] [client 4.194.120.160:1880] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/TXL82e.php"] [unique_id "aWNxjwC5xybrWOCNnobmxAAAAY8"]
[Sun Jan 11 17:46:55.339340 2026] [:error] [pid 5272:tid 5283] [client 4.194.120.160:1976] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api986.php"] [unique_id "aWNxj1p55bCsukUvYGZRnwAAAMk"]
[Sun Jan 11 17:46:55.513362 2026] [:error] [pid 5272:tid 5287] [client 4.194.120.160:1982] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api986.php"] [unique_id "aWNxj1p55bCsukUvYGZRoAAAAM0"]
[Sun Jan 11 17:46:55.695665 2026] [:error] [pid 40191:tid 40207] [client 4.194.120.160:9392] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api986.php"] [unique_id "aWNxj0m2BH1CV1p0EUG3QgAAAs4"]
[Sun Jan 11 17:46:55.885395 2026] [:error] [pid 40191:tid 40199] [client 4.194.120.160:1871] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api986.php"] [unique_id "aWNxj0m2BH1CV1p0EUG3QwAAAsY"]
[Sun Jan 11 17:46:56.065873 2026] [:error] [pid 40191:tid 40213] [client 4.194.120.160:1926] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin836.php"] [unique_id "aWNxkEm2BH1CV1p0EUG3RQAAAtQ"]
[Sun Jan 11 17:46:56.238786 2026] [:error] [pid 36611:tid 36633] [client 4.194.120.160:1893] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin836.php"] [unique_id "aWNxkD8oZoZHsoTdjhhI2QAAAlQ"]
[Sun Jan 11 17:46:56.411987 2026] [:error] [pid 11748:tid 11785] [client 4.194.120.160:1910] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin836.php"] [unique_id "aWNxkAC5xybrWOCNnobmxQAAAYc"]
[Sun Jan 11 17:46:56.587948 2026] [:error] [pid 36611:tid 36618] [client 4.194.120.160:1903] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin836.php"] [unique_id "aWNxkD8oZoZHsoTdjhhI2gAAAkU"]
[Sun Jan 11 17:46:56.761333 2026] [:error] [pid 36611:tid 36619] [client 4.194.120.160:1912] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Nsa9EF.php"] [unique_id "aWNxkD8oZoZHsoTdjhhI2wAAAkY"]
[Sun Jan 11 17:46:56.945459 2026] [:error] [pid 35730:tid 35737] [client 4.194.120.160:1862] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Nsa9EF.php"] [unique_id "aWNxkDi7U_mfHtESQHkrGgAAAcU"]
[Sun Jan 11 17:46:57.128106 2026] [:error] [pid 35730:tid 35732] [client 4.194.120.160:1792] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Nsa9EF.php"] [unique_id "aWNxkTi7U_mfHtESQHkrGwAAAcA"]
[Sun Jan 11 17:46:57.303107 2026] [:error] [pid 35730:tid 35736] [client 4.194.120.160:1906] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Nsa9EF.php"] [unique_id "aWNxkTi7U_mfHtESQHkrHAAAAcQ"]
[Sun Jan 11 17:46:57.476243 2026] [:error] [pid 35730:tid 35750] [client 4.194.120.160:9467] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/I3zu2h.php"] [unique_id "aWNxkTi7U_mfHtESQHkrHQAAAdI"]
[Sun Jan 11 17:46:57.659855 2026] [:error] [pid 35730:tid 35739] [client 4.194.120.160:1906] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/I3zu2h.php"] [unique_id "aWNxkTi7U_mfHtESQHkrHgAAAcc"]
[Sun Jan 11 17:46:57.835075 2026] [:error] [pid 35730:tid 35738] [client 4.194.120.160:9467] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/I3zu2h.php"] [unique_id "aWNxkTi7U_mfHtESQHkrHwAAAcY"]
[Sun Jan 11 17:46:58.010604 2026] [:error] [pid 5155:tid 5220] [client 4.194.120.160:1889] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/I3zu2h.php"] [unique_id "aWNxklgEKFpNs0_zLGkAYAAAAIQ"]
[Sun Jan 11 17:46:58.213952 2026] [:error] [pid 11748:tid 11792] [client 4.194.120.160:1909] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aWNxkgC5xybrWOCNnobmyAAAAY4"]
[Sun Jan 11 17:46:58.441311 2026] [:error] [pid 40191:tid 40209] [client 4.194.120.160:1884] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aWNxkkm2BH1CV1p0EUG3RgAAAtA"]
[Sun Jan 11 17:46:58.649836 2026] [:error] [pid 40191:tid 40198] [client 4.194.120.160:1856] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aWNxkkm2BH1CV1p0EUG3RwAAAsU"]
[Sun Jan 11 17:46:58.828598 2026] [:error] [pid 40191:tid 40217] [client 4.194.120.160:1961] [client 4.194.120.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aWNxkkm2BH1CV1p0EUG3SAAAAtg"]
[Sun Jan 11 20:26:36.831895 2026] [:error] [pid 5272:tid 5277] [client 106.54.62.156:40700] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWOW_Fp55bCsukUvYGZxPAAAAMM"]
[Sun Jan 11 20:39:50.473183 2026] [:error] [pid 11747:tid 11773] [client 36.255.88.44:62936] [client 36.255.88.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.255.88.44, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWOaFqRFw84LNpZSk7nhcwAAAVY"]
[Sun Jan 11 20:39:50.479307 2026] [:error] [pid 11747:tid 11773] [client 36.255.88.44:62936] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Jan 11 20:48:55.136961 2026] [:error] [pid 35977:tid 35990] [client 43.135.144.81:34310] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWOcN7DST5RMqStLeP16PgAAAgo"]
[Mon Jan 12 00:51:51.711901 2026] [:error] [pid 55541:tid 55621] [client 43.130.47.33:37518] [client 43.130.47.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWPVJ8fkoYofAPYb0XYJtAAAAQk"]
[Mon Jan 12 02:59:42.263342 2026] [:error] [pid 5152:tid 5180] [client 36.41.75.167:45662] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWPzHhm0axGMFrpuXHDN3AAAABI"]
[Mon Jan 12 03:16:24.011082 2026] [:error] [pid 36611:tid 36637] [client 43.157.50.58:46882] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWP3CD8oZoZHsoTdjhicSAAAAlg"]
[Mon Jan 12 07:32:11.668918 2026] [:error] [pid 48104:tid 48120] [client 43.173.1.69:50484] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWQy-04huT4DhLwu2VvkgQAAAAc"]
[Mon Jan 12 07:35:08.208977 2026] [:error] [pid 23184:tid 23194] [client 193.29.107.153:63432] [client 193.29.107.153] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.29.107.153, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWQzrBKkZNnMA7VuWCGetAAAAQg"]
[Mon Jan 12 07:35:08.213732 2026] [:error] [pid 23184:tid 23194] [client 193.29.107.153:63432] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Jan 12 10:04:58.154047 2026] [:error] [pid 48105:tid 48141] [client 43.153.35.128:40846] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWRWyjbe4SdLfSmtJe0gVwAAAEE"]
[Mon Jan 12 10:06:22.107396 2026] [:error] [pid 9303:tid 9308] [client 170.106.187.106:43442] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWRXHtEoWhpeQ69gVtFoYQAAAUI"]
[Mon Jan 12 15:16:53.495399 2026] [:error] [pid 9303:tid 9320] [client 182.44.9.147:37858] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWSf5dEoWhpeQ69gVtGwAgAAAU4"]
[Mon Jan 12 20:03:52.209612 2026] [:error] [pid 51956:tid 51978] [client 167.172.235.216:54451] [client 167.172.235.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aWTjKEb_j3zpZfEgGM8irwAAAtQ"], referer: binance.com
[Mon Jan 12 21:47:15.896527 2026] [:error] [pid 51637:tid 51644] [client 114.96.103.33:43965] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWT7Y3rTvTmO_ovDgVDpiwAAAYE"]
[Mon Jan 12 22:49:53.652662 2026] [:error] [pid 48213:tid 48232] [client 64.224.120.41:29800] [client 64.224.120.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.224.120.41, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWUKEWRmaItaLCBvAhgU_wAAANE"]
[Mon Jan 12 22:49:53.657262 2026] [:error] [pid 48213:tid 48232] [client 64.224.120.41:29800] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 12 23:08:13.142060 2026] [:error] [pid 51863:tid 51887] [client 43.166.128.187:60102] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWUOXT2-QXSEuiZdYYZ-bAAAAhQ"]
[Tue Jan 13 04:01:59.127424 2026] [:error] [pid 26395:tid 26407] [client 117.62.235.53:46276] [client 117.62.235.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWVTN5hRkuVub9GmnFjpAwAAAQo"]
[Tue Jan 13 06:37:59.433605 2026] [:error] [pid 64601:tid 64604] [client 52.175.55.60:2047] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php, referer: https://www.google.com/
[Tue Jan 13 06:37:59.551705 2026] [:error] [pid 64601:tid 64609] [client 52.175.55.60:2047] [client 52.175.55.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.175.55.60, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aWV3x2A4qvmy2KOnZAguiwAAAUY"], referer: https://duckduckgo.com/
[Tue Jan 13 06:37:59.557104 2026] [:error] [pid 64601:tid 64609] [client 52.175.55.60:2047] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php, referer: https://duckduckgo.com/
[Tue Jan 13 06:38:00.167661 2026] [:error] [pid 64601:tid 64624] [client 52.175.55.60:2047] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aWV3yGA4qvmy2KOnZAgukAAAAVU"], referer: https://www.bing.com/
[Tue Jan 13 06:38:00.409174 2026] [:error] [pid 57659:tid 57696] [client 52.175.55.60:1923] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aWV3yIpeWOFQSBXk4xrACAAAAEY"], referer: https://www.bing.com/
[Tue Jan 13 06:38:00.648165 2026] [:error] [pid 26395:tid 26414] [client 52.175.55.60:2032] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aWV3yJhRkuVub9GmnFgh1QAAARE"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:01.004500 2026] [:error] [pid 26395:tid 26405] [client 52.175.55.60:1931] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aWV3yZhRkuVub9GmnFgh1wAAAQg"], referer: https://www.yahoo.com/
[Tue Jan 13 06:38:01.243673 2026] [:error] [pid 57660:tid 57723] [client 52.175.55.60:1927] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWV3ydMDflPZjoqTTeFbigAAAIY"], referer: https://www.google.fr/
[Tue Jan 13 06:38:01.479232 2026] [:error] [pid 64635:tid 64648] [client 52.175.55.60:2025] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aWV3yfXsJjgHYKhN2UrRAgAAAYk"], referer: https://www.google.de/
[Tue Jan 13 06:38:01.716231 2026] [:error] [pid 64776:tid 64801] [client 52.175.55.60:2010] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aWV3yWYGx8rA3H2E9y_VNgAAAhU"], referer: https://www.google.fr/
[Tue Jan 13 06:38:01.953596 2026] [:error] [pid 57756:tid 57768] [client 52.175.55.60:2013] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aWV3yRb7B3uqOEHw10nUkQAAAMo"], referer: https://www.google.fr/
[Tue Jan 13 06:38:02.188236 2026] [:error] [pid 57660:tid 57730] [client 52.175.55.60:2029] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aWV3ytMDflPZjoqTTeFbiwAAAI0"], referer: https://www.google.de/
[Tue Jan 13 06:38:02.431467 2026] [:error] [pid 64635:tid 64659] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.fr/
[Tue Jan 13 06:38:02.551916 2026] [:error] [pid 64635:tid 64641] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.yahoo.com/
[Tue Jan 13 06:38:02.674512 2026] [:error] [pid 64635:tid 64660] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.de/
[Tue Jan 13 06:38:02.795062 2026] [:error] [pid 64635:tid 64642] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.yahoo.com/
[Tue Jan 13 06:38:03.481138 2026] [:error] [pid 64635:tid 64642] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://duckduckgo.com/
[Tue Jan 13 06:38:03.601285 2026] [:error] [pid 64635:tid 64655] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.co.uk/
[Tue Jan 13 06:38:03.842281 2026] [:error] [pid 64635:tid 64650] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Tue Jan 13 06:38:03.963105 2026] [:error] [pid 64635:tid 64654] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.co.uk/
[Tue Jan 13 06:38:04.083638 2026] [:error] [pid 64635:tid 64657] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://duckduckgo.com/
[Tue Jan 13 06:38:04.210262 2026] [:error] [pid 64635:tid 64661] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:04.330967 2026] [:error] [pid 64635:tid 64643] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.google.com/
[Tue Jan 13 06:38:04.572220 2026] [:error] [pid 64635:tid 64656] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Tue Jan 13 06:38:04.693103 2026] [:error] [pid 64635:tid 64649] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Tue Jan 13 06:38:04.813824 2026] [:error] [pid 64635:tid 64651] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.de/
[Tue Jan 13 06:38:04.943768 2026] [:error] [pid 64635:tid 64662] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.co.uk/
[Tue Jan 13 06:38:05.064027 2026] [:error] [pid 64635:tid 64658] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.yahoo.com/
[Tue Jan 13 06:38:05.184626 2026] [:error] [pid 64635:tid 64639] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:05.304841 2026] [:error] [pid 64635:tid 64645] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://duckduckgo.com/
[Tue Jan 13 06:38:05.546313 2026] [:error] [pid 64635:tid 64646] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php, referer: https://www.google.fr/
[Tue Jan 13 06:38:05.666770 2026] [:error] [pid 64635:tid 64644] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:05.793404 2026] [:error] [pid 64635:tid 64648] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.co.uk/
[Tue Jan 13 06:38:05.914889 2026] [:error] [pid 64635:tid 64652] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php, referer: https://www.google.de/
[Tue Jan 13 06:38:06.036121 2026] [:error] [pid 64635:tid 64659] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:06.399039 2026] [:error] [pid 64635:tid 64642] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:06.520378 2026] [:error] [pid 64635:tid 64655] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.fr/
[Tue Jan 13 06:38:06.762242 2026] [:error] [pid 64635:tid 64650] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.de/
[Tue Jan 13 06:38:06.883135 2026] [:error] [pid 64635:tid 64654] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://duckduckgo.com/
[Tue Jan 13 06:38:07.246289 2026] [:error] [pid 64635:tid 64643] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.de/
[Tue Jan 13 06:38:07.366997 2026] [:error] [pid 64635:tid 64640] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.google.fr/
[Tue Jan 13 06:38:07.607861 2026] [:error] [pid 64635:tid 64649] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://duckduckgo.com/
[Tue Jan 13 06:38:07.849142 2026] [:error] [pid 64635:tid 64662] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.de/
[Tue Jan 13 06:38:07.969215 2026] [:error] [pid 64635:tid 64658] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://www.google.fr/
[Tue Jan 13 06:38:08.089532 2026] [:error] [pid 64635:tid 64639] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.com/
[Tue Jan 13 06:38:08.450822 2026] [:error] [pid 64635:tid 64646] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:08.815436 2026] [:error] [pid 64635:tid 64652] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:09.660226 2026] [:error] [pid 64635:tid 64654] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.yahoo.com/
[Tue Jan 13 06:38:10.624046 2026] [:error] [pid 64635:tid 64662] [client 52.175.55.60:2015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.fr/
[Tue Jan 13 06:38:10.741831 2026] [:error] [pid 64635:tid 64658] [client 52.175.55.60:2015] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aWV30vXsJjgHYKhN2UrRQwAAAZM"], referer: https://duckduckgo.com/
[Tue Jan 13 06:38:10.977623 2026] [:error] [pid 64636:tid 64675] [client 52.175.55.60:1933] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aWV30vGqpzg-cXyoK5le8gAAAck"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:11.212056 2026] [:error] [pid 64636:tid 64668] [client 52.175.55.60:1950] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aWV30_Gqpzg-cXyoK5le8wAAAcI"], referer: https://www.yahoo.com/
[Tue Jan 13 06:38:11.446396 2026] [:error] [pid 64601:tid 64606] [client 52.175.55.60:1953] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aWV302A4qvmy2KOnZAgukgAAAUM"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:11.681196 2026] [:error] [pid 57660:tid 57723] [client 52.175.55.60:1986] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aWV309MDflPZjoqTTeFbmQAAAIY"], referer: https://www.yahoo.com/
[Tue Jan 13 06:38:11.918420 2026] [:error] [pid 26395:tid 26421] [client 52.175.55.60:2040] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aWV305hRkuVub9GmnFgh2QAAARg"], referer: https://www.bing.com/
[Tue Jan 13 06:38:12.152651 2026] [:error] [pid 64816:tid 64857] [client 52.175.55.60:2003] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aWV31D7hQ-K4Qk-LZFxI5AAAAos"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:12.387298 2026] [:error] [pid 26395:tid 26398] [client 52.175.55.60:1996] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/index.php"] [unique_id "aWV31JhRkuVub9GmnFgh2gAAAQE"], referer: https://www.google.com/
[Tue Jan 13 06:38:12.621279 2026] [:error] [pid 57660:tid 57738] [client 52.175.55.60:1922] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aWV31NMDflPZjoqTTeFbnAAAAJU"], referer: https://www.bing.com/
[Tue Jan 13 06:38:12.856074 2026] [:error] [pid 57653:tid 57682] [client 52.175.55.60:1920] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aWV31IVjCK8w3mABKuGk5QAAABQ"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:13.092802 2026] [:error] [pid 57653:tid 57676] [client 52.175.55.60:1989] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aWV31YVjCK8w3mABKuGk5gAAAA4"], referer: https://www.google.de/
[Tue Jan 13 06:38:14.730398 2026] [:error] [pid 26395:tid 26402] [client 52.175.55.60:1928] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:14.969491 2026] [:error] [pid 26395:tid 26406] [client 52.175.55.60:1928] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aWV31phRkuVub9GmnFgh6AAAAQk"], referer: https://www.google.de/
[Tue Jan 13 06:38:15.325834 2026] [:error] [pid 26395:tid 26412] [client 52.175.55.60:1956] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aWV315hRkuVub9GmnFgh6gAAAQ8"], referer: https://duckduckgo.com/
[Tue Jan 13 06:38:15.559756 2026] [:error] [pid 64816:tid 64870] [client 52.175.55.60:1936] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aWV31z7hQ-K4Qk-LZFxI5gAAApg"], referer: https://www.google.fr/
[Tue Jan 13 06:38:15.794519 2026] [:error] [pid 57659:tid 57694] [client 52.175.55.60:2037] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aWV314peWOFQSBXk4xrACQAAAEQ"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:16.031252 2026] [:error] [pid 57660:tid 57718] [client 52.175.55.60:2019] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aWV32NMDflPZjoqTTeFbowAAAIE"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:16.508720 2026] [:error] [pid 57659:tid 57693] [client 52.175.55.60:1964] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aWV32IpeWOFQSBXk4xrADQAAAEM"], referer: https://www.bing.com/
[Tue Jan 13 06:38:16.869497 2026] [:error] [pid 64636:tid 64690] [client 52.175.55.60:1994] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aWV32PGqpzg-cXyoK5le9wAAAdg"], referer: https://www.google.com/
[Tue Jan 13 06:38:17.105212 2026] [:error] [pid 64636:tid 64680] [client 52.175.55.60:1984] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aWV32fGqpzg-cXyoK5le-AAAAc4"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:17.339343 2026] [:error] [pid 57653:tid 57669] [client 52.175.55.60:1938] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aWV32YVjCK8w3mABKuGk7AAAAAc"], referer: https://www.bing.com/
[Tue Jan 13 06:38:17.574859 2026] [:error] [pid 57659:tid 57695] [client 52.175.55.60:1978] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aWV32YpeWOFQSBXk4xrADwAAAEU"], referer: https://www.yahoo.com/
[Tue Jan 13 06:38:17.936864 2026] [:error] [pid 57653:tid 57674] [client 52.175.55.60:2017] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aWV32YVjCK8w3mABKuGk7gAAAAw"], referer: https://www.google.fr/
[Tue Jan 13 06:38:18.176485 2026] [:error] [pid 57653:tid 57679] [client 52.175.55.60:2028] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aWV32oVjCK8w3mABKuGk7wAAABE"], referer: https://www.google.co.uk/
[Tue Jan 13 06:38:18.652663 2026] [:error] [pid 57756:tid 57766] [client 52.175.55.60:2012] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/search/index.php"] [unique_id "aWV32hb7B3uqOEHw10nUmgAAAMg"], referer: https://www.bing.com/
[Tue Jan 13 06:38:19.008751 2026] [:error] [pid 57653:tid 57682] [client 52.175.55.60:1985] [client 52.175.55.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aWV324VjCK8w3mABKuGk8gAAABQ"], referer: https://www.google.fr/
[Tue Jan 13 06:38:19.248382 2026] [:error] [pid 57659:tid 57709] [client 52.175.55.60:2022] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php, referer: https://www.bing.com/
[Tue Jan 13 06:38:19.368002 2026] [:error] [pid 57659:tid 57690] [client 52.175.55.60:2022] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php, referer: https://www.google.fr/
[Tue Jan 13 06:38:19.490571 2026] [:error] [pid 57659:tid 57699] [client 52.175.55.60:2022] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php, referer: https://www.google.com/
[Tue Jan 13 09:09:52.441665 2026] [:error] [pid 64816:tid 64870] [client 43.153.204.189:51900] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWWbYD7hQ-K4Qk-LZFxeHgAAApg"]
[Tue Jan 13 10:05:50.392188 2026] [:error] [pid 64635:tid 64654] [client 43.166.129.247:52192] [client 43.166.129.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWWofvXsJjgHYKhN2UrrYwAAAY8"]
[Tue Jan 13 12:07:53.055038 2026] [:error] [pid 22485:tid 22489] [client 172.71.172.37:11990] [client 172.71.172.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aWXFGRzzbghmKib9ie97BgAAAYI"]
[Tue Jan 13 13:58:03.513179 2026] [:error] [pid 22426:tid 22462] [client 100.48.86.139:52237] [client 100.48.86.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 100.48.86.139, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWXe69y1Q5toryYTHgNoTwAAAMQ"]
[Tue Jan 13 13:58:03.517126 2026] [:error] [pid 22426:tid 22462] [client 100.48.86.139:52237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Jan 13 16:26:39.000871 2026] [:error] [pid 22389:tid 22392] [client 49.7.227.204:36486] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWYBviLIB_8b411qalIa3AAAAUE"]
[Tue Jan 13 17:46:58.310081 2026] [:error] [pid 22426:tid 22466] [client 43.166.226.57:45222] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWYUkty1Q5toryYTHgOYmAAAAMg"]
[Tue Jan 13 19:16:30.053486 2026] [:error] [pid 49677:tid 49691] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Tue Jan 13 19:16:30.178536 2026] [:error] [pid 49677:tid 49694] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/ea.php
[Tue Jan 13 19:16:30.306012 2026] [:error] [pid 49677:tid 49686] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/gi.php
[Tue Jan 13 19:16:30.436540 2026] [:error] [pid 49677:tid 49688] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/nov.php
[Tue Jan 13 19:16:30.564040 2026] [:error] [pid 49677:tid 49695] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/xo.php
[Tue Jan 13 19:16:30.688307 2026] [:error] [pid 49677:tid 49698] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Tue Jan 13 19:16:30.812398 2026] [:error] [pid 49677:tid 49701] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/anskrit.php
[Tue Jan 13 19:16:30.962071 2026] [:error] [pid 49677:tid 49702] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/win.php
[Tue Jan 13 19:16:31.085574 2026] [:error] [pid 49677:tid 49687] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/ut.php
[Tue Jan 13 19:16:31.227403 2026] [:error] [pid 49677:tid 49692] [client 20.27.218.116:32487] File does not exist: /usr/local/apache/htdocs/suspended-page/ooaiyc.php
[Tue Jan 13 19:16:31.392812 2026] [:error] [pid 49677:tid 49681] [client 20.27.218.116:32487] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "aWYpj_iKiDrYd_02VZoaoQAAAEA"]
[Tue Jan 13 19:16:31.746978 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:32461] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "aWYpj6HONsygso2w0OPKjQAAARA"]
[Tue Jan 13 19:16:32.131040 2026] [:error] [pid 22389:tid 22392] [client 20.27.218.116:32459] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "aWYpkCLIB_8b411qalJASAAAAUE"]
[Tue Jan 13 19:16:32.505965 2026] [:error] [pid 33727:tid 33736] [client 20.27.218.116:32410] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "aWYpkKHONsygso2w0OPKkAAAAQc"]
[Tue Jan 13 19:16:33.137855 2026] [:error] [pid 33727:tid 33747] [client 20.27.218.116:32505] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avtst.php"] [unique_id "aWYpkaHONsygso2w0OPKkwAAARI"]
[Tue Jan 13 19:16:33.592644 2026] [:error] [pid 33727:tid 33741] [client 20.27.218.116:32474] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avtst.php"] [unique_id "aWYpkaHONsygso2w0OPKlAAAAQw"]
[Tue Jan 13 19:16:33.870644 2026] [:error] [pid 33727:tid 33735] [client 20.27.218.116:32389] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avtst.php"] [unique_id "aWYpkaHONsygso2w0OPKlQAAAQY"]
[Tue Jan 13 19:16:34.307889 2026] [:error] [pid 22426:tid 22478] [client 20.27.218.116:32511] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avtst.php"] [unique_id "aWYpkty1Q5toryYTHgOm6gAAANQ"]
[Tue Jan 13 19:16:34.788237 2026] [:error] [pid 49677:tid 49696] [client 20.27.218.116:32507] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aWYpkviKiDrYd_02VZoaowAAAE8"]
[Tue Jan 13 19:16:35.557508 2026] [:error] [pid 22426:tid 22470] [client 20.27.218.116:32503] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aWYpk9y1Q5toryYTHgOm6wAAAMw"]
[Tue Jan 13 19:16:35.986994 2026] [:error] [pid 22389:tid 22393] [client 20.27.218.116:11223] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aWYpkyLIB_8b411qalJATwAAAUI"]
[Tue Jan 13 19:16:36.248343 2026] [:error] [pid 22425:tid 22442] [client 20.27.218.116:32458] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "aWYplHLEE_SEuOZ0WBTeXwAAAIs"]
[Tue Jan 13 19:16:36.626561 2026] [:error] [pid 22389:tid 22396] [client 20.27.218.116:32477] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aWYplCLIB_8b411qalJAUQAAAUU"]
[Tue Jan 13 19:16:37.136059 2026] [:error] [pid 22426:tid 22474] [client 20.27.218.116:32460] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aWYpldy1Q5toryYTHgOm7AAAANA"]
[Tue Jan 13 19:16:37.976918 2026] [:error] [pid 49677:tid 49697] [client 20.27.218.116:32506] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aWYplfiKiDrYd_02VZoapAAAAFA"]
[Tue Jan 13 19:16:38.947410 2026] [:error] [pid 27597:tid 27607] [client 20.27.218.116:32497] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aWYplj8Db8v8HoJ3n4Ds4QAAAAg"]
[Tue Jan 13 19:16:39.768013 2026] [:error] [pid 49677:tid 49705] [client 20.27.218.116:32434] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aWYpl_iKiDrYd_02VZoapQAAAFg"]
[Tue Jan 13 19:16:40.733195 2026] [:error] [pid 33727:tid 33734] [client 20.27.218.116:32483] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aWYpmKHONsygso2w0OPKmwAAAQU"]
[Tue Jan 13 19:16:41.613653 2026] [:error] [pid 22389:tid 22403] [client 20.27.218.116:32501] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aWYpmSLIB_8b411qalJAUwAAAUw"]
[Tue Jan 13 19:16:42.616485 2026] [:error] [pid 22485:tid 22509] [client 20.27.218.116:32384] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lx.php"] [unique_id "aWYpmhzzbghmKib9ie_kxQAAAZY"]
[Tue Jan 13 19:16:44.124303 2026] [:error] [pid 33727:tid 33742] [client 20.27.218.116:32441] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/die.php"] [unique_id "aWYpnKHONsygso2w0OPKoQAAAQ0"]
[Tue Jan 13 19:16:44.847246 2026] [:error] [pid 33727:tid 33741] [client 20.27.218.116:32488] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/die.php"] [unique_id "aWYpnKHONsygso2w0OPKogAAAQw"]
[Tue Jan 13 19:16:45.202249 2026] [:error] [pid 22389:tid 22414] [client 20.27.218.116:32395] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/die.php"] [unique_id "aWYpnSLIB_8b411qalJAVwAAAVc"]
[Tue Jan 13 19:16:46.409165 2026] [:error] [pid 22485:tid 22492] [client 20.27.218.116:32406] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/die.php"] [unique_id "aWYpnhzzbghmKib9ie_kyAAAAYU"]
[Tue Jan 13 19:16:47.254590 2026] [:error] [pid 33727:tid 33746] [client 20.27.218.116:32448] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaaa.php"] [unique_id "aWYpn6HONsygso2w0OPKpAAAARE"]
[Tue Jan 13 19:16:48.042204 2026] [:error] [pid 22485:tid 22510] [client 20.27.218.116:32462] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaaa.php"] [unique_id "aWYpoBzzbghmKib9ie_kygAAAZc"]
[Tue Jan 13 19:16:48.936234 2026] [:error] [pid 49677:tid 49687] [client 20.27.218.116:32478] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaaa.php"] [unique_id "aWYpoPiKiDrYd_02VZoasAAAAEY"]
[Tue Jan 13 19:16:49.532473 2026] [:error] [pid 27597:tid 27615] [client 20.27.218.116:32490] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaaa.php"] [unique_id "aWYpoT8Db8v8HoJ3n4Ds5gAAABA"]
[Tue Jan 13 19:16:50.232023 2026] [:error] [pid 27597:tid 27599] [client 20.27.218.116:32393] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbbb.php"] [unique_id "aWYpoj8Db8v8HoJ3n4Ds5wAAAAA"]
[Tue Jan 13 19:16:50.765205 2026] [:error] [pid 27597:tid 27604] [client 20.27.218.116:32385] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbbb.php"] [unique_id "aWYpoj8Db8v8HoJ3n4Ds6AAAAAU"]
[Tue Jan 13 19:16:51.175367 2026] [:error] [pid 33727:tid 33743] [client 20.27.218.116:11254] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbbb.php"] [unique_id "aWYpo6HONsygso2w0OPKqgAAAQ4"]
[Tue Jan 13 19:16:51.836453 2026] [:error] [pid 27597:tid 27612] [client 20.27.218.116:32429] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbbb.php"] [unique_id "aWYpoz8Db8v8HoJ3n4Ds6gAAAA0"]
[Tue Jan 13 19:16:52.472577 2026] [:error] [pid 22389:tid 22396] [client 20.27.218.116:32480] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aWYppCLIB_8b411qalJAXgAAAUU"]
[Tue Jan 13 19:16:53.401619 2026] [:error] [pid 22485:tid 22498] [client 20.27.218.116:32397] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aWYppRzzbghmKib9ie_kzgAAAYs"]
[Tue Jan 13 19:16:53.926607 2026] [:error] [pid 33727:tid 33748] [client 20.27.218.116:32399] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aWYppaHONsygso2w0OPKrgAAARM"]
[Tue Jan 13 19:16:54.294855 2026] [:error] [pid 27597:tid 27618] [client 20.27.218.116:32464] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cccc.php"] [unique_id "aWYppj8Db8v8HoJ3n4Ds7QAAABM"]
[Tue Jan 13 19:16:54.657920 2026] [:error] [pid 33727:tid 33736] [client 20.27.218.116:32491] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aWYppqHONsygso2w0OPKsAAAAQc"]
[Tue Jan 13 19:16:55.518584 2026] [:error] [pid 33727:tid 33749] [client 20.27.218.116:11214] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aWYpp6HONsygso2w0OPKsQAAARQ"]
[Tue Jan 13 19:16:56.461855 2026] [:error] [pid 22389:tid 22391] [client 20.27.218.116:32446] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aWYpqCLIB_8b411qalJAYQAAAUA"]
[Tue Jan 13 19:16:57.100069 2026] [:error] [pid 22425:tid 22448] [client 20.27.218.116:32413] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aWYpqXLEE_SEuOZ0WBTecwAAAJE"]
[Tue Jan 13 19:16:57.545532 2026] [:error] [pid 33727:tid 33741] [client 20.27.218.116:32408] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aWYpqaHONsygso2w0OPKswAAAQw"]
[Tue Jan 13 19:16:57.916157 2026] [:error] [pid 22485:tid 22505] [client 20.27.218.116:32495] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aWYpqRzzbghmKib9ie_k0AAAAZI"]
[Tue Jan 13 19:16:58.269133 2026] [:error] [pid 22389:tid 22406] [client 20.27.218.116:32476] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aWYpqiLIB_8b411qalJAcQAAAU8"]
[Tue Jan 13 19:16:58.642051 2026] [:error] [pid 22425:tid 22449] [client 20.27.218.116:32402] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "aWYpqnLEE_SEuOZ0WBTedQAAAJI"]
[Tue Jan 13 19:16:59.017976 2026] [:error] [pid 33727:tid 33750] [client 20.27.218.116:32473] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aWYpq6HONsygso2w0OPKtQAAARU"]
[Tue Jan 13 19:16:59.369731 2026] [:error] [pid 33727:tid 33746] [client 20.27.218.116:11243] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aWYpq6HONsygso2w0OPKtgAAARE"]
[Tue Jan 13 19:16:59.878570 2026] [:error] [pid 33727:tid 33731] [client 20.27.218.116:11225] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aWYpq6HONsygso2w0OPKtwAAAQI"]
[Tue Jan 13 19:17:00.315694 2026] [:error] [pid 33727:tid 33743] [client 20.27.218.116:32415] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aWYprKHONsygso2w0OPKuQAAAQ4"]
[Tue Jan 13 19:17:01.091703 2026] [:error] [pid 22389:tid 22393] [client 20.27.218.116:11222] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aWYprSLIB_8b411qalJAmgAAAUI"]
[Tue Jan 13 19:17:01.766764 2026] [:error] [pid 33727:tid 33737] [client 20.27.218.116:32457] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aWYpraHONsygso2w0OPKugAAAQg"]
[Tue Jan 13 19:17:02.253273 2026] [:error] [pid 33727:tid 33751] [client 20.27.218.116:32401] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aWYprqHONsygso2w0OPKuwAAARY"]
[Tue Jan 13 19:17:03.107605 2026] [:error] [pid 22485:tid 22491] [client 20.27.218.116:32485] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aWYprxzzbghmKib9ie_k1AAAAYQ"]
[Tue Jan 13 19:17:04.838786 2026] [:error] [pid 33727:tid 33732] [client 20.27.218.116:11227] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aWYpsKHONsygso2w0OPKvgAAAQM"]
[Tue Jan 13 19:17:05.175639 2026] [:error] [pid 33727:tid 33753] [client 20.27.218.116:32416] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aWYpsaHONsygso2w0OPKvwAAARg"]
[Tue Jan 13 19:17:05.796914 2026] [:error] [pid 33727:tid 33748] [client 20.27.218.116:32494] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aWYpsaHONsygso2w0OPKwAAAARM"]
[Tue Jan 13 19:17:06.589787 2026] [:error] [pid 22425:tid 22435] [client 20.27.218.116:32419] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aWYpsnLEE_SEuOZ0WBTedwAAAIQ"]
[Tue Jan 13 19:17:07.142407 2026] [:error] [pid 33727:tid 33730] [client 20.27.218.116:32428] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aWYps6HONsygso2w0OPKxAAAAQE"]
[Tue Jan 13 19:17:07.614440 2026] [:error] [pid 22425:tid 22441] [client 20.27.218.116:32502] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aWYps3LEE_SEuOZ0WBTeeAAAAIo"]
[Tue Jan 13 19:17:08.410545 2026] [:error] [pid 22425:tid 22433] [client 20.27.218.116:32486] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aWYptHLEE_SEuOZ0WBTeewAAAII"]
[Tue Jan 13 19:17:08.884223 2026] [:error] [pid 22425:tid 22440] [client 20.27.218.116:11140] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aWYptHLEE_SEuOZ0WBTeggAAAIk"]
[Tue Jan 13 19:17:09.458538 2026] [:error] [pid 33727:tid 33731] [client 20.27.218.116:32418] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aWYptaHONsygso2w0OPKyAAAAQI"]
[Tue Jan 13 19:17:09.796222 2026] [:error] [pid 49677:tid 49698] [client 20.27.218.116:11240] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aWYptfiKiDrYd_02VZoa1QAAAFE"]
[Tue Jan 13 19:17:10.958723 2026] [:error] [pid 33727:tid 33737] [client 20.27.218.116:32510] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aWYptqHONsygso2w0OPKyQAAAQg"]
[Tue Jan 13 19:17:11.659052 2026] [:error] [pid 22389:tid 22411] [client 20.27.218.116:32489] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "aWYptyLIB_8b411qalJA0gAAAVQ"]
[Tue Jan 13 19:17:12.299750 2026] [:error] [pid 33727:tid 33751] [client 20.27.218.116:32465] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aWYpuKHONsygso2w0OPKywAAARY"]
[Tue Jan 13 19:17:12.831431 2026] [:error] [pid 22389:tid 22410] [client 20.27.218.116:11238] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aWYpuCLIB_8b411qalJA1AAAAVM"]
[Tue Jan 13 19:17:13.278847 2026] [:error] [pid 22389:tid 22393] [client 20.27.218.116:32400] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aWYpuSLIB_8b411qalJA1gAAAUI"]
[Tue Jan 13 19:17:13.814713 2026] [:error] [pid 22485:tid 22502] [client 20.27.218.116:32493] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aWYpuRzzbghmKib9ie_k6wAAAY8"]
[Tue Jan 13 19:17:14.170181 2026] [:error] [pid 33727:tid 33732] [client 20.27.218.116:32388] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aWYpuqHONsygso2w0OPKzAAAAQM"]
[Tue Jan 13 19:17:14.551929 2026] [:error] [pid 22485:tid 22509] [client 20.27.218.116:32455] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aWYpuhzzbghmKib9ie_k7AAAAZY"]
[Tue Jan 13 19:17:14.822003 2026] [:error] [pid 22485:tid 22501] [client 20.27.218.116:32478] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aWYpuhzzbghmKib9ie_k7QAAAY4"]
[Tue Jan 13 19:17:15.126736 2026] [:error] [pid 22485:tid 22506] [client 20.27.218.116:11229] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aWYpuxzzbghmKib9ie_k7gAAAZM"]
[Tue Jan 13 19:17:15.490668 2026] [:error] [pid 33727:tid 33734] [client 20.27.218.116:32456] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aWYpu6HONsygso2w0OPKzQAAAQU"]
[Tue Jan 13 19:17:15.859201 2026] [:error] [pid 22485:tid 22487] [client 20.27.218.116:11237] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aWYpuxzzbghmKib9ie_k7wAAAYA"]
[Tue Jan 13 19:17:16.274040 2026] [:error] [pid 22485:tid 22496] [client 20.27.218.116:11137] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aWYpvBzzbghmKib9ie_k8AAAAYk"]
[Tue Jan 13 19:17:16.615213 2026] [:error] [pid 22485:tid 22494] [client 20.27.218.116:32394] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "aWYpvBzzbghmKib9ie_k8QAAAYc"]
[Tue Jan 13 19:17:16.855735 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:32499] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3406.php"] [unique_id "aWYpvKHONsygso2w0OPKzgAAARA"]
[Tue Jan 13 19:17:17.187055 2026] [:error] [pid 49677:tid 49687] [client 20.27.218.116:32481] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3406.php"] [unique_id "aWYpvfiKiDrYd_02VZoa1wAAAEY"]
[Tue Jan 13 19:17:17.455713 2026] [:error] [pid 33727:tid 33736] [client 20.27.218.116:32439] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3406.php"] [unique_id "aWYpvaHONsygso2w0OPKzwAAAQc"]
[Tue Jan 13 19:17:17.838858 2026] [:error] [pid 22425:tid 22451] [client 20.27.218.116:32467] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3406.php"] [unique_id "aWYpvXLEE_SEuOZ0WBTejAAAAJQ"]
[Tue Jan 13 19:17:18.123081 2026] [:error] [pid 27597:tid 27611] [client 20.27.218.116:11204] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/963e.php"] [unique_id "aWYpvj8Db8v8HoJ3n4DtOQAAAAw"]
[Tue Jan 13 19:17:18.450706 2026] [:error] [pid 22425:tid 22444] [client 20.27.218.116:32412] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/963e.php"] [unique_id "aWYpvnLEE_SEuOZ0WBTekAAAAI0"]
[Tue Jan 13 19:17:19.066108 2026] [:error] [pid 22389:tid 22406] [client 20.27.218.116:32407] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/963e.php"] [unique_id "aWYpvyLIB_8b411qalJA2wAAAU8"]
[Tue Jan 13 19:17:20.106187 2026] [:error] [pid 49677:tid 49700] [client 20.27.218.116:32449] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/963e.php"] [unique_id "aWYpwPiKiDrYd_02VZoa2AAAAFM"]
[Tue Jan 13 19:17:21.336634 2026] [:error] [pid 49677:tid 49684] [client 20.27.218.116:11218] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aWYpwfiKiDrYd_02VZoa2gAAAEM"]
[Tue Jan 13 19:17:22.382275 2026] [:error] [pid 22485:tid 22498] [client 20.27.218.116:32440] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aWYpwhzzbghmKib9ie_k9AAAAYs"]
[Tue Jan 13 19:17:22.906536 2026] [:error] [pid 22389:tid 22414] [client 20.27.218.116:32402] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aWYpwiLIB_8b411qalJA4AAAAVc"]
[Tue Jan 13 19:17:23.765756 2026] [:error] [pid 22425:tid 22438] [client 20.27.218.116:11257] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hk.php"] [unique_id "aWYpw3LEE_SEuOZ0WBTekgAAAIc"]
[Tue Jan 13 19:17:24.082630 2026] [:error] [pid 22389:tid 22404] [client 20.27.218.116:11260] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjfuns.php"] [unique_id "aWYpxCLIB_8b411qalJA4gAAAU0"]
[Tue Jan 13 19:17:24.433956 2026] [:error] [pid 22425:tid 22449] [client 20.27.218.116:11205] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjfuns.php"] [unique_id "aWYpxHLEE_SEuOZ0WBTekwAAAJI"]
[Tue Jan 13 19:17:25.066747 2026] [:error] [pid 33727:tid 33729] [client 20.27.218.116:32417] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjfuns.php"] [unique_id "aWYpxaHONsygso2w0OPK0wAAAQA"]
[Tue Jan 13 19:17:25.449320 2026] [:error] [pid 22485:tid 22497] [client 20.27.218.116:32432] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjfuns.php"] [unique_id "aWYpxRzzbghmKib9ie_k9QAAAYo"]
[Tue Jan 13 19:17:26.638113 2026] [:error] [pid 33727:tid 33739] [client 20.27.218.116:32496] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akk.php"] [unique_id "aWYpxqHONsygso2w0OPK1wAAAQo"]
[Tue Jan 13 19:17:27.073082 2026] [:error] [pid 49677:tid 49705] [client 20.27.218.116:11233] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akk.php"] [unique_id "aWYpx_iKiDrYd_02VZoa4gAAAFg"]
[Tue Jan 13 19:17:27.429234 2026] [:error] [pid 49677:tid 49690] [client 20.27.218.116:11207] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akk.php"] [unique_id "aWYpx_iKiDrYd_02VZoa4wAAAEk"]
[Tue Jan 13 19:17:27.943653 2026] [:error] [pid 49677:tid 49694] [client 20.27.218.116:32445] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akk.php"] [unique_id "aWYpx_iKiDrYd_02VZoa5AAAAE0"]
[Tue Jan 13 19:17:28.237572 2026] [:error] [pid 49677:tid 49691] [client 20.27.218.116:32472] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aWYpyPiKiDrYd_02VZoa5QAAAEo"]
[Tue Jan 13 19:17:28.664339 2026] [:error] [pid 22485:tid 22505] [client 20.27.218.116:32414] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aWYpyBzzbghmKib9ie_k9gAAAZI"]
[Tue Jan 13 19:17:28.941261 2026] [:error] [pid 49677:tid 49698] [client 20.27.218.116:32504] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aWYpyPiKiDrYd_02VZoa6AAAAFE"]
[Tue Jan 13 19:17:29.252039 2026] [:error] [pid 22485:tid 22495] [client 20.27.218.116:32482] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpa.php"] [unique_id "aWYpyRzzbghmKib9ie_k9wAAAYg"]
[Tue Jan 13 19:17:29.514900 2026] [:error] [pid 22485:tid 22507] [client 20.27.218.116:32387] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rrr.php"] [unique_id "aWYpyRzzbghmKib9ie_k-AAAAZQ"]
[Tue Jan 13 19:17:29.778022 2026] [:error] [pid 22426:tid 22469] [client 20.27.218.116:11171] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rrr.php"] [unique_id "aWYpydy1Q5toryYTHgOnCgAAAMs"]
[Tue Jan 13 19:17:30.129607 2026] [:error] [pid 22426:tid 22468] [client 20.27.218.116:32475] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rrr.php"] [unique_id "aWYpyty1Q5toryYTHgOnCwAAAMo"]
[Tue Jan 13 19:17:30.528492 2026] [:error] [pid 22389:tid 22410] [client 20.27.218.116:32437] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rrr.php"] [unique_id "aWYpyiLIB_8b411qalJA6QAAAVM"]
[Tue Jan 13 19:17:30.910618 2026] [:error] [pid 33727:tid 33734] [client 20.27.218.116:32500] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aWYpyqHONsygso2w0OPK3AAAAQU"]
[Tue Jan 13 19:17:31.216133 2026] [:error] [pid 33727:tid 33753] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Tue Jan 13 19:17:31.562315 2026] [:error] [pid 33727:tid 33753] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/0x0x.php
[Tue Jan 13 19:17:31.685798 2026] [:error] [pid 33727:tid 33748] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Jan 13 19:17:31.827578 2026] [:error] [pid 33727:tid 33749] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Jan 13 19:17:31.950435 2026] [:error] [pid 33727:tid 33730] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Jan 13 19:17:32.075624 2026] [:error] [pid 33727:tid 33729] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Jan 13 19:17:32.211298 2026] [:error] [pid 33727:tid 33733] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Tue Jan 13 19:17:32.334995 2026] [:error] [pid 33727:tid 33750] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/shell1.php
[Tue Jan 13 19:17:32.457923 2026] [:error] [pid 33727:tid 33742] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Tue Jan 13 19:17:32.593830 2026] [:error] [pid 33727:tid 33739] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Tue Jan 13 19:17:32.718184 2026] [:error] [pid 33727:tid 33731] [client 20.27.218.116:32392] File does not exist: /usr/local/apache/htdocs/suspended-page/hexx.php
[Tue Jan 13 19:17:32.838039 2026] [:error] [pid 33727:tid 33743] [client 20.27.218.116:32392] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/444.php"] [unique_id "aWYpzKHONsygso2w0OPK6wAAAQ4"]
[Tue Jan 13 19:17:33.213718 2026] [:error] [pid 22389:tid 22395] [client 20.27.218.116:32447] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/444.php"] [unique_id "aWYpzSLIB_8b411qalJA7AAAAUQ"]
[Tue Jan 13 19:17:33.495593 2026] [:error] [pid 22389:tid 22412] [client 20.27.218.116:32484] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/444.php"] [unique_id "aWYpzSLIB_8b411qalJA7QAAAVU"]
[Tue Jan 13 19:17:33.899214 2026] [:error] [pid 22425:tid 22455] [client 20.27.218.116:11201] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/444.php"] [unique_id "aWYpzXLEE_SEuOZ0WBTemQAAAJg"]
[Tue Jan 13 19:17:34.239317 2026] [:error] [pid 22425:tid 22453] [client 20.27.218.116:11150] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aWYpznLEE_SEuOZ0WBTemgAAAJY"]
[Tue Jan 13 19:17:34.584287 2026] [:error] [pid 22425:tid 22454] [client 20.27.218.116:32454] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aWYpznLEE_SEuOZ0WBTemwAAAJc"]
[Tue Jan 13 19:17:34.867766 2026] [:error] [pid 22425:tid 22445] [client 20.27.218.116:32509] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aWYpznLEE_SEuOZ0WBTenQAAAI4"]
[Tue Jan 13 19:17:35.219240 2026] [:error] [pid 22485:tid 22490] [client 20.27.218.116:32405] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aWYpzxzzbghmKib9ie_k-QAAAYM"]
[Tue Jan 13 19:17:35.495096 2026] [:error] [pid 22425:tid 22440] [client 20.27.218.116:11212] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aWYpz3LEE_SEuOZ0WBTenwAAAIk"]
[Tue Jan 13 19:17:35.792407 2026] [:error] [pid 22425:tid 22447] [client 20.27.218.116:11152] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aWYpz3LEE_SEuOZ0WBTeoAAAAJA"]
[Tue Jan 13 19:17:36.182375 2026] [:error] [pid 33727:tid 33746] [client 20.27.218.116:32390] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aWYp0KHONsygso2w0OPK7QAAARE"]
[Tue Jan 13 19:17:36.547220 2026] [:error] [pid 33727:tid 33751] [client 20.27.218.116:11220] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aWYp0KHONsygso2w0OPK7gAAARY"]
[Tue Jan 13 19:17:36.933308 2026] [:error] [pid 22425:tid 22432] [client 20.27.218.116:32508] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aWYp0HLEE_SEuOZ0WBTepAAAAIE"]
[Tue Jan 13 19:17:37.224702 2026] [:error] [pid 22389:tid 22394] [client 20.27.218.116:32404] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aWYp0SLIB_8b411qalJA7wAAAUM"]
[Tue Jan 13 19:17:37.908805 2026] [:error] [pid 22485:tid 22488] [client 20.27.218.116:11230] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aWYp0RzzbghmKib9ie_k-gAAAYE"]
[Tue Jan 13 19:17:38.667472 2026] [:error] [pid 22485:tid 22491] [client 20.27.218.116:32411] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aWYp0hzzbghmKib9ie_k-wAAAYQ"]
[Tue Jan 13 19:17:39.059066 2026] [:error] [pid 22426:tid 22467] [client 20.27.218.116:11203] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aWYp09y1Q5toryYTHgOnDAAAAMk"]
[Tue Jan 13 19:17:39.401817 2026] [:error] [pid 22485:tid 22502] [client 20.27.218.116:32469] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aWYp0xzzbghmKib9ie_k_AAAAY8"]
[Tue Jan 13 19:17:39.797357 2026] [:error] [pid 22485:tid 22509] [client 20.27.218.116:32435] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aWYp0xzzbghmKib9ie_k_QAAAZY"]
[Tue Jan 13 19:17:40.143842 2026] [:error] [pid 22426:tid 22465] [client 20.27.218.116:11211] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aWYp1Ny1Q5toryYTHgOnDQAAAMc"]
[Tue Jan 13 19:17:40.482945 2026] [:error] [pid 22426:tid 22473] [client 20.27.218.116:32427] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aWYp1Ny1Q5toryYTHgOnDgAAAM8"]
[Tue Jan 13 19:17:40.936699 2026] [:error] [pid 27597:tid 27618] [client 20.27.218.116:32451] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aWYp1D8Db8v8HoJ3n4DtPwAAABM"]
[Tue Jan 13 19:17:41.317392 2026] [:error] [pid 22426:tid 22481] [client 20.27.218.116:11149] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aWYp1dy1Q5toryYTHgOnEAAAANc"]
[Tue Jan 13 19:17:41.608243 2026] [:error] [pid 22425:tid 22453] [client 20.27.218.116:11170] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aWYp1XLEE_SEuOZ0WBTeqwAAAJY"]
[Tue Jan 13 19:17:41.881202 2026] [:error] [pid 22425:tid 22454] [client 20.27.218.116:11153] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aWYp1XLEE_SEuOZ0WBTerAAAAJc"]
[Tue Jan 13 19:17:42.156388 2026] [:error] [pid 22425:tid 22435] [client 20.27.218.116:11143] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aWYp1nLEE_SEuOZ0WBTerQAAAIQ"]
[Tue Jan 13 19:17:42.455389 2026] [:error] [pid 22426:tid 22472] [client 20.27.218.116:11213] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aWYp1ty1Q5toryYTHgOnEgAAAM4"]
[Tue Jan 13 19:17:42.736257 2026] [:error] [pid 27597:tid 27614] [client 20.27.218.116:32433] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aWYp1j8Db8v8HoJ3n4DtQgAAAA8"]
[Tue Jan 13 19:17:42.997742 2026] [:error] [pid 22426:tid 22471] [client 20.27.218.116:11246] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aWYp1ty1Q5toryYTHgOnFAAAAM0"]
[Tue Jan 13 19:17:43.313546 2026] [:error] [pid 49677:tid 49685] [client 20.27.218.116:11228] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aWYp1_iKiDrYd_02VZoa7gAAAEQ"]
[Tue Jan 13 19:17:43.585758 2026] [:error] [pid 22425:tid 22437] [client 20.27.218.116:11221] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aWYp13LEE_SEuOZ0WBTergAAAIY"]
[Tue Jan 13 19:17:44.077265 2026] [:error] [pid 49677:tid 49691] [client 20.27.218.116:11236] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zfile.php"] [unique_id "aWYp2PiKiDrYd_02VZoa8gAAAEo"]
[Tue Jan 13 19:17:44.559015 2026] [:error] [pid 49677:tid 49698] [client 20.27.218.116:11091] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aWYp2PiKiDrYd_02VZoa8wAAAFE"]
[Tue Jan 13 19:17:44.858979 2026] [:error] [pid 49677:tid 49695] [client 20.27.218.116:32430] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aWYp2PiKiDrYd_02VZoa9AAAAE4"]
[Tue Jan 13 19:17:45.225225 2026] [:error] [pid 22425:tid 22431] [client 20.27.218.116:11209] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aWYp2XLEE_SEuOZ0WBTesgAAAIA"]
[Tue Jan 13 19:17:45.555401 2026] [:error] [pid 22425:tid 22448] [client 20.27.218.116:32426] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conflg.php"] [unique_id "aWYp2XLEE_SEuOZ0WBTeswAAAJE"]
[Tue Jan 13 19:17:45.796609 2026] [:error] [pid 22426:tid 22482] [client 20.27.218.116:11217] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aWYp2dy1Q5toryYTHgOnFQAAANg"]
[Tue Jan 13 19:17:46.118740 2026] [:error] [pid 33727:tid 33735] [client 20.27.218.116:11160] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aWYp2qHONsygso2w0OPK8AAAAQY"]
[Tue Jan 13 19:17:46.449718 2026] [:error] [pid 22425:tid 22438] [client 20.27.218.116:11210] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aWYp2nLEE_SEuOZ0WBTetgAAAIc"]
[Tue Jan 13 19:17:46.709932 2026] [:error] [pid 22485:tid 22500] [client 20.27.218.116:11249] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aWYp2hzzbghmKib9ie_lAQAAAY0"]
[Tue Jan 13 19:17:46.971560 2026] [:error] [pid 22425:tid 22432] [client 20.27.218.116:11180] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWYp2nLEE_SEuOZ0WBTetwAAAIE"]
[Tue Jan 13 19:17:47.243437 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:11247] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWYp26HONsygso2w0OPK8QAAARA"]
[Tue Jan 13 19:17:47.535105 2026] [:error] [pid 22425:tid 22434] [client 20.27.218.116:11161] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWYp23LEE_SEuOZ0WBTeuQAAAIM"]
[Tue Jan 13 19:17:47.808308 2026] [:error] [pid 27597:tid 27623] [client 20.27.218.116:32386] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aWYp2z8Db8v8HoJ3n4DtRgAAABg"]
[Tue Jan 13 19:17:48.154432 2026] [:error] [pid 22485:tid 22511] [client 20.27.218.116:11206] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aWYp3BzzbghmKib9ie_lAgAAAZg"]
[Tue Jan 13 19:17:48.445390 2026] [:error] [pid 22426:tid 22466] [client 20.27.218.116:11139] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aWYp3Ny1Q5toryYTHgOnFgAAAMg"]
[Tue Jan 13 19:17:48.688673 2026] [:error] [pid 49677:tid 49686] [client 20.27.218.116:32442] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aWYp3PiKiDrYd_02VZoa9wAAAEU"]
[Tue Jan 13 19:17:49.013785 2026] [:error] [pid 22425:tid 22455] [client 20.27.218.116:11248] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aWYp3XLEE_SEuOZ0WBTeugAAAJg"]
[Tue Jan 13 19:17:49.262681 2026] [:error] [pid 22425:tid 22446] [client 20.27.218.116:32431] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aWYp3XLEE_SEuOZ0WBTeuwAAAI8"]
[Tue Jan 13 19:17:49.505530 2026] [:error] [pid 33727:tid 33748] [client 20.27.218.116:11154] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aWYp3aHONsygso2w0OPK8gAAARM"]
[Tue Jan 13 19:17:49.798023 2026] [:error] [pid 22389:tid 22403] [client 20.27.218.116:32421] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aWYp3SLIB_8b411qalJA9wAAAUw"]
[Tue Jan 13 19:17:50.123356 2026] [:error] [pid 27597:tid 27599] [client 20.27.218.116:11202] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "aWYp3j8Db8v8HoJ3n4DtSAAAAAA"]
[Tue Jan 13 19:17:50.444215 2026] [:error] [pid 22389:tid 22415] [client 20.27.218.116:32438] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aWYp3iLIB_8b411qalJA-AAAAVg"]
[Tue Jan 13 19:17:50.762345 2026] [:error] [pid 22485:tid 22494] [client 20.27.218.116:11178] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aWYp3hzzbghmKib9ie_lBgAAAYc"]
[Tue Jan 13 19:17:51.018658 2026] [:error] [pid 27597:tid 27622] [client 20.27.218.116:11041] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aWYp3z8Db8v8HoJ3n4DtSQAAABc"]
[Tue Jan 13 19:17:51.297536 2026] [:error] [pid 22389:tid 22398] [client 20.27.218.116:32444] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/406.php"] [unique_id "aWYp3yLIB_8b411qalJA-QAAAUc"]
[Tue Jan 13 19:17:51.579319 2026] [:error] [pid 22425:tid 22454] [client 20.27.218.116:11215] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWYp33LEE_SEuOZ0WBTevQAAAJc"]
[Tue Jan 13 19:17:51.911129 2026] [:error] [pid 22425:tid 22445] [client 20.27.218.116:32420] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWYp33LEE_SEuOZ0WBTevgAAAI4"]
[Tue Jan 13 19:17:52.224147 2026] [:error] [pid 22426:tid 22470] [client 20.27.218.116:11250] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWYp4Ny1Q5toryYTHgOnGAAAAMw"]
[Tue Jan 13 19:17:52.627722 2026] [:error] [pid 22485:tid 22499] [client 20.27.218.116:32403] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r.php"] [unique_id "aWYp4BzzbghmKib9ie_lBwAAAYw"]
[Tue Jan 13 19:17:52.886302 2026] [:error] [pid 22485:tid 22504] [client 20.27.218.116:32409] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aWYp4BzzbghmKib9ie_lCAAAAZE"]
[Tue Jan 13 19:17:53.163203 2026] [:error] [pid 22485:tid 22498] [client 20.27.218.116:11100] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aWYp4RzzbghmKib9ie_lCQAAAYs"]
[Tue Jan 13 19:17:53.421652 2026] [:error] [pid 22485:tid 22508] [client 20.27.218.116:11087] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aWYp4RzzbghmKib9ie_lCgAAAZU"]
[Tue Jan 13 19:17:53.784739 2026] [:error] [pid 22426:tid 22464] [client 20.27.218.116:11136] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aWYp4dy1Q5toryYTHgOnGgAAAMY"]
[Tue Jan 13 19:17:54.095800 2026] [:error] [pid 22425:tid 22436] [client 20.27.218.116:11234] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aWYp4nLEE_SEuOZ0WBTewQAAAIU"]
[Tue Jan 13 19:17:54.350721 2026] [:error] [pid 33727:tid 33733] [client 20.27.218.116:11187] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aWYp4qHONsygso2w0OPK9QAAAQQ"]
[Tue Jan 13 19:17:54.791836 2026] [:error] [pid 33727:tid 33731] [client 20.27.218.116:32470] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aWYp4qHONsygso2w0OPK-AAAAQI"]
[Tue Jan 13 19:17:55.138749 2026] [:error] [pid 27597:tid 27604] [client 20.27.218.116:11089] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aWYp4z8Db8v8HoJ3n4DtSgAAAAU"]
[Tue Jan 13 19:17:55.396095 2026] [:error] [pid 49677:tid 49696] [client 20.27.218.116:11156] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aWYp4_iKiDrYd_02VZoa-AAAAE8"]
[Tue Jan 13 19:17:55.846498 2026] [:error] [pid 22425:tid 22439] [client 20.27.218.116:11167] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aWYp43LEE_SEuOZ0WBTewwAAAIg"]
[Tue Jan 13 19:17:56.350423 2026] [:error] [pid 27597:tid 27612] [client 20.27.218.116:11018] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aWYp5D8Db8v8HoJ3n4DtTAAAAA0"]
[Tue Jan 13 19:17:56.799745 2026] [:error] [pid 33727:tid 33746] [client 20.27.218.116:11244] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aWYp5KHONsygso2w0OPK-wAAARE"]
[Tue Jan 13 19:17:57.352507 2026] [:error] [pid 33727:tid 33752] [client 20.27.218.116:32479] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aWYp5aHONsygso2w0OPK_QAAARc"]
[Tue Jan 13 19:17:57.813807 2026] [:error] [pid 33727:tid 33732] [client 20.27.218.116:11255] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aWYp5aHONsygso2w0OPK_gAAAQM"]
[Tue Jan 13 19:17:58.164896 2026] [:error] [pid 33727:tid 33735] [client 20.27.218.116:11252] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aWYp5qHONsygso2w0OPK_wAAAQY"]
[Tue Jan 13 19:17:58.532621 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:11034] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aWYp5qHONsygso2w0OPLAgAAARA"]
[Tue Jan 13 19:17:58.994893 2026] [:error] [pid 33727:tid 33736] [client 20.27.218.116:11086] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWYp5qHONsygso2w0OPLAwAAAQc"]
[Tue Jan 13 19:17:59.547033 2026] [:error] [pid 22485:tid 22490] [client 20.27.218.116:32423] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWYp5xzzbghmKib9ie_lDwAAAYM"]
[Tue Jan 13 19:18:00.087378 2026] [:error] [pid 22485:tid 22491] [client 20.27.218.116:11242] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWYp6BzzbghmKib9ie_lEAAAAYQ"]
[Tue Jan 13 19:18:00.362259 2026] [:error] [pid 27597:tid 27617] [client 20.27.218.116:11082] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aWYp6D8Db8v8HoJ3n4DtTQAAABI"]
[Tue Jan 13 19:18:00.686431 2026] [:error] [pid 49677:tid 49683] [client 20.27.218.116:11235] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aWYp6PiKiDrYd_02VZoa-wAAAEI"]
[Tue Jan 13 19:18:00.977220 2026] [:error] [pid 22425:tid 22442] [client 20.27.218.116:32391] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aWYp6HLEE_SEuOZ0WBTexgAAAIs"]
[Tue Jan 13 19:18:01.271862 2026] [:error] [pid 22485:tid 22509] [client 20.27.218.116:11124] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aWYp6RzzbghmKib9ie_lEgAAAZY"]
[Tue Jan 13 19:18:01.746606 2026] [:error] [pid 22426:tid 22463] [client 20.27.218.116:32422] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aWYp6dy1Q5toryYTHgOnGwAAAMU"]
[Tue Jan 13 19:18:02.105264 2026] [:error] [pid 22485:tid 22493] [client 20.27.218.116:11191] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aWYp6hzzbghmKib9ie_lEwAAAYY"]
[Tue Jan 13 19:18:02.393487 2026] [:error] [pid 22426:tid 22460] [client 20.27.218.116:11253] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aWYp6ty1Q5toryYTHgOnHAAAAMI"]
[Tue Jan 13 19:18:02.823372 2026] [:error] [pid 27597:tid 27621] [client 20.27.218.116:11111] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aWYp6j8Db8v8HoJ3n4DtTgAAABY"]
[Tue Jan 13 19:18:03.188986 2026] [:error] [pid 22425:tid 22452] [client 20.27.218.116:11245] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aWYp63LEE_SEuOZ0WBTeyQAAAJU"]
[Tue Jan 13 19:18:03.477620 2026] [:error] [pid 49677:tid 49697] [client 20.27.218.116:11258] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp6_iKiDrYd_02VZoa_AAAAFA"]
[Tue Jan 13 19:18:03.870771 2026] [:error] [pid 22485:tid 22500] [client 20.27.218.116:32396] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp6xzzbghmKib9ie_lFQAAAY0"]
[Tue Jan 13 19:18:04.149426 2026] [:error] [pid 33727:tid 33750] [client 20.27.218.116:32450] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp7KHONsygso2w0OPLBwAAARU"]
[Tue Jan 13 19:18:04.497434 2026] [:error] [pid 33727:tid 33742] [client 20.27.218.116:11251] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp7KHONsygso2w0OPLCAAAAQ0"]
[Tue Jan 13 19:18:04.984882 2026] [:error] [pid 22389:tid 22405] [client 20.27.218.116:11185] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aWYp7CLIB_8b411qalJA-gAAAU4"]
[Tue Jan 13 19:18:05.352612 2026] [:error] [pid 22389:tid 22393] [client 20.27.218.116:11246] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aWYp7SLIB_8b411qalJA_AAAAUI"]
[Tue Jan 13 19:18:05.671805 2026] [:error] [pid 33727:tid 33747] [client 20.27.218.116:11226] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aWYp7aHONsygso2w0OPLCwAAARI"]
[Tue Jan 13 19:18:05.929777 2026] [:error] [pid 22426:tid 22468] [client 20.27.218.116:11194] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "aWYp7dy1Q5toryYTHgOnHQAAAMo"]
[Tue Jan 13 19:18:06.564487 2026] [:error] [pid 22425:tid 22432] [client 20.27.218.116:32471] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aWYp7nLEE_SEuOZ0WBTeygAAAIE"]
[Tue Jan 13 19:18:06.868305 2026] [:error] [pid 27597:tid 27618] [client 20.27.218.116:11163] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aWYp7j8Db8v8HoJ3n4DtTwAAABM"]
[Tue Jan 13 19:18:07.225506 2026] [:error] [pid 49677:tid 49703] [client 20.27.218.116:32436] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aWYp7_iKiDrYd_02VZoa_QAAAFY"]
[Tue Jan 13 19:18:07.485583 2026] [:error] [pid 33727:tid 33746] [client 20.27.218.116:11200] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk2.php"] [unique_id "aWYp76HONsygso2w0OPLDgAAARE"]
[Tue Jan 13 19:18:07.831989 2026] [:error] [pid 49677:tid 49693] [client 20.27.218.116:11261] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWYp7_iKiDrYd_02VZoa_gAAAEw"]
[Tue Jan 13 19:18:08.530974 2026] [:error] [pid 33727:tid 33752] [client 20.27.218.116:11166] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWYp8KHONsygso2w0OPLEAAAARc"]
[Tue Jan 13 19:18:08.798667 2026] [:error] [pid 22425:tid 22434] [client 20.27.218.116:11159] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWYp8HLEE_SEuOZ0WBTezAAAAIM"]
[Tue Jan 13 19:18:09.357894 2026] [:error] [pid 49677:tid 49685] [client 20.27.218.116:32424] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aWYp8fiKiDrYd_02VZobAAAAAEQ"]
[Tue Jan 13 19:18:09.831437 2026] [:error] [pid 22389:tid 22395] [client 20.27.218.116:11078] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aWYp8SLIB_8b411qalJA_wAAAUQ"]
[Tue Jan 13 19:18:10.165131 2026] [:error] [pid 22389:tid 22412] [client 20.27.218.116:11164] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aWYp8iLIB_8b411qalJBAAAAAVU"]
[Tue Jan 13 19:18:10.561116 2026] [:error] [pid 22389:tid 22406] [client 20.27.218.116:32453] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aWYp8iLIB_8b411qalJBAgAAAU8"]
[Tue Jan 13 19:18:10.895693 2026] [:error] [pid 22425:tid 22441] [client 20.27.218.116:11181] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aWYp8nLEE_SEuOZ0WBTezgAAAIo"]
[Tue Jan 13 19:18:11.169230 2026] [:error] [pid 22389:tid 22414] [client 20.27.218.116:11085] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aespa.php"] [unique_id "aWYp8yLIB_8b411qalJBBAAAAVc"]
[Tue Jan 13 19:18:11.519725 2026] [:error] [pid 22389:tid 22404] [client 20.27.218.116:11224] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aespa.php"] [unique_id "aWYp8yLIB_8b411qalJBBQAAAU0"]
[Tue Jan 13 19:18:11.919963 2026] [:error] [pid 22389:tid 22391] [client 20.27.218.116:11193] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aespa.php"] [unique_id "aWYp8yLIB_8b411qalJBBgAAAUA"]
[Tue Jan 13 19:18:12.306030 2026] [:error] [pid 22389:tid 22403] [client 20.27.218.116:11173] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aespa.php"] [unique_id "aWYp9CLIB_8b411qalJBBwAAAUw"]
[Tue Jan 13 19:18:12.730623 2026] [:error] [pid 33727:tid 33738] [client 20.27.218.116:11095] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aWYp9KHONsygso2w0OPLFAAAAQk"]
[Tue Jan 13 19:18:13.122379 2026] [:error] [pid 22485:tid 22487] [client 20.27.218.116:11090] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aWYp9RzzbghmKib9ie_lFgAAAYA"]
[Tue Jan 13 19:18:13.455831 2026] [:error] [pid 22485:tid 22510] [client 20.27.218.116:11146] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aWYp9RzzbghmKib9ie_lGAAAAZc"]
[Tue Jan 13 19:18:13.738046 2026] [:error] [pid 22425:tid 22454] [client 20.27.218.116:11208] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aWYp9XLEE_SEuOZ0WBTezwAAAJc"]
[Tue Jan 13 19:18:14.012277 2026] [:error] [pid 33727:tid 33736] [client 20.27.218.116:32498] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp9qHONsygso2w0OPLFQAAAQc"]
[Tue Jan 13 19:18:14.434404 2026] [:error] [pid 22426:tid 22461] [client 20.27.218.116:11197] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp9ty1Q5toryYTHgOnIAAAAMM"]
[Tue Jan 13 19:18:14.885933 2026] [:error] [pid 22389:tid 22408] [client 20.27.218.116:11157] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp9iLIB_8b411qalJBCAAAAVE"]
[Tue Jan 13 19:18:15.337034 2026] [:error] [pid 22389:tid 22407] [client 20.27.218.116:11256] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aWYp9yLIB_8b411qalJBCQAAAVA"]
[Tue Jan 13 19:18:15.637454 2026] [:error] [pid 27597:tid 27614] [client 20.27.218.116:11102] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aWYp9z8Db8v8HoJ3n4DtUQAAAA8"]
[Tue Jan 13 19:18:15.957706 2026] [:error] [pid 27597:tid 27608] [client 20.27.218.116:32488] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aWYp9z8Db8v8HoJ3n4DtUgAAAAk"]
[Tue Jan 13 19:18:16.306420 2026] [:error] [pid 22485:tid 22496] [client 20.27.218.116:11177] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aWYp-BzzbghmKib9ie_lGQAAAYk"]
[Tue Jan 13 19:18:16.650444 2026] [:error] [pid 27597:tid 27607] [client 20.27.218.116:11142] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aWYp-D8Db8v8HoJ3n4DtVAAAAAg"]
[Tue Jan 13 19:18:16.925847 2026] [:error] [pid 27597:tid 27601] [client 20.27.218.116:11188] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aWYp-D8Db8v8HoJ3n4DtVwAAAAI"]
[Tue Jan 13 19:18:17.247164 2026] [:error] [pid 27597:tid 27623] [client 20.27.218.116:11075] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aWYp-T8Db8v8HoJ3n4DtWAAAABg"]
[Tue Jan 13 19:18:17.625425 2026] [:error] [pid 27597:tid 27615] [client 20.27.218.116:11038] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aWYp-T8Db8v8HoJ3n4DtWQAAABA"]
[Tue Jan 13 19:18:18.143716 2026] [:error] [pid 22485:tid 22489] [client 20.27.218.116:11162] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aWYp-hzzbghmKib9ie_lGwAAAYI"]
[Tue Jan 13 19:18:18.433431 2026] [:error] [pid 22425:tid 22453] [client 20.27.218.116:11241] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aWYp-nLEE_SEuOZ0WBTe0AAAAJY"]
[Tue Jan 13 19:18:18.716964 2026] [:error] [pid 33727:tid 33750] [client 20.27.218.116:32398] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aWYp-qHONsygso2w0OPLGwAAARU"]
[Tue Jan 13 19:18:19.010613 2026] [:error] [pid 22485:tid 22499] [client 20.27.218.116:11169] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aWYp-xzzbghmKib9ie_lHAAAAYw"]
[Tue Jan 13 19:18:19.406942 2026] [:error] [pid 33727:tid 33742] [client 20.27.218.116:11092] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aWYp-6HONsygso2w0OPLHAAAAQ0"]
[Tue Jan 13 19:18:19.768737 2026] [:error] [pid 33727:tid 33731] [client 20.27.218.116:11158] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWYp-6HONsygso2w0OPLHQAAAQI"]
[Tue Jan 13 19:18:20.065290 2026] [:error] [pid 27597:tid 27599] [client 20.27.218.116:11239] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWYp_D8Db8v8HoJ3n4DtXAAAAAA"]
[Tue Jan 13 19:18:20.504799 2026] [:error] [pid 22485:tid 22498] [client 20.27.218.116:11025] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWYp_BzzbghmKib9ie_lHgAAAYs"]
[Tue Jan 13 19:18:20.812713 2026] [:error] [pid 22485:tid 22497] [client 20.27.218.116:11094] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aWYp_BzzbghmKib9ie_lHwAAAYo"]
[Tue Jan 13 19:18:21.170750 2026] [:error] [pid 33727:tid 33744] [client 20.27.218.116:11138] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aWYp_aHONsygso2w0OPLIAAAAQ8"]
[Tue Jan 13 19:18:21.574874 2026] [:error] [pid 22425:tid 22445] [client 20.27.218.116:11135] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aWYp_XLEE_SEuOZ0WBTe0gAAAI4"]
[Tue Jan 13 19:18:21.908880 2026] [:error] [pid 33727:tid 33735] [client 20.27.218.116:11076] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aWYp_aHONsygso2w0OPLJAAAAQY"]
[Tue Jan 13 19:18:22.294816 2026] [:error] [pid 27597:tid 27617] [client 20.27.218.116:11104] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aWYp_j8Db8v8HoJ3n4DtYgAAABI"]
[Tue Jan 13 19:18:22.576492 2026] [:error] [pid 22425:tid 22442] [client 20.27.218.116:11259] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWYp_nLEE_SEuOZ0WBTe1wAAAIs"]
[Tue Jan 13 19:18:22.937889 2026] [:error] [pid 22425:tid 22444] [client 20.27.218.116:32425] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWYp_nLEE_SEuOZ0WBTe2QAAAI0"]
[Tue Jan 13 19:18:23.230811 2026] [:error] [pid 22389:tid 22413] [client 20.27.218.116:11189] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWYp_yLIB_8b411qalJBCgAAAVY"]
[Tue Jan 13 19:18:23.541032 2026] [:error] [pid 49677:tid 49695] [client 20.27.218.116:11115] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aWYp__iKiDrYd_02VZobAgAAAE4"]
[Tue Jan 13 19:18:23.895622 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:11190] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aWYp_6HONsygso2w0OPLJQAAARA"]
[Tue Jan 13 19:18:24.400880 2026] [:error] [pid 49677:tid 49682] [client 20.27.218.116:11097] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aWYqAPiKiDrYd_02VZobAwAAAEE"]
[Tue Jan 13 19:18:24.772608 2026] [:error] [pid 33727:tid 33740] [client 20.27.218.116:11232] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aWYqAKHONsygso2w0OPLKQAAAQs"]
[Tue Jan 13 19:18:25.134845 2026] [:error] [pid 49677:tid 49702] [client 20.27.218.116:11262] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "aWYqAfiKiDrYd_02VZobBAAAAFU"]
[Tue Jan 13 19:18:25.433509 2026] [:error] [pid 49677:tid 49694] [client 20.27.218.116:11125] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWYqAfiKiDrYd_02VZobBQAAAE0"]
[Tue Jan 13 19:18:25.832320 2026] [:error] [pid 27597:tid 27611] [client 20.27.218.116:11172] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWYqAT8Db8v8HoJ3n4DtZgAAAAw"]
[Tue Jan 13 19:18:26.355788 2026] [:error] [pid 22389:tid 22401] [client 20.27.218.116:11099] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWYqAiLIB_8b411qalJBDgAAAUo"]
[Tue Jan 13 19:18:26.712303 2026] [:error] [pid 33727:tid 33750] [client 20.27.218.116:11165] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aWYqAqHONsygso2w0OPLLAAAARU"]
[Tue Jan 13 19:18:27.067045 2026] [:error] [pid 27597:tid 27600] [client 20.27.218.116:11179] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWYqAz8Db8v8HoJ3n4DtaAAAAAE"]
[Tue Jan 13 19:18:27.438666 2026] [:error] [pid 22425:tid 22450] [client 20.27.218.116:11083] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWYqA3LEE_SEuOZ0WBTe3QAAAJM"]
[Tue Jan 13 19:18:27.847665 2026] [:error] [pid 22425:tid 22455] [client 20.27.218.116:11192] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWYqA3LEE_SEuOZ0WBTe3gAAAJg"]
[Tue Jan 13 19:18:28.182816 2026] [:error] [pid 27597:tid 27616] [client 20.27.218.116:11032] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aWYqBD8Db8v8HoJ3n4DtawAAABE"]
[Tue Jan 13 19:18:28.511229 2026] [:error] [pid 33727:tid 33746] [client 20.27.218.116:11129] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oivcl.php"] [unique_id "aWYqBKHONsygso2w0OPLLwAAARE"]
[Tue Jan 13 19:18:28.938376 2026] [:error] [pid 22425:tid 22445] [client 20.27.218.116:11023] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oivcl.php"] [unique_id "aWYqBHLEE_SEuOZ0WBTe4AAAAI4"]
[Tue Jan 13 19:18:29.235768 2026] [:error] [pid 33727:tid 33751] [client 20.27.218.116:11219] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oivcl.php"] [unique_id "aWYqBaHONsygso2w0OPLMQAAARY"]
[Tue Jan 13 19:18:29.614465 2026] [:error] [pid 33727:tid 33730] [client 20.27.218.116:11182] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oivcl.php"] [unique_id "aWYqBaHONsygso2w0OPLMgAAAQE"]
[Tue Jan 13 19:18:29.978081 2026] [:error] [pid 33727:tid 33739] [client 20.27.218.116:11174] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwwha.php"] [unique_id "aWYqBaHONsygso2w0OPLNAAAAQo"]
[Tue Jan 13 19:18:30.371509 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:11073] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwwha.php"] [unique_id "aWYqBqHONsygso2w0OPLNQAAARA"]
[Tue Jan 13 19:18:30.953824 2026] [:error] [pid 33727:tid 33740] [client 20.27.218.116:11088] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwwha.php"] [unique_id "aWYqBqHONsygso2w0OPLOgAAAQs"]
[Tue Jan 13 19:18:31.337508 2026] [:error] [pid 49677:tid 49686] [client 20.27.218.116:11016] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwwha.php"] [unique_id "aWYqB_iKiDrYd_02VZobBgAAAEU"]
[Tue Jan 13 19:18:31.594784 2026] [:error] [pid 49677:tid 49689] [client 20.27.218.116:11155] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvcpa.php"] [unique_id "aWYqB_iKiDrYd_02VZobBwAAAEg"]
[Tue Jan 13 19:18:31.913274 2026] [:error] [pid 33727:tid 33729] [client 20.27.218.116:32443] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvcpa.php"] [unique_id "aWYqB6HONsygso2w0OPLQgAAAQA"]
[Tue Jan 13 19:18:32.213993 2026] [:error] [pid 33727:tid 33743] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/jvcpa.php
[Tue Jan 13 19:18:32.339621 2026] [:error] [pid 33727:tid 33744] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/lddxs.php
[Tue Jan 13 19:18:32.470189 2026] [:error] [pid 33727:tid 33739] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Tue Jan 13 19:18:32.593199 2026] [:error] [pid 33727:tid 33735] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-miiss.php.php
[Tue Jan 13 19:18:32.715655 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Tue Jan 13 19:18:32.838837 2026] [:error] [pid 33727:tid 33738] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Jan 13 19:18:33.115985 2026] [:error] [pid 33727:tid 33749] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Tue Jan 13 19:18:33.244087 2026] [:error] [pid 33727:tid 33750] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Tue Jan 13 19:18:33.367595 2026] [:error] [pid 33727:tid 33742] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/w-1.php
[Tue Jan 13 19:18:33.578869 2026] [:error] [pid 33727:tid 33744] [client 20.27.218.116:11118] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Jan 13 19:18:33.736865 2026] [:error] [pid 33727:tid 33739] [client 20.27.218.116:11118] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aWYqCaHONsygso2w0OPLUwAAAQo"]
[Tue Jan 13 19:18:34.025777 2026] [:error] [pid 33727:tid 33737] [client 20.27.218.116:11024] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aWYqCqHONsygso2w0OPLWgAAAQg"]
[Tue Jan 13 19:18:34.319213 2026] [:error] [pid 22425:tid 22448] [client 20.27.218.116:11093] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aWYqCnLEE_SEuOZ0WBTe7gAAAJE"]
[Tue Jan 13 19:18:34.598421 2026] [:error] [pid 22425:tid 22443] [client 20.27.218.116:11130] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aWYqCnLEE_SEuOZ0WBTe7wAAAIw"]
[Tue Jan 13 19:18:34.916882 2026] [:error] [pid 33727:tid 33743] [client 20.27.218.116:11141] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aWYqCqHONsygso2w0OPLXAAAAQ4"]
[Tue Jan 13 19:18:35.414815 2026] [:error] [pid 49677:tid 49704] [client 20.27.218.116:11079] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aWYqC_iKiDrYd_02VZobFgAAAFc"]
[Tue Jan 13 19:18:35.662662 2026] [:error] [pid 22425:tid 22452] [client 20.27.218.116:11134] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aWYqC3LEE_SEuOZ0WBTe-AAAAJU"]
[Tue Jan 13 19:18:36.034122 2026] [:error] [pid 49677:tid 49705] [client 20.27.218.116:11122] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aWYqDPiKiDrYd_02VZobFwAAAFg"]
[Tue Jan 13 19:18:36.572672 2026] [:error] [pid 33727:tid 33742] [client 20.27.218.116:11072] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aWYqDKHONsygso2w0OPLaQAAAQ0"]
[Tue Jan 13 19:18:37.021097 2026] [:error] [pid 22425:tid 22450] [client 20.27.218.116:11042] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aWYqDXLEE_SEuOZ0WBTe-QAAAJM"]
[Tue Jan 13 19:18:37.336475 2026] [:error] [pid 27597:tid 27603] [client 20.27.218.116:11013] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aWYqDT8Db8v8HoJ3n4DtegAAAAQ"]
[Tue Jan 13 19:18:37.815671 2026] [:error] [pid 33727:tid 33729] [client 20.27.218.116:11040] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aWYqDaHONsygso2w0OPLbAAAAQA"]
[Tue Jan 13 19:18:38.216520 2026] [:error] [pid 27597:tid 27612] [client 20.27.218.116:11199] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-widgets.php"] [unique_id "aWYqDj8Db8v8HoJ3n4DtewAAAA0"]
[Tue Jan 13 19:18:38.696801 2026] [:error] [pid 27597:tid 27619] [client 20.27.218.116:11107] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-widgets.php"] [unique_id "aWYqDj8Db8v8HoJ3n4DtfAAAABQ"]
[Tue Jan 13 19:18:39.337646 2026] [:error] [pid 22485:tid 22511] [client 20.27.218.116:11027] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-widgets.php"] [unique_id "aWYqDxzzbghmKib9ie_lOQAAAZg"]
[Tue Jan 13 19:18:39.741464 2026] [:error] [pid 22425:tid 22445] [client 20.27.218.116:11031] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-widgets.php"] [unique_id "aWYqD3LEE_SEuOZ0WBTe_wAAAI4"]
[Tue Jan 13 19:18:40.065955 2026] [:error] [pid 22426:tid 22472] [client 20.27.218.116:11068] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aWYqENy1Q5toryYTHgOnKwAAAM4"]
[Tue Jan 13 19:18:40.609627 2026] [:error] [pid 22389:tid 22399] [client 20.27.218.116:11060] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aWYqECLIB_8b411qalJBJAAAAUg"]
[Tue Jan 13 19:18:41.141966 2026] [:error] [pid 22389:tid 22412] [client 20.27.218.116:11176] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aWYqESLIB_8b411qalJBJQAAAVU"]
[Tue Jan 13 19:18:41.699759 2026] [:error] [pid 22389:tid 22394] [client 20.27.218.116:11011] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpupex.php"] [unique_id "aWYqESLIB_8b411qalJBJgAAAUM"]
[Tue Jan 13 19:18:42.530960 2026] [:error] [pid 22485:tid 22487] [client 20.27.218.116:11055] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aWYqEhzzbghmKib9ie_lPQAAAYA"]
[Tue Jan 13 19:18:43.002419 2026] [:error] [pid 22485:tid 22494] [client 20.27.218.116:11114] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aWYqExzzbghmKib9ie_lPwAAAYc"]
[Tue Jan 13 19:18:43.445363 2026] [:error] [pid 49677:tid 49702] [client 20.27.218.116:11036] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aWYqE_iKiDrYd_02VZobHAAAAFU"]
[Tue Jan 13 19:18:43.740939 2026] [:error] [pid 22389:tid 22404] [client 20.27.218.116:11106] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aWYqEyLIB_8b411qalJBKQAAAU0"]
[Tue Jan 13 19:18:44.383162 2026] [:error] [pid 22425:tid 22433] [client 20.27.218.116:11008] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aWYqFHLEE_SEuOZ0WBTfBAAAAII"]
[Tue Jan 13 19:18:44.648048 2026] [:error] [pid 49677:tid 49701] [client 20.27.218.116:11183] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aWYqFPiKiDrYd_02VZobHgAAAFQ"]
[Tue Jan 13 19:18:44.929004 2026] [:error] [pid 22425:tid 22440] [client 20.27.218.116:32466] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aWYqFHLEE_SEuOZ0WBTfBQAAAIk"]
[Tue Jan 13 19:18:45.247193 2026] [:error] [pid 22426:tid 22476] [client 20.27.218.116:11175] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aWYqFdy1Q5toryYTHgOnLQAAANI"]
[Tue Jan 13 19:18:45.666397 2026] [:error] [pid 22425:tid 22449] [client 20.27.218.116:11052] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aWYqFXLEE_SEuOZ0WBTfBgAAAJI"]
[Tue Jan 13 19:18:45.972417 2026] [:error] [pid 22425:tid 22441] [client 20.27.218.116:11009] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aWYqFXLEE_SEuOZ0WBTfBwAAAIo"]
[Tue Jan 13 19:18:46.396599 2026] [:error] [pid 22426:tid 22480] [client 20.27.218.116:10955] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aWYqFty1Q5toryYTHgOnLgAAANY"]
[Tue Jan 13 19:18:46.704068 2026] [:error] [pid 22425:tid 22450] [client 20.27.218.116:11145] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aWYqFnLEE_SEuOZ0WBTfCQAAAJM"]
[Tue Jan 13 19:18:47.067198 2026] [:error] [pid 22389:tid 22413] [client 20.27.218.116:11133] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aWYqFyLIB_8b411qalJBKwAAAVY"]
[Tue Jan 13 19:18:47.406092 2026] [:error] [pid 27597:tid 27618] [client 20.27.218.116:11045] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aWYqFz8Db8v8HoJ3n4DtfwAAABM"]
[Tue Jan 13 19:18:47.781984 2026] [:error] [pid 49677:tid 49692] [client 20.27.218.116:11077] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aWYqF_iKiDrYd_02VZobIwAAAEs"]
[Tue Jan 13 19:18:48.080402 2026] [:error] [pid 22485:tid 22495] [client 20.27.218.116:11148] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "aWYqGBzzbghmKib9ie_lQQAAAYg"]
[Tue Jan 13 19:18:48.410087 2026] [:error] [pid 22425:tid 22438] [client 20.27.218.116:11014] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aWYqGHLEE_SEuOZ0WBTfDAAAAIc"]
[Tue Jan 13 19:18:48.741814 2026] [:error] [pid 27597:tid 27620] [client 20.27.218.116:11029] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aWYqGD8Db8v8HoJ3n4DtgQAAABU"]
[Tue Jan 13 19:18:49.049575 2026] [:error] [pid 27597:tid 27611] [client 20.27.218.116:11049] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aWYqGT8Db8v8HoJ3n4DtggAAAAw"]
[Tue Jan 13 19:18:49.355028 2026] [:error] [pid 22389:tid 22405] [client 20.27.218.116:10973] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aWYqGSLIB_8b411qalJBLQAAAU4"]
[Tue Jan 13 19:18:49.683612 2026] [:error] [pid 22425:tid 22443] [client 20.27.218.116:11066] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aWYqGXLEE_SEuOZ0WBTfDQAAAIw"]
[Tue Jan 13 19:18:50.013834 2026] [:error] [pid 22426:tid 22474] [client 20.27.218.116:11184] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aWYqGty1Q5toryYTHgOnLwAAANA"]
[Tue Jan 13 19:18:50.367229 2026] [:error] [pid 49677:tid 49699] [client 20.27.218.116:11081] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aWYqGviKiDrYd_02VZobJgAAAFI"]
[Tue Jan 13 19:18:50.908498 2026] [:error] [pid 22426:tid 22478] [client 20.27.218.116:11120] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aWYqGty1Q5toryYTHgOnMQAAANQ"]
[Tue Jan 13 19:18:51.630154 2026] [:error] [pid 49677:tid 49685] [client 20.27.218.116:11147] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aWYqG_iKiDrYd_02VZobKAAAAEQ"]
[Tue Jan 13 19:18:52.115409 2026] [:error] [pid 22426:tid 22462] [client 20.27.218.116:10950] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aWYqHNy1Q5toryYTHgOnMgAAAMQ"]
[Tue Jan 13 19:18:52.422363 2026] [:error] [pid 49677:tid 49698] [client 20.27.218.116:11144] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aWYqHPiKiDrYd_02VZobKwAAAFE"]
[Tue Jan 13 19:18:52.854351 2026] [:error] [pid 49677:tid 49695] [client 20.27.218.116:11057] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aWYqHPiKiDrYd_02VZobLgAAAE4"]
[Tue Jan 13 19:18:53.635490 2026] [:error] [pid 22485:tid 22503] [client 20.27.218.116:10991] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aWYqHRzzbghmKib9ie_lQgAAAZA"]
[Tue Jan 13 19:18:54.370061 2026] [:error] [pid 22389:tid 22393] [client 20.27.218.116:11113] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aWYqHiLIB_8b411qalJBMQAAAUI"]
[Tue Jan 13 19:18:54.684383 2026] [:error] [pid 33727:tid 33733] [client 20.27.218.116:11117] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aWYqHqHONsygso2w0OPLbQAAAQQ"]
[Tue Jan 13 19:18:55.052739 2026] [:error] [pid 22389:tid 22394] [client 20.27.218.116:11108] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/"] [unique_id "aWYqHyLIB_8b411qalJBMwAAAUM"]
[Tue Jan 13 19:18:55.580053 2026] [:error] [pid 22389:tid 22400] [client 20.27.218.116:11103] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aWYqHyLIB_8b411qalJBNAAAAUk"]
[Tue Jan 13 19:18:56.031703 2026] [:error] [pid 27597:tid 27609] [client 20.27.218.116:11263] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aWYqID8Db8v8HoJ3n4DthQAAAAo"]
[Tue Jan 13 19:18:56.441318 2026] [:error] [pid 22426:tid 22469] [client 20.27.218.116:11028] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aWYqINy1Q5toryYTHgOnNQAAAMs"]
[Tue Jan 13 19:18:56.853686 2026] [:error] [pid 22485:tid 22488] [client 20.27.218.116:11168] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cache/"] [unique_id "aWYqIBzzbghmKib9ie_lRQAAAYE"]
[Tue Jan 13 19:18:57.272072 2026] [:error] [pid 49677:tid 49686] [client 20.27.218.116:11196] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWYqIfiKiDrYd_02VZobNgAAAEU"]
[Tue Jan 13 19:18:57.701535 2026] [:error] [pid 22426:tid 22468] [client 20.27.218.116:32504] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWYqIdy1Q5toryYTHgOnNgAAAMo"]
[Tue Jan 13 19:18:58.033868 2026] [:error] [pid 33727:tid 33745] [client 20.27.218.116:11021] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWYqIqHONsygso2w0OPLbgAAARA"]
[Tue Jan 13 19:18:58.379310 2026] [:error] [pid 33727:tid 33753] [client 20.27.218.116:10975] [client 20.27.218.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aWYqIqHONsygso2w0OPLbwAAARg"]
[Tue Jan 13 23:06:40.162358 2026] [:error] [pid 63843:tid 63886] [client 43.130.53.252:55284] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWZfgIqxEwB7D1-DxXe2NwAAAIw"]
[Wed Jan 14 00:59:59.703929 2026] [:error] [pid 25809:tid 25826] [client 42.105.225.17:47559] [client 42.105.225.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 42.105.225.17, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWZ6D49SDqNJ9R9VfZD1IwAAAE8"]
[Wed Jan 14 00:59:59.713057 2026] [:error] [pid 25809:tid 25826] [client 42.105.225.17:47559] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 14 01:12:06.393610 2026] [:error] [pid 63842:tid 63864] [client 140.245.117.185:56104] [client 140.245.117.185] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWZ85m0zPTD54ET7u1kl_QAAAVI"]
[Wed Jan 14 01:12:06.782609 2026] [:error] [pid 63843:tid 63890] [client 140.245.117.185:64988] [client 140.245.117.185] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.245.117.185, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWZ85oqxEwB7D1-DxXfcVQAAAJA"]
[Wed Jan 14 01:12:06.798954 2026] [:error] [pid 63843:tid 63890] [client 140.245.117.185:64988] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Jan 14 01:12:08.244914 2026] [:error] [pid 63842:tid 63864] [client 140.245.117.185:61786] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user/login"] [unique_id "aWZ86G0zPTD54ET7u1kmPAAAAVI"]
[Wed Jan 14 01:12:08.675638 2026] [:error] [pid 63931:tid 63942] [client 140.245.117.185:65062] [client 140.245.117.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin"] [unique_id "aWZ86NVnG0cQj3cwmW9DiQAAAAk"]
[Wed Jan 14 05:18:28.075749 2026] [:error] [pid 58899:tid 58907] [client 20.187.120.186:6774] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conter.php
[Wed Jan 14 05:18:28.559433 2026] [:error] [pid 58899:tid 58908] [client 20.187.120.186:6774] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-adminmaintmailer.php
[Wed Jan 14 05:18:28.676536 2026] [:error] [pid 58899:tid 58912] [client 20.187.120.186:6774] [client 20.187.120.186] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.187.120.186, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/en/wp-login.php"] [unique_id "aWa2pAWViGQd5R44tHFz6gAAAYk"]
[Wed Jan 14 05:18:29.157751 2026] [:error] [pid 58899:tid 58925] [client 20.187.120.186:6774] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWa2pQWViGQd5R44tHFz7wAAAZY"]
[Wed Jan 14 05:18:29.397506 2026] [:error] [pid 24603:tid 24667] [client 20.187.120.186:6756] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWa2pZPBJGFGN8VT8_Sj6gAAAII"]
[Wed Jan 14 05:18:29.640834 2026] [:error] [pid 58977:tid 58986] [client 20.187.120.186:6674] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWa2pblT6ggZLRx9QvACbQAAAgY"]
[Wed Jan 14 05:18:29.880914 2026] [:error] [pid 58868:tid 58893] [client 20.187.120.186:6772] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hvoxejcn.php"] [unique_id "aWa2pU67yj8PZAmdsblqWgAAAVc"]
[Wed Jan 14 05:18:30.114761 2026] [:error] [pid 58977:tid 58994] [client 20.187.120.186:6681] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rasp.php"] [unique_id "aWa2prlT6ggZLRx9QvACcgAAAg4"]
[Wed Jan 14 05:18:30.348439 2026] [:error] [pid 24602:tid 24648] [client 20.187.120.186:6778] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rasp.php"] [unique_id "aWa2pkooYwabcb9R9fw4YAAAAEo"]
[Wed Jan 14 05:18:30.587457 2026] [:error] [pid 24602:tid 24641] [client 20.187.120.186:6662] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rasp.php"] [unique_id "aWa2pkooYwabcb9R9fw4YQAAAEM"]
[Wed Jan 14 05:18:30.821402 2026] [:error] [pid 58901:tid 58931] [client 20.187.120.186:6671] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rasp.php"] [unique_id "aWa2pr3kQSrcqIWtO0ol2AAAAcE"]
[Wed Jan 14 05:18:31.067021 2026] [:error] [pid 24602:tid 24646] [client 20.187.120.186:6743] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk-park.php"] [unique_id "aWa2p0ooYwabcb9R9fw4YgAAAEg"]
[Wed Jan 14 05:18:31.317171 2026] [:error] [pid 24601:tid 24614] [client 20.187.120.186:6757] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk-park.php"] [unique_id "aWa2p0CtWkZ9rlKW5n-C-wAAAAQ"]
[Wed Jan 14 05:18:31.557449 2026] [:error] [pid 59074:tid 59078] [client 20.187.120.186:6731] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk-park.php"] [unique_id "aWa2p0_KrJ818pzhB3xlwAAAAkI"]
[Wed Jan 14 05:18:31.791637 2026] [:error] [pid 59074:tid 59087] [client 20.187.120.186:6740] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk-park.php"] [unique_id "aWa2p0_KrJ818pzhB3xlwQAAAks"]
[Wed Jan 14 05:18:32.025351 2026] [:error] [pid 59074:tid 59084] [client 20.187.120.186:6683] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/functions.php"] [unique_id "aWa2qE_KrJ818pzhB3xlwgAAAkg"]
[Wed Jan 14 05:18:32.273900 2026] [:error] [pid 24602:tid 24658] [client 20.187.120.186:6682] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/convertplug/convertplug.php"] [unique_id "aWa2qEooYwabcb9R9fw4YwAAAFQ"]
[Wed Jan 14 05:18:32.512319 2026] [:error] [pid 58868:tid 58890] [client 20.187.120.186:6754] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/convertplug/convertplug.php"] [unique_id "aWa2qE67yj8PZAmdsblqXQAAAVQ"]
[Wed Jan 14 05:18:32.747866 2026] [:error] [pid 58699:tid 58717] [client 20.187.120.186:6739] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/convertplug/convertplug.php"] [unique_id "aWa2qOYdPBtkMLK2Sdqq0AAAAQ8"]
[Wed Jan 14 05:18:32.981394 2026] [:error] [pid 24601:tid 24634] [client 20.187.120.186:6729] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWa2qECtWkZ9rlKW5n-C_AAAABg"]
[Wed Jan 14 05:18:33.215513 2026] [:error] [pid 24601:tid 24625] [client 20.187.120.186:6767] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWa2qUCtWkZ9rlKW5n-C_QAAAA8"]
[Wed Jan 14 05:18:33.449066 2026] [:error] [pid 24710:tid 24726] [client 20.187.120.186:6745] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWa2qWXBo5bEhDEEhs1iMgAAAM4"]
[Wed Jan 14 05:18:33.693211 2026] [:error] [pid 58901:tid 58952] [client 20.187.120.186:5095] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/cdekdelivery/cdek.php"] [unique_id "aWa2qb3kQSrcqIWtO0ol3AAAAdY"]
[Wed Jan 14 05:18:33.929378 2026] [:error] [pid 24603:tid 24687] [client 20.187.120.186:6775] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aWa2qZPBJGFGN8VT8_Sj6wAAAJY"]
[Wed Jan 14 05:18:34.171478 2026] [:error] [pid 24603:tid 24674] [client 20.187.120.186:6659] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aWa2qpPBJGFGN8VT8_Sj7AAAAIk"]
[Wed Jan 14 05:18:34.406433 2026] [:error] [pid 24601:tid 24629] [client 20.187.120.186:6752] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aWa2qkCtWkZ9rlKW5n-C_gAAABM"]
[Wed Jan 14 05:18:34.640733 2026] [:error] [pid 24602:tid 24650] [client 20.187.120.186:6741] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aWa2qkooYwabcb9R9fw4ZAAAAEw"]
[Wed Jan 14 05:18:34.874523 2026] [:error] [pid 58899:tid 58914] [client 20.187.120.186:6732] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pluggable.php"] [unique_id "aWa2qgWViGQd5R44tHFz8AAAAYs"]
[Wed Jan 14 05:18:35.109407 2026] [:error] [pid 24710:tid 24717] [client 20.187.120.186:6744] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flexoacademy.com/wp-includes/class-wp-hook.php"] [unique_id "aWa2q2XBo5bEhDEEhs1iMwAAAMU"]
[Wed Jan 14 05:18:35.349878 2026] [:error] [pid 24603:tid 24668] [client 20.187.120.186:6665] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flexoacademy.com/wp-includes/class-wp-hook.php"] [unique_id "aWa2q5PBJGFGN8VT8_Sj7gAAAIM"]
[Wed Jan 14 05:18:35.589875 2026] [:error] [pid 24603:tid 24665] [client 20.187.120.186:6690] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flexoacademy.com/wp-includes/class-wp-hook.php"] [unique_id "aWa2q5PBJGFGN8VT8_Sj7wAAAIA"]
[Wed Jan 14 05:18:35.824053 2026] [:error] [pid 24603:tid 24683] [client 20.187.120.186:6771] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flexoacademy.com/wp-includes/class-wp-hook.php"] [unique_id "aWa2q5PBJGFGN8VT8_Sj8gAAAJI"]
[Wed Jan 14 05:18:36.059214 2026] [:error] [pid 24603:tid 24682] [client 20.187.120.186:6680] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWa2rJPBJGFGN8VT8_Sj8wAAAJE"]
[Wed Jan 14 05:18:36.293938 2026] [:error] [pid 59074:tid 59079] [client 20.187.120.186:6768] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWa2rE_KrJ818pzhB3xlwwAAAkM"]
[Wed Jan 14 05:18:36.534057 2026] [:error] [pid 24601:tid 24632] [client 20.187.120.186:5070] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWa2rECtWkZ9rlKW5n-C_wAAABY"]
[Wed Jan 14 05:18:36.769439 2026] [:error] [pid 58699:tid 58714] [client 20.187.120.186:6769] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/ContactController.php"] [unique_id "aWa2rOYdPBtkMLK2Sdqq0gAAAQw"]
[Wed Jan 14 05:18:37.003816 2026] [:error] [pid 24602:tid 24642] [client 20.187.120.186:6781] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aWa2rUooYwabcb9R9fw4ZQAAAEQ"]
[Wed Jan 14 05:18:37.238612 2026] [:error] [pid 59074:tid 59097] [client 20.187.120.186:6721] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aWa2rU_KrJ818pzhB3xlxAAAAlU"]
[Wed Jan 14 05:18:37.472183 2026] [:error] [pid 24603:tid 24671] [client 20.187.120.186:5073] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aWa2rZPBJGFGN8VT8_Sj9AAAAIY"]
[Wed Jan 14 05:18:37.710476 2026] [:error] [pid 24602:tid 24661] [client 20.187.120.186:6666] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aWa2rUooYwabcb9R9fw4ZgAAAFc"]
[Wed Jan 14 05:18:37.951508 2026] [:error] [pid 24603:tid 24679] [client 20.187.120.186:6675] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWa2rZPBJGFGN8VT8_Sj9QAAAI4"]
[Wed Jan 14 05:18:38.187057 2026] [:error] [pid 24603:tid 24685] [client 20.187.120.186:6751] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWa2rpPBJGFGN8VT8_Sj9gAAAJQ"]
[Wed Jan 14 05:18:38.420124 2026] [:error] [pid 24603:tid 24689] [client 20.187.120.186:6660] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWa2rpPBJGFGN8VT8_Sj9wAAAJg"]
[Wed Jan 14 05:18:38.654613 2026] [:error] [pid 24710:tid 24715] [client 20.187.120.186:6692] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/views/layouts/main.blade.php"] [unique_id "aWa2rmXBo5bEhDEEhs1iNwAAAMM"]
[Wed Jan 14 05:18:38.888501 2026] [:error] [pid 24603:tid 24670] [client 20.187.120.186:6679] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWa2rpPBJGFGN8VT8_Sj-QAAAIU"]
[Wed Jan 14 05:18:39.124014 2026] [:error] [pid 58899:tid 58906] [client 20.187.120.186:6723] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWa2rwWViGQd5R44tHFz8QAAAYM"]
[Wed Jan 14 05:18:39.357229 2026] [:error] [pid 59074:tid 59100] [client 20.187.120.186:6724] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWa2r0_KrJ818pzhB3xlxQAAAlg"]
[Wed Jan 14 05:18:39.594818 2026] [:error] [pid 58868:tid 58885] [client 20.187.120.186:6730] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/82a7b40d8e135fd3ca9cce3df185adac.php"] [unique_id "aWa2r067yj8PZAmdsblqXwAAAU8"]
[Wed Jan 14 05:18:39.834864 2026] [:error] [pid 58868:tid 58875] [client 20.187.120.186:5069] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWa2r067yj8PZAmdsblqYAAAAUU"]
[Wed Jan 14 05:18:40.068678 2026] [:error] [pid 24603:tid 24684] [client 20.187.120.186:6658] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWa2sJPBJGFGN8VT8_Sj-gAAAJM"]
[Wed Jan 14 05:18:40.307417 2026] [:error] [pid 24603:tid 24677] [client 20.187.120.186:6686] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWa2sJPBJGFGN8VT8_Sj-wAAAIw"]
[Wed Jan 14 05:18:40.546617 2026] [:error] [pid 24603:tid 24667] [client 20.187.120.186:6657] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/framework/views/4f035e85688eb1f99ecbf0a343e8dc14.php"] [unique_id "aWa2sJPBJGFGN8VT8_Sj_AAAAII"]
[Wed Jan 14 05:18:40.791935 2026] [:error] [pid 24603:tid 24666] [client 20.187.120.186:6765] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWa2sJPBJGFGN8VT8_Sj_QAAAIE"]
[Wed Jan 14 05:18:41.025258 2026] [:error] [pid 24603:tid 24687] [client 20.187.120.186:6673] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWa2sZPBJGFGN8VT8_Sj_gAAAJY"]
[Wed Jan 14 05:18:41.261370 2026] [:error] [pid 24602:tid 24647] [client 20.187.120.186:6703] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWa2sUooYwabcb9R9fw4ZwAAAEk"]
[Wed Jan 14 05:18:41.496954 2026] [:error] [pid 58868:tid 58871] [client 20.187.120.186:5076] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/Http/Controllers/CaptchaController.php"] [unique_id "aWa2sU67yj8PZAmdsblqYQAAAUE"]
[Wed Jan 14 05:18:41.734298 2026] [:error] [pid 58899:tid 58923] [client 20.187.120.186:5078] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWa2sQWViGQd5R44tHFz8gAAAZQ"]
[Wed Jan 14 05:18:41.975029 2026] [:error] [pid 58899:tid 58909] [client 20.187.120.186:6779] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWa2sQWViGQd5R44tHFz9AAAAYY"]
[Wed Jan 14 05:18:42.210287 2026] [:error] [pid 24601:tid 24619] [client 20.187.120.186:6726] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWa2skCtWkZ9rlKW5n-DAAAAAAk"]
[Wed Jan 14 05:18:42.455187 2026] [:error] [pid 58868:tid 58884] [client 20.187.120.186:6716] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/analyze_08/analyze.php"] [unique_id "aWa2sk67yj8PZAmdsblqYgAAAU4"]
[Wed Jan 14 05:18:42.689101 2026] [:error] [pid 58868:tid 58892] [client 20.187.120.186:6783] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWa2sk67yj8PZAmdsblqYwAAAVY"]
[Wed Jan 14 05:18:42.945900 2026] [:error] [pid 58899:tid 58924] [client 20.187.120.186:6755] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWa2sgWViGQd5R44tHFz9QAAAZU"]
[Wed Jan 14 05:18:43.181908 2026] [:error] [pid 24603:tid 24668] [client 20.187.120.186:6770] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWa2s5PBJGFGN8VT8_SkAAAAAIM"]
[Wed Jan 14 05:18:43.419196 2026] [:error] [pid 58901:tid 58939] [client 20.187.120.186:6746] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-includes/functions.php"] [unique_id "aWa2s73kQSrcqIWtO0ol4QAAAck"]
[Wed Jan 14 05:18:43.667916 2026] [:error] [pid 24601:tid 24613] [client 20.187.120.186:6672] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWa2s0CtWkZ9rlKW5n-DAQAAAAM"]
[Wed Jan 14 05:18:43.904873 2026] [:error] [pid 58699:tid 58708] [client 20.187.120.186:6656] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWa2s-YdPBtkMLK2Sdqq0wAAAQY"]
[Wed Jan 14 05:18:44.142656 2026] [:error] [pid 24710:tid 24721] [client 20.187.120.186:6718] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWa2tGXBo5bEhDEEhs1iPQAAAMk"]
[Wed Jan 14 05:18:44.388781 2026] [:error] [pid 58899:tid 58927] [client 20.187.120.186:6720] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/includes/misc.php"] [unique_id "aWa2tAWViGQd5R44tHFz9gAAAZg"]
[Wed Jan 14 05:18:44.626803 2026] [:error] [pid 58977:tid 58983] [client 20.187.120.186:6669] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWa2tLlT6ggZLRx9QvACggAAAgM"]
[Wed Jan 14 05:18:44.860132 2026] [:error] [pid 58899:tid 58907] [client 20.187.120.186:6702] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWa2tAWViGQd5R44tHFz9wAAAYQ"]
[Wed Jan 14 05:18:45.092999 2026] [:error] [pid 24710:tid 24734] [client 20.187.120.186:6758] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWa2tWXBo5bEhDEEhs1iPwAAANY"]
[Wed Jan 14 05:18:45.331021 2026] [:error] [pid 24602:tid 24659] [client 20.187.120.186:5074] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/newsite/wp-admin/admin-header.php"] [unique_id "aWa2tUooYwabcb9R9fw4aAAAAFU"]
[Wed Jan 14 05:18:45.564288 2026] [:error] [pid 24602:tid 24662] [client 20.187.120.186:6688] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/update.php"] [unique_id "aWa2tUooYwabcb9R9fw4aQAAAFg"]
[Wed Jan 14 05:18:45.802615 2026] [:error] [pid 24602:tid 24638] [client 20.187.120.186:6776] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/autoloader.php"] [unique_id "aWa2tUooYwabcb9R9fw4agAAAEA"]
[Wed Jan 14 05:18:46.063184 2026] [:error] [pid 24710:tid 24718] [client 20.187.120.186:5112] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/autoloader.php"] [unique_id "aWa2tmXBo5bEhDEEhs1iQAAAAMY"]
[Wed Jan 14 05:18:46.297628 2026] [:error] [pid 58899:tid 58910] [client 20.187.120.186:6738] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/autoloader.php"] [unique_id "aWa2tgWViGQd5R44tHFz-AAAAYc"]
[Wed Jan 14 05:18:46.533978 2026] [:error] [pid 58899:tid 58904] [client 20.187.120.186:6687] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWa2tgWViGQd5R44tHFz-QAAAYE"]
[Wed Jan 14 05:18:46.773128 2026] [:error] [pid 58868:tid 58882] [client 20.187.120.186:6677] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWa2tk67yj8PZAmdsblqZQAAAUw"]
[Wed Jan 14 05:18:47.011851 2026] [:error] [pid 58699:tid 58722] [client 20.187.120.186:5110] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWa2t-YdPBtkMLK2Sdqq1AAAARQ"]
[Wed Jan 14 05:18:47.245764 2026] [:error] [pid 58899:tid 58908] [client 20.187.120.186:6750] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/r-and-t/functions.php"] [unique_id "aWa2twWViGQd5R44tHFz-gAAAYU"]
[Wed Jan 14 05:18:47.482143 2026] [:error] [pid 58868:tid 58894] [client 20.187.120.186:6777] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWa2t067yj8PZAmdsblqZgAAAVg"]
[Wed Jan 14 05:18:47.717279 2026] [:error] [pid 59074:tid 59098] [client 20.187.120.186:6747] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWa2t0_KrJ818pzhB3xlxwAAAlY"]
[Wed Jan 14 05:18:47.961274 2026] [:error] [pid 24601:tid 24623] [client 20.187.120.186:6697] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWa2t0CtWkZ9rlKW5n-DAwAAAA0"]
[Wed Jan 14 05:18:48.194937 2026] [:error] [pid 58901:tid 58932] [client 20.187.120.186:6693] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/theme.php"] [unique_id "aWa2uL3kQSrcqIWtO0ol5QAAAcI"]
[Wed Jan 14 05:18:48.443661 2026] [:error] [pid 58901:tid 58954] [client 20.187.120.186:6734] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWa2uL3kQSrcqIWtO0ol5wAAAdg"]
[Wed Jan 14 05:18:48.676944 2026] [:error] [pid 24603:tid 24678] [client 20.187.120.186:5062] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWa2uJPBJGFGN8VT8_SkAQAAAI0"]
[Wed Jan 14 05:18:48.910383 2026] [:error] [pid 58699:tid 58711] [client 20.187.120.186:6661] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWa2uOYdPBtkMLK2Sdqq1QAAAQk"]
[Wed Jan 14 05:18:49.145817 2026] [:error] [pid 24710:tid 24712] [client 20.187.120.186:5098] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aWa2uWXBo5bEhDEEhs1iRAAAAMA"]
[Wed Jan 14 05:18:49.398566 2026] [:error] [pid 24603:tid 24680] [client 20.187.120.186:6722] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aWa2uZPBJGFGN8VT8_SkAgAAAI8"]
[Wed Jan 14 05:18:49.684937 2026] [:error] [pid 58899:tid 58921] [client 20.187.120.186:6684] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aWa2uQWViGQd5R44tHFz_AAAAZI"]
[Wed Jan 14 05:18:49.963751 2026] [:error] [pid 58699:tid 58702] [client 20.187.120.186:6678] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aWa2ueYdPBtkMLK2Sdqq1gAAAQA"]
[Wed Jan 14 05:18:50.205144 2026] [:error] [pid 59074:tid 59095] [client 20.187.120.186:6762] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aWa2uk_KrJ818pzhB3xlyAAAAlM"]
[Wed Jan 14 05:18:50.439321 2026] [:error] [pid 58699:tid 58719] [client 20.187.120.186:6713] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aWa2uuYdPBtkMLK2Sdqq2AAAARE"]
[Wed Jan 14 05:18:50.676498 2026] [:error] [pid 59074:tid 59081] [client 20.187.120.186:6700] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/template-loader.php"] [unique_id "aWa2uk_KrJ818pzhB3xlygAAAkU"]
[Wed Jan 14 05:18:50.927912 2026] [:error] [pid 58699:tid 58710] [client 20.187.120.186:6670] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/home.php"] [unique_id "aWa2uuYdPBtkMLK2Sdqq2QAAAQg"]
[Wed Jan 14 05:18:51.164716 2026] [:error] [pid 58868:tid 58883] [client 20.187.120.186:6676] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/home.php"] [unique_id "aWa2u067yj8PZAmdsblqZwAAAU0"]
[Wed Jan 14 05:18:51.402531 2026] [:error] [pid 59074:tid 59094] [client 20.187.120.186:6709] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/home.php"] [unique_id "aWa2u0_KrJ818pzhB3xlywAAAlI"]
[Wed Jan 14 05:18:51.652099 2026] [:error] [pid 58868:tid 58889] [client 20.187.120.186:5063] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/child/header.php"] [unique_id "aWa2u067yj8PZAmdsblqaAAAAVM"]
[Wed Jan 14 05:18:51.887938 2026] [:error] [pid 24602:tid 24657] [client 20.187.120.186:6764] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/child/header.php"] [unique_id "aWa2u0ooYwabcb9R9fw4bgAAAFM"]
[Wed Jan 14 05:18:52.145392 2026] [:error] [pid 24602:tid 24654] [client 20.187.120.186:6707] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/child/header.php"] [unique_id "aWa2vEooYwabcb9R9fw4bwAAAFA"]
[Wed Jan 14 05:18:52.388897 2026] [:error] [pid 24602:tid 24653] [client 20.187.120.186:5106] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/child/header.php"] [unique_id "aWa2vEooYwabcb9R9fw4cAAAAE8"]
[Wed Jan 14 05:18:52.625311 2026] [:error] [pid 58977:tid 58987] [client 20.187.120.186:5108] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWa2vLlT6ggZLRx9QvAChgAAAgc"]
[Wed Jan 14 05:18:52.858813 2026] [:error] [pid 59074:tid 59091] [client 20.187.120.186:5097] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWa2vE_KrJ818pzhB3xlzAAAAk8"]
[Wed Jan 14 05:18:53.103976 2026] [:error] [pid 58868:tid 58876] [client 20.187.120.186:6698] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWa2vU67yj8PZAmdsblqaQAAAUY"]
[Wed Jan 14 05:18:53.338445 2026] [:error] [pid 58899:tid 58925] [client 20.187.120.186:6719] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/single.php"] [unique_id "aWa2vQWViGQd5R44tHFz_gAAAZY"]
[Wed Jan 14 05:18:53.580316 2026] [:error] [pid 58699:tid 58712] [client 20.187.120.186:6705] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa2veYdPBtkMLK2Sdqq3AAAAQo"]
[Wed Jan 14 05:18:53.814278 2026] [:error] [pid 58899:tid 58911] [client 20.187.120.186:5101] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa2vQWViGQd5R44tHFz_wAAAYg"]
[Wed Jan 14 05:18:54.055110 2026] [:error] [pid 58977:tid 58994] [client 20.187.120.186:5067] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa2vrlT6ggZLRx9QvACiAAAAg4"]
[Wed Jan 14 05:18:54.288513 2026] [:error] [pid 58868:tid 58886] [client 20.187.120.186:6664] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/archive.php"] [unique_id "aWa2vk67yj8PZAmdsblqbgAAAVA"]
[Wed Jan 14 05:18:54.522096 2026] [:error] [pid 58868:tid 58890] [client 20.187.120.186:5016] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa2vk67yj8PZAmdsblqbwAAAVQ"]
[Wed Jan 14 05:18:54.763927 2026] [:error] [pid 24603:tid 24676] [client 20.187.120.186:5089] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa2vpPBJGFGN8VT8_SkBAAAAIs"]
[Wed Jan 14 05:18:55.020454 2026] [:error] [pid 24603:tid 24672] [client 20.187.120.186:6712] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa2v5PBJGFGN8VT8_SkBQAAAIc"]
[Wed Jan 14 05:18:55.264225 2026] [:error] [pid 58977:tid 58992] [client 20.187.120.186:6675] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/page.php"] [unique_id "aWa2v7lT6ggZLRx9QvACiwAAAgw"]
[Wed Jan 14 05:18:55.497512 2026] [:error] [pid 24603:tid 24669] [client 20.187.120.186:5088] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa2v5PBJGFGN8VT8_SkBgAAAIQ"]
[Wed Jan 14 05:18:55.730981 2026] [:error] [pid 24603:tid 24671] [client 20.187.120.186:5042] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa2v5PBJGFGN8VT8_SkCAAAAIY"]
[Wed Jan 14 05:18:55.964922 2026] [:error] [pid 59074:tid 59086] [client 20.187.120.186:6761] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa2v0_KrJ818pzhB3xlzQAAAko"]
[Wed Jan 14 05:18:56.203690 2026] [:error] [pid 24603:tid 24685] [client 20.187.120.186:6733] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cloner/websocket.php"] [unique_id "aWa2wJPBJGFGN8VT8_SkCQAAAJQ"]
[Wed Jan 14 05:18:56.447088 2026] [:error] [pid 58977:tid 58997] [client 20.187.120.186:5007] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa2wLlT6ggZLRx9QvACjwAAAhE"]
[Wed Jan 14 05:18:56.681352 2026] [:error] [pid 24710:tid 24736] [client 20.187.120.186:6685] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa2wGXBo5bEhDEEhs1iSQAAANg"]
[Wed Jan 14 05:18:56.915517 2026] [:error] [pid 24710:tid 24715] [client 20.187.120.186:5090] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa2wGXBo5bEhDEEhs1iSwAAAMM"]
[Wed Jan 14 05:18:57.149942 2026] [:error] [pid 59074:tid 59093] [client 20.187.120.186:6704] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mu-plugins/0-worker.php"] [unique_id "aWa2wU_KrJ818pzhB3xlzgAAAlE"]
[Wed Jan 14 05:18:57.384511 2026] [:error] [pid 58899:tid 58919] [client 20.187.120.186:5050] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa2wQWViGQd5R44tHF0AAAAAZA"]
[Wed Jan 14 05:18:57.620744 2026] [:error] [pid 59074:tid 59087] [client 20.187.120.186:4997] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa2wU_KrJ818pzhB3xlzwAAAks"]
[Wed Jan 14 05:18:57.868821 2026] [:error] [pid 24603:tid 24684] [client 20.187.120.186:6668] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa2wZPBJGFGN8VT8_SkCwAAAJM"]
[Wed Jan 14 05:18:58.143477 2026] [:error] [pid 58977:tid 58999] [client 20.187.120.186:4986] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/worker/init.php"] [unique_id "aWa2wrlT6ggZLRx9QvACkgAAAhM"]
[Wed Jan 14 05:18:58.379506 2026] [:error] [pid 58868:tid 58880] [client 20.187.120.186:6782] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa2wk67yj8PZAmdsblqcAAAAUo"]
[Wed Jan 14 05:18:58.617194 2026] [:error] [pid 58868:tid 58870] [client 20.187.120.186:6710] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa2wk67yj8PZAmdsblqcQAAAUA"]
[Wed Jan 14 05:18:58.854999 2026] [:error] [pid 58868:tid 58884] [client 20.187.120.186:5085] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa2wk67yj8PZAmdsblqcwAAAU4"]
[Wed Jan 14 05:18:59.097506 2026] [:error] [pid 58868:tid 58892] [client 20.187.120.186:5058] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/onepress/sidebar.php"] [unique_id "aWa2w067yj8PZAmdsblqdQAAAVY"]
[Wed Jan 14 05:18:59.333924 2026] [:error] [pid 58868:tid 58882] [client 20.187.120.186:5080] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWa2w067yj8PZAmdsblqdwAAAUw"]
[Wed Jan 14 05:18:59.593609 2026] [:error] [pid 24710:tid 24722] [client 20.187.120.186:6727] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWa2w2XBo5bEhDEEhs1iUAAAAMo"]
[Wed Jan 14 05:18:59.851335 2026] [:error] [pid 58901:tid 58948] [client 20.187.120.186:6695] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWa2w73kQSrcqIWtO0ol7QAAAdI"]
[Wed Jan 14 05:19:00.091116 2026] [:error] [pid 58977:tid 58991] [client 20.187.120.186:5004] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWa2xLlT6ggZLRx9QvAClAAAAgs"]
[Wed Jan 14 05:19:00.349875 2026] [:error] [pid 24601:tid 24630] [client 20.187.120.186:5084] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-db.php"] [unique_id "aWa2xECtWkZ9rlKW5n-DBQAAABQ"]
[Wed Jan 14 05:19:00.633351 2026] [:error] [pid 24603:tid 24677] [client 20.187.120.186:4994] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wp-query.php"] [unique_id "aWa2xJPBJGFGN8VT8_SkDAAAAIw"]
[Wed Jan 14 05:19:00.885283 2026] [:error] [pid 58901:tid 58935] [client 20.187.120.186:5061] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ABSPATHwp-includes/version.php"] [unique_id "aWa2xL3kQSrcqIWtO0ol7wAAAcU"]
[Wed Jan 14 05:19:01.171012 2026] [:error] [pid 24603:tid 24666] [client 20.187.120.186:6763] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ABSPATHwp-includes/version.php"] [unique_id "aWa2xZPBJGFGN8VT8_SkDQAAAIE"]
[Wed Jan 14 05:19:01.462881 2026] [:error] [pid 24603:tid 24687] [client 20.187.120.186:5113] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ABSPATHwp-includes/version.php"] [unique_id "aWa2xZPBJGFGN8VT8_SkDgAAAJY"]
[Wed Jan 14 05:19:01.769253 2026] [:error] [pid 58868:tid 58873] [client 20.187.120.186:6753] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wp-customize-widgets.php"] [unique_id "aWa2xU67yj8PZAmdsblqegAAAUM"]
[Wed Jan 14 05:19:02.027625 2026] [:error] [pid 58977:tid 58998] [client 20.187.120.186:5072] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/Lisli_Emi/header.php"] [unique_id "aWa2xrlT6ggZLRx9QvACmAAAAhI"]
[Wed Jan 14 05:19:02.287254 2026] [:error] [pid 58899:tid 58903] [client 20.187.120.186:6714] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/Lisli_Emi/header.php"] [unique_id "aWa2xgWViGQd5R44tHF0AQAAAYA"]
[Wed Jan 14 05:19:02.580475 2026] [:error] [pid 58977:tid 58981] [client 20.187.120.186:6717] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/Lisli_Emi/header.php"] [unique_id "aWa2xrlT6ggZLRx9QvACmQAAAgE"]
[Wed Jan 14 05:19:02.582380 2026] [:error] [pid 24710:tid 24722] [client 20.187.120.186:6727] [client 20.187.120.186] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "241.23.197.169_7558286bf6b32d9c769cd0dc958b7204e30aa0c3"): Internal error (specific information not available) [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWa2w2XBo5bEhDEEhs1iUAAAAMo"]
[Wed Jan 14 05:19:02.831936 2026] [:error] [pid 24710:tid 24714] [client 20.187.120.186:5017] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa2xmXBo5bEhDEEhs1iVAAAAMI"]
[Wed Jan 14 05:19:03.113566 2026] [:error] [pid 58977:tid 58988] [client 20.187.120.186:6708] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa2x7lT6ggZLRx9QvACmgAAAgg"]
[Wed Jan 14 05:19:03.368359 2026] [:error] [pid 58901:tid 58938] [client 20.187.120.186:6667] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa2x73kQSrcqIWtO0ol8QAAAcg"]
[Wed Jan 14 05:19:03.608692 2026] [:error] [pid 58977:tid 58992] [client 20.187.120.186:5071] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/duplicator/uninstall.php"] [unique_id "aWa2x7lT6ggZLRx9QvACmwAAAgw"]
[Wed Jan 14 05:19:03.852720 2026] [:error] [pid 24710:tid 24718] [client 20.187.120.186:5096] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wpdb.php"] [unique_id "aWa2x2XBo5bEhDEEhs1iVQAAAMY"]
[Wed Jan 14 05:19:04.109898 2026] [:error] [pid 58868:tid 58886] [client 20.187.120.186:5086] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/canonical.php"] [unique_id "aWa2yE67yj8PZAmdsblqewAAAVA"]
[Wed Jan 14 05:19:04.355893 2026] [:error] [pid 24603:tid 24665] [client 20.187.120.186:5002] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ozh-click-counter/wp_ozh_clickcounter.php"] [unique_id "aWa2yJPBJGFGN8VT8_SkDwAAAIA"]
[Wed Jan 14 05:19:04.592324 2026] [:error] [pid 58868:tid 58890] [client 20.187.120.186:6736] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ozh-click-counter/wp_ozh_clickcounter.php"] [unique_id "aWa2yE67yj8PZAmdsblqfAAAAVQ"]
[Wed Jan 14 05:19:04.829901 2026] [:error] [pid 58977:tid 58995] [client 20.187.120.186:6749] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ozh-click-counter/wp_ozh_clickcounter.php"] [unique_id "aWa2yLlT6ggZLRx9QvACngAAAg8"]
[Wed Jan 14 05:19:05.080980 2026] [:error] [pid 24603:tid 24675] [client 20.187.120.186:4951] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wp-hook.php"] [unique_id "aWa2yZPBJGFGN8VT8_SkEAAAAIo"]
[Wed Jan 14 05:19:05.325376 2026] [:error] [pid 24710:tid 24726] [client 20.187.120.186:6735] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aWa2yWXBo5bEhDEEhs1iWQAAAM4"]
[Wed Jan 14 05:19:05.559734 2026] [:error] [pid 24710:tid 24723] [client 20.187.120.186:5099] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/formatting.php"] [unique_id "aWa2yWXBo5bEhDEEhs1iWgAAAMs"]
[Wed Jan 14 05:19:05.794238 2026] [:error] [pid 58977:tid 59003] [client 20.187.120.186:5006] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/post-template.php"] [unique_id "aWa2yblT6ggZLRx9QvACnwAAAhc"]
[Wed Jan 14 05:19:06.032375 2026] [:error] [pid 24603:tid 24683] [client 20.187.120.186:4928] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/search-filter/search-filter.php"] [unique_id "aWa2ypPBJGFGN8VT8_SkEQAAAJI"]
[Wed Jan 14 05:19:06.268538 2026] [:error] [pid 58699:tid 58709] [client 20.187.120.186:5116] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/search-filter/search-filter.php"] [unique_id "aWa2yuYdPBtkMLK2Sdqq3QAAAQc"]
[Wed Jan 14 05:19:06.506101 2026] [:error] [pid 24710:tid 24719] [client 20.187.120.186:5114] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/search-filter/search-filter.php"] [unique_id "aWa2ymXBo5bEhDEEhs1iXAAAAMc"]
[Wed Jan 14 05:19:06.745720 2026] [:error] [pid 58699:tid 58703] [client 20.187.120.186:5107] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/template.php"] [unique_id "aWa2yuYdPBtkMLK2Sdqq3gAAAQE"]
[Wed Jan 14 05:19:06.981387 2026] [:error] [pid 58699:tid 58716] [client 20.187.120.186:6690] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/general-template.php"] [unique_id "aWa2yuYdPBtkMLK2Sdqq3wAAAQ4"]
[Wed Jan 14 05:19:07.229857 2026] [:error] [pid 59074:tid 59083] [client 20.187.120.186:6711] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/w3-total-cache/PgCache_ContentGrabber.php"] [unique_id "aWa2y0_KrJ818pzhB3xl0QAAAkc"]
[Wed Jan 14 05:19:07.472478 2026] [:error] [pid 59074:tid 59076] [client 20.187.120.186:5026] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/w3-total-cache/PgCache_ContentGrabber.php"] [unique_id "aWa2y0_KrJ818pzhB3xl0gAAAkA"]
[Wed Jan 14 05:19:07.705493 2026] [:error] [pid 59074:tid 59079] [client 20.187.120.186:6689] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/w3-total-cache/PgCache_ContentGrabber.php"] [unique_id "aWa2y0_KrJ818pzhB3xl0wAAAkM"]
[Wed Jan 14 05:19:07.945495 2026] [:error] [pid 59074:tid 59077] [client 20.187.120.186:6773] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa2y0_KrJ818pzhB3xl1AAAAkE"]
[Wed Jan 14 05:19:08.180708 2026] [:error] [pid 58977:tid 58993] [client 20.187.120.186:5093] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa2zLlT6ggZLRx9QvACogAAAg0"]
[Wed Jan 14 05:19:08.423510 2026] [:error] [pid 58699:tid 58705] [client 20.187.120.186:5027] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa2zOYdPBtkMLK2Sdqq4AAAAQM"]
[Wed Jan 14 05:19:08.656668 2026] [:error] [pid 58977:tid 59002] [client 20.187.120.186:5082] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/page.php"] [unique_id "aWa2zLlT6ggZLRx9QvACpAAAAhY"]
[Wed Jan 14 05:19:08.895965 2026] [:error] [pid 58977:tid 58987] [client 20.187.120.186:5065] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa2zLlT6ggZLRx9QvACpQAAAgc"]
[Wed Jan 14 05:19:09.131536 2026] [:error] [pid 59074:tid 59100] [client 20.187.120.186:6748] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa2zU_KrJ818pzhB3xl1wAAAlg"]
[Wed Jan 14 05:19:09.366725 2026] [:error] [pid 58977:tid 58986] [client 20.187.120.186:5109] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa2zblT6ggZLRx9QvACqAAAAgY"]
[Wed Jan 14 05:19:09.601302 2026] [:error] [pid 59074:tid 59089] [client 20.187.120.186:5059] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/flash/header.php"] [unique_id "aWa2zU_KrJ818pzhB3xl2AAAAk0"]
[Wed Jan 14 05:19:09.842315 2026] [:error] [pid 58699:tid 58714] [client 20.187.120.186:6663] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wer.php"] [unique_id "aWa2zeYdPBtkMLK2Sdqq4QAAAQw"]
[Wed Jan 14 05:19:10.076631 2026] [:error] [pid 58699:tid 58713] [client 20.187.120.186:5115] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wer.php"] [unique_id "aWa2zuYdPBtkMLK2Sdqq4gAAAQs"]
[Wed Jan 14 05:19:10.317390 2026] [:error] [pid 58699:tid 58708] [client 20.187.120.186:5013] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wer.php"] [unique_id "aWa2zuYdPBtkMLK2Sdqq4wAAAQY"]
[Wed Jan 14 05:19:10.553215 2026] [:error] [pid 59074:tid 59095] [client 20.187.120.186:6766] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wer.php"] [unique_id "aWa2zk_KrJ818pzhB3xl2gAAAlM"]
[Wed Jan 14 05:19:10.788468 2026] [:error] [pid 59074:tid 59081] [client 20.187.120.186:6699] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crouter.php"] [unique_id "aWa2zk_KrJ818pzhB3xl2wAAAkU"]
[Wed Jan 14 05:19:11.021873 2026] [:error] [pid 59074:tid 59099] [client 20.187.120.186:5008] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crouter.php"] [unique_id "aWa2z0_KrJ818pzhB3xl3AAAAlc"]
[Wed Jan 14 05:19:11.257833 2026] [:error] [pid 59074:tid 59094] [client 20.187.120.186:6696] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crouter.php"] [unique_id "aWa2z0_KrJ818pzhB3xl3QAAAlI"]
[Wed Jan 14 05:19:11.493612 2026] [:error] [pid 58901:tid 58944] [client 20.187.120.186:5043] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crouter.php"] [unique_id "aWa2z73kQSrcqIWtO0ol9gAAAc4"]
[Wed Jan 14 05:19:11.731432 2026] [:error] [pid 24710:tid 24734] [client 20.187.120.186:6725] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa2z2XBo5bEhDEEhs1iYwAAANY"]
[Wed Jan 14 05:19:11.998620 2026] [:error] [pid 24603:tid 24671] [client 20.187.120.186:5068] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa2z5PBJGFGN8VT8_SkFQAAAIY"]
[Wed Jan 14 05:19:12.239918 2026] [:error] [pid 24602:tid 24646] [client 20.187.120.186:5041] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa20EooYwabcb9R9fw4cQAAAEg"]
[Wed Jan 14 05:19:12.473912 2026] [:error] [pid 59074:tid 59086] [client 20.187.120.186:5039] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/composer.php"] [unique_id "aWa20E_KrJ818pzhB3xl3gAAAko"]
[Wed Jan 14 05:19:12.708477 2026] [:error] [pid 24603:tid 24679] [client 20.187.120.186:5014] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa20JPBJGFGN8VT8_SkFgAAAI4"]
[Wed Jan 14 05:19:12.943562 2026] [:error] [pid 24710:tid 24721] [client 20.187.120.186:6715] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa20GXBo5bEhDEEhs1iZQAAAMk"]
[Wed Jan 14 05:19:13.178829 2026] [:error] [pid 58699:tid 58702] [client 20.187.120.186:4993] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa20eYdPBtkMLK2Sdqq5gAAAQA"]
[Wed Jan 14 05:19:13.420597 2026] [:error] [pid 58977:tid 58992] [client 20.187.120.186:5030] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/COPYRIGHT.php"] [unique_id "aWa20blT6ggZLRx9QvACrAAAAgw"]
[Wed Jan 14 05:19:13.655456 2026] [:error] [pid 58699:tid 58719] [client 20.187.120.186:5033] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa20eYdPBtkMLK2Sdqq5wAAARE"]
[Wed Jan 14 05:19:13.889744 2026] [:error] [pid 24601:tid 24612] [client 20.187.120.186:4867] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa20UCtWkZ9rlKW5n-DBwAAAAI"]
[Wed Jan 14 05:19:14.125177 2026] [:error] [pid 58699:tid 58710] [client 20.187.120.186:5000] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa20uYdPBtkMLK2Sdqq6QAAAQg"]
[Wed Jan 14 05:19:14.359563 2026] [:error] [pid 59074:tid 59093] [client 20.187.120.186:6759] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites/default/settingsm.php"] [unique_id "aWa20k_KrJ818pzhB3xl3wAAAlE"]
[Wed Jan 14 05:19:14.594600 2026] [:error] [pid 24710:tid 24728] [client 20.187.120.186:5056] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa20mXBo5bEhDEEhs1iZwAAANA"]
[Wed Jan 14 05:19:14.832424 2026] [:error] [pid 24710:tid 24735] [client 20.187.120.186:6770] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa20mXBo5bEhDEEhs1iaAAAANc"]
[Wed Jan 14 05:19:15.066559 2026] [:error] [pid 58901:tid 58954] [client 20.187.120.186:5083] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa2073kQSrcqIWtO0ol-QAAAdg"]
[Wed Jan 14 05:19:15.301456 2026] [:error] [pid 24710:tid 24713] [client 20.187.120.186:5087] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/class-wp-upgrader-skin.php"] [unique_id "aWa202XBo5bEhDEEhs1iagAAAME"]
[Wed Jan 14 05:19:15.534996 2026] [:error] [pid 24710:tid 24730] [client 20.187.120.186:5117] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa202XBo5bEhDEEhs1ibQAAANI"]
[Wed Jan 14 05:19:15.768782 2026] [:error] [pid 24602:tid 24656] [client 20.187.120.186:5104] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa200ooYwabcb9R9fw4cwAAAFI"]
[Wed Jan 14 05:19:16.002403 2026] [:error] [pid 59074:tid 59092] [client 20.187.120.186:5009] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa21E_KrJ818pzhB3xl4AAAAlA"]
[Wed Jan 14 05:19:16.236626 2026] [:error] [pid 24710:tid 24733] [client 20.187.120.186:5077] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-settings.php"] [unique_id "aWa21GXBo5bEhDEEhs1ibwAAANU"]
[Wed Jan 14 05:19:16.472148 2026] [:error] [pid 24602:tid 24650] [client 20.187.120.186:5011] [client 20.187.120.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-config.php"] [unique_id "aWa21EooYwabcb9R9fw4dAAAAEw"]
[Wed Jan 14 05:19:16.721425 2026] [:error] [pid 24601:tid 24622] [client 20.187.120.186:5118] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ABSPATHwp-includes/load.php"] [unique_id "aWa21ECtWkZ9rlKW5n-DCAAAAAw"]
[Wed Jan 14 05:19:16.955442 2026] [:error] [pid 58699:tid 58707] [client 20.187.120.186:5066] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ABSPATHwp-includes/load.php"] [unique_id "aWa21OYdPBtkMLK2Sdqq7AAAAQU"]
[Wed Jan 14 05:19:17.191349 2026] [:error] [pid 24601:tid 24621] [client 20.187.120.186:4995] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ABSPATHwp-includes/load.php"] [unique_id "aWa21UCtWkZ9rlKW5n-DCQAAAAs"]
[Wed Jan 14 05:19:17.429684 2026] [:error] [pid 24601:tid 24616] [client 20.187.120.186:4937] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa21UCtWkZ9rlKW5n-DCwAAAAY"]
[Wed Jan 14 05:19:17.662826 2026] [:error] [pid 58699:tid 58723] [client 20.187.120.186:4958] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa21eYdPBtkMLK2Sdqq7gAAARU"]
[Wed Jan 14 05:19:17.896516 2026] [:error] [pid 24710:tid 24719] [client 20.187.120.186:6701] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa21WXBo5bEhDEEhs1icQAAAMc"]
[Wed Jan 14 05:19:18.130455 2026] [:error] [pid 58899:tid 58913] [client 20.187.120.186:5091] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-admin/includes/update-core.php"] [unique_id "aWa21gWViGQd5R44tHF0BAAAAYo"]
[Wed Jan 14 05:19:18.364354 2026] [:error] [pid 24603:tid 24684] [client 20.187.120.186:4996] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa21pPBJGFGN8VT8_SkGQAAAJM"]
[Wed Jan 14 05:19:18.596925 2026] [:error] [pid 24602:tid 24660] [client 20.187.120.186:4947] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa21kooYwabcb9R9fw4dQAAAFY"]
[Wed Jan 14 05:19:18.830824 2026] [:error] [pid 24710:tid 24716] [client 20.187.120.186:4948] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa21mXBo5bEhDEEhs1icgAAAMQ"]
[Wed Jan 14 05:19:19.068147 2026] [:error] [pid 24603:tid 24677] [client 20.187.120.186:5035] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/index.php"] [unique_id "aWa215PBJGFGN8VT8_SkGwAAAIw"]
[Wed Jan 14 05:19:19.303615 2026] [:error] [pid 24603:tid 24681] [client 20.187.120.186:4945] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa215PBJGFGN8VT8_SkHQAAAJA"]
[Wed Jan 14 05:19:19.538922 2026] [:error] [pid 58899:tid 58923] [client 20.187.120.186:5015] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa21wWViGQd5R44tHF0BgAAAZQ"]
[Wed Jan 14 05:19:19.772523 2026] [:error] [pid 24710:tid 24729] [client 20.187.120.186:6737] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa212XBo5bEhDEEhs1idAAAANE"]
[Wed Jan 14 05:19:20.007930 2026] [:error] [pid 58901:tid 58946] [client 20.187.120.186:6760] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/sidebar.php"] [unique_id "aWa22L3kQSrcqIWtO0ol_AAAAdA"]
[Wed Jan 14 05:19:20.240852 2026] [:error] [pid 24602:tid 24647] [client 20.187.120.186:4938] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/page.php"] [unique_id "aWa22EooYwabcb9R9fw4dwAAAEk"]
[Wed Jan 14 05:19:20.474777 2026] [:error] [pid 58901:tid 58943] [client 20.187.120.186:5053] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/page.php"] [unique_id "aWa22L3kQSrcqIWtO0ol_QAAAc0"]
[Wed Jan 14 05:19:20.715327 2026] [:error] [pid 24602:tid 24659] [client 20.187.120.186:4984] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/page.php"] [unique_id "aWa22EooYwabcb9R9fw4eAAAAFU"]
[Wed Jan 14 05:19:20.949110 2026] [:error] [pid 24602:tid 24662] [client 20.187.120.186:5048] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/page.php"] [unique_id "aWa22EooYwabcb9R9fw4eQAAAFg"]
[Wed Jan 14 05:19:21.189560 2026] [:error] [pid 59074:tid 59082] [client 20.187.120.186:6706] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/single.php"] [unique_id "aWa22U_KrJ818pzhB3xl4gAAAkY"]
[Wed Jan 14 05:19:21.423529 2026] [:error] [pid 24710:tid 24732] [client 20.187.120.186:5105] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/single.php"] [unique_id "aWa22WXBo5bEhDEEhs1idgAAANQ"]
[Wed Jan 14 05:19:21.659047 2026] [:error] [pid 58899:tid 58917] [client 20.187.120.186:4930] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/single.php"] [unique_id "aWa22QWViGQd5R44tHF0BwAAAY4"]
[Wed Jan 14 05:19:21.904741 2026] [:error] [pid 24601:tid 24634] [client 20.187.120.186:4931] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/single.php"] [unique_id "aWa22UCtWkZ9rlKW5n-DDQAAABg"]
[Wed Jan 14 05:19:22.139258 2026] [:error] [pid 59074:tid 59080] [client 20.187.120.186:4967] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/author.php"] [unique_id "aWa22k_KrJ818pzhB3xl5AAAAkQ"]
[Wed Jan 14 05:19:22.374632 2026] [:error] [pid 58868:tid 58892] [client 20.187.120.186:5044] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/author.php"] [unique_id "aWa22k67yj8PZAmdsblqgAAAAVY"]
[Wed Jan 14 05:19:22.609647 2026] [:error] [pid 58899:tid 58922] [client 20.187.120.186:5021] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/author.php"] [unique_id "aWa22gWViGQd5R44tHF0CAAAAZM"]
[Wed Jan 14 05:19:22.844906 2026] [:error] [pid 58699:tid 58720] [client 20.187.120.186:5031] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/author.php"] [unique_id "aWa22uYdPBtkMLK2Sdqq8QAAARI"]
[Wed Jan 14 05:19:23.078712 2026] [:error] [pid 24602:tid 24651] [client 20.187.120.186:4998] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/404.php"] [unique_id "aWa220ooYwabcb9R9fw4ewAAAE0"]
[Wed Jan 14 05:19:23.326859 2026] [:error] [pid 24603:tid 24687] [client 20.187.120.186:4964] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/404.php"] [unique_id "aWa225PBJGFGN8VT8_SkHgAAAJY"]
[Wed Jan 14 05:19:23.561149 2026] [:error] [pid 58868:tid 58891] [client 20.187.120.186:4991] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/404.php"] [unique_id "aWa22067yj8PZAmdsblqgQAAAVU"]
[Wed Jan 14 05:19:23.795424 2026] [:error] [pid 58899:tid 58918] [client 20.187.120.186:4957] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/404.php"] [unique_id "aWa22wWViGQd5R44tHF0CQAAAY8"]
[Wed Jan 14 05:19:24.029308 2026] [:error] [pid 24710:tid 24714] [client 20.187.120.186:5020] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/tag.php"] [unique_id "aWa23GXBo5bEhDEEhs1iegAAAMI"]
[Wed Jan 14 05:19:24.263865 2026] [:error] [pid 58868:tid 58882] [client 20.187.120.186:5046] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/tag.php"] [unique_id "aWa23E67yj8PZAmdsblqggAAAUw"]
[Wed Jan 14 05:19:24.510919 2026] [:error] [pid 24710:tid 24728] [client 20.187.120.186:5036] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/tag.php"] [unique_id "aWa23GXBo5bEhDEEhs1iewAAANA"]
[Wed Jan 14 05:19:24.748716 2026] [:error] [pid 58899:tid 58927] [client 20.187.120.186:5079] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentyfourteen/tag.php"] [unique_id "aWa23AWViGQd5R44tHF0CgAAAZg"]
[Wed Jan 14 05:19:24.985471 2026] [:error] [pid 24710:tid 24725] [client 20.187.120.186:5038] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-includes/class-wp-xmlrpc-server.php"] [unique_id "aWa23GXBo5bEhDEEhs1ifQAAAM0"]
[Wed Jan 14 05:19:25.229843 2026] [:error] [pid 24710:tid 24730] [client 20.187.120.186:4992] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-includes/class-wp-xmlrpc-server.php"] [unique_id "aWa23WXBo5bEhDEEhs1ifgAAANI"]
[Wed Jan 14 05:19:25.464371 2026] [:error] [pid 58901:tid 58931] [client 20.187.120.186:6745] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-includes/class-wp-xmlrpc-server.php"] [unique_id "aWa23b3kQSrcqIWtO0omAwAAAcE"]
[Wed Jan 14 05:19:25.702787 2026] [:error] [pid 58977:tid 58984] [client 20.187.120.186:6742] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanceros.es/wp-includes/class-wp-xmlrpc-server.php"] [unique_id "aWa23blT6ggZLRx9QvACswAAAgQ"]
[Wed Jan 14 05:19:25.947712 2026] [:error] [pid 24710:tid 24722] [client 20.187.120.186:5052] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-ajax.php"] [unique_id "aWa23WXBo5bEhDEEhs1igQAAAMo"]
[Wed Jan 14 05:19:26.194825 2026] [:error] [pid 58977:tid 58983] [client 20.187.120.186:5025] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-ajax.php"] [unique_id "aWa23rlT6ggZLRx9QvACtQAAAgM"]
[Wed Jan 14 05:19:26.433890 2026] [:error] [pid 24601:tid 24619] [client 20.187.120.186:5018] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-ajax.php"] [unique_id "aWa23kCtWkZ9rlKW5n-DEAAAAAk"]
[Wed Jan 14 05:19:26.694559 2026] [:error] [pid 58868:tid 58878] [client 20.187.120.186:5010] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-ajax.php"] [unique_id "aWa23k67yj8PZAmdsblqgwAAAUg"]
[Wed Jan 14 05:19:26.960939 2026] [:error] [pid 58901:tid 58930] [client 20.187.120.186:4956] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aWa23r3kQSrcqIWtO0omBQAAAcA"]
[Wed Jan 14 05:19:27.195318 2026] [:error] [pid 59074:tid 59076] [client 20.187.120.186:5012] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aWa230_KrJ818pzhB3xl5gAAAkA"]
[Wed Jan 14 05:19:27.429162 2026] [:error] [pid 58868:tid 58871] [client 20.187.120.186:5019] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aWa23067yj8PZAmdsblqhAAAAUE"]
[Wed Jan 14 05:19:27.667538 2026] [:error] [pid 58868:tid 58876] [client 20.187.120.186:5003] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aWa23067yj8PZAmdsblqhQAAAUY"]
[Wed Jan 14 05:19:27.901883 2026] [:error] [pid 24602:tid 24638] [client 20.187.120.186:5060] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "aWa230ooYwabcb9R9fw4fAAAAEA"]
[Wed Jan 14 05:19:28.135764 2026] [:error] [pid 58699:tid 58720] [client 20.187.120.186:4864] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "aWa24OYdPBtkMLK2SdqrGQAAARI"]
[Wed Jan 14 05:19:28.369775 2026] [:error] [pid 58899:tid 58904] [client 20.187.120.186:5092] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "aWa24AWViGQd5R44tHF0DQAAAYE"]
[Wed Jan 14 05:19:28.620628 2026] [:error] [pid 59074:tid 59079] [client 20.187.120.186:5094] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "aWa24E_KrJ818pzhB3xl5wAAAkM"]
[Wed Jan 14 05:19:28.863839 2026] [:error] [pid 24602:tid 24640] [client 20.187.120.186:4934] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aWa24EooYwabcb9R9fw4fQAAAEI"]
[Wed Jan 14 05:19:29.112916 2026] [:error] [pid 24710:tid 24712] [client 20.187.120.186:4969] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Jan 14 05:19:30.470589 2026] [:error] [pid 24710:tid 24724] [client 20.187.120.186:4969] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa24mXBo5bEhDEEhs1ilAAAAMw"]
[Wed Jan 14 05:19:30.735931 2026] [:error] [pid 24710:tid 24734] [client 20.187.120.186:5034] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa24mXBo5bEhDEEhs1ilQAAANY"]
[Wed Jan 14 05:19:30.973082 2026] [:error] [pid 24602:tid 24657] [client 20.187.120.186:4968] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa24kooYwabcb9R9fw4fwAAAFM"]
[Wed Jan 14 05:19:31.218934 2026] [:error] [pid 24710:tid 24723] [client 20.187.120.186:5047] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/app/core/extensions.php"] [unique_id "aWa242XBo5bEhDEEhs1ilgAAAMs"]
[Wed Jan 14 05:19:31.461013 2026] [:error] [pid 24710:tid 24733] [client 20.187.120.186:4940] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/corrected.php"] [unique_id "aWa242XBo5bEhDEEhs1imAAAANU"]
[Wed Jan 14 05:19:31.697513 2026] [:error] [pid 24710:tid 24719] [client 20.187.120.186:4883] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/corrected.php"] [unique_id "aWa242XBo5bEhDEEhs1imQAAAMc"]
[Wed Jan 14 05:19:31.934348 2026] [:error] [pid 24710:tid 24716] [client 20.187.120.186:5111] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/corrected.php"] [unique_id "aWa242XBo5bEhDEEhs1imgAAAMQ"]
[Wed Jan 14 05:19:32.174430 2026] [:error] [pid 24710:tid 24726] [client 20.187.120.186:4870] [client 20.187.120.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w/corrected.php"] [unique_id "aWa25GXBo5bEhDEEhs1imwAAAM4"]
[Wed Jan 14 06:06:39.987381 2026] [:error] [pid 24710:tid 24731] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:06:40.108372 2026] [:error] [pid 24710:tid 24714] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:06:40.229180 2026] [:error] [pid 24710:tid 24732] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.com/
[Wed Jan 14 06:06:40.351099 2026] [:error] [pid 24710:tid 24734] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:06:40.474176 2026] [:error] [pid 24710:tid 24733] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:06:40.594942 2026] [:error] [pid 24710:tid 24716] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.fr/
[Wed Jan 14 06:06:40.715350 2026] [:error] [pid 24710:tid 24718] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:06:40.836390 2026] [:error] [pid 24710:tid 24727] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:06:40.957388 2026] [:error] [pid 24710:tid 24729] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:06:41.079153 2026] [:error] [pid 24710:tid 24712] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:06:41.202971 2026] [:error] [pid 24710:tid 24717] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:06:41.324243 2026] [:error] [pid 24710:tid 24724] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://duckduckgo.com/
[Wed Jan 14 06:06:41.445085 2026] [:error] [pid 24710:tid 24723] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.fr/
[Wed Jan 14 06:06:41.567838 2026] [:error] [pid 24710:tid 24721] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:06:41.688627 2026] [:error] [pid 24710:tid 24730] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:06:41.810206 2026] [:error] [pid 24710:tid 24736] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php, referer: https://www.yahoo.com/
[Wed Jan 14 06:06:41.930288 2026] [:error] [pid 24710:tid 24720] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php, referer: https://www.google.fr/
[Wed Jan 14 06:06:42.060517 2026] [:error] [pid 24710:tid 24728] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Wed Jan 14 06:06:42.191212 2026] [:error] [pid 24710:tid 24735] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.fr/
[Wed Jan 14 06:06:42.452327 2026] [:error] [pid 24710:tid 24715] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.co.uk/
[Wed Jan 14 06:06:42.589939 2026] [:error] [pid 24710:tid 24725] [client 104.208.97.94:55185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.de/
[Wed Jan 14 06:06:44.704882 2026] [:error] [pid 24710:tid 24722] [client 104.208.97.94:55185] [client 104.208.97.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aWbB9GXBo5bEhDEEhs1uNgAAAMo"], referer: https://www.google.co.uk/
[Wed Jan 14 09:05:25.810460 2026] [:error] [pid 37034:tid 37051] [client 43.157.38.228:49006] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWbr1fpIliqezwCf6Q0aKAAAAM8"]
[Wed Jan 14 10:29:14.610262 2026] [:error] [pid 36986:tid 37006] [client 170.106.148.137:52648] [client 170.106.148.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWb_ete0JvHv1YdpWx7vlAAAAJE"]
[Wed Jan 14 10:45:08.429538 2026] [:error] [pid 19187:tid 19201] [client 139.59.31.182:50989] [client 139.59.31.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.31.182, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWcDNM9QVhFYhOfPPbPYXQAAAEk"]
[Wed Jan 14 10:45:08.433216 2026] [:error] [pid 19187:tid 19201] [client 139.59.31.182:50989] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Jan 14 11:20:02.984741 2026] [:error] [pid 19278:tid 19298] [client 111.172.249.49:36075] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWcLYlGofyyxZQcTd1VahwAAABI"]
[Wed Jan 14 12:43:40.484116 2026] [:error] [pid 19278:tid 19294] [client 43.153.10.83:59342] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWce_FGofyyxZQcTd1VrCgAAAA4"]
[Wed Jan 14 13:31:25.511341 2026] [:error] [pid 19278:tid 19281] [client 209.38.34.4:56696] [client 209.38.34.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.38.34.4, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWcqLVGofyyxZQcTd1V0mAAAAAE"]
[Wed Jan 14 13:31:25.515273 2026] [:error] [pid 19278:tid 19281] [client 209.38.34.4:56696] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Jan 14 18:59:26.720697 2026] [:error] [pid 61468:tid 61478] [client 43.159.152.187:45386] [client 43.159.152.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWd3DtfEBBL2jp9TJvKxqgAAAIc"]
[Wed Jan 14 19:53:22.281781 2026] [:error] [pid 61468:tid 61493] [client 35.180.66.247:40948] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aWeDstfEBBL2jp9TJvK6tgAAAJY"]
[Wed Jan 14 19:53:23.466320 2026] [:error] [pid 61468:tid 61476] [client 35.180.66.247:41096] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aWeDs9fEBBL2jp9TJvK6uQAAAIU"]
[Wed Jan 14 19:53:25.828933 2026] [:error] [pid 61377:tid 61430] [client 35.180.66.247:41362] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/backup.sql"] [unique_id "aWeDtcx0Xs4tcq6R-WhmowAAAdQ"]
[Wed Jan 14 19:53:27.032106 2026] [:error] [pid 61377:tid 61432] [client 35.180.66.247:41480] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/debug.log"] [unique_id "aWeDt8x0Xs4tcq6R-WhmpAAAAdY"]
[Wed Jan 14 19:53:28.227919 2026] [:error] [pid 61377:tid 61420] [client 35.180.66.247:41596] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/database.sql"] [unique_id "aWeDuMx0Xs4tcq6R-WhmqAAAAco"]
[Wed Jan 14 19:53:29.402094 2026] [:error] [pid 61468:tid 61490] [client 35.180.66.247:41724] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "aWeDudfEBBL2jp9TJvK6wgAAAJM"]
[Wed Jan 14 19:53:35.346938 2026] [:error] [pid 61377:tid 61420] [client 35.180.66.247:42354] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/dump.sql"] [unique_id "aWeDv8x0Xs4tcq6R-WhmsQAAAco"]
[Wed Jan 14 19:53:37.598208 2026] [:error] [pid 61377:tid 61419] [client 35.180.66.247:42620] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aWeDwcx0Xs4tcq6R-WhmuAAAAck"]
[Wed Jan 14 19:53:38.724037 2026] [:error] [pid 61377:tid 61415] [client 35.180.66.247:42742] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/log/error.log"] [unique_id "aWeDwsx0Xs4tcq6R-WhmvQAAAcU"]
[Wed Jan 14 19:53:39.850759 2026] [:error] [pid 61468:tid 61481] [client 35.180.66.247:42864] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "aWeDw9fEBBL2jp9TJvK6xgAAAIo"]
[Wed Jan 14 19:53:42.135742 2026] [:error] [pid 21490:tid 21493] [client 35.180.66.247:43152] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Wed Jan 14 19:53:44.422325 2026] [:error] [pid 61378:tid 61447] [client 35.180.66.247:43614] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aWeDyBGjJjuJmoPOtlo6GAAAAAo"]
[Wed Jan 14 19:53:45.573313 2026] [:error] [pid 61377:tid 61419] [client 35.180.66.247:43886] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Jan 14 19:53:46.716456 2026] [:error] [pid 7961:tid 7968] [client 35.180.66.247:44110] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aWeDypjhjzEJ3QX9Hub96gAAAEU"]
[Wed Jan 14 19:53:47.863827 2026] [:error] [pid 61376:tid 61398] [client 35.180.66.247:44318] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aWeDy6jRUNDW2YrxZG5b6QAAAVE"]
[Wed Jan 14 19:53:48.998525 2026] [:error] [pid 61468:tid 61478] [client 35.180.66.247:44618] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aWeDzNfEBBL2jp9TJvK61AAAAIc"]
[Wed Jan 14 19:53:50.128777 2026] [:error] [pid 21490:tid 21512] [client 35.180.66.247:44910] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/laravel/.env"] [unique_id "aWeDzu26AHzy1muKyudC6gAAARM"]
[Wed Jan 14 19:53:51.255929 2026] [:error] [pid 8057:tid 8070] [client 35.180.66.247:45204] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Wed Jan 14 19:53:52.382603 2026] [:error] [pid 21490:tid 21496] [client 35.180.66.247:45376] [client 35.180.66.247] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aWeD0O26AHzy1muKyudC7AAAAQM"]
[Wed Jan 14 22:50:31.373424 2026] [:error] [pid 8057:tid 8068] [client 43.156.202.34:43032] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWetN7FNJ5k8MCPHoPUttQAAAMk"]
[Thu Jan 15 00:20:45.324114 2026] [:error] [pid 23264:tid 23288] [client 106.119.167.146:56426] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWfCXTxGR-Yo9U5nM0Bl9gAAAVQ"]
[Thu Jan 15 01:11:17.804207 2026] [:error] [pid 23264:tid 23281] [client 43.159.140.236:56232] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWfONTxGR-Yo9U5nM0Bw7wAAAU0"]
[Thu Jan 15 04:00:14.713187 2026] [:error] [pid 5389:tid 5393] [client 152.57.125.208:58694] [client 152.57.125.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.57.125.208, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWf1zkkzfklDSWCNrVIQ4QAAAMI"]
[Thu Jan 15 04:00:14.717967 2026] [:error] [pid 5389:tid 5393] [client 152.57.125.208:58694] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 15 04:58:15.906159 2026] [:error] [pid 51807:tid 51811] [client 142.93.102.171:44544] [client 142.93.102.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aWgDZ8MrH4_ge4gLwN3XqAAAAQI"]
[Thu Jan 15 05:53:53.322805 2026] [:error] [pid 51807:tid 51813] [client 49.51.233.46:43724] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWgQccMrH4_ge4gLwN30_gAAAQQ"]
[Thu Jan 15 08:31:30.892797 2026] [:error] [pid 5389:tid 5402] [client 43.157.50.58:47882] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWg1YkkzfklDSWCNrVKDewAAAMs"]
[Thu Jan 15 10:06:24.186633 2026] [:error] [pid 51857:tid 51864] [client 43.155.188.157:39528] [client 43.155.188.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWhLoHDlXoqhkNNyf_yYzQAAAUU"]
[Thu Jan 15 12:30:17.668491 2026] [:error] [pid 5292:tid 5355] [client 175.6.217.4:42438] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWhtWWWxK-ai3L9DjxZtqAAAAIA"]
[Thu Jan 15 12:36:39.607353 2026] [:error] [pid 51807:tid 51823] [client 43.155.140.157:36180] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWhu18MrH4_ge4gLwN2OOQAAAQ4"]
[Thu Jan 15 14:58:13.597500 2026] [:error] [pid 51857:tid 51864] [client 162.62.213.187:58482] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWiQBXDlXoqhkNNyf_w2nwAAAUU"]
[Thu Jan 15 21:09:36.982688 2026] [:error] [pid 5290:tid 5317] [client 43.155.195.141:47604] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWjnEDiQRfcmyoePXPfKsgAAABI"]
[Thu Jan 15 21:33:56.356394 2026] [:error] [pid 5389:tid 5400] [client 34.48.29.118:61316] [client 34.48.29.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.48.29.118, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjsxEkzfklDSWCNrVKORgAAAMk"]
[Thu Jan 15 21:33:56.361660 2026] [:error] [pid 5389:tid 5400] [client 34.48.29.118:61316] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 15 21:34:00.033385 2026] [:error] [pid 5389:tid 5392] [client 34.48.29.118:61316] [client 34.48.29.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWjsyEkzfklDSWCNrVKOVQAAAME"]
[Thu Jan 15 21:34:00.461373 2026] [:error] [pid 21666:tid 21677] [client 34.48.29.118:52249] [client 34.48.29.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWjsyKM9zD2y6IZZ4RRpAAAAAYY"]
[Thu Jan 15 21:34:00.894328 2026] [:error] [pid 5389:tid 5400] [client 34.48.29.118:59781] [client 34.48.29.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWjsyEkzfklDSWCNrVKOVgAAAMk"]
[Thu Jan 15 21:34:01.343697 2026] [:error] [pid 21666:tid 21672] [client 34.48.29.118:52521] [client 34.48.29.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWjsyaM9zD2y6IZZ4RRpAgAAAYE"]
[Thu Jan 15 21:34:01.769142 2026] [:error] [pid 5291:tid 5334] [client 34.48.29.118:59859] [client 34.48.29.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWjsyTp5twZ54fay3Rfb7wAAAEc"]
[Thu Jan 15 21:34:02.194294 2026] [:error] [pid 5389:tid 5412] [client 34.48.29.118:63983] [client 34.48.29.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWjsykkzfklDSWCNrVKOWgAAANU"]
[Thu Jan 15 21:35:01.386658 2026] [:error] [pid 5291:tid 5341] [client 35.236.220.47:65467] [client 35.236.220.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.236.220.47, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWjtBTp5twZ54fay3RfcOgAAAE4"]
[Thu Jan 15 21:35:01.390318 2026] [:error] [pid 5291:tid 5341] [client 35.236.220.47:65467] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 15 21:35:03.845834 2026] [:error] [pid 5291:tid 5332] [client 35.236.220.47:65467] [client 35.236.220.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWjtBzp5twZ54fay3RfcRQAAAEU"]
[Thu Jan 15 21:35:04.285478 2026] [:error] [pid 51857:tid 51876] [client 35.236.220.47:50479] [client 35.236.220.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWjtCHDlXoqhkNNyf_y30QAAAVE"]
[Thu Jan 15 21:35:04.718217 2026] [:error] [pid 51857:tid 51870] [client 35.236.220.47:60758] [client 35.236.220.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWjtCHDlXoqhkNNyf_y30gAAAUs"]
[Thu Jan 15 21:35:05.142446 2026] [:error] [pid 51807:tid 51818] [client 35.236.220.47:62658] [client 35.236.220.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWjtCcMrH4_ge4gLwN0umwAAAQk"]
[Thu Jan 15 21:35:05.565598 2026] [:error] [pid 5389:tid 5398] [client 35.236.220.47:55449] [client 35.236.220.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWjtCUkzfklDSWCNrVKOigAAAMc"]
[Thu Jan 15 21:35:05.995058 2026] [:error] [pid 21666:tid 21672] [client 35.236.220.47:56359] [client 35.236.220.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWjtCaM9zD2y6IZZ4RRpNgAAAYE"]
[Thu Jan 15 23:21:05.034227 2026] [:error] [pid 21666:tid 21671] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/ver.php
[Thu Jan 15 23:21:05.245258 2026] [:error] [pid 21666:tid 21680] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/ultra.php
[Thu Jan 15 23:21:05.455483 2026] [:error] [pid 21666:tid 21691] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/pro.php
[Thu Jan 15 23:21:05.680178 2026] [:error] [pid 21666:tid 21693] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Jan 15 23:21:05.900174 2026] [:error] [pid 21666:tid 21676] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Thu Jan 15 23:21:06.109606 2026] [:error] [pid 21666:tid 21683] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/data.php
[Thu Jan 15 23:21:06.320181 2026] [:error] [pid 21666:tid 21695] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Jan 15 23:21:06.529221 2026] [:error] [pid 21666:tid 21682] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Thu Jan 15 23:21:06.754836 2026] [:error] [pid 21666:tid 21681] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Jan 15 23:21:06.973029 2026] [:error] [pid 21666:tid 21687] [client 4.206.43.241:1498] File does not exist: /usr/local/apache/htdocs/suspended-page/image.php
[Thu Jan 15 23:21:07.181235 2026] [:error] [pid 21666:tid 21679] [client 4.206.43.241:1498] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aWkF46M9zD2y6IZZ4RSIzQAAAYg"]
[Thu Jan 15 23:21:13.308732 2026] [:error] [pid 51807:tid 51825] [client 4.206.43.241:1607] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aWkF6cMrH4_ge4gLwN1EmQAAARA"]
[Thu Jan 15 23:21:28.892257 2026] [:error] [pid 51807:tid 51831] [client 4.206.43.241:1500] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWkF-MMrH4_ge4gLwN1EqQAAARY"]
[Thu Jan 15 23:21:35.542821 2026] [:error] [pid 5291:tid 5345] [client 4.206.43.241:1485] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWkF_zp5twZ54fay3RfzYwAAAFI"]
[Thu Jan 15 23:21:36.740419 2026] [:error] [pid 51857:tid 51860] [client 4.206.43.241:1503] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWkGAHDlXoqhkNNyf_zbqAAAAUE"]
[Thu Jan 15 23:21:39.550863 2026] [:error] [pid 5290:tid 5301] [client 4.206.43.241:1609] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/check.php"] [unique_id "aWkGAziQRfcmyoePXPflGAAAAAI"]
[Thu Jan 15 23:21:48.792011 2026] [:error] [pid 5292:tid 5362] [client 4.206.43.241:1643] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-header-json.php"] [unique_id "aWkGDGWxK-ai3L9DjxZNAwAAAIc"]
[Thu Jan 15 23:21:57.738972 2026] [:error] [pid 51807:tid 51822] [client 4.206.43.241:1632] [client 4.206.43.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-header-json.php"] [unique_id "aWkGFcMrH4_ge4gLwN1EzAAAAQ0"]
[Thu Jan 15 23:23:27.609495 2026] [:error] [pid 51857:tid 51871] [client 4.206.43.241:1605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Jan 15 23:23:27.817415 2026] [:error] [pid 51857:tid 51862] [client 4.206.43.241:1605] [client 4.206.43.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.206.43.241, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWkGb3DlXoqhkNNyf_zcjgAAAUM"]
[Thu Jan 15 23:23:27.820751 2026] [:error] [pid 51857:tid 51862] [client 4.206.43.241:1605] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Jan 15 23:23:28.045298 2026] [:error] [pid 51857:tid 51863] [client 4.206.43.241:1605] File does not exist: /usr/local/apache/htdocs/suspended-page/file56.php
[Thu Jan 15 23:23:28.254368 2026] [:error] [pid 51857:tid 51865] [client 4.206.43.241:1605] File does not exist: /usr/local/apache/htdocs/suspended-page/990.php
[Thu Jan 15 23:23:28.597783 2026] [:error] [pid 51857:tid 51881] [client 4.206.43.241:1605] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Jan 15 23:23:28.823585 2026] [:error] [pid 51857:tid 51875] [client 4.206.43.241:1605] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Jan 15 23:23:29.032170 2026] [:error] [pid 51857:tid 51871] [client 4.206.43.241:1605] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Jan 16 03:57:13.809109 2026] [:error] [pid 4657:tid 4732] [client 43.135.36.201:54412] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWlGmSTED8rXaYv2tKa9AAAAAI4"]
[Fri Jan 16 07:22:09.025302 2026] [:error] [pid 43435:tid 43438] [client 101.91.148.219:51722] [client 101.91.148.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWl2ocTShPLPoPKNBO1ioAAAAQE"]
[Fri Jan 16 15:13:55.286733 2026] [:error] [pid 30865:tid 30876] [client 35.185.112.49:60831] [client 35.185.112.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.185.112.49, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWnlMxCR_HCYGnC3FS-IZAAAAUg"]
[Fri Jan 16 15:13:55.290365 2026] [:error] [pid 30865:tid 30876] [client 35.185.112.49:60831] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Jan 16 15:13:59.002577 2026] [:error] [pid 30865:tid 30869] [client 35.185.112.49:60831] [client 35.185.112.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWnlNxCR_HCYGnC3FS-IcQAAAUE"]
[Fri Jan 16 15:13:59.468841 2026] [:error] [pid 30957:tid 30981] [client 35.185.112.49:50701] [client 35.185.112.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWnlN92pbRtnni7K9w_weQAAAFU"]
[Fri Jan 16 15:13:59.884883 2026] [:error] [pid 30925:tid 30950] [client 35.185.112.49:61488] [client 35.185.112.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWnlN7Pyx6TwF5dNaFp3LQAAAZc"]
[Fri Jan 16 15:14:00.358916 2026] [:error] [pid 30957:tid 30961] [client 35.185.112.49:57231] [client 35.185.112.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWnlON2pbRtnni7K9w_wfgAAAEE"]
[Fri Jan 16 15:14:00.871266 2026] [:error] [pid 30957:tid 30962] [client 35.185.112.49:51072] [client 35.185.112.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWnlON2pbRtnni7K9w_whAAAAEI"]
[Fri Jan 16 15:14:01.396029 2026] [:error] [pid 30957:tid 30961] [client 35.185.112.49:51121] [client 35.185.112.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWnlOd2pbRtnni7K9w_wigAAAEE"]
[Fri Jan 16 17:02:57.901651 2026] [:error] [pid 54008:tid 54028] [client 84.247.169.220:63968] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWn-wceowS6CyLOmCzOkMgAAAJI"]
[Fri Jan 16 17:02:59.186834 2026] [:error] [pid 30865:tid 30888] [client 84.247.169.220:64083] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-json/wc/v3/payment_gateways"] [unique_id "aWn-wxCR_HCYGnC3FS-z_QAAAVQ"]
[Fri Jan 16 17:03:00.538986 2026] [:error] [pid 30865:tid 30885] [client 84.247.169.220:64212] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aWn-xBCR_HCYGnC3FS-z_wAAAVE"]
[Fri Jan 16 17:03:01.951300 2026] [:error] [pid 54008:tid 54020] [client 84.247.169.220:64326] [client 84.247.169.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aWn-xceowS6CyLOmCzOkOQAAAIo"]
[Sat Jan 17 02:20:51.316408 2026] [:error] [pid 30957:tid 30960] [client 14.215.163.132:50253] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWqBg92pbRtnni7K9w-_9wAAAEA"]
[Sat Jan 17 04:28:19.723710 2026] [:error] [pid 31698:tid 31725] [client 193.36.224.123:21143] [client 193.36.224.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.224.123, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aWqfY7jKZJSxKAfZqrIJHwAAARc"]
[Sat Jan 17 04:28:19.728567 2026] [:error] [pid 31698:tid 31725] [client 193.36.224.123:21143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Jan 17 08:28:56.065939 2026] [:error] [pid 31224:tid 31284] [client 223.244.35.77:35739] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWrXyDgpVpEMk8-OQkiQlgAAAFc"]
[Sat Jan 17 09:37:37.967363 2026] [:error] [pid 31322:tid 31339] [client 43.135.182.43:59602] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWrn4XxOW98yk2MBlypY8wAAAMU"]
[Sat Jan 17 10:08:30.743698 2026] [:error] [pid 31322:tid 31357] [client 43.166.250.187:52580] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWrvHnxOW98yk2MBlypewwAAANc"]
[Sat Jan 17 13:20:03.098992 2026] [:error] [pid 31223:tid 31235] [client 43.131.253.14:37118] [client 43.131.253.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWscA0Mnpeq0T1sEOlKgcwAAAAI"]
[Sat Jan 17 15:08:16.910599 2026] [:error] [pid 31224:tid 31270] [client 39.63.53.95:64177] [client 39.63.53.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.63.53.95, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWs1YDgpVpEMk8-OQkjbRgAAAEk"]
[Sat Jan 17 15:08:16.915489 2026] [:error] [pid 31224:tid 31270] [client 39.63.53.95:64177] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 17 18:08:33.650079 2026] [:error] [pid 31225:tid 31295] [client 43.130.3.122:48184] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWtfoenu2L2yWFDbzyXTRwAAAIc"]
[Sat Jan 17 21:22:11.889247 2026] [:error] [pid 31322:tid 31350] [client 182.42.110.255:49329] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWuNA3xOW98yk2MBlyrr1gAAANA"]
[Sat Jan 17 22:37:25.271738 2026] [:error] [pid 31322:tid 31357] [client 34.83.244.131:59278] [client 34.83.244.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.244.131, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aWuepXxOW98yk2MBlyr6cgAAANc"]
[Sat Jan 17 22:37:25.275115 2026] [:error] [pid 31322:tid 31357] [client 34.83.244.131:59278] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 17 22:37:28.980543 2026] [:error] [pid 31322:tid 31354] [client 34.83.244.131:59278] [client 34.83.244.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aWueqHxOW98yk2MBlyr6gQAAANQ"]
[Sat Jan 17 22:37:29.355091 2026] [:error] [pid 31225:tid 31295] [client 34.83.244.131:63935] [client 34.83.244.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aWueqenu2L2yWFDbzyUlEgAAAIc"]
[Sat Jan 17 22:37:29.714018 2026] [:error] [pid 31322:tid 31344] [client 34.83.244.131:52841] [client 34.83.244.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aWueqXxOW98yk2MBlyr6ggAAAMo"]
[Sat Jan 17 22:37:30.070501 2026] [:error] [pid 31225:tid 31305] [client 34.83.244.131:58144] [client 34.83.244.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aWuequnu2L2yWFDbzyUlFAAAAJE"]
[Sat Jan 17 22:37:30.481714 2026] [:error] [pid 31223:tid 31246] [client 34.83.244.131:52095] [client 34.83.244.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aWueqkMnpeq0T1sEOlIE-AAAAA0"]
[Sat Jan 17 22:37:30.833360 2026] [:error] [pid 31225:tid 31288] [client 34.83.244.131:52675] [client 34.83.244.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aWuequnu2L2yWFDbzyUlGAAAAIA"]
[Sat Jan 17 22:37:31.246082 2026] [:error] [pid 31225:tid 31307] [client 34.83.244.131:63662] [client 34.83.244.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aWueq-nu2L2yWFDbzyUlGQAAAJM"]
[Sun Jan 18 00:41:23.931620 2026] [:error] [pid 31224:tid 31283] [client 43.157.148.38:57566] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWu7szgpVpEMk8-OQkhosQAAAFY"]
[Sun Jan 18 02:26:28.823837 2026] [:error] [pid 31225:tid 31288] [client 207.231.110.18:63826] [client 207.231.110.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aWvUVOnu2L2yWFDbzyVKIAAAAIA"]
[Sun Jan 18 06:20:31.934252 2026] [:error] [pid 12923:tid 12955] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/lisa.php
[Sun Jan 18 06:20:32.187026 2026] [:error] [pid 12923:tid 12954] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sun Jan 18 06:20:32.439446 2026] [:error] [pid 12923:tid 12935] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/abt.php
[Sun Jan 18 06:20:32.692200 2026] [:error] [pid 12923:tid 12949] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun Jan 18 06:20:32.945213 2026] [:error] [pid 12923:tid 12934] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Sun Jan 18 06:20:33.200132 2026] [:error] [pid 12923:tid 12946] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/alex.php
[Sun Jan 18 06:20:33.452565 2026] [:error] [pid 12923:tid 12941] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sun Jan 18 06:20:33.705137 2026] [:error] [pid 12923:tid 12952] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/t1.php
[Sun Jan 18 06:20:33.965775 2026] [:error] [pid 12923:tid 12944] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Sun Jan 18 06:20:34.218788 2026] [:error] [pid 12923:tid 12933] [client 52.164.187.143:8686] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Jan 18 06:20:34.468658 2026] [:error] [pid 12923:tid 12951] [client 52.164.187.143:8686] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aWwLMusWURrrC-4Rx5KTcwAAABM"]
[Sun Jan 18 06:20:34.973143 2026] [:error] [pid 13034:tid 13049] [client 52.164.187.143:11082] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aWwLMsRGpUu1E8cmbmga1wAAAMs"]
[Sun Jan 18 06:20:35.487669 2026] [:error] [pid 13034:tid 13047] [client 52.164.187.143:7117] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aWwLM8RGpUu1E8cmbmga2gAAAMk"]
[Sun Jan 18 06:20:35.988342 2026] [:error] [pid 12924:tid 12970] [client 52.164.187.143:14687] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aWwLMyuv3PUo9LR6V6YphwAAAEo"]
[Sun Jan 18 06:20:36.529033 2026] [:error] [pid 12924:tid 12968] [client 52.164.187.143:5291] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aWwLNCuv3PUo9LR6V6YpiQAAAEg"]
[Sun Jan 18 06:20:37.043830 2026] [:error] [pid 12924:tid 12967] [client 52.164.187.143:2153] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aWwLNSuv3PUo9LR6V6YpiwAAAEc"]
[Sun Jan 18 06:20:37.555432 2026] [:error] [pid 12924:tid 12960] [client 52.164.187.143:13772] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aWwLNSuv3PUo9LR6V6YpjAAAAEA"]
[Sun Jan 18 06:20:38.213344 2026] [:error] [pid 12923:tid 12932] [client 52.164.187.143:2162] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfile.php"] [unique_id "aWwLNusWURrrC-4Rx5KTdQAAAAA"]
[Sun Jan 18 06:20:38.778332 2026] [:error] [pid 12924:tid 12976] [client 52.164.187.143:7135] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aWwLNiuv3PUo9LR6V6YpjwAAAFA"]
[Sun Jan 18 06:20:39.282248 2026] [:error] [pid 12924:tid 12965] [client 52.164.187.143:13229] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aWwLNyuv3PUo9LR6V6YpkQAAAEU"]
[Sun Jan 18 06:20:39.789794 2026] [:error] [pid 13034:tid 13055] [client 52.164.187.143:13224] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aWwLN8RGpUu1E8cmbmga2wAAANE"]
[Sun Jan 18 06:20:40.298357 2026] [:error] [pid 13034:tid 13042] [client 52.164.187.143:2988] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "aWwLOMRGpUu1E8cmbmga3AAAAMQ"]
[Sun Jan 18 06:20:40.804986 2026] [:error] [pid 12925:tid 13003] [client 52.164.187.143:9121] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aWwLOPsBL-4pnmSbzihENgAAAI8"]
[Sun Jan 18 06:20:41.640632 2026] [:error] [pid 12924:tid 12974] [client 52.164.187.143:14985] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aWwLOSuv3PUo9LR6V6YplgAAAE4"]
[Sun Jan 18 06:20:42.154452 2026] [:error] [pid 12924:tid 12961] [client 52.164.187.143:5047] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aWwLOiuv3PUo9LR6V6YpmQAAAEE"]
[Sun Jan 18 06:20:42.676135 2026] [:error] [pid 12923:tid 12947] [client 52.164.187.143:8666] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aWwLOusWURrrC-4Rx5KTegAAAA8"]
[Sun Jan 18 06:20:43.371649 2026] [:error] [pid 12925:tid 12993] [client 52.164.187.143:2968] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aWwLO_sBL-4pnmSbzihENwAAAIU"]
[Sun Jan 18 06:20:43.873738 2026] [:error] [pid 12925:tid 13012] [client 52.164.187.143:13950] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aWwLO_sBL-4pnmSbzihEOQAAAJg"]
[Sun Jan 18 06:20:44.435660 2026] [:error] [pid 12923:tid 12954] [client 52.164.187.143:5974] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aWwLPOsWURrrC-4Rx5KTfAAAABY"]
[Sun Jan 18 06:20:44.982495 2026] [:error] [pid 12923:tid 12935] [client 52.164.187.143:7126] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f8.php"] [unique_id "aWwLPOsWURrrC-4Rx5KTfgAAAAM"]
[Sun Jan 18 06:20:45.616879 2026] [:error] [pid 12925:tid 13005] [client 52.164.187.143:6015] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aWwLPfsBL-4pnmSbzihEOwAAAJE"]
[Sun Jan 18 06:20:46.162305 2026] [:error] [pid 12925:tid 13004] [client 52.164.187.143:12094] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aWwLPvsBL-4pnmSbzihEPAAAAJA"]
[Sun Jan 18 06:20:46.660725 2026] [:error] [pid 12923:tid 12944] [client 52.164.187.143:14734] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aWwLPusWURrrC-4Rx5KTggAAAAw"]
[Sun Jan 18 06:20:47.164223 2026] [:error] [pid 12923:tid 12956] [client 52.164.187.143:14759] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "aWwLP-sWURrrC-4Rx5KTgwAAABg"]
[Sun Jan 18 06:20:47.661764 2026] [:error] [pid 12925:tid 12997] [client 52.164.187.143:2997] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aWwLP_sBL-4pnmSbzihEPgAAAIk"]
[Sun Jan 18 06:20:48.160482 2026] [:error] [pid 12925:tid 13007] [client 52.164.187.143:15782] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aWwLQPsBL-4pnmSbzihEQAAAAJM"]
[Sun Jan 18 06:20:48.664992 2026] [:error] [pid 13034:tid 13038] [client 52.164.187.143:15769] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aWwLQMRGpUu1E8cmbmga4AAAAMI"]
[Sun Jan 18 06:20:49.172932 2026] [:error] [pid 12925:tid 13001] [client 52.164.187.143:5037] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/esp.php"] [unique_id "aWwLQfsBL-4pnmSbzihEQgAAAI0"]
[Sun Jan 18 06:20:49.776981 2026] [:error] [pid 12925:tid 12994] [client 52.164.187.143:9669] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/21x.php"] [unique_id "aWwLQfsBL-4pnmSbzihERQAAAIY"]
[Sun Jan 18 06:20:50.367716 2026] [:error] [pid 12925:tid 12988] [client 52.164.187.143:9689] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/out.php"] [unique_id "aWwLQvsBL-4pnmSbzihERgAAAIA"]
[Sun Jan 18 06:20:50.892104 2026] [:error] [pid 12923:tid 12948] [client 52.164.187.143:15015] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aWwLQusWURrrC-4Rx5KThgAAABA"]
[Sun Jan 18 06:20:51.408525 2026] [:error] [pid 12925:tid 12996] [client 52.164.187.143:15016] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aWwLQ_sBL-4pnmSbzihERwAAAIg"]
[Sun Jan 18 06:20:51.909647 2026] [:error] [pid 12925:tid 13010] [client 52.164.187.143:2995] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aWwLQ_sBL-4pnmSbzihESAAAAJY"]
[Sun Jan 18 06:20:52.416638 2026] [:error] [pid 12925:tid 13002] [client 52.164.187.143:2673] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aWwLRPsBL-4pnmSbzihESgAAAI4"]
[Sun Jan 18 06:20:53.176774 2026] [:error] [pid 12925:tid 13003] [client 52.164.187.143:8645] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ma.php"] [unique_id "aWwLRfsBL-4pnmSbzihETgAAAI8"]
[Sun Jan 18 06:20:53.809264 2026] [:error] [pid 13034:tid 13043] [client 52.164.187.143:7129] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aWwLRcRGpUu1E8cmbmga7wAAAMU"]
[Sun Jan 18 06:20:54.311370 2026] [:error] [pid 13034:tid 13057] [client 52.164.187.143:9110] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aWwLRsRGpUu1E8cmbmga9AAAANM"]
[Sun Jan 18 06:20:54.925913 2026] [:error] [pid 12924:tid 12977] [client 52.164.187.143:15028] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aWwLRiuv3PUo9LR6V6YpngAAAFE"]
[Sun Jan 18 06:20:55.482961 2026] [:error] [pid 12924:tid 12984] [client 52.164.187.143:2121] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanz.php"] [unique_id "aWwLRyuv3PUo9LR6V6YpoAAAAFg"]
[Sun Jan 18 06:20:55.994142 2026] [:error] [pid 12923:tid 12947] [client 52.164.187.143:4913] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aWwLR-sWURrrC-4Rx5KTiAAAAA8"]
[Sun Jan 18 06:20:56.534446 2026] [:error] [pid 12923:tid 12954] [client 52.164.187.143:5591] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aWwLSOsWURrrC-4Rx5KTiQAAABY"]
[Sun Jan 18 06:20:57.036904 2026] [:error] [pid 12923:tid 12949] [client 52.164.187.143:5009] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aWwLSesWURrrC-4Rx5KTiwAAABE"]
[Sun Jan 18 06:20:57.538703 2026] [:error] [pid 12923:tid 12952] [client 52.164.187.143:2971] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeeex.php"] [unique_id "aWwLSesWURrrC-4Rx5KTjQAAABQ"]
[Sun Jan 18 06:20:58.110095 2026] [:error] [pid 13034:tid 13037] [client 52.164.187.143:3002] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tons.php"] [unique_id "aWwLSsRGpUu1E8cmbmgbBgAAAME"]
[Sun Jan 18 06:20:58.649492 2026] [:error] [pid 13034:tid 13048] [client 52.164.187.143:5587] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aWwLSsRGpUu1E8cmbmgbCAAAAMo"]
[Sun Jan 18 06:20:59.148492 2026] [:error] [pid 12923:tid 12950] [client 52.164.187.143:15009] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aWwLS-sWURrrC-4Rx5KTlAAAABI"]
[Sun Jan 18 06:20:59.662188 2026] [:error] [pid 12923:tid 12940] [client 52.164.187.143:2687] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aWwLS-sWURrrC-4Rx5KTlgAAAAg"]
[Sun Jan 18 06:21:00.162445 2026] [:error] [pid 12925:tid 12993] [client 52.164.187.143:15008] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2f.php"] [unique_id "aWwLTPsBL-4pnmSbzihEXgAAAIU"]
[Sun Jan 18 06:21:00.676462 2026] [:error] [pid 13034:tid 13055] [client 52.164.187.143:15787] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aWwLTMRGpUu1E8cmbmgbDAAAANE"]
[Sun Jan 18 06:21:01.187688 2026] [:error] [pid 12925:tid 13009] [client 52.164.187.143:5100] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aWwLTfsBL-4pnmSbzihEXwAAAJU"]
[Sun Jan 18 06:21:01.687603 2026] [:error] [pid 12924:tid 12963] [client 52.164.187.143:5610] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aWwLTSuv3PUo9LR6V6YpowAAAEM"]
[Sun Jan 18 06:21:02.190097 2026] [:error] [pid 12924:tid 12975] [client 52.164.187.143:2276] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ths.php"] [unique_id "aWwLTiuv3PUo9LR6V6YppAAAAE8"]
[Sun Jan 18 06:21:02.690316 2026] [:error] [pid 12924:tid 12970] [client 52.164.187.143:5581] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aWwLTiuv3PUo9LR6V6YppgAAAEo"]
[Sun Jan 18 06:21:03.192512 2026] [:error] [pid 13034:tid 13051] [client 52.164.187.143:2265] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aWwLT8RGpUu1E8cmbmgbDwAAAM0"]
[Sun Jan 18 06:21:03.715811 2026] [:error] [pid 13034:tid 13056] [client 52.164.187.143:5074] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aWwLT8RGpUu1E8cmbmgbEQAAANI"]
[Sun Jan 18 06:21:04.215892 2026] [:error] [pid 13034:tid 13043] [client 52.164.187.143:9666] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aWwLUMRGpUu1E8cmbmgbEwAAAMU"]
[Sun Jan 18 06:21:04.717375 2026] [:error] [pid 13034:tid 13048] [client 52.164.187.143:5080] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aWwLUMRGpUu1E8cmbmgbFAAAAMo"]
[Sun Jan 18 06:21:05.231708 2026] [:error] [pid 13034:tid 13045] [client 52.164.187.143:2529] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aWwLUcRGpUu1E8cmbmgbFQAAAMc"]
[Sun Jan 18 06:21:05.732964 2026] [:error] [pid 12925:tid 12995] [client 52.164.187.143:5624] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aWwLUfsBL-4pnmSbzihEZgAAAIc"]
[Sun Jan 18 06:21:06.232815 2026] [:error] [pid 13034:tid 13057] [client 52.164.187.143:12695] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/990.php"] [unique_id "aWwLUsRGpUu1E8cmbmgbFgAAANM"]
[Sun Jan 18 06:21:06.761876 2026] [:error] [pid 12923:tid 12945] [client 52.164.187.143:2682] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aWwLUusWURrrC-4Rx5KTpQAAAA0"]
[Sun Jan 18 06:21:07.273315 2026] [:error] [pid 12925:tid 13005] [client 52.164.187.143:12711] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aWwLU_sBL-4pnmSbzihEagAAAJE"]
[Sun Jan 18 06:21:07.782819 2026] [:error] [pid 12925:tid 12999] [client 52.164.187.143:12689] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aWwLU_sBL-4pnmSbzihEbAAAAIs"]
[Sun Jan 18 06:21:08.327839 2026] [:error] [pid 12925:tid 12997] [client 52.164.187.143:10055] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d996699999.php"] [unique_id "aWwLVPsBL-4pnmSbzihEbgAAAIk"]
[Sun Jan 18 06:21:08.830387 2026] [:error] [pid 12923:tid 12948] [client 52.164.187.143:6976] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aWwLVOsWURrrC-4Rx5KTqAAAABA"]
[Sun Jan 18 06:21:09.333331 2026] [:error] [pid 12923:tid 12954] [client 52.164.187.143:13905] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aWwLVesWURrrC-4Rx5KTqQAAABY"]
[Sun Jan 18 06:21:09.891325 2026] [:error] [pid 13034:tid 13058] [client 52.164.187.143:14991] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aWwLVcRGpUu1E8cmbmgbGgAAANQ"]
[Sun Jan 18 06:21:10.397839 2026] [:error] [pid 13034:tid 13055] [client 52.164.187.143:5745] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ierne.php"] [unique_id "aWwLVsRGpUu1E8cmbmgbGwAAANE"]
[Sun Jan 18 06:21:10.939831 2026] [:error] [pid 12924:tid 12982] [client 52.164.187.143:4901] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aWwLViuv3PUo9LR6V6YpqQAAAFY"]
[Sun Jan 18 06:21:11.473567 2026] [:error] [pid 12923:tid 12932] [client 52.164.187.143:7755] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aWwLV-sWURrrC-4Rx5KTqwAAAAA"]
[Sun Jan 18 06:21:11.981645 2026] [:error] [pid 12925:tid 13003] [client 52.164.187.143:7006] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aWwLV_sBL-4pnmSbzihEdgAAAI8"]
[Sun Jan 18 06:21:12.480494 2026] [:error] [pid 12925:tid 13005] [client 52.164.187.143:2517] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aWwLWPsBL-4pnmSbzihEeAAAAJE"]
[Sun Jan 18 06:21:13.018059 2026] [:error] [pid 12925:tid 13007] [client 52.164.187.143:5440] [client 52.164.187.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aWwLWfsBL-4pnmSbzihEegAAAJM"]
[Sun Jan 18 08:00:59.088289 2026] [:error] [pid 12923:tid 12947] [client 23.26.108.188:50502] [client 23.26.108.188] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWwiu-sWURrrC-4Rx5KvBgAAAA8"]
[Sun Jan 18 10:06:03.811161 2026] [:error] [pid 13034:tid 13055] [client 114.96.103.33:54933] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWxAC8RGpUu1E8cmbmiHLAAAANE"]
[Sun Jan 18 10:12:36.510710 2026] [:error] [pid 13034:tid 13043] [client 43.130.3.122:40724] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWxBlMRGpUu1E8cmbmiKjgAAAMU"]
[Sun Jan 18 16:29:49.440291 2026] [:error] [pid 12924:tid 12965] [client 182.44.67.97:59328] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aWyZ_Suv3PUo9LR6V6bv8QAAAEU"]
[Sun Jan 18 17:47:09.610942 2026] [:error] [pid 13034:tid 13036] [client 43.159.139.164:46550] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aWysHcRGpUu1E8cmbmhpNgAAAMA"]
[Mon Jan 19 03:32:00.053662 2026] [:error] [pid 51062:tid 51101] [client 136.144.19.159:23887] [client 136.144.19.159] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.19.159, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aW01MG4a4uycuN4aaLxwcQAAAEg"]
[Mon Jan 19 03:32:00.059766 2026] [:error] [pid 51062:tid 51101] [client 136.144.19.159:23887] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Jan 19 05:12:35.951630 2026] [:error] [pid 55094:tid 55172] [client 114.80.36.40:46408] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW1MwzQDy8tSKykl7U6n0QAAAJA"]
[Mon Jan 19 06:44:52.826789 2026] [:error] [pid 55093:tid 55146] [client 170.106.180.246:57572] [client 170.106.180.246] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aW1iZFvejPZGx2OquyUM3QAAAFE"]
[Mon Jan 19 12:47:24.924305 2026] [:error] [pid 45561:tid 45570] [client 103.77.106.118:61213] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aW23XK4ONSZn4nkTayLhtgAAAAQ"]
[Mon Jan 19 12:47:25.309691 2026] [:error] [pid 45657:tid 45675] [client 103.77.106.118:56394] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW23XQ4XFYp2OcwCx-Ds2gAAANA"]
[Mon Jan 19 13:15:50.712199 2026] [:error] [pid 47089:tid 47097] [client 43.153.15.51:44892] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aW2-BhlIzijVNfdIsZ5D9QAAAQY"]
[Mon Jan 19 15:34:32.322101 2026] [:error] [pid 45561:tid 45578] [client 43.159.135.203:54292] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW3eiK4ONSZn4nkTayIYlwAAAAw"]
[Mon Jan 19 23:05:57.013447 2026] [:error] [pid 45657:tid 45677] [client 49.51.183.75:33638] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aW5IVQ4XFYp2OcwCx-CssgAAANI"]
[Tue Jan 20 01:47:13.760202 2026] [:error] [pid 45561:tid 45569] [client 5.195.84.66:52803] [client 5.195.84.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.195.84.66, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aW5uIa4ONSZn4nkTayK4JQAAAAM"]
[Tue Jan 20 01:47:13.765018 2026] [:error] [pid 45561:tid 45569] [client 5.195.84.66:52803] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 20 03:53:00.356203 2026] [:error] [pid 51775:tid 51777] [client 43.133.139.6:43124] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW6LnH_LbrSyR49hRqOMlgAAAMA"]
[Tue Jan 20 06:05:09.075208 2026] [:error] [pid 17621:tid 17668] [client 192.144.148.122:53168] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW6qlaQxAikbLpJvDI7gvAAAAEo"]
[Tue Jan 20 07:52:39.231682 2026] [:error] [pid 48976:tid 48979] [client 49.51.183.75:46242] [client 49.51.183.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aW7DxxXWmk4jsnRVwQeRuwAAAUE"]
[Tue Jan 20 09:04:11.322481 2026] [autoindex:error] [pid 10814:tid 10854] [client 4.217.178.79:11933] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Jan 20 09:04:11.646585 2026] [:error] [pid 10814:tid 10860] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Jan 20 09:04:11.944107 2026] [:error] [pid 10814:tid 10848] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Jan 20 09:04:12.087180 2026] [:error] [pid 10814:tid 10866] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Jan 20 09:04:12.244949 2026] [:error] [pid 10814:tid 10855] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Jan 20 09:04:12.386805 2026] [:error] [pid 10814:tid 10846] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php
[Tue Jan 20 09:04:12.531929 2026] [:error] [pid 10814:tid 10847] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Tue Jan 20 09:04:12.673096 2026] [:error] [pid 10814:tid 10844] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Jan 20 09:04:12.828689 2026] [:error] [pid 10814:tid 10868] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Jan 20 09:04:12.968272 2026] [:error] [pid 10814:tid 10857] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/deepseek_d.php
[Tue Jan 20 09:04:13.120849 2026] [:error] [pid 10814:tid 10867] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/pu9.php
[Tue Jan 20 09:04:13.284992 2026] [:error] [pid 10814:tid 10851] [client 4.217.178.79:11933] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-bat.php
[Tue Jan 20 09:04:13.506924 2026] [:error] [pid 10814:tid 10856] [client 4.217.178.79:11933] [client 4.217.178.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aW7UjRqBRFvr1Ykq07r1WgAAAEw"]
[Tue Jan 20 09:04:14.077018 2026] [:error] [pid 16719:tid 16731] [client 4.217.178.79:14133] [client 4.217.178.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aW7UjuHiYF3CF5e7Mrum_QAAAYg"]
[Tue Jan 20 09:04:14.645991 2026] [:error] [pid 16669:tid 16690] [client 4.217.178.79:11949] [client 4.217.178.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aW7UjoC1EqGz7QVqAEtTOQAAAVM"]
[Tue Jan 20 09:04:15.231993 2026] [:error] [pid 10813:tid 10820] [client 4.217.178.79:8633] [client 4.217.178.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aW7Uj_8mjqc4Rc0ds2ISUAAAAAM"]
[Tue Jan 20 10:06:07.069639 2026] [:error] [pid 16719:tid 16741] [client 43.135.139.165:52442] [client 43.135.139.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aW7jD-HiYF3CF5e7MruyIwAAAZI"]
[Tue Jan 20 10:21:40.776051 2026] [:error] [pid 16632:tid 16648] [client 43.130.53.252:41570] [client 43.130.53.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW7mtFFdPGaNGNrN00uNlAAAAM4"]
[Tue Jan 20 13:29:49.026697 2026] [:error] [pid 56360:tid 56364] [client 103.77.107.178:56020] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aW8SzU1J8CD1rR-wXXv8zAAAAQI"]
[Tue Jan 20 13:29:49.396073 2026] [:error] [pid 54259:tid 54298] [client 103.77.107.178:60718] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW8SzQ2q1USrePnOoFSy1AAAAJU"]
[Tue Jan 20 14:15:40.802941 2026] [:error] [pid 56360:tid 56373] [client 43.153.10.83:42902] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aW8djE1J8CD1rR-wXXsK8QAAAQs"]
[Tue Jan 20 16:37:39.792270 2026] [:error] [pid 56360:tid 56374] [client 43.133.139.6:59762] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW8-001J8CD1rR-wXXssBAAAAQw"]
[Tue Jan 20 18:29:53.809807 2026] [:error] [pid 8416:tid 8421] [client 182.42.104.32:55925] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW9ZITN6cbQyA2ecQV3A7AAAAwM"]
[Tue Jan 20 21:11:28.326378 2026] [:error] [pid 54382:tid 54386] [client 64.225.8.2:52019] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "aW9_AETJlZ9SJ6sBOEu0VgAAAAE"]
[Tue Jan 20 21:11:34.095373 2026] [:error] [pid 56326:tid 56328] [client 64.225.8.2:49372] [client 64.225.8.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aW9_BhA6mi8Uwf45Uy83JAAAAMA"]
[Tue Jan 20 21:17:30.197303 2026] [:error] [pid 8455:tid 8460] [client 34.27.62.169:33382] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/main.js"] [unique_id "aW-AaoJiHdPVtruynXC-bgAAA0M"]
[Tue Jan 20 21:17:30.197403 2026] [:error] [pid 8416:tid 8427] [client 34.27.62.169:33794] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/1.js"] [unique_id "aW-AajN6cbQyA2ecQV3bWQAAAwk"]
[Tue Jan 20 21:17:30.197626 2026] [:error] [pid 8455:tid 8458] [client 34.27.62.169:33576] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/window.env.js"] [unique_id "aW-AaoJiHdPVtruynXC-bwAAA0E"]
[Tue Jan 20 21:17:30.197745 2026] [:error] [pid 8455:tid 8481] [client 34.27.62.169:33120] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.js"] [unique_id "aW-AaoJiHdPVtruynXC-cAAAA1g"]
[Tue Jan 20 21:17:30.198242 2026] [:error] [pid 8455:tid 8462] [client 34.27.62.169:33192] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/main.js"] [unique_id "aW-AaoJiHdPVtruynXC-cQAAA0U"]
[Tue Jan 20 21:17:30.198719 2026] [:error] [pid 8455:tid 8459] [client 34.27.62.169:33492] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/index.js"] [unique_id "aW-AaoJiHdPVtruynXC-cgAAA0I"]
[Tue Jan 20 21:17:30.199142 2026] [:error] [pid 8455:tid 8472] [client 34.27.62.169:33048] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.js"] [unique_id "aW-AaoJiHdPVtruynXC-cwAAA08"]
[Tue Jan 20 21:17:30.199569 2026] [:error] [pid 56326:tid 56336] [client 34.27.62.169:33836] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/v1/config"] [unique_id "aW-AahA6mi8Uwf45Uy84XgAAAMg"]
[Tue Jan 20 21:17:30.199991 2026] [:error] [pid 56326:tid 56334] [client 34.27.62.169:33842] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/polyfills.js"] [unique_id "aW-AahA6mi8Uwf45Uy84XwAAAMY"]
[Tue Jan 20 21:17:30.201417 2026] [:error] [pid 56326:tid 56339] [client 34.27.62.169:33072] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/keys.js"] [unique_id "aW-AahA6mi8Uwf45Uy84YAAAAMs"]
[Tue Jan 20 21:17:30.202018 2026] [:error] [pid 56326:tid 56351] [client 34.27.62.169:33910] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vite.config.ts"] [unique_id "aW-AahA6mi8Uwf45Uy84YQAAANc"]
[Tue Jan 20 21:17:30.202145 2026] [:error] [pid 56326:tid 56330] [client 34.27.62.169:34102] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_astro/client.js"] [unique_id "aW-AahA6mi8Uwf45Uy84YgAAAMI"]
[Tue Jan 20 21:17:30.205521 2026] [:error] [pid 56291:tid 56307] [client 34.27.62.169:33524] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src/env.js"] [unique_id "aW-AarXgW_1T5Nikxa35ugAAAEw"]
[Tue Jan 20 21:17:30.206307 2026] [:error] [pid 56291:tid 56298] [client 34.27.62.169:33362] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.js.map"] [unique_id "aW-AarXgW_1T5Nikxa35uwAAAEM"]
[Tue Jan 20 21:17:30.206832 2026] [:error] [pid 56326:tid 56347] [client 34.27.62.169:34124] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.astro/types.d.ts"] [unique_id "aW-AahA6mi8Uwf45Uy84YwAAANM"]
[Tue Jan 20 21:17:30.207632 2026] [:error] [pid 8455:tid 8473] [client 34.27.62.169:33480] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/js/runtime-main.js"] [unique_id "aW-AaoJiHdPVtruynXC-dAAAA1A"]
[Tue Jan 20 21:17:30.207993 2026] [:error] [pid 54382:tid 54406] [client 34.27.62.169:33398] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/development/pages/_app.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2rQAAABU"]
[Tue Jan 20 21:17:30.208378 2026] [:error] [pid 54382:tid 54386] [client 34.27.62.169:33608] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.json"] [unique_id "aW-AakTJlZ9SJ6sBOEu2rAAAAAE"]
[Tue Jan 20 21:17:30.208821 2026] [:error] [pid 54382:tid 54391] [client 34.27.62.169:33414] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/pages/_app.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2rgAAAAY"]
[Tue Jan 20 21:17:30.214387 2026] [:error] [pid 54382:tid 54409] [client 34.27.62.169:33718] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/__env.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2rwAAABg"]
[Tue Jan 20 21:17:30.215993 2026] [:error] [pid 56291:tid 56313] [client 34.27.62.169:33622] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/keys.json"] [unique_id "aW-AarXgW_1T5Nikxa35vAAAAFI"]
[Tue Jan 20 21:17:30.218172 2026] [:error] [pid 54382:tid 54392] [client 34.27.62.169:33868] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src/env.d.ts"] [unique_id "aW-AakTJlZ9SJ6sBOEu2sAAAAAc"]
[Tue Jan 20 21:17:30.222913 2026] [:error] [pid 54259:tid 54279] [client 34.27.62.169:33970] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.js"] [unique_id "aW-Aag2q1USrePnOoFT0fQAAAII"]
[Tue Jan 20 21:17:30.222913 2026] [:error] [pid 8416:tid 8440] [client 34.27.62.169:34002] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/root.js"] [unique_id "aW-AajN6cbQyA2ecQV3bWgAAAxY"]
[Tue Jan 20 21:17:30.223363 2026] [:error] [pid 56326:tid 56338] [client 34.27.62.169:33852] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webpack-runtime.js"] [unique_id "aW-AahA6mi8Uwf45Uy84ZAAAAMo"]
[Tue Jan 20 21:17:30.223859 2026] [:error] [pid 56291:tid 56315] [client 34.27.62.169:33776] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/2.js"] [unique_id "aW-AarXgW_1T5Nikxa35vQAAAFQ"]
[Tue Jan 20 21:17:30.224257 2026] [:error] [pid 56360:tid 56375] [client 34.27.62.169:33940] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_app/immutable/entry/app.js"] [unique_id "aW-Aak1J8CD1rR-wXXteIwAAAQ0"]
[Tue Jan 20 21:17:30.224435 2026] [:error] [pid 54382:tid 54396] [client 34.27.62.169:33270] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/js/main.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2sQAAAAs"]
[Tue Jan 20 21:17:30.224817 2026] [:error] [pid 56326:tid 56328] [client 34.27.62.169:33370] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor.js.map"] [unique_id "aW-AahA6mi8Uwf45Uy84ZQAAAMA"]
[Tue Jan 20 21:17:30.225096 2026] [:error] [pid 54382:tid 54404] [client 34.27.62.169:33300] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/main.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2sgAAABM"]
[Tue Jan 20 21:17:30.225440 2026] [:error] [pid 8455:tid 8470] [client 34.27.62.169:33254] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/js/app.js"] [unique_id "aW-AaoJiHdPVtruynXC-dQAAA00"]
[Tue Jan 20 21:17:30.225727 2026] [:error] [pid 56360:tid 56366] [client 34.27.62.169:34162] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_app/immutable/entry/start.js"] [unique_id "aW-Aak1J8CD1rR-wXXteJAAAAQQ"]
[Tue Jan 20 21:17:30.226088 2026] [:error] [pid 56326:tid 56337] [client 34.27.62.169:33810] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/0.js"] [unique_id "aW-AahA6mi8Uwf45Uy84ZwAAAMk"]
[Tue Jan 20 21:17:30.226086 2026] [:error] [pid 56326:tid 56329] [client 34.27.62.169:33638] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/donate"] [unique_id "aW-AahA6mi8Uwf45Uy84ZgAAAME"]
[Tue Jan 20 21:17:30.226367 2026] [:error] [pid 8455:tid 8474] [client 34.27.62.169:33216] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/static/js/bundle.js"] [unique_id "aW-AaoJiHdPVtruynXC-dgAAA1E"]
[Tue Jan 20 21:17:30.226747 2026] [:error] [pid 8416:tid 8424] [client 34.27.62.169:34260] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/index.js"] [unique_id "aW-AajN6cbQyA2ecQV3bWwAAAwY"]
[Tue Jan 20 21:17:30.227007 2026] [:error] [pid 8416:tid 8430] [client 34.27.62.169:34240] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.cache/page-ssr/routes/render-page.js"] [unique_id "aW-AajN6cbQyA2ecQV3bXAAAAww"]
[Tue Jan 20 21:17:30.227396 2026] [:error] [pid 56326:tid 56341] [client 34.27.62.169:33352] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.js.map"] [unique_id "aW-AahA6mi8Uwf45Uy84aAAAAM0"]
[Tue Jan 20 21:17:30.227878 2026] [:error] [pid 56326:tid 56333] [client 34.27.62.169:33778] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/commons.js"] [unique_id "aW-AahA6mi8Uwf45Uy84aQAAAMU"]
[Tue Jan 20 21:17:30.227988 2026] [:error] [pid 8455:tid 8463] [client 34.27.62.169:33288] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/app.js"] [unique_id "aW-AaoJiHdPVtruynXC-dwAAA0Y"]
[Tue Jan 20 21:17:30.228007 2026] [:error] [pid 54382:tid 54403] [client 34.27.62.169:33410] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/pages/index.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2swAAABI"]
[Tue Jan 20 21:17:30.241447 2026] [:error] [pid 8455:tid 8477] [client 34.27.62.169:33456] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/js/main.chunk.js"] [unique_id "aW-AaoJiHdPVtruynXC-eAAAA1Q"]
[Tue Jan 20 21:17:30.241732 2026] [:error] [pid 54259:tid 54286] [client 34.27.62.169:34290] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/main.js"] [unique_id "aW-Aag2q1USrePnOoFT0fgAAAIk"]
[Tue Jan 20 21:17:30.242193 2026] [:error] [pid 56291:tid 56295] [client 34.27.62.169:33992] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/svelte.config.js"] [unique_id "aW-AarXgW_1T5Nikxa35vgAAAEA"]
[Tue Jan 20 21:17:30.242311 2026] [:error] [pid 54260:tid 54328] [client 34.27.62.169:34154] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src/env.d.ts"] [unique_id "aW-Aatg7jS3jmpUN0WAeyQAAAVQ"]
[Tue Jan 20 21:17:30.244239 2026] [:error] [pid 54260:tid 54318] [client 34.27.62.169:34136] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/config"] [unique_id "aW-Aatg7jS3jmpUN0WAeywAAAUo"]
[Tue Jan 20 21:17:30.244700 2026] [:error] [pid 56291:tid 56301] [client 34.27.62.169:33676] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/_buildManifest.js"] [unique_id "aW-AarXgW_1T5Nikxa35vwAAAEY"]
[Tue Jan 20 21:17:30.245019 2026] [:error] [pid 56291:tid 56308] [client 34.27.62.169:34276] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astro.config.mjs"] [unique_id "aW-AarXgW_1T5Nikxa35wAAAAE0"]
[Tue Jan 20 21:17:30.245125 2026] [:error] [pid 54260:tid 54308] [client 34.27.62.169:34050] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manifest.json"] [unique_id "aW-Aatg7jS3jmpUN0WAeygAAAUA"]
[Tue Jan 20 21:17:30.245273 2026] [:error] [pid 8416:tid 8418] [client 34.27.62.169:33922] [client 34.27.62.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.vite"] [unique_id "aW-AajN6cbQyA2ecQV3bXQAAAwA"]
[Tue Jan 20 21:17:30.245288 2026] [:error] [pid 56291:tid 56303] [client 34.27.62.169:34026] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/root.tsx"] [unique_id "aW-AarXgW_1T5Nikxa35wQAAAEg"]
[Tue Jan 20 21:17:30.247086 2026] [:error] [pid 54261:tid 54353] [client 34.27.62.169:34066] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/entry.client.tsx"] [unique_id "aW-AagESZyr5alDl9Tv32gAAAdI"]
[Tue Jan 20 21:17:30.253168 2026] [:error] [pid 54260:tid 54333] [client 34.27.62.169:33690] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/config.json"] [unique_id "aW-Aatg7jS3jmpUN0WAezAAAAVc"]
[Tue Jan 20 21:17:30.253298 2026] [:error] [pid 56291:tid 56310] [client 34.27.62.169:34278] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cart"] [unique_id "aW-AarXgW_1T5Nikxa35wgAAAE8"]
[Tue Jan 20 21:17:30.253573 2026] [:error] [pid 56291:tid 56300] [client 34.27.62.169:34274] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/@vite/env"] [unique_id "aW-AarXgW_1T5Nikxa35wwAAAEU"]
[Tue Jan 20 21:17:30.253940 2026] [:error] [pid 54259:tid 54287] [client 34.27.62.169:34014] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/build/root.js"] [unique_id "aW-Aag2q1USrePnOoFT0fwAAAIo"]
[Tue Jan 20 21:17:30.254305 2026] [:error] [pid 56291:tid 56314] [client 34.27.62.169:34008] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/build/manifest.json"] [unique_id "aW-AarXgW_1T5Nikxa35xAAAAFM"]
[Tue Jan 20 21:17:30.254843 2026] [:error] [pid 56360:tid 56373] [client 34.27.62.169:34234] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/page-data/app-data.json"] [unique_id "aW-Aak1J8CD1rR-wXXteJQAAAQs"]
[Tue Jan 20 21:17:30.255129 2026] [:error] [pid 8416:tid 8438] [client 34.27.62.169:33976] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/checkout"] [unique_id "aW-AajN6cbQyA2ecQV3bXwAAAxQ"]
[Tue Jan 20 21:17:30.256043 2026] [:error] [pid 54382:tid 54399] [client 34.27.62.169:33316] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/config.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2tAAAAA4"]
[Tue Jan 20 21:17:30.256778 2026] [:error] [pid 54382:tid 54398] [client 34.27.62.169:33566] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/__ENV.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2tQAAAA0"]
[Tue Jan 20 21:17:30.256911 2026] [:error] [pid 8455:tid 8471] [client 34.27.62.169:33496] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/env.js"] [unique_id "aW-AaoJiHdPVtruynXC-eQAAA04"]
[Tue Jan 20 21:17:30.257119 2026] [:error] [pid 54259:tid 54295] [client 34.27.62.169:33758] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/js/3.chunk.js"] [unique_id "aW-Aag2q1USrePnOoFT0gAAAAJI"]
[Tue Jan 20 21:17:30.257523 2026] [:error] [pid 54382:tid 54389] [client 34.27.62.169:33328] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/main.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2tgAAAAQ"]
[Tue Jan 20 21:17:30.260478 2026] [:error] [pid 8416:tid 8425] [client 34.27.62.169:33506] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/keys.js"] [unique_id "aW-AajN6cbQyA2ecQV3bYAAAAwc"]
[Tue Jan 20 21:17:30.261969 2026] [:error] [pid 56291:tid 56309] [client 34.27.62.169:34106] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_astro/page.js"] [unique_id "aW-AarXgW_1T5Nikxa35xgAAAE4"]
[Tue Jan 20 21:17:30.262693 2026] [:error] [pid 54261:tid 54345] [client 34.27.62.169:33938] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/serviceworker.js"] [unique_id "aW-AagESZyr5alDl9Tv32wAAAco"]
[Tue Jan 20 21:17:30.262785 2026] [:error] [pid 56291:tid 56306] [client 34.27.62.169:34220] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vite/deps/_metadata.json"] [unique_id "aW-AarXgW_1T5Nikxa35xwAAAEs"]
[Tue Jan 20 21:17:30.262853 2026] [:error] [pid 8416:tid 8426] [client 34.27.62.169:33660] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/subscribe"] [unique_id "aW-AajN6cbQyA2ecQV3bYQAAAwg"]
[Tue Jan 20 21:17:30.263187 2026] [:error] [pid 56291:tid 56299] [client 34.27.62.169:33772] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/js/4.chunk.js"] [unique_id "aW-AarXgW_1T5Nikxa35yAAAAEQ"]
[Tue Jan 20 21:17:30.263399 2026] [:error] [pid 56291:tid 56319] [client 34.27.62.169:34062] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_app/env.js"] [unique_id "aW-AarXgW_1T5Nikxa35yQAAAFg"]
[Tue Jan 20 21:17:30.264045 2026] [:error] [pid 56291:tid 56312] [client 34.27.62.169:33732] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime~main.js"] [unique_id "aW-AarXgW_1T5Nikxa35ygAAAFE"]
[Tue Jan 20 21:17:30.265022 2026] [:error] [pid 56291:tid 56316] [client 34.27.62.169:34176] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/q-manifest.json"] [unique_id "aW-AarXgW_1T5Nikxa35xQAAAFU"]
[Tue Jan 20 21:17:30.265031 2026] [:error] [pid 8416:tid 8432] [client 34.27.62.169:34222] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dist/client.js"] [unique_id "aW-AajN6cbQyA2ecQV3bYgAAAw4"]
[Tue Jan 20 21:17:30.265596 2026] [:error] [pid 8416:tid 8428] [client 34.27.62.169:34142] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/asset-manifest.json"] [unique_id "aW-AajN6cbQyA2ecQV3bYwAAAwo"]
[Tue Jan 20 21:17:30.266125 2026] [:error] [pid 56291:tid 56304] [client 34.27.62.169:34306] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_app/immutable/chunks/singletons.js"] [unique_id "aW-AarXgW_1T5Nikxa35ywAAAEk"]
[Tue Jan 20 21:17:30.269204 2026] [:error] [pid 56326:tid 56346] [client 34.27.62.169:33634] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payment"] [unique_id "aW-AahA6mi8Uwf45Uy84agAAANI"]
[Tue Jan 20 21:17:30.277347 2026] [:error] [pid 54259:tid 54293] [client 34.27.62.169:33954] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/vendor.js"] [unique_id "aW-Aag2q1USrePnOoFT0gQAAAJA"]
[Tue Jan 20 21:17:30.278171 2026] [:error] [pid 8416:tid 8441] [client 34.27.62.169:33654] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dist/.vite/manifest.json"] [unique_id "aW-AajN6cbQyA2ecQV3bZAAAAxc"]
[Tue Jan 20 21:17:30.278632 2026] [:error] [pid 56360:tid 56367] [client 34.27.62.169:33920] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_app/immutable/chunks/index.js"] [unique_id "aW-Aak1J8CD1rR-wXXteJgAAAQU"]
[Tue Jan 20 21:17:30.279053 2026] [:error] [pid 54259:tid 54291] [client 34.27.62.169:34092] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/remix.config.js"] [unique_id "aW-Aag2q1USrePnOoFT0ggAAAI4"]
[Tue Jan 20 21:17:30.279219 2026] [:error] [pid 54260:tid 54309] [client 34.27.62.169:33604] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.json"] [unique_id "aW-Aatg7jS3jmpUN0WAezQAAAUE"]
[Tue Jan 20 21:17:30.284660 2026] [:error] [pid 54260:tid 54325] [client 34.27.62.169:33548] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib/config.js"] [unique_id "aW-Aatg7jS3jmpUN0WAezgAAAVE"]
[Tue Jan 20 21:17:30.302419 2026] [:error] [pid 8455:tid 8475] [client 34.27.62.169:33082] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payment.js"] [unique_id "aW-AaoJiHdPVtruynXC-egAAA1I"]
[Tue Jan 20 21:17:30.302418 2026] [:error] [pid 54259:tid 54283] [client 34.27.62.169:33516] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src/config.js"] [unique_id "aW-Aag2q1USrePnOoFT0gwAAAIY"]
[Tue Jan 20 21:17:30.303324 2026] [:error] [pid 8455:tid 8457] [client 34.27.62.169:33196] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stripe.js"] [unique_id "aW-AaoJiHdPVtruynXC-ewAAA0A"]
[Tue Jan 20 21:17:30.314366 2026] [:error] [pid 54382:tid 54401] [client 34.27.62.169:33562] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env-config.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2twAAABA"]
[Tue Jan 20 21:17:30.323622 2026] [:error] [pid 54382:tid 54407] [client 34.27.62.169:34232] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.html"] [unique_id "aW-AakTJlZ9SJ6sBOEu2uAAAABY"]
[Tue Jan 20 21:17:30.324034 2026] [:error] [pid 56326:tid 56352] [client 34.27.62.169:33212] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/static/js/main.js"] [unique_id "aW-AahA6mi8Uwf45Uy84awAAANg"]
[Tue Jan 20 21:17:30.324166 2026] [:error] [pid 54382:tid 54387] [client 34.27.62.169:34206] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dist/solid.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2uQAAAAI"]
[Tue Jan 20 21:17:30.324786 2026] [:error] [pid 56291:tid 56302] [client 34.27.62.169:34122] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.svelte-kit/output/client/_app/env.js"] [unique_id "aW-AarXgW_1T5Nikxa35zAAAAEc"]
[Tue Jan 20 21:17:30.324924 2026] [:error] [pid 56326:tid 56348] [client 34.27.62.169:33550] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime-config.js"] [unique_id "aW-AahA6mi8Uwf45Uy84bAAAANQ"]
[Tue Jan 20 21:17:30.325002 2026] [:error] [pid 56291:tid 56311] [client 34.27.62.169:34190] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/build/qwik-loader.js"] [unique_id "aW-AarXgW_1T5Nikxa35zQAAAFA"]
[Tue Jan 20 21:17:30.325460 2026] [:error] [pid 54382:tid 54402] [client 34.27.62.169:33826] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/framework.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2ugAAABE"]
[Tue Jan 20 21:17:30.325614 2026] [:error] [pid 8455:tid 8469] [client 34.27.62.169:33856] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/js/5.chunk.js"] [unique_id "aW-AaoJiHdPVtruynXC-fAAAA0w"]
[Tue Jan 20 21:17:30.326205 2026] [:error] [pid 54261:tid 54340] [client 34.27.62.169:33042] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/__config.js"] [unique_id "aW-AagESZyr5alDl9Tv33AAAAcU"]
[Tue Jan 20 21:17:30.326208 2026] [:error] [pid 54260:tid 54314] [client 34.27.62.169:34036] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/build/entry.client.js"] [unique_id "aW-Aatg7jS3jmpUN0WAezwAAAUY"]
[Tue Jan 20 21:17:30.326450 2026] [:error] [pid 56291:tid 56317] [client 34.27.62.169:34256] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/page-data/app-data.json"] [unique_id "aW-AarXgW_1T5Nikxa35zgAAAFY"]
[Tue Jan 20 21:17:30.326832 2026] [:error] [pid 56326:tid 56349] [client 34.27.62.169:33662] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vite/manifest.json"] [unique_id "aW-AahA6mi8Uwf45Uy84bQAAANU"]
[Tue Jan 20 21:17:30.326994 2026] [:error] [pid 54382:tid 54397] [client 34.27.62.169:34336] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW-AakTJlZ9SJ6sBOEu2uwAAAAw"]
[Tue Jan 20 21:17:30.327340 2026] [:error] [pid 56291:tid 56297] [client 34.27.62.169:34076] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_astro/hoisted.js"] [unique_id "aW-AarXgW_1T5Nikxa35zwAAAEI"]
[Tue Jan 20 21:17:30.327603 2026] [:error] [pid 54382:tid 54388] [client 34.27.62.169:34320] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/@vite/client"] [unique_id "aW-AakTJlZ9SJ6sBOEu2vAAAAAM"]
[Tue Jan 20 21:17:30.327978 2026] [:error] [pid 54382:tid 54408] [client 34.27.62.169:33590] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.json"] [unique_id "aW-AakTJlZ9SJ6sBOEu2vQAAABc"]
[Tue Jan 20 21:17:30.328174 2026] [:error] [pid 56326:tid 56344] [client 34.27.62.169:33416] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_nuxt/config.js"] [unique_id "aW-AahA6mi8Uwf45Uy84bgAAANA"]
[Tue Jan 20 21:17:30.328615 2026] [:error] [pid 56291:tid 56296] [client 34.27.62.169:33896] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vite.config.js"] [unique_id "aW-AarXgW_1T5Nikxa350AAAAEE"]
[Tue Jan 20 21:17:30.328922 2026] [:error] [pid 56326:tid 56342] [client 34.27.62.169:33880] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/index.js"] [unique_id "aW-AahA6mi8Uwf45Uy84bwAAAM4"]
[Tue Jan 20 21:17:30.329114 2026] [:error] [pid 56291:tid 56318] [client 34.27.62.169:33432] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_nuxt/vendors.app.js"] [unique_id "aW-AarXgW_1T5Nikxa350QAAAFc"]
[Tue Jan 20 21:17:30.329521 2026] [:error] [pid 56326:tid 56332] [client 34.27.62.169:33706] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/workbox.js"] [unique_id "aW-AahA6mi8Uwf45Uy84cAAAAMQ"]
[Tue Jan 20 21:17:30.330017 2026] [:error] [pid 8455:tid 8466] [client 34.27.62.169:33684] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/service-worker.js"] [unique_id "aW-AaoJiHdPVtruynXC-fQAAA0k"]
[Tue Jan 20 21:17:30.330215 2026] [:error] [pid 8416:tid 8431] [client 34.27.62.169:33102] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bundle.js"] [unique_id "aW-AajN6cbQyA2ecQV3bZQAAAw0"]
[Tue Jan 20 21:17:30.330889 2026] [:error] [pid 8416:tid 8442] [client 34.27.62.169:33156] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dist/app.js"] [unique_id "aW-AajN6cbQyA2ecQV3bZgAAAxg"]
[Tue Jan 20 21:17:30.331495 2026] [:error] [pid 56291:tid 56305] [client 34.27.62.169:33436] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/webpack.js"] [unique_id "aW-AarXgW_1T5Nikxa350gAAAEo"]
[Tue Jan 20 21:17:30.332120 2026] [:error] [pid 56326:tid 56331] [client 34.27.62.169:33126] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dist/bundle.js"] [unique_id "aW-AahA6mi8Uwf45Uy84cQAAAMM"]
[Tue Jan 20 21:17:30.332172 2026] [:error] [pid 56326:tid 56340] [client 34.27.62.169:33450] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_nuxt/app.js"] [unique_id "aW-AahA6mi8Uwf45Uy84cgAAAMw"]
[Tue Jan 20 21:17:30.332242 2026] [:error] [pid 56360:tid 56369] [client 34.27.62.169:33160] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dist/main.js"] [unique_id "aW-Aak1J8CD1rR-wXXteJwAAAQc"]
[Tue Jan 20 21:17:30.332737 2026] [:error] [pid 56326:tid 56345] [client 34.27.62.169:33642] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset-manifest.json"] [unique_id "aW-AahA6mi8Uwf45Uy84dAAAANE"]
[Tue Jan 20 21:17:30.332766 2026] [:error] [pid 56326:tid 56343] [client 34.27.62.169:33686] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_next/static/chunks/_ssgManifest.js"] [unique_id "aW-AahA6mi8Uwf45Uy84cwAAAM8"]
[Tue Jan 20 21:17:30.332839 2026] [:error] [pid 56360:tid 56383] [client 34.27.62.169:33116] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.js"] [unique_id "aW-Aak1J8CD1rR-wXXteKAAAARU"]
[Tue Jan 20 21:17:30.333124 2026] [:error] [pid 56326:tid 56335] [client 34.27.62.169:33076] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.js"] [unique_id "aW-AahA6mi8Uwf45Uy84dQAAAMc"]
[Tue Jan 20 21:17:30.387485 2026] [:error] [pid 8455:tid 8467] [client 34.27.62.169:33240] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor.js"] [unique_id "aW-AaoJiHdPVtruynXC-fgAAA0o"]
[Tue Jan 20 21:17:30.391881 2026] [:error] [pid 54259:tid 54289] [client 34.27.62.169:33338] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime.js"] [unique_id "aW-Aag2q1USrePnOoFT0hAAAAIw"]
[Tue Jan 20 21:17:30.430124 2026] [:error] [pid 56360:tid 56363] [client 34.27.62.169:33178] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webpack.runtime.js"] [unique_id "aW-Aak1J8CD1rR-wXXteKQAAAQE"]
[Tue Jan 20 21:17:30.430433 2026] [:error] [pid 8455:tid 8465] [client 34.27.62.169:33066] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/app.js"] [unique_id "aW-AaoJiHdPVtruynXC-fwAAA0g"]
[Tue Jan 20 21:17:30.614665 2026] [:error] [pid 54382:tid 54400] [client 34.27.62.169:33140] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2vgAAAA8"]
[Tue Jan 20 21:17:30.626783 2026] [:error] [pid 8455:tid 8464] [client 34.27.62.169:33744] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor.js"] [unique_id "aW-AaoJiHdPVtruynXC-gAAAA0c"]
[Tue Jan 20 21:17:30.657902 2026] [:error] [pid 8455:tid 8468] [client 34.27.62.169:33122] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/app.js"] [unique_id "aW-AaoJiHdPVtruynXC-gQAAA0s"]
[Tue Jan 20 21:17:30.659054 2026] [:error] [pid 54382:tid 54393] [client 34.27.62.169:33284] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webpack.runtime.js"] [unique_id "aW-AakTJlZ9SJ6sBOEu2vwAAAAg"]
[Tue Jan 20 21:17:30.874400 2026] [:error] [pid 8455:tid 8480] [client 34.27.62.169:33466] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor.js"] [unique_id "aW-AaoJiHdPVtruynXC-ggAAA1c"]
[Tue Jan 20 21:17:30.880287 2026] [:error] [pid 54261:tid 54341] [client 34.27.62.169:33058] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime.js"] [unique_id "aW-AagESZyr5alDl9Tv33QAAAcY"]
[Tue Jan 20 21:17:30.907221 2026] [:error] [pid 8455:tid 8479] [client 34.27.62.169:33534] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webpack.runtime.js"] [unique_id "aW-AaoJiHdPVtruynXC-gwAAA1Y"]
[Tue Jan 20 21:17:30.926501 2026] [:error] [pid 8416:tid 8433] [client 34.27.62.169:33086] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/app.js"] [unique_id "aW-AajN6cbQyA2ecQV3baAAAAw8"]
[Tue Jan 20 21:17:31.117674 2026] [:error] [pid 8455:tid 8476] [client 34.27.62.169:33226] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor.js"] [unique_id "aW-Aa4JiHdPVtruynXC-hAAAA1M"]
[Tue Jan 20 21:17:31.118885 2026] [:error] [pid 8455:tid 8476] [client 34.27.62.169:33710] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime.js"] [unique_id "aW-Aa4JiHdPVtruynXC-hQAAA1M"]
[Tue Jan 20 21:17:31.217509 2026] [:error] [pid 8455:tid 8458] [client 34.27.62.169:33046] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/app.js"] [unique_id "aW-Aa4JiHdPVtruynXC-hwAAA0E"]
[Tue Jan 20 21:17:31.217525 2026] [:error] [pid 54260:tid 54326] [client 34.27.62.169:33222] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webpack.runtime.js"] [unique_id "aW-Aa9g7jS3jmpUN0WAe0AAAAVI"]
[Tue Jan 20 21:17:31.321688 2026] [:error] [pid 56326:tid 56336] [client 34.27.62.169:33162] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime.js"] [unique_id "aW-AaxA6mi8Uwf45Uy84dgAAAMg"]
[Tue Jan 20 21:17:31.734739 2026] [:error] [pid 54259:tid 54282] [client 34.27.62.169:47450] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor.js"] [unique_id "aW-Aaw2q1USrePnOoFT0hQAAAIU"]
[Tue Jan 20 21:17:31.869081 2026] [:error] [pid 54382:tid 54398] [client 34.27.62.169:47460] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webpack.runtime.js"] [unique_id "aW-Aa0TJlZ9SJ6sBOEu2xQAAAA0"]
[Tue Jan 20 21:17:31.884437 2026] [:error] [pid 54261:tid 54347] [client 34.27.62.169:47468] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/app.js"] [unique_id "aW-AawESZyr5alDl9Tv33gAAAcw"]
[Tue Jan 20 21:17:31.932806 2026] [:error] [pid 54260:tid 54316] [client 34.27.62.169:47470] [client 34.27.62.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/runtime.js"] [unique_id "aW-Aa9g7jS3jmpUN0WAe0QAAAUg"]
[Wed Jan 21 02:19:17.142308 2026] [:error] [pid 54260:tid 54323] [client 43.153.10.83:33014] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aW_HJdg7jS3jmpUN0WBTTQAAAU8"]
[Wed Jan 21 04:24:39.905473 2026] [:error] [pid 21456:tid 21530] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Jan 21 04:24:40.039901 2026] [:error] [pid 21456:tid 21521] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed Jan 21 04:24:40.165775 2026] [:error] [pid 21456:tid 21522] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Jan 21 04:24:40.286388 2026] [:error] [pid 21456:tid 21535] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Jan 21 04:24:40.421458 2026] [:error] [pid 21456:tid 21524] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Jan 21 04:24:40.546583 2026] [:error] [pid 21456:tid 21541] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Jan 21 04:24:40.800898 2026] [:error] [pid 21456:tid 21525] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Jan 21 04:24:40.922194 2026] [:error] [pid 21456:tid 21528] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Wed Jan 21 04:24:41.046622 2026] [:error] [pid 21456:tid 21533] [client 40.83.72.58:16764] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Jan 21 04:24:41.169617 2026] [:error] [pid 21456:tid 21518] [client 40.83.72.58:16764] [client 40.83.72.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aW_kiQKyVQ9Ob2YxRApziwAAAIA"]
[Wed Jan 21 04:24:41.643147 2026] [:error] [pid 21456:tid 21540] [client 40.83.72.58:17029] [client 40.83.72.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aW_kiQKyVQ9Ob2YxRApzjQAAAJY"]
[Wed Jan 21 04:24:42.114471 2026] [:error] [pid 21456:tid 21539] [client 40.83.72.58:21610] [client 40.83.72.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aW_kigKyVQ9Ob2YxRApzjwAAAJU"]
[Wed Jan 21 04:24:42.584493 2026] [:error] [pid 21456:tid 21536] [client 40.83.72.58:21598] [client 40.83.72.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aW_kigKyVQ9Ob2YxRApzkAAAAJI"]
[Wed Jan 21 04:51:59.003747 2026] [:error] [pid 59863:tid 59874] [client 49.51.204.74:50456] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aW_q77HQ1zVZ4yLuI-zKrgAAAQc"]
[Wed Jan 21 06:03:26.153642 2026] [:error] [pid 21563:tid 21570] [client 103.65.236.149:60079] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aW_7rhZq__dTorabEoyipwAAAMU"]
[Wed Jan 21 06:03:26.685861 2026] [:error] [pid 59863:tid 59889] [client 103.65.236.149:60248] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aW_7rrHQ1zVZ4yLuI-zmngAAARY"]
[Wed Jan 21 07:56:01.778152 2026] [:error] [pid 56352:tid 56354] [client 20.89.17.172:7147] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aXAWEdWN6wYNPTU3efVovQAAAUA"]
[Wed Jan 21 07:56:02.237048 2026] [:error] [pid 56352:tid 56363] [client 20.89.17.172:7041] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aXAWEtWN6wYNPTU3efVovgAAAUk"]
[Wed Jan 21 07:56:02.694154 2026] [:error] [pid 21456:tid 21524] [client 20.89.17.172:7130] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aXAWEgKyVQ9Ob2YxRAqubAAAAIY"]
[Wed Jan 21 07:56:03.150244 2026] [:error] [pid 56352:tid 56355] [client 20.89.17.172:7134] [client 20.89.17.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aXAWE9WN6wYNPTU3efVowgAAAUE"]
[Wed Jan 21 08:12:34.111254 2026] [:error] [pid 21454:tid 21467] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Jan 21 08:12:34.252505 2026] [:error] [pid 21454:tid 21475] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Jan 21 08:12:34.526496 2026] [:error] [pid 21454:tid 21470] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Jan 21 08:12:34.664985 2026] [:error] [pid 21454:tid 21474] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Jan 21 08:12:34.811905 2026] [:error] [pid 21454:tid 21483] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Jan 21 08:12:34.952123 2026] [:error] [pid 21454:tid 21472] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Jan 21 08:12:35.102406 2026] [:error] [pid 21454:tid 21469] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/deepseek_d.php
[Wed Jan 21 08:12:35.258064 2026] [:error] [pid 21454:tid 21484] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Jan 21 08:12:35.397107 2026] [:error] [pid 21454:tid 21482] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Jan 21 08:12:35.673497 2026] [:error] [pid 21454:tid 21478] [client 4.217.181.220:30805] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Wed Jan 21 08:12:35.818466 2026] [:error] [pid 21454:tid 21488] [client 4.217.181.220:30805] [client 4.217.181.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXAZ8zwp5UZmMFzY2bp_6QAAABg"]
[Wed Jan 21 08:12:36.364606 2026] [:error] [pid 59863:tid 59869] [client 4.217.181.220:30807] [client 4.217.181.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXAZ9LHQ1zVZ4yLuI-whcwAAAQI"]
[Wed Jan 21 08:12:36.907671 2026] [:error] [pid 59863:tid 59877] [client 4.217.181.220:43002] [client 4.217.181.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXAZ9LHQ1zVZ4yLuI-whdAAAAQo"]
[Wed Jan 21 08:12:37.448568 2026] [:error] [pid 59863:tid 59870] [client 4.217.181.220:40110] [client 4.217.181.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXAZ9bHQ1zVZ4yLuI-whdQAAAQM"]
[Wed Jan 21 11:14:45.034871 2026] [:error] [pid 21563:tid 21567] [client 43.153.71.12:34112] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXBEpRZq__dTorabEoz_eQAAAMI"]
[Wed Jan 21 15:09:34.854377 2026] [:error] [pid 21456:tid 21534] [client 43.159.143.139:57640] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXB7rgKyVQ9Ob2YxRAoseQAAAJA"]
[Wed Jan 21 23:05:29.017871 2026] [:error] [pid 4382:tid 4388] [client 43.130.16.140:39648] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXDrOZHg0falVG3JFbBujQAAAYQ"]
[Thu Jan 22 00:48:09.887812 2026] [:error] [pid 21563:tid 21577] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Thu Jan 22 00:48:09.977688 2026] [:error] [pid 21563:tid 21578] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Jan 22 00:48:10.159613 2026] [:error] [pid 21563:tid 21581] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Thu Jan 22 00:48:10.250453 2026] [:error] [pid 21563:tid 21575] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Thu Jan 22 00:48:10.342986 2026] [:error] [pid 21563:tid 21572] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Jan 22 00:48:10.435148 2026] [:error] [pid 21563:tid 21586] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Thu Jan 22 00:48:10.525709 2026] [:error] [pid 21563:tid 21582] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Thu Jan 22 00:48:10.706849 2026] [:error] [pid 21563:tid 21573] [client 4.193.240.62:13155] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Thu Jan 22 00:48:10.818653 2026] [:error] [pid 21563:tid 21571] [client 4.193.240.62:13155] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aXEDShZq__dTorabEozIIAAAAMY"]
[Thu Jan 22 00:48:11.015985 2026] [:error] [pid 21456:tid 21533] [client 4.193.240.62:13080] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aXEDSwKyVQ9Ob2YxRArJ4gAAAI8"]
[Thu Jan 22 00:48:11.192887 2026] [:error] [pid 21456:tid 21526] [client 4.193.240.62:13070] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aXEDSwKyVQ9Ob2YxRArJ4wAAAIg"]
[Thu Jan 22 00:48:11.366616 2026] [:error] [pid 59863:tid 59874] [client 4.193.240.62:13138] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aXEDS7HQ1zVZ4yLuI-wJPgAAAQc"]
[Thu Jan 22 00:48:11.551344 2026] [:error] [pid 21454:tid 21464] [client 4.193.240.62:13172] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aXEDSzwp5UZmMFzY2bp1DgAAAAA"]
[Thu Jan 22 00:48:11.750127 2026] [:error] [pid 56352:tid 56371] [client 4.193.240.62:13146] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aXEDS9WN6wYNPTU3efU96AAAAVE"]
[Thu Jan 22 00:48:11.927199 2026] [:error] [pid 56352:tid 56367] [client 4.193.240.62:13122] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aXEDS9WN6wYNPTU3efU96QAAAU0"]
[Thu Jan 22 00:48:12.131830 2026] [:error] [pid 21454:tid 21466] [client 4.193.240.62:13082] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aXEDTDwp5UZmMFzY2bp1DwAAAAI"]
[Thu Jan 22 00:48:12.308709 2026] [:error] [pid 21454:tid 21472] [client 4.193.240.62:13160] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aXEDTDwp5UZmMFzY2bp1EAAAAAg"]
[Thu Jan 22 00:48:12.551696 2026] [:error] [pid 59863:tid 59867] [client 4.193.240.62:13124] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aXEDTLHQ1zVZ4yLuI-wJPwAAAQA"]
[Thu Jan 22 00:48:12.747496 2026] [:error] [pid 21456:tid 21528] [client 4.193.240.62:13140] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aXEDTAKyVQ9Ob2YxRArJ5wAAAIo"]
[Thu Jan 22 00:48:12.934419 2026] [:error] [pid 56352:tid 56359] [client 4.193.240.62:13136] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aXEDTNWN6wYNPTU3efU96gAAAUU"]
[Thu Jan 22 00:48:13.108433 2026] [:error] [pid 4382:tid 4398] [client 4.193.240.62:13060] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aXEDTZHg0falVG3JFbCCGgAAAY4"]
[Thu Jan 22 00:48:13.284121 2026] [:error] [pid 21455:tid 21506] [client 4.193.240.62:13174] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aXEDTYpOKALCSo1URZFo1QAAAE8"]
[Thu Jan 22 00:48:13.512296 2026] [:error] [pid 21455:tid 21499] [client 4.193.240.62:13164] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aXEDTYpOKALCSo1URZFo1gAAAEg"]
[Thu Jan 22 00:48:13.689754 2026] [:error] [pid 21455:tid 21497] [client 4.193.240.62:13076] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aXEDTYpOKALCSo1URZFo1wAAAEY"]
[Thu Jan 22 00:48:13.864794 2026] [:error] [pid 21563:tid 21587] [client 4.193.240.62:13084] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aXEDTRZq__dTorabEozIIQAAANY"]
[Thu Jan 22 00:48:14.053398 2026] [:error] [pid 21563:tid 21568] [client 4.193.240.62:13161] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aXEDThZq__dTorabEozIIgAAAMM"]
[Thu Jan 22 00:48:14.230628 2026] [:error] [pid 59863:tid 59890] [client 4.193.240.62:13087] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aXEDTrHQ1zVZ4yLuI-wJQwAAARc"]
[Thu Jan 22 00:48:14.419485 2026] [:error] [pid 56352:tid 56374] [client 4.193.240.62:13181] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aXEDTtWN6wYNPTU3efU97QAAAVQ"]
[Thu Jan 22 00:48:14.596198 2026] [:error] [pid 59863:tid 59878] [client 4.193.240.62:13152] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aXEDTrHQ1zVZ4yLuI-wJRQAAAQs"]
[Thu Jan 22 00:48:14.776054 2026] [:error] [pid 56352:tid 56370] [client 4.193.240.62:13075] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aXEDTtWN6wYNPTU3efU97gAAAVA"]
[Thu Jan 22 00:48:14.956718 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:13120] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aXEDTopOKALCSo1URZFo2AAAAFU"]
[Thu Jan 22 00:48:15.147097 2026] [:error] [pid 21454:tid 21479] [client 4.193.240.62:13116] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aXEDTzwp5UZmMFzY2bp1EwAAAA8"]
[Thu Jan 22 00:48:15.328798 2026] [:error] [pid 21455:tid 21509] [client 4.193.240.62:13097] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aXEDT4pOKALCSo1URZFo2QAAAFI"]
[Thu Jan 22 00:48:15.505391 2026] [:error] [pid 59863:tid 59879] [client 4.193.240.62:13063] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aXEDT7HQ1zVZ4yLuI-wJRwAAAQw"]
[Thu Jan 22 00:48:15.709223 2026] [:error] [pid 21563:tid 21584] [client 4.193.240.62:13068] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aXEDTxZq__dTorabEozIIwAAANM"]
[Thu Jan 22 00:48:15.892009 2026] [:error] [pid 56352:tid 56361] [client 4.193.240.62:13171] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aXEDT9WN6wYNPTU3efU98gAAAUc"]
[Thu Jan 22 00:48:16.091078 2026] [:error] [pid 56352:tid 56354] [client 4.193.240.62:13126] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aXEDUNWN6wYNPTU3efU98wAAAUA"]
[Thu Jan 22 00:48:16.264290 2026] [:error] [pid 21455:tid 21510] [client 4.193.240.62:13167] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aXEDUIpOKALCSo1URZFo3AAAAFM"]
[Thu Jan 22 00:48:16.438743 2026] [:error] [pid 59863:tid 59884] [client 4.193.240.62:13166] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aXEDULHQ1zVZ4yLuI-wJSgAAARE"]
[Thu Jan 22 00:48:16.613222 2026] [:error] [pid 56352:tid 56364] [client 4.193.240.62:13153] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aXEDUNWN6wYNPTU3efU99AAAAUo"]
[Thu Jan 22 00:48:16.842259 2026] [:error] [pid 21456:tid 21540] [client 4.193.240.62:13130] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aXEDUAKyVQ9Ob2YxRArJ6QAAAJY"]
[Thu Jan 22 00:48:17.031117 2026] [:error] [pid 21454:tid 21465] [client 4.193.240.62:9196] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aXEDUTwp5UZmMFzY2bp1FAAAAAE"]
[Thu Jan 22 00:48:17.210518 2026] [:error] [pid 4382:tid 4392] [client 4.193.240.62:13178] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aXEDUZHg0falVG3JFbCCGwAAAYg"]
[Thu Jan 22 00:48:17.398902 2026] [:error] [pid 56352:tid 56367] [client 4.193.240.62:9157] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aXEDUdWN6wYNPTU3efU99wAAAU0"]
[Thu Jan 22 00:48:17.599262 2026] [:error] [pid 21563:tid 21567] [client 4.193.240.62:13163] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXEDURZq__dTorabEozIJQAAAMI"]
[Thu Jan 22 00:48:17.797205 2026] [:error] [pid 4382:tid 4402] [client 4.193.240.62:9168] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXEDUZHg0falVG3JFbCCHQAAAZI"]
[Thu Jan 22 00:48:17.976836 2026] [:error] [pid 59863:tid 59874] [client 4.193.240.62:13145] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXEDUbHQ1zVZ4yLuI-wJTAAAAQc"]
[Thu Jan 22 00:48:18.158507 2026] [:error] [pid 21455:tid 21495] [client 4.193.240.62:13057] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXEDUopOKALCSo1URZFo3gAAAEQ"]
[Thu Jan 22 00:48:18.356852 2026] [:error] [pid 21563:tid 21581] [client 4.193.240.62:13110] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aXEDUhZq__dTorabEozIJgAAANA"]
[Thu Jan 22 00:48:18.538979 2026] [:error] [pid 21563:tid 21575] [client 4.193.240.62:9158] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aXEDUhZq__dTorabEozIJwAAAMo"]
[Thu Jan 22 00:48:18.726822 2026] [:error] [pid 4382:tid 4397] [client 4.193.240.62:13091] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aXEDUpHg0falVG3JFbCCHwAAAY0"]
[Thu Jan 22 00:48:18.903713 2026] [:error] [pid 21455:tid 21506] [client 4.193.240.62:13059] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aXEDUopOKALCSo1URZFo4AAAAE8"]
[Thu Jan 22 00:48:19.076899 2026] [:error] [pid 59863:tid 59882] [client 4.193.240.62:13064] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aXEDU7HQ1zVZ4yLuI-wJTwAAAQ8"]
[Thu Jan 22 00:48:19.303455 2026] [:error] [pid 21455:tid 21499] [client 4.193.240.62:13081] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aXEDU4pOKALCSo1URZFo4QAAAEg"]
[Thu Jan 22 00:48:19.496052 2026] [:error] [pid 21456:tid 21542] [client 4.193.240.62:13162] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aXEDUwKyVQ9Ob2YxRArJ7wAAAJg"]
[Thu Jan 22 00:48:19.672587 2026] [:error] [pid 21455:tid 21515] [client 4.193.240.62:13142] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aXEDU4pOKALCSo1URZFo4gAAAFg"]
[Thu Jan 22 00:48:19.870008 2026] [:error] [pid 21456:tid 21534] [client 4.193.240.62:13146] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aXEDUwKyVQ9Ob2YxRArJ8QAAAJA"]
[Thu Jan 22 00:48:20.045208 2026] [:error] [pid 21455:tid 21511] [client 4.193.240.62:13150] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aXEDVIpOKALCSo1URZFo4wAAAFQ"]
[Thu Jan 22 00:48:20.278485 2026] [:error] [pid 21563:tid 21576] [client 4.193.240.62:13126] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aXEDVBZq__dTorabEozIKwAAAMs"]
[Thu Jan 22 00:48:20.486039 2026] [:error] [pid 21563:tid 21571] [client 4.193.240.62:13168] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aXEDVBZq__dTorabEozILAAAAMY"]
[Thu Jan 22 00:48:20.660080 2026] [:error] [pid 56352:tid 56372] [client 4.193.240.62:13066] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aXEDVNWN6wYNPTU3efU9-gAAAVI"]
[Thu Jan 22 00:48:20.841302 2026] [:error] [pid 21455:tid 21491] [client 4.193.240.62:13169] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aXEDVIpOKALCSo1URZFo5AAAAEA"]
[Thu Jan 22 00:48:21.026263 2026] [:error] [pid 21563:tid 21587] [client 4.193.240.62:13073] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aXEDVRZq__dTorabEozILQAAANY"]
[Thu Jan 22 00:48:21.219118 2026] [:error] [pid 59863:tid 59878] [client 4.193.240.62:13071] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aXEDVbHQ1zVZ4yLuI-wJUQAAAQs"]
[Thu Jan 22 00:48:21.397953 2026] [:error] [pid 21454:tid 21482] [client 4.193.240.62:13067] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDVTwp5UZmMFzY2bp1GAAAABI"]
[Thu Jan 22 00:48:21.573568 2026] [:error] [pid 21563:tid 21580] [client 4.193.240.62:13088] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDVRZq__dTorabEozILgAAAM8"]
[Thu Jan 22 00:48:21.780410 2026] [:error] [pid 21563:tid 21569] [client 4.193.240.62:13085] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDVRZq__dTorabEozILwAAAMQ"]
[Thu Jan 22 00:48:21.958406 2026] [:error] [pid 4382:tid 4394] [client 4.193.240.62:13141] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDVZHg0falVG3JFbCCJAAAAYo"]
[Thu Jan 22 00:48:22.132578 2026] [:error] [pid 4382:tid 4388] [client 4.193.240.62:13056] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aXEDVpHg0falVG3JFbCCJQAAAYQ"]
[Thu Jan 22 00:48:22.316385 2026] [:error] [pid 21563:tid 21565] [client 4.193.240.62:9163] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aXEDVhZq__dTorabEozIMAAAAMA"]
[Thu Jan 22 00:48:22.564220 2026] [:error] [pid 21456:tid 21523] [client 4.193.240.62:13121] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aXEDVgKyVQ9Ob2YxRArJ9AAAAIU"]
[Thu Jan 22 00:48:22.740384 2026] [:error] [pid 21455:tid 21500] [client 4.193.240.62:13138] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aXEDVopOKALCSo1URZFo6AAAAEk"]
[Thu Jan 22 00:48:22.933215 2026] [:error] [pid 21454:tid 21480] [client 4.193.240.62:13173] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aXEDVjwp5UZmMFzY2bp1GwAAABA"]
[Thu Jan 22 00:48:23.107050 2026] [:error] [pid 59863:tid 59885] [client 4.193.240.62:13065] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aXEDV7HQ1zVZ4yLuI-wJUwAAARI"]
[Thu Jan 22 00:48:23.285771 2026] [:error] [pid 4382:tid 4387] [client 4.193.240.62:13077] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aXEDV5Hg0falVG3JFbCCJgAAAYM"]
[Thu Jan 22 00:48:23.462514 2026] [:error] [pid 4382:tid 4398] [client 4.193.240.62:13148] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aXEDV5Hg0falVG3JFbCCJwAAAY4"]
[Thu Jan 22 00:48:23.636513 2026] [:error] [pid 4382:tid 4400] [client 4.193.240.62:9156] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXEDV5Hg0falVG3JFbCCKAAAAZA"]
[Thu Jan 22 00:48:23.812344 2026] [:error] [pid 59863:tid 59879] [client 4.193.240.62:13079] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXEDV7HQ1zVZ4yLuI-wJVQAAAQw"]
[Thu Jan 22 00:48:24.055861 2026] [:error] [pid 56352:tid 56371] [client 4.193.240.62:13108] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXEDWNWN6wYNPTU3efU9-wAAAVE"]
[Thu Jan 22 00:48:24.236803 2026] [:error] [pid 21454:tid 21485] [client 4.193.240.62:13158] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXEDWDwp5UZmMFzY2bp1HgAAABU"]
[Thu Jan 22 00:48:24.453471 2026] [:error] [pid 21456:tid 21527] [client 4.193.240.62:13154] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXEDWAKyVQ9Ob2YxRArJ9wAAAIk"]
[Thu Jan 22 00:48:24.628338 2026] [:error] [pid 4382:tid 4402] [client 4.193.240.62:13093] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXEDWJHg0falVG3JFbCCKwAAAZI"]
[Thu Jan 22 00:48:24.808256 2026] [:error] [pid 56352:tid 56377] [client 4.193.240.62:9105] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXEDWNWN6wYNPTU3efU9_gAAAVc"]
[Thu Jan 22 00:48:24.986893 2026] [:error] [pid 21454:tid 21476] [client 4.193.240.62:9198] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "aXEDWDwp5UZmMFzY2bp1IAAAAAw"]
[Thu Jan 22 00:48:25.175454 2026] [:error] [pid 21456:tid 21531] [client 4.193.240.62:13106] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aXEDWQKyVQ9Ob2YxRArJ-AAAAI0"]
[Thu Jan 22 00:48:25.353068 2026] [:error] [pid 56352:tid 56365] [client 4.193.240.62:9190] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aXEDWdWN6wYNPTU3efU9_wAAAUs"]
[Thu Jan 22 00:48:25.537937 2026] [:error] [pid 21455:tid 21493] [client 4.193.240.62:13131] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aXEDWYpOKALCSo1URZFo6QAAAEI"]
[Thu Jan 22 00:48:25.718267 2026] [:error] [pid 59863:tid 59891] [client 4.193.240.62:13100] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aXEDWbHQ1zVZ4yLuI-wJVwAAARg"]
[Thu Jan 22 00:48:25.899853 2026] [:error] [pid 21454:tid 21477] [client 4.193.240.62:13092] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aXEDWTwp5UZmMFzY2bp1IwAAAA0"]
[Thu Jan 22 00:48:26.089516 2026] [:error] [pid 21456:tid 21536] [client 4.193.240.62:9181] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aXEDWgKyVQ9Ob2YxRArJ-QAAAJI"]
[Thu Jan 22 00:48:26.282113 2026] [:error] [pid 4382:tid 4406] [client 4.193.240.62:13151] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aXEDWpHg0falVG3JFbCCLAAAAZY"]
[Thu Jan 22 00:48:26.487495 2026] [:error] [pid 56352:tid 56356] [client 4.193.240.62:13123] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aXEDWtWN6wYNPTU3efU-AQAAAUI"]
[Thu Jan 22 00:48:26.680796 2026] [:error] [pid 21454:tid 21472] [client 4.193.240.62:9206] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aXEDWjwp5UZmMFzY2bp1JQAAAAg"]
[Thu Jan 22 00:48:26.862313 2026] [:error] [pid 21455:tid 21499] [client 4.193.240.62:13104] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aXEDWopOKALCSo1URZFo6gAAAEg"]
[Thu Jan 22 00:48:27.047076 2026] [:error] [pid 59863:tid 59876] [client 4.193.240.62:9189] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aXEDW7HQ1zVZ4yLuI-wJWQAAAQk"]
[Thu Jan 22 00:48:27.247617 2026] [:error] [pid 56352:tid 56363] [client 4.193.240.62:9159] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "aXEDW9WN6wYNPTU3efU-AwAAAUk"]
[Thu Jan 22 00:48:27.443970 2026] [:error] [pid 56352:tid 56375] [client 4.193.240.62:9109] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aXEDW9WN6wYNPTU3efU-BAAAAVU"]
[Thu Jan 22 00:48:27.631247 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:13111] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aXEDW4pOKALCSo1URZFo6wAAAFU"]
[Thu Jan 22 00:48:27.825259 2026] [:error] [pid 21455:tid 21503] [client 4.193.240.62:13165] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aXEDW4pOKALCSo1URZFo7AAAAEw"]
[Thu Jan 22 00:48:28.008886 2026] [:error] [pid 21454:tid 21488] [client 4.193.240.62:13069] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aXEDXDwp5UZmMFzY2bp1JwAAABg"]
[Thu Jan 22 00:48:28.205759 2026] [:error] [pid 21454:tid 21483] [client 4.193.240.62:13062] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDXDwp5UZmMFzY2bp1KAAAABM"]
[Thu Jan 22 00:48:28.382409 2026] [:error] [pid 21454:tid 21485] [client 4.193.240.62:13139] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDXDwp5UZmMFzY2bp1KQAAABU"]
[Thu Jan 22 00:48:28.608871 2026] [:error] [pid 4382:tid 4404] [client 4.193.240.62:13090] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDXJHg0falVG3JFbCCLgAAAZQ"]
[Thu Jan 22 00:48:28.783095 2026] [:error] [pid 56352:tid 56367] [client 4.193.240.62:13117] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDXNWN6wYNPTU3efU-CQAAAU0"]
[Thu Jan 22 00:48:28.960956 2026] [:error] [pid 21455:tid 21510] [client 4.193.240.62:13096] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aXEDXIpOKALCSo1URZFo7QAAAFM"]
[Thu Jan 22 00:48:29.155841 2026] [:error] [pid 21455:tid 21504] [client 4.193.240.62:9213] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aXEDXYpOKALCSo1URZFo7gAAAE0"]
[Thu Jan 22 00:48:29.340876 2026] [:error] [pid 21456:tid 21520] [client 4.193.240.62:13058] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aXEDXQKyVQ9Ob2YxRArJ-wAAAII"]
[Thu Jan 22 00:48:29.545244 2026] [:error] [pid 21455:tid 21493] [client 4.193.240.62:13125] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aXEDXYpOKALCSo1URZFo7wAAAEI"]
[Thu Jan 22 00:48:29.719268 2026] [:error] [pid 21454:tid 21470] [client 4.193.240.62:9185] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXEDXTwp5UZmMFzY2bp1LAAAAAY"]
[Thu Jan 22 00:48:29.899079 2026] [:error] [pid 21455:tid 21506] [client 4.193.240.62:9203] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aXEDXYpOKALCSo1URZFo8AAAAE8"]
[Thu Jan 22 00:48:30.094132 2026] [:error] [pid 21455:tid 21515] [client 4.193.240.62:9167] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aXEDXopOKALCSo1URZFo8QAAAFg"]
[Thu Jan 22 00:48:30.276433 2026] [:error] [pid 21454:tid 21488] [client 4.193.240.62:9174] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aXEDXjwp5UZmMFzY2bp1LwAAABg"]
[Thu Jan 22 00:48:30.449980 2026] [:error] [pid 21455:tid 21498] [client 4.193.240.62:13105] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aXEDXopOKALCSo1URZFo8wAAAEc"]
[Thu Jan 22 00:48:30.625073 2026] [:error] [pid 21456:tid 21524] [client 4.193.240.62:13112] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aXEDXgKyVQ9Ob2YxRArJ_AAAAIY"]
[Thu Jan 22 00:48:30.800169 2026] [:error] [pid 21454:tid 21479] [client 4.193.240.62:13061] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aXEDXjwp5UZmMFzY2bp1MgAAAA8"]
[Thu Jan 22 00:48:30.989569 2026] [:error] [pid 21456:tid 21522] [client 4.193.240.62:9108] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aXEDXgKyVQ9Ob2YxRArJ_QAAAIQ"]
[Thu Jan 22 00:48:31.174330 2026] [:error] [pid 59863:tid 59878] [client 4.193.240.62:13177] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDX7HQ1zVZ4yLuI-wJYAAAAQs"]
[Thu Jan 22 00:48:31.358191 2026] [:error] [pid 21563:tid 21589] [client 4.193.240.62:9188] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDXxZq__dTorabEozIMQAAANg"]
[Thu Jan 22 00:48:31.554276 2026] [:error] [pid 21456:tid 21519] [client 4.193.240.62:13072] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDXwKyVQ9Ob2YxRArJ_gAAAIE"]
[Thu Jan 22 00:48:31.743028 2026] [:error] [pid 21455:tid 21497] [client 4.193.240.62:13129] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDX4pOKALCSo1URZFo9QAAAEY"]
[Thu Jan 22 00:48:31.916931 2026] [:error] [pid 56352:tid 56366] [client 4.193.240.62:9125] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXEDX9WN6wYNPTU3efU-EQAAAUw"]
[Thu Jan 22 00:48:32.140611 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:13113] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXEDYIpOKALCSo1URZFo9gAAAFU"]
[Thu Jan 22 00:48:32.315391 2026] [:error] [pid 21563:tid 21577] [client 4.193.240.62:9177] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXEDYBZq__dTorabEozIMwAAAMw"]
[Thu Jan 22 00:48:32.490345 2026] [:error] [pid 59863:tid 59875] [client 4.193.240.62:13089] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXEDYLHQ1zVZ4yLuI-wJYwAAAQg"]
[Thu Jan 22 00:48:32.672850 2026] [:error] [pid 4382:tid 4401] [client 4.193.240.62:9186] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aXEDYJHg0falVG3JFbCCMAAAAZE"]
[Thu Jan 22 00:48:32.846618 2026] [:error] [pid 4382:tid 4408] [client 4.193.240.62:13072] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aXEDYJHg0falVG3JFbCCMQAAAZg"]
[Thu Jan 22 00:48:33.033430 2026] [:error] [pid 21454:tid 21466] [client 4.193.240.62:13144] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aXEDYTwp5UZmMFzY2bp1NgAAAAI"]
[Thu Jan 22 00:48:33.208721 2026] [:error] [pid 21456:tid 21531] [client 4.193.240.62:9199] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aXEDYQKyVQ9Ob2YxRArKAAAAAI0"]
[Thu Jan 22 00:48:33.385917 2026] [:error] [pid 4382:tid 4386] [client 4.193.240.62:9195] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDYZHg0falVG3JFbCCNAAAAYI"]
[Thu Jan 22 00:48:33.596624 2026] [:error] [pid 21455:tid 21501] [client 4.193.240.62:9197] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDYYpOKALCSo1URZFo-AAAAEo"]
[Thu Jan 22 00:48:33.789175 2026] [:error] [pid 21456:tid 21525] [client 4.193.240.62:13086] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDYQKyVQ9Ob2YxRArKAQAAAIc"]
[Thu Jan 22 00:48:33.973316 2026] [:error] [pid 21456:tid 21535] [client 4.193.240.62:9155] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXEDYQKyVQ9Ob2YxRArKAgAAAJE"]
[Thu Jan 22 00:48:34.196570 2026] [:error] [pid 59863:tid 59887] [client 4.193.240.62:13078] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXEDYrHQ1zVZ4yLuI-wJZAAAARQ"]
[Thu Jan 22 00:48:34.394237 2026] [:error] [pid 21455:tid 21513] [client 4.193.240.62:13118] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXEDYopOKALCSo1URZFo-QAAAFY"]
[Thu Jan 22 00:48:34.584426 2026] [:error] [pid 21563:tid 21575] [client 4.193.240.62:9175] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXEDYhZq__dTorabEozINwAAAMo"]
[Thu Jan 22 00:48:34.767089 2026] [:error] [pid 21563:tid 21573] [client 4.193.240.62:9179] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXEDYhZq__dTorabEozIOQAAAMg"]
[Thu Jan 22 00:48:34.942531 2026] [:error] [pid 21563:tid 21576] [client 4.193.240.62:13128] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aXEDYhZq__dTorabEozIOgAAAMs"]
[Thu Jan 22 00:48:35.123353 2026] [:error] [pid 59863:tid 59867] [client 4.193.240.62:9165] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aXEDY7HQ1zVZ4yLuI-wJZQAAAQA"]
[Thu Jan 22 00:48:35.323145 2026] [:error] [pid 21563:tid 21571] [client 4.193.240.62:9164] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aXEDYxZq__dTorabEozIOwAAAMY"]
[Thu Jan 22 00:48:35.497707 2026] [:error] [pid 21563:tid 21566] [client 4.193.240.62:13094] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aXEDYxZq__dTorabEozIPAAAAME"]
[Thu Jan 22 00:48:35.693180 2026] [:error] [pid 21563:tid 21587] [client 4.193.240.62:13182] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXEDYxZq__dTorabEozIPQAAANY"]
[Thu Jan 22 00:48:35.879908 2026] [:error] [pid 21455:tid 21499] [client 4.193.240.62:9096] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXEDY4pOKALCSo1URZFo_QAAAEg"]
[Thu Jan 22 00:48:36.056484 2026] [:error] [pid 4382:tid 4395] [client 4.193.240.62:9183] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXEDZJHg0falVG3JFbCCNwAAAYs"]
[Thu Jan 22 00:48:36.234062 2026] [:error] [pid 56352:tid 56375] [client 4.193.240.62:9106] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXEDZNWN6wYNPTU3efU-EgAAAVU"]
[Thu Jan 22 00:48:36.408208 2026] [:error] [pid 4382:tid 4389] [client 4.193.240.62:9098] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aXEDZJHg0falVG3JFbCCOQAAAYU"]
[Thu Jan 22 00:48:36.584613 2026] [:error] [pid 21454:tid 21469] [client 4.193.240.62:9208] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aXEDZDwp5UZmMFzY2bp1OQAAAAU"]
[Thu Jan 22 00:48:36.763425 2026] [:error] [pid 21454:tid 21465] [client 4.193.240.62:13180] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aXEDZDwp5UZmMFzY2bp1OgAAAAE"]
[Thu Jan 22 00:48:36.937878 2026] [:error] [pid 4382:tid 4408] [client 4.193.240.62:9172] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aXEDZJHg0falVG3JFbCCOwAAAZg"]
[Thu Jan 22 00:48:37.134718 2026] [:error] [pid 4382:tid 4396] [client 4.193.240.62:13099] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXEDZZHg0falVG3JFbCCPAAAAYw"]
[Thu Jan 22 00:48:37.330987 2026] [:error] [pid 4382:tid 4402] [client 4.193.240.62:9178] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXEDZZHg0falVG3JFbCCPQAAAZI"]
[Thu Jan 22 00:48:37.571318 2026] [:error] [pid 56352:tid 56378] [client 4.193.240.62:9113] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXEDZdWN6wYNPTU3efU-EwAAAVg"]
[Thu Jan 22 00:48:37.748371 2026] [:error] [pid 21454:tid 21475] [client 4.193.240.62:9204] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXEDZTwp5UZmMFzY2bp1PwAAAAs"]
[Thu Jan 22 00:48:37.973047 2026] [:error] [pid 21454:tid 21484] [client 4.193.240.62:13098] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXEDZTwp5UZmMFzY2bp1QAAAABQ"]
[Thu Jan 22 00:48:38.162714 2026] [:error] [pid 59863:tid 59883] [client 4.193.240.62:9171] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXEDZrHQ1zVZ4yLuI-wJZwAAARA"]
[Thu Jan 22 00:48:38.429322 2026] [:error] [pid 21454:tid 21472] [client 4.193.240.62:13103] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXEDZjwp5UZmMFzY2bp1QgAAAAg"]
[Thu Jan 22 00:48:38.674812 2026] [:error] [pid 21456:tid 21522] [client 4.193.240.62:9104] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXEDZgKyVQ9Ob2YxRArKBgAAAIQ"]
[Thu Jan 22 00:48:38.885045 2026] [:error] [pid 21455:tid 21505] [client 4.193.240.62:13107] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aXEDZopOKALCSo1URZFpAAAAAE4"]
[Thu Jan 22 00:48:39.071718 2026] [:error] [pid 56352:tid 56371] [client 4.193.240.62:9160] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aXEDZ9WN6wYNPTU3efU-FAAAAVE"]
[Thu Jan 22 00:48:39.249385 2026] [:error] [pid 59863:tid 59880] [client 4.193.240.62:13137] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aXEDZ7HQ1zVZ4yLuI-wJaAAAAQ0"]
[Thu Jan 22 00:48:39.440258 2026] [:error] [pid 4382:tid 4403] [client 4.193.240.62:9166] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aXEDZ5Hg0falVG3JFbCCPwAAAZM"]
[Thu Jan 22 00:48:39.621564 2026] [:error] [pid 4382:tid 4392] [client 4.193.240.62:9093] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aXEDZ5Hg0falVG3JFbCCQAAAAYg"]
[Thu Jan 22 00:48:39.802328 2026] [:error] [pid 21456:tid 21539] [client 4.193.240.62:9176] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aXEDZwKyVQ9Ob2YxRArKCAAAAJU"]
[Thu Jan 22 00:48:40.018465 2026] [:error] [pid 56352:tid 56377] [client 4.193.240.62:9173] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aXEDaNWN6wYNPTU3efU-FwAAAVc"]
[Thu Jan 22 00:48:40.197866 2026] [:error] [pid 56352:tid 56361] [client 4.193.240.62:9103] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aXEDaNWN6wYNPTU3efU-GAAAAUc"]
[Thu Jan 22 00:48:40.372535 2026] [:error] [pid 21456:tid 21542] [client 4.193.240.62:9027] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXEDaAKyVQ9Ob2YxRArKCQAAAJg"]
[Thu Jan 22 00:48:40.548692 2026] [:error] [pid 21455:tid 21492] [client 4.193.240.62:9095] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXEDaIpOKALCSo1URZFpBAAAAEE"]
[Thu Jan 22 00:48:40.729711 2026] [:error] [pid 56352:tid 56365] [client 4.193.240.62:9165] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXEDaNWN6wYNPTU3efU-GQAAAUs"]
[Thu Jan 22 00:48:40.905404 2026] [:error] [pid 21455:tid 21508] [client 4.193.240.62:13101] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXEDaIpOKALCSo1URZFpBQAAAFE"]
[Thu Jan 22 00:48:41.080784 2026] [:error] [pid 21454:tid 21464] [client 4.193.240.62:13115] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDaTwp5UZmMFzY2bp1RgAAAAA"]
[Thu Jan 22 00:48:41.255867 2026] [:error] [pid 21454:tid 21479] [client 4.193.240.62:9100] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDaTwp5UZmMFzY2bp1RwAAAA8"]
[Thu Jan 22 00:48:41.435220 2026] [:error] [pid 21563:tid 21584] [client 4.193.240.62:13157] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDaRZq__dTorabEozIQgAAANM"]
[Thu Jan 22 00:48:41.608504 2026] [:error] [pid 21454:tid 21467] [client 4.193.240.62:9032] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDaTwp5UZmMFzY2bp1SAAAAAM"]
[Thu Jan 22 00:48:41.800663 2026] [:error] [pid 21563:tid 21578] [client 4.193.240.62:9182] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aXEDaRZq__dTorabEozIQwAAAM0"]
[Thu Jan 22 00:48:41.974348 2026] [:error] [pid 21456:tid 21534] [client 4.193.240.62:9120] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aXEDaQKyVQ9Ob2YxRArKCgAAAJA"]
[Thu Jan 22 00:48:42.157117 2026] [:error] [pid 4382:tid 4395] [client 4.193.240.62:9131] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aXEDapHg0falVG3JFbCCQQAAAYs"]
[Thu Jan 22 00:48:42.331914 2026] [:error] [pid 21454:tid 21471] [client 4.193.240.62:9169] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aXEDajwp5UZmMFzY2bp1SgAAAAc"]
[Thu Jan 22 00:48:42.511344 2026] [:error] [pid 59863:tid 59891] [client 4.193.240.62:9143] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXEDarHQ1zVZ4yLuI-wJbAAAARg"]
[Thu Jan 22 00:48:42.697044 2026] [:error] [pid 21563:tid 21576] [client 4.193.240.62:13114] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXEDahZq__dTorabEozIRQAAAMs"]
[Thu Jan 22 00:48:42.877687 2026] [:error] [pid 21456:tid 21526] [client 4.193.240.62:9193] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXEDagKyVQ9Ob2YxRArKCwAAAIg"]
[Thu Jan 22 00:48:43.066670 2026] [:error] [pid 56352:tid 56355] [client 4.193.240.62:9194] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXEDa9WN6wYNPTU3efU-GwAAAUE"]
[Thu Jan 22 00:48:43.249837 2026] [:error] [pid 56352:tid 56367] [client 4.193.240.62:9210] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aXEDa9WN6wYNPTU3efU-HAAAAU0"]
[Thu Jan 22 00:48:43.479066 2026] [:error] [pid 4382:tid 4404] [client 4.193.240.62:9137] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aXEDa5Hg0falVG3JFbCCRAAAAZQ"]
[Thu Jan 22 00:48:43.685687 2026] [:error] [pid 4382:tid 4393] [client 4.193.240.62:9201] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aXEDa5Hg0falVG3JFbCCRQAAAYk"]
[Thu Jan 22 00:48:43.858545 2026] [:error] [pid 21454:tid 21481] [client 4.193.240.62:9097] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aXEDazwp5UZmMFzY2bp1SwAAABE"]
[Thu Jan 22 00:48:44.101215 2026] [:error] [pid 4382:tid 4385] [client 4.193.240.62:13109] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aXEDbJHg0falVG3JFbCCRgAAAYE"]
[Thu Jan 22 00:48:44.302959 2026] [:error] [pid 4382:tid 4390] [client 4.193.240.62:9154] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aXEDbJHg0falVG3JFbCCRwAAAYY"]
[Thu Jan 22 00:48:44.528003 2026] [:error] [pid 56352:tid 56357] [client 4.193.240.62:9130] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aXEDbNWN6wYNPTU3efU-HgAAAUM"]
[Thu Jan 22 00:48:44.719343 2026] [:error] [pid 21563:tid 21585] [client 4.193.240.62:9119] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aXEDbBZq__dTorabEozISQAAANQ"]
[Thu Jan 22 00:48:44.921779 2026] [:error] [pid 21454:tid 21468] [client 4.193.240.62:13156] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aXEDbDwp5UZmMFzY2bp1TAAAAAQ"]
[Thu Jan 22 00:48:45.121458 2026] [:error] [pid 21563:tid 21587] [client 4.193.240.62:9102] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aXEDbRZq__dTorabEozISgAAANY"]
[Thu Jan 22 00:48:45.312280 2026] [:error] [pid 4382:tid 4400] [client 4.193.240.62:13176] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aXEDbZHg0falVG3JFbCCSAAAAZA"]
[Thu Jan 22 00:48:45.493632 2026] [:error] [pid 21456:tid 21524] [client 4.193.240.62:9091] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aXEDbQKyVQ9Ob2YxRArKEQAAAIY"]
[Thu Jan 22 00:48:45.694624 2026] [:error] [pid 21456:tid 21522] [client 4.193.240.62:9118] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aXEDbQKyVQ9Ob2YxRArKEgAAAIQ"]
[Thu Jan 22 00:48:45.906874 2026] [:error] [pid 21456:tid 21539] [client 4.193.240.62:9057] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aXEDbQKyVQ9Ob2YxRArKEwAAAJU"]
[Thu Jan 22 00:48:46.093623 2026] [:error] [pid 21456:tid 21542] [client 4.193.240.62:13183] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aXEDbgKyVQ9Ob2YxRArKFAAAAJg"]
[Thu Jan 22 00:48:46.280509 2026] [:error] [pid 21563:tid 21582] [client 4.193.240.62:9150] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aXEDbhZq__dTorabEozITAAAANE"]
[Thu Jan 22 00:48:46.455516 2026] [:error] [pid 59863:tid 59884] [client 4.193.240.62:9214] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aXEDbrHQ1zVZ4yLuI-wJbgAAARE"]
[Thu Jan 22 00:48:46.638326 2026] [:error] [pid 4382:tid 4401] [client 4.193.240.62:9152] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aXEDbpHg0falVG3JFbCCSwAAAZE"]
[Thu Jan 22 00:48:46.811690 2026] [:error] [pid 21456:tid 21541] [client 4.193.240.62:9036] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aXEDbgKyVQ9Ob2YxRArKFQAAAJc"]
[Thu Jan 22 00:48:46.987094 2026] [:error] [pid 4382:tid 4402] [client 4.193.240.62:9033] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aXEDbpHg0falVG3JFbCCTQAAAZI"]
[Thu Jan 22 00:48:47.173031 2026] [:error] [pid 59863:tid 59887] [client 4.193.240.62:9114] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDb7HQ1zVZ4yLuI-wJbwAAARQ"]
[Thu Jan 22 00:48:47.353892 2026] [:error] [pid 4382:tid 4403] [client 4.193.240.62:9184] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDb5Hg0falVG3JFbCCTgAAAZM"]
[Thu Jan 22 00:48:47.539487 2026] [:error] [pid 21563:tid 21569] [client 4.193.240.62:9191] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDbxZq__dTorabEozIUAAAAMQ"]
[Thu Jan 22 00:48:47.713539 2026] [:error] [pid 59863:tid 59876] [client 4.193.240.62:9162] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aXEDb7HQ1zVZ4yLuI-wJcAAAAQk"]
[Thu Jan 22 00:48:47.900925 2026] [:error] [pid 56352:tid 56378] [client 4.193.240.62:9034] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aXEDb9WN6wYNPTU3efU-IAAAAVg"]
[Thu Jan 22 00:48:48.081608 2026] [:error] [pid 21456:tid 21521] [client 4.193.240.62:9200] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aXEDcAKyVQ9Ob2YxRArKFwAAAIM"]
[Thu Jan 22 00:48:48.260617 2026] [:error] [pid 56352:tid 56377] [client 4.193.240.62:13149] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aXEDcNWN6wYNPTU3efU-IQAAAVc"]
[Thu Jan 22 00:48:48.443228 2026] [:error] [pid 21454:tid 21467] [client 4.193.240.62:9147] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "aXEDcDwp5UZmMFzY2bp1TQAAAAM"]
[Thu Jan 22 00:48:48.622915 2026] [:error] [pid 56352:tid 56374] [client 4.193.240.62:9180] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aXEDcNWN6wYNPTU3efU-JAAAAVQ"]
[Thu Jan 22 00:48:48.802252 2026] [:error] [pid 4382:tid 4404] [client 4.193.240.62:13170] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aXEDcJHg0falVG3JFbCCUAAAAZQ"]
[Thu Jan 22 00:48:48.981622 2026] [:error] [pid 21563:tid 21574] [client 4.193.240.62:13143] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aXEDcBZq__dTorabEozIUQAAAMk"]
[Thu Jan 22 00:48:49.186981 2026] [:error] [pid 59863:tid 59880] [client 4.193.240.62:9094] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aXEDcbHQ1zVZ4yLuI-wJcQAAAQ0"]
[Thu Jan 22 00:48:49.406453 2026] [:error] [pid 21455:tid 21501] [client 4.193.240.62:13134] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aXEDcYpOKALCSo1URZFpCAAAAEo"]
[Thu Jan 22 00:48:49.607376 2026] [:error] [pid 59863:tid 59890] [client 4.193.240.62:13133] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aXEDcbHQ1zVZ4yLuI-wJcgAAARc"]
[Thu Jan 22 00:48:49.780441 2026] [:error] [pid 21454:tid 21469] [client 4.193.240.62:9024] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aXEDcTwp5UZmMFzY2bp1TgAAAAU"]
[Thu Jan 22 00:48:49.969003 2026] [:error] [pid 21456:tid 21524] [client 4.193.240.62:13095] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aXEDcQKyVQ9Ob2YxRArKGAAAAIY"]
[Thu Jan 22 00:48:50.150231 2026] [:error] [pid 56352:tid 56355] [client 4.193.240.62:9153] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aXEDctWN6wYNPTU3efU-JQAAAUE"]
[Thu Jan 22 00:48:50.327385 2026] [:error] [pid 21456:tid 21527] [client 4.193.240.62:9116] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aXEDcgKyVQ9Ob2YxRArKHAAAAIk"]
[Thu Jan 22 00:48:50.500747 2026] [:error] [pid 56352:tid 56369] [client 4.193.240.62:9044] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aXEDctWN6wYNPTU3efU-JgAAAU8"]
[Thu Jan 22 00:48:50.679052 2026] [:error] [pid 21456:tid 21525] [client 4.193.240.62:13159] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aXEDcgKyVQ9Ob2YxRArKHgAAAIc"]
[Thu Jan 22 00:48:50.852734 2026] [:error] [pid 59863:tid 59872] [client 4.193.240.62:8991] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDcrHQ1zVZ4yLuI-wJcwAAAQU"]
[Thu Jan 22 00:48:51.026448 2026] [:error] [pid 59863:tid 59877] [client 4.193.240.62:9215] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDc7HQ1zVZ4yLuI-wJdAAAAQo"]
[Thu Jan 22 00:48:51.217918 2026] [:error] [pid 21456:tid 21534] [client 4.193.240.62:9038] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDcwKyVQ9Ob2YxRArKHwAAAJA"]
[Thu Jan 22 00:48:51.395305 2026] [:error] [pid 21563:tid 21575] [client 4.193.240.62:9212] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aXEDcxZq__dTorabEozIVQAAAMo"]
[Thu Jan 22 00:48:51.590236 2026] [:error] [pid 21454:tid 21483] [client 4.193.240.62:9151] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aXEDczwp5UZmMFzY2bp1TwAAABM"]
[Thu Jan 22 00:48:51.789109 2026] [:error] [pid 21454:tid 21471] [client 4.193.240.62:8966] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aXEDczwp5UZmMFzY2bp1UAAAAAc"]
[Thu Jan 22 00:48:52.026076 2026] [:error] [pid 21455:tid 21491] [client 4.193.240.62:9142] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aXEDdIpOKALCSo1URZFpCwAAAEA"]
[Thu Jan 22 00:48:52.205430 2026] [:error] [pid 21454:tid 21472] [client 4.193.240.62:9200] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aXEDdDwp5UZmMFzY2bp1UQAAAAg"]
[Thu Jan 22 00:48:52.394658 2026] [:error] [pid 21563:tid 21581] [client 4.193.240.62:9144] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aXEDdBZq__dTorabEozIVgAAANA"]
[Thu Jan 22 00:48:52.580497 2026] [:error] [pid 21454:tid 21487] [client 4.193.240.62:13132] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aXEDdDwp5UZmMFzY2bp1UwAAABc"]
[Thu Jan 22 00:48:52.777761 2026] [:error] [pid 21454:tid 21478] [client 4.193.240.62:9119] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aXEDdDwp5UZmMFzY2bp1VQAAAA4"]
[Thu Jan 22 00:48:52.958733 2026] [:error] [pid 21454:tid 21481] [client 4.193.240.62:9043] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aXEDdDwp5UZmMFzY2bp1VgAAABE"]
[Thu Jan 22 00:48:53.152817 2026] [:error] [pid 56352:tid 56360] [client 4.193.240.62:9161] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aXEDddWN6wYNPTU3efU-KQAAAUY"]
[Thu Jan 22 00:48:53.373275 2026] [:error] [pid 21456:tid 21540] [client 4.193.240.62:9205] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aXEDdQKyVQ9Ob2YxRArKIQAAAJY"]
[Thu Jan 22 00:48:53.605850 2026] [:error] [pid 21454:tid 21476] [client 4.193.240.62:9026] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aXEDdTwp5UZmMFzY2bp1WAAAAAw"]
[Thu Jan 22 00:48:53.804456 2026] [:error] [pid 4382:tid 4394] [client 4.193.240.62:8984] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aXEDdZHg0falVG3JFbCCVQAAAYo"]
[Thu Jan 22 00:48:53.996123 2026] [:error] [pid 59863:tid 59885] [client 4.193.240.62:9148] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aXEDdbHQ1zVZ4yLuI-wJdQAAARI"]
[Thu Jan 22 00:48:54.212114 2026] [:error] [pid 21563:tid 21586] [client 4.193.240.62:9060] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aXEDdhZq__dTorabEozIVwAAANU"]
[Thu Jan 22 00:48:54.637626 2026] [:error] [pid 21563:tid 21585] [client 4.193.240.62:13083] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aXEDdhZq__dTorabEozIWAAAANQ"]
[Thu Jan 22 00:48:54.859312 2026] [:error] [pid 21454:tid 21470] [client 4.193.240.62:9209] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aXEDdjwp5UZmMFzY2bp1WwAAAAY"]
[Thu Jan 22 00:48:55.121389 2026] [:error] [pid 21454:tid 21482] [client 4.193.240.62:8964] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aXEDdzwp5UZmMFzY2bp1XAAAABI"]
[Thu Jan 22 00:48:55.334951 2026] [:error] [pid 56352:tid 56366] [client 4.193.240.62:8992] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aXEDd9WN6wYNPTU3efU-KwAAAUw"]
[Thu Jan 22 00:48:55.552979 2026] [:error] [pid 21563:tid 21568] [client 4.193.240.62:9202] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aXEDdxZq__dTorabEozIWgAAAMM"]
[Thu Jan 22 00:48:55.738888 2026] [:error] [pid 21454:tid 21465] [client 4.193.240.62:9122] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aXEDdzwp5UZmMFzY2bp1XwAAAAE"]
[Thu Jan 22 00:48:55.939565 2026] [:error] [pid 59863:tid 59888] [client 4.193.240.62:8978] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXEDd7HQ1zVZ4yLuI-wJdwAAARU"]
[Thu Jan 22 00:48:56.161243 2026] [:error] [pid 59863:tid 59881] [client 4.193.240.62:13155] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXEDeLHQ1zVZ4yLuI-wJeAAAAQ4"]
[Thu Jan 22 00:48:56.345881 2026] [:error] [pid 21563:tid 21588] [client 4.193.240.62:9111] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXEDeBZq__dTorabEozIWwAAANc"]
[Thu Jan 22 00:48:56.535748 2026] [:error] [pid 59863:tid 59868] [client 4.193.240.62:13175] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aXEDeLHQ1zVZ4yLuI-wJeQAAAQE"]
[Thu Jan 22 00:48:56.772927 2026] [:error] [pid 21454:tid 21478] [client 4.193.240.62:9065] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aXEDeDwp5UZmMFzY2bp1YQAAAA4"]
[Thu Jan 22 00:48:56.957671 2026] [:error] [pid 4382:tid 4404] [client 4.193.240.62:9038] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aXEDeJHg0falVG3JFbCCVwAAAZQ"]
[Thu Jan 22 00:48:57.214085 2026] [:error] [pid 21456:tid 21531] [client 4.193.240.62:9063] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aXEDeQKyVQ9Ob2YxRArKIgAAAI0"]
[Thu Jan 22 00:48:57.478366 2026] [:error] [pid 4382:tid 4405] [client 4.193.240.62:9124] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aXEDeZHg0falVG3JFbCCWAAAAZU"]
[Thu Jan 22 00:48:57.708226 2026] [:error] [pid 21454:tid 21466] [client 4.193.240.62:9207] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXEDeTwp5UZmMFzY2bp1ZAAAAAI"]
[Thu Jan 22 00:48:58.029389 2026] [:error] [pid 21563:tid 21573] [client 4.193.240.62:9200] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aXEDehZq__dTorabEozIXQAAAMg"]
[Thu Jan 22 00:48:58.261043 2026] [:error] [pid 21454:tid 21471] [client 4.193.240.62:8963] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aXEDejwp5UZmMFzY2bp1ZQAAAAc"]
[Thu Jan 22 00:48:58.497595 2026] [:error] [pid 21454:tid 21465] [client 4.193.240.62:9112] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aXEDejwp5UZmMFzY2bp1aQAAAAE"]
[Thu Jan 22 00:48:58.710797 2026] [:error] [pid 59863:tid 59883] [client 4.193.240.62:9128] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aXEDerHQ1zVZ4yLuI-wJewAAARA"]
[Thu Jan 22 00:48:58.899092 2026] [:error] [pid 59863:tid 59870] [client 4.193.240.62:13119] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aXEDerHQ1zVZ4yLuI-wJfAAAAQM"]
[Thu Jan 22 00:48:59.091210 2026] [:error] [pid 21454:tid 21478] [client 4.193.240.62:9133] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXEDezwp5UZmMFzY2bp1bQAAAA4"]
[Thu Jan 22 00:48:59.301704 2026] [:error] [pid 21563:tid 21587] [client 4.193.240.62:9029] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXEDexZq__dTorabEozIXgAAANY"]
[Thu Jan 22 00:48:59.485692 2026] [:error] [pid 21454:tid 21474] [client 4.193.240.62:9107] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXEDezwp5UZmMFzY2bp1bgAAAAo"]
[Thu Jan 22 00:48:59.687368 2026] [:error] [pid 21454:tid 21473] [client 4.193.240.62:9138] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXEDezwp5UZmMFzY2bp1bwAAAAk"]
[Thu Jan 22 00:49:00.011287 2026] [:error] [pid 4382:tid 4385] [client 4.193.240.62:9140] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aXEDfJHg0falVG3JFbCCWQAAAYE"]
[Thu Jan 22 00:49:00.242482 2026] [:error] [pid 21454:tid 21470] [client 4.193.240.62:9101] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aXEDfDwp5UZmMFzY2bp1cgAAAAY"]
[Thu Jan 22 00:49:00.537517 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:9050] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aXEDfIpOKALCSo1URZFpDwAAAFU"]
[Thu Jan 22 00:49:00.774466 2026] [:error] [pid 21455:tid 21514] [client 4.193.240.62:9170] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aXEDfIpOKALCSo1URZFpEAAAAFc"]
[Thu Jan 22 00:49:00.959015 2026] [:error] [pid 21455:tid 21508] [client 4.193.240.62:9055] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aXEDfIpOKALCSo1URZFpEQAAAFE"]
[Thu Jan 22 00:49:01.189396 2026] [:error] [pid 59863:tid 59880] [client 4.193.240.62:13135] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aXEDfbHQ1zVZ4yLuI-wJfQAAAQ0"]
[Thu Jan 22 00:49:01.434896 2026] [:error] [pid 21454:tid 21485] [client 4.193.240.62:9074] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aXEDfTwp5UZmMFzY2bp1cwAAABU"]
[Thu Jan 22 00:49:01.630639 2026] [:error] [pid 56352:tid 56375] [client 4.193.240.62:9115] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aXEDfdWN6wYNPTU3efU-MwAAAVU"]
[Thu Jan 22 00:49:01.826378 2026] [:error] [pid 59863:tid 59888] [client 4.193.240.62:9132] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aXEDfbHQ1zVZ4yLuI-wJgAAAARU"]
[Thu Jan 22 00:49:02.006731 2026] [:error] [pid 21455:tid 21513] [client 4.193.240.62:9088] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXEDfopOKALCSo1URZFpEgAAAFY"]
[Thu Jan 22 00:49:02.215136 2026] [:error] [pid 21455:tid 21507] [client 4.193.240.62:9002] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXEDfopOKALCSo1URZFpEwAAAFA"]
[Thu Jan 22 00:49:02.461486 2026] [:error] [pid 21454:tid 21468] [client 4.193.240.62:9092] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXEDfjwp5UZmMFzY2bp1dgAAAAQ"]
[Thu Jan 22 00:49:02.686748 2026] [:error] [pid 21563:tid 21574] [client 4.193.240.62:9127] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXEDfhZq__dTorabEozIYgAAAMk"]
[Thu Jan 22 00:49:02.885006 2026] [:error] [pid 21455:tid 21509] [client 4.193.240.62:13105] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aXEDfopOKALCSo1URZFpFAAAAFI"]
[Thu Jan 22 00:49:03.102882 2026] [:error] [pid 21563:tid 21578] [client 4.193.240.62:9187] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aXEDfxZq__dTorabEozIYwAAAM0"]
[Thu Jan 22 00:49:03.277415 2026] [:error] [pid 21455:tid 21499] [client 4.193.240.62:9136] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aXEDf4pOKALCSo1URZFpFQAAAEg"]
[Thu Jan 22 00:49:03.451104 2026] [:error] [pid 59863:tid 59884] [client 4.193.240.62:9042] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aXEDf7HQ1zVZ4yLuI-wJgwAAARE"]
[Thu Jan 22 00:49:03.680389 2026] [:error] [pid 21563:tid 21573] [client 4.193.240.62:9126] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aXEDfxZq__dTorabEozIZQAAAMg"]
[Thu Jan 22 00:49:03.864877 2026] [:error] [pid 59863:tid 59867] [client 4.193.240.62:9067] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aXEDf7HQ1zVZ4yLuI-wJhAAAAQA"]
[Thu Jan 22 00:49:04.061056 2026] [:error] [pid 21563:tid 21586] [client 4.193.240.62:9141] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aXEDgBZq__dTorabEozIZwAAANU"]
[Thu Jan 22 00:49:04.257023 2026] [:error] [pid 59863:tid 59868] [client 4.193.240.62:9192] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aXEDgLHQ1zVZ4yLuI-wJhQAAAQE"]
[Thu Jan 22 00:49:04.456479 2026] [:error] [pid 21454:tid 21482] [client 4.193.240.62:8961] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXEDgDwp5UZmMFzY2bp1dwAAABI"]
[Thu Jan 22 00:49:04.655261 2026] [:error] [pid 4382:tid 4406] [client 4.193.240.62:9070] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXEDgJHg0falVG3JFbCCXQAAAZY"]
[Thu Jan 22 00:49:04.835832 2026] [:error] [pid 4382:tid 4387] [client 4.193.240.62:9211] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXEDgJHg0falVG3JFbCCXgAAAYM"]
[Thu Jan 22 00:49:05.091922 2026] [:error] [pid 59863:tid 59875] [client 4.193.240.62:9117] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXEDgbHQ1zVZ4yLuI-wJhwAAAQg"]
[Thu Jan 22 00:49:05.278892 2026] [:error] [pid 21456:tid 21520] [client 4.193.240.62:9149] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXEDgQKyVQ9Ob2YxRArKJQAAAII"]
[Thu Jan 22 00:49:05.453535 2026] [:error] [pid 59863:tid 59871] [client 4.193.240.62:8996] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXEDgbHQ1zVZ4yLuI-wJiAAAAQQ"]
[Thu Jan 22 00:49:05.630899 2026] [:error] [pid 59863:tid 59870] [client 4.193.240.62:8979] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXEDgbHQ1zVZ4yLuI-wJiQAAAQM"]
[Thu Jan 22 00:49:05.809069 2026] [:error] [pid 59863:tid 59878] [client 4.193.240.62:9079] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXEDgbHQ1zVZ4yLuI-wJigAAAQs"]
[Thu Jan 22 00:49:06.024372 2026] [:error] [pid 21455:tid 21505] [client 4.193.240.62:13074] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aXEDgopOKALCSo1URZFpFwAAAE4"]
[Thu Jan 22 00:49:06.212006 2026] [:error] [pid 21455:tid 21492] [client 4.193.240.62:9064] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aXEDgopOKALCSo1URZFpGAAAAEE"]
[Thu Jan 22 00:49:06.385154 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:8995] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aXEDgopOKALCSo1URZFpGQAAAFU"]
[Thu Jan 22 00:49:06.579099 2026] [:error] [pid 21455:tid 21514] [client 4.193.240.62:8976] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aXEDgopOKALCSo1URZFpGgAAAFc"]
[Thu Jan 22 00:49:06.773111 2026] [:error] [pid 21455:tid 21508] [client 4.193.240.62:9077] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aXEDgopOKALCSo1URZFpGwAAAFE"]
[Thu Jan 22 00:49:06.954366 2026] [:error] [pid 21455:tid 21501] [client 4.193.240.62:9049] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aXEDgopOKALCSo1URZFpHAAAAEo"]
[Thu Jan 22 00:49:07.143671 2026] [:error] [pid 21454:tid 21472] [client 4.193.240.62:9069] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aXEDgzwp5UZmMFzY2bp1ewAAAAg"]
[Thu Jan 22 00:49:07.388766 2026] [:error] [pid 59863:tid 59873] [client 4.193.240.62:9016] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aXEDg7HQ1zVZ4yLuI-wJjQAAAQY"]
[Thu Jan 22 00:49:07.603745 2026] [:error] [pid 4382:tid 4394] [client 4.193.240.62:9086] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aXEDg5Hg0falVG3JFbCCYQAAAYo"]
[Thu Jan 22 00:49:07.834122 2026] [:error] [pid 59863:tid 59890] [client 4.193.240.62:9058] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aXEDg7HQ1zVZ4yLuI-wJjwAAARc"]
[Thu Jan 22 00:49:08.098261 2026] [:error] [pid 56352:tid 56373] [client 4.193.240.62:9080] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aXEDhNWN6wYNPTU3efU-NQAAAVM"]
[Thu Jan 22 00:49:08.272320 2026] [:error] [pid 21456:tid 21533] [client 4.193.240.62:8969] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "aXEDhAKyVQ9Ob2YxRArKJwAAAI8"]
[Thu Jan 22 00:49:08.458689 2026] [:error] [pid 59863:tid 59876] [client 4.193.240.62:8962] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXEDhLHQ1zVZ4yLuI-wJkQAAAQk"]
[Thu Jan 22 00:49:08.636029 2026] [:error] [pid 21456:tid 21527] [client 4.193.240.62:9001] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXEDhAKyVQ9Ob2YxRArKKQAAAIk"]
[Thu Jan 22 00:49:08.915404 2026] [:error] [pid 21454:tid 21477] [client 4.193.240.62:8996] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXEDhDwp5UZmMFzY2bp1fQAAAA0"]
[Thu Jan 22 00:49:09.109605 2026] [:error] [pid 21456:tid 21539] [client 4.193.240.62:13102] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXEDhQKyVQ9Ob2YxRArKKwAAAJU"]
[Thu Jan 22 00:49:09.340939 2026] [:error] [pid 21456:tid 21542] [client 4.193.240.62:9135] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXEDhQKyVQ9Ob2YxRArKLAAAAJg"]
[Thu Jan 22 00:49:09.532657 2026] [:error] [pid 21456:tid 21541] [client 4.193.240.62:9145] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXEDhQKyVQ9Ob2YxRArKLQAAAJc"]
[Thu Jan 22 00:49:09.758848 2026] [:error] [pid 21454:tid 21484] [client 4.193.240.62:9000] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXEDhTwp5UZmMFzY2bp1fwAAABQ"]
[Thu Jan 22 00:49:09.984963 2026] [:error] [pid 4382:tid 4392] [client 4.193.240.62:9037] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aXEDhZHg0falVG3JFbCCYwAAAYg"]
[Thu Jan 22 00:49:10.252756 2026] [:error] [pid 21454:tid 21481] [client 4.193.240.62:8994] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXEDhjwp5UZmMFzY2bp1gQAAABE"]
[Thu Jan 22 00:49:11.087914 2026] [:error] [pid 4382:tid 4390] [client 4.193.240.62:9110] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Jan 22 00:49:11.193879 2026] [:error] [pid 4382:tid 4389] [client 4.193.240.62:9110] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Thu Jan 22 00:49:11.309003 2026] [:error] [pid 4382:tid 4388] [client 4.193.240.62:9110] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aXEDh5Hg0falVG3JFbCCbgAAAYQ"]
[Thu Jan 22 00:49:11.541966 2026] [:error] [pid 59863:tid 59884] [client 4.193.240.62:9089] [client 4.193.240.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aXEDh7HQ1zVZ4yLuI-wJmAAAARE"]
[Thu Jan 22 00:49:11.757490 2026] [:error] [pid 59863:tid 59868] [client 4.193.240.62:8971] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Jan 22 00:49:11.844423 2026] [:error] [pid 59863:tid 59867] [client 4.193.240.62:8971] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aXEDh7HQ1zVZ4yLuI-wJmgAAAQA"]
[Thu Jan 22 00:49:12.106479 2026] [:error] [pid 59863:tid 59882] [client 4.193.240.62:9078] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aXEDiLHQ1zVZ4yLuI-wJmwAAAQ8"]
[Thu Jan 22 00:49:12.400584 2026] [:error] [pid 21456:tid 21540] [client 4.193.240.62:8968] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aXEDiAKyVQ9Ob2YxRArKLgAAAJY"]
[Thu Jan 22 00:49:12.662350 2026] [:error] [pid 56352:tid 56376] [client 4.193.240.62:9041] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aXEDiNWN6wYNPTU3efU-OAAAAVY"]
[Thu Jan 22 00:49:12.846364 2026] [:error] [pid 56352:tid 56373] [client 4.193.240.62:9035] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXEDiNWN6wYNPTU3efU-OQAAAVM"]
[Thu Jan 22 00:49:13.041473 2026] [:error] [pid 56352:tid 56372] [client 4.193.240.62:9046] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXEDidWN6wYNPTU3efU-OgAAAVI"]
[Thu Jan 22 00:49:13.215173 2026] [:error] [pid 59863:tid 59878] [client 4.193.240.62:8911] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXEDibHQ1zVZ4yLuI-wJngAAAQs"]
[Thu Jan 22 00:49:13.410846 2026] [:error] [pid 21563:tid 21587] [client 4.193.240.62:9004] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aXEDiRZq__dTorabEozIaQAAANY"]
[Thu Jan 22 00:49:13.610306 2026] [:error] [pid 21455:tid 21509] [client 4.193.240.62:9040] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aXEDiYpOKALCSo1URZFpHgAAAFI"]
[Thu Jan 22 00:49:13.787436 2026] [:error] [pid 21455:tid 21506] [client 4.193.240.62:8919] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aXEDiYpOKALCSo1URZFpHwAAAE8"]
[Thu Jan 22 00:49:13.960029 2026] [:error] [pid 59863:tid 59889] [client 4.193.240.62:9076] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aXEDibHQ1zVZ4yLuI-wJnwAAARY"]
[Thu Jan 22 00:49:14.143222 2026] [:error] [pid 59863:tid 59872] [client 4.193.240.62:9073] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aXEDirHQ1zVZ4yLuI-wJoAAAAQU"]
[Thu Jan 22 00:49:14.330214 2026] [:error] [pid 21456:tid 21539] [client 4.193.240.62:9082] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aXEDigKyVQ9Ob2YxRArKMAAAAJU"]
[Thu Jan 22 00:49:14.506272 2026] [:error] [pid 21455:tid 21504] [client 4.193.240.62:9028] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aXEDiopOKALCSo1URZFpIQAAAE0"]
[Thu Jan 22 00:49:14.717009 2026] [:error] [pid 21455:tid 21496] [client 4.193.240.62:8965] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aXEDiopOKALCSo1URZFpIgAAAEU"]
[Thu Jan 22 00:49:14.910000 2026] [:error] [pid 21455:tid 21514] [client 4.193.240.62:8975] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aXEDiopOKALCSo1URZFpIwAAAFc"]
[Thu Jan 22 00:49:15.101162 2026] [:error] [pid 21455:tid 21498] [client 4.193.240.62:8983] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aXEDi4pOKALCSo1URZFpJAAAAEc"]
[Thu Jan 22 00:49:15.321460 2026] [:error] [pid 21455:tid 21507] [client 4.193.240.62:9051] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aXEDi4pOKALCSo1URZFpJQAAAFA"]
[Thu Jan 22 00:49:15.500120 2026] [:error] [pid 4382:tid 4395] [client 4.193.240.62:9071] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aXEDi5Hg0falVG3JFbCCbwAAAYs"]
[Thu Jan 22 00:49:15.676499 2026] [:error] [pid 21455:tid 21503] [client 4.193.240.62:9006] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aXEDi4pOKALCSo1URZFpKAAAAEw"]
[Thu Jan 22 00:49:15.852668 2026] [:error] [pid 21456:tid 21524] [client 4.193.240.62:13179] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aXEDiwKyVQ9Ob2YxRArKMgAAAIY"]
[Thu Jan 22 00:49:16.036337 2026] [:error] [pid 21455:tid 21509] [client 4.193.240.62:9123] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aXEDjIpOKALCSo1URZFpKgAAAFI"]
[Thu Jan 22 00:49:16.221047 2026] [:error] [pid 59863:tid 59888] [client 4.193.240.62:9072] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aXEDjLHQ1zVZ4yLuI-wJpAAAARU"]
[Thu Jan 22 00:49:16.395978 2026] [:error] [pid 21455:tid 21502] [client 4.193.240.62:9068] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aXEDjIpOKALCSo1URZFpKwAAAEs"]
[Thu Jan 22 00:49:16.574675 2026] [:error] [pid 21454:tid 21467] [client 4.193.240.62:9031] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aXEDjDwp5UZmMFzY2bp1hQAAAAM"]
[Thu Jan 22 00:49:16.782103 2026] [:error] [pid 21454:tid 21483] [client 4.193.240.62:9003] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aXEDjDwp5UZmMFzY2bp1hgAAABM"]
[Thu Jan 22 00:49:16.982670 2026] [:error] [pid 4382:tid 4398] [client 4.193.240.62:8896] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aXEDjJHg0falVG3JFbCCcAAAAY4"]
[Thu Jan 22 00:49:17.167962 2026] [:error] [pid 21455:tid 21515] [client 4.193.240.62:8974] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aXEDjYpOKALCSo1URZFpLQAAAFg"]
[Thu Jan 22 00:49:17.354237 2026] [:error] [pid 56352:tid 56359] [client 4.193.240.62:9139] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aXEDjdWN6wYNPTU3efU-PAAAAUU"]
[Thu Jan 22 00:49:17.536963 2026] [:error] [pid 4382:tid 4404] [client 4.193.240.62:9087] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aXEDjZHg0falVG3JFbCCcQAAAZQ"]
[Thu Jan 22 00:49:17.743573 2026] [:error] [pid 21563:tid 21586] [client 4.193.240.62:9048] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aXEDjRZq__dTorabEozIawAAANU"]
[Thu Jan 22 00:49:17.948101 2026] [:error] [pid 21563:tid 21571] [client 4.193.240.62:9039] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aXEDjRZq__dTorabEozIbAAAAMY"]
[Thu Jan 22 00:49:18.148330 2026] [:error] [pid 21563:tid 21583] [client 4.193.240.62:9053] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aXEDjhZq__dTorabEozIbQAAANI"]
[Thu Jan 22 00:49:18.356240 2026] [:error] [pid 21456:tid 21535] [client 4.193.240.62:8987] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aXEDjgKyVQ9Ob2YxRArKNQAAAJE"]
[Thu Jan 22 00:49:18.529964 2026] [:error] [pid 21455:tid 21504] [client 4.193.240.62:8988] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aXEDjopOKALCSo1URZFpLgAAAE0"]
[Thu Jan 22 00:49:18.729281 2026] [:error] [pid 21455:tid 21511] [client 4.193.240.62:9099] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aXEDjopOKALCSo1URZFpMAAAAFQ"]
[Thu Jan 22 00:49:18.938598 2026] [:error] [pid 21455:tid 21496] [client 4.193.240.62:8981] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aXEDjopOKALCSo1URZFpMQAAAEU"]
[Thu Jan 22 00:49:19.143294 2026] [:error] [pid 21455:tid 21514] [client 4.193.240.62:9085] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aXEDj4pOKALCSo1URZFpMwAAAFc"]
[Thu Jan 22 00:49:19.366895 2026] [:error] [pid 21455:tid 21491] [client 4.193.240.62:9129] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aXEDj4pOKALCSo1URZFpNAAAAEA"]
[Thu Jan 22 00:49:19.548008 2026] [:error] [pid 21455:tid 21507] [client 4.193.240.62:9011] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aXEDj4pOKALCSo1URZFpNQAAAFA"]
[Thu Jan 22 00:49:19.726115 2026] [:error] [pid 21454:tid 21487] [client 4.193.240.62:8997] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aXEDjzwp5UZmMFzY2bp1hwAAABc"]
[Thu Jan 22 00:49:19.902420 2026] [:error] [pid 21456:tid 21538] [client 4.193.240.62:8999] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aXEDjwKyVQ9Ob2YxRArKPwAAAJQ"]
[Thu Jan 22 00:49:20.094705 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:9018] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aXEDkIpOKALCSo1URZFpNwAAAFU"]
[Thu Jan 22 00:49:20.296767 2026] [:error] [pid 4382:tid 4407] [client 4.193.240.62:8989] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aXEDkJHg0falVG3JFbCCcgAAAZc"]
[Thu Jan 22 00:49:20.478530 2026] [:error] [pid 56352:tid 56363] [client 4.193.240.62:8977] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXEDkNWN6wYNPTU3efU-PgAAAUk"]
[Thu Jan 22 00:49:20.653073 2026] [:error] [pid 21456:tid 21519] [client 4.193.240.62:9081] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXEDkAKyVQ9Ob2YxRArKQAAAAIE"]
[Thu Jan 22 00:49:20.840403 2026] [:error] [pid 21455:tid 21513] [client 4.193.240.62:8986] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXEDkIpOKALCSo1URZFpOAAAAFY"]
[Thu Jan 22 00:49:21.023311 2026] [:error] [pid 21456:tid 21522] [client 4.193.240.62:8970] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXEDkQKyVQ9Ob2YxRArKQQAAAIQ"]
[Thu Jan 22 00:49:21.215494 2026] [:error] [pid 4382:tid 4393] [client 4.193.240.62:8982] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aXEDkZHg0falVG3JFbCCdQAAAYk"]
[Thu Jan 22 00:49:21.440060 2026] [:error] [pid 21563:tid 21566] [client 4.193.240.62:9014] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aXEDkRZq__dTorabEozIbgAAAME"]
[Thu Jan 22 00:49:21.617516 2026] [:error] [pid 21563:tid 21582] [client 4.193.240.62:8993] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aXEDkRZq__dTorabEozIbwAAANE"]
[Thu Jan 22 00:49:21.797466 2026] [:error] [pid 59863:tid 59878] [client 4.193.240.62:9056] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "aXEDkbHQ1zVZ4yLuI-wJqwAAAQs"]
[Thu Jan 22 00:49:21.995819 2026] [:error] [pid 21454:tid 21484] [client 4.193.240.62:8771] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aXEDkTwp5UZmMFzY2bp1igAAABQ"]
[Thu Jan 22 00:49:22.198051 2026] [:error] [pid 21454:tid 21473] [client 4.193.240.62:9062] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aXEDkjwp5UZmMFzY2bp1iwAAAAk"]
[Thu Jan 22 00:49:22.371833 2026] [:error] [pid 21456:tid 21524] [client 4.193.240.62:8946] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aXEDkgKyVQ9Ob2YxRArKRAAAAIY"]
[Thu Jan 22 00:49:22.578389 2026] [:error] [pid 21455:tid 21511] [client 4.193.240.62:8936] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "aXEDkopOKALCSo1URZFpOwAAAFQ"]
[Thu Jan 22 00:49:22.751963 2026] [:error] [pid 4382:tid 4400] [client 4.193.240.62:9134] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aXEDkpHg0falVG3JFbCCdgAAAZA"]
[Thu Jan 22 00:49:22.940874 2026] [:error] [pid 59863:tid 59872] [client 4.193.240.62:8980] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aXEDkrHQ1zVZ4yLuI-wJrQAAAQU"]
[Thu Jan 22 00:49:23.130390 2026] [:error] [pid 59863:tid 59881] [client 4.193.240.62:8915] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aXEDk7HQ1zVZ4yLuI-wJrgAAAQ4"]
[Thu Jan 22 00:49:23.304578 2026] [:error] [pid 59863:tid 59877] [client 4.193.240.62:9013] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "aXEDk7HQ1zVZ4yLuI-wJrwAAAQo"]
[Thu Jan 22 00:49:23.515455 2026] [:error] [pid 21563:tid 21579] [client 4.193.240.62:8990] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aXEDkxZq__dTorabEozIcAAAAM4"]
[Thu Jan 22 00:49:23.876105 2026] [:error] [pid 21454:tid 21485] [client 4.193.240.62:8901] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aXEDkzwp5UZmMFzY2bp1jQAAABU"]
[Thu Jan 22 00:49:24.072390 2026] [:error] [pid 21454:tid 21464] [client 4.193.240.62:9023] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aXEDlDwp5UZmMFzY2bp1jgAAAAA"]
[Thu Jan 22 00:49:24.272497 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:9030] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aXEDlIpOKALCSo1URZFpPgAAAFU"]
[Thu Jan 22 00:49:24.466915 2026] [:error] [pid 21454:tid 21469] [client 4.193.240.62:8957] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aXEDlDwp5UZmMFzY2bp1kAAAAAU"]
[Thu Jan 22 00:49:24.642389 2026] [:error] [pid 21454:tid 21480] [client 4.193.240.62:9075] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aXEDlDwp5UZmMFzY2bp1kgAAABA"]
[Thu Jan 22 00:49:24.827738 2026] [:error] [pid 21454:tid 21486] [client 4.193.240.62:9020] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aXEDlDwp5UZmMFzY2bp1kwAAABY"]
[Thu Jan 22 00:49:25.020643 2026] [:error] [pid 21563:tid 21574] [client 4.193.240.62:13127] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aXEDlRZq__dTorabEozIcgAAAMk"]
[Thu Jan 22 00:49:25.222406 2026] [:error] [pid 21455:tid 21504] [client 4.193.240.62:8909] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aXEDlYpOKALCSo1URZFpQAAAAE0"]
[Thu Jan 22 00:49:25.416462 2026] [:error] [pid 21563:tid 21570] [client 4.193.240.62:9084] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aXEDlRZq__dTorabEozIdAAAAMU"]
[Thu Jan 22 00:49:25.626402 2026] [:error] [pid 59863:tid 59882] [client 4.193.240.62:8837] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aXEDlbHQ1zVZ4yLuI-wJswAAAQ8"]
[Thu Jan 22 00:49:25.799705 2026] [:error] [pid 21455:tid 21514] [client 4.193.240.62:8905] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aXEDlYpOKALCSo1URZFpQgAAAFc"]
[Thu Jan 22 00:49:26.010247 2026] [:error] [pid 21455:tid 21508] [client 4.193.240.62:8948] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aXEDlopOKALCSo1URZFpQwAAAFE"]
[Thu Jan 22 00:49:26.183292 2026] [:error] [pid 4382:tid 4408] [client 4.193.240.62:9060] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aXEDlpHg0falVG3JFbCCeAAAAZg"]
[Thu Jan 22 00:49:26.380243 2026] [:error] [pid 4382:tid 4397] [client 4.193.240.62:8942] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aXEDlpHg0falVG3JFbCCeQAAAY0"]
[Thu Jan 22 00:49:26.554319 2026] [:error] [pid 21454:tid 21488] [client 4.193.240.62:9061] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aXEDljwp5UZmMFzY2bp1lgAAABg"]
[Thu Jan 22 00:49:26.740972 2026] [:error] [pid 4382:tid 4386] [client 4.193.240.62:8927] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aXEDlpHg0falVG3JFbCCegAAAYI"]
[Thu Jan 22 00:49:26.933807 2026] [:error] [pid 21456:tid 21537] [client 4.193.240.62:9054] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aXEDlgKyVQ9Ob2YxRArKRQAAAJM"]
[Thu Jan 22 00:49:27.122805 2026] [:error] [pid 4382:tid 4398] [client 4.193.240.62:9019] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aXEDl5Hg0falVG3JFbCCfAAAAY4"]
[Thu Jan 22 00:49:27.312738 2026] [:error] [pid 21455:tid 21493] [client 4.193.240.62:8838] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aXEDl4pOKALCSo1URZFpRQAAAEI"]
[Thu Jan 22 00:49:27.486047 2026] [:error] [pid 21563:tid 21578] [client 4.193.240.62:8851] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aXEDlxZq__dTorabEozIdgAAAM0"]
[Thu Jan 22 00:49:27.660352 2026] [:error] [pid 21455:tid 21510] [client 4.193.240.62:8920] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aXEDl4pOKALCSo1URZFpRwAAAFM"]
[Thu Jan 22 00:49:27.836640 2026] [:error] [pid 21456:tid 21531] [client 4.193.240.62:9121] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aXEDlwKyVQ9Ob2YxRArKRgAAAI0"]
[Thu Jan 22 00:49:28.015755 2026] [:error] [pid 21456:tid 21530] [client 4.193.240.62:9020] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aXEDmAKyVQ9Ob2YxRArKRwAAAIw"]
[Thu Jan 22 00:49:28.194281 2026] [:error] [pid 21455:tid 21515] [client 4.193.240.62:9059] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXEDmIpOKALCSo1URZFpSAAAAFg"]
[Thu Jan 22 00:49:28.400698 2026] [:error] [pid 21455:tid 21497] [client 4.193.240.62:8934] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXEDmIpOKALCSo1URZFpSQAAAEY"]
[Thu Jan 22 00:49:28.600259 2026] [:error] [pid 21456:tid 21528] [client 4.193.240.62:8840] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXEDmAKyVQ9Ob2YxRArKSQAAAIo"]
[Thu Jan 22 00:49:28.793887 2026] [:error] [pid 21454:tid 21479] [client 4.193.240.62:8913] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aXEDmDwp5UZmMFzY2bp1mgAAAA8"]
[Thu Jan 22 00:49:29.034891 2026] [:error] [pid 21563:tid 21573] [client 4.193.240.62:8860] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aXEDmRZq__dTorabEozIeAAAAMg"]
[Thu Jan 22 00:49:29.217099 2026] [:error] [pid 21455:tid 21514] [client 4.193.240.62:8897] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aXEDmYpOKALCSo1URZFpSgAAAFc"]
[Thu Jan 22 00:49:29.398131 2026] [:error] [pid 21454:tid 21473] [client 4.193.240.62:9009] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aXEDmTwp5UZmMFzY2bp1mwAAAAk"]
[Thu Jan 22 00:49:29.577749 2026] [:error] [pid 21454:tid 21478] [client 4.193.240.62:9066] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aXEDmTwp5UZmMFzY2bp1nAAAAA4"]
[Thu Jan 22 00:49:29.759722 2026] [:error] [pid 21456:tid 21519] [client 4.193.240.62:8967] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aXEDmQKyVQ9Ob2YxRArKSwAAAIE"]
[Thu Jan 22 00:49:29.934491 2026] [:error] [pid 21456:tid 21522] [client 4.193.240.62:8924] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aXEDmQKyVQ9Ob2YxRArKTQAAAIQ"]
[Thu Jan 22 00:49:30.112286 2026] [:error] [pid 21454:tid 21464] [client 4.193.240.62:13147] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aXEDmjwp5UZmMFzY2bp1ngAAAAA"]
[Thu Jan 22 00:49:30.290641 2026] [:error] [pid 21456:tid 21524] [client 4.193.240.62:9017] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aXEDmgKyVQ9Ob2YxRArKTgAAAIY"]
[Thu Jan 22 00:49:30.465566 2026] [:error] [pid 21456:tid 21541] [client 4.193.240.62:8902] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aXEDmgKyVQ9Ob2YxRArKTwAAAJc"]
[Thu Jan 22 00:49:30.644692 2026] [:error] [pid 21456:tid 21525] [client 4.193.240.62:8940] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aXEDmgKyVQ9Ob2YxRArKUAAAAIc"]
[Thu Jan 22 00:49:30.820278 2026] [:error] [pid 21563:tid 21586] [client 4.193.240.62:8908] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aXEDmhZq__dTorabEozIegAAANU"]
[Thu Jan 22 00:49:30.994520 2026] [:error] [pid 21454:tid 21487] [client 4.193.240.62:9025] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aXEDmjwp5UZmMFzY2bp1oAAAABc"]
[Thu Jan 22 00:49:31.195826 2026] [:error] [pid 21456:tid 21529] [client 4.193.240.62:8929] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aXEDmwKyVQ9Ob2YxRArKUQAAAIs"]
[Thu Jan 22 00:49:31.388892 2026] [:error] [pid 21456:tid 21531] [client 4.193.240.62:8955] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aXEDmwKyVQ9Ob2YxRArKUgAAAI0"]
[Thu Jan 22 00:49:31.574126 2026] [:error] [pid 21455:tid 21513] [client 4.193.240.62:8943] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aXEDm4pOKALCSo1URZFpTQAAAFY"]
[Thu Jan 22 00:49:31.748540 2026] [:error] [pid 21455:tid 21493] [client 4.193.240.62:9045] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aXEDm4pOKALCSo1URZFpTgAAAEI"]
[Thu Jan 22 00:49:31.926359 2026] [:error] [pid 21454:tid 21477] [client 4.193.240.62:9090] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXEDmzwp5UZmMFzY2bp1ogAAAA0"]
[Thu Jan 22 00:49:32.100286 2026] [:error] [pid 21454:tid 21475] [client 4.193.240.62:8949] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXEDnDwp5UZmMFzY2bp1owAAAAs"]
[Thu Jan 22 00:49:32.273706 2026] [:error] [pid 21454:tid 21473] [client 4.193.240.62:8875] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXEDnDwp5UZmMFzY2bp1pAAAAAk"]
[Thu Jan 22 00:49:32.449688 2026] [:error] [pid 21456:tid 21537] [client 4.193.240.62:8925] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXEDnAKyVQ9Ob2YxRArKVQAAAJM"]
[Thu Jan 22 00:49:32.627626 2026] [:error] [pid 21455:tid 21515] [client 4.193.240.62:9022] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aXEDnIpOKALCSo1URZFpUAAAAFg"]
[Thu Jan 22 00:49:32.806246 2026] [:error] [pid 21454:tid 21478] [client 4.193.240.62:9007] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aXEDnDwp5UZmMFzY2bp1pQAAAA4"]
[Thu Jan 22 00:49:32.982438 2026] [:error] [pid 21455:tid 21509] [client 4.193.240.62:8928] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aXEDnIpOKALCSo1URZFpUQAAAFI"]
[Thu Jan 22 00:49:33.169813 2026] [:error] [pid 21455:tid 21494] [client 4.193.240.62:9012] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aXEDnYpOKALCSo1URZFpUwAAAEM"]
[Thu Jan 22 00:49:33.371420 2026] [:error] [pid 4382:tid 4398] [client 4.193.240.62:8768] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aXEDnZHg0falVG3JFbCCgQAAAY4"]
[Thu Jan 22 00:49:33.550175 2026] [:error] [pid 59863:tid 59873] [client 4.193.240.62:8876] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aXEDnbHQ1zVZ4yLuI-wJugAAAQY"]
[Thu Jan 22 00:49:33.731518 2026] [:error] [pid 59863:tid 59877] [client 4.193.240.62:8998] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aXEDnbHQ1zVZ4yLuI-wJvAAAAQo"]
[Thu Jan 22 00:49:33.904946 2026] [:error] [pid 21454:tid 21488] [client 4.193.240.62:8841] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aXEDnTwp5UZmMFzY2bp1pgAAABg"]
[Thu Jan 22 00:49:34.123284 2026] [:error] [pid 4382:tid 4404] [client 4.193.240.62:8903] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aXEDnpHg0falVG3JFbCCgwAAAZQ"]
[Thu Jan 22 00:49:34.304487 2026] [:error] [pid 21454:tid 21482] [client 4.193.240.62:8926] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aXEDnjwp5UZmMFzY2bp1pwAAABI"]
[Thu Jan 22 00:49:34.502351 2026] [:error] [pid 21456:tid 21538] [client 4.193.240.62:9005] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aXEDngKyVQ9Ob2YxRArKWAAAAJQ"]
[Thu Jan 22 00:49:34.689036 2026] [:error] [pid 21454:tid 21464] [client 4.193.240.62:8907] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "aXEDnjwp5UZmMFzY2bp1qQAAAAA"]
[Thu Jan 22 00:49:34.864447 2026] [:error] [pid 21563:tid 21576] [client 4.193.240.62:8847] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDnhZq__dTorabEozIfwAAAMs"]
[Thu Jan 22 00:49:35.038502 2026] [:error] [pid 21454:tid 21467] [client 4.193.240.62:8769] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDnzwp5UZmMFzY2bp1rAAAAAM"]
[Thu Jan 22 00:49:35.211772 2026] [:error] [pid 21454:tid 21471] [client 4.193.240.62:8887] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDnzwp5UZmMFzY2bp1rQAAAAc"]
[Thu Jan 22 00:49:35.385396 2026] [:error] [pid 21454:tid 21476] [client 4.193.240.62:8856] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aXEDnzwp5UZmMFzY2bp1sAAAAAw"]
[Thu Jan 22 00:49:35.577048 2026] [:error] [pid 4382:tid 4393] [client 4.193.240.62:8950] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aXEDn5Hg0falVG3JFbCChAAAAYk"]
[Thu Jan 22 00:49:35.773787 2026] [:error] [pid 21456:tid 21521] [client 4.193.240.62:8845] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aXEDnwKyVQ9Ob2YxRArKWQAAAIM"]
[Thu Jan 22 00:49:35.946042 2026] [:error] [pid 21563:tid 21584] [client 4.193.240.62:8866] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aXEDnxZq__dTorabEozIgAAAANM"]
[Thu Jan 22 00:49:36.137285 2026] [:error] [pid 21455:tid 21493] [client 4.193.240.62:8922] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "aXEDoIpOKALCSo1URZFpVgAAAEI"]
[Thu Jan 22 00:49:36.366948 2026] [:error] [pid 21454:tid 21485] [client 4.193.240.62:8956] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aXEDoDwp5UZmMFzY2bp1sgAAABU"]
[Thu Jan 22 00:49:36.562633 2026] [:error] [pid 21455:tid 21499] [client 4.193.240.62:8832] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aXEDoIpOKALCSo1URZFpVwAAAEg"]
[Thu Jan 22 00:49:36.747705 2026] [:error] [pid 21563:tid 21572] [client 4.193.240.62:9047] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aXEDoBZq__dTorabEozIgQAAAMc"]
[Thu Jan 22 00:49:36.953519 2026] [:error] [pid 21563:tid 21581] [client 4.193.240.62:8935] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "aXEDoBZq__dTorabEozIggAAANA"]
[Thu Jan 22 00:49:37.131099 2026] [:error] [pid 4382:tid 4391] [client 4.193.240.62:8877] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aXEDoZHg0falVG3JFbCChQAAAYc"]
[Thu Jan 22 00:49:37.318052 2026] [:error] [pid 21454:tid 21468] [client 4.193.240.62:8904] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aXEDoTwp5UZmMFzY2bp1tAAAAAQ"]
[Thu Jan 22 00:49:37.504443 2026] [:error] [pid 21454:tid 21467] [client 4.193.240.62:8916] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aXEDoTwp5UZmMFzY2bp1tQAAAAM"]
[Thu Jan 22 00:49:37.687200 2026] [:error] [pid 21454:tid 21484] [client 4.193.240.62:8850] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aXEDoTwp5UZmMFzY2bp1tgAAABQ"]
[Thu Jan 22 00:49:37.860909 2026] [:error] [pid 21455:tid 21494] [client 4.193.240.62:8833] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aXEDoYpOKALCSo1URZFpWQAAAEM"]
[Thu Jan 22 00:49:38.044054 2026] [:error] [pid 21455:tid 21492] [client 4.193.240.62:8921] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aXEDoopOKALCSo1URZFpWgAAAEE"]
[Thu Jan 22 00:49:38.224457 2026] [:error] [pid 21454:tid 21465] [client 4.193.240.62:9015] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aXEDojwp5UZmMFzY2bp1twAAAAE"]
[Thu Jan 22 00:49:38.408250 2026] [:error] [pid 21454:tid 21470] [client 4.193.240.62:8947] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "aXEDojwp5UZmMFzY2bp1uAAAAAY"]
[Thu Jan 22 00:49:38.582248 2026] [:error] [pid 21563:tid 21585] [client 4.193.240.62:8882] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aXEDohZq__dTorabEozIhwAAANQ"]
[Thu Jan 22 00:49:38.766985 2026] [:error] [pid 21455:tid 21498] [client 4.193.240.62:8895] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aXEDoopOKALCSo1URZFpWwAAAEc"]
[Thu Jan 22 00:49:38.940387 2026] [:error] [pid 21454:tid 21473] [client 4.193.240.62:9008] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aXEDojwp5UZmMFzY2bp1ugAAAAk"]
[Thu Jan 22 00:49:39.116421 2026] [:error] [pid 21455:tid 21501] [client 4.193.240.62:8952] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aXEDo4pOKALCSo1URZFpXAAAAEo"]
[Thu Jan 22 00:49:39.294424 2026] [:error] [pid 21454:tid 21466] [client 4.193.240.62:8853] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aXEDozwp5UZmMFzY2bp1vAAAAAI"]
[Thu Jan 22 00:49:39.484359 2026] [:error] [pid 21454:tid 21488] [client 4.193.240.62:8835] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aXEDozwp5UZmMFzY2bp1vQAAABg"]
[Thu Jan 22 00:49:39.676164 2026] [:error] [pid 21456:tid 21539] [client 4.193.240.62:8834] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aXEDowKyVQ9Ob2YxRArKXQAAAJU"]
[Thu Jan 22 00:49:39.858622 2026] [:error] [pid 21454:tid 21474] [client 4.193.240.62:8873] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aXEDozwp5UZmMFzY2bp1vwAAAAo"]
[Thu Jan 22 00:49:40.048460 2026] [:error] [pid 21456:tid 21522] [client 4.193.240.62:8972] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aXEDpAKyVQ9Ob2YxRArKXgAAAIQ"]
[Thu Jan 22 00:49:40.223885 2026] [:error] [pid 21454:tid 21482] [client 4.193.240.62:8985] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aXEDpDwp5UZmMFzY2bp1wQAAABI"]
[Thu Jan 22 00:49:40.399821 2026] [:error] [pid 21454:tid 21467] [client 4.193.240.62:8939] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aXEDpDwp5UZmMFzY2bp1wgAAAAM"]
[Thu Jan 22 00:49:40.574256 2026] [:error] [pid 21454:tid 21471] [client 4.193.240.62:9083] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aXEDpDwp5UZmMFzY2bp1xAAAAAc"]
[Thu Jan 22 00:49:40.766988 2026] [:error] [pid 4382:tid 4405] [client 4.193.240.62:8786] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aXEDpJHg0falVG3JFbCChgAAAZU"]
[Thu Jan 22 00:49:40.957356 2026] [:error] [pid 21455:tid 21502] [client 4.193.240.62:8953] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aXEDpIpOKALCSo1URZFpXgAAAEs"]
[Thu Jan 22 00:49:41.130453 2026] [:error] [pid 4382:tid 4385] [client 4.193.240.62:8797] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aXEDpZHg0falVG3JFbCCiQAAAYE"]
[Thu Jan 22 00:49:41.344286 2026] [:error] [pid 4382:tid 4393] [client 4.193.240.62:9010] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aXEDpZHg0falVG3JFbCCiwAAAYk"]
[Thu Jan 22 00:49:41.518437 2026] [:error] [pid 21455:tid 21510] [client 4.193.240.62:8789] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXEDpYpOKALCSo1URZFpXwAAAFM"]
[Thu Jan 22 00:49:41.700635 2026] [:error] [pid 21563:tid 21588] [client 4.193.240.62:8900] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXEDpRZq__dTorabEozIiAAAANc"]
[Thu Jan 22 00:49:41.875797 2026] [:error] [pid 56352:tid 56371] [client 4.193.240.62:8811] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXEDpdWN6wYNPTU3efU-RQAAAVE"]
[Thu Jan 22 00:49:42.057121 2026] [:error] [pid 59863:tid 59876] [client 4.193.240.62:8843] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aXEDprHQ1zVZ4yLuI-wJwgAAAQk"]
[Thu Jan 22 00:49:42.231661 2026] [:error] [pid 21454:tid 21487] [client 4.193.240.62:8960] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aXEDpjwp5UZmMFzY2bp1xQAAABc"]
[Thu Jan 22 00:49:42.419064 2026] [:error] [pid 21455:tid 21497] [client 4.193.240.62:8842] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aXEDpopOKALCSo1URZFpYQAAAEY"]
[Thu Jan 22 00:49:42.593237 2026] [:error] [pid 21455:tid 21494] [client 4.193.240.62:8894] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aXEDpopOKALCSo1URZFpYgAAAEM"]
[Thu Jan 22 00:49:42.766638 2026] [:error] [pid 21454:tid 21470] [client 4.193.240.62:8862] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aXEDpjwp5UZmMFzY2bp1xgAAAAY"]
[Thu Jan 22 00:49:42.947465 2026] [:error] [pid 4382:tid 4390] [client 4.193.240.62:8874] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aXEDppHg0falVG3JFbCCjgAAAYY"]
[Thu Jan 22 00:49:43.121366 2026] [:error] [pid 21563:tid 21582] [client 4.193.240.62:8898] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aXEDpxZq__dTorabEozIiQAAANE"]
[Thu Jan 22 00:49:43.302646 2026] [:error] [pid 21454:tid 21480] [client 4.193.240.62:8917] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aXEDpzwp5UZmMFzY2bp1xwAAABA"]
[Thu Jan 22 00:49:43.476586 2026] [:error] [pid 21455:tid 21492] [client 4.193.240.62:8910] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aXEDp4pOKALCSo1URZFpYwAAAEE"]
[Thu Jan 22 00:49:43.662629 2026] [:error] [pid 4382:tid 4394] [client 4.193.240.62:8859] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aXEDp5Hg0falVG3JFbCCkAAAAYo"]
[Thu Jan 22 00:49:43.858477 2026] [:error] [pid 4382:tid 4397] [client 4.193.240.62:8792] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aXEDp5Hg0falVG3JFbCCkQAAAY0"]
[Thu Jan 22 00:49:44.041171 2026] [:error] [pid 21454:tid 21466] [client 4.193.240.62:8781] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aXEDqDwp5UZmMFzY2bp1yAAAAAI"]
[Thu Jan 22 00:49:44.260197 2026] [:error] [pid 4382:tid 4408] [client 4.193.240.62:8756] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aXEDqJHg0falVG3JFbCCkgAAAZg"]
[Thu Jan 22 00:49:44.436629 2026] [:error] [pid 21454:tid 21482] [client 4.193.240.62:8757] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aXEDqDwp5UZmMFzY2bp1yQAAABI"]
[Thu Jan 22 00:49:44.654904 2026] [:error] [pid 4382:tid 4391] [client 4.193.240.62:8973] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aXEDqJHg0falVG3JFbCCkwAAAYc"]
[Thu Jan 22 00:49:44.849927 2026] [:error] [pid 21454:tid 21472] [client 4.193.240.62:8774] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aXEDqDwp5UZmMFzY2bp1ygAAAAg"]
[Thu Jan 22 00:49:45.035090 2026] [:error] [pid 21455:tid 21512] [client 4.193.240.62:8839] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aXEDqYpOKALCSo1URZFpZgAAAFU"]
[Thu Jan 22 00:49:45.215892 2026] [:error] [pid 4382:tid 4398] [client 4.193.240.62:8846] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aXEDqZHg0falVG3JFbCClgAAAY4"]
[Thu Jan 22 00:49:45.417033 2026] [:error] [pid 4382:tid 4405] [client 4.193.240.62:8865] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aXEDqZHg0falVG3JFbCClwAAAZU"]
[Thu Jan 22 00:49:45.592793 2026] [:error] [pid 21454:tid 21478] [client 4.193.240.62:8912] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aXEDqTwp5UZmMFzY2bp1zQAAAA4"]
[Thu Jan 22 00:49:45.792971 2026] [:error] [pid 21454:tid 21470] [client 4.193.240.62:8707] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aXEDqTwp5UZmMFzY2bp1zgAAAAY"]
[Thu Jan 22 00:49:46.010341 2026] [:error] [pid 21454:tid 21473] [client 4.193.240.62:8844] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aXEDqjwp5UZmMFzY2bp1zwAAAAk"]
[Thu Jan 22 00:49:46.187805 2026] [:error] [pid 21563:tid 21579] [client 4.193.240.62:8864] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aXEDqhZq__dTorabEozIigAAAM4"]
[Thu Jan 22 00:49:46.382391 2026] [:error] [pid 21455:tid 21493] [client 4.193.240.62:8899] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aXEDqopOKALCSo1URZFpZwAAAEI"]
[Thu Jan 22 00:49:46.561479 2026] [:error] [pid 21456:tid 21526] [client 4.193.240.62:8795] [client 4.193.240.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aXEDqgKyVQ9Ob2YxRArKYQAAAIg"]
[Thu Jan 22 01:21:29.124627 2026] [:error] [pid 21455:tid 21511] [client 52.169.124.184:1233] File does not exist: /usr/local/apache/htdocs/suspended-page/3palk6v.php
[Thu Jan 22 07:16:02.562789 2026] [:error] [pid 52446:tid 52493] [client 156.239.197.47:23728] [client 156.239.197.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.239.197.47, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXFeMrJ6clMw4kdrHYFk9QAAAEs"]
[Thu Jan 22 07:16:02.566732 2026] [:error] [pid 52446:tid 52493] [client 156.239.197.47:23728] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Jan 22 07:16:03.866732 2026] [:error] [pid 52445:tid 52463] [client 156.249.125.194:56948] [client 156.249.125.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.249.125.194, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXFeM-vMmsFgpSSb5L2gJgAAAAk"]
[Thu Jan 22 07:16:03.870199 2026] [:error] [pid 52445:tid 52463] [client 156.249.125.194:56948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Jan 22 07:16:05.117651 2026] [:error] [pid 52446:tid 52489] [client 154.199.69.182:12058] [client 154.199.69.182] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 154.199.69.182, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXFeNbJ6clMw4kdrHYFk-AAAAEc"]
[Thu Jan 22 07:16:05.121759 2026] [:error] [pid 52446:tid 52489] [client 154.199.69.182:12058] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Jan 22 14:16:42.839111 2026] [:error] [pid 52445:tid 52470] [client 110.166.71.39:40475] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXHAyuvMmsFgpSSb5L0IuAAAABA"]
[Thu Jan 22 19:53:09.485110 2026] [:error] [pid 27550:tid 27559] [client 43.135.145.117:45850] [client 43.135.145.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXIPpeOQDPzfV5R2LYQ8ngAAAQc"]
[Thu Jan 22 20:53:14.137691 2026] [:error] [pid 52556:tid 52558] [client 223.15.245.170:60780] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXIduug4y1NKM4AgfjBs6QAAAMA"]
[Thu Jan 22 22:30:31.046838 2026] [:error] [pid 27550:tid 27570] [client 95.216.63.67:54986] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php, referer: www.google.com
[Thu Jan 22 23:04:58.996480 2026] [:error] [pid 20418:tid 20428] [client 43.157.153.236:38160] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXI8mhahoKEa6eS4cSqXxgAAAYY"]
[Fri Jan 23 07:37:45.506201 2026] [:error] [pid 11606:tid 11628] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Jan 23 07:37:45.796638 2026] [:error] [pid 11606:tid 11631] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Jan 23 07:37:45.934622 2026] [:error] [pid 11606:tid 11632] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri Jan 23 07:37:46.072190 2026] [:error] [pid 11606:tid 11620] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Fri Jan 23 07:37:46.220767 2026] [:error] [pid 11606:tid 11615] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Jan 23 07:37:46.513047 2026] [:error] [pid 11606:tid 11635] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Jan 23 07:37:46.650089 2026] [:error] [pid 11606:tid 11627] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php
[Fri Jan 23 07:37:46.788414 2026] [:error] [pid 11606:tid 11634] [client 20.219.130.224:35586] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Fri Jan 23 07:37:47.077590 2026] [:error] [pid 11606:tid 11629] [client 20.219.130.224:35586] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXK0y1njAJqfHEQLcsiqRQAAAA4"]
[Fri Jan 23 07:37:47.624785 2026] [:error] [pid 11606:tid 11618] [client 20.219.130.224:34119] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXK0y1njAJqfHEQLcsiqSAAAAAM"]
[Fri Jan 23 07:37:48.169131 2026] [:error] [pid 11732:tid 11743] [client 20.219.130.224:42741] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXK0zOfd54xxq04JKuOegQAAAMk"]
[Fri Jan 23 07:37:48.720629 2026] [:error] [pid 11732:tid 11757] [client 20.219.130.224:33698] [client 20.219.130.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXK0zOfd54xxq04JKuOehgAAANc"]
[Fri Jan 23 09:16:33.663904 2026] [:error] [pid 62368:tid 62395] [client 170.106.160.90:52384] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXLL8SeMzKRnyYLMANPiCAAAARg"]
[Fri Jan 23 14:59:51.767576 2026] [:error] [pid 11608:tid 11678] [client 212.227.175.43:53165] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Jan 23 14:59:59.397795 2026] [:error] [pid 62368:tid 62392] [client 212.227.175.43:56935] [client 212.227.175.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aXMcbyeMzKRnyYLMANNAtQAAARU"], referer: www.google.com
[Fri Jan 23 15:55:43.898054 2026] [:error] [pid 11606:tid 11634] [client 49.51.183.84:34698] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXMpf1njAJqfHEQLcshLMwAAABM"]
[Fri Jan 23 16:12:55.485562 2026] [:error] [pid 11607:tid 11661] [client 94.247.172.129:34166] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXMthwucTAUsUUzKw5fceQAAAFA"]
[Fri Jan 23 21:37:38.002978 2026] [:error] [pid 11732:tid 11754] [client 196.177.114.215:56022] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aXN5oufd54xxq04JKuOPtwAAANQ"]
[Fri Jan 23 21:37:38.009844 2026] [:error] [pid 11732:tid 11752] [client 196.177.114.215:56023] [client 196.177.114.215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aXN5oufd54xxq04JKuOPuAAAANI"]
[Fri Jan 23 22:15:25.576168 2026] [:error] [pid 11732:tid 11739] [client 43.130.67.6:59056] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXOCfefd54xxq04JKuOZFQAAAMU"]
[Sat Jan 24 09:20:36.207288 2026] [:error] [pid 41009:tid 41023] [client 170.205.31.138:61648] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-confiq.php
[Sat Jan 24 10:48:21.371488 2026] [:error] [pid 40903:tid 40946] [client 125.75.66.97:38213] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXQy9Rxw3xvyqXTcGl8L7QAAAEc"]
[Sat Jan 24 15:16:25.116968 2026] [:error] [pid 40902:tid 40927] [client 170.106.179.68:56054] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXRxyQSCceZpurDgOeunSAAAAA8"]
[Sat Jan 24 18:00:18.037609 2026] [:error] [pid 40902:tid 40935] [client 162.62.213.165:35590] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXSYMgSCceZpurDgOevN3QAAABc"]
[Sat Jan 24 23:06:17.965434 2026] [:error] [pid 40902:tid 40921] [client 43.130.37.243:55798] [client 43.130.37.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXTf6QSCceZpurDgOesJIAAAAAk"]
[Sat Jan 24 23:36:39.412141 2026] [:error] [pid 41009:tid 41018] [client 111.172.249.49:59170] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXTnB2rewfoFUDD3TM3mWQAAAMc"]
[Sun Jan 25 00:57:03.650495 2026] [:error] [pid 60761:tid 60776] [client 64.89.163.25:58223] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXT531ZQvxLvEbXXh9KgEQAAAUw"]
[Sun Jan 25 00:57:04.289071 2026] [:error] [pid 41009:tid 41016] [client 64.89.163.25:58358] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXT54GrewfoFUDD3TM3_VgAAAMU"]
[Sun Jan 25 00:57:04.935937 2026] [:error] [pid 40903:tid 40953] [client 64.89.163.25:58515] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXT54Bxw3xvyqXTcGl_cywAAAE4"]
[Sun Jan 25 00:57:05.586822 2026] [:error] [pid 14976:tid 14994] [client 64.89.163.25:58741] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXT54WvdigydYOB2KS-kPAAAAZA"]
[Sun Jan 25 00:57:06.222955 2026] [:error] [pid 41009:tid 41034] [client 64.89.163.25:58985] [client 64.89.163.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXT54mrewfoFUDD3TM3_rwAAANc"]
[Sun Jan 25 05:30:51.646297 2026] [:error] [pid 33687:tid 33711] [client 35.159.32.17:39665] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sun Jan 25 10:37:09.403144 2026] [:error] [pid 33687:tid 33714] [client 103.77.106.81:59868] [client 103.77.106.81] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aXWB1Yc6VUyZP5DZSy4ZhQAAARg"]
[Sun Jan 25 10:37:09.769495 2026] [:error] [pid 53419:tid 53449] [client 103.77.106.81:60273] [client 103.77.106.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXWB1SNxBUypy_ALgwOTzwAAABU"]
[Sun Jan 25 17:18:08.355893 2026] [:error] [pid 53420:tid 53477] [client 170.106.192.208:52602] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXXf0I5y-t2ZKNqnnbUXIQAAAFU"]
[Sun Jan 25 23:44:26.394654 2026] [:error] [pid 33847:tid 33861] [client 43.135.140.225:34480] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXY6Whb-MBjjiRpV5SdWwwAAAck"]
[Mon Jan 26 00:12:33.948505 2026] [:error] [pid 9070:tid 9074] [client 167.71.81.114:45958] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2/api-docs"] [unique_id "aXZA8bLNl7Vxe1mYetGRhQAAAUI"]
[Mon Jan 26 00:12:34.948616 2026] [:error] [pid 9122:tid 9147] [client 167.71.81.114:45962] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3/api-docs"] [unique_id "aXZA8mgJ3AtoqtQp2gR1wwAAAZc"]
[Mon Jan 26 00:12:35.954013 2026] [:error] [pid 53521:tid 53554] [client 167.71.81.114:45974] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aXZA80AzLL1HphkAdX58ygAAANU"]
[Mon Jan 26 00:12:36.954660 2026] [:error] [pid 9122:tid 9125] [client 167.71.81.114:45980] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/swagger.json"] [unique_id "aXZA9GgJ3AtoqtQp2gR1zwAAAYE"]
[Mon Jan 26 00:12:37.946057 2026] [:error] [pid 33847:tid 33862] [client 167.71.81.114:45988] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/@vite/env"] [unique_id "aXZA9Rb-MBjjiRpV5SdcdQAAAco"]
[Mon Jan 26 00:12:38.955063 2026] [:error] [pid 53420:tid 53465] [client 167.71.81.114:45630] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/actuator/env"] [unique_id "aXZA9o5y-t2ZKNqnnbWELQAAAEk"]
[Mon Jan 26 00:12:39.947199 2026] [:error] [pid 53419:tid 53447] [client 167.71.81.114:45636] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server"] [unique_id "aXZA9yNxBUypy_ALgwMxAQAAABM"]
[Mon Jan 26 00:12:40.952262 2026] [:error] [pid 53420:tid 53456] [client 167.71.81.114:45638] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXZA-I5y-t2ZKNqnnbWEMQAAAEA"]
[Mon Jan 26 00:12:42.952384 2026] [:error] [pid 33687:tid 33714] [client 167.71.81.114:45642] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about"] [unique_id "aXZA-oc6VUyZP5DZSy7NvQAAARg"]
[Mon Jan 26 00:12:43.956238 2026] [:error] [pid 33847:tid 33871] [client 167.71.81.114:45644] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug/default/view"] [unique_id "aXZA-xb-MBjjiRpV5SdcfQAAAdM"]
[Mon Jan 26 00:12:44.954465 2026] [:error] [pid 9122:tid 9146] [client 167.71.81.114:45660] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2/_catalog"] [unique_id "aXZA_GgJ3AtoqtQp2gR14wAAAZY"]
[Mon Jan 26 00:12:45.993433 2026] [:error] [pid 53521:tid 53540] [client 167.71.81.114:45676] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aXZA_UAzLL1HphkAdX583gAAAMc"]
[Mon Jan 26 00:12:47.010309 2026] [:error] [pid 53421:tid 53507] [client 167.71.81.114:45688] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server-status"] [unique_id "aXZA_5KP_6Rogdk6hdG7UwAAAJg"]
[Mon Jan 26 00:12:47.984148 2026] [:error] [pid 53421:tid 53497] [client 167.71.81.114:45696] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login.action"] [unique_id "aXZA_5KP_6Rogdk6hdG7VgAAAI4"]
[Mon Jan 26 00:12:48.986990 2026] [:error] [pid 9122:tid 9136] [client 167.71.81.114:47822] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_all_dbs"] [unique_id "aXZBAGgJ3AtoqtQp2gR15wAAAYw"]
[Mon Jan 26 00:12:49.995177 2026] [:error] [pid 53420:tid 53460] [client 167.71.81.114:47824] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.DS_Store"] [unique_id "aXZBAY5y-t2ZKNqnnbWERgAAAEQ"]
[Mon Jan 26 00:12:50.996603 2026] [:error] [pid 9122:tid 9134] [client 167.71.81.114:47830] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aXZBAmgJ3AtoqtQp2gR16wAAAYo"]
[Mon Jan 26 00:12:52.997053 2026] [:error] [pid 9122:tid 9146] [client 167.71.81.114:47836] [client 167.71.81.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aXZBBGgJ3AtoqtQp2gR17AAAAZY"]
[Mon Jan 26 00:12:53.992467 2026] [:error] [pid 33847:tid 33867] [client 167.71.81.114:47842] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aXZBBRb-MBjjiRpV5SdcmwAAAc8"]
[Mon Jan 26 00:12:54.997786 2026] [:error] [pid 33687:tid 33699] [client 167.71.81.114:47850] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.json"] [unique_id "aXZBBoc6VUyZP5DZSy7N2wAAAQk"]
[Mon Jan 26 00:12:55.993441 2026] [:error] [pid 9070:tid 9089] [client 167.71.81.114:47864] [client 167.71.81.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/telescope/requests"] [unique_id "aXZBB7LNl7Vxe1mYetGRpQAAAVE"]
[Mon Jan 26 00:45:10.440992 2026] [:error] [pid 48919:tid 48971] [client 51.195.42.60:41958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 00:45:10.710474 2026] [:error] [pid 48919:tid 48961] [client 51.195.42.60:41958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 00:45:10.980644 2026] [:error] [pid 48919:tid 48978] [client 51.195.42.60:41958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 00:45:11.252708 2026] [:error] [pid 48919:tid 48975] [client 51.195.42.60:41958] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 01:01:21.136206 2026] [:error] [pid 6612:tid 6619] [client 142.93.224.233:30868] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 01:01:21.389888 2026] [:error] [pid 6612:tid 6616] [client 142.93.224.233:30868] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 01:01:21.644597 2026] [:error] [pid 6612:tid 6621] [client 142.93.224.233:30868] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 01:01:21.898798 2026] [:error] [pid 6612:tid 6634] [client 142.93.224.233:30868] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Jan 26 01:29:46.052657 2026] [:error] [pid 49084:tid 49104] [client 192.200.158.157:58280] [client 192.200.158.157] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aXZTCpHUOXll3XccoO4jUQAAAVI"], referer: https://www.google.com
[Mon Jan 26 01:29:49.451963 2026] [:error] [pid 48920:tid 48991] [client 192.200.158.157:58408] [client 192.200.158.157] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXZTDZsnZS3G6U7VdJMZOQAAAQc"]
[Mon Jan 26 01:29:49.452199 2026] [:error] [pid 48920:tid 48991] [client 192.200.158.157:58408] [client 192.200.158.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 192.200.158.157, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXZTDZsnZS3G6U7VdJMZOQAAAQc"]
[Mon Jan 26 01:29:49.456675 2026] [:error] [pid 48920:tid 48991] [client 192.200.158.157:58408] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Jan 26 01:29:51.052933 2026] [:error] [pid 6738:tid 6766] [client 192.200.158.157:58450] [client 192.200.158.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.200.158.157, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXZTD2xKUXbdUVtnLFZsRgAAAEQ"], referer: https://www.google.com
[Mon Jan 26 01:29:51.059096 2026] [:error] [pid 6738:tid 6766] [client 192.200.158.157:58450] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Mon Jan 26 01:29:52.698942 2026] [:error] [pid 13569:tid 13632] [client 192.200.158.157:58500] [client 192.200.158.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 192.200.158.157, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXZTEPjY_vt91DmOz5XFkAAAAZQ"], referer: https://www.google.com
[Mon Jan 26 01:29:52.703660 2026] [:error] [pid 13569:tid 13632] [client 192.200.158.157:58500] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Mon Jan 26 04:30:14.640110 2026] [:error] [pid 24558:tid 24622] [client 159.203.3.128:64667] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXZ9Vgo1PXqeJqIMTQbsRwAAAIE"]
[Mon Jan 26 04:30:15.076476 2026] [:error] [pid 61286:tid 61313] [client 159.203.3.128:64829] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXZ9V8nVt687wYGMPn9CvQAAAVc"]
[Mon Jan 26 04:30:15.513652 2026] [:error] [pid 24556:tid 24568] [client 159.203.3.128:65003] [client 159.203.3.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aXZ9V0yDW1_EbgDa3XJKmQAAAAM"]
[Mon Jan 26 06:55:45.945428 2026] [:error] [pid 24556:tid 24576] [client 114.80.36.40:59436] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXafcUyDW1_EbgDa3XJkMwAAAAs"]
[Mon Jan 26 11:45:00.627919 2026] [:error] [pid 61252:tid 61273] [client 104.248.27.43:62322] [client 104.248.27.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.27.43, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXbjPLrGlf8FG2etxUAe7AAAARM"]
[Mon Jan 26 11:45:00.631469 2026] [:error] [pid 61252:tid 61273] [client 104.248.27.43:62322] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Jan 26 17:01:58.065781 2026] [:error] [pid 61252:tid 61270] [client 43.166.7.113:46232] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXcthrrGlf8FG2etxUBk_gAAARA"]
[Mon Jan 26 19:37:45.568079 2026] [:error] [pid 24557:tid 24612] [client 114.80.36.40:59004] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXdSCerlG7Vm9pxV14wbjgAAAFI"]
[Mon Jan 26 23:01:07.766775 2026] [:error] [pid 61252:tid 61268] [client 170.106.147.63:37670] [client 170.106.147.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXeBs7rGlf8FG2etxUCxnQAAAQ4"]
[Mon Jan 26 23:14:21.857154 2026] [:error] [pid 61287:tid 61335] [client 45.133.5.73:55731] [client 45.133.5.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.73, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXeEzdimZOwAM64CfR5y2QAAAZI"]
[Mon Jan 26 23:14:21.865212 2026] [:error] [pid 61287:tid 61335] [client 45.133.5.73:55731] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Jan 27 01:17:46.919219 2026] [:error] [pid 57173:tid 57233] [client 119.28.140.106:49418] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXehuk4W-bz8q8pfNmgdRQAAAAE"]
[Tue Jan 27 01:48:41.881373 2026] [:error] [pid 18632:tid 18637] [client 212.32.76.60:35757] [client 212.32.76.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 212.32.76.60, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXeo-aU_e_bi-Bnkkm4LXwAAAEI"]
[Tue Jan 27 01:48:41.885481 2026] [:error] [pid 18632:tid 18637] [client 212.32.76.60:35757] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Jan 27 04:16:16.677889 2026] [:error] [pid 7454:tid 7537] [client 45.82.13.200:55432] [client 45.82.13.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aXfLkJltCoZEfMmfl8A6HgAAAJU"]
[Tue Jan 27 07:01:00.569602 2026] [:error] [pid 7452:tid 7472] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Jan 27 07:01:00.720226 2026] [:error] [pid 7452:tid 7485] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Jan 27 07:01:00.862828 2026] [:error] [pid 7452:tid 7464] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Tue Jan 27 07:01:01.013652 2026] [:error] [pid 7452:tid 7467] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Jan 27 07:01:01.185303 2026] [:error] [pid 7452:tid 7466] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Jan 27 07:01:01.334718 2026] [:error] [pid 7452:tid 7482] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Jan 27 07:01:01.485967 2026] [:error] [pid 7452:tid 7481] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Jan 27 07:01:01.627737 2026] [:error] [pid 7452:tid 7478] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Jan 27 07:01:01.769805 2026] [:error] [pid 7452:tid 7465] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Jan 27 07:01:01.917774 2026] [:error] [pid 7452:tid 7477] [client 104.211.88.109:24810] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Jan 27 07:01:02.058643 2026] [:error] [pid 7452:tid 7474] [client 104.211.88.109:24810] [client 104.211.88.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aXfyLmlXocEpHDB6FUaG2QAAAA0"]
[Tue Jan 27 07:01:02.609453 2026] [:error] [pid 7452:tid 7472] [client 104.211.88.109:22187] [client 104.211.88.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aXfyLmlXocEpHDB6FUaG3QAAAAs"]
[Tue Jan 27 07:01:03.161718 2026] [:error] [pid 41780:tid 41803] [client 104.211.88.109:21941] [client 104.211.88.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aXfyL1vu-XLQ0TaZ4FF6fQAAARU"]
[Tue Jan 27 07:01:03.715630 2026] [:error] [pid 41780:tid 41798] [client 104.211.88.109:7088] [client 104.211.88.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aXfyL1vu-XLQ0TaZ4FF6fgAAARA"]
[Tue Jan 27 07:46:17.299165 2026] [:error] [pid 7561:tid 7566] [client 43.135.148.92:39856] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXf8ybXGI6mgvHQqkXxCBQAAAMI"]
[Tue Jan 27 11:43:37.028097 2026] [:error] [pid 48412:tid 48433] [client 64.225.49.30:63592] [client 64.225.49.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aXg0aXbJMfAKlln88JGH6gAAAVM"], referer: binance.com
[Tue Jan 27 12:06:07.842029 2026] [:error] [pid 7453:tid 7508] [client 43.156.202.34:48920] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXg5rxfsyA2ws_ADqugg0wAAAFM"]
[Tue Jan 27 13:17:13.795101 2026] [:error] [pid 48412:tid 48426] [client 159.65.138.149:52804] [client 159.65.138.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.65.138.149, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXhKWXbJMfAKlln88JGgYgAAAUw"]
[Tue Jan 27 13:17:13.798736 2026] [:error] [pid 48412:tid 48426] [client 159.65.138.149:52804] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 27 13:17:14.848609 2026] [:error] [pid 48412:tid 48416] [client 159.65.138.149:52804] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aXhKWnbJMfAKlln88JGgbQAAAUI"]
[Tue Jan 27 13:17:15.200203 2026] [:error] [pid 48446:tid 48491] [client 159.65.138.149:61922] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aXhKW8DRSaZ8F8aaLxlLRQAAAc0"]
[Tue Jan 27 13:17:15.542590 2026] [:error] [pid 7453:tid 7499] [client 159.65.138.149:52804] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aXhKWxfsyA2ws_ADqug4TwAAAEo"]
[Tue Jan 27 13:17:15.909298 2026] [:error] [pid 48445:tid 48449] [client 159.65.138.149:63735] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aXhKWxFh_QNUhZ0Hkzej3AAAAYA"]
[Tue Jan 27 13:17:16.258915 2026] [:error] [pid 48631:tid 48642] [client 159.65.138.149:58928] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aXhKXCN5eesHzEogX0wIrQAAAkk"]
[Tue Jan 27 13:17:16.604862 2026] [:error] [pid 7454:tid 7531] [client 159.65.138.149:63528] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXhKXJltCoZEfMmfl8DobQAAAI8"]
[Tue Jan 27 13:17:16.958874 2026] [:error] [pid 7561:tid 7576] [client 159.65.138.149:49884] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXhKXLXGI6mgvHQqkXyZMwAAAMw"]
[Tue Jan 27 13:17:20.308075 2026] [:error] [pid 48446:tid 48483] [client 159.65.138.149:56326] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aXhKYMDRSaZ8F8aaLxlLSwAAAcY"]
[Tue Jan 27 13:17:20.681311 2026] [:error] [pid 48412:tid 48418] [client 159.65.138.149:65280] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXhKYHbJMfAKlln88JGgcgAAAUQ"]
[Tue Jan 27 13:17:24.475063 2026] [:error] [pid 7454:tid 7525] [client 159.65.138.149:59100] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXhKZJltCoZEfMmfl8DobwAAAIk"]
[Tue Jan 27 13:17:24.836534 2026] [:error] [pid 48412:tid 48434] [client 159.65.138.149:52501] [client 159.65.138.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aXhKZHbJMfAKlln88JGgdAAAAVQ"]
[Tue Jan 27 17:52:01.329340 2026] [:error] [pid 48412:tid 48416] [client 45.137.126.36:32867] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aXiKwXbJMfAKlln88JHa8wAAAUI"]
[Tue Jan 27 17:52:02.151086 2026] [:error] [pid 41780:tid 41791] [client 45.137.126.10:41837] [client 45.137.126.10] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aXiKwlvu-XLQ0TaZ4FH-ywAAAQk"]
[Tue Jan 27 18:02:53.965254 2026] [:error] [pid 48631:tid 48644] [client 180.191.186.209:21836] [client 180.191.186.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.186.209, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXiNTSN5eesHzEogX0wxCwAAAks"]
[Tue Jan 27 18:02:53.970526 2026] [:error] [pid 48631:tid 48644] [client 180.191.186.209:21836] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Jan 27 19:23:58.613694 2026] [:error] [pid 48446:tid 48494] [client 43.130.100.35:49168] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXigTsDRSaZ8F8aaLxmS8AAAAdA"]
[Wed Jan 28 01:27:34.265685 2026] [:error] [pid 24427:tid 24490] [client 43.156.109.53:60444] [client 43.156.109.53] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXj1hk5-wqSNb5f_hOL6wgAAAYU"]
[Wed Jan 28 03:55:04.954187 2026] [:error] [pid 14117:tid 14200] [client 49.51.73.183:45518] [client 49.51.73.183] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXkYGFQflP8V6efgos8DgQAAAAc"]
[Wed Jan 28 05:22:28.972563 2026] [:error] [pid 17425:tid 17464] [client 45.154.138.37:45695] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Jan 28 05:22:29.927389 2026] [:error] [pid 17425:tid 17485] [client 45.154.138.37:45695] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Jan 28 05:22:30.410042 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.37:45695] [client 45.154.138.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXkslqrcODKH1Dl7aZAxtQAAAEY"]
[Wed Jan 28 05:22:31.507744 2026] [:error] [pid 64842:tid 64861] [client 45.154.138.235:32253] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed Jan 28 05:22:31.980574 2026] [:error] [pid 64842:tid 64868] [client 45.154.138.235:32253] [client 45.154.138.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aXksl1uAAQZ5AN_SnDYFywAAAVg"]
[Wed Jan 28 05:22:32.904394 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.8:49071] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Wed Jan 28 05:22:33.881139 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.8:49071] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Jan 28 05:22:34.348034 2026] [:error] [pid 58254:tid 58275] [client 45.154.138.8:49071] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Jan 28 05:22:34.893354 2026] [:error] [pid 58254:tid 58261] [client 45.154.138.8:49071] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Jan 28 05:22:35.822611 2026] [:error] [pid 58254:tid 58272] [client 45.154.138.8:49071] [client 45.154.138.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXksm_F8nSyBg9wOsa8f4QAAARA"]
[Wed Jan 28 05:22:36.779814 2026] [:error] [pid 58254:tid 58279] [client 45.154.138.16:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Jan 28 05:22:37.242829 2026] [:error] [pid 58254:tid 58275] [client 45.154.138.16:24471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Wed Jan 28 05:22:37.704626 2026] [:error] [pid 58254:tid 58266] [client 45.154.138.16:24471] [client 45.154.138.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXksnfF8nSyBg9wOsa8gAAAAAQo"]
[Wed Jan 28 05:22:38.627483 2026] [:error] [pid 64842:tid 64847] [client 45.154.138.5:50259] [client 45.154.138.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXksnluAAQZ5AN_SnDYGKAAAAUM"]
[Wed Jan 28 05:22:39.546452 2026] [:error] [pid 17424:tid 17438] [client 45.154.138.33:47145] [client 45.154.138.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXksn2RvtDRvGDe-pItUDAAAAAU"]
[Wed Jan 28 05:22:40.948233 2026] [:error] [pid 17424:tid 17446] [client 45.154.138.36:47359] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aXksoGRvtDRvGDe-pItUFwAAAA0"]
[Wed Jan 28 05:22:42.335563 2026] [:error] [pid 64842:tid 64868] [client 45.154.138.23:27767] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aXksoluAAQZ5AN_SnDYGXgAAAVg"]
[Wed Jan 28 05:22:44.189004 2026] [:error] [pid 2454:tid 2465] [client 45.154.138.44:38979] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Jan 28 05:22:45.582777 2026] [:error] [pid 2454:tid 2476] [client 45.154.138.44:38979] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed Jan 28 05:22:46.042284 2026] [:error] [pid 2454:tid 2478] [client 45.154.138.44:38979] [client 45.154.138.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aXksppvv4I21Ywd7NNb6tgAAAZQ"]
[Wed Jan 28 05:22:46.964600 2026] [:error] [pid 17535:tid 17560] [client 45.154.138.23:26135] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aXkspq3QiSMgVscnN5IlSQAAANY"]
[Wed Jan 28 05:22:48.376603 2026] [:error] [pid 2454:tid 2467] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Wed Jan 28 05:22:48.840313 2026] [:error] [pid 2454:tid 2458] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Wed Jan 28 05:22:49.304655 2026] [:error] [pid 2454:tid 2460] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Jan 28 05:22:49.799007 2026] [:error] [pid 2454:tid 2466] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Jan 28 05:22:50.263064 2026] [:error] [pid 2454:tid 2459] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Wed Jan 28 05:22:50.729187 2026] [:error] [pid 2454:tid 2473] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Wed Jan 28 05:22:51.197169 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Wed Jan 28 05:22:51.669523 2026] [:error] [pid 2454:tid 2462] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Wed Jan 28 05:22:52.133414 2026] [:error] [pid 2454:tid 2481] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Wed Jan 28 05:22:52.618021 2026] [:error] [pid 2454:tid 2475] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Jan 28 05:22:53.095200 2026] [:error] [pid 2454:tid 2462] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Wed Jan 28 05:22:53.567734 2026] [:error] [pid 2454:tid 2469] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Jan 28 05:22:54.041139 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Jan 28 05:22:54.507261 2026] [:error] [pid 2454:tid 2474] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Wed Jan 28 05:22:54.969757 2026] [:error] [pid 2454:tid 2478] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Wed Jan 28 05:22:55.435498 2026] [:error] [pid 2454:tid 2458] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Jan 28 05:22:55.905154 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Wed Jan 28 05:22:56.374120 2026] [:error] [pid 2454:tid 2466] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed Jan 28 05:22:56.841003 2026] [:error] [pid 2454:tid 2470] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Wed Jan 28 05:22:57.313016 2026] [:error] [pid 2454:tid 2468] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Wed Jan 28 05:22:57.789977 2026] [:error] [pid 2454:tid 2480] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Wed Jan 28 05:22:58.256234 2026] [:error] [pid 2454:tid 2476] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Jan 28 05:22:58.719069 2026] [:error] [pid 2454:tid 2473] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Wed Jan 28 05:22:59.182077 2026] [:error] [pid 2454:tid 2464] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Jan 28 05:22:59.654624 2026] [:error] [pid 2454:tid 2470] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Jan 28 05:23:00.120461 2026] [:error] [pid 2454:tid 2469] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Wed Jan 28 05:23:00.602403 2026] [:error] [pid 2454:tid 2475] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Jan 28 05:23:01.078652 2026] [:error] [pid 2454:tid 2472] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Wed Jan 28 05:23:01.545144 2026] [:error] [pid 2454:tid 2458] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Wed Jan 28 05:23:02.031458 2026] [:error] [pid 2454:tid 2466] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Wed Jan 28 05:23:02.499103 2026] [:error] [pid 2454:tid 2472] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Wed Jan 28 05:23:02.960827 2026] [:error] [pid 2454:tid 2481] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Wed Jan 28 05:23:03.426338 2026] [:error] [pid 2454:tid 2480] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed Jan 28 05:23:03.890867 2026] [:error] [pid 2454:tid 2468] [client 45.154.138.17:45415] [client 45.154.138.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.154.138.17, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXkst5vv4I21Ywd7NNb71wAAAYo"]
[Wed Jan 28 05:23:03.896354 2026] [:error] [pid 2454:tid 2468] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Jan 28 05:23:04.822280 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Wed Jan 28 05:23:05.287433 2026] [:error] [pid 2454:tid 2463] [client 45.154.138.17:45415] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Wed Jan 28 05:23:05.750330 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.17:45415] [client 45.154.138.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aXksuZvv4I21Ywd7NNb78QAAAY0"]
[Wed Jan 28 05:23:06.683323 2026] [:error] [pid 2454:tid 2482] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Wed Jan 28 05:23:07.156978 2026] [:error] [pid 2454:tid 2475] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Jan 28 05:23:08.106270 2026] [:error] [pid 2454:tid 2463] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Wed Jan 28 05:23:08.573191 2026] [:error] [pid 2454:tid 2471] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Wed Jan 28 05:23:09.037309 2026] [:error] [pid 2454:tid 2461] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Wed Jan 28 05:23:09.508944 2026] [:error] [pid 2454:tid 2479] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Wed Jan 28 05:23:09.972398 2026] [:error] [pid 2454:tid 2480] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Wed Jan 28 05:23:10.442117 2026] [:error] [pid 2454:tid 2467] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Wed Jan 28 05:23:10.919146 2026] [:error] [pid 2454:tid 2482] [client 45.154.138.42:20779] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Wed Jan 28 05:23:11.857638 2026] [:error] [pid 2454:tid 2469] [client 45.154.138.42:20779] [client 45.154.138.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aXksv5vv4I21Ywd7NNb8YAAAAYs"]
[Wed Jan 28 05:23:12.786929 2026] [:error] [pid 17425:tid 17477] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Wed Jan 28 05:23:13.255392 2026] [:error] [pid 17425:tid 17465] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Wed Jan 28 05:23:15.617873 2026] [:error] [pid 17425:tid 17472] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Wed Jan 28 05:23:16.108696 2026] [:error] [pid 17425:tid 17477] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Wed Jan 28 05:23:16.588332 2026] [:error] [pid 17425:tid 17465] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/w0.php
[Wed Jan 28 05:23:17.058674 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/old-index.php
[Wed Jan 28 05:23:17.523448 2026] [:error] [pid 17425:tid 17476] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Wed Jan 28 05:23:18.924239 2026] [:error] [pid 17425:tid 17472] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Wed Jan 28 05:23:19.388047 2026] [:error] [pid 17425:tid 17486] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Wed Jan 28 05:23:19.859827 2026] [:error] [pid 17425:tid 17477] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Wed Jan 28 05:23:20.325106 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Wed Jan 28 05:23:20.802450 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Wed Jan 28 05:23:21.278908 2026] [:error] [pid 17425:tid 17480] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Wed Jan 28 05:23:21.743478 2026] [:error] [pid 17425:tid 17475] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Wed Jan 28 05:23:22.692187 2026] [:error] [pid 17425:tid 17477] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Wed Jan 28 05:23:23.167796 2026] [:error] [pid 17425:tid 17483] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Wed Jan 28 05:23:24.107415 2026] [:error] [pid 17425:tid 17477] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Wed Jan 28 05:23:24.613021 2026] [:error] [pid 17425:tid 17481] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Wed Jan 28 05:23:25.087138 2026] [:error] [pid 17425:tid 17472] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Wed Jan 28 05:23:25.553095 2026] [:error] [pid 17425:tid 17466] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Wed Jan 28 05:23:26.054968 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.27:50623] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Wed Jan 28 05:23:26.518626 2026] [:error] [pid 17425:tid 17473] [client 45.154.138.27:50623] [client 45.154.138.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aXkszqrcODKH1Dl7aZA0rQAAAEs"]
[Wed Jan 28 05:23:28.387658 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Wed Jan 28 05:23:28.871492 2026] [:error] [pid 17425:tid 17482] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Wed Jan 28 05:23:29.363565 2026] [:error] [pid 17425:tid 17474] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Wed Jan 28 05:23:29.830435 2026] [:error] [pid 17425:tid 17475] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Wed Jan 28 05:23:30.299022 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Wed Jan 28 05:23:30.929253 2026] [:error] [pid 17425:tid 17466] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed Jan 28 05:23:31.398405 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Wed Jan 28 05:23:38.269343 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Wed Jan 28 05:23:38.738365 2026] [:error] [pid 17425:tid 17465] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Wed Jan 28 05:23:39.201676 2026] [:error] [pid 17425:tid 17481] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Wed Jan 28 05:23:39.672756 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Jan 28 05:23:40.162356 2026] [:error] [pid 17425:tid 17479] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Wed Jan 28 05:23:40.639627 2026] [:error] [pid 17425:tid 17474] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Wed Jan 28 05:23:41.111005 2026] [:error] [pid 17425:tid 17486] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Wed Jan 28 05:23:41.575376 2026] [:error] [pid 17425:tid 17478] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Wed Jan 28 05:23:42.062618 2026] [:error] [pid 17425:tid 17472] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Wed Jan 28 05:23:42.532462 2026] [:error] [pid 17425:tid 17481] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Wed Jan 28 05:23:43.029365 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Wed Jan 28 05:23:43.494452 2026] [:error] [pid 17425:tid 17474] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Wed Jan 28 05:23:43.974381 2026] [:error] [pid 17425:tid 17462] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Wed Jan 28 05:23:44.470955 2026] [:error] [pid 17425:tid 17466] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Wed Jan 28 05:23:44.950900 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Wed Jan 28 05:23:45.471288 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Wed Jan 28 05:23:45.944151 2026] [:error] [pid 17425:tid 17478] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Wed Jan 28 05:23:46.418691 2026] [:error] [pid 17425:tid 17483] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Wed Jan 28 05:23:46.890310 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Wed Jan 28 05:23:47.357732 2026] [:error] [pid 17425:tid 17471] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Wed Jan 28 05:23:47.844613 2026] [:error] [pid 17425:tid 17470] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Jan 28 05:23:48.307310 2026] [:error] [pid 17425:tid 17472] [client 45.154.138.6:37403] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Wed Jan 28 05:23:57.703712 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.6:37403] [client 45.154.138.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aXks7arcODKH1Dl7aZA2QgAAAEc"]
[Wed Jan 28 05:23:59.097095 2026] [:error] [pid 2454:tid 2473] [client 45.154.138.1:49677] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-widget-archives.php
[Wed Jan 28 05:23:59.566656 2026] [:error] [pid 2454:tid 2465] [client 45.154.138.1:49677] [client 45.154.138.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/three-column-screen-layout/db.php"] [unique_id "aXks75vv4I21Ywd7NNb_KgAAAYc"]
[Wed Jan 28 05:24:04.374271 2026] [:error] [pid 17535:tid 17554] [client 45.154.138.20:29187] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Wed Jan 28 05:24:04.848967 2026] [:error] [pid 17535:tid 17548] [client 45.154.138.20:29187] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Wed Jan 28 05:24:05.324938 2026] [:error] [pid 17535:tid 17547] [client 45.154.138.20:29187] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Wed Jan 28 05:24:06.738172 2026] [:error] [pid 17535:tid 17557] [client 45.154.138.20:29187] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Wed Jan 28 05:24:08.611131 2026] [:error] [pid 17535:tid 17554] [client 45.154.138.20:29187] [client 45.154.138.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aXks-K3QiSMgVscnN5IplQAAANA"]
[Wed Jan 28 05:24:10.472571 2026] [:error] [pid 2454:tid 2475] [client 45.154.138.47:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-apxupx.php
[Wed Jan 28 05:24:10.947124 2026] [:error] [pid 2454:tid 2458] [client 45.154.138.47:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Wed Jan 28 05:24:11.413815 2026] [:error] [pid 2454:tid 2461] [client 45.154.138.47:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Wed Jan 28 05:24:11.876678 2026] [:error] [pid 2454:tid 2459] [client 45.154.138.47:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Wed Jan 28 05:24:12.346897 2026] [:error] [pid 2454:tid 2472] [client 45.154.138.47:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Wed Jan 28 05:24:12.821620 2026] [:error] [pid 2454:tid 2459] [client 45.154.138.47:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Wed Jan 28 05:24:13.752980 2026] [:error] [pid 2454:tid 2459] [client 45.154.138.47:31951] [client 45.154.138.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aXks_Zvv4I21Ywd7NNYARQAAAYE"]
[Wed Jan 28 05:24:14.681875 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.28:48671] [client 45.154.138.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.154.138.28, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXks_luAAQZ5AN_SnDYMLwAAAUk"]
[Wed Jan 28 05:24:14.685259 2026] [:error] [pid 64842:tid 64853] [client 45.154.138.28:48671] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 28 05:24:15.153214 2026] [:error] [pid 64842:tid 64865] [client 45.154.138.28:48671] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Wed Jan 28 05:24:16.172505 2026] [:error] [pid 64842:tid 64855] [client 45.154.138.28:48671] [client 45.154.138.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXktAFuAAQZ5AN_SnDYMQQAAAUs"]
[Wed Jan 28 05:24:17.589642 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.12:55125] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Wed Jan 28 05:24:19.979631 2026] [:error] [pid 17425:tid 17469] [client 45.154.138.12:55125] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Jan 28 05:24:20.926451 2026] [:error] [pid 17425:tid 17483] [client 45.154.138.12:55125] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Wed Jan 28 05:24:21.397874 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.12:55125] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aXktBarcODKH1Dl7aZA3NwAAAEY"]
[Wed Jan 28 05:24:22.333873 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Wed Jan 28 05:24:22.814267 2026] [:error] [pid 17426:tid 17497] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Wed Jan 28 05:24:23.283660 2026] [:error] [pid 17426:tid 17510] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Wed Jan 28 05:24:25.167865 2026] [:error] [pid 17426:tid 17496] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Wed Jan 28 05:24:25.634417 2026] [:error] [pid 17426:tid 17495] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed Jan 28 05:24:26.106805 2026] [:error] [pid 17426:tid 17511] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Jan 28 05:24:26.584724 2026] [:error] [pid 17426:tid 17494] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Wed Jan 28 05:24:28.563320 2026] [:error] [pid 17426:tid 17494] [client 45.154.138.22:27687] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Jan 28 05:24:29.489786 2026] [:error] [pid 17426:tid 17495] [client 45.154.138.22:27687] [client 45.154.138.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aXktDU8zvf_03BnziRcRUgAAAIY"]
[Wed Jan 28 05:24:30.421584 2026] [:error] [pid 17535:tid 17541] [client 45.154.138.34:30219] [client 45.154.138.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXktDq3QiSMgVscnN5Iq6gAAAMM"]
[Wed Jan 28 05:24:47.286009 2026] [autoindex:error] [pid 17425:tid 17470] [client 45.154.138.47:57083] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:25:19.382639 2026] [:error] [pid 17425:tid 17468] [client 45.154.138.47:57083] [client 45.154.138.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/"] [unique_id "aXktP6rcODKH1Dl7aZA6AgAAAEY"]
[Wed Jan 28 05:25:24.062797 2026] [:error] [pid 17535:tid 17547] [client 45.154.138.7:39829] [client 45.154.138.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aXktRK3QiSMgVscnN5It7wAAAMk"]
[Wed Jan 28 05:25:42.665480 2026] [:error] [pid 64842:tid 64850] [client 45.154.138.20:42519] [client 45.154.138.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-diambar/includes/"] [unique_id "aXktVluAAQZ5AN_SnDYQrgAAAUY"]
[Wed Jan 28 05:25:58.463592 2026] [:error] [pid 2454:tid 2482] [client 45.154.138.101:46625] [client 45.154.138.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aXktZpvv4I21Ywd7NNYI-gAAAZg"]
[Wed Jan 28 05:26:07.098587 2026] [:error] [pid 17535:tid 17547] [client 45.154.138.34:20495] [client 45.154.138.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/"] [unique_id "aXktb63QiSMgVscnN5IwVQAAAMk"]
[Wed Jan 28 05:26:09.912217 2026] [:error] [pid 17426:tid 17501] [client 45.154.138.9:41711] [client 45.154.138.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/"] [unique_id "aXktcU8zvf_03BnziRcXuQAAAIw"]
[Wed Jan 28 05:26:25.069964 2026] [:error] [pid 58254:tid 58263] [client 45.154.138.47:23017] [client 45.154.138.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "aXktgfF8nSyBg9wOsa8rYAAAAQc"]
[Wed Jan 28 05:26:27.164466 2026] [:error] [pid 17535:tid 17540] [client 45.154.138.29:52211] [client 45.154.138.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "aXktg63QiSMgVscnN5IxOAAAAMI"]
[Wed Jan 28 05:26:54.586966 2026] [:error] [pid 2454:tid 2476] [client 45.154.138.25:53063] [client 45.154.138.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aXktnpvv4I21Ywd7NNYOwwAAAZI"]
[Wed Jan 28 05:26:55.505787 2026] [:error] [pid 58254:tid 58265] [client 45.154.138.25:36705] [client 45.154.138.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/nux/"] [unique_id "aXktn_F8nSyBg9wOsa8sfAAAAQk"]
[Wed Jan 28 05:27:13.578632 2026] [:error] [pid 17535:tid 17544] [client 45.154.138.8:51309] [client 45.154.138.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/3asba/"] [unique_id "aXktsa3QiSMgVscnN5IzLQAAAMY"]
[Wed Jan 28 06:10:33.429354 2026] [:error] [pid 17425:tid 17475] [client 93.123.109.175:52586] [client 93.123.109.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aXk32arcODKH1Dl7aZBX2AAAAE0"]
[Wed Jan 28 07:09:02.959256 2026] [:error] [pid 64842:tid 64861] [client 141.98.11.239:59215] [client 141.98.11.239] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.11.239, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXlFjluAAQZ5AN_SnDY22AAAAVE"]
[Wed Jan 28 07:09:02.959305 2026] [:error] [pid 64842:tid 64861] [client 141.98.11.239:59215] [client 141.98.11.239] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 141.98.11.239 on wp-login.php, counter = 66"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXlFjluAAQZ5AN_SnDY22AAAAVE"]
[Wed Jan 28 07:49:31.807743 2026] [:error] [pid 2454:tid 2477] [client 20.219.8.79:6526] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXlPC5vv4I21Ywd7NNZCxQAAAZM"]
[Wed Jan 28 07:49:32.388919 2026] [:error] [pid 17426:tid 17497] [client 20.219.8.79:5287] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXlPDE8zvf_03BnziRdKgwAAAIg"]
[Wed Jan 28 07:49:32.944065 2026] [:error] [pid 17424:tid 17457] [client 20.219.8.79:7281] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXlPDGRvtDRvGDe-pIuILQAAABg"]
[Wed Jan 28 07:49:33.514993 2026] [:error] [pid 17426:tid 17504] [client 20.219.8.79:7903] [client 20.219.8.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aXlPDU8zvf_03BnziRdKhAAAAI8"]
[Wed Jan 28 08:01:59.368191 2026] [:error] [pid 64842:tid 64856] [client 43.165.189.110:53294] [client 43.165.189.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXlR91uAAQZ5AN_SnDZBkwAAAUw"]
[Wed Jan 28 09:19:05.926534 2026] [:error] [pid 2454:tid 2469] [client 60.188.57.0:45027] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXlkCZvv4I21Ywd7NNZVFwAAAYs"]
[Wed Jan 28 15:53:22.709633 2026] [:error] [pid 24482:tid 24507] [client 182.44.2.148:59886] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXnAcqLaUZr_xWekSHNf1gAAAdU"]
[Wed Jan 28 16:56:58.128159 2026] [:error] [pid 2625:tid 2635] [client 170.106.181.163:50822] [client 170.106.181.163] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXnPWlZhY64HvuPd7w00GwAAAUQ"]
[Wed Jan 28 20:09:02.048620 2026] [:error] [pid 24452:tid 24471] [client 85.215.227.149:52888] [client 85.215.227.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aXn8Xv0RQOh_GmqmVyZncwAAAZE"], referer: www.google.com
[Wed Jan 28 21:14:07.198208 2026] [:error] [pid 2625:tid 2633] [client 144.172.112.114:52846] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aXoLn1ZhY64HvuPd7w1o_wAAAUI"]
[Wed Jan 28 22:57:44.077463 2026] [:error] [pid 33489:tid 33515] [client 43.130.228.73:52592] [client 43.130.228.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXoj6BZrVZwQUFWC7_9rCwAAABY"]
[Wed Jan 28 23:02:01.589897 2026] [:error] [pid 33490:tid 33527] [client 103.163.182.28:48610] [client 103.163.182.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.163.182.28, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXok6Wjexcy58gsBPJHl6wAAAEM"]
[Wed Jan 28 23:02:01.594858 2026] [:error] [pid 33490:tid 33527] [client 103.163.182.28:48610] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Jan 28 23:15:50.835718 2026] [:error] [pid 24482:tid 24486] [client 213.209.159.151:45658] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXooJqLaUZr_xWekSHPH6wAAAcA"]
[Wed Jan 28 23:16:23.988914 2026] [:error] [pid 33580:tid 33606] [client 213.209.159.151:34166] [client 213.209.159.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXooR5lb0QJtwfka8l55-AAAARM"]
[Thu Jan 29 03:33:39.015033 2026] [:error] [pid 15949:tid 16012] [client 47.90.227.150:37678] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXpkkyUUtCw0-hDUhapM7wAAAFQ"]
[Thu Jan 29 03:33:39.422649 2026] [:error] [pid 16050:tid 16075] [client 47.90.227.150:52424] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXpkk-FPpSEbViHfa9KQQAAAANU"]
[Thu Jan 29 04:44:11.609227 2026] [:error] [pid 19069:tid 19086] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Thu Jan 29 04:44:11.733644 2026] [:error] [pid 19069:tid 19083] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Thu Jan 29 04:44:11.862464 2026] [:error] [pid 19069:tid 19102] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Jan 29 04:44:12.101474 2026] [:error] [pid 19069:tid 19100] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Jan 29 04:44:12.222483 2026] [:error] [pid 19069:tid 19090] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Thu Jan 29 04:44:13.742277 2026] [:error] [pid 19069:tid 19090] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Jan 29 04:44:13.873636 2026] [:error] [pid 19069:tid 19087] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Jan 29 04:44:14.006679 2026] [:error] [pid 19069:tid 19095] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Thu Jan 29 04:44:14.136162 2026] [:error] [pid 19069:tid 19097] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Thu Jan 29 04:44:14.270039 2026] [:error] [pid 19069:tid 19092] [client 20.2.116.198:14529] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Thu Jan 29 04:44:14.388222 2026] [:error] [pid 19069:tid 19098] [client 20.2.116.198:14529] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXp1HvDHsRM4BJ9a4QtMXwAAABQ"]
[Thu Jan 29 04:44:16.736327 2026] [:error] [pid 19177:tid 19180] [client 20.2.116.198:2240] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXp1IHipGz0PT8TrQv7kJwAAAME"]
[Thu Jan 29 04:44:22.388729 2026] [:error] [pid 20486:tid 20507] [client 20.2.116.198:14222] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXp1JngqSZb6GBx5nnPOzAAAARI"]
[Thu Jan 29 04:44:23.220014 2026] [:error] [pid 20579:tid 20654] [client 20.2.116.198:2749] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aXp1JzVXNopcNyjJc9VcyAAAAk0"]
[Thu Jan 29 04:44:25.081318 2026] [:error] [pid 20576:tid 20605] [client 20.2.116.198:11293] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aXp1KSrDZws_FlQGi9fEjwAAAdM"]
[Thu Jan 29 04:44:26.858073 2026] [:error] [pid 20576:tid 20591] [client 20.2.116.198:5134] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aXp1KirDZws_FlQGi9fEkAAAAcU"]
[Thu Jan 29 04:44:28.309111 2026] [:error] [pid 19071:tid 19139] [client 20.2.116.198:14727] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aXp1LJfa8Ix5wWmtmJyN_wAAAIY"]
[Thu Jan 29 04:44:32.979371 2026] [:error] [pid 20576:tid 20600] [client 20.2.116.198:14747] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aXp1MCrDZws_FlQGi9fEkwAAAc4"]
[Thu Jan 29 04:44:37.317533 2026] [:error] [pid 20578:tid 20631] [client 20.2.116.198:14924] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aXp1NQ6UX7yOMwQFiyd27QAAAhI"]
[Thu Jan 29 04:44:38.733237 2026] [:error] [pid 19071:tid 19148] [client 20.2.116.198:9123] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aXp1Npfa8Ix5wWmtmJyOCwAAAI8"]
[Thu Jan 29 04:44:44.936472 2026] [:error] [pid 19177:tid 19195] [client 20.2.116.198:9133] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aXp1PHipGz0PT8TrQv7kLwAAANA"]
[Thu Jan 29 04:44:53.949922 2026] [:error] [pid 20519:tid 20570] [client 20.2.116.198:2650] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/999.php"] [unique_id "aXp1RQo4s4fyROrkyRk0qgAAAZY"]
[Thu Jan 29 04:44:57.455113 2026] [:error] [pid 20486:tid 20489] [client 20.2.116.198:9493] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/999.php"] [unique_id "aXp1SXgqSZb6GBx5nnPO3gAAAQA"]
[Thu Jan 29 04:45:05.915943 2026] [:error] [pid 19069:tid 19102] [client 20.2.116.198:10781] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aXp1UfDHsRM4BJ9a4QtMgAAAABg"]
[Thu Jan 29 04:45:06.536283 2026] [:error] [pid 20578:tid 20634] [client 20.2.116.198:18438] [client 20.2.116.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aXp1Ug6UX7yOMwQFiyd2_QAAAhU"]
[Thu Jan 29 04:45:19.238465 2026] [:error] [pid 20486:tid 20504] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Jan 29 04:45:19.358958 2026] [:error] [pid 20486:tid 20513] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Jan 29 04:45:19.479772 2026] [:error] [pid 20486:tid 20498] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Jan 29 04:45:19.600109 2026] [:error] [pid 20486:tid 20490] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Jan 29 04:45:19.724639 2026] [:error] [pid 20486:tid 20509] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Thu Jan 29 04:45:19.894082 2026] [:error] [pid 20486:tid 20503] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Thu Jan 29 04:45:20.014311 2026] [:error] [pid 20486:tid 20505] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Jan 29 04:45:20.134829 2026] [:error] [pid 20486:tid 20497] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Jan 29 04:45:20.381798 2026] [:error] [pid 20486:tid 20512] [client 20.2.116.198:11077] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Jan 29 04:45:20.600183 2026] [:error] [pid 20486:tid 20506] [client 20.2.116.198:11077] [client 20.2.116.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXp1YHgqSZb6GBx5nnPPBAAAARE"]
[Thu Jan 29 04:52:17.351446 2026] [:error] [pid 19069:tid 19094] [client 49.7.227.204:49500] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXp3AfDHsRM4BJ9a4QtOswAAABA"]
[Thu Jan 29 05:57:28.671347 2026] [:error] [pid 19070:tid 19109] [client 144.172.112.114:59538] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aXqGSLou83lIon_aKgYZXgAAAEM"]
[Thu Jan 29 06:08:15.068631 2026] [:error] [pid 20519:tid 20566] [client 49.51.253.83:41740] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXqIzwo4s4fyROrkyRlElwAAAZI"]
[Thu Jan 29 10:58:22.338452 2026] [:error] [pid 20580:tid 20680] [client 123.187.240.242:32909] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXrMzpCZ5HHdXPmeL5-QywAAAow"]
[Thu Jan 29 17:06:07.045229 2026] [:error] [pid 19069:tid 19102] [client 170.106.192.208:39536] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXsi__DHsRM4BJ9a4QsUogAAABg"]
[Thu Jan 29 17:26:51.529096 2026] [:error] [pid 19177:tid 19190] [client 49.235.136.28:38232] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXsn23ipGz0PT8TrQv5sRwAAAMs"]
[Thu Jan 29 21:30:52.678214 2026] [:error] [pid 19071:tid 19139] [client 144.172.112.114:51732] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aXthDJfa8Ix5wWmtmJyU6gAAAIY"]
[Thu Jan 29 22:28:14.994922 2026] [:error] [pid 19071:tid 19134] [client 47.90.227.150:52152] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXtufpfa8Ix5wWmtmJyinAAAAIE"]
[Thu Jan 29 22:28:15.613452 2026] [:error] [pid 20576:tid 20596] [client 47.90.227.150:50158] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXtufyrDZws_FlQGi9eG9gAAAco"]
[Thu Jan 29 22:38:04.988446 2026] [:error] [pid 20580:tid 20691] [client 45.66.210.232:57913] [client 45.66.210.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.66.210.232, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aXtwzJCZ5HHdXPmeL59PlAAAApc"]
[Thu Jan 29 22:38:04.992347 2026] [:error] [pid 20580:tid 20691] [client 45.66.210.232:57913] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Jan 30 00:24:43.219468 2026] [:error] [pid 39813:tid 39827] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/baidu.php
[Fri Jan 30 00:24:43.534095 2026] [:error] [pid 39813:tid 39825] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/xfile25.php
[Fri Jan 30 00:24:43.939246 2026] [:error] [pid 39813:tid 39837] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/zi-136.php
[Fri Jan 30 00:24:44.078257 2026] [:error] [pid 39813:tid 39831] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/aurax.php
[Fri Jan 30 00:24:44.392581 2026] [:error] [pid 39813:tid 39822] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/xmff.php
[Fri Jan 30 00:24:44.534488 2026] [:error] [pid 39813:tid 39819] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/tourpa.php
[Fri Jan 30 00:24:45.023504 2026] [:error] [pid 39813:tid 39839] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/zs.php
[Fri Jan 30 00:24:45.164667 2026] [:error] [pid 39813:tid 39836] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/save.php
[Fri Jan 30 00:24:45.305424 2026] [:error] [pid 39813:tid 39824] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/X5fCS.php
[Fri Jan 30 00:24:45.445860 2026] [:error] [pid 39813:tid 39829] [client 20.194.2.144:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/jsond.php
[Fri Jan 30 00:24:45.583244 2026] [:error] [pid 39813:tid 39830] [client 20.194.2.144:55871] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "aXuJzd_AaZSBkqpNK02-CQAAAU8"]
[Fri Jan 30 00:24:48.619704 2026] [:error] [pid 39813:tid 39828] [client 20.194.2.144:7920] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "aXuJ0N_AaZSBkqpNK02-CwAAAU0"]
[Fri Jan 30 00:24:49.355344 2026] [:error] [pid 39783:tid 39804] [client 20.194.2.144:52486] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "aXuJ0a51RNfzhKG5ppOnzQAAAFM"]
[Fri Jan 30 00:24:50.412495 2026] [:error] [pid 39501:tid 39526] [client 20.194.2.144:42304] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "aXuJ0i_BLgXFo3daaZimTQAAABE"]
[Fri Jan 30 00:24:51.106507 2026] [:error] [pid 39503:tid 39573] [client 20.194.2.144:56057] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aXuJ0zzoHqvQcupFdnbelAAAAQo"]
[Fri Jan 30 00:24:52.835220 2026] [:error] [pid 39501:tid 39516] [client 20.194.2.144:55035] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aXuJ1C_BLgXFo3daaZimTwAAAAc"]
[Fri Jan 30 00:24:54.580431 2026] [:error] [pid 39783:tid 39792] [client 20.194.2.144:60144] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aXuJ1q51RNfzhKG5ppOn0wAAAEc"]
[Fri Jan 30 00:24:55.718228 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:7883] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aXuJ1651RNfzhKG5ppOn1gAAAEk"]
[Fri Jan 30 00:25:09.481497 2026] [:error] [pid 39813:tid 39834] [client 20.194.2.144:50566] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ph33w.php"] [unique_id "aXuJ5d_AaZSBkqpNK02-ZQAAAVM"]
[Fri Jan 30 00:25:10.143385 2026] [:error] [pid 39813:tid 39827] [client 20.194.2.144:49726] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ph33w.php"] [unique_id "aXuJ5t_AaZSBkqpNK02-bAAAAUw"]
[Fri Jan 30 00:25:12.824676 2026] [:error] [pid 39813:tid 39819] [client 20.194.2.144:60148] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aXuJ6N_AaZSBkqpNK02-dQAAAUQ"]
[Fri Jan 30 00:25:16.823221 2026] [:error] [pid 39592:tid 39600] [client 20.194.2.144:52505] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aXuJ7JlnGYODSsJUyHkp2AAAAMM"]
[Fri Jan 30 00:25:17.758916 2026] [:error] [pid 39813:tid 39828] [client 20.194.2.144:53857] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aXuJ7d_AaZSBkqpNK02-gwAAAU0"]
[Fri Jan 30 00:25:19.566035 2026] [:error] [pid 39813:tid 39830] [client 20.194.2.144:53863] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aXuJ79_AaZSBkqpNK02-iwAAAU8"]
[Fri Jan 30 00:25:20.387761 2026] [:error] [pid 39783:tid 39798] [client 20.194.2.144:54406] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/it.php"] [unique_id "aXuJ8K51RNfzhKG5ppOoAwAAAE0"]
[Fri Jan 30 00:25:21.457177 2026] [:error] [pid 39783:tid 39793] [client 20.194.2.144:53572] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/it.php"] [unique_id "aXuJ8a51RNfzhKG5ppOoCAAAAEg"]
[Fri Jan 30 00:25:22.510150 2026] [:error] [pid 39783:tid 39806] [client 20.194.2.144:55256] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/it.php"] [unique_id "aXuJ8q51RNfzhKG5ppOoDQAAAFU"]
[Fri Jan 30 00:25:23.212406 2026] [:error] [pid 39592:tid 39607] [client 20.194.2.144:8087] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/it.php"] [unique_id "aXuJ85lnGYODSsJUyHkqAwAAAMo"]
[Fri Jan 30 00:25:25.573827 2026] [:error] [pid 39501:tid 39515] [client 20.194.2.144:8110] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwx.php"] [unique_id "aXuJ9S_BLgXFo3daaZimggAAAAY"]
[Fri Jan 30 00:25:27.095633 2026] [:error] [pid 39783:tid 39801] [client 20.194.2.144:54807] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwx.php"] [unique_id "aXuJ9651RNfzhKG5ppOoGQAAAFA"]
[Fri Jan 30 00:25:27.651129 2026] [:error] [pid 39783:tid 39790] [client 20.194.2.144:52439] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwx.php"] [unique_id "aXuJ9651RNfzhKG5ppOoHQAAAEU"]
[Fri Jan 30 00:25:29.104072 2026] [:error] [pid 39592:tid 39604] [client 20.194.2.144:8065] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwx.php"] [unique_id "aXuJ-ZlnGYODSsJUyHkqGgAAAMc"]
[Fri Jan 30 00:25:30.828835 2026] [:error] [pid 39592:tid 39612] [client 20.194.2.144:53839] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aXuJ-plnGYODSsJUyHkqIAAAAM8"]
[Fri Jan 30 00:25:31.904378 2026] [:error] [pid 39502:tid 39545] [client 20.194.2.144:56003] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aXuJ-wCUcXwXieepEYjZIwAAAIk"]
[Fri Jan 30 00:25:33.017117 2026] [:error] [pid 39813:tid 39828] [client 20.194.2.144:56013] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aXuJ_d_AaZSBkqpNK02-rAAAAU0"]
[Fri Jan 30 00:25:34.726014 2026] [:error] [pid 39592:tid 39618] [client 20.194.2.144:52458] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aXuJ_plnGYODSsJUyHkqIgAAANU"]
[Fri Jan 30 00:25:35.897133 2026] [:error] [pid 39592:tid 39605] [client 20.194.2.144:54977] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/413.php"] [unique_id "aXuJ_5lnGYODSsJUyHkqKAAAAMg"]
[Fri Jan 30 00:25:36.572934 2026] [:error] [pid 39503:tid 39574] [client 20.194.2.144:55237] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/413.php"] [unique_id "aXuKADzoHqvQcupFdnbe0gAAAQs"]
[Fri Jan 30 00:25:40.366627 2026] [:error] [pid 39783:tid 39789] [client 20.194.2.144:52494] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/413.php"] [unique_id "aXuKBK51RNfzhKG5ppOoKQAAAEQ"]
[Fri Jan 30 00:25:41.945147 2026] [:error] [pid 39503:tid 39583] [client 20.194.2.144:8064] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/413.php"] [unique_id "aXuKBTzoHqvQcupFdnbe1gAAARQ"]
[Fri Jan 30 00:25:43.282802 2026] [:error] [pid 39503:tid 39569] [client 20.194.2.144:56033] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1a.php"] [unique_id "aXuKBzzoHqvQcupFdnbe2QAAAQY"]
[Fri Jan 30 00:25:45.071848 2026] [:error] [pid 39783:tid 39789] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Fri Jan 30 00:25:45.213442 2026] [:error] [pid 39783:tid 39791] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/z9v.php
[Fri Jan 30 00:25:45.352013 2026] [:error] [pid 39783:tid 39801] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/thebe.php
[Fri Jan 30 00:25:45.654401 2026] [:error] [pid 39783:tid 39809] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Fri Jan 30 00:25:45.834668 2026] [:error] [pid 39783:tid 39797] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Fri Jan 30 00:25:46.141105 2026] [:error] [pid 39783:tid 39808] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/sad5.php
[Fri Jan 30 00:25:46.278378 2026] [:error] [pid 39783:tid 39800] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/xvde.php
[Fri Jan 30 00:25:46.613439 2026] [:error] [pid 39783:tid 39787] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/f355.php
[Fri Jan 30 00:25:46.945724 2026] [:error] [pid 39783:tid 39793] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Jan 30 00:25:47.084345 2026] [:error] [pid 39783:tid 39786] [client 20.194.2.144:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mt.php
[Fri Jan 30 00:25:47.349040 2026] [:error] [pid 39783:tid 39807] [client 20.194.2.144:42330] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aXuKC651RNfzhKG5ppOoPAAAAFY"]
[Fri Jan 30 00:25:49.451395 2026] [:error] [pid 39502:tid 39554] [client 20.194.2.144:54435] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aXuKDQCUcXwXieepEYjZNwAAAJI"]
[Fri Jan 30 00:25:51.350730 2026] [:error] [pid 39813:tid 39835] [client 20.194.2.144:56042] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aXuKD9_AaZSBkqpNK02-zQAAAVQ"]
[Fri Jan 30 00:25:55.526372 2026] [:error] [pid 39503:tid 39567] [client 20.194.2.144:55036] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aXuKEzzoHqvQcupFdnbe7gAAAQQ"]
[Fri Jan 30 00:25:56.886703 2026] [:error] [pid 39813:tid 39824] [client 20.194.2.144:8066] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3r.php"] [unique_id "aXuKFN_AaZSBkqpNK02-2AAAAUk"]
[Fri Jan 30 00:26:00.536837 2026] [:error] [pid 39502:tid 39548] [client 20.194.2.144:49193] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3r.php"] [unique_id "aXuKGACUcXwXieepEYjZPQAAAIw"]
[Fri Jan 30 00:26:02.311618 2026] [:error] [pid 39592:tid 39617] [client 20.194.2.144:55844] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3r.php"] [unique_id "aXuKGplnGYODSsJUyHkqTwAAANQ"]
[Fri Jan 30 00:26:02.896618 2026] [:error] [pid 39783:tid 39799] [client 20.194.2.144:55864] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3r.php"] [unique_id "aXuKGq51RNfzhKG5ppOoQgAAAE4"]
[Fri Jan 30 00:26:04.240501 2026] [:error] [pid 39592:tid 39604] [client 20.194.2.144:52500] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aXuKHJlnGYODSsJUyHkqUwAAAMc"]
[Fri Jan 30 00:26:09.123878 2026] [:error] [pid 39503:tid 39585] [client 20.194.2.144:52503] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aXuKITzoHqvQcupFdnbfAgAAARY"]
[Fri Jan 30 00:26:11.531149 2026] [:error] [pid 39503:tid 39573] [client 20.194.2.144:8118] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aXuKIzzoHqvQcupFdnbfBgAAAQo"]
[Fri Jan 30 00:26:13.203005 2026] [:error] [pid 39503:tid 39582] [client 20.194.2.144:56917] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aXuKJTzoHqvQcupFdnbfCQAAARM"]
[Fri Jan 30 00:26:17.647827 2026] [:error] [pid 39783:tid 39798] [client 20.194.2.144:49185] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXuKKa51RNfzhKG5ppOoXQAAAE0"]
[Fri Jan 30 00:26:19.390899 2026] [:error] [pid 39501:tid 39526] [client 20.194.2.144:50598] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXuKKy_BLgXFo3daaZim3QAAABE"]
[Fri Jan 30 00:26:23.227339 2026] [:error] [pid 39592:tid 39602] [client 20.194.2.144:7941] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXuKL5lnGYODSsJUyHkqZwAAAMU"]
[Fri Jan 30 00:26:25.994575 2026] [:error] [pid 39813:tid 39832] [client 20.194.2.144:51008] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXuKMd_AaZSBkqpNK02--wAAAVE"]
[Fri Jan 30 00:26:26.652993 2026] [:error] [pid 39813:tid 39820] [client 20.194.2.144:56054] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aXuKMt_AaZSBkqpNK02-_AAAAUU"]
[Fri Jan 30 00:26:27.710426 2026] [:error] [pid 39502:tid 39560] [client 20.194.2.144:42340] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aXuKMwCUcXwXieepEYjZYQAAAJg"]
[Fri Jan 30 00:26:29.568943 2026] [:error] [pid 39502:tid 39556] [client 20.194.2.144:55314] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aXuKNQCUcXwXieepEYjZZQAAAJQ"]
[Fri Jan 30 00:26:32.362695 2026] [:error] [pid 39502:tid 39546] [client 20.194.2.144:46874] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aXuKOACUcXwXieepEYjZaQAAAIo"]
[Fri Jan 30 00:26:33.590991 2026] [:error] [pid 39813:tid 39815] [client 20.194.2.144:49168] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aXuKOd_AaZSBkqpNK02_EQAAAUA"]
[Fri Jan 30 00:26:35.374465 2026] [:error] [pid 39783:tid 39809] [client 20.194.2.144:56030] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aXuKO651RNfzhKG5ppOofgAAAFg"]
[Fri Jan 30 00:26:36.698294 2026] [:error] [pid 39813:tid 39824] [client 20.194.2.144:45390] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aXuKPN_AaZSBkqpNK02_GAAAAUk"]
[Fri Jan 30 00:26:37.311161 2026] [:error] [pid 39592:tid 39617] [client 20.194.2.144:55812] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aXuKPZlnGYODSsJUyHkqdwAAANQ"]
[Fri Jan 30 00:26:37.891373 2026] [:error] [pid 39783:tid 39797] [client 20.194.2.144:51071] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXuKPa51RNfzhKG5ppOohQAAAEw"]
[Fri Jan 30 00:26:38.491863 2026] [:error] [pid 39502:tid 39542] [client 20.194.2.144:49191] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXuKPgCUcXwXieepEYjZawAAAIY"]
[Fri Jan 30 00:26:39.545154 2026] [:error] [pid 39592:tid 39604] [client 20.194.2.144:49157] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXuKP5lnGYODSsJUyHkqewAAAMc"]
[Fri Jan 30 00:26:40.389007 2026] [:error] [pid 39813:tid 39823] [client 20.194.2.144:7967] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aXuKQN_AaZSBkqpNK02_HAAAAUg"]
[Fri Jan 30 00:26:42.764884 2026] [:error] [pid 39783:tid 39804] [client 20.194.2.144:56004] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXuKQq51RNfzhKG5ppOokgAAAFM"]
[Fri Jan 30 00:26:43.476303 2026] [:error] [pid 39502:tid 39541] [client 20.194.2.144:55301] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXuKQwCUcXwXieepEYjZbgAAAIU"]
[Fri Jan 30 00:26:44.923038 2026] [:error] [pid 39501:tid 39511] [client 20.194.2.144:51056] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXuKRC_BLgXFo3daaZinBQAAAAI"]
[Fri Jan 30 00:26:45.436010 2026] [:error] [pid 39503:tid 39573] [client 20.194.2.144:55815] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aXuKRTzoHqvQcupFdnbfMAAAAQo"]
[Fri Jan 30 00:26:46.599999 2026] [:error] [pid 39501:tid 39520] [client 20.194.2.144:51039] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aXuKRi_BLgXFo3daaZinCQAAAAs"]
[Fri Jan 30 00:26:47.299974 2026] [:error] [pid 39501:tid 39515] [client 20.194.2.144:51052] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Fri Jan 30 00:26:47.633999 2026] [:error] [pid 39501:tid 39533] [client 20.194.2.144:51052] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Jan 30 00:26:47.927491 2026] [:error] [pid 39501:tid 39527] [client 20.194.2.144:51052] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Jan 30 00:26:48.205505 2026] [:error] [pid 39501:tid 39521] [client 20.194.2.144:51052] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Jan 30 00:26:48.682892 2026] [:error] [pid 39501:tid 39519] [client 20.194.2.144:51052] File does not exist: /usr/local/apache/htdocs/suspended-page/ss1.php
[Fri Jan 30 00:26:48.984560 2026] [:error] [pid 39501:tid 39524] [client 20.194.2.144:51052] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Jan 30 00:26:49.123113 2026] [:error] [pid 39501:tid 39532] [client 20.194.2.144:51052] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Jan 30 00:26:49.267281 2026] [:error] [pid 39501:tid 39520] [client 20.194.2.144:51052] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXuKSS_BLgXFo3daaZinGAAAAAs"]
[Fri Jan 30 00:26:50.953928 2026] [:error] [pid 39813:tid 39830] [client 20.194.2.144:49182] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXuKSt_AaZSBkqpNK02_MAAAAU8"]
[Fri Jan 30 00:26:51.774561 2026] [:error] [pid 39502:tid 39550] [client 20.194.2.144:56941] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXuKSwCUcXwXieepEYjZegAAAI4"]
[Fri Jan 30 00:26:52.704937 2026] [:error] [pid 39813:tid 39827] [client 20.194.2.144:42364] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aXuKTN_AaZSBkqpNK02_NQAAAUw"]
[Fri Jan 30 00:26:53.887874 2026] [:error] [pid 39501:tid 39529] [client 20.194.2.144:42338] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXuKTS_BLgXFo3daaZinGwAAABQ"]
[Fri Jan 30 00:26:55.001808 2026] [:error] [pid 39813:tid 39815] [client 20.194.2.144:56942] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXuKT9_AaZSBkqpNK02_PgAAAUA"]
[Fri Jan 30 00:26:56.468469 2026] [:error] [pid 39501:tid 39524] [client 20.194.2.144:49209] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXuKUC_BLgXFo3daaZinIQAAAA8"]
[Fri Jan 30 00:26:57.564775 2026] [:error] [pid 39592:tid 39602] [client 20.194.2.144:58568] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aXuKUZlnGYODSsJUyHkqjQAAAMU"]
[Fri Jan 30 00:26:58.368814 2026] [:error] [pid 39501:tid 39511] [client 20.194.2.144:56956] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aXuKUi_BLgXFo3daaZinIgAAAAI"]
[Fri Jan 30 00:26:59.402105 2026] [:error] [pid 39501:tid 39518] [client 20.194.2.144:51049] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aXuKUy_BLgXFo3daaZinJAAAAAk"]
[Fri Jan 30 00:27:02.131619 2026] [:error] [pid 39502:tid 39548] [client 20.194.2.144:58582] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aXuKVgCUcXwXieepEYjZfwAAAIw"]
[Fri Jan 30 00:27:03.363337 2026] [:error] [pid 39592:tid 39610] [client 20.194.2.144:42977] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aXuKV5lnGYODSsJUyHkqlAAAAM0"]
[Fri Jan 30 00:27:04.862953 2026] [:error] [pid 39592:tid 39609] [client 20.194.2.144:42969] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXuKWJlnGYODSsJUyHkqlQAAAMw"]
[Fri Jan 30 00:27:06.681917 2026] [:error] [pid 39502:tid 39551] [client 20.194.2.144:50100] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXuKWgCUcXwXieepEYjZhwAAAI8"]
[Fri Jan 30 00:27:08.471177 2026] [:error] [pid 39501:tid 39532] [client 20.194.2.144:8021] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXuKXC_BLgXFo3daaZinKgAAABc"]
[Fri Jan 30 00:27:11.453724 2026] [:error] [pid 39813:tid 39817] [client 20.194.2.144:7222] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXuKX9_AaZSBkqpNK02_YQAAAUI"]
[Fri Jan 30 00:27:12.018429 2026] [:error] [pid 39501:tid 39517] [client 20.194.2.144:42947] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aXuKYC_BLgXFo3daaZinMAAAAAg"]
[Fri Jan 30 00:27:13.668189 2026] [:error] [pid 39813:tid 39835] [client 20.194.2.144:50106] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aXuKYd_AaZSBkqpNK02_ZQAAAVQ"]
[Fri Jan 30 00:27:18.009147 2026] [:error] [pid 39783:tid 39809] [client 20.194.2.144:44112] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aXuKZq51RNfzhKG5ppOouwAAAFg"]
[Fri Jan 30 00:27:19.092104 2026] [:error] [pid 39592:tid 39600] [client 20.194.2.144:8004] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aXuKZ5lnGYODSsJUyHkqtgAAAMM"]
[Fri Jan 30 00:27:20.717444 2026] [:error] [pid 39592:tid 39618] [client 20.194.2.144:55311] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aXuKaJlnGYODSsJUyHkqwAAAANU"]
[Fri Jan 30 00:27:22.238897 2026] [:error] [pid 39813:tid 39820] [client 20.194.2.144:56951] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aXuKat_AaZSBkqpNK02_dgAAAUU"]
[Fri Jan 30 00:27:23.762664 2026] [:error] [pid 39501:tid 39520] [client 20.194.2.144:58588] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aXuKay_BLgXFo3daaZinRwAAAAs"]
[Fri Jan 30 00:27:24.345965 2026] [:error] [pid 39783:tid 39802] [client 20.194.2.144:44655] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aXuKbK51RNfzhKG5ppOoxAAAAFE"]
[Fri Jan 30 00:27:26.216514 2026] [:error] [pid 39502:tid 39552] [client 20.194.2.144:8014] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXuKbgCUcXwXieepEYjZlgAAAJA"]
[Fri Jan 30 00:27:28.687514 2026] [:error] [pid 39813:tid 39818] [client 20.194.2.144:58571] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXuKcN_AaZSBkqpNK02_iQAAAUM"]
[Fri Jan 30 00:27:31.402322 2026] [:error] [pid 39783:tid 39795] [client 20.194.2.144:55297] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXuKc651RNfzhKG5ppOo0wAAAEo"]
[Fri Jan 30 00:27:31.992024 2026] [:error] [pid 39783:tid 39800] [client 20.194.2.144:56908] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aXuKc651RNfzhKG5ppOo1gAAAE8"]
[Fri Jan 30 00:27:36.048981 2026] [:error] [pid 39502:tid 39551] [client 20.194.2.144:49787] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXuKeACUcXwXieepEYjZpAAAAI8"]
[Fri Jan 30 00:27:37.632217 2026] [:error] [pid 39813:tid 39832] [client 20.194.2.144:8022] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXuKed_AaZSBkqpNK02_kAAAAVE"]
[Fri Jan 30 00:27:39.013568 2026] [:error] [pid 39813:tid 39819] [client 20.194.2.144:44147] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXuKe9_AaZSBkqpNK02_kwAAAUQ"]
[Fri Jan 30 00:27:41.061027 2026] [:error] [pid 39501:tid 39526] [client 20.194.2.144:53904] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aXuKfS_BLgXFo3daaZincAAAABE"]
[Fri Jan 30 00:27:42.285022 2026] [:error] [pid 39813:tid 39819] [client 20.194.2.144:49229] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/"] [unique_id "aXuKft_AaZSBkqpNK02_nwAAAUQ"]
[Fri Jan 30 00:27:44.508320 2026] [:error] [pid 39813:tid 39815] [client 20.194.2.144:49788] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/"] [unique_id "aXuKgN_AaZSBkqpNK02_qQAAAUA"]
[Fri Jan 30 00:27:45.725018 2026] [:error] [pid 39501:tid 39520] [client 20.194.2.144:49757] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/"] [unique_id "aXuKgS_BLgXFo3daaZindwAAAAs"]
[Fri Jan 30 00:27:46.376435 2026] [:error] [pid 39501:tid 39529] [client 20.194.2.144:49743] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/"] [unique_id "aXuKgi_BLgXFo3daaZineAAAABQ"]
[Fri Jan 30 00:27:49.681959 2026] [:error] [pid 39503:tid 39571] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Fri Jan 30 00:27:51.319109 2026] [:error] [pid 39503:tid 39571] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Jan 30 00:27:51.456689 2026] [:error] [pid 39503:tid 39584] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/xtride.php
[Fri Jan 30 00:27:51.613926 2026] [:error] [pid 39503:tid 39581] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Jan 30 00:27:51.751853 2026] [:error] [pid 39503:tid 39566] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/flower2.php
[Fri Jan 30 00:27:51.902053 2026] [:error] [pid 39503:tid 39570] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Jan 30 00:27:52.314805 2026] [:error] [pid 39503:tid 39576] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Jan 30 00:27:52.469462 2026] [:error] [pid 39503:tid 39573] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Jan 30 00:27:52.611138 2026] [:error] [pid 39503:tid 39582] [client 20.194.2.144:55339] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Fri Jan 30 00:27:53.059402 2026] [:error] [pid 39503:tid 39568] [client 20.194.2.144:55339] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aXuKiTzoHqvQcupFdnbfiwAAAQU"]
[Fri Jan 30 00:27:55.944535 2026] [:error] [pid 39783:tid 39803] [client 20.194.2.144:55296] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aXuKi651RNfzhKG5ppOo8gAAAFI"]
[Fri Jan 30 00:27:57.374452 2026] [:error] [pid 39783:tid 39787] [client 20.194.2.144:49222] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aXuKja51RNfzhKG5ppOo-AAAAEI"]
[Fri Jan 30 00:27:59.215740 2026] [:error] [pid 39813:tid 39828] [client 20.194.2.144:49776] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aXuKj9_AaZSBkqpNK02_tgAAAU0"]
[Fri Jan 30 00:28:01.008717 2026] [:error] [pid 39592:tid 39606] [client 20.194.2.144:52849] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aXuKkZlnGYODSsJUyHkq9AAAAMk"]
[Fri Jan 30 00:28:02.666602 2026] [:error] [pid 39503:tid 39587] [client 20.194.2.144:44124] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aXuKkjzoHqvQcupFdnbfmQAAARg"]
[Fri Jan 30 00:28:05.210966 2026] [:error] [pid 39503:tid 39570] [client 20.194.2.144:53283] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aXuKlTzoHqvQcupFdnbfoQAAAQc"]
[Fri Jan 30 00:28:06.488752 2026] [:error] [pid 39813:tid 39824] [client 20.194.2.144:61074] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aXuKlt_AaZSBkqpNK02_1AAAAUk"]
[Fri Jan 30 00:28:07.457288 2026] [:error] [pid 39592:tid 39619] [client 20.194.2.144:52833] [client 20.194.2.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aXuKl5lnGYODSsJUyHkq9wAAANY"]
[Fri Jan 30 00:28:08.106683 2026] [:error] [pid 39813:tid 39827] [client 20.194.2.144:49221] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aXuKmN_AaZSBkqpNK02_5gAAAUw"]
[Fri Jan 30 00:28:09.398702 2026] [:error] [pid 39783:tid 39792] [client 20.194.2.144:53266] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aXuKma51RNfzhKG5ppOpHQAAAEc"]
[Fri Jan 30 00:28:10.767122 2026] [:error] [pid 39502:tid 39536] [client 20.194.2.144:56516] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aXuKmgCUcXwXieepEYjZsgAAAIA"]
[Fri Jan 30 00:28:12.868703 2026] [:error] [pid 39592:tid 39599] [client 20.194.2.144:44149] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aXuKnJlnGYODSsJUyHkq_wAAAMI"]
[Fri Jan 30 00:28:15.042740 2026] [:error] [pid 39592:tid 39598] [client 20.194.2.144:52243] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aXuKn5lnGYODSsJUyHkrBAAAAME"]
[Fri Jan 30 00:28:18.773058 2026] [:error] [pid 39592:tid 39615] [client 20.194.2.144:42381] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aXuKoplnGYODSsJUyHkrCQAAANI"]
[Fri Jan 30 00:28:22.533591 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:8182] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aXuKpq51RNfzhKG5ppOpPAAAAEk"]
[Fri Jan 30 00:28:23.816174 2026] [:error] [pid 39783:tid 39803] [client 20.194.2.144:57000] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXuKp651RNfzhKG5ppOpQAAAAFI"]
[Fri Jan 30 00:28:26.194892 2026] [:error] [pid 39503:tid 39579] [client 20.194.2.144:8175] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXuKqjzoHqvQcupFdnbfvQAAARA"]
[Fri Jan 30 00:28:28.612639 2026] [:error] [pid 39783:tid 39797] [client 20.194.2.144:52245] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXuKrK51RNfzhKG5ppOpSgAAAEw"]
[Fri Jan 30 00:28:30.925583 2026] [:error] [pid 39592:tid 39619] [client 20.194.2.144:8167] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aXuKrplnGYODSsJUyHkrGwAAANY"]
[Fri Jan 30 00:28:32.621395 2026] [:error] [pid 39501:tid 39512] [client 20.194.2.144:52226] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXuKsC_BLgXFo3daaZinoQAAAAM"]
[Fri Jan 30 00:28:33.440589 2026] [:error] [pid 39592:tid 39600] [client 20.194.2.144:53008] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXuKsZlnGYODSsJUyHkrIQAAAMM"]
[Fri Jan 30 00:28:36.012639 2026] [:error] [pid 39813:tid 39833] [client 20.194.2.144:41465] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXuKtN_AaZSBkqpNK03ANQAAAVI"]
[Fri Jan 30 00:28:37.012582 2026] [:error] [pid 39503:tid 39567] [client 20.194.2.144:8189] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aXuKtTzoHqvQcupFdnbfwwAAAQQ"]
[Fri Jan 30 00:28:37.744133 2026] [:error] [pid 39501:tid 39528] [client 20.194.2.144:51993] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXuKtS_BLgXFo3daaZinqAAAABM"]
[Fri Jan 30 00:28:44.856610 2026] [:error] [pid 39501:tid 39527] [client 20.194.2.144:41427] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXuKvC_BLgXFo3daaZinsAAAABI"]
[Fri Jan 30 00:28:47.179097 2026] [:error] [pid 39501:tid 39521] [client 20.194.2.144:56986] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXuKvy_BLgXFo3daaZinuQAAAAw"]
[Fri Jan 30 00:28:48.007836 2026] [:error] [pid 39783:tid 39797] [client 20.194.2.144:8087] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aXuKwK51RNfzhKG5ppOpXwAAAEw"]
[Fri Jan 30 00:28:55.007180 2026] [:error] [pid 39503:tid 39583] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Jan 30 00:28:55.146801 2026] [:error] [pid 39503:tid 39566] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Fri Jan 30 00:28:55.295772 2026] [:error] [pid 39503:tid 39576] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Jan 30 00:28:55.434632 2026] [:error] [pid 39503:tid 39582] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Fri Jan 30 00:28:55.578463 2026] [:error] [pid 39503:tid 39571] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Jan 30 00:28:55.957012 2026] [:error] [pid 39503:tid 39573] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/gec.php
[Fri Jan 30 00:28:56.101045 2026] [:error] [pid 39503:tid 39570] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Jan 30 00:28:56.404009 2026] [:error] [pid 39503:tid 39568] [client 20.194.2.144:47919] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Fri Jan 30 00:28:56.683415 2026] [:error] [pid 39503:tid 39567] [client 20.194.2.144:47919] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXuKyDzoHqvQcupFdnbf6gAAAQQ"]
[Fri Jan 30 00:28:58.870493 2026] [:error] [pid 39813:tid 39825] [client 20.194.2.144:53020] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXuKyt_AaZSBkqpNK03AXAAAAUo"]
[Fri Jan 30 00:29:02.833399 2026] [:error] [pid 39783:tid 39797] [client 20.194.2.144:52556] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXuKzq51RNfzhKG5ppOpewAAAEw"]
[Fri Jan 30 00:29:03.675863 2026] [:error] [pid 39813:tid 39838] [client 20.194.2.144:50977] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aXuKz9_AaZSBkqpNK03AYgAAAVc"]
[Fri Jan 30 00:29:06.610771 2026] [:error] [pid 39783:tid 39802] [client 20.194.2.144:7734] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aXuK0q51RNfzhKG5ppOpfwAAAFE"]
[Fri Jan 30 00:29:07.764529 2026] [:error] [pid 39783:tid 39797] [client 20.194.2.144:41464] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aXuK0651RNfzhKG5ppOphQAAAEw"]
[Fri Jan 30 00:29:09.049787 2026] [:error] [pid 39502:tid 39556] [client 20.194.2.144:54183] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aXuK1QCUcXwXieepEYjaUQAAAJQ"]
[Fri Jan 30 00:29:10.740346 2026] [:error] [pid 39783:tid 39807] [client 20.194.2.144:45031] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aXuK1q51RNfzhKG5ppOphgAAAFY"]
[Fri Jan 30 00:29:11.958101 2026] [:error] [pid 39592:tid 39616] [client 20.194.2.144:41430] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXuK15lnGYODSsJUyHkrXwAAANM"]
[Fri Jan 30 00:29:13.167029 2026] [:error] [pid 39503:tid 39581] [client 20.194.2.144:56979] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXuK2TzoHqvQcupFdnbgBwAAARI"]
[Fri Jan 30 00:29:19.382641 2026] [:error] [pid 39783:tid 39804] [client 20.194.2.144:43418] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXuK3651RNfzhKG5ppOpmAAAAFM"]
[Fri Jan 30 00:29:20.984429 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:54159] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aXuK4K51RNfzhKG5ppOpmwAAAEk"]
[Fri Jan 30 00:29:27.519456 2026] [:error] [pid 39501:tid 39524] [client 20.194.2.144:43432] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aXuK5y_BLgXFo3daaZin7wAAAA8"]
[Fri Jan 30 00:29:29.610450 2026] [:error] [pid 39501:tid 39511] [client 20.194.2.144:49690] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aXuK6S_BLgXFo3daaZin8gAAAAI"]
[Fri Jan 30 00:29:30.116928 2026] [:error] [pid 39592:tid 39607] [client 20.194.2.144:41459] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aXuK6plnGYODSsJUyHkrdwAAAMo"]
[Fri Jan 30 00:29:31.832124 2026] [:error] [pid 39592:tid 39618] [client 20.194.2.144:45006] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aXuK65lnGYODSsJUyHkrgQAAANU"]
[Fri Jan 30 00:29:33.070824 2026] [:error] [pid 39592:tid 39616] [client 20.194.2.144:43404] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aXuK7ZlnGYODSsJUyHkrhwAAANM"]
[Fri Jan 30 00:29:34.771468 2026] [:error] [pid 39503:tid 39583] [client 20.194.2.144:7735] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aXuK7jzoHqvQcupFdnbgGQAAARQ"]
[Fri Jan 30 00:29:36.361057 2026] [:error] [pid 39592:tid 39618] [client 20.194.2.144:45025] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aXuK8JlnGYODSsJUyHkriQAAANU"]
[Fri Jan 30 00:29:39.927812 2026] [:error] [pid 39502:tid 39545] [client 20.194.2.144:41424] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "aXuK8wCUcXwXieepEYjacAAAAIk"]
[Fri Jan 30 00:29:42.104106 2026] [:error] [pid 39502:tid 39554] [client 20.194.2.144:55351] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aXuK9gCUcXwXieepEYjadwAAAJI"]
[Fri Jan 30 00:29:43.989763 2026] [:error] [pid 39783:tid 39795] [client 20.194.2.144:53052] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aXuK9651RNfzhKG5ppOpwQAAAEo"]
[Fri Jan 30 00:29:45.320701 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:43351] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aXuK-a51RNfzhKG5ppOpxQAAAEk"]
[Fri Jan 30 00:29:47.484222 2026] [:error] [pid 39813:tid 39819] [client 20.194.2.144:7725] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "aXuK-9_AaZSBkqpNK03AuAAAAUQ"]
[Fri Jan 30 00:29:48.614483 2026] [:error] [pid 39501:tid 39532] [client 20.194.2.144:50961] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXuK_C_BLgXFo3daaZioCAAAABc"]
[Fri Jan 30 00:29:49.580909 2026] [:error] [pid 39592:tid 39607] [client 20.194.2.144:50994] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXuK_ZlnGYODSsJUyHkrmQAAAMo"]
[Fri Jan 30 00:29:50.583147 2026] [:error] [pid 39813:tid 39822] [client 20.194.2.144:54797] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXuK_t_AaZSBkqpNK03AuwAAAUc"]
[Fri Jan 30 00:29:54.708565 2026] [:error] [pid 39502:tid 39536] [client 20.194.2.144:54838] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aXuLAgCUcXwXieepEYjagAAAAIA"]
[Fri Jan 30 00:29:55.548508 2026] [:error] [pid 39783:tid 39798] [client 20.194.2.144:54180] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "aXuLA651RNfzhKG5ppOp1AAAAE0"]
[Fri Jan 30 00:29:57.071863 2026] [:error] [pid 39502:tid 39540] [client 20.194.2.144:50944] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Fri Jan 30 00:29:57.248590 2026] [:error] [pid 39502:tid 39560] [client 20.194.2.144:50944] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs18.php
[Fri Jan 30 00:29:57.386439 2026] [:error] [pid 39502:tid 39550] [client 20.194.2.144:50944] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Jan 30 00:29:57.541604 2026] [:error] [pid 39502:tid 39554] [client 20.194.2.144:50944] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Jan 30 00:29:57.783587 2026] [:error] [pid 39502:tid 39541] [client 20.194.2.144:50944] File does not exist: /usr/local/apache/htdocs/suspended-page/bless14.php
[Fri Jan 30 00:29:57.930359 2026] [:error] [pid 39502:tid 39539] [client 20.194.2.144:50944] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Jan 30 00:29:59.166262 2026] [:error] [pid 39502:tid 39536] [client 20.194.2.144:50944] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXuLBwCUcXwXieepEYjalQAAAIA"]
[Fri Jan 30 00:30:00.905100 2026] [:error] [pid 39813:tid 39823] [client 20.194.2.144:53030] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXuLCN_AaZSBkqpNK03AzgAAAUg"]
[Fri Jan 30 00:30:03.190822 2026] [:error] [pid 39783:tid 39802] [client 20.194.2.144:45050] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXuLC651RNfzhKG5ppOp1gAAAFE"]
[Fri Jan 30 00:30:06.547432 2026] [:error] [pid 39503:tid 39580] [client 20.194.2.144:7691] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aXuLDjzoHqvQcupFdnbgQQAAARE"]
[Fri Jan 30 00:30:07.372218 2026] [:error] [pid 39813:tid 39817] [client 20.194.2.144:52921] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aXuLD9_AaZSBkqpNK03A4AAAAUI"]
[Fri Jan 30 00:30:08.244486 2026] [:error] [pid 39502:tid 39549] [client 20.194.2.144:51983] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aXuLEACUcXwXieepEYjanQAAAI0"]
[Fri Jan 30 00:30:11.653046 2026] [:error] [pid 39813:tid 39824] [client 20.194.2.144:53031] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aXuLE9_AaZSBkqpNK03A6gAAAUk"]
[Fri Jan 30 00:30:14.450546 2026] [:error] [pid 39501:tid 39523] [client 20.194.2.144:56544] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aXuLFi_BLgXFo3daaZioJgAAAA4"]
[Fri Jan 30 00:30:16.178010 2026] [:error] [pid 39503:tid 39581] [client 20.194.2.144:54406] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXuLGDzoHqvQcupFdnbgRAAAARI"]
[Fri Jan 30 00:30:17.204829 2026] [:error] [pid 39501:tid 39529] [client 20.194.2.144:49227] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXuLGS_BLgXFo3daaZioKgAAABQ"]
[Fri Jan 30 00:30:18.104044 2026] [:error] [pid 39813:tid 39820] [client 20.194.2.144:49267] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXuLGt_AaZSBkqpNK03A_QAAAUU"]
[Fri Jan 30 00:30:19.644171 2026] [:error] [pid 39501:tid 39532] [client 20.194.2.144:61106] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aXuLGy_BLgXFo3daaZioLQAAABc"]
[Fri Jan 30 00:30:20.672321 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:52816] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php//about.php"] [unique_id "aXuLHK51RNfzhKG5ppOp5gAAAEk"]
[Fri Jan 30 00:30:21.405479 2026] [:error] [pid 39502:tid 39548] [client 20.194.2.144:49735] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php//about.php"] [unique_id "aXuLHQCUcXwXieepEYjaqQAAAIw"]
[Fri Jan 30 00:30:22.930666 2026] [:error] [pid 39592:tid 39619] [client 20.194.2.144:61103] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php//about.php"] [unique_id "aXuLHplnGYODSsJUyHkrugAAANY"]
[Fri Jan 30 00:30:24.405074 2026] [:error] [pid 39813:tid 39819] [client 20.194.2.144:48752] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php//about.php"] [unique_id "aXuLIN_AaZSBkqpNK03BCgAAAUQ"]
[Fri Jan 30 00:30:32.786725 2026] [:error] [pid 39813:tid 39826] [client 20.194.2.144:61114] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aXuLKN_AaZSBkqpNK03BHQAAAUs"]
[Fri Jan 30 00:30:34.771725 2026] [:error] [pid 39783:tid 39795] [client 20.194.2.144:45481] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aXuLKq51RNfzhKG5ppOp_QAAAEo"]
[Fri Jan 30 00:30:37.426682 2026] [:error] [pid 39503:tid 39581] [client 20.194.2.144:43813] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aXuLLTzoHqvQcupFdnbgWAAAARI"]
[Fri Jan 30 00:30:39.325066 2026] [:error] [pid 39813:tid 39835] [client 20.194.2.144:7233] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aXuLL9_AaZSBkqpNK03BJAAAAVQ"]
[Fri Jan 30 00:30:40.854149 2026] [:error] [pid 39502:tid 39552] [client 20.194.2.144:43827] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aXuLMACUcXwXieepEYjauwAAAJA"]
[Fri Jan 30 00:30:42.241721 2026] [:error] [pid 39783:tid 39791] [client 20.194.2.144:47239] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aXuLMq51RNfzhKG5ppOqBAAAAEY"]
[Fri Jan 30 00:30:44.256926 2026] [:error] [pid 39503:tid 39566] [client 20.194.2.144:52304] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aXuLNDzoHqvQcupFdnbgYQAAAQM"]
[Fri Jan 30 00:30:47.225793 2026] [:error] [pid 39503:tid 39563] [client 20.194.2.144:58056] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aXuLNzzoHqvQcupFdnbgZQAAAQA"]
[Fri Jan 30 00:30:48.077950 2026] [:error] [pid 39783:tid 39797] [client 20.194.2.144:52317] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aXuLOK51RNfzhKG5ppOqDQAAAEw"]
[Fri Jan 30 00:30:50.635613 2026] [:error] [pid 39592:tid 39611] [client 20.194.2.144:46844] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aXuLOplnGYODSsJUyHkr7QAAAM4"]
[Fri Jan 30 00:30:51.531709 2026] [:error] [pid 39783:tid 39791] [client 20.194.2.144:58050] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aXuLO651RNfzhKG5ppOqEgAAAEY"]
[Fri Jan 30 00:30:58.789412 2026] [:error] [pid 39503:tid 39575] [client 20.194.2.144:7614] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aXuLQjzoHqvQcupFdnbgcwAAAQw"]
[Fri Jan 30 00:31:00.687650 2026] [:error] [pid 39501:tid 39521] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Fri Jan 30 00:31:00.988872 2026] [:error] [pid 39501:tid 39522] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Jan 30 00:31:01.594241 2026] [:error] [pid 39501:tid 39518] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Jan 30 00:31:01.827963 2026] [:error] [pid 39501:tid 39518] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Jan 30 00:31:02.013119 2026] [:error] [pid 39501:tid 39533] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/wag.php
[Fri Jan 30 00:31:02.152982 2026] [:error] [pid 39501:tid 39527] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/xvent.php
[Fri Jan 30 00:31:02.393079 2026] [:error] [pid 39501:tid 39514] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aaa.php
[Fri Jan 30 00:31:02.563181 2026] [:error] [pid 39501:tid 39510] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Fri Jan 30 00:31:02.700922 2026] [:error] [pid 39501:tid 39528] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Fri Jan 30 00:31:02.863194 2026] [:error] [pid 39501:tid 39512] [client 20.194.2.144:55546] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Fri Jan 30 00:31:03.002848 2026] [:error] [pid 39501:tid 39513] [client 20.194.2.144:55546] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aXuLRy_BLgXFo3daaZiogAAAAAQ"]
[Fri Jan 30 00:31:04.080499 2026] [:error] [pid 39503:tid 39586] [client 20.194.2.144:51327] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aXuLSDzoHqvQcupFdnbgfQAAARc"]
[Fri Jan 30 00:31:06.209983 2026] [:error] [pid 39783:tid 39785] [client 20.194.2.144:52401] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aXuLSq51RNfzhKG5ppOqIgAAAEA"]
[Fri Jan 30 00:31:07.955980 2026] [:error] [pid 39783:tid 39791] [client 20.194.2.144:55549] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aXuLS651RNfzhKG5ppOqKgAAAEY"]
[Fri Jan 30 00:31:09.668313 2026] [:error] [pid 39502:tid 39556] [client 20.194.2.144:7576] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aXuLTQCUcXwXieepEYja1QAAAJQ"]
[Fri Jan 30 00:31:10.919769 2026] [:error] [pid 39783:tid 39809] [client 20.194.2.144:42365] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aXuLTq51RNfzhKG5ppOqLwAAAFg"]
[Fri Jan 30 00:31:12.834856 2026] [:error] [pid 39501:tid 39527] [client 20.194.2.144:53658] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aXuLUC_BLgXFo3daaZiolAAAABI"]
[Fri Jan 30 00:31:13.897904 2026] [:error] [pid 39502:tid 39560] [client 20.194.2.144:62365] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aXuLUQCUcXwXieepEYja3AAAAJg"]
[Fri Jan 30 00:31:14.910481 2026] [:error] [pid 39501:tid 39533] [client 20.194.2.144:52392] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aXuLUi_BLgXFo3daaZiolgAAABg"]
[Fri Jan 30 00:31:16.320851 2026] [:error] [pid 39813:tid 39821] [client 20.194.2.144:56599] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aXuLVN_AaZSBkqpNK03BZwAAAUY"]
[Fri Jan 30 00:31:18.225168 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:41946] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aXuLVq51RNfzhKG5ppOqRgAAAEk"]
[Fri Jan 30 00:31:22.311757 2026] [:error] [pid 39813:tid 39815] [client 20.194.2.144:62338] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aXuLWt_AaZSBkqpNK03BawAAAUA"]
[Fri Jan 30 00:31:24.750379 2026] [:error] [pid 39503:tid 39571] [client 20.194.2.144:51315] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bp.php"] [unique_id "aXuLXDzoHqvQcupFdnbgjgAAAQg"]
[Fri Jan 30 00:31:26.176992 2026] [:error] [pid 39592:tid 39617] [client 20.194.2.144:51304] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bp.php"] [unique_id "aXuLXplnGYODSsJUyHksDQAAANQ"]
[Fri Jan 30 00:31:28.868596 2026] [:error] [pid 39592:tid 39611] [client 20.194.2.144:7628] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bp.php"] [unique_id "aXuLYJlnGYODSsJUyHksEAAAAM4"]
[Fri Jan 30 00:31:29.401339 2026] [:error] [pid 39592:tid 39609] [client 20.194.2.144:51297] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bp.php"] [unique_id "aXuLYZlnGYODSsJUyHksEQAAAMw"]
[Fri Jan 30 00:31:31.040422 2026] [:error] [pid 39502:tid 39552] [client 20.194.2.144:7670] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXuLYwCUcXwXieepEYja-wAAAJA"]
[Fri Jan 30 00:31:32.469620 2026] [:error] [pid 39502:tid 39550] [client 20.194.2.144:7969] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXuLZACUcXwXieepEYja_wAAAI4"]
[Fri Jan 30 00:31:33.738828 2026] [:error] [pid 39502:tid 39542] [client 20.194.2.144:51277] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXuLZQCUcXwXieepEYjbAQAAAIY"]
[Fri Jan 30 00:31:35.586023 2026] [:error] [pid 39501:tid 39527] [client 20.194.2.144:62393] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aXuLZy_BLgXFo3daaZiopwAAABI"]
[Fri Jan 30 00:31:39.001890 2026] [:error] [pid 39813:tid 39819] [client 20.194.2.144:42996] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aXuLa9_AaZSBkqpNK03BiwAAAUQ"]
[Fri Jan 30 00:31:41.226134 2026] [:error] [pid 39813:tid 39815] [client 20.194.2.144:55042] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aXuLbd_AaZSBkqpNK03BlgAAAUA"]
[Fri Jan 30 00:31:42.578197 2026] [:error] [pid 39813:tid 39839] [client 20.194.2.144:55066] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aXuLbt_AaZSBkqpNK03BnQAAAVg"]
[Fri Jan 30 00:31:43.185464 2026] [:error] [pid 39592:tid 39620] [client 20.194.2.144:55562] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "aXuLb5lnGYODSsJUyHksLgAAANc"]
[Fri Jan 30 00:31:45.419009 2026] [:error] [pid 39503:tid 39582] [client 20.194.2.144:7218] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aXuLcTzoHqvQcupFdnbgoQAAARM"]
[Fri Jan 30 00:31:48.703291 2026] [:error] [pid 39501:tid 39514] [client 20.194.2.144:62343] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aXuLdC_BLgXFo3daaZiouQAAAAU"]
[Fri Jan 30 00:31:51.521604 2026] [:error] [pid 39783:tid 39798] [client 20.194.2.144:41972] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aXuLd651RNfzhKG5ppOqcwAAAE0"]
[Fri Jan 30 00:31:52.649237 2026] [:error] [pid 39592:tid 39620] [client 20.194.2.144:62387] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aXuLeJlnGYODSsJUyHksNQAAANc"]
[Fri Jan 30 00:31:54.628664 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:55608] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aXuLeq51RNfzhKG5ppOqegAAAEk"]
[Fri Jan 30 00:31:57.449659 2026] [:error] [pid 39501:tid 39528] [client 20.194.2.144:55050] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aXuLfS_BLgXFo3daaZioxQAAABM"]
[Fri Jan 30 00:32:00.660149 2026] [:error] [pid 39783:tid 39794] [client 20.194.2.144:42746] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aXuLgK51RNfzhKG5ppOqggAAAEk"]
[Fri Jan 30 00:32:01.206346 2026] [:error] [pid 39592:tid 39614] [client 20.194.2.144:42732] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aXuLgZlnGYODSsJUyHksQgAAANE"]
[Fri Jan 30 00:32:05.554168 2026] [:error] [pid 39592:tid 39605] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/admins.php
[Fri Jan 30 00:32:05.692997 2026] [:error] [pid 39592:tid 39620] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Jan 30 00:32:06.161326 2026] [:error] [pid 39592:tid 39606] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/temp.php
[Fri Jan 30 00:32:06.328745 2026] [:error] [pid 39592:tid 39619] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Jan 30 00:32:06.471286 2026] [:error] [pid 39592:tid 39621] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Fri Jan 30 00:32:06.656054 2026] [:error] [pid 39592:tid 39615] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Fri Jan 30 00:32:06.793884 2026] [:error] [pid 39592:tid 39614] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/class.1.php
[Fri Jan 30 00:32:06.934389 2026] [:error] [pid 39592:tid 39618] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Fri Jan 30 00:32:07.295680 2026] [:error] [pid 39592:tid 39617] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Fri Jan 30 00:32:07.694168 2026] [:error] [pid 39592:tid 39597] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Fri Jan 30 00:32:07.832943 2026] [:error] [pid 39592:tid 39611] [client 20.194.2.144:46278] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri Jan 30 00:32:07.983805 2026] [:error] [pid 39592:tid 39603] [client 20.194.2.144:46278] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aXuLh5lnGYODSsJUyHksWgAAAMY"]
[Fri Jan 30 00:32:13.235093 2026] [:error] [pid 39503:tid 39576] [client 20.194.2.144:55584] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aXuLjTzoHqvQcupFdnbgyQAAAQ0"]
[Fri Jan 30 00:32:14.750754 2026] [:error] [pid 39813:tid 39839] [client 20.194.2.144:8007] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aXuLjt_AaZSBkqpNK03B3gAAAVg"]
[Fri Jan 30 00:32:16.176819 2026] [:error] [pid 39502:tid 39538] [client 20.194.2.144:42694] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aXuLkACUcXwXieepEYjbTQAAAII"]
[Fri Jan 30 00:32:26.638860 2026] [:error] [pid 39501:tid 39529] [client 20.194.2.144:55091] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXuLmi_BLgXFo3daaZio2QAAABQ"]
[Fri Jan 30 00:32:29.937249 2026] [:error] [pid 39502:tid 39545] [client 20.194.2.144:55599] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXuLnQCUcXwXieepEYjbaQAAAIk"]
[Fri Jan 30 00:32:31.006971 2026] [:error] [pid 39813:tid 39828] [client 20.194.2.144:55591] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aXuLn9_AaZSBkqpNK03B_gAAAU0"]
[Fri Jan 30 00:32:33.664488 2026] [:error] [pid 39783:tid 39802] [client 20.194.2.144:42738] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXuLoa51RNfzhKG5ppOqxwAAAFE"]
[Fri Jan 30 00:32:35.651699 2026] [:error] [pid 39813:tid 39837] [client 20.194.2.144:46282] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXuLo9_AaZSBkqpNK03CCQAAAVY"]
[Fri Jan 30 00:32:36.146818 2026] [:error] [pid 39501:tid 39510] [client 20.194.2.144:56623] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXuLpC_BLgXFo3daaZio6AAAAAE"]
[Fri Jan 30 00:32:36.984313 2026] [:error] [pid 39813:tid 39835] [client 20.194.2.144:52950] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aXuLpN_AaZSBkqpNK03CDgAAAVQ"]
[Fri Jan 30 00:32:38.556041 2026] [:error] [pid 39501:tid 39523] [client 20.194.2.144:52966] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXuLpi_BLgXFo3daaZio7gAAAA4"]
[Fri Jan 30 00:32:41.759265 2026] [:error] [pid 39783:tid 39804] [client 20.194.2.144:55576] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXuLqa51RNfzhKG5ppOqzQAAAFM"]
[Fri Jan 30 00:32:42.705441 2026] [:error] [pid 39813:tid 39827] [client 20.194.2.144:52213] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXuLqt_AaZSBkqpNK03CJQAAAUw"]
[Fri Jan 30 00:32:44.592349 2026] [:error] [pid 39503:tid 39585] [client 20.194.2.144:52947] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aXuLrDzoHqvQcupFdnbg8gAAARY"]
[Fri Jan 30 00:32:47.183299 2026] [:error] [pid 39501:tid 39531] [client 20.194.2.144:51905] [client 20.194.2.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aXuLry_BLgXFo3daaZio-QAAABY"]
[Fri Jan 30 00:32:48.936013 2026] [:error] [pid 39503:tid 39583] [client 20.194.2.144:45788] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aXuLsDzoHqvQcupFdnbg-AAAARQ"]
[Fri Jan 30 00:32:49.674415 2026] [:error] [pid 39783:tid 39805] [client 20.194.2.144:55237] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aXuLsa51RNfzhKG5ppOq2wAAAFQ"]
[Fri Jan 30 00:32:51.944914 2026] [:error] [pid 39813:tid 39815] [client 20.194.2.144:42736] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aXuLs9_AaZSBkqpNK03CPAAAAUA"]
[Fri Jan 30 00:32:53.131968 2026] [:error] [pid 39783:tid 39790] [client 20.194.2.144:54727] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aXuLta51RNfzhKG5ppOq4QAAAEU"]
[Fri Jan 30 00:32:56.362814 2026] [:error] [pid 39783:tid 39792] [client 20.194.2.144:55059] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aXuLuK51RNfzhKG5ppOq8AAAAEc"]
[Fri Jan 30 00:32:59.630346 2026] [:error] [pid 39783:tid 39790] [client 20.194.2.144:52967] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aXuLu651RNfzhKG5ppOq-wAAAEU"]
[Fri Jan 30 00:33:02.280631 2026] [:error] [pid 39783:tid 39795] [client 20.194.2.144:55078] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aXuLvq51RNfzhKG5ppOrBQAAAEo"]
[Fri Jan 30 00:33:03.129363 2026] [:error] [pid 39502:tid 39544] [client 20.194.2.144:41958] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aXuLvwCUcXwXieepEYjbgwAAAIg"]
[Fri Jan 30 00:33:04.478744 2026] [:error] [pid 39783:tid 39798] [client 20.194.2.144:7498] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-admin.php"] [unique_id "aXuLwK51RNfzhKG5ppOrCgAAAE0"]
[Fri Jan 30 00:33:05.486638 2026] [:error] [pid 39783:tid 39806] [client 20.194.2.144:51718] [client 20.194.2.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-admin.php"] [unique_id "aXuLwa51RNfzhKG5ppOrDgAAAFU"]
[Fri Jan 30 00:33:08.052210 2026] [:error] [pid 39783:tid 39795] [client 20.194.2.144:7546] File does not exist: /usr/local/apache/htdocs/suspended-page/class-admin.php
[Fri Jan 30 00:33:08.194507 2026] [:error] [pid 39783:tid 39788] [client 20.194.2.144:7546] File does not exist: /usr/local/apache/htdocs/suspended-page/nyan.php
[Fri Jan 30 02:42:02.567214 2026] [:error] [pid 13797:tid 13803] [client 217.154.172.107:56536] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Jan 30 02:42:12.304371 2026] [:error] [pid 13765:tid 13768] [client 217.154.172.107:61349] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Fri Jan 30 02:42:21.274322 2026] [:error] [pid 39503:tid 39577] [client 217.154.172.107:64260] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Jan 30 02:42:30.863813 2026] [:error] [pid 13828:tid 13848] [client 217.154.172.107:62832] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Fri Jan 30 05:38:43.103495 2026] [:error] [pid 47021:tid 47042] [client 144.172.112.54:53864] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aXvTY9ap1k13UdZUNSQ5JQAAANM"]
[Fri Jan 30 12:49:40.339849 2026] [:error] [pid 38686:tid 38698] [client 125.75.66.97:38690] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXw4ZAoE8BAjgw1_sAUP4QAAAcg"]
[Fri Jan 30 19:23:37.415207 2026] [:error] [pid 47021:tid 47034] [client 121.229.185.160:52284] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXyUudap1k13UdZUNSQzOgAAAMs"]
[Fri Jan 30 22:09:48.515069 2026] [:error] [pid 24711:tid 24727] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Jan 30 22:09:49.065489 2026] [:error] [pid 24711:tid 24729] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Jan 30 22:09:49.626404 2026] [:error] [pid 24711:tid 24726] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Jan 30 22:09:50.190396 2026] [:error] [pid 24711:tid 24722] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Jan 30 22:09:50.740732 2026] [:error] [pid 24711:tid 24714] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Jan 30 22:09:51.298642 2026] [:error] [pid 24711:tid 24720] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Jan 30 22:09:51.849536 2026] [:error] [pid 24711:tid 24717] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Jan 30 22:09:52.406508 2026] [:error] [pid 24711:tid 24719] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Jan 30 22:09:53.527728 2026] [:error] [pid 24711:tid 24731] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Jan 30 22:09:54.654450 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Jan 30 22:09:55.231322 2026] [:error] [pid 24711:tid 24727] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Jan 30 22:09:55.792939 2026] [:error] [pid 24711:tid 24736] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Jan 30 22:09:56.342951 2026] [:error] [pid 24711:tid 24725] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Jan 30 22:09:56.911634 2026] [:error] [pid 24711:tid 24714] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Jan 30 22:09:57.462007 2026] [:error] [pid 24711:tid 24724] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Jan 30 22:09:58.024289 2026] [:error] [pid 24711:tid 24725] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Jan 30 22:09:58.582429 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Jan 30 22:09:59.141255 2026] [:error] [pid 24711:tid 24719] [client 45.137.126.9:61561] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Jan 30 22:10:07.168733 2026] [:error] [pid 24711:tid 24737] [client 45.137.126.9:61561] [client 45.137.126.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aXy7v65Gwh4var6T23KxzQAAAVc"]
[Fri Jan 30 22:10:09.939714 2026] [:error] [pid 46913:tid 46952] [client 45.137.126.16:64307] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aXy7wTMWmKL8hOfC3uTZsgAAAEE"]
[Fri Jan 30 22:10:12.729252 2026] [:error] [pid 38980:tid 38990] [client 45.137.126.23:30875] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Jan 30 22:10:14.392573 2026] [:error] [pid 38980:tid 38989] [client 45.137.126.23:30875] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aXy7xrYByxUZEaKXdHqyzAAAAgI"]
[Fri Jan 30 22:10:19.388369 2026] [:error] [pid 47663:tid 47674] [client 45.137.126.11:43581] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Jan 30 22:10:19.961761 2026] [:error] [pid 47663:tid 47682] [client 45.137.126.11:43581] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aXy7y0HGTrgIKCqEYbWkgwAAAlE"]
[Fri Jan 30 22:10:21.679760 2026] [:error] [pid 24711:tid 24728] [client 45.137.126.32:27223] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Jan 30 22:10:24.481343 2026] [:error] [pid 24711:tid 24734] [client 45.137.126.32:27223] [client 45.137.126.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aXy70K5Gwh4var6T23KykQAAAVQ"]
[Fri Jan 30 22:10:26.150796 2026] [:error] [pid 38980:tid 39001] [client 45.137.126.28:24473] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aXy70rYByxUZEaKXdHqzCgAAAg4"]
[Fri Jan 30 22:10:27.276667 2026] [:error] [pid 24711:tid 24733] [client 45.137.126.22:47011] [client 45.137.126.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aXy7065Gwh4var6T23KypgAAAVM"]
[Fri Jan 30 22:10:28.384100 2026] [:error] [pid 24712:tid 24755] [client 45.137.126.16:52461] [client 45.137.126.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aXy71IRLQrFiQF3h9-tcMwAAAY4"]
[Fri Jan 30 22:10:29.477979 2026] [:error] [pid 46913:tid 46959] [client 45.137.126.24:59895] [client 45.137.126.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aXy71TMWmKL8hOfC3uTaOgAAAEg"]
[Fri Jan 30 22:10:30.571461 2026] [:error] [pid 47021:tid 47043] [client 45.137.126.28:31587] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aXy71tap1k13UdZUNSRXqgAAANQ"]
[Fri Jan 30 22:10:32.265742 2026] [:error] [pid 24681:tid 24689] [client 45.137.126.19:23953] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aXy72IE368IXQpahn0KOvwAAAQY"]
[Fri Jan 30 22:10:33.372630 2026] [:error] [pid 46912:tid 46931] [client 45.137.126.17:41189] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Jan 30 22:10:34.480069 2026] [:error] [pid 46912:tid 46947] [client 45.137.126.17:41189] [client 45.137.126.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aXy72j6yiVW7A9NwFFny4QAAABc"]
[Fri Jan 30 22:10:36.713810 2026] [:error] [pid 46912:tid 46939] [client 45.137.126.46:27037] [client 45.137.126.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aXy73D6yiVW7A9NwFFny8QAAAA8"]
[Fri Jan 30 22:10:38.377367 2026] [:error] [pid 46914:tid 46987] [client 45.137.126.50:29337] [client 45.137.126.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aXy73lgSfJ4kZxNKlb_eaAAAAIk"]
[Fri Jan 30 22:10:39.489455 2026] [:error] [pid 46914:tid 46992] [client 45.137.126.29:22301] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Jan 30 22:10:40.042088 2026] [:error] [pid 46914:tid 46988] [client 45.137.126.29:22301] [client 45.137.126.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aXy74FgSfJ4kZxNKlb_eewAAAIo"]
[Fri Jan 30 22:10:41.157193 2026] [:error] [pid 24681:tid 24701] [client 45.137.126.28:26547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Jan 30 22:10:42.828279 2026] [:error] [pid 24681:tid 24701] [client 45.137.126.28:26547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Jan 30 22:10:44.968638 2026] [:error] [pid 24681:tid 24692] [client 45.137.126.28:26547] [client 45.137.126.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aXy75IE368IXQpahn0KPLAAAAQk"]
[Fri Jan 30 22:10:46.072986 2026] [:error] [pid 38980:tid 39005] [client 45.137.126.6:51047] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Jan 30 22:10:46.637879 2026] [:error] [pid 38980:tid 39004] [client 45.137.126.6:51047] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aXy75rYByxUZEaKXdHqzkAAAAhE"]
[Fri Jan 30 22:10:47.739149 2026] [:error] [pid 24711:tid 24714] [client 45.137.126.2:52697] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Jan 30 22:10:48.844780 2026] [:error] [pid 24711:tid 24738] [client 45.137.126.2:52697] [client 45.137.126.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aXy76K5Gwh4var6T23KzeAAAAVg"]
[Fri Jan 30 22:10:50.515671 2026] [:error] [pid 46914:tid 46984] [client 45.137.126.30:45893] [client 45.137.126.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aXy76lgSfJ4kZxNKlb_exgAAAIY"]
[Fri Jan 30 22:10:52.202305 2026] [:error] [pid 46912:tid 46946] [client 45.137.126.52:55677] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Jan 30 22:10:52.756175 2026] [:error] [pid 46912:tid 46934] [client 45.137.126.52:55677] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Jan 30 22:10:53.871204 2026] [:error] [pid 46912:tid 46942] [client 45.137.126.52:55677] [client 45.137.126.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aXy77T6yiVW7A9NwFFnzmgAAABI"]
[Fri Jan 30 22:10:55.527596 2026] [:error] [pid 46912:tid 46946] [client 45.137.126.26:26159] [client 45.137.126.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aXy77z6yiVW7A9NwFFnzrwAAABY"]
[Fri Jan 30 22:10:57.173506 2026] [:error] [pid 47663:tid 47684] [client 45.137.126.19:39539] [client 45.137.126.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aXy78UHGTrgIKCqEYbWlaAAAAlM"]
[Fri Jan 30 22:10:58.272713 2026] [:error] [pid 24711:tid 24729] [client 45.137.126.18:27895] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aXy78q5Gwh4var6T23Kz1wAAAU8"]
[Fri Jan 30 22:10:59.376919 2026] [:error] [pid 46914:tid 46996] [client 45.137.126.11:21683] [client 45.137.126.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aXy781gSfJ4kZxNKlb_fIwAAAJI"]
[Fri Jan 30 22:11:01.631341 2026] [:error] [pid 24711:tid 24717] [client 45.137.126.36:46321] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Jan 30 22:11:05.742140 2026] [:error] [pid 24711:tid 24717] [client 45.137.126.36:46321] [client 45.137.126.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aXy7-a5Gwh4var6T23K0JQAAAUM"]
[Fri Jan 30 22:11:06.845512 2026] [:error] [pid 46912:tid 46944] [client 45.137.126.40:51863] [client 45.137.126.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aXy7-j6yiVW7A9NwFFn0NgAAABQ"]
[Fri Jan 30 22:11:07.940821 2026] [:error] [pid 46913:tid 46956] [client 45.137.126.7:58277] [client 45.137.126.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aXy7-zMWmKL8hOfC3uTbeAAAAEU"]
[Fri Jan 30 22:11:10.162333 2026] [:error] [pid 38686:tid 38697] [client 45.137.126.51:26823] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Jan 30 22:11:11.298932 2026] [:error] [pid 38686:tid 38691] [client 45.137.126.51:26823] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Jan 30 22:11:13.546503 2026] [:error] [pid 38686:tid 38691] [client 45.137.126.51:26823] [client 45.137.126.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aXy8AQoE8BAjgw1_sAV40wAAAcE"]
[Fri Jan 30 22:11:16.344699 2026] [:error] [pid 38686:tid 38713] [client 45.137.126.23:43235] [client 45.137.126.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.23, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aXy8BAoE8BAjgw1_sAV48QAAAdc"]
[Fri Jan 30 22:11:16.945754 2026] [:error] [pid 38686:tid 38705] [client 45.137.126.23:43235] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Jan 30 22:11:19.767865 2026] [:error] [pid 38686:tid 38699] [client 45.137.126.23:43235] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Jan 30 22:11:20.329453 2026] [:error] [pid 38686:tid 38702] [client 45.137.126.23:43235] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Jan 30 22:11:23.195914 2026] [:error] [pid 38686:tid 38703] [client 45.137.126.23:43235] [client 45.137.126.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aXy8CwoE8BAjgw1_sAV5LQAAAc0"]
[Fri Jan 30 22:11:24.869176 2026] [:error] [pid 24681:tid 24700] [client 45.137.126.6:43255] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Jan 30 22:11:25.458053 2026] [:error] [pid 24681:tid 24702] [client 45.137.126.6:43255] [client 45.137.126.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.137.126.6, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aXy8DYE368IXQpahn0KQcAAAARM"]
[Fri Jan 30 22:11:26.576013 2026] [:error] [pid 24681:tid 24685] [client 45.137.126.6:43255] [client 45.137.126.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aXy8DoE368IXQpahn0KQfAAAAQI"]
[Fri Jan 30 22:11:30.080806 2026] [:error] [pid 24681:tid 24702] [client 45.137.126.18:47285] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Jan 30 22:11:31.203271 2026] [:error] [pid 24681:tid 24691] [client 45.137.126.18:47285] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Jan 30 22:11:32.309877 2026] [:error] [pid 24681:tid 24694] [client 45.137.126.18:47285] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aXy8FIE368IXQpahn0KQtQAAAQs"]
[Fri Jan 30 22:12:16.412787 2026] [:error] [pid 38980:tid 39011] [client 45.137.126.23:45957] [client 45.137.126.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-content/uploads/"] [unique_id "aXy8QLYByxUZEaKXdHq2IwAAAhg"]
[Fri Jan 30 22:32:38.636504 2026] [:error] [pid 38980:tid 39008] [client 43.153.12.58:60444] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aXzBBrYByxUZEaKXdHrFrwAAAhU"]
[Sat Jan 31 00:32:19.640585 2026] [:error] [pid 59660:tid 59678] [client 20.203.132.68:11893] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Jan 31 00:51:57.078070 2026] [:error] [pid 59661:tid 59697] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sat Jan 31 00:51:57.113458 2026] [:error] [pid 59661:tid 59710] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Jan 31 00:51:57.132209 2026] [:error] [pid 59661:tid 59705] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Sat Jan 31 00:51:57.150390 2026] [:error] [pid 59661:tid 59693] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Sat Jan 31 00:51:57.168090 2026] [:error] [pid 59661:tid 59701] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/obfuscate.php
[Sat Jan 31 00:51:57.187748 2026] [:error] [pid 59661:tid 59698] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat Jan 31 00:51:57.205703 2026] [:error] [pid 59661:tid 59700] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Sat Jan 31 00:51:57.238713 2026] [:error] [pid 59661:tid 59696] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/iswfg.php
[Sat Jan 31 00:51:57.257192 2026] [:error] [pid 59661:tid 59711] [client 20.70.186.174:24991] File does not exist: /usr/local/apache/htdocs/suspended-page/acxx.php
[Sat Jan 31 00:51:57.273676 2026] [:error] [pid 59661:tid 59691] [client 20.70.186.174:24991] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/black.php"] [unique_id "aXzhrZw_qINw5Uk-43XL_wAAAEA"]
[Sat Jan 31 00:52:00.109401 2026] [:error] [pid 59661:tid 59693] [client 20.70.186.174:15252] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/black.php"] [unique_id "aXzhsJw_qINw5Uk-43XMBgAAAEI"]
[Sat Jan 31 00:52:04.761167 2026] [:error] [pid 59748:tid 59756] [client 20.70.186.174:26413] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/black.php"] [unique_id "aXzhtGlxTen-ziDxotR0OwAAAMU"]
[Sat Jan 31 00:52:08.860930 2026] [:error] [pid 59662:tid 59726] [client 20.70.186.174:15217] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/black.php"] [unique_id "aXzhuA7k73dlTgySEchKugAAAIg"]
[Sat Jan 31 00:52:12.963499 2026] [:error] [pid 59660:tid 59671] [client 20.70.186.174:1922] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aXzhvCwTX33V6TPUqxPcMgAAAAc"]
[Sat Jan 31 00:52:16.466396 2026] [:error] [pid 59661:tid 59701] [client 20.70.186.174:13658] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "aXzhwJw_qINw5Uk-43XMIwAAAEo"]
[Sat Jan 31 00:52:26.468441 2026] [:error] [pid 59660:tid 59678] [client 20.70.186.174:24989] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aXzhyiwTX33V6TPUqxPcSAAAAA4"]
[Sat Jan 31 00:52:27.591736 2026] [:error] [pid 59660:tid 59682] [client 20.70.186.174:26415] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aXzhyywTX33V6TPUqxPcTAAAABI"]
[Sat Jan 31 00:52:32.889868 2026] [:error] [pid 60001:tid 60023] [client 20.70.186.174:21984] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aXzh0KM2ziQ7JN4IjDxFYAAAARQ"]
[Sat Jan 31 00:52:35.296638 2026] [:error] [pid 59660:tid 59666] [client 20.70.186.174:15195] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wikindex.php"] [unique_id "aXzh0ywTX33V6TPUqxPcYwAAAAI"]
[Sat Jan 31 00:52:38.539642 2026] [:error] [pid 59662:tid 59729] [client 20.70.186.174:31878] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aXzh1g7k73dlTgySEchK2gAAAIs"]
[Sat Jan 31 00:52:41.098494 2026] [:error] [pid 60001:tid 60020] [client 20.70.186.174:31877] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aXzh2aM2ziQ7JN4IjDxFbgAAARE"]
[Sat Jan 31 00:52:48.823472 2026] [:error] [pid 59660:tid 59679] [client 20.70.186.174:26450] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aXzh4CwTX33V6TPUqxPcfQAAAA8"]
[Sat Jan 31 00:52:51.991066 2026] [:error] [pid 59661:tid 59708] [client 20.70.186.174:1160] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/py.php"] [unique_id "aXzh45w_qINw5Uk-43XMUgAAAFE"]
[Sat Jan 31 00:52:52.297142 2026] [:error] [pid 59660:tid 59680] [client 20.70.186.174:13970] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/py.php"] [unique_id "aXzh5CwTX33V6TPUqxPchgAAABA"]
[Sat Jan 31 00:52:52.386510 2026] [:error] [pid 59748:tid 59768] [client 20.70.186.174:13989] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/py.php"] [unique_id "aXzh5GlxTen-ziDxotR0kQAAANE"]
[Sat Jan 31 00:52:57.117856 2026] [:error] [pid 59661:tid 59692] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/py.php
[Sat Jan 31 00:52:57.151636 2026] [:error] [pid 59661:tid 59694] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Sat Jan 31 00:52:57.171009 2026] [:error] [pid 59661:tid 59698] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/sym404.php
[Sat Jan 31 00:52:57.189711 2026] [:error] [pid 59661:tid 59706] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/iko.php
[Sat Jan 31 00:52:57.213794 2026] [:error] [pid 59661:tid 59695] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Sat Jan 31 00:52:57.381983 2026] [:error] [pid 59661:tid 59691] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Sat Jan 31 00:52:57.440108 2026] [:error] [pid 59661:tid 59712] [client 20.70.186.174:1866] [client 20.70.186.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.70.186.174, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aXzh6Zw_qINw5Uk-43XMYQAAAFU"]
[Sat Jan 31 00:52:57.443438 2026] [:error] [pid 59661:tid 59712] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 31 00:52:57.473726 2026] [:error] [pid 59661:tid 59708] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sat Jan 31 00:52:57.503744 2026] [:error] [pid 59661:tid 59704] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Jan 31 00:52:57.524420 2026] [:error] [pid 59661:tid 59713] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sat Jan 31 00:52:57.546052 2026] [:error] [pid 59661:tid 59693] [client 20.70.186.174:1866] File does not exist: /usr/local/apache/htdocs/suspended-page/lkj.php
[Sat Jan 31 00:52:57.562413 2026] [:error] [pid 59661:tid 59707] [client 20.70.186.174:1866] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXzh6Zw_qINw5Uk-43XMZwAAAFA"]
[Sat Jan 31 00:53:01.035220 2026] [:error] [pid 59661:tid 59706] [client 20.70.186.174:20309] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXzh7Zw_qINw5Uk-43XMawAAAE8"]
[Sat Jan 31 00:53:07.443493 2026] [:error] [pid 60001:tid 60019] [client 20.70.186.174:14836] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXzh86M2ziQ7JN4IjDxFjwAAARA"]
[Sat Jan 31 00:53:10.841753 2026] [:error] [pid 60001:tid 60022] [client 20.70.186.174:26495] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aXzh9qM2ziQ7JN4IjDxFlQAAARM"]
[Sat Jan 31 00:53:13.654174 2026] [:error] [pid 59660:tid 59680] [client 20.70.186.174:20344] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXzh-SwTX33V6TPUqxPctgAAABA"]
[Sat Jan 31 00:53:15.056266 2026] [:error] [pid 59661:tid 59697] [client 20.70.186.174:26483] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXzh-5w_qINw5Uk-43XMfgAAAEY"]
[Sat Jan 31 00:53:15.497917 2026] [:error] [pid 60001:tid 60017] [client 20.70.186.174:14829] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXzh-6M2ziQ7JN4IjDxFmgAAAQ4"]
[Sat Jan 31 00:53:16.494678 2026] [:error] [pid 59660:tid 59668] [client 20.70.186.174:13976] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aXzh_CwTX33V6TPUqxPcvQAAAAQ"]
[Sat Jan 31 00:53:20.110457 2026] [:error] [pid 59748:tid 59757] [client 20.70.186.174:1861] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXziAGlxTen-ziDxotR0qQAAAMY"]
[Sat Jan 31 00:53:21.633772 2026] [:error] [pid 59660:tid 59672] [client 20.70.186.174:14823] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXziASwTX33V6TPUqxPczQAAAAg"]
[Sat Jan 31 00:53:24.522044 2026] [:error] [pid 60001:tid 60007] [client 20.70.186.174:1724] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXziBKM2ziQ7JN4IjDxFnwAAAQQ"]
[Sat Jan 31 00:53:25.957627 2026] [:error] [pid 60001:tid 60016] [client 20.70.186.174:26477] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aXziBaM2ziQ7JN4IjDxFogAAAQ0"]
[Sat Jan 31 00:53:32.473911 2026] [:error] [pid 59660:tid 59674] [client 20.70.186.174:20346] [client 20.70.186.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aXziDCwTX33V6TPUqxPc5gAAAAo"]
[Sat Jan 31 00:53:35.409108 2026] [:error] [pid 60001:tid 60024] [client 20.70.186.174:1690] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aXziD6M2ziQ7JN4IjDxFtQAAARU"]
[Sat Jan 31 00:53:52.154131 2026] [:error] [pid 59661:tid 59700] [client 20.70.186.174:1712] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aXziIJw_qINw5Uk-43XMtwAAAEk"]
[Sat Jan 31 00:53:56.235293 2026] [:error] [pid 60001:tid 60016] [client 20.70.186.174:14803] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aXziJKM2ziQ7JN4IjDxFzgAAAQ0"]
[Sat Jan 31 00:53:56.836144 2026] [:error] [pid 59662:tid 59733] [client 20.70.186.174:1905] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aXziJA7k73dlTgySEchLOQAAAI8"]
[Sat Jan 31 00:53:58.187672 2026] [:error] [pid 59661:tid 59700] [client 20.70.186.174:1896] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Sat Jan 31 00:53:58.212198 2026] [:error] [pid 59661:tid 59703] [client 20.70.186.174:1896] [client 20.70.186.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aXziJpw_qINw5Uk-43XMxgAAAEw"]
[Sat Jan 31 00:54:01.346990 2026] [:error] [pid 59660:tid 59664] [client 20.70.186.174:14000] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Jan 31 00:54:01.393250 2026] [:error] [pid 59660:tid 59669] [client 20.70.186.174:14000] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Jan 31 00:54:01.433180 2026] [:error] [pid 59660:tid 59672] [client 20.70.186.174:14000] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Jan 31 00:54:01.447844 2026] [:error] [pid 59660:tid 59678] [client 20.70.186.174:14000] [client 20.70.186.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aXziKSwTX33V6TPUqxPdMQAAAA4"]
[Sat Jan 31 00:54:12.351961 2026] [:error] [pid 59748:tid 59752] [client 20.70.186.174:20380] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Sat Jan 31 00:54:12.373215 2026] [:error] [pid 59748:tid 59762] [client 20.70.186.174:20380] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Jan 31 00:54:12.420459 2026] [:error] [pid 59748:tid 59770] [client 20.70.186.174:20380] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sat Jan 31 00:54:14.045869 2026] [:error] [pid 59748:tid 59770] [client 20.70.186.174:20380] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Sat Jan 31 00:54:14.075821 2026] [:error] [pid 59748:tid 59761] [client 20.70.186.174:20380] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Sat Jan 31 00:54:14.098406 2026] [:error] [pid 59748:tid 59756] [client 20.70.186.174:20380] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aXziNmlxTen-ziDxotR09wAAAMU"]
[Sat Jan 31 00:54:16.822245 2026] [:error] [pid 59662:tid 59725] [client 20.70.186.174:1964] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aXziOA7k73dlTgySEchLTwAAAIc"]
[Sat Jan 31 00:54:40.030107 2026] [:error] [pid 59661:tid 59711] [client 20.70.186.174:15103] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aXziUJw_qINw5Uk-43XNCgAAAFQ"]
[Sat Jan 31 00:54:41.243802 2026] [:error] [pid 60001:tid 60026] [client 20.70.186.174:14111] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aXziUaM2ziQ7JN4IjDxGCwAAARc"]
[Sat Jan 31 00:54:47.271049 2026] [:error] [pid 59660:tid 59671] [client 20.70.186.174:38155] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aXziVywTX33V6TPUqxPdjwAAAAc"]
[Sat Jan 31 00:54:53.739151 2026] [:error] [pid 59662:tid 59726] [client 20.70.186.174:35873] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "aXziXQ7k73dlTgySEchLeAAAAIg"]
[Sat Jan 31 00:54:54.812893 2026] [:error] [pid 59662:tid 59731] [client 20.70.186.174:34926] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irc.js.php"] [unique_id "aXziXg7k73dlTgySEchLewAAAI0"]
[Sat Jan 31 00:54:55.768343 2026] [:error] [pid 59662:tid 59732] [client 20.70.186.174:35868] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irc.js.php"] [unique_id "aXziXw7k73dlTgySEchLfwAAAI4"]
[Sat Jan 31 00:54:57.422859 2026] [:error] [pid 59662:tid 59721] [client 20.70.186.174:1827] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irc.js.php"] [unique_id "aXziYQ7k73dlTgySEchLhAAAAIM"]
[Sat Jan 31 00:54:57.617918 2026] [:error] [pid 60001:tid 60027] [client 20.70.186.174:38189] [client 20.70.186.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irc.js.php"] [unique_id "aXziYaM2ziQ7JN4IjDxGIQAAARg"]
[Sat Jan 31 01:31:19.770109 2026] [:error] [pid 59662:tid 59731] [client 45.148.10.95:37224] [client 45.148.10.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aXzq5w7k73dlTgySEchYTgAAAI0"]
[Sat Jan 31 01:31:21.333108 2026] [:error] [pid 59660:tid 59682] [client 45.148.10.95:60718] [client 45.148.10.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/wc.db"] [unique_id "aXzq6SwTX33V6TPUqxPxGQAAABI"]
[Sat Jan 31 01:31:23.169494 2026] [:error] [pid 59660:tid 59669] [client 45.148.10.95:60734] [client 45.148.10.95] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.svn/entries"] [unique_id "aXzq6ywTX33V6TPUqxPxHgAAAAU"]
[Sat Jan 31 02:01:24.920165 2026] [:error] [pid 59662:tid 59722] [client 182.42.110.255:59521] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aXzx9A7k73dlTgySEchhIwAAAIQ"]
[Sat Jan 31 05:17:23.003449 2026] [:error] [pid 20836:tid 20858] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Jan 31 05:17:23.141364 2026] [:error] [pid 20836:tid 20856] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Jan 31 05:17:23.283725 2026] [:error] [pid 20836:tid 20857] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Sat Jan 31 05:17:23.421604 2026] [:error] [pid 20836:tid 20852] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Jan 31 05:17:23.562337 2026] [:error] [pid 20836:tid 20860] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Jan 31 05:17:23.699844 2026] [:error] [pid 20836:tid 20846] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Jan 31 05:17:23.845176 2026] [:error] [pid 20836:tid 20864] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Jan 31 05:17:23.983957 2026] [:error] [pid 20836:tid 20855] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Jan 31 05:17:24.130471 2026] [:error] [pid 20836:tid 20843] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Jan 31 05:17:24.270855 2026] [:error] [pid 20836:tid 20845] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Jan 31 05:17:24.413177 2026] [:error] [pid 20836:tid 20862] [client 20.214.137.92:65083] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Sat Jan 31 05:17:24.548353 2026] [:error] [pid 20836:tid 20841] [client 20.214.137.92:65083] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aX0f5IACllgWRWVrYITYsAAAAUA"]
[Sat Jan 31 05:17:25.100502 2026] [:error] [pid 39339:tid 39347] [client 20.214.137.92:62548] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aX0f5cWi-IjigR3oHY6Q2AAAAMY"]
[Sat Jan 31 05:17:25.644272 2026] [:error] [pid 20210:tid 20228] [client 20.214.137.92:62579] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aX0f5XKy7OGBlTY8MCeu3wAAARA"]
[Sat Jan 31 05:17:26.185818 2026] [:error] [pid 39339:tid 39350] [client 20.214.137.92:3174] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aX0f5sWi-IjigR3oHY6Q2wAAAMk"]
[Sat Jan 31 06:33:14.834895 2026] [:error] [pid 52520:tid 52543] [client 20.211.164.12:33939] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aX0xqmS_bInnwm0xKSqZ8AAAAlU"]
[Sat Jan 31 06:33:14.904176 2026] [:error] [pid 39339:tid 39345] [client 20.211.164.12:30276] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aX0xqsWi-IjigR3oHY6owwAAAMQ"]
[Sat Jan 31 06:33:14.974961 2026] [:error] [pid 20210:tid 20218] [client 20.211.164.12:21630] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aX0xqnKy7OGBlTY8MCfI8QAAAQY"]
[Sat Jan 31 06:33:15.044299 2026] [:error] [pid 20836:tid 20859] [client 20.211.164.12:17998] [client 20.211.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aX0xq4ACllgWRWVrYIT6kwAAAVI"]
[Sat Jan 31 08:17:35.612353 2026] [:error] [pid 52520:tid 52542] [client 182.42.111.156:51422] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aX1KH2S_bInnwm0xKSq9ZwAAAlQ"]
[Sat Jan 31 10:21:38.112717 2026] [:error] [pid 39244:tid 39334] [client 43.153.74.75:39718] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aX1nMno-KRTvg3jHEDwijwAAAJg"]
[Sat Jan 31 10:36:17.223454 2026] [:error] [pid 39243:tid 39301] [client 3.127.203.41:37496] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Jan 31 11:06:57.841984 2026] [:error] [pid 52520:tid 52533] [client 213.176.16.157:38678] [client 213.176.16.157] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aX1x0WS_bInnwm0xKSoMxAAAAks"]
[Sat Jan 31 15:57:24.735360 2026] [:error] [pid 39339:tid 39363] [client 43.153.35.128:60036] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aX215MWi-IjigR3oHY409QAAANY"]
[Sat Jan 31 16:23:34.708329 2026] [:error] [pid 44532:tid 44554] [client 45.114.38.212:61216] [client 45.114.38.212] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.114.38.212, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX28BsH-68uYbAtfrZ1fRgAAAVI"]
[Sat Jan 31 16:23:34.716424 2026] [:error] [pid 44532:tid 44554] [client 45.114.38.212:61216] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Jan 31 17:05:15.118928 2026] [:error] [pid 18803:tid 18823] [client 91.224.92.127:54122] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Jan 31 17:48:02.408043 2026] [:error] [pid 44532:tid 44557] [client 185.102.112.213:27299] [client 185.102.112.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.102.112.213, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aX3P0sH-68uYbAtfrZ1sPgAAAVU"]
[Sat Jan 31 17:48:02.411947 2026] [:error] [pid 44532:tid 44557] [client 185.102.112.213:27299] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Jan 31 18:49:30.025467 2026] [:error] [pid 31430:tid 31451] [client 43.130.16.140:45308] [client 43.130.16.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aX3eOscb14YPxXg_g5E4xAAAAFE"]
[Sun Feb 01 01:48:07.921730 2026] [:error] [pid 18773:tid 18782] [client 104.28.153.27:42980] [client 104.28.153.27] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aX5AV9Hy21j24IPrB1UXHwAAAYc"]
[Sun Feb 01 10:16:36.194898 2026] [:error] [pid 10506:tid 10529] [client 223.244.35.77:59811] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aX63hK32IC2Db4uwFyPmEQAAAA0"]
[Sun Feb 01 11:13:57.119219 2026] [:error] [pid 51610:tid 51620] [client 43.166.244.251:53778] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aX7E9d7GFdNFAqImMQCGfAAAAUY"]
[Sun Feb 01 12:50:21.044344 2026] [:error] [pid 10508:tid 10562] [client 80.253.198.80:39508] [client 80.253.198.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aX7bjQFwdoMQv5EWp9vV-gAAAFI"]
[Sun Feb 01 12:53:50.610886 2026] [:error] [pid 10616:tid 10633] [client 80.253.198.80:41505] [client 80.253.198.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aX7cXmd8pZdmVx6pUp6GJAAAAM0"]
[Sun Feb 01 16:01:05.910800 2026] [:error] [pid 10509:tid 10592] [client 43.159.152.184:35356] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aX8IQVMNpJBihOJgwVuvHwAAAJU"]
[Sun Feb 01 16:51:58.422752 2026] [:error] [pid 10508:tid 10561] [client 49.234.192.248:45204] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aX8ULgFwdoMQv5EWp9sg2QAAAFE"]
[Sun Feb 01 23:47:36.775251 2026] [:error] [pid 2033:tid 2049] [client 182.42.111.213:34374] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aX91mPF7B4oR5nK3T_M5LgAAAQ4"]
[Mon Feb 02 01:45:51.806500 2026] [:error] [pid 10509:tid 10575] [client 103.85.11.250:39328] [client 103.85.11.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.85.11.250, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-RT1MNpJBihOJgwVtDtgAAAIQ"]
[Mon Feb 02 01:45:51.813949 2026] [:error] [pid 10509:tid 10575] [client 103.85.11.250:39328] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 02 01:46:08.786019 2026] [:error] [pid 51610:tid 51614] [client 110.225.255.220:50993] [client 110.225.255.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.225.255.220, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-RYN7GFdNFAqImMQBWPgAAAUA"]
[Mon Feb 02 01:46:08.790466 2026] [:error] [pid 51610:tid 51614] [client 110.225.255.220:50993] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 02 02:37:19.057572 2026] [:error] [pid 8780:tid 8795] [client 37.139.53.198:58155] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "aX-dX6G6IrMzWSzSdUff2AAAAko"]
[Mon Feb 02 02:57:23.483429 2026] [:error] [pid 10616:tid 10636] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Mon Feb 02 02:57:23.624048 2026] [:error] [pid 10616:tid 10631] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Mon Feb 02 02:57:23.764017 2026] [:error] [pid 10616:tid 10621] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/jmfi2.php
[Mon Feb 02 02:57:23.902574 2026] [:error] [pid 10616:tid 10620] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/ez.php
[Mon Feb 02 02:57:24.053365 2026] [:error] [pid 10616:tid 10644] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Mon Feb 02 02:57:24.288487 2026] [:error] [pid 10616:tid 10632] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Mon Feb 02 02:57:24.441625 2026] [:error] [pid 10616:tid 10640] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/vxrl.php
[Mon Feb 02 02:57:24.610896 2026] [:error] [pid 10616:tid 10622] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/w3llstore.php
[Mon Feb 02 02:57:24.753507 2026] [:error] [pid 10616:tid 10642] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Mon Feb 02 02:57:24.968406 2026] [:error] [pid 10616:tid 10623] [client 20.207.194.159:20614] File does not exist: /usr/local/apache/htdocs/suspended-page/cfile.php
[Mon Feb 02 02:57:25.105017 2026] [:error] [pid 10616:tid 10625] [client 20.207.194.159:20614] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aX-iFWd8pZdmVx6pUp5BKgAAAMU"]
[Mon Feb 02 02:57:25.387605 2026] [:error] [pid 8965:tid 8976] [client 20.207.194.159:21688] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aX-iFeNHEHhgRhn3G7Rn2QAAAwg"]
[Mon Feb 02 02:57:25.672614 2026] [:error] [pid 29578:tid 29589] [client 20.207.194.159:22233] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aX-iFUwa4IUBrS8Q04ELjQAAAYc"]
[Mon Feb 02 02:57:26.000832 2026] [:error] [pid 8965:tid 8988] [client 20.207.194.159:26424] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aX-iFeNHEHhgRhn3G7Rn3AAAAxQ"]
[Mon Feb 02 02:57:26.388045 2026] [:error] [pid 8780:tid 8789] [client 20.207.194.159:26418] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aX-iFqG6IrMzWSzSdUfinQAAAkQ"]
[Mon Feb 02 02:57:26.833506 2026] [:error] [pid 29578:tid 29600] [client 20.207.194.159:3220] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aX-iFkwa4IUBrS8Q04ELkAAAAZI"]
[Mon Feb 02 02:57:27.252273 2026] [:error] [pid 51610:tid 51620] [client 20.207.194.159:40383] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aX-iF97GFdNFAqImMQBg9gAAAUY"]
[Mon Feb 02 02:57:27.738463 2026] [:error] [pid 51610:tid 51636] [client 20.207.194.159:20611] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aX-iF97GFdNFAqImMQBg9wAAAVY"]
[Mon Feb 02 02:57:28.037823 2026] [:error] [pid 2033:tid 2045] [client 20.207.194.159:62537] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aX-iGPF7B4oR5nK3T_NeOAAAAQo"]
[Mon Feb 02 02:57:28.406094 2026] [:error] [pid 10616:tid 10639] [client 20.207.194.159:40340] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aX-iGGd8pZdmVx6pUp5BLAAAANM"]
[Mon Feb 02 02:57:29.218802 2026] [:error] [pid 8780:tid 8809] [client 20.207.194.159:3217] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aX-iGaG6IrMzWSzSdUfingAAAlg"]
[Mon Feb 02 02:57:29.540487 2026] [:error] [pid 29578:tid 29588] [client 20.207.194.159:47941] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aX-iGUwa4IUBrS8Q04ELlQAAAYY"]
[Mon Feb 02 02:57:29.860333 2026] [:error] [pid 29578:tid 29604] [client 20.207.194.159:16258] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aX-iGUwa4IUBrS8Q04ELlgAAAZY"]
[Mon Feb 02 02:57:30.399327 2026] [:error] [pid 8780:tid 8795] [client 20.207.194.159:62590] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aX-iGqG6IrMzWSzSdUfioQAAAko"]
[Mon Feb 02 02:57:30.808248 2026] [:error] [pid 29578:tid 29594] [client 20.207.194.159:22236] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aX-iGkwa4IUBrS8Q04ELlwAAAYw"]
[Mon Feb 02 02:57:31.114057 2026] [:error] [pid 29578:tid 29599] [client 20.207.194.159:24049] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aX-iG0wa4IUBrS8Q04ELmAAAAZE"]
[Mon Feb 02 02:57:31.572488 2026] [:error] [pid 51610:tid 51621] [client 20.207.194.159:24062] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aX-iG97GFdNFAqImMQBg-wAAAUc"]
[Mon Feb 02 02:57:31.882616 2026] [:error] [pid 2033:tid 2052] [client 20.207.194.159:16291] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aX-iG_F7B4oR5nK3T_NeOwAAARE"]
[Mon Feb 02 02:57:32.157420 2026] [:error] [pid 29578:tid 29586] [client 20.207.194.159:28379] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aX-iHEwa4IUBrS8Q04ELmwAAAYQ"]
[Mon Feb 02 02:57:32.437981 2026] [:error] [pid 10616:tid 10628] [client 20.207.194.159:15351] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aX-iHGd8pZdmVx6pUp5BLwAAAMg"]
[Mon Feb 02 02:57:32.733316 2026] [:error] [pid 8780:tid 8786] [client 20.207.194.159:32662] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aX-iHKG6IrMzWSzSdUfipAAAAkE"]
[Mon Feb 02 02:57:33.048884 2026] [:error] [pid 29578:tid 29585] [client 20.207.194.159:32680] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aX-iHUwa4IUBrS8Q04ELnAAAAYM"]
[Mon Feb 02 02:57:33.468704 2026] [:error] [pid 8965:tid 8983] [client 20.207.194.159:3244] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aX-iHeNHEHhgRhn3G7Rn4AAAAw8"]
[Mon Feb 02 02:57:33.841182 2026] [:error] [pid 8752:tid 8776] [client 20.207.194.159:21671] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aX-iHUFFilE3DptZFcpCdQAAAhY"]
[Mon Feb 02 02:57:34.673410 2026] [:error] [pid 8752:tid 8758] [client 20.207.194.159:21686] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aX-iHkFFilE3DptZFcpCdgAAAgQ"]
[Mon Feb 02 02:57:35.053500 2026] [:error] [pid 10616:tid 10643] [client 20.207.194.159:27019] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aX-iH2d8pZdmVx6pUp5BMwAAANc"]
[Mon Feb 02 02:57:35.386537 2026] [:error] [pid 10616:tid 10630] [client 20.207.194.159:24059] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aX-iH2d8pZdmVx6pUp5BNgAAAMo"]
[Mon Feb 02 02:57:35.703714 2026] [:error] [pid 10509:tid 10588] [client 20.207.194.159:28357] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aX-iH1MNpJBihOJgwVtPSAAAAJE"]
[Mon Feb 02 02:57:35.990408 2026] [:error] [pid 8752:tid 8769] [client 20.207.194.159:32668] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style2.php"] [unique_id "aX-iH0FFilE3DptZFcpCdwAAAg8"]
[Mon Feb 02 02:57:36.311657 2026] [:error] [pid 8965:tid 8977] [client 20.207.194.159:32656] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style2.php"] [unique_id "aX-iIONHEHhgRhn3G7Rn4QAAAwk"]
[Mon Feb 02 02:57:36.601814 2026] [:error] [pid 10616:tid 10634] [client 20.207.194.159:24007] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style2.php"] [unique_id "aX-iIGd8pZdmVx6pUp5BOgAAAM4"]
[Mon Feb 02 02:57:36.894878 2026] [:error] [pid 10616:tid 10637] [client 20.207.194.159:36071] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style2.php"] [unique_id "aX-iIGd8pZdmVx6pUp5BPAAAANE"]
[Mon Feb 02 02:57:37.186323 2026] [:error] [pid 2033:tid 2046] [client 20.207.194.159:24043] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aX-iIfF7B4oR5nK3T_NePwAAAQs"]
[Mon Feb 02 02:57:37.465314 2026] [:error] [pid 8752:tid 8763] [client 20.207.194.159:32658] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aX-iIUFFilE3DptZFcpCfAAAAgk"]
[Mon Feb 02 02:57:37.753962 2026] [:error] [pid 10616:tid 10621] [client 20.207.194.159:22804] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aX-iIWd8pZdmVx6pUp5BQQAAAME"]
[Mon Feb 02 02:57:38.039192 2026] [:error] [pid 2033:tid 2064] [client 20.207.194.159:41602] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aX-iIvF7B4oR5nK3T_NeQAAAARc"]
[Mon Feb 02 02:57:38.320835 2026] [:error] [pid 8780:tid 8797] [client 20.207.194.159:21648] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aX-iIqG6IrMzWSzSdUfipQAAAkw"]
[Mon Feb 02 02:57:38.597118 2026] [:error] [pid 2033:tid 2045] [client 20.207.194.159:41653] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aX-iIvF7B4oR5nK3T_NeQQAAAQo"]
[Mon Feb 02 02:57:38.925277 2026] [:error] [pid 8752:tid 8778] [client 20.207.194.159:28389] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aX-iIkFFilE3DptZFcpCgAAAAhg"]
[Mon Feb 02 02:57:39.204507 2026] [:error] [pid 10616:tid 10630] [client 20.207.194.159:41648] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aX-iI2d8pZdmVx6pUp5BRQAAAMo"]
[Mon Feb 02 02:57:39.499507 2026] [:error] [pid 29578:tid 29603] [client 20.207.194.159:36053] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsback.php"] [unique_id "aX-iI0wa4IUBrS8Q04ELowAAAZU"]
[Mon Feb 02 02:57:39.776943 2026] [:error] [pid 29578:tid 29582] [client 20.207.194.159:28366] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsback.php"] [unique_id "aX-iI0wa4IUBrS8Q04ELpQAAAYA"]
[Mon Feb 02 02:57:40.057918 2026] [:error] [pid 29578:tid 29602] [client 20.207.194.159:16576] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsback.php"] [unique_id "aX-iJEwa4IUBrS8Q04ELpgAAAZQ"]
[Mon Feb 02 02:57:40.357241 2026] [:error] [pid 2033:tid 2041] [client 20.207.194.159:16635] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsback.php"] [unique_id "aX-iJPF7B4oR5nK3T_NeRQAAAQY"]
[Mon Feb 02 02:57:40.656394 2026] [:error] [pid 8877:tid 8896] [client 20.207.194.159:24000] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iJFjWRgIEkmjg6ou0TwAAAs8"]
[Mon Feb 02 02:57:40.956230 2026] [:error] [pid 10509:tid 10580] [client 20.207.194.159:24601] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iJFMNpJBihOJgwVtPUAAAAIk"]
[Mon Feb 02 02:57:41.242300 2026] [:error] [pid 10509:tid 10588] [client 20.207.194.159:21673] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iJVMNpJBihOJgwVtPUQAAAJE"]
[Mon Feb 02 02:57:41.531849 2026] [:error] [pid 2033:tid 2053] [client 20.207.194.159:16610] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iJfF7B4oR5nK3T_NeSQAAARI"]
[Mon Feb 02 02:57:41.826734 2026] [:error] [pid 29578:tid 29600] [client 20.207.194.159:41620] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aX-iJUwa4IUBrS8Q04ELqwAAAZI"]
[Mon Feb 02 02:57:42.487445 2026] [:error] [pid 8752:tid 8769] [client 20.207.194.159:24627] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aX-iJkFFilE3DptZFcpChQAAAg8"]
[Mon Feb 02 02:57:43.470817 2026] [:error] [pid 8752:tid 8761] [client 20.207.194.159:29667] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aX-iJ0FFilE3DptZFcpChwAAAgc"]
[Mon Feb 02 02:57:44.319308 2026] [:error] [pid 8780:tid 8791] [client 20.207.194.159:24010] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aX-iKKG6IrMzWSzSdUfiqgAAAkY"]
[Mon Feb 02 02:57:45.177337 2026] [:error] [pid 8877:tid 8884] [client 20.207.194.159:22799] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aX-iKVjWRgIEkmjg6ou0UwAAAsM"]
[Mon Feb 02 02:57:45.727384 2026] [:error] [pid 8780:tid 8789] [client 20.207.194.159:16594] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aX-iKaG6IrMzWSzSdUfirAAAAkQ"]
[Mon Feb 02 02:57:46.052612 2026] [:error] [pid 8965:tid 8984] [client 20.207.194.159:36673] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aX-iKuNHEHhgRhn3G7Rn4gAAAxA"]
[Mon Feb 02 02:57:46.574093 2026] [:error] [pid 29578:tid 29597] [client 20.207.194.159:41601] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aX-iKkwa4IUBrS8Q04ELugAAAY8"]
[Mon Feb 02 02:57:47.155650 2026] [:error] [pid 10616:tid 10631] [client 20.207.194.159:3260] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aX-iK2d8pZdmVx6pUp5BVAAAAMs"]
[Mon Feb 02 02:57:47.556312 2026] [:error] [pid 8752:tid 8778] [client 20.207.194.159:36786] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aX-iK0FFilE3DptZFcpCjQAAAhg"]
[Mon Feb 02 02:57:47.853859 2026] [:error] [pid 10509:tid 10581] [client 20.207.194.159:17420] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aX-iK1MNpJBihOJgwVtPXAAAAIo"]
[Mon Feb 02 02:57:48.186810 2026] [:error] [pid 29578:tid 29590] [client 20.207.194.159:41625] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/past.php"] [unique_id "aX-iLEwa4IUBrS8Q04ELvgAAAYg"]
[Mon Feb 02 02:57:48.551921 2026] [:error] [pid 29578:tid 29598] [client 20.207.194.159:21124] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aX-iLEwa4IUBrS8Q04ELwQAAAZA"]
[Mon Feb 02 02:57:48.937031 2026] [:error] [pid 8877:tid 8889] [client 20.207.194.159:17409] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aX-iLFjWRgIEkmjg6ou0WAAAAsg"]
[Mon Feb 02 02:57:49.332227 2026] [:error] [pid 8877:tid 8904] [client 20.207.194.159:36733] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aX-iLVjWRgIEkmjg6ou0WQAAAtc"]
[Mon Feb 02 02:57:49.633852 2026] [:error] [pid 8877:tid 8898] [client 20.207.194.159:14236] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aX-iLVjWRgIEkmjg6ou0WwAAAtE"]
[Mon Feb 02 02:57:49.959028 2026] [:error] [pid 29578:tid 29604] [client 20.207.194.159:36691] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i.php"] [unique_id "aX-iLUwa4IUBrS8Q04ELwwAAAZY"]
[Mon Feb 02 02:57:50.277345 2026] [:error] [pid 10616:tid 10623] [client 20.207.194.159:36754] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i.php"] [unique_id "aX-iLmd8pZdmVx6pUp5BWwAAAMM"]
[Mon Feb 02 02:57:50.615094 2026] [:error] [pid 8877:tid 8900] [client 20.207.194.159:55055] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i.php"] [unique_id "aX-iLljWRgIEkmjg6ou0XAAAAtM"]
[Mon Feb 02 02:57:50.907964 2026] [:error] [pid 8877:tid 8888] [client 20.207.194.159:33253] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i.php"] [unique_id "aX-iLljWRgIEkmjg6ou0XgAAAsc"]
[Mon Feb 02 02:57:51.230595 2026] [:error] [pid 29578:tid 29605] [client 20.207.194.159:55097] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-iL0wa4IUBrS8Q04ELxQAAAZc"]
[Mon Feb 02 02:57:51.551400 2026] [:error] [pid 10616:tid 10627] [client 20.207.194.159:22144] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-iL2d8pZdmVx6pUp5BYQAAAMc"]
[Mon Feb 02 02:57:51.887786 2026] [:error] [pid 8752:tid 8776] [client 20.207.194.159:14220] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-iL0FFilE3DptZFcpCkAAAAhY"]
[Mon Feb 02 02:57:52.195536 2026] [:error] [pid 29578:tid 29597] [client 20.207.194.159:31054] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-iMEwa4IUBrS8Q04ELyQAAAY8"]
[Mon Feb 02 02:57:52.502409 2026] [:error] [pid 10509:tid 10579] [client 20.207.194.159:33684] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cron.php"] [unique_id "aX-iMFMNpJBihOJgwVtPXwAAAIg"]
[Mon Feb 02 02:57:52.789403 2026] [:error] [pid 10616:tid 10628] [client 20.207.194.159:55052] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cron.php"] [unique_id "aX-iMGd8pZdmVx6pUp5BZgAAAMg"]
[Mon Feb 02 02:57:53.087923 2026] [:error] [pid 8877:tid 8902] [client 20.207.194.159:35523] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cron.php"] [unique_id "aX-iMVjWRgIEkmjg6ou0YAAAAtU"]
[Mon Feb 02 02:57:53.431755 2026] [:error] [pid 10616:tid 10626] [client 20.207.194.159:33693] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cron.php"] [unique_id "aX-iMWd8pZdmVx6pUp5BaQAAAMY"]
[Mon Feb 02 02:57:53.754535 2026] [:error] [pid 10509:tid 10583] [client 20.207.194.159:3541] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aX-iMVMNpJBihOJgwVtPYQAAAIw"]
[Mon Feb 02 02:57:54.043503 2026] [:error] [pid 10616:tid 10623] [client 20.207.194.159:38075] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aX-iMmd8pZdmVx6pUp5BawAAAMM"]
[Mon Feb 02 02:57:54.366713 2026] [:error] [pid 10616:tid 10624] [client 20.207.194.159:17821] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aX-iMmd8pZdmVx6pUp5BbQAAAMQ"]
[Mon Feb 02 02:57:54.683622 2026] [:error] [pid 29578:tid 29583] [client 20.207.194.159:35545] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/super.php"] [unique_id "aX-iMkwa4IUBrS8Q04ELywAAAYE"]
[Mon Feb 02 02:57:54.955128 2026] [:error] [pid 29578:tid 29590] [client 20.207.194.159:55060] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "aX-iMkwa4IUBrS8Q04ELzAAAAYg"]
[Mon Feb 02 02:57:55.249482 2026] [:error] [pid 51610:tid 51614] [client 20.207.194.159:14248] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "aX-iM97GFdNFAqImMQBg_wAAAUA"]
[Mon Feb 02 02:57:55.667686 2026] [:error] [pid 8965:tid 8968] [client 20.207.194.159:31065] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "aX-iM-NHEHhgRhn3G7Rn5AAAAwA"]
[Mon Feb 02 02:57:55.996065 2026] [:error] [pid 29578:tid 29588] [client 20.207.194.159:31041] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "aX-iM0wa4IUBrS8Q04EL0AAAAYY"]
[Mon Feb 02 02:57:56.329608 2026] [:error] [pid 8781:tid 8815] [client 20.207.194.159:3535] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aX-iNC8oB7b2tIX_lkWOHgAAAoM"]
[Mon Feb 02 02:57:56.637661 2026] [:error] [pid 8965:tid 8988] [client 20.207.194.159:33686] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aX-iNONHEHhgRhn3G7Rn5QAAAxQ"]
[Mon Feb 02 02:57:56.924371 2026] [:error] [pid 8877:tid 8904] [client 20.207.194.159:55068] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aX-iNFjWRgIEkmjg6ou0ZgAAAtc"]
[Mon Feb 02 02:57:57.207629 2026] [:error] [pid 8781:tid 8822] [client 20.207.194.159:35544] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aX-iNS8oB7b2tIX_lkWOIQAAAoo"]
[Mon Feb 02 02:57:57.489426 2026] [:error] [pid 8781:tid 8820] [client 20.207.194.159:3709] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aX-iNS8oB7b2tIX_lkWOIgAAAog"]
[Mon Feb 02 02:57:57.786891 2026] [:error] [pid 8965:tid 8973] [client 20.207.194.159:64274] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aX-iNeNHEHhgRhn3G7Rn5gAAAwU"]
[Mon Feb 02 02:57:58.061282 2026] [:error] [pid 29578:tid 29604] [client 20.207.194.159:3695] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aX-iNkwa4IUBrS8Q04EL0gAAAZY"]
[Mon Feb 02 02:57:58.378087 2026] [:error] [pid 51610:tid 51626] [client 20.207.194.159:38077] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aX-iNt7GFdNFAqImMQBhAQAAAUw"]
[Mon Feb 02 02:57:58.682327 2026] [:error] [pid 8781:tid 8814] [client 20.207.194.159:3648] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aX-iNi8oB7b2tIX_lkWOJQAAAoI"]
[Mon Feb 02 02:57:58.981211 2026] [:error] [pid 8781:tid 8813] [client 20.207.194.159:3311] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aX-iNi8oB7b2tIX_lkWOJwAAAoE"]
[Mon Feb 02 02:57:59.276116 2026] [:error] [pid 29578:tid 29605] [client 20.207.194.159:3552] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aX-iN0wa4IUBrS8Q04EL1QAAAZc"]
[Mon Feb 02 02:57:59.560339 2026] [:error] [pid 8781:tid 8828] [client 20.207.194.159:31098] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aX-iNy8oB7b2tIX_lkWOKgAAApA"]
[Mon Feb 02 02:57:59.843432 2026] [:error] [pid 8965:tid 8978] [client 20.207.194.159:3244] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aX-iN-NHEHhgRhn3G7Rn7AAAAwo"]
[Mon Feb 02 02:58:00.165627 2026] [:error] [pid 10616:tid 10625] [client 20.207.194.159:38049] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aX-iOGd8pZdmVx6pUp5BcgAAAMU"]
[Mon Feb 02 02:58:00.508284 2026] [:error] [pid 51610:tid 51636] [client 20.207.194.159:14255] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aX-iON7GFdNFAqImMQBhAwAAAVY"]
[Mon Feb 02 02:58:00.879563 2026] [:error] [pid 8965:tid 8971] [client 20.207.194.159:38057] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "aX-iOONHEHhgRhn3G7Rn7gAAAwM"]
[Mon Feb 02 02:58:01.176399 2026] [:error] [pid 10509:tid 10585] [client 20.207.194.159:3696] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aX-iOVMNpJBihOJgwVtPYgAAAI4"]
[Mon Feb 02 02:58:01.500615 2026] [:error] [pid 29578:tid 29587] [client 20.207.194.159:3293] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aX-iOUwa4IUBrS8Q04EL2wAAAYU"]
[Mon Feb 02 02:58:01.798856 2026] [:error] [pid 29578:tid 29588] [client 20.207.194.159:27072] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aX-iOUwa4IUBrS8Q04EL3AAAAYY"]
[Mon Feb 02 02:58:02.100983 2026] [:error] [pid 10616:tid 10633] [client 20.207.194.159:65498] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "aX-iOmd8pZdmVx6pUp5BdwAAAM0"]
[Mon Feb 02 02:58:02.420802 2026] [:error] [pid 10509:tid 10592] [client 20.207.194.159:55075] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aX-iOlMNpJBihOJgwVtPYwAAAJU"]
[Mon Feb 02 02:58:02.738429 2026] [:error] [pid 10509:tid 10580] [client 20.207.194.159:15250] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aX-iOlMNpJBihOJgwVtPZAAAAIk"]
[Mon Feb 02 02:58:03.029329 2026] [:error] [pid 10509:tid 10588] [client 20.207.194.159:65481] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aX-iO1MNpJBihOJgwVtPZgAAAJE"]
[Mon Feb 02 02:58:03.319481 2026] [:error] [pid 10509:tid 10582] [client 20.207.194.159:27123] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aX-iO1MNpJBihOJgwVtPZwAAAIs"]
[Mon Feb 02 02:58:03.632602 2026] [:error] [pid 8781:tid 8816] [client 20.207.194.159:14217] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aX-iOy8oB7b2tIX_lkWONAAAAoQ"]
[Mon Feb 02 02:58:04.172369 2026] [:error] [pid 10509:tid 10572] [client 20.207.194.159:15295] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aX-iPFMNpJBihOJgwVtPagAAAIE"]
[Mon Feb 02 02:58:04.495529 2026] [:error] [pid 10616:tid 10635] [client 20.207.194.159:3660] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aX-iPGd8pZdmVx6pUp5BegAAAM8"]
[Mon Feb 02 02:58:04.788081 2026] [:error] [pid 2033:tid 2042] [client 20.207.194.159:31071] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "aX-iPPF7B4oR5nK3T_NeXAAAAQc"]
[Mon Feb 02 02:58:05.080700 2026] [:error] [pid 8965:tid 8992] [client 20.207.194.159:18288] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tcp.php"] [unique_id "aX-iPeNHEHhgRhn3G7Rn8AAAAxg"]
[Mon Feb 02 02:58:05.361970 2026] [:error] [pid 2033:tid 2039] [client 20.207.194.159:65503] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tcp.php"] [unique_id "aX-iPfF7B4oR5nK3T_NeXwAAAQQ"]
[Mon Feb 02 02:58:05.789929 2026] [:error] [pid 2033:tid 2050] [client 20.207.194.159:3701] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tcp.php"] [unique_id "aX-iPfF7B4oR5nK3T_NeYAAAAQ8"]
[Mon Feb 02 02:58:06.061167 2026] [:error] [pid 8752:tid 8771] [client 20.207.194.159:16301] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tcp.php"] [unique_id "aX-iPkFFilE3DptZFcpCsAAAAhE"]
[Mon Feb 02 02:58:06.366056 2026] [:error] [pid 10509:tid 10575] [client 20.207.194.159:18275] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hot.php"] [unique_id "aX-iPlMNpJBihOJgwVtPbgAAAIQ"]
[Mon Feb 02 02:58:06.677907 2026] [:error] [pid 8877:tid 8892] [client 20.207.194.159:3763] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hot.php"] [unique_id "aX-iPljWRgIEkmjg6ou0iwAAAss"]
[Mon Feb 02 02:58:06.971033 2026] [:error] [pid 8780:tid 8792] [client 20.207.194.159:3751] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hot.php"] [unique_id "aX-iPqG6IrMzWSzSdUfivAAAAkc"]
[Mon Feb 02 02:58:07.274616 2026] [:error] [pid 8965:tid 8973] [client 20.207.194.159:3314] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hot.php"] [unique_id "aX-iP-NHEHhgRhn3G7Rn8gAAAwU"]
[Mon Feb 02 02:58:07.562008 2026] [:error] [pid 8877:tid 8904] [client 20.207.194.159:3288] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/live.php"] [unique_id "aX-iP1jWRgIEkmjg6ou0jgAAAtc"]
[Mon Feb 02 02:58:07.846567 2026] [:error] [pid 10509:tid 10579] [client 20.207.194.159:27088] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/live.php"] [unique_id "aX-iP1MNpJBihOJgwVtPcQAAAIg"]
[Mon Feb 02 02:58:08.145452 2026] [:error] [pid 10509:tid 10583] [client 20.207.194.159:18284] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/live.php"] [unique_id "aX-iQFMNpJBihOJgwVtPcwAAAIw"]
[Mon Feb 02 02:58:08.443452 2026] [:error] [pid 8965:tid 8979] [client 20.207.194.159:42831] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/live.php"] [unique_id "aX-iQONHEHhgRhn3G7Rn9AAAAws"]
[Mon Feb 02 02:58:08.720122 2026] [:error] [pid 8752:tid 8772] [client 20.207.194.159:16307] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iQEFFilE3DptZFcpCsgAAAhI"]
[Mon Feb 02 02:58:09.002582 2026] [:error] [pid 51610:tid 51618] [client 20.207.194.159:65495] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iQd7GFdNFAqImMQBhCAAAAUQ"]
[Mon Feb 02 02:58:09.288890 2026] [:error] [pid 8752:tid 8767] [client 20.207.194.159:27132] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iQUFFilE3DptZFcpCswAAAg0"]
[Mon Feb 02 02:58:09.581603 2026] [:error] [pid 8752:tid 8761] [client 20.207.194.159:64309] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm.php"] [unique_id "aX-iQUFFilE3DptZFcpCtAAAAgc"]
[Mon Feb 02 02:58:09.870597 2026] [:error] [pid 51610:tid 51624] [client 20.207.194.159:16270] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date.php"] [unique_id "aX-iQd7GFdNFAqImMQBhCwAAAUo"]
[Mon Feb 02 02:58:10.207001 2026] [:error] [pid 29578:tid 29596] [client 20.207.194.159:42870] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date.php"] [unique_id "aX-iQkwa4IUBrS8Q04EL5gAAAY4"]
[Mon Feb 02 02:58:10.509698 2026] [:error] [pid 8781:tid 8827] [client 20.207.194.159:64295] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date.php"] [unique_id "aX-iQi8oB7b2tIX_lkWONgAAAo8"]
[Mon Feb 02 02:58:10.803801 2026] [:error] [pid 29578:tid 29582] [client 20.207.194.159:40289] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date.php"] [unique_id "aX-iQkwa4IUBrS8Q04EL6gAAAYA"]
[Mon Feb 02 02:58:11.130560 2026] [:error] [pid 29578:tid 29595] [client 20.207.194.159:18263] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aX-iQ0wa4IUBrS8Q04EL6wAAAY0"]
[Mon Feb 02 02:58:11.428094 2026] [:error] [pid 29578:tid 29601] [client 20.207.194.159:41103] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aX-iQ0wa4IUBrS8Q04EL7gAAAZM"]
[Mon Feb 02 02:58:11.721470 2026] [:error] [pid 2033:tid 2053] [client 20.207.194.159:40315] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aX-iQ_F7B4oR5nK3T_NeYgAAARI"]
[Mon Feb 02 02:58:12.012187 2026] [:error] [pid 2033:tid 2052] [client 20.207.194.159:65394] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aX-iRPF7B4oR5nK3T_NeZAAAARE"]
[Mon Feb 02 02:58:12.318066 2026] [:error] [pid 51610:tid 51626] [client 20.207.194.159:18293] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex3.php"] [unique_id "aX-iRN7GFdNFAqImMQBhDwAAAUw"]
[Mon Feb 02 02:58:12.633443 2026] [:error] [pid 10509:tid 10575] [client 20.207.194.159:16293] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex3.php"] [unique_id "aX-iRFMNpJBihOJgwVtPewAAAIQ"]
[Mon Feb 02 02:58:12.946263 2026] [:error] [pid 10616:tid 10622] [client 20.207.194.159:64266] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex3.php"] [unique_id "aX-iRGd8pZdmVx6pUp5BfAAAAMI"]
[Mon Feb 02 02:58:13.252262 2026] [:error] [pid 51610:tid 51632] [client 20.207.194.159:65402] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex3.php"] [unique_id "aX-iRd7GFdNFAqImMQBhEgAAAVI"]
[Mon Feb 02 02:58:13.531635 2026] [:error] [pid 8752:tid 8754] [client 20.207.194.159:42860] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aX-iRUFFilE3DptZFcpCtQAAAgA"]
[Mon Feb 02 02:58:13.825854 2026] [:error] [pid 51610:tid 51630] [client 20.207.194.159:65378] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aX-iRd7GFdNFAqImMQBhFAAAAVA"]
[Mon Feb 02 02:58:14.111823 2026] [:error] [pid 8965:tid 8977] [client 20.207.194.159:64313] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aX-iRuNHEHhgRhn3G7Rn-gAAAwk"]
[Mon Feb 02 02:58:14.428005 2026] [:error] [pid 10616:tid 10627] [client 20.207.194.159:64314] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aX-iRmd8pZdmVx6pUp5BfwAAAMc"]
[Mon Feb 02 02:58:14.697620 2026] [:error] [pid 8965:tid 8968] [client 20.207.194.159:42884] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aX-iRuNHEHhgRhn3G7Rn_AAAAwA"]
[Mon Feb 02 02:58:14.997766 2026] [:error] [pid 8781:tid 8826] [client 20.207.194.159:3121] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aX-iRi8oB7b2tIX_lkWOOwAAAo4"]
[Mon Feb 02 02:58:15.299449 2026] [:error] [pid 8965:tid 8973] [client 20.207.194.159:42867] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aX-iR-NHEHhgRhn3G7Rn_gAAAwU"]
[Mon Feb 02 02:58:15.594590 2026] [:error] [pid 8780:tid 8785] [client 20.207.194.159:65366] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rsnu.php"] [unique_id "aX-iR6G6IrMzWSzSdUfivgAAAkA"]
[Mon Feb 02 02:58:15.884357 2026] [:error] [pid 2033:tid 2043] [client 20.207.194.159:3738] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aX-iR_F7B4oR5nK3T_NeZgAAAQg"]
[Mon Feb 02 02:58:16.162942 2026] [:error] [pid 2033:tid 2051] [client 20.207.194.159:42880] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aX-iSPF7B4oR5nK3T_NeZwAAARA"]
[Mon Feb 02 02:58:16.462684 2026] [:error] [pid 51610:tid 51625] [client 20.207.194.159:42834] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aX-iSN7GFdNFAqImMQBhFwAAAUs"]
[Mon Feb 02 02:58:16.756897 2026] [:error] [pid 8781:tid 8822] [client 20.207.194.159:40281] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aX-iSC8oB7b2tIX_lkWOQQAAAoo"]
[Mon Feb 02 02:58:17.032453 2026] [:error] [pid 10616:tid 10642] [client 20.207.194.159:40304] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aucxcocoxo.php"] [unique_id "aX-iSWd8pZdmVx6pUp5BggAAANY"]
[Mon Feb 02 02:58:17.339296 2026] [:error] [pid 8965:tid 8978] [client 20.207.194.159:40287] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aucxcocoxo.php"] [unique_id "aX-iSeNHEHhgRhn3G7RoAQAAAwo"]
[Mon Feb 02 02:58:17.701386 2026] [:error] [pid 51610:tid 51626] [client 20.207.194.159:3092] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aucxcocoxo.php"] [unique_id "aX-iSd7GFdNFAqImMQBhGQAAAUw"]
[Mon Feb 02 02:58:17.980037 2026] [:error] [pid 10509:tid 10585] [client 20.207.194.159:3649] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aucxcocoxo.php"] [unique_id "aX-iSVMNpJBihOJgwVtPfwAAAI4"]
[Mon Feb 02 02:58:18.283559 2026] [:error] [pid 8965:tid 8990] [client 20.207.194.159:40307] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krypton.php"] [unique_id "aX-iSuNHEHhgRhn3G7RoBgAAAxY"]
[Mon Feb 02 02:58:18.616178 2026] [:error] [pid 8781:tid 8813] [client 20.207.194.159:41120] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krypton.php"] [unique_id "aX-iSi8oB7b2tIX_lkWOQwAAAoE"]
[Mon Feb 02 02:58:18.899792 2026] [:error] [pid 8781:tid 8842] [client 20.207.194.159:40269] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krypton.php"] [unique_id "aX-iSi8oB7b2tIX_lkWORQAAApQ"]
[Mon Feb 02 02:58:19.236882 2026] [:error] [pid 29578:tid 29595] [client 20.207.194.159:40293] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krypton.php"] [unique_id "aX-iS0wa4IUBrS8Q04EL9wAAAY0"]
[Mon Feb 02 02:58:19.556168 2026] [:error] [pid 2033:tid 2045] [client 20.207.194.159:65355] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "aX-iS_F7B4oR5nK3T_NebgAAAQo"]
[Mon Feb 02 02:58:19.880756 2026] [:error] [pid 2033:tid 2040] [client 20.207.194.159:41137] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "aX-iS_F7B4oR5nK3T_NecgAAAQU"]
[Mon Feb 02 02:58:20.234755 2026] [:error] [pid 2033:tid 2052] [client 20.207.194.159:42925] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "aX-iTPF7B4oR5nK3T_NedAAAARE"]
[Mon Feb 02 02:58:20.559234 2026] [:error] [pid 2033:tid 2048] [client 20.207.194.159:20163] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "aX-iTPF7B4oR5nK3T_NedgAAAQ0"]
[Mon Feb 02 02:58:20.890712 2026] [:error] [pid 29578:tid 29583] [client 20.207.194.159:42931] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aX-iTEwa4IUBrS8Q04EL_AAAAYE"]
[Mon Feb 02 02:58:21.223048 2026] [:error] [pid 10616:tid 10620] [client 20.207.194.159:20185] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aX-iTWd8pZdmVx6pUp5BiAAAAMA"]
[Mon Feb 02 02:58:21.567471 2026] [:error] [pid 10616:tid 10643] [client 20.207.194.159:42924] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aX-iTWd8pZdmVx6pUp5BigAAANc"]
[Mon Feb 02 02:58:21.980524 2026] [:error] [pid 29578:tid 29606] [client 20.207.194.159:30107] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aX-iTUwa4IUBrS8Q04EMAQAAAZg"]
[Mon Feb 02 02:58:22.311137 2026] [:error] [pid 10616:tid 10622] [client 20.207.194.159:40256] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aX-iTmd8pZdmVx6pUp5BjAAAAMI"]
[Mon Feb 02 02:58:22.665920 2026] [:error] [pid 8877:tid 8888] [client 20.207.194.159:42910] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aX-iTljWRgIEkmjg6ou0kQAAAsc"]
[Mon Feb 02 02:58:22.985257 2026] [:error] [pid 8752:tid 8777] [client 20.207.194.159:42912] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aX-iTkFFilE3DptZFcpCuQAAAhc"]
[Mon Feb 02 02:58:23.353040 2026] [:error] [pid 8877:tid 8905] [client 20.207.194.159:65367] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aX-iT1jWRgIEkmjg6ou0kgAAAtg"]
[Mon Feb 02 02:58:23.667330 2026] [:error] [pid 29578:tid 29601] [client 20.207.194.159:38609] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goup.php"] [unique_id "aX-iT0wa4IUBrS8Q04EMBgAAAZM"]
[Mon Feb 02 02:58:23.965526 2026] [:error] [pid 29578:tid 29597] [client 20.207.194.159:3113] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goup.php"] [unique_id "aX-iT0wa4IUBrS8Q04EMCAAAAY8"]
[Mon Feb 02 02:58:24.375014 2026] [:error] [pid 51610:tid 51633] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/goup.php
[Mon Feb 02 02:58:24.515537 2026] [:error] [pid 51610:tid 51629] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/foot.php
[Mon Feb 02 02:58:24.671273 2026] [:error] [pid 51610:tid 51615] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Feb 02 02:58:25.031604 2026] [:error] [pid 51610:tid 51616] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Mon Feb 02 02:58:25.189721 2026] [:error] [pid 51610:tid 51628] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/weo.php
[Mon Feb 02 02:58:25.332876 2026] [:error] [pid 51610:tid 51619] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Feb 02 02:58:25.473102 2026] [:error] [pid 51610:tid 51634] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/mnkalo.php
[Mon Feb 02 02:58:25.611976 2026] [:error] [pid 51610:tid 51623] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi2.php
[Mon Feb 02 02:58:25.752136 2026] [:error] [pid 51610:tid 51626] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Mon Feb 02 02:58:25.898164 2026] [:error] [pid 51610:tid 51637] [client 20.207.194.159:65352] File does not exist: /usr/local/apache/htdocs/suspended-page/class.1.php
[Mon Feb 02 02:58:26.040654 2026] [:error] [pid 51610:tid 51620] [client 20.207.194.159:65352] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aX-iUt7GFdNFAqImMQBhKwAAAUY"]
[Mon Feb 02 02:58:26.355324 2026] [:error] [pid 29578:tid 29598] [client 20.207.194.159:20208] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aX-iUkwa4IUBrS8Q04EMCwAAAZA"]
[Mon Feb 02 02:58:26.694373 2026] [:error] [pid 8780:tid 8795] [client 20.207.194.159:38648] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aX-iUqG6IrMzWSzSdUfiwgAAAko"]
[Mon Feb 02 02:58:26.979063 2026] [:error] [pid 8781:tid 8813] [client 20.207.194.159:15733] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "aX-iUi8oB7b2tIX_lkWOSwAAAoE"]
[Mon Feb 02 02:58:27.291049 2026] [:error] [pid 10509:tid 10589] [client 20.207.194.159:42939] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aX-iU1MNpJBihOJgwVtPgwAAAJI"]
[Mon Feb 02 02:58:27.576941 2026] [:error] [pid 10509:tid 10584] [client 20.207.194.159:27657] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aX-iU1MNpJBihOJgwVtPhAAAAI0"]
[Mon Feb 02 02:58:27.911837 2026] [:error] [pid 10509:tid 10572] [client 20.207.194.159:27658] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aX-iU1MNpJBihOJgwVtPhQAAAIE"]
[Mon Feb 02 02:58:28.298760 2026] [:error] [pid 8780:tid 8804] [client 20.207.194.159:65407] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aX-iVKG6IrMzWSzSdUfixQAAAlM"]
[Mon Feb 02 02:58:28.581049 2026] [:error] [pid 8965:tid 8988] [client 20.207.194.159:17487] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aX-iVONHEHhgRhn3G7RoCgAAAxQ"]
[Mon Feb 02 02:58:29.170915 2026] [:error] [pid 29578:tid 29595] [client 20.207.194.159:17472] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aX-iVUwa4IUBrS8Q04EMEAAAAY0"]
[Mon Feb 02 02:58:30.074465 2026] [:error] [pid 10616:tid 10625] [client 20.207.194.159:34271] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aX-iVmd8pZdmVx6pUp5BkgAAAMU"]
[Mon Feb 02 02:58:30.401649 2026] [:error] [pid 8780:tid 8797] [client 20.207.194.159:3708] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file17.php"] [unique_id "aX-iVqG6IrMzWSzSdUfixwAAAkw"]
[Mon Feb 02 02:58:30.882673 2026] [:error] [pid 29578:tid 29606] [client 20.207.194.159:30141] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aX-iVkwa4IUBrS8Q04EMGgAAAZg"]
[Mon Feb 02 02:58:31.235940 2026] [:error] [pid 29578:tid 29599] [client 20.207.194.159:15687] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aX-iV0wa4IUBrS8Q04EMHAAAAZE"]
[Mon Feb 02 02:58:32.085600 2026] [:error] [pid 10509:tid 10583] [client 20.207.194.159:34251] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aX-iWFMNpJBihOJgwVtPigAAAIw"]
[Mon Feb 02 02:58:32.487842 2026] [:error] [pid 8877:tid 8882] [client 20.207.194.159:16370] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aX-iWFjWRgIEkmjg6ou0mgAAAsE"]
[Mon Feb 02 02:58:32.974769 2026] [:error] [pid 10509:tid 10576] [client 20.207.194.159:20181] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aX-iWFMNpJBihOJgwVtPiwAAAIU"]
[Mon Feb 02 02:58:33.422330 2026] [:error] [pid 10616:tid 10631] [client 20.207.194.159:16106] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aX-iWWd8pZdmVx6pUp5BkwAAAMs"]
[Mon Feb 02 02:58:33.888604 2026] [:error] [pid 8780:tid 8801] [client 20.207.194.159:37975] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aX-iWaG6IrMzWSzSdUfiygAAAlA"]
[Mon Feb 02 02:58:34.983422 2026] [:error] [pid 10509:tid 10585] [client 20.207.194.159:16378] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aX-iWlMNpJBihOJgwVtPkAAAAI4"]
[Mon Feb 02 02:58:35.602405 2026] [:error] [pid 2033:tid 2043] [client 20.207.194.159:3799] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aX-iW_F7B4oR5nK3T_NegQAAAQg"]
[Mon Feb 02 02:58:35.892671 2026] [:error] [pid 29578:tid 29582] [client 20.207.194.159:16103] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aX-iW0wa4IUBrS8Q04EMLgAAAYA"]
[Mon Feb 02 02:58:36.256607 2026] [:error] [pid 29578:tid 29601] [client 20.207.194.159:21240] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aX-iXEwa4IUBrS8Q04EMMgAAAZM"]
[Mon Feb 02 02:58:36.624437 2026] [:error] [pid 8752:tid 8758] [client 20.207.194.159:16044] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "aX-iXEFFilE3DptZFcpCvgAAAgQ"]
[Mon Feb 02 02:58:37.100468 2026] [:error] [pid 51610:tid 51624] [client 20.207.194.159:3811] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aX-iXd7GFdNFAqImMQBhMgAAAUo"]
[Mon Feb 02 02:58:37.499063 2026] [:error] [pid 10616:tid 10643] [client 20.207.194.159:16013] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aX-iXWd8pZdmVx6pUp5BpgAAANc"]
[Mon Feb 02 02:58:37.902886 2026] [:error] [pid 8780:tid 8795] [client 20.207.194.159:37954] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aX-iXaG6IrMzWSzSdUfi1AAAAko"]
[Mon Feb 02 02:58:38.296110 2026] [:error] [pid 8877:tid 8899] [client 20.207.194.159:33666] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aX-iXljWRgIEkmjg6ou0nQAAAtI"]
[Mon Feb 02 02:58:38.768377 2026] [:error] [pid 29578:tid 29604] [client 20.207.194.159:65456] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aX-iXkwa4IUBrS8Q04EMOgAAAZY"]
[Mon Feb 02 02:58:39.218753 2026] [:error] [pid 8965:tid 8984] [client 20.207.194.159:65461] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aX-iX-NHEHhgRhn3G7RoGwAAAxA"]
[Mon Feb 02 02:58:39.836674 2026] [:error] [pid 8752:tid 8754] [client 20.207.194.159:21227] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aX-iX0FFilE3DptZFcpCwAAAAgA"]
[Mon Feb 02 02:58:40.278762 2026] [:error] [pid 8781:tid 8825] [client 20.207.194.159:33682] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aX-iYC8oB7b2tIX_lkWOTwAAAo0"]
[Mon Feb 02 02:58:40.856125 2026] [:error] [pid 8781:tid 8819] [client 20.207.194.159:21219] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aX-iYC8oB7b2tIX_lkWOUgAAAoc"]
[Mon Feb 02 02:58:41.311824 2026] [:error] [pid 8780:tid 8799] [client 20.207.194.159:32709] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aX-iYaG6IrMzWSzSdUfi2AAAAk4"]
[Mon Feb 02 02:58:41.789458 2026] [:error] [pid 51610:tid 51626] [client 20.207.194.159:16075] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aX-iYd7GFdNFAqImMQBhNQAAAUw"]
[Mon Feb 02 02:58:42.109515 2026] [:error] [pid 10509:tid 10587] [client 20.207.194.159:21187] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aX-iYlMNpJBihOJgwVtPngAAAJA"]
[Mon Feb 02 02:58:42.635723 2026] [:error] [pid 51610:tid 51630] [client 20.207.194.159:32704] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aX-iYt7GFdNFAqImMQBhNgAAAVA"]
[Mon Feb 02 02:58:44.388029 2026] [:error] [pid 51610:tid 51633] [client 20.207.194.159:3839] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aX-iZN7GFdNFAqImMQBhOwAAAVM"]
[Mon Feb 02 02:58:44.866741 2026] [:error] [pid 29578:tid 29582] [client 20.207.194.159:16089] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aX-iZEwa4IUBrS8Q04EMPwAAAYA"]
[Mon Feb 02 02:58:45.242596 2026] [:error] [pid 51610:tid 51622] [client 20.207.194.159:65446] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "aX-iZd7GFdNFAqImMQBhPwAAAUg"]
[Mon Feb 02 02:58:45.667975 2026] [:error] [pid 29578:tid 29602] [client 20.207.194.159:32175] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aX-iZUwa4IUBrS8Q04EMQwAAAZQ"]
[Mon Feb 02 02:58:46.292985 2026] [:error] [pid 2033:tid 2045] [client 20.207.194.159:16082] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aX-iZvF7B4oR5nK3T_NejQAAAQo"]
[Mon Feb 02 02:58:46.716938 2026] [:error] [pid 51610:tid 51628] [client 20.207.194.159:3838] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aX-iZt7GFdNFAqImMQBhQwAAAU4"]
[Mon Feb 02 02:58:47.251865 2026] [:error] [pid 51610:tid 51619] [client 20.207.194.159:65427] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aX-iZ97GFdNFAqImMQBhRAAAAUU"]
[Mon Feb 02 02:58:47.727527 2026] [:error] [pid 8780:tid 8800] [client 20.207.194.159:65421] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aX-iZ6G6IrMzWSzSdUfi3AAAAk8"]
[Mon Feb 02 02:58:48.158080 2026] [:error] [pid 51610:tid 51620] [client 20.207.194.159:15616] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aX-iaN7GFdNFAqImMQBhSAAAAUY"]
[Mon Feb 02 02:58:48.733960 2026] [:error] [pid 10616:tid 10639] [client 20.207.194.159:65411] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aX-iaGd8pZdmVx6pUp5BtQAAANM"]
[Mon Feb 02 02:58:49.150508 2026] [:error] [pid 29578:tid 29592] [client 20.207.194.159:15635] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aX-iaUwa4IUBrS8Q04EMSQAAAYo"]
[Mon Feb 02 02:58:50.029436 2026] [:error] [pid 10616:tid 10628] [client 20.207.194.159:3776] [client 20.207.194.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aX-iamd8pZdmVx6pUp5BuQAAAMg"]
[Mon Feb 02 02:58:50.661996 2026] [:error] [pid 10509:tid 10584] [client 20.207.194.159:15660] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aX-ialMNpJBihOJgwVtPpAAAAI0"]
[Mon Feb 02 02:58:51.503806 2026] [:error] [pid 8781:tid 8827] [client 20.207.194.159:16009] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aX-iay8oB7b2tIX_lkWOVgAAAo8"]
[Mon Feb 02 02:58:52.165726 2026] [:error] [pid 29578:tid 29590] [client 20.207.194.159:15621] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aX-ibEwa4IUBrS8Q04EMUQAAAYg"]
[Mon Feb 02 02:58:52.579387 2026] [:error] [pid 10616:tid 10620] [client 20.207.194.159:3585] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "aX-ibGd8pZdmVx6pUp5BvgAAAMA"]
[Mon Feb 02 02:58:52.998248 2026] [:error] [pid 8877:tid 8884] [client 20.207.194.159:32136] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ova-Simple.php"] [unique_id "aX-ibFjWRgIEkmjg6ou0oQAAAsM"]
[Mon Feb 02 02:58:53.465913 2026] [:error] [pid 10509:tid 10583] [client 20.207.194.159:35635] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ova-Simple.php"] [unique_id "aX-ibVMNpJBihOJgwVtPqAAAAIw"]
[Mon Feb 02 02:58:54.090911 2026] [:error] [pid 29578:tid 29602] [client 20.207.194.159:3609] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ova-Simple.php"] [unique_id "aX-ibkwa4IUBrS8Q04EMVAAAAZQ"]
[Mon Feb 02 02:58:54.636708 2026] [:error] [pid 10509:tid 10576] [client 20.207.194.159:15623] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ova-Simple.php"] [unique_id "aX-iblMNpJBihOJgwVtPqgAAAIU"]
[Mon Feb 02 02:58:54.938931 2026] [:error] [pid 29578:tid 29593] [client 20.207.194.159:16795] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aX-ibkwa4IUBrS8Q04EMVgAAAYs"]
[Mon Feb 02 02:58:55.323575 2026] [:error] [pid 8877:tid 8897] [client 20.207.194.159:16051] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aX-ib1jWRgIEkmjg6ou0ogAAAtA"]
[Mon Feb 02 02:58:55.795499 2026] [:error] [pid 29578:tid 29596] [client 20.207.194.159:32188] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aX-ib0wa4IUBrS8Q04EMWQAAAY4"]
[Mon Feb 02 02:58:56.218392 2026] [:error] [pid 29578:tid 29597] [client 20.207.194.159:3610] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aX-icEwa4IUBrS8Q04EMWgAAAY8"]
[Mon Feb 02 02:58:56.786895 2026] [:error] [pid 29578:tid 29605] [client 20.207.194.159:16060] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "aX-icEwa4IUBrS8Q04EMXAAAAZc"]
[Mon Feb 02 02:58:57.186348 2026] [:error] [pid 8780:tid 8803] [client 20.207.194.159:22857] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "aX-icaG6IrMzWSzSdUfi4AAAAlI"]
[Mon Feb 02 02:58:57.544799 2026] [:error] [pid 29578:tid 29603] [client 20.207.194.159:16769] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "aX-icUwa4IUBrS8Q04EMXgAAAZU"]
[Mon Feb 02 02:58:57.941645 2026] [:error] [pid 8781:tid 8840] [client 20.207.194.159:35594] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "aX-icS8oB7b2tIX_lkWOWgAAApI"]
[Mon Feb 02 02:58:58.371946 2026] [:error] [pid 10509:tid 10581] [client 20.207.194.159:20175] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hexx.php"] [unique_id "aX-iclMNpJBihOJgwVtPrQAAAIo"]
[Mon Feb 02 02:58:58.871471 2026] [:error] [pid 2033:tid 2053] [client 20.207.194.159:35597] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hexx.php"] [unique_id "aX-icvF7B4oR5nK3T_NeogAAARI"]
[Mon Feb 02 02:58:59.300690 2026] [:error] [pid 8965:tid 8990] [client 20.207.194.159:15649] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hexx.php"] [unique_id "aX-ic-NHEHhgRhn3G7RoJwAAAxY"]
[Mon Feb 02 02:58:59.699808 2026] [:error] [pid 8752:tid 8773] [client 20.207.194.159:3157] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hexx.php"] [unique_id "aX-ic0FFilE3DptZFcpCzQAAAhM"]
[Mon Feb 02 02:59:00.249183 2026] [:error] [pid 10616:tid 10644] [client 20.207.194.159:16015] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aX-idGd8pZdmVx6pUp5BywAAANg"]
[Mon Feb 02 02:59:00.595848 2026] [:error] [pid 8780:tid 8804] [client 20.207.194.159:22901] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aX-idKG6IrMzWSzSdUfi4wAAAlM"]
[Mon Feb 02 02:59:01.190108 2026] [:error] [pid 29578:tid 29598] [client 20.207.194.159:3592] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aX-idUwa4IUBrS8Q04EMYAAAAZA"]
[Mon Feb 02 02:59:01.614389 2026] [:error] [pid 10509:tid 10584] [client 20.207.194.159:21207] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aX-idVMNpJBihOJgwVtPrwAAAI0"]
[Mon Feb 02 02:59:02.214269 2026] [:error] [pid 29578:tid 29590] [client 20.207.194.159:22158] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aX-idkwa4IUBrS8Q04EMZAAAAYg"]
[Mon Feb 02 02:59:02.804167 2026] [:error] [pid 8780:tid 8794] [client 20.207.194.159:23545] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aX-idqG6IrMzWSzSdUfi5QAAAkk"]
[Mon Feb 02 02:59:03.261502 2026] [:error] [pid 29578:tid 29583] [client 20.207.194.159:20169] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aX-id0wa4IUBrS8Q04EMZgAAAYE"]
[Mon Feb 02 02:59:03.604475 2026] [:error] [pid 8877:tid 8882] [client 20.207.194.159:15030] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aX-id1jWRgIEkmjg6ou0qgAAAsE"]
[Mon Feb 02 02:59:04.421677 2026] [:error] [pid 8780:tid 8787] [client 20.207.194.159:3617] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery.php"] [unique_id "aX-ieKG6IrMzWSzSdUfi5gAAAkI"]
[Mon Feb 02 02:59:04.897659 2026] [:error] [pid 10509:tid 10575] [client 20.207.194.159:15354] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery.php"] [unique_id "aX-ieFMNpJBihOJgwVtPtAAAAIQ"]
[Mon Feb 02 02:59:05.320190 2026] [:error] [pid 8781:tid 8845] [client 20.207.194.159:20161] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery.php"] [unique_id "aX-ieS8oB7b2tIX_lkWOXwAAApc"]
[Mon Feb 02 02:59:05.902856 2026] [:error] [pid 2033:tid 2056] [client 20.207.194.159:43465] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery.php"] [unique_id "aX-iefF7B4oR5nK3T_NepgAAARM"]
[Mon Feb 02 02:59:06.412861 2026] [:error] [pid 10509:tid 10571] [client 20.207.194.159:18817] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aX-ielMNpJBihOJgwVtPtgAAAIA"]
[Mon Feb 02 02:59:06.755765 2026] [:error] [pid 8965:tid 8983] [client 20.207.194.159:14982] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aX-ieuNHEHhgRhn3G7RoLQAAAw8"]
[Mon Feb 02 02:59:07.077026 2026] [:error] [pid 8752:tid 8767] [client 20.207.194.159:3413] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aX-ie0FFilE3DptZFcpC1QAAAg0"]
[Mon Feb 02 02:59:07.531323 2026] [:error] [pid 51610:tid 51620] [client 20.207.194.159:43510] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aX-ie97GFdNFAqImMQBhVAAAAUY"]
[Mon Feb 02 02:59:07.951209 2026] [:error] [pid 29578:tid 29601] [client 20.207.194.159:3404] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aX-ie0wa4IUBrS8Q04EMbgAAAZM"]
[Mon Feb 02 02:59:08.300500 2026] [:error] [pid 29578:tid 29590] [client 20.207.194.159:22203] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aX-ifEwa4IUBrS8Q04EMcAAAAYg"]
[Mon Feb 02 02:59:08.794341 2026] [:error] [pid 29578:tid 29585] [client 20.207.194.159:23533] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aX-ifEwa4IUBrS8Q04EMcgAAAYM"]
[Mon Feb 02 02:59:09.233416 2026] [:error] [pid 10616:tid 10621] [client 20.207.194.159:15338] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aX-ifWd8pZdmVx6pUp5B0wAAAME"]
[Mon Feb 02 02:59:09.584406 2026] [:error] [pid 10509:tid 10592] [client 20.207.194.159:23966] [client 20.207.194.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aX-ifVMNpJBihOJgwVtPuAAAAJU"]
[Mon Feb 02 02:59:09.892515 2026] [:error] [pid 8752:tid 8773] [client 20.207.194.159:3405] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "aX-ifUFFilE3DptZFcpC2AAAAhM"]
[Mon Feb 02 02:59:10.476303 2026] [:error] [pid 8965:tid 8968] [client 20.207.194.159:14986] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "aX-ifuNHEHhgRhn3G7RoMQAAAwA"]
[Mon Feb 02 02:59:10.901405 2026] [:error] [pid 51610:tid 51616] [client 20.207.194.159:23960] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "aX-ift7GFdNFAqImMQBhWgAAAUI"]
[Mon Feb 02 02:59:11.304437 2026] [:error] [pid 8781:tid 8821] [client 20.207.194.159:23999] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "aX-ify8oB7b2tIX_lkWOYgAAAok"]
[Mon Feb 02 02:59:11.675255 2026] [:error] [pid 10616:tid 10640] [client 20.207.194.159:39800] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX-if2d8pZdmVx6pUp5B1wAAANQ"]
[Mon Feb 02 02:59:12.231337 2026] [:error] [pid 29578:tid 29595] [client 20.207.194.159:25293] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX-igEwa4IUBrS8Q04EMdQAAAY0"]
[Mon Feb 02 02:59:12.650939 2026] [:error] [pid 2033:tid 2042] [client 20.207.194.159:3151] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX-igPF7B4oR5nK3T_NeqgAAAQc"]
[Mon Feb 02 02:59:13.039177 2026] [:error] [pid 8781:tid 8823] [client 20.207.194.159:3423] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "aX-igS8oB7b2tIX_lkWOZAAAAos"]
[Mon Feb 02 02:59:13.590074 2026] [:error] [pid 10616:tid 10626] [client 20.207.194.159:15010] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aX-igWd8pZdmVx6pUp5B3AAAAMY"]
[Mon Feb 02 02:59:13.992006 2026] [:error] [pid 29578:tid 29591] [client 20.207.194.159:31678] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aX-igUwa4IUBrS8Q04EMeAAAAYk"]
[Mon Feb 02 02:59:14.378610 2026] [:error] [pid 8877:tid 8891] [client 20.207.194.159:43461] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aX-igljWRgIEkmjg6ou0rwAAAso"]
[Mon Feb 02 02:59:14.924653 2026] [:error] [pid 8965:tid 8974] [client 20.207.194.159:23939] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aX-iguNHEHhgRhn3G7RoNAAAAwY"]
[Mon Feb 02 02:59:15.654544 2026] [:error] [pid 8965:tid 8970] [client 20.207.194.159:31666] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aX-ig-NHEHhgRhn3G7RoNQAAAwI"]
[Mon Feb 02 02:59:16.092881 2026] [:error] [pid 8781:tid 8820] [client 20.207.194.159:31630] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aX-ihC8oB7b2tIX_lkWOawAAAog"]
[Mon Feb 02 02:59:16.431947 2026] [:error] [pid 8965:tid 8986] [client 20.207.194.159:20144] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aX-ihONHEHhgRhn3G7RoNwAAAxI"]
[Mon Feb 02 02:59:16.991752 2026] [:error] [pid 8877:tid 8892] [client 20.207.194.159:38715] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aX-ihFjWRgIEkmjg6ou0sQAAAss"]
[Mon Feb 02 02:59:17.370162 2026] [:error] [pid 29578:tid 29587] [client 20.207.194.159:23525] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aX-ihUwa4IUBrS8Q04EMfAAAAYU"]
[Mon Feb 02 02:59:17.659369 2026] [:error] [pid 51610:tid 51620] [client 20.207.194.159:22160] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aX-ihd7GFdNFAqImMQBhXwAAAUY"]
[Mon Feb 02 02:59:18.477399 2026] [:error] [pid 8781:tid 8814] [client 20.207.194.159:3440] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aX-ihi8oB7b2tIX_lkWObwAAAoI"]
[Mon Feb 02 02:59:18.858458 2026] [:error] [pid 8781:tid 8827] [client 20.207.194.159:25333] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aX-ihi8oB7b2tIX_lkWOcAAAAo8"]
[Mon Feb 02 02:59:19.172462 2026] [:error] [pid 10509:tid 10585] [client 20.207.194.159:3444] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aX-ih1MNpJBihOJgwVtPwgAAAI4"]
[Mon Feb 02 02:59:19.649043 2026] [:error] [pid 10509:tid 10592] [client 20.207.194.159:20096] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aX-ih1MNpJBihOJgwVtPwwAAAJU"]
[Mon Feb 02 02:59:20.416812 2026] [:error] [pid 51610:tid 51633] [client 20.207.194.159:31633] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aX-iiN7GFdNFAqImMQBhZwAAAVM"]
[Mon Feb 02 02:59:20.927313 2026] [:error] [pid 51610:tid 51636] [client 20.207.194.159:25342] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aX-iiN7GFdNFAqImMQBhaAAAAVY"]
[Mon Feb 02 02:59:21.285315 2026] [:error] [pid 51610:tid 51638] [client 20.207.194.159:39773] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aX-iid7GFdNFAqImMQBhagAAAVg"]
[Mon Feb 02 02:59:22.050481 2026] [:error] [pid 8877:tid 8903] [client 20.207.194.159:15343] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aX-iiljWRgIEkmjg6ou0uAAAAtY"]
[Mon Feb 02 02:59:22.397520 2026] [:error] [pid 8877:tid 8893] [client 20.207.194.159:31671] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aX-iiljWRgIEkmjg6ou0uwAAAsw"]
[Mon Feb 02 02:59:22.705265 2026] [:error] [pid 8752:tid 8775] [client 20.207.194.159:39789] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aX-iikFFilE3DptZFcpC4AAAAhU"]
[Mon Feb 02 02:59:23.099393 2026] [:error] [pid 8752:tid 8776] [client 20.207.194.159:38663] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aX-ii0FFilE3DptZFcpC4QAAAhY"]
[Mon Feb 02 02:59:23.573622 2026] [:error] [pid 8877:tid 8883] [client 20.207.194.159:3919] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aX-ii1jWRgIEkmjg6ou0wQAAAsI"]
[Mon Feb 02 02:59:24.000686 2026] [:error] [pid 10509:tid 10583] [client 20.207.194.159:25300] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aX-ii1MNpJBihOJgwVtPxgAAAIw"]
[Mon Feb 02 02:59:24.505183 2026] [:error] [pid 29578:tid 29588] [client 20.207.194.159:3928] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aX-ijEwa4IUBrS8Q04EMhgAAAYY"]
[Mon Feb 02 02:59:24.900426 2026] [:error] [pid 8752:tid 8767] [client 20.207.194.159:20156] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thebe.php"] [unique_id "aX-ijEFFilE3DptZFcpC4wAAAg0"]
[Mon Feb 02 02:59:25.356886 2026] [:error] [pid 51610:tid 51621] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/thebe.php
[Mon Feb 02 02:59:25.501004 2026] [:error] [pid 51610:tid 51620] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Mon Feb 02 02:59:25.659691 2026] [:error] [pid 51610:tid 51629] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Mon Feb 02 02:59:25.802404 2026] [:error] [pid 51610:tid 51630] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/f355.php
[Mon Feb 02 02:59:25.945148 2026] [:error] [pid 51610:tid 51623] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Mon Feb 02 02:59:26.098221 2026] [:error] [pid 51610:tid 51626] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Mon Feb 02 02:59:26.316856 2026] [:error] [pid 51610:tid 51624] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Mon Feb 02 02:59:26.459000 2026] [:error] [pid 51610:tid 51614] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Mon Feb 02 02:59:26.612534 2026] [:error] [pid 51610:tid 51617] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/xpwer1.php
[Mon Feb 02 02:59:26.757004 2026] [:error] [pid 51610:tid 51628] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Mon Feb 02 02:59:26.961390 2026] [:error] [pid 51610:tid 51631] [client 20.207.194.159:38714] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Feb 02 02:59:27.101360 2026] [:error] [pid 51610:tid 51637] [client 20.207.194.159:38714] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aX-ij97GFdNFAqImMQBhfwAAAVc"]
[Mon Feb 02 02:59:27.413273 2026] [:error] [pid 8877:tid 8881] [client 20.207.194.159:23530] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aX-ij1jWRgIEkmjg6ou0ygAAAsA"]
[Mon Feb 02 02:59:27.848614 2026] [:error] [pid 29578:tid 29593] [client 20.207.194.159:3418] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aX-ij0wa4IUBrS8Q04EMjwAAAYs"]
[Mon Feb 02 02:59:28.184876 2026] [:error] [pid 8877:tid 8902] [client 20.207.194.159:25289] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aX-ikFjWRgIEkmjg6ou0zQAAAtU"]
[Mon Feb 02 02:59:28.674886 2026] [:error] [pid 8877:tid 8887] [client 20.207.194.159:39804] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aX-ikFjWRgIEkmjg6ou0zgAAAsY"]
[Mon Feb 02 02:59:29.052183 2026] [:error] [pid 8877:tid 8883] [client 20.207.194.159:39781] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aX-ikVjWRgIEkmjg6ou0zwAAAsI"]
[Mon Feb 02 02:59:29.407560 2026] [:error] [pid 10616:tid 10628] [client 20.207.194.159:14977] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aX-ikWd8pZdmVx6pUp5B4AAAAMg"]
[Mon Feb 02 02:59:29.715250 2026] [:error] [pid 29578:tid 29586] [client 20.207.194.159:39746] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aX-ikUwa4IUBrS8Q04EMlQAAAYQ"]
[Mon Feb 02 02:59:30.103136 2026] [:error] [pid 29578:tid 29588] [client 20.207.194.159:38702] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ikkwa4IUBrS8Q04EMlgAAAYY"]
[Mon Feb 02 02:59:30.409663 2026] [:error] [pid 29578:tid 29590] [client 20.207.194.159:3962] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ikkwa4IUBrS8Q04EMmAAAAYg"]
[Mon Feb 02 02:59:30.720455 2026] [:error] [pid 29578:tid 29606] [client 20.207.194.159:3424] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ikkwa4IUBrS8Q04EMmQAAAZg"]
[Mon Feb 02 02:59:31.156391 2026] [:error] [pid 8780:tid 8809] [client 20.207.194.159:25742] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ik6G6IrMzWSzSdUfi9QAAAlg"]
[Mon Feb 02 02:59:31.503703 2026] [:error] [pid 8752:tid 8761] [client 20.207.194.159:3925] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ik0FFilE3DptZFcpC5AAAAgc"]
[Mon Feb 02 02:59:31.875490 2026] [:error] [pid 8965:tid 8976] [client 20.207.194.159:25319] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ik-NHEHhgRhn3G7RoPQAAAwg"]
[Mon Feb 02 02:59:32.197749 2026] [:error] [pid 8780:tid 8807] [client 20.207.194.159:20138] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ilKG6IrMzWSzSdUfi9wAAAlY"]
[Mon Feb 02 02:59:32.540937 2026] [:error] [pid 29578:tid 29594] [client 20.207.194.159:15326] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aX-ilEwa4IUBrS8Q04EMmgAAAYw"]
[Mon Feb 02 02:59:33.094205 2026] [:error] [pid 29578:tid 29585] [client 20.207.194.159:38713] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aX-ilUwa4IUBrS8Q04EMmwAAAYM"]
[Mon Feb 02 02:59:33.969286 2026] [:error] [pid 8752:tid 8757] [client 20.207.194.159:15301] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aX-ilUFFilE3DptZFcpC6QAAAgM"]
[Mon Feb 02 02:59:34.405795 2026] [:error] [pid 29578:tid 29596] [client 20.207.194.159:39749] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aX-ilkwa4IUBrS8Q04EMngAAAY4"]
[Mon Feb 02 02:59:34.856073 2026] [:error] [pid 8752:tid 8777] [client 20.207.194.159:25276] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aX-ilkFFilE3DptZFcpC6gAAAhc"]
[Mon Feb 02 02:59:35.191310 2026] [:error] [pid 10509:tid 10588] [client 20.207.194.159:39777] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aX-il1MNpJBihOJgwVtP0QAAAJE"]
[Mon Feb 02 02:59:35.716385 2026] [:error] [pid 8965:tid 8974] [client 20.207.194.159:3955] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aX-il-NHEHhgRhn3G7RoQQAAAwY"]
[Mon Feb 02 02:59:36.098056 2026] [:error] [pid 8965:tid 8990] [client 20.207.194.159:39772] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aX-imONHEHhgRhn3G7RoQgAAAxY"]
[Mon Feb 02 02:59:36.567359 2026] [:error] [pid 10509:tid 10572] [client 20.207.194.159:25279] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aX-imFMNpJBihOJgwVtP1QAAAIE"]
[Mon Feb 02 02:59:36.927589 2026] [:error] [pid 10509:tid 10583] [client 20.207.194.159:16853] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aX-imFMNpJBihOJgwVtP1gAAAIw"]
[Mon Feb 02 02:59:37.736883 2026] [:error] [pid 29578:tid 29582] [client 20.207.194.159:25743] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aX-imUwa4IUBrS8Q04EMpAAAAYA"]
[Mon Feb 02 02:59:38.096534 2026] [:error] [pid 29578:tid 29605] [client 20.207.194.159:31667] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aX-imkwa4IUBrS8Q04EMpQAAAZc"]
[Mon Feb 02 02:59:38.498968 2026] [:error] [pid 10616:tid 10641] [client 20.207.194.159:3437] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aX-immd8pZdmVx6pUp5B4gAAANU"]
[Mon Feb 02 02:59:38.936877 2026] [:error] [pid 29578:tid 29601] [client 20.207.194.159:3921] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss1.php"] [unique_id "aX-imkwa4IUBrS8Q04EMqwAAAZM"]
[Mon Feb 02 02:59:39.650619 2026] [:error] [pid 51610:tid 51614] [client 20.207.194.159:3407] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss1.php"] [unique_id "aX-im97GFdNFAqImMQBhggAAAUA"]
[Mon Feb 02 02:59:39.991477 2026] [:error] [pid 10509:tid 10584] [client 20.207.194.159:20105] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss1.php"] [unique_id "aX-im1MNpJBihOJgwVtP2wAAAI0"]
[Mon Feb 02 02:59:40.396367 2026] [:error] [pid 29578:tid 29589] [client 20.207.194.159:3412] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss1.php"] [unique_id "aX-inEwa4IUBrS8Q04EMrwAAAYc"]
[Mon Feb 02 02:59:40.792607 2026] [:error] [pid 29578:tid 29606] [client 20.207.194.159:38716] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aX-inEwa4IUBrS8Q04EMsgAAAZg"]
[Mon Feb 02 02:59:41.609316 2026] [:error] [pid 29578:tid 29591] [client 20.207.194.159:38704] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aX-inUwa4IUBrS8Q04EMtQAAAYk"]
[Mon Feb 02 02:59:41.952321 2026] [:error] [pid 10616:tid 10624] [client 20.207.194.159:3410] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aX-inWd8pZdmVx6pUp5B5AAAAMQ"]
[Mon Feb 02 02:59:42.304823 2026] [:error] [pid 51610:tid 51628] [client 20.207.194.159:39791] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aX-int7GFdNFAqImMQBhhQAAAU4"]
[Mon Feb 02 02:59:42.701470 2026] [:error] [pid 51610:tid 51631] [client 20.207.194.159:25340] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aX-int7GFdNFAqImMQBhhgAAAVE"]
[Mon Feb 02 02:59:43.481758 2026] [:error] [pid 10509:tid 10585] [client 20.207.194.159:20149] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aX-in1MNpJBihOJgwVtP3gAAAI4"]
[Mon Feb 02 02:59:44.096271 2026] [:error] [pid 8877:tid 8882] [client 20.207.194.159:25774] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aX-ioFjWRgIEkmjg6ou02gAAAsE"]
[Mon Feb 02 02:59:44.558098 2026] [:error] [pid 29578:tid 29588] [client 20.207.194.159:3415] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aX-ioEwa4IUBrS8Q04EMxAAAAYY"]
[Mon Feb 02 02:59:45.088183 2026] [:error] [pid 10509:tid 10577] [client 20.207.194.159:38682] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aX-ioVMNpJBihOJgwVtP4AAAAIY"]
[Mon Feb 02 02:59:45.561067 2026] [:error] [pid 29578:tid 29592] [client 20.207.194.159:25246] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aX-ioUwa4IUBrS8Q04EMxwAAAYo"]
[Mon Feb 02 02:59:46.024845 2026] [:error] [pid 10509:tid 10584] [client 20.207.194.159:39753] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aX-iolMNpJBihOJgwVtP4wAAAI0"]
[Mon Feb 02 02:59:46.497852 2026] [:error] [pid 8965:tid 8983] [client 20.207.194.159:3926] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/code/"] [unique_id "aX-iouNHEHhgRhn3G7RoRwAAAw8"]
[Mon Feb 02 02:59:47.091332 2026] [:error] [pid 10616:tid 10621] [client 20.207.194.159:25238] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aX-io2d8pZdmVx6pUp5B6QAAAME"]
[Mon Feb 02 02:59:47.719166 2026] [:error] [pid 8965:tid 8976] [client 20.207.194.159:25759] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aX-io-NHEHhgRhn3G7RoSwAAAwg"]
[Mon Feb 02 02:59:48.037884 2026] [:error] [pid 10616:tid 10631] [client 20.207.194.159:31630] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aX-ipGd8pZdmVx6pUp5B6gAAAMs"]
[Mon Feb 02 02:59:48.447441 2026] [:error] [pid 10616:tid 10623] [client 20.207.194.159:39747] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aX-ipGd8pZdmVx6pUp5B7AAAAMM"]
[Mon Feb 02 02:59:50.021663 2026] [:error] [pid 29578:tid 29603] [client 20.207.194.159:3634] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aX-ipkwa4IUBrS8Q04EMzQAAAZU"]
[Mon Feb 02 02:59:50.609252 2026] [:error] [pid 8752:tid 8755] [client 20.207.194.159:39782] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aX-ipkFFilE3DptZFcpC7wAAAgE"]
[Mon Feb 02 02:59:51.153094 2026] [:error] [pid 10509:tid 10575] [client 20.207.194.159:25291] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aX-ip1MNpJBihOJgwVtP6AAAAIQ"]
[Mon Feb 02 02:59:51.514930 2026] [:error] [pid 8877:tid 8893] [client 20.207.194.159:38707] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aX-ip1jWRgIEkmjg6ou03QAAAsw"]
[Mon Feb 02 02:59:52.098400 2026] [:error] [pid 29578:tid 29587] [client 20.207.194.159:3139] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aX-iqEwa4IUBrS8Q04EM0wAAAYU"]
[Mon Feb 02 02:59:52.722866 2026] [:error] [pid 8877:tid 8896] [client 20.207.194.159:39763] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aX-iqFjWRgIEkmjg6ou03gAAAs8"]
[Mon Feb 02 02:59:53.539422 2026] [:error] [pid 10509:tid 10577] [client 20.207.194.159:20150] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aX-iqVMNpJBihOJgwVtP7gAAAIY"]
[Mon Feb 02 02:59:53.992472 2026] [:error] [pid 8965:tid 8986] [client 20.207.194.159:39779] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aX-iqeNHEHhgRhn3G7RoTgAAAxI"]
[Mon Feb 02 02:59:54.517131 2026] [:error] [pid 2033:tid 2048] [client 20.207.194.159:22170] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX-iqvF7B4oR5nK3T_NetwAAAQ0"]
[Mon Feb 02 02:59:54.863177 2026] [:error] [pid 10509:tid 10581] [client 20.207.194.159:20124] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX-iqlMNpJBihOJgwVtP8QAAAIo"]
[Mon Feb 02 02:59:55.219193 2026] [:error] [pid 8965:tid 8985] [client 20.207.194.159:3491] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX-iq-NHEHhgRhn3G7RoUAAAAxE"]
[Mon Feb 02 02:59:55.522764 2026] [:error] [pid 8752:tid 8773] [client 20.207.194.159:38667] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aX-iq0FFilE3DptZFcpC8wAAAhM"]
[Mon Feb 02 02:59:55.844437 2026] [:error] [pid 10616:tid 10629] [client 20.207.194.159:38668] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aX-iq2d8pZdmVx6pUp5B9QAAAMk"]
[Mon Feb 02 02:59:56.266732 2026] [:error] [pid 10509:tid 10572] [client 20.207.194.159:38662] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aX-irFMNpJBihOJgwVtP8wAAAIE"]
[Mon Feb 02 02:59:56.569411 2026] [:error] [pid 10616:tid 10627] [client 20.207.194.159:25304] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aX-irGd8pZdmVx6pUp5B9wAAAMc"]
[Mon Feb 02 02:59:57.033906 2026] [:error] [pid 8752:tid 8757] [client 20.207.194.159:3924] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aX-irUFFilE3DptZFcpC9AAAAgM"]
[Mon Feb 02 02:59:57.426389 2026] [:error] [pid 10509:tid 10591] [client 20.207.194.159:3400] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aX-irVMNpJBihOJgwVtP9gAAAJQ"]
[Mon Feb 02 02:59:57.815664 2026] [:error] [pid 10616:tid 10640] [client 20.207.194.159:38658] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aX-irWd8pZdmVx6pUp5B-wAAANQ"]
[Mon Feb 02 02:59:58.427274 2026] [:error] [pid 8781:tid 8844] [client 20.207.194.159:25226] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aX-iri8oB7b2tIX_lkWOfAAAApY"]
[Mon Feb 02 02:59:58.816922 2026] [:error] [pid 10509:tid 10580] [client 20.207.194.159:25748] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aX-irlMNpJBihOJgwVtP9wAAAIk"]
[Mon Feb 02 02:59:59.227146 2026] [:error] [pid 10509:tid 10575] [client 20.207.194.159:3455] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aX-ir1MNpJBihOJgwVtP-AAAAIQ"]
[Mon Feb 02 02:59:59.639945 2026] [:error] [pid 10509:tid 10585] [client 20.207.194.159:25254] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aX-ir1MNpJBihOJgwVtP-QAAAI4"]
[Mon Feb 02 03:00:00.108853 2026] [:error] [pid 10509:tid 10590] [client 20.207.194.159:38687] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aX-isFMNpJBihOJgwVtP-wAAAJM"]
[Mon Feb 02 03:00:00.634727 2026] [:error] [pid 10509:tid 10572] [client 20.207.194.159:16890] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aX-isFMNpJBihOJgwVtP_gAAAIE"]
[Mon Feb 02 03:00:01.252077 2026] [:error] [pid 8780:tid 8791] [client 20.207.194.159:65498] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aX-isaG6IrMzWSzSdUfjBwAAAkY"]
[Mon Feb 02 03:00:01.600212 2026] [:error] [pid 29578:tid 29585] [client 20.207.194.159:25773] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aX-isUwa4IUBrS8Q04EM3wAAAYM"]
[Mon Feb 02 03:00:02.340139 2026] [:error] [pid 51610:tid 51616] [client 20.207.194.159:25253] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aX-ist7GFdNFAqImMQBhjwAAAUI"]
[Mon Feb 02 03:00:02.723860 2026] [:error] [pid 8965:tid 8984] [client 20.207.194.159:25225] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aX-isuNHEHhgRhn3G7RoVgAAAxA"]
[Mon Feb 02 03:00:03.281742 2026] [:error] [pid 8780:tid 8785] [client 20.207.194.159:20120] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aX-is6G6IrMzWSzSdUfjCgAAAkA"]
[Mon Feb 02 03:00:03.898695 2026] [:error] [pid 8781:tid 8845] [client 20.207.194.159:25780] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aX-isy8oB7b2tIX_lkWOhAAAApc"]
[Mon Feb 02 03:00:04.261623 2026] [:error] [pid 29578:tid 29589] [client 20.207.194.159:25278] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aX-itEwa4IUBrS8Q04EM5AAAAYc"]
[Mon Feb 02 03:00:04.661936 2026] [:error] [pid 2033:tid 2053] [client 20.207.194.159:20140] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aX-itPF7B4oR5nK3T_NevAAAARI"]
[Mon Feb 02 03:00:05.144424 2026] [:error] [pid 8877:tid 8903] [client 20.207.194.159:25303] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aX-itVjWRgIEkmjg6ou07gAAAtY"]
[Mon Feb 02 03:00:05.632757 2026] [:error] [pid 2033:tid 2040] [client 20.207.194.159:3958] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aX-itfF7B4oR5nK3T_NewAAAAQU"]
[Mon Feb 02 03:00:06.039818 2026] [:error] [pid 10509:tid 10583] [client 20.207.194.159:4071] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aX-itlMNpJBihOJgwVtQAgAAAIw"]
[Mon Feb 02 03:00:06.419403 2026] [:error] [pid 2033:tid 2042] [client 20.207.194.159:25752] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aX-itvF7B4oR5nK3T_NewwAAAQc"]
[Mon Feb 02 03:00:06.815148 2026] [:error] [pid 2033:tid 2037] [client 20.207.194.159:14636] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aX-itvF7B4oR5nK3T_NexAAAAQI"]
[Mon Feb 02 03:00:07.136366 2026] [:error] [pid 29578:tid 29602] [client 20.207.194.159:16853] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aX-it0wa4IUBrS8Q04EM6AAAAZQ"]
[Mon Feb 02 03:00:07.578078 2026] [:error] [pid 8780:tid 8793] [client 20.207.194.159:3461] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aX-it6G6IrMzWSzSdUfjCwAAAkg"]
[Mon Feb 02 03:00:08.118338 2026] [:error] [pid 8780:tid 8788] [client 20.207.194.159:3918] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aX-iuKG6IrMzWSzSdUfjDQAAAkM"]
[Mon Feb 02 03:00:08.595921 2026] [:error] [pid 8780:tid 8805] [client 20.207.194.159:20135] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aX-iuKG6IrMzWSzSdUfjDwAAAlQ"]
[Mon Feb 02 03:00:09.117934 2026] [:error] [pid 10616:tid 10639] [client 20.207.194.159:3910] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aX-iuWd8pZdmVx6pUp5CDAAAANM"]
[Mon Feb 02 03:00:09.629106 2026] [:error] [pid 10616:tid 10643] [client 20.207.194.159:39768] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aX-iuWd8pZdmVx6pUp5CDgAAANc"]
[Mon Feb 02 03:00:10.717230 2026] [:error] [pid 2033:tid 2047] [client 20.207.194.159:3501] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aX-iuvF7B4oR5nK3T_NeyQAAAQw"]
[Mon Feb 02 03:00:11.121436 2026] [:error] [pid 8965:tid 8983] [client 20.207.194.159:3480] [client 20.207.194.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aX-iu-NHEHhgRhn3G7RoXAAAAw8"]
[Mon Feb 02 03:00:11.441223 2026] [:error] [pid 10509:tid 10579] [client 20.207.194.159:15031] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aX-iu1MNpJBihOJgwVtQCQAAAIg"]
[Mon Feb 02 03:00:11.905631 2026] [:error] [pid 8965:tid 8992] [client 20.207.194.159:29596] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aX-iu-NHEHhgRhn3G7RoXQAAAxg"]
[Mon Feb 02 03:00:12.283385 2026] [:error] [pid 10509:tid 10589] [client 20.207.194.159:39792] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aX-ivFMNpJBihOJgwVtQDQAAAJI"]
[Mon Feb 02 03:00:12.623354 2026] [:error] [pid 10616:tid 10623] [client 20.207.194.159:14601] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aX-ivGd8pZdmVx6pUp5CFwAAAMM"]
[Mon Feb 02 03:00:12.958962 2026] [:error] [pid 8781:tid 8821] [client 20.207.194.159:23501] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aX-ivC8oB7b2tIX_lkWOhwAAAok"]
[Mon Feb 02 03:00:13.322948 2026] [:error] [pid 10509:tid 10582] [client 20.207.194.159:3946] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aX-ivVMNpJBihOJgwVtQEAAAAIs"]
[Mon Feb 02 03:00:14.355102 2026] [:error] [pid 10616:tid 10638] [client 20.207.194.159:29575] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jane.php"] [unique_id "aX-ivmd8pZdmVx6pUp5CGgAAANI"]
[Mon Feb 02 03:00:14.913677 2026] [:error] [pid 10616:tid 10641] [client 20.207.194.159:65461] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aX-ivmd8pZdmVx6pUp5CHQAAANU"]
[Mon Feb 02 03:00:15.252840 2026] [:error] [pid 10616:tid 10644] [client 20.207.194.159:38697] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aX-iv2d8pZdmVx6pUp5CHwAAANg"]
[Mon Feb 02 03:00:15.718611 2026] [:error] [pid 8752:tid 8761] [client 20.207.194.159:14617] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aX-iv0FFilE3DptZFcpC-gAAAgc"]
[Mon Feb 02 03:00:16.276117 2026] [:error] [pid 8781:tid 8822] [client 20.207.194.159:25266] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aX-iwC8oB7b2tIX_lkWOiQAAAoo"]
[Mon Feb 02 03:00:16.640659 2026] [:error] [pid 10616:tid 10628] [client 20.207.194.159:3518] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aX-iwGd8pZdmVx6pUp5CJgAAAMg"]
[Mon Feb 02 03:00:17.369017 2026] [:error] [pid 8752:tid 8768] [client 20.207.194.159:25238] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aX-iwUFFilE3DptZFcpC_wAAAg4"]
[Mon Feb 02 03:00:17.699797 2026] [:error] [pid 8752:tid 8757] [client 20.207.194.159:25770] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aX-iwUFFilE3DptZFcpDAAAAAgM"]
[Mon Feb 02 03:00:18.199101 2026] [:error] [pid 8781:tid 8824] [client 20.207.194.159:42884] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aX-iwi8oB7b2tIX_lkWOigAAAow"]
[Mon Feb 02 03:00:18.652223 2026] [:error] [pid 29578:tid 29584] [client 20.207.194.159:3965] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aX-iwkwa4IUBrS8Q04EM7gAAAYI"]
[Mon Feb 02 03:00:19.239519 2026] [:error] [pid 10616:tid 10623] [client 20.207.194.159:29619] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aX-iw2d8pZdmVx6pUp5CKwAAAMM"]
[Mon Feb 02 03:00:19.747560 2026] [:error] [pid 10616:tid 10638] [client 20.207.194.159:39790] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aX-iw2d8pZdmVx6pUp5CLQAAANI"]
[Mon Feb 02 03:00:20.113345 2026] [:error] [pid 8780:tid 8793] [client 20.207.194.159:14020] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aX-ixKG6IrMzWSzSdUfjFQAAAkg"]
[Mon Feb 02 03:00:20.514069 2026] [:error] [pid 8965:tid 8983] [client 20.207.194.159:38685] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aX-ixONHEHhgRhn3G7RoaAAAAw8"]
[Mon Feb 02 03:00:21.061319 2026] [:error] [pid 8965:tid 8981] [client 20.207.194.159:3775] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aX-ixeNHEHhgRhn3G7RoawAAAw0"]
[Mon Feb 02 03:00:21.478294 2026] [:error] [pid 10616:tid 10644] [client 20.207.194.159:25234] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aX-ixWd8pZdmVx6pUp5CLwAAANg"]
[Mon Feb 02 03:00:21.854104 2026] [:error] [pid 8965:tid 8979] [client 20.207.194.159:3470] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aX-ixeNHEHhgRhn3G7RobwAAAws"]
[Mon Feb 02 03:00:22.219190 2026] [:error] [pid 10509:tid 10589] [client 20.207.194.159:21167] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aX-ixlMNpJBihOJgwVtQFAAAAJI"]
[Mon Feb 02 03:00:22.571963 2026] [:error] [pid 10509:tid 10586] [client 20.207.194.159:25241] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aX-ixlMNpJBihOJgwVtQFQAAAI8"]
[Mon Feb 02 03:00:23.110081 2026] [:error] [pid 29578:tid 29592] [client 20.207.194.159:3462] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aX-ix0wa4IUBrS8Q04EM8AAAAYo"]
[Mon Feb 02 03:00:23.594976 2026] [:error] [pid 10616:tid 10623] [client 20.207.194.159:3481] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aX-ix2d8pZdmVx6pUp5CMQAAAMM"]
[Mon Feb 02 03:00:23.994759 2026] [:error] [pid 51610:tid 51627] [client 20.207.194.159:4072] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aX-ix97GFdNFAqImMQBhnQAAAU0"]
[Mon Feb 02 03:00:24.349027 2026] [:error] [pid 2033:tid 2044] [client 20.207.194.159:16882] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aX-iyPF7B4oR5nK3T_Ne0QAAAQk"]
[Mon Feb 02 03:00:34.198075 2026] [:error] [pid 50401:tid 50406] [client 20.207.194.159:21136] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Feb 02 03:00:34.891818 2026] [:error] [pid 50402:tid 50455] [client 20.207.194.159:3767] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Feb 02 03:00:35.593024 2026] [:error] [pid 50402:tid 50455] [client 20.207.194.159:3767] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Feb 02 03:00:35.732824 2026] [:error] [pid 50402:tid 50454] [client 20.207.194.159:3767] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs18.php
[Mon Feb 02 03:00:36.593481 2026] [:error] [pid 50402:tid 50433] [client 20.207.194.159:3767] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aX-i1KGYkRpifxbQv9_LJQAAAME"]
[Mon Feb 02 03:00:36.937078 2026] [:error] [pid 50402:tid 50437] [client 20.207.194.159:28932] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aX-i1KGYkRpifxbQv9_LJwAAAMU"]
[Mon Feb 02 03:00:37.751083 2026] [:error] [pid 50402:tid 50446] [client 20.207.194.159:18883] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aX-i1aGYkRpifxbQv9_LKAAAAM4"]
[Mon Feb 02 03:00:38.319921 2026] [:error] [pid 50401:tid 50429] [client 20.207.194.159:18881] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aX-i1sYbnVcoK1wSIIB_bAAAAJg"]
[Mon Feb 02 03:00:38.719881 2026] [:error] [pid 50401:tid 50417] [client 20.207.194.159:44108] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aX-i1sYbnVcoK1wSIIB_bwAAAIw"]
[Mon Feb 02 03:00:39.163343 2026] [:error] [pid 50401:tid 50409] [client 20.207.194.159:19375] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aX-i18YbnVcoK1wSIIB_cgAAAIQ"]
[Mon Feb 02 03:00:39.720741 2026] [:error] [pid 50402:tid 50455] [client 20.207.194.159:26443] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aX-i16GYkRpifxbQv9_LMAAAANc"]
[Mon Feb 02 03:00:40.405662 2026] [:error] [pid 50567:tid 50581] [client 20.207.194.159:24687] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aX-i2HBao6qEj6vH6i_aawAAAEw"]
[Mon Feb 02 03:00:40.917591 2026] [:error] [pid 50402:tid 50452] [client 20.207.194.159:33178] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aX-i2KGYkRpifxbQv9_LMwAAANQ"]
[Mon Feb 02 03:00:41.351146 2026] [:error] [pid 50567:tid 50587] [client 20.207.194.159:43535] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aX-i2XBao6qEj6vH6i_acAAAAFI"]
[Mon Feb 02 03:00:41.884169 2026] [:error] [pid 50401:tid 50427] [client 20.207.194.159:42210] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aX-i2cYbnVcoK1wSIIB_fwAAAJY"]
[Mon Feb 02 03:00:42.373186 2026] [:error] [pid 50403:tid 50477] [client 20.207.194.159:26467] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aX-i2tWROwvUfZ-hCHVXTgAAARI"]
[Mon Feb 02 03:00:42.843377 2026] [:error] [pid 50403:tid 50480] [client 20.207.194.159:51839] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aX-i2tWROwvUfZ-hCHVXTwAAARU"]
[Mon Feb 02 03:00:43.324501 2026] [:error] [pid 50403:tid 50467] [client 20.207.194.159:30978] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aX-i29WROwvUfZ-hCHVXUgAAAQg"]
[Mon Feb 02 03:00:43.900085 2026] [:error] [pid 50402:tid 50447] [client 20.207.194.159:33776] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aX-i26GYkRpifxbQv9_LOQAAAM8"]
[Mon Feb 02 03:00:44.395768 2026] [:error] [pid 50403:tid 50463] [client 20.207.194.159:42182] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aX-i3NWROwvUfZ-hCHVXVQAAAQQ"]
[Mon Feb 02 03:00:45.045013 2026] [:error] [pid 50403:tid 50465] [client 20.207.194.159:17269] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aX-i3dWROwvUfZ-hCHVXVgAAAQY"]
[Mon Feb 02 03:00:45.462892 2026] [:error] [pid 50402:tid 50442] [client 20.207.194.159:42179] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aX-i3aGYkRpifxbQv9_LQQAAAMo"]
[Mon Feb 02 03:00:45.955478 2026] [:error] [pid 50402:tid 50446] [client 20.207.194.159:17271] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aX-i3aGYkRpifxbQv9_LQgAAAM4"]
[Mon Feb 02 03:00:46.419277 2026] [:error] [pid 50402:tid 50450] [client 20.207.194.159:17869] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aX-i3qGYkRpifxbQv9_LRAAAANI"]
[Mon Feb 02 03:00:46.880658 2026] [:error] [pid 50403:tid 50473] [client 20.207.194.159:17197] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aX-i3tWROwvUfZ-hCHVXXQAAAQ4"]
[Mon Feb 02 03:00:47.471496 2026] [:error] [pid 50567:tid 50574] [client 20.207.194.159:37360] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aX-i33Bao6qEj6vH6i_adQAAAEU"]
[Mon Feb 02 03:00:47.876692 2026] [:error] [pid 50403:tid 50478] [client 20.207.194.159:42884] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aX-i39WROwvUfZ-hCHVXYAAAARM"]
[Mon Feb 02 03:00:48.354139 2026] [:error] [pid 50402:tid 50447] [client 20.207.194.159:17167] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aX-i4KGYkRpifxbQv9_LRQAAAM8"]
[Mon Feb 02 03:00:48.848375 2026] [:error] [pid 50567:tid 50593] [client 20.207.194.159:26450] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aX-i4HBao6qEj6vH6i_aewAAAFg"]
[Mon Feb 02 03:00:49.353425 2026] [:error] [pid 50403:tid 50483] [client 20.207.194.159:33189] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aX-i4dWROwvUfZ-hCHVXYwAAARg"]
[Mon Feb 02 03:00:49.839146 2026] [:error] [pid 50402:tid 50444] [client 20.207.194.159:19753] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aX-i4aGYkRpifxbQv9_LSQAAAMw"]
[Mon Feb 02 03:00:50.373223 2026] [:error] [pid 50567:tid 50584] [client 20.207.194.159:31033] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aX-i4nBao6qEj6vH6i_aggAAAE8"]
[Mon Feb 02 03:00:51.013847 2026] [:error] [pid 50403:tid 50464] [client 20.207.194.159:23453] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aX-i49WROwvUfZ-hCHVXZQAAAQU"]
[Mon Feb 02 03:00:51.382115 2026] [:error] [pid 50507:tid 50532] [client 20.207.194.159:42186] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aX-i48aUnsPeE1TDPmRuIwAAABM"]
[Mon Feb 02 03:00:52.034201 2026] [:error] [pid 50567:tid 50588] [client 20.207.194.159:19837] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aX-i5HBao6qEj6vH6i_aiQAAAFM"]
[Mon Feb 02 03:00:52.577696 2026] [:error] [pid 50507:tid 50534] [client 20.207.194.159:28298] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aX-i5MaUnsPeE1TDPmRuJQAAABU"]
[Mon Feb 02 03:00:52.988751 2026] [:error] [pid 50403:tid 50474] [client 20.207.194.159:19823] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aX-i5NWROwvUfZ-hCHVXZwAAAQ8"]
[Mon Feb 02 03:00:53.526488 2026] [:error] [pid 50507:tid 50518] [client 20.207.194.159:15098] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aX-i5caUnsPeE1TDPmRuKAAAAAU"]
[Mon Feb 02 03:00:54.468593 2026] [:error] [pid 50507:tid 50517] [client 20.207.194.159:44709] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aX-i5saUnsPeE1TDPmRuKwAAAAQ"]
[Mon Feb 02 03:00:54.926484 2026] [:error] [pid 50567:tid 50579] [client 20.207.194.159:23444] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aX-i5nBao6qEj6vH6i_ajwAAAEo"]
[Mon Feb 02 03:00:55.398068 2026] [:error] [pid 50567:tid 50593] [client 20.207.194.159:22236] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aX-i53Bao6qEj6vH6i_akgAAAFg"]
[Mon Feb 02 03:00:56.214063 2026] [:error] [pid 50567:tid 50589] [client 20.207.194.159:34360] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aX-i6HBao6qEj6vH6i_akwAAAFQ"]
[Mon Feb 02 03:00:56.668497 2026] [:error] [pid 50402:tid 50443] [client 20.207.194.159:33760] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aX-i6KGYkRpifxbQv9_LTwAAAMs"]
[Mon Feb 02 03:00:57.336919 2026] [:error] [pid 50403:tid 50472] [client 20.207.194.159:23454] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aX-i6dWROwvUfZ-hCHVXcgAAAQ0"]
[Mon Feb 02 03:00:58.029775 2026] [:error] [pid 50403:tid 50480] [client 20.207.194.159:37418] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aX-i6tWROwvUfZ-hCHVXdAAAARU"]
[Mon Feb 02 03:00:58.418519 2026] [:error] [pid 50403:tid 50478] [client 20.207.194.159:18678] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aX-i6tWROwvUfZ-hCHVXeAAAARM"]
[Mon Feb 02 03:00:59.101977 2026] [:error] [pid 50403:tid 50463] [client 20.207.194.159:23441] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aX-i69WROwvUfZ-hCHVXfAAAAQQ"]
[Mon Feb 02 03:00:59.571484 2026] [:error] [pid 50402:tid 50450] [client 20.207.194.159:37417] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aX-i66GYkRpifxbQv9_LUwAAANI"]
[Mon Feb 02 03:01:00.324876 2026] [:error] [pid 50567:tid 50580] [client 20.207.194.159:33770] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aX-i7HBao6qEj6vH6i_amQAAAEs"]
[Mon Feb 02 03:01:00.822433 2026] [:error] [pid 50402:tid 50432] [client 20.207.194.159:44699] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aX-i7KGYkRpifxbQv9_LVwAAAMA"]
[Mon Feb 02 03:01:01.296621 2026] [:error] [pid 50403:tid 50473] [client 20.207.194.159:4018] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aX-i7dWROwvUfZ-hCHVXgAAAAQ4"]
[Mon Feb 02 03:01:01.867801 2026] [:error] [pid 50401:tid 50424] [client 20.207.194.159:3925] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aX-i7cYbnVcoK1wSIIB_kwAAAJM"]
[Mon Feb 02 03:01:02.674871 2026] [:error] [pid 50567:tid 50581] [client 20.207.194.159:23424] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aX-i7nBao6qEj6vH6i_aoQAAAEw"]
[Mon Feb 02 03:01:03.013870 2026] [:error] [pid 50567:tid 50585] [client 20.207.194.159:18656] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aX-i73Bao6qEj6vH6i_apAAAAFA"]
[Mon Feb 02 03:01:03.394807 2026] [:error] [pid 50567:tid 50593] [client 20.207.194.159:37379] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aX-i73Bao6qEj6vH6i_apQAAAFg"]
[Mon Feb 02 03:01:03.918669 2026] [:error] [pid 50402:tid 50439] [client 20.207.194.159:44691] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/temp.php/wp-update.php"] [unique_id "aX-i76GYkRpifxbQv9_LWwAAAMc"]
[Mon Feb 02 03:01:04.318515 2026] [:error] [pid 50567:tid 50572] [client 20.207.194.159:19827] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aX-i8HBao6qEj6vH6i_aqQAAAEM"]
[Mon Feb 02 03:01:05.797391 2026] [:error] [pid 50402:tid 50446] [client 20.207.194.159:17905] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aX-i8aGYkRpifxbQv9_LXwAAAM4"]
[Mon Feb 02 03:01:06.451854 2026] [:error] [pid 50402:tid 50456] [client 20.207.194.159:4030] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aX-i8qGYkRpifxbQv9_LYAAAANg"]
[Mon Feb 02 03:01:07.180064 2026] [:error] [pid 50401:tid 50425] [client 20.207.194.159:19836] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aX-i88YbnVcoK1wSIIB_ngAAAJQ"]
[Mon Feb 02 03:01:08.515600 2026] [:error] [pid 50507:tid 50522] [client 20.207.194.159:4023] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aX-i9MaUnsPeE1TDPmRuPQAAAAk"]
[Mon Feb 02 03:01:09.929067 2026] [:error] [pid 50507:tid 50530] [client 20.207.194.159:24687] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aX-i9caUnsPeE1TDPmRuQQAAABE"]
[Mon Feb 02 03:01:10.421174 2026] [:error] [pid 50507:tid 50518] [client 20.207.194.159:19752] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aX-i9saUnsPeE1TDPmRuQwAAAAU"]
[Mon Feb 02 03:01:10.952850 2026] [:error] [pid 50507:tid 50513] [client 20.207.194.159:34315] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aX-i9saUnsPeE1TDPmRuRQAAAAA"]
[Mon Feb 02 03:01:11.692707 2026] [:error] [pid 50403:tid 50480] [client 20.207.194.159:65298] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aX-i99WROwvUfZ-hCHVXjQAAARU"]
[Mon Feb 02 03:01:12.448889 2026] [:error] [pid 50402:tid 50438] [client 20.207.194.159:55079] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aX-i-KGYkRpifxbQv9_LZgAAAMY"]
[Mon Feb 02 03:01:13.024329 2026] [:error] [pid 50507:tid 50530] [client 20.207.194.159:15089] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aX-i-caUnsPeE1TDPmRuTQAAABE"]
[Mon Feb 02 03:01:13.526206 2026] [:error] [pid 50567:tid 50572] [client 20.207.194.159:4005] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aX-i-XBao6qEj6vH6i_auwAAAEM"]
[Mon Feb 02 03:01:14.169082 2026] [:error] [pid 50401:tid 50420] [client 20.207.194.159:51020] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aX-i-sYbnVcoK1wSIIB_rgAAAI8"]
[Mon Feb 02 03:01:14.956746 2026] [:error] [pid 50403:tid 50482] [client 20.207.194.159:36129] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aX-i-tWROwvUfZ-hCHVXlQAAARc"]
[Mon Feb 02 03:01:15.421369 2026] [:error] [pid 50401:tid 50417] [client 20.207.194.159:14665] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aX-i-8YbnVcoK1wSIIB_uQAAAIw"]
[Mon Feb 02 03:01:16.033482 2026] [:error] [pid 50401:tid 50418] [client 20.207.194.159:65309] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aX-i_MYbnVcoK1wSIIB_vAAAAI0"]
[Mon Feb 02 03:01:17.157219 2026] [:error] [pid 50401:tid 50426] [client 20.207.194.159:34341] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aX-i_cYbnVcoK1wSIIB_wgAAAJU"]
[Mon Feb 02 03:01:17.608855 2026] [:error] [pid 50567:tid 50585] [client 20.207.194.159:14678] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aX-i_XBao6qEj6vH6i_axAAAAFA"]
[Mon Feb 02 03:01:18.088035 2026] [:error] [pid 50402:tid 50432] [client 20.207.194.159:51048] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aX-i_qGYkRpifxbQv9_LbwAAAMA"]
[Mon Feb 02 03:01:18.505945 2026] [:error] [pid 50402:tid 50447] [client 20.207.194.159:14719] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aX-i_qGYkRpifxbQv9_LcQAAAM8"]
[Mon Feb 02 03:01:19.134716 2026] [:error] [pid 50507:tid 50518] [client 20.207.194.159:34313] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aX-i_8aUnsPeE1TDPmRuVgAAAAU"]
[Mon Feb 02 03:01:19.804653 2026] [:error] [pid 50401:tid 50420] [client 20.207.194.159:55089] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aX-i_8YbnVcoK1wSIIB_xwAAAI8"]
[Mon Feb 02 03:01:21.399496 2026] [:error] [pid 50567:tid 50593] [client 20.207.194.159:39296] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aX-jAXBao6qEj6vH6i_a0gAAAFg"]
[Mon Feb 02 03:01:22.917049 2026] [:error] [pid 50507:tid 50526] [client 20.207.194.159:36124] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aX-jAsaUnsPeE1TDPmRuXAAAAA0"]
[Mon Feb 02 03:01:23.429499 2026] [:error] [pid 50401:tid 50418] [client 20.207.194.159:44643] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aX-jA8YbnVcoK1wSIIB_zAAAAI0"]
[Mon Feb 02 03:01:23.976830 2026] [:error] [pid 50507:tid 50523] [client 20.207.194.159:18615] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aX-jA8aUnsPeE1TDPmRuYAAAAAo"]
[Mon Feb 02 03:01:24.564212 2026] [:error] [pid 50403:tid 50463] [client 20.207.194.159:29053] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aX-jBNWROwvUfZ-hCHVXqQAAAQQ"]
[Mon Feb 02 03:01:25.057653 2026] [:error] [pid 50401:tid 50409] [client 20.207.194.159:51067] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aX-jBcYbnVcoK1wSIIB_zwAAAIQ"]
[Mon Feb 02 03:01:25.490893 2026] [:error] [pid 50401:tid 50405] [client 20.207.194.159:34881] [client 20.207.194.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aX-jBcYbnVcoK1wSIIB_0wAAAIA"]
[Mon Feb 02 03:01:25.918005 2026] [:error] [pid 50401:tid 50426] [client 20.207.194.159:39337] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aX-jBcYbnVcoK1wSIIB_1AAAAJU"]
[Mon Feb 02 03:01:26.736235 2026] [:error] [pid 50567:tid 50588] [client 20.207.194.159:44628] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aX-jBnBao6qEj6vH6i_a2AAAAFM"]
[Mon Feb 02 03:01:27.165568 2026] [:error] [pid 50402:tid 50449] [client 20.207.194.159:16561] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aX-jB6GYkRpifxbQv9_LggAAANE"]
[Mon Feb 02 03:01:27.525444 2026] [:error] [pid 50401:tid 50419] [client 20.207.194.159:34889] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aX-jB8YbnVcoK1wSIIB_2gAAAI4"]
[Mon Feb 02 03:01:28.157489 2026] [:error] [pid 50402:tid 50451] [client 20.207.194.159:29047] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aX-jCKGYkRpifxbQv9_LgwAAANM"]
[Mon Feb 02 03:01:28.514665 2026] [:error] [pid 50401:tid 50414] [client 20.207.194.159:16547] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aX-jCMYbnVcoK1wSIIB_3gAAAIk"]
[Mon Feb 02 03:01:28.949867 2026] [:error] [pid 50401:tid 50425] [client 20.207.194.159:29030] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aX-jCMYbnVcoK1wSIIB_3wAAAJQ"]
[Mon Feb 02 03:01:29.365827 2026] [:error] [pid 50403:tid 50471] [client 20.207.194.159:47983] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aX-jCdWROwvUfZ-hCHVXrgAAAQw"]
[Mon Feb 02 03:01:30.075378 2026] [:error] [pid 50403:tid 50467] [client 20.207.194.159:44649] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/PWN.php"] [unique_id "aX-jCtWROwvUfZ-hCHVXsAAAAQg"]
[Mon Feb 02 03:01:30.465240 2026] [:error] [pid 50507:tid 50524] [client 20.207.194.159:39849] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/PWN.php"] [unique_id "aX-jCsaUnsPeE1TDPmRuagAAAAs"]
[Mon Feb 02 03:01:30.796149 2026] [:error] [pid 50403:tid 50482] [client 20.207.194.159:27035] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/PWN.php"] [unique_id "aX-jCtWROwvUfZ-hCHVXswAAARc"]
[Mon Feb 02 03:01:31.361344 2026] [:error] [pid 50567:tid 50577] [client 20.207.194.159:32646] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/PWN.php"] [unique_id "aX-jC3Bao6qEj6vH6i_a3QAAAEg"]
[Mon Feb 02 03:01:31.934977 2026] [:error] [pid 50403:tid 50475] [client 20.207.194.159:32695] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aX-jC9WROwvUfZ-hCHVXtQAAARA"]
[Mon Feb 02 03:01:32.673605 2026] [:error] [pid 50403:tid 50471] [client 20.207.194.159:27056] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aX-jDNWROwvUfZ-hCHVXuAAAAQw"]
[Mon Feb 02 03:01:33.624130 2026] [:error] [pid 50402:tid 50454] [client 20.207.194.159:32687] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aX-jDaGYkRpifxbQv9_LjQAAANY"]
[Mon Feb 02 03:01:34.284009 2026] [:error] [pid 50402:tid 50442] [client 20.207.194.159:34920] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aX-jDqGYkRpifxbQv9_LjwAAAMo"]
[Mon Feb 02 03:01:34.669441 2026] [:error] [pid 50403:tid 50479] [client 20.207.194.159:62582] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws44.php"] [unique_id "aX-jDtWROwvUfZ-hCHVXwAAAARQ"]
[Mon Feb 02 03:01:35.132167 2026] [:error] [pid 50567:tid 50571] [client 20.207.194.159:39772] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws44.php"] [unique_id "aX-jD3Bao6qEj6vH6i_a3wAAAEI"]
[Mon Feb 02 03:01:35.818745 2026] [:error] [pid 50567:tid 50573] [client 20.207.194.159:20648] [client 20.207.194.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws44.php"] [unique_id "aX-jD3Bao6qEj6vH6i_a4QAAAEQ"]
[Mon Feb 02 03:01:36.420034 2026] [:error] [pid 50567:tid 50577] [client 20.207.194.159:3222] File does not exist: /usr/local/apache/htdocs/suspended-page/ws44.php
[Mon Feb 02 03:01:36.559593 2026] [:error] [pid 50567:tid 50574] [client 20.207.194.159:3222] File does not exist: /usr/local/apache/htdocs/suspended-page/ws48.php
[Mon Feb 02 04:47:27.648714 2026] [:error] [pid 63033:tid 63109] [client 45.130.83.164:58269] [client 45.130.83.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.130.83.164, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aX-73_eMX2QyIh3K16oVTgAAAFI"]
[Mon Feb 02 04:47:27.654180 2026] [:error] [pid 63033:tid 63109] [client 45.130.83.164:58269] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 02 04:47:31.085814 2026] [:error] [pid 63033:tid 63092] [client 45.130.83.164:58269] [client 45.130.83.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aX-74_eMX2QyIh3K16oVggAAAEE"]
[Mon Feb 02 05:18:32.020369 2026] [:error] [pid 63032:tid 63065] [client 138.91.34.29:35227] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Feb 02 05:36:29.163915 2026] [:error] [pid 33612:tid 33628] [client 43.157.95.131:42230] [client 43.157.95.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aX_HXctFn80qQEmo5Qo-fgAAAQ4"]
[Mon Feb 02 06:10:56.307668 2026] [:error] [pid 46008:tid 46016] [client 60.188.57.0:35782] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aX_PcCRa52iYn7SlSMnpOQAAAUY"]
[Mon Feb 02 07:59:01.286770 2026] [:error] [pid 46008:tid 46014] [client 49.51.183.220:41134] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aX_oxSRa52iYn7SlSMn_bgAAAUQ"]
[Mon Feb 02 11:49:13.303981 2026] [:error] [pid 63153:tid 63175] [client 185.241.211.8:64254] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYAeuXC9GXHnmLkdgdkZlQAAAM4"]
[Mon Feb 02 11:49:13.738866 2026] [:error] [pid 57021:tid 57044] [client 185.241.211.8:64368] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYAeuf7AEpx7VcmYK3GoLQAAAlM"]
[Mon Feb 02 11:49:14.175189 2026] [:error] [pid 57022:tid 57062] [client 185.241.211.8:64539] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYAeuhnEgLMzfcurxfn0SAAAAoo"]
[Mon Feb 02 11:49:14.604010 2026] [:error] [pid 63153:tid 63178] [client 185.241.211.8:64730] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYAeunC9GXHnmLkdgdkZtwAAANE"]
[Mon Feb 02 11:49:15.035447 2026] [:error] [pid 57022:tid 57059] [client 185.241.211.8:64926] [client 185.241.211.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYAeuxnEgLMzfcurxfn0bgAAAoc"]
[Mon Feb 02 13:05:20.053619 2026] [:error] [pid 57022:tid 57071] [client 60.188.57.0:36960] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYAwkBnEgLMzfcurxfkCSwAAApM"]
[Mon Feb 02 14:44:22.506730 2026] [:error] [pid 63032:tid 63081] [client 49.51.72.236:46650] [client 49.51.72.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYBHxnyEQ1PkpebvdRibKwAAABI"]
[Mon Feb 02 23:36:42.862671 2026] [:error] [pid 57021:tid 57039] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Feb 02 23:36:43.360309 2026] [:error] [pid 57021:tid 57046] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Mon Feb 02 23:36:43.476641 2026] [:error] [pid 57021:tid 57033] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Mon Feb 02 23:36:43.594653 2026] [:error] [pid 57021:tid 57042] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Feb 02 23:36:43.712349 2026] [:error] [pid 57021:tid 57034] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Feb 02 23:36:43.834924 2026] [:error] [pid 57021:tid 57047] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Mon Feb 02 23:36:44.069651 2026] [:error] [pid 57021:tid 57025] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Feb 02 23:36:44.187903 2026] [:error] [pid 57021:tid 57045] [client 104.46.217.46:18144] File does not exist: /usr/local/apache/htdocs/suspended-page/tx1.php
[Mon Feb 02 23:36:44.301537 2026] [:error] [pid 57021:tid 57043] [client 104.46.217.46:18144] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYDEjP7AEpx7VcmYK3EbvwAAAlI"]
[Mon Feb 02 23:36:48.078030 2026] [:error] [pid 33612:tid 33635] [client 104.46.217.46:1940] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYDEkMtFn80qQEmo5QoipgAAARU"]
[Mon Feb 02 23:36:49.415321 2026] [:error] [pid 46008:tid 46029] [client 104.46.217.46:17102] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYDEkSRa52iYn7SlSMnFmAAAAVI"]
[Mon Feb 02 23:36:50.343084 2026] [:error] [pid 63153:tid 63181] [client 104.46.217.46:17142] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYDEknC9GXHnmLkdgdnGpwAAANQ"]
[Mon Feb 02 23:36:51.486346 2026] [:error] [pid 57080:tid 57103] [client 104.46.217.46:20114] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYDEk49Utn0ZlfnF10N5sAAAAtA"]
[Mon Feb 02 23:36:52.207232 2026] [:error] [pid 63153:tid 63182] [client 104.46.217.46:27755] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYDElHC9GXHnmLkdgdnGrAAAANU"]
[Mon Feb 02 23:36:52.924879 2026] [:error] [pid 56989:tid 57008] [client 104.46.217.46:17141] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYDElEp44HnChN-GZlg7_QAAAhE"]
[Mon Feb 02 23:36:53.572937 2026] [:error] [pid 57080:tid 57099] [client 104.46.217.46:27722] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYDElY9Utn0ZlfnF10N5swAAAsw"]
[Mon Feb 02 23:36:53.998885 2026] [:error] [pid 57080:tid 57106] [client 104.46.217.46:1955] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYDElY9Utn0ZlfnF10N5tQAAAtM"]
[Mon Feb 02 23:36:54.904185 2026] [:error] [pid 63034:tid 63126] [client 104.46.217.46:27768] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYDEluKXlgw75_wfbHoCkwAAAIg"]
[Mon Feb 02 23:36:55.634971 2026] [:error] [pid 57080:tid 57091] [client 104.46.217.46:18386] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYDEl49Utn0ZlfnF10N5tgAAAsQ"]
[Mon Feb 02 23:36:57.421673 2026] [:error] [pid 56989:tid 57010] [client 104.46.217.46:18118] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYDEmUp44HnChN-GZlg8AQAAAhM"]
[Mon Feb 02 23:36:58.608313 2026] [:error] [pid 63153:tid 63180] [client 104.46.217.46:1957] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYDEmnC9GXHnmLkdgdnGsQAAANM"]
[Mon Feb 02 23:37:01.705092 2026] [:error] [pid 56989:tid 57008] [client 104.46.217.46:20136] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYDEnUp44HnChN-GZlg8CgAAAhE"]
[Mon Feb 02 23:37:03.052732 2026] [:error] [pid 63032:tid 63087] [client 104.46.217.46:18415] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYDEn3yEQ1PkpebvdRgMbQAAABg"]
[Mon Feb 02 23:37:03.816026 2026] [:error] [pid 57080:tid 57109] [client 104.46.217.46:18368] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYDEn49Utn0ZlfnF10N5uQAAAtY"]
[Mon Feb 02 23:37:04.641843 2026] [:error] [pid 57080:tid 57094] [client 104.46.217.46:20807] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYDEoI9Utn0ZlfnF10N5vQAAAsc"]
[Mon Feb 02 23:37:05.103632 2026] [:error] [pid 57080:tid 57088] [client 104.46.217.46:18126] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYDEoY9Utn0ZlfnF10N5vwAAAsE"]
[Mon Feb 02 23:37:05.659615 2026] [:error] [pid 57080:tid 57098] [client 104.46.217.46:27760] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYDEoY9Utn0ZlfnF10N5wQAAAss"]
[Mon Feb 02 23:37:06.144378 2026] [:error] [pid 57021:tid 57039] [client 104.46.217.46:20857] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYDEov7AEpx7VcmYK3EbxgAAAk4"]
[Mon Feb 02 23:37:06.718527 2026] [:error] [pid 63153:tid 63163] [client 104.46.217.46:13316] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYDEonC9GXHnmLkdgdnGuQAAAMI"]
[Mon Feb 02 23:37:07.370014 2026] [:error] [pid 63153:tid 63178] [client 104.46.217.46:13345] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYDEo3C9GXHnmLkdgdnGvAAAANE"]
[Mon Feb 02 23:37:08.169038 2026] [:error] [pid 63153:tid 63164] [client 104.46.217.46:18377] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYDEpHC9GXHnmLkdgdnGvgAAAMM"]
[Mon Feb 02 23:37:09.437925 2026] [:error] [pid 63153:tid 63182] [client 104.46.217.46:28419] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYDEpXC9GXHnmLkdgdnGwQAAANU"]
[Mon Feb 02 23:37:10.154193 2026] [:error] [pid 33612:tid 33633] [client 104.46.217.46:17871] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYDEpstFn80qQEmo5QoiqQAAARM"]
[Mon Feb 02 23:37:10.905706 2026] [:error] [pid 56989:tid 56991] [client 104.46.217.46:1209] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYDEpkp44HnChN-GZlg8FAAAAgA"]
[Mon Feb 02 23:37:11.519881 2026] [:error] [pid 63153:tid 63170] [client 104.46.217.46:20824] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYDEp3C9GXHnmLkdgdnGyQAAAMk"]
[Mon Feb 02 23:37:13.257198 2026] [:error] [pid 63153:tid 63166] [client 104.46.217.46:1920] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYDEqXC9GXHnmLkdgdnG0AAAAMU"]
[Mon Feb 02 23:37:14.492294 2026] [:error] [pid 57022:tid 57066] [client 104.46.217.46:17601] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYDEqhnEgLMzfcurxflpqAAAAo4"]
[Mon Feb 02 23:37:16.469272 2026] [:error] [pid 63034:tid 63139] [client 104.46.217.46:17607] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYDErOKXlgw75_wfbHoCpgAAAJU"]
[Mon Feb 02 23:37:18.325740 2026] [:error] [pid 33612:tid 33616] [client 104.46.217.46:1181] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYDErstFn80qQEmo5QoiswAAAQI"]
[Mon Feb 02 23:37:19.900583 2026] [:error] [pid 63034:tid 63135] [client 104.46.217.46:28463] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYDEr-KXlgw75_wfbHoCqgAAAJE"]
[Mon Feb 02 23:37:20.845782 2026] [:error] [pid 57022:tid 57075] [client 104.46.217.46:17637] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYDEsBnEgLMzfcurxflprQAAApc"]
[Mon Feb 02 23:37:21.397419 2026] [:error] [pid 57081:tid 57132] [client 104.46.217.46:27107] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYDEsWvouJ2Jkm6HfBhgTQAAAxE"]
[Mon Feb 02 23:37:22.768425 2026] [:error] [pid 56989:tid 57002] [client 104.46.217.46:13657] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYDEskp44HnChN-GZlg8FwAAAgs"]
[Mon Feb 02 23:37:24.297692 2026] [:error] [pid 63032:tid 63073] [client 104.46.217.46:17882] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYDEtHyEQ1PkpebvdRgMggAAAAo"]
[Mon Feb 02 23:37:25.370588 2026] [:error] [pid 33612:tid 33635] [client 104.46.217.46:14211] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYDEtctFn80qQEmo5QoiuAAAARU"]
[Mon Feb 02 23:37:26.538661 2026] [:error] [pid 63032:tid 63066] [client 104.46.217.46:19718] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYDEtnyEQ1PkpebvdRgMhwAAAAM"]
[Mon Feb 02 23:37:27.144721 2026] [:error] [pid 63153:tid 63169] [client 104.46.217.46:1434] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYDEt3C9GXHnmLkdgdnG6gAAAMg"]
[Mon Feb 02 23:37:27.710442 2026] [:error] [pid 56989:tid 57010] [client 104.46.217.46:13694] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYDEt0p44HnChN-GZlg8GwAAAhM"]
[Mon Feb 02 23:37:29.108644 2026] [:error] [pid 56989:tid 56995] [client 104.46.217.46:27086] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYDEuUp44HnChN-GZlg8HgAAAgQ"]
[Mon Feb 02 23:37:30.364537 2026] [:error] [pid 63034:tid 63130] [client 104.46.217.46:19766] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYDEuuKXlgw75_wfbHoCuAAAAIw"]
[Mon Feb 02 23:37:31.291259 2026] [:error] [pid 33612:tid 33637] [client 104.46.217.46:19753] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYDEu8tFn80qQEmo5QoivAAAARc"]
[Mon Feb 02 23:37:32.703931 2026] [:error] [pid 63034:tid 63142] [client 104.46.217.46:20701] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYDEvOKXlgw75_wfbHoCvAAAAJg"]
[Mon Feb 02 23:37:34.455061 2026] [:error] [pid 57021:tid 57032] [client 104.46.217.46:14251] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYDEvv7AEpx7VcmYK3EbzwAAAkc"]
[Mon Feb 02 23:37:36.163590 2026] [:error] [pid 63032:tid 63087] [client 104.46.217.46:16095] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYDEwHyEQ1PkpebvdRgMjgAAABg"]
[Mon Feb 02 23:37:38.097853 2026] [:error] [pid 33612:tid 33617] [client 104.46.217.46:17341] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYDEwstFn80qQEmo5QoiyAAAAQM"]
[Mon Feb 02 23:37:39.778772 2026] [:error] [pid 33612:tid 33633] [client 165.154.254.143:58224] [client 165.154.254.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYDEw8tFn80qQEmo5Qoi0QAAARM"], referer: https://www.google.com
[Mon Feb 02 23:37:40.430481 2026] [:error] [pid 63153:tid 63182] [client 104.46.217.46:20196] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYDExHC9GXHnmLkdgdnHAgAAANU"]
[Mon Feb 02 23:37:40.832214 2026] [:error] [pid 57081:tid 57133] [client 104.46.217.46:27302] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aYDExGvouJ2Jkm6HfBhgZAAAAxI"]
[Mon Feb 02 23:37:41.342064 2026] [:error] [pid 63153:tid 63185] [client 104.46.217.46:28221] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aYDExXC9GXHnmLkdgdnHBQAAANg"]
[Mon Feb 02 23:37:42.471772 2026] [:error] [pid 63034:tid 63129] [client 104.46.217.46:28216] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aYDExuKXlgw75_wfbHoCxgAAAIs"]
[Mon Feb 02 23:37:43.599651 2026] [:error] [pid 63032:tid 63066] [client 104.46.217.46:26924] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aYDEx3yEQ1PkpebvdRgMlQAAAAM"]
[Mon Feb 02 23:37:44.421688 2026] [:error] [pid 57080:tid 57105] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Feb 02 23:37:44.708103 2026] [:error] [pid 57080:tid 57102] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Mon Feb 02 23:37:44.828307 2026] [:error] [pid 57080:tid 57087] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Feb 02 23:37:45.562694 2026] [:error] [pid 57080:tid 57093] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Feb 02 23:37:45.930753 2026] [:error] [pid 57080:tid 57096] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Feb 02 23:37:46.047263 2026] [:error] [pid 57080:tid 57109] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Feb 02 23:37:46.164748 2026] [:error] [pid 57080:tid 57097] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Feb 02 23:37:46.286213 2026] [:error] [pid 57080:tid 57092] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Feb 02 23:37:46.443860 2026] [:error] [pid 57080:tid 57104] [client 104.46.217.46:17332] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Feb 02 23:37:46.562477 2026] [:error] [pid 57080:tid 57101] [client 104.46.217.46:17332] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYDEyo9Utn0ZlfnF10N52wAAAs4"]
[Mon Feb 02 23:37:47.871407 2026] [:error] [pid 57081:tid 57130] [client 104.46.217.46:18103] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYDEy2vouJ2Jkm6HfBhgaQAAAw8"]
[Mon Feb 02 23:37:49.104784 2026] [:error] [pid 57021:tid 57026] [client 104.46.217.46:27323] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYDEzf7AEpx7VcmYK3Eb2QAAAkE"]
[Mon Feb 02 23:37:49.820552 2026] [:error] [pid 63032:tid 63071] [client 104.46.217.46:28381] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYDEzXyEQ1PkpebvdRgMoQAAAAg"]
[Mon Feb 02 23:37:50.143654 2026] [:error] [pid 46008:tid 46014] [client 104.46.217.46:20947] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYDEziRa52iYn7SlSMnFwQAAAUQ"]
[Mon Feb 02 23:37:50.951373 2026] [:error] [pid 63153:tid 63168] [client 104.46.217.46:16826] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYDEznC9GXHnmLkdgdnHCQAAAMc"]
[Mon Feb 02 23:37:52.182810 2026] [:error] [pid 63034:tid 63119] [client 104.46.217.46:27633] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYDE0OKXlgw75_wfbHoCzgAAAIE"]
[Mon Feb 02 23:37:52.979041 2026] [:error] [pid 46008:tid 46012] [client 104.46.217.46:15320] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYDE0CRa52iYn7SlSMnFwwAAAUI"]
[Mon Feb 02 23:37:53.862275 2026] [:error] [pid 46008:tid 46021] [client 104.46.217.46:28364] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYDE0SRa52iYn7SlSMnFxQAAAUo"]
[Mon Feb 02 23:37:54.238786 2026] [:error] [pid 57080:tid 57089] [client 104.46.217.46:16779] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYDE0o9Utn0ZlfnF10N53QAAAsI"]
[Mon Feb 02 23:37:55.620932 2026] [:error] [pid 63032:tid 63066] [client 104.46.217.46:22934] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYDE03yEQ1PkpebvdRgMqAAAAAM"]
[Mon Feb 02 23:37:56.497931 2026] [:error] [pid 56989:tid 56991] [client 104.46.217.46:14534] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYDE1Ep44HnChN-GZlg8LgAAAgA"]
[Mon Feb 02 23:37:57.733659 2026] [:error] [pid 63153:tid 63173] [client 104.46.217.46:1044] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYDE1XC9GXHnmLkdgdnHDQAAAMw"]
[Mon Feb 02 23:37:58.426668 2026] [:error] [pid 56989:tid 57014] [client 104.46.217.46:1051] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYDE1kp44HnChN-GZlg8NgAAAhc"]
[Mon Feb 02 23:37:59.459059 2026] [:error] [pid 56989:tid 57015] [client 104.46.217.46:16265] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYDE10p44HnChN-GZlg8OgAAAhg"]
[Mon Feb 02 23:38:00.423680 2026] [:error] [pid 56989:tid 57007] [client 104.46.217.46:17077] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYDE2Ep44HnChN-GZlg8PQAAAhA"]
[Mon Feb 02 23:38:01.053204 2026] [:error] [pid 57080:tid 57099] [client 104.46.217.46:1394] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYDE2Y9Utn0ZlfnF10N54wAAAsw"]
[Mon Feb 02 23:38:02.315135 2026] [:error] [pid 57022:tid 57075] [client 104.46.217.46:15776] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYDE2hnEgLMzfcurxflpuwAAApc"]
[Mon Feb 02 23:38:03.177061 2026] [:error] [pid 56989:tid 57008] [client 104.46.217.46:20908] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYDE20p44HnChN-GZlg8QQAAAhE"]
[Mon Feb 02 23:38:03.780512 2026] [:error] [pid 46008:tid 46033] [client 104.46.217.46:13994] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYDE2yRa52iYn7SlSMnFzAAAAVY"]
[Mon Feb 02 23:38:05.144464 2026] [:error] [pid 56989:tid 57005] [client 104.46.217.46:6647] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYDE3Up44HnChN-GZlg8RgAAAg4"]
[Mon Feb 02 23:38:05.908726 2026] [:error] [pid 63153:tid 63180] [client 104.46.217.46:13988] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYDE3XC9GXHnmLkdgdnHEwAAANM"]
[Mon Feb 02 23:38:06.496451 2026] [:error] [pid 57080:tid 57094] [client 104.46.217.46:15268] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYDE3o9Utn0ZlfnF10N56wAAAsc"]
[Mon Feb 02 23:38:07.787939 2026] [:error] [pid 57080:tid 57105] [client 104.46.217.46:20870] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYDE349Utn0ZlfnF10N58QAAAtI"]
[Mon Feb 02 23:38:08.945773 2026] [:error] [pid 56989:tid 57010] [client 104.46.217.46:15041] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYDE4Ep44HnChN-GZlg8RwAAAhM"]
[Mon Feb 02 23:38:09.928430 2026] [:error] [pid 33612:tid 33625] [client 104.46.217.46:6603] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYDE4ctFn80qQEmo5Qoi4gAAAQs"]
[Mon Feb 02 23:38:11.176458 2026] [:error] [pid 57080:tid 57095] [client 104.46.217.46:15078] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYDE449Utn0ZlfnF10N59AAAAsg"]
[Mon Feb 02 23:38:11.937655 2026] [:error] [pid 56989:tid 56992] [client 104.46.217.46:15257] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYDE40p44HnChN-GZlg8SAAAAgE"]
[Mon Feb 02 23:38:12.545893 2026] [:error] [pid 63153:tid 63168] [client 104.46.217.46:20901] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYDE5HC9GXHnmLkdgdnHKAAAAMc"]
[Mon Feb 02 23:38:13.451810 2026] [:error] [pid 57080:tid 57091] [client 104.46.217.46:6595] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYDE5Y9Utn0ZlfnF10N59QAAAsQ"]
[Mon Feb 02 23:38:15.019655 2026] [:error] [pid 63032:tid 63067] [client 104.46.217.46:13987] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYDE53yEQ1PkpebvdRgMugAAAAQ"]
[Mon Feb 02 23:38:16.105266 2026] [:error] [pid 57080:tid 57109] [client 104.46.217.46:20903] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYDE6I9Utn0ZlfnF10N5-AAAAtY"]
[Mon Feb 02 23:38:17.065470 2026] [:error] [pid 63153:tid 63168] [client 104.46.217.46:26220] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYDE6XC9GXHnmLkdgdnHNgAAAMc"]
[Mon Feb 02 23:38:18.042818 2026] [:error] [pid 63153:tid 63180] [client 104.46.217.46:14036] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYDE6nC9GXHnmLkdgdnHPQAAANM"]
[Mon Feb 02 23:38:19.074671 2026] [:error] [pid 63034:tid 63122] [client 104.46.217.46:20866] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYDE6-KXlgw75_wfbHoC5gAAAIQ"]
[Mon Feb 02 23:38:20.016312 2026] [:error] [pid 63153:tid 63177] [client 104.46.217.46:17838] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYDE7HC9GXHnmLkdgdnHQwAAANA"]
[Mon Feb 02 23:38:21.124017 2026] [:error] [pid 56989:tid 57011] [client 104.46.217.46:20872] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYDE7Up44HnChN-GZlg8UgAAAhQ"]
[Mon Feb 02 23:38:22.459972 2026] [:error] [pid 57021:tid 57025] [client 104.46.217.46:1570] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYDE7v7AEpx7VcmYK3Eb7QAAAkA"]
[Mon Feb 02 23:38:23.564964 2026] [:error] [pid 63153:tid 63169] [client 104.46.217.46:22596] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYDE73C9GXHnmLkdgdnHSgAAAMg"]
[Mon Feb 02 23:38:24.666802 2026] [:error] [pid 57081:tid 57137] [client 104.46.217.46:1558] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYDE8GvouJ2Jkm6HfBhgegAAAxY"]
[Mon Feb 02 23:38:25.653808 2026] [:error] [pid 63034:tid 63127] [client 104.46.217.46:15045] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYDE8eKXlgw75_wfbHoC9AAAAIk"]
[Mon Feb 02 23:38:26.554196 2026] [:error] [pid 57081:tid 57129] [client 104.46.217.46:13416] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYDE8mvouJ2Jkm6HfBhgfQAAAw4"]
[Mon Feb 02 23:38:27.311019 2026] [:error] [pid 57081:tid 57128] [client 104.46.217.46:13425] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYDE82vouJ2Jkm6HfBhggAAAAw0"]
[Mon Feb 02 23:38:28.853417 2026] [:error] [pid 57021:tid 57047] [client 104.46.217.46:28216] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYDE9P7AEpx7VcmYK3Eb-gAAAlY"]
[Mon Feb 02 23:38:29.892046 2026] [:error] [pid 63034:tid 63125] [client 104.46.217.46:15059] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYDE9eKXlgw75_wfbHoC-wAAAIc"]
[Mon Feb 02 23:38:30.621895 2026] [:error] [pid 46008:tid 46010] [client 104.46.217.46:1850] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYDE9iRa52iYn7SlSMnF3QAAAUA"]
[Mon Feb 02 23:38:31.812611 2026] [:error] [pid 46008:tid 46013] [client 104.46.217.46:17821] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYDE9yRa52iYn7SlSMnF4gAAAUM"]
[Mon Feb 02 23:38:33.772849 2026] [:error] [pid 63034:tid 63136] [client 104.46.217.46:14026] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYDE-eKXlgw75_wfbHoDAwAAAJI"]
[Mon Feb 02 23:38:35.089833 2026] [:error] [pid 56989:tid 56994] [client 104.46.217.46:17815] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYDE-0p44HnChN-GZlg8WwAAAgM"]
[Mon Feb 02 23:38:36.379281 2026] [:error] [pid 57080:tid 57111] [client 104.46.217.46:17837] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYDE_I9Utn0ZlfnF10N5_QAAAtg"]
[Mon Feb 02 23:38:37.867727 2026] [:error] [pid 63153:tid 63178] [client 104.46.217.46:1849] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYDE_XC9GXHnmLkdgdnHWQAAANE"]
[Mon Feb 02 23:38:38.736099 2026] [:error] [pid 46008:tid 46034] [client 104.46.217.46:15846] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYDE_iRa52iYn7SlSMnF8QAAAVc"]
[Mon Feb 02 23:38:40.083595 2026] [:error] [pid 56989:tid 56997] [client 104.46.217.46:17560] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYDFAEp44HnChN-GZlg8YwAAAgY"]
[Mon Feb 02 23:38:40.580170 2026] [:error] [pid 63153:tid 63163] [client 104.46.217.46:16616] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYDFAHC9GXHnmLkdgdnHYAAAAMI"]
[Mon Feb 02 23:38:41.515578 2026] [:error] [pid 57021:tid 57043] [client 104.46.217.46:15853] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYDFAf7AEpx7VcmYK3EcAQAAAlI"]
[Mon Feb 02 23:38:42.531822 2026] [:error] [pid 63153:tid 63166] [client 104.46.217.46:26209] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYDFAnC9GXHnmLkdgdnHYwAAAMU"]
[Mon Feb 02 23:38:44.024298 2026] [:error] [pid 57081:tid 57118] [client 104.46.217.46:1540] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYDFBGvouJ2Jkm6HfBhgjgAAAwM"]
[Mon Feb 02 23:38:45.905160 2026] [:error] [pid 63034:tid 63141] [client 104.46.217.46:15824] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYDFBeKXlgw75_wfbHoDFAAAAJc"]
[Mon Feb 02 23:38:46.757892 2026] [:error] [pid 57080:tid 57111] [client 104.46.217.46:14053] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Feb 02 23:38:47.344352 2026] [:error] [pid 57080:tid 57103] [client 104.46.217.46:14053] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Feb 02 23:38:47.461714 2026] [:error] [pid 57080:tid 57107] [client 104.46.217.46:14053] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Feb 02 23:38:47.703433 2026] [:error] [pid 57080:tid 57087] [client 104.46.217.46:14053] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon Feb 02 23:38:47.834781 2026] [:error] [pid 57080:tid 57110] [client 104.46.217.46:14053] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Mon Feb 02 23:38:48.100388 2026] [:error] [pid 57080:tid 57099] [client 104.46.217.46:14053] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYDFCI9Utn0ZlfnF10N6FwAAAsw"]
[Mon Feb 02 23:38:51.219962 2026] [:error] [pid 33612:tid 33632] [client 104.46.217.46:20741] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYDFC8tFn80qQEmo5Qoi-wAAARI"]
[Mon Feb 02 23:38:53.607868 2026] [:error] [pid 57022:tid 57065] [client 104.46.217.46:1683] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYDFDRnEgLMzfcurxflpyAAAAo0"]
[Mon Feb 02 23:38:54.740872 2026] [:error] [pid 57080:tid 57094] [client 104.46.217.46:20785] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYDFDo9Utn0ZlfnF10N6GwAAAsc"]
[Mon Feb 02 23:38:55.410393 2026] [:error] [pid 63034:tid 63123] [client 104.46.217.46:1802] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYDFD-KXlgw75_wfbHoDHgAAAIU"]
[Mon Feb 02 23:38:57.122393 2026] [:error] [pid 63032:tid 63075] [client 104.46.217.46:1722] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYDFEXyEQ1PkpebvdRgM6wAAAAw"]
[Mon Feb 02 23:38:59.130264 2026] [:error] [pid 63153:tid 63179] [client 104.46.217.46:14037] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYDFE3C9GXHnmLkdgdnHegAAANI"]
[Mon Feb 02 23:39:00.267319 2026] [:error] [pid 63032:tid 63074] [client 104.46.217.46:16578] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYDFFHyEQ1PkpebvdRgM7wAAAAs"]
[Mon Feb 02 23:39:01.161555 2026] [:error] [pid 57021:tid 57039] [client 104.46.217.46:13755] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYDFFf7AEpx7VcmYK3EcFAAAAk4"]
[Mon Feb 02 23:39:01.792559 2026] [:error] [pid 63034:tid 63125] [client 104.46.217.46:14041] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYDFFeKXlgw75_wfbHoDJAAAAIc"]
[Mon Feb 02 23:39:02.242502 2026] [:error] [pid 57081:tid 57122] [client 104.46.217.46:20798] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYDFFmvouJ2Jkm6HfBhgnwAAAwc"]
[Mon Feb 02 23:39:03.397761 2026] [:error] [pid 56989:tid 57001] [client 104.46.217.46:17593] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYDFF0p44HnChN-GZlg8hwAAAgo"]
[Mon Feb 02 23:39:04.247499 2026] [:error] [pid 56989:tid 56997] [client 104.46.217.46:1788] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYDFGEp44HnChN-GZlg8iAAAAgY"]
[Mon Feb 02 23:39:04.859877 2026] [:error] [pid 57080:tid 57097] [client 104.46.217.46:15838] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYDFGI9Utn0ZlfnF10N6JAAAAso"]
[Mon Feb 02 23:39:06.373165 2026] [:error] [pid 56989:tid 57002] [client 104.46.217.46:20742] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYDFGkp44HnChN-GZlg8igAAAgs"]
[Mon Feb 02 23:39:06.920140 2026] [:error] [pid 56989:tid 57013] [client 104.46.217.46:14070] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYDFGkp44HnChN-GZlg8iwAAAhY"]
[Mon Feb 02 23:39:08.332880 2026] [:error] [pid 46008:tid 46012] [client 104.46.217.46:27404] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYDFHCRa52iYn7SlSMnGCQAAAUI"]
[Mon Feb 02 23:39:09.053032 2026] [:error] [pid 56989:tid 56993] [client 104.46.217.46:1746] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYDFHUp44HnChN-GZlg8kAAAAgI"]
[Mon Feb 02 23:39:09.882535 2026] [:error] [pid 57081:tid 57129] [client 104.46.217.46:27400] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYDFHWvouJ2Jkm6HfBhgqAAAAw4"]
[Mon Feb 02 23:39:10.374267 2026] [:error] [pid 63153:tid 63173] [client 104.46.217.46:20752] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYDFHnC9GXHnmLkdgdnHgwAAAMw"]
[Mon Feb 02 23:39:11.235018 2026] [:error] [pid 46008:tid 46034] [client 104.46.217.46:14044] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDFHyRa52iYn7SlSMnGDQAAAVc"]
[Mon Feb 02 23:39:11.657834 2026] [:error] [pid 57022:tid 57057] [client 104.46.217.46:27451] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDFHxnEgLMzfcurxflp0AAAAoU"]
[Mon Feb 02 23:39:13.616025 2026] [:error] [pid 57022:tid 57066] [client 104.46.217.46:1699] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDFIRnEgLMzfcurxflp0QAAAo4"]
[Mon Feb 02 23:39:14.232977 2026] [:error] [pid 63034:tid 63127] [client 104.46.217.46:13743] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYDFIuKXlgw75_wfbHoDKwAAAIk"]
[Mon Feb 02 23:39:15.114201 2026] [:error] [pid 63034:tid 63130] [client 104.46.217.46:1702] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYDFI-KXlgw75_wfbHoDLAAAAIw"]
[Mon Feb 02 23:39:16.004787 2026] [:error] [pid 63034:tid 63123] [client 104.46.217.46:16581] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYDFJOKXlgw75_wfbHoDLQAAAIU"]
[Mon Feb 02 23:39:16.954272 2026] [:error] [pid 33612:tid 33627] [client 104.46.217.46:1710] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYDFJMtFn80qQEmo5QojBAAAAQ0"]
[Mon Feb 02 23:39:17.776312 2026] [:error] [pid 56989:tid 57001] [client 104.46.217.46:13721] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYDFJUp44HnChN-GZlg8lAAAAgo"]
[Mon Feb 02 23:39:18.534300 2026] [:error] [pid 46008:tid 46028] [client 104.46.217.46:20740] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYDFJiRa52iYn7SlSMnGFAAAAVE"]
[Mon Feb 02 23:39:18.946445 2026] [:error] [pid 56989:tid 57008] [client 104.46.217.46:14330] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYDFJkp44HnChN-GZlg8mAAAAhE"]
[Mon Feb 02 23:39:19.505154 2026] [:error] [pid 33612:tid 33617] [client 104.46.217.46:13703] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYDFJ8tFn80qQEmo5QojBwAAAQM"]
[Mon Feb 02 23:39:19.785177 2026] [:error] [pid 33612:tid 33629] [client 104.46.217.46:1735] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYDFJ8tFn80qQEmo5QojCAAAAQ8"]
[Mon Feb 02 23:39:20.435293 2026] [:error] [pid 63153:tid 63183] [client 104.46.217.46:27424] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFKHC9GXHnmLkdgdnHjAAAANY"]
[Mon Feb 02 23:39:21.390649 2026] [:error] [pid 63153:tid 63162] [client 104.46.217.46:1717] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFKXC9GXHnmLkdgdnHjQAAAME"]
[Mon Feb 02 23:39:22.371056 2026] [:error] [pid 56989:tid 56991] [client 104.46.217.46:13749] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFKkp44HnChN-GZlg8mwAAAgA"]
[Mon Feb 02 23:39:23.326199 2026] [:error] [pid 63034:tid 63125] [client 104.46.217.46:1415] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYDFK-KXlgw75_wfbHoDMgAAAIc"]
[Mon Feb 02 23:39:23.892362 2026] [:error] [pid 56989:tid 56999] [client 104.46.217.46:27439] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYDFK0p44HnChN-GZlg8nAAAAgg"]
[Mon Feb 02 23:39:24.758665 2026] [:error] [pid 57081:tid 57127] [client 104.46.217.46:14281] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYDFLGvouJ2Jkm6HfBhgsAAAAww"]
[Mon Feb 02 23:39:25.499567 2026] [:error] [pid 57081:tid 57131] [client 104.46.217.46:14781] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYDFLWvouJ2Jkm6HfBhgsgAAAxA"]
[Mon Feb 02 23:39:25.933137 2026] [:error] [pid 63153:tid 63178] [client 104.46.217.46:27452] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYDFLXC9GXHnmLkdgdnHkAAAANE"]
[Mon Feb 02 23:39:26.753505 2026] [:error] [pid 33612:tid 33623] [client 104.46.217.46:14316] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYDFLstFn80qQEmo5QojDgAAAQk"]
[Mon Feb 02 23:39:27.337598 2026] [:error] [pid 56989:tid 57005] [client 104.46.217.46:28342] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aYDFL0p44HnChN-GZlg8oQAAAg4"]
[Mon Feb 02 23:39:28.231580 2026] [:error] [pid 63153:tid 63164] [client 104.46.217.46:27425] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aYDFMHC9GXHnmLkdgdnHlwAAAMM"]
[Mon Feb 02 23:39:28.931116 2026] [:error] [pid 57081:tid 57120] [client 104.46.217.46:27398] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aYDFMGvouJ2Jkm6HfBhgtgAAAwU"]
[Mon Feb 02 23:39:29.495285 2026] [:error] [pid 56989:tid 56997] [client 104.46.217.46:14755] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYDFMUp44HnChN-GZlg8pgAAAgY"]
[Mon Feb 02 23:39:30.513718 2026] [:error] [pid 33612:tid 33628] [client 104.46.217.46:14748] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFMstFn80qQEmo5QojEQAAAQ4"]
[Mon Feb 02 23:39:32.258882 2026] [:error] [pid 63032:tid 63076] [client 104.46.217.46:18629] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFNHyEQ1PkpebvdRgNAQAAAA0"]
[Mon Feb 02 23:39:33.323867 2026] [:error] [pid 57080:tid 57100] [client 104.46.217.46:16621] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFNY9Utn0ZlfnF10N6MwAAAs0"]
[Mon Feb 02 23:39:34.343562 2026] [:error] [pid 57021:tid 57031] [client 104.46.217.46:14317] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYDFNv7AEpx7VcmYK3EcJwAAAkY"]
[Mon Feb 02 23:39:35.055537 2026] [:error] [pid 57081:tid 57126] [client 104.46.217.46:28341] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYDFN2vouJ2Jkm6HfBhgvgAAAws"]
[Mon Feb 02 23:39:35.329477 2026] [:error] [pid 63153:tid 63166] [client 104.46.217.46:20752] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYDFN3C9GXHnmLkdgdnHmgAAAMU"]
[Mon Feb 02 23:39:35.687492 2026] [:error] [pid 56989:tid 57005] [client 104.46.217.46:28666] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYDFN0p44HnChN-GZlg8sAAAAg4"]
[Mon Feb 02 23:39:36.223282 2026] [:error] [pid 63032:tid 63077] [client 104.46.217.46:2000] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYDFOHyEQ1PkpebvdRgNBQAAAA4"]
[Mon Feb 02 23:39:36.757201 2026] [:error] [pid 63153:tid 63181] [client 104.46.217.46:1370] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYDFOHC9GXHnmLkdgdnHnQAAANQ"]
[Mon Feb 02 23:39:37.350212 2026] [:error] [pid 63032:tid 63080] [client 104.46.217.46:14779] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYDFOXyEQ1PkpebvdRgNCQAAABE"]
[Mon Feb 02 23:39:38.010172 2026] [:error] [pid 63032:tid 63069] [client 104.46.217.46:28312] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYDFOnyEQ1PkpebvdRgNCwAAAAY"]
[Mon Feb 02 23:39:38.917145 2026] [:error] [pid 63032:tid 63076] [client 104.46.217.46:13772] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYDFOnyEQ1PkpebvdRgNEgAAAA0"]
[Mon Feb 02 23:39:39.831267 2026] [:error] [pid 63153:tid 63164] [client 104.46.217.46:14740] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYDFO3C9GXHnmLkdgdnHqQAAAMM"]
[Mon Feb 02 23:39:40.521637 2026] [:error] [pid 57081:tid 57117] [client 104.46.217.46:1431] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYDFPGvouJ2Jkm6HfBhgxAAAAwI"]
[Mon Feb 02 23:39:42.600565 2026] [:error] [pid 57022:tid 57059] [client 104.46.217.46:14730] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYDFPhnEgLMzfcurxflp2wAAAoc"]
[Mon Feb 02 23:39:43.027846 2026] [:error] [pid 57021:tid 57048] [client 104.46.217.46:1310] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYDFP_7AEpx7VcmYK3EcKwAAAlc"]
[Mon Feb 02 23:39:44.386093 2026] [:error] [pid 46008:tid 46021] [client 104.46.217.46:1338] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYDFQCRa52iYn7SlSMnGIQAAAUo"]
[Mon Feb 02 23:39:45.952275 2026] [:error] [pid 57081:tid 57129] [client 104.46.217.46:18679] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYDFQWvouJ2Jkm6HfBhgywAAAw4"]
[Mon Feb 02 23:39:46.981412 2026] [:error] [pid 57022:tid 57074] [client 104.46.217.46:19412] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYDFQhnEgLMzfcurxflp3wAAApY"]
[Mon Feb 02 23:39:47.450073 2026] [:error] [pid 46008:tid 46014] [client 104.46.217.46:1379] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYDFQyRa52iYn7SlSMnGKAAAAUQ"]
[Mon Feb 02 23:39:48.054925 2026] [:error] [pid 57021:tid 57047] [client 104.46.217.46:1475] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Mon Feb 02 23:39:48.404913 2026] [:error] [pid 57021:tid 57026] [client 104.46.217.46:1475] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Feb 02 23:39:48.943028 2026] [:error] [pid 57021:tid 57031] [client 104.46.217.46:1475] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Mon Feb 02 23:39:49.416197 2026] [:error] [pid 57021:tid 57032] [client 104.46.217.46:1475] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYDFRf7AEpx7VcmYK3EcOwAAAkc"]
[Mon Feb 02 23:39:50.182103 2026] [:error] [pid 63032:tid 63079] [client 104.46.217.46:22873] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYDFRnyEQ1PkpebvdRgNKwAAABA"]
[Mon Feb 02 23:39:51.476155 2026] [:error] [pid 57080:tid 57093] [client 104.46.217.46:15078] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYDFR49Utn0ZlfnF10N6QwAAAsY"]
[Mon Feb 02 23:39:52.560953 2026] [:error] [pid 57022:tid 57071] [client 104.46.217.46:22881] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYDFSBnEgLMzfcurxflp4wAAApM"]
[Mon Feb 02 23:39:52.908243 2026] [:error] [pid 57081:tid 57127] [client 104.46.217.46:1335] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYDFSGvouJ2Jkm6HfBhg0gAAAww"]
[Mon Feb 02 23:39:53.647467 2026] [:error] [pid 57021:tid 57043] [client 104.46.217.46:22904] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYDFSf7AEpx7VcmYK3EcPAAAAlI"]
[Mon Feb 02 23:39:54.263184 2026] [:error] [pid 57022:tid 57064] [client 104.46.217.46:1342] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYDFShnEgLMzfcurxflp5AAAAow"]
[Mon Feb 02 23:39:55.505146 2026] [:error] [pid 63153:tid 63167] [client 104.46.217.46:1386] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYDFS3C9GXHnmLkdgdnHwQAAAMY"]
[Mon Feb 02 23:39:57.222273 2026] [:error] [pid 63034:tid 63129] [client 104.46.217.46:17350] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYDFTeKXlgw75_wfbHoDPwAAAIs"]
[Mon Feb 02 23:39:58.487447 2026] [:error] [pid 63034:tid 63138] [client 104.46.217.46:22678] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFTuKXlgw75_wfbHoDQAAAAJQ"]
[Mon Feb 02 23:39:58.962747 2026] [:error] [pid 57080:tid 57103] [client 104.46.217.46:26819] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFTo9Utn0ZlfnF10N6SQAAAtA"]
[Mon Feb 02 23:39:59.479071 2026] [:error] [pid 57081:tid 57138] [client 104.46.217.46:16860] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFT2vouJ2Jkm6HfBhg1QAAAxc"]
[Mon Feb 02 23:40:00.452523 2026] [:error] [pid 57080:tid 57096] [client 104.46.217.46:26876] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYDFUI9Utn0ZlfnF10N6SgAAAsk"]
[Mon Feb 02 23:40:02.621494 2026] [:error] [pid 57021:tid 57039] [client 104.46.217.46:26861] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYDFUv7AEpx7VcmYK3EcQAAAAk4"]
[Mon Feb 02 23:40:04.807527 2026] [:error] [pid 63153:tid 63184] [client 104.46.217.46:28569] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYDFVHC9GXHnmLkdgdnH1QAAANc"]
[Mon Feb 02 23:40:06.500886 2026] [:error] [pid 57081:tid 57135] [client 104.46.217.46:14730] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYDFVmvouJ2Jkm6HfBhg2gAAAxQ"]
[Mon Feb 02 23:40:08.048441 2026] [:error] [pid 57081:tid 57132] [client 104.46.217.46:26844] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYDFWGvouJ2Jkm6HfBhg3wAAAxE"]
[Mon Feb 02 23:40:09.424948 2026] [:error] [pid 63034:tid 63142] [client 104.46.217.46:27486] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYDFWeKXlgw75_wfbHoDRgAAAJg"]
[Mon Feb 02 23:40:09.896527 2026] [:error] [pid 56989:tid 57013] [client 104.46.217.46:19148] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYDFWUp44HnChN-GZlg8xAAAAhY"]
[Mon Feb 02 23:40:10.850700 2026] [:error] [pid 57081:tid 57122] [client 104.46.217.46:27047] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYDFWmvouJ2Jkm6HfBhg4QAAAwc"]
[Mon Feb 02 23:40:11.539762 2026] [:error] [pid 46008:tid 46010] [client 104.46.217.46:22704] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYDFWyRa52iYn7SlSMnGOgAAAUA"]
[Mon Feb 02 23:40:12.222598 2026] [:error] [pid 63153:tid 63165] [client 104.46.217.46:26945] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYDFXHC9GXHnmLkdgdnH4gAAAMQ"]
[Mon Feb 02 23:40:13.352022 2026] [:error] [pid 63153:tid 63163] [client 104.46.217.46:18343] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYDFXXC9GXHnmLkdgdnH5gAAAMI"]
[Mon Feb 02 23:40:13.971807 2026] [:error] [pid 63153:tid 63169] [client 104.46.217.46:20686] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYDFXXC9GXHnmLkdgdnH5wAAAMg"]
[Mon Feb 02 23:40:15.367836 2026] [:error] [pid 63032:tid 63080] [client 104.46.217.46:13502] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYDFX3yEQ1PkpebvdRgNQAAAABE"]
[Mon Feb 02 23:40:15.730269 2026] [:error] [pid 63032:tid 63086] [client 104.46.217.46:13448] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYDFX3yEQ1PkpebvdRgNQgAAABc"]
[Mon Feb 02 23:40:16.396885 2026] [:error] [pid 63032:tid 63078] [client 104.46.217.46:28268] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYDFYHyEQ1PkpebvdRgNQwAAAA8"]
[Mon Feb 02 23:40:17.354819 2026] [:error] [pid 57022:tid 57068] [client 104.46.217.46:26957] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYDFYRnEgLMzfcurxflp6wAAApA"]
[Mon Feb 02 23:40:18.505493 2026] [:error] [pid 63034:tid 63134] [client 104.46.217.46:27335] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYDFYuKXlgw75_wfbHoDSgAAAJA"]
[Mon Feb 02 23:40:21.340875 2026] [:error] [pid 57081:tid 57125] [client 104.46.217.46:13469] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYDFZWvouJ2Jkm6HfBhg5QAAAwo"]
[Mon Feb 02 23:40:23.050174 2026] [:error] [pid 57022:tid 57066] [client 104.46.217.46:27066] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYDFZxnEgLMzfcurxflp7wAAAo4"]
[Mon Feb 02 23:40:24.068516 2026] [:error] [pid 33612:tid 33634] [client 104.46.217.46:13500] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYDFaMtFn80qQEmo5QojKwAAARQ"]
[Mon Feb 02 23:40:24.931314 2026] [:error] [pid 33612:tid 33632] [client 104.46.217.46:13492] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYDFaMtFn80qQEmo5QojLQAAARI"]
[Mon Feb 02 23:40:26.479155 2026] [:error] [pid 57081:tid 57137] [client 104.46.217.46:27191] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYDFamvouJ2Jkm6HfBhg5gAAAxY"]
[Mon Feb 02 23:40:27.873615 2026] [:error] [pid 46008:tid 46032] [client 104.46.217.46:23421] [client 104.46.217.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYDFayRa52iYn7SlSMnGRAAAAVU"]
[Mon Feb 02 23:40:29.632030 2026] [:error] [pid 56989:tid 57005] [client 104.46.217.46:23387] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYDFbUp44HnChN-GZlg8zAAAAg4"]
[Mon Feb 02 23:40:30.683820 2026] [:error] [pid 63153:tid 63163] [client 104.46.217.46:26980] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYDFbnC9GXHnmLkdgdnH9QAAAMI"]
[Mon Feb 02 23:40:31.689644 2026] [:error] [pid 63034:tid 63125] [client 104.46.217.46:27164] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYDFb-KXlgw75_wfbHoDTAAAAIc"]
[Mon Feb 02 23:40:33.615982 2026] [:error] [pid 33612:tid 33618] [client 104.46.217.46:23364] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYDFcctFn80qQEmo5QojNwAAAQQ"]
[Mon Feb 02 23:40:35.644403 2026] [:error] [pid 57080:tid 57089] [client 104.46.217.46:15603] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYDFc49Utn0ZlfnF10N6VAAAAsI"]
[Mon Feb 02 23:40:37.903501 2026] [:error] [pid 63032:tid 63066] [client 104.46.217.46:27876] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYDFdXyEQ1PkpebvdRgNWAAAAAM"]
[Mon Feb 02 23:40:39.561840 2026] [:error] [pid 57081:tid 57123] [client 104.46.217.46:20603] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYDFd2vouJ2Jkm6HfBhg7AAAAwg"]
[Mon Feb 02 23:40:40.948488 2026] [:error] [pid 57081:tid 57126] [client 104.46.217.46:15590] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYDFeGvouJ2Jkm6HfBhg7QAAAws"]
[Mon Feb 02 23:40:41.836146 2026] [:error] [pid 57080:tid 57105] [client 104.46.217.46:15553] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYDFeY9Utn0ZlfnF10N6WgAAAtI"]
[Mon Feb 02 23:40:42.485831 2026] [:error] [pid 46008:tid 46015] [client 104.46.217.46:19823] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYDFeiRa52iYn7SlSMnGUAAAAUU"]
[Mon Feb 02 23:40:43.379799 2026] [:error] [pid 57021:tid 57039] [client 104.46.217.46:18595] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYDFe_7AEpx7VcmYK3EcUwAAAk4"]
[Mon Feb 02 23:40:44.229881 2026] [:error] [pid 63032:tid 63087] [client 104.46.217.46:28521] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYDFfHyEQ1PkpebvdRgNWwAAABg"]
[Mon Feb 02 23:40:44.863117 2026] [:error] [pid 57080:tid 57099] [client 104.46.217.46:14488] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYDFfI9Utn0ZlfnF10N6XAAAAsw"]
[Mon Feb 02 23:40:46.068991 2026] [:error] [pid 57021:tid 57033] [client 104.46.217.46:27864] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYDFfv7AEpx7VcmYK3EcVgAAAkg"]
[Mon Feb 02 23:40:46.730029 2026] [:error] [pid 63153:tid 63170] [client 104.46.217.46:15586] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYDFfnC9GXHnmLkdgdnH_gAAAMk"]
[Mon Feb 02 23:40:47.964996 2026] [:error] [pid 63034:tid 63140] [client 104.46.217.46:27861] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYDFf-KXlgw75_wfbHoDWAAAAJY"]
[Mon Feb 02 23:40:48.805263 2026] [:error] [pid 33612:tid 33627] [client 104.46.217.46:18886] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aYDFgMtFn80qQEmo5QojQAAAAQ0"]
[Mon Feb 02 23:40:49.954766 2026] [:error] [pid 46008:tid 46025] [client 104.46.217.46:14496] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aYDFgSRa52iYn7SlSMnGVwAAAU4"]
[Mon Feb 02 23:40:50.766312 2026] [:error] [pid 46008:tid 46021] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Mon Feb 02 23:40:50.884620 2026] [:error] [pid 46008:tid 46031] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Mon Feb 02 23:40:51.227377 2026] [:error] [pid 46008:tid 46018] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Mon Feb 02 23:40:51.344424 2026] [:error] [pid 46008:tid 46024] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Mon Feb 02 23:40:51.460667 2026] [:error] [pid 46008:tid 46030] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Mon Feb 02 23:40:51.582310 2026] [:error] [pid 46008:tid 46028] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Mon Feb 02 23:40:51.702716 2026] [:error] [pid 46008:tid 46032] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Feb 02 23:40:51.823844 2026] [:error] [pid 46008:tid 46015] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Feb 02 23:40:53.373811 2026] [:error] [pid 46008:tid 46015] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Mon Feb 02 23:40:53.492489 2026] [:error] [pid 46008:tid 46035] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Mon Feb 02 23:40:53.610066 2026] [:error] [pid 46008:tid 46027] [client 104.46.217.46:1136] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Mon Feb 02 23:40:53.724649 2026] [:error] [pid 46008:tid 46014] [client 104.46.217.46:1136] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aYDFhSRa52iYn7SlSMnGZQAAAUQ"]
[Mon Feb 02 23:40:54.323416 2026] [:error] [pid 57021:tid 57032] [client 104.46.217.46:19795] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aYDFhv7AEpx7VcmYK3EcXAAAAkc"]
[Mon Feb 02 23:40:54.968217 2026] [:error] [pid 33612:tid 33619] [client 104.46.217.46:19783] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aYDFhstFn80qQEmo5QojRAAAAQU"]
[Mon Feb 02 23:40:55.993167 2026] [:error] [pid 56989:tid 57010] [client 104.46.217.46:18829] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "aYDFh0p44HnChN-GZlg85QAAAhM"]
[Mon Feb 02 23:40:56.417281 2026] [:error] [pid 46008:tid 46010] [client 104.46.217.46:13781] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYDFiCRa52iYn7SlSMnGaQAAAUA"]
[Mon Feb 02 23:40:57.216888 2026] [:error] [pid 63032:tid 63067] [client 104.46.217.46:27568] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYDFiXyEQ1PkpebvdRgNYQAAAAQ"]
[Mon Feb 02 23:40:57.815644 2026] [:error] [pid 63153:tid 63175] [client 104.46.217.46:19803] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYDFiXC9GXHnmLkdgdnIDAAAAM4"]
[Mon Feb 02 23:40:58.897679 2026] [:error] [pid 57022:tid 57075] [client 104.46.217.46:28500] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYDFihnEgLMzfcurxflp_gAAApc"]
[Mon Feb 02 23:40:59.737747 2026] [:error] [pid 57081:tid 57124] [client 104.46.217.46:13795] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYDFi2vouJ2Jkm6HfBhg-gAAAwk"]
[Mon Feb 02 23:41:00.754683 2026] [:error] [pid 63153:tid 63167] [client 104.46.217.46:13760] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYDFjHC9GXHnmLkdgdnIDQAAAMY"]
[Mon Feb 02 23:41:01.958585 2026] [:error] [pid 33612:tid 33632] [client 104.46.217.46:18567] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYDFjctFn80qQEmo5QojSQAAARI"]
[Mon Feb 02 23:41:03.445730 2026] [:error] [pid 57022:tid 57063] [client 104.46.217.46:14472] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYDFjxnEgLMzfcurxflqAQAAAos"]
[Mon Feb 02 23:41:04.669614 2026] [:error] [pid 63153:tid 63169] [client 104.46.217.46:1624] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYDFkHC9GXHnmLkdgdnIDgAAAMg"]
[Mon Feb 02 23:41:07.038416 2026] [:error] [pid 63032:tid 63087] [client 104.46.217.46:28537] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYDFk3yEQ1PkpebvdRgNaAAAABg"]
[Mon Feb 02 23:41:09.510377 2026] [:error] [pid 63153:tid 63174] [client 104.46.217.46:1099] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYDFlXC9GXHnmLkdgdnIEQAAAM0"]
[Mon Feb 02 23:41:11.819833 2026] [:error] [pid 56989:tid 56995] [client 104.46.217.46:17098] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYDFl0p44HnChN-GZlg87wAAAgQ"]
[Mon Feb 02 23:41:12.657615 2026] [:error] [pid 33612:tid 33629] [client 104.46.217.46:1130] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYDFmMtFn80qQEmo5QojTQAAAQ8"]
[Mon Feb 02 23:41:13.069198 2026] [:error] [pid 57022:tid 57073] [client 104.46.217.46:17113] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYDFmRnEgLMzfcurxflqBQAAApU"]
[Mon Feb 02 23:41:13.598364 2026] [:error] [pid 63034:tid 63126] [client 104.46.217.46:1646] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYDFmeKXlgw75_wfbHoDYgAAAIg"]
[Mon Feb 02 23:41:14.138293 2026] [:error] [pid 57080:tid 57092] [client 104.46.217.46:14844] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYDFmo9Utn0ZlfnF10N6bgAAAsU"]
[Mon Feb 02 23:41:15.662366 2026] [:error] [pid 63034:tid 63123] [client 104.46.217.46:1648] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYDFm-KXlgw75_wfbHoDZAAAAIU"]
[Mon Feb 02 23:41:16.817501 2026] [:error] [pid 57080:tid 57101] [client 104.46.217.46:14815] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYDFnI9Utn0ZlfnF10N6cAAAAs4"]
[Mon Feb 02 23:41:17.461009 2026] [:error] [pid 63153:tid 63180] [client 104.46.217.46:1092] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYDFnXC9GXHnmLkdgdnIEwAAANM"]
[Mon Feb 02 23:41:18.080032 2026] [:error] [pid 57022:tid 57055] [client 104.46.217.46:17120] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYDFnhnEgLMzfcurxflqBwAAAoM"]
[Mon Feb 02 23:41:18.965249 2026] [:error] [pid 57021:tid 57040] [client 104.46.217.46:1967] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYDFnv7AEpx7VcmYK3EcbAAAAk8"]
[Mon Feb 02 23:41:21.893104 2026] [:error] [pid 57022:tid 57053] [client 104.46.217.46:14982] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYDFoRnEgLMzfcurxflqCAAAAoE"]
[Mon Feb 02 23:41:24.356674 2026] [:error] [pid 63153:tid 63163] [client 104.46.217.46:1961] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYDFpHC9GXHnmLkdgdnIGgAAAMI"]
[Mon Feb 02 23:41:25.252391 2026] [:error] [pid 46008:tid 46025] [client 104.46.217.46:20155] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYDFpSRa52iYn7SlSMnGegAAAU4"]
[Mon Feb 02 23:41:27.488636 2026] [:error] [pid 57080:tid 57110] [client 104.46.217.46:16556] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYDFp49Utn0ZlfnF10N6dQAAAtc"]
[Mon Feb 02 23:41:29.323980 2026] [:error] [pid 57081:tid 57133] [client 104.46.217.46:20150] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYDFqWvouJ2Jkm6HfBhhGAAAAxI"]
[Mon Feb 02 23:41:31.776139 2026] [:error] [pid 63153:tid 63170] [client 104.46.217.46:20827] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYDFq3C9GXHnmLkdgdnIJgAAAMk"]
[Mon Feb 02 23:41:32.651684 2026] [:error] [pid 57021:tid 57033] [client 104.46.217.46:1613] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYDFrP7AEpx7VcmYK3EccQAAAkg"]
[Mon Feb 02 23:41:33.470762 2026] [:error] [pid 63034:tid 63119] [client 104.46.217.46:16535] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYDFreKXlgw75_wfbHoDawAAAIE"]
[Mon Feb 02 23:41:33.930841 2026] [:error] [pid 57022:tid 57069] [client 104.46.217.46:20826] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYDFrRnEgLMzfcurxflqCQAAApE"]
[Mon Feb 02 23:41:35.004066 2026] [:error] [pid 46008:tid 46031] [client 104.46.217.46:28498] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYDFryRa52iYn7SlSMnGfAAAAVQ"]
[Mon Feb 02 23:41:35.504397 2026] [:error] [pid 46008:tid 46020] [client 104.46.217.46:1933] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYDFryRa52iYn7SlSMnGfgAAAUk"]
[Mon Feb 02 23:41:36.561202 2026] [:error] [pid 56989:tid 56996] [client 104.46.217.46:27740] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYDFsEp44HnChN-GZlg9AAAAAgU"]
[Mon Feb 02 23:41:37.757115 2026] [:error] [pid 57080:tid 57092] [client 104.46.217.46:15025] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYDFsY9Utn0ZlfnF10N6ewAAAsU"]
[Mon Feb 02 23:41:38.803165 2026] [:error] [pid 63153:tid 63166] [client 104.46.217.46:27722] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYDFsnC9GXHnmLkdgdnIKgAAAMU"]
[Mon Feb 02 23:41:39.510248 2026] [:error] [pid 63032:tid 63076] [client 104.46.217.46:17612] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYDFs3yEQ1PkpebvdRgNgwAAAA0"]
[Mon Feb 02 23:41:40.388345 2026] [:error] [pid 57022:tid 57060] [client 104.46.217.46:19717] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aYDFtBnEgLMzfcurxflqDQAAAog"]
[Mon Feb 02 23:41:40.992622 2026] [:error] [pid 63032:tid 63068] [client 104.46.217.46:1990] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aYDFtHyEQ1PkpebvdRgNhQAAAAU"]
[Mon Feb 02 23:41:42.242040 2026] [:error] [pid 57022:tid 57076] [client 104.46.217.46:27756] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aYDFthnEgLMzfcurxflqEAAAApg"]
[Mon Feb 02 23:41:44.304851 2026] [:error] [pid 63153:tid 63177] [client 104.46.217.46:17885] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aYDFuHC9GXHnmLkdgdnILgAAANA"]
[Mon Feb 02 23:41:44.676678 2026] [:error] [pid 46008:tid 46021] [client 104.46.217.46:17875] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aYDFuCRa52iYn7SlSMnGiQAAAUo"]
[Mon Feb 02 23:41:45.086804 2026] [:error] [pid 33612:tid 33626] [client 104.46.217.46:15024] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aYDFuctFn80qQEmo5QojYAAAAQw"]
[Mon Feb 02 23:41:45.679509 2026] [:error] [pid 57080:tid 57105] [client 104.46.217.46:1156] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aYDFuY9Utn0ZlfnF10N6igAAAtI"]
[Mon Feb 02 23:41:46.675566 2026] [:error] [pid 63153:tid 63178] [client 104.46.217.46:27093] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "aYDFunC9GXHnmLkdgdnILwAAANE"]
[Mon Feb 02 23:41:48.012795 2026] [:error] [pid 63034:tid 63118] [client 104.46.217.46:16118] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aYDFvOKXlgw75_wfbHoDcgAAAIA"]
[Mon Feb 02 23:41:49.052968 2026] [:error] [pid 63034:tid 63129] [client 104.46.217.46:16071] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aYDFveKXlgw75_wfbHoDcwAAAIs"]
[Mon Feb 02 23:41:49.567167 2026] [:error] [pid 33612:tid 33625] [client 104.46.217.46:1191] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aYDFvctFn80qQEmo5QojYwAAAQs"]
[Mon Feb 02 23:41:50.450852 2026] [:error] [pid 33612:tid 33636] [client 104.46.217.46:1169] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aYDFvstFn80qQEmo5QojZgAAARY"]
[Mon Feb 02 23:41:51.185889 2026] [:error] [pid 63032:tid 63067] [client 104.46.217.46:19744] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aYDFv3yEQ1PkpebvdRgNjAAAAAQ"]
[Mon Feb 02 23:41:51.947738 2026] [:error] [pid 46008:tid 46029] [client 104.46.217.46:16055] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aYDFvyRa52iYn7SlSMnGjwAAAVI"]
[Mon Feb 02 23:41:53.277841 2026] [:error] [pid 63153:tid 63185] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Mon Feb 02 23:41:54.300241 2026] [:error] [pid 63153:tid 63172] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Mon Feb 02 23:41:54.417546 2026] [:error] [pid 63153:tid 63164] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Feb 02 23:41:54.533493 2026] [:error] [pid 63153:tid 63181] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Mon Feb 02 23:41:54.649932 2026] [:error] [pid 63153:tid 63161] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Mon Feb 02 23:41:54.783048 2026] [:error] [pid 63153:tid 63168] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Feb 02 23:41:54.899612 2026] [:error] [pid 63153:tid 63166] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Mon Feb 02 23:41:55.016230 2026] [:error] [pid 63153:tid 63175] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Mon Feb 02 23:41:55.134236 2026] [:error] [pid 63153:tid 63163] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Mon Feb 02 23:41:55.310263 2026] [:error] [pid 63153:tid 63179] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Mon Feb 02 23:41:55.428992 2026] [:error] [pid 63153:tid 63169] [client 104.46.217.46:27117] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Mon Feb 02 23:41:55.568332 2026] [:error] [pid 63153:tid 63167] [client 104.46.217.46:27117] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYDFw3C9GXHnmLkdgdnIPgAAAMY"]
[Mon Feb 02 23:41:56.040613 2026] [:error] [pid 57021:tid 57028] [client 104.46.217.46:28189] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYDFxP7AEpx7VcmYK3EcfwAAAkM"]
[Mon Feb 02 23:41:56.485776 2026] [:error] [pid 57021:tid 57049] [client 104.46.217.46:16074] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYDFxP7AEpx7VcmYK3EcgAAAAlg"]
[Mon Feb 02 23:41:56.969406 2026] [:error] [pid 57021:tid 57032] [client 104.46.217.46:2007] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYDFxP7AEpx7VcmYK3EcggAAAkc"]
[Mon Feb 02 23:41:57.572612 2026] [:error] [pid 63032:tid 63084] [client 104.46.217.46:27114] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYDFxXyEQ1PkpebvdRgNkwAAABU"]
[Mon Feb 02 23:41:58.467289 2026] [:error] [pid 56989:tid 57015] [client 104.46.217.46:2041] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYDFxkp44HnChN-GZlg9DwAAAhg"]
[Mon Feb 02 23:41:59.614081 2026] [:error] [pid 33612:tid 33615] [client 104.46.217.46:13632] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYDFx8tFn80qQEmo5QojbwAAAQE"]
[Mon Feb 02 23:42:00.437051 2026] [:error] [pid 56989:tid 56997] [client 104.46.217.46:17318] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYDFyEp44HnChN-GZlg9EgAAAgY"]
[Mon Feb 02 23:42:03.301039 2026] [:error] [pid 57081:tid 57128] [client 104.46.217.46:28223] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYDFy2vouJ2Jkm6HfBhhKAAAAw0"]
[Mon Feb 02 23:42:05.288134 2026] [:error] [pid 56989:tid 56994] [client 104.46.217.46:2031] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYDFzUp44HnChN-GZlg9FgAAAgM"]
[Mon Feb 02 23:42:06.135367 2026] [:error] [pid 33612:tid 33617] [client 104.46.217.46:20500] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYDFzstFn80qQEmo5QojcgAAAQM"]
[Mon Feb 02 23:42:06.651843 2026] [:error] [pid 57080:tid 57102] [client 104.46.217.46:1989] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYDFzo9Utn0ZlfnF10N6lgAAAs8"]
[Mon Feb 02 23:42:08.159846 2026] [:error] [pid 33612:tid 33630] [client 104.46.217.46:26940] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYDF0MtFn80qQEmo5QojdAAAARA"]
[Mon Feb 02 23:42:09.776450 2026] [:error] [pid 46008:tid 46027] [client 104.46.217.46:22965] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYDF0SRa52iYn7SlSMnGngAAAVA"]
[Mon Feb 02 23:42:11.148017 2026] [:error] [pid 57021:tid 57028] [client 104.46.217.46:22923] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYDF0_7AEpx7VcmYK3EciwAAAkM"]
[Mon Feb 02 23:42:11.684359 2026] [:error] [pid 57080:tid 57091] [client 104.46.217.46:20976] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYDF049Utn0ZlfnF10N6mQAAAsQ"]
[Mon Feb 02 23:42:12.169247 2026] [:error] [pid 57021:tid 57046] [client 104.46.217.46:13602] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYDF1P7AEpx7VcmYK3EcjgAAAlU"]
[Mon Feb 02 23:42:12.540466 2026] [:error] [pid 57021:tid 57032] [client 104.46.217.46:27606] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYDF1P7AEpx7VcmYK3EcjwAAAkc"]
[Mon Feb 02 23:42:13.215331 2026] [:error] [pid 57081:tid 57122] [client 104.46.217.46:16012] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYDF1WvouJ2Jkm6HfBhhLQAAAwc"]
[Mon Feb 02 23:42:14.030269 2026] [:error] [pid 56989:tid 57001] [client 104.46.217.46:20210] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYDF1kp44HnChN-GZlg9GQAAAgo"]
[Mon Feb 02 23:42:15.355280 2026] [:error] [pid 56989:tid 57013] [client 104.46.217.46:20493] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYDF10p44HnChN-GZlg9HAAAAhY"]
[Mon Feb 02 23:42:16.757476 2026] [:error] [pid 57021:tid 57026] [client 104.46.217.46:22927] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYDF2P7AEpx7VcmYK3EckgAAAkE"]
[Mon Feb 02 23:42:19.759725 2026] [:error] [pid 63034:tid 63138] [client 104.46.217.46:22929] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYDF2-KXlgw75_wfbHoDggAAAJQ"]
[Mon Feb 02 23:42:21.619384 2026] [:error] [pid 33612:tid 33614] [client 104.46.217.46:27282] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYDF3ctFn80qQEmo5QojfAAAAQA"]
[Mon Feb 02 23:42:23.723418 2026] [:error] [pid 57022:tid 57071] [client 104.46.217.46:16017] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYDF3xnEgLMzfcurxflqGAAAApM"]
[Mon Feb 02 23:42:25.397410 2026] [:error] [pid 57081:tid 57128] [client 104.46.217.46:17033] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYDF4WvouJ2Jkm6HfBhhNQAAAw0"]
[Mon Feb 02 23:42:26.590049 2026] [:error] [pid 63153:tid 63179] [client 104.46.217.46:1069] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYDF4nC9GXHnmLkdgdnISgAAANI"]
[Mon Feb 02 23:42:27.536330 2026] [:error] [pid 63032:tid 63065] [client 104.46.217.46:1033] [client 104.46.217.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYDF43yEQ1PkpebvdRgNmwAAAAI"]
[Tue Feb 03 00:55:19.924111 2026] [:error] [pid 57080:tid 57110] [client 49.51.233.46:32970] [client 49.51.233.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYDW949Utn0ZlfnF10OEHAAAAtc"]
[Tue Feb 03 02:01:26.001645 2026] [:error] [pid 63153:tid 63169] [client 34.55.50.74:54372] [client 34.55.50.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.55.50.74, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYDmdnC9GXHnmLkdgdntMAAAAMg"]
[Tue Feb 03 02:01:26.005364 2026] [:error] [pid 63153:tid 63169] [client 34.55.50.74:54372] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Feb 03 02:01:28.454291 2026] [:error] [pid 63153:tid 63181] [client 34.55.50.74:54372] [client 34.55.50.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYDmeHC9GXHnmLkdgdntPQAAANQ"]
[Tue Feb 03 02:01:28.875300 2026] [:error] [pid 46008:tid 46031] [client 34.55.50.74:60045] [client 34.55.50.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYDmeCRa52iYn7SlSMnhAgAAAVQ"]
[Tue Feb 03 02:01:29.269095 2026] [:error] [pid 46008:tid 46034] [client 34.55.50.74:53369] [client 34.55.50.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYDmeSRa52iYn7SlSMnhBgAAAVc"]
[Tue Feb 03 02:01:29.698675 2026] [:error] [pid 57080:tid 57108] [client 34.55.50.74:52446] [client 34.55.50.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYDmeY9Utn0ZlfnF10ONdgAAAtU"]
[Tue Feb 03 02:01:30.094326 2026] [:error] [pid 57080:tid 57105] [client 34.55.50.74:57282] [client 34.55.50.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYDmeo9Utn0ZlfnF10ONeAAAAtI"]
[Tue Feb 03 02:01:30.548469 2026] [:error] [pid 57080:tid 57109] [client 34.55.50.74:57793] [client 34.55.50.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYDmeo9Utn0ZlfnF10ONegAAAtY"]
[Tue Feb 03 02:01:30.944239 2026] [:error] [pid 63153:tid 63178] [client 34.55.50.74:64211] [client 34.55.50.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYDmenC9GXHnmLkdgdntPgAAANE"]
[Tue Feb 03 03:14:13.458929 2026] [:error] [pid 63153:tid 63164] [client 180.110.203.108:46367] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYD3hXC9GXHnmLkdgdn7awAAAMM"]
[Tue Feb 03 03:26:58.991285 2026] [:error] [pid 63034:tid 63124] [client 170.106.165.76:41220] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYD6guKXlgw75_wfbHopxAAAAIY"]
[Tue Feb 03 14:14:23.483924 2026] [:error] [pid 43028:tid 43043] [client 43.173.1.57:44734] [client 43.173.1.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYGSP1nHWnJD4cJC5DsueQAAAM0"]
[Tue Feb 03 16:45:11.378981 2026] [:error] [pid 5229:tid 5240] [client 182.44.67.97:50439] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYG1l0KmEgmJub93yUqemwAAAYk"]
[Tue Feb 03 18:18:32.176705 2026] [:error] [pid 5229:tid 5240] [client 20.92.81.163:28718] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Feb 03 19:01:33.582632 2026] [:error] [pid 42922:tid 43008] [client 185.194.178.16:51851] [client 185.194.178.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.16, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aYHVjWazX4WPS_dQRkh8QwAAAJc"]
[Tue Feb 03 19:01:33.587781 2026] [:error] [pid 42922:tid 43008] [client 185.194.178.16:51851] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Feb 03 19:02:11.806332 2026] [:error] [pid 5229:tid 5243] [client 20.212.208.117:38412] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Feb 03 19:11:07.393424 2026] [:error] [pid 42922:tid 42990] [client 146.190.19.231:54826] [client 146.190.19.231] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.19.231, incrementing brute counter"] [hostname "www.dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aYHXy2azX4WPS_dQRkh-_wAAAIU"]
[Tue Feb 03 19:11:07.397373 2026] [:error] [pid 42922:tid 42990] [client 146.190.19.231:54826] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Feb 03 19:28:40.135287 2026] [:error] [pid 43028:tid 43054] [client 103.65.236.149:50878] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aYHb6FnHWnJD4cJC5DuA8AAAANg"]
[Tue Feb 03 20:40:44.022743 2026] [:error] [pid 42920:tid 42940] [client 20.92.81.163:46704] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Feb 03 23:12:30.618716 2026] [:error] [pid 42922:tid 43000] [client 20.210.188.248:2539] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Wed Feb 04 06:31:49.743302 2026] [:error] [pid 47676:tid 47679] [client 182.42.111.156:49814] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYJ3VQrYSkTgZEfUDqF9dgAAAME"]
[Wed Feb 04 12:04:49.091208 2026] [:error] [pid 8285:tid 8296] [client 104.28.153.22:48480] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Wed Feb 04 12:05:38.238438 2026] [:error] [pid 47404:tid 47423] [client 104.28.153.22:49592] [client 104.28.153.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "aYLFkltGjJnGFKjTTuaVZQAAAI0"]
[Wed Feb 04 12:06:04.350447 2026] [:error] [pid 47500:tid 47516] [client 104.28.153.22:48309] [client 104.28.153.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "aYLFrLrUat0rhPdY3A2SSQAAAUw"]
[Wed Feb 04 12:06:27.901451 2026] [:error] [pid 47405:tid 47450] [client 104.28.153.22:49460] [client 104.28.153.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "aYLFw6TmhSrwHQTn6I7qLgAAAMo"]
[Wed Feb 04 15:51:09.211809 2026] [:error] [pid 47406:tid 47486] [client 43.166.246.180:51474] [client 43.166.246.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYL6bQeu9R9b-_wtQ0L_ygAAARM"]
[Wed Feb 04 19:45:43.956931 2026] [:error] [pid 55160:tid 55180] [client 182.42.104.32:57874] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYMxZ-TAiAYDLSDaxdcx4gAAAZI"]
[Wed Feb 04 20:17:23.516539 2026] [:error] [pid 47406:tid 47483] [client 223.228.196.196:12743] [client 223.228.196.196] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.228.196.196, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYM40weu9R9b-_wtQ0IzdwAAARA"]
[Wed Feb 04 20:17:23.521303 2026] [:error] [pid 47406:tid 47483] [client 223.228.196.196:12743] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 04 20:17:25.508451 2026] [:error] [pid 47406:tid 47473] [client 103.157.183.168:43168] [client 103.157.183.168] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.157.183.168, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYM41Qeu9R9b-_wtQ0IzeQAAAQY"]
[Wed Feb 04 20:17:25.513110 2026] [:error] [pid 47406:tid 47473] [client 103.157.183.168:43168] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 04 22:00:43.539016 2026] [:error] [pid 47404:tid 47416] [client 43.131.36.84:56514] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYNRC1tGjJnGFKjTTuZDIQAAAIY"]
[Thu Feb 05 00:11:59.845364 2026] [:error] [pid 63777:tid 63790] [client 43.159.145.149:35018] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYNvz_Q-YVerd_zSVS9v1gAAAAs"]
[Thu Feb 05 02:21:14.546266 2026] [:error] [pid 26443:tid 26466] [client 37.27.119.185:60237] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYOOGtRUJ4b_jBAfhPKDxgAAAVU"], referer: https://www.craigslist.org
[Thu Feb 05 02:21:15.279515 2026] [:error] [pid 63777:tid 63787] [client 37.27.119.185:60988] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYOOG_Q-YVerd_zSVS-Z_AAAAAg"], referer: https://www.linkedin.com
[Thu Feb 05 02:21:16.973435 2026] [:error] [pid 63685:tid 63720] [client 37.27.119.185:61586] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYOOHI6Dyg716yRb8FC0lwAAAMQ"], referer: https://www.nyt.com
[Thu Feb 05 02:21:17.723844 2026] [:error] [pid 63686:tid 63747] [client 37.27.119.185:62268] [client 37.27.119.185] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYOOHRyaRl9O5jmngTwpwAAAAQQ"], referer: https://www.wikipedia.org
[Thu Feb 05 02:31:03.540404 2026] [:error] [pid 26443:tid 26455] [client 103.62.232.34:35426] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYOQZ9RUJ4b_jBAfhPKJdAAAAUo"]
[Thu Feb 05 02:31:03.976062 2026] [:error] [pid 63777:tid 63781] [client 103.62.232.34:35438] [client 103.62.232.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aYOQZ_Q-YVerd_zSVS-dtAAAAAI"]
[Thu Feb 05 02:56:07.484361 2026] [:error] [pid 26443:tid 26459] [client 217.77.10.74:57500] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYOWR9RUJ4b_jBAfhPKUQwAAAU4"]
[Thu Feb 05 03:00:37.113798 2026] [:error] [pid 3156:tid 3185] [client 134.209.56.230:52602] [client 134.209.56.230] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.209.56.230, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aYOXVWFkBP84nEvT5IhafQAAAZg"]
[Thu Feb 05 03:00:37.120673 2026] [:error] [pid 3156:tid 3185] [client 134.209.56.230:52602] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Feb 05 04:51:46.352849 2026] [:error] [pid 12188:tid 12240] [client 49.51.253.26:43256] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYOxYjKWpl9mNO_-qzPXswAAAFA"]
[Thu Feb 05 05:04:45.407694 2026] [:error] [pid 12188:tid 12242] [client 185.137.164.7:52757] [client 185.137.164.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aYO0bTKWpl9mNO_-qzPcMwAAAFI"]
[Thu Feb 05 05:04:46.194027 2026] [:error] [pid 12287:tid 12314] [client 185.137.164.5:38077] [client 185.137.164.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aYO0bjOXzeBKhB81n7rOigAAANc"]
[Thu Feb 05 17:39:26.074712 2026] [:error] [pid 31739:tid 31743] [client 43.164.195.17:48072] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYRlTgGrHl_5BvMstJK3nQAAAAI"]
[Thu Feb 05 19:52:52.469582 2026] [:error] [pid 19246:tid 19258] [client 43.130.67.6:48578] [client 43.130.67.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYSElHE1Gc0V44f4mCdQEQAAAgc"]
[Thu Feb 05 23:35:34.245234 2026] [:error] [pid 19213:tid 19238] [client 43.166.244.66:45308] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYS4xl7WBXhXgHKWAICFZQAAAdQ"]
[Fri Feb 06 03:41:00.769314 2026] [:error] [pid 1663:tid 1680] [client 20.48.104.72:64084] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Feb 06 13:09:42.081643 2026] [:error] [pid 3381:tid 3420] [client 35.160.54.103:52062] [client 35.160.54.103] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "195.201.199.99_ca3e4798e4432adf71505abe7359ea8b716985ff"): Internal error (specific information not available) [hostname "www.dbservices.com.au"] [uri "/index.html"] [unique_id "aYV3ky81zqRg96ZREgjJqwAAAEc"]
[Fri Feb 06 16:02:07.018972 2026] [:error] [pid 3513:tid 3515] [client 170.106.113.159:56910] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYWf_zSw3-HAlzpqSxyIAAAAAUA"]
[Fri Feb 06 16:28:42.015507 2026] [:error] [pid 3381:tid 3433] [client 20.151.206.105:51868] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 06 16:28:42.535928 2026] [:error] [pid 3381:tid 3414] [client 20.151.206.105:51868] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Fri Feb 06 16:28:42.786963 2026] [:error] [pid 3381:tid 3432] [client 20.151.206.105:51868] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Fri Feb 06 16:28:43.028123 2026] [:error] [pid 3381:tid 3430] [client 20.151.206.105:51868] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Feb 06 16:28:43.237282 2026] [:error] [pid 3381:tid 3427] [client 20.151.206.105:51868] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Fri Feb 06 16:28:43.482285 2026] [:error] [pid 3381:tid 3427] [client 20.151.206.105:51868] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Fri Feb 06 16:28:43.688092 2026] [:error] [pid 3381:tid 3419] [client 20.151.206.105:51868] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aYWmOy81zqRg96ZREggf6QAAAEY"]
[Fri Feb 06 16:28:44.607819 2026] [:error] [pid 3381:tid 3424] [client 20.151.206.105:51901] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aYWmPC81zqRg96ZREggf6gAAAEs"]
[Fri Feb 06 16:28:46.876963 2026] [:error] [pid 3477:tid 3481] [client 20.151.206.105:50570] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aYWmPrL0Hdh40C7HYgUncwAAAMI"]
[Fri Feb 06 16:28:49.552056 2026] [:error] [pid 3513:tid 3529] [client 20.151.206.105:51877] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aYWmQTSw3-HAlzpqSxyXIAAAAU4"]
[Fri Feb 06 16:28:51.803473 2026] [:error] [pid 3382:tid 3451] [client 20.151.206.105:51210] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aYWmQ8IgU1HR0rhYrE_-kwAAAIs"]
[Fri Feb 06 16:28:54.339357 2026] [:error] [pid 3513:tid 3527] [client 20.151.206.105:50582] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aYWmRjSw3-HAlzpqSxyXJwAAAUw"]
[Fri Feb 06 16:28:56.146208 2026] [:error] [pid 3477:tid 3500] [client 20.151.206.105:51855] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aYWmSLL0Hdh40C7HYgUnhwAAANU"]
[Fri Feb 06 16:28:59.556558 2026] [:error] [pid 3381:tid 3418] [client 20.151.206.105:50615] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/m.php"] [unique_id "aYWmSy81zqRg96ZREgggDQAAAEU"]
[Fri Feb 06 16:29:00.782695 2026] [:error] [pid 3477:tid 3488] [client 20.151.206.105:51867] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aYWmTLL0Hdh40C7HYgUnpwAAAMk"]
[Fri Feb 06 16:29:02.179763 2026] [:error] [pid 3382:tid 3460] [client 20.151.206.105:4450] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aYWmTsIgU1HR0rhYrE_-rAAAAJQ"]
[Fri Feb 06 16:29:03.056917 2026] [:error] [pid 3477:tid 3484] [client 20.151.206.105:4338] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aYWmT7L0Hdh40C7HYgUnsgAAAMU"]
[Fri Feb 06 16:29:03.892207 2026] [:error] [pid 3477:tid 3486] [client 20.151.206.105:4316] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aYWmT7L0Hdh40C7HYgUnvQAAAMc"]
[Fri Feb 06 16:29:04.835884 2026] [:error] [pid 3382:tid 3458] [client 20.151.206.105:51872] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aYWmUMIgU1HR0rhYrE_-tAAAAJI"]
[Fri Feb 06 16:29:05.440857 2026] [:error] [pid 3477:tid 3492] [client 20.151.206.105:50609] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aYWmUbL0Hdh40C7HYgUnyQAAAM0"]
[Fri Feb 06 16:29:06.242793 2026] [:error] [pid 3382:tid 3461] [client 20.151.206.105:51874] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aYWmUsIgU1HR0rhYrE_-tgAAAJU"]
[Fri Feb 06 16:29:06.946108 2026] [:error] [pid 3381:tid 3425] [client 20.151.206.105:50601] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "aYWmUi81zqRg96ZREgggFwAAAEw"]
[Fri Feb 06 16:29:07.631604 2026] [:error] [pid 3382:tid 3443] [client 20.151.206.105:4444] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYWmU8IgU1HR0rhYrE_-uwAAAIM"]
[Fri Feb 06 16:29:08.333749 2026] [:error] [pid 3382:tid 3445] [client 20.151.206.105:4549] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYWmVMIgU1HR0rhYrE_-vwAAAIU"]
[Fri Feb 06 16:29:08.851410 2026] [:error] [pid 3513:tid 3536] [client 20.151.206.105:51875] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYWmVDSw3-HAlzpqSxyXVwAAAVU"]
[Fri Feb 06 16:29:09.642650 2026] [:error] [pid 3513:tid 3525] [client 20.151.206.105:51218] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "aYWmVTSw3-HAlzpqSxyXYAAAAUo"]
[Fri Feb 06 16:29:10.321884 2026] [:error] [pid 3380:tid 3399] [client 20.151.206.105:4586] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYWmVhFAlUvBGSBK2jcs_gAAAA8"]
[Fri Feb 06 16:29:11.177177 2026] [:error] [pid 3477:tid 3498] [client 20.151.206.105:4421] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYWmV7L0Hdh40C7HYgUn8QAAANM"]
[Fri Feb 06 16:29:11.800635 2026] [:error] [pid 3381:tid 3437] [client 20.151.206.105:4472] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYWmVy81zqRg96ZREgggMgAAAFg"]
[Fri Feb 06 16:29:12.448629 2026] [:error] [pid 3513:tid 3517] [client 20.151.206.105:36882] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "aYWmWDSw3-HAlzpqSxyXaQAAAUI"]
[Fri Feb 06 16:29:13.151676 2026] [:error] [pid 3513:tid 3518] [client 20.151.206.105:36902] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYWmWTSw3-HAlzpqSxyXbAAAAUM"]
[Fri Feb 06 16:29:13.791458 2026] [:error] [pid 3477:tid 3479] [client 20.151.206.105:51259] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYWmWbL0Hdh40C7HYgUn9AAAAMA"]
[Fri Feb 06 16:29:14.339565 2026] [:error] [pid 3513:tid 3519] [client 20.151.206.105:50594] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYWmWjSw3-HAlzpqSxyXbgAAAUQ"]
[Fri Feb 06 16:29:14.979538 2026] [:error] [pid 3477:tid 3483] [client 20.151.206.105:36927] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aYWmWrL0Hdh40C7HYgUn-AAAAMQ"]
[Fri Feb 06 16:29:15.500660 2026] [:error] [pid 3477:tid 3484] [client 20.151.206.105:36905] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYWmW7L0Hdh40C7HYgUn-gAAAMU"]
[Fri Feb 06 16:29:15.971951 2026] [:error] [pid 3382:tid 3457] [client 20.151.206.105:4607] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYWmW8IgU1HR0rhYrE_-1QAAAJE"]
[Fri Feb 06 16:29:16.659767 2026] [:error] [pid 3381:tid 3436] [client 20.151.206.105:4322] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYWmXC81zqRg96ZREgggQwAAAFc"]
[Fri Feb 06 16:29:17.366520 2026] [:error] [pid 3477:tid 3491] [client 20.151.206.105:51235] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aYWmXbL0Hdh40C7HYgUoAgAAAMw"]
[Fri Feb 06 16:29:17.888558 2026] [:error] [pid 3477:tid 3482] [client 20.151.206.105:4572] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYWmXbL0Hdh40C7HYgUoDQAAAMM"]
[Fri Feb 06 16:29:18.435605 2026] [:error] [pid 3380:tid 3403] [client 20.151.206.105:36868] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYWmXhFAlUvBGSBK2jctHgAAABM"]
[Fri Feb 06 16:29:19.206709 2026] [:error] [pid 3513:tid 3538] [client 20.151.206.105:4432] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYWmXzSw3-HAlzpqSxyXfwAAAVc"]
[Fri Feb 06 16:29:19.718865 2026] [:error] [pid 3381:tid 3429] [client 20.151.206.105:51852] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "aYWmXy81zqRg96ZREgggTQAAAFA"]
[Fri Feb 06 16:29:20.627244 2026] [:error] [pid 3513:tid 3535] [client 20.151.206.105:50616] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYWmYDSw3-HAlzpqSxyXhAAAAVQ"]
[Fri Feb 06 16:29:21.284317 2026] [:error] [pid 3477:tid 3487] [client 20.151.206.105:4333] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYWmYbL0Hdh40C7HYgUoJAAAAMg"]
[Fri Feb 06 16:29:21.824015 2026] [:error] [pid 3380:tid 3395] [client 20.151.206.105:4567] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYWmYRFAlUvBGSBK2jctLQAAAAs"]
[Fri Feb 06 16:29:22.297901 2026] [:error] [pid 3382:tid 3463] [client 20.151.206.105:51884] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "aYWmYsIgU1HR0rhYrE_--gAAAJc"]
[Fri Feb 06 16:29:22.898075 2026] [:error] [pid 3381:tid 3434] [client 20.151.206.105:50607] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYWmYi81zqRg96ZREgggVAAAAFU"]
[Fri Feb 06 16:29:23.393285 2026] [:error] [pid 3380:tid 3384] [client 20.151.206.105:50588] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYWmYxFAlUvBGSBK2jctMgAAAAA"]
[Fri Feb 06 16:29:24.185462 2026] [:error] [pid 3513:tid 3520] [client 20.151.206.105:51216] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYWmZDSw3-HAlzpqSxyXjgAAAUU"]
[Fri Feb 06 16:29:24.883884 2026] [:error] [pid 3382:tid 3451] [client 20.151.206.105:50605] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aYWmZMIgU1HR0rhYrE__AwAAAIs"]
[Fri Feb 06 16:29:25.417385 2026] [:error] [pid 3382:tid 3457] [client 20.151.206.105:51863] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYWmZcIgU1HR0rhYrE__BAAAAJE"]
[Fri Feb 06 16:29:25.863613 2026] [:error] [pid 3513:tid 3526] [client 20.151.206.105:4478] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYWmZTSw3-HAlzpqSxyXlwAAAUs"]
[Fri Feb 06 16:29:26.469663 2026] [:error] [pid 3382:tid 3450] [client 20.151.206.105:51866] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYWmZsIgU1HR0rhYrE__BwAAAIo"]
[Fri Feb 06 16:29:27.379665 2026] [:error] [pid 3380:tid 3391] [client 20.151.206.105:50604] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "aYWmZxFAlUvBGSBK2jctQAAAAAc"]
[Fri Feb 06 16:29:28.897005 2026] [:error] [pid 3513:tid 3516] [client 20.151.206.105:36907] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYWmaDSw3-HAlzpqSxyXrwAAAUE"]
[Fri Feb 06 16:29:30.031328 2026] [:error] [pid 3380:tid 3399] [client 20.151.206.105:4447] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYWmahFAlUvBGSBK2jctTwAAAA8"]
[Fri Feb 06 16:29:31.241133 2026] [:error] [pid 3380:tid 3394] [client 20.151.206.105:51244] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYWmaxFAlUvBGSBK2jctWgAAAAo"]
[Fri Feb 06 16:29:32.307515 2026] [:error] [pid 3380:tid 3405] [client 20.151.206.105:4295] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aYWmbBFAlUvBGSBK2jctYAAAABU"]
[Fri Feb 06 16:29:33.187618 2026] [:error] [pid 3513:tid 3517] [client 20.151.206.105:51846] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYWmbTSw3-HAlzpqSxyXvgAAAUI"]
[Fri Feb 06 16:29:34.580993 2026] [:error] [pid 3477:tid 3499] [client 20.151.206.105:4417] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYWmbrL0Hdh40C7HYgUoNwAAANQ"]
[Fri Feb 06 16:29:35.526790 2026] [:error] [pid 3513:tid 3526] [client 20.151.206.105:51209] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYWmbzSw3-HAlzpqSxyXzAAAAUs"]
[Fri Feb 06 16:29:36.422094 2026] [:error] [pid 3477:tid 3498] [client 20.151.206.105:4576] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "aYWmcLL0Hdh40C7HYgUoOQAAANM"]
[Fri Feb 06 16:29:37.024310 2026] [:error] [pid 3477:tid 3490] [client 20.151.206.105:4288] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYWmcbL0Hdh40C7HYgUoOwAAAMs"]
[Fri Feb 06 16:29:37.770019 2026] [:error] [pid 3477:tid 3491] [client 20.151.206.105:51205] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYWmcbL0Hdh40C7HYgUoQQAAAMw"]
[Fri Feb 06 16:29:39.580683 2026] [:error] [pid 3513:tid 3515] [client 20.151.206.105:49922] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYWmczSw3-HAlzpqSxyX1QAAAUA"]
[Fri Feb 06 16:29:40.067598 2026] [:error] [pid 3477:tid 3503] [client 20.151.206.105:51887] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aYWmdLL0Hdh40C7HYgUoUQAAANg"]
[Fri Feb 06 16:29:40.755605 2026] [:error] [pid 3477:tid 3482] [client 20.151.206.105:4470] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYWmdLL0Hdh40C7HYgUoUwAAAMM"]
[Fri Feb 06 16:29:41.281627 2026] [:error] [pid 3477:tid 3497] [client 20.151.206.105:36909] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYWmdbL0Hdh40C7HYgUoVQAAANI"]
[Fri Feb 06 16:29:42.126910 2026] [:error] [pid 3381:tid 3434] [client 20.151.206.105:36885] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYWmdi81zqRg96ZREgggbwAAAFU"]
[Fri Feb 06 16:29:42.579483 2026] [:error] [pid 3382:tid 3459] [client 20.151.206.105:51227] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "aYWmdsIgU1HR0rhYrE__HQAAAJM"]
[Fri Feb 06 16:29:43.119270 2026] [:error] [pid 3380:tid 3395] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Fri Feb 06 16:29:43.330892 2026] [:error] [pid 3380:tid 3390] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 06 16:29:43.540724 2026] [:error] [pid 3380:tid 3401] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Feb 06 16:29:43.764777 2026] [:error] [pid 3380:tid 3397] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Feb 06 16:29:44.450200 2026] [:error] [pid 3380:tid 3407] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Feb 06 16:29:44.666700 2026] [:error] [pid 3380:tid 3393] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Feb 06 16:29:44.903183 2026] [:error] [pid 3380:tid 3406] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Feb 06 16:29:45.112927 2026] [:error] [pid 3380:tid 3408] [client 20.151.206.105:51248] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Feb 06 16:29:45.550787 2026] [:error] [pid 3380:tid 3389] [client 20.151.206.105:51248] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmeRFAlUvBGSBK2jctiQAAAAU"]
[Fri Feb 06 16:29:46.044467 2026] [:error] [pid 3380:tid 3402] [client 20.151.206.105:49967] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmehFAlUvBGSBK2jctiwAAABI"]
[Fri Feb 06 16:29:46.488254 2026] [:error] [pid 3380:tid 3388] [client 20.151.206.105:51861] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmehFAlUvBGSBK2jctjQAAAAQ"]
[Fri Feb 06 16:29:47.047482 2026] [:error] [pid 3513:tid 3526] [client 20.151.206.105:36924] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmezSw3-HAlzpqSxyX6gAAAUs"]
[Fri Feb 06 16:29:47.679571 2026] [:error] [pid 3513:tid 3536] [client 20.151.206.105:4436] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmezSw3-HAlzpqSxyX6wAAAVU"]
[Fri Feb 06 16:29:48.396436 2026] [:error] [pid 3382:tid 3463] [client 20.151.206.105:4318] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmfMIgU1HR0rhYrE__KQAAAJc"]
[Fri Feb 06 16:29:49.484879 2026] [:error] [pid 3382:tid 3455] [client 20.151.206.105:4435] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmfcIgU1HR0rhYrE__KgAAAI8"]
[Fri Feb 06 16:29:50.361213 2026] [:error] [pid 3477:tid 3498] [client 20.151.206.105:51883] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmfrL0Hdh40C7HYgUodAAAANM"]
[Fri Feb 06 16:29:51.899424 2026] [:error] [pid 3382:tid 3457] [client 20.151.206.105:51243] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYWmf8IgU1HR0rhYrE__MQAAAJE"]
[Fri Feb 06 16:29:53.769822 2026] [:error] [pid 3477:tid 3480] [client 20.151.206.105:4443] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmgbL0Hdh40C7HYgUojgAAAME"]
[Fri Feb 06 16:29:55.151022 2026] [:error] [pid 3513:tid 3529] [client 20.151.206.105:4427] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmgzSw3-HAlzpqSxyYMQAAAU4"]
[Fri Feb 06 16:29:57.029057 2026] [:error] [pid 3382:tid 3462] [client 20.151.206.105:4588] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmhcIgU1HR0rhYrE__VAAAAJY"]
[Fri Feb 06 16:30:00.197071 2026] [:error] [pid 3513:tid 3522] [client 20.151.206.105:50562] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aYWmiDSw3-HAlzpqSxyYPwAAAUc"]
[Fri Feb 06 16:30:01.011111 2026] [:error] [pid 3513:tid 3535] [client 20.151.206.105:49951] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYWmiTSw3-HAlzpqSxyYQAAAAVQ"]
[Fri Feb 06 16:30:01.930880 2026] [:error] [pid 3513:tid 3515] [client 20.151.206.105:4596] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYWmiTSw3-HAlzpqSxyYSgAAAUA"]
[Fri Feb 06 16:30:03.151078 2026] [:error] [pid 3380:tid 3406] [client 20.151.206.105:51256] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYWmixFAlUvBGSBK2jctygAAABY"]
[Fri Feb 06 16:30:03.762844 2026] [:error] [pid 3380:tid 3393] [client 20.151.206.105:49933] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aYWmixFAlUvBGSBK2jct0AAAAAk"]
[Fri Feb 06 16:30:04.413333 2026] [:error] [pid 3380:tid 3397] [client 20.151.206.105:51878] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYWmjBFAlUvBGSBK2jct0wAAAA0"]
[Fri Feb 06 16:30:05.014135 2026] [:error] [pid 3477:tid 3496] [client 20.151.206.105:4313] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYWmjbL0Hdh40C7HYgUotQAAANE"]
[Fri Feb 06 16:30:05.510148 2026] [:error] [pid 3380:tid 3400] [client 20.151.206.105:4445] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYWmjRFAlUvBGSBK2jct2QAAABA"]
[Fri Feb 06 16:30:06.148851 2026] [:error] [pid 3381:tid 3417] [client 20.151.206.105:51244] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aYWmji81zqRg96ZREgghUAAAAEQ"]
[Fri Feb 06 16:30:06.807120 2026] [:error] [pid 3381:tid 3413] [client 20.151.206.105:36895] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYWmji81zqRg96ZREgghVQAAAEA"]
[Fri Feb 06 16:30:07.444928 2026] [:error] [pid 3382:tid 3457] [client 20.151.206.105:4307] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYWmj8IgU1HR0rhYrE__bAAAAJE"]
[Fri Feb 06 16:30:07.983807 2026] [:error] [pid 3477:tid 3497] [client 20.151.206.105:50589] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYWmj7L0Hdh40C7HYgUozQAAANI"]
[Fri Feb 06 16:30:08.494931 2026] [:error] [pid 3381:tid 3430] [client 20.151.206.105:4554] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYWmkC81zqRg96ZREgghWgAAAFE"]
[Fri Feb 06 16:30:08.985937 2026] [:error] [pid 3382:tid 3451] [client 20.151.206.105:4319] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmkMIgU1HR0rhYrE__cQAAAIs"]
[Fri Feb 06 16:30:09.428092 2026] [:error] [pid 3380:tid 3389] [client 20.151.206.105:51842] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmkRFAlUvBGSBK2jct5gAAAAU"]
[Fri Feb 06 16:30:09.926756 2026] [:error] [pid 3513:tid 3539] [client 20.151.206.105:4326] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmkTSw3-HAlzpqSxyYWwAAAVg"]
[Fri Feb 06 16:30:10.876671 2026] [:error] [pid 3477:tid 3485] [client 20.151.206.105:4467] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aYWmkrL0Hdh40C7HYgUo1wAAAMY"]
[Fri Feb 06 16:30:11.377794 2026] [:error] [pid 3380:tid 3403] [client 20.151.206.105:50583] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYWmkxFAlUvBGSBK2jct6AAAABM"]
[Fri Feb 06 16:30:11.830479 2026] [:error] [pid 3513:tid 3517] [client 20.151.206.105:4589] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYWmkzSw3-HAlzpqSxyYXwAAAUI"]
[Fri Feb 06 16:30:12.342006 2026] [:error] [pid 3513:tid 3536] [client 20.151.206.105:51252] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYWmlDSw3-HAlzpqSxyYYQAAAVU"]
[Fri Feb 06 16:30:12.850384 2026] [:error] [pid 3381:tid 3413] [client 20.151.206.105:36925] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aYWmlC81zqRg96ZREgghYQAAAEA"]
[Fri Feb 06 16:30:13.311278 2026] [:error] [pid 3382:tid 3460] [client 20.151.206.105:36877] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYWmlcIgU1HR0rhYrE__eQAAAJQ"]
[Fri Feb 06 16:30:14.070688 2026] [:error] [pid 3381:tid 3428] [client 20.151.206.105:4575] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYWmli81zqRg96ZREgghZgAAAE8"]
[Fri Feb 06 16:30:14.529030 2026] [:error] [pid 3382:tid 3455] [client 20.151.206.105:4606] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYWmlsIgU1HR0rhYrE__fQAAAI8"]
[Fri Feb 06 16:30:15.094663 2026] [:error] [pid 3382:tid 3456] [client 20.151.206.105:50618] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aYWml8IgU1HR0rhYrE__gQAAAJA"]
[Fri Feb 06 16:30:16.130324 2026] [:error] [pid 3513:tid 3535] [client 20.151.206.105:51200] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYWmmDSw3-HAlzpqSxyYZQAAAVQ"]
[Fri Feb 06 16:30:17.211325 2026] [:error] [pid 3513:tid 3539] [client 20.151.206.105:4425] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYWmmTSw3-HAlzpqSxyYaAAAAVg"]
[Fri Feb 06 16:30:18.672486 2026] [:error] [pid 3381:tid 3419] [client 20.151.206.105:4546] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYWmmi81zqRg96ZREgghbgAAAEY"]
[Fri Feb 06 16:30:19.876844 2026] [:error] [pid 3513:tid 3525] [client 20.151.206.105:4346] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aYWmmzSw3-HAlzpqSxyYawAAAUo"]
[Fri Feb 06 16:30:20.632332 2026] [:error] [pid 3477:tid 3495] [client 20.151.206.105:4580] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYWmnLL0Hdh40C7HYgUo5QAAANA"]
[Fri Feb 06 16:30:21.313449 2026] [:error] [pid 3380:tid 3403] [client 20.151.206.105:50566] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYWmnRFAlUvBGSBK2jct9AAAABM"]
[Fri Feb 06 16:30:22.208758 2026] [:error] [pid 3380:tid 3388] [client 20.151.206.105:4426] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYWmnhFAlUvBGSBK2jct9wAAAAQ"]
[Fri Feb 06 16:30:23.127844 2026] [:error] [pid 3513:tid 3522] [client 20.151.206.105:4603] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aYWmnzSw3-HAlzpqSxyYdgAAAUc"]
[Fri Feb 06 16:30:23.681837 2026] [:error] [pid 3380:tid 3404] [client 20.151.206.105:4544] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYWmnxFAlUvBGSBK2jct-gAAABQ"]
[Fri Feb 06 16:30:24.422931 2026] [:error] [pid 3513:tid 3534] [client 20.151.206.105:51903] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYWmoDSw3-HAlzpqSxyYfQAAAVM"]
[Fri Feb 06 16:30:25.382139 2026] [:error] [pid 3380:tid 3392] [client 20.151.206.105:51211] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYWmoRFAlUvBGSBK2jcuBAAAAAg"]
[Fri Feb 06 16:30:26.366325 2026] [:error] [pid 3380:tid 3400] [client 20.151.206.105:51303] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aYWmohFAlUvBGSBK2jcuBwAAABA"]
[Fri Feb 06 16:30:26.915722 2026] [:error] [pid 3477:tid 3494] [client 20.151.206.105:51238] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYWmorL0Hdh40C7HYgUo7AAAAM8"]
[Fri Feb 06 16:30:27.751858 2026] [:error] [pid 3477:tid 3503] [client 20.151.206.105:51231] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYWmo7L0Hdh40C7HYgUo9gAAANg"]
[Fri Feb 06 16:30:28.779740 2026] [:error] [pid 3380:tid 3404] [client 20.151.206.105:4453] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYWmpBFAlUvBGSBK2jcuEwAAABQ"]
[Fri Feb 06 16:30:29.422281 2026] [:error] [pid 3382:tid 3456] [client 20.151.206.105:51261] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aYWmpcIgU1HR0rhYrE__nAAAAJA"]
[Fri Feb 06 16:30:30.087354 2026] [:error] [pid 3382:tid 3455] [client 20.151.206.105:4547] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYWmpsIgU1HR0rhYrE__ngAAAI8"]
[Fri Feb 06 16:30:30.658181 2026] [:error] [pid 3380:tid 3389] [client 20.151.206.105:4571] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYWmphFAlUvBGSBK2jcuGQAAAAU"]
[Fri Feb 06 16:30:31.404985 2026] [:error] [pid 3381:tid 3414] [client 20.151.206.105:49292] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYWmpy81zqRg96ZREgghdAAAAEE"]
[Fri Feb 06 16:30:32.400466 2026] [:error] [pid 3477:tid 3483] [client 20.151.206.105:36864] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aYWmqLL0Hdh40C7HYgUo_AAAAMQ"]
[Fri Feb 06 16:30:33.178831 2026] [:error] [pid 3382:tid 3464] [client 20.151.206.105:51223] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYWmqcIgU1HR0rhYrE__oQAAAJg"]
[Fri Feb 06 16:30:34.302966 2026] [:error] [pid 3381:tid 3431] [client 20.151.206.105:50597] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYWmqi81zqRg96ZREgghfQAAAFI"]
[Fri Feb 06 16:30:35.292541 2026] [:error] [pid 3513:tid 3523] [client 20.151.206.105:4433] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYWmqzSw3-HAlzpqSxyYmQAAAUg"]
[Fri Feb 06 16:30:36.431519 2026] [:error] [pid 3477:tid 3497] [client 20.151.206.105:4424] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aYWmrLL0Hdh40C7HYgUpCQAAANI"]
[Fri Feb 06 16:30:37.074125 2026] [:error] [pid 3513:tid 3529] [client 20.151.206.105:4302] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYWmrTSw3-HAlzpqSxyYngAAAU4"]
[Fri Feb 06 16:30:37.527741 2026] [:error] [pid 3380:tid 3398] [client 20.151.206.105:4461] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYWmrRFAlUvBGSBK2jcuIwAAAA4"]
[Fri Feb 06 16:30:38.012388 2026] [:error] [pid 3380:tid 3405] [client 20.151.206.105:4342] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYWmrhFAlUvBGSBK2jcuJQAAABU"]
[Fri Feb 06 16:30:38.517073 2026] [:error] [pid 3381:tid 3430] [client 20.151.206.105:51251] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aYWmri81zqRg96ZREgghhQAAAFE"]
[Fri Feb 06 16:30:39.824341 2026] [:error] [pid 3382:tid 3462] [client 20.151.206.105:4312] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWmr8IgU1HR0rhYrE__qwAAAJY"]
[Fri Feb 06 16:30:41.569982 2026] [:error] [pid 3380:tid 3404] [client 20.151.206.105:4328] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWmsRFAlUvBGSBK2jcuMgAAABQ"]
[Fri Feb 06 16:30:42.758136 2026] [:error] [pid 3382:tid 3449] [client 20.151.206.105:5095] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWmssIgU1HR0rhYrE__tQAAAIk"]
[Fri Feb 06 16:30:43.575848 2026] [:error] [pid 3382:tid 3451] [client 20.151.206.105:36918] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWms8IgU1HR0rhYrE__uAAAAIs"]
[Fri Feb 06 16:30:45.347010 2026] [:error] [pid 3382:tid 3447] [client 20.151.206.105:36898] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Feb 06 16:30:45.561598 2026] [:error] [pid 3382:tid 3451] [client 20.151.206.105:36898] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 06 16:30:45.981487 2026] [:error] [pid 3382:tid 3454] [client 20.151.206.105:36898] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Feb 06 16:30:46.192015 2026] [:error] [pid 3382:tid 3460] [client 20.151.206.105:36898] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Fri Feb 06 16:30:46.724031 2026] [:error] [pid 3382:tid 3458] [client 20.151.206.105:36898] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYWmtsIgU1HR0rhYrE__ywAAAJI"]
[Fri Feb 06 16:30:47.347993 2026] [:error] [pid 3381:tid 3435] [client 20.151.206.105:36866] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYWmty81zqRg96ZREgghkAAAAFY"]
[Fri Feb 06 16:30:48.287950 2026] [:error] [pid 3381:tid 3426] [client 20.151.206.105:36916] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYWmuC81zqRg96ZREgghlAAAAE0"]
[Fri Feb 06 16:30:49.234613 2026] [:error] [pid 3381:tid 3416] [client 20.151.206.105:36887] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aYWmuS81zqRg96ZREgghmgAAAEM"]
[Fri Feb 06 16:30:50.143760 2026] [:error] [pid 3380:tid 3408] [client 20.151.206.105:4419] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYWmuhFAlUvBGSBK2jcuPQAAABg"]
[Fri Feb 06 16:30:50.644902 2026] [:error] [pid 3381:tid 3420] [client 20.151.206.105:51295] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYWmui81zqRg96ZREgghnwAAAEc"]
[Fri Feb 06 16:30:51.314884 2026] [:error] [pid 3381:tid 3423] [client 20.151.206.105:4577] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYWmuy81zqRg96ZREgghpgAAAEo"]
[Fri Feb 06 16:30:52.137482 2026] [:error] [pid 3513:tid 3529] [client 20.151.206.105:5090] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aYWmvDSw3-HAlzpqSxyYuwAAAU4"]
[Fri Feb 06 16:30:53.011205 2026] [:error] [pid 3380:tid 3404] [client 20.151.206.105:36874] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWmvRFAlUvBGSBK2jcuQgAAABQ"]
[Fri Feb 06 16:30:53.501522 2026] [:error] [pid 3380:tid 3393] [client 20.151.206.105:51226] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWmvRFAlUvBGSBK2jcuRgAAAAk"]
[Fri Feb 06 16:30:54.178122 2026] [:error] [pid 3382:tid 3457] [client 20.151.206.105:44080] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWmvsIgU1HR0rhYrE__zQAAAJE"]
[Fri Feb 06 16:30:55.208962 2026] [:error] [pid 3382:tid 3444] [client 20.151.206.105:49313] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aYWmv8IgU1HR0rhYrE__1QAAAIQ"]
[Fri Feb 06 16:30:55.896781 2026] [:error] [pid 3513:tid 3523] [client 20.151.206.105:51900] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYWmvzSw3-HAlzpqSxyYvQAAAUg"]
[Fri Feb 06 16:30:56.722423 2026] [:error] [pid 3381:tid 3433] [client 20.151.206.105:50580] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYWmwC81zqRg96ZREgghrgAAAFQ"]
[Fri Feb 06 16:30:57.457708 2026] [:error] [pid 3382:tid 3456] [client 20.151.206.105:36903] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYWmwcIgU1HR0rhYrE__3AAAAJA"]
[Fri Feb 06 16:30:58.017821 2026] [:error] [pid 3381:tid 3435] [client 20.151.206.105:51219] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aYWmwi81zqRg96ZREgghsAAAAFY"]
[Fri Feb 06 16:30:58.695953 2026] [:error] [pid 3381:tid 3429] [client 20.151.206.105:4455] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYWmwi81zqRg96ZREgghtAAAAFA"]
[Fri Feb 06 16:30:59.176429 2026] [:error] [pid 3381:tid 3421] [client 20.151.206.105:4292] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYWmwy81zqRg96ZREgghtwAAAEg"]
[Fri Feb 06 16:30:59.663223 2026] [:error] [pid 3513:tid 3519] [client 20.151.206.105:4463] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYWmwzSw3-HAlzpqSxyYwgAAAUQ"]
[Fri Feb 06 16:31:00.114341 2026] [:error] [pid 3513:tid 3516] [client 20.151.206.105:51848] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYWmxDSw3-HAlzpqSxyYwwAAAUE"]
[Fri Feb 06 16:31:02.355037 2026] [:error] [pid 3513:tid 3539] [client 20.151.206.105:4548] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYWmxjSw3-HAlzpqSxyYxQAAAVg"]
[Fri Feb 06 16:31:03.044498 2026] [:error] [pid 3382:tid 3458] [client 20.151.206.105:50568] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYWmx8IgU1HR0rhYrE__4gAAAJI"]
[Fri Feb 06 16:31:03.513792 2026] [:error] [pid 3382:tid 3449] [client 20.151.206.105:51262] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYWmx8IgU1HR0rhYrE__5AAAAIk"]
[Fri Feb 06 16:31:04.141709 2026] [:error] [pid 3513:tid 3534] [client 20.151.206.105:51224] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aYWmyDSw3-HAlzpqSxyYygAAAVM"]
[Fri Feb 06 16:31:04.572823 2026] [:error] [pid 3382:tid 3463] [client 20.151.206.105:51320] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYWmyMIgU1HR0rhYrE__5wAAAJc"]
[Fri Feb 06 16:31:05.145845 2026] [:error] [pid 3513:tid 3518] [client 20.151.206.105:51253] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYWmyTSw3-HAlzpqSxyYzAAAAUM"]
[Fri Feb 06 16:31:06.183476 2026] [:error] [pid 3381:tid 3416] [client 20.151.206.105:36879] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYWmyi81zqRg96ZREgghxAAAAEM"]
[Fri Feb 06 16:31:07.108087 2026] [:error] [pid 3477:tid 3498] [client 20.151.206.105:49949] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aYWmy7L0Hdh40C7HYgUpKAAAANM"]
[Fri Feb 06 16:31:07.750763 2026] [:error] [pid 3381:tid 3427] [client 20.151.206.105:51236] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYWmyy81zqRg96ZREgghywAAAE4"]
[Fri Feb 06 16:31:08.222236 2026] [:error] [pid 3382:tid 3454] [client 20.151.206.105:4599] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYWmzMIgU1HR0rhYrE__8gAAAI4"]
[Fri Feb 06 16:31:08.687086 2026] [:error] [pid 3382:tid 3460] [client 20.151.206.105:51876] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYWmzMIgU1HR0rhYrE__8wAAAJQ"]
[Fri Feb 06 16:31:09.228120 2026] [:error] [pid 3477:tid 3497] [client 20.151.206.105:44060] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aYWmzbL0Hdh40C7HYgUpKQAAANI"]
[Fri Feb 06 16:31:09.692277 2026] [:error] [pid 3477:tid 3479] [client 20.151.206.105:4431] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYWmzbL0Hdh40C7HYgUpKwAAAMA"]
[Fri Feb 06 16:31:10.143794 2026] [:error] [pid 3477:tid 3486] [client 20.151.206.105:5059] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYWmzrL0Hdh40C7HYgUpLQAAAMc"]
[Fri Feb 06 16:31:10.641605 2026] [:error] [pid 3381:tid 3414] [client 20.151.206.105:4562] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYWmzi81zqRg96ZREgghzwAAAEE"]
[Fri Feb 06 16:31:11.081800 2026] [:error] [pid 3477:tid 3491] [client 20.151.206.105:51896] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aYWmz7L0Hdh40C7HYgUpMQAAAMw"]
[Fri Feb 06 16:31:11.625889 2026] [:error] [pid 3477:tid 3500] [client 20.151.206.105:4342] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYWmz7L0Hdh40C7HYgUpNAAAANU"]
[Fri Feb 06 16:31:12.337467 2026] [:error] [pid 3477:tid 3484] [client 20.151.206.105:36917] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYWm0LL0Hdh40C7HYgUpNwAAAMU"]
[Fri Feb 06 16:31:13.093065 2026] [:error] [pid 3477:tid 3489] [client 20.151.206.105:49966] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYWm0bL0Hdh40C7HYgUpOAAAAMo"]
[Fri Feb 06 16:31:13.689336 2026] [:error] [pid 3477:tid 3497] [client 20.151.206.105:4331] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aYWm0bL0Hdh40C7HYgUpPAAAANI"]
[Fri Feb 06 16:31:14.279689 2026] [:error] [pid 3381:tid 3435] [client 20.151.206.105:49332] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYWm0i81zqRg96ZREggh0gAAAFY"]
[Fri Feb 06 16:31:15.068583 2026] [:error] [pid 3513:tid 3530] [client 20.151.206.105:50592] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aYWm0zSw3-HAlzpqSxyY4wAAAU8"]
[Fri Feb 06 16:31:15.561589 2026] [:error] [pid 3381:tid 3427] [client 20.151.206.105:4440] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aYWm0y81zqRg96ZREggh0wAAAE4"]
[Fri Feb 06 16:31:16.125760 2026] [:error] [pid 3380:tid 3408] [client 20.151.206.105:36875] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aYWm1BFAlUvBGSBK2jcubgAAABg"]
[Fri Feb 06 16:31:17.133895 2026] [:error] [pid 3382:tid 3451] [client 20.151.206.105:4434] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aYWm1cIgU1HR0rhYrE__-gAAAIs"]
[Fri Feb 06 16:31:17.868867 2026] [:error] [pid 3382:tid 3461] [client 20.151.206.105:4587] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aYWm1cIgU1HR0rhYrE8AAAAAAJU"]
[Fri Feb 06 16:31:18.593505 2026] [:error] [pid 3381:tid 3431] [client 20.151.206.105:50595] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYWm1i81zqRg96ZREggh3QAAAFI"]
[Fri Feb 06 16:31:19.568688 2026] [:error] [pid 3513:tid 3535] [client 20.151.206.105:4464] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYWm1zSw3-HAlzpqSxyY7QAAAVQ"]
[Fri Feb 06 16:31:20.162006 2026] [:error] [pid 3513:tid 3515] [client 20.151.206.105:5074] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYWm2DSw3-HAlzpqSxyY7gAAAUA"]
[Fri Feb 06 16:31:20.868275 2026] [:error] [pid 3380:tid 3401] [client 20.151.206.105:4289] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aYWm2BFAlUvBGSBK2jcueAAAABE"]
[Fri Feb 06 16:31:23.130898 2026] [:error] [pid 3513:tid 3539] [client 20.151.206.105:36900] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYWm2zSw3-HAlzpqSxyY9QAAAVg"]
[Fri Feb 06 16:31:24.497829 2026] [:error] [pid 3513:tid 3515] [client 20.151.206.105:51217] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYWm3DSw3-HAlzpqSxyY-QAAAUA"]
[Fri Feb 06 16:31:25.795782 2026] [:error] [pid 3381:tid 3419] [client 20.151.206.105:4348] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYWm3S81zqRg96ZREggh5QAAAEY"]
[Fri Feb 06 16:31:26.659451 2026] [:error] [pid 3382:tid 3440] [client 20.151.206.105:50574] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aYWm3sIgU1HR0rhYrE8ADgAAAIA"]
[Fri Feb 06 16:31:27.515356 2026] [:error] [pid 3477:tid 3499] [client 20.151.206.105:44048] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYWm37L0Hdh40C7HYgUpWQAAANQ"]
[Fri Feb 06 16:31:28.160989 2026] [:error] [pid 3477:tid 3485] [client 20.151.206.105:4336] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYWm4LL0Hdh40C7HYgUpWwAAAMY"]
[Fri Feb 06 16:31:28.700524 2026] [:error] [pid 3477:tid 3491] [client 20.151.206.105:4545] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYWm4LL0Hdh40C7HYgUpXQAAAMw"]
[Fri Feb 06 16:31:29.411412 2026] [:error] [pid 3381:tid 3429] [client 20.151.206.105:49980] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aYWm4S81zqRg96ZREggh6gAAAFA"]
[Fri Feb 06 16:31:30.694175 2026] [:error] [pid 3477:tid 3481] [client 20.151.206.105:36923] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aYWm4rL0Hdh40C7HYgUpYgAAAMI"]
[Fri Feb 06 16:31:31.850527 2026] [:error] [pid 3382:tid 3448] [client 20.151.206.105:51240] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYWm48IgU1HR0rhYrE8AIQAAAIg"]
[Fri Feb 06 16:31:33.044734 2026] [:error] [pid 3380:tid 3384] [client 20.151.206.105:49290] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYWm5RFAlUvBGSBK2jcuhgAAAAA"]
[Fri Feb 06 16:31:34.048455 2026] [:error] [pid 3380:tid 3388] [client 20.151.206.105:4473] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYWm5hFAlUvBGSBK2jcuiAAAAAQ"]
[Fri Feb 06 16:31:35.084328 2026] [:error] [pid 3381:tid 3418] [client 20.151.206.105:36894] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "aYWm5y81zqRg96ZREggh9AAAAEU"]
[Fri Feb 06 16:31:35.624128 2026] [:error] [pid 3477:tid 3482] [client 20.151.206.105:50584] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYWm57L0Hdh40C7HYgUpawAAAMM"]
[Fri Feb 06 16:31:36.182642 2026] [:error] [pid 3477:tid 3483] [client 20.151.206.105:4579] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYWm6LL0Hdh40C7HYgUpbQAAAMQ"]
[Fri Feb 06 16:31:36.716849 2026] [:error] [pid 3477:tid 3501] [client 20.151.206.105:51865] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYWm6LL0Hdh40C7HYgUpcQAAANY"]
[Fri Feb 06 16:31:37.441054 2026] [:error] [pid 3381:tid 3427] [client 20.151.206.105:44047] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aYWm6S81zqRg96ZREggh-gAAAE4"]
[Fri Feb 06 16:31:39.312248 2026] [:error] [pid 3381:tid 3422] [client 20.151.206.105:49924] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aYWm6y81zqRg96ZREggiBgAAAEk"]
[Fri Feb 06 16:31:41.186894 2026] [:error] [pid 3382:tid 3463] [client 20.151.206.105:51312] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aYWm7cIgU1HR0rhYrE8AKQAAAJc"]
[Fri Feb 06 16:31:42.795428 2026] [:error] [pid 3513:tid 3530] [client 20.151.206.105:4597] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aYWm7jSw3-HAlzpqSxyZBQAAAU8"]
[Fri Feb 06 16:31:44.425458 2026] [:error] [pid 3477:tid 3503] [client 20.151.206.105:36873] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "aYWm8LL0Hdh40C7HYgUpfgAAANg"]
[Fri Feb 06 16:31:45.474248 2026] [:error] [pid 3382:tid 3450] [client 20.151.206.105:49334] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aYWm8cIgU1HR0rhYrE8ANwAAAIo"]
[Fri Feb 06 16:31:46.687478 2026] [:error] [pid 3382:tid 3449] [client 20.151.206.105:4343] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Feb 06 16:31:47.139826 2026] [:error] [pid 3382:tid 3451] [client 20.151.206.105:4343] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Fri Feb 06 16:31:48.289777 2026] [:error] [pid 3382:tid 3442] [client 20.151.206.105:4343] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYWm9MIgU1HR0rhYrE8ASQAAAII"]
[Fri Feb 06 16:31:50.543508 2026] [:error] [pid 3382:tid 3441] [client 20.151.206.105:49305] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYWm9sIgU1HR0rhYrE8ATAAAAIE"]
[Fri Feb 06 16:31:51.228195 2026] [:error] [pid 3477:tid 3481] [client 20.151.206.105:49314] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYWm97L0Hdh40C7HYgUpkgAAAMI"]
[Fri Feb 06 16:31:51.734700 2026] [:error] [pid 3477:tid 3492] [client 20.151.206.105:36891] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aYWm97L0Hdh40C7HYgUplQAAAM0"]
[Fri Feb 06 16:31:52.502424 2026] [:error] [pid 3513:tid 3530] [client 20.151.206.105:51241] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYWm-DSw3-HAlzpqSxyZEwAAAU8"]
[Fri Feb 06 16:31:53.143334 2026] [:error] [pid 3380:tid 3403] [client 20.151.206.105:4303] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYWm-RFAlUvBGSBK2jcuoQAAABM"]
[Fri Feb 06 16:31:53.843296 2026] [:error] [pid 3513:tid 3537] [client 20.151.206.105:49969] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYWm-TSw3-HAlzpqSxyZGQAAAVY"]
[Fri Feb 06 16:31:55.047500 2026] [:error] [pid 3513:tid 3522] [client 20.151.206.105:4420] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYWm-zSw3-HAlzpqSxyZHQAAAUc"]
[Fri Feb 06 16:31:55.796847 2026] [:error] [pid 3477:tid 3494] [client 20.151.206.105:4563] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYWm-7L0Hdh40C7HYgUprQAAAM8"]
[Fri Feb 06 16:31:57.275941 2026] [:error] [pid 3380:tid 3390] [client 20.151.206.105:44072] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYWm_RFAlUvBGSBK2jcuqQAAAAY"]
[Fri Feb 06 16:31:58.179306 2026] [:error] [pid 3513:tid 3537] [client 20.151.206.105:4459] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYWm_jSw3-HAlzpqSxyZIgAAAVY"]
[Fri Feb 06 16:31:59.922356 2026] [:error] [pid 3381:tid 3418] [client 20.151.206.105:44074] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aYWm_y81zqRg96ZREggiKgAAAEU"]
[Fri Feb 06 16:32:00.875662 2026] [:error] [pid 3382:tid 3452] [client 20.151.206.105:44054] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYWnAMIgU1HR0rhYrE8AUwAAAIw"]
[Fri Feb 06 16:32:01.485587 2026] [:error] [pid 3380:tid 3408] [client 20.151.206.105:5104] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYWnARFAlUvBGSBK2jcurgAAABg"]
[Fri Feb 06 16:32:02.486611 2026] [:error] [pid 3380:tid 3394] [client 20.151.206.105:36876] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYWnAhFAlUvBGSBK2jcusQAAAAo"]
[Fri Feb 06 16:32:04.143345 2026] [:error] [pid 3380:tid 3390] [client 20.151.206.105:51233] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aYWnBBFAlUvBGSBK2jcu4gAAAAY"]
[Fri Feb 06 16:32:06.568200 2026] [:error] [pid 3513:tid 3534] [client 20.151.206.105:36914] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYWnBjSw3-HAlzpqSxyZLwAAAVM"]
[Fri Feb 06 16:32:08.325362 2026] [:error] [pid 3380:tid 3392] [client 20.151.206.105:5092] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYWnCBFAlUvBGSBK2jcvOgAAAAg"]
[Fri Feb 06 16:32:09.662397 2026] [:error] [pid 3382:tid 3452] [client 20.151.206.105:4593] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYWnCcIgU1HR0rhYrE8AXgAAAIw"]
[Fri Feb 06 16:32:10.702438 2026] [:error] [pid 3381:tid 3422] [client 20.151.206.105:4330] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aYWnCi81zqRg96ZREggiOgAAAEk"]
[Fri Feb 06 16:32:11.921358 2026] [:error] [pid 3513:tid 3533] [client 20.151.206.105:4293] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYWnCzSw3-HAlzpqSxyZOQAAAVI"]
[Fri Feb 06 16:32:12.484980 2026] [:error] [pid 3381:tid 3419] [client 20.151.206.105:51847] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYWnDC81zqRg96ZREggiPwAAAEY"]
[Fri Feb 06 16:32:13.626218 2026] [:error] [pid 3380:tid 3391] [client 20.151.206.105:36906] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYWnDRFAlUvBGSBK2jcvQwAAAAc"]
[Fri Feb 06 16:32:14.604332 2026] [:error] [pid 3380:tid 3387] [client 20.151.206.105:49285] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aYWnDhFAlUvBGSBK2jcvRwAAAAM"]
[Fri Feb 06 16:32:15.521132 2026] [:error] [pid 3380:tid 3395] [client 20.151.206.105:49930] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYWnDxFAlUvBGSBK2jcvSwAAAAs"]
[Fri Feb 06 16:32:16.373987 2026] [:error] [pid 3513:tid 3515] [client 20.151.206.105:44040] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYWnEDSw3-HAlzpqSxyZQQAAAUA"]
[Fri Feb 06 16:32:17.231616 2026] [:error] [pid 3380:tid 3390] [client 20.151.206.105:51202] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYWnERFAlUvBGSBK2jcvTgAAAAY"]
[Fri Feb 06 16:32:17.849630 2026] [:error] [pid 3381:tid 3413] [client 20.151.206.105:49940] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aYWnES81zqRg96ZREggiRAAAAEA"]
[Fri Feb 06 16:32:18.350501 2026] [:error] [pid 3513:tid 3534] [client 20.151.206.105:44055] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYWnEjSw3-HAlzpqSxyZRAAAAVM"]
[Fri Feb 06 16:32:19.050802 2026] [:error] [pid 3477:tid 3486] [client 20.151.206.105:51859] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYWnE7L0Hdh40C7HYgUqKAAAAMc"]
[Fri Feb 06 16:32:19.688092 2026] [:error] [pid 3380:tid 3386] [client 20.151.206.105:51943] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYWnExFAlUvBGSBK2jcvVgAAAAI"]
[Fri Feb 06 16:32:20.368748 2026] [:error] [pid 3382:tid 3453] [client 20.151.206.105:49982] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aYWnFMIgU1HR0rhYrE8AaAAAAI0"]
[Fri Feb 06 16:32:21.027237 2026] [:error] [pid 3513:tid 3536] [client 20.151.206.105:51263] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYWnFTSw3-HAlzpqSxyZSgAAAVU"]
[Fri Feb 06 16:32:21.690842 2026] [:error] [pid 3380:tid 3408] [client 20.151.206.105:4341] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYWnFRFAlUvBGSBK2jcvXQAAABg"]
[Fri Feb 06 16:32:23.037285 2026] [:error] [pid 3513:tid 3537] [client 20.151.206.105:51268] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYWnFzSw3-HAlzpqSxyZTQAAAVY"]
[Fri Feb 06 16:32:24.645630 2026] [:error] [pid 3381:tid 3413] [client 20.151.206.105:49331] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aYWnGC81zqRg96ZREggiTwAAAEA"]
[Fri Feb 06 16:32:25.598445 2026] [:error] [pid 3513:tid 3534] [client 20.151.206.105:51858] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aYWnGTSw3-HAlzpqSxyZUwAAAVM"]
[Fri Feb 06 16:32:26.587582 2026] [:error] [pid 3382:tid 3460] [client 20.151.206.105:51864] [client 20.151.206.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aYWnGsIgU1HR0rhYrE8AdQAAAJQ"]
[Fri Feb 06 16:32:27.231465 2026] [:error] [pid 3477:tid 3499] [client 20.151.206.105:4452] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYWnG7L0Hdh40C7HYgUqLgAAANQ"]
[Fri Feb 06 16:32:28.192752 2026] [:error] [pid 3513:tid 3532] [client 20.151.206.105:49956] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYWnHDSw3-HAlzpqSxyZVgAAAVE"]
[Fri Feb 06 16:32:28.763716 2026] [:error] [pid 3382:tid 3448] [client 20.151.206.105:4592] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYWnHMIgU1HR0rhYrE8AeAAAAIg"]
[Fri Feb 06 16:32:30.453503 2026] [:error] [pid 3513:tid 3520] [client 20.151.206.105:36865] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "aYWnHjSw3-HAlzpqSxyZXQAAAUU"]
[Fri Feb 06 16:32:31.345476 2026] [:error] [pid 3513:tid 3528] [client 20.151.206.105:43337] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYWnHzSw3-HAlzpqSxyZYAAAAU0"]
[Fri Feb 06 16:32:32.367986 2026] [:error] [pid 3477:tid 3479] [client 20.151.206.105:51281] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYWnILL0Hdh40C7HYgUqPAAAAMA"]
[Fri Feb 06 16:32:33.132609 2026] [:error] [pid 3382:tid 3448] [client 20.151.206.105:36913] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYWnIcIgU1HR0rhYrE8AgQAAAIg"]
[Fri Feb 06 16:32:34.509413 2026] [:error] [pid 3477:tid 3500] [client 20.151.206.105:4423] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aYWnIrL0Hdh40C7HYgUqQQAAANU"]
[Fri Feb 06 16:32:35.789935 2026] [:error] [pid 3380:tid 3396] [client 20.151.206.105:36921] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYWnIxFAlUvBGSBK2jcvdwAAAAw"]
[Fri Feb 06 16:32:36.870868 2026] [:error] [pid 3382:tid 3440] [client 20.151.206.105:49960] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYWnJMIgU1HR0rhYrE8AiwAAAIA"]
[Fri Feb 06 16:32:37.590462 2026] [:error] [pid 3381:tid 3437] [client 20.151.206.105:49932] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYWnJS81zqRg96ZREggiXQAAAFg"]
[Fri Feb 06 16:32:38.170674 2026] [:error] [pid 3380:tid 3393] [client 20.151.206.105:5104] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aYWnJhFAlUvBGSBK2jcvegAAAAk"]
[Fri Feb 06 16:32:38.904379 2026] [:error] [pid 3381:tid 3414] [client 20.151.206.105:51277] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYWnJi81zqRg96ZREggiXgAAAEE"]
[Fri Feb 06 16:32:39.629893 2026] [:error] [pid 3382:tid 3464] [client 20.151.206.105:43335] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYWnJ8IgU1HR0rhYrE8AlgAAAJg"]
[Fri Feb 06 16:32:40.335728 2026] [:error] [pid 3382:tid 3461] [client 20.151.206.105:4340] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYWnKMIgU1HR0rhYrE8AmwAAAJU"]
[Fri Feb 06 16:32:41.152765 2026] [:error] [pid 3477:tid 3499] [client 20.151.206.105:51902] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "aYWnKbL0Hdh40C7HYgUqTQAAANQ"]
[Fri Feb 06 16:32:42.130464 2026] [:error] [pid 3477:tid 3497] [client 20.151.206.105:4446] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aYWnKrL0Hdh40C7HYgUqTgAAANI"]
[Fri Feb 06 16:32:42.735575 2026] [:error] [pid 3380:tid 3407] [client 20.151.206.105:51888] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aYWnKhFAlUvBGSBK2jcvhgAAABc"]
[Fri Feb 06 16:32:43.280869 2026] [:error] [pid 3477:tid 3490] [client 20.151.206.105:44066] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aYWnK7L0Hdh40C7HYgUqUQAAAMs"]
[Fri Feb 06 16:32:44.003597 2026] [:error] [pid 3477:tid 3492] [client 20.151.206.105:36870] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "aYWnLLL0Hdh40C7HYgUqUwAAAM0"]
[Fri Feb 06 16:32:44.999105 2026] [:error] [pid 3380:tid 3402] [client 20.151.206.105:4468] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aYWnLBFAlUvBGSBK2jcvjwAAABI"]
[Fri Feb 06 16:32:45.869310 2026] [:error] [pid 3477:tid 3496] [client 20.151.206.105:4594] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aYWnLbL0Hdh40C7HYgUqWgAAANE"]
[Fri Feb 06 16:32:46.736527 2026] [:error] [pid 3380:tid 3384] [client 20.151.206.105:4581] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aYWnLhFAlUvBGSBK2jcvkQAAAAA"]
[Fri Feb 06 16:32:48.213846 2026] [:error] [pid 3382:tid 3441] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Fri Feb 06 16:32:48.461544 2026] [:error] [pid 3382:tid 3463] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Fri Feb 06 16:32:48.672124 2026] [:error] [pid 3382:tid 3457] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Fri Feb 06 16:32:48.907468 2026] [:error] [pid 3382:tid 3458] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Fri Feb 06 16:32:49.137759 2026] [:error] [pid 3382:tid 3450] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Fri Feb 06 16:32:49.602104 2026] [:error] [pid 3382:tid 3453] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Feb 06 16:32:49.814529 2026] [:error] [pid 3382:tid 3452] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Feb 06 16:32:50.132141 2026] [:error] [pid 3382:tid 3464] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Feb 06 16:32:50.599452 2026] [:error] [pid 3382:tid 3456] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Fri Feb 06 16:32:50.817903 2026] [:error] [pid 3382:tid 3442] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Fri Feb 06 16:32:51.030444 2026] [:error] [pid 3382:tid 3455] [client 20.151.206.105:50593] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Fri Feb 06 16:32:51.460038 2026] [:error] [pid 3382:tid 3446] [client 20.151.206.105:50593] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYWnM8IgU1HR0rhYrE8ArgAAAIY"]
[Fri Feb 06 16:32:52.995985 2026] [:error] [pid 3513:tid 3533] [client 20.151.206.105:50602] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYWnNDSw3-HAlzpqSxyZbwAAAVI"]
[Fri Feb 06 16:32:53.581962 2026] [:error] [pid 3382:tid 3444] [client 20.151.206.105:4168] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYWnNcIgU1HR0rhYrE8AsgAAAIQ"]
[Fri Feb 06 16:32:54.540445 2026] [:error] [pid 3382:tid 3447] [client 20.151.206.105:4290] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "aYWnNsIgU1HR0rhYrE8AtAAAAIc"]
[Fri Feb 06 16:32:55.957222 2026] [:error] [pid 3381:tid 3413] [client 20.151.206.105:48710] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYWnNy81zqRg96ZREggicQAAAEA"]
[Fri Feb 06 16:32:57.365758 2026] [:error] [pid 3513:tid 3519] [client 20.151.206.105:51307] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYWnOTSw3-HAlzpqSxyZdwAAAUQ"]
[Fri Feb 06 16:32:58.368538 2026] [:error] [pid 3477:tid 3494] [client 20.151.206.105:51232] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYWnOrL0Hdh40C7HYgUqcgAAAM8"]
[Fri Feb 06 16:32:58.895503 2026] [:error] [pid 3380:tid 3405] [client 20.151.206.105:4344] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aYWnOhFAlUvBGSBK2jcvpAAAABU"]
[Fri Feb 06 16:32:59.678806 2026] [:error] [pid 3381:tid 3434] [client 20.151.206.105:48759] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYWnOy81zqRg96ZREggieQAAAFU"]
[Fri Feb 06 16:33:00.429512 2026] [:error] [pid 3380:tid 3397] [client 20.151.206.105:51260] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYWnPBFAlUvBGSBK2jcvpwAAAA0"]
[Fri Feb 06 16:33:01.318696 2026] [:error] [pid 3477:tid 3482] [client 20.151.206.105:5062] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYWnPbL0Hdh40C7HYgUqdgAAAMM"]
[Fri Feb 06 16:33:10.611613 2026] [:error] [pid 3477:tid 3488] [client 20.151.206.105:51880] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "aYWnRrL0Hdh40C7HYgUqfQAAAMk"]
[Fri Feb 06 16:33:12.607265 2026] [:error] [pid 3513:tid 3539] [client 20.151.206.105:51882] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYWnSDSw3-HAlzpqSxyZlQAAAVg"]
[Fri Feb 06 16:33:17.094264 2026] [:error] [pid 3380:tid 3404] [client 20.151.206.105:52598] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYWnTRFAlUvBGSBK2jcvwwAAABQ"]
[Fri Feb 06 16:33:19.364664 2026] [:error] [pid 3513:tid 3533] [client 20.151.206.105:43383] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYWnTzSw3-HAlzpqSxyZogAAAVI"]
[Fri Feb 06 16:33:20.813440 2026] [:error] [pid 3380:tid 3393] [client 20.151.206.105:52570] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "aYWnUBFAlUvBGSBK2jcvyAAAAAk"]
[Fri Feb 06 16:33:21.418650 2026] [:error] [pid 3381:tid 3421] [client 20.151.206.105:5006] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYWnUS81zqRg96ZREggikwAAAEg"]
[Fri Feb 06 16:33:22.091515 2026] [:error] [pid 3477:tid 3482] [client 20.151.206.105:51204] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYWnUrL0Hdh40C7HYgUqjwAAAMM"]
[Fri Feb 06 16:33:23.361849 2026] [:error] [pid 3477:tid 3492] [client 20.151.206.105:50011] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYWnU7L0Hdh40C7HYgUqkQAAAM0"]
[Fri Feb 06 16:33:24.095264 2026] [:error] [pid 3477:tid 3490] [client 20.151.206.105:4437] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aYWnVLL0Hdh40C7HYgUqkwAAAMs"]
[Fri Feb 06 16:33:24.672365 2026] [:error] [pid 3381:tid 3413] [client 20.151.206.105:50047] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYWnVC81zqRg96ZREggimQAAAEA"]
[Fri Feb 06 16:33:25.225896 2026] [:error] [pid 3381:tid 3416] [client 20.151.206.105:48717] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYWnVS81zqRg96ZREggimwAAAEM"]
[Fri Feb 06 16:33:26.419311 2026] [:error] [pid 3382:tid 3446] [client 20.151.206.105:52585] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYWnVsIgU1HR0rhYrE8A2AAAAIY"]
[Fri Feb 06 16:33:27.939461 2026] [:error] [pid 3380:tid 3400] [client 20.151.206.105:51212] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aYWnVxFAlUvBGSBK2jcv0QAAABA"]
[Fri Feb 06 16:33:29.870857 2026] [:error] [pid 3477:tid 3489] [client 20.151.206.105:4171] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYWnWbL0Hdh40C7HYgUqmgAAAMo"]
[Fri Feb 06 16:33:32.214221 2026] [:error] [pid 3382:tid 3453] [client 20.151.206.105:5046] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYWnXMIgU1HR0rhYrE8A4gAAAI0"]
[Fri Feb 06 16:33:36.610447 2026] [:error] [pid 3382:tid 3450] [client 20.151.206.105:52565] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYWnYMIgU1HR0rhYrE8A6QAAAIo"]
[Fri Feb 06 16:33:38.417852 2026] [:error] [pid 3513:tid 3519] [client 20.151.206.105:51207] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "aYWnYjSw3-HAlzpqSxyZvgAAAUQ"]
[Fri Feb 06 16:33:39.650409 2026] [:error] [pid 3380:tid 3384] [client 20.151.206.105:50035] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYWnYxFAlUvBGSBK2jcv5wAAAAA"]
[Fri Feb 06 16:33:40.444731 2026] [:error] [pid 3381:tid 3417] [client 20.151.206.105:5004] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYWnZC81zqRg96ZREggipwAAAEQ"]
[Fri Feb 06 16:33:41.858198 2026] [:error] [pid 3381:tid 3434] [client 20.151.206.105:48715] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYWnZS81zqRg96ZREggiqwAAAFU"]
[Fri Feb 06 16:33:43.601723 2026] [:error] [pid 3380:tid 3385] [client 20.151.206.105:5054] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aYWnZxFAlUvBGSBK2jcv8gAAAAE"]
[Fri Feb 06 16:33:45.644991 2026] [:error] [pid 3513:tid 3525] [client 20.151.206.105:5000] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYWnaTSw3-HAlzpqSxyZxAAAAUo"]
[Fri Feb 06 16:33:47.460429 2026] [:error] [pid 3477:tid 3500] [client 20.151.206.105:50612] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYWna7L0Hdh40C7HYgUq8AAAANU"]
[Fri Feb 06 16:33:48.315508 2026] [:error] [pid 3380:tid 3405] [client 20.151.206.105:52578] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYWnbBFAlUvBGSBK2jcwaQAAABU"]
[Fri Feb 06 16:33:48.828018 2026] [:error] [pid 3380:tid 3403] [client 20.151.206.105:50013] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aYWnbBFAlUvBGSBK2jcwagAAABM"]
[Fri Feb 06 16:33:49.287711 2026] [:error] [pid 3380:tid 3408] [client 20.151.206.105:35026] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aYWnbRFAlUvBGSBK2jcwbQAAABg"]
[Fri Feb 06 16:33:49.850803 2026] [:error] [pid 3477:tid 3489] [client 20.151.206.105:35040] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aYWnbbL0Hdh40C7HYgUq-QAAAMo"]
[Fri Feb 06 16:33:50.561753 2026] [:error] [pid 3513:tid 3523] [client 20.151.206.105:48720] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "aYWnbjSw3-HAlzpqSxyZzAAAAUg"]
[Fri Feb 06 16:33:51.253903 2026] [:error] [pid 3477:tid 3501] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Fri Feb 06 16:33:51.472308 2026] [:error] [pid 3477:tid 3479] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Fri Feb 06 16:33:51.800853 2026] [:error] [pid 3477:tid 3491] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Fri Feb 06 16:33:52.048921 2026] [:error] [pid 3477:tid 3498] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Fri Feb 06 16:33:52.294442 2026] [:error] [pid 3477:tid 3480] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Fri Feb 06 16:33:52.514193 2026] [:error] [pid 3477:tid 3483] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 06 16:33:52.725760 2026] [:error] [pid 3477:tid 3486] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Fri Feb 06 16:33:52.935597 2026] [:error] [pid 3477:tid 3493] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Fri Feb 06 16:33:53.144906 2026] [:error] [pid 3477:tid 3490] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri Feb 06 16:33:53.354242 2026] [:error] [pid 3477:tid 3496] [client 20.151.206.105:50581] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Fri Feb 06 16:33:53.596065 2026] [:error] [pid 3477:tid 3489] [client 20.151.206.105:50581] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aYWncbL0Hdh40C7HYgUrCwAAAMo"]
[Fri Feb 06 16:33:54.076231 2026] [:error] [pid 3382:tid 3453] [client 20.151.206.105:52550] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aYWncsIgU1HR0rhYrE8A9wAAAI0"]
[Fri Feb 06 16:33:55.789155 2026] [:error] [pid 3513:tid 3525] [client 20.151.206.105:50033] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aYWnczSw3-HAlzpqSxyZ0QAAAUo"]
[Fri Feb 06 16:33:56.744929 2026] [:error] [pid 3381:tid 3417] [client 20.151.206.105:49991] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "aYWndC81zqRg96ZREggi1wAAAEQ"]
[Fri Feb 06 16:33:57.659474 2026] [:error] [pid 3380:tid 3407] [client 20.151.206.105:4212] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aYWndRFAlUvBGSBK2jcwfAAAABc"]
[Fri Feb 06 16:33:58.908642 2026] [:error] [pid 3513:tid 3528] [client 20.151.206.105:51267] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aYWndjSw3-HAlzpqSxyZ2gAAAU0"]
[Fri Feb 06 16:33:59.818430 2026] [:error] [pid 3380:tid 3402] [client 20.151.206.105:49968] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aYWndxFAlUvBGSBK2jcwfwAAABI"]
[Fri Feb 06 16:34:00.883625 2026] [:error] [pid 3477:tid 3492] [client 20.151.206.105:4994] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "aYWneLL0Hdh40C7HYgUrFAAAAM0"]
[Fri Feb 06 16:34:02.347596 2026] [:error] [pid 3382:tid 3442] [client 20.151.206.105:4308] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aYWnesIgU1HR0rhYrE8BAgAAAII"]
[Fri Feb 06 16:34:03.671310 2026] [:error] [pid 3382:tid 3446] [client 20.151.206.105:48751] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aYWne8IgU1HR0rhYrE8BAwAAAIY"]
[Fri Feb 06 16:34:04.128665 2026] [:error] [pid 3382:tid 3461] [client 20.151.206.105:50007] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aYWnfMIgU1HR0rhYrE8BBAAAAJU"]
[Fri Feb 06 16:34:05.184461 2026] [:error] [pid 3380:tid 3394] [client 20.151.206.105:5009] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "aYWnfRFAlUvBGSBK2jcwhwAAAAo"]
[Fri Feb 06 16:34:06.898972 2026] [:error] [pid 3513:tid 3532] [client 20.151.206.105:50608] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aYWnfjSw3-HAlzpqSxyZ5QAAAVE"]
[Fri Feb 06 16:34:08.164271 2026] [:error] [pid 3477:tid 3483] [client 20.151.206.105:35015] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aYWngLL0Hdh40C7HYgUrJQAAAMQ"]
[Fri Feb 06 16:34:09.638136 2026] [:error] [pid 3381:tid 3425] [client 20.151.206.105:35053] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aYWngS81zqRg96ZREggi8gAAAEw"]
[Fri Feb 06 16:34:10.544312 2026] [:error] [pid 3382:tid 3446] [client 20.151.206.105:35025] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "aYWngsIgU1HR0rhYrE8BDAAAAIY"]
[Fri Feb 06 16:34:11.013565 2026] [:error] [pid 3477:tid 3486] [client 20.151.206.105:52581] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYWng7L0Hdh40C7HYgUrKQAAAMc"]
[Fri Feb 06 16:34:11.480971 2026] [:error] [pid 3513:tid 3526] [client 20.151.206.105:5003] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYWngzSw3-HAlzpqSxyZ6gAAAUs"]
[Fri Feb 06 16:34:12.009281 2026] [:error] [pid 3380:tid 3394] [client 20.151.206.105:5045] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYWnhBFAlUvBGSBK2jcwkgAAAAo"]
[Fri Feb 06 16:34:12.595435 2026] [:error] [pid 3381:tid 3414] [client 20.151.206.105:52596] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYWnhC81zqRg96ZREggi_AAAAEE"]
[Fri Feb 06 16:34:13.545037 2026] [:error] [pid 3380:tid 3396] [client 20.151.206.105:50030] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYWnhRFAlUvBGSBK2jcwnQAAAAw"]
[Fri Feb 06 16:34:14.050753 2026] [:error] [pid 3513:tid 3520] [client 20.151.206.105:50563] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYWnhjSw3-HAlzpqSxyZ9gAAAUU"]
[Fri Feb 06 16:34:15.444313 2026] [:error] [pid 3381:tid 3417] [client 20.151.206.105:4216] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYWnhy81zqRg96ZREggjCQAAAEQ"]
[Fri Feb 06 16:34:16.255953 2026] [:error] [pid 3477:tid 3482] [client 20.151.206.105:35041] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "aYWniLL0Hdh40C7HYgUrNwAAAMM"]
[Fri Feb 06 16:34:16.916985 2026] [:error] [pid 3513:tid 3535] [client 20.151.206.105:52607] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYWniDSw3-HAlzpqSxyaCQAAAVQ"]
[Fri Feb 06 16:34:17.366851 2026] [:error] [pid 3380:tid 3397] [client 20.151.206.105:49992] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYWniRFAlUvBGSBK2jcw6QAAAA0"]
[Fri Feb 06 16:34:18.096220 2026] [:error] [pid 3381:tid 3425] [client 20.151.206.105:48705] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYWnii81zqRg96ZREggjDgAAAEw"]
[Fri Feb 06 16:34:18.587108 2026] [:error] [pid 3382:tid 3460] [client 20.151.206.105:52601] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aYWnisIgU1HR0rhYrE8BEgAAAJQ"]
[Fri Feb 06 16:34:19.442604 2026] [:error] [pid 3382:tid 3443] [client 20.151.206.105:50029] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYWni8IgU1HR0rhYrE8BFgAAAIM"]
[Fri Feb 06 16:34:20.053128 2026] [:error] [pid 3382:tid 3461] [client 20.151.206.105:5043] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYWnjMIgU1HR0rhYrE8BGwAAAJU"]
[Fri Feb 06 16:34:20.563000 2026] [:error] [pid 3382:tid 3458] [client 20.151.206.105:4185] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYWnjMIgU1HR0rhYrE8BHwAAAJI"]
[Fri Feb 06 16:34:20.987667 2026] [:error] [pid 3380:tid 3402] [client 20.151.206.105:52595] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "aYWnjBFAlUvBGSBK2jcw9AAAABI"]
[Fri Feb 06 16:34:21.497008 2026] [:error] [pid 3477:tid 3496] [client 20.151.206.105:5033] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYWnjbL0Hdh40C7HYgUrlwAAANE"]
[Fri Feb 06 16:34:22.088335 2026] [:error] [pid 3381:tid 3420] [client 20.151.206.105:52554] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYWnji81zqRg96ZREggjFgAAAEc"]
[Fri Feb 06 16:34:22.719714 2026] [:error] [pid 3477:tid 3499] [client 20.151.206.105:50579] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYWnjrL0Hdh40C7HYgUrmQAAANQ"]
[Fri Feb 06 16:34:23.340531 2026] [:error] [pid 3382:tid 3443] [client 20.151.206.105:4995] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "aYWnj8IgU1HR0rhYrE8BIwAAAIM"]
[Fri Feb 06 16:34:23.845275 2026] [:error] [pid 3381:tid 3417] [client 20.151.206.105:50009] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYWnjy81zqRg96ZREggjHgAAAEQ"]
[Fri Feb 06 16:34:24.990837 2026] [:error] [pid 3380:tid 3394] [client 20.151.206.105:35071] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYWnkBFAlUvBGSBK2jcxCwAAAAo"]
[Fri Feb 06 16:34:25.674798 2026] [:error] [pid 3380:tid 3392] [client 20.151.206.105:50046] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYWnkRFAlUvBGSBK2jcxEAAAAAg"]
[Fri Feb 06 16:34:26.174217 2026] [:error] [pid 3477:tid 3479] [client 20.151.206.105:50006] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aYWnkrL0Hdh40C7HYgUrnAAAAMA"]
[Fri Feb 06 16:34:26.712273 2026] [:error] [pid 3513:tid 3531] [client 20.151.206.105:48747] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYWnkjSw3-HAlzpqSxyaMgAAAVA"]
[Fri Feb 06 16:34:27.314453 2026] [:error] [pid 3382:tid 3447] [client 20.151.206.105:5049] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYWnk8IgU1HR0rhYrE8BKQAAAIc"]
[Fri Feb 06 16:34:28.436883 2026] [:error] [pid 3381:tid 3432] [client 20.151.206.105:52564] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYWnlC81zqRg96ZREggjKwAAAFM"]
[Fri Feb 06 16:34:28.997729 2026] [:error] [pid 3477:tid 3481] [client 20.151.206.105:35038] [client 20.151.206.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aYWnlLL0Hdh40C7HYgUrogAAAMI"]
[Fri Feb 06 22:33:23.586124 2026] [:error] [pid 3381:tid 3434] [client 143.110.251.176:54619] [client 143.110.251.176] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.251.176, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aYX7sy81zqRg96ZREgh9MwAAAFU"]
[Fri Feb 06 22:33:23.589841 2026] [:error] [pid 3381:tid 3434] [client 143.110.251.176:54619] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 06 22:53:53.251347 2026] [:error] [pid 3380:tid 3392] [client 64.226.85.42:55059] [client 64.226.85.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.85.42, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aYYAgRFAlUvBGSBK2jdzNwAAAAg"]
[Fri Feb 06 22:53:53.255036 2026] [:error] [pid 3380:tid 3392] [client 64.226.85.42:55059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 07 00:26:32.526804 2026] [:error] [pid 46432:tid 46440] [client 182.44.2.148:43566] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYYWOAbwJwu_od0kZjNHgQAAAkY"]
[Sat Feb 07 04:06:22.751573 2026] [:error] [pid 50673:tid 50737] [client 43.134.186.61:47170] [client 43.134.186.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYZJvmVwLsaZ7aKO2cncOAAAAII"]
[Sat Feb 07 20:42:45.458440 2026] [:error] [pid 50671:tid 50691] [client 41.142.60.76:52760] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aYczRbvqLohWBI_mqBOhmAAAAAs"], referer: https://www.google.fr/
[Sat Feb 07 20:42:46.854118 2026] [:error] [pid 58058:tid 58078] [client 41.142.60.76:55825] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aYczRrz-Qlvs65S4DP8dkwAAAZE"], referer: https://scholar.google.com/scholar?q=machine+learning+history
[Sat Feb 07 20:42:48.284337 2026] [:error] [pid 50671:tid 50696] [client 41.142.60.76:61759] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aYczSLvqLohWBI_mqBOhmgAAABA"], referer: https://duckduckgo.com/?q=
[Sat Feb 07 20:42:50.532248 2026] [:error] [pid 55157:tid 55165] [client 41.142.60.76:62509] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aYczSn36JdtTn2bTEozH0wAAAQM"], referer: https://www.wikipedia.org/wiki/Main_Page?action=history
[Sat Feb 07 20:42:53.542187 2026] [:error] [pid 58058:tid 58063] [client 41.142.60.76:63780] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/web.config"] [unique_id "aYczTbz-Qlvs65S4DP8dngAAAYI"], referer: https://www.amazon.com/s?k=running+shoes&ref=nb_sb_noss_2
[Sat Feb 07 20:43:00.540284 2026] [:error] [pid 50673:tid 50749] [client 41.142.60.76:65287] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/config.ini"] [unique_id "aYczVGVwLsaZ7aKO2ckGZgAAAI4"], referer: https://www.reddit.com/r/worldnews/comments/def789/headline/?utm_source=share&utm_medium=web2x
[Sat Feb 07 20:43:03.950198 2026] [:error] [pid 50780:tid 50785] [client 41.142.60.76:63646] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aYczV-tUmIu2JHM2Cru16QAAAMM"], referer: https://www.imdb.com/search/title/?title_type=feature&year=2025,2026
[Sat Feb 07 20:43:04.632058 2026] [:error] [pid 50672:tid 50718] [client 41.142.60.76:63898] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aYczWA9o0jq1XS8Nv7NECQAAAEo"], referer: https://www.linkedin.com/feed/update/def456/
[Sat Feb 07 20:43:05.372137 2026] [:error] [pid 50672:tid 50719] [client 41.142.60.76:64746] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aYczWQ9o0jq1XS8Nv7NECwAAAEs"], referer: https://www.google.com/search?q=chocolate+chip+cookie+recipe&source=hp&ei=xyz789
[Sat Feb 07 20:43:06.888062 2026] [:error] [pid 43182:tid 43202] [client 41.142.60.76:64929] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aYczWvEC82JnxmrnFYm8JQAAAVI"], referer: https://github.com/
[Sat Feb 07 20:43:09.188463 2026] [:error] [pid 50671:tid 50693] [client 41.142.60.76:50087] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/web.config"] [unique_id "aYczXbvqLohWBI_mqBOhtAAAAA0"], referer: https://www.facebook.com/
[Sat Feb 07 20:43:11.795984 2026] [:error] [pid 50673:tid 50747] [client 41.142.60.76:51303] [client 41.142.60.76] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/config.ini"] [unique_id "aYczX2VwLsaZ7aKO2ckGeQAAAIw"], referer: https://medium.com/
[Sat Feb 07 21:03:23.970229 2026] [:error] [pid 58058:tid 58076] [client 49.51.47.100:38474] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYc4G7z-Qlvs65S4DP8iRgAAAY8"]
[Sat Feb 07 22:11:57.354243 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Feb 07 22:11:57.839557 2026] [:error] [pid 50671:tid 50691] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Feb 07 22:11:58.312716 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Feb 07 22:11:58.804082 2026] [:error] [pid 50671:tid 50695] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Feb 07 22:11:59.307273 2026] [:error] [pid 50671:tid 50701] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Feb 07 22:11:59.807713 2026] [:error] [pid 50671:tid 50692] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Feb 07 22:12:00.284259 2026] [:error] [pid 50671:tid 50702] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Feb 07 22:12:00.819998 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 07 22:12:01.835845 2026] [:error] [pid 50671:tid 50694] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Feb 07 22:12:02.847432 2026] [:error] [pid 50671:tid 50692] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Feb 07 22:12:03.353526 2026] [:error] [pid 50671:tid 50686] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Feb 07 22:12:03.822043 2026] [:error] [pid 50671:tid 50699] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Feb 07 22:12:04.320158 2026] [:error] [pid 50671:tid 50682] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Feb 07 22:12:04.841413 2026] [:error] [pid 50671:tid 50694] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Feb 07 22:12:05.339241 2026] [:error] [pid 50671:tid 50681] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Feb 07 22:12:05.817034 2026] [:error] [pid 50671:tid 50684] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Feb 07 22:12:06.299356 2026] [:error] [pid 50671:tid 50689] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Feb 07 22:12:06.771274 2026] [:error] [pid 50671:tid 50694] [client 31.171.130.145:41915] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Feb 07 22:12:13.904909 2026] [:error] [pid 50671:tid 50698] [client 31.171.130.145:41915] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdIPbvqLohWBI_mqBPC5gAAABI"]
[Sat Feb 07 22:12:16.307744 2026] [:error] [pid 50672:tid 50710] [client 31.171.130.113:32889] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdIQA9o0jq1XS8Nv7Nk1QAAAEI"]
[Sat Feb 07 22:12:18.789522 2026] [:error] [pid 50673:tid 50759] [client 31.171.130.108:54207] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Feb 07 22:12:20.303994 2026] [:error] [pid 50673:tid 50755] [client 31.171.130.108:54207] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYdIRGVwLsaZ7aKO2ckw_QAAAJQ"]
[Sat Feb 07 22:12:22.290498 2026] [:error] [pid 43182:tid 43193] [client 31.171.130.147:38159] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Feb 07 22:12:22.759525 2026] [:error] [pid 43182:tid 43184] [client 31.171.130.147:38159] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aYdIRvEC82JnxmrnFYnxDAAAAUA"]
[Sat Feb 07 22:12:24.188135 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.150:62759] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Feb 07 22:12:29.238576 2026] [:error] [pid 50780:tid 50782] [client 31.171.130.150:62759] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdITetUmIu2JHM2CrvgMQAAAMA"]
[Sat Feb 07 22:12:30.696932 2026] [:error] [pid 50671:tid 50680] [client 31.171.130.163:44555] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdITrvqLohWBI_mqBPDYAAAAAA"]
[Sat Feb 07 22:12:31.689664 2026] [:error] [pid 50672:tid 50709] [client 31.171.130.138:42331] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdITw9o0jq1XS8Nv7NlKAAAAEE"]
[Sat Feb 07 22:12:32.722175 2026] [:error] [pid 50780:tid 50795] [client 31.171.130.137:20805] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdIUOtUmIu2JHM2CrvgSgAAAM0"]
[Sat Feb 07 22:12:33.700338 2026] [:error] [pid 50672:tid 50714] [client 31.171.130.145:30023] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdIUQ9o0jq1XS8Nv7NlMgAAAEY"]
[Sat Feb 07 22:12:34.698641 2026] [:error] [pid 50780:tid 50795] [client 31.171.130.123:45675] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdIUutUmIu2JHM2CrvgWAAAAM0"]
[Sat Feb 07 22:12:36.223039 2026] [:error] [pid 50780:tid 50790] [client 31.171.130.141:43107] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdIVOtUmIu2JHM2CrvgZAAAAMg"]
[Sat Feb 07 22:12:37.213677 2026] [:error] [pid 43182:tid 43192] [client 31.171.130.137:35433] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Feb 07 22:12:38.188801 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.137:35433] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aYdIVvEC82JnxmrnFYnxjQAAAUE"]
[Sat Feb 07 22:13:11.275826 2026] [:error] [pid 30684:tid 30687] [client 31.171.130.122:35779] [client 31.171.130.122] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/tflow/"] [unique_id "aYdId7qwdxwowLt-_LwyzQAAAcA"]
[Sat Feb 07 22:13:31.722824 2026] [:error] [pid 30684:tid 30696] [client 31.171.130.140:29877] [client 31.171.130.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/"] [unique_id "aYdIi7qwdxwowLt-_LwzmgAAAck"]
[Sat Feb 07 23:19:23.616959 2026] [:error] [pid 43182:tid 43184] [client 43.130.40.120:46352] [client 43.130.40.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYdX-_EC82JnxmrnFYkZuAAAAUA"]
[Sun Feb 08 00:13:15.063705 2026] [:error] [pid 30684:tid 30695] [client 103.77.107.178:57326] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aYdkm7qwdxwowLt-_Lxh4wAAAcg"]
[Sun Feb 08 00:13:15.653213 2026] [:error] [pid 50673:tid 50740] [client 103.77.107.178:57525] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aYdkm2VwLsaZ7aKO2clV0AAAAIU"]
[Sun Feb 08 00:34:31.949212 2026] [:error] [pid 46302:tid 46354] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/x9.php
[Sun Feb 08 00:34:32.150899 2026] [:error] [pid 46302:tid 46366] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Feb 08 00:34:32.354391 2026] [:error] [pid 46302:tid 46365] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/byel.php
[Sun Feb 08 00:34:32.557482 2026] [:error] [pid 46302:tid 46373] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/layou.php
[Sun Feb 08 00:34:32.762739 2026] [:error] [pid 46302:tid 46353] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/lgsts.php
[Sun Feb 08 00:34:32.969505 2026] [:error] [pid 46302:tid 46371] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/tourpa.php
[Sun Feb 08 00:34:33.181145 2026] [:error] [pid 46302:tid 46351] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/yvtuizub.php
[Sun Feb 08 00:34:33.390283 2026] [:error] [pid 46302:tid 46374] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/mln.php
[Sun Feb 08 00:34:33.600120 2026] [:error] [pid 46302:tid 46370] [client 23.100.66.55:36985] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Feb 08 01:44:19.383762 2026] [:error] [pid 46302:tid 46364] [client 51.120.74.232:21022] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Sun Feb 08 01:44:19.647520 2026] [:error] [pid 46302:tid 46356] [client 51.120.74.232:21022] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Feb 08 01:44:19.911746 2026] [:error] [pid 46302:tid 46368] [client 51.120.74.232:21022] File does not exist: /usr/local/apache/htdocs/suspended-page/x9.php
[Sun Feb 08 03:17:22.571243 2026] [:error] [pid 62641:tid 62655] [client 54.224.44.213:52056] [client 54.224.44.213] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 54.224.44.213, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aYePwi_seVuUK_C4App8bgAAAMw"]
[Sun Feb 08 03:17:22.571306 2026] [:error] [pid 62641:tid 62655] [client 54.224.44.213:52056] [client 54.224.44.213] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 54.224.44.213 on wp-login.php, counter = 57"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aYePwi_seVuUK_C4App8bgAAAMw"]
[Sun Feb 08 09:31:15.106428 2026] [:error] [pid 24422:tid 24458] [client 172.213.144.187:54394] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Feb 08 09:31:15.344977 2026] [:error] [pid 24422:tid 24480] [client 172.213.144.187:54394] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Feb 08 09:31:15.581164 2026] [:error] [pid 24422:tid 24481] [client 172.213.144.187:54394] File does not exist: /usr/local/apache/htdocs/suspended-page/;k.php
[Sun Feb 08 12:49:46.384364 2026] [:error] [pid 24421:tid 24446] [client 170.106.72.178:57418] [client 170.106.72.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYgV6qp7cTzhX5M1IP_MFgAAAA8"]
[Sun Feb 08 15:27:13.587558 2026] [:error] [pid 43900:tid 43917] [client 43.131.243.61:45058] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYg60eWrhnpm_Csk3kloRwAAAU4"]
[Sun Feb 08 20:09:24.308654 2026] [:error] [pid 56906:tid 56926] [client 20.62.114.0:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Feb 08 20:09:25.767365 2026] [:error] [pid 56906:tid 56926] [client 20.62.114.0:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Feb 08 20:09:25.969118 2026] [:error] [pid 56906:tid 56922] [client 20.62.114.0:7023] File does not exist: /usr/local/apache/htdocs/suspended-page/;k.php
[Sun Feb 08 21:54:52.740205 2026] [:error] [pid 54609:tid 54636] [client 43.153.73.200:51746] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYiVrKRRnRH9N52BW9K-GQAAAZg"]
[Mon Feb 09 01:54:21.250360 2026] [:error] [pid 9422:tid 9443] [client 43.167.241.46:35922] [client 43.167.241.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYjNza9DqDJC68qBbyxXDgAAAZI"]
[Mon Feb 09 04:36:25.014700 2026] [:error] [pid 47937:tid 47968] [client 101.32.15.141:49904] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYjzyc4Fd42MP2DhNrUKYwAAABY"]
[Mon Feb 09 09:25:54.517358 2026] [:error] [pid 47938:tid 47985] [client 209.38.94.231:35680] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYk3orVCzWE6fQJEkNJmAAAAAEY"]
[Mon Feb 09 09:25:55.426548 2026] [:error] [pid 60677:tid 60722] [client 209.38.94.231:46214] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYk3o1yBgzfmDf6GaevV3gAAAso"]
[Mon Feb 09 09:26:14.982248 2026] [:error] [pid 18303:tid 18329] [client 49.51.183.220:58434] [client 49.51.183.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYk3tkY7TEaZkFrGG4kpAwAAARg"]
[Mon Feb 09 09:49:49.151838 2026] [:error] [pid 18303:tid 18321] [client 209.38.94.231:46964] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYk9PUY7TEaZkFrGG4ktagAAARA"]
[Mon Feb 09 10:41:30.783411 2026] [:error] [pid 47938:tid 47992] [client 117.33.163.216:53946] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYlJWrVCzWE6fQJEkNKAVQAAAE0"]
[Mon Feb 09 12:02:28.661300 2026] [:error] [pid 60677:tid 60716] [client 43.155.195.141:56578] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYlcVFyBgzfmDf6GaesWXAAAAsU"]
[Mon Feb 09 16:31:01.261355 2026] [:error] [pid 60677:tid 60713] [client 209.38.94.231:47236] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYmbRVyBgzfmDf6GaeuIygAAAsI"]
[Mon Feb 09 16:31:06.337972 2026] [:error] [pid 60619:tid 60670] [client 209.38.94.231:37978] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYmbSnEpg0UoeR8kJ-0O4wAAAlQ"]
[Tue Feb 10 00:10:00.161369 2026] [:error] [pid 60619:tid 60673] [client 43.166.250.187:44786] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYoG2HEpg0UoeR8kJ-174AAAAlc"]
[Tue Feb 10 00:24:10.591680 2026] [:error] [pid 34139:tid 34167] [client 119.96.24.54:50670] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYoKKugedr85OdF4Mt3QYwAAAJg"]
[Tue Feb 10 00:42:21.435111 2026] [:error] [pid 34046:tid 34113] [client 209.38.94.231:59806] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYoObXP7l4DEEA1DQG-6hgAAAQo"]
[Tue Feb 10 00:42:21.501750 2026] [:error] [pid 34139:tid 34166] [client 209.38.94.231:47994] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYoObegedr85OdF4Mt3ZMQAAAJc"]
[Tue Feb 10 01:01:12.058224 2026] [:error] [pid 34046:tid 34124] [client 103.139.11.49:19184] [client 103.139.11.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.49, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYoS2HP7l4DEEA1DQG_BcgAAARU"]
[Tue Feb 10 01:01:12.063256 2026] [:error] [pid 34046:tid 34124] [client 103.139.11.49:19184] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Feb 10 02:23:01.704509 2026] [:error] [pid 14194:tid 14207] [client 209.38.94.231:52226] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYomBU9dsx8pYaYQoNAAiQAAAUs"]
[Tue Feb 10 02:23:01.788767 2026] [:error] [pid 34045:tid 34096] [client 209.38.94.231:53162] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYomBbYAPRwerv9YrkOcuAAAAFQ"]
[Tue Feb 10 02:27:14.332055 2026] [:error] [pid 14194:tid 14198] [client 167.86.83.231:64518] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aYonAk9dsx8pYaYQoNAClQAAAUI"], referer: binance.com
[Tue Feb 10 04:14:14.530155 2026] [:error] [pid 47837:tid 47904] [client 43.173.1.69:33090] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYpAFnFY8KYFPX79Z4m9QQAAAIQ"]
[Tue Feb 10 05:54:02.487950 2026] [:error] [pid 47837:tid 47921] [client 209.38.94.231:48144] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYpXenFY8KYFPX79Z4noSAAAAJU"]
[Tue Feb 10 05:54:02.573952 2026] [:error] [pid 47830:tid 47858] [client 209.38.94.231:57088] [client 209.38.94.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYpXekco45BZs8e301A6HwAAAAw"]
[Tue Feb 10 06:30:28.829340 2026] [:error] [pid 30054:tid 30074] [client 43.166.255.122:59110] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYpgBGecgOOXCu-GgYU5YwAAARI"]
[Tue Feb 10 10:38:47.457084 2026] [:error] [pid 30054:tid 30062] [client 43.166.128.86:47966] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYqaN2ecgOOXCu-GgYWxcQAAAQY"]
[Tue Feb 10 17:41:47.854880 2026] [:error] [pid 30054:tid 30077] [client 170.64.223.146:39850] [client 170.64.223.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYr9W2ecgOOXCu-GgYUYWAAAARU"]
[Tue Feb 10 17:41:47.965942 2026] [:error] [pid 59544:tid 59567] [client 170.64.223.146:42920] [client 170.64.223.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aYr9W6ZySR9mFY4BainQ_QAAAZE"]
[Tue Feb 10 18:58:40.042336 2026] [:error] [pid 7704:tid 7712] [client 43.153.102.138:41844] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYsPYP0EcqgVBUs6CW0HgAAAAcU"]
[Wed Feb 11 10:36:09.240443 2026] [:error] [pid 28073:tid 28088] [client 104.28.194.106:50925] [client 104.28.194.106] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.194.106, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYvrGYeHYIlOlF-DsMzZsAAAAM0"]
[Wed Feb 11 10:36:09.247157 2026] [:error] [pid 28073:tid 28088] [client 104.28.194.106:50925] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 11 12:05:13.061854 2026] [:error] [pid 27966:tid 28037] [client 43.166.244.66:44460] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYv_-V8HJ9ydyf0SPu4w9gAAAIc"]
[Wed Feb 11 18:26:27.172650 2026] [:error] [pid 27965:tid 28003] [client 43.163.206.70:55084] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aYxZU9HLAUAIo8qpZyFDfgAAAEA"]
[Wed Feb 11 18:52:49.227718 2026] [:error] [pid 28073:tid 28076] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Wed Feb 11 18:52:49.496267 2026] [:error] [pid 28073:tid 28077] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Feb 11 18:52:49.747826 2026] [:error] [pid 28073:tid 28081] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed Feb 11 18:52:50.002949 2026] [:error] [pid 28073:tid 28082] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Wed Feb 11 18:52:50.253498 2026] [:error] [pid 28073:tid 28083] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Feb 11 18:52:50.503893 2026] [:error] [pid 28073:tid 28092] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Feb 11 18:52:50.754179 2026] [:error] [pid 28073:tid 28091] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed Feb 11 18:52:51.021580 2026] [:error] [pid 28073:tid 28080] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Wed Feb 11 18:52:51.280920 2026] [:error] [pid 28073:tid 28098] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Wed Feb 11 18:52:51.539287 2026] [:error] [pid 28073:tid 28090] [client 20.107.195.240:43665] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Wed Feb 11 18:52:51.797608 2026] [:error] [pid 28073:tid 28094] [client 20.107.195.240:43665] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aYxfg4eHYIlOlF-DsMy3oAAAANM"]
[Wed Feb 11 18:52:54.001031 2026] [:error] [pid 22570:tid 22622] [client 20.107.195.240:19283] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aYxfhiE5uSe043FXwQpeRwAAAdY"]
[Wed Feb 11 18:52:55.630101 2026] [:error] [pid 28073:tid 28098] [client 20.107.195.240:30683] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aYxfh4eHYIlOlF-DsMy3sAAAANc"]
[Wed Feb 11 18:52:56.437870 2026] [:error] [pid 27965:tid 28017] [client 20.107.195.240:19305] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "aYxfiNHLAUAIo8qpZyFKvQAAAE4"]
[Wed Feb 11 18:53:00.806714 2026] [:error] [pid 27966:tid 28033] [client 20.107.195.240:46226] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aYxfjF8HJ9ydyf0SPu6g6QAAAIM"]
[Wed Feb 11 18:53:03.865700 2026] [:error] [pid 22569:tid 22588] [client 20.107.195.240:31310] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aYxfj8AhSI7iX9G3engfhgAAAY8"]
[Wed Feb 11 18:53:07.074490 2026] [:error] [pid 22569:tid 22579] [client 20.107.195.240:31314] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aYxfk8AhSI7iX9G3engfjAAAAYY"]
[Wed Feb 11 18:53:09.834196 2026] [:error] [pid 28073:tid 28090] [client 20.107.195.240:43643] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aYxflYeHYIlOlF-DsMy3xgAAAM8"]
[Wed Feb 11 18:53:11.932747 2026] [:error] [pid 22569:tid 22586] [client 20.107.195.240:42402] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aYxfl8AhSI7iX9G3engfkwAAAY0"]
[Wed Feb 11 18:53:13.041682 2026] [:error] [pid 27964:tid 27976] [client 20.107.195.240:1269] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aYxfmcp0XgWYHLcQtEjDzwAAAAE"]
[Wed Feb 11 18:53:16.194993 2026] [:error] [pid 27965:tid 28014] [client 20.107.195.240:35199] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aYxfnNHLAUAIo8qpZyFKzgAAAEs"]
[Wed Feb 11 18:53:17.302226 2026] [:error] [pid 22569:tid 22581] [client 20.107.195.240:43625] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aYxfncAhSI7iX9G3engfmwAAAYg"]
[Wed Feb 11 18:53:18.655097 2026] [:error] [pid 17401:tid 17405] [client 20.107.195.240:61718] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aYxfng0lHeayTY40t35VlgAAAQI"]
[Wed Feb 11 18:53:20.354238 2026] [:error] [pid 27964:tid 27999] [client 20.107.195.240:1232] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aYxfoMp0XgWYHLcQtEjD1wAAABg"]
[Wed Feb 11 18:53:23.288471 2026] [:error] [pid 22570:tid 22622] [client 20.107.195.240:20971] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aYxfoyE5uSe043FXwQpeWQAAAdY"]
[Wed Feb 11 18:53:24.580818 2026] [:error] [pid 17401:tid 17418] [client 20.107.195.240:21193] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "aYxfpA0lHeayTY40t35VnAAAAQ8"]
[Wed Feb 11 18:53:29.282934 2026] [:error] [pid 22569:tid 22586] [client 20.107.195.240:16041] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aYxfqcAhSI7iX9G3engfqQAAAY0"]
[Wed Feb 11 18:53:30.538654 2026] [:error] [pid 22570:tid 22601] [client 20.107.195.240:56978] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aYxfqiE5uSe043FXwQpeXgAAAcE"]
[Wed Feb 11 18:53:33.685382 2026] [:error] [pid 27966:tid 28038] [client 20.107.195.240:31253] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aYxfrV8HJ9ydyf0SPu6hBwAAAIg"]
[Wed Feb 11 18:53:45.949406 2026] [:error] [pid 27964:tid 27975] [client 20.107.195.240:34598] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aYxfucp0XgWYHLcQtEjEAAAAAAA"]
[Wed Feb 11 18:53:47.893641 2026] [:error] [pid 28073:tid 28094] [client 20.107.195.240:48410] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aYxfu4eHYIlOlF-DsMy4IwAAANM"]
[Wed Feb 11 18:53:50.379392 2026] [:error] [pid 17401:tid 17403] [client 20.107.195.240:43665] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aYxfvg0lHeayTY40t35VtwAAAQA"]
[Wed Feb 11 18:54:03.631419 2026] [:error] [pid 28073:tid 28097] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Wed Feb 11 18:54:03.883838 2026] [:error] [pid 28073:tid 28076] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Wed Feb 11 18:54:04.144992 2026] [:error] [pid 28073:tid 28093] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Wed Feb 11 18:54:04.407309 2026] [:error] [pid 28073:tid 28081] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Feb 11 18:54:04.659042 2026] [:error] [pid 28073:tid 28079] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Wed Feb 11 18:54:04.911721 2026] [:error] [pid 28073:tid 28088] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Feb 11 18:54:05.169371 2026] [:error] [pid 28073:tid 28091] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Feb 11 18:54:05.422460 2026] [:error] [pid 28073:tid 28090] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Feb 11 18:54:05.677784 2026] [:error] [pid 28073:tid 28096] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Feb 11 18:54:05.931018 2026] [:error] [pid 28073:tid 28084] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed Feb 11 18:54:06.183256 2026] [:error] [pid 28073:tid 28083] [client 20.107.195.240:1494] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Wed Feb 11 18:54:06.438502 2026] [:error] [pid 28073:tid 28075] [client 20.107.195.240:1494] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aYxfzoeHYIlOlF-DsMy4QgAAAMA"]
[Wed Feb 11 18:54:07.828510 2026] [:error] [pid 28073:tid 28092] [client 20.107.195.240:20687] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aYxfz4eHYIlOlF-DsMy4RAAAANE"]
[Wed Feb 11 18:54:18.900867 2026] [:error] [pid 28073:tid 28083] [client 20.107.195.240:20726] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aYxf2oeHYIlOlF-DsMy4ZgAAAMg"]
[Wed Feb 11 18:54:20.140425 2026] [:error] [pid 28073:tid 28075] [client 20.107.195.240:15247] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aYxf3IeHYIlOlF-DsMy4ZwAAAMA"]
[Wed Feb 11 18:54:22.193364 2026] [:error] [pid 27964:tid 27977] [client 20.107.195.240:17239] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYxf3sp0XgWYHLcQtEjEHgAAAAI"]
[Wed Feb 11 18:54:24.218529 2026] [:error] [pid 27966:tid 28051] [client 20.107.195.240:19117] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYxf4F8HJ9ydyf0SPu6hQAAAAJU"]
[Wed Feb 11 18:54:26.749262 2026] [:error] [pid 22570:tid 22623] [client 20.107.195.240:45874] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYxf4iE5uSe043FXwQpekwAAAdc"]
[Wed Feb 11 18:54:33.477823 2026] [:error] [pid 27965:tid 28025] [client 20.107.195.240:25845] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aYxf6dHLAUAIo8qpZyFLPQAAAFY"]
[Wed Feb 11 18:54:37.337232 2026] [:error] [pid 22537:tid 22555] [client 20.107.195.240:45859] [client 20.107.195.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aYxf7Sfg2TagwM3bvQPooAAAAVA"]
[Wed Feb 11 18:54:39.072773 2026] [:error] [pid 27964:tid 27994] [client 20.107.195.240:24786] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aYxf78p0XgWYHLcQtEjEMAAAABM"]
[Wed Feb 11 18:54:39.954870 2026] [:error] [pid 28073:tid 28087] [client 20.107.195.240:24771] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aYxf74eHYIlOlF-DsMy4fwAAAMw"]
[Wed Feb 11 18:54:42.338543 2026] [:error] [pid 28073:tid 28094] [client 20.107.195.240:21035] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aYxf8oeHYIlOlF-DsMy4gQAAANM"]
[Wed Feb 11 18:54:44.064993 2026] [:error] [pid 17401:tid 17415] [client 20.107.195.240:1154] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aYxf9A0lHeayTY40t35V3wAAAQw"]
[Wed Feb 11 18:54:46.956852 2026] [:error] [pid 17401:tid 17404] [client 20.107.195.240:26785] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aYxf9g0lHeayTY40t35V5AAAAQE"]
[Wed Feb 11 18:54:48.744165 2026] [:error] [pid 27965:tid 28008] [client 20.107.195.240:28944] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aYxf-NHLAUAIo8qpZyFLSQAAAEU"]
[Wed Feb 11 18:54:50.760925 2026] [:error] [pid 27964:tid 27977] [client 20.107.195.240:35864] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aYxf-sp0XgWYHLcQtEjERAAAAAI"]
[Wed Feb 11 18:54:53.261700 2026] [:error] [pid 27966:tid 28032] [client 20.107.195.240:1173] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aYxf_V8HJ9ydyf0SPu6hYwAAAII"]
[Wed Feb 11 18:54:54.754398 2026] [:error] [pid 22537:tid 22551] [client 20.107.195.240:45494] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYxf_ifg2TagwM3bvQPorAAAAUw"]
[Wed Feb 11 18:54:58.437887 2026] [:error] [pid 27966:tid 28034] [client 20.107.195.240:16706] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYxgAl8HJ9ydyf0SPu6hZwAAAIQ"]
[Wed Feb 11 18:54:59.839397 2026] [:error] [pid 22537:tid 22549] [client 20.107.195.240:41264] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYxgAyfg2TagwM3bvQPosQAAAUo"]
[Wed Feb 11 18:55:01.418934 2026] [:error] [pid 27966:tid 28046] [client 20.107.195.240:35914] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aYxgBV8HJ9ydyf0SPu6haQAAAJA"]
[Wed Feb 11 18:55:02.374281 2026] [:error] [pid 22570:tid 22604] [client 20.107.195.240:1763] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aYxgBiE5uSe043FXwQpesgAAAcQ"]
[Wed Feb 11 18:55:08.775093 2026] [:error] [pid 27965:tid 28005] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed Feb 11 18:55:09.031043 2026] [:error] [pid 27965:tid 28003] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Feb 11 18:55:09.290737 2026] [:error] [pid 27965:tid 28019] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Wed Feb 11 18:55:09.542433 2026] [:error] [pid 27965:tid 28021] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Feb 11 18:55:09.796182 2026] [:error] [pid 27965:tid 28007] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Wed Feb 11 18:55:10.048907 2026] [:error] [pid 27965:tid 28018] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Wed Feb 11 18:55:10.303492 2026] [:error] [pid 27965:tid 28022] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Feb 11 18:55:11.737818 2026] [:error] [pid 27965:tid 28022] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed Feb 11 18:55:11.997801 2026] [:error] [pid 27965:tid 28011] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Feb 11 18:55:12.258918 2026] [:error] [pid 27965:tid 28027] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Wed Feb 11 18:55:12.515876 2026] [:error] [pid 27965:tid 28020] [client 20.107.195.240:19826] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Feb 11 18:55:12.805892 2026] [:error] [pid 27965:tid 28023] [client 20.107.195.240:19826] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aYxgENHLAUAIo8qpZyFLdwAAAFQ"]
[Wed Feb 11 18:55:19.860027 2026] [:error] [pid 27964:tid 27977] [client 20.107.195.240:19807] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aYxgF8p0XgWYHLcQtEjEYAAAAAI"]
[Wed Feb 11 18:55:26.924963 2026] [:error] [pid 27966:tid 28031] [client 20.107.195.240:19829] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aYxgHl8HJ9ydyf0SPu6hhAAAAIE"]
[Wed Feb 11 18:55:29.121292 2026] [:error] [pid 27965:tid 28012] [client 20.107.195.240:42986] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aYxgIdHLAUAIo8qpZyFLgQAAAEk"]
[Wed Feb 11 18:55:30.177051 2026] [:error] [pid 27966:tid 28046] [client 20.107.195.240:16283] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aYxgIl8HJ9ydyf0SPu6hiQAAAJA"]
[Wed Feb 11 18:55:39.440523 2026] [:error] [pid 27964:tid 27983] [client 20.107.195.240:19824] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aYxgK8p0XgWYHLcQtEjEcwAAAAg"]
[Wed Feb 11 18:55:40.454341 2026] [:error] [pid 22537:tid 22561] [client 20.107.195.240:21450] [client 20.107.195.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aYxgLCfg2TagwM3bvQPo0gAAAVY"]
[Wed Feb 11 21:15:12.202489 2026] [:error] [pid 27964:tid 27982] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Feb 11 21:15:12.473175 2026] [:error] [pid 27964:tid 27979] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/.info.php
[Wed Feb 11 21:15:12.729268 2026] [:error] [pid 27964:tid 27981] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Wed Feb 11 21:15:12.991015 2026] [:error] [pid 27964:tid 27997] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed Feb 11 21:15:13.249828 2026] [:error] [pid 27964:tid 27986] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Feb 11 21:15:13.506134 2026] [:error] [pid 27964:tid 27994] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Wed Feb 11 21:15:13.761270 2026] [:error] [pid 27964:tid 27990] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Wed Feb 11 21:15:14.014595 2026] [:error] [pid 27964:tid 27980] [client 20.107.195.240:54105] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Feb 11 22:31:32.868181 2026] [:error] [pid 27965:tid 28022] [client 34.83.196.142:50944] [client 34.83.196.142] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.196.142, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aYySxNHLAUAIo8qpZyGDhQAAAFM"]
[Wed Feb 11 22:31:32.873126 2026] [:error] [pid 27965:tid 28022] [client 34.83.196.142:50944] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 11 22:31:34.983443 2026] [:error] [pid 27965:tid 28013] [client 34.83.196.142:50944] [client 34.83.196.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYySxtHLAUAIo8qpZyGDlAAAAEo"]
[Wed Feb 11 22:31:35.429691 2026] [:error] [pid 28073:tid 28085] [client 34.83.196.142:58353] [client 34.83.196.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYySx4eHYIlOlF-DsMwQ1QAAAMo"]
[Wed Feb 11 22:31:35.891849 2026] [:error] [pid 22570:tid 22619] [client 34.83.196.142:65426] [client 34.83.196.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYySxyE5uSe043FXwQqT4gAAAdM"]
[Wed Feb 11 22:31:36.275458 2026] [:error] [pid 27965:tid 28022] [client 34.83.196.142:61217] [client 34.83.196.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYySyNHLAUAIo8qpZyGDlQAAAFM"]
[Wed Feb 11 22:31:36.643346 2026] [:error] [pid 27966:tid 28053] [client 34.83.196.142:62408] [client 34.83.196.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYySyF8HJ9ydyf0SPu7Y7QAAAJc"]
[Wed Feb 11 22:31:37.165853 2026] [:error] [pid 22570:tid 22602] [client 34.83.196.142:62429] [client 34.83.196.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYySySE5uSe043FXwQqT5QAAAcI"]
[Wed Feb 11 22:31:37.506628 2026] [:error] [pid 22570:tid 22623] [client 34.83.196.142:52513] [client 34.83.196.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYySySE5uSe043FXwQqT5gAAAdc"]
[Thu Feb 12 01:02:31.810850 2026] [:error] [pid 49094:tid 49130] [client 72.146.9.68:10291] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 12 01:02:32.050498 2026] [:error] [pid 49094:tid 49144] [client 72.146.9.68:10291] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Feb 12 01:02:32.288876 2026] [:error] [pid 49094:tid 49148] [client 72.146.9.68:10291] [client 72.146.9.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aYy2KOUgUVJo2a1h94W5zwAAANY"]
[Thu Feb 12 01:02:34.967472 2026] [:error] [pid 49180:tid 49198] [client 72.146.9.68:15009] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sing.php
[Thu Feb 12 01:02:35.217004 2026] [:error] [pid 49180:tid 49196] [client 72.146.9.68:15009] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Feb 12 01:02:35.639375 2026] [:error] [pid 49180:tid 49204] [client 72.146.9.68:15009] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Thu Feb 12 01:02:36.256963 2026] [:error] [pid 49180:tid 49192] [client 72.146.9.68:15009] File does not exist: /usr/local/apache/htdocs/suspended-page/wpc.php
[Thu Feb 12 01:02:36.797853 2026] [:error] [pid 49180:tid 49193] [client 72.146.9.68:15009] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 12 01:02:37.074004 2026] [:error] [pid 49180:tid 49201] [client 72.146.9.68:15009] File does not exist: /usr/local/apache/htdocs/suspended-page/deepseek_d.php
[Thu Feb 12 01:02:38.565525 2026] [:error] [pid 49180:tid 49185] [client 72.146.9.68:15009] [client 72.146.9.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYy2LnD8wAezUtqGiU5biwAAAUM"]
[Thu Feb 12 01:02:40.380390 2026] [:error] [pid 59768:tid 59785] [client 72.146.9.68:27950] [client 72.146.9.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYy2MC1wUqEWhF_w6UGSPwAAAA8"]
[Thu Feb 12 01:02:42.199529 2026] [:error] [pid 49180:tid 49193] [client 72.146.9.68:2065] [client 72.146.9.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYy2MnD8wAezUtqGiU5bjAAAAUs"]
[Thu Feb 12 01:02:43.417391 2026] [:error] [pid 59768:tid 59791] [client 72.146.9.68:27935] [client 72.146.9.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aYy2My1wUqEWhF_w6UGSQQAAABU"]
[Thu Feb 12 02:00:32.380839 2026] [:error] [pid 49180:tid 49191] [client 141.98.10.136:52951] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 12 02:00:33.340272 2026] [:error] [pid 59768:tid 59778] [client 141.98.10.136:61098] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 12 03:19:01.575048 2026] [:error] [pid 57219:tid 57231] [client 43.153.35.128:56216] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aYzWJcPJK-7vDCG47nDYRQAAAQc"]
[Thu Feb 12 04:05:04.510790 2026] [autoindex:error] [pid 29368:tid 29388] [client 194.5.82.152:45993] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Feb 12 04:05:10.202642 2026] [:error] [pid 29368:tid 29379] [client 194.5.82.152:45993] [client 194.5.82.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager"] [unique_id "aYzg9tNsoKUOH6cSt82K5AAAAQk"]
[Thu Feb 12 12:24:39.899047 2026] [:error] [pid 8824:tid 8851] [client 138.197.47.168:51394] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY1WB_GtP-XDMTktFc0rUwAAAQ8"]
[Thu Feb 12 12:24:42.297944 2026] [:error] [pid 3136:tid 3149] [client 138.197.47.168:52340] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY1WChiPjM-TIZEnQeFb3QAAAEs"]
[Thu Feb 12 14:39:31.457266 2026] [:error] [pid 50254:tid 50281] [client 43.135.139.165:48236] [client 43.135.139.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aY11o1XkZ-o2G0C1rDHQWQAAAhY"]
[Thu Feb 12 16:28:26.857911 2026] [:error] [pid 21433:tid 21476] [client 51.103.25.4:28840] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Thu Feb 12 17:02:43.861949 2026] [:error] [pid 39777:tid 39791] [client 170.106.163.84:57600] [client 170.106.163.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY2XM1zexR6hGUkt5pPP7AAAAEw"]
[Thu Feb 12 17:47:56.771902 2026] [:error] [pid 63418:tid 63480] [client 138.197.47.168:46804] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY2hzNzjh-bbJnStPZKXbQAAAIQ"]
[Thu Feb 12 17:47:58.919744 2026] [:error] [pid 63418:tid 63483] [client 138.197.47.168:52652] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY2hztzjh-bbJnStPZKXbwAAAIc"]
[Thu Feb 12 17:48:17.825028 2026] [:error] [pid 63511:tid 63536] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Thu Feb 12 17:48:18.074483 2026] [:error] [pid 63511:tid 63514] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu Feb 12 17:48:18.429842 2026] [:error] [pid 63511:tid 63526] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 12 17:48:19.956366 2026] [:error] [pid 63511:tid 63526] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu Feb 12 17:48:20.193292 2026] [:error] [pid 63511:tid 63523] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/luuuf.php
[Thu Feb 12 17:48:20.429608 2026] [:error] [pid 63511:tid 63534] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/maraz.php
[Thu Feb 12 17:48:20.678559 2026] [:error] [pid 63511:tid 63528] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/bayss.php
[Thu Feb 12 17:48:22.370791 2026] [:error] [pid 63511:tid 63528] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Thu Feb 12 17:48:22.606567 2026] [:error] [pid 63511:tid 63522] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Thu Feb 12 17:48:22.842741 2026] [:error] [pid 63511:tid 63520] [client 72.146.1.154:49958] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Thu Feb 12 17:48:23.076381 2026] [:error] [pid 63511:tid 63517] [client 72.146.1.154:49958] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY2h56QCQbD5BgeyIk3EcgAAAAQ"]
[Thu Feb 12 17:48:26.197898 2026] [:error] [pid 63418:tid 63494] [client 72.146.1.154:49934] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY2h6tzjh-bbJnStPZKXiwAAAJI"]
[Thu Feb 12 17:48:27.303421 2026] [:error] [pid 63416:tid 63436] [client 72.146.1.154:29138] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-k3w6g9s4h2.php"] [unique_id "aY2h672wmecPaCHcM29_8QAAAY8"]
[Thu Feb 12 17:48:40.635609 2026] [:error] [pid 63416:tid 63424] [client 72.146.1.154:47551] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/007xx.php"] [unique_id "aY2h-L2wmecPaCHcM2-AAwAAAYM"]
[Thu Feb 12 17:48:42.568762 2026] [:error] [pid 63418:tid 63485] [client 72.146.1.154:29126] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/007xx.php"] [unique_id "aY2h-tzjh-bbJnStPZKXpAAAAIk"]
[Thu Feb 12 17:48:45.043684 2026] [:error] [pid 63417:tid 63455] [client 72.146.1.154:55731] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/007xx.php"] [unique_id "aY2h_f8gSb97qRMtXCKfywAAAEY"]
[Thu Feb 12 17:48:46.401001 2026] [:error] [pid 63416:tid 63436] [client 72.146.1.154:42563] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/007xx.php"] [unique_id "aY2h_r2wmecPaCHcM2-ABAAAAY8"]
[Thu Feb 12 17:48:48.324964 2026] [:error] [pid 63418:tid 63491] [client 72.146.1.154:36652] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY2iANzjh-bbJnStPZKXrAAAAI8"]
[Thu Feb 12 17:48:50.193283 2026] [:error] [pid 65064:tid 65089] [client 72.146.1.154:50582] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY2iAhOvRgscTcqsMBmDxgAAANY"]
[Thu Feb 12 17:48:52.947516 2026] [:error] [pid 63418:tid 63488] [client 72.146.1.154:4844] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY2iBNzjh-bbJnStPZKXswAAAIw"]
[Thu Feb 12 17:48:58.467420 2026] [:error] [pid 65064:tid 65083] [client 72.146.1.154:40405] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l3gi0n.php"] [unique_id "aY2iChOvRgscTcqsMBmD2QAAANA"]
[Thu Feb 12 17:49:02.034521 2026] [:error] [pid 63417:tid 63461] [client 72.146.1.154:36699] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sldnjqlm.php"] [unique_id "aY2iDv8gSb97qRMtXCKf7AAAAEw"]
[Thu Feb 12 17:49:04.255343 2026] [:error] [pid 65064:tid 65074] [client 72.146.1.154:44177] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sldnjqlm.php"] [unique_id "aY2iEBOvRgscTcqsMBmD5AAAAMc"]
[Thu Feb 12 17:49:15.788230 2026] [:error] [pid 63418:tid 63479] [client 72.146.1.154:43131] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s3.php"] [unique_id "aY2iG9zjh-bbJnStPZKX2wAAAIM"]
[Thu Feb 12 17:49:22.714812 2026] [:error] [pid 63511:tid 63530] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/s3.php
[Thu Feb 12 17:49:22.951209 2026] [:error] [pid 63511:tid 63520] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Thu Feb 12 17:49:23.203662 2026] [:error] [pid 63511:tid 63523] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd2.php
[Thu Feb 12 17:49:23.451778 2026] [:error] [pid 63511:tid 63525] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/qasfrhau.php
[Thu Feb 12 17:49:23.712900 2026] [:error] [pid 63511:tid 63519] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Thu Feb 12 17:49:23.950898 2026] [:error] [pid 63511:tid 63535] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Thu Feb 12 17:49:24.198019 2026] [:error] [pid 63511:tid 63515] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Thu Feb 12 17:49:24.434583 2026] [:error] [pid 63511:tid 63536] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/kolda.php
[Thu Feb 12 17:49:24.670393 2026] [:error] [pid 63511:tid 63516] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/reujz.php
[Thu Feb 12 17:49:24.942989 2026] [:error] [pid 63511:tid 63524] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Thu Feb 12 17:49:25.181699 2026] [:error] [pid 63511:tid 63514] [client 72.146.1.154:4921] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Thu Feb 12 17:49:25.478625 2026] [:error] [pid 63511:tid 63519] [client 72.146.1.154:4921] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kgmuq.php"] [unique_id "aY2iJaQCQbD5BgeyIk3E6QAAAAY"]
[Thu Feb 12 17:49:32.135002 2026] [:error] [pid 65064:tid 65077] [client 72.146.1.154:54102] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kgmuq.php"] [unique_id "aY2iLBOvRgscTcqsMBmECQAAAMo"]
[Thu Feb 12 17:49:34.642262 2026] [:error] [pid 63417:tid 63453] [client 72.146.1.154:46273] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kgmuq.php"] [unique_id "aY2iLv8gSb97qRMtXCKgEAAAAEQ"]
[Thu Feb 12 17:49:37.292234 2026] [:error] [pid 65064:tid 65075] [client 72.146.1.154:36715] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kgmuq.php"] [unique_id "aY2iMROvRgscTcqsMBmEFQAAAMg"]
[Thu Feb 12 17:49:38.784398 2026] [:error] [pid 63511:tid 63517] [client 72.146.1.154:4845] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aY2iMqQCQbD5BgeyIk3FAQAAAAQ"]
[Thu Feb 12 17:49:40.895217 2026] [:error] [pid 65064:tid 65088] [client 72.146.1.154:50616] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aY2iNBOvRgscTcqsMBmEHgAAANU"]
[Thu Feb 12 17:49:59.347275 2026] [:error] [pid 63417:tid 63465] [client 72.146.1.154:46757] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nux.php"] [unique_id "aY2iR_8gSb97qRMtXCKgIgAAAFA"]
[Thu Feb 12 17:50:17.502007 2026] [:error] [pid 63416:tid 63443] [client 72.146.1.154:28139] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aY2iWb2wmecPaCHcM2-AXgAAAZY"]
[Thu Feb 12 17:50:19.581621 2026] [:error] [pid 63416:tid 63431] [client 72.146.1.154:28550] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aY2iW72wmecPaCHcM2-AYAAAAYo"]
[Thu Feb 12 17:50:21.935301 2026] [:error] [pid 63511:tid 63522] [client 72.146.1.154:54166] [client 72.146.1.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aY2iXaQCQbD5BgeyIk3FSQAAAAk"]
[Thu Feb 12 17:50:26.356895 2026] [:error] [pid 63418:tid 63476] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Thu Feb 12 17:50:26.602880 2026] [:error] [pid 63418:tid 63478] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Thu Feb 12 17:50:26.841681 2026] [:error] [pid 63418:tid 63485] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/wfwdhsjo.php
[Thu Feb 12 17:50:27.077558 2026] [:error] [pid 63418:tid 63481] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Feb 12 17:50:27.316679 2026] [:error] [pid 63418:tid 63490] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Thu Feb 12 17:50:27.552713 2026] [:error] [pid 63418:tid 63494] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Thu Feb 12 17:50:27.891122 2026] [:error] [pid 63418:tid 63488] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Thu Feb 12 17:50:28.128594 2026] [:error] [pid 63418:tid 63482] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/flex.php
[Thu Feb 12 17:50:29.725689 2026] [:error] [pid 63418:tid 63482] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Thu Feb 12 17:50:30.039823 2026] [:error] [pid 63418:tid 63493] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/zr.php
[Thu Feb 12 17:50:30.286591 2026] [:error] [pid 63418:tid 63491] [client 72.146.1.154:28534] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 12 18:42:19.728743 2026] [:error] [pid 63417:tid 63462] [client 51.120.78.0:37784] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY2ui_8gSb97qRMtXCK5OAAAAE0"]
[Thu Feb 12 18:42:20.258305 2026] [:error] [pid 63417:tid 63466] [client 51.120.78.0:38880] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Feb 12 18:42:20.783395 2026] [:error] [pid 63417:tid 63454] [client 51.120.78.0:38880] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Thu Feb 12 18:42:21.119915 2026] [:error] [pid 63417:tid 63450] [client 51.120.78.0:38880] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Feb 12 18:42:21.642128 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:38880] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aY2ujf8gSb97qRMtXCK5QwAAAE8"]
[Thu Feb 12 18:42:22.280351 2026] [:error] [pid 63511:tid 63525] [client 51.120.78.0:37811] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2ujqQCQbD5BgeyIk3hpwAAAAw"]
[Thu Feb 12 18:42:22.805221 2026] [:error] [pid 63511:tid 63533] [client 51.120.78.0:37778] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2ujqQCQbD5BgeyIk3hqwAAABQ"]
[Thu Feb 12 18:42:23.343113 2026] [:error] [pid 63511:tid 63536] [client 51.120.78.0:51108] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2uj6QCQbD5BgeyIk3hrAAAABc"]
[Thu Feb 12 18:42:23.940959 2026] [:error] [pid 65064:tid 65089] [client 51.120.78.0:51100] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aY2ujxOvRgscTcqsMBmqcAAAANY"]
[Thu Feb 12 18:42:24.828398 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:37771] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aY2ukNzjh-bbJnStPZKxOgAAAIw"]
[Thu Feb 12 18:42:25.591821 2026] [:error] [pid 65064:tid 65088] [client 51.120.78.0:37806] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aY2ukROvRgscTcqsMBmqdAAAANU"]
[Thu Feb 12 18:42:26.291900 2026] [:error] [pid 63416:tid 63438] [client 51.120.78.0:38895] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aY2ukr2wmecPaCHcM2-YtQAAAZE"]
[Thu Feb 12 18:42:26.932659 2026] [:error] [pid 63418:tid 63478] [client 51.120.78.0:38862] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aY2uktzjh-bbJnStPZKxQAAAAII"]
[Thu Feb 12 18:42:27.473874 2026] [:error] [pid 63511:tid 63520] [client 51.120.78.0:37812] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY2uk6QCQbD5BgeyIk3hsgAAAAc"]
[Thu Feb 12 18:42:28.072982 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:51086] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY2ulBOvRgscTcqsMBmqeQAAAMM"]
[Thu Feb 12 18:42:28.656178 2026] [:error] [pid 65064:tid 65075] [client 51.120.78.0:64294] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY2ulBOvRgscTcqsMBmqewAAAMg"]
[Thu Feb 12 18:42:29.462403 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:38878] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aY2ulROvRgscTcqsMBmqfwAAANA"]
[Thu Feb 12 18:42:30.107731 2026] [:error] [pid 63511:tid 63533] [client 51.120.78.0:51119] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aY2ulqQCQbD5BgeyIk3htwAAABQ"]
[Thu Feb 12 18:42:30.677272 2026] [:error] [pid 63417:tid 63460] [client 51.120.78.0:37799] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aY2ulv8gSb97qRMtXCK5TwAAAEs"]
[Thu Feb 12 18:42:31.247453 2026] [:error] [pid 63416:tid 63425] [client 51.120.78.0:38882] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aY2ul72wmecPaCHcM2-YuwAAAYQ"]
[Thu Feb 12 18:42:31.804985 2026] [:error] [pid 63416:tid 63424] [client 51.120.78.0:38869] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aY2ul72wmecPaCHcM2-YvAAAAYM"]
[Thu Feb 12 18:42:32.415457 2026] [:error] [pid 65064:tid 65071] [client 51.120.78.0:51106] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aY2umBOvRgscTcqsMBmqhQAAAMQ"]
[Thu Feb 12 18:42:32.949663 2026] [:error] [pid 63417:tid 63461] [client 51.120.78.0:51090] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aY2umP8gSb97qRMtXCK5UgAAAEw"]
[Thu Feb 12 18:42:33.557778 2026] [:error] [pid 63416:tid 63429] [client 51.120.78.0:37795] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aY2umb2wmecPaCHcM2-YwAAAAYg"]
[Thu Feb 12 18:42:34.103306 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:38896] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aY2umhOvRgscTcqsMBmqiAAAANQ"]
[Thu Feb 12 18:42:34.680897 2026] [:error] [pid 65064:tid 65073] [client 51.120.78.0:38854] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/images/about.php"] [unique_id "aY2umhOvRgscTcqsMBmqigAAAMY"]
[Thu Feb 12 18:42:35.226077 2026] [:error] [pid 63417:tid 63457] [client 51.120.78.0:37791] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/images/about.php"] [unique_id "aY2um_8gSb97qRMtXCK5VQAAAEg"]
[Thu Feb 12 18:42:35.759864 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:51083] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/images/about.php"] [unique_id "aY2umxOvRgscTcqsMBmqjgAAAMI"]
[Thu Feb 12 18:42:36.393903 2026] [:error] [pid 63417:tid 63465] [client 51.120.78.0:38848] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/images/about.php"] [unique_id "aY2unP8gSb97qRMtXCK5WwAAAFA"]
[Thu Feb 12 18:42:36.966036 2026] [:error] [pid 63417:tid 63449] [client 51.120.78.0:38894] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aY2unP8gSb97qRMtXCK5XwAAAEA"]
[Thu Feb 12 18:42:37.495692 2026] [:error] [pid 63417:tid 63471] [client 51.120.78.0:37782] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aY2unf8gSb97qRMtXCK5ZAAAAFY"]
[Thu Feb 12 18:42:38.047678 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:37800] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aY2unhOvRgscTcqsMBmqkQAAAMs"]
[Thu Feb 12 18:42:38.702608 2026] [:error] [pid 63417:tid 63451] [client 51.120.78.0:38907] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aY2unv8gSb97qRMtXCK5bwAAAEI"]
[Thu Feb 12 18:42:39.383987 2026] [:error] [pid 65064:tid 65075] [client 51.120.78.0:38858] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2unxOvRgscTcqsMBmqlAAAAMg"]
[Thu Feb 12 18:42:39.931008 2026] [:error] [pid 63416:tid 63424] [client 51.120.78.0:38881] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2un72wmecPaCHcM2-YxgAAAYM"]
[Thu Feb 12 18:42:40.617120 2026] [:error] [pid 63416:tid 63436] [client 51.120.78.0:51088] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2uoL2wmecPaCHcM2-YyQAAAY8"]
[Thu Feb 12 18:42:41.559091 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:51073] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2uoROvRgscTcqsMBmqlwAAAMI"]
[Thu Feb 12 18:42:42.583896 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:38903] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aY2uohOvRgscTcqsMBmqmgAAAMs"]
[Thu Feb 12 18:42:43.190495 2026] [:error] [pid 63418:tid 63482] [client 51.120.78.0:37776] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aY2uo9zjh-bbJnStPZKxTgAAAIY"]
[Thu Feb 12 18:42:44.089658 2026] [:error] [pid 63511:tid 63519] [client 51.120.78.0:51107] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aY2upKQCQbD5BgeyIk3hwQAAAAY"]
[Thu Feb 12 18:42:44.770104 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:38900] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aY2upBOvRgscTcqsMBmqngAAANA"]
[Thu Feb 12 18:42:45.800284 2026] [:error] [pid 63417:tid 63461] [client 51.120.78.0:38873] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY2upf8gSb97qRMtXCK5lQAAAEw"]
[Thu Feb 12 18:42:46.638135 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:51078] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY2uptzjh-bbJnStPZKxVAAAAIc"]
[Thu Feb 12 18:42:47.254564 2026] [:error] [pid 63511:tid 63531] [client 51.120.78.0:37816] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY2up6QCQbD5BgeyIk3hygAAABI"]
[Thu Feb 12 18:42:47.883690 2026] [:error] [pid 63417:tid 63470] [client 51.120.78.0:38865] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aY2up_8gSb97qRMtXCK5ngAAAFU"]
[Thu Feb 12 18:42:48.462796 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:37769] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aY2uqKQCQbD5BgeyIk3hzwAAAAE"]
[Thu Feb 12 18:42:49.080744 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:51112] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aY2uqROvRgscTcqsMBmqowAAAMM"]
[Thu Feb 12 18:42:49.864163 2026] [:error] [pid 63416:tid 63429] [client 51.120.78.0:39129] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aY2uqb2wmecPaCHcM2-Y1gAAAYg"]
[Thu Feb 12 18:42:50.659230 2026] [:error] [pid 63418:tid 63498] [client 51.120.78.0:38883] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aY2uqtzjh-bbJnStPZKxWAAAAJY"]
[Thu Feb 12 18:42:51.236959 2026] [:error] [pid 63418:tid 63494] [client 51.120.78.0:51120] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aY2uq9zjh-bbJnStPZKxWgAAAJI"]
[Thu Feb 12 18:42:51.867510 2026] [:error] [pid 63417:tid 63471] [client 51.120.78.0:51079] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aY2uq_8gSb97qRMtXCK5rQAAAFY"]
[Thu Feb 12 18:42:52.570916 2026] [:error] [pid 63417:tid 63468] [client 51.120.78.0:38902] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aY2urP8gSb97qRMtXCK5sQAAAFM"]
[Thu Feb 12 18:42:53.120492 2026] [:error] [pid 63418:tid 63478] [client 51.120.78.0:64289] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aY2urdzjh-bbJnStPZKxXgAAAII"]
[Thu Feb 12 18:42:53.784025 2026] [:error] [pid 63417:tid 63451] [client 51.120.78.0:51097] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aY2urf8gSb97qRMtXCK5uQAAAEI"]
[Thu Feb 12 18:42:54.541017 2026] [:error] [pid 63416:tid 63421] [client 51.120.78.0:38891] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aY2urr2wmecPaCHcM2-Y2wAAAYA"]
[Thu Feb 12 18:42:55.210758 2026] [:error] [pid 63418:tid 63498] [client 51.120.78.0:64279] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aY2ur9zjh-bbJnStPZKxZQAAAJY"]
[Thu Feb 12 18:42:55.845675 2026] [:error] [pid 63417:tid 63471] [client 51.120.78.0:38860] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aY2ur_8gSb97qRMtXCK5wQAAAFY"]
[Thu Feb 12 18:42:56.427097 2026] [:error] [pid 63418:tid 63478] [client 51.120.78.0:38884] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY2usNzjh-bbJnStPZKxagAAAII"]
[Thu Feb 12 18:42:57.286298 2026] [:error] [pid 65064:tid 65084] [client 51.120.78.0:37792] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY2usROvRgscTcqsMBmquQAAANE"]
[Thu Feb 12 18:42:57.925116 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:64292] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY2usROvRgscTcqsMBmqvgAAAMU"]
[Thu Feb 12 18:42:58.719753 2026] [:error] [pid 63511:tid 63517] [client 51.120.78.0:51124] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aY2usqQCQbD5BgeyIk3h2wAAAAQ"]
[Thu Feb 12 18:42:59.398776 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:51089] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aY2usxOvRgscTcqsMBmqxQAAAM8"]
[Thu Feb 12 18:43:00.026959 2026] [:error] [pid 63418:tid 63499] [client 51.120.78.0:51115] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aY2utNzjh-bbJnStPZKxegAAAJc"]
[Thu Feb 12 18:43:00.558469 2026] [:error] [pid 63417:tid 63471] [client 51.120.78.0:38853] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aY2utP8gSb97qRMtXCK56QAAAFY"]
[Thu Feb 12 18:43:01.237966 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:37789] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aY2utROvRgscTcqsMBmq0wAAAM8"]
[Thu Feb 12 18:43:01.789444 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:51081] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aY2utf8gSb97qRMtXCK59wAAAE8"]
[Thu Feb 12 18:43:02.464847 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:51087] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php"] [unique_id "aY2uthOvRgscTcqsMBmq1wAAAMw"]
[Thu Feb 12 18:43:03.194381 2026] [:error] [pid 63418:tid 63484] [client 51.120.78.0:37802] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php"] [unique_id "aY2ut9zjh-bbJnStPZKxgwAAAIg"]
[Thu Feb 12 18:43:03.861107 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:36935] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php"] [unique_id "aY2utxOvRgscTcqsMBmq2wAAAMI"]
[Thu Feb 12 18:43:04.579655 2026] [:error] [pid 63511:tid 63525] [client 51.120.78.0:38864] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php"] [unique_id "aY2uuKQCQbD5BgeyIk3h5AAAAAw"]
[Thu Feb 12 18:43:05.166841 2026] [:error] [pid 63418:tid 63498] [client 51.120.78.0:38855] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY2uudzjh-bbJnStPZKxhAAAAJY"]
[Thu Feb 12 18:43:05.889259 2026] [:error] [pid 63511:tid 63515] [client 51.120.78.0:37794] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY2uuaQCQbD5BgeyIk3h9AAAAAI"]
[Thu Feb 12 18:43:06.787495 2026] [:error] [pid 63416:tid 63439] [client 51.120.78.0:51113] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY2uur2wmecPaCHcM2-ZCAAAAZI"]
[Thu Feb 12 18:43:07.730615 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:37809] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aY2uu_8gSb97qRMtXCK6DAAAAEc"]
[Thu Feb 12 18:43:08.287836 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:37765] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aY2uvNzjh-bbJnStPZKxngAAAIc"]
[Thu Feb 12 18:43:08.878976 2026] [:error] [pid 63416:tid 63443] [client 51.120.78.0:51095] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aY2uvL2wmecPaCHcM2-ZDQAAAZY"]
[Thu Feb 12 18:43:09.490826 2026] [:error] [pid 63416:tid 63440] [client 51.120.78.0:37797] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aY2uvb2wmecPaCHcM2-ZEAAAAZM"]
[Thu Feb 12 18:43:10.069085 2026] [:error] [pid 65064:tid 65084] [client 51.120.78.0:37804] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aY2uvhOvRgscTcqsMBmq7QAAANE"]
[Thu Feb 12 18:43:10.755899 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:37798] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2uvhOvRgscTcqsMBmq8QAAAMI"]
[Thu Feb 12 18:43:11.380702 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:37777] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2uv9zjh-bbJnStPZKxnwAAAIU"]
[Thu Feb 12 18:43:13.451852 2026] [:error] [pid 63416:tid 63421] [client 51.120.78.0:39105] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2uwb2wmecPaCHcM2-ZGwAAAYA"]
[Thu Feb 12 18:43:15.589889 2026] [:error] [pid 63417:tid 63470] [client 51.120.78.0:38852] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aY2uw_8gSb97qRMtXCK6GQAAAFU"]
[Thu Feb 12 18:43:17.032766 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:38910] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aY2uxdzjh-bbJnStPZKxpgAAAIc"]
[Thu Feb 12 18:43:17.926663 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:37817] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aY2uxROvRgscTcqsMBmq-wAAANc"]
[Thu Feb 12 18:43:19.298629 2026] [:error] [pid 63417:tid 63463] [client 51.120.78.0:51097] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aY2ux_8gSb97qRMtXCK6HwAAAE4"]
[Thu Feb 12 18:43:20.003383 2026] [:error] [pid 63418:tid 63484] [client 51.120.78.0:38898] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aY2uyNzjh-bbJnStPZKxqQAAAIg"]
[Thu Feb 12 18:43:21.872062 2026] [:error] [pid 63418:tid 63485] [client 51.120.78.0:38875] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Feb 12 18:43:22.397226 2026] [:error] [pid 63418:tid 63482] [client 51.120.78.0:38875] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Feb 12 18:43:23.251348 2026] [:error] [pid 63418:tid 63496] [client 51.120.78.0:38875] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aY2uy9zjh-bbJnStPZKxvAAAAJQ"]
[Thu Feb 12 18:43:25.207335 2026] [:error] [pid 63418:tid 63479] [client 51.120.78.0:38871] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Feb 12 18:43:25.815427 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:38871] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ds.php"] [unique_id "aY2uzdzjh-bbJnStPZKxwgAAAIc"]
[Thu Feb 12 18:43:26.495592 2026] [:error] [pid 63511:tid 63526] [client 51.120.78.0:37813] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ds.php"] [unique_id "aY2uzqQCQbD5BgeyIk3iUgAAAA0"]
[Thu Feb 12 18:43:27.277599 2026] [:error] [pid 63511:tid 63516] [client 51.120.78.0:51105] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ds.php"] [unique_id "aY2uz6QCQbD5BgeyIk3iVQAAAAM"]
[Thu Feb 12 18:43:28.098026 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:51092] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ds.php"] [unique_id "aY2u0BOvRgscTcqsMBmrDQAAAMU"]
[Thu Feb 12 18:43:28.796472 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:38868] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aY2u0BOvRgscTcqsMBmrDwAAAMw"]
[Thu Feb 12 18:43:29.499997 2026] [:error] [pid 65064:tid 65071] [client 51.120.78.0:39110] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aY2u0ROvRgscTcqsMBmrFAAAAMQ"]
[Thu Feb 12 18:43:30.074515 2026] [:error] [pid 63416:tid 63430] [client 51.120.78.0:38908] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aY2u0r2wmecPaCHcM2-ZNAAAAYk"]
[Thu Feb 12 18:43:30.739902 2026] [:error] [pid 65064:tid 65077] [client 51.120.78.0:39150] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aY2u0hOvRgscTcqsMBmrFQAAAMo"]
[Thu Feb 12 18:43:31.359444 2026] [:error] [pid 63416:tid 63429] [client 51.120.78.0:64281] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY2u072wmecPaCHcM2-ZNwAAAYg"]
[Thu Feb 12 18:43:31.895517 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:51109] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY2u0xOvRgscTcqsMBmrGQAAANA"]
[Thu Feb 12 18:43:32.676471 2026] [:error] [pid 63418:tid 63498] [client 51.120.78.0:37822] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY2u1Nzjh-bbJnStPZKxzQAAAJY"]
[Thu Feb 12 18:43:33.261905 2026] [:error] [pid 65064:tid 65089] [client 51.120.78.0:51104] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aY2u1ROvRgscTcqsMBmrIAAAANY"]
[Thu Feb 12 18:43:33.941319 2026] [:error] [pid 65064:tid 65076] [client 51.120.78.0:64263] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY2u1ROvRgscTcqsMBmrJQAAAMk"]
[Thu Feb 12 18:43:34.655851 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:51110] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY2u1hOvRgscTcqsMBmrJwAAAMw"]
[Thu Feb 12 18:43:35.748656 2026] [:error] [pid 63416:tid 63425] [client 51.120.78.0:51096] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY2u172wmecPaCHcM2-ZOwAAAYQ"]
[Thu Feb 12 18:43:36.827623 2026] [:error] [pid 63511:tid 63513] [client 51.120.78.0:36934] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aY2u2KQCQbD5BgeyIk3iYgAAAAA"]
[Thu Feb 12 18:43:38.191888 2026] [:error] [pid 65064:tid 65088] [client 51.120.78.0:38850] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aY2u2hOvRgscTcqsMBmrMgAAANU"]
[Thu Feb 12 18:43:38.987141 2026] [:error] [pid 65064:tid 65089] [client 51.120.78.0:64303] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aY2u2hOvRgscTcqsMBmrNQAAANY"]
[Thu Feb 12 18:43:39.567540 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:37775] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aY2u29zjh-bbJnStPZKx6AAAAIU"]
[Thu Feb 12 18:43:40.191387 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:38901] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aY2u3BOvRgscTcqsMBmrOAAAANc"]
[Thu Feb 12 18:43:40.736393 2026] [:error] [pid 63418:tid 63478] [client 51.120.78.0:38893] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY2u3Nzjh-bbJnStPZKx7AAAAII"]
[Thu Feb 12 18:43:41.415662 2026] [:error] [pid 63511:tid 63534] [client 51.120.78.0:51117] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY2u3aQCQbD5BgeyIk3idQAAABU"]
[Thu Feb 12 18:43:42.064654 2026] [:error] [pid 63418:tid 63492] [client 51.120.78.0:51118] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY2u3tzjh-bbJnStPZKx9AAAAJA"]
[Thu Feb 12 18:43:42.660500 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:51077] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aY2u3hOvRgscTcqsMBmrPwAAAM0"]
[Thu Feb 12 18:43:43.267901 2026] [:error] [pid 63418:tid 63487] [client 51.120.78.0:64288] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aY2u39zjh-bbJnStPZKx-QAAAIs"]
[Thu Feb 12 18:43:43.885531 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:39117] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aY2u3xOvRgscTcqsMBmrQQAAAMI"]
[Thu Feb 12 18:43:44.499774 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:64287] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aY2u4Nzjh-bbJnStPZKx_QAAAIw"]
[Thu Feb 12 18:43:45.362267 2026] [:error] [pid 63511:tid 63519] [client 51.120.78.0:64267] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aY2u4aQCQbD5BgeyIk3iggAAAAY"]
[Thu Feb 12 18:43:46.090366 2026] [:error] [pid 63416:tid 63436] [client 51.120.78.0:39109] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aY2u4r2wmecPaCHcM2-ZfAAAAY8"]
[Thu Feb 12 18:43:46.854268 2026] [:error] [pid 63416:tid 63424] [client 51.120.78.0:38863] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aY2u4r2wmecPaCHcM2-ZfgAAAYM"]
[Thu Feb 12 18:43:47.484104 2026] [:error] [pid 63511:tid 63530] [client 51.120.78.0:37768] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aY2u46QCQbD5BgeyIk3ihwAAABE"]
[Thu Feb 12 18:43:48.041372 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:38857] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aY2u5KQCQbD5BgeyIk3iiQAAABA"]
[Thu Feb 12 18:43:48.721141 2026] [:error] [pid 65064:tid 65073] [client 51.120.78.0:38866] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aY2u5BOvRgscTcqsMBmrTgAAAMY"]
[Thu Feb 12 18:43:49.265709 2026] [:error] [pid 63511:tid 63519] [client 51.120.78.0:38911] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aY2u5aQCQbD5BgeyIk3ijwAAAAY"]
[Thu Feb 12 18:43:50.120752 2026] [:error] [pid 63511:tid 63532] [client 51.120.78.0:64276] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aY2u5qQCQbD5BgeyIk3ikwAAABM"]
[Thu Feb 12 18:43:51.153490 2026] [:error] [pid 63416:tid 63439] [client 51.120.78.0:51127] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aY2u572wmecPaCHcM2-ZggAAAZI"]
[Thu Feb 12 18:43:52.428654 2026] [:error] [pid 63417:tid 63458] [client 51.120.78.0:36965] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aY2u6P8gSb97qRMtXCK6YQAAAEk"]
[Thu Feb 12 18:43:53.244520 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:37803] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aY2u6f8gSb97qRMtXCK6YwAAAE8"]
[Thu Feb 12 18:43:54.597938 2026] [:error] [pid 65064:tid 65088] [client 51.120.78.0:51121] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aY2u6hOvRgscTcqsMBmrVwAAANU"]
[Thu Feb 12 18:43:55.332397 2026] [:error] [pid 63417:tid 63459] [client 51.120.78.0:64291] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aY2u6_8gSb97qRMtXCK6ZwAAAEo"]
[Thu Feb 12 18:43:56.061311 2026] [:error] [pid 63416:tid 63421] [client 51.120.78.0:36975] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aY2u7L2wmecPaCHcM2-ZiQAAAYA"]
[Thu Feb 12 18:43:56.623265 2026] [:error] [pid 63416:tid 63440] [client 51.120.78.0:38904] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aY2u7L2wmecPaCHcM2-ZiwAAAZM"]
[Thu Feb 12 18:43:57.147957 2026] [:error] [pid 63418:tid 63500] [client 51.120.78.0:51072] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aY2u7dzjh-bbJnStPZKyJgAAAJg"]
[Thu Feb 12 18:43:57.715445 2026] [:error] [pid 63417:tid 63460] [client 51.120.78.0:51123] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aY2u7f8gSb97qRMtXCK6awAAAEs"]
[Thu Feb 12 18:43:58.263997 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:39140] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY2u7hOvRgscTcqsMBmrYwAAANQ"]
[Thu Feb 12 18:43:58.887686 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:64299] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY2u7v8gSb97qRMtXCK6bgAAAEc"]
[Thu Feb 12 18:44:04.714084 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:64311] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY2u9Nzjh-bbJnStPZKyPAAAAIU"]
[Thu Feb 12 18:44:05.248529 2026] [:error] [pid 63511:tid 63523] [client 51.120.78.0:38851] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aY2u9aQCQbD5BgeyIk3i3gAAAAo"]
[Thu Feb 12 18:44:05.808668 2026] [:error] [pid 63418:tid 63479] [client 51.120.78.0:38897] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aY2u9dzjh-bbJnStPZKyRAAAAIM"]
[Thu Feb 12 18:44:06.393713 2026] [:error] [pid 65064:tid 65075] [client 51.120.78.0:39106] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aY2u9hOvRgscTcqsMBmrdgAAAMg"]
[Thu Feb 12 18:44:06.977074 2026] [:error] [pid 63511:tid 63531] [client 51.120.78.0:37788] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aY2u9qQCQbD5BgeyIk3i7QAAABI"]
[Thu Feb 12 18:44:07.566467 2026] [:error] [pid 65064:tid 65086] [client 51.120.78.0:39122] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aY2u9xOvRgscTcqsMBmrdwAAANM"]
[Thu Feb 12 18:44:08.140982 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:39125] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aY2u-BOvRgscTcqsMBmreQAAAMw"]
[Thu Feb 12 18:44:08.818125 2026] [:error] [pid 63416:tid 63429] [client 51.120.78.0:51133] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aY2u-L2wmecPaCHcM2-ZpQAAAYg"]
[Thu Feb 12 18:44:09.347564 2026] [:error] [pid 63511:tid 63527] [client 51.120.78.0:64278] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aY2u-aQCQbD5BgeyIk3i9QAAAA4"]
[Thu Feb 12 18:44:09.952479 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:51129] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aY2u-aQCQbD5BgeyIk3i9gAAABA"]
[Thu Feb 12 18:44:10.965355 2026] [:error] [pid 63417:tid 63454] [client 51.120.78.0:51135] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aY2u-v8gSb97qRMtXCK6ggAAAEU"]
[Thu Feb 12 18:44:11.726833 2026] [:error] [pid 63417:tid 63472] [client 51.120.78.0:64295] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aY2u-_8gSb97qRMtXCK6hQAAAFc"]
[Thu Feb 12 18:44:13.084951 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:39133] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aY2u_ROvRgscTcqsMBmriAAAAMw"]
[Thu Feb 12 18:44:13.671070 2026] [:error] [pid 63417:tid 63453] [client 51.120.78.0:42755] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aY2u_f8gSb97qRMtXCK6hgAAAEQ"]
[Thu Feb 12 18:44:14.329396 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:38885] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "aY2u_tzjh-bbJnStPZKyYgAAAIc"]
[Thu Feb 12 18:44:15.007117 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:64268] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aY2u_6QCQbD5BgeyIk3jAAAAABA"]
[Thu Feb 12 18:44:15.631980 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:38899] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aY2u_xOvRgscTcqsMBmrkAAAAMs"]
[Thu Feb 12 18:44:16.264486 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:51093] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aY2vABOvRgscTcqsMBmrkQAAAMc"]
[Thu Feb 12 18:44:17.021688 2026] [:error] [pid 63418:tid 63490] [client 51.120.78.0:39166] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-signup.php"] [unique_id "aY2vAdzjh-bbJnStPZKyaAAAAI4"]
[Thu Feb 12 18:44:17.645156 2026] [:error] [pid 63511:tid 63522] [client 51.120.78.0:36941] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aY2vAaQCQbD5BgeyIk3jCQAAAAk"]
[Thu Feb 12 18:44:18.224978 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:39123] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aY2vAqQCQbD5BgeyIk3jCwAAABA"]
[Thu Feb 12 18:44:18.792806 2026] [:error] [pid 63511:tid 63524] [client 51.120.78.0:38890] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aY2vAqQCQbD5BgeyIk3jDgAAAAs"]
[Thu Feb 12 18:44:19.378080 2026] [:error] [pid 63418:tid 63480] [client 51.120.78.0:64258] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aY2vA9zjh-bbJnStPZKybwAAAIQ"]
[Thu Feb 12 18:44:20.115073 2026] [:error] [pid 63417:tid 63455] [client 51.120.78.0:37772] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aY2vBP8gSb97qRMtXCK6jgAAAEY"]
[Thu Feb 12 18:44:20.718281 2026] [:error] [pid 65064:tid 65086] [client 51.120.78.0:39154] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aY2vBBOvRgscTcqsMBmrmQAAANM"]
[Thu Feb 12 18:44:21.323690 2026] [:error] [pid 63416:tid 63426] [client 51.120.78.0:36991] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aY2vBb2wmecPaCHcM2-ZuAAAAYU"]
[Thu Feb 12 18:44:22.151790 2026] [:error] [pid 63416:tid 63439] [client 51.120.78.0:64265] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aY2vBr2wmecPaCHcM2-ZuwAAAZI"]
[Thu Feb 12 18:44:22.867860 2026] [:error] [pid 63511:tid 63524] [client 51.120.78.0:38892] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aY2vBqQCQbD5BgeyIk3jHAAAAAs"]
[Thu Feb 12 18:44:23.622943 2026] [:error] [pid 63511:tid 63523] [client 51.120.78.0:39145] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aY2vB6QCQbD5BgeyIk3jIAAAAAo"]
[Thu Feb 12 18:44:24.205310 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:36928] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "aY2vCNzjh-bbJnStPZKycgAAAIc"]
[Thu Feb 12 18:44:25.057706 2026] [:error] [pid 63511:tid 63516] [client 51.120.78.0:37783] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Thu Feb 12 18:44:25.829438 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:37783] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Feb 12 18:44:26.101296 2026] [:error] [pid 63511:tid 63536] [client 51.120.78.0:37783] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Feb 12 18:44:26.363098 2026] [:error] [pid 63511:tid 63528] [client 51.120.78.0:37783] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Feb 12 18:44:26.621866 2026] [:error] [pid 63511:tid 63537] [client 51.120.78.0:37783] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aY2vCqQCQbD5BgeyIk3jNAAAABg"]
[Thu Feb 12 18:44:27.755226 2026] [:error] [pid 63511:tid 63523] [client 51.120.78.0:51102] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aY2vC6QCQbD5BgeyIk3jPgAAAAo"]
[Thu Feb 12 18:44:29.164212 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:37796] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aY2vDROvRgscTcqsMBmrnwAAAMc"]
[Thu Feb 12 18:44:30.772185 2026] [:error] [pid 63416:tid 63424] [client 51.120.78.0:38888] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Feb 12 18:44:31.310588 2026] [:error] [pid 63416:tid 63421] [client 51.120.78.0:38888] [client 51.120.78.0] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 51.120.78.0, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aY2vD72wmecPaCHcM2-ZwgAAAYA"]
[Thu Feb 12 18:44:31.576982 2026] [:error] [pid 63416:tid 63423] [client 51.120.78.0:38888] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aY2vD72wmecPaCHcM2-ZwwAAAYI"]
[Thu Feb 12 18:44:32.871163 2026] [:error] [pid 63511:tid 63525] [client 51.120.78.0:64274] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Thu Feb 12 18:44:33.130857 2026] [:error] [pid 63511:tid 63535] [client 51.120.78.0:64274] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY2vEaQCQbD5BgeyIk3jTwAAABY"]
[Thu Feb 12 18:44:34.311176 2026] [:error] [pid 63418:tid 63480] [client 51.120.78.0:64301] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY2vEtzjh-bbJnStPZKyfAAAAIQ"]
[Thu Feb 12 18:44:35.930899 2026] [:error] [pid 63417:tid 63472] [client 51.120.78.0:64293] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY2vE_8gSb97qRMtXCK6qwAAAFc"]
[Thu Feb 12 18:44:37.121947 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:64261] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY2vFdzjh-bbJnStPZKygAAAAIw"]
[Thu Feb 12 18:44:38.315277 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:39152] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aY2vFtzjh-bbJnStPZKyggAAAIc"]
[Thu Feb 12 18:44:39.744583 2026] [:error] [pid 63417:tid 63451] [client 51.120.78.0:38872] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aY2vF_8gSb97qRMtXCK6sgAAAEI"]
[Thu Feb 12 18:44:40.696263 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:51084] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aY2vGBOvRgscTcqsMBmrtgAAAMs"]
[Thu Feb 12 18:44:41.534690 2026] [:error] [pid 63418:tid 63495] [client 51.120.78.0:64271] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aY2vGdzjh-bbJnStPZKyhwAAAJM"]
[Thu Feb 12 18:44:42.069686 2026] [:error] [pid 63511:tid 63518] [client 51.120.78.0:36960] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY2vGqQCQbD5BgeyIk3jZAAAAAU"]
[Thu Feb 12 18:44:42.785665 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:51128] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY2vGhOvRgscTcqsMBmrvwAAANc"]
[Thu Feb 12 18:44:43.893214 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:36973] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY2vGxOvRgscTcqsMBmryQAAANA"]
[Thu Feb 12 18:44:44.493767 2026] [:error] [pid 65064:tid 65073] [client 51.120.78.0:51103] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aY2vHBOvRgscTcqsMBmrywAAAMY"]
[Thu Feb 12 18:44:45.157848 2026] [:error] [pid 63511:tid 63513] [client 51.120.78.0:37819] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aY2vHaQCQbD5BgeyIk3jawAAAAA"]
[Thu Feb 12 18:44:45.709329 2026] [:error] [pid 63416:tid 63433] [client 51.120.78.0:38870] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aY2vHb2wmecPaCHcM2-Z2QAAAYw"]
[Thu Feb 12 18:44:46.357349 2026] [:error] [pid 63511:tid 63534] [client 51.120.78.0:64269] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aY2vHqQCQbD5BgeyIk3jbQAAABU"]
[Thu Feb 12 18:44:46.977088 2026] [:error] [pid 63417:tid 63453] [client 51.120.78.0:51126] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "aY2vHv8gSb97qRMtXCK6vQAAAEQ"]
[Thu Feb 12 18:44:47.547187 2026] [:error] [pid 63418:tid 63499] [client 51.120.78.0:37760] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aY2vH9zjh-bbJnStPZKyjAAAAJc"]
[Thu Feb 12 18:44:48.371524 2026] [:error] [pid 63417:tid 63465] [client 51.120.78.0:38861] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aY2vIP8gSb97qRMtXCK6wgAAAFA"]
[Thu Feb 12 18:44:49.426374 2026] [:error] [pid 65064:tid 65081] [client 51.120.78.0:64256] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aY2vIROvRgscTcqsMBmr1AAAAM4"]
[Thu Feb 12 18:44:49.981746 2026] [:error] [pid 63418:tid 63497] [client 51.120.78.0:51131] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aY2vIdzjh-bbJnStPZKyjwAAAJU"]
[Thu Feb 12 18:44:50.717939 2026] [:error] [pid 63416:tid 63425] [client 51.120.78.0:64260] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY2vIr2wmecPaCHcM2-Z6QAAAYQ"]
[Thu Feb 12 18:44:51.308382 2026] [:error] [pid 65064:tid 65081] [client 51.120.78.0:38886] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aY2vIxOvRgscTcqsMBmr4QAAAM4"]
[Thu Feb 12 18:44:52.119302 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:36954] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aY2vJBOvRgscTcqsMBmr5wAAAMc"]
[Thu Feb 12 18:44:52.717794 2026] [:error] [pid 63417:tid 63461] [client 51.120.78.0:39143] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aY2vJP8gSb97qRMtXCK6ywAAAEw"]
[Thu Feb 12 18:44:53.856630 2026] [:error] [pid 63417:tid 63468] [client 51.120.78.0:51134] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aY2vJf8gSb97qRMtXCK6zAAAAFM"]
[Thu Feb 12 18:44:54.929649 2026] [:error] [pid 63418:tid 63486] [client 51.120.78.0:51125] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aY2vJtzjh-bbJnStPZKykgAAAIo"]
[Thu Feb 12 18:44:55.843498 2026] [:error] [pid 63511:tid 63513] [client 51.120.78.0:36989] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aY2vJ6QCQbD5BgeyIk3jhgAAAAA"]
[Thu Feb 12 18:44:56.424014 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:51074] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aY2vKBOvRgscTcqsMBmr8wAAANI"]
[Thu Feb 12 18:44:57.156626 2026] [:error] [pid 65064:tid 65081] [client 51.120.78.0:51080] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aY2vKROvRgscTcqsMBmr-AAAAM4"]
[Thu Feb 12 18:44:58.414374 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:39111] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aY2vKhOvRgscTcqsMBmsBQAAANQ"]
[Thu Feb 12 18:44:59.966625 2026] [:error] [pid 63511:tid 63522] [client 51.120.78.0:51099] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aY2vK6QCQbD5BgeyIk3jkAAAAAk"]
[Thu Feb 12 18:45:00.804920 2026] [:error] [pid 63418:tid 63479] [client 51.120.78.0:37821] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aY2vLNzjh-bbJnStPZKyogAAAIM"]
[Thu Feb 12 18:45:01.572444 2026] [:error] [pid 63511:tid 63537] [client 51.120.78.0:38859] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aY2vLaQCQbD5BgeyIk3jkgAAABg"]
[Thu Feb 12 18:45:02.408663 2026] [:error] [pid 63416:tid 63433] [client 51.120.78.0:39104] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY2vLr2wmecPaCHcM2-Z-gAAAYw"]
[Thu Feb 12 18:45:03.055381 2026] [:error] [pid 63511:tid 63533] [client 51.120.78.0:37781] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY2vL6QCQbD5BgeyIk3jlQAAABQ"]
[Thu Feb 12 18:45:03.871259 2026] [:error] [pid 63417:tid 63450] [client 51.120.78.0:36957] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY2vL_8gSb97qRMtXCK62gAAAEE"]
[Thu Feb 12 18:45:05.208250 2026] [:error] [pid 65064:tid 65073] [client 51.120.78.0:39136] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/xmrlpc.php"] [unique_id "aY2vMROvRgscTcqsMBmsIwAAAMY"]
[Thu Feb 12 18:45:05.779254 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:38867] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aY2vMROvRgscTcqsMBmsJwAAANc"]
[Thu Feb 12 18:45:06.593906 2026] [:error] [pid 63418:tid 63498] [client 51.120.78.0:51116] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aY2vMtzjh-bbJnStPZKypQAAAJY"]
[Thu Feb 12 18:45:07.142379 2026] [:error] [pid 63417:tid 63469] [client 51.120.78.0:51082] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aY2vM_8gSb97qRMtXCK64AAAAFQ"]
[Thu Feb 12 18:45:07.707607 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:64277] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aY2vMxOvRgscTcqsMBmsNAAAANc"]
[Thu Feb 12 18:45:08.237014 2026] [:error] [pid 63416:tid 63437] [client 51.120.78.0:64307] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aY2vNL2wmecPaCHcM2-aCAAAAZA"]
[Thu Feb 12 18:45:09.092356 2026] [:error] [pid 65064:tid 65081] [client 51.120.78.0:38905] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aY2vNROvRgscTcqsMBmsOAAAAM4"]
[Thu Feb 12 18:45:09.680420 2026] [:error] [pid 65064:tid 65071] [client 51.120.78.0:37810] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aY2vNROvRgscTcqsMBmsOgAAAMQ"]
[Thu Feb 12 18:45:10.341220 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:39116] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aY2vNhOvRgscTcqsMBmsOwAAAMM"]
[Thu Feb 12 18:45:11.104845 2026] [:error] [pid 63416:tid 63428] [client 51.120.78.0:64272] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aY2vN72wmecPaCHcM2-aEwAAAYc"]
[Thu Feb 12 18:45:11.755086 2026] [:error] [pid 63418:tid 63482] [client 51.120.78.0:39141] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aY2vN9zjh-bbJnStPZKyrgAAAIY"]
[Thu Feb 12 18:45:12.354849 2026] [:error] [pid 63417:tid 63450] [client 51.120.78.0:39121] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aY2vOP8gSb97qRMtXCK64wAAAEE"]
[Thu Feb 12 18:45:12.897975 2026] [:error] [pid 63416:tid 63434] [client 51.120.78.0:64262] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "aY2vOL2wmecPaCHcM2-aGAAAAY0"]
[Thu Feb 12 18:45:13.493490 2026] [:error] [pid 63417:tid 63452] [client 51.120.78.0:51091] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "aY2vOf8gSb97qRMtXCK65wAAAEM"]
[Thu Feb 12 18:45:14.306904 2026] [:error] [pid 63417:tid 63454] [client 51.120.78.0:51094] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "aY2vOv8gSb97qRMtXCK67AAAAEU"]
[Thu Feb 12 18:45:14.899685 2026] [:error] [pid 63417:tid 63453] [client 51.120.78.0:36981] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "aY2vOv8gSb97qRMtXCK68QAAAEQ"]
[Thu Feb 12 18:45:15.484234 2026] [:error] [pid 63511:tid 63528] [client 51.120.78.0:39167] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "aY2vO6QCQbD5BgeyIk3jrQAAAA8"]
[Thu Feb 12 18:45:16.106423 2026] [:error] [pid 65064:tid 65084] [client 51.120.78.0:39130] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aY2vPBOvRgscTcqsMBmsRAAAANE"]
[Thu Feb 12 18:45:16.644097 2026] [:error] [pid 63418:tid 63490] [client 51.120.78.0:37766] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aY2vPNzjh-bbJnStPZKyuQAAAI4"]
[Thu Feb 12 18:45:17.297996 2026] [:error] [pid 65064:tid 65067] [client 51.120.78.0:39107] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aY2vPROvRgscTcqsMBmsSQAAAMA"]
[Thu Feb 12 18:45:18.014523 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:36988] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/xmrlpc.php"] [unique_id "aY2vPhOvRgscTcqsMBmsTgAAAMU"]
[Thu Feb 12 18:45:18.575991 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:64302] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY2vPhOvRgscTcqsMBmsUwAAAMM"]
[Thu Feb 12 18:45:19.175345 2026] [:error] [pid 63417:tid 63470] [client 51.120.78.0:64275] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY2vP_8gSb97qRMtXCK69wAAAFU"]
[Thu Feb 12 18:45:19.708668 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:39144] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY2vPxOvRgscTcqsMBmsWwAAANQ"]
[Thu Feb 12 18:45:20.328751 2026] [:error] [pid 63418:tid 63484] [client 51.120.78.0:64266] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aY2vQNzjh-bbJnStPZKyxQAAAIg"]
[Thu Feb 12 18:45:20.876367 2026] [:error] [pid 63418:tid 63491] [client 51.120.78.0:39131] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aY2vQNzjh-bbJnStPZKyxgAAAI8"]
[Thu Feb 12 18:45:21.431936 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:39158] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aY2vQROvRgscTcqsMBmsXgAAAME"]
[Thu Feb 12 18:45:21.981184 2026] [:error] [pid 63418:tid 63494] [client 51.120.78.0:40452] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aY2vQdzjh-bbJnStPZKyzAAAAJI"]
[Thu Feb 12 18:45:22.523367 2026] [:error] [pid 63417:tid 63457] [client 51.120.78.0:64319] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aY2vQv8gSb97qRMtXCK6_QAAAEg"]
[Thu Feb 12 18:45:23.105652 2026] [:error] [pid 63417:tid 63463] [client 51.120.78.0:37787] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY2vQ_8gSb97qRMtXCK6_wAAAE4"]
[Thu Feb 12 18:45:23.640405 2026] [:error] [pid 63418:tid 63491] [client 51.120.78.0:39132] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY2vQ9zjh-bbJnStPZKyzwAAAI8"]
[Thu Feb 12 18:45:24.196998 2026] [:error] [pid 63511:tid 63516] [client 51.120.78.0:36980] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY2vRKQCQbD5BgeyIk3juQAAAAM"]
[Thu Feb 12 18:45:24.735229 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:37796] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY2vRKQCQbD5BgeyIk3jvAAAABA"]
[Thu Feb 12 18:45:25.380277 2026] [:error] [pid 63417:tid 63468] [client 51.120.78.0:64285] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aY2vRf8gSb97qRMtXCK7BQAAAFM"]
[Thu Feb 12 18:45:25.955143 2026] [:error] [pid 63511:tid 63531] [client 51.120.78.0:64318] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aY2vRaQCQbD5BgeyIk3jwQAAABI"]
[Thu Feb 12 18:45:26.500174 2026] [:error] [pid 63511:tid 63535] [client 51.120.78.0:36961] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aY2vRqQCQbD5BgeyIk3jxAAAABY"]
[Thu Feb 12 18:45:27.120646 2026] [:error] [pid 65064:tid 65088] [client 51.120.78.0:64310] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aY2vRxOvRgscTcqsMBmsYwAAANU"]
[Thu Feb 12 18:45:27.658598 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:64264] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aY2vR6QCQbD5BgeyIk3jywAAABA"]
[Thu Feb 12 18:45:28.260300 2026] [:error] [pid 63418:tid 63495] [client 51.120.78.0:39151] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aY2vSNzjh-bbJnStPZKy3AAAAJM"]
[Thu Feb 12 18:45:28.913197 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:51122] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aY2vSBOvRgscTcqsMBmsZgAAAME"]
[Thu Feb 12 18:45:29.566142 2026] [:error] [pid 63418:tid 63477] [client 51.120.78.0:42798] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aY2vSdzjh-bbJnStPZKy4AAAAIE"]
[Thu Feb 12 18:45:30.182810 2026] [:error] [pid 63416:tid 63445] [client 51.120.78.0:51111] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aY2vSr2wmecPaCHcM2-aNQAAAZg"]
[Thu Feb 12 18:45:30.720524 2026] [:error] [pid 63418:tid 63486] [client 51.120.78.0:42783] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aY2vStzjh-bbJnStPZKy6QAAAIo"]
[Thu Feb 12 18:45:31.252399 2026] [:error] [pid 63417:tid 63454] [client 51.120.78.0:51114] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aY2vS_8gSb97qRMtXCK7DQAAAEU"]
[Thu Feb 12 18:45:31.813806 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:42800] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aY2vSxOvRgscTcqsMBmsaQAAAMs"]
[Thu Feb 12 18:45:32.420322 2026] [:error] [pid 65064:tid 65091] [client 51.120.78.0:42762] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Feb 12 18:45:33.543870 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:42762] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Feb 12 18:45:33.807564 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:42762] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Feb 12 18:45:34.071830 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:42762] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Thu Feb 12 18:45:34.389625 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:42762] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aY2vThOvRgscTcqsMBmseQAAAMM"]
[Thu Feb 12 18:45:35.234628 2026] [:error] [pid 63418:tid 63480] [client 51.120.78.0:64284] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Feb 12 18:45:35.543783 2026] [:error] [pid 63418:tid 63500] [client 51.120.78.0:64284] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Feb 12 18:45:37.240449 2026] [:error] [pid 63418:tid 63497] [client 51.120.78.0:64284] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aY2vUdzjh-bbJnStPZKy_AAAAJU"]
[Thu Feb 12 18:45:38.306659 2026] [:error] [pid 63418:tid 63494] [client 51.120.78.0:37805] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aY2vUtzjh-bbJnStPZKy_wAAAJI"]
[Thu Feb 12 18:45:38.989672 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:51098] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aY2vUhOvRgscTcqsMBmsgwAAANQ"]
[Thu Feb 12 18:45:39.664542 2026] [:error] [pid 65064:tid 65067] [client 51.120.78.0:64297] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aY2vUxOvRgscTcqsMBmsigAAAMA"]
[Thu Feb 12 18:45:40.251774 2026] [:error] [pid 63417:tid 63457] [client 51.120.78.0:42772] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY2vVP8gSb97qRMtXCK7FQAAAEg"]
[Thu Feb 12 18:45:40.821649 2026] [:error] [pid 63417:tid 63470] [client 51.120.78.0:37781] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY2vVP8gSb97qRMtXCK7FgAAAFU"]
[Thu Feb 12 18:45:41.480883 2026] [:error] [pid 63417:tid 63460] [client 51.120.78.0:39148] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY2vVf8gSb97qRMtXCK7GAAAAEs"]
[Thu Feb 12 18:45:42.741190 2026] [:error] [pid 63511:tid 63518] [client 51.120.78.0:50965] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/"] [unique_id "aY2vVqQCQbD5BgeyIk3j3QAAAAU"]
[Thu Feb 12 18:45:43.502001 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:50990] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aY2vVxOvRgscTcqsMBmsoAAAAMI"]
[Thu Feb 12 18:45:44.472904 2026] [:error] [pid 63417:tid 63468] [client 51.120.78.0:49102] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aY2vWP8gSb97qRMtXCK7HAAAAFM"]
[Thu Feb 12 18:45:45.143367 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:50993] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aY2vWROvRgscTcqsMBmsqgAAAMI"]
[Thu Feb 12 18:45:45.944945 2026] [:error] [pid 63418:tid 63492] [client 51.120.78.0:49115] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aY2vWdzjh-bbJnStPZKzBQAAAJA"]
[Thu Feb 12 18:45:46.880032 2026] [:error] [pid 63417:tid 63450] [client 51.120.78.0:64280] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aY2vWv8gSb97qRMtXCK7JgAAAEE"]
[Thu Feb 12 18:45:47.679277 2026] [:error] [pid 63416:tid 63426] [client 51.120.78.0:49093] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aY2vW72wmecPaCHcM2-aUAAAAYU"]
[Thu Feb 12 18:45:48.285663 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:64282] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aY2vXKQCQbD5BgeyIk3j5wAAABA"]
[Thu Feb 12 18:45:48.890442 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:49100] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aY2vXBOvRgscTcqsMBmstgAAAMs"]
[Thu Feb 12 18:45:49.484052 2026] [:error] [pid 63511:tid 63530] [client 51.120.78.0:51001] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aY2vXaQCQbD5BgeyIk3j6QAAABE"]
[Thu Feb 12 18:45:50.128613 2026] [:error] [pid 63416:tid 63442] [client 51.120.78.0:49146] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aY2vXr2wmecPaCHcM2-aUgAAAZU"]
[Thu Feb 12 18:45:51.370926 2026] [:error] [pid 63416:tid 63441] [client 51.120.78.0:50964] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aY2vX72wmecPaCHcM2-aVgAAAZQ"]
[Thu Feb 12 18:45:52.207676 2026] [:error] [pid 63511:tid 63533] [client 51.120.78.0:64286] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aY2vYKQCQbD5BgeyIk3j8AAAABQ"]
[Thu Feb 12 18:45:53.187826 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:49136] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aY2vYROvRgscTcqsMBmsvwAAANA"]
[Thu Feb 12 18:45:53.833131 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:49091] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aY2vYROvRgscTcqsMBmswgAAAMc"]
[Thu Feb 12 18:45:54.997854 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:64305] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aY2vYv8gSb97qRMtXCK7LQAAAE8"]
[Thu Feb 12 18:45:55.568058 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:50954] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aY2vYxOvRgscTcqsMBmsygAAAMU"]
[Thu Feb 12 18:45:56.094418 2026] [:error] [pid 63511:tid 63521] [client 51.120.78.0:49138] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aY2vZKQCQbD5BgeyIk3j_wAAAAg"]
[Thu Feb 12 18:45:56.645423 2026] [:error] [pid 65064:tid 65075] [client 51.120.78.0:42789] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2vZBOvRgscTcqsMBms0AAAAMg"]
[Thu Feb 12 18:45:57.169876 2026] [:error] [pid 63417:tid 63465] [client 51.120.78.0:50985] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2vZf8gSb97qRMtXCK7MAAAAFA"]
[Thu Feb 12 18:45:57.758139 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:36978] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2vZROvRgscTcqsMBms1gAAAMU"]
[Thu Feb 12 18:45:58.561655 2026] [:error] [pid 63417:tid 63471] [client 51.120.78.0:64308] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aY2vZv8gSb97qRMtXCK7MwAAAFY"]
[Thu Feb 12 18:45:59.114957 2026] [:error] [pid 63511:tid 63523] [client 51.120.78.0:49129] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aY2vZ6QCQbD5BgeyIk3kCQAAAAo"]
[Thu Feb 12 18:45:59.733734 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:64315] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aY2vZxOvRgscTcqsMBms2AAAANI"]
[Thu Feb 12 18:46:00.328544 2026] [:error] [pid 63417:tid 63449] [client 51.120.78.0:39120] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aY2vaP8gSb97qRMtXCK7OQAAAEA"]
[Thu Feb 12 18:46:00.902478 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:50955] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aY2vaBOvRgscTcqsMBms3wAAAME"]
[Thu Feb 12 18:46:01.465736 2026] [:error] [pid 63417:tid 63463] [client 51.120.78.0:37764] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aY2vaf8gSb97qRMtXCK7PAAAAE4"]
[Thu Feb 12 18:46:02.078006 2026] [:error] [pid 65064:tid 65073] [client 51.120.78.0:49143] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aY2vahOvRgscTcqsMBms5gAAAMY"]
[Thu Feb 12 18:46:02.672191 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:37785] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aY2vahOvRgscTcqsMBms7gAAAMc"]
[Thu Feb 12 18:46:03.214736 2026] [:error] [pid 63416:tid 63436] [client 51.120.78.0:42804] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aY2va72wmecPaCHcM2-aagAAAY8"]
[Thu Feb 12 18:46:03.857120 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:36950] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "aY2vaxOvRgscTcqsMBms8wAAAMw"]
[Thu Feb 12 18:46:06.038594 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:49120] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "aY2vbhOvRgscTcqsMBmtAAAAANc"]
[Thu Feb 12 18:46:11.755644 2026] [:error] [pid 63416:tid 63439] [client 51.120.78.0:37820] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "aY2vc72wmecPaCHcM2-adQAAAZI"]
[Thu Feb 12 18:46:46.727564 2026] [:error] [pid 63511:tid 63533] [client 51.120.78.0:49144] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Thu Feb 12 18:46:48.266241 2026] [:error] [pid 63511:tid 63528] [client 51.120.78.0:49144] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Thu Feb 12 18:46:49.180056 2026] [:error] [pid 63511:tid 63517] [client 51.120.78.0:49144] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Feb 12 18:46:49.489501 2026] [:error] [pid 63511:tid 63533] [client 51.120.78.0:49144] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Feb 12 18:46:50.091997 2026] [:error] [pid 63511:tid 63513] [client 51.120.78.0:49144] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aY2vmqQCQbD5BgeyIk3klAAAAAA"]
[Thu Feb 12 18:47:02.366506 2026] [:error] [pid 63511:tid 63525] [client 51.120.78.0:50959] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aY2vpqQCQbD5BgeyIk3kqQAAAAw"]
[Thu Feb 12 18:47:16.295123 2026] [:error] [pid 63416:tid 63433] [client 51.120.78.0:49112] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aY2vtL2wmecPaCHcM2-auAAAAYw"]
[Thu Feb 12 18:47:29.419315 2026] [:error] [pid 63417:tid 63450] [client 51.120.78.0:37799] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aY2vwf8gSb97qRMtXCK8OwAAAEE"]
[Thu Feb 12 18:47:36.924322 2026] [:error] [pid 63416:tid 63434] [client 51.120.78.0:37814] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aY2vyL2wmecPaCHcM2-a1AAAAY0"]
[Thu Feb 12 18:47:38.320018 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:49107] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY2vyhOvRgscTcqsMBmuUwAAAM0"]
[Thu Feb 12 18:47:39.078206 2026] [:error] [pid 63417:tid 63455] [client 51.120.78.0:37777] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY2vy_8gSb97qRMtXCK8UgAAAEY"]
[Thu Feb 12 18:47:39.712412 2026] [:error] [pid 63417:tid 63459] [client 51.120.78.0:37794] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY2vy_8gSb97qRMtXCK8VAAAAEo"]
[Thu Feb 12 18:47:40.257627 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:37761] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aY2vzBOvRgscTcqsMBmuWQAAAMU"]
[Thu Feb 12 18:47:40.861690 2026] [:error] [pid 63416:tid 63421] [client 51.120.78.0:38881] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY2vzL2wmecPaCHcM2-a2gAAAYA"]
[Thu Feb 12 18:47:41.438747 2026] [:error] [pid 63511:tid 63516] [client 51.120.78.0:49090] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY2vzaQCQbD5BgeyIk3lOwAAAAM"]
[Thu Feb 12 18:47:41.998891 2026] [:error] [pid 63417:tid 63472] [client 51.120.78.0:64259] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY2vzf8gSb97qRMtXCK8VgAAAFc"]
[Thu Feb 12 18:47:42.581792 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:50972] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY2vzv8gSb97qRMtXCK8VwAAAE8"]
[Thu Feb 12 18:47:43.120070 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:37801] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aY2vzxOvRgscTcqsMBmudgAAANI"]
[Thu Feb 12 18:47:43.787692 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:49109] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aY2vzxOvRgscTcqsMBmueQAAAMM"]
[Thu Feb 12 18:47:44.448749 2026] [:error] [pid 63511:tid 63536] [client 51.120.78.0:51002] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aY2v0KQCQbD5BgeyIk3lPgAAABc"]
[Thu Feb 12 18:47:45.040695 2026] [:error] [pid 63511:tid 63520] [client 51.120.78.0:51007] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aY2v0aQCQbD5BgeyIk3lPwAAAAc"]
[Thu Feb 12 18:47:45.844104 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:49110] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2v0ROvRgscTcqsMBmuggAAANA"]
[Thu Feb 12 18:47:46.476867 2026] [:error] [pid 65064:tid 65086] [client 51.120.78.0:37763] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2v0hOvRgscTcqsMBmuhwAAANM"]
[Thu Feb 12 18:47:47.045014 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:37808] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2v09zjh-bbJnStPZK0GAAAAIU"]
[Thu Feb 12 18:47:47.600674 2026] [:error] [pid 63416:tid 63442] [client 51.120.78.0:38907] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY2v072wmecPaCHcM2-a4wAAAZU"]
[Thu Feb 12 18:47:48.247904 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:49095] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-php"] [unique_id "aY2v1KQCQbD5BgeyIk3lRQAAAAE"]
[Thu Feb 12 18:47:49.676449 2026] [:error] [pid 63416:tid 63445] [client 51.120.78.0:37767] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Feb 12 18:47:49.939855 2026] [:error] [pid 63416:tid 63443] [client 51.120.78.0:37767] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Thu Feb 12 18:47:51.134258 2026] [:error] [pid 63416:tid 63433] [client 51.120.78.0:37767] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aY2v172wmecPaCHcM2-a6wAAAYw"]
[Thu Feb 12 18:47:52.770234 2026] [:error] [pid 63417:tid 63453] [client 51.120.78.0:49108] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aY2v2P8gSb97qRMtXCK8awAAAEQ"]
[Thu Feb 12 18:47:53.322877 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:37811] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aY2v2dzjh-bbJnStPZK0KQAAAIc"]
[Thu Feb 12 18:47:53.884205 2026] [:error] [pid 63511:tid 63520] [client 51.120.78.0:49133] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Thu Feb 12 18:47:54.148445 2026] [:error] [pid 63511:tid 63517] [client 51.120.78.0:49133] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY2v2qQCQbD5BgeyIk3lTwAAAAQ"]
[Thu Feb 12 18:47:54.699126 2026] [:error] [pid 63417:tid 63461] [client 51.120.78.0:64257] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY2v2v8gSb97qRMtXCK8bwAAAEw"]
[Thu Feb 12 18:47:55.243265 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:38873] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY2v2xOvRgscTcqsMBmupAAAAMI"]
[Thu Feb 12 18:47:55.820604 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:50962] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY2v2_8gSb97qRMtXCK8cwAAAE8"]
[Thu Feb 12 18:47:56.397824 2026] [:error] [pid 65064:tid 65076] [client 51.120.78.0:37780] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY2v3BOvRgscTcqsMBmupwAAAMk"]
[Thu Feb 12 18:47:57.018494 2026] [:error] [pid 63418:tid 63492] [client 51.120.78.0:37804] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY2v3dzjh-bbJnStPZK0MQAAAJA"]
[Thu Feb 12 18:47:57.561493 2026] [:error] [pid 63416:tid 63441] [client 51.120.78.0:42773] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY2v3b2wmecPaCHcM2-a8gAAAZQ"]
[Thu Feb 12 18:47:58.449841 2026] [:error] [pid 63418:tid 63477] [client 51.120.78.0:50947] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aY2v3tzjh-bbJnStPZK0NAAAAIE"]
[Thu Feb 12 18:47:59.549332 2026] [:error] [pid 63417:tid 63467] [client 51.120.78.0:49128] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aY2v3_8gSb97qRMtXCK8egAAAFI"]
[Thu Feb 12 18:48:00.179300 2026] [:error] [pid 65064:tid 65076] [client 51.120.78.0:49101] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aY2v4BOvRgscTcqsMBmuswAAAMk"]
[Thu Feb 12 18:48:00.734003 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:49145] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aY2v4BOvRgscTcqsMBmutwAAANI"]
[Thu Feb 12 18:48:01.351374 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:51106] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aY2v4ROvRgscTcqsMBmuvAAAAMU"]
[Thu Feb 12 18:48:01.918880 2026] [:error] [pid 65064:tid 65077] [client 51.120.78.0:51004] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css.php"] [unique_id "aY2v4ROvRgscTcqsMBmuvgAAAMo"]
[Thu Feb 12 18:48:02.560646 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:50982] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aY2v4v8gSb97qRMtXCK8fQAAAE8"]
[Thu Feb 12 18:48:03.535273 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:50999] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aY2v4xOvRgscTcqsMBmuxwAAANI"]
[Thu Feb 12 18:48:04.169252 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:51105] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aY2v5BOvRgscTcqsMBmuyQAAAM0"]
[Thu Feb 12 18:48:05.374316 2026] [:error] [pid 63418:tid 63487] [client 51.120.78.0:39143] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aY2v5dzjh-bbJnStPZK0PQAAAIs"]
[Thu Feb 12 18:48:06.164669 2026] [:error] [pid 63417:tid 63465] [client 51.120.78.0:50976] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aY2v5v8gSb97qRMtXCK8hAAAAFA"]
[Thu Feb 12 18:48:07.688949 2026] [:error] [pid 63418:tid 63497] [client 51.120.78.0:50973] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/index.php"] [unique_id "aY2v59zjh-bbJnStPZK0PwAAAJU"]
[Thu Feb 12 18:48:08.583564 2026] [:error] [pid 63417:tid 63469] [client 51.120.78.0:38879] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aY2v6P8gSb97qRMtXCK8iAAAAFQ"]
[Thu Feb 12 18:48:09.204311 2026] [:error] [pid 63418:tid 63480] [client 51.120.78.0:38869] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aY2v6dzjh-bbJnStPZK0RAAAAIQ"]
[Thu Feb 12 18:48:09.745877 2026] [:error] [pid 63511:tid 63529] [client 51.120.78.0:37823] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aY2v6aQCQbD5BgeyIk3ldAAAABA"]
[Thu Feb 12 18:48:10.743989 2026] [:error] [pid 63418:tid 63490] [client 51.120.78.0:37782] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aY2v6tzjh-bbJnStPZK0SgAAAI4"]
[Thu Feb 12 18:48:11.589532 2026] [:error] [pid 63416:tid 63434] [client 51.120.78.0:37790] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aY2v672wmecPaCHcM2-bDAAAAY0"]
[Thu Feb 12 18:48:12.160507 2026] [:error] [pid 63418:tid 63494] [client 51.120.78.0:49122] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aY2v7Nzjh-bbJnStPZK0TQAAAJI"]
[Thu Feb 12 18:48:12.723182 2026] [:error] [pid 63418:tid 63479] [client 51.120.78.0:38871] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aY2v7Nzjh-bbJnStPZK0UAAAAIM"]
[Thu Feb 12 18:48:13.614622 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:49149] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aY2v7ROvRgscTcqsMBmu1wAAANQ"]
[Thu Feb 12 18:48:14.264336 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:37788] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/123.php"] [unique_id "aY2v7tzjh-bbJnStPZK0VwAAAIc"]
[Thu Feb 12 18:48:14.865482 2026] [:error] [pid 63511:tid 63531] [client 51.120.78.0:50974] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aY2v7qQCQbD5BgeyIk3lewAAABI"]
[Thu Feb 12 18:48:15.635020 2026] [:error] [pid 63418:tid 63499] [client 51.120.78.0:37769] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aY2v79zjh-bbJnStPZK0WgAAAJc"]
[Thu Feb 12 18:48:16.336605 2026] [:error] [pid 63417:tid 63471] [client 51.120.78.0:38874] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aY2v8P8gSb97qRMtXCK8lQAAAFY"]
[Thu Feb 12 18:48:17.054504 2026] [:error] [pid 63418:tid 63476] [client 51.120.78.0:38854] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aY2v8dzjh-bbJnStPZK0WwAAAIA"]
[Thu Feb 12 18:48:17.934671 2026] [:error] [pid 63418:tid 63486] [client 51.120.78.0:38849] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY2v8dzjh-bbJnStPZK0XQAAAIo"]
[Thu Feb 12 18:48:18.492980 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:50952] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY2v8tzjh-bbJnStPZK0XgAAAIc"]
[Thu Feb 12 18:48:19.076823 2026] [:error] [pid 63417:tid 63463] [client 51.120.78.0:49106] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY2v8_8gSb97qRMtXCK8mwAAAE4"]
[Thu Feb 12 18:48:19.710878 2026] [:error] [pid 65064:tid 65076] [client 51.120.78.0:50953] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aY2v8xOvRgscTcqsMBmu3wAAAMk"]
[Thu Feb 12 18:48:20.234811 2026] [:error] [pid 63511:tid 63513] [client 51.120.78.0:49134] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY2v9KQCQbD5BgeyIk3liwAAAAA"]
[Thu Feb 12 18:48:20.793809 2026] [:error] [pid 65064:tid 65086] [client 51.120.78.0:37762] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY2v9BOvRgscTcqsMBmu5gAAANM"]
[Thu Feb 12 18:48:21.775657 2026] [:error] [pid 63416:tid 63431] [client 51.120.78.0:49124] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY2v9b2wmecPaCHcM2-bFwAAAYo"]
[Thu Feb 12 18:48:22.501519 2026] [:error] [pid 63416:tid 63443] [client 51.120.78.0:50980] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aY2v9r2wmecPaCHcM2-bGgAAAZY"]
[Thu Feb 12 18:48:23.167745 2026] [:error] [pid 63417:tid 63455] [client 51.120.78.0:51100] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aY2v9_8gSb97qRMtXCK8oAAAAEY"]
[Thu Feb 12 18:48:23.710561 2026] [:error] [pid 63417:tid 63467] [client 51.120.78.0:49099] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aY2v9_8gSb97qRMtXCK8ogAAAFI"]
[Thu Feb 12 18:48:24.279406 2026] [:error] [pid 63418:tid 63493] [client 51.120.78.0:37798] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aY2v-Nzjh-bbJnStPZK0ZwAAAJE"]
[Thu Feb 12 18:48:24.951863 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:37792] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aY2v-P8gSb97qRMtXCK8pwAAAEc"]
[Thu Feb 12 18:48:25.898637 2026] [:error] [pid 63417:tid 63473] [client 51.120.78.0:37803] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aY2v-f8gSb97qRMtXCK8qQAAAFg"]
[Thu Feb 12 18:48:26.653072 2026] [:error] [pid 63417:tid 63454] [client 51.120.78.0:50998] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aY2v-v8gSb97qRMtXCK8rAAAAEU"]
[Thu Feb 12 18:48:27.254998 2026] [:error] [pid 63416:tid 63438] [client 51.120.78.0:64270] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aY2v-72wmecPaCHcM2-bIwAAAZE"]
[Thu Feb 12 18:48:27.900459 2026] [:error] [pid 65064:tid 65086] [client 51.120.78.0:38857] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aY2v-xOvRgscTcqsMBmu8AAAANM"]
[Thu Feb 12 18:48:28.565622 2026] [:error] [pid 63416:tid 63445] [client 51.120.78.0:37770] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aY2v_L2wmecPaCHcM2-bKQAAAZg"]
[Thu Feb 12 18:48:29.161699 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:49142] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aY2v_ROvRgscTcqsMBmu8wAAAMM"]
[Thu Feb 12 18:48:29.829556 2026] [:error] [pid 63416:tid 63433] [client 51.120.78.0:37778] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aY2v_b2wmecPaCHcM2-bLAAAAYw"]
[Thu Feb 12 18:48:30.534217 2026] [:error] [pid 63418:tid 63482] [client 51.120.78.0:50946] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aY2v_tzjh-bbJnStPZK0dQAAAIY"]
[Thu Feb 12 18:48:31.258848 2026] [:error] [pid 63511:tid 63516] [client 51.120.78.0:50961] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aY2v_6QCQbD5BgeyIk3lpgAAAAM"]
[Thu Feb 12 18:48:32.093721 2026] [:error] [pid 63418:tid 63497] [client 51.120.78.0:37772] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aY2wANzjh-bbJnStPZK0egAAAJU"]
[Thu Feb 12 18:48:32.706385 2026] [:error] [pid 63417:tid 63457] [client 51.120.78.0:50988] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aY2wAP8gSb97qRMtXCK8rwAAAEg"]
[Thu Feb 12 18:48:33.340042 2026] [:error] [pid 63418:tid 63491] [client 51.120.78.0:42761] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aY2wAdzjh-bbJnStPZK0fgAAAI8"]
[Thu Feb 12 18:48:33.997065 2026] [:error] [pid 63418:tid 63499] [client 51.120.78.0:38883] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aY2wAdzjh-bbJnStPZK0gQAAAJc"]
[Thu Feb 12 18:48:34.611686 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:51089] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aY2wAv8gSb97qRMtXCK8tAAAAEc"]
[Thu Feb 12 18:48:35.279993 2026] [:error] [pid 63417:tid 63463] [client 51.120.78.0:37783] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aY2wA_8gSb97qRMtXCK8tgAAAE4"]
[Thu Feb 12 18:48:35.928620 2026] [:error] [pid 63418:tid 63494] [client 51.120.78.0:50949] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aY2wA9zjh-bbJnStPZK0iQAAAJI"]
[Thu Feb 12 18:48:36.499267 2026] [:error] [pid 63511:tid 63513] [client 51.120.78.0:37795] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aY2wBKQCQbD5BgeyIk3lsAAAAAA"]
[Thu Feb 12 18:48:37.338484 2026] [:error] [pid 63417:tid 63452] [client 51.120.78.0:37776] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aY2wBf8gSb97qRMtXCK8uQAAAEM"]
[Thu Feb 12 18:48:37.982056 2026] [:error] [pid 63416:tid 63435] [client 51.120.78.0:36956] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aY2wBb2wmecPaCHcM2-bNwAAAY4"]
[Thu Feb 12 18:48:38.568810 2026] [:error] [pid 63416:tid 63440] [client 51.120.78.0:38875] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aY2wBr2wmecPaCHcM2-bOwAAAZM"]
[Thu Feb 12 18:48:39.222980 2026] [:error] [pid 63418:tid 63489] [client 51.120.78.0:49125] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aY2wB9zjh-bbJnStPZK0jgAAAI0"]
[Thu Feb 12 18:48:40.273435 2026] [:error] [pid 63418:tid 63492] [client 51.120.78.0:38856] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aY2wCNzjh-bbJnStPZK0kgAAAJA"]
[Thu Feb 12 18:48:41.492132 2026] [:error] [pid 63511:tid 63515] [client 51.120.78.0:64316] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aY2wCaQCQbD5BgeyIk3luwAAAAI"]
[Thu Feb 12 18:48:42.402391 2026] [:error] [pid 65064:tid 65071] [client 51.120.78.0:37771] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aY2wChOvRgscTcqsMBmvEAAAAMQ"]
[Thu Feb 12 18:48:43.620091 2026] [:error] [pid 63511:tid 63532] [client 51.120.78.0:37784] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aY2wC6QCQbD5BgeyIk3lvgAAABM"]
[Thu Feb 12 18:48:44.696049 2026] [:error] [pid 63418:tid 63479] [client 51.120.78.0:50979] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aY2wDNzjh-bbJnStPZK0mQAAAIM"]
[Thu Feb 12 18:48:45.920696 2026] [:error] [pid 63417:tid 63451] [client 51.120.78.0:39114] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aY2wDf8gSb97qRMtXCK8xwAAAEI"]
[Thu Feb 12 18:48:46.684229 2026] [:error] [pid 63416:tid 63431] [client 51.120.78.0:37813] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aY2wDr2wmecPaCHcM2-bUQAAAYo"]
[Thu Feb 12 18:48:47.896707 2026] [:error] [pid 63511:tid 63515] [client 51.120.78.0:38902] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aY2wD6QCQbD5BgeyIk3lxQAAAAI"]
[Thu Feb 12 18:48:48.656687 2026] [:error] [pid 63416:tid 63435] [client 51.120.78.0:36941] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aY2wEL2wmecPaCHcM2-bVgAAAY4"]
[Thu Feb 12 18:48:49.424072 2026] [:error] [pid 63418:tid 63498] [client 51.120.78.0:64315] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aY2wEdzjh-bbJnStPZK0oAAAAJY"]
[Thu Feb 12 18:48:50.233640 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:49116] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aY2wEhOvRgscTcqsMBmvKQAAANI"]
[Thu Feb 12 18:48:51.233268 2026] [:error] [pid 63511:tid 63536] [client 51.120.78.0:36985] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aY2wE6QCQbD5BgeyIk3lygAAABc"]
[Thu Feb 12 18:48:52.375400 2026] [:error] [pid 63418:tid 63476] [client 51.120.78.0:51003] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aY2wFNzjh-bbJnStPZK0pgAAAIA"]
[Thu Feb 12 18:48:53.104668 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:38853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Feb 12 18:48:53.377047 2026] [:error] [pid 63418:tid 63484] [client 51.120.78.0:38853] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aY2wFdzjh-bbJnStPZK0qQAAAIg"]
[Thu Feb 12 18:48:54.153723 2026] [:error] [pid 65064:tid 65091] [client 51.120.78.0:49103] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aY2wFhOvRgscTcqsMBmvPQAAANg"]
[Thu Feb 12 18:48:54.734184 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:49127] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Thu Feb 12 18:48:55.267623 2026] [:error] [pid 63418:tid 63477] [client 51.120.78.0:49127] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Feb 12 18:48:55.531201 2026] [:error] [pid 63418:tid 63497] [client 51.120.78.0:49127] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Feb 12 18:48:55.903060 2026] [:error] [pid 63418:tid 63495] [client 51.120.78.0:49127] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Feb 12 18:48:56.238814 2026] [:error] [pid 63418:tid 63479] [client 51.120.78.0:49127] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Feb 12 18:48:56.989473 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:49127] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Feb 12 18:48:57.301033 2026] [:error] [pid 63418:tid 63484] [client 51.120.78.0:49127] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Thu Feb 12 18:48:57.591348 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:49127] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aY2wGdzjh-bbJnStPZK0ugAAAIU"]
[Thu Feb 12 18:48:58.332906 2026] [:error] [pid 63417:tid 63449] [client 51.120.78.0:64267] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Feb 12 18:48:58.595598 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:64267] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aY2wGv8gSb97qRMtXCK81gAAAEc"]
[Thu Feb 12 18:48:59.328846 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:36943] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aY2wG6QCQbD5BgeyIk3l3AAAAAE"]
[Thu Feb 12 18:48:59.859721 2026] [:error] [pid 63416:tid 63424] [client 51.120.78.0:49098] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aY2wG72wmecPaCHcM2-baAAAAYM"]
[Thu Feb 12 18:49:00.488090 2026] [:error] [pid 63416:tid 63433] [client 51.120.78.0:38899] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aY2wHL2wmecPaCHcM2-bawAAAYw"]
[Thu Feb 12 18:49:01.506914 2026] [:error] [pid 63416:tid 63445] [client 51.120.78.0:50975] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY2wHb2wmecPaCHcM2-bbQAAAZg"]
[Thu Feb 12 18:49:02.100838 2026] [:error] [pid 63511:tid 63535] [client 51.120.78.0:37789] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY2wHqQCQbD5BgeyIk3l4gAAABY"]
[Thu Feb 12 18:49:02.749831 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:49096] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY2wHhOvRgscTcqsMBmvSQAAAME"]
[Thu Feb 12 18:49:03.384537 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:50992] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY2wHxOvRgscTcqsMBmvTQAAAMs"]
[Thu Feb 12 18:49:04.013749 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:49113] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aY2wIBOvRgscTcqsMBmvVAAAANc"]
[Thu Feb 12 18:49:04.799682 2026] [:error] [pid 63416:tid 63431] [client 51.120.78.0:37819] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aY2wIL2wmecPaCHcM2-bdQAAAYo"]
[Thu Feb 12 18:49:05.483737 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:51126] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aY2wIROvRgscTcqsMBmvXgAAAMs"]
[Thu Feb 12 18:49:06.070627 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:37807] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aY2wIhOvRgscTcqsMBmvYgAAAM8"]
[Thu Feb 12 18:49:06.697064 2026] [:error] [pid 63511:tid 63516] [client 51.120.78.0:38901] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2wIqQCQbD5BgeyIk3l6gAAAAM"]
[Thu Feb 12 18:49:07.576847 2026] [:error] [pid 65064:tid 65090] [client 51.120.78.0:38878] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2wIxOvRgscTcqsMBmvegAAANc"]
[Thu Feb 12 18:49:08.254491 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:50970] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2wJBOvRgscTcqsMBmvfAAAAM0"]
[Thu Feb 12 18:49:09.372040 2026] [:error] [pid 63417:tid 63461] [client 51.120.78.0:37822] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aY2wJf8gSb97qRMtXCK87wAAAEw"]
[Thu Feb 12 18:49:10.532236 2026] [:error] [pid 63511:tid 63525] [client 51.120.78.0:49147] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/function/function.php"] [unique_id "aY2wJqQCQbD5BgeyIk3l8QAAAAw"]
[Thu Feb 12 18:49:11.328660 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:51104] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/function/function.php"] [unique_id "aY2wJxOvRgscTcqsMBmvhQAAAM0"]
[Thu Feb 12 18:49:12.448157 2026] [:error] [pid 65064:tid 65088] [client 51.120.78.0:36972] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/function/function.php"] [unique_id "aY2wKBOvRgscTcqsMBmviQAAANU"]
[Thu Feb 12 18:49:13.126219 2026] [:error] [pid 63417:tid 63458] [client 51.120.78.0:49117] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/function/function.php"] [unique_id "aY2wKf8gSb97qRMtXCK89QAAAEk"]
[Thu Feb 12 18:49:13.755954 2026] [:error] [pid 63511:tid 63524] [client 51.120.78.0:36935] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aY2wKaQCQbD5BgeyIk3l_gAAAAs"]
[Thu Feb 12 18:49:14.412352 2026] [:error] [pid 63417:tid 63451] [client 51.120.78.0:37800] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aY2wKv8gSb97qRMtXCK8-QAAAEI"]
[Thu Feb 12 18:49:15.129693 2026] [:error] [pid 63416:tid 63435] [client 51.120.78.0:51000] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aY2wK72wmecPaCHcM2-bmgAAAY4"]
[Thu Feb 12 18:49:15.745001 2026] [:error] [pid 63418:tid 63480] [client 51.120.78.0:50950] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aY2wK9zjh-bbJnStPZK03QAAAIQ"]
[Thu Feb 12 18:49:16.311027 2026] [:error] [pid 63416:tid 63426] [client 51.120.78.0:38908] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aY2wLL2wmecPaCHcM2-bngAAAYU"]
[Thu Feb 12 18:49:16.879128 2026] [:error] [pid 63418:tid 63479] [client 51.120.78.0:49140] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aY2wLNzjh-bbJnStPZK04AAAAIM"]
[Thu Feb 12 18:49:17.476980 2026] [:error] [pid 63417:tid 63473] [client 51.120.78.0:37768] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aY2wLf8gSb97qRMtXCK9AQAAAFg"]
[Thu Feb 12 18:49:18.071783 2026] [:error] [pid 63511:tid 63513] [client 51.120.78.0:38893] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aY2wLqQCQbD5BgeyIk3mCQAAAAA"]
[Thu Feb 12 18:49:18.658483 2026] [:error] [pid 63511:tid 63519] [client 51.120.78.0:38891] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aY2wLqQCQbD5BgeyIk3mEAAAAAY"]
[Thu Feb 12 18:49:19.267419 2026] [:error] [pid 63416:tid 63442] [client 51.120.78.0:37821] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aY2wL72wmecPaCHcM2-brAAAAZU"]
[Thu Feb 12 18:49:19.812285 2026] [:error] [pid 63417:tid 63469] [client 51.120.78.0:37779] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aY2wL_8gSb97qRMtXCK9EwAAAFQ"]
[Thu Feb 12 18:49:20.675534 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:38862] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aY2wMBOvRgscTcqsMBmvmwAAANI"]
[Thu Feb 12 18:49:21.511904 2026] [:error] [pid 63417:tid 63454] [client 51.120.78.0:37774] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aY2wMf8gSb97qRMtXCK9FwAAAEU"]
[Thu Feb 12 18:49:22.185409 2026] [:error] [pid 63416:tid 63443] [client 51.120.78.0:49094] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aY2wMr2wmecPaCHcM2-btgAAAZY"]
[Thu Feb 12 18:49:23.174630 2026] [:error] [pid 63417:tid 63455] [client 51.120.78.0:38860] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aY2wM_8gSb97qRMtXCK9GgAAAEY"]
[Thu Feb 12 18:49:24.002366 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:50977] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aY2wNBOvRgscTcqsMBmvpQAAAMU"]
[Thu Feb 12 18:49:24.538665 2026] [:error] [pid 63417:tid 63469] [client 51.120.78.0:51115] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY2wNP8gSb97qRMtXCK9IAAAAFQ"]
[Thu Feb 12 18:49:25.301036 2026] [:error] [pid 65064:tid 65078] [client 51.120.78.0:37760] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY2wNROvRgscTcqsMBmvqQAAAMs"]
[Thu Feb 12 18:49:25.859520 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:39140] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY2wNf8gSb97qRMtXCK9JgAAAEc"]
[Thu Feb 12 18:49:26.657848 2026] [:error] [pid 63416:tid 63436] [client 51.120.78.0:51135] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aY2wNr2wmecPaCHcM2-bvwAAAY8"]
[Thu Feb 12 18:49:27.323376 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:51107] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "aY2wN6QCQbD5BgeyIk3mLQAAAAE"]
[Thu Feb 12 18:49:27.887679 2026] [:error] [pid 65064:tid 65069] [client 51.120.78.0:49114] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "aY2wNxOvRgscTcqsMBmvswAAAMI"]
[Thu Feb 12 18:49:29.251748 2026] [:error] [pid 63416:tid 63435] [client 51.120.78.0:51074] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "aY2wOb2wmecPaCHcM2-bxAAAAY4"]
[Thu Feb 12 18:49:30.150847 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:50989] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "aY2wOhOvRgscTcqsMBmvuAAAANI"]
[Thu Feb 12 18:49:30.917506 2026] [:error] [pid 65064:tid 65089] [client 51.120.78.0:64290] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY2wOhOvRgscTcqsMBmvvQAAANY"]
[Thu Feb 12 18:49:31.510420 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:50951] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY2wOxOvRgscTcqsMBmvwQAAAME"]
[Thu Feb 12 18:49:32.635914 2026] [:error] [pid 65064:tid 65089] [client 51.120.78.0:50967] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY2wPBOvRgscTcqsMBmvywAAANY"]
[Thu Feb 12 18:49:33.247401 2026] [:error] [pid 65064:tid 65070] [client 51.120.78.0:49150] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aY2wPROvRgscTcqsMBmvzgAAAMM"]
[Thu Feb 12 18:49:33.919522 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:49088] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY2wPROvRgscTcqsMBmv1AAAAM8"]
[Thu Feb 12 18:49:34.769279 2026] [:error] [pid 63511:tid 63530] [client 51.120.78.0:50960] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY2wPqQCQbD5BgeyIk3mMgAAABE"]
[Thu Feb 12 18:49:36.961888 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:37787] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY2wQKQCQbD5BgeyIk3mPAAAAAE"]
[Thu Feb 12 18:49:38.184786 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:49132] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aY2wQtzjh-bbJnStPZK1EQAAAIw"]
[Thu Feb 12 18:49:39.599105 2026] [:error] [pid 63417:tid 63453] [client 51.120.78.0:49104] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aY2wQ_8gSb97qRMtXCK9QQAAAEQ"]
[Thu Feb 12 18:49:40.758842 2026] [:error] [pid 63417:tid 63473] [client 51.120.78.0:39119] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aY2wRP8gSb97qRMtXCK9RAAAAFg"]
[Thu Feb 12 18:49:41.408250 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:38900] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aY2wRaQCQbD5BgeyIk3mUwAAAAE"]
[Thu Feb 12 18:49:42.009802 2026] [:error] [pid 63416:tid 63444] [client 51.120.78.0:50994] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aY2wRr2wmecPaCHcM2-b0AAAAZc"]
[Thu Feb 12 18:49:42.678684 2026] [:error] [pid 63511:tid 63520] [client 51.120.78.0:49151] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aY2wRqQCQbD5BgeyIk3mVwAAAAc"]
[Thu Feb 12 18:49:43.254828 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:38868] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aY2wRxOvRgscTcqsMBmv4QAAAM8"]
[Thu Feb 12 18:49:43.879073 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:49119] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aY2wRxOvRgscTcqsMBmv5AAAAME"]
[Thu Feb 12 18:49:44.433562 2026] [:error] [pid 63417:tid 63459] [client 51.120.78.0:50969] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aY2wSP8gSb97qRMtXCK9UQAAAEo"]
[Thu Feb 12 18:49:44.999540 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:49151] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aY2wSP8gSb97qRMtXCK9VAAAAEc"]
[Thu Feb 12 18:49:45.644485 2026] [:error] [pid 63416:tid 63437] [client 51.120.78.0:51085] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aY2wSb2wmecPaCHcM2-b0wAAAZA"]
[Thu Feb 12 18:49:46.303967 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:64271] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aY2wShOvRgscTcqsMBmv6gAAAMw"]
[Thu Feb 12 18:49:46.885060 2026] [:error] [pid 63417:tid 63450] [client 51.120.78.0:50948] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aY2wSv8gSb97qRMtXCK9WAAAAEE"]
[Thu Feb 12 18:49:47.598943 2026] [:error] [pid 63418:tid 63477] [client 51.120.78.0:50991] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aY2wS9zjh-bbJnStPZK1IgAAAIE"]
[Thu Feb 12 18:49:48.201409 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:51006] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aY2wTBOvRgscTcqsMBmv9gAAANI"]
[Thu Feb 12 18:49:48.882159 2026] [:error] [pid 63418:tid 63496] [client 51.120.78.0:51081] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aY2wTNzjh-bbJnStPZK1JgAAAJQ"]
[Thu Feb 12 18:49:49.408199 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:38872] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aY2wTROvRgscTcqsMBmv_AAAAM0"]
[Thu Feb 12 18:49:49.977410 2026] [:error] [pid 63417:tid 63471] [client 51.120.78.0:49092] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aY2wTf8gSb97qRMtXCK9XwAAAFY"]
[Thu Feb 12 18:49:50.768483 2026] [:error] [pid 65064:tid 65072] [client 51.120.78.0:51079] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aY2wThOvRgscTcqsMBmwAAAAAMU"]
[Thu Feb 12 18:49:51.325360 2026] [:error] [pid 63416:tid 63432] [client 51.120.78.0:38895] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aY2wT72wmecPaCHcM2-b1gAAAYs"]
[Thu Feb 12 18:49:51.979583 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:38865] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aY2wTxOvRgscTcqsMBmwBgAAANA"]
[Thu Feb 12 18:49:52.616895 2026] [:error] [pid 63417:tid 63457] [client 51.120.78.0:51101] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aY2wUP8gSb97qRMtXCK9awAAAEg"]
[Thu Feb 12 18:49:53.169120 2026] [:error] [pid 63416:tid 63425] [client 51.120.78.0:50979] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY2wUb2wmecPaCHcM2-b2gAAAYQ"]
[Thu Feb 12 18:49:53.712810 2026] [:error] [pid 63416:tid 63426] [client 51.120.78.0:51122] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cron.php"] [unique_id "aY2wUb2wmecPaCHcM2-b3QAAAYU"]
[Thu Feb 12 18:49:54.396835 2026] [:error] [pid 63416:tid 63434] [client 51.120.78.0:39110] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cron.php"] [unique_id "aY2wUr2wmecPaCHcM2-b4QAAAY0"]
[Thu Feb 12 18:49:55.527065 2026] [:error] [pid 65064:tid 65081] [client 51.120.78.0:64265] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cron.php"] [unique_id "aY2wUxOvRgscTcqsMBmwFAAAAM4"]
[Thu Feb 12 18:49:56.166053 2026] [:error] [pid 65064:tid 65086] [client 51.120.78.0:50978] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cron.php"] [unique_id "aY2wVBOvRgscTcqsMBmwFgAAANM"]
[Thu Feb 12 18:49:56.772211 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:38876] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aY2wVBOvRgscTcqsMBmwGAAAANQ"]
[Thu Feb 12 18:49:57.335784 2026] [:error] [pid 63511:tid 63537] [client 51.120.78.0:37781] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aY2wVaQCQbD5BgeyIk3mZwAAABg"]
[Thu Feb 12 18:49:57.914402 2026] [:error] [pid 65064:tid 65088] [client 51.120.78.0:51111] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aY2wVROvRgscTcqsMBmwHwAAANU"]
[Thu Feb 12 18:49:59.693327 2026] [:error] [pid 63417:tid 63451] [client 51.120.78.0:38889] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aY2wV_8gSb97qRMtXCK9dgAAAEI"]
[Thu Feb 12 18:50:00.328379 2026] [:error] [pid 63418:tid 63485] [client 51.120.78.0:39163] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php
[Thu Feb 12 18:50:00.920779 2026] [:error] [pid 63418:tid 63493] [client 51.120.78.0:39163] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Feb 12 18:50:01.184071 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:39163] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Thu Feb 12 18:50:02.078032 2026] [:error] [pid 63418:tid 63482] [client 51.120.78.0:39163] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Thu Feb 12 18:50:02.371179 2026] [:error] [pid 63418:tid 63483] [client 51.120.78.0:39163] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2wWtzjh-bbJnStPZK1RgAAAIc"]
[Thu Feb 12 18:50:03.089935 2026] [:error] [pid 63417:tid 63456] [client 51.120.78.0:49135] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2wW_8gSb97qRMtXCK9fgAAAEc"]
[Thu Feb 12 18:50:03.640009 2026] [:error] [pid 63511:tid 63535] [client 51.120.78.0:51099] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2wW6QCQbD5BgeyIk3mdgAAABY"]
[Thu Feb 12 18:50:04.296637 2026] [:error] [pid 63416:tid 63432] [client 51.120.78.0:37765] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aY2wXL2wmecPaCHcM2-b7gAAAYs"]
[Thu Feb 12 18:50:04.905254 2026] [:error] [pid 63418:tid 63477] [client 51.120.78.0:51103] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/help.php"] [unique_id "aY2wXNzjh-bbJnStPZK1SwAAAIE"]
[Thu Feb 12 18:50:05.486468 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:49139] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/help.php"] [unique_id "aY2wXROvRgscTcqsMBmwNgAAAM8"]
[Thu Feb 12 18:50:06.078883 2026] [:error] [pid 63418:tid 63487] [client 51.120.78.0:51116] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/help.php"] [unique_id "aY2wXtzjh-bbJnStPZK1TQAAAIs"]
[Thu Feb 12 18:50:06.664876 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:50971] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/help.php"] [unique_id "aY2wXhOvRgscTcqsMBmwOQAAANQ"]
[Thu Feb 12 18:50:07.206600 2026] [:error] [pid 63418:tid 63480] [client 51.120.78.0:38877] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aY2wX9zjh-bbJnStPZK1UwAAAIQ"]
[Thu Feb 12 18:50:07.786334 2026] [:error] [pid 63416:tid 63435] [client 51.120.78.0:49111] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aY2wX72wmecPaCHcM2-b8gAAAY4"]
[Thu Feb 12 18:50:08.323907 2026] [:error] [pid 65064:tid 65084] [client 51.120.78.0:37766] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aY2wYBOvRgscTcqsMBmwPAAAANE"]
[Thu Feb 12 18:50:08.852045 2026] [:error] [pid 63511:tid 63524] [client 51.120.78.0:38911] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aY2wYKQCQbD5BgeyIk3mgQAAAAs"]
[Thu Feb 12 18:50:09.440036 2026] [:error] [pid 63417:tid 63473] [client 51.120.78.0:50987] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aY2wYf8gSb97qRMtXCK9lQAAAFg"]
[Thu Feb 12 18:50:10.071894 2026] [:error] [pid 63511:tid 63515] [client 51.120.78.0:64310] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aY2wYqQCQbD5BgeyIk3mhgAAAAI"]
[Thu Feb 12 18:50:10.640001 2026] [:error] [pid 63416:tid 63442] [client 51.120.78.0:39148] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aY2wYr2wmecPaCHcM2-b9QAAAZU"]
[Thu Feb 12 18:50:11.255992 2026] [:error] [pid 65064:tid 65075] [client 51.120.78.0:39135] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aY2wYxOvRgscTcqsMBmwQgAAAMg"]
[Thu Feb 12 18:50:11.817772 2026] [:error] [pid 63511:tid 63523] [client 51.120.78.0:51001] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aY2wY6QCQbD5BgeyIk3miQAAAAo"]
[Thu Feb 12 18:50:12.534208 2026] [:error] [pid 63416:tid 63437] [client 51.120.78.0:37817] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aY2wZL2wmecPaCHcM2-b_gAAAZA"]
[Thu Feb 12 18:50:13.357131 2026] [:error] [pid 63416:tid 63444] [client 51.120.78.0:49091] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aY2wZb2wmecPaCHcM2-cAwAAAZc"]
[Thu Feb 12 18:50:14.057143 2026] [:error] [pid 63416:tid 63438] [client 51.120.78.0:51120] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aY2wZr2wmecPaCHcM2-cBQAAAZE"]
[Thu Feb 12 18:50:14.787010 2026] [:error] [pid 63418:tid 63486] [client 51.120.78.0:51077] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aY2wZtzjh-bbJnStPZK1WQAAAIo"]
[Thu Feb 12 18:50:15.395420 2026] [:error] [pid 63416:tid 63424] [client 51.120.78.0:49138] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aY2wZ72wmecPaCHcM2-cCQAAAYM"]
[Thu Feb 12 18:50:15.936884 2026] [:error] [pid 63417:tid 63467] [client 51.120.78.0:50944] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aY2wZ_8gSb97qRMtXCK9oQAAAFI"]
[Thu Feb 12 18:50:16.626645 2026] [:error] [pid 65064:tid 65076] [client 51.120.78.0:37793] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aY2waBOvRgscTcqsMBmwSwAAAMk"]
[Thu Feb 12 18:50:17.167265 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:39127] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aY2wadzjh-bbJnStPZK1XgAAAIw"]
[Thu Feb 12 18:50:17.847072 2026] [:error] [pid 63418:tid 63477] [client 51.120.78.0:49148] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aY2wadzjh-bbJnStPZK1YAAAAIE"]
[Thu Feb 12 18:50:18.471370 2026] [:error] [pid 63511:tid 63524] [client 51.120.78.0:49137] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aY2waqQCQbD5BgeyIk3mmQAAAAs"]
[Thu Feb 12 18:50:19.114271 2026] [:error] [pid 65064:tid 65087] [client 51.120.78.0:49100] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news.php"] [unique_id "aY2waxOvRgscTcqsMBmwUwAAANQ"]
[Thu Feb 12 18:50:20.003796 2026] [:error] [pid 63418:tid 63497] [client 51.120.78.0:37791] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2wbNzjh-bbJnStPZK1ZAAAAJU"]
[Thu Feb 12 18:50:20.591354 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:38903] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2wbBOvRgscTcqsMBmwWgAAANA"]
[Thu Feb 12 18:50:21.147987 2026] [:error] [pid 63418:tid 63484] [client 51.120.78.0:38867] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2wbdzjh-bbJnStPZK1aQAAAIg"]
[Thu Feb 12 18:50:21.726956 2026] [:error] [pid 63418:tid 63499] [client 51.120.78.0:42753] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY2wbdzjh-bbJnStPZK1awAAAJc"]
[Thu Feb 12 18:50:22.457281 2026] [:error] [pid 63416:tid 63442] [client 51.120.78.0:37810] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aY2wbr2wmecPaCHcM2-cFgAAAZU"]
[Thu Feb 12 18:50:23.217594 2026] [:error] [pid 63416:tid 63421] [client 51.120.78.0:64314] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aY2wb72wmecPaCHcM2-cGgAAAYA"]
[Thu Feb 12 18:50:23.814180 2026] [:error] [pid 63417:tid 63449] [client 51.120.78.0:64272] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aY2wb_8gSb97qRMtXCK9rAAAAEA"]
[Thu Feb 12 18:50:24.484733 2026] [:error] [pid 63417:tid 63462] [client 51.120.78.0:49146] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aY2wcP8gSb97qRMtXCK9rwAAAE0"]
[Thu Feb 12 18:50:25.015231 2026] [:error] [pid 63511:tid 63521] [client 51.120.78.0:50968] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY2wcaQCQbD5BgeyIk3mpQAAAAg"]
[Thu Feb 12 18:50:25.547655 2026] [:error] [pid 63418:tid 63484] [client 51.120.78.0:64300] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY2wcdzjh-bbJnStPZK1cgAAAIg"]
[Thu Feb 12 18:50:26.066792 2026] [:error] [pid 63417:tid 63470] [client 51.120.78.0:64289] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY2wcv8gSb97qRMtXCK9twAAAFU"]
[Thu Feb 12 18:50:26.620985 2026] [:error] [pid 63417:tid 63451] [client 51.120.78.0:51090] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/about.php"] [unique_id "aY2wcv8gSb97qRMtXCK9uAAAAEI"]
[Thu Feb 12 18:50:27.167447 2026] [:error] [pid 63418:tid 63497] [client 51.120.78.0:37785] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2wc9zjh-bbJnStPZK1dgAAAJU"]
[Thu Feb 12 18:50:28.061792 2026] [:error] [pid 65064:tid 65077] [client 51.120.78.0:51098] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2wdBOvRgscTcqsMBmwYgAAAMo"]
[Thu Feb 12 18:50:28.642639 2026] [:error] [pid 63416:tid 63438] [client 51.120.78.0:38894] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2wdL2wmecPaCHcM2-cIQAAAZE"]
[Thu Feb 12 18:50:29.217817 2026] [:error] [pid 63511:tid 63534] [client 51.120.78.0:37818] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY2wdaQCQbD5BgeyIk3mwAAAABU"]
[Thu Feb 12 18:50:29.773640 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:51113] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/admin.php"] [unique_id "aY2wdROvRgscTcqsMBmwawAAAM8"]
[Thu Feb 12 18:50:30.316506 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:38898] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/admin.php"] [unique_id "aY2wdhOvRgscTcqsMBmwbQAAAME"]
[Thu Feb 12 18:50:30.944480 2026] [:error] [pid 65064:tid 65089] [client 51.120.78.0:64284] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/admin.php"] [unique_id "aY2wdhOvRgscTcqsMBmwcAAAANY"]
[Thu Feb 12 18:50:31.540663 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:50981] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/admin.php"] [unique_id "aY2wdxOvRgscTcqsMBmwdQAAAMc"]
[Thu Feb 12 18:50:32.087571 2026] [:error] [pid 63416:tid 63440] [client 51.120.78.0:37786] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aY2weL2wmecPaCHcM2-cJgAAAZM"]
[Thu Feb 12 18:50:32.685679 2026] [:error] [pid 63418:tid 63494] [client 51.120.78.0:64276] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aY2weNzjh-bbJnStPZK1gAAAAJI"]
[Thu Feb 12 18:50:33.253947 2026] [:error] [pid 63416:tid 63444] [client 51.120.78.0:50997] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aY2web2wmecPaCHcM2-cKAAAAZc"]
[Thu Feb 12 18:50:33.854315 2026] [:error] [pid 63417:tid 63458] [client 51.120.78.0:39161] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aY2wef8gSb97qRMtXCK9yAAAAEk"]
[Thu Feb 12 18:50:34.455430 2026] [:error] [pid 63418:tid 63487] [client 51.120.78.0:38863] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.php"] [unique_id "aY2wetzjh-bbJnStPZK1hwAAAIs"]
[Thu Feb 12 18:50:35.159851 2026] [:error] [pid 63418:tid 63481] [client 51.120.78.0:51127] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.php"] [unique_id "aY2we9zjh-bbJnStPZK1iAAAAIU"]
[Thu Feb 12 18:50:35.840999 2026] [:error] [pid 65064:tid 65071] [client 51.120.78.0:64264] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.php"] [unique_id "aY2wexOvRgscTcqsMBmwegAAAMQ"]
[Thu Feb 12 18:50:36.799472 2026] [:error] [pid 65064:tid 65067] [client 51.120.78.0:50984] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.php"] [unique_id "aY2wfBOvRgscTcqsMBmwfgAAAMA"]
[Thu Feb 12 18:50:37.333703 2026] [:error] [pid 65064:tid 65080] [client 51.120.78.0:37806] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aY2wfROvRgscTcqsMBmwgwAAAM0"]
[Thu Feb 12 18:50:37.918070 2026] [:error] [pid 63511:tid 63531] [client 51.120.78.0:51121] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aY2wfaQCQbD5BgeyIk3m1wAAABI"]
[Thu Feb 12 18:50:38.496950 2026] [:error] [pid 63417:tid 63466] [client 51.120.78.0:38904] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aY2wfv8gSb97qRMtXCK9zgAAAFE"]
[Thu Feb 12 18:50:39.429872 2026] [:error] [pid 63416:tid 63444] [client 51.120.78.0:37805] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aY2wf72wmecPaCHcM2-cNAAAAZc"]
[Thu Feb 12 18:50:40.755366 2026] [:error] [pid 63418:tid 63480] [client 51.120.78.0:49130] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aY2wgNzjh-bbJnStPZK1lQAAAIQ"]
[Thu Feb 12 18:50:41.647230 2026] [:error] [pid 63418:tid 63486] [client 51.120.78.0:51092] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aY2wgdzjh-bbJnStPZK1mAAAAIo"]
[Thu Feb 12 18:50:42.174299 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:38909] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aY2wghOvRgscTcqsMBmwmQAAAMc"]
[Thu Feb 12 18:50:42.781320 2026] [:error] [pid 65064:tid 65084] [client 51.120.78.0:38855] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aY2wghOvRgscTcqsMBmwmwAAANE"]
[Thu Feb 12 18:50:43.341087 2026] [:error] [pid 63417:tid 63452] [client 51.120.78.0:50993] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aY2wg_8gSb97qRMtXCK90gAAAEM"]
[Thu Feb 12 18:50:43.896448 2026] [:error] [pid 63417:tid 63467] [client 51.120.78.0:37775] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aY2wg_8gSb97qRMtXCK91AAAAFI"]
[Thu Feb 12 18:50:44.531867 2026] [:error] [pid 63416:tid 63426] [client 51.120.78.0:38850] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aY2whL2wmecPaCHcM2-cPQAAAYU"]
[Thu Feb 12 18:50:45.133032 2026] [:error] [pid 63511:tid 63525] [client 51.120.78.0:42814] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aY2whaQCQbD5BgeyIk3m5QAAAAw"]
[Thu Feb 12 18:50:45.733223 2026] [:error] [pid 65064:tid 65067] [client 51.120.78.0:38863] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aY2whROvRgscTcqsMBmwpgAAAMA"]
[Thu Feb 12 18:50:46.300997 2026] [:error] [pid 65064:tid 65085] [client 51.120.78.0:51118] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aY2whhOvRgscTcqsMBmwqgAAANI"]
[Thu Feb 12 18:50:46.855303 2026] [:error] [pid 63511:tid 63537] [client 51.120.78.0:39156] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aY2whqQCQbD5BgeyIk3m6gAAABg"]
[Thu Feb 12 18:50:47.500450 2026] [:error] [pid 63418:tid 63498] [client 51.120.78.0:49097] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aY2wh9zjh-bbJnStPZK1rwAAAJY"]
[Thu Feb 12 18:50:48.080333 2026] [:error] [pid 63416:tid 63439] [client 51.120.78.0:64277] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aY2wiL2wmecPaCHcM2-cQQAAAZI"]
[Thu Feb 12 18:50:48.749793 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:37812] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aY2wiNzjh-bbJnStPZK1tAAAAIw"]
[Thu Feb 12 18:50:49.335957 2026] [:error] [pid 63511:tid 63515] [client 51.120.78.0:39147] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aY2wiaQCQbD5BgeyIk3m8gAAAAI"]
[Thu Feb 12 18:50:49.926014 2026] [:error] [pid 65064:tid 65082] [client 51.120.78.0:42758] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aY2wiROvRgscTcqsMBmwuAAAAM8"]
[Thu Feb 12 18:50:50.519341 2026] [:error] [pid 63511:tid 63536] [client 51.120.78.0:50990] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aY2wiqQCQbD5BgeyIk3m9QAAABc"]
[Thu Feb 12 18:50:51.232657 2026] [:error] [pid 63417:tid 63463] [client 51.120.78.0:64295] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aY2wi_8gSb97qRMtXCK95QAAAE4"]
[Thu Feb 12 18:50:51.752661 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:38887] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aY2wi9zjh-bbJnStPZK1vAAAAIw"]
[Thu Feb 12 18:50:52.408963 2026] [:error] [pid 63417:tid 63458] [client 51.120.78.0:51073] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.status"] [unique_id "aY2wjP8gSb97qRMtXCK96AAAAEk"]
[Thu Feb 12 18:50:52.953334 2026] [:error] [pid 65064:tid 65091] [client 51.120.78.0:51117] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.status"] [unique_id "aY2wjBOvRgscTcqsMBmwwgAAANg"]
[Thu Feb 12 18:50:53.736886 2026] [:error] [pid 63416:tid 63422] [client 51.120.78.0:49120] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.status"] [unique_id "aY2wjb2wmecPaCHcM2-cTwAAAYE"]
[Thu Feb 12 18:50:54.316446 2026] [:error] [pid 63416:tid 63438] [client 51.120.78.0:51118] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server.status"] [unique_id "aY2wjr2wmecPaCHcM2-cUgAAAZE"]
[Thu Feb 12 18:50:54.870664 2026] [:error] [pid 63416:tid 63430] [client 51.120.78.0:40462] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aY2wjr2wmecPaCHcM2-cVAAAAYk"]
[Thu Feb 12 18:50:55.459512 2026] [:error] [pid 63417:tid 63464] [client 51.120.78.0:39105] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aY2wj_8gSb97qRMtXCK97gAAAE8"]
[Thu Feb 12 18:50:56.086229 2026] [:error] [pid 65064:tid 65068] [client 51.120.78.0:42807] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aY2wkBOvRgscTcqsMBmwygAAAME"]
[Thu Feb 12 18:50:57.074001 2026] [:error] [pid 65064:tid 65084] [client 51.120.78.0:51112] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aY2wkROvRgscTcqsMBmw0gAAANE"]
[Thu Feb 12 18:50:57.657176 2026] [:error] [pid 63417:tid 63465] [client 51.120.78.0:50986] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aY2wkf8gSb97qRMtXCK98gAAAFA"]
[Thu Feb 12 18:50:58.337305 2026] [:error] [pid 65064:tid 65074] [client 51.120.78.0:51075] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aY2wkhOvRgscTcqsMBmw2gAAAMc"]
[Thu Feb 12 18:50:59.033492 2026] [:error] [pid 63418:tid 63476] [client 51.120.78.0:64269] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aY2wk9zjh-bbJnStPZK1zgAAAIA"]
[Thu Feb 12 18:50:59.714025 2026] [:error] [pid 63511:tid 63519] [client 51.120.78.0:50968] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aY2wk6QCQbD5BgeyIk3nFwAAAAY"]
[Thu Feb 12 18:51:00.254606 2026] [:error] [pid 63418:tid 63488] [client 51.120.78.0:37815] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/special.php"] [unique_id "aY2wlNzjh-bbJnStPZK10QAAAIw"]
[Thu Feb 12 18:51:01.017890 2026] [:error] [pid 63511:tid 63514] [client 51.120.78.0:64274] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/special.php"] [unique_id "aY2wlaQCQbD5BgeyIk3nGQAAAAE"]
[Thu Feb 12 18:51:01.657852 2026] [:error] [pid 63417:tid 63466] [client 51.120.78.0:38890] [client 51.120.78.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/special.php"] [unique_id "aY2wlf8gSb97qRMtXCK-AAAAAFE"]
[Thu Feb 12 18:51:02.202986 2026] [:error] [pid 65064:tid 65079] [client 51.120.78.0:64282] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Feb 12 18:51:02.530422 2026] [:error] [pid 65064:tid 65083] [client 51.120.78.0:64282] [client 51.120.78.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aY2wlhOvRgscTcqsMBmw6QAAANA"]
[Thu Feb 12 19:18:21.457463 2026] [:error] [pid 63511:tid 63521] [client 120.29.79.16:13408] [client 120.29.79.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.29.79.16, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY22_aQCQbD5BgeyIk30XAAAAAg"]
[Thu Feb 12 19:18:21.462990 2026] [:error] [pid 63511:tid 63521] [client 120.29.79.16:13408] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 12 19:48:14.089439 2026] [:error] [pid 65064:tid 65089] [client 138.197.47.168:41810] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY29_hOvRgscTcqsMBnUXAAAANY"]
[Thu Feb 12 19:48:17.818362 2026] [:error] [pid 63418:tid 63489] [client 138.197.47.168:39066] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY2-Adzjh-bbJnStPZLPbwAAAI0"]
[Thu Feb 12 22:46:57.220454 2026] [:error] [pid 63511:tid 63522] [client 103.77.107.222:55758] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aY3n4aQCQbD5BgeyIk09KAAAAAk"]
[Thu Feb 12 22:46:57.438791 2026] [:error] [pid 65064:tid 65078] [client 103.77.107.222:55777] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aY3n4ROvRgscTcqsMBkb4wAAAMs"]
[Thu Feb 12 23:41:54.431413 2026] [:error] [pid 46675:tid 46702] [client 216.26.236.252:51045] [client 216.26.236.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY30wjuaQILPonWFiQmb4gAAAVg"]
[Fri Feb 13 00:33:57.120257 2026] [:error] [pid 37512:tid 37634] [client 64.89.163.24:56557] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY4A9dDe69znS-f6vSY1TQAAABc"]
[Fri Feb 13 00:33:58.688966 2026] [:error] [pid 37511:tid 37593] [client 64.89.163.24:51243] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY4A9u8EBJ86uZdxpA1pHQAAAEw"]
[Fri Feb 13 00:33:59.939822 2026] [:error] [pid 37511:tid 37595] [client 64.89.163.24:58288] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY4A9-8EBJ86uZdxpA1pQQAAAE4"]
[Fri Feb 13 00:34:01.941679 2026] [:error] [pid 37512:tid 37620] [client 64.89.163.24:49708] [client 64.89.163.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY4A-dDe69znS-f6vSY1nAAAAAs"]
[Fri Feb 13 01:13:46.506959 2026] [:error] [pid 37512:tid 37629] [client 138.197.47.168:40496] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY4KStDe69znS-f6vSZE0gAAABI"]
[Fri Feb 13 01:13:49.808174 2026] [:error] [pid 23410:tid 23432] [client 138.197.47.168:55424] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY4KTRXZP6NFBacuW_0a8gAAAJQ"]
[Fri Feb 13 01:23:23.342634 2026] [:error] [pid 37512:tid 37635] [client 45.3.45.144:25939] [client 45.3.45.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aY4Mi9De69znS-f6vSZIXAAAABg"]
[Fri Feb 13 01:23:23.921496 2026] [:error] [pid 37512:tid 37632] [client 104.207.43.132:42917] [client 104.207.43.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aY4Mi9De69znS-f6vSZIXQAAABU"]
[Fri Feb 13 02:10:12.160983 2026] [:error] [pid 37510:tid 37526] [client 182.42.111.213:49147] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY4XhMUrqDPNSf1wYBWlcQAAAYo"]
[Fri Feb 13 03:47:53.470546 2026] [:error] [pid 49223:tid 49232] [client 146.70.194.230:59184] [client 146.70.194.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.194.230, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY4uaR8A_fZBamNLnfUG6AAAAAA"]
[Fri Feb 13 03:47:53.474370 2026] [:error] [pid 49223:tid 49232] [client 146.70.194.230:59184] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 13 03:47:57.952567 2026] [:error] [pid 49223:tid 49246] [client 146.70.194.230:59184] [client 146.70.194.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY4ubR8A_fZBamNLnfUG9wAAAA4"]
[Fri Feb 13 03:47:58.747607 2026] [:error] [pid 51243:tid 51245] [client 146.70.194.230:44584] [client 146.70.194.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY4ubsim7ZTAHzi7xZuYVwAAAQA"]
[Fri Feb 13 03:47:59.537927 2026] [:error] [pid 49224:tid 49269] [client 146.70.194.230:44590] [client 146.70.194.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aY4ub9iAvPoWmw5YhwldYAAAAEI"]
[Fri Feb 13 03:48:00.340175 2026] [:error] [pid 49225:tid 49315] [client 146.70.194.230:44596] [client 146.70.194.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY4ucDwH8-zGxtAd3juoewAAAJU"]
[Fri Feb 13 03:48:01.161750 2026] [:error] [pid 49224:tid 49276] [client 146.70.194.230:44600] [client 146.70.194.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY4ucdiAvPoWmw5YhwldZwAAAEk"]
[Fri Feb 13 03:48:01.957280 2026] [:error] [pid 49225:tid 49300] [client 146.70.194.230:44614] [client 146.70.194.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY4ucTwH8-zGxtAd3juofgAAAIY"]
[Fri Feb 13 03:48:02.761604 2026] [:error] [pid 51243:tid 51265] [client 146.70.194.230:44628] [client 146.70.194.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY4ucsim7ZTAHzi7xZuYXQAAARQ"]
[Fri Feb 13 04:16:57.480851 2026] [:error] [pid 49223:tid 49255] [client 138.197.47.168:48152] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY41OR8A_fZBamNLnfUSLQAAABc"]
[Fri Feb 13 04:17:00.751963 2026] [:error] [pid 49335:tid 49357] [client 138.197.47.168:38164] [client 138.197.47.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aY41PKp--SFY2nwOiqkArgAAANQ"]
[Fri Feb 13 05:57:27.223800 2026] [:error] [pid 51243:tid 51252] [client 43.166.132.142:39988] [client 43.166.132.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY5Mx8im7ZTAHzi7xZvM1QAAAQc"]
[Fri Feb 13 05:58:37.199565 2026] [:error] [pid 49225:tid 49315] [client 74.248.32.177:17286] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Fri Feb 13 06:45:39.752748 2026] [:error] [pid 49223:tid 49242] [client 20.199.186.0:40255] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Fri Feb 13 09:39:19.330057 2026] [:error] [pid 49335:tid 49342] [client 107.151.163.120:53956] [client 107.151.163.120] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aY6Ax6p--SFY2nwOiqnKngAAAMU"], referer: https://www.google.com
[Fri Feb 13 09:39:29.500357 2026] [:error] [pid 49224:tid 49272] [client 98.98.19.210:48596] [client 98.98.19.210] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY6A0diAvPoWmw5YhwkRxgAAAEU"]
[Fri Feb 13 09:39:29.500684 2026] [:error] [pid 49224:tid 49272] [client 98.98.19.210:48596] [client 98.98.19.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.98.19.210, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY6A0diAvPoWmw5YhwkRxgAAAEU"]
[Fri Feb 13 09:39:29.507074 2026] [:error] [pid 49224:tid 49272] [client 98.98.19.210:48596] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 13 09:39:32.547519 2026] [:error] [pid 49224:tid 49268] [client 173.245.211.22:46442] [client 173.245.211.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.245.211.22, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aY6A1NiAvPoWmw5YhwkRzQAAAEE"], referer: https://www.google.com
[Fri Feb 13 09:39:32.553004 2026] [:error] [pid 49224:tid 49268] [client 173.245.211.22:46442] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Fri Feb 13 09:39:40.947616 2026] [:error] [pid 49223:tid 49253] [client 107.151.163.179:47558] [client 107.151.163.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 107.151.163.179, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aY6A3B8A_fZBamNLnfWcRgAAABU"], referer: https://www.google.com
[Fri Feb 13 09:39:40.953270 2026] [:error] [pid 49223:tid 49253] [client 107.151.163.179:47558] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Fri Feb 13 13:58:39.768020 2026] [:error] [pid 18097:tid 18121] [client 193.36.225.188:42693] [client 193.36.225.188] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.188, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aY69j3FzYiQ_BfaDDlbTLwAAAZY"]
[Fri Feb 13 13:58:39.772087 2026] [:error] [pid 18097:tid 18121] [client 193.36.225.188:42693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 13 14:35:18.437733 2026] [:error] [pid 49223:tid 49251] [client 182.42.111.213:35718] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aY7GJh8A_fZBamNLnfX90gAAABM"]
[Fri Feb 13 17:15:53.287165 2026] [:error] [pid 46821:tid 46845] [client 43.167.236.228:46278] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aY7ryY6G1N5YSq0J0gfzcgAAAVY"]
[Fri Feb 13 21:03:31.966632 2026] [:error] [pid 47080:tid 47094] [client 175.6.217.4:58774] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aY8hI0bWJwYCVF39z6tYLQAAAcY"]
[Sat Feb 14 03:00:16.915351 2026] [:error] [pid 47080:tid 47095] [client 49.43.140.189:56128] [client 49.43.140.189] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.140.189, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aY90wEbWJwYCVF39z6u7GwAAAcc"]
[Sat Feb 14 03:00:16.919891 2026] [:error] [pid 47080:tid 47095] [client 49.43.140.189:56128] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 14 09:48:19.291825 2026] [:error] [pid 7982:tid 8019] [client 182.44.8.254:53709] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aY_UY2LTp1DWAgIKqwSEQAAAAsg"]
[Sat Feb 14 10:58:48.299546 2026] [:error] [pid 8039:tid 8067] [client 43.166.134.114:47686] [client 43.166.134.114] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aY_k6HLa1ioCIZV3fA4HjgAAAxc"]
[Sat Feb 14 12:27:10.112314 2026] [:error] [pid 21784:tid 21788] [client 139.59.24.163:63207] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aY_5nq1lOIszF3YGN__I0gAAAUE"], referer: binance.com
[Sat Feb 14 12:27:19.580015 2026] [:error] [pid 28883:tid 28929] [client 139.59.24.163:49634] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aY_5p2BZFo3PsPpATCyXRgAAApE"], referer: binance.com
[Sat Feb 14 20:55:49.429111 2026] [:error] [pid 26150:tid 26154] [client 43.159.143.139:55354] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZBw1aqmPH3D5QJaUSHQYwAAAIA"]
[Sun Feb 15 00:58:01.664250 2026] [:error] [pid 43958:tid 44191] [client 43.157.170.126:36414] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZCpmUxn6DwNHFlR-zY7MgAAA5M"]
[Sun Feb 15 04:31:44.054875 2026] [:error] [pid 56032:tid 56133] [client 43.130.131.18:39126] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZDbsAZLtpHKaYDlQiz-cgAAApE"]
[Sun Feb 15 04:54:29.650762 2026] [:error] [pid 56392:tid 56413] [client 221.229.106.25:56790] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZDhBQW9dn1Y84Lm6pUd2QAAA5E"]
[Sun Feb 15 10:09:32.689177 2026] [:error] [pid 42659:tid 42661] [client 43.159.136.201:35730] [client 43.159.136.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZEq3Oy3JGHOB-Rj_FYStAAAAEA"]
[Sun Feb 15 12:31:49.634551 2026] [:error] [pid 35557:tid 35563] [client 167.86.118.77:64699] [client 167.86.118.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "aZFMNcI4REuGME4xEbP-fwAAAkA"], referer: binance.com
[Sun Feb 15 17:22:07.910309 2026] [:error] [pid 42754:tid 42814] [client 124.156.179.141:45594] [client 124.156.179.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZGQP-iCZrZWT4BVy13HbgAAA8A"]
[Sun Feb 15 17:32:34.194197 2026] [:error] [pid 19652:tid 19670] [client 60.188.57.0:46352] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZGSsjHg2T9K5fiyOL_rnAAAABA"]
[Sun Feb 15 17:34:28.673389 2026] [:error] [pid 35557:tid 35581] [client 142.93.75.8:45766] [client 142.93.75.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZGTJMI4REuGME4xEbM0sAAAAlI"]
[Sun Feb 15 17:34:31.090456 2026] [:error] [pid 35557:tid 35582] [client 142.93.75.8:45148] [client 142.93.75.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZGTJ8I4REuGME4xEbM0tQAAAlM"]
[Sun Feb 15 19:43:22.610104 2026] [:error] [pid 42659:tid 42679] [client 43.130.91.95:34802] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZGxWuy3JGHOB-Rj_FaMJwAAAFI"]
[Sun Feb 15 20:08:24.807818 2026] [:error] [pid 35497:tid 35543] [client 41.210.145.129:39474] [client 41.210.145.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.210.145.129, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZG3OMyqpfYzoxiskhuRKAAAANA"]
[Sun Feb 15 20:08:24.812880 2026] [:error] [pid 35497:tid 35543] [client 41.210.145.129:39474] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Feb 15 23:40:13.472006 2026] [:error] [pid 42752:tid 42782] [client 43.157.191.20:41234] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZHo3cClY05C-Gq9l0h_AAAAAtc"]
[Mon Feb 16 00:08:32.362296 2026] [:error] [pid 19652:tid 19664] [client 110.166.71.39:44211] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZHvgDHg2T9K5fiyOL9C_wAAAAo"]
[Mon Feb 16 02:01:26.423539 2026] [:error] [pid 35560:tid 35630] [client 43.159.143.139:52198] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZIJ9gZSChHPc3occZ53kAAAAw0"]
[Mon Feb 16 03:42:13.503809 2026] [:error] [pid 38989:tid 39012] [client 142.93.75.8:59514] [client 142.93.75.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZIhlSrVyuMbz7PrmMzU_QAAANU"]
[Mon Feb 16 03:42:15.311117 2026] [:error] [pid 38899:tid 38952] [client 142.93.75.8:42728] [client 142.93.75.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZIhl1_lwvsNOstSrM90gwAAAFc"]
[Mon Feb 16 06:17:56.966748 2026] [:error] [pid 4347:tid 4392] [client 182.44.12.37:47628] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZJGFDFcjv6pEAnSEiej8AAAABg"]
[Mon Feb 16 06:45:39.837320 2026] [:error] [pid 4349:tid 4436] [client 49.51.178.45:38650] [client 49.51.178.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZJMk8rbZYafUL_3QfwJcwAAAI4"]
[Mon Feb 16 13:40:33.483524 2026] [:error] [pid 4349:tid 4424] [client 43.166.7.113:49788] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZKt0crbZYafUL_3QfyOZQAAAII"]
[Mon Feb 16 15:55:44.527905 2026] [:error] [pid 38888:tid 38892] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Feb 16 15:55:44.695952 2026] [:error] [pid 38888:tid 38897] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/waf.php
[Mon Feb 16 15:55:44.832469 2026] [:error] [pid 38888:tid 38896] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/zone.php
[Mon Feb 16 15:55:44.969569 2026] [:error] [pid 38888:tid 38912] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/xoot.php
[Mon Feb 16 15:55:45.118213 2026] [:error] [pid 38888:tid 38894] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/X57.php
[Mon Feb 16 15:55:45.260786 2026] [:error] [pid 38888:tid 38910] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/sad5.php
[Mon Feb 16 15:55:45.398243 2026] [:error] [pid 38888:tid 38906] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Feb 16 15:55:45.536530 2026] [:error] [pid 38888:tid 38915] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/iov.php
[Mon Feb 16 15:55:45.678621 2026] [:error] [pid 38888:tid 38898] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Mon Feb 16 15:55:45.816853 2026] [:error] [pid 38888:tid 38911] [client 20.214.155.242:36474] File does not exist: /usr/local/apache/htdocs/suspended-page/thui.php
[Mon Feb 16 15:55:45.951600 2026] [:error] [pid 38888:tid 38904] [client 20.214.155.242:36474] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx7.php"] [unique_id "aZLNgamDoBJWPvV4pcMHUwAAAU0"]
[Mon Feb 16 15:55:46.249180 2026] [:error] [pid 4347:tid 4373] [client 20.214.155.242:21718] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx7.php"] [unique_id "aZLNgjFcjv6pEAnSEidlxAAAAAU"]
[Mon Feb 16 15:55:46.596938 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:41995] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx7.php"] [unique_id "aZLNgjFcjv6pEAnSEidlxQAAABM"]
[Mon Feb 16 15:55:46.871410 2026] [:error] [pid 26648:tid 26662] [client 20.214.155.242:40685] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx7.php"] [unique_id "aZLNgjT55fUixS3gmyjYoQAAAYk"]
[Mon Feb 16 15:55:47.104762 2026] [:error] [pid 4347:tid 4378] [client 20.214.155.242:21740] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZLNgzFcjv6pEAnSEidlxgAAAAo"]
[Mon Feb 16 15:55:47.151477 2026] [:error] [pid 26648:tid 26661] [client 20.214.155.242:37539] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aZLNgzT55fUixS3gmyjYowAAAYg"]
[Mon Feb 16 15:55:47.374967 2026] [:error] [pid 4455:tid 4470] [client 20.214.155.242:8048] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZLNgwNa-4dvQCL0rupBnAAAAM0"]
[Mon Feb 16 15:55:47.477179 2026] [:error] [pid 26648:tid 26676] [client 20.214.155.242:37544] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aZLNgzT55fUixS3gmyjYpgAAAZc"]
[Mon Feb 16 15:55:47.653403 2026] [:error] [pid 26648:tid 26669] [client 20.214.155.242:32425] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZLNgzT55fUixS3gmyjYqgAAAZA"]
[Mon Feb 16 15:55:47.757353 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:40656] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aZLNgzT55fUixS3gmyjYrAAAAZY"]
[Mon Feb 16 15:55:47.931620 2026] [:error] [pid 4455:tid 4479] [client 20.214.155.242:41994] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZLNgwNa-4dvQCL0rupBnQAAANY"]
[Mon Feb 16 15:55:48.029098 2026] [:error] [pid 26648:tid 26668] [client 20.214.155.242:39613] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aZLNhDT55fUixS3gmyjYrQAAAY8"]
[Mon Feb 16 15:55:48.299104 2026] [:error] [pid 4349:tid 4425] [client 20.214.155.242:30542] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZLNhMrbZYafUL_3Qfy0vQAAAIM"]
[Mon Feb 16 15:55:48.580186 2026] [:error] [pid 26648:tid 26661] [client 20.214.155.242:8063] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZLNhDT55fUixS3gmyjYsAAAAYg"]
[Mon Feb 16 15:55:48.855498 2026] [:error] [pid 4347:tid 4381] [client 20.214.155.242:42000] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZLNhDFcjv6pEAnSEidlygAAAA0"]
[Mon Feb 16 15:55:49.130989 2026] [:error] [pid 37004:tid 37029] [client 20.214.155.242:21749] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZLNhVXWqA9gxE5oGmbo2wAAARc"]
[Mon Feb 16 15:55:49.405330 2026] [:error] [pid 4348:tid 4400] [client 20.214.155.242:37542] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aZLNhXxbK-cCGKg9aytSswAAAEU"]
[Mon Feb 16 15:55:49.673900 2026] [:error] [pid 4347:tid 4388] [client 20.214.155.242:39615] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aZLNhTFcjv6pEAnSEidlzQAAABQ"]
[Mon Feb 16 15:55:49.948383 2026] [:error] [pid 26648:tid 26673] [client 20.214.155.242:37531] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aZLNhTT55fUixS3gmyjYswAAAZQ"]
[Mon Feb 16 15:55:50.233115 2026] [:error] [pid 37004:tid 37027] [client 20.214.155.242:8059] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aZLNhlXWqA9gxE5oGmbo3AAAARU"]
[Mon Feb 16 15:55:50.509316 2026] [:error] [pid 26648:tid 26658] [client 20.214.155.242:44919] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aZLNhjT55fUixS3gmyjYtAAAAYU"]
[Mon Feb 16 15:55:50.783156 2026] [:error] [pid 26648:tid 26659] [client 20.214.155.242:21706] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aZLNhjT55fUixS3gmyjYtQAAAYY"]
[Mon Feb 16 15:55:51.052496 2026] [:error] [pid 38888:tid 38908] [client 20.214.155.242:32424] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aZLNh6mDoBJWPvV4pcMHVwAAAVE"]
[Mon Feb 16 15:55:51.324972 2026] [:error] [pid 38888:tid 38910] [client 20.214.155.242:36470] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aZLNh6mDoBJWPvV4pcMHWAAAAVM"]
[Mon Feb 16 15:55:51.605107 2026] [:error] [pid 37004:tid 37022] [client 20.214.155.242:37545] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aZLNh1XWqA9gxE5oGmbo3gAAARA"]
[Mon Feb 16 15:55:51.892749 2026] [:error] [pid 38888:tid 38915] [client 20.214.155.242:21705] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aZLNh6mDoBJWPvV4pcMHWgAAAVg"]
[Mon Feb 16 15:55:52.195708 2026] [:error] [pid 38888:tid 38898] [client 20.214.155.242:39556] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aZLNiKmDoBJWPvV4pcMHWwAAAUc"]
[Mon Feb 16 15:55:52.475821 2026] [:error] [pid 38888:tid 38913] [client 20.214.155.242:40679] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aZLNiKmDoBJWPvV4pcMHXAAAAVY"]
[Mon Feb 16 15:55:52.752454 2026] [:error] [pid 4348:tid 4415] [client 20.214.155.242:38147] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aZLNiHxbK-cCGKg9aytStAAAAFQ"]
[Mon Feb 16 15:55:53.021521 2026] [:error] [pid 26648:tid 26658] [client 20.214.155.242:36444] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aZLNiTT55fUixS3gmyjYvQAAAYU"]
[Mon Feb 16 15:55:53.292052 2026] [:error] [pid 4348:tid 4411] [client 20.214.155.242:21732] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aZLNiXxbK-cCGKg9aytStgAAAFA"]
[Mon Feb 16 15:55:53.570192 2026] [:error] [pid 26648:tid 26670] [client 20.214.155.242:8014] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aZLNiTT55fUixS3gmyjYwQAAAZE"]
[Mon Feb 16 15:55:53.855141 2026] [:error] [pid 4349:tid 4428] [client 20.214.155.242:36434] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aZLNicrbZYafUL_3Qfy0wQAAAIY"]
[Mon Feb 16 15:55:54.138368 2026] [:error] [pid 4348:tid 4416] [client 20.214.155.242:37546] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aZLNinxbK-cCGKg9aytSuAAAAFU"]
[Mon Feb 16 15:55:54.422696 2026] [:error] [pid 38888:tid 38909] [client 20.214.155.242:37514] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aZLNiqmDoBJWPvV4pcMHXgAAAVI"]
[Mon Feb 16 15:55:54.691565 2026] [:error] [pid 4349:tid 4423] [client 20.214.155.242:36456] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aZLNisrbZYafUL_3Qfy0wgAAAIE"]
[Mon Feb 16 15:55:54.960698 2026] [:error] [pid 26648:tid 26673] [client 20.214.155.242:29141] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aZLNijT55fUixS3gmyjYyAAAAZQ"]
[Mon Feb 16 15:55:55.232232 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:39602] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aZLNizT55fUixS3gmyjYyQAAAZY"]
[Mon Feb 16 15:55:55.509450 2026] [:error] [pid 26648:tid 26659] [client 20.214.155.242:29177] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aZLNizT55fUixS3gmyjYygAAAYY"]
[Mon Feb 16 15:55:55.782073 2026] [:error] [pid 26648:tid 26669] [client 20.214.155.242:30535] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aZLNizT55fUixS3gmyjYywAAAZA"]
[Mon Feb 16 15:55:56.052767 2026] [:error] [pid 4348:tid 4412] [client 20.214.155.242:8134] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aZLNjHxbK-cCGKg9aytSuwAAAFE"]
[Mon Feb 16 15:55:56.327797 2026] [:error] [pid 26648:tid 26662] [client 20.214.155.242:38190] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aZLNjDT55fUixS3gmyjYzQAAAYk"]
[Mon Feb 16 15:55:56.602301 2026] [:error] [pid 4348:tid 4413] [client 20.214.155.242:39567] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aZLNjHxbK-cCGKg9aytSvAAAAFI"]
[Mon Feb 16 15:55:56.876158 2026] [:error] [pid 37004:tid 37007] [client 20.214.155.242:37505] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aZLNjFXWqA9gxE5oGmbo4gAAAQE"]
[Mon Feb 16 15:55:57.193934 2026] [:error] [pid 38888:tid 38892] [client 20.214.155.242:30570] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aZLNjamDoBJWPvV4pcMHYwAAAUE"]
[Mon Feb 16 15:55:57.493711 2026] [:error] [pid 4347:tid 4376] [client 20.214.155.242:35371] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aZLNjTFcjv6pEAnSEidl0wAAAAg"]
[Mon Feb 16 15:55:57.778795 2026] [:error] [pid 37004:tid 37016] [client 20.214.155.242:8167] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aZLNjVXWqA9gxE5oGmbo4wAAAQo"]
[Mon Feb 16 15:55:58.049041 2026] [:error] [pid 4347:tid 4383] [client 20.214.155.242:7909] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aZLNjjFcjv6pEAnSEidl1AAAAA8"]
[Mon Feb 16 15:55:58.328925 2026] [:error] [pid 4347:tid 4371] [client 20.214.155.242:21703] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aZLNjjFcjv6pEAnSEidl1wAAAAM"]
[Mon Feb 16 15:55:58.602265 2026] [:error] [pid 38888:tid 38906] [client 20.214.155.242:40640] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aZLNjqmDoBJWPvV4pcMHZAAAAU8"]
[Mon Feb 16 15:55:58.873376 2026] [:error] [pid 26648:tid 26659] [client 20.214.155.242:21707] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aZLNjjT55fUixS3gmyjY1AAAAYY"]
[Mon Feb 16 15:55:59.146318 2026] [:error] [pid 37004:tid 37029] [client 20.214.155.242:29161] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aZLNj1XWqA9gxE5oGmbo5gAAARc"]
[Mon Feb 16 15:55:59.415827 2026] [:error] [pid 37004:tid 37026] [client 20.214.155.242:39583] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aZLNj1XWqA9gxE5oGmbo6AAAARQ"]
[Mon Feb 16 15:55:59.704974 2026] [:error] [pid 4347:tid 4390] [client 20.214.155.242:8156] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aZLNjzFcjv6pEAnSEidl2QAAABY"]
[Mon Feb 16 15:55:59.977063 2026] [:error] [pid 26648:tid 26661] [client 20.214.155.242:8141] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aZLNjzT55fUixS3gmyjY2AAAAYg"]
[Mon Feb 16 15:56:00.316597 2026] [:error] [pid 4348:tid 4410] [client 20.214.155.242:37533] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aZLNkHxbK-cCGKg9aytSwgAAAE8"]
[Mon Feb 16 15:56:00.598602 2026] [:error] [pid 4349:tid 4435] [client 20.214.155.242:46376] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZLNkMrbZYafUL_3Qfy0yQAAAI0"]
[Mon Feb 16 15:56:00.879791 2026] [:error] [pid 4348:tid 4411] [client 20.214.155.242:42024] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZLNkHxbK-cCGKg9aytSxAAAAFA"]
[Mon Feb 16 15:56:01.155824 2026] [:error] [pid 4349:tid 4426] [client 20.214.155.242:36417] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZLNkcrbZYafUL_3Qfy0zAAAAIQ"]
[Mon Feb 16 15:56:01.425885 2026] [:error] [pid 4349:tid 4443] [client 20.214.155.242:38192] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZLNkcrbZYafUL_3Qfy0zQAAAJU"]
[Mon Feb 16 15:56:01.696605 2026] [:error] [pid 4347:tid 4385] [client 20.214.155.242:46345] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aZLNkTFcjv6pEAnSEidl2gAAABE"]
[Mon Feb 16 15:56:01.967424 2026] [:error] [pid 38888:tid 38907] [client 20.214.155.242:38151] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aZLNkamDoBJWPvV4pcMHZQAAAVA"]
[Mon Feb 16 15:56:02.257048 2026] [:error] [pid 4348:tid 4413] [client 20.214.155.242:38162] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aZLNknxbK-cCGKg9aytSyAAAAFI"]
[Mon Feb 16 15:56:02.535010 2026] [:error] [pid 38888:tid 38912] [client 20.214.155.242:38168] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aZLNkqmDoBJWPvV4pcMHZgAAAVU"]
[Mon Feb 16 15:56:02.819849 2026] [:error] [pid 4349:tid 4446] [client 20.214.155.242:46371] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aZLNksrbZYafUL_3Qfy00AAAAJg"]
[Mon Feb 16 15:56:03.088597 2026] [:error] [pid 4347:tid 4386] [client 20.214.155.242:29145] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aZLNkzFcjv6pEAnSEidl3AAAABI"]
[Mon Feb 16 15:56:03.435329 2026] [:error] [pid 38888:tid 38909] [client 20.214.155.242:40676] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aZLNk6mDoBJWPvV4pcMHagAAAVI"]
[Mon Feb 16 15:56:03.705179 2026] [:error] [pid 4349:tid 4433] [client 20.214.155.242:7918] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aZLNk8rbZYafUL_3Qfy01QAAAIs"]
[Mon Feb 16 15:56:03.992006 2026] [:error] [pid 4349:tid 4440] [client 20.214.155.242:39562] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aZLNk8rbZYafUL_3Qfy01gAAAJI"]
[Mon Feb 16 15:56:04.278359 2026] [:error] [pid 4348:tid 4396] [client 20.214.155.242:8031] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aZLNlHxbK-cCGKg9aytSzQAAAEE"]
[Mon Feb 16 15:56:04.558880 2026] [:error] [pid 4349:tid 4434] [client 20.214.155.242:21699] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aZLNlMrbZYafUL_3Qfy02AAAAIw"]
[Mon Feb 16 15:56:04.834978 2026] [:error] [pid 4348:tid 4417] [client 20.214.155.242:39603] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aZLNlHxbK-cCGKg9aytS0QAAAFY"]
[Mon Feb 16 15:56:05.114477 2026] [:error] [pid 4349:tid 4427] [client 20.214.155.242:46343] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aZLNlcrbZYafUL_3Qfy02QAAAIU"]
[Mon Feb 16 15:56:05.386257 2026] [:error] [pid 38888:tid 38899] [client 20.214.155.242:29193] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aZLNlamDoBJWPvV4pcMHbwAAAUg"]
[Mon Feb 16 15:56:05.656614 2026] [:error] [pid 4347:tid 4377] [client 20.214.155.242:46377] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aZLNlTFcjv6pEAnSEidl4AAAAAk"]
[Mon Feb 16 15:56:05.928035 2026] [:error] [pid 4348:tid 4402] [client 20.214.155.242:39558] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aZLNlXxbK-cCGKg9aytS1AAAAEc"]
[Mon Feb 16 15:56:06.200226 2026] [:error] [pid 4348:tid 4412] [client 20.214.155.242:46370] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aZLNlnxbK-cCGKg9aytS1QAAAFE"]
[Mon Feb 16 15:56:06.466605 2026] [:error] [pid 4348:tid 4419] [client 20.214.155.242:38189] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aZLNlnxbK-cCGKg9aytS1wAAAFg"]
[Mon Feb 16 15:56:06.733326 2026] [:error] [pid 4348:tid 4409] [client 20.214.155.242:39582] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aZLNlnxbK-cCGKg9aytS2AAAAE4"]
[Mon Feb 16 15:56:07.005450 2026] [:error] [pid 4455:tid 4458] [client 20.214.155.242:46347] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aZLNlwNa-4dvQCL0rupBqQAAAME"]
[Mon Feb 16 15:56:07.276242 2026] [:error] [pid 26648:tid 26663] [client 20.214.155.242:39578] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aZLNlzT55fUixS3gmyjY2gAAAYo"]
[Mon Feb 16 15:56:07.549921 2026] [:error] [pid 4347:tid 4369] [client 20.214.155.242:8170] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aZLNlzFcjv6pEAnSEidl5QAAAAE"]
[Mon Feb 16 15:56:07.822989 2026] [:error] [pid 4348:tid 4406] [client 20.214.155.242:38193] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aZLNl3xbK-cCGKg9aytS2QAAAEs"]
[Mon Feb 16 15:56:08.098658 2026] [:error] [pid 4455:tid 4465] [client 20.214.155.242:29692] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aZLNmANa-4dvQCL0rupBrQAAAMg"]
[Mon Feb 16 15:56:08.375503 2026] [:error] [pid 37004:tid 37029] [client 20.214.155.242:40664] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aZLNmFXWqA9gxE5oGmbo9wAAARc"]
[Mon Feb 16 15:56:08.647514 2026] [:error] [pid 4455:tid 4470] [client 20.214.155.242:8154] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aZLNmANa-4dvQCL0rupBsAAAAM0"]
[Mon Feb 16 15:56:08.929381 2026] [:error] [pid 26648:tid 26667] [client 20.214.155.242:29678] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aZLNmDT55fUixS3gmyjY3AAAAY4"]
[Mon Feb 16 15:56:09.213304 2026] [:error] [pid 4349:tid 4430] [client 20.214.155.242:39599] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aZLNmcrbZYafUL_3Qfy07wAAAIg"]
[Mon Feb 16 15:56:09.497494 2026] [:error] [pid 4347:tid 4386] [client 20.214.155.242:38185] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lul.php"] [unique_id "aZLNmTFcjv6pEAnSEidl6gAAABI"]
[Mon Feb 16 15:56:09.779672 2026] [:error] [pid 26648:tid 26657] [client 20.214.155.242:36460] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lul.php"] [unique_id "aZLNmTT55fUixS3gmyjY3gAAAYQ"]
[Mon Feb 16 15:56:10.058162 2026] [:error] [pid 4347:tid 4375] [client 20.214.155.242:38188] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lul.php"] [unique_id "aZLNmjFcjv6pEAnSEidl6wAAAAc"]
[Mon Feb 16 15:56:10.334465 2026] [:error] [pid 26648:tid 26660] [client 20.214.155.242:21731] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lul.php"] [unique_id "aZLNmjT55fUixS3gmyjY4QAAAYc"]
[Mon Feb 16 15:56:10.618486 2026] [:error] [pid 4347:tid 4374] [client 20.214.155.242:40702] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aZLNmjFcjv6pEAnSEidl7QAAAAY"]
[Mon Feb 16 15:56:10.888438 2026] [:error] [pid 26648:tid 26654] [client 20.214.155.242:29139] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aZLNmjT55fUixS3gmyjY4wAAAYE"]
[Mon Feb 16 15:56:11.171901 2026] [:error] [pid 37004:tid 37026] [client 20.214.155.242:8151] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aZLNm1XWqA9gxE5oGmbpDwAAARQ"]
[Mon Feb 16 15:56:11.476847 2026] [:error] [pid 26648:tid 26669] [client 20.214.155.242:40690] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aZLNmzT55fUixS3gmyjY5QAAAZA"]
[Mon Feb 16 15:56:11.745721 2026] [:error] [pid 4347:tid 4388] [client 20.214.155.242:46382] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZLNmzFcjv6pEAnSEidl7wAAABQ"]
[Mon Feb 16 15:56:12.015178 2026] [:error] [pid 4347:tid 4369] [client 20.214.155.242:38182] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZLNnDFcjv6pEAnSEidl8QAAAAE"]
[Mon Feb 16 15:56:12.288391 2026] [:error] [pid 26648:tid 26665] [client 20.214.155.242:46346] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZLNnDT55fUixS3gmyjY6AAAAYw"]
[Mon Feb 16 15:56:12.562224 2026] [:error] [pid 4347:tid 4389] [client 20.214.155.242:30575] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aZLNnDFcjv6pEAnSEidl9QAAABU"]
[Mon Feb 16 15:56:12.835403 2026] [:error] [pid 4347:tid 4375] [client 20.214.155.242:38164] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ya.php"] [unique_id "aZLNnDFcjv6pEAnSEidl9wAAAAc"]
[Mon Feb 16 15:56:13.106782 2026] [:error] [pid 4347:tid 4391] [client 20.214.155.242:21697] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ya.php"] [unique_id "aZLNnTFcjv6pEAnSEidl-AAAABc"]
[Mon Feb 16 15:56:13.379586 2026] [:error] [pid 4455:tid 4459] [client 20.214.155.242:36426] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ya.php"] [unique_id "aZLNnQNa-4dvQCL0rupBvAAAAMI"]
[Mon Feb 16 15:56:13.652811 2026] [:error] [pid 37004:tid 37030] [client 20.214.155.242:29677] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ya.php"] [unique_id "aZLNnVXWqA9gxE5oGmbpEQAAARg"]
[Mon Feb 16 15:56:13.921386 2026] [:error] [pid 4455:tid 4463] [client 20.214.155.242:29662] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZLNnQNa-4dvQCL0rupBvQAAAMY"]
[Mon Feb 16 15:56:14.197294 2026] [:error] [pid 4455:tid 4474] [client 20.214.155.242:39573] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZLNngNa-4dvQCL0rupBvwAAANE"]
[Mon Feb 16 15:56:14.469347 2026] [:error] [pid 26648:tid 26676] [client 20.214.155.242:21755] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZLNnjT55fUixS3gmyjY7QAAAZc"]
[Mon Feb 16 15:56:14.746689 2026] [:error] [pid 26648:tid 26657] [client 20.214.155.242:21696] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aZLNnjT55fUixS3gmyjY7gAAAYQ"]
[Mon Feb 16 15:56:15.015099 2026] [:error] [pid 26648:tid 26660] [client 20.214.155.242:8155] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZLNnzT55fUixS3gmyjY7wAAAYc"]
[Mon Feb 16 15:56:15.288667 2026] [:error] [pid 26648:tid 26654] [client 20.214.155.242:36427] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZLNnzT55fUixS3gmyjY8QAAAYE"]
[Mon Feb 16 15:56:15.560379 2026] [:error] [pid 4347:tid 4377] [client 20.214.155.242:8190] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZLNnzFcjv6pEAnSEidl-gAAAAk"]
[Mon Feb 16 15:56:15.834727 2026] [:error] [pid 4347:tid 4370] [client 20.214.155.242:39557] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aZLNnzFcjv6pEAnSEidl_QAAAAI"]
[Mon Feb 16 15:56:16.106367 2026] [:error] [pid 4347:tid 4388] [client 20.214.155.242:29149] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aZLNoDFcjv6pEAnSEidl_gAAABQ"]
[Mon Feb 16 15:56:16.376652 2026] [:error] [pid 4349:tid 4437] [client 20.214.155.242:41990] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aZLNoMrbZYafUL_3Qfy0_AAAAI8"]
[Mon Feb 16 15:56:16.646055 2026] [:error] [pid 4347:tid 4369] [client 20.214.155.242:35332] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aZLNoDFcjv6pEAnSEidmAAAAAAE"]
[Mon Feb 16 15:56:16.917898 2026] [:error] [pid 4455:tid 4478] [client 20.214.155.242:38203] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aZLNoANa-4dvQCL0rupBxQAAANU"]
[Mon Feb 16 15:56:17.199616 2026] [:error] [pid 4349:tid 4435] [client 20.214.155.242:8132] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aZLNocrbZYafUL_3Qfy0_gAAAI0"]
[Mon Feb 16 15:56:17.494800 2026] [:error] [pid 4455:tid 4476] [client 20.214.155.242:38146] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aZLNoQNa-4dvQCL0rupBxgAAANM"]
[Mon Feb 16 15:56:17.772788 2026] [:error] [pid 4348:tid 4410] [client 20.214.155.242:29672] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aZLNoXxbK-cCGKg9aytS_gAAAE8"]
[Mon Feb 16 15:56:18.040920 2026] [:error] [pid 4349:tid 4432] [client 20.214.155.242:7929] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aZLNosrbZYafUL_3Qfy1AAAAAIo"]
[Mon Feb 16 15:56:18.313590 2026] [:error] [pid 4348:tid 4415] [client 20.214.155.242:40641] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZLNonxbK-cCGKg9aytTAAAAAFQ"]
[Mon Feb 16 15:56:18.595506 2026] [:error] [pid 4455:tid 4481] [client 20.214.155.242:40692] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZLNogNa-4dvQCL0rupByQAAANg"]
[Mon Feb 16 15:56:18.878463 2026] [:error] [pid 4348:tid 4398] [client 20.214.155.242:8170] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZLNonxbK-cCGKg9aytTAwAAAEM"]
[Mon Feb 16 15:56:19.242579 2026] [:error] [pid 4455:tid 4465] [client 20.214.155.242:35328] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZLNowNa-4dvQCL0rupBywAAAMg"]
[Mon Feb 16 15:56:19.526645 2026] [:error] [pid 4455:tid 4460] [client 20.214.155.242:8152] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aZLNowNa-4dvQCL0rupBzAAAAMM"]
[Mon Feb 16 15:56:19.797462 2026] [:error] [pid 4455:tid 4479] [client 20.214.155.242:7893] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aZLNowNa-4dvQCL0rupBzgAAANY"]
[Mon Feb 16 15:56:20.097982 2026] [:error] [pid 4347:tid 4372] [client 20.214.155.242:29123] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aZLNpDFcjv6pEAnSEidmBwAAAAQ"]
[Mon Feb 16 15:56:20.373616 2026] [:error] [pid 4347:tid 4388] [client 20.214.155.242:36437] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aZLNpDFcjv6pEAnSEidmCQAAABQ"]
[Mon Feb 16 15:56:20.655170 2026] [:error] [pid 26648:tid 26671] [client 20.214.155.242:21701] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aZLNpDT55fUixS3gmyjY-AAAAZI"]
[Mon Feb 16 15:56:20.951348 2026] [:error] [pid 26648:tid 26672] [client 20.214.155.242:7915] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aZLNpDT55fUixS3gmyjY-gAAAZM"]
[Mon Feb 16 15:56:21.230449 2026] [:error] [pid 4348:tid 4407] [client 20.214.155.242:39557] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aZLNpXxbK-cCGKg9aytTBgAAAEw"]
[Mon Feb 16 15:56:21.501085 2026] [:error] [pid 38888:tid 38896] [client 20.214.155.242:31801] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aZLNpamDoBJWPvV4pcMHeQAAAUU"]
[Mon Feb 16 15:56:21.782513 2026] [:error] [pid 4347:tid 4376] [client 20.214.155.242:29158] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aZLNpTFcjv6pEAnSEidmDwAAAAg"]
[Mon Feb 16 15:56:22.091305 2026] [:error] [pid 4347:tid 4390] [client 20.214.155.242:38167] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aZLNpjFcjv6pEAnSEidmEgAAABY"]
[Mon Feb 16 15:56:22.372864 2026] [:error] [pid 4348:tid 4416] [client 20.214.155.242:31779] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aZLNpnxbK-cCGKg9aytTDwAAAFU"]
[Mon Feb 16 15:56:22.663950 2026] [:error] [pid 26648:tid 26662] [client 20.214.155.242:46350] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aZLNpjT55fUixS3gmyjY_gAAAYk"]
[Mon Feb 16 15:56:22.940470 2026] [:error] [pid 4349:tid 4436] [client 20.214.155.242:29694] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aZLNpsrbZYafUL_3Qfy1AgAAAI4"]
[Mon Feb 16 15:56:23.210243 2026] [:error] [pid 4455:tid 4469] [client 20.214.155.242:38184] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aZLNpwNa-4dvQCL0rupB2QAAAMw"]
[Mon Feb 16 15:56:23.488921 2026] [:error] [pid 4348:tid 4409] [client 20.214.155.242:40649] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aZLNp3xbK-cCGKg9aytTEwAAAE4"]
[Mon Feb 16 15:56:23.771434 2026] [:error] [pid 26648:tid 26664] [client 20.214.155.242:39587] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aZLNpzT55fUixS3gmyjZAQAAAYs"]
[Mon Feb 16 15:56:24.043134 2026] [:error] [pid 26648:tid 26676] [client 20.214.155.242:32798] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aZLNqDT55fUixS3gmyjZAgAAAZc"]
[Mon Feb 16 15:56:24.360395 2026] [:error] [pid 4348:tid 4406] [client 20.214.155.242:46231] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aZLNqHxbK-cCGKg9aytTFQAAAEs"]
[Mon Feb 16 15:56:24.629237 2026] [:error] [pid 4348:tid 4405] [client 20.214.155.242:32793] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aZLNqHxbK-cCGKg9aytTFwAAAEo"]
[Mon Feb 16 15:56:24.903705 2026] [:error] [pid 4455:tid 4480] [client 20.214.155.242:46391] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aZLNqANa-4dvQCL0rupB3QAAANc"]
[Mon Feb 16 15:56:25.257789 2026] [:error] [pid 38888:tid 38912] [client 20.214.155.242:7894] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aZLNqamDoBJWPvV4pcMHgAAAAVU"]
[Mon Feb 16 15:56:25.526255 2026] [:error] [pid 26648:tid 26653] [client 20.214.155.242:46225] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aZLNqTT55fUixS3gmyjZBQAAAYA"]
[Mon Feb 16 15:56:25.804639 2026] [:error] [pid 38888:tid 38893] [client 20.214.155.242:38643] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aZLNqamDoBJWPvV4pcMHhAAAAUI"]
[Mon Feb 16 15:56:26.076112 2026] [:error] [pid 4347:tid 4377] [client 20.214.155.242:29171] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aZLNqjFcjv6pEAnSEidmGgAAAAk"]
[Mon Feb 16 15:56:26.345064 2026] [:error] [pid 26648:tid 26658] [client 20.214.155.242:7877] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aZLNqjT55fUixS3gmyjZBwAAAYU"]
[Mon Feb 16 15:56:26.619307 2026] [:error] [pid 37004:tid 37008] [client 20.214.155.242:46344] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aZLNqlXWqA9gxE5oGmbpFQAAAQI"]
[Mon Feb 16 15:56:26.902052 2026] [:error] [pid 37004:tid 37019] [client 20.214.155.242:38144] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aZLNqlXWqA9gxE5oGmbpFgAAAQ0"]
[Mon Feb 16 15:56:27.184648 2026] [:error] [pid 37004:tid 37028] [client 20.214.155.242:7934] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aZLNq1XWqA9gxE5oGmbpGAAAARY"]
[Mon Feb 16 15:56:27.468029 2026] [:error] [pid 37004:tid 37027] [client 20.214.155.242:46208] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aZLNq1XWqA9gxE5oGmbpGwAAARU"]
[Mon Feb 16 15:56:27.737319 2026] [:error] [pid 26648:tid 26660] [client 20.214.155.242:29131] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aZLNqzT55fUixS3gmyjZCQAAAYc"]
[Mon Feb 16 15:56:28.012402 2026] [:error] [pid 4348:tid 4396] [client 20.214.155.242:38625] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aZLNrHxbK-cCGKg9aytTHAAAAEE"]
[Mon Feb 16 15:56:28.297685 2026] [:error] [pid 38888:tid 38895] [client 20.214.155.242:7923] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aZLNrKmDoBJWPvV4pcMHiAAAAUQ"]
[Mon Feb 16 15:56:28.574159 2026] [:error] [pid 37004:tid 37006] [client 20.214.155.242:29644] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aZLNrFXWqA9gxE5oGmbpIAAAAQA"]
[Mon Feb 16 15:56:28.843381 2026] [:error] [pid 38888:tid 38891] [client 20.214.155.242:46338] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aZLNrKmDoBJWPvV4pcMHiwAAAUA"]
[Mon Feb 16 15:56:29.131772 2026] [:error] [pid 4455:tid 4475] [client 20.214.155.242:46230] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aZLNrQNa-4dvQCL0rupB3wAAANI"]
[Mon Feb 16 15:56:29.407702 2026] [:error] [pid 4349:tid 4432] [client 20.214.155.242:46236] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aZLNrcrbZYafUL_3Qfy1DQAAAIo"]
[Mon Feb 16 15:56:29.678612 2026] [:error] [pid 38888:tid 38908] [client 20.214.155.242:29668] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aZLNramDoBJWPvV4pcMHjgAAAVE"]
[Mon Feb 16 15:56:29.959891 2026] [:error] [pid 26648:tid 26657] [client 20.214.155.242:29180] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aZLNrTT55fUixS3gmyjZDgAAAYQ"]
[Mon Feb 16 15:56:30.232359 2026] [:error] [pid 4349:tid 4442] [client 20.214.155.242:29156] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aZLNrsrbZYafUL_3Qfy1DwAAAJQ"]
[Mon Feb 16 15:56:30.500854 2026] [:error] [pid 26648:tid 26655] [client 20.214.155.242:46440] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admiin.php"] [unique_id "aZLNrjT55fUixS3gmyjZEAAAAYI"]
[Mon Feb 16 15:56:30.776060 2026] [:error] [pid 4455:tid 4465] [client 20.214.155.242:46379] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aZLNrgNa-4dvQCL0rupB4QAAAMg"]
[Mon Feb 16 15:56:31.046342 2026] [:error] [pid 4347:tid 4377] [client 20.214.155.242:31759] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aZLNrzFcjv6pEAnSEidmHwAAAAk"]
[Mon Feb 16 15:56:31.319221 2026] [:error] [pid 26648:tid 26670] [client 20.214.155.242:38650] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aZLNrzT55fUixS3gmyjZEQAAAZE"]
[Mon Feb 16 15:56:31.588927 2026] [:error] [pid 26648:tid 26677] [client 20.214.155.242:46222] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aZLNrzT55fUixS3gmyjZFAAAAZg"]
[Mon Feb 16 15:56:31.860022 2026] [:error] [pid 26648:tid 26664] [client 20.214.155.242:29125] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZLNrzT55fUixS3gmyjZFgAAAYs"]
[Mon Feb 16 15:56:32.130492 2026] [:error] [pid 37004:tid 37025] [client 20.214.155.242:46238] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZLNsFXWqA9gxE5oGmbpJAAAARM"]
[Mon Feb 16 15:56:32.404474 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:46427] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZLNsDT55fUixS3gmyjZFwAAAZU"]
[Mon Feb 16 15:56:32.678846 2026] [:error] [pid 4349:tid 4441] [client 20.214.155.242:38624] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aZLNsMrbZYafUL_3Qfy1FwAAAJM"]
[Mon Feb 16 15:56:32.958230 2026] [:error] [pid 38888:tid 38900] [client 20.214.155.242:38617] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNsKmDoBJWPvV4pcMHkwAAAUk"]
[Mon Feb 16 15:56:33.235570 2026] [:error] [pid 4455:tid 4466] [client 20.214.155.242:38604] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNsQNa-4dvQCL0rupB4wAAAMk"]
[Mon Feb 16 15:56:33.509909 2026] [:error] [pid 26648:tid 26653] [client 20.214.155.242:29632] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNsTT55fUixS3gmyjZGQAAAYA"]
[Mon Feb 16 15:56:33.789676 2026] [:error] [pid 26648:tid 26671] [client 20.214.155.242:7821] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNsTT55fUixS3gmyjZGgAAAZI"]
[Mon Feb 16 15:56:34.067980 2026] [:error] [pid 37004:tid 37014] [client 20.214.155.242:46402] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aZLNslXWqA9gxE5oGmbpKAAAAQg"]
[Mon Feb 16 15:56:34.350673 2026] [:error] [pid 4347:tid 4392] [client 20.214.155.242:8188] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aZLNsjFcjv6pEAnSEidmIgAAABg"]
[Mon Feb 16 15:56:34.623359 2026] [:error] [pid 38888:tid 38891] [client 20.214.155.242:21721] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aZLNsqmDoBJWPvV4pcMHlAAAAUA"]
[Mon Feb 16 15:56:34.898605 2026] [:error] [pid 38888:tid 38896] [client 20.214.155.242:39579] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aZLNsqmDoBJWPvV4pcMHlQAAAUU"]
[Mon Feb 16 15:56:35.170600 2026] [:error] [pid 38888:tid 38905] [client 20.214.155.242:46233] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aZLNs6mDoBJWPvV4pcMHlwAAAU4"]
[Mon Feb 16 15:56:35.448778 2026] [:error] [pid 38888:tid 38902] [client 20.214.155.242:30551] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aZLNs6mDoBJWPvV4pcMHmAAAAUs"]
[Mon Feb 16 15:56:35.727692 2026] [:error] [pid 38888:tid 38899] [client 20.214.155.242:29690] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aZLNs6mDoBJWPvV4pcMHmgAAAUg"]
[Mon Feb 16 15:56:35.994407 2026] [:error] [pid 4349:tid 4442] [client 20.214.155.242:46337] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "aZLNs8rbZYafUL_3Qfy1GQAAAJQ"]
[Mon Feb 16 15:56:36.264853 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:7828] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aZLNtDFcjv6pEAnSEidmJQAAABM"]
[Mon Feb 16 15:56:36.550801 2026] [:error] [pid 4348:tid 4413] [client 20.214.155.242:31764] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aZLNtHxbK-cCGKg9aytTIAAAAFI"]
[Mon Feb 16 15:56:36.823652 2026] [:error] [pid 4348:tid 4399] [client 20.214.155.242:29643] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aZLNtHxbK-cCGKg9aytTIgAAAEQ"]
[Mon Feb 16 15:56:37.128799 2026] [:error] [pid 4348:tid 4417] [client 20.214.155.242:32824] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aZLNtXxbK-cCGKg9aytTKQAAAFY"]
[Mon Feb 16 15:56:37.398209 2026] [:error] [pid 38888:tid 38900] [client 20.214.155.242:40917] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNtamDoBJWPvV4pcMHnAAAAUk"]
[Mon Feb 16 15:56:37.675750 2026] [:error] [pid 38888:tid 38901] [client 20.214.155.242:31748] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNtamDoBJWPvV4pcMHngAAAUo"]
[Mon Feb 16 15:56:37.945368 2026] [:error] [pid 4348:tid 4417] [client 20.214.155.242:40928] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNtXxbK-cCGKg9aytTUwAAAFY"]
[Mon Feb 16 15:56:38.220642 2026] [:error] [pid 4348:tid 4412] [client 20.214.155.242:46334] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vxrl.php"] [unique_id "aZLNtnxbK-cCGKg9aytTYwAAAFE"]
[Mon Feb 16 15:56:38.490931 2026] [:error] [pid 4348:tid 4414] [client 20.214.155.242:31767] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aZLNtnxbK-cCGKg9aytTbwAAAFM"]
[Mon Feb 16 15:56:38.766503 2026] [:error] [pid 26648:tid 26673] [client 20.214.155.242:46425] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aZLNtjT55fUixS3gmyjZJwAAAZQ"]
[Mon Feb 16 15:56:39.050462 2026] [:error] [pid 4347:tid 4390] [client 20.214.155.242:46227] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aZLNtzFcjv6pEAnSEidmOgAAABY"]
[Mon Feb 16 15:56:39.320571 2026] [:error] [pid 4349:tid 4422] [client 20.214.155.242:32813] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aZLNt8rbZYafUL_3Qfy1GwAAAIA"]
[Mon Feb 16 15:56:39.589020 2026] [:error] [pid 4348:tid 4395] [client 20.214.155.242:38615] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aZLNt3xbK-cCGKg9aytTpQAAAEA"]
[Mon Feb 16 15:56:39.878440 2026] [:error] [pid 4455:tid 4457] [client 20.214.155.242:38166] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aZLNtwNa-4dvQCL0rupB5wAAAMA"]
[Mon Feb 16 15:56:40.177285 2026] [:error] [pid 37004:tid 37008] [client 20.214.155.242:32795] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aZLNuFXWqA9gxE5oGmbpMAAAAQI"]
[Mon Feb 16 15:56:40.453429 2026] [:error] [pid 4348:tid 4396] [client 20.214.155.242:7860] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aZLNuHxbK-cCGKg9aytTvwAAAEE"]
[Mon Feb 16 15:56:40.730626 2026] [:error] [pid 26648:tid 26664] [client 20.214.155.242:31744] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aZLNuDT55fUixS3gmyjZKQAAAYs"]
[Mon Feb 16 15:56:41.015155 2026] [:error] [pid 37004:tid 37014] [client 20.214.155.242:46279] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aZLNuVXWqA9gxE5oGmbpNQAAAQg"]
[Mon Feb 16 15:56:41.295485 2026] [:error] [pid 4348:tid 4408] [client 20.214.155.242:21745] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aZLNuXxbK-cCGKg9aytTwQAAAE0"]
[Mon Feb 16 15:56:41.570059 2026] [:error] [pid 4349:tid 4441] [client 20.214.155.242:46435] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aZLNucrbZYafUL_3Qfy1IAAAAJM"]
[Mon Feb 16 15:56:41.854451 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:46380] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aZLNuTT55fUixS3gmyjZKwAAAZU"]
[Mon Feb 16 15:56:42.124965 2026] [:error] [pid 26648:tid 26653] [client 20.214.155.242:38622] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aZLNujT55fUixS3gmyjZLQAAAYA"]
[Mon Feb 16 15:56:42.398484 2026] [:error] [pid 26648:tid 26665] [client 20.214.155.242:31758] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aZLNujT55fUixS3gmyjZLgAAAYw"]
[Mon Feb 16 15:56:42.674569 2026] [:error] [pid 4455:tid 4465] [client 20.214.155.242:46221] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aZLNugNa-4dvQCL0rupB7QAAAMg"]
[Mon Feb 16 15:56:42.959140 2026] [:error] [pid 4349:tid 4432] [client 20.214.155.242:32773] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aZLNusrbZYafUL_3Qfy1IgAAAIo"]
[Mon Feb 16 15:56:43.229974 2026] [:error] [pid 4347:tid 4375] [client 20.214.155.242:46314] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aZLNuzFcjv6pEAnSEidmRwAAAAc"]
[Mon Feb 16 15:56:43.510871 2026] [:error] [pid 4348:tid 4397] [client 20.214.155.242:38654] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aZLNu3xbK-cCGKg9aytTxAAAAEI"]
[Mon Feb 16 15:56:43.779451 2026] [:error] [pid 4349:tid 4442] [client 20.214.155.242:46291] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/karak.php"] [unique_id "aZLNu8rbZYafUL_3Qfy1JQAAAJQ"]
[Mon Feb 16 15:56:44.062333 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:46246] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aZLNvDFcjv6pEAnSEidmSgAAABM"]
[Mon Feb 16 15:56:44.330723 2026] [:error] [pid 4347:tid 4385] [client 20.214.155.242:40901] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aZLNvDFcjv6pEAnSEidmSwAAABE"]
[Mon Feb 16 15:56:44.614068 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:46409] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aZLNvDT55fUixS3gmyjZMQAAAZY"]
[Mon Feb 16 15:56:44.884362 2026] [:error] [pid 26648:tid 26659] [client 20.214.155.242:38627] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trd.php"] [unique_id "aZLNvDT55fUixS3gmyjZMgAAAYY"]
[Mon Feb 16 15:56:45.161747 2026] [:error] [pid 4349:tid 4444] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Mon Feb 16 15:56:45.299986 2026] [:error] [pid 4349:tid 4423] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Mon Feb 16 15:56:45.440490 2026] [:error] [pid 4349:tid 4445] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Mon Feb 16 15:56:45.579644 2026] [:error] [pid 4349:tid 4441] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Mon Feb 16 15:56:45.713982 2026] [:error] [pid 4349:tid 4425] [client 20.214.155.242:46244] [client 20.214.155.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.155.242, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZLNvcrbZYafUL_3Qfy1LwAAAIM"]
[Mon Feb 16 15:56:45.717400 2026] [:error] [pid 4349:tid 4425] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 16 15:56:45.863242 2026] [:error] [pid 4349:tid 4438] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/aw.php
[Mon Feb 16 15:56:46.001806 2026] [:error] [pid 4349:tid 4430] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Mon Feb 16 15:56:46.139859 2026] [:error] [pid 4349:tid 4432] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Feb 16 15:56:46.277454 2026] [:error] [pid 4349:tid 4433] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Mon Feb 16 15:56:46.415998 2026] [:error] [pid 4349:tid 4439] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Mon Feb 16 15:56:46.556388 2026] [:error] [pid 4349:tid 4429] [client 20.214.155.242:46244] File does not exist: /usr/local/apache/htdocs/suspended-page/tcp.php
[Mon Feb 16 15:56:46.691336 2026] [:error] [pid 4349:tid 4442] [client 20.214.155.242:46244] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aZLNvsrbZYafUL_3Qfy1NgAAAJQ"]
[Mon Feb 16 15:56:46.960328 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:40926] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aZLNvjT55fUixS3gmyjZNQAAAZU"]
[Mon Feb 16 15:56:47.230782 2026] [:error] [pid 26648:tid 26677] [client 20.214.155.242:46453] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aZLNvzT55fUixS3gmyjZNgAAAZg"]
[Mon Feb 16 15:56:47.519167 2026] [:error] [pid 37004:tid 37025] [client 20.214.155.242:41721] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "aZLNv1XWqA9gxE5oGmbpNwAAARM"]
[Mon Feb 16 15:56:47.791470 2026] [:error] [pid 38888:tid 38906] [client 20.214.155.242:40900] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZLNv6mDoBJWPvV4pcMHrQAAAU8"]
[Mon Feb 16 15:56:48.068450 2026] [:error] [pid 37004:tid 37029] [client 20.214.155.242:46462] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZLNwFXWqA9gxE5oGmbpOQAAARc"]
[Mon Feb 16 15:56:48.353250 2026] [:error] [pid 4348:tid 4397] [client 20.214.155.242:7850] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZLNwHxbK-cCGKg9aytTygAAAEI"]
[Mon Feb 16 15:56:48.629051 2026] [:error] [pid 4455:tid 4481] [client 20.214.155.242:38601] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZLNwANa-4dvQCL0rupB9AAAANg"]
[Mon Feb 16 15:56:48.920149 2026] [:error] [pid 4349:tid 4429] [client 20.214.155.242:41492] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLNwMrbZYafUL_3Qfy1RwAAAIc"]
[Mon Feb 16 15:56:49.191443 2026] [:error] [pid 37004:tid 37007] [client 20.214.155.242:40860] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLNwVXWqA9gxE5oGmbpOgAAAQE"]
[Mon Feb 16 15:56:49.480615 2026] [:error] [pid 38888:tid 38900] [client 20.214.155.242:41724] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLNwamDoBJWPvV4pcMHsgAAAUk"]
[Mon Feb 16 15:56:49.759409 2026] [:error] [pid 4455:tid 4459] [client 20.214.155.242:41680] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLNwQNa-4dvQCL0rupB9gAAAMI"]
[Mon Feb 16 15:56:50.037910 2026] [:error] [pid 4348:tid 4399] [client 20.214.155.242:7812] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aZLNwnxbK-cCGKg9aytTzQAAAEQ"]
[Mon Feb 16 15:56:50.316008 2026] [:error] [pid 26648:tid 26670] [client 20.214.155.242:46388] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aZLNwjT55fUixS3gmyjZSAAAAZE"]
[Mon Feb 16 15:56:50.613117 2026] [:error] [pid 4347:tid 4374] [client 20.214.155.242:40954] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aZLNwjFcjv6pEAnSEidmUwAAAAY"]
[Mon Feb 16 15:56:50.893462 2026] [:error] [pid 4349:tid 4422] [client 20.214.155.242:29632] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aZLNwsrbZYafUL_3Qfy1SgAAAIA"]
[Mon Feb 16 15:56:51.165482 2026] [:error] [pid 26648:tid 26661] [client 20.214.155.242:40959] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aZLNwzT55fUixS3gmyjZTAAAAYg"]
[Mon Feb 16 15:56:51.453940 2026] [:error] [pid 38888:tid 38915] [client 20.214.155.242:46370] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aZLNw6mDoBJWPvV4pcMHtgAAAVg"]
[Mon Feb 16 15:56:51.732304 2026] [:error] [pid 26648:tid 26654] [client 20.214.155.242:41702] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aZLNwzT55fUixS3gmyjZUQAAAYE"]
[Mon Feb 16 15:56:52.020778 2026] [:error] [pid 4348:tid 4402] [client 20.214.155.242:40947] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ov.php"] [unique_id "aZLNxHxbK-cCGKg9aytT0AAAAEc"]
[Mon Feb 16 15:56:52.305246 2026] [:error] [pid 26648:tid 26663] [client 20.214.155.242:7819] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZLNxDT55fUixS3gmyjZVAAAAYo"]
[Mon Feb 16 15:56:52.596289 2026] [:error] [pid 37004:tid 37026] [client 20.214.155.242:30634] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZLNxFXWqA9gxE5oGmbpPQAAARQ"]
[Mon Feb 16 15:56:52.886004 2026] [:error] [pid 4349:tid 4441] [client 20.214.155.242:41701] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZLNxMrbZYafUL_3Qfy1SwAAAJM"]
[Mon Feb 16 15:56:53.154943 2026] [:error] [pid 26648:tid 26664] [client 20.214.155.242:30628] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZLNxTT55fUixS3gmyjZVQAAAYs"]
[Mon Feb 16 15:56:53.429613 2026] [:error] [pid 26648:tid 26656] [client 20.214.155.242:7838] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aZLNxTT55fUixS3gmyjZVgAAAYM"]
[Mon Feb 16 15:56:53.699649 2026] [:error] [pid 38888:tid 38900] [client 20.214.155.242:41515] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aZLNxamDoBJWPvV4pcMHuAAAAUk"]
[Mon Feb 16 15:56:53.973004 2026] [:error] [pid 37004:tid 37006] [client 20.214.155.242:46308] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aZLNxVXWqA9gxE5oGmbpPwAAAQA"]
[Mon Feb 16 15:56:54.241861 2026] [:error] [pid 4455:tid 4467] [client 20.214.155.242:46446] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aZLNxgNa-4dvQCL0rupB_AAAAMo"]
[Mon Feb 16 15:56:54.514373 2026] [:error] [pid 4455:tid 4463] [client 20.214.155.242:38592] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aZLNxgNa-4dvQCL0rupB_QAAAMY"]
[Mon Feb 16 15:56:54.788004 2026] [:error] [pid 26648:tid 26665] [client 20.214.155.242:46443] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aZLNxjT55fUixS3gmyjZWgAAAYw"]
[Mon Feb 16 15:56:55.064088 2026] [:error] [pid 26648:tid 26660] [client 20.214.155.242:41674] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aZLNxzT55fUixS3gmyjZXAAAAYc"]
[Mon Feb 16 15:56:55.336698 2026] [:error] [pid 4455:tid 4462] [client 20.214.155.242:46433] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aZLNxwNa-4dvQCL0rupB_gAAAMU"]
[Mon Feb 16 15:56:55.615976 2026] [:error] [pid 37004:tid 37011] [client 20.214.155.242:40833] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aZLNx1XWqA9gxE5oGmbpRQAAAQU"]
[Mon Feb 16 15:56:55.889203 2026] [:error] [pid 4349:tid 4437] [client 20.214.155.242:31751] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aZLNx8rbZYafUL_3Qfy1TQAAAI8"]
[Mon Feb 16 15:56:56.157394 2026] [:error] [pid 4349:tid 4439] [client 20.214.155.242:41496] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aZLNyMrbZYafUL_3Qfy1TgAAAJE"]
[Mon Feb 16 15:56:56.499602 2026] [:error] [pid 4349:tid 4429] [client 20.214.155.242:40115] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aZLNyMrbZYafUL_3Qfy1UAAAAIc"]
[Mon Feb 16 15:56:56.786632 2026] [:error] [pid 38888:tid 38902] [client 20.214.155.242:46295] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aZLNyKmDoBJWPvV4pcMHugAAAUs"]
[Mon Feb 16 15:56:57.058809 2026] [:error] [pid 4349:tid 4435] [client 20.214.155.242:30655] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aZLNycrbZYafUL_3Qfy1UgAAAI0"]
[Mon Feb 16 15:56:57.330368 2026] [:error] [pid 26648:tid 26668] [client 20.214.155.242:7227] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aZLNyTT55fUixS3gmyjZYAAAAY8"]
[Mon Feb 16 15:56:57.607825 2026] [:error] [pid 4347:tid 4383] [client 20.214.155.242:33692] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "aZLNyTFcjv6pEAnSEidmVgAAAA8"]
[Mon Feb 16 15:56:57.876845 2026] [:error] [pid 37004:tid 37029] [client 20.214.155.242:7169] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "aZLNyVXWqA9gxE5oGmbpSgAAARc"]
[Mon Feb 16 15:56:58.144746 2026] [:error] [pid 4348:tid 4400] [client 20.214.155.242:7811] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "aZLNynxbK-cCGKg9aytT1QAAAEU"]
[Mon Feb 16 15:56:58.415560 2026] [:error] [pid 4348:tid 4419] [client 20.214.155.242:41694] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "aZLNynxbK-cCGKg9aytT1gAAAFg"]
[Mon Feb 16 15:56:58.694875 2026] [:error] [pid 37004:tid 37007] [client 20.214.155.242:46325] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "aZLNylXWqA9gxE5oGmbpSwAAAQE"]
[Mon Feb 16 15:56:58.968044 2026] [:error] [pid 4348:tid 4410] [client 20.214.155.242:40884] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aZLNynxbK-cCGKg9aytT2gAAAE8"]
[Mon Feb 16 15:56:59.242112 2026] [:error] [pid 26648:tid 26665] [client 20.214.155.242:30635] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aZLNyzT55fUixS3gmyjZZAAAAYw"]
[Mon Feb 16 15:56:59.511370 2026] [:error] [pid 4348:tid 4408] [client 20.214.155.242:40664] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aZLNy3xbK-cCGKg9aytT3AAAAE0"]
[Mon Feb 16 15:56:59.786505 2026] [:error] [pid 4348:tid 4412] [client 20.214.155.242:7228] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/async.php"] [unique_id "aZLNy3xbK-cCGKg9aytT3QAAAFE"]
[Mon Feb 16 15:57:00.056737 2026] [:error] [pid 26648:tid 26657] [client 20.214.155.242:41500] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZLNzDT55fUixS3gmyjZZwAAAYQ"]
[Mon Feb 16 15:57:00.330270 2026] [:error] [pid 4347:tid 4384] [client 20.214.155.242:41671] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZLNzDFcjv6pEAnSEidmWAAAABA"]
[Mon Feb 16 15:57:00.599524 2026] [:error] [pid 38888:tid 38905] [client 20.214.155.242:7179] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZLNzKmDoBJWPvV4pcMHwQAAAU4"]
[Mon Feb 16 15:57:00.869162 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:39232] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZLNzDT55fUixS3gmyjZaQAAAZY"]
[Mon Feb 16 15:57:01.160931 2026] [:error] [pid 4347:tid 4382] [client 20.214.155.242:7200] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZLNzTFcjv6pEAnSEidmWQAAAA4"]
[Mon Feb 16 15:57:01.467744 2026] [:error] [pid 4348:tid 4401] [client 20.214.155.242:40086] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZLNzXxbK-cCGKg9aytT5AAAAEY"]
[Mon Feb 16 15:57:01.737511 2026] [:error] [pid 4348:tid 4415] [client 20.214.155.242:39265] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZLNzXxbK-cCGKg9aytT5QAAAFQ"]
[Mon Feb 16 15:57:02.008488 2026] [:error] [pid 4455:tid 4476] [client 20.214.155.242:41487] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZLNzgNa-4dvQCL0rupCBAAAANM"]
[Mon Feb 16 15:57:02.277600 2026] [:error] [pid 4455:tid 4467] [client 20.214.155.242:41481] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aZLNzgNa-4dvQCL0rupCBQAAAMo"]
[Mon Feb 16 15:57:02.548894 2026] [:error] [pid 26648:tid 26661] [client 20.214.155.242:8090] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aZLNzjT55fUixS3gmyjZbQAAAYg"]
[Mon Feb 16 15:57:02.818304 2026] [:error] [pid 38888:tid 38901] [client 20.214.155.242:33723] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aZLNzqmDoBJWPvV4pcMHxgAAAUo"]
[Mon Feb 16 15:57:03.096075 2026] [:error] [pid 26648:tid 26653] [client 20.214.155.242:41499] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "aZLNzzT55fUixS3gmyjZcAAAAYA"]
[Mon Feb 16 15:57:03.365526 2026] [:error] [pid 38888:tid 38898] [client 20.214.155.242:39280] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aZLNz6mDoBJWPvV4pcMHxwAAAUc"]
[Mon Feb 16 15:57:03.644137 2026] [:error] [pid 26648:tid 26670] [client 20.214.155.242:40936] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aZLNzzT55fUixS3gmyjZdgAAAZE"]
[Mon Feb 16 15:57:03.921258 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:39259] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aZLNzzT55fUixS3gmyjZeQAAAZY"]
[Mon Feb 16 15:57:04.194378 2026] [:error] [pid 4455:tid 4474] [client 20.214.155.242:39246] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aZLN0ANa-4dvQCL0rupCBwAAANE"]
[Mon Feb 16 15:57:04.468654 2026] [:error] [pid 38888:tid 38891] [client 20.214.155.242:39264] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aZLN0KmDoBJWPvV4pcMHyAAAAUA"]
[Mon Feb 16 15:57:04.744047 2026] [:error] [pid 26648:tid 26672] [client 20.214.155.242:46271] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aZLN0DT55fUixS3gmyjZfgAAAZM"]
[Mon Feb 16 15:57:05.016629 2026] [:error] [pid 26648:tid 26663] [client 20.214.155.242:39238] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aZLN0TT55fUixS3gmyjZfwAAAYo"]
[Mon Feb 16 15:57:05.289102 2026] [:error] [pid 4455:tid 4477] [client 20.214.155.242:39239] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aZLN0QNa-4dvQCL0rupCCQAAANQ"]
[Mon Feb 16 15:57:05.567227 2026] [:error] [pid 37004:tid 37022] [client 20.214.155.242:30654] [client 20.214.155.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aZLN0VXWqA9gxE5oGmbpTgAAARA"]
[Mon Feb 16 15:57:05.837525 2026] [:error] [pid 4348:tid 4403] [client 20.214.155.242:7177] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aZLN0XxbK-cCGKg9aytT6AAAAEg"]
[Mon Feb 16 15:57:06.117831 2026] [:error] [pid 4349:tid 4444] [client 20.214.155.242:33699] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aZLN0srbZYafUL_3Qfy1YQAAAJY"]
[Mon Feb 16 15:57:06.387614 2026] [:error] [pid 4347:tid 4392] [client 20.214.155.242:7217] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lc.php"] [unique_id "aZLN0jFcjv6pEAnSEidmZAAAABg"]
[Mon Feb 16 15:57:06.663004 2026] [:error] [pid 26648:tid 26662] [client 20.214.155.242:30600] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZLN0jT55fUixS3gmyjZggAAAYk"]
[Mon Feb 16 15:57:06.939564 2026] [:error] [pid 37004:tid 37021] [client 20.214.155.242:41526] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZLN0lXWqA9gxE5oGmbpUQAAAQ8"]
[Mon Feb 16 15:57:07.210260 2026] [:error] [pid 4455:tid 4468] [client 20.214.155.242:30609] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZLN0wNa-4dvQCL0rupCDAAAAMs"]
[Mon Feb 16 15:57:07.497887 2026] [:error] [pid 4455:tid 4469] [client 20.214.155.242:8116] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cbrfo.php"] [unique_id "aZLN0wNa-4dvQCL0rupCDQAAAMw"]
[Mon Feb 16 15:57:07.774927 2026] [:error] [pid 26648:tid 26657] [client 20.214.155.242:7198] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aZLN0zT55fUixS3gmyjZhAAAAYQ"]
[Mon Feb 16 15:57:08.045423 2026] [:error] [pid 4455:tid 4479] [client 20.214.155.242:37478] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aZLN1ANa-4dvQCL0rupCDwAAANY"]
[Mon Feb 16 15:57:08.318524 2026] [:error] [pid 38888:tid 38912] [client 20.214.155.242:43405] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aZLN1KmDoBJWPvV4pcMHzwAAAVU"]
[Mon Feb 16 15:57:08.590299 2026] [:error] [pid 38888:tid 38910] [client 20.214.155.242:30626] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inc.php"] [unique_id "aZLN1KmDoBJWPvV4pcMH0AAAAVM"]
[Mon Feb 16 15:57:08.860724 2026] [:error] [pid 4347:tid 4388] [client 20.214.155.242:37487] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZLN1DFcjv6pEAnSEidmZwAAABQ"]
[Mon Feb 16 15:57:09.151655 2026] [:error] [pid 4348:tid 4417] [client 20.214.155.242:46289] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZLN1XxbK-cCGKg9aytT7wAAAFY"]
[Mon Feb 16 15:57:09.424111 2026] [:error] [pid 26648:tid 26663] [client 20.214.155.242:39260] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZLN1TT55fUixS3gmyjZhgAAAYo"]
[Mon Feb 16 15:57:09.694906 2026] [:error] [pid 4349:tid 4429] [client 20.214.155.242:37501] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZLN1crbZYafUL_3Qfy1YgAAAIc"]
[Mon Feb 16 15:57:09.964245 2026] [:error] [pid 4455:tid 4475] [client 20.214.155.242:37496] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aZLN1QNa-4dvQCL0rupCEwAAANI"]
[Mon Feb 16 15:57:10.366800 2026] [:error] [pid 26648:tid 26653] [client 20.214.155.242:33689] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aZLN1jT55fUixS3gmyjZhwAAAYA"]
[Mon Feb 16 15:57:10.641334 2026] [:error] [pid 26648:tid 26662] [client 20.214.155.242:43395] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aZLN1jT55fUixS3gmyjZiQAAAYk"]
[Mon Feb 16 15:57:11.011042 2026] [:error] [pid 38888:tid 38891] [client 20.214.155.242:39285] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aZLN16mDoBJWPvV4pcMH1wAAAUA"]
[Mon Feb 16 15:57:11.287134 2026] [:error] [pid 4455:tid 4480] [client 20.214.155.242:40077] [client 20.214.155.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZLN1wNa-4dvQCL0rupCFgAAANc"]
[Mon Feb 16 15:57:11.564406 2026] [:error] [pid 26648:tid 26671] [client 20.214.155.242:37223] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aZLN1zT55fUixS3gmyjZigAAAZI"]
[Mon Feb 16 15:57:11.850637 2026] [:error] [pid 37004:tid 37015] [client 20.214.155.242:43429] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aZLN11XWqA9gxE5oGmbpYgAAAQk"]
[Mon Feb 16 15:57:12.133108 2026] [:error] [pid 4347:tid 4372] [client 20.214.155.242:33679] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aZLN2DFcjv6pEAnSEidmaAAAAAQ"]
[Mon Feb 16 15:57:12.404613 2026] [:error] [pid 4349:tid 4435] [client 20.214.155.242:40068] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aZLN2MrbZYafUL_3Qfy1ZQAAAI0"]
[Mon Feb 16 15:57:12.676044 2026] [:error] [pid 37004:tid 37024] [client 20.214.155.242:43424] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aZLN2FXWqA9gxE5oGmbpYwAAARI"]
[Mon Feb 16 15:57:12.985369 2026] [:error] [pid 38888:tid 38903] [client 20.214.155.242:37465] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aZLN2KmDoBJWPvV4pcMH2QAAAUw"]
[Mon Feb 16 15:57:13.304686 2026] [:error] [pid 4348:tid 4400] [client 20.214.155.242:40065] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aZLN2XxbK-cCGKg9aytT8wAAAEU"]
[Mon Feb 16 15:57:13.574904 2026] [:error] [pid 4349:tid 4433] [client 20.214.155.242:39257] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aZLN2crbZYafUL_3Qfy1aAAAAIs"]
[Mon Feb 16 15:57:13.850925 2026] [:error] [pid 4455:tid 4479] [client 20.214.155.242:41689] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aZLN2QNa-4dvQCL0rupCGwAAANY"]
[Mon Feb 16 15:57:14.132288 2026] [:error] [pid 4349:tid 4434] [client 20.214.155.242:37486] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aZLN2srbZYafUL_3Qfy1aQAAAIw"]
[Mon Feb 16 15:57:14.453862 2026] [:error] [pid 4348:tid 4419] [client 20.214.155.242:39286] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aZLN2nxbK-cCGKg9aytT9QAAAFg"]
[Mon Feb 16 15:57:14.730135 2026] [:error] [pid 4348:tid 4411] [client 20.214.155.242:33676] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aZLN2nxbK-cCGKg9aytT9gAAAFA"]
[Mon Feb 16 15:57:15.004677 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:39256] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aZLN2zFcjv6pEAnSEidmbQAAABM"]
[Mon Feb 16 15:57:15.281483 2026] [:error] [pid 4347:tid 4390] [client 20.214.155.242:7215] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aZLN2zFcjv6pEAnSEidmbgAAABY"]
[Mon Feb 16 15:57:15.576185 2026] [:error] [pid 38888:tid 38904] [client 20.214.155.242:37193] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/muzu.php"] [unique_id "aZLN26mDoBJWPvV4pcMH3AAAAU0"]
[Mon Feb 16 15:57:15.862400 2026] [:error] [pid 38888:tid 38912] [client 20.214.155.242:37460] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aZLN26mDoBJWPvV4pcMH3QAAAVU"]
[Mon Feb 16 15:57:16.130404 2026] [:error] [pid 4347:tid 4389] [client 20.214.155.242:46293] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aZLN3DFcjv6pEAnSEidmcAAAABU"]
[Mon Feb 16 15:57:16.405590 2026] [:error] [pid 4455:tid 4474] [client 20.214.155.242:39295] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aZLN3ANa-4dvQCL0rupCIQAAANE"]
[Mon Feb 16 15:57:16.685761 2026] [:error] [pid 4347:tid 4369] [client 20.214.155.242:37216] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reze.php"] [unique_id "aZLN3DFcjv6pEAnSEidmcQAAAAE"]
[Mon Feb 16 15:57:16.983253 2026] [:error] [pid 4455:tid 4468] [client 20.214.155.242:40841] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aZLN3ANa-4dvQCL0rupCIwAAAMs"]
[Mon Feb 16 15:57:17.254672 2026] [:error] [pid 4349:tid 4441] [client 20.214.155.242:37185] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aZLN3crbZYafUL_3Qfy1bAAAAJM"]
[Mon Feb 16 15:57:17.549442 2026] [:error] [pid 26648:tid 26666] [client 20.214.155.242:33715] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aZLN3TT55fUixS3gmyjZjQAAAY0"]
[Mon Feb 16 15:57:17.818608 2026] [:error] [pid 4347:tid 4376] [client 20.214.155.242:7218] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aZLN3TFcjv6pEAnSEidmdQAAAAg"]
[Mon Feb 16 15:57:18.101531 2026] [:error] [pid 26648:tid 26654] [client 20.214.155.242:41169] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZLN3jT55fUixS3gmyjZkAAAAYE"]
[Mon Feb 16 15:57:18.369409 2026] [:error] [pid 38888:tid 38892] [client 20.214.155.242:37444] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZLN3qmDoBJWPvV4pcMH4QAAAUE"]
[Mon Feb 16 15:57:18.660336 2026] [:error] [pid 38888:tid 38899] [client 20.214.155.242:39244] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZLN3qmDoBJWPvV4pcMH4gAAAUg"]
[Mon Feb 16 15:57:18.931751 2026] [:error] [pid 4347:tid 4385] [client 20.214.155.242:8093] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZLN3jFcjv6pEAnSEidmfQAAABE"]
[Mon Feb 16 15:57:19.199810 2026] [:error] [pid 4349:tid 4437] [client 20.214.155.242:8109] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thebe.php"] [unique_id "aZLN38rbZYafUL_3Qfy1bwAAAI8"]
[Mon Feb 16 15:57:19.467700 2026] [:error] [pid 4349:tid 4431] [client 20.214.155.242:30986] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thebe.php"] [unique_id "aZLN38rbZYafUL_3Qfy1cAAAAIk"]
[Mon Feb 16 15:57:19.806628 2026] [:error] [pid 37004:tid 37012] [client 20.214.155.242:37484] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thebe.php"] [unique_id "aZLN31XWqA9gxE5oGmbpbQAAAQY"]
[Mon Feb 16 15:57:20.081103 2026] [:error] [pid 4349:tid 4423] [client 20.214.155.242:37491] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thebe.php"] [unique_id "aZLN4MrbZYafUL_3Qfy1cwAAAIE"]
[Mon Feb 16 15:57:20.354282 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:43398] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddd.php"] [unique_id "aZLN4DT55fUixS3gmyjZlQAAAZU"]
[Mon Feb 16 15:57:20.622134 2026] [:error] [pid 4347:tid 4384] [client 20.214.155.242:43397] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddd.php"] [unique_id "aZLN4DFcjv6pEAnSEidmgQAAABA"]
[Mon Feb 16 15:57:20.900119 2026] [:error] [pid 38888:tid 38905] [client 20.214.155.242:37194] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddd.php"] [unique_id "aZLN4KmDoBJWPvV4pcMH5wAAAU4"]
[Mon Feb 16 15:57:21.176069 2026] [:error] [pid 37004:tid 37028] [client 20.214.155.242:31031] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddd.php"] [unique_id "aZLN4VXWqA9gxE5oGmbpcgAAARY"]
[Mon Feb 16 15:57:21.444624 2026] [:error] [pid 4348:tid 4405] [client 20.214.155.242:39286] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aZLN4XxbK-cCGKg9aytT-AAAAEo"]
[Mon Feb 16 15:57:21.715751 2026] [:error] [pid 37004:tid 37013] [client 20.214.155.242:41152] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aZLN4VXWqA9gxE5oGmbpcwAAAQc"]
[Mon Feb 16 15:57:21.986177 2026] [:error] [pid 4348:tid 4396] [client 20.214.155.242:7224] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aZLN4XxbK-cCGKg9aytT-QAAAEE"]
[Mon Feb 16 15:57:22.262504 2026] [:error] [pid 26648:tid 26662] [client 20.214.155.242:33722] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aZLN4jT55fUixS3gmyjZmAAAAYk"]
[Mon Feb 16 15:57:22.546878 2026] [:error] [pid 4349:tid 4422] [client 20.214.155.242:30595] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZLN4srbZYafUL_3Qfy1dgAAAIA"]
[Mon Feb 16 15:57:22.821835 2026] [:error] [pid 4347:tid 4371] [client 20.214.155.242:37462] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZLN4jFcjv6pEAnSEidmhAAAAAM"]
[Mon Feb 16 15:57:23.103646 2026] [:error] [pid 4348:tid 4408] [client 20.214.155.242:39243] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZLN43xbK-cCGKg9aytT-wAAAE0"]
[Mon Feb 16 15:57:23.375613 2026] [:error] [pid 4349:tid 4438] [client 20.214.155.242:8123] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZLN48rbZYafUL_3Qfy1dwAAAJA"]
[Mon Feb 16 15:57:23.650231 2026] [:error] [pid 4455:tid 4480] [client 20.214.155.242:7214] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aZLN4wNa-4dvQCL0rupCKAAAANc"]
[Mon Feb 16 15:57:23.923003 2026] [:error] [pid 4455:tid 4466] [client 20.214.155.242:43422] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aZLN4wNa-4dvQCL0rupCKQAAAMk"]
[Mon Feb 16 15:57:24.202921 2026] [:error] [pid 26648:tid 26654] [client 20.214.155.242:39245] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aZLN5DT55fUixS3gmyjZmwAAAYE"]
[Mon Feb 16 15:57:24.471470 2026] [:error] [pid 26648:tid 26677] [client 20.214.155.242:41189] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aZLN5DT55fUixS3gmyjZnAAAAZg"]
[Mon Feb 16 15:57:24.744927 2026] [:error] [pid 26648:tid 26658] [client 20.214.155.242:33687] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLN5DT55fUixS3gmyjZnQAAAYU"]
[Mon Feb 16 15:57:25.018859 2026] [:error] [pid 26648:tid 26669] [client 20.214.155.242:31010] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLN5TT55fUixS3gmyjZnwAAAZA"]
[Mon Feb 16 15:57:25.294492 2026] [:error] [pid 4349:tid 4432] [client 20.214.155.242:41727] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLN5crbZYafUL_3Qfy1ewAAAIo"]
[Mon Feb 16 15:57:25.562905 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:8101] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "aZLN5TT55fUixS3gmyjZogAAAZU"]
[Mon Feb 16 15:57:25.831749 2026] [:error] [pid 4349:tid 4437] [client 20.214.155.242:37224] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZLN5crbZYafUL_3Qfy1fAAAAI8"]
[Mon Feb 16 15:57:26.117115 2026] [:error] [pid 4348:tid 4403] [client 20.214.155.242:39254] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZLN5nxbK-cCGKg9aytT_gAAAEg"]
[Mon Feb 16 15:57:26.386650 2026] [:error] [pid 4455:tid 4461] [client 20.214.155.242:40893] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZLN5gNa-4dvQCL0rupCLQAAAMQ"]
[Mon Feb 16 15:57:26.663147 2026] [:error] [pid 4347:tid 4373] [client 20.214.155.242:43407] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "aZLN5jFcjv6pEAnSEidmhQAAAAU"]
[Mon Feb 16 15:57:26.931970 2026] [:error] [pid 37004:tid 37019] [client 20.214.155.242:30992] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLN5lXWqA9gxE5oGmbpdQAAAQ0"]
[Mon Feb 16 15:57:27.259046 2026] [:error] [pid 38888:tid 38915] [client 20.214.155.242:37490] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLN56mDoBJWPvV4pcMH6wAAAVg"]
[Mon Feb 16 15:57:27.534000 2026] [:error] [pid 37004:tid 37018] [client 20.214.155.242:43412] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLN51XWqA9gxE5oGmbpegAAAQw"]
[Mon Feb 16 15:57:27.811811 2026] [:error] [pid 4349:tid 4442] [client 20.214.155.242:30615] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLN58rbZYafUL_3Qfy1fQAAAJQ"]
[Mon Feb 16 15:57:28.092097 2026] [:error] [pid 4348:tid 4419] [client 20.214.155.242:31019] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN6HxbK-cCGKg9aytUAgAAAFg"]
[Mon Feb 16 15:57:28.361161 2026] [:error] [pid 4347:tid 4376] [client 20.214.155.242:37499] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN6DFcjv6pEAnSEidmiAAAAAg"]
[Mon Feb 16 15:57:28.633072 2026] [:error] [pid 38888:tid 38904] [client 20.214.155.242:40090] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN6KmDoBJWPvV4pcMH7AAAAU0"]
[Mon Feb 16 15:57:28.901374 2026] [:error] [pid 26648:tid 26668] [client 20.214.155.242:37220] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN6DT55fUixS3gmyjZqAAAAY8"]
[Mon Feb 16 15:57:29.173926 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:33703] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZLN6TFcjv6pEAnSEidmiQAAABM"]
[Mon Feb 16 15:57:29.454512 2026] [:error] [pid 38888:tid 38913] [client 20.214.155.242:41197] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZLN6amDoBJWPvV4pcMH7gAAAVY"]
[Mon Feb 16 15:57:29.723285 2026] [:error] [pid 38888:tid 38901] [client 20.214.155.242:37500] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZLN6amDoBJWPvV4pcMH7wAAAUo"]
[Mon Feb 16 15:57:29.996666 2026] [:error] [pid 4347:tid 4388] [client 20.214.155.242:43452] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aZLN6TFcjv6pEAnSEidmjAAAABQ"]
[Mon Feb 16 15:57:30.266456 2026] [:error] [pid 37004:tid 37017] [client 20.214.155.242:41203] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZLN6lXWqA9gxE5oGmbpfQAAAQs"]
[Mon Feb 16 15:57:30.546032 2026] [:error] [pid 4455:tid 4472] [client 20.214.155.242:37235] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZLN6gNa-4dvQCL0rupCNAAAAM8"]
[Mon Feb 16 15:57:30.835155 2026] [:error] [pid 4349:tid 4423] [client 20.214.155.242:30623] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZLN6srbZYafUL_3Qfy1fgAAAIE"]
[Mon Feb 16 15:57:31.107723 2026] [:error] [pid 4348:tid 4417] [client 20.214.155.242:31688] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aZLN63xbK-cCGKg9aytUBQAAAFY"]
[Mon Feb 16 15:57:31.393106 2026] [:error] [pid 4347:tid 4384] [client 20.214.155.242:37456] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN6zFcjv6pEAnSEidmjgAAABA"]
[Mon Feb 16 15:57:31.661920 2026] [:error] [pid 37004:tid 37030] [client 20.214.155.242:37190] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN61XWqA9gxE5oGmbpfgAAARg"]
[Mon Feb 16 15:57:31.975411 2026] [:error] [pid 38888:tid 38911] [client 20.214.155.242:41160] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN66mDoBJWPvV4pcMH8gAAAVQ"]
[Mon Feb 16 15:57:32.246974 2026] [:error] [pid 4455:tid 4461] [client 20.214.155.242:43416] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN7ANa-4dvQCL0rupCNgAAAMQ"]
[Mon Feb 16 15:57:32.533029 2026] [:error] [pid 4455:tid 4477] [client 20.214.155.242:39278] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN7ANa-4dvQCL0rupCNwAAANQ"]
[Mon Feb 16 15:57:32.803943 2026] [:error] [pid 38888:tid 38900] [client 20.214.155.242:39247] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN7KmDoBJWPvV4pcMH9AAAAUk"]
[Mon Feb 16 15:57:33.079149 2026] [:error] [pid 4455:tid 4465] [client 20.214.155.242:8073] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN7QNa-4dvQCL0rupCOQAAAMg"]
[Mon Feb 16 15:57:33.350730 2026] [:error] [pid 37004:tid 37026] [client 20.214.155.242:8084] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aZLN7VXWqA9gxE5oGmbpgAAAARQ"]
[Mon Feb 16 15:57:33.624946 2026] [:error] [pid 4455:tid 4480] [client 20.214.155.242:31751] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aZLN7QNa-4dvQCL0rupCPAAAANc"]
[Mon Feb 16 15:57:33.894586 2026] [:error] [pid 4455:tid 4458] [client 20.214.155.242:37195] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aZLN7QNa-4dvQCL0rupCPQAAAME"]
[Mon Feb 16 15:57:34.298938 2026] [:error] [pid 4455:tid 4466] [client 20.214.155.242:37503] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aZLN7gNa-4dvQCL0rupCPgAAAMk"]
[Mon Feb 16 15:57:34.568470 2026] [:error] [pid 4455:tid 4463] [client 20.214.155.242:31690] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aZLN7gNa-4dvQCL0rupCQAAAAMY"]
[Mon Feb 16 15:57:34.849457 2026] [:error] [pid 4348:tid 4416] [client 20.214.155.242:37244] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN7nxbK-cCGKg9aytUCQAAAFU"]
[Mon Feb 16 15:57:35.121840 2026] [:error] [pid 4348:tid 4414] [client 20.214.155.242:37462] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN73xbK-cCGKg9aytUCgAAAFM"]
[Mon Feb 16 15:57:35.394714 2026] [:error] [pid 38888:tid 38891] [client 20.214.155.242:31735] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN76mDoBJWPvV4pcMH9gAAAUA"]
[Mon Feb 16 15:57:35.662414 2026] [:error] [pid 37004:tid 37029] [client 20.214.155.242:40101] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZLN71XWqA9gxE5oGmbpgwAAARc"]
[Mon Feb 16 15:57:35.933526 2026] [:error] [pid 37004:tid 37016] [client 20.214.155.242:41157] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aZLN71XWqA9gxE5oGmbphAAAAQo"]
[Mon Feb 16 15:57:36.208628 2026] [:error] [pid 4349:tid 4438] [client 20.214.155.242:33713] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aZLN8MrbZYafUL_3Qfy1gwAAAJA"]
[Mon Feb 16 15:57:36.642691 2026] [:error] [pid 4455:tid 4467] [client 20.214.155.242:37214] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aZLN8ANa-4dvQCL0rupCQwAAAMo"]
[Mon Feb 16 15:57:36.916310 2026] [:error] [pid 4347:tid 4375] [client 20.214.155.242:39279] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aZLN8DFcjv6pEAnSEidmlAAAAAc"]
[Mon Feb 16 15:57:37.187482 2026] [:error] [pid 4455:tid 4471] [client 20.214.155.242:39281] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZLN8QNa-4dvQCL0rupCRAAAAM4"]
[Mon Feb 16 15:57:37.472946 2026] [:error] [pid 37004:tid 37009] [client 20.214.155.242:31736] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZLN8VXWqA9gxE5oGmbpiAAAAQM"]
[Mon Feb 16 15:57:37.748652 2026] [:error] [pid 37004:tid 37007] [client 20.214.155.242:8119] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZLN8VXWqA9gxE5oGmbpiQAAAQE"]
[Mon Feb 16 15:57:38.033671 2026] [:error] [pid 4348:tid 4410] [client 20.214.155.242:32771] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZLN8nxbK-cCGKg9aytUEAAAAE8"]
[Mon Feb 16 15:57:38.310076 2026] [:error] [pid 37004:tid 37027] [client 20.214.155.242:41175] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZLN8lXWqA9gxE5oGmbpiwAAARU"]
[Mon Feb 16 15:57:38.577982 2026] [:error] [pid 4349:tid 4436] [client 20.214.155.242:46280] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZLN8srbZYafUL_3Qfy1hgAAAI4"]
[Mon Feb 16 15:57:38.855785 2026] [:error] [pid 26648:tid 26653] [client 20.214.155.242:43399] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZLN8jT55fUixS3gmyjZsgAAAYA"]
[Mon Feb 16 15:57:39.134898 2026] [:error] [pid 4347:tid 4388] [client 20.214.155.242:39233] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZLN8zFcjv6pEAnSEidmmQAAABQ"]
[Mon Feb 16 15:57:39.410590 2026] [:error] [pid 4347:tid 4383] [client 20.214.155.242:41202] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZLN8zFcjv6pEAnSEidmmgAAAA8"]
[Mon Feb 16 15:57:39.689411 2026] [:error] [pid 37004:tid 37019] [client 20.214.155.242:41198] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZLN81XWqA9gxE5oGmbpjgAAAQ0"]
[Mon Feb 16 15:57:39.966794 2026] [:error] [pid 26648:tid 26666] [client 20.214.155.242:40072] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZLN8zT55fUixS3gmyjZtwAAAY0"]
[Mon Feb 16 15:57:40.259258 2026] [:error] [pid 4347:tid 4384] [client 20.214.155.242:8065] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aZLN9DFcjv6pEAnSEidmmwAAABA"]
[Mon Feb 16 15:57:40.529120 2026] [:error] [pid 37004:tid 37012] [client 20.214.155.242:37222] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aZLN9FXWqA9gxE5oGmbpjwAAAQY"]
[Mon Feb 16 15:57:40.805950 2026] [:error] [pid 37004:tid 37021] [client 20.214.155.242:37215] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aZLN9FXWqA9gxE5oGmbpkAAAAQ8"]
[Mon Feb 16 15:57:41.084293 2026] [:error] [pid 26648:tid 26670] [client 20.214.155.242:39241] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aZLN9TT55fUixS3gmyjZuQAAAZE"]
[Mon Feb 16 15:57:41.359399 2026] [:error] [pid 37004:tid 37018] [client 20.214.155.242:33697] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "aZLN9VXWqA9gxE5oGmbpkgAAAQw"]
[Mon Feb 16 15:57:41.673450 2026] [:error] [pid 37004:tid 37014] [client 20.214.155.242:40896] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZLN9VXWqA9gxE5oGmbplAAAAQg"]
[Mon Feb 16 15:57:41.943634 2026] [:error] [pid 4347:tid 4371] [client 20.214.155.242:39291] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZLN9TFcjv6pEAnSEidmngAAAAM"]
[Mon Feb 16 15:57:42.229921 2026] [:error] [pid 4348:tid 4405] [client 20.214.155.242:39258] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZLN9nxbK-cCGKg9aytUEgAAAEo"]
[Mon Feb 16 15:57:42.499311 2026] [:error] [pid 4348:tid 4396] [client 20.214.155.242:7186] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZLN9nxbK-cCGKg9aytUEwAAAEE"]
[Mon Feb 16 15:57:42.771434 2026] [:error] [pid 4348:tid 4397] [client 20.214.155.242:33698] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aZLN9nxbK-cCGKg9aytUFAAAAEI"]
[Mon Feb 16 15:57:43.042247 2026] [:error] [pid 26648:tid 26671] [client 20.214.155.242:39244] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aZLN9zT55fUixS3gmyjZugAAAZI"]
[Mon Feb 16 15:57:43.322076 2026] [:error] [pid 26648:tid 26658] [client 20.214.155.242:37451] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aZLN9zT55fUixS3gmyjZuwAAAYU"]
[Mon Feb 16 15:57:43.599926 2026] [:error] [pid 4347:tid 4392] [client 20.214.155.242:33718] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "aZLN9zFcjv6pEAnSEidmoQAAABg"]
[Mon Feb 16 15:57:43.874891 2026] [:error] [pid 37004:tid 37007] [client 20.214.155.242:39269] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aZLN91XWqA9gxE5oGmbplwAAAQE"]
[Mon Feb 16 15:57:44.150270 2026] [:error] [pid 26648:tid 26665] [client 20.214.155.242:37207] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aZLN-DT55fUixS3gmyjZxAAAAYw"]
[Mon Feb 16 15:57:44.452008 2026] [:error] [pid 4455:tid 4463] [client 20.214.155.242:46291] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aZLN-ANa-4dvQCL0rupCSgAAAMY"]
[Mon Feb 16 15:57:44.730180 2026] [:error] [pid 4349:tid 4430] [client 20.214.155.242:38596] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aZLN-MrbZYafUL_3Qfy1jwAAAIg"]
[Mon Feb 16 15:57:45.006415 2026] [:error] [pid 4349:tid 4424] [client 20.214.155.242:31727] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aZLN-crbZYafUL_3Qfy1kQAAAII"]
[Mon Feb 16 15:57:45.289138 2026] [:error] [pid 4348:tid 4415] [client 20.214.155.242:8067] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aZLN-XxbK-cCGKg9aytUGgAAAFQ"]
[Mon Feb 16 15:57:45.563715 2026] [:error] [pid 4455:tid 4464] [client 20.214.155.242:8112] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aZLN-QNa-4dvQCL0rupCTQAAAMc"]
[Mon Feb 16 15:57:45.849282 2026] [:error] [pid 4348:tid 4411] [client 20.214.155.242:39290] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aZLN-XxbK-cCGKg9aytUGwAAAFA"]
[Mon Feb 16 15:57:46.156396 2026] [:error] [pid 4347:tid 4368] [client 20.214.155.242:39272] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Feb 16 15:57:46.296842 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:39272] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Feb 16 15:57:46.735919 2026] [:error] [pid 4347:tid 4383] [client 20.214.155.242:39272] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Mon Feb 16 15:57:46.870656 2026] [:error] [pid 4347:tid 4379] [client 20.214.155.242:39272] [client 20.214.155.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aZLN-jFcjv6pEAnSEidmqQAAAAs"]
[Mon Feb 16 15:57:47.153780 2026] [:error] [pid 26648:tid 26671] [client 20.214.155.242:41210] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Mon Feb 16 15:57:47.293249 2026] [:error] [pid 26648:tid 26658] [client 20.214.155.242:41210] File does not exist: /usr/local/apache/htdocs/suspended-page/jane.php
[Mon Feb 16 15:57:47.436163 2026] [:error] [pid 26648:tid 26654] [client 20.214.155.242:41210] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Feb 16 15:57:47.573614 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:41210] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Feb 16 15:57:47.713896 2026] [:error] [pid 26648:tid 26672] [client 20.214.155.242:41210] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Mon Feb 16 15:57:47.857837 2026] [:error] [pid 26648:tid 26669] [client 20.214.155.242:41210] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Feb 16 15:57:47.994322 2026] [:error] [pid 26648:tid 26663] [client 20.214.155.242:41210] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aZLN-zT55fUixS3gmyjZzwAAAYo"]
[Mon Feb 16 15:57:48.268828 2026] [:error] [pid 4348:tid 4402] [client 20.214.155.242:39234] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aZLN_HxbK-cCGKg9aytUIAAAAEc"]
[Mon Feb 16 15:57:48.537544 2026] [:error] [pid 26648:tid 26677] [client 20.214.155.242:46391] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aZLN_DT55fUixS3gmyjZ0QAAAZg"]
[Mon Feb 16 15:57:48.814781 2026] [:error] [pid 26648:tid 26656] [client 20.214.155.242:40839] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxxx.php"] [unique_id "aZLN_DT55fUixS3gmyjZ0wAAAYM"]
[Mon Feb 16 15:57:49.084144 2026] [:error] [pid 26648:tid 26655] [client 20.214.155.242:33668] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZLN_TT55fUixS3gmyjZ1QAAAYI"]
[Mon Feb 16 15:57:49.351631 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:8104] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZLN_TT55fUixS3gmyjZ1wAAAZY"]
[Mon Feb 16 15:57:49.622125 2026] [:error] [pid 26648:tid 26664] [client 20.214.155.242:37210] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZLN_TT55fUixS3gmyjZ2wAAAYs"]
[Mon Feb 16 15:57:49.890884 2026] [:error] [pid 4455:tid 4465] [client 20.214.155.242:40916] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZLN_QNa-4dvQCL0rupCUQAAAMg"]
[Mon Feb 16 15:57:50.159081 2026] [:error] [pid 26648:tid 26672] [client 20.214.155.242:31006] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZLN_jT55fUixS3gmyjZ3wAAAZM"]
[Mon Feb 16 15:57:50.428907 2026] [:error] [pid 26648:tid 26663] [client 20.214.155.242:41680] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZLN_jT55fUixS3gmyjZ4AAAAYo"]
[Mon Feb 16 15:57:50.703993 2026] [:error] [pid 4455:tid 4460] [client 20.214.155.242:31023] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZLN_gNa-4dvQCL0rupCVAAAAMM"]
[Mon Feb 16 15:57:50.972624 2026] [:error] [pid 4455:tid 4480] [client 20.214.155.242:31022] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZLN_gNa-4dvQCL0rupCVQAAANc"]
[Mon Feb 16 15:57:51.241142 2026] [:error] [pid 4349:tid 4423] [client 20.214.155.242:30976] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZLN_8rbZYafUL_3Qfy1mAAAAIE"]
[Mon Feb 16 15:57:51.510678 2026] [:error] [pid 4349:tid 4424] [client 20.214.155.242:30983] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZLN_8rbZYafUL_3Qfy1mgAAAII"]
[Mon Feb 16 15:57:51.779312 2026] [:error] [pid 4349:tid 4441] [client 20.214.155.242:40087] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZLN_8rbZYafUL_3Qfy1nAAAAJM"]
[Mon Feb 16 15:57:52.049408 2026] [:error] [pid 4347:tid 4371] [client 20.214.155.242:41690] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aZLOADFcjv6pEAnSEidmqwAAAAM"]
[Mon Feb 16 15:57:52.319407 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:37468] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aZLOADT55fUixS3gmyjZ5gAAAZY"]
[Mon Feb 16 15:57:52.593008 2026] [:error] [pid 26648:tid 26660] [client 20.214.155.242:40090] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aZLOADT55fUixS3gmyjZ5wAAAYc"]
[Mon Feb 16 15:57:52.872620 2026] [:error] [pid 26648:tid 26676] [client 20.214.155.242:8094] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aZLOADT55fUixS3gmyjZ6AAAAZc"]
[Mon Feb 16 15:57:53.145821 2026] [:error] [pid 4347:tid 4392] [client 20.214.155.242:8064] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aZLOATFcjv6pEAnSEidmrAAAABg"]
[Mon Feb 16 15:57:53.424730 2026] [:error] [pid 26648:tid 26670] [client 20.214.155.242:37467] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZLOATT55fUixS3gmyjZ6QAAAZE"]
[Mon Feb 16 15:57:53.710388 2026] [:error] [pid 4347:tid 4391] [client 20.214.155.242:31014] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZLOATFcjv6pEAnSEidmrwAAABc"]
[Mon Feb 16 15:57:53.983899 2026] [:error] [pid 26648:tid 26665] [client 20.214.155.242:8108] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZLOATT55fUixS3gmyjZ7QAAAYw"]
[Mon Feb 16 15:57:54.255942 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:33683] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aZLOAjFcjv6pEAnSEidmsAAAABM"]
[Mon Feb 16 15:57:54.532842 2026] [:error] [pid 4347:tid 4373] [client 20.214.155.242:37199] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZLOAjFcjv6pEAnSEidmsgAAAAU"]
[Mon Feb 16 15:57:54.806165 2026] [:error] [pid 38888:tid 38909] [client 20.214.155.242:37227] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZLOAqmDoBJWPvV4pcMH-QAAAVI"]
[Mon Feb 16 15:57:55.131076 2026] [:error] [pid 4348:tid 4401] [client 20.214.155.242:37471] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZLOA3xbK-cCGKg9aytUIgAAAEY"]
[Mon Feb 16 15:57:55.415441 2026] [:error] [pid 4347:tid 4379] [client 20.214.155.242:30608] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aZLOAzFcjv6pEAnSEidmtAAAAAs"]
[Mon Feb 16 15:57:55.685743 2026] [:error] [pid 26648:tid 26676] [client 20.214.155.242:30997] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZLOAzT55fUixS3gmyjZ8AAAAZc"]
[Mon Feb 16 15:57:55.957297 2026] [:error] [pid 26648:tid 26670] [client 20.214.155.242:39267] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZLOAzT55fUixS3gmyjZ8QAAAZE"]
[Mon Feb 16 15:57:56.227137 2026] [:error] [pid 26648:tid 26672] [client 20.214.155.242:31801] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZLOBDT55fUixS3gmyjZ8gAAAZM"]
[Mon Feb 16 15:57:56.496914 2026] [:error] [pid 4347:tid 4384] [client 20.214.155.242:40070] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs18.php"] [unique_id "aZLOBDFcjv6pEAnSEidmtwAAABA"]
[Mon Feb 16 15:57:56.816052 2026] [:error] [pid 4347:tid 4390] [client 20.214.155.242:39255] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZLOBDFcjv6pEAnSEidmuAAAABY"]
[Mon Feb 16 15:57:57.118639 2026] [:error] [pid 4347:tid 4372] [client 20.214.155.242:8068] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZLOBTFcjv6pEAnSEidmuQAAAAQ"]
[Mon Feb 16 15:57:57.396921 2026] [:error] [pid 4347:tid 4374] [client 20.214.155.242:43433] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZLOBTFcjv6pEAnSEidmuwAAAAY"]
[Mon Feb 16 15:57:57.668105 2026] [:error] [pid 26648:tid 26673] [client 20.214.155.242:37234] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aZLOBTT55fUixS3gmyjZ9wAAAZQ"]
[Mon Feb 16 15:57:57.937157 2026] [:error] [pid 26648:tid 26659] [client 20.214.155.242:7230] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZLOBTT55fUixS3gmyjZ-QAAAYY"]
[Mon Feb 16 15:57:58.222472 2026] [:error] [pid 26648:tid 26676] [client 20.214.155.242:33680] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZLOBjT55fUixS3gmyjZ_AAAAZc"]
[Mon Feb 16 15:57:58.493240 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:8079] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZLOBjT55fUixS3gmyjZ_QAAAZU"]
[Mon Feb 16 15:57:58.759806 2026] [:error] [pid 26648:tid 26664] [client 20.214.155.242:39277] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aZLOBjT55fUixS3gmyjZ_gAAAYs"]
[Mon Feb 16 15:57:59.036488 2026] [:error] [pid 26648:tid 26672] [client 20.214.155.242:37463] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZLOBzT55fUixS3gmyjaAQAAAZM"]
[Mon Feb 16 15:57:59.367466 2026] [:error] [pid 4347:tid 4368] [client 20.214.155.242:37198] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZLOBzFcjv6pEAnSEidmwQAAAAA"]
[Mon Feb 16 15:57:59.643632 2026] [:error] [pid 4349:tid 4428] [client 20.214.155.242:41162] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZLOB8rbZYafUL_3Qfy1qAAAAIY"]
[Mon Feb 16 15:57:59.918618 2026] [:error] [pid 4349:tid 4425] [client 20.214.155.242:41156] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZLOB8rbZYafUL_3Qfy1qQAAAIM"]
[Mon Feb 16 15:58:00.190862 2026] [:error] [pid 4349:tid 4433] [client 20.214.155.242:7217] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZLOCMrbZYafUL_3Qfy1rAAAAIs"]
[Mon Feb 16 15:58:00.460622 2026] [:error] [pid 4349:tid 4442] [client 20.214.155.242:31039] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZLOCMrbZYafUL_3Qfy1rQAAAJQ"]
[Mon Feb 16 15:58:00.730678 2026] [:error] [pid 4455:tid 4470] [client 20.214.155.242:46304] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZLOCANa-4dvQCL0rupCWgAAAM0"]
[Mon Feb 16 15:58:01.000990 2026] [:error] [pid 37004:tid 37015] [client 20.214.155.242:41178] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZLOCVXWqA9gxE5oGmbpoQAAAQk"]
[Mon Feb 16 15:58:01.276303 2026] [:error] [pid 38888:tid 38897] [client 20.214.155.242:37237] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZLOCamDoBJWPvV4pcMH_QAAAUY"]
[Mon Feb 16 15:58:01.555148 2026] [:error] [pid 4455:tid 4458] [client 20.214.155.242:41212] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZLOCQNa-4dvQCL0rupCXgAAAME"]
[Mon Feb 16 15:58:01.833694 2026] [:error] [pid 38888:tid 38891] [client 20.214.155.242:31029] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZLOCamDoBJWPvV4pcMH_gAAAUA"]
[Mon Feb 16 15:58:02.106376 2026] [:error] [pid 4347:tid 4376] [client 20.214.155.242:8089] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZLOCjFcjv6pEAnSEidmxQAAAAg"]
[Mon Feb 16 15:58:02.377709 2026] [:error] [pid 4455:tid 4476] [client 20.214.155.242:43414] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZLOCgNa-4dvQCL0rupCXwAAANM"]
[Mon Feb 16 15:58:02.659367 2026] [:error] [pid 37004:tid 37022] [client 20.214.155.242:7168] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZLOClXWqA9gxE5oGmbppgAAARA"]
[Mon Feb 16 15:58:02.935289 2026] [:error] [pid 4348:tid 4406] [client 20.214.155.242:39252] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZLOCnxbK-cCGKg9aytUJAAAAEs"]
[Mon Feb 16 15:58:03.210995 2026] [:error] [pid 4349:tid 4431] [client 20.214.155.242:41482] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZLOC8rbZYafUL_3Qfy1sQAAAIk"]
[Mon Feb 16 15:58:03.479663 2026] [:error] [pid 4455:tid 4472] [client 20.214.155.242:37440] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aZLOCwNa-4dvQCL0rupCYAAAAM8"]
[Mon Feb 16 15:58:03.766198 2026] [:error] [pid 37004:tid 37019] [client 20.214.155.242:31711] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aZLOC1XWqA9gxE5oGmbpqAAAAQ0"]
[Mon Feb 16 15:58:04.040564 2026] [:error] [pid 26648:tid 26675] [client 20.214.155.242:41518] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aZLODDT55fUixS3gmyjaCQAAAZY"]
[Mon Feb 16 15:58:04.318920 2026] [:error] [pid 26648:tid 26660] [client 20.214.155.242:31707] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "aZLODDT55fUixS3gmyjaCwAAAYc"]
[Mon Feb 16 15:58:04.594949 2026] [:error] [pid 26648:tid 26661] [client 20.214.155.242:39276] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZLODDT55fUixS3gmyjaDgAAAYg"]
[Mon Feb 16 15:58:04.869820 2026] [:error] [pid 4455:tid 4471] [client 20.214.155.242:39235] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZLODANa-4dvQCL0rupCYQAAAM4"]
[Mon Feb 16 15:58:05.137251 2026] [:error] [pid 4455:tid 4461] [client 20.214.155.242:40065] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZLODQNa-4dvQCL0rupCYgAAAMQ"]
[Mon Feb 16 15:58:05.419671 2026] [:error] [pid 4455:tid 4462] [client 20.214.155.242:8103] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZLODQNa-4dvQCL0rupCYwAAAMU"]
[Mon Feb 16 15:58:05.692874 2026] [:error] [pid 38888:tid 38894] [client 20.214.155.242:38624] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZLODamDoBJWPvV4pcMIAwAAAUM"]
[Mon Feb 16 15:58:05.961241 2026] [:error] [pid 38888:tid 38906] [client 20.214.155.242:7209] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZLODamDoBJWPvV4pcMIBQAAAU8"]
[Mon Feb 16 15:58:06.229859 2026] [:error] [pid 38888:tid 38908] [client 20.214.155.242:37466] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZLODqmDoBJWPvV4pcMIBgAAAVE"]
[Mon Feb 16 15:58:06.507287 2026] [:error] [pid 38888:tid 38904] [client 20.214.155.242:40873] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aZLODqmDoBJWPvV4pcMIBwAAAU0"]
[Mon Feb 16 15:58:06.791841 2026] [:error] [pid 4347:tid 4392] [client 20.214.155.242:41204] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aZLODjFcjv6pEAnSEidmxwAAABg"]
[Mon Feb 16 15:58:07.065661 2026] [:error] [pid 26648:tid 26671] [client 20.214.155.242:37488] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aZLODzT55fUixS3gmyjaEQAAAZI"]
[Mon Feb 16 15:58:07.339093 2026] [:error] [pid 26648:tid 26668] [client 20.214.155.242:33673] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aZLODzT55fUixS3gmyjaEgAAAY8"]
[Mon Feb 16 15:58:07.610431 2026] [:error] [pid 38888:tid 38895] [client 20.214.155.242:37494] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aZLOD6mDoBJWPvV4pcMICwAAAUQ"]
[Mon Feb 16 15:58:07.890427 2026] [:error] [pid 38888:tid 38911] [client 20.214.155.242:8115] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aZLOD6mDoBJWPvV4pcMIDAAAAVQ"]
[Mon Feb 16 15:58:08.176946 2026] [:error] [pid 4348:tid 4403] [client 20.214.155.242:41209] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aZLOEHxbK-cCGKg9aytUKgAAAEg"]
[Mon Feb 16 15:58:08.465826 2026] [:error] [pid 37004:tid 37015] [client 20.214.155.242:37502] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aZLOEFXWqA9gxE5oGmbprAAAAQk"]
[Mon Feb 16 15:58:08.745408 2026] [:error] [pid 4348:tid 4417] [client 20.214.155.242:33683] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "aZLOEHxbK-cCGKg9aytUKwAAAFY"]
[Mon Feb 16 15:58:09.025094 2026] [:error] [pid 4349:tid 4438] [client 20.214.155.242:31717] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aZLOEcrbZYafUL_3Qfy1uAAAAJA"]
[Mon Feb 16 15:58:09.298709 2026] [:error] [pid 4349:tid 4430] [client 20.214.155.242:37209] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aZLOEcrbZYafUL_3Qfy1uQAAAIg"]
[Mon Feb 16 15:58:09.569045 2026] [:error] [pid 4349:tid 4431] [client 20.214.155.242:46249] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aZLOEcrbZYafUL_3Qfy1ugAAAIk"]
[Mon Feb 16 15:58:09.855763 2026] [:error] [pid 38888:tid 38898] [client 20.214.155.242:41529] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aZLOEamDoBJWPvV4pcMIEgAAAUc"]
[Mon Feb 16 15:58:10.137472 2026] [:error] [pid 4348:tid 4398] [client 20.214.155.242:39253] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aZLOEnxbK-cCGKg9aytULgAAAEM"]
[Mon Feb 16 15:58:10.418236 2026] [:error] [pid 4348:tid 4416] [client 20.214.155.242:30602] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aZLOEnxbK-cCGKg9aytULwAAAFU"]
[Mon Feb 16 15:58:10.704547 2026] [:error] [pid 4455:tid 4458] [client 20.214.155.242:32806] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aZLOEgNa-4dvQCL0rupCawAAAME"]
[Mon Feb 16 15:58:10.980902 2026] [:error] [pid 4455:tid 4466] [client 20.214.155.242:37492] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aZLOEgNa-4dvQCL0rupCbQAAAMk"]
[Mon Feb 16 15:58:11.258091 2026] [:error] [pid 38888:tid 38903] [client 20.214.155.242:8113] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aZLOE6mDoBJWPvV4pcMIFQAAAUw"]
[Mon Feb 16 15:58:11.527661 2026] [:error] [pid 4347:tid 4369] [client 20.214.155.242:30596] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aZLOEzFcjv6pEAnSEidmyAAAAAE"]
[Mon Feb 16 15:58:11.809155 2026] [:error] [pid 4347:tid 4391] [client 20.214.155.242:43392] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aZLOEzFcjv6pEAnSEidmygAAABc"]
[Mon Feb 16 15:58:12.081531 2026] [:error] [pid 4347:tid 4376] [client 20.214.155.242:37443] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aZLOFDFcjv6pEAnSEidmywAAAAg"]
[Mon Feb 16 15:58:12.369840 2026] [:error] [pid 26648:tid 26671] [client 20.214.155.242:41210] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZLOFDT55fUixS3gmyjaGAAAAZI"]
[Mon Feb 16 15:58:12.644666 2026] [:error] [pid 26648:tid 26668] [client 20.214.155.242:30990] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZLOFDT55fUixS3gmyjaGQAAAY8"]
[Mon Feb 16 15:58:12.920869 2026] [:error] [pid 26648:tid 26667] [client 20.214.155.242:39250] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZLOFDT55fUixS3gmyjaGgAAAY4"]
[Mon Feb 16 15:58:13.196793 2026] [:error] [pid 4348:tid 4404] [client 20.214.155.242:39287] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aZLOFXxbK-cCGKg9aytUMwAAAEk"]
[Mon Feb 16 15:58:13.479053 2026] [:error] [pid 4348:tid 4399] [client 20.214.155.242:31015] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aZLOFXxbK-cCGKg9aytUNAAAAEQ"]
[Mon Feb 16 15:58:13.752513 2026] [:error] [pid 4347:tid 4374] [client 20.214.155.242:37453] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aZLOFTFcjv6pEAnSEidmzgAAAAY"]
[Mon Feb 16 15:58:14.021743 2026] [:error] [pid 38888:tid 38905] [client 20.214.155.242:33669] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aZLOFqmDoBJWPvV4pcMIFgAAAU4"]
[Mon Feb 16 15:58:14.291994 2026] [:error] [pid 37004:tid 37010] [client 20.214.155.242:39292] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admins.php"] [unique_id "aZLOFlXWqA9gxE5oGmbprwAAAQQ"]
[Mon Feb 16 15:58:14.562238 2026] [:error] [pid 26648:tid 26659] [client 20.214.155.242:8082] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aZLOFjT55fUixS3gmyjaHwAAAYY"]
[Mon Feb 16 15:58:14.862348 2026] [:error] [pid 4348:tid 4411] [client 20.214.155.242:43450] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aZLOFnxbK-cCGKg9aytUNwAAAFA"]
[Mon Feb 16 15:58:15.147755 2026] [:error] [pid 4455:tid 4478] [client 20.214.155.242:30994] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aZLOFwNa-4dvQCL0rupCdAAAANU"]
[Mon Feb 16 15:58:15.425743 2026] [:error] [pid 4455:tid 4479] [client 20.214.155.242:37457] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aZLOFwNa-4dvQCL0rupCdQAAANY"]
[Mon Feb 16 15:58:15.697443 2026] [:error] [pid 38888:tid 38892] [client 20.214.155.242:37495] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aZLOF6mDoBJWPvV4pcMIFwAAAUE"]
[Mon Feb 16 15:58:15.971450 2026] [:error] [pid 4349:tid 4426] [client 20.214.155.242:43439] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aZLOF8rbZYafUL_3Qfy1vQAAAIQ"]
[Mon Feb 16 15:58:16.239958 2026] [:error] [pid 38888:tid 38896] [client 20.214.155.242:37498] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aZLOGKmDoBJWPvV4pcMIGQAAAUU"]
[Mon Feb 16 15:58:16.523596 2026] [:error] [pid 38888:tid 38898] [client 20.214.155.242:8105] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aZLOGKmDoBJWPvV4pcMIGgAAAUc"]
[Mon Feb 16 15:58:16.796014 2026] [:error] [pid 4349:tid 4437] [client 20.214.155.242:39289] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aZLOGMrbZYafUL_3Qfy1vgAAAI8"]
[Mon Feb 16 15:58:17.069500 2026] [:error] [pid 38888:tid 38906] [client 20.214.155.242:37229] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aZLOGamDoBJWPvV4pcMIGwAAAU8"]
[Mon Feb 16 15:58:17.343743 2026] [:error] [pid 4347:tid 4375] [client 20.214.155.242:41196] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aZLOGTFcjv6pEAnSEidm0wAAAAc"]
[Mon Feb 16 15:58:17.611403 2026] [:error] [pid 26648:tid 26674] [client 20.214.155.242:40122] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aZLOGTT55fUixS3gmyjaJQAAAZU"]
[Mon Feb 16 15:58:17.889262 2026] [:error] [pid 4347:tid 4387] [client 20.214.155.242:37461] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLOGTFcjv6pEAnSEidm1AAAABM"]
[Mon Feb 16 15:58:18.174145 2026] [:error] [pid 4347:tid 4381] [client 20.214.155.242:8076] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLOGjFcjv6pEAnSEidm1QAAAA0"]
[Mon Feb 16 15:58:18.443150 2026] [:error] [pid 4455:tid 4475] [client 20.214.155.242:33725] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLOGgNa-4dvQCL0rupCeQAAANI"]
[Mon Feb 16 15:58:18.717636 2026] [:error] [pid 4347:tid 4379] [client 20.214.155.242:33726] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aZLOGjFcjv6pEAnSEidm1gAAAAs"]
[Mon Feb 16 15:58:18.988804 2026] [:error] [pid 37004:tid 37014] [client 20.214.155.242:41174] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZLOGlXWqA9gxE5oGmbptQAAAQg"]
[Mon Feb 16 15:58:19.265676 2026] [:error] [pid 4347:tid 4369] [client 20.214.155.242:41683] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZLOGzFcjv6pEAnSEidm1wAAAAE"]
[Mon Feb 16 15:58:19.562888 2026] [:error] [pid 4455:tid 4479] [client 20.214.155.242:31682] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZLOGwNa-4dvQCL0rupCfQAAANY"]
[Mon Feb 16 15:58:19.867350 2026] [:error] [pid 4348:tid 4409] [client 20.214.155.242:31017] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZLOG3xbK-cCGKg9aytUOwAAAE4"]
[Mon Feb 16 15:58:20.152280 2026] [:error] [pid 37004:tid 37006] [client 20.214.155.242:38602] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aZLOHFXWqA9gxE5oGmbpuwAAAQA"]
[Mon Feb 16 15:58:20.426095 2026] [:error] [pid 4347:tid 4386] [client 20.214.155.242:46276] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aZLOHDFcjv6pEAnSEidm4AAAABI"]
[Mon Feb 16 15:58:20.698329 2026] [:error] [pid 4348:tid 4407] [client 20.214.155.242:37233] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aZLOHHxbK-cCGKg9aytUPwAAAEw"]
[Mon Feb 16 15:58:20.967272 2026] [:error] [pid 4348:tid 4410] [client 20.214.155.242:8105] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aZLOHHxbK-cCGKg9aytUQAAAAE8"]
[Mon Feb 16 15:58:21.284232 2026] [:error] [pid 4348:tid 4395] [client 20.214.155.242:41485] [client 20.214.155.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZLOHXxbK-cCGKg9aytUQQAAAEA"]
[Mon Feb 16 15:58:21.556730 2026] [:error] [pid 38888:tid 38901] [client 20.214.155.242:43445] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aZLOHamDoBJWPvV4pcMIIwAAAUo"]
[Mon Feb 16 15:58:21.856180 2026] [:error] [pid 26648:tid 26653] [client 20.214.155.242:39268] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aZLOHTT55fUixS3gmyjaKQAAAYA"]
[Mon Feb 16 15:58:22.134450 2026] [:error] [pid 26648:tid 26661] [client 20.214.155.242:31004] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aZLOHjT55fUixS3gmyjaKgAAAYg"]
[Mon Feb 16 15:58:22.406086 2026] [:error] [pid 4349:tid 4431] [client 20.214.155.242:31738] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aZLOHsrbZYafUL_3Qfy1xwAAAIk"]
[Mon Feb 16 15:58:22.689767 2026] [:error] [pid 4349:tid 4444] [client 20.214.155.242:37239] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aZLOHsrbZYafUL_3Qfy1ygAAAJY"]
[Mon Feb 16 15:58:22.964502 2026] [:error] [pid 4347:tid 4374] [client 20.214.155.242:37219] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aZLOHjFcjv6pEAnSEidm7QAAAAY"]
[Mon Feb 16 15:58:23.236307 2026] [:error] [pid 4349:tid 4432] [client 20.214.155.242:7832] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nyan.php"] [unique_id "aZLOH8rbZYafUL_3Qfy1zAAAAIo"]
[Mon Feb 16 15:58:23.506254 2026] [:error] [pid 4347:tid 4378] [client 20.214.155.242:31742] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aZLOHzFcjv6pEAnSEidm7gAAAAo"]
[Mon Feb 16 15:58:23.783711 2026] [:error] [pid 4348:tid 4401] [client 20.214.155.242:33719] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aZLOH3xbK-cCGKg9aytUSQAAAEY"]
[Mon Feb 16 15:58:24.063587 2026] [:error] [pid 37004:tid 37025] [client 20.214.155.242:30977] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aZLOIFXWqA9gxE5oGmbpxwAAARM"]
[Mon Feb 16 15:58:24.346177 2026] [:error] [pid 4347:tid 4372] [client 20.214.155.242:43406] [client 20.214.155.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jsond.php"] [unique_id "aZLOIDFcjv6pEAnSEidm8gAAAAQ"]
[Mon Feb 16 18:01:16.928228 2026] [:error] [pid 38888:tid 38904] [client 194.110.114.20:21042] File does not exist: /usr/local/apache/htdocs/suspended-page/archivarix.cms.php, referer: http://dbservices.com.au/archivarix.cms.php
[Mon Feb 16 19:48:49.118405 2026] [:error] [pid 4349:tid 4441] [client 43.153.123.3:45792] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZMEIcrbZYafUL_3QfzwwwAAAJM"]
[Mon Feb 16 21:57:31.062089 2026] [:error] [pid 4347:tid 4387] [client 43.130.74.193:35146] [client 43.130.74.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZMiSzFcjv6pEAnSEifyAQAAABM"]
[Tue Feb 17 01:20:37.660943 2026] [:error] [pid 34932:tid 34939] [client 120.71.59.24:46742] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZNR5UKCWyYIg5P1IPfKJwAAAgA"]
[Tue Feb 17 04:05:43.943750 2026] [:error] [pid 58552:tid 58607] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/tx64.php
[Tue Feb 17 04:05:44.201881 2026] [:error] [pid 58552:tid 58599] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/ZeLXoo.php
[Tue Feb 17 04:05:44.460718 2026] [:error] [pid 58552:tid 58596] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Tue Feb 17 04:05:45.846476 2026] [:error] [pid 58552:tid 58596] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/jzntz.php
[Tue Feb 17 04:05:46.225299 2026] [:error] [pid 58552:tid 58610] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/dunk.php
[Tue Feb 17 04:05:46.527083 2026] [:error] [pid 58552:tid 58618] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/bolaf.php
[Tue Feb 17 04:05:46.784672 2026] [:error] [pid 58552:tid 58598] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/bgwnfsal.php
[Tue Feb 17 04:05:47.044711 2026] [:error] [pid 58552:tid 58601] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/cap.php
[Tue Feb 17 04:05:47.303788 2026] [:error] [pid 58552:tid 58607] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Tue Feb 17 04:05:47.587655 2026] [:error] [pid 58552:tid 58615] [client 74.248.34.156:16123] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Tue Feb 17 04:05:47.843717 2026] [:error] [pid 58552:tid 58599] [client 74.248.34.156:16123] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZN4mzBHVJP2Oz3yR5e03gAAAEQ"]
[Tue Feb 17 04:05:50.715837 2026] [:error] [pid 58659:tid 58671] [client 74.248.34.156:29338] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZN4nsDX32iTEO4jt2-xjwAAAMo"]
[Tue Feb 17 04:05:52.250627 2026] [:error] [pid 58558:tid 58626] [client 74.248.34.156:10690] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZN4oCmIxlfUL2nViZx_9QAAAIQ"]
[Tue Feb 17 04:05:53.441818 2026] [:error] [pid 58558:tid 58638] [client 74.248.34.156:8188] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZN4oSmIxlfUL2nViZx_-AAAAJA"]
[Tue Feb 17 04:05:57.324114 2026] [:error] [pid 58552:tid 58596] [client 74.248.34.156:45153] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab8.php"] [unique_id "aZN4pTBHVJP2Oz3yR5e08QAAAEE"]
[Tue Feb 17 04:05:58.463819 2026] [:error] [pid 58552:tid 58603] [client 74.248.34.156:8171] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab8.php"] [unique_id "aZN4pjBHVJP2Oz3yR5e09AAAAEg"]
[Tue Feb 17 04:05:59.485142 2026] [:error] [pid 58552:tid 58611] [client 74.248.34.156:45170] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab8.php"] [unique_id "aZN4pzBHVJP2Oz3yR5e0-QAAAFA"]
[Tue Feb 17 04:06:00.755597 2026] [:error] [pid 58659:tid 58676] [client 74.248.34.156:29365] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab8.php"] [unique_id "aZN4qMDX32iTEO4jt2-xngAAAM8"]
[Tue Feb 17 04:06:06.735193 2026] [:error] [pid 58659:tid 58674] [client 74.248.34.156:6703] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/001.php"] [unique_id "aZN4rsDX32iTEO4jt2-xtQAAAM0"]
[Tue Feb 17 04:06:11.561302 2026] [:error] [pid 58551:tid 58563] [client 74.248.34.156:2934] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/001.php"] [unique_id "aZN4s61t8eWr-MgFspo5cwAAAAM"]
[Tue Feb 17 04:06:18.102392 2026] [:error] [pid 58558:tid 58628] [client 74.248.34.156:31215] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/borax.php"] [unique_id "aZN4uimIxlfUL2nViZyAGgAAAIY"]
[Tue Feb 17 04:06:23.531455 2026] [:error] [pid 58551:tid 58562] [client 74.248.34.156:11733] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/borax.php"] [unique_id "aZN4v61t8eWr-MgFspo5igAAAAI"]
[Tue Feb 17 04:06:24.603037 2026] [:error] [pid 58552:tid 58596] [client 74.248.34.156:6684] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/borax.php"] [unique_id "aZN4wDBHVJP2Oz3yR5e1GQAAAEE"]
[Tue Feb 17 04:06:30.652796 2026] [:error] [pid 58552:tid 58618] [client 74.248.34.156:2890] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/borax.php"] [unique_id "aZN4xjBHVJP2Oz3yR5e1IAAAAFc"]
[Tue Feb 17 04:06:31.991539 2026] [:error] [pid 58659:tid 58671] [client 74.248.34.156:15774] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Knoxville.php"] [unique_id "aZN4x8DX32iTEO4jt2-x5AAAAMo"]
[Tue Feb 17 04:06:34.869690 2026] [:error] [pid 58552:tid 58595] [client 74.248.34.156:21085] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Knoxville.php"] [unique_id "aZN4yjBHVJP2Oz3yR5e1JwAAAEA"]
[Tue Feb 17 04:06:36.800828 2026] [:error] [pid 58558:tid 58627] [client 74.248.34.156:17058] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Knoxville.php"] [unique_id "aZN4zCmIxlfUL2nViZyALQAAAIU"]
[Tue Feb 17 04:06:38.101574 2026] [:error] [pid 58659:tid 58680] [client 74.248.34.156:17048] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Knoxville.php"] [unique_id "aZN4zsDX32iTEO4jt2-x7gAAANM"]
[Tue Feb 17 04:06:38.952610 2026] [:error] [pid 58659:tid 58683] [client 74.248.34.156:19618] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fizsb.php"] [unique_id "aZN4zsDX32iTEO4jt2-x8QAAANY"]
[Tue Feb 17 04:06:40.939503 2026] [:error] [pid 58659:tid 58685] [client 74.248.34.156:17068] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fizsb.php"] [unique_id "aZN40MDX32iTEO4jt2-x-AAAANg"]
[Tue Feb 17 04:06:44.828815 2026] [:error] [pid 58551:tid 58578] [client 74.248.34.156:17035] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fizsb.php"] [unique_id "aZN41K1t8eWr-MgFspo5nQAAABI"]
[Tue Feb 17 04:06:45.624939 2026] [:error] [pid 58551:tid 58568] [client 74.248.34.156:19607] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fizsb.php"] [unique_id "aZN41a1t8eWr-MgFspo5oAAAAAg"]
[Tue Feb 17 04:06:46.776849 2026] [:error] [pid 58659:tid 58672] [client 74.248.34.156:45216] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aZN41sDX32iTEO4jt2-yDwAAAMs"]
[Tue Feb 17 04:06:47.790544 2026] [:error] [pid 58659:tid 58678] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Tue Feb 17 04:06:48.065641 2026] [:error] [pid 58659:tid 58674] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/invisi.php
[Tue Feb 17 04:06:48.323899 2026] [:error] [pid 58659:tid 58675] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue Feb 17 04:06:48.602381 2026] [:error] [pid 58659:tid 58676] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/lcyhl.php
[Tue Feb 17 04:06:48.885641 2026] [:error] [pid 58659:tid 58680] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Feb 17 04:06:49.145563 2026] [:error] [pid 58659:tid 58679] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Tue Feb 17 04:06:49.427207 2026] [:error] [pid 58659:tid 58665] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Tue Feb 17 04:06:49.906712 2026] [:error] [pid 58659:tid 58663] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/reversely.php
[Tue Feb 17 04:06:50.167426 2026] [:error] [pid 58659:tid 58666] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Tue Feb 17 04:06:50.462742 2026] [:error] [pid 58659:tid 58661] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/pomzr.php
[Tue Feb 17 04:06:50.727876 2026] [:error] [pid 58659:tid 58670] [client 74.248.34.156:8697] File does not exist: /usr/local/apache/htdocs/suspended-page/momo.php
[Tue Feb 17 04:06:50.983109 2026] [:error] [pid 58659:tid 58676] [client 74.248.34.156:8697] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geju.php"] [unique_id "aZN42sDX32iTEO4jt2-yLwAAAM8"]
[Tue Feb 17 04:06:52.855623 2026] [:error] [pid 58552:tid 58607] [client 74.248.34.156:45191] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geju.php"] [unique_id "aZN43DBHVJP2Oz3yR5e1VwAAAEw"]
[Tue Feb 17 04:06:55.204275 2026] [:error] [pid 58558:tid 58625] [client 74.248.34.156:21072] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geju.php"] [unique_id "aZN43ymIxlfUL2nViZyAVAAAAIM"]
[Tue Feb 17 04:06:56.928375 2026] [:error] [pid 58558:tid 58624] [client 74.248.34.156:10977] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geju.php"] [unique_id "aZN44CmIxlfUL2nViZyAWwAAAII"]
[Tue Feb 17 04:06:57.763595 2026] [:error] [pid 58659:tid 58671] [client 74.248.34.156:10974] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baidu.php"] [unique_id "aZN44cDX32iTEO4jt2-yYwAAAMo"]
[Tue Feb 17 04:07:04.459889 2026] [:error] [pid 58551:tid 58560] [client 74.248.34.156:24978] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baidu.php"] [unique_id "aZN46K1t8eWr-MgFspo5-QAAAAA"]
[Tue Feb 17 04:07:06.192811 2026] [:error] [pid 58552:tid 58595] [client 74.248.34.156:20437] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baidu.php"] [unique_id "aZN46jBHVJP2Oz3yR5e1dwAAAEA"]
[Tue Feb 17 04:07:12.119910 2026] [:error] [pid 58558:tid 58625] [client 74.248.34.156:10422] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baidu.php"] [unique_id "aZN48CmIxlfUL2nViZyAhgAAAIM"]
[Tue Feb 17 04:07:16.995414 2026] [:error] [pid 58558:tid 58624] [client 74.248.34.156:17605] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "aZN49CmIxlfUL2nViZyAjgAAAII"]
[Tue Feb 17 04:07:24.010073 2026] [:error] [pid 58558:tid 58626] [client 74.248.34.156:17638] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "aZN4_CmIxlfUL2nViZyAmAAAAIQ"]
[Tue Feb 17 04:07:29.723126 2026] [:error] [pid 58551:tid 58563] [client 74.248.34.156:6734] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/japan.php"] [unique_id "aZN5Aa1t8eWr-MgFspo6LAAAAAM"]
[Tue Feb 17 04:07:33.458943 2026] [:error] [pid 58552:tid 58609] [client 74.248.34.156:19687] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/japan.php"] [unique_id "aZN5BTBHVJP2Oz3yR5e1oAAAAE4"]
[Tue Feb 17 04:07:34.664745 2026] [:error] [pid 58659:tid 58680] [client 74.248.34.156:6756] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/japan.php"] [unique_id "aZN5BsDX32iTEO4jt2-y9gAAANM"]
[Tue Feb 17 04:07:36.082021 2026] [:error] [pid 58558:tid 58623] [client 74.248.34.156:8089] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/japan.php"] [unique_id "aZN5CCmIxlfUL2nViZyAtAAAAIE"]
[Tue Feb 17 04:07:37.520880 2026] [:error] [pid 58659:tid 58681] [client 74.248.34.156:8094] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rbvds.php"] [unique_id "aZN5CcDX32iTEO4jt2-y-gAAANQ"]
[Tue Feb 17 04:07:38.344461 2026] [:error] [pid 58552:tid 58614] [client 74.248.34.156:8123] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rbvds.php"] [unique_id "aZN5CjBHVJP2Oz3yR5e10QAAAFM"]
[Tue Feb 17 04:07:41.107374 2026] [:error] [pid 58659:tid 58680] [client 74.248.34.156:8100] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rbvds.php"] [unique_id "aZN5DcDX32iTEO4jt2-y_wAAANM"]
[Tue Feb 17 04:07:43.366789 2026] [:error] [pid 58552:tid 58603] [client 74.248.34.156:17103] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rbvds.php"] [unique_id "aZN5DzBHVJP2Oz3yR5e13wAAAEg"]
[Tue Feb 17 04:07:46.295468 2026] [:error] [pid 58558:tid 58630] [client 74.248.34.156:13581] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/knightly.php"] [unique_id "aZN5EimIxlfUL2nViZyBUQAAAIg"]
[Tue Feb 17 04:07:52.297449 2026] [:error] [pid 58551:tid 58562] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/knightly.php
[Tue Feb 17 04:07:52.556533 2026] [:error] [pid 58551:tid 58580] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/oke.php
[Tue Feb 17 04:07:52.815286 2026] [:error] [pid 58551:tid 58572] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/likmt.php
[Tue Feb 17 04:07:53.200890 2026] [:error] [pid 58551:tid 58568] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Tue Feb 17 04:07:53.458931 2026] [:error] [pid 58551:tid 58578] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/foundling.php
[Tue Feb 17 04:07:53.717871 2026] [:error] [pid 58551:tid 58567] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/yrmeu.php
[Tue Feb 17 04:07:53.999563 2026] [:error] [pid 58551:tid 58561] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/securepassword.php
[Tue Feb 17 04:07:54.261485 2026] [:error] [pid 58551:tid 58582] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/inclusively.php
[Tue Feb 17 04:07:54.519911 2026] [:error] [pid 58551:tid 58570] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/ws67.php
[Tue Feb 17 04:07:54.777392 2026] [:error] [pid 58551:tid 58564] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/hg.php
[Tue Feb 17 04:07:55.036024 2026] [:error] [pid 58551:tid 58577] [client 74.248.34.156:46724] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift2.php
[Tue Feb 17 04:07:55.377684 2026] [:error] [pid 58551:tid 58580] [client 74.248.34.156:46724] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hidedz.php"] [unique_id "aZN5G61t8eWr-MgFspo6ggAAABQ"]
[Tue Feb 17 04:07:56.448255 2026] [:error] [pid 58659:tid 58665] [client 74.248.34.156:2744] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hidedz.php"] [unique_id "aZN5HMDX32iTEO4jt2-zQwAAAMQ"]
[Tue Feb 17 04:07:57.853525 2026] [:error] [pid 58659:tid 58674] [client 74.248.34.156:2716] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hidedz.php"] [unique_id "aZN5HcDX32iTEO4jt2-zSAAAAM0"]
[Tue Feb 17 04:08:00.104349 2026] [:error] [pid 58659:tid 58685] [client 74.248.34.156:12744] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hidedz.php"] [unique_id "aZN5IMDX32iTEO4jt2-zTwAAANg"]
[Tue Feb 17 04:08:03.347652 2026] [:error] [pid 58551:tid 58578] [client 74.248.34.156:2466] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZN5I61t8eWr-MgFspo6jwAAABI"]
[Tue Feb 17 04:08:05.677760 2026] [:error] [pid 58551:tid 58561] [client 74.248.34.156:12761] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZN5Ja1t8eWr-MgFspo6kwAAAAE"]
[Tue Feb 17 04:08:13.504148 2026] [:error] [pid 58551:tid 58577] [client 74.248.34.156:8376] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZN5La1t8eWr-MgFspo6ngAAABE"]
[Tue Feb 17 04:08:14.622396 2026] [:error] [pid 58659:tid 58664] [client 74.248.34.156:11905] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ujuqsqhd.php"] [unique_id "aZN5LsDX32iTEO4jt2-zawAAAMM"]
[Tue Feb 17 04:08:17.783020 2026] [:error] [pid 58552:tid 58607] [client 74.248.34.156:46748] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iopra.php"] [unique_id "aZN5MTBHVJP2Oz3yR5e2CAAAAEw"]
[Tue Feb 17 04:08:22.132644 2026] [:error] [pid 58558:tid 58630] [client 74.248.34.156:20787] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iopra.php"] [unique_id "aZN5NimIxlfUL2nViZyBrgAAAIg"]
[Tue Feb 17 04:08:23.717099 2026] [:error] [pid 58659:tid 58681] [client 74.248.34.156:12259] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iopra.php"] [unique_id "aZN5N8DX32iTEO4jt2-zjAAAANQ"]
[Tue Feb 17 04:08:27.200157 2026] [:error] [pid 58558:tid 58631] [client 74.248.34.156:20778] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iopra.php"] [unique_id "aZN5OymIxlfUL2nViZyBuwAAAIk"]
[Tue Feb 17 04:08:30.656709 2026] [:error] [pid 58659:tid 58666] [client 74.248.34.156:11417] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aZN5PsDX32iTEO4jt2-zmgAAAMU"]
[Tue Feb 17 04:08:31.456994 2026] [:error] [pid 58551:tid 58561] [client 74.248.34.156:11418] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aZN5P61t8eWr-MgFspo6wwAAAAE"]
[Tue Feb 17 04:08:34.426676 2026] [:error] [pid 58552:tid 58597] [client 74.248.34.156:8400] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aZN5QjBHVJP2Oz3yR5e2MwAAAEI"]
[Tue Feb 17 04:08:35.477272 2026] [:error] [pid 58552:tid 58599] [client 74.248.34.156:14445] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aZN5QzBHVJP2Oz3yR5e2NQAAAEQ"]
[Tue Feb 17 04:08:37.910465 2026] [:error] [pid 58659:tid 58662] [client 74.248.34.156:20393] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lrzkh.php"] [unique_id "aZN5RcDX32iTEO4jt2-zqQAAAME"]
[Tue Feb 17 04:08:39.626597 2026] [:error] [pid 58558:tid 58632] [client 74.248.34.156:14452] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lrzkh.php"] [unique_id "aZN5RymIxlfUL2nViZyBzAAAAIo"]
[Tue Feb 17 04:08:40.883037 2026] [:error] [pid 58551:tid 58577] [client 74.248.34.156:13171] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lrzkh.php"] [unique_id "aZN5SK1t8eWr-MgFspo60AAAABE"]
[Tue Feb 17 04:08:42.176024 2026] [:error] [pid 58558:tid 58634] [client 74.248.34.156:46817] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lrzkh.php"] [unique_id "aZN5SimIxlfUL2nViZyB0AAAAIw"]
[Tue Feb 17 04:08:43.542104 2026] [:error] [pid 58659:tid 58663] [client 74.248.34.156:18753] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mtmem.php"] [unique_id "aZN5S8DX32iTEO4jt2-ztQAAAMI"]
[Tue Feb 17 04:08:45.884563 2026] [:error] [pid 58551:tid 58563] [client 74.248.34.156:13120] [client 74.248.34.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mtmem.php"] [unique_id "aZN5Ta1t8eWr-MgFspo61gAAAAM"]
[Tue Feb 17 04:08:55.008518 2026] [:error] [pid 58551:tid 58582] [client 74.248.34.156:22573] File does not exist: /usr/local/apache/htdocs/suspended-page/mtmem.php
[Tue Feb 17 04:08:55.277010 2026] [:error] [pid 58551:tid 58580] [client 74.248.34.156:22573] File does not exist: /usr/local/apache/htdocs/suspended-page/106.php
[Tue Feb 17 04:08:55.684282 2026] [:error] [pid 58551:tid 58575] [client 74.248.34.156:22573] File does not exist: /usr/local/apache/htdocs/suspended-page/bureaucrats.php
[Tue Feb 17 04:08:55.943487 2026] [:error] [pid 58551:tid 58571] [client 74.248.34.156:22573] File does not exist: /usr/local/apache/htdocs/suspended-page/v9.php
[Tue Feb 17 04:08:56.263115 2026] [:error] [pid 58551:tid 58566] [client 74.248.34.156:22573] File does not exist: /usr/local/apache/htdocs/suspended-page/auujk.php
[Tue Feb 17 08:34:02.347634 2026] [:error] [pid 32790:tid 32812] [client 51.107.69.151:56021] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZO3ens3HJP9ozPHsN40_AAAARI"]
[Tue Feb 17 08:34:05.623479 2026] [:error] [pid 58551:tid 58562] [client 51.107.69.151:34431] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZO3fa1t8eWr-MgFspqpFwAAAAI"]
[Tue Feb 17 08:34:08.088299 2026] [:error] [pid 32790:tid 32803] [client 51.107.69.151:55338] [client 51.107.69.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZO3gHs3HJP9ozPHsN41HQAAAQk"]
[Tue Feb 17 08:37:22.290419 2026] [:error] [pid 58552:tid 58605] [client 86.172.140.91:49789] [client 86.172.140.91] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.172.140.91, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZO4QjBHVJP2Oz3yR5cm2gAAAEo"]
[Tue Feb 17 08:37:22.297794 2026] [:error] [pid 58552:tid 58605] [client 86.172.140.91:49789] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Feb 17 08:58:57.846295 2026] [:error] [pid 58558:tid 58633] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Tue Feb 17 08:58:58.099196 2026] [:error] [pid 58558:tid 58639] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Feb 17 08:58:58.355693 2026] [:error] [pid 58558:tid 58632] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Tue Feb 17 08:58:58.617414 2026] [:error] [pid 58558:tid 58635] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Feb 17 08:58:58.978138 2026] [:error] [pid 58558:tid 58624] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/asax.php
[Tue Feb 17 08:58:59.227527 2026] [:error] [pid 58558:tid 58629] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Feb 17 08:58:59.478370 2026] [:error] [pid 58558:tid 58622] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k3w6g9s4h2.php
[Tue Feb 17 08:58:59.820773 2026] [:error] [pid 58558:tid 58636] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Feb 17 08:59:00.206054 2026] [:error] [pid 58558:tid 58637] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Tue Feb 17 08:59:00.468138 2026] [:error] [pid 58558:tid 58638] [client 20.111.44.121:25834] File does not exist: /usr/local/apache/htdocs/suspended-page/acfdr.php
[Tue Feb 17 08:59:00.726051 2026] [:error] [pid 58558:tid 58631] [client 20.111.44.121:25834] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZO9VCmIxlfUL2nViZwEoAAAAIk"]
[Tue Feb 17 08:59:03.083113 2026] [:error] [pid 32790:tid 32802] [client 20.111.44.121:65170] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZO9V3s3HJP9ozPHsN5GgwAAAQg"]
[Tue Feb 17 08:59:04.198831 2026] [:error] [pid 58552:tid 58599] [client 20.111.44.121:12418] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZO9WDBHVJP2Oz3yR5cxggAAAEQ"]
[Tue Feb 17 08:59:06.333103 2026] [:error] [pid 32790:tid 32794] [client 20.111.44.121:23267] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aZO9Wns3HJP9ozPHsN5GjwAAAQA"]
[Tue Feb 17 08:59:10.457926 2026] [:error] [pid 58659:tid 58675] [client 20.111.44.121:6597] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aZO9XsDX32iTEO4jt29HowAAAM4"]
[Tue Feb 17 08:59:11.601007 2026] [:error] [pid 58558:tid 58639] [client 20.111.44.121:16340] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aZO9XymIxlfUL2nViZwEswAAAJE"]
[Tue Feb 17 08:59:12.560639 2026] [:error] [pid 58659:tid 58668] [client 20.111.44.121:35498] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aZO9YMDX32iTEO4jt29HrwAAAMc"]
[Tue Feb 17 08:59:13.915103 2026] [:error] [pid 58552:tid 58595] [client 20.111.44.121:16341] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aZO9YTBHVJP2Oz3yR5cxkwAAAEA"]
[Tue Feb 17 08:59:19.184216 2026] [:error] [pid 58659:tid 58676] [client 20.111.44.121:35477] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZO9Z8DX32iTEO4jt29HwAAAAM8"]
[Tue Feb 17 08:59:22.632953 2026] [:error] [pid 58558:tid 58623] [client 20.111.44.121:29592] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZO9aimIxlfUL2nViZwE0AAAAIE"]
[Tue Feb 17 08:59:23.464495 2026] [:error] [pid 58552:tid 58615] [client 20.111.44.121:38780] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZO9azBHVJP2Oz3yR5cxpQAAAFQ"]
[Tue Feb 17 08:59:24.866854 2026] [:error] [pid 32790:tid 32808] [client 20.111.44.121:12033] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff.php"] [unique_id "aZO9bHs3HJP9ozPHsN5GxgAAAQ4"]
[Tue Feb 17 08:59:26.813677 2026] [:error] [pid 58659:tid 58666] [client 20.111.44.121:12085] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZO9bsDX32iTEO4jt29H1wAAAMU"]
[Tue Feb 17 08:59:33.229924 2026] [:error] [pid 58551:tid 58571] [client 20.111.44.121:12146] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZO9da1t8eWr-MgFspq0kQAAAAs"]
[Tue Feb 17 08:59:37.550072 2026] [:error] [pid 32790:tid 32797] [client 20.111.44.121:26180] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak.php/wp-admin/async-upload.php"] [unique_id "aZO9eXs3HJP9ozPHsN5HDwAAAQM"]
[Tue Feb 17 08:59:41.515514 2026] [:error] [pid 32790:tid 32817] [client 20.111.44.121:30344] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aZO9fXs3HJP9ozPHsN5HGgAAARc"]
[Tue Feb 17 08:59:46.359793 2026] [:error] [pid 58558:tid 58641] [client 20.111.44.121:30856] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aZO9gimIxlfUL2nViZwFEwAAAJM"]
[Tue Feb 17 08:59:48.148770 2026] [:error] [pid 58659:tid 58674] [client 20.111.44.121:32511] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aZO9hMDX32iTEO4jt29ILgAAAM0"]
[Tue Feb 17 08:59:50.026244 2026] [:error] [pid 58551:tid 58560] [client 20.111.44.121:20523] [client 20.111.44.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aZO9hq1t8eWr-MgFspq0qAAAAAA"]
[Tue Feb 17 09:00:01.704257 2026] [:error] [pid 58659:tid 58680] [client 20.111.44.121:27206] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Feb 17 09:00:01.953259 2026] [:error] [pid 58659:tid 58684] [client 20.111.44.121:27206] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Feb 17 09:00:02.210876 2026] [:error] [pid 58659:tid 58664] [client 20.111.44.121:27206] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Feb 17 09:00:02.455987 2026] [:error] [pid 58659:tid 58677] [client 20.111.44.121:27206] [client 20.111.44.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aZO9ksDX32iTEO4jt29IUgAAANA"]
[Tue Feb 17 09:00:05.914052 2026] [:error] [pid 58551:tid 58580] [client 20.111.44.121:30655] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Feb 17 10:46:08.540507 2026] [:error] [pid 58551:tid 58568] [client 43.165.65.75:36160] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZPWcK1t8eWr-MgFsprhpAAAAAg"]
[Tue Feb 17 12:19:23.942044 2026] [:error] [pid 58659:tid 58678] [client 167.71.244.81:60539] [client 167.71.244.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZPsS8DX32iTEO4jt2-t5AAAANE"]
[Tue Feb 17 20:06:39.508278 2026] [:error] [pid 2575:tid 2590] [client 175.6.217.4:56751] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZRZz80nHzM9JGTFE55xpQAAAc0"]
[Wed Feb 18 02:39:24.868589 2026] [:error] [pid 2606:tid 2649] [client 106.54.62.156:56600] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZS13FFV84PnUA8QSAjrVQAAAk4"]
[Wed Feb 18 05:23:28.282968 2026] [:error] [pid 57014:tid 57024] [client 162.62.132.25:36016] [client 162.62.132.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZTcUBNZnhS5qKtVIMLutAAAAQc"]
[Wed Feb 18 08:51:34.531204 2026] [:error] [pid 21847:tid 21861] [client 223.15.245.170:58851] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZUNFvy9A5wy4LuXmJ0SNQAAAAM"]
[Wed Feb 18 10:42:32.605143 2026] [:error] [pid 21848:tid 21906] [client 165.245.187.140:52941] [client 165.245.187.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZUnGPbG91VRkVidT5eJvwAAAFE"]
[Wed Feb 18 11:11:48.442807 2026] [:error] [pid 21849:tid 21939] [client 190.221.217.137:61333] [client 190.221.217.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 190.221.217.137, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZUt9Lx9a1XrfTYnuzLcZQAAAJc"]
[Wed Feb 18 11:11:48.448103 2026] [:error] [pid 21849:tid 21939] [client 190.221.217.137:61333] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 18 15:56:53.440365 2026] [:error] [pid 21961:tid 21985] [client 43.159.140.236:41422] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZVwxcUBDt_-H0ms3gVUWwAAANY"]
[Wed Feb 18 17:08:13.698319 2026] [:error] [pid 21849:tid 21933] [client 104.28.153.3:38867] [client 104.28.153.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aZWBfbx9a1XrfTYnuzJMxAAAAJE"]
[Wed Feb 18 18:13:09.316880 2026] [:error] [pid 57014:tid 57038] [client 43.153.123.3:40698] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZWQtRNZnhS5qKtVIMIHsgAAARU"]
[Wed Feb 18 21:59:20.366239 2026] [:error] [pid 11607:tid 11640] [client 43.135.130.202:40204] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZXFuBw91ggRx3FA7Bf8CAAAAlg"]
[Thu Feb 19 01:31:28.198034 2026] [:error] [pid 5561:tid 5573] [client 63.125.89.66:47869] [client 63.125.89.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aZX3cEoQssCZYQ4NexYHRgAAAUk"], referer: https://www.google.com
[Thu Feb 19 02:14:21.047712 2026] [:error] [pid 11548:tid 11589] [client 103.65.236.149:51136] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aZYBfTSFZiBIZZvmIlNoQwAAAgs"]
[Thu Feb 19 02:14:21.269854 2026] [:error] [pid 11609:tid 11658] [client 103.65.236.149:51168] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aZYBfchm3UjgaKO2Na9kmgAAAo8"]
[Thu Feb 19 04:04:20.583958 2026] [:error] [pid 48902:tid 48938] [client 122.51.236.174:38358] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZYbRGcJ-6aYRpRRFsUmGAAAAEA"]
[Thu Feb 19 04:50:34.039761 2026] [:error] [pid 15513:tid 15528] [client 43.166.128.86:36764] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZYmGsGTRTE022JWg1-GtQAAAQ0"]
[Thu Feb 19 07:33:14.722741 2026] [:error] [pid 15513:tid 15517] [client 85.203.23.26:37329] [client 85.203.23.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZZMOsGTRTE022JWg1_GrgAAAQI"]
[Thu Feb 19 07:33:15.084981 2026] [:error] [pid 48901:tid 48926] [client 85.203.23.43:20551] [client 85.203.23.43] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZZMO8ixYz-lHbN0WBLkPgAAABA"]
[Thu Feb 19 10:12:40.662899 2026] [:error] [pid 48901:tid 48926] [client 122.51.236.174:39688] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZZxmMixYz-lHbN0WBIW8gAAABA"]
[Thu Feb 19 10:13:39.556165 2026] [:error] [pid 48901:tid 48931] [client 45.61.184.157:12111] [client 45.61.184.157] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.61.184.157, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aZZx08ixYz-lHbN0WBIXTQAAABU"], referer: http://www.google.com.hk
[Thu Feb 19 10:13:39.560215 2026] [:error] [pid 48901:tid 48931] [client 45.61.184.157:12111] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: http://www.google.com.hk
[Thu Feb 19 11:33:14.409775 2026] [:error] [pid 48902:tid 48958] [client 43.133.14.237:47672] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZaEemcJ-6aYRpRRFsXBgAAAAFQ"]
[Thu Feb 19 14:31:47.468484 2026] [:error] [pid 5581:tid 5612] [client 157.230.43.38:50234] [client 157.230.43.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aZauU3IfW0xlXmrVd3qGOgAAAgE"]
[Thu Feb 19 16:45:15.648645 2026] [:error] [pid 48903:tid 48989] [client 34.82.166.79:54889] [client 34.82.166.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.166.79, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZbNm46aTgKrpAR115u9gwAAAJg"]
[Thu Feb 19 16:45:15.652668 2026] [:error] [pid 48903:tid 48989] [client 34.82.166.79:54889] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 19 16:45:18.305080 2026] [:error] [pid 48903:tid 48972] [client 34.82.166.79:54889] [client 34.82.166.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZbNno6aTgKrpAR115u9kQAAAIc"]
[Thu Feb 19 16:45:18.801361 2026] [:error] [pid 15513:tid 15524] [client 34.82.166.79:63854] [client 34.82.166.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZbNnsGTRTE022JWg1-YlAAAAQk"]
[Thu Feb 19 16:45:19.350872 2026] [:error] [pid 48902:tid 48945] [client 34.82.166.79:63655] [client 34.82.166.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZbNn2cJ-6aYRpRRFsUEogAAAEc"]
[Thu Feb 19 16:45:19.731293 2026] [:error] [pid 49002:tid 49035] [client 34.82.166.79:61082] [client 34.82.166.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZbNn1fcBtQ6hSJuEQk92QAAANU"]
[Thu Feb 19 16:45:20.253274 2026] [:error] [pid 15513:tid 15518] [client 34.82.166.79:61104] [client 34.82.166.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZbNoMGTRTE022JWg1-YlwAAAQM"]
[Thu Feb 19 16:45:20.580271 2026] [:error] [pid 5581:tid 5620] [client 34.82.166.79:49527] [client 34.82.166.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZbNoHIfW0xlXmrVd3qgewAAAgk"]
[Thu Feb 19 16:45:21.021608 2026] [:error] [pid 48903:tid 48979] [client 34.82.166.79:64381] [client 34.82.166.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZbNoY6aTgKrpAR115u9kwAAAI4"]
[Thu Feb 19 17:42:30.699425 2026] [:error] [pid 24048:tid 24063] [client 43.135.145.73:43864] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZbbBmug6wHHqU0QyDbLzgAAAU0"]
[Thu Feb 19 19:54:18.941159 2026] [:error] [pid 5581:tid 5633] [client 170.106.113.159:53428] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZb56nIfW0xlXmrVd3rF0AAAAhY"]
[Thu Feb 19 22:40:43.883475 2026] [:error] [pid 48901:tid 48929] [client 122.51.236.174:45534] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZcg68ixYz-lHbN0WBLjXwAAABM"]
[Thu Feb 19 23:39:21.637647 2026] [:error] [pid 48903:tid 48971] [client 43.153.87.54:48892] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZcuqY6aTgKrpAR115sTwAAAAIY"]
[Fri Feb 20 02:03:21.236921 2026] [:error] [pid 48901:tid 48925] [client 43.130.100.35:32918] [client 43.130.100.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZdQacixYz-lHbN0WBIaYgAAAA8"]
[Fri Feb 20 03:57:29.070513 2026] [:error] [pid 417:tid 433] [client 62.112.201.5:65384] [client 62.112.201.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.112.201.5, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZdrKWZ8vv9H56paZ2CobQAAAQ4"]
[Fri Feb 20 03:57:29.077343 2026] [:error] [pid 417:tid 433] [client 62.112.201.5:65384] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 20 04:51:35.980510 2026] [:error] [pid 417:tid 442] [client 182.42.111.156:51679] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZd312Z8vv9H56paZ2DGZgAAARc"]
[Fri Feb 20 06:40:28.863727 2026] [:error] [pid 64510:tid 64522] [client 119.28.140.106:57562] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZeRXCxwOnmwqVfn93VZkQAAAMo"]
[Fri Feb 20 09:23:59.152305 2026] [:error] [pid 54552:tid 54563] [client 43.128.156.124:48778] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZe3r8e4t0F-_sbWepZF1QAAAMg"]
[Fri Feb 20 10:51:15.042961 2026] [:error] [pid 54461:tid 54516] [client 49.235.136.28:40340] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZfMIy372fkN0w39NDMC_QAAAFg"]
[Fri Feb 20 15:54:31.026056 2026] [:error] [pid 54460:tid 54473] [client 170.106.37.134:55078] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZgTN8oUiaZ-Z7V-F98dQgAAAAg"]
[Fri Feb 20 18:14:13.420314 2026] [:error] [pid 54552:tid 54575] [client 88.123.223.54:35313] [client 88.123.223.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.123.223.54, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZgz9ce4t0F-_sbWepYOUwAAANQ"]
[Fri Feb 20 18:14:13.425089 2026] [:error] [pid 54552:tid 54575] [client 88.123.223.54:35313] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 20 20:12:20.598738 2026] [:error] [pid 54461:tid 54496] [client 182.8.129.89:2117] [client 182.8.129.89] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZhPpC372fkN0w39NDO8VQAAAEQ"]
[Fri Feb 20 23:11:41.122637 2026] [:error] [pid 59127:tid 59149] [client 106.54.62.156:42476] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZh5rXSltzl55Qz-09htKwAAARQ"]
[Sat Feb 21 02:25:46.989547 2026] [:error] [pid 25617:tid 25689] [client 103.65.237.124:58720] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aZinKtqt50qKix2zKUSyRAAAAZg"]
[Sat Feb 21 02:25:47.258177 2026] [:error] [pid 54460:tid 54484] [client 103.65.237.124:58961] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aZinK8oUiaZ-Z7V-F9_1wQAAABM"]
[Sat Feb 21 04:06:59.917293 2026] [:error] [pid 40756:tid 40767] [client 43.157.22.109:52774] [client 43.157.22.109] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZi-4wNlDP60sLYgqXKmOgAAAAE"]
[Sat Feb 21 06:56:16.379784 2026] [:error] [pid 40871:tid 40884] [client 87.121.94.97:62648] [client 87.121.94.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.121.94.97, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZjmkDqDikjdiOZeJyXZGAAAAMs"]
[Sat Feb 21 06:56:16.385027 2026] [:error] [pid 40871:tid 40884] [client 87.121.94.97:62648] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 21 06:56:23.379079 2026] [:error] [pid 40757:tid 40814] [client 177.92.54.136:15683] [client 177.92.54.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.92.54.136, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZjml6g_MKVL7zhH7dxJ9AAAAFM"]
[Sat Feb 21 06:56:23.384692 2026] [:error] [pid 40757:tid 40814] [client 177.92.54.136:15683] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 21 06:56:29.441695 2026] [:error] [pid 40757:tid 40817] [client 177.93.176.218:64719] [client 177.93.176.218] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.93.176.218, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZjmnag_MKVL7zhH7dxJ-AAAAFY"]
[Sat Feb 21 06:56:29.447323 2026] [:error] [pid 40757:tid 40817] [client 177.93.176.218:64719] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 21 16:45:51.234303 2026] [:error] [pid 22558:tid 22578] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/meew.php
[Sat Feb 21 16:45:51.253157 2026] [:error] [pid 22558:tid 22570] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/add.php
[Sat Feb 21 16:45:51.272912 2026] [:error] [pid 22558:tid 22562] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Feb 21 16:45:51.340450 2026] [:error] [pid 22558:tid 22581] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Sat Feb 21 16:45:51.386771 2026] [:error] [pid 22558:tid 22572] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat Feb 21 16:45:51.405213 2026] [:error] [pid 22558:tid 22576] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Sat Feb 21 16:45:51.424249 2026] [:error] [pid 22558:tid 22573] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Feb 21 16:45:51.441682 2026] [:error] [pid 22558:tid 22584] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/71.php
[Sat Feb 21 16:45:51.459103 2026] [:error] [pid 22558:tid 22580] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat Feb 21 16:45:51.476428 2026] [:error] [pid 22558:tid 22566] [client 20.191.226.90:36817] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Feb 21 16:45:51.518169 2026] [:error] [pid 22558:tid 22560] [client 20.191.226.90:36817] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aZlwvyrVaIb2gXsVbDrvpwAAAQA"]
[Sat Feb 21 16:45:51.752294 2026] [:error] [pid 40756:tid 40781] [client 20.191.226.90:47405] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aZlwvwNlDP60sLYgqXKpmwAAAA8"]
[Sat Feb 21 16:45:51.848502 2026] [:error] [pid 11743:tid 11765] [client 20.191.226.90:36831] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aZlwvwALoZZjiTbGvqX-4gAAAVQ"]
[Sat Feb 21 16:45:52.322942 2026] [:error] [pid 22558:tid 22581] [client 20.191.226.90:28705] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aZlwwCrVaIb2gXsVbDrvswAAARU"]
[Sat Feb 21 16:45:52.654685 2026] [:error] [pid 40756:tid 40778] [client 20.191.226.90:27158] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aZlwwANlDP60sLYgqXKpnQAAAAw"]
[Sat Feb 21 16:45:52.784272 2026] [:error] [pid 40757:tid 40796] [client 20.191.226.90:36057] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aZlwwKg_MKVL7zhH7dwBhQAAAEE"]
[Sat Feb 21 16:45:53.064101 2026] [:error] [pid 40757:tid 40819] [client 20.191.226.90:39911] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aZlwwag_MKVL7zhH7dwBhwAAAFg"]
[Sat Feb 21 16:45:53.381674 2026] [:error] [pid 11941:tid 11959] [client 20.191.226.90:41797] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aZlwwXTUkHs3EVWllKmP3gAAAZA"]
[Sat Feb 21 16:45:53.843211 2026] [:error] [pid 40757:tid 40798] [client 20.191.226.90:47385] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZlwwag_MKVL7zhH7dwBigAAAEM"]
[Sat Feb 21 16:45:54.627646 2026] [:error] [pid 11941:tid 11946] [client 20.191.226.90:41820] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZlwwnTUkHs3EVWllKmP6QAAAYM"]
[Sat Feb 21 16:45:55.598329 2026] [:error] [pid 11743:tid 11768] [client 20.191.226.90:41819] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZlwwwALoZZjiTbGvqX-5QAAAVc"]
[Sat Feb 21 16:45:56.040816 2026] [:error] [pid 11941:tid 11949] [client 20.191.226.90:51822] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aZlwxHTUkHs3EVWllKmP8QAAAYY"]
[Sat Feb 21 16:45:57.172124 2026] [:error] [pid 40758:tid 40838] [client 20.191.226.90:28674] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aZlwxUBAHxvBM3i9iKFUqwAAAJA"]
[Sat Feb 21 16:45:59.191821 2026] [:error] [pid 40871:tid 40885] [client 20.191.226.90:57222] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aZlwxzqDikjdiOZeJyV2HwAAAMw"]
[Sat Feb 21 16:46:00.256671 2026] [:error] [pid 11941:tid 11949] [client 20.191.226.90:51818] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aZlwyHTUkHs3EVWllKmP_QAAAYY"]
[Sat Feb 21 16:46:00.343519 2026] [:error] [pid 40871:tid 40892] [client 20.191.226.90:3887] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aZlwyDqDikjdiOZeJyV2IgAAANM"]
[Sat Feb 21 16:46:01.013073 2026] [:error] [pid 11941:tid 11966] [client 20.191.226.90:27075] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aZlwyXTUkHs3EVWllKmP_wAAAZc"]
[Sat Feb 21 16:46:02.447374 2026] [:error] [pid 40757:tid 40802] [client 20.191.226.90:24849] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aZlwyqg_MKVL7zhH7dwBkAAAAEc"]
[Sat Feb 21 16:46:02.530834 2026] [:error] [pid 40757:tid 40812] [client 20.191.226.90:34916] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aZlwyqg_MKVL7zhH7dwBkgAAAFE"]
[Sat Feb 21 16:46:02.757731 2026] [:error] [pid 11941:tid 11943] [client 20.191.226.90:42842] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aZlwynTUkHs3EVWllKmQAgAAAYA"]
[Sat Feb 21 16:46:03.216877 2026] [:error] [pid 40757:tid 40815] [client 20.191.226.90:3888] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZlwy6g_MKVL7zhH7dwBlQAAAFQ"]
[Sat Feb 21 16:46:03.990535 2026] [:error] [pid 40871:tid 40875] [client 20.191.226.90:43588] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZlwyzqDikjdiOZeJyV2JQAAAMI"]
[Sat Feb 21 16:46:04.255504 2026] [:error] [pid 40871:tid 40878] [client 20.191.226.90:27113] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZlwzDqDikjdiOZeJyV2JgAAAMU"]
[Sat Feb 21 16:46:04.571404 2026] [:error] [pid 40757:tid 40806] [client 20.191.226.90:36130] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aZlwzKg_MKVL7zhH7dwBlwAAAEs"]
[Sat Feb 21 16:46:04.997760 2026] [:error] [pid 11743:tid 11762] [client 20.191.226.90:52252] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aZlwzAALoZZjiTbGvqX-7gAAAVE"]
[Sat Feb 21 16:46:05.390976 2026] [:error] [pid 40871:tid 40883] [client 20.191.226.90:24879] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aZlwzTqDikjdiOZeJyV2KgAAAMo"]
[Sat Feb 21 16:46:05.498684 2026] [:error] [pid 40756:tid 40790] [client 20.191.226.90:36040] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aZlwzQNlDP60sLYgqXKpqAAAABg"]
[Sat Feb 21 16:46:05.801020 2026] [:error] [pid 40758:tid 40840] [client 20.191.226.90:52233] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aZlwzUBAHxvBM3i9iKFUtwAAAJI"]
[Sat Feb 21 16:46:06.089934 2026] [:error] [pid 40756:tid 40785] [client 20.191.226.90:57243] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options-head.php"] [unique_id "aZlwzgNlDP60sLYgqXKpqQAAABM"]
[Sat Feb 21 16:46:06.306584 2026] [:error] [pid 40756:tid 40772] [client 20.191.226.90:36842] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options-head.php"] [unique_id "aZlwzgNlDP60sLYgqXKpqgAAAAY"]
[Sat Feb 21 16:46:06.413881 2026] [:error] [pid 22558:tid 22561] [client 20.191.226.90:36059] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options-head.php"] [unique_id "aZlwzirVaIb2gXsVbDrwAAAAAQE"]
[Sat Feb 21 16:46:06.484845 2026] [:error] [pid 22558:tid 22562] [client 20.191.226.90:43618] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options-head.php"] [unique_id "aZlwzirVaIb2gXsVbDrwAQAAAQI"]
[Sat Feb 21 16:46:06.672654 2026] [:error] [pid 40871:tid 40892] [client 20.191.226.90:52248] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZlwzjqDikjdiOZeJyV2KwAAANM"]
[Sat Feb 21 16:46:07.123805 2026] [:error] [pid 40756:tid 40768] [client 20.191.226.90:36136] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZlwzwNlDP60sLYgqXKpqwAAAAI"]
[Sat Feb 21 16:46:08.467561 2026] [:error] [pid 40756:tid 40781] [client 20.191.226.90:3853] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZlw0ANlDP60sLYgqXKprQAAAA8"]
[Sat Feb 21 16:46:08.946991 2026] [:error] [pid 40756:tid 40773] [client 20.191.226.90:24875] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aZlw0ANlDP60sLYgqXKprgAAAAc"]
[Sat Feb 21 16:46:09.775930 2026] [:error] [pid 11941:tid 11945] [client 20.191.226.90:24878] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmdo.php"] [unique_id "aZlw0XTUkHs3EVWllKmQHAAAAYI"]
[Sat Feb 21 16:46:10.415795 2026] [:error] [pid 40758:tid 40834] [client 20.191.226.90:36147] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmdo.php"] [unique_id "aZlw0kBAHxvBM3i9iKFUvwAAAIw"]
[Sat Feb 21 16:46:10.514114 2026] [:error] [pid 11941:tid 11951] [client 20.191.226.90:36101] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmdo.php"] [unique_id "aZlw0nTUkHs3EVWllKmQIAAAAYg"]
[Sat Feb 21 16:46:10.586280 2026] [:error] [pid 40756:tid 40780] [client 20.191.226.90:45775] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cmdo.php"] [unique_id "aZlw0gNlDP60sLYgqXKpsgAAAA4"]
[Sat Feb 21 16:46:10.623732 2026] [:error] [pid 22558:tid 22574] [client 20.191.226.90:52259] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZlw0irVaIb2gXsVbDrwCQAAAQ4"]
[Sat Feb 21 16:46:10.856407 2026] [:error] [pid 40756:tid 40771] [client 20.191.226.90:3872] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZlw0gNlDP60sLYgqXKpswAAAAU"]
[Sat Feb 21 16:46:11.031290 2026] [:error] [pid 40756:tid 40766] [client 20.191.226.90:51789] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZlw0wNlDP60sLYgqXKptQAAAAA"]
[Sat Feb 21 16:46:11.293084 2026] [:error] [pid 40758:tid 40826] [client 20.191.226.90:56056] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZlw00BAHxvBM3i9iKFUwwAAAIQ"]
[Sat Feb 21 16:46:11.431696 2026] [:error] [pid 11743:tid 11769] [client 20.191.226.90:45324] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Capte.php"] [unique_id "aZlw0wALoZZjiTbGvqX-8gAAAVg"]
[Sat Feb 21 16:46:11.573491 2026] [:error] [pid 40758:tid 40830] [client 20.191.226.90:45323] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Capte.php"] [unique_id "aZlw00BAHxvBM3i9iKFUxAAAAIg"]
[Sat Feb 21 16:46:12.132467 2026] [:error] [pid 11743:tid 11750] [client 20.191.226.90:24872] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Capte.php"] [unique_id "aZlw1AALoZZjiTbGvqX-9AAAAUU"]
[Sat Feb 21 16:46:12.398851 2026] [:error] [pid 40871:tid 40882] [client 20.191.226.90:39917] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Capte.php"] [unique_id "aZlw1DqDikjdiOZeJyV2MAAAAMk"]
[Sat Feb 21 16:46:12.479411 2026] [:error] [pid 11941:tid 11961] [client 20.191.226.90:51796] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aZlw1HTUkHs3EVWllKmQJwAAAZI"]
[Sat Feb 21 16:46:12.514741 2026] [:error] [pid 11941:tid 11963] [client 20.191.226.90:43606] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aZlw1HTUkHs3EVWllKmQKAAAAZQ"]
[Sat Feb 21 16:46:12.575329 2026] [:error] [pid 11941:tid 11958] [client 20.191.226.90:36102] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aZlw1HTUkHs3EVWllKmQKwAAAY8"]
[Sat Feb 21 16:46:12.765120 2026] [:error] [pid 40758:tid 40841] [client 20.191.226.90:52266] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aZlw1EBAHxvBM3i9iKFUxwAAAJM"]
[Sat Feb 21 16:46:12.814969 2026] [:error] [pid 22558:tid 22569] [client 20.191.226.90:44447] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/503.php"] [unique_id "aZlw1CrVaIb2gXsVbDrwDQAAAQk"]
[Sat Feb 21 16:46:12.859902 2026] [:error] [pid 22558:tid 22578] [client 20.191.226.90:45331] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/503.php"] [unique_id "aZlw1CrVaIb2gXsVbDrwDgAAARI"]
[Sat Feb 21 16:46:13.403677 2026] [:error] [pid 40757:tid 40803] [client 20.191.226.90:3850] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/503.php"] [unique_id "aZlw1ag_MKVL7zhH7dwBnwAAAEg"]
[Sat Feb 21 16:46:13.558056 2026] [:error] [pid 40756:tid 40783] [client 20.191.226.90:24833] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/503.php"] [unique_id "aZlw1QNlDP60sLYgqXKpuQAAABE"]
[Sat Feb 21 16:46:13.658706 2026] [:error] [pid 40756:tid 40790] [client 20.191.226.90:26234] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aZlw1QNlDP60sLYgqXKpugAAABg"]
[Sat Feb 21 16:46:13.727853 2026] [:error] [pid 40871:tid 40878] [client 20.191.226.90:47361] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aZlw1TqDikjdiOZeJyV2MQAAAMU"]
[Sat Feb 21 16:46:13.790107 2026] [:error] [pid 40757:tid 40802] [client 20.191.226.90:24851] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aZlw1ag_MKVL7zhH7dwBogAAAEc"]
[Sat Feb 21 16:46:13.909168 2026] [:error] [pid 40757:tid 40797] [client 20.191.226.90:44454] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aZlw1ag_MKVL7zhH7dwBowAAAEI"]
[Sat Feb 21 16:46:14.053432 2026] [:error] [pid 40871:tid 40873] [client 20.191.226.90:24881] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZlw1jqDikjdiOZeJyV2MwAAAMA"]
[Sat Feb 21 16:46:14.157964 2026] [:error] [pid 40871:tid 40880] [client 20.191.226.90:36126] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZlw1jqDikjdiOZeJyV2NAAAAMc"]
[Sat Feb 21 16:46:14.375514 2026] [:error] [pid 40756:tid 40789] [client 20.191.226.90:45341] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZlw1gNlDP60sLYgqXKpvAAAABc"]
[Sat Feb 21 16:46:15.013231 2026] [:error] [pid 11941:tid 11946] [client 20.191.226.90:46786] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aZlw13TUkHs3EVWllKmQNgAAAYM"]
[Sat Feb 21 16:46:16.316560 2026] [:error] [pid 40871:tid 40881] [client 20.191.226.90:45768] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZlw2DqDikjdiOZeJyV2OAAAAMg"]
[Sat Feb 21 16:46:18.127169 2026] [:error] [pid 22558:tid 22560] [client 20.191.226.90:46557] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZlw2irVaIb2gXsVbDrwFQAAAQA"]
[Sat Feb 21 16:46:19.191488 2026] [:error] [pid 40757:tid 40806] [client 20.191.226.90:39496] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZlw26g_MKVL7zhH7dwBqAAAAEs"]
[Sat Feb 21 16:46:21.103958 2026] [:error] [pid 11941:tid 11964] [client 20.191.226.90:44462] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aZlw3XTUkHs3EVWllKmQRgAAAZU"]
[Sat Feb 21 16:46:21.796581 2026] [:error] [pid 22558:tid 22564] [client 20.191.226.90:39876] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZlw3SrVaIb2gXsVbDrwHQAAAQQ"]
[Sat Feb 21 16:46:22.957346 2026] [:error] [pid 11941:tid 11944] [client 20.191.226.90:28104] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZlw3nTUkHs3EVWllKmQSgAAAYE"]
[Sat Feb 21 16:46:23.508051 2026] [:error] [pid 22558:tid 22563] [client 20.191.226.90:44478] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZlw3yrVaIb2gXsVbDrwIgAAAQM"]
[Sat Feb 21 16:46:23.554393 2026] [:error] [pid 40871:tid 40882] [client 20.191.226.90:48719] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZlw3zqDikjdiOZeJyV2PAAAAMk"]
[Sat Feb 21 16:46:23.869500 2026] [:error] [pid 40758:tid 40839] [client 20.191.226.90:3405] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZlw30BAHxvBM3i9iKFU6QAAAJE"]
[Sat Feb 21 16:46:25.363430 2026] [:error] [pid 22558:tid 22578] [client 20.191.226.90:48760] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZlw4SrVaIb2gXsVbDrwKQAAARI"]
[Sat Feb 21 16:46:25.801649 2026] [:error] [pid 22558:tid 22564] [client 20.191.226.90:25709] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZlw4SrVaIb2gXsVbDrwLAAAAQQ"]
[Sat Feb 21 16:46:27.180228 2026] [:error] [pid 22558:tid 22568] [client 20.191.226.90:25080] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aZlw4yrVaIb2gXsVbDrwLwAAAQg"]
[Sat Feb 21 16:46:27.429997 2026] [:error] [pid 22558:tid 22570] [client 20.191.226.90:3427] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aZlw4yrVaIb2gXsVbDrwMQAAAQo"]
[Sat Feb 21 16:46:28.440383 2026] [:error] [pid 40757:tid 40801] [client 20.191.226.90:46800] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aZlw5Kg_MKVL7zhH7dwBsAAAAEY"]
[Sat Feb 21 16:46:29.044900 2026] [:error] [pid 40757:tid 40812] [client 20.191.226.90:48751] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aZlw5ag_MKVL7zhH7dwBsgAAAFE"]
[Sat Feb 21 16:46:30.305266 2026] [:error] [pid 11743:tid 11753] [client 20.191.226.90:3994] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aZlw5gALoZZjiTbGvqX_BAAAAUg"]
[Sat Feb 21 16:46:30.446435 2026] [:error] [pid 40757:tid 40811] [client 20.191.226.90:25702] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aZlw5qg_MKVL7zhH7dwBswAAAFA"]
[Sat Feb 21 16:46:30.663754 2026] [:error] [pid 11743:tid 11757] [client 20.191.226.90:27090] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aZlw5gALoZZjiTbGvqX_BgAAAUw"]
[Sat Feb 21 16:46:31.300435 2026] [:error] [pid 22558:tid 22561] [client 20.191.226.90:44449] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aZlw5yrVaIb2gXsVbDrwNgAAAQE"]
[Sat Feb 21 16:46:32.003835 2026] [:error] [pid 11941:tid 11950] [client 20.191.226.90:3327] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aZlw6HTUkHs3EVWllKmQWAAAAYc"]
[Sat Feb 21 16:46:33.049091 2026] [:error] [pid 40758:tid 40823] [client 20.191.226.90:47059] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aZlw6UBAHxvBM3i9iKFU8AAAAIE"]
[Sat Feb 21 16:46:34.083670 2026] [:error] [pid 11941:tid 11955] [client 20.191.226.90:37223] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aZlw6nTUkHs3EVWllKmQWwAAAYw"]
[Sat Feb 21 16:46:34.587342 2026] [:error] [pid 40871:tid 40890] [client 20.191.226.90:56133] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aZlw6jqDikjdiOZeJyV2RAAAANE"]
[Sat Feb 21 16:46:35.022088 2026] [:error] [pid 40756:tid 40769] [client 20.191.226.90:42828] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aZlw6wNlDP60sLYgqXKpzAAAAAM"]
[Sat Feb 21 16:46:35.077505 2026] [:error] [pid 40758:tid 40831] [client 20.191.226.90:24848] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styles.php"] [unique_id "aZlw60BAHxvBM3i9iKFU8wAAAIk"]
[Sat Feb 21 16:46:35.260648 2026] [:error] [pid 40757:tid 40797] [client 20.191.226.90:47068] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styles.php"] [unique_id "aZlw66g_MKVL7zhH7dwBuwAAAEI"]
[Sat Feb 21 16:46:35.341693 2026] [:error] [pid 22558:tid 22560] [client 20.191.226.90:35280] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styles.php"] [unique_id "aZlw6yrVaIb2gXsVbDrwPwAAAQA"]
[Sat Feb 21 16:46:35.374810 2026] [:error] [pid 40758:tid 40839] [client 20.191.226.90:56153] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styles.php"] [unique_id "aZlw60BAHxvBM3i9iKFU9AAAAJE"]
[Sat Feb 21 16:46:35.434232 2026] [:error] [pid 40756:tid 40783] [client 20.191.226.90:3283] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aZlw6wNlDP60sLYgqXKpzQAAABE"]
[Sat Feb 21 16:46:35.491455 2026] [:error] [pid 40757:tid 40796] [client 20.191.226.90:3279] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aZlw66g_MKVL7zhH7dwBvAAAAEE"]
[Sat Feb 21 16:46:35.716720 2026] [:error] [pid 22558:tid 22582] [client 20.191.226.90:39880] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aZlw6yrVaIb2gXsVbDrwQAAAARY"]
[Sat Feb 21 16:46:36.606525 2026] [:error] [pid 40756:tid 40768] [client 20.191.226.90:26214] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aZlw7ANlDP60sLYgqXKp0AAAAAI"]
[Sat Feb 21 16:46:37.025328 2026] [:error] [pid 22558:tid 22581] [client 20.191.226.90:39875] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZlw7SrVaIb2gXsVbDrwQwAAARU"]
[Sat Feb 21 16:46:37.381321 2026] [:error] [pid 40756:tid 40774] [client 20.191.226.90:56187] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZlw7QNlDP60sLYgqXKp0QAAAAg"]
[Sat Feb 21 16:46:37.412499 2026] [:error] [pid 22558:tid 22578] [client 20.191.226.90:35295] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZlw7SrVaIb2gXsVbDrwRAAAARI"]
[Sat Feb 21 16:46:37.732376 2026] [:error] [pid 40756:tid 40786] [client 20.191.226.90:35267] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aZlw7QNlDP60sLYgqXKp1AAAABQ"]
[Sat Feb 21 16:46:37.793568 2026] [:error] [pid 40756:tid 40773] [client 20.191.226.90:39919] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aZlw7QNlDP60sLYgqXKp1QAAAAc"]
[Sat Feb 21 16:46:37.823807 2026] [:error] [pid 22558:tid 22566] [client 20.191.226.90:43853] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aZlw7SrVaIb2gXsVbDrwRwAAAQY"]
[Sat Feb 21 16:46:37.890593 2026] [:error] [pid 11941:tid 11954] [client 20.191.226.90:35312] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aZlw7XTUkHs3EVWllKmQZAAAAYs"]
[Sat Feb 21 16:46:37.936698 2026] [:error] [pid 22558:tid 22561] [client 20.191.226.90:3289] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aZlw7SrVaIb2gXsVbDrwSAAAAQE"]
[Sat Feb 21 16:46:38.195442 2026] [:error] [pid 40758:tid 40841] [client 20.191.226.90:56157] [client 20.191.226.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aZlw7kBAHxvBM3i9iKFU-AAAAJM"]
[Sat Feb 21 16:46:38.713658 2026] [:error] [pid 40758:tid 40842] [client 20.191.226.90:42871] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aZlw7kBAHxvBM3i9iKFU-QAAAJQ"]
[Sat Feb 21 16:46:39.719197 2026] [:error] [pid 11941:tid 11967] [client 20.191.226.90:52256] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aZlw73TUkHs3EVWllKmQagAAAZg"]
[Sat Feb 21 16:46:40.043874 2026] [:error] [pid 40758:tid 40843] [client 20.191.226.90:24874] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aZlw8EBAHxvBM3i9iKFU_QAAAJU"]
[Sat Feb 21 16:46:40.097785 2026] [:error] [pid 11941:tid 11949] [client 20.191.226.90:24847] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aZlw8HTUkHs3EVWllKmQcAAAAYY"]
[Sat Feb 21 16:46:40.242750 2026] [:error] [pid 40758:tid 40826] [client 20.191.226.90:51788] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlw8EBAHxvBM3i9iKFU_gAAAIQ"]
[Sat Feb 21 16:46:40.403235 2026] [:error] [pid 22558:tid 22562] [client 20.191.226.90:40745] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlw8CrVaIb2gXsVbDrwTAAAAQI"]
[Sat Feb 21 16:46:40.640676 2026] [:error] [pid 11941:tid 11948] [client 20.191.226.90:27191] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlw8HTUkHs3EVWllKmQcgAAAYU"]
[Sat Feb 21 16:46:40.964979 2026] [:error] [pid 40758:tid 40830] [client 20.191.226.90:46158] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlw8EBAHxvBM3i9iKFVAQAAAIg"]
[Sat Feb 21 16:46:41.473118 2026] [:error] [pid 11941:tid 11951] [client 20.191.226.90:27146] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aZlw8XTUkHs3EVWllKmQdAAAAYg"]
[Sat Feb 21 16:46:41.624946 2026] [:error] [pid 40757:tid 40818] [client 20.191.226.90:42857] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aZlw8ag_MKVL7zhH7dwBvgAAAFc"]
[Sat Feb 21 16:46:42.037622 2026] [:error] [pid 22558:tid 22579] [client 20.191.226.90:44456] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aZlw8irVaIb2gXsVbDrwTgAAARM"]
[Sat Feb 21 16:46:42.195315 2026] [:error] [pid 40756:tid 40781] [client 20.191.226.90:39930] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aZlw8gNlDP60sLYgqXKp2wAAAA8"]
[Sat Feb 21 16:46:42.311908 2026] [:error] [pid 22558:tid 22563] [client 20.191.226.90:25114] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZlw8irVaIb2gXsVbDrwTwAAAQM"]
[Sat Feb 21 16:46:42.343209 2026] [:error] [pid 22558:tid 22583] [client 20.191.226.90:51021] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZlw8irVaIb2gXsVbDrwUAAAARc"]
[Sat Feb 21 16:46:42.399287 2026] [:error] [pid 40757:tid 40803] [client 20.191.226.90:24892] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZlw8qg_MKVL7zhH7dwBvwAAAEg"]
[Sat Feb 21 16:46:42.791401 2026] [:error] [pid 40756:tid 40772] [client 20.191.226.90:24894] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aZlw8gNlDP60sLYgqXKp3AAAAAY"]
[Sat Feb 21 16:46:43.067751 2026] [:error] [pid 40871:tid 40875] [client 20.191.226.90:42536] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aZlw8zqDikjdiOZeJyV2RwAAAMI"]
[Sat Feb 21 16:46:43.291457 2026] [:error] [pid 40758:tid 40822] [client 20.191.226.90:56778] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aZlw80BAHxvBM3i9iKFVBQAAAIA"]
[Sat Feb 21 16:46:43.530890 2026] [:error] [pid 11941:tid 11966] [client 20.191.226.90:40736] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aZlw83TUkHs3EVWllKmQeQAAAZc"]
[Sat Feb 21 16:46:43.640403 2026] [:error] [pid 11743:tid 11745] [client 20.191.226.90:48314] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "aZlw8wALoZZjiTbGvqX_DQAAAUA"]
[Sat Feb 21 16:46:43.690097 2026] [:error] [pid 22558:tid 22575] [client 20.191.226.90:27122] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aZlw8yrVaIb2gXsVbDrwVAAAAQ8"]
[Sat Feb 21 16:46:43.728696 2026] [:error] [pid 40756:tid 40783] [client 20.191.226.90:27092] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aZlw8wNlDP60sLYgqXKp3wAAABE"]
[Sat Feb 21 16:46:43.788169 2026] [:error] [pid 40757:tid 40805] [client 20.191.226.90:40754] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aZlw86g_MKVL7zhH7dwBwQAAAEo"]
[Sat Feb 21 16:46:43.875417 2026] [:error] [pid 40757:tid 40804] [client 20.191.226.90:27135] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aZlw86g_MKVL7zhH7dwBwgAAAEk"]
[Sat Feb 21 16:46:43.948618 2026] [:error] [pid 40871:tid 40894] [client 20.191.226.90:51066] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZlw8zqDikjdiOZeJyV2SQAAANU"]
[Sat Feb 21 16:46:43.985545 2026] [:error] [pid 11941:tid 11960] [client 20.191.226.90:51014] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZlw83TUkHs3EVWllKmQegAAAZE"]
[Sat Feb 21 16:46:44.056696 2026] [:error] [pid 40756:tid 40776] [client 20.191.226.90:37251] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZlw9ANlDP60sLYgqXKp4AAAAAo"]
[Sat Feb 21 16:46:44.236271 2026] [:error] [pid 40871:tid 40897] [client 20.191.226.90:52281] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZlw9DqDikjdiOZeJyV2SgAAANg"]
[Sat Feb 21 16:46:44.297780 2026] [:error] [pid 11743:tid 11768] [client 20.191.226.90:24871] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aZlw9AALoZZjiTbGvqX_DgAAAVc"]
[Sat Feb 21 16:46:44.371499 2026] [:error] [pid 40756:tid 40786] [client 20.191.226.90:37686] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aZlw9ANlDP60sLYgqXKp4QAAABQ"]
[Sat Feb 21 16:46:44.421377 2026] [:error] [pid 40758:tid 40840] [client 20.191.226.90:48460] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aZlw9EBAHxvBM3i9iKFVBwAAAJI"]
[Sat Feb 21 16:46:44.472589 2026] [:error] [pid 11743:tid 11763] [client 20.191.226.90:24838] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aZlw9AALoZZjiTbGvqX_DwAAAVI"]
[Sat Feb 21 16:46:44.569057 2026] [:error] [pid 40758:tid 40842] [client 20.191.226.90:46797] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/radio.php"] [unique_id "aZlw9EBAHxvBM3i9iKFVCAAAAJQ"]
[Sat Feb 21 16:46:44.604450 2026] [:error] [pid 40756:tid 40780] [client 20.191.226.90:47333] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/radio.php"] [unique_id "aZlw9ANlDP60sLYgqXKp4gAAAA4"]
[Sat Feb 21 16:46:44.644746 2026] [:error] [pid 11743:tid 11764] [client 20.191.226.90:33016] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/radio.php"] [unique_id "aZlw9AALoZZjiTbGvqX_EAAAAVM"]
[Sat Feb 21 16:46:44.690672 2026] [:error] [pid 40756:tid 40787] [client 20.191.226.90:34223] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/radio.php"] [unique_id "aZlw9ANlDP60sLYgqXKp5AAAABU"]
[Sat Feb 21 16:46:44.818002 2026] [:error] [pid 40756:tid 40788] [client 20.191.226.90:36454] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aZlw9ANlDP60sLYgqXKp5QAAABY"]
[Sat Feb 21 16:46:44.963704 2026] [:error] [pid 11743:tid 11758] [client 20.191.226.90:43647] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aZlw9AALoZZjiTbGvqX_EgAAAU0"]
[Sat Feb 21 16:46:45.021756 2026] [:error] [pid 11743:tid 11769] [client 20.191.226.90:42499] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aZlw9QALoZZjiTbGvqX_EwAAAVg"]
[Sat Feb 21 16:46:45.117509 2026] [:error] [pid 40758:tid 40828] [client 20.191.226.90:43640] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aZlw9UBAHxvBM3i9iKFVCQAAAIY"]
[Sat Feb 21 16:46:45.180285 2026] [:error] [pid 40758:tid 40838] [client 20.191.226.90:46166] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZlw9UBAHxvBM3i9iKFVCgAAAJA"]
[Sat Feb 21 16:46:45.321486 2026] [:error] [pid 40756:tid 40767] [client 20.191.226.90:46164] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZlw9QNlDP60sLYgqXKp5gAAAAE"]
[Sat Feb 21 16:46:45.675722 2026] [:error] [pid 40756:tid 40779] [client 20.191.226.90:37692] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZlw9QNlDP60sLYgqXKp5wAAAA0"]
[Sat Feb 21 16:46:46.492644 2026] [:error] [pid 22558:tid 22577] [client 20.191.226.90:42081] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZlw9irVaIb2gXsVbDrwVwAAARE"]
[Sat Feb 21 16:46:46.811375 2026] [:error] [pid 11941:tid 11954] [client 20.191.226.90:48291] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aZlw9nTUkHs3EVWllKmQfwAAAYs"]
[Sat Feb 21 16:46:47.358469 2026] [:error] [pid 22558:tid 22562] [client 20.191.226.90:34179] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aZlw9yrVaIb2gXsVbDrwWAAAAQI"]
[Sat Feb 21 16:46:47.779372 2026] [:error] [pid 22558:tid 22572] [client 20.191.226.90:27122] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aZlw9yrVaIb2gXsVbDrwWQAAAQw"]
[Sat Feb 21 16:46:48.116082 2026] [:error] [pid 22558:tid 22574] [client 20.191.226.90:37626] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aZlw-CrVaIb2gXsVbDrwWwAAAQ4"]
[Sat Feb 21 16:46:48.756634 2026] [:error] [pid 22558:tid 22579] [client 20.191.226.90:40753] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aZlw-CrVaIb2gXsVbDrwXQAAARM"]
[Sat Feb 21 16:46:48.983035 2026] [:error] [pid 40758:tid 40836] [client 20.191.226.90:3549] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aZlw-EBAHxvBM3i9iKFVEAAAAI4"]
[Sat Feb 21 16:46:49.450659 2026] [:error] [pid 40756:tid 40776] [client 20.191.226.90:42051] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aZlw-QNlDP60sLYgqXKp7QAAAAo"]
[Sat Feb 21 16:46:49.905605 2026] [:error] [pid 22558:tid 22563] [client 20.191.226.90:46169] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aZlw-SrVaIb2gXsVbDrwXwAAAQM"]
[Sat Feb 21 16:46:50.208408 2026] [:error] [pid 22558:tid 22568] [client 20.191.226.90:36474] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aZlw-irVaIb2gXsVbDrwYAAAAQg"]
[Sat Feb 21 16:46:50.329208 2026] [:error] [pid 40756:tid 40773] [client 20.191.226.90:56801] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aZlw-gNlDP60sLYgqXKp8AAAAAc"]
[Sat Feb 21 16:46:50.373013 2026] [:error] [pid 11941:tid 11950] [client 20.191.226.90:34180] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aZlw-nTUkHs3EVWllKmQgwAAAYc"]
[Sat Feb 21 16:46:50.654444 2026] [:error] [pid 40756:tid 40780] [client 20.191.226.90:3575] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aZlw-gNlDP60sLYgqXKp8QAAAA4"]
[Sat Feb 21 16:46:51.045593 2026] [:error] [pid 40756:tid 40766] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Sat Feb 21 16:46:51.094119 2026] [:error] [pid 40756:tid 40778] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Feb 21 16:46:51.113610 2026] [:error] [pid 40756:tid 40787] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/yawa.php
[Sat Feb 21 16:46:51.172496 2026] [:error] [pid 40756:tid 40788] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sat Feb 21 16:46:51.345823 2026] [:error] [pid 40756:tid 40782] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Feb 21 16:46:51.386266 2026] [:error] [pid 40756:tid 40777] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sat Feb 21 16:46:51.423155 2026] [:error] [pid 40756:tid 40779] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sat Feb 21 16:46:51.443281 2026] [:error] [pid 40756:tid 40790] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Sat Feb 21 16:46:51.576268 2026] [:error] [pid 40756:tid 40769] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Feb 21 16:46:51.777480 2026] [:error] [pid 40756:tid 40781] [client 20.191.226.90:32653] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Feb 21 16:46:51.793402 2026] [:error] [pid 40756:tid 40772] [client 20.191.226.90:32653] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aZlw-wNlDP60sLYgqXKp_wAAAAY"]
[Sat Feb 21 16:46:52.335507 2026] [:error] [pid 40758:tid 40828] [client 20.191.226.90:47773] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aZlw_EBAHxvBM3i9iKFVEwAAAIY"]
[Sat Feb 21 16:46:52.789500 2026] [:error] [pid 11941:tid 11958] [client 20.191.226.90:25781] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aZlw_HTUkHs3EVWllKmQiQAAAY8"]
[Sat Feb 21 16:46:52.852149 2026] [:error] [pid 11743:tid 11763] [client 20.191.226.90:43932] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aZlw_AALoZZjiTbGvqX_IAAAAVI"]
[Sat Feb 21 16:46:52.896996 2026] [:error] [pid 11743:tid 11764] [client 20.191.226.90:32701] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aZlw_AALoZZjiTbGvqX_IQAAAVM"]
[Sat Feb 21 16:46:52.961411 2026] [:error] [pid 40756:tid 40767] [client 20.191.226.90:35718] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aZlw_ANlDP60sLYgqXKqCQAAAAE"]
[Sat Feb 21 16:46:53.022727 2026] [:error] [pid 40756:tid 40782] [client 20.191.226.90:33469] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aZlw_QNlDP60sLYgqXKqCwAAABA"]
[Sat Feb 21 16:46:53.056241 2026] [:error] [pid 40757:tid 40813] [client 20.191.226.90:36530] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "aZlw_ag_MKVL7zhH7dwBxgAAAFI"]
[Sat Feb 21 16:46:53.107072 2026] [:error] [pid 40757:tid 40801] [client 20.191.226.90:37994] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZlw_ag_MKVL7zhH7dwBxwAAAEY"]
[Sat Feb 21 16:46:53.164683 2026] [:error] [pid 11743:tid 11758] [client 20.191.226.90:34597] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZlw_QALoZZjiTbGvqX_IgAAAU0"]
[Sat Feb 21 16:46:53.225776 2026] [:error] [pid 40758:tid 40829] [client 20.191.226.90:56849] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZlw_UBAHxvBM3i9iKFVFQAAAIc"]
[Sat Feb 21 16:46:53.259219 2026] [:error] [pid 40756:tid 40779] [client 20.191.226.90:25765] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aZlw_QNlDP60sLYgqXKqDQAAAA0"]
[Sat Feb 21 16:46:53.316230 2026] [:error] [pid 40757:tid 40812] [client 20.191.226.90:25765] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZlw_ag_MKVL7zhH7dwByAAAAFE"]
[Sat Feb 21 16:46:53.374405 2026] [:error] [pid 22558:tid 22577] [client 20.191.226.90:37308] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZlw_SrVaIb2gXsVbDrwaQAAARE"]
[Sat Feb 21 16:46:53.455870 2026] [:error] [pid 11743:tid 11766] [client 20.191.226.90:36418] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZlw_QALoZZjiTbGvqX_IwAAAVU"]
[Sat Feb 21 16:46:53.512283 2026] [:error] [pid 40756:tid 40771] [client 20.191.226.90:25757] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aZlw_QNlDP60sLYgqXKqDgAAAAU"]
[Sat Feb 21 16:46:53.577100 2026] [:error] [pid 22558:tid 22572] [client 20.191.226.90:39230] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aZlw_SrVaIb2gXsVbDrwbAAAAQw"]
[Sat Feb 21 16:46:53.611323 2026] [:error] [pid 11743:tid 11746] [client 20.191.226.90:35732] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aZlw_QALoZZjiTbGvqX_JAAAAUE"]
[Sat Feb 21 16:46:53.712439 2026] [:error] [pid 22558:tid 22579] [client 20.191.226.90:33452] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aZlw_SrVaIb2gXsVbDrwbgAAARM"]
[Sat Feb 21 16:46:53.954226 2026] [:error] [pid 40871:tid 40875] [client 20.191.226.90:34609] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aZlw_TqDikjdiOZeJyV2UgAAAMI"]
[Sat Feb 21 16:46:54.040799 2026] [:error] [pid 40757:tid 40806] [client 20.191.226.90:51432] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZlw_qg_MKVL7zhH7dwBygAAAEs"]
[Sat Feb 21 16:46:54.303581 2026] [:error] [pid 40756:tid 40784] [client 20.191.226.90:37267] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZlw_gNlDP60sLYgqXKqEwAAABI"]
[Sat Feb 21 16:46:54.695765 2026] [:error] [pid 40756:tid 40773] [client 20.191.226.90:37248] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZlw_gNlDP60sLYgqXKqFgAAAAc"]
[Sat Feb 21 16:46:54.930116 2026] [:error] [pid 40756:tid 40778] [client 20.191.226.90:35718] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aZlw_gNlDP60sLYgqXKqGAAAAAw"]
[Sat Feb 21 16:46:55.239991 2026] [:error] [pid 40757:tid 40811] [client 20.191.226.90:56870] [client 20.191.226.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aZlw_6g_MKVL7zhH7dwBzQAAAFA"]
[Sat Feb 21 16:46:55.519740 2026] [:error] [pid 40758:tid 40845] [client 20.191.226.90:36506] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aZlw_0BAHxvBM3i9iKFVFgAAAJc"]
[Sat Feb 21 16:46:56.050671 2026] [:error] [pid 40871:tid 40883] [client 20.191.226.90:3462] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aZlxADqDikjdiOZeJyV2UwAAAMo"]
[Sat Feb 21 16:46:56.649375 2026] [:error] [pid 22558:tid 22566] [client 20.191.226.90:56874] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aZlxACrVaIb2gXsVbDrwdgAAAQY"]
[Sat Feb 21 16:46:56.957548 2026] [:error] [pid 11941:tid 11947] [client 20.191.226.90:30044] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aZlxAHTUkHs3EVWllKmQjAAAAYQ"]
[Sat Feb 21 16:46:57.229105 2026] [:error] [pid 40758:tid 40826] [client 20.191.226.90:57195] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revision.php"] [unique_id "aZlxAUBAHxvBM3i9iKFVFwAAAIQ"]
[Sat Feb 21 16:46:57.429455 2026] [:error] [pid 40871:tid 40897] [client 20.191.226.90:48050] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revision.php"] [unique_id "aZlxATqDikjdiOZeJyV2VAAAANg"]
[Sat Feb 21 16:46:57.479660 2026] [:error] [pid 40871:tid 40893] [client 20.191.226.90:57169] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revision.php"] [unique_id "aZlxATqDikjdiOZeJyV2VQAAANQ"]
[Sat Feb 21 16:46:57.592398 2026] [:error] [pid 40758:tid 40844] [client 20.191.226.90:48003] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revision.php"] [unique_id "aZlxAUBAHxvBM3i9iKFVGQAAAJY"]
[Sat Feb 21 16:46:57.641579 2026] [:error] [pid 40757:tid 40804] [client 20.191.226.90:3465] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aZlxAag_MKVL7zhH7dwB0QAAAEk"]
[Sat Feb 21 16:46:57.673051 2026] [:error] [pid 40756:tid 40770] [client 20.191.226.90:48015] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aZlxAQNlDP60sLYgqXKqIAAAAAQ"]
[Sat Feb 21 16:46:57.742044 2026] [:error] [pid 11743:tid 11761] [client 20.191.226.90:41056] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aZlxAQALoZZjiTbGvqX_LAAAAVA"]
[Sat Feb 21 16:46:57.780927 2026] [:error] [pid 40757:tid 40799] [client 20.191.226.90:3456] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aZlxAag_MKVL7zhH7dwB0wAAAEQ"]
[Sat Feb 21 16:46:57.816653 2026] [:error] [pid 11743:tid 11768] [client 20.191.226.90:48014] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aZlxAQALoZZjiTbGvqX_LQAAAVc"]
[Sat Feb 21 16:46:57.876075 2026] [:error] [pid 40757:tid 40814] [client 20.191.226.90:48038] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aZlxAag_MKVL7zhH7dwB1AAAAFM"]
[Sat Feb 21 16:46:57.990327 2026] [:error] [pid 40757:tid 40797] [client 20.191.226.90:33442] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aZlxAag_MKVL7zhH7dwB1QAAAEI"]
[Sat Feb 21 16:46:58.098714 2026] [:error] [pid 11743:tid 11763] [client 20.191.226.90:3631] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aZlxAgALoZZjiTbGvqX_LgAAAVI"]
[Sat Feb 21 16:46:58.134546 2026] [:error] [pid 40757:tid 40802] [client 20.191.226.90:48037] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZlxAqg_MKVL7zhH7dwB1gAAAEc"]
[Sat Feb 21 16:46:58.180880 2026] [:error] [pid 40757:tid 40796] [client 20.191.226.90:48054] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZlxAqg_MKVL7zhH7dwB1wAAAEE"]
[Sat Feb 21 16:46:58.211951 2026] [:error] [pid 40758:tid 40831] [client 20.191.226.90:3474] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZlxAkBAHxvBM3i9iKFVGwAAAIk"]
[Sat Feb 21 16:46:58.289990 2026] [:error] [pid 11743:tid 11769] [client 20.191.226.90:56838] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aZlxAgALoZZjiTbGvqX_LwAAAVg"]
[Sat Feb 21 16:46:58.443280 2026] [:error] [pid 40757:tid 40819] [client 20.191.226.90:39169] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3lls.php7"] [unique_id "aZlxAqg_MKVL7zhH7dwB2AAAAFg"]
[Sat Feb 21 16:46:59.119233 2026] [:error] [pid 11743:tid 11746] [client 20.191.226.90:3463] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3lls.php7"] [unique_id "aZlxAwALoZZjiTbGvqX_MQAAAUE"]
[Sat Feb 21 16:46:59.443018 2026] [:error] [pid 11743:tid 11752] [client 20.191.226.90:33362] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3lls.php7"] [unique_id "aZlxAwALoZZjiTbGvqX_MgAAAUc"]
[Sat Feb 21 16:46:59.798472 2026] [:error] [pid 40871:tid 40881] [client 20.191.226.90:43925] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3lls.php7"] [unique_id "aZlxAzqDikjdiOZeJyV2WQAAAMg"]
[Sat Feb 21 16:46:59.906354 2026] [:error] [pid 40871:tid 40885] [client 20.191.226.90:38449] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aZlxAzqDikjdiOZeJyV2WgAAAMw"]
[Sat Feb 21 16:47:00.009786 2026] [:error] [pid 11743:tid 11755] [client 20.191.226.90:30038] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aZlxBAALoZZjiTbGvqX_NAAAAUo"]
[Sat Feb 21 16:47:00.101741 2026] [:error] [pid 40871:tid 40888] [client 20.191.226.90:3613] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aZlxBDqDikjdiOZeJyV2WwAAAM8"]
[Sat Feb 21 16:47:00.216612 2026] [:error] [pid 40871:tid 40895] [client 20.191.226.90:41056] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "aZlxBDqDikjdiOZeJyV2XAAAANY"]
[Sat Feb 21 16:47:00.351458 2026] [:error] [pid 40871:tid 40877] [client 20.191.226.90:57186] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZlxBDqDikjdiOZeJyV2XQAAAMQ"]
[Sat Feb 21 16:47:00.600378 2026] [:error] [pid 40871:tid 40890] [client 20.191.226.90:31653] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZlxBDqDikjdiOZeJyV2XwAAANE"]
[Sat Feb 21 16:47:00.858490 2026] [:error] [pid 40757:tid 40795] [client 20.191.226.90:30054] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZlxBKg_MKVL7zhH7dwB3QAAAEA"]
[Sat Feb 21 16:47:01.218939 2026] [:error] [pid 40871:tid 40882] [client 20.191.226.90:3464] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aZlxBTqDikjdiOZeJyV2YgAAAMk"]
[Sat Feb 21 16:47:01.456004 2026] [:error] [pid 40871:tid 40891] [client 20.191.226.90:48043] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bugger.php"] [unique_id "aZlxBTqDikjdiOZeJyV2YwAAANI"]
[Sat Feb 21 16:47:01.497516 2026] [:error] [pid 11743:tid 11747] [client 20.191.226.90:33395] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bugger.php"] [unique_id "aZlxBQALoZZjiTbGvqX_OQAAAUI"]
[Sat Feb 21 16:47:01.566089 2026] [:error] [pid 11743:tid 11762] [client 20.191.226.90:33369] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bugger.php"] [unique_id "aZlxBQALoZZjiTbGvqX_OwAAAVE"]
[Sat Feb 21 16:47:01.597078 2026] [:error] [pid 40757:tid 40810] [client 20.191.226.90:48035] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bugger.php"] [unique_id "aZlxBag_MKVL7zhH7dwB3gAAAE8"]
[Sat Feb 21 16:47:01.716499 2026] [:error] [pid 11941:tid 11952] [client 20.191.226.90:33356] [client 20.191.226.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZlxBXTUkHs3EVWllKmQjgAAAYk"]
[Sat Feb 21 16:47:01.758595 2026] [:error] [pid 40756:tid 40781] [client 20.191.226.90:41432] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aZlxBQNlDP60sLYgqXKqKQAAAA8"]
[Sat Feb 21 16:47:01.816765 2026] [:error] [pid 11941:tid 11945] [client 20.191.226.90:48014] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aZlxBXTUkHs3EVWllKmQkAAAAYI"]
[Sat Feb 21 16:47:01.912233 2026] [:error] [pid 40756:tid 40785] [client 20.191.226.90:38445] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aZlxBQNlDP60sLYgqXKqKgAAABM"]
[Sat Feb 21 16:47:02.440607 2026] [:error] [pid 40756:tid 40789] [client 20.191.226.90:3507] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aZlxBgNlDP60sLYgqXKqLwAAABc"]
[Sat Feb 21 16:47:02.602891 2026] [:error] [pid 40871:tid 40887] [client 20.191.226.90:33430] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aZlxBjqDikjdiOZeJyV2ZgAAAM4"]
[Sat Feb 21 16:47:02.686275 2026] [:error] [pid 11743:tid 11750] [client 20.191.226.90:43964] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aZlxBgALoZZjiTbGvqX_PAAAAUU"]
[Sat Feb 21 16:47:02.829044 2026] [:error] [pid 22558:tid 22572] [client 20.191.226.90:33346] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aZlxBirVaIb2gXsVbDrwggAAAQw"]
[Sat Feb 21 16:47:02.981095 2026] [:error] [pid 22558:tid 22574] [client 20.191.226.90:30598] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aZlxBirVaIb2gXsVbDrwgwAAAQ4"]
[Sat Feb 21 16:47:03.111601 2026] [:error] [pid 22558:tid 22579] [client 20.191.226.90:3646] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aZlxByrVaIb2gXsVbDrwhAAAARM"]
[Sat Feb 21 16:47:03.384052 2026] [:error] [pid 40758:tid 40832] [client 20.191.226.90:48026] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aZlxB0BAHxvBM3i9iKFVHwAAAIo"]
[Sat Feb 21 16:47:03.463641 2026] [:error] [pid 40758:tid 40828] [client 20.191.226.90:33374] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aZlxB0BAHxvBM3i9iKFVIAAAAIY"]
[Sat Feb 21 16:47:03.493206 2026] [:error] [pid 40757:tid 40804] [client 20.191.226.90:43933] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aZlxB6g_MKVL7zhH7dwB3wAAAEk"]
[Sat Feb 21 16:47:03.718881 2026] [:error] [pid 40871:tid 40893] [client 20.191.226.90:43933] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aZlxBzqDikjdiOZeJyV2aQAAANQ"]
[Sat Feb 21 16:47:03.873069 2026] [:error] [pid 40756:tid 40786] [client 20.191.226.90:3645] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aZlxBwNlDP60sLYgqXKqMQAAABQ"]
[Sat Feb 21 16:47:04.008511 2026] [:error] [pid 40757:tid 40802] [client 20.191.226.90:51417] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aZlxCKg_MKVL7zhH7dwB4gAAAEc"]
[Sat Feb 21 16:47:04.051655 2026] [:error] [pid 40871:tid 40884] [client 20.191.226.90:43952] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aZlxCDqDikjdiOZeJyV2agAAAMs"]
[Sat Feb 21 16:47:04.114608 2026] [:error] [pid 40871:tid 40885] [client 20.191.226.90:47724] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aZlxCDqDikjdiOZeJyV2awAAAMw"]
[Sat Feb 21 16:47:04.235297 2026] [:error] [pid 40758:tid 40826] [client 20.191.226.90:3624] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aZlxCEBAHxvBM3i9iKFVJAAAAIQ"]
[Sat Feb 21 16:47:04.917739 2026] [:error] [pid 22558:tid 22573] [client 20.191.226.90:47739] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aZlxCCrVaIb2gXsVbDrwiAAAAQ0"]
[Sat Feb 21 16:47:05.098369 2026] [:error] [pid 11743:tid 11769] [client 20.191.226.90:3490] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aZlxCQALoZZjiTbGvqX_PQAAAVg"]
[Sat Feb 21 16:47:05.182186 2026] [:error] [pid 40757:tid 40800] [client 20.191.226.90:57212] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aZlxCag_MKVL7zhH7dwB6AAAAEU"]
[Sat Feb 21 16:47:05.239939 2026] [:error] [pid 40757:tid 40808] [client 20.191.226.90:30624] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aZlxCag_MKVL7zhH7dwB6QAAAE0"]
[Sat Feb 21 16:47:05.295813 2026] [:error] [pid 40871:tid 40895] [client 20.191.226.90:43937] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aZlxCTqDikjdiOZeJyV2bAAAANY"]
[Sat Feb 21 16:47:05.326328 2026] [:error] [pid 11743:tid 11766] [client 20.191.226.90:3604] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aZlxCQALoZZjiTbGvqX_PgAAAVU"]
[Sat Feb 21 16:47:05.366610 2026] [:error] [pid 11743:tid 11746] [client 20.191.226.90:24804] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aZlxCQALoZZjiTbGvqX_PwAAAUE"]
[Sat Feb 21 16:47:05.428313 2026] [:error] [pid 11743:tid 11752] [client 20.191.226.90:43930] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aZlxCQALoZZjiTbGvqX_QQAAAUc"]
[Sat Feb 21 16:47:05.518846 2026] [:error] [pid 11743:tid 11755] [client 20.191.226.90:30053] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aZlxCQALoZZjiTbGvqX_QgAAAUo"]
[Sat Feb 21 16:47:05.578634 2026] [:error] [pid 11743:tid 11765] [client 20.191.226.90:48044] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZlxCQALoZZjiTbGvqX_QwAAAVQ"]
[Sat Feb 21 16:47:05.619429 2026] [:error] [pid 11743:tid 11751] [client 20.191.226.90:30055] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZlxCQALoZZjiTbGvqX_RQAAAUY"]
[Sat Feb 21 16:47:05.668300 2026] [:error] [pid 40758:tid 40836] [client 20.191.226.90:34142] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZlxCUBAHxvBM3i9iKFVKAAAAI4"]
[Sat Feb 21 16:47:05.716506 2026] [:error] [pid 40758:tid 40837] [client 20.191.226.90:28222] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aZlxCUBAHxvBM3i9iKFVKQAAAI8"]
[Sat Feb 21 16:47:05.746508 2026] [:error] [pid 40758:tid 40841] [client 20.191.226.90:38442] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZlxCUBAHxvBM3i9iKFVKgAAAJM"]
[Sat Feb 21 16:47:05.857957 2026] [:error] [pid 40757:tid 40811] [client 20.191.226.90:4058] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZlxCag_MKVL7zhH7dwB6gAAAFA"]
[Sat Feb 21 16:47:05.929422 2026] [:error] [pid 40756:tid 40788] [client 20.191.226.90:34165] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZlxCQNlDP60sLYgqXKqNAAAABY"]
[Sat Feb 21 16:47:06.123425 2026] [:error] [pid 40757:tid 40817] [client 20.191.226.90:4058] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aZlxCqg_MKVL7zhH7dwB7AAAAFY"]
[Sat Feb 21 16:47:06.175162 2026] [:error] [pid 11941:tid 11959] [client 20.191.226.90:34124] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aZlxCnTUkHs3EVWllKmQkwAAAZA"]
[Sat Feb 21 16:47:06.206256 2026] [:error] [pid 22558:tid 22583] [client 20.191.226.90:24787] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aZlxCirVaIb2gXsVbDrwiQAAARc"]
[Sat Feb 21 16:47:06.239619 2026] [:error] [pid 11941:tid 11944] [client 20.191.226.90:30617] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aZlxCnTUkHs3EVWllKmQlAAAAYE"]
[Sat Feb 21 16:47:06.277445 2026] [:error] [pid 22558:tid 22569] [client 20.191.226.90:34155] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aZlxCirVaIb2gXsVbDrwigAAAQk"]
[Sat Feb 21 16:47:06.319417 2026] [:error] [pid 40871:tid 40886] [client 20.191.226.90:30627] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aZlxCjqDikjdiOZeJyV2bQAAAM0"]
[Sat Feb 21 16:47:06.371438 2026] [:error] [pid 22558:tid 22571] [client 20.191.226.90:34144] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aZlxCirVaIb2gXsVbDrwiwAAAQs"]
[Sat Feb 21 16:47:06.441828 2026] [:error] [pid 40758:tid 40840] [client 20.191.226.90:4053] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aZlxCkBAHxvBM3i9iKFVLQAAAJI"]
[Sat Feb 21 16:47:06.513765 2026] [:error] [pid 11743:tid 11762] [client 20.191.226.90:24787] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aZlxCgALoZZjiTbGvqX_RgAAAVE"]
[Sat Feb 21 16:47:06.544802 2026] [:error] [pid 40758:tid 40842] [client 20.191.226.90:31650] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZlxCkBAHxvBM3i9iKFVLgAAAJQ"]
[Sat Feb 21 16:47:06.722228 2026] [:error] [pid 22558:tid 22560] [client 20.191.226.90:57416] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZlxCirVaIb2gXsVbDrwjAAAAQA"]
[Sat Feb 21 16:47:06.786205 2026] [:error] [pid 11743:tid 11753] [client 20.191.226.90:48814] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZlxCgALoZZjiTbGvqX_SAAAAUg"]
[Sat Feb 21 16:47:06.844227 2026] [:error] [pid 40758:tid 40828] [client 20.191.226.90:30630] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aZlxCkBAHxvBM3i9iKFVLwAAAIY"]
[Sat Feb 21 16:47:06.890333 2026] [:error] [pid 11743:tid 11748] [client 20.191.226.90:30042] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aZlxCgALoZZjiTbGvqX_SQAAAUM"]
[Sat Feb 21 16:47:06.938382 2026] [:error] [pid 40756:tid 40782] [client 20.191.226.90:56861] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aZlxCgNlDP60sLYgqXKqNQAAABA"]
[Sat Feb 21 16:47:06.983697 2026] [:error] [pid 11941:tid 11943] [client 20.191.226.90:30066] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aZlxCnTUkHs3EVWllKmQlQAAAYA"]
[Sat Feb 21 16:47:07.021968 2026] [:error] [pid 40758:tid 40824] [client 20.191.226.90:48027] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aZlxC0BAHxvBM3i9iKFVMAAAAII"]
[Sat Feb 21 16:47:07.053349 2026] [:error] [pid 40758:tid 40838] [client 20.191.226.90:57445] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aZlxC0BAHxvBM3i9iKFVMQAAAJA"]
[Sat Feb 21 16:47:07.083895 2026] [:error] [pid 40758:tid 40822] [client 20.191.226.90:48781] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aZlxC0BAHxvBM3i9iKFVMwAAAIA"]
[Sat Feb 21 16:47:07.140128 2026] [:error] [pid 11743:tid 11750] [client 20.191.226.90:4080] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aZlxCwALoZZjiTbGvqX_SwAAAUU"]
[Sat Feb 21 16:47:07.269147 2026] [:error] [pid 40758:tid 40846] [client 20.191.226.90:38441] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aZlxC0BAHxvBM3i9iKFVNAAAAJg"]
[Sat Feb 21 16:47:07.371645 2026] [:error] [pid 11743:tid 11768] [client 20.191.226.90:31666] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aZlxCwALoZZjiTbGvqX_TAAAAVc"]
[Sat Feb 21 16:47:07.422100 2026] [:error] [pid 40758:tid 40843] [client 20.191.226.90:41860] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aZlxC0BAHxvBM3i9iKFVNQAAAJU"]
[Sat Feb 21 16:47:07.458652 2026] [:error] [pid 11743:tid 11757] [client 20.191.226.90:31237] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aZlxCwALoZZjiTbGvqX_TgAAAUw"]
[Sat Feb 21 16:47:07.489723 2026] [:error] [pid 40871:tid 40880] [client 20.191.226.90:4050] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "aZlxCzqDikjdiOZeJyV2bgAAAMc"]
[Sat Feb 21 16:47:07.529267 2026] [:error] [pid 22558:tid 22567] [client 20.191.226.90:31282] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aZlxCyrVaIb2gXsVbDrwjwAAAQc"]
[Sat Feb 21 16:47:07.564237 2026] [:error] [pid 22558:tid 22578] [client 20.191.226.90:31251] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aZlxCyrVaIb2gXsVbDrwkAAAARI"]
[Sat Feb 21 16:47:07.598048 2026] [:error] [pid 40758:tid 40845] [client 20.191.226.90:34134] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aZlxC0BAHxvBM3i9iKFVNwAAAJc"]
[Sat Feb 21 16:47:07.794234 2026] [:error] [pid 22558:tid 22577] [client 20.191.226.90:57187] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aZlxCyrVaIb2gXsVbDrwkQAAARE"]
[Sat Feb 21 16:47:07.839506 2026] [:error] [pid 22558:tid 22572] [client 20.191.226.90:26643] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aZlxCyrVaIb2gXsVbDrwkgAAAQw"]
[Sat Feb 21 16:47:07.877351 2026] [:error] [pid 40757:tid 40818] [client 20.191.226.90:30596] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aZlxC6g_MKVL7zhH7dwB7QAAAFc"]
[Sat Feb 21 16:47:07.917806 2026] [:error] [pid 22558:tid 22574] [client 20.191.226.90:28205] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aZlxCyrVaIb2gXsVbDrwkwAAAQ4"]
[Sat Feb 21 16:47:07.976487 2026] [:error] [pid 40757:tid 40803] [client 20.191.226.90:4076] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aZlxC6g_MKVL7zhH7dwB7wAAAEg"]
[Sat Feb 21 16:47:08.018639 2026] [:error] [pid 22558:tid 22584] [client 20.191.226.90:48795] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZlxDCrVaIb2gXsVbDrwlAAAARg"]
[Sat Feb 21 16:47:08.077801 2026] [:error] [pid 22558:tid 22579] [client 20.191.226.90:26679] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZlxDCrVaIb2gXsVbDrwlgAAARM"]
[Sat Feb 21 16:47:08.123317 2026] [:error] [pid 11743:tid 11763] [client 20.191.226.90:57471] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZlxDAALoZZjiTbGvqX_UQAAAVI"]
[Sat Feb 21 16:47:08.308103 2026] [:error] [pid 22558:tid 22565] [client 20.191.226.90:57423] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aZlxDCrVaIb2gXsVbDrwlwAAAQU"]
[Sat Feb 21 16:47:08.460099 2026] [:error] [pid 11941:tid 11962] [client 20.191.226.90:33064] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aZlxDHTUkHs3EVWllKmQlgAAAZM"]
[Sat Feb 21 16:47:08.519205 2026] [:error] [pid 40758:tid 40833] [client 20.191.226.90:32196] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aZlxDEBAHxvBM3i9iKFVOQAAAIs"]
[Sat Feb 21 16:47:08.641022 2026] [:error] [pid 11941:tid 11953] [client 20.191.226.90:41895] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aZlxDHTUkHs3EVWllKmQmQAAAYo"]
[Sat Feb 21 16:47:09.022327 2026] [:error] [pid 40758:tid 40831] [client 20.191.226.90:26660] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aZlxDUBAHxvBM3i9iKFVOgAAAIk"]
[Sat Feb 21 16:47:09.162666 2026] [:error] [pid 11941:tid 11964] [client 20.191.226.90:4075] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aZlxDXTUkHs3EVWllKmQmwAAAZU"]
[Sat Feb 21 16:47:09.224474 2026] [:error] [pid 40871:tid 40897] [client 20.191.226.90:32201] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aZlxDTqDikjdiOZeJyV2bwAAANg"]
[Sat Feb 21 16:47:09.267907 2026] [:error] [pid 40871:tid 40893] [client 20.191.226.90:4088] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aZlxDTqDikjdiOZeJyV2cAAAANQ"]
[Sat Feb 21 16:47:09.309103 2026] [:error] [pid 40871:tid 40884] [client 20.191.226.90:26661] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aZlxDTqDikjdiOZeJyV2cQAAAMs"]
[Sat Feb 21 16:47:09.364463 2026] [:error] [pid 40871:tid 40889] [client 20.191.226.90:31643] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aZlxDTqDikjdiOZeJyV2cwAAANA"]
[Sat Feb 21 16:47:09.424632 2026] [:error] [pid 40758:tid 40835] [client 20.191.226.90:41901] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aZlxDUBAHxvBM3i9iKFVOwAAAI0"]
[Sat Feb 21 16:47:09.479413 2026] [:error] [pid 40758:tid 40830] [client 20.191.226.90:38441] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aZlxDUBAHxvBM3i9iKFVPAAAAIg"]
[Sat Feb 21 16:47:09.549824 2026] [:error] [pid 40758:tid 40834] [client 20.191.226.90:33043] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aZlxDUBAHxvBM3i9iKFVPQAAAIw"]
[Sat Feb 21 16:47:09.629295 2026] [:error] [pid 11941:tid 11957] [client 20.191.226.90:32193] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZlxDXTUkHs3EVWllKmQnAAAAY4"]
[Sat Feb 21 16:47:09.778642 2026] [:error] [pid 40758:tid 40837] [client 20.191.226.90:41863] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZlxDUBAHxvBM3i9iKFVPgAAAI8"]
[Sat Feb 21 16:47:09.939883 2026] [:error] [pid 40758:tid 40825] [client 20.191.226.90:26668] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZlxDUBAHxvBM3i9iKFVPwAAAIM"]
[Sat Feb 21 16:47:10.032452 2026] [:error] [pid 40758:tid 40840] [client 20.191.226.90:30072] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aZlxDkBAHxvBM3i9iKFVQAAAAJI"]
[Sat Feb 21 16:47:10.072668 2026] [:error] [pid 40758:tid 40842] [client 20.191.226.90:48021] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aZlxDkBAHxvBM3i9iKFVQQAAAJQ"]
[Sat Feb 21 16:47:10.137141 2026] [:error] [pid 22558:tid 22568] [client 20.191.226.90:46164] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aZlxDirVaIb2gXsVbDrwmwAAAQg"]
[Sat Feb 21 16:47:10.185334 2026] [:error] [pid 40757:tid 40819] [client 20.191.226.90:33083] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aZlxDqg_MKVL7zhH7dwB8QAAAFg"]
[Sat Feb 21 16:47:10.365804 2026] [:error] [pid 22558:tid 22583] [client 20.191.226.90:30030] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "aZlxDirVaIb2gXsVbDrwnAAAARc"]
[Sat Feb 21 16:47:11.136790 2026] [:error] [pid 22558:tid 22560] [client 20.191.226.90:47715] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZlxDyrVaIb2gXsVbDrwnwAAAQA"]
[Sat Feb 21 16:47:11.583827 2026] [:error] [pid 40757:tid 40813] [client 20.191.226.90:31244] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZlxD6g_MKVL7zhH7dwB9QAAAFI"]
[Sat Feb 21 16:47:11.703355 2026] [:error] [pid 11743:tid 11745] [client 20.191.226.90:39588] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZlxDwALoZZjiTbGvqX_VAAAAUA"]
[Sat Feb 21 16:47:11.973268 2026] [:error] [pid 40871:tid 40890] [client 20.191.226.90:57422] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aZlxDzqDikjdiOZeJyV2dgAAANE"]
[Sat Feb 21 16:47:12.316029 2026] [:error] [pid 11941:tid 11946] [client 20.191.226.90:31266] [client 20.191.226.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZlxEHTUkHs3EVWllKmQoQAAAYM"]
[Sat Feb 21 16:47:12.459074 2026] [:error] [pid 11743:tid 11762] [client 20.191.226.90:57418] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aZlxEAALoZZjiTbGvqX_VwAAAVE"]
[Sat Feb 21 16:47:12.594060 2026] [:error] [pid 40758:tid 40829] [client 20.191.226.90:4048] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aZlxEEBAHxvBM3i9iKFVRgAAAIc"]
[Sat Feb 21 16:47:12.745671 2026] [:error] [pid 22558:tid 22578] [client 20.191.226.90:24816] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aZlxECrVaIb2gXsVbDrwoQAAARI"]
[Sat Feb 21 16:47:12.876649 2026] [:error] [pid 22558:tid 22580] [client 20.191.226.90:48793] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZlxECrVaIb2gXsVbDrwogAAARQ"]
[Sat Feb 21 16:47:12.969258 2026] [:error] [pid 11743:tid 11749] [client 20.191.226.90:28181] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZlxEAALoZZjiTbGvqX_WAAAAUQ"]
[Sat Feb 21 16:47:13.128371 2026] [:error] [pid 40756:tid 40775] [client 20.191.226.90:57462] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZlxEQNlDP60sLYgqXKqOAAAAAk"]
[Sat Feb 21 16:47:13.471498 2026] [:error] [pid 40757:tid 40795] [client 20.191.226.90:28223] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aZlxEag_MKVL7zhH7dwB-AAAAEA"]
[Sat Feb 21 16:47:13.536614 2026] [:error] [pid 11743:tid 11750] [client 20.191.226.90:48796] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siteheads.php"] [unique_id "aZlxEQALoZZjiTbGvqX_WQAAAUU"]
[Sat Feb 21 16:47:13.573985 2026] [:error] [pid 40756:tid 40789] [client 20.191.226.90:48777] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siteheads.php"] [unique_id "aZlxEQNlDP60sLYgqXKqOQAAABc"]
[Sat Feb 21 16:47:13.614423 2026] [:error] [pid 11743:tid 11747] [client 20.191.226.90:57413] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siteheads.php"] [unique_id "aZlxEQALoZZjiTbGvqX_WgAAAUI"]
[Sat Feb 21 16:47:13.708212 2026] [:error] [pid 40756:tid 40784] [client 20.191.226.90:28218] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/siteheads.php"] [unique_id "aZlxEQNlDP60sLYgqXKqOgAAABI"]
[Sat Feb 21 16:47:13.760996 2026] [:error] [pid 11743:tid 11768] [client 20.191.226.90:24777] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZlxEQALoZZjiTbGvqX_WwAAAVc"]
[Sat Feb 21 16:47:13.806733 2026] [:error] [pid 40757:tid 40803] [client 20.191.226.90:34156] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZlxEag_MKVL7zhH7dwB-QAAAEg"]
[Sat Feb 21 16:47:13.846823 2026] [:error] [pid 40757:tid 40810] [client 20.191.226.90:57451] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZlxEag_MKVL7zhH7dwB-gAAAE8"]
[Sat Feb 21 16:47:14.020840 2026] [:error] [pid 11941:tid 11948] [client 20.191.226.90:31667] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aZlxEnTUkHs3EVWllKmQpgAAAYU"]
[Sat Feb 21 16:47:14.304825 2026] [:error] [pid 40758:tid 40834] [client 20.191.226.90:26656] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZlxEkBAHxvBM3i9iKFVSAAAAIw"]
[Sat Feb 21 16:47:14.608596 2026] [:error] [pid 40757:tid 40802] [client 20.191.226.90:34118] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZlxEqg_MKVL7zhH7dwB_AAAAEc"]
[Sat Feb 21 16:47:14.656291 2026] [:error] [pid 11743:tid 11763] [client 20.191.226.90:33361] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZlxEgALoZZjiTbGvqX_XAAAAVI"]
[Sat Feb 21 16:47:14.835908 2026] [:error] [pid 11941:tid 11957] [client 20.191.226.90:57454] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aZlxEnTUkHs3EVWllKmQqAAAAY4"]
[Sat Feb 21 16:47:15.058511 2026] [:error] [pid 40758:tid 40827] [client 20.191.226.90:56505] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlxE0BAHxvBM3i9iKFVSwAAAIU"]
[Sat Feb 21 16:47:15.142928 2026] [:error] [pid 22558:tid 22576] [client 20.191.226.90:41039] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwpQAAARA"]
[Sat Feb 21 16:47:15.188272 2026] [:error] [pid 22558:tid 22562] [client 20.191.226.90:24772] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwpgAAAQI"]
[Sat Feb 21 16:47:15.232959 2026] [:error] [pid 22558:tid 22582] [client 20.191.226.90:32243] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwpwAAARY"]
[Sat Feb 21 16:47:15.279402 2026] [:error] [pid 22558:tid 22564] [client 20.191.226.90:3826] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwqAAAAQQ"]
[Sat Feb 21 16:47:15.314054 2026] [:error] [pid 22558:tid 22563] [client 20.191.226.90:34147] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwqQAAAQM"]
[Sat Feb 21 16:47:15.383563 2026] [:error] [pid 22558:tid 22583] [client 20.191.226.90:56487] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwqgAAARc"]
[Sat Feb 21 16:47:15.428109 2026] [:error] [pid 22558:tid 22569] [client 20.191.226.90:32245] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwqwAAAQk"]
[Sat Feb 21 16:47:15.458450 2026] [:error] [pid 40871:tid 40876] [client 20.191.226.90:26646] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aZlxEzqDikjdiOZeJyV2egAAAMM"]
[Sat Feb 21 16:47:15.526624 2026] [:error] [pid 22558:tid 22560] [client 20.191.226.90:41913] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwrQAAAQA"]
[Sat Feb 21 16:47:15.584160 2026] [:error] [pid 11743:tid 11767] [client 20.191.226.90:41898] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aZlxEwALoZZjiTbGvqX_XgAAAVY"]
[Sat Feb 21 16:47:15.620741 2026] [:error] [pid 22558:tid 22566] [client 20.191.226.90:30021] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aZlxEyrVaIb2gXsVbDrwrgAAAQY"]
[Sat Feb 21 16:47:15.698633 2026] [:error] [pid 11743:tid 11769] [client 20.191.226.90:41045] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZlxEwALoZZjiTbGvqX_XwAAAVg"]
[Sat Feb 21 16:47:15.958698 2026] [:error] [pid 40871:tid 40875] [client 20.191.226.90:30041] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZlxEzqDikjdiOZeJyV2fAAAAMI"]
[Sat Feb 21 16:47:16.262195 2026] [:error] [pid 22558:tid 22580] [client 20.191.226.90:27654] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZlxFCrVaIb2gXsVbDrwsgAAARQ"]
[Sat Feb 21 16:47:16.308329 2026] [:error] [pid 40758:tid 40841] [client 20.191.226.90:41875] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aZlxFEBAHxvBM3i9iKFVTAAAAJM"]
[Sat Feb 21 16:47:16.534097 2026] [:error] [pid 22558:tid 22574] [client 20.191.226.90:41049] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aZlxFCrVaIb2gXsVbDrwtQAAAQ4"]
[Sat Feb 21 16:47:16.613860 2026] [:error] [pid 22558:tid 22584] [client 20.191.226.90:32213] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aZlxFCrVaIb2gXsVbDrwtgAAARg"]
[Sat Feb 21 16:47:16.662481 2026] [:error] [pid 40758:tid 40824] [client 20.191.226.90:56476] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aZlxFEBAHxvBM3i9iKFVTQAAAII"]
[Sat Feb 21 16:47:16.761863 2026] [:error] [pid 11743:tid 11766] [client 20.191.226.90:3727] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aZlxFAALoZZjiTbGvqX_YAAAAVU"]
[Sat Feb 21 16:47:16.880203 2026] [:error] [pid 11743:tid 11746] [client 20.191.226.90:41065] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZlxFAALoZZjiTbGvqX_YQAAAUE"]
[Sat Feb 21 16:47:16.945411 2026] [:error] [pid 40871:tid 40873] [client 20.191.226.90:3816] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZlxFDqDikjdiOZeJyV2fwAAAMA"]
[Sat Feb 21 16:47:17.005627 2026] [:error] [pid 11941:tid 11958] [client 20.191.226.90:28177] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZlxFXTUkHs3EVWllKmQqgAAAY8"]
[Sat Feb 21 16:47:17.042052 2026] [:error] [pid 11941:tid 11946] [client 20.191.226.90:41879] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aZlxFXTUkHs3EVWllKmQqwAAAYM"]
[Sat Feb 21 16:47:17.073539 2026] [:error] [pid 40758:tid 40846] [client 20.191.226.90:32203] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aZlxFUBAHxvBM3i9iKFVTwAAAJg"]
[Sat Feb 21 16:47:17.109183 2026] [:error] [pid 22558:tid 22577] [client 20.191.226.90:51719] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aZlxFSrVaIb2gXsVbDrwtwAAARE"]
[Sat Feb 21 16:47:17.146494 2026] [:error] [pid 11941:tid 11966] [client 20.191.226.90:39556] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aZlxFXTUkHs3EVWllKmQrAAAAZc"]
[Sat Feb 21 16:47:17.224271 2026] [:error] [pid 22558:tid 22565] [client 20.191.226.90:32254] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aZlxFSrVaIb2gXsVbDrwuAAAAQU"]
[Sat Feb 21 16:47:17.308229 2026] [:error] [pid 40757:tid 40809] [client 20.191.226.90:39561] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZlxFag_MKVL7zhH7dwB_wAAAE4"]
[Sat Feb 21 16:47:17.359604 2026] [:error] [pid 40757:tid 40814] [client 20.191.226.90:41086] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZlxFag_MKVL7zhH7dwCAAAAAFM"]
[Sat Feb 21 16:47:17.448692 2026] [:error] [pid 11743:tid 11752] [client 20.191.226.90:41073] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZlxFQALoZZjiTbGvqX_YgAAAUc"]
[Sat Feb 21 16:47:17.901788 2026] [:error] [pid 40758:tid 40829] [client 20.191.226.90:56448] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aZlxFUBAHxvBM3i9iKFVUQAAAIc"]
[Sat Feb 21 16:47:18.393467 2026] [:error] [pid 40757:tid 40813] [client 20.191.226.90:56474] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZlxFqg_MKVL7zhH7dwCAgAAAFI"]
[Sat Feb 21 16:47:18.773383 2026] [:error] [pid 40756:tid 40767] [client 20.191.226.90:41079] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZlxFgNlDP60sLYgqXKqQQAAAAE"]
[Sat Feb 21 16:47:19.353930 2026] [:error] [pid 40871:tid 40884] [client 20.191.226.90:41051] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZlxFzqDikjdiOZeJyV2ggAAAMs"]
[Sat Feb 21 16:47:19.434339 2026] [:error] [pid 11743:tid 11759] [client 20.191.226.90:24881] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZlxFwALoZZjiTbGvqX_ZQAAAU4"]
[Sat Feb 21 16:47:19.485109 2026] [:error] [pid 40871:tid 40894] [client 20.191.226.90:51716] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZlxFzqDikjdiOZeJyV2gwAAANU"]
[Sat Feb 21 16:47:19.651519 2026] [:error] [pid 22558:tid 22568] [client 20.191.226.90:44853] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZlxFyrVaIb2gXsVbDrwvAAAAQg"]
[Sat Feb 21 16:47:20.014079 2026] [:error] [pid 40757:tid 40812] [client 20.191.226.90:39587] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZlxGKg_MKVL7zhH7dwCBAAAAFE"]
[Sat Feb 21 16:47:20.173383 2026] [:error] [pid 40758:tid 40822] [client 20.191.226.90:47961] [client 20.191.226.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aZlxGEBAHxvBM3i9iKFVUwAAAIA"]
[Sat Feb 21 16:56:19.383681 2026] [:error] [pid 40756:tid 40775] [client 43.130.102.223:36100] [client 43.130.102.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZlzMwNlDP60sLYgqXKtawAAAAk"]
[Sat Feb 21 20:53:19.301120 2026] [:error] [pid 36509:tid 36521] [client 101.33.81.73:36140] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZmqvzG8U28d2EFbEqWzSAAAAco"]
[Sat Feb 21 21:54:34.419066 2026] [:error] [pid 22558:tid 22578] [client 109.178.11.46:1173] [client 109.178.11.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.178.11.46, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZm5GirVaIb2gXsVbDo3OAAAARI"]
[Sat Feb 21 21:54:34.428184 2026] [:error] [pid 22558:tid 22578] [client 109.178.11.46:1173] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 21 21:54:46.995883 2026] [:error] [pid 36509:tid 36524] [client 177.70.170.174:31527] [client 177.70.170.174] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.70.170.174, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZm5JjG8U28d2EFbEqXFrgAAAc0"]
[Sat Feb 21 21:54:47.003051 2026] [:error] [pid 36509:tid 36524] [client 177.70.170.174:31527] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 21 23:02:34.892894 2026] [:error] [pid 40871:tid 40877] [client 43.153.79.218:33420] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZnJCjqDikjdiOZeJyW4cwAAAMQ"]
[Sat Feb 21 23:47:49.648011 2026] [:error] [pid 40758:tid 40845] [client 182.42.104.32:47956] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZnTpUBAHxvBM3i9iKGeYQAAAJc"]
[Sun Feb 22 04:14:57.139158 2026] [:error] [pid 9588:tid 9630] [client 43.173.1.69:37844] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZoSQWjNBsxseiTcEllGsgAAAEY"]
[Sun Feb 22 05:56:19.879486 2026] [:error] [pid 9587:tid 9606] [client 121.229.185.160:39713] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZoqA-hqt7NXCp-NupH05QAAAAo"]
[Sun Feb 22 11:58:49.793329 2026] [:error] [pid 12501:tid 12505] [client 1.15.52.154:47128] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZp--ZicztrbvinWGXNfFAAAAUI"]
[Sun Feb 22 19:05:39.079675 2026] [:error] [pid 9587:tid 9606] [client 94.247.172.129:23132] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZrjA-hqt7NXCp-NupHbswAAAAo"]
[Sun Feb 22 21:56:02.754846 2026] [:error] [pid 2628:tid 2640] [client 43.130.31.17:53174] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZsK8rK4woMTeUPH2nsUiAAAAQk"]
[Sun Feb 22 23:32:33.659426 2026] [:error] [pid 2629:tid 2663] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Feb 22 23:32:33.959290 2026] [:error] [pid 2629:tid 2673] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Feb 22 23:32:34.289458 2026] [:error] [pid 2629:tid 2670] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Feb 22 23:32:34.566318 2026] [:error] [pid 2629:tid 2676] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Feb 22 23:32:34.886625 2026] [:error] [pid 2629:tid 2659] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Feb 22 23:32:35.142623 2026] [:error] [pid 2629:tid 2673] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Feb 22 23:32:35.399154 2026] [:error] [pid 2629:tid 2659] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Feb 22 23:32:35.721973 2026] [:error] [pid 2629:tid 2676] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Feb 22 23:32:36.344372 2026] [:error] [pid 2629:tid 2658] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Feb 22 23:32:36.954272 2026] [:error] [pid 2629:tid 2665] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Feb 22 23:32:37.214710 2026] [:error] [pid 2629:tid 2673] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Feb 22 23:32:37.502910 2026] [:error] [pid 2629:tid 2674] [client 185.137.164.17:24311] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Feb 22 23:32:37.836793 2026] [:error] [pid 2629:tid 2679] [client 185.137.164.17:24311] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aZshlQlsXSV5M4mfwZ9WlgAAAVU"]
[Sun Feb 22 23:32:38.518730 2026] [:error] [pid 2474:tid 2518] [client 185.137.164.20:44073] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Feb 22 23:32:38.873126 2026] [:error] [pid 2474:tid 2540] [client 185.137.164.20:44073] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Feb 22 23:32:39.197644 2026] [:error] [pid 2474:tid 2514] [client 185.137.164.20:44073] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Feb 22 23:32:39.507223 2026] [:error] [pid 2474:tid 2520] [client 185.137.164.20:44073] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Feb 22 23:32:39.776643 2026] [:error] [pid 2474:tid 2528] [client 185.137.164.20:44073] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Feb 22 23:32:40.052404 2026] [:error] [pid 2474:tid 2537] [client 185.137.164.20:44073] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Feb 22 23:32:44.432535 2026] [:error] [pid 2474:tid 2535] [client 185.137.164.20:44073] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZshnPhvE7P5hX_xKnS0ngAAAFA"]
[Sun Feb 22 23:32:46.097057 2026] [:error] [pid 2475:tid 2547] [client 185.137.164.19:58511] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZshnidme8TSKYpXujdtfwAAAIc"]
[Sun Feb 22 23:32:50.286101 2026] [:error] [pid 2629:tid 2682] [client 185.137.164.21:61009] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Feb 22 23:32:53.233447 2026] [:error] [pid 2629:tid 2665] [client 185.137.164.21:61009] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZshpQlsXSV5M4mfwZ9XQwAAAUc"]
[Sun Feb 22 23:32:54.388574 2026] [:error] [pid 3103:tid 3106] [client 185.137.164.20:47395] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Feb 22 23:32:54.694853 2026] [:error] [pid 3103:tid 3112] [client 185.137.164.20:47395] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZshppfzX5hBIaQY93N78wAAAYY"]
[Sun Feb 22 23:32:55.654525 2026] [:error] [pid 2574:tid 2591] [client 185.137.164.16:44765] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sun Feb 22 23:32:57.171064 2026] [:error] [pid 2574:tid 2601] [client 185.137.164.16:44765] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZshqckPV7h4nTf-jiTkAAAAANQ"]
[Sun Feb 22 23:33:00.041314 2026] [:error] [pid 2473:tid 2501] [client 185.137.164.16:26941] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZshrHptAeV7-XzzNzg6TgAAABg"]
[Sun Feb 22 23:33:00.592365 2026] [:error] [pid 2574:tid 2599] [client 185.137.164.17:39859] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZshrMkPV7h4nTf-jiTkJwAAANI"]
[Sun Feb 22 23:33:01.115822 2026] [:error] [pid 2629:tid 2665] [client 185.137.164.17:34739] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZshrQlsXSV5M4mfwZ9XsQAAAUc"]
[Sun Feb 22 23:33:01.756875 2026] [:error] [pid 2629:tid 2680] [client 185.137.164.20:48571] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZshrQlsXSV5M4mfwZ9XvAAAAVY"]
[Sun Feb 22 23:33:02.302752 2026] [:error] [pid 2474:tid 2535] [client 185.137.164.12:59171] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZshrvhvE7P5hX_xKnS1fwAAAFA"]
[Sun Feb 22 23:33:03.183262 2026] [:error] [pid 2574:tid 2603] [client 185.137.164.15:44263] [client 185.137.164.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZshr8kPV7h4nTf-jiTkQQAAANY"]
[Sun Feb 22 23:33:03.712027 2026] [:error] [pid 2475:tid 2536] [client 185.137.164.14:64615] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sun Feb 22 23:33:04.250003 2026] [:error] [pid 2475:tid 2564] [client 185.137.164.14:64615] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aZshsCdme8TSKYpXujduggAAAJg"]
[Sun Feb 22 23:33:05.414980 2026] [:error] [pid 2474:tid 2518] [client 185.137.164.19:50787] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZshsfhvE7P5hX_xKnS1wAAAAEc"]
[Sun Feb 22 23:33:06.196041 2026] [:error] [pid 2473:tid 2478] [client 185.137.164.16:49941] [client 185.137.164.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZshsnptAeV7-XzzNzg6qAAAAAE"]
[Sun Feb 22 23:33:06.881052 2026] [:error] [pid 2629:tid 2667] [client 185.137.164.17:60869] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/function.php"] [unique_id "aZshsglsXSV5M4mfwZ9YDAAAAUk"]
[Sun Feb 22 23:33:07.425053 2026] [:error] [pid 2473:tid 2491] [client 185.137.164.12:53413] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Feb 22 23:33:07.685042 2026] [:error] [pid 2473:tid 2494] [client 185.137.164.12:53413] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZshs3ptAeV7-XzzNzg6zQAAABE"]
[Sun Feb 22 23:33:08.426017 2026] [:error] [pid 2574:tid 2590] [client 185.137.164.14:28927] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sun Feb 22 23:33:09.698955 2026] [:error] [pid 2574:tid 2590] [client 185.137.164.14:28927] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Feb 22 23:33:10.790908 2026] [:error] [pid 2574:tid 2597] [client 185.137.164.14:28927] [client 185.137.164.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZshtskPV7h4nTf-jiTkqQAAANA"]
[Sun Feb 22 23:33:11.299754 2026] [:error] [pid 2474:tid 2530] [client 185.137.164.20:38869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sun Feb 22 23:33:11.840080 2026] [:error] [pid 2474:tid 2515] [client 185.137.164.20:38869] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZsht_hvE7P5hX_xKnS2JwAAAEY"]
[Sun Feb 22 23:33:12.382270 2026] [:error] [pid 2473:tid 2495] [client 185.137.164.13:62895] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Feb 22 23:33:13.004696 2026] [:error] [pid 2473:tid 2482] [client 185.137.164.13:62895] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZshuXptAeV7-XzzNzg7JAAAAAU"]
[Sun Feb 22 23:33:13.939373 2026] [:error] [pid 2474:tid 2530] [client 185.137.164.19:55891] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZshufhvE7P5hX_xKnS2UwAAAE0"]
[Sun Feb 22 23:33:14.803260 2026] [:error] [pid 2628:tid 2649] [client 185.137.164.13:24669] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sun Feb 22 23:33:15.152228 2026] [:error] [pid 2628:tid 2635] [client 185.137.164.13:24669] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Feb 22 23:33:15.825246 2026] [:error] [pid 2628:tid 2640] [client 185.137.164.13:24669] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZshu7K4woMTeUPH2ns6gwAAAQk"]
[Sun Feb 22 23:33:16.627384 2026] [:error] [pid 2474:tid 2512] [client 185.137.164.12:23289] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZshvPhvE7P5hX_xKnS2ggAAAEM"]
[Sun Feb 22 23:33:20.263946 2026] [:error] [pid 3103:tid 3112] [client 185.137.164.13:63829] [client 185.137.164.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZshwJfzX5hBIaQY93N9VAAAAYY"]
[Sun Feb 22 23:33:20.778764 2026] [:error] [pid 2574:tid 2584] [client 185.137.164.19:37551] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZshwMkPV7h4nTf-jiTlPwAAAMM"]
[Sun Feb 22 23:33:21.517152 2026] [:error] [pid 26033:tid 26044] [client 185.137.164.17:37815] [client 185.137.164.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZshwUTRRZdhkkS8ouSHJwAAAck"]
[Sun Feb 22 23:33:22.709459 2026] [:error] [pid 3103:tid 3117] [client 185.137.164.19:56941] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sun Feb 22 23:33:23.110321 2026] [:error] [pid 3103:tid 3111] [client 185.137.164.19:56941] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZshw5fzX5hBIaQY93N9hwAAAYU"]
[Sun Feb 22 23:33:23.671036 2026] [:error] [pid 2574:tid 2585] [client 185.137.164.20:33681] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZshw8kPV7h4nTf-jiTlZQAAAMQ"]
[Sun Feb 22 23:33:24.211365 2026] [:error] [pid 2629:tid 2671] [client 185.137.164.12:34109] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZshxAlsXSV5M4mfwZ9ZHAAAAU0"]
[Sun Feb 22 23:33:25.400520 2026] [:error] [pid 2628:tid 2634] [client 185.137.164.14:47691] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Feb 22 23:33:25.685369 2026] [:error] [pid 2628:tid 2648] [client 185.137.164.14:47691] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/admin.php"] [unique_id "aZshxbK4woMTeUPH2ns7IQAAARE"]
[Sun Feb 22 23:33:26.206446 2026] [:error] [pid 2475:tid 2558] [client 185.137.164.14:38663] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/admin.php"] [unique_id "aZshxidme8TSKYpXujdv4gAAAJI"]
[Sun Feb 22 23:33:27.140358 2026] [:error] [pid 2474:tid 2512] [client 185.137.164.12:27725] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Feb 22 23:33:28.340250 2026] [:error] [pid 2474:tid 2528] [client 185.137.164.12:27725] [client 185.137.164.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZshyPhvE7P5hX_xKnS3OAAAAEw"]
[Sun Feb 22 23:33:28.991147 2026] [:error] [pid 2473:tid 2494] [client 185.137.164.19:43467] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/tflow/up.php"] [unique_id "aZshyHptAeV7-XzzNzg8MwAAABE"]
[Sun Feb 22 23:33:30.224337 2026] [:error] [pid 2628:tid 2633] [client 185.137.164.14:61205] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aZshyrK4woMTeUPH2ns7SQAAAQI"]
[Sun Feb 22 23:33:31.082784 2026] [:error] [pid 26033:tid 26053] [client 185.137.164.15:46395] [client 185.137.164.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.15, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZshy0TRRZdhkkS8ouSHpwAAAdI"]
[Sun Feb 22 23:33:31.367713 2026] [:error] [pid 26033:tid 26055] [client 185.137.164.15:46395] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Feb 22 23:33:31.857597 2026] [:error] [pid 26033:tid 26045] [client 185.137.164.15:46395] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/rk2.php"] [unique_id "aZshy0TRRZdhkkS8ouSHsQAAAco"]
[Sun Feb 22 23:33:32.453977 2026] [:error] [pid 26033:tid 26054] [client 185.137.164.13:21463] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/rk2.php"] [unique_id "aZshzETRRZdhkkS8ouSHtwAAAdM"]
[Sun Feb 22 23:33:33.363652 2026] [:error] [pid 2474:tid 2544] [client 185.137.164.14:34101] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/class-config.php"] [unique_id "aZshzfhvE7P5hX_xKnS3fgAAAFc"]
[Sun Feb 22 23:33:34.840179 2026] [:error] [pid 2628:tid 2652] [client 185.137.164.15:29323] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sun Feb 22 23:33:35.146011 2026] [:error] [pid 2628:tid 2638] [client 185.137.164.15:29323] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aZshz7K4woMTeUPH2ns7lQAAAQc"]
[Sun Feb 22 23:33:35.767985 2026] [:error] [pid 2574:tid 2592] [client 185.137.164.21:46519] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Feb 22 23:33:36.032327 2026] [:error] [pid 2574:tid 2602] [client 185.137.164.21:46519] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/profile.php"] [unique_id "aZsh0MkPV7h4nTf-jiTl7gAAANU"]
[Sun Feb 22 23:33:36.657301 2026] [:error] [pid 2475:tid 2551] [client 185.137.164.21:39307] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/profile.php"] [unique_id "aZsh0Cdme8TSKYpXujdwlgAAAIs"]
[Sun Feb 22 23:33:37.591877 2026] [:error] [pid 2628:tid 2638] [client 185.137.164.17:53881] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aZsh0bK4woMTeUPH2ns7pAAAAQc"]
[Sun Feb 22 23:33:38.159932 2026] [:error] [pid 2474:tid 2532] [client 185.137.164.15:59987] [client 185.137.164.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aZsh0vhvE7P5hX_xKnS3xAAAAE4"]
[Sun Feb 22 23:33:38.753021 2026] [:error] [pid 2474:tid 2515] [client 185.137.164.17:43239] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/product.php"] [unique_id "aZsh0vhvE7P5hX_xKnS3ygAAAEY"]
[Sun Feb 22 23:33:39.776310 2026] [:error] [pid 3103:tid 3124] [client 185.137.164.14:52965] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aZsh05fzX5hBIaQY93N-hwAAAZI"]
[Sun Feb 22 23:33:40.291045 2026] [:error] [pid 2629:tid 2665] [client 185.137.164.19:39789] [client 185.137.164.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aZsh1AlsXSV5M4mfwZ9Z_QAAAUc"]
[Sun Feb 22 23:33:41.558738 2026] [:error] [pid 2628:tid 2648] [client 185.137.164.21:54151] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZsh1bK4woMTeUPH2ns71AAAARE"]
[Sun Feb 22 23:33:45.368089 2026] [:error] [pid 26033:tid 26035] [client 185.137.164.21:63417] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/css.php"] [unique_id "aZsh2UTRRZdhkkS8ouSIagAAAcA"]
[Sun Feb 22 23:33:46.000680 2026] [:error] [pid 2629:tid 2681] [client 185.137.164.16:48353] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/css.php"] [unique_id "aZsh2glsXSV5M4mfwZ9aYQAAAVc"]
[Sun Feb 22 23:33:46.561104 2026] [:error] [pid 3103:tid 3115] [client 185.137.164.14:32269] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/css.php"] [unique_id "aZsh2pfzX5hBIaQY93N_CAAAAYk"]
[Sun Feb 22 23:33:47.432518 2026] [:error] [pid 2629:tid 2681] [client 185.137.164.19:61279] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sun Feb 22 23:33:47.844689 2026] [:error] [pid 2629:tid 2671] [client 185.137.164.19:61279] [client 185.137.164.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.137.164.19, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZsh2wlsXSV5M4mfwZ9adAAAAU0"]
[Sun Feb 22 23:33:48.438126 2026] [:error] [pid 2629:tid 2664] [client 185.137.164.19:61279] [client 185.137.164.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZsh3AlsXSV5M4mfwZ9afwAAAUY"]
[Sun Feb 22 23:33:49.222766 2026] [:error] [pid 2574:tid 2588] [client 185.137.164.18:32291] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aZsh3ckPV7h4nTf-jiTmogAAAMc"]
[Sun Feb 22 23:33:50.336276 2026] [:error] [pid 2629:tid 2679] [client 185.137.164.12:35815] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/admin.php"] [unique_id "aZsh3glsXSV5M4mfwZ9akQAAAVU"]
[Sun Feb 22 23:33:51.322804 2026] [:error] [pid 2474:tid 2545] [client 185.137.164.18:63783] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZsh3_hvE7P5hX_xKnS4cAAAAFg"]
[Sun Feb 22 23:33:52.125641 2026] [:error] [pid 2629:tid 2669] [client 185.137.164.20:63699] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aZsh4AlsXSV5M4mfwZ9aqAAAAUs"]
[Sun Feb 22 23:33:52.768735 2026] [:error] [pid 3103:tid 3115] [client 185.137.164.17:52425] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Feb 22 23:33:53.036897 2026] [:error] [pid 3103:tid 3127] [client 185.137.164.17:52425] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aZsh4ZfzX5hBIaQY93N_VgAAAZU"]
[Sun Feb 22 23:33:53.639843 2026] [:error] [pid 2574:tid 2602] [client 185.137.164.14:24957] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aZsh4ckPV7h4nTf-jiTm1gAAANU"]
[Sun Feb 22 23:33:54.159741 2026] [:error] [pid 2473:tid 2479] [client 185.137.164.16:51397] [client 185.137.164.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aZsh4nptAeV7-XzzNzg9rgAAAAI"]
[Sun Feb 22 23:33:54.803680 2026] [:error] [pid 2475:tid 2552] [client 185.137.164.13:41415] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aZsh4idme8TSKYpXujdxUwAAAIw"]
[Sun Feb 22 23:33:55.376257 2026] [:error] [pid 2475:tid 2549] [client 185.137.164.17:43417] [client 185.137.164.17] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/autoload_classmap.php"] [unique_id "aZsh4ydme8TSKYpXujdxWAAAAIk"]
[Sun Feb 22 23:33:57.002470 2026] [:error] [pid 3103:tid 3110] [client 185.137.164.21:50515] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh5ZfzX5hBIaQY93N_lgAAAYQ"]
[Sun Feb 22 23:33:57.538185 2026] [:error] [pid 2473:tid 2486] [client 185.137.164.20:25781] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aZsh5XptAeV7-XzzNzg90wAAAAk"]
[Sun Feb 22 23:33:58.402411 2026] [:error] [pid 2629:tid 2677] [client 185.137.164.12:61095] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh5glsXSV5M4mfwZ9bAAAAAVM"]
[Sun Feb 22 23:33:58.921358 2026] [:error] [pid 2474:tid 2525] [client 185.137.164.18:62057] [client 185.137.164.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh5vhvE7P5hX_xKnS4uwAAAEo"]
[Sun Feb 22 23:33:59.736872 2026] [:error] [pid 2475:tid 2550] [client 185.137.164.12:36697] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh5ydme8TSKYpXujdxhwAAAIo"]
[Sun Feb 22 23:34:00.375252 2026] [:error] [pid 2475:tid 2549] [client 185.137.164.12:40335] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aZsh6Cdme8TSKYpXujdxkAAAAIk"]
[Sun Feb 22 23:34:01.241823 2026] [:error] [pid 2628:tid 2655] [client 185.137.164.21:54539] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZsh6bK4woMTeUPH2ns8rgAAARg"]
[Sun Feb 22 23:34:01.761037 2026] [:error] [pid 2473:tid 2492] [client 185.137.164.21:36699] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZsh6XptAeV7-XzzNzg-EwAAAA8"]
[Sun Feb 22 23:34:02.348555 2026] [:error] [pid 2474:tid 2544] [client 185.137.164.21:30817] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aZsh6vhvE7P5hX_xKnS46AAAAFc"]
[Sun Feb 22 23:34:03.705774 2026] [:error] [pid 2474:tid 2509] [client 185.137.164.14:23339] [client 185.137.164.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/file/"] [unique_id "aZsh6_hvE7P5hX_xKnS4-gAAAEA"]
[Sun Feb 22 23:34:04.938854 2026] [:error] [pid 2628:tid 2645] [client 185.137.164.21:22683] [client 185.137.164.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aZsh7LK4woMTeUPH2ns8zwAAAQ4"]
[Sun Feb 22 23:34:05.476965 2026] [:error] [pid 2574:tid 2593] [client 185.137.164.20:48921] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aZsh7ckPV7h4nTf-jiTnOgAAAMw"]
[Sun Feb 22 23:34:06.024842 2026] [:error] [pid 2475:tid 2554] [client 185.137.164.12:51633] [client 185.137.164.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aZsh7idme8TSKYpXujdxuwAAAI4"]
[Sun Feb 22 23:34:06.547113 2026] [:error] [pid 3103:tid 3121] [client 185.137.164.13:20981] [client 185.137.164.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aZsh7pfzX5hBIaQY93OAIAAAAY8"]
[Sun Feb 22 23:34:07.108972 2026] [:error] [pid 2629:tid 2675] [client 185.137.164.20:35021] [client 185.137.164.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aZsh7wlsXSV5M4mfwZ9bXwAAAVE"]
[Mon Feb 23 00:45:54.237052 2026] [:error] [pid 28558:tid 28571] [client 119.96.24.54:37434] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZsywidFHR5e1Gd10vdzLAAAAMs"]
[Mon Feb 23 01:37:38.952611 2026] [:error] [pid 28425:tid 28506] [client 209.38.87.172:3604] [client 209.38.87.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aZs-4jO7QIkwG1UqFGzwfQAAAE0"]
[Mon Feb 23 01:37:38.985443 2026] [:error] [pid 28558:tid 28574] [client 209.38.87.172:3634] [client 209.38.87.172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZs-4idFHR5e1Gd10veH1wAAAM4"]
[Mon Feb 23 02:24:05.724559 2026] [:error] [pid 28424:tid 28435] [client 83.225.126.10:51469] [client 83.225.126.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 83.225.126.10, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZtJxQBAZT_BJOxE-Z5BpQAAAAc"]
[Mon Feb 23 02:24:05.735867 2026] [:error] [pid 28424:tid 28435] [client 83.225.126.10:51469] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 23 02:24:27.451353 2026] [:error] [pid 28425:tid 28513] [client 136.158.123.19:36135] [client 136.158.123.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.158.123.19, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZtJ2zO7QIkwG1UqFGwDVwAAAFQ"]
[Mon Feb 23 02:24:27.456060 2026] [:error] [pid 28425:tid 28513] [client 136.158.123.19:36135] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 23 04:28:13.073844 2026] [:error] [pid 54482:tid 54486] [client 170.106.11.141:46180] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZtm3T8bYINguLe1hWc8zgAAAMI"]
[Mon Feb 23 06:33:19.808826 2026] [:error] [pid 2826:tid 2849] [client 16.171.160.156:62749] [client 16.171.160.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZuELz3FWVe0BC2oMiDh4QAAARQ"]
[Mon Feb 23 06:33:21.040776 2026] [:error] [pid 2445:tid 2487] [client 16.171.160.156:54651] [client 16.171.160.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZuEMT1z6EhBn71lCAF74QAAAEw"]
[Mon Feb 23 07:18:22.736811 2026] [:error] [pid 2446:tid 2511] [client 49.235.136.28:33856] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZuOvtMqX9gYEfsYvrjBJAAAAIk"]
[Mon Feb 23 08:23:23.418732 2026] [:error] [pid 25380:tid 25388] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Feb 23 08:23:23.560200 2026] [:error] [pid 25380:tid 25405] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Feb 23 08:23:23.701423 2026] [:error] [pid 25380:tid 25401] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Mon Feb 23 08:23:23.842212 2026] [:error] [pid 25380:tid 25396] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Feb 23 08:23:23.984053 2026] [:error] [pid 25380:tid 25385] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Mon Feb 23 08:23:24.121803 2026] [:error] [pid 25380:tid 25382] [client 20.196.204.231:9642] [client 20.196.204.231] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.196.204.231, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZud_KKrc8yFQ8fy78oNtQAAAMA"]
[Mon Feb 23 08:23:24.125040 2026] [:error] [pid 25380:tid 25382] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 23 08:23:24.268913 2026] [:error] [pid 25380:tid 25399] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Feb 23 08:23:24.410428 2026] [:error] [pid 25380:tid 25394] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Feb 23 08:23:24.553340 2026] [:error] [pid 25380:tid 25395] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Feb 23 08:23:24.693937 2026] [:error] [pid 25380:tid 25400] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Feb 23 08:23:24.835355 2026] [:error] [pid 25380:tid 25390] [client 20.196.204.231:9642] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Mon Feb 23 08:23:24.973854 2026] [:error] [pid 25380:tid 25391] [client 20.196.204.231:9642] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aZud_KKrc8yFQ8fy78oNuwAAAMk"]
[Mon Feb 23 08:23:25.521629 2026] [:error] [pid 25294:tid 25343] [client 20.196.204.231:9626] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aZud_SRCFB3CqIo_jfZbdgAAAEU"]
[Mon Feb 23 08:23:26.057475 2026] [:error] [pid 25294:tid 25360] [client 20.196.204.231:10101] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aZud_iRCFB3CqIo_jfZbfAAAAE0"]
[Mon Feb 23 08:23:26.635749 2026] [:error] [pid 25294:tid 25334] [client 20.196.204.231:11109] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aZud_iRCFB3CqIo_jfZbggAAAEM"]
[Mon Feb 23 08:32:20.168374 2026] [:error] [pid 25380:tid 25406] [client 49.51.203.164:40542] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZugFKKrc8yFQ8fy78oSFwAAANg"]
[Mon Feb 23 17:12:15.077044 2026] [:error] [pid 25380:tid 25398] [client 125.166.102.180:63559] [client 125.166.102.180] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 125.166.102.180, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZwZ76Krc8yFQ8fy78r5OwAAANA"]
[Mon Feb 23 17:12:15.082567 2026] [:error] [pid 25380:tid 25398] [client 125.166.102.180:63559] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Feb 23 21:04:56.179154 2026] [:error] [pid 39640:tid 39682] [client 182.44.8.254:35476] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZxQeNsK--eVCgzvvufjVAAAAow"]
[Mon Feb 23 22:52:30.432330 2026] [:error] [pid 39639:tid 39666] [client 162.62.213.165:59918] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZxprhpFkMoMi8uTUUMLhgAAAlc"]
[Mon Feb 23 23:55:30.573593 2026] [:error] [pid 39504:tid 39520] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/slo.php
[Mon Feb 23 23:55:30.893027 2026] [:error] [pid 39504:tid 39507] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/aa8.php
[Mon Feb 23 23:55:31.478128 2026] [:error] [pid 39504:tid 39522] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/unity.php
[Mon Feb 23 23:55:31.774236 2026] [:error] [pid 39504:tid 39527] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Mon Feb 23 23:55:32.027622 2026] [:error] [pid 39504:tid 39528] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/bin.php
[Mon Feb 23 23:55:32.289239 2026] [:error] [pid 39504:tid 39523] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Mon Feb 23 23:55:32.555647 2026] [:error] [pid 39504:tid 39512] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Feb 23 23:55:32.808585 2026] [:error] [pid 39504:tid 39530] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Mon Feb 23 23:55:33.083805 2026] [:error] [pid 39504:tid 39521] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Mon Feb 23 23:55:33.338606 2026] [:error] [pid 39504:tid 39529] [client 20.234.99.178:4707] File does not exist: /usr/local/apache/htdocs/suspended-page/ggs.php
[Mon Feb 23 23:55:33.610260 2026] [:error] [pid 39504:tid 39508] [client 20.234.99.178:4707] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aZx4dXLcHpOlI9gwwJorZQAAAUI"]
[Mon Feb 23 23:55:37.774319 2026] [:error] [pid 39504:tid 39517] [client 20.234.99.178:4789] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aZx4eXLcHpOlI9gwwJorZwAAAUs"]
[Mon Feb 23 23:55:41.119452 2026] [:error] [pid 39540:tid 39570] [client 20.234.99.178:9030] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aZx4fbsgm9aTWhlRScLcBwAAAcE"]
[Mon Feb 23 23:55:46.931953 2026] [:error] [pid 25295:tid 25344] [client 20.234.99.178:4775] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aZx4go2Av4J1Jnqi7yLOsgAAAIs"]
[Mon Feb 23 23:55:49.778730 2026] [:error] [pid 39639:tid 39643] [client 20.234.99.178:2070] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rak.php"] [unique_id "aZx4hRpFkMoMi8uTUUMeaQAAAkA"]
[Mon Feb 23 23:55:52.394344 2026] [:error] [pid 39504:tid 39516] [client 20.234.99.178:2072] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rak.php"] [unique_id "aZx4iHLcHpOlI9gwwJorbAAAAUo"]
[Mon Feb 23 23:56:00.583214 2026] [:error] [pid 39540:tid 39578] [client 20.234.99.178:35445] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rak.php"] [unique_id "aZx4kLsgm9aTWhlRScLcGQAAAck"]
[Mon Feb 23 23:56:07.611120 2026] [:error] [pid 39639:tid 39658] [client 20.234.99.178:6997] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rdfe.php"] [unique_id "aZx4lxpFkMoMi8uTUUMeegAAAk8"]
[Mon Feb 23 23:56:12.077968 2026] [:error] [pid 39639:tid 39667] [client 20.234.99.178:3383] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rdfe.php"] [unique_id "aZx4nBpFkMoMi8uTUUMejgAAAlg"]
[Mon Feb 23 23:56:18.112226 2026] [:error] [pid 39538:tid 39548] [client 20.234.99.178:2095] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rdfe.php"] [unique_id "aZx4oi4Zk8-cQOG3ZnqE4gAAAYY"]
[Mon Feb 23 23:56:28.469836 2026] [:error] [pid 25295:tid 25327] [client 20.234.99.178:34466] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad.php"] [unique_id "aZx4rI2Av4J1Jnqi7yLOvAAAAIA"]
[Mon Feb 23 23:56:31.879807 2026] [:error] [pid 25294:tid 25364] [client 20.234.99.178:6150] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad.php"] [unique_id "aZx4ryRCFB3CqIo_jfYFWAAAAE8"]
[Mon Feb 23 23:56:33.596456 2026] [:error] [pid 39538:tid 39549] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/sad.php
[Mon Feb 23 23:56:33.850909 2026] [:error] [pid 39538:tid 39548] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/shlo.php
[Mon Feb 23 23:56:34.163828 2026] [:error] [pid 39538:tid 39561] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/yzkvrell.php
[Mon Feb 23 23:56:34.417102 2026] [:error] [pid 39538:tid 39566] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxadmin.php
[Mon Feb 23 23:56:34.696226 2026] [:error] [pid 39538:tid 39550] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Mon Feb 23 23:56:35.007796 2026] [:error] [pid 39538:tid 39564] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Feb 23 23:56:35.272773 2026] [:error] [pid 39538:tid 39562] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/sder52u.php
[Mon Feb 23 23:56:35.605982 2026] [:error] [pid 39538:tid 39554] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Feb 23 23:56:35.914257 2026] [:error] [pid 39538:tid 39565] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Mon Feb 23 23:56:36.181401 2026] [:error] [pid 39538:tid 39553] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/aa8.php
[Mon Feb 23 23:56:36.499786 2026] [:error] [pid 39538:tid 39558] [client 20.234.99.178:6368] File does not exist: /usr/local/apache/htdocs/suspended-page/bqcheck.php
[Mon Feb 23 23:56:36.750450 2026] [:error] [pid 39538:tid 39563] [client 20.234.99.178:6368] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs8.php"] [unique_id "aZx4tC4Zk8-cQOG3ZnqE-QAAAZU"]
[Mon Feb 23 23:56:38.131213 2026] [:error] [pid 25295:tid 25352] [client 20.234.99.178:35411] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs8.php"] [unique_id "aZx4to2Av4J1Jnqi7yLOwwAAAI8"]
[Mon Feb 23 23:56:43.182927 2026] [:error] [pid 39504:tid 39516] [client 20.234.99.178:35375] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs8.php"] [unique_id "aZx4u3LcHpOlI9gwwJorgwAAAUo"]
[Mon Feb 23 23:56:46.099967 2026] [:error] [pid 25294:tid 25328] [client 20.234.99.178:2083] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blurbs8.php"] [unique_id "aZx4viRCFB3CqIo_jfYFYwAAAEA"]
[Mon Feb 23 23:56:49.636760 2026] [:error] [pid 39639:tid 39660] [client 20.234.99.178:6078] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aZx4wRpFkMoMi8uTUUMeowAAAlE"]
[Mon Feb 23 23:56:52.538414 2026] [:error] [pid 25294:tid 25364] [client 20.234.99.178:2881] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aZx4xCRCFB3CqIo_jfYFZAAAAE8"]
[Mon Feb 23 23:56:55.320152 2026] [:error] [pid 39639:tid 39664] [client 20.234.99.178:35455] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aZx4xxpFkMoMi8uTUUMeqwAAAlU"]
[Mon Feb 23 23:57:01.146757 2026] [:error] [pid 25380:tid 25382] [client 20.234.99.178:6049] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aZx4zaKrc8yFQ8fy78p1tQAAAMA"]
[Mon Feb 23 23:57:07.272131 2026] [:error] [pid 39639:tid 39663] [client 20.234.99.178:38728] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aZx40xpFkMoMi8uTUUMexQAAAlQ"]
[Mon Feb 23 23:57:14.549051 2026] [:error] [pid 39639:tid 39654] [client 20.234.99.178:5269] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aZx42hpFkMoMi8uTUUMfEQAAAks"]
[Mon Feb 23 23:57:23.133369 2026] [:error] [pid 39540:tid 39593] [client 20.234.99.178:2779] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wander.php"] [unique_id "aZx447sgm9aTWhlRScLcWgAAAdg"]
[Mon Feb 23 23:57:29.088303 2026] [:error] [pid 39538:tid 39552] [client 20.234.99.178:9135] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wander.php"] [unique_id "aZx46S4Zk8-cQOG3ZnqFBwAAAYo"]
[Mon Feb 23 23:57:33.310791 2026] [:error] [pid 39639:tid 39656] [client 20.234.99.178:8050] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wander.php"] [unique_id "aZx47RpFkMoMi8uTUUMfXQAAAk0"]
[Mon Feb 23 23:57:36.147559 2026] [:error] [pid 25380:tid 25396] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Mon Feb 23 23:57:36.428144 2026] [:error] [pid 25380:tid 25387] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Mon Feb 23 23:57:36.682635 2026] [:error] [pid 25380:tid 25404] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Mon Feb 23 23:57:36.936116 2026] [:error] [pid 25380:tid 25382] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/filei.php
[Mon Feb 23 23:57:37.193606 2026] [:error] [pid 25380:tid 25393] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/aw.php
[Mon Feb 23 23:57:37.446948 2026] [:error] [pid 25380:tid 25390] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/xojryvch.php
[Mon Feb 23 23:57:37.735238 2026] [:error] [pid 25380:tid 25401] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Feb 23 23:57:38.007635 2026] [:error] [pid 25380:tid 25405] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Feb 23 23:57:38.283343 2026] [:error] [pid 25380:tid 25391] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/oiepfuav.php
[Mon Feb 23 23:57:38.546282 2026] [:error] [pid 25380:tid 25383] [client 20.234.99.178:9134] File does not exist: /usr/local/apache/htdocs/suspended-page/nqsa.php
[Mon Feb 23 23:57:38.796894 2026] [:error] [pid 25380:tid 25392] [client 20.234.99.178:9134] [client 20.234.99.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aZx48qKrc8yFQ8fy78p16gAAAMo"]
[Mon Feb 23 23:57:41.894592 2026] [:error] [pid 29909:tid 29921] [client 20.234.99.178:9118] File does not exist: /usr/local/apache/htdocs/suspended-page/get.php
[Mon Feb 23 23:57:42.212121 2026] [:error] [pid 29909:tid 29931] [client 20.234.99.178:9118] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kill-9-1.php"] [unique_id "aZx49j9oc2QzltksUk7prAAAARQ"]
[Mon Feb 23 23:57:54.400816 2026] [:error] [pid 39540:tid 39577] [client 20.234.99.178:9108] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kill-9-1.php"] [unique_id "aZx5Arsgm9aTWhlRScLcYwAAAcg"]
[Mon Feb 23 23:57:57.037210 2026] [:error] [pid 25294:tid 25354] [client 20.234.99.178:8673] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kill-9-1.php"] [unique_id "aZx5BSRCFB3CqIo_jfYFdQAAAEo"]
[Mon Feb 23 23:58:00.950111 2026] [:error] [pid 39540:tid 39575] [client 20.234.99.178:37956] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tcp.php"] [unique_id "aZx5CLsgm9aTWhlRScLcZAAAAcY"]
[Mon Feb 23 23:58:08.558026 2026] [:error] [pid 25294:tid 25330] [client 20.234.99.178:38612] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tcp.php"] [unique_id "aZx5ECRCFB3CqIo_jfYFggAAAEE"]
[Mon Feb 23 23:59:16.046497 2026] [:error] [pid 39538:tid 39543] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/zc.php
[Mon Feb 23 23:59:16.300607 2026] [:error] [pid 39538:tid 39564] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Feb 23 23:59:16.553242 2026] [:error] [pid 39538:tid 39554] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/rsnu.php
[Mon Feb 23 23:59:16.901849 2026] [:error] [pid 39538:tid 39553] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/trd.php
[Mon Feb 23 23:59:18.082997 2026] [:error] [pid 39538:tid 39553] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Mon Feb 23 23:59:18.348855 2026] [:error] [pid 39538:tid 39542] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/mo.php
[Mon Feb 23 23:59:18.612683 2026] [:error] [pid 39538:tid 39559] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Feb 23 23:59:18.867703 2026] [:error] [pid 39538:tid 39558] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/nxx.php
[Mon Feb 23 23:59:19.120689 2026] [:error] [pid 39538:tid 39551] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/w3llstore.php
[Mon Feb 23 23:59:19.376908 2026] [:error] [pid 39538:tid 39548] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/reyna.php
[Mon Feb 23 23:59:19.641320 2026] [:error] [pid 39538:tid 39561] [client 20.234.99.178:8689] File does not exist: /usr/local/apache/htdocs/suspended-page/yee.php
[Mon Feb 23 23:59:20.029296 2026] [:error] [pid 39538:tid 39550] [client 20.234.99.178:8689] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aZx5WC4Zk8-cQOG3ZnqFRwAAAYg"]
[Mon Feb 23 23:59:44.589127 2026] [:error] [pid 39639:tid 39666] [client 20.234.99.178:8647] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aZx5cBpFkMoMi8uTUUMfpQAAAlc"]
[Mon Feb 23 23:59:52.027386 2026] [:error] [pid 25380:tid 25385] [client 20.234.99.178:38649] [client 20.234.99.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aZx5eKKrc8yFQ8fy78p2OwAAAMM"]
[Tue Feb 24 05:19:08.119318 2026] [:error] [pid 37540:tid 37608] [client 43.130.72.40:38598] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZzETCahRAUBJS8hpJVXtgAAAIY"]
[Tue Feb 24 09:23:40.325760 2026] [:error] [pid 37538:tid 37570] [client 119.28.89.249:59404] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZz9nCynTiHZ9J0Y2naCqwAAABY"]
[Tue Feb 24 10:18:56.844176 2026] [:error] [pid 37539:tid 37593] [client 182.44.10.67:51500] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ0KkHEnr46jUQep9z__wwAAAFI"]
[Tue Feb 24 11:39:08.590610 2026] [:error] [pid 37540:tid 37615] [client 43.167.239.66:54528] [client 43.167.239.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZ0dXCahRAUBJS8hpJXeSQAAAI0"]
[Tue Feb 24 12:42:10.538677 2026] [:error] [pid 11672:tid 11681] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Feb 24 12:42:10.933076 2026] [:error] [pid 11672:tid 11689] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Feb 24 12:42:11.329095 2026] [:error] [pid 11672:tid 11691] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue Feb 24 12:42:11.724435 2026] [:error] [pid 11672:tid 11698] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Feb 24 12:42:12.119968 2026] [:error] [pid 11672:tid 11680] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Feb 24 12:42:12.514420 2026] [:error] [pid 11672:tid 11682] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Feb 24 12:42:12.909201 2026] [:error] [pid 11672:tid 11696] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Feb 24 12:42:13.304043 2026] [:error] [pid 11672:tid 11679] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Feb 24 12:42:14.093204 2026] [:error] [pid 11672:tid 11677] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Feb 24 12:42:14.884038 2026] [:error] [pid 11672:tid 11692] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue Feb 24 12:42:15.278067 2026] [:error] [pid 11672:tid 11697] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Feb 24 12:42:15.674182 2026] [:error] [pid 11672:tid 11689] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Feb 24 12:42:16.068483 2026] [:error] [pid 11672:tid 11691] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Feb 24 12:42:16.464424 2026] [:error] [pid 11672:tid 11685] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Feb 24 12:42:16.859447 2026] [:error] [pid 11672:tid 11682] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Feb 24 12:42:17.254152 2026] [:error] [pid 11672:tid 11696] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Feb 24 12:42:17.649583 2026] [:error] [pid 11672:tid 11694] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Feb 24 12:42:18.043827 2026] [:error] [pid 11672:tid 11684] [client 45.130.203.208:49107] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Feb 24 12:42:24.155788 2026] [:error] [pid 11672:tid 11694] [client 45.130.203.208:49107] [client 45.130.203.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZ0sMPa0fhnmfPYq92sgXgAAARQ"]
[Tue Feb 24 12:42:26.344090 2026] [:error] [pid 11672:tid 11690] [client 45.130.203.230:28499] [client 45.130.203.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aZ0sMva0fhnmfPYq92sgZQAAARA"]
[Tue Feb 24 12:42:29.060432 2026] [:error] [pid 37540:tid 37603] [client 45.130.203.201:26581] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Feb 24 12:42:30.257546 2026] [:error] [pid 37540:tid 37625] [client 45.130.203.201:26581] [client 45.130.203.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aZ0sNiahRAUBJS8hpJX99QAAAJc"]
[Tue Feb 24 12:42:31.840037 2026] [:error] [pid 37540:tid 37605] [client 45.130.203.189:29547] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Feb 24 12:42:32.231186 2026] [:error] [pid 37540:tid 37610] [client 45.130.203.189:29547] [client 45.130.203.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aZ0sOCahRAUBJS8hpJX9_AAAAIg"]
[Tue Feb 24 12:42:33.432069 2026] [:error] [pid 37540:tid 37621] [client 45.130.203.232:20367] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue Feb 24 12:42:35.430980 2026] [:error] [pid 37540:tid 37617] [client 45.130.203.232:20367] [client 45.130.203.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aZ0sOyahRAUBJS8hpJX-DAAAAI8"]
[Tue Feb 24 12:42:36.615837 2026] [:error] [pid 34175:tid 34191] [client 45.130.203.209:46255] [client 45.130.203.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aZ0sPHNLnkJcHQ-bNtVk4QAAAY4"]
[Tue Feb 24 12:42:37.413579 2026] [:error] [pid 34175:tid 34193] [client 45.130.203.185:61845] [client 45.130.203.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aZ0sPXNLnkJcHQ-bNtVk4wAAAZA"]
[Tue Feb 24 12:42:38.201123 2026] [:error] [pid 41188:tid 41211] [client 45.130.203.186:59751] [client 45.130.203.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aZ0sPgWRg7szIRhA0Wj91QAAAVQ"]
[Tue Feb 24 12:42:39.008209 2026] [:error] [pid 11672:tid 11691] [client 45.130.203.223:51015] [client 45.130.203.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aZ0sP_a0fhnmfPYq92sgZwAAARE"]
[Tue Feb 24 12:42:39.845278 2026] [:error] [pid 11672:tid 11698] [client 45.130.203.237:37781] [client 45.130.203.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aZ0sP_a0fhnmfPYq92sgaQAAARg"]
[Tue Feb 24 12:42:41.044473 2026] [:error] [pid 34175:tid 34184] [client 45.130.203.180:50193] [client 45.130.203.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aZ0sQXNLnkJcHQ-bNtVk5wAAAYc"]
[Tue Feb 24 12:42:41.864725 2026] [:error] [pid 41188:tid 41205] [client 45.130.203.186:49005] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue Feb 24 12:42:42.656010 2026] [:error] [pid 41188:tid 41194] [client 45.130.203.186:49005] [client 45.130.203.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aZ0sQgWRg7szIRhA0Wj92QAAAUM"]
[Tue Feb 24 12:42:44.254952 2026] [:error] [pid 37538:tid 37551] [client 45.130.203.212:38137] [client 45.130.203.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aZ0sRCynTiHZ9J0Y2nac8wAAAAM"]
[Tue Feb 24 12:42:46.270528 2026] [:error] [pid 11672:tid 11678] [client 45.130.203.200:29011] [client 45.130.203.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aZ0sRva0fhnmfPYq92sgbwAAAQQ"]
[Tue Feb 24 12:42:47.064204 2026] [:error] [pid 37540:tid 37602] [client 45.130.203.214:29619] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Tue Feb 24 12:42:47.458682 2026] [:error] [pid 37540:tid 37624] [client 45.130.203.214:29619] [client 45.130.203.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aZ0sRyahRAUBJS8hpJX-EgAAAJY"]
[Tue Feb 24 12:42:48.248797 2026] [:error] [pid 37540:tid 37615] [client 45.130.203.191:63919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue Feb 24 12:42:49.443858 2026] [:error] [pid 37540:tid 37612] [client 45.130.203.191:63919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Feb 24 12:42:50.674234 2026] [:error] [pid 37540:tid 37605] [client 45.130.203.191:63919] [client 45.130.203.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aZ0sSiahRAUBJS8hpJX-IQAAAIM"]
[Tue Feb 24 12:42:51.467605 2026] [:error] [pid 11672:tid 11679] [client 45.130.203.188:37347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue Feb 24 12:42:51.862344 2026] [:error] [pid 11672:tid 11677] [client 45.130.203.188:37347] [client 45.130.203.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aZ0sS_a0fhnmfPYq92sgcwAAAQM"]
[Tue Feb 24 12:42:52.654847 2026] [:error] [pid 37540:tid 37613] [client 45.130.203.231:23081] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Feb 24 12:42:53.455104 2026] [:error] [pid 37540:tid 37603] [client 45.130.203.231:23081] [client 45.130.203.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aZ0sTSahRAUBJS8hpJX-LAAAAIE"]
[Tue Feb 24 12:42:54.666476 2026] [:error] [pid 37538:tid 37550] [client 45.130.203.215:33123] [client 45.130.203.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZ0sTiynTiHZ9J0Y2nac-QAAAAI"]
[Tue Feb 24 12:42:55.863136 2026] [:error] [pid 37540:tid 37610] [client 45.130.203.196:46547] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Tue Feb 24 12:42:56.257732 2026] [:error] [pid 37540:tid 37607] [client 45.130.203.196:46547] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue Feb 24 12:42:57.064032 2026] [:error] [pid 37540:tid 37621] [client 45.130.203.196:46547] [client 45.130.203.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aZ0sUSahRAUBJS8hpJX-MwAAAJM"]
[Tue Feb 24 12:42:58.248418 2026] [:error] [pid 11672:tid 11694] [client 45.130.203.187:41157] [client 45.130.203.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aZ0sUva0fhnmfPYq92sgewAAARQ"]
[Tue Feb 24 12:42:59.428618 2026] [:error] [pid 37644:tid 37657] [client 45.130.203.183:34161] [client 45.130.203.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aZ0sU0LaEhVDwBRydH2tCgAAAMs"]
[Tue Feb 24 12:43:00.225505 2026] [:error] [pid 37538:tid 37554] [client 45.130.203.183:58823] [client 45.130.203.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aZ0sVCynTiHZ9J0Y2nadBwAAAAY"]
[Tue Feb 24 12:43:01.028468 2026] [:error] [pid 37538:tid 37568] [client 45.130.203.220:53073] [client 45.130.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aZ0sVSynTiHZ9J0Y2nadCgAAABQ"]
[Tue Feb 24 12:43:02.651726 2026] [:error] [pid 37540:tid 37602] [client 45.130.203.189:41393] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Feb 24 12:43:03.063841 2026] [:error] [pid 37540:tid 37618] [client 45.130.203.189:41393] [client 45.130.203.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aZ0sVyahRAUBJS8hpJX-QwAAAJA"]
[Tue Feb 24 12:43:03.878406 2026] [:error] [pid 37540:tid 37624] [client 45.130.203.218:20673] [client 45.130.203.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aZ0sVyahRAUBJS8hpJX-RgAAAJY"]
[Tue Feb 24 12:43:05.701606 2026] [:error] [pid 34175:tid 34199] [client 45.130.203.211:23023] [client 45.130.203.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aZ0sWXNLnkJcHQ-bNtVk9gAAAZU"]
[Tue Feb 24 12:43:07.289167 2026] [:error] [pid 34175:tid 34201] [client 45.130.203.205:49601] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue Feb 24 12:43:08.126104 2026] [:error] [pid 34175:tid 34199] [client 45.130.203.205:49601] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue Feb 24 12:43:10.048775 2026] [:error] [pid 34175:tid 34183] [client 45.130.203.205:49601] [client 45.130.203.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aZ0sXnNLnkJcHQ-bNtVlBgAAAYY"]
[Tue Feb 24 12:43:12.160125 2026] [:error] [pid 41188:tid 41196] [client 45.130.203.198:52183] [client 45.130.203.198] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.203.198, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aZ0sYAWRg7szIRhA0Wj96QAAAUU"]
[Tue Feb 24 12:43:12.588917 2026] [:error] [pid 41188:tid 41213] [client 45.130.203.198:52183] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue Feb 24 12:43:14.712503 2026] [:error] [pid 41188:tid 41206] [client 45.130.203.198:52183] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue Feb 24 12:43:15.109163 2026] [:error] [pid 41188:tid 41212] [client 45.130.203.198:52183] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Feb 24 12:43:18.230355 2026] [:error] [pid 41188:tid 41215] [client 45.130.203.198:52183] [client 45.130.203.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aZ0sZgWRg7szIRhA0Wj99wAAAVg"]
[Tue Feb 24 12:43:19.421072 2026] [:error] [pid 37538:tid 37566] [client 45.130.203.218:34953] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue Feb 24 12:43:19.815635 2026] [:error] [pid 37538:tid 37571] [client 45.130.203.218:34953] [client 45.130.203.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.203.218, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aZ0sZyynTiHZ9J0Y2nadGQAAABc"]
[Tue Feb 24 12:43:20.637234 2026] [:error] [pid 37538:tid 37549] [client 45.130.203.218:34953] [client 45.130.203.218] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aZ0saCynTiHZ9J0Y2nadHgAAAAE"]
[Tue Feb 24 12:43:23.302517 2026] [:error] [pid 37540:tid 37607] [client 45.130.203.211:33227] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Feb 24 12:43:24.129222 2026] [:error] [pid 37540:tid 37610] [client 45.130.203.211:33227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Tue Feb 24 12:43:24.921533 2026] [:error] [pid 37540:tid 37606] [client 45.130.203.211:33227] [client 45.130.203.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aZ0sbCahRAUBJS8hpJX-ZQAAAIQ"]
[Tue Feb 24 12:43:25.719425 2026] [:error] [pid 37540:tid 37611] [client 45.130.203.190:55007] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Feb 24 12:43:26.978323 2026] [:error] [pid 37540:tid 37620] [client 45.130.203.190:55007] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Tue Feb 24 12:43:27.779373 2026] [:error] [pid 37540:tid 37602] [client 45.130.203.190:55007] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Tue Feb 24 12:43:28.583954 2026] [:error] [pid 37540:tid 37607] [client 45.130.203.190:55007] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Feb 24 12:43:28.980591 2026] [:error] [pid 37540:tid 37626] [client 45.130.203.190:55007] [client 45.130.203.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aZ0scCahRAUBJS8hpJX-cgAAAJg"]
[Tue Feb 24 12:43:30.818546 2026] [:error] [pid 37539:tid 37589] [client 45.130.203.210:54797] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Feb 24 12:43:31.223418 2026] [:error] [pid 37539:tid 37575] [client 45.130.203.210:54797] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Feb 24 12:43:31.614903 2026] [:error] [pid 37539:tid 37587] [client 45.130.203.210:54797] [client 45.130.203.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aZ0sc3Enr46jUQep9z8UzQAAAEw"]
[Tue Feb 24 12:43:32.813346 2026] [:error] [pid 37538:tid 37549] [client 45.130.203.209:40111] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Feb 24 12:43:33.638222 2026] [:error] [pid 37538:tid 37561] [client 45.130.203.209:40111] [client 45.130.203.209] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.130.203.209, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aZ0sdSynTiHZ9J0Y2nadJwAAAA0"]
[Tue Feb 24 12:43:34.038428 2026] [:error] [pid 37538:tid 37548] [client 45.130.203.209:40111] [client 45.130.203.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aZ0sdiynTiHZ9J0Y2nadKAAAAAA"]
[Tue Feb 24 12:43:38.915897 2026] [:error] [pid 37540:tid 37612] [client 45.130.203.220:39129] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Tue Feb 24 12:43:41.343704 2026] [:error] [pid 37540:tid 37603] [client 45.130.203.220:39129] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Feb 24 12:43:41.757151 2026] [:error] [pid 37540:tid 37608] [client 45.130.203.220:39129] [client 45.130.203.220] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aZ0sfSahRAUBJS8hpJX-jwAAAIY"]
[Tue Feb 24 15:30:27.168083 2026] [:error] [pid 23678:tid 23754] [client 43.135.144.81:49098] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ1Tk0jfX6zv05Y7fF6CcgAAAVQ"]
[Tue Feb 24 17:49:56.899288 2026] [:error] [pid 34750:tid 34787] [client 170.106.140.110:59854] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZ10ROaZ-Iv_wvbRkKLVAAAAAUY"]
[Tue Feb 24 19:44:58.074445 2026] [:error] [pid 16868:tid 16918] [client 103.77.107.57:59425] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aZ2POidEecEcYKsh8PTkMwAAA9U"]
[Tue Feb 24 19:44:58.434453 2026] [:error] [pid 16868:tid 16901] [client 103.77.107.57:59434] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aZ2POidEecEcYKsh8PTkNQAAA8Q"]
[Tue Feb 24 20:21:04.017512 2026] [:error] [pid 16867:tid 16879] [client 87.16.156.10:57021] [client 87.16.156.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.16.156.10, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ2XsNTc72Oc9LHzeyKBhAAAA4k"]
[Tue Feb 24 20:21:04.022576 2026] [:error] [pid 16867:tid 16879] [client 87.16.156.10:57021] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Feb 24 20:23:35.146706 2026] [:error] [pid 16867:tid 16889] [client 112.134.207.252:65319] [client 112.134.207.252] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.207.252, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ2YR9Tc72Oc9LHzeyKCLQAAA5M"]
[Tue Feb 24 20:23:35.152250 2026] [:error] [pid 16867:tid 16889] [client 112.134.207.252:65319] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Feb 24 21:27:36.278321 2026] [:error] [pid 40394:tid 40449] [client 49.51.180.2:34094] [client 49.51.180.2] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ2nSODlibHIQ-y0MaR4-gAAAJY"]
[Wed Feb 25 00:05:28.566412 2026] [:error] [pid 37784:tid 37792] [client 106.54.62.156:42670] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ3MSBhsjFGJ0bR81bd2iQAAAoY"]
[Wed Feb 25 05:34:03.831256 2026] [:error] [pid 60290:tid 60303] [client 216.73.216.30:8695] [client 216.73.216.30] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||dbservices.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "aZ4ZSzPwSUztcPyiofpvAAAAAQs"]
[Wed Feb 25 06:02:36.818783 2026] [:error] [pid 5556:tid 5606] [client 43.156.168.214:35030] [client 43.156.168.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZ4f_KOrYeaTyh7lGRUlIwAAAdM"]
[Wed Feb 25 06:19:10.706954 2026] [:error] [pid 5620:tid 5675] [client 182.42.111.213:45738] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZ4j3oY2LQjtieeRkobPNQAAAw0"]
[Wed Feb 25 09:25:58.468148 2026] [:error] [pid 20659:tid 20717] [client 179.251.81.171:54841] [client 179.251.81.171] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.251.81.171, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ5Ppj_THK_HtK-Q44Iy5AAAAFY"]
[Wed Feb 25 09:25:58.475560 2026] [:error] [pid 20659:tid 20717] [client 179.251.81.171:54841] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 25 10:01:11.242405 2026] [:error] [pid 60500:tid 60598] [client 34.227.99.251:49471] [client 34.227.99.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZ5X5_Y9avxuno9KAT8V_wAAA0w"]
[Wed Feb 25 10:01:12.281275 2026] [:error] [pid 60387:tid 60485] [client 34.227.99.251:49531] [client 34.227.99.251] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aZ5X6IHL0QH7Sr13X0LJ_wAAAo0"]
[Wed Feb 25 16:24:13.544885 2026] [:error] [pid 5556:tid 5601] [client 43.165.70.220:59998] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ6xraOrYeaTyh7lGRX9GQAAAc4"]
[Wed Feb 25 18:37:11.481864 2026] [:error] [pid 60498:tid 60523] [client 43.166.226.57:50216] [client 43.166.226.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZ7Q1yFCVhQ3ffus0uIaQwAAAtI"]
[Wed Feb 25 21:23:34.221483 2026] [:error] [pid 60498:tid 60516] [client 139.59.24.163:57022] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aZ731iFCVhQ3ffus0uI4IgAAAss"], referer: binance.com
[Wed Feb 25 21:23:44.715806 2026] [:error] [pid 5556:tid 5598] [client 139.59.24.163:59071] [client 139.59.24.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aZ734KOrYeaTyh7lGRV0BQAAAcs"], referer: binance.com
[Wed Feb 25 21:36:07.457961 2026] [:error] [pid 60290:tid 60313] [client 122.160.151.11:55525] [client 122.160.151.11] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.160.151.11, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ76xzPwSUztcPyiofqz_QAAARU"]
[Wed Feb 25 21:36:07.463234 2026] [:error] [pid 60290:tid 60313] [client 122.160.151.11:55525] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Feb 25 22:01:44.327152 2026] [:error] [pid 5556:tid 5609] [client 87.106.209.183:60751] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Wed Feb 25 22:01:59.687120 2026] [:error] [pid 5556:tid 5588] [client 87.106.209.183:59287] [client 87.106.209.183] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aZ8A16OrYeaTyh7lGRWKCAAAAcE"], referer: www.google.com
[Wed Feb 25 22:16:26.560139 2026] [:error] [pid 5556:tid 5601] [client 162.62.231.139:59210] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ8EOqOrYeaTyh7lGRWVywAAAc4"]
[Thu Feb 26 05:03:27.462197 2026] [:error] [pid 6071:tid 6092] [client 43.153.67.21:60176] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ9jn4QfAzdrpgft075GNQAAARI"]
[Thu Feb 26 05:54:19.202761 2026] [:error] [pid 9589:tid 9665] [client 20.104.230.73:65454] File does not exist: /usr/local/apache/htdocs/suspended-page/class3.php
[Thu Feb 26 05:54:19.421032 2026] [:error] [pid 9589:tid 9673] [client 20.104.230.73:65454] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Thu Feb 26 08:15:06.773263 2026] [:error] [pid 3883:tid 3886] [client 120.71.59.24:32774] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZ-QiuA33x90V6yYHaiWYgAAAUA"]
[Thu Feb 26 08:42:57.225310 2026] [:error] [pid 3883:tid 3902] [client 20.151.132.87:43988] [client 20.151.132.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-XEeA33x90V6yYHaisyAAAAVA"]
[Thu Feb 26 08:42:57.674956 2026] [:error] [pid 55122:tid 55146] [client 20.151.132.87:44030] [client 20.151.132.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-XEYLiR0OfjFxvcN9z1wAAANY"]
[Thu Feb 26 08:42:58.220634 2026] [:error] [pid 55122:tid 55145] [client 20.151.132.87:44004] [client 20.151.132.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-XEoLiR0OfjFxvcN9z2QAAANU"]
[Thu Feb 26 08:42:58.740128 2026] [:error] [pid 55122:tid 55125] [client 20.151.132.87:43909] [client 20.151.132.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ-XEoLiR0OfjFxvcN9z2wAAAME"]
[Thu Feb 26 08:59:46.937070 2026] [:error] [pid 25311:tid 25325] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Thu Feb 26 08:59:47.152044 2026] [:error] [pid 25311:tid 25320] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/old.php
[Thu Feb 26 08:59:47.368747 2026] [:error] [pid 25311:tid 25314] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Thu Feb 26 08:59:47.581854 2026] [:error] [pid 25311:tid 25323] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/ultra.php
[Thu Feb 26 08:59:47.796601 2026] [:error] [pid 25311:tid 25318] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu Feb 26 08:59:48.021216 2026] [:error] [pid 25311:tid 25338] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Feb 26 08:59:48.247988 2026] [:error] [pid 25311:tid 25327] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Thu Feb 26 08:59:48.468361 2026] [:error] [pid 25311:tid 25319] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Thu Feb 26 08:59:48.693468 2026] [:error] [pid 25311:tid 25337] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Feb 26 08:59:48.932920 2026] [:error] [pid 25311:tid 25333] [client 13.71.184.165:22408] File does not exist: /usr/local/apache/htdocs/suspended-page/check.php
[Thu Feb 26 08:59:49.167947 2026] [:error] [pid 25311:tid 25328] [client 13.71.184.165:22408] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aZ-bBdfdM__yZAgJFSsBYgAAAY4"]
[Thu Feb 26 08:59:49.844209 2026] [:error] [pid 3883:tid 3900] [client 13.71.184.165:22410] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aZ-bBeA33x90V6yYHai7_gAAAU4"]
[Thu Feb 26 08:59:50.636834 2026] [:error] [pid 3883:tid 3901] [client 13.71.184.165:22511] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aZ-bBuA33x90V6yYHai8CAAAAU8"]
[Thu Feb 26 08:59:51.197083 2026] [:error] [pid 55051:tid 55062] [client 13.71.184.165:22527] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aZ-bBwmK1w2kZvh5eLGsrwAAAIg"]
[Thu Feb 26 08:59:51.961206 2026] [:error] [pid 3883:tid 3890] [client 13.71.184.165:22485] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aZ-bB-A33x90V6yYHai8EQAAAUQ"]
[Thu Feb 26 08:59:52.664737 2026] [:error] [pid 25311:tid 25326] [client 13.71.184.165:22521] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aZ-bCNfdM__yZAgJFSsBZAAAAYw"]
[Thu Feb 26 08:59:53.418594 2026] [:error] [pid 3883:tid 3900] [client 13.71.184.165:22491] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aZ-bCeA33x90V6yYHai8HAAAAU4"]
[Thu Feb 26 08:59:54.066667 2026] [:error] [pid 54990:tid 55003] [client 13.71.184.165:22493] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inject.php"] [unique_id "aZ-bCntr2qmt_mBhH2y_xwAAAAo"]
[Thu Feb 26 08:59:54.532824 2026] [:error] [pid 3883:tid 3888] [client 13.71.184.165:22438] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aZ-bCuA33x90V6yYHai8OQAAAUI"]
[Thu Feb 26 08:59:55.047865 2026] [:error] [pid 3883:tid 3904] [client 13.71.184.165:22409] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aZ-bC-A33x90V6yYHai8QAAAAVI"]
[Thu Feb 26 08:59:55.641334 2026] [:error] [pid 3883:tid 3904] [client 13.71.184.165:22518] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aZ-bC-A33x90V6yYHai8RgAAAVI"]
[Thu Feb 26 08:59:56.228335 2026] [:error] [pid 3883:tid 3888] [client 13.71.184.165:22524] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aZ-bDOA33x90V6yYHai8TwAAAUI"]
[Thu Feb 26 08:59:57.042094 2026] [:error] [pid 3883:tid 3902] [client 13.71.184.165:22418] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aZ-bDeA33x90V6yYHai8VgAAAVA"]
[Thu Feb 26 08:59:57.548360 2026] [:error] [pid 3883:tid 3899] [client 13.71.184.165:22337] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aZ-bDeA33x90V6yYHai8WgAAAU0"]
[Thu Feb 26 08:59:58.416203 2026] [:error] [pid 3883:tid 3909] [client 13.71.184.165:22415] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aZ-bDuA33x90V6yYHai8YgAAAVc"]
[Thu Feb 26 08:59:59.303873 2026] [:error] [pid 55618:tid 55631] [client 13.71.184.165:22489] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pro.php"] [unique_id "aZ-bDx61Vrh12f_8oWT75QAAAQo"]
[Thu Feb 26 08:59:59.889847 2026] [:error] [pid 3883:tid 3904] [client 13.71.184.165:22481] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aZ-bD-A33x90V6yYHai8ZgAAAVI"]
[Thu Feb 26 09:00:00.552222 2026] [:error] [pid 55618:tid 55640] [client 13.71.184.165:22526] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aZ-bEB61Vrh12f_8oWT76gAAARM"]
[Thu Feb 26 09:00:01.210158 2026] [:error] [pid 55618:tid 55643] [client 13.71.184.165:22490] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aZ-bER61Vrh12f_8oWT77AAAARY"]
[Thu Feb 26 09:00:01.813873 2026] [:error] [pid 55618:tid 55636] [client 13.71.184.165:22504] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aZ-bER61Vrh12f_8oWT77gAAAQ8"]
[Thu Feb 26 09:00:02.390829 2026] [:error] [pid 3883:tid 3898] [client 13.71.184.165:22494] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aZ-bEuA33x90V6yYHai8cgAAAUw"]
[Thu Feb 26 09:00:02.894683 2026] [:error] [pid 55618:tid 55625] [client 13.71.184.165:22476] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aZ-bEh61Vrh12f_8oWT78QAAAQQ"]
[Thu Feb 26 09:00:03.504766 2026] [:error] [pid 3883:tid 3886] [client 13.71.184.165:22433] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aZ-bE-A33x90V6yYHai8cwAAAUA"]
[Thu Feb 26 09:00:04.058853 2026] [:error] [pid 3883:tid 3896] [client 13.71.184.165:22517] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aZ-bFOA33x90V6yYHai8dwAAAUo"]
[Thu Feb 26 09:00:04.769290 2026] [:error] [pid 3883:tid 3905] [client 13.71.184.165:22347] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aZ-bFOA33x90V6yYHai8egAAAVM"]
[Thu Feb 26 09:00:05.280200 2026] [:error] [pid 25311:tid 25327] [client 13.71.184.165:22520] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aZ-bFdfdM__yZAgJFSsBbQAAAY0"]
[Thu Feb 26 09:00:05.854303 2026] [:error] [pid 3883:tid 3890] [client 13.71.184.165:22519] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aZ-bFeA33x90V6yYHai8fwAAAUQ"]
[Thu Feb 26 09:00:06.498917 2026] [:error] [pid 3883:tid 3899] [client 13.71.184.165:22498] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php"] [unique_id "aZ-bFuA33x90V6yYHai8ggAAAU0"]
[Thu Feb 26 09:00:07.060789 2026] [:error] [pid 54991:tid 55040] [client 13.71.184.165:22465] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aZ-bF94Zx-mJ8gbRB2hkagAAAFQ"]
[Thu Feb 26 09:00:07.732825 2026] [:error] [pid 3883:tid 3907] [client 13.71.184.165:22346] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aZ-bF-A33x90V6yYHai8iAAAAVU"]
[Thu Feb 26 09:00:08.225146 2026] [:error] [pid 3883:tid 3896] [client 13.71.184.165:22444] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aZ-bGOA33x90V6yYHai8iQAAAUo"]
[Thu Feb 26 09:00:08.859062 2026] [:error] [pid 3883:tid 3888] [client 13.71.184.165:22495] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aZ-bGOA33x90V6yYHai8iwAAAUI"]
[Thu Feb 26 09:00:09.509716 2026] [:error] [pid 3883:tid 3901] [client 13.71.184.165:22500] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZ-bGeA33x90V6yYHai8mwAAAU8"]
[Thu Feb 26 09:00:10.026773 2026] [:error] [pid 3883:tid 3887] [client 13.71.184.165:22523] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZ-bGuA33x90V6yYHai8nQAAAUE"]
[Thu Feb 26 09:00:10.630777 2026] [:error] [pid 3883:tid 3896] [client 13.71.184.165:22414] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZ-bGuA33x90V6yYHai8oAAAAUo"]
[Thu Feb 26 09:00:11.202227 2026] [:error] [pid 55618:tid 55641] [client 13.71.184.165:22405] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "aZ-bGx61Vrh12f_8oWT8AwAAARQ"]
[Thu Feb 26 09:00:11.852927 2026] [:error] [pid 3883:tid 3902] [client 13.71.184.165:22499] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZ-bG-A33x90V6yYHai8swAAAVA"]
[Thu Feb 26 09:00:12.444408 2026] [:error] [pid 3883:tid 3908] [client 13.71.184.165:22488] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZ-bHOA33x90V6yYHai8twAAAVY"]
[Thu Feb 26 09:00:13.190241 2026] [:error] [pid 55618:tid 55637] [client 13.71.184.165:22464] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZ-bHR61Vrh12f_8oWT8BQAAARA"]
[Thu Feb 26 09:00:13.813407 2026] [:error] [pid 55618:tid 55629] [client 13.71.184.165:22419] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aZ-bHR61Vrh12f_8oWT8CAAAAQg"]
[Thu Feb 26 09:00:14.346173 2026] [:error] [pid 3883:tid 3896] [client 13.71.184.165:22467] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aZ-bHuA33x90V6yYHai8ugAAAUo"]
[Thu Feb 26 09:00:14.882104 2026] [:error] [pid 55618:tid 55632] [client 13.71.184.165:22349] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aZ-bHh61Vrh12f_8oWT8DgAAAQs"]
[Thu Feb 26 09:00:15.590431 2026] [:error] [pid 3883:tid 3908] [client 13.71.184.165:22417] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aZ-bH-A33x90V6yYHai8vwAAAVY"]
[Thu Feb 26 09:00:16.294106 2026] [:error] [pid 3883:tid 3905] [client 13.71.184.165:22474] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aZ-bIOA33x90V6yYHai8wwAAAVM"]
[Thu Feb 26 09:00:16.900994 2026] [:error] [pid 3883:tid 3906] [client 13.71.184.165:22503] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aZ-bIOA33x90V6yYHai8xgAAAVQ"]
[Thu Feb 26 09:00:17.390014 2026] [:error] [pid 3883:tid 3891] [client 13.71.184.165:22338] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aZ-bIeA33x90V6yYHai8yQAAAUU"]
[Thu Feb 26 09:00:18.006504 2026] [:error] [pid 25311:tid 25331] [client 13.71.184.165:22482] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aZ-bItfdM__yZAgJFSsBggAAAZE"]
[Thu Feb 26 09:00:19.103173 2026] [:error] [pid 55618:tid 55626] [client 13.71.184.165:22383] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aZ-bIx61Vrh12f_8oWT8FAAAAQU"]
[Thu Feb 26 09:00:20.007877 2026] [:error] [pid 3883:tid 3897] [client 13.71.184.165:22412] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aZ-bJOA33x90V6yYHai8zwAAAUs"]
[Thu Feb 26 09:00:20.811445 2026] [:error] [pid 3883:tid 3890] [client 13.71.184.165:22411] [client 13.71.184.165] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aZ-bJOA33x90V6yYHai80QAAAUQ"]
[Thu Feb 26 11:36:25.090649 2026] [:error] [pid 55122:tid 55142] [client 43.153.123.4:41568] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ-_uYLiR0OfjFxvcN-kDQAAANI"]
[Thu Feb 26 11:40:47.420871 2026] [:error] [pid 55618:tid 55626] [client 138.199.35.3:57556] [client 138.199.35.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.3, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aZ_Avx61Vrh12f_8oWRRfAAAAQU"]
[Thu Feb 26 11:40:47.425758 2026] [:error] [pid 55618:tid 55626] [client 138.199.35.3:57556] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Feb 26 11:40:49.375531 2026] [:error] [pid 55618:tid 55636] [client 138.199.35.3:57556] [client 138.199.35.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aZ_AwR61Vrh12f_8oWRRiAAAAQ8"]
[Thu Feb 26 11:40:49.687616 2026] [:error] [pid 3883:tid 3900] [client 138.199.35.3:17978] [client 138.199.35.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aZ_AweA33x90V6yYHagpRQAAAU4"]
[Thu Feb 26 11:40:49.996176 2026] [:error] [pid 25311:tid 25319] [client 138.199.35.3:57562] [client 138.199.35.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aZ_AwdfdM__yZAgJFSuAUAAAAYU"]
[Thu Feb 26 11:40:50.311264 2026] [:error] [pid 55618:tid 55640] [client 138.199.35.3:57564] [client 138.199.35.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aZ_Awh61Vrh12f_8oWRRjAAAARM"]
[Thu Feb 26 11:40:50.630308 2026] [:error] [pid 3883:tid 3905] [client 138.199.35.3:62040] [client 138.199.35.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aZ_AwuA33x90V6yYHagpSQAAAVM"]
[Thu Feb 26 11:40:50.938736 2026] [:error] [pid 25311:tid 25331] [client 138.199.35.3:57586] [client 138.199.35.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aZ_AwtfdM__yZAgJFSuAXgAAAZE"]
[Thu Feb 26 11:40:51.249792 2026] [:error] [pid 25311:tid 25318] [client 138.199.35.3:57602] [client 138.199.35.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aZ_Aw9fdM__yZAgJFSuAYAAAAYQ"]
[Thu Feb 26 13:52:58.726099 2026] [:error] [pid 25311:tid 25330] [client 43.153.12.58:50804] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aZ_futfdM__yZAgJFSvq1gAAAZA"]
[Thu Feb 26 14:37:54.264635 2026] [:error] [pid 3883:tid 3887] [client 43.140.247.223:38446] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aZ_qQuA33x90V6yYHaiIwQAAAUE"]
[Thu Feb 26 17:40:14.780735 2026] [:error] [pid 25311:tid 25326] [client 43.155.195.141:58110] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaAU_tfdM__yZAgJFStb2AAAAYw"]
[Thu Feb 26 19:01:45.847903 2026] [:error] [pid 3883:tid 3905] [client 178.16.52.3:55234] [client 178.16.52.3] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aaAoGeA33x90V6yYHahzQAAAAVM"]
[Thu Feb 26 19:48:22.073995 2026] [:error] [pid 54991:tid 55035] [client 170.106.73.216:40514] [client 170.106.73.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaAzBt4Zx-mJ8gbRB2jb5gAAAE8"]
[Thu Feb 26 21:37:59.973676 2026] [:error] [pid 20419:tid 20425] [client 182.44.8.254:59897] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaBMt-3DVDvMfTYYUBVaqAAAAcM"]
[Thu Feb 26 22:02:26.912453 2026] [:error] [pid 44444:tid 44466] [client 157.245.196.99:50705] [client 157.245.196.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/profile-builder/readme.txt"] [unique_id "aaBScm2sMNmj-yekUk0-LQAAAhA"]
[Thu Feb 26 23:03:26.453173 2026] [:error] [pid 44444:tid 44454] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Thu Feb 26 23:03:26.662524 2026] [:error] [pid 44444:tid 44464] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/work.php
[Thu Feb 26 23:03:26.870658 2026] [:error] [pid 44444:tid 44461] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/C.php
[Thu Feb 26 23:03:27.082821 2026] [:error] [pid 44444:tid 44460] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/ze.php
[Thu Feb 26 23:03:27.301844 2026] [:error] [pid 44444:tid 44456] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Feb 26 23:03:27.534236 2026] [:error] [pid 44444:tid 44458] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Thu Feb 26 23:03:27.748792 2026] [:error] [pid 44444:tid 44473] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/pouhg.php
[Thu Feb 26 23:03:27.965935 2026] [:error] [pid 44444:tid 44469] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/vgtyu.php
[Thu Feb 26 23:03:28.175964 2026] [:error] [pid 44444:tid 44462] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Thu Feb 26 23:03:28.385123 2026] [:error] [pid 44444:tid 44461] [client 4.204.200.32:38164] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Thu Feb 26 23:03:28.592115 2026] [:error] [pid 44444:tid 44471] [client 4.204.200.32:38164] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x123.php"] [unique_id "aaBgwG2sMNmj-yekUk1pDgAAAhU"]
[Thu Feb 26 23:03:29.002060 2026] [:error] [pid 44444:tid 44473] [client 4.204.200.32:38089] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x123.php"] [unique_id "aaBgwW2sMNmj-yekUk1pFQAAAhc"]
[Thu Feb 26 23:03:29.413406 2026] [:error] [pid 55051:tid 55069] [client 4.204.200.32:38091] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x123.php"] [unique_id "aaBgwQmK1w2kZvh5eLHhqQAAAI8"]
[Thu Feb 26 23:03:29.825188 2026] [:error] [pid 55051:tid 55070] [client 4.204.200.32:38086] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x123.php"] [unique_id "aaBgwQmK1w2kZvh5eLHhrgAAAJA"]
[Thu Feb 26 23:03:30.239899 2026] [:error] [pid 55051:tid 55054] [client 4.204.200.32:38160] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaBgwgmK1w2kZvh5eLHhtAAAAIA"]
[Thu Feb 26 23:03:30.653683 2026] [:error] [pid 55051:tid 55066] [client 4.204.200.32:38169] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaBgwgmK1w2kZvh5eLHhtwAAAIw"]
[Thu Feb 26 23:03:31.065344 2026] [:error] [pid 55051:tid 55077] [client 4.204.200.32:38090] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaBgwwmK1w2kZvh5eLHhvwAAAJc"]
[Thu Feb 26 23:03:31.473185 2026] [:error] [pid 44444:tid 44471] [client 4.204.200.32:38094] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaBgw22sMNmj-yekUk1pGQAAAhU"]
[Thu Feb 26 23:03:31.885457 2026] [:error] [pid 44444:tid 44455] [client 4.204.200.32:38087] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaBgw22sMNmj-yekUk1pHQAAAgU"]
[Thu Feb 26 23:03:32.297703 2026] [:error] [pid 54991:tid 55022] [client 4.204.200.32:38193] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaBgxN4Zx-mJ8gbRB2gOzAAAAEI"]
[Thu Feb 26 23:03:32.710550 2026] [:error] [pid 55122:tid 55132] [client 4.204.200.32:38144] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaBgxILiR0OfjFxvcN87lAAAAMg"]
[Thu Feb 26 23:03:33.120705 2026] [:error] [pid 54991:tid 55020] [client 4.204.200.32:38146] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaBgxd4Zx-mJ8gbRB2gOzgAAAEA"]
[Thu Feb 26 23:03:33.530894 2026] [:error] [pid 55051:tid 55063] [client 4.204.200.32:38154] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaBgxQmK1w2kZvh5eLHhxwAAAIk"]
[Thu Feb 26 23:03:33.945347 2026] [:error] [pid 54991:tid 55024] [client 4.204.200.32:38115] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaBgxd4Zx-mJ8gbRB2gO1AAAAEQ"]
[Thu Feb 26 23:03:34.384572 2026] [:error] [pid 44444:tid 44464] [client 4.204.200.32:38188] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaBgxm2sMNmj-yekUk1pKAAAAg4"]
[Thu Feb 26 23:03:34.794819 2026] [:error] [pid 3883:tid 3890] [client 4.204.200.32:38147] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaBgxuA33x90V6yYHagArQAAAUQ"]
[Thu Feb 26 23:03:35.211268 2026] [:error] [pid 55051:tid 55058] [client 4.204.200.32:38207] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dom.php"] [unique_id "aaBgxwmK1w2kZvh5eLHh1gAAAIQ"]
[Thu Feb 26 23:03:35.625898 2026] [:error] [pid 20419:tid 20442] [client 4.204.200.32:38190] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dom.php"] [unique_id "aaBgx-3DVDvMfTYYUBVy8QAAAdQ"]
[Thu Feb 26 23:03:36.036995 2026] [:error] [pid 20419:tid 20445] [client 4.204.200.32:38179] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dom.php"] [unique_id "aaBgyO3DVDvMfTYYUBVy9AAAAdc"]
[Thu Feb 26 23:03:36.501128 2026] [:error] [pid 44444:tid 44466] [client 4.204.200.32:38195] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dom.php"] [unique_id "aaBgyG2sMNmj-yekUk1pPAAAAhA"]
[Thu Feb 26 23:03:36.914311 2026] [:error] [pid 44444:tid 44465] [client 4.204.200.32:38200] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaBgyG2sMNmj-yekUk1pPgAAAg8"]
[Thu Feb 26 23:03:37.336723 2026] [:error] [pid 44444:tid 44464] [client 4.204.200.32:38108] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaBgyW2sMNmj-yekUk1pQQAAAg4"]
[Thu Feb 26 23:03:37.747110 2026] [:error] [pid 55051:tid 55077] [client 4.204.200.32:38081] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaBgyQmK1w2kZvh5eLHh4AAAAJc"]
[Thu Feb 26 23:03:38.160886 2026] [:error] [pid 25311:tid 25322] [client 4.204.200.32:38163] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaBgytfdM__yZAgJFSvzSAAAAYg"]
[Thu Feb 26 23:03:38.632362 2026] [:error] [pid 25311:tid 25337] [client 4.204.200.32:38096] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaBgytfdM__yZAgJFSvzSQAAAZc"]
[Thu Feb 26 23:03:39.043674 2026] [:error] [pid 3883:tid 3886] [client 4.204.200.32:38204] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaBgy-A33x90V6yYHagAuAAAAUA"]
[Thu Feb 26 23:03:39.509298 2026] [:error] [pid 3883:tid 3891] [client 4.204.200.32:38100] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaBgy-A33x90V6yYHagAugAAAUU"]
[Thu Feb 26 23:03:39.944933 2026] [:error] [pid 44444:tid 44463] [client 4.204.200.32:38124] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaBgy22sMNmj-yekUk1pSgAAAg0"]
[Thu Feb 26 23:03:40.488333 2026] [:error] [pid 44444:tid 44462] [client 4.204.200.32:38176] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaBgzG2sMNmj-yekUk1pTQAAAgw"]
[Thu Feb 26 23:03:40.971544 2026] [:error] [pid 55051:tid 55055] [client 4.204.200.32:38201] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaBgzAmK1w2kZvh5eLHh6QAAAIE"]
[Thu Feb 26 23:03:41.543000 2026] [:error] [pid 44444:tid 44455] [client 4.204.200.32:38083] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaBgzW2sMNmj-yekUk1pUgAAAgU"]
[Thu Feb 26 23:03:41.968060 2026] [:error] [pid 44444:tid 44456] [client 4.204.200.32:38903] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaBgzW2sMNmj-yekUk1pWQAAAgY"]
[Thu Feb 26 23:03:42.389472 2026] [:error] [pid 44444:tid 44453] [client 4.204.200.32:38165] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaBgzm2sMNmj-yekUk1pXQAAAgM"]
[Thu Feb 26 23:03:42.826108 2026] [:error] [pid 44444:tid 44468] [client 4.204.200.32:38178] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaBgzm2sMNmj-yekUk1pZgAAAhI"]
[Thu Feb 26 23:03:43.239524 2026] [:error] [pid 44444:tid 44457] [client 4.204.200.32:38114] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaBgz22sMNmj-yekUk1pawAAAgc"]
[Thu Feb 26 23:03:43.689222 2026] [:error] [pid 54991:tid 55039] [client 4.204.200.32:38159] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaBgz94Zx-mJ8gbRB2gO6QAAAFM"]
[Thu Feb 26 23:03:44.134674 2026] [:error] [pid 44444:tid 44459] [client 4.204.200.32:38097] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/X57.php"] [unique_id "aaBg0G2sMNmj-yekUk1pcwAAAgk"]
[Thu Feb 26 23:03:44.584005 2026] [:error] [pid 55618:tid 55624] [client 4.204.200.32:38148] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/X57.php"] [unique_id "aaBg0B61Vrh12f_8oWQbUgAAAQM"]
[Thu Feb 26 23:03:45.002289 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:38186] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/X57.php"] [unique_id "aaBg0eA33x90V6yYHagAwgAAAUs"]
[Thu Feb 26 23:03:45.413654 2026] [:error] [pid 3883:tid 3907] [client 4.204.200.32:38174] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/X57.php"] [unique_id "aaBg0eA33x90V6yYHagAxQAAAVU"]
[Thu Feb 26 23:03:45.843068 2026] [:error] [pid 3883:tid 3892] [client 4.204.200.32:38203] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vx.php"] [unique_id "aaBg0eA33x90V6yYHagAyAAAAUY"]
[Thu Feb 26 23:03:46.257200 2026] [:error] [pid 20419:tid 20426] [client 4.204.200.32:38130] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vx.php"] [unique_id "aaBg0u3DVDvMfTYYUBVy-QAAAcQ"]
[Thu Feb 26 23:03:46.767692 2026] [:error] [pid 55051:tid 55075] [client 4.204.200.32:38171] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vx.php"] [unique_id "aaBg0gmK1w2kZvh5eLHh7gAAAJU"]
[Thu Feb 26 23:03:47.179225 2026] [:error] [pid 54991:tid 55029] [client 4.204.200.32:38121] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vx.php"] [unique_id "aaBg094Zx-mJ8gbRB2gO7gAAAEk"]
[Thu Feb 26 23:03:47.666751 2026] [:error] [pid 54991:tid 55024] [client 4.204.200.32:38099] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file59.php"] [unique_id "aaBg094Zx-mJ8gbRB2gO7wAAAEQ"]
[Thu Feb 26 23:03:48.086857 2026] [:error] [pid 55051:tid 55059] [client 4.204.200.32:38855] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file59.php"] [unique_id "aaBg1AmK1w2kZvh5eLHh7wAAAIU"]
[Thu Feb 26 23:03:48.497053 2026] [:error] [pid 54991:tid 55040] [client 4.204.200.32:38166] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file59.php"] [unique_id "aaBg1N4Zx-mJ8gbRB2gO8QAAAFQ"]
[Thu Feb 26 23:03:48.939308 2026] [:error] [pid 3883:tid 3910] [client 4.204.200.32:38189] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file59.php"] [unique_id "aaBg1OA33x90V6yYHagA0QAAAVg"]
[Thu Feb 26 23:03:49.348407 2026] [:error] [pid 44444:tid 44471] [client 4.204.200.32:38173] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBg1W2sMNmj-yekUk1phQAAAhU"]
[Thu Feb 26 23:03:49.759622 2026] [:error] [pid 55122:tid 55140] [client 4.204.200.32:38175] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBg1YLiR0OfjFxvcN87rwAAANA"]
[Thu Feb 26 23:03:50.181738 2026] [:error] [pid 3883:tid 3900] [client 4.204.200.32:38131] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBg1uA33x90V6yYHagA1QAAAU4"]
[Thu Feb 26 23:03:50.596197 2026] [:error] [pid 54990:tid 54993] [client 4.204.200.32:38177] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaBg1ntr2qmt_mBhH2w0SAAAAAA"]
[Thu Feb 26 23:03:51.009908 2026] [:error] [pid 20419:tid 20441] [client 4.204.200.32:38192] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shas.php"] [unique_id "aaBg1-3DVDvMfTYYUBVzAAAAAdM"]
[Thu Feb 26 23:03:51.418686 2026] [:error] [pid 54991:tid 55044] [client 4.204.200.32:38103] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shas.php"] [unique_id "aaBg194Zx-mJ8gbRB2gO9QAAAFg"]
[Thu Feb 26 23:03:51.830093 2026] [:error] [pid 54991:tid 55028] [client 4.204.200.32:38205] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shas.php"] [unique_id "aaBg194Zx-mJ8gbRB2gO-AAAAEg"]
[Thu Feb 26 23:03:52.242795 2026] [:error] [pid 55051:tid 55072] [client 4.204.200.32:38129] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shas.php"] [unique_id "aaBg2AmK1w2kZvh5eLHh9AAAAJI"]
[Thu Feb 26 23:03:52.654124 2026] [:error] [pid 55051:tid 55073] [client 4.204.200.32:38117] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aaBg2AmK1w2kZvh5eLHh-AAAAJM"]
[Thu Feb 26 23:03:53.062910 2026] [:error] [pid 55051:tid 55075] [client 4.204.200.32:38082] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aaBg2QmK1w2kZvh5eLHh-wAAAJU"]
[Thu Feb 26 23:03:53.476818 2026] [:error] [pid 55618:tid 55642] [client 4.204.200.32:38142] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aaBg2R61Vrh12f_8oWQbVwAAARU"]
[Thu Feb 26 23:03:53.888073 2026] [:error] [pid 25311:tid 25326] [client 4.204.200.32:38093] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "aaBg2dfdM__yZAgJFSvzUQAAAYw"]
[Thu Feb 26 23:03:54.297910 2026] [:error] [pid 55618:tid 55627] [client 4.204.200.32:38162] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xda.php"] [unique_id "aaBg2h61Vrh12f_8oWQbWAAAAQY"]
[Thu Feb 26 23:03:54.719841 2026] [:error] [pid 54991:tid 55039] [client 4.204.200.32:38889] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xda.php"] [unique_id "aaBg2t4Zx-mJ8gbRB2gO_QAAAFM"]
[Thu Feb 26 23:03:55.136291 2026] [:error] [pid 25311:tid 25334] [client 4.204.200.32:38860] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xda.php"] [unique_id "aaBg29fdM__yZAgJFSvzVQAAAZQ"]
[Thu Feb 26 23:03:55.547371 2026] [:error] [pid 55051:tid 55070] [client 4.204.200.32:38191] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xda.php"] [unique_id "aaBg2wmK1w2kZvh5eLHiDQAAAJA"]
[Thu Feb 26 23:03:55.957351 2026] [:error] [pid 55051:tid 55072] [client 4.204.200.32:38095] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/er.php"] [unique_id "aaBg2wmK1w2kZvh5eLHiDwAAAJI"]
[Thu Feb 26 23:03:56.366974 2026] [:error] [pid 3883:tid 3904] [client 4.204.200.32:38153] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/er.php"] [unique_id "aaBg3OA33x90V6yYHagA2QAAAVI"]
[Thu Feb 26 23:03:56.782969 2026] [:error] [pid 3883:tid 3910] [client 4.204.200.32:38857] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/er.php"] [unique_id "aaBg3OA33x90V6yYHagA2wAAAVg"]
[Thu Feb 26 23:03:57.192540 2026] [:error] [pid 55051:tid 55066] [client 4.204.200.32:38141] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/er.php"] [unique_id "aaBg3QmK1w2kZvh5eLHiEwAAAIw"]
[Thu Feb 26 23:03:57.604902 2026] [:error] [pid 44444:tid 44472] [client 4.204.200.32:38854] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fault.php"] [unique_id "aaBg3W2sMNmj-yekUk1pjAAAAhY"]
[Thu Feb 26 23:03:58.016170 2026] [:error] [pid 54991:tid 55027] [client 4.204.200.32:38143] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fault.php"] [unique_id "aaBg3t4Zx-mJ8gbRB2gPBQAAAEc"]
[Thu Feb 26 23:03:58.446078 2026] [:error] [pid 44444:tid 44452] [client 4.204.200.32:38194] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fault.php"] [unique_id "aaBg3m2sMNmj-yekUk1pjQAAAgI"]
[Thu Feb 26 23:03:58.860044 2026] [:error] [pid 44444:tid 44459] [client 4.204.200.32:38168] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fault.php"] [unique_id "aaBg3m2sMNmj-yekUk1pjwAAAgk"]
[Thu Feb 26 23:03:59.272624 2026] [:error] [pid 55122:tid 55135] [client 4.204.200.32:38156] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aaBg34LiR0OfjFxvcN87sQAAAMs"]
[Thu Feb 26 23:03:59.684272 2026] [:error] [pid 3883:tid 3888] [client 4.204.200.32:38849] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aaBg3-A33x90V6yYHagA4AAAAUI"]
[Thu Feb 26 23:04:00.096229 2026] [:error] [pid 20419:tid 20440] [client 4.204.200.32:38202] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aaBg4O3DVDvMfTYYUBVzCwAAAdI"]
[Thu Feb 26 23:04:00.510405 2026] [:error] [pid 3883:tid 3903] [client 4.204.200.32:38104] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aaBg4OA33x90V6yYHagA5QAAAVE"]
[Thu Feb 26 23:04:00.931256 2026] [:error] [pid 55051:tid 55061] [client 4.204.200.32:38180] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aaBg4AmK1w2kZvh5eLHiHAAAAIc"]
[Thu Feb 26 23:04:01.345668 2026] [:error] [pid 55051:tid 55054] [client 4.204.200.32:38867] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aaBg4QmK1w2kZvh5eLHiIgAAAIA"]
[Thu Feb 26 23:04:01.757987 2026] [:error] [pid 55051:tid 55069] [client 4.204.200.32:38110] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aaBg4QmK1w2kZvh5eLHiJAAAAI8"]
[Thu Feb 26 23:04:02.169124 2026] [:error] [pid 25311:tid 25321] [client 4.204.200.32:38794] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aaBg4tfdM__yZAgJFSvzWAAAAYc"]
[Thu Feb 26 23:04:02.583488 2026] [:error] [pid 55122:tid 55131] [client 4.204.200.32:38182] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaBg4oLiR0OfjFxvcN87tQAAAMc"]
[Thu Feb 26 23:04:02.997940 2026] [:error] [pid 54990:tid 54997] [client 4.204.200.32:38085] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaBg4ntr2qmt_mBhH2w0UAAAAAQ"]
[Thu Feb 26 23:04:03.408618 2026] [:error] [pid 20419:tid 20443] [client 4.204.200.32:38875] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaBg4-3DVDvMfTYYUBVzFAAAAdU"]
[Thu Feb 26 23:04:03.819882 2026] [:error] [pid 55051:tid 55059] [client 4.204.200.32:38138] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaBg4wmK1w2kZvh5eLHiKQAAAIU"]
[Thu Feb 26 23:04:04.233919 2026] [:error] [pid 54990:tid 55015] [client 4.204.200.32:38884] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaBg5Htr2qmt_mBhH2w0UgAAABY"]
[Thu Feb 26 23:04:04.643292 2026] [:error] [pid 55051:tid 55071] [client 4.204.200.32:38181] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaBg5AmK1w2kZvh5eLHiKwAAAJE"]
[Thu Feb 26 23:04:05.060736 2026] [:error] [pid 44444:tid 44469] [client 4.204.200.32:38853] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaBg5W2sMNmj-yekUk1pkgAAAhM"]
[Thu Feb 26 23:04:05.472138 2026] [:error] [pid 44444:tid 44471] [client 4.204.200.32:38848] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaBg5W2sMNmj-yekUk1plgAAAhU"]
[Thu Feb 26 23:04:05.880609 2026] [:error] [pid 25311:tid 25322] [client 4.204.200.32:38092] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaBg5dfdM__yZAgJFSvzWQAAAYg"]
[Thu Feb 26 23:04:06.356214 2026] [:error] [pid 44444:tid 44453] [client 4.204.200.32:38185] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaBg5m2sMNmj-yekUk1pmgAAAgM"]
[Thu Feb 26 23:04:06.766867 2026] [:error] [pid 3883:tid 3909] [client 4.204.200.32:38198] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaBg5uA33x90V6yYHagA6QAAAVc"]
[Thu Feb 26 23:04:07.183285 2026] [:error] [pid 3883:tid 3907] [client 4.204.200.32:38170] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaBg5-A33x90V6yYHagA6gAAAVU"]
[Thu Feb 26 23:04:07.593218 2026] [:error] [pid 3883:tid 3897] [client 4.204.200.32:38105] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nw.php"] [unique_id "aaBg5-A33x90V6yYHagA7wAAAUs"]
[Thu Feb 26 23:04:08.000938 2026] [:error] [pid 44444:tid 44456] [client 4.204.200.32:38850] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nw.php"] [unique_id "aaBg522sMNmj-yekUk1pnAAAAgY"]
[Thu Feb 26 23:04:08.412776 2026] [:error] [pid 25311:tid 25318] [client 4.204.200.32:38139] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nw.php"] [unique_id "aaBg6NfdM__yZAgJFSvzXAAAAYQ"]
[Thu Feb 26 23:04:08.822779 2026] [:error] [pid 44444:tid 44466] [client 4.204.200.32:38852] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nw.php"] [unique_id "aaBg6G2sMNmj-yekUk1poAAAAhA"]
[Thu Feb 26 23:04:09.235819 2026] [:error] [pid 20419:tid 20426] [client 4.204.200.32:38155] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/god.php"] [unique_id "aaBg6e3DVDvMfTYYUBVzLQAAAcQ"]
[Thu Feb 26 23:04:09.643697 2026] [:error] [pid 44444:tid 44451] [client 4.204.200.32:38869] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/god.php"] [unique_id "aaBg6W2sMNmj-yekUk1ppgAAAgE"]
[Thu Feb 26 23:04:10.055447 2026] [:error] [pid 44444:tid 44458] [client 4.204.200.32:38888] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/god.php"] [unique_id "aaBg6m2sMNmj-yekUk1pqAAAAgg"]
[Thu Feb 26 23:04:10.477993 2026] [:error] [pid 20419:tid 20425] [client 4.204.200.32:38183] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/god.php"] [unique_id "aaBg6u3DVDvMfTYYUBVzMwAAAcM"]
[Thu Feb 26 23:04:10.898724 2026] [:error] [pid 44444:tid 44454] [client 4.204.200.32:38863] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aaBg6m2sMNmj-yekUk1prQAAAgQ"]
[Thu Feb 26 23:04:11.313311 2026] [:error] [pid 44444:tid 44472] [client 4.204.200.32:38172] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aaBg622sMNmj-yekUk1prwAAAhY"]
[Thu Feb 26 23:04:11.774917 2026] [:error] [pid 44444:tid 44466] [client 4.204.200.32:38876] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aaBg622sMNmj-yekUk1psQAAAhA"]
[Thu Feb 26 23:04:12.191608 2026] [:error] [pid 3883:tid 3909] [client 4.204.200.32:38199] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aaBg7OA33x90V6yYHagA-gAAAVc"]
[Thu Feb 26 23:04:12.619810 2026] [:error] [pid 44444:tid 44469] [client 4.204.200.32:38113] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aaBg7G2sMNmj-yekUk1pswAAAhM"]
[Thu Feb 26 23:04:13.040681 2026] [:error] [pid 20419:tid 20427] [client 4.204.200.32:38098] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aaBg7e3DVDvMfTYYUBVzOQAAAcU"]
[Thu Feb 26 23:04:13.455710 2026] [:error] [pid 55051:tid 55065] [client 4.204.200.32:38906] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aaBg7QmK1w2kZvh5eLHiMQAAAIs"]
[Thu Feb 26 23:04:13.877462 2026] [:error] [pid 55122:tid 55142] [client 4.204.200.32:38101] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aaBg7YLiR0OfjFxvcN87ugAAANI"]
[Thu Feb 26 23:04:14.306214 2026] [:error] [pid 25311:tid 25335] [client 4.204.200.32:38080] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/un.php"] [unique_id "aaBg7tfdM__yZAgJFSvzXQAAAZU"]
[Thu Feb 26 23:04:14.737982 2026] [:error] [pid 55122:tid 55138] [client 4.204.200.32:38874] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/un.php"] [unique_id "aaBg7oLiR0OfjFxvcN87vAAAAM4"]
[Thu Feb 26 23:04:15.157507 2026] [:error] [pid 44444:tid 44471] [client 4.204.200.32:38858] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/un.php"] [unique_id "aaBg722sMNmj-yekUk1puwAAAhU"]
[Thu Feb 26 23:04:15.588763 2026] [:error] [pid 44444:tid 44472] [client 4.204.200.32:38157] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/un.php"] [unique_id "aaBg722sMNmj-yekUk1pvwAAAhY"]
[Thu Feb 26 23:04:16.013438 2026] [:error] [pid 44444:tid 44463] [client 4.204.200.32:38900] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aaBg8G2sMNmj-yekUk1pwwAAAg0"]
[Thu Feb 26 23:04:16.443368 2026] [:error] [pid 20419:tid 20434] [client 4.204.200.32:38904] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aaBg8O3DVDvMfTYYUBVzPQAAAcw"]
[Thu Feb 26 23:04:16.857334 2026] [:error] [pid 55051:tid 55074] [client 4.204.200.32:38137] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aaBg8AmK1w2kZvh5eLHiMgAAAJQ"]
[Thu Feb 26 23:04:17.273624 2026] [:error] [pid 55051:tid 55077] [client 4.204.200.32:38856] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aaBg8QmK1w2kZvh5eLHiNAAAAJc"]
[Thu Feb 26 23:04:17.706898 2026] [:error] [pid 44444:tid 44464] [client 4.204.200.32:38862] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms.php"] [unique_id "aaBg8W2sMNmj-yekUk1pzwAAAg4"]
[Thu Feb 26 23:04:18.135255 2026] [:error] [pid 55051:tid 55072] [client 4.204.200.32:38161] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms.php"] [unique_id "aaBg8gmK1w2kZvh5eLHiOAAAAJI"]
[Thu Feb 26 23:04:18.546684 2026] [:error] [pid 44444:tid 44450] [client 4.204.200.32:38145] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms.php"] [unique_id "aaBg8m2sMNmj-yekUk1p0wAAAgA"]
[Thu Feb 26 23:04:18.958009 2026] [:error] [pid 55051:tid 55054] [client 4.204.200.32:38084] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms.php"] [unique_id "aaBg8gmK1w2kZvh5eLHiOgAAAIA"]
[Thu Feb 26 23:04:19.372363 2026] [:error] [pid 44444:tid 44467] [client 4.204.200.32:38841] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/login8.php"] [unique_id "aaBg822sMNmj-yekUk1p1wAAAhE"]
[Thu Feb 26 23:04:19.809383 2026] [:error] [pid 44444:tid 44457] [client 4.204.200.32:38106] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/login8.php"] [unique_id "aaBg822sMNmj-yekUk1p2QAAAgc"]
[Thu Feb 26 23:04:20.226707 2026] [:error] [pid 54991:tid 55043] [client 4.204.200.32:38111] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/login8.php"] [unique_id "aaBg9N4Zx-mJ8gbRB2gPDwAAAFc"]
[Thu Feb 26 23:04:20.647746 2026] [:error] [pid 54991:tid 55031] [client 4.204.200.32:38196] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/login8.php"] [unique_id "aaBg9N4Zx-mJ8gbRB2gPEAAAAEs"]
[Thu Feb 26 23:04:21.060605 2026] [:error] [pid 44444:tid 44454] [client 4.204.200.32:38791] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaBg9W2sMNmj-yekUk1p3AAAAgQ"]
[Thu Feb 26 23:04:21.500862 2026] [:error] [pid 44444:tid 44472] [client 4.204.200.32:38865] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaBg9W2sMNmj-yekUk1p3gAAAhY"]
[Thu Feb 26 23:04:21.925537 2026] [:error] [pid 55051:tid 55058] [client 4.204.200.32:38184] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaBg9QmK1w2kZvh5eLHiPgAAAIQ"]
[Thu Feb 26 23:04:22.342058 2026] [:error] [pid 44444:tid 44460] [client 4.204.200.32:38116] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaBg9m2sMNmj-yekUk1p4QAAAgo"]
[Thu Feb 26 23:04:22.763375 2026] [:error] [pid 54991:tid 55027] [client 4.204.200.32:38123] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aaBg9t4Zx-mJ8gbRB2gPFAAAAEc"]
[Thu Feb 26 23:04:23.187811 2026] [:error] [pid 55051:tid 55056] [client 4.204.200.32:38125] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aaBg9wmK1w2kZvh5eLHiQgAAAII"]
[Thu Feb 26 23:04:23.604544 2026] [:error] [pid 55051:tid 55074] [client 4.204.200.32:38112] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aaBg9wmK1w2kZvh5eLHiQwAAAJQ"]
[Thu Feb 26 23:04:24.057430 2026] [:error] [pid 44444:tid 44463] [client 4.204.200.32:38786] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aaBg-G2sMNmj-yekUk1p5wAAAg0"]
[Thu Feb 26 23:04:24.472023 2026] [:error] [pid 55051:tid 55070] [client 4.204.200.32:38107] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lul.php"] [unique_id "aaBg-AmK1w2kZvh5eLHiRgAAAJA"]
[Thu Feb 26 23:04:24.887325 2026] [:error] [pid 25311:tid 25333] [client 4.204.200.32:38128] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lul.php"] [unique_id "aaBg-NfdM__yZAgJFSvzXwAAAZM"]
[Thu Feb 26 23:04:25.306212 2026] [:error] [pid 54991:tid 55034] [client 4.204.200.32:38132] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lul.php"] [unique_id "aaBg-d4Zx-mJ8gbRB2gPGgAAAE4"]
[Thu Feb 26 23:04:25.748065 2026] [:error] [pid 25311:tid 25336] [client 4.204.200.32:38787] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lul.php"] [unique_id "aaBg-dfdM__yZAgJFSvzYAAAAZY"]
[Thu Feb 26 23:04:26.160502 2026] [:error] [pid 44444:tid 44468] [client 4.204.200.32:38167] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0.php"] [unique_id "aaBg-m2sMNmj-yekUk1p7wAAAhI"]
[Thu Feb 26 23:04:26.573900 2026] [:error] [pid 44444:tid 44467] [client 4.204.200.32:38133] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0.php"] [unique_id "aaBg-m2sMNmj-yekUk1p8gAAAhE"]
[Thu Feb 26 23:04:27.070973 2026] [:error] [pid 44444:tid 44453] [client 4.204.200.32:38818] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0.php"] [unique_id "aaBg-22sMNmj-yekUk1p9QAAAgM"]
[Thu Feb 26 23:04:27.485093 2026] [:error] [pid 44444:tid 44470] [client 4.204.200.32:38891] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0.php"] [unique_id "aaBg-22sMNmj-yekUk1p-QAAAhQ"]
[Thu Feb 26 23:04:27.916580 2026] [:error] [pid 20419:tid 20439] [client 4.204.200.32:38864] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaBg--3DVDvMfTYYUBVzQgAAAdE"]
[Thu Feb 26 23:04:28.356456 2026] [:error] [pid 55122:tid 55139] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Feb 26 23:04:28.572254 2026] [:error] [pid 55122:tid 55134] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/ya.php
[Thu Feb 26 23:04:28.807830 2026] [:error] [pid 55122:tid 55131] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Thu Feb 26 23:04:29.015159 2026] [:error] [pid 55122:tid 55129] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Feb 26 23:04:29.221578 2026] [:error] [pid 55122:tid 55137] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Thu Feb 26 23:04:29.431040 2026] [:error] [pid 55122:tid 55147] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/a1vx.php
[Thu Feb 26 23:04:29.642614 2026] [:error] [pid 55122:tid 55141] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Thu Feb 26 23:04:29.862231 2026] [:error] [pid 55122:tid 55130] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu Feb 26 23:04:30.069718 2026] [:error] [pid 55122:tid 55136] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Thu Feb 26 23:04:30.279419 2026] [:error] [pid 55122:tid 55142] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Feb 26 23:04:30.486444 2026] [:error] [pid 55122:tid 55128] [client 4.204.200.32:38797] File does not exist: /usr/local/apache/htdocs/suspended-page/fot.php
[Thu Feb 26 23:04:30.693603 2026] [:error] [pid 55122:tid 55132] [client 4.204.200.32:38797] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaBg_oLiR0OfjFxvcN87zQAAAMg"]
[Thu Feb 26 23:04:31.152613 2026] [:error] [pid 25311:tid 25330] [client 4.204.200.32:38881] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaBg_9fdM__yZAgJFSvzYgAAAZA"]
[Thu Feb 26 23:04:31.592030 2026] [:error] [pid 44444:tid 44454] [client 4.204.200.32:38811] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaBg_22sMNmj-yekUk1qFQAAAgQ"]
[Thu Feb 26 23:04:32.026888 2026] [:error] [pid 25311:tid 25327] [client 4.204.200.32:38197] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaBhANfdM__yZAgJFSvzYwAAAY0"]
[Thu Feb 26 23:04:32.454343 2026] [:error] [pid 25311:tid 25324] [client 4.204.200.32:38868] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaBhANfdM__yZAgJFSvzZAAAAYo"]
[Thu Feb 26 23:04:32.915273 2026] [:error] [pid 44444:tid 44465] [client 4.204.200.32:38088] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaBhAG2sMNmj-yekUk1qGwAAAg8"]
[Thu Feb 26 23:04:33.357349 2026] [:error] [pid 44444:tid 44464] [client 4.204.200.32:38892] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaBhAW2sMNmj-yekUk1qHAAAAg4"]
[Thu Feb 26 23:04:33.874900 2026] [:error] [pid 55051:tid 55078] [client 4.204.200.32:38878] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaBhAQmK1w2kZvh5eLHiVQAAAJg"]
[Thu Feb 26 23:04:34.335549 2026] [:error] [pid 44444:tid 44450] [client 4.204.200.32:38832] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/erty.php"] [unique_id "aaBhAm2sMNmj-yekUk1qIgAAAgA"]
[Thu Feb 26 23:04:34.773815 2026] [:error] [pid 44444:tid 44466] [client 4.204.200.32:38134] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/erty.php"] [unique_id "aaBhAm2sMNmj-yekUk1qJwAAAhA"]
[Thu Feb 26 23:04:35.345430 2026] [:error] [pid 44444:tid 44467] [client 4.204.200.32:38909] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/erty.php"] [unique_id "aaBhA22sMNmj-yekUk1qKgAAAhE"]
[Thu Feb 26 23:04:35.791711 2026] [:error] [pid 25311:tid 25328] [client 4.204.200.32:38803] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/erty.php"] [unique_id "aaBhA9fdM__yZAgJFSvzbAAAAY4"]
[Thu Feb 26 23:04:36.258926 2026] [:error] [pid 54990:tid 54993] [client 4.204.200.32:38897] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaBhBHtr2qmt_mBhH2w0VgAAAAA"]
[Thu Feb 26 23:04:36.683981 2026] [:error] [pid 44444:tid 44456] [client 4.204.200.32:38840] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaBhBG2sMNmj-yekUk1qNAAAAgY"]
[Thu Feb 26 23:04:37.107164 2026] [:error] [pid 55618:tid 55644] [client 4.204.200.32:38859] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaBhBR61Vrh12f_8oWQbagAAARc"]
[Thu Feb 26 23:04:37.567637 2026] [:error] [pid 55051:tid 55066] [client 4.204.200.32:38731] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaBhBQmK1w2kZvh5eLHiXgAAAIw"]
[Thu Feb 26 23:04:37.991513 2026] [:error] [pid 54991:tid 55032] [client 4.204.200.32:38817] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaBhBd4Zx-mJ8gbRB2gPJQAAAEw"]
[Thu Feb 26 23:04:38.483595 2026] [:error] [pid 55051:tid 55061] [client 4.204.200.32:38140] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaBhBgmK1w2kZvh5eLHiYgAAAIc"]
[Thu Feb 26 23:04:38.916204 2026] [:error] [pid 54991:tid 55036] [client 4.204.200.32:38152] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaBhBt4Zx-mJ8gbRB2gPJwAAAFA"]
[Thu Feb 26 23:04:39.385684 2026] [:error] [pid 44444:tid 44463] [client 4.204.200.32:38135] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaBhB22sMNmj-yekUk1qPAAAAg0"]
[Thu Feb 26 23:27:20.538491 2026] [:error] [pid 44444:tid 44469] [client 43.130.15.147:57308] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaBmWG2sMNmj-yekUk16egAAAhM"]
[Fri Feb 27 01:46:42.604869 2026] [:error] [pid 18831:tid 18929] [client 170.106.152.218:38940] [client 170.106.152.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaCHAv5KHTHUIuWRG2bNvAAAAFA"]
[Fri Feb 27 04:03:09.514027 2026] [:error] [pid 37895:tid 37958] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Fri Feb 27 04:03:09.740539 2026] [:error] [pid 37895:tid 37974] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/work.php
[Fri Feb 27 04:03:09.967173 2026] [:error] [pid 37895:tid 37971] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/C.php
[Fri Feb 27 04:03:10.197961 2026] [:error] [pid 37895:tid 37956] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/ze.php
[Fri Feb 27 04:03:10.424338 2026] [:error] [pid 37895:tid 37951] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri Feb 27 04:03:10.655871 2026] [:error] [pid 37895:tid 37965] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Fri Feb 27 04:03:10.882318 2026] [:error] [pid 37895:tid 37953] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/pouhg.php
[Fri Feb 27 04:03:11.109059 2026] [:error] [pid 37895:tid 37957] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/vgtyu.php
[Fri Feb 27 04:03:11.336750 2026] [:error] [pid 37895:tid 37954] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Fri Feb 27 04:03:11.564375 2026] [:error] [pid 37895:tid 37962] [client 172.190.142.176:10257] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Fri Feb 27 04:03:11.789995 2026] [:error] [pid 37895:tid 37956] [client 172.190.142.176:10257] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaCm_7x7AKEYlDsU2_12cQAAAIU"]
[Fri Feb 27 04:03:12.232469 2026] [:error] [pid 37894:tid 37946] [client 172.190.142.176:49586] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaCnAArG3d4cnTcm0zwdLAAAAFY"]
[Fri Feb 27 04:03:12.668946 2026] [:error] [pid 37895:tid 37951] [client 172.190.142.176:10294] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaCnALx7AKEYlDsU2_12dAAAAIA"]
[Fri Feb 27 04:03:13.092269 2026] [:error] [pid 37895:tid 37955] [client 172.190.142.176:16184] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaCnAbx7AKEYlDsU2_12eAAAAIQ"]
[Fri Feb 27 04:03:13.525964 2026] [:error] [pid 37984:tid 38002] [client 172.190.142.176:10267] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaCnAbvzllUfvW6W6vGGUgAAANA"]
[Fri Feb 27 04:03:13.955153 2026] [:error] [pid 37984:tid 38010] [client 172.190.142.176:17669] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaCnAbvzllUfvW6W6vGGVwAAANg"]
[Fri Feb 27 04:03:14.398479 2026] [:error] [pid 37984:tid 38003] [client 172.190.142.176:16150] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaCnArvzllUfvW6W6vGGWQAAANE"]
[Fri Feb 27 04:03:14.879266 2026] [:error] [pid 37895:tid 37951] [client 172.190.142.176:16135] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaCnArx7AKEYlDsU2_12ggAAAIA"]
[Fri Feb 27 04:03:15.337692 2026] [:error] [pid 37895:tid 37970] [client 172.190.142.176:53930] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaCnA7x7AKEYlDsU2_12hgAAAJM"]
[Fri Feb 27 04:03:15.768053 2026] [:error] [pid 37895:tid 37973] [client 172.190.142.176:12523] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaCnA7x7AKEYlDsU2_12iQAAAJY"]
[Fri Feb 27 04:03:16.195996 2026] [:error] [pid 37984:tid 37992] [client 172.190.142.176:63702] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaCnBLvzllUfvW6W6vGGXwAAAMY"]
[Fri Feb 27 04:03:16.644656 2026] [:error] [pid 37895:tid 37956] [client 172.190.142.176:49571] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "aaCnBLx7AKEYlDsU2_12kAAAAIU"]
[Fri Feb 27 04:03:17.086136 2026] [:error] [pid 37895:tid 37951] [client 172.190.142.176:6360] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaCnBbx7AKEYlDsU2_12kgAAAIA"]
[Fri Feb 27 04:03:17.494908 2026] [:error] [pid 37895:tid 37963] [client 172.190.142.176:63687] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaCnBbx7AKEYlDsU2_12lwAAAIw"]
[Fri Feb 27 04:03:17.953004 2026] [:error] [pid 37895:tid 37971] [client 172.190.142.176:12535] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaCnBbx7AKEYlDsU2_12mQAAAJQ"]
[Fri Feb 27 04:03:18.398183 2026] [:error] [pid 37984:tid 37993] [client 172.190.142.176:52425] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seetox.php"] [unique_id "aaCnBrvzllUfvW6W6vGGZwAAAMc"]
[Fri Feb 27 04:03:18.889995 2026] [:error] [pid 37893:tid 37921] [client 172.190.142.176:63706] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaCnBrCiThGvciFYy77inQAAABg"]
[Fri Feb 27 04:03:19.332816 2026] [:error] [pid 37895:tid 37969] [client 172.190.142.176:17697] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaCnB7x7AKEYlDsU2_12ogAAAJI"]
[Fri Feb 27 04:03:19.765371 2026] [:error] [pid 37895:tid 37963] [client 172.190.142.176:22076] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaCnB7x7AKEYlDsU2_12owAAAIw"]
[Fri Feb 27 04:03:20.216248 2026] [:error] [pid 37895:tid 37968] [client 172.190.142.176:65392] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaCnCLx7AKEYlDsU2_12pwAAAJE"]
[Fri Feb 27 04:03:20.668008 2026] [:error] [pid 37895:tid 37953] [client 172.190.142.176:6363] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaCnCLx7AKEYlDsU2_12qwAAAII"]
[Fri Feb 27 04:03:21.103225 2026] [:error] [pid 37895:tid 37963] [client 172.190.142.176:10282] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaCnCbx7AKEYlDsU2_12sAAAAIw"]
[Fri Feb 27 04:03:21.537869 2026] [:error] [pid 37894:tid 37947] [client 172.190.142.176:52462] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaCnCQrG3d4cnTcm0zwdLwAAAFc"]
[Fri Feb 27 04:03:21.959186 2026] [:error] [pid 37894:tid 37937] [client 172.190.142.176:65349] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaCnCQrG3d4cnTcm0zwdMQAAAE0"]
[Fri Feb 27 04:03:22.406147 2026] [:error] [pid 37984:tid 37988] [client 172.190.142.176:12739] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaCnCrvzllUfvW6W6vGGcAAAAMI"]
[Fri Feb 27 04:03:22.838493 2026] [:error] [pid 37984:tid 38003] [client 172.190.142.176:22029] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaCnCrvzllUfvW6W6vGGcQAAANE"]
[Fri Feb 27 04:03:23.278853 2026] [:error] [pid 37895:tid 37970] [client 172.190.142.176:17706] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaCnC7x7AKEYlDsU2_12uAAAAJM"]
[Fri Feb 27 04:03:23.703635 2026] [:error] [pid 37895:tid 37974] [client 172.190.142.176:17675] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samiri.php"] [unique_id "aaCnC7x7AKEYlDsU2_12vAAAAJc"]
[Fri Feb 27 04:03:24.136196 2026] [:error] [pid 37893:tid 37910] [client 172.190.142.176:12494] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaCnDLCiThGvciFYy77iowAAAA0"]
[Fri Feb 27 04:03:24.556196 2026] [:error] [pid 37893:tid 37916] [client 172.190.142.176:63712] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaCnDLCiThGvciFYy77ipgAAABM"]
[Fri Feb 27 04:03:24.995208 2026] [:error] [pid 37984:tid 37995] [client 172.190.142.176:18541] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaCnDLvzllUfvW6W6vGGfgAAAMk"]
[Fri Feb 27 04:03:25.438527 2026] [:error] [pid 37895:tid 37952] [client 172.190.142.176:12749] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaCnDbx7AKEYlDsU2_12vwAAAIE"]
[Fri Feb 27 04:03:25.900575 2026] [:error] [pid 37893:tid 37900] [client 172.190.142.176:23041] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaCnDbCiThGvciFYy77iqAAAAAM"]
[Fri Feb 27 04:03:26.348705 2026] [:error] [pid 37984:tid 37992] [client 172.190.142.176:17690] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaCnDrvzllUfvW6W6vGGhAAAAMY"]
[Fri Feb 27 04:03:26.797282 2026] [:error] [pid 37893:tid 37920] [client 172.190.142.176:22073] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaCnDrCiThGvciFYy77iqQAAABc"]
[Fri Feb 27 04:03:27.268059 2026] [:error] [pid 37984:tid 38007] [client 172.190.142.176:12747] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xoot.php"] [unique_id "aaCnD7vzllUfvW6W6vGGigAAANU"]
[Fri Feb 27 04:03:27.729993 2026] [:error] [pid 37984:tid 38008] [client 172.190.142.176:33529] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaCnD7vzllUfvW6W6vGGiwAAANY"]
[Fri Feb 27 04:03:28.224429 2026] [:error] [pid 37984:tid 37988] [client 172.190.142.176:23093] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaCnELvzllUfvW6W6vGGjwAAAMI"]
[Fri Feb 27 04:03:28.659846 2026] [:error] [pid 37984:tid 38003] [client 172.190.142.176:18529] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaCnELvzllUfvW6W6vGGkwAAANE"]
[Fri Feb 27 04:03:29.089445 2026] [:error] [pid 37984:tid 37987] [client 172.190.142.176:23053] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaCnEbvzllUfvW6W6vGGlgAAAME"]
[Fri Feb 27 04:03:29.526487 2026] [:error] [pid 37893:tid 37899] [client 172.190.142.176:12207] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aaCnEbCiThGvciFYy77irgAAAAI"]
[Fri Feb 27 04:03:29.952357 2026] [:error] [pid 37893:tid 37918] [client 172.190.142.176:6341] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aaCnEbCiThGvciFYy77irwAAABU"]
[Fri Feb 27 04:03:30.409289 2026] [:error] [pid 37895:tid 37951] [client 172.190.142.176:18549] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aaCnErx7AKEYlDsU2_12yQAAAIA"]
[Fri Feb 27 04:03:30.855454 2026] [:error] [pid 37895:tid 37954] [client 172.190.142.176:12212] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aaCnErx7AKEYlDsU2_12ywAAAIM"]
[Fri Feb 27 04:03:31.305308 2026] [:error] [pid 37893:tid 37917] [client 172.190.142.176:12198] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaCnE7CiThGvciFYy77iswAAABQ"]
[Fri Feb 27 04:03:31.803005 2026] [:error] [pid 37893:tid 37915] [client 172.190.142.176:18496] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaCnE7CiThGvciFYy77itwAAABI"]
[Fri Feb 27 04:03:32.254532 2026] [:error] [pid 37893:tid 37914] [client 172.190.142.176:6338] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaCnFLCiThGvciFYy77iuAAAABE"]
[Fri Feb 27 04:03:32.698148 2026] [:error] [pid 37893:tid 37907] [client 172.190.142.176:17369] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaCnFLCiThGvciFYy77iuwAAAAo"]
[Fri Feb 27 04:03:33.144342 2026] [:error] [pid 37893:tid 37913] [client 172.190.142.176:33491] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCnFbCiThGvciFYy77ivQAAABA"]
[Fri Feb 27 04:03:33.578063 2026] [:error] [pid 37895:tid 37965] [client 172.190.142.176:5961] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCnFbx7AKEYlDsU2_120AAAAI4"]
[Fri Feb 27 04:03:34.000733 2026] [:error] [pid 37894:tid 37939] [client 172.190.142.176:17396] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCnFQrG3d4cnTcm0zwdPQAAAE8"]
[Fri Feb 27 04:03:34.418521 2026] [:error] [pid 37895:tid 37959] [client 172.190.142.176:12759] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaCnFrx7AKEYlDsU2_121AAAAIg"]
[Fri Feb 27 04:03:34.857257 2026] [:error] [pid 37895:tid 37963] [client 172.190.142.176:23087] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shas.php"] [unique_id "aaCnFrx7AKEYlDsU2_121wAAAIw"]
[Fri Feb 27 04:03:35.333525 2026] [:error] [pid 37895:tid 37968] [client 172.190.142.176:5983] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shas.php"] [unique_id "aaCnF7x7AKEYlDsU2_122QAAAJE"]
[Fri Feb 27 04:03:35.769304 2026] [:error] [pid 37984:tid 37993] [client 172.190.142.176:12744] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shas.php"] [unique_id "aaCnF7vzllUfvW6W6vGGnwAAAMc"]
[Fri Feb 27 04:03:36.187810 2026] [:error] [pid 37895:tid 37962] [client 172.190.142.176:33493] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shas.php"] [unique_id "aaCnGLx7AKEYlDsU2_123QAAAIs"]
[Fri Feb 27 04:03:36.599639 2026] [:error] [pid 37895:tid 37951] [client 172.190.142.176:5957] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaCnGLx7AKEYlDsU2_124QAAAIA"]
[Fri Feb 27 04:03:37.016010 2026] [:error] [pid 37984:tid 37996] [client 172.190.142.176:12784] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaCnGbvzllUfvW6W6vGGogAAAMo"]
[Fri Feb 27 04:03:37.436149 2026] [:error] [pid 37984:tid 38004] [client 172.190.142.176:5988] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaCnGbvzllUfvW6W6vGGpAAAANI"]
[Fri Feb 27 04:03:37.883019 2026] [:error] [pid 37895:tid 37956] [client 172.190.142.176:33475] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaCnGbx7AKEYlDsU2_125gAAAIU"]
[Fri Feb 27 04:03:38.293676 2026] [:error] [pid 37984:tid 38008] [client 172.190.142.176:18522] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaCnGrvzllUfvW6W6vGGqwAAANY"]
[Fri Feb 27 04:03:38.731641 2026] [:error] [pid 37984:tid 38009] [client 172.190.142.176:34718] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaCnGrvzllUfvW6W6vGGrQAAANc"]
[Fri Feb 27 04:03:39.176081 2026] [:error] [pid 37984:tid 37986] [client 172.190.142.176:23071] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaCnG7vzllUfvW6W6vGGsAAAAMA"]
[Fri Feb 27 04:03:39.609536 2026] [:error] [pid 37984:tid 38006] [client 172.190.142.176:34688] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaCnG7vzllUfvW6W6vGGswAAANQ"]
[Fri Feb 27 04:03:40.033302 2026] [:error] [pid 37984:tid 38001] [client 172.190.142.176:17359] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aaCnHLvzllUfvW6W6vGGtwAAAM8"]
[Fri Feb 27 04:03:40.486015 2026] [:error] [pid 37894:tid 37941] [client 172.190.142.176:34702] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aaCnHArG3d4cnTcm0zwdTAAAAFE"]
[Fri Feb 27 04:03:40.924093 2026] [:error] [pid 37894:tid 37938] [client 172.190.142.176:17365] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aaCnHArG3d4cnTcm0zwdTwAAAE4"]
[Fri Feb 27 04:03:41.369797 2026] [:error] [pid 37894:tid 37924] [client 172.190.142.176:34699] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/er.php"] [unique_id "aaCnHQrG3d4cnTcm0zwdVgAAAEA"]
[Fri Feb 27 04:03:41.791947 2026] [:error] [pid 37984:tid 37988] [client 172.190.142.176:19926] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aaCnHbvzllUfvW6W6vGGvgAAAMI"]
[Fri Feb 27 04:03:42.241269 2026] [:error] [pid 37984:tid 37992] [client 172.190.142.176:18540] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aaCnHrvzllUfvW6W6vGGwgAAAMY"]
[Fri Feb 27 04:03:42.670169 2026] [:error] [pid 37984:tid 38006] [client 172.190.142.176:17393] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aaCnHrvzllUfvW6W6vGGxgAAANQ"]
[Fri Feb 27 04:03:43.089983 2026] [:error] [pid 37984:tid 38001] [client 172.190.142.176:5958] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fault.php"] [unique_id "aaCnH7vzllUfvW6W6vGGyQAAAM8"]
[Fri Feb 27 04:03:43.572229 2026] [:error] [pid 37894:tid 37936] [client 172.190.142.176:5966] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaCnHwrG3d4cnTcm0zwdXAAAAEw"]
[Fri Feb 27 04:03:44.016899 2026] [:error] [pid 37894:tid 37948] [client 172.190.142.176:17379] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaCnIArG3d4cnTcm0zwdXwAAAFg"]
[Fri Feb 27 04:03:44.443085 2026] [:error] [pid 37894:tid 37944] [client 172.190.142.176:10791] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaCnIArG3d4cnTcm0zwdYgAAAFQ"]
[Fri Feb 27 04:03:44.875821 2026] [:error] [pid 37893:tid 37920] [client 172.190.142.176:44969] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaCnILCiThGvciFYy77i1gAAABc"]
[Fri Feb 27 04:03:45.315922 2026] [:error] [pid 37894:tid 37936] [client 172.190.142.176:34721] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaCnIQrG3d4cnTcm0zwdaAAAAEw"]
[Fri Feb 27 04:03:45.736714 2026] [:error] [pid 37984:tid 37986] [client 172.190.142.176:34724] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaCnIbvzllUfvW6W6vGG0AAAAMA"]
[Fri Feb 27 04:03:46.180058 2026] [:error] [pid 37893:tid 37921] [client 172.190.142.176:34733] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaCnIrCiThGvciFYy77i3AAAABg"]
[Fri Feb 27 04:03:46.598248 2026] [:error] [pid 37895:tid 37957] [client 172.190.142.176:34740] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaCnIrx7AKEYlDsU2_128QAAAIY"]
[Fri Feb 27 04:03:47.033560 2026] [:error] [pid 37895:tid 37968] [client 172.190.142.176:17348] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaCnI7x7AKEYlDsU2_128wAAAJE"]
[Fri Feb 27 04:03:47.456227 2026] [:error] [pid 37894:tid 37929] [client 172.190.142.176:5980] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaCnIwrG3d4cnTcm0zwdcAAAAEU"]
[Fri Feb 27 04:03:47.865396 2026] [:error] [pid 37893:tid 37910] [client 172.190.142.176:33526] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaCnI7CiThGvciFYy77i4QAAAA0"]
[Fri Feb 27 04:03:48.289660 2026] [:error] [pid 37894:tid 37946] [client 172.190.142.176:19942] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/leuk.php"] [unique_id "aaCnJArG3d4cnTcm0zwdcwAAAFY"]
[Fri Feb 27 04:03:48.745871 2026] [:error] [pid 37894:tid 37926] [client 172.190.142.176:34704] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaCnJArG3d4cnTcm0zwdegAAAEI"]
[Fri Feb 27 04:03:49.190502 2026] [:error] [pid 37893:tid 37918] [client 172.190.142.176:12162] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaCnJbCiThGvciFYy77i5gAAABU"]
[Fri Feb 27 04:03:49.606693 2026] [:error] [pid 37894:tid 37947] [client 172.190.142.176:5971] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaCnJQrG3d4cnTcm0zwdgAAAAFc"]
[Fri Feb 27 04:03:50.043661 2026] [:error] [pid 37984:tid 38003] [client 172.190.142.176:17394] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaCnJrvzllUfvW6W6vGG1AAAANE"]
[Fri Feb 27 04:03:50.497469 2026] [:error] [pid 37984:tid 37989] [client 172.190.142.176:10756] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaCnJrvzllUfvW6W6vGG1wAAAMM"]
[Fri Feb 27 04:03:50.948744 2026] [:error] [pid 37895:tid 37953] [client 172.190.142.176:34737] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaCnJrx7AKEYlDsU2_12_AAAAII"]
[Fri Feb 27 04:03:51.398664 2026] [:error] [pid 37895:tid 37959] [client 172.190.142.176:10793] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaCnJ7x7AKEYlDsU2_12_wAAAIg"]
[Fri Feb 27 04:03:51.835703 2026] [:error] [pid 37984:tid 37988] [client 172.190.142.176:63690] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kolda.php"] [unique_id "aaCnJ7vzllUfvW6W6vGG3QAAAMI"]
[Fri Feb 27 04:03:52.288219 2026] [:error] [pid 37894:tid 37926] [client 172.190.142.176:17366] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaCnKArG3d4cnTcm0zwdhwAAAEI"]
[Fri Feb 27 04:03:52.734186 2026] [:error] [pid 37894:tid 37924] [client 172.190.142.176:34739] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaCnKArG3d4cnTcm0zwdiQAAAEA"]
[Fri Feb 27 04:03:53.187441 2026] [:error] [pid 37984:tid 38003] [client 172.190.142.176:44932] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaCnKbvzllUfvW6W6vGG4wAAANE"]
[Fri Feb 27 04:03:53.632329 2026] [:error] [pid 37984:tid 37997] [client 172.190.142.176:5955] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaCnKbvzllUfvW6W6vGG5AAAAMs"]
[Fri Feb 27 04:03:54.056017 2026] [:error] [pid 37984:tid 38007] [client 172.190.142.176:17385] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aaCnKrvzllUfvW6W6vGG5wAAANU"]
[Fri Feb 27 04:03:54.497306 2026] [:error] [pid 37895:tid 37967] [client 172.190.142.176:6487] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aaCnKrx7AKEYlDsU2_13AgAAAJA"]
[Fri Feb 27 04:03:54.948714 2026] [:error] [pid 37895:tid 37975] [client 172.190.142.176:19930] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aaCnKrx7AKEYlDsU2_13AwAAAJg"]
[Fri Feb 27 04:03:55.395141 2026] [:error] [pid 37895:tid 37961] [client 172.190.142.176:6489] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/god.php"] [unique_id "aaCnK7x7AKEYlDsU2_13BAAAAIo"]
[Fri Feb 27 04:03:55.835943 2026] [:error] [pid 37984:tid 37996] [client 172.190.142.176:12213] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaCnK7vzllUfvW6W6vGG8QAAAMo"]
[Fri Feb 27 04:03:56.282867 2026] [:error] [pid 37984:tid 38007] [client 172.190.142.176:34237] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaCnLLvzllUfvW6W6vGG9gAAANU"]
[Fri Feb 27 04:03:56.717246 2026] [:error] [pid 37984:tid 38009] [client 172.190.142.176:44954] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaCnLLvzllUfvW6W6vGG-AAAANc"]
[Fri Feb 27 04:03:57.166838 2026] [:error] [pid 37984:tid 37992] [client 172.190.142.176:34716] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaCnLbvzllUfvW6W6vGG-gAAAMY"]
[Fri Feb 27 04:03:57.599067 2026] [:error] [pid 37984:tid 38002] [client 172.190.142.176:6355] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaCnLbvzllUfvW6W6vGG_QAAANA"]
[Fri Feb 27 04:03:58.064561 2026] [:error] [pid 37984:tid 38006] [client 172.190.142.176:44991] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaCnLrvzllUfvW6W6vGHAwAAANQ"]
[Fri Feb 27 04:03:58.513178 2026] [:error] [pid 37984:tid 37987] [client 172.190.142.176:6604] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaCnLrvzllUfvW6W6vGHBwAAAME"]
[Fri Feb 27 04:03:58.937142 2026] [:error] [pid 37894:tid 37933] [client 172.190.142.176:19938] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaCnLgrG3d4cnTcm0zwdmAAAAEk"]
[Fri Feb 27 04:03:59.376932 2026] [:error] [pid 37893:tid 37906] [client 172.190.142.176:19912] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaCnL7CiThGvciFYy77i7QAAAAk"]
[Fri Feb 27 04:03:59.834136 2026] [:error] [pid 37893:tid 37905] [client 172.190.142.176:44963] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaCnL7CiThGvciFYy77i7wAAAAg"]
[Fri Feb 27 04:04:00.284025 2026] [:error] [pid 37895:tid 37952] [client 172.190.142.176:34709] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaCnMLx7AKEYlDsU2_13DQAAAIE"]
[Fri Feb 27 04:04:00.725209 2026] [:error] [pid 37895:tid 37965] [client 172.190.142.176:35343] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaCnMLx7AKEYlDsU2_13EAAAAI4"]
[Fri Feb 27 04:04:01.136939 2026] [:error] [pid 37895:tid 37958] [client 172.190.142.176:35369] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaCnMbx7AKEYlDsU2_13FQAAAIc"]
[Fri Feb 27 04:04:01.575125 2026] [:error] [pid 37895:tid 37975] [client 172.190.142.176:19962] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaCnMbx7AKEYlDsU2_13FwAAAJg"]
[Fri Feb 27 04:04:02.002561 2026] [:error] [pid 37895:tid 37960] [client 172.190.142.176:34183] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaCnMrx7AKEYlDsU2_13GAAAAIk"]
[Fri Feb 27 04:04:02.436021 2026] [:error] [pid 37893:tid 37911] [client 172.190.142.176:34690] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaCnMrCiThGvciFYy77i8wAAAA4"]
[Fri Feb 27 04:04:02.867220 2026] [:error] [pid 37984:tid 37986] [client 172.190.142.176:34213] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaCnMrvzllUfvW6W6vGHFAAAAMA"]
[Fri Feb 27 04:04:03.291266 2026] [:error] [pid 37895:tid 37955] [client 172.190.142.176:35371] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaCnM7x7AKEYlDsU2_13HgAAAIQ"]
[Fri Feb 27 04:04:03.734743 2026] [:error] [pid 37895:tid 37952] [client 172.190.142.176:35364] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaCnM7x7AKEYlDsU2_13IQAAAIE"]
[Fri Feb 27 04:04:04.143970 2026] [:error] [pid 37984:tid 37995] [client 172.190.142.176:6653] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaCnNLvzllUfvW6W6vGHGgAAAMk"]
[Fri Feb 27 04:04:04.582497 2026] [:error] [pid 37894:tid 37942] [client 172.190.142.176:44960] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aaCnNArG3d4cnTcm0zwdoAAAAFI"]
[Fri Feb 27 04:04:04.992466 2026] [:error] [pid 37894:tid 37934] [client 172.190.142.176:6606] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aaCnNArG3d4cnTcm0zwdogAAAEo"]
[Fri Feb 27 04:04:05.432748 2026] [:error] [pid 37984:tid 37991] [client 172.190.142.176:49177] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aaCnNbvzllUfvW6W6vGHHQAAAMU"]
[Fri Feb 27 04:04:05.864713 2026] [:error] [pid 37895:tid 37975] [client 172.190.142.176:6620] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "aaCnNbx7AKEYlDsU2_13JQAAAJg"]
[Fri Feb 27 04:04:06.307270 2026] [:error] [pid 37984:tid 37997] [client 172.190.142.176:49173] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaCnNrvzllUfvW6W6vGHHwAAAMs"]
[Fri Feb 27 04:04:06.747965 2026] [:error] [pid 37984:tid 38008] [client 172.190.142.176:35387] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaCnNrvzllUfvW6W6vGHIAAAANY"]
[Fri Feb 27 04:04:07.185704 2026] [:error] [pid 37894:tid 37935] [client 172.190.142.176:62294] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaCnNwrG3d4cnTcm0zwdrAAAAEs"]
[Fri Feb 27 04:04:07.607163 2026] [:error] [pid 37893:tid 37919] [client 172.190.142.176:34202] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nnyvn.php"] [unique_id "aaCnN7CiThGvciFYy77i-gAAABY"]
[Fri Feb 27 04:04:08.048536 2026] [:error] [pid 37894:tid 37930] [client 172.190.142.176:12170] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aaCnOArG3d4cnTcm0zwdsQAAAEY"]
[Fri Feb 27 04:04:08.488188 2026] [:error] [pid 37893:tid 37904] [client 172.190.142.176:49191] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aaCnOLCiThGvciFYy77i-wAAAAc"]
[Fri Feb 27 04:04:08.898251 2026] [:error] [pid 37894:tid 37947] [client 172.190.142.176:19909] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aaCnOArG3d4cnTcm0zwdtwAAAFc"]
[Fri Feb 27 04:04:09.329010 2026] [:error] [pid 37895:tid 37951] [client 172.190.142.176:19939] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aaCnObx7AKEYlDsU2_13LQAAAIA"]
[Fri Feb 27 04:04:09.786725 2026] [:error] [pid 37893:tid 37906] [client 172.190.142.176:49158] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lul.php"] [unique_id "aaCnObCiThGvciFYy77i_gAAAAk"]
[Fri Feb 27 04:04:10.234345 2026] [:error] [pid 37984:tid 37991] [client 172.190.142.176:6632] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lul.php"] [unique_id "aaCnOrvzllUfvW6W6vGHKgAAAMU"]
[Fri Feb 27 04:04:10.652726 2026] [:error] [pid 37894:tid 37925] [client 172.190.142.176:35345] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lul.php"] [unique_id "aaCnOgrG3d4cnTcm0zwdvAAAAEE"]
[Fri Feb 27 04:04:11.096202 2026] [:error] [pid 37893:tid 37915] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/lul.php
[Fri Feb 27 04:04:11.323565 2026] [:error] [pid 37893:tid 37898] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Fri Feb 27 04:04:11.550440 2026] [:error] [pid 37893:tid 37914] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Feb 27 04:04:11.779537 2026] [:error] [pid 37893:tid 37918] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/ya.php
[Fri Feb 27 04:04:12.008171 2026] [:error] [pid 37893:tid 37907] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Fri Feb 27 04:04:12.235942 2026] [:error] [pid 37893:tid 37917] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Feb 27 04:04:12.466589 2026] [:error] [pid 37893:tid 37900] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Fri Feb 27 04:04:12.697150 2026] [:error] [pid 37893:tid 37904] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/a1vx.php
[Fri Feb 27 04:04:12.924293 2026] [:error] [pid 37893:tid 37921] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Fri Feb 27 04:04:13.150996 2026] [:error] [pid 37893:tid 37901] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Fri Feb 27 04:04:13.380442 2026] [:error] [pid 37893:tid 37906] [client 172.190.142.176:6470] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Fri Feb 27 04:04:13.603916 2026] [:error] [pid 37893:tid 37902] [client 172.190.142.176:6470] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaCnPbCiThGvciFYy77jEwAAAAU"]
[Fri Feb 27 04:04:14.022788 2026] [:error] [pid 37895:tid 37954] [client 172.190.142.176:19922] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaCnPrx7AKEYlDsU2_13NwAAAIM"]
[Fri Feb 27 04:04:14.252756 2026] [:error] [pid 37894:tid 37929] [client 20.223.198.174:3411] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 04:04:14.443017 2026] [:error] [pid 37895:tid 37964] [client 172.190.142.176:19947] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaCnPrx7AKEYlDsU2_13OwAAAI0"]
[Fri Feb 27 04:04:14.854222 2026] [:error] [pid 37894:tid 37947] [client 172.190.142.176:34230] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaCnPgrG3d4cnTcm0zwdxwAAAFc"]
[Fri Feb 27 04:04:15.279811 2026] [:error] [pid 37895:tid 37970] [client 172.190.142.176:44959] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aaCnP7x7AKEYlDsU2_13QAAAAJM"]
[Fri Feb 27 04:04:15.721756 2026] [:error] [pid 37895:tid 37967] [client 172.190.142.176:34187] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aaCnP7x7AKEYlDsU2_13QgAAAJA"]
[Fri Feb 27 04:04:16.129983 2026] [:error] [pid 37894:tid 37928] [client 172.190.142.176:6636] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aaCnQArG3d4cnTcm0zwdzAAAAEQ"]
[Fri Feb 27 04:04:16.562592 2026] [:error] [pid 37894:tid 37934] [client 172.190.142.176:10802] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fot.php"] [unique_id "aaCnQArG3d4cnTcm0zwdzgAAAEo"]
[Fri Feb 27 04:04:17.000320 2026] [:error] [pid 37984:tid 37989] [client 172.190.142.176:34186] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaCnQLvzllUfvW6W6vGHOQAAAMM"]
[Fri Feb 27 04:04:17.421964 2026] [:error] [pid 37984:tid 37994] [client 172.190.142.176:35347] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaCnQbvzllUfvW6W6vGHOwAAAMg"]
[Fri Feb 27 04:04:17.851905 2026] [:error] [pid 37895:tid 37957] [client 172.190.142.176:19919] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaCnQbx7AKEYlDsU2_13SQAAAIY"]
[Fri Feb 27 04:04:18.283533 2026] [:error] [pid 37984:tid 37990] [client 172.190.142.176:17349] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaCnQrvzllUfvW6W6vGHPgAAAMQ"]
[Fri Feb 27 04:04:18.703390 2026] [:error] [pid 37895:tid 37970] [client 172.190.142.176:24714] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaCnQrx7AKEYlDsU2_13TAAAAJM"]
[Fri Feb 27 04:04:19.116969 2026] [:error] [pid 37984:tid 37988] [client 172.190.142.176:19918] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaCnQ7vzllUfvW6W6vGHRQAAAMI"]
[Fri Feb 27 04:04:19.559072 2026] [:error] [pid 37895:tid 37960] [client 172.190.142.176:24740] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaCnQ7x7AKEYlDsU2_13TQAAAIk"]
[Fri Feb 27 04:04:19.979832 2026] [:error] [pid 37984:tid 37994] [client 172.190.142.176:35380] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaCnQ7vzllUfvW6W6vGHRwAAAMg"]
[Fri Feb 27 04:04:20.417656 2026] [:error] [pid 37984:tid 38007] [client 172.190.142.176:34199] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaCnRLvzllUfvW6W6vGHSgAAANU"]
[Fri Feb 27 04:04:20.828761 2026] [:error] [pid 37893:tid 37917] [client 172.190.142.176:19908] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaCnRLCiThGvciFYy77jHQAAABQ"]
[Fri Feb 27 04:04:21.279648 2026] [:error] [pid 37895:tid 37955] [client 172.190.142.176:62285] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaCnRbx7AKEYlDsU2_13UAAAAIQ"]
[Fri Feb 27 04:04:21.714386 2026] [:error] [pid 37984:tid 37987] [client 172.190.142.176:6522] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaCnRbvzllUfvW6W6vGHTQAAAME"]
[Fri Feb 27 04:04:22.131758 2026] [:error] [pid 37984:tid 37996] [client 172.190.142.176:49185] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaCnRrvzllUfvW6W6vGHTwAAAMo"]
[Fri Feb 27 04:04:22.553681 2026] [:error] [pid 37893:tid 37905] [client 172.190.142.176:6491] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaCnRrCiThGvciFYy77jHwAAAAg"]
[Fri Feb 27 04:04:22.991805 2026] [:error] [pid 37984:tid 38008] [client 172.190.142.176:6624] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaCnRrvzllUfvW6W6vGHUwAAANY"]
[Fri Feb 27 04:04:23.469800 2026] [:error] [pid 37894:tid 37933] [client 172.190.142.176:62335] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev1s.php"] [unique_id "aaCnRwrG3d4cnTcm0zwd0gAAAEk"]
[Fri Feb 27 04:04:23.899923 2026] [:error] [pid 37984:tid 38009] [client 172.190.142.176:6486] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaCnR7vzllUfvW6W6vGHWAAAANc"]
[Fri Feb 27 04:04:24.329491 2026] [:error] [pid 37895:tid 37969] [client 172.190.142.176:10760] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaCnSLx7AKEYlDsU2_13VwAAAJI"]
[Fri Feb 27 04:04:24.747360 2026] [:error] [pid 37894:tid 37943] [client 172.190.142.176:49164] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaCnSArG3d4cnTcm0zwd2AAAAFM"]
[Fri Feb 27 04:04:25.197398 2026] [:error] [pid 37894:tid 37936] [client 172.190.142.176:34728] [client 172.190.142.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffd.php"] [unique_id "aaCnSQrG3d4cnTcm0zwd2wAAAEw"]
[Fri Feb 27 04:27:45.455327 2026] [:error] [pid 5365:tid 5389] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Feb 27 04:27:45.730721 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Feb 27 04:27:46.051931 2026] [:error] [pid 5365:tid 5388] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Feb 27 04:27:46.342053 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Feb 27 04:27:46.583410 2026] [:error] [pid 5365:tid 5373] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 27 04:27:46.808626 2026] [:error] [pid 5365:tid 5385] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 04:27:47.080244 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 04:27:47.357826 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Feb 27 04:27:47.935508 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 04:27:48.438462 2026] [:error] [pid 5365:tid 5374] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Feb 27 04:27:48.823187 2026] [:error] [pid 5365:tid 5374] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Feb 27 04:27:49.061234 2026] [:error] [pid 5365:tid 5368] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Feb 27 04:27:49.356071 2026] [:error] [pid 5365:tid 5375] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 27 04:27:49.633573 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Feb 27 04:27:49.912112 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Feb 27 04:27:50.214726 2026] [:error] [pid 5365:tid 5376] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Feb 27 04:27:50.515007 2026] [:error] [pid 5365:tid 5375] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Feb 27 04:27:50.835228 2026] [:error] [pid 5365:tid 5377] [client 173.239.214.6:65475] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Feb 27 04:27:54.568193 2026] [:error] [pid 5365:tid 5381] [client 173.239.214.6:65475] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaCsypYAa8J3tYxdG3zlDAAAAQ4"]
[Fri Feb 27 04:27:56.416312 2026] [:error] [pid 5365:tid 5381] [client 173.239.214.12:36905] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaCszJYAa8J3tYxdG3zlRQAAAQ4"]
[Fri Feb 27 04:28:02.689061 2026] [:error] [pid 5365:tid 5388] [client 173.239.214.12:26437] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 04:28:03.493997 2026] [:error] [pid 5365:tid 5372] [client 173.239.214.12:26437] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaCs05YAa8J3tYxdG3zmpAAAAQU"]
[Fri Feb 27 04:28:04.544551 2026] [:error] [pid 3975:tid 4037] [client 45.131.195.210:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 04:28:04.812859 2026] [:error] [pid 3975:tid 4021] [client 45.131.195.210:62669] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaCs1BMVp0-T2hD76b2t9QAAAIs"]
[Fri Feb 27 04:28:05.620256 2026] [:error] [pid 3975:tid 4037] [client 173.239.214.22:44453] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Feb 27 04:28:06.948402 2026] [:error] [pid 3975:tid 4013] [client 173.239.214.22:44453] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaCs1hMVp0-T2hD76b2uHAAAAIM"]
[Fri Feb 27 04:28:07.698457 2026] [:error] [pid 3973:tid 4001] [client 185.198.240.149:56563] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaCs14JZsftwqmUaaLPsgwAAABI"]
[Fri Feb 27 04:28:08.251952 2026] [:error] [pid 4081:tid 4097] [client 173.239.214.17:25751] [client 173.239.214.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaCs2A55mnr35z8h7t3NxAAAAM4"]
[Fri Feb 27 04:28:08.801937 2026] [:error] [pid 3973:tid 3997] [client 173.239.214.2:49975] [client 173.239.214.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaCs2IJZsftwqmUaaLPslwAAAA4"]
[Fri Feb 27 04:28:09.287660 2026] [:error] [pid 3975:tid 4012] [client 173.239.214.22:40669] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaCs2RMVp0-T2hD76b2uRgAAAII"]
[Fri Feb 27 04:28:09.785008 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.16:63225] [client 173.239.214.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaCs2ZYAa8J3tYxdG3znSwAAARg"]
[Fri Feb 27 04:28:10.474928 2026] [:error] [pid 21329:tid 21398] [client 185.198.240.145:48759] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaCs2pvQWnde-MjcQ1FAjAAAAU8"]
[Fri Feb 27 04:28:10.926740 2026] [:error] [pid 3974:tid 4054] [client 185.198.240.139:60193] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Feb 27 04:28:11.387197 2026] [:error] [pid 3974:tid 4058] [client 185.198.240.139:60193] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aaCs23p-fQtdOYjkuFvK5wAAAFU"]
[Fri Feb 27 04:28:12.373273 2026] [:error] [pid 21329:tid 21400] [client 185.198.240.139:63417] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaCs3JvQWnde-MjcQ1FArgAAAVE"]
[Fri Feb 27 04:28:13.039564 2026] [:error] [pid 3973:tid 4001] [client 173.239.214.27:58959] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaCs3YJZsftwqmUaaLPs_gAAABI"]
[Fri Feb 27 04:28:13.514996 2026] [:error] [pid 5365:tid 5385] [client 45.131.195.210:29685] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Feb 27 04:28:13.770274 2026] [:error] [pid 5365:tid 5377] [client 45.131.195.210:29685] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaCs3ZYAa8J3tYxdG3znnwAAAQo"]
[Fri Feb 27 04:28:14.329982 2026] [:error] [pid 4081:tid 4097] [client 173.239.214.26:25919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 27 04:28:15.032080 2026] [:error] [pid 4081:tid 4090] [client 173.239.214.26:25919] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Feb 27 04:28:15.804911 2026] [:error] [pid 4081:tid 4091] [client 173.239.214.26:25919] [client 173.239.214.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaCs3w55mnr35z8h7t3OgwAAAMg"]
[Fri Feb 27 04:28:16.345900 2026] [:error] [pid 5365:tid 5379] [client 185.198.240.137:24343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Feb 27 04:28:16.617599 2026] [:error] [pid 5365:tid 5381] [client 185.198.240.137:24343] [client 185.198.240.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaCs4JYAa8J3tYxdG3zn1wAAAQ4"]
[Fri Feb 27 04:28:17.154034 2026] [:error] [pid 3973:tid 3993] [client 185.198.240.135:58055] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Feb 27 04:28:17.703242 2026] [:error] [pid 3973:tid 3990] [client 185.198.240.135:58055] [client 185.198.240.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaCs4YJZsftwqmUaaLPtXwAAAAc"]
[Fri Feb 27 04:28:18.499217 2026] [:error] [pid 3975:tid 4031] [client 173.239.214.12:63889] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaCs4hMVp0-T2hD76b2u6AAAAJQ"]
[Fri Feb 27 04:28:19.199446 2026] [:error] [pid 21329:tid 21403] [client 185.198.240.143:60703] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Feb 27 04:28:19.567276 2026] [:error] [pid 21329:tid 21388] [client 185.198.240.143:60703] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 27 04:28:20.398265 2026] [:error] [pid 21329:tid 21388] [client 185.198.240.143:60703] [client 185.198.240.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaCs5JvQWnde-MjcQ1FBbgAAAUU"]
[Fri Feb 27 04:28:21.234934 2026] [:error] [pid 21329:tid 21397] [client 173.239.214.19:39821] [client 173.239.214.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaCs5ZvQWnde-MjcQ1FBhwAAAU4"]
[Fri Feb 27 04:28:21.999843 2026] [:error] [pid 3973:tid 3997] [client 173.239.214.198:45597] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaCs5YJZsftwqmUaaLPtmwAAAA4"]
[Fri Feb 27 04:28:22.544168 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.5:45453] [client 173.239.214.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaCs5pYAa8J3tYxdG3zoXQAAARc"]
[Fri Feb 27 04:28:23.133953 2026] [:error] [pid 4081:tid 4086] [client 185.198.240.136:57983] [client 185.198.240.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaCs5w55mnr35z8h7t3PCgAAAMM"]
[Fri Feb 27 04:28:24.277673 2026] [:error] [pid 3973:tid 4007] [client 185.198.240.155:23195] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Feb 27 04:28:24.528531 2026] [:error] [pid 3973:tid 4005] [client 185.198.240.155:23195] [client 185.198.240.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaCs6IJZsftwqmUaaLPtwAAAABY"]
[Fri Feb 27 04:28:25.073866 2026] [:error] [pid 5365:tid 5388] [client 173.239.214.8:57147] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaCs6ZYAa8J3tYxdG3zorAAAARU"]
[Fri Feb 27 04:28:25.599733 2026] [:error] [pid 5365:tid 5373] [client 173.239.214.27:25721] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaCs6ZYAa8J3tYxdG3zoywAAAQY"]
[Fri Feb 27 04:28:26.605662 2026] [:error] [pid 5365:tid 5374] [client 45.131.195.210:63233] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 04:28:27.138335 2026] [:error] [pid 5365:tid 5387] [client 45.131.195.210:63233] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Feb 27 04:28:28.155175 2026] [:error] [pid 5365:tid 5391] [client 45.131.195.210:63233] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaCs7JYAa8J3tYxdG3zpbAAAARg"]
[Fri Feb 27 04:28:29.475698 2026] [:error] [pid 4081:tid 4106] [client 173.239.214.25:23007] [client 173.239.214.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.25, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaCs7Q55mnr35z8h7t3PZgAAANc"]
[Fri Feb 27 04:28:29.794751 2026] [:error] [pid 4081:tid 4103] [client 173.239.214.25:23007] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Feb 27 04:28:31.304288 2026] [:error] [pid 4081:tid 4107] [client 173.239.214.25:23007] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Feb 27 04:28:31.529677 2026] [:error] [pid 4081:tid 4094] [client 173.239.214.25:23007] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Feb 27 04:28:32.850836 2026] [:error] [pid 4081:tid 4095] [client 173.239.214.25:23007] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaCs8A55mnr35z8h7t3PoQAAAMw"]
[Fri Feb 27 04:28:33.699256 2026] [:error] [pid 3975:tid 4022] [client 173.239.214.8:40431] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Feb 27 04:28:33.944429 2026] [:error] [pid 3975:tid 4014] [client 173.239.214.8:40431] [client 173.239.214.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.8, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaCs8RMVp0-T2hD76b2v0AAAAIQ"]
[Fri Feb 27 04:28:34.449572 2026] [:error] [pid 3975:tid 4023] [client 173.239.214.8:40431] [client 173.239.214.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaCs8hMVp0-T2hD76b2v0gAAAI0"]
[Fri Feb 27 04:28:36.034819 2026] [:error] [pid 5365:tid 5382] [client 173.239.214.5:44317] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Feb 27 04:28:37.046315 2026] [:error] [pid 21329:tid 21404] [client 185.198.240.151:29413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Feb 27 04:28:37.564057 2026] [:error] [pid 21329:tid 21399] [client 185.198.240.151:29413] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaCs9ZvQWnde-MjcQ1FDMAAAAVA"]
[Fri Feb 27 04:28:38.279315 2026] [:error] [pid 5365:tid 5386] [client 45.131.195.208:33925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Feb 27 04:28:39.130243 2026] [:error] [pid 5365:tid 5370] [client 45.131.195.208:33925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Feb 27 04:28:39.691552 2026] [:error] [pid 5365:tid 5370] [client 45.131.195.208:33925] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Feb 27 04:28:40.285326 2026] [:error] [pid 5365:tid 5386] [client 45.131.195.208:33925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Feb 27 04:28:40.633745 2026] [:error] [pid 5365:tid 5390] [client 45.131.195.208:33925] [client 45.131.195.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaCs-JYAa8J3tYxdG3zrigAAARc"]
[Fri Feb 27 04:28:41.105587 2026] [:error] [pid 3975:tid 4025] [client 185.198.240.152:43573] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Feb 27 04:28:41.380470 2026] [:error] [pid 3975:tid 4017] [client 185.198.240.152:43573] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Feb 27 04:28:41.651267 2026] [:error] [pid 3975:tid 4036] [client 185.198.240.152:43573] [client 185.198.240.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaCs-RMVp0-T2hD76b2wIQAAAJc"]
[Fri Feb 27 04:28:42.406096 2026] [:error] [pid 5365:tid 5378] [client 209.87.169.175:32741] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Feb 27 04:28:42.916549 2026] [:error] [pid 5365:tid 5372] [client 209.87.169.175:32741] [client 209.87.169.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.175, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaCs-pYAa8J3tYxdG3zr1gAAAQU"]
[Fri Feb 27 04:28:43.171577 2026] [:error] [pid 5365:tid 5376] [client 209.87.169.175:32741] [client 209.87.169.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaCs-5YAa8J3tYxdG3zr2QAAAQk"]
[Fri Feb 27 04:28:46.234640 2026] [:error] [pid 3973:tid 3992] [client 173.239.214.198:55967] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Feb 27 04:28:47.939125 2026] [:error] [pid 3973:tid 4004] [client 173.239.214.198:55967] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Feb 27 04:28:48.217006 2026] [:error] [pid 3973:tid 3991] [client 173.239.214.198:55967] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaCtAIJZsftwqmUaaLPuhAAAAAg"]
[Fri Feb 27 04:28:48.728196 2026] [:error] [pid 4081:tid 4094] [client 173.239.214.10:61723] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Feb 27 04:28:49.624207 2026] [:error] [pid 4081:tid 4094] [client 173.239.214.10:61723] [client 173.239.214.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.10, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaCtAQ55mnr35z8h7t3QdwAAAMs"]
[Fri Feb 27 04:28:49.931994 2026] [:error] [pid 4081:tid 4092] [client 173.239.214.10:61723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Feb 27 04:28:50.264236 2026] [:error] [pid 4081:tid 4096] [client 173.239.214.10:61723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Feb 27 04:28:50.561005 2026] [:error] [pid 4081:tid 4085] [client 173.239.214.10:61723] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Feb 27 04:28:50.810280 2026] [:error] [pid 4081:tid 4098] [client 173.239.214.10:61723] [client 173.239.214.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaCtAg55mnr35z8h7t3QkAAAAM8"]
[Fri Feb 27 04:28:51.337538 2026] [:error] [pid 3975:tid 4014] [client 173.239.214.198:31223] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Feb 27 04:28:51.645676 2026] [:error] [pid 3975:tid 4011] [client 173.239.214.198:31223] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaCtAxMVp0-T2hD76b2wqwAAAIE"]
[Fri Feb 27 04:28:52.359552 2026] [:error] [pid 5365:tid 5369] [client 45.131.195.210:46419] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Feb 27 04:28:52.647852 2026] [:error] [pid 5365:tid 5378] [client 45.131.195.210:46419] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaCtBJYAa8J3tYxdG3ztXgAAAQs"]
[Fri Feb 27 04:28:53.737761 2026] [:error] [pid 4081:tid 4097] [client 185.198.240.157:28933] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Feb 27 04:28:54.002934 2026] [:error] [pid 4081:tid 4089] [client 185.198.240.157:28933] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaCtBQ55mnr35z8h7t3QsgAAAMY"]
[Fri Feb 27 04:28:54.468932 2026] [:error] [pid 5365:tid 5383] [client 185.198.240.144:33751] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaCtBpYAa8J3tYxdG3ztvgAAARA"]
[Fri Feb 27 04:28:54.901280 2026] [:error] [pid 5365:tid 5374] [client 185.198.240.146:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Feb 27 04:28:55.172232 2026] [:error] [pid 5365:tid 5379] [client 185.198.240.146:54471] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Feb 27 04:28:56.229207 2026] [:error] [pid 5365:tid 5382] [client 185.198.240.146:54471] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaCtCJYAa8J3tYxdG3zuGwAAAQ8"]
[Fri Feb 27 04:28:56.948477 2026] [:error] [pid 3975:tid 4010] [client 185.198.240.141:47377] [client 185.198.240.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaCtCBMVp0-T2hD76b2xGAAAAIA"]
[Fri Feb 27 04:28:58.325524 2026] [:error] [pid 3975:tid 4010] [client 185.198.240.150:59283] [client 185.198.240.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaCtChMVp0-T2hD76b2xSwAAAIA"]
[Fri Feb 27 04:28:58.784405 2026] [:error] [pid 3974:tid 4047] [client 173.239.214.198:57267] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Feb 27 04:28:59.263012 2026] [:error] [pid 3974:tid 4048] [client 173.239.214.198:57267] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Feb 27 04:28:59.480870 2026] [:error] [pid 3974:tid 4042] [client 173.239.214.198:57267] [client 173.239.214.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaCtC3p-fQtdOYjkuFvOCQAAAEU"]
[Fri Feb 27 04:28:59.934197 2026] [:error] [pid 3974:tid 4053] [client 173.239.214.13:48295] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Feb 27 04:29:00.396651 2026] [:error] [pid 3974:tid 4040] [client 173.239.214.13:48295] [client 173.239.214.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaCtDHp-fQtdOYjkuFvOJgAAAEM"]
[Fri Feb 27 04:29:01.735844 2026] [:error] [pid 4081:tid 4092] [client 185.198.240.157:54397] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaCtDQ55mnr35z8h7t3RPQAAAMk"]
[Fri Feb 27 04:29:02.520879 2026] [:error] [pid 5365:tid 5377] [client 173.239.214.22:62339] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Feb 27 04:29:03.390500 2026] [:error] [pid 5365:tid 5372] [client 173.239.214.22:62339] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Feb 27 04:29:03.944048 2026] [:error] [pid 5365:tid 5376] [client 173.239.214.22:62339] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Feb 27 04:29:04.200034 2026] [:error] [pid 5365:tid 5367] [client 173.239.214.22:62339] [client 173.239.214.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaCtEJYAa8J3tYxdG3zvlAAAAQA"]
[Fri Feb 27 04:29:04.684876 2026] [:error] [pid 3975:tid 4021] [client 173.239.214.27:24801] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaCtEBMVp0-T2hD76b2xzgAAAIs"]
[Fri Feb 27 04:29:05.294124 2026] [:error] [pid 3975:tid 4015] [client 185.198.240.156:45863] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaCtERMVp0-T2hD76b2x0gAAAIU"]
[Fri Feb 27 04:29:05.764331 2026] [:error] [pid 5365:tid 5374] [client 185.198.240.149:45013] [client 185.198.240.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaCtEZYAa8J3tYxdG3zv8AAAAQc"]
[Fri Feb 27 04:29:06.308939 2026] [:error] [pid 21329:tid 21387] [client 45.131.195.210:50227] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Feb 27 04:29:06.624179 2026] [:error] [pid 21329:tid 21391] [client 45.131.195.210:50227] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaCtEpvQWnde-MjcQ1FFqQAAAUg"]
[Fri Feb 27 04:29:07.130350 2026] [:error] [pid 4081:tid 4084] [client 185.198.240.144:22459] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaCtEw55mnr35z8h7t3RgwAAAME"]
[Fri Feb 27 04:29:07.601509 2026] [:error] [pid 21329:tid 21405] [client 173.239.214.24:39305] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Feb 27 04:29:08.073982 2026] [:error] [pid 21329:tid 21392] [client 173.239.214.24:39305] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaCtFJvQWnde-MjcQ1FF0AAAAUk"]
[Fri Feb 27 04:29:08.580599 2026] [:error] [pid 5365:tid 5376] [client 173.239.214.12:63141] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaCtFJYAa8J3tYxdG3zwcQAAAQk"]
[Fri Feb 27 04:29:09.078660 2026] [:error] [pid 3975:tid 4013] [client 173.239.214.14:62701] [client 173.239.214.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaCtFRMVp0-T2hD76b2yCwAAAIM"]
[Fri Feb 27 04:29:09.571154 2026] [:error] [pid 3975:tid 4018] [client 173.239.214.27:25439] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaCtFRMVp0-T2hD76b2yEwAAAIg"]
[Fri Feb 27 04:29:10.273861 2026] [:error] [pid 3973:tid 4004] [client 185.198.240.140:35119] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaCtFoJZsftwqmUaaLPvnAAAABU"]
[Fri Feb 27 04:29:11.319144 2026] [:error] [pid 3974:tid 4057] [client 173.239.214.4:28443] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaCtF3p-fQtdOYjkuFvOxgAAAFQ"]
[Fri Feb 27 04:29:11.788528 2026] [:error] [pid 5365:tid 5380] [client 185.198.240.140:31485] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Feb 27 04:29:13.077862 2026] [:error] [pid 5365:tid 5379] [client 185.198.240.157:32207] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Feb 27 04:29:13.317474 2026] [:error] [pid 5365:tid 5377] [client 185.198.240.157:32207] [client 185.198.240.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaCtGZYAa8J3tYxdG3zxfQAAAQo"]
[Fri Feb 27 04:29:15.244536 2026] [:error] [pid 4081:tid 4089] [client 173.239.214.12:26247] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Feb 27 04:29:15.492955 2026] [:error] [pid 4081:tid 4090] [client 173.239.214.12:26247] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Feb 27 04:29:16.769436 2026] [:error] [pid 4081:tid 4107] [client 173.239.214.12:26247] [client 173.239.214.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaCtHA55mnr35z8h7t3SWwAAANg"]
[Fri Feb 27 04:29:18.025273 2026] [:error] [pid 21329:tid 21388] [client 185.198.240.138:61911] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaCtHpvQWnde-MjcQ1FG4AAAAUU"]
[Fri Feb 27 04:29:18.512322 2026] [:error] [pid 5365:tid 5388] [client 185.198.240.138:39749] [client 185.198.240.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaCtHpYAa8J3tYxdG3zycgAAARU"]
[Fri Feb 27 04:29:20.561271 2026] [:error] [pid 5365:tid 5379] [client 185.198.240.137:48269] [client 185.198.240.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaCtIJYAa8J3tYxdG3zyuAAAAQw"]
[Fri Feb 27 04:29:23.000008 2026] [:error] [pid 21329:tid 21401] [client 173.239.214.27:62903] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Feb 27 04:29:23.279278 2026] [:error] [pid 21329:tid 21404] [client 173.239.214.27:62903] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Fri Feb 27 04:29:23.579078 2026] [:error] [pid 21329:tid 21390] [client 173.239.214.27:62903] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Fri Feb 27 04:29:23.898959 2026] [:error] [pid 21329:tid 21405] [client 173.239.214.27:62903] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Fri Feb 27 04:29:24.737625 2026] [:error] [pid 21329:tid 21398] [client 173.239.214.27:62903] [client 173.239.214.27] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "dbservices.com.au"] [uri "/index.html"] [unique_id "aaCtJJvQWnde-MjcQ1FHcgAAAU8"]
[Fri Feb 27 04:29:25.237745 2026] [:error] [pid 21329:tid 21391] [client 173.239.214.27:62903] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaCtJZvQWnde-MjcQ1FHgAAAAUg"]
[Fri Feb 27 04:29:25.765779 2026] [:error] [pid 5365:tid 5380] [client 185.198.240.140:50021] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaCtJZYAa8J3tYxdG3zzuwAAAQ0"]
[Fri Feb 27 04:29:27.463021 2026] [:error] [pid 5365:tid 5389] [client 173.239.214.6:42761] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaCtJ5YAa8J3tYxdG3zz-AAAARY"]
[Fri Feb 27 04:29:28.034762 2026] [:error] [pid 21329:tid 21392] [client 173.239.214.15:64715] [client 173.239.214.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaCtKJvQWnde-MjcQ1FHuwAAAUk"]
[Fri Feb 27 04:29:28.601405 2026] [:error] [pid 21329:tid 21400] [client 185.198.240.139:43233] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaCtKJvQWnde-MjcQ1FHzgAAAVE"]
[Fri Feb 27 04:29:29.117863 2026] [:error] [pid 4081:tid 4100] [client 185.198.240.145:48317] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaCtKQ55mnr35z8h7t3TNAAAANE"]
[Fri Feb 27 04:29:30.004048 2026] [:error] [pid 5365:tid 5371] [client 185.198.240.151:54303] [client 185.198.240.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaCtKpYAa8J3tYxdG3z0cAAAAQQ"]
[Fri Feb 27 04:29:30.450238 2026] [:error] [pid 3973:tid 3994] [client 185.198.240.137:48115] [client 185.198.240.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaCtKoJZsftwqmUaaLPwnwAAAAs"]
[Fri Feb 27 04:29:31.200498 2026] [:error] [pid 5365:tid 5390] [client 173.239.214.21:57023] [client 173.239.214.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaCtK5YAa8J3tYxdG3z0rQAAARc"]
[Fri Feb 27 04:29:31.691913 2026] [:error] [pid 3974:tid 4040] [client 173.239.214.24:23243] [client 173.239.214.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaCtK3p-fQtdOYjkuFvQcwAAAEM"]
[Fri Feb 27 04:29:32.733834 2026] [:error] [pid 3975:tid 4012] [client 185.198.240.144:20263] [client 185.198.240.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaCtLBMVp0-T2hD76b2zpQAAAII"]
[Fri Feb 27 04:29:33.563719 2026] [:error] [pid 5365:tid 5373] [client 173.239.214.27:54827] [client 173.239.214.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaCtLZYAa8J3tYxdG3z1AgAAAQY"]
[Fri Feb 27 04:29:34.109171 2026] [:error] [pid 3975:tid 4021] [client 173.239.214.18:24813] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Feb 27 04:29:34.725648 2026] [:error] [pid 3975:tid 4019] [client 173.239.214.18:24813] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaCtLhMVp0-T2hD76b2z5gAAAIk"]
[Fri Feb 27 04:29:36.245803 2026] [:error] [pid 4081:tid 4095] [client 185.198.240.140:37981] [client 185.198.240.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaCtMA55mnr35z8h7t3TiQAAAMw"]
[Fri Feb 27 04:29:37.338197 2026] [:error] [pid 3974:tid 4041] [client 173.239.214.28:57969] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Feb 27 04:29:37.608852 2026] [:error] [pid 3974:tid 4033] [client 173.239.214.28:57969] [client 173.239.214.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaCtMXp-fQtdOYjkuFvQzwAAAEA"]
[Fri Feb 27 04:29:38.535015 2026] [:error] [pid 5365:tid 5386] [client 185.198.240.145:50425] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Feb 27 04:29:38.875128 2026] [:error] [pid 5365:tid 5388] [client 185.198.240.145:50425] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Fri Feb 27 04:29:39.179753 2026] [:error] [pid 5365:tid 5378] [client 185.198.240.145:50425] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Feb 27 04:29:39.442140 2026] [:error] [pid 5365:tid 5378] [client 185.198.240.145:50425] [client 185.198.240.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaCtM5YAa8J3tYxdG3z1vwAAAQs"]
[Fri Feb 27 04:29:40.094935 2026] [:error] [pid 3973:tid 3994] [client 173.239.214.11:22759] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Feb 27 04:29:40.355092 2026] [:error] [pid 3973:tid 3986] [client 173.239.214.11:22759] [client 173.239.214.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaCtNIJZsftwqmUaaLPxEgAAAAM"]
[Fri Feb 27 04:29:41.438799 2026] [:error] [pid 5365:tid 5389] [client 173.239.214.7:27421] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Feb 27 04:29:41.744168 2026] [:error] [pid 5365:tid 5384] [client 173.239.214.7:27421] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Feb 27 04:29:41.983261 2026] [:error] [pid 5365:tid 5384] [client 173.239.214.7:27421] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Fri Feb 27 04:29:43.273771 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.7:27421] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Feb 27 04:29:43.556909 2026] [:error] [pid 5365:tid 5391] [client 173.239.214.7:27421] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Feb 27 04:29:44.038772 2026] [:error] [pid 5365:tid 5384] [client 173.239.214.7:27421] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Fri Feb 27 04:29:44.823038 2026] [:error] [pid 5365:tid 5369] [client 173.239.214.7:27421] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Feb 27 04:29:45.151884 2026] [:error] [pid 5365:tid 5368] [client 173.239.214.7:27421] [client 173.239.214.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaCtOZYAa8J3tYxdG3z2jgAAAQE"]
[Fri Feb 27 04:29:45.268376 2026] [:error] [pid 3973:tid 4003] [client 182.44.10.67:49327] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaCtOYJZsftwqmUaaLPxagAAABQ"]
[Fri Feb 27 04:29:45.697686 2026] [:error] [pid 21329:tid 21394] [client 173.239.214.6:49173] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaCtOZvQWnde-MjcQ1FI8gAAAUs"]
[Fri Feb 27 04:29:46.190266 2026] [:error] [pid 4081:tid 4092] [client 173.239.214.4:22645] [client 173.239.214.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.214.4, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaCtOg55mnr35z8h7t3UWAAAAMk"]
[Fri Feb 27 04:29:46.209335 2026] [:error] [pid 4081:tid 4092] [client 173.239.214.4:22645] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 04:29:46.491746 2026] [:error] [pid 4081:tid 4103] [client 173.239.214.4:22645] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Feb 27 04:29:46.756439 2026] [:error] [pid 4081:tid 4107] [client 173.239.214.4:22645] [client 173.239.214.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaCtOg55mnr35z8h7t3UZQAAANg"]
[Fri Feb 27 04:29:47.675120 2026] [:error] [pid 5365:tid 5390] [client 185.198.240.146:57065] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Feb 27 04:29:47.946079 2026] [:error] [pid 5365:tid 5390] [client 185.198.240.146:57065] [client 185.198.240.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaCtO5YAa8J3tYxdG3z3FwAAARc"]
[Fri Feb 27 04:29:48.577168 2026] [:error] [pid 5365:tid 5373] [client 173.239.214.25:55067] [client 173.239.214.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaCtPJYAa8J3tYxdG3z3NgAAAQY"]
[Fri Feb 27 04:29:50.171209 2026] [:error] [pid 5365:tid 5386] [client 185.198.240.156:61107] [client 185.198.240.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaCtPpYAa8J3tYxdG3z3hQAAARM"]
[Fri Feb 27 04:29:50.743700 2026] [:error] [pid 5365:tid 5387] [client 173.239.214.18:61317] [client 173.239.214.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aaCtPpYAa8J3tYxdG3z3ngAAARQ"]
[Fri Feb 27 04:29:52.008160 2026] [:error] [pid 3974:tid 4057] [client 173.239.214.6:22365] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Feb 27 04:29:52.599183 2026] [:error] [pid 3974:tid 4047] [client 173.239.214.6:22365] [client 173.239.214.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaCtQHp-fQtdOYjkuFvR8gAAAEo"]
[Fri Feb 27 04:30:12.017907 2026] [:error] [pid 3974:tid 4055] [client 185.198.240.147:42753] [client 185.198.240.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/dist/"] [unique_id "aaCtU3p-fQtdOYjkuFvT7AAAAFI"]
[Fri Feb 27 05:26:27.921858 2026] [:error] [pid 42563:tid 42580] [client 20.48.233.148:8286] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaC6g3KL5BclZy73IRHGoQAAAco"]
[Fri Feb 27 05:26:29.360624 2026] [:error] [pid 42658:tid 42674] [client 20.48.233.148:8306] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Feb 27 05:26:29.576336 2026] [:error] [pid 42658:tid 42671] [client 20.48.233.148:8306] File does not exist: /usr/local/apache/htdocs/suspended-page/depotcv.php
[Fri Feb 27 05:26:29.834922 2026] [:error] [pid 42658:tid 42667] [client 20.48.233.148:8306] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Fri Feb 27 05:26:30.158987 2026] [:error] [pid 42658:tid 42665] [client 20.48.233.148:8306] File does not exist: /usr/local/apache/htdocs/suspended-page/fi2.php
[Fri Feb 27 05:26:30.370338 2026] [:error] [pid 42658:tid 42675] [client 20.48.233.148:8306] File does not exist: /usr/local/apache/htdocs/suspended-page/n.php
[Fri Feb 27 05:26:30.618342 2026] [:error] [pid 42658:tid 42670] [client 20.48.233.148:8306] File does not exist: /usr/local/apache/htdocs/suspended-page/colors.php
[Fri Feb 27 05:26:30.895315 2026] [:error] [pid 42658:tid 42679] [client 20.48.233.148:8306] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaC6hozcoYl3nRbu1jZroAAAAhM"]
[Fri Feb 27 05:26:32.452895 2026] [:error] [pid 42563:tid 42584] [client 20.48.233.148:8315] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwsi.php
[Fri Feb 27 05:26:32.922619 2026] [:error] [pid 42563:tid 42585] [client 20.48.233.148:8315] [client 20.48.233.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aaC6iHKL5BclZy73IRHGqQAAAc8"]
[Fri Feb 27 05:26:35.225851 2026] [:error] [pid 42435:tid 42440] [client 20.48.233.148:8678] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Feb 27 05:26:35.718554 2026] [:error] [pid 42435:tid 42455] [client 20.48.233.148:8678] File does not exist: /usr/local/apache/htdocs/suspended-page/contact_tpl.php
[Fri Feb 27 05:26:35.969167 2026] [:error] [pid 42435:tid 42445] [client 20.48.233.148:8678] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaC6ix5hHLnaukp_y9-MFwAAAYU"]
[Fri Feb 27 05:26:37.278300 2026] [:error] [pid 42658:tid 42675] [client 20.48.233.148:8277] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaC6jYzcoYl3nRbu1jZrrAAAAg8"]
[Fri Feb 27 05:26:38.712369 2026] [:error] [pid 3974:tid 4054] [client 20.48.233.148:8310] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaC6jnp-fQtdOYjkuFve7gAAAFE"]
[Fri Feb 27 05:26:41.104147 2026] [:error] [pid 42563:tid 42588] [client 20.48.233.148:8640] [client 20.48.233.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/MYK4TJEfFvO.php"] [unique_id "aaC6kXKL5BclZy73IRHGrwAAAdI"]
[Fri Feb 27 05:43:14.767695 2026] [:error] [pid 5365:tid 5376] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/aigcpsba.php
[Fri Feb 27 05:43:14.982620 2026] [:error] [pid 5365:tid 5367] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/aqmpjaid.php
[Fri Feb 27 05:43:15.195526 2026] [:error] [pid 5365:tid 5372] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/ivnnopon.php
[Fri Feb 27 05:43:15.406862 2026] [:error] [pid 5365:tid 5387] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Fri Feb 27 05:43:15.931465 2026] [:error] [pid 5365:tid 5377] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Fri Feb 27 05:43:16.359172 2026] [:error] [pid 5365:tid 5368] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri Feb 27 05:43:17.052446 2026] [:error] [pid 5365:tid 5373] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/nf.php
[Fri Feb 27 05:43:17.278893 2026] [:error] [pid 5365:tid 5378] [client 4.205.37.160:47091] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Fri Feb 27 06:03:46.912268 2026] [:error] [pid 21329:tid 21403] [client 194.99.26.161:43655] [client 194.99.26.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.99.26.161, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDDQpvQWnde-MjcQ1FmAQAAAVQ"]
[Fri Feb 27 06:03:46.920052 2026] [:error] [pid 21329:tid 21403] [client 194.99.26.161:43655] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 06:03:48.298640 2026] [:error] [pid 21329:tid 21405] [client 194.99.26.161:55827] [client 194.99.26.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.99.26.161, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDDRJvQWnde-MjcQ1FmBgAAAVY"]
[Fri Feb 27 06:03:48.304084 2026] [:error] [pid 21329:tid 21405] [client 194.99.26.161:55827] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 06:03:49.686914 2026] [:error] [pid 42563:tid 42583] [client 194.99.26.161:14699] [client 194.99.26.161] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.99.26.161, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDDRXKL5BclZy73IRHSBwAAAc0"]
[Fri Feb 27 06:03:49.693000 2026] [:error] [pid 42563:tid 42583] [client 194.99.26.161:14699] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 06:03:51.408561 2026] [:error] [pid 42658:tid 42676] [client 157.22.17.170:18497] [client 157.22.17.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.22.17.170, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaDDR4zcoYl3nRbu1jZ5HAAAAhA"]
[Fri Feb 27 06:03:51.413186 2026] [:error] [pid 42658:tid 42676] [client 157.22.17.170:18497] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 06:07:18.021634 2026] [:error] [pid 5365:tid 5375] [client 185.202.108.234:15343] [client 185.202.108.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.202.108.234, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDEFpYAa8J3tYxdG3xRbQAAAQg"]
[Fri Feb 27 06:07:18.026891 2026] [:error] [pid 5365:tid 5375] [client 185.202.108.234:15343] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 06:07:19.349865 2026] [:error] [pid 42658:tid 42671] [client 185.202.108.234:18533] [client 185.202.108.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.202.108.234, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDEF4zcoYl3nRbu1jZ6cgAAAgs"]
[Fri Feb 27 06:07:19.354069 2026] [:error] [pid 42658:tid 42671] [client 185.202.108.234:18533] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 06:07:20.712878 2026] [:error] [pid 42658:tid 42683] [client 185.202.108.234:54155] [client 185.202.108.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.202.108.234, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaDEGIzcoYl3nRbu1jZ6eAAAAhc"]
[Fri Feb 27 06:07:20.717826 2026] [:error] [pid 42658:tid 42683] [client 185.202.108.234:54155] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 06:07:22.415637 2026] [:error] [pid 5365:tid 5386] [client 193.202.82.224:31395] [client 193.202.82.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.202.82.224, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaDEGpYAa8J3tYxdG3xRfAAAARM"]
[Fri Feb 27 06:07:22.419282 2026] [:error] [pid 5365:tid 5386] [client 193.202.82.224:31395] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 06:13:16.857966 2026] [:error] [pid 42658:tid 42666] [client 43.157.148.38:38310] [client 43.157.148.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaDFfIzcoYl3nRbu1jZ9eQAAAgY"]
[Fri Feb 27 08:40:20.561520 2026] [:error] [pid 62998:tid 63026] [client 145.239.10.137:34756] File does not exist: /usr/local/apache/htdocs/suspended-page/tcb.php, referer: http://dbservices.com.au/tcb.php
[Fri Feb 27 08:47:07.846233 2026] [:error] [pid 62998:tid 63001] [client 43.153.79.218:43998] [client 43.153.79.218] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaDpi1QeueXZDUmoLom1pAAAAQA"]
[Fri Feb 27 10:51:54.635802 2026] [:error] [pid 54101:tid 54129] [client 101.42.46.71:40732] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaEGylY5qgRktcYTGFvPCwAAAdU"]
[Fri Feb 27 10:59:10.756130 2026] [:error] [pid 62998:tid 63021] [client 91.122.53.173:49250] [client 91.122.53.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aaEIflQeueXZDUmoLoksbwAAARM"]
[Fri Feb 27 11:03:20.386524 2026] [:error] [pid 56075:tid 56088] [client 64.64.108.44:48237] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Feb 27 11:03:21.644648 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.44:48237] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 11:03:22.068373 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.44:48237] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:03:22.536285 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.44:48237] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 27 11:03:23.046260 2026] [:error] [pid 56075:tid 56088] [client 64.64.108.44:48237] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 27 11:03:23.540705 2026] [:error] [pid 56075:tid 56099] [client 64.64.108.44:48237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Feb 27 11:03:24.040660 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.44:48237] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aaEJfMKBhrfI6KNv9RhuLgAAAAY"]
[Fri Feb 27 11:03:25.081911 2026] [:error] [pid 54103:tid 54177] [client 64.64.108.30:36837] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aaEJfevG4MPCmE0B2sAXwgAAAMY"]
[Fri Feb 27 11:03:26.088136 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.33:49305] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aaEJfni74D4fiYUm_Gf0_AAAAIo"]
[Fri Feb 27 11:03:27.457949 2026] [:error] [pid 54103:tid 54184] [client 64.64.108.48:32187] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aaEJf-vG4MPCmE0B2sAX2gAAAM0"]
[Fri Feb 27 11:03:28.382305 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.33:40073] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aaEJgOvG4MPCmE0B2sAX5QAAANU"]
[Fri Feb 27 11:03:30.546982 2026] [:error] [pid 54103:tid 54175] [client 64.64.108.53:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Feb 27 11:03:32.048711 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.53:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 11:03:32.545027 2026] [:error] [pid 54103:tid 54187] [client 64.64.108.53:26049] [client 64.64.108.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaEJhOvG4MPCmE0B2sAYFgAAANA"]
[Fri Feb 27 11:03:33.590941 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.41:32097] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaEJhVQeueXZDUmoLok1wgAAARc"]
[Fri Feb 27 11:03:35.165462 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Fri Feb 27 11:03:35.717825 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Fri Feb 27 11:03:36.280065 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Feb 27 11:03:36.750262 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Feb 27 11:03:37.265279 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Feb 27 11:03:37.671828 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Fri Feb 27 11:03:38.152316 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/lufix.php
[Fri Feb 27 11:03:38.667443 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Feb 27 11:03:39.286909 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Fri Feb 27 11:03:39.873870 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Feb 27 11:03:40.388681 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php
[Fri Feb 27 11:03:40.876763 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Feb 27 11:03:41.486340 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Feb 27 11:03:41.971610 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php
[Fri Feb 27 11:03:42.462560 2026] [:error] [pid 56075:tid 56092] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Fri Feb 27 11:03:43.037900 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Feb 27 11:03:43.559557 2026] [:error] [pid 56075:tid 56092] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Fri Feb 27 11:03:44.034745 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Feb 27 11:03:44.541104 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php
[Fri Feb 27 11:03:45.046982 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Feb 27 11:03:45.536033 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Fri Feb 27 11:03:46.040178 2026] [:error] [pid 56075:tid 56093] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Feb 27 11:03:46.556409 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Fri Feb 27 11:03:47.047607 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Feb 27 11:03:47.647724 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Feb 27 11:03:48.448817 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Feb 27 11:03:49.145599 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Feb 27 11:03:49.545821 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Fri Feb 27 11:03:49.956173 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php
[Fri Feb 27 11:03:50.640528 2026] [:error] [pid 56075:tid 56088] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Fri Feb 27 11:03:51.139183 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Fri Feb 27 11:03:51.561950 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Fri Feb 27 11:03:52.170234 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Feb 27 11:03:52.652432 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.35:48957] [client 64.64.108.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.35, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaEJmMKBhrfI6KNv9RhvngAAAAU"]
[Fri Feb 27 11:03:52.657314 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 11:03:53.852769 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Fri Feb 27 11:03:54.441897 2026] [:error] [pid 56075:tid 56083] [client 64.64.108.35:48957] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Feb 27 11:03:55.139477 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.35:48957] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aaEJm8KBhrfI6KNv9RhvwwAAAAQ"]
[Fri Feb 27 11:03:56.184905 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/olux.php
[Fri Feb 27 11:03:56.653211 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Feb 27 11:03:57.745996 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/uploader.php
[Fri Feb 27 11:03:58.369587 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/1337.php
[Fri Feb 27 11:03:59.041247 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Fri Feb 27 11:03:59.642797 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Fri Feb 27 11:04:00.140458 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/wxo.php
[Fri Feb 27 11:04:00.840825 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/amigo.php
[Fri Feb 27 11:04:01.355271 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/yoi.php
[Fri Feb 27 11:04:01.947423 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-contentt.php
[Fri Feb 27 11:04:02.436519 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/we1y8.php
[Fri Feb 27 11:04:04.259719 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Fri Feb 27 11:04:04.754605 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/post-data.php
[Fri Feb 27 11:04:05.269317 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/wsanon.php
[Fri Feb 27 11:04:09.246277 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/indo.php
[Fri Feb 27 11:04:09.656713 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/beence.php
[Fri Feb 27 11:04:10.145352 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/indosec.php
[Fri Feb 27 11:04:10.634711 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/archives.php
[Fri Feb 27 11:04:11.153535 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/po8sa.php
[Fri Feb 27 11:04:11.646763 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/thesmartestx.php
[Fri Feb 27 11:04:12.054729 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/zcanp.php
[Fri Feb 27 11:04:12.938533 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/pvt.php
[Fri Feb 27 11:04:13.454152 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Fri Feb 27 11:04:14.364069 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/crypted.php
[Fri Feb 27 11:04:14.937613 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/h0110w4y.php
[Fri Feb 27 11:04:15.459553 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/vesiw.php
[Fri Feb 27 11:04:16.042127 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Fri Feb 27 11:04:16.543314 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.40:37917] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-db.php
[Fri Feb 27 11:04:17.067795 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.40:37917] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aaEJsVQeueXZDUmoLok4bgAAAQ0"]
[Fri Feb 27 11:04:18.941681 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/lx.php
[Fri Feb 27 11:04:19.533904 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/tonant.php
[Fri Feb 27 11:04:20.053290 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/f0x.php
[Fri Feb 27 11:04:20.548633 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/config.bak.php
[Fri Feb 27 11:04:20.956911 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass403.php
[Fri Feb 27 11:04:21.542135 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Fri Feb 27 11:04:22.050340 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/allahnaber.php
[Fri Feb 27 11:04:22.537101 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/AK-74.php
[Fri Feb 27 11:04:23.053953 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa3.php
[Fri Feb 27 11:04:23.457699 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/alfaindex.php
[Fri Feb 27 11:04:23.866878 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Feb 27 11:04:24.340487 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/c99.php
[Fri Feb 27 11:04:24.848575 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/cmd.php
[Fri Feb 27 11:04:25.354722 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/cw.php
[Fri Feb 27 11:04:25.759381 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Fri Feb 27 11:04:26.233284 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/haxor.php
[Fri Feb 27 11:04:26.750381 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/icomsium.php
[Fri Feb 27 11:04:27.238900 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/ico.php
[Fri Feb 27 11:04:27.760482 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/leaf.php
[Fri Feb 27 11:04:28.238609 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Fri Feb 27 11:04:28.749686 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Fri Feb 27 11:04:29.235018 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 27 11:04:29.676668 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/priv8.php
[Fri Feb 27 11:04:30.177119 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/pws.php
[Fri Feb 27 11:04:30.681856 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/r57.php
[Fri Feb 27 11:04:31.259296 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Feb 27 11:04:31.749031 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/snd.php
[Fri Feb 27 11:04:32.177757 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Feb 27 11:04:32.646063 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/new-index.php
[Fri Feb 27 11:04:33.748337 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet-shell.php
[Fri Feb 27 11:04:34.234373 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Fri Feb 27 11:04:34.844460 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/xleetshell.php
[Fri Feb 27 11:04:35.834483 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/xlt.php
[Fri Feb 27 11:04:38.756240 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Feb 27 11:04:39.348685 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Feb 27 11:04:39.852266 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Fri Feb 27 11:04:40.346554 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.54:50537] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-pano.php
[Fri Feb 27 11:04:40.940641 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.54:50537] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaEJyFQeueXZDUmoLok58QAAAQk"]
[Fri Feb 27 11:04:41.982881 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.41:50701] [client 64.64.108.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.64.108.41, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaEJyeTvb5AeyJCdY7BgSAAAAE0"]
[Fri Feb 27 11:04:41.986903 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.41:50701] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Feb 27 11:04:42.841355 2026] [:error] [pid 54231:tid 54238] [client 64.64.108.41:50701] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Fri Feb 27 11:04:43.849251 2026] [:error] [pid 54231:tid 54247] [client 64.64.108.41:50701] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaEJy-Tvb5AeyJCdY7BgWgAAAE0"]
[Fri Feb 27 11:04:44.890017 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.47:32605] File does not exist: /usr/local/apache/htdocs/suspended-page/WSOEnigma.php
[Fri Feb 27 11:04:47.646158 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.47:32605] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 11:04:48.737881 2026] [:error] [pid 54103:tid 54174] [client 64.64.108.47:32605] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri Feb 27 11:04:49.149221 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.47:32605] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaEJ0evG4MPCmE0B2sAauAAAANc"]
[Fri Feb 27 11:04:50.173875 2026] [:error] [pid 54103:tid 54170] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Fri Feb 27 11:04:50.740285 2026] [:error] [pid 54103:tid 54195] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Fri Feb 27 11:04:51.247045 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Fri Feb 27 11:04:53.254027 2026] [:error] [pid 54103:tid 54182] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Fri Feb 27 11:04:53.748248 2026] [:error] [pid 54103:tid 54189] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 11:04:54.239254 2026] [:error] [pid 54103:tid 54180] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 11:04:54.758795 2026] [:error] [pid 54103:tid 54172] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-add.php
[Fri Feb 27 11:04:56.861225 2026] [:error] [pid 54103:tid 54195] [client 64.64.108.17:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 27 11:04:57.857699 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.17:31645] [client 64.64.108.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaEJ2evG4MPCmE0B2sAbJQAAANc"]
[Fri Feb 27 11:04:58.877251 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.32:55841] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaEJ2vnSUDZue59Px9tS6wAAAU0"]
[Fri Feb 27 11:04:59.867235 2026] [:error] [pid 54102:tid 54146] [client 64.64.108.60:61149] [client 64.64.108.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaEJ23i74D4fiYUm_Gf4iwAAAII"]
[Fri Feb 27 11:05:01.276685 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.30:22447] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaEJ3cKBhrfI6KNv9RhyfwAAABc"]
[Fri Feb 27 11:05:05.089402 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.43:58817] File does not exist: /usr/local/apache/htdocs/suspended-page/text.php
[Fri Feb 27 11:05:05.747757 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.43:58817] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Fri Feb 27 11:05:06.733899 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.43:58817] [client 64.64.108.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.43, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aaEJ4vnSUDZue59Px9tTEQAAAVc"]
[Fri Feb 27 11:05:09.737112 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.43:58817] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Feb 27 11:05:10.842977 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.43:58817] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Feb 27 11:05:13.833998 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.43:58817] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaEJ6fnSUDZue59Px9tTdgAAAUg"]
[Fri Feb 27 11:05:14.784239 2026] [:error] [pid 56075:tid 56102] [client 64.64.108.27:38325] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Feb 27 11:05:16.251128 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.27:38325] [client 64.64.108.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.27, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaEJ7MKBhrfI6KNv9RhzDgAAABI"]
[Fri Feb 27 11:05:16.743210 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.27:38325] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Fri Feb 27 11:05:17.734610 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.27:38325] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Feb 27 11:05:18.253425 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.27:38325] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php
[Fri Feb 27 11:05:19.350242 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.27:38325] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 27 11:05:19.848979 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.27:38325] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Feb 27 11:05:20.344666 2026] [:error] [pid 56075:tid 56100] [client 64.64.108.27:38325] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEJ8MKBhrfI6KNv9RhzPAAAABY"]
[Fri Feb 27 11:05:24.488281 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.46:46151] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "aaEJ9MKBhrfI6KNv9RhzZwAAAAc"]
[Fri Feb 27 11:05:25.496973 2026] [:error] [pid 54103:tid 54180] [client 64.64.108.52:53585] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen-667.php
[Fri Feb 27 11:05:30.241923 2026] [:error] [pid 54103:tid 54180] [client 64.64.108.52:53585] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Fri Feb 27 11:05:30.835900 2026] [:error] [pid 54103:tid 54184] [client 64.64.108.52:53585] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Feb 27 11:05:31.854121 2026] [:error] [pid 54103:tid 54182] [client 64.64.108.52:53585] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Fri Feb 27 11:05:37.354524 2026] [:error] [pid 54103:tid 54181] [client 64.64.108.52:53585] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aaEKAevG4MPCmE0B2sAc1QAAAMo"]
[Fri Feb 27 11:05:38.314273 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.29:29729] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Feb 27 11:05:38.836787 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.29:29729] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Fri Feb 27 11:05:39.850335 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.29:29729] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaEKA1QeueXZDUmoLok91wAAARc"]
[Fri Feb 27 11:05:46.154057 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.43:39527] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aaEKCvnSUDZue59Px9tUzAAAAUE"]
[Fri Feb 27 11:05:47.085526 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.41:20397] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Feb 27 11:05:47.649180 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.41:20397] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaEKC1QeueXZDUmoLok-SAAAARM"]
[Fri Feb 27 11:05:49.851085 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.51:55229] File does not exist: /usr/local/apache/htdocs/suspended-page/cron.php
[Fri Feb 27 11:05:50.857410 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.51:55229] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Feb 27 11:05:51.353778 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.51:55229] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aaEKD1QeueXZDUmoLok-cwAAAQk"]
[Fri Feb 27 11:05:52.281535 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.39:25887] [client 64.64.108.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaEKEOTvb5AeyJCdY7BjTgAAAEg"]
[Fri Feb 27 11:05:53.223734 2026] [:error] [pid 54102:tid 54165] [client 64.64.108.59:45007] [client 64.64.108.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.59, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aaEKEXi74D4fiYUm_Gf6uQAAAJU"]
[Fri Feb 27 11:05:53.743072 2026] [:error] [pid 54102:tid 54149] [client 64.64.108.59:45007] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Feb 27 11:05:54.750406 2026] [:error] [pid 54102:tid 54149] [client 64.64.108.59:45007] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aaEKEni74D4fiYUm_Gf6ywAAAIU"]
[Fri Feb 27 11:05:55.778009 2026] [:error] [pid 54102:tid 54155] [client 64.64.108.21:34353] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:05:56.853809 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.21:34353] File does not exist: /usr/local/apache/htdocs/suspended-page/back.php
[Fri Feb 27 11:05:58.944516 2026] [:error] [pid 54102:tid 54164] [client 64.64.108.21:34353] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aaEKFni74D4fiYUm_Gf7CwAAAJQ"]
[Fri Feb 27 11:06:00.000262 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.61:23643] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Feb 27 11:06:01.048695 2026] [:error] [pid 54103:tid 54194] [client 64.64.108.61:23643] [client 64.64.108.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aaEKGevG4MPCmE0B2sAeBQAAANc"]
[Fri Feb 27 11:06:02.843313 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.45:63865] File does not exist: /usr/local/apache/htdocs/suspended-page/phpfm3.php
[Fri Feb 27 11:06:03.339822 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.45:63865] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aaEKG_nSUDZue59Px9tVuwAAAUE"]
[Fri Feb 27 11:06:05.643051 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.42:33329] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Fri Feb 27 11:06:06.050625 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.42:33329] [client 64.64.108.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.42, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aaEKHvnSUDZue59Px9tWAwAAAVA"]
[Fri Feb 27 11:06:07.546775 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.42:33329] [client 64.64.108.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaEKH_nSUDZue59Px9tWGQAAAUE"]
[Fri Feb 27 11:06:08.616884 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.58:28065] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaEKIOTvb5AeyJCdY7Bj2wAAAEk"]
[Fri Feb 27 11:06:11.177041 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.54:52295] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Fri Feb 27 11:06:12.642693 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.54:52295] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Fri Feb 27 11:06:13.572779 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.54:52295] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Feb 27 11:06:14.066424 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.54:52295] File does not exist: /usr/local/apache/htdocs/suspended-page/zip.php
[Fri Feb 27 11:06:15.043511 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.54:52295] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaEKJ_nSUDZue59Px9tWegAAAVA"]
[Fri Feb 27 11:06:17.043309 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.25:41505] [client 64.64.108.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaEKKcKBhrfI6KNv9Rh14AAAAA0"]
[Fri Feb 27 11:06:18.177557 2026] [:error] [pid 49306:tid 49332] [client 64.64.108.46:57657] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaEKKvnSUDZue59Px9tWnAAAAVg"]
[Fri Feb 27 11:06:19.377130 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.45:28287] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aaEKK1QeueXZDUmoLok_5QAAAQo"]
[Fri Feb 27 11:06:20.380206 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.16:47989] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaEKLFQeueXZDUmoLok_-QAAAQ8"]
[Fri Feb 27 11:06:23.655306 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.37:39335] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Feb 27 11:06:24.140961 2026] [:error] [pid 49306:tid 49309] [client 64.64.108.37:39335] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aaEKMPnSUDZue59Px9tXAQAAAUE"]
[Fri Feb 27 11:06:25.845737 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.16:31053] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Feb 27 11:06:26.441291 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.16:31053] File does not exist: /usr/local/apache/htdocs/suspended-page/rcc.php
[Fri Feb 27 11:06:27.049193 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.16:31053] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaEKM1QeueXZDUmoLolAeAAAAQI"]
[Fri Feb 27 11:06:28.306545 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.41:25319] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Fri Feb 27 11:06:28.968777 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.41:25319] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Fri Feb 27 11:06:29.439496 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.41:25319] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaEKNVQeueXZDUmoLolAnwAAAQU"]
[Fri Feb 27 11:06:30.377689 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.34:21547] File does not exist: /usr/local/apache/htdocs/suspended-page/history.php
[Fri Feb 27 11:06:30.848270 2026] [:error] [pid 62998:tid 63011] [client 64.64.108.34:21547] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aaEKNlQeueXZDUmoLolAvQAAAQk"]
[Fri Feb 27 11:06:33.335857 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.41:63311] [client 64.64.108.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaEKOfnSUDZue59Px9tXugAAAUA"]
[Fri Feb 27 11:06:34.486023 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.52:46993] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aaEKOsKBhrfI6KNv9Rh2uAAAAAw"]
[Fri Feb 27 11:06:36.044315 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.49:54281] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aaEKPHi74D4fiYUm_Gf8ewAAAIE"]
[Fri Feb 27 11:06:37.281901 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.19:43309] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 11:06:38.466215 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.19:43309] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Feb 27 11:06:38.855417 2026] [:error] [pid 54101:tid 54110] [client 64.64.108.19:43309] [client 64.64.108.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.19, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aaEKPlY5qgRktcYTGFvZsAAAAcI"]
[Fri Feb 27 11:06:39.753503 2026] [:error] [pid 54101:tid 54119] [client 64.64.108.19:43309] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aaEKP1Y5qgRktcYTGFvZswAAAcs"]
[Fri Feb 27 11:06:40.872987 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.48:52459] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaEKQMKBhrfI6KNv9Rh3DgAAAAo"]
[Fri Feb 27 11:06:41.885185 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.34:59765] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Feb 27 11:06:42.360581 2026] [:error] [pid 62998:tid 63015] [client 64.64.108.34:59765] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Feb 27 11:06:45.350531 2026] [:error] [pid 54231:tid 54243] [client 64.64.108.23:28709] File does not exist: /usr/local/apache/htdocs/suspended-page/login.php
[Fri Feb 27 11:06:47.140955 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.23:28709] [client 64.64.108.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.23, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aaEKR-Tvb5AeyJCdY7BlhAAAAFY"]
[Fri Feb 27 11:06:47.651985 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.23:28709] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaEKR-Tvb5AeyJCdY7BliQAAAEg"]
[Fri Feb 27 11:06:55.780357 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.48:31583] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aaEKT8KBhrfI6KNv9Rh3yAAAABA"]
[Fri Feb 27 11:06:56.770155 2026] [:error] [pid 54102:tid 54155] [client 64.64.108.27:52677] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaEKUHi74D4fiYUm_Gf9SQAAAIs"]
[Fri Feb 27 11:06:59.570916 2026] [:error] [pid 54102:tid 54159] [client 64.64.108.38:45997] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Fri Feb 27 11:07:00.136714 2026] [:error] [pid 54102:tid 54158] [client 64.64.108.38:45997] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aaEKVHi74D4fiYUm_Gf9bwAAAI4"]
[Fri Feb 27 11:07:01.754754 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.37:35413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Fri Feb 27 11:07:03.350865 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.37:35413] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaEKV_nSUDZue59Px9tZOgAAAVM"]
[Fri Feb 27 11:07:05.045478 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.52:37571] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Feb 27 11:07:06.340254 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.52:37571] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Feb 27 11:07:06.748333 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.52:37571] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaEKWlQeueXZDUmoLolCnAAAARA"]
[Fri Feb 27 11:07:08.260205 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.32:64849] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Fri Feb 27 11:07:09.540696 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.32:64849] [client 64.64.108.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaEKXcKBhrfI6KNv9Rh4RgAAAAE"]
[Fri Feb 27 11:07:11.057179 2026] [:error] [pid 54231:tid 54241] [client 64.64.108.37:49199] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Feb 27 11:07:12.640196 2026] [:error] [pid 54231:tid 54256] [client 64.64.108.37:49199] [client 64.64.108.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaEKYOTvb5AeyJCdY7BmPgAAAFY"]
[Fri Feb 27 11:07:14.147227 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.63:24699] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaEKYvnSUDZue59Px9tZlQAAAVI"]
[Fri Feb 27 11:07:15.087557 2026] [:error] [pid 54101:tid 54128] [client 64.64.108.15:34441] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aaEKY1Y5qgRktcYTGFvbQgAAAdQ"]
[Fri Feb 27 11:07:16.177169 2026] [:error] [pid 54103:tid 54190] [client 64.64.108.54:47735] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaEKZOvG4MPCmE0B2sAgigAAANM"]
[Fri Feb 27 11:07:17.767024 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.26:49215] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaEKZVQeueXZDUmoLolDNwAAAQU"]
[Fri Feb 27 11:07:19.144209 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.19:37151] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaEKZ1QeueXZDUmoLolDXgAAAQg"]
[Fri Feb 27 11:07:21.345258 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.27:50061] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaEKafnSUDZue59Px9taEwAAAUM"]
[Fri Feb 27 11:07:22.962755 2026] [:error] [pid 54103:tid 54172] [client 64.64.108.31:32285] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Feb 27 11:07:24.151895 2026] [:error] [pid 54103:tid 54178] [client 64.64.108.31:32285] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaEKbOvG4MPCmE0B2sAgtgAAAMc"]
[Fri Feb 27 11:07:29.316151 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.40:21783] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-post.php
[Fri Feb 27 11:07:29.861821 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.40:21783] File does not exist: /usr/local/apache/htdocs/suspended-page/conf_upload.php
[Fri Feb 27 11:07:30.478853 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.40:21783] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaEKcvnSUDZue59Px9taigAAAUk"]
[Fri Feb 27 11:07:32.847241 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.27:35325] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaEKdFQeueXZDUmoLolEpQAAARE"]
[Fri Feb 27 11:07:33.685248 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.16:46477] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Fri Feb 27 11:07:35.255598 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.16:46477] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Feb 27 11:07:35.845571 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.16:46477] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aaEKd1Y5qgRktcYTGFvb5wAAAdA"]
[Fri Feb 27 11:07:37.452759 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.29:24675] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Feb 27 11:07:38.744513 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.29:24675] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri Feb 27 11:07:39.245657 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.29:24675] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Feb 27 11:07:40.958806 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.29:24675] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Fri Feb 27 11:07:41.456624 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.29:24675] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaEKfVQeueXZDUmoLolFvAAAAQo"]
[Fri Feb 27 11:07:44.277469 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.33:56793] File does not exist: /usr/local/apache/htdocs/suspended-page/woh.php
[Fri Feb 27 11:07:44.853186 2026] [:error] [pid 49306:tid 49328] [client 64.64.108.33:56793] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aaEKgPnSUDZue59Px9tbQAAAAVQ"]
[Fri Feb 27 11:07:45.874653 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.38:31017] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaEKgVQeueXZDUmoLolGIQAAAQo"]
[Fri Feb 27 11:07:46.887590 2026] [:error] [pid 52073:tid 52076] [client 64.64.108.33:38869] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Feb 27 11:07:47.451894 2026] [:error] [pid 52073:tid 52083] [client 64.64.108.33:38869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Feb 27 11:07:47.951728 2026] [:error] [pid 52073:tid 52085] [client 64.64.108.33:38869] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Feb 27 11:07:48.451408 2026] [:error] [pid 52073:tid 52088] [client 64.64.108.33:38869] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aaEKhIa650YPyxXVeRZRwgAAAYw"]
[Fri Feb 27 11:07:49.377007 2026] [:error] [pid 54101:tid 54108] [client 64.64.108.52:52223] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaEKhVY5qgRktcYTGFvcXQAAAcA"]
[Fri Feb 27 11:07:50.296592 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.22:62939] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Feb 27 11:07:50.869688 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.22:62939] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Fri Feb 27 11:07:51.357407 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.22:62939] File does not exist: /usr/local/apache/htdocs/suspended-page/sck.php
[Fri Feb 27 11:07:51.830467 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.22:62939] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aaEKh1QeueXZDUmoLolGfQAAAQU"]
[Fri Feb 27 11:07:53.437837 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.22:46109] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Fri Feb 27 11:07:53.951047 2026] [:error] [pid 62998:tid 63012] [client 64.64.108.22:46109] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 11:07:54.530164 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.22:46109] [client 64.64.108.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaEKilQeueXZDUmoLolG5AAAAQw"]
[Fri Feb 27 11:07:56.043722 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.19:64531] [client 64.64.108.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.19, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaEKjFY5qgRktcYTGFvczAAAAdY"]
[Fri Feb 27 11:07:56.648138 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.19:64531] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Fri Feb 27 11:07:57.149167 2026] [:error] [pid 54101:tid 54130] [client 64.64.108.19:64531] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaEKjVY5qgRktcYTGFvc3gAAAdY"]
[Fri Feb 27 11:07:58.315557 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.40:58013] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaEKjlQeueXZDUmoLolHLQAAARY"]
[Fri Feb 27 11:07:59.964682 2026] [:error] [pid 54103:tid 54170] [client 64.64.108.15:49955] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:08:00.561533 2026] [:error] [pid 54103:tid 54170] [client 64.64.108.15:49955] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php
[Fri Feb 27 11:08:01.052545 2026] [:error] [pid 54103:tid 54182] [client 64.64.108.15:49955] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aaEKkevG4MPCmE0B2sAiVwAAAMs"]
[Fri Feb 27 11:08:02.192756 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.58:58801] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Fri Feb 27 11:08:02.662773 2026] [:error] [pid 54101:tid 54118] [client 64.64.108.58:58801] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aaEKklY5qgRktcYTGFvdCAAAAco"]
[Fri Feb 27 11:08:04.182845 2026] [:error] [pid 54101:tid 54132] [client 64.64.108.27:36605] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Feb 27 11:08:04.751904 2026] [:error] [pid 54101:tid 54113] [client 64.64.108.27:36605] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Feb 27 11:08:07.477735 2026] [:error] [pid 54101:tid 54124] [client 64.64.108.27:36605] File does not exist: /usr/local/apache/htdocs/suspended-page/product.php
[Fri Feb 27 11:08:08.430231 2026] [:error] [pid 54101:tid 54119] [client 64.64.108.27:36605] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aaEKmFY5qgRktcYTGFvdQAAAAcs"]
[Fri Feb 27 11:08:09.678572 2026] [:error] [pid 54101:tid 54120] [client 64.64.108.54:58011] File does not exist: /usr/local/apache/htdocs/suspended-page/base.php
[Fri Feb 27 11:08:10.698020 2026] [:error] [pid 54101:tid 54122] [client 64.64.108.54:58011] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Fri Feb 27 11:08:11.249214 2026] [:error] [pid 54101:tid 54120] [client 64.64.108.54:58011] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Feb 27 11:08:17.133727 2026] [:error] [pid 54101:tid 54123] [client 64.64.108.54:58011] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-set.php
[Fri Feb 27 11:08:17.745519 2026] [:error] [pid 54101:tid 54111] [client 64.64.108.54:58011] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 11:08:19.283927 2026] [:error] [pid 54101:tid 54118] [client 64.64.108.54:58011] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aaEKo1Y5qgRktcYTGFvdlwAAAco"]
[Fri Feb 27 11:08:20.399081 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.47:26301] [client 64.64.108.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.47, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aaEKpPnSUDZue59Px9tdEAAAAUM"]
[Fri Feb 27 11:08:21.052271 2026] [:error] [pid 49306:tid 49314] [client 64.64.108.47:26301] [client 64.64.108.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aaEKpfnSUDZue59Px9tdIQAAAUY"]
[Fri Feb 27 11:08:25.438904 2026] [:error] [pid 54231:tid 54251] [client 64.64.108.49:26971] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Feb 27 11:08:26.638935 2026] [:error] [pid 54231:tid 54249] [client 64.64.108.49:26971] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaEKquTvb5AeyJCdY7BpJAAAAE8"]
[Fri Feb 27 11:08:28.542596 2026] [:error] [pid 52073:tid 52081] [client 64.64.108.45:20859] [client 64.64.108.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.45, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aaEKrIa650YPyxXVeRZTyAAAAYU"]
[Fri Feb 27 11:08:30.342309 2026] [:error] [pid 52073:tid 52081] [client 64.64.108.45:20859] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Fri Feb 27 11:08:30.844451 2026] [:error] [pid 52073:tid 52098] [client 64.64.108.45:20859] File does not exist: /usr/local/apache/htdocs/suspended-page/bulk.php
[Fri Feb 27 11:08:31.355312 2026] [:error] [pid 52073:tid 52096] [client 64.64.108.45:20859] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Fri Feb 27 11:08:32.359759 2026] [:error] [pid 52073:tid 52088] [client 64.64.108.45:20859] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logout.php
[Fri Feb 27 11:08:32.945129 2026] [:error] [pid 52073:tid 52084] [client 64.64.108.45:20859] [client 64.64.108.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaEKsIa650YPyxXVeRZT8gAAAYg"]
[Fri Feb 27 11:08:35.075255 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.51:35473] [client 64.64.108.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/packed.php"] [unique_id "aaEKs1QeueXZDUmoLolJ1QAAARg"]
[Fri Feb 27 11:08:36.193640 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.61:54135] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Feb 27 11:08:36.748092 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.61:54135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Feb 27 11:08:38.541068 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.61:54135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Fri Feb 27 11:08:38.961732 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.61:54135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-simple.php
[Fri Feb 27 11:08:41.957447 2026] [:error] [pid 54103:tid 54188] [client 64.64.108.66:59445] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/file.php"] [unique_id "aaEKuevG4MPCmE0B2sAkNQAAANE"]
[Fri Feb 27 11:08:43.638259 2026] [:error] [pid 54103:tid 54174] [client 64.64.108.30:37133] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaEKu-vG4MPCmE0B2sAkSQAAAMM"]
[Fri Feb 27 11:08:45.762972 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.15:49799] [client 64.64.108.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aaEKvVQeueXZDUmoLolKlQAAAQI"]
[Fri Feb 27 11:08:46.688378 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.56:48545] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Fri Feb 27 11:08:48.967798 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.56:48545] [client 64.64.108.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.56, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aaEKwFQeueXZDUmoLolK1AAAARA"]
[Fri Feb 27 11:08:49.449679 2026] [:error] [pid 62998:tid 63005] [client 64.64.108.56:48545] [client 64.64.108.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaEKwVQeueXZDUmoLolK3wAAAQM"]
[Fri Feb 27 11:08:52.259921 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.48:64257] File does not exist: /usr/local/apache/htdocs/suspended-page/header.php
[Fri Feb 27 11:08:52.846160 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.48:64257] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Fri Feb 27 11:08:53.942029 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.48:64257] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaEKxfnSUDZue59Px9tfEAAAAU8"]
[Fri Feb 27 11:08:55.000480 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.23:35315] [client 64.64.108.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aaEKxvnSUDZue59Px9tfGAAAAVE"]
[Fri Feb 27 11:08:56.105990 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.40:40799] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Fri Feb 27 11:08:59.544611 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.40:40799] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaEKy_nSUDZue59Px9tfNwAAAVU"]
[Fri Feb 27 11:09:00.588033 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.38:41523] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Feb 27 11:09:01.981787 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.38:41523] File does not exist: /usr/local/apache/htdocs/suspended-page/sym.php
[Fri Feb 27 11:09:03.137845 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.38:41523] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/votes.php"] [unique_id "aaEKz8KBhrfI6KNv9Rh8fwAAAAk"]
[Fri Feb 27 11:09:06.377082 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.52:42361] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Fri Feb 27 11:09:07.854980 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.52:42361] [client 64.64.108.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/file.php"] [unique_id "aaEK0-vG4MPCmE0B2sAlcAAAAMU"]
[Fri Feb 27 11:09:11.249037 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.43:48587] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aaEK18KBhrfI6KNv9Rh9CgAAABA"]
[Fri Feb 27 11:09:13.941773 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.36:45931] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Fri Feb 27 11:09:15.450477 2026] [:error] [pid 54101:tid 54115] [client 64.64.108.36:45931] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Feb 27 11:09:15.853746 2026] [:error] [pid 54101:tid 54114] [client 64.64.108.36:45931] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Fri Feb 27 11:09:16.356450 2026] [:error] [pid 54101:tid 54121] [client 64.64.108.36:45931] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aaEK3FY5qgRktcYTGFvfcgAAAc0"]
[Fri Feb 27 11:09:17.793152 2026] [:error] [pid 49306:tid 49326] [client 64.64.108.23:34337] File does not exist: /usr/local/apache/htdocs/suspended-page/fm1.php
[Fri Feb 27 11:09:19.539924 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.23:34337] [client 64.64.108.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aaEK3_nSUDZue59Px9tf1wAAAUU"]
[Fri Feb 27 11:09:20.418910 2026] [:error] [pid 54231:tid 54245] [client 64.64.108.33:46309] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-settings.php
[Fri Feb 27 11:09:20.847300 2026] [:error] [pid 54231:tid 54252] [client 64.64.108.33:46309] [client 64.64.108.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaEK4OTvb5AeyJCdY7BrEgAAAFI"]
[Fri Feb 27 11:09:21.812267 2026] [:error] [pid 62998:tid 63014] [client 64.64.108.63:48579] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Feb 27 11:09:22.285944 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.63:48579] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Fri Feb 27 11:09:22.858582 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.63:48579] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Feb 27 11:09:23.960570 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.63:48579] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi01.php
[Fri Feb 27 11:09:25.551152 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.63:48579] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/item.php"] [unique_id "aaEK5VQeueXZDUmoLolOegAAAQU"]
[Fri Feb 27 11:09:29.859898 2026] [:error] [pid 52073:tid 52076] [client 64.64.108.59:49521] [client 64.64.108.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.59, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aaEK6Ya650YPyxXVeRZWjwAAAYA"]
[Fri Feb 27 11:09:30.439474 2026] [:error] [pid 52073:tid 52089] [client 64.64.108.59:49521] [client 64.64.108.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.59, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaEK6oa650YPyxXVeRZWmgAAAY0"]
[Fri Feb 27 11:09:30.945137 2026] [:error] [pid 52073:tid 52084] [client 64.64.108.59:49521] [client 64.64.108.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/mani.php"] [unique_id "aaEK6oa650YPyxXVeRZWoAAAAYg"]
[Fri Feb 27 11:09:31.991654 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.62:26915] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Feb 27 11:09:37.153046 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.62:26915] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/network.php"] [unique_id "aaEK8VQeueXZDUmoLolPQwAAARE"]
[Fri Feb 27 11:09:38.205250 2026] [:error] [pid 54102:tid 54147] [client 64.64.108.44:50221] File does not exist: /usr/local/apache/htdocs/suspended-page/images.php
[Fri Feb 27 11:09:38.756447 2026] [:error] [pid 54102:tid 54160] [client 64.64.108.44:50221] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aespa.php
[Fri Feb 27 11:09:39.251495 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.44:50221] [client 64.64.108.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaEK83i74D4fiYUm_GcD6QAAAIE"]
[Fri Feb 27 11:09:43.746296 2026] [:error] [pid 49306:tid 49314] [client 64.64.108.16:32953] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aaEK9_nSUDZue59Px9tg-gAAAUY"]
[Fri Feb 27 11:09:45.360149 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.43:46469] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Feb 27 11:09:46.937708 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.43:46469] [client 64.64.108.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.43, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/wp-login.php"] [unique_id "aaEK-sKBhrfI6KNv9Rh--AAAABE"]
[Fri Feb 27 11:09:49.342964 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.43:46469] [client 64.64.108.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aaEK_cKBhrfI6KNv9Rh_DQAAAAU"]
[Fri Feb 27 11:09:50.295255 2026] [:error] [pid 56075:tid 56091] [client 64.64.108.34:60059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Feb 27 11:09:50.746754 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.34:60059] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aaEK_sKBhrfI6KNv9Rh_HgAAAAE"]
[Fri Feb 27 11:09:51.819971 2026] [:error] [pid 54231:tid 54252] [client 64.64.108.36:54515] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaEK_-Tvb5AeyJCdY7BsSQAAAFI"]
[Fri Feb 27 11:09:53.434626 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.62:43107] [client 64.64.108.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaELAVQeueXZDUmoLolQlQAAARM"]
[Fri Feb 27 11:09:58.432819 2026] [:error] [pid 52073:tid 52091] [client 64.64.108.18:64065] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aaELBoa650YPyxXVeRZYLgAAAY8"]
[Fri Feb 27 11:10:01.037780 2026] [:error] [pid 49306:tid 49319] [client 64.64.108.63:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Feb 27 11:10:03.684574 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.63:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Fri Feb 27 11:10:04.278595 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.63:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/cloud.php
[Fri Feb 27 11:10:04.851720 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.63:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Fri Feb 27 11:10:05.348845 2026] [:error] [pid 49306:tid 49310] [client 64.64.108.63:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Feb 27 11:10:06.354176 2026] [:error] [pid 49306:tid 49327] [client 64.64.108.63:20657] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Feb 27 11:10:08.055050 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.63:20657] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/radio.php"] [unique_id "aaELEPnSUDZue59Px9tijAAAAUU"]
[Fri Feb 27 11:10:09.738898 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.29:33631] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Fri Feb 27 11:10:10.248840 2026] [:error] [pid 62998:tid 63023] [client 64.64.108.29:33631] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Feb 27 11:10:10.744968 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.29:33631] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Feb 27 11:10:11.402025 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.29:33631] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_info.php
[Fri Feb 27 11:10:12.364315 2026] [:error] [pid 62998:tid 63017] [client 64.64.108.29:33631] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Fri Feb 27 11:10:12.954513 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.29:33631] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Fri Feb 27 11:10:14.039343 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.29:33631] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aaELFlQeueXZDUmoLolSFwAAARM"]
[Fri Feb 27 11:10:17.640465 2026] [:error] [pid 54102:tid 54168] [client 64.64.108.63:45677] [client 64.64.108.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaELGXi74D4fiYUm_GcFSQAAAJc"]
[Fri Feb 27 11:10:19.067819 2026] [:error] [pid 56075:tid 56081] [client 64.64.108.16:50611] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Feb 27 11:10:19.569465 2026] [:error] [pid 56075:tid 56082] [client 64.64.108.16:50611] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Fri Feb 27 11:10:20.193230 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.16:50611] File does not exist: /usr/local/apache/htdocs/suspended-page/google.php
[Fri Feb 27 11:10:21.161309 2026] [:error] [pid 56075:tid 56080] [client 64.64.108.16:50611] File does not exist: /usr/local/apache/htdocs/suspended-page/ovatools.php
[Fri Feb 27 11:10:21.668495 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.16:50611] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Fri Feb 27 11:10:22.152038 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.16:50611] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Fri Feb 27 11:10:22.646177 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.16:50611] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aaELHsKBhrfI6KNv9RiAPgAAABM"]
[Fri Feb 27 11:10:24.851864 2026] [:error] [pid 54101:tid 54122] [client 64.64.108.24:20287] [client 64.64.108.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aaELIFY5qgRktcYTGFviCAAAAc4"]
[Fri Feb 27 11:10:26.652126 2026] [:error] [pid 54102:tid 54163] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Fri Feb 27 11:10:27.265144 2026] [:error] [pid 54102:tid 54169] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Feb 27 11:10:27.758563 2026] [:error] [pid 54102:tid 54160] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Fri Feb 27 11:10:28.342129 2026] [:error] [pid 54102:tid 54168] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scripts.php
[Fri Feb 27 11:10:29.238350 2026] [:error] [pid 54102:tid 54161] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Feb 27 11:10:29.742661 2026] [:error] [pid 54102:tid 54144] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Fri Feb 27 11:10:30.377701 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/comfunctions.php
[Fri Feb 27 11:10:30.857655 2026] [:error] [pid 54102:tid 54147] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Fri Feb 27 11:10:31.453776 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Fri Feb 27 11:10:31.948150 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Feb 27 11:10:32.455584 2026] [:error] [pid 54102:tid 54159] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/hinfofuns.php
[Fri Feb 27 11:10:32.937380 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/qfunctions.php
[Fri Feb 27 11:10:33.455009 2026] [:error] [pid 54102:tid 54162] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/qinfofuns.php
[Fri Feb 27 11:10:33.969168 2026] [:error] [pid 54102:tid 54147] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Fri Feb 27 11:10:34.551753 2026] [:error] [pid 54102:tid 54168] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Fri Feb 27 11:10:35.047644 2026] [:error] [pid 54102:tid 54165] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Fri Feb 27 11:10:35.573466 2026] [:error] [pid 54102:tid 54155] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri Feb 27 11:10:36.152087 2026] [:error] [pid 54102:tid 54148] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Feb 27 11:10:36.644291 2026] [:error] [pid 54102:tid 54152] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/my-sites.php
[Fri Feb 27 11:10:37.170618 2026] [:error] [pid 54102:tid 54163] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Fri Feb 27 11:10:37.676470 2026] [:error] [pid 54102:tid 54158] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/nav-menus.php
[Fri Feb 27 11:10:38.193301 2026] [:error] [pid 54102:tid 54149] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Feb 27 11:10:38.742061 2026] [:error] [pid 54102:tid 54165] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/options-head.php
[Fri Feb 27 11:10:39.371626 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/revision.php
[Fri Feb 27 11:10:39.851605 2026] [:error] [pid 54102:tid 54168] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/widgets.php
[Fri Feb 27 11:10:40.594099 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Feb 27 11:10:41.264582 2026] [:error] [pid 54102:tid 54161] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Fri Feb 27 11:10:41.755014 2026] [:error] [pid 54102:tid 54159] [client 64.64.108.26:59887] File does not exist: /usr/local/apache/htdocs/suspended-page/moded.php
[Fri Feb 27 11:10:42.268926 2026] [:error] [pid 54102:tid 54145] [client 64.64.108.26:59887] [client 64.64.108.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aaELMni74D4fiYUm_GcGeQAAAIE"]
[Fri Feb 27 11:10:43.207093 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.43:26225] File does not exist: /usr/local/apache/htdocs/suspended-page/upgrade.php
[Fri Feb 27 11:10:43.764278 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.43:26225] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Fri Feb 27 11:10:44.365192 2026] [:error] [pid 49306:tid 49331] [client 64.64.108.43:26225] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Fri Feb 27 11:10:44.949810 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.43:26225] File does not exist: /usr/local/apache/htdocs/suspended-page/head.php
[Fri Feb 27 11:10:45.462213 2026] [:error] [pid 49306:tid 49328] [client 64.64.108.43:26225] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php
[Fri Feb 27 11:10:46.084993 2026] [:error] [pid 49306:tid 49328] [client 64.64.108.43:26225] File does not exist: /usr/local/apache/htdocs/suspended-page/theme-insqbzk.php
[Fri Feb 27 11:10:46.572809 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.43:26225] File does not exist: /usr/local/apache/htdocs/suspended-page/good.php
[Fri Feb 27 11:10:47.749383 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.43:26225] [client 64.64.108.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aaELN_nSUDZue59Px9tlXAAAAUw"]
[Fri Feb 27 11:10:48.697849 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.19:43403] File does not exist: /usr/local/apache/htdocs/suspended-page/main.php
[Fri Feb 27 11:10:49.941592 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.19:43403] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz.php
[Fri Feb 27 11:10:50.433986 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.19:43403] [client 64.64.108.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/css.php"] [unique_id "aaELOlQeueXZDUmoLolUmQAAAQc"]
[Fri Feb 27 11:10:57.667356 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.30:27707] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Fri Feb 27 11:11:03.356264 2026] [:error] [pid 49306:tid 49312] [client 64.64.108.30:27707] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wso112233.php"] [unique_id "aaELR_nSUDZue59Px9tmsgAAAUQ"]
[Fri Feb 27 11:11:04.578501 2026] [:error] [pid 52073:tid 52078] [client 64.64.108.58:63653] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/shell20211028.php"] [unique_id "aaELSIa650YPyxXVeRZbbQAAAYI"]
[Fri Feb 27 11:11:11.818251 2026] [:error] [pid 54101:tid 54109] [client 64.64.108.29:26183] [client 64.64.108.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/dropdown.php"] [unique_id "aaELT1Y5qgRktcYTGFvj7gAAAcE"]
[Fri Feb 27 11:11:13.638248 2026] [:error] [pid 54101:tid 54125] [client 64.64.108.66:56113] [client 64.64.108.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aaELUVY5qgRktcYTGFvkAgAAAdE"]
[Fri Feb 27 11:11:17.348800 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.21:55143] File does not exist: /usr/local/apache/htdocs/suspended-page/cache-compat.php
[Fri Feb 27 11:11:17.938783 2026] [:error] [pid 56075:tid 56094] [client 64.64.108.21:55143] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax-actions.php
[Fri Feb 27 11:11:19.193456 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.21:55143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-consar.php
[Fri Feb 27 11:11:23.447082 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.21:55143] [client 64.64.108.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/test.php"] [unique_id "aaELW8KBhrfI6KNv9RiCmwAAABI"]
[Fri Feb 27 11:11:24.495610 2026] [:error] [pid 54101:tid 54131] [client 64.64.108.46:22607] [client 64.64.108.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aaELXFY5qgRktcYTGFvkUAAAAdc"]
[Fri Feb 27 11:11:25.948452 2026] [:error] [pid 54231:tid 54242] [client 64.64.108.49:31047] [client 64.64.108.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/options.php"] [unique_id "aaELXeTvb5AeyJCdY7BvZQAAAEg"]
[Fri Feb 27 11:11:27.292738 2026] [:error] [pid 54231:tid 54240] [client 64.64.108.27:33801] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Fri Feb 27 11:11:29.032553 2026] [:error] [pid 54231:tid 54246] [client 64.64.108.27:33801] [client 64.64.108.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/gzdecode.php"] [unique_id "aaELYeTvb5AeyJCdY7BvjgAAAEw"]
[Fri Feb 27 11:11:30.171488 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.35:47733] [client 64.64.108.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-includes/atomlib.php"] [unique_id "aaELYuvG4MPCmE0B2sArCwAAAM4"]
[Fri Feb 27 11:11:32.360824 2026] [:error] [pid 62998:tid 63009] [client 64.64.108.16:64397] [client 64.64.108.16] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.16, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/images/wp-login.php"] [unique_id "aaELZFQeueXZDUmoLolX4gAAAQc"]
[Fri Feb 27 11:11:32.871172 2026] [:error] [pid 62998:tid 63021] [client 64.64.108.16:64397] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Feb 27 11:11:34.657853 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.16:64397] [client 64.64.108.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/plupload/wp-login.php"] [unique_id "aaELZlQeueXZDUmoLolYIAAAAQU"]
[Fri Feb 27 11:11:41.695870 2026] [:error] [pid 49306:tid 49325] [client 64.64.108.31:53195] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads-config.php
[Fri Feb 27 11:11:43.899007 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.31:53195] [client 64.64.108.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/themes.php"] [unique_id "aaELb_nSUDZue59Px9to2QAAAUc"]
[Fri Feb 27 11:11:44.998893 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.48:41865] [client 64.64.108.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aaELcFQeueXZDUmoLolZSwAAAQs"]
[Fri Feb 27 11:11:46.069722 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.38:36787] [client 64.64.108.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.38, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaELclQeueXZDUmoLolZdQAAAQY"]
[Fri Feb 27 11:11:46.558826 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.38:36787] [client 64.64.108.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-includes/admin-bar.php"] [unique_id "aaELclQeueXZDUmoLolZiAAAAQs"]
[Fri Feb 27 11:11:47.498401 2026] [:error] [pid 54102:tid 54147] [client 64.64.108.44:40603] File does not exist: /usr/local/apache/htdocs/suspended-page/indeex.php
[Fri Feb 27 11:11:48.036495 2026] [:error] [pid 54102:tid 54151] [client 64.64.108.44:40603] [client 64.64.108.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aaELdHi74D4fiYUm_GcIzwAAAIc"]
[Fri Feb 27 11:11:49.014170 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.36:52953] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 11:11:50.545208 2026] [:error] [pid 54103:tid 54186] [client 64.64.108.36:52953] [client 64.64.108.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/plugins.php"] [unique_id "aaELduvG4MPCmE0B2sAriQAAAM8"]
[Fri Feb 27 11:11:51.584135 2026] [:error] [pid 54102:tid 54159] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/bs.php
[Fri Feb 27 11:11:52.575900 2026] [:error] [pid 54102:tid 54156] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/credits.php
[Fri Feb 27 11:11:53.102462 2026] [:error] [pid 54102:tid 54149] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-comments.php
[Fri Feb 27 11:12:00.024926 2026] [:error] [pid 54102:tid 54149] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php
[Fri Feb 27 11:12:00.557342 2026] [:error] [pid 54102:tid 54154] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Fri Feb 27 11:12:01.133258 2026] [:error] [pid 54102:tid 54153] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Fri Feb 27 11:12:01.929337 2026] [:error] [pid 54102:tid 54152] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/load-scripts.php
[Fri Feb 27 11:12:02.570183 2026] [:error] [pid 54102:tid 54149] [client 64.64.108.44:45087] File does not exist: /usr/local/apache/htdocs/suspended-page/load-styles.php
[Fri Feb 27 11:12:02.962882 2026] [:error] [pid 54102:tid 54150] [client 64.64.108.44:45087] [client 64.64.108.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options-discussion.php"] [unique_id "aaELgni74D4fiYUm_GcJkgAAAIY"]
[Fri Feb 27 11:12:04.008934 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-discussion.php
[Fri Feb 27 11:12:04.651064 2026] [:error] [pid 49306:tid 49316] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php
[Fri Feb 27 11:12:05.156859 2026] [:error] [pid 49306:tid 49315] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-permalink.php
[Fri Feb 27 11:12:05.761232 2026] [:error] [pid 49306:tid 49314] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-privacy.php
[Fri Feb 27 11:12:06.257777 2026] [:error] [pid 49306:tid 49320] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Fri Feb 27 11:12:06.851719 2026] [:error] [pid 49306:tid 49311] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Fri Feb 27 11:12:07.458008 2026] [:error] [pid 49306:tid 49329] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/post-new.php
[Fri Feb 27 11:12:07.942889 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/privacy.php
[Fri Feb 27 11:12:08.451213 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Fri Feb 27 11:12:09.048630 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/site-health.php
[Fri Feb 27 11:12:09.555064 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/tools.php
[Fri Feb 27 11:12:10.171679 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Fri Feb 27 11:12:10.647407 2026] [:error] [pid 49306:tid 49322] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/user-edit.php
[Fri Feb 27 11:12:11.171319 2026] [:error] [pid 49306:tid 49308] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/user-new.php
[Fri Feb 27 11:12:11.756248 2026] [:error] [pid 49306:tid 49321] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/bar.php
[Fri Feb 27 11:12:12.353220 2026] [:error] [pid 49306:tid 49313] [client 64.64.108.36:20169] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Fri Feb 27 11:12:13.001195 2026] [:error] [pid 49306:tid 49323] [client 64.64.108.36:20169] [client 64.64.108.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webdb.php"] [unique_id "aaELjPnSUDZue59Px9tqiwAAAU8"]
[Fri Feb 27 11:12:14.221459 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Feb 27 11:12:14.679608 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Feb 27 11:12:15.256492 2026] [:error] [pid 62998:tid 63002] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Fri Feb 27 11:12:15.755408 2026] [:error] [pid 62998:tid 63019] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/km.php
[Fri Feb 27 11:12:16.359951 2026] [:error] [pid 62998:tid 63010] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/LA.php
[Fri Feb 27 11:12:16.837868 2026] [:error] [pid 62998:tid 63024] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Feb 27 11:12:17.459235 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ldd.php
[Fri Feb 27 11:12:18.054975 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/sgd.php
[Fri Feb 27 11:12:18.545773 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/wzy.php
[Fri Feb 27 11:12:20.270289 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 11:12:21.352756 2026] [:error] [pid 62998:tid 63007] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Feb 27 11:12:22.937165 2026] [:error] [pid 62998:tid 63020] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Feb 27 11:12:23.639898 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.40:58415] [client 64.64.108.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.40, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aaELl1QeueXZDUmoLolb6gAAAQ4"]
[Fri Feb 27 11:12:24.258334 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/Njima.php
[Fri Feb 27 11:12:26.284788 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.40:58415] [client 64.64.108.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.40, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aaELmlQeueXZDUmoLolcGAAAAQ4"]
[Fri Feb 27 11:12:27.360330 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.40:58415] File does not exist: /usr/local/apache/htdocs/suspended-page/FroggBaba.php
[Fri Feb 27 11:12:27.856694 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.40:58415] [client 64.64.108.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aaELm1QeueXZDUmoLolcMwAAARg"]
[Fri Feb 27 11:12:29.088788 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.58:48251] [client 64.64.108.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aaELnevG4MPCmE0B2sAs1QAAANU"]
[Fri Feb 27 11:12:30.186330 2026] [:error] [pid 54101:tid 54117] [client 64.64.108.18:21409] [client 64.64.108.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/install.php"] [unique_id "aaELnlY5qgRktcYTGFvn4QAAAck"]
[Fri Feb 27 11:12:31.479791 2026] [:error] [pid 49306:tid 49332] [client 64.64.108.30:52201] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Fri Feb 27 11:12:35.359895 2026] [:error] [pid 49306:tid 49324] [client 64.64.108.30:52201] File does not exist: /usr/local/apache/htdocs/suspended-page/st.php
[Fri Feb 27 11:12:35.982916 2026] [:error] [pid 49306:tid 49330] [client 64.64.108.30:52201] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Fri Feb 27 11:12:38.455264 2026] [:error] [pid 49306:tid 49317] [client 64.64.108.30:52201] [client 64.64.108.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.30, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/modules/karakaroa/wp-login.php"] [unique_id "aaELpvnSUDZue59Px9tr1QAAAUk"]
[Fri Feb 27 11:12:39.041464 2026] [:error] [pid 49306:tid 49314] [client 64.64.108.30:52201] [client 64.64.108.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaELp_nSUDZue59Px9tr4AAAAUY"]
[Fri Feb 27 11:12:40.759828 2026] [:error] [pid 56075:tid 56101] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/crop.php
[Fri Feb 27 11:12:41.339119 2026] [:error] [pid 56075:tid 56085] [client 64.64.108.34:21283] [client 64.64.108.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.34, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaELqcKBhrfI6KNv9RiFtAAAAAg"]
[Fri Feb 27 11:12:42.457669 2026] [:error] [pid 56075:tid 56078] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/gali.php
[Fri Feb 27 11:12:43.961817 2026] [:error] [pid 56075:tid 56086] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Fri Feb 27 11:12:44.680586 2026] [:error] [pid 56075:tid 56077] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/dirs.php
[Fri Feb 27 11:12:45.190410 2026] [:error] [pid 56075:tid 56095] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Fri Feb 27 11:12:45.759966 2026] [:error] [pid 56075:tid 56097] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/malls.php
[Fri Feb 27 11:12:46.343234 2026] [:error] [pid 56075:tid 56092] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/liefs.php
[Fri Feb 27 11:12:46.857171 2026] [:error] [pid 56075:tid 56084] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/uc.php
[Fri Feb 27 11:12:47.353065 2026] [:error] [pid 56075:tid 56098] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/locks.php
[Fri Feb 27 11:12:47.843682 2026] [:error] [pid 56075:tid 56090] [client 64.64.108.34:21283] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-dsdd.php
[Fri Feb 27 11:12:50.134145 2026] [:error] [pid 56075:tid 56096] [client 64.64.108.34:21283] [client 64.64.108.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/editor/fxp.php"] [unique_id "aaELssKBhrfI6KNv9RiGIwAAABI"]
[Fri Feb 27 11:12:52.576701 2026] [:error] [pid 62998:tid 63008] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Fri Feb 27 11:12:53.150968 2026] [:error] [pid 62998:tid 63022] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Fri Feb 27 11:12:53.653043 2026] [:error] [pid 62998:tid 63026] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Fri Feb 27 11:12:54.136022 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Fri Feb 27 11:12:54.660011 2026] [:error] [pid 62998:tid 63025] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/stindex.php
[Fri Feb 27 11:12:55.248255 2026] [:error] [pid 62998:tid 63001] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Feb 27 11:12:56.242948 2026] [:error] [pid 62998:tid 63016] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/exit.php
[Fri Feb 27 11:12:57.330270 2026] [:error] [pid 62998:tid 63006] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Feb 27 11:12:57.751924 2026] [:error] [pid 62998:tid 63004] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Fri Feb 27 11:12:58.261789 2026] [:error] [pid 62998:tid 63018] [client 64.64.108.54:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Feb 27 11:12:58.788646 2026] [:error] [pid 62998:tid 63013] [client 64.64.108.54:65147] [client 64.64.108.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aaELulQeueXZDUmoLolfIgAAAQs"]
[Fri Feb 27 11:12:59.986244 2026] [:error] [pid 54103:tid 54190] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Feb 27 11:13:01.756081 2026] [:error] [pid 54103:tid 54176] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/shellv3.php
[Fri Feb 27 11:13:02.245920 2026] [:error] [pid 54103:tid 54179] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Fri Feb 27 11:13:04.660025 2026] [:error] [pid 54103:tid 54192] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Feb 27 11:13:05.173539 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Feb 27 11:13:05.685579 2026] [:error] [pid 54103:tid 54184] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/delete3.php
[Fri Feb 27 11:13:06.758017 2026] [:error] [pid 54103:tid 54175] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php
[Fri Feb 27 11:13:08.374735 2026] [:error] [pid 54103:tid 54172] [client 64.64.108.53:57791] [client 64.64.108.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.64.108.53, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaELxOvG4MPCmE0B2sAuUwAAAME"]
[Fri Feb 27 11:13:08.957895 2026] [:error] [pid 54103:tid 54185] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Fri Feb 27 11:13:10.286494 2026] [:error] [pid 54103:tid 54193] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Fri Feb 27 11:13:10.765558 2026] [:error] [pid 54103:tid 54183] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/www.php
[Fri Feb 27 11:13:11.844556 2026] [:error] [pid 54103:tid 54177] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Feb 27 11:13:13.461867 2026] [:error] [pid 54103:tid 54173] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Feb 27 11:13:14.016867 2026] [:error] [pid 54103:tid 54195] [client 64.64.108.53:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Feb 27 11:13:16.630587 2026] [:error] [pid 54103:tid 54172] [client 64.64.108.53:57791] [client 64.64.108.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "aaELzOvG4MPCmE0B2sAuugAAAME"]
[Fri Feb 27 11:16:38.546634 2026] [:error] [pid 56075:tid 56087] [client 64.64.108.20:30617] [client 64.64.108.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/products/"] [unique_id "aaEMlsKBhrfI6KNv9RiOzwAAAAo"]
[Fri Feb 27 13:20:21.006415 2026] [:error] [pid 54231:tid 54256] [client 49.51.36.179:45102] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaEpleTvb5AeyJCdY7Ct7wAAAFY"]
[Fri Feb 27 15:54:42.922116 2026] [:error] [pid 62998:tid 63007] [client 49.51.33.159:59670] [client 49.51.33.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaFNwlQeueXZDUmoLonpUQAAAQU"]
[Fri Feb 27 16:01:48.302912 2026] [:error] [pid 62998:tid 63015] [client 52.169.119.118:5630] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 16:52:16.707215 2026] [:error] [pid 62998:tid 63011] [client 139.59.58.49:54751] [client 139.59.58.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.58.49, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaFbQFQeueXZDUmoLon1swAAAQk"]
[Fri Feb 27 16:52:16.710962 2026] [:error] [pid 62998:tid 63011] [client 139.59.58.49:54751] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 18:02:15.469154 2026] [:error] [pid 54102:tid 54165] [client 145.239.10.137:39099] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php, referer: http://dbservices.com.au/wo.php
[Fri Feb 27 18:05:07.936433 2026] [:error] [pid 49306:tid 49317] [client 182.44.8.254:41235] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaFsU_nSUDZue59Px9utpQAAAUk"]
[Fri Feb 27 18:46:33.834643 2026] [:error] [pid 54103:tid 54177] [client 4.204.192.31:26587] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 19:00:25.281656 2026] [:error] [pid 62998:tid 63026] [client 20.63.83.113:13702] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Feb 27 19:00:25.495130 2026] [:error] [pid 62998:tid 63007] [client 20.63.83.113:13702] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Feb 27 19:00:26.389169 2026] [:error] [pid 62998:tid 63017] [client 20.63.83.113:13702] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Feb 27 19:00:26.605955 2026] [:error] [pid 62998:tid 63009] [client 20.63.83.113:13702] File does not exist: /usr/local/apache/htdocs/suspended-page/lock6.php
[Fri Feb 27 19:00:26.817075 2026] [:error] [pid 62998:tid 63022] [client 20.63.83.113:13702] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Fri Feb 27 19:00:27.048943 2026] [:error] [pid 62998:tid 63013] [client 20.63.83.113:13702] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Fri Feb 27 19:00:27.260584 2026] [:error] [pid 62998:tid 63014] [client 20.63.83.113:13702] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Feb 27 19:00:27.471372 2026] [:error] [pid 62998:tid 63018] [client 20.63.83.113:13702] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaF5S1QeueXZDUmoLokVegAAARA"]
[Fri Feb 27 19:00:27.921102 2026] [:error] [pid 56075:tid 56095] [client 20.63.83.113:25572] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaF5S8KBhrfI6KNv9RhehwAAABE"]
[Fri Feb 27 19:00:28.369826 2026] [:error] [pid 54231:tid 54251] [client 20.63.83.113:59124] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaF5TOTvb5AeyJCdY7DrmAAAAFE"]
[Fri Feb 27 19:00:28.841116 2026] [:error] [pid 54231:tid 54252] [client 20.63.83.113:3597] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaF5TOTvb5AeyJCdY7DrmgAAAFI"]
[Fri Feb 27 19:00:29.266791 2026] [:error] [pid 56075:tid 56092] [client 20.63.83.113:27467] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaF5TcKBhrfI6KNv9RheigAAAA4"]
[Fri Feb 27 19:00:29.713080 2026] [:error] [pid 56075:tid 56098] [client 20.63.83.113:25580] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaF5TcKBhrfI6KNv9RhejAAAABQ"]
[Fri Feb 27 19:00:30.167848 2026] [:error] [pid 54102:tid 54159] [client 20.63.83.113:50921] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaF5Tni74D4fiYUm_GdZgwAAAI8"]
[Fri Feb 27 19:00:30.579539 2026] [:error] [pid 54103:tid 54194] [client 20.63.83.113:44820] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaF5TuvG4MPCmE0B2sCKCgAAANc"]
[Fri Feb 27 19:00:31.067316 2026] [:error] [pid 52073:tid 52082] [client 20.63.83.113:4829] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaF5T4a650YPyxXVeRbf6AAAAYY"]
[Fri Feb 27 19:00:31.520497 2026] [:error] [pid 54231:tid 54254] [client 20.63.83.113:4813] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaF5T-Tvb5AeyJCdY7DroQAAAFQ"]
[Fri Feb 27 19:00:31.999821 2026] [:error] [pid 49306:tid 49327] [client 20.63.83.113:59110] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaF5T_nSUDZue59Px9vK3gAAAVM"]
[Fri Feb 27 19:00:32.416569 2026] [:error] [pid 56075:tid 56077] [client 20.63.83.113:54188] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaF5UMKBhrfI6KNv9RhejwAAAAA"]
[Fri Feb 27 19:00:32.834755 2026] [:error] [pid 62998:tid 63015] [client 20.63.83.113:26368] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaF5UFQeueXZDUmoLokVhgAAAQ0"]
[Fri Feb 27 19:00:33.249019 2026] [:error] [pid 52073:tid 52093] [client 20.63.83.113:3302] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaF5UYa650YPyxXVeRbf7gAAAZE"]
[Fri Feb 27 19:00:33.691758 2026] [:error] [pid 52073:tid 52096] [client 20.63.83.113:27470] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaF5UYa650YPyxXVeRbf8AAAAZQ"]
[Fri Feb 27 19:00:34.141280 2026] [:error] [pid 52073:tid 52088] [client 20.63.83.113:59126] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaF5Uoa650YPyxXVeRbf8QAAAYw"]
[Fri Feb 27 19:00:34.559791 2026] [:error] [pid 49306:tid 49318] [client 20.63.83.113:3619] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/plugins.php"] [unique_id "aaF5UvnSUDZue59Px9vK5gAAAUo"]
[Fri Feb 27 19:00:35.004287 2026] [:error] [pid 54103:tid 54173] [client 20.63.83.113:4863] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/plugins.php"] [unique_id "aaF5U-vG4MPCmE0B2sCKDAAAAMI"]
[Fri Feb 27 19:00:35.419467 2026] [:error] [pid 49306:tid 49330] [client 20.63.83.113:65095] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/plugins.php"] [unique_id "aaF5U_nSUDZue59Px9vK7AAAAVY"]
[Fri Feb 27 19:00:35.837132 2026] [:error] [pid 56075:tid 56094] [client 20.63.83.113:3327] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/plugins.php"] [unique_id "aaF5U8KBhrfI6KNv9RhelAAAABA"]
[Fri Feb 27 19:00:36.279556 2026] [:error] [pid 62998:tid 63013] [client 20.63.83.113:13713] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaF5VFQeueXZDUmoLokVkwAAAQs"]
[Fri Feb 27 19:00:36.711045 2026] [:error] [pid 54102:tid 54169] [client 20.63.83.113:22462] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaF5VHi74D4fiYUm_GdZhAAAAJg"]
[Fri Feb 27 19:00:37.151687 2026] [:error] [pid 56075:tid 56102] [client 20.63.83.113:13746] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaF5VcKBhrfI6KNv9RhelgAAABg"]
[Fri Feb 27 19:00:37.596786 2026] [:error] [pid 56075:tid 56100] [client 20.63.83.113:65088] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaF5VcKBhrfI6KNv9RhelwAAABY"]
[Fri Feb 27 19:00:38.056796 2026] [:error] [pid 56075:tid 56083] [client 20.63.83.113:44800] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaF5VsKBhrfI6KNv9RhemAAAAAY"]
[Fri Feb 27 19:00:38.476210 2026] [:error] [pid 54101:tid 54119] [client 20.63.83.113:3588] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaF5VlY5qgRktcYTGFswYQAAAcs"]
[Fri Feb 27 19:00:38.906859 2026] [:error] [pid 49306:tid 49308] [client 20.63.83.113:27497] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaF5VvnSUDZue59Px9vK8gAAAUA"]
[Fri Feb 27 19:00:39.367743 2026] [:error] [pid 49306:tid 49331] [client 20.63.83.113:54165] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaF5V_nSUDZue59Px9vK9AAAAVc"]
[Fri Feb 27 19:00:39.822428 2026] [:error] [pid 49306:tid 49326] [client 20.63.83.113:3610] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaF5V_nSUDZue59Px9vK-AAAAVI"]
[Fri Feb 27 19:00:40.255949 2026] [:error] [pid 49306:tid 49315] [client 20.63.83.113:59132] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaF5WPnSUDZue59Px9vK_QAAAUc"]
[Fri Feb 27 19:00:40.695552 2026] [:error] [pid 54231:tid 54234] [client 20.63.83.113:50928] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaF5WOTvb5AeyJCdY7DrsAAAAEA"]
[Fri Feb 27 19:00:41.183909 2026] [:error] [pid 49306:tid 49327] [client 20.63.83.113:50903] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaF5WfnSUDZue59Px9vLAgAAAVM"]
[Fri Feb 27 19:00:41.608327 2026] [:error] [pid 52073:tid 52100] [client 20.63.83.113:50930] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aaF5WYa650YPyxXVeRbf8gAAAZg"]
[Fri Feb 27 19:00:42.051303 2026] [:error] [pid 49306:tid 49320] [client 20.63.83.113:59122] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aaF5WvnSUDZue59Px9vLBgAAAUw"]
[Fri Feb 27 19:00:42.480704 2026] [:error] [pid 49306:tid 49318] [client 20.63.83.113:50883] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aaF5WvnSUDZue59Px9vLCAAAAUo"]
[Fri Feb 27 19:00:42.901773 2026] [:error] [pid 54103:tid 54185] [client 20.63.83.113:44803] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aaF5WuvG4MPCmE0B2sCKDwAAAM4"]
[Fri Feb 27 19:00:43.346774 2026] [:error] [pid 49306:tid 49330] [client 20.63.83.113:13733] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless1.php"] [unique_id "aaF5W_nSUDZue59Px9vLDAAAAVY"]
[Fri Feb 27 19:00:43.777802 2026] [:error] [pid 54103:tid 54186] [client 20.63.83.113:4802] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless1.php"] [unique_id "aaF5W-vG4MPCmE0B2sCKEQAAAM8"]
[Fri Feb 27 19:00:44.344262 2026] [:error] [pid 56075:tid 56080] [client 20.63.83.113:59073] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless1.php"] [unique_id "aaF5XMKBhrfI6KNv9RhepAAAAAM"]
[Fri Feb 27 19:00:44.774104 2026] [:error] [pid 56075:tid 56102] [client 20.63.83.113:54165] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless1.php"] [unique_id "aaF5XMKBhrfI6KNv9RhepgAAABg"]
[Fri Feb 27 19:00:45.324476 2026] [:error] [pid 56075:tid 56090] [client 20.63.83.113:26679] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file11.php"] [unique_id "aaF5XcKBhrfI6KNv9RheqQAAAAw"]
[Fri Feb 27 19:00:45.773259 2026] [:error] [pid 49306:tid 49310] [client 20.63.83.113:44808] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file11.php"] [unique_id "aaF5XfnSUDZue59Px9vLEgAAAUI"]
[Fri Feb 27 19:00:46.232544 2026] [:error] [pid 56075:tid 56101] [client 20.63.83.113:54164] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file11.php"] [unique_id "aaF5XsKBhrfI6KNv9RherQAAABc"]
[Fri Feb 27 19:00:46.718723 2026] [:error] [pid 49306:tid 49331] [client 20.63.83.113:54178] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file11.php"] [unique_id "aaF5XvnSUDZue59Px9vLFgAAAVc"]
[Fri Feb 27 19:00:47.148375 2026] [:error] [pid 49306:tid 49329] [client 20.63.83.113:4845] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file12.php"] [unique_id "aaF5X_nSUDZue59Px9vLGQAAAVU"]
[Fri Feb 27 19:00:47.643776 2026] [:error] [pid 49306:tid 49326] [client 20.63.83.113:27516] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file12.php"] [unique_id "aaF5X_nSUDZue59Px9vLHAAAAVI"]
[Fri Feb 27 19:00:48.138460 2026] [:error] [pid 49306:tid 49322] [client 20.63.83.113:4814] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file12.php"] [unique_id "aaF5YPnSUDZue59Px9vLIgAAAU4"]
[Fri Feb 27 19:00:48.578642 2026] [:error] [pid 52073:tid 52079] [client 20.63.83.113:13721] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file12.php"] [unique_id "aaF5YIa650YPyxXVeRbf-QAAAYM"]
[Fri Feb 27 19:00:48.999525 2026] [:error] [pid 52073:tid 52095] [client 20.63.83.113:29861] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aaF5YIa650YPyxXVeRbf-wAAAZM"]
[Fri Feb 27 19:00:49.477124 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:19784] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aaF5YYa650YPyxXVeRbf_wAAAY4"]
[Fri Feb 27 19:00:49.962825 2026] [:error] [pid 62998:tid 63005] [client 20.63.83.113:22424] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aaF5YVQeueXZDUmoLokVowAAAQM"]
[Fri Feb 27 19:00:50.420952 2026] [:error] [pid 49306:tid 49316] [client 20.63.83.113:3638] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file13.php"] [unique_id "aaF5YvnSUDZue59Px9vLKgAAAUg"]
[Fri Feb 27 19:00:50.867378 2026] [:error] [pid 54103:tid 54176] [client 20.63.83.113:29862] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file14.php"] [unique_id "aaF5YuvG4MPCmE0B2sCKEwAAAMU"]
[Fri Feb 27 19:00:51.333771 2026] [:error] [pid 62998:tid 63014] [client 20.63.83.113:65108] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file14.php"] [unique_id "aaF5Y1QeueXZDUmoLokVpAAAAQw"]
[Fri Feb 27 19:00:51.822428 2026] [:error] [pid 54103:tid 54192] [client 20.63.83.113:54176] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file14.php"] [unique_id "aaF5Y-vG4MPCmE0B2sCKFgAAANU"]
[Fri Feb 27 19:00:52.271512 2026] [:error] [pid 62998:tid 63018] [client 20.63.83.113:3273] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file14.php"] [unique_id "aaF5ZFQeueXZDUmoLokVpQAAARA"]
[Fri Feb 27 19:00:52.742907 2026] [:error] [pid 62998:tid 63020] [client 20.63.83.113:50893] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aaF5ZFQeueXZDUmoLokVpwAAARI"]
[Fri Feb 27 19:00:53.173373 2026] [:error] [pid 62998:tid 63016] [client 20.63.83.113:3280] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aaF5ZVQeueXZDUmoLokVqAAAAQ4"]
[Fri Feb 27 19:00:53.596448 2026] [:error] [pid 62998:tid 63004] [client 20.63.83.113:22400] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aaF5ZVQeueXZDUmoLokVqgAAAQI"]
[Fri Feb 27 19:00:54.032568 2026] [:error] [pid 54103:tid 54182] [client 20.63.83.113:29859] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "aaF5ZuvG4MPCmE0B2sCKFwAAAMs"]
[Fri Feb 27 19:00:54.488475 2026] [:error] [pid 54103:tid 54184] [client 20.63.83.113:59127] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file16.php"] [unique_id "aaF5ZuvG4MPCmE0B2sCKGAAAAM0"]
[Fri Feb 27 19:00:54.907461 2026] [:error] [pid 54101:tid 54124] [client 20.63.83.113:26677] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file16.php"] [unique_id "aaF5ZlY5qgRktcYTGFswaQAAAdA"]
[Fri Feb 27 19:00:55.332819 2026] [:error] [pid 56075:tid 56091] [client 20.63.83.113:59095] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file16.php"] [unique_id "aaF5Z8KBhrfI6KNv9RheuwAAAA0"]
[Fri Feb 27 19:00:55.800821 2026] [:error] [pid 52073:tid 52092] [client 20.63.83.113:3294] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file16.php"] [unique_id "aaF5Z4a650YPyxXVeRbgBQAAAZA"]
[Fri Feb 27 19:00:56.248795 2026] [:error] [pid 52073:tid 52098] [client 20.63.83.113:3272] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aaF5aIa650YPyxXVeRbgCQAAAZY"]
[Fri Feb 27 19:00:56.805403 2026] [:error] [pid 56075:tid 56077] [client 20.63.83.113:29860] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aaF5aMKBhrfI6KNv9RhevgAAAAA"]
[Fri Feb 27 19:00:57.229044 2026] [:error] [pid 54231:tid 54236] [client 20.63.83.113:54154] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aaF5aeTvb5AeyJCdY7DrxAAAAEI"]
[Fri Feb 27 19:00:57.819107 2026] [:error] [pid 56075:tid 56087] [client 20.63.83.113:4835] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aaF5acKBhrfI6KNv9RhewwAAAAo"]
[Fri Feb 27 19:00:58.439228 2026] [:error] [pid 54103:tid 54175] [client 20.63.83.113:59120] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aaF5auvG4MPCmE0B2sCKKQAAAMQ"]
[Fri Feb 27 19:00:58.942182 2026] [:error] [pid 56075:tid 56091] [client 20.63.83.113:4828] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aaF5asKBhrfI6KNv9RheywAAAA0"]
[Fri Feb 27 19:00:59.451568 2026] [:error] [pid 54103:tid 54181] [client 20.63.83.113:3637] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aaF5a-vG4MPCmE0B2sCKLgAAAMo"]
[Fri Feb 27 19:01:00.000368 2026] [:error] [pid 49306:tid 49322] [client 20.63.83.113:4815] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file19.php"] [unique_id "aaF5a_nSUDZue59Px9vLOgAAAU4"]
[Fri Feb 27 19:01:00.519696 2026] [:error] [pid 62998:tid 63007] [client 20.63.83.113:3307] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aaF5bFQeueXZDUmoLokVtAAAAQU"]
[Fri Feb 27 19:01:01.022130 2026] [:error] [pid 62998:tid 63005] [client 20.63.83.113:29868] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aaF5bVQeueXZDUmoLokVtgAAAQM"]
[Fri Feb 27 19:01:01.613338 2026] [:error] [pid 56075:tid 56100] [client 20.63.83.113:3281] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aaF5bcKBhrfI6KNv9Rhe2gAAABY"]
[Fri Feb 27 19:01:02.199615 2026] [:error] [pid 52073:tid 52079] [client 20.63.83.113:20698] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aaF5boa650YPyxXVeRbgFgAAAYM"]
[Fri Feb 27 19:01:02.682532 2026] [:error] [pid 49306:tid 49326] [client 20.63.83.113:65097] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aaF5bvnSUDZue59Px9vLRAAAAVI"]
[Fri Feb 27 19:01:03.199790 2026] [:error] [pid 56075:tid 56083] [client 20.63.83.113:22433] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aaF5b8KBhrfI6KNv9Rhe6AAAAAY"]
[Fri Feb 27 19:01:03.623404 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:60616] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aaF5b4a650YPyxXVeRbgGwAAAY4"]
[Fri Feb 27 19:01:04.091156 2026] [:error] [pid 52073:tid 52081] [client 20.63.83.113:26639] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aaF5cIa650YPyxXVeRbgHAAAAYU"]
[Fri Feb 27 19:01:04.566018 2026] [:error] [pid 52073:tid 52082] [client 20.63.83.113:4847] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file23.php"] [unique_id "aaF5cIa650YPyxXVeRbgIAAAAYY"]
[Fri Feb 27 19:01:05.125472 2026] [:error] [pid 52073:tid 52076] [client 20.63.83.113:3274] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file23.php"] [unique_id "aaF5cYa650YPyxXVeRbgJQAAAYA"]
[Fri Feb 27 19:01:05.593455 2026] [:error] [pid 54101:tid 54129] [client 20.63.83.113:40908] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file23.php"] [unique_id "aaF5cVY5qgRktcYTGFswawAAAdU"]
[Fri Feb 27 19:01:06.140459 2026] [:error] [pid 52073:tid 52086] [client 20.63.83.113:59072] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file23.php"] [unique_id "aaF5coa650YPyxXVeRbgLAAAAYo"]
[Fri Feb 27 19:01:06.587366 2026] [:error] [pid 54101:tid 54132] [client 20.63.83.113:29852] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file24.php"] [unique_id "aaF5clY5qgRktcYTGFswbAAAAdg"]
[Fri Feb 27 19:01:07.070962 2026] [:error] [pid 49306:tid 49329] [client 20.63.83.113:29858] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file24.php"] [unique_id "aaF5c_nSUDZue59Px9vLUwAAAVU"]
[Fri Feb 27 19:01:07.740471 2026] [:error] [pid 62998:tid 63024] [client 20.63.83.113:22444] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file24.php"] [unique_id "aaF5c1QeueXZDUmoLokVwgAAARY"]
[Fri Feb 27 19:01:08.441597 2026] [:error] [pid 62998:tid 63002] [client 20.63.83.113:42934] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file24.php"] [unique_id "aaF5dFQeueXZDUmoLokVxwAAAQE"]
[Fri Feb 27 19:01:08.961327 2026] [:error] [pid 62998:tid 63018] [client 20.63.83.113:60642] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file25.php"] [unique_id "aaF5dFQeueXZDUmoLokVzQAAARA"]
[Fri Feb 27 19:01:09.523352 2026] [:error] [pid 56075:tid 56082] [client 20.63.83.113:49141] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file25.php"] [unique_id "aaF5dcKBhrfI6KNv9Rhe8gAAAAU"]
[Fri Feb 27 19:01:10.100621 2026] [:error] [pid 54231:tid 54239] [client 20.63.83.113:60663] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file25.php"] [unique_id "aaF5duTvb5AeyJCdY7Dr0gAAAEU"]
[Fri Feb 27 19:01:10.620721 2026] [:error] [pid 56075:tid 56091] [client 20.63.83.113:26653] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file25.php"] [unique_id "aaF5dsKBhrfI6KNv9Rhe9wAAAA0"]
[Fri Feb 27 19:01:11.419987 2026] [:error] [pid 56075:tid 56084] [client 20.63.83.113:4840] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file26.php"] [unique_id "aaF5d8KBhrfI6KNv9Rhe-gAAAAc"]
[Fri Feb 27 19:01:11.959059 2026] [:error] [pid 56075:tid 56077] [client 20.63.83.113:22407] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file26.php"] [unique_id "aaF5d8KBhrfI6KNv9Rhe_gAAAAA"]
[Fri Feb 27 19:01:12.403599 2026] [:error] [pid 49306:tid 49308] [client 20.63.83.113:36329] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file26.php"] [unique_id "aaF5ePnSUDZue59Px9vLWgAAAUA"]
[Fri Feb 27 19:01:12.860288 2026] [:error] [pid 56075:tid 56086] [client 20.63.83.113:4859] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file26.php"] [unique_id "aaF5eMKBhrfI6KNv9RhfBAAAAAk"]
[Fri Feb 27 19:01:13.313945 2026] [:error] [pid 56075:tid 56095] [client 20.63.83.113:4852] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file27.php"] [unique_id "aaF5ecKBhrfI6KNv9RhfBwAAABE"]
[Fri Feb 27 19:01:13.841349 2026] [:error] [pid 54103:tid 54177] [client 20.63.83.113:49143] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file27.php"] [unique_id "aaF5eevG4MPCmE0B2sCKPgAAAMY"]
[Fri Feb 27 19:01:14.351708 2026] [:error] [pid 54231:tid 54244] [client 20.63.83.113:22441] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file27.php"] [unique_id "aaF5euTvb5AeyJCdY7Dr2AAAAEo"]
[Fri Feb 27 19:01:14.804380 2026] [:error] [pid 52073:tid 52096] [client 20.63.83.113:4809] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file27.php"] [unique_id "aaF5eoa650YPyxXVeRbgPgAAAZQ"]
[Fri Feb 27 19:01:15.323382 2026] [:error] [pid 56075:tid 56084] [client 20.63.83.113:40905] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file28.php"] [unique_id "aaF5e8KBhrfI6KNv9RhfDAAAAAc"]
[Fri Feb 27 19:01:15.742963 2026] [:error] [pid 49306:tid 49322] [client 20.63.83.113:29875] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file28.php"] [unique_id "aaF5e_nSUDZue59Px9vLYgAAAU4"]
[Fri Feb 27 19:01:16.161971 2026] [:error] [pid 52073:tid 52082] [client 20.63.83.113:36311] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file28.php"] [unique_id "aaF5fIa650YPyxXVeRbgPwAAAYY"]
[Fri Feb 27 19:01:16.678775 2026] [:error] [pid 54231:tid 54242] [client 20.63.83.113:60644] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file28.php"] [unique_id "aaF5fOTvb5AeyJCdY7Dr2QAAAEg"]
[Fri Feb 27 19:01:17.129064 2026] [:error] [pid 54231:tid 54258] [client 20.63.83.113:22412] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aaF5feTvb5AeyJCdY7Dr2wAAAFg"]
[Fri Feb 27 19:01:17.702621 2026] [:error] [pid 52073:tid 52093] [client 20.63.83.113:3318] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aaF5fYa650YPyxXVeRbgQwAAAZE"]
[Fri Feb 27 19:01:18.176698 2026] [:error] [pid 52073:tid 52079] [client 20.63.83.113:49100] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aaF5foa650YPyxXVeRbgRQAAAYM"]
[Fri Feb 27 19:01:18.637404 2026] [:error] [pid 52073:tid 52086] [client 20.63.83.113:26682] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file29.php"] [unique_id "aaF5foa650YPyxXVeRbgRwAAAYo"]
[Fri Feb 27 19:01:19.151100 2026] [:error] [pid 49306:tid 49316] [client 20.63.83.113:22407] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aaF5f_nSUDZue59Px9vLbwAAAUg"]
[Fri Feb 27 19:01:19.682652 2026] [:error] [pid 49306:tid 49324] [client 20.63.83.113:4821] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aaF5f_nSUDZue59Px9vLcgAAAVA"]
[Fri Feb 27 19:01:20.183087 2026] [:error] [pid 62998:tid 63015] [client 20.63.83.113:22448] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aaF5gFQeueXZDUmoLokV2QAAAQ0"]
[Fri Feb 27 19:01:20.741794 2026] [:error] [pid 49306:tid 49310] [client 20.63.83.113:35634] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "aaF5gPnSUDZue59Px9vLegAAAUI"]
[Fri Feb 27 19:01:21.823667 2026] [:error] [pid 54103:tid 54170] [client 20.63.83.113:49090] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaF5gevG4MPCmE0B2sCKQwAAAMA"]
[Fri Feb 27 19:01:22.286136 2026] [:error] [pid 54103:tid 54189] [client 20.63.83.113:42883] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaF5guvG4MPCmE0B2sCKRQAAANI"]
[Fri Feb 27 19:01:22.754090 2026] [:error] [pid 62998:tid 63012] [client 20.63.83.113:4840] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaF5glQeueXZDUmoLokV3AAAAQo"]
[Fri Feb 27 19:01:23.800432 2026] [:error] [pid 54101:tid 54131] [client 20.63.83.113:36296] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaF5g1Y5qgRktcYTGFswcgAAAdc"]
[Fri Feb 27 19:01:24.263865 2026] [:error] [pid 56075:tid 56081] [client 20.63.83.113:26644] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aaF5hMKBhrfI6KNv9RhfIgAAAAQ"]
[Fri Feb 27 19:01:24.825762 2026] [:error] [pid 54231:tid 54234] [client 20.63.83.113:3381] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aaF5hOTvb5AeyJCdY7Dr5QAAAEA"]
[Fri Feb 27 19:01:25.282578 2026] [:error] [pid 62998:tid 63019] [client 20.63.83.113:29793] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aaF5hVQeueXZDUmoLokV5QAAARE"]
[Fri Feb 27 19:01:25.764904 2026] [:error] [pid 54231:tid 54255] [client 20.63.83.113:40914] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsa.php"] [unique_id "aaF5heTvb5AeyJCdY7Dr6QAAAFU"]
[Fri Feb 27 19:01:26.231089 2026] [:error] [pid 54231:tid 54244] [client 20.63.83.113:49103] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpcx.php"] [unique_id "aaF5huTvb5AeyJCdY7Dr6wAAAEo"]
[Fri Feb 27 19:01:26.685306 2026] [:error] [pid 54231:tid 54258] [client 20.63.83.113:15551] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpcx.php"] [unique_id "aaF5huTvb5AeyJCdY7Dr7gAAAFg"]
[Fri Feb 27 19:01:27.163910 2026] [:error] [pid 49306:tid 49309] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpcx.php
[Fri Feb 27 19:01:27.380596 2026] [:error] [pid 49306:tid 49319] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/ot.php
[Fri Feb 27 19:01:27.588921 2026] [:error] [pid 49306:tid 49308] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Feb 27 19:01:27.801827 2026] [:error] [pid 49306:tid 49316] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Fri Feb 27 19:01:28.010114 2026] [:error] [pid 49306:tid 49328] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 27 19:01:28.218292 2026] [:error] [pid 49306:tid 49323] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Feb 27 19:01:28.633848 2026] [:error] [pid 49306:tid 49312] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/mek.php
[Fri Feb 27 19:01:28.842351 2026] [:error] [pid 49306:tid 49318] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Fri Feb 27 19:01:29.053256 2026] [:error] [pid 49306:tid 49321] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/pass.php
[Fri Feb 27 19:01:29.262177 2026] [:error] [pid 49306:tid 49311] [client 20.63.83.113:49101] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Fri Feb 27 19:01:29.480484 2026] [:error] [pid 49306:tid 49314] [client 20.63.83.113:49101] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleetx.php"] [unique_id "aaF5ifnSUDZue59Px9vLmQAAAUY"]
[Fri Feb 27 19:01:29.966361 2026] [:error] [pid 49306:tid 49319] [client 20.63.83.113:40936] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleetx.php"] [unique_id "aaF5ifnSUDZue59Px9vLmwAAAUs"]
[Fri Feb 27 19:01:30.402658 2026] [:error] [pid 56075:tid 56102] [client 20.63.83.113:36319] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleetx.php"] [unique_id "aaF5isKBhrfI6KNv9RhfKAAAABg"]
[Fri Feb 27 19:01:30.861038 2026] [:error] [pid 49306:tid 49323] [client 20.63.83.113:20701] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleetx.php"] [unique_id "aaF5ivnSUDZue59Px9vLowAAAU8"]
[Fri Feb 27 19:01:31.306959 2026] [:error] [pid 54103:tid 54173] [client 20.63.83.113:3685] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aaF5i-vG4MPCmE0B2sCKTQAAAMI"]
[Fri Feb 27 19:01:31.785906 2026] [:error] [pid 56075:tid 56079] [client 20.63.83.113:34264] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aaF5i8KBhrfI6KNv9RhfLAAAAAI"]
[Fri Feb 27 19:01:32.266797 2026] [:error] [pid 62998:tid 63019] [client 20.63.83.113:17006] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aaF5jFQeueXZDUmoLokV8gAAARE"]
[Fri Feb 27 19:01:32.742639 2026] [:error] [pid 62998:tid 63004] [client 20.63.83.113:15534] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aaF5jFQeueXZDUmoLokV9gAAAQI"]
[Fri Feb 27 19:01:33.281654 2026] [:error] [pid 62998:tid 63017] [client 20.63.83.113:15304] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aaF5jVQeueXZDUmoLokV_QAAAQ8"]
[Fri Feb 27 19:01:33.811302 2026] [:error] [pid 54103:tid 54181] [client 20.63.83.113:3704] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aaF5jevG4MPCmE0B2sCKTwAAAMo"]
[Fri Feb 27 19:01:34.310103 2026] [:error] [pid 54102:tid 54156] [client 20.63.83.113:15342] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aaF5jni74D4fiYUm_GdZmAAAAIw"]
[Fri Feb 27 19:01:34.809312 2026] [:error] [pid 52073:tid 52096] [client 20.63.83.113:58666] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/great.php"] [unique_id "aaF5joa650YPyxXVeRbgXAAAAZQ"]
[Fri Feb 27 19:01:35.297346 2026] [:error] [pid 52073:tid 52099] [client 20.63.83.113:36340] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aaF5j4a650YPyxXVeRbgYgAAAZc"]
[Fri Feb 27 19:01:35.789940 2026] [:error] [pid 56075:tid 56100] [client 20.63.83.113:49128] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aaF5j8KBhrfI6KNv9RhfSAAAABY"]
[Fri Feb 27 19:01:36.289364 2026] [:error] [pid 49306:tid 49331] [client 20.63.83.113:15341] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aaF5kPnSUDZue59Px9vLrwAAAVc"]
[Fri Feb 27 19:01:36.742340 2026] [:error] [pid 54103:tid 54185] [client 20.63.83.113:35619] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aaF5kOvG4MPCmE0B2sCKUAAAAM4"]
[Fri Feb 27 19:01:37.210868 2026] [:error] [pid 52073:tid 52093] [client 20.63.83.113:58665] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xax.php"] [unique_id "aaF5kYa650YPyxXVeRbgZwAAAZE"]
[Fri Feb 27 19:01:37.659853 2026] [:error] [pid 49306:tid 49312] [client 20.63.83.113:65109] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xax.php"] [unique_id "aaF5kfnSUDZue59Px9vLtQAAAUQ"]
[Fri Feb 27 19:01:38.199400 2026] [:error] [pid 62998:tid 63025] [client 20.63.83.113:49123] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xax.php"] [unique_id "aaF5klQeueXZDUmoLokWBQAAARc"]
[Fri Feb 27 19:01:38.700229 2026] [:error] [pid 54103:tid 54191] [client 20.63.83.113:3650] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xax.php"] [unique_id "aaF5kuvG4MPCmE0B2sCKUgAAANQ"]
[Fri Feb 27 19:01:39.245971 2026] [:error] [pid 52073:tid 52087] [client 20.63.83.113:36309] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaF5k4a650YPyxXVeRbgawAAAYs"]
[Fri Feb 27 19:01:39.724408 2026] [:error] [pid 49306:tid 49326] [client 20.63.83.113:48831] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaF5k_nSUDZue59Px9vLvQAAAVI"]
[Fri Feb 27 19:01:40.335127 2026] [:error] [pid 54231:tid 54242] [client 20.63.83.113:29775] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaF5lOTvb5AeyJCdY7Dr_QAAAEg"]
[Fri Feb 27 19:01:40.756796 2026] [:error] [pid 52073:tid 52094] [client 20.63.83.113:16964] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaF5lIa650YPyxXVeRbgbgAAAZI"]
[Fri Feb 27 19:01:41.239885 2026] [:error] [pid 52073:tid 52081] [client 20.63.83.113:29803] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlex.php"] [unique_id "aaF5lYa650YPyxXVeRbgcgAAAYU"]
[Fri Feb 27 19:01:41.660430 2026] [:error] [pid 52073:tid 52091] [client 20.63.83.113:58681] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlex.php"] [unique_id "aaF5lYa650YPyxXVeRbgdwAAAY8"]
[Fri Feb 27 19:01:42.111686 2026] [:error] [pid 54231:tid 54235] [client 20.63.83.113:58642] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlex.php"] [unique_id "aaF5luTvb5AeyJCdY7DsAAAAAEE"]
[Fri Feb 27 19:01:42.631948 2026] [:error] [pid 54231:tid 54245] [client 20.63.83.113:3390] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlex.php"] [unique_id "aaF5luTvb5AeyJCdY7DsAwAAAEs"]
[Fri Feb 27 19:01:43.214788 2026] [:error] [pid 54231:tid 54252] [client 20.63.83.113:22727] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aaF5l-Tvb5AeyJCdY7DsBgAAAFI"]
[Fri Feb 27 19:01:43.682704 2026] [:error] [pid 54231:tid 54250] [client 20.63.83.113:58641] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aaF5l-Tvb5AeyJCdY7DsBwAAAFA"]
[Fri Feb 27 19:01:44.143168 2026] [:error] [pid 52073:tid 52100] [client 20.63.83.113:17004] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aaF5mIa650YPyxXVeRbggAAAAZg"]
[Fri Feb 27 19:01:44.651469 2026] [:error] [pid 52073:tid 52091] [client 20.63.83.113:42340] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless2.php"] [unique_id "aaF5mIa650YPyxXVeRbghQAAAY8"]
[Fri Feb 27 19:01:45.155899 2026] [:error] [pid 52073:tid 52088] [client 20.63.83.113:3364] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aaF5mYa650YPyxXVeRbgiwAAAYw"]
[Fri Feb 27 19:01:45.751465 2026] [:error] [pid 52073:tid 52089] [client 20.63.83.113:15325] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aaF5mYa650YPyxXVeRbgjwAAAY0"]
[Fri Feb 27 19:01:46.388362 2026] [:error] [pid 52073:tid 52098] [client 20.63.83.113:58684] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aaF5moa650YPyxXVeRbgmAAAAZY"]
[Fri Feb 27 19:01:46.895560 2026] [:error] [pid 52073:tid 52078] [client 20.63.83.113:58660] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless3.php"] [unique_id "aaF5moa650YPyxXVeRbgnQAAAYI"]
[Fri Feb 27 19:01:47.395729 2026] [:error] [pid 56075:tid 56084] [client 20.63.83.113:58630] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "aaF5m8KBhrfI6KNv9RhfYAAAAAc"]
[Fri Feb 27 19:01:47.964934 2026] [:error] [pid 52073:tid 52089] [client 20.63.83.113:15531] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "aaF5m4a650YPyxXVeRbgowAAAY0"]
[Fri Feb 27 19:01:48.453444 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:58659] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "aaF5nIa650YPyxXVeRbgqwAAAY4"]
[Fri Feb 27 19:01:48.990240 2026] [:error] [pid 52073:tid 52097] [client 20.63.83.113:3690] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "aaF5nIa650YPyxXVeRbgsAAAAZU"]
[Fri Feb 27 19:01:49.703148 2026] [:error] [pid 52073:tid 52084] [client 20.63.83.113:3945] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaF5nYa650YPyxXVeRbgswAAAYg"]
[Fri Feb 27 19:01:50.266152 2026] [:error] [pid 52073:tid 52096] [client 20.63.83.113:48773] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaF5noa650YPyxXVeRbgtgAAAZQ"]
[Fri Feb 27 19:01:50.742868 2026] [:error] [pid 52073:tid 52087] [client 20.63.83.113:15340] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaF5noa650YPyxXVeRbgvQAAAYs"]
[Fri Feb 27 19:01:51.248666 2026] [:error] [pid 52073:tid 52084] [client 20.63.83.113:16993] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaF5n4a650YPyxXVeRbgwAAAAYg"]
[Fri Feb 27 19:01:51.835735 2026] [:error] [pid 54231:tid 54240] [client 20.63.83.113:42316] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless6.php"] [unique_id "aaF5n-Tvb5AeyJCdY7DsGQAAAEY"]
[Fri Feb 27 19:01:52.409962 2026] [:error] [pid 52073:tid 52077] [client 20.63.83.113:42351] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless6.php"] [unique_id "aaF5oIa650YPyxXVeRbgygAAAYE"]
[Fri Feb 27 19:01:52.912866 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:58635] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless6.php"] [unique_id "aaF5oIa650YPyxXVeRbgzgAAAY4"]
[Fri Feb 27 19:01:53.398655 2026] [:error] [pid 52073:tid 52092] [client 20.63.83.113:29689] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless6.php"] [unique_id "aaF5oYa650YPyxXVeRbg0QAAAZA"]
[Fri Feb 27 19:01:53.821312 2026] [:error] [pid 62998:tid 63018] [client 20.63.83.113:15301] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless7.php"] [unique_id "aaF5oVQeueXZDUmoLokWEgAAARA"]
[Fri Feb 27 19:01:54.262438 2026] [:error] [pid 62998:tid 63015] [client 20.63.83.113:3358] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless7.php"] [unique_id "aaF5olQeueXZDUmoLokWEwAAAQ0"]
[Fri Feb 27 19:01:54.694997 2026] [:error] [pid 62998:tid 63026] [client 20.63.83.113:29640] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless7.php"] [unique_id "aaF5olQeueXZDUmoLokWFQAAARg"]
[Fri Feb 27 19:01:55.150157 2026] [:error] [pid 62998:tid 63006] [client 20.63.83.113:3950] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless7.php"] [unique_id "aaF5o1QeueXZDUmoLokWGAAAAQQ"]
[Fri Feb 27 19:01:55.623052 2026] [:error] [pid 49306:tid 49322] [client 20.63.83.113:15332] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless8.php"] [unique_id "aaF5o_nSUDZue59Px9vLygAAAU4"]
[Fri Feb 27 19:01:56.073055 2026] [:error] [pid 62998:tid 63017] [client 20.63.83.113:58649] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless8.php"] [unique_id "aaF5pFQeueXZDUmoLokWGgAAAQ8"]
[Fri Feb 27 19:01:56.508233 2026] [:error] [pid 52073:tid 52092] [client 20.63.83.113:27446] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless8.php"] [unique_id "aaF5pIa650YPyxXVeRbg2wAAAZA"]
[Fri Feb 27 19:01:57.012843 2026] [:error] [pid 52073:tid 52084] [client 20.63.83.113:59342] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless8.php"] [unique_id "aaF5pYa650YPyxXVeRbg3QAAAYg"]
[Fri Feb 27 19:01:57.610603 2026] [:error] [pid 49306:tid 49318] [client 20.63.83.113:42347] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless9.php"] [unique_id "aaF5pfnSUDZue59Px9vL0gAAAUo"]
[Fri Feb 27 19:01:58.095179 2026] [:error] [pid 56075:tid 56097] [client 20.63.83.113:43705] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless9.php"] [unique_id "aaF5psKBhrfI6KNv9RhfbQAAABM"]
[Fri Feb 27 19:01:58.668135 2026] [:error] [pid 52073:tid 52100] [client 20.63.83.113:42322] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless9.php"] [unique_id "aaF5poa650YPyxXVeRbg4wAAAZg"]
[Fri Feb 27 19:01:59.103009 2026] [:error] [pid 52073:tid 52099] [client 20.63.83.113:59310] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless9.php"] [unique_id "aaF5p4a650YPyxXVeRbg6QAAAZc"]
[Fri Feb 27 19:01:59.556073 2026] [:error] [pid 54101:tid 54132] [client 20.63.83.113:3910] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law2.php"] [unique_id "aaF5p1Y5qgRktcYTGFswfQAAAdg"]
[Fri Feb 27 19:01:59.979031 2026] [:error] [pid 54231:tid 54246] [client 20.63.83.113:29694] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law2.php"] [unique_id "aaF5p-Tvb5AeyJCdY7DsJQAAAEw"]
[Fri Feb 27 19:02:00.397365 2026] [:error] [pid 49306:tid 49320] [client 20.63.83.113:48779] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law2.php"] [unique_id "aaF5qPnSUDZue59Px9vL3gAAAUw"]
[Fri Feb 27 19:02:00.864043 2026] [:error] [pid 49306:tid 49313] [client 20.63.83.113:43683] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law2.php"] [unique_id "aaF5qPnSUDZue59Px9vL4wAAAUU"]
[Fri Feb 27 19:02:01.341438 2026] [:error] [pid 49306:tid 49317] [client 20.63.83.113:56104] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law3.php"] [unique_id "aaF5qfnSUDZue59Px9vL6wAAAUk"]
[Fri Feb 27 19:02:01.799662 2026] [:error] [pid 49306:tid 49315] [client 20.63.83.113:16199] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law3.php"] [unique_id "aaF5qfnSUDZue59Px9vL7wAAAUc"]
[Fri Feb 27 19:02:02.267447 2026] [:error] [pid 54231:tid 54248] [client 20.63.83.113:22753] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law3.php"] [unique_id "aaF5quTvb5AeyJCdY7DsJwAAAE4"]
[Fri Feb 27 19:02:02.709841 2026] [:error] [pid 52073:tid 52077] [client 20.63.83.113:48821] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law3.php"] [unique_id "aaF5qoa650YPyxXVeRbg8QAAAYE"]
[Fri Feb 27 19:02:03.148898 2026] [:error] [pid 52073:tid 52094] [client 20.63.83.113:42313] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law4.php"] [unique_id "aaF5q4a650YPyxXVeRbg9QAAAZI"]
[Fri Feb 27 19:02:03.649591 2026] [:error] [pid 52073:tid 52079] [client 20.63.83.113:59271] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law4.php"] [unique_id "aaF5q4a650YPyxXVeRbg-AAAAYM"]
[Fri Feb 27 19:02:04.189876 2026] [:error] [pid 52073:tid 52086] [client 20.63.83.113:5677] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law4.php"] [unique_id "aaF5rIa650YPyxXVeRbg-QAAAYo"]
[Fri Feb 27 19:02:04.670582 2026] [:error] [pid 52073:tid 52087] [client 20.63.83.113:43686] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law4.php"] [unique_id "aaF5rIa650YPyxXVeRbg_QAAAYs"]
[Fri Feb 27 19:02:05.137991 2026] [:error] [pid 52073:tid 52099] [client 20.63.83.113:27401] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law5.php"] [unique_id "aaF5rYa650YPyxXVeRbhBAAAAZc"]
[Fri Feb 27 19:02:05.660532 2026] [:error] [pid 52073:tid 52086] [client 20.63.83.113:34326] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law5.php"] [unique_id "aaF5rYa650YPyxXVeRbhBwAAAYo"]
[Fri Feb 27 19:02:06.123235 2026] [:error] [pid 52073:tid 52082] [client 20.63.83.113:43584] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law5.php"] [unique_id "aaF5roa650YPyxXVeRbhCgAAAYY"]
[Fri Feb 27 19:02:06.567975 2026] [:error] [pid 52073:tid 52076] [client 20.63.83.113:56082] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law5.php"] [unique_id "aaF5roa650YPyxXVeRbhDgAAAYA"]
[Fri Feb 27 19:02:06.983639 2026] [:error] [pid 52073:tid 52092] [client 20.63.83.113:59269] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law6.php"] [unique_id "aaF5roa650YPyxXVeRbhFAAAAZA"]
[Fri Feb 27 19:02:07.431807 2026] [:error] [pid 56075:tid 56079] [client 20.63.83.113:16236] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law6.php"] [unique_id "aaF5r8KBhrfI6KNv9RhfcwAAAAI"]
[Fri Feb 27 19:02:07.898224 2026] [:error] [pid 56075:tid 56082] [client 20.63.83.113:29680] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law6.php"] [unique_id "aaF5r8KBhrfI6KNv9RhfdgAAAAU"]
[Fri Feb 27 19:02:08.334021 2026] [:error] [pid 52073:tid 52099] [client 20.63.83.113:45360] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law6.php"] [unique_id "aaF5sIa650YPyxXVeRbhHgAAAZc"]
[Fri Feb 27 19:02:08.878228 2026] [:error] [pid 49306:tid 49317] [client 20.63.83.113:59371] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law7.php"] [unique_id "aaF5sPnSUDZue59Px9vMIAAAAUk"]
[Fri Feb 27 19:02:09.318475 2026] [:error] [pid 49306:tid 49320] [client 20.63.83.113:42341] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law7.php"] [unique_id "aaF5sfnSUDZue59Px9vMJAAAAUw"]
[Fri Feb 27 19:02:09.742724 2026] [:error] [pid 54103:tid 54187] [client 20.63.83.113:45339] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law7.php"] [unique_id "aaF5sevG4MPCmE0B2sCKYwAAANA"]
[Fri Feb 27 19:02:10.158267 2026] [:error] [pid 54231:tid 54251] [client 20.63.83.113:45363] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law7.php"] [unique_id "aaF5suTvb5AeyJCdY7DsKgAAAFE"]
[Fri Feb 27 19:02:10.627556 2026] [:error] [pid 49306:tid 49326] [client 20.63.83.113:59360] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law8.php"] [unique_id "aaF5svnSUDZue59Px9vMLAAAAVI"]
[Fri Feb 27 19:02:11.179745 2026] [:error] [pid 49306:tid 49326] [client 20.63.83.113:59385] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law8.php"] [unique_id "aaF5s_nSUDZue59Px9vMOAAAAVI"]
[Fri Feb 27 19:02:11.608202 2026] [:error] [pid 49306:tid 49320] [client 20.63.83.113:55425] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law8.php"] [unique_id "aaF5s_nSUDZue59Px9vMPAAAAUw"]
[Fri Feb 27 19:02:12.108502 2026] [:error] [pid 49306:tid 49313] [client 20.63.83.113:20679] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law8.php"] [unique_id "aaF5tPnSUDZue59Px9vMQgAAAUU"]
[Fri Feb 27 19:02:12.720544 2026] [:error] [pid 54231:tid 54234] [client 20.63.83.113:4901] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law9.php"] [unique_id "aaF5tOTvb5AeyJCdY7DsLwAAAEA"]
[Fri Feb 27 19:02:13.161844 2026] [:error] [pid 52073:tid 52082] [client 20.63.83.113:30572] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law9.php"] [unique_id "aaF5tYa650YPyxXVeRbhKAAAAYY"]
[Fri Feb 27 19:02:13.712660 2026] [:error] [pid 56075:tid 56099] [client 20.63.83.113:14939] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law9.php"] [unique_id "aaF5tcKBhrfI6KNv9RhfewAAABU"]
[Fri Feb 27 19:02:14.190780 2026] [:error] [pid 52073:tid 52076] [client 20.63.83.113:45361] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law9.php"] [unique_id "aaF5toa650YPyxXVeRbhKwAAAYA"]
[Fri Feb 27 19:02:14.628086 2026] [:error] [pid 49306:tid 49330] [client 20.63.83.113:29743] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law10.php"] [unique_id "aaF5tvnSUDZue59Px9vMXgAAAVY"]
[Fri Feb 27 19:02:15.083738 2026] [:error] [pid 56075:tid 56091] [client 20.63.83.113:5653] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law10.php"] [unique_id "aaF5t8KBhrfI6KNv9RhffAAAAA0"]
[Fri Feb 27 19:02:15.622689 2026] [:error] [pid 56075:tid 56086] [client 20.63.83.113:4890] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law10.php"] [unique_id "aaF5t8KBhrfI6KNv9RhffQAAAAk"]
[Fri Feb 27 19:02:16.188988 2026] [:error] [pid 49306:tid 49316] [client 20.63.83.113:30558] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/law10.php"] [unique_id "aaF5uPnSUDZue59Px9vMbAAAAUg"]
[Fri Feb 27 19:02:16.678614 2026] [:error] [pid 49306:tid 49311] [client 20.63.83.113:28075] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaF5uPnSUDZue59Px9vMdQAAAUM"]
[Fri Feb 27 19:02:17.192172 2026] [:error] [pid 62998:tid 63016] [client 20.63.83.113:29741] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaF5uVQeueXZDUmoLokWJgAAAQ4"]
[Fri Feb 27 19:02:17.669574 2026] [:error] [pid 54103:tid 54170] [client 20.63.83.113:45368] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaF5uevG4MPCmE0B2sCKZQAAAMA"]
[Fri Feb 27 19:02:18.127953 2026] [:error] [pid 62998:tid 63021] [client 20.63.83.113:4882] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaF5ulQeueXZDUmoLokWKAAAARM"]
[Fri Feb 27 19:02:18.622324 2026] [:error] [pid 56075:tid 56080] [client 20.63.83.113:28083] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aaF5usKBhrfI6KNv9RhfhQAAAAM"]
[Fri Feb 27 19:02:19.049673 2026] [:error] [pid 54103:tid 54195] [client 20.63.83.113:55457] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aaF5u-vG4MPCmE0B2sCKaQAAANg"]
[Fri Feb 27 19:02:19.497060 2026] [:error] [pid 56075:tid 56082] [client 20.63.83.113:34354] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aaF5u8KBhrfI6KNv9RhfigAAAAU"]
[Fri Feb 27 19:02:19.941833 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:30529] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "aaF5u4a650YPyxXVeRbhNgAAAY4"]
[Fri Feb 27 19:02:20.429738 2026] [:error] [pid 56075:tid 56085] [client 20.63.83.113:4866] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaF5vMKBhrfI6KNv9RhfjwAAAAg"]
[Fri Feb 27 19:02:20.886616 2026] [:error] [pid 54102:tid 54152] [client 20.63.83.113:14932] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaF5vHi74D4fiYUm_GdZpQAAAIg"]
[Fri Feb 27 19:02:21.315882 2026] [:error] [pid 49306:tid 49313] [client 20.63.83.113:20706] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaF5vfnSUDZue59Px9vMkgAAAUU"]
[Fri Feb 27 19:02:21.744280 2026] [:error] [pid 56075:tid 56102] [client 20.63.83.113:29709] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaF5vcKBhrfI6KNv9RhflgAAABg"]
[Fri Feb 27 19:02:22.180921 2026] [:error] [pid 52073:tid 52079] [client 20.63.83.113:5537] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaF5voa650YPyxXVeRbhOwAAAYM"]
[Fri Feb 27 19:02:22.671491 2026] [:error] [pid 54103:tid 54175] [client 20.63.83.113:3808] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaF5vuvG4MPCmE0B2sCKagAAAMQ"]
[Fri Feb 27 19:02:23.095508 2026] [:error] [pid 52073:tid 52089] [client 20.63.83.113:30558] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaF5v4a650YPyxXVeRbhPAAAAY0"]
[Fri Feb 27 19:02:23.551690 2026] [:error] [pid 52073:tid 52099] [client 20.63.83.113:3776] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaF5v4a650YPyxXVeRbhPQAAAZc"]
[Fri Feb 27 19:02:24.113455 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:45371] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaF5wIa650YPyxXVeRbhQQAAAY4"]
[Fri Feb 27 19:02:24.538319 2026] [:error] [pid 52073:tid 52094] [client 20.63.83.113:5638] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaF5wIa650YPyxXVeRbhRAAAAZI"]
[Fri Feb 27 19:02:24.957583 2026] [:error] [pid 52073:tid 52087] [client 20.63.83.113:20702] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaF5wIa650YPyxXVeRbhRwAAAYs"]
[Fri Feb 27 19:02:25.411063 2026] [:error] [pid 54231:tid 54245] [client 20.63.83.113:56296] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaF5weTvb5AeyJCdY7DsOQAAAEs"]
[Fri Feb 27 19:02:25.901265 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:3831] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aaF5wYa650YPyxXVeRbhTQAAAY4"]
[Fri Feb 27 19:02:26.364481 2026] [:error] [pid 54231:tid 54251] [client 20.63.83.113:30560] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aaF5wuTvb5AeyJCdY7DsOgAAAFE"]
[Fri Feb 27 19:02:26.843177 2026] [:error] [pid 62998:tid 63010] [client 20.63.83.113:5687] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aaF5wlQeueXZDUmoLokWMQAAAQg"]
[Fri Feb 27 19:02:27.314897 2026] [:error] [pid 54231:tid 54234] [client 20.63.83.113:45341] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avaa.php"] [unique_id "aaF5w-Tvb5AeyJCdY7DsPQAAAEA"]
[Fri Feb 27 19:02:27.854159 2026] [:error] [pid 56075:tid 56087] [client 20.63.83.113:29736] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aaF5w8KBhrfI6KNv9RhfogAAAAo"]
[Fri Feb 27 19:02:28.312005 2026] [:error] [pid 52073:tid 52093] [client 20.63.83.113:29909] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aaF5xIa650YPyxXVeRbhXwAAAZE"]
[Fri Feb 27 19:02:28.837134 2026] [:error] [pid 52073:tid 52085] [client 20.63.83.113:34340] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aaF5xIa650YPyxXVeRbhZQAAAYk"]
[Fri Feb 27 19:02:29.347123 2026] [:error] [pid 49306:tid 49315] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Feb 27 19:02:29.564527 2026] [:error] [pid 49306:tid 49314] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/arig.php
[Fri Feb 27 19:02:29.792935 2026] [:error] [pid 49306:tid 49313] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Feb 27 19:02:30.000918 2026] [:error] [pid 49306:tid 49331] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Fri Feb 27 19:02:30.212074 2026] [:error] [pid 49306:tid 49311] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri Feb 27 19:02:30.632612 2026] [:error] [pid 49306:tid 49309] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/style2.php
[Fri Feb 27 19:02:30.849911 2026] [:error] [pid 49306:tid 49328] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/bugz.php
[Fri Feb 27 19:02:31.063968 2026] [:error] [pid 49306:tid 49319] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Fri Feb 27 19:02:31.272117 2026] [:error] [pid 49306:tid 49320] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Fri Feb 27 19:02:31.481482 2026] [:error] [pid 49306:tid 49312] [client 20.63.83.113:29897] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Fri Feb 27 19:02:31.689635 2026] [:error] [pid 49306:tid 49315] [client 20.63.83.113:29897] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaF5x_nSUDZue59Px9vMvwAAAUc"]
[Fri Feb 27 19:02:32.228257 2026] [:error] [pid 62998:tid 63009] [client 20.63.83.113:14942] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaF5yFQeueXZDUmoLokWOgAAAQc"]
[Fri Feb 27 19:02:32.679364 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:54898] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaF5yIa650YPyxXVeRbhhwAAAY4"]
[Fri Feb 27 19:02:33.181304 2026] [:error] [pid 49306:tid 49317] [client 20.63.83.113:13874] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaF5yfnSUDZue59Px9vMwwAAAUk"]
[Fri Feb 27 19:02:33.619450 2026] [:error] [pid 49306:tid 49328] [client 20.63.83.113:5663] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaF5yfnSUDZue59Px9vMxQAAAVQ"]
[Fri Feb 27 19:02:34.079303 2026] [:error] [pid 62998:tid 63001] [client 20.63.83.113:45314] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaF5ylQeueXZDUmoLokWQAAAAQA"]
[Fri Feb 27 19:02:34.578061 2026] [:error] [pid 49306:tid 49323] [client 20.63.83.113:45319] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaF5yvnSUDZue59Px9vMygAAAU8"]
[Fri Feb 27 19:02:35.082208 2026] [:error] [pid 52073:tid 52084] [client 20.63.83.113:30552] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaF5y4a650YPyxXVeRbhmAAAAYg"]
[Fri Feb 27 19:02:35.526749 2026] [:error] [pid 54103:tid 54182] [client 20.63.83.113:45349] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erin1.PhP7"] [unique_id "aaF5y-vG4MPCmE0B2sCKbQAAAMs"]
[Fri Feb 27 19:02:35.986715 2026] [:error] [pid 52073:tid 52097] [client 20.63.83.113:29725] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erin1.PhP7"] [unique_id "aaF5y4a650YPyxXVeRbhngAAAZU"]
[Fri Feb 27 19:02:36.434334 2026] [:error] [pid 62998:tid 63020] [client 20.63.83.113:30542] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erin1.PhP7"] [unique_id "aaF5zFQeueXZDUmoLokWRgAAARI"]
[Fri Feb 27 19:02:36.927239 2026] [:error] [pid 52073:tid 52090] [client 20.63.83.113:4910] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erin1.PhP7"] [unique_id "aaF5zIa650YPyxXVeRbhrgAAAY4"]
[Fri Feb 27 19:02:37.404993 2026] [:error] [pid 52073:tid 52092] [client 20.63.83.113:20677] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Njima.php"] [unique_id "aaF5zYa650YPyxXVeRbhswAAAZA"]
[Fri Feb 27 19:02:37.857837 2026] [:error] [pid 54102:tid 54153] [client 20.63.83.113:5662] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Njima.php"] [unique_id "aaF5zXi74D4fiYUm_GdZpwAAAIk"]
[Fri Feb 27 19:02:38.310636 2026] [:error] [pid 49306:tid 49315] [client 20.63.83.113:14973] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Njima.php"] [unique_id "aaF5zvnSUDZue59Px9vM1wAAAUc"]
[Fri Feb 27 19:02:38.749127 2026] [:error] [pid 49306:tid 49314] [client 20.63.83.113:56260] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Njima.php"] [unique_id "aaF5zvnSUDZue59Px9vM2QAAAUY"]
[Fri Feb 27 19:02:39.193031 2026] [:error] [pid 52073:tid 52091] [client 20.63.83.113:5534] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "aaF5z4a650YPyxXVeRbhvgAAAY8"]
[Fri Feb 27 19:02:39.629744 2026] [:error] [pid 52073:tid 52089] [client 20.63.83.113:13829] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "aaF5z4a650YPyxXVeRbhwgAAAY0"]
[Fri Feb 27 19:02:40.078143 2026] [:error] [pid 52073:tid 52083] [client 20.63.83.113:54888] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "aaF50Ia650YPyxXVeRbhyAAAAYc"]
[Fri Feb 27 19:02:40.534977 2026] [:error] [pid 52073:tid 52076] [client 20.63.83.113:30582] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "aaF50Ia650YPyxXVeRbhywAAAYA"]
[Fri Feb 27 19:02:40.990505 2026] [:error] [pid 52073:tid 52081] [client 20.63.83.113:4908] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BIBIL.php"] [unique_id "aaF50Ia650YPyxXVeRbh0gAAAYU"]
[Fri Feb 27 19:02:41.435929 2026] [:error] [pid 54231:tid 54252] [client 20.63.83.113:5556] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BIBIL.php"] [unique_id "aaF50eTvb5AeyJCdY7DsUAAAAFI"]
[Fri Feb 27 19:02:41.851563 2026] [:error] [pid 52073:tid 52081] [client 20.63.83.113:54899] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BIBIL.php"] [unique_id "aaF50Ya650YPyxXVeRbh4AAAAYU"]
[Fri Feb 27 19:02:42.274618 2026] [:error] [pid 52073:tid 52080] [client 20.63.83.113:29712] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BIBIL.php"] [unique_id "aaF50oa650YPyxXVeRbh5QAAAYQ"]
[Fri Feb 27 19:02:42.691747 2026] [:error] [pid 52073:tid 52081] [client 20.63.83.113:34355] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aaF50oa650YPyxXVeRbh7AAAAYU"]
[Fri Feb 27 19:02:43.119331 2026] [:error] [pid 54101:tid 54130] [client 20.63.83.113:34317] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aaF501Y5qgRktcYTGFswigAAAdY"]
[Fri Feb 27 19:02:43.532128 2026] [:error] [pid 52073:tid 52091] [client 20.63.83.113:14950] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aaF504a650YPyxXVeRbh-wAAAY8"]
[Fri Feb 27 19:02:43.962937 2026] [:error] [pid 52073:tid 52092] [client 20.63.83.113:17267] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aaF504a650YPyxXVeRbiAQAAAZA"]
[Fri Feb 27 19:02:44.382870 2026] [:error] [pid 56075:tid 56083] [client 20.63.83.113:4909] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvirglze.php"] [unique_id "aaF51MKBhrfI6KNv9RhfwQAAAAY"]
[Fri Feb 27 19:02:44.803555 2026] [:error] [pid 56075:tid 56078] [client 20.63.83.113:6787] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvirglze.php"] [unique_id "aaF51MKBhrfI6KNv9RhfxgAAAAE"]
[Fri Feb 27 19:02:45.232884 2026] [:error] [pid 49306:tid 49332] [client 20.63.83.113:63088] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvirglze.php"] [unique_id "aaF51fnSUDZue59Px9vM6QAAAVg"]
[Fri Feb 27 19:02:45.664335 2026] [:error] [pid 49306:tid 49317] [client 20.63.83.113:5647] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvirglze.php"] [unique_id "aaF51fnSUDZue59Px9vM7QAAAUk"]
[Fri Feb 27 19:02:46.094470 2026] [:error] [pid 49306:tid 49331] [client 20.63.83.113:56293] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aaF51vnSUDZue59Px9vM7wAAAVc"]
[Fri Feb 27 19:02:46.521425 2026] [:error] [pid 49306:tid 49325] [client 20.63.83.113:14970] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aaF51vnSUDZue59Px9vM8gAAAVE"]
[Fri Feb 27 19:02:46.973657 2026] [:error] [pid 52073:tid 52093] [client 20.63.83.113:30535] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aaF51oa650YPyxXVeRbiDgAAAZE"]
[Fri Feb 27 19:02:47.393740 2026] [:error] [pid 54231:tid 54252] [client 20.63.83.113:34365] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "aaF51-Tvb5AeyJCdY7DsYwAAAFI"]
[Fri Feb 27 19:46:16.808834 2026] [:error] [pid 54102:tid 54165] [client 4.204.192.31:14222] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGECHi74D4fiYUm_Gdf9wAAAJU"]
[Fri Feb 27 19:46:17.464133 2026] [:error] [pid 49306:tid 49326] [client 4.204.192.31:14298] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGECfnSUDZue59Px9voJwAAAVI"]
[Fri Feb 27 19:46:18.090986 2026] [:error] [pid 49306:tid 49314] [client 4.204.192.31:14219] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGECvnSUDZue59Px9voLgAAAUY"]
[Fri Feb 27 19:46:18.567407 2026] [:error] [pid 49306:tid 49318] [client 4.204.192.31:14215] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGECvnSUDZue59Px9voNQAAAUo"]
[Fri Feb 27 20:01:43.907558 2026] [:error] [pid 56075:tid 56091] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri Feb 27 20:01:44.121755 2026] [:error] [pid 56075:tid 56100] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/tews.php
[Fri Feb 27 20:01:44.333864 2026] [:error] [pid 56075:tid 56084] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/wpp.php
[Fri Feb 27 20:01:44.549644 2026] [:error] [pid 56075:tid 56095] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/wc49.php
[Fri Feb 27 20:01:44.761258 2026] [:error] [pid 56075:tid 56097] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/TL.php
[Fri Feb 27 20:01:44.974064 2026] [:error] [pid 56075:tid 56085] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Fri Feb 27 20:01:45.185870 2026] [:error] [pid 56075:tid 56077] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/fck.php
[Fri Feb 27 20:01:45.398609 2026] [:error] [pid 56075:tid 56088] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Fri Feb 27 20:01:45.610326 2026] [:error] [pid 56075:tid 56101] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Fri Feb 27 20:01:45.824589 2026] [:error] [pid 56075:tid 56097] [client 20.104.16.102:60563] File does not exist: /usr/local/apache/htdocs/suspended-page/nw2.php
[Fri Feb 27 20:01:46.034558 2026] [:error] [pid 56075:tid 56085] [client 20.104.16.102:60563] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blackmini.php"] [unique_id "aaGHqsKBhrfI6KNv9Rh7oAAAAAg"]
[Fri Feb 27 20:01:46.447985 2026] [:error] [pid 54102:tid 54145] [client 20.104.16.102:61182] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blackmini.php"] [unique_id "aaGHqni74D4fiYUm_GdiswAAAIE"]
[Fri Feb 27 20:01:46.870053 2026] [:error] [pid 54231:tid 54258] [client 20.104.16.102:59122] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blackmini.php"] [unique_id "aaGHquTvb5AeyJCdY7D6OAAAAFg"]
[Fri Feb 27 20:01:47.287639 2026] [:error] [pid 54103:tid 54181] [client 20.104.16.102:60662] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blackmini.php"] [unique_id "aaGHq-vG4MPCmE0B2sCVPwAAAMo"]
[Fri Feb 27 20:01:47.702668 2026] [:error] [pid 54101:tid 54128] [client 20.104.16.102:61171] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaGHq1Y5qgRktcYTGFs3SQAAAdQ"]
[Fri Feb 27 20:01:48.119410 2026] [:error] [pid 52073:tid 52087] [client 20.104.16.102:58476] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaGHrIa650YPyxXVeRYUWgAAAYs"]
[Fri Feb 27 20:01:48.536121 2026] [:error] [pid 54102:tid 54144] [client 20.104.16.102:60665] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaGHrHi74D4fiYUm_GditwAAAIA"]
[Fri Feb 27 20:01:48.953008 2026] [:error] [pid 52073:tid 52078] [client 20.104.16.102:59049] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaGHrIa650YPyxXVeRYUZAAAAYI"]
[Fri Feb 27 20:01:49.372521 2026] [:error] [pid 54101:tid 54123] [client 20.104.16.102:59011] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F19.php"] [unique_id "aaGHrVY5qgRktcYTGFs3SwAAAc8"]
[Fri Feb 27 20:01:49.794005 2026] [:error] [pid 62998:tid 63002] [client 20.104.16.102:58435] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F19.php"] [unique_id "aaGHrVQeueXZDUmoLokpkgAAAQE"]
[Fri Feb 27 20:01:50.209647 2026] [:error] [pid 56075:tid 56101] [client 20.104.16.102:60604] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F19.php"] [unique_id "aaGHrsKBhrfI6KNv9Rh7ugAAABc"]
[Fri Feb 27 20:01:50.624548 2026] [:error] [pid 52073:tid 52076] [client 20.104.16.102:60627] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F19.php"] [unique_id "aaGHroa650YPyxXVeRYUcgAAAYA"]
[Fri Feb 27 20:01:51.045455 2026] [:error] [pid 52073:tid 52095] [client 20.104.16.102:58458] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F1.php"] [unique_id "aaGHr4a650YPyxXVeRYUdAAAAZM"]
[Fri Feb 27 20:01:51.469408 2026] [:error] [pid 62998:tid 63020] [client 20.104.16.102:61073] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F1.php"] [unique_id "aaGHr1QeueXZDUmoLokplgAAARI"]
[Fri Feb 27 20:01:51.891026 2026] [:error] [pid 52073:tid 52078] [client 20.104.16.102:60634] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F1.php"] [unique_id "aaGHr4a650YPyxXVeRYUdwAAAYI"]
[Fri Feb 27 20:01:52.314290 2026] [:error] [pid 49306:tid 49316] [client 20.104.16.102:61071] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F1.php"] [unique_id "aaGHsPnSUDZue59Px9vv6gAAAUg"]
[Fri Feb 27 20:01:52.747767 2026] [:error] [pid 52073:tid 52085] [client 20.104.16.102:59069] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGHsIa650YPyxXVeRYUfAAAAYk"]
[Fri Feb 27 20:01:53.162660 2026] [:error] [pid 56075:tid 56088] [client 20.104.16.102:59023] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGHscKBhrfI6KNv9Rh7xQAAAAs"]
[Fri Feb 27 20:01:53.578550 2026] [:error] [pid 52073:tid 52093] [client 20.104.16.102:58451] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGHsYa650YPyxXVeRYUggAAAZE"]
[Fri Feb 27 20:01:53.989628 2026] [:error] [pid 56075:tid 56095] [client 20.104.16.102:60668] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGHscKBhrfI6KNv9Rh7yAAAABE"]
[Fri Feb 27 20:01:54.405156 2026] [:error] [pid 49306:tid 49320] [client 20.104.16.102:60595] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/R57.php"] [unique_id "aaGHsvnSUDZue59Px9vv7wAAAUw"]
[Fri Feb 27 20:01:54.817820 2026] [:error] [pid 54101:tid 54117] [client 20.104.16.102:59087] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/R57.php"] [unique_id "aaGHslY5qgRktcYTGFs3TgAAAck"]
[Fri Feb 27 20:01:55.227023 2026] [:error] [pid 56075:tid 56101] [client 20.104.16.102:60655] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/R57.php"] [unique_id "aaGHs8KBhrfI6KNv9Rh7zAAAABc"]
[Fri Feb 27 20:01:55.638717 2026] [:error] [pid 52073:tid 52085] [client 20.104.16.102:60646] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/R57.php"] [unique_id "aaGHs4a650YPyxXVeRYUlwAAAYk"]
[Fri Feb 27 20:01:56.052971 2026] [:error] [pid 49306:tid 49314] [client 20.104.16.102:60629] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaGHtPnSUDZue59Px9vv9QAAAUY"]
[Fri Feb 27 20:01:56.466154 2026] [:error] [pid 56075:tid 56082] [client 20.104.16.102:59113] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaGHtMKBhrfI6KNv9Rh70gAAAAU"]
[Fri Feb 27 20:01:56.887082 2026] [:error] [pid 56075:tid 56096] [client 20.104.16.102:60642] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaGHtMKBhrfI6KNv9Rh71gAAABI"]
[Fri Feb 27 20:01:57.313258 2026] [:error] [pid 52073:tid 52093] [client 20.104.16.102:60613] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaGHtYa650YPyxXVeRYUogAAAZE"]
[Fri Feb 27 20:01:57.732347 2026] [:error] [pid 52073:tid 52100] [client 20.104.16.102:61133] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaGHtYa650YPyxXVeRYUpQAAAZg"]
[Fri Feb 27 20:01:58.147349 2026] [:error] [pid 52073:tid 52086] [client 20.104.16.102:60649] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaGHtoa650YPyxXVeRYUqAAAAYo"]
[Fri Feb 27 20:01:58.559257 2026] [:error] [pid 56075:tid 56101] [client 20.104.16.102:60555] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaGHtsKBhrfI6KNv9Rh73gAAABc"]
[Fri Feb 27 20:01:58.972933 2026] [:error] [pid 54103:tid 54186] [client 20.104.16.102:59092] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaGHtuvG4MPCmE0B2sCVRwAAAM8"]
[Fri Feb 27 20:01:59.399473 2026] [:error] [pid 54103:tid 54185] [client 20.104.16.102:23131] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaGHt-vG4MPCmE0B2sCVSAAAAM4"]
[Fri Feb 27 20:01:59.820739 2026] [:error] [pid 56075:tid 56099] [client 20.104.16.102:61083] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaGHt8KBhrfI6KNv9Rh74wAAABU"]
[Fri Feb 27 20:02:00.230983 2026] [:error] [pid 56075:tid 56081] [client 20.104.16.102:60666] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaGHuMKBhrfI6KNv9Rh75gAAAAQ"]
[Fri Feb 27 20:02:00.651209 2026] [:error] [pid 54102:tid 54169] [client 20.104.16.102:59104] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaGHuHi74D4fiYUm_GdiuwAAAJg"]
[Fri Feb 27 20:02:01.069967 2026] [:error] [pid 54231:tid 54247] [client 20.104.16.102:60587] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaGHueTvb5AeyJCdY7D6QAAAAE0"]
[Fri Feb 27 20:02:01.483595 2026] [:error] [pid 56075:tid 56085] [client 20.104.16.102:60577] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaGHucKBhrfI6KNv9Rh77AAAAAg"]
[Fri Feb 27 20:02:01.897631 2026] [:error] [pid 62998:tid 63023] [client 20.104.16.102:61101] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaGHuVQeueXZDUmoLokpnwAAARU"]
[Fri Feb 27 20:02:02.319088 2026] [:error] [pid 52073:tid 52084] [client 20.104.16.102:61116] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaGHuoa650YPyxXVeRYUvwAAAYg"]
[Fri Feb 27 20:02:02.749918 2026] [:error] [pid 54231:tid 54248] [client 20.104.16.102:61175] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaGHuuTvb5AeyJCdY7D6RQAAAE4"]
[Fri Feb 27 20:02:03.173948 2026] [:error] [pid 54102:tid 54150] [client 20.104.16.102:61088] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaGHu3i74D4fiYUm_GdivgAAAIY"]
[Fri Feb 27 20:02:03.608192 2026] [:error] [pid 56075:tid 56095] [client 20.104.16.102:61142] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaGHu8KBhrfI6KNv9Rh79gAAABE"]
[Fri Feb 27 20:02:04.018995 2026] [:error] [pid 56075:tid 56100] [client 20.104.16.102:59072] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaGHvMKBhrfI6KNv9Rh7-AAAABY"]
[Fri Feb 27 20:02:04.463130 2026] [:error] [pid 62998:tid 63002] [client 20.104.16.102:59130] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samfa.php"] [unique_id "aaGHvFQeueXZDUmoLokppQAAAQE"]
[Fri Feb 27 20:02:04.878978 2026] [:error] [pid 56075:tid 56101] [client 20.104.16.102:60570] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samfa.php"] [unique_id "aaGHvMKBhrfI6KNv9Rh7-wAAABc"]
[Fri Feb 27 20:02:05.301720 2026] [:error] [pid 52073:tid 52094] [client 20.104.16.102:61163] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samfa.php"] [unique_id "aaGHvYa650YPyxXVeRYUzgAAAZI"]
[Fri Feb 27 20:02:05.730362 2026] [:error] [pid 49306:tid 49313] [client 20.104.16.102:60544] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samfa.php"] [unique_id "aaGHvfnSUDZue59Px9vv_wAAAUU"]
[Fri Feb 27 20:02:06.139910 2026] [:error] [pid 56075:tid 56078] [client 20.104.16.102:60582] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/boots.php"] [unique_id "aaGHvsKBhrfI6KNv9Rh7_wAAAAE"]
[Fri Feb 27 20:02:06.559454 2026] [:error] [pid 56075:tid 56096] [client 20.104.16.102:61124] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/boots.php"] [unique_id "aaGHvsKBhrfI6KNv9Rh8BAAAABI"]
[Fri Feb 27 20:02:06.981344 2026] [:error] [pid 56075:tid 56101] [client 20.104.16.102:60561] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/boots.php"] [unique_id "aaGHvsKBhrfI6KNv9Rh8DgAAABc"]
[Fri Feb 27 20:02:07.397993 2026] [:error] [pid 56075:tid 56091] [client 20.104.16.102:60652] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/boots.php"] [unique_id "aaGHv8KBhrfI6KNv9Rh8FQAAAA0"]
[Fri Feb 27 20:02:07.817710 2026] [:error] [pid 56075:tid 56082] [client 20.104.16.102:59050] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaGHv8KBhrfI6KNv9Rh8IAAAAAU"]
[Fri Feb 27 20:02:08.234129 2026] [:error] [pid 54101:tid 54129] [client 20.104.16.102:60660] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaGHwFY5qgRktcYTGFs3WgAAAdU"]
[Fri Feb 27 20:02:08.685109 2026] [:error] [pid 54102:tid 54158] [client 20.104.16.102:60589] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaGHwHi74D4fiYUm_GdiwgAAAI4"]
[Fri Feb 27 20:02:09.337737 2026] [:error] [pid 52073:tid 52077] [client 20.104.16.102:61075] [client 20.104.16.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaGHwYa650YPyxXVeRYU5AAAAYE"]
[Fri Feb 27 20:11:17.214909 2026] [:error] [pid 52073:tid 52086] [client 43.135.142.7:40622] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaGJ5Ya650YPyxXVeRYcPQAAAYo"]
[Fri Feb 27 20:20:34.705010 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:33945] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Fri Feb 27 20:20:34.915721 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:33945] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Feb 27 20:20:35.330775 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:33945] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGME8KBhrfI6KNv9RiRQwAAABM"]
[Fri Feb 27 20:20:36.585833 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:33923] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Feb 27 20:20:37.004292 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:33923] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Feb 27 20:20:37.634346 2026] [:error] [pid 49306:tid 49313] [client 20.220.8.221:33923] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGMFfnSUDZue59Px9v3WgAAAUU"]
[Fri Feb 27 20:20:38.468998 2026] [:error] [pid 54102:tid 54164] [client 20.220.8.221:34695] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGMFni74D4fiYUm_GdlpQAAAJQ"]
[Fri Feb 27 20:20:39.326858 2026] [:error] [pid 54102:tid 54145] [client 20.220.8.221:33956] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGMF3i74D4fiYUm_GdlpwAAAIE"]
[Fri Feb 27 20:20:40.157905 2026] [:error] [pid 54101:tid 54110] [client 20.220.8.221:33968] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGMGFY5qgRktcYTGFs48wAAAcI"]
[Fri Feb 27 20:34:49.733893 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/gi.php
[Fri Feb 27 20:34:50.058136 2026] [:error] [pid 52073:tid 52096] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Feb 27 20:34:50.271364 2026] [:error] [pid 52073:tid 52092] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/0xD.php
[Fri Feb 27 20:34:50.486111 2026] [:error] [pid 52073:tid 52099] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/b7cdb465.php
[Fri Feb 27 20:34:50.693529 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/sad.php
[Fri Feb 27 20:34:50.900423 2026] [:error] [pid 52073:tid 52080] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/hzz.php
[Fri Feb 27 20:34:51.107994 2026] [:error] [pid 52073:tid 52086] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Feb 27 20:34:51.321983 2026] [:error] [pid 52073:tid 52082] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajelmxf.php
[Fri Feb 27 20:34:51.531950 2026] [:error] [pid 52073:tid 52093] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/bxhnfdgd.php
[Fri Feb 27 20:34:51.740152 2026] [:error] [pid 52073:tid 52100] [client 20.220.221.45:21462] File does not exist: /usr/local/apache/htdocs/suspended-page/solaciousness.php
[Fri Feb 27 20:34:51.946582 2026] [:error] [pid 52073:tid 52098] [client 20.220.221.45:21462] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGPa4a650YPyxXVeRYtCQAAAZY"]
[Fri Feb 27 20:34:53.369577 2026] [:error] [pid 56075:tid 56097] [client 20.220.221.45:21480] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGPbcKBhrfI6KNv9RifAwAAABM"]
[Fri Feb 27 20:34:54.372833 2026] [:error] [pid 56075:tid 56079] [client 20.220.221.45:21407] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGPbsKBhrfI6KNv9RifCgAAAAI"]
[Fri Feb 27 20:34:55.382016 2026] [:error] [pid 56075:tid 56102] [client 20.220.221.45:21479] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGPb8KBhrfI6KNv9RifDwAAABg"]
[Fri Feb 27 20:34:56.184505 2026] [:error] [pid 56075:tid 56084] [client 20.220.221.45:21445] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aaGPcMKBhrfI6KNv9RifGgAAAAc"]
[Fri Feb 27 20:34:56.855886 2026] [:error] [pid 56075:tid 56082] [client 20.220.221.45:21442] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aaGPcMKBhrfI6KNv9RifJAAAAAU"]
[Fri Feb 27 20:34:58.591980 2026] [:error] [pid 54101:tid 54124] [client 20.220.221.45:21488] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aaGPclY5qgRktcYTGFs6QgAAAdA"]
[Fri Feb 27 20:34:59.604036 2026] [:error] [pid 49306:tid 49311] [client 20.220.221.45:21387] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aaGPc_nSUDZue59Px9v-VAAAAUM"]
[Fri Feb 27 20:35:00.482731 2026] [:error] [pid 56075:tid 56078] [client 20.220.221.45:21382] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaGPdMKBhrfI6KNv9RifQwAAAAE"]
[Fri Feb 27 20:35:01.248329 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:21393] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaGPdcKBhrfI6KNv9RifSwAAABE"]
[Fri Feb 27 20:35:01.768743 2026] [:error] [pid 54103:tid 54172] [client 20.220.221.45:21449] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaGPdevG4MPCmE0B2sCb_QAAAME"]
[Fri Feb 27 20:35:02.372326 2026] [:error] [pid 62998:tid 63011] [client 20.220.221.45:21478] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aaGPdlQeueXZDUmoLok3jQAAAQk"]
[Fri Feb 27 20:35:02.965645 2026] [:error] [pid 54103:tid 54181] [client 20.220.221.45:21485] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aaGPduvG4MPCmE0B2sCcAAAAAMo"]
[Fri Feb 27 20:35:03.927026 2026] [:error] [pid 54102:tid 54145] [client 20.220.221.45:21443] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aaGPd3i74D4fiYUm_GdnfAAAAIE"]
[Fri Feb 27 20:35:04.746571 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:21473] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aaGPeIa650YPyxXVeRYtGAAAAYM"]
[Fri Feb 27 20:35:05.540660 2026] [:error] [pid 52073:tid 52091] [client 20.220.221.45:21476] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aaGPeYa650YPyxXVeRYtHAAAAY8"]
[Fri Feb 27 20:35:06.390570 2026] [:error] [pid 56075:tid 56087] [client 20.220.221.45:21397] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aaGPesKBhrfI6KNv9RifagAAAAo"]
[Fri Feb 27 20:35:06.975683 2026] [:error] [pid 49306:tid 49330] [client 20.220.221.45:21456] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aaGPevnSUDZue59Px9v-WgAAAVY"]
[Fri Feb 27 20:35:07.662724 2026] [:error] [pid 54102:tid 54168] [client 20.220.221.45:21474] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aaGPe3i74D4fiYUm_GdnfgAAAJc"]
[Fri Feb 27 20:35:08.885462 2026] [:error] [pid 52073:tid 52077] [client 20.220.221.45:21386] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aaGPfIa650YPyxXVeRYtJwAAAYE"]
[Fri Feb 27 20:35:09.700727 2026] [:error] [pid 52073:tid 52087] [client 20.220.221.45:21457] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aaGPfYa650YPyxXVeRYtKwAAAYs"]
[Fri Feb 27 20:35:10.707282 2026] [:error] [pid 54231:tid 54254] [client 20.220.221.45:21486] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aaGPfuTvb5AeyJCdY7ADfgAAAFQ"]
[Fri Feb 27 20:35:11.412495 2026] [:error] [pid 56075:tid 56086] [client 20.220.221.45:21471] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aaGPf8KBhrfI6KNv9RifiAAAAAk"]
[Fri Feb 27 20:35:12.417072 2026] [:error] [pid 56075:tid 56079] [client 20.220.221.45:21501] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aaGPgMKBhrfI6KNv9RifjgAAAAI"]
[Fri Feb 27 20:35:13.229713 2026] [:error] [pid 62998:tid 63004] [client 20.220.221.45:21412] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "aaGPgVQeueXZDUmoLok3mQAAAQI"]
[Fri Feb 27 20:35:13.839259 2026] [:error] [pid 56075:tid 56096] [client 20.220.221.45:21461] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "aaGPgcKBhrfI6KNv9RifkwAAABI"]
[Fri Feb 27 20:35:14.728996 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:21447] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "aaGPgoa650YPyxXVeRYtMwAAAYI"]
[Fri Feb 27 20:35:15.484524 2026] [:error] [pid 62998:tid 63017] [client 20.220.221.45:21441] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "aaGPg1QeueXZDUmoLok3nAAAAQ8"]
[Fri Feb 27 20:35:16.019029 2026] [:error] [pid 56075:tid 56079] [client 20.220.221.45:21477] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGPhMKBhrfI6KNv9RifoQAAAAI"]
[Fri Feb 27 20:35:16.607807 2026] [:error] [pid 62998:tid 63011] [client 20.220.221.45:21446] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGPhFQeueXZDUmoLok3nwAAAQk"]
[Fri Feb 27 20:35:17.312480 2026] [:error] [pid 52073:tid 52098] [client 20.220.221.45:21481] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGPhYa650YPyxXVeRYtOAAAAZY"]
[Fri Feb 27 20:35:17.928538 2026] [:error] [pid 54103:tid 54182] [client 20.220.221.45:21451] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajckrrj.php"] [unique_id "aaGPhevG4MPCmE0B2sCcCgAAAMs"]
[Fri Feb 27 20:35:18.495198 2026] [:error] [pid 52073:tid 52094] [client 20.220.221.45:21459] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGPhoa650YPyxXVeRYtOQAAAZI"]
[Fri Feb 27 20:35:19.148769 2026] [:error] [pid 54231:tid 54252] [client 20.220.221.45:21395] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGPh-Tvb5AeyJCdY7ADjwAAAFI"]
[Fri Feb 27 20:35:19.639531 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:21433] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGPh4a650YPyxXVeRYtOwAAAYM"]
[Fri Feb 27 20:35:20.452813 2026] [:error] [pid 52073:tid 52089] [client 20.220.221.45:21468] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGPiIa650YPyxXVeRYtPwAAAY0"]
[Fri Feb 27 20:35:21.081511 2026] [:error] [pid 52073:tid 52099] [client 20.220.221.45:21423] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "aaGPiYa650YPyxXVeRYtQgAAAZc"]
[Fri Feb 27 20:35:21.860871 2026] [:error] [pid 52073:tid 52078] [client 20.220.221.45:21426] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "aaGPiYa650YPyxXVeRYtWwAAAYI"]
[Fri Feb 27 20:35:22.857862 2026] [:error] [pid 54102:tid 54164] [client 20.220.221.45:21500] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "aaGPini74D4fiYUm_GdnigAAAJQ"]
[Fri Feb 27 20:35:23.323999 2026] [:error] [pid 56075:tid 56099] [client 20.220.221.45:21502] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "aaGPi8KBhrfI6KNv9RifwwAAABU"]
[Fri Feb 27 20:35:24.124960 2026] [:error] [pid 52073:tid 52099] [client 20.220.221.45:21464] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aaGPjIa650YPyxXVeRYthQAAAZc"]
[Fri Feb 27 20:35:25.886687 2026] [:error] [pid 56075:tid 56087] [client 20.220.221.45:21384] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aaGPjcKBhrfI6KNv9RifzgAAAAo"]
[Fri Feb 27 20:35:27.217871 2026] [:error] [pid 52073:tid 52100] [client 20.220.221.45:21424] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aaGPj4a650YPyxXVeRYtjQAAAZg"]
[Fri Feb 27 20:35:28.196953 2026] [:error] [pid 52073:tid 52080] [client 20.220.221.45:21378] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aaGPkIa650YPyxXVeRYtkQAAAYQ"]
[Fri Feb 27 20:35:28.969698 2026] [:error] [pid 49306:tid 49317] [client 20.220.221.45:21388] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaGPkPnSUDZue59Px9v-aAAAAUk"]
[Fri Feb 27 20:35:29.633587 2026] [:error] [pid 54231:tid 54241] [client 20.220.221.45:21377] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaGPkeTvb5AeyJCdY7ADvgAAAEc"]
[Fri Feb 27 20:35:30.770523 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:21409] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaGPksKBhrfI6KNv9Rif7wAAAAg"]
[Fri Feb 27 20:35:31.685491 2026] [:error] [pid 54101:tid 54112] [client 20.220.221.45:21380] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaGPk1Y5qgRktcYTGFs6SwAAAcQ"]
[Fri Feb 27 20:35:32.525472 2026] [:error] [pid 54101:tid 54125] [client 20.220.221.45:21435] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGPlFY5qgRktcYTGFs6TgAAAdE"]
[Fri Feb 27 20:35:33.245499 2026] [:error] [pid 52073:tid 52086] [client 20.220.221.45:21362] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGPlYa650YPyxXVeRYtmAAAAYo"]
[Fri Feb 27 20:35:34.021523 2026] [:error] [pid 52073:tid 52100] [client 20.220.221.45:21317] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGPloa650YPyxXVeRYtngAAAZg"]
[Fri Feb 27 20:35:34.841142 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:21337] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aaGPlsKBhrfI6KNv9RigAQAAABE"]
[Fri Feb 27 20:35:35.617315 2026] [:error] [pid 56075:tid 56094] [client 20.220.221.45:21503] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaGPl8KBhrfI6KNv9RigBgAAABA"]
[Fri Feb 27 20:35:36.349098 2026] [:error] [pid 49306:tid 49329] [client 20.220.221.45:21420] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaGPmPnSUDZue59Px9v-bAAAAVU"]
[Fri Feb 27 20:35:37.129293 2026] [:error] [pid 54103:tid 54190] [client 20.220.221.45:21493] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaGPmevG4MPCmE0B2sCcFQAAANM"]
[Fri Feb 27 20:35:38.240776 2026] [:error] [pid 62998:tid 63019] [client 20.220.221.45:21484] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaGPmlQeueXZDUmoLok3rAAAARE"]
[Fri Feb 27 20:35:38.971458 2026] [:error] [pid 54231:tid 54250] [client 20.220.221.45:21491] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGPmuTvb5AeyJCdY7ADxgAAAFA"]
[Fri Feb 27 20:35:39.872269 2026] [:error] [pid 54103:tid 54193] [client 20.220.221.45:21452] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGPm-vG4MPCmE0B2sCcGAAAANY"]
[Fri Feb 27 20:35:40.550680 2026] [:error] [pid 56075:tid 56102] [client 20.220.221.45:21390] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGPnMKBhrfI6KNv9RigKAAAABg"]
[Fri Feb 27 20:35:41.119681 2026] [:error] [pid 52073:tid 52080] [client 20.220.221.45:21469] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGPnYa650YPyxXVeRYtogAAAYQ"]
[Fri Feb 27 20:35:41.716227 2026] [:error] [pid 49306:tid 49320] [client 20.220.221.45:21394] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aaGPnfnSUDZue59Px9v-cwAAAUw"]
[Fri Feb 27 20:35:42.325572 2026] [:error] [pid 56075:tid 56087] [client 20.220.221.45:21348] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aaGPnsKBhrfI6KNv9RigNgAAAAo"]
[Fri Feb 27 20:35:43.117301 2026] [:error] [pid 49306:tid 49311] [client 20.220.221.45:21413] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aaGPn_nSUDZue59Px9v-eQAAAUM"]
[Fri Feb 27 20:35:44.229855 2026] [:error] [pid 52073:tid 52092] [client 20.220.221.45:21470] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aaGPoIa650YPyxXVeRYtpAAAAZA"]
[Fri Feb 27 20:35:44.923100 2026] [:error] [pid 52073:tid 52088] [client 20.220.221.45:21375] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGPoIa650YPyxXVeRYtpgAAAYw"]
[Fri Feb 27 20:35:45.410696 2026] [:error] [pid 62998:tid 63014] [client 20.220.221.45:21398] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGPoVQeueXZDUmoLok3sQAAAQw"]
[Fri Feb 27 20:35:46.283737 2026] [:error] [pid 54231:tid 54248] [client 20.220.221.45:21404] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGPouTvb5AeyJCdY7ADyQAAAE4"]
[Fri Feb 27 20:35:47.029920 2026] [:error] [pid 62998:tid 63005] [client 20.220.221.45:21399] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aaGPo1QeueXZDUmoLok3tAAAAQM"]
[Fri Feb 27 20:35:48.901797 2026] [:error] [pid 52073:tid 52096] [client 20.220.221.45:21448] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhigtouj.php"] [unique_id "aaGPpIa650YPyxXVeRYtrAAAAZQ"]
[Fri Feb 27 20:35:49.750296 2026] [:error] [pid 54231:tid 54251] [client 20.220.221.45:21360] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhigtouj.php"] [unique_id "aaGPpeTvb5AeyJCdY7ADzAAAAFE"]
[Fri Feb 27 20:35:50.959744 2026] [:error] [pid 52073:tid 52095] [client 20.220.221.45:21335] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhigtouj.php"] [unique_id "aaGPpoa650YPyxXVeRYtsAAAAZM"]
[Fri Feb 27 20:35:51.895717 2026] [:error] [pid 56075:tid 56097] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/bhigtouj.php
[Fri Feb 27 20:35:52.103459 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/ggddssvl.php
[Fri Feb 27 20:35:52.313398 2026] [:error] [pid 56075:tid 56083] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/uujuu.php
[Fri Feb 27 20:35:52.540645 2026] [:error] [pid 56075:tid 56100] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Fri Feb 27 20:35:52.758665 2026] [:error] [pid 56075:tid 56101] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/lp5.php
[Fri Feb 27 20:35:54.324434 2026] [:error] [pid 56075:tid 56101] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/ckmtelzy.php
[Fri Feb 27 20:35:54.553918 2026] [:error] [pid 56075:tid 56097] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/abpxrnwe.php
[Fri Feb 27 20:35:54.763599 2026] [:error] [pid 56075:tid 56085] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Feb 27 20:35:54.986491 2026] [:error] [pid 56075:tid 56083] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/bypltspd.php
[Fri Feb 27 20:35:55.195688 2026] [:error] [pid 56075:tid 56095] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Fri Feb 27 20:35:55.408062 2026] [:error] [pid 56075:tid 56088] [client 20.220.221.45:21454] File does not exist: /usr/local/apache/htdocs/suspended-page/zyjhr.php
[Fri Feb 27 20:35:55.616007 2026] [:error] [pid 56075:tid 56082] [client 20.220.221.45:21454] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aaGPq8KBhrfI6KNv9RigfgAAAAU"]
[Fri Feb 27 20:35:56.656146 2026] [:error] [pid 56075:tid 56100] [client 20.220.221.45:21402] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aaGPrMKBhrfI6KNv9RigfwAAABY"]
[Fri Feb 27 20:35:58.105870 2026] [:error] [pid 52073:tid 52093] [client 20.220.221.45:21490] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aaGProa650YPyxXVeRYtxgAAAZE"]
[Fri Feb 27 20:35:58.980610 2026] [:error] [pid 49306:tid 49323] [client 20.220.221.45:21458] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aaGPrvnSUDZue59Px9v-mwAAAU8"]
[Fri Feb 27 20:36:00.746121 2026] [:error] [pid 62998:tid 63005] [client 20.220.221.45:21268] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aaGPsFQeueXZDUmoLok3vwAAAQM"]
[Fri Feb 27 20:36:01.453315 2026] [:error] [pid 56075:tid 56091] [client 20.220.221.45:21381] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aaGPscKBhrfI6KNv9RighgAAAA0"]
[Fri Feb 27 20:36:02.404729 2026] [:error] [pid 62998:tid 63025] [client 20.220.221.45:21396] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aaGPslQeueXZDUmoLok3wwAAARc"]
[Fri Feb 27 20:36:04.187232 2026] [:error] [pid 52073:tid 52089] [client 20.220.221.45:21451] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aaGPtIa650YPyxXVeRYtzgAAAY0"]
[Fri Feb 27 20:36:05.193087 2026] [:error] [pid 62998:tid 63020] [client 20.220.221.45:21496] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaGPtVQeueXZDUmoLok3xAAAARI"]
[Fri Feb 27 20:36:05.920871 2026] [:error] [pid 56075:tid 56102] [client 20.220.221.45:21338] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaGPtcKBhrfI6KNv9RigmAAAABg"]
[Fri Feb 27 20:36:07.359457 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:21455] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaGPt4a650YPyxXVeRYt1wAAAYM"]
[Fri Feb 27 20:36:08.201202 2026] [:error] [pid 56075:tid 56079] [client 20.220.221.45:21376] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaGPuMKBhrfI6KNv9RignAAAAAI"]
[Fri Feb 27 20:36:09.099560 2026] [:error] [pid 54101:tid 54115] [client 20.220.221.45:21492] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGPuVY5qgRktcYTGFs6WQAAAcc"]
[Fri Feb 27 20:36:09.911797 2026] [:error] [pid 54101:tid 54128] [client 20.220.221.45:21411] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGPuVY5qgRktcYTGFs6WgAAAdQ"]
[Fri Feb 27 20:36:10.884660 2026] [:error] [pid 52073:tid 52083] [client 20.220.221.45:21483] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGPuoa650YPyxXVeRYt6wAAAYc"]
[Fri Feb 27 20:36:11.509093 2026] [:error] [pid 56075:tid 56081] [client 20.220.221.45:21408] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGPu8KBhrfI6KNv9RigpgAAAAQ"]
[Fri Feb 27 20:36:12.087424 2026] [:error] [pid 56075:tid 56082] [client 20.220.221.45:21421] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaGPvMKBhrfI6KNv9RigrAAAAAU"]
[Fri Feb 27 20:36:12.834650 2026] [:error] [pid 56075:tid 56090] [client 20.220.221.45:21498] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaGPvMKBhrfI6KNv9RigsgAAAAw"]
[Fri Feb 27 20:36:13.664223 2026] [:error] [pid 49306:tid 49331] [client 20.220.221.45:21453] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaGPvfnSUDZue59Px9v-qgAAAVc"]
[Fri Feb 27 20:36:14.245786 2026] [:error] [pid 54102:tid 54162] [client 20.220.221.45:21497] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaGPvni74D4fiYUm_GdnpQAAAJI"]
[Fri Feb 27 20:36:15.033203 2026] [:error] [pid 62998:tid 63009] [client 20.220.221.45:21383] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGPv1QeueXZDUmoLok3zQAAAQc"]
[Fri Feb 27 20:36:15.826980 2026] [:error] [pid 49306:tid 49332] [client 20.220.221.45:21417] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGPv_nSUDZue59Px9v-rQAAAVg"]
[Fri Feb 27 20:36:16.705598 2026] [:error] [pid 52073:tid 52084] [client 20.220.221.45:21344] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGPwIa650YPyxXVeRYt9wAAAYg"]
[Fri Feb 27 20:36:17.211381 2026] [:error] [pid 54231:tid 54247] [client 20.220.221.45:21450] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aaGPweTvb5AeyJCdY7AEOgAAAE0"]
[Fri Feb 27 20:36:17.733513 2026] [:error] [pid 54231:tid 54249] [client 20.220.221.45:21400] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGPweTvb5AeyJCdY7AEPwAAAE8"]
[Fri Feb 27 20:36:18.657977 2026] [:error] [pid 52073:tid 52086] [client 20.220.221.45:21487] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGPwoa650YPyxXVeRYt_AAAAYo"]
[Fri Feb 27 20:36:19.425027 2026] [:error] [pid 56075:tid 56090] [client 20.220.221.45:21458] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGPw8KBhrfI6KNv9RigvAAAAAw"]
[Fri Feb 27 20:36:19.981978 2026] [:error] [pid 52073:tid 52079] [client 20.220.221.45:21422] [client 20.220.221.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaGPw4a650YPyxXVeRYuBwAAAYM"]
[Fri Feb 27 21:55:17.403463 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Fri Feb 27 21:55:17.611672 2026] [:error] [pid 54231:tid 54252] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Fri Feb 27 21:55:17.850056 2026] [:error] [pid 54231:tid 54256] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Fri Feb 27 21:55:18.079547 2026] [:error] [pid 54231:tid 54239] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Fri Feb 27 21:55:18.315161 2026] [:error] [pid 54231:tid 54258] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Fri Feb 27 21:55:18.792769 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:61624] [client 20.220.8.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.8.221, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaGiRuTvb5AeyJCdY7AstgAAAEE"]
[Fri Feb 27 21:55:19.004338 2026] [:error] [pid 54231:tid 54251] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri Feb 27 21:55:19.221471 2026] [:error] [pid 54231:tid 54240] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Feb 27 21:55:19.441402 2026] [:error] [pid 54231:tid 54255] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Feb 27 21:55:19.684940 2026] [:error] [pid 54231:tid 54242] [client 20.220.8.221:61624] [client 20.220.8.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.8.221, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaGiR-Tvb5AeyJCdY7AsvQAAAEg"]
[Fri Feb 27 21:55:19.688467 2026] [:error] [pid 54231:tid 54242] [client 20.220.8.221:61624] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Feb 27 21:55:19.893689 2026] [:error] [pid 54231:tid 54236] [client 20.220.8.221:61624] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGiR-Tvb5AeyJCdY7AsvgAAAEI"]
[Fri Feb 27 21:55:21.658282 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:60910] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGiSfnSUDZue59Px9tEwQAAAUE"]
[Fri Feb 27 21:55:22.501988 2026] [:error] [pid 49306:tid 49317] [client 20.220.8.221:61603] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGiSvnSUDZue59Px9tEyQAAAUk"]
[Fri Feb 27 21:55:23.521609 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:55411] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaGiS8KBhrfI6KNv9RgVhwAAAAo"]
[Fri Feb 27 21:55:24.210871 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:60922] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGiTIa650YPyxXVeRaXjwAAAYI"]
[Fri Feb 27 21:55:24.669708 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:55415] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGiTPnSUDZue59Px9tE0gAAAVc"]
[Fri Feb 27 21:55:25.203876 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:1618] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGiTcKBhrfI6KNv9RgVjwAAABg"]
[Fri Feb 27 21:55:25.743265 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:61571] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaGiTfnSUDZue59Px9tE1QAAAVQ"]
[Fri Feb 27 21:55:26.209886 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:60914] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aaGiToa650YPyxXVeRaXmQAAAY0"]
[Fri Feb 27 21:55:26.693770 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:52308] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aaGiToa650YPyxXVeRaXnwAAAYA"]
[Fri Feb 27 21:55:27.271726 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:61576] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aaGiT4a650YPyxXVeRaXpgAAAZA"]
[Fri Feb 27 21:55:28.036987 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:60883] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aaGiUPnSUDZue59Px9tE2AAAAUc"]
[Fri Feb 27 21:55:28.769556 2026] [:error] [pid 54101:tid 54123] [client 20.220.8.221:55408] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aaGiUFY5qgRktcYTGFtSBgAAAc8"]
[Fri Feb 27 21:55:29.938854 2026] [:error] [pid 54103:tid 54188] [client 20.220.8.221:61623] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aaGiUevG4MPCmE0B2sC60AAAANE"]
[Fri Feb 27 21:55:30.807407 2026] [:error] [pid 62998:tid 63010] [client 20.220.8.221:55408] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aaGiUlQeueXZDUmoLolsDwAAAQg"]
[Fri Feb 27 21:55:31.951851 2026] [:error] [pid 56075:tid 56079] [client 20.220.8.221:55390] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aaGiU8KBhrfI6KNv9RgVpAAAAAI"]
[Fri Feb 27 21:55:33.414746 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:1613] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGiVcKBhrfI6KNv9RgVrQAAABU"]
[Fri Feb 27 21:55:34.103041 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:55417] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGiVsKBhrfI6KNv9RgVugAAAA8"]
[Fri Feb 27 21:55:35.144677 2026] [:error] [pid 54231:tid 54254] [client 20.220.8.221:55400] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGiV-Tvb5AeyJCdY7As0gAAAFQ"]
[Fri Feb 27 21:55:35.950655 2026] [:error] [pid 62998:tid 63005] [client 20.220.8.221:55396] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGiV1QeueXZDUmoLolsGwAAAQM"]
[Fri Feb 27 21:55:37.199877 2026] [:error] [pid 54102:tid 54144] [client 20.220.8.221:55386] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/login.php"] [unique_id "aaGiWXi74D4fiYUm_GeC1gAAAIA"]
[Fri Feb 27 21:55:38.098432 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:60891] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/login.php"] [unique_id "aaGiWoa650YPyxXVeRaXxAAAAYY"]
[Fri Feb 27 21:55:39.434474 2026] [:error] [pid 49306:tid 49330] [client 20.220.8.221:1640] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/login.php"] [unique_id "aaGiW_nSUDZue59Px9tE5QAAAVY"]
[Fri Feb 27 21:55:40.205804 2026] [:error] [pid 54103:tid 54174] [client 20.220.8.221:55366] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/login.php"] [unique_id "aaGiXOvG4MPCmE0B2sC64QAAAMM"]
[Fri Feb 27 21:55:41.113091 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:52327] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaGiXcKBhrfI6KNv9RgV1QAAAAc"]
[Fri Feb 27 21:55:42.322828 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:61581] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaGiXvnSUDZue59Px9tE7gAAAVc"]
[Fri Feb 27 21:55:43.370737 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:52317] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaGiX1QeueXZDUmoLolsJQAAAQI"]
[Fri Feb 27 21:55:44.037013 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:60896] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaGiYMKBhrfI6KNv9RgV5AAAAAQ"]
[Fri Feb 27 21:55:45.732368 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:55375] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaGiYYa650YPyxXVeRaX1wAAAYA"]
[Fri Feb 27 21:55:47.683043 2026] [:error] [pid 62998:tid 63019] [client 20.220.8.221:1634] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaGiY1QeueXZDUmoLolsKAAAARE"]
[Fri Feb 27 21:55:49.972835 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:1635] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaGiZfnSUDZue59Px9tFAQAAAU0"]
[Fri Feb 27 21:55:50.698024 2026] [:error] [pid 54103:tid 54179] [client 20.220.8.221:1604] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaGiZuvG4MPCmE0B2sC65AAAAMg"]
[Fri Feb 27 21:55:51.649275 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:61588] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaGiZ8KBhrfI6KNv9RgWEAAAABc"]
[Fri Feb 27 21:55:52.338228 2026] [:error] [pid 62998:tid 63008] [client 20.220.8.221:52330] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaGiaFQeueXZDUmoLolsKwAAAQY"]
[Fri Feb 27 21:55:54.765284 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:1614] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaGiaoa650YPyxXVeRaX9gAAAYM"]
[Fri Feb 27 21:55:56.432865 2026] [:error] [pid 54103:tid 54180] [client 20.220.8.221:61577] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaGibOvG4MPCmE0B2sC66wAAAMk"]
[Fri Feb 27 21:55:57.963689 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:52295] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaGibYa650YPyxXVeRaYBwAAAZc"]
[Fri Feb 27 21:55:58.754184 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:60926] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaGibsKBhrfI6KNv9RgWIQAAAAE"]
[Fri Feb 27 21:55:59.588231 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:52337] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaGib8KBhrfI6KNv9RgWJgAAAAU"]
[Fri Feb 27 21:56:01.377876 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:1615] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaGiccKBhrfI6KNv9RgWLwAAAAg"]
[Fri Feb 27 21:56:02.375970 2026] [:error] [pid 62998:tid 63025] [client 20.220.8.221:61628] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaGiclQeueXZDUmoLolsPAAAARc"]
[Fri Feb 27 21:56:03.251644 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:61591] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaGic4a650YPyxXVeRaYGAAAAYk"]
[Fri Feb 27 21:56:03.733688 2026] [:error] [pid 62998:tid 63021] [client 20.220.8.221:55418] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaGic1QeueXZDUmoLolsQAAAARM"]
[Fri Feb 27 21:56:04.304517 2026] [:error] [pid 54231:tid 54244] [client 20.220.8.221:61617] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaGidOTvb5AeyJCdY7As9AAAAEo"]
[Fri Feb 27 21:56:05.339864 2026] [:error] [pid 54101:tid 54114] [client 20.220.8.221:52294] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaGidVY5qgRktcYTGFtSEwAAAcY"]
[Fri Feb 27 21:56:07.322340 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:1601] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaGid8KBhrfI6KNv9RgWQwAAAAU"]
[Fri Feb 27 21:56:08.784936 2026] [:error] [pid 54103:tid 54173] [client 20.220.8.221:55402] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaGieOvG4MPCmE0B2sC6_gAAAMI"]
[Fri Feb 27 21:56:09.686788 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:55409] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaGiecKBhrfI6KNv9RgWUAAAABY"]
[Fri Feb 27 21:56:11.129865 2026] [:error] [pid 56075:tid 56090] [client 20.220.8.221:60899] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaGie8KBhrfI6KNv9RgWWAAAAAw"]
[Fri Feb 27 21:56:12.198775 2026] [:error] [pid 52073:tid 52093] [client 20.220.8.221:1603] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aaGifIa650YPyxXVeRaYKAAAAZE"]
[Fri Feb 27 21:56:13.453014 2026] [:error] [pid 62998:tid 63017] [client 20.220.8.221:1630] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aaGifVQeueXZDUmoLolsTgAAAQ8"]
[Fri Feb 27 21:56:14.192100 2026] [:error] [pid 62998:tid 63020] [client 20.220.8.221:1627] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aaGiflQeueXZDUmoLolsUgAAARI"]
[Fri Feb 27 21:56:15.715207 2026] [:error] [pid 62998:tid 63008] [client 20.220.8.221:1612] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aaGif1QeueXZDUmoLolsWwAAAQY"]
[Fri Feb 27 21:56:17.130931 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:60897] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aaGigYa650YPyxXVeRaYQgAAAYM"]
[Fri Feb 27 21:56:18.902914 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:52316] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aaGigoa650YPyxXVeRaYSwAAAY8"]
[Fri Feb 27 21:56:20.393250 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:60924] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Fri Feb 27 21:56:20.783941 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:60924] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaGihPnSUDZue59Px9tFXgAAAUY"]
[Fri Feb 27 21:56:21.640868 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:52335] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaGihcKBhrfI6KNv9RgWhAAAAAs"]
[Fri Feb 27 21:56:22.334327 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:61596] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Feb 27 21:56:22.835216 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:61596] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Feb 27 21:56:23.491795 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:61596] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admiin.php"] [unique_id "aaGih_nSUDZue59Px9tFawAAAVU"]
[Fri Feb 27 21:56:24.677002 2026] [:error] [pid 49306:tid 49317] [client 20.220.8.221:60864] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Feb 27 21:56:25.417571 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:60864] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Feb 27 21:56:26.167034 2026] [:error] [pid 49306:tid 49313] [client 20.220.8.221:60864] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Feb 27 21:56:27.204032 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:60864] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aaGii_nSUDZue59Px9tFkAAAAUQ"]
[Fri Feb 27 21:56:28.966340 2026] [:error] [pid 62998:tid 63012] [client 20.220.8.221:61594] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aaGijFQeueXZDUmoLolseQAAAQo"]
[Fri Feb 27 21:56:31.660153 2026] [:error] [pid 54102:tid 54151] [client 20.220.8.221:55387] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aaGij3i74D4fiYUm_GeC7gAAAIc"]
[Fri Feb 27 21:56:33.138278 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:60890] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aaGikVQeueXZDUmoLolskQAAARg"]
[Fri Feb 27 21:56:34.239852 2026] [:error] [pid 54231:tid 54251] [client 20.220.8.221:52348] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aaGikuTvb5AeyJCdY7AtEgAAAFE"]
[Fri Feb 27 21:56:35.699328 2026] [:error] [pid 54101:tid 54109] [client 20.220.8.221:55406] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aaGik1Y5qgRktcYTGFtSGwAAAcE"]
[Fri Feb 27 21:56:36.806614 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:52329] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aaGilMKBhrfI6KNv9RgW7AAAABg"]
[Fri Feb 27 21:56:38.207367 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:61631] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aaGillQeueXZDUmoLolsmgAAARA"]
[Fri Feb 27 21:56:39.821032 2026] [:error] [pid 49306:tid 49326] [client 20.220.8.221:1728] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaGil_nSUDZue59Px9tFwQAAAVI"]
[Fri Feb 27 21:56:40.970584 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:52301] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaGimIa650YPyxXVeRaYigAAAYo"]
[Fri Feb 27 21:56:42.155269 2026] [:error] [pid 49306:tid 49324] [client 20.220.8.221:60882] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaGimvnSUDZue59Px9tFywAAAVA"]
[Fri Feb 27 21:56:43.710969 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:52817] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaGim8KBhrfI6KNv9RgXIgAAAAU"]
[Fri Feb 27 21:56:44.816771 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:54755] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaGinPnSUDZue59Px9tF1gAAAUw"]
[Fri Feb 27 21:56:45.390823 2026] [:error] [pid 54231:tid 54252] [client 20.220.8.221:60892] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaGineTvb5AeyJCdY7AtHwAAAFI"]
[Fri Feb 27 21:56:46.120708 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:59645] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaGinoa650YPyxXVeRaYlQAAAY0"]
[Fri Feb 27 21:56:47.081748 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:59622] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaGin4a650YPyxXVeRaYoAAAAZc"]
[Fri Feb 27 21:56:48.437081 2026] [:error] [pid 56075:tid 56091] [client 20.220.8.221:60903] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGioMKBhrfI6KNv9RgXPgAAAA0"]
[Fri Feb 27 21:56:49.323503 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:60867] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGiocKBhrfI6KNv9RgXSAAAABQ"]
[Fri Feb 27 21:56:51.342467 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:52297] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGio-Tvb5AeyJCdY7AtNgAAAEE"]
[Fri Feb 27 21:56:52.638709 2026] [:error] [pid 54231:tid 54257] [client 20.220.8.221:61590] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaGipOTvb5AeyJCdY7AtQAAAAFc"]
[Fri Feb 27 21:56:55.095191 2026] [:error] [pid 56075:tid 56090] [client 20.220.8.221:52342] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaGip8KBhrfI6KNv9RgXWgAAAAw"]
[Fri Feb 27 21:57:07.634926 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:1641] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaGis_nSUDZue59Px9tF-wAAAU4"]
[Fri Feb 27 21:57:08.512646 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:1774] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aaGitIa650YPyxXVeRaYuwAAAZg"]
[Fri Feb 27 21:57:11.752930 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:61618] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aaGit4a650YPyxXVeRaYwAAAAZI"]
[Fri Feb 27 21:57:13.339109 2026] [:error] [pid 62998:tid 63024] [client 20.220.8.221:61599] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aaGiuVQeueXZDUmoLols9wAAARY"]
[Fri Feb 27 21:57:13.957732 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:55374] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aaGiuYa650YPyxXVeRaYwgAAAYk"]
[Fri Feb 27 21:57:14.790052 2026] [:error] [pid 52073:tid 52095] [client 20.220.8.221:1632] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aaGiuoa650YPyxXVeRaYxAAAAZM"]
[Fri Feb 27 21:57:15.379910 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:60909] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aaGiu8KBhrfI6KNv9RgXfQAAAAs"]
[Fri Feb 27 21:57:16.338257 2026] [:error] [pid 62998:tid 63023] [client 20.220.8.221:52333] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aaGivFQeueXZDUmoLoltCwAAARU"]
[Fri Feb 27 21:57:16.879076 2026] [:error] [pid 54103:tid 54174] [client 20.220.8.221:60916] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aaGivOvG4MPCmE0B2sC7SgAAAMM"]
[Fri Feb 27 21:57:17.897427 2026] [:error] [pid 54103:tid 54183] [client 20.220.8.221:52802] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aaGivevG4MPCmE0B2sC7TAAAAMw"]
[Fri Feb 27 21:57:19.275847 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:52351] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aaGiv4a650YPyxXVeRaY3AAAAYY"]
[Fri Feb 27 21:57:20.043599 2026] [:error] [pid 54231:tid 54237] [client 20.220.8.221:60868] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aaGiwOTvb5AeyJCdY7AtlQAAAEM"]
[Fri Feb 27 21:57:20.750443 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:52315] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aaGiwIa650YPyxXVeRaY3gAAAYQ"]
[Fri Feb 27 21:57:21.751175 2026] [:error] [pid 54231:tid 54244] [client 20.220.8.221:52321] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaGiweTvb5AeyJCdY7AtmgAAAEo"]
[Fri Feb 27 21:57:22.612427 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:1616] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaGiwsKBhrfI6KNv9RgXhgAAAAY"]
[Fri Feb 27 21:57:23.645920 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:60869] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaGiw_nSUDZue59Px9tGDwAAAVQ"]
[Fri Feb 27 21:57:24.361297 2026] [:error] [pid 54103:tid 54193] [client 20.220.8.221:52302] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaGixOvG4MPCmE0B2sC7UQAAANY"]
[Fri Feb 27 21:57:24.997884 2026] [:error] [pid 54231:tid 54249] [client 20.220.8.221:55370] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aaGixOTvb5AeyJCdY7AtpQAAAE8"]
[Fri Feb 27 21:57:25.794409 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:1621] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aaGixevG4MPCmE0B2sC7VwAAAM8"]
[Fri Feb 27 21:57:26.379681 2026] [:error] [pid 54231:tid 54253] [client 20.220.8.221:52309] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Feb 27 21:57:27.305616 2026] [:error] [pid 54231:tid 54257] [client 20.220.8.221:52309] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaGix-Tvb5AeyJCdY7AtqwAAAFc"]
[Fri Feb 27 21:57:28.684677 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:55423] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaGiyMKBhrfI6KNv9RgXngAAABY"]
[Fri Feb 27 21:57:29.600874 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:52299] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri Feb 27 21:57:30.113156 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:52299] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Fri Feb 27 21:57:30.320129 2026] [:error] [pid 49306:tid 49308] [client 20.220.8.221:52299] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Feb 27 21:57:30.999245 2026] [:error] [pid 49306:tid 49327] [client 20.220.8.221:52299] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Feb 27 21:57:31.338805 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:52299] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaGiy_nSUDZue59Px9tGJwAAAUQ"]
[Fri Feb 27 21:57:32.105250 2026] [:error] [pid 62998:tid 63019] [client 20.220.8.221:55369] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaGizFQeueXZDUmoLoltMwAAARE"]
[Fri Feb 27 21:57:33.103535 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:60895] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaGizfnSUDZue59Px9tGKwAAAU8"]
[Fri Feb 27 21:57:33.593427 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:52863] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/widgets/"] [unique_id "aaGizcKBhrfI6KNv9RgXsAAAABY"]
[Fri Feb 27 21:57:34.151600 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:60894] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaGizsKBhrfI6KNv9RgXtgAAAAE"]
[Fri Feb 27 21:57:34.841270 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:61609] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaGizsKBhrfI6KNv9RgXvQAAABg"]
[Fri Feb 27 21:57:35.518010 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:52336] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaGiz8KBhrfI6KNv9RgXwAAAAAY"]
[Fri Feb 27 21:57:36.421801 2026] [:error] [pid 54103:tid 54179] [client 20.220.8.221:55377] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaGi0OvG4MPCmE0B2sC7bAAAAMg"]
[Fri Feb 27 21:57:37.171966 2026] [:error] [pid 62998:tid 63019] [client 20.220.8.221:60871] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aaGi0VQeueXZDUmoLoltRQAAARE"]
[Fri Feb 27 21:57:37.907868 2026] [:error] [pid 54102:tid 54154] [client 20.220.8.221:55401] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aaGi0Xi74D4fiYUm_GeDLQAAAIo"]
[Fri Feb 27 21:57:38.507822 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:1617] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aaGi0lQeueXZDUmoLoltTQAAARA"]
[Fri Feb 27 21:57:39.300301 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:61616] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/admin.php"] [unique_id "aaGi04a650YPyxXVeRaZBQAAAYc"]
[Fri Feb 27 21:57:46.072313 2026] [:error] [pid 54103:tid 54179] [client 20.220.8.221:52312] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aaGi2uvG4MPCmE0B2sC7gAAAAMg"]
[Fri Feb 27 21:57:49.141963 2026] [:error] [pid 54103:tid 54193] [client 20.220.8.221:61597] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aaGi3evG4MPCmE0B2sC7iwAAANY"]
[Fri Feb 27 21:57:50.747105 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:55403] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aaGi3sKBhrfI6KNv9RgYAwAAAAg"]
[Fri Feb 27 21:57:51.738534 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:59588] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "aaGi3-Tvb5AeyJCdY7At2wAAAEE"]
[Fri Feb 27 21:57:52.282036 2026] [:error] [pid 54231:tid 54253] [client 20.220.8.221:60917] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aaGi4OTvb5AeyJCdY7At4gAAAFM"]
[Fri Feb 27 21:57:52.799181 2026] [:error] [pid 54103:tid 54184] [client 20.220.8.221:60908] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aaGi4OvG4MPCmE0B2sC7kgAAAM0"]
[Fri Feb 27 21:57:53.413111 2026] [:error] [pid 54103:tid 54176] [client 20.220.8.221:61572] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aaGi4evG4MPCmE0B2sC7lgAAAMU"]
[Fri Feb 27 21:57:54.275731 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:55381] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "aaGi4oa650YPyxXVeRaZNQAAAYQ"]
[Fri Feb 27 21:57:54.856086 2026] [:error] [pid 54102:tid 54159] [client 20.220.8.221:1607] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaGi4ni74D4fiYUm_GeDTwAAAI8"]
[Fri Feb 27 21:57:55.416176 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:52303] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaGi41QeueXZDUmoLoltbQAAARg"]
[Fri Feb 27 21:57:56.038410 2026] [:error] [pid 52073:tid 52090] [client 20.220.8.221:60901] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaGi5Ia650YPyxXVeRaZNwAAAY4"]
[Fri Feb 27 21:57:56.482436 2026] [:error] [pid 62998:tid 63024] [client 20.220.8.221:55380] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-2019.php"] [unique_id "aaGi5FQeueXZDUmoLoltdAAAARY"]
[Fri Feb 27 21:57:56.991067 2026] [:error] [pid 54101:tid 54122] [client 20.220.8.221:54725] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/edit.php"] [unique_id "aaGi5FY5qgRktcYTGFtSZgAAAc4"]
[Fri Feb 27 21:57:57.651148 2026] [:error] [pid 54101:tid 54131] [client 20.220.8.221:55405] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/edit.php"] [unique_id "aaGi5VY5qgRktcYTGFtSaAAAAdc"]
[Fri Feb 27 21:57:58.223734 2026] [:error] [pid 54231:tid 54258] [client 20.220.8.221:61569] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/edit.php"] [unique_id "aaGi5uTvb5AeyJCdY7At6gAAAFg"]
[Fri Feb 27 21:57:58.836006 2026] [:error] [pid 54102:tid 54151] [client 20.220.8.221:1734] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/edit.php"] [unique_id "aaGi5ni74D4fiYUm_GeDXwAAAIc"]
[Fri Feb 27 21:57:59.301057 2026] [:error] [pid 54103:tid 54179] [client 20.220.8.221:55398] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGi5-vG4MPCmE0B2sC7rQAAAMg"]
[Fri Feb 27 21:57:59.996062 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:1600] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGi54a650YPyxXVeRaZTQAAAZU"]
[Fri Feb 27 21:58:00.473997 2026] [:error] [pid 54231:tid 54246] [client 20.220.8.221:1649] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGi6OTvb5AeyJCdY7At7QAAAEw"]
[Fri Feb 27 21:58:01.312013 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:1646] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGi6cKBhrfI6KNv9RgYGgAAAAc"]
[Fri Feb 27 21:58:01.930980 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:60893] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaGi6Ya650YPyxXVeRaZYwAAAYM"]
[Fri Feb 27 21:58:02.465368 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:61568] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaGi6sKBhrfI6KNv9RgYIQAAABE"]
[Fri Feb 27 21:58:03.399661 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:59624] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaGi68KBhrfI6KNv9RgYJgAAABQ"]
[Fri Feb 27 21:58:03.953120 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:52345] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaGi6_nSUDZue59Px9tGUQAAAUY"]
[Fri Feb 27 21:58:04.637471 2026] [:error] [pid 49306:tid 49313] [client 20.220.8.221:60878] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aaGi7PnSUDZue59Px9tGWgAAAUU"]
[Fri Feb 27 21:58:05.394071 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:60875] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aaGi7fnSUDZue59Px9tGZQAAAUs"]
[Fri Feb 27 21:58:05.899298 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:59540] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aaGi7Ya650YPyxXVeRaZbgAAAY8"]
[Fri Feb 27 21:58:07.653679 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:1636] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aaGi74a650YPyxXVeRaZgAAAAYM"]
[Fri Feb 27 21:58:08.853262 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:61622] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aaGi8Ia650YPyxXVeRaZjgAAAYo"]
[Fri Feb 27 21:58:09.784675 2026] [:error] [pid 54101:tid 54132] [client 20.220.8.221:52314] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aaGi8VY5qgRktcYTGFtScgAAAdg"]
[Fri Feb 27 21:58:10.724128 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:52809] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aaGi8sKBhrfI6KNv9RgYMwAAAAY"]
[Fri Feb 27 21:58:11.511834 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:54757] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ab.php"] [unique_id "aaGi88KBhrfI6KNv9RgYOAAAAAQ"]
[Fri Feb 27 21:58:12.125254 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:61604] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGi9MKBhrfI6KNv9RgYPAAAAAE"]
[Fri Feb 27 21:58:12.730952 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:1638] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGi9MKBhrfI6KNv9RgYQQAAAAc"]
[Fri Feb 27 21:58:13.272950 2026] [:error] [pid 56075:tid 56098] [client 20.220.8.221:1657] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGi9cKBhrfI6KNv9RgYSAAAABQ"]
[Fri Feb 27 21:58:13.844036 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:61630] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaGi9cKBhrfI6KNv9RgYSwAAABA"]
[Fri Feb 27 21:58:14.441637 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:52300] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aaGi9oa650YPyxXVeRaZnQAAAY8"]
[Fri Feb 27 21:58:14.978458 2026] [:error] [pid 62998:tid 63016] [client 20.220.8.221:1605] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "aaGi9lQeueXZDUmoLoltigAAAQ4"]
[Fri Feb 27 21:58:15.658996 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:59609] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "aaGi98KBhrfI6KNv9RgYVwAAABA"]
[Fri Feb 27 21:58:16.185810 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:52350] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "aaGi-PnSUDZue59Px9tGcgAAAUs"]
[Fri Feb 27 21:58:16.664587 2026] [:error] [pid 54103:tid 54173] [client 20.220.8.221:52825] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGi-OvG4MPCmE0B2sC7wQAAAMI"]
[Fri Feb 27 21:58:17.272971 2026] [:error] [pid 54103:tid 54177] [client 20.220.8.221:55393] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGi-evG4MPCmE0B2sC7wwAAAMY"]
[Fri Feb 27 21:58:17.848366 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:1752] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGi-eTvb5AeyJCdY7At-gAAAEc"]
[Fri Feb 27 21:58:18.384646 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:52338] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGi-vnSUDZue59Px9tGdAAAAUg"]
[Fri Feb 27 21:58:19.160117 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:1623] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGi-8KBhrfI6KNv9RgYXwAAABc"]
[Fri Feb 27 21:58:19.702344 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:52293] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGi-8KBhrfI6KNv9RgYYwAAABY"]
[Fri Feb 27 21:58:20.435050 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:55412] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGi_MKBhrfI6KNv9RgYbQAAAAk"]
[Fri Feb 27 21:58:21.258634 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:60877] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGi_evG4MPCmE0B2sC7ywAAAM8"]
[Fri Feb 27 21:58:21.805658 2026] [:error] [pid 49306:tid 49313] [client 20.220.8.221:1642] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aaGi_fnSUDZue59Px9tGfQAAAUU"]
[Fri Feb 27 21:58:22.316910 2026] [:error] [pid 54231:tid 54251] [client 20.220.8.221:52819] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aaGi_uTvb5AeyJCdY7AuBAAAAFE"]
[Fri Feb 27 21:58:22.797513 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:54728] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aaGi_sKBhrfI6KNv9RgYgwAAABM"]
[Fri Feb 27 21:58:23.338368 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:61625] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "aaGi__nSUDZue59Px9tGgwAAAVU"]
[Fri Feb 27 21:58:23.786504 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:1767] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaGi_4a650YPyxXVeRaZqQAAAZI"]
[Fri Feb 27 21:58:24.259555 2026] [:error] [pid 49306:tid 49310] [client 20.220.8.221:55391] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaGjAPnSUDZue59Px9tGhwAAAUI"]
[Fri Feb 27 21:58:24.812522 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:59594] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaGjAPnSUDZue59Px9tGigAAAUg"]
[Fri Feb 27 21:58:25.406350 2026] [:error] [pid 62998:tid 63022] [client 20.220.8.221:60888] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaGjAVQeueXZDUmoLoltjgAAARQ"]
[Fri Feb 27 21:58:25.972202 2026] [:error] [pid 54103:tid 54176] [client 20.220.8.221:52837] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aaGjAevG4MPCmE0B2sC7zwAAAMU"]
[Fri Feb 27 21:58:26.458827 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:52812] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aaGjAsKBhrfI6KNv9RgYlAAAAAU"]
[Fri Feb 27 21:58:27.001538 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:1629] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aaGjA_nSUDZue59Px9tGjgAAAUw"]
[Fri Feb 27 21:58:27.697805 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:52290] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aaGjA8KBhrfI6KNv9RgYmwAAAAc"]
[Fri Feb 27 21:58:28.347493 2026] [:error] [pid 54101:tid 54124] [client 20.220.8.221:52812] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aaGjBFY5qgRktcYTGFtSegAAAdA"]
[Fri Feb 27 21:58:29.817214 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:52319] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "aaGjBcKBhrfI6KNv9RgYqAAAAAE"]
[Fri Feb 27 21:58:30.881594 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:1736] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Fri Feb 27 21:58:31.578318 2026] [:error] [pid 49306:tid 49330] [client 20.220.8.221:1736] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Feb 27 21:58:31.786548 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:1736] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Feb 27 21:58:32.141905 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:1736] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaGjCPnSUDZue59Px9tGpwAAAVc"]
[Fri Feb 27 21:58:32.585281 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:55373] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Feb 27 21:58:33.006755 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:55373] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Feb 27 21:58:33.450724 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:55373] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Feb 27 21:58:33.886811 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:55373] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaGjCcKBhrfI6KNv9RgY8wAAAAk"]
[Fri Feb 27 21:58:34.539254 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:55378] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGjCoa650YPyxXVeRaZugAAAYY"]
[Fri Feb 27 21:58:35.064236 2026] [:error] [pid 54231:tid 54256] [client 20.220.8.221:60887] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGjC-Tvb5AeyJCdY7AuCQAAAFY"]
[Fri Feb 27 21:58:35.781964 2026] [:error] [pid 56075:tid 56091] [client 20.220.8.221:52843] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGjC8KBhrfI6KNv9RgY9wAAAA0"]
[Fri Feb 27 21:58:36.217971 2026] [:error] [pid 56075:tid 56092] [client 20.220.8.221:1740] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaGjDMKBhrfI6KNv9RgY-wAAAA4"]
[Fri Feb 27 21:58:36.669659 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:60872] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaGjDIa650YPyxXVeRaZvgAAAZA"]
[Fri Feb 27 21:58:37.112337 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:61620] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaGjDYa650YPyxXVeRaZwAAAAYA"]
[Fri Feb 27 21:58:37.537306 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:55418] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaGjDYa650YPyxXVeRaZwwAAAZc"]
[Fri Feb 27 21:58:37.998628 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:55379] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "aaGjDYa650YPyxXVeRaZxgAAAYk"]
[Fri Feb 27 21:58:38.437966 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:59644] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaGjDvnSUDZue59Px9tGsQAAAU8"]
[Fri Feb 27 21:58:38.945614 2026] [:error] [pid 49306:tid 49308] [client 20.220.8.221:59590] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaGjDvnSUDZue59Px9tGtAAAAUA"]
[Fri Feb 27 21:58:39.446120 2026] [:error] [pid 54102:tid 54166] [client 20.220.8.221:54769] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaGjD3i74D4fiYUm_GeDigAAAJY"]
[Fri Feb 27 21:58:39.864857 2026] [:error] [pid 49306:tid 49328] [client 20.220.8.221:61626] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaGjD_nSUDZue59Px9tGvAAAAVQ"]
[Fri Feb 27 21:58:40.333656 2026] [:error] [pid 54103:tid 54195] [client 20.220.8.221:1631] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaGjEOvG4MPCmE0B2sC72AAAANg"]
[Fri Feb 27 21:58:40.960756 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:55420] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaGjEIa650YPyxXVeRaZ1AAAAYA"]
[Fri Feb 27 21:58:41.441992 2026] [:error] [pid 62998:tid 63021] [client 20.220.8.221:1731] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaGjEVQeueXZDUmoLoltmwAAARM"]
[Fri Feb 27 21:58:41.935644 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:54724] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aaGjEYa650YPyxXVeRaZ1QAAAYM"]
[Fri Feb 27 21:58:42.493977 2026] [:error] [pid 54103:tid 54170] [client 20.220.8.221:61629] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaGjEuvG4MPCmE0B2sC73wAAAMA"]
[Fri Feb 27 21:58:43.088781 2026] [:error] [pid 54101:tid 54131] [client 20.220.8.221:52291] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaGjE1Y5qgRktcYTGFtSfAAAAdc"]
[Fri Feb 27 21:58:43.940692 2026] [:error] [pid 62998:tid 63011] [client 20.220.8.221:60907] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaGjE1QeueXZDUmoLoltoAAAAQk"]
[Fri Feb 27 21:58:45.407557 2026] [:error] [pid 54103:tid 54178] [client 20.220.8.221:1776] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaGjFevG4MPCmE0B2sC75gAAAMc"]
[Fri Feb 27 21:58:46.290291 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:1728] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aaGjFsKBhrfI6KNv9RgZEAAAABE"]
[Fri Feb 27 21:58:47.387062 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:61629] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aaGjF4a650YPyxXVeRaZ3AAAAZQ"]
[Fri Feb 27 21:58:48.579633 2026] [:error] [pid 54101:tid 54130] [client 20.220.8.221:52332] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aaGjGFY5qgRktcYTGFtSgwAAAdY"]
[Fri Feb 27 21:58:49.949487 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:52343] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aaGjGcKBhrfI6KNv9RgZFgAAAAA"]
[Fri Feb 27 21:58:50.895155 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:60911] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aaGjGlQeueXZDUmoLoltrwAAARA"]
[Fri Feb 27 21:58:51.910591 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:61611] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aaGjG4a650YPyxXVeRaZ-QAAAY8"]
[Fri Feb 27 21:58:52.920736 2026] [:error] [pid 56075:tid 56100] [client 20.220.8.221:52833] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aaGjHMKBhrfI6KNv9RgZJAAAABY"]
[Fri Feb 27 21:58:53.579965 2026] [:error] [pid 54231:tid 54256] [client 20.220.8.221:61615] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/"] [unique_id "aaGjHeTvb5AeyJCdY7AuHQAAAFY"]
[Fri Feb 27 21:58:54.326949 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:1633] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aaGjHuTvb5AeyJCdY7AuJAAAAEc"]
[Fri Feb 27 21:58:54.852222 2026] [:error] [pid 54103:tid 54190] [client 20.220.8.221:1610] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aaGjHuvG4MPCmE0B2sC76gAAANM"]
[Fri Feb 27 21:58:55.327305 2026] [:error] [pid 54101:tid 54127] [client 20.220.8.221:60884] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aaGjH1Y5qgRktcYTGFtSjQAAAdM"]
[Fri Feb 27 21:58:55.891915 2026] [:error] [pid 54231:tid 54245] [client 20.220.8.221:52849] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aaGjH-Tvb5AeyJCdY7AuMQAAAEs"]
[Fri Feb 27 21:58:56.403621 2026] [:error] [pid 62998:tid 63014] [client 20.220.8.221:52813] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aaGjIFQeueXZDUmoLolttQAAAQw"]
[Fri Feb 27 21:58:57.023691 2026] [:error] [pid 54103:tid 54194] [client 20.220.8.221:59626] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aaGjIevG4MPCmE0B2sC77wAAANc"]
[Fri Feb 27 21:58:57.601618 2026] [:error] [pid 54103:tid 54179] [client 20.220.8.221:60921] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aaGjIevG4MPCmE0B2sC78AAAAMg"]
[Fri Feb 27 21:58:58.238452 2026] [:error] [pid 62998:tid 63023] [client 20.220.8.221:59601] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aaGjIlQeueXZDUmoLolttgAAARU"]
[Fri Feb 27 21:58:59.079361 2026] [:error] [pid 49306:tid 49330] [client 20.220.8.221:52834] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aaGjI_nSUDZue59Px9tG5gAAAVY"]
[Fri Feb 27 21:59:00.275380 2026] [:error] [pid 54102:tid 54158] [client 20.220.8.221:54722] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/admin.php"] [unique_id "aaGjJHi74D4fiYUm_GeDqgAAAI4"]
[Fri Feb 27 21:59:01.253165 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:52841] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/admin.php"] [unique_id "aaGjJcKBhrfI6KNv9RgZMwAAAA8"]
[Fri Feb 27 21:59:05.822475 2026] [:error] [pid 54102:tid 54146] [client 20.220.8.221:59602] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/admin.php"] [unique_id "aaGjKXi74D4fiYUm_GeDvQAAAII"]
[Fri Feb 27 21:59:07.865031 2026] [:error] [pid 54103:tid 54172] [client 20.220.8.221:61578] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/admin.php"] [unique_id "aaGjK-vG4MPCmE0B2sC8CgAAAME"]
[Fri Feb 27 21:59:09.446170 2026] [:error] [pid 54103:tid 54193] [client 20.220.8.221:52304] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGjLevG4MPCmE0B2sC8EgAAANY"]
[Fri Feb 27 21:59:14.063612 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:1645] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGjMsKBhrfI6KNv9RgZZAAAABc"]
[Fri Feb 27 21:59:15.513160 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:54734] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGjM4a650YPyxXVeRaaLwAAAYk"]
[Fri Feb 27 21:59:16.115738 2026] [:error] [pid 54103:tid 54181] [client 20.220.8.221:61605] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaGjNOvG4MPCmE0B2sC8HwAAAMo"]
[Fri Feb 27 21:59:16.616108 2026] [:error] [pid 54101:tid 54132] [client 20.220.8.221:61619] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaGjNFY5qgRktcYTGFtSngAAAdg"]
[Fri Feb 27 21:59:17.096902 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:52806] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aaGjNYa650YPyxXVeRaaMQAAAYQ"]
[Fri Feb 27 21:59:17.557146 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:1743] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aaGjNcKBhrfI6KNv9RgZcgAAABA"]
[Fri Feb 27 21:59:18.333850 2026] [:error] [pid 56075:tid 56091] [client 20.220.8.221:52839] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aaGjNsKBhrfI6KNv9RgZdQAAAA0"]
[Fri Feb 27 21:59:18.998150 2026] [:error] [pid 54101:tid 54127] [client 20.220.8.221:1729] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/file.php"] [unique_id "aaGjNlY5qgRktcYTGFtSoQAAAdM"]
[Fri Feb 27 21:59:19.876351 2026] [:error] [pid 54231:tid 54243] [client 20.220.8.221:1622] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaGjN-Tvb5AeyJCdY7AuRgAAAEk"]
[Fri Feb 27 21:59:20.412018 2026] [:error] [pid 54231:tid 54248] [client 20.220.8.221:52339] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaGjOOTvb5AeyJCdY7AuSQAAAE4"]
[Fri Feb 27 21:59:20.901146 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:52341] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaGjOMKBhrfI6KNv9RgZeQAAAAQ"]
[Fri Feb 27 21:59:21.405130 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:52318] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/"] [unique_id "aaGjOYa650YPyxXVeRaaSwAAAYA"]
[Fri Feb 27 21:59:22.086753 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:52318] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaGjOoa650YPyxXVeRaaTgAAAY8"]
[Fri Feb 27 21:59:22.872080 2026] [:error] [pid 54231:tid 54247] [client 20.220.8.221:1643] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aaGjOuTvb5AeyJCdY7AuTAAAAE0"]
[Fri Feb 27 21:59:23.731263 2026] [:error] [pid 54101:tid 54125] [client 20.220.8.221:54723] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aaGjO1Y5qgRktcYTGFtSqgAAAdE"]
[Fri Feb 27 21:59:24.574450 2026] [:error] [pid 49306:tid 49317] [client 20.220.8.221:52807] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aaGjPPnSUDZue59Px9tHCQAAAUk"]
[Fri Feb 27 21:59:25.286667 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:61606] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/"] [unique_id "aaGjPYa650YPyxXVeRaaVwAAAZU"]
[Fri Feb 27 21:59:26.075199 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:52323] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akc.php"] [unique_id "aaGjPvnSUDZue59Px9tHEwAAAUM"]
[Fri Feb 27 21:59:26.698560 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:59595] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akc.php"] [unique_id "aaGjPsKBhrfI6KNv9RgZjgAAAA8"]
[Fri Feb 27 21:59:27.232403 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:55392] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akc.php"] [unique_id "aaGjP8KBhrfI6KNv9RgZkwAAAAo"]
[Fri Feb 27 21:59:27.886806 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:52861] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akc.php"] [unique_id "aaGjP1QeueXZDUmoLolt3AAAARA"]
[Fri Feb 27 21:59:28.464898 2026] [:error] [pid 54231:tid 54258] [client 20.220.8.221:1637] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaGjQOTvb5AeyJCdY7AuTwAAAFg"]
[Fri Feb 27 21:59:28.892281 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:54738] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaGjQPnSUDZue59Px9tHFwAAAU0"]
[Fri Feb 27 21:59:29.443987 2026] [:error] [pid 56075:tid 56085] [client 20.220.8.221:52834] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaGjQcKBhrfI6KNv9RgZowAAAAg"]
[Fri Feb 27 21:59:30.155526 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:57760] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaGjQoa650YPyxXVeRaaYQAAAYo"]
[Fri Feb 27 21:59:30.780588 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:54778] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaGjQoa650YPyxXVeRaaZwAAAY0"]
[Fri Feb 27 21:59:31.379468 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:60918] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaGjQ4a650YPyxXVeRaabAAAAZU"]
[Fri Feb 27 21:59:32.103039 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:60873] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaGjRMKBhrfI6KNv9RgZrwAAABM"]
[Fri Feb 27 21:59:33.062628 2026] [:error] [pid 54102:tid 54145] [client 20.220.8.221:55364] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaGjRXi74D4fiYUm_GeD3QAAAIE"]
[Fri Feb 27 21:59:33.540298 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:55397] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aaGjRcKBhrfI6KNv9RgZuwAAAAo"]
[Fri Feb 27 21:59:34.471943 2026] [:error] [pid 54102:tid 54163] [client 20.220.8.221:61612] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aaGjRni74D4fiYUm_GeD3wAAAJM"]
[Fri Feb 27 21:59:35.115462 2026] [:error] [pid 54102:tid 54155] [client 20.220.8.221:61614] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Feb 27 21:59:36.082844 2026] [:error] [pid 54102:tid 54151] [client 20.220.8.221:61614] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Feb 27 21:59:36.548999 2026] [:error] [pid 54102:tid 54148] [client 20.220.8.221:61614] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Feb 27 21:59:36.758746 2026] [:error] [pid 54102:tid 54157] [client 20.220.8.221:61614] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Feb 27 21:59:36.965582 2026] [:error] [pid 54102:tid 54165] [client 20.220.8.221:61614] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaGjSHi74D4fiYUm_GeD6wAAAJU"]
[Fri Feb 27 21:59:39.557240 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:52325] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php
[Fri Feb 27 21:59:39.802894 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:52325] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/lv.php"] [unique_id "aaGjS8KBhrfI6KNv9RgZ3AAAAAA"]
[Fri Feb 27 21:59:41.012059 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:52289] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Feb 27 21:59:42.453588 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:52289] File does not exist: /usr/local/apache/htdocs/suspended-page/help.php
[Fri Feb 27 21:59:42.665528 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:52289] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Fri Feb 27 21:59:42.871252 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:52289] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaGjTsKBhrfI6KNv9RgZ8QAAAA8"]
[Fri Feb 27 21:59:44.341508 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:1760] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaGjUIa650YPyxXVeRaaigAAAY8"]
[Fri Feb 27 21:59:45.834908 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:1611] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaGjUcKBhrfI6KNv9RgZ-AAAAAs"]
[Fri Feb 27 21:59:46.625680 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:59636] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaGjUsKBhrfI6KNv9RgZ_wAAABI"]
[Fri Feb 27 21:59:47.332986 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:61595] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/class-config.php"] [unique_id "aaGjU8KBhrfI6KNv9RgaBgAAAA8"]
[Fri Feb 27 21:59:48.197647 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:59635] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/class-config.php"] [unique_id "aaGjVIa650YPyxXVeRaakwAAAYA"]
[Fri Feb 27 21:59:48.798081 2026] [:error] [pid 49306:tid 49308] [client 20.220.8.221:61600] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/class-config.php"] [unique_id "aaGjVPnSUDZue59Px9tHZQAAAUA"]
[Fri Feb 27 21:59:49.272256 2026] [:error] [pid 56075:tid 56092] [client 20.220.8.221:59634] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/class-config.php"] [unique_id "aaGjVcKBhrfI6KNv9RgaDwAAAA4"]
[Fri Feb 27 21:59:49.915880 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:60904] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaGjVYa650YPyxXVeRaamgAAAYU"]
[Fri Feb 27 21:59:50.614373 2026] [:error] [pid 54102:tid 54154] [client 20.220.8.221:1620] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaGjVni74D4fiYUm_GeD-wAAAIo"]
[Fri Feb 27 21:59:51.127561 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:1661] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaGjV4a650YPyxXVeRaanwAAAZg"]
[Fri Feb 27 21:59:51.672104 2026] [:error] [pid 56075:tid 56095] [client 20.220.8.221:55365] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/file.php"] [unique_id "aaGjV8KBhrfI6KNv9RgaJgAAABE"]
[Fri Feb 27 21:59:52.369314 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:52815] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaGjWIa650YPyxXVeRaapAAAAYI"]
[Fri Feb 27 21:59:53.061922 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:59615] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaGjWeTvb5AeyJCdY7AuYwAAAEc"]
[Fri Feb 27 21:59:54.568990 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:59597] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaGjWoa650YPyxXVeRaarwAAAYM"]
[Fri Feb 27 21:59:55.465714 2026] [:error] [pid 49306:tid 49329] [client 20.220.8.221:1662] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.phphttps://win55.bike/ioxi-o.php"] [unique_id "aaGjW_nSUDZue59Px9tHfQAAAVU"]
[Fri Feb 27 21:59:55.981338 2026] [:error] [pid 62998:tid 63025] [client 20.220.8.221:52846] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/404.php"] [unique_id "aaGjW1QeueXZDUmoLolt-wAAARc"]
[Fri Feb 27 21:59:56.457223 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:55417] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/404.php"] [unique_id "aaGjXMKBhrfI6KNv9RgaRAAAAAo"]
[Fri Feb 27 21:59:56.993728 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:57762] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/404.php"] [unique_id "aaGjXIa650YPyxXVeRaauwAAAY0"]
[Fri Feb 27 21:59:57.655769 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:59633] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/404.php"] [unique_id "aaGjXcKBhrfI6KNv9RgaTQAAAA8"]
[Fri Feb 27 21:59:58.148881 2026] [:error] [pid 54103:tid 54188] [client 20.220.8.221:59618] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaGjXuvG4MPCmE0B2sC8QwAAANE"]
[Fri Feb 27 21:59:59.776015 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:55388] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaGjX8KBhrfI6KNv9RgaVgAAABg"]
[Fri Feb 27 22:00:00.855691 2026] [:error] [pid 54102:tid 54165] [client 20.220.8.221:60889] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaGjYHi74D4fiYUm_GeD_gAAAJU"]
[Fri Feb 27 22:00:01.649283 2026] [:error] [pid 52073:tid 52093] [client 20.220.8.221:1655] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aaGjYYa650YPyxXVeRaaxQAAAZE"]
[Fri Feb 27 22:00:02.231152 2026] [:error] [pid 54102:tid 54159] [client 20.220.8.221:61623] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaGjYni74D4fiYUm_GeEAAAAAI8"]
[Fri Feb 27 22:00:02.674087 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:55399] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaGjYsKBhrfI6KNv9RgaawAAAAo"]
[Fri Feb 27 22:00:03.324239 2026] [:error] [pid 54103:tid 54195] [client 20.220.8.221:1779] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaGjY-vG4MPCmE0B2sC8TQAAANg"]
[Fri Feb 27 22:00:03.839366 2026] [:error] [pid 54101:tid 54109] [client 20.220.8.221:1663] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "aaGjY1Y5qgRktcYTGFtSvQAAAcE"]
[Fri Feb 27 22:00:04.535944 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:1634] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aaGjZIa650YPyxXVeRaazgAAAYM"]
[Fri Feb 27 22:00:05.092063 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:52836] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aaGjZfnSUDZue59Px9tHiQAAAUM"]
[Fri Feb 27 22:00:05.552147 2026] [:error] [pid 54103:tid 54184] [client 20.220.8.221:59598] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aaGjZevG4MPCmE0B2sC8VAAAAM0"]
[Fri Feb 27 22:00:06.275836 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:1614] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/"] [unique_id "aaGjZoa650YPyxXVeRaa1AAAAYI"]
[Fri Feb 27 22:00:07.079310 2026] [:error] [pid 52073:tid 52092] [client 20.220.8.221:55372] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGjZ4a650YPyxXVeRaa2gAAAZA"]
[Fri Feb 27 22:00:07.781595 2026] [:error] [pid 54101:tid 54115] [client 20.220.8.221:60883] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGjZ1Y5qgRktcYTGFtSxAAAAcc"]
[Fri Feb 27 22:00:09.118572 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:1749] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGjafnSUDZue59Px9tHkwAAAVc"]
[Fri Feb 27 22:00:09.713856 2026] [:error] [pid 54102:tid 54162] [client 20.220.8.221:60905] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaGjaXi74D4fiYUm_GeECwAAAJI"]
[Fri Feb 27 22:00:10.704986 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:1639] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aaGjasKBhrfI6KNv9RgafgAAAAM"]
[Fri Feb 27 22:00:11.281591 2026] [:error] [pid 54102:tid 54154] [client 20.220.8.221:57749] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aaGja3i74D4fiYUm_GeEDgAAAIo"]
[Fri Feb 27 22:00:11.736618 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:52334] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aaGja8KBhrfI6KNv9RgaiQAAAAs"]
[Fri Feb 27 22:00:13.090225 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:59638] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "aaGjbYa650YPyxXVeRaa7QAAAZU"]
[Fri Feb 27 22:00:14.050388 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:55360] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aaGjbsKBhrfI6KNv9RgalwAAAA8"]
[Fri Feb 27 22:00:14.805452 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:1619] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aaGjboa650YPyxXVeRaa9gAAAYU"]
[Fri Feb 27 22:00:15.330453 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:61608] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aaGjb4a650YPyxXVeRaa9wAAAYc"]
[Fri Feb 27 22:00:16.082319 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:57739] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehehehe.php"] [unique_id "aaGjcIa650YPyxXVeRabAwAAAYo"]
[Fri Feb 27 22:00:16.743799 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:54767] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaGjcIa650YPyxXVeRabBwAAAZI"]
[Fri Feb 27 22:00:17.194422 2026] [:error] [pid 62998:tid 63016] [client 20.220.8.221:60920] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaGjcVQeueXZDUmoLoluEQAAAQ4"]
[Fri Feb 27 22:00:17.751714 2026] [:error] [pid 62998:tid 63019] [client 20.220.8.221:52852] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaGjcVQeueXZDUmoLoluFgAAARE"]
[Fri Feb 27 22:00:18.351888 2026] [:error] [pid 52073:tid 52095] [client 20.220.8.221:52346] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ocean/about.php"] [unique_id "aaGjcoa650YPyxXVeRabEgAAAZM"]
[Fri Feb 27 22:00:18.827435 2026] [:error] [pid 54101:tid 54122] [client 20.220.8.221:61585] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/index.php"] [unique_id "aaGjclY5qgRktcYTGFtSyAAAAc4"]
[Fri Feb 27 22:00:19.446401 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:52814] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/index.php"] [unique_id "aaGjc8KBhrfI6KNv9RgapQAAAA8"]
[Fri Feb 27 22:00:20.453129 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:61627] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/index.php"] [unique_id "aaGjdIa650YPyxXVeRabHwAAAZc"]
[Fri Feb 27 22:00:21.662211 2026] [:error] [pid 54103:tid 54183] [client 20.220.8.221:59596] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/index.php"] [unique_id "aaGjdevG4MPCmE0B2sC8YQAAAMw"]
[Fri Feb 27 22:00:22.648702 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:59539] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaGjdoa650YPyxXVeRabLgAAAYE"]
[Fri Feb 27 22:00:24.173824 2026] [:error] [pid 62998:tid 63023] [client 20.220.8.221:1778] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aaGjeFQeueXZDUmoLoluHAAAARU"]
[Fri Feb 27 22:00:25.491402 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:61602] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aaGjecKBhrfI6KNv9RgauAAAABI"]
[Fri Feb 27 22:00:26.866695 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:55382] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aaGjevnSUDZue59Px9tHswAAAUQ"]
[Fri Feb 27 22:00:29.005679 2026] [:error] [pid 54101:tid 54130] [client 20.220.8.221:54762] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aaGjfVY5qgRktcYTGFtS0wAAAdY"]
[Fri Feb 27 22:00:30.265071 2026] [:error] [pid 54231:tid 54239] [client 20.220.8.221:57731] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaGjfuTvb5AeyJCdY7AugAAAAEU"]
[Fri Feb 27 22:00:31.222850 2026] [:error] [pid 62998:tid 63001] [client 20.220.8.221:55411] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aaGjf1QeueXZDUmoLoluNQAAAQA"]
[Fri Feb 27 22:00:32.009824 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:59521] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aaGjgIa650YPyxXVeRabTwAAAYU"]
[Fri Feb 27 22:00:32.674066 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:60891] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aaGjgIa650YPyxXVeRabUwAAAYY"]
[Fri Feb 27 22:00:33.630900 2026] [:error] [pid 62998:tid 63009] [client 20.220.8.221:55407] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aaGjgVQeueXZDUmoLoluOwAAAQc"]
[Fri Feb 27 22:00:34.142789 2026] [:error] [pid 52073:tid 52084] [client 20.220.8.221:1785] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "aaGjgoa650YPyxXVeRabVgAAAYg"]
[Fri Feb 27 22:00:34.798696 2026] [:error] [pid 62998:tid 63013] [client 20.220.8.221:1788] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "aaGjglQeueXZDUmoLoluQAAAAQs"]
[Fri Feb 27 22:00:35.333516 2026] [:error] [pid 54101:tid 54110] [client 20.220.8.221:60881] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "aaGjg1Y5qgRktcYTGFtS4wAAAcI"]
[Fri Feb 27 22:00:35.839890 2026] [:error] [pid 54231:tid 54246] [client 20.220.8.221:60927] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "aaGjg-Tvb5AeyJCdY7AuiwAAAEw"]
[Fri Feb 27 22:00:36.528852 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:1602] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/index.php"] [unique_id "aaGjhMKBhrfI6KNv9RgaxQAAABM"]
[Fri Feb 27 22:00:37.083284 2026] [:error] [pid 54101:tid 54129] [client 20.220.8.221:57758] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/index.php"] [unique_id "aaGjhVY5qgRktcYTGFtS5AAAAdU"]
[Fri Feb 27 22:00:37.565873 2026] [:error] [pid 54103:tid 54191] [client 20.220.8.221:60910] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/index.php"] [unique_id "aaGjhevG4MPCmE0B2sC8awAAANQ"]
[Fri Feb 27 22:00:38.040103 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:52845] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/index.php"] [unique_id "aaGjhvnSUDZue59Px9tH1AAAAUQ"]
[Fri Feb 27 22:00:38.526350 2026] [:error] [pid 49306:tid 49308] [client 20.220.8.221:61576] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaGjhvnSUDZue59Px9tH1wAAAUA"]
[Fri Feb 27 22:00:39.139114 2026] [:error] [pid 52073:tid 52094] [client 20.220.8.221:57770] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaGjh4a650YPyxXVeRabYgAAAZI"]
[Fri Feb 27 22:00:39.876168 2026] [:error] [pid 62998:tid 63022] [client 20.220.8.221:59617] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaGjh1QeueXZDUmoLoluTAAAARQ"]
[Fri Feb 27 22:00:40.835604 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:59610] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/file.php"] [unique_id "aaGjiMKBhrfI6KNv9RgayQAAABc"]
[Fri Feb 27 22:00:42.206803 2026] [:error] [pid 49306:tid 49324] [client 20.220.8.221:1765] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aaGjivnSUDZue59Px9tH2wAAAVA"]
[Fri Feb 27 22:00:43.805566 2026] [:error] [pid 54103:tid 54175] [client 20.220.8.221:55413] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Feb 27 22:00:44.223528 2026] [:error] [pid 54103:tid 54188] [client 20.220.8.221:55413] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex.php
[Fri Feb 27 22:00:44.909929 2026] [:error] [pid 54103:tid 54176] [client 20.220.8.221:55413] [client 20.220.8.221] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.8.221, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aaGjjOvG4MPCmE0B2sC8gAAAAMU"]
[Fri Feb 27 22:00:45.132569 2026] [:error] [pid 54103:tid 54191] [client 20.220.8.221:55413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Feb 27 22:00:45.575725 2026] [:error] [pid 54103:tid 54194] [client 20.220.8.221:55413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Feb 27 22:00:46.081326 2026] [:error] [pid 54103:tid 54180] [client 20.220.8.221:55413] File does not exist: /usr/local/apache/htdocs/suspended-page/news.php
[Fri Feb 27 22:00:46.285893 2026] [:error] [pid 54103:tid 54177] [client 20.220.8.221:55413] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaGjjuvG4MPCmE0B2sC8hQAAAMY"]
[Fri Feb 27 22:00:47.273676 2026] [:error] [pid 54103:tid 54183] [client 20.220.8.221:1609] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Fri Feb 27 22:00:47.523990 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:1609] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaGjj-vG4MPCmE0B2sC8iwAAAM8"]
[Fri Feb 27 22:00:48.068199 2026] [:error] [pid 52073:tid 52090] [client 20.220.8.221:60880] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaGjkIa650YPyxXVeRabdwAAAY4"]
[Fri Feb 27 22:00:49.087168 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:52295] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaGjkYa650YPyxXVeRabgQAAAY8"]
[Fri Feb 27 22:00:49.577630 2026] [:error] [pid 54101:tid 54132] [client 20.220.8.221:52348] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaGjkVY5qgRktcYTGFtS7QAAAdg"]
[Fri Feb 27 22:00:50.048204 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:52803] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGjkoa650YPyxXVeRabiQAAAYc"]
[Fri Feb 27 22:00:50.635777 2026] [:error] [pid 56075:tid 56092] [client 20.220.8.221:60890] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGjksKBhrfI6KNv9Rga-gAAAA4"]
[Fri Feb 27 22:00:51.146768 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:60912] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGjk8KBhrfI6KNv9RgbAwAAAAY"]
[Fri Feb 27 22:00:51.816741 2026] [:error] [pid 56075:tid 56092] [client 20.220.8.221:1615] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaGjk8KBhrfI6KNv9RgbCgAAAA4"]
[Fri Feb 27 22:00:52.240400 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:59647] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaGjlMKBhrfI6KNv9RgbEgAAABU"]
[Fri Feb 27 22:00:52.736471 2026] [:error] [pid 54231:tid 54247] [client 20.220.8.221:1739] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaGjlOTvb5AeyJCdY7AusgAAAE0"]
[Fri Feb 27 22:00:53.266224 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:55419] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaGjlYa650YPyxXVeRabkgAAAYw"]
[Fri Feb 27 22:00:53.818064 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:52855] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "aaGjlcKBhrfI6KNv9RgbIwAAAA8"]
[Fri Feb 27 22:00:54.485100 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:59587] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aaGjloa650YPyxXVeRablgAAAYs"]
[Fri Feb 27 22:00:55.066529 2026] [:error] [pid 56075:tid 56092] [client 20.220.8.221:61598] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aaGjl8KBhrfI6KNv9RgbLwAAAA4"]
[Fri Feb 27 22:00:55.584296 2026] [:error] [pid 62998:tid 63025] [client 20.220.8.221:60900] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aaGjl1QeueXZDUmoLoluXgAAARc"]
[Fri Feb 27 22:00:56.091046 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:54730] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "aaGjmIa650YPyxXVeRaboAAAAYU"]
[Fri Feb 27 22:00:56.511252 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:1630] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaGjmPnSUDZue59Px9tH9AAAAU4"]
[Fri Feb 27 22:00:57.070961 2026] [:error] [pid 49306:tid 49332] [client 20.220.8.221:59584] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaGjmfnSUDZue59Px9tH9QAAAVg"]
[Fri Feb 27 22:00:57.625610 2026] [:error] [pid 52073:tid 52100] [client 20.220.8.221:61594] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaGjmYa650YPyxXVeRabqQAAAZg"]
[Fri Feb 27 22:00:58.117698 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:52310] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaGjmoa650YPyxXVeRabrwAAAY8"]
[Fri Feb 27 22:00:58.575735 2026] [:error] [pid 54102:tid 54169] [client 20.220.8.221:1624] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGjmni74D4fiYUm_GeELwAAAJg"]
[Fri Feb 27 22:00:59.089882 2026] [:error] [pid 56075:tid 56093] [client 20.220.8.221:60906] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGjm8KBhrfI6KNv9RgbTQAAAA8"]
[Fri Feb 27 22:00:59.612526 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:61617] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGjm1QeueXZDUmoLoluYAAAARg"]
[Fri Feb 27 22:01:00.117819 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:61624] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaGjnMKBhrfI6KNv9RgbXQAAAAc"]
[Fri Feb 27 22:01:00.622794 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:55422] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaGjnPnSUDZue59Px9tH_AAAAUg"]
[Fri Feb 27 22:01:01.051986 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:60914] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaGjncKBhrfI6KNv9RgbZQAAAAM"]
[Fri Feb 27 22:01:01.494359 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:59622] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaGjnfnSUDZue59Px9tH_QAAAVc"]
[Fri Feb 27 22:01:02.096647 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:59630] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/cgi-bin/about.php"] [unique_id "aaGjnsKBhrfI6KNv9RgbbwAAAAc"]
[Fri Feb 27 22:01:02.733545 2026] [:error] [pid 62998:tid 63014] [client 20.220.8.221:52297] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaGjnlQeueXZDUmoLoluYQAAAQw"]
[Fri Feb 27 22:01:03.349470 2026] [:error] [pid 54101:tid 54124] [client 20.220.8.221:52827] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaGjn1Y5qgRktcYTGFtS8QAAAdA"]
[Fri Feb 27 22:01:03.853035 2026] [:error] [pid 54101:tid 54120] [client 20.220.8.221:60898] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaGjn1Y5qgRktcYTGFtS8wAAAcw"]
[Fri Feb 27 22:01:04.427005 2026] [:error] [pid 56075:tid 56079] [client 20.220.8.221:61621] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaGjoMKBhrfI6KNv9RgbgwAAAAI"]
[Fri Feb 27 22:01:04.903867 2026] [:error] [pid 62998:tid 63013] [client 20.220.8.221:57780] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaGjoFQeueXZDUmoLoluZQAAAQs"]
[Fri Feb 27 22:01:05.374878 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:52840] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aaGjoYa650YPyxXVeRabvwAAAZY"]
[Fri Feb 27 22:01:05.893510 2026] [:error] [pid 54103:tid 54195] [client 20.220.8.221:1653] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aaGjoevG4MPCmE0B2sC8mwAAANg"]
[Fri Feb 27 22:01:06.461008 2026] [:error] [pid 62998:tid 63009] [client 20.220.8.221:55368] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aaGjolQeueXZDUmoLoluaAAAAQc"]
[Fri Feb 27 22:01:07.107656 2026] [:error] [pid 62998:tid 63001] [client 20.220.8.221:60922] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aaGjo1QeueXZDUmoLoluagAAAQA"]
[Fri Feb 27 22:01:07.850701 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:1613] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aaGjo8KBhrfI6KNv9RgbmgAAAAM"]
[Fri Feb 27 22:01:08.279660 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:61586] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aaGjpMKBhrfI6KNv9RgbngAAAAE"]
[Fri Feb 27 22:01:08.709204 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:55390] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aaGjpIa650YPyxXVeRabxQAAAYo"]
[Fri Feb 27 22:01:09.118768 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:60902] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aaGjpcKBhrfI6KNv9RgbpgAAAAA"]
[Fri Feb 27 22:01:09.809712 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:59586] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGjpfnSUDZue59Px9tIFQAAAUs"]
[Fri Feb 27 22:01:11.031714 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:60924] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGjp_nSUDZue59Px9tIGQAAAUQ"]
[Fri Feb 27 22:01:11.989306 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:55414] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGjp4a650YPyxXVeRab1wAAAZc"]
[Fri Feb 27 22:01:12.825476 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:57734] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaGjqIa650YPyxXVeRab2wAAAYw"]
[Fri Feb 27 22:01:13.635166 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:52347] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaGjqcKBhrfI6KNv9RgbvwAAAAA"]
[Fri Feb 27 22:01:14.299366 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:1780] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aaGjqsKBhrfI6KNv9RgbxgAAAAo"]
[Fri Feb 27 22:01:15.139985 2026] [:error] [pid 56075:tid 56091] [client 20.220.8.221:57786] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaGjq8KBhrfI6KNv9RgbzQAAAA0"]
[Fri Feb 27 22:01:24.542435 2026] [:error] [pid 54102:tid 54155] [client 20.220.8.221:61577] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaGjtHi74D4fiYUm_GeESAAAAIs"]
[Fri Feb 27 22:01:26.431130 2026] [:error] [pid 54231:tid 54237] [client 20.220.8.221:1604] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaGjtuTvb5AeyJCdY7Au1gAAAEM"]
[Fri Feb 27 22:01:28.441903 2026] [:error] [pid 54103:tid 54173] [client 20.220.8.221:61592] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aaGjuOvG4MPCmE0B2sC8xAAAAMI"]
[Fri Feb 27 22:01:30.097501 2026] [:error] [pid 62998:tid 63022] [client 20.220.8.221:61573] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aaGjulQeueXZDUmoLolulgAAARQ"]
[Fri Feb 27 22:01:31.301439 2026] [:error] [pid 54102:tid 54165] [client 20.220.8.221:55376] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aaGju3i74D4fiYUm_GeETAAAAJU"]
[Fri Feb 27 22:01:32.211054 2026] [:error] [pid 54102:tid 54163] [client 20.220.8.221:61591] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aaGjvHi74D4fiYUm_GeEUwAAAJM"]
[Fri Feb 27 22:01:33.033562 2026] [:error] [pid 56075:tid 56090] [client 20.220.8.221:59604] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aaGjvcKBhrfI6KNv9RgcFgAAAAw"]
[Fri Feb 27 22:01:33.837229 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:1603] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aaGjvcKBhrfI6KNv9RgcIAAAAAE"]
[Fri Feb 27 22:01:34.605237 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:52316] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aaGjvsKBhrfI6KNv9RgcKQAAAAc"]
[Fri Feb 27 22:01:35.445844 2026] [:error] [pid 62998:tid 63013] [client 20.220.8.221:1782] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aaGjv1QeueXZDUmoLolungAAAQs"]
[Fri Feb 27 22:01:36.082809 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:61603] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aaGjwFQeueXZDUmoLoluoAAAARA"]
[Fri Feb 27 22:01:36.718366 2026] [:error] [pid 52073:tid 52090] [client 20.220.8.221:52811] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aaGjwIa650YPyxXVeRacPAAAAY4"]
[Fri Feb 27 22:01:37.269776 2026] [:error] [pid 62998:tid 63008] [client 20.220.8.221:57751] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aaGjwVQeueXZDUmoLolupwAAAQY"]
[Fri Feb 27 22:01:37.817154 2026] [:error] [pid 49306:tid 49327] [client 20.220.8.221:1492] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aaGjwfnSUDZue59Px9tIcAAAAVM"]
[Fri Feb 27 22:01:38.381785 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:1738] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/"] [unique_id "aaGjwsKBhrfI6KNv9RgcNQAAAAE"]
[Fri Feb 27 22:01:39.157040 2026] [:error] [pid 52073:tid 52095] [client 20.220.8.221:61631] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aaGjw4a650YPyxXVeRacTgAAAZM"]
[Fri Feb 27 22:01:40.206595 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:52322] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aaGjxMKBhrfI6KNv9RgcPgAAAAs"]
[Fri Feb 27 22:01:40.829013 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:1627] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aaGjxMKBhrfI6KNv9RgcRQAAAAM"]
[Fri Feb 27 22:01:41.719409 2026] [:error] [pid 54103:tid 54186] [client 20.220.8.221:52818] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "aaGjxevG4MPCmE0B2sC85gAAAM8"]
[Fri Feb 27 22:01:42.647665 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:57774] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/special.php"] [unique_id "aaGjxoa650YPyxXVeRacWAAAAYs"]
[Fri Feb 27 22:01:43.287044 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:1732] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/special.php"] [unique_id "aaGjx4a650YPyxXVeRacYgAAAY8"]
[Fri Feb 27 22:01:44.170724 2026] [:error] [pid 54231:tid 54245] [client 20.220.8.221:61584] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/special.php"] [unique_id "aaGjyOTvb5AeyJCdY7Au6wAAAEs"]
[Fri Feb 27 22:01:45.422949 2026] [:error] [pid 62998:tid 63005] [client 20.220.8.221:54743] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/special.php"] [unique_id "aaGjyVQeueXZDUmoLoluugAAAQM"]
[Fri Feb 27 22:01:46.097102 2026] [:error] [pid 54103:tid 54172] [client 20.220.8.221:1784] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aaGjyuvG4MPCmE0B2sC87AAAAME"]
[Fri Feb 27 22:01:46.733879 2026] [:error] [pid 54101:tid 54115] [client 20.220.8.221:59608] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/"] [unique_id "aaGjylY5qgRktcYTGFtTBgAAAcc"]
[Fri Feb 27 22:01:47.464245 2026] [:error] [pid 54231:tid 54252] [client 20.220.8.221:55402] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaGjy-Tvb5AeyJCdY7Au_AAAAFI"]
[Fri Feb 27 22:01:47.977905 2026] [:error] [pid 54103:tid 54184] [client 20.220.8.221:1747] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaGjy-vG4MPCmE0B2sC87QAAAM0"]
[Fri Feb 27 22:01:48.637987 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:1790] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aaGjzMKBhrfI6KNv9RgcXwAAABA"]
[Fri Feb 27 22:01:49.774946 2026] [:error] [pid 49306:tid 49308] [client 20.220.8.221:60903] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Fri Feb 27 22:01:51.618526 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:60903] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Feb 27 22:01:51.908589 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:60903] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaGjz_nSUDZue59Px9tImwAAAUs"]
[Fri Feb 27 22:01:52.950775 2026] [:error] [pid 49306:tid 49309] [client 20.220.8.221:52307] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Feb 27 22:01:53.395141 2026] [:error] [pid 49306:tid 49318] [client 20.220.8.221:52307] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aaGj0fnSUDZue59Px9tIqwAAAUo"]
[Fri Feb 27 22:01:53.999602 2026] [:error] [pid 54102:tid 54153] [client 20.220.8.221:52848] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aaGj0Xi74D4fiYUm_GeEYgAAAIk"]
[Fri Feb 27 22:01:54.555602 2026] [:error] [pid 49306:tid 49331] [client 20.220.8.221:60899] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aaGj0vnSUDZue59Px9tIsAAAAVc"]
[Fri Feb 27 22:01:55.019305 2026] [:error] [pid 54231:tid 54234] [client 20.220.8.221:52844] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/function.php"] [unique_id "aaGj0-Tvb5AeyJCdY7AvCgAAAEA"]
[Fri Feb 27 22:01:55.519807 2026] [:error] [pid 54103:tid 54194] [client 20.220.8.221:52311] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/profile.php"] [unique_id "aaGj0-vG4MPCmE0B2sC88QAAANc"]
[Fri Feb 27 22:01:56.051123 2026] [:error] [pid 54103:tid 54175] [client 20.220.8.221:52850] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/profile.php"] [unique_id "aaGj1OvG4MPCmE0B2sC88gAAAMQ"]
[Fri Feb 27 22:01:56.611835 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:52306] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/profile.php"] [unique_id "aaGj1Ia650YPyxXVeRacjwAAAY0"]
[Fri Feb 27 22:01:57.111323 2026] [:error] [pid 49306:tid 49325] [client 20.220.8.221:58541] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/profile.php"] [unique_id "aaGj1fnSUDZue59Px9tItQAAAVE"]
[Fri Feb 27 22:01:57.618055 2026] [:error] [pid 54231:tid 54257] [client 20.220.8.221:52842] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/php-compat/index.php"] [unique_id "aaGj1eTvb5AeyJCdY7AvEQAAAFc"]
[Fri Feb 27 22:01:58.287852 2026] [:error] [pid 54102:tid 54145] [client 20.220.8.221:54755] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aaGj1ni74D4fiYUm_GeEaQAAAIE"]
[Fri Feb 27 22:01:58.896238 2026] [:error] [pid 54102:tid 54146] [client 20.220.8.221:54740] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aaGj1ni74D4fiYUm_GeEbAAAAII"]
[Fri Feb 27 22:01:59.808257 2026] [:error] [pid 56075:tid 56097] [client 20.220.8.221:1755] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/shell20211028.php"] [unique_id "aaGj18KBhrfI6KNv9RgcagAAABM"]
[Fri Feb 27 22:02:00.731512 2026] [:error] [pid 56075:tid 56083] [client 20.220.8.221:52342] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGj2MKBhrfI6KNv9RgcdwAAAAY"]
[Fri Feb 27 22:02:01.713382 2026] [:error] [pid 62998:tid 63024] [client 20.220.8.221:61613] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGj2VQeueXZDUmoLolu0QAAARY"]
[Fri Feb 27 22:02:02.371327 2026] [:error] [pid 62998:tid 63018] [client 20.220.8.221:52336] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGj2lQeueXZDUmoLolu1gAAARA"]
[Fri Feb 27 22:02:02.882166 2026] [:error] [pid 54102:tid 54161] [client 20.220.8.221:55414] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGj2ni74D4fiYUm_GeEbgAAAJE"]
[Fri Feb 27 22:02:03.316633 2026] [:error] [pid 54103:tid 54190] [client 20.220.8.221:1628] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaGj2-vG4MPCmE0B2sC8_wAAANM"]
[Fri Feb 27 22:02:03.987552 2026] [:error] [pid 54102:tid 54165] [client 20.220.8.221:57740] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaGj23i74D4fiYUm_GeEdQAAAJU"]
[Fri Feb 27 22:02:04.683899 2026] [:error] [pid 54101:tid 54111] [client 20.220.8.221:1651] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaGj3FY5qgRktcYTGFtTGwAAAcM"]
[Fri Feb 27 22:02:05.271803 2026] [:error] [pid 54103:tid 54182] [client 20.220.8.221:59567] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ai1wm-backups/"] [unique_id "aaGj3evG4MPCmE0B2sC9CAAAAMs"]
[Fri Feb 27 22:02:05.852653 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:61607] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aaGj3Ya650YPyxXVeRacsAAAAYM"]
[Fri Feb 27 22:02:06.539048 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:52862] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aaGj3oa650YPyxXVeRactwAAAY0"]
[Fri Feb 27 22:02:07.649969 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:1650] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aaGj3_nSUDZue59Px9tIvgAAAUs"]
[Fri Feb 27 22:02:08.400874 2026] [:error] [pid 54101:tid 54114] [client 20.220.8.221:1757] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ava.php"] [unique_id "aaGj4FY5qgRktcYTGFtTJwAAAcY"]
[Fri Feb 27 22:02:09.095113 2026] [:error] [pid 54102:tid 54148] [client 20.220.8.221:52351] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/xwx1.php"] [unique_id "aaGj4Xi74D4fiYUm_GeEewAAAIQ"]
[Fri Feb 27 22:02:09.557909 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:59599] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaGj4cKBhrfI6KNv9RgciwAAAAs"]
[Fri Feb 27 22:02:10.069538 2026] [:error] [pid 56075:tid 56084] [client 20.220.8.221:52817] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aaGj4sKBhrfI6KNv9RgckwAAAAc"]
[Fri Feb 27 22:02:10.747813 2026] [:error] [pid 54102:tid 54146] [client 20.220.8.221:1649] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaGj4ni74D4fiYUm_GeEfwAAAII"]
[Fri Feb 27 22:02:11.216136 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:60926] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaGj4_nSUDZue59Px9tIxAAAAUM"]
[Fri Feb 27 22:02:11.671345 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:61568] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaGj44a650YPyxXVeRacwgAAAZQ"]
[Fri Feb 27 22:02:12.217360 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:61590] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaGj5Ia650YPyxXVeRacyAAAAYo"]
[Fri Feb 27 22:02:12.763738 2026] [:error] [pid 52073:tid 52093] [client 20.220.8.221:52829] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aaGj5Ia650YPyxXVeRaczgAAAZE"]
[Fri Feb 27 22:02:13.753698 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:54765] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aaGj5Ya650YPyxXVeRac1gAAAYM"]
[Fri Feb 27 22:02:14.211212 2026] [:error] [pid 54102:tid 54160] [client 20.220.8.221:60885] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aaGj5ni74D4fiYUm_GeEgQAAAJA"]
[Fri Feb 27 22:02:14.677920 2026] [:error] [pid 56075:tid 56077] [client 20.220.8.221:1472] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "aaGj5sKBhrfI6KNv9RgcpgAAAAA"]
[Fri Feb 27 22:02:15.242460 2026] [:error] [pid 56075:tid 56102] [client 20.220.8.221:61579] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aaGj58KBhrfI6KNv9RgcqwAAABg"]
[Fri Feb 27 22:02:15.704985 2026] [:error] [pid 56075:tid 56079] [client 20.220.8.221:55416] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aaGj58KBhrfI6KNv9RgcsAAAAAI"]
[Fri Feb 27 22:02:16.170467 2026] [:error] [pid 49306:tid 49316] [client 20.220.8.221:61583] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aaGj6PnSUDZue59Px9tI0QAAAUg"]
[Fri Feb 27 22:02:16.776376 2026] [:error] [pid 49306:tid 49327] [client 20.220.8.221:58523] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/radio.php"] [unique_id "aaGj6PnSUDZue59Px9tI0wAAAVM"]
[Fri Feb 27 22:02:17.907708 2026] [:error] [pid 56075:tid 56086] [client 20.220.8.221:57767] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aaGj6cKBhrfI6KNv9RgcugAAAAk"]
[Fri Feb 27 22:02:19.299775 2026] [:error] [pid 62998:tid 63025] [client 20.220.8.221:52303] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aaGj61QeueXZDUmoLolu_AAAARc"]
[Fri Feb 27 22:02:20.207440 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:61588] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aaGj7Ia650YPyxXVeRac6AAAAZY"]
[Fri Feb 27 22:02:20.758925 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:1644] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aaGj7Ia650YPyxXVeRac7QAAAYE"]
[Fri Feb 27 22:02:21.363253 2026] [:error] [pid 52073:tid 52078] [client 20.220.8.221:52331] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api.php"] [unique_id "aaGj7Ya650YPyxXVeRac7gAAAYI"]
[Fri Feb 27 22:02:22.040265 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:52333] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aaGj7oa650YPyxXVeRac8AAAAYU"]
[Fri Feb 27 22:02:22.686458 2026] [:error] [pid 49306:tid 49325] [client 20.220.8.221:1654] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aaGj7vnSUDZue59Px9tI3QAAAVE"]
[Fri Feb 27 22:02:23.258129 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:55369] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aaGj7_nSUDZue59Px9tI4QAAAUY"]
[Fri Feb 27 22:02:23.926859 2026] [:error] [pid 49306:tid 49315] [client 20.220.8.221:60870] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "aaGj7_nSUDZue59Px9tI5gAAAUc"]
[Fri Feb 27 22:02:24.394734 2026] [:error] [pid 54231:tid 54237] [client 20.220.8.221:61604] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/"] [unique_id "aaGj8OTvb5AeyJCdY7AvJwAAAEM"]
[Fri Feb 27 22:02:24.995471 2026] [:error] [pid 62998:tid 63005] [client 20.220.8.221:52828] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/"] [unique_id "aaGj8FQeueXZDUmoLolvAAAAAQM"]
[Fri Feb 27 22:02:25.551145 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:55384] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/"] [unique_id "aaGj8VQeueXZDUmoLolvAwAAARg"]
[Fri Feb 27 22:02:26.036969 2026] [:error] [pid 54231:tid 54253] [client 20.220.8.221:61609] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/"] [unique_id "aaGj8uTvb5AeyJCdY7AvKQAAAFM"]
[Fri Feb 27 22:02:26.473805 2026] [:error] [pid 54231:tid 54254] [client 20.220.8.221:54756] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaGj8uTvb5AeyJCdY7AvKwAAAFQ"]
[Fri Feb 27 22:02:27.098368 2026] [:error] [pid 54231:tid 54235] [client 20.220.8.221:60866] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaGj8-Tvb5AeyJCdY7AvLQAAAEE"]
[Fri Feb 27 22:02:27.641562 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:59613] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaGj8-Tvb5AeyJCdY7AvLgAAAEc"]
[Fri Feb 27 22:02:28.128933 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:55383] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaGj9PnSUDZue59Px9tI8QAAAUY"]
[Fri Feb 27 22:02:28.948824 2026] [:error] [pid 49306:tid 49319] [client 20.220.8.221:52309] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGj9PnSUDZue59Px9tI-QAAAUs"]
[Fri Feb 27 22:02:29.733676 2026] [:error] [pid 49306:tid 49323] [client 20.220.8.221:1652] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGj9fnSUDZue59Px9tI_gAAAU8"]
[Fri Feb 27 22:02:30.320822 2026] [:error] [pid 52073:tid 52088] [client 20.220.8.221:55421] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGj9oa650YPyxXVeRac-AAAAYw"]
[Fri Feb 27 22:02:30.950422 2026] [:error] [pid 54103:tid 54176] [client 20.220.8.221:1605] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaGj9uvG4MPCmE0B2sC9GwAAAMU"]
[Fri Feb 27 22:02:31.407301 2026] [:error] [pid 49306:tid 49317] [client 20.220.8.221:52313] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aaGj9_nSUDZue59Px9tJBQAAAUk"]
[Fri Feb 27 22:02:31.848173 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:52808] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aaGj9_nSUDZue59Px9tJCQAAAU4"]
[Fri Feb 27 22:02:32.373763 2026] [:error] [pid 52073:tid 52081] [client 20.220.8.221:52821] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aaGj-Ia650YPyxXVeRac_AAAAYU"]
[Fri Feb 27 22:02:32.918773 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:61589] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "aaGj-Ia650YPyxXVeRadAAAAAYA"]
[Fri Feb 27 22:02:33.395757 2026] [:error] [pid 62998:tid 63002] [client 20.220.8.221:61575] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css.php"] [unique_id "aaGj-VQeueXZDUmoLolvDwAAAQE"]
[Fri Feb 27 22:02:34.030036 2026] [:error] [pid 49306:tid 49308] [client 20.220.8.221:60916] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aaGj-vnSUDZue59Px9tJEgAAAUA"]
[Fri Feb 27 22:02:34.733524 2026] [:error] [pid 56075:tid 56094] [client 20.220.8.221:55408] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aaGj-sKBhrfI6KNv9Rgc3AAAABA"]
[Fri Feb 27 22:02:35.337280 2026] [:error] [pid 54103:tid 54192] [client 20.220.8.221:52822] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aaGj--vG4MPCmE0B2sC9HQAAANU"]
[Fri Feb 27 22:02:36.033091 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:1641] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aaGj_Ia650YPyxXVeRadCAAAAYM"]
[Fri Feb 27 22:02:36.634343 2026] [:error] [pid 62998:tid 63011] [client 20.220.8.221:59593] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaGj_FQeueXZDUmoLolvFQAAAQk"]
[Fri Feb 27 22:02:37.191260 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:1648] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaGj_fnSUDZue59Px9tJGQAAAUw"]
[Fri Feb 27 22:02:37.729234 2026] [:error] [pid 62998:tid 63001] [client 20.220.8.221:52294] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaGj_VQeueXZDUmoLolvFgAAAQA"]
[Fri Feb 27 22:02:38.280976 2026] [:error] [pid 54103:tid 54173] [client 20.220.8.221:57746] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aaGj_uvG4MPCmE0B2sC9HgAAAMI"]
[Fri Feb 27 22:02:38.908099 2026] [:error] [pid 54102:tid 54145] [client 20.220.8.221:61570] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aaGj_ni74D4fiYUm_GeEkwAAAIE"]
[Fri Feb 27 22:02:39.416878 2026] [:error] [pid 54103:tid 54178] [client 20.220.8.221:57790] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aaGj_-vG4MPCmE0B2sC9IgAAAMc"]
[Fri Feb 27 22:02:40.205361 2026] [:error] [pid 54102:tid 54146] [client 20.220.8.221:59631] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aaGkAHi74D4fiYUm_GeElgAAAII"]
[Fri Feb 27 22:02:41.128672 2026] [:error] [pid 54102:tid 54144] [client 20.220.8.221:52299] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/"] [unique_id "aaGkAXi74D4fiYUm_GeElwAAAIA"]
[Fri Feb 27 22:02:41.928838 2026] [:error] [pid 54101:tid 54128] [client 20.220.8.221:60908] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aaGkAVY5qgRktcYTGFtTPAAAAdQ"]
[Fri Feb 27 22:02:42.469813 2026] [:error] [pid 49306:tid 49325] [client 20.220.8.221:59614] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aaGkAvnSUDZue59Px9tJKgAAAVE"]
[Fri Feb 27 22:02:43.267990 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:59625] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aaGkA4a650YPyxXVeRadFQAAAZc"]
[Fri Feb 27 22:02:45.127897 2026] [:error] [pid 62998:tid 63022] [client 20.220.8.221:54744] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aaGkBVQeueXZDUmoLolvLgAAARQ"]
[Fri Feb 27 22:02:46.872029 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:1625] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaGkBoa650YPyxXVeRadIgAAAY0"]
[Fri Feb 27 22:02:47.525822 2026] [:error] [pid 56075:tid 56096] [client 20.220.8.221:1638] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaGkB8KBhrfI6KNv9Rgc8wAAABI"]
[Fri Feb 27 22:02:48.019309 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:1623] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaGkCIa650YPyxXVeRadKwAAAYk"]
[Fri Feb 27 22:02:48.574155 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:1742] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "aaGkCMKBhrfI6KNv9Rgc9gAAAAM"]
[Fri Feb 27 22:02:49.282018 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:58553] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaGkCYa650YPyxXVeRadMAAAAZQ"]
[Fri Feb 27 22:02:49.958678 2026] [:error] [pid 54102:tid 54162] [client 20.220.8.221:52340] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGkCXi74D4fiYUm_GeEmAAAAJI"]
[Fri Feb 27 22:02:50.615421 2026] [:error] [pid 62998:tid 63004] [client 20.220.8.221:55404] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGkClQeueXZDUmoLolvPAAAAQI"]
[Fri Feb 27 22:02:51.193912 2026] [:error] [pid 62998:tid 63019] [client 20.220.8.221:52326] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGkC1QeueXZDUmoLolvPgAAARE"]
[Fri Feb 27 22:02:51.645056 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:1481] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGkC4a650YPyxXVeRadNwAAAY8"]
[Fri Feb 27 22:02:52.108006 2026] [:error] [pid 52073:tid 52084] [client 20.220.8.221:54739] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaGkDIa650YPyxXVeRadOQAAAYg"]
[Fri Feb 27 22:02:52.537519 2026] [:error] [pid 56075:tid 56081] [client 20.220.8.221:52290] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/et-cache/"] [unique_id "aaGkDMKBhrfI6KNv9RgdBAAAAAQ"]
[Fri Feb 27 22:02:53.223902 2026] [:error] [pid 52073:tid 52090] [client 20.220.8.221:61574] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php
[Fri Feb 27 22:02:53.435121 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:61574] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php
[Fri Feb 27 22:02:53.647105 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:61574] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Feb 27 22:02:53.918211 2026] [:error] [pid 52073:tid 52077] [client 20.220.8.221:61574] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Feb 27 22:02:54.565357 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:61574] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Feb 27 22:02:55.414010 2026] [:error] [pid 52073:tid 52099] [client 20.220.8.221:61574] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aaGkD4a650YPyxXVeRadTgAAAZc"]
[Fri Feb 27 22:02:55.831623 2026] [:error] [pid 54231:tid 54250] [client 20.220.8.221:61593] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aaGkD-Tvb5AeyJCdY7AvTgAAAFA"]
[Fri Feb 27 22:02:56.273043 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:59522] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aaGkEPnSUDZue59Px9tJQAAAAUY"]
[Fri Feb 27 22:02:56.718933 2026] [:error] [pid 49306:tid 49318] [client 20.220.8.221:59525] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aaGkEPnSUDZue59Px9tJRAAAAUo"]
[Fri Feb 27 22:02:57.220611 2026] [:error] [pid 54231:tid 54244] [client 20.220.8.221:61625] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aaGkEeTvb5AeyJCdY7AvVgAAAEo"]
[Fri Feb 27 22:02:57.633770 2026] [:error] [pid 54101:tid 54120] [client 20.220.8.221:52344] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aaGkEVY5qgRktcYTGFtTSAAAAcw"]
[Fri Feb 27 22:02:58.083924 2026] [:error] [pid 49306:tid 49332] [client 20.220.8.221:60876] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aaGkEvnSUDZue59Px9tJSAAAAVg"]
[Fri Feb 27 22:02:58.530425 2026] [:error] [pid 54102:tid 54158] [client 20.220.8.221:52835] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "aaGkEni74D4fiYUm_GeEoAAAAI4"]
[Fri Feb 27 22:02:58.970875 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:54777] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aaGkElQeueXZDUmoLolvRgAAARg"]
[Fri Feb 27 22:02:59.457246 2026] [:error] [pid 52073:tid 52096] [client 20.220.8.221:52328] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aaGkE4a650YPyxXVeRadVAAAAZQ"]
[Fri Feb 27 22:03:00.020339 2026] [:error] [pid 54102:tid 54145] [client 20.220.8.221:60922] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aaGkFHi74D4fiYUm_GeEowAAAIE"]
[Fri Feb 27 22:03:00.592407 2026] [:error] [pid 49306:tid 49326] [client 20.220.8.221:1626] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/FII.php"] [unique_id "aaGkFPnSUDZue59Px9tJSwAAAVI"]
[Fri Feb 27 22:03:01.080947 2026] [:error] [pid 54231:tid 54241] [client 20.220.8.221:1656] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aaGkFeTvb5AeyJCdY7AvXQAAAEc"]
[Fri Feb 27 22:03:01.519136 2026] [:error] [pid 54103:tid 54192] [client 20.220.8.221:55380] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aaGkFevG4MPCmE0B2sC9RQAAANU"]
[Fri Feb 27 22:03:01.955452 2026] [:error] [pid 54101:tid 54109] [client 20.220.8.221:61587] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aaGkFVY5qgRktcYTGFtTTAAAAcE"]
[Fri Feb 27 22:03:02.426234 2026] [:error] [pid 52073:tid 52091] [client 20.220.8.221:60879] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kyami.php"] [unique_id "aaGkFoa650YPyxXVeRadWgAAAY8"]
[Fri Feb 27 22:03:03.471998 2026] [:error] [pid 52073:tid 52080] [client 20.220.8.221:1489] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aaGkF4a650YPyxXVeRadYwAAAYQ"]
[Fri Feb 27 22:03:03.922405 2026] [:error] [pid 49306:tid 49312] [client 20.220.8.221:52296] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aaGkF_nSUDZue59Px9tJUQAAAUQ"]
[Fri Feb 27 22:03:04.377469 2026] [:error] [pid 62998:tid 63002] [client 20.220.8.221:1762] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aaGkGFQeueXZDUmoLolvSQAAAQE"]
[Fri Feb 27 22:03:05.011359 2026] [:error] [pid 52073:tid 52090] [client 20.220.8.221:60901] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "aaGkGYa650YPyxXVeRadaAAAAY4"]
[Fri Feb 27 22:03:05.474746 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:61626] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaGkGYa650YPyxXVeRadbQAAAYo"]
[Fri Feb 27 22:03:06.193152 2026] [:error] [pid 52073:tid 52085] [client 20.220.8.221:55409] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaGkGoa650YPyxXVeRadcAAAAYk"]
[Fri Feb 27 22:03:07.336471 2026] [:error] [pid 52073:tid 52087] [client 20.220.8.221:59588] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaGkG4a650YPyxXVeRadcQAAAYs"]
[Fri Feb 27 22:03:08.156158 2026] [:error] [pid 56075:tid 56099] [client 20.220.8.221:1635] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.phphttps://forower.io/ioxi-o.php"] [unique_id "aaGkHMKBhrfI6KNv9RgdKAAAABU"]
[Fri Feb 27 22:03:09.147058 2026] [:error] [pid 54101:tid 54113] [client 20.220.8.221:1658] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aaGkHVY5qgRktcYTGFtTUAAAAcU"]
[Fri Feb 27 22:03:09.979036 2026] [:error] [pid 54231:tid 54252] [client 20.220.8.221:1646] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aaGkHeTvb5AeyJCdY7AvYwAAAFI"]
[Fri Feb 27 22:03:10.495000 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:55393] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aaGkHoa650YPyxXVeRaddQAAAYM"]
[Fri Feb 27 22:03:11.026851 2026] [:error] [pid 56075:tid 56080] [client 20.220.8.221:52329] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aaGkH8KBhrfI6KNv9RgdLQAAAAM"]
[Fri Feb 27 22:03:11.749329 2026] [:error] [pid 56075:tid 56078] [client 20.220.8.221:61620] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file.php"] [unique_id "aaGkH8KBhrfI6KNv9RgdMAAAAAE"]
[Fri Feb 27 22:03:12.239891 2026] [:error] [pid 56075:tid 56101] [client 20.220.8.221:57743] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file.php"] [unique_id "aaGkIMKBhrfI6KNv9RgdMwAAABc"]
[Fri Feb 27 22:03:13.153359 2026] [:error] [pid 54103:tid 54178] [client 20.220.8.221:52800] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file.php"] [unique_id "aaGkIevG4MPCmE0B2sC9SgAAAMc"]
[Fri Feb 27 22:03:13.928905 2026] [:error] [pid 62998:tid 63021] [client 20.220.8.221:60888] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file.php"] [unique_id "aaGkIVQeueXZDUmoLolvUAAAARM"]
[Fri Feb 27 22:03:14.504528 2026] [:error] [pid 49306:tid 49321] [client 20.220.8.221:1629] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aaGkIvnSUDZue59Px9tJXgAAAU0"]
[Fri Feb 27 22:03:15.050801 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:52804] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aaGkI_nSUDZue59Px9tJYAAAAUY"]
[Fri Feb 27 22:03:15.779487 2026] [:error] [pid 49306:tid 49320] [client 20.220.8.221:54770] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aaGkI_nSUDZue59Px9tJZwAAAUw"]
[Fri Feb 27 22:03:16.469520 2026] [:error] [pid 62998:tid 63007] [client 20.220.8.221:61601] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aaGkJFQeueXZDUmoLolvUwAAAQU"]
[Fri Feb 27 22:03:17.253447 2026] [:error] [pid 62998:tid 63024] [client 20.220.8.221:55374] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aaGkJVQeueXZDUmoLolvVwAAARY"]
[Fri Feb 27 22:03:18.143556 2026] [:error] [pid 49306:tid 49311] [client 20.220.8.221:1771] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aaGkJvnSUDZue59Px9tJcwAAAUM"]
[Fri Feb 27 22:03:18.637307 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:55378] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aaGkJoa650YPyxXVeRadfAAAAYc"]
[Fri Feb 27 22:03:19.079616 2026] [:error] [pid 54101:tid 54130] [client 20.220.8.221:1633] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "aaGkJ1Y5qgRktcYTGFtTUgAAAdY"]
[Fri Feb 27 22:03:19.493465 2026] [:error] [pid 52073:tid 52086] [client 20.220.8.221:1600] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aaGkJ4a650YPyxXVeRadfQAAAYo"]
[Fri Feb 27 22:03:19.944008 2026] [:error] [pid 54231:tid 54238] [client 20.220.8.221:1766] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aaGkJ-Tvb5AeyJCdY7AvaAAAAEQ"]
[Fri Feb 27 22:03:20.379285 2026] [:error] [pid 49306:tid 49314] [client 20.220.8.221:1777] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aaGkKPnSUDZue59Px9tJfAAAAUY"]
[Fri Feb 27 22:03:20.851851 2026] [:error] [pid 49306:tid 49310] [client 20.220.8.221:59641] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aaGkKPnSUDZue59Px9tJfwAAAUI"]
[Fri Feb 27 22:03:21.751913 2026] [:error] [pid 52073:tid 52082] [client 20.220.8.221:52315] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGkKYa650YPyxXVeRadggAAAYY"]
[Fri Feb 27 22:03:22.490336 2026] [:error] [pid 52073:tid 52079] [client 20.220.8.221:60917] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGkKoa650YPyxXVeRadiAAAAYM"]
[Fri Feb 27 22:03:22.916792 2026] [:error] [pid 52073:tid 52098] [client 20.220.8.221:55389] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGkKoa650YPyxXVeRadiwAAAZY"]
[Fri Feb 27 22:03:23.500492 2026] [:error] [pid 56075:tid 56087] [client 20.220.8.221:60871] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGkK8KBhrfI6KNv9RgdPQAAAAo"]
[Fri Feb 27 22:03:24.022586 2026] [:error] [pid 62998:tid 63026] [client 20.220.8.221:61622] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGkLFQeueXZDUmoLolvWQAAARg"]
[Fri Feb 27 22:03:24.573333 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:52853] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGkLIa650YPyxXVeRadkgAAAY0"]
[Fri Feb 27 22:03:25.073419 2026] [:error] [pid 52073:tid 52076] [client 20.220.8.221:54722] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGkLYa650YPyxXVeRadlQAAAYA"]
[Fri Feb 27 22:03:25.552297 2026] [:error] [pid 52073:tid 52083] [client 20.220.8.221:59616] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaGkLYa650YPyxXVeRadmwAAAYc"]
[Fri Feb 27 22:03:25.991984 2026] [:error] [pid 52073:tid 52097] [client 20.220.8.221:55367] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "aaGkLYa650YPyxXVeRadnwAAAZU"]
[Fri Feb 27 22:03:26.998799 2026] [:error] [pid 52073:tid 52089] [client 20.220.8.221:57761] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "aaGkLoa650YPyxXVeRadogAAAY0"]
[Fri Feb 27 22:03:27.446345 2026] [:error] [pid 54231:tid 54251] [client 20.220.8.221:54774] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "aaGkL-Tvb5AeyJCdY7AvcQAAAFE"]
[Fri Feb 27 22:03:27.889904 2026] [:error] [pid 54231:tid 54245] [client 20.220.8.221:52343] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "aaGkL-Tvb5AeyJCdY7AvdQAAAEs"]
[Fri Feb 27 22:03:28.483800 2026] [:error] [pid 62998:tid 63017] [client 20.220.8.221:52318] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaGkMFQeueXZDUmoLolvXQAAAQ8"]
[Fri Feb 27 22:03:28.922917 2026] [:error] [pid 54101:tid 54132] [client 20.220.8.221:1617] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaGkMFY5qgRktcYTGFtTVQAAAdg"]
[Fri Feb 27 22:03:29.337834 2026] [:error] [pid 62998:tid 63013] [client 20.220.8.221:59550] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaGkMVQeueXZDUmoLolvYQAAAQs"]
[Fri Feb 27 22:03:29.886533 2026] [:error] [pid 56075:tid 56082] [client 20.220.8.221:1745] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsearch/login.php"] [unique_id "aaGkMcKBhrfI6KNv9RgdWAAAAAU"]
[Fri Feb 27 22:03:30.313572 2026] [:error] [pid 54231:tid 54247] [client 20.220.8.221:60890] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aaGkMuTvb5AeyJCdY7AvfQAAAE0"]
[Fri Feb 27 22:03:30.724596 2026] [:error] [pid 62998:tid 63001] [client 20.220.8.221:52324] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aaGkMlQeueXZDUmoLolvYwAAAQA"]
[Fri Feb 27 22:03:31.204214 2026] [:error] [pid 62998:tid 63021] [client 20.220.8.221:1632] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aaGkM1QeueXZDUmoLolvZAAAARM"]
[Fri Feb 27 22:03:31.728990 2026] [:error] [pid 56075:tid 56090] [client 20.220.8.221:1728] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/theme.php"] [unique_id "aaGkM8KBhrfI6KNv9RgdZQAAAAw"]
[Fri Feb 27 22:03:32.485984 2026] [:error] [pid 49306:tid 49322] [client 20.220.8.221:1769] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sim.php"] [unique_id "aaGkNPnSUDZue59Px9tJjwAAAU4"]
[Fri Feb 27 22:03:33.132551 2026] [:error] [pid 56075:tid 56088] [client 20.220.8.221:52319] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sim.php"] [unique_id "aaGkNcKBhrfI6KNv9RgdcQAAAAs"]
[Fri Feb 27 22:03:33.933690 2026] [:error] [pid 52073:tid 52084] [client 20.220.8.221:52854] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sim.php"] [unique_id "aaGkNYa650YPyxXVeRadrwAAAYg"]
[Fri Feb 27 22:03:34.640070 2026] [:error] [pid 62998:tid 63012] [client 20.220.8.221:61630] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sim.php"] [unique_id "aaGkNlQeueXZDUmoLolvZQAAAQo"]
[Fri Feb 27 22:12:08.562611 2026] [:error] [pid 52073:tid 52082] [client 49.51.252.146:60262] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaGmOIa650YPyxXVeRaj1wAAAYY"]
[Fri Feb 27 22:18:29.670683 2026] [:error] [pid 54231:tid 54241] [client 20.151.128.128:14306] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGnteTvb5AeyJCdY7AzwAAAAEc"]
[Fri Feb 27 22:18:30.424000 2026] [:error] [pid 54101:tid 54129] [client 20.151.128.128:14298] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGntlY5qgRktcYTGFtVgAAAAdU"]
[Fri Feb 27 22:18:32.158127 2026] [:error] [pid 54231:tid 54258] [client 20.151.128.128:14322] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGnuOTvb5AeyJCdY7AzxAAAAFg"]
[Fri Feb 27 22:18:35.529022 2026] [:error] [pid 56075:tid 56083] [client 20.151.128.128:14277] [client 20.151.128.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaGnu8KBhrfI6KNv9Rgq6AAAAAY"]
[Fri Feb 27 22:22:42.106406 2026] [:error] [pid 56075:tid 56078] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/god.php
[Fri Feb 27 22:22:42.521312 2026] [:error] [pid 56075:tid 56101] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Fri Feb 27 22:22:42.730009 2026] [:error] [pid 56075:tid 56097] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Fri Feb 27 22:22:42.936871 2026] [:error] [pid 56075:tid 56083] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Feb 27 22:22:43.144379 2026] [:error] [pid 56075:tid 56092] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Fri Feb 27 22:22:43.352104 2026] [:error] [pid 56075:tid 56099] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/C1.php
[Fri Feb 27 22:22:43.559838 2026] [:error] [pid 56075:tid 56090] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/gi.php
[Fri Feb 27 22:22:43.767418 2026] [:error] [pid 56075:tid 56088] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Feb 27 22:22:43.974672 2026] [:error] [pid 56075:tid 56087] [client 20.220.144.87:8071] File does not exist: /usr/local/apache/htdocs/suspended-page/tkllu.php
[Fri Feb 27 22:22:44.179321 2026] [:error] [pid 56075:tid 56091] [client 20.220.144.87:8071] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "aaGotMKBhrfI6KNv9RgudQAAAA0"]
[Fri Feb 27 22:22:44.588684 2026] [:error] [pid 62998:tid 63005] [client 20.220.144.87:8172] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "aaGotFQeueXZDUmoLol1DQAAAQM"]
[Fri Feb 27 22:22:44.996632 2026] [:error] [pid 62998:tid 63008] [client 20.220.144.87:8173] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "aaGotFQeueXZDUmoLol1DwAAAQY"]
[Fri Feb 27 22:22:45.406152 2026] [:error] [pid 62998:tid 63020] [client 20.220.144.87:8131] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaGotVQeueXZDUmoLol1EAAAARI"]
[Fri Feb 27 22:22:45.814083 2026] [:error] [pid 62998:tid 63016] [client 20.220.144.87:8130] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaGotVQeueXZDUmoLol1FAAAAQ4"]
[Fri Feb 27 22:22:46.224569 2026] [:error] [pid 62998:tid 63013] [client 20.220.144.87:8143] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaGotlQeueXZDUmoLol1FgAAAQs"]
[Fri Feb 27 22:22:46.637718 2026] [:error] [pid 56075:tid 56095] [client 20.220.144.87:8101] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aaGotsKBhrfI6KNv9RgueAAAABE"]
[Fri Feb 27 22:22:47.046812 2026] [:error] [pid 49306:tid 49331] [client 20.220.144.87:8076] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aaGot_nSUDZue59Px9tRAgAAAVc"]
[Fri Feb 27 22:22:47.455776 2026] [:error] [pid 56075:tid 56097] [client 20.220.144.87:8184] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aaGot8KBhrfI6KNv9RguewAAABM"]
[Fri Feb 27 22:22:47.864968 2026] [:error] [pid 56075:tid 56077] [client 20.220.144.87:8077] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aaGot8KBhrfI6KNv9RgufQAAAAA"]
[Fri Feb 27 22:22:48.276113 2026] [:error] [pid 52073:tid 52091] [client 20.220.144.87:8183] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aaGouIa650YPyxXVeRaq8gAAAY8"]
[Fri Feb 27 22:22:48.684467 2026] [:error] [pid 52073:tid 52080] [client 20.220.144.87:8178] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aaGouIa650YPyxXVeRaq9gAAAYQ"]
[Fri Feb 27 22:22:49.093775 2026] [:error] [pid 52073:tid 52097] [client 20.220.144.87:8149] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aaGouYa650YPyxXVeRaq-QAAAZU"]
[Fri Feb 27 22:22:49.502794 2026] [:error] [pid 52073:tid 52086] [client 20.220.144.87:8187] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aaGouYa650YPyxXVeRaq_gAAAYo"]
[Fri Feb 27 22:22:49.909929 2026] [:error] [pid 56075:tid 56082] [client 20.220.144.87:8154] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGoucKBhrfI6KNv9RgugQAAAAU"]
[Fri Feb 27 22:22:50.320027 2026] [:error] [pid 56075:tid 56090] [client 20.220.144.87:8074] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGousKBhrfI6KNv9RgugwAAAAw"]
[Fri Feb 27 22:22:50.730819 2026] [:error] [pid 56075:tid 56084] [client 20.220.144.87:8153] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGousKBhrfI6KNv9RguhgAAAAc"]
[Fri Feb 27 22:22:51.150265 2026] [:error] [pid 56075:tid 56094] [client 20.220.144.87:8140] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aaGou8KBhrfI6KNv9RguiAAAABA"]
[Fri Feb 27 22:22:51.559554 2026] [:error] [pid 54102:tid 54150] [client 20.220.144.87:8138] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaGou3i74D4fiYUm_GeH1wAAAIY"]
[Fri Feb 27 22:22:51.967535 2026] [:error] [pid 56075:tid 56077] [client 20.220.144.87:8128] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaGou8KBhrfI6KNv9RgukQAAAAA"]
[Fri Feb 27 22:22:52.379356 2026] [:error] [pid 56075:tid 56102] [client 20.220.144.87:8189] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaGovMKBhrfI6KNv9RgulQAAABg"]
[Fri Feb 27 22:22:52.791578 2026] [:error] [pid 56075:tid 56084] [client 20.220.144.87:8129] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaGovMKBhrfI6KNv9RgumQAAAAc"]
[Fri Feb 27 22:22:53.202343 2026] [:error] [pid 56075:tid 56081] [client 20.220.144.87:8073] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanc.php"] [unique_id "aaGovcKBhrfI6KNv9RgunAAAAAQ"]
[Fri Feb 27 22:22:53.621443 2026] [:error] [pid 52073:tid 52082] [client 20.220.144.87:8082] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanc.php"] [unique_id "aaGovYa650YPyxXVeRarFgAAAYY"]
[Fri Feb 27 22:22:54.036580 2026] [:error] [pid 52073:tid 52083] [client 20.220.144.87:8068] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanc.php"] [unique_id "aaGovoa650YPyxXVeRarGgAAAYc"]
[Fri Feb 27 22:22:54.445497 2026] [:error] [pid 52073:tid 52099] [client 20.220.144.87:8003] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/advanc.php"] [unique_id "aaGovoa650YPyxXVeRarHgAAAZc"]
[Fri Feb 27 22:22:54.857030 2026] [:error] [pid 54103:tid 54179] [client 20.220.144.87:8144] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftyude.php"] [unique_id "aaGovuvG4MPCmE0B2sDA1gAAAMg"]
[Fri Feb 27 22:22:55.279966 2026] [:error] [pid 54101:tid 54113] [client 20.220.144.87:8081] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aaGov1Y5qgRktcYTGFtVzwAAAcU"]
[Fri Feb 27 22:22:55.691123 2026] [:error] [pid 56075:tid 56102] [client 20.220.144.87:8162] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "aaGov8KBhrfI6KNv9RguoQAAABg"]
[Fri Feb 27 22:22:56.101034 2026] [:error] [pid 54102:tid 54163] [client 20.220.144.87:8164] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "aaGowHi74D4fiYUm_GeH2wAAAJM"]
[Fri Feb 27 22:22:56.510040 2026] [:error] [pid 56075:tid 56080] [client 20.220.144.87:8148] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "aaGowMKBhrfI6KNv9RgupAAAAAM"]
[Fri Feb 27 22:22:56.920472 2026] [:error] [pid 54103:tid 54193] [client 20.220.144.87:8166] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "aaGowOvG4MPCmE0B2sDA2gAAANY"]
[Fri Feb 27 22:22:57.337233 2026] [:error] [pid 56075:tid 56098] [client 20.220.144.87:8103] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaGowcKBhrfI6KNv9RgupwAAABQ"]
[Fri Feb 27 22:22:57.744695 2026] [:error] [pid 52073:tid 52100] [client 20.220.144.87:8147] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaGowYa650YPyxXVeRarNAAAAZg"]
[Fri Feb 27 22:22:58.158244 2026] [:error] [pid 62998:tid 63004] [client 20.220.144.87:8105] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaGowlQeueXZDUmoLol1GwAAAQI"]
[Fri Feb 27 22:22:58.570050 2026] [:error] [pid 52073:tid 52097] [client 20.220.144.87:8028] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1a.php"] [unique_id "aaGowoa650YPyxXVeRarPQAAAZU"]
[Fri Feb 27 22:22:58.983538 2026] [:error] [pid 56075:tid 56082] [client 20.220.144.87:8182] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGowsKBhrfI6KNv9RgutAAAAAU"]
[Fri Feb 27 22:22:59.391882 2026] [:error] [pid 56075:tid 56101] [client 20.220.144.87:8188] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGow8KBhrfI6KNv9RgutgAAABc"]
[Fri Feb 27 22:22:59.802828 2026] [:error] [pid 56075:tid 56094] [client 20.220.144.87:8176] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGow8KBhrfI6KNv9RguuAAAABA"]
[Fri Feb 27 22:23:00.228790 2026] [:error] [pid 56075:tid 56085] [client 20.220.144.87:8141] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aaGoxMKBhrfI6KNv9RguuwAAAAg"]
[Fri Feb 27 22:23:00.642657 2026] [:error] [pid 52073:tid 52086] [client 20.220.144.87:8079] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/41.php"] [unique_id "aaGoxIa650YPyxXVeRarTAAAAYo"]
[Fri Feb 27 22:23:01.062544 2026] [:error] [pid 52073:tid 52076] [client 20.220.144.87:8100] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/41.php"] [unique_id "aaGoxYa650YPyxXVeRarUAAAAYA"]
[Fri Feb 27 22:23:01.473204 2026] [:error] [pid 62998:tid 63007] [client 20.220.144.87:8080] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/41.php"] [unique_id "aaGoxVQeueXZDUmoLol1HQAAAQU"]
[Fri Feb 27 22:23:01.884142 2026] [:error] [pid 54101:tid 54109] [client 20.220.144.87:8170] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aaGoxVY5qgRktcYTGFtV3gAAAcE"]
[Fri Feb 27 22:23:02.297288 2026] [:error] [pid 49306:tid 49310] [client 20.220.144.87:8155] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aaGoxvnSUDZue59Px9tRBgAAAUI"]
[Fri Feb 27 22:23:02.712115 2026] [:error] [pid 56075:tid 56081] [client 20.220.144.87:8034] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aaGoxsKBhrfI6KNv9RguwQAAAAQ"]
[Fri Feb 27 22:23:03.123779 2026] [:error] [pid 56075:tid 56098] [client 20.220.144.87:8169] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "aaGox8KBhrfI6KNv9RguwwAAABQ"]
[Fri Feb 27 22:23:03.538127 2026] [:error] [pid 62998:tid 63021] [client 20.220.144.87:8110] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3llstore.php"] [unique_id "aaGox1QeueXZDUmoLol1IQAAARM"]
[Fri Feb 27 22:23:03.994988 2026] [:error] [pid 54103:tid 54194] [client 20.220.144.87:8066] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3llstore.php"] [unique_id "aaGox-vG4MPCmE0B2sDA3QAAANc"]
[Fri Feb 27 22:23:04.415528 2026] [:error] [pid 56075:tid 56094] [client 20.220.144.87:8168] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3llstore.php"] [unique_id "aaGoyMKBhrfI6KNv9RguyAAAABA"]
[Fri Feb 27 22:23:04.832292 2026] [:error] [pid 54103:tid 54173] [client 20.220.144.87:8064] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w3llstore.php"] [unique_id "aaGoyOvG4MPCmE0B2sDA3gAAAMI"]
[Fri Feb 27 22:23:05.247705 2026] [:error] [pid 62998:tid 63015] [client 20.220.144.87:8142] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGoyVQeueXZDUmoLol1IgAAAQ0"]
[Fri Feb 27 22:23:05.665020 2026] [:error] [pid 49306:tid 49317] [client 20.220.144.87:8065] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGoyfnSUDZue59Px9tRCQAAAUk"]
[Fri Feb 27 22:23:06.079322 2026] [:error] [pid 62998:tid 63026] [client 20.220.144.87:8086] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGoylQeueXZDUmoLol1JAAAARg"]
[Fri Feb 27 22:23:06.527987 2026] [:error] [pid 62998:tid 63022] [client 20.220.144.87:8097] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaGoylQeueXZDUmoLol1JQAAARQ"]
[Fri Feb 27 22:23:06.943124 2026] [:error] [pid 62998:tid 63006] [client 20.220.144.87:8111] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aaGoylQeueXZDUmoLol1JgAAAQQ"]
[Fri Feb 27 22:23:07.356386 2026] [:error] [pid 62998:tid 63013] [client 20.220.144.87:8175] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aaGoy1QeueXZDUmoLol1KAAAAQs"]
[Fri Feb 27 22:23:07.777707 2026] [:error] [pid 56075:tid 56092] [client 20.220.144.87:8167] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aaGoy8KBhrfI6KNv9Rgu3gAAAA4"]
[Fri Feb 27 22:23:08.200826 2026] [:error] [pid 54103:tid 54189] [client 20.220.144.87:8094] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "aaGozOvG4MPCmE0B2sDA3wAAANI"]
[Fri Feb 27 22:23:08.641008 2026] [:error] [pid 52073:tid 52092] [client 20.220.144.87:8078] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aaGozIa650YPyxXVeRarewAAAZA"]
[Fri Feb 27 22:23:09.052075 2026] [:error] [pid 56075:tid 56081] [client 20.220.144.87:8163] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aaGozcKBhrfI6KNv9Rgu5AAAAAQ"]
[Fri Feb 27 22:23:09.465065 2026] [:error] [pid 52073:tid 52080] [client 20.220.144.87:8185] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aaGozYa650YPyxXVeRargwAAAYQ"]
[Fri Feb 27 22:23:09.894906 2026] [:error] [pid 52073:tid 52090] [client 20.220.144.87:8137] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "aaGozYa650YPyxXVeRarhwAAAY4"]
[Fri Feb 27 22:23:10.317813 2026] [:error] [pid 56075:tid 56079] [client 20.220.144.87:8072] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aaGozsKBhrfI6KNv9Rgu8gAAAAI"]
[Fri Feb 27 22:23:10.751524 2026] [:error] [pid 56075:tid 56088] [client 20.220.144.87:8174] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aaGozsKBhrfI6KNv9Rgu9gAAAAs"]
[Fri Feb 27 22:23:11.172134 2026] [:error] [pid 56075:tid 56087] [client 20.220.144.87:8179] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aaGoz8KBhrfI6KNv9Rgu-QAAAAo"]
[Fri Feb 27 22:23:11.582572 2026] [:error] [pid 62998:tid 63018] [client 20.220.144.87:8093] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aaGoz1QeueXZDUmoLol1LgAAARA"]
[Fri Feb 27 22:23:11.997684 2026] [:error] [pid 49306:tid 49318] [client 20.220.144.87:8152] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aaGoz_nSUDZue59Px9tRCwAAAUo"]
[Fri Feb 27 22:23:12.421606 2026] [:error] [pid 54103:tid 54174] [client 20.220.144.87:8134] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aaGo0OvG4MPCmE0B2sDA4wAAAMM"]
[Fri Feb 27 22:23:12.847258 2026] [:error] [pid 49306:tid 49312] [client 20.220.144.87:8069] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aaGo0PnSUDZue59Px9tRDgAAAUQ"]
[Fri Feb 27 22:23:13.266518 2026] [:error] [pid 52073:tid 52078] [client 20.220.144.87:8117] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rdf.php"] [unique_id "aaGo0Ya650YPyxXVeRarngAAAYI"]
[Fri Feb 27 22:23:13.687274 2026] [:error] [pid 56075:tid 56078] [client 20.220.144.87:8098] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "aaGo0cKBhrfI6KNv9RgvDwAAAAE"]
[Fri Feb 27 22:23:14.095024 2026] [:error] [pid 56075:tid 56092] [client 20.220.144.87:8150] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "aaGo0sKBhrfI6KNv9RgvFAAAAA4"]
[Fri Feb 27 22:23:14.505036 2026] [:error] [pid 49306:tid 49309] [client 20.220.144.87:8106] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "aaGo0vnSUDZue59Px9tREAAAAUE"]
[Fri Feb 27 22:23:14.919597 2026] [:error] [pid 56075:tid 56087] [client 20.220.144.87:8048] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opotv.php"] [unique_id "aaGo0sKBhrfI6KNv9RgvHAAAAAo"]
[Fri Feb 27 22:23:15.331309 2026] [:error] [pid 56075:tid 56080] [client 20.220.144.87:8148] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opotv.php"] [unique_id "aaGo08KBhrfI6KNv9RgvIAAAAAM"]
[Fri Feb 27 22:23:15.743457 2026] [:error] [pid 49306:tid 49316] [client 20.220.144.87:8031] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opotv.php"] [unique_id "aaGo0_nSUDZue59Px9tREgAAAUg"]
[Fri Feb 27 22:23:16.154162 2026] [:error] [pid 52073:tid 52100] [client 20.220.144.87:8088] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opotv.php"] [unique_id "aaGo1Ia650YPyxXVeRarrgAAAZg"]
[Fri Feb 27 22:23:16.562417 2026] [:error] [pid 52073:tid 52091] [client 20.220.144.87:8180] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu9.php"] [unique_id "aaGo1Ia650YPyxXVeRarswAAAY8"]
[Fri Feb 27 22:23:16.970650 2026] [:error] [pid 52073:tid 52096] [client 20.220.144.87:8044] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu9.php"] [unique_id "aaGo1Ia650YPyxXVeRaruAAAAZQ"]
[Fri Feb 27 22:23:17.379822 2026] [:error] [pid 54102:tid 54151] [client 20.220.144.87:8132] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu9.php"] [unique_id "aaGo1Xi74D4fiYUm_GeH5QAAAIc"]
[Fri Feb 27 22:23:17.790672 2026] [:error] [pid 52073:tid 52080] [client 20.220.144.87:8020] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu9.php"] [unique_id "aaGo1Ya650YPyxXVeRarwAAAAYQ"]
[Fri Feb 27 22:23:18.200432 2026] [:error] [pid 49306:tid 49321] [client 20.220.144.87:8030] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qoepq.php"] [unique_id "aaGo1vnSUDZue59Px9tRFgAAAU0"]
[Fri Feb 27 22:23:18.611662 2026] [:error] [pid 62998:tid 63015] [client 20.220.144.87:8159] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qoepq.php"] [unique_id "aaGo1lQeueXZDUmoLol1MwAAAQ0"]
[Fri Feb 27 22:23:19.027053 2026] [:error] [pid 62998:tid 63023] [client 20.220.144.87:8177] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qoepq.php"] [unique_id "aaGo11QeueXZDUmoLol1NAAAARU"]
[Fri Feb 27 22:23:19.439618 2026] [:error] [pid 52073:tid 52096] [client 20.220.144.87:8015] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qoepq.php"] [unique_id "aaGo14a650YPyxXVeRarzAAAAZQ"]
[Fri Feb 27 22:23:19.855920 2026] [:error] [pid 56075:tid 56092] [client 20.220.144.87:8104] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fodds.php"] [unique_id "aaGo18KBhrfI6KNv9RgvPAAAAA4"]
[Fri Feb 27 22:23:20.266176 2026] [:error] [pid 56075:tid 56084] [client 20.220.144.87:8087] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fodds.php"] [unique_id "aaGo2MKBhrfI6KNv9RgvPwAAAAc"]
[Fri Feb 27 22:23:20.676109 2026] [:error] [pid 56075:tid 56099] [client 20.220.144.87:8181] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fodds.php"] [unique_id "aaGo2MKBhrfI6KNv9RgvRAAAABU"]
[Fri Feb 27 22:23:21.085659 2026] [:error] [pid 52073:tid 52081] [client 20.220.144.87:8108] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fodds.php"] [unique_id "aaGo2Ya650YPyxXVeRar2gAAAYU"]
[Fri Feb 27 22:23:21.499404 2026] [:error] [pid 49306:tid 49332] [client 20.220.144.87:8157] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaigu.php"] [unique_id "aaGo2fnSUDZue59Px9tRGAAAAVg"]
[Fri Feb 27 22:23:21.911873 2026] [:error] [pid 54101:tid 54111] [client 20.220.144.87:8033] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaigu.php"] [unique_id "aaGo2VY5qgRktcYTGFtV4QAAAcM"]
[Fri Feb 27 22:23:22.322982 2026] [:error] [pid 54101:tid 54132] [client 20.220.144.87:8045] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaigu.php"] [unique_id "aaGo2lY5qgRktcYTGFtV4gAAAdg"]
[Fri Feb 27 22:23:22.739953 2026] [:error] [pid 49306:tid 49310] [client 20.220.144.87:8067] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaigu.php"] [unique_id "aaGo2vnSUDZue59Px9tRHAAAAUI"]
[Fri Feb 27 22:23:23.156097 2026] [:error] [pid 54102:tid 54161] [client 20.220.144.87:8000] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad2.php"] [unique_id "aaGo23i74D4fiYUm_GeH6AAAAJE"]
[Fri Feb 27 22:23:23.571066 2026] [:error] [pid 49306:tid 49318] [client 20.220.144.87:8186] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad2.php"] [unique_id "aaGo2_nSUDZue59Px9tRIQAAAUo"]
[Fri Feb 27 22:23:23.980341 2026] [:error] [pid 52073:tid 52087] [client 20.220.144.87:8018] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad2.php"] [unique_id "aaGo24a650YPyxXVeRar4wAAAYs"]
[Fri Feb 27 22:23:24.397549 2026] [:error] [pid 56075:tid 56078] [client 20.220.144.87:8075] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad2.php"] [unique_id "aaGo3MKBhrfI6KNv9RgvYgAAAAE"]
[Fri Feb 27 22:23:24.838713 2026] [:error] [pid 56075:tid 56098] [client 20.220.144.87:8156] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aaGo3MKBhrfI6KNv9RgvZwAAABQ"]
[Fri Feb 27 22:23:25.258087 2026] [:error] [pid 56075:tid 56093] [client 20.220.144.87:8005] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aaGo3cKBhrfI6KNv9RgvbQAAAA8"]
[Fri Feb 27 22:23:25.670677 2026] [:error] [pid 56075:tid 56086] [client 20.220.144.87:8091] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aaGo3cKBhrfI6KNv9RgvcQAAAAk"]
[Fri Feb 27 22:23:26.080421 2026] [:error] [pid 54101:tid 54110] [client 20.220.144.87:8012] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aaGo3lY5qgRktcYTGFtV5AAAAcI"]
[Fri Feb 27 22:23:26.491937 2026] [:error] [pid 52073:tid 52093] [client 20.220.144.87:8027] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaGo3oa650YPyxXVeRar5wAAAZE"]
[Fri Feb 27 22:23:26.907292 2026] [:error] [pid 49306:tid 49322] [client 20.220.144.87:8114] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaGo3vnSUDZue59Px9tRJwAAAU4"]
[Fri Feb 27 22:23:27.317742 2026] [:error] [pid 56075:tid 56087] [client 20.220.144.87:8008] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaGo38KBhrfI6KNv9RgvhAAAAAo"]
[Fri Feb 27 22:23:27.726506 2026] [:error] [pid 56075:tid 56080] [client 20.220.144.87:8116] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaGo38KBhrfI6KNv9RgviAAAAAM"]
[Fri Feb 27 22:23:28.143301 2026] [:error] [pid 49306:tid 49320] [client 20.220.144.87:8102] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asix.php"] [unique_id "aaGo4PnSUDZue59Px9tRLwAAAUw"]
[Fri Feb 27 22:23:28.556526 2026] [:error] [pid 54231:tid 54236] [client 20.220.144.87:8089] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asix.php"] [unique_id "aaGo4OTvb5AeyJCdY7A0ugAAAEI"]
[Fri Feb 27 22:23:28.966019 2026] [:error] [pid 54103:tid 54176] [client 20.220.144.87:8160] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asix.php"] [unique_id "aaGo4OvG4MPCmE0B2sDA8AAAAMU"]
[Fri Feb 27 22:23:29.378202 2026] [:error] [pid 54103:tid 54178] [client 20.220.144.87:8006] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asix.php"] [unique_id "aaGo4evG4MPCmE0B2sDA8gAAAMc"]
[Fri Feb 27 22:23:29.795437 2026] [:error] [pid 56075:tid 56088] [client 20.220.144.87:8053] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gems.php"] [unique_id "aaGo4cKBhrfI6KNv9RgvmAAAAAs"]
[Fri Feb 27 22:23:30.205403 2026] [:error] [pid 49306:tid 49309] [client 20.220.144.87:8060] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gems.php"] [unique_id "aaGo4vnSUDZue59Px9tROQAAAUE"]
[Fri Feb 27 22:23:30.614826 2026] [:error] [pid 52073:tid 52083] [client 20.220.144.87:8043] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gems.php"] [unique_id "aaGo4oa650YPyxXVeRar6gAAAYc"]
[Fri Feb 27 22:23:31.028937 2026] [:error] [pid 49306:tid 49321] [client 20.220.144.87:8001] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gems.php"] [unique_id "aaGo4_nSUDZue59Px9tRPgAAAU0"]
[Fri Feb 27 22:23:31.439638 2026] [:error] [pid 62998:tid 63025] [client 20.220.144.87:7954] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxd.php"] [unique_id "aaGo41QeueXZDUmoLol1QwAAARc"]
[Fri Feb 27 22:23:31.856518 2026] [:error] [pid 49306:tid 49327] [client 20.220.144.87:8191] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxd.php"] [unique_id "aaGo4_nSUDZue59Px9tRRwAAAVM"]
[Fri Feb 27 22:23:32.268905 2026] [:error] [pid 56075:tid 56092] [client 20.220.144.87:8002] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxd.php"] [unique_id "aaGo5MKBhrfI6KNv9RgvoAAAAA4"]
[Fri Feb 27 22:23:32.681633 2026] [:error] [pid 52073:tid 52082] [client 20.220.144.87:8112] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxd.php"] [unique_id "aaGo5Ia650YPyxXVeRar7AAAAYY"]
[Fri Feb 27 22:23:33.102444 2026] [:error] [pid 56075:tid 56091] [client 20.220.144.87:8085] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2sx.php"] [unique_id "aaGo5cKBhrfI6KNv9RgvogAAAA0"]
[Fri Feb 27 22:23:33.519311 2026] [:error] [pid 62998:tid 63026] [client 20.220.144.87:8124] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2sx.php"] [unique_id "aaGo5VQeueXZDUmoLol1SgAAARg"]
[Fri Feb 27 22:23:33.933079 2026] [:error] [pid 62998:tid 63006] [client 20.220.144.87:7945] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2sx.php"] [unique_id "aaGo5VQeueXZDUmoLol1SwAAAQQ"]
[Fri Feb 27 22:23:34.344110 2026] [:error] [pid 54231:tid 54246] [client 20.220.144.87:8113] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2sx.php"] [unique_id "aaGo5uTvb5AeyJCdY7A0xAAAAEw"]
[Fri Feb 27 22:23:34.784452 2026] [:error] [pid 54103:tid 54193] [client 20.220.144.87:8171] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaq.php"] [unique_id "aaGo5uvG4MPCmE0B2sDBFwAAANY"]
[Fri Feb 27 22:23:35.202851 2026] [:error] [pid 52073:tid 52089] [client 20.220.144.87:8158] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaq.php"] [unique_id "aaGo54a650YPyxXVeRasAgAAAY0"]
[Fri Feb 27 22:23:35.616026 2026] [:error] [pid 56075:tid 56085] [client 20.220.144.87:8084] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaq.php"] [unique_id "aaGo58KBhrfI6KNv9RgvwgAAAAg"]
[Fri Feb 27 22:23:36.026437 2026] [:error] [pid 56075:tid 56079] [client 20.220.144.87:7872] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaq.php"] [unique_id "aaGo6MKBhrfI6KNv9RgvxwAAAAI"]
[Fri Feb 27 22:23:36.441067 2026] [:error] [pid 56075:tid 56082] [client 20.220.144.87:8070] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaGo6MKBhrfI6KNv9RgvywAAAAU"]
[Fri Feb 27 22:23:36.851227 2026] [:error] [pid 56075:tid 56099] [client 20.220.144.87:8099] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaGo6MKBhrfI6KNv9RgvzwAAABU"]
[Fri Feb 27 22:23:37.263450 2026] [:error] [pid 54102:tid 54145] [client 20.220.144.87:8061] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaGo6Xi74D4fiYUm_GeH-wAAAIE"]
[Fri Feb 27 22:23:37.676902 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:7968] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaGo6Ya650YPyxXVeRasCAAAAYE"]
[Fri Feb 27 22:23:38.086117 2026] [:error] [pid 62998:tid 63014] [client 20.220.144.87:8010] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaGo6lQeueXZDUmoLol1TQAAAQw"]
[Fri Feb 27 22:23:38.497044 2026] [:error] [pid 52073:tid 52079] [client 20.220.144.87:8190] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaGo6oa650YPyxXVeRasDwAAAYM"]
[Fri Feb 27 22:23:38.907146 2026] [:error] [pid 54231:tid 54252] [client 20.220.144.87:8136] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaGo6uTvb5AeyJCdY7A01QAAAFI"]
[Fri Feb 27 22:23:39.325186 2026] [:error] [pid 56075:tid 56077] [client 20.220.144.87:8007] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaGo68KBhrfI6KNv9Rgv2QAAAAA"]
[Fri Feb 27 22:23:39.734062 2026] [:error] [pid 54102:tid 54161] [client 20.220.144.87:8125] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aaGo63i74D4fiYUm_GeH_QAAAJE"]
[Fri Feb 27 22:23:40.143178 2026] [:error] [pid 49306:tid 49308] [client 20.220.144.87:8092] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aaGo7PnSUDZue59Px9tRWAAAAUA"]
[Fri Feb 27 22:23:40.553349 2026] [:error] [pid 49306:tid 49328] [client 20.220.144.87:8014] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aaGo7PnSUDZue59Px9tRWwAAAVQ"]
[Fri Feb 27 22:23:40.965724 2026] [:error] [pid 52073:tid 52094] [client 20.220.144.87:8039] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aaGo7Ia650YPyxXVeRasHQAAAZI"]
[Fri Feb 27 22:23:41.374774 2026] [:error] [pid 52073:tid 52080] [client 20.220.144.87:8109] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a6s2.php"] [unique_id "aaGo7Ya650YPyxXVeRasIQAAAYQ"]
[Fri Feb 27 22:23:41.784523 2026] [:error] [pid 56075:tid 56084] [client 20.220.144.87:7957] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a6s2.php"] [unique_id "aaGo7cKBhrfI6KNv9Rgv3wAAAAc"]
[Fri Feb 27 22:23:42.193498 2026] [:error] [pid 52073:tid 52079] [client 20.220.144.87:8033] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a6s2.php"] [unique_id "aaGo7oa650YPyxXVeRasIwAAAYM"]
[Fri Feb 27 22:23:42.604607 2026] [:error] [pid 56075:tid 56083] [client 20.220.144.87:7952] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a6s2.php"] [unique_id "aaGo7sKBhrfI6KNv9Rgv5wAAAAY"]
[Fri Feb 27 22:23:43.017108 2026] [:error] [pid 52073:tid 52081] [client 20.220.144.87:8135] File does not exist: /usr/local/apache/htdocs/suspended-page/aki.php
[Fri Feb 27 22:23:43.224953 2026] [:error] [pid 52073:tid 52092] [client 20.220.144.87:8135] File does not exist: /usr/local/apache/htdocs/suspended-page/R57.php
[Fri Feb 27 22:23:43.432326 2026] [:error] [pid 52073:tid 52087] [client 20.220.144.87:8135] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Fri Feb 27 22:23:43.640954 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:8135] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri Feb 27 22:23:43.847970 2026] [:error] [pid 52073:tid 52088] [client 20.220.144.87:8135] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Fri Feb 27 22:23:44.915185 2026] [:error] [pid 52073:tid 52078] [client 20.220.144.87:8135] File does not exist: /usr/local/apache/htdocs/suspended-page/daff42833e.php
[Fri Feb 27 22:23:45.370839 2026] [:error] [pid 52073:tid 52091] [client 20.220.144.87:8135] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaGo8Ya650YPyxXVeRasQQAAAY8"]
[Fri Feb 27 22:23:45.780419 2026] [:error] [pid 54231:tid 54249] [client 20.220.144.87:8051] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaGo8eTvb5AeyJCdY7A09AAAAE8"]
[Fri Feb 27 22:23:46.191639 2026] [:error] [pid 56075:tid 56084] [client 20.220.144.87:8127] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaGo8sKBhrfI6KNv9RgwCAAAAAc"]
[Fri Feb 27 22:23:46.601322 2026] [:error] [pid 52073:tid 52088] [client 20.220.144.87:8038] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/V2_xml.php"] [unique_id "aaGo8oa650YPyxXVeRasRgAAAYw"]
[Fri Feb 27 22:23:47.011872 2026] [:error] [pid 52073:tid 52099] [client 20.220.144.87:7962] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaGo84a650YPyxXVeRasSAAAAZc"]
[Fri Feb 27 22:23:47.422341 2026] [:error] [pid 56075:tid 56080] [client 20.220.144.87:8146] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaGo88KBhrfI6KNv9RgwFAAAAAM"]
[Fri Feb 27 22:23:47.832614 2026] [:error] [pid 56075:tid 56087] [client 20.220.144.87:8151] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaGo88KBhrfI6KNv9RgwGQAAAAo"]
[Fri Feb 27 22:23:48.243304 2026] [:error] [pid 56075:tid 56095] [client 20.220.144.87:8017] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/bnm.php"] [unique_id "aaGo9MKBhrfI6KNv9RgwHAAAABE"]
[Fri Feb 27 22:23:48.653559 2026] [:error] [pid 52073:tid 52086] [client 20.220.144.87:7953] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaGo9Ia650YPyxXVeRasUgAAAYo"]
[Fri Feb 27 22:23:49.062257 2026] [:error] [pid 56075:tid 56086] [client 20.220.144.87:8011] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaGo9cKBhrfI6KNv9RgwJAAAAAk"]
[Fri Feb 27 22:23:49.471354 2026] [:error] [pid 52073:tid 52081] [client 20.220.144.87:8096] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaGo9Ya650YPyxXVeRasVAAAAYU"]
[Fri Feb 27 22:23:49.881147 2026] [:error] [pid 56075:tid 56087] [client 20.220.144.87:7956] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ccs.php"] [unique_id "aaGo9cKBhrfI6KNv9RgwKgAAAAo"]
[Fri Feb 27 22:23:50.290344 2026] [:error] [pid 56075:tid 56102] [client 20.220.144.87:7971] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaGo9sKBhrfI6KNv9RgwMQAAABg"]
[Fri Feb 27 22:23:50.700377 2026] [:error] [pid 52073:tid 52093] [client 20.220.144.87:7947] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaGo9oa650YPyxXVeRasWAAAAZE"]
[Fri Feb 27 22:23:51.114348 2026] [:error] [pid 54231:tid 54240] [client 20.220.144.87:8042] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaGo9-Tvb5AeyJCdY7A1DQAAAEY"]
[Fri Feb 27 22:23:51.530955 2026] [:error] [pid 56075:tid 56098] [client 20.220.144.87:8037] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaGo98KBhrfI6KNv9RgwNwAAABQ"]
[Fri Feb 27 22:23:51.940200 2026] [:error] [pid 54231:tid 54242] [client 20.220.144.87:7950] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaGo9-Tvb5AeyJCdY7A1EgAAAEg"]
[Fri Feb 27 22:23:52.349183 2026] [:error] [pid 56075:tid 56091] [client 20.220.144.87:8021] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaGo-MKBhrfI6KNv9RgwOwAAAA0"]
[Fri Feb 27 22:23:52.759470 2026] [:error] [pid 62998:tid 63023] [client 20.220.144.87:8050] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaGo-FQeueXZDUmoLol1WwAAARU"]
[Fri Feb 27 22:23:53.171014 2026] [:error] [pid 56075:tid 56093] [client 20.220.144.87:7998] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaGo-cKBhrfI6KNv9RgwQQAAAA8"]
[Fri Feb 27 22:23:53.579425 2026] [:error] [pid 52073:tid 52084] [client 20.220.144.87:8095] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaGo-Ya650YPyxXVeRasYgAAAYg"]
[Fri Feb 27 22:23:53.988783 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:7961] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/add.php"] [unique_id "aaGo-Ya650YPyxXVeRasaAAAAYE"]
[Fri Feb 27 22:23:54.398744 2026] [:error] [pid 52073:tid 52097] [client 20.220.144.87:8060] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/add.php"] [unique_id "aaGo-oa650YPyxXVeRasbwAAAZU"]
[Fri Feb 27 22:23:54.809379 2026] [:error] [pid 56075:tid 56078] [client 20.220.144.87:7943] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/add.php"] [unique_id "aaGo-sKBhrfI6KNv9RgwRQAAAAE"]
[Fri Feb 27 22:23:55.219993 2026] [:error] [pid 62998:tid 63009] [client 20.220.144.87:8165] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaGo-1QeueXZDUmoLol1XgAAAQc"]
[Fri Feb 27 22:23:55.630215 2026] [:error] [pid 62998:tid 63016] [client 20.220.144.87:7970] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaGo-1QeueXZDUmoLol1YAAAAQ4"]
[Fri Feb 27 22:23:56.037599 2026] [:error] [pid 49306:tid 49332] [client 20.220.144.87:7951] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaGo_PnSUDZue59Px9tRawAAAVg"]
[Fri Feb 27 22:23:56.315753 2026] [:error] [pid 62998:tid 63012] [client 4.204.192.31:18411] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Fri Feb 27 22:23:56.447646 2026] [:error] [pid 62998:tid 63024] [client 20.220.144.87:8055] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaGo_FQeueXZDUmoLol1ZAAAARY"]
[Fri Feb 27 22:23:56.858275 2026] [:error] [pid 56075:tid 56097] [client 20.220.144.87:7969] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aaGo_MKBhrfI6KNv9RgwSQAAABM"]
[Fri Feb 27 22:23:57.269054 2026] [:error] [pid 56075:tid 56101] [client 20.220.144.87:8023] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aaGo_cKBhrfI6KNv9RgwSwAAABc"]
[Fri Feb 27 22:23:57.683252 2026] [:error] [pid 52073:tid 52083] [client 20.220.144.87:7906] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aaGo_Ya650YPyxXVeRascQAAAYc"]
[Fri Feb 27 22:23:58.092641 2026] [:error] [pid 49306:tid 49312] [client 20.220.144.87:8009] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup.php"] [unique_id "aaGo_vnSUDZue59Px9tRbwAAAUQ"]
[Fri Feb 27 22:23:58.502876 2026] [:error] [pid 56075:tid 56090] [client 20.220.144.87:8122] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGo_sKBhrfI6KNv9RgwUQAAAAw"]
[Fri Feb 27 22:23:58.911689 2026] [:error] [pid 49306:tid 49322] [client 20.220.144.87:8054] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGo_vnSUDZue59Px9tRdgAAAU4"]
[Fri Feb 27 22:23:59.323209 2026] [:error] [pid 54101:tid 54120] [client 20.220.144.87:8022] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGo_1Y5qgRktcYTGFtV_AAAAcw"]
[Fri Feb 27 22:23:59.741812 2026] [:error] [pid 52073:tid 52094] [client 20.220.144.87:7981] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaGo_4a650YPyxXVeRasdgAAAZI"]
[Fri Feb 27 22:24:00.152728 2026] [:error] [pid 49306:tid 49324] [client 20.220.144.87:8049] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaGpAPnSUDZue59Px9tRewAAAVA"]
[Fri Feb 27 22:24:00.563155 2026] [:error] [pid 52073:tid 52088] [client 20.220.144.87:7942] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaGpAIa650YPyxXVeRasewAAAYw"]
[Fri Feb 27 22:24:00.989333 2026] [:error] [pid 56075:tid 56080] [client 20.220.144.87:8118] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaGpAMKBhrfI6KNv9RgwWwAAAAM"]
[Fri Feb 27 22:24:01.426843 2026] [:error] [pid 54102:tid 54166] [client 20.220.144.87:7977] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaGpAXi74D4fiYUm_GeIBQAAAJY"]
[Fri Feb 27 22:24:01.837680 2026] [:error] [pid 56075:tid 56094] [client 20.220.144.87:7946] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGpAcKBhrfI6KNv9RgwYQAAABA"]
[Fri Feb 27 22:24:02.251406 2026] [:error] [pid 54101:tid 54131] [client 20.220.144.87:8035] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGpAlY5qgRktcYTGFtWAAAAAdc"]
[Fri Feb 27 22:24:02.666696 2026] [:error] [pid 56075:tid 56078] [client 20.220.144.87:8026] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGpAsKBhrfI6KNv9RgwagAAAAE"]
[Fri Feb 27 22:24:03.077929 2026] [:error] [pid 56075:tid 56083] [client 20.220.144.87:8052] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaGpA8KBhrfI6KNv9RgwbwAAAAY"]
[Fri Feb 27 22:24:03.488620 2026] [:error] [pid 56075:tid 56101] [client 20.220.144.87:8025] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGpA8KBhrfI6KNv9RgwcwAAABc"]
[Fri Feb 27 22:24:03.896821 2026] [:error] [pid 54102:tid 54165] [client 20.220.144.87:8036] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGpA3i74D4fiYUm_GeICwAAAJU"]
[Fri Feb 27 22:24:04.305847 2026] [:error] [pid 54231:tid 54250] [client 20.220.144.87:8145] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGpBOTvb5AeyJCdY7A1PQAAAFA"]
[Fri Feb 27 22:24:04.722195 2026] [:error] [pid 54102:tid 54158] [client 20.220.144.87:7944] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaGpBHi74D4fiYUm_GeIDQAAAI4"]
[Fri Feb 27 22:24:05.134264 2026] [:error] [pid 54102:tid 54150] [client 20.220.144.87:7885] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGpBXi74D4fiYUm_GeIEgAAAIY"]
[Fri Feb 27 22:24:05.549362 2026] [:error] [pid 54231:tid 54245] [client 20.220.144.87:8062] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGpBeTvb5AeyJCdY7A1QgAAAEs"]
[Fri Feb 27 22:24:05.968185 2026] [:error] [pid 54231:tid 54253] [client 20.220.144.87:7882] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGpBeTvb5AeyJCdY7A1SAAAAFM"]
[Fri Feb 27 22:24:06.401999 2026] [:error] [pid 56075:tid 56080] [client 20.220.144.87:7967] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaGpBsKBhrfI6KNv9RgwgwAAAAM"]
[Fri Feb 27 22:24:06.813032 2026] [:error] [pid 62998:tid 63019] [client 20.220.144.87:8056] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-atom.php"] [unique_id "aaGpBlQeueXZDUmoLol1dQAAARE"]
[Fri Feb 27 22:24:07.221637 2026] [:error] [pid 56075:tid 56102] [client 20.220.144.87:7937] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-atom.php"] [unique_id "aaGpB8KBhrfI6KNv9RgwigAAABg"]
[Fri Feb 27 22:24:07.634726 2026] [:error] [pid 52073:tid 52098] [client 20.220.144.87:7948] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-atom.php"] [unique_id "aaGpB4a650YPyxXVeRashAAAAZY"]
[Fri Feb 27 22:24:08.052283 2026] [:error] [pid 62998:tid 63025] [client 20.220.144.87:8083] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-atom.php"] [unique_id "aaGpCFQeueXZDUmoLol1fAAAARc"]
[Fri Feb 27 22:24:08.466244 2026] [:error] [pid 56075:tid 56084] [client 20.220.144.87:7941] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGpCMKBhrfI6KNv9RgwmQAAAAc"]
[Fri Feb 27 22:24:08.874365 2026] [:error] [pid 56075:tid 56078] [client 20.220.144.87:7889] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGpCMKBhrfI6KNv9RgwpwAAAAE"]
[Fri Feb 27 22:24:09.288160 2026] [:error] [pid 54101:tid 54125] [client 20.220.144.87:7979] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGpCVY5qgRktcYTGFtWAgAAAdE"]
[Fri Feb 27 22:24:09.716481 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:7991] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaGpCYa650YPyxXVeRaskwAAAYE"]
[Fri Feb 27 22:24:10.133575 2026] [:error] [pid 49306:tid 49321] [client 20.220.144.87:7994] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaGpCvnSUDZue59Px9tRnQAAAU0"]
[Fri Feb 27 22:24:10.542192 2026] [:error] [pid 56075:tid 56086] [client 20.220.144.87:8047] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aaGpCsKBhrfI6KNv9RgwtwAAAAk"]
[Fri Feb 27 22:24:10.958956 2026] [:error] [pid 56075:tid 56097] [client 20.220.144.87:7955] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aaGpCsKBhrfI6KNv9RgwuwAAABM"]
[Fri Feb 27 22:24:11.370577 2026] [:error] [pid 54102:tid 54162] [client 20.220.144.87:7888] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aaGpC3i74D4fiYUm_GeIFwAAAJI"]
[Fri Feb 27 22:24:11.785068 2026] [:error] [pid 56075:tid 56095] [client 20.220.144.87:7936] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaGpC8KBhrfI6KNv9RgwwwAAABE"]
[Fri Feb 27 22:24:12.205017 2026] [:error] [pid 56075:tid 56098] [client 20.220.144.87:7811] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaGpDMKBhrfI6KNv9RgwxQAAABQ"]
[Fri Feb 27 22:24:12.624328 2026] [:error] [pid 56075:tid 56083] [client 20.220.144.87:8161] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaGpDMKBhrfI6KNv9RgwyQAAAAY"]
[Fri Feb 27 22:24:13.031319 2026] [:error] [pid 54101:tid 54108] [client 20.220.144.87:7996] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaGpDVY5qgRktcYTGFtWBQAAAcA"]
[Fri Feb 27 22:24:13.456939 2026] [:error] [pid 54103:tid 54193] [client 20.220.144.87:7887] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGpDevG4MPCmE0B2sDBQwAAANY"]
[Fri Feb 27 22:24:13.872464 2026] [:error] [pid 56075:tid 56092] [client 20.220.144.87:8120] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGpDcKBhrfI6KNv9Rgw0gAAAA4"]
[Fri Feb 27 22:24:14.281824 2026] [:error] [pid 49306:tid 49323] [client 20.220.144.87:7898] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGpDvnSUDZue59Px9tRqwAAAU8"]
[Fri Feb 27 22:24:14.702073 2026] [:error] [pid 52073:tid 52079] [client 20.220.144.87:8059] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaGpDoa650YPyxXVeRasowAAAYM"]
[Fri Feb 27 22:24:15.112098 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:7988] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aaGpD4a650YPyxXVeRaspwAAAYE"]
[Fri Feb 27 22:24:15.524172 2026] [:error] [pid 52073:tid 52082] [client 20.220.144.87:8115] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aaGpD4a650YPyxXVeRasqQAAAYY"]
[Fri Feb 27 22:24:15.933022 2026] [:error] [pid 56075:tid 56077] [client 20.220.144.87:7918] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aaGpD8KBhrfI6KNv9Rgw3QAAAAA"]
[Fri Feb 27 22:24:16.341727 2026] [:error] [pid 56075:tid 56086] [client 20.220.144.87:8058] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aaGpEMKBhrfI6KNv9Rgw3gAAAAk"]
[Fri Feb 27 22:24:16.752561 2026] [:error] [pid 62998:tid 63016] [client 20.220.144.87:8004] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGpEFQeueXZDUmoLol1hgAAAQ4"]
[Fri Feb 27 22:24:17.162956 2026] [:error] [pid 62998:tid 63019] [client 20.220.144.87:8063] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGpEVQeueXZDUmoLol1hwAAARE"]
[Fri Feb 27 22:24:17.572687 2026] [:error] [pid 62998:tid 63017] [client 20.220.144.87:7997] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGpEVQeueXZDUmoLol1igAAAQ8"]
[Fri Feb 27 22:24:17.983394 2026] [:error] [pid 54231:tid 54254] [client 20.220.144.87:7989] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aaGpEeTvb5AeyJCdY7A1WAAAAFQ"]
[Fri Feb 27 22:24:18.400071 2026] [:error] [pid 54102:tid 54147] [client 20.220.144.87:7973] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaGpEni74D4fiYUm_GeIHAAAAIM"]
[Fri Feb 27 22:24:18.810365 2026] [:error] [pid 56075:tid 56085] [client 20.220.144.87:7881] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaGpEsKBhrfI6KNv9Rgw5AAAAAg"]
[Fri Feb 27 22:24:19.221796 2026] [:error] [pid 56075:tid 56084] [client 20.220.144.87:8019] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaGpE8KBhrfI6KNv9Rgw6QAAAAc"]
[Fri Feb 27 22:24:19.635324 2026] [:error] [pid 56075:tid 56102] [client 20.220.144.87:7975] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaGpE8KBhrfI6KNv9Rgw7gAAABg"]
[Fri Feb 27 22:24:20.045685 2026] [:error] [pid 52073:tid 52097] [client 20.220.144.87:7931] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaGpFIa650YPyxXVeRassgAAAZU"]
[Fri Feb 27 22:24:20.456457 2026] [:error] [pid 56075:tid 56101] [client 20.220.144.87:7928] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaGpFMKBhrfI6KNv9Rgw9AAAABc"]
[Fri Feb 27 22:24:20.866611 2026] [:error] [pid 52073:tid 52092] [client 20.220.144.87:7939] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaGpFIa650YPyxXVeRasuAAAAZA"]
[Fri Feb 27 22:24:21.277559 2026] [:error] [pid 52073:tid 52098] [client 20.220.144.87:7976] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaGpFYa650YPyxXVeRasvAAAAZY"]
[Fri Feb 27 22:24:21.716168 2026] [:error] [pid 62998:tid 63022] [client 20.220.144.87:7984] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGpFVQeueXZDUmoLol1lgAAARQ"]
[Fri Feb 27 22:24:22.126711 2026] [:error] [pid 52073:tid 52081] [client 20.220.144.87:8092] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGpFoa650YPyxXVeRaswQAAAYU"]
[Fri Feb 27 22:24:22.536137 2026] [:error] [pid 54101:tid 54114] [client 20.220.144.87:7878] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGpFlY5qgRktcYTGFtWCgAAAcY"]
[Fri Feb 27 22:24:22.954333 2026] [:error] [pid 54103:tid 54174] [client 20.220.144.87:8065] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aaGpFuvG4MPCmE0B2sDBTAAAAMM"]
[Fri Feb 27 22:24:23.377702 2026] [:error] [pid 54103:tid 54192] [client 20.220.144.87:7982] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGpF-vG4MPCmE0B2sDBTwAAANU"]
[Fri Feb 27 22:24:23.789169 2026] [:error] [pid 54231:tid 54256] [client 20.220.144.87:7958] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGpF-Tvb5AeyJCdY7A1WgAAAFY"]
[Fri Feb 27 22:24:24.202300 2026] [:error] [pid 62998:tid 63024] [client 20.220.144.87:7890] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGpGFQeueXZDUmoLol1nAAAARY"]
[Fri Feb 27 22:24:24.611599 2026] [:error] [pid 54102:tid 54145] [client 20.220.144.87:8046] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaGpGHi74D4fiYUm_GeIIgAAAIE"]
[Fri Feb 27 22:24:25.021496 2026] [:error] [pid 49306:tid 49329] [client 20.220.144.87:7840] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aaGpGfnSUDZue59Px9tRzwAAAVU"]
[Fri Feb 27 22:24:25.431353 2026] [:error] [pid 49306:tid 49310] [client 20.220.144.87:7987] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aaGpGfnSUDZue59Px9tR0wAAAUI"]
[Fri Feb 27 22:24:25.845941 2026] [:error] [pid 52073:tid 52079] [client 20.220.144.87:7974] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aaGpGYa650YPyxXVeRasxAAAAYM"]
[Fri Feb 27 22:24:26.260026 2026] [:error] [pid 52073:tid 52077] [client 20.220.144.87:7879] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "aaGpGoa650YPyxXVeRasxwAAAYE"]
[Fri Feb 27 22:24:26.668005 2026] [:error] [pid 52073:tid 52084] [client 20.220.144.87:8040] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/my.php"] [unique_id "aaGpGoa650YPyxXVeRasyQAAAYg"]
[Fri Feb 27 22:24:27.078949 2026] [:error] [pid 52073:tid 52098] [client 20.220.144.87:8119] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/my.php"] [unique_id "aaGpG4a650YPyxXVeRaszAAAAZY"]
[Fri Feb 27 22:24:27.505154 2026] [:error] [pid 49306:tid 49316] [client 20.220.144.87:7822] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/my.php"] [unique_id "aaGpG_nSUDZue59Px9tR3wAAAUg"]
[Fri Feb 27 22:24:27.916861 2026] [:error] [pid 62998:tid 63026] [client 20.220.144.87:7926] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/my.php"] [unique_id "aaGpG1QeueXZDUmoLol1oQAAARg"]
[Fri Feb 27 22:24:28.327964 2026] [:error] [pid 62998:tid 63020] [client 20.220.144.87:7990] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGpHFQeueXZDUmoLol1pAAAARI"]
[Fri Feb 27 22:24:28.735911 2026] [:error] [pid 62998:tid 63015] [client 20.220.144.87:7914] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGpHFQeueXZDUmoLol1qAAAAQ0"]
[Fri Feb 27 22:24:29.150876 2026] [:error] [pid 56075:tid 56093] [client 20.220.144.87:7919] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGpHcKBhrfI6KNv9RgxAAAAAA8"]
[Fri Feb 27 22:24:29.558947 2026] [:error] [pid 52073:tid 52083] [client 20.220.144.87:7940] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaGpHYa650YPyxXVeRaszgAAAYc"]
[Fri Feb 27 22:24:29.968144 2026] [:error] [pid 56075:tid 56085] [client 20.220.144.87:7949] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGpHcKBhrfI6KNv9RgxAwAAAAg"]
[Fri Feb 27 22:24:30.381586 2026] [:error] [pid 54231:tid 54244] [client 20.220.144.87:7959] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGpHuTvb5AeyJCdY7A1WwAAAEo"]
[Fri Feb 27 22:24:30.795774 2026] [:error] [pid 56075:tid 56081] [client 20.220.144.87:8041] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGpHsKBhrfI6KNv9RgxBwAAAAQ"]
[Fri Feb 27 22:24:31.212743 2026] [:error] [pid 52073:tid 52087] [client 20.220.144.87:8013] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aaGpH4a650YPyxXVeRas0wAAAYs"]
[Fri Feb 27 22:24:31.622740 2026] [:error] [pid 54231:tid 54257] [client 20.220.144.87:8121] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaGpH-Tvb5AeyJCdY7A1XAAAAFc"]
[Fri Feb 27 22:24:32.033507 2026] [:error] [pid 54103:tid 54184] [client 20.220.144.87:7986] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaGpIOvG4MPCmE0B2sDBVAAAAM0"]
[Fri Feb 27 22:24:32.444497 2026] [:error] [pid 52073:tid 52084] [client 20.220.144.87:7886] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaGpIIa650YPyxXVeRas3gAAAYg"]
[Fri Feb 27 22:24:32.865531 2026] [:error] [pid 54103:tid 54191] [client 20.220.144.87:7980] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaGpIOvG4MPCmE0B2sDBVwAAANQ"]
[Fri Feb 27 22:24:33.278344 2026] [:error] [pid 52073:tid 52093] [client 20.220.144.87:7929] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaGpIYa650YPyxXVeRas5AAAAZE"]
[Fri Feb 27 22:24:33.714217 2026] [:error] [pid 52073:tid 52078] [client 20.220.144.87:7907] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaGpIYa650YPyxXVeRas5gAAAYI"]
[Fri Feb 27 22:24:34.153469 2026] [:error] [pid 52073:tid 52087] [client 20.220.144.87:7992] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaGpIoa650YPyxXVeRas6QAAAYs"]
[Fri Feb 27 22:24:34.565780 2026] [:error] [pid 62998:tid 63012] [client 20.220.144.87:7883] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaGpIlQeueXZDUmoLol1rgAAAQo"]
[Fri Feb 27 22:24:35.011243 2026] [:error] [pid 56075:tid 56101] [client 20.220.144.87:7999] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-setting.php"] [unique_id "aaGpI8KBhrfI6KNv9RgxEAAAABc"]
[Fri Feb 27 22:24:35.453334 2026] [:error] [pid 54102:tid 54162] [client 20.220.144.87:8123] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-setting.php"] [unique_id "aaGpI3i74D4fiYUm_GeIJgAAAJI"]
[Fri Feb 27 22:24:35.865620 2026] [:error] [pid 56075:tid 56082] [client 20.220.144.87:7827] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-setting.php"] [unique_id "aaGpI8KBhrfI6KNv9RgxFQAAAAU"]
[Fri Feb 27 22:24:36.283271 2026] [:error] [pid 56075:tid 56091] [client 20.220.144.87:7965] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-setting.php"] [unique_id "aaGpJMKBhrfI6KNv9RgxFwAAAA0"]
[Fri Feb 27 22:24:36.694075 2026] [:error] [pid 56075:tid 56092] [client 20.220.144.87:8057] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaGpJMKBhrfI6KNv9RgxGwAAAA4"]
[Fri Feb 27 22:24:37.102446 2026] [:error] [pid 54101:tid 54117] [client 20.220.144.87:8090] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaGpJVY5qgRktcYTGFtWEAAAAck"]
[Fri Feb 27 22:24:37.519401 2026] [:error] [pid 52073:tid 52089] [client 20.220.144.87:7902] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaGpJYa650YPyxXVeRas7QAAAY0"]
[Fri Feb 27 22:24:37.939206 2026] [:error] [pid 54101:tid 54125] [client 20.220.144.87:7960] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaGpJVY5qgRktcYTGFtWFgAAAdE"]
[Fri Feb 27 22:24:38.356289 2026] [:error] [pid 54231:tid 54255] [client 20.220.144.87:7877] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaGpJuTvb5AeyJCdY7A1cgAAAFU"]
[Fri Feb 27 22:24:38.773803 2026] [:error] [pid 52073:tid 52094] [client 20.220.144.87:7897] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaGpJoa650YPyxXVeRas8QAAAZI"]
[Fri Feb 27 22:24:39.192913 2026] [:error] [pid 56075:tid 56090] [client 20.220.144.87:7894] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaGpJ8KBhrfI6KNv9RgxIQAAAAw"]
[Fri Feb 27 22:24:39.606662 2026] [:error] [pid 62998:tid 63001] [client 20.220.144.87:7820] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaGpJ1QeueXZDUmoLol1tAAAAQA"]
[Sat Feb 28 01:25:29.409355 2026] [:error] [pid 38620:tid 38625] [client 20.196.204.231:12537] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Feb 28 01:25:29.548193 2026] [:error] [pid 38620:tid 38634] [client 20.196.204.231:12537] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Feb 28 01:25:29.844954 2026] [:error] [pid 38620:tid 38643] [client 20.196.204.231:12537] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Feb 28 01:25:29.984641 2026] [:error] [pid 38620:tid 38627] [client 20.196.204.231:12537] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Feb 28 01:25:30.261886 2026] [:error] [pid 38620:tid 38635] [client 20.196.204.231:12537] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Feb 28 01:25:30.402057 2026] [:error] [pid 38620:tid 38645] [client 20.196.204.231:12537] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Feb 28 01:25:30.539959 2026] [:error] [pid 38620:tid 38642] [client 20.196.204.231:12537] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Feb 28 01:25:30.811739 2026] [:error] [pid 38620:tid 38625] [client 20.196.204.231:12537] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaHTigP6I7SRqrhh7RoK2gAAAUM"]
[Sat Feb 28 01:25:31.375695 2026] [:error] [pid 15240:tid 15257] [client 20.196.204.231:4685] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaHTiy1iKL_41Rk9A9N5dQAAAA8"]
[Sat Feb 28 01:25:31.914564 2026] [:error] [pid 15099:tid 15152] [client 20.196.204.231:13060] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaHTi-nvP2vtPjYDq_g3FQAAANM"]
[Sat Feb 28 01:25:32.500923 2026] [:error] [pid 15099:tid 15143] [client 20.196.204.231:3171] [client 20.196.204.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaHTjOnvP2vtPjYDq_g3FgAAAMo"]
[Sat Feb 28 01:35:25.578752 2026] [:error] [pid 15098:tid 15114] [client 182.44.9.147:40890] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaHV3ckFqny8dQQbmTkokAAAAIg"]
[Sat Feb 28 01:41:11.709954 2026] [:error] [pid 38620:tid 38645] [client 20.220.8.221:34158] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sat Feb 28 01:41:11.919331 2026] [:error] [pid 38620:tid 38628] [client 20.220.8.221:34158] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sat Feb 28 01:41:12.549054 2026] [:error] [pid 38620:tid 38629] [client 20.220.8.221:34158] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Feb 28 01:41:12.969477 2026] [:error] [pid 38620:tid 38644] [client 20.220.8.221:34158] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sat Feb 28 01:41:13.388404 2026] [:error] [pid 38620:tid 38643] [client 20.220.8.221:34158] [client 20.220.8.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaHXOQP6I7SRqrhh7RocDgAAAVU"]
[Sat Feb 28 01:41:14.874023 2026] [:error] [pid 38620:tid 38642] [client 20.220.8.221:34135] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aaHXOgP6I7SRqrhh7RocGQAAAVQ"]
[Sat Feb 28 01:41:15.709076 2026] [:error] [pid 38620:tid 38625] [client 20.220.8.221:34132] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aaHXOwP6I7SRqrhh7RocJQAAAUM"]
[Sat Feb 28 01:41:16.553300 2026] [:error] [pid 38620:tid 38641] [client 20.220.8.221:34170] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aaHXPAP6I7SRqrhh7RocLAAAAVM"]
[Sat Feb 28 01:41:17.404562 2026] [:error] [pid 38620:tid 38638] [client 20.220.8.221:34142] [client 20.220.8.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aaHXPQP6I7SRqrhh7RocMgAAAVA"]
[Sat Feb 28 01:44:04.850448 2026] [:error] [pid 38620:tid 38637] [client 45.234.60.23:58188] [client 45.234.60.23] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.234.60.23, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaHX5AP6I7SRqrhh7RofYQAAAU8"]
[Sat Feb 28 01:44:04.859324 2026] [:error] [pid 38620:tid 38637] [client 45.234.60.23:58188] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 03:46:32.589152 2026] [:error] [pid 34491:tid 34624] [client 49.51.195.195:59156] [client 49.51.195.195] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaH0mMxLVJ-Qvx_vhmjqTQAAAIE"]
[Sat Feb 28 04:47:42.845699 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:37867] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIC7hVE-FfM89u7BQYhFwAAAIY"]
[Sat Feb 28 04:47:43.263642 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:37773] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIC72uX5e1Q32gqxH1rYgAAARU"]
[Sat Feb 28 04:47:43.684325 2026] [:error] [pid 11791:tid 11807] [client 13.71.191.191:37839] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIC72uX5e1Q32gqxH1raAAAAQ4"]
[Sat Feb 28 04:47:44.092444 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:37833] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaIC8KIAO5fN7BxyqcECaAAAANI"]
[Sat Feb 28 04:53:30.726508 2026] [:error] [pid 39183:tid 39211] [client 165.227.53.4:58823] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/config/config.yml"] [unique_id "aaIEShCf4HvhVePw3LZR8AAAABM"]
[Sat Feb 28 04:54:35.544644 2026] [:error] [pid 39185:tid 39247] [client 165.227.53.4:60295] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/services.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/src/Resources/config/services.yml"] [unique_id "aaIEixVE-FfM89u7BQYkMAAAAIE"]
[Sat Feb 28 04:54:54.198178 2026] [:error] [pid 11791:tid 11813] [client 165.227.53.4:61537] [client 165.227.53.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/parameters.yml"] [unique_id "aaIEnmuX5e1Q32gqxH1wfwAAARQ"]
[Sat Feb 28 04:54:56.448366 2026] [:error] [pid 11791:tid 11813] [client 165.227.53.4:62244] File does not exist: /usr/local/apache/htdocs/suspended-page/app_dev.php
[Sat Feb 28 04:54:57.428082 2026] [:error] [pid 11791:tid 11795] [client 165.227.53.4:62244] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aaIEoWuX5e1Q32gqxH1wmgAAAQI"]
[Sat Feb 28 04:55:00.280512 2026] [:error] [pid 39185:tid 39268] [client 165.227.53.4:62639] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aaIEpBVE-FfM89u7BQYkZgAAAJY"]
[Sat Feb 28 04:55:03.096101 2026] [:error] [pid 11791:tid 11812] [client 165.227.53.4:62833] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "aaIEp2uX5e1Q32gqxH1wqgAAARM"]
[Sat Feb 28 04:55:05.030347 2026] [:error] [pid 39292:tid 39308] [client 165.227.53.4:63051] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/open"] [unique_id "aaIEqaIAO5fN7BxyqcEGmwAAAM4"]
[Sat Feb 28 04:55:07.837245 2026] [:error] [pid 11791:tid 11807] [client 165.227.53.4:63158] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/open"] [unique_id "aaIEq2uX5e1Q32gqxH1w1gAAAQ4"]
[Sat Feb 28 04:55:11.566358 2026] [:error] [pid 39183:tid 39198] [client 165.227.53.4:63420] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/debug/default/view"] [unique_id "aaIErxCf4HvhVePw3LZSTwAAAAY"]
[Sat Feb 28 04:55:14.312617 2026] [:error] [pid 39292:tid 39299] [client 165.227.53.4:63663] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web/debug/default/view"] [unique_id "aaIEsqIAO5fN7BxyqcEG0QAAAMU"]
[Sat Feb 28 04:55:17.915253 2026] [:error] [pid 39184:tid 39241] [client 165.227.53.4:63892] [client 165.227.53.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web/debug/default/view"] [unique_id "aaIEtVtZF9Zd_U7easAZlQAAAFY"]
[Sat Feb 28 04:55:39.561520 2026] [:error] [pid 39185:tid 39270] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Sat Feb 28 04:55:39.799614 2026] [:error] [pid 39185:tid 39255] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat Feb 28 04:55:40.040237 2026] [:error] [pid 39185:tid 39261] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat Feb 28 04:55:40.278182 2026] [:error] [pid 39185:tid 39259] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/X57.php
[Sat Feb 28 04:55:40.517847 2026] [:error] [pid 39185:tid 39267] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/wpver.php
[Sat Feb 28 04:55:40.994709 2026] [:error] [pid 39185:tid 39252] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat Feb 28 04:55:41.233544 2026] [:error] [pid 39185:tid 39248] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sat Feb 28 04:55:41.472363 2026] [:error] [pid 39185:tid 39257] [client 40.89.156.16:61323] File does not exist: /usr/local/apache/htdocs/suspended-page/wqqs.php
[Sat Feb 28 04:55:41.947203 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:61323] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-318.php"] [unique_id "aaIEzRVE-FfM89u7BQYk1wAAAIQ"]
[Sat Feb 28 04:55:42.418994 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:30548] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-318.php"] [unique_id "aaIEzmuX5e1Q32gqxH1xdQAAAQ0"]
[Sat Feb 28 04:55:42.891459 2026] [:error] [pid 11791:tid 11795] [client 40.89.156.16:30543] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-318.php"] [unique_id "aaIEzmuX5e1Q32gqxH1xfAAAAQI"]
[Sat Feb 28 04:55:43.362596 2026] [:error] [pid 39292:tid 39301] [client 40.89.156.16:62576] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-318.php"] [unique_id "aaIEz6IAO5fN7BxyqcEHUgAAAMc"]
[Sat Feb 28 04:55:43.851661 2026] [:error] [pid 39185:tid 39256] [client 40.89.156.16:49155] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaIEzxVE-FfM89u7BQYk3QAAAIo"]
[Sat Feb 28 04:55:44.324746 2026] [:error] [pid 39292:tid 39312] [client 40.89.156.16:55033] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaIE0KIAO5fN7BxyqcEHWAAAANI"]
[Sat Feb 28 04:55:44.813416 2026] [:error] [pid 39292:tid 39299] [client 40.89.156.16:62535] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaIE0KIAO5fN7BxyqcEHWwAAAMU"]
[Sat Feb 28 04:55:45.298160 2026] [:error] [pid 39185:tid 39248] [client 40.89.156.16:60298] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sallu.php"] [unique_id "aaIE0RVE-FfM89u7BQYk5gAAAII"]
[Sat Feb 28 04:55:45.774691 2026] [:error] [pid 39185:tid 39258] [client 40.89.156.16:55035] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaIE0RVE-FfM89u7BQYk6gAAAIw"]
[Sat Feb 28 04:55:46.253177 2026] [:error] [pid 11791:tid 11814] [client 40.89.156.16:49517] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaIE0muX5e1Q32gqxH1xlwAAARU"]
[Sat Feb 28 04:55:46.721886 2026] [:error] [pid 39184:tid 39232] [client 40.89.156.16:61878] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaIE0ltZF9Zd_U7easAZ2gAAAE0"]
[Sat Feb 28 04:55:47.196508 2026] [:error] [pid 39292:tid 39296] [client 40.89.156.16:49479] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dom.php"] [unique_id "aaIE06IAO5fN7BxyqcEHZQAAAMI"]
[Sat Feb 28 04:55:47.667289 2026] [:error] [pid 39184:tid 39230] [client 40.89.156.16:6650] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rxzx.php"] [unique_id "aaIE01tZF9Zd_U7easAZ3AAAAEs"]
[Sat Feb 28 04:55:48.145854 2026] [:error] [pid 11791:tid 11808] [client 40.89.156.16:49205] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rxzx.php"] [unique_id "aaIE1GuX5e1Q32gqxH1xsgAAAQ8"]
[Sat Feb 28 04:55:48.623059 2026] [:error] [pid 11791:tid 11799] [client 40.89.156.16:49161] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rxzx.php"] [unique_id "aaIE1GuX5e1Q32gqxH1xtAAAAQY"]
[Sat Feb 28 04:55:49.109240 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:61367] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rxzx.php"] [unique_id "aaIE1aIAO5fN7BxyqcEHbgAAANg"]
[Sat Feb 28 04:55:49.595356 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:62571] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIE1aIAO5fN7BxyqcEHbwAAAME"]
[Sat Feb 28 04:55:50.064470 2026] [:error] [pid 39183:tid 39214] [client 40.89.156.16:54988] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIE1hCf4HvhVePw3LZShAAAABY"]
[Sat Feb 28 04:55:50.535839 2026] [:error] [pid 39185:tid 39257] [client 40.89.156.16:61882] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIE1hVE-FfM89u7BQYk-QAAAIs"]
[Sat Feb 28 04:55:51.007233 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:61985] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaIE1xCf4HvhVePw3LZSiQAAAAw"]
[Sat Feb 28 04:55:51.481087 2026] [:error] [pid 39292:tid 39316] [client 40.89.156.16:6647] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "aaIE16IAO5fN7BxyqcEHegAAANY"]
[Sat Feb 28 04:55:51.949881 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:56784] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "aaIE12uX5e1Q32gqxH1xvwAAARM"]
[Sat Feb 28 04:55:52.422231 2026] [:error] [pid 39185:tid 39247] [client 40.89.156.16:54598] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "aaIE2BVE-FfM89u7BQYlAgAAAIE"]
[Sat Feb 28 04:55:52.905291 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:49837] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "aaIE2KIAO5fN7BxyqcEHggAAAMk"]
[Sat Feb 28 04:55:53.394427 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:61832] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIE2aIAO5fN7BxyqcEHjgAAANc"]
[Sat Feb 28 04:55:53.862858 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:55704] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIE2aIAO5fN7BxyqcEHlAAAAMk"]
[Sat Feb 28 04:55:54.343447 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:46266] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIE2muX5e1Q32gqxH1xyQAAAQ0"]
[Sat Feb 28 04:55:54.823016 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:57083] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIE2muX5e1Q32gqxH1xywAAARc"]
[Sat Feb 28 04:55:55.295330 2026] [:error] [pid 39185:tid 39265] [client 40.89.156.16:6599] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIE2xVE-FfM89u7BQYlCAAAAJM"]
[Sat Feb 28 04:55:55.768183 2026] [:error] [pid 39185:tid 39251] [client 40.89.156.16:54631] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIE2xVE-FfM89u7BQYlDgAAAIU"]
[Sat Feb 28 04:55:56.240845 2026] [:error] [pid 39183:tid 39210] [client 40.89.156.16:61341] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIE3BCf4HvhVePw3LZSkgAAABI"]
[Sat Feb 28 04:55:56.710571 2026] [:error] [pid 39183:tid 39207] [client 40.89.156.16:62577] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaIE3BCf4HvhVePw3LZSlgAAAA8"]
[Sat Feb 28 04:55:57.181744 2026] [:error] [pid 39183:tid 39200] [client 40.89.156.16:49506] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snq.php"] [unique_id "aaIE3RCf4HvhVePw3LZSmAAAAAg"]
[Sat Feb 28 04:55:57.652869 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:55684] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snq.php"] [unique_id "aaIE3aIAO5fN7BxyqcEHrwAAAM8"]
[Sat Feb 28 04:55:58.132075 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:56826] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snq.php"] [unique_id "aaIE3qIAO5fN7BxyqcEHtQAAANQ"]
[Sat Feb 28 04:55:58.601788 2026] [:error] [pid 39183:tid 39208] [client 40.89.156.16:49184] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snq.php"] [unique_id "aaIE3hCf4HvhVePw3LZSmgAAABA"]
[Sat Feb 28 04:55:59.071357 2026] [:error] [pid 39185:tid 39267] [client 40.89.156.16:60313] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcs.php"] [unique_id "aaIE3xVE-FfM89u7BQYlGgAAAJU"]
[Sat Feb 28 04:55:59.545242 2026] [:error] [pid 39184:tid 39223] [client 40.89.156.16:61320] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcs.php"] [unique_id "aaIE31tZF9Zd_U7easAZ_AAAAEQ"]
[Sat Feb 28 04:56:00.020292 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:56792] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcs.php"] [unique_id "aaIE4GuX5e1Q32gqxH1x6wAAAQQ"]
[Sat Feb 28 04:56:00.501276 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:6596] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mcs.php"] [unique_id "aaIE4GuX5e1Q32gqxH1x7wAAAQg"]
[Sat Feb 28 04:56:00.973976 2026] [:error] [pid 39292:tid 39302] [client 40.89.156.16:6653] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaIE4KIAO5fN7BxyqcEHxgAAAMg"]
[Sat Feb 28 04:56:01.446344 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:55942] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaIE4WuX5e1Q32gqxH1x8gAAARM"]
[Sat Feb 28 04:56:01.919036 2026] [:error] [pid 11791:tid 11809] [client 40.89.156.16:56811] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaIE4WuX5e1Q32gqxH1x8wAAARA"]
[Sat Feb 28 04:56:02.397218 2026] [:error] [pid 39184:tid 39240] [client 40.89.156.16:61846] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaIE4ltZF9Zd_U7easAaAwAAAFU"]
[Sat Feb 28 04:56:02.865891 2026] [:error] [pid 39184:tid 39229] [client 40.89.156.16:55004] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet"] [unique_id "aaIE4ltZF9Zd_U7easAaBQAAAEo"]
[Sat Feb 28 04:56:03.338618 2026] [:error] [pid 39183:tid 39206] [client 40.89.156.16:61996] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet"] [unique_id "aaIE4xCf4HvhVePw3LZSpQAAAA4"]
[Sat Feb 28 04:56:03.807450 2026] [:error] [pid 39183:tid 39216] [client 40.89.156.16:51869] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet"] [unique_id "aaIE4xCf4HvhVePw3LZSqQAAABg"]
[Sat Feb 28 04:56:04.284145 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:46220] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet"] [unique_id "aaIE5GuX5e1Q32gqxH1x_QAAAQo"]
[Sat Feb 28 04:56:04.760529 2026] [:error] [pid 39183:tid 39203] [client 40.89.156.16:61849] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaIE5BCf4HvhVePw3LZSvwAAAAs"]
[Sat Feb 28 04:56:05.232508 2026] [:error] [pid 39183:tid 39215] [client 40.89.156.16:60350] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaIE5RCf4HvhVePw3LZSwgAAABc"]
[Sat Feb 28 04:56:05.701541 2026] [:error] [pid 39183:tid 39213] [client 40.89.156.16:47967] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaIE5RCf4HvhVePw3LZSxQAAABU"]
[Sat Feb 28 04:56:06.280153 2026] [:error] [pid 39185:tid 39268] [client 40.89.156.16:56781] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaIE5hVE-FfM89u7BQYlHAAAAJY"]
[Sat Feb 28 04:56:06.750988 2026] [:error] [pid 39185:tid 39257] [client 40.89.156.16:54654] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIE5hVE-FfM89u7BQYlHgAAAIs"]
[Sat Feb 28 04:56:07.223665 2026] [:error] [pid 39185:tid 39264] [client 40.89.156.16:61331] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIE5xVE-FfM89u7BQYlIQAAAJI"]
[Sat Feb 28 04:56:07.693523 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:61992] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIE52uX5e1Q32gqxH1yDQAAAQ0"]
[Sat Feb 28 04:56:08.166886 2026] [:error] [pid 11791:tid 11802] [client 40.89.156.16:61368] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaIE6GuX5e1Q32gqxH1yEAAAAQk"]
[Sat Feb 28 04:56:08.639738 2026] [:error] [pid 39292:tid 39313] [client 40.89.156.16:51860] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaIE6KIAO5fN7BxyqcEH0gAAANM"]
[Sat Feb 28 04:56:09.110797 2026] [:error] [pid 11791:tid 11793] [client 40.89.156.16:62555] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaIE6WuX5e1Q32gqxH1yFAAAAQA"]
[Sat Feb 28 04:56:09.579621 2026] [:error] [pid 39185:tid 39270] [client 40.89.156.16:47948] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaIE6RVE-FfM89u7BQYlJAAAAJg"]
[Sat Feb 28 04:56:10.053298 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:49521] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaIE6qIAO5fN7BxyqcEH1gAAAME"]
[Sat Feb 28 04:56:10.523598 2026] [:error] [pid 39184:tid 39233] [client 40.89.156.16:61975] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaIE6ltZF9Zd_U7easAaKAAAAE4"]
[Sat Feb 28 04:56:10.999177 2026] [:error] [pid 39184:tid 39223] [client 40.89.156.16:56284] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaIE6ltZF9Zd_U7easAaLAAAAEQ"]
[Sat Feb 28 04:56:11.474447 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:46235] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaIE62uX5e1Q32gqxH1yGQAAARQ"]
[Sat Feb 28 04:56:11.948444 2026] [:error] [pid 39292:tid 39296] [client 40.89.156.16:49202] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaIE66IAO5fN7BxyqcEH3QAAAMI"]
[Sat Feb 28 04:56:12.423001 2026] [:error] [pid 39184:tid 39225] [client 40.89.156.16:51882] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaIE7FtZF9Zd_U7easAaNwAAAEY"]
[Sat Feb 28 04:56:12.891989 2026] [:error] [pid 39184:tid 39230] [client 40.89.156.16:58920] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaIE7FtZF9Zd_U7easAaPAAAAEs"]
[Sat Feb 28 04:56:13.362572 2026] [:error] [pid 39184:tid 39224] [client 40.89.156.16:55028] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaIE7VtZF9Zd_U7easAaQQAAAEU"]
[Sat Feb 28 04:56:13.834177 2026] [:error] [pid 39184:tid 39234] [client 40.89.156.16:56296] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaIE7VtZF9Zd_U7easAaRQAAAE8"]
[Sat Feb 28 04:56:14.306110 2026] [:error] [pid 39184:tid 39228] [client 40.89.156.16:47977] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIE7ltZF9Zd_U7easAaSgAAAEk"]
[Sat Feb 28 04:56:14.775249 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:62553] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIE7qIAO5fN7BxyqcEH3wAAAM0"]
[Sat Feb 28 04:56:15.250043 2026] [:error] [pid 39185:tid 39259] [client 40.89.156.16:61327] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIE7xVE-FfM89u7BQYlKAAAAI0"]
[Sat Feb 28 04:56:15.721003 2026] [:error] [pid 39184:tid 39237] [client 40.89.156.16:49735] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaIE71tZF9Zd_U7easAaWAAAAFI"]
[Sat Feb 28 04:56:16.198700 2026] [:error] [pid 39185:tid 39266] [client 40.89.156.16:56765] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaIE8BVE-FfM89u7BQYlKQAAAJQ"]
[Sat Feb 28 04:56:16.668294 2026] [:error] [pid 39292:tid 39301] [client 40.89.156.16:46256] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaIE8KIAO5fN7BxyqcEH4gAAAMc"]
[Sat Feb 28 04:56:17.137409 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:61875] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaIE8WuX5e1Q32gqxH1yIgAAAQ4"]
[Sat Feb 28 04:56:17.611677 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:56284] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaIE8aIAO5fN7BxyqcEH4wAAAMk"]
[Sat Feb 28 04:56:18.080648 2026] [:error] [pid 39185:tid 39268] [client 40.89.156.16:56293] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaIE8hVE-FfM89u7BQYlKwAAAJY"]
[Sat Feb 28 04:56:18.552300 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:49748] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaIE8muX5e1Q32gqxH1yJwAAARg"]
[Sat Feb 28 04:56:19.026379 2026] [:error] [pid 39185:tid 39265] [client 40.89.156.16:61338] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaIE8xVE-FfM89u7BQYlLQAAAJM"]
[Sat Feb 28 04:56:19.496604 2026] [:error] [pid 39185:tid 39257] [client 40.89.156.16:62546] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaIE8xVE-FfM89u7BQYlLgAAAIs"]
[Sat Feb 28 04:56:19.968358 2026] [:error] [pid 39183:tid 39208] [client 40.89.156.16:56287] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIE8xCf4HvhVePw3LZSzgAAABA"]
[Sat Feb 28 04:56:20.438223 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:6654] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIE9KIAO5fN7BxyqcEH6QAAANg"]
[Sat Feb 28 04:56:20.920873 2026] [:error] [pid 39185:tid 39246] [client 40.89.156.16:61853] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIE9BVE-FfM89u7BQYlMQAAAIA"]
[Sat Feb 28 04:56:21.392866 2026] [:error] [pid 11791:tid 11814] [client 40.89.156.16:61850] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaIE9WuX5e1Q32gqxH1yLwAAARU"]
[Sat Feb 28 04:56:21.861002 2026] [:error] [pid 39184:tid 39224] [client 40.89.156.16:51845] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app"] [unique_id "aaIE9VtZF9Zd_U7easAafwAAAEU"]
[Sat Feb 28 04:56:22.329339 2026] [:error] [pid 39184:tid 39239] [client 40.89.156.16:46222] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app"] [unique_id "aaIE9ltZF9Zd_U7easAagwAAAFQ"]
[Sat Feb 28 04:56:22.798744 2026] [:error] [pid 39184:tid 39235] [client 40.89.156.16:49844] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app"] [unique_id "aaIE9ltZF9Zd_U7easAahgAAAFA"]
[Sat Feb 28 04:56:23.268605 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:62528] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app"] [unique_id "aaIE92uX5e1Q32gqxH1yOgAAAQw"]
[Sat Feb 28 04:56:23.739977 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:50833] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaIE92uX5e1Q32gqxH1yPQAAAQg"]
[Sat Feb 28 04:56:24.217246 2026] [:error] [pid 39183:tid 39197] [client 40.89.156.16:50273] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaIE-BCf4HvhVePw3LZS1AAAAAU"]
[Sat Feb 28 04:56:24.687848 2026] [:error] [pid 11791:tid 11804] [client 40.89.156.16:46254] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaIE-GuX5e1Q32gqxH1yQgAAAQs"]
[Sat Feb 28 04:56:25.160963 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:58683] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaIE-WuX5e1Q32gqxH1yRAAAARE"]
[Sat Feb 28 04:56:25.632878 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:61342] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIE-WuX5e1Q32gqxH1ySAAAAQQ"]
[Sat Feb 28 04:56:26.103103 2026] [:error] [pid 39292:tid 39308] [client 40.89.156.16:49802] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIE-qIAO5fN7BxyqcEH7gAAAM4"]
[Sat Feb 28 04:56:26.570284 2026] [:error] [pid 11791:tid 11800] [client 40.89.156.16:47972] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIE-muX5e1Q32gqxH1yTQAAAQc"]
[Sat Feb 28 04:56:27.041560 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:58913] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaIE-6IAO5fN7BxyqcEH7wAAAM8"]
[Sat Feb 28 04:56:27.511357 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:49827] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIE-xCf4HvhVePw3LZS1gAAAA0"]
[Sat Feb 28 04:56:27.984672 2026] [:error] [pid 39183:tid 39199] [client 40.89.156.16:60349] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIE-xCf4HvhVePw3LZS2AAAAAc"]
[Sat Feb 28 04:56:28.474282 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:55238] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIE_GuX5e1Q32gqxH1yVAAAARY"]
[Sat Feb 28 04:56:28.943524 2026] [:error] [pid 39185:tid 39256] [client 40.89.156.16:49812] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaIE_BVE-FfM89u7BQYlOAAAAIo"]
[Sat Feb 28 04:56:29.417563 2026] [:error] [pid 39185:tid 39259] [client 40.89.156.16:54612] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaIE_RVE-FfM89u7BQYlOgAAAI0"]
[Sat Feb 28 04:56:29.892748 2026] [:error] [pid 39184:tid 39230] [client 40.89.156.16:6637] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaIE_VtZF9Zd_U7easAaigAAAEs"]
[Sat Feb 28 04:56:30.362295 2026] [:error] [pid 39185:tid 39268] [client 40.89.156.16:55011] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaIE_hVE-FfM89u7BQYlPAAAAJY"]
[Sat Feb 28 04:56:30.835007 2026] [:error] [pid 39184:tid 39219] [client 40.89.156.16:55294] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaIE_ltZF9Zd_U7easAajAAAAEA"]
[Sat Feb 28 04:56:31.306505 2026] [:error] [pid 11791:tid 11799] [client 40.89.156.16:50879] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaIE_2uX5e1Q32gqxH1yVgAAAQY"]
[Sat Feb 28 04:56:31.780444 2026] [:error] [pid 39184:tid 39224] [client 40.89.156.16:46257] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaIE_1tZF9Zd_U7easAakAAAAEU"]
[Sat Feb 28 04:56:32.254328 2026] [:error] [pid 11791:tid 11808] [client 40.89.156.16:55290] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaIFAGuX5e1Q32gqxH1yWgAAAQ8"]
[Sat Feb 28 04:56:32.728172 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:49523] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaIFAGuX5e1Q32gqxH1yXgAAARc"]
[Sat Feb 28 04:56:33.200910 2026] [:error] [pid 39292:tid 39304] [client 40.89.156.16:51886] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaIFAaIAO5fN7BxyqcEH9wAAAMo"]
[Sat Feb 28 04:56:33.669839 2026] [:error] [pid 39292:tid 39305] [client 40.89.156.16:50820] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaIFAaIAO5fN7BxyqcEH-QAAAMs"]
[Sat Feb 28 04:56:34.137589 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:62551] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaIFAqIAO5fN7BxyqcEH-gAAAMw"]
[Sat Feb 28 04:56:34.614967 2026] [:error] [pid 11791:tid 11793] [client 40.89.156.16:46221] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaIFAmuX5e1Q32gqxH1yZAAAAQA"]
[Sat Feb 28 04:56:35.087994 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:58910] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaIFA2uX5e1Q32gqxH1yZgAAARM"]
[Sat Feb 28 04:56:35.558014 2026] [:error] [pid 39292:tid 39294] [client 40.89.156.16:58941] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaIFA6IAO5fN7BxyqcEH-wAAAMA"]
[Sat Feb 28 04:56:36.032775 2026] [:error] [pid 39185:tid 39247] [client 40.89.156.16:58911] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaIFBBVE-FfM89u7BQYlRQAAAIE"]
[Sat Feb 28 04:56:36.507882 2026] [:error] [pid 39185:tid 39260] [client 40.89.156.16:51861] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaIFBBVE-FfM89u7BQYlRgAAAI4"]
[Sat Feb 28 04:56:36.986350 2026] [:error] [pid 39185:tid 39249] [client 40.89.156.16:54980] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaIFBBVE-FfM89u7BQYlSgAAAIM"]
[Sat Feb 28 04:56:37.464861 2026] [:error] [pid 39185:tid 39267] [client 40.89.156.16:61980] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaIFBRVE-FfM89u7BQYlTQAAAJU"]
[Sat Feb 28 04:56:37.938157 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:51195] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaIFBWuX5e1Q32gqxH1ybAAAAQQ"]
[Sat Feb 28 04:56:38.411779 2026] [:error] [pid 39183:tid 39193] [client 40.89.156.16:62587] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaIFBhCf4HvhVePw3LZS6wAAAAE"]
[Sat Feb 28 04:56:38.884903 2026] [:error] [pid 39183:tid 39200] [client 40.89.156.16:51166] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaIFBhCf4HvhVePw3LZS7AAAAAg"]
[Sat Feb 28 04:56:39.368976 2026] [:error] [pid 39185:tid 39270] [client 40.89.156.16:55036] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaIFBxVE-FfM89u7BQYlTwAAAJg"]
[Sat Feb 28 04:56:39.849743 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:46259] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaIFBxCf4HvhVePw3LZS8AAAAAw"]
[Sat Feb 28 04:56:40.337228 2026] [:error] [pid 39185:tid 39247] [client 40.89.156.16:49507] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaIFCBVE-FfM89u7BQYlUQAAAIE"]
[Sat Feb 28 04:56:40.812410 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:55232] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dsd.php"] [unique_id "aaIFCBCf4HvhVePw3LZS9QAAAA0"]
[Sat Feb 28 04:56:41.285811 2026] [:error] [pid 39184:tid 39229] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/dsd.php
[Sat Feb 28 04:56:41.523562 2026] [:error] [pid 39184:tid 39240] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/guk.php
[Sat Feb 28 04:56:41.999527 2026] [:error] [pid 39184:tid 39232] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/ze.php
[Sat Feb 28 04:56:42.238470 2026] [:error] [pid 39184:tid 39220] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/file52.php
[Sat Feb 28 04:56:42.475716 2026] [:error] [pid 39184:tid 39222] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/tax.php
[Sat Feb 28 04:56:42.714760 2026] [:error] [pid 39184:tid 39228] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Sat Feb 28 04:56:42.952636 2026] [:error] [pid 39184:tid 39223] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Sat Feb 28 04:56:43.191854 2026] [:error] [pid 39184:tid 39242] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/brc.php
[Sat Feb 28 04:56:43.430966 2026] [:error] [pid 39184:tid 39229] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Sat Feb 28 04:56:43.670086 2026] [:error] [pid 39184:tid 39230] [client 40.89.156.16:6630] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sat Feb 28 04:56:43.905219 2026] [:error] [pid 39184:tid 39240] [client 40.89.156.16:6630] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaIFC1tZF9Zd_U7easAaqwAAAFU"]
[Sat Feb 28 04:56:44.391154 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:54991] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaIFDGuX5e1Q32gqxH1ybgAAARI"]
[Sat Feb 28 04:56:44.890536 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:49796] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaIFDKIAO5fN7BxyqcEICAAAANA"]
[Sat Feb 28 04:56:45.367842 2026] [:error] [pid 11791:tid 11796] [client 40.89.156.16:46224] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fr/ms.php"] [unique_id "aaIFDWuX5e1Q32gqxH1ycQAAAQM"]
[Sat Feb 28 04:56:45.853136 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:61178] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIFDWuX5e1Q32gqxH1ydQAAAQg"]
[Sat Feb 28 04:56:46.321948 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:54646] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIFDmuX5e1Q32gqxH1ydwAAAQo"]
[Sat Feb 28 04:56:46.792921 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:58891] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIFDmuX5e1Q32gqxH1yewAAAQw"]
[Sat Feb 28 04:56:47.289707 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:64397] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaIFDxCf4HvhVePw3LZS_QAAAAw"]
[Sat Feb 28 04:56:47.769818 2026] [:error] [pid 39184:tid 39238] [client 40.89.156.16:46217] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aaIFD1tZF9Zd_U7easAasgAAAFM"]
[Sat Feb 28 04:56:48.244941 2026] [:error] [pid 39292:tid 39308] [client 40.89.156.16:51146] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aaIFEKIAO5fN7BxyqcEICQAAAM4"]
[Sat Feb 28 04:56:48.719049 2026] [:error] [pid 39183:tid 39198] [client 40.89.156.16:61177] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aaIFEBCf4HvhVePw3LZTAQAAAAY"]
[Sat Feb 28 04:56:49.190642 2026] [:error] [pid 39183:tid 39211] [client 40.89.156.16:47962] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aaIFERCf4HvhVePw3LZTBQAAABM"]
[Sat Feb 28 04:56:49.667319 2026] [:error] [pid 39292:tid 39296] [client 40.89.156.16:47984] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aaIFEaIAO5fN7BxyqcEICgAAAMI"]
[Sat Feb 28 04:56:50.163211 2026] [:error] [pid 39183:tid 39204] [client 40.89.156.16:61326] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aaIFEhCf4HvhVePw3LZTCgAAAAw"]
[Sat Feb 28 04:56:50.634502 2026] [:error] [pid 39183:tid 39202] [client 40.89.156.16:61844] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aaIFEhCf4HvhVePw3LZTDAAAAAo"]
[Sat Feb 28 04:56:51.104232 2026] [:error] [pid 11791:tid 11796] [client 40.89.156.16:61169] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "aaIFE2uX5e1Q32gqxH1yggAAAQM"]
[Sat Feb 28 04:56:51.583280 2026] [:error] [pid 39184:tid 39231] [client 40.89.156.16:63142] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aaIFE1tZF9Zd_U7easAauQAAAEw"]
[Sat Feb 28 04:56:52.054813 2026] [:error] [pid 11791:tid 11808] [client 40.89.156.16:60331] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aaIFFGuX5e1Q32gqxH1ygwAAAQ8"]
[Sat Feb 28 04:56:52.526455 2026] [:error] [pid 11791:tid 11800] [client 40.89.156.16:51900] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aaIFFGuX5e1Q32gqxH1yhAAAAQc"]
[Sat Feb 28 04:56:52.998293 2026] [:error] [pid 39183:tid 39193] [client 40.89.156.16:49487] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "aaIFFBCf4HvhVePw3LZTFQAAAAE"]
[Sat Feb 28 04:56:53.474649 2026] [:error] [pid 11791:tid 11802] [client 40.89.156.16:58938] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rum.php"] [unique_id "aaIFFWuX5e1Q32gqxH1yhwAAAQk"]
[Sat Feb 28 04:56:53.947740 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:64400] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rum.php"] [unique_id "aaIFFaIAO5fN7BxyqcEIDwAAAME"]
[Sat Feb 28 04:56:54.418153 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:54632] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rum.php"] [unique_id "aaIFFmuX5e1Q32gqxH1yjQAAAQQ"]
[Sat Feb 28 04:56:54.891701 2026] [:error] [pid 39184:tid 39224] [client 40.89.156.16:49795] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rum.php"] [unique_id "aaIFFltZF9Zd_U7easAavQAAAEU"]
[Sat Feb 28 04:56:55.414294 2026] [:error] [pid 39184:tid 39226] [client 40.89.156.16:64386] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaIFF1tZF9Zd_U7easAavgAAAEc"]
[Sat Feb 28 04:56:55.891127 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:64428] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaIFF2uX5e1Q32gqxH1ykAAAARg"]
[Sat Feb 28 04:56:56.362067 2026] [:error] [pid 11791:tid 11796] [client 40.89.156.16:58890] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaIFGGuX5e1Q32gqxH1ykQAAAQM"]
[Sat Feb 28 04:56:56.839937 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:63143] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaIFGGuX5e1Q32gqxH1ylQAAARE"]
[Sat Feb 28 04:56:57.311821 2026] [:error] [pid 39183:tid 39211] [client 40.89.156.16:6606] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wio.php"] [unique_id "aaIFGRCf4HvhVePw3LZTGwAAABM"]
[Sat Feb 28 04:56:57.790468 2026] [:error] [pid 39183:tid 39203] [client 40.89.156.16:6640] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wio.php"] [unique_id "aaIFGRCf4HvhVePw3LZTHQAAAAs"]
[Sat Feb 28 04:56:58.259983 2026] [:error] [pid 39185:tid 39267] [client 40.89.156.16:64405] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wio.php"] [unique_id "aaIFGhVE-FfM89u7BQYlYgAAAJU"]
[Sat Feb 28 04:56:58.748638 2026] [:error] [pid 39184:tid 39243] [client 40.89.156.16:49516] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wio.php"] [unique_id "aaIFGltZF9Zd_U7easAaxQAAAFg"]
[Sat Feb 28 04:56:59.221164 2026] [:error] [pid 39185:tid 39248] [client 40.89.156.16:61962] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaIFGxVE-FfM89u7BQYlYwAAAII"]
[Sat Feb 28 04:56:59.693369 2026] [:error] [pid 39184:tid 39219] [client 40.89.156.16:60307] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaIFG1tZF9Zd_U7easAayAAAAEA"]
[Sat Feb 28 04:57:00.177408 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:61515] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaIFHKIAO5fN7BxyqcEIGQAAAM8"]
[Sat Feb 28 04:57:00.651046 2026] [:error] [pid 39184:tid 39241] [client 40.89.156.16:63128] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaIFHFtZF9Zd_U7easAaywAAAFY"]
[Sat Feb 28 04:57:01.119979 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:60582] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIFHaIAO5fN7BxyqcEIHgAAANQ"]
[Sat Feb 28 04:57:01.596088 2026] [:error] [pid 39292:tid 39301] [client 40.89.156.16:6628] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIFHaIAO5fN7BxyqcEIIQAAAMc"]
[Sat Feb 28 04:57:02.065237 2026] [:error] [pid 39184:tid 39237] [client 40.89.156.16:49825] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIFHltZF9Zd_U7easAazQAAAFI"]
[Sat Feb 28 04:57:02.585114 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:47988] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaIFHqIAO5fN7BxyqcEIJQAAANA"]
[Sat Feb 28 04:57:03.058404 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:6697] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaIFH2uX5e1Q32gqxH1ymgAAAQg"]
[Sat Feb 28 04:57:03.528512 2026] [:error] [pid 39184:tid 39242] [client 40.89.156.16:61329] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaIFH1tZF9Zd_U7easAa0gAAAFc"]
[Sat Feb 28 04:57:03.999417 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:60302] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaIFH2uX5e1Q32gqxH1ynAAAARg"]
[Sat Feb 28 04:57:04.476557 2026] [:error] [pid 11791:tid 11808] [client 40.89.156.16:54619] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaIFIGuX5e1Q32gqxH1yoAAAAQ8"]
[Sat Feb 28 04:57:04.947984 2026] [:error] [pid 39184:tid 39240] [client 40.89.156.16:60300] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaIFIFtZF9Zd_U7easAa1AAAAFU"]
[Sat Feb 28 04:57:05.418741 2026] [:error] [pid 39183:tid 39207] [client 40.89.156.16:6614] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaIFIRCf4HvhVePw3LZTJAAAAA8"]
[Sat Feb 28 04:57:05.888564 2026] [:error] [pid 39292:tid 39301] [client 40.89.156.16:60569] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaIFIaIAO5fN7BxyqcEILAAAAMc"]
[Sat Feb 28 04:57:06.362955 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:60320] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaIFImuX5e1Q32gqxH1ypgAAAQo"]
[Sat Feb 28 04:57:06.852644 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:46215] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaIFImuX5e1Q32gqxH1ypwAAAQw"]
[Sat Feb 28 04:57:07.320994 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:6415] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaIFI2uX5e1Q32gqxH1yrQAAARg"]
[Sat Feb 28 04:57:07.789483 2026] [:error] [pid 11791:tid 11808] [client 40.89.156.16:60324] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaIFI2uX5e1Q32gqxH1yrwAAAQ8"]
[Sat Feb 28 04:57:08.262051 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:54597] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaIFJGuX5e1Q32gqxH1ytAAAARE"]
[Sat Feb 28 04:57:08.732319 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:53309] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaIFJBCf4HvhVePw3LZTJwAAAA0"]
[Sat Feb 28 04:57:09.218816 2026] [:error] [pid 39184:tid 39231] [client 40.89.156.16:6449] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaIFJVtZF9Zd_U7easAa2gAAAEw"]
[Sat Feb 28 04:57:09.691849 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:47944] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaIFJaIAO5fN7BxyqcEILwAAANA"]
[Sat Feb 28 04:57:10.163781 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:52429] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaIFJqIAO5fN7BxyqcEIMgAAAMQ"]
[Sat Feb 28 04:57:10.632663 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:6460] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaIFJqIAO5fN7BxyqcEIMwAAAMw"]
[Sat Feb 28 04:57:11.114028 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:59152] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaIFJ2uX5e1Q32gqxH1yxgAAAQw"]
[Sat Feb 28 04:57:11.582416 2026] [:error] [pid 39292:tid 39300] [client 40.89.156.16:61090] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaIFJ6IAO5fN7BxyqcEINgAAAMY"]
[Sat Feb 28 04:57:12.052327 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:63228] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaIFKGuX5e1Q32gqxH1yzAAAAQo"]
[Sat Feb 28 04:57:12.522921 2026] [:error] [pid 39184:tid 39239] [client 40.89.156.16:63518] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaIFKFtZF9Zd_U7easAa3QAAAFQ"]
[Sat Feb 28 04:57:12.993436 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:54273] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaIFKGuX5e1Q32gqxH1y0gAAARI"]
[Sat Feb 28 04:57:13.465472 2026] [:error] [pid 39183:tid 39203] [client 40.89.156.16:61093] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaIFKRCf4HvhVePw3LZTLgAAAAs"]
[Sat Feb 28 04:57:13.934454 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:60394] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaIFKRVE-FfM89u7BQYlagAAAIQ"]
[Sat Feb 28 04:57:14.405646 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:49803] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaIFKmuX5e1Q32gqxH1y1QAAARM"]
[Sat Feb 28 04:57:14.875215 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:49819] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaIFKmuX5e1Q32gqxH1y2gAAARc"]
[Sat Feb 28 04:57:15.345794 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:60362] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaIFK2uX5e1Q32gqxH1y3QAAARI"]
[Sat Feb 28 04:57:15.819902 2026] [:error] [pid 39185:tid 39252] [client 40.89.156.16:64256] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaIFKxVE-FfM89u7BQYlbwAAAIY"]
[Sat Feb 28 04:57:16.307890 2026] [:error] [pid 39184:tid 39225] [client 40.89.156.16:61351] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaIFLFtZF9Zd_U7easAa4AAAAEY"]
[Sat Feb 28 04:57:16.779295 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:61111] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaIFLGuX5e1Q32gqxH1y5wAAAQ0"]
[Sat Feb 28 04:57:17.249049 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:53251] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaIFLWuX5e1Q32gqxH1y6wAAARY"]
[Sat Feb 28 04:57:17.718605 2026] [:error] [pid 39185:tid 39257] [client 40.89.156.16:64267] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaIFLRVE-FfM89u7BQYlcAAAAIs"]
[Sat Feb 28 04:57:18.200757 2026] [:error] [pid 11791:tid 11795] [client 40.89.156.16:61094] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaIFLmuX5e1Q32gqxH1y8QAAAQI"]
[Sat Feb 28 04:57:18.698471 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:63529] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaIFLmuX5e1Q32gqxH1y9AAAARE"]
[Sat Feb 28 04:57:19.172541 2026] [:error] [pid 11791:tid 11794] [client 40.89.156.16:6814] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaIFL2uX5e1Q32gqxH1y-AAAAQE"]
[Sat Feb 28 04:57:19.687796 2026] [:error] [pid 39183:tid 39207] [client 40.89.156.16:61012] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaIFLxCf4HvhVePw3LZTNAAAAA8"]
[Sat Feb 28 04:57:20.163681 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:64299] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaIFMKIAO5fN7BxyqcEIPQAAANA"]
[Sat Feb 28 04:57:20.642461 2026] [:error] [pid 39185:tid 39254] [client 40.89.156.16:61069] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaIFMBVE-FfM89u7BQYlewAAAIg"]
[Sat Feb 28 04:57:21.110825 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:64042] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaIFMaIAO5fN7BxyqcEIPwAAAMQ"]
[Sat Feb 28 04:57:21.581376 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:6829] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaIFMaIAO5fN7BxyqcEIQAAAAM0"]
[Sat Feb 28 04:57:22.051860 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:64006] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaIFMqIAO5fN7BxyqcEIQgAAANg"]
[Sat Feb 28 04:57:22.529593 2026] [:error] [pid 39292:tid 39296] [client 40.89.156.16:61011] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaIFMqIAO5fN7BxyqcEIRAAAAMI"]
[Sat Feb 28 04:57:23.001930 2026] [:error] [pid 39183:tid 39202] [client 40.89.156.16:6787] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaIFMxCf4HvhVePw3LZTOAAAAAo"]
[Sat Feb 28 04:57:23.472439 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:61104] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaIFM2uX5e1Q32gqxH1zCQAAARQ"]
[Sat Feb 28 04:57:23.944454 2026] [:error] [pid 39183:tid 39216] [client 40.89.156.16:54605] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaIFMxCf4HvhVePw3LZTPgAAABg"]
[Sat Feb 28 04:57:24.424622 2026] [:error] [pid 39183:tid 39206] [client 40.89.156.16:51872] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaIFNBCf4HvhVePw3LZTQQAAAA4"]
[Sat Feb 28 04:57:24.896838 2026] [:error] [pid 39183:tid 39201] [client 40.89.156.16:61098] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaIFNBCf4HvhVePw3LZTRgAAAAk"]
[Sat Feb 28 04:57:25.369113 2026] [:error] [pid 39292:tid 39305] [client 40.89.156.16:51862] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaIFNaIAO5fN7BxyqcEISgAAAMs"]
[Sat Feb 28 04:57:25.845734 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:61206] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaIFNWuX5e1Q32gqxH1zDwAAAQg"]
[Sat Feb 28 04:57:26.317813 2026] [:error] [pid 39292:tid 39294] [client 40.89.156.16:64264] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaIFNqIAO5fN7BxyqcEIUAAAAMA"]
[Sat Feb 28 04:57:26.787610 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:61312] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaIFNqIAO5fN7BxyqcEIVgAAAMw"]
[Sat Feb 28 04:57:27.260768 2026] [:error] [pid 39184:tid 39223] [client 40.89.156.16:49831] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaIFN1tZF9Zd_U7easAa5AAAAEQ"]
[Sat Feb 28 04:57:27.736992 2026] [:error] [pid 39184:tid 39236] [client 40.89.156.16:63515] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaIFN1tZF9Zd_U7easAa5QAAAFE"]
[Sat Feb 28 04:57:28.226876 2026] [:error] [pid 39185:tid 39256] [client 40.89.156.16:56981] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaIFOBVE-FfM89u7BQYlmgAAAIo"]
[Sat Feb 28 04:57:28.697919 2026] [:error] [pid 39184:tid 39220] [client 40.89.156.16:46259] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaIFOFtZF9Zd_U7easAa5wAAAEE"]
[Sat Feb 28 04:57:29.178803 2026] [:error] [pid 39292:tid 39299] [client 40.89.156.16:63872] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaIFOaIAO5fN7BxyqcEIZAAAAMU"]
[Sat Feb 28 04:57:29.660746 2026] [:error] [pid 39184:tid 39243] [client 40.89.156.16:49579] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaIFOVtZF9Zd_U7easAa6QAAAFg"]
[Sat Feb 28 04:57:30.134673 2026] [:error] [pid 39184:tid 39232] [client 40.89.156.16:54454] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaIFOltZF9Zd_U7easAa7AAAAE0"]
[Sat Feb 28 04:57:30.612505 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:63880] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaIFOqIAO5fN7BxyqcEIbgAAANQ"]
[Sat Feb 28 04:57:31.081923 2026] [:error] [pid 39184:tid 39230] [client 40.89.156.16:58452] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaIFO1tZF9Zd_U7easAa7wAAAEs"]
[Sat Feb 28 04:57:31.585703 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:56003] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaIFO2uX5e1Q32gqxH1zIwAAAQ0"]
[Sat Feb 28 04:57:32.059587 2026] [:error] [pid 39292:tid 39299] [client 40.89.156.16:58024] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaIFPKIAO5fN7BxyqcEIdQAAAMU"]
[Sat Feb 28 04:57:32.529734 2026] [:error] [pid 39185:tid 39270] [client 40.89.156.16:64492] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaIFPBVE-FfM89u7BQYlngAAAJg"]
[Sat Feb 28 04:57:33.002749 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:62961] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaIFPWuX5e1Q32gqxH1zKQAAARI"]
[Sat Feb 28 04:57:33.497110 2026] [:error] [pid 39185:tid 39266] [client 40.89.156.16:64461] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaIFPRVE-FfM89u7BQYloAAAAJQ"]
[Sat Feb 28 04:57:33.965817 2026] [:error] [pid 39183:tid 39199] [client 40.89.156.16:52120] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaIFPRCf4HvhVePw3LZTWAAAAAc"]
[Sat Feb 28 04:57:34.472001 2026] [:error] [pid 39292:tid 39300] [client 40.89.156.16:61275] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaIFPqIAO5fN7BxyqcEIfgAAAMY"]
[Sat Feb 28 04:57:34.949193 2026] [:error] [pid 11791:tid 11795] [client 40.89.156.16:58483] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaIFPmuX5e1Q32gqxH1zNwAAAQI"]
[Sat Feb 28 04:57:35.426226 2026] [:error] [pid 39183:tid 39212] [client 40.89.156.16:58016] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaIFPxCf4HvhVePw3LZTWgAAABQ"]
[Sat Feb 28 04:57:35.912069 2026] [:error] [pid 39185:tid 39261] [client 40.89.156.16:64489] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaIFPxVE-FfM89u7BQYlpwAAAI8"]
[Sat Feb 28 04:57:36.387126 2026] [:error] [pid 39292:tid 39305] [client 40.89.156.16:54761] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaIFQKIAO5fN7BxyqcEIhQAAAMs"]
[Sat Feb 28 04:57:36.858455 2026] [:error] [pid 11791:tid 11796] [client 40.89.156.16:64511] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaIFQGuX5e1Q32gqxH1zQgAAAQM"]
[Sat Feb 28 04:57:37.338165 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:59262] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaIFQWuX5e1Q32gqxH1zRAAAARQ"]
[Sat Feb 28 04:57:37.820068 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:59228] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaIFQWuX5e1Q32gqxH1zRgAAARY"]
[Sat Feb 28 04:57:38.297770 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:64494] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaIFQhCf4HvhVePw3LZTYgAAAA0"]
[Sat Feb 28 04:57:38.768215 2026] [:error] [pid 39184:tid 39237] [client 40.89.156.16:6213] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaIFQltZF9Zd_U7easAa9AAAAFI"]
[Sat Feb 28 04:57:39.252128 2026] [:error] [pid 39185:tid 39267] [client 40.89.156.16:64606] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaIFQxVE-FfM89u7BQYlqgAAAJU"]
[Sat Feb 28 04:57:39.720849 2026] [:error] [pid 39185:tid 39260] [client 40.89.156.16:6742] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaIFQxVE-FfM89u7BQYlrQAAAI4"]
[Sat Feb 28 04:57:40.195328 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:53022] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaIFRKIAO5fN7BxyqcEIkQAAAM8"]
[Sat Feb 28 04:57:40.666017 2026] [:error] [pid 39185:tid 39258] [client 40.89.156.16:53859] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaIFRBVE-FfM89u7BQYlsAAAAIw"]
[Sat Feb 28 04:57:41.145428 2026] [:error] [pid 11791:tid 11802] [client 40.89.156.16:64565] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaIFRWuX5e1Q32gqxH1zVgAAAQk"]
[Sat Feb 28 04:57:41.614426 2026] [:error] [pid 39184:tid 39233] [client 40.89.156.16:58736] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaIFRVtZF9Zd_U7easAa9wAAAE4"]
[Sat Feb 28 04:57:42.107592 2026] [:error] [pid 39184:tid 39227] [client 40.89.156.16:6736] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaIFRltZF9Zd_U7easAa-gAAAEg"]
[Sat Feb 28 04:57:42.584657 2026] [:error] [pid 11791:tid 11801] [client 40.89.156.16:57998] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaIFRmuX5e1Q32gqxH1zXQAAAQg"]
[Sat Feb 28 04:57:43.065405 2026] [:error] [pid 11791:tid 11809] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sat Feb 28 04:57:43.307236 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Sat Feb 28 04:57:43.544840 2026] [:error] [pid 11791:tid 11804] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/nhr.php
[Sat Feb 28 04:57:43.784906 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sat Feb 28 04:57:44.024235 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/ws79.php
[Sat Feb 28 04:57:44.263123 2026] [:error] [pid 11791:tid 11799] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/1061.php
[Sat Feb 28 04:57:44.504332 2026] [:error] [pid 11791:tid 11802] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq13.php
[Sat Feb 28 04:57:44.753739 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Sat Feb 28 04:57:44.994978 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/05.php
[Sat Feb 28 04:57:45.234653 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Sat Feb 28 04:57:45.475999 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:6997] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat Feb 28 04:57:45.713083 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:6997] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaIFSWuX5e1Q32gqxH1zdgAAARE"]
[Sat Feb 28 04:57:46.182258 2026] [:error] [pid 11791:tid 11793] [client 40.89.156.16:61438] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaIFSmuX5e1Q32gqxH1zeQAAAQA"]
[Sat Feb 28 04:57:46.654804 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:57768] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaIFSmuX5e1Q32gqxH1zewAAARQ"]
[Sat Feb 28 04:57:47.124339 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:53060] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aaIFS2uX5e1Q32gqxH1zfwAAARI"]
[Sat Feb 28 04:57:47.596603 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:48048] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aaIFS2uX5e1Q32gqxH1zgwAAARY"]
[Sat Feb 28 04:57:48.065527 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:62640] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aaIFTKIAO5fN7BxyqcEIpwAAANA"]
[Sat Feb 28 04:57:48.536043 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:51561] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aaIFTGuX5e1Q32gqxH1zhwAAAQw"]
[Sat Feb 28 04:57:49.009536 2026] [:error] [pid 39185:tid 39268] [client 40.89.156.16:51554] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aaIFTRVE-FfM89u7BQYltwAAAJY"]
[Sat Feb 28 04:57:49.494932 2026] [:error] [pid 39292:tid 39313] [client 40.89.156.16:51577] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "aaIFTaIAO5fN7BxyqcEIrAAAANM"]
[Sat Feb 28 04:57:49.967835 2026] [:error] [pid 39292:tid 39308] [client 40.89.156.16:6149] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "aaIFTaIAO5fN7BxyqcEIrgAAAM4"]
[Sat Feb 28 04:57:50.436897 2026] [:error] [pid 11791:tid 11799] [client 40.89.156.16:6366] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "aaIFTmuX5e1Q32gqxH1zigAAAQY"]
[Sat Feb 28 04:57:50.916080 2026] [:error] [pid 39184:tid 39233] [client 40.89.156.16:63870] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "aaIFTltZF9Zd_U7easAbBwAAAE4"]
[Sat Feb 28 04:57:51.385777 2026] [:error] [pid 11791:tid 11804] [client 40.89.156.16:63379] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmy.php"] [unique_id "aaIFT2uX5e1Q32gqxH1ziwAAAQs"]
[Sat Feb 28 04:57:51.862307 2026] [:error] [pid 39185:tid 39257] [client 40.89.156.16:48047] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmy.php"] [unique_id "aaIFTxVE-FfM89u7BQYlwwAAAIs"]
[Sat Feb 28 04:57:52.376605 2026] [:error] [pid 39292:tid 39315] [client 40.89.156.16:48012] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmy.php"] [unique_id "aaIFUKIAO5fN7BxyqcEItwAAANU"]
[Sat Feb 28 04:57:52.884401 2026] [:error] [pid 39185:tid 39259] [client 40.89.156.16:47569] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmy.php"] [unique_id "aaIFUBVE-FfM89u7BQYlxQAAAI0"]
[Sat Feb 28 04:57:53.359497 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:6381] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fun.php"] [unique_id "aaIFUaIAO5fN7BxyqcEIvgAAAMQ"]
[Sat Feb 28 04:57:53.829968 2026] [:error] [pid 39185:tid 39268] [client 40.89.156.16:49127] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fun.php"] [unique_id "aaIFURVE-FfM89u7BQYlzAAAAJY"]
[Sat Feb 28 04:57:54.301677 2026] [:error] [pid 39184:tid 39226] [client 40.89.156.16:57796] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fun.php"] [unique_id "aaIFUltZF9Zd_U7easAbCQAAAEc"]
[Sat Feb 28 04:57:54.770023 2026] [:error] [pid 39292:tid 39300] [client 40.89.156.16:6356] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fun.php"] [unique_id "aaIFUqIAO5fN7BxyqcEIxAAAAMY"]
[Sat Feb 28 04:57:55.239310 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:62755] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaIFUxCf4HvhVePw3LZTcAAAAA0"]
[Sat Feb 28 04:57:55.707329 2026] [:error] [pid 39292:tid 39301] [client 40.89.156.16:53529] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaIFU6IAO5fN7BxyqcEIyQAAAMc"]
[Sat Feb 28 04:57:56.181206 2026] [:error] [pid 39185:tid 39257] [client 40.89.156.16:62834] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaIFVBVE-FfM89u7BQYl1AAAAIs"]
[Sat Feb 28 04:57:56.658066 2026] [:error] [pid 39292:tid 39294] [client 40.89.156.16:49161] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaIFVKIAO5fN7BxyqcEIzQAAAMA"]
[Sat Feb 28 04:57:57.140661 2026] [:error] [pid 39185:tid 39254] [client 40.89.156.16:61582] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaIFVRVE-FfM89u7BQYl1gAAAIg"]
[Sat Feb 28 04:57:57.610194 2026] [:error] [pid 39292:tid 39313] [client 40.89.156.16:53545] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaIFVaIAO5fN7BxyqcEI0QAAANM"]
[Sat Feb 28 04:57:58.187506 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:62755] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaIFVhVE-FfM89u7BQYl3AAAAIQ"]
[Sat Feb 28 04:57:58.658365 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:63474] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaIFVqIAO5fN7BxyqcEI1gAAANc"]
[Sat Feb 28 04:57:59.129154 2026] [:error] [pid 39184:tid 39243] [client 40.89.156.16:64577] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaIFV1tZF9Zd_U7easAbCwAAAFg"]
[Sat Feb 28 04:57:59.611220 2026] [:error] [pid 39292:tid 39297] [client 40.89.156.16:51082] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaIFV6IAO5fN7BxyqcEI2wAAAMM"]
[Sat Feb 28 04:58:00.094700 2026] [:error] [pid 39185:tid 39264] [client 40.89.156.16:46155] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaIFWBVE-FfM89u7BQYl4wAAAJI"]
[Sat Feb 28 04:58:00.581315 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:53566] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaIFWGuX5e1Q32gqxH1zlQAAAQw"]
[Sat Feb 28 04:58:01.087213 2026] [:error] [pid 11791:tid 11799] [client 40.89.156.16:54542] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaIFWWuX5e1Q32gqxH1zmQAAAQY"]
[Sat Feb 28 04:58:01.564324 2026] [:error] [pid 39185:tid 39269] [client 40.89.156.16:51102] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaIFWRVE-FfM89u7BQYl5QAAAJc"]
[Sat Feb 28 04:58:02.039504 2026] [:error] [pid 39184:tid 39242] [client 40.89.156.16:62749] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaIFWltZF9Zd_U7easAbDQAAAFc"]
[Sat Feb 28 04:58:02.512624 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:6548] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaIFWmuX5e1Q32gqxH1zpAAAARg"]
[Sat Feb 28 04:58:02.996475 2026] [:error] [pid 39185:tid 39254] [client 40.89.156.16:53553] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIFWhVE-FfM89u7BQYl6QAAAIg"]
[Sat Feb 28 04:58:03.469923 2026] [:error] [pid 39185:tid 39270] [client 40.89.156.16:46188] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIFWxVE-FfM89u7BQYl7QAAAJg"]
[Sat Feb 28 04:58:03.964433 2026] [:error] [pid 39292:tid 39315] [client 40.89.156.16:63431] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIFW6IAO5fN7BxyqcEI6gAAANU"]
[Sat Feb 28 04:58:04.441484 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:48739] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaIFXKIAO5fN7BxyqcEI7QAAAMQ"]
[Sat Feb 28 04:58:04.910594 2026] [:error] [pid 11791:tid 11814] [client 40.89.156.16:57841] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaIFXGuX5e1Q32gqxH1zrQAAARU"]
[Sat Feb 28 04:58:05.382965 2026] [:error] [pid 39185:tid 39267] [client 40.89.156.16:63393] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaIFXRVE-FfM89u7BQYl8wAAAJU"]
[Sat Feb 28 04:58:05.851531 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:57852] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaIFXaIAO5fN7BxyqcEI-AAAANc"]
[Sat Feb 28 04:58:06.325608 2026] [:error] [pid 39185:tid 39248] [client 40.89.156.16:54055] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaIFXhVE-FfM89u7BQYl9wAAAII"]
[Sat Feb 28 04:58:06.794663 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:53546] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaIFXqIAO5fN7BxyqcEI_wAAANQ"]
[Sat Feb 28 04:58:07.267800 2026] [:error] [pid 39292:tid 39305] [client 40.89.156.16:62782] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaIFX6IAO5fN7BxyqcEJAQAAAMs"]
[Sat Feb 28 04:58:07.763470 2026] [:error] [pid 39292:tid 39301] [client 40.89.156.16:51123] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaIFX6IAO5fN7BxyqcEJCgAAAMc"]
[Sat Feb 28 04:58:08.238187 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:50788] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaIFYKIAO5fN7BxyqcEJDAAAAMQ"]
[Sat Feb 28 04:58:08.713811 2026] [:error] [pid 39185:tid 39256] [client 40.89.156.16:50785] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaIFYBVE-FfM89u7BQYmBAAAAIo"]
[Sat Feb 28 04:58:09.188423 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:54025] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaIFYRVE-FfM89u7BQYmCAAAAIQ"]
[Sat Feb 28 04:58:09.657526 2026] [:error] [pid 39185:tid 39254] [client 40.89.156.16:63469] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaIFYRVE-FfM89u7BQYmDgAAAIg"]
[Sat Feb 28 04:58:10.133019 2026] [:error] [pid 11791:tid 11795] [client 40.89.156.16:63364] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaIFYmuX5e1Q32gqxH1ztAAAAQI"]
[Sat Feb 28 04:58:10.623926 2026] [:error] [pid 39183:tid 39199] [client 40.89.156.16:63384] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaIFYhCf4HvhVePw3LZTeAAAAAc"]
[Sat Feb 28 04:58:11.096997 2026] [:error] [pid 39184:tid 39222] [client 40.89.156.16:62724] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaIFY1tZF9Zd_U7easAbGAAAAEM"]
[Sat Feb 28 04:58:11.582907 2026] [:error] [pid 11791:tid 11808] [client 40.89.156.16:62767] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaIFY2uX5e1Q32gqxH1zvQAAAQ8"]
[Sat Feb 28 04:58:12.093272 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:53564] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaIFZGuX5e1Q32gqxH1zwwAAAQw"]
[Sat Feb 28 04:58:12.562953 2026] [:error] [pid 39292:tid 39311] [client 40.89.156.16:64616] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaIFZKIAO5fN7BxyqcEJGAAAANE"]
[Sat Feb 28 04:58:13.039487 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:62016] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaIFZWuX5e1Q32gqxH1zyAAAARY"]
[Sat Feb 28 04:58:13.579536 2026] [:error] [pid 39292:tid 39305] [client 40.89.156.16:54384] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaIFZaIAO5fN7BxyqcEJHwAAAMs"]
[Sat Feb 28 04:58:14.057733 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:50767] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaIFZqIAO5fN7BxyqcEJIAAAANQ"]
[Sat Feb 28 04:58:14.529367 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:63482] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFZqIAO5fN7BxyqcEJJAAAAMw"]
[Sat Feb 28 04:58:14.998799 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:47384] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFZqIAO5fN7BxyqcEJJQAAANg"]
[Sat Feb 28 04:58:15.517339 2026] [:error] [pid 39184:tid 39243] [client 40.89.156.16:57814] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFZ1tZF9Zd_U7easAbHgAAAFg"]
[Sat Feb 28 04:58:16.025841 2026] [:error] [pid 11791:tid 11795] [client 40.89.156.16:51078] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFaGuX5e1Q32gqxH1z1wAAAQI"]
[Sat Feb 28 04:58:16.518317 2026] [:error] [pid 11791:tid 11799] [client 40.89.156.16:64598] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaIFaGuX5e1Q32gqxH1z4AAAAQY"]
[Sat Feb 28 04:58:17.031613 2026] [:error] [pid 39292:tid 39299] [client 40.89.156.16:6529] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaIFaaIAO5fN7BxyqcEJLAAAAMU"]
[Sat Feb 28 04:58:17.500469 2026] [:error] [pid 39292:tid 39304] [client 40.89.156.16:63484] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaIFaaIAO5fN7BxyqcEJMQAAAMo"]
[Sat Feb 28 04:58:17.968704 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:62841] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaIFaaIAO5fN7BxyqcEJNAAAAM0"]
[Sat Feb 28 04:58:18.441075 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:49088] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaIFamuX5e1Q32gqxH1z7wAAARI"]
[Sat Feb 28 04:58:18.915978 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:49115] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaIFamuX5e1Q32gqxH1z8wAAAQ0"]
[Sat Feb 28 04:58:19.391044 2026] [:error] [pid 39185:tid 39254] [client 40.89.156.16:61820] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaIFaxVE-FfM89u7BQYmGgAAAIg"]
[Sat Feb 28 04:58:19.890199 2026] [:error] [pid 39184:tid 39219] [client 40.89.156.16:6336] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaIFa1tZF9Zd_U7easAbJAAAAEA"]
[Sat Feb 28 04:58:20.390641 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:63439] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaIFbGuX5e1Q32gqxH10AAAAARI"]
[Sat Feb 28 04:58:20.892300 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:61767] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaIFbBCf4HvhVePw3LZTfwAAAA0"]
[Sat Feb 28 04:58:21.363494 2026] [:error] [pid 39183:tid 39197] [client 40.89.156.16:55942] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaIFbRCf4HvhVePw3LZTggAAAAU"]
[Sat Feb 28 04:58:21.860412 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:62609] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaIFbWuX5e1Q32gqxH10DgAAAQ4"]
[Sat Feb 28 04:58:22.348567 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:62737] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaIFbmuX5e1Q32gqxH10GQAAAQw"]
[Sat Feb 28 04:58:22.843703 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:62788] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaIFbmuX5e1Q32gqxH10IAAAARM"]
[Sat Feb 28 04:58:23.330990 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:61614] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaIFb2uX5e1Q32gqxH10JQAAAQ4"]
[Sat Feb 28 04:58:23.799008 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:63824] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaIFb2uX5e1Q32gqxH10KQAAARQ"]
[Sat Feb 28 04:58:24.279188 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:47611] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaIFcKIAO5fN7BxyqcEJSwAAAME"]
[Sat Feb 28 04:58:24.749344 2026] [:error] [pid 39184:tid 39232] [client 40.89.156.16:53525] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaIFcFtZF9Zd_U7easAbLgAAAE0"]
[Sat Feb 28 04:58:25.221342 2026] [:error] [pid 39183:tid 39195] [client 40.89.156.16:61573] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaIFcRCf4HvhVePw3LZTkwAAAAM"]
[Sat Feb 28 04:58:25.691042 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:49091] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaIFcWuX5e1Q32gqxH10OgAAARQ"]
[Sat Feb 28 04:58:26.160920 2026] [:error] [pid 39185:tid 39258] [client 40.89.156.16:57732] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaIFchVE-FfM89u7BQYmPAAAAIw"]
[Sat Feb 28 04:58:26.639620 2026] [:error] [pid 39292:tid 39313] [client 40.89.156.16:60457] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaIFcqIAO5fN7BxyqcEJWAAAANM"]
[Sat Feb 28 04:58:27.119187 2026] [:error] [pid 39185:tid 39249] [client 40.89.156.16:47596] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaIFcxVE-FfM89u7BQYmQwAAAIM"]
[Sat Feb 28 04:58:27.596105 2026] [:error] [pid 39292:tid 39299] [client 40.89.156.16:64299] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaIFc6IAO5fN7BxyqcEJXwAAAMU"]
[Sat Feb 28 04:58:28.065503 2026] [:error] [pid 11791:tid 11807] [client 40.89.156.16:6154] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaIFdGuX5e1Q32gqxH10SgAAAQ4"]
[Sat Feb 28 04:58:28.549257 2026] [:error] [pid 11791:tid 11814] [client 40.89.156.16:53114] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaIFdGuX5e1Q32gqxH10UAAAARU"]
[Sat Feb 28 04:58:29.017899 2026] [:error] [pid 11791:tid 11796] [client 40.89.156.16:51560] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaIFdWuX5e1Q32gqxH10WAAAAQM"]
[Sat Feb 28 04:58:29.493723 2026] [:error] [pid 11791:tid 11793] [client 40.89.156.16:55375] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaIFdWuX5e1Q32gqxH10XAAAAQA"]
[Sat Feb 28 04:58:29.996004 2026] [:error] [pid 11791:tid 11814] [client 40.89.156.16:58714] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFdWuX5e1Q32gqxH10YQAAARU"]
[Sat Feb 28 04:58:30.470695 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:48004] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFdqIAO5fN7BxyqcEJaAAAAM0"]
[Sat Feb 28 04:58:30.974700 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:61377] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFdmuX5e1Q32gqxH10ZgAAARY"]
[Sat Feb 28 04:58:31.443488 2026] [:error] [pid 11791:tid 11794] [client 40.89.156.16:61430] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaIFd2uX5e1Q32gqxH10aQAAAQE"]
[Sat Feb 28 04:58:31.954513 2026] [:error] [pid 39185:tid 39262] [client 40.89.156.16:63142] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaIFdxVE-FfM89u7BQYmYAAAAJA"]
[Sat Feb 28 04:58:32.433204 2026] [:error] [pid 39185:tid 39256] [client 40.89.156.16:57741] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaIFeBVE-FfM89u7BQYmZwAAAIo"]
[Sat Feb 28 04:58:32.909994 2026] [:error] [pid 11791:tid 11802] [client 40.89.156.16:7073] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaIFeGuX5e1Q32gqxH10cAAAAQk"]
[Sat Feb 28 04:58:33.379011 2026] [:error] [pid 39185:tid 39249] [client 40.89.156.16:54087] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaIFeRVE-FfM89u7BQYmcAAAAIM"]
[Sat Feb 28 04:58:33.850953 2026] [:error] [pid 11791:tid 11812] [client 40.89.156.16:62496] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaIFeWuX5e1Q32gqxH10cgAAARM"]
[Sat Feb 28 04:58:34.331615 2026] [:error] [pid 39184:tid 39232] [client 40.89.156.16:61416] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaIFeltZF9Zd_U7easAbQAAAAE0"]
[Sat Feb 28 04:58:34.806264 2026] [:error] [pid 39183:tid 39215] [client 40.89.156.16:64571] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaIFehCf4HvhVePw3LZTpQAAABc"]
[Sat Feb 28 04:58:35.276987 2026] [:error] [pid 11791:tid 11800] [client 40.89.156.16:53849] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaIFe2uX5e1Q32gqxH10egAAAQc"]
[Sat Feb 28 04:58:35.752379 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:50553] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaIFexVE-FfM89u7BQYmfgAAAIQ"]
[Sat Feb 28 04:58:36.223244 2026] [:error] [pid 39183:tid 39208] [client 40.89.156.16:60430] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaIFfBCf4HvhVePw3LZTqwAAABA"]
[Sat Feb 28 04:58:36.728169 2026] [:error] [pid 11791:tid 11803] [client 40.89.156.16:54582] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaIFfGuX5e1Q32gqxH10gQAAAQo"]
[Sat Feb 28 04:58:37.205148 2026] [:error] [pid 39183:tid 39196] [client 40.89.156.16:6767] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaIFfRCf4HvhVePw3LZTrgAAAAQ"]
[Sat Feb 28 04:58:37.688979 2026] [:error] [pid 39185:tid 39258] [client 40.89.156.16:60919] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaIFfRVE-FfM89u7BQYmkQAAAIw"]
[Sat Feb 28 04:58:38.177144 2026] [:error] [pid 39183:tid 39205] [client 40.89.156.16:50106] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaIFfhCf4HvhVePw3LZTsQAAAA0"]
[Sat Feb 28 04:58:38.648344 2026] [:error] [pid 39183:tid 39215] [client 40.89.156.16:7054] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaIFfhCf4HvhVePw3LZTtAAAABc"]
[Sat Feb 28 04:58:39.119406 2026] [:error] [pid 11791:tid 11798] [client 40.89.156.16:6983] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaIFf2uX5e1Q32gqxH10kgAAAQU"]
[Sat Feb 28 04:58:39.597018 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:46617] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaIFf2uX5e1Q32gqxH10mAAAAQw"]
[Sat Feb 28 04:58:40.066627 2026] [:error] [pid 11791:tid 11798] [client 40.89.156.16:59201] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaIFgGuX5e1Q32gqxH10oAAAAQU"]
[Sat Feb 28 04:58:40.535592 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:6749] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaIFgBVE-FfM89u7BQYmpwAAAIQ"]
[Sat Feb 28 04:58:41.005055 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:56197] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaIFgaIAO5fN7BxyqcEJjwAAAM0"]
[Sat Feb 28 04:58:41.476412 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:60474] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaIFgaIAO5fN7BxyqcEJkgAAANA"]
[Sat Feb 28 04:58:41.948954 2026] [:error] [pid 39183:tid 39199] [client 40.89.156.16:64544] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaIFgRCf4HvhVePw3LZTvQAAAAc"]
[Sat Feb 28 04:58:42.421019 2026] [:error] [pid 39183:tid 39201] [client 40.89.156.16:50509] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaIFghCf4HvhVePw3LZTvwAAAAk"]
[Sat Feb 28 04:58:42.892527 2026] [:error] [pid 39184:tid 39241] [client 40.89.156.16:7092] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaIFgltZF9Zd_U7easAbTAAAAFY"]
[Sat Feb 28 04:58:43.363572 2026] [:error] [pid 11791:tid 11810] [client 40.89.156.16:50075] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaIFg2uX5e1Q32gqxH10rwAAARE"]
[Sat Feb 28 04:58:43.833081 2026] [:error] [pid 11791:tid 11816] [client 40.89.156.16:46568] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaIFg2uX5e1Q32gqxH10uQAAARc"]
[Sat Feb 28 04:58:44.302403 2026] [:error] [pid 11791:tid 11811] [client 40.89.156.16:46624] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaIFhGuX5e1Q32gqxH10wQAAARI"]
[Sat Feb 28 04:58:44.772613 2026] [:error] [pid 11791:tid 11813] [client 40.89.156.16:6760] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaIFhGuX5e1Q32gqxH10zgAAARQ"]
[Sat Feb 28 04:58:45.253311 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Feb 28 04:58:45.490511 2026] [:error] [pid 39292:tid 39314] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Feb 28 04:58:45.727586 2026] [:error] [pid 39292:tid 39309] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/gec.php
[Sat Feb 28 04:58:45.964432 2026] [:error] [pid 39292:tid 39304] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/sxdfrt.php
[Sat Feb 28 04:58:46.201682 2026] [:error] [pid 39292:tid 39298] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sat Feb 28 04:58:46.439044 2026] [:error] [pid 39292:tid 39317] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Sat Feb 28 04:58:46.676531 2026] [:error] [pid 39292:tid 39318] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Feb 28 04:58:46.914629 2026] [:error] [pid 39292:tid 39299] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/ocxla.php
[Sat Feb 28 04:58:47.151397 2026] [:error] [pid 39292:tid 39307] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/god.php
[Sat Feb 28 04:58:47.388660 2026] [:error] [pid 39292:tid 39311] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat Feb 28 04:58:47.626103 2026] [:error] [pid 39292:tid 39300] [client 40.89.156.16:6332] File does not exist: /usr/local/apache/htdocs/suspended-page/zz.php
[Sat Feb 28 04:58:47.860147 2026] [:error] [pid 39292:tid 39310] [client 40.89.156.16:6332] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaIFh6IAO5fN7BxyqcEJowAAANA"]
[Sat Feb 28 04:58:48.348363 2026] [:error] [pid 11791:tid 11794] [client 40.89.156.16:46571] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaIFiGuX5e1Q32gqxH10_wAAAQE"]
[Sat Feb 28 04:58:48.825895 2026] [:error] [pid 39185:tid 39247] [client 40.89.156.16:64490] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaIFiBVE-FfM89u7BQYmtgAAAIE"]
[Sat Feb 28 04:58:49.300058 2026] [:error] [pid 11791:tid 11800] [client 40.89.156.16:64471] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaIFiWuX5e1Q32gqxH11DwAAAQc"]
[Sat Feb 28 04:58:49.770257 2026] [:error] [pid 39185:tid 39251] [client 40.89.156.16:54418] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sdsa.php"] [unique_id "aaIFiRVE-FfM89u7BQYmuQAAAIU"]
[Sat Feb 28 04:58:50.243895 2026] [:error] [pid 39185:tid 39269] [client 40.89.156.16:58468] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sdsa.php"] [unique_id "aaIFihVE-FfM89u7BQYmwAAAAJc"]
[Sat Feb 28 04:58:50.715579 2026] [:error] [pid 39292:tid 39295] [client 40.89.156.16:46878] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sdsa.php"] [unique_id "aaIFiqIAO5fN7BxyqcEJpgAAAME"]
[Sat Feb 28 04:58:51.191600 2026] [:error] [pid 39292:tid 39303] [client 40.89.156.16:47156] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sdsa.php"] [unique_id "aaIFi6IAO5fN7BxyqcEJqwAAAMk"]
[Sat Feb 28 04:58:51.661256 2026] [:error] [pid 39292:tid 39313] [client 40.89.156.16:63876] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaIFi6IAO5fN7BxyqcEJrQAAANM"]
[Sat Feb 28 04:58:52.128933 2026] [:error] [pid 11791:tid 11817] [client 40.89.156.16:54458] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaIFjGuX5e1Q32gqxH11KAAAARg"]
[Sat Feb 28 04:58:52.601317 2026] [:error] [pid 39184:tid 39231] [client 40.89.156.16:58488] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaIFjFtZF9Zd_U7easAbUwAAAEw"]
[Sat Feb 28 04:58:53.075436 2026] [:error] [pid 39184:tid 39224] [client 40.89.156.16:52684] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaIFjVtZF9Zd_U7easAbVAAAAEU"]
[Sat Feb 28 04:58:53.543803 2026] [:error] [pid 11791:tid 11815] [client 40.89.156.16:49812] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaIFjWuX5e1Q32gqxH11MQAAARY"]
[Sat Feb 28 04:58:54.012813 2026] [:error] [pid 11791:tid 11806] [client 40.89.156.16:46868] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaIFjmuX5e1Q32gqxH11NQAAAQ0"]
[Sat Feb 28 04:58:54.489936 2026] [:error] [pid 11791:tid 11805] [client 40.89.156.16:61287] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaIFjmuX5e1Q32gqxH11OgAAAQw"]
[Sat Feb 28 04:58:54.958091 2026] [:error] [pid 39185:tid 39250] [client 40.89.156.16:53329] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaIFjhVE-FfM89u7BQYmxwAAAIQ"]
[Sat Feb 28 04:58:55.426447 2026] [:error] [pid 39184:tid 39223] [client 40.89.156.16:58961] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaIFj1tZF9Zd_U7easAbXgAAAEQ"]
[Sat Feb 28 04:58:55.898262 2026] [:error] [pid 39185:tid 39256] [client 40.89.156.16:61249] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaIFjxVE-FfM89u7BQYmyQAAAIo"]
[Sat Feb 28 04:58:56.369417 2026] [:error] [pid 39184:tid 39238] [client 40.89.156.16:64378] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaIFkFtZF9Zd_U7easAbYwAAAFM"]
[Sat Feb 28 04:58:56.842144 2026] [:error] [pid 39185:tid 39254] [client 40.89.156.16:56008] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaIFkBVE-FfM89u7BQYmzwAAAIg"]
[Sat Feb 28 04:58:57.316084 2026] [:error] [pid 39184:tid 39243] [client 40.89.156.16:56021] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaIFkVtZF9Zd_U7easAbZgAAAFg"]
[Sat Feb 28 04:58:57.784266 2026] [:error] [pid 39184:tid 39231] [client 40.89.156.16:53358] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaIFkVtZF9Zd_U7easAbZwAAAEw"]
[Sat Feb 28 04:58:58.256409 2026] [:error] [pid 11791:tid 11799] [client 40.89.156.16:49548] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaIFkmuX5e1Q32gqxH11YAAAAQY"]
[Sat Feb 28 04:58:58.724968 2026] [:error] [pid 11791:tid 11797] [client 40.89.156.16:53322] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaIFkmuX5e1Q32gqxH11aAAAAQQ"]
[Sat Feb 28 04:58:59.193786 2026] [:error] [pid 39185:tid 39255] [client 40.89.156.16:51210] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaIFkxVE-FfM89u7BQYm1QAAAIk"]
[Sat Feb 28 04:58:59.664220 2026] [:error] [pid 39292:tid 39299] [client 40.89.156.16:63889] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaIFk6IAO5fN7BxyqcEJwgAAAMU"]
[Sat Feb 28 04:59:00.132756 2026] [:error] [pid 39292:tid 39316] [client 40.89.156.16:52148] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaIFlKIAO5fN7BxyqcEJxwAAANY"]
[Sat Feb 28 04:59:00.601131 2026] [:error] [pid 39292:tid 39306] [client 40.89.156.16:51239] [client 40.89.156.16] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaIFlKIAO5fN7BxyqcEJygAAAMw"]
[Sat Feb 28 05:14:14.834503 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/yo.php
[Sat Feb 28 05:14:15.043257 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Sat Feb 28 05:14:15.253438 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/ba.php
[Sat Feb 28 05:14:15.471238 2026] [:error] [pid 22194:tid 22210] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/ym.php
[Sat Feb 28 05:14:15.678156 2026] [:error] [pid 22194:tid 22201] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Feb 28 05:14:15.887072 2026] [:error] [pid 22194:tid 22216] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Sat Feb 28 05:14:16.095111 2026] [:error] [pid 22194:tid 22209] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Feb 28 05:14:16.308112 2026] [:error] [pid 22194:tid 22218] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat Feb 28 05:14:16.538078 2026] [:error] [pid 22194:tid 22204] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sat Feb 28 05:14:16.745116 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:42887] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Sat Feb 28 05:14:16.950382 2026] [:error] [pid 22194:tid 22198] [client 20.151.113.230:42887] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaIJKH6mbajs3bzQGyvJbwAAAUI"]
[Sat Feb 28 05:14:17.364667 2026] [:error] [pid 11791:tid 11794] [client 20.151.113.230:42939] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaIJKWuX5e1Q32gqxH2AVgAAAQE"]
[Sat Feb 28 05:14:17.783322 2026] [:error] [pid 11791:tid 11795] [client 20.151.113.230:16607] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaIJKWuX5e1Q32gqxH2AWAAAAQI"]
[Sat Feb 28 05:14:18.286008 2026] [:error] [pid 11791:tid 11813] [client 20.151.113.230:53510] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaIJKmuX5e1Q32gqxH2AXAAAARQ"]
[Sat Feb 28 05:14:19.022805 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:17306] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaIJKxVE-FfM89u7BQYuzQAAAI0"]
[Sat Feb 28 05:14:20.437744 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:53549] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaIJLKIAO5fN7BxyqcEYRgAAAMk"]
[Sat Feb 28 05:14:21.433306 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:41301] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaIJLaIAO5fN7BxyqcEYSAAAAMs"]
[Sat Feb 28 05:14:24.260510 2026] [:error] [pid 39292:tid 39308] [client 20.151.113.230:17313] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaIJMKIAO5fN7BxyqcEYZAAAAM4"]
[Sat Feb 28 05:14:25.467755 2026] [:error] [pid 39292:tid 39317] [client 20.151.113.230:46767] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaIJMaIAO5fN7BxyqcEYbwAAANc"]
[Sat Feb 28 05:14:26.482234 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:42898] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaIJMqIAO5fN7BxyqcEYdwAAANI"]
[Sat Feb 28 05:14:27.041814 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:53536] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaIJM2uX5e1Q32gqxH2AcwAAARA"]
[Sat Feb 28 05:14:28.930009 2026] [:error] [pid 22194:tid 22207] [client 20.151.113.230:41338] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaIJNH6mbajs3bzQGyvJlgAAAUs"]
[Sat Feb 28 05:14:29.445732 2026] [:error] [pid 39292:tid 39304] [client 20.151.113.230:41330] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaIJNaIAO5fN7BxyqcEYjgAAAMo"]
[Sat Feb 28 05:14:32.172801 2026] [:error] [pid 39292:tid 39294] [client 20.151.113.230:36834] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaIJOKIAO5fN7BxyqcEYmAAAAMA"]
[Sat Feb 28 05:14:33.103335 2026] [:error] [pid 39184:tid 39219] [client 20.151.113.230:36862] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaIJOVtZF9Zd_U7easAhhgAAAEA"]
[Sat Feb 28 05:14:33.709070 2026] [:error] [pid 39185:tid 39264] [client 20.151.113.230:17296] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaIJORVE-FfM89u7BQYu-QAAAJI"]
[Sat Feb 28 05:14:34.413428 2026] [:error] [pid 39292:tid 39318] [client 20.151.113.230:41280] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaIJOqIAO5fN7BxyqcEYnwAAANg"]
[Sat Feb 28 05:14:35.028212 2026] [:error] [pid 22194:tid 22201] [client 20.151.113.230:17296] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaIJO36mbajs3bzQGyvJoQAAAUU"]
[Sat Feb 28 05:14:35.448771 2026] [:error] [pid 22194:tid 22219] [client 20.151.113.230:53513] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaIJO36mbajs3bzQGyvJogAAAVc"]
[Sat Feb 28 05:14:36.190221 2026] [:error] [pid 22194:tid 22216] [client 20.151.113.230:53546] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaIJPH6mbajs3bzQGyvJqAAAAVQ"]
[Sat Feb 28 05:14:36.818550 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:53508] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaIJPKIAO5fN7BxyqcEYpgAAANI"]
[Sat Feb 28 05:14:37.246821 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:41339] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaIJPRVE-FfM89u7BQYu_QAAAIc"]
[Sat Feb 28 05:14:37.658706 2026] [:error] [pid 11791:tid 11808] [client 20.151.113.230:46776] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaIJPWuX5e1Q32gqxH2AjAAAAQ8"]
[Sat Feb 28 05:14:38.554469 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:36824] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaIJPhVE-FfM89u7BQYu_wAAAJE"]
[Sat Feb 28 05:14:39.498984 2026] [:error] [pid 39292:tid 39303] [client 20.151.113.230:53552] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaIJP6IAO5fN7BxyqcEYtQAAAMk"]
[Sat Feb 28 05:14:40.050432 2026] [:error] [pid 39292:tid 39298] [client 20.151.113.230:16660] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaIJQKIAO5fN7BxyqcEYuAAAAMQ"]
[Sat Feb 28 05:14:40.731405 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:46734] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaIJQBVE-FfM89u7BQYvBQAAAJY"]
[Sat Feb 28 05:14:41.218595 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:42888] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaIJQaIAO5fN7BxyqcEYxgAAAMs"]
[Sat Feb 28 05:14:42.317564 2026] [:error] [pid 22194:tid 22212] [client 20.151.113.230:46754] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaIJQn6mbajs3bzQGyvJsgAAAVA"]
[Sat Feb 28 05:14:42.832675 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:42892] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaIJQqIAO5fN7BxyqcEY0wAAAMg"]
[Sat Feb 28 05:14:43.800100 2026] [:error] [pid 11791:tid 11803] [client 20.151.113.230:53511] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaIJQ2uX5e1Q32gqxH2AkgAAAQo"]
[Sat Feb 28 05:14:44.667342 2026] [:error] [pid 39183:tid 39215] [client 20.151.113.230:46771] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaIJRBCf4HvhVePw3LZYfgAAABc"]
[Sat Feb 28 05:14:45.354126 2026] [:error] [pid 39184:tid 39226] [client 20.151.113.230:16677] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaIJRVtZF9Zd_U7easAhlQAAAEc"]
[Sat Feb 28 05:14:45.776876 2026] [:error] [pid 39184:tid 39233] [client 20.151.113.230:46735] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaIJRVtZF9Zd_U7easAhmAAAAE4"]
[Sat Feb 28 05:14:46.201528 2026] [:error] [pid 39183:tid 39200] [client 20.151.113.230:42926] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaIJRhCf4HvhVePw3LZYgwAAAAg"]
[Sat Feb 28 05:14:46.651081 2026] [:error] [pid 39292:tid 39309] [client 20.151.113.230:46739] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaIJRqIAO5fN7BxyqcEY5AAAAM8"]
[Sat Feb 28 05:14:47.297126 2026] [:error] [pid 39185:tid 39246] [client 20.151.113.230:46729] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaIJRxVE-FfM89u7BQYvFAAAAIA"]
[Sat Feb 28 05:14:48.163863 2026] [:error] [pid 39184:tid 39219] [client 20.151.113.230:17324] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaIJSFtZF9Zd_U7easAhqQAAAEA"]
[Sat Feb 28 05:14:48.667436 2026] [:error] [pid 22194:tid 22205] [client 20.151.113.230:16578] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaIJSH6mbajs3bzQGyvJwQAAAUk"]
[Sat Feb 28 05:14:49.090490 2026] [:error] [pid 39185:tid 39254] [client 20.151.113.230:36858] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaIJSRVE-FfM89u7BQYvGAAAAIg"]
[Sat Feb 28 05:14:49.594108 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:16694] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaIJSaIAO5fN7BxyqcEY8QAAAMc"]
[Sat Feb 28 05:14:50.039460 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:41326] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaIJShVE-FfM89u7BQYvHQAAAIc"]
[Sat Feb 28 05:14:50.477893 2026] [:error] [pid 39185:tid 39263] [client 20.151.113.230:53524] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaIJShVE-FfM89u7BQYvHgAAAJE"]
[Sat Feb 28 05:14:50.929856 2026] [:error] [pid 39292:tid 39310] [client 20.151.113.230:17338] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaIJSqIAO5fN7BxyqcEZAQAAANA"]
[Sat Feb 28 05:14:51.445510 2026] [:error] [pid 11791:tid 11808] [client 20.151.113.230:40145] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaIJS2uX5e1Q32gqxH2AnAAAAQ8"]
[Sat Feb 28 05:14:51.902763 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:42901] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaIJS6IAO5fN7BxyqcEZAgAAAMI"]
[Sat Feb 28 05:14:52.349701 2026] [:error] [pid 39184:tid 39226] [client 20.151.113.230:43760] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaIJTFtZF9Zd_U7easAhqgAAAEc"]
[Sat Feb 28 05:14:52.777081 2026] [:error] [pid 39185:tid 39248] [client 20.151.113.230:16669] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaIJTBVE-FfM89u7BQYvJwAAAII"]
[Sat Feb 28 05:14:53.195482 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:16576] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaIJTWuX5e1Q32gqxH2ApAAAARA"]
[Sat Feb 28 05:14:53.782020 2026] [:error] [pid 39292:tid 39311] [client 20.151.113.230:16587] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaIJTaIAO5fN7BxyqcEZCgAAANE"]
[Sat Feb 28 05:14:54.534484 2026] [:error] [pid 11791:tid 11800] [client 20.151.113.230:53516] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaIJTmuX5e1Q32gqxH2ArAAAAQc"]
[Sat Feb 28 05:14:55.010919 2026] [:error] [pid 11791:tid 11817] [client 20.151.113.230:37251] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaIJT2uX5e1Q32gqxH2AsAAAARg"]
[Sat Feb 28 05:14:56.059766 2026] [:error] [pid 39185:tid 39260] [client 20.151.113.230:46747] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaIJUBVE-FfM89u7BQYvMQAAAI4"]
[Sat Feb 28 05:14:56.591133 2026] [:error] [pid 11791:tid 11813] [client 20.151.113.230:17321] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaIJUGuX5e1Q32gqxH2AtQAAARQ"]
[Sat Feb 28 05:14:57.231078 2026] [:error] [pid 22194:tid 22200] [client 20.151.113.230:46733] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaIJUX6mbajs3bzQGyvJzgAAAUQ"]
[Sat Feb 28 05:14:57.895162 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:16653] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaIJURVE-FfM89u7BQYvNAAAAIM"]
[Sat Feb 28 05:14:58.398626 2026] [:error] [pid 22194:tid 22212] [client 20.151.113.230:41286] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaIJUn6mbajs3bzQGyvJ2QAAAVA"]
[Sat Feb 28 05:14:58.837672 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:36816] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaIJUhVE-FfM89u7BQYvNgAAAJY"]
[Sat Feb 28 05:14:59.309979 2026] [:error] [pid 39292:tid 39314] [client 20.151.113.230:36847] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaIJU6IAO5fN7BxyqcEZGQAAANQ"]
[Sat Feb 28 05:14:59.771098 2026] [:error] [pid 39183:tid 39214] [client 20.151.113.230:16663] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaIJUxCf4HvhVePw3LZYjQAAABY"]
[Sat Feb 28 05:15:00.193023 2026] [:error] [pid 22194:tid 22197] [client 20.151.113.230:46765] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaIJVH6mbajs3bzQGyvJ4QAAAUE"]
[Sat Feb 28 05:15:00.690268 2026] [:error] [pid 39184:tid 39232] [client 20.151.113.230:41297] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaIJVFtZF9Zd_U7easAhtAAAAE0"]
[Sat Feb 28 05:15:01.260155 2026] [:error] [pid 39184:tid 39242] [client 20.151.113.230:41318] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaIJVVtZF9Zd_U7easAhtwAAAFc"]
[Sat Feb 28 05:15:01.853912 2026] [:error] [pid 39185:tid 39251] [client 20.151.113.230:16588] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaIJVRVE-FfM89u7BQYvOwAAAIU"]
[Sat Feb 28 05:15:02.334701 2026] [:error] [pid 11791:tid 11798] [client 20.151.113.230:36854] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaIJVmuX5e1Q32gqxH2AvwAAAQU"]
[Sat Feb 28 05:15:02.786126 2026] [:error] [pid 22194:tid 22199] [client 20.151.113.230:36830] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaIJVn6mbajs3bzQGyvJ6gAAAUM"]
[Sat Feb 28 05:15:03.222417 2026] [:error] [pid 39292:tid 39305] [client 20.151.113.230:16672] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaIJV6IAO5fN7BxyqcEZIgAAAMs"]
[Sat Feb 28 05:15:03.707883 2026] [:error] [pid 11791:tid 11806] [client 20.151.113.230:53507] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaIJV2uX5e1Q32gqxH2AwwAAAQ0"]
[Sat Feb 28 05:15:04.182103 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:53534] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaIJWGuX5e1Q32gqxH2AxQAAARA"]
[Sat Feb 28 05:15:04.652182 2026] [:error] [pid 11791:tid 11803] [client 20.151.113.230:46724] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaIJWGuX5e1Q32gqxH2AyQAAAQo"]
[Sat Feb 28 05:15:05.227297 2026] [:error] [pid 22194:tid 22214] [client 20.151.113.230:53505] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaIJWX6mbajs3bzQGyvJ9AAAAVI"]
[Sat Feb 28 05:15:05.697634 2026] [:error] [pid 22194:tid 22199] [client 20.151.113.230:53506] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaIJWX6mbajs3bzQGyvJ-wAAAUM"]
[Sat Feb 28 05:15:06.129530 2026] [:error] [pid 22194:tid 22206] [client 20.151.113.230:16684] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaIJWn6mbajs3bzQGyvJ_gAAAUo"]
[Sat Feb 28 05:15:06.539033 2026] [:error] [pid 11791:tid 11798] [client 20.151.113.230:46773] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaIJWmuX5e1Q32gqxH2A1QAAAQU"]
[Sat Feb 28 05:15:06.972632 2026] [:error] [pid 11791:tid 11812] [client 20.151.113.230:46756] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaIJWmuX5e1Q32gqxH2A1gAAARM"]
[Sat Feb 28 05:15:07.496700 2026] [:error] [pid 39292:tid 39308] [client 20.151.113.230:36844] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaIJW6IAO5fN7BxyqcEZMQAAAM4"]
[Sat Feb 28 05:15:07.930723 2026] [:error] [pid 39292:tid 39313] [client 20.151.113.230:46782] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaIJW6IAO5fN7BxyqcEZOAAAANM"]
[Sat Feb 28 05:15:08.407177 2026] [:error] [pid 39184:tid 39243] [client 20.151.113.230:46727] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaIJXFtZF9Zd_U7easAhvwAAAFg"]
[Sat Feb 28 05:15:08.884298 2026] [:error] [pid 11791:tid 11809] [client 20.151.113.230:42885] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaIJXGuX5e1Q32gqxH2A2AAAARA"]
[Sat Feb 28 05:15:09.297171 2026] [:error] [pid 39185:tid 39255] [client 20.151.113.230:36852] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaIJXRVE-FfM89u7BQYvPQAAAIk"]
[Sat Feb 28 05:15:09.707928 2026] [:error] [pid 39183:tid 39196] [client 20.151.113.230:16692] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaIJXRCf4HvhVePw3LZYjwAAAAQ"]
[Sat Feb 28 05:15:10.144123 2026] [:error] [pid 39292:tid 39316] [client 20.151.113.230:17318] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaIJXqIAO5fN7BxyqcEZQQAAANY"]
[Sat Feb 28 05:15:10.554596 2026] [:error] [pid 39184:tid 39240] [client 20.151.113.230:46722] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaIJXltZF9Zd_U7easAhyAAAAFU"]
[Sat Feb 28 05:15:10.975150 2026] [:error] [pid 39185:tid 39259] [client 20.151.113.230:16674] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaIJXhVE-FfM89u7BQYvQAAAAI0"]
[Sat Feb 28 05:15:11.424966 2026] [:error] [pid 39292:tid 39295] [client 20.151.113.230:36857] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaIJX6IAO5fN7BxyqcEZRwAAAME"]
[Sat Feb 28 05:15:11.837205 2026] [:error] [pid 39185:tid 39249] [client 20.151.113.230:46732] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaIJXxVE-FfM89u7BQYvRgAAAIM"]
[Sat Feb 28 05:15:12.260319 2026] [:error] [pid 39292:tid 39306] [client 20.151.113.230:41282] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaIJYKIAO5fN7BxyqcEZUAAAAMw"]
[Sat Feb 28 05:15:12.685795 2026] [:error] [pid 39185:tid 39268] [client 20.151.113.230:16586] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaIJYBVE-FfM89u7BQYvSAAAAJY"]
[Sat Feb 28 05:15:13.105937 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:36810] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaIJYaIAO5fN7BxyqcEZWAAAAMc"]
[Sat Feb 28 05:15:13.518416 2026] [:error] [pid 39185:tid 39250] [client 20.151.113.230:16603] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaIJYRVE-FfM89u7BQYvTAAAAIQ"]
[Sat Feb 28 05:15:13.928889 2026] [:error] [pid 39185:tid 39257] [client 20.151.113.230:41327] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaIJYRVE-FfM89u7BQYvTgAAAIs"]
[Sat Feb 28 05:15:14.344583 2026] [:error] [pid 39185:tid 39253] [client 20.151.113.230:41323] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaIJYhVE-FfM89u7BQYvUQAAAIc"]
[Sat Feb 28 05:15:14.756548 2026] [:error] [pid 39292:tid 39312] [client 20.151.113.230:53523] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aaIJYqIAO5fN7BxyqcEZYgAAANI"]
[Sat Feb 28 05:15:15.220018 2026] [:error] [pid 39292:tid 39317] [client 20.151.113.230:46763] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aaIJY6IAO5fN7BxyqcEZZAAAANc"]
[Sat Feb 28 05:15:15.779698 2026] [:error] [pid 22194:tid 22207] [client 20.151.113.230:42893] [client 20.151.113.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aaIJY36mbajs3bzQGyvKDgAAAUs"]
[Sat Feb 28 05:15:16.197497 2026] [:error] [pid 39292:tid 39296] [client 20.151.113.230:36845] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Sat Feb 28 05:15:16.619818 2026] [:error] [pid 39292:tid 39295] [client 20.151.113.230:36845] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Sat Feb 28 05:15:17.048360 2026] [:error] [pid 39292:tid 39302] [client 20.151.113.230:36845] File does not exist: /usr/local/apache/htdocs/suspended-page/55.php
[Sat Feb 28 05:15:17.255707 2026] [:error] [pid 39292:tid 39301] [client 20.151.113.230:36845] File does not exist: /usr/local/apache/htdocs/suspended-page/zc.php
[Sat Feb 28 05:15:17.466311 2026] [:error] [pid 39292:tid 39295] [client 20.151.113.230:36845] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Sat Feb 28 05:41:49.755822 2026] [:error] [pid 11791:tid 11804] [client 13.71.191.191:13276] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Feb 28 05:41:49.976201 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:13276] File does not exist: /usr/local/apache/htdocs/suspended-page/combined.php
[Sat Feb 28 05:41:50.620681 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:13276] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/index.php"] [unique_id "aaIPnmuX5e1Q32gqxH2PzgAAARU"]
[Sat Feb 28 05:41:51.615898 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:13311] File does not exist: /usr/local/apache/htdocs/suspended-page/wf.php
[Sat Feb 28 05:41:51.969685 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:13311] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/termps.php"] [unique_id "aaIPnxVE-FfM89u7BQY8CAAAAIo"]
[Sat Feb 28 05:41:53.034469 2026] [:error] [pid 39183:tid 39216] [client 13.71.191.191:13305] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/capabilities1.php"] [unique_id "aaIPoRCf4HvhVePw3LZhHgAAABg"]
[Sat Feb 28 05:41:53.766086 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:13300] File does not exist: /usr/local/apache/htdocs/suspended-page/vcard.php
[Sat Feb 28 05:41:53.975913 2026] [:error] [pid 11791:tid 11795] [client 13.71.191.191:13300] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaIPoWuX5e1Q32gqxH2P3wAAAQI"]
[Sat Feb 28 05:41:54.534077 2026] [:error] [pid 11791:tid 11807] [client 13.71.191.191:13257] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaIPomuX5e1Q32gqxH2P5AAAAQ4"]
[Sat Feb 28 05:41:55.068439 2026] [:error] [pid 11791:tid 11808] [client 13.71.191.191:13310] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaIPo2uX5e1Q32gqxH2P5gAAAQ8"]
[Sat Feb 28 05:41:55.760760 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:13310] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "aaIPo2uX5e1Q32gqxH2P6AAAAQo"]
[Sat Feb 28 05:41:56.357560 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:13261] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/preferences/admin-ajax.php"] [unique_id "aaIPpH6mbajs3bzQGyveMgAAAUY"]
[Sat Feb 28 05:41:56.837877 2026] [:error] [pid 39183:tid 39197] [client 13.71.191.191:13262] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aaIPpBCf4HvhVePw3LZhIgAAAAU"]
[Sat Feb 28 05:41:57.387421 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:13198] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aaIPpWuX5e1Q32gqxH2P8gAAAQU"]
[Sat Feb 28 05:41:57.934688 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:13201] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aaIPpWuX5e1Q32gqxH2P9QAAARc"]
[Sat Feb 28 05:41:58.459054 2026] [:error] [pid 39183:tid 39205] [client 13.71.191.191:13191] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "aaIPphCf4HvhVePw3LZhJQAAAA0"]
[Sat Feb 28 05:41:58.965438 2026] [:error] [pid 39183:tid 39214] [client 13.71.191.191:13255] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaIPphCf4HvhVePw3LZhJwAAABY"]
[Sat Feb 28 05:41:59.692335 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:13274] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaIPp6IAO5fN7BxyqcE0vAAAAME"]
[Sat Feb 28 05:42:00.260497 2026] [:error] [pid 11791:tid 11799] [client 13.71.191.191:13268] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaIPqGuX5e1Q32gqxH2P_wAAAQY"]
[Sat Feb 28 05:42:00.989147 2026] [:error] [pid 11791:tid 11812] [client 13.71.191.191:13293] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/cache.cleaner.php"] [unique_id "aaIPqGuX5e1Q32gqxH2QAgAAARM"]
[Sat Feb 28 05:42:01.536098 2026] [:error] [pid 11791:tid 11813] [client 13.71.191.191:13225] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/ourLB.php"] [unique_id "aaIPqWuX5e1Q32gqxH2QBAAAARQ"]
[Sat Feb 28 05:42:02.206492 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:13187] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaIPqltZF9Zd_U7easAqrQAAAEo"]
[Sat Feb 28 05:42:02.990660 2026] [:error] [pid 39184:tid 39226] [client 13.71.191.191:13299] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaIPqltZF9Zd_U7easAqsAAAAEc"]
[Sat Feb 28 05:42:05.177463 2026] [:error] [pid 39183:tid 39192] [client 13.71.191.191:13297] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaIPrRCf4HvhVePw3LZhLAAAAAA"]
[Sat Feb 28 05:42:06.347700 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:13283] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb2434353s/index.php"] [unique_id "aaIPrqIAO5fN7BxyqcE0ywAAAMQ"]
[Sat Feb 28 05:42:06.890467 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:13302] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaIPrqIAO5fN7BxyqcE0zQAAAMg"]
[Sat Feb 28 05:42:07.575402 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:13184] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaIPrxVE-FfM89u7BQY8UwAAAIE"]
[Sat Feb 28 05:42:08.337461 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:13251] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaIPsKIAO5fN7BxyqcE01AAAAMI"]
[Sat Feb 28 05:42:08.763148 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:13281] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/bolster-theme/include/lang_upload.php"] [unique_id "aaIPsKIAO5fN7BxyqcE01wAAAMU"]
[Sat Feb 28 05:42:09.214604 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:13277] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sundax.Php"] [unique_id "aaIPsaIAO5fN7BxyqcE03QAAANU"]
[Sat Feb 28 05:42:09.738569 2026] [:error] [pid 39184:tid 39243] [client 13.71.191.191:13308] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sundax.Php"] [unique_id "aaIPsVtZF9Zd_U7easAqtwAAAFg"]
[Sat Feb 28 05:42:10.262981 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:13232] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sundax.Php"] [unique_id "aaIPshVE-FfM89u7BQY8WAAAAJM"]
[Sat Feb 28 05:42:10.822891 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:13253] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sundax.Php"] [unique_id "aaIPsmuX5e1Q32gqxH2QIwAAAQo"]
[Sat Feb 28 05:42:11.605632 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:13280] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaIPs36mbajs3bzQGyveVQAAAUg"]
[Sat Feb 28 05:42:12.328561 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:13227] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaIPtKIAO5fN7BxyqcE06QAAANA"]
[Sat Feb 28 05:42:13.407817 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:13258] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaIPtX6mbajs3bzQGyveWQAAAVc"]
[Sat Feb 28 05:42:14.129903 2026] [:error] [pid 22194:tid 22207] [client 13.71.191.191:13250] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/pages.php"] [unique_id "aaIPtn6mbajs3bzQGyveYAAAAUs"]
[Sat Feb 28 05:42:14.741027 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:13289] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaIPtmuX5e1Q32gqxH2QKQAAARE"]
[Sat Feb 28 05:42:15.215248 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:13282] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaIPt36mbajs3bzQGyveZQAAAUY"]
[Sat Feb 28 05:42:15.666208 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:13252] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaIPt6IAO5fN7BxyqcE1BQAAAMo"]
[Sat Feb 28 05:42:16.102617 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:13194] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/item.php"] [unique_id "aaIPuH6mbajs3bzQGyveaQAAAVU"]
[Sat Feb 28 05:42:16.623037 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:13196] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaIPuKIAO5fN7BxyqcE1CwAAANU"]
[Sat Feb 28 05:42:17.157867 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:13206] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaIPuaIAO5fN7BxyqcE1EQAAANI"]
[Sat Feb 28 05:42:17.625730 2026] [:error] [pid 39183:tid 39195] [client 13.71.191.191:13243] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaIPuRCf4HvhVePw3LZhMgAAAAM"]
[Sat Feb 28 05:42:18.080793 2026] [:error] [pid 39183:tid 39201] [client 13.71.191.191:13291] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "aaIPuhCf4HvhVePw3LZhOAAAAAk"]
[Sat Feb 28 05:42:18.627934 2026] [:error] [pid 39185:tid 39248] [client 13.71.191.191:13210] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaIPuhVE-FfM89u7BQY8YAAAAII"]
[Sat Feb 28 05:42:19.082127 2026] [:error] [pid 39185:tid 39260] [client 13.71.191.191:13218] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaIPuxVE-FfM89u7BQY8ZAAAAI4"]
[Sat Feb 28 05:42:19.546595 2026] [:error] [pid 39292:tid 39313] [client 13.71.191.191:13278] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaIPu6IAO5fN7BxyqcE1GgAAANM"]
[Sat Feb 28 05:42:20.220434 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:13307] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qpglkpgm.php"] [unique_id "aaIPvKIAO5fN7BxyqcE1HgAAAMI"]
[Sat Feb 28 05:42:20.721560 2026] [:error] [pid 39183:tid 39204] [client 13.71.191.191:13203] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms.php"] [unique_id "aaIPvBCf4HvhVePw3LZhOgAAAAw"]
[Sat Feb 28 05:42:21.453506 2026] [:error] [pid 39185:tid 39267] [client 13.71.191.191:13142] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms.php"] [unique_id "aaIPvRVE-FfM89u7BQY8aQAAAJU"]
[Sat Feb 28 05:42:22.167274 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:13296] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms.php"] [unique_id "aaIPvqIAO5fN7BxyqcE1IwAAAMg"]
[Sat Feb 28 05:42:23.297107 2026] [:error] [pid 39185:tid 39257] [client 13.71.191.191:13288] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms.php"] [unique_id "aaIPvxVE-FfM89u7BQY8bAAAAIs"]
[Sat Feb 28 05:42:24.188348 2026] [:error] [pid 39185:tid 39251] [client 13.71.191.191:13224] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaIPwBVE-FfM89u7BQY8bgAAAIU"]
[Sat Feb 28 05:42:25.192579 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:13189] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaIPwVtZF9Zd_U7easAqwwAAAEU"]
[Sat Feb 28 05:42:26.172420 2026] [:error] [pid 39292:tid 39317] [client 13.71.191.191:13271] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaIPwqIAO5fN7BxyqcE1NQAAANc"]
[Sat Feb 28 05:42:26.904255 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:13195] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maint/jp.php"] [unique_id "aaIPwqIAO5fN7BxyqcE1PwAAAMU"]
[Sat Feb 28 05:42:27.562803 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:13249] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaIPw6IAO5fN7BxyqcE1RgAAAMg"]
[Sat Feb 28 05:42:28.128615 2026] [:error] [pid 39292:tid 39294] [client 13.71.191.191:13306] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaIPxKIAO5fN7BxyqcE1TgAAAMA"]
[Sat Feb 28 05:42:28.648362 2026] [:error] [pid 39185:tid 39255] [client 13.71.191.191:13292] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaIPxBVE-FfM89u7BQY8hwAAAIk"]
[Sat Feb 28 05:42:29.553882 2026] [:error] [pid 11791:tid 11799] [client 13.71.191.191:13284] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/rafosul.php"] [unique_id "aaIPxWuX5e1Q32gqxH2QNwAAAQY"]
[Sat Feb 28 05:42:30.585627 2026] [:error] [pid 39185:tid 39269] [client 13.71.191.191:13202] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/commands/webix.php"] [unique_id "aaIPxhVE-FfM89u7BQY8lQAAAJc"]
[Sat Feb 28 05:42:31.350278 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:13214] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaIPx6IAO5fN7BxyqcE1VQAAANg"]
[Sat Feb 28 05:42:32.473480 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:13135] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaIPyH6mbajs3bzQGyveggAAAVY"]
[Sat Feb 28 05:42:33.249976 2026] [:error] [pid 39292:tid 39304] [client 13.71.191.191:13304] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaIPyaIAO5fN7BxyqcE1XgAAAMo"]
[Sat Feb 28 05:42:34.015453 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:13290] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php/shell.php/text.php"] [unique_id "aaIPymuX5e1Q32gqxH2QRwAAAQU"]
[Sat Feb 28 05:42:34.529216 2026] [:error] [pid 39292:tid 39307] [client 13.71.191.191:13301] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaIPyqIAO5fN7BxyqcE1aQAAAM0"]
[Sat Feb 28 05:42:35.238335 2026] [:error] [pid 39292:tid 39306] [client 13.71.191.191:13270] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaIPy6IAO5fN7BxyqcE1bwAAAMw"]
[Sat Feb 28 05:42:36.301592 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:13149] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaIPzBVE-FfM89u7BQY8qQAAAJA"]
[Sat Feb 28 05:42:37.109715 2026] [:error] [pid 39185:tid 39268] [client 13.71.191.191:13147] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/WordPressCore/fm.php"] [unique_id "aaIPzRVE-FfM89u7BQY8rAAAAJY"]
[Sat Feb 28 05:42:38.214261 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:13310] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaIPzhVE-FfM89u7BQY8rQAAAI8"]
[Sat Feb 28 05:42:39.209683 2026] [:error] [pid 11791:tid 11817] [client 13.71.191.191:13212] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaIPz2uX5e1Q32gqxH2QUwAAARg"]
[Sat Feb 28 05:42:40.081231 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:13132] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaIP0KIAO5fN7BxyqcE1eAAAAMM"]
[Sat Feb 28 05:42:40.883484 2026] [:error] [pid 22194:tid 22198] [client 13.71.191.191:13267] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/gmxwbau/hzwttmff.php"] [unique_id "aaIP0H6mbajs3bzQGyveiQAAAUI"]
[Sat Feb 28 05:42:41.662813 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:13200] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaIP0WuX5e1Q32gqxH2QVwAAARU"]
[Sat Feb 28 05:42:44.312791 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:13242] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaIP1KIAO5fN7BxyqcE1hAAAAME"]
[Sat Feb 28 05:42:45.283421 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:13134] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaIP1WuX5e1Q32gqxH2QZgAAARU"]
[Sat Feb 28 05:42:46.289761 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:13129] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/WSO-Enigma.php"] [unique_id "aaIP1hVE-FfM89u7BQY8vgAAAIY"]
[Sat Feb 28 05:42:47.179130 2026] [:error] [pid 39184:tid 39234] [client 13.71.191.191:13207] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaIP11tZF9Zd_U7easAq1QAAAE8"]
[Sat Feb 28 05:42:48.253996 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:13136] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaIP2H6mbajs3bzQGyvekgAAAUA"]
[Sat Feb 28 05:42:49.233690 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:13309] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaIP2WuX5e1Q32gqxH2QbgAAAQU"]
[Sat Feb 28 05:42:50.605166 2026] [:error] [pid 22194:tid 22205] [client 13.71.191.191:13199] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/general/cache/plugins.php"] [unique_id "aaIP2n6mbajs3bzQGyvepgAAAUk"]
[Sat Feb 28 05:42:51.619572 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:13127] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/gif.php"] [unique_id "aaIP236mbajs3bzQGyvesAAAAVY"]
[Sat Feb 28 05:42:52.250713 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:13190] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/block/moon.php"] [unique_id "aaIP3KIAO5fN7BxyqcE1lAAAAME"]
[Sat Feb 28 05:42:52.937979 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:13264] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/themes.php"] [unique_id "aaIP3H6mbajs3bzQGyvevAAAAUE"]
[Sat Feb 28 05:42:54.436173 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:13125] File does not exist: /usr/local/apache/htdocs/suspended-page/fnyeltio.php
[Sat Feb 28 05:42:54.641139 2026] [:error] [pid 22194:tid 22203] [client 13.71.191.191:13125] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/class.engine.php"] [unique_id "aaIP3n6mbajs3bzQGyvezAAAAUc"]
[Sat Feb 28 05:42:55.277291 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:13259] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/format-library/admin.php"] [unique_id "aaIP336mbajs3bzQGyvezwAAAUQ"]
[Sat Feb 28 05:42:56.805066 2026] [:error] [pid 39184:tid 39231] [client 13.71.191.191:13204] File does not exist: /usr/local/apache/htdocs/suspended-page/affiliate_manager.php
[Sat Feb 28 05:42:57.231476 2026] [:error] [pid 39184:tid 39221] [client 13.71.191.191:13204] File does not exist: /usr/local/apache/htdocs/suspended-page/duck.php
[Sat Feb 28 05:42:57.438226 2026] [:error] [pid 39184:tid 39229] [client 13.71.191.191:13204] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Sat Feb 28 05:42:57.865338 2026] [:error] [pid 39184:tid 39220] [client 13.71.191.191:13204] File does not exist: /usr/local/apache/htdocs/suspended-page/pu.php
[Sat Feb 28 05:42:58.279109 2026] [:error] [pid 39184:tid 39237] [client 13.71.191.191:13204] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/editor/tinyfilemanager.php"] [unique_id "aaIP4ltZF9Zd_U7easAq6AAAAFI"]
[Sat Feb 28 05:42:58.754909 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:13269] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/404.php"] [unique_id "aaIP4muX5e1Q32gqxH2QhAAAAQo"]
[Sat Feb 28 05:42:59.861173 2026] [:error] [pid 11791:tid 11813] [client 13.71.191.191:13157] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaIP42uX5e1Q32gqxH2QigAAARQ"]
[Sat Feb 28 05:43:01.027404 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:13143] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaIP5X6mbajs3bzQGyve5QAAAUQ"]
[Sat Feb 28 05:43:01.602610 2026] [:error] [pid 11791:tid 11809] [client 13.71.191.191:13165] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaIP5WuX5e1Q32gqxH2QlAAAARA"]
[Sat Feb 28 05:43:02.302185 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:13221] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/aioseoextensions/file.php"] [unique_id "aaIP5muX5e1Q32gqxH2QlwAAAQ0"]
[Sat Feb 28 05:43:02.873626 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:13197] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaIP5qIAO5fN7BxyqcE1pwAAAMk"]
[Sat Feb 28 05:43:03.480984 2026] [:error] [pid 39185:tid 39254] [client 13.71.191.191:13219] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaIP5xVE-FfM89u7BQY8zwAAAIg"]
[Sat Feb 28 05:43:04.485746 2026] [:error] [pid 11791:tid 11814] [client 13.71.191.191:13130] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaIP6GuX5e1Q32gqxH2QnAAAARU"]
[Sat Feb 28 05:43:05.257160 2026] [:error] [pid 39183:tid 39200] [client 13.71.191.191:13240] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wordpress3cll/up.php"] [unique_id "aaIP6RCf4HvhVePw3LZhUQAAAAg"]
[Sat Feb 28 05:43:05.967885 2026] [:error] [pid 22194:tid 22212] [client 13.71.191.191:13098] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaIP6X6mbajs3bzQGyve6AAAAVA"]
[Sat Feb 28 05:43:06.514925 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:13121] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaIP6n6mbajs3bzQGyve6gAAAUA"]
[Sat Feb 28 05:43:07.244140 2026] [:error] [pid 39292:tid 39302] [client 13.71.191.191:13192] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaIP66IAO5fN7BxyqcE1vQAAAMg"]
[Sat Feb 28 05:43:07.808249 2026] [:error] [pid 39185:tid 39249] [client 13.71.191.191:13216] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/news_event/1.php7"] [unique_id "aaIP6xVE-FfM89u7BQY81AAAAIM"]
[Sat Feb 28 05:43:08.292918 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:13164] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaIP7H6mbajs3bzQGyve7gAAAU4"]
[Sat Feb 28 05:43:08.744573 2026] [:error] [pid 11791:tid 11809] [client 13.71.191.191:13173] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaIP7GuX5e1Q32gqxH2QpAAAARA"]
[Sat Feb 28 05:43:09.216655 2026] [:error] [pid 11791:tid 11796] [client 13.71.191.191:13303] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaIP7WuX5e1Q32gqxH2QqQAAAQM"]
[Sat Feb 28 05:43:09.704904 2026] [:error] [pid 39185:tid 39256] [client 13.71.191.191:13273] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer-4.2.3-en.php"] [unique_id "aaIP7RVE-FfM89u7BQY83wAAAIo"]
[Sat Feb 28 05:43:10.409587 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:13254] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaIP7n6mbajs3bzQGyvfAAAAAVc"]
[Sat Feb 28 05:43:11.378333 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:13222] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaIP736mbajs3bzQGyvfCQAAAVI"]
[Sat Feb 28 05:43:12.144274 2026] [:error] [pid 22194:tid 22204] [client 13.71.191.191:13209] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaIP8H6mbajs3bzQGyvfDAAAAUg"]
[Sat Feb 28 05:43:12.862939 2026] [:error] [pid 39183:tid 39208] [client 13.71.191.191:13188] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blocks/tinyfilemanager.php"] [unique_id "aaIP8BCf4HvhVePw3LZhVAAAABA"]
[Sat Feb 28 05:43:13.544661 2026] [:error] [pid 39184:tid 39226] [client 13.71.191.191:13260] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aaIP8VtZF9Zd_U7easAq9AAAAEc"]
[Sat Feb 28 05:43:14.091022 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:13294] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aaIP8ltZF9Zd_U7easAq-AAAAFU"]
[Sat Feb 28 05:43:14.989323 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:13237] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aaIP8qIAO5fN7BxyqcE1zQAAANg"]
[Sat Feb 28 05:43:15.634257 2026] [:error] [pid 39292:tid 39312] [client 13.71.191.191:13122] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "aaIP86IAO5fN7BxyqcE10gAAANI"]
[Sat Feb 28 05:43:16.272331 2026] [:error] [pid 39184:tid 39219] [client 13.71.191.191:13208] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-simplepie.php"] [unique_id "aaIP9FtZF9Zd_U7easAq_gAAAEA"]
[Sat Feb 28 05:43:16.990808 2026] [:error] [pid 22194:tid 22198] [client 13.71.191.191:13211] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaIP9H6mbajs3bzQGyvfGAAAAUI"]
[Sat Feb 28 05:43:17.847095 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:13058] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaIP9RVE-FfM89u7BQY87gAAAJA"]
[Sat Feb 28 05:43:18.576533 2026] [:error] [pid 39185:tid 39250] [client 13.71.191.191:13144] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaIP9hVE-FfM89u7BQY89AAAAIQ"]
[Sat Feb 28 05:43:19.907326 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:13266] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wpsml-sys.php"] [unique_id "aaIP936mbajs3bzQGyvfIgAAAU4"]
[Sat Feb 28 05:43:22.137319 2026] [:error] [pid 11791:tid 11798] [client 13.71.191.191:13213] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaIP-muX5e1Q32gqxH2QtgAAAQU"]
[Sat Feb 28 05:43:23.762952 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:13298] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaIP-36mbajs3bzQGyvfMAAAAVU"]
[Sat Feb 28 05:43:24.474579 2026] [:error] [pid 39292:tid 39303] [client 13.71.191.191:13150] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaIP_KIAO5fN7BxyqcE15gAAAMk"]
[Sat Feb 28 05:43:25.463309 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:13120] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/myflash/"] [unique_id "aaIP_aIAO5fN7BxyqcE18QAAANU"]
[Sat Feb 28 05:43:27.290644 2026] [:error] [pid 11791:tid 11797] [client 13.71.191.191:13096] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaIP_2uX5e1Q32gqxH2QvwAAAQQ"]
[Sat Feb 28 05:43:27.937847 2026] [:error] [pid 39184:tid 39228] [client 13.71.191.191:13128] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaIP_1tZF9Zd_U7easArDgAAAEk"]
[Sat Feb 28 05:43:28.453541 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:13215] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaIQAKIAO5fN7BxyqcE1-QAAAMM"]
[Sat Feb 28 05:43:29.016830 2026] [:error] [pid 22194:tid 22215] [client 13.71.191.191:13092] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/rd.php"] [unique_id "aaIQAX6mbajs3bzQGyvfOAAAAVM"]
[Sat Feb 28 05:43:29.845981 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:13185] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaIQAaIAO5fN7BxyqcE1_gAAAMU"]
[Sat Feb 28 05:43:30.763828 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:13186] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaIQAmuX5e1Q32gqxH2QyAAAARE"]
[Sat Feb 28 05:43:31.392509 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:13233] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaIQA2uX5e1Q32gqxH2QywAAARc"]
[Sat Feb 28 05:43:31.897112 2026] [:error] [pid 11791:tid 11802] [client 13.71.191.191:13076] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oload_classmap.php"] [unique_id "aaIQA2uX5e1Q32gqxH2QzwAAAQk"]
[Sat Feb 28 05:43:32.341000 2026] [:error] [pid 22194:tid 22203] [client 13.71.191.191:13245] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaIQBH6mbajs3bzQGyvfQQAAAUc"]
[Sat Feb 28 05:43:32.936408 2026] [:error] [pid 39185:tid 39247] [client 13.71.191.191:13256] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaIQBBVE-FfM89u7BQY9DwAAAIE"]
[Sat Feb 28 05:43:33.600780 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:13159] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaIQBX6mbajs3bzQGyvfQwAAAUY"]
[Sat Feb 28 05:43:34.109667 2026] [:error] [pid 22194:tid 22209] [client 13.71.191.191:13181] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/spin.php"] [unique_id "aaIQBn6mbajs3bzQGyvfRgAAAU0"]
[Sat Feb 28 05:43:34.646340 2026] [:error] [pid 22194:tid 22215] [client 13.71.191.191:13068] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize//parx.php"] [unique_id "aaIQBn6mbajs3bzQGyvfSgAAAVM"]
[Sat Feb 28 05:43:35.275657 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:13238] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaIQB36mbajs3bzQGyvfUAAAAU4"]
[Sat Feb 28 05:43:35.855044 2026] [:error] [pid 11791:tid 11800] [client 13.71.191.191:13231] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaIQB2uX5e1Q32gqxH2Q1gAAAQc"]
[Sat Feb 28 05:43:36.446463 2026] [:error] [pid 39184:tid 39240] [client 13.71.191.191:13226] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaIQCFtZF9Zd_U7easArFgAAAFU"]
[Sat Feb 28 05:43:37.039435 2026] [:error] [pid 11791:tid 11810] [client 13.71.191.191:13155] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/IXR/network.php"] [unique_id "aaIQCWuX5e1Q32gqxH2Q2gAAARE"]
[Sat Feb 28 05:43:37.487011 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:13217] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaIQCWuX5e1Q32gqxH2Q3QAAAQo"]
[Sat Feb 28 05:43:38.056065 2026] [:error] [pid 22194:tid 22213] [client 13.71.191.191:13182] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaIQCn6mbajs3bzQGyvfWAAAAVE"]
[Sat Feb 28 05:43:38.508613 2026] [:error] [pid 11791:tid 11813] [client 13.71.191.191:13171] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaIQCmuX5e1Q32gqxH2Q5AAAARQ"]
[Sat Feb 28 05:43:38.925380 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:13170] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/fix/byp.php"] [unique_id "aaIQCn6mbajs3bzQGyvfXwAAAVU"]
[Sat Feb 28 05:43:39.413352 2026] [:error] [pid 39184:tid 39227] [client 13.71.191.191:13074] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaIQC1tZF9Zd_U7easArGwAAAEg"]
[Sat Feb 28 05:43:39.843791 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:13146] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaIQC36mbajs3bzQGyvfZAAAAUE"]
[Sat Feb 28 05:43:40.292258 2026] [:error] [pid 39183:tid 39206] [client 13.71.191.191:13080] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaIQDBCf4HvhVePw3LZhYgAAAA4"]
[Sat Feb 28 05:43:40.715906 2026] [:error] [pid 39183:tid 39200] [client 13.71.191.191:13154] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/transaction_history.php"] [unique_id "aaIQDBCf4HvhVePw3LZhZgAAAAg"]
[Sat Feb 28 05:43:41.169991 2026] [:error] [pid 39184:tid 39237] [client 13.71.191.191:13137] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaIQDVtZF9Zd_U7easArIgAAAFI"]
[Sat Feb 28 05:43:41.586886 2026] [:error] [pid 39185:tid 39261] [client 13.71.191.191:13107] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaIQDRVE-FfM89u7BQY9FgAAAI8"]
[Sat Feb 28 05:43:42.025458 2026] [:error] [pid 39183:tid 39203] [client 13.71.191.191:13151] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaIQDhCf4HvhVePw3LZhaAAAAAs"]
[Sat Feb 28 05:43:42.454501 2026] [:error] [pid 39183:tid 39193] [client 13.71.191.191:13286] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/contao/css/service.php"] [unique_id "aaIQDhCf4HvhVePw3LZhaQAAAAE"]
[Sat Feb 28 05:43:42.930843 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:13183] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaIQDn6mbajs3bzQGyvfagAAAU8"]
[Sat Feb 28 05:43:43.534154 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:13131] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaIQD36mbajs3bzQGyvfbQAAAU4"]
[Sat Feb 28 05:43:44.017166 2026] [:error] [pid 11791:tid 11811] [client 13.71.191.191:13239] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaIQEGuX5e1Q32gqxH2Q7QAAARI"]
[Sat Feb 28 05:43:44.496961 2026] [:error] [pid 22194:tid 22216] [client 13.71.191.191:13105] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaIQEH6mbajs3bzQGyvfcQAAAVQ"]
[Sat Feb 28 05:43:44.990453 2026] [:error] [pid 39292:tid 39299] [client 13.71.191.191:13205] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaIQEKIAO5fN7BxyqcE2HgAAAMU"]
[Sat Feb 28 05:43:45.464788 2026] [:error] [pid 39292:tid 39295] [client 13.71.191.191:13059] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaIQEaIAO5fN7BxyqcE2IgAAAME"]
[Sat Feb 28 05:43:45.963790 2026] [:error] [pid 39292:tid 39318] [client 13.71.191.191:13057] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaIQEaIAO5fN7BxyqcE2JQAAANg"]
[Sat Feb 28 05:43:46.577135 2026] [:error] [pid 11791:tid 11809] [client 13.71.191.191:13285] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php/text.php/shell.php"] [unique_id "aaIQEmuX5e1Q32gqxH2Q9AAAARA"]
[Sat Feb 28 05:43:47.129524 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:13085] [client 13.71.191.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/input.php"] [unique_id "aaIQE36mbajs3bzQGyvfegAAAUQ"]
[Sat Feb 28 05:43:47.563816 2026] [:error] [pid 11791:tid 11806] [client 13.71.191.191:13275] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaIQE2uX5e1Q32gqxH2Q-gAAAQ0"]
[Sat Feb 28 05:43:48.095662 2026] [:error] [pid 39292:tid 39298] [client 13.71.191.191:13281] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaIQFKIAO5fN7BxyqcE2MgAAAMQ"]
[Sat Feb 28 05:43:48.642818 2026] [:error] [pid 39184:tid 39238] [client 13.71.191.191:13001] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaIQFFtZF9Zd_U7easArMAAAAFM"]
[Sat Feb 28 05:43:49.250209 2026] [:error] [pid 39184:tid 39226] [client 13.71.191.191:13097] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/uploads__.php"] [unique_id "aaIQFVtZF9Zd_U7easArMQAAAEc"]
[Sat Feb 28 05:43:49.718894 2026] [:error] [pid 11791:tid 11794] [client 13.71.191.191:13246] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaIQFWuX5e1Q32gqxH2RBAAAAQE"]
[Sat Feb 28 05:43:50.173494 2026] [:error] [pid 39185:tid 39265] [client 13.71.191.191:13072] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaIQFhVE-FfM89u7BQY9HAAAAJM"]
[Sat Feb 28 05:43:50.608989 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:13265] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaIQFn6mbajs3bzQGyvfggAAAVc"]
[Sat Feb 28 05:43:51.094814 2026] [:error] [pid 11791:tid 11816] [client 13.71.191.191:13060] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/light/vSqcqEF.php"] [unique_id "aaIQF2uX5e1Q32gqxH2RCQAAARc"]
[Sat Feb 28 05:43:51.605575 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:13234] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaIQF36mbajs3bzQGyvfiAAAAUw"]
[Sat Feb 28 05:43:52.069355 2026] [:error] [pid 11791:tid 11805] [client 13.71.191.191:13077] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaIQGGuX5e1Q32gqxH2RDAAAAQw"]
[Sat Feb 28 05:43:52.578110 2026] [:error] [pid 39185:tid 39252] [client 13.71.191.191:13168] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaIQGBVE-FfM89u7BQY9HQAAAIY"]
[Sat Feb 28 05:43:53.021946 2026] [:error] [pid 39292:tid 39310] [client 13.71.191.191:13061] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/jcrop/Jcrop.php"] [unique_id "aaIQGaIAO5fN7BxyqcE2OwAAANA"]
[Sat Feb 28 05:43:53.489940 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:13162] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaIQGaIAO5fN7BxyqcE2PQAAAMM"]
[Sat Feb 28 05:43:53.935555 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:13248] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaIQGaIAO5fN7BxyqcE2PwAAANU"]
[Sat Feb 28 05:43:54.488691 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:13169] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaIQGqIAO5fN7BxyqcE2QgAAAMY"]
[Sat Feb 28 05:43:54.918988 2026] [:error] [pid 39292:tid 39311] [client 13.71.191.191:13247] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/service.php"] [unique_id "aaIQGqIAO5fN7BxyqcE2RAAAANE"]
[Sat Feb 28 05:43:55.411044 2026] [:error] [pid 39184:tid 39235] [client 13.71.191.191:12996] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aaIQG1tZF9Zd_U7easArNAAAAFA"]
[Sat Feb 28 05:43:56.072541 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:13103] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aaIQHH6mbajs3bzQGyvflgAAAUQ"]
[Sat Feb 28 05:43:56.575200 2026] [:error] [pid 39184:tid 39224] [client 13.71.191.191:13161] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aaIQHFtZF9Zd_U7easArNwAAAEU"]
[Sat Feb 28 05:43:57.143935 2026] [:error] [pid 22194:tid 22211] [client 13.71.191.191:13156] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "aaIQHX6mbajs3bzQGyvfmAAAAU8"]
[Sat Feb 28 05:43:57.665164 2026] [:error] [pid 39292:tid 39314] [client 13.71.191.191:13066] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aaIQHaIAO5fN7BxyqcE2TwAAANQ"]
[Sat Feb 28 05:43:58.187763 2026] [:error] [pid 22194:tid 22201] [client 13.71.191.191:13141] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aaIQHn6mbajs3bzQGyvfnwAAAUU"]
[Sat Feb 28 05:43:58.646595 2026] [:error] [pid 22194:tid 22217] [client 13.71.191.191:13178] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aaIQHn6mbajs3bzQGyvfowAAAVU"]
[Sat Feb 28 05:43:59.142877 2026] [:error] [pid 22194:tid 22197] [client 13.71.191.191:13241] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Sat Feb 28 05:43:59.357910 2026] [:error] [pid 22194:tid 22198] [client 13.71.191.191:13241] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Feb 28 05:43:59.790482 2026] [:error] [pid 22194:tid 22219] [client 13.71.191.191:13241] File does not exist: /usr/local/apache/htdocs/suspended-page/mrbmppbo.php
[Sat Feb 28 05:44:00.234427 2026] [:error] [pid 22194:tid 22214] [client 13.71.191.191:13241] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat Feb 28 05:44:00.670097 2026] [:error] [pid 22194:tid 22208] [client 13.71.191.191:13241] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php
[Sat Feb 28 05:44:00.886537 2026] [:error] [pid 22194:tid 22202] [client 13.71.191.191:13241] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Feb 28 05:44:01.426309 2026] [:error] [pid 22194:tid 22210] [client 13.71.191.191:13241] File does not exist: /usr/local/apache/htdocs/suspended-page/cms.php
[Sat Feb 28 05:44:01.637992 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:13241] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "aaIQIX6mbajs3bzQGyvfvgAAAVY"]
[Sat Feb 28 05:44:02.367433 2026] [:error] [pid 39185:tid 39262] [client 13.71.191.191:13145] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "aaIQIhVE-FfM89u7BQY9IQAAAJA"]
[Sat Feb 28 05:44:03.199949 2026] [:error] [pid 22194:tid 22200] [client 13.71.191.191:13287] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "aaIQI36mbajs3bzQGyvfwAAAAUQ"]
[Sat Feb 28 05:44:04.011943 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:13064] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "aaIQJKIAO5fN7BxyqcE2YAAAAMI"]
[Sat Feb 28 05:44:04.530172 2026] [:error] [pid 39292:tid 39313] [client 13.71.191.191:13056] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duck.php"] [unique_id "aaIQJKIAO5fN7BxyqcE2ZQAAANM"]
[Sat Feb 28 05:44:05.254243 2026] [:error] [pid 39292:tid 39300] [client 13.71.191.191:13088] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duck.php"] [unique_id "aaIQJaIAO5fN7BxyqcE2cQAAAMY"]
[Sat Feb 28 05:44:05.868762 2026] [:error] [pid 39292:tid 39297] [client 13.71.191.191:13236] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duck.php"] [unique_id "aaIQJaIAO5fN7BxyqcE2dwAAAMM"]
[Sat Feb 28 05:44:06.492683 2026] [:error] [pid 11791:tid 11803] [client 13.71.191.191:13070] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/duck.php"] [unique_id "aaIQJmuX5e1Q32gqxH2RIgAAAQo"]
[Sat Feb 28 05:44:07.062453 2026] [:error] [pid 39292:tid 39308] [client 13.71.191.191:13167] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaIQJ6IAO5fN7BxyqcE2gAAAAM4"]
[Sat Feb 28 05:44:08.090467 2026] [:error] [pid 39292:tid 39315] [client 13.71.191.191:13106] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaIQKKIAO5fN7BxyqcE2hQAAANU"]
[Sat Feb 28 05:44:08.954126 2026] [:error] [pid 22194:tid 22218] [client 13.71.191.191:13078] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaIQKH6mbajs3bzQGyvfyAAAAVY"]
[Sat Feb 28 05:44:09.466383 2026] [:error] [pid 22194:tid 22196] [client 13.71.191.191:13180] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaIQKX6mbajs3bzQGyvfywAAAUA"]
[Sat Feb 28 05:44:09.907673 2026] [:error] [pid 39292:tid 39296] [client 13.71.191.191:13295] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaIQKaIAO5fN7BxyqcE2iwAAAMI"]
[Sat Feb 28 05:44:10.347367 2026] [:error] [pid 39185:tid 39266] [client 13.71.191.191:13235] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaIQKhVE-FfM89u7BQY9KgAAAJQ"]
[Sat Feb 28 05:44:10.767446 2026] [:error] [pid 39185:tid 39259] [client 13.71.191.191:13000] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaIQKhVE-FfM89u7BQY9KwAAAI0"]
[Sat Feb 28 05:44:11.204637 2026] [:error] [pid 39183:tid 39211] [client 13.71.191.191:13003] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqbayyrz.php"] [unique_id "aaIQKxCf4HvhVePw3LZhcgAAABM"]
[Sat Feb 28 05:49:19.690793 2026] [:error] [pid 39184:tid 39240] [client 74.243.251.125:14227] File does not exist: /usr/local/apache/htdocs/suspended-page/asc.php
[Sat Feb 28 06:13:51.597926 2026] [:error] [pid 22194:tid 22216] [client 129.159.56.14:34494] [client 129.159.56.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aaIXH36mbajs3bzQGyv3EQAAAVQ"]
[Sat Feb 28 06:30:44.133016 2026] [:error] [pid 22194:tid 22202] [client 146.190.160.27:60276] [client 146.190.160.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.190.160.27, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaIbFH6mbajs3bzQGysBvwAAAUY"]
[Sat Feb 28 06:30:44.136781 2026] [:error] [pid 22194:tid 22202] [client 146.190.160.27:60276] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 06:30:46.011701 2026] [:error] [pid 22194:tid 22205] [client 146.190.160.27:60276] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaIbFn6mbajs3bzQGysBzQAAAUk"]
[Sat Feb 28 06:30:46.337097 2026] [:error] [pid 39292:tid 39308] [client 146.190.160.27:53403] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaIbFqIAO5fN7BxyqcFn5wAAAM4"]
[Sat Feb 28 06:30:46.662194 2026] [:error] [pid 39184:tid 39232] [client 146.190.160.27:54828] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaIbFltZF9Zd_U7easA7oAAAAE0"]
[Sat Feb 28 06:30:46.989108 2026] [:error] [pid 39292:tid 39305] [client 146.190.160.27:55721] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaIbFqIAO5fN7BxyqcFn6wAAAMs"]
[Sat Feb 28 06:30:47.317711 2026] [:error] [pid 39292:tid 39311] [client 146.190.160.27:56909] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaIbF6IAO5fN7BxyqcFn7wAAANE"]
[Sat Feb 28 06:30:47.643272 2026] [:error] [pid 11791:tid 11812] [client 146.190.160.27:58250] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaIbF2uX5e1Q32gqxH2qOQAAARM"]
[Sat Feb 28 06:30:47.985858 2026] [:error] [pid 39292:tid 39312] [client 146.190.160.27:59220] [client 146.190.160.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaIbF6IAO5fN7BxyqcFn8wAAANI"]
[Sat Feb 28 07:46:42.546934 2026] [:error] [pid 22194:tid 22208] [client 1.15.52.154:45496] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaIs4n6mbajs3bzQGys2sAAAAUw"]
[Sat Feb 28 07:47:03.233026 2026] [:error] [pid 22194:tid 22206] [client 43.166.255.122:54252] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaIs936mbajs3bzQGys3CAAAAUo"]
[Sat Feb 28 12:14:27.151061 2026] [:error] [pid 11791:tid 11811] [client 194.146.12.7:57866] [client 194.146.12.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aaJro2uX5e1Q32gqxH3_pgAAARI"], referer: binance.com
[Sat Feb 28 12:14:30.723428 2026] [:error] [pid 11791:tid 11811] [client 194.146.12.7:59387] [client 194.146.12.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aaJrpmuX5e1Q32gqxH3_ugAAARI"], referer: binance.com
[Sat Feb 28 12:34:07.074173 2026] [:error] [pid 22194:tid 22219] [client 91.224.92.164:53170] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aaJwP36mbajs3bzQGys34gAAAVc"]
[Sat Feb 28 12:34:08.396577 2026] [:error] [pid 39184:tid 39227] [client 91.224.92.164:42693] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aaJwQFtZF9Zd_U7easDUNAAAAEg"]
[Sat Feb 28 13:30:29.999730 2026] [:error] [pid 11791:tid 11814] [client 45.141.233.196:62963] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaJ9dWuX5e1Q32gqxH0l8QAAARU"]
[Sat Feb 28 13:30:29.999806 2026] [:error] [pid 11791:tid 11814] [client 45.141.233.196:62963] [client 45.141.233.196] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.141.233.196 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaJ9dWuX5e1Q32gqxH0l8QAAARU"]
[Sat Feb 28 13:30:30.529480 2026] [:error] [pid 22194:tid 22203] [client 45.141.233.196:63842] [client 45.141.233.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.141.233.196, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaJ9dn6mbajs3bzQGytFdQAAAUc"]
[Sat Feb 28 13:30:30.529590 2026] [:error] [pid 22194:tid 22203] [client 45.141.233.196:63842] [client 45.141.233.196] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.141.233.196 on wp-login.php, counter = 15"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaJ9dn6mbajs3bzQGytFdQAAAUc"]
[Sat Feb 28 13:47:06.681957 2026] [:error] [pid 39185:tid 39265] [client 43.166.255.122:50018] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaKBWhVE-FfM89u7BQbqdgAAAJM"]
[Sat Feb 28 14:08:14.750659 2026] [:error] [pid 39185:tid 39247] [client 49.7.227.204:51862] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaKGThVE-FfM89u7BQYDMgAAAIE"]
[Sat Feb 28 14:40:15.767100 2026] [:error] [pid 39185:tid 39262] [client 4.204.192.31:50491] [client 4.204.192.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaKNzxVE-FfM89u7BQYjbwAAAJA"]
[Sat Feb 28 14:40:28.948461 2026] [:error] [pid 39184:tid 39222] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Sat Feb 28 14:40:31.970812 2026] [:error] [pid 39184:tid 39236] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat Feb 28 14:40:32.198990 2026] [:error] [pid 39184:tid 39234] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Sat Feb 28 14:40:32.411209 2026] [:error] [pid 39184:tid 39232] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Sat Feb 28 14:40:32.624003 2026] [:error] [pid 39184:tid 39220] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Sat Feb 28 14:40:32.859020 2026] [:error] [pid 39184:tid 39237] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sat Feb 28 14:40:33.090805 2026] [:error] [pid 39184:tid 39238] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Sat Feb 28 14:40:33.304091 2026] [:error] [pid 39184:tid 39235] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Sat Feb 28 14:40:33.533535 2026] [:error] [pid 39184:tid 39235] [client 4.204.192.31:62843] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Feb 28 14:40:33.755064 2026] [:error] [pid 39184:tid 39243] [client 4.204.192.31:62843] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaKN4VtZF9Zd_U7easDupAAAAFg"]
[Sat Feb 28 14:40:37.534538 2026] [:error] [pid 52460:tid 52468] [client 4.204.192.31:43334] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaKN5bLWOogAgHGh62RygAAAAYU"]
[Sat Feb 28 14:40:44.739318 2026] [:error] [pid 39184:tid 39241] [client 4.204.192.31:59211] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaKN7FtZF9Zd_U7easDurwAAAFY"]
[Sat Feb 28 14:40:52.761962 2026] [:error] [pid 39292:tid 39299] [client 4.204.192.31:55926] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaKN9KIAO5fN7BxyqcHxAAAAAMU"]
[Sat Feb 28 14:40:55.951082 2026] [:error] [pid 39183:tid 39207] [client 4.204.192.31:55894] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaKN9xCf4HvhVePw3Lb4lQAAAA8"]
[Sat Feb 28 14:40:59.941215 2026] [:error] [pid 11791:tid 11797] [client 4.204.192.31:47202] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaKN-2uX5e1Q32gqxH1KMgAAAQQ"]
[Sat Feb 28 14:41:07.313995 2026] [:error] [pid 39185:tid 39257] [client 4.204.192.31:44720] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKOAxVE-FfM89u7BQYkJgAAAIs"]
[Sat Feb 28 14:41:12.879235 2026] [:error] [pid 52460:tid 52476] [client 4.204.192.31:44693] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKOCLLWOogAgHGh62RzAQAAAY0"]
[Sat Feb 28 14:41:16.171669 2026] [:error] [pid 11791:tid 11814] [client 4.204.192.31:52588] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKODGuX5e1Q32gqxH1KQwAAARU"]
[Sat Feb 28 14:41:22.144668 2026] [:error] [pid 22194:tid 22207] [client 4.204.192.31:45793] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKOEn6mbajs3bzQGytaDgAAAUs"]
[Sat Feb 28 14:41:28.442752 2026] [:error] [pid 39292:tid 39308] [client 4.204.192.31:45768] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaKOGKIAO5fN7BxyqcHxXwAAAM4"]
[Sat Feb 28 14:41:30.256665 2026] [:error] [pid 52460:tid 52467] [client 4.204.192.31:1840] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaKOGrLWOogAgHGh62RzDgAAAYQ"]
[Sat Feb 28 14:41:36.775001 2026] [:error] [pid 39185:tid 39266] [client 4.204.192.31:51190] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Feb 28 14:41:36.987686 2026] [:error] [pid 39185:tid 39248] [client 4.204.192.31:51190] File does not exist: /usr/local/apache/htdocs/suspended-page/zeal.php
[Sat Feb 28 14:41:37.201678 2026] [:error] [pid 39185:tid 39253] [client 4.204.192.31:51190] File does not exist: /usr/local/apache/htdocs/suspended-page/asf.php
[Sat Feb 28 14:41:37.851758 2026] [:error] [pid 39185:tid 39261] [client 4.204.192.31:51190] File does not exist: /usr/local/apache/htdocs/suspended-page/sa.php
[Sat Feb 28 15:27:49.794003 2026] [:error] [pid 22194:tid 22217] [client 45.153.34.31:54264] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aaKY9X6mbajs3bzQGytngAAAAVU"]
[Sat Feb 28 15:29:55.912731 2026] [:error] [pid 39292:tid 39315] [client 104.194.155.80:59110] [client 104.194.155.80] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aaKZc6IAO5fN7BxyqcECTwAAANU"]
[Sat Feb 28 16:23:20.064097 2026] [:error] [pid 49763:tid 49790] [client 43.133.69.37:52998] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaKl-LTHSOG_yf2PpqHlSwAAAdg"]
[Sat Feb 28 17:03:03.605814 2026] [:error] [pid 49763:tid 49773] [client 204.76.203.25:41506] [client 204.76.203.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aaKvR7THSOG_yf2PpqEDywAAAcc"]
[Sat Feb 28 17:25:22.310635 2026] [:error] [pid 49763:tid 49768] [client 138.199.35.10:42577] [client 138.199.35.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.199.35.10, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaK0grTHSOG_yf2PpqEVlQAAAcI"]
[Sat Feb 28 17:25:22.313887 2026] [:error] [pid 49763:tid 49768] [client 138.199.35.10:42577] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 17:25:24.074329 2026] [:error] [pid 49763:tid 49777] [client 138.199.35.10:42577] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaK0hLTHSOG_yf2PpqEVogAAAcs"]
[Sat Feb 28 17:25:24.386873 2026] [:error] [pid 39185:tid 39247] [client 138.199.35.10:35726] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaK0hBVE-FfM89u7BQZvIgAAAIE"]
[Sat Feb 28 17:25:24.694936 2026] [:error] [pid 39292:tid 39316] [client 138.199.35.10:35738] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaK0hKIAO5fN7BxyqcEoTQAAANY"]
[Sat Feb 28 17:25:25.005101 2026] [:error] [pid 39183:tid 39209] [client 138.199.35.10:31763] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaK0hRCf4HvhVePw3LZEbwAAABE"]
[Sat Feb 28 17:25:25.314303 2026] [:error] [pid 52460:tid 52474] [client 138.199.35.10:35752] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaK0hbLWOogAgHGh62S0ogAAAYs"]
[Sat Feb 28 17:25:25.624701 2026] [:error] [pid 11791:tid 11814] [client 138.199.35.10:42154] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaK0hWuX5e1Q32gqxH2CcAAAARU"]
[Sat Feb 28 17:25:25.933551 2026] [:error] [pid 11791:tid 11816] [client 138.199.35.10:35770] [client 138.199.35.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaK0hWuX5e1Q32gqxH2CdAAAARc"]
[Sat Feb 28 18:18:38.195282 2026] [:error] [pid 52460:tid 52487] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/yo.php
[Sat Feb 28 18:18:38.411091 2026] [:error] [pid 52460:tid 52472] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Sat Feb 28 18:18:38.632326 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/ba.php
[Sat Feb 28 18:18:38.845850 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/ym.php
[Sat Feb 28 18:18:39.062857 2026] [:error] [pid 52460:tid 52481] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Feb 28 18:18:39.279010 2026] [:error] [pid 52460:tid 52487] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php
[Sat Feb 28 18:18:39.495170 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Feb 28 18:18:39.717228 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat Feb 28 18:18:39.929080 2026] [:error] [pid 52460:tid 52465] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sat Feb 28 18:18:40.141879 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:56454] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Sat Feb 28 18:18:40.350499 2026] [:error] [pid 52460:tid 52472] [client 20.220.61.156:56454] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaLBALLWOogAgHGh62Tw9wAAAYk"]
[Sat Feb 28 18:18:40.775261 2026] [:error] [pid 52460:tid 52465] [client 20.220.61.156:56463] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaLBALLWOogAgHGh62Tw_AAAAYI"]
[Sat Feb 28 18:18:41.195230 2026] [:error] [pid 39184:tid 39242] [client 20.220.61.156:56466] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaLBAVtZF9Zd_U7easBdlQAAAFc"]
[Sat Feb 28 18:18:41.624450 2026] [:error] [pid 39183:tid 39197] [client 20.220.61.156:56525] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaLBARCf4HvhVePw3LZ1LwAAAAU"]
[Sat Feb 28 18:18:42.043911 2026] [:error] [pid 52460:tid 52479] [client 20.220.61.156:56457] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaLBArLWOogAgHGh62TxCAAAAZA"]
[Sat Feb 28 18:18:42.467051 2026] [:error] [pid 49763:tid 49785] [client 20.220.61.156:56529] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaLBArTHSOG_yf2PpqFMvAAAAdM"]
[Sat Feb 28 18:18:42.890643 2026] [:error] [pid 49763:tid 49784] [client 20.220.61.156:56551] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaLBArTHSOG_yf2PpqFMvgAAAdI"]
[Sat Feb 28 18:18:43.307565 2026] [:error] [pid 39184:tid 39241] [client 20.220.61.156:56468] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aaLBA1tZF9Zd_U7easBdmwAAAFY"]
[Sat Feb 28 18:18:43.736772 2026] [:error] [pid 39183:tid 39212] [client 20.220.61.156:56555] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaLBAxCf4HvhVePw3LZ1OgAAABQ"]
[Sat Feb 28 18:18:44.159829 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:56517] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaLBBLLWOogAgHGh62TxFwAAAYE"]
[Sat Feb 28 18:18:44.574878 2026] [:error] [pid 49763:tid 49767] [client 20.220.61.156:56557] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaLBBLTHSOG_yf2PpqFMyAAAAcE"]
[Sat Feb 28 18:18:44.990100 2026] [:error] [pid 49763:tid 49785] [client 20.220.61.156:56530] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "aaLBBLTHSOG_yf2PpqFMzgAAAdM"]
[Sat Feb 28 18:18:45.407348 2026] [:error] [pid 39184:tid 39226] [client 20.220.61.156:56552] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaLBBVtZF9Zd_U7easBdoAAAAEc"]
[Sat Feb 28 18:18:45.835441 2026] [:error] [pid 39183:tid 39207] [client 20.220.61.156:56467] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaLBBRCf4HvhVePw3LZ1QQAAAA8"]
[Sat Feb 28 18:18:46.250188 2026] [:error] [pid 49763:tid 49782] [client 20.220.61.156:56540] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaLBBrTHSOG_yf2PpqFM1wAAAdA"]
[Sat Feb 28 18:18:46.665472 2026] [:error] [pid 39184:tid 39233] [client 20.220.61.156:56513] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mails.php"] [unique_id "aaLBBltZF9Zd_U7easBdpAAAAE4"]
[Sat Feb 28 18:18:47.087981 2026] [:error] [pid 39183:tid 39203] [client 20.220.61.156:56550] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaLBBxCf4HvhVePw3LZ1SQAAAAs"]
[Sat Feb 28 18:18:47.537583 2026] [:error] [pid 39183:tid 39194] [client 20.220.61.156:56519] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaLBBxCf4HvhVePw3LZ1SwAAAAI"]
[Sat Feb 28 18:18:47.955719 2026] [:error] [pid 49763:tid 49775] [client 20.220.61.156:56522] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaLBB7THSOG_yf2PpqFM2QAAAck"]
[Sat Feb 28 18:18:48.370854 2026] [:error] [pid 39183:tid 39207] [client 20.220.61.156:56464] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "aaLBCBCf4HvhVePw3LZ1TgAAAA8"]
[Sat Feb 28 18:18:48.785776 2026] [:error] [pid 39183:tid 39198] [client 20.220.61.156:56450] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaLBCBCf4HvhVePw3LZ1UgAAAAY"]
[Sat Feb 28 18:18:49.204356 2026] [:error] [pid 39292:tid 39315] [client 20.220.61.156:56518] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaLBCaIAO5fN7BxyqcE-wAAAANU"]
[Sat Feb 28 18:18:49.623718 2026] [:error] [pid 49763:tid 49787] [client 20.220.61.156:56548] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaLBCbTHSOG_yf2PpqFM5gAAAdU"]
[Sat Feb 28 18:18:50.064795 2026] [:error] [pid 11791:tid 11797] [client 20.220.61.156:56563] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "aaLBCmuX5e1Q32gqxH2SiwAAAQQ"]
[Sat Feb 28 18:18:50.491584 2026] [:error] [pid 49763:tid 49777] [client 20.220.61.156:56451] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaLBCrTHSOG_yf2PpqFM7gAAAcs"]
[Sat Feb 28 18:18:50.916143 2026] [:error] [pid 49763:tid 49780] [client 20.220.61.156:56479] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaLBCrTHSOG_yf2PpqFM8gAAAc4"]
[Sat Feb 28 18:18:51.348011 2026] [:error] [pid 52460:tid 52485] [client 20.220.61.156:56516] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaLBC7LWOogAgHGh62TxZgAAAZY"]
[Sat Feb 28 18:18:51.788054 2026] [:error] [pid 52460:tid 52481] [client 20.220.61.156:56448] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/key.php"] [unique_id "aaLBC7LWOogAgHGh62TxbgAAAZI"]
[Sat Feb 28 18:18:52.220705 2026] [:error] [pid 52460:tid 52474] [client 20.220.61.156:56477] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaLBDLLWOogAgHGh62TxcgAAAYs"]
[Sat Feb 28 18:18:52.632212 2026] [:error] [pid 52460:tid 52472] [client 20.220.61.156:31681] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaLBDLLWOogAgHGh62TxdQAAAYk"]
[Sat Feb 28 18:18:53.094727 2026] [:error] [pid 39292:tid 39313] [client 20.220.61.156:56534] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaLBDaIAO5fN7BxyqcE-xQAAANM"]
[Sat Feb 28 18:18:53.563621 2026] [:error] [pid 52460:tid 52480] [client 20.220.61.156:56471] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/667.php"] [unique_id "aaLBDbLWOogAgHGh62TxeQAAAZE"]
[Sat Feb 28 18:18:54.010573 2026] [:error] [pid 39185:tid 39268] [client 20.220.61.156:31680] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaLBDhVE-FfM89u7BQZ7JQAAAJY"]
[Sat Feb 28 18:18:54.495956 2026] [:error] [pid 49763:tid 49776] [client 20.220.61.156:56553] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaLBDrTHSOG_yf2PpqFNAAAAAco"]
[Sat Feb 28 18:18:55.006819 2026] [:error] [pid 52460:tid 52466] [client 20.220.61.156:56568] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaLBD7LWOogAgHGh62TxggAAAYM"]
[Sat Feb 28 18:18:55.429740 2026] [:error] [pid 39184:tid 39243] [client 20.220.61.156:56520] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctfbe.php"] [unique_id "aaLBD1tZF9Zd_U7easBduwAAAFg"]
[Sat Feb 28 18:18:55.865929 2026] [:error] [pid 52460:tid 52479] [client 20.220.61.156:56524] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaLBD7LWOogAgHGh62TxhwAAAZA"]
[Sat Feb 28 18:18:56.332506 2026] [:error] [pid 52460:tid 52485] [client 20.220.61.156:31700] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaLBELLWOogAgHGh62TxiwAAAZY"]
[Sat Feb 28 18:18:56.743263 2026] [:error] [pid 52460:tid 52469] [client 20.220.61.156:56559] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaLBELLWOogAgHGh62TxkgAAAYY"]
[Sat Feb 28 18:18:57.169546 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:56474] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkweu.php"] [unique_id "aaLBEbLWOogAgHGh62TxlgAAAYg"]
[Sat Feb 28 18:18:57.584176 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:56562] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaLBEbLWOogAgHGh62TxmgAAAYc"]
[Sat Feb 28 18:18:57.995096 2026] [:error] [pid 52460:tid 52474] [client 20.220.61.156:56497] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaLBEbLWOogAgHGh62TxpAAAAYs"]
[Sat Feb 28 18:18:58.405800 2026] [:error] [pid 52460:tid 52479] [client 20.220.61.156:56473] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaLBErLWOogAgHGh62TxqgAAAZA"]
[Sat Feb 28 18:18:58.831170 2026] [:error] [pid 39292:tid 39294] [client 20.220.61.156:56533] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qdlte.php"] [unique_id "aaLBEqIAO5fN7BxyqcE-zAAAAMA"]
[Sat Feb 28 18:18:59.258833 2026] [:error] [pid 39184:tid 39223] [client 20.220.61.156:56485] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaLBE1tZF9Zd_U7easBdwgAAAEQ"]
[Sat Feb 28 18:18:59.682701 2026] [:error] [pid 39183:tid 39199] [client 20.220.61.156:56523] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaLBExCf4HvhVePw3LZ1ZQAAAAc"]
[Sat Feb 28 18:19:00.117084 2026] [:error] [pid 39183:tid 39193] [client 20.220.61.156:31735] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaLBFBCf4HvhVePw3LZ1ZwAAAAE"]
[Sat Feb 28 18:19:00.570174 2026] [:error] [pid 39184:tid 39232] [client 20.220.61.156:31703] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f7.php"] [unique_id "aaLBFFtZF9Zd_U7easBdxwAAAE0"]
[Sat Feb 28 18:19:00.989696 2026] [:error] [pid 39185:tid 39265] [client 20.220.61.156:56452] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaLBFBVE-FfM89u7BQZ7KQAAAJM"]
[Sat Feb 28 18:19:01.407770 2026] [:error] [pid 39183:tid 39207] [client 20.220.61.156:56532] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaLBFRCf4HvhVePw3LZ1cAAAAA8"]
[Sat Feb 28 18:19:01.854277 2026] [:error] [pid 39292:tid 39307] [client 20.220.61.156:56536] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaLBFaIAO5fN7BxyqcE-0AAAAM0"]
[Sat Feb 28 18:19:02.277982 2026] [:error] [pid 52460:tid 52487] [client 20.220.61.156:56544] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaLBFrLWOogAgHGh62TxtwAAAZg"]
[Sat Feb 28 18:19:02.698370 2026] [:error] [pid 52460:tid 52473] [client 20.220.61.156:56465] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaLBFrLWOogAgHGh62TxugAAAYo"]
[Sat Feb 28 18:19:03.114134 2026] [:error] [pid 39292:tid 39305] [client 20.220.61.156:31712] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaLBF6IAO5fN7BxyqcE-0QAAAMs"]
[Sat Feb 28 18:19:03.527343 2026] [:error] [pid 22194:tid 22212] [client 20.220.61.156:56502] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaLBF36mbajs3bzQGyuCpwAAAVA"]
[Sat Feb 28 18:19:03.944904 2026] [:error] [pid 39183:tid 39204] [client 20.220.61.156:56569] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp7.php"] [unique_id "aaLBFxCf4HvhVePw3LZ1dgAAAAw"]
[Sat Feb 28 18:19:04.369697 2026] [:error] [pid 39183:tid 39215] [client 20.220.61.156:56558] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaLBGBCf4HvhVePw3LZ1egAAABc"]
[Sat Feb 28 18:19:04.809836 2026] [:error] [pid 39184:tid 39222] [client 20.220.61.156:56561] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaLBGFtZF9Zd_U7easBd0gAAAEM"]
[Sat Feb 28 18:19:05.277099 2026] [:error] [pid 39185:tid 39256] [client 20.220.61.156:56470] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaLBGRVE-FfM89u7BQZ7MgAAAIo"]
[Sat Feb 28 18:19:05.717539 2026] [:error] [pid 49763:tid 49770] [client 20.220.61.156:56575] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aaLBGbTHSOG_yf2PpqFNFAAAAcQ"]
[Sat Feb 28 18:19:06.154620 2026] [:error] [pid 52460:tid 52470] [client 20.220.61.156:56538] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaLBGrLWOogAgHGh62TxxgAAAYc"]
[Sat Feb 28 18:19:06.578990 2026] [:error] [pid 49763:tid 49768] [client 20.220.61.156:31685] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaLBGrTHSOG_yf2PpqFNGAAAAcI"]
[Sat Feb 28 18:19:07.024699 2026] [:error] [pid 49763:tid 49773] [client 20.220.61.156:56560] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaLBG7THSOG_yf2PpqFNHgAAAcc"]
[Sat Feb 28 18:19:07.487487 2026] [:error] [pid 39184:tid 39226] [client 20.220.61.156:31705] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aaLBG1tZF9Zd_U7easBd1wAAAEc"]
[Sat Feb 28 18:19:07.948696 2026] [:error] [pid 49763:tid 49775] [client 20.220.61.156:56543] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaLBG7THSOG_yf2PpqFNIwAAAck"]
[Sat Feb 28 18:19:08.381545 2026] [:error] [pid 52460:tid 52483] [client 20.220.61.156:56514] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaLBHLLWOogAgHGh62TxzgAAAZQ"]
[Sat Feb 28 18:19:08.855681 2026] [:error] [pid 39184:tid 39232] [client 20.220.61.156:31710] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaLBHFtZF9Zd_U7easBd2gAAAE0"]
[Sat Feb 28 18:19:09.301514 2026] [:error] [pid 22194:tid 22213] [client 20.220.61.156:31686] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffbsq.php"] [unique_id "aaLBHX6mbajs3bzQGyuCsQAAAVE"]
[Sat Feb 28 18:19:09.725508 2026] [:error] [pid 49763:tid 49776] [client 20.220.61.156:56515] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaLBHbTHSOG_yf2PpqFNKgAAAco"]
[Sat Feb 28 18:19:10.214600 2026] [:error] [pid 22194:tid 22206] [client 20.220.61.156:56541] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaLBHn6mbajs3bzQGyuCswAAAUo"]
[Sat Feb 28 18:19:10.636496 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:56554] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaLBHrLWOogAgHGh62Tx2AAAAYE"]
[Sat Feb 28 18:19:11.109590 2026] [:error] [pid 52460:tid 52482] [client 20.220.61.156:56460] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "aaLBH7LWOogAgHGh62Tx4AAAAZM"]
[Sat Feb 28 18:19:11.555212 2026] [:error] [pid 52460:tid 52477] [client 20.220.61.156:56458] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaLBH7LWOogAgHGh62Tx4wAAAY4"]
[Sat Feb 28 18:19:11.980043 2026] [:error] [pid 49763:tid 49767] [client 20.220.61.156:31719] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaLBH7THSOG_yf2PpqFNMQAAAcE"]
[Sat Feb 28 18:19:12.395997 2026] [:error] [pid 39184:tid 39221] [client 20.220.61.156:56526] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaLBIFtZF9Zd_U7easBd3wAAAEI"]
[Sat Feb 28 18:19:12.813370 2026] [:error] [pid 49763:tid 49784] [client 20.220.61.156:56499] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaLBILTHSOG_yf2PpqFNOAAAAdI"]
[Sat Feb 28 18:19:13.244618 2026] [:error] [pid 52460:tid 52482] [client 20.220.61.156:31635] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLBIbLWOogAgHGh62Tx8QAAAZM"]
[Sat Feb 28 18:19:13.669326 2026] [:error] [pid 49763:tid 49779] [client 20.220.61.156:56461] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLBIbTHSOG_yf2PpqFNQAAAAc0"]
[Sat Feb 28 18:19:14.105261 2026] [:error] [pid 49763:tid 49789] [client 20.220.61.156:56527] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLBIrTHSOG_yf2PpqFNRwAAAdc"]
[Sat Feb 28 18:19:14.534944 2026] [:error] [pid 49763:tid 49785] [client 20.220.61.156:56564] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLBIrTHSOG_yf2PpqFNUAAAAdM"]
[Sat Feb 28 18:19:14.998357 2026] [:error] [pid 52460:tid 52468] [client 20.220.61.156:56547] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaLBIrLWOogAgHGh62TyAQAAAYU"]
[Sat Feb 28 18:19:15.437420 2026] [:error] [pid 22194:tid 22216] [client 20.220.61.156:56504] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaLBI36mbajs3bzQGyuCvwAAAVQ"]
[Sat Feb 28 18:19:15.873499 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:31691] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaLBI7LWOogAgHGh62TyEAAAAYg"]
[Sat Feb 28 18:19:16.301470 2026] [:error] [pid 52460:tid 52463] [client 20.220.61.156:56456] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kma.php"] [unique_id "aaLBJLLWOogAgHGh62TyFQAAAYA"]
[Sat Feb 28 18:19:16.720528 2026] [:error] [pid 52460:tid 52486] [client 20.220.61.156:56462] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaLBJLLWOogAgHGh62TyHAAAAZc"]
[Sat Feb 28 18:19:17.155965 2026] [:error] [pid 39183:tid 39207] [client 20.220.61.156:31619] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaLBJRCf4HvhVePw3LZ1gAAAAA8"]
[Sat Feb 28 18:19:17.570509 2026] [:error] [pid 39183:tid 39197] [client 20.220.61.156:31696] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaLBJRCf4HvhVePw3LZ1gwAAAAU"]
[Sat Feb 28 18:19:18.008842 2026] [:error] [pid 49763:tid 49782] [client 20.220.61.156:56537] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aaLBJrTHSOG_yf2PpqFNVQAAAdA"]
[Sat Feb 28 18:19:18.422525 2026] [:error] [pid 22194:tid 22220] [client 20.220.61.156:56570] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaLBJn6mbajs3bzQGyuCygAAAVg"]
[Sat Feb 28 18:19:18.844489 2026] [:error] [pid 52460:tid 52471] [client 20.220.61.156:56449] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaLBJrLWOogAgHGh62TyKgAAAYg"]
[Sat Feb 28 18:19:19.274214 2026] [:error] [pid 52460:tid 52487] [client 20.220.61.156:56574] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaLBJ7LWOogAgHGh62TyLwAAAZg"]
[Sat Feb 28 18:19:19.710308 2026] [:error] [pid 52460:tid 52486] [client 20.220.61.156:56455] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova-wso.php"] [unique_id "aaLBJ7LWOogAgHGh62TyMwAAAZc"]
[Sat Feb 28 18:19:20.178152 2026] [:error] [pid 49763:tid 49770] [client 20.220.61.156:31720] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aaLBKLTHSOG_yf2PpqFNWwAAAcQ"]
[Sat Feb 28 18:19:20.616256 2026] [:error] [pid 22194:tid 22207] [client 20.220.61.156:56459] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aaLBKH6mbajs3bzQGyuCzAAAAUs"]
[Sat Feb 28 18:19:21.115285 2026] [:error] [pid 39184:tid 39223] [client 20.220.61.156:56535] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aaLBKVtZF9Zd_U7easBd5wAAAEQ"]
[Sat Feb 28 18:19:21.583871 2026] [:error] [pid 49763:tid 49769] [client 20.220.61.156:56483] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aaLBKbTHSOG_yf2PpqFNZgAAAcM"]
[Sat Feb 28 18:19:22.028156 2026] [:error] [pid 52460:tid 52476] [client 20.220.61.156:31742] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php7"] [unique_id "aaLBKrLWOogAgHGh62TyQwAAAY0"]
[Sat Feb 28 18:19:22.518005 2026] [:error] [pid 52460:tid 52480] [client 20.220.61.156:31731] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php7"] [unique_id "aaLBKrLWOogAgHGh62TyRgAAAZE"]
[Sat Feb 28 18:19:22.958288 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:56531] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php7"] [unique_id "aaLBKrLWOogAgHGh62TyTQAAAYw"]
[Sat Feb 28 18:19:23.433379 2026] [:error] [pid 52460:tid 52482] [client 20.220.61.156:31737] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php7"] [unique_id "aaLBK7LWOogAgHGh62TyVgAAAZM"]
[Sat Feb 28 18:19:23.914685 2026] [:error] [pid 39185:tid 39258] [client 20.220.61.156:56500] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLBKxVE-FfM89u7BQZ7PAAAAIw"]
[Sat Feb 28 18:19:24.389091 2026] [:error] [pid 39185:tid 39255] [client 20.220.61.156:56539] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLBLBVE-FfM89u7BQZ7PgAAAIk"]
[Sat Feb 28 18:19:24.854113 2026] [:error] [pid 49763:tid 49776] [client 20.220.61.156:56488] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLBLLTHSOG_yf2PpqFNcAAAAco"]
[Sat Feb 28 18:19:25.334104 2026] [:error] [pid 52460:tid 52468] [client 20.220.61.156:56567] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLBLbLWOogAgHGh62TyYAAAAYU"]
[Sat Feb 28 18:19:25.784841 2026] [:error] [pid 22194:tid 22213] [client 20.220.61.156:31684] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php7"] [unique_id "aaLBLX6mbajs3bzQGyuC1AAAAVE"]
[Sat Feb 28 18:19:26.228087 2026] [:error] [pid 39184:tid 39242] [client 20.220.61.156:56495] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php7"] [unique_id "aaLBLltZF9Zd_U7easBd8QAAAFc"]
[Sat Feb 28 18:19:26.644722 2026] [:error] [pid 52460:tid 52463] [client 20.220.61.156:31734] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php7"] [unique_id "aaLBLrLWOogAgHGh62TyagAAAYA"]
[Sat Feb 28 18:19:27.068537 2026] [:error] [pid 52460:tid 52469] [client 20.220.61.156:56507] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php7"] [unique_id "aaLBL7LWOogAgHGh62TycAAAAYY"]
[Sat Feb 28 18:19:27.479499 2026] [:error] [pid 52460:tid 52464] [client 20.220.61.156:56571] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "aaLBL7LWOogAgHGh62TydgAAAYE"]
[Sat Feb 28 18:19:27.893723 2026] [:error] [pid 22194:tid 22214] [client 20.220.61.156:31708] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "aaLBL36mbajs3bzQGyuC1wAAAVI"]
[Sat Feb 28 18:19:28.317766 2026] [:error] [pid 52460:tid 52475] [client 20.220.61.156:31713] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "aaLBMLLWOogAgHGh62TygQAAAYw"]
[Sat Feb 28 18:19:28.746404 2026] [:error] [pid 52460:tid 52482] [client 20.220.61.156:31715] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "aaLBMLLWOogAgHGh62TyiAAAAZM"]
[Sat Feb 28 18:19:29.190115 2026] [:error] [pid 52460:tid 52476] [client 20.220.61.156:56549] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc.php"] [unique_id "aaLBMbLWOogAgHGh62TyjQAAAY0"]
[Sat Feb 28 18:19:29.623679 2026] [:error] [pid 52460:tid 52463] [client 20.220.61.156:31646] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc.php"] [unique_id "aaLBMbLWOogAgHGh62TykwAAAYA"]
[Sat Feb 28 18:19:30.048244 2026] [:error] [pid 52460:tid 52480] [client 20.220.61.156:56472] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc.php"] [unique_id "aaLBMrLWOogAgHGh62TylgAAAZE"]
[Sat Feb 28 18:19:30.469295 2026] [:error] [pid 39183:tid 39211] [client 20.220.61.156:56481] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc.php"] [unique_id "aaLBMhCf4HvhVePw3LZ1tAAAABM"]
[Sat Feb 28 18:19:30.905579 2026] [:error] [pid 52460:tid 52465] [client 20.220.61.156:56480] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLBMrLWOogAgHGh62TyngAAAYI"]
[Sat Feb 28 18:19:31.322524 2026] [:error] [pid 52460:tid 52477] [client 20.220.61.156:56476] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLBM7LWOogAgHGh62TyoQAAAY4"]
[Sat Feb 28 18:19:31.798356 2026] [:error] [pid 52460:tid 52468] [client 20.220.61.156:56573] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLBM7LWOogAgHGh62TyqQAAAYU"]
[Sat Feb 28 18:19:32.247848 2026] [:error] [pid 49763:tid 49790] [client 20.220.61.156:31699] [client 20.220.61.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLBNLTHSOG_yf2PpqFNcgAAAdg"]
[Sat Feb 28 18:27:34.666600 2026] [:error] [pid 49763:tid 49770] [client 20.104.82.189:15312] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLDFrTHSOG_yf2PpqFWkwAAAcQ"]
[Sat Feb 28 18:27:35.107508 2026] [:error] [pid 39184:tid 39226] [client 20.104.82.189:15349] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLDF1tZF9Zd_U7easBh9gAAAEc"]
[Sat Feb 28 18:27:35.546247 2026] [:error] [pid 39184:tid 39224] [client 20.104.82.189:15324] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLDF1tZF9Zd_U7easBh9wAAAEU"]
[Sat Feb 28 18:27:36.139174 2026] [:error] [pid 39183:tid 39199] [client 20.104.82.189:15296] [client 20.104.82.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLDGBCf4HvhVePw3LZ8-AAAAAc"]
[Sat Feb 28 18:51:19.493995 2026] [:error] [pid 49763:tid 49785] [client 20.220.144.87:11203] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat Feb 28 18:51:19.708232 2026] [:error] [pid 49763:tid 49789] [client 20.220.144.87:11203] File does not exist: /usr/local/apache/htdocs/suspended-page/tews.php
[Sat Feb 28 18:51:19.922870 2026] [:error] [pid 49763:tid 49776] [client 20.220.144.87:11203] File does not exist: /usr/local/apache/htdocs/suspended-page/wpp.php
[Sat Feb 28 18:51:20.137769 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:11203] File does not exist: /usr/local/apache/htdocs/suspended-page/wc49.php
[Sat Feb 28 18:51:20.351502 2026] [:error] [pid 49763:tid 49771] [client 20.220.144.87:11203] File does not exist: /usr/local/apache/htdocs/suspended-page/TL.php
[Sat Feb 28 18:51:20.561836 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:11203] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sys.php"] [unique_id "aaLIqLTHSOG_yf2PpqGDjQAAAck"]
[Sat Feb 28 18:51:20.982198 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:11245] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sys.php"] [unique_id "aaLIqBCf4HvhVePw3Lad-wAAAAc"]
[Sat Feb 28 18:51:21.399298 2026] [:error] [pid 22194:tid 22202] [client 20.220.144.87:11206] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fck.php"] [unique_id "aaLIqX6mbajs3bzQGyuIQwAAAUY"]
[Sat Feb 28 18:51:21.813846 2026] [:error] [pid 22194:tid 22204] [client 20.220.144.87:11214] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fck.php"] [unique_id "aaLIqX6mbajs3bzQGyuIRQAAAUg"]
[Sat Feb 28 18:51:22.244323 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:11235] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fck.php"] [unique_id "aaLIqrTHSOG_yf2PpqGDkwAAAcQ"]
[Sat Feb 28 18:51:22.660202 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:11205] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fck.php"] [unique_id "aaLIqltZF9Zd_U7easBxxgAAAEg"]
[Sat Feb 28 18:51:23.067351 2026] [:error] [pid 49763:tid 49780] [client 20.220.144.87:11153] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaLIq7THSOG_yf2PpqGDmQAAAc4"]
[Sat Feb 28 18:51:23.474971 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:11136] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaLIq7THSOG_yf2PpqGDnQAAAcE"]
[Sat Feb 28 18:51:23.888761 2026] [:error] [pid 49763:tid 49768] [client 20.220.144.87:11251] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaLIq7THSOG_yf2PpqGDogAAAcI"]
[Sat Feb 28 18:51:24.303831 2026] [:error] [pid 39183:tid 39209] [client 20.220.144.87:11250] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaLIrBCf4HvhVePw3LaeGQAAABE"]
[Sat Feb 28 18:51:24.715648 2026] [:error] [pid 11791:tid 11803] [client 20.220.144.87:11244] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaLIrGuX5e1Q32gqxH2c2gAAAQo"]
[Sat Feb 28 18:51:25.132614 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:11141] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaLIrbTHSOG_yf2PpqGDsAAAAc8"]
[Sat Feb 28 18:51:25.546233 2026] [:error] [pid 39292:tid 39295] [client 20.220.144.87:11201] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaLIraIAO5fN7BxyqcFKzAAAAME"]
[Sat Feb 28 18:51:25.954581 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:11254] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaLIrRCf4HvhVePw3LaeJwAAAAo"]
[Sat Feb 28 18:51:26.367926 2026] [:error] [pid 22194:tid 22197] [client 20.220.144.87:11263] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw2.php"] [unique_id "aaLIrn6mbajs3bzQGyuIRgAAAUE"]
[Sat Feb 28 18:51:26.780626 2026] [:error] [pid 49763:tid 49785] [client 20.220.144.87:11138] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw2.php"] [unique_id "aaLIrrTHSOG_yf2PpqGDvAAAAdM"]
[Sat Feb 28 18:51:27.195630 2026] [:error] [pid 52460:tid 52463] [client 20.220.144.87:11210] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw2.php"] [unique_id "aaLIr7LWOogAgHGh62QQtgAAAYA"]
[Sat Feb 28 18:51:27.613764 2026] [:error] [pid 11791:tid 11804] [client 20.220.144.87:11241] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw2.php"] [unique_id "aaLIr2uX5e1Q32gqxH2c3QAAAQs"]
[Sat Feb 28 18:51:28.031756 2026] [:error] [pid 39184:tid 39231] [client 20.220.144.87:11217] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blackmini.php"] [unique_id "aaLIsFtZF9Zd_U7easBxzAAAAEw"]
[Sat Feb 28 18:51:28.445679 2026] [:error] [pid 22194:tid 22200] [client 20.220.144.87:11139] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blackmini.php"] [unique_id "aaLIsH6mbajs3bzQGyuISQAAAUQ"]
[Sat Feb 28 18:51:28.854259 2026] [:error] [pid 49763:tid 49768] [client 20.220.144.87:11253] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blackmini.php"] [unique_id "aaLIsLTHSOG_yf2PpqGDyQAAAcI"]
[Sat Feb 28 18:51:29.267737 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:11242] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLIsRCf4HvhVePw3LaeRAAAAAM"]
[Sat Feb 28 18:51:29.681064 2026] [:error] [pid 39183:tid 39192] [client 20.220.144.87:11211] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLIsRCf4HvhVePw3LaeSgAAAAA"]
[Sat Feb 28 18:51:30.095297 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:11236] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLIshCf4HvhVePw3LaeUQAAAAE"]
[Sat Feb 28 18:51:30.509436 2026] [:error] [pid 39183:tid 39213] [client 20.220.144.87:11176] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLIshCf4HvhVePw3LaeVQAAABU"]
[Sat Feb 28 18:51:30.926360 2026] [:error] [pid 22194:tid 22220] [client 20.220.144.87:11238] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaLIsn6mbajs3bzQGyuITAAAAVg"]
[Sat Feb 28 18:51:31.344226 2026] [:error] [pid 39292:tid 39307] [client 20.220.144.87:11149] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaLIs6IAO5fN7BxyqcFK0QAAAM0"]
[Sat Feb 28 18:51:31.760814 2026] [:error] [pid 49763:tid 49787] [client 20.220.144.87:11230] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaLIs7THSOG_yf2PpqGD2AAAAdU"]
[Sat Feb 28 18:51:32.178965 2026] [:error] [pid 11791:tid 11793] [client 20.220.144.87:11231] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yussef.php"] [unique_id "aaLItGuX5e1Q32gqxH2c3wAAAQA"]
[Sat Feb 28 18:51:43.755685 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:11148] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaLIvxCf4HvhVePw3LaeuAAAAAo"]
[Sat Feb 28 18:51:44.170510 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:11160] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaLIwLTHSOG_yf2PpqGEIgAAAcE"]
[Sat Feb 28 18:51:44.603336 2026] [:error] [pid 39183:tid 39213] [client 20.220.144.87:11155] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaLIwBCf4HvhVePw3LaevAAAABU"]
[Sat Feb 28 18:51:45.017699 2026] [:error] [pid 39184:tid 39241] [client 20.220.144.87:11239] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaLIwVtZF9Zd_U7easBx3AAAAFY"]
[Sat Feb 28 18:51:45.425923 2026] [:error] [pid 11791:tid 11795] [client 20.220.144.87:11077] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLIwWuX5e1Q32gqxH2c8wAAAQI"]
[Sat Feb 28 18:51:45.844208 2026] [:error] [pid 39292:tid 39315] [client 20.220.144.87:11208] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLIwaIAO5fN7BxyqcFK2gAAANU"]
[Sat Feb 28 18:51:46.256634 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:11256] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLIwrLWOogAgHGh62QQ8AAAAY8"]
[Sat Feb 28 18:51:46.669461 2026] [:error] [pid 52460:tid 52463] [client 20.220.144.87:11164] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLIwrLWOogAgHGh62QQ8gAAAYA"]
[Sat Feb 28 18:51:47.079118 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:11259] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLIw7LWOogAgHGh62QQ-AAAAYU"]
[Sat Feb 28 18:51:47.488181 2026] [:error] [pid 49763:tid 49774] [client 20.220.144.87:11243] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLIw7THSOG_yf2PpqGENAAAAcg"]
[Sat Feb 28 18:51:47.900027 2026] [:error] [pid 39292:tid 39316] [client 20.220.144.87:11227] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLIw6IAO5fN7BxyqcFK3QAAANY"]
[Sat Feb 28 18:51:48.309085 2026] [:error] [pid 49763:tid 49784] [client 20.220.144.87:11182] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLIxLTHSOG_yf2PpqGEPAAAAdI"]
[Sat Feb 28 18:51:59.913450 2026] [:error] [pid 49763:tid 49766] [client 20.220.144.87:11142] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samfa.php"] [unique_id "aaLIz7THSOG_yf2PpqGEeQAAAcA"]
[Sat Feb 28 18:52:00.323814 2026] [:error] [pid 49763:tid 49782] [client 20.220.144.87:11179] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samfa.php"] [unique_id "aaLI0LTHSOG_yf2PpqGEewAAAdA"]
[Sat Feb 28 18:52:00.731757 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:11193] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samfa.php"] [unique_id "aaLI0FtZF9Zd_U7easByCQAAAEg"]
[Sat Feb 28 18:52:01.165635 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:11147] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/boots.php"] [unique_id "aaLI0bLWOogAgHGh62QRMQAAAYs"]
[Sat Feb 28 18:52:01.574691 2026] [:error] [pid 22194:tid 22202] [client 20.220.144.87:11257] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaLI0X6mbajs3bzQGyuIVwAAAUY"]
[Sat Feb 28 18:52:01.983461 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:11146] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaLI0RCf4HvhVePw3Lae8AAAAAc"]
[Sat Feb 28 18:52:02.391610 2026] [:error] [pid 39292:tid 39304] [client 20.220.144.87:11200] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaLI0qIAO5fN7BxyqcFK4wAAAMo"]
[Sat Feb 28 18:52:02.805298 2026] [:error] [pid 49763:tid 49782] [client 20.220.144.87:11088] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logi.php"] [unique_id "aaLI0rTHSOG_yf2PpqGEiwAAAdA"]
[Sat Feb 28 19:08:25.159550 2026] [:error] [pid 49763:tid 49790] [client 20.220.232.101:12265] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLMqbTHSOG_yf2PpqGdJQAAAdg"]
[Sat Feb 28 19:08:25.575319 2026] [:error] [pid 49763:tid 49774] [client 20.220.232.101:12173] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLMqbTHSOG_yf2PpqGdKQAAAcg"]
[Sat Feb 28 19:08:26.010603 2026] [:error] [pid 39183:tid 39213] [client 20.220.232.101:12259] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLMqhCf4HvhVePw3LawsAAAABU"]
[Sat Feb 28 19:08:26.661860 2026] [:error] [pid 39183:tid 39211] [client 20.220.232.101:12272] [client 20.220.232.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaLMqhCf4HvhVePw3LawtgAAABM"]
[Sat Feb 28 19:17:59.940897 2026] [:error] [pid 49763:tid 49770] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sat Feb 28 19:18:00.185722 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/swallowable.php
[Sat Feb 28 19:18:00.394889 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sat Feb 28 19:18:00.623244 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Sat Feb 28 19:18:00.858344 2026] [:error] [pid 49763:tid 49786] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Feb 28 19:18:01.080017 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sat Feb 28 19:18:01.289318 2026] [:error] [pid 49763:tid 49770] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sat Feb 28 19:18:01.498422 2026] [:error] [pid 49763:tid 49766] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Feb 28 19:18:01.710450 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat Feb 28 19:18:01.998877 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16704] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Sat Feb 28 19:18:02.210968 2026] [:error] [pid 49763:tid 49780] [client 20.151.11.236:16704] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aaLO6rTHSOG_yf2PpqGsiwAAAc4"]
[Sat Feb 28 19:18:02.668523 2026] [:error] [pid 52460:tid 52479] [client 20.151.11.236:16867] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aaLO6rLWOogAgHGh62Qm5wAAAZA"]
[Sat Feb 28 19:18:03.186151 2026] [:error] [pid 49763:tid 49775] [client 20.151.11.236:16843] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aaLO67THSOG_yf2PpqGskQAAAck"]
[Sat Feb 28 19:18:03.751156 2026] [:error] [pid 11791:tid 11812] [client 20.151.11.236:16840] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aaLO62uX5e1Q32gqxH2kuAAAARM"]
[Sat Feb 28 19:18:04.349519 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:16723] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaLO7LTHSOG_yf2PpqGsmAAAAdA"]
[Sat Feb 28 19:18:04.928648 2026] [:error] [pid 49763:tid 49779] [client 20.151.11.236:16710] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaLO7LTHSOG_yf2PpqGsnAAAAc0"]
[Sat Feb 28 19:18:05.369492 2026] [:error] [pid 39184:tid 39235] [client 20.151.11.236:16717] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaLO7VtZF9Zd_U7easCBHgAAAFA"]
[Sat Feb 28 19:18:05.992857 2026] [:error] [pid 52460:tid 52485] [client 20.151.11.236:16892] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaLO7bLWOogAgHGh62Qm8gAAAZY"]
[Sat Feb 28 19:18:06.471121 2026] [:error] [pid 39292:tid 39318] [client 20.151.11.236:16855] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaLO7qIAO5fN7BxyqcFUGwAAANg"]
[Sat Feb 28 19:18:06.989548 2026] [:error] [pid 49763:tid 49790] [client 20.151.11.236:16886] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaLO7rTHSOG_yf2PpqGsuwAAAdg"]
[Sat Feb 28 19:18:07.436108 2026] [:error] [pid 49763:tid 49766] [client 20.151.11.236:16880] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaLO77THSOG_yf2PpqGswgAAAcA"]
[Sat Feb 28 19:18:07.938167 2026] [:error] [pid 39292:tid 39303] [client 20.151.11.236:16846] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaLO76IAO5fN7BxyqcFUIAAAAMk"]
[Sat Feb 28 19:18:08.427240 2026] [:error] [pid 11791:tid 11816] [client 20.151.11.236:16842] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLO8GuX5e1Q32gqxH2kvQAAARc"]
[Sat Feb 28 19:18:08.853299 2026] [:error] [pid 39292:tid 39307] [client 20.151.11.236:16863] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLO8KIAO5fN7BxyqcFUIwAAAM0"]
[Sat Feb 28 19:18:09.268003 2026] [:error] [pid 39183:tid 39194] [client 20.151.11.236:16711] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLO8RCf4HvhVePw3La8tAAAAAI"]
[Sat Feb 28 19:18:09.743163 2026] [:error] [pid 39183:tid 39211] [client 20.151.11.236:16854] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLO8RCf4HvhVePw3La8vQAAABM"]
[Sat Feb 28 19:18:10.222074 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:16706] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLO8hCf4HvhVePw3La8yAAAAA0"]
[Sat Feb 28 19:18:10.896908 2026] [:error] [pid 49763:tid 49775] [client 20.151.11.236:16878] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLO8rTHSOG_yf2PpqGs1wAAAck"]
[Sat Feb 28 19:18:11.317804 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:16705] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLO87THSOG_yf2PpqGs3wAAAcU"]
[Sat Feb 28 19:18:11.953355 2026] [:error] [pid 39183:tid 39203] [client 20.151.11.236:16835] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLO8xCf4HvhVePw3La86gAAAAs"]
[Sat Feb 28 19:18:12.457478 2026] [:error] [pid 39183:tid 39208] [client 20.151.11.236:16709] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLO9BCf4HvhVePw3La89QAAABA"]
[Sat Feb 28 19:18:12.902754 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:16847] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLO9LLWOogAgHGh62QnCAAAAYk"]
[Sat Feb 28 19:18:13.358890 2026] [:error] [pid 49763:tid 49784] [client 20.151.11.236:16714] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLO9bTHSOG_yf2PpqGs7wAAAdI"]
[Sat Feb 28 19:18:13.879506 2026] [:error] [pid 49763:tid 49776] [client 20.151.11.236:16889] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaLO9bTHSOG_yf2PpqGs-QAAAco"]
[Sat Feb 28 19:18:14.384770 2026] [:error] [pid 49763:tid 49779] [client 20.151.11.236:16644] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaLO9rTHSOG_yf2PpqGtBAAAAc0"]
[Sat Feb 28 19:18:14.901569 2026] [:error] [pid 49763:tid 49773] [client 20.151.11.236:16875] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaLO9rTHSOG_yf2PpqGtEAAAAcc"]
[Sat Feb 28 19:18:15.364424 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16837] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaLO97THSOG_yf2PpqGtFQAAAcg"]
[Sat Feb 28 19:18:15.826655 2026] [:error] [pid 49763:tid 49790] [client 20.151.11.236:16869] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaLO97THSOG_yf2PpqGtGwAAAdg"]
[Sat Feb 28 19:18:16.357988 2026] [:error] [pid 49763:tid 49778] [client 20.151.11.236:16729] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLO-LTHSOG_yf2PpqGtIwAAAcw"]
[Sat Feb 28 19:18:16.799933 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:16884] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLO-LTHSOG_yf2PpqGtKwAAAcs"]
[Sat Feb 28 19:18:17.218834 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:16707] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLO-bTHSOG_yf2PpqGtNAAAAcs"]
[Sat Feb 28 19:18:17.730727 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16744] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaLO-bTHSOG_yf2PpqGtOwAAAdY"]
[Sat Feb 28 19:18:18.399229 2026] [:error] [pid 52460:tid 52474] [client 20.151.11.236:16712] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaLO-rLWOogAgHGh62QnHwAAAYs"]
[Sat Feb 28 19:18:18.888507 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16727] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaLO-rTHSOG_yf2PpqGtRAAAAdY"]
[Sat Feb 28 19:18:19.356728 2026] [:error] [pid 49763:tid 49785] [client 20.151.11.236:16895] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaLO-7THSOG_yf2PpqGtTwAAAdM"]
[Sat Feb 28 19:18:19.779825 2026] [:error] [pid 49763:tid 49790] [client 20.151.11.236:16750] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaLO-7THSOG_yf2PpqGtVgAAAdg"]
[Sat Feb 28 19:18:20.224067 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:16877] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaLO_LTHSOG_yf2PpqGtXgAAAcY"]
[Sat Feb 28 19:18:20.768821 2026] [:error] [pid 49763:tid 49784] [client 20.151.11.236:16868] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaLO_LTHSOG_yf2PpqGtagAAAdI"]
[Sat Feb 28 19:18:21.246124 2026] [:error] [pid 49763:tid 49780] [client 20.151.11.236:16643] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaLO_bTHSOG_yf2PpqGtcgAAAc4"]
[Sat Feb 28 19:18:21.708159 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:16725] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaLO_bTHSOG_yf2PpqGtdwAAAdA"]
[Sat Feb 28 19:18:22.142094 2026] [:error] [pid 39292:tid 39314] [client 20.151.11.236:16661] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaLO_qIAO5fN7BxyqcFURQAAANQ"]
[Sat Feb 28 19:18:22.567990 2026] [:error] [pid 39184:tid 39242] [client 20.151.11.236:16891] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaLO_ltZF9Zd_U7easCBOAAAAFc"]
[Sat Feb 28 19:18:23.002457 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:16890] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaLO_xCf4HvhVePw3La9MQAAAAA"]
[Sat Feb 28 19:18:23.435976 2026] [:error] [pid 39183:tid 39198] [client 20.151.11.236:16845] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaLO_xCf4HvhVePw3La9NwAAAAY"]
[Sat Feb 28 19:18:23.895405 2026] [:error] [pid 39183:tid 39193] [client 20.151.11.236:16731] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaLO_xCf4HvhVePw3La9PQAAAAE"]
[Sat Feb 28 19:18:24.350064 2026] [:error] [pid 49763:tid 49783] [client 20.151.11.236:16660] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaLPALTHSOG_yf2PpqGtjAAAAdE"]
[Sat Feb 28 19:18:24.817677 2026] [:error] [pid 39183:tid 39211] [client 20.151.11.236:16839] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaLPABCf4HvhVePw3La9TQAAABM"]
[Sat Feb 28 19:18:25.275261 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16755] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaLPAbTHSOG_yf2PpqGtkwAAAcg"]
[Sat Feb 28 19:18:25.749618 2026] [:error] [pid 52460:tid 52471] [client 20.151.11.236:16673] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaLPAbLWOogAgHGh62QnOgAAAYg"]
[Sat Feb 28 19:18:26.275592 2026] [:error] [pid 49763:tid 49786] [client 20.151.11.236:16871] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaLPArTHSOG_yf2PpqGtowAAAdQ"]
[Sat Feb 28 19:18:26.709862 2026] [:error] [pid 49763:tid 49779] [client 20.151.11.236:16651] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaLPArTHSOG_yf2PpqGtqwAAAc0"]
[Sat Feb 28 19:18:27.128741 2026] [:error] [pid 49763:tid 49768] [client 20.151.11.236:16754] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaLPA7THSOG_yf2PpqGttAAAAcI"]
[Sat Feb 28 19:18:27.554212 2026] [:error] [pid 49763:tid 49779] [client 20.151.11.236:16834] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLPA7THSOG_yf2PpqGtuwAAAc0"]
[Sat Feb 28 19:18:28.015760 2026] [:error] [pid 52460:tid 52482] [client 20.151.11.236:16735] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLPBLLWOogAgHGh62QnTwAAAZM"]
[Sat Feb 28 19:18:28.466193 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16850] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLPBLTHSOG_yf2PpqGt0gAAAdY"]
[Sat Feb 28 19:18:28.924249 2026] [:error] [pid 49763:tid 49767] [client 20.151.11.236:16856] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaLPBLTHSOG_yf2PpqGt1wAAAcE"]
[Sat Feb 28 19:18:29.357986 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:16695] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaLPBbTHSOG_yf2PpqGt3gAAAcs"]
[Sat Feb 28 19:18:29.835512 2026] [:error] [pid 39183:tid 39208] [client 20.151.11.236:16893] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaLPBRCf4HvhVePw3La9fgAAABA"]
[Sat Feb 28 19:18:30.276376 2026] [:error] [pid 22194:tid 22200] [client 20.151.11.236:16883] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaLPBn6mbajs3bzQGyuNhQAAAUQ"]
[Sat Feb 28 19:18:30.723514 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:16721] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaLPBhCf4HvhVePw3La9hQAAAAg"]
[Sat Feb 28 19:18:31.181192 2026] [:error] [pid 39292:tid 39308] [client 20.151.11.236:16645] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaLPB6IAO5fN7BxyqcFUcQAAAM4"]
[Sat Feb 28 19:18:31.606996 2026] [:error] [pid 39184:tid 39222] [client 20.151.11.236:16894] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaLPB1tZF9Zd_U7easCBQwAAAEM"]
[Sat Feb 28 19:18:32.033150 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:16851] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaLPCLTHSOG_yf2PpqGt6wAAAcM"]
[Sat Feb 28 19:18:32.454613 2026] [:error] [pid 11791:tid 11815] [client 20.151.11.236:16748] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaLPCGuX5e1Q32gqxH2kyQAAARY"]
[Sat Feb 28 19:18:32.890036 2026] [:error] [pid 39183:tid 39196] [client 20.151.11.236:16665] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLPCBCf4HvhVePw3La9mgAAAAQ"]
[Sat Feb 28 19:18:33.369992 2026] [:error] [pid 39183:tid 39209] [client 20.151.11.236:16742] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLPCRCf4HvhVePw3La9ogAAABE"]
[Sat Feb 28 19:18:33.822279 2026] [:error] [pid 39183:tid 39212] [client 20.151.11.236:16882] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLPCRCf4HvhVePw3La9rAAAABQ"]
[Sat Feb 28 19:18:34.324490 2026] [:error] [pid 39183:tid 39210] [client 20.151.11.236:16853] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLPChCf4HvhVePw3La9tQAAABI"]
[Sat Feb 28 19:18:34.779172 2026] [:error] [pid 49763:tid 49775] [client 20.151.11.236:16858] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPCrTHSOG_yf2PpqGt8gAAAck"]
[Sat Feb 28 19:18:35.233247 2026] [:error] [pid 39183:tid 39202] [client 20.151.11.236:16647] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPCxCf4HvhVePw3La9vQAAAAo"]
[Sat Feb 28 19:18:35.793176 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:16692] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPC7THSOG_yf2PpqGt-wAAAcU"]
[Sat Feb 28 19:18:36.253700 2026] [:error] [pid 39183:tid 39206] [client 20.151.11.236:16870] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPDBCf4HvhVePw3La9yAAAAA4"]
[Sat Feb 28 19:18:36.711697 2026] [:error] [pid 39183:tid 39199] [client 20.151.11.236:16739] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaLPDBCf4HvhVePw3La9ywAAAAc"]
[Sat Feb 28 19:18:37.152649 2026] [:error] [pid 39183:tid 39201] [client 20.151.11.236:16836] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaLPDRCf4HvhVePw3La9zwAAAAk"]
[Sat Feb 28 19:18:37.618314 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:16841] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaLPDRCf4HvhVePw3La90wAAAAg"]
[Sat Feb 28 19:18:38.039262 2026] [:error] [pid 22194:tid 22216] [client 20.151.11.236:16844] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaLPDn6mbajs3bzQGyuNjwAAAVQ"]
[Sat Feb 28 19:18:38.503659 2026] [:error] [pid 39183:tid 39212] [client 20.151.11.236:16713] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLPDhCf4HvhVePw3La93AAAABQ"]
[Sat Feb 28 19:18:38.919063 2026] [:error] [pid 11791:tid 11812] [client 20.151.11.236:16736] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLPDmuX5e1Q32gqxH2kywAAARM"]
[Sat Feb 28 19:18:39.373030 2026] [:error] [pid 39292:tid 39316] [client 20.151.11.236:16758] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLPD6IAO5fN7BxyqcFUeQAAANY"]
[Sat Feb 28 19:18:39.825053 2026] [:error] [pid 39183:tid 39199] [client 20.151.11.236:16745] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaLPDxCf4HvhVePw3La95wAAAAc"]
[Sat Feb 28 19:18:40.250820 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:16864] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLPEBCf4HvhVePw3La97wAAAAg"]
[Sat Feb 28 19:18:40.772062 2026] [:error] [pid 49763:tid 49766] [client 20.151.11.236:16708] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLPELTHSOG_yf2PpqGuGQAAAcA"]
[Sat Feb 28 19:18:41.212571 2026] [:error] [pid 11791:tid 11794] [client 20.151.11.236:16650] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLPEWuX5e1Q32gqxH2kzAAAAQE"]
[Sat Feb 28 19:18:41.689297 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:16862] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaLPEbLWOogAgHGh62QnpwAAAY8"]
[Sat Feb 28 19:18:42.267705 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:16848] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaLPErTHSOG_yf2PpqGuIgAAAdA"]
[Sat Feb 28 19:18:42.718407 2026] [:error] [pid 49763:tid 49778] [client 20.151.11.236:16838] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLPErTHSOG_yf2PpqGuJAAAAcw"]
[Sat Feb 28 19:18:43.182325 2026] [:error] [pid 39183:tid 39208] [client 20.151.11.236:16749] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLPExCf4HvhVePw3La-FwAAABA"]
[Sat Feb 28 19:18:43.609038 2026] [:error] [pid 52460:tid 52468] [client 20.151.11.236:16737] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLPE7LWOogAgHGh62QnsQAAAYU"]
[Sat Feb 28 19:18:44.050653 2026] [:error] [pid 39292:tid 39308] [client 20.151.11.236:16640] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaLPFKIAO5fN7BxyqcFUfwAAAM4"]
[Sat Feb 28 19:18:44.577810 2026] [:error] [pid 39183:tid 39216] [client 20.151.11.236:16675] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLPFBCf4HvhVePw3La-JgAAABg"]
[Sat Feb 28 19:18:45.011859 2026] [:error] [pid 49763:tid 49790] [client 20.151.11.236:16715] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLPFbTHSOG_yf2PpqGuNgAAAdg"]
[Sat Feb 28 19:18:45.446334 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16857] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLPFbTHSOG_yf2PpqGuPQAAAdY"]
[Sat Feb 28 19:18:45.879273 2026] [:error] [pid 49763:tid 49784] [client 20.151.11.236:16881] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaLPFbTHSOG_yf2PpqGuQwAAAdI"]
[Sat Feb 28 19:18:46.306209 2026] [:error] [pid 52460:tid 52479] [client 20.151.11.236:16872] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPFrLWOogAgHGh62QnswAAAZA"]
[Sat Feb 28 19:18:46.736357 2026] [:error] [pid 49763:tid 49789] [client 20.151.11.236:16746] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPFrTHSOG_yf2PpqGuSAAAAdc"]
[Sat Feb 28 19:18:47.243014 2026] [:error] [pid 39183:tid 39213] [client 20.151.11.236:16832] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPFxCf4HvhVePw3La-NwAAABU"]
[Sat Feb 28 19:18:47.686772 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:16656] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPFxCf4HvhVePw3La-PgAAAAA"]
[Sat Feb 28 19:18:48.177463 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:16540] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLPGBCf4HvhVePw3La-SAAAAA0"]
[Sat Feb 28 19:18:48.626219 2026] [:error] [pid 39185:tid 39253] [client 20.151.11.236:16876] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLPGBVE-FfM89u7BQaHaQAAAIc"]
[Sat Feb 28 19:18:49.075966 2026] [:error] [pid 39183:tid 39206] [client 20.151.11.236:16701] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLPGRCf4HvhVePw3La-UQAAAA4"]
[Sat Feb 28 19:18:49.507864 2026] [:error] [pid 39183:tid 39213] [client 20.151.11.236:16680] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaLPGRCf4HvhVePw3La-VQAAABU"]
[Sat Feb 28 19:18:49.929258 2026] [:error] [pid 39183:tid 39198] [client 20.151.11.236:16724] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLPGRCf4HvhVePw3La-WwAAAAY"]
[Sat Feb 28 19:18:50.347373 2026] [:error] [pid 52460:tid 52471] [client 20.151.11.236:16738] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLPGrLWOogAgHGh62QnvQAAAYg"]
[Sat Feb 28 19:18:50.836180 2026] [:error] [pid 39183:tid 39210] [client 20.151.11.236:16861] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLPGhCf4HvhVePw3La-aQAAABI"]
[Sat Feb 28 19:18:51.342917 2026] [:error] [pid 39184:tid 39223] [client 20.151.11.236:16859] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLPG1tZF9Zd_U7easCBYwAAAEQ"]
[Sat Feb 28 19:18:51.788547 2026] [:error] [pid 49763:tid 49790] [client 20.151.11.236:16766] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaLPG7THSOG_yf2PpqGufAAAAdg"]
[Sat Feb 28 19:18:52.205818 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:16652] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaLPHBCf4HvhVePw3La-fQAAAA0"]
[Sat Feb 28 19:18:52.635434 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16734] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaLPHLTHSOG_yf2PpqGujAAAAcg"]
[Sat Feb 28 19:18:53.083845 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:16697] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaLPHbLWOogAgHGh62QnywAAAYk"]
[Sat Feb 28 19:18:53.535107 2026] [:error] [pid 39183:tid 39193] [client 20.151.11.236:16885] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaLPHRCf4HvhVePw3La-iAAAAAE"]
[Sat Feb 28 19:18:53.996686 2026] [:error] [pid 39184:tid 39226] [client 20.151.11.236:16767] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaLPHVtZF9Zd_U7easCBaAAAAEc"]
[Sat Feb 28 19:18:54.456722 2026] [:error] [pid 49763:tid 49789] [client 20.151.11.236:16865] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaLPHrTHSOG_yf2PpqGurwAAAdc"]
[Sat Feb 28 19:18:54.894490 2026] [:error] [pid 22194:tid 22214] [client 20.151.11.236:16642] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaLPHn6mbajs3bzQGyuNmwAAAVI"]
[Sat Feb 28 19:18:55.359335 2026] [:error] [pid 22194:tid 22217] [client 20.151.11.236:16860] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaLPH36mbajs3bzQGyuNnAAAAVU"]
[Sat Feb 28 19:18:55.866397 2026] [:error] [pid 39292:tid 39312] [client 20.151.11.236:16674] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaLPH6IAO5fN7BxyqcFUnAAAANI"]
[Sat Feb 28 19:18:56.301870 2026] [:error] [pid 39183:tid 39204] [client 20.151.11.236:16730] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaLPIBCf4HvhVePw3La-mwAAAAw"]
[Sat Feb 28 19:18:56.734648 2026] [:error] [pid 39184:tid 39230] [client 20.151.11.236:16685] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaLPIFtZF9Zd_U7easCBeQAAAEs"]
[Sat Feb 28 19:18:57.206260 2026] [:error] [pid 52460:tid 52485] [client 20.151.11.236:16688] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaLPIbLWOogAgHGh62Qn3wAAAZY"]
[Sat Feb 28 19:18:57.704155 2026] [:error] [pid 39183:tid 39201] [client 20.151.11.236:16716] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaLPIRCf4HvhVePw3La-qwAAAAk"]
[Sat Feb 28 19:18:58.257004 2026] [:error] [pid 49763:tid 49783] [client 20.151.11.236:16733] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaLPIrTHSOG_yf2PpqGu2wAAAdE"]
[Sat Feb 28 19:18:58.847409 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16541] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaLPIrTHSOG_yf2PpqGu6AAAAcg"]
[Sat Feb 28 19:18:59.338509 2026] [:error] [pid 49763:tid 49778] [client 20.151.11.236:16699] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaLPI7THSOG_yf2PpqGu9QAAAcw"]
[Sat Feb 28 19:18:59.987157 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16689] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaLPI7THSOG_yf2PpqGvCQAAAcg"]
[Sat Feb 28 19:19:00.756063 2026] [:error] [pid 49763:tid 49785] [client 20.151.11.236:16751] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaLPJLTHSOG_yf2PpqGvHAAAAdM"]
[Sat Feb 28 19:19:01.283819 2026] [:error] [pid 52460:tid 52487] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sat Feb 28 19:19:01.497173 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Feb 28 19:19:01.709607 2026] [:error] [pid 52460:tid 52463] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Feb 28 19:19:01.920556 2026] [:error] [pid 52460:tid 52465] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Sat Feb 28 19:19:02.136457 2026] [:error] [pid 52460:tid 52467] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Feb 28 19:19:02.348541 2026] [:error] [pid 52460:tid 52473] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Feb 28 19:19:02.560325 2026] [:error] [pid 52460:tid 52477] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sat Feb 28 19:19:02.791129 2026] [:error] [pid 52460:tid 52470] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Sat Feb 28 19:19:03.002872 2026] [:error] [pid 52460:tid 52484] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Feb 28 19:19:03.224962 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Feb 28 19:19:03.452785 2026] [:error] [pid 52460:tid 52476] [client 20.151.11.236:16646] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sat Feb 28 19:19:03.661345 2026] [:error] [pid 52460:tid 52466] [client 20.151.11.236:16646] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaLPJ7LWOogAgHGh62Qn9wAAAYM"]
[Sat Feb 28 19:19:04.567937 2026] [:error] [pid 49763:tid 49767] [client 20.151.11.236:16512] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaLPKLTHSOG_yf2PpqGvaQAAAcE"]
[Sat Feb 28 19:19:05.442971 2026] [:error] [pid 49763:tid 49784] [client 20.151.11.236:16756] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaLPKbTHSOG_yf2PpqGvdwAAAdI"]
[Sat Feb 28 19:19:06.482671 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16866] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaLPKrTHSOG_yf2PpqGvhwAAAcg"]
[Sat Feb 28 19:19:07.673589 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:16514] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaLPK7THSOG_yf2PpqGvlQAAAcU"]
[Sat Feb 28 19:19:08.109259 2026] [:error] [pid 39292:tid 39300] [client 20.151.11.236:16515] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaLPLKIAO5fN7BxyqcFUqQAAAMY"]
[Sat Feb 28 19:19:08.532750 2026] [:error] [pid 39292:tid 39318] [client 20.151.11.236:16726] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaLPLKIAO5fN7BxyqcFUqgAAANg"]
[Sat Feb 28 19:19:08.950984 2026] [:error] [pid 52460:tid 52464] [client 20.151.11.236:16720] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaLPLLLWOogAgHGh62QoBAAAAYE"]
[Sat Feb 28 19:19:09.430058 2026] [:error] [pid 49763:tid 49786] [client 20.151.11.236:16663] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLPLbTHSOG_yf2PpqGvrwAAAdQ"]
[Sat Feb 28 19:19:09.892069 2026] [:error] [pid 52460:tid 52463] [client 20.151.11.236:16658] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLPLbLWOogAgHGh62QoDwAAAYA"]
[Sat Feb 28 19:19:10.339224 2026] [:error] [pid 39183:tid 39193] [client 20.151.11.236:16663] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLPLhCf4HvhVePw3La-9gAAAAE"]
[Sat Feb 28 19:19:10.770933 2026] [:error] [pid 49763:tid 49766] [client 20.151.11.236:16666] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaLPLrTHSOG_yf2PpqGvvgAAAcA"]
[Sat Feb 28 19:19:11.304795 2026] [:error] [pid 52460:tid 52476] [client 20.151.11.236:16676] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaLPL7LWOogAgHGh62QoHQAAAY0"]
[Sat Feb 28 19:19:11.753749 2026] [:error] [pid 39183:tid 39198] [client 20.151.11.236:16718] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaLPLxCf4HvhVePw3La--QAAAAY"]
[Sat Feb 28 19:19:12.298943 2026] [:error] [pid 49763:tid 49785] [client 20.151.11.236:16667] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaLPMLTHSOG_yf2PpqGv2gAAAdM"]
[Sat Feb 28 19:19:12.711122 2026] [:error] [pid 39183:tid 39203] [client 20.151.11.236:16760] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaLPMBCf4HvhVePw3La-_QAAAAs"]
[Sat Feb 28 19:19:13.167458 2026] [:error] [pid 22194:tid 22199] [client 20.151.11.236:16546] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaLPMX6mbajs3bzQGyuNpQAAAUM"]
[Sat Feb 28 19:19:13.716986 2026] [:error] [pid 52460:tid 52476] [client 20.151.11.236:16641] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaLPMbLWOogAgHGh62QoMQAAAY0"]
[Sat Feb 28 19:19:14.220161 2026] [:error] [pid 49763:tid 49785] [client 20.151.11.236:16887] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaLPMrTHSOG_yf2PpqGv9QAAAdM"]
[Sat Feb 28 19:19:14.746747 2026] [:error] [pid 39184:tid 39226] [client 20.151.11.236:16740] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaLPMltZF9Zd_U7easCBiQAAAEc"]
[Sat Feb 28 19:19:15.203948 2026] [:error] [pid 39183:tid 39201] [client 20.151.11.236:16525] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaLPMxCf4HvhVePw3La_CwAAAAk"]
[Sat Feb 28 19:19:15.762160 2026] [:error] [pid 39185:tid 39262] [client 20.151.11.236:16753] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaLPMxVE-FfM89u7BQaHfgAAAJA"]
[Sat Feb 28 19:19:16.224707 2026] [:error] [pid 52460:tid 52486] [client 20.151.11.236:16668] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaLPNLLWOogAgHGh62QoSAAAAZc"]
[Sat Feb 28 19:19:16.717893 2026] [:error] [pid 52460:tid 52465] [client 20.151.11.236:16534] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaLPNLLWOogAgHGh62QoTwAAAYI"]
[Sat Feb 28 19:19:17.182867 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:16694] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaLPNRCf4HvhVePw3La_FAAAAAA"]
[Sat Feb 28 19:19:17.670304 2026] [:error] [pid 52460:tid 52475] [client 20.151.11.236:16568] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaLPNbLWOogAgHGh62QoYwAAAYw"]
[Sat Feb 28 19:19:18.242548 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:16677] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaLPNrLWOogAgHGh62QobAAAAY8"]
[Sat Feb 28 19:19:18.663092 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:16528] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaLPNhCf4HvhVePw3La_GAAAAAg"]
[Sat Feb 28 19:19:19.221928 2026] [:error] [pid 39183:tid 39210] [client 20.151.11.236:16764] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLPNxCf4HvhVePw3La_IAAAABI"]
[Sat Feb 28 19:19:19.673983 2026] [:error] [pid 39183:tid 39202] [client 20.151.11.236:16747] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLPNxCf4HvhVePw3La_KAAAAAo"]
[Sat Feb 28 19:19:20.237262 2026] [:error] [pid 39292:tid 39317] [client 20.151.11.236:16669] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLPOKIAO5fN7BxyqcFUsAAAANc"]
[Sat Feb 28 19:19:20.708038 2026] [:error] [pid 22194:tid 22220] [client 20.151.11.236:16700] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaLPOH6mbajs3bzQGyuNqAAAAVg"]
[Sat Feb 28 19:19:21.152127 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:16556] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLPObLWOogAgHGh62QoeQAAAY8"]
[Sat Feb 28 19:19:21.586493 2026] [:error] [pid 52460:tid 52486] [client 20.151.11.236:16545] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLPObLWOogAgHGh62QoegAAAZc"]
[Sat Feb 28 19:19:22.015806 2026] [:error] [pid 52460:tid 52463] [client 20.151.11.236:16664] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLPOrLWOogAgHGh62QoewAAAYA"]
[Sat Feb 28 19:19:22.545740 2026] [:error] [pid 11791:tid 11800] [client 20.151.11.236:16690] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaLPOmuX5e1Q32gqxH2k8QAAAQc"]
[Sat Feb 28 19:19:22.991429 2026] [:error] [pid 39183:tid 39194] [client 20.151.11.236:16654] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLPOhCf4HvhVePw3La_OQAAAAI"]
[Sat Feb 28 19:19:23.902605 2026] [:error] [pid 39183:tid 39208] [client 20.151.11.236:16719] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLPOxCf4HvhVePw3La_PQAAABA"]
[Sat Feb 28 19:19:24.371440 2026] [:error] [pid 39183:tid 39211] [client 20.151.11.236:16516] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLPPBCf4HvhVePw3La_QgAAABM"]
[Sat Feb 28 19:19:24.825012 2026] [:error] [pid 11791:tid 11801] [client 20.151.11.236:16662] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaLPPGuX5e1Q32gqxH2k8wAAAQg"]
[Sat Feb 28 19:19:25.347550 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:16743] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaLPPbTHSOG_yf2PpqGwHQAAAcY"]
[Sat Feb 28 19:19:25.828057 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:16765] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaLPPbTHSOG_yf2PpqGwIwAAAcM"]
[Sat Feb 28 19:19:26.338301 2026] [:error] [pid 49763:tid 49778] [client 20.151.11.236:16849] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaLPPrTHSOG_yf2PpqGwLgAAAcw"]
[Sat Feb 28 19:19:26.804487 2026] [:error] [pid 49763:tid 49776] [client 20.151.11.236:16728] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaLPPrTHSOG_yf2PpqGwNQAAAco"]
[Sat Feb 28 19:19:27.313898 2026] [:error] [pid 39183:tid 39198] [client 20.151.11.236:16852] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaLPPxCf4HvhVePw3La_TAAAAAY"]
[Sat Feb 28 19:19:27.832154 2026] [:error] [pid 11791:tid 11795] [client 20.151.11.236:16527] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaLPP2uX5e1Q32gqxH2k_AAAAQI"]
[Sat Feb 28 19:19:28.300817 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:16762] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaLPQLLWOogAgHGh62QojAAAAZQ"]
[Sat Feb 28 19:19:28.795611 2026] [:error] [pid 52460:tid 52474] [client 20.151.11.236:16648] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaLPQLLWOogAgHGh62QojgAAAYs"]
[Sat Feb 28 19:19:29.277443 2026] [:error] [pid 52460:tid 52487] [client 20.151.11.236:16732] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLPQbLWOogAgHGh62QokwAAAZg"]
[Sat Feb 28 19:19:29.751859 2026] [:error] [pid 39183:tid 39213] [client 20.151.11.236:16741] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLPQRCf4HvhVePw3La_VAAAABU"]
[Sat Feb 28 19:19:30.192725 2026] [:error] [pid 52460:tid 52466] [client 20.151.11.236:16521] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLPQrLWOogAgHGh62QomQAAAYM"]
[Sat Feb 28 19:19:30.647597 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:16678] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaLPQrLWOogAgHGh62QonAAAAY8"]
[Sat Feb 28 19:19:31.095783 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:16517] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLPQ7THSOG_yf2PpqGwUwAAAcM"]
[Sat Feb 28 19:19:31.597383 2026] [:error] [pid 39183:tid 39199] [client 20.151.11.236:16752] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLPQxCf4HvhVePw3La_ZgAAAAc"]
[Sat Feb 28 19:19:32.021463 2026] [:error] [pid 39183:tid 39202] [client 20.151.11.236:16536] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLPRBCf4HvhVePw3La_bQAAAAo"]
[Sat Feb 28 19:19:32.555854 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:17394] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaLPRLTHSOG_yf2PpqGwXAAAAcU"]
[Sat Feb 28 19:19:33.047509 2026] [:error] [pid 49763:tid 49770] [client 20.151.11.236:16567] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLPRbTHSOG_yf2PpqGwYgAAAcQ"]
[Sat Feb 28 19:19:33.600777 2026] [:error] [pid 52460:tid 52471] [client 20.151.11.236:16522] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLPRbLWOogAgHGh62QoqQAAAYg"]
[Sat Feb 28 19:19:34.021125 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16682] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLPRrTHSOG_yf2PpqGwaQAAAdY"]
[Sat Feb 28 19:19:34.444191 2026] [:error] [pid 39183:tid 39196] [client 20.151.11.236:16874] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaLPRhCf4HvhVePw3La_iQAAAAQ"]
[Sat Feb 28 19:19:34.921592 2026] [:error] [pid 39292:tid 39311] [client 20.151.11.236:16519] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLPRqIAO5fN7BxyqcFUvwAAANE"]
[Sat Feb 28 19:19:35.380477 2026] [:error] [pid 39183:tid 39193] [client 20.151.11.236:16565] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLPRxCf4HvhVePw3La_kQAAAAE"]
[Sat Feb 28 19:19:35.827119 2026] [:error] [pid 39183:tid 39202] [client 20.151.11.236:16557] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLPRxCf4HvhVePw3La_mQAAAAo"]
[Sat Feb 28 19:19:36.296058 2026] [:error] [pid 39183:tid 39197] [client 20.151.11.236:16553] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaLPSBCf4HvhVePw3La_owAAAAU"]
[Sat Feb 28 19:19:36.774522 2026] [:error] [pid 52460:tid 52469] [client 20.151.11.236:16539] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaLPSLLWOogAgHGh62QorgAAAYY"]
[Sat Feb 28 19:19:37.276900 2026] [:error] [pid 39183:tid 39197] [client 20.151.11.236:16681] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaLPSRCf4HvhVePw3La_tQAAAAU"]
[Sat Feb 28 19:19:37.718954 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:16526] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaLPSRCf4HvhVePw3La_vwAAAAA"]
[Sat Feb 28 19:19:38.262249 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:16672] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaLPSrTHSOG_yf2PpqGwiwAAAcs"]
[Sat Feb 28 19:19:38.741336 2026] [:error] [pid 52460:tid 52485] [client 20.151.11.236:17347] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLPSrLWOogAgHGh62QotAAAAZY"]
[Sat Feb 28 19:19:39.205963 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:16696] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLPSxCf4HvhVePw3La_ywAAAA0"]
[Sat Feb 28 19:19:39.690880 2026] [:error] [pid 39183:tid 39194] [client 20.151.11.236:16722] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLPSxCf4HvhVePw3La_0gAAAAI"]
[Sat Feb 28 19:19:40.173126 2026] [:error] [pid 39183:tid 39197] [client 20.151.11.236:16537] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaLPTBCf4HvhVePw3La_2gAAAAU"]
[Sat Feb 28 19:19:40.636865 2026] [:error] [pid 52460:tid 52482] [client 20.151.11.236:16684] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaLPTLLWOogAgHGh62QovAAAAZM"]
[Sat Feb 28 19:19:41.104625 2026] [:error] [pid 49763:tid 49789] [client 20.151.11.236:16655] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaLPTbTHSOG_yf2PpqGwrAAAAdc"]
[Sat Feb 28 19:19:41.553245 2026] [:error] [pid 39183:tid 39208] [client 20.151.11.236:16653] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaLPTRCf4HvhVePw3La_6QAAABA"]
[Sat Feb 28 19:19:42.016687 2026] [:error] [pid 52460:tid 52474] [client 20.151.11.236:16679] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaLPTrLWOogAgHGh62QoyQAAAYs"]
[Sat Feb 28 19:19:42.504107 2026] [:error] [pid 39183:tid 39212] [client 20.151.11.236:16547] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLPThCf4HvhVePw3La_8gAAABQ"]
[Sat Feb 28 19:19:42.943872 2026] [:error] [pid 52460:tid 52479] [client 20.151.11.236:16523] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLPTrLWOogAgHGh62Qo0wAAAZA"]
[Sat Feb 28 19:19:43.413085 2026] [:error] [pid 52460:tid 52481] [client 20.151.11.236:16657] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLPT7LWOogAgHGh62Qo2QAAAZI"]
[Sat Feb 28 19:19:43.893282 2026] [:error] [pid 39183:tid 39207] [client 20.151.11.236:16549] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaLPTxCf4HvhVePw3LbABQAAAA8"]
[Sat Feb 28 19:19:44.385336 2026] [:error] [pid 49763:tid 49780] [client 20.151.11.236:17376] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaLPULTHSOG_yf2PpqGwyQAAAc4"]
[Sat Feb 28 19:19:44.898807 2026] [:error] [pid 52460:tid 52479] [client 20.151.11.236:16833] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaLPULLWOogAgHGh62Qo5AAAAZA"]
[Sat Feb 28 19:19:45.388262 2026] [:error] [pid 49763:tid 49767] [client 20.151.11.236:16671] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaLPUbTHSOG_yf2PpqGw3wAAAcE"]
[Sat Feb 28 19:19:45.812691 2026] [:error] [pid 49763:tid 49776] [client 20.151.11.236:16888] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaLPUbTHSOG_yf2PpqGw6AAAAco"]
[Sat Feb 28 19:19:46.267528 2026] [:error] [pid 39183:tid 39197] [client 20.151.11.236:17357] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLPUhCf4HvhVePw3LbAJAAAAAU"]
[Sat Feb 28 19:19:46.710128 2026] [:error] [pid 39184:tid 39239] [client 20.151.11.236:16538] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLPUltZF9Zd_U7easCBuAAAAFQ"]
[Sat Feb 28 19:19:47.167548 2026] [:error] [pid 39183:tid 39204] [client 20.151.11.236:16659] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLPUxCf4HvhVePw3LbALQAAAAw"]
[Sat Feb 28 19:19:47.615748 2026] [:error] [pid 39183:tid 39214] [client 20.151.11.236:17346] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaLPUxCf4HvhVePw3LbANwAAABY"]
[Sat Feb 28 19:19:48.060877 2026] [:error] [pid 49763:tid 49783] [client 20.151.11.236:16687] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPVLTHSOG_yf2PpqGw_AAAAdE"]
[Sat Feb 28 19:19:48.526816 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:16571] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPVLLWOogAgHGh62Qo6wAAAY8"]
[Sat Feb 28 19:19:48.949817 2026] [:error] [pid 39183:tid 39216] [client 20.151.11.236:17393] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPVBCf4HvhVePw3LbASwAAABg"]
[Sat Feb 28 19:19:49.416211 2026] [:error] [pid 49763:tid 49781] [client 20.151.11.236:16554] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaLPVbTHSOG_yf2PpqGxCQAAAc8"]
[Sat Feb 28 19:19:49.887002 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16683] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPVbTHSOG_yf2PpqGxFQAAAdY"]
[Sat Feb 28 19:19:50.305181 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:17345] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPVrTHSOG_yf2PpqGxHwAAAdA"]
[Sat Feb 28 19:19:50.723146 2026] [:error] [pid 39184:tid 39233] [client 20.151.11.236:17389] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPVltZF9Zd_U7easCByAAAAE4"]
[Sat Feb 28 19:19:51.152347 2026] [:error] [pid 39184:tid 39221] [client 20.151.11.236:16562] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPV1tZF9Zd_U7easCBygAAAEI"]
[Sat Feb 28 19:19:51.683588 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16543] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLPV7THSOG_yf2PpqGxLAAAAdY"]
[Sat Feb 28 19:19:52.187138 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:16693] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLPWLTHSOG_yf2PpqGxNgAAAdA"]
[Sat Feb 28 19:19:52.622861 2026] [:error] [pid 49763:tid 49780] [client 20.151.11.236:17361] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLPWLTHSOG_yf2PpqGxPwAAAc4"]
[Sat Feb 28 19:19:53.037036 2026] [:error] [pid 39183:tid 39206] [client 20.151.11.236:16691] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaLPWRCf4HvhVePw3LbAYgAAAA4"]
[Sat Feb 28 19:19:53.495464 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:16649] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aaLPWbLWOogAgHGh62Qo9wAAAZQ"]
[Sat Feb 28 19:19:53.955421 2026] [:error] [pid 39183:tid 39214] [client 20.151.11.236:17367] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aaLPWRCf4HvhVePw3LbAcAAAABY"]
[Sat Feb 28 19:19:54.386004 2026] [:error] [pid 39183:tid 39210] [client 20.151.11.236:16670] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aaLPWhCf4HvhVePw3LbAdwAAABI"]
[Sat Feb 28 19:19:54.819458 2026] [:error] [pid 52460:tid 52466] [client 20.151.11.236:17348] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aaLPWrLWOogAgHGh62Qo-AAAAYM"]
[Sat Feb 28 19:19:55.332255 2026] [:error] [pid 22194:tid 22219] [client 20.151.11.236:16572] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPW36mbajs3bzQGyuNvwAAAVc"]
[Sat Feb 28 19:19:55.794971 2026] [:error] [pid 49763:tid 49780] [client 20.151.11.236:17404] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPW7THSOG_yf2PpqGxigAAAc4"]
[Sat Feb 28 19:19:56.210375 2026] [:error] [pid 39183:tid 39215] [client 20.151.11.236:17373] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPXBCf4HvhVePw3LbAlAAAABc"]
[Sat Feb 28 19:19:56.645082 2026] [:error] [pid 39183:tid 39206] [client 20.151.11.236:16560] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaLPXBCf4HvhVePw3LbAmgAAAA4"]
[Sat Feb 28 19:19:57.058287 2026] [:error] [pid 52460:tid 52473] [client 20.151.11.236:16558] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaLPXbLWOogAgHGh62Qo_wAAAYo"]
[Sat Feb 28 19:19:57.514176 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16532] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaLPXbTHSOG_yf2PpqGxvwAAAdY"]
[Sat Feb 28 19:19:57.946005 2026] [:error] [pid 39183:tid 39207] [client 20.151.11.236:17323] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaLPXRCf4HvhVePw3LbApgAAAA8"]
[Sat Feb 28 19:19:58.402856 2026] [:error] [pid 39292:tid 39309] [client 20.151.11.236:16703] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaLPXqIAO5fN7BxyqcFU0AAAAM8"]
[Sat Feb 28 19:19:58.835458 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:17369] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaLPXrLWOogAgHGh62QpCAAAAZQ"]
[Sat Feb 28 19:19:59.254076 2026] [:error] [pid 22194:tid 22204] [client 20.151.11.236:17372] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaLPX36mbajs3bzQGyuNwAAAAUg"]
[Sat Feb 28 19:19:59.683038 2026] [:error] [pid 39183:tid 39207] [client 20.151.11.236:17351] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaLPXxCf4HvhVePw3LbAsQAAAA8"]
[Sat Feb 28 19:20:00.188749 2026] [:error] [pid 11791:tid 11816] [client 20.151.11.236:16544] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaLPYGuX5e1Q32gqxH2llgAAARc"]
[Sat Feb 28 19:20:00.616964 2026] [:error] [pid 52460:tid 52468] [client 20.151.11.236:17351] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLPYLLWOogAgHGh62QpEwAAAYU"]
[Sat Feb 28 19:20:01.139644 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:17363] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLPYbLWOogAgHGh62QpGwAAAZQ"]
[Sat Feb 28 19:20:01.556873 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16736] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLPYbTHSOG_yf2PpqGx9AAAAcg"]
[Sat Feb 28 19:20:02.023006 2026] [:error] [pid 39184:tid 39222] [client 20.151.11.236:17346] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaLPYltZF9Zd_U7easCB2QAAAEM"]
[Sat Feb 28 19:20:02.447294 2026] [:error] [pid 39184:tid 39228] [client 20.151.11.236:17360] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLPYltZF9Zd_U7easCB3QAAAEk"]
[Sat Feb 28 19:20:02.907081 2026] [:error] [pid 49763:tid 49773] [client 20.151.11.236:17355] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaLPYrTHSOG_yf2PpqGx_AAAAcc"]
[Sat Feb 28 19:20:03.705137 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sat Feb 28 19:20:03.914872 2026] [:error] [pid 52460:tid 52482] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat Feb 28 19:20:04.378120 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sat Feb 28 19:20:04.590867 2026] [:error] [pid 52460:tid 52468] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Sat Feb 28 19:20:04.826025 2026] [:error] [pid 52460:tid 52470] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Sat Feb 28 19:20:05.036841 2026] [:error] [pid 52460:tid 52482] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sat Feb 28 19:20:05.246763 2026] [:error] [pid 52460:tid 52469] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Feb 28 19:20:05.492999 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:16566] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Sat Feb 28 19:20:06.374627 2026] [:error] [pid 52460:tid 52487] [client 20.151.11.236:16566] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaLPZrLWOogAgHGh62QpSgAAAZg"]
[Sat Feb 28 19:20:06.804455 2026] [:error] [pid 49763:tid 49780] [client 20.151.11.236:17381] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaLPZrTHSOG_yf2PpqGyFAAAAc4"]
[Sat Feb 28 19:20:07.408521 2026] [:error] [pid 11791:tid 11802] [client 20.151.11.236:17364] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaLPZ2uX5e1Q32gqxH2lpwAAAQk"]
[Sat Feb 28 19:20:08.017643 2026] [:error] [pid 49763:tid 49789] [client 20.151.11.236:17390] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaLPaLTHSOG_yf2PpqGyJAAAAdc"]
[Sat Feb 28 19:20:08.517887 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:17399] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLPaLTHSOG_yf2PpqGyKwAAAcM"]
[Sat Feb 28 19:20:08.946006 2026] [:error] [pid 39184:tid 39232] [client 20.151.11.236:17384] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLPaFtZF9Zd_U7easCB6AAAAE0"]
[Sat Feb 28 19:20:09.498791 2026] [:error] [pid 39184:tid 39228] [client 20.151.11.236:16542] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLPaVtZF9Zd_U7easCB7QAAAEk"]
[Sat Feb 28 19:20:09.952957 2026] [:error] [pid 11791:tid 11807] [client 20.151.11.236:16551] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaLPaWuX5e1Q32gqxH2lqwAAAQ4"]
[Sat Feb 28 19:20:10.437788 2026] [:error] [pid 39184:tid 39231] [client 20.151.11.236:16759] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLPaltZF9Zd_U7easCB-AAAAEw"]
[Sat Feb 28 19:20:10.893310 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:16518] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLParLWOogAgHGh62QpYgAAAYk"]
[Sat Feb 28 19:20:11.343963 2026] [:error] [pid 39183:tid 39198] [client 20.151.11.236:16530] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLPaxCf4HvhVePw3LbBCQAAAAY"]
[Sat Feb 28 19:20:11.778631 2026] [:error] [pid 49763:tid 49768] [client 20.151.11.236:17339] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaLPa7THSOG_yf2PpqGyRQAAAcI"]
[Sat Feb 28 19:20:12.212329 2026] [:error] [pid 39183:tid 39210] [client 20.151.11.236:17305] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLPbBCf4HvhVePw3LbBFQAAABI"]
[Sat Feb 28 19:20:12.657155 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:16757] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLPbLTHSOG_yf2PpqGyUAAAAdA"]
[Sat Feb 28 19:20:13.096195 2026] [:error] [pid 49763:tid 49773] [client 20.151.11.236:16873] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLPbbTHSOG_yf2PpqGyVAAAAcc"]
[Sat Feb 28 19:20:13.522352 2026] [:error] [pid 39292:tid 39308] [client 20.151.11.236:16552] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaLPbaIAO5fN7BxyqcFU3wAAAM4"]
[Sat Feb 28 19:20:13.970254 2026] [:error] [pid 39184:tid 39233] [client 20.151.11.236:16555] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaLPbVtZF9Zd_U7easCCAQAAAE4"]
[Sat Feb 28 19:20:14.392177 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:17362] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaLPbrLWOogAgHGh62QpcgAAAZQ"]
[Sat Feb 28 19:20:14.806457 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:17356] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaLPbrTHSOG_yf2PpqGyZQAAAcY"]
[Sat Feb 28 19:20:15.246403 2026] [:error] [pid 49763:tid 49774] [client 20.151.11.236:16513] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaLPb7THSOG_yf2PpqGybwAAAcg"]
[Sat Feb 28 19:20:15.732544 2026] [:error] [pid 39292:tid 39309] [client 20.151.11.236:16559] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPb6IAO5fN7BxyqcFU4gAAAM8"]
[Sat Feb 28 19:20:16.252563 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:17396] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPcBCf4HvhVePw3LbBPQAAAAg"]
[Sat Feb 28 19:20:16.757646 2026] [:error] [pid 39183:tid 39195] [client 20.151.11.236:16702] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPcBCf4HvhVePw3LbBQgAAAAM"]
[Sat Feb 28 19:20:17.231985 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:17382] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaLPcRCf4HvhVePw3LbBSAAAAAA"]
[Sat Feb 28 19:20:17.654095 2026] [:error] [pid 49763:tid 49768] [client 20.151.11.236:17370] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaLPcbTHSOG_yf2PpqGyhAAAAcI"]
[Sat Feb 28 19:20:18.197226 2026] [:error] [pid 39185:tid 39262] [client 20.151.11.236:17320] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaLPchVE-FfM89u7BQaHpAAAAJA"]
[Sat Feb 28 19:20:18.608696 2026] [:error] [pid 39183:tid 39198] [client 20.151.11.236:16550] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaLPchCf4HvhVePw3LbBUgAAAAY"]
[Sat Feb 28 19:20:19.029077 2026] [:error] [pid 39183:tid 39215] [client 20.151.11.236:16564] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaLPcxCf4HvhVePw3LbBWAAAABc"]
[Sat Feb 28 19:20:19.452242 2026] [:error] [pid 39183:tid 39193] [client 20.151.11.236:17322] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLPcxCf4HvhVePw3LbBXAAAAAE"]
[Sat Feb 28 19:20:19.889783 2026] [:error] [pid 52460:tid 52471] [client 20.151.11.236:16879] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLPc7LWOogAgHGh62QpkgAAAYg"]
[Sat Feb 28 19:20:20.328054 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:17291] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLPdLTHSOG_yf2PpqGypQAAAcU"]
[Sat Feb 28 19:20:20.756643 2026] [:error] [pid 49763:tid 49770] [client 20.151.11.236:17371] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaLPdLTHSOG_yf2PpqGysgAAAcQ"]
[Sat Feb 28 19:20:21.196240 2026] [:error] [pid 49763:tid 49768] [client 20.151.11.236:17219] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaLPdbTHSOG_yf2PpqGywQAAAcI"]
[Sat Feb 28 19:20:21.777790 2026] [:error] [pid 49763:tid 49775] [client 20.151.11.236:17407] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaLPdbTHSOG_yf2PpqGy0gAAAck"]
[Sat Feb 28 19:20:22.272986 2026] [:error] [pid 39183:tid 39212] [client 20.151.11.236:17375] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaLPdhCf4HvhVePw3LbBdAAAABQ"]
[Sat Feb 28 19:20:22.739238 2026] [:error] [pid 49763:tid 49779] [client 20.151.11.236:17366] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaLPdrTHSOG_yf2PpqGy9QAAAc0"]
[Sat Feb 28 19:20:23.225520 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:16529] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaLPd7THSOG_yf2PpqGzAAAAAcM"]
[Sat Feb 28 19:20:23.699722 2026] [:error] [pid 39183:tid 39193] [client 20.151.11.236:17289] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaLPdxCf4HvhVePw3LbBgAAAAAE"]
[Sat Feb 28 19:20:24.167414 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:17293] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaLPeLTHSOG_yf2PpqGzEwAAAcs"]
[Sat Feb 28 19:20:24.616499 2026] [:error] [pid 39183:tid 39206] [client 20.151.11.236:17378] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaLPeBCf4HvhVePw3LbBiAAAAA4"]
[Sat Feb 28 19:20:25.071774 2026] [:error] [pid 39184:tid 39221] [client 20.151.11.236:17338] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaLPeVtZF9Zd_U7easCCGQAAAEI"]
[Sat Feb 28 19:20:25.542091 2026] [:error] [pid 11791:tid 11793] [client 20.151.11.236:17302] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaLPeWuX5e1Q32gqxH2ltQAAAQA"]
[Sat Feb 28 19:20:25.984764 2026] [:error] [pid 39183:tid 39211] [client 20.151.11.236:16763] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaLPeRCf4HvhVePw3LbBjwAAABM"]
[Sat Feb 28 19:20:26.483647 2026] [:error] [pid 11791:tid 11802] [client 20.151.11.236:16570] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaLPemuX5e1Q32gqxH2lugAAAQk"]
[Sat Feb 28 19:20:26.916262 2026] [:error] [pid 39183:tid 39195] [client 20.151.11.236:16698] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaLPehCf4HvhVePw3LbBkwAAAAM"]
[Sat Feb 28 19:20:27.460770 2026] [:error] [pid 39183:tid 39194] [client 20.151.11.236:16845] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaLPexCf4HvhVePw3LbBmAAAAAI"]
[Sat Feb 28 19:20:28.036548 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:17401] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaLPfLTHSOG_yf2PpqGzXwAAAcs"]
[Sat Feb 28 19:20:28.511598 2026] [:error] [pid 39292:tid 39315] [client 20.151.11.236:16524] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaLPfKIAO5fN7BxyqcFU7QAAANU"]
[Sat Feb 28 19:20:28.954944 2026] [:error] [pid 49763:tid 49775] [client 20.151.11.236:17290] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLPfLTHSOG_yf2PpqGzbwAAAck"]
[Sat Feb 28 19:20:29.403575 2026] [:error] [pid 52460:tid 52479] [client 20.151.11.236:17299] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLPfbLWOogAgHGh62Qp2gAAAZA"]
[Sat Feb 28 19:20:29.824871 2026] [:error] [pid 52460:tid 52470] [client 20.151.11.236:17354] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLPfbLWOogAgHGh62Qp5gAAAYc"]
[Sat Feb 28 19:20:30.274103 2026] [:error] [pid 49763:tid 49785] [client 20.151.11.236:16520] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaLPfrTHSOG_yf2PpqGzcwAAAdM"]
[Sat Feb 28 19:20:30.699216 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:17395] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaLPfhCf4HvhVePw3LbBvAAAAA0"]
[Sat Feb 28 19:20:31.156612 2026] [:error] [pid 49763:tid 49775] [client 20.151.11.236:17398] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaLPf7THSOG_yf2PpqGzewAAAck"]
[Sat Feb 28 19:20:31.585527 2026] [:error] [pid 52460:tid 52463] [client 20.151.11.236:17316] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaLPf7LWOogAgHGh62Qp_wAAAYA"]
[Sat Feb 28 19:20:32.002236 2026] [:error] [pid 49763:tid 49773] [client 20.151.11.236:17324] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaLPgLTHSOG_yf2PpqGzfQAAAcc"]
[Sat Feb 28 19:20:32.550700 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:17353] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaLPgLTHSOG_yf2PpqGzjAAAAcs"]
[Sat Feb 28 19:20:33.208751 2026] [:error] [pid 39185:tid 39247] [client 20.151.11.236:17334] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaLPgRVE-FfM89u7BQaHrwAAAIE"]
[Sat Feb 28 19:20:33.945198 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:16686] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaLPgRCf4HvhVePw3LbBzwAAAA0"]
[Sat Feb 28 19:20:34.515899 2026] [:error] [pid 39183:tid 39216] [client 20.151.11.236:17288] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaLPghCf4HvhVePw3LbB0QAAABg"]
[Sat Feb 28 19:20:34.979607 2026] [:error] [pid 49763:tid 49768] [client 20.151.11.236:17317] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLPgrTHSOG_yf2PpqGzqgAAAcI"]
[Sat Feb 28 19:20:35.515787 2026] [:error] [pid 39184:tid 39240] [client 20.151.11.236:17387] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLPg1tZF9Zd_U7easCCMQAAAFU"]
[Sat Feb 28 19:20:36.059821 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:16561] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLPhBCf4HvhVePw3LbB4wAAAA0"]
[Sat Feb 28 19:20:36.536820 2026] [:error] [pid 49763:tid 49766] [client 20.151.11.236:17386] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaLPhLTHSOG_yf2PpqGzsgAAAcA"]
[Sat Feb 28 19:20:37.009670 2026] [:error] [pid 49763:tid 49775] [client 20.151.11.236:16574] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaLPhbTHSOG_yf2PpqGztQAAAck"]
[Sat Feb 28 19:20:37.817671 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:17402] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaLPhbTHSOG_yf2PpqGz0QAAAdA"]
[Sat Feb 28 19:20:38.418887 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:17379] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaLPhrLWOogAgHGh62QqKgAAAYk"]
[Sat Feb 28 19:20:38.898495 2026] [:error] [pid 39184:tid 39231] [client 20.151.11.236:17301] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaLPhltZF9Zd_U7easCCOQAAAEw"]
[Sat Feb 28 19:20:39.407781 2026] [:error] [pid 39292:tid 39311] [client 20.151.11.236:17283] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLPh6IAO5fN7BxyqcFU_QAAANE"]
[Sat Feb 28 19:20:39.863145 2026] [:error] [pid 49763:tid 49790] [client 20.151.11.236:17368] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLPh7THSOG_yf2PpqG0FwAAAdg"]
[Sat Feb 28 19:20:40.413558 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:17391] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLPiLLWOogAgHGh62QqMgAAAZQ"]
[Sat Feb 28 19:20:40.896226 2026] [:error] [pid 39184:tid 39238] [client 20.151.11.236:17309] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaLPiFtZF9Zd_U7easCCPgAAAFM"]
[Sat Feb 28 19:20:41.529074 2026] [:error] [pid 49763:tid 49781] [client 20.151.11.236:16533] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaLPibTHSOG_yf2PpqG0QgAAAc8"]
[Sat Feb 28 19:20:41.963017 2026] [:error] [pid 39183:tid 39196] [client 20.151.11.236:17349] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaLPiRCf4HvhVePw3LbCFgAAAAQ"]
[Sat Feb 28 19:20:42.686118 2026] [:error] [pid 49763:tid 49784] [client 20.151.11.236:17298] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaLPirTHSOG_yf2PpqG0YwAAAdI"]
[Sat Feb 28 19:20:43.285163 2026] [:error] [pid 49763:tid 49789] [client 20.151.11.236:16761] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaLPi7THSOG_yf2PpqG0bQAAAdc"]
[Sat Feb 28 19:20:43.762985 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:17406] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaLPi7THSOG_yf2PpqG0dQAAAcs"]
[Sat Feb 28 19:20:44.647971 2026] [:error] [pid 49763:tid 49789] [client 20.151.11.236:17306] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaLPjLTHSOG_yf2PpqG0gQAAAdc"]
[Sat Feb 28 19:20:45.440082 2026] [:error] [pid 52460:tid 52463] [client 20.151.11.236:17280] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaLPjbLWOogAgHGh62QqTgAAAYA"]
[Sat Feb 28 19:20:45.880048 2026] [:error] [pid 49763:tid 49776] [client 20.151.11.236:17380] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaLPjbTHSOG_yf2PpqG0jQAAAco"]
[Sat Feb 28 19:20:46.555252 2026] [:error] [pid 49763:tid 49770] [client 20.151.11.236:16575] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaLPjrTHSOG_yf2PpqG0mAAAAcQ"]
[Sat Feb 28 19:20:47.414927 2026] [:error] [pid 49763:tid 49789] [client 20.151.11.236:17285] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaLPj7THSOG_yf2PpqG0pgAAAdc"]
[Sat Feb 28 19:20:47.962287 2026] [:error] [pid 52460:tid 52480] [client 20.151.11.236:17352] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaLPj7LWOogAgHGh62QqYAAAAZE"]
[Sat Feb 28 19:20:48.870185 2026] [:error] [pid 52460:tid 52474] [client 20.151.11.236:17303] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaLPkLLWOogAgHGh62QqcQAAAYs"]
[Sat Feb 28 19:20:49.903438 2026] [:error] [pid 52460:tid 52478] [client 20.151.11.236:17337] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLPkbLWOogAgHGh62QqfAAAAY8"]
[Sat Feb 28 19:20:51.281854 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:17308] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLPkxCf4HvhVePw3LbCRwAAAAA"]
[Sat Feb 28 19:20:52.062597 2026] [:error] [pid 39183:tid 39202] [client 20.151.11.236:17325] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLPlBCf4HvhVePw3LbCTAAAAAo"]
[Sat Feb 28 19:20:52.737786 2026] [:error] [pid 11791:tid 11817] [client 20.151.11.236:17292] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaLPlGuX5e1Q32gqxH2l2AAAARg"]
[Sat Feb 28 19:20:53.967018 2026] [:error] [pid 52460:tid 52484] [client 20.151.11.236:17308] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaLPlbLWOogAgHGh62QqmgAAAZU"]
[Sat Feb 28 19:20:54.517696 2026] [:error] [pid 49763:tid 49780] [client 20.151.11.236:17311] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaLPlrTHSOG_yf2PpqG00wAAAc4"]
[Sat Feb 28 19:20:54.939704 2026] [:error] [pid 39184:tid 39231] [client 20.151.11.236:17234] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaLPlltZF9Zd_U7easCCfAAAAEw"]
[Sat Feb 28 19:20:55.396659 2026] [:error] [pid 39292:tid 39303] [client 20.151.11.236:17313] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaLPl6IAO5fN7BxyqcFVDgAAAMk"]
[Sat Feb 28 19:20:55.860824 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:17224] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaLPl7THSOG_yf2PpqG04wAAAcM"]
[Sat Feb 28 19:20:56.428243 2026] [:error] [pid 52460:tid 52487] [client 20.151.11.236:17240] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaLPmLLWOogAgHGh62QqpAAAAZg"]
[Sat Feb 28 19:20:56.849992 2026] [:error] [pid 39183:tid 39215] [client 20.151.11.236:17281] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaLPmBCf4HvhVePw3LbCeAAAABc"]
[Sat Feb 28 19:20:57.289133 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:17258] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaLPmRCf4HvhVePw3LbCfgAAAA0"]
[Sat Feb 28 19:20:57.868155 2026] [:error] [pid 39292:tid 39294] [client 20.151.11.236:16548] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaLPmaIAO5fN7BxyqcFVFgAAAMA"]
[Sat Feb 28 19:20:58.313488 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:17218] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaLPmhCf4HvhVePw3LbChwAAAAg"]
[Sat Feb 28 19:20:58.904873 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:17286] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaLPmrTHSOG_yf2PpqG0-wAAAcU"]
[Sat Feb 28 19:20:59.428897 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:17321] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaLPm7THSOG_yf2PpqG1AQAAAcY"]
[Sat Feb 28 19:20:59.954789 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:16563] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaLPm7THSOG_yf2PpqG1BgAAAdY"]
[Sat Feb 28 19:21:01.067147 2026] [:error] [pid 52460:tid 52479] [client 20.151.11.236:17282] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLPnbLWOogAgHGh62QqugAAAZA"]
[Sat Feb 28 19:21:01.823186 2026] [:error] [pid 52460:tid 52481] [client 20.151.11.236:17164] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLPnbLWOogAgHGh62QqvQAAAZI"]
[Sat Feb 28 19:21:03.313363 2026] [:error] [pid 39183:tid 39194] [client 20.151.11.236:17388] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLPnxCf4HvhVePw3LbCsAAAAAI"]
[Sat Feb 28 19:21:03.835919 2026] [:error] [pid 39292:tid 39300] [client 20.151.11.236:17327] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaLPn6IAO5fN7BxyqcFVJQAAAMY"]
[Sat Feb 28 19:21:04.345137 2026] [:error] [pid 22194:tid 22217] [client 20.151.11.236:17230] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaLPoH6mbajs3bzQGyuN5wAAAVU"]
[Sat Feb 28 19:21:05.465702 2026] [:error] [pid 39292:tid 39310] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Sat Feb 28 19:21:05.678502 2026] [:error] [pid 39292:tid 39295] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Feb 28 19:21:05.890355 2026] [:error] [pid 39292:tid 39313] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/autogooey.php
[Sat Feb 28 19:21:06.340899 2026] [:error] [pid 39292:tid 39299] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Sat Feb 28 19:21:06.555348 2026] [:error] [pid 39292:tid 39306] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Feb 28 19:21:06.797021 2026] [:error] [pid 39292:tid 39315] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Sat Feb 28 19:21:07.011629 2026] [:error] [pid 39292:tid 39310] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sat Feb 28 19:21:07.225719 2026] [:error] [pid 39292:tid 39309] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sat Feb 28 19:21:07.439046 2026] [:error] [pid 39292:tid 39311] [client 20.151.11.236:17217] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sat Feb 28 19:21:07.657949 2026] [:error] [pid 39292:tid 39298] [client 20.151.11.236:17217] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLPo6IAO5fN7BxyqcFVSwAAAMQ"]
[Sat Feb 28 19:21:08.349805 2026] [:error] [pid 39183:tid 39213] [client 20.151.11.236:17342] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLPpBCf4HvhVePw3LbC4wAAABU"]
[Sat Feb 28 19:21:08.896089 2026] [:error] [pid 49763:tid 49788] [client 20.151.11.236:17244] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLPpLTHSOG_yf2PpqG1TgAAAdY"]
[Sat Feb 28 19:21:09.387350 2026] [:error] [pid 49763:tid 49787] [client 20.151.11.236:17265] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaLPpbTHSOG_yf2PpqG1VAAAAdU"]
[Sat Feb 28 19:21:09.967248 2026] [:error] [pid 39185:tid 39246] [client 20.151.11.236:17344] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaLPpRVE-FfM89u7BQaH1AAAAIA"]
[Sat Feb 28 19:21:10.938083 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:17287] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaLPphCf4HvhVePw3LbDHQAAAAg"]
[Sat Feb 28 19:21:11.397619 2026] [:error] [pid 49763:tid 49769] [client 20.151.11.236:17350] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaLPp7THSOG_yf2PpqG1bQAAAcM"]
[Sat Feb 28 19:21:11.894187 2026] [:error] [pid 39292:tid 39318] [client 20.151.11.236:17333] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaLPp6IAO5fN7BxyqcFVTQAAANg"]
[Sat Feb 28 19:21:12.370502 2026] [:error] [pid 39183:tid 39206] [client 20.151.11.236:17319] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaLPqBCf4HvhVePw3LbDOwAAAA4"]
[Sat Feb 28 19:21:12.912035 2026] [:error] [pid 39184:tid 39239] [client 20.151.11.236:16573] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaLPqFtZF9Zd_U7easCC5AAAAFQ"]
[Sat Feb 28 19:21:13.329748 2026] [:error] [pid 52460:tid 52472] [client 20.151.11.236:17294] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaLPqbLWOogAgHGh62Qq0gAAAYk"]
[Sat Feb 28 19:21:13.768021 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:17220] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaLPqRCf4HvhVePw3LbDVAAAAA0"]
[Sat Feb 28 19:21:14.264970 2026] [:error] [pid 49763:tid 49786] [client 20.151.11.236:17279] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLPqrTHSOG_yf2PpqG1jwAAAdQ"]
[Sat Feb 28 19:21:14.932274 2026] [:error] [pid 39183:tid 39208] [client 20.151.11.236:17296] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLPqhCf4HvhVePw3LbDYwAAABA"]
[Sat Feb 28 19:21:15.408860 2026] [:error] [pid 39183:tid 39193] [client 20.151.11.236:17284] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLPqxCf4HvhVePw3LbDaQAAAAE"]
[Sat Feb 28 19:21:15.868676 2026] [:error] [pid 39185:tid 39251] [client 20.151.11.236:17332] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaLPqxVE-FfM89u7BQaH3gAAAIU"]
[Sat Feb 28 19:21:16.316712 2026] [:error] [pid 49763:tid 49773] [client 20.151.11.236:17343] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaLPrLTHSOG_yf2PpqG1qQAAAcc"]
[Sat Feb 28 19:21:16.831673 2026] [:error] [pid 39185:tid 39267] [client 20.151.11.236:17358] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaLPrBVE-FfM89u7BQaH4AAAAJU"]
[Sat Feb 28 19:21:17.274104 2026] [:error] [pid 49763:tid 49770] [client 20.151.11.236:17252] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaLPrbTHSOG_yf2PpqG1rQAAAcQ"]
[Sat Feb 28 19:21:17.711697 2026] [:error] [pid 39183:tid 39205] [client 20.151.11.236:17307] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaLPrRCf4HvhVePw3LbDegAAAA0"]
[Sat Feb 28 19:21:18.171054 2026] [:error] [pid 49763:tid 49767] [client 20.151.11.236:17256] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaLPrrTHSOG_yf2PpqG1uQAAAcE"]
[Sat Feb 28 19:21:18.622549 2026] [:error] [pid 49763:tid 49781] [client 20.151.11.236:17246] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaLPrrTHSOG_yf2PpqG1vgAAAc8"]
[Sat Feb 28 19:21:19.081863 2026] [:error] [pid 39292:tid 39297] [client 20.151.11.236:17162] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaLPr6IAO5fN7BxyqcFVUQAAAMM"]
[Sat Feb 28 19:21:19.525236 2026] [:error] [pid 49763:tid 49776] [client 20.151.11.236:17262] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaLPr7THSOG_yf2PpqG1xwAAAco"]
[Sat Feb 28 19:21:19.961045 2026] [:error] [pid 39292:tid 39303] [client 20.151.11.236:17341] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaLPr6IAO5fN7BxyqcFVVAAAAMk"]
[Sat Feb 28 19:21:20.503319 2026] [:error] [pid 39185:tid 39254] [client 20.151.11.236:17261] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaLPsBVE-FfM89u7BQaH4gAAAIg"]
[Sat Feb 28 19:21:20.987225 2026] [:error] [pid 39292:tid 39309] [client 20.151.11.236:17315] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaLPsKIAO5fN7BxyqcFVWAAAAM8"]
[Sat Feb 28 19:21:21.409536 2026] [:error] [pid 39183:tid 39216] [client 20.151.11.236:17392] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaLPsRCf4HvhVePw3LbDjAAAABg"]
[Sat Feb 28 19:21:21.892865 2026] [:error] [pid 39292:tid 39305] [client 20.151.11.236:17248] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLPsaIAO5fN7BxyqcFVYAAAAMs"]
[Sat Feb 28 19:21:22.314418 2026] [:error] [pid 39184:tid 39220] [client 20.151.11.236:17297] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLPsltZF9Zd_U7easCC_wAAAEE"]
[Sat Feb 28 19:21:22.735941 2026] [:error] [pid 39183:tid 39198] [client 20.151.11.236:17247] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLPshCf4HvhVePw3LbDjgAAAAY"]
[Sat Feb 28 19:21:23.186996 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:17365] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaLPs7THSOG_yf2PpqG14gAAAcY"]
[Sat Feb 28 19:21:23.626237 2026] [:error] [pid 52460:tid 52464] [client 20.151.11.236:17229] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaLPs7LWOogAgHGh62Qq5gAAAYE"]
[Sat Feb 28 19:21:24.111501 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:17242] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaLPtLLWOogAgHGh62Qq6gAAAZQ"]
[Sat Feb 28 19:21:24.530502 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:16535] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaLPtBCf4HvhVePw3LbDmAAAAAA"]
[Sat Feb 28 19:21:24.973210 2026] [:error] [pid 52460:tid 52474] [client 20.151.11.236:17335] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaLPtLLWOogAgHGh62Qq6wAAAYs"]
[Sat Feb 28 19:21:25.410701 2026] [:error] [pid 52460:tid 52475] [client 20.151.11.236:17377] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaLPtbLWOogAgHGh62Qq7gAAAYw"]
[Sat Feb 28 19:21:25.865961 2026] [:error] [pid 52460:tid 52484] [client 20.151.11.236:17237] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaLPtbLWOogAgHGh62Qq8QAAAZU"]
[Sat Feb 28 19:21:26.316621 2026] [:error] [pid 49763:tid 49776] [client 20.151.11.236:17266] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaLPtrTHSOG_yf2PpqG2GAAAAco"]
[Sat Feb 28 19:21:26.798953 2026] [:error] [pid 39183:tid 39209] [client 20.151.11.236:17312] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaLPthCf4HvhVePw3LbDrwAAABE"]
[Sat Feb 28 19:21:27.282883 2026] [:error] [pid 39292:tid 39295] [client 20.151.11.236:17277] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaLPt6IAO5fN7BxyqcFVcQAAAME"]
[Sat Feb 28 19:21:27.727811 2026] [:error] [pid 39184:tid 39233] [client 20.151.11.236:17310] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaLPt1tZF9Zd_U7easCDCwAAAE4"]
[Sat Feb 28 19:21:28.250167 2026] [:error] [pid 49763:tid 49771] [client 20.151.11.236:17331] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaLPuLTHSOG_yf2PpqG2MwAAAcU"]
[Sat Feb 28 19:21:28.917103 2026] [:error] [pid 49763:tid 49783] [client 20.151.11.236:17300] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaLPuLTHSOG_yf2PpqG2OwAAAdE"]
[Sat Feb 28 19:21:29.385049 2026] [:error] [pid 39183:tid 39196] [client 20.151.11.236:17222] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaLPuRCf4HvhVePw3LbDxwAAAAQ"]
[Sat Feb 28 19:21:30.223265 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:16569] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaLPurTHSOG_yf2PpqG2TgAAAcs"]
[Sat Feb 28 19:21:30.746584 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:17397] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaLPurTHSOG_yf2PpqG2WQAAAcY"]
[Sat Feb 28 19:21:31.242958 2026] [:error] [pid 52460:tid 52483] [client 20.151.11.236:17326] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaLPu7LWOogAgHGh62Qq_QAAAZQ"]
[Sat Feb 28 19:21:31.695640 2026] [:error] [pid 49763:tid 49778] [client 20.151.11.236:17239] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLPu7THSOG_yf2PpqG2YgAAAcw"]
[Sat Feb 28 19:21:32.185602 2026] [:error] [pid 49763:tid 49783] [client 20.151.11.236:17194] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLPvLTHSOG_yf2PpqG2aAAAAdE"]
[Sat Feb 28 19:21:32.799793 2026] [:error] [pid 39183:tid 39216] [client 20.151.11.236:17330] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLPvBCf4HvhVePw3LbD0QAAABg"]
[Sat Feb 28 19:21:33.317465 2026] [:error] [pid 39183:tid 39215] [client 20.151.11.236:17176] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaLPvRCf4HvhVePw3LbD1gAAABc"]
[Sat Feb 28 19:21:33.748850 2026] [:error] [pid 39184:tid 39237] [client 20.151.11.236:17385] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaLPvVtZF9Zd_U7easCDDgAAAFI"]
[Sat Feb 28 19:21:34.249480 2026] [:error] [pid 22194:tid 22220] [client 20.151.11.236:17273] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaLPvn6mbajs3bzQGyuOGQAAAVg"]
[Sat Feb 28 19:21:34.727465 2026] [:error] [pid 39183:tid 39200] [client 20.151.11.236:17318] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaLPvhCf4HvhVePw3LbD3gAAAAg"]
[Sat Feb 28 19:21:35.168248 2026] [:error] [pid 39184:tid 39238] [client 20.151.11.236:16531] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaLPv1tZF9Zd_U7easCDEQAAAFM"]
[Sat Feb 28 19:21:35.666605 2026] [:error] [pid 49763:tid 49785] [client 20.151.11.236:17236] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaLPv7THSOG_yf2PpqG2igAAAdM"]
[Sat Feb 28 19:21:36.241453 2026] [:error] [pid 49763:tid 49773] [client 20.151.11.236:17202] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaLPwLTHSOG_yf2PpqG2kQAAAcc"]
[Sat Feb 28 19:21:36.670268 2026] [:error] [pid 49763:tid 49782] [client 20.151.11.236:17263] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaLPwLTHSOG_yf2PpqG2lAAAAdA"]
[Sat Feb 28 19:21:37.270404 2026] [:error] [pid 22194:tid 22219] [client 20.151.11.236:17340] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaLPwX6mbajs3bzQGyuOHwAAAVc"]
[Sat Feb 28 19:21:37.758304 2026] [:error] [pid 39183:tid 39207] [client 20.151.11.236:17254] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaLPwRCf4HvhVePw3LbD6QAAAA8"]
[Sat Feb 28 19:21:38.225513 2026] [:error] [pid 39183:tid 39192] [client 20.151.11.236:17359] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaLPwhCf4HvhVePw3LbD6wAAAAA"]
[Sat Feb 28 19:21:38.665836 2026] [:error] [pid 39183:tid 39208] [client 20.151.11.236:17186] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaLPwhCf4HvhVePw3LbD7wAAABA"]
[Sat Feb 28 19:21:39.100197 2026] [:error] [pid 49763:tid 49777] [client 20.151.11.236:17264] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaLPw7THSOG_yf2PpqG2oQAAAcs"]
[Sat Feb 28 19:21:39.553494 2026] [:error] [pid 49763:tid 49787] [client 20.151.11.236:17225] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLPw7THSOG_yf2PpqG2pQAAAdU"]
[Sat Feb 28 19:21:39.975904 2026] [:error] [pid 49763:tid 49772] [client 20.151.11.236:17336] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLPw7THSOG_yf2PpqG2qwAAAcY"]
[Sat Feb 28 19:21:40.394815 2026] [:error] [pid 49763:tid 49783] [client 20.151.11.236:17152] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLPxLTHSOG_yf2PpqG2sQAAAdE"]
[Sat Feb 28 19:21:40.869693 2026] [:error] [pid 39183:tid 39206] [client 20.151.11.236:17205] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaLPxBCf4HvhVePw3LbD9gAAAA4"]
[Sat Feb 28 19:21:41.310774 2026] [:error] [pid 11791:tid 11813] [client 20.151.11.236:17163] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaLPxWuX5e1Q32gqxH2mEQAAARQ"]
[Sat Feb 28 19:21:41.748034 2026] [:error] [pid 39292:tid 39296] [client 20.151.11.236:17243] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaLPxaIAO5fN7BxyqcFViAAAAMI"]
[Sat Feb 28 19:21:42.401557 2026] [:error] [pid 52460:tid 52464] [client 20.151.11.236:17168] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaLPxrLWOogAgHGh62QrDQAAAYE"]
[Sat Feb 28 19:21:42.892195 2026] [:error] [pid 49763:tid 49776] [client 20.151.11.236:17153] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaLPxrTHSOG_yf2PpqG2uwAAAco"]
[Sat Feb 28 19:21:43.334647 2026] [:error] [pid 39183:tid 39204] [client 20.151.11.236:17175] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaLPxxCf4HvhVePw3LbEBQAAAAw"]
[Sat Feb 28 19:21:43.850184 2026] [:error] [pid 39184:tid 39223] [client 20.151.11.236:17257] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaLPx1tZF9Zd_U7easCDGwAAAEQ"]
[Sat Feb 28 19:21:44.264366 2026] [:error] [pid 39184:tid 39220] [client 20.151.11.236:17250] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaLPyFtZF9Zd_U7easCDHwAAAEE"]
[Sat Feb 28 19:21:44.690966 2026] [:error] [pid 52460:tid 52486] [client 20.151.11.236:17241] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaLPyLLWOogAgHGh62QrEAAAAZc"]
[Sat Feb 28 19:21:45.113504 2026] [:error] [pid 49763:tid 49783] [client 20.151.11.236:17269] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaLPybTHSOG_yf2PpqG2zgAAAdE"]
[Sat Feb 28 19:21:45.622305 2026] [:error] [pid 49763:tid 49781] [client 20.151.11.236:17304] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaLPybTHSOG_yf2PpqG20gAAAc8"]
[Sat Feb 28 19:21:46.067992 2026] [:error] [pid 49763:tid 49767] [client 20.151.11.236:17251] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaLPyrTHSOG_yf2PpqG21AAAAcE"]
[Sat Feb 28 19:21:46.555866 2026] [:error] [pid 39183:tid 39216] [client 20.151.11.236:17179] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaLPyhCf4HvhVePw3LbEDwAAABg"]
[Sat Feb 28 19:25:09.605346 2026] [:error] [pid 52460:tid 52467] [client 165.245.142.82:64596] [client 165.245.142.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.142.82, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaLQlbLWOogAgHGh62QtcwAAAYQ"]
[Sat Feb 28 19:25:09.611146 2026] [:error] [pid 52460:tid 52467] [client 165.245.142.82:64596] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 28 19:25:09.988207 2026] [:error] [pid 49763:tid 49788] [client 165.245.142.82:64817] [client 165.245.142.82] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.142.82, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaLQlbTHSOG_yf2PpqG9BwAAAdY"]
[Sat Feb 28 19:25:09.992491 2026] [:error] [pid 49763:tid 49788] [client 165.245.142.82:64817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Feb 28 20:12:16.466182 2026] [:error] [pid 39183:tid 39200] [client 43.155.27.244:56818] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaLboBCf4HvhVePw3LYA9wAAAAg"]
[Sat Feb 28 20:52:28.572670 2026] [:error] [pid 49763:tid 49767] [client 45.153.34.31:53072] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aaLlDLTHSOG_yf2PpqFG7gAAAcE"]
[Sat Feb 28 20:57:48.384198 2026] [:error] [pid 39292:tid 39302] [client 49.234.192.248:34100] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaLmTKIAO5fN7BxyqcF1FgAAAMg"]
[Sat Feb 28 21:36:11.041773 2026] [:error] [pid 49763:tid 49784] [client 79.40.255.3:63246] [client 79.40.255.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.40.255.3, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLvS7THSOG_yf2PpqGE3wAAAdI"]
[Sat Feb 28 21:36:11.056684 2026] [:error] [pid 49763:tid 49784] [client 79.40.255.3:63246] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 21:40:24.212352 2026] [:error] [pid 39183:tid 39212] [client 20.220.212.70:30243] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLwSBCf4HvhVePw3LZccAAAABQ"]
[Sat Feb 28 21:40:25.064190 2026] [:error] [pid 49763:tid 49778] [client 20.220.212.70:30212] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLwSbTHSOG_yf2PpqGLSwAAAcw"]
[Sat Feb 28 21:40:25.906163 2026] [:error] [pid 49763:tid 49781] [client 20.220.212.70:30237] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLwSbTHSOG_yf2PpqGLVwAAAc8"]
[Sat Feb 28 21:40:26.740348 2026] [:error] [pid 39292:tid 39312] [client 20.220.212.70:30258] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaLwSqIAO5fN7BxyqcGFaAAAANI"]
[Sat Feb 28 21:41:43.502551 2026] [:error] [pid 49763:tid 49773] [client 122.172.82.44:24668] [client 122.172.82.44] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.172.82.44, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaLwl7THSOG_yf2PpqGMlAAAAcc"]
[Sat Feb 28 21:41:43.507313 2026] [:error] [pid 49763:tid 49773] [client 122.172.82.44:24668] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 22:17:36.204007 2026] [:error] [pid 39183:tid 39214] [client 43.155.140.157:36082] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaL5ABCf4HvhVePw3LaCBgAAABY"]
[Sat Feb 28 22:29:19.162701 2026] [:error] [pid 49763:tid 49767] [client 157.50.96.102:50406] [client 157.50.96.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 157.50.96.102, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaL7v7THSOG_yf2PpqHQ_AAAAcE"]
[Sat Feb 28 22:29:19.171680 2026] [:error] [pid 49763:tid 49767] [client 157.50.96.102:50406] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Feb 28 23:11:09.619420 2026] [:error] [pid 39185:tid 39246] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sat Feb 28 23:11:09.829846 2026] [:error] [pid 39185:tid 39249] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sat Feb 28 23:11:11.614535 2026] [:error] [pid 39185:tid 39249] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Sat Feb 28 23:11:11.826458 2026] [:error] [pid 39185:tid 39252] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sat Feb 28 23:11:12.038052 2026] [:error] [pid 39185:tid 39269] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sat Feb 28 23:11:12.250187 2026] [:error] [pid 39185:tid 39267] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sat Feb 28 23:11:12.462777 2026] [:error] [pid 39185:tid 39265] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Feb 28 23:11:12.674379 2026] [:error] [pid 39185:tid 39266] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat Feb 28 23:11:12.884237 2026] [:error] [pid 39185:tid 39258] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Sat Feb 28 23:11:13.106341 2026] [:error] [pid 39185:tid 39251] [client 20.220.144.87:23430] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sat Feb 28 23:11:13.314785 2026] [:error] [pid 39185:tid 39254] [client 20.220.144.87:23430] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaMFkRVE-FfM89u7BQa52QAAAIg"]
[Sat Feb 28 23:11:13.731027 2026] [:error] [pid 39184:tid 39219] [client 20.220.144.87:23434] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaMFkVtZF9Zd_U7easD5DQAAAEA"]
[Sat Feb 28 23:11:14.142852 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:23543] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaMFkrTHSOG_yf2PpqH8DAAAAcE"]
[Sat Feb 28 23:11:14.552076 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:23502] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaMFkrLWOogAgHGh62TaRwAAAY8"]
[Sat Feb 28 23:11:14.961920 2026] [:error] [pid 52460:tid 52486] [client 20.220.144.87:23522] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaMFkrLWOogAgHGh62TaTAAAAZc"]
[Sat Feb 28 23:11:15.372549 2026] [:error] [pid 39183:tid 39211] [client 20.220.144.87:23547] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaMFkxCf4HvhVePw3LbK5AAAABM"]
[Sat Feb 28 23:11:15.782710 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:23517] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaMFk7THSOG_yf2PpqH8EAAAAck"]
[Sat Feb 28 23:11:16.191888 2026] [:error] [pid 39183:tid 39208] [client 20.220.144.87:23450] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaMFlBCf4HvhVePw3LbK7AAAABA"]
[Sat Feb 28 23:11:16.600404 2026] [:error] [pid 39185:tid 39259] [client 20.220.144.87:23529] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMFlBVE-FfM89u7BQa52gAAAI0"]
[Sat Feb 28 23:11:17.012464 2026] [:error] [pid 39292:tid 39316] [client 20.220.144.87:23539] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMFlaIAO5fN7BxyqcGj5wAAANY"]
[Sat Feb 28 23:11:17.424655 2026] [:error] [pid 39183:tid 39215] [client 20.220.144.87:23526] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMFlRCf4HvhVePw3LbK9gAAABc"]
[Sat Feb 28 23:11:17.838552 2026] [:error] [pid 49763:tid 49777] [client 20.220.144.87:23453] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMFlbTHSOG_yf2PpqH8EwAAAcs"]
[Sat Feb 28 23:11:18.258117 2026] [:error] [pid 39292:tid 39295] [client 20.220.144.87:23531] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMFlqIAO5fN7BxyqcGj6wAAAME"]
[Sat Feb 28 23:11:18.672647 2026] [:error] [pid 52460:tid 52482] [client 20.220.144.87:23424] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMFlrLWOogAgHGh62TaZQAAAZM"]
[Sat Feb 28 23:11:19.079584 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:23440] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMFl7LWOogAgHGh62TaaAAAAYE"]
[Sat Feb 28 23:11:19.491300 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:23432] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMFl7THSOG_yf2PpqH8IAAAAc8"]
[Sat Feb 28 23:11:19.903695 2026] [:error] [pid 52460:tid 52472] [client 20.220.144.87:23427] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaMFl7LWOogAgHGh62TacAAAAYk"]
[Sat Feb 28 23:11:20.311972 2026] [:error] [pid 52460:tid 52469] [client 20.220.144.87:23429] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaMFmLLWOogAgHGh62TadgAAAYY"]
[Sat Feb 28 23:11:20.721348 2026] [:error] [pid 49763:tid 49780] [client 20.220.144.87:23545] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaMFmLTHSOG_yf2PpqH8JQAAAc4"]
[Sat Feb 28 23:11:21.128754 2026] [:error] [pid 49763:tid 49779] [client 20.220.144.87:23507] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaMFmbTHSOG_yf2PpqH8JwAAAc0"]
[Sat Feb 28 23:11:21.538525 2026] [:error] [pid 39184:tid 39224] [client 20.220.144.87:23431] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaMFmVtZF9Zd_U7easD5FgAAAEU"]
[Sat Feb 28 23:11:21.946921 2026] [:error] [pid 39183:tid 39208] [client 20.220.144.87:23528] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaMFmRCf4HvhVePw3LbLBAAAABA"]
[Sat Feb 28 23:11:22.356606 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:23551] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaMFmhCf4HvhVePw3LbLCAAAAAo"]
[Sat Feb 28 23:11:22.770036 2026] [:error] [pid 39183:tid 39212] [client 20.220.144.87:23546] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaMFmhCf4HvhVePw3LbLDAAAABQ"]
[Sat Feb 28 23:11:23.184953 2026] [:error] [pid 39183:tid 39198] [client 20.220.144.87:23540] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMFmxCf4HvhVePw3LbLEAAAAAY"]
[Sat Feb 28 23:11:23.594487 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:23524] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMFmxCf4HvhVePw3LbLFQAAAA0"]
[Sat Feb 28 23:11:24.008975 2026] [:error] [pid 39184:tid 39225] [client 20.220.144.87:23550] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMFnFtZF9Zd_U7easD5GQAAAEY"]
[Sat Feb 28 23:11:24.421169 2026] [:error] [pid 11791:tid 11809] [client 20.220.144.87:23515] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMFnGuX5e1Q32gqxH3kDAAAARA"]
[Sat Feb 28 23:11:24.833688 2026] [:error] [pid 49763:tid 49774] [client 20.220.144.87:23445] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaMFnLTHSOG_yf2PpqH8MgAAAcg"]
[Sat Feb 28 23:11:25.246601 2026] [:error] [pid 39183:tid 39204] [client 20.220.144.87:23504] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaMFnRCf4HvhVePw3LbLIAAAAAw"]
[Sat Feb 28 23:11:25.659917 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:23514] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaMFnbTHSOG_yf2PpqH8NgAAAcQ"]
[Sat Feb 28 23:11:26.072453 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:23503] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaMFnhCf4HvhVePw3LbLJwAAAAM"]
[Sat Feb 28 23:11:26.479991 2026] [:error] [pid 39292:tid 39314] [client 20.220.144.87:23489] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaMFnqIAO5fN7BxyqcGj9gAAANQ"]
[Sat Feb 28 23:11:26.888032 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:23511] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaMFnrTHSOG_yf2PpqH8OgAAAc8"]
[Sat Feb 28 23:11:27.296560 2026] [:error] [pid 39292:tid 39297] [client 20.220.144.87:23542] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaMFn6IAO5fN7BxyqcGj-QAAAMM"]
[Sat Feb 28 23:11:27.704965 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:23442] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaMFn7LWOogAgHGh62TaiQAAAYs"]
[Sat Feb 28 23:11:28.116598 2026] [:error] [pid 52460:tid 52476] [client 20.220.144.87:23518] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaMFoLLWOogAgHGh62TakAAAAY0"]
[Sat Feb 28 23:11:28.536027 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:23441] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaMFoLLWOogAgHGh62TakQAAAYo"]
[Sat Feb 28 23:11:28.955485 2026] [:error] [pid 39184:tid 39230] [client 20.220.144.87:23373] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaMFoFtZF9Zd_U7easD5HwAAAEs"]
[Sat Feb 28 23:11:29.371406 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:23368] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaMFoRCf4HvhVePw3LbLMgAAAAM"]
[Sat Feb 28 23:11:29.784547 2026] [:error] [pid 11791:tid 11804] [client 20.220.144.87:23532] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaMFoWuX5e1Q32gqxH3kDgAAAQs"]
[Sat Feb 28 23:11:30.202164 2026] [:error] [pid 39183:tid 39210] [client 20.220.144.87:23508] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaMFohCf4HvhVePw3LbLOgAAABI"]
[Sat Feb 28 23:11:30.615462 2026] [:error] [pid 39183:tid 39198] [client 20.220.144.87:23387] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaMFohCf4HvhVePw3LbLPQAAAAY"]
[Sat Feb 28 23:11:31.028182 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:23426] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaMFoxCf4HvhVePw3LbLPgAAAAc"]
[Sat Feb 28 23:11:31.439444 2026] [:error] [pid 39183:tid 39194] [client 20.220.144.87:23459] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaMFoxCf4HvhVePw3LbLRgAAAAI"]
[Sat Feb 28 23:11:31.848153 2026] [:error] [pid 11791:tid 11796] [client 20.220.144.87:23521] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaMFo2uX5e1Q32gqxH3kDwAAAQM"]
[Sat Feb 28 23:11:32.258363 2026] [:error] [pid 11791:tid 11817] [client 20.220.144.87:23443] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaMFpGuX5e1Q32gqxH3kEAAAARg"]
[Sat Feb 28 23:11:32.666811 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:23452] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaMFpLTHSOG_yf2PpqH8QgAAAdE"]
[Sat Feb 28 23:11:33.075942 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:23436] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaMFpVtZF9Zd_U7easD5JwAAAFU"]
[Sat Feb 28 23:11:33.485340 2026] [:error] [pid 39184:tid 39228] [client 20.220.144.87:23374] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaMFpVtZF9Zd_U7easD5KQAAAEk"]
[Sat Feb 28 23:11:33.900237 2026] [:error] [pid 39183:tid 39194] [client 20.220.144.87:23493] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaMFpRCf4HvhVePw3LbLUAAAAAI"]
[Sat Feb 28 23:11:34.314103 2026] [:error] [pid 39183:tid 39214] [client 20.220.144.87:23491] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaMFphCf4HvhVePw3LbLVAAAABY"]
[Sat Feb 28 23:11:34.724517 2026] [:error] [pid 49763:tid 49770] [client 20.220.144.87:23363] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaMFprTHSOG_yf2PpqH8RQAAAcQ"]
[Sat Feb 28 23:11:35.133777 2026] [:error] [pid 49763:tid 49777] [client 20.220.144.87:23482] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaMFp7THSOG_yf2PpqH8RwAAAcs"]
[Sat Feb 28 23:11:35.542834 2026] [:error] [pid 49763:tid 49787] [client 20.220.144.87:23509] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaMFp7THSOG_yf2PpqH8SQAAAdU"]
[Sat Feb 28 23:11:35.955955 2026] [:error] [pid 39183:tid 39213] [client 20.220.144.87:23530] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaMFpxCf4HvhVePw3LbLWwAAABU"]
[Sat Feb 28 23:11:36.369197 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:23520] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaMFqBCf4HvhVePw3LbLXQAAAAQ"]
[Sat Feb 28 23:11:36.778643 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:23525] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaMFqBCf4HvhVePw3LbLYgAAAA0"]
[Sat Feb 28 23:11:37.191791 2026] [:error] [pid 49763:tid 49772] [client 20.220.144.87:23456] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaMFqbTHSOG_yf2PpqH8UQAAAcY"]
[Sat Feb 28 23:11:37.608038 2026] [:error] [pid 39185:tid 39261] [client 20.220.144.87:23469] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaMFqRVE-FfM89u7BQa53gAAAI8"]
[Sat Feb 28 23:11:38.026295 2026] [:error] [pid 39185:tid 39262] [client 20.220.144.87:23497] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMFqhVE-FfM89u7BQa53wAAAJA"]
[Sat Feb 28 23:11:38.438747 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:23474] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMFqhCf4HvhVePw3LbLaQAAAA8"]
[Sat Feb 28 23:11:38.846770 2026] [:error] [pid 39185:tid 39270] [client 20.220.144.87:23428] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMFqhVE-FfM89u7BQa54QAAAJg"]
[Sat Feb 28 23:11:39.261623 2026] [:error] [pid 39185:tid 39255] [client 20.220.144.87:23444] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMFqxVE-FfM89u7BQa54wAAAIk"]
[Sat Feb 28 23:11:39.676304 2026] [:error] [pid 39184:tid 39220] [client 20.220.144.87:23461] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMFq1tZF9Zd_U7easD5KwAAAEE"]
[Sat Feb 28 23:11:40.089358 2026] [:error] [pid 39185:tid 39252] [client 20.220.144.87:23371] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMFrBVE-FfM89u7BQa55gAAAIY"]
[Sat Feb 28 23:11:40.502595 2026] [:error] [pid 52460:tid 52482] [client 20.220.144.87:23462] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMFrLLWOogAgHGh62TaqAAAAZM"]
[Sat Feb 28 23:11:40.911906 2026] [:error] [pid 39183:tid 39192] [client 20.220.144.87:23361] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMFrBCf4HvhVePw3LbLcAAAAAA"]
[Sat Feb 28 23:11:41.326990 2026] [:error] [pid 39185:tid 39254] [client 20.220.144.87:23454] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaMFrRVE-FfM89u7BQa57AAAAIg"]
[Sat Feb 28 23:11:41.744885 2026] [:error] [pid 39183:tid 39216] [client 20.220.144.87:23457] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaMFrRCf4HvhVePw3LbLeAAAABg"]
[Sat Feb 28 23:11:42.153035 2026] [:error] [pid 39183:tid 39214] [client 20.220.144.87:23364] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaMFrhCf4HvhVePw3LbLfQAAABY"]
[Sat Feb 28 23:11:42.560131 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:23386] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaMFrrLWOogAgHGh62TarQAAAYs"]
[Sat Feb 28 23:11:42.991809 2026] [:error] [pid 39183:tid 39203] [client 20.220.144.87:23499] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMFrhCf4HvhVePw3LbLggAAAAs"]
[Sat Feb 28 23:11:43.406288 2026] [:error] [pid 11791:tid 11798] [client 20.220.144.87:23378] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMFr2uX5e1Q32gqxH3kFwAAAQU"]
[Sat Feb 28 23:11:43.823775 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:23473] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMFrxCf4HvhVePw3LbLhQAAAA0"]
[Sat Feb 28 23:11:44.238277 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:23309] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMFsBCf4HvhVePw3LbLiQAAAA8"]
[Sat Feb 28 23:11:44.651924 2026] [:error] [pid 39292:tid 39318] [client 20.220.144.87:23449] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaMFsKIAO5fN7BxyqcGkAgAAANg"]
[Sat Feb 28 23:11:45.067258 2026] [:error] [pid 39183:tid 39204] [client 20.220.144.87:23505] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaMFsRCf4HvhVePw3LbLkgAAAAw"]
[Sat Feb 28 23:11:45.475781 2026] [:error] [pid 49763:tid 49784] [client 20.220.144.87:23548] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaMFsbTHSOG_yf2PpqH8YQAAAdI"]
[Sat Feb 28 23:11:45.891997 2026] [:error] [pid 39183:tid 39211] [client 20.220.144.87:23467] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaMFsRCf4HvhVePw3LbLlgAAABM"]
[Sat Feb 28 23:11:46.306606 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:23533] [client 20.220.144.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaMFsltZF9Zd_U7easD5MwAAAEg"]
[Sat Feb 28 23:11:46.716164 2026] [:error] [pid 49763:tid 49778] [client 20.220.144.87:23496] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaMFsrTHSOG_yf2PpqH8ZAAAAcw"]
[Sat Feb 28 23:11:47.124866 2026] [:error] [pid 39184:tid 39223] [client 20.220.144.87:23458] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaMFs1tZF9Zd_U7easD5NQAAAEQ"]
[Sat Feb 28 23:11:47.538420 2026] [:error] [pid 52460:tid 52476] [client 20.220.144.87:23483] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaMFs7LWOogAgHGh62TawQAAAY0"]
[Sat Feb 28 23:11:47.951408 2026] [:error] [pid 39184:tid 39220] [client 20.220.144.87:23403] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMFs1tZF9Zd_U7easD5NwAAAEE"]
[Sat Feb 28 23:11:48.364427 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:23451] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMFtLTHSOG_yf2PpqH8agAAAck"]
[Sat Feb 28 23:11:48.783000 2026] [:error] [pid 49763:tid 49779] [client 20.220.144.87:23465] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMFtLTHSOG_yf2PpqH8bQAAAc0"]
[Sat Feb 28 23:11:49.217422 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:23535] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaMFtRCf4HvhVePw3LbLqAAAAA4"]
[Sat Feb 28 23:11:49.669580 2026] [:error] [pid 49763:tid 49784] [client 20.220.144.87:23446] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMFtbTHSOG_yf2PpqH8cQAAAdI"]
[Sat Feb 28 23:11:50.130514 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:23329] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMFtrTHSOG_yf2PpqH8cwAAAcE"]
[Sat Feb 28 23:11:50.594162 2026] [:error] [pid 39292:tid 39317] [client 20.220.144.87:23375] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMFtqIAO5fN7BxyqcGkBQAAANc"]
[Sat Feb 28 23:11:51.044402 2026] [:error] [pid 39292:tid 39304] [client 20.220.144.87:23301] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMFt6IAO5fN7BxyqcGkBgAAAMo"]
[Sat Feb 28 23:11:51.515470 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:23498] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFtxCf4HvhVePw3LbLtgAAAAE"]
[Sat Feb 28 23:11:51.972868 2026] [:error] [pid 39183:tid 39209] [client 20.220.144.87:23516] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFtxCf4HvhVePw3LbLuAAAABE"]
[Sat Feb 28 23:11:52.406895 2026] [:error] [pid 39184:tid 39233] [client 20.220.144.87:23536] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFuFtZF9Zd_U7easD5OwAAAE4"]
[Sat Feb 28 23:11:52.820408 2026] [:error] [pid 39183:tid 39214] [client 20.220.144.87:23475] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFuBCf4HvhVePw3LbLvgAAABY"]
[Sat Feb 28 23:11:53.234529 2026] [:error] [pid 39292:tid 39307] [client 20.220.144.87:23463] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMFuaIAO5fN7BxyqcGkBwAAAM0"]
[Sat Feb 28 23:11:53.644439 2026] [:error] [pid 39183:tid 39199] [client 20.220.144.87:23481] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMFuRCf4HvhVePw3LbLwQAAAAc"]
[Sat Feb 28 23:11:54.073732 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:23510] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMFurTHSOG_yf2PpqH8ewAAAc8"]
[Sat Feb 28 23:11:54.483807 2026] [:error] [pid 49763:tid 49773] [client 20.220.144.87:23370] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMFurTHSOG_yf2PpqH8fwAAAcc"]
[Sat Feb 28 23:11:54.896701 2026] [:error] [pid 39292:tid 39313] [client 20.220.144.87:23519] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaMFuqIAO5fN7BxyqcGkCAAAANM"]
[Sat Feb 28 23:11:55.314725 2026] [:error] [pid 39184:tid 39223] [client 20.220.144.87:23541] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaMFu1tZF9Zd_U7easD5QQAAAEQ"]
[Sat Feb 28 23:11:55.731564 2026] [:error] [pid 39292:tid 39316] [client 20.220.144.87:23495] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaMFu6IAO5fN7BxyqcGkCgAAANY"]
[Sat Feb 28 23:11:56.144340 2026] [:error] [pid 49763:tid 49789] [client 20.220.144.87:23523] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaMFvLTHSOG_yf2PpqH8gQAAAdc"]
[Sat Feb 28 23:11:56.558797 2026] [:error] [pid 39183:tid 39192] [client 20.220.144.87:23435] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaMFvBCf4HvhVePw3LbLyAAAAAA"]
[Sat Feb 28 23:11:56.979002 2026] [:error] [pid 39292:tid 39305] [client 20.220.144.87:23464] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaMFvKIAO5fN7BxyqcGkDAAAAMs"]
[Sat Feb 28 23:11:57.390723 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:23394] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaMFvRCf4HvhVePw3LbLzAAAAA4"]
[Sat Feb 28 23:11:57.802786 2026] [:error] [pid 39183:tid 39215] [client 20.220.144.87:23544] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaMFvRCf4HvhVePw3LbLzQAAABc"]
[Sat Feb 28 23:11:58.219039 2026] [:error] [pid 39183:tid 39200] [client 20.220.144.87:23479] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaMFvhCf4HvhVePw3LbL0wAAAAg"]
[Sat Feb 28 23:11:58.630993 2026] [:error] [pid 39183:tid 39197] [client 20.220.144.87:23437] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaMFvhCf4HvhVePw3LbL1gAAAAU"]
[Sat Feb 28 23:11:59.041314 2026] [:error] [pid 52460:tid 52466] [client 20.220.144.87:23380] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaMFv7LWOogAgHGh62Ta2QAAAYM"]
[Sat Feb 28 23:11:59.455751 2026] [:error] [pid 52460:tid 52465] [client 20.220.144.87:23471] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaMFv7LWOogAgHGh62Ta3AAAAYI"]
[Sat Feb 28 23:11:59.870062 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:23376] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaMFv7LWOogAgHGh62Ta4AAAAYU"]
[Sat Feb 28 23:12:00.282366 2026] [:error] [pid 49763:tid 49783] [client 20.220.144.87:23464] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaMFwLTHSOG_yf2PpqH8hgAAAdE"]
[Sat Feb 28 23:12:00.694571 2026] [:error] [pid 39184:tid 39230] [client 20.220.144.87:23416] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaMFwFtZF9Zd_U7easD5SgAAAEs"]
[Sat Feb 28 23:12:01.105903 2026] [:error] [pid 39292:tid 39309] [client 20.220.144.87:23411] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaMFwaIAO5fN7BxyqcGkDwAAAM8"]
[Sat Feb 28 23:12:01.539841 2026] [:error] [pid 11791:tid 11808] [client 20.220.144.87:23478] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaMFwWuX5e1Q32gqxH3kHAAAAQ8"]
[Sat Feb 28 23:12:01.948884 2026] [:error] [pid 11791:tid 11796] [client 20.220.144.87:23390] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaMFwWuX5e1Q32gqxH3kHQAAAQM"]
[Sat Feb 28 23:12:02.365421 2026] [:error] [pid 39292:tid 39308] [client 20.220.144.87:23538] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaMFwqIAO5fN7BxyqcGkEAAAAM4"]
[Sat Feb 28 23:12:02.781111 2026] [:error] [pid 52460:tid 52465] [client 20.220.144.87:23537] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaMFwrLWOogAgHGh62Ta7gAAAYI"]
[Sat Feb 28 23:12:03.200249 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:23422] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaMFwxCf4HvhVePw3LbL3QAAAA4"]
[Sat Feb 28 23:12:03.614559 2026] [:error] [pid 39183:tid 39200] [client 20.220.144.87:23391] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaMFwxCf4HvhVePw3LbL4QAAAAg"]
[Sat Feb 28 23:12:04.024817 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:23506] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaMFxBCf4HvhVePw3LbL5AAAAAQ"]
[Sat Feb 28 23:12:04.438648 2026] [:error] [pid 39184:tid 39240] [client 20.220.144.87:23438] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaMFxFtZF9Zd_U7easD5UQAAAFU"]
[Sat Feb 28 23:12:04.858697 2026] [:error] [pid 39185:tid 39256] [client 20.220.144.87:23369] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaMFxBVE-FfM89u7BQa6EAAAAIo"]
[Sat Feb 28 23:12:05.271591 2026] [:error] [pid 39185:tid 39249] [client 20.220.144.87:23468] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaMFxRVE-FfM89u7BQa6EgAAAIM"]
[Sat Feb 28 23:12:05.684503 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:23487] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaMFxbLWOogAgHGh62Ta9gAAAYE"]
[Sat Feb 28 23:12:06.094080 2026] [:error] [pid 39183:tid 39201] [client 20.220.144.87:23527] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaMFxhCf4HvhVePw3LbL6wAAAAk"]
[Sat Feb 28 23:12:06.503028 2026] [:error] [pid 39184:tid 39222] [client 20.220.144.87:23425] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFxltZF9Zd_U7easD5UgAAAEM"]
[Sat Feb 28 23:12:06.912196 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:23401] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFxhCf4HvhVePw3LbL8wAAAAQ"]
[Sat Feb 28 23:12:07.321142 2026] [:error] [pid 52460:tid 52469] [client 20.220.144.87:23410] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFx7LWOogAgHGh62TbBAAAAYY"]
[Sat Feb 28 23:12:07.734031 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:23303] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaMFx7LWOogAgHGh62TbBwAAAZY"]
[Sat Feb 28 23:12:08.144820 2026] [:error] [pid 39183:tid 39204] [client 20.220.144.87:23513] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaMFyBCf4HvhVePw3LbL_AAAAAw"]
[Sat Feb 28 23:12:08.552924 2026] [:error] [pid 52460:tid 52487] [client 20.220.144.87:23404] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaMFyLLWOogAgHGh62TbEwAAAZg"]
[Sat Feb 28 23:12:08.962091 2026] [:error] [pid 22194:tid 22218] [client 20.220.144.87:23500] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaMFyH6mbajs3bzQGyu7vgAAAVY"]
[Sat Feb 28 23:12:09.373834 2026] [:error] [pid 39184:tid 39233] [client 20.220.144.87:23312] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaMFyVtZF9Zd_U7easD5WgAAAE4"]
[Sat Feb 28 23:12:09.803035 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:23367] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaMFybLWOogAgHGh62TbHQAAAYU"]
[Sat Feb 28 23:12:10.222240 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:23408] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaMFyrLWOogAgHGh62TbIgAAAYs"]
[Sat Feb 28 23:12:10.634520 2026] [:error] [pid 39184:tid 39238] [client 20.220.144.87:23472] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaMFyltZF9Zd_U7easD5YQAAAFM"]
[Sat Feb 28 23:12:11.048103 2026] [:error] [pid 39184:tid 39227] [client 20.220.144.87:23433] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaMFy1tZF9Zd_U7easD5ZgAAAEg"]
[Sat Feb 28 23:12:11.460742 2026] [:error] [pid 52460:tid 52480] [client 20.220.144.87:23379] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaMFy7LWOogAgHGh62TbJgAAAZE"]
[Sat Feb 28 23:12:11.869447 2026] [:error] [pid 39185:tid 39269] [client 20.220.144.87:23412] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaMFyxVE-FfM89u7BQa6FAAAAJc"]
[Sat Feb 28 23:12:12.282081 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:23402] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaMFzBCf4HvhVePw3LbMGwAAAA0"]
[Sat Feb 28 23:12:12.694568 2026] [:error] [pid 39183:tid 39210] [client 20.220.144.87:23406] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaMFzBCf4HvhVePw3LbMIwAAABI"]
[Sat Feb 28 23:12:13.114303 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Sat Feb 28 23:12:13.328378 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Feb 28 23:12:13.542774 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Feb 28 23:12:13.757481 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sat Feb 28 23:12:13.971179 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sat Feb 28 23:12:14.185478 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Sat Feb 28 23:12:14.617212 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sat Feb 28 23:12:14.832995 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Sat Feb 28 23:12:15.048371 2026] [:error] [pid 39183:tid 39202] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Sat Feb 28 23:12:15.263344 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:23460] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sat Feb 28 23:12:16.696325 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:23460] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMF0BCf4HvhVePw3LbMZQAAAAE"]
[Sat Feb 28 23:12:17.113847 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:23382] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMF0RCf4HvhVePw3LbMbQAAAA4"]
[Sat Feb 28 23:12:17.533578 2026] [:error] [pid 39183:tid 39194] [client 20.220.144.87:23360] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMF0RCf4HvhVePw3LbMdgAAAAI"]
[Sat Feb 28 23:12:17.945602 2026] [:error] [pid 39183:tid 39206] [client 20.220.144.87:23384] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMF0RCf4HvhVePw3LbMewAAAA4"]
[Sat Feb 28 23:12:18.353982 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:23477] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMF0hCf4HvhVePw3LbMggAAAAM"]
[Sat Feb 28 23:12:18.761840 2026] [:error] [pid 52460:tid 52477] [client 20.220.144.87:23447] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMF0rLWOogAgHGh62TbRQAAAY4"]
[Sat Feb 28 23:12:19.174252 2026] [:error] [pid 39184:tid 39223] [client 20.220.144.87:23409] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMF01tZF9Zd_U7easD5dwAAAEQ"]
[Sat Feb 28 23:12:19.588496 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:23383] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMF07LWOogAgHGh62TbSAAAAYE"]
[Sat Feb 28 23:12:19.997443 2026] [:error] [pid 39183:tid 39211] [client 20.220.144.87:23357] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaMF0xCf4HvhVePw3LbMkgAAABM"]
[Sat Feb 28 23:12:20.417994 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:23377] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaMF1LTHSOG_yf2PpqH8lwAAAdY"]
[Sat Feb 28 23:12:20.828030 2026] [:error] [pid 52460:tid 52487] [client 20.220.144.87:23399] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaMF1LLWOogAgHGh62TbTwAAAZg"]
[Sat Feb 28 23:12:21.237834 2026] [:error] [pid 49763:tid 49781] [client 20.220.144.87:23297] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaMF1bTHSOG_yf2PpqH8mwAAAc8"]
[Sat Feb 28 23:12:21.647460 2026] [:error] [pid 39183:tid 39197] [client 20.220.144.87:23366] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaMF1RCf4HvhVePw3LbMmQAAAAU"]
[Sat Feb 28 23:12:22.056006 2026] [:error] [pid 39183:tid 39196] [client 20.220.144.87:23296] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaMF1hCf4HvhVePw3LbMmgAAAAQ"]
[Sat Feb 28 23:12:22.465919 2026] [:error] [pid 49763:tid 49775] [client 20.220.144.87:23388] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMF1rTHSOG_yf2PpqH8oQAAAck"]
[Sat Feb 28 23:12:22.875561 2026] [:error] [pid 49763:tid 49789] [client 20.220.144.87:23534] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMF1rTHSOG_yf2PpqH8pAAAAdc"]
[Sat Feb 28 23:12:23.285468 2026] [:error] [pid 49763:tid 49790] [client 20.220.144.87:23381] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMF17THSOG_yf2PpqH8pgAAAdg"]
[Sat Feb 28 23:12:23.696926 2026] [:error] [pid 39184:tid 39241] [client 20.220.144.87:23327] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaMF11tZF9Zd_U7easD5jQAAAFY"]
[Sat Feb 28 23:12:24.108630 2026] [:error] [pid 39183:tid 39192] [client 20.220.144.87:23348] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaMF2BCf4HvhVePw3LbMpQAAAAA"]
[Sat Feb 28 23:12:24.526822 2026] [:error] [pid 39292:tid 39311] [client 20.220.144.87:23405] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaMF2KIAO5fN7BxyqcGkJAAAANE"]
[Sat Feb 28 23:12:24.939672 2026] [:error] [pid 49763:tid 49784] [client 20.220.144.87:23313] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaMF2LTHSOG_yf2PpqH8sQAAAdI"]
[Sat Feb 28 23:12:25.355945 2026] [:error] [pid 49763:tid 49771] [client 20.220.144.87:23342] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMF2bTHSOG_yf2PpqH8swAAAcU"]
[Sat Feb 28 23:12:25.769347 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:23448] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMF2bTHSOG_yf2PpqH8uQAAAdY"]
[Sat Feb 28 23:12:26.182196 2026] [:error] [pid 49763:tid 49785] [client 20.220.144.87:23393] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMF2rTHSOG_yf2PpqH8vQAAAdM"]
[Sat Feb 28 23:12:26.593293 2026] [:error] [pid 39183:tid 39207] [client 20.220.144.87:23417] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaMF2hCf4HvhVePw3LbMtQAAAA8"]
[Sat Feb 28 23:12:27.015489 2026] [:error] [pid 52460:tid 52468] [client 20.220.144.87:23331] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaMF27LWOogAgHGh62TbaQAAAYU"]
[Sat Feb 28 23:12:27.430449 2026] [:error] [pid 39183:tid 39216] [client 20.220.144.87:23466] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaMF2xCf4HvhVePw3LbMugAAABg"]
[Sat Feb 28 23:12:27.843725 2026] [:error] [pid 39183:tid 39205] [client 20.220.144.87:23485] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaMF2xCf4HvhVePw3LbMvQAAAA0"]
[Sat Feb 28 23:12:28.256297 2026] [:error] [pid 52460:tid 52485] [client 20.220.144.87:23413] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaMF3LLWOogAgHGh62TbcgAAAZY"]
[Sat Feb 28 23:12:28.665407 2026] [:error] [pid 52460:tid 52479] [client 20.220.144.87:23306] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaMF3LLWOogAgHGh62TbdQAAAZA"]
[Sat Feb 28 23:12:29.085608 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:23326] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaMF3RCf4HvhVePw3LbMxQAAAAE"]
[Sat Feb 28 23:12:29.500891 2026] [:error] [pid 49763:tid 49782] [client 20.220.144.87:23414] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaMF3bTHSOG_yf2PpqH8wwAAAdA"]
[Sat Feb 28 23:12:29.914980 2026] [:error] [pid 39183:tid 39201] [client 20.220.144.87:23332] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaMF3RCf4HvhVePw3LbMyAAAAAk"]
[Sat Feb 28 23:12:30.327679 2026] [:error] [pid 39183:tid 39216] [client 20.220.144.87:23338] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaMF3hCf4HvhVePw3LbMzAAAABg"]
[Sat Feb 28 23:12:30.738455 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:23333] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaMF3rLWOogAgHGh62TbhAAAAYc"]
[Sat Feb 28 23:12:31.150636 2026] [:error] [pid 39183:tid 39195] [client 20.220.144.87:23298] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaMF3xCf4HvhVePw3LbM0wAAAAM"]
[Sat Feb 28 23:12:31.567959 2026] [:error] [pid 39183:tid 39216] [client 20.220.144.87:23484] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaMF3xCf4HvhVePw3LbM2gAAABg"]
[Sat Feb 28 23:12:31.982297 2026] [:error] [pid 39183:tid 39193] [client 20.220.144.87:23341] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaMF3xCf4HvhVePw3LbM4QAAAAE"]
[Sat Feb 28 23:12:32.390825 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:23239] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaMF4LLWOogAgHGh62TbiQAAAYo"]
[Sat Feb 28 23:12:32.802985 2026] [:error] [pid 49763:tid 49780] [client 20.220.144.87:23337] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaMF4LTHSOG_yf2PpqH8xwAAAc4"]
[Sat Feb 28 23:12:33.214658 2026] [:error] [pid 49763:tid 49784] [client 20.220.144.87:23421] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaMF4bTHSOG_yf2PpqH8ygAAAdI"]
[Sat Feb 28 23:12:33.624625 2026] [:error] [pid 52460:tid 52480] [client 20.220.144.87:23344] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaMF4bLWOogAgHGh62TbiwAAAZE"]
[Sat Feb 28 23:12:34.035176 2026] [:error] [pid 11791:tid 11817] [client 20.220.144.87:23415] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaMF4muX5e1Q32gqxH3kMwAAARg"]
[Sat Feb 28 23:12:34.443165 2026] [:error] [pid 22194:tid 22204] [client 20.220.144.87:23310] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaMF4n6mbajs3bzQGyu70gAAAUg"]
[Sat Feb 28 23:12:34.850617 2026] [:error] [pid 49763:tid 49772] [client 20.220.144.87:23372] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaMF4rTHSOG_yf2PpqH8zgAAAcY"]
[Sat Feb 28 23:12:35.267544 2026] [:error] [pid 49763:tid 49776] [client 20.220.144.87:23480] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaMF47THSOG_yf2PpqH80AAAAco"]
[Sat Feb 28 23:12:35.684139 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:23395] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMF47LWOogAgHGh62TbmAAAAYc"]
[Sat Feb 28 23:12:36.096847 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:23418] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMF5LLWOogAgHGh62TbmwAAAYo"]
[Sat Feb 28 23:12:36.510145 2026] [:error] [pid 39183:tid 39198] [client 20.220.144.87:23259] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMF5BCf4HvhVePw3LbM7gAAAAY"]
[Sat Feb 28 23:12:36.923515 2026] [:error] [pid 52460:tid 52487] [client 20.220.144.87:23486] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMF5LLWOogAgHGh62TboAAAAZg"]
[Sat Feb 28 23:12:37.342693 2026] [:error] [pid 49763:tid 49766] [client 20.220.144.87:23358] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaMF5bTHSOG_yf2PpqH81QAAAcA"]
[Sat Feb 28 23:12:37.761300 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:23302] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaMF5bLWOogAgHGh62TbpgAAAYs"]
[Sat Feb 28 23:12:38.190923 2026] [:error] [pid 22194:tid 22216] [client 20.220.144.87:23385] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaMF5n6mbajs3bzQGyu71QAAAVQ"]
[Sat Feb 28 23:12:38.601298 2026] [:error] [pid 49763:tid 49787] [client 20.220.144.87:23501] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaMF5rTHSOG_yf2PpqH82gAAAdU"]
[Sat Feb 28 23:12:39.017111 2026] [:error] [pid 49763:tid 49777] [client 20.220.144.87:23249] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaMF57THSOG_yf2PpqH82wAAAcs"]
[Sat Feb 28 23:12:39.435664 2026] [:error] [pid 39292:tid 39308] [client 20.220.144.87:23398] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaMF56IAO5fN7BxyqcGkNwAAAM4"]
[Sat Feb 28 23:12:39.849683 2026] [:error] [pid 39185:tid 39259] [client 20.220.144.87:23397] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaMF5xVE-FfM89u7BQa6NAAAAI0"]
[Sat Feb 28 23:12:40.267732 2026] [:error] [pid 39292:tid 39299] [client 20.220.144.87:23330] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaMF6KIAO5fN7BxyqcGkOwAAAMU"]
[Sat Feb 28 23:12:40.682841 2026] [:error] [pid 39184:tid 39231] [client 20.220.144.87:23352] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaMF6FtZF9Zd_U7easD5ogAAAEw"]
[Sat Feb 28 23:12:41.102014 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:23351] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaMF6bLWOogAgHGh62TbtgAAAYE"]
[Sat Feb 28 23:12:41.514901 2026] [:error] [pid 39185:tid 39270] [client 20.220.144.87:23240] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaMF6RVE-FfM89u7BQa6PgAAAJg"]
[Sat Feb 28 23:12:41.923494 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:23354] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaMF6bLWOogAgHGh62TbuAAAAYs"]
[Sat Feb 28 23:12:42.349740 2026] [:error] [pid 39183:tid 39203] [client 20.220.144.87:23353] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMF6hCf4HvhVePw3LbM_gAAAAs"]
[Sat Feb 28 23:12:42.764563 2026] [:error] [pid 39183:tid 39212] [client 20.220.144.87:23356] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMF6hCf4HvhVePw3LbNAQAAABQ"]
[Sat Feb 28 23:12:43.173227 2026] [:error] [pid 49763:tid 49786] [client 20.220.144.87:23317] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMF67THSOG_yf2PpqH85AAAAdQ"]
[Sat Feb 28 23:12:43.593884 2026] [:error] [pid 39183:tid 39208] [client 20.220.144.87:23288] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaMF6xCf4HvhVePw3LbNBgAAABA"]
[Sat Feb 28 23:12:44.014531 2026] [:error] [pid 39185:tid 39254] [client 20.220.144.87:23175] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aaMF7BVE-FfM89u7BQa6SwAAAIg"]
[Sat Feb 28 23:12:44.432729 2026] [:error] [pid 39184:tid 39226] [client 20.220.144.87:23255] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaMF7FtZF9Zd_U7easD5qgAAAEc"]
[Sat Feb 28 23:12:44.840496 2026] [:error] [pid 39183:tid 39216] [client 20.220.144.87:23396] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaMF7BCf4HvhVePw3LbNCgAAABg"]
[Sat Feb 28 23:12:45.252922 2026] [:error] [pid 39183:tid 39194] [client 20.220.144.87:23229] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaMF7RCf4HvhVePw3LbNDQAAAAI"]
[Sat Feb 28 23:12:45.666300 2026] [:error] [pid 39183:tid 39209] [client 20.220.144.87:23304] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaMF7RCf4HvhVePw3LbNFQAAABE"]
[Sat Feb 28 23:12:46.075257 2026] [:error] [pid 49763:tid 49774] [client 20.220.144.87:23343] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaMF7rTHSOG_yf2PpqH87gAAAcg"]
[Sat Feb 28 23:12:46.485169 2026] [:error] [pid 39183:tid 39208] [client 20.220.144.87:23261] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaMF7hCf4HvhVePw3LbNHAAAABA"]
[Sat Feb 28 23:12:46.894973 2026] [:error] [pid 49763:tid 49767] [client 20.220.144.87:23549] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaMF7rTHSOG_yf2PpqH88wAAAcE"]
[Sat Feb 28 23:12:47.308432 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:23114] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaMF77THSOG_yf2PpqH89wAAAdY"]
[Sat Feb 28 23:12:47.725974 2026] [:error] [pid 52460:tid 52472] [client 20.220.144.87:23349] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaMF77LWOogAgHGh62TbxQAAAYk"]
[Sat Feb 28 23:12:48.142267 2026] [:error] [pid 39184:tid 39229] [client 20.220.144.87:23300] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaMF8FtZF9Zd_U7easD5rwAAAEo"]
[Sat Feb 28 23:12:48.560787 2026] [:error] [pid 49763:tid 49774] [client 20.220.144.87:23419] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaMF8LTHSOG_yf2PpqH9AQAAAcg"]
[Sat Feb 28 23:12:48.975030 2026] [:error] [pid 49763:tid 49776] [client 20.220.144.87:23320] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaMF8LTHSOG_yf2PpqH9BQAAAco"]
[Sat Feb 28 23:12:49.384092 2026] [:error] [pid 49763:tid 49788] [client 20.220.144.87:23283] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaMF8bTHSOG_yf2PpqH9CQAAAdY"]
[Sat Feb 28 23:12:49.792846 2026] [:error] [pid 39185:tid 39248] [client 20.220.144.87:23439] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaMF8RVE-FfM89u7BQa6VAAAAII"]
[Sat Feb 28 23:12:50.199925 2026] [:error] [pid 22194:tid 22214] [client 20.220.144.87:23314] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaMF8n6mbajs3bzQGyu74AAAAVI"]
[Sat Feb 28 23:12:50.610309 2026] [:error] [pid 22194:tid 22198] [client 20.220.144.87:23323] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaMF8n6mbajs3bzQGyu74QAAAUI"]
[Sat Feb 28 23:12:51.020107 2026] [:error] [pid 39185:tid 39265] [client 20.220.144.87:23251] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaMF8xVE-FfM89u7BQa6WQAAAJM"]
[Sat Feb 28 23:12:51.427736 2026] [:error] [pid 39185:tid 39266] [client 20.220.144.87:23407] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaMF8xVE-FfM89u7BQa6WwAAAJQ"]
[Sat Feb 28 23:12:51.844527 2026] [:error] [pid 11791:tid 11794] [client 20.220.144.87:23355] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaMF82uX5e1Q32gqxH3kPgAAAQE"]
[Sat Feb 28 23:12:52.257426 2026] [:error] [pid 39185:tid 39268] [client 20.220.144.87:23257] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaMF9BVE-FfM89u7BQa6XAAAAJY"]
[Sat Feb 28 23:12:52.670957 2026] [:error] [pid 52460:tid 52481] [client 20.220.144.87:23318] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaMF9LLWOogAgHGh62Tb0AAAAZI"]
[Sat Feb 28 23:12:53.085839 2026] [:error] [pid 39183:tid 39210] [client 20.220.144.87:23324] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaMF9RCf4HvhVePw3LbNNwAAABI"]
[Sat Feb 28 23:12:53.501511 2026] [:error] [pid 39183:tid 39208] [client 20.220.144.87:23273] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaMF9RCf4HvhVePw3LbNPQAAABA"]
[Sat Feb 28 23:12:53.909114 2026] [:error] [pid 49763:tid 49782] [client 20.220.144.87:23334] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaMF9bTHSOG_yf2PpqH9FgAAAdA"]
[Sat Feb 28 23:12:54.318023 2026] [:error] [pid 49763:tid 49773] [client 20.220.144.87:23476] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaMF9rTHSOG_yf2PpqH9GQAAAcc"]
[Sat Feb 28 23:12:54.729281 2026] [:error] [pid 22194:tid 22209] [client 20.220.144.87:23253] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaMF9n6mbajs3bzQGyu76gAAAU0"]
[Sat Feb 28 23:12:55.144059 2026] [:error] [pid 39185:tid 39250] [client 20.220.144.87:23272] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaMF9xVE-FfM89u7BQa6YQAAAIQ"]
[Sat Feb 28 23:38:20.108525 2026] [:error] [pid 39185:tid 39268] [client 20.220.150.209:65254] [client 20.220.150.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaML7BVE-FfM89u7BQa_hQAAAJY"]
[Sat Feb 28 23:38:20.752544 2026] [:error] [pid 39183:tid 39200] [client 20.220.150.209:65258] [client 20.220.150.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaML7BCf4HvhVePw3Lb0xgAAAAg"]
[Sat Feb 28 23:38:21.247220 2026] [:error] [pid 39184:tid 39224] [client 20.220.150.209:65236] [client 20.220.150.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaML7VtZF9Zd_U7easAHdgAAAEU"]
[Sat Feb 28 23:38:21.792707 2026] [:error] [pid 49763:tid 49778] [client 20.220.150.209:65168] [client 20.220.150.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaML7bTHSOG_yf2PpqEYhgAAAcw"]
[Sun Mar 01 00:39:22.555523 2026] [:error] [pid 31190:tid 31211] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sun Mar 01 00:39:22.765103 2026] [:error] [pid 31190:tid 31207] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Sun Mar 01 00:39:23.472711 2026] [:error] [pid 31190:tid 31228] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sun Mar 01 00:39:23.689202 2026] [:error] [pid 31190:tid 31221] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sun Mar 01 00:39:23.899032 2026] [:error] [pid 31190:tid 31229] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Sun Mar 01 00:39:24.110007 2026] [:error] [pid 31190:tid 31213] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 01 00:39:24.319333 2026] [:error] [pid 31190:tid 31215] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Mar 01 00:39:24.529954 2026] [:error] [pid 31190:tid 31219] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 01 00:39:24.739657 2026] [:error] [pid 31190:tid 31214] [client 13.71.191.191:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sun Mar 01 00:39:24.960194 2026] [:error] [pid 31190:tid 31210] [client 13.71.191.191:38867] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaMaPBfvwGOholYpM1FOHwAAAMQ"]
[Sun Mar 01 00:39:26.084712 2026] [:error] [pid 31190:tid 31224] [client 13.71.191.191:38873] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaMaPhfvwGOholYpM1FOJgAAANI"]
[Sun Mar 01 00:39:27.207927 2026] [:error] [pid 53600:tid 53620] [client 13.71.191.191:38849] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaMaPw2UMRAYWtDB23S4EQAAARE"]
[Sun Mar 01 00:39:28.049288 2026] [:error] [pid 53600:tid 53611] [client 13.71.191.191:38784] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaMaQA2UMRAYWtDB23S4HQAAAQg"]
[Sun Mar 01 00:39:28.558081 2026] [:error] [pid 30795:tid 30826] [client 13.71.191.191:38877] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aaMaQGuI44IL94Zgti-vgwAAABI"]
[Sun Mar 01 00:39:29.675636 2026] [:error] [pid 30798:tid 30901] [client 13.71.191.191:38908] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aaMaQcBkD73gO8wTonZAVQAAAII"]
[Sun Mar 01 00:39:30.916530 2026] [:error] [pid 53600:tid 53604] [client 13.71.191.191:38872] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aaMaQg2UMRAYWtDB23S4OQAAAQE"]
[Sun Mar 01 00:39:32.378626 2026] [:error] [pid 31190:tid 31215] [client 13.71.191.191:38875] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aaMaRBfvwGOholYpM1FOOwAAAMk"]
[Sun Mar 01 00:39:33.369827 2026] [:error] [pid 30798:tid 30907] [client 13.71.191.191:38800] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMaRcBkD73gO8wTonZAZAAAAIg"]
[Sun Mar 01 00:39:33.926822 2026] [:error] [pid 31190:tid 31223] [client 13.71.191.191:38891] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMaRRfvwGOholYpM1FORgAAANE"]
[Sun Mar 01 00:39:34.886428 2026] [:error] [pid 31190:tid 31208] [client 13.71.191.191:38903] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMaRhfvwGOholYpM1FOTQAAAMI"]
[Sun Mar 01 00:39:35.733075 2026] [:error] [pid 53600:tid 53618] [client 13.71.191.191:38797] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aaMaRw2UMRAYWtDB23S4ZwAAAQ8"]
[Sun Mar 01 00:39:36.765343 2026] [:error] [pid 53600:tid 53603] [client 13.71.191.191:38861] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaMaSA2UMRAYWtDB23S4cgAAAQA"]
[Sun Mar 01 00:39:37.522747 2026] [:error] [pid 53600:tid 53603] [client 13.71.191.191:38795] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaMaSQ2UMRAYWtDB23S4fAAAAQA"]
[Sun Mar 01 00:39:38.211146 2026] [:error] [pid 31190:tid 31211] [client 13.71.191.191:38894] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaMaShfvwGOholYpM1FOZgAAAMU"]
[Sun Mar 01 00:39:39.518120 2026] [:error] [pid 31190:tid 31230] [client 13.71.191.191:38878] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aaMaSxfvwGOholYpM1FObgAAANg"]
[Sun Mar 01 00:39:40.696990 2026] [:error] [pid 30797:tid 30888] [client 13.71.191.191:38854] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aaMaTPQmcmSQL-3rvLD8wQAAAFE"]
[Sun Mar 01 00:39:41.448327 2026] [:error] [pid 53600:tid 53621] [client 13.71.191.191:38869] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aaMaTQ2UMRAYWtDB23S4mQAAARI"]
[Sun Mar 01 00:39:42.416916 2026] [:error] [pid 31190:tid 31216] [client 13.71.191.191:38896] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aaMaThfvwGOholYpM1FOgwAAAMo"]
[Sun Mar 01 00:39:43.751437 2026] [:error] [pid 31190:tid 31221] [client 13.71.191.191:38902] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aaMaTxfvwGOholYpM1FOkwAAAM8"]
[Sun Mar 01 00:39:44.566846 2026] [:error] [pid 31190:tid 31219] [client 13.71.191.191:38803] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMaUBfvwGOholYpM1FOnAAAAM0"]
[Sun Mar 01 00:39:45.347135 2026] [:error] [pid 53600:tid 53620] [client 13.71.191.191:38899] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMaUQ2UMRAYWtDB23S4rgAAARE"]
[Sun Mar 01 00:39:46.342049 2026] [:error] [pid 30795:tid 30817] [client 13.71.191.191:38906] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMaUmuI44IL94Zgti-vyQAAAAk"]
[Sun Mar 01 00:39:47.641279 2026] [:error] [pid 53600:tid 53612] [client 13.71.191.191:38856] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaMaUw2UMRAYWtDB23S4xAAAAQk"]
[Sun Mar 01 00:39:48.382047 2026] [:error] [pid 53600:tid 53627] [client 13.71.191.191:38888] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMaVA2UMRAYWtDB23S4zgAAARg"]
[Sun Mar 01 00:39:49.052143 2026] [:error] [pid 30795:tid 30816] [client 13.71.191.191:38885] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMaVWuI44IL94Zgti-v0QAAAAg"]
[Sun Mar 01 00:39:49.699958 2026] [:error] [pid 31190:tid 31229] [client 13.71.191.191:38868] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMaVRfvwGOholYpM1FOxAAAANc"]
[Sun Mar 01 00:39:50.234922 2026] [:error] [pid 53600:tid 53604] [client 13.71.191.191:38900] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaMaVg2UMRAYWtDB23S44AAAAQE"]
[Sun Mar 01 00:39:51.315605 2026] [:error] [pid 53600:tid 53624] [client 13.71.191.191:38858] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "aaMaVw2UMRAYWtDB23S45gAAARU"]
[Sun Mar 01 00:39:52.644892 2026] [:error] [pid 53600:tid 53618] [client 13.71.191.191:38884] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "aaMaWA2UMRAYWtDB23S47AAAAQ8"]
[Sun Mar 01 00:39:54.050061 2026] [:error] [pid 30798:tid 30910] [client 13.71.191.191:38828] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "aaMaWsBkD73gO8wTonZAfAAAAIs"]
[Sun Mar 01 00:39:54.654706 2026] [:error] [pid 31190:tid 31222] [client 13.71.191.191:38801] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "aaMaWhfvwGOholYpM1FPAQAAANA"]
[Sun Mar 01 00:39:55.575894 2026] [:error] [pid 53600:tid 53607] [client 13.71.191.191:38804] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aaMaWw2UMRAYWtDB23S5EQAAAQQ"]
[Sun Mar 01 00:39:56.694470 2026] [:error] [pid 53600:tid 53616] [client 13.71.191.191:38786] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aaMaXA2UMRAYWtDB23S5KAAAAQ0"]
[Sun Mar 01 00:39:58.485750 2026] [:error] [pid 53600:tid 53611] [client 13.71.191.191:38897] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aaMaXg2UMRAYWtDB23S5RAAAAQg"]
[Sun Mar 01 00:39:59.300846 2026] [:error] [pid 53600:tid 53606] [client 13.71.191.191:38890] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aaMaXw2UMRAYWtDB23S5TwAAAQM"]
[Sun Mar 01 00:40:00.673614 2026] [:error] [pid 53600:tid 53606] [client 13.71.191.191:38887] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaMaYA2UMRAYWtDB23S5XQAAAQM"]
[Sun Mar 01 00:40:01.581170 2026] [:error] [pid 53600:tid 53621] [client 13.71.191.191:38734] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaMaYQ2UMRAYWtDB23S5aAAAARI"]
[Sun Mar 01 00:40:02.394361 2026] [:error] [pid 31190:tid 31228] [client 13.71.191.191:38730] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaMaYhfvwGOholYpM1FPOgAAANY"]
[Sun Mar 01 00:40:03.490963 2026] [:error] [pid 31190:tid 31224] [client 13.71.191.191:38898] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaMaYxfvwGOholYpM1FPPgAAANI"]
[Sun Mar 01 00:40:04.273701 2026] [:error] [pid 53600:tid 53624] [client 13.71.191.191:38879] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMaZA2UMRAYWtDB23S5gAAAARU"]
[Sun Mar 01 00:40:05.459252 2026] [:error] [pid 53600:tid 53612] [client 13.71.191.191:38815] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMaZQ2UMRAYWtDB23S5hgAAAQk"]
[Sun Mar 01 00:40:06.367005 2026] [:error] [pid 31190:tid 31208] [client 13.71.191.191:38789] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMaZhfvwGOholYpM1FPXQAAAMI"]
[Sun Mar 01 00:40:07.035983 2026] [:error] [pid 31190:tid 31225] [client 13.71.191.191:38836] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaMaZxfvwGOholYpM1FPYwAAANM"]
[Sun Mar 01 00:40:07.624130 2026] [:error] [pid 30798:tid 30904] [client 13.71.191.191:38895] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-f.php"] [unique_id "aaMaZ8BkD73gO8wTonZAmQAAAIU"]
[Sun Mar 01 00:40:08.518486 2026] [:error] [pid 31190:tid 31213] [client 13.71.191.191:38814] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-f.php"] [unique_id "aaMaaBfvwGOholYpM1FPegAAAMc"]
[Sun Mar 01 00:40:09.116310 2026] [:error] [pid 31190:tid 31215] [client 13.71.191.191:38838] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-f.php"] [unique_id "aaMaaRfvwGOholYpM1FPggAAAMk"]
[Sun Mar 01 00:40:09.811530 2026] [:error] [pid 53600:tid 53613] [client 13.71.191.191:38791] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-f.php"] [unique_id "aaMaaQ2UMRAYWtDB23S5qAAAAQo"]
[Sun Mar 01 00:40:10.688689 2026] [:error] [pid 30795:tid 30823] [client 13.71.191.191:38855] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaMaamuI44IL94Zgti-wEwAAAA8"]
[Sun Mar 01 00:40:11.865653 2026] [:error] [pid 53600:tid 53618] [client 13.71.191.191:38907] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaMaaw2UMRAYWtDB23S5twAAAQ8"]
[Sun Mar 01 00:40:13.001194 2026] [:error] [pid 30798:tid 30907] [client 13.71.191.191:38824] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaMabcBkD73gO8wTonZAogAAAIg"]
[Sun Mar 01 00:40:14.654330 2026] [:error] [pid 30797:tid 30880] [client 13.71.191.191:38852] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "aaMabvQmcmSQL-3rvLD81wAAAEk"]
[Sun Mar 01 00:40:15.176676 2026] [:error] [pid 30798:tid 30906] [client 13.71.191.191:38870] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aaMab8BkD73gO8wTonZAowAAAIc"]
[Sun Mar 01 00:40:16.467071 2026] [:error] [pid 31190:tid 31228] [client 13.71.191.191:38883] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aaMacBfvwGOholYpM1FPqwAAANY"]
[Sun Mar 01 00:40:18.002775 2026] [:error] [pid 30795:tid 30828] [client 13.71.191.191:38813] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aaMacmuI44IL94Zgti-wLQAAABQ"]
[Sun Mar 01 00:40:18.709724 2026] [:error] [pid 31190:tid 31212] [client 13.71.191.191:38886] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aaMachfvwGOholYpM1FPuQAAAMY"]
[Sun Mar 01 00:40:19.485580 2026] [:error] [pid 30798:tid 30902] [client 13.71.191.191:38889] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMac8BkD73gO8wTonZArgAAAIM"]
[Sun Mar 01 00:40:20.808128 2026] [:error] [pid 53600:tid 53612] [client 13.71.191.191:38864] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMadA2UMRAYWtDB23S59AAAAQk"]
[Sun Mar 01 00:40:21.445916 2026] [:error] [pid 53600:tid 53619] [client 13.71.191.191:38871] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMadQ2UMRAYWtDB23S5-gAAARA"]
[Sun Mar 01 00:40:22.547751 2026] [:error] [pid 30797:tid 30893] [client 13.71.191.191:38802] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaMadvQmcmSQL-3rvLD83AAAAFY"]
[Sun Mar 01 00:40:23.597114 2026] [:error] [pid 30798:tid 30903] [client 13.71.191.191:38910] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaMad8BkD73gO8wTonZAuAAAAIQ"]
[Sun Mar 01 00:40:24.220443 2026] [:error] [pid 30797:tid 30872] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/0bb45ctt.php
[Sun Mar 01 00:40:24.430015 2026] [:error] [pid 30797:tid 30891] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Mar 01 00:40:24.645920 2026] [:error] [pid 30797:tid 30876] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun Mar 01 00:40:24.853241 2026] [:error] [pid 30797:tid 30873] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 01 00:40:25.066294 2026] [:error] [pid 30797:tid 30892] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun Mar 01 00:40:25.275469 2026] [:error] [pid 30797:tid 30874] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sun Mar 01 00:40:25.485478 2026] [:error] [pid 30797:tid 30887] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/62ix02bk.php
[Sun Mar 01 00:40:25.697224 2026] [:error] [pid 30797:tid 30886] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/wdf.php
[Sun Mar 01 00:40:25.907976 2026] [:error] [pid 30797:tid 30875] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/f6ijmjpa.php
[Sun Mar 01 00:40:26.124913 2026] [:error] [pid 30797:tid 30895] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_jVML8V37.php
[Sun Mar 01 00:40:26.338041 2026] [:error] [pid 30797:tid 30894] [client 13.71.191.191:38848] File does not exist: /usr/local/apache/htdocs/suspended-page/4wj632p1.php
[Sun Mar 01 00:40:26.543783 2026] [:error] [pid 30797:tid 30884] [client 13.71.191.191:38848] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aaMaevQmcmSQL-3rvLD88QAAAE0"]
[Sun Mar 01 00:40:27.166645 2026] [:error] [pid 30795:tid 30818] [client 13.71.191.191:38830] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aaMae2uI44IL94Zgti-wTgAAAAo"]
[Sun Mar 01 00:40:27.948764 2026] [:error] [pid 30797:tid 30891] [client 13.71.191.191:38880] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aaMae_QmcmSQL-3rvLD89AAAAFQ"]
[Sun Mar 01 00:40:29.084824 2026] [:error] [pid 53600:tid 53606] [client 13.71.191.191:38810] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aaMafQ2UMRAYWtDB23S6HQAAAQM"]
[Sun Mar 01 00:40:29.954578 2026] [:error] [pid 31190:tid 31226] [client 13.71.191.191:38892] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMafRfvwGOholYpM1FP6wAAANQ"]
[Sun Mar 01 00:40:31.566702 2026] [:error] [pid 31190:tid 31207] [client 13.71.191.191:38905] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMafxfvwGOholYpM1FP9gAAAME"]
[Sun Mar 01 00:40:33.773497 2026] [:error] [pid 31190:tid 31222] [client 13.71.191.191:38741] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMagRfvwGOholYpM1FQBgAAANA"]
[Sun Mar 01 00:40:35.338653 2026] [:error] [pid 53600:tid 53605] [client 13.71.191.191:38788] [client 13.71.191.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaMagw2UMRAYWtDB23S6OAAAAQI"]
[Sun Mar 01 01:01:16.809024 2026] [:error] [pid 31190:tid 31206] [client 20.63.83.162:11939] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaMfXBfvwGOholYpM1FjMQAAAMA"]
[Sun Mar 01 01:01:17.652231 2026] [:error] [pid 30798:tid 30923] [client 20.63.83.162:64763] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaMfXcBkD73gO8wTonZSEwAAAJc"]
[Sun Mar 01 01:01:18.491919 2026] [:error] [pid 30798:tid 30910] [client 20.63.83.162:54303] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaMfXsBkD73gO8wTonZSKQAAAIs"]
[Sun Mar 01 01:01:19.322274 2026] [:error] [pid 31190:tid 31220] [client 20.63.83.162:64739] [client 20.63.83.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaMfXxfvwGOholYpM1FjRQAAAM4"]
[Sun Mar 01 02:34:18.669822 2026] [:error] [pid 53600:tid 53623] [client 43.133.187.11:35310] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaM1Kg2UMRAYWtDB23T4qgAAARQ"]
[Sun Mar 01 03:34:27.859883 2026] [:error] [pid 11920:tid 11948] [client 192.144.148.122:41498] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaNDQyzLNJUKxvBorrBLpQAAAZg"]
[Sun Mar 01 04:39:33.276136 2026] [:error] [pid 21156:tid 21174] [client 103.65.236.153:57045] [client 103.65.236.153] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aaNShasaG_9IkG8N2p3cMgAAAAg"]
[Sun Mar 01 04:39:33.539677 2026] [:error] [pid 24576:tid 24589] [client 103.65.236.153:57057] [client 103.65.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aaNShYvfb5CnctJh073HSQAAAQo"]
[Sun Mar 01 05:02:13.748517 2026] [:error] [pid 21158:tid 21193] [client 143.198.35.6:50361] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aaNX1TriSIe3-pWnbPbY-AAAAEA"]
[Sun Mar 01 05:02:14.165646 2026] [:error] [pid 24576:tid 24588] [client 143.198.35.6:50375] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aaNX1ovfb5CnctJh073mEgAAAQk"]
[Sun Mar 01 05:02:14.580444 2026] [:error] [pid 24576:tid 24595] [client 143.198.35.6:50383] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aaNX1ovfb5CnctJh073mFgAAAQ8"]
[Sun Mar 01 05:02:14.997912 2026] [:error] [pid 24576:tid 24594] [client 143.198.35.6:50396] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.php"] [unique_id "aaNX1ovfb5CnctJh073mGgAAAQ4"]
[Sun Mar 01 05:02:15.412620 2026] [:error] [pid 21159:tid 21237] [client 143.198.35.6:50405] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aaNX1-Li3ouy1NZIkgoY8QAAAJA"]
[Sun Mar 01 05:02:15.839738 2026] [:error] [pid 21263:tid 21272] [client 143.198.35.6:50422] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aaNX19AxjzLvN1upBhnUkQAAAMU"]
[Sun Mar 01 05:02:16.257287 2026] [:error] [pid 21158:tid 21202] [client 143.198.35.6:50448] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aaNX2DriSIe3-pWnbPbY_AAAAEk"]
[Sun Mar 01 05:02:16.674257 2026] [:error] [pid 21263:tid 21273] [client 143.198.35.6:50499] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aaNX2NAxjzLvN1upBhnUkwAAAMY"]
[Sun Mar 01 05:02:17.089350 2026] [:error] [pid 21158:tid 21212] [client 143.198.35.6:50532] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aaNX2TriSIe3-pWnbPbZAQAAAFM"]
[Sun Mar 01 05:02:17.504460 2026] [:error] [pid 24576:tid 24586] [client 143.198.35.6:50566] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aaNX2Yvfb5CnctJh073mIQAAAQc"]
[Sun Mar 01 05:02:17.922034 2026] [:error] [pid 24576:tid 24592] [client 143.198.35.6:50598] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aaNX2Yvfb5CnctJh073mKAAAAQw"]
[Sun Mar 01 05:02:18.339535 2026] [:error] [pid 21158:tid 21207] [client 143.198.35.6:50618] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aaNX2jriSIe3-pWnbPbZBgAAAE4"]
[Sun Mar 01 05:02:18.757405 2026] [:error] [pid 21158:tid 21197] [client 143.198.35.6:50647] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "aaNX2jriSIe3-pWnbPbZCAAAAEQ"]
[Sun Mar 01 05:02:19.172060 2026] [:error] [pid 21263:tid 21278] [client 143.198.35.6:50669] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker.local"] [unique_id "aaNX29AxjzLvN1upBhnUmgAAAMs"]
[Sun Mar 01 05:02:19.589105 2026] [:error] [pid 21263:tid 21277] [client 143.198.35.6:50678] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.env"] [unique_id "aaNX29AxjzLvN1upBhnUnQAAAMo"]
[Sun Mar 01 05:02:20.003960 2026] [:error] [pid 21156:tid 21173] [client 143.198.35.6:50692] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public_html/.env"] [unique_id "aaNX3KsaG_9IkG8N2p3jhgAAAAc"]
[Sun Mar 01 05:02:20.421191 2026] [:error] [pid 21263:tid 21281] [client 143.198.35.6:50700] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/laravel/.env"] [unique_id "aaNX3NAxjzLvN1upBhnUpAAAAM4"]
[Sun Mar 01 05:02:20.836273 2026] [:error] [pid 21263:tid 21275] [client 143.198.35.6:50712] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aaNX3NAxjzLvN1upBhnUqAAAAMg"]
[Sun Mar 01 05:02:22.817215 2026] [:error] [pid 24576:tid 24603] [client 143.198.35.6:50982] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aaNX3ovfb5CnctJh073mNQAAARc"]
[Sun Mar 01 05:02:23.231646 2026] [:error] [pid 24576:tid 24589] [client 143.198.35.6:51017] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aaNX34vfb5CnctJh073mPAAAAQo"]
[Sun Mar 01 05:02:23.646457 2026] [:error] [pid 24576:tid 24594] [client 143.198.35.6:51061] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "aaNX34vfb5CnctJh073mQwAAAQ4"]
[Sun Mar 01 05:02:24.063531 2026] [:error] [pid 21156:tid 21175] [client 143.198.35.6:51089] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/server/.env"] [unique_id "aaNX4KsaG_9IkG8N2p3jiQAAAAk"]
[Sun Mar 01 05:02:24.481041 2026] [:error] [pid 24576:tid 24596] [client 143.198.35.6:51117] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/client/.env"] [unique_id "aaNX4Ivfb5CnctJh073mTAAAARA"]
[Sun Mar 01 05:02:24.895546 2026] [:error] [pid 24576:tid 24594] [client 143.198.35.6:51135] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/services/.env"] [unique_id "aaNX4Ivfb5CnctJh073mUAAAAQ4"]
[Sun Mar 01 05:02:25.310174 2026] [:error] [pid 24576:tid 24583] [client 143.198.35.6:51160] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/service/.env"] [unique_id "aaNX4Yvfb5CnctJh073mVAAAAQQ"]
[Sun Mar 01 05:02:25.726956 2026] [:error] [pid 21158:tid 21200] [client 143.198.35.6:51187] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/dev/.env"] [unique_id "aaNX4TriSIe3-pWnbPbZFQAAAEc"]
[Sun Mar 01 05:02:26.144083 2026] [:error] [pid 24576:tid 24602] [client 143.198.35.6:51203] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/test/.env"] [unique_id "aaNX4ovfb5CnctJh073mWwAAARY"]
[Sun Mar 01 05:02:26.559045 2026] [:error] [pid 24576:tid 24604] [client 143.198.35.6:51237] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/stage/.env"] [unique_id "aaNX4ovfb5CnctJh073mXwAAARg"]
[Sun Mar 01 05:02:26.973675 2026] [:error] [pid 21159:tid 21223] [client 143.198.35.6:51264] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/staging/.env"] [unique_id "aaNX4uLi3ouy1NZIkgoZDAAAAII"]
[Sun Mar 01 05:02:27.391760 2026] [:error] [pid 24576:tid 24593] [client 143.198.35.6:51302] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/prod/.env"] [unique_id "aaNX44vfb5CnctJh073maAAAAQ0"]
[Sun Mar 01 05:02:27.806796 2026] [:error] [pid 21158:tid 21195] [client 143.198.35.6:51345] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/production/.env"] [unique_id "aaNX4zriSIe3-pWnbPbZGAAAAEI"]
[Sun Mar 01 05:02:28.221497 2026] [:error] [pid 21159:tid 21232] [client 143.198.35.6:51379] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/beta/.env"] [unique_id "aaNX5OLi3ouy1NZIkgoZDwAAAIs"]
[Sun Mar 01 05:02:28.636036 2026] [:error] [pid 21263:tid 21287] [client 143.198.35.6:51417] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/demo/.env"] [unique_id "aaNX5NAxjzLvN1upBhnUwwAAANQ"]
[Sun Mar 01 05:02:29.050819 2026] [:error] [pid 24576:tid 24601] [client 143.198.35.6:51447] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/live/.env"] [unique_id "aaNX5Yvfb5CnctJh073mfQAAARU"]
[Sun Mar 01 05:02:29.465490 2026] [:error] [pid 21158:tid 21193] [client 143.198.35.6:51475] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/core/.env"] [unique_id "aaNX5TriSIe3-pWnbPbZGgAAAEA"]
[Sun Mar 01 05:02:29.883062 2026] [:error] [pid 24576:tid 24588] [client 143.198.35.6:51535] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/application/.env"] [unique_id "aaNX5Yvfb5CnctJh073mhAAAAQk"]
[Sun Mar 01 05:02:30.298100 2026] [:error] [pid 21263:tid 21286] [client 143.198.35.6:51580] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/html/.env"] [unique_id "aaNX5tAxjzLvN1upBhnUzAAAANM"]
[Sun Mar 01 05:02:30.715218 2026] [:error] [pid 21159:tid 21239] [client 143.198.35.6:51611] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/www/.env"] [unique_id "aaNX5uLi3ouy1NZIkgoZFQAAAJI"]
[Sun Mar 01 05:02:31.132692 2026] [:error] [pid 21263:tid 21287] [client 143.198.35.6:51643] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/web/.env"] [unique_id "aaNX59AxjzLvN1upBhnU0gAAANQ"]
[Sun Mar 01 05:02:31.547104 2026] [:error] [pid 24576:tid 24580] [client 143.198.35.6:51711] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/var/.env"] [unique_id "aaNX54vfb5CnctJh073mlgAAAQE"]
[Sun Mar 01 05:02:31.964749 2026] [:error] [pid 21159:tid 21238] [client 143.198.35.6:51773] [client 143.198.35.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/tmp/.env"] [unique_id "aaNX5-Li3ouy1NZIkgoZGQAAAJE"]
[Sun Mar 01 05:46:32.238147 2026] [:error] [pid 24576:tid 24581] [client 43.167.236.228:57642] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaNiOIvfb5CnctJh070TDAAAAQI"]
[Sun Mar 01 06:00:14.750426 2026] [:error] [pid 21159:tid 21240] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Sun Mar 01 06:00:14.870922 2026] [:error] [pid 21159:tid 21244] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 01 06:00:14.987481 2026] [:error] [pid 21159:tid 21232] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Mar 01 06:00:15.220128 2026] [:error] [pid 21159:tid 21241] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sun Mar 01 06:00:15.336285 2026] [:error] [pid 21159:tid 21231] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Mar 01 06:00:15.453542 2026] [:error] [pid 21159:tid 21235] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun Mar 01 06:00:15.569454 2026] [:error] [pid 21159:tid 21229] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun Mar 01 06:00:15.686011 2026] [:error] [pid 21159:tid 21237] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Sun Mar 01 06:00:15.803810 2026] [:error] [pid 21159:tid 21234] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 01 06:00:15.919981 2026] [:error] [pid 21159:tid 21233] [client 52.253.113.41:30578] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sun Mar 01 06:00:16.032963 2026] [:error] [pid 21159:tid 21239] [client 52.253.113.41:30578] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaNlcOLi3ouy1NZIkgox7wAAAJI"]
[Sun Mar 01 06:00:16.511448 2026] [:error] [pid 24576:tid 24589] [client 52.253.113.41:30561] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaNlcIvfb5CnctJh070c0AAAAQo"]
[Sun Mar 01 06:00:16.963186 2026] [:error] [pid 8688:tid 8699] [client 52.253.113.41:16310] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaNlcDHJ4Nn-RvulD0q1_QAAAUk"]
[Sun Mar 01 06:00:17.415494 2026] [:error] [pid 21158:tid 21198] [client 52.253.113.41:29617] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaNlcTriSIe3-pWnbPbtWgAAAEU"]
[Sun Mar 01 09:35:08.154001 2026] [:error] [pid 35350:tid 35367] [client 120.71.59.24:38443] [client 120.71.59.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaOXzIqZbPJ_JGYY1RTlAAAAA48"]
[Sun Mar 01 10:47:34.929481 2026] [:error] [pid 24576:tid 24579] [client 43.135.138.128:44326] [client 43.135.138.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaOoxovfb5CnctJh0709AQAAAQA"]
[Sun Mar 01 13:13:22.040982 2026] [:error] [pid 37032:tid 37057] [client 43.130.31.17:57968] [client 43.130.31.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaPK8uu0U4o7eSImsVTo9QAAAZc"]
[Sun Mar 01 14:29:32.262615 2026] [:error] [pid 44644:tid 44666] [client 62.60.131.218:53615] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaPczJ3RJaXMcw3y9V9vKgAAABM"]
[Sun Mar 01 15:40:55.360253 2026] [:error] [pid 38241:tid 38258] [client 89.211.138.54:55602] [client 89.211.138.54] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.211.138.54, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPth_KRPk6YnJBxw_xLewAAAM4"]
[Sun Mar 01 15:40:55.366366 2026] [:error] [pid 38241:tid 38258] [client 89.211.138.54:55602] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 15:41:28.790439 2026] [:error] [pid 44644:tid 44655] [client 183.182.117.88:16482] [client 183.182.117.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.182.117.88, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPtqJ3RJaXMcw3y9V-rHAAAAAg"]
[Sun Mar 01 15:41:28.795861 2026] [:error] [pid 44644:tid 44655] [client 183.182.117.88:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 15:46:46.966092 2026] [:error] [pid 38034:tid 38060] [client 150.129.168.55:17304] [client 150.129.168.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 150.129.168.55, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPu5gxtfZjwlJok9K--8QAAARY"]
[Sun Mar 01 15:46:46.971075 2026] [:error] [pid 38034:tid 38060] [client 150.129.168.55:17304] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 16:04:04.507603 2026] [:error] [pid 38034:tid 38056] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sun Mar 01 16:04:04.781754 2026] [:error] [pid 38034:tid 38044] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Mar 01 16:04:05.046569 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Sun Mar 01 16:04:05.311133 2026] [:error] [pid 38034:tid 38057] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sun Mar 01 16:04:05.577089 2026] [:error] [pid 38034:tid 38038] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sun Mar 01 16:04:05.841709 2026] [:error] [pid 38034:tid 38037] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Mar 01 16:04:06.106964 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun Mar 01 16:04:06.371917 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sun Mar 01 16:04:06.637576 2026] [:error] [pid 38034:tid 38060] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Sun Mar 01 16:04:06.902166 2026] [:error] [pid 38034:tid 38053] [client 51.12.82.80:11583] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sun Mar 01 16:04:07.166252 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:11583] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPy9wxtfZjwlJok9K_PqAAAARE"]
[Sun Mar 01 16:04:07.693120 2026] [:error] [pid 41967:tid 41993] [client 51.12.82.80:15710] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPy94O1bqY181I02eGSkgAAAJg"]
[Sun Mar 01 16:04:08.246026 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:8340] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPy-AxtfZjwlJok9K_PrQAAARg"]
[Sun Mar 01 16:04:08.793587 2026] [:error] [pid 38034:tid 38052] [client 51.12.82.80:23075] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPy-AxtfZjwlJok9K_PsAAAAQ4"]
[Sun Mar 01 16:04:09.366024 2026] [:error] [pid 42619:tid 42643] [client 51.12.82.80:24347] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaPy-R_zUXcYaZE4AOeXWwAAAVY"]
[Sun Mar 01 16:04:09.912760 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:12432] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaPy-fKRPk6YnJBxw_xhEwAAAM4"]
[Sun Mar 01 16:04:10.448902 2026] [:error] [pid 38034:tid 38047] [client 51.12.82.80:14146] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaPy-gxtfZjwlJok9K_PtwAAAQk"]
[Sun Mar 01 16:04:10.987347 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:14202] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaPy-vKRPk6YnJBxw_xhFgAAAM4"]
[Sun Mar 01 16:04:11.537803 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:5072] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPy-wxtfZjwlJok9K_PwAAAAQc"]
[Sun Mar 01 16:04:12.092280 2026] [:error] [pid 38034:tid 38038] [client 51.12.82.80:8255] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPy_AxtfZjwlJok9K_PwgAAAQI"]
[Sun Mar 01 16:04:12.646618 2026] [:error] [pid 38034:tid 38053] [client 51.12.82.80:4347] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPy_AxtfZjwlJok9K_PywAAAQ8"]
[Sun Mar 01 16:04:13.207995 2026] [:error] [pid 38034:tid 38056] [client 51.12.82.80:15695] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPy_QxtfZjwlJok9K_P0AAAARI"]
[Sun Mar 01 16:04:13.775912 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:23089] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPy_fKRPk6YnJBxw_xhIAAAANg"]
[Sun Mar 01 16:04:14.321700 2026] [:error] [pid 41780:tid 41800] [client 51.12.82.80:5059] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPy_sONkVoocLIqzy0TnQAAA9E"]
[Sun Mar 01 16:04:14.860653 2026] [:error] [pid 38034:tid 38056] [client 51.12.82.80:24040] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPy_gxtfZjwlJok9K_P3AAAARI"]
[Sun Mar 01 16:04:15.414405 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:5248] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPy_wxtfZjwlJok9K_P6gAAARE"]
[Sun Mar 01 16:04:15.964364 2026] [:error] [pid 38034:tid 38052] [client 51.12.82.80:23097] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaPy_wxtfZjwlJok9K_P7gAAAQ4"]
[Sun Mar 01 16:04:16.518580 2026] [:error] [pid 44644:tid 44647] [client 51.12.82.80:12465] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaPzAJ3RJaXMcw3y9V-29gAAAAA"]
[Sun Mar 01 16:04:17.067128 2026] [:error] [pid 44644:tid 44653] [client 51.12.82.80:12445] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaPzAZ3RJaXMcw3y9V-2_AAAAAY"]
[Sun Mar 01 16:04:17.591184 2026] [:error] [pid 44644:tid 44649] [client 51.12.82.80:12458] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaPzAZ3RJaXMcw3y9V-2_gAAAAI"]
[Sun Mar 01 16:04:18.118942 2026] [:error] [pid 44644:tid 44666] [client 51.12.82.80:5633] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaPzAp3RJaXMcw3y9V-3AgAAABM"]
[Sun Mar 01 16:04:18.645476 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:5309] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaPzAgxtfZjwlJok9K_QAgAAARE"]
[Sun Mar 01 16:04:19.169529 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:5219] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaPzAwxtfZjwlJok9K_QDAAAARE"]
[Sun Mar 01 16:04:19.694601 2026] [:error] [pid 38241:tid 38254] [client 51.12.82.80:20014] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaPzA_KRPk6YnJBxw_xhKgAAAMo"]
[Sun Mar 01 16:04:20.222408 2026] [:error] [pid 44644:tid 44648] [client 51.12.82.80:23066] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaPzBJ3RJaXMcw3y9V-3BwAAAAE"]
[Sun Mar 01 16:04:20.746432 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:24329] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaPzBPKRPk6YnJBxw_xhLQAAANA"]
[Sun Mar 01 16:04:21.269509 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:5098] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaPzBfKRPk6YnJBxw_xhMgAAANg"]
[Sun Mar 01 16:04:21.808462 2026] [:error] [pid 41967:tid 41971] [client 51.12.82.80:5259] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaPzBYO1bqY181I02eGSmQAAAII"]
[Sun Mar 01 16:04:22.395127 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:5676] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaPzBgxtfZjwlJok9K_QJQAAARE"]
[Sun Mar 01 16:04:22.943237 2026] [:error] [pid 44644:tid 44656] [client 51.12.82.80:5256] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaPzBp3RJaXMcw3y9V-3GAAAAAk"]
[Sun Mar 01 16:04:23.515715 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:5269] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaPzB_KRPk6YnJBxw_xhOQAAANg"]
[Sun Mar 01 16:04:24.073831 2026] [:error] [pid 44644:tid 44658] [client 51.12.82.80:24060] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaPzCJ3RJaXMcw3y9V-3IQAAAAs"]
[Sun Mar 01 16:04:24.620089 2026] [:error] [pid 44644:tid 44668] [client 51.12.82.80:24019] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaPzCJ3RJaXMcw3y9V-3JQAAABU"]
[Sun Mar 01 16:04:25.247149 2026] [:error] [pid 7165:tid 7191] [client 51.12.82.80:4249] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaPzCRRjCrA8qWBjgG83DQAAAlg"]
[Sun Mar 01 16:04:25.836575 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:5292] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaPzCfKRPk6YnJBxw_xhQQAAAM4"]
[Sun Mar 01 16:04:26.437256 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:24051] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaPzCvKRPk6YnJBxw_xhRQAAANg"]
[Sun Mar 01 16:04:26.997605 2026] [:error] [pid 40750:tid 40765] [client 51.12.82.80:14154] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaPzCgfBuk03yQKDyqvMYQAAAcw"]
[Sun Mar 01 16:04:27.560275 2026] [:error] [pid 42619:tid 42635] [client 51.12.82.80:23074] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaPzCx_zUXcYaZE4AOeXfwAAAU4"]
[Sun Mar 01 16:04:28.115966 2026] [:error] [pid 37032:tid 37044] [client 51.12.82.80:20030] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaPzDOu0U4o7eSImsVRQ7QAAAYo"]
[Sun Mar 01 16:04:28.734545 2026] [:error] [pid 44644:tid 44655] [client 51.12.82.80:10022] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaPzDJ3RJaXMcw3y9V-3MAAAAAg"]
[Sun Mar 01 16:04:29.323191 2026] [:error] [pid 40750:tid 40757] [client 51.12.82.80:19990] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaPzDQfBuk03yQKDyqvMYwAAAcQ"]
[Sun Mar 01 16:04:29.947755 2026] [:error] [pid 42619:tid 42635] [client 51.12.82.80:5652] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaPzDR_zUXcYaZE4AOeXjQAAAU4"]
[Sun Mar 01 16:04:30.497952 2026] [:error] [pid 7165:tid 7175] [client 51.12.82.80:13874] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaPzDhRjCrA8qWBjgG83FAAAAkg"]
[Sun Mar 01 16:04:31.041893 2026] [:error] [pid 38034:tid 38059] [client 51.12.82.80:12430] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaPzDwxtfZjwlJok9K_QRAAAARU"]
[Sun Mar 01 16:04:31.578696 2026] [:error] [pid 41780:tid 41789] [client 51.12.82.80:4277] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaPzD8ONkVoocLIqzy0TnwAAA8Y"]
[Sun Mar 01 16:04:32.106276 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:5635] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaPzEAxtfZjwlJok9K_QRwAAAQc"]
[Sun Mar 01 16:04:32.630149 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:5215] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaPzEPKRPk6YnJBxw_xhUwAAANA"]
[Sun Mar 01 16:04:33.152962 2026] [:error] [pid 37032:tid 37056] [client 51.12.82.80:5184] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaPzEeu0U4o7eSImsVRQ-wAAAZY"]
[Sun Mar 01 16:04:33.677105 2026] [:error] [pid 37032:tid 37044] [client 51.12.82.80:24333] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaPzEeu0U4o7eSImsVRQ_gAAAYo"]
[Sun Mar 01 16:04:34.200623 2026] [:error] [pid 7165:tid 7189] [client 51.12.82.80:23059] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaPzEhRjCrA8qWBjgG83JgAAAlY"]
[Sun Mar 01 16:04:34.726292 2026] [:error] [pid 7165:tid 7180] [client 51.12.82.80:5646] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaPzEhRjCrA8qWBjgG83KAAAAk0"]
[Sun Mar 01 16:04:35.254586 2026] [:error] [pid 38034:tid 38060] [client 51.12.82.80:5215] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaPzEwxtfZjwlJok9K_QYQAAARY"]
[Sun Mar 01 16:04:35.777137 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:13841] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaPzE_KRPk6YnJBxw_xhWgAAANA"]
[Sun Mar 01 16:04:36.301156 2026] [:error] [pid 38034:tid 38060] [client 51.12.82.80:24203] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaPzFAxtfZjwlJok9K_QZwAAARY"]
[Sun Mar 01 16:04:36.824635 2026] [:error] [pid 38034:tid 38049] [client 51.12.82.80:5217] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaPzFAxtfZjwlJok9K_QawAAAQs"]
[Sun Mar 01 16:04:37.349478 2026] [:error] [pid 38034:tid 38049] [client 51.12.82.80:4241] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaPzFQxtfZjwlJok9K_QdgAAAQs"]
[Sun Mar 01 16:04:37.875140 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:5662] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaPzFQxtfZjwlJok9K_QeQAAARE"]
[Sun Mar 01 16:04:38.413483 2026] [:error] [pid 38034:tid 38052] [client 51.12.82.80:10003] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaPzFgxtfZjwlJok9K_QgAAAAQ4"]
[Sun Mar 01 16:04:38.948315 2026] [:error] [pid 37032:tid 37042] [client 51.12.82.80:4244] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaPzFuu0U4o7eSImsVRRAQAAAYg"]
[Sun Mar 01 16:04:39.487752 2026] [:error] [pid 44644:tid 44656] [client 51.12.82.80:24203] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaPzF53RJaXMcw3y9V-3UwAAAAk"]
[Sun Mar 01 16:04:40.029462 2026] [:error] [pid 38034:tid 38060] [client 51.12.82.80:13849] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPzGAxtfZjwlJok9K_QigAAARY"]
[Sun Mar 01 16:04:40.553324 2026] [:error] [pid 44644:tid 44662] [client 51.12.82.80:12427] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPzGJ3RJaXMcw3y9V-3WgAAAA8"]
[Sun Mar 01 16:04:41.089845 2026] [:error] [pid 44644:tid 44671] [client 51.12.82.80:24369] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPzGZ3RJaXMcw3y9V-3YAAAABg"]
[Sun Mar 01 16:04:41.614039 2026] [:error] [pid 44644:tid 44657] [client 51.12.82.80:5294] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaPzGZ3RJaXMcw3y9V-3ZwAAAAo"]
[Sun Mar 01 16:04:42.152073 2026] [:error] [pid 44644:tid 44662] [client 51.12.82.80:24013] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPzGp3RJaXMcw3y9V-3agAAAA8"]
[Sun Mar 01 16:04:42.676358 2026] [:error] [pid 38034:tid 38056] [client 51.12.82.80:4263] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPzGgxtfZjwlJok9K_QkwAAARI"]
[Sun Mar 01 16:04:43.210696 2026] [:error] [pid 7133:tid 7147] [client 51.12.82.80:5100] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPzG_Ctubh8pR64qB_KlQAAAEw"]
[Sun Mar 01 16:04:43.782562 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:8243] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPzGwxtfZjwlJok9K_QnAAAARE"]
[Sun Mar 01 16:04:44.325501 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:8237] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaPzHAxtfZjwlJok9K_QnwAAAQU"]
[Sun Mar 01 16:04:44.867362 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:20017] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaPzHAxtfZjwlJok9K_QqAAAAQU"]
[Sun Mar 01 16:04:45.412952 2026] [:error] [pid 38034:tid 38050] [client 51.12.82.80:8215] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaPzHQxtfZjwlJok9K_QrAAAAQw"]
[Sun Mar 01 16:04:45.946981 2026] [:error] [pid 41780:tid 41805] [client 51.12.82.80:5255] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaPzHcONkVoocLIqzy0TowAAA9Y"]
[Sun Mar 01 16:04:46.488824 2026] [:error] [pid 38034:tid 38046] [client 51.12.82.80:5300] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaPzHgxtfZjwlJok9K_QuQAAAQg"]
[Sun Mar 01 16:04:47.024480 2026] [:error] [pid 7133:tid 7142] [client 51.12.82.80:24014] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaPzH_Ctubh8pR64qB_KlwAAAEc"]
[Sun Mar 01 16:04:47.549726 2026] [:error] [pid 7165:tid 7177] [client 51.12.82.80:5090] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaPzHxRjCrA8qWBjgG83SAAAAko"]
[Sun Mar 01 16:04:48.106930 2026] [:error] [pid 38034:tid 38046] [client 51.12.82.80:4264] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaPzIAxtfZjwlJok9K_QyAAAAQg"]
[Sun Mar 01 16:04:48.648790 2026] [:error] [pid 38034:tid 38036] [client 51.12.82.80:23102] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaPzIAxtfZjwlJok9K_QzwAAAQA"]
[Sun Mar 01 16:04:49.183464 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:24216] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaPzIQxtfZjwlJok9K_Q0wAAAQc"]
[Sun Mar 01 16:04:49.708631 2026] [:error] [pid 37032:tid 37058] [client 51.12.82.80:5106] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaPzIeu0U4o7eSImsVRRCQAAAZg"]
[Sun Mar 01 16:04:50.261151 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:20012] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaPzIvKRPk6YnJBxw_xhawAAANg"]
[Sun Mar 01 16:04:50.789693 2026] [:error] [pid 37032:tid 37048] [client 51.12.82.80:5082] [client 51.12.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaPzIuu0U4o7eSImsVRREAAAAY4"]
[Sun Mar 01 16:04:51.316850 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:24038] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaPzIwxtfZjwlJok9K_Q1wAAAQc"]
[Sun Mar 01 16:04:51.846883 2026] [:error] [pid 38034:tid 38053] [client 51.12.82.80:12454] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaPzIwxtfZjwlJok9K_Q2gAAAQ8"]
[Sun Mar 01 16:04:52.378325 2026] [:error] [pid 7165:tid 7182] [client 51.12.82.80:5058] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaPzJBRjCrA8qWBjgG83TQAAAk8"]
[Sun Mar 01 16:04:52.914450 2026] [:error] [pid 41780:tid 41790] [client 51.12.82.80:24239] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPzJMONkVoocLIqzy0TpQAAA8c"]
[Sun Mar 01 16:04:53.451203 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:5244] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPzJfKRPk6YnJBxw_xhdAAAANA"]
[Sun Mar 01 16:04:53.998447 2026] [:error] [pid 7165:tid 7188] [client 51.12.82.80:4243] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPzJRRjCrA8qWBjgG83UgAAAlU"]
[Sun Mar 01 16:04:54.523944 2026] [:error] [pid 7165:tid 7185] [client 51.12.82.80:5651] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaPzJhRjCrA8qWBjgG83VAAAAlI"]
[Sun Mar 01 16:04:55.058863 2026] [:error] [pid 7165:tid 7177] [client 51.12.82.80:4248] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzJxRjCrA8qWBjgG83VgAAAko"]
[Sun Mar 01 16:04:55.585319 2026] [:error] [pid 7165:tid 7176] [client 51.12.82.80:5190] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzJxRjCrA8qWBjgG83WQAAAkk"]
[Sun Mar 01 16:04:56.116881 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:24377] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzKPKRPk6YnJBxw_xhegAAANg"]
[Sun Mar 01 16:04:56.643536 2026] [:error] [pid 38034:tid 38057] [client 51.12.82.80:10036] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzKAxtfZjwlJok9K_Q7QAAARM"]
[Sun Mar 01 16:04:57.189046 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:5106] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaPzKQxtfZjwlJok9K_Q8gAAARg"]
[Sun Mar 01 16:04:57.737495 2026] [:error] [pid 38034:tid 38047] [client 51.12.82.80:14154] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaPzKQxtfZjwlJok9K_Q-AAAAQk"]
[Sun Mar 01 16:04:58.301705 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:20007] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaPzKgxtfZjwlJok9K_Q-wAAAQc"]
[Sun Mar 01 16:04:58.859275 2026] [:error] [pid 38034:tid 38036] [client 51.12.82.80:8204] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaPzKgxtfZjwlJok9K_RAAAAAQA"]
[Sun Mar 01 16:04:59.422078 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:24381] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPzK_KRPk6YnJBxw_xhhAAAANA"]
[Sun Mar 01 16:04:59.984301 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:24348] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPzK_KRPk6YnJBxw_xhiAAAAM4"]
[Sun Mar 01 16:05:00.536873 2026] [:error] [pid 44644:tid 44666] [client 51.12.82.80:5216] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPzLJ3RJaXMcw3y9V-3kQAAABM"]
[Sun Mar 01 16:05:01.100666 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:20004] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaPzLfKRPk6YnJBxw_xhjgAAAMc"]
[Sun Mar 01 16:05:01.626196 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:12447] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaPzLQxtfZjwlJok9K_RCQAAARg"]
[Sun Mar 01 16:05:02.151543 2026] [:error] [pid 38034:tid 38049] [client 51.12.82.80:4273] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaPzLgxtfZjwlJok9K_RDgAAAQs"]
[Sun Mar 01 16:05:02.674457 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:5211] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaPzLvKRPk6YnJBxw_xhlgAAAM4"]
[Sun Mar 01 16:05:03.196582 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:5286] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aaPzLwxtfZjwlJok9K_REwAAAQc"]
[Sun Mar 01 16:05:03.726652 2026] [:error] [pid 41967:tid 41990] [client 51.12.82.80:20029] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaPzL4O1bqY181I02eGSswAAAJU"]
[Sun Mar 01 16:05:04.260700 2026] [:error] [pid 41780:tid 41792] [client 51.12.82.80:5679] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaPzMMONkVoocLIqzy0TqAAAA8k"]
[Sun Mar 01 16:05:04.787434 2026] [:error] [pid 7165:tid 7182] [client 51.12.82.80:24248] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaPzMBRjCrA8qWBjgG83ZQAAAk8"]
[Sun Mar 01 16:05:05.333831 2026] [:error] [pid 44644:tid 44657] [client 51.12.82.80:5305] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aaPzMZ3RJaXMcw3y9V-3nwAAAAo"]
[Sun Mar 01 16:05:05.866501 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:19985] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaPzMfKRPk6YnJBxw_xhpAAAANg"]
[Sun Mar 01 16:05:06.397098 2026] [:error] [pid 42619:tid 42623] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 16:05:06.664535 2026] [:error] [pid 42619:tid 42626] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Mar 01 16:05:06.930031 2026] [:error] [pid 42619:tid 42634] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Mar 01 16:05:07.211057 2026] [:error] [pid 42619:tid 42627] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 01 16:05:07.483630 2026] [:error] [pid 42619:tid 42645] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Mar 01 16:05:07.749596 2026] [:error] [pid 42619:tid 42633] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Sun Mar 01 16:05:09.425054 2026] [:error] [pid 42619:tid 42633] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 01 16:05:09.690747 2026] [:error] [pid 42619:tid 42624] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 01 16:05:09.957825 2026] [:error] [pid 42619:tid 42630] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sun Mar 01 16:05:10.228581 2026] [:error] [pid 42619:tid 42640] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Sun Mar 01 16:05:10.503338 2026] [:error] [pid 42619:tid 42632] [client 51.12.82.80:4285] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 01 16:05:10.769935 2026] [:error] [pid 42619:tid 42639] [client 51.12.82.80:4285] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPzNh_zUXcYaZE4AOeXrwAAAVI"]
[Sun Mar 01 16:05:11.364067 2026] [:error] [pid 38034:tid 38046] [client 51.12.82.80:14144] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPzNwxtfZjwlJok9K_RQgAAAQg"]
[Sun Mar 01 16:05:11.920135 2026] [:error] [pid 41967:tid 41986] [client 51.12.82.80:10014] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPzN4O1bqY181I02eGSxQAAAJE"]
[Sun Mar 01 16:05:12.539744 2026] [:error] [pid 7133:tid 7149] [client 51.12.82.80:10018] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaPzOPCtubh8pR64qB_KpwAAAE4"]
[Sun Mar 01 16:05:13.096405 2026] [:error] [pid 37032:tid 37045] [client 51.12.82.80:24236] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaPzOeu0U4o7eSImsVRRNQAAAYs"]
[Sun Mar 01 16:05:13.707102 2026] [:error] [pid 41780:tid 41789] [client 51.12.82.80:5689] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaPzOcONkVoocLIqzy0TrgAAA8Y"]
[Sun Mar 01 16:05:14.373327 2026] [:error] [pid 42619:tid 42629] [client 51.12.82.80:5267] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaPzOh_zUXcYaZE4AOeXsgAAAUg"]
[Sun Mar 01 16:05:14.938934 2026] [:error] [pid 7133:tid 7141] [client 51.12.82.80:20019] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaPzOvCtubh8pR64qB_KqAAAAEY"]
[Sun Mar 01 16:05:15.528974 2026] [:error] [pid 44644:tid 44653] [client 51.12.82.80:5228] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaPzO53RJaXMcw3y9V-3wAAAAAY"]
[Sun Mar 01 16:05:16.113277 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:5694] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaPzPPKRPk6YnJBxw_xh6QAAANA"]
[Sun Mar 01 16:05:16.642576 2026] [:error] [pid 37032:tid 37040] [client 51.12.82.80:5649] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaPzPOu0U4o7eSImsVRRQgAAAYY"]
[Sun Mar 01 16:05:17.212967 2026] [:error] [pid 37032:tid 37049] [client 51.12.82.80:10018] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aaPzPeu0U4o7eSImsVRRRQAAAY8"]
[Sun Mar 01 16:05:17.754450 2026] [:error] [pid 37032:tid 37056] [client 51.12.82.80:24207] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaPzPeu0U4o7eSImsVRRSQAAAZY"]
[Sun Mar 01 16:05:18.305589 2026] [:error] [pid 37032:tid 37044] [client 51.12.82.80:5695] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaPzPuu0U4o7eSImsVRRSwAAAYo"]
[Sun Mar 01 16:05:18.853505 2026] [:error] [pid 37032:tid 37040] [client 51.12.82.80:13854] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaPzPuu0U4o7eSImsVRRUAAAAYY"]
[Sun Mar 01 16:05:19.429311 2026] [:error] [pid 41967:tid 41978] [client 51.12.82.80:4305] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aaPzP4O1bqY181I02eGS0wAAAIk"]
[Sun Mar 01 16:05:19.961747 2026] [:error] [pid 41967:tid 41989] [client 51.12.82.80:23070] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPzP4O1bqY181I02eGS1wAAAJQ"]
[Sun Mar 01 16:05:20.544660 2026] [:error] [pid 44644:tid 44668] [client 51.12.82.80:24015] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPzQJ3RJaXMcw3y9V-3xAAAABU"]
[Sun Mar 01 16:05:21.096935 2026] [:error] [pid 38034:tid 38059] [client 51.12.82.80:24348] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPzQQxtfZjwlJok9K_RUgAAARU"]
[Sun Mar 01 16:05:21.639154 2026] [:error] [pid 38034:tid 38044] [client 51.12.82.80:14191] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaPzQQxtfZjwlJok9K_RVAAAAQY"]
[Sun Mar 01 16:05:22.245028 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:15726] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaPzQvKRPk6YnJBxw_xh8QAAAMc"]
[Sun Mar 01 16:05:22.795355 2026] [:error] [pid 44644:tid 44671] [client 51.12.82.80:4265] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaPzQp3RJaXMcw3y9V-3xgAAABg"]
[Sun Mar 01 16:05:23.393484 2026] [:error] [pid 37032:tid 37040] [client 51.12.82.80:19022] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaPzQ-u0U4o7eSImsVRRXwAAAYY"]
[Sun Mar 01 16:05:23.971903 2026] [:error] [pid 44644:tid 44670] [client 51.12.82.80:5296] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "aaPzQ53RJaXMcw3y9V-3zwAAABc"]
[Sun Mar 01 16:05:24.538449 2026] [:error] [pid 44644:tid 44665] [client 51.12.82.80:14169] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaPzRJ3RJaXMcw3y9V-30gAAABI"]
[Sun Mar 01 16:05:25.119754 2026] [:error] [pid 42619:tid 42623] [client 51.12.82.80:4313] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaPzRR_zUXcYaZE4AOeXswAAAUI"]
[Sun Mar 01 16:05:25.778470 2026] [:error] [pid 7165:tid 7176] [client 51.12.82.80:13853] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaPzRRRjCrA8qWBjgG83fwAAAkk"]
[Sun Mar 01 16:05:26.369429 2026] [:error] [pid 44644:tid 44662] [client 51.12.82.80:24006] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaPzRp3RJaXMcw3y9V-31QAAAA8"]
[Sun Mar 01 16:05:26.931870 2026] [:error] [pid 40750:tid 40767] [client 51.12.82.80:6387] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaPzRgfBuk03yQKDyqvMdgAAAc4"]
[Sun Mar 01 16:05:27.503401 2026] [:error] [pid 44644:tid 44655] [client 51.12.82.80:15731] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaPzR53RJaXMcw3y9V-31wAAAAg"]
[Sun Mar 01 16:05:28.073549 2026] [:error] [pid 41967:tid 41987] [client 51.12.82.80:4325] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaPzSIO1bqY181I02eGS5gAAAJI"]
[Sun Mar 01 16:05:28.600375 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:18169] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaPzSAxtfZjwlJok9K_RXAAAAQc"]
[Sun Mar 01 16:05:29.188919 2026] [:error] [pid 38034:tid 38052] [client 51.12.82.80:12083] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaPzSQxtfZjwlJok9K_RYAAAAQ4"]
[Sun Mar 01 16:05:29.750643 2026] [:error] [pid 42619:tid 42634] [client 51.12.82.80:6847] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaPzSR_zUXcYaZE4AOeXtgAAAU0"]
[Sun Mar 01 16:05:30.325779 2026] [:error] [pid 38034:tid 38050] [client 51.12.82.80:2371] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaPzSgxtfZjwlJok9K_RZAAAAQw"]
[Sun Mar 01 16:05:30.898203 2026] [:error] [pid 42619:tid 42645] [client 51.12.82.80:2450] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaPzSh_zUXcYaZE4AOeXtwAAAVg"]
[Sun Mar 01 16:05:31.434481 2026] [:error] [pid 42619:tid 42635] [client 51.12.82.80:2480] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPzSx_zUXcYaZE4AOeXuQAAAU4"]
[Sun Mar 01 16:05:31.978377 2026] [:error] [pid 7133:tid 7145] [client 51.12.82.80:7069] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPzS_Ctubh8pR64qB_KqwAAAEo"]
[Sun Mar 01 16:05:32.503748 2026] [:error] [pid 7165:tid 7171] [client 51.12.82.80:4658] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPzTBRjCrA8qWBjgG83hQAAAkQ"]
[Sun Mar 01 16:05:33.035013 2026] [:error] [pid 44644:tid 44671] [client 51.12.82.80:4995] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaPzTZ3RJaXMcw3y9V-32QAAABg"]
[Sun Mar 01 16:05:33.563169 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:7316] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaPzTfKRPk6YnJBxw_xh9gAAANg"]
[Sun Mar 01 16:05:34.099898 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:13088] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaPzTvKRPk6YnJBxw_xh-AAAAM4"]
[Sun Mar 01 16:05:34.622779 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:14787] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaPzTvKRPk6YnJBxw_xh_QAAAM4"]
[Sun Mar 01 16:05:35.160387 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:4932] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaPzT_KRPk6YnJBxw_xiAAAAANg"]
[Sun Mar 01 16:05:35.684628 2026] [:error] [pid 38034:tid 38044] [client 51.12.82.80:4846] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaPzTwxtfZjwlJok9K_RZgAAAQY"]
[Sun Mar 01 16:05:36.208758 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:13456] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaPzUPKRPk6YnJBxw_xiBAAAANg"]
[Sun Mar 01 16:05:36.737613 2026] [:error] [pid 38034:tid 38047] [client 51.12.82.80:5652] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaPzUAxtfZjwlJok9K_RaAAAAQk"]
[Sun Mar 01 16:05:37.269831 2026] [:error] [pid 7165:tid 7176] [client 51.12.82.80:33425] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaPzURRjCrA8qWBjgG83igAAAkk"]
[Sun Mar 01 16:05:37.797660 2026] [:error] [pid 44644:tid 44666] [client 51.12.82.80:19381] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaPzUZ3RJaXMcw3y9V-33QAAABM"]
[Sun Mar 01 16:05:38.341888 2026] [:error] [pid 7165:tid 7168] [client 51.12.82.80:6231] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaPzUhRjCrA8qWBjgG83iwAAAkE"]
[Sun Mar 01 16:05:38.903186 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:11402] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaPzUgxtfZjwlJok9K_RcAAAARE"]
[Sun Mar 01 16:05:39.439957 2026] [:error] [pid 44644:tid 44667] [client 51.12.82.80:7002] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaPzU53RJaXMcw3y9V-33gAAABQ"]
[Sun Mar 01 16:05:39.985849 2026] [:error] [pid 38241:tid 38245] [client 51.12.82.80:27766] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaPzU_KRPk6YnJBxw_xiEQAAAME"]
[Sun Mar 01 16:05:40.515797 2026] [:error] [pid 37032:tid 37052] [client 51.12.82.80:9461] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaPzVOu0U4o7eSImsVRRmQAAAZI"]
[Sun Mar 01 16:05:41.070517 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:16726] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaPzVfKRPk6YnJBxw_xiHAAAANg"]
[Sun Mar 01 16:05:41.593726 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:24601] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaPzVfKRPk6YnJBxw_xiHwAAAM4"]
[Sun Mar 01 16:05:42.133360 2026] [:error] [pid 37032:tid 37058] [client 51.12.82.80:8889] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaPzVuu0U4o7eSImsVRRoAAAAZg"]
[Sun Mar 01 16:05:42.683656 2026] [:error] [pid 38034:tid 38047] [client 51.12.82.80:19117] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaPzVgxtfZjwlJok9K_RcgAAAQk"]
[Sun Mar 01 16:05:43.229687 2026] [:error] [pid 44644:tid 44665] [client 51.12.82.80:17754] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaPzV53RJaXMcw3y9V-34gAAABI"]
[Sun Mar 01 16:05:43.769283 2026] [:error] [pid 44644:tid 44657] [client 51.12.82.80:19107] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaPzV53RJaXMcw3y9V-35AAAAAo"]
[Sun Mar 01 16:05:44.300871 2026] [:error] [pid 44644:tid 44647] [client 51.12.82.80:13567] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPzWJ3RJaXMcw3y9V-36QAAAAA"]
[Sun Mar 01 16:05:44.861716 2026] [:error] [pid 44644:tid 44651] [client 51.12.82.80:11023] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPzWJ3RJaXMcw3y9V-37QAAAAQ"]
[Sun Mar 01 16:05:45.424846 2026] [:error] [pid 44644:tid 44662] [client 51.12.82.80:11048] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPzWZ3RJaXMcw3y9V-38wAAAA8"]
[Sun Mar 01 16:05:45.963541 2026] [:error] [pid 44644:tid 44655] [client 51.12.82.80:16281] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaPzWZ3RJaXMcw3y9V-3-QAAAAg"]
[Sun Mar 01 16:05:46.488039 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:11597] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaPzWvKRPk6YnJBxw_xiKAAAANA"]
[Sun Mar 01 16:05:47.012133 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:7239] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaPzW_KRPk6YnJBxw_xiLgAAANA"]
[Sun Mar 01 16:05:47.535332 2026] [:error] [pid 41967:tid 41976] [client 51.12.82.80:12673] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaPzW4O1bqY181I02eGS7QAAAIc"]
[Sun Mar 01 16:05:48.059062 2026] [:error] [pid 7165:tid 7191] [client 51.12.82.80:23141] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaPzXBRjCrA8qWBjgG83jgAAAlg"]
[Sun Mar 01 16:05:48.581464 2026] [:error] [pid 7133:tid 7154] [client 51.12.82.80:17711] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaPzXPCtubh8pR64qB_KrQAAAFM"]
[Sun Mar 01 16:05:49.135385 2026] [:error] [pid 38034:tid 38040] [client 51.12.82.80:13421] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaPzXQxtfZjwlJok9K_RdgAAAQQ"]
[Sun Mar 01 16:05:49.657770 2026] [:error] [pid 40750:tid 40755] [client 51.12.82.80:7534] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaPzXQfBuk03yQKDyqvMegAAAcI"]
[Sun Mar 01 16:05:50.217685 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:23125] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaPzXvKRPk6YnJBxw_xiSwAAANg"]
[Sun Mar 01 16:05:50.741514 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:8042] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaPzXvKRPk6YnJBxw_xiVQAAAMc"]
[Sun Mar 01 16:05:51.266078 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:13388] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaPzX_KRPk6YnJBxw_xiXAAAAM4"]
[Sun Mar 01 16:05:51.799181 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:12906] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaPzX_KRPk6YnJBxw_xiYQAAAMc"]
[Sun Mar 01 16:05:52.350500 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:16438] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaPzYPKRPk6YnJBxw_xiZwAAANA"]
[Sun Mar 01 16:05:52.908272 2026] [:error] [pid 38034:tid 38056] [client 51.12.82.80:4402] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaPzYAxtfZjwlJok9K_ReQAAARI"]
[Sun Mar 01 16:05:53.438145 2026] [:error] [pid 37032:tid 37041] [client 51.12.82.80:13390] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaPzYeu0U4o7eSImsVRRtwAAAYc"]
[Sun Mar 01 16:05:53.971271 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:25795] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaPzYQxtfZjwlJok9K_RfQAAARg"]
[Sun Mar 01 16:05:54.545754 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:7547] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaPzYgxtfZjwlJok9K_RgAAAAQc"]
[Sun Mar 01 16:05:55.080783 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:12681] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaPzY_KRPk6YnJBxw_xifwAAAMY"]
[Sun Mar 01 16:05:55.608746 2026] [:error] [pid 7133:tid 7156] [client 51.12.82.80:12610] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaPzY_Ctubh8pR64qB_KrwAAAFU"]
[Sun Mar 01 16:05:56.164010 2026] [:error] [pid 7165:tid 7175] [client 51.12.82.80:16067] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaPzZBRjCrA8qWBjgG83lQAAAkg"]
[Sun Mar 01 16:05:56.689184 2026] [:error] [pid 44644:tid 44656] [client 51.12.82.80:17812] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaPzZJ3RJaXMcw3y9V-4DQAAAAk"]
[Sun Mar 01 16:05:57.224177 2026] [:error] [pid 37032:tid 37040] [client 51.12.82.80:12702] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaPzZeu0U4o7eSImsVRRvgAAAYY"]
[Sun Mar 01 16:05:57.770231 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:25803] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaPzZfKRPk6YnJBxw_xikgAAANg"]
[Sun Mar 01 16:05:58.388490 2026] [:error] [pid 38241:tid 38245] [client 51.12.82.80:13293] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaPzZvKRPk6YnJBxw_ximQAAAME"]
[Sun Mar 01 16:05:58.934922 2026] [:error] [pid 38241:tid 38252] [client 51.12.82.80:7278] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaPzZvKRPk6YnJBxw_xingAAAMg"]
[Sun Mar 01 16:05:59.504042 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:4354] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaPzZ_KRPk6YnJBxw_xiogAAAMY"]
[Sun Mar 01 16:06:00.064811 2026] [:error] [pid 38241:tid 38245] [client 51.12.82.80:13432] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaPzaPKRPk6YnJBxw_xipAAAAME"]
[Sun Mar 01 16:06:00.599687 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:15572] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaPzaPKRPk6YnJBxw_xiqwAAAM4"]
[Sun Mar 01 16:06:01.187167 2026] [:error] [pid 37032:tid 37058] [client 51.12.82.80:16389] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaPzaeu0U4o7eSImsVRRwwAAAZg"]
[Sun Mar 01 16:06:01.718024 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:11374] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPzafKRPk6YnJBxw_xiuAAAAMc"]
[Sun Mar 01 16:06:02.263320 2026] [:error] [pid 37032:tid 37055] [client 51.12.82.80:13264] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPzauu0U4o7eSImsVRRxQAAAZU"]
[Sun Mar 01 16:06:02.794826 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:35087] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPzavKRPk6YnJBxw_xiwQAAANg"]
[Sun Mar 01 16:06:03.320541 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:29088] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaPza_KRPk6YnJBxw_xixwAAANA"]
[Sun Mar 01 16:06:03.846514 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:7272] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPza_KRPk6YnJBxw_xiyQAAAM4"]
[Sun Mar 01 16:06:04.376679 2026] [:error] [pid 40750:tid 40763] [client 51.12.82.80:29094] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPzbAfBuk03yQKDyqvMfgAAAco"]
[Sun Mar 01 16:06:04.905754 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:7251] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPzbPKRPk6YnJBxw_xi0QAAAMY"]
[Sun Mar 01 16:06:05.438498 2026] [:error] [pid 38034:tid 38040] [client 51.12.82.80:17796] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaPzbQxtfZjwlJok9K_RowAAAQQ"]
[Sun Mar 01 16:06:05.963458 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:17794] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaPzbfKRPk6YnJBxw_xi2gAAAMc"]
[Sun Mar 01 16:06:06.502992 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:4406] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaPzbvKRPk6YnJBxw_xi3gAAAMY"]
[Sun Mar 01 16:06:07.025577 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:33379] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaPzb_KRPk6YnJBxw_xi4wAAANA"]
[Sun Mar 01 16:06:07.550434 2026] [:error] [pid 37032:tid 37046] [client 51.12.82.80:19880] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aaPzb-u0U4o7eSImsVRRyAAAAYw"]
[Sun Mar 01 16:06:08.073788 2026] [:error] [pid 38034:tid 38056] [client 51.12.82.80:17822] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaPzcAxtfZjwlJok9K_RrgAAARI"]
[Sun Mar 01 16:06:08.597108 2026] [:error] [pid 38034:tid 38040] [client 51.12.82.80:8041] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaPzcAxtfZjwlJok9K_RtgAAAQQ"]
[Sun Mar 01 16:06:09.127740 2026] [:error] [pid 44644:tid 44661] [client 51.12.82.80:2674] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaPzcZ3RJaXMcw3y9V-4JQAAAA4"]
[Sun Mar 01 16:06:09.653439 2026] [:error] [pid 44644:tid 44652] [client 51.12.82.80:29117] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaPzcZ3RJaXMcw3y9V-4KQAAAAU"]
[Sun Mar 01 16:06:10.246828 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 01 16:06:11.704247 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 01 16:06:11.970902 2026] [:error] [pid 38241:tid 38245] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Mar 01 16:06:12.235743 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sun Mar 01 16:06:13.032796 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sun Mar 01 16:06:13.301146 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sun Mar 01 16:06:13.834436 2026] [:error] [pid 38241:tid 38252] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sun Mar 01 16:06:14.102225 2026] [:error] [pid 38241:tid 38252] [client 51.12.82.80:2655] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Sun Mar 01 16:06:14.365053 2026] [:error] [pid 38241:tid 38252] [client 51.12.82.80:2655] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaPzdvKRPk6YnJBxw_xjEgAAAMg"]
[Sun Mar 01 16:06:14.925717 2026] [:error] [pid 37032:tid 37043] [client 51.12.82.80:12266] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaPzduu0U4o7eSImsVRRzgAAAYk"]
[Sun Mar 01 16:06:15.457221 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:35124] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaPzd_KRPk6YnJBxw_xjGgAAAMY"]
[Sun Mar 01 16:06:16.000724 2026] [:error] [pid 44644:tid 44647] [client 51.12.82.80:4219] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaPzd53RJaXMcw3y9V-4QgAAAAA"]
[Sun Mar 01 16:06:16.525259 2026] [:error] [pid 7165:tid 7176] [client 51.12.82.80:4211] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaPzeBRjCrA8qWBjgG83oQAAAkk"]
[Sun Mar 01 16:06:17.051233 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:14587] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaPzefKRPk6YnJBxw_xjJwAAAMc"]
[Sun Mar 01 16:06:17.575645 2026] [:error] [pid 7165:tid 7169] [client 51.12.82.80:7524] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaPzeRRjCrA8qWBjgG83pAAAAkI"]
[Sun Mar 01 16:06:18.100803 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:26018] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaPzevKRPk6YnJBxw_xjMwAAAM4"]
[Sun Mar 01 16:06:18.624321 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:4598] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaPzevKRPk6YnJBxw_xjNwAAAMY"]
[Sun Mar 01 16:06:19.149105 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:4359] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaPzewxtfZjwlJok9K_R2AAAAQU"]
[Sun Mar 01 16:06:19.674485 2026] [:error] [pid 44644:tid 44652] [client 51.12.82.80:12909] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaPze53RJaXMcw3y9V-4TAAAAAU"]
[Sun Mar 01 16:06:20.214966 2026] [:error] [pid 38241:tid 38260] [client 51.12.82.80:16435] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaPzfPKRPk6YnJBxw_xjRAAAANA"]
[Sun Mar 01 16:06:20.740563 2026] [:error] [pid 38034:tid 38056] [client 51.12.82.80:4355] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaPzfAxtfZjwlJok9K_R2wAAARI"]
[Sun Mar 01 16:06:21.266056 2026] [:error] [pid 38034:tid 38058] [client 51.12.82.80:25798] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaPzfQxtfZjwlJok9K_R3QAAARQ"]
[Sun Mar 01 16:06:21.794024 2026] [:error] [pid 37032:tid 37052] [client 51.12.82.80:12921] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaPzfeu0U4o7eSImsVRR1QAAAZI"]
[Sun Mar 01 16:06:22.333782 2026] [:error] [pid 44644:tid 44667] [client 51.12.82.80:8458] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaPzfp3RJaXMcw3y9V-4UgAAABQ"]
[Sun Mar 01 16:06:22.896410 2026] [:error] [pid 44644:tid 44667] [client 51.12.82.80:15064] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaPzfp3RJaXMcw3y9V-4VwAAABQ"]
[Sun Mar 01 16:06:23.446014 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:12616] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaPzfwxtfZjwlJok9K_R4QAAARg"]
[Sun Mar 01 16:06:23.992797 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:8483] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaPzfwxtfZjwlJok9K_R6AAAAQU"]
[Sun Mar 01 16:06:24.562893 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:33395] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaPzgPKRPk6YnJBxw_xjVgAAAMY"]
[Sun Mar 01 16:06:25.179855 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:4467] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaPzgfKRPk6YnJBxw_xjWwAAAM4"]
[Sun Mar 01 16:06:25.720751 2026] [:error] [pid 38241:tid 38252] [client 51.12.82.80:15750] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaPzgfKRPk6YnJBxw_xjYgAAAMg"]
[Sun Mar 01 16:06:26.288818 2026] [:error] [pid 38034:tid 38046] [client 51.12.82.80:8807] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaPzggxtfZjwlJok9K_R8gAAAQg"]
[Sun Mar 01 16:06:26.837845 2026] [:error] [pid 38034:tid 38057] [client 51.12.82.80:5554] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaPzggxtfZjwlJok9K_R9wAAARM"]
[Sun Mar 01 16:06:27.377985 2026] [:error] [pid 37032:tid 37034] [client 51.12.82.80:12561] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaPzg-u0U4o7eSImsVRR2wAAAYA"]
[Sun Mar 01 16:06:27.945702 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:8793] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaPzg_KRPk6YnJBxw_xjcgAAANg"]
[Sun Mar 01 16:06:28.521115 2026] [:error] [pid 7165:tid 7182] [client 51.12.82.80:35522] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaPzhBRjCrA8qWBjgG83pgAAAk8"]
[Sun Mar 01 16:06:29.048891 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:33407] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaPzhfKRPk6YnJBxw_xjewAAAMI"]
[Sun Mar 01 16:06:29.572885 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:12624] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaPzhfKRPk6YnJBxw_xjfgAAAMY"]
[Sun Mar 01 16:06:30.153049 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:2886] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaPzhvKRPk6YnJBxw_xjhQAAAMY"]
[Sun Mar 01 16:06:30.690994 2026] [:error] [pid 38241:tid 38245] [client 51.12.82.80:15557] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaPzhvKRPk6YnJBxw_xjjgAAAME"]
[Sun Mar 01 16:06:31.228587 2026] [:error] [pid 44644:tid 44652] [client 51.12.82.80:16384] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaPzh53RJaXMcw3y9V-4YwAAAAU"]
[Sun Mar 01 16:06:31.754807 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:8025] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaPzh_KRPk6YnJBxw_xjmQAAAM4"]
[Sun Mar 01 16:06:32.299353 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:8051] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaPziPKRPk6YnJBxw_xjngAAAMc"]
[Sun Mar 01 16:06:32.827474 2026] [:error] [pid 41342:tid 41359] [client 51.12.82.80:7515] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaPziI4iJ6RAS5CatDlLxAAAAg4"]
[Sun Mar 01 16:06:33.376805 2026] [:error] [pid 37032:tid 37048] [client 51.12.82.80:19822] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaPzieu0U4o7eSImsVRR4QAAAY4"]
[Sun Mar 01 16:06:33.907453 2026] [:error] [pid 38241:tid 38249] [client 51.12.82.80:8048] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaPzifKRPk6YnJBxw_xjoQAAAMU"]
[Sun Mar 01 16:06:34.433738 2026] [:error] [pid 38241:tid 38244] [client 51.12.82.80:5436] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaPzivKRPk6YnJBxw_xjpAAAAMA"]
[Sun Mar 01 16:06:34.983950 2026] [:error] [pid 44644:tid 44651] [client 51.12.82.80:10975] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaPzip3RJaXMcw3y9V-4bAAAAAQ"]
[Sun Mar 01 16:06:35.521925 2026] [:error] [pid 44644:tid 44671] [client 51.12.82.80:12111] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaPzi53RJaXMcw3y9V-4cAAAABg"]
[Sun Mar 01 16:06:36.046368 2026] [:error] [pid 44644:tid 44665] [client 51.12.82.80:4355] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzjJ3RJaXMcw3y9V-4dAAAABI"]
[Sun Mar 01 16:06:36.573864 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:16445] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzjAxtfZjwlJok9K_SGAAAAQc"]
[Sun Mar 01 16:06:37.104903 2026] [:error] [pid 38034:tid 38060] [client 51.12.82.80:4802] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzjQxtfZjwlJok9K_SHAAAARY"]
[Sun Mar 01 16:06:37.628724 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:18691] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaPzjfKRPk6YnJBxw_xjrAAAAM4"]
[Sun Mar 01 16:06:38.172958 2026] [:error] [pid 38241:tid 38244] [client 51.12.82.80:13297] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaPzjvKRPk6YnJBxw_xjsgAAAMA"]
[Sun Mar 01 16:06:38.697168 2026] [:error] [pid 38241:tid 38249] [client 51.12.82.80:14582] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaPzjvKRPk6YnJBxw_xjtAAAAMU"]
[Sun Mar 01 16:06:39.232827 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:26042] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaPzj_KRPk6YnJBxw_xjuAAAAMc"]
[Sun Mar 01 16:06:39.759830 2026] [:error] [pid 44644:tid 44653] [client 51.12.82.80:15798] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaPzj53RJaXMcw3y9V-4egAAAAY"]
[Sun Mar 01 16:06:40.293444 2026] [:error] [pid 7165:tid 7181] [client 51.12.82.80:7031] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaPzkBRjCrA8qWBjgG83sAAAAk4"]
[Sun Mar 01 16:06:40.853177 2026] [:error] [pid 38034:tid 38058] [client 51.12.82.80:19362] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaPzkAxtfZjwlJok9K_SHwAAARQ"]
[Sun Mar 01 16:06:41.407613 2026] [:error] [pid 7165:tid 7184] [client 51.12.82.80:7036] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaPzkRRjCrA8qWBjgG83swAAAlE"]
[Sun Mar 01 16:06:41.963599 2026] [:error] [pid 37032:tid 37045] [client 51.12.82.80:12628] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaPzkeu0U4o7eSImsVRR6QAAAYs"]
[Sun Mar 01 16:06:42.507651 2026] [:error] [pid 7165:tid 7191] [client 51.12.82.80:25845] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaPzkhRjCrA8qWBjgG83twAAAlg"]
[Sun Mar 01 16:06:43.035864 2026] [:error] [pid 7165:tid 7190] [client 51.12.82.80:19884] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaPzkxRjCrA8qWBjgG83ugAAAlc"]
[Sun Mar 01 16:06:43.561881 2026] [:error] [pid 38034:tid 38049] [client 51.12.82.80:14575] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaPzkwxtfZjwlJok9K_SIAAAAQs"]
[Sun Mar 01 16:06:44.100274 2026] [:error] [pid 44644:tid 44653] [client 51.12.82.80:4549] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaPzlJ3RJaXMcw3y9V-4iQAAAAY"]
[Sun Mar 01 16:06:44.623472 2026] [:error] [pid 37032:tid 37049] [client 51.12.82.80:4688] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaPzlOu0U4o7eSImsVRR7wAAAY8"]
[Sun Mar 01 16:06:45.176965 2026] [:error] [pid 44644:tid 44670] [client 51.12.82.80:19902] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaPzlZ3RJaXMcw3y9V-4jwAAABc"]
[Sun Mar 01 16:06:45.701833 2026] [:error] [pid 44644:tid 44655] [client 51.12.82.80:19352] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaPzlZ3RJaXMcw3y9V-4kgAAAAg"]
[Sun Mar 01 16:06:46.249397 2026] [:error] [pid 38034:tid 38060] [client 51.12.82.80:8645] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaPzlgxtfZjwlJok9K_SJwAAARY"]
[Sun Mar 01 16:06:46.774185 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:12004] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaPzlvKRPk6YnJBxw_xjyQAAAMI"]
[Sun Mar 01 16:06:47.311412 2026] [:error] [pid 38034:tid 38053] [client 51.12.82.80:12986] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaPzlwxtfZjwlJok9K_SLAAAAQ8"]
[Sun Mar 01 16:06:47.833840 2026] [:error] [pid 44644:tid 44666] [client 51.12.82.80:27751] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaPzl53RJaXMcw3y9V-4lgAAABM"]
[Sun Mar 01 16:06:48.388442 2026] [:error] [pid 41780:tid 41786] [client 51.12.82.80:11922] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aaPzmMONkVoocLIqzy0TuQAAA8M"]
[Sun Mar 01 16:06:48.914841 2026] [:error] [pid 38034:tid 38044] [client 51.12.82.80:6219] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaPzmAxtfZjwlJok9K_SLwAAAQY"]
[Sun Mar 01 16:06:49.438172 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:16037] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaPzmfKRPk6YnJBxw_xj3AAAAM4"]
[Sun Mar 01 16:06:49.965725 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:13250] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaPzmfKRPk6YnJBxw_xj3wAAAM4"]
[Sun Mar 01 16:06:50.522330 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:5391] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bak.php"] [unique_id "aaPzmgxtfZjwlJok9K_SNgAAARE"]
[Sun Mar 01 16:06:51.051546 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:11940] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaPzm_KRPk6YnJBxw_xj5wAAAMI"]
[Sun Mar 01 16:06:51.574965 2026] [:error] [pid 41967:tid 41972] [client 51.12.82.80:6263] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaPzm4O1bqY181I02eGS9wAAAIM"]
[Sun Mar 01 16:06:52.098581 2026] [:error] [pid 37032:tid 37040] [client 51.12.82.80:4680] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaPznOu0U4o7eSImsVRR_QAAAYY"]
[Sun Mar 01 16:06:52.622156 2026] [:error] [pid 7165:tid 7181] [client 51.12.82.80:9635] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaPznBRjCrA8qWBjgG83xwAAAk4"]
[Sun Mar 01 16:06:53.155085 2026] [:error] [pid 44644:tid 44657] [client 51.12.82.80:2903] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaPznZ3RJaXMcw3y9V-4nAAAAAo"]
[Sun Mar 01 16:06:53.680199 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:2893] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaPznfKRPk6YnJBxw_xj7gAAAM4"]
[Sun Mar 01 16:06:54.260015 2026] [:error] [pid 44644:tid 44668] [client 51.12.82.80:2938] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaPznp3RJaXMcw3y9V-4nQAAABU"]
[Sun Mar 01 16:06:54.816979 2026] [:error] [pid 41780:tid 41791] [client 51.12.82.80:24603] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aaPznsONkVoocLIqzy0TvgAAA8g"]
[Sun Mar 01 16:06:55.375105 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:8891] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaPzn_KRPk6YnJBxw_xj9AAAAM4"]
[Sun Mar 01 16:06:55.931762 2026] [:error] [pid 44644:tid 44652] [client 51.12.82.80:9608] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaPzn53RJaXMcw3y9V-4ogAAAAU"]
[Sun Mar 01 16:06:56.505055 2026] [:error] [pid 38241:tid 38261] [client 51.12.82.80:8846] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaPzoPKRPk6YnJBxw_xj_wAAANE"]
[Sun Mar 01 16:06:57.062889 2026] [:error] [pid 44644:tid 44655] [client 51.12.82.80:24638] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aaPzoZ3RJaXMcw3y9V-4pAAAAAg"]
[Sun Mar 01 16:06:57.599123 2026] [:error] [pid 38034:tid 38046] [client 51.12.82.80:22650] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaPzoQxtfZjwlJok9K_SQAAAAQg"]
[Sun Mar 01 16:06:58.138454 2026] [:error] [pid 38241:tid 38253] [client 51.12.82.80:22599] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaPzovKRPk6YnJBxw_xkCQAAAMk"]
[Sun Mar 01 16:06:58.686118 2026] [:error] [pid 38241:tid 38249] [client 51.12.82.80:26173] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaPzovKRPk6YnJBxw_xkDQAAAMU"]
[Sun Mar 01 16:06:59.252464 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:9622] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaPzo_KRPk6YnJBxw_xkEgAAANg"]
[Sun Mar 01 16:06:59.814742 2026] [:error] [pid 7165:tid 7171] [client 51.12.82.80:13076] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaPzoxRjCrA8qWBjgG831AAAAkQ"]
[Sun Mar 01 16:07:00.384903 2026] [:error] [pid 38034:tid 38057] [client 51.12.82.80:26162] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaPzpAxtfZjwlJok9K_STAAAARM"]
[Sun Mar 01 16:07:00.945100 2026] [:error] [pid 38241:tid 38244] [client 51.12.82.80:4705] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaPzpPKRPk6YnJBxw_xkGgAAAMA"]
[Sun Mar 01 16:07:01.476880 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:2895] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaPzpQxtfZjwlJok9K_SUwAAARE"]
[Sun Mar 01 16:07:02.036421 2026] [:error] [pid 38034:tid 38040] [client 51.12.82.80:22634] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaPzpgxtfZjwlJok9K_SVwAAAQQ"]
[Sun Mar 01 16:07:02.559949 2026] [:error] [pid 44644:tid 44652] [client 51.12.82.80:7901] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaPzpp3RJaXMcw3y9V-4qQAAAAU"]
[Sun Mar 01 16:07:03.100120 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:13060] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaPzpwxtfZjwlJok9K_SWwAAARE"]
[Sun Mar 01 16:07:03.623778 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:22606] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaPzpwxtfZjwlJok9K_SYAAAAQU"]
[Sun Mar 01 16:07:04.148471 2026] [:error] [pid 44644:tid 44666] [client 51.12.82.80:14438] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaPzqJ3RJaXMcw3y9V-4sAAAABM"]
[Sun Mar 01 16:07:04.671770 2026] [:error] [pid 38034:tid 38057] [client 51.12.82.80:5394] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaPzqAxtfZjwlJok9K_SZwAAARM"]
[Sun Mar 01 16:07:05.209187 2026] [:error] [pid 38034:tid 38044] [client 51.12.82.80:9446] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaPzqQxtfZjwlJok9K_SawAAAQY"]
[Sun Mar 01 16:07:05.743369 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:22626] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaPzqQxtfZjwlJok9K_SbgAAAQc"]
[Sun Mar 01 16:07:06.269049 2026] [:error] [pid 38034:tid 38047] [client 51.12.82.80:6945] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaPzqgxtfZjwlJok9K_ScgAAAQk"]
[Sun Mar 01 16:07:06.791838 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:7880] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaPzqvKRPk6YnJBxw_xkIwAAAMY"]
[Sun Mar 01 16:07:07.316728 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:26022] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaPzq_KRPk6YnJBxw_xkJgAAAM4"]
[Sun Mar 01 16:07:07.852781 2026] [:error] [pid 38241:tid 38261] [client 51.12.82.80:12134] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaPzq_KRPk6YnJBxw_xkKQAAANE"]
[Sun Mar 01 16:07:08.376704 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:7881] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaPzrAxtfZjwlJok9K_SdwAAAQU"]
[Sun Mar 01 16:07:08.903567 2026] [:error] [pid 41967:tid 41993] [client 51.12.82.80:4887] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaPzrIO1bqY181I02eGS-wAAAJg"]
[Sun Mar 01 16:07:09.427603 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:3009] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaPzrQxtfZjwlJok9K_SfwAAARg"]
[Sun Mar 01 16:07:09.961264 2026] [:error] [pid 37032:tid 37058] [client 51.12.82.80:11322] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaPzreu0U4o7eSImsVRSGAAAAZg"]
[Sun Mar 01 16:07:10.535887 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:4954] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaPzrvKRPk6YnJBxw_xkNgAAAM4"]
[Sun Mar 01 16:07:11.064360 2026] [:error] [pid 44644:tid 44656] [client 51.12.82.80:4920] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaPzr53RJaXMcw3y9V-43QAAAAk"]
[Sun Mar 01 16:07:11.596833 2026] [:error] [pid 38034:tid 38055] [client 51.12.82.80:15565] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaPzrwxtfZjwlJok9K_ShAAAARE"]
[Sun Mar 01 16:07:12.179902 2026] [:error] [pid 44644:tid 44652] [client 51.12.82.80:12408] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaPzsJ3RJaXMcw3y9V-44wAAAAU"]
[Sun Mar 01 16:07:12.728529 2026] [:error] [pid 44644:tid 44671] [client 51.12.82.80:12396] [client 51.12.82.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaPzsJ3RJaXMcw3y9V-45QAAABg"]
[Sun Mar 01 16:07:13.285034 2026] [:error] [pid 44644:tid 44670] [client 51.12.82.80:35104] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaPzsZ3RJaXMcw3y9V-45wAAABc"]
[Sun Mar 01 16:07:13.842961 2026] [:error] [pid 38034:tid 38050] [client 51.12.82.80:11291] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaPzsQxtfZjwlJok9K_SiwAAAQw"]
[Sun Mar 01 16:07:14.464940 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Mar 01 16:07:14.730041 2026] [:error] [pid 38241:tid 38249] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/hi.php
[Sun Mar 01 16:07:14.994486 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Sun Mar 01 16:07:15.275244 2026] [:error] [pid 38241:tid 38251] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sun Mar 01 16:07:15.810963 2026] [:error] [pid 38241:tid 38253] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Sun Mar 01 16:07:16.076223 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Mar 01 16:07:16.342723 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/autogooey.php
[Sun Mar 01 16:07:16.875847 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Sun Mar 01 16:07:17.140385 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:5424] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Mar 01 16:07:17.401716 2026] [:error] [pid 38241:tid 38253] [client 51.12.82.80:5424] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aaPztfKRPk6YnJBxw_xkYwAAAMk"]
[Sun Mar 01 16:07:17.933940 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:4594] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aaPztfKRPk6YnJBxw_xkaAAAAM4"]
[Sun Mar 01 16:07:18.479662 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:4767] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aaPztgxtfZjwlJok9K_SkAAAARg"]
[Sun Mar 01 16:07:19.005046 2026] [:error] [pid 38241:tid 38253] [client 51.12.82.80:15446] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aaPzt_KRPk6YnJBxw_xkcAAAAMk"]
[Sun Mar 01 16:07:19.530267 2026] [:error] [pid 7165:tid 7191] [client 51.12.82.80:17955] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaPztxRjCrA8qWBjgG833wAAAlg"]
[Sun Mar 01 16:07:20.054851 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:13502] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaPzuPKRPk6YnJBxw_xkdgAAAMI"]
[Sun Mar 01 16:07:20.579705 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:14530] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaPzuPKRPk6YnJBxw_xkfAAAAMY"]
[Sun Mar 01 16:07:21.104404 2026] [:error] [pid 38241:tid 38244] [client 51.12.82.80:22637] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123x.php"] [unique_id "aaPzufKRPk6YnJBxw_xkgQAAAMA"]
[Sun Mar 01 16:07:21.627714 2026] [:error] [pid 38241:tid 38249] [client 51.12.82.80:10738] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaPzufKRPk6YnJBxw_xkhgAAAMU"]
[Sun Mar 01 16:07:22.151036 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:15453] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaPzuvKRPk6YnJBxw_xkjQAAANg"]
[Sun Mar 01 16:07:22.684506 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:11795] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaPzuvKRPk6YnJBxw_xklwAAANg"]
[Sun Mar 01 16:07:23.212377 2026] [:error] [pid 38241:tid 38256] [client 51.12.82.80:3016] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aaPzu_KRPk6YnJBxw_xkmgAAAMw"]
[Sun Mar 01 16:07:23.737072 2026] [:error] [pid 44644:tid 44667] [client 51.12.82.80:3060] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aaPzu53RJaXMcw3y9V-47AAAABQ"]
[Sun Mar 01 16:07:24.290504 2026] [:error] [pid 38034:tid 38049] [client 51.12.82.80:30718] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aaPzvAxtfZjwlJok9K_SnAAAAQs"]
[Sun Mar 01 16:07:24.845292 2026] [:error] [pid 38034:tid 38050] [client 51.12.82.80:6594] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aaPzvAxtfZjwlJok9K_SoAAAAQw"]
[Sun Mar 01 16:07:25.374648 2026] [:error] [pid 38241:tid 38261] [client 51.12.82.80:12391] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aaPzvfKRPk6YnJBxw_xkpAAAANE"]
[Sun Mar 01 16:07:25.927894 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:35131] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaPzvfKRPk6YnJBxw_xkqwAAAM4"]
[Sun Mar 01 16:07:26.462508 2026] [:error] [pid 38034:tid 38040] [client 51.12.82.80:19113] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaPzvgxtfZjwlJok9K_SqAAAAQQ"]
[Sun Mar 01 16:07:27.008513 2026] [:error] [pid 41780:tid 41793] [client 51.12.82.80:19815] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaPzv8ONkVoocLIqzy0TxAAAA8o"]
[Sun Mar 01 16:07:27.533939 2026] [:error] [pid 42619:tid 42631] [client 51.12.82.80:2750] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aaPzvx_zUXcYaZE4AOeYAAAAAUo"]
[Sun Mar 01 16:07:28.075330 2026] [:error] [pid 38241:tid 38244] [client 51.12.82.80:6616] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaPzwPKRPk6YnJBxw_xkugAAAMA"]
[Sun Mar 01 16:07:28.609745 2026] [:error] [pid 41967:tid 41978] [client 51.12.82.80:19091] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaPzwIO1bqY181I02eGS_wAAAIk"]
[Sun Mar 01 16:07:29.145607 2026] [:error] [pid 44644:tid 44671] [client 51.12.82.80:13781] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaPzwZ3RJaXMcw3y9V-48QAAABg"]
[Sun Mar 01 16:07:29.677563 2026] [:error] [pid 7133:tid 7156] [client 51.12.82.80:6619] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaPzwfCtubh8pR64qB_KuwAAAFU"]
[Sun Mar 01 16:07:30.214173 2026] [:error] [pid 38241:tid 38249] [client 51.12.82.80:35113] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaPzwvKRPk6YnJBxw_xkxgAAAMU"]
[Sun Mar 01 16:07:30.786045 2026] [:error] [pid 37032:tid 37050] [client 51.12.82.80:11815] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaPzwuu0U4o7eSImsVRSKQAAAZA"]
[Sun Mar 01 16:07:31.326892 2026] [:error] [pid 7165:tid 7182] [client 51.12.82.80:17926] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaPzwxRjCrA8qWBjgG835QAAAk8"]
[Sun Mar 01 16:07:31.860105 2026] [:error] [pid 38034:tid 38050] [client 51.12.82.80:2703] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aaPzwwxtfZjwlJok9K_StgAAAQw"]
[Sun Mar 01 16:07:32.399075 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:33469] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaPzxAxtfZjwlJok9K_SuQAAARg"]
[Sun Mar 01 16:07:32.923612 2026] [:error] [pid 38241:tid 38256] [client 51.12.82.80:11779] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaPzxPKRPk6YnJBxw_xk2AAAAMw"]
[Sun Mar 01 16:07:33.456023 2026] [:error] [pid 41780:tid 41805] [client 51.12.82.80:2173] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaPzxcONkVoocLIqzy0T0AAAA9Y"]
[Sun Mar 01 16:07:33.991615 2026] [:error] [pid 37032:tid 37036] [client 51.12.82.80:19074] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aaPzxeu0U4o7eSImsVRSLgAAAYI"]
[Sun Mar 01 16:07:34.517336 2026] [:error] [pid 38034:tid 38062] [client 51.12.82.80:25460] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaPzxgxtfZjwlJok9K_SwAAAARg"]
[Sun Mar 01 16:07:35.065498 2026] [:error] [pid 44644:tid 44656] [client 51.12.82.80:13812] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaPzx53RJaXMcw3y9V-4-AAAAAk"]
[Sun Mar 01 16:07:35.590565 2026] [:error] [pid 44644:tid 44665] [client 51.12.82.80:19856] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaPzx53RJaXMcw3y9V-5AwAAABI"]
[Sun Mar 01 16:07:36.116095 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:5883] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "aaPzyPKRPk6YnJBxw_xk9wAAAMI"]
[Sun Mar 01 16:07:36.649297 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:12951] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaPzyAxtfZjwlJok9K_S1gAAAQc"]
[Sun Mar 01 16:07:37.188530 2026] [:error] [pid 38034:tid 38058] [client 51.12.82.80:13545] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaPzyQxtfZjwlJok9K_S2gAAARQ"]
[Sun Mar 01 16:07:37.722281 2026] [:error] [pid 38034:tid 38044] [client 51.12.82.80:7411] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaPzyQxtfZjwlJok9K_S4AAAAQY"]
[Sun Mar 01 16:07:38.271875 2026] [:error] [pid 38034:tid 38040] [client 51.12.82.80:8540] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miansha.php"] [unique_id "aaPzygxtfZjwlJok9K_S5QAAAQQ"]
[Sun Mar 01 16:07:38.809748 2026] [:error] [pid 44644:tid 44657] [client 51.12.82.80:2696] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaPzyp3RJaXMcw3y9V-5CAAAAAo"]
[Sun Mar 01 16:07:39.352598 2026] [:error] [pid 38241:tid 38246] [client 51.12.82.80:19095] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaPzy_KRPk6YnJBxw_xk_QAAAMI"]
[Sun Mar 01 16:07:39.905982 2026] [:error] [pid 37032:tid 37040] [client 51.12.82.80:4710] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaPzy-u0U4o7eSImsVRSNwAAAYY"]
[Sun Mar 01 16:07:40.448602 2026] [:error] [pid 37032:tid 37034] [client 51.12.82.80:12936] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaPzzOu0U4o7eSImsVRSOAAAAYA"]
[Sun Mar 01 16:07:40.983260 2026] [:error] [pid 37032:tid 37046] [client 51.12.82.80:5827] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaPzzOu0U4o7eSImsVRSOwAAAYw"]
[Sun Mar 01 16:07:41.519615 2026] [:error] [pid 38241:tid 38266] [client 51.12.82.80:7849] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaPzzfKRPk6YnJBxw_xlAgAAANY"]
[Sun Mar 01 16:07:42.043483 2026] [:error] [pid 37032:tid 37055] [client 51.12.82.80:7393] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaPzzuu0U4o7eSImsVRSPAAAAZU"]
[Sun Mar 01 16:07:42.567309 2026] [:error] [pid 44644:tid 44654] [client 51.12.82.80:7810] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaPzzp3RJaXMcw3y9V-5EQAAAAc"]
[Sun Mar 01 16:07:43.098519 2026] [:error] [pid 37032:tid 37039] [client 51.12.82.80:7380] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaPzz-u0U4o7eSImsVRSPgAAAYU"]
[Sun Mar 01 16:07:43.637806 2026] [:error] [pid 37032:tid 37043] [client 51.12.82.80:8528] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaPzz-u0U4o7eSImsVRSPwAAAYk"]
[Sun Mar 01 16:07:44.185906 2026] [:error] [pid 38241:tid 38253] [client 51.12.82.80:2828] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaPz0PKRPk6YnJBxw_xlDQAAAMk"]
[Sun Mar 01 16:07:44.716938 2026] [:error] [pid 38241:tid 38268] [client 51.12.82.80:2162] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaPz0PKRPk6YnJBxw_xlDwAAANg"]
[Sun Mar 01 16:07:45.264851 2026] [:error] [pid 38034:tid 38058] [client 51.12.82.80:5849] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaPz0QxtfZjwlJok9K_TFAAAARQ"]
[Sun Mar 01 16:07:45.836968 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:4718] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaPz0fKRPk6YnJBxw_xlFgAAAM4"]
[Sun Mar 01 16:07:46.391399 2026] [:error] [pid 38034:tid 38047] [client 51.12.82.80:9842] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaPz0gxtfZjwlJok9K_TIAAAAQk"]
[Sun Mar 01 16:07:46.941217 2026] [:error] [pid 38034:tid 38043] [client 51.12.82.80:5854] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaPz0gxtfZjwlJok9K_TJwAAAQU"]
[Sun Mar 01 16:07:47.472138 2026] [:error] [pid 44644:tid 44657] [client 51.12.82.80:15860] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaPz053RJaXMcw3y9V-5FgAAAAo"]
[Sun Mar 01 16:07:47.999047 2026] [:error] [pid 7165:tid 7173] [client 51.12.82.80:14534] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaPz0xRjCrA8qWBjgG836wAAAkY"]
[Sun Mar 01 16:07:48.528722 2026] [:error] [pid 40750:tid 40770] [client 51.12.82.80:15856] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaPz1AfBuk03yQKDyqvMhgAAAdE"]
[Sun Mar 01 16:07:49.052330 2026] [:error] [pid 44644:tid 44654] [client 51.12.82.80:15607] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaPz1Z3RJaXMcw3y9V-5GAAAAAc"]
[Sun Mar 01 16:07:49.582359 2026] [:error] [pid 42619:tid 42623] [client 51.12.82.80:15832] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaPz1R_zUXcYaZE4AOeYDQAAAUI"]
[Sun Mar 01 16:07:50.109180 2026] [:error] [pid 38241:tid 38258] [client 51.12.82.80:15828] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaPz1vKRPk6YnJBxw_xlHwAAAM4"]
[Sun Mar 01 16:07:50.633055 2026] [:error] [pid 37032:tid 37058] [client 51.12.82.80:7824] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaPz1uu0U4o7eSImsVRSQgAAAZg"]
[Sun Mar 01 16:07:51.157637 2026] [:error] [pid 7165:tid 7172] [client 51.12.82.80:7844] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaPz1xRjCrA8qWBjgG837wAAAkU"]
[Sun Mar 01 16:07:51.683685 2026] [:error] [pid 37032:tid 37037] [client 51.12.82.80:2845] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaPz1-u0U4o7eSImsVRSQwAAAYM"]
[Sun Mar 01 16:07:52.207753 2026] [:error] [pid 44644:tid 44665] [client 51.12.82.80:15391] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaPz2J3RJaXMcw3y9V-5HQAAABI"]
[Sun Mar 01 16:07:52.730400 2026] [:error] [pid 38241:tid 38245] [client 51.12.82.80:2121] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaPz2PKRPk6YnJBxw_xlKAAAAME"]
[Sun Mar 01 16:07:53.254890 2026] [:error] [pid 38034:tid 38060] [client 51.12.82.80:7388] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaPz2QxtfZjwlJok9K_TPgAAARY"]
[Sun Mar 01 16:07:53.779424 2026] [:error] [pid 38241:tid 38256] [client 51.12.82.80:15392] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaPz2fKRPk6YnJBxw_xlKgAAAMw"]
[Sun Mar 01 16:07:54.306466 2026] [:error] [pid 38034:tid 38057] [client 51.12.82.80:7391] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaPz2gxtfZjwlJok9K_TRgAAARM"]
[Sun Mar 01 16:07:54.881432 2026] [:error] [pid 38034:tid 38047] [client 51.12.82.80:11797] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaPz2gxtfZjwlJok9K_TTAAAAQk"]
[Sun Mar 01 16:07:55.420855 2026] [:error] [pid 38034:tid 38045] [client 51.12.82.80:2125] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaPz2wxtfZjwlJok9K_TUAAAAQc"]
[Sun Mar 01 16:07:55.951676 2026] [:error] [pid 44644:tid 44652] [client 51.12.82.80:15869] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaPz253RJaXMcw3y9V-5KgAAAAU"]
[Sun Mar 01 16:07:56.522283 2026] [:error] [pid 38034:tid 38057] [client 51.12.82.80:2512] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaPz3AxtfZjwlJok9K_TVAAAARM"]
[Sun Mar 01 16:07:57.090373 2026] [:error] [pid 38241:tid 38250] [client 51.12.82.80:4623] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaPz3fKRPk6YnJBxw_xlOwAAAMY"]
[Sun Mar 01 16:07:57.624170 2026] [:error] [pid 37032:tid 37053] [client 51.12.82.80:9838] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaPz3eu0U4o7eSImsVRSSwAAAZM"]
[Sun Mar 01 16:07:58.192207 2026] [:error] [pid 7165:tid 7171] [client 51.12.82.80:15864] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaPz3hRjCrA8qWBjgG838wAAAkQ"]
[Sun Mar 01 16:07:58.717544 2026] [:error] [pid 38034:tid 38050] [client 51.12.82.80:12127] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaPz3gxtfZjwlJok9K_TWAAAAQw"]
[Sun Mar 01 16:07:59.254139 2026] [:error] [pid 42619:tid 42627] [client 51.12.82.80:35829] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaPz3x_zUXcYaZE4AOeYEAAAAUY"]
[Sun Mar 01 16:07:59.809624 2026] [:error] [pid 44644:tid 44665] [client 51.12.82.80:12962] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaPz353RJaXMcw3y9V-5PAAAABI"]
[Sun Mar 01 16:08:00.378928 2026] [:error] [pid 38241:tid 38253] [client 51.12.82.80:7324] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaPz4PKRPk6YnJBxw_xlQwAAAMk"]
[Sun Mar 01 16:08:00.959164 2026] [:error] [pid 41967:tid 41971] [client 51.12.82.80:12504] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaPz4IO1bqY181I02eGTDAAAAII"]
[Sun Mar 01 16:08:01.495628 2026] [:error] [pid 38241:tid 38253] [client 51.12.82.80:2468] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaPz4fKRPk6YnJBxw_xlSgAAAMk"]
[Sun Mar 01 16:08:02.047548 2026] [:error] [pid 37032:tid 37050] [client 51.12.82.80:15382] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaPz4uu0U4o7eSImsVRSTwAAAZA"]
[Sun Mar 01 16:08:02.579214 2026] [:error] [pid 44644:tid 44663] [client 51.12.82.80:5540] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaPz4p3RJaXMcw3y9V-5UAAAABA"]
[Sun Mar 01 16:08:03.110311 2026] [:error] [pid 44644:tid 44655] [client 51.12.82.80:25928] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaPz453RJaXMcw3y9V-5VwAAAAg"]
[Sun Mar 01 16:08:03.632776 2026] [:error] [pid 37032:tid 37043] [client 51.12.82.80:12939] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaPz4-u0U4o7eSImsVRSVgAAAYk"]
[Sun Mar 01 16:08:04.155602 2026] [:error] [pid 37032:tid 37039] [client 51.12.82.80:9856] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaPz5Ou0U4o7eSImsVRSWQAAAYU"]
[Sun Mar 01 16:08:04.680152 2026] [:error] [pid 38034:tid 38040] [client 51.12.82.80:9912] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaPz5AxtfZjwlJok9K_TYQAAAQQ"]
[Sun Mar 01 16:08:05.204731 2026] [:error] [pid 38034:tid 38046] [client 51.12.82.80:21183] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaPz5QxtfZjwlJok9K_TZQAAAQg"]
[Sun Mar 01 16:08:05.727461 2026] [:error] [pid 38241:tid 38261] [client 51.12.82.80:35805] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaPz5fKRPk6YnJBxw_xlVAAAANE"]
[Sun Mar 01 16:08:06.262977 2026] [:error] [pid 38034:tid 38053] [client 51.12.82.80:35120] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaPz5gxtfZjwlJok9K_TawAAAQ8"]
[Sun Mar 01 16:08:06.787543 2026] [:error] [pid 38034:tid 38039] [client 51.12.82.80:2526] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaPz5gxtfZjwlJok9K_TcAAAAQM"]
[Sun Mar 01 16:08:07.312002 2026] [:error] [pid 38241:tid 38266] [client 51.12.82.80:2554] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaPz5_KRPk6YnJBxw_xlZwAAANY"]
[Sun Mar 01 16:08:07.837644 2026] [:error] [pid 44644:tid 44653] [client 51.12.82.80:13232] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaPz553RJaXMcw3y9V-5XwAAAAY"]
[Sun Mar 01 16:08:08.365151 2026] [:error] [pid 7133:tid 7137] [client 51.12.82.80:19841] [client 51.12.82.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaPz6PCtubh8pR64qB_KwgAAAEI"]
[Sun Mar 01 16:10:50.455722 2026] [:error] [pid 7165:tid 7169] [client 36.41.75.167:34334] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaP0ihRjCrA8qWBjgG85OwAAAkI"]
[Sun Mar 01 16:12:33.702967 2026] [:error] [pid 38241:tid 38246] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sun Mar 01 16:12:33.956843 2026] [:error] [pid 38241:tid 38259] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Mar 01 16:12:34.244738 2026] [:error] [pid 38241:tid 38248] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/qr.php
[Sun Mar 01 16:12:34.497142 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Sun Mar 01 16:12:34.749991 2026] [:error] [pid 38241:tid 38265] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sun Mar 01 16:12:35.177455 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Mar 01 16:12:35.447081 2026] [:error] [pid 38241:tid 38257] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun Mar 01 16:12:35.703441 2026] [:error] [pid 38241:tid 38259] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sun Mar 01 16:12:35.957344 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Sun Mar 01 16:12:36.245941 2026] [:error] [pid 38241:tid 38261] [client 52.169.206.229:2216] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sun Mar 01 16:12:36.592230 2026] [:error] [pid 38241:tid 38265] [client 52.169.206.229:2216] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaP09PKRPk6YnJBxw_xoXAAAANU"]
[Sun Mar 01 16:12:37.337239 2026] [:error] [pid 41967:tid 41972] [client 52.169.206.229:2549] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaP09YO1bqY181I02eGU7QAAAIM"]
[Sun Mar 01 16:12:38.246225 2026] [:error] [pid 7165:tid 7182] [client 52.169.206.229:2208] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaP09hRjCrA8qWBjgG87FwAAAk8"]
[Sun Mar 01 16:12:39.112484 2026] [:error] [pid 7133:tid 7145] [client 52.169.206.229:9407] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaP09_Ctubh8pR64qB_MVgAAAEo"]
[Sun Mar 01 16:12:39.986988 2026] [:error] [pid 7133:tid 7147] [client 52.169.206.229:12323] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaP09_Ctubh8pR64qB_MVwAAAEw"]
[Sun Mar 01 16:12:40.651728 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:4318] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaP0-BRjCrA8qWBjgG87GgAAAlA"]
[Sun Mar 01 16:12:41.945667 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:3954] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaP0-QfBuk03yQKDyqvQLQAAAcQ"]
[Sun Mar 01 16:12:42.520342 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:7105] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaP0-gfBuk03yQKDyqvQOwAAAdg"]
[Sun Mar 01 16:12:43.584292 2026] [:error] [pid 7133:tid 7141] [client 52.169.206.229:6003] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP0-_Ctubh8pR64qB_MWwAAAEY"]
[Sun Mar 01 16:12:44.485242 2026] [:error] [pid 7133:tid 7143] [client 52.169.206.229:6012] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP0_PCtubh8pR64qB_MXgAAAEg"]
[Sun Mar 01 16:12:45.231935 2026] [:error] [pid 44644:tid 44663] [client 52.169.206.229:11412] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP0_Z3RJaXMcw3y9V-7mAAAABA"]
[Sun Mar 01 16:12:46.176342 2026] [:error] [pid 40750:tid 40755] [client 52.169.206.229:7505] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP0_gfBuk03yQKDyqvQUgAAAcI"]
[Sun Mar 01 16:12:46.940002 2026] [:error] [pid 38034:tid 38059] [client 52.169.206.229:5979] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaP0_gxtfZjwlJok9K_WnQAAARU"]
[Sun Mar 01 16:12:47.571159 2026] [:error] [pid 41967:tid 41969] [client 52.169.206.229:2469] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaP0_4O1bqY181I02eGVKgAAAIA"]
[Sun Mar 01 16:12:48.637476 2026] [:error] [pid 7165:tid 7184] [client 52.169.206.229:2483] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaP1ABRjCrA8qWBjgG87MgAAAlE"]
[Sun Mar 01 16:12:49.371084 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:2193] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaP1AQfBuk03yQKDyqvQdgAAAdQ"]
[Sun Mar 01 16:12:50.033977 2026] [:error] [pid 41967:tid 41986] [client 52.169.206.229:11115] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaP1AoO1bqY181I02eGVOAAAAJE"]
[Sun Mar 01 16:12:50.959356 2026] [:error] [pid 44644:tid 44668] [client 52.169.206.229:11097] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaP1Ap3RJaXMcw3y9V-7mQAAABU"]
[Sun Mar 01 16:12:51.837104 2026] [:error] [pid 7133:tid 7149] [client 52.169.206.229:2482] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaP1A_Ctubh8pR64qB_MbgAAAE4"]
[Sun Mar 01 16:12:52.560762 2026] [:error] [pid 41967:tid 41971] [client 52.169.206.229:7494] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaP1BIO1bqY181I02eGVOwAAAII"]
[Sun Mar 01 16:12:53.278117 2026] [:error] [pid 38241:tid 38250] [client 52.169.206.229:2488] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaP1BfKRPk6YnJBxw_xoiAAAAMY"]
[Sun Mar 01 16:12:53.996484 2026] [:error] [pid 7165:tid 7168] [client 52.169.206.229:6325] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaP1BRRjCrA8qWBjgG87RAAAAkE"]
[Sun Mar 01 16:12:54.880801 2026] [:error] [pid 40750:tid 40753] [client 52.169.206.229:6317] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaP1BgfBuk03yQKDyqvQigAAAcA"]
[Sun Mar 01 16:12:56.201311 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:11428] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "aaP1CAfBuk03yQKDyqvQlgAAAdg"]
[Sun Mar 01 16:12:56.944303 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:7754] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP1CAfBuk03yQKDyqvQogAAAcQ"]
[Sun Mar 01 16:12:58.017132 2026] [:error] [pid 41967:tid 41972] [client 52.169.206.229:9383] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP1CoO1bqY181I02eGVTQAAAIM"]
[Sun Mar 01 16:12:59.170883 2026] [:error] [pid 33822:tid 33845] [client 52.169.206.229:2239] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP1C26W3ygu1YVssubLOgAAApU"]
[Sun Mar 01 16:12:59.859255 2026] [:error] [pid 33822:tid 33828] [client 52.169.206.229:1647] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP1C26W3ygu1YVssubLPQAAAoQ"]
[Sun Mar 01 16:13:00.655980 2026] [:error] [pid 7133:tid 7149] [client 52.169.206.229:8015] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaP1DPCtubh8pR64qB_MfQAAAE4"]
[Sun Mar 01 16:13:01.494586 2026] [:error] [pid 38241:tid 38250] [client 52.169.206.229:6021] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaP1DfKRPk6YnJBxw_xolwAAAMY"]
[Sun Mar 01 16:13:02.427570 2026] [:error] [pid 38241:tid 38265] [client 52.169.206.229:2218] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaP1DvKRPk6YnJBxw_xomgAAANU"]
[Sun Mar 01 16:13:03.312225 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:11131] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaP1DwfBuk03yQKDyqvQuQAAAdg"]
[Sun Mar 01 16:13:04.175418 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:4276] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaP1EAfBuk03yQKDyqvQvwAAAdg"]
[Sun Mar 01 16:13:05.388801 2026] [:error] [pid 7165:tid 7170] [client 52.169.206.229:2443] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaP1ERRjCrA8qWBjgG87ZwAAAkM"]
[Sun Mar 01 16:13:06.439323 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:11403] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaP1EgfBuk03yQKDyqvQ2AAAAcg"]
[Sun Mar 01 16:13:07.401896 2026] [:error] [pid 41967:tid 41975] [client 52.169.206.229:8431] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaP1E4O1bqY181I02eGVXgAAAIY"]
[Sun Mar 01 16:13:08.089781 2026] [:error] [pid 7133:tid 7136] [client 52.169.206.229:4345] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaP1FPCtubh8pR64qB_MpwAAAEE"]
[Sun Mar 01 16:13:08.948071 2026] [:error] [pid 40750:tid 40765] [client 52.169.206.229:12318] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaP1FAfBuk03yQKDyqvQ-gAAAcw"]
[Sun Mar 01 16:13:09.809928 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:4671] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaP1FQfBuk03yQKDyqvRCwAAAcQ"]
[Sun Mar 01 16:13:11.236141 2026] [:error] [pid 7165:tid 7188] [client 52.169.206.229:1631] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaP1FxRjCrA8qWBjgG87lwAAAlU"]
[Sun Mar 01 16:13:12.462138 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:9359] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaP1GPKRPk6YnJBxw_xowwAAAM4"]
[Sun Mar 01 16:13:13.190787 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:9529] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaP1GfKRPk6YnJBxw_xoygAAAM4"]
[Sun Mar 01 16:13:14.164864 2026] [:error] [pid 7133:tid 7143] [client 52.169.206.229:15899] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaP1GvCtubh8pR64qB_MwgAAAEg"]
[Sun Mar 01 16:13:14.959043 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:11108] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaP1GvKRPk6YnJBxw_xo1gAAANY"]
[Sun Mar 01 16:13:15.711071 2026] [:error] [pid 38241:tid 38267] [client 52.169.206.229:6062] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaP1G_KRPk6YnJBxw_xo4wAAANc"]
[Sun Mar 01 16:13:16.590462 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:8005] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaP1HAfBuk03yQKDyqvRKQAAAcg"]
[Sun Mar 01 16:13:17.538362 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:4328] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaP1HRRjCrA8qWBjgG87pgAAAlA"]
[Sun Mar 01 16:13:18.578778 2026] [:error] [pid 38241:tid 38259] [client 52.169.206.229:1605] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaP1HvKRPk6YnJBxw_xo9gAAAM8"]
[Sun Mar 01 16:13:19.670796 2026] [:error] [pid 40750:tid 40767] [client 52.169.206.229:4643] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaP1HwfBuk03yQKDyqvRPgAAAc4"]
[Sun Mar 01 16:13:20.548205 2026] [:error] [pid 44644:tid 44664] [client 52.169.206.229:6672] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaP1IJ3RJaXMcw3y9V-7oAAAABE"]
[Sun Mar 01 16:13:22.195775 2026] [:error] [pid 7165:tid 7176] [client 52.169.206.229:9503] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaP1IhRjCrA8qWBjgG87sAAAAkk"]
[Sun Mar 01 16:13:23.732361 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:6308] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "aaP1IxRjCrA8qWBjgG87sQAAAlA"]
[Sun Mar 01 16:13:24.802499 2026] [:error] [pid 38241:tid 38250] [client 52.169.206.229:1657] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaP1JPKRPk6YnJBxw_xpFQAAAMY"]
[Sun Mar 01 16:13:25.877487 2026] [:error] [pid 7165:tid 7175] [client 52.169.206.229:4242] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaP1JRRjCrA8qWBjgG87uAAAAkg"]
[Sun Mar 01 16:13:26.976440 2026] [:error] [pid 38241:tid 38265] [client 52.169.206.229:4649] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaP1JvKRPk6YnJBxw_xpIgAAANU"]
[Sun Mar 01 16:13:28.216064 2026] [:error] [pid 7133:tid 7137] [client 52.169.206.229:6019] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aaP1KPCtubh8pR64qB_NLAAAAEI"]
[Sun Mar 01 16:13:29.437309 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:9357] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaP1KfKRPk6YnJBxw_xpLQAAAM4"]
[Sun Mar 01 16:13:30.261149 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:7802] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaP1KgfBuk03yQKDyqvRugAAAdQ"]
[Sun Mar 01 16:13:31.158104 2026] [:error] [pid 33822:tid 33840] [client 52.169.206.229:8009] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaP1K26W3ygu1YVssubLTgAAApA"]
[Sun Mar 01 16:13:31.988428 2026] [:error] [pid 37032:tid 37041] [client 52.169.206.229:6702] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaP1K-u0U4o7eSImsVRT8gAAAYc"]
[Sun Mar 01 16:13:33.008260 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:5985] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaP1LQfBuk03yQKDyqvRxgAAAdE"]
[Sun Mar 01 16:13:34.005714 2026] [:error] [pid 38241:tid 38246] [client 52.169.206.229:4627] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaP1LvKRPk6YnJBxw_xpPwAAAMI"]
[Sun Mar 01 16:13:34.885510 2026] [:error] [pid 7165:tid 7173] [client 52.169.206.229:7781] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaP1LhRjCrA8qWBjgG88AQAAAkY"]
[Sun Mar 01 16:13:35.823457 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:13458] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaP1LxRjCrA8qWBjgG88CwAAAkU"]
[Sun Mar 01 16:13:36.912315 2026] [:error] [pid 7165:tid 7182] [client 52.169.206.229:2458] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Mar 01 16:13:37.416822 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:2458] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Mar 01 16:13:37.756449 2026] [:error] [pid 7165:tid 7188] [client 52.169.206.229:2458] [client 52.169.206.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaP1MRRjCrA8qWBjgG88LgAAAlU"]
[Sun Mar 01 16:13:39.430659 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:1660] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Sun Mar 01 16:13:39.694089 2026] [:error] [pid 7165:tid 7170] [client 52.169.206.229:1660] [client 52.169.206.229] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.169.206.229, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaP1MxRjCrA8qWBjgG88QQAAAkM"]
[Sun Mar 01 16:13:39.697186 2026] [:error] [pid 7165:tid 7170] [client 52.169.206.229:1660] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 16:13:40.045582 2026] [:error] [pid 7165:tid 7190] [client 52.169.206.229:1660] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sun Mar 01 16:13:40.300916 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:1660] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Mar 01 16:13:40.674402 2026] [:error] [pid 7165:tid 7181] [client 52.169.206.229:1660] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaP1NBRjCrA8qWBjgG88SAAAAk4"]
[Sun Mar 01 16:13:41.818041 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:5957] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaP1NQfBuk03yQKDyqvR7AAAAdQ"]
[Sun Mar 01 16:13:42.466306 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:6310] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaP1NgfBuk03yQKDyqvR7gAAAdg"]
[Sun Mar 01 16:13:43.457600 2026] [:error] [pid 7165:tid 7184] [client 52.169.206.229:7779] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaP1NxRjCrA8qWBjgG88UQAAAlE"]
[Sun Mar 01 16:13:44.284304 2026] [:error] [pid 38241:tid 38246] [client 52.169.206.229:7739] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaP1OPKRPk6YnJBxw_xpYgAAAMI"]
[Sun Mar 01 16:13:45.242593 2026] [:error] [pid 38034:tid 38053] [client 52.169.206.229:5977] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaP1OQxtfZjwlJok9K_WtwAAAQ8"]
[Sun Mar 01 16:13:47.184380 2026] [:error] [pid 37032:tid 37044] [client 52.169.206.229:8429] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaP1O-u0U4o7eSImsVRT_AAAAYo"]
[Sun Mar 01 16:14:19.829337 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:11427] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaP1WwfBuk03yQKDyqvScQAAAdE"]
[Sun Mar 01 16:14:21.058018 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:11369] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaP1XfKRPk6YnJBxw_xp_gAAANY"]
[Sun Mar 01 16:14:21.927663 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:7875] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaP1XfKRPk6YnJBxw_xqBQAAANY"]
[Sun Mar 01 16:14:22.892250 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:6045] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aaP1XgfBuk03yQKDyqvSfQAAAcg"]
[Sun Mar 01 16:14:23.896929 2026] [:error] [pid 41967:tid 41991] [client 52.169.206.229:5972] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaP1X4O1bqY181I02eGV6QAAAJY"]
[Sun Mar 01 16:14:24.856888 2026] [:error] [pid 7133:tid 7145] [client 52.169.206.229:2556] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaP1YPCtubh8pR64qB_OCQAAAEo"]
[Sun Mar 01 16:14:25.799625 2026] [:error] [pid 38241:tid 38244] [client 52.169.206.229:6020] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaP1YfKRPk6YnJBxw_xqHAAAAMA"]
[Sun Mar 01 16:14:26.908645 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:6033] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aaP1YgfBuk03yQKDyqvSiAAAAcQ"]
[Sun Mar 01 16:14:27.925853 2026] [:error] [pid 40750:tid 40753] [client 52.169.206.229:6054] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaP1YwfBuk03yQKDyqvSjwAAAcA"]
[Sun Mar 01 16:14:28.763228 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:6255] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaP1ZPKRPk6YnJBxw_xqKwAAANY"]
[Sun Mar 01 16:14:29.604037 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:11406] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaP1ZfKRPk6YnJBxw_xqNQAAANY"]
[Sun Mar 01 16:14:30.468876 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:6686] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aaP1ZgfBuk03yQKDyqvSlwAAAcg"]
[Sun Mar 01 16:14:31.413041 2026] [:error] [pid 38034:tid 38046] [client 52.169.206.229:5583] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaP1ZwxtfZjwlJok9K_WzQAAAQg"]
[Sun Mar 01 16:14:32.085541 2026] [:error] [pid 33822:tid 33834] [client 52.169.206.229:6226] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaP1aG6W3ygu1YVssubLgAAAAoo"]
[Sun Mar 01 16:14:32.747821 2026] [:error] [pid 38241:tid 38244] [client 52.169.206.229:4323] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaP1aPKRPk6YnJBxw_xqPwAAAMA"]
[Sun Mar 01 16:14:33.775318 2026] [:error] [pid 40750:tid 40771] [client 52.169.206.229:6212] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "aaP1aQfBuk03yQKDyqvSnwAAAdI"]
[Sun Mar 01 16:14:34.770933 2026] [:error] [pid 7133:tid 7150] [client 52.169.206.229:6294] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaP1avCtubh8pR64qB_OHgAAAE8"]
[Sun Mar 01 16:14:35.322943 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:2416] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaP1a_KRPk6YnJBxw_xqQgAAANY"]
[Sun Mar 01 16:14:36.262170 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:1607] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaP1bAfBuk03yQKDyqvSpQAAAdE"]
[Sun Mar 01 16:14:37.090522 2026] [:error] [pid 7165:tid 7184] [client 52.169.206.229:15333] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aaP1bRRjCrA8qWBjgG89EwAAAlE"]
[Sun Mar 01 16:14:38.009198 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:1640] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaP1bgfBuk03yQKDyqvSqwAAAcQ"]
[Sun Mar 01 16:14:38.703754 2026] [:error] [pid 40750:tid 40771] [client 52.169.206.229:6681] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaP1bgfBuk03yQKDyqvSsgAAAdI"]
[Sun Mar 01 16:14:39.639252 2026] [:error] [pid 7133:tid 7158] [client 52.169.206.229:15320] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaP1b_Ctubh8pR64qB_OKgAAAFc"]
[Sun Mar 01 16:14:40.696614 2026] [:error] [pid 38241:tid 38255] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 01 16:14:41.102054 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sun Mar 01 16:14:41.445970 2026] [:error] [pid 38241:tid 38265] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Sun Mar 01 16:14:41.768523 2026] [:error] [pid 38241:tid 38255] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Mar 01 16:14:42.068712 2026] [:error] [pid 38241:tid 38265] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sun Mar 01 16:14:42.337341 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sun Mar 01 16:14:42.760740 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Mar 01 16:14:43.032243 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Sun Mar 01 16:14:43.621771 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sun Mar 01 16:14:43.912687 2026] [:error] [pid 38241:tid 38255] [client 52.169.206.229:2558] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Sun Mar 01 16:14:44.174459 2026] [:error] [pid 38241:tid 38260] [client 52.169.206.229:2558] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaP1dPKRPk6YnJBxw_xqYAAAANA"]
[Sun Mar 01 16:14:45.011429 2026] [:error] [pid 38241:tid 38255] [client 52.169.206.229:9517] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaP1dfKRPk6YnJBxw_xqZwAAAMs"]
[Sun Mar 01 16:14:46.088319 2026] [:error] [pid 44644:tid 44664] [client 52.169.206.229:2517] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaP1dp3RJaXMcw3y9V-7rQAAABE"]
[Sun Mar 01 16:14:47.127368 2026] [:error] [pid 7165:tid 7184] [client 52.169.206.229:11758] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aaP1dxRjCrA8qWBjgG89OwAAAlE"]
[Sun Mar 01 16:14:48.343355 2026] [:error] [pid 40750:tid 40771] [client 52.169.206.229:9491] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaP1eAfBuk03yQKDyqvS0gAAAdI"]
[Sun Mar 01 16:14:49.285544 2026] [:error] [pid 7165:tid 7188] [client 52.169.206.229:2410] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaP1eRRjCrA8qWBjgG89QgAAAlU"]
[Sun Mar 01 16:14:50.146714 2026] [:error] [pid 7165:tid 7176] [client 52.169.206.229:9356] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaP1ehRjCrA8qWBjgG89RAAAAkk"]
[Sun Mar 01 16:14:51.263589 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:1629] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aaP1e_KRPk6YnJBxw_xqewAAAM4"]
[Sun Mar 01 16:14:52.084324 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:2415] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaP1fBRjCrA8qWBjgG89SwAAAkA"]
[Sun Mar 01 16:14:53.263377 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:11297] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaP1fRRjCrA8qWBjgG89VAAAAkA"]
[Sun Mar 01 16:14:54.646133 2026] [:error] [pid 38034:tid 38038] [client 52.169.206.229:8210] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaP1fgxtfZjwlJok9K_W2QAAAQI"]
[Sun Mar 01 16:14:55.258921 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:1621] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaP1f_KRPk6YnJBxw_xqkgAAAMg"]
[Sun Mar 01 16:14:56.023165 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:6695] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaP1gAfBuk03yQKDyqvS5AAAAdQ"]
[Sun Mar 01 16:14:56.898384 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:6024] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaP1gAfBuk03yQKDyqvS6wAAAdE"]
[Sun Mar 01 16:14:57.697092 2026] [:error] [pid 40750:tid 40763] [client 52.169.206.229:17393] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaP1gQfBuk03yQKDyqvS8QAAAco"]
[Sun Mar 01 16:14:58.880883 2026] [:error] [pid 33822:tid 33846] [client 52.169.206.229:7523] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaP1gm6W3ygu1YVssubLlQAAApY"]
[Sun Mar 01 16:15:00.134092 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:1118] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaP1hAfBuk03yQKDyqvTAQAAAdQ"]
[Sun Mar 01 16:15:01.152007 2026] [:error] [pid 7165:tid 7176] [client 52.169.206.229:15266] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaP1hRRjCrA8qWBjgG89agAAAkk"]
[Sun Mar 01 16:15:01.873277 2026] [:error] [pid 7133:tid 7156] [client 52.169.206.229:15285] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaP1hfCtubh8pR64qB_OPgAAAFU"]
[Sun Mar 01 16:15:02.734953 2026] [:error] [pid 42619:tid 42642] [client 52.169.206.229:6684] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaP1hh_zUXcYaZE4AOeYiAAAAVU"]
[Sun Mar 01 16:15:03.846077 2026] [:error] [pid 38241:tid 38260] [client 52.169.206.229:11075] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaP1h_KRPk6YnJBxw_xqtwAAANA"]
[Sun Mar 01 16:15:05.045675 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:6216] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaP1iQfBuk03yQKDyqvTHgAAAdE"]
[Sun Mar 01 16:15:06.034080 2026] [:error] [pid 38241:tid 38265] [client 52.169.206.229:7756] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaP1ivKRPk6YnJBxw_xqvAAAANU"]
[Sun Mar 01 16:15:07.178320 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:6261] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "aaP1iwfBuk03yQKDyqvTJgAAAcQ"]
[Sun Mar 01 16:15:08.117230 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:12200] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaP1jBRjCrA8qWBjgG89jAAAAkU"]
[Sun Mar 01 16:15:09.149253 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:8223] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaP1jRRjCrA8qWBjgG89lQAAAkU"]
[Sun Mar 01 16:15:10.007594 2026] [:error] [pid 7133:tid 7145] [client 52.169.206.229:2413] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaP1jvCtubh8pR64qB_ORwAAAEo"]
[Sun Mar 01 16:15:10.787017 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:8192] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaP1jgfBuk03yQKDyqvTNgAAAcQ"]
[Sun Mar 01 16:15:11.407648 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:8387] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaP1j_KRPk6YnJBxw_xq0AAAAM4"]
[Sun Mar 01 16:15:12.194829 2026] [:error] [pid 38241:tid 38256] [client 52.169.206.229:17374] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaP1kPKRPk6YnJBxw_xq1QAAAMw"]
[Sun Mar 01 16:15:13.291071 2026] [:error] [pid 38241:tid 38260] [client 52.169.206.229:4053] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaP1kfKRPk6YnJBxw_xq4QAAANA"]
[Sun Mar 01 16:15:14.141776 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:9525] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaP1kgfBuk03yQKDyqvTPgAAAdQ"]
[Sun Mar 01 16:15:14.809084 2026] [:error] [pid 7165:tid 7190] [client 52.169.206.229:3014] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP1khRjCrA8qWBjgG89rwAAAlc"]
[Sun Mar 01 16:15:15.962513 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:3043] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP1kwfBuk03yQKDyqvTRAAAAcg"]
[Sun Mar 01 16:15:17.185190 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:5606] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP1lQfBuk03yQKDyqvTTAAAAdE"]
[Sun Mar 01 16:15:18.019622 2026] [:error] [pid 7165:tid 7181] [client 52.169.206.229:2547] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaP1lhRjCrA8qWBjgG89vAAAAk4"]
[Sun Mar 01 16:15:19.296328 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:8244] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaP1lxRjCrA8qWBjgG89wQAAAlA"]
[Sun Mar 01 16:15:20.114309 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:8417] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaP1mPKRPk6YnJBxw_xq9wAAANY"]
[Sun Mar 01 16:15:22.066260 2026] [:error] [pid 33822:tid 33831] [client 52.169.206.229:15256] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaP1mm6W3ygu1YVssubLngAAAoc"]
[Sun Mar 01 16:15:22.891661 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:15330] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aaP1mgfBuk03yQKDyqvTeAAAAdQ"]
[Sun Mar 01 16:15:23.707085 2026] [:error] [pid 41967:tid 41975] [client 52.169.206.229:12203] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaP1m4O1bqY181I02eGWUQAAAIY"]
[Sun Mar 01 16:15:24.742918 2026] [:error] [pid 7165:tid 7175] [client 52.169.206.229:9497] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaP1nBRjCrA8qWBjgG89ygAAAkg"]
[Sun Mar 01 16:15:25.558738 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:12179] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaP1nRRjCrA8qWBjgG89zQAAAkU"]
[Sun Mar 01 16:15:26.514695 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:6691] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aaP1ngfBuk03yQKDyqvThgAAAcg"]
[Sun Mar 01 16:15:27.267777 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:17073] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaP1nwfBuk03yQKDyqvTkAAAAdE"]
[Sun Mar 01 16:15:28.819447 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:4316] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaP1oAfBuk03yQKDyqvTnQAAAdQ"]
[Sun Mar 01 16:15:29.778988 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:1623] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaP1ofKRPk6YnJBxw_xrDAAAANY"]
[Sun Mar 01 16:15:31.127814 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:12515] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "aaP1owfBuk03yQKDyqvTqgAAAdg"]
[Sun Mar 01 16:15:31.968438 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:6704] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaP1owfBuk03yQKDyqvTsgAAAcQ"]
[Sun Mar 01 16:15:32.934345 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:9402] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaP1pPKRPk6YnJBxw_xrIgAAAMg"]
[Sun Mar 01 16:15:33.689102 2026] [:error] [pid 41342:tid 41349] [client 52.169.206.229:6709] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaP1pY4iJ6RAS5CatDlMdAAAAgQ"]
[Sun Mar 01 16:15:34.978412 2026] [:error] [pid 40750:tid 40771] [client 52.169.206.229:15916] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaP1pgfBuk03yQKDyqvTwQAAAdI"]
[Sun Mar 01 16:15:36.369858 2026] [:error] [pid 41967:tid 41969] [client 52.169.206.229:5965] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaP1qIO1bqY181I02eGWZAAAAIA"]
[Sun Mar 01 16:15:37.382330 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:6034] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaP1qfKRPk6YnJBxw_xrLQAAAMg"]
[Sun Mar 01 16:15:38.554648 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:9508] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaP1qgfBuk03yQKDyqvT1AAAAdE"]
[Sun Mar 01 16:15:39.379312 2026] [:error] [pid 37032:tid 37037] [client 52.169.206.229:8442] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "aaP1q-u0U4o7eSImsVRUFwAAAYM"]
[Sun Mar 01 16:15:40.217433 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:2420] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaP1rBRjCrA8qWBjgG899wAAAlA"]
[Sun Mar 01 16:15:40.936041 2026] [:error] [pid 7133:tid 7149] [client 52.169.206.229:15318] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaP1rPCtubh8pR64qB_OagAAAE4"]
[Sun Mar 01 16:15:41.588482 2026] [:error] [pid 7165:tid 7174] [client 52.169.206.229:13382] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaP1rRRjCrA8qWBjgG8-BAAAAkc"]
[Sun Mar 01 16:15:42.694690 2026] [:error] [pid 33822:tid 33844] [client 52.169.206.229:9509] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaP1rm6W3ygu1YVssubLrAAAApQ"]
[Sun Mar 01 16:15:43.555279 2026] [:error] [pid 38034:tid 38047] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Sun Mar 01 16:15:43.950667 2026] [:error] [pid 38034:tid 38040] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/fleen.php
[Sun Mar 01 16:15:44.555254 2026] [:error] [pid 38034:tid 38055] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 01 16:15:44.871288 2026] [:error] [pid 38034:tid 38048] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 01 16:15:45.245515 2026] [:error] [pid 38034:tid 38044] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 01 16:15:45.580835 2026] [:error] [pid 38034:tid 38038] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 01 16:15:45.853690 2026] [:error] [pid 38034:tid 38059] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Mar 01 16:15:46.116987 2026] [:error] [pid 38034:tid 38060] [client 52.169.206.229:5966] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sun Mar 01 16:15:46.960847 2026] [:error] [pid 38034:tid 38053] [client 52.169.206.229:5966] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaP1sgxtfZjwlJok9K_W6wAAAQ8"]
[Sun Mar 01 16:15:47.599041 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:5956] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaP1sxRjCrA8qWBjgG8-LAAAAlA"]
[Sun Mar 01 16:15:48.250003 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:9473] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaP1tBRjCrA8qWBjgG8-NgAAAlA"]
[Sun Mar 01 16:15:49.155319 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:17391] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaP1tRRjCrA8qWBjgG8-QAAAAlA"]
[Sun Mar 01 16:15:49.807621 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:11301] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaP1tRRjCrA8qWBjgG8-SgAAAkA"]
[Sun Mar 01 16:15:50.408489 2026] [:error] [pid 7133:tid 7154] [client 52.169.206.229:6239] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaP1tvCtubh8pR64qB_OcAAAAFM"]
[Sun Mar 01 16:15:51.352256 2026] [:error] [pid 7133:tid 7139] [client 52.169.206.229:12162] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaP1t_Ctubh8pR64qB_OcgAAAEQ"]
[Sun Mar 01 16:15:52.102282 2026] [:error] [pid 7133:tid 7142] [client 52.169.206.229:6028] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaP1uPCtubh8pR64qB_OdAAAAEc"]
[Sun Mar 01 16:15:52.977641 2026] [:error] [pid 38241:tid 38260] [client 52.169.206.229:4455] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aaP1uPKRPk6YnJBxw_xrTgAAANA"]
[Sun Mar 01 16:15:53.531308 2026] [:error] [pid 41780:tid 41805] [client 52.169.206.229:10970] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aaP1ucONkVoocLIqzy0UPAAAA9Y"]
[Sun Mar 01 16:15:54.472142 2026] [:error] [pid 38034:tid 38044] [client 52.169.206.229:9501] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aaP1ugxtfZjwlJok9K_W9AAAAQY"]
[Sun Mar 01 16:15:55.332472 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:2426] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aaP1uxRjCrA8qWBjgG8-dAAAAlA"]
[Sun Mar 01 16:15:56.146101 2026] [:error] [pid 7165:tid 7175] [client 52.169.206.229:10977] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaP1vBRjCrA8qWBjgG8-fwAAAkg"]
[Sun Mar 01 16:15:57.060532 2026] [:error] [pid 38241:tid 38266] [client 52.169.206.229:8035] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaP1vfKRPk6YnJBxw_xrVAAAANY"]
[Sun Mar 01 16:15:57.779358 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:10330] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaP1vRRjCrA8qWBjgG8-iAAAAkA"]
[Sun Mar 01 16:15:58.536201 2026] [:error] [pid 7133:tid 7156] [client 52.169.206.229:6057] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aaP1vvCtubh8pR64qB_OdwAAAFU"]
[Sun Mar 01 16:15:59.414039 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:4344] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaP1v_KRPk6YnJBxw_xrWQAAAM4"]
[Sun Mar 01 16:16:00.235794 2026] [:error] [pid 38241:tid 38247] [client 52.169.206.229:17373] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaP1wPKRPk6YnJBxw_xrYwAAAMM"]
[Sun Mar 01 16:16:01.037641 2026] [:error] [pid 38241:tid 38247] [client 52.169.206.229:4310] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaP1wfKRPk6YnJBxw_xraQAAAMM"]
[Sun Mar 01 16:16:01.770383 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:15277] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaP1wRRjCrA8qWBjgG8-nwAAAkU"]
[Sun Mar 01 16:16:02.527086 2026] [:error] [pid 38241:tid 38247] [client 52.169.206.229:1645] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaP1wvKRPk6YnJBxw_xrcgAAAMM"]
[Sun Mar 01 16:16:03.954786 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:6676] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaP1wwfBuk03yQKDyqvUCgAAAcQ"]
[Sun Mar 01 16:16:04.663008 2026] [:error] [pid 7133:tid 7152] [client 52.169.206.229:6674] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaP1xPCtubh8pR64qB_OeQAAAFE"]
[Sun Mar 01 16:16:05.350543 2026] [:error] [pid 33822:tid 33838] [client 52.169.206.229:6693] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaP1xW6W3ygu1YVssubLwgAAAo4"]
[Sun Mar 01 16:16:05.919990 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:10998] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaP1xQfBuk03yQKDyqvUFgAAAdg"]
[Sun Mar 01 16:16:06.817609 2026] [:error] [pid 7165:tid 7190] [client 52.169.206.229:4648] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaP1xhRjCrA8qWBjgG8-xgAAAlc"]
[Sun Mar 01 16:16:07.606123 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:11396] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaP1xwfBuk03yQKDyqvUIQAAAdQ"]
[Sun Mar 01 16:16:08.346088 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:11748] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaP1yAfBuk03yQKDyqvUJwAAAdg"]
[Sun Mar 01 16:16:08.987624 2026] [:error] [pid 7133:tid 7140] [client 52.169.206.229:5601] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaP1yPCtubh8pR64qB_OggAAAEU"]
[Sun Mar 01 16:16:09.879431 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:15355] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaP1yQfBuk03yQKDyqvULgAAAdE"]
[Sun Mar 01 16:16:10.497101 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:4303] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaP1ygfBuk03yQKDyqvUNQAAAdg"]
[Sun Mar 01 16:16:11.167534 2026] [:error] [pid 41967:tid 41984] [client 52.169.206.229:8201] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aaP1y4O1bqY181I02eGWnQAAAI8"]
[Sun Mar 01 16:16:11.781185 2026] [:error] [pid 38241:tid 38247] [client 52.169.206.229:11725] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaP1y_KRPk6YnJBxw_xriwAAAMM"]
[Sun Mar 01 16:16:12.339509 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:6281] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaP1zPKRPk6YnJBxw_xrkgAAAMg"]
[Sun Mar 01 16:16:12.966040 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:16295] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaP1zAfBuk03yQKDyqvUQQAAAdQ"]
[Sun Mar 01 16:16:13.550926 2026] [:error] [pid 7165:tid 7187] [client 52.169.206.229:8220] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aaP1zRRjCrA8qWBjgG8-_gAAAlQ"]
[Sun Mar 01 16:16:14.279841 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:6059] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaP1zgfBuk03yQKDyqvUSQAAAdg"]
[Sun Mar 01 16:16:15.059970 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:2372] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaP1zxRjCrA8qWBjgG8_DgAAAkA"]
[Sun Mar 01 16:16:15.823604 2026] [:error] [pid 40750:tid 40770] [client 52.169.206.229:11716] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaP1zwfBuk03yQKDyqvUWwAAAdE"]
[Sun Mar 01 16:16:17.026832 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:14683] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaP10QfBuk03yQKDyqvUaAAAAcg"]
[Sun Mar 01 16:16:17.820256 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:2533] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaP10QfBuk03yQKDyqvUcQAAAdg"]
[Sun Mar 01 16:16:18.377526 2026] [:error] [pid 38241:tid 38251] [client 52.169.206.229:16287] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaP10vKRPk6YnJBxw_xrqAAAAMc"]
[Sun Mar 01 16:16:19.667236 2026] [:error] [pid 38034:tid 38059] [client 52.169.206.229:15300] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaP10wxtfZjwlJok9K_XAAAAARU"]
[Sun Mar 01 16:16:20.509101 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:6290] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaP11AfBuk03yQKDyqvUewAAAdg"]
[Sun Mar 01 16:16:21.395377 2026] [:error] [pid 40750:tid 40757] [client 52.169.206.229:15273] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaP11QfBuk03yQKDyqvUgQAAAcQ"]
[Sun Mar 01 16:16:22.117101 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:8205] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaP11hRjCrA8qWBjgG8_KwAAAkU"]
[Sun Mar 01 16:16:23.498651 2026] [:error] [pid 7133:tid 7154] [client 52.169.206.229:17349] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaP11_Ctubh8pR64qB_OiwAAAFM"]
[Sun Mar 01 16:16:24.240507 2026] [:error] [pid 41342:tid 41360] [client 52.169.206.229:12215] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaP12I4iJ6RAS5CatDlMdwAAAg8"]
[Sun Mar 01 16:16:25.387254 2026] [:error] [pid 41967:tid 41984] [client 52.169.206.229:11005] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaP12YO1bqY181I02eGWsgAAAI8"]
[Sun Mar 01 16:16:26.089478 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:10945] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaP12hRjCrA8qWBjgG8_NgAAAlA"]
[Sun Mar 01 16:16:26.878785 2026] [:error] [pid 38241:tid 38245] [client 52.169.206.229:12447] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaP12vKRPk6YnJBxw_xrtgAAAME"]
[Sun Mar 01 16:16:27.955928 2026] [:error] [pid 41967:tid 41986] [client 52.169.206.229:12430] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaP124O1bqY181I02eGWuQAAAJE"]
[Sun Mar 01 16:16:28.965872 2026] [:error] [pid 33822:tid 33837] [client 52.169.206.229:2083] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaP13G6W3ygu1YVssubL0wAAAo0"]
[Sun Mar 01 16:16:31.163625 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:2385] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaP13xRjCrA8qWBjgG8_OgAAAlg"]
[Sun Mar 01 16:16:31.970531 2026] [:error] [pid 38241:tid 38251] [client 52.169.206.229:12494] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaP13_KRPk6YnJBxw_xrygAAAMc"]
[Sun Mar 01 16:16:33.283142 2026] [:error] [pid 7165:tid 7182] [client 52.169.206.229:11765] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaP14RRjCrA8qWBjgG8_RQAAAk8"]
[Sun Mar 01 16:16:34.035067 2026] [:error] [pid 41780:tid 41794] [client 52.169.206.229:5602] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaP14sONkVoocLIqzy0UQAAAA8s"]
[Sun Mar 01 16:16:34.729490 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:5975] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaP14hRjCrA8qWBjgG8_VQAAAlg"]
[Sun Mar 01 16:16:35.365079 2026] [:error] [pid 7165:tid 7174] [client 52.169.206.229:5989] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaP14xRjCrA8qWBjgG8_WwAAAkc"]
[Sun Mar 01 16:16:36.132033 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:3190] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaP15AfBuk03yQKDyqvUrwAAAdg"]
[Sun Mar 01 16:16:37.063320 2026] [:error] [pid 38241:tid 38268] [client 52.169.206.229:6056] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaP15fKRPk6YnJBxw_xr1gAAANg"]
[Sun Mar 01 16:16:38.116504 2026] [:error] [pid 41967:tid 41988] [client 52.169.206.229:15321] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaP15oO1bqY181I02eGW0AAAAJM"]
[Sun Mar 01 16:16:39.015058 2026] [:error] [pid 7165:tid 7190] [client 52.169.206.229:4304] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaP15xRjCrA8qWBjgG8_bQAAAlc"]
[Sun Mar 01 16:16:39.744134 2026] [:error] [pid 33822:tid 33840] [client 52.169.206.229:4629] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "aaP1526W3ygu1YVssubL2gAAApA"]
[Sun Mar 01 16:16:40.585370 2026] [:error] [pid 37032:tid 37042] [client 52.169.206.229:15321] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaP16Ou0U4o7eSImsVRUJwAAAYg"]
[Sun Mar 01 16:16:41.316047 2026] [:error] [pid 7165:tid 7190] [client 52.169.206.229:6208] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaP16RRjCrA8qWBjgG8_fAAAAlc"]
[Sun Mar 01 16:16:41.992524 2026] [:error] [pid 7165:tid 7187] [client 52.169.206.229:15608] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaP16RRjCrA8qWBjgG8_gAAAAlQ"]
[Sun Mar 01 16:16:42.802690 2026] [:error] [pid 41967:tid 41975] [client 52.169.206.229:12184] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w4.php"] [unique_id "aaP16oO1bqY181I02eGW4QAAAIY"]
[Sun Mar 01 16:16:43.661418 2026] [:error] [pid 38034:tid 38050] [client 52.169.206.229:5953] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaP16wxtfZjwlJok9K_XCwAAAQw"]
[Sun Mar 01 16:16:44.592196 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:6296] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaP17PKRPk6YnJBxw_xr6gAAAMg"]
[Sun Mar 01 16:16:45.335228 2026] [:error] [pid 44644:tid 44663] [client 52.169.206.229:2425] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaP17Z3RJaXMcw3y9V-7wwAAABA"]
[Sun Mar 01 16:16:46.585626 2026] [:error] [pid 41967:tid 41971] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sun Mar 01 16:16:46.882535 2026] [:error] [pid 41967:tid 41986] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 01 16:16:47.188217 2026] [:error] [pid 41967:tid 41979] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/tymn.php
[Sun Mar 01 16:16:47.445886 2026] [:error] [pid 41967:tid 41971] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Sun Mar 01 16:16:47.954602 2026] [:error] [pid 41967:tid 41979] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Mar 01 16:16:48.233506 2026] [:error] [pid 41967:tid 41971] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Sun Mar 01 16:16:48.927702 2026] [:error] [pid 41967:tid 41990] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Mar 01 16:16:49.181321 2026] [:error] [pid 41967:tid 41971] [client 52.169.206.229:10968] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sun Mar 01 16:16:49.431342 2026] [:error] [pid 41967:tid 41990] [client 52.169.206.229:10968] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaP18YO1bqY181I02eGXDwAAAJU"]
[Sun Mar 01 16:16:50.218405 2026] [:error] [pid 7165:tid 7181] [client 52.169.206.229:2395] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaP18hRjCrA8qWBjgG8_sgAAAk4"]
[Sun Mar 01 16:16:51.081120 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:2488] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaP18xRjCrA8qWBjgG8_twAAAkA"]
[Sun Mar 01 16:16:51.897951 2026] [:error] [pid 38241:tid 38251] [client 52.169.206.229:14695] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aaP18_KRPk6YnJBxw_xr9AAAAMc"]
[Sun Mar 01 16:16:52.799884 2026] [:error] [pid 41967:tid 41986] [client 52.169.206.229:12161] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaP19IO1bqY181I02eGXLwAAAJE"]
[Sun Mar 01 16:16:53.540770 2026] [:error] [pid 7165:tid 7190] [client 52.169.206.229:12198] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaP19RRjCrA8qWBjgG8_vAAAAlc"]
[Sun Mar 01 16:16:54.685730 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:4294] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaP19hRjCrA8qWBjgG8_wwAAAkU"]
[Sun Mar 01 16:16:55.273874 2026] [:error] [pid 40750:tid 40768] [client 52.169.206.229:1648] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aaP19wfBuk03yQKDyqvUxQAAAc8"]
[Sun Mar 01 16:16:55.925659 2026] [:error] [pid 38241:tid 38251] [client 52.169.206.229:9388] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaP19_KRPk6YnJBxw_xsBAAAAMc"]
[Sun Mar 01 16:16:56.653900 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:12187] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaP1-AfBuk03yQKDyqvUygAAAdQ"]
[Sun Mar 01 16:16:57.430454 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:7514] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaP1-QfBuk03yQKDyqvUzwAAAdQ"]
[Sun Mar 01 16:16:58.805907 2026] [:error] [pid 41967:tid 41975] [client 52.169.206.229:12209] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aaP1-oO1bqY181I02eGXSgAAAIY"]
[Sun Mar 01 16:16:59.504937 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:1659] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaP1-xRjCrA8qWBjgG8_zwAAAlg"]
[Sun Mar 01 16:17:00.344757 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:7756] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaP1_BRjCrA8qWBjgG8_2AAAAlA"]
[Sun Mar 01 16:17:01.266935 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:4626] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaP1_fKRPk6YnJBxw_xsDQAAAM4"]
[Sun Mar 01 16:17:01.962005 2026] [:error] [pid 41967:tid 41979] [client 52.169.206.229:4425] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aaP1_YO1bqY181I02eGXWAAAAIo"]
[Sun Mar 01 16:17:02.873455 2026] [:error] [pid 7133:tid 7158] [client 52.169.206.229:6249] [client 52.169.206.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaP1_vCtubh8pR64qB_OvAAAAFc"]
[Sun Mar 01 16:17:03.809725 2026] [:error] [pid 41967:tid 41969] [client 52.169.206.229:2531] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaP1_4O1bqY181I02eGXZAAAAIA"]
[Sun Mar 01 16:17:04.931873 2026] [:error] [pid 7165:tid 7187] [client 52.169.206.229:2516] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaP2ABRjCrA8qWBjgG8_6QAAAlQ"]
[Sun Mar 01 16:17:05.727778 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:15256] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaP2AQfBuk03yQKDyqvU4wAAAdg"]
[Sun Mar 01 16:17:07.002250 2026] [:error] [pid 38034:tid 38044] [client 52.169.206.229:3928] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aaP2AwxtfZjwlJok9K_XDwAAAQY"]
[Sun Mar 01 16:17:07.942107 2026] [:error] [pid 38241:tid 38252] [client 52.169.206.229:6245] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaP2A_KRPk6YnJBxw_xsGAAAAMg"]
[Sun Mar 01 16:17:08.894097 2026] [:error] [pid 38241:tid 38258] [client 52.169.206.229:15280] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaP2BPKRPk6YnJBxw_xsHAAAAM4"]
[Sun Mar 01 16:17:10.090092 2026] [:error] [pid 7165:tid 7181] [client 52.169.206.229:2516] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaP2BhRjCrA8qWBjgG8_-AAAAk4"]
[Sun Mar 01 16:17:10.844164 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:6063] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hi.php"] [unique_id "aaP2BgfBuk03yQKDyqvU7QAAAcg"]
[Sun Mar 01 16:17:11.693594 2026] [:error] [pid 40750:tid 40762] [client 52.169.206.229:15274] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaP2BwfBuk03yQKDyqvU_AAAAck"]
[Sun Mar 01 16:17:12.507436 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:9396] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaP2CAfBuk03yQKDyqvVAwAAAdQ"]
[Sun Mar 01 16:17:13.294967 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:4637] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaP2CQfBuk03yQKDyqvVCgAAAdQ"]
[Sun Mar 01 16:17:14.389074 2026] [:error] [pid 38034:tid 38059] [client 52.169.206.229:6011] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "aaP2CgxtfZjwlJok9K_XEgAAARU"]
[Sun Mar 01 16:17:15.529048 2026] [:error] [pid 41967:tid 41986] [client 52.169.206.229:11099] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaP2C4O1bqY181I02eGXmAAAAJE"]
[Sun Mar 01 16:17:16.944586 2026] [:error] [pid 7165:tid 7182] [client 52.169.206.229:6715] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaP2DBRjCrA8qWBjgG9ANQAAAk8"]
[Sun Mar 01 16:17:17.779262 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:3182] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaP2DQfBuk03yQKDyqvVIQAAAdQ"]
[Sun Mar 01 16:17:18.798730 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:2546] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aaP2DgfBuk03yQKDyqvVJgAAAdg"]
[Sun Mar 01 16:17:19.936249 2026] [:error] [pid 38241:tid 38253] [client 52.169.206.229:9375] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaP2D_KRPk6YnJBxw_xsTgAAAMk"]
[Sun Mar 01 16:17:20.706611 2026] [:error] [pid 40750:tid 40762] [client 52.169.206.229:17385] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaP2EAfBuk03yQKDyqvVLQAAAck"]
[Sun Mar 01 16:17:22.351496 2026] [:error] [pid 7165:tid 7175] [client 52.169.206.229:11414] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaP2EhRjCrA8qWBjgG9APgAAAkg"]
[Sun Mar 01 16:17:24.232372 2026] [:error] [pid 7165:tid 7182] [client 52.169.206.229:11774] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaP2FBRjCrA8qWBjgG9AQQAAAk8"]
[Sun Mar 01 16:17:25.418806 2026] [:error] [pid 40750:tid 40758] [client 52.169.206.229:7316] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaP2FQfBuk03yQKDyqvVRAAAAcU"]
[Sun Mar 01 16:17:26.774805 2026] [:error] [pid 40750:tid 40777] [client 52.169.206.229:8219] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaP2FgfBuk03yQKDyqvVSgAAAdg"]
[Sun Mar 01 16:17:27.764711 2026] [:error] [pid 41342:tid 41356] [client 52.169.206.229:6067] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaP2F44iJ6RAS5CatDlMegAAAgs"]
[Sun Mar 01 16:17:29.003412 2026] [:error] [pid 38241:tid 38253] [client 52.169.206.229:11727] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaP2GfKRPk6YnJBxw_xsbQAAAMk"]
[Sun Mar 01 16:17:30.299374 2026] [:error] [pid 38241:tid 38262] [client 52.169.206.229:4650] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaP2GvKRPk6YnJBxw_xsbwAAANI"]
[Sun Mar 01 16:17:31.222124 2026] [:error] [pid 7165:tid 7176] [client 52.169.206.229:11741] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaP2GxRjCrA8qWBjgG9AWwAAAkk"]
[Sun Mar 01 16:17:31.836646 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:5619] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaP2GwfBuk03yQKDyqvVZgAAAdQ"]
[Sun Mar 01 16:17:32.635960 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:5572] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaP2HAfBuk03yQKDyqvVaQAAAdQ"]
[Sun Mar 01 16:17:33.560511 2026] [:error] [pid 38241:tid 38256] [client 52.169.206.229:11446] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP2HfKRPk6YnJBxw_xsdQAAAMw"]
[Sun Mar 01 16:17:34.298462 2026] [:error] [pid 37032:tid 37046] [client 52.169.206.229:6300] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP2Huu0U4o7eSImsVRUQQAAAYw"]
[Sun Mar 01 16:17:35.545286 2026] [:error] [pid 41967:tid 41975] [client 52.169.206.229:9484] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP2H4O1bqY181I02eGXtQAAAIY"]
[Sun Mar 01 16:17:36.579862 2026] [:error] [pid 40750:tid 40754] [client 52.169.206.229:12169] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaP2IAfBuk03yQKDyqvVgAAAAcE"]
[Sun Mar 01 16:17:37.340241 2026] [:error] [pid 7165:tid 7176] [client 52.169.206.229:7768] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaP2IRRjCrA8qWBjgG9AcgAAAkk"]
[Sun Mar 01 16:17:38.898013 2026] [:error] [pid 40750:tid 40762] [client 52.169.206.229:6276] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaP2IgfBuk03yQKDyqvVlgAAAck"]
[Sun Mar 01 16:17:39.935573 2026] [:error] [pid 38241:tid 38268] [client 52.169.206.229:2373] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaP2I_KRPk6YnJBxw_xsfAAAANg"]
[Sun Mar 01 16:17:41.163653 2026] [:error] [pid 41967:tid 41988] [client 52.169.206.229:11772] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaP2JYO1bqY181I02eGXvgAAAJM"]
[Sun Mar 01 16:17:42.316575 2026] [:error] [pid 40750:tid 40773] [client 52.169.206.229:15309] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aaP2JgfBuk03yQKDyqvVrgAAAdQ"]
[Sun Mar 01 16:17:43.648674 2026] [:error] [pid 40750:tid 40756] [client 52.169.206.229:5603] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aaP2JwfBuk03yQKDyqvVtgAAAcM"]
[Sun Mar 01 16:17:46.024338 2026] [:error] [pid 40750:tid 40760] [client 52.169.206.229:5621] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aaP2KgfBuk03yQKDyqvVwwAAAcc"]
[Sun Mar 01 16:17:47.165928 2026] [:error] [pid 38241:tid 38263] [client 52.169.206.229:12223] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "aaP2K_KRPk6YnJBxw_xshgAAANM"]
[Sun Mar 01 16:17:48.380409 2026] [:error] [pid 40750:tid 40754] [client 52.169.206.229:6694] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aaP2LAfBuk03yQKDyqvV2AAAAcE"]
[Sun Mar 01 16:17:48.998730 2026] [:error] [pid 40750:tid 40754] [client 52.169.206.229:6012] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "aaP2LAfBuk03yQKDyqvV4AAAAcE"]
[Sun Mar 01 16:17:50.577113 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Mar 01 16:17:50.998545 2026] [:error] [pid 7165:tid 7182] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Sun Mar 01 16:17:51.526305 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Sun Mar 01 16:17:52.129839 2026] [:error] [pid 7165:tid 7187] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sun Mar 01 16:17:52.549714 2026] [:error] [pid 7165:tid 7177] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sun Mar 01 16:17:53.949613 2026] [:error] [pid 7165:tid 7177] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Sun Mar 01 16:17:54.385122 2026] [:error] [pid 7165:tid 7179] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sun Mar 01 16:17:54.681559 2026] [:error] [pid 7165:tid 7187] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Mar 01 16:17:54.935016 2026] [:error] [pid 7165:tid 7175] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Sun Mar 01 16:17:55.187756 2026] [:error] [pid 7165:tid 7174] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Sun Mar 01 16:17:55.442337 2026] [:error] [pid 7165:tid 7190] [client 52.169.206.229:9399] File does not exist: /usr/local/apache/htdocs/suspended-page/miansha.php
[Sun Mar 01 16:17:55.693030 2026] [:error] [pid 7165:tid 7183] [client 52.169.206.229:9399] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaP2MxRjCrA8qWBjgG9AvgAAAlA"]
[Sun Mar 01 16:17:56.842835 2026] [:error] [pid 40750:tid 40776] [client 52.169.206.229:6029] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaP2NAfBuk03yQKDyqvWCAAAAdc"]
[Sun Mar 01 16:17:58.847777 2026] [:error] [pid 7165:tid 7172] [client 52.169.206.229:2536] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaP2NhRjCrA8qWBjgG9AwwAAAkU"]
[Sun Mar 01 16:17:59.929502 2026] [:error] [pid 7165:tid 7177] [client 52.169.206.229:8441] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaP2NxRjCrA8qWBjgG9AxwAAAko"]
[Sun Mar 01 16:18:01.294406 2026] [:error] [pid 33822:tid 33847] [client 52.169.206.229:6328] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaP2OW6W3ygu1YVssubMeAAAApc"]
[Sun Mar 01 16:18:02.066065 2026] [:error] [pid 38241:tid 38261] [client 52.169.206.229:6677] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaP2OvKRPk6YnJBxw_xslwAAANE"]
[Sun Mar 01 16:18:02.788812 2026] [:error] [pid 7165:tid 7175] [client 52.169.206.229:11773] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaP2OhRjCrA8qWBjgG9AzgAAAkg"]
[Sun Mar 01 16:18:03.670152 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:8384] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaP2OxRjCrA8qWBjgG9A0wAAAlg"]
[Sun Mar 01 16:18:04.850580 2026] [:error] [pid 7165:tid 7171] [client 52.169.206.229:8232] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaP2PBRjCrA8qWBjgG9A2AAAAkQ"]
[Sun Mar 01 16:18:05.910873 2026] [:error] [pid 38241:tid 38268] [client 52.169.206.229:5962] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaP2PfKRPk6YnJBxw_xsoQAAANg"]
[Sun Mar 01 16:18:06.776951 2026] [:error] [pid 7165:tid 7177] [client 52.169.206.229:4636] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaP2PhRjCrA8qWBjgG9A4wAAAko"]
[Sun Mar 01 16:18:07.690435 2026] [:error] [pid 38241:tid 38259] [client 52.169.206.229:8959] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaP2P_KRPk6YnJBxw_xsqAAAAM8"]
[Sun Mar 01 16:18:08.502038 2026] [:error] [pid 7133:tid 7157] [client 52.169.206.229:11088] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaP2QPCtubh8pR64qB_O9wAAAFY"]
[Sun Mar 01 16:18:09.363575 2026] [:error] [pid 38034:tid 38058] [client 52.169.206.229:4654] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaP2QQxtfZjwlJok9K_XJwAAARQ"]
[Sun Mar 01 16:18:10.169690 2026] [:error] [pid 44644:tid 44669] [client 52.169.206.229:7714] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaP2Qp3RJaXMcw3y9V-7zAAAABY"]
[Sun Mar 01 16:18:11.306838 2026] [:error] [pid 33822:tid 33848] [client 52.169.206.229:1657] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aaP2Q26W3ygu1YVssubMjAAAApg"]
[Sun Mar 01 16:18:12.697575 2026] [:error] [pid 42619:tid 42639] [client 52.169.206.229:2541] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaP2RB_zUXcYaZE4AOeYyAAAAVI"]
[Sun Mar 01 16:18:13.617430 2026] [:error] [pid 7165:tid 7186] [client 52.169.206.229:17363] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaP2RRRjCrA8qWBjgG9A_gAAAlM"]
[Sun Mar 01 16:18:14.562714 2026] [:error] [pid 38034:tid 38044] [client 52.169.206.229:7688] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaP2RgxtfZjwlJok9K_XLAAAAQY"]
[Sun Mar 01 16:18:15.223759 2026] [:error] [pid 38034:tid 38036] [client 52.169.206.229:6265] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aaP2RwxtfZjwlJok9K_XLQAAAQA"]
[Sun Mar 01 16:18:17.144200 2026] [:error] [pid 40750:tid 40762] [client 52.169.206.229:5260] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaP2SQfBuk03yQKDyqvWOQAAAck"]
[Sun Mar 01 16:18:18.479337 2026] [:error] [pid 38241:tid 38261] [client 52.169.206.229:12834] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaP2SvKRPk6YnJBxw_xswgAAANE"]
[Sun Mar 01 16:18:19.857669 2026] [:error] [pid 40750:tid 40775] [client 52.169.206.229:6262] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaP2SwfBuk03yQKDyqvWRwAAAdY"]
[Sun Mar 01 16:18:20.924872 2026] [:error] [pid 33822:tid 33843] [client 52.169.206.229:13339] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aaP2TG6W3ygu1YVssubMnAAAApM"]
[Sun Mar 01 16:18:21.708822 2026] [:error] [pid 33822:tid 33835] [client 52.169.206.229:8748] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaP2TW6W3ygu1YVssubMpAAAAos"]
[Sun Mar 01 16:18:22.386620 2026] [:error] [pid 7165:tid 7174] [client 52.169.206.229:15304] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaP2ThRjCrA8qWBjgG9BFwAAAkc"]
[Sun Mar 01 16:18:23.202407 2026] [:error] [pid 40750:tid 40776] [client 52.169.206.229:13335] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaP2TwfBuk03yQKDyqvWSQAAAdc"]
[Sun Mar 01 16:18:24.051046 2026] [:error] [pid 7165:tid 7187] [client 52.169.206.229:11111] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "aaP2UBRjCrA8qWBjgG9BHwAAAlQ"]
[Sun Mar 01 16:18:24.815697 2026] [:error] [pid 38034:tid 38058] [client 52.169.206.229:9495] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaP2UAxtfZjwlJok9K_XNAAAARQ"]
[Sun Mar 01 16:18:25.457093 2026] [:error] [pid 7133:tid 7137] [client 52.169.206.229:17393] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaP2UfCtubh8pR64qB_PBwAAAEI"]
[Sun Mar 01 16:18:26.508728 2026] [:error] [pid 38241:tid 38256] [client 52.169.206.229:8937] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaP2UvKRPk6YnJBxw_xsyAAAAMw"]
[Sun Mar 01 16:18:27.220547 2026] [:error] [pid 7165:tid 7168] [client 52.169.206.229:9400] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/styll.php"] [unique_id "aaP2UxRjCrA8qWBjgG9BKQAAAkE"]
[Sun Mar 01 16:18:27.890691 2026] [:error] [pid 38034:tid 38056] [client 52.169.206.229:2418] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaP2UwxtfZjwlJok9K_XNQAAARI"]
[Sun Mar 01 16:18:28.532348 2026] [:error] [pid 33822:tid 33835] [client 52.169.206.229:17406] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaP2VG6W3ygu1YVssubMsgAAAos"]
[Sun Mar 01 16:18:29.343866 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:4643] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaP2VRRjCrA8qWBjgG9BNQAAAlg"]
[Sun Mar 01 16:18:30.287755 2026] [:error] [pid 40750:tid 40776] [client 52.169.206.229:13323] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "aaP2VgfBuk03yQKDyqvWagAAAdc"]
[Sun Mar 01 16:18:30.951249 2026] [:error] [pid 40750:tid 40758] [client 52.169.206.229:12857] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaP2VgfBuk03yQKDyqvWcAAAAcU"]
[Sun Mar 01 16:18:31.796103 2026] [:error] [pid 40750:tid 40774] [client 52.169.206.229:13364] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaP2VwfBuk03yQKDyqvWeAAAAdU"]
[Sun Mar 01 16:18:32.592477 2026] [:error] [pid 7133:tid 7151] [client 52.169.206.229:11766] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaP2WPCtubh8pR64qB_PDQAAAFA"]
[Sun Mar 01 16:18:34.818221 2026] [:error] [pid 40750:tid 40776] [client 52.169.206.229:2524] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower2.php"] [unique_id "aaP2WgfBuk03yQKDyqvWkQAAAdc"]
[Sun Mar 01 16:18:35.702452 2026] [:error] [pid 7133:tid 7149] [client 52.169.206.229:9946] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaP2W_Ctubh8pR64qB_PEAAAAE4"]
[Sun Mar 01 16:18:36.626621 2026] [:error] [pid 40750:tid 40762] [client 52.169.206.229:7741] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaP2XAfBuk03yQKDyqvWngAAAck"]
[Sun Mar 01 16:18:37.463941 2026] [:error] [pid 40750:tid 40758] [client 52.169.206.229:10981] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaP2XQfBuk03yQKDyqvWpQAAAcU"]
[Sun Mar 01 16:18:38.187004 2026] [:error] [pid 40750:tid 40762] [client 52.169.206.229:5612] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4h.php"] [unique_id "aaP2XgfBuk03yQKDyqvWqAAAAck"]
[Sun Mar 01 16:18:38.880088 2026] [:error] [pid 7133:tid 7151] [client 52.169.206.229:10996] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaP2XvCtubh8pR64qB_PHwAAAFA"]
[Sun Mar 01 16:18:39.520866 2026] [:error] [pid 33822:tid 33847] [client 52.169.206.229:11767] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaP2X26W3ygu1YVssubMtgAAApc"]
[Sun Mar 01 16:18:40.499736 2026] [:error] [pid 40750:tid 40775] [client 52.169.206.229:7700] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaP2YAfBuk03yQKDyqvWswAAAdY"]
[Sun Mar 01 16:18:41.288980 2026] [:error] [pid 7165:tid 7167] [client 52.169.206.229:17384] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aaP2YRRjCrA8qWBjgG9BQAAAAkA"]
[Sun Mar 01 16:18:42.208330 2026] [:error] [pid 7165:tid 7191] [client 52.169.206.229:8908] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaP2YhRjCrA8qWBjgG9BQgAAAlg"]
[Sun Mar 01 16:18:43.344939 2026] [:error] [pid 7165:tid 7185] [client 52.169.206.229:3286] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaP2YxRjCrA8qWBjgG9BRQAAAlI"]
[Sun Mar 01 16:18:44.003433 2026] [:error] [pid 40750:tid 40768] [client 52.169.206.229:11760] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaP2ZAfBuk03yQKDyqvWygAAAc8"]
[Sun Mar 01 16:18:44.750446 2026] [:error] [pid 40750:tid 40753] [client 52.169.206.229:2431] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aaP2ZAfBuk03yQKDyqvWzwAAAcA"]
[Sun Mar 01 16:18:45.483712 2026] [:error] [pid 40750:tid 40755] [client 52.169.206.229:2370] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaP2ZQfBuk03yQKDyqvW1AAAAcI"]
[Sun Mar 01 16:18:46.047914 2026] [:error] [pid 40750:tid 40761] [client 52.169.206.229:12825] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaP2ZgfBuk03yQKDyqvW2wAAAcg"]
[Sun Mar 01 16:18:46.731386 2026] [:error] [pid 40750:tid 40764] [client 52.169.206.229:13336] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaP2ZgfBuk03yQKDyqvW5gAAAcs"]
[Sun Mar 01 16:18:47.587864 2026] [:error] [pid 40750:tid 40754] [client 52.169.206.229:7709] [client 52.169.206.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/database.php"] [unique_id "aaP2ZwfBuk03yQKDyqvW7wAAAcE"]
[Sun Mar 01 17:18:17.804047 2026] [:error] [pid 38034:tid 38036] [client 43.167.232.38:51418] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaQEWQxtfZjwlJok9K_lXwAAAQA"]
[Sun Mar 01 17:59:23.744608 2026] [:error] [pid 40750:tid 40775] [client 185.193.157.163:36110] [client 185.193.157.163] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.157.163, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQN-wfBuk03yQKDyqtRgAAAAdY"]
[Sun Mar 01 17:59:23.748261 2026] [:error] [pid 40750:tid 40775] [client 185.193.157.163:36110] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 17:59:25.467529 2026] [:error] [pid 40750:tid 40768] [client 185.193.157.163:36110] [client 185.193.157.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaQN_QfBuk03yQKDyqtRngAAAc8"]
[Sun Mar 01 17:59:25.764333 2026] [:error] [pid 37032:tid 37051] [client 185.193.157.163:36126] [client 185.193.157.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaQN_eu0U4o7eSImsVRkxwAAAZE"]
[Sun Mar 01 17:59:26.058765 2026] [:error] [pid 38241:tid 38255] [client 185.193.157.163:36140] [client 185.193.157.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaQN_vKRPk6YnJBxw_yqcAAAAMs"]
[Sun Mar 01 17:59:26.355498 2026] [:error] [pid 37032:tid 37035] [client 185.193.157.163:36148] [client 185.193.157.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaQN_uu0U4o7eSImsVRkyQAAAYE"]
[Sun Mar 01 17:59:26.723494 2026] [:error] [pid 7133:tid 7157] [client 185.193.157.163:36160] [client 185.193.157.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaQN_vCtubh8pR64qB_46AAAAFY"]
[Sun Mar 01 17:59:27.023269 2026] [:error] [pid 33822:tid 33833] [client 185.193.157.163:36162] [client 185.193.157.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaQN_26W3ygu1YVssubrogAAAok"]
[Sun Mar 01 17:59:27.322613 2026] [:error] [pid 33822:tid 33843] [client 185.193.157.163:36166] [client 185.193.157.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaQN_26W3ygu1YVssubrpAAAApM"]
[Sun Mar 01 19:13:18.473003 2026] [:error] [pid 40750:tid 40776] [client 40.85.219.62:5466] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaQfTgfBuk03yQKDyquu9gAAAdc"]
[Sun Mar 01 19:13:19.312180 2026] [:error] [pid 40750:tid 40774] [client 40.85.219.62:5500] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaQfTwfBuk03yQKDyquu_wAAAdU"]
[Sun Mar 01 19:13:20.159993 2026] [:error] [pid 40750:tid 40767] [client 40.85.219.62:5328] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaQfUAfBuk03yQKDyquvAwAAAc4"]
[Sun Mar 01 19:13:20.996645 2026] [:error] [pid 7165:tid 7186] [client 40.85.219.62:5455] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaQfUBRjCrA8qWBjgG_a1QAAAlM"]
[Sun Mar 01 19:24:33.757285 2026] [:error] [pid 38241:tid 38254] [client 170.106.35.187:45648] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaQh8fKRPk6YnJBxw_zYmgAAAMo"]
[Sun Mar 01 19:52:08.378445 2026] [:error] [pid 7165:tid 7187] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Mar 01 19:52:08.508316 2026] [:error] [pid 7165:tid 7177] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 01 19:52:08.623901 2026] [:error] [pid 7165:tid 7180] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sun Mar 01 19:52:08.748630 2026] [:error] [pid 7165:tid 7170] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Mar 01 19:52:08.862130 2026] [:error] [pid 7165:tid 7189] [client 52.253.113.41:14097] [client 52.253.113.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.253.113.41, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQoaBRjCrA8qWBjgG8A7gAAAlY"]
[Sun Mar 01 19:52:08.868237 2026] [:error] [pid 7165:tid 7189] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 01 19:52:08.993047 2026] [:error] [pid 7165:tid 7173] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 01 19:52:09.111546 2026] [:error] [pid 7165:tid 7176] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 19:52:09.232543 2026] [:error] [pid 7165:tid 7167] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Mar 01 19:52:09.350186 2026] [:error] [pid 7165:tid 7191] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 19:52:09.473974 2026] [:error] [pid 7165:tid 7169] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sun Mar 01 19:52:09.590505 2026] [:error] [pid 7165:tid 7190] [client 52.253.113.41:14097] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 01 19:52:09.710461 2026] [:error] [pid 7165:tid 7178] [client 52.253.113.41:14097] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQoaRRjCrA8qWBjgG8A-AAAAks"]
[Sun Mar 01 19:52:10.185209 2026] [:error] [pid 7165:tid 7186] [client 52.253.113.41:10325] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQoahRjCrA8qWBjgG8A_AAAAlM"]
[Sun Mar 01 19:52:10.798386 2026] [:error] [pid 40750:tid 40755] [client 52.253.113.41:13696] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQoagfBuk03yQKDyqvf8gAAAcI"]
[Sun Mar 01 19:52:11.430448 2026] [:error] [pid 40750:tid 40761] [client 52.253.113.41:13389] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaQoawfBuk03yQKDyqvf9wAAAcg"]
[Sun Mar 01 20:27:44.167971 2026] [:error] [pid 33822:tid 33828] [client 20.63.83.113:58616] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php
[Sun Mar 01 20:27:44.376252 2026] [:error] [pid 33822:tid 33833] [client 20.63.83.113:58616] File does not exist: /usr/local/apache/htdocs/suspended-page/wsoyanz1.php
[Sun Mar 01 20:27:44.583997 2026] [:error] [pid 33822:tid 33827] [client 20.63.83.113:58616] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php
[Sun Mar 01 20:27:44.791812 2026] [:error] [pid 33822:tid 33829] [client 20.63.83.113:58616] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Sun Mar 01 20:27:44.996859 2026] [:error] [pid 33822:tid 33826] [client 20.63.83.113:58616] [client 20.63.83.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaQwwG6W3ygu1YVssuYTvwAAAoI"]
[Sun Mar 01 20:27:45.414334 2026] [:error] [pid 44644:tid 44656] [client 20.63.83.113:27498] File does not exist: /usr/local/apache/htdocs/suspended-page/home.php
[Sun Mar 01 20:27:45.628652 2026] [:error] [pid 44644:tid 44661] [client 20.63.83.113:27498] File does not exist: /usr/local/apache/htdocs/suspended-page/dialog.php
[Sun Mar 01 20:27:45.843314 2026] [:error] [pid 44644:tid 44658] [client 20.63.83.113:27498] File does not exist: /usr/local/apache/htdocs/suspended-page/sidwso.php
[Sun Mar 01 20:27:46.056074 2026] [:error] [pid 44644:tid 44664] [client 20.63.83.113:27498] File does not exist: /usr/local/apache/htdocs/suspended-page/smaxx.php
[Sun Mar 01 20:27:46.269959 2026] [:error] [pid 44644:tid 44659] [client 20.63.83.113:27498] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sun Mar 01 20:27:46.484958 2026] [:error] [pid 44644:tid 44665] [client 20.63.83.113:27498] File does not exist: /usr/local/apache/htdocs/suspended-page/block-support.php
[Sun Mar 01 20:27:46.694760 2026] [:error] [pid 44644:tid 44654] [client 20.63.83.113:27498] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Mhbgf.php"] [unique_id "aaQwwp3RJaXMcw3y9V_YsQAAAAc"]
[Sun Mar 01 20:27:47.117967 2026] [:error] [pid 7133:tid 7136] [client 20.63.83.113:27470] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Mhbgf.php"] [unique_id "aaQww_Ctubh8pR64qB8y-QAAAEE"]
[Sun Mar 01 20:27:47.532266 2026] [:error] [pid 40750:tid 40757] [client 20.63.83.113:58572] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Mhbgf.php"] [unique_id "aaQwwwfBuk03yQKDyqsE5QAAAcQ"]
[Sun Mar 01 20:27:47.946767 2026] [:error] [pid 40750:tid 40759] [client 20.63.83.113:19951] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Mhbgf.php"] [unique_id "aaQwwwfBuk03yQKDyqsE5wAAAcY"]
[Sun Mar 01 20:27:48.361894 2026] [:error] [pid 40750:tid 40775] [client 20.63.83.113:27369] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xleet.php"] [unique_id "aaQwxAfBuk03yQKDyqsE7AAAAdY"]
[Sun Mar 01 20:27:48.774593 2026] [:error] [pid 38241:tid 38258] [client 20.63.83.113:41610] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xleet.php"] [unique_id "aaQwxPKRPk6YnJBxw_z62wAAAM4"]
[Sun Mar 01 20:27:49.189899 2026] [:error] [pid 41342:tid 41350] [client 20.63.83.113:40180] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xleet.php"] [unique_id "aaQwxY4iJ6RAS5CatDlbeQAAAgU"]
[Sun Mar 01 20:27:49.603539 2026] [:error] [pid 38034:tid 38036] [client 20.63.83.113:41606] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xleet.php"] [unique_id "aaQwxQxtfZjwlJok9K8NEQAAAQA"]
[Sun Mar 01 20:27:50.013518 2026] [:error] [pid 7165:tid 7172] [client 20.63.83.113:61581] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fosil.php"] [unique_id "aaQwxhRjCrA8qWBjgG8X8gAAAkU"]
[Sun Mar 01 20:27:50.422376 2026] [:error] [pid 38034:tid 38038] [client 20.63.83.113:48789] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fosil.php"] [unique_id "aaQwxgxtfZjwlJok9K8NEgAAAQI"]
[Sun Mar 01 20:27:50.831773 2026] [:error] [pid 7165:tid 7169] [client 20.63.83.113:27486] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fosil.php"] [unique_id "aaQwxhRjCrA8qWBjgG8X9QAAAkI"]
[Sun Mar 01 20:27:51.247948 2026] [:error] [pid 7133:tid 7153] [client 20.63.83.113:54651] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fosil.php"] [unique_id "aaQwx_Ctubh8pR64qB8y_gAAAFI"]
[Sun Mar 01 20:27:51.663264 2026] [:error] [pid 37032:tid 37037] [client 20.63.83.113:21087] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/issue.php"] [unique_id "aaQwx-u0U4o7eSImsVR4ugAAAYM"]
[Sun Mar 01 20:27:52.078020 2026] [:error] [pid 38241:tid 38256] [client 20.63.83.113:61606] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/issue.php"] [unique_id "aaQwyPKRPk6YnJBxw_z6_AAAAMw"]
[Sun Mar 01 20:27:52.492724 2026] [:error] [pid 38241:tid 38247] [client 20.63.83.113:5672] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/issue.php"] [unique_id "aaQwyPKRPk6YnJBxw_z7AAAAAMM"]
[Sun Mar 01 20:27:52.900761 2026] [:error] [pid 38241:tid 38264] [client 20.63.83.113:48831] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/issue.php"] [unique_id "aaQwyPKRPk6YnJBxw_z7AgAAANQ"]
[Sun Mar 01 20:27:53.309357 2026] [:error] [pid 38034:tid 38059] [client 20.63.83.113:21093] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/verify.php"] [unique_id "aaQwyQxtfZjwlJok9K8NFAAAARU"]
[Sun Mar 01 20:27:53.719011 2026] [:error] [pid 40750:tid 40763] [client 20.63.83.113:21080] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/verify.php"] [unique_id "aaQwyQfBuk03yQKDyqsE_QAAAco"]
[Sun Mar 01 20:27:54.127335 2026] [:error] [pid 40750:tid 40754] [client 20.63.83.113:48803] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/verify.php"] [unique_id "aaQwygfBuk03yQKDyqsE_gAAAcE"]
[Sun Mar 01 20:27:54.536846 2026] [:error] [pid 40750:tid 40756] [client 20.63.83.113:21085] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/verify.php"] [unique_id "aaQwygfBuk03yQKDyqsFAwAAAcM"]
[Sun Mar 01 20:27:54.945947 2026] [:error] [pid 7165:tid 7178] [client 20.63.83.113:3790] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaQwyhRjCrA8qWBjgG8X9wAAAks"]
[Sun Mar 01 20:27:55.353834 2026] [:error] [pid 7165:tid 7176] [client 20.63.83.113:5653] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaQwyxRjCrA8qWBjgG8X-AAAAkk"]
[Sun Mar 01 20:27:55.760170 2026] [:error] [pid 40750:tid 40759] [client 20.63.83.113:61599] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaQwywfBuk03yQKDyqsFBwAAAcY"]
[Sun Mar 01 20:27:56.167611 2026] [:error] [pid 40750:tid 40763] [client 20.63.83.113:27334] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/29rc7ExgS6p.php"] [unique_id "aaQwzAfBuk03yQKDyqsFCQAAAco"]
[Sun Mar 01 20:27:56.579981 2026] [:error] [pid 40750:tid 40755] [client 20.63.83.113:58578] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indeex.php"] [unique_id "aaQwzAfBuk03yQKDyqsFDgAAAcI"]
[Sun Mar 01 20:27:56.992619 2026] [:error] [pid 40750:tid 40771] [client 20.63.83.113:27373] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indeex.php"] [unique_id "aaQwzAfBuk03yQKDyqsFEQAAAdI"]
[Sun Mar 01 20:27:57.411932 2026] [:error] [pid 40750:tid 40757] [client 20.63.83.113:54621] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indeex.php"] [unique_id "aaQwzQfBuk03yQKDyqsFFAAAAcQ"]
[Sun Mar 01 20:27:57.824912 2026] [:error] [pid 40750:tid 40763] [client 20.63.83.113:16967] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indeex.php"] [unique_id "aaQwzQfBuk03yQKDyqsFFwAAAco"]
[Sun Mar 01 20:27:58.236049 2026] [:error] [pid 40750:tid 40755] [client 20.63.83.113:58578] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQwzgfBuk03yQKDyqsFHAAAAcI"]
[Sun Mar 01 20:27:58.661252 2026] [:error] [pid 40750:tid 40771] [client 20.63.83.113:5652] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQwzgfBuk03yQKDyqsFHgAAAdI"]
[Sun Mar 01 20:27:59.076829 2026] [:error] [pid 40750:tid 40764] [client 20.63.83.113:5675] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQwzwfBuk03yQKDyqsFIgAAAcs"]
[Sun Mar 01 20:27:59.485635 2026] [:error] [pid 38241:tid 38259] [client 20.63.83.113:27329] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.php"] [unique_id "aaQwz_KRPk6YnJBxw_z7FAAAAM8"]
[Sun Mar 01 20:27:59.898076 2026] [:error] [pid 38241:tid 38248] [client 20.63.83.113:48809] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaQwz_KRPk6YnJBxw_z7FgAAAMQ"]
[Sun Mar 01 20:28:00.311877 2026] [:error] [pid 41780:tid 41789] [client 20.63.83.113:5693] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaQw0MONkVoocLIqzy0o4gAAA8Y"]
[Sun Mar 01 20:28:00.727643 2026] [:error] [pid 40750:tid 40765] [client 20.63.83.113:45279] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaQw0AfBuk03yQKDyqsFLQAAAcw"]
[Sun Mar 01 20:28:01.139138 2026] [:error] [pid 38241:tid 38262] [client 20.63.83.113:5659] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaQw0fKRPk6YnJBxw_z7HQAAANI"]
[Sun Mar 01 20:28:01.553431 2026] [:error] [pid 7165:tid 7189] [client 20.63.83.113:21076] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php.php"] [unique_id "aaQw0RRjCrA8qWBjgG8X_gAAAlY"]
[Sun Mar 01 20:28:01.971412 2026] [:error] [pid 33822:tid 33838] [client 20.63.83.113:27080] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php.php"] [unique_id "aaQw0W6W3ygu1YVssuYTzAAAAo4"]
[Sun Mar 01 20:28:02.378248 2026] [:error] [pid 33822:tid 33828] [client 20.63.83.113:45272] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php.php"] [unique_id "aaQw0m6W3ygu1YVssuYTzgAAAoQ"]
[Sun Mar 01 20:28:02.785647 2026] [:error] [pid 33822:tid 33840] [client 20.63.83.113:61572] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php.php"] [unique_id "aaQw0m6W3ygu1YVssuYT0QAAApA"]
[Sun Mar 01 20:28:03.197935 2026] [:error] [pid 7165:tid 7172] [client 20.63.83.113:27339] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aaQw0xRjCrA8qWBjgG8YAQAAAkU"]
[Sun Mar 01 20:28:03.610803 2026] [:error] [pid 38241:tid 38255] [client 20.63.83.113:45302] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aaQw0_KRPk6YnJBxw_z7IwAAAMs"]
[Sun Mar 01 20:28:04.023875 2026] [:error] [pid 40750:tid 40767] [client 20.63.83.113:61568] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aaQw1AfBuk03yQKDyqsFMAAAAc4"]
[Sun Mar 01 20:28:04.432240 2026] [:error] [pid 41780:tid 41804] [client 20.63.83.113:27111] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "aaQw1MONkVoocLIqzy0o4wAAA9U"]
[Sun Mar 01 20:28:04.850141 2026] [:error] [pid 38034:tid 38040] [client 20.63.83.113:5633] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaQw1AxtfZjwlJok9K8NFgAAAQQ"]
[Sun Mar 01 20:28:05.264057 2026] [:error] [pid 44644:tid 44649] [client 20.63.83.113:27121] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaQw1Z3RJaXMcw3y9V_YtAAAAAI"]
[Sun Mar 01 20:28:05.672680 2026] [:error] [pid 40750:tid 40769] [client 20.63.83.113:62758] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaQw1QfBuk03yQKDyqsFNAAAAdA"]
[Sun Mar 01 20:28:06.082502 2026] [:error] [pid 38034:tid 38050] [client 20.63.83.113:45263] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "aaQw1gxtfZjwlJok9K8NFwAAAQw"]
[Sun Mar 01 20:28:06.490286 2026] [:error] [pid 44644:tid 44666] [client 20.63.83.113:45260] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/worksec.php"] [unique_id "aaQw1p3RJaXMcw3y9V_YtwAAABM"]
[Sun Mar 01 20:28:06.908575 2026] [:error] [pid 38241:tid 38268] [client 20.63.83.113:41643] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/worksec.php"] [unique_id "aaQw1vKRPk6YnJBxw_z7LgAAANg"]
[Sun Mar 01 20:28:07.316540 2026] [:error] [pid 40750:tid 40757] [client 20.63.83.113:57172] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/worksec.php"] [unique_id "aaQw1wfBuk03yQKDyqsFPAAAAcQ"]
[Sun Mar 01 20:28:07.725728 2026] [:error] [pid 40750:tid 40772] [client 20.63.83.113:27113] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/worksec.php"] [unique_id "aaQw1wfBuk03yQKDyqsFPwAAAdM"]
[Sun Mar 01 20:28:08.133791 2026] [:error] [pid 40750:tid 40765] [client 20.63.83.113:57338] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configs.php"] [unique_id "aaQw2AfBuk03yQKDyqsFQgAAAcw"]
[Sun Mar 01 20:28:08.547369 2026] [:error] [pid 40750:tid 40770] [client 20.63.83.113:5770] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configs.php"] [unique_id "aaQw2AfBuk03yQKDyqsFRwAAAdE"]
[Sun Mar 01 20:28:08.959692 2026] [:error] [pid 40750:tid 40775] [client 20.63.83.113:47923] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configs.php"] [unique_id "aaQw2AfBuk03yQKDyqsFTAAAAdY"]
[Sun Mar 01 20:28:09.375046 2026] [:error] [pid 40750:tid 40757] [client 20.63.83.113:56512] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configs.php"] [unique_id "aaQw2QfBuk03yQKDyqsFUgAAAcQ"]
[Sun Mar 01 20:28:09.799963 2026] [:error] [pid 38241:tid 38244] [client 20.63.83.113:57205] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa1.php"] [unique_id "aaQw2fKRPk6YnJBxw_z7NAAAAMA"]
[Sun Mar 01 20:28:10.212409 2026] [:error] [pid 38241:tid 38246] [client 20.63.83.113:22459] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa1.php"] [unique_id "aaQw2vKRPk6YnJBxw_z7NwAAAMI"]
[Sun Mar 01 20:28:10.622945 2026] [:error] [pid 40750:tid 40775] [client 20.63.83.113:42890] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa1.php"] [unique_id "aaQw2gfBuk03yQKDyqsFZAAAAdY"]
[Sun Mar 01 20:28:11.034999 2026] [:error] [pid 40750:tid 40763] [client 20.63.83.113:42880] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa1.php"] [unique_id "aaQw2wfBuk03yQKDyqsFcQAAAco"]
[Sun Mar 01 20:28:11.452818 2026] [:error] [pid 44644:tid 44647] [client 20.63.83.113:38988] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouts.php"] [unique_id "aaQw253RJaXMcw3y9V_YuAAAAAA"]
[Sun Mar 01 20:28:11.865468 2026] [:error] [pid 40750:tid 40776] [client 20.63.83.113:38985] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouts.php"] [unique_id "aaQw2wfBuk03yQKDyqsFfgAAAdc"]
[Sun Mar 01 20:28:12.274899 2026] [:error] [pid 40750:tid 40755] [client 20.63.83.113:47913] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouts.php"] [unique_id "aaQw3AfBuk03yQKDyqsFhAAAAcI"]
[Sun Mar 01 20:28:12.686934 2026] [:error] [pid 44644:tid 44652] [client 20.63.83.113:57284] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abouts.php"] [unique_id "aaQw3J3RJaXMcw3y9V_YuQAAAAU"]
[Sun Mar 01 20:28:13.099210 2026] [:error] [pid 40750:tid 40775] [client 20.63.83.113:36652] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cache.php"] [unique_id "aaQw3QfBuk03yQKDyqsFlwAAAdY"]
[Sun Mar 01 20:28:13.506894 2026] [:error] [pid 40750:tid 40757] [client 20.63.83.113:57294] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cache.php"] [unique_id "aaQw3QfBuk03yQKDyqsFowAAAcQ"]
[Sun Mar 01 20:28:13.914878 2026] [:error] [pid 7133:tid 7155] [client 20.63.83.113:56527] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cache.php"] [unique_id "aaQw3fCtubh8pR64qB8zCAAAAFQ"]
[Sun Mar 01 20:28:14.326315 2026] [:error] [pid 7133:tid 7140] [client 20.63.83.113:57160] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cache.php"] [unique_id "aaQw3vCtubh8pR64qB8zCQAAAEU"]
[Sun Mar 01 20:28:14.739460 2026] [:error] [pid 7133:tid 7156] [client 20.63.83.113:56563] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw3vCtubh8pR64qB8zCgAAAFU"]
[Sun Mar 01 20:28:15.154220 2026] [:error] [pid 40750:tid 40767] [client 20.63.83.113:16045] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw3wfBuk03yQKDyqsFwAAAAc4"]
[Sun Mar 01 20:28:15.583781 2026] [:error] [pid 40750:tid 40757] [client 20.63.83.113:56546] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw3wfBuk03yQKDyqsFxgAAAcQ"]
[Sun Mar 01 20:28:16.003006 2026] [:error] [pid 33822:tid 33843] [client 20.63.83.113:22462] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw4G6W3ygu1YVssuYT3QAAApM"]
[Sun Mar 01 20:28:16.417276 2026] [:error] [pid 33822:tid 33826] [client 20.63.83.113:36645] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw4G6W3ygu1YVssuYT3gAAAoI"]
[Sun Mar 01 20:28:16.827118 2026] [:error] [pid 40750:tid 40758] [client 20.63.83.113:55843] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw4AfBuk03yQKDyqsFzwAAAcU"]
[Sun Mar 01 20:28:17.238687 2026] [:error] [pid 40750:tid 40771] [client 20.63.83.113:22450] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw4QfBuk03yQKDyqsF0gAAAdI"]
[Sun Mar 01 20:28:17.657073 2026] [:error] [pid 38034:tid 38055] [client 20.63.83.113:22407] [client 20.63.83.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aaQw4QxtfZjwlJok9K8NHAAAARE"]
[Sun Mar 01 20:50:25.146055 2026] [:error] [pid 7165:tid 7186] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/signon.php
[Sun Mar 01 20:50:25.377825 2026] [:error] [pid 7165:tid 7177] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Sun Mar 01 20:50:25.592485 2026] [:error] [pid 7165:tid 7181] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sun Mar 01 20:50:25.807897 2026] [:error] [pid 7165:tid 7179] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Sun Mar 01 20:50:26.027402 2026] [:error] [pid 7165:tid 7168] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 01 20:50:26.242665 2026] [:error] [pid 7165:tid 7180] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xmlmp.php
[Sun Mar 01 20:50:26.458440 2026] [:error] [pid 7165:tid 7185] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Sun Mar 01 20:50:26.675711 2026] [:error] [pid 7165:tid 7189] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configssss.php
[Sun Mar 01 20:50:26.892852 2026] [:error] [pid 7165:tid 7174] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configss1.php
[Sun Mar 01 20:50:27.118603 2026] [:error] [pid 7165:tid 7182] [client 20.104.206.150:8134] File does not exist: /usr/local/apache/htdocs/suspended-page/ngif.php
[Sun Mar 01 20:50:27.333330 2026] [:error] [pid 7165:tid 7188] [client 20.104.206.150:8134] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQ2ExRjCrA8qWBjgG8nYwAAAlU"]
[Sun Mar 01 20:50:27.782881 2026] [:error] [pid 7165:tid 7176] [client 20.104.206.150:8138] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQ2ExRjCrA8qWBjgG8naQAAAkk"]
[Sun Mar 01 20:50:28.210895 2026] [:error] [pid 7165:tid 7177] [client 20.104.206.150:8184] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQ2FBRjCrA8qWBjgG8nbAAAAko"]
[Sun Mar 01 20:50:28.656404 2026] [:error] [pid 40750:tid 40761] [client 20.104.206.150:8159] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configss.php"] [unique_id "aaQ2FAfBuk03yQKDyqsbyQAAAcg"]
[Sun Mar 01 20:50:29.092966 2026] [:error] [pid 40750:tid 40777] [client 20.104.206.150:8183] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "aaQ2FQfBuk03yQKDyqsbywAAAdg"]
[Sun Mar 01 20:50:29.527088 2026] [:error] [pid 38241:tid 38254] [client 20.104.206.150:8169] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "aaQ2FfKRPk6YnJBxw_wGNwAAAMo"]
[Sun Mar 01 20:50:29.995256 2026] [:error] [pid 38241:tid 38261] [client 20.104.206.150:8081] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "aaQ2FfKRPk6YnJBxw_wGOAAAANE"]
[Sun Mar 01 20:50:30.447307 2026] [:error] [pid 7165:tid 7171] [client 20.104.206.150:8067] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "aaQ2FhRjCrA8qWBjgG8ndQAAAkQ"]
[Sun Mar 01 20:50:30.894221 2026] [:error] [pid 40750:tid 40773] [client 20.104.206.150:8157] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.phpa"] [unique_id "aaQ2FgfBuk03yQKDyqsbzQAAAdQ"]
[Sun Mar 01 20:50:31.368637 2026] [:error] [pid 33822:tid 33834] [client 20.104.206.150:8144] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.phpa"] [unique_id "aaQ2F26W3ygu1YVssuYYxgAAAoo"]
[Sun Mar 01 20:50:31.784724 2026] [:error] [pid 40750:tid 40775] [client 20.104.206.150:8151] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.phpa"] [unique_id "aaQ2FwfBuk03yQKDyqsbzgAAAdY"]
[Sun Mar 01 20:50:32.204759 2026] [:error] [pid 40750:tid 40772] [client 20.104.206.150:8077] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.phpa"] [unique_id "aaQ2GAfBuk03yQKDyqsb0AAAAdM"]
[Sun Mar 01 20:50:32.650466 2026] [:error] [pid 40750:tid 40754] [client 20.104.206.150:8168] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defaults.php"] [unique_id "aaQ2GAfBuk03yQKDyqsb1AAAAcE"]
[Sun Mar 01 20:50:33.105594 2026] [:error] [pid 7133:tid 7152] [client 20.104.206.150:8149] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defaults.php"] [unique_id "aaQ2GfCtubh8pR64qB86oAAAAFE"]
[Sun Mar 01 20:50:33.561521 2026] [:error] [pid 40750:tid 40774] [client 20.104.206.150:8191] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defaults.php"] [unique_id "aaQ2GQfBuk03yQKDyqsb2QAAAdU"]
[Sun Mar 01 20:50:34.030298 2026] [:error] [pid 40750:tid 40761] [client 20.104.206.150:8142] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defaults.php"] [unique_id "aaQ2GgfBuk03yQKDyqsb3QAAAcg"]
[Sun Mar 01 20:50:34.480600 2026] [:error] [pid 40750:tid 40773] [client 20.104.206.150:8073] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/im.php"] [unique_id "aaQ2GgfBuk03yQKDyqsb3wAAAdQ"]
[Sun Mar 01 20:50:34.958636 2026] [:error] [pid 7133:tid 7141] [client 20.104.206.150:8156] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/im.php"] [unique_id "aaQ2GvCtubh8pR64qB86owAAAEY"]
[Sun Mar 01 20:50:35.430694 2026] [:error] [pid 38034:tid 38037] [client 20.104.206.150:8179] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/im.php"] [unique_id "aaQ2GwxtfZjwlJok9K8RpQAAAQE"]
[Sun Mar 01 20:50:35.848671 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:8177] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/im.php"] [unique_id "aaQ2GwfBuk03yQKDyqsb5wAAAco"]
[Sun Mar 01 20:50:36.313068 2026] [:error] [pid 40750:tid 40771] [client 20.104.206.150:8155] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQ2HAfBuk03yQKDyqsb6AAAAdI"]
[Sun Mar 01 20:50:36.769339 2026] [:error] [pid 7133:tid 7150] [client 20.104.206.150:8174] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQ2HPCtubh8pR64qB86sAAAAE8"]
[Sun Mar 01 20:50:37.226004 2026] [:error] [pid 7165:tid 7188] [client 20.104.206.150:8120] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQ2HRRjCrA8qWBjgG8nfQAAAlU"]
[Sun Mar 01 20:50:37.640936 2026] [:error] [pid 40750:tid 40776] [client 20.104.206.150:8154] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaQ2HQfBuk03yQKDyqsb7QAAAdc"]
[Sun Mar 01 20:50:38.059109 2026] [:error] [pid 40750:tid 40756] [client 20.104.206.150:8084] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQ2HgfBuk03yQKDyqsb8AAAAcM"]
[Sun Mar 01 20:50:38.516492 2026] [:error] [pid 40750:tid 40774] [client 20.104.206.150:8070] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQ2HgfBuk03yQKDyqsb9gAAAdU"]
[Sun Mar 01 20:50:38.965607 2026] [:error] [pid 7165:tid 7187] [client 20.104.206.150:8117] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQ2HhRjCrA8qWBjgG8nhQAAAlQ"]
[Sun Mar 01 20:50:39.383594 2026] [:error] [pid 40750:tid 40765] [client 20.104.206.150:8137] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache-compat.php"] [unique_id "aaQ2HwfBuk03yQKDyqsb_AAAAcw"]
[Sun Mar 01 20:50:39.838340 2026] [:error] [pid 40750:tid 40756] [client 20.104.206.150:8068] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aaQ2HwfBuk03yQKDyqsb_wAAAcM"]
[Sun Mar 01 20:50:40.279296 2026] [:error] [pid 40750:tid 40753] [client 20.104.206.150:8188] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aaQ2IAfBuk03yQKDyqscAwAAAcA"]
[Sun Mar 01 20:50:40.729646 2026] [:error] [pid 37032:tid 37038] [client 20.104.206.150:8170] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aaQ2IOu0U4o7eSImsVR7-wAAAYQ"]
[Sun Mar 01 20:50:41.169225 2026] [:error] [pid 40750:tid 40767] [client 20.104.206.150:8176] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fw.php"] [unique_id "aaQ2IQfBuk03yQKDyqscCQAAAc4"]
[Sun Mar 01 20:50:41.644583 2026] [:error] [pid 40750:tid 40754] [client 20.104.206.150:8066] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aaQ2IQfBuk03yQKDyqscDwAAAcE"]
[Sun Mar 01 20:50:42.065282 2026] [:error] [pid 7133:tid 7156] [client 20.104.206.150:8190] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aaQ2IvCtubh8pR64qB86uwAAAFU"]
[Sun Mar 01 20:50:42.481731 2026] [:error] [pid 7133:tid 7150] [client 20.104.206.150:8080] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aaQ2IvCtubh8pR64qB86vwAAAE8"]
[Sun Mar 01 20:50:42.932284 2026] [:error] [pid 7133:tid 7137] [client 20.104.206.150:8076] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/berlin.php"] [unique_id "aaQ2IvCtubh8pR64qB86xAAAAEI"]
[Sun Mar 01 20:50:43.350373 2026] [:error] [pid 7133:tid 7145] [client 20.104.206.150:8106] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aaQ2I_Ctubh8pR64qB86zQAAAEo"]
[Sun Mar 01 20:50:43.807445 2026] [:error] [pid 38034:tid 38044] [client 20.104.206.150:8136] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aaQ2IwxtfZjwlJok9K8RswAAAQY"]
[Sun Mar 01 20:50:44.244652 2026] [:error] [pid 40750:tid 40776] [client 20.104.206.150:8014] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aaQ2JAfBuk03yQKDyqscHQAAAdc"]
[Sun Mar 01 20:50:44.712402 2026] [:error] [pid 40750:tid 40753] [client 20.104.206.150:8160] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abe.php"] [unique_id "aaQ2JAfBuk03yQKDyqscIgAAAcA"]
[Sun Mar 01 20:50:45.188831 2026] [:error] [pid 40750:tid 40761] [client 20.104.206.150:8114] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQ2JQfBuk03yQKDyqscJQAAAcg"]
[Sun Mar 01 20:50:45.636154 2026] [:error] [pid 40750:tid 40766] [client 20.104.206.150:8146] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQ2JQfBuk03yQKDyqscKgAAAc0"]
[Sun Mar 01 20:50:46.155458 2026] [:error] [pid 44644:tid 44654] [client 20.104.206.150:8018] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQ2Jp3RJaXMcw3y9V_bXAAAAAc"]
[Sun Mar 01 20:50:46.634644 2026] [:error] [pid 7133:tid 7155] [client 20.104.206.150:8069] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/otuz1.php"] [unique_id "aaQ2JvCtubh8pR64qB869gAAAFQ"]
[Sun Mar 01 20:50:47.068347 2026] [:error] [pid 40750:tid 40760] [client 20.104.206.150:8163] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQ2JwfBuk03yQKDyqscMQAAAcc"]
[Sun Mar 01 20:50:47.500025 2026] [:error] [pid 40750:tid 40766] [client 20.104.206.150:8013] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQ2JwfBuk03yQKDyqscNQAAAc0"]
[Sun Mar 01 20:50:47.959326 2026] [:error] [pid 40750:tid 40775] [client 20.104.206.150:8166] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQ2JwfBuk03yQKDyqscOAAAAdY"]
[Sun Mar 01 20:50:48.391691 2026] [:error] [pid 40750:tid 40767] [client 20.104.206.150:8071] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-files.php"] [unique_id "aaQ2KAfBuk03yQKDyqscOQAAAc4"]
[Sun Mar 01 20:50:48.846935 2026] [:error] [pid 38241:tid 38263] [client 20.104.206.150:8102] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aaQ2KPKRPk6YnJBxw_wGRQAAANM"]
[Sun Mar 01 20:50:49.342512 2026] [:error] [pid 40750:tid 40765] [client 20.104.206.150:8095] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aaQ2KQfBuk03yQKDyqscPgAAAcw"]
[Sun Mar 01 20:50:49.809269 2026] [:error] [pid 40750:tid 40776] [client 20.104.206.150:8087] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aaQ2KQfBuk03yQKDyqscQgAAAdc"]
[Sun Mar 01 20:50:50.277137 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:8003] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj.php"] [unique_id "aaQ2KgfBuk03yQKDyqscSAAAAco"]
[Sun Mar 01 20:50:50.744583 2026] [:error] [pid 40750:tid 40762] [client 20.104.206.150:8145] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/he.php"] [unique_id "aaQ2KgfBuk03yQKDyqscSgAAAck"]
[Sun Mar 01 20:50:51.177004 2026] [:error] [pid 40750:tid 40764] [client 20.104.206.150:8171] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/he.php"] [unique_id "aaQ2KwfBuk03yQKDyqscTQAAAcs"]
[Sun Mar 01 20:50:51.617864 2026] [:error] [pid 33822:tid 33840] [client 20.104.206.150:8074] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/he.php"] [unique_id "aaQ2K26W3ygu1YVssuYY1QAAApA"]
[Sun Mar 01 20:50:52.043394 2026] [:error] [pid 40750:tid 40764] [client 20.104.206.150:8129] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/he.php"] [unique_id "aaQ2LAfBuk03yQKDyqscUgAAAcs"]
[Sun Mar 01 20:50:52.459431 2026] [:error] [pid 7165:tid 7178] [client 20.104.206.150:8075] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aaQ2LBRjCrA8qWBjgG8nkwAAAks"]
[Sun Mar 01 20:50:52.879444 2026] [:error] [pid 7165:tid 7168] [client 20.104.206.150:8065] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aaQ2LBRjCrA8qWBjgG8nlAAAAkE"]
[Sun Mar 01 20:50:53.302518 2026] [:error] [pid 7165:tid 7175] [client 20.104.206.150:8122] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aaQ2LRRjCrA8qWBjgG8nmAAAAkg"]
[Sun Mar 01 20:50:53.722972 2026] [:error] [pid 7133:tid 7155] [client 20.104.206.150:8185] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "aaQ2LfCtubh8pR64qB87CAAAAFQ"]
[Sun Mar 01 20:50:54.205678 2026] [:error] [pid 7165:tid 7177] [client 20.104.206.150:8129] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aaQ2LhRjCrA8qWBjgG8nnAAAAko"]
[Sun Mar 01 20:50:54.632263 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:8189] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aaQ2LgfBuk03yQKDyqscVwAAAco"]
[Sun Mar 01 20:50:55.093957 2026] [:error] [pid 7133:tid 7145] [client 20.104.206.150:8012] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aaQ2L_Ctubh8pR64qB87DgAAAEo"]
[Sun Mar 01 20:50:55.571055 2026] [:error] [pid 7165:tid 7188] [client 20.104.206.150:8023] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aaQ2LxRjCrA8qWBjgG8noQAAAlU"]
[Sun Mar 01 20:50:55.993305 2026] [:error] [pid 38241:tid 38253] [client 20.104.206.150:8079] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blog.php"] [unique_id "aaQ2L_KRPk6YnJBxw_wGVwAAAMk"]
[Sun Mar 01 20:50:56.466561 2026] [:error] [pid 40750:tid 40754] [client 20.104.206.150:8089] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blog.php"] [unique_id "aaQ2MAfBuk03yQKDyqscWwAAAcE"]
[Sun Mar 01 20:50:56.881362 2026] [:error] [pid 7165:tid 7172] [client 20.104.206.150:8148] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blog.php"] [unique_id "aaQ2MBRjCrA8qWBjgG8npgAAAkU"]
[Sun Mar 01 20:50:57.304984 2026] [:error] [pid 40750:tid 40753] [client 20.104.206.150:8175] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blog.php"] [unique_id "aaQ2MQfBuk03yQKDyqscYQAAAcA"]
[Sun Mar 01 20:50:57.729085 2026] [:error] [pid 40750:tid 40768] [client 20.104.206.150:8021] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQ2MQfBuk03yQKDyqscZgAAAc8"]
[Sun Mar 01 20:50:58.199206 2026] [:error] [pid 40750:tid 40757] [client 20.104.206.150:8078] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQ2MgfBuk03yQKDyqscawAAAcQ"]
[Sun Mar 01 20:50:58.680285 2026] [:error] [pid 7165:tid 7185] [client 20.104.206.150:8086] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQ2MhRjCrA8qWBjgG8nqwAAAlI"]
[Sun Mar 01 20:50:59.183074 2026] [:error] [pid 41342:tid 41351] [client 20.104.206.150:8119] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php7"] [unique_id "aaQ2M44iJ6RAS5CatDldPwAAAgY"]
[Sun Mar 01 20:50:59.661474 2026] [:error] [pid 7133:tid 7147] [client 20.104.206.150:8162] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aaQ2M_Ctubh8pR64qB87FQAAAEw"]
[Sun Mar 01 20:51:00.078254 2026] [:error] [pid 38034:tid 38048] [client 20.104.206.150:8056] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aaQ2NAxtfZjwlJok9K8RtQAAAQo"]
[Sun Mar 01 20:51:00.554771 2026] [:error] [pid 7133:tid 7155] [client 20.104.206.150:8161] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aaQ2NPCtubh8pR64qB87GwAAAFQ"]
[Sun Mar 01 20:51:00.978027 2026] [:error] [pid 38241:tid 38258] [client 20.104.206.150:8153] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lufix.php"] [unique_id "aaQ2NPKRPk6YnJBxw_wGWwAAAM4"]
[Sun Mar 01 20:51:01.416762 2026] [:error] [pid 40750:tid 40760] [client 20.104.206.150:8005] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQ2NQfBuk03yQKDyqscdgAAAcc"]
[Sun Mar 01 20:51:01.894565 2026] [:error] [pid 40750:tid 40759] [client 20.104.206.150:8147] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQ2NQfBuk03yQKDyqsceAAAAcY"]
[Sun Mar 01 20:51:02.456563 2026] [:error] [pid 40750:tid 40762] [client 20.104.206.150:7945] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQ2NgfBuk03yQKDyqsceQAAAck"]
[Sun Mar 01 20:51:02.977358 2026] [:error] [pid 40750:tid 40766] [client 20.104.206.150:8015] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax-actions.php"] [unique_id "aaQ2NgfBuk03yQKDyqscfgAAAc0"]
[Sun Mar 01 20:51:03.420682 2026] [:error] [pid 7165:tid 7178] [client 20.104.206.150:8121] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQ2NxRjCrA8qWBjgG8nsgAAAks"]
[Sun Mar 01 20:51:03.908338 2026] [:error] [pid 41342:tid 41358] [client 20.104.206.150:8100] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQ2N44iJ6RAS5CatDldQQAAAg0"]
[Sun Mar 01 20:51:04.336955 2026] [:error] [pid 7133:tid 7159] [client 20.104.206.150:8083] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQ2OPCtubh8pR64qB87JAAAAFg"]
[Sun Mar 01 20:51:04.780708 2026] [:error] [pid 40750:tid 40775] [client 20.104.206.150:8096] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaQ2OAfBuk03yQKDyqschAAAAdY"]
[Sun Mar 01 20:51:05.205446 2026] [:error] [pid 40750:tid 40759] [client 20.104.206.150:8127] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aaQ2OQfBuk03yQKDyqschwAAAcY"]
[Sun Mar 01 20:51:05.682784 2026] [:error] [pid 40750:tid 40756] [client 20.104.206.150:8186] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aaQ2OQfBuk03yQKDyqsciwAAAcM"]
[Sun Mar 01 20:51:06.136195 2026] [:error] [pid 40750:tid 40763] [client 20.104.206.150:8010] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aaQ2OgfBuk03yQKDyqscjgAAAco"]
[Sun Mar 01 20:51:06.558911 2026] [:error] [pid 40750:tid 40773] [client 20.104.206.150:8116] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "aaQ2OgfBuk03yQKDyqsckAAAAdQ"]
[Sun Mar 01 20:51:07.028975 2026] [:error] [pid 40750:tid 40759] [client 20.104.206.150:8103] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aaQ2OwfBuk03yQKDyqsclgAAAcY"]
[Sun Mar 01 20:51:07.507769 2026] [:error] [pid 38241:tid 38267] [client 20.104.206.150:8040] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aaQ2O_KRPk6YnJBxw_wGawAAANc"]
[Sun Mar 01 20:51:08.022944 2026] [:error] [pid 40750:tid 40773] [client 20.104.206.150:8143] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aaQ2PAfBuk03yQKDyqscoAAAAdQ"]
[Sun Mar 01 20:51:08.492049 2026] [:error] [pid 38034:tid 38045] [client 20.104.206.150:8098] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "aaQ2PAxtfZjwlJok9K8RvgAAAQc"]
[Sun Mar 01 20:51:08.917746 2026] [:error] [pid 40750:tid 40762] [client 20.104.206.150:8048] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/browse.php"] [unique_id "aaQ2PAfBuk03yQKDyqscpgAAAck"]
[Sun Mar 01 20:51:09.372868 2026] [:error] [pid 40750:tid 40756] [client 20.104.206.150:8091] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/browse.php"] [unique_id "aaQ2PQfBuk03yQKDyqscqAAAAcM"]
[Sun Mar 01 20:51:09.818113 2026] [:error] [pid 7165:tid 7175] [client 20.104.206.150:8135] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/browse.php"] [unique_id "aaQ2PRRjCrA8qWBjgG8ntgAAAkg"]
[Sun Mar 01 20:51:10.300054 2026] [:error] [pid 38241:tid 38268] [client 20.104.206.150:8033] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/browse.php"] [unique_id "aaQ2PvKRPk6YnJBxw_wGbQAAANg"]
[Sun Mar 01 20:51:10.754658 2026] [:error] [pid 38241:tid 38257] [client 20.104.206.150:8001] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aaQ2PvKRPk6YnJBxw_wGcAAAAM0"]
[Sun Mar 01 20:51:11.231360 2026] [:error] [pid 38241:tid 38249] [client 20.104.206.150:7939] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aaQ2P_KRPk6YnJBxw_wGdAAAAMU"]
[Sun Mar 01 20:51:11.671074 2026] [:error] [pid 7165:tid 7186] [client 20.104.206.150:8007] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aaQ2PxRjCrA8qWBjgG8nuQAAAlM"]
[Sun Mar 01 20:51:12.096710 2026] [:error] [pid 40750:tid 40772] [client 20.104.206.150:8064] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/license.php"] [unique_id "aaQ2QAfBuk03yQKDyqscrQAAAdM"]
[Sun Mar 01 20:51:12.510852 2026] [:error] [pid 41342:tid 41363] [client 20.104.206.150:8090] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaQ2QI4iJ6RAS5CatDldRQAAAhI"]
[Sun Mar 01 20:51:12.936368 2026] [:error] [pid 40750:tid 40775] [client 20.104.206.150:7964] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaQ2QAfBuk03yQKDyqscsgAAAdY"]
[Sun Mar 01 20:51:13.360054 2026] [:error] [pid 40750:tid 40767] [client 20.104.206.150:8029] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaQ2QQfBuk03yQKDyqsctwAAAc4"]
[Sun Mar 01 20:51:13.791143 2026] [:error] [pid 40750:tid 40776] [client 20.104.206.150:7959] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/contact.php"] [unique_id "aaQ2QQfBuk03yQKDyqscugAAAdc"]
[Sun Mar 01 20:51:14.223700 2026] [:error] [pid 40750:tid 40769] [client 20.104.206.150:8004] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaQ2QgfBuk03yQKDyqscvgAAAdA"]
[Sun Mar 01 20:51:14.663869 2026] [:error] [pid 40750:tid 40768] [client 20.104.206.150:8118] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaQ2QgfBuk03yQKDyqscwgAAAc8"]
[Sun Mar 01 20:51:15.104254 2026] [:error] [pid 40750:tid 40758] [client 20.104.206.150:8158] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaQ2QwfBuk03yQKDyqscxAAAAcU"]
[Sun Mar 01 20:51:15.555167 2026] [:error] [pid 7165:tid 7176] [client 20.104.206.150:8008] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/minik.php"] [unique_id "aaQ2QxRjCrA8qWBjgG8nvAAAAkk"]
[Sun Mar 01 20:51:15.985041 2026] [:error] [pid 7165:tid 7183] [client 20.104.206.150:8141] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaQ2QxRjCrA8qWBjgG8nvgAAAlA"]
[Sun Mar 01 20:51:16.418891 2026] [:error] [pid 37032:tid 37055] [client 20.104.206.150:8181] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaQ2ROu0U4o7eSImsVR8BQAAAZU"]
[Sun Mar 01 20:51:16.840236 2026] [:error] [pid 7133:tid 7135] [client 20.104.206.150:8038] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaQ2RPCtubh8pR64qB87OgAAAEA"]
[Sun Mar 01 20:51:17.273053 2026] [:error] [pid 40750:tid 40771] [client 20.104.206.150:8072] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/st.php"] [unique_id "aaQ2RQfBuk03yQKDyqsczgAAAdI"]
[Sun Mar 01 20:51:17.704847 2026] [:error] [pid 33822:tid 33837] [client 20.104.206.150:8101] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upgrade.php"] [unique_id "aaQ2RW6W3ygu1YVssuYY6gAAAo0"]
[Sun Mar 01 20:51:18.145290 2026] [:error] [pid 33822:tid 33836] [client 20.104.206.150:8165] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upgrade.php"] [unique_id "aaQ2Rm6W3ygu1YVssuYY7AAAAow"]
[Sun Mar 01 20:51:18.569900 2026] [:error] [pid 38241:tid 38245] [client 20.104.206.150:8093] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upgrade.php"] [unique_id "aaQ2RvKRPk6YnJBxw_wGeAAAAME"]
[Sun Mar 01 20:51:19.002697 2026] [:error] [pid 7133:tid 7157] [client 20.104.206.150:8037] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upgrade.php"] [unique_id "aaQ2R_Ctubh8pR64qB87RQAAAFY"]
[Sun Mar 01 21:58:18.078497 2026] [:error] [pid 7165:tid 7171] [client 40.85.219.62:40344] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-hRjCrA8qWBjgG9gMQAAAkQ"]
[Sun Mar 01 21:58:18.915899 2026] [:error] [pid 7165:tid 7176] [client 40.85.219.62:40321] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-hRjCrA8qWBjgG9gPgAAAkk"]
[Sun Mar 01 21:58:19.753659 2026] [:error] [pid 7165:tid 7173] [client 40.85.219.62:40645] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRF-xRjCrA8qWBjgG9gSgAAAkY"]
[Sun Mar 01 21:58:20.595312 2026] [:error] [pid 7165:tid 7168] [client 40.85.219.62:40651] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaRF_BRjCrA8qWBjgG9gTwAAAkE"]
[Sun Mar 01 22:03:17.383632 2026] [:error] [pid 40750:tid 40774] [client 40.85.219.62:5374] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRHJQfBuk03yQKDyqtiOgAAAdU"]
[Sun Mar 01 22:03:18.208317 2026] [:error] [pid 40750:tid 40762] [client 40.85.219.62:5352] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRHJgfBuk03yQKDyqtiPwAAAck"]
[Sun Mar 01 22:03:19.051702 2026] [:error] [pid 38034:tid 38050] [client 40.85.219.62:5391] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRHJwxtfZjwlJok9K8fXgAAAQw"]
[Sun Mar 01 22:03:19.897544 2026] [:error] [pid 33822:tid 33829] [client 40.85.219.62:5320] [client 40.85.219.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-corn-sample.php"] [unique_id "aaRHJ26W3ygu1YVssuYrWwAAAoU"]
[Sun Mar 01 22:41:38.982441 2026] [:error] [pid 40750:tid 40766] [client 49.7.227.204:49592] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaRQIgfBuk03yQKDyqt9xQAAAc0"]
[Sun Mar 01 22:58:41.107421 2026] [:error] [pid 40750:tid 40767] [client 43.130.40.120:60554] [client 43.130.40.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaRUIQfBuk03yQKDyquJYwAAAc4"]
[Sun Mar 01 23:54:09.883612 2026] [:error] [pid 40750:tid 40761] [client 20.220.162.180:12549] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 01 23:54:10.093402 2026] [:error] [pid 40750:tid 40773] [client 20.220.162.180:12549] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 01 23:54:10.512489 2026] [:error] [pid 40750:tid 40775] [client 20.220.162.180:12549] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 01 23:54:10.728963 2026] [:error] [pid 40750:tid 40771] [client 20.220.162.180:12549] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 01 23:54:11.147821 2026] [:error] [pid 40750:tid 40767] [client 20.220.162.180:12549] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 01 23:54:11.356080 2026] [:error] [pid 40750:tid 40776] [client 20.220.162.180:12549] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 01 23:54:11.565129 2026] [:error] [pid 40750:tid 40772] [client 20.220.162.180:12549] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 01 23:54:11.980514 2026] [:error] [pid 40750:tid 40758] [client 20.220.162.180:12549] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRhIwfBuk03yQKDyquv2QAAAcU"]
[Sun Mar 01 23:54:12.810463 2026] [:error] [pid 38241:tid 38268] [client 20.220.162.180:12933] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRhJPKRPk6YnJBxw_xddAAAANg"]
[Sun Mar 01 23:54:13.630754 2026] [:error] [pid 38034:tid 38054] [client 20.220.162.180:12547] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRhJQxtfZjwlJok9K82jgAAARA"]
[Sun Mar 01 23:54:14.450786 2026] [:error] [pid 7165:tid 7175] [client 20.220.162.180:12592] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRhJhRjCrA8qWBjgG_RpwAAAkg"]
[Mon Mar 02 00:30:49.259180 2026] [:error] [pid 53585:tid 53600] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Mon Mar 02 00:30:49.399533 2026] [:error] [pid 53585:tid 53592] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Mar 02 00:30:49.516836 2026] [:error] [pid 53585:tid 53606] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Mar 02 00:30:49.751851 2026] [:error] [pid 53585:tid 53603] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Mar 02 00:30:49.868733 2026] [:error] [pid 53585:tid 53595] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Mon Mar 02 00:30:49.985042 2026] [:error] [pid 53585:tid 53588] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Mon Mar 02 00:30:50.102748 2026] [:error] [pid 53585:tid 53608] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Mon Mar 02 00:30:50.242017 2026] [:error] [pid 53585:tid 53596] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Mon Mar 02 00:30:50.368959 2026] [:error] [pid 53585:tid 53611] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Mar 02 00:30:50.485261 2026] [:error] [pid 53585:tid 53602] [client 52.253.113.41:1391] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Mon Mar 02 00:30:50.598612 2026] [:error] [pid 53585:tid 53604] [client 52.253.113.41:1391] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaRpunbCvYsvu6kKhM1RrgAAABA"]
[Mon Mar 02 00:30:51.054432 2026] [:error] [pid 53180:tid 53446] [client 52.253.113.41:1351] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaRpuzPPJpDOBvYnaa039AAAAYI"]
[Mon Mar 02 00:30:51.645375 2026] [:error] [pid 53180:tid 53461] [client 52.253.113.41:1362] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaRpuzPPJpDOBvYnaa039wAAAZE"]
[Mon Mar 02 00:30:52.240285 2026] [:error] [pid 53181:tid 53525] [client 52.253.113.41:1380] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaRpvIr_0T1SazTrJOAUpQAAAQo"]
[Mon Mar 02 00:57:32.201034 2026] [:error] [pid 53181:tid 53531] [client 40.85.219.62:5196] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Mon Mar 02 00:57:32.408745 2026] [:error] [pid 53181:tid 53521] [client 40.85.219.62:5196] File does not exist: /usr/local/apache/htdocs/suspended-page/f.php
[Mon Mar 02 00:57:32.616431 2026] [:error] [pid 53181:tid 53533] [client 40.85.219.62:5196] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Mon Mar 02 00:57:32.823273 2026] [:error] [pid 53181:tid 53532] [client 40.85.219.62:5196] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Mon Mar 02 00:57:33.032470 2026] [:error] [pid 53181:tid 53537] [client 40.85.219.62:5196] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Mon Mar 02 00:57:33.237232 2026] [:error] [pid 53181:tid 53529] [client 40.85.219.62:5196] [client 40.85.219.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.85.219.62, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaRv_Yr_0T1SazTrJOAksAAAAQ4"]
[Mon Mar 02 00:57:33.237330 2026] [:error] [pid 53181:tid 53529] [client 40.85.219.62:5196] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 11"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaRv_Yr_0T1SazTrJOAksAAAAQ4"]
[Mon Mar 02 00:57:34.075615 2026] [:error] [pid 53180:tid 53464] [client 40.85.219.62:5189] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 11"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aaRv_jPPJpDOBvYnaa1FEgAAAZQ"]
[Mon Mar 02 00:57:34.923471 2026] [:error] [pid 26940:tid 26944] [client 40.85.219.62:6010] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 11"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "aaRv_hrUg-j5GLDtRFlyUAAAAEA"]
[Mon Mar 02 00:57:35.746988 2026] [:error] [pid 53182:tid 53552] [client 40.85.219.62:6013] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 11"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "aaRv__v073cA6eM1YCSxyQAAAMk"]
[Mon Mar 02 00:57:36.569979 2026] [:error] [pid 53585:tid 53612] [client 40.85.219.62:6009] [client 40.85.219.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 40.85.219.62, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaRwAHbCvYsvu6kKhM11dAAAABg"]
[Mon Mar 02 00:57:36.570024 2026] [:error] [pid 53585:tid 53612] [client 40.85.219.62:6009] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaRwAHbCvYsvu6kKhM11dAAAABg"]
[Mon Mar 02 00:57:37.395274 2026] [:error] [pid 26940:tid 26964] [client 40.85.219.62:5246] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaRwARrUg-j5GLDtRFlyXgAAAFQ"]
[Mon Mar 02 00:57:38.244216 2026] [:error] [pid 53585:tid 53594] [client 40.85.219.62:5216] [client 40.85.219.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 40.85.219.62, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRwAnbCvYsvu6kKhM11eQAAAAY"]
[Mon Mar 02 00:57:38.244313 2026] [:error] [pid 53585:tid 53594] [client 40.85.219.62:5216] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRwAnbCvYsvu6kKhM11eQAAAAY"]
[Mon Mar 02 00:57:39.070520 2026] [:error] [pid 26940:tid 26963] [client 40.85.219.62:5244] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "aaRwAxrUg-j5GLDtRFlyYgAAAFM"]
[Mon Mar 02 00:57:39.913335 2026] [:error] [pid 53182:tid 53557] [client 40.85.219.62:5981] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aaRwA_v073cA6eM1YCSx0gAAAM0"]
[Mon Mar 02 00:57:40.748670 2026] [:error] [pid 53585:tid 53590] [client 40.85.219.62:5989] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaRwBHbCvYsvu6kKhM11iwAAAAI"]
[Mon Mar 02 00:57:41.570772 2026] [:error] [pid 26940:tid 26951] [client 40.85.219.62:5190] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/upload/login.php"] [unique_id "aaRwBRrUg-j5GLDtRFlyaQAAAEc"]
[Mon Mar 02 00:57:42.388971 2026] [:error] [pid 26940:tid 26952] [client 40.85.219.62:6002] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaRwBhrUg-j5GLDtRFlybwAAAEg"]
[Mon Mar 02 00:57:43.211176 2026] [:error] [pid 53180:tid 53448] [client 40.85.219.62:5977] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aaRwBzPPJpDOBvYnaa1FKAAAAYQ"]
[Mon Mar 02 00:57:44.036485 2026] [:error] [pid 53181:tid 53525] [client 40.85.219.62:5187] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aaRwCIr_0T1SazTrJOAk0AAAAQo"]
[Mon Mar 02 00:57:44.862310 2026] [:error] [pid 53585:tid 53608] [client 40.85.219.62:5954] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aaRwCHbCvYsvu6kKhM11ogAAABQ"]
[Mon Mar 02 00:57:45.699499 2026] [:error] [pid 53182:tid 53559] [client 40.85.219.62:5202] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/"] [unique_id "aaRwCfv073cA6eM1YCSx4wAAAM8"]
[Mon Mar 02 00:57:46.532404 2026] [:error] [pid 26940:tid 26964] [client 40.85.219.62:5203] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aaRwChrUg-j5GLDtRFlyigAAAFQ"]
[Mon Mar 02 00:57:47.381794 2026] [:error] [pid 53180:tid 53457] [client 40.85.219.62:6012] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/"] [unique_id "aaRwCzPPJpDOBvYnaa1FLQAAAY0"]
[Mon Mar 02 00:57:48.204130 2026] [:error] [pid 53181:tid 53531] [client 40.85.219.62:5992] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aaRwDIr_0T1SazTrJOAk2AAAARA"]
[Mon Mar 02 00:57:49.028016 2026] [:error] [pid 53181:tid 53529] [client 40.85.219.62:5218] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "aaRwDYr_0T1SazTrJOAk3QAAAQ4"]
[Mon Mar 02 00:57:49.859874 2026] [:error] [pid 53180:tid 53468] [client 40.85.219.62:6000] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaRwDTPPJpDOBvYnaa1FMwAAAZg"]
[Mon Mar 02 00:57:50.705630 2026] [:error] [pid 26940:tid 26957] [client 40.85.219.62:5991] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaRwDhrUg-j5GLDtRFlyogAAAE0"]
[Mon Mar 02 00:57:51.539963 2026] [:error] [pid 26940:tid 26945] [client 40.85.219.62:5967] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aaRwDxrUg-j5GLDtRFlyrAAAAEE"]
[Mon Mar 02 00:57:52.363951 2026] [:error] [pid 53585:tid 53601] [client 40.85.219.62:5235] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aaRwEHbCvYsvu6kKhM11uAAAAA0"]
[Mon Mar 02 00:57:53.185887 2026] [:error] [pid 53182:tid 53557] [client 40.85.219.62:6006] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admiin.php"] [unique_id "aaRwEfv073cA6eM1YCSx9gAAAM0"]
[Mon Mar 02 00:57:54.008180 2026] [:error] [pid 53585:tid 53607] [client 40.85.219.62:5998] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/admin.phphttps://www-vn500.com/inputs.php"] [unique_id "aaRwEnbCvYsvu6kKhM11vAAAABM"]
[Mon Mar 02 00:57:54.832816 2026] [:error] [pid 53180:tid 53466] [client 40.85.219.62:6003] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aaRwEjPPJpDOBvYnaa1FPAAAAZY"]
[Mon Mar 02 00:57:55.662903 2026] [:error] [pid 53585:tid 53599] [client 40.85.219.62:5245] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/"] [unique_id "aaRwE3bCvYsvu6kKhM11wwAAAAs"]
[Mon Mar 02 00:57:56.487644 2026] [:error] [pid 53182:tid 53549] [client 40.85.219.62:5215] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aaRwFPv073cA6eM1YCSyCAAAAMY"]
[Mon Mar 02 00:57:57.333696 2026] [:error] [pid 26940:tid 26968] [client 40.85.219.62:5987] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "aaRwFRrUg-j5GLDtRFlyyQAAAFg"]
[Mon Mar 02 00:57:58.167110 2026] [:error] [pid 26940:tid 26953] [client 40.85.219.62:5214] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "aaRwFhrUg-j5GLDtRFly1gAAAEk"]
[Mon Mar 02 00:57:58.994771 2026] [:error] [pid 26940:tid 26966] [client 40.85.219.62:5209] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaRwFhrUg-j5GLDtRFly5gAAAFY"]
[Mon Mar 02 00:57:59.815343 2026] [:error] [pid 53585:tid 53608] [client 40.85.219.62:5206] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2023/08/"] [unique_id "aaRwF3bCvYsvu6kKhM110AAAABQ"]
[Mon Mar 02 00:58:00.642325 2026] [:error] [pid 53585:tid 53602] [client 40.85.219.62:5990] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aaRwGHbCvYsvu6kKhM111AAAAA4"]
[Mon Mar 02 00:58:01.477745 2026] [:error] [pid 53181:tid 53527] [client 40.85.219.62:5243] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aaRwGYr_0T1SazTrJOAk8gAAAQw"]
[Mon Mar 02 00:58:02.327977 2026] [:error] [pid 53585:tid 53591] [client 40.85.219.62:5207] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aaRwGnbCvYsvu6kKhM112QAAAAM"]
[Mon Mar 02 00:58:03.170197 2026] [:error] [pid 26940:tid 26949] [client 40.85.219.62:5236] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaRwGxrUg-j5GLDtRFly_gAAAEU"]
[Mon Mar 02 00:58:03.998731 2026] [:error] [pid 26940:tid 26956] [client 40.85.219.62:5223] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaRwGxrUg-j5GLDtRFlzCQAAAEw"]
[Mon Mar 02 00:58:04.846477 2026] [:error] [pid 26940:tid 26950] [client 40.85.219.62:5988] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aaRwHBrUg-j5GLDtRFlzEwAAAEY"]
[Mon Mar 02 00:58:05.689679 2026] [:error] [pid 26940:tid 26966] [client 40.85.219.62:5139] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-content/wp-conflg.php"] [unique_id "aaRwHRrUg-j5GLDtRFlzHwAAAFY"]
[Mon Mar 02 00:58:06.514062 2026] [:error] [pid 26940:tid 26949] [client 40.85.219.62:5200] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "aaRwHhrUg-j5GLDtRFlzKwAAAEU"]
[Mon Mar 02 00:58:07.338348 2026] [:error] [pid 26940:tid 26968] [client 40.85.219.62:5212] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aaRwHxrUg-j5GLDtRFlzOQAAAFg"]
[Mon Mar 02 00:58:08.185183 2026] [:error] [pid 53180:tid 53445] [client 40.85.219.62:5137] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aaRwIDPPJpDOBvYnaa1FXQAAAYE"]
[Mon Mar 02 00:58:09.018549 2026] [:error] [pid 53180:tid 53463] [client 40.85.219.62:5210] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaRwITPPJpDOBvYnaa1FXwAAAZM"]
[Mon Mar 02 00:58:09.843119 2026] [:error] [pid 26940:tid 26944] [client 40.85.219.62:5125] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "aaRwIRrUg-j5GLDtRFlzRwAAAEA"]
[Mon Mar 02 00:58:10.666588 2026] [:error] [pid 53181:tid 53535] [client 40.85.219.62:5966] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "aaRwIor_0T1SazTrJOAk-gAAARQ"]
[Mon Mar 02 00:58:11.488210 2026] [:error] [pid 53585:tid 53597] [client 40.85.219.62:5184] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aaRwI3bCvYsvu6kKhM118wAAAAk"]
[Mon Mar 02 00:58:12.313062 2026] [:error] [pid 53182:tid 53559] [client 40.85.219.62:6005] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaRwJPv073cA6eM1YCSyIwAAAM8"]
[Mon Mar 02 00:58:13.136327 2026] [:error] [pid 53181:tid 53532] [client 40.85.219.62:5220] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "aaRwJYr_0T1SazTrJOAlDgAAARE"]
[Mon Mar 02 00:58:13.971178 2026] [:error] [pid 53181:tid 53536] [client 40.85.219.62:5972] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 40.85.219.62 on wp-login.php, counter = 12"] [hostname "dbservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "aaRwJYr_0T1SazTrJOAlGQAAARU"]
[Mon Mar 02 00:58:14.799359 2026] [:error] [pid 53180:tid 53444] [client 40.85.219.62:6008] [client 40.85.219.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaRwJjPPJpDOBvYnaa1FawAAAYA"]
[Mon Mar 02 01:05:19.957618 2026] [:error] [pid 53180:tid 53446] [client 43.128.67.187:59262] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaRxzzPPJpDOBvYnaa1IPQAAAYI"]
[Mon Mar 02 01:58:24.187578 2026] [:error] [pid 53181:tid 53535] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Mon Mar 02 01:58:24.464446 2026] [:error] [pid 53181:tid 53528] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Mon Mar 02 01:58:24.716769 2026] [:error] [pid 53181:tid 53531] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Mon Mar 02 01:58:24.974812 2026] [:error] [pid 53181:tid 53518] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Mon Mar 02 01:58:25.229956 2026] [:error] [pid 53181:tid 53526] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Mon Mar 02 01:58:25.512949 2026] [:error] [pid 53181:tid 53525] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 02 01:58:25.767840 2026] [:error] [pid 53181:tid 53539] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Mon Mar 02 01:58:26.020891 2026] [:error] [pid 53181:tid 53515] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Mar 02 01:58:26.319500 2026] [:error] [pid 53181:tid 53532] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Mar 02 01:58:26.572946 2026] [:error] [pid 53181:tid 53527] [client 20.107.201.194:24949] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Mon Mar 02 01:58:26.832741 2026] [:error] [pid 53181:tid 53523] [client 20.107.201.194:24949] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaR-Qor_0T1SazTrJOBDuQAAAQg"]
[Mon Mar 02 01:58:27.389928 2026] [:error] [pid 53585:tid 53600] [client 20.107.201.194:12118] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaR-Q3bCvYsvu6kKhM2vLwAAAAw"]
[Mon Mar 02 01:58:28.024152 2026] [:error] [pid 53181:tid 53524] [client 20.107.201.194:28848] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaR-RIr_0T1SazTrJOBDuwAAAQk"]
[Mon Mar 02 01:58:28.601134 2026] [:error] [pid 53182:tid 53543] [client 20.107.201.194:12132] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aaR-RPv073cA6eM1YCTZ0QAAAMA"]
[Mon Mar 02 01:58:29.144700 2026] [:error] [pid 53182:tid 53568] [client 20.107.201.194:17095] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaR-Rfv073cA6eM1YCTZ1QAAANg"]
[Mon Mar 02 01:58:29.648751 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:28827] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaR-RRrUg-j5GLDtRFnBEwAAAEs"]
[Mon Mar 02 01:58:30.151973 2026] [:error] [pid 53585:tid 53610] [client 20.107.201.194:17133] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaR-RnbCvYsvu6kKhM2vNgAAABY"]
[Mon Mar 02 01:58:30.719104 2026] [:error] [pid 53182:tid 53562] [client 20.107.201.194:23556] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "aaR-Rvv073cA6eM1YCTZ4AAAANI"]
[Mon Mar 02 01:58:31.231295 2026] [:error] [pid 53585:tid 53595] [client 20.107.201.194:25145] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaR-R3bCvYsvu6kKhM2vPwAAAAc"]
[Mon Mar 02 01:58:31.742832 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:8400] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaR-R3bCvYsvu6kKhM2vRQAAAAE"]
[Mon Mar 02 01:58:32.279248 2026] [:error] [pid 53180:tid 53452] [client 20.107.201.194:28791] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaR-SDPPJpDOBvYnaa1ebAAAAYg"]
[Mon Mar 02 01:58:32.785298 2026] [:error] [pid 53585:tid 53600] [client 20.107.201.194:25100] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aaR-SHbCvYsvu6kKhM2vTgAAAAw"]
[Mon Mar 02 01:58:33.284729 2026] [:error] [pid 53180:tid 53463] [client 20.107.201.194:12130] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaR-STPPJpDOBvYnaa1ecgAAAZM"]
[Mon Mar 02 01:58:33.836955 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:14821] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaR-SRrUg-j5GLDtRFnBLAAAAFg"]
[Mon Mar 02 01:58:34.365300 2026] [:error] [pid 53585:tid 53591] [client 20.107.201.194:28782] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaR-SnbCvYsvu6kKhM2vVgAAAAM"]
[Mon Mar 02 01:58:34.877687 2026] [:error] [pid 53180:tid 53453] [client 20.107.201.194:6100] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "aaR-SjPPJpDOBvYnaa1eeQAAAYk"]
[Mon Mar 02 01:58:35.377536 2026] [:error] [pid 53585:tid 53593] [client 20.107.201.194:14835] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaR-S3bCvYsvu6kKhM2vYAAAAAU"]
[Mon Mar 02 01:58:35.947481 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:25123] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaR-SxrUg-j5GLDtRFnBPgAAAEs"]
[Mon Mar 02 01:58:36.469953 2026] [:error] [pid 53181:tid 53533] [client 20.107.201.194:14918] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaR-TIr_0T1SazTrJOBD6QAAARI"]
[Mon Mar 02 01:58:37.076937 2026] [:error] [pid 53182:tid 53559] [client 20.107.201.194:6141] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "aaR-Tfv073cA6eM1YCTZ6gAAAM8"]
[Mon Mar 02 01:58:37.600058 2026] [:error] [pid 53181:tid 53528] [client 20.107.201.194:6108] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avim.php"] [unique_id "aaR-TYr_0T1SazTrJOBD7AAAAQ0"]
[Mon Mar 02 01:58:38.202340 2026] [:error] [pid 53181:tid 53525] [client 20.107.201.194:28743] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avim.php"] [unique_id "aaR-Tor_0T1SazTrJOBD8wAAAQo"]
[Mon Mar 02 01:58:38.753255 2026] [:error] [pid 53181:tid 53528] [client 20.107.201.194:28858] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avim.php"] [unique_id "aaR-Tor_0T1SazTrJOBD_AAAAQ0"]
[Mon Mar 02 01:58:39.314371 2026] [:error] [pid 53585:tid 53590] [client 20.107.201.194:20570] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/avim.php"] [unique_id "aaR-T3bCvYsvu6kKhM2vdAAAAAI"]
[Mon Mar 02 01:58:39.861901 2026] [:error] [pid 53585:tid 53606] [client 20.107.201.194:8614] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaR-T3bCvYsvu6kKhM2vewAAABI"]
[Mon Mar 02 01:58:40.496656 2026] [:error] [pid 53182:tid 53562] [client 20.107.201.194:14731] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaR-UPv073cA6eM1YCTZ9gAAANI"]
[Mon Mar 02 01:58:41.063310 2026] [:error] [pid 53180:tid 53458] [client 20.107.201.194:17451] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaR-UTPPJpDOBvYnaa1ejgAAAY4"]
[Mon Mar 02 01:58:41.599728 2026] [:error] [pid 53585:tid 53594] [client 20.107.201.194:28768] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "aaR-UXbCvYsvu6kKhM2vgwAAAAY"]
[Mon Mar 02 01:58:42.164137 2026] [:error] [pid 53180:tid 53463] [client 20.107.201.194:12127] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaR-UjPPJpDOBvYnaa1ekwAAAZM"]
[Mon Mar 02 01:58:42.706133 2026] [:error] [pid 53585:tid 53610] [client 20.107.201.194:14833] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaR-UnbCvYsvu6kKhM2vjAAAABY"]
[Mon Mar 02 01:58:43.328337 2026] [:error] [pid 53180:tid 53451] [client 20.107.201.194:25132] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaR-UzPPJpDOBvYnaa1elwAAAYc"]
[Mon Mar 02 01:58:43.870425 2026] [:error] [pid 26940:tid 26966] [client 20.107.201.194:20603] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "aaR-UxrUg-j5GLDtRFnBYQAAAFY"]
[Mon Mar 02 01:58:44.453364 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:14810] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaR-VBrUg-j5GLDtRFnBZAAAAFc"]
[Mon Mar 02 01:58:44.995297 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:18465] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaR-VBrUg-j5GLDtRFnBaQAAAFg"]
[Mon Mar 02 01:58:45.588513 2026] [:error] [pid 53585:tid 53599] [client 20.107.201.194:20564] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaR-VXbCvYsvu6kKhM2voQAAAAs"]
[Mon Mar 02 01:58:46.114106 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:14750] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aaR-Vvv073cA6eM1YCTaFwAAANc"]
[Mon Mar 02 01:58:46.664999 2026] [:error] [pid 53181:tid 53517] [client 20.107.201.194:14932] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaR-Vor_0T1SazTrJOBEJgAAAQM"]
[Mon Mar 02 01:58:47.189591 2026] [:error] [pid 53181:tid 53525] [client 20.107.201.194:17410] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaR-V4r_0T1SazTrJOBELAAAAQo"]
[Mon Mar 02 01:58:47.710814 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:14797] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaR-VxrUg-j5GLDtRFnBdgAAAEQ"]
[Mon Mar 02 01:58:48.298699 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:25149] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aaR-WBrUg-j5GLDtRFnBfwAAAEE"]
[Mon Mar 02 01:58:48.881050 2026] [:error] [pid 53182:tid 53560] [client 20.107.201.194:13107] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaR-WPv073cA6eM1YCTaIAAAANA"]
[Mon Mar 02 01:58:49.403261 2026] [:error] [pid 53182:tid 53566] [client 20.107.201.194:20556] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaR-Wfv073cA6eM1YCTaKgAAANY"]
[Mon Mar 02 01:58:49.909006 2026] [:error] [pid 53180:tid 53448] [client 20.107.201.194:20593] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaR-WTPPJpDOBvYnaa1eqQAAAYQ"]
[Mon Mar 02 01:58:50.479663 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:18440] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "aaR-WhrUg-j5GLDtRFnBhwAAAEo"]
[Mon Mar 02 01:58:51.077192 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:6088] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaR-WxrUg-j5GLDtRFnBiQAAAEE"]
[Mon Mar 02 01:58:51.665327 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:13062] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaR-WxrUg-j5GLDtRFnBjQAAAFI"]
[Mon Mar 02 01:58:52.219054 2026] [:error] [pid 53585:tid 53612] [client 20.107.201.194:28761] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaR-XHbCvYsvu6kKhM2vxAAAABg"]
[Mon Mar 02 01:58:52.747300 2026] [:error] [pid 53182:tid 53555] [client 20.107.201.194:20583] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aaR-XPv073cA6eM1YCTaOAAAAMs"]
[Mon Mar 02 01:58:53.326491 2026] [:error] [pid 53182:tid 53545] [client 20.107.201.194:6133] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsws.php"] [unique_id "aaR-Xfv073cA6eM1YCTaPgAAAMI"]
[Mon Mar 02 01:58:53.924930 2026] [:error] [pid 53180:tid 53455] [client 20.107.201.194:28785] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsws.php"] [unique_id "aaR-XTPPJpDOBvYnaa1eugAAAYs"]
[Mon Mar 02 01:58:54.437657 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:6115] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsws.php"] [unique_id "aaR-XhrUg-j5GLDtRFnBnAAAAFI"]
[Mon Mar 02 01:58:54.949814 2026] [:error] [pid 53180:tid 53460] [client 20.107.201.194:6140] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsws.php"] [unique_id "aaR-XjPPJpDOBvYnaa1exAAAAZA"]
[Mon Mar 02 01:58:55.466974 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:26839] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-in.php"] [unique_id "aaR-XxrUg-j5GLDtRFnBnwAAAEI"]
[Mon Mar 02 01:58:56.001642 2026] [:error] [pid 53181:tid 53534] [client 20.107.201.194:6099] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-in.php"] [unique_id "aaR-YIr_0T1SazTrJOBEXwAAARM"]
[Mon Mar 02 01:58:56.513482 2026] [:error] [pid 53585:tid 53601] [client 20.107.201.194:17463] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-in.php"] [unique_id "aaR-YHbCvYsvu6kKhM2v2AAAAA0"]
[Mon Mar 02 01:58:57.061697 2026] [:error] [pid 53585:tid 53598] [client 20.107.201.194:6098] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-in.php"] [unique_id "aaR-YXbCvYsvu6kKhM2v3QAAAAo"]
[Mon Mar 02 01:58:57.595242 2026] [:error] [pid 26940:tid 26966] [client 20.107.201.194:28757] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaR-YRrUg-j5GLDtRFnBtQAAAFY"]
[Mon Mar 02 01:58:58.127284 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:18490] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaR-YhrUg-j5GLDtRFnBugAAAEE"]
[Mon Mar 02 01:58:58.667399 2026] [:error] [pid 53180:tid 53464] [client 20.107.201.194:17466] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaR-YjPPJpDOBvYnaa1e0wAAAZQ"]
[Mon Mar 02 01:58:59.224666 2026] [:error] [pid 26940:tid 26957] [client 20.107.201.194:13098] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aaR-YxrUg-j5GLDtRFnBywAAAE0"]
[Mon Mar 02 01:58:59.823131 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:17421] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/loxi-o.php"] [unique_id "aaR-YxrUg-j5GLDtRFnB1QAAAFc"]
[Mon Mar 02 01:59:00.341124 2026] [:error] [pid 53181:tid 53518] [client 20.107.201.194:14922] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/loxi-o.php"] [unique_id "aaR-ZIr_0T1SazTrJOBEeQAAAQQ"]
[Mon Mar 02 01:59:00.868098 2026] [:error] [pid 53182:tid 53552] [client 20.107.201.194:17437] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/loxi-o.php"] [unique_id "aaR-ZPv073cA6eM1YCTaTgAAAMk"]
[Mon Mar 02 01:59:01.445500 2026] [:error] [pid 53181:tid 53537] [client 20.107.201.194:22061] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/loxi-o.php"] [unique_id "aaR-ZYr_0T1SazTrJOBEgQAAARY"]
[Mon Mar 02 01:59:01.970123 2026] [:error] [pid 53182:tid 53563] [client 20.107.201.194:25109] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaR-Zfv073cA6eM1YCTaUwAAANM"]
[Mon Mar 02 01:59:02.485734 2026] [:error] [pid 53181:tid 53518] [client 20.107.201.194:13116] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaR-Zor_0T1SazTrJOBEhwAAAQQ"]
[Mon Mar 02 01:59:03.132494 2026] [:error] [pid 53182:tid 53566] [client 20.107.201.194:28936] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaR-Z_v073cA6eM1YCTaWwAAANY"]
[Mon Mar 02 01:59:03.716898 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:13068] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaR-ZxrUg-j5GLDtRFnB9wAAAEM"]
[Mon Mar 02 01:59:04.333104 2026] [:error] [pid 26940:tid 26958] [client 20.107.201.194:9032] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaR-aBrUg-j5GLDtRFnB_QAAAE4"]
[Mon Mar 02 01:59:04.973583 2026] [:error] [pid 53585:tid 53604] [client 20.107.201.194:25104] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaR-aHbCvYsvu6kKhM2v_AAAABA"]
[Mon Mar 02 01:59:05.563832 2026] [:error] [pid 53585:tid 53592] [client 20.107.201.194:8581] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaR-aXbCvYsvu6kKhM2wAwAAAAQ"]
[Mon Mar 02 01:59:06.172128 2026] [:error] [pid 53585:tid 53611] [client 20.107.201.194:11271] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aaR-anbCvYsvu6kKhM2wCgAAABc"]
[Mon Mar 02 01:59:06.723441 2026] [:error] [pid 53585:tid 53608] [client 20.107.201.194:28990] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaR-anbCvYsvu6kKhM2wEgAAABQ"]
[Mon Mar 02 01:59:07.344161 2026] [:error] [pid 53182:tid 53565] [client 20.107.201.194:22055] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaR-a_v073cA6eM1YCTabwAAANU"]
[Mon Mar 02 01:59:07.888501 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:14757] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaR-axrUg-j5GLDtRFnCEgAAAEo"]
[Mon Mar 02 01:59:08.460984 2026] [:error] [pid 53585:tid 53592] [client 20.107.201.194:9077] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaR-bHbCvYsvu6kKhM2wJwAAAAQ"]
[Mon Mar 02 01:59:09.061560 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:28928] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olfclass.php"] [unique_id "aaR-bRrUg-j5GLDtRFnCHAAAAEk"]
[Mon Mar 02 01:59:09.575649 2026] [:error] [pid 53181:tid 53539] [client 20.107.201.194:20588] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olfclass.php"] [unique_id "aaR-bYr_0T1SazTrJOBElgAAARg"]
[Mon Mar 02 01:59:10.139332 2026] [:error] [pid 53181:tid 53514] [client 20.107.201.194:20804] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olfclass.php"] [unique_id "aaR-bor_0T1SazTrJOBEmQAAAQA"]
[Mon Mar 02 01:59:10.715948 2026] [:error] [pid 53182:tid 53566] [client 20.107.201.194:22032] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olfclass.php"] [unique_id "aaR-bvv073cA6eM1YCTaegAAANY"]
[Mon Mar 02 01:59:11.312188 2026] [:error] [pid 53180:tid 53451] [client 20.107.201.194:9060] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaR-bzPPJpDOBvYnaa1e4gAAAYc"]
[Mon Mar 02 01:59:11.868959 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:9078] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaR-bxrUg-j5GLDtRFnCKAAAAEM"]
[Mon Mar 02 01:59:12.410427 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:20855] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaR-cBrUg-j5GLDtRFnCKwAAAFg"]
[Mon Mar 02 01:59:12.939501 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:14733] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "aaR-cBrUg-j5GLDtRFnCMgAAAEo"]
[Mon Mar 02 01:59:13.525235 2026] [:error] [pid 53181:tid 53514] [client 20.107.201.194:22056] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaR-cYr_0T1SazTrJOBEqwAAAQA"]
[Mon Mar 02 01:59:14.080270 2026] [:error] [pid 53181:tid 53517] [client 20.107.201.194:9037] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaR-cor_0T1SazTrJOBErAAAAQM"]
[Mon Mar 02 01:59:14.612951 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:9087] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaR-chrUg-j5GLDtRFnCQgAAAFc"]
[Mon Mar 02 01:59:15.175815 2026] [:error] [pid 53181:tid 53515] [client 20.107.201.194:28964] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aaR-c4r_0T1SazTrJOBEsAAAAQE"]
[Mon Mar 02 01:59:15.860896 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:11268] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaR-c3bCvYsvu6kKhM2wRwAAAA8"]
[Mon Mar 02 01:59:16.431209 2026] [:error] [pid 26940:tid 26950] [client 20.107.201.194:9051] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaR-dBrUg-j5GLDtRFnCUwAAAEY"]
[Mon Mar 02 01:59:16.947902 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:8611] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaR-dBrUg-j5GLDtRFnCXgAAAEI"]
[Mon Mar 02 01:59:17.502462 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:14748] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aaR-dRrUg-j5GLDtRFnCZwAAAEQ"]
[Mon Mar 02 01:59:18.037905 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:11282] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaR-dhrUg-j5GLDtRFnCbAAAAFg"]
[Mon Mar 02 01:59:18.598292 2026] [:error] [pid 53181:tid 53521] [client 20.107.201.194:13106] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaR-dor_0T1SazTrJOBEuQAAAQY"]
[Mon Mar 02 01:59:19.156718 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:26221] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaR-dxrUg-j5GLDtRFnCfQAAAFc"]
[Mon Mar 02 01:59:19.736703 2026] [:error] [pid 53181:tid 53534] [client 20.107.201.194:9079] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X57.php"] [unique_id "aaR-d4r_0T1SazTrJOBEvQAAARM"]
[Mon Mar 02 01:59:20.313820 2026] [:error] [pid 53180:tid 53464] [client 20.107.201.194:28931] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpver.php"] [unique_id "aaR-eDPPJpDOBvYnaa1e6gAAAZQ"]
[Mon Mar 02 01:59:20.884024 2026] [:error] [pid 53181:tid 53515] [client 20.107.201.194:20354] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpver.php"] [unique_id "aaR-eIr_0T1SazTrJOBEzgAAAQE"]
[Mon Mar 02 01:59:21.409199 2026] [:error] [pid 53180:tid 53461] [client 20.107.201.194:11325] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpver.php"] [unique_id "aaR-eTPPJpDOBvYnaa1e8AAAAZE"]
[Mon Mar 02 01:59:21.932056 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:14745] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpver.php"] [unique_id "aaR-eRrUg-j5GLDtRFnCjgAAAEM"]
[Mon Mar 02 01:59:22.439445 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:8622] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/hi.php"] [unique_id "aaR-ehrUg-j5GLDtRFnCkwAAAEo"]
[Mon Mar 02 01:59:22.962893 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:20860] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/hi.php"] [unique_id "aaR-ehrUg-j5GLDtRFnCnAAAAEM"]
[Mon Mar 02 01:59:23.498743 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:8638] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/hi.php"] [unique_id "aaR-exrUg-j5GLDtRFnCpAAAAFc"]
[Mon Mar 02 01:59:24.036728 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:8599] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/hi.php"] [unique_id "aaR-fBrUg-j5GLDtRFnCrAAAAFI"]
[Mon Mar 02 01:59:24.540564 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:17425] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aaR-fBrUg-j5GLDtRFnCtAAAAEE"]
[Mon Mar 02 01:59:25.089011 2026] [:error] [pid 26940:tid 26965] [client 20.107.201.194:13103] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aaR-fRrUg-j5GLDtRFnCugAAAFU"]
[Mon Mar 02 01:59:25.603898 2026] [:error] [pid 53181:tid 53535] [client 20.107.201.194:1946] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "aaR-fYr_0T1SazTrJOBE4AAAARQ"]
[Mon Mar 02 01:59:26.156682 2026] [:error] [pid 53182:tid 53563] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Mon Mar 02 01:59:26.410010 2026] [:error] [pid 53182:tid 53568] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Mar 02 01:59:26.665121 2026] [:error] [pid 53182:tid 53546] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/wqqs.php
[Mon Mar 02 01:59:26.918198 2026] [:error] [pid 53182:tid 53561] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-318.php
[Mon Mar 02 01:59:27.169758 2026] [:error] [pid 53182:tid 53559] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/dom.php
[Mon Mar 02 01:59:27.426289 2026] [:error] [pid 53182:tid 53553] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Mon Mar 02 01:59:27.682210 2026] [:error] [pid 53182:tid 53558] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/moon3.php
[Mon Mar 02 01:59:27.935367 2026] [:error] [pid 53182:tid 53543] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/thui.php
[Mon Mar 02 01:59:28.192312 2026] [:error] [pid 53182:tid 53555] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/ebahvhhh.php
[Mon Mar 02 01:59:28.450838 2026] [:error] [pid 53182:tid 53551] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/snq.php
[Mon Mar 02 01:59:28.705899 2026] [:error] [pid 53182:tid 53563] [client 20.107.201.194:14752] File does not exist: /usr/local/apache/htdocs/suspended-page/mcs.php
[Mon Mar 02 01:59:28.955749 2026] [:error] [pid 53182:tid 53546] [client 20.107.201.194:14752] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaR-gPv073cA6eM1YCTasAAAAMM"]
[Mon Mar 02 01:59:29.499857 2026] [:error] [pid 53585:tid 53594] [client 20.107.201.194:24686] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaR-gXbCvYsvu6kKhM2wWAAAAAY"]
[Mon Mar 02 01:59:30.057984 2026] [:error] [pid 53182:tid 53562] [client 20.107.201.194:24669] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaR-gvv073cA6eM1YCTavgAAANI"]
[Mon Mar 02 01:59:30.591365 2026] [:error] [pid 53585:tid 53593] [client 20.107.201.194:20813] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aaR-gnbCvYsvu6kKhM2wXwAAAAU"]
[Mon Mar 02 01:59:31.122327 2026] [:error] [pid 53182:tid 53561] [client 20.107.201.194:26184] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaR-g_v073cA6eM1YCTaxQAAANE"]
[Mon Mar 02 01:59:31.656380 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:11287] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaR-gxrUg-j5GLDtRFnC8wAAAFg"]
[Mon Mar 02 01:59:32.246642 2026] [:error] [pid 26940:tid 26966] [client 20.107.201.194:20803] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaR-hBrUg-j5GLDtRFnDBQAAAFY"]
[Mon Mar 02 01:59:32.753243 2026] [:error] [pid 26940:tid 26961] [client 20.107.201.194:8623] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xleet.php"] [unique_id "aaR-hBrUg-j5GLDtRFnDDgAAAFE"]
[Mon Mar 02 01:59:33.259164 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:9086] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaR-hRrUg-j5GLDtRFnDGAAAAEo"]
[Mon Mar 02 01:59:33.792247 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:1955] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaR-hRrUg-j5GLDtRFnDHQAAAEI"]
[Mon Mar 02 01:59:34.295451 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:26177] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaR-hhrUg-j5GLDtRFnDJgAAAEo"]
[Mon Mar 02 01:59:34.802678 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:24633] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaR-hhrUg-j5GLDtRFnDKgAAAFc"]
[Mon Mar 02 01:59:35.319229 2026] [:error] [pid 26940:tid 26964] [client 20.107.201.194:24607] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaR-hxrUg-j5GLDtRFnDLQAAAFQ"]
[Mon Mar 02 01:59:35.861654 2026] [:error] [pid 53182:tid 53557] [client 20.107.201.194:28950] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaR-h_v073cA6eM1YCTa2gAAAM0"]
[Mon Mar 02 01:59:36.368862 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:22043] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaR-iBrUg-j5GLDtRFnDMgAAAFc"]
[Mon Mar 02 01:59:36.871101 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:24659] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aaR-iBrUg-j5GLDtRFnDNAAAAEk"]
[Mon Mar 02 01:59:37.371216 2026] [:error] [pid 26940:tid 26956] [client 20.107.201.194:24646] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaR-iRrUg-j5GLDtRFnDNgAAAEw"]
[Mon Mar 02 01:59:37.872620 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:20842] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaR-iRrUg-j5GLDtRFnDNwAAAEs"]
[Mon Mar 02 01:59:38.391112 2026] [:error] [pid 53181:tid 53539] [client 20.107.201.194:13067] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaR-ior_0T1SazTrJOBE9AAAARg"]
[Mon Mar 02 01:59:38.903881 2026] [:error] [pid 53182:tid 53555] [client 20.107.201.194:1951] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aaR-ivv073cA6eM1YCTa5wAAAMs"]
[Mon Mar 02 01:59:39.430379 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:22042] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaR-ixrUg-j5GLDtRFnDPAAAAFI"]
[Mon Mar 02 01:59:39.937970 2026] [:error] [pid 26940:tid 26958] [client 20.107.201.194:11321] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaR-ixrUg-j5GLDtRFnDQQAAAE4"]
[Mon Mar 02 01:59:40.454259 2026] [:error] [pid 53180:tid 53444] [client 20.107.201.194:28983] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaR-jDPPJpDOBvYnaa1fDgAAAYA"]
[Mon Mar 02 01:59:40.954180 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:20412] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "aaR-jPv073cA6eM1YCTa7gAAAME"]
[Mon Mar 02 01:59:41.483321 2026] [:error] [pid 53181:tid 53536] [client 20.107.201.194:13063] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaR-jYr_0T1SazTrJOBE_gAAARU"]
[Mon Mar 02 01:59:41.996926 2026] [:error] [pid 53180:tid 53455] [client 20.107.201.194:28938] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaR-jTPPJpDOBvYnaa1fEgAAAYs"]
[Mon Mar 02 01:59:42.505194 2026] [:error] [pid 53182:tid 53560] [client 20.107.201.194:1921] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaR-jvv073cA6eM1YCTa9wAAANA"]
[Mon Mar 02 01:59:43.005998 2026] [:error] [pid 53182:tid 53545] [client 20.107.201.194:27614] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaR-j_v073cA6eM1YCTa-wAAAMI"]
[Mon Mar 02 01:59:43.517959 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:8594] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaR-j3bCvYsvu6kKhM2wpAAAAAE"]
[Mon Mar 02 01:59:44.027664 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:28955] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaR-kPv073cA6eM1YCTbAAAAANc"]
[Mon Mar 02 01:59:44.531995 2026] [:error] [pid 53585:tid 53609] [client 20.107.201.194:9024] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaR-kHbCvYsvu6kKhM2wqQAAABU"]
[Mon Mar 02 01:59:45.040811 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:11291] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "aaR-kXbCvYsvu6kKhM2wrQAAAAE"]
[Mon Mar 02 01:59:45.539417 2026] [:error] [pid 26940:tid 26961] [client 20.107.201.194:11269] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaR-kRrUg-j5GLDtRFnDTgAAAFE"]
[Mon Mar 02 01:59:46.042026 2026] [:error] [pid 26940:tid 26950] [client 20.107.201.194:34097] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaR-khrUg-j5GLDtRFnDVwAAAEY"]
[Mon Mar 02 01:59:46.544548 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:15546] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaR-knbCvYsvu6kKhM2wuQAAAAE"]
[Mon Mar 02 01:59:47.048109 2026] [:error] [pid 53181:tid 53537] [client 20.107.201.194:28130] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aaR-k4r_0T1SazTrJOBFFAAAARY"]
[Mon Mar 02 01:59:47.554301 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:14724] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaR-kxrUg-j5GLDtRFnDYgAAAEQ"]
[Mon Mar 02 01:59:48.052006 2026] [:error] [pid 26940:tid 26959] [client 20.107.201.194:18445] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaR-lBrUg-j5GLDtRFnDaAAAAE8"]
[Mon Mar 02 01:59:48.558288 2026] [:error] [pid 26940:tid 26951] [client 20.107.201.194:8624] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaR-lBrUg-j5GLDtRFnDawAAAEc"]
[Mon Mar 02 01:59:49.059409 2026] [:error] [pid 53182:tid 53558] [client 20.107.201.194:20839] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaR-lfv073cA6eM1YCTbEgAAAM4"]
[Mon Mar 02 01:59:49.583231 2026] [:error] [pid 53181:tid 53530] [client 20.107.201.194:26203] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaR-lYr_0T1SazTrJOBFHQAAAQ8"]
[Mon Mar 02 01:59:50.085314 2026] [:error] [pid 53181:tid 53538] [client 20.107.201.194:20415] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaR-lor_0T1SazTrJOBFIAAAARc"]
[Mon Mar 02 01:59:50.588124 2026] [:error] [pid 53181:tid 53516] [client 20.107.201.194:20358] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaR-lor_0T1SazTrJOBFIwAAAQI"]
[Mon Mar 02 01:59:51.091960 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:28134] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "aaR-lxrUg-j5GLDtRFnDcgAAAEM"]
[Mon Mar 02 01:59:51.617802 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:27585] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaR-lxrUg-j5GLDtRFnDdQAAAEQ"]
[Mon Mar 02 01:59:52.117331 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:20354] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaR-mBrUg-j5GLDtRFnDeAAAAEI"]
[Mon Mar 02 01:59:52.633372 2026] [:error] [pid 53182:tid 53551] [client 20.107.201.194:9062] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaR-mPv073cA6eM1YCTbGwAAAMg"]
[Mon Mar 02 01:59:53.140163 2026] [:error] [pid 53181:tid 53523] [client 20.107.201.194:28136] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aaR-mYr_0T1SazTrJOBFNQAAAQg"]
[Mon Mar 02 01:59:53.661762 2026] [:error] [pid 53181:tid 53518] [client 20.107.201.194:20836] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaR-mYr_0T1SazTrJOBFOAAAAQQ"]
[Mon Mar 02 01:59:54.175229 2026] [:error] [pid 53181:tid 53528] [client 20.107.201.194:8578] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaR-mor_0T1SazTrJOBFPAAAAQ0"]
[Mon Mar 02 01:59:54.675803 2026] [:error] [pid 53180:tid 53456] [client 20.107.201.194:24691] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaR-mjPPJpDOBvYnaa1fOgAAAYw"]
[Mon Mar 02 01:59:55.206193 2026] [:error] [pid 53181:tid 53524] [client 20.107.201.194:24609] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aaR-m4r_0T1SazTrJOBFPgAAAQk"]
[Mon Mar 02 01:59:55.719862 2026] [:error] [pid 53585:tid 53608] [client 20.107.201.194:8576] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaR-m3bCvYsvu6kKhM2wyQAAABQ"]
[Mon Mar 02 01:59:56.232843 2026] [:error] [pid 53585:tid 53593] [client 20.107.201.194:15536] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaR-nHbCvYsvu6kKhM2w0AAAAAU"]
[Mon Mar 02 01:59:56.744768 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:24622] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaR-nHbCvYsvu6kKhM2w1AAAAA8"]
[Mon Mar 02 01:59:57.265732 2026] [:error] [pid 53585:tid 53611] [client 20.107.201.194:24590] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "aaR-nXbCvYsvu6kKhM2w1wAAABc"]
[Mon Mar 02 01:59:57.784943 2026] [:error] [pid 53182:tid 53564] [client 20.107.201.194:24672] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaR-nfv073cA6eM1YCTbNAAAANQ"]
[Mon Mar 02 01:59:58.304400 2026] [:error] [pid 53180:tid 53449] [client 20.107.201.194:9045] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaR-njPPJpDOBvYnaa1fPwAAAYU"]
[Mon Mar 02 01:59:58.805594 2026] [:error] [pid 53181:tid 53522] [client 20.107.201.194:28117] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaR-nor_0T1SazTrJOBFSAAAAQc"]
[Mon Mar 02 01:59:59.311090 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:26234] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aaR-n_v073cA6eM1YCTbQAAAAME"]
[Mon Mar 02 01:59:59.822229 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:13115] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaR-n_v073cA6eM1YCTbQQAAANc"]
[Mon Mar 02 02:00:00.334751 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:9069] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaR-oHbCvYsvu6kKhM2w5QAAAA8"]
[Mon Mar 02 02:00:00.833885 2026] [:error] [pid 53585:tid 53590] [client 20.107.201.194:27966] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaR-oHbCvYsvu6kKhM2w6QAAAAI"]
[Mon Mar 02 02:00:01.344623 2026] [:error] [pid 53585:tid 53594] [client 20.107.201.194:8412] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ae.php"] [unique_id "aaR-oXbCvYsvu6kKhM2w6wAAAAY"]
[Mon Mar 02 02:00:01.860086 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:34081] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaR-oRrUg-j5GLDtRFnDmQAAAFI"]
[Mon Mar 02 02:00:02.365573 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:28143] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaR-onbCvYsvu6kKhM2w8wAAAAE"]
[Mon Mar 02 02:00:02.867382 2026] [:error] [pid 53180:tid 53458] [client 20.107.201.194:34103] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaR-ojPPJpDOBvYnaa1fSAAAAY4"]
[Mon Mar 02 02:00:03.369039 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:27617] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "aaR-o_v073cA6eM1YCTbTwAAANc"]
[Mon Mar 02 02:00:03.874268 2026] [:error] [pid 26940:tid 26957] [client 20.107.201.194:15498] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaR-oxrUg-j5GLDtRFnDnwAAAE0"]
[Mon Mar 02 02:00:04.382917 2026] [:error] [pid 53585:tid 53605] [client 20.107.201.194:20851] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaR-pHbCvYsvu6kKhM2xAgAAABE"]
[Mon Mar 02 02:00:04.896668 2026] [:error] [pid 53585:tid 53601] [client 20.107.201.194:28148] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaR-pHbCvYsvu6kKhM2xCAAAAA0"]
[Mon Mar 02 02:00:05.406366 2026] [:error] [pid 53182:tid 53568] [client 20.107.201.194:10643] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aaR-pfv073cA6eM1YCTbWAAAANg"]
[Mon Mar 02 02:00:05.912922 2026] [:error] [pid 53585:tid 53609] [client 20.107.201.194:8436] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaR-pXbCvYsvu6kKhM2xDAAAABU"]
[Mon Mar 02 02:00:06.415570 2026] [:error] [pid 53585:tid 53600] [client 20.107.201.194:26180] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaR-pnbCvYsvu6kKhM2xEwAAAAw"]
[Mon Mar 02 02:00:06.979682 2026] [:error] [pid 53585:tid 53595] [client 20.107.201.194:15538] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaR-pnbCvYsvu6kKhM2xGAAAAAc"]
[Mon Mar 02 02:00:07.483450 2026] [:error] [pid 53182:tid 53558] [client 20.107.201.194:24608] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "aaR-p_v073cA6eM1YCTbXAAAAM4"]
[Mon Mar 02 02:00:07.986580 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:14810] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaR-p_v073cA6eM1YCTbXgAAANc"]
[Mon Mar 02 02:00:08.537744 2026] [:error] [pid 53182:tid 53550] [client 20.107.201.194:1518] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaR-qPv073cA6eM1YCTbYgAAAMc"]
[Mon Mar 02 02:00:09.079643 2026] [:error] [pid 53180:tid 53458] [client 20.107.201.194:24677] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaR-qTPPJpDOBvYnaa1fVAAAAY4"]
[Mon Mar 02 02:00:09.589222 2026] [:error] [pid 53182:tid 53563] [client 20.107.201.194:21568] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "aaR-qfv073cA6eM1YCTbZQAAANM"]
[Mon Mar 02 02:00:10.098724 2026] [:error] [pid 53180:tid 53455] [client 20.107.201.194:1511] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dsd.php"] [unique_id "aaR-qjPPJpDOBvYnaa1fXAAAAYs"]
[Mon Mar 02 02:00:10.644049 2026] [:error] [pid 53180:tid 53444] [client 20.107.201.194:13998] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dsd.php"] [unique_id "aaR-qjPPJpDOBvYnaa1fXwAAAYA"]
[Mon Mar 02 02:00:11.171902 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:10678] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dsd.php"] [unique_id "aaR-qxrUg-j5GLDtRFnDvgAAAEs"]
[Mon Mar 02 02:00:11.680558 2026] [:error] [pid 53585:tid 53599] [client 20.107.201.194:33815] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dsd.php"] [unique_id "aaR-q3bCvYsvu6kKhM2xLQAAAAs"]
[Mon Mar 02 02:00:12.186917 2026] [:error] [pid 53585:tid 53595] [client 20.107.201.194:1766] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/guk.php"] [unique_id "aaR-rHbCvYsvu6kKhM2xMAAAAAc"]
[Mon Mar 02 02:00:12.718241 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:1747] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/guk.php"] [unique_id "aaR-rBrUg-j5GLDtRFnDzQAAAEs"]
[Mon Mar 02 02:00:13.230488 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:10639] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/guk.php"] [unique_id "aaR-rXbCvYsvu6kKhM2xOAAAAA8"]
[Mon Mar 02 02:00:13.753207 2026] [:error] [pid 26940:tid 26961] [client 20.107.201.194:21587] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/guk.php"] [unique_id "aaR-rRrUg-j5GLDtRFnD2wAAAFE"]
[Mon Mar 02 02:00:14.312251 2026] [:error] [pid 53585:tid 53598] [client 20.107.201.194:1502] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaR-rnbCvYsvu6kKhM2xQAAAAAo"]
[Mon Mar 02 02:00:14.861165 2026] [:error] [pid 53182:tid 53543] [client 20.107.201.194:27958] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaR-rvv073cA6eM1YCTbjQAAAMA"]
[Mon Mar 02 02:00:15.414863 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:27906] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaR-r3bCvYsvu6kKhM2xQQAAAAE"]
[Mon Mar 02 02:00:15.921952 2026] [:error] [pid 53182:tid 53562] [client 20.107.201.194:33824] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaR-r_v073cA6eM1YCTbkwAAANI"]
[Mon Mar 02 02:00:16.450771 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:13988] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aaR-sPv073cA6eM1YCTblQAAANc"]
[Mon Mar 02 02:00:16.979759 2026] [:error] [pid 53180:tid 53451] [client 20.107.201.194:21621] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aaR-sDPPJpDOBvYnaa1fhAAAAYc"]
[Mon Mar 02 02:00:17.529012 2026] [:error] [pid 53585:tid 53610] [client 20.107.201.194:17810] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aaR-sXbCvYsvu6kKhM2xUAAAABY"]
[Mon Mar 02 02:00:18.089278 2026] [:error] [pid 53181:tid 53537] [client 20.107.201.194:17817] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ze.php"] [unique_id "aaR-sor_0T1SazTrJOBFfwAAARY"]
[Mon Mar 02 02:00:18.621035 2026] [:error] [pid 53180:tid 53448] [client 20.107.201.194:13970] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aaR-sjPPJpDOBvYnaa1figAAAYQ"]
[Mon Mar 02 02:00:19.135576 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:17823] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aaR-sxrUg-j5GLDtRFnD5QAAAEk"]
[Mon Mar 02 02:00:19.688001 2026] [:error] [pid 53181:tid 53522] [client 20.107.201.194:1734] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aaR-s4r_0T1SazTrJOBFgwAAAQc"]
[Mon Mar 02 02:00:20.196186 2026] [:error] [pid 53181:tid 53525] [client 20.107.201.194:33814] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file52.php"] [unique_id "aaR-tIr_0T1SazTrJOBFiAAAAQo"]
[Mon Mar 02 02:00:20.760728 2026] [:error] [pid 53181:tid 53524] [client 20.107.201.194:23673] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tax.php"] [unique_id "aaR-tIr_0T1SazTrJOBFiQAAAQk"]
[Mon Mar 02 02:00:21.269403 2026] [:error] [pid 53180:tid 53454] [client 20.107.201.194:23831] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tax.php"] [unique_id "aaR-tTPPJpDOBvYnaa1fkgAAAYo"]
[Mon Mar 02 02:00:21.809921 2026] [:error] [pid 53181:tid 53518] [client 20.107.201.194:33847] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tax.php"] [unique_id "aaR-tYr_0T1SazTrJOBFjwAAAQQ"]
[Mon Mar 02 02:00:22.343361 2026] [:error] [pid 26940:tid 26959] [client 20.107.201.194:33811] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tax.php"] [unique_id "aaR-thrUg-j5GLDtRFnD7wAAAE8"]
[Mon Mar 02 02:00:22.858494 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:23861] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaR-thrUg-j5GLDtRFnD8gAAAFg"]
[Mon Mar 02 02:00:23.393739 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:26873] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaR-t_v073cA6eM1YCTbrQAAAME"]
[Mon Mar 02 02:00:23.910075 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:33833] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaR-t_v073cA6eM1YCTbrwAAANc"]
[Mon Mar 02 02:00:24.424654 2026] [:error] [pid 26940:tid 26944] [client 20.107.201.194:32062] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "aaR-uBrUg-j5GLDtRFnD-gAAAEA"]
[Mon Mar 02 02:00:24.932283 2026] [:error] [pid 53585:tid 53596] [client 20.107.201.194:32028] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaR-uHbCvYsvu6kKhM2xWAAAAAg"]
[Mon Mar 02 02:00:25.446961 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:23330] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaR-uRrUg-j5GLDtRFnEAgAAAFg"]
[Mon Mar 02 02:00:25.976203 2026] [:error] [pid 53180:tid 53448] [client 20.107.201.194:26846] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaR-uTPPJpDOBvYnaa1fqgAAAYQ"]
[Mon Mar 02 02:00:26.480495 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:23670] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ty.php"] [unique_id "aaR-uhrUg-j5GLDtRFnEDAAAAEs"]
[Mon Mar 02 02:00:26.985346 2026] [:error] [pid 26940:tid 26965] [client 20.107.201.194:23668] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brc.php"] [unique_id "aaR-uhrUg-j5GLDtRFnEEQAAAFU"]
[Mon Mar 02 02:00:27.488297 2026] [:error] [pid 26940:tid 26956] [client 20.107.201.194:21862] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brc.php"] [unique_id "aaR-uxrUg-j5GLDtRFnEGAAAAEw"]
[Mon Mar 02 02:00:27.992018 2026] [:error] [pid 53182:tid 53548] [client 20.107.201.194:26843] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/brc.php"] [unique_id "aaR-u_v073cA6eM1YCTbtgAAAMU"]
[Mon Mar 02 02:00:28.497912 2026] [:error] [pid 53585:tid 53607] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/brc.php
[Mon Mar 02 02:00:28.751363 2026] [:error] [pid 53585:tid 53598] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Mon Mar 02 02:00:29.005554 2026] [:error] [pid 53585:tid 53610] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Mon Mar 02 02:00:29.513958 2026] [:error] [pid 53585:tid 53596] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Mon Mar 02 02:00:29.768544 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/gool.php
[Mon Mar 02 02:00:30.034840 2026] [:error] [pid 53585:tid 53605] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/a1vx.php
[Mon Mar 02 02:00:30.287535 2026] [:error] [pid 53585:tid 53607] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/mans.php
[Mon Mar 02 02:00:30.539957 2026] [:error] [pid 53585:tid 53611] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/rum.php
[Mon Mar 02 02:00:30.806625 2026] [:error] [pid 53585:tid 53597] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Mon Mar 02 02:00:31.059917 2026] [:error] [pid 53585:tid 53606] [client 20.107.201.194:23344] File does not exist: /usr/local/apache/htdocs/suspended-page/wio.php
[Mon Mar 02 02:00:31.309858 2026] [:error] [pid 53585:tid 53594] [client 20.107.201.194:23344] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaR-v3bCvYsvu6kKhM2xfAAAAAY"]
[Mon Mar 02 02:00:31.857407 2026] [:error] [pid 53182:tid 53547] [client 20.107.201.194:13959] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaR-v_v073cA6eM1YCTbywAAAMQ"]
[Mon Mar 02 02:00:32.357700 2026] [:error] [pid 53182:tid 53556] [client 20.107.201.194:1752] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaR-wPv073cA6eM1YCTb0AAAAMw"]
[Mon Mar 02 02:00:32.859846 2026] [:error] [pid 53585:tid 53595] [client 20.107.201.194:19223] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clasa99.php"] [unique_id "aaR-wHbCvYsvu6kKhM2xfwAAAAc"]
[Mon Mar 02 02:00:33.363218 2026] [:error] [pid 53585:tid 53601] [client 20.107.201.194:34458] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaR-wXbCvYsvu6kKhM2xigAAAA0"]
[Mon Mar 02 02:00:33.864644 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:21836] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaR-wRrUg-j5GLDtRFnELgAAAEs"]
[Mon Mar 02 02:00:34.376589 2026] [:error] [pid 26940:tid 26950] [client 20.107.201.194:23659] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaR-whrUg-j5GLDtRFnEOAAAAEY"]
[Mon Mar 02 02:00:34.876710 2026] [:error] [pid 53585:tid 53611] [client 20.107.201.194:23357] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaR-wnbCvYsvu6kKhM2xpwAAABc"]
[Mon Mar 02 02:00:35.376851 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:23638] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaR-wxrUg-j5GLDtRFnERQAAAEE"]
[Mon Mar 02 02:00:35.879169 2026] [:error] [pid 53182:tid 53552] [client 20.107.201.194:26878] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaR-w_v073cA6eM1YCTb3wAAAMk"]
[Mon Mar 02 02:00:36.395276 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:14008] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaR-xBrUg-j5GLDtRFnEUQAAAEI"]
[Mon Mar 02 02:00:36.922263 2026] [:error] [pid 53181:tid 53535] [client 20.107.201.194:21851] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws62.php"] [unique_id "aaR-xIr_0T1SazTrJOBFugAAARQ"]
[Mon Mar 02 02:00:37.426924 2026] [:error] [pid 53182:tid 53565] [client 20.107.201.194:1779] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaR-xfv073cA6eM1YCTb5gAAANU"]
[Mon Mar 02 02:00:37.938270 2026] [:error] [pid 53180:tid 53456] [client 20.107.201.194:34479] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaR-xTPPJpDOBvYnaa1fwAAAAYw"]
[Mon Mar 02 02:00:38.446408 2026] [:error] [pid 53181:tid 53534] [client 20.107.201.194:23866] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaR-xor_0T1SazTrJOBFvwAAARM"]
[Mon Mar 02 02:00:38.961343 2026] [:error] [pid 26940:tid 26959] [client 20.107.201.194:17272] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "aaR-xhrUg-j5GLDtRFnEZQAAAE8"]
[Mon Mar 02 02:00:39.465972 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:34450] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaR-xxrUg-j5GLDtRFnEbAAAAFI"]
[Mon Mar 02 02:00:39.994973 2026] [:error] [pid 53585:tid 53590] [client 20.107.201.194:29239] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaR-x3bCvYsvu6kKhM2xzAAAAAI"]
[Mon Mar 02 02:00:40.513335 2026] [:error] [pid 53585:tid 53596] [client 20.107.201.194:17223] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaR-yHbCvYsvu6kKhM2x2AAAAAg"]
[Mon Mar 02 02:00:41.015628 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:23672] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aaR-yRrUg-j5GLDtRFnEdQAAAFc"]
[Mon Mar 02 02:00:41.536079 2026] [:error] [pid 26940:tid 26951] [client 20.107.201.194:17217] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaR-yRrUg-j5GLDtRFnEfgAAAEc"]
[Mon Mar 02 02:00:42.037726 2026] [:error] [pid 26940:tid 26959] [client 20.107.201.194:26838] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaR-yhrUg-j5GLDtRFnEggAAAE8"]
[Mon Mar 02 02:00:42.538377 2026] [:error] [pid 53585:tid 53594] [client 20.107.201.194:32598] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaR-ynbCvYsvu6kKhM2x-AAAAAY"]
[Mon Mar 02 02:00:43.042020 2026] [:error] [pid 53585:tid 53595] [client 20.107.201.194:33754] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "aaR-y3bCvYsvu6kKhM2x_gAAAAc"]
[Mon Mar 02 02:00:43.547974 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:32052] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaR-yxrUg-j5GLDtRFnEkAAAAEI"]
[Mon Mar 02 02:00:44.055665 2026] [:error] [pid 26940:tid 26949] [client 20.107.201.194:23297] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaR-zBrUg-j5GLDtRFnEmQAAAEU"]
[Mon Mar 02 02:00:44.554755 2026] [:error] [pid 53180:tid 53450] [client 20.107.201.194:19254] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaR-zDPPJpDOBvYnaa1f0AAAAYY"]
[Mon Mar 02 02:00:45.056881 2026] [:error] [pid 53180:tid 53468] [client 20.107.201.194:32033] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxc.php"] [unique_id "aaR-zTPPJpDOBvYnaa1f1gAAAZg"]
[Mon Mar 02 02:00:45.557010 2026] [:error] [pid 26940:tid 26949] [client 20.107.201.194:17261] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaR-zRrUg-j5GLDtRFnEoQAAAEU"]
[Mon Mar 02 02:00:46.076343 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:32593] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaR-zhrUg-j5GLDtRFnEqAAAAEk"]
[Mon Mar 02 02:00:46.580470 2026] [:error] [pid 26940:tid 26957] [client 20.107.201.194:19246] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaR-zhrUg-j5GLDtRFnErgAAAE0"]
[Mon Mar 02 02:00:47.092468 2026] [:error] [pid 53585:tid 53604] [client 20.107.201.194:28455] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gjm.php"] [unique_id "aaR-z3bCvYsvu6kKhM2yEAAAABA"]
[Mon Mar 02 02:00:47.604466 2026] [:error] [pid 53181:tid 53527] [client 20.107.201.194:17249] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaR-z4r_0T1SazTrJOBF0QAAAQw"]
[Mon Mar 02 02:00:48.104755 2026] [:error] [pid 53181:tid 53531] [client 20.107.201.194:15572] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaR-0Ir_0T1SazTrJOBF1AAAARA"]
[Mon Mar 02 02:00:48.605552 2026] [:error] [pid 53585:tid 53612] [client 20.107.201.194:15609] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaR-0HbCvYsvu6kKhM2yHgAAABg"]
[Mon Mar 02 02:00:49.140672 2026] [:error] [pid 53181:tid 53515] [client 20.107.201.194:29231] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ex.php"] [unique_id "aaR-0Yr_0T1SazTrJOBF2AAAAQE"]
[Mon Mar 02 02:00:49.670092 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:29215] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaR-0RrUg-j5GLDtRFnE0AAAAFI"]
[Mon Mar 02 02:00:50.184952 2026] [:error] [pid 53182:tid 53550] [client 20.107.201.194:32054] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaR-0vv073cA6eM1YCTb9QAAAMc"]
[Mon Mar 02 02:00:50.697037 2026] [:error] [pid 53181:tid 53530] [client 20.107.201.194:15558] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaR-0or_0T1SazTrJOBF3gAAAQ8"]
[Mon Mar 02 02:00:51.258138 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:29202] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/post.php"] [unique_id "aaR-0xrUg-j5GLDtRFnE5gAAAEk"]
[Mon Mar 02 02:00:51.775745 2026] [:error] [pid 53182:tid 53553] [client 20.107.201.194:29210] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaR-0_v073cA6eM1YCTcAQAAAMo"]
[Mon Mar 02 02:00:52.338315 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:33783] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaR-1Pv073cA6eM1YCTcAgAAAME"]
[Mon Mar 02 02:00:52.868208 2026] [:error] [pid 53181:tid 53532] [client 20.107.201.194:33756] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaR-1Ir_0T1SazTrJOBF5gAAARE"]
[Mon Mar 02 02:00:53.455514 2026] [:error] [pid 53182:tid 53543] [client 20.107.201.194:32590] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpo.php"] [unique_id "aaR-1fv073cA6eM1YCTcCQAAAMA"]
[Mon Mar 02 02:00:54.115596 2026] [:error] [pid 53180:tid 53453] [client 20.107.201.194:9998] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaR-1jPPJpDOBvYnaa1f-gAAAYk"]
[Mon Mar 02 02:00:54.661881 2026] [:error] [pid 53182:tid 53559] [client 20.107.201.194:28454] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaR-1vv073cA6eM1YCTcDQAAAM8"]
[Mon Mar 02 02:00:55.242453 2026] [:error] [pid 53585:tid 53599] [client 20.107.201.194:32633] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaR-13bCvYsvu6kKhM2yMAAAAAs"]
[Mon Mar 02 02:00:55.749878 2026] [:error] [pid 53182:tid 53564] [client 20.107.201.194:10032] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jq.php"] [unique_id "aaR-1_v073cA6eM1YCTcEAAAANQ"]
[Mon Mar 02 02:00:56.294515 2026] [:error] [pid 53181:tid 53521] [client 20.107.201.194:19242] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaR-2Ir_0T1SazTrJOBF9wAAAQY"]
[Mon Mar 02 02:00:56.855078 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:34439] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaR-2HbCvYsvu6kKhM2yNgAAAA8"]
[Mon Mar 02 02:00:57.386465 2026] [:error] [pid 26940:tid 26966] [client 20.107.201.194:32603] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaR-2RrUg-j5GLDtRFnFAQAAAFY"]
[Mon Mar 02 02:00:57.930300 2026] [:error] [pid 53180:tid 53451] [client 20.107.201.194:29186] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "aaR-2TPPJpDOBvYnaa1gAQAAAYc"]
[Mon Mar 02 02:00:58.450967 2026] [:error] [pid 53180:tid 53463] [client 20.107.201.194:20041] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaR-2jPPJpDOBvYnaa1gAwAAAZM"]
[Mon Mar 02 02:00:59.028365 2026] [:error] [pid 53181:tid 53521] [client 20.107.201.194:9986] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaR-24r_0T1SazTrJOBGBAAAAQY"]
[Mon Mar 02 02:00:59.586083 2026] [:error] [pid 53585:tid 53609] [client 20.107.201.194:26832] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaR-23bCvYsvu6kKhM2yQAAAABU"]
[Mon Mar 02 02:01:00.143609 2026] [:error] [pid 26940:tid 26961] [client 20.107.201.194:28419] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bes.php"] [unique_id "aaR-3BrUg-j5GLDtRFnFCAAAAFE"]
[Mon Mar 02 02:01:00.653405 2026] [:error] [pid 26940:tid 26944] [client 20.107.201.194:29235] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaR-3BrUg-j5GLDtRFnFDwAAAEA"]
[Mon Mar 02 02:01:01.171166 2026] [:error] [pid 26940:tid 26959] [client 20.107.201.194:20074] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaR-3RrUg-j5GLDtRFnFEwAAAE8"]
[Mon Mar 02 02:01:01.749452 2026] [:error] [pid 53181:tid 53517] [client 20.107.201.194:10024] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaR-3Yr_0T1SazTrJOBGFAAAAQM"]
[Mon Mar 02 02:01:02.463298 2026] [:error] [pid 53585:tid 53602] [client 20.107.201.194:19242] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadd.php"] [unique_id "aaR-3nbCvYsvu6kKhM2yRAAAAA4"]
[Mon Mar 02 02:01:03.012741 2026] [:error] [pid 53585:tid 53594] [client 20.107.201.194:20069] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaR-33bCvYsvu6kKhM2ySQAAAAY"]
[Mon Mar 02 02:01:03.529478 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:24380] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaR-3xrUg-j5GLDtRFnFIgAAAEM"]
[Mon Mar 02 02:01:04.110285 2026] [:error] [pid 53181:tid 53536] [client 20.107.201.194:16283] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaR-4Ir_0T1SazTrJOBGJQAAARU"]
[Mon Mar 02 02:01:04.621945 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:26139] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "aaR-4BrUg-j5GLDtRFnFKQAAAFg"]
[Mon Mar 02 02:01:05.172856 2026] [:error] [pid 26940:tid 26956] [client 20.107.201.194:21044] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaR-4RrUg-j5GLDtRFnFMAAAAEw"]
[Mon Mar 02 02:01:05.693262 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:17675] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaR-4RrUg-j5GLDtRFnFOgAAAEE"]
[Mon Mar 02 02:01:06.241818 2026] [:error] [pid 53181:tid 53532] [client 20.107.201.194:20456] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaR-4or_0T1SazTrJOBGLQAAARE"]
[Mon Mar 02 02:01:06.771283 2026] [:error] [pid 53181:tid 53531] [client 20.107.201.194:23414] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aaR-4or_0T1SazTrJOBGMQAAARA"]
[Mon Mar 02 02:01:07.326874 2026] [:error] [pid 53585:tid 53602] [client 20.107.201.194:32912] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaR-43bCvYsvu6kKhM2yUgAAAA4"]
[Mon Mar 02 02:01:07.859596 2026] [:error] [pid 53182:tid 53556] [client 20.107.201.194:27181] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaR-4_v073cA6eM1YCTcIQAAAMw"]
[Mon Mar 02 02:01:08.453740 2026] [:error] [pid 53181:tid 53539] [client 20.107.201.194:20459] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaR-5Ir_0T1SazTrJOBGOwAAARg"]
[Mon Mar 02 02:01:08.994499 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:22556] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aaR-5Pv073cA6eM1YCTcJQAAANc"]
[Mon Mar 02 02:01:09.506446 2026] [:error] [pid 53180:tid 53447] [client 20.107.201.194:25606] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaR-5TPPJpDOBvYnaa1gDwAAAYM"]
[Mon Mar 02 02:01:10.005264 2026] [:error] [pid 53182:tid 53545] [client 20.107.201.194:25655] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaR-5vv073cA6eM1YCTcKAAAAMI"]
[Mon Mar 02 02:01:10.518760 2026] [:error] [pid 53182:tid 53549] [client 20.107.201.194:32940] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaR-5vv073cA6eM1YCTcKgAAAMY"]
[Mon Mar 02 02:01:11.048849 2026] [:error] [pid 53585:tid 53600] [client 20.107.201.194:25663] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aaR-53bCvYsvu6kKhM2yWwAAAAw"]
[Mon Mar 02 02:01:11.559263 2026] [:error] [pid 26940:tid 26957] [client 20.107.201.194:32907] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaR-5xrUg-j5GLDtRFnFUAAAAE0"]
[Mon Mar 02 02:01:12.066874 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:32955] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaR-6BrUg-j5GLDtRFnFVAAAAEM"]
[Mon Mar 02 02:01:12.602061 2026] [:error] [pid 53182:tid 53562] [client 20.107.201.194:23371] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaR-6Pv073cA6eM1YCTcMQAAANI"]
[Mon Mar 02 02:01:13.155078 2026] [:error] [pid 53585:tid 53609] [client 20.107.201.194:20461] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eauu.php"] [unique_id "aaR-6XbCvYsvu6kKhM2yYAAAABU"]
[Mon Mar 02 02:01:13.653836 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:33928] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaR-6RrUg-j5GLDtRFnFWQAAAEs"]
[Mon Mar 02 02:01:14.167780 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:25657] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaR-6nbCvYsvu6kKhM2yYwAAAA8"]
[Mon Mar 02 02:01:14.723065 2026] [:error] [pid 53182:tid 53557] [client 20.107.201.194:1187] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaR-6vv073cA6eM1YCTcOgAAAM0"]
[Mon Mar 02 02:01:15.239977 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:9294] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fasx.php"] [unique_id "aaR-6xrUg-j5GLDtRFnFYwAAAFg"]
[Mon Mar 02 02:01:15.752374 2026] [:error] [pid 53180:tid 53457] [client 20.107.201.194:23376] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaR-6zPPJpDOBvYnaa1gMwAAAY0"]
[Mon Mar 02 02:01:16.287407 2026] [:error] [pid 53180:tid 53444] [client 20.107.201.194:32956] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaR-7DPPJpDOBvYnaa1gOQAAAYA"]
[Mon Mar 02 02:01:16.882772 2026] [:error] [pid 26940:tid 26950] [client 20.107.201.194:33081] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaR-7BrUg-j5GLDtRFnFcgAAAEY"]
[Mon Mar 02 02:01:17.384319 2026] [:error] [pid 26940:tid 26960] [client 20.107.201.194:23402] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "aaR-7RrUg-j5GLDtRFnFegAAAFA"]
[Mon Mar 02 02:01:17.908352 2026] [:error] [pid 26940:tid 26956] [client 20.107.201.194:13310] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaR-7RrUg-j5GLDtRFnFhAAAAEw"]
[Mon Mar 02 02:01:18.408559 2026] [:error] [pid 53180:tid 53452] [client 20.107.201.194:26799] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaR-7jPPJpDOBvYnaa1gRAAAAYg"]
[Mon Mar 02 02:01:18.912609 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:25617] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaR-7vv073cA6eM1YCTcQQAAANc"]
[Mon Mar 02 02:01:19.422021 2026] [:error] [pid 53180:tid 53445] [client 20.107.201.194:25641] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nzv.php"] [unique_id "aaR-7zPPJpDOBvYnaa1gSgAAAYE"]
[Mon Mar 02 02:01:19.925533 2026] [:error] [pid 53181:tid 53518] [client 20.107.201.194:13310] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaR-74r_0T1SazTrJOBGggAAAQQ"]
[Mon Mar 02 02:01:20.468194 2026] [:error] [pid 53181:tid 53532] [client 20.107.201.194:8676] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaR-8Ir_0T1SazTrJOBGhQAAARE"]
[Mon Mar 02 02:01:20.986166 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:15054] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaR-8Pv073cA6eM1YCTcRgAAAME"]
[Mon Mar 02 02:01:21.502223 2026] [:error] [pid 53180:tid 53448] [client 20.107.201.194:13277] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aaR-8TPPJpDOBvYnaa1gUQAAAYQ"]
[Mon Mar 02 02:01:22.038457 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:22598] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "aaR-8hrUg-j5GLDtRFnFrAAAAFc"]
[Mon Mar 02 02:01:22.585256 2026] [:error] [pid 26940:tid 26960] [client 20.107.201.194:9293] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "aaR-8hrUg-j5GLDtRFnFswAAAFA"]
[Mon Mar 02 02:01:23.091663 2026] [:error] [pid 53180:tid 53453] [client 20.107.201.194:17045] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "aaR-8zPPJpDOBvYnaa1gVgAAAYk"]
[Mon Mar 02 02:01:23.593303 2026] [:error] [pid 53182:tid 53562] [client 20.107.201.194:17072] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "aaR-8_v073cA6eM1YCTcSwAAANI"]
[Mon Mar 02 02:01:24.100320 2026] [:error] [pid 53182:tid 53565] [client 20.107.201.194:9340] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nhr.php"] [unique_id "aaR-9Pv073cA6eM1YCTcTQAAANU"]
[Mon Mar 02 02:01:24.600371 2026] [:error] [pid 53182:tid 53543] [client 20.107.201.194:25608] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nhr.php"] [unique_id "aaR-9Pv073cA6eM1YCTcTwAAAMA"]
[Mon Mar 02 02:01:25.121548 2026] [:error] [pid 53182:tid 53550] [client 20.107.201.194:25653] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nhr.php"] [unique_id "aaR-9fv073cA6eM1YCTcUgAAAMc"]
[Mon Mar 02 02:01:25.663281 2026] [:error] [pid 53181:tid 53527] [client 20.107.201.194:26385] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nhr.php"] [unique_id "aaR-9Yr_0T1SazTrJOBGkQAAAQw"]
[Mon Mar 02 02:01:26.190908 2026] [:error] [pid 53180:tid 53455] [client 20.107.201.194:15078] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aaR-9jPPJpDOBvYnaa1gXAAAAYs"]
[Mon Mar 02 02:01:26.780909 2026] [:error] [pid 53180:tid 53454] [client 20.107.201.194:25621] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aaR-9jPPJpDOBvYnaa1gXwAAAYo"]
[Mon Mar 02 02:01:27.295263 2026] [:error] [pid 53180:tid 53468] [client 20.107.201.194:9341] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aaR-9zPPJpDOBvYnaa1gYQAAAZg"]
[Mon Mar 02 02:01:27.815591 2026] [:error] [pid 53585:tid 53592] [client 20.107.201.194:25634] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aaR-93bCvYsvu6kKhM2ybQAAAAQ"]
[Mon Mar 02 02:01:28.325765 2026] [:error] [pid 53181:tid 53519] [client 20.107.201.194:17068] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "aaR--Ir_0T1SazTrJOBGmwAAAQU"]
[Mon Mar 02 02:01:28.853899 2026] [:error] [pid 53585:tid 53593] [client 20.107.201.194:22632] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "aaR--HbCvYsvu6kKhM2ybwAAAAU"]
[Mon Mar 02 02:01:29.369165 2026] [:error] [pid 26940:tid 26960] [client 20.107.201.194:9301] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "aaR--RrUg-j5GLDtRFnFzAAAAFA"]
[Mon Mar 02 02:01:29.902623 2026] [:error] [pid 53182:tid 53566] [client 20.107.201.194:9290] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "aaR--fv073cA6eM1YCTcXgAAANY"]
[Mon Mar 02 02:01:30.417545 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:26812] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1061.php"] [unique_id "aaR--hrUg-j5GLDtRFnFzQAAAEo"]
[Mon Mar 02 02:01:30.929744 2026] [:error] [pid 53182:tid 53558] [client 20.107.201.194:33954] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1061.php"] [unique_id "aaR--vv073cA6eM1YCTcXwAAAM4"]
[Mon Mar 02 02:01:31.460607 2026] [:error] [pid 53181:tid 53527] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/1061.php
[Mon Mar 02 02:01:31.713158 2026] [:error] [pid 53181:tid 53525] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq13.php
[Mon Mar 02 02:01:31.997162 2026] [:error] [pid 53181:tid 53528] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Mon Mar 02 02:01:32.249825 2026] [:error] [pid 53181:tid 53523] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/05.php
[Mon Mar 02 02:01:32.502899 2026] [:error] [pid 53181:tid 53533] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/zxin.php
[Mon Mar 02 02:01:32.756254 2026] [:error] [pid 53181:tid 53522] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Mon Mar 02 02:01:33.009455 2026] [:error] [pid 53181:tid 53516] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Mon Mar 02 02:01:33.261992 2026] [:error] [pid 53181:tid 53521] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Mon Mar 02 02:01:33.515605 2026] [:error] [pid 53181:tid 53515] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/iko.php
[Mon Mar 02 02:01:33.768471 2026] [:error] [pid 53181:tid 53531] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/xmy.php
[Mon Mar 02 02:01:34.021780 2026] [:error] [pid 53181:tid 53530] [client 20.107.201.194:15057] File does not exist: /usr/local/apache/htdocs/suspended-page/fun.php
[Mon Mar 02 02:01:34.275819 2026] [:error] [pid 53181:tid 53534] [client 20.107.201.194:15057] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaR-_or_0T1SazTrJOBGrgAAARM"]
[Mon Mar 02 02:01:34.775932 2026] [:error] [pid 26940:tid 26944] [client 20.107.201.194:26774] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaR-_hrUg-j5GLDtRFnF3QAAAEA"]
[Mon Mar 02 02:01:35.300636 2026] [:error] [pid 53180:tid 53464] [client 20.107.201.194:33980] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaR-_zPPJpDOBvYnaa1gcgAAAZQ"]
[Mon Mar 02 02:01:35.812343 2026] [:error] [pid 26940:tid 26951] [client 20.107.201.194:8688] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/end.php"] [unique_id "aaR-_xrUg-j5GLDtRFnF4gAAAEc"]
[Mon Mar 02 02:01:36.332356 2026] [:error] [pid 53585:tid 53604] [client 20.107.201.194:26811] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaR_AHbCvYsvu6kKhM2yfAAAABA"]
[Mon Mar 02 02:01:36.838535 2026] [:error] [pid 53182:tid 53565] [client 20.107.201.194:22628] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaR_APv073cA6eM1YCTcZwAAANU"]
[Mon Mar 02 02:01:37.338457 2026] [:error] [pid 26940:tid 26963] [client 20.107.201.194:33961] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaR_ARrUg-j5GLDtRFnF5wAAAFM"]
[Mon Mar 02 02:01:37.839108 2026] [:error] [pid 53585:tid 53609] [client 20.107.201.194:13283] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aaR_AXbCvYsvu6kKhM2yfgAAABU"]
[Mon Mar 02 02:01:38.337909 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:24346] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaR_AhrUg-j5GLDtRFnF6wAAAEo"]
[Mon Mar 02 02:01:38.877310 2026] [:error] [pid 53181:tid 53514] [client 20.107.201.194:15088] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaR_Aor_0T1SazTrJOBGsgAAAQA"]
[Mon Mar 02 02:01:39.377704 2026] [:error] [pid 26940:tid 26949] [client 20.107.201.194:9306] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaR_AxrUg-j5GLDtRFnF9AAAAEU"]
[Mon Mar 02 02:01:39.879752 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:28669] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scx.php7"] [unique_id "aaR_AxrUg-j5GLDtRFnF-AAAAEM"]
[Mon Mar 02 02:01:40.392722 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:26394] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaR_BBrUg-j5GLDtRFnF_AAAAEQ"]
[Mon Mar 02 02:01:40.893741 2026] [:error] [pid 26940:tid 26951] [client 20.107.201.194:17044] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaR_BBrUg-j5GLDtRFnF_wAAAEc"]
[Mon Mar 02 02:01:41.393812 2026] [:error] [pid 26940:tid 26963] [client 20.107.201.194:28624] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaR_BRrUg-j5GLDtRFnGBQAAAFM"]
[Mon Mar 02 02:01:41.893089 2026] [:error] [pid 53181:tid 53521] [client 20.107.201.194:9670] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error1.php"] [unique_id "aaR_BYr_0T1SazTrJOBGtgAAAQY"]
[Mon Mar 02 02:01:42.394470 2026] [:error] [pid 53181:tid 53535] [client 20.107.201.194:22636] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaR_Bor_0T1SazTrJOBGuAAAARQ"]
[Mon Mar 02 02:01:42.901958 2026] [:error] [pid 26940:tid 26958] [client 20.107.201.194:17063] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaR_BhrUg-j5GLDtRFnGCQAAAE4"]
[Mon Mar 02 02:01:43.415024 2026] [:error] [pid 26940:tid 26960] [client 20.107.201.194:17064] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaR_BxrUg-j5GLDtRFnGDgAAAFA"]
[Mon Mar 02 02:01:43.919405 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:9328] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thui.php"] [unique_id "aaR_B_v073cA6eM1YCTcbwAAAME"]
[Mon Mar 02 02:01:44.427820 2026] [:error] [pid 26940:tid 26965] [client 20.107.201.194:26779] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaR_CBrUg-j5GLDtRFnGEwAAAFU"]
[Mon Mar 02 02:01:44.932408 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:17071] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaR_CBrUg-j5GLDtRFnGFQAAAFc"]
[Mon Mar 02 02:01:45.435653 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:9678] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaR_CRrUg-j5GLDtRFnGGQAAAEQ"]
[Mon Mar 02 02:01:45.938063 2026] [:error] [pid 26940:tid 26966] [client 20.107.201.194:22637] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ff1.php"] [unique_id "aaR_CRrUg-j5GLDtRFnGHwAAAFY"]
[Mon Mar 02 02:01:46.452475 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:26386] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaR_ChrUg-j5GLDtRFnGJQAAAEQ"]
[Mon Mar 02 02:01:46.951850 2026] [:error] [pid 53181:tid 53514] [client 20.107.201.194:26804] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaR_Cor_0T1SazTrJOBGvwAAAQA"]
[Mon Mar 02 02:01:47.450133 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:25638] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaR_CxrUg-j5GLDtRFnGMgAAAFg"]
[Mon Mar 02 02:01:47.957075 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:8651] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaR_CxrUg-j5GLDtRFnGNwAAAEE"]
[Mon Mar 02 02:01:48.457586 2026] [:error] [pid 26940:tid 26944] [client 20.107.201.194:13257] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaR_DBrUg-j5GLDtRFnGPgAAAEA"]
[Mon Mar 02 02:01:48.956080 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:28642] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaR_DBrUg-j5GLDtRFnGRAAAAFg"]
[Mon Mar 02 02:01:49.458091 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:15041] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaR_DRrUg-j5GLDtRFnGTQAAAEI"]
[Mon Mar 02 02:01:49.961008 2026] [:error] [pid 53180:tid 53463] [client 20.107.201.194:8667] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aaR_DTPPJpDOBvYnaa1gggAAAZM"]
[Mon Mar 02 02:01:50.460863 2026] [:error] [pid 53180:tid 53466] [client 20.107.201.194:26374] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaR_DjPPJpDOBvYnaa1ghQAAAZY"]
[Mon Mar 02 02:01:50.961231 2026] [:error] [pid 53180:tid 53451] [client 20.107.201.194:9296] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaR_DjPPJpDOBvYnaa1ghwAAAYc"]
[Mon Mar 02 02:01:51.494330 2026] [:error] [pid 53181:tid 53522] [client 20.107.201.194:8645] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaR_D4r_0T1SazTrJOBGyAAAAQc"]
[Mon Mar 02 02:01:52.025773 2026] [:error] [pid 53181:tid 53517] [client 20.107.201.194:9703] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aaR_EIr_0T1SazTrJOBGyQAAAQM"]
[Mon Mar 02 02:01:52.544590 2026] [:error] [pid 53585:tid 53600] [client 20.107.201.194:13294] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaR_EHbCvYsvu6kKhM2ypQAAAAw"]
[Mon Mar 02 02:01:53.046318 2026] [:error] [pid 53182:tid 53558] [client 20.107.201.194:9320] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaR_Efv073cA6eM1YCTcdQAAAM4"]
[Mon Mar 02 02:01:53.551632 2026] [:error] [pid 53585:tid 53602] [client 20.107.201.194:1132] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaR_EXbCvYsvu6kKhM2yrwAAAA4"]
[Mon Mar 02 02:01:54.054019 2026] [:error] [pid 53585:tid 53590] [client 20.107.201.194:1099] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rpk.php"] [unique_id "aaR_EnbCvYsvu6kKhM2ytwAAAAI"]
[Mon Mar 02 02:01:54.556455 2026] [:error] [pid 53585:tid 53596] [client 20.107.201.194:13250] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_EnbCvYsvu6kKhM2yvAAAAAg"]
[Mon Mar 02 02:01:55.055696 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:28648] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_E_v073cA6eM1YCTceAAAAME"]
[Mon Mar 02 02:01:55.559605 2026] [:error] [pid 53180:tid 53467] [client 20.107.201.194:16376] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_EzPPJpDOBvYnaa1gjgAAAZc"]
[Mon Mar 02 02:01:56.088290 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:9685] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_FHbCvYsvu6kKhM2yxAAAAA8"]
[Mon Mar 02 02:01:56.603649 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:1097] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaR_FHbCvYsvu6kKhM2yywAAAAE"]
[Mon Mar 02 02:01:57.109712 2026] [:error] [pid 53181:tid 53515] [client 20.107.201.194:1112] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaR_FYr_0T1SazTrJOBGzAAAAQE"]
[Mon Mar 02 02:01:57.637044 2026] [:error] [pid 53180:tid 53468] [client 20.107.201.194:8680] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaR_FTPPJpDOBvYnaa1gkgAAAZg"]
[Mon Mar 02 02:01:58.139367 2026] [:error] [pid 53182:tid 53543] [client 20.107.201.194:17075] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aaR_Fvv073cA6eM1YCTchAAAAMA"]
[Mon Mar 02 02:01:58.637332 2026] [:error] [pid 26940:tid 26944] [client 20.107.201.194:22634] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaR_FhrUg-j5GLDtRFnGfgAAAEA"]
[Mon Mar 02 02:01:59.138755 2026] [:error] [pid 26940:tid 26951] [client 20.107.201.194:28206] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaR_FxrUg-j5GLDtRFnGhQAAAEc"]
[Mon Mar 02 02:01:59.661812 2026] [:error] [pid 26940:tid 26952] [client 20.107.201.194:8666] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaR_FxrUg-j5GLDtRFnGjQAAAEg"]
[Mon Mar 02 02:02:00.215170 2026] [:error] [pid 26940:tid 26956] [client 20.107.201.194:9722] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e.php"] [unique_id "aaR_GBrUg-j5GLDtRFnGlQAAAEw"]
[Mon Mar 02 02:02:00.748743 2026] [:error] [pid 53181:tid 53523] [client 20.107.201.194:22643] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaR_GIr_0T1SazTrJOBG0AAAAQg"]
[Mon Mar 02 02:02:01.277564 2026] [:error] [pid 53182:tid 53552] [client 20.107.201.194:17039] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaR_Gfv073cA6eM1YCTchwAAAMk"]
[Mon Mar 02 02:02:01.787103 2026] [:error] [pid 53182:tid 53564] [client 20.107.201.194:28200] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaR_Gfv073cA6eM1YCTciQAAANQ"]
[Mon Mar 02 02:02:02.319693 2026] [:error] [pid 26940:tid 26964] [client 20.107.201.194:26786] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "aaR_GhrUg-j5GLDtRFnGpQAAAFQ"]
[Mon Mar 02 02:02:02.823634 2026] [:error] [pid 53585:tid 53608] [client 20.107.201.194:28618] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaR_GnbCvYsvu6kKhM2y2wAAABQ"]
[Mon Mar 02 02:02:03.336191 2026] [:error] [pid 53181:tid 53531] [client 20.107.201.194:8681] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaR_G4r_0T1SazTrJOBG1gAAARA"]
[Mon Mar 02 02:02:03.842399 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:22609] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaR_GxrUg-j5GLDtRFnGsAAAAEQ"]
[Mon Mar 02 02:02:04.424838 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:8042] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "aaR_HBrUg-j5GLDtRFnGtgAAAEk"]
[Mon Mar 02 02:02:04.965779 2026] [:error] [pid 53181:tid 53528] [client 20.107.201.194:8024] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaR_HIr_0T1SazTrJOBG2wAAAQ0"]
[Mon Mar 02 02:02:05.477600 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:8642] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaR_HRrUg-j5GLDtRFnGvAAAAFI"]
[Mon Mar 02 02:02:06.024859 2026] [:error] [pid 53585:tid 53610] [client 20.107.201.194:8017] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaR_HnbCvYsvu6kKhM2y4wAAABY"]
[Mon Mar 02 02:02:06.555987 2026] [:error] [pid 26940:tid 26964] [client 20.107.201.194:15904] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaR_HhrUg-j5GLDtRFnGxAAAAFQ"]
[Mon Mar 02 02:02:07.165832 2026] [:error] [pid 26940:tid 26949] [client 20.107.201.194:1148] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaR_HxrUg-j5GLDtRFnGyQAAAEU"]
[Mon Mar 02 02:02:07.687370 2026] [:error] [pid 26940:tid 26963] [client 20.107.201.194:28661] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaR_HxrUg-j5GLDtRFnGzQAAAFM"]
[Mon Mar 02 02:02:08.256658 2026] [:error] [pid 53182:tid 53557] [client 20.107.201.194:28172] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaR_IPv073cA6eM1YCTclAAAAM0"]
[Mon Mar 02 02:02:08.763992 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:28619] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/get.php"] [unique_id "aaR_IBrUg-j5GLDtRFnG1wAAAEk"]
[Mon Mar 02 02:02:09.289014 2026] [:error] [pid 53585:tid 53592] [client 20.107.201.194:26377] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaR_IXbCvYsvu6kKhM2y6gAAAAQ"]
[Mon Mar 02 02:02:09.822042 2026] [:error] [pid 53182:tid 53567] [client 20.107.201.194:8023] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaR_Ifv073cA6eM1YCTcmAAAANc"]
[Mon Mar 02 02:02:10.398443 2026] [:error] [pid 53182:tid 53560] [client 20.107.201.194:28184] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaR_Ivv073cA6eM1YCTcmwAAANA"]
[Mon Mar 02 02:02:10.907801 2026] [:error] [pid 53180:tid 53461] [client 20.107.201.194:16380] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "aaR_IjPPJpDOBvYnaa1gqQAAAZE"]
[Mon Mar 02 02:02:11.456566 2026] [:error] [pid 53585:tid 53589] [client 20.107.201.194:16338] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_I3bCvYsvu6kKhM2y-AAAAAE"]
[Mon Mar 02 02:02:12.032226 2026] [:error] [pid 53585:tid 53596] [client 20.107.201.194:9718] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_JHbCvYsvu6kKhM2y_wAAAAg"]
[Mon Mar 02 02:02:12.564081 2026] [:error] [pid 26940:tid 26967] [client 20.107.201.194:17050] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_JBrUg-j5GLDtRFnG7AAAAFc"]
[Mon Mar 02 02:02:13.183388 2026] [:error] [pid 26940:tid 26956] [client 20.107.201.194:21568] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aaR_JRrUg-j5GLDtRFnG8gAAAEw"]
[Mon Mar 02 02:02:13.715983 2026] [:error] [pid 53585:tid 53602] [client 20.107.201.194:22653] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaR_JXbCvYsvu6kKhM2zCgAAAA4"]
[Mon Mar 02 02:02:14.267263 2026] [:error] [pid 53181:tid 53521] [client 20.107.201.194:8040] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaR_Jor_0T1SazTrJOBG8gAAAQY"]
[Mon Mar 02 02:02:14.796890 2026] [:error] [pid 53181:tid 53537] [client 20.107.201.194:26388] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaR_Jor_0T1SazTrJOBG9AAAARY"]
[Mon Mar 02 02:02:15.376728 2026] [:error] [pid 26940:tid 26958] [client 20.107.201.194:1106] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "aaR_JxrUg-j5GLDtRFnG_wAAAE4"]
[Mon Mar 02 02:02:16.004014 2026] [:error] [pid 26940:tid 26948] [client 20.107.201.194:1121] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaR_KBrUg-j5GLDtRFnHAgAAAEQ"]
[Mon Mar 02 02:02:16.566844 2026] [:error] [pid 53182:tid 53563] [client 20.107.201.194:10639] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaR_KPv073cA6eM1YCTcpQAAANM"]
[Mon Mar 02 02:02:17.086835 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:17047] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaR_KRrUg-j5GLDtRFnHCwAAAEE"]
[Mon Mar 02 02:02:17.668607 2026] [:error] [pid 26940:tid 26968] [client 20.107.201.194:17035] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raw.php"] [unique_id "aaR_KRrUg-j5GLDtRFnHDwAAAFg"]
[Mon Mar 02 02:02:18.193921 2026] [:error] [pid 53182:tid 53543] [client 20.107.201.194:9680] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaR_Kvv073cA6eM1YCTcqAAAAMA"]
[Mon Mar 02 02:02:18.724611 2026] [:error] [pid 26940:tid 26958] [client 20.107.201.194:22603] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaR_KhrUg-j5GLDtRFnHFgAAAE4"]
[Mon Mar 02 02:02:19.283648 2026] [:error] [pid 26940:tid 26953] [client 20.107.201.194:16326] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaR_KxrUg-j5GLDtRFnHGgAAAEk"]
[Mon Mar 02 02:02:19.845699 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:26380] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aaR_KxrUg-j5GLDtRFnHHQAAAFI"]
[Mon Mar 02 02:02:20.386315 2026] [:error] [pid 53182:tid 53546] [client 20.107.201.194:8025] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaR_LPv073cA6eM1YCTcrQAAAMM"]
[Mon Mar 02 02:02:20.894850 2026] [:error] [pid 53182:tid 53556] [client 20.107.201.194:22607] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaR_LPv073cA6eM1YCTcrwAAAMw"]
[Mon Mar 02 02:02:21.458283 2026] [:error] [pid 26940:tid 26954] [client 20.107.201.194:28936] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaR_LRrUg-j5GLDtRFnHJgAAAEo"]
[Mon Mar 02 02:02:22.038159 2026] [:error] [pid 26940:tid 26964] [client 20.107.201.194:28220] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "aaR_LhrUg-j5GLDtRFnHKwAAAFQ"]
[Mon Mar 02 02:02:22.545166 2026] [:error] [pid 53182:tid 53545] [client 20.107.201.194:17056] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaR_Lvv073cA6eM1YCTcuQAAAMI"]
[Mon Mar 02 02:02:23.095207 2026] [:error] [pid 53182:tid 53546] [client 20.107.201.194:28175] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaR_L_v073cA6eM1YCTcwQAAAMM"]
[Mon Mar 02 02:02:23.646928 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:15900] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaR_LxrUg-j5GLDtRFnHMwAAAFI"]
[Mon Mar 02 02:02:24.348336 2026] [:error] [pid 53585:tid 53603] [client 20.107.201.194:8686] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aaR_MHbCvYsvu6kKhM2zOAAAAA8"]
[Mon Mar 02 02:02:24.916068 2026] [:error] [pid 53585:tid 53604] [client 20.107.201.194:8663] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaR_MHbCvYsvu6kKhM2zOgAAABA"]
[Mon Mar 02 02:02:25.537425 2026] [:error] [pid 53181:tid 53523] [client 20.107.201.194:16350] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaR_MYr_0T1SazTrJOBG_AAAAQg"]
[Mon Mar 02 02:02:26.157562 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:15882] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaR_MhrUg-j5GLDtRFnHOQAAAEI"]
[Mon Mar 02 02:02:26.751041 2026] [:error] [pid 53585:tid 53608] [client 20.107.201.194:9717] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "aaR_MnbCvYsvu6kKhM2zQQAAABQ"]
[Mon Mar 02 02:02:27.302178 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:1116] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaR_M_v073cA6eM1YCTcygAAAME"]
[Mon Mar 02 02:02:27.843358 2026] [:error] [pid 53585:tid 53610] [client 20.107.201.194:1134] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaR_M3bCvYsvu6kKhM2zRgAAABY"]
[Mon Mar 02 02:02:28.371825 2026] [:error] [pid 26940:tid 26955] [client 20.107.201.194:9331] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaR_NBrUg-j5GLDtRFnHPgAAAEs"]
[Mon Mar 02 02:02:28.927695 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:26428] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "aaR_NBrUg-j5GLDtRFnHRQAAAEI"]
[Mon Mar 02 02:02:29.823895 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:16374] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaR_NRrUg-j5GLDtRFnHUQAAAEM"]
[Mon Mar 02 02:02:30.424193 2026] [:error] [pid 26940:tid 26951] [client 20.107.201.194:22626] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaR_NhrUg-j5GLDtRFnHVgAAAEc"]
[Mon Mar 02 02:02:30.964069 2026] [:error] [pid 53180:tid 53452] [client 20.107.201.194:17082] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaR_NjPPJpDOBvYnaa1gzAAAAYg"]
[Mon Mar 02 02:02:31.522763 2026] [:error] [pid 26940:tid 26947] [client 20.107.201.194:1130] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aaR_NxrUg-j5GLDtRFnHXgAAAEM"]
[Mon Mar 02 02:02:32.096185 2026] [:error] [pid 26940:tid 26945] [client 20.107.201.194:8047] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaR_OBrUg-j5GLDtRFnHYAAAAEE"]
[Mon Mar 02 02:02:32.675287 2026] [:error] [pid 53181:tid 53530] [client 20.107.201.194:16332] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaR_OIr_0T1SazTrJOBHBgAAAQ8"]
[Mon Mar 02 02:02:33.244784 2026] [:error] [pid 26940:tid 26963] [client 20.107.201.194:9721] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaR_ORrUg-j5GLDtRFnHZQAAAFM"]
[Mon Mar 02 02:02:33.763968 2026] [:error] [pid 26940:tid 26952] [client 20.107.201.194:1405] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aaR_ORrUg-j5GLDtRFnHaAAAAEg"]
[Mon Mar 02 02:02:34.299073 2026] [:error] [pid 53180:tid 53444] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/gec.php
[Mon Mar 02 02:02:34.554252 2026] [:error] [pid 53180:tid 53460] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/sxdfrt.php
[Mon Mar 02 02:02:34.807132 2026] [:error] [pid 53180:tid 53445] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Mon Mar 02 02:02:35.061908 2026] [:error] [pid 53180:tid 53452] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Mon Mar 02 02:02:35.324264 2026] [:error] [pid 53180:tid 53464] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/ocxla.php
[Mon Mar 02 02:02:35.577559 2026] [:error] [pid 53180:tid 53466] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/god.php
[Mon Mar 02 02:02:35.831684 2026] [:error] [pid 53180:tid 53446] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Mon Mar 02 02:02:36.101577 2026] [:error] [pid 53180:tid 53462] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/zz.php
[Mon Mar 02 02:02:36.361225 2026] [:error] [pid 53180:tid 53455] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Mon Mar 02 02:02:36.620321 2026] [:error] [pid 53180:tid 53463] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/sdsa.php
[Mon Mar 02 02:02:36.872974 2026] [:error] [pid 53180:tid 53448] [client 20.107.201.194:1387] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Mar 02 02:02:37.127040 2026] [:error] [pid 53180:tid 53449] [client 20.107.201.194:1387] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaR_PTPPJpDOBvYnaa1g6gAAAYU"]
[Mon Mar 02 02:02:37.666199 2026] [:error] [pid 53585:tid 53609] [client 20.107.201.194:26431] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaR_PXbCvYsvu6kKhM2zVgAAABU"]
[Mon Mar 02 02:02:38.249659 2026] [:error] [pid 26940:tid 26950] [client 20.107.201.194:26373] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaR_PhrUg-j5GLDtRFnHigAAAEY"]
[Mon Mar 02 02:02:38.823430 2026] [:error] [pid 53585:tid 53611] [client 20.107.201.194:27148] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "aaR_PnbCvYsvu6kKhM2zXAAAABc"]
[Mon Mar 02 02:02:39.366483 2026] [:error] [pid 53180:tid 53461] [client 20.107.201.194:26757] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaR_PzPPJpDOBvYnaa1g8AAAAZE"]
[Mon Mar 02 02:02:39.938579 2026] [:error] [pid 53181:tid 53535] [client 20.107.201.194:26368] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaR_P4r_0T1SazTrJOBHDwAAARQ"]
[Mon Mar 02 02:02:40.559018 2026] [:error] [pid 53181:tid 53527] [client 20.107.201.194:9312] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaR_QIr_0T1SazTrJOBHEQAAAQw"]
[Mon Mar 02 02:02:41.108039 2026] [:error] [pid 53182:tid 53566] [client 20.107.201.194:25613] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "aaR_Qfv073cA6eM1YCTc6AAAANY"]
[Mon Mar 02 02:02:41.691262 2026] [:error] [pid 26940:tid 26949] [client 20.107.201.194:23412] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaR_QRrUg-j5GLDtRFnHpQAAAEU"]
[Mon Mar 02 02:02:42.198958 2026] [:error] [pid 53180:tid 53456] [client 20.107.201.194:23861] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaR_QjPPJpDOBvYnaa1g-AAAAYw"]
[Mon Mar 02 02:02:42.816465 2026] [:error] [pid 53182:tid 53544] [client 20.107.201.194:33027] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaR_Qvv073cA6eM1YCTc7gAAAME"]
[Mon Mar 02 02:02:43.384875 2026] [:error] [pid 26940:tid 26962] [client 20.107.201.194:15100] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.kb.php"] [unique_id "aaR_QxrUg-j5GLDtRFnHrgAAAFI"]
[Mon Mar 02 02:02:43.897584 2026] [:error] [pid 26940:tid 26960] [client 20.107.201.194:26148] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaR_QxrUg-j5GLDtRFnHtQAAAFA"]
[Mon Mar 02 02:02:44.447755 2026] [:error] [pid 26940:tid 26961] [client 20.107.201.194:26151] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaR_RBrUg-j5GLDtRFnHuAAAAFE"]
[Mon Mar 02 02:02:44.971205 2026] [:error] [pid 26940:tid 26946] [client 20.107.201.194:32926] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaR_RBrUg-j5GLDtRFnHxAAAAEI"]
[Mon Mar 02 02:02:45.477304 2026] [:error] [pid 53180:tid 53445] [client 20.107.201.194:20426] [client 20.107.201.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aaR_RTPPJpDOBvYnaa1g_AAAAYE"]
[Mon Mar 02 02:43:05.407475 2026] [:error] [pid 53181:tid 53535] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Mar 02 02:43:05.617186 2026] [:error] [pid 53181:tid 53530] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Mar 02 02:43:06.515170 2026] [:error] [pid 53181:tid 53532] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Mon Mar 02 02:43:06.725660 2026] [:error] [pid 53181:tid 53537] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Mon Mar 02 02:43:06.937188 2026] [:error] [pid 53181:tid 53525] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 02 02:43:07.147005 2026] [:error] [pid 53181:tid 53539] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Mar 02 02:43:07.358468 2026] [:error] [pid 53181:tid 53517] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Mon Mar 02 02:43:07.977774 2026] [:error] [pid 53181:tid 53535] [client 20.104.124.39:15244] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 02 02:43:08.491189 2026] [:error] [pid 53181:tid 53536] [client 20.104.124.39:15244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx1.php"] [unique_id "aaSIvIr_0T1SazTrJOBdhwAAARU"]
[Mon Mar 02 02:43:09.294083 2026] [:error] [pid 53180:tid 53450] [client 20.104.124.39:15305] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx1.php"] [unique_id "aaSIvTPPJpDOBvYnaa1w7QAAAYY"]
[Mon Mar 02 02:43:09.883594 2026] [:error] [pid 26940:tid 26960] [client 20.104.124.39:15243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx1.php"] [unique_id "aaSIvRrUg-j5GLDtRFkGjwAAAFA"]
[Mon Mar 02 02:43:10.545464 2026] [:error] [pid 26940:tid 26947] [client 20.104.124.39:15337] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx1.php"] [unique_id "aaSIvhrUg-j5GLDtRFkGkgAAAEM"]
[Mon Mar 02 02:43:11.604621 2026] [:error] [pid 26940:tid 26956] [client 20.104.124.39:15249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xv.php"] [unique_id "aaSIvxrUg-j5GLDtRFkGnAAAAEw"]
[Mon Mar 02 02:43:12.413371 2026] [:error] [pid 53182:tid 53563] [client 20.104.124.39:15345] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xv.php"] [unique_id "aaSIwPv073cA6eM1YCT6pQAAANM"]
[Mon Mar 02 02:43:13.088647 2026] [:error] [pid 53180:tid 53444] [client 20.104.124.39:15307] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xv.php"] [unique_id "aaSIwTPPJpDOBvYnaa1w9AAAAYA"]
[Mon Mar 02 02:43:13.688818 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xv.php"] [unique_id "aaSIwRrUg-j5GLDtRFkGpwAAAEo"]
[Mon Mar 02 02:43:14.578380 2026] [:error] [pid 53585:tid 53602] [client 20.104.124.39:15233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x56.php"] [unique_id "aaSIwnbCvYsvu6kKhM3cAQAAAA4"]
[Mon Mar 02 02:43:15.425410 2026] [:error] [pid 26940:tid 26946] [client 20.104.124.39:15184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x56.php"] [unique_id "aaSIwxrUg-j5GLDtRFkGqwAAAEI"]
[Mon Mar 02 02:43:16.192922 2026] [:error] [pid 26940:tid 26952] [client 20.104.124.39:15237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x56.php"] [unique_id "aaSIxBrUg-j5GLDtRFkGtgAAAEg"]
[Mon Mar 02 02:43:16.967577 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15347] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x56.php"] [unique_id "aaSIxBrUg-j5GLDtRFkGvAAAAEc"]
[Mon Mar 02 02:43:17.722535 2026] [:error] [pid 26940:tid 26945] [client 20.104.124.39:15317] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aaSIxRrUg-j5GLDtRFkGwQAAAEE"]
[Mon Mar 02 02:43:18.496504 2026] [:error] [pid 26940:tid 26948] [client 20.104.124.39:15192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aaSIxhrUg-j5GLDtRFkGxAAAAEQ"]
[Mon Mar 02 02:43:19.346213 2026] [:error] [pid 53182:tid 53565] [client 20.104.124.39:15335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aaSIx_v073cA6eM1YCT6rQAAANU"]
[Mon Mar 02 02:43:19.992818 2026] [:error] [pid 53180:tid 53448] [client 20.104.124.39:15340] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/htaccess.php"] [unique_id "aaSIxzPPJpDOBvYnaa1w_AAAAYQ"]
[Mon Mar 02 02:43:21.360453 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15341] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaSIyXbCvYsvu6kKhM3cGgAAAAo"]
[Mon Mar 02 02:43:22.094545 2026] [:error] [pid 53585:tid 53597] [client 20.104.124.39:15336] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaSIynbCvYsvu6kKhM3cIQAAAAk"]
[Mon Mar 02 02:43:23.059215 2026] [:error] [pid 53182:tid 53544] [client 20.104.124.39:15299] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaSIy_v073cA6eM1YCT6tQAAAME"]
[Mon Mar 02 02:43:23.931567 2026] [:error] [pid 53585:tid 53606] [client 20.104.124.39:15334] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaSIy3bCvYsvu6kKhM3cKAAAABI"]
[Mon Mar 02 02:43:24.541225 2026] [:error] [pid 53182:tid 53561] [client 20.104.124.39:15303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x50.php"] [unique_id "aaSIzPv073cA6eM1YCT6uwAAANE"]
[Mon Mar 02 02:43:25.764155 2026] [:error] [pid 53181:tid 53533] [client 20.104.124.39:15266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x50.php"] [unique_id "aaSIzYr_0T1SazTrJOBdlwAAARI"]
[Mon Mar 02 02:43:26.465881 2026] [:error] [pid 26940:tid 26959] [client 20.104.124.39:15314] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x50.php"] [unique_id "aaSIzhrUg-j5GLDtRFkG4QAAAE8"]
[Mon Mar 02 02:43:27.288330 2026] [:error] [pid 53182:tid 53544] [client 20.104.124.39:15242] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x50.php"] [unique_id "aaSIz_v073cA6eM1YCT6xQAAAME"]
[Mon Mar 02 02:43:28.333151 2026] [:error] [pid 26940:tid 26944] [client 20.104.124.39:15301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fv.php"] [unique_id "aaSI0BrUg-j5GLDtRFkG8QAAAEA"]
[Mon Mar 02 02:43:29.796122 2026] [:error] [pid 26940:tid 26958] [client 20.104.124.39:15359] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fv.php"] [unique_id "aaSI0RrUg-j5GLDtRFkHBgAAAE4"]
[Mon Mar 02 02:43:31.473913 2026] [:error] [pid 26940:tid 26966] [client 20.104.124.39:15330] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fv.php"] [unique_id "aaSI0xrUg-j5GLDtRFkHIAAAAFY"]
[Mon Mar 02 02:43:32.606644 2026] [:error] [pid 53585:tid 53603] [client 20.104.124.39:15288] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fv.php"] [unique_id "aaSI1HbCvYsvu6kKhM3cVwAAAA8"]
[Mon Mar 02 02:43:33.748458 2026] [:error] [pid 53585:tid 53588] [client 20.104.124.39:15312] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaSI1XbCvYsvu6kKhM3cXQAAAAA"]
[Mon Mar 02 02:43:34.758522 2026] [:error] [pid 53181:tid 53524] [client 20.104.124.39:15319] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaSI1or_0T1SazTrJOBdpQAAAQk"]
[Mon Mar 02 02:43:35.836406 2026] [:error] [pid 53180:tid 53461] [client 20.104.124.39:15235] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaSI1zPPJpDOBvYnaa1xBQAAAZE"]
[Mon Mar 02 02:43:36.894896 2026] [:error] [pid 53181:tid 53527] [client 20.104.124.39:15188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaSI2Ir_0T1SazTrJOBdqgAAAQw"]
[Mon Mar 02 02:43:38.448443 2026] [:error] [pid 53585:tid 53591] [client 20.104.124.39:15248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lsd.php"] [unique_id "aaSI2nbCvYsvu6kKhM3cbwAAAAM"]
[Mon Mar 02 02:43:40.501717 2026] [:error] [pid 53182:tid 53568] [client 20.104.124.39:15350] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lsd.php"] [unique_id "aaSI3Pv073cA6eM1YCT64AAAANg"]
[Mon Mar 02 02:43:41.018768 2026] [:error] [pid 53182:tid 53563] [client 20.104.124.39:15308] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lsd.php"] [unique_id "aaSI3fv073cA6eM1YCT64gAAANM"]
[Mon Mar 02 02:43:41.596917 2026] [:error] [pid 53182:tid 53559] [client 20.104.124.39:15357] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lsd.php"] [unique_id "aaSI3fv073cA6eM1YCT65QAAAM8"]
[Mon Mar 02 02:43:42.177993 2026] [:error] [pid 26940:tid 26948] [client 20.104.124.39:15267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaSI3hrUg-j5GLDtRFkHRgAAAEQ"]
[Mon Mar 02 02:43:43.710284 2026] [:error] [pid 26940:tid 26953] [client 20.104.124.39:15245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaSI3xrUg-j5GLDtRFkHUQAAAEk"]
[Mon Mar 02 02:43:44.905948 2026] [:error] [pid 53182:tid 53566] [client 20.104.124.39:15354] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaSI4Pv073cA6eM1YCT67QAAANY"]
[Mon Mar 02 02:43:45.894849 2026] [:error] [pid 53585:tid 53610] [client 20.104.124.39:15168] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaSI4XbCvYsvu6kKhM3cnwAAABY"]
[Mon Mar 02 02:43:46.471247 2026] [:error] [pid 53181:tid 53535] [client 20.104.124.39:15320] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaSI4or_0T1SazTrJOBdsgAAARQ"]
[Mon Mar 02 02:43:47.359242 2026] [:error] [pid 53182:tid 53549] [client 20.104.124.39:15183] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaSI4_v073cA6eM1YCT69AAAAMY"]
[Mon Mar 02 02:43:47.963106 2026] [:error] [pid 53180:tid 53467] [client 20.104.124.39:15195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaSI4zPPJpDOBvYnaa1xFQAAAZc"]
[Mon Mar 02 02:43:48.618563 2026] [:error] [pid 26940:tid 26960] [client 20.104.124.39:15304] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaSI5BrUg-j5GLDtRFkHYgAAAFA"]
[Mon Mar 02 02:43:49.382991 2026] [:error] [pid 53181:tid 53515] [client 20.104.124.39:15284] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaSI5Yr_0T1SazTrJOBdtwAAAQE"]
[Mon Mar 02 02:43:49.939690 2026] [:error] [pid 53182:tid 53562] [client 20.104.124.39:15300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaSI5fv073cA6eM1YCT6-gAAANI"]
[Mon Mar 02 02:43:50.685398 2026] [:error] [pid 26940:tid 26956] [client 20.104.124.39:15175] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaSI5hrUg-j5GLDtRFkHdAAAAEw"]
[Mon Mar 02 02:43:51.570313 2026] [:error] [pid 53182:tid 53560] [client 20.104.124.39:15297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaSI5_v073cA6eM1YCT6_QAAANA"]
[Mon Mar 02 02:43:52.443654 2026] [:error] [pid 26940:tid 26950] [client 20.104.124.39:15309] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atx.php"] [unique_id "aaSI6BrUg-j5GLDtRFkHgQAAAEY"]
[Mon Mar 02 02:43:53.345043 2026] [:error] [pid 53182:tid 53543] [client 20.104.124.39:15356] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atx.php"] [unique_id "aaSI6fv073cA6eM1YCT7AgAAAMA"]
[Mon Mar 02 02:43:54.794684 2026] [:error] [pid 26940:tid 26952] [client 20.104.124.39:15346] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atx.php"] [unique_id "aaSI6hrUg-j5GLDtRFkHkAAAAEg"]
[Mon Mar 02 02:43:55.937305 2026] [:error] [pid 26940:tid 26950] [client 20.104.124.39:15298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atx.php"] [unique_id "aaSI6xrUg-j5GLDtRFkHmAAAAEY"]
[Mon Mar 02 02:43:57.014832 2026] [:error] [pid 26940:tid 26959] [client 20.104.124.39:15328] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaSI7RrUg-j5GLDtRFkHnwAAAE8"]
[Mon Mar 02 02:43:57.895273 2026] [:error] [pid 53585:tid 53612] [client 20.104.124.39:15313] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaSI7XbCvYsvu6kKhM3c1AAAABg"]
[Mon Mar 02 02:43:58.444050 2026] [:error] [pid 53182:tid 53546] [client 20.104.124.39:15325] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaSI7vv073cA6eM1YCT7DgAAAMM"]
[Mon Mar 02 02:43:59.462529 2026] [:error] [pid 53181:tid 53537] [client 20.104.124.39:15260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaSI74r_0T1SazTrJOBdwQAAARY"]
[Mon Mar 02 02:44:00.326003 2026] [:error] [pid 26940:tid 26957] [client 20.104.124.39:15252] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSI8BrUg-j5GLDtRFkHugAAAE0"]
[Mon Mar 02 02:44:01.182053 2026] [:error] [pid 53182:tid 53561] [client 20.104.124.39:15257] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSI8fv073cA6eM1YCT7IQAAANE"]
[Mon Mar 02 02:44:02.129242 2026] [:error] [pid 53182:tid 53543] [client 20.104.124.39:15323] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSI8vv073cA6eM1YCT7JwAAAMA"]
[Mon Mar 02 02:44:02.952461 2026] [:error] [pid 53181:tid 53530] [client 20.104.124.39:15302] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSI8or_0T1SazTrJOBdxwAAAQ8"]
[Mon Mar 02 02:44:03.862279 2026] [:error] [pid 53182:tid 53560] [client 20.104.124.39:15269] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "aaSI8_v073cA6eM1YCT7LQAAANA"]
[Mon Mar 02 02:44:04.948212 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15178] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "aaSI9BrUg-j5GLDtRFkHygAAAEc"]
[Mon Mar 02 02:44:05.845784 2026] [:error] [pid 53180:tid 53454] [client 20.104.124.39:15176] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "aaSI9TPPJpDOBvYnaa1xJAAAAYo"]
[Mon Mar 02 02:44:06.459492 2026] [:error] [pid 26940:tid 26946] [client 20.104.124.39:15294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "aaSI9hrUg-j5GLDtRFkH0wAAAEI"]
[Mon Mar 02 02:44:07.633029 2026] [:error] [pid 53585:tid 53611] [client 20.104.124.39:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Mar 02 02:44:08.274914 2026] [:error] [pid 53585:tid 53594] [client 20.104.124.39:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Mar 02 02:44:08.511665 2026] [:error] [pid 53585:tid 53599] [client 20.104.124.39:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Mar 02 02:44:08.896128 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Mon Mar 02 02:44:09.177229 2026] [:error] [pid 53585:tid 53591] [client 20.104.124.39:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Mar 02 02:44:09.393148 2026] [:error] [pid 53585:tid 53610] [client 20.104.124.39:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Mar 02 02:44:09.600864 2026] [:error] [pid 53585:tid 53609] [client 20.104.124.39:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Mar 02 02:44:09.863964 2026] [:error] [pid 53585:tid 53589] [client 20.104.124.39:15351] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaSI-XbCvYsvu6kKhM3c_gAAAAE"]
[Mon Mar 02 02:44:10.397473 2026] [:error] [pid 53585:tid 53606] [client 20.104.124.39:15355] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Mon Mar 02 02:44:10.606329 2026] [:error] [pid 53585:tid 53594] [client 20.104.124.39:15355] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon Mar 02 02:44:10.892567 2026] [:error] [pid 53585:tid 53595] [client 20.104.124.39:15355] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaSI-nbCvYsvu6kKhM3dBAAAAAc"]
[Mon Mar 02 02:44:12.143630 2026] [:error] [pid 53180:tid 53455] [client 20.104.124.39:15339] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaSI_DPPJpDOBvYnaa1xLgAAAYs"]
[Mon Mar 02 02:44:13.343683 2026] [:error] [pid 53182:tid 53550] [client 20.104.124.39:15282] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaSI_fv073cA6eM1YCT7TwAAAMc"]
[Mon Mar 02 02:44:13.991549 2026] [:error] [pid 53181:tid 53539] [client 20.104.124.39:15318] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaSI_Yr_0T1SazTrJOBd3wAAARg"]
[Mon Mar 02 02:44:14.961742 2026] [:error] [pid 53181:tid 53531] [client 20.104.124.39:15324] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSI_or_0T1SazTrJOBd4wAAARA"]
[Mon Mar 02 02:44:15.478952 2026] [:error] [pid 26940:tid 26955] [client 20.104.124.39:15268] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSI_xrUg-j5GLDtRFkH7AAAAEs"]
[Mon Mar 02 02:44:16.036000 2026] [:error] [pid 53181:tid 53535] [client 20.104.124.39:15321] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSJAIr_0T1SazTrJOBd5wAAARQ"]
[Mon Mar 02 02:44:17.860904 2026] [:error] [pid 53585:tid 53591] [client 20.104.124.39:15278] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaSJAXbCvYsvu6kKhM3dGAAAAAM"]
[Mon Mar 02 02:44:18.871259 2026] [:error] [pid 53181:tid 53515] [client 20.104.124.39:15342] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaSJAor_0T1SazTrJOBd7gAAAQE"]
[Mon Mar 02 02:44:20.029782 2026] [:error] [pid 53181:tid 53531] [client 20.104.124.39:15322] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaSJBIr_0T1SazTrJOBd9AAAARA"]
[Mon Mar 02 02:44:21.901083 2026] [:error] [pid 53181:tid 53519] [client 20.104.124.39:15329] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaSJBYr_0T1SazTrJOBd-gAAAQU"]
[Mon Mar 02 02:44:23.722561 2026] [:error] [pid 53585:tid 53602] [client 20.104.124.39:15250] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaSJB3bCvYsvu6kKhM3dMwAAAA4"]
[Mon Mar 02 02:44:25.291517 2026] [:error] [pid 53181:tid 53528] [client 20.104.124.39:15316] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "aaSJCYr_0T1SazTrJOBeAQAAAQ0"]
[Mon Mar 02 02:44:27.177542 2026] [:error] [pid 53180:tid 53449] [client 20.104.124.39:15326] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "aaSJCzPPJpDOBvYnaa1xdQAAAYU"]
[Mon Mar 02 02:44:29.337122 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15332] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "aaSJDRrUg-j5GLDtRFkIPQAAAEc"]
[Mon Mar 02 02:44:31.614716 2026] [:error] [pid 53585:tid 53609] [client 20.104.124.39:15189] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "aaSJD3bCvYsvu6kKhM3dSQAAABU"]
[Mon Mar 02 02:44:33.795309 2026] [:error] [pid 26940:tid 26956] [client 20.104.124.39:15310] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaSJERrUg-j5GLDtRFkIWQAAAEw"]
[Mon Mar 02 02:44:35.314440 2026] [:error] [pid 26940:tid 26966] [client 20.104.124.39:15333] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaSJExrUg-j5GLDtRFkIaQAAAFY"]
[Mon Mar 02 02:44:36.634307 2026] [:error] [pid 53181:tid 53516] [client 20.104.124.39:15280] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaSJFIr_0T1SazTrJOBeGQAAAQI"]
[Mon Mar 02 02:44:37.986668 2026] [:error] [pid 53182:tid 53547] [client 20.104.124.39:15254] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaSJFfv073cA6eM1YCT7hQAAAMQ"]
[Mon Mar 02 02:44:38.778858 2026] [:error] [pid 53182:tid 53545] [client 20.104.124.39:15352] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSJFvv073cA6eM1YCT7igAAAMI"]
[Mon Mar 02 02:44:40.434769 2026] [:error] [pid 26940:tid 26967] [client 20.104.124.39:15344] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSJGBrUg-j5GLDtRFkIgwAAAFc"]
[Mon Mar 02 02:44:41.373030 2026] [:error] [pid 53585:tid 53607] [client 20.104.124.39:15263] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSJGXbCvYsvu6kKhM3dbAAAABM"]
[Mon Mar 02 02:44:42.146892 2026] [:error] [pid 53181:tid 53519] [client 20.104.124.39:15207] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aaSJGor_0T1SazTrJOBeKAAAAQU"]
[Mon Mar 02 02:44:42.759867 2026] [:error] [pid 53181:tid 53530] [client 20.104.124.39:15353] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaSJGor_0T1SazTrJOBeKgAAAQ8"]
[Mon Mar 02 02:44:43.460859 2026] [:error] [pid 53585:tid 53593] [client 20.104.124.39:15234] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaSJG3bCvYsvu6kKhM3dcgAAAAU"]
[Mon Mar 02 02:44:44.501692 2026] [:error] [pid 26940:tid 26952] [client 20.104.124.39:15348] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaSJHBrUg-j5GLDtRFkInQAAAEg"]
[Mon Mar 02 02:44:45.321234 2026] [:error] [pid 53181:tid 53531] [client 20.104.124.39:15232] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaSJHYr_0T1SazTrJOBeMwAAARA"]
[Mon Mar 02 02:44:45.942056 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15259] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSJHXbCvYsvu6kKhM3dfgAAAAo"]
[Mon Mar 02 02:44:47.238922 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15262] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSJHxrUg-j5GLDtRFkIqAAAAEo"]
[Mon Mar 02 02:44:48.413887 2026] [:error] [pid 26940:tid 26956] [client 20.104.124.39:15236] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSJIBrUg-j5GLDtRFkIsQAAAEw"]
[Mon Mar 02 02:44:49.791899 2026] [:error] [pid 26940:tid 26953] [client 20.104.124.39:15343] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "aaSJIRrUg-j5GLDtRFkIvwAAAEk"]
[Mon Mar 02 02:44:51.131493 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15179] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSJI3bCvYsvu6kKhM3dnAAAAAo"]
[Mon Mar 02 02:44:51.801897 2026] [:error] [pid 53182:tid 53560] [client 20.104.124.39:15123] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSJI_v073cA6eM1YCT7pgAAANA"]
[Mon Mar 02 02:44:52.503626 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15311] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSJJBrUg-j5GLDtRFkI8AAAAEo"]
[Mon Mar 02 02:44:53.688044 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15272] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aaSJJRrUg-j5GLDtRFkJAQAAAEo"]
[Mon Mar 02 02:44:54.670590 2026] [:error] [pid 53585:tid 53595] [client 20.104.124.39:15106] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaSJJnbCvYsvu6kKhM3drgAAAAc"]
[Mon Mar 02 02:44:55.531963 2026] [:error] [pid 26940:tid 26946] [client 20.104.124.39:15256] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaSJJxrUg-j5GLDtRFkJCwAAAEI"]
[Mon Mar 02 02:44:56.629355 2026] [:error] [pid 53180:tid 53444] [client 20.104.124.39:15275] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaSJKDPPJpDOBvYnaa1xxwAAAYA"]
[Mon Mar 02 02:44:57.404549 2026] [:error] [pid 53585:tid 53610] [client 20.104.124.39:15180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaSJKXbCvYsvu6kKhM3dtQAAABY"]
[Mon Mar 02 02:44:58.448168 2026] [:error] [pid 53585:tid 53609] [client 20.104.124.39:15289] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSJKnbCvYsvu6kKhM3dvAAAABU"]
[Mon Mar 02 02:44:59.755438 2026] [:error] [pid 26940:tid 26945] [client 20.104.124.39:15279] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSJKxrUg-j5GLDtRFkJNwAAAEE"]
[Mon Mar 02 02:45:00.564567 2026] [:error] [pid 53181:tid 53524] [client 20.104.124.39:15120] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSJLIr_0T1SazTrJOBeSwAAAQk"]
[Mon Mar 02 02:45:01.082469 2026] [:error] [pid 53181:tid 53536] [client 20.104.124.39:15246] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaSJLYr_0T1SazTrJOBeTAAAARU"]
[Mon Mar 02 02:45:01.731776 2026] [:error] [pid 53182:tid 53564] [client 20.104.124.39:15227] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaSJLfv073cA6eM1YCT7sQAAANQ"]
[Mon Mar 02 02:45:02.346337 2026] [:error] [pid 26940:tid 26964] [client 20.104.124.39:15274] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaSJLhrUg-j5GLDtRFkJVQAAAFQ"]
[Mon Mar 02 02:45:02.945203 2026] [:error] [pid 26940:tid 26957] [client 20.104.124.39:15220] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaSJLhrUg-j5GLDtRFkJYgAAAE0"]
[Mon Mar 02 02:45:03.531306 2026] [:error] [pid 26940:tid 26962] [client 20.104.124.39:15286] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaSJLxrUg-j5GLDtRFkJaQAAAFI"]
[Mon Mar 02 02:45:04.537451 2026] [:error] [pid 53182:tid 53559] [client 20.104.124.39:15199] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aaSJMPv073cA6eM1YCT7tAAAAM8"]
[Mon Mar 02 02:45:05.384661 2026] [:error] [pid 53585:tid 53592] [client 20.104.124.39:15240] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aaSJMXbCvYsvu6kKhM3dygAAAAQ"]
[Mon Mar 02 02:45:06.145616 2026] [:error] [pid 53180:tid 53449] [client 20.104.124.39:15186] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aaSJMjPPJpDOBvYnaa1x1QAAAYU"]
[Mon Mar 02 02:45:07.104155 2026] [:error] [pid 53585:tid 53607] [client 20.104.124.39:15255] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aaSJM3bCvYsvu6kKhM3dzwAAABM"]
[Mon Mar 02 02:45:08.056197 2026] [:error] [pid 26940:tid 26947] [client 20.104.124.39:15251] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aaSJNBrUg-j5GLDtRFkJgQAAAEM"]
[Mon Mar 02 02:45:08.888088 2026] [:error] [pid 53180:tid 53452] [client 20.104.124.39:15172] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aaSJNDPPJpDOBvYnaa1x2gAAAYg"]
[Mon Mar 02 02:45:10.414174 2026] [:error] [pid 26940:tid 26961] [client 20.104.124.39:15108] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Mar 02 02:45:11.502876 2026] [:error] [pid 26940:tid 26946] [client 20.104.124.39:15108] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Mar 02 02:45:11.731485 2026] [:error] [pid 26940:tid 26953] [client 20.104.124.39:15108] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Mar 02 02:45:12.160608 2026] [:error] [pid 26940:tid 26959] [client 20.104.124.39:15108] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon Mar 02 02:45:12.390827 2026] [:error] [pid 26940:tid 26961] [client 20.104.124.39:15108] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Mon Mar 02 02:45:12.841266 2026] [:error] [pid 26940:tid 26958] [client 20.104.124.39:15108] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sx.php"] [unique_id "aaSJOBrUg-j5GLDtRFkJngAAAE4"]
[Mon Mar 02 02:45:14.473005 2026] [:error] [pid 53182:tid 53568] [client 20.104.124.39:15261] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sx.php"] [unique_id "aaSJOvv073cA6eM1YCT72QAAANg"]
[Mon Mar 02 02:45:15.241628 2026] [:error] [pid 53182:tid 53563] [client 20.104.124.39:15196] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sx.php"] [unique_id "aaSJO_v073cA6eM1YCT73AAAANM"]
[Mon Mar 02 02:45:15.978175 2026] [:error] [pid 26940:tid 26949] [client 20.104.124.39:15270] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sx.php"] [unique_id "aaSJOxrUg-j5GLDtRFkJpgAAAEU"]
[Mon Mar 02 02:45:16.870029 2026] [:error] [pid 53585:tid 53590] [client 20.104.124.39:15174] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaSJPHbCvYsvu6kKhM3d-AAAAAI"]
[Mon Mar 02 02:45:17.385909 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15222] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaSJPXbCvYsvu6kKhM3d-wAAAAo"]
[Mon Mar 02 02:45:18.110431 2026] [:error] [pid 26940:tid 26949] [client 20.104.124.39:15306] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaSJPhrUg-j5GLDtRFkJtwAAAEU"]
[Mon Mar 02 02:45:18.713796 2026] [:error] [pid 26940:tid 26958] [client 20.104.124.39:15193] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaSJPhrUg-j5GLDtRFkJvQAAAE4"]
[Mon Mar 02 02:45:19.378115 2026] [:error] [pid 26940:tid 26961] [client 20.104.124.39:15162] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aaSJPxrUg-j5GLDtRFkJxAAAAFE"]
[Mon Mar 02 02:45:20.087026 2026] [:error] [pid 26940:tid 26953] [client 20.104.124.39:15146] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aaSJQBrUg-j5GLDtRFkJzQAAAEk"]
[Mon Mar 02 02:45:20.848621 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15253] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aaSJQHbCvYsvu6kKhM3eAwAAAAo"]
[Mon Mar 02 02:45:21.689330 2026] [:error] [pid 26940:tid 26962] [client 20.104.124.39:15205] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aaSJQRrUg-j5GLDtRFkJ2gAAAFI"]
[Mon Mar 02 02:45:22.360988 2026] [:error] [pid 26940:tid 26964] [client 20.104.124.39:15144] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aaSJQhrUg-j5GLDtRFkJ4QAAAFQ"]
[Mon Mar 02 02:45:23.529006 2026] [:error] [pid 53182:tid 53543] [client 20.104.124.39:15293] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aaSJQ_v073cA6eM1YCT76wAAAMA"]
[Mon Mar 02 02:45:24.196378 2026] [:error] [pid 26940:tid 26950] [client 20.104.124.39:15135] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aaSJRBrUg-j5GLDtRFkJ7QAAAEY"]
[Mon Mar 02 02:45:24.795797 2026] [:error] [pid 26940:tid 26960] [client 20.104.124.39:15147] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "aaSJRBrUg-j5GLDtRFkJ-AAAAFA"]
[Mon Mar 02 02:45:25.276584 2026] [:error] [pid 26940:tid 26968] [client 20.104.124.39:15239] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byp.php"] [unique_id "aaSJRRrUg-j5GLDtRFkKAwAAAFg"]
[Mon Mar 02 02:45:25.964537 2026] [:error] [pid 53585:tid 53609] [client 20.104.124.39:15276] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byp.php"] [unique_id "aaSJRXbCvYsvu6kKhM3eFgAAABU"]
[Mon Mar 02 02:45:26.708923 2026] [:error] [pid 53181:tid 53539] [client 20.104.124.39:15338] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byp.php"] [unique_id "aaSJRor_0T1SazTrJOBegwAAARg"]
[Mon Mar 02 02:45:27.601426 2026] [:error] [pid 53585:tid 53606] [client 20.104.124.39:15177] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byp.php"] [unique_id "aaSJR3bCvYsvu6kKhM3eIwAAABI"]
[Mon Mar 02 02:45:28.278267 2026] [:error] [pid 53182:tid 53546] [client 20.104.124.39:15170] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaSJSPv073cA6eM1YCT79AAAAMM"]
[Mon Mar 02 02:45:29.077309 2026] [:error] [pid 26940:tid 26953] [client 20.104.124.39:15283] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaSJSRrUg-j5GLDtRFkKEwAAAEk"]
[Mon Mar 02 02:45:29.681661 2026] [:error] [pid 26940:tid 26962] [client 20.104.124.39:15277] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaSJSRrUg-j5GLDtRFkKGgAAAFI"]
[Mon Mar 02 02:45:30.704597 2026] [:error] [pid 53585:tid 53612] [client 20.104.124.39:15214] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaSJSnbCvYsvu6kKhM3eQQAAABg"]
[Mon Mar 02 02:45:31.443116 2026] [:error] [pid 26940:tid 26944] [client 20.104.124.39:15161] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaSJSxrUg-j5GLDtRFkKJgAAAEA"]
[Mon Mar 02 02:45:32.115751 2026] [:error] [pid 53585:tid 53608] [client 20.104.124.39:15124] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaSJTHbCvYsvu6kKhM3eRAAAABQ"]
[Mon Mar 02 02:45:32.883827 2026] [:error] [pid 53180:tid 53461] [client 20.104.124.39:15190] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaSJTDPPJpDOBvYnaa1x-AAAAZE"]
[Mon Mar 02 02:45:33.830163 2026] [:error] [pid 26940:tid 26962] [client 20.104.124.39:15247] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "aaSJTRrUg-j5GLDtRFkKLgAAAFI"]
[Mon Mar 02 02:45:34.816127 2026] [:error] [pid 26940:tid 26947] [client 20.104.124.39:15201] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaSJThrUg-j5GLDtRFkKMgAAAEM"]
[Mon Mar 02 02:45:35.803166 2026] [:error] [pid 53182:tid 53563] [client 20.104.124.39:15202] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaSJT_v073cA6eM1YCT8AQAAANM"]
[Mon Mar 02 02:45:36.540829 2026] [:error] [pid 53180:tid 53467] [client 20.104.124.39:15226] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaSJUDPPJpDOBvYnaa1yAgAAAZc"]
[Mon Mar 02 02:45:37.256388 2026] [:error] [pid 53181:tid 53535] [client 20.104.124.39:15104] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "aaSJUYr_0T1SazTrJOBengAAARQ"]
[Mon Mar 02 02:45:38.278401 2026] [:error] [pid 53182:tid 53562] [client 20.104.124.39:15194] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaSJUvv073cA6eM1YCT8FAAAANI"]
[Mon Mar 02 02:45:39.146926 2026] [:error] [pid 53182:tid 53543] [client 20.104.124.39:15204] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaSJU_v073cA6eM1YCT8GAAAAMA"]
[Mon Mar 02 02:45:39.810698 2026] [:error] [pid 53585:tid 53596] [client 20.104.124.39:15231] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaSJU3bCvYsvu6kKhM3eXQAAAAg"]
[Mon Mar 02 02:45:40.801949 2026] [:error] [pid 53182:tid 53547] [client 20.104.124.39:15127] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaSJVPv073cA6eM1YCT8HwAAAMQ"]
[Mon Mar 02 02:45:42.324049 2026] [:error] [pid 26940:tid 26965] [client 20.104.124.39:15290] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gmo.php"] [unique_id "aaSJVhrUg-j5GLDtRFkKWQAAAFU"]
[Mon Mar 02 02:45:43.239820 2026] [:error] [pid 26940:tid 26966] [client 20.104.124.39:15296] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gmo.php"] [unique_id "aaSJVxrUg-j5GLDtRFkKZAAAAFY"]
[Mon Mar 02 02:45:44.047500 2026] [:error] [pid 26940:tid 26944] [client 20.104.124.39:15258] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gmo.php"] [unique_id "aaSJWBrUg-j5GLDtRFkKaAAAAEA"]
[Mon Mar 02 02:45:45.204311 2026] [:error] [pid 53181:tid 53539] [client 20.104.124.39:15173] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gmo.php"] [unique_id "aaSJWYr_0T1SazTrJOBeswAAARg"]
[Mon Mar 02 02:45:46.150790 2026] [:error] [pid 26940:tid 26966] [client 20.104.124.39:15203] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaSJWhrUg-j5GLDtRFkKcgAAAFY"]
[Mon Mar 02 02:45:47.137856 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15075] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/index.php"] [unique_id "aaSJW3bCvYsvu6kKhM3edgAAAAo"]
[Mon Mar 02 02:45:48.498109 2026] [:error] [pid 53181:tid 53537] [client 20.104.124.39:15198] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/index.php"] [unique_id "aaSJXIr_0T1SazTrJOBevgAAARY"]
[Mon Mar 02 02:45:49.873154 2026] [:error] [pid 26940:tid 26964] [client 20.104.124.39:15182] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/index.php"] [unique_id "aaSJXRrUg-j5GLDtRFkKfQAAAFQ"]
[Mon Mar 02 02:45:50.942224 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15113] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/index.php"] [unique_id "aaSJXhrUg-j5GLDtRFkKhgAAAEc"]
[Mon Mar 02 02:45:52.379563 2026] [:error] [pid 53585:tid 53610] [client 20.104.124.39:15197] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aaSJYHbCvYsvu6kKhM3eiQAAABY"]
[Mon Mar 02 02:45:52.960428 2026] [:error] [pid 53182:tid 53563] [client 20.104.124.39:15115] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSJYPv073cA6eM1YCT8RAAAANM"]
[Mon Mar 02 02:45:53.607278 2026] [:error] [pid 53182:tid 53551] [client 20.104.124.39:15215] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSJYfv073cA6eM1YCT8RwAAAMg"]
[Mon Mar 02 02:45:54.339594 2026] [:error] [pid 26940:tid 26963] [client 20.104.124.39:15143] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSJYhrUg-j5GLDtRFkKlAAAAFM"]
[Mon Mar 02 02:45:55.199700 2026] [:error] [pid 26940:tid 26952] [client 20.104.124.39:15105] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaSJYxrUg-j5GLDtRFkKnAAAAEg"]
[Mon Mar 02 02:45:56.185982 2026] [:error] [pid 53585:tid 53603] [client 20.104.124.39:15223] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSJZHbCvYsvu6kKhM3elgAAAA8"]
[Mon Mar 02 02:45:57.168111 2026] [:error] [pid 53181:tid 53539] [client 20.104.124.39:15291] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSJZYr_0T1SazTrJOBezAAAARg"]
[Mon Mar 02 02:45:57.875694 2026] [:error] [pid 53585:tid 53593] [client 20.104.124.39:15132] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSJZXbCvYsvu6kKhM3enQAAAAU"]
[Mon Mar 02 02:45:58.483882 2026] [:error] [pid 26940:tid 26952] [client 20.104.124.39:15169] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aaSJZhrUg-j5GLDtRFkKqQAAAEg"]
[Mon Mar 02 02:45:59.380596 2026] [:error] [pid 26940:tid 26948] [client 20.104.124.39:15209] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSJZxrUg-j5GLDtRFkKsQAAAEQ"]
[Mon Mar 02 02:46:00.096314 2026] [:error] [pid 26940:tid 26967] [client 20.104.124.39:15208] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSJaBrUg-j5GLDtRFkKuAAAAFc"]
[Mon Mar 02 02:46:00.664914 2026] [:error] [pid 53180:tid 53456] [client 20.104.124.39:15224] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSJaDPPJpDOBvYnaa1yJwAAAYw"]
[Mon Mar 02 02:46:01.278691 2026] [:error] [pid 26940:tid 26949] [client 20.104.124.39:15069] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aaSJaRrUg-j5GLDtRFkKwgAAAEU"]
[Mon Mar 02 02:46:02.261557 2026] [:error] [pid 53181:tid 53536] [client 20.104.124.39:15357] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aaSJaor_0T1SazTrJOBe2gAAARU"]
[Mon Mar 02 02:46:03.721869 2026] [:error] [pid 53181:tid 53524] [client 20.104.124.39:15134] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "aaSJa4r_0T1SazTrJOBe4wAAAQk"]
[Mon Mar 02 02:46:05.684895 2026] [:error] [pid 53181:tid 53527] [client 20.104.124.39:15050] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "aaSJbYr_0T1SazTrJOBe5wAAAQw"]
[Mon Mar 02 02:46:06.686338 2026] [:error] [pid 53182:tid 53547] [client 20.104.124.39:15137] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "aaSJbvv073cA6eM1YCT8XgAAAMQ"]
[Mon Mar 02 02:46:07.548943 2026] [:error] [pid 26940:tid 26948] [client 20.104.124.39:15047] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "aaSJbxrUg-j5GLDtRFkLAgAAAEQ"]
[Mon Mar 02 02:46:08.751361 2026] [:error] [pid 53181:tid 53525] [client 20.104.124.39:15114] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSJcIr_0T1SazTrJOBe7gAAAQo"]
[Mon Mar 02 02:46:09.427911 2026] [:error] [pid 53181:tid 53519] [client 20.104.124.39:15062] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSJcYr_0T1SazTrJOBe8AAAAQU"]
[Mon Mar 02 02:46:10.020957 2026] [:error] [pid 53181:tid 53518] [client 20.104.124.39:15185] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSJcor_0T1SazTrJOBe9gAAAQQ"]
[Mon Mar 02 02:46:10.742706 2026] [:error] [pid 26940:tid 26961] [client 20.104.124.39:15212] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aaSJchrUg-j5GLDtRFkLCwAAAFE"]
[Mon Mar 02 02:46:12.069628 2026] [:error] [pid 53181:tid 53525] [client 20.104.124.39:15056] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaSJdIr_0T1SazTrJOBe_gAAAQo"]
[Mon Mar 02 02:46:14.339077 2026] [:error] [pid 53181:tid 53515] [client 20.104.124.39:15287] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Mon Mar 02 02:46:14.998223 2026] [:error] [pid 53181:tid 53528] [client 20.104.124.39:15287] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Mar 02 02:46:15.473333 2026] [:error] [pid 53181:tid 53534] [client 20.104.124.39:15287] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Mon Mar 02 02:46:16.327044 2026] [:error] [pid 53181:tid 53518] [client 20.104.124.39:15287] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaSJeIr_0T1SazTrJOBfGAAAAQQ"]
[Mon Mar 02 02:46:18.640809 2026] [:error] [pid 53181:tid 53516] [client 20.104.124.39:15217] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaSJeor_0T1SazTrJOBfHwAAAQI"]
[Mon Mar 02 02:46:19.363845 2026] [:error] [pid 53181:tid 53530] [client 20.104.124.39:15158] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaSJe4r_0T1SazTrJOBfIAAAAQ8"]
[Mon Mar 02 02:46:20.366814 2026] [:error] [pid 53182:tid 53567] [client 20.104.124.39:15166] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaSJfPv073cA6eM1YCT8jQAAANc"]
[Mon Mar 02 02:46:21.121875 2026] [:error] [pid 53182:tid 53563] [client 20.104.124.39:15265] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaSJffv073cA6eM1YCT8kAAAANM"]
[Mon Mar 02 02:46:22.099279 2026] [:error] [pid 26940:tid 26953] [client 20.104.124.39:15213] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSJfhrUg-j5GLDtRFkLNAAAAEk"]
[Mon Mar 02 02:46:22.923235 2026] [:error] [pid 26940:tid 26965] [client 20.104.124.39:15221] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSJfhrUg-j5GLDtRFkLOQAAAFU"]
[Mon Mar 02 02:46:23.485678 2026] [:error] [pid 53585:tid 53611] [client 20.104.124.39:15211] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSJf3bCvYsvu6kKhM3e1AAAABc"]
[Mon Mar 02 02:46:24.098259 2026] [:error] [pid 26940:tid 26955] [client 20.104.124.39:15117] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaSJgBrUg-j5GLDtRFkLQwAAAEs"]
[Mon Mar 02 02:46:25.086400 2026] [:error] [pid 26940:tid 26945] [client 20.104.124.39:15126] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaSJgRrUg-j5GLDtRFkLRQAAAEE"]
[Mon Mar 02 02:46:26.063712 2026] [:error] [pid 53182:tid 53557] [client 20.104.124.39:15129] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaSJgvv073cA6eM1YCT8lgAAAM0"]
[Mon Mar 02 02:46:26.697884 2026] [:error] [pid 53181:tid 53533] [client 20.104.124.39:15138] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaSJgor_0T1SazTrJOBfMgAAARI"]
[Mon Mar 02 02:46:27.466107 2026] [:error] [pid 26940:tid 26944] [client 20.104.124.39:15148] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aaSJgxrUg-j5GLDtRFkLVQAAAEA"]
[Mon Mar 02 02:46:28.044032 2026] [:error] [pid 53585:tid 53607] [client 20.104.124.39:15163] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaSJhHbCvYsvu6kKhM3e7AAAABM"]
[Mon Mar 02 02:46:29.136160 2026] [:error] [pid 53181:tid 53526] [client 20.104.124.39:15331] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaSJhYr_0T1SazTrJOBfQAAAAQs"]
[Mon Mar 02 02:46:30.264305 2026] [:error] [pid 26940:tid 26946] [client 20.104.124.39:14787] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaSJhhrUg-j5GLDtRFkLWgAAAEI"]
[Mon Mar 02 02:46:30.989505 2026] [:error] [pid 53181:tid 53514] [client 20.104.124.39:15155] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aaSJhor_0T1SazTrJOBfSQAAAQA"]
[Mon Mar 02 02:46:32.431835 2026] [:error] [pid 53182:tid 53567] [client 20.104.124.39:15191] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaSJiPv073cA6eM1YCT8qQAAANc"]
[Mon Mar 02 02:46:33.497058 2026] [:error] [pid 53585:tid 53594] [client 20.104.124.39:15156] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaSJiXbCvYsvu6kKhM3e_wAAAAY"]
[Mon Mar 02 02:46:34.146192 2026] [:error] [pid 53585:tid 53593] [client 20.104.124.39:15142] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaSJinbCvYsvu6kKhM3fAwAAAAU"]
[Mon Mar 02 02:46:34.736914 2026] [:error] [pid 53182:tid 53546] [client 20.104.124.39:15052] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "aaSJivv073cA6eM1YCT8sAAAAMM"]
[Mon Mar 02 02:46:35.611781 2026] [:error] [pid 53181:tid 53537] [client 20.104.124.39:15125] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaSJi4r_0T1SazTrJOBfYQAAARY"]
[Mon Mar 02 02:46:36.348049 2026] [:error] [pid 53182:tid 53558] [client 20.104.124.39:15058] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaSJjPv073cA6eM1YCT8tgAAAM4"]
[Mon Mar 02 02:46:37.205403 2026] [:error] [pid 26940:tid 26944] [client 20.104.124.39:15358] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaSJjRrUg-j5GLDtRFkLaAAAAEA"]
[Mon Mar 02 02:46:37.824013 2026] [:error] [pid 53585:tid 53608] [client 20.104.124.39:15061] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaSJjXbCvYsvu6kKhM3fDwAAABQ"]
[Mon Mar 02 02:46:39.672473 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15128] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaSJjxrUg-j5GLDtRFkLfwAAAEo"]
[Mon Mar 02 02:46:42.188733 2026] [:error] [pid 53585:tid 53602] [client 20.104.124.39:15119] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaSJknbCvYsvu6kKhM3fIQAAAA4"]
[Mon Mar 02 02:46:44.991805 2026] [:error] [pid 53585:tid 53600] [client 20.104.124.39:15064] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaSJlHbCvYsvu6kKhM3fPQAAAAw"]
[Mon Mar 02 02:46:45.867029 2026] [:error] [pid 53585:tid 53607] [client 20.104.124.39:15131] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless5.php"] [unique_id "aaSJlXbCvYsvu6kKhM3fQwAAABM"]
[Mon Mar 02 02:46:47.038034 2026] [:error] [pid 26940:tid 26952] [client 20.104.124.39:15040] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aaSJlxrUg-j5GLDtRFkLqQAAAEg"]
[Mon Mar 02 02:46:47.713065 2026] [:error] [pid 53180:tid 53450] [client 20.104.124.39:15153] [client 20.104.124.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaSJlzPPJpDOBvYnaa1yeQAAAYY"]
[Mon Mar 02 02:46:48.691847 2026] [:error] [pid 53585:tid 53599] [client 20.104.124.39:15228] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaSJmHbCvYsvu6kKhM3fVwAAAAs"]
[Mon Mar 02 02:46:49.512399 2026] [:error] [pid 53181:tid 53523] [client 20.104.124.39:15219] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaSJmYr_0T1SazTrJOBfdgAAAQg"]
[Mon Mar 02 02:46:50.112242 2026] [:error] [pid 53181:tid 53516] [client 20.104.124.39:15180] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaSJmor_0T1SazTrJOBfeQAAAQI"]
[Mon Mar 02 02:46:50.923876 2026] [:error] [pid 53585:tid 53599] [client 20.104.124.39:15281] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaSJmnbCvYsvu6kKhM3fYgAAAAs"]
[Mon Mar 02 02:46:51.725214 2026] [:error] [pid 26940:tid 26950] [client 20.104.124.39:15218] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aaSJmxrUg-j5GLDtRFkLxAAAAEY"]
[Mon Mar 02 02:46:52.571766 2026] [:error] [pid 26940:tid 26946] [client 20.104.124.39:15049] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aaSJnBrUg-j5GLDtRFkLzgAAAEI"]
[Mon Mar 02 02:46:53.207797 2026] [:error] [pid 53585:tid 53588] [client 20.104.124.39:15315] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aaSJnXbCvYsvu6kKhM3fbAAAAAA"]
[Mon Mar 02 02:46:53.786535 2026] [:error] [pid 53182:tid 53566] [client 20.104.124.39:15295] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f35.php"] [unique_id "aaSJnfv073cA6eM1YCT8xwAAANY"]
[Mon Mar 02 02:46:54.468925 2026] [:error] [pid 26940:tid 26961] [client 20.104.124.39:15107] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaSJnhrUg-j5GLDtRFkL1wAAAFE"]
[Mon Mar 02 02:46:55.382265 2026] [:error] [pid 53181:tid 53538] [client 20.104.124.39:15103] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaSJn4r_0T1SazTrJOBfgQAAARc"]
[Mon Mar 02 02:46:56.147416 2026] [:error] [pid 53182:tid 53558] [client 20.104.124.39:15327] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaSJoPv073cA6eM1YCT8zgAAAM4"]
[Mon Mar 02 02:46:56.721037 2026] [:error] [pid 53585:tid 53594] [client 20.104.124.39:15065] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "aaSJoHbCvYsvu6kKhM3ffAAAAAY"]
[Mon Mar 02 02:46:57.242317 2026] [:error] [pid 26940:tid 26965] [client 20.104.124.39:14805] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aaSJoRrUg-j5GLDtRFkL6AAAAFU"]
[Mon Mar 02 02:46:58.429251 2026] [:error] [pid 53180:tid 53465] [client 20.104.124.39:15349] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aaSJojPPJpDOBvYnaa1ylwAAAZU"]
[Mon Mar 02 02:46:59.613590 2026] [:error] [pid 53585:tid 53599] [client 20.104.124.39:15067] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aaSJo3bCvYsvu6kKhM3fjwAAAAs"]
[Mon Mar 02 02:47:00.579002 2026] [:error] [pid 53182:tid 53564] [client 20.104.124.39:15181] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/juuuu.php"] [unique_id "aaSJpPv073cA6eM1YCT86gAAANQ"]
[Mon Mar 02 02:47:01.130227 2026] [:error] [pid 53180:tid 53464] [client 20.104.124.39:15292] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ha.php"] [unique_id "aaSJpTPPJpDOBvYnaa1ynQAAAZQ"]
[Mon Mar 02 02:47:01.868661 2026] [:error] [pid 53585:tid 53597] [client 20.104.124.39:15070] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ha.php"] [unique_id "aaSJpXbCvYsvu6kKhM3fnAAAAAk"]
[Mon Mar 02 02:47:02.485634 2026] [:error] [pid 53585:tid 53595] [client 20.104.124.39:15140] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ha.php"] [unique_id "aaSJpnbCvYsvu6kKhM3fowAAAAc"]
[Mon Mar 02 02:47:03.262629 2026] [:error] [pid 53585:tid 53590] [client 20.104.124.39:15118] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ha.php"] [unique_id "aaSJp3bCvYsvu6kKhM3fqAAAAAI"]
[Mon Mar 02 02:47:05.312148 2026] [:error] [pid 53180:tid 53458] [client 20.104.124.39:15046] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aaSJqTPPJpDOBvYnaa1ysAAAAY4"]
[Mon Mar 02 02:47:06.600462 2026] [:error] [pid 26940:tid 26944] [client 20.104.124.39:15149] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aaSJqhrUg-j5GLDtRFkMCgAAAEA"]
[Mon Mar 02 02:47:07.709139 2026] [:error] [pid 53585:tid 53592] [client 20.104.124.39:15084] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aaSJq3bCvYsvu6kKhM3ftwAAAAQ"]
[Mon Mar 02 02:47:08.606680 2026] [:error] [pid 26940:tid 26965] [client 20.104.124.39:15271] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aaSJrBrUg-j5GLDtRFkMFgAAAFU"]
[Mon Mar 02 02:47:09.559259 2026] [:error] [pid 53585:tid 53597] [client 20.104.124.39:15133] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we2.php"] [unique_id "aaSJrXbCvYsvu6kKhM3fwgAAAAk"]
[Mon Mar 02 02:47:10.287811 2026] [:error] [pid 53182:tid 53568] [client 20.104.124.39:15150] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we2.php"] [unique_id "aaSJrvv073cA6eM1YCT9GQAAANg"]
[Mon Mar 02 02:47:11.213808 2026] [:error] [pid 26940:tid 26950] [client 20.104.124.39:15063] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we2.php"] [unique_id "aaSJrxrUg-j5GLDtRFkMJAAAAEY"]
[Mon Mar 02 02:47:11.759299 2026] [:error] [pid 53585:tid 53605] [client 20.104.124.39:15055] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we2.php"] [unique_id "aaSJr3bCvYsvu6kKhM3fzgAAABE"]
[Mon Mar 02 02:47:12.348912 2026] [:error] [pid 53585:tid 53601] [client 20.104.124.39:15066] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaSJsHbCvYsvu6kKhM3f0AAAAA0"]
[Mon Mar 02 02:47:13.688531 2026] [:error] [pid 53182:tid 53564] [client 20.104.124.39:15042] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaSJsfv073cA6eM1YCT9JQAAANQ"]
[Mon Mar 02 02:47:14.453658 2026] [:error] [pid 53182:tid 53559] [client 20.104.124.39:15092] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaSJsvv073cA6eM1YCT9KAAAAM8"]
[Mon Mar 02 02:47:15.275281 2026] [:error] [pid 53182:tid 53565] [client 20.104.124.39:15230] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaSJs_v073cA6eM1YCT9MQAAANU"]
[Mon Mar 02 02:47:16.588601 2026] [:error] [pid 53585:tid 53591] [client 20.104.124.39:15130] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/333.php"] [unique_id "aaSJtHbCvYsvu6kKhM3f8AAAAAM"]
[Mon Mar 02 02:47:17.757607 2026] [:error] [pid 53182:tid 53568] [client 20.104.124.39:15059] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/333.php"] [unique_id "aaSJtfv073cA6eM1YCT9QQAAANg"]
[Mon Mar 02 02:47:19.045429 2026] [:error] [pid 26940:tid 26949] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Mon Mar 02 02:47:19.271875 2026] [:error] [pid 26940:tid 26947] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Mon Mar 02 02:47:19.483277 2026] [:error] [pid 26940:tid 26953] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Mon Mar 02 02:47:19.696494 2026] [:error] [pid 26940:tid 26957] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Mon Mar 02 02:47:20.136164 2026] [:error] [pid 26940:tid 26959] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Mar 02 02:47:20.348051 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Mon Mar 02 02:47:20.559446 2026] [:error] [pid 26940:tid 26960] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Mon Mar 02 02:47:20.771056 2026] [:error] [pid 26940:tid 26956] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Mon Mar 02 02:47:20.983173 2026] [:error] [pid 26940:tid 26962] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Mon Mar 02 02:47:21.341096 2026] [:error] [pid 26940:tid 26955] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Mon Mar 02 02:47:21.555086 2026] [:error] [pid 26940:tid 26966] [client 20.104.124.39:15210] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Mar 02 02:47:22.158796 2026] [:error] [pid 26940:tid 26964] [client 20.104.124.39:15210] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aaSJuhrUg-j5GLDtRFkMggAAAFQ"]
[Mon Mar 02 02:47:23.240155 2026] [:error] [pid 53181:tid 53528] [client 20.104.124.39:15337] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aaSJu4r_0T1SazTrJOBf2wAAAQ0"]
[Mon Mar 02 02:47:24.200882 2026] [:error] [pid 53585:tid 53601] [client 20.104.124.39:14796] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aaSJvHbCvYsvu6kKhM3gIAAAAA0"]
[Mon Mar 02 02:47:25.557546 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15273] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files.php"] [unique_id "aaSJvRrUg-j5GLDtRFkMqQAAAEc"]
[Mon Mar 02 02:47:26.617354 2026] [:error] [pid 53585:tid 53603] [client 20.104.124.39:14812] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaSJvnbCvYsvu6kKhM3gOgAAAA8"]
[Mon Mar 02 02:47:27.405654 2026] [:error] [pid 53182:tid 53563] [client 20.104.124.39:15285] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaSJv_v073cA6eM1YCT9ZwAAANM"]
[Mon Mar 02 02:47:27.907806 2026] [:error] [pid 53182:tid 53548] [client 20.104.124.39:15110] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaSJv_v073cA6eM1YCT9bAAAAMU"]
[Mon Mar 02 02:47:28.557157 2026] [:error] [pid 26940:tid 26967] [client 20.104.124.39:14789] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaSJwBrUg-j5GLDtRFkMrgAAAFc"]
[Mon Mar 02 02:47:29.344135 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15165] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaSJwRrUg-j5GLDtRFkMsgAAAEc"]
[Mon Mar 02 02:47:30.157793 2026] [:error] [pid 53180:tid 53445] [client 20.104.124.39:15307] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaSJwjPPJpDOBvYnaa1y3QAAAYE"]
[Mon Mar 02 02:47:30.809501 2026] [:error] [pid 26940:tid 26967] [client 20.104.124.39:15093] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaSJwhrUg-j5GLDtRFkMwgAAAFc"]
[Mon Mar 02 02:47:31.338006 2026] [:error] [pid 26940:tid 26960] [client 20.104.124.39:15341] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aaSJwxrUg-j5GLDtRFkMygAAAFA"]
[Mon Mar 02 02:47:32.623734 2026] [:error] [pid 53585:tid 53611] [client 20.104.124.39:15121] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaSJxHbCvYsvu6kKhM3gaAAAABc"]
[Mon Mar 02 02:47:33.421301 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15063] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaSJxRrUg-j5GLDtRFkM1AAAAEc"]
[Mon Mar 02 02:47:34.159559 2026] [:error] [pid 53181:tid 53533] [client 20.104.124.39:15243] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaSJxor_0T1SazTrJOBgHAAAARI"]
[Mon Mar 02 02:47:34.769465 2026] [:error] [pid 26940:tid 26948] [client 20.104.124.39:15112] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "aaSJxhrUg-j5GLDtRFkM2QAAAEQ"]
[Mon Mar 02 02:47:35.709008 2026] [:error] [pid 53585:tid 53603] [client 20.104.124.39:15145] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nox.php"] [unique_id "aaSJx3bCvYsvu6kKhM3ggwAAAA8"]
[Mon Mar 02 02:47:36.746143 2026] [:error] [pid 53182:tid 53550] [client 20.104.124.39:15241] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nox.php"] [unique_id "aaSJyPv073cA6eM1YCT9iwAAAMc"]
[Mon Mar 02 02:47:37.351482 2026] [:error] [pid 53182:tid 53558] [client 20.104.124.39:15043] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nox.php"] [unique_id "aaSJyfv073cA6eM1YCT9jgAAAM4"]
[Mon Mar 02 02:47:37.973625 2026] [:error] [pid 53182:tid 53565] [client 20.104.124.39:14786] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nox.php"] [unique_id "aaSJyfv073cA6eM1YCT9kgAAANU"]
[Mon Mar 02 02:47:38.845406 2026] [:error] [pid 53180:tid 53444] [client 20.104.124.39:15237] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaSJyjPPJpDOBvYnaa1y7AAAAYA"]
[Mon Mar 02 02:47:39.629253 2026] [:error] [pid 53585:tid 53596] [client 20.104.124.39:15301] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaSJy3bCvYsvu6kKhM3gjQAAAAg"]
[Mon Mar 02 02:47:40.392354 2026] [:error] [pid 53585:tid 53591] [client 20.104.124.39:15229] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaSJzHbCvYsvu6kKhM3gjwAAAAM"]
[Mon Mar 02 02:47:41.155475 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15048] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaSJzXbCvYsvu6kKhM3gkgAAAAo"]
[Mon Mar 02 02:47:42.132441 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15164] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaSJzhrUg-j5GLDtRFkNLwAAAEc"]
[Mon Mar 02 02:47:44.455366 2026] [:error] [pid 53180:tid 53463] [client 20.104.124.39:15184] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaSJ0DPPJpDOBvYnaa1y_AAAAZM"]
[Mon Mar 02 02:47:45.164944 2026] [:error] [pid 53180:tid 53465] [client 20.104.124.39:15087] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaSJ0TPPJpDOBvYnaa1zBAAAAZU"]
[Mon Mar 02 02:47:45.842946 2026] [:error] [pid 53181:tid 53534] [client 20.104.124.39:15266] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaSJ0Yr_0T1SazTrJOBgLAAAARM"]
[Mon Mar 02 02:47:46.976441 2026] [:error] [pid 53180:tid 53445] [client 20.104.124.39:15159] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aaSJ0jPPJpDOBvYnaa1zDAAAAYE"]
[Mon Mar 02 02:47:47.804514 2026] [:error] [pid 53182:tid 53559] [client 20.104.124.39:15335] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aaSJ0_v073cA6eM1YCT9owAAAM8"]
[Mon Mar 02 02:47:48.362597 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15249] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aaSJ1HbCvYsvu6kKhM3gmgAAAAo"]
[Mon Mar 02 02:47:49.033079 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15303] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class9.php"] [unique_id "aaSJ1RrUg-j5GLDtRFkNfQAAAEo"]
[Mon Mar 02 02:47:49.711635 2026] [:error] [pid 53585:tid 53605] [client 20.104.124.39:15288] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/la.php"] [unique_id "aaSJ1XbCvYsvu6kKhM3goQAAABE"]
[Mon Mar 02 02:47:50.802784 2026] [:error] [pid 53182:tid 53548] [client 20.104.124.39:15094] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/la.php"] [unique_id "aaSJ1vv073cA6eM1YCT9rAAAAMU"]
[Mon Mar 02 02:47:51.931403 2026] [:error] [pid 53180:tid 53462] [client 20.104.124.39:15078] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/la.php"] [unique_id "aaSJ1zPPJpDOBvYnaa1zEwAAAZI"]
[Mon Mar 02 02:47:53.163302 2026] [:error] [pid 53182:tid 53561] [client 20.104.124.39:15238] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/la.php"] [unique_id "aaSJ2fv073cA6eM1YCT9vQAAANE"]
[Mon Mar 02 02:47:53.750207 2026] [:error] [pid 53182:tid 53560] [client 20.104.124.39:14806] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aaSJ2fv073cA6eM1YCT9xAAAANA"]
[Mon Mar 02 02:47:54.390168 2026] [:error] [pid 53585:tid 53608] [client 20.104.124.39:15319] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aaSJ2nbCvYsvu6kKhM3guQAAABQ"]
[Mon Mar 02 02:47:54.993031 2026] [:error] [pid 53181:tid 53532] [client 20.104.124.39:15188] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aaSJ2or_0T1SazTrJOBgQgAAARE"]
[Mon Mar 02 02:47:55.876828 2026] [:error] [pid 53181:tid 53533] [client 20.104.124.39:15350] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "aaSJ24r_0T1SazTrJOBgRQAAARI"]
[Mon Mar 02 02:47:56.628640 2026] [:error] [pid 53585:tid 53606] [client 20.104.124.39:14803] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaSJ3HbCvYsvu6kKhM3gxAAAABI"]
[Mon Mar 02 02:47:57.352420 2026] [:error] [pid 26940:tid 26956] [client 20.104.124.39:14795] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaSJ3RrUg-j5GLDtRFkNiQAAAEw"]
[Mon Mar 02 02:47:58.054060 2026] [:error] [pid 53181:tid 53530] [client 20.104.124.39:15168] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaSJ3or_0T1SazTrJOBgTAAAAQ8"]
[Mon Mar 02 02:47:58.667921 2026] [:error] [pid 53585:tid 53599] [client 20.104.124.39:15267] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaSJ3nbCvYsvu6kKhM3gywAAAAs"]
[Mon Mar 02 02:47:59.195143 2026] [:error] [pid 53585:tid 53603] [client 20.104.124.39:15206] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaSJ33bCvYsvu6kKhM3gzgAAAA8"]
[Mon Mar 02 02:47:59.710501 2026] [:error] [pid 53181:tid 53516] [client 20.104.124.39:15233] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaSJ34r_0T1SazTrJOBgXAAAAQI"]
[Mon Mar 02 02:48:00.692246 2026] [:error] [pid 53180:tid 53444] [client 20.104.124.39:15312] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaSJ4DPPJpDOBvYnaa1zFgAAAYA"]
[Mon Mar 02 02:48:01.226462 2026] [:error] [pid 26940:tid 26946] [client 20.104.124.39:14828] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaSJ4RrUg-j5GLDtRFkNkwAAAEI"]
[Mon Mar 02 02:48:01.884591 2026] [:error] [pid 53585:tid 53593] [client 20.104.124.39:15297] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSJ4XbCvYsvu6kKhM3g1QAAAAU"]
[Mon Mar 02 02:48:02.707171 2026] [:error] [pid 53180:tid 53448] [client 20.104.124.39:15141] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSJ4jPPJpDOBvYnaa1zGAAAAYQ"]
[Mon Mar 02 02:48:03.692170 2026] [:error] [pid 53585:tid 53605] [client 20.104.124.39:15248] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSJ43bCvYsvu6kKhM3g3QAAABE"]
[Mon Mar 02 02:48:04.262405 2026] [:error] [pid 26940:tid 26960] [client 20.104.124.39:15264] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "aaSJ5BrUg-j5GLDtRFkNngAAAFA"]
[Mon Mar 02 02:48:04.957759 2026] [:error] [pid 26940:tid 26954] [client 20.104.124.39:15317] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaSJ5BrUg-j5GLDtRFkNpwAAAEo"]
[Mon Mar 02 02:48:05.636532 2026] [:error] [pid 53181:tid 53536] [client 20.104.124.39:15334] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaSJ5Yr_0T1SazTrJOBgbAAAARU"]
[Mon Mar 02 02:48:06.445625 2026] [:error] [pid 26940:tid 26958] [client 20.104.124.39:14982] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaSJ5hrUg-j5GLDtRFkNrQAAAE4"]
[Mon Mar 02 02:48:07.117367 2026] [:error] [pid 26940:tid 26951] [client 20.104.124.39:15345] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaSJ5xrUg-j5GLDtRFkNsAAAAEc"]
[Mon Mar 02 02:48:07.589203 2026] [:error] [pid 26940:tid 26955] [client 20.104.124.39:15192] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaSJ5xrUg-j5GLDtRFkNtQAAAEs"]
[Mon Mar 02 02:48:08.364895 2026] [:error] [pid 53585:tid 53590] [client 20.104.124.39:15308] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaSJ6HbCvYsvu6kKhM3g6QAAAAI"]
[Mon Mar 02 02:48:09.091698 2026] [:error] [pid 53585:tid 53596] [client 20.104.124.39:15195] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaSJ6XbCvYsvu6kKhM3g7wAAAAg"]
[Mon Mar 02 02:48:09.678761 2026] [:error] [pid 53585:tid 53589] [client 20.104.124.39:15057] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaSJ6XbCvYsvu6kKhM3g9gAAAAE"]
[Mon Mar 02 02:48:10.675783 2026] [:error] [pid 53181:tid 53537] [client 20.104.124.39:15151] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aaSJ6or_0T1SazTrJOBgeQAAARY"]
[Mon Mar 02 02:48:11.456198 2026] [:error] [pid 53182:tid 53544] [client 20.104.124.39:15216] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aaSJ6_v073cA6eM1YCT-AwAAAME"]
[Mon Mar 02 02:48:12.040967 2026] [:error] [pid 53182:tid 53555] [client 20.104.124.39:15300] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aaSJ7Pv073cA6eM1YCT-CAAAAMs"]
[Mon Mar 02 02:48:12.628842 2026] [:error] [pid 53182:tid 53547] [client 20.104.124.39:15101] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "aaSJ7Pv073cA6eM1YCT-CgAAAMQ"]
[Mon Mar 02 02:48:13.460830 2026] [:error] [pid 53181:tid 53528] [client 20.104.124.39:14834] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pop.php"] [unique_id "aaSJ7Yr_0T1SazTrJOBgfQAAAQ0"]
[Mon Mar 02 02:48:14.734878 2026] [:error] [pid 53182:tid 53546] [client 20.104.124.39:15320] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pop.php"] [unique_id "aaSJ7vv073cA6eM1YCT-GgAAAMM"]
[Mon Mar 02 02:48:15.810090 2026] [:error] [pid 53182:tid 53553] [client 20.104.124.39:15160] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pop.php"] [unique_id "aaSJ7_v073cA6eM1YCT-KQAAAMo"]
[Mon Mar 02 02:48:16.732522 2026] [:error] [pid 53180:tid 53459] [client 20.104.124.39:15245] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/pop.php"] [unique_id "aaSJ8DPPJpDOBvYnaa1zLAAAAY8"]
[Mon Mar 02 02:48:17.251065 2026] [:error] [pid 53181:tid 53537] [client 20.104.124.39:15294] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaSJ8Yr_0T1SazTrJOBghwAAARY"]
[Mon Mar 02 02:48:17.873396 2026] [:error] [pid 53181:tid 53525] [client 20.104.124.39:15260] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaSJ8Yr_0T1SazTrJOBgigAAAQo"]
[Mon Mar 02 02:48:18.734996 2026] [:error] [pid 53585:tid 53603] [client 20.104.124.39:15298] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaSJ8nbCvYsvu6kKhM3hDgAAAA8"]
[Mon Mar 02 02:48:19.801032 2026] [:error] [pid 53182:tid 53567] [client 20.104.124.39:15244] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaSJ8_v073cA6eM1YCT-OQAAANc"]
[Mon Mar 02 02:48:20.716297 2026] [:error] [pid 26940:tid 26958] [client 20.104.124.39:15100] [client 20.104.124.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xaz.php"] [unique_id "aaSJ9BrUg-j5GLDtRFkN1gAAAE4"]
[Mon Mar 02 02:48:21.469484 2026] [:error] [pid 53585:tid 53589] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Mon Mar 02 02:48:21.677965 2026] [:error] [pid 53585:tid 53607] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Mon Mar 02 02:48:21.895901 2026] [:error] [pid 53585:tid 53612] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Mon Mar 02 02:48:22.110622 2026] [:error] [pid 53585:tid 53601] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Mon Mar 02 02:48:22.327250 2026] [:error] [pid 53585:tid 53600] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Mon Mar 02 02:48:22.550657 2026] [:error] [pid 53585:tid 53593] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Mon Mar 02 02:48:23.175850 2026] [:error] [pid 53585:tid 53588] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Mon Mar 02 02:48:23.384808 2026] [:error] [pid 53585:tid 53598] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Mon Mar 02 02:48:23.719565 2026] [:error] [pid 53585:tid 53594] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Mar 02 02:48:23.930064 2026] [:error] [pid 53585:tid 53606] [client 20.104.124.39:15347] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Mon Mar 02 04:57:10.541141 2026] [:error] [pid 28794:tid 28851] [client 182.44.8.254:40267] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaSoJqVy2qpaelbUob32qwAAAE8"]
[Mon Mar 02 05:11:59.960016 2026] [:error] [pid 28794:tid 28841] [client 43.153.71.132:49030] [client 43.153.71.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaSrn6Vy2qpaelbUob39uQAAAEU"]
[Mon Mar 02 07:21:09.917983 2026] [:error] [pid 28793:tid 28811] [client 43.130.116.87:51414] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaTJ5Q2_fxBANaHo1f4pBwAAAAQ"]
[Mon Mar 02 08:14:35.361881 2026] [:error] [pid 28794:tid 28845] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon Mar 02 08:14:35.478497 2026] [:error] [pid 28794:tid 28856] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon Mar 02 08:14:35.594657 2026] [:error] [pid 28794:tid 28859] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Mar 02 08:14:35.709164 2026] [:error] [pid 28794:tid 28844] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 02 08:14:35.825654 2026] [:error] [pid 28794:tid 28849] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Mar 02 08:14:36.372052 2026] [:error] [pid 28794:tid 28846] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Mon Mar 02 08:14:36.490221 2026] [:error] [pid 28794:tid 28853] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Mon Mar 02 08:14:36.608217 2026] [:error] [pid 28794:tid 28854] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Mon Mar 02 08:14:36.746285 2026] [:error] [pid 28794:tid 28848] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Mar 02 08:14:36.862736 2026] [:error] [pid 28794:tid 28847] [client 52.253.113.41:24150] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Mar 02 08:14:36.976278 2026] [:error] [pid 28794:tid 28839] [client 52.253.113.41:24150] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/000.php"] [unique_id "aaTWbKVy2qpaelbUob1RLQAAAEM"]
[Mon Mar 02 08:14:37.448264 2026] [:error] [pid 28793:tid 28816] [client 52.253.113.41:10049] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/000.php"] [unique_id "aaTWbQ2_fxBANaHo1f47bgAAAAk"]
[Mon Mar 02 08:14:37.902330 2026] [:error] [pid 28795:tid 28873] [client 52.253.113.41:12248] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/000.php"] [unique_id "aaTWbbROd53wZBkdI_d5_AAAAIo"]
[Mon Mar 02 08:14:38.354993 2026] [:error] [pid 31257:tid 31268] [client 52.253.113.41:12251] [client 52.253.113.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/000.php"] [unique_id "aaTWbv-JFLfishX45N-4GwAAAQU"]
[Mon Mar 02 08:40:09.301830 2026] [:error] [pid 23872:tid 23878] [client 70.48.240.25:52768] [client 70.48.240.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.48.240.25, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaTcaUzkQFuA2qBk8UMlJQAAAYM"]
[Mon Mar 02 08:40:09.310409 2026] [:error] [pid 23872:tid 23878] [client 70.48.240.25:52768] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 08:51:03.442073 2026] [:error] [pid 31257:tid 31269] [client 45.177.223.162:43172] [client 45.177.223.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.177.223.162, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaTe9_-JFLfishX45N_WlAAAAQY"]
[Mon Mar 02 08:51:03.446893 2026] [:error] [pid 31257:tid 31269] [client 45.177.223.162:43172] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 08:51:23.125467 2026] [:error] [pid 21575:tid 21589] [client 20.63.41.168:15248] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 08:51:23.331107 2026] [:error] [pid 21575:tid 21579] [client 20.63.41.168:15248] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaTfCyrocdArcJqFfIl0YgAAAUA"]
[Mon Mar 02 08:51:24.218535 2026] [:error] [pid 23872:tid 23887] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 08:51:24.658872 2026] [:error] [pid 23872:tid 23888] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 08:51:24.867812 2026] [:error] [pid 23872:tid 23892] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 08:51:25.074565 2026] [:error] [pid 23872:tid 23893] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 08:51:25.296206 2026] [:error] [pid 23872:tid 23886] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 08:51:25.503355 2026] [:error] [pid 23872:tid 23881] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 08:51:25.713212 2026] [:error] [pid 23872:tid 23897] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 08:51:25.929981 2026] [:error] [pid 23872:tid 23898] [client 20.63.41.168:15351] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 08:51:26.133784 2026] [:error] [pid 23872:tid 23877] [client 20.63.41.168:15351] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaTfDkzkQFuA2qBk8UMyBAAAAYI"]
[Mon Mar 02 08:51:26.909563 2026] [:error] [pid 28908:tid 28932] [client 20.63.41.168:15324] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaTfDoqJmC8ih_lQQnDY0AAAANY"]
[Mon Mar 02 08:51:27.572496 2026] [:error] [pid 28793:tid 28830] [client 20.63.41.168:15245] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaTfDw2_fxBANaHo1f5CJAAAABc"]
[Mon Mar 02 08:51:28.346276 2026] [:error] [pid 28908:tid 28931] [client 20.63.41.168:15237] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaTfEIqJmC8ih_lQQnDY1QAAANU"]
[Mon Mar 02 08:51:29.181148 2026] [:error] [pid 31257:tid 31265] [client 20.63.41.168:15169] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaTfEf-JFLfishX45N_W3QAAAQI"]
[Mon Mar 02 08:51:30.604769 2026] [:error] [pid 28793:tid 28820] [client 20.63.41.168:15310] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaTfEg2_fxBANaHo1f5CKAAAAA0"]
[Mon Mar 02 08:51:31.291846 2026] [:error] [pid 23872:tid 23887] [client 20.63.41.168:15173] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaTfE0zkQFuA2qBk8UMyFgAAAYw"]
[Mon Mar 02 08:51:31.981214 2026] [:error] [pid 23872:tid 23876] [client 20.63.41.168:15238] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaTfE0zkQFuA2qBk8UMyGQAAAYE"]
[Mon Mar 02 08:51:32.588176 2026] [:error] [pid 21575:tid 21592] [client 20.63.41.168:15342] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTfFCrocdArcJqFfIl0eAAAAU0"]
[Mon Mar 02 08:51:33.085641 2026] [:error] [pid 28795:tid 28887] [client 20.63.41.168:15331] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTfFbROd53wZBkdI_eInwAAAJg"]
[Mon Mar 02 08:51:33.967711 2026] [:error] [pid 28795:tid 28872] [client 20.63.41.168:15250] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTfFbROd53wZBkdI_eIoAAAAIk"]
[Mon Mar 02 08:51:35.218741 2026] [:error] [pid 28794:tid 28859] [client 20.63.41.168:15318] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaTfF6Vy2qpaelbUob1bhQAAAFc"]
[Mon Mar 02 08:51:36.723913 2026] [:error] [pid 23872:tid 23879] [client 20.63.41.168:15315] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaTfGEzkQFuA2qBk8UMyNAAAAYQ"]
[Mon Mar 02 08:51:37.242697 2026] [:error] [pid 31257:tid 31284] [client 20.63.41.168:15296] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaTfGf-JFLfishX45N_W6wAAARU"]
[Mon Mar 02 08:51:37.850057 2026] [:error] [pid 23872:tid 23886] [client 20.63.41.168:15348] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaTfGUzkQFuA2qBk8UMyOAAAAYs"]
[Mon Mar 02 08:51:38.462539 2026] [:error] [pid 21575:tid 21586] [client 20.63.41.168:15347] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaTfGirocdArcJqFfIl0ggAAAUc"]
[Mon Mar 02 08:51:39.140778 2026] [:error] [pid 23872:tid 23890] [client 20.63.41.168:15344] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaTfG0zkQFuA2qBk8UMyPgAAAY8"]
[Mon Mar 02 08:51:39.825362 2026] [:error] [pid 21575:tid 21589] [client 20.63.41.168:15330] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaTfGyrocdArcJqFfIl0hgAAAUo"]
[Mon Mar 02 08:51:40.443756 2026] [:error] [pid 23872:tid 23883] [client 20.63.41.168:15338] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaTfHEzkQFuA2qBk8UMyUAAAAYg"]
[Mon Mar 02 08:51:40.952495 2026] [:error] [pid 23872:tid 23879] [client 20.63.41.168:15333] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaTfHEzkQFuA2qBk8UMyVQAAAYQ"]
[Mon Mar 02 08:51:42.010624 2026] [:error] [pid 21575:tid 21579] [client 20.63.41.168:15280] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaTfHirocdArcJqFfIl0iwAAAUA"]
[Mon Mar 02 08:51:45.371618 2026] [:error] [pid 23872:tid 23883] [client 20.63.41.168:15286] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaTfIUzkQFuA2qBk8UMyaAAAAYg"]
[Mon Mar 02 08:51:49.341254 2026] [:error] [pid 28908:tid 28910] [client 20.63.41.168:15326] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaTfJYqJmC8ih_lQQnDZAgAAAMA"]
[Mon Mar 02 08:51:51.221177 2026] [:error] [pid 28795:tid 28882] [client 20.63.41.168:15320] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaTfJ7ROd53wZBkdI_eItgAAAJM"]
[Mon Mar 02 08:51:52.465122 2026] [:error] [pid 28794:tid 28856] [client 20.63.41.168:15243] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaTfKKVy2qpaelbUob1brAAAAFQ"]
[Mon Mar 02 08:51:53.169370 2026] [:error] [pid 31257:tid 31274] [client 20.63.41.168:15247] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaTfKf-JFLfishX45N_XGgAAAQs"]
[Mon Mar 02 08:51:53.863881 2026] [:error] [pid 31257:tid 31266] [client 20.63.41.168:15302] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaTfKf-JFLfishX45N_XHQAAAQM"]
[Mon Mar 02 08:51:54.530989 2026] [:error] [pid 28795:tid 28885] [client 20.63.41.168:15320] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaTfKrROd53wZBkdI_eIuwAAAJY"]
[Mon Mar 02 09:00:31.038150 2026] [:error] [pid 31257:tid 31269] [client 134.149.59.124:5299] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 09:00:31.298256 2026] [:error] [pid 31257:tid 31267] [client 134.149.59.124:5299] [client 134.149.59.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaThL_-JFLfishX45N_dBgAAAQQ"]
[Mon Mar 02 09:00:31.809323 2026] [:error] [pid 31257:tid 31286] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 09:00:32.312736 2026] [:error] [pid 31257:tid 31276] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 09:00:32.565398 2026] [:error] [pid 31257:tid 31265] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 09:00:32.819739 2026] [:error] [pid 31257:tid 31286] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 09:00:33.072937 2026] [:error] [pid 31257:tid 31285] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 09:00:33.325552 2026] [:error] [pid 31257:tid 31274] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 09:00:33.581646 2026] [:error] [pid 31257:tid 31281] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 09:00:33.833927 2026] [:error] [pid 31257:tid 31263] [client 134.149.59.124:12457] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 09:00:34.082336 2026] [:error] [pid 31257:tid 31284] [client 134.149.59.124:12457] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaThMv-JFLfishX45N_dHgAAARU"]
[Mon Mar 02 09:00:34.615271 2026] [:error] [pid 31257:tid 31269] [client 134.149.59.124:15077] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaThMv-JFLfishX45N_dHwAAAQY"]
[Mon Mar 02 09:00:35.115191 2026] [:error] [pid 28908:tid 28922] [client 134.149.59.124:1200] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaThM4qJmC8ih_lQQnDcJgAAAMw"]
[Mon Mar 02 09:00:35.614786 2026] [:error] [pid 31257:tid 31270] [client 134.149.59.124:2720] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaThM_-JFLfishX45N_dJQAAAQc"]
[Mon Mar 02 09:00:36.119409 2026] [:error] [pid 23872:tid 23891] [client 134.149.59.124:3768] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaThNEzkQFuA2qBk8UM99AAAAZA"]
[Mon Mar 02 09:00:36.617405 2026] [:error] [pid 31257:tid 31264] [client 134.149.59.124:6069] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaThNP-JFLfishX45N_dKQAAAQE"]
[Mon Mar 02 09:00:37.117837 2026] [:error] [pid 31257:tid 31277] [client 134.149.59.124:13577] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaThNf-JFLfishX45N_dKwAAAQ4"]
[Mon Mar 02 09:00:37.615885 2026] [:error] [pid 28794:tid 28836] [client 134.149.59.124:11412] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaThNaVy2qpaelbUob1dswAAAEA"]
[Mon Mar 02 10:29:20.881938 2026] [:error] [pid 23872:tid 23899] [client 62.60.131.156:54165] [client 62.60.131.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.60.131.156, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaT2AEzkQFuA2qBk8UOtNAAAAZg"]
[Mon Mar 02 10:29:20.885862 2026] [:error] [pid 23872:tid 23899] [client 62.60.131.156:54165] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 10:29:23.585534 2026] [:error] [pid 23872:tid 23889] [client 62.60.131.156:54165] [client 62.60.131.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaT2A0zkQFuA2qBk8UOtUQAAAY4"]
[Mon Mar 02 10:29:24.067929 2026] [:error] [pid 28795:tid 28884] [client 62.60.131.156:55642] [client 62.60.131.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaT2BLROd53wZBkdI_eoZgAAAJU"]
[Mon Mar 02 10:29:24.556656 2026] [:error] [pid 23872:tid 23883] [client 62.60.131.156:55764] [client 62.60.131.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaT2BEzkQFuA2qBk8UOtVgAAAYg"]
[Mon Mar 02 11:11:47.408933 2026] [:error] [pid 23872:tid 23895] [client 170.106.72.93:41874] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaT_80zkQFuA2qBk8UPg2AAAAZQ"]
[Mon Mar 02 11:22:27.033459 2026] [:error] [pid 21575:tid 21600] [client 111.172.249.49:35957] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaUCcyrocdArcJqFfInTwwAAAVU"]
[Mon Mar 02 11:48:28.907281 2026] [:error] [pid 31257:tid 31283] [client 20.63.41.168:12179] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 11:48:29.116436 2026] [:error] [pid 31257:tid 31285] [client 20.63.41.168:12179] [client 20.63.41.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaUIjf-JFLfishX45N9d7gAAARY"]
[Mon Mar 02 11:48:29.890108 2026] [:error] [pid 21575:tid 21591] [client 20.63.41.168:12169] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 11:48:30.310904 2026] [:error] [pid 21575:tid 21586] [client 20.63.41.168:12169] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 11:48:30.518223 2026] [:error] [pid 21575:tid 21588] [client 20.63.41.168:12169] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 11:48:30.729040 2026] [:error] [pid 21575:tid 21600] [client 20.63.41.168:12169] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 11:48:30.948882 2026] [:error] [pid 21575:tid 21582] [client 20.63.41.168:12169] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 11:48:31.156605 2026] [:error] [pid 21575:tid 21590] [client 20.63.41.168:12169] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 11:48:31.363180 2026] [:error] [pid 21575:tid 21601] [client 20.63.41.168:12169] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/011i.php"] [unique_id "aaUIjyrocdArcJqFfIn7KAAAAVY"]
[Mon Mar 02 11:48:31.875306 2026] [:error] [pid 14466:tid 14475] [client 20.63.41.168:12254] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/011i.php"] [unique_id "aaUIj_8w-ahEIiUSqM5MNAAAAcc"]
[Mon Mar 02 11:48:32.396162 2026] [:error] [pid 23872:tid 23883] [client 20.63.41.168:12225] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/011i.php"] [unique_id "aaUIkEzkQFuA2qBk8UP8EgAAAYg"]
[Mon Mar 02 11:48:32.898228 2026] [:error] [pid 14466:tid 14492] [client 20.63.41.168:12272] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/011i.php"] [unique_id "aaUIkP8w-ahEIiUSqM5MOAAAAdg"]
[Mon Mar 02 11:48:33.586945 2026] [:error] [pid 28908:tid 28932] [client 20.63.41.168:12269] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aaUIkYqJmC8ih_lQQnA6LQAAANY"]
[Mon Mar 02 11:48:34.151606 2026] [:error] [pid 28908:tid 28921] [client 20.63.41.168:12250] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aaUIkoqJmC8ih_lQQnA6MQAAAMs"]
[Mon Mar 02 11:48:34.617661 2026] [:error] [pid 14466:tid 14486] [client 20.63.41.168:12230] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aaUIkv8w-ahEIiUSqM5MPAAAAdI"]
[Mon Mar 02 11:48:35.236974 2026] [:error] [pid 28908:tid 28927] [client 20.63.41.168:12233] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aaUIk4qJmC8ih_lQQnA6NwAAANE"]
[Mon Mar 02 11:48:35.829991 2026] [:error] [pid 31257:tid 31286] [client 20.63.41.168:12197] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaUIk_-JFLfishX45N9eBgAAARc"]
[Mon Mar 02 11:48:36.484352 2026] [:error] [pid 28908:tid 28932] [client 20.63.41.168:12161] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaUIlIqJmC8ih_lQQnA6QAAAANY"]
[Mon Mar 02 11:48:37.265798 2026] [:error] [pid 28795:tid 28886] [client 20.63.41.168:12231] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaUIlbROd53wZBkdI_e6sgAAAJc"]
[Mon Mar 02 11:48:37.874688 2026] [:error] [pid 28908:tid 28910] [client 20.63.41.168:12251] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaUIlYqJmC8ih_lQQnA6TQAAAMA"]
[Mon Mar 02 11:48:38.526505 2026] [:error] [pid 28908:tid 28929] [client 20.63.41.168:12266] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaUIloqJmC8ih_lQQnA6VAAAANM"]
[Mon Mar 02 11:48:39.052633 2026] [:error] [pid 28908:tid 28918] [client 20.63.41.168:12265] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaUIl4qJmC8ih_lQQnA6WAAAAMg"]
[Mon Mar 02 11:48:39.704359 2026] [:error] [pid 23872:tid 23886] [client 20.63.41.168:12283] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaUIl0zkQFuA2qBk8UP8KgAAAYs"]
[Mon Mar 02 11:48:40.275184 2026] [:error] [pid 21575:tid 21594] [client 20.63.41.168:12162] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaUImCrocdArcJqFfIn7MwAAAU8"]
[Mon Mar 02 11:48:40.813584 2026] [:error] [pid 28908:tid 28925] [client 20.63.41.168:12232] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUImIqJmC8ih_lQQnA6bgAAAM8"]
[Mon Mar 02 11:48:41.294992 2026] [:error] [pid 23872:tid 23892] [client 20.63.41.168:12118] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUImUzkQFuA2qBk8UP8MgAAAZE"]
[Mon Mar 02 11:48:41.735870 2026] [:error] [pid 21575:tid 21584] [client 20.63.41.168:12160] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUImSrocdArcJqFfIn7OQAAAUU"]
[Mon Mar 02 11:48:42.394111 2026] [:error] [pid 31257:tid 31276] [client 20.63.41.168:12274] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaUImv-JFLfishX45N9eCQAAAQ0"]
[Mon Mar 02 11:48:43.077748 2026] [:error] [pid 28793:tid 28810] [client 20.63.41.168:12175] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaUImw2_fxBANaHo1f5eoAAAAAM"]
[Mon Mar 02 11:48:43.544480 2026] [:error] [pid 28795:tid 28885] [client 20.63.41.168:12110] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaUIm7ROd53wZBkdI_e6tQAAAJY"]
[Mon Mar 02 11:48:44.269269 2026] [:error] [pid 23872:tid 23889] [client 20.63.41.168:12235] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaUInEzkQFuA2qBk8UP8QQAAAY4"]
[Mon Mar 02 11:48:44.998982 2026] [:error] [pid 28795:tid 28877] [client 20.63.41.168:12117] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaUInLROd53wZBkdI_e6uAAAAI4"]
[Mon Mar 02 11:48:45.598348 2026] [:error] [pid 14466:tid 14474] [client 20.63.41.168:12165] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaUInf8w-ahEIiUSqM5MTgAAAcY"]
[Mon Mar 02 11:48:46.130298 2026] [:error] [pid 28795:tid 28871] [client 20.63.41.168:12223] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaUInrROd53wZBkdI_e6vgAAAIg"]
[Mon Mar 02 11:48:46.624760 2026] [:error] [pid 21575:tid 21593] [client 20.63.41.168:12280] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaUInirocdArcJqFfIn7RgAAAU4"]
[Mon Mar 02 11:48:47.366362 2026] [:error] [pid 21575:tid 21603] [client 20.63.41.168:12196] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaUInyrocdArcJqFfIn7UAAAAVg"]
[Mon Mar 02 11:48:47.857796 2026] [:error] [pid 23872:tid 23877] [client 20.63.41.168:12112] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaUIn0zkQFuA2qBk8UP8TgAAAYI"]
[Mon Mar 02 11:48:48.499194 2026] [:error] [pid 23872:tid 23883] [client 20.63.41.168:12180] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaUIoEzkQFuA2qBk8UP8UQAAAYg"]
[Mon Mar 02 11:48:49.156268 2026] [:error] [pid 31257:tid 31266] [client 20.63.41.168:12164] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaUIof-JFLfishX45N9eLQAAAQM"]
[Mon Mar 02 11:48:49.860003 2026] [:error] [pid 14466:tid 14474] [client 20.63.41.168:12219] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asf.php"] [unique_id "aaUIof8w-ahEIiUSqM5MWAAAAcY"]
[Mon Mar 02 11:48:50.434987 2026] [:error] [pid 23872:tid 23879] [client 20.63.41.168:12119] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaUIokzkQFuA2qBk8UP8VQAAAYQ"]
[Mon Mar 02 11:48:50.938847 2026] [:error] [pid 21575:tid 21594] [client 20.63.41.168:12204] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaUIoirocdArcJqFfIn7aAAAAU8"]
[Mon Mar 02 11:48:51.580472 2026] [:error] [pid 28795:tid 28884] [client 20.63.41.168:12245] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaUIo7ROd53wZBkdI_e6wAAAAJU"]
[Mon Mar 02 11:48:52.205598 2026] [:error] [pid 23872:tid 23890] [client 20.63.41.168:12278] [client 20.63.41.168] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php"] [unique_id "aaUIpEzkQFuA2qBk8UP8XAAAAY8"]
[Mon Mar 02 17:02:46.362902 2026] [:error] [pid 28847:tid 28858] [client 124.156.225.181:57990] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaVSNp9xbBq8VfeqVDaDqwAAAMk"]
[Mon Mar 02 18:13:54.902209 2026] [:error] [pid 59600:tid 59633] [client 221.229.106.25:58052] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaVi4oQ5lE4yocV9IBf4zQAAABg"]
[Mon Mar 02 19:02:04.295278 2026] [:error] [pid 28847:tid 28857] [client 43.153.123.3:42606] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaVuLJ9xbBq8VfeqVDbfZQAAAMg"]
[Mon Mar 02 19:10:41.321773 2026] [:error] [pid 59600:tid 59633] [client 20.63.100.156:20423] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/jga.php"] [unique_id "aaVwMYQ5lE4yocV9IBcaSQAAABg"]
[Mon Mar 02 19:10:42.258112 2026] [:error] [pid 28847:tid 28852] [client 20.63.100.156:20458] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/widgets/widget-cache.php"] [unique_id "aaVwMp9xbBq8VfeqVDbm3AAAAMM"]
[Mon Mar 02 19:10:42.787985 2026] [:error] [pid 59701:tid 59716] [client 20.63.100.156:20457] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/class-wp-json-ajax.php"] [unique_id "aaVwMuUmTDVso96U9_K59gAAAQw"]
[Mon Mar 02 19:10:43.644375 2026] [:error] [pid 28847:tid 28871] [client 20.63.100.156:20471] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaVwM59xbBq8VfeqVDbm5gAAANY"]
[Mon Mar 02 19:10:44.147588 2026] [:error] [pid 59701:tid 59714] [client 20.63.100.156:20452] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaVwNOUmTDVso96U9_K5-gAAAQo"]
[Mon Mar 02 19:10:44.571900 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20460] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaVwNJ9xbBq8VfeqVDbm6gAAANE"]
[Mon Mar 02 19:10:45.050313 2026] [:error] [pid 28847:tid 28851] [client 20.63.100.156:20418] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/select_file2.php"] [unique_id "aaVwNZ9xbBq8VfeqVDbm7wAAAMI"]
[Mon Mar 02 19:10:46.104051 2026] [:error] [pid 28847:tid 28868] [client 20.63.100.156:20363] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaVwNp9xbBq8VfeqVDbm9wAAANM"]
[Mon Mar 02 19:10:46.865593 2026] [:error] [pid 28847:tid 28861] [client 20.63.100.156:20371] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaVwNp9xbBq8VfeqVDbm_QAAAMw"]
[Mon Mar 02 19:10:47.367404 2026] [:error] [pid 59701:tid 59717] [client 20.63.100.156:20292] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaVwN-UmTDVso96U9_K5-wAAAQ0"]
[Mon Mar 02 19:10:47.958967 2026] [:error] [pid 59701:tid 59718] [client 20.63.100.156:20443] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/detmash.php"] [unique_id "aaVwN-UmTDVso96U9_K5_wAAAQ4"]
[Mon Mar 02 19:10:48.374065 2026] [:error] [pid 59601:tid 59652] [client 20.63.100.156:20439] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/8.php"] [unique_id "aaVwOMQ1lXfvWN0-ZQl6lQAAAE4"]
[Mon Mar 02 19:10:48.991239 2026] [:error] [pid 59601:tid 59651] [client 20.63.100.156:20444] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/8.php"] [unique_id "aaVwOMQ1lXfvWN0-ZQl6mAAAAE0"]
[Mon Mar 02 19:10:49.418615 2026] [:error] [pid 59701:tid 59728] [client 20.63.100.156:20372] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/8.php"] [unique_id "aaVwOeUmTDVso96U9_K6AwAAARg"]
[Mon Mar 02 19:10:49.887040 2026] [:error] [pid 59701:tid 59725] [client 20.63.100.156:20426] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/8.php"] [unique_id "aaVwOeUmTDVso96U9_K6CAAAARU"]
[Mon Mar 02 19:10:50.353073 2026] [:error] [pid 28847:tid 28864] [client 20.63.100.156:20422] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/sh.php"] [unique_id "aaVwOp9xbBq8VfeqVDbnBAAAAM8"]
[Mon Mar 02 19:10:50.789603 2026] [:error] [pid 28847:tid 28851] [client 20.63.100.156:20456] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/sh.php"] [unique_id "aaVwOp9xbBq8VfeqVDbnBgAAAMI"]
[Mon Mar 02 19:10:51.295333 2026] [:error] [pid 28847:tid 28855] [client 20.63.100.156:20474] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/sh.php"] [unique_id "aaVwO59xbBq8VfeqVDbnDAAAAMY"]
[Mon Mar 02 19:10:51.851606 2026] [:error] [pid 28847:tid 28849] [client 20.63.100.156:20419] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/sh.php"] [unique_id "aaVwO59xbBq8VfeqVDbnEAAAAMA"]
[Mon Mar 02 19:10:52.358673 2026] [:error] [pid 59600:tid 59610] [client 20.63.100.156:20472] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/start.php"] [unique_id "aaVwPIQ5lE4yocV9IBcaTQAAAAE"]
[Mon Mar 02 19:10:52.779138 2026] [:error] [pid 59600:tid 59633] [client 20.63.100.156:20429] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/start.php"] [unique_id "aaVwPIQ5lE4yocV9IBcaTwAAABg"]
[Mon Mar 02 19:10:53.268953 2026] [:error] [pid 59701:tid 59722] [client 20.63.100.156:20465] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/start.php"] [unique_id "aaVwPeUmTDVso96U9_K6DQAAARI"]
[Mon Mar 02 19:10:53.695789 2026] [:error] [pid 28847:tid 28873] [client 20.63.100.156:20464] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/start.php"] [unique_id "aaVwPZ9xbBq8VfeqVDbnFwAAANg"]
[Mon Mar 02 19:10:54.385675 2026] [:error] [pid 59600:tid 59626] [client 20.63.100.156:20468] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/incl.php"] [unique_id "aaVwPoQ5lE4yocV9IBcaVQAAABE"]
[Mon Mar 02 19:10:54.823203 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20437] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/sitemaps/providers.php"] [unique_id "aaVwPoQ5lE4yocV9IBcaVgAAAAQ"]
[Mon Mar 02 19:10:55.417293 2026] [:error] [pid 59734:tid 59758] [client 20.63.100.156:20432] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaVwP5eWQx7ZQG9NybEEkAAAAVY"]
[Mon Mar 02 19:10:55.835807 2026] [:error] [pid 59601:tid 59657] [client 20.63.100.156:20455] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaVwP8Q1lXfvWN0-ZQl6ogAAAFM"]
[Mon Mar 02 19:10:56.252529 2026] [:error] [pid 59602:tid 59682] [client 20.63.100.156:20362] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaVwQDMtSo_Fr0lHnSY5DQAAAJE"]
[Mon Mar 02 19:10:56.677672 2026] [:error] [pid 59602:tid 59678] [client 20.63.100.156:20366] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/403.php"] [unique_id "aaVwQDMtSo_Fr0lHnSY5DwAAAI0"]
[Mon Mar 02 19:10:57.101141 2026] [:error] [pid 59602:tid 59667] [client 20.63.100.156:20369] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image.php"] [unique_id "aaVwQTMtSo_Fr0lHnSY5EAAAAII"]
[Mon Mar 02 19:10:57.575404 2026] [:error] [pid 59602:tid 59671] [client 20.63.100.156:20368] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image.php"] [unique_id "aaVwQTMtSo_Fr0lHnSY5EwAAAIY"]
[Mon Mar 02 19:10:57.998209 2026] [:error] [pid 59701:tid 59720] [client 20.63.100.156:20389] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image.php"] [unique_id "aaVwQeUmTDVso96U9_K6FAAAARA"]
[Mon Mar 02 19:10:58.566151 2026] [:error] [pid 59734:tid 59752] [client 20.63.100.156:20298] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image.php"] [unique_id "aaVwQpeWQx7ZQG9NybEElgAAAVA"]
[Mon Mar 02 19:10:58.987069 2026] [:error] [pid 59734:tid 59753] [client 20.63.100.156:20355] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image2.php"] [unique_id "aaVwQpeWQx7ZQG9NybEEmQAAAVE"]
[Mon Mar 02 19:10:59.478099 2026] [:error] [pid 59602:tid 59687] [client 20.63.100.156:20447] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image2.php"] [unique_id "aaVwQzMtSo_Fr0lHnSY5GAAAAJY"]
[Mon Mar 02 19:10:59.924085 2026] [:error] [pid 59701:tid 59718] [client 20.63.100.156:20436] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image2.php"] [unique_id "aaVwQ-UmTDVso96U9_K6FgAAAQ4"]
[Mon Mar 02 19:11:00.352850 2026] [:error] [pid 59701:tid 59714] [client 20.63.100.156:20364] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/image2.php"] [unique_id "aaVwROUmTDVso96U9_K6FwAAAQo"]
[Mon Mar 02 19:11:00.775516 2026] [:error] [pid 59601:tid 59660] [client 20.63.100.156:20357] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaVwRMQ1lXfvWN0-ZQl6rAAAAFY"]
[Mon Mar 02 19:11:01.187515 2026] [:error] [pid 59734:tid 59747] [client 20.63.100.156:20466] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaVwRZeWQx7ZQG9NybEEoQAAAUs"]
[Mon Mar 02 19:11:01.815896 2026] [:error] [pid 59701:tid 59723] [client 20.63.100.156:20440] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaVwReUmTDVso96U9_K6GgAAARM"]
[Mon Mar 02 19:11:02.312953 2026] [:error] [pid 59600:tid 59626] [client 20.63.100.156:20449] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/ws.php"] [unique_id "aaVwRoQ5lE4yocV9IBcaXQAAABE"]
[Mon Mar 02 19:11:02.742276 2026] [:error] [pid 59600:tid 59629] [client 20.63.100.156:20420] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaVwRoQ5lE4yocV9IBcaXwAAABQ"]
[Mon Mar 02 19:11:03.161955 2026] [:error] [pid 59600:tid 59623] [client 20.63.100.156:20442] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaVwR4Q5lE4yocV9IBcaYQAAAA4"]
[Mon Mar 02 19:11:03.593965 2026] [:error] [pid 59600:tid 59609] [client 20.63.100.156:20478] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaVwR4Q5lE4yocV9IBcaYgAAAAA"]
[Mon Mar 02 19:11:04.139044 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20384] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/mandals.php"] [unique_id "aaVwSIQ5lE4yocV9IBcaZgAAAAM"]
[Mon Mar 02 19:11:04.611986 2026] [:error] [pid 59602:tid 59688] [client 20.63.100.156:20417] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaVwSDMtSo_Fr0lHnSY5KAAAAJc"]
[Mon Mar 02 19:11:05.044146 2026] [:error] [pid 59734:tid 59757] [client 20.63.100.156:20387] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaVwSZeWQx7ZQG9NybEErwAAAVU"]
[Mon Mar 02 19:11:05.653640 2026] [:error] [pid 59734:tid 59739] [client 20.63.100.156:20382] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaVwSZeWQx7ZQG9NybEEtAAAAUM"]
[Mon Mar 02 19:11:06.125091 2026] [:error] [pid 28847:tid 28860] [client 20.63.100.156:20472] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/ws27.php"] [unique_id "aaVwSp9xbBq8VfeqVDbnHQAAAMs"]
[Mon Mar 02 19:11:06.597332 2026] [:error] [pid 59734:tid 59740] [client 20.63.100.156:20430] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/class-wp-duotone.php"] [unique_id "aaVwSpeWQx7ZQG9NybEEuAAAAUQ"]
[Mon Mar 02 19:11:07.178672 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20358] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaVwS59xbBq8VfeqVDbnIwAAANE"]
[Mon Mar 02 19:11:07.775819 2026] [:error] [pid 28847:tid 28861] [client 20.63.100.156:20352] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaVwS59xbBq8VfeqVDbnJQAAAMw"]
[Mon Mar 02 19:11:08.537621 2026] [:error] [pid 59734:tid 59759] [client 20.63.100.156:20380] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaVwTJeWQx7ZQG9NybEEwgAAAVc"]
[Mon Mar 02 19:11:08.967217 2026] [:error] [pid 59734:tid 59752] [client 20.63.100.156:20473] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/d.be.brow.php"] [unique_id "aaVwTJeWQx7ZQG9NybEExAAAAVA"]
[Mon Mar 02 19:11:09.582794 2026] [:error] [pid 59602:tid 59683] [client 20.63.100.156:20427] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/submitticket.php"] [unique_id "aaVwTTMtSo_Fr0lHnSY5LQAAAJI"]
[Mon Mar 02 19:11:10.768489 2026] [:error] [pid 59602:tid 59687] [client 20.63.100.156:20375] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/submitticket.php"] [unique_id "aaVwTjMtSo_Fr0lHnSY5MwAAAJY"]
[Mon Mar 02 19:11:11.477073 2026] [:error] [pid 59602:tid 59682] [client 20.63.100.156:20297] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/submitticket.php"] [unique_id "aaVwTzMtSo_Fr0lHnSY5NQAAAJE"]
[Mon Mar 02 19:11:11.998890 2026] [:error] [pid 59734:tid 59753] [client 20.63.100.156:20453] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/submitticket.php"] [unique_id "aaVwT5eWQx7ZQG9NybEEygAAAVE"]
[Mon Mar 02 19:11:12.609214 2026] [:error] [pid 28847:tid 28864] [client 20.63.100.156:20403] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaVwUJ9xbBq8VfeqVDbnNAAAAM8"]
[Mon Mar 02 19:11:13.624253 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20360] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaVwUYQ5lE4yocV9IBcadgAAAAQ"]
[Mon Mar 02 19:11:15.082978 2026] [:error] [pid 28847:tid 28856] [client 20.63.100.156:20354] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaVwU59xbBq8VfeqVDbnTAAAAMc"]
[Mon Mar 02 19:11:16.268025 2026] [:error] [pid 59734:tid 59740] [client 20.63.100.156:20373] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/add_evento.php"] [unique_id "aaVwVJeWQx7ZQG9NybEEzAAAAUQ"]
[Mon Mar 02 19:11:17.172913 2026] [:error] [pid 59600:tid 59609] [client 20.63.100.156:20288] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaVwVYQ5lE4yocV9IBcaqwAAAAA"]
[Mon Mar 02 19:11:18.330168 2026] [:error] [pid 59600:tid 59626] [client 20.63.100.156:20435] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaVwVoQ5lE4yocV9IBcasgAAABE"]
[Mon Mar 02 19:11:18.967843 2026] [:error] [pid 59701:tid 59713] [client 20.63.100.156:20394] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaVwVuUmTDVso96U9_K6LAAAAQk"]
[Mon Mar 02 19:11:19.670540 2026] [:error] [pid 59602:tid 59684] [client 20.63.100.156:20385] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/goods.php"] [unique_id "aaVwVzMtSo_Fr0lHnSY5RwAAAJM"]
[Mon Mar 02 19:11:20.591441 2026] [:error] [pid 28847:tid 28870] [client 20.63.100.156:20438] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaVwWJ9xbBq8VfeqVDbnlAAAANU"]
[Mon Mar 02 19:11:21.950071 2026] [:error] [pid 28847:tid 28856] [client 20.63.100.156:20404] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaVwWZ9xbBq8VfeqVDbnnQAAAMc"]
[Mon Mar 02 19:11:23.312367 2026] [:error] [pid 28847:tid 28852] [client 20.63.100.156:20400] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaVwW59xbBq8VfeqVDbnrgAAAMM"]
[Mon Mar 02 19:11:24.655013 2026] [:error] [pid 59701:tid 59722] [client 20.63.100.156:20399] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/goods.php"] [unique_id "aaVwXOUmTDVso96U9_K6LwAAARI"]
[Mon Mar 02 19:11:25.485895 2026] [:error] [pid 59600:tid 59631] [client 20.63.100.156:20390] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaVwXYQ5lE4yocV9IBca8wAAABY"]
[Mon Mar 02 19:11:26.127201 2026] [:error] [pid 59701:tid 59724] [client 20.63.100.156:20291] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaVwXuUmTDVso96U9_K6MwAAARQ"]
[Mon Mar 02 19:11:26.803282 2026] [:error] [pid 59602:tid 59668] [client 20.63.100.156:20441] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaVwXjMtSo_Fr0lHnSY5YgAAAIM"]
[Mon Mar 02 19:11:27.381862 2026] [:error] [pid 59734:tid 59740] [client 20.63.100.156:20479] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/searchforma.php"] [unique_id "aaVwX5eWQx7ZQG9NybEE2AAAAUQ"]
[Mon Mar 02 19:11:27.899095 2026] [:error] [pid 59734:tid 59745] [client 20.63.100.156:20336] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaVwX5eWQx7ZQG9NybEE2wAAAUk"]
[Mon Mar 02 19:11:28.360290 2026] [:error] [pid 59734:tid 59758] [client 20.63.100.156:20431] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaVwYJeWQx7ZQG9NybEE3AAAAVY"]
[Mon Mar 02 19:11:29.065333 2026] [:error] [pid 59600:tid 59616] [client 20.63.100.156:20331] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaVwYYQ5lE4yocV9IBcbBQAAAAc"]
[Mon Mar 02 19:11:29.716580 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20398] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/222.php"] [unique_id "aaVwYZ9xbBq8VfeqVDbn5gAAANE"]
[Mon Mar 02 19:11:30.632872 2026] [:error] [pid 59600:tid 59631] [client 20.63.100.156:20469] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaVwYoQ5lE4yocV9IBcbEQAAABY"]
[Mon Mar 02 19:11:31.144212 2026] [:error] [pid 59701:tid 59714] [client 20.63.100.156:20433] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaVwY-UmTDVso96U9_K6OgAAAQo"]
[Mon Mar 02 19:11:31.831537 2026] [:error] [pid 59602:tid 59682] [client 20.63.100.156:20402] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaVwYzMtSo_Fr0lHnSY5agAAAJE"]
[Mon Mar 02 19:11:32.331444 2026] [:error] [pid 59701:tid 59709] [client 20.63.100.156:20446] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/files/xaw.php"] [unique_id "aaVwZOUmTDVso96U9_K6PAAAAQU"]
[Mon Mar 02 19:11:32.745057 2026] [:error] [pid 59701:tid 59712] [client 20.63.100.156:20454] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaVwZOUmTDVso96U9_K6PwAAAQg"]
[Mon Mar 02 19:11:33.236112 2026] [:error] [pid 28847:tid 28850] [client 20.63.100.156:20470] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaVwZZ9xbBq8VfeqVDbn_AAAAME"]
[Mon Mar 02 19:11:33.783533 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20475] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaVwZZ9xbBq8VfeqVDboAQAAAM0"]
[Mon Mar 02 19:11:34.314230 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20329] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/ms-site.php"] [unique_id "aaVwZoQ5lE4yocV9IBcbJgAAAAQ"]
[Mon Mar 02 19:11:34.740057 2026] [:error] [pid 59602:tid 59678] [client 20.63.100.156:20408] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaVwZjMtSo_Fr0lHnSY5bQAAAI0"]
[Mon Mar 02 19:11:35.238572 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20451] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaVwZ59xbBq8VfeqVDboEgAAAM0"]
[Mon Mar 02 19:11:35.731799 2026] [:error] [pid 59602:tid 59676] [client 20.63.100.156:20445] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaVwZzMtSo_Fr0lHnSY5cgAAAIs"]
[Mon Mar 02 19:11:36.205359 2026] [:error] [pid 28847:tid 28868] [client 20.63.100.156:20359] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/11.php"] [unique_id "aaVwaJ9xbBq8VfeqVDboGQAAANM"]
[Mon Mar 02 19:11:36.761188 2026] [:error] [pid 59600:tid 59617] [client 20.63.100.156:20308] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/wp-settings2.php"] [unique_id "aaVwaIQ5lE4yocV9IBcbMQAAAAg"]
[Mon Mar 02 19:11:37.175827 2026] [:error] [pid 28847:tid 28865] [client 20.63.100.156:20424] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/index.php"] [unique_id "aaVwaZ9xbBq8VfeqVDboJQAAANA"]
[Mon Mar 02 19:11:37.654970 2026] [:error] [pid 59600:tid 59633] [client 20.63.100.156:20428] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/index.php"] [unique_id "aaVwaYQ5lE4yocV9IBcbNQAAABg"]
[Mon Mar 02 19:11:38.075871 2026] [:error] [pid 59600:tid 59626] [client 20.63.100.156:20414] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/index.php"] [unique_id "aaVwaoQ5lE4yocV9IBcbOAAAABE"]
[Mon Mar 02 19:11:38.497536 2026] [:error] [pid 59701:tid 59720] [client 20.63.100.156:20289] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/index.php"] [unique_id "aaVwauUmTDVso96U9_K6QwAAARA"]
[Mon Mar 02 19:11:38.943308 2026] [:error] [pid 28847:tid 28858] [client 20.63.100.156:20397] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaVwap9xbBq8VfeqVDboNwAAAMk"]
[Mon Mar 02 19:11:39.371327 2026] [:error] [pid 59602:tid 59681] [client 20.63.100.156:20413] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaVwazMtSo_Fr0lHnSY5dwAAAJA"]
[Mon Mar 02 19:11:39.790824 2026] [:error] [pid 59602:tid 59667] [client 20.63.100.156:20401] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaVwazMtSo_Fr0lHnSY5egAAAII"]
[Mon Mar 02 19:11:40.392107 2026] [:error] [pid 28847:tid 28870] [client 20.63.100.156:20476] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/alfa-rex.php"] [unique_id "aaVwbJ9xbBq8VfeqVDboQgAAANU"]
[Mon Mar 02 19:11:41.005491 2026] [:error] [pid 59602:tid 59681] [client 20.63.100.156:20434] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaVwbTMtSo_Fr0lHnSY5hAAAAJA"]
[Mon Mar 02 19:11:41.450702 2026] [:error] [pid 59602:tid 59670] [client 20.63.100.156:20307] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaVwbTMtSo_Fr0lHnSY5hgAAAIU"]
[Mon Mar 02 19:11:41.910880 2026] [:error] [pid 59602:tid 59665] [client 20.63.100.156:20306] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaVwbTMtSo_Fr0lHnSY5iAAAAIA"]
[Mon Mar 02 19:11:42.321243 2026] [:error] [pid 59701:tid 59714] [client 20.63.100.156:20376] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aaVwbuUmTDVso96U9_K6RgAAAQo"]
[Mon Mar 02 19:11:42.739293 2026] [:error] [pid 59601:tid 59660] [client 20.63.100.156:20463] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/2026/02/index.php"] [unique_id "aaVwbsQ1lXfvWN0-ZQl6ywAAAFY"]
[Mon Mar 02 19:11:44.687457 2026] [:error] [pid 59701:tid 59708] [client 20.63.100.156:20293] File does not exist: /usr/local/apache/htdocs/suspended-page/yereongu.php
[Mon Mar 02 19:11:45.368355 2026] [:error] [pid 59701:tid 59706] [client 20.63.100.156:20293] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/xx.php"] [unique_id "aaVwceUmTDVso96U9_K6UwAAAQI"]
[Mon Mar 02 19:11:46.188857 2026] [:error] [pid 59602:tid 59678] [client 20.63.100.156:20448] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/wp.php"] [unique_id "aaVwcjMtSo_Fr0lHnSY5kwAAAI0"]
[Mon Mar 02 19:11:46.604512 2026] [:error] [pid 59600:tid 59617] [client 20.63.100.156:20370] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/wp.php"] [unique_id "aaVwcoQ5lE4yocV9IBcbZAAAAAg"]
[Mon Mar 02 19:11:47.101139 2026] [:error] [pid 59601:tid 59650] [client 20.63.100.156:20395] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/wp.php"] [unique_id "aaVwc8Q1lXfvWN0-ZQl6zAAAAEw"]
[Mon Mar 02 19:11:47.547646 2026] [:error] [pid 59602:tid 59685] [client 20.63.100.156:20301] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploads/wp.php"] [unique_id "aaVwczMtSo_Fr0lHnSY5lgAAAJQ"]
[Mon Mar 02 19:11:47.975903 2026] [:error] [pid 59601:tid 59657] [client 20.63.100.156:20294] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaVwc8Q1lXfvWN0-ZQl6zQAAAFM"]
[Mon Mar 02 19:11:48.658961 2026] [:error] [pid 28847:tid 28859] [client 20.63.100.156:20356] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaVwdJ9xbBq8VfeqVDboYgAAAMo"]
[Mon Mar 02 19:11:49.120316 2026] [:error] [pid 59734:tid 59741] [client 20.63.100.156:20407] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaVwdZeWQx7ZQG9NybEFCQAAAUU"]
[Mon Mar 02 19:11:49.591069 2026] [:error] [pid 59600:tid 59610] [client 20.63.100.156:20425] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/cores.php"] [unique_id "aaVwdYQ5lE4yocV9IBcbcwAAAAE"]
[Mon Mar 02 19:11:50.024283 2026] [:error] [pid 59602:tid 59672] [client 20.63.100.156:20379] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/widgets/ws62.php"] [unique_id "aaVwdjMtSo_Fr0lHnSY5lwAAAIc"]
[Mon Mar 02 19:11:50.453040 2026] [:error] [pid 59602:tid 59687] [client 20.63.100.156:20383] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaVwdjMtSo_Fr0lHnSY5mQAAAJY"]
[Mon Mar 02 19:11:50.879810 2026] [:error] [pid 59602:tid 59678] [client 20.63.100.156:20365] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaVwdjMtSo_Fr0lHnSY5mgAAAI0"]
[Mon Mar 02 19:11:51.369180 2026] [:error] [pid 59600:tid 59615] [client 20.63.100.156:20367] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/worksec.php"] [unique_id "aaVwd4Q5lE4yocV9IBcbewAAAAY"]
[Mon Mar 02 19:11:51.809883 2026] [:error] [pid 59602:tid 59683] [client 20.63.100.156:20343] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/pomo/feeds.php"] [unique_id "aaVwdzMtSo_Fr0lHnSY5mwAAAJI"]
[Mon Mar 02 19:11:52.226642 2026] [:error] [pid 28847:tid 28859] [client 20.63.100.156:20250] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaVweJ9xbBq8VfeqVDbobgAAAMo"]
[Mon Mar 02 19:11:52.694116 2026] [:error] [pid 59602:tid 59675] [client 20.63.100.156:20302] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaVweDMtSo_Fr0lHnSY5ngAAAIo"]
[Mon Mar 02 19:11:53.115821 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20416] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaVweYQ5lE4yocV9IBcbiQAAAAM"]
[Mon Mar 02 19:11:53.532678 2026] [:error] [pid 28847:tid 28861] [client 20.63.100.156:20332] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-good.php"] [unique_id "aaVweZ9xbBq8VfeqVDbocAAAAMw"]
[Mon Mar 02 19:11:53.951058 2026] [:error] [pid 28847:tid 28856] [client 20.63.100.156:20392] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/images/signup_pad_classic.php"] [unique_id "aaVweZ9xbBq8VfeqVDbodAAAAMc"]
[Mon Mar 02 19:11:54.463476 2026] [:error] [pid 59734:tid 59749] [client 20.63.100.156:20349] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaVwepeWQx7ZQG9NybEFLQAAAU0"]
[Mon Mar 02 19:11:54.917283 2026] [:error] [pid 28847:tid 28869] [client 20.63.100.156:20328] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaVwep9xbBq8VfeqVDboeAAAANQ"]
[Mon Mar 02 19:11:55.511014 2026] [:error] [pid 28847:tid 28861] [client 20.63.100.156:20311] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/v2.php"] [unique_id "aaVwe59xbBq8VfeqVDboegAAAMw"]
[Mon Mar 02 19:11:56.061137 2026] [:error] [pid 59601:tid 59638] [client 20.63.100.156:20321] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaVwfMQ1lXfvWN0-ZQl60gAAAEA"]
[Mon Mar 02 19:11:56.500550 2026] [:error] [pid 59600:tid 59620] [client 20.63.100.156:20299] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaVwfIQ5lE4yocV9IBcbkQAAAAs"]
[Mon Mar 02 19:11:56.915730 2026] [:error] [pid 59602:tid 59676] [client 20.63.100.156:20350] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaVwfDMtSo_Fr0lHnSY5sQAAAIs"]
[Mon Mar 02 19:11:57.499606 2026] [:error] [pid 59600:tid 59614] [client 20.63.100.156:20176] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/class-ge.php"] [unique_id "aaVwfYQ5lE4yocV9IBcbmAAAAAU"]
[Mon Mar 02 19:11:58.011545 2026] [:error] [pid 59602:tid 59672] [client 20.63.100.156:20377] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/class-wp-https.php"] [unique_id "aaVwfjMtSo_Fr0lHnSY5uAAAAIc"]
[Mon Mar 02 19:11:58.550249 2026] [:error] [pid 28847:tid 28869] [client 20.63.100.156:20409] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/fonts/rawwp.php"] [unique_id "aaVwfp9xbBq8VfeqVDbofgAAANQ"]
[Mon Mar 02 19:11:59.327327 2026] [:error] [pid 28847:tid 28870] [client 20.63.100.156:20246] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaVwf59xbBq8VfeqVDbogAAAANU"]
[Mon Mar 02 19:11:59.927671 2026] [:error] [pid 28847:tid 28871] [client 20.63.100.156:20323] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaVwf59xbBq8VfeqVDbohAAAANY"]
[Mon Mar 02 19:12:00.485681 2026] [:error] [pid 28847:tid 28859] [client 20.63.100.156:20391] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaVwgJ9xbBq8VfeqVDbohgAAAMo"]
[Mon Mar 02 19:12:01.048162 2026] [:error] [pid 59602:tid 59689] [client 20.63.100.156:20251] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aaVwgTMtSo_Fr0lHnSY5xwAAAJg"]
[Mon Mar 02 19:12:01.514537 2026] [:error] [pid 59602:tid 59673] [client 20.63.100.156:20393] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/class-mail.php"] [unique_id "aaVwgTMtSo_Fr0lHnSY5ygAAAIg"]
[Mon Mar 02 19:12:02.028369 2026] [:error] [pid 59701:tid 59725] [client 20.63.100.156:20314] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaVwguUmTDVso96U9_K6WgAAARU"]
[Mon Mar 02 19:12:02.470706 2026] [:error] [pid 59600:tid 59617] [client 20.63.100.156:20257] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaVwgoQ5lE4yocV9IBcbogAAAAg"]
[Mon Mar 02 19:12:02.913088 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20309] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/uhuybro.php"] [unique_id "aaVwgoQ5lE4yocV9IBcbpAAAABI"]
[Mon Mar 02 19:12:03.389477 2026] [:error] [pid 59601:tid 59648] [client 20.63.100.156:20334] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaVwg8Q1lXfvWN0-ZQl61QAAAEo"]
[Mon Mar 02 19:12:03.847186 2026] [:error] [pid 59600:tid 59623] [client 20.63.100.156:20459] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaVwg4Q5lE4yocV9IBcbpgAAAA4"]
[Mon Mar 02 19:12:04.297266 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20330] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaVwhIQ5lE4yocV9IBcbqQAAAAQ"]
[Mon Mar 02 19:12:04.779331 2026] [:error] [pid 28847:tid 28858] [client 20.63.100.156:20338] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/footers.php"] [unique_id "aaVwhJ9xbBq8VfeqVDbonwAAAMk"]
[Mon Mar 02 19:12:05.221676 2026] [:error] [pid 59701:tid 59721] [client 20.63.100.156:20260] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaVwheUmTDVso96U9_K6XgAAARE"]
[Mon Mar 02 19:12:05.690402 2026] [:error] [pid 59602:tid 59681] [client 20.63.100.156:20415] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaVwhTMtSo_Fr0lHnSY53wAAAJA"]
[Mon Mar 02 19:12:06.257118 2026] [:error] [pid 28847:tid 28872] [client 20.63.100.156:20342] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaVwhp9xbBq8VfeqVDbopAAAANc"]
[Mon Mar 02 19:12:06.704406 2026] [:error] [pid 28847:tid 28860] [client 20.63.100.156:20406] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.well-known/icedknnv.php"] [unique_id "aaVwhp9xbBq8VfeqVDbopwAAAMs"]
[Mon Mar 02 19:12:07.258051 2026] [:error] [pid 59601:tid 59643] [client 20.63.100.156:20340] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaVwh8Q1lXfvWN0-ZQl61gAAAEU"]
[Mon Mar 02 19:12:07.681382 2026] [:error] [pid 59600:tid 59614] [client 20.63.100.156:20310] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaVwh4Q5lE4yocV9IBcbsgAAAAU"]
[Mon Mar 02 19:12:08.102627 2026] [:error] [pid 59701:tid 59723] [client 20.63.100.156:20303] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaVwiOUmTDVso96U9_K6ZAAAARM"]
[Mon Mar 02 19:12:08.525237 2026] [:error] [pid 59602:tid 59689] [client 20.63.100.156:20361] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/images/post_genprdt.php"] [unique_id "aaVwiDMtSo_Fr0lHnSY57AAAAJg"]
[Mon Mar 02 19:12:08.952266 2026] [:error] [pid 59602:tid 59673] [client 20.63.100.156:20316] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaVwiDMtSo_Fr0lHnSY57wAAAIg"]
[Mon Mar 02 19:12:09.427194 2026] [:error] [pid 59600:tid 59625] [client 20.63.100.156:20467] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaVwiYQ5lE4yocV9IBcbtQAAABA"]
[Mon Mar 02 19:12:09.936339 2026] [:error] [pid 59734:tid 59745] [client 20.63.100.156:20405] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaVwiZeWQx7ZQG9NybEFOgAAAUk"]
[Mon Mar 02 19:12:10.354511 2026] [:error] [pid 28847:tid 28856] [client 20.63.100.156:20477] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/5.php"] [unique_id "aaVwip9xbBq8VfeqVDbosgAAAMc"]
[Mon Mar 02 19:12:10.770155 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20224] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaVwioQ5lE4yocV9IBcbuQAAAAM"]
[Mon Mar 02 19:12:11.200755 2026] [:error] [pid 59600:tid 59611] [client 20.63.100.156:20339] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaVwi4Q5lE4yocV9IBcbvQAAAAI"]
[Mon Mar 02 19:12:11.663774 2026] [:error] [pid 59701:tid 59714] [client 20.63.100.156:20344] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaVwi-UmTDVso96U9_K6awAAAQo"]
[Mon Mar 02 19:12:12.084855 2026] [:error] [pid 59701:tid 59724] [client 20.63.100.156:20421] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/by.php"] [unique_id "aaVwjOUmTDVso96U9_K6bQAAARQ"]
[Mon Mar 02 19:12:12.636004 2026] [:error] [pid 59601:tid 59645] [client 20.63.100.156:20461] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaVwjMQ1lXfvWN0-ZQl63gAAAEc"]
[Mon Mar 02 19:12:13.065078 2026] [:error] [pid 59600:tid 59619] [client 20.63.100.156:20266] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaVwjYQ5lE4yocV9IBcbwAAAAAo"]
[Mon Mar 02 19:12:13.519787 2026] [:error] [pid 28847:tid 28869] [client 20.63.100.156:20351] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaVwjZ9xbBq8VfeqVDbotwAAANQ"]
[Mon Mar 02 19:12:14.084975 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20462] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/user-ajax.php"] [unique_id "aaVwjoQ5lE4yocV9IBcbwwAAAAQ"]
[Mon Mar 02 19:12:14.988294 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20233] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaVwjp9xbBq8VfeqVDbovgAAANE"]
[Mon Mar 02 19:12:15.771313 2026] [:error] [pid 28847:tid 28869] [client 20.63.100.156:20386] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaVwj59xbBq8VfeqVDbowgAAANQ"]
[Mon Mar 02 19:12:16.403530 2026] [:error] [pid 28847:tid 28856] [client 20.63.100.156:20231] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaVwkJ9xbBq8VfeqVDboxQAAAMc"]
[Mon Mar 02 19:12:16.845813 2026] [:error] [pid 59734:tid 59754] [client 20.63.100.156:20295] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/images/chati.php"] [unique_id "aaVwkJeWQx7ZQG9NybEFPwAAAVI"]
[Mon Mar 02 19:12:17.329946 2026] [:error] [pid 28847:tid 28868] [client 20.63.100.156:20247] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaVwkZ9xbBq8VfeqVDboyQAAANM"]
[Mon Mar 02 19:12:17.750184 2026] [:error] [pid 59701:tid 59721] [client 20.63.100.156:20410] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaVwkeUmTDVso96U9_K6dAAAARE"]
[Mon Mar 02 19:12:18.178776 2026] [:error] [pid 59701:tid 59714] [client 20.63.100.156:20172] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaVwkuUmTDVso96U9_K6dwAAAQo"]
[Mon Mar 02 19:12:18.653349 2026] [:error] [pid 59600:tid 59619] [client 20.63.100.156:20346] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "aaVwkoQ5lE4yocV9IBcbyQAAAAo"]
[Mon Mar 02 19:12:19.082295 2026] [:error] [pid 59602:tid 59666] [client 20.63.100.156:20281] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaVwkzMtSo_Fr0lHnSY6GAAAAIE"]
[Mon Mar 02 19:12:19.511167 2026] [:error] [pid 59600:tid 59614] [client 20.63.100.156:20317] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaVwk4Q5lE4yocV9IBcbzQAAAAU"]
[Mon Mar 02 19:12:19.959364 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20229] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaVwk4Q5lE4yocV9IBcbzgAAAAQ"]
[Mon Mar 02 19:12:20.372266 2026] [:error] [pid 59600:tid 59609] [client 20.63.100.156:20325] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gtc.php"] [unique_id "aaVwlIQ5lE4yocV9IBcb0wAAAAA"]
[Mon Mar 02 19:12:20.804929 2026] [:error] [pid 59600:tid 59619] [client 20.63.100.156:20450] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVwlIQ5lE4yocV9IBcb1gAAAAo"]
[Mon Mar 02 19:12:21.234076 2026] [:error] [pid 59600:tid 59630] [client 20.63.100.156:20285] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVwlYQ5lE4yocV9IBcb3AAAABU"]
[Mon Mar 02 19:12:21.702797 2026] [:error] [pid 59701:tid 59705] [client 20.63.100.156:20179] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVwleUmTDVso96U9_K6egAAAQE"]
[Mon Mar 02 19:12:22.194043 2026] [:error] [pid 59734:tid 59742] [client 20.63.100.156:20232] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVwlpeWQx7ZQG9NybEFRAAAAUY"]
[Mon Mar 02 19:12:22.613887 2026] [:error] [pid 59602:tid 59676] [client 20.63.100.156:20236] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaVwljMtSo_Fr0lHnSY6JgAAAIs"]
[Mon Mar 02 19:12:23.045699 2026] [:error] [pid 59734:tid 59738] [client 20.63.100.156:20272] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaVwl5eWQx7ZQG9NybEFRwAAAUI"]
[Mon Mar 02 19:12:23.554879 2026] [:error] [pid 59600:tid 59628] [client 20.63.100.156:20348] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaVwl4Q5lE4yocV9IBcb5AAAABM"]
[Mon Mar 02 19:12:23.977438 2026] [:error] [pid 59602:tid 59667] [client 20.63.100.156:20282] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aaVwlzMtSo_Fr0lHnSY6KAAAAII"]
[Mon Mar 02 19:12:24.391354 2026] [:error] [pid 59601:tid 59642] [client 20.63.100.156:20258] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaVwmMQ1lXfvWN0-ZQl66wAAAEQ"]
[Mon Mar 02 19:12:24.807491 2026] [:error] [pid 59602:tid 59674] [client 20.63.100.156:20378] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaVwmDMtSo_Fr0lHnSY6LQAAAIk"]
[Mon Mar 02 19:12:25.223197 2026] [:error] [pid 28847:tid 28871] [client 20.63.100.156:20103] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaVwmZ9xbBq8VfeqVDbo0gAAANY"]
[Mon Mar 02 19:12:25.642021 2026] [:error] [pid 59600:tid 59623] [client 20.63.100.156:20320] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaVwmYQ5lE4yocV9IBcb6AAAAA4"]
[Mon Mar 02 19:12:26.060884 2026] [:error] [pid 59602:tid 59671] [client 20.63.100.156:20267] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaVwmjMtSo_Fr0lHnSY6MAAAAIY"]
[Mon Mar 02 19:12:26.573557 2026] [:error] [pid 59602:tid 59670] [client 20.63.100.156:20227] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaVwmjMtSo_Fr0lHnSY6NAAAAIU"]
[Mon Mar 02 19:12:26.991407 2026] [:error] [pid 59600:tid 59614] [client 20.63.100.156:20279] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaVwmoQ5lE4yocV9IBcb7wAAAAU"]
[Mon Mar 02 19:12:27.408037 2026] [:error] [pid 59602:tid 59674] [client 20.63.100.156:20184] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xmrlpc.php"] [unique_id "aaVwmzMtSo_Fr0lHnSY6OgAAAIk"]
[Mon Mar 02 19:12:27.862608 2026] [:error] [pid 59602:tid 59682] [client 20.63.100.156:20304] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/123.php"] [unique_id "aaVwmzMtSo_Fr0lHnSY6PQAAAJE"]
[Mon Mar 02 19:12:28.333377 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20396] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/123.php"] [unique_id "aaVwnIQ5lE4yocV9IBcb9QAAABI"]
[Mon Mar 02 19:12:28.753836 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20412] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/123.php"] [unique_id "aaVwnIQ5lE4yocV9IBcb-gAAAAM"]
[Mon Mar 02 19:12:29.169927 2026] [:error] [pid 59600:tid 59614] [client 20.63.100.156:20319] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/123.php"] [unique_id "aaVwnYQ5lE4yocV9IBcb-wAAAAU"]
[Mon Mar 02 19:12:29.585721 2026] [:error] [pid 59701:tid 59711] [client 20.63.100.156:20388] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaVwneUmTDVso96U9_K6gQAAAQc"]
[Mon Mar 02 19:12:29.999081 2026] [:error] [pid 59600:tid 59609] [client 20.63.100.156:20238] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaVwnYQ5lE4yocV9IBcb_gAAAAA"]
[Mon Mar 02 19:12:30.445892 2026] [:error] [pid 59602:tid 59674] [client 20.63.100.156:20353] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaVwnjMtSo_Fr0lHnSY6RQAAAIk"]
[Mon Mar 02 19:12:30.977742 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20167] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z60.php"] [unique_id "aaVwnoQ5lE4yocV9IBccBQAAAAM"]
[Mon Mar 02 19:12:31.436455 2026] [:error] [pid 59601:tid 59659] [client 20.63.100.156:20265] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaVwn8Q1lXfvWN0-ZQl67QAAAFU"]
[Mon Mar 02 19:12:31.850989 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20264] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaVwn59xbBq8VfeqVDbo1QAAAM0"]
[Mon Mar 02 19:12:32.271850 2026] [:error] [pid 59701:tid 59720] [client 20.63.100.156:20244] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaVwoOUmTDVso96U9_K6iAAAARA"]
[Mon Mar 02 19:12:32.693154 2026] [:error] [pid 59600:tid 59623] [client 20.63.100.156:20335] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "aaVwoIQ5lE4yocV9IBccDAAAAA4"]
[Mon Mar 02 19:12:33.116796 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20235] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaVwoYQ5lE4yocV9IBccDgAAAAM"]
[Mon Mar 02 19:12:33.616264 2026] [:error] [pid 59734:tid 59749] [client 20.63.100.156:20278] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaVwoZeWQx7ZQG9NybEFVQAAAU0"]
[Mon Mar 02 19:12:34.036724 2026] [:error] [pid 28847:tid 28870] [client 20.63.100.156:20096] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaVwop9xbBq8VfeqVDbo1wAAANU"]
[Mon Mar 02 19:12:34.452226 2026] [:error] [pid 28847:tid 28855] [client 20.63.100.156:20287] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "aaVwop9xbBq8VfeqVDbo2QAAAMY"]
[Mon Mar 02 19:12:34.875764 2026] [:error] [pid 28847:tid 28865] [client 20.63.100.156:20226] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaVwop9xbBq8VfeqVDbo3gAAANA"]
[Mon Mar 02 19:12:35.326819 2026] [:error] [pid 59600:tid 59622] [client 20.63.100.156:20345] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaVwo4Q5lE4yocV9IBccFwAAAA0"]
[Mon Mar 02 19:12:35.756445 2026] [:error] [pid 28847:tid 28864] [client 20.63.100.156:20240] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaVwo59xbBq8VfeqVDbo5QAAAM8"]
[Mon Mar 02 19:12:36.182385 2026] [:error] [pid 59601:tid 59658] [client 20.63.100.156:20313] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "aaVwpMQ1lXfvWN0-ZQl67gAAAFQ"]
[Mon Mar 02 19:12:36.641756 2026] [:error] [pid 59701:tid 59719] [client 20.63.100.156:20181] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaVwpOUmTDVso96U9_K6iQAAAQ8"]
[Mon Mar 02 19:12:37.059074 2026] [:error] [pid 28847:tid 28853] [client 20.63.100.156:20312] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaVwpZ9xbBq8VfeqVDbo6AAAAMQ"]
[Mon Mar 02 19:12:37.480040 2026] [:error] [pid 28847:tid 28852] [client 20.63.100.156:20324] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaVwpZ9xbBq8VfeqVDbo6QAAAMM"]
[Mon Mar 02 19:12:37.904951 2026] [:error] [pid 59602:tid 59670] [client 20.63.100.156:20200] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "aaVwpTMtSo_Fr0lHnSY6TgAAAIU"]
[Mon Mar 02 19:12:38.539705 2026] [:error] [pid 59602:tid 59688] [client 20.63.100.156:20254] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaVwpjMtSo_Fr0lHnSY6UQAAAJc"]
[Mon Mar 02 19:12:39.842345 2026] [:error] [pid 59734:tid 59749] [client 20.63.100.156:20166] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaVwp5eWQx7ZQG9NybEFXwAAAU0"]
[Mon Mar 02 19:12:40.264333 2026] [:error] [pid 59602:tid 59687] [client 20.63.100.156:20170] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaVwqDMtSo_Fr0lHnSY6VgAAAJY"]
[Mon Mar 02 19:12:40.829832 2026] [:error] [pid 59701:tid 59725] [client 20.63.100.156:20163] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "aaVwqOUmTDVso96U9_K6kQAAARU"]
[Mon Mar 02 19:12:41.245876 2026] [:error] [pid 59734:tid 59759] [client 20.63.100.156:20284] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaVwqZeWQx7ZQG9NybEFZAAAAVc"]
[Mon Mar 02 19:12:41.664462 2026] [:error] [pid 59600:tid 59632] [client 20.63.100.156:20262] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaVwqYQ5lE4yocV9IBccGgAAABc"]
[Mon Mar 02 19:12:42.129686 2026] [:error] [pid 59600:tid 59621] [client 20.63.100.156:20199] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaVwqoQ5lE4yocV9IBccHgAAAAw"]
[Mon Mar 02 19:12:42.543871 2026] [:error] [pid 59600:tid 59622] [client 20.63.100.156:20249] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aaVwqoQ5lE4yocV9IBccIAAAAA0"]
[Mon Mar 02 19:12:42.961990 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20201] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaVwqoQ5lE4yocV9IBccIgAAABI"]
[Mon Mar 02 19:12:43.392976 2026] [:error] [pid 59601:tid 59655] [client 20.63.100.156:20241] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaVwq8Q1lXfvWN0-ZQl69QAAAFE"]
[Mon Mar 02 19:12:43.815426 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20207] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaVwq4Q5lE4yocV9IBccJAAAAAM"]
[Mon Mar 02 19:12:44.263930 2026] [:error] [pid 59602:tid 59680] [client 20.63.100.156:20296] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaVwrDMtSo_Fr0lHnSY6WgAAAI8"]
[Mon Mar 02 19:12:44.694929 2026] [:error] [pid 59734:tid 59758] [client 20.63.100.156:20174] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "aaVwrJeWQx7ZQG9NybEFagAAAVY"]
[Mon Mar 02 19:12:45.115544 2026] [:error] [pid 59600:tid 59611] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Mon Mar 02 19:12:45.326201 2026] [:error] [pid 59600:tid 59630] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Mon Mar 02 19:12:45.634905 2026] [:error] [pid 59600:tid 59609] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Mar 02 19:12:46.889846 2026] [:error] [pid 59600:tid 59609] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Mon Mar 02 19:12:47.097329 2026] [:error] [pid 59600:tid 59622] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Mon Mar 02 19:12:47.314407 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Mar 02 19:12:47.524274 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Mon Mar 02 19:12:47.732977 2026] [:error] [pid 59600:tid 59611] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Mon Mar 02 19:12:47.941874 2026] [:error] [pid 59600:tid 59610] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Mon Mar 02 19:12:48.149467 2026] [:error] [pid 59600:tid 59629] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Mar 02 19:12:48.495237 2026] [:error] [pid 59600:tid 59616] [client 20.63.100.156:20273] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Mon Mar 02 19:12:48.700566 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20273] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaVwsIQ5lE4yocV9IBccPQAAABI"]
[Mon Mar 02 19:12:49.154704 2026] [:error] [pid 59602:tid 59685] [client 20.63.100.156:20126] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaVwsTMtSo_Fr0lHnSY6YAAAAJQ"]
[Mon Mar 02 19:12:49.595211 2026] [:error] [pid 59602:tid 59665] [client 20.63.100.156:20169] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaVwsTMtSo_Fr0lHnSY6YQAAAIA"]
[Mon Mar 02 19:12:50.148613 2026] [:error] [pid 59602:tid 59687] [client 20.63.100.156:20326] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccou.php"] [unique_id "aaVwsjMtSo_Fr0lHnSY6YgAAAJY"]
[Mon Mar 02 19:12:50.572103 2026] [:error] [pid 59600:tid 59610] [client 20.63.100.156:20411] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaVwsoQ5lE4yocV9IBccQgAAAAE"]
[Mon Mar 02 19:12:51.087363 2026] [:error] [pid 28847:tid 28859] [client 20.63.100.156:20305] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaVws59xbBq8VfeqVDbpAAAAAMo"]
[Mon Mar 02 19:12:51.578328 2026] [:error] [pid 28847:tid 28864] [client 20.63.100.156:20162] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaVws59xbBq8VfeqVDbpAgAAAM8"]
[Mon Mar 02 19:12:52.225844 2026] [:error] [pid 59602:tid 59674] [client 20.63.100.156:20192] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/readme.php"] [unique_id "aaVwtDMtSo_Fr0lHnSY6ZgAAAIk"]
[Mon Mar 02 19:12:52.876337 2026] [:error] [pid 59602:tid 59681] [client 20.63.100.156:20152] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaVwtDMtSo_Fr0lHnSY6ZwAAAJA"]
[Mon Mar 02 19:12:53.437921 2026] [:error] [pid 28847:tid 28855] [client 20.63.100.156:20261] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaVwtZ9xbBq8VfeqVDbpCAAAAMY"]
[Mon Mar 02 19:12:54.006158 2026] [:error] [pid 28847:tid 28850] [client 20.63.100.156:20110] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaVwtp9xbBq8VfeqVDbpCgAAAME"]
[Mon Mar 02 19:12:54.456469 2026] [:error] [pid 59602:tid 59685] [client 20.63.100.156:20381] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file7.php"] [unique_id "aaVwtjMtSo_Fr0lHnSY6agAAAJQ"]
[Mon Mar 02 19:12:54.872688 2026] [:error] [pid 28847:tid 28860] [client 20.63.100.156:20300] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aaVwtp9xbBq8VfeqVDbpDwAAAMs"]
[Mon Mar 02 19:12:55.306754 2026] [:error] [pid 59701:tid 59723] [client 20.63.100.156:20122] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aaVwt-UmTDVso96U9_K6nQAAARM"]
[Mon Mar 02 19:12:56.740070 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20234] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aaVwuJ9xbBq8VfeqVDbpGQAAANE"]
[Mon Mar 02 19:12:57.154634 2026] [:error] [pid 59734:tid 59760] [client 20.63.100.156:20208] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x.php"] [unique_id "aaVwuZeWQx7ZQG9NybEFdQAAAVg"]
[Mon Mar 02 19:12:57.576794 2026] [:error] [pid 59600:tid 59620] [client 20.63.100.156:20270] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "aaVwuYQ5lE4yocV9IBccUAAAAAs"]
[Mon Mar 02 19:12:57.989530 2026] [:error] [pid 28847:tid 28870] [client 20.63.100.156:20188] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "aaVwuZ9xbBq8VfeqVDbpHgAAANU"]
[Mon Mar 02 19:12:58.413919 2026] [:error] [pid 59600:tid 59631] [client 20.63.100.156:20283] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "aaVwuoQ5lE4yocV9IBccUgAAABY"]
[Mon Mar 02 19:12:58.873933 2026] [:error] [pid 28847:tid 28860] [client 20.63.100.156:20211] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "aaVwup9xbBq8VfeqVDbpIwAAAMs"]
[Mon Mar 02 19:13:00.730233 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20259] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaVwvJ9xbBq8VfeqVDbpLQAAANE"]
[Mon Mar 02 19:13:01.225752 2026] [:error] [pid 59734:tid 59745] [client 20.63.100.156:20318] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaVwvZeWQx7ZQG9NybEFfAAAAUk"]
[Mon Mar 02 19:13:01.986902 2026] [:error] [pid 59602:tid 59683] [client 20.63.100.156:20099] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaVwvTMtSo_Fr0lHnSY6cQAAAJI"]
[Mon Mar 02 19:13:02.407121 2026] [:error] [pid 28847:tid 28857] [client 20.63.100.156:20269] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "aaVwvp9xbBq8VfeqVDbpMwAAAMg"]
[Mon Mar 02 19:13:02.863632 2026] [:error] [pid 59701:tid 59708] [client 20.63.100.156:20255] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/install.php"] [unique_id "aaVwvuUmTDVso96U9_K6nwAAAQQ"]
[Mon Mar 02 19:13:03.278909 2026] [:error] [pid 59734:tid 59740] [client 20.63.100.156:20248] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/install.php"] [unique_id "aaVwv5eWQx7ZQG9NybEFgQAAAUQ"]
[Mon Mar 02 19:13:03.706633 2026] [:error] [pid 59600:tid 59610] [client 20.63.100.156:20252] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/install.php"] [unique_id "aaVwv4Q5lE4yocV9IBccVQAAAAE"]
[Mon Mar 02 19:13:04.143969 2026] [:error] [pid 59602:tid 59678] [client 20.63.100.156:20180] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/install.php"] [unique_id "aaVwwDMtSo_Fr0lHnSY6dQAAAI0"]
[Mon Mar 02 19:13:04.691082 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20038] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaVwwIQ5lE4yocV9IBccVwAAABI"]
[Mon Mar 02 19:13:05.239678 2026] [:error] [pid 59600:tid 59615] [client 20.63.100.156:20263] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/click.php"] [unique_id "aaVwwYQ5lE4yocV9IBccWQAAAAY"]
[Mon Mar 02 19:13:05.687630 2026] [:error] [pid 59701:tid 59720] [client 20.63.100.156:20109] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/click.php"] [unique_id "aaVwweUmTDVso96U9_K6oQAAARA"]
[Mon Mar 02 19:13:06.197944 2026] [:error] [pid 59701:tid 59717] [client 20.63.100.156:20290] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/click.php"] [unique_id "aaVwwuUmTDVso96U9_K6ogAAAQ0"]
[Mon Mar 02 19:13:06.661952 2026] [:error] [pid 59734:tid 59737] [client 20.63.100.156:20123] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/click.php"] [unique_id "aaVwwpeWQx7ZQG9NybEFjQAAAUE"]
[Mon Mar 02 19:13:07.112228 2026] [:error] [pid 59602:tid 59680] [client 20.63.100.156:20237] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVwwzMtSo_Fr0lHnSY6egAAAI8"]
[Mon Mar 02 19:13:07.649323 2026] [:error] [pid 28847:tid 28860] [client 20.63.100.156:20245] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVww59xbBq8VfeqVDbpPAAAAMs"]
[Mon Mar 02 19:13:08.110176 2026] [:error] [pid 59601:tid 59662] [client 20.63.100.156:20175] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVwxMQ1lXfvWN0-ZQl6_wAAAFg"]
[Mon Mar 02 19:13:08.666432 2026] [:error] [pid 28847:tid 28852] [client 20.63.100.156:20347] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "aaVwxJ9xbBq8VfeqVDbpQAAAAMM"]
[Mon Mar 02 19:13:09.176963 2026] [:error] [pid 28847:tid 28851] [client 20.63.100.156:20137] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaVwxZ9xbBq8VfeqVDbpRQAAAMI"]
[Mon Mar 02 19:13:09.710946 2026] [:error] [pid 59601:tid 59661] [client 20.63.100.156:20271] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaVwxcQ1lXfvWN0-ZQl7AAAAAFc"]
[Mon Mar 02 19:13:10.164145 2026] [:error] [pid 59734:tid 59756] [client 20.63.100.156:20113] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaVwxpeWQx7ZQG9NybEFkAAAAVQ"]
[Mon Mar 02 19:13:10.688576 2026] [:error] [pid 59602:tid 59685] [client 20.63.100.156:20256] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "aaVwxjMtSo_Fr0lHnSY6fwAAAJQ"]
[Mon Mar 02 19:13:11.194250 2026] [:error] [pid 59600:tid 59631] [client 20.63.100.156:20193] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaVwx4Q5lE4yocV9IBccaQAAABY"]
[Mon Mar 02 19:13:11.858033 2026] [:error] [pid 28847:tid 28855] [client 20.63.100.156:20205] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaVwx59xbBq8VfeqVDbpUgAAAMY"]
[Mon Mar 02 19:13:12.467252 2026] [:error] [pid 28847:tid 28869] [client 20.63.100.156:20164] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaVwyJ9xbBq8VfeqVDbpVQAAANQ"]
[Mon Mar 02 19:13:12.978247 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20168] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "aaVwyJ9xbBq8VfeqVDbpXQAAANE"]
[Mon Mar 02 19:13:13.986708 2026] [:error] [pid 28847:tid 28868] [client 20.63.100.156:20177] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaVwyZ9xbBq8VfeqVDbpYQAAANM"]
[Mon Mar 02 19:13:14.537660 2026] [:error] [pid 59734:tid 59741] [client 20.63.100.156:20161] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaVwypeWQx7ZQG9NybEFlgAAAUU"]
[Mon Mar 02 19:13:14.968924 2026] [:error] [pid 59734:tid 59753] [client 20.63.100.156:20277] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaVwypeWQx7ZQG9NybEFmAAAAVE"]
[Mon Mar 02 19:13:15.382336 2026] [:error] [pid 59734:tid 59746] [client 20.63.100.156:20115] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "aaVwy5eWQx7ZQG9NybEFmQAAAUo"]
[Mon Mar 02 19:13:15.810034 2026] [:error] [pid 59602:tid 59674] [client 20.63.100.156:20108] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaVwyzMtSo_Fr0lHnSY6hAAAAIk"]
[Mon Mar 02 19:13:16.240614 2026] [:error] [pid 28847:tid 28859] [client 20.63.100.156:20222] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaVwzJ9xbBq8VfeqVDbpaAAAAMo"]
[Mon Mar 02 19:13:16.662355 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20214] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaVwzIQ5lE4yocV9IBcccAAAAAQ"]
[Mon Mar 02 19:13:17.278056 2026] [:error] [pid 59602:tid 59679] [client 20.63.100.156:20105] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "aaVwzTMtSo_Fr0lHnSY6hwAAAI4"]
[Mon Mar 02 19:13:18.140907 2026] [:error] [pid 59602:tid 59677] [client 20.63.100.156:20322] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaVwzjMtSo_Fr0lHnSY6iQAAAIw"]
[Mon Mar 02 19:13:18.829122 2026] [:error] [pid 59600:tid 59610] [client 20.63.100.156:20142] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaVwzoQ5lE4yocV9IBccdgAAAAE"]
[Mon Mar 02 19:13:19.289351 2026] [:error] [pid 59600:tid 59631] [client 20.63.100.156:20327] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaVwz4Q5lE4yocV9IBccegAAABY"]
[Mon Mar 02 19:13:19.726473 2026] [:error] [pid 59734:tid 59737] [client 20.63.100.156:20102] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/04.php"] [unique_id "aaVwz5eWQx7ZQG9NybEFnAAAAUE"]
[Mon Mar 02 19:13:20.657535 2026] [:error] [pid 59734:tid 59736] [client 20.63.100.156:20223] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaVw0JeWQx7ZQG9NybEFngAAAUA"]
[Mon Mar 02 19:13:21.187474 2026] [:error] [pid 59734:tid 59752] [client 20.63.100.156:20160] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaVw0ZeWQx7ZQG9NybEFpAAAAVA"]
[Mon Mar 02 19:13:21.811932 2026] [:error] [pid 59601:tid 59662] [client 20.63.100.156:20275] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaVw0cQ1lXfvWN0-ZQl7DwAAAFg"]
[Mon Mar 02 19:13:22.679121 2026] [:error] [pid 59601:tid 59655] [client 20.63.100.156:20190] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file9.php"] [unique_id "aaVw0sQ1lXfvWN0-ZQl7EgAAAFE"]
[Mon Mar 02 19:13:23.218612 2026] [:error] [pid 59601:tid 59661] [client 20.63.100.156:20333] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaVw08Q1lXfvWN0-ZQl7EwAAAFc"]
[Mon Mar 02 19:13:23.702549 2026] [:error] [pid 59600:tid 59632] [client 20.63.100.156:20276] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaVw04Q5lE4yocV9IBccgwAAABc"]
[Mon Mar 02 19:13:24.171916 2026] [:error] [pid 59701:tid 59714] [client 20.63.100.156:20280] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaVw1OUmTDVso96U9_K6swAAAQo"]
[Mon Mar 02 19:13:24.589504 2026] [:error] [pid 59600:tid 59621] [client 20.63.100.156:20182] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/as.php"] [unique_id "aaVw1IQ5lE4yocV9IBcchgAAAAw"]
[Mon Mar 02 19:13:25.073549 2026] [:error] [pid 59600:tid 59624] [client 20.63.100.156:20130] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaVw1YQ5lE4yocV9IBcciQAAAA8"]
[Mon Mar 02 19:13:25.569464 2026] [:error] [pid 59701:tid 59718] [client 20.63.100.156:20198] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaVw1eUmTDVso96U9_K6tAAAAQ4"]
[Mon Mar 02 19:13:25.981715 2026] [:error] [pid 59600:tid 59626] [client 20.63.100.156:20243] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaVw1YQ5lE4yocV9IBcckAAAABE"]
[Mon Mar 02 19:13:26.563322 2026] [:error] [pid 59701:tid 59715] [client 20.63.100.156:20046] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ac.php"] [unique_id "aaVw1uUmTDVso96U9_K6tgAAAQs"]
[Mon Mar 02 19:13:27.127980 2026] [:error] [pid 59600:tid 59633] [client 20.63.100.156:20189] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "aaVw14Q5lE4yocV9IBcclwAAABg"]
[Mon Mar 02 19:13:27.559025 2026] [:error] [pid 28847:tid 28872] [client 20.63.100.156:20374] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "aaVw159xbBq8VfeqVDbpdgAAANc"]
[Mon Mar 02 19:13:28.010176 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20195] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "aaVw2J9xbBq8VfeqVDbpfQAAANE"]
[Mon Mar 02 19:13:28.543843 2026] [:error] [pid 28847:tid 28870] [client 20.63.100.156:20052] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "aaVw2J9xbBq8VfeqVDbpjQAAANU"]
[Mon Mar 02 19:13:29.134293 2026] [:error] [pid 28847:tid 28867] [client 20.63.100.156:20112] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rh.php"] [unique_id "aaVw2Z9xbBq8VfeqVDbplAAAANI"]
[Mon Mar 02 19:13:29.561432 2026] [:error] [pid 59600:tid 59616] [client 20.63.100.156:20212] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rh.php"] [unique_id "aaVw2YQ5lE4yocV9IBccpgAAAAc"]
[Mon Mar 02 19:13:29.978090 2026] [:error] [pid 59734:tid 59752] [client 20.63.100.156:20183] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rh.php"] [unique_id "aaVw2ZeWQx7ZQG9NybEFqQAAAVA"]
[Mon Mar 02 19:13:30.407489 2026] [:error] [pid 59600:tid 59632] [client 20.63.100.156:20216] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rh.php"] [unique_id "aaVw2oQ5lE4yocV9IBccqQAAABc"]
[Mon Mar 02 19:13:30.840434 2026] [:error] [pid 59734:tid 59759] [client 20.63.100.156:20341] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaVw2peWQx7ZQG9NybEFqwAAAVc"]
[Mon Mar 02 19:13:31.281521 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20253] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaVw24Q5lE4yocV9IBccqgAAABI"]
[Mon Mar 02 19:13:31.700474 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20165] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaVw259xbBq8VfeqVDbpnwAAANE"]
[Mon Mar 02 19:13:32.155834 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20140] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aaVw3J9xbBq8VfeqVDbpoQAAAM0"]
[Mon Mar 02 19:13:32.573319 2026] [:error] [pid 59602:tid 59678] [client 20.63.100.156:20111] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaVw3DMtSo_Fr0lHnSY6kwAAAI0"]
[Mon Mar 02 19:13:33.044229 2026] [:error] [pid 59600:tid 59629] [client 20.63.100.156:20120] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaVw3YQ5lE4yocV9IBccsgAAABQ"]
[Mon Mar 02 19:13:33.465228 2026] [:error] [pid 28847:tid 28869] [client 20.63.100.156:20194] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaVw3Z9xbBq8VfeqVDbppAAAANQ"]
[Mon Mar 02 19:13:33.959573 2026] [:error] [pid 59602:tid 59688] [client 20.63.100.156:20201] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/az.php"] [unique_id "aaVw3TMtSo_Fr0lHnSY6lgAAAJc"]
[Mon Mar 02 19:13:34.448092 2026] [:error] [pid 59602:tid 59668] [client 20.63.100.156:20125] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaVw3jMtSo_Fr0lHnSY6mQAAAIM"]
[Mon Mar 02 19:13:34.959008 2026] [:error] [pid 59602:tid 59669] [client 20.63.100.156:20194] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaVw3jMtSo_Fr0lHnSY6nAAAAIQ"]
[Mon Mar 02 19:13:35.381593 2026] [:error] [pid 59602:tid 59680] [client 20.63.100.156:20185] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaVw3zMtSo_Fr0lHnSY6ngAAAI8"]
[Mon Mar 02 19:13:35.842559 2026] [:error] [pid 59600:tid 59617] [client 20.63.100.156:20315] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "aaVw34Q5lE4yocV9IBcctQAAAAg"]
[Mon Mar 02 19:13:36.271215 2026] [:error] [pid 59602:tid 59686] [client 20.63.100.156:20049] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/333.php"] [unique_id "aaVw4DMtSo_Fr0lHnSY6nwAAAJU"]
[Mon Mar 02 19:13:36.723990 2026] [:error] [pid 59600:tid 59626] [client 20.63.100.156:20187] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/333.php"] [unique_id "aaVw4IQ5lE4yocV9IBcctgAAABE"]
[Mon Mar 02 19:13:37.137929 2026] [:error] [pid 59602:tid 59672] [client 20.63.100.156:20191] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/333.php"] [unique_id "aaVw4TMtSo_Fr0lHnSY6ogAAAIc"]
[Mon Mar 02 19:13:37.563755 2026] [:error] [pid 59601:tid 59651] [client 20.63.100.156:20225] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/333.php"] [unique_id "aaVw4cQ1lXfvWN0-ZQl7KAAAAE0"]
[Mon Mar 02 19:13:37.987882 2026] [:error] [pid 59734:tid 59757] [client 20.63.100.156:20128] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zfile.php"] [unique_id "aaVw4ZeWQx7ZQG9NybEFsgAAAVU"]
[Mon Mar 02 19:13:38.516702 2026] [:error] [pid 59601:tid 59638] [client 20.63.100.156:20042] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zfile.php"] [unique_id "aaVw4sQ1lXfvWN0-ZQl7KwAAAEA"]
[Mon Mar 02 19:13:38.945941 2026] [:error] [pid 59601:tid 59657] [client 20.63.100.156:20118] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zfile.php"] [unique_id "aaVw4sQ1lXfvWN0-ZQl7LgAAAFM"]
[Mon Mar 02 19:13:39.450030 2026] [:error] [pid 59701:tid 59713] [client 20.63.100.156:20204] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zfile.php"] [unique_id "aaVw4-UmTDVso96U9_K65QAAAQk"]
[Mon Mar 02 19:13:40.069521 2026] [:error] [pid 28847:tid 28861] [client 20.63.100.156:20337] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaVw5J9xbBq8VfeqVDbprQAAAMw"]
[Mon Mar 02 19:13:40.758365 2026] [:error] [pid 28847:tid 28852] [client 20.63.100.156:20032] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaVw5J9xbBq8VfeqVDbprwAAAMM"]
[Mon Mar 02 19:13:41.227727 2026] [:error] [pid 59602:tid 59671] [client 20.63.100.156:20203] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaVw5TMtSo_Fr0lHnSY6pgAAAIY"]
[Mon Mar 02 19:13:41.763220 2026] [:error] [pid 59602:tid 59679] [client 20.63.100.156:20459] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "aaVw5TMtSo_Fr0lHnSY6qAAAAI4"]
[Mon Mar 02 19:13:42.206616 2026] [:error] [pid 59734:tid 59759] [client 20.63.100.156:20098] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/321.php"] [unique_id "aaVw5peWQx7ZQG9NybEFtgAAAVc"]
[Mon Mar 02 19:13:42.621686 2026] [:error] [pid 59734:tid 59746] [client 20.63.100.156:20127] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/321.php"] [unique_id "aaVw5peWQx7ZQG9NybEFuAAAAUo"]
[Mon Mar 02 19:13:43.085271 2026] [:error] [pid 59600:tid 59609] [client 20.63.100.156:20134] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/321.php"] [unique_id "aaVw54Q5lE4yocV9IBccwgAAAAA"]
[Mon Mar 02 19:13:43.498675 2026] [:error] [pid 59601:tid 59651] [client 20.63.100.156:20149] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/321.php"] [unique_id "aaVw58Q1lXfvWN0-ZQl7OAAAAE0"]
[Mon Mar 02 19:13:43.916264 2026] [:error] [pid 28847:tid 28867] [client 20.63.100.156:20146] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "aaVw559xbBq8VfeqVDbpswAAANI"]
[Mon Mar 02 19:13:44.422677 2026] [:error] [pid 59600:tid 59629] [client 20.63.100.156:20239] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "aaVw6IQ5lE4yocV9IBccxwAAABQ"]
[Mon Mar 02 19:13:44.918500 2026] [:error] [pid 28847:tid 28865] [client 20.63.100.156:20173] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "aaVw6J9xbBq8VfeqVDbptgAAANA"]
[Mon Mar 02 19:13:45.365277 2026] [:error] [pid 28847:tid 28852] [client 20.63.100.156:20150] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "aaVw6Z9xbBq8VfeqVDbpuwAAAMM"]
[Mon Mar 02 19:13:45.835965 2026] [:error] [pid 28847:tid 28872] [client 20.63.100.156:20068] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ant.php"] [unique_id "aaVw6Z9xbBq8VfeqVDbpwAAAANc"]
[Mon Mar 02 19:13:46.251308 2026] [:error] [pid 59701:tid 59705] [client 20.63.100.156:20147] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ant.php"] [unique_id "aaVw6uUmTDVso96U9_K68gAAAQE"]
[Mon Mar 02 19:13:46.765070 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20063] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ant.php"] [unique_id "aaVw6p9xbBq8VfeqVDbpxQAAAM0"]
[Mon Mar 02 19:13:56.203536 2026] [:error] [pid 28847:tid 28865] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Mon Mar 02 19:13:56.411885 2026] [:error] [pid 28847:tid 28858] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Mon Mar 02 19:13:56.619930 2026] [:error] [pid 28847:tid 28851] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Mon Mar 02 19:13:56.833019 2026] [:error] [pid 28847:tid 28864] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Mon Mar 02 19:13:57.085278 2026] [:error] [pid 28847:tid 28871] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Mon Mar 02 19:13:57.293746 2026] [:error] [pid 28847:tid 28849] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Mon Mar 02 19:13:57.565588 2026] [:error] [pid 28847:tid 28852] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Mon Mar 02 19:13:57.774278 2026] [:error] [pid 28847:tid 28855] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Mon Mar 02 19:13:57.982430 2026] [:error] [pid 28847:tid 28854] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Mon Mar 02 19:13:58.189957 2026] [:error] [pid 28847:tid 28866] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Mon Mar 02 19:13:58.399026 2026] [:error] [pid 28847:tid 28849] [client 20.63.100.156:20141] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Mon Mar 02 19:13:58.604438 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20141] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "aaVw9p9xbBq8VfeqVDbp-wAAAM0"]
[Mon Mar 02 19:14:00.098378 2026] [:error] [pid 59602:tid 59669] [client 20.63.100.156:20202] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "aaVw-DMtSo_Fr0lHnSY6uwAAAIQ"]
[Mon Mar 02 19:14:00.708211 2026] [:error] [pid 59602:tid 59680] [client 20.63.100.156:20095] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "aaVw-DMtSo_Fr0lHnSY6wAAAAI8"]
[Mon Mar 02 19:14:01.170112 2026] [:error] [pid 59601:tid 59643] [client 20.63.100.156:20242] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "aaVw-cQ1lXfvWN0-ZQl7TgAAAEU"]
[Mon Mar 02 19:14:01.678687 2026] [:error] [pid 59600:tid 59613] [client 20.63.100.156:20062] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaVw-YQ5lE4yocV9IBcc3wAAAAQ"]
[Mon Mar 02 19:14:02.179992 2026] [:error] [pid 59600:tid 59615] [client 20.63.100.156:20155] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaVw-oQ5lE4yocV9IBcc4gAAAAY"]
[Mon Mar 02 19:14:02.654228 2026] [:error] [pid 59600:tid 59616] [client 20.63.100.156:20055] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaVw-oQ5lE4yocV9IBcc5QAAAAc"]
[Mon Mar 02 19:14:03.204207 2026] [:error] [pid 28847:tid 28850] [client 20.63.100.156:20114] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aaVw-59xbBq8VfeqVDbqEAAAAME"]
[Mon Mar 02 19:14:03.689766 2026] [:error] [pid 59701:tid 59721] [client 20.63.100.156:20044] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaVw--UmTDVso96U9_K6_gAAARE"]
[Mon Mar 02 19:14:04.149621 2026] [:error] [pid 59600:tid 59627] [client 20.63.100.156:20145] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaVw_IQ5lE4yocV9IBcc6QAAABI"]
[Mon Mar 02 19:14:04.575406 2026] [:error] [pid 59600:tid 59610] [client 20.63.100.156:20213] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaVw_IQ5lE4yocV9IBcc6gAAAAE"]
[Mon Mar 02 19:14:04.999569 2026] [:error] [pid 59600:tid 59615] [client 20.63.100.156:20043] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aaVw_IQ5lE4yocV9IBcc7QAAAAY"]
[Mon Mar 02 19:14:05.447609 2026] [:error] [pid 59600:tid 59633] [client 20.63.100.156:20217] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aaVw_YQ5lE4yocV9IBcc8AAAABg"]
[Mon Mar 02 19:14:05.873345 2026] [:error] [pid 59701:tid 59715] [client 20.63.100.156:20056] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aaVw_eUmTDVso96U9_K7AQAAAQs"]
[Mon Mar 02 19:14:06.296400 2026] [:error] [pid 59602:tid 59689] [client 20.63.100.156:20206] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aaVw_jMtSo_Fr0lHnSY6yAAAAJg"]
[Mon Mar 02 19:14:06.726537 2026] [:error] [pid 59734:tid 59758] [client 20.63.100.156:20209] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aaVw_peWQx7ZQG9NybEFywAAAVY"]
[Mon Mar 02 19:14:07.252189 2026] [:error] [pid 28847:tid 28854] [client 20.63.100.156:20101] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaVw_59xbBq8VfeqVDbqFgAAAMU"]
[Mon Mar 02 19:14:07.673312 2026] [:error] [pid 59701:tid 59706] [client 20.63.100.156:20058] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaVw_-UmTDVso96U9_K7BAAAAQI"]
[Mon Mar 02 19:14:08.106563 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20048] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaVxAJ9xbBq8VfeqVDbqHgAAAM0"]
[Mon Mar 02 19:14:08.533285 2026] [:error] [pid 28847:tid 28859] [client 20.63.100.156:20136] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaVxAJ9xbBq8VfeqVDbqIQAAAMo"]
[Mon Mar 02 19:14:08.986016 2026] [:error] [pid 59600:tid 59620] [client 20.63.100.156:20054] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaVxAIQ5lE4yocV9IBcc8gAAAAs"]
[Mon Mar 02 19:14:09.409539 2026] [:error] [pid 59734:tid 59753] [client 20.63.100.156:20286] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaVxAZeWQx7ZQG9NybEFzwAAAVE"]
[Mon Mar 02 19:14:09.951188 2026] [:error] [pid 28847:tid 28870] [client 20.63.100.156:20104] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaVxAZ9xbBq8VfeqVDbqJwAAANU"]
[Mon Mar 02 19:14:10.369347 2026] [:error] [pid 59734:tid 59745] [client 20.63.100.156:20117] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aaVxApeWQx7ZQG9NybEF0AAAAUk"]
[Mon Mar 02 19:14:10.806501 2026] [:error] [pid 59602:tid 59667] [client 20.63.100.156:20230] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/520.php"] [unique_id "aaVxAjMtSo_Fr0lHnSY60AAAAII"]
[Mon Mar 02 19:14:11.235400 2026] [:error] [pid 59701:tid 59723] [client 20.63.100.156:20094] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/520.php"] [unique_id "aaVxA-UmTDVso96U9_K7CQAAARM"]
[Mon Mar 02 19:14:11.652000 2026] [:error] [pid 28847:tid 28860] [client 20.63.100.156:20218] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/520.php"] [unique_id "aaVxA59xbBq8VfeqVDbqLAAAAMs"]
[Mon Mar 02 19:14:12.596220 2026] [:error] [pid 28847:tid 28855] [client 20.63.100.156:20274] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/520.php"] [unique_id "aaVxBJ9xbBq8VfeqVDbqMAAAAMY"]
[Mon Mar 02 19:14:13.418867 2026] [:error] [pid 28847:tid 28862] [client 20.63.100.156:20106] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/security.php"] [unique_id "aaVxBZ9xbBq8VfeqVDbqNAAAAM0"]
[Mon Mar 02 19:14:14.218342 2026] [:error] [pid 59602:tid 59671] [client 20.63.100.156:20119] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/security.php"] [unique_id "aaVxBjMtSo_Fr0lHnSY62QAAAIY"]
[Mon Mar 02 19:14:14.828774 2026] [:error] [pid 59734:tid 59749] [client 20.63.100.156:19972] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/security.php"] [unique_id "aaVxBpeWQx7ZQG9NybEF1QAAAU0"]
[Mon Mar 02 19:14:15.325125 2026] [:error] [pid 59734:tid 59754] [client 20.63.100.156:20138] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/security.php"] [unique_id "aaVxB5eWQx7ZQG9NybEF1gAAAVI"]
[Mon Mar 02 19:14:15.844176 2026] [:error] [pid 28847:tid 28851] [client 20.63.100.156:20148] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aaVxB59xbBq8VfeqVDbqPgAAAMI"]
[Mon Mar 02 19:14:16.307204 2026] [:error] [pid 59601:tid 59646] [client 20.63.100.156:20080] [client 20.63.100.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaVxCMQ1lXfvWN0-ZQl7UQAAAEg"]
[Mon Mar 02 19:14:16.761516 2026] [:error] [pid 59600:tid 59614] [client 20.63.100.156:20100] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaVxCIQ5lE4yocV9IBcc-QAAAAU"]
[Mon Mar 02 19:14:17.181786 2026] [:error] [pid 59600:tid 59612] [client 20.63.100.156:20221] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaVxCYQ5lE4yocV9IBcc-wAAAAM"]
[Mon Mar 02 19:14:17.715686 2026] [:error] [pid 59602:tid 59679] [client 20.63.100.156:20151] [client 20.63.100.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aaVxCTMtSo_Fr0lHnSY63QAAAI4"]
[Mon Mar 02 20:06:56.079928 2026] [:error] [pid 28847:tid 28869] [client 13.71.189.74:65048] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon Mar 02 20:06:56.288865 2026] [:error] [pid 28847:tid 28858] [client 13.71.189.74:65048] [client 13.71.189.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaV9YJ9xbBq8VfeqVDYWTwAAAMk"]
[Mon Mar 02 20:06:56.707211 2026] [:error] [pid 59600:tid 59626] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Mon Mar 02 20:06:57.128445 2026] [:error] [pid 59600:tid 59617] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon Mar 02 20:06:57.338467 2026] [:error] [pid 59600:tid 59624] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/muzu.php
[Mon Mar 02 20:06:57.547402 2026] [:error] [pid 59600:tid 59611] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Mon Mar 02 20:06:57.759108 2026] [:error] [pid 59600:tid 59632] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/x123x.php
[Mon Mar 02 20:06:57.967972 2026] [:error] [pid 59600:tid 59627] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Mon Mar 02 20:06:58.176541 2026] [:error] [pid 59600:tid 59629] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Mar 02 20:06:58.385645 2026] [:error] [pid 59600:tid 59631] [client 13.71.189.74:64407] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Mon Mar 02 20:06:58.591417 2026] [:error] [pid 59600:tid 59613] [client 13.71.189.74:64407] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaV9YoQ5lE4yocV9IBc6MAAAAAQ"]
[Mon Mar 02 20:06:59.015484 2026] [:error] [pid 28847:tid 28857] [client 13.71.189.74:64436] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaV9Y59xbBq8VfeqVDYWWwAAAMg"]
[Mon Mar 02 20:06:59.425266 2026] [:error] [pid 28847:tid 28868] [client 13.71.189.74:58213] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaV9Y59xbBq8VfeqVDYWYgAAANM"]
[Mon Mar 02 20:06:59.835831 2026] [:error] [pid 59701:tid 59707] [client 13.71.189.74:65115] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as1337.php"] [unique_id "aaV9Y-UmTDVso96U9_LJGgAAAQM"]
[Mon Mar 02 20:07:00.259296 2026] [:error] [pid 28847:tid 28855] [client 13.71.189.74:65150] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaV9ZJ9xbBq8VfeqVDYWZwAAAMY"]
[Mon Mar 02 20:07:00.670638 2026] [:error] [pid 59701:tid 59704] [client 13.71.189.74:3187] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaV9ZOUmTDVso96U9_LJHgAAAQA"]
[Mon Mar 02 20:07:01.098598 2026] [:error] [pid 28847:tid 28872] [client 13.71.189.74:64437] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaV9ZZ9xbBq8VfeqVDYWagAAANc"]
[Mon Mar 02 20:07:01.516005 2026] [:error] [pid 28847:tid 28860] [client 13.71.189.74:64395] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aaV9ZZ9xbBq8VfeqVDYWbQAAAMs"]
[Mon Mar 02 20:07:01.928710 2026] [:error] [pid 59602:tid 59672] [client 13.71.189.74:64443] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaV9ZTMtSo_Fr0lHnSZRPgAAAIc"]
[Mon Mar 02 20:07:02.345482 2026] [:error] [pid 59602:tid 59667] [client 13.71.189.74:58186] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaV9ZjMtSo_Fr0lHnSZRQAAAAII"]
[Mon Mar 02 20:07:02.754823 2026] [:error] [pid 59602:tid 59670] [client 13.71.189.74:58179] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaV9ZjMtSo_Fr0lHnSZRQwAAAIU"]
[Mon Mar 02 20:07:03.171116 2026] [:error] [pid 28847:tid 28872] [client 13.71.189.74:64494] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf-shell.php"] [unique_id "aaV9Z59xbBq8VfeqVDYWdgAAANc"]
[Mon Mar 02 20:07:03.582859 2026] [:error] [pid 28847:tid 28858] [client 13.71.189.74:3158] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaV9Z59xbBq8VfeqVDYWeAAAAMk"]
[Mon Mar 02 20:07:03.999807 2026] [:error] [pid 59602:tid 59673] [client 13.71.189.74:58208] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaV9ZzMtSo_Fr0lHnSZRUAAAAIg"]
[Mon Mar 02 20:07:04.415269 2026] [:error] [pid 59734:tid 59748] [client 13.71.189.74:64497] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaV9aJeWQx7ZQG9NybEWrQAAAUw"]
[Mon Mar 02 20:07:04.828643 2026] [:error] [pid 28847:tid 28866] [client 13.71.189.74:64423] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "aaV9aJ9xbBq8VfeqVDYWfQAAANE"]
[Mon Mar 02 20:07:05.238082 2026] [:error] [pid 59602:tid 59679] [client 13.71.189.74:64389] [client 13.71.189.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zeal.php"] [unique_id "aaV9aTMtSo_Fr0lHnSZRWwAAAI4"]
[Mon Mar 02 20:24:21.347654 2026] [:error] [pid 59600:tid 59628] [client 95.219.219.193:58319] [client 95.219.219.193] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.219.219.193, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaWBdYQ5lE4yocV9IBdCfAAAABM"]
[Mon Mar 02 20:24:21.352467 2026] [:error] [pid 59600:tid 59628] [client 95.219.219.193:58319] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 02 21:13:52.769919 2026] [:error] [pid 28847:tid 28870] [client 20.104.86.139:64024] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaWNEJ9xbBq8VfeqVDZM3wAAANU"]
[Mon Mar 02 21:13:53.587549 2026] [:error] [pid 59600:tid 59629] [client 20.104.86.139:17182] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaWNEYQ5lE4yocV9IBdgbQAAABQ"]
[Mon Mar 02 21:13:54.421573 2026] [:error] [pid 28847:tid 28865] [client 20.104.86.139:59545] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaWNEp9xbBq8VfeqVDZM5QAAANA"]
[Mon Mar 02 21:13:55.247024 2026] [:error] [pid 59734:tid 59754] [client 20.104.86.139:64060] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "aaWNE5eWQx7ZQG9NybEpRwAAAVI"]
[Mon Mar 02 21:22:20.581038 2026] [:error] [pid 59701:tid 59717] [client 103.105.46.241:52942] [client 103.105.46.241] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.105.46.241, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaWPDOUmTDVso96U9_LZ4QAAAQ0"]
[Mon Mar 02 21:22:20.585742 2026] [:error] [pid 59701:tid 59717] [client 103.105.46.241:52942] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 03 00:48:12.651730 2026] [:error] [pid 18960:tid 18981] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Mar 03 00:48:12.861525 2026] [:error] [pid 18960:tid 18983] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Mar 03 00:48:13.089446 2026] [:error] [pid 18960:tid 18986] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Mar 03 00:48:13.299660 2026] [:error] [pid 18960:tid 18968] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Mar 03 00:48:13.508019 2026] [:error] [pid 18960:tid 18970] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Mar 03 00:48:13.719518 2026] [:error] [pid 18960:tid 18981] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Mar 03 00:48:14.138272 2026] [:error] [pid 18960:tid 18983] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Mar 03 00:48:14.347191 2026] [:error] [pid 18960:tid 18980] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue Mar 03 00:48:14.564531 2026] [:error] [pid 18960:tid 18967] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Mar 03 00:48:14.778244 2026] [:error] [pid 18960:tid 18977] [client 20.104.86.139:55456] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Mar 03 00:48:14.984099 2026] [:error] [pid 18960:tid 18973] [client 20.104.86.139:55456] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaW_TtCu09icM9oIHwDMJAAAAMo"]
[Tue Mar 03 00:48:15.818284 2026] [:error] [pid 18557:tid 18847] [client 20.104.86.139:17147] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaW_T9ngZqR9Tp8JM0FQyAAAAFg"]
[Tue Mar 03 00:48:16.648051 2026] [:error] [pid 60214:tid 60220] [client 20.104.86.139:16447] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaW_UImuQ_v4S3RkLivkNAAAAQQ"]
[Tue Mar 03 00:48:17.494541 2026] [:error] [pid 18557:tid 18845] [client 20.104.86.139:55437] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "aaW_UdngZqR9Tp8JM0FQzgAAAFY"]
[Tue Mar 03 04:30:47.958077 2026] [:error] [pid 36784:tid 36828] [client 43.157.149.188:36428] [client 43.157.149.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaXzd3NeKOSGbW9kDgS55gAAAEU"]
[Tue Mar 03 06:40:47.667851 2026] [:error] [pid 14042:tid 14047] [client 43.159.152.184:54396] [client 43.159.152.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaYR72eHGCmSEiIBcK4kFAAAAYM"]
[Tue Mar 03 06:49:06.698617 2026] [:error] [pid 36785:tid 36870] [client 175.6.217.4:56949] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaYT4nhJejauENG9qTiaLgAAAJQ"]
[Tue Mar 03 09:52:09.061198 2026] [:error] [pid 26186:tid 26190] [client 104.28.160.144:22700] [client 104.28.160.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aaY-yfbZCNtk8wDak9cpSgAAAUI"]
[Tue Mar 03 10:26:31.832258 2026] [:error] [pid 20872:tid 20889] [client 43.154.127.188:35180] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaZG14lYbNk3E_3CgBjb8wAAAQ8"]
[Tue Mar 03 11:18:49.841839 2026] [:error] [pid 26186:tid 26209] [client 49.36.73.101:58889] [client 49.36.73.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.73.101, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaZTGfbZCNtk8wDak9dY6gAAAVU"]
[Tue Mar 03 11:18:49.846905 2026] [:error] [pid 26186:tid 26209] [client 49.36.73.101:58889] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 03 11:22:49.705822 2026] [:error] [pid 26186:tid 26203] [client 138.128.140.80:64087] [client 138.128.140.80] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.128.140.80, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaZUCfbZCNtk8wDak9da9gAAAU8"]
[Tue Mar 03 11:22:49.713328 2026] [:error] [pid 26186:tid 26203] [client 138.128.140.80:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 03 12:26:56.231567 2026] [:error] [pid 36897:tid 36911] [client 43.131.243.61:60126] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaZjECZC69_8eM0UoutQ1QAAAMk"]
[Tue Mar 03 17:51:31.940664 2026] [:error] [pid 14042:tid 14057] [client 20.151.222.76:16010] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Mar 03 17:51:32.364449 2026] [:error] [pid 14042:tid 14060] [client 20.151.222.76:16010] [client 20.151.222.76] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.222.76, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaavJGeHGCmSEiIBcK5QiQAAAZA"]
[Tue Mar 03 17:51:32.583856 2026] [:error] [pid 14042:tid 14062] [client 20.151.222.76:16010] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Tue Mar 03 17:51:33.439278 2026] [:error] [pid 14042:tid 14051] [client 20.151.222.76:16010] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Tue Mar 03 17:51:34.079611 2026] [:error] [pid 14042:tid 14050] [client 20.151.222.76:16010] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Mar 03 17:51:34.290141 2026] [:error] [pid 14042:tid 14057] [client 20.151.222.76:16010] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaavJmeHGCmSEiIBcK5QlQAAAY0"]
[Tue Mar 03 17:51:35.122819 2026] [:error] [pid 36785:tid 36854] [client 20.151.222.76:15945] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaavJ3hJejauENG9qTiOUgAAAIQ"]
[Tue Mar 03 17:51:35.950781 2026] [:error] [pid 14042:tid 14052] [client 20.151.222.76:15952] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaavJ2eHGCmSEiIBcK5QmAAAAYg"]
[Tue Mar 03 17:51:36.771839 2026] [:error] [pid 20872:tid 20898] [client 20.151.222.76:15978] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaavKIlYbNk3E_3CgBgj2gAAARg"]
[Tue Mar 03 20:18:33.538609 2026] [:error] [pid 36785:tid 36872] [client 20.151.222.76:58818] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Mar 03 20:18:33.978646 2026] [:error] [pid 36785:tid 36854] [client 20.151.222.76:58818] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Mar 03 20:18:34.187700 2026] [:error] [pid 36785:tid 36874] [client 20.151.222.76:58818] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Mar 03 20:18:34.396440 2026] [:error] [pid 36785:tid 36855] [client 20.151.222.76:58818] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Mar 03 20:18:34.605716 2026] [:error] [pid 36785:tid 36866] [client 20.151.222.76:58818] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Mar 03 20:18:35.025047 2026] [:error] [pid 36785:tid 36871] [client 20.151.222.76:58818] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Mar 03 20:18:35.444206 2026] [:error] [pid 36785:tid 36867] [client 20.151.222.76:58818] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conf.php
[Tue Mar 03 20:18:35.859310 2026] [:error] [pid 36785:tid 36850] [client 20.151.222.76:58818] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aabRm3hJejauENG9qTjZRQAAAIA"]
[Tue Mar 03 20:18:36.687354 2026] [:error] [pid 14042:tid 14044] [client 20.151.222.76:15990] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aabRnGeHGCmSEiIBcK5tEwAAAYA"]
[Tue Mar 03 20:18:37.523589 2026] [:error] [pid 14042:tid 14054] [client 20.151.222.76:15940] [client 20.151.222.76] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aabRnWeHGCmSEiIBcK5tFgAAAYo"]
[Tue Mar 03 22:11:33.654516 2026] [:error] [pid 36897:tid 36910] [client 178.16.53.90:59369] [client 178.16.53.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aabsFSZC69_8eM0UouufOQAAAMg"]
[Tue Mar 03 23:41:38.211127 2026] [:error] [pid 20872:tid 20891] [client 43.156.232.190:35668] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aacBMolYbNk3E_3CgBhFPgAAARE"]
[Wed Mar 04 00:32:52.460006 2026] [:error] [pid 48807:tid 48831] [client 153.67.61.198:55525] [client 153.67.61.198] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 153.67.61.198, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aacNNA9v35BN-51vqYZSLgAAARY"]
[Wed Mar 04 00:32:52.477509 2026] [:error] [pid 48807:tid 48831] [client 153.67.61.198:55525] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 04 05:44:54.586958 2026] [:error] [pid 18554:tid 18612] [client 43.131.45.213:56768] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aadWVp0fKmKeTIK7QS2Z-AAAAFQ"]
[Wed Mar 04 09:19:27.643644 2026] [:error] [pid 54487:tid 54512] [client 137.116.32.109:30683] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aaeIn_N8030QMpFXdduvegAAARc"]
[Wed Mar 04 09:19:28.255537 2026] [:error] [pid 54487:tid 54497] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Wed Mar 04 09:19:28.460330 2026] [:error] [pid 54487:tid 54499] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 04 09:19:28.666198 2026] [:error] [pid 54487:tid 54503] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php
[Wed Mar 04 09:19:28.875763 2026] [:error] [pid 54487:tid 54491] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Mar 04 09:19:29.081249 2026] [:error] [pid 54487:tid 54496] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Mar 04 09:19:29.288537 2026] [:error] [pid 54487:tid 54498] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Mar 04 09:19:29.493020 2026] [:error] [pid 54487:tid 54513] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Mar 04 09:19:29.697323 2026] [:error] [pid 54487:tid 54492] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed Mar 04 09:19:29.906083 2026] [:error] [pid 54487:tid 54491] [client 137.116.32.109:30699] File does not exist: /usr/local/apache/htdocs/suspended-page/headers.php
[Wed Mar 04 09:19:30.311701 2026] [:error] [pid 54487:tid 54505] [client 137.116.32.109:30699] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aaeIovN8030QMpFXdduvjgAAARA"]
[Wed Mar 04 09:19:30.711998 2026] [:error] [pid 18554:tid 18614] [client 137.116.32.109:30692] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aaeIop0fKmKeTIK7QS0j1QAAAFY"]
[Wed Mar 04 09:19:31.124212 2026] [:error] [pid 18554:tid 18607] [client 137.116.32.109:30689] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aaeIo50fKmKeTIK7QS0j2QAAAE8"]
[Wed Mar 04 09:19:31.524298 2026] [:error] [pid 54487:tid 54505] [client 137.116.32.109:30672] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aaeIo_N8030QMpFXdduvlAAAARA"]
[Wed Mar 04 09:19:31.923382 2026] [:error] [pid 18553:tid 18572] [client 137.116.32.109:30681] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aaeIo2bax1neh8d0AHauXQAAAAg"]
[Wed Mar 04 09:19:32.323846 2026] [:error] [pid 54487:tid 54507] [client 137.116.32.109:30691] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aaeIpPN8030QMpFXdduvmAAAARI"]
[Wed Mar 04 09:19:32.723672 2026] [:error] [pid 18555:tid 18640] [client 137.116.32.109:30660] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aaeIpDQeUDANiOsQ3GehaAAAAJU"]
[Wed Mar 04 09:19:33.181744 2026] [:error] [pid 54487:tid 54491] [client 137.116.32.109:30656] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cah.php"] [unique_id "aaeIpfN8030QMpFXdduvmwAAAQI"]
[Wed Mar 04 09:19:33.586029 2026] [:error] [pid 54487:tid 54507] [client 137.116.32.109:30602] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaeIpfN8030QMpFXdduvnQAAARI"]
[Wed Mar 04 09:19:33.986585 2026] [:error] [pid 54487:tid 54497] [client 137.116.32.109:30697] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaeIpfN8030QMpFXdduvowAAAQg"]
[Wed Mar 04 09:19:34.388047 2026] [:error] [pid 54487:tid 54507] [client 137.116.32.109:30705] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aaeIpvN8030QMpFXdduvpwAAARI"]
[Wed Mar 04 09:27:21.477897 2026] [:error] [pid 18555:tid 18630] [client 43.166.251.233:52080] [client 43.166.251.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaeKeTQeUDANiOsQ3GejaAAAAIs"]
[Wed Mar 04 09:50:47.014165 2026] [:error] [pid 18554:tid 18612] [client 45.86.202.170:59701] [client 45.86.202.170] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaeP950fKmKeTIK7QS05pgAAAFQ"]
[Wed Mar 04 11:34:25.410414 2026] [:error] [pid 18554:tid 18598] [client 49.51.253.26:50984] [client 49.51.253.26] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaeoQZ0fKmKeTIK7QS19WAAAAEY"]
[Wed Mar 04 11:49:01.814947 2026] [:error] [pid 18681:tid 18705] [client 152.233.20.86:35046] [client 152.233.20.86] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaerraE_TuZYUBveWkUVHAAAANY"]
[Wed Mar 04 12:53:23.267681 2026] [:error] [pid 18554:tid 18599] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/input.php
[Wed Mar 04 12:53:23.469943 2026] [:error] [pid 18554:tid 18593] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 04 12:53:23.672920 2026] [:error] [pid 18554:tid 18613] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko-new.php
[Wed Mar 04 12:53:23.876730 2026] [:error] [pid 18554:tid 18610] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Mar 04 12:53:24.080614 2026] [:error] [pid 18554:tid 18612] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Wed Mar 04 12:53:24.284874 2026] [:error] [pid 18554:tid 18593] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Mar 04 12:53:24.487855 2026] [:error] [pid 18554:tid 18596] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Mar 04 12:53:24.690854 2026] [:error] [pid 18554:tid 18611] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed Mar 04 12:53:24.893445 2026] [:error] [pid 18554:tid 18610] [client 137.116.32.109:30675] File does not exist: /usr/local/apache/htdocs/suspended-page/headers.php
[Wed Mar 04 12:53:25.304155 2026] [:error] [pid 18554:tid 18607] [client 137.116.32.109:30675] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aae6xZ0fKmKeTIK7QS3B_gAAAE8"]
[Wed Mar 04 12:53:25.709155 2026] [:error] [pid 18554:tid 18593] [client 137.116.32.109:30659] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aae6xZ0fKmKeTIK7QS3CAQAAAEE"]
[Wed Mar 04 12:53:26.114805 2026] [:error] [pid 18554:tid 18605] [client 137.116.32.109:30599] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aae6xp0fKmKeTIK7QS3CAwAAAE0"]
[Wed Mar 04 12:53:26.521087 2026] [:error] [pid 18554:tid 18597] [client 137.116.32.109:30708] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "aae6xp0fKmKeTIK7QS3CBgAAAEU"]
[Wed Mar 04 12:53:26.926439 2026] [:error] [pid 18553:tid 18579] [client 137.116.32.109:30607] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae6xmbax1neh8d0AHbMOQAAAA8"]
[Wed Mar 04 12:53:27.325192 2026] [:error] [pid 18554:tid 18593] [client 137.116.32.109:30704] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae6x50fKmKeTIK7QS3CCgAAAEE"]
[Wed Mar 04 12:53:27.725068 2026] [:error] [pid 18554:tid 18608] [client 137.116.32.109:30667] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae6x50fKmKeTIK7QS3CDQAAAFA"]
[Wed Mar 04 12:53:28.132495 2026] [:error] [pid 18554:tid 18615] [client 137.116.32.109:30594] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "aae6yJ0fKmKeTIK7QS3CEAAAAFc"]
[Wed Mar 04 12:53:28.545646 2026] [:error] [pid 18554:tid 18606] [client 137.116.32.109:30693] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cah.php"] [unique_id "aae6yJ0fKmKeTIK7QS3CEwAAAE4"]
[Wed Mar 04 12:53:28.950927 2026] [:error] [pid 18554:tid 18604] [client 137.116.32.109:30679] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cah.php"] [unique_id "aae6yJ0fKmKeTIK7QS3CFQAAAEw"]
[Wed Mar 04 12:53:29.350612 2026] [:error] [pid 18554:tid 18597] [client 137.116.32.109:30606] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cah.php"] [unique_id "aae6yZ0fKmKeTIK7QS3CFwAAAEU"]
[Wed Mar 04 12:53:29.751368 2026] [:error] [pid 18554:tid 18598] [client 137.116.32.109:30595] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cah.php"] [unique_id "aae6yZ0fKmKeTIK7QS3CHAAAAEY"]
[Wed Mar 04 12:53:30.151530 2026] [:error] [pid 18553:tid 18571] [client 137.116.32.109:30683] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aae6ymbax1neh8d0AHbMPAAAAAc"]
[Wed Mar 04 12:53:30.551631 2026] [:error] [pid 18554:tid 18595] [client 137.116.32.109:30699] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aae6yp0fKmKeTIK7QS3CJAAAAEM"]
[Wed Mar 04 12:53:30.951184 2026] [:error] [pid 18554:tid 18604] [client 137.116.32.109:30676] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aae6yp0fKmKeTIK7QS3CJwAAAEw"]
[Wed Mar 04 12:53:31.351619 2026] [:error] [pid 18554:tid 18611] [client 137.116.32.109:30701] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "aae6y50fKmKeTIK7QS3CKwAAAFM"]
[Wed Mar 04 12:53:31.751323 2026] [:error] [pid 18554:tid 18593] [client 137.116.32.109:30600] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae6y50fKmKeTIK7QS3CLgAAAEE"]
[Wed Mar 04 12:53:32.150551 2026] [:error] [pid 18554:tid 18599] [client 137.116.32.109:30698] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae6zJ0fKmKeTIK7QS3CMgAAAEc"]
[Wed Mar 04 12:53:32.549193 2026] [:error] [pid 18554:tid 18616] [client 137.116.32.109:30592] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae6zJ0fKmKeTIK7QS3CNwAAAFg"]
[Wed Mar 04 12:53:32.948133 2026] [:error] [pid 18554:tid 18597] [client 137.116.32.109:30597] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "aae6zJ0fKmKeTIK7QS3COgAAAEU"]
[Wed Mar 04 12:53:33.349428 2026] [:error] [pid 18555:tid 18628] [client 137.116.32.109:30678] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aae6zTQeUDANiOsQ3GfNWQAAAIk"]
[Wed Mar 04 12:53:33.751102 2026] [:error] [pid 54487:tid 54502] [client 137.116.32.109:30717] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aae6zfN8030QMpFXddtYtgAAAQ0"]
[Wed Mar 04 12:53:34.157339 2026] [:error] [pid 54487:tid 54489] [client 137.116.32.109:30611] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aae6zvN8030QMpFXddtYuAAAAQA"]
[Wed Mar 04 12:53:34.556655 2026] [:error] [pid 18554:tid 18610] [client 137.116.32.109:30682] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "aae6zp0fKmKeTIK7QS3CQgAAAFI"]
[Wed Mar 04 12:53:34.954878 2026] [:error] [pid 18554:tid 18606] [client 137.116.32.109:30718] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aae6zp0fKmKeTIK7QS3CRgAAAE4"]
[Wed Mar 04 12:53:35.353823 2026] [:error] [pid 18554:tid 18612] [client 137.116.32.109:30656] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aae6z50fKmKeTIK7QS3CSQAAAFQ"]
[Wed Mar 04 12:53:35.754139 2026] [:error] [pid 54487:tid 54504] [client 137.116.32.109:30685] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aae6z_N8030QMpFXddtYugAAAQ8"]
[Wed Mar 04 12:53:36.154011 2026] [:error] [pid 54487:tid 54509] [client 137.116.32.109:30604] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "aae60PN8030QMpFXddtYvQAAARQ"]
[Wed Mar 04 12:53:36.553640 2026] [:error] [pid 18555:tid 18632] [client 137.116.32.109:30705] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aae60DQeUDANiOsQ3GfNWgAAAI0"]
[Wed Mar 04 12:53:36.954027 2026] [:error] [pid 18681:tid 18693] [client 137.116.32.109:30712] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aae60KE_TuZYUBveWkUlCQAAAMo"]
[Wed Mar 04 12:53:37.354215 2026] [:error] [pid 18681:tid 18707] [client 137.116.32.109:30674] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aae60aE_TuZYUBveWkUlCgAAANg"]
[Wed Mar 04 12:53:37.754489 2026] [:error] [pid 18681:tid 18689] [client 137.116.32.109:30628] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aae60aE_TuZYUBveWkUlDAAAAMY"]
[Wed Mar 04 12:53:38.159343 2026] [:error] [pid 18681:tid 18687] [client 137.116.32.109:30716] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aae60qE_TuZYUBveWkUlDwAAAMQ"]
[Wed Mar 04 12:53:38.564242 2026] [:error] [pid 18553:tid 18576] [client 137.116.32.109:30710] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aae60mbax1neh8d0AHbMRAAAAAw"]
[Wed Mar 04 12:53:38.963033 2026] [:error] [pid 18681:tid 18701] [client 137.116.32.109:30552] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aae60qE_TuZYUBveWkUlFAAAANI"]
[Wed Mar 04 12:53:39.370625 2026] [:error] [pid 18554:tid 18602] [client 137.116.32.109:30625] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon.php"] [unique_id "aae6050fKmKeTIK7QS3CVQAAAEo"]
[Wed Mar 04 12:53:39.770307 2026] [:error] [pid 54487:tid 54491] [client 137.116.32.109:30714] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aae60_N8030QMpFXddtYwQAAAQI"]
[Wed Mar 04 12:53:40.170450 2026] [:error] [pid 18554:tid 18609] [client 137.116.32.109:30684] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aae61J0fKmKeTIK7QS3CXgAAAFE"]
[Wed Mar 04 12:53:40.570951 2026] [:error] [pid 18681:tid 18697] [client 137.116.32.109:30608] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aae61KE_TuZYUBveWkUlGQAAAM4"]
[Wed Mar 04 12:53:40.970241 2026] [:error] [pid 45947:tid 46032] [client 137.116.32.109:30616] [client 137.116.32.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aae61EQXEtszYKy6sasNnwAAAUQ"]
[Wed Mar 04 13:01:36.889356 2026] [:error] [pid 18553:tid 18567] [client 43.228.157.73:52493] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aae8sGbax1neh8d0AHbOugAAAAM"]
[Wed Mar 04 13:01:37.475598 2026] [:error] [pid 18553:tid 18577] [client 43.228.157.73:52719] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aae8sWbax1neh8d0AHbPEwAAAA0"]
[Wed Mar 04 13:01:38.033903 2026] [:error] [pid 18554:tid 18606] [client 43.228.157.73:52926] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aae8sp0fKmKeTIK7QS3LnwAAAE4"]
[Wed Mar 04 13:01:38.671007 2026] [:error] [pid 18681:tid 18702] [client 43.228.157.73:53135] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aae8sqE_TuZYUBveWkUpjAAAANM"]
[Wed Mar 04 13:01:39.259970 2026] [:error] [pid 18553:tid 18580] [client 43.228.157.73:53317] [client 43.228.157.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aae8s2bax1neh8d0AHbPOwAAABA"]
[Wed Mar 04 14:40:04.188989 2026] [:error] [pid 51358:tid 51451] [client 182.44.67.97:55060] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aafTxFDC2WZyp0MMf72zzgAAAE8"]
[Wed Mar 04 17:15:15.510099 2026] [:error] [pid 63260:tid 63336] [client 43.153.35.128:50842] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaf4I1GzBomxCi_QBtEVzgAAAM0"]
[Wed Mar 04 17:47:13.104668 2026] [:error] [pid 63356:tid 63378] [client 143.110.212.147:50753] [client 143.110.212.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.110.212.147, incrementing brute counter"] [hostname "www.dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aaf_oc5gxyQKbLIoyf_VeAAAAFQ"]
[Wed Mar 04 17:47:13.108740 2026] [:error] [pid 63356:tid 63378] [client 143.110.212.147:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 04 18:41:55.129364 2026] [:error] [pid 63260:tid 63329] [client 156.225.38.149:59461] [client 156.225.38.149] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "aagMc1GzBomxCi_QBtE1vwAAAMY"], referer: https://www.google.com
[Wed Mar 04 18:41:59.041554 2026] [:error] [pid 63259:tid 63309] [client 156.225.32.164:40623] [client 156.225.32.164] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aagMd5Ydi0T768Nnor65cwAAAQ0"]
[Wed Mar 04 18:41:59.041816 2026] [:error] [pid 63259:tid 63309] [client 156.225.32.164:40623] [client 156.225.32.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.225.32.164, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aagMd5Ydi0T768Nnor65cwAAAQ0"]
[Wed Mar 04 18:41:59.046525 2026] [:error] [pid 63259:tid 63309] [client 156.225.32.164:40623] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 04 18:42:00.949883 2026] [:error] [pid 63259:tid 63304] [client 156.225.33.196:54873] [client 156.225.33.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.225.33.196, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aagMeJYdi0T768Nnor65dQAAAQg"], referer: https://www.google.com
[Wed Mar 04 18:42:00.953930 2026] [:error] [pid 63259:tid 63304] [client 156.225.33.196:54873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Mar 04 18:42:02.814658 2026] [:error] [pid 63356:tid 63379] [client 156.225.33.247:44917] [client 156.225.33.247] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.225.33.247, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aagMes5gxyQKbLIoyf_xawAAAFU"], referer: https://www.google.com
[Wed Mar 04 18:42:02.818622 2026] [:error] [pid 63356:tid 63379] [client 156.225.33.247:44917] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Mar 04 20:16:19.770131 2026] [:error] [pid 60730:tid 60738] [client 223.235.98.77:11931] [client 223.235.98.77] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.235.98.77, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aagik0eC7wxPGxvN8ZgJ-wAAAUY"]
[Wed Mar 04 20:16:19.774806 2026] [:error] [pid 60730:tid 60738] [client 223.235.98.77:11931] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 04 21:28:37.373217 2026] [:error] [pid 61723:tid 61755] [client 182.44.9.147:36707] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aagzhT-cYcKSTgnaHK5B3wAAAJI"]
[Thu Mar 05 01:02:53.575045 2026] [:error] [pid 27814:tid 27892] [client 143.198.192.14:63884] [client 143.198.192.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 143.198.192.14, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aahlvbPcbh1BHIHQb9Ja9wAAANI"]
[Thu Mar 05 01:02:53.578799 2026] [:error] [pid 27814:tid 27892] [client 143.198.192.14:63884] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 05 03:56:44.635192 2026] [:error] [pid 62176:tid 62299] [client 110.166.71.39:51076] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaiOfCNfTPJryi30JPmCYAAAAE8"]
[Thu Mar 05 04:43:38.556599 2026] [:error] [pid 62177:tid 62321] [client 103.197.49.103:64384] [client 103.197.49.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.197.49.103, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaiZehWSQc2OzPrsnwULfAAAAIo"]
[Thu Mar 05 04:43:38.563965 2026] [:error] [pid 62177:tid 62321] [client 103.197.49.103:64384] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 05 04:55:43.167448 2026] [:error] [pid 62173:tid 62264] [client 49.51.47.100:41092] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aaicT2j_GWbFb-1ncGkwjAAAAAw"]
[Thu Mar 05 08:48:05.691092 2026] [:error] [pid 41459:tid 41495] [client 43.157.142.101:36410] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aajSxedFBZEnZ3pzxrV-zQAAAVU"]
[Thu Mar 05 10:04:25.349695 2026] [:error] [pid 62176:tid 62294] [client 43.140.247.223:40714] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aajkqSNfTPJryi30JPm2iwAAAEo"]
[Thu Mar 05 11:00:34.741647 2026] [:error] [pid 62176:tid 62308] [client 43.130.15.147:46560] [client 43.130.15.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aajx0iNfTPJryi30JPm9KgAAAFg"]
[Thu Mar 05 14:37:39.212206 2026] [:error] [pid 41459:tid 41480] [client 129.226.93.214:58132] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aakks-dFBZEnZ3pzxrV2xgAAAUY"]
[Thu Mar 05 16:21:39.956094 2026] [:error] [pid 53350:tid 53381] [client 34.63.176.177:60222] [client 34.63.176.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.63.176.177, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aak9E6O0Baxc5WFYeP27bwAAAQY"]
[Thu Mar 05 16:21:39.961360 2026] [:error] [pid 53350:tid 53381] [client 34.63.176.177:60222] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 05 16:21:42.200732 2026] [:error] [pid 53350:tid 53389] [client 34.63.176.177:60222] [client 34.63.176.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aak9FqO0Baxc5WFYeP27ggAAAQw"]
[Thu Mar 05 16:21:42.594948 2026] [:error] [pid 62435:tid 62460] [client 34.63.176.177:51902] [client 34.63.176.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aak9FiMZJMDfZh_-8sVXXAAAAMo"]
[Thu Mar 05 16:21:43.014009 2026] [:error] [pid 62435:tid 62462] [client 34.63.176.177:53418] [client 34.63.176.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aak9FyMZJMDfZh_-8sVXXQAAAMw"]
[Thu Mar 05 16:21:43.428148 2026] [:error] [pid 62177:tid 62319] [client 34.63.176.177:62427] [client 34.63.176.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aak9FxWSQc2OzPrsnwWa6gAAAIg"]
[Thu Mar 05 16:21:43.835903 2026] [:error] [pid 62173:tid 62257] [client 34.63.176.177:50919] [client 34.63.176.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aak9F2j_GWbFb-1ncGllDwAAAAU"]
[Thu Mar 05 16:21:44.224313 2026] [:error] [pid 62435:tid 62458] [client 34.63.176.177:49451] [client 34.63.176.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aak9GCMZJMDfZh_-8sVXYAAAAMg"]
[Thu Mar 05 16:21:44.620646 2026] [:error] [pid 62177:tid 62331] [client 34.63.176.177:51577] [client 34.63.176.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aak9GBWSQc2OzPrsnwWa7QAAAJM"]
[Thu Mar 05 16:28:55.727220 2026] [:error] [pid 53350:tid 53385] [client 203.2.64.59:56747] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aak-x6O0Baxc5WFYeP2-8AAAAQk"]
[Thu Mar 05 18:32:31.713043 2026] [:error] [pid 62173:tid 62260] [client 163.7.9.86:56356] File does not exist: /usr/local/apache/htdocs/suspended-page/admin_phpinfo.php
[Thu Mar 05 18:32:31.713333 2026] [:error] [pid 62435:tid 62452] [client 163.7.9.86:56354] File does not exist: /usr/local/apache/htdocs/suspended-page/admin_info.php
[Thu Mar 05 18:32:31.716121 2026] [:error] [pid 41459:tid 41490] [client 163.7.9.86:56220] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.docker/.env"] [unique_id "aalbv-dFBZEnZ3pzxrX7-QAAAVA"]
[Thu Mar 05 18:32:31.717507 2026] [:error] [pid 41459:tid 41481] [client 163.7.9.86:56234] File does not exist: /usr/local/apache/htdocs/suspended-page/_info.php
[Thu Mar 05 18:32:31.717507 2026] [:error] [pid 41459:tid 41489] [client 163.7.9.86:56240] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Thu Mar 05 18:32:31.719535 2026] [:error] [pid 41459:tid 41475] [client 163.7.9.86:56174] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.envs"] [unique_id "aalbv-dFBZEnZ3pzxrX7-wAAAUE"]
[Thu Mar 05 18:32:31.720144 2026] [:error] [pid 41459:tid 41480] [client 163.7.9.86:56152] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.local"] [unique_id "aalbv-dFBZEnZ3pzxrX7_AAAAUY"]
[Thu Mar 05 18:32:31.723583 2026] [:error] [pid 62177:tid 62319] [client 163.7.9.86:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Thu Mar 05 18:32:31.723695 2026] [:error] [pid 62177:tid 62316] [client 163.7.9.86:56106] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aalbvxWSQc2OzPrsnwW8UgAAAIU"]
[Thu Mar 05 18:32:31.749774 2026] [:error] [pid 62173:tid 62269] [client 163.7.9.86:56380] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php.save.1
[Thu Mar 05 18:32:31.761421 2026] [:error] [pid 41459:tid 41482] [client 163.7.9.86:56454] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aalbv-dFBZEnZ3pzxrX7_QAAAUg"]
[Thu Mar 05 18:32:31.775362 2026] [:error] [pid 41459:tid 41483] [client 163.7.9.86:56480] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.www"] [unique_id "aalbv-dFBZEnZ3pzxrX7_gAAAUk"]
[Thu Mar 05 18:32:31.782719 2026] [:error] [pid 62177:tid 62336] [client 163.7.9.86:56292] File does not exist: /usr/local/apache/htdocs/suspended-page/release_info.php
[Thu Mar 05 18:32:31.783105 2026] [:error] [pid 62177:tid 62327] [client 163.7.9.86:56314] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php.1
[Thu Mar 05 18:32:31.788022 2026] [:error] [pid 62173:tid 62262] [client 163.7.9.86:56538] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/admin_phpinfo.php4"] [unique_id "aalbv2j_GWbFb-1ncGlvfQAAAAo"]
[Thu Mar 05 18:32:31.821465 2026] [:error] [pid 62435:tid 62455] [client 163.7.9.86:56544] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "aalbvyMZJMDfZh_-8sVtLQAAAMU"]
[Thu Mar 05 18:32:34.788519 2026] [:error] [pid 62177:tid 62312] [client 163.7.9.86:56560] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env_bak"] [unique_id "aalbwhWSQc2OzPrsnwW8WgAAAIE"]
[Thu Mar 05 18:32:34.794685 2026] [:error] [pid 62435:tid 62469] [client 163.7.9.86:56570] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development.local"] [unique_id "aalbwiMZJMDfZh_-8sVtMQAAANM"]
[Thu Mar 05 18:32:34.795728 2026] [:error] [pid 62435:tid 62466] [client 163.7.9.86:56564] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.php"] [unique_id "aalbwiMZJMDfZh_-8sVtMgAAANA"]
[Thu Mar 05 18:32:34.809942 2026] [:error] [pid 62173:tid 62278] [client 163.7.9.86:56584] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env-example"] [unique_id "aalbwmj_GWbFb-1ncGlvfwAAABg"]
[Thu Mar 05 18:32:34.892968 2026] [:error] [pid 62177:tid 62332] [client 163.7.9.86:56602] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker.dev"] [unique_id "aalbwhWSQc2OzPrsnwW8XAAAAJQ"]
[Thu Mar 05 18:32:37.363021 2026] [:error] [pid 62173:tid 62258] [client 163.7.9.86:56614] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aalbxWj_GWbFb-1ncGlvhAAAAAY"]
[Thu Mar 05 18:32:37.389847 2026] [:error] [pid 62176:tid 62303] [client 163.7.9.86:56616] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env"] [unique_id "aalbxSNfTPJryi30JPnuqQAAAFM"]
[Thu Mar 05 18:32:37.391263 2026] [:error] [pid 62177:tid 62322] [client 163.7.9.86:55932] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.ghc.environment"] [unique_id "aalbxRWSQc2OzPrsnwW8ZAAAAIs"]
[Thu Mar 05 18:32:37.391271 2026] [:error] [pid 62177:tid 62330] [client 163.7.9.86:55924] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.list"] [unique_id "aalbxRWSQc2OzPrsnwW8YwAAAJI"]
[Thu Mar 05 18:32:37.422410 2026] [:error] [pid 62177:tid 62320] [client 163.7.9.86:55936] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.txt"] [unique_id "aalbxRWSQc2OzPrsnwW8ZQAAAIk"]
[Thu Mar 05 18:32:37.424947 2026] [:error] [pid 62177:tid 62332] [client 163.7.9.86:55922] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/admin_phpinfo.php4"] [unique_id "aalbxRWSQc2OzPrsnwW8ZwAAAJQ"]
[Thu Mar 05 18:32:39.730041 2026] [:error] [pid 62177:tid 62329] [client 163.7.9.86:55976] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/printenv"] [unique_id "aalbxxWSQc2OzPrsnwW8bQAAAJE"]
[Thu Mar 05 18:32:39.791494 2026] [:error] [pid 62435:tid 62461] [client 163.7.9.86:56000] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env"] [unique_id "aalbxyMZJMDfZh_-8sVtNAAAAMs"]
[Thu Mar 05 18:32:39.791940 2026] [:error] [pid 62435:tid 62450] [client 163.7.9.86:55982] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.list"] [unique_id "aalbxyMZJMDfZh_-8sVtNQAAAMA"]
[Thu Mar 05 18:32:39.793073 2026] [:error] [pid 41459:tid 41484] [client 163.7.9.86:55984] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.ghc.environment"] [unique_id "aalbx-dFBZEnZ3pzxrX8CgAAAUo"]
[Thu Mar 05 18:32:39.804863 2026] [:error] [pid 62435:tid 62472] [client 163.7.9.86:56008] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/admin_phpinfo.php4"] [unique_id "aalbxyMZJMDfZh_-8sVtNgAAANY"]
[Thu Mar 05 18:32:39.804918 2026] [:error] [pid 41459:tid 41492] [client 163.7.9.86:56012] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.txt"] [unique_id "aalbx-dFBZEnZ3pzxrX8CwAAAVI"]
[Thu Mar 05 18:32:42.456221 2026] [:error] [pid 41459:tid 41491] [client 163.7.9.86:56052] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/printenv"] [unique_id "aalbyudFBZEnZ3pzxrX8FgAAAVE"]
[Thu Mar 05 18:32:52.936867 2026] [:error] [pid 41459:tid 41493] [client 163.7.9.86:55426] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "aalb1OdFBZEnZ3pzxrX8JwAAAVM"]
[Thu Mar 05 18:32:52.987155 2026] [:error] [pid 62435:tid 62473] [client 163.7.9.86:55438] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.www"] [unique_id "aalb1CMZJMDfZh_-8sVtPwAAANc"]
[Thu Mar 05 18:32:54.078142 2026] [:error] [pid 62435:tid 62462] [client 163.7.9.86:55480] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod"] [unique_id "aalb1iMZJMDfZh_-8sVtQgAAAMw"]
[Thu Mar 05 18:32:54.899058 2026] [:error] [pid 53350:tid 53378] [client 163.7.9.86:55644] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.envs"] [unique_id "aalb1qO0Baxc5WFYeP3zAgAAAQM"]
[Thu Mar 05 18:32:54.956156 2026] [:error] [pid 53350:tid 53399] [client 163.7.9.86:55650] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin_info.php"] [unique_id "aalb1qO0Baxc5WFYeP3zAwAAARY"]
[Thu Mar 05 18:32:55.004382 2026] [:error] [pid 53350:tid 53375] [client 163.7.9.86:55658] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pinfo.php"] [unique_id "aalb16O0Baxc5WFYeP3zBAAAAQA"]
[Thu Mar 05 18:32:55.089138 2026] [:error] [pid 53350:tid 53391] [client 163.7.9.86:55678] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.environment"] [unique_id "aalb16O0Baxc5WFYeP3zBgAAAQ4"]
[Thu Mar 05 18:32:55.349610 2026] [:error] [pid 53350:tid 53382] [client 163.7.9.86:55694] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dbinfo.php"] [unique_id "aalb16O0Baxc5WFYeP3zBwAAAQc"]
[Thu Mar 05 18:32:57.039078 2026] [:error] [pid 41459:tid 41496] [client 163.7.9.86:55994] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.hsenv"] [unique_id "aalb2edFBZEnZ3pzxrX8LAAAAVY"]
[Thu Mar 05 18:32:57.212870 2026] [:error] [pid 53350:tid 53397] [client 163.7.9.86:56010] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment"] [unique_id "aalb2aO0Baxc5WFYeP3zDAAAARQ"]
[Thu Mar 05 18:32:57.964859 2026] [:error] [pid 41459:tid 41483] [client 163.7.9.86:58942] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.json"] [unique_id "aalb2edFBZEnZ3pzxrX8MgAAAUk"]
[Thu Mar 05 18:32:58.093654 2026] [:error] [pid 62177:tid 62321] [client 163.7.9.86:58960] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/envrc"] [unique_id "aalb2hWSQc2OzPrsnwW8ewAAAIo"]
[Thu Mar 05 18:32:58.191383 2026] [:error] [pid 62177:tid 62329] [client 163.7.9.86:58956] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env"] [unique_id "aalb2hWSQc2OzPrsnwW8fAAAAJE"]
[Thu Mar 05 18:32:58.229695 2026] [:error] [pid 62177:tid 62317] [client 163.7.9.86:58964] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev.local"] [unique_id "aalb2hWSQc2OzPrsnwW8fQAAAIY"]
[Thu Mar 05 18:32:58.468403 2026] [:error] [pid 62177:tid 62335] [client 163.7.9.86:58976] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.ts"] [unique_id "aalb2hWSQc2OzPrsnwW8fgAAAJc"]
[Thu Mar 05 18:32:58.839645 2026] [:error] [pid 62176:tid 62298] [client 163.7.9.86:58986] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env_old"] [unique_id "aalb2iNfTPJryi30JPnutAAAAE4"]
[Thu Mar 05 18:32:58.877449 2026] [:error] [pid 53350:tid 53388] [client 163.7.9.86:59000] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.zshenv"] [unique_id "aalb2qO0Baxc5WFYeP3zDwAAAQs"]
[Thu Mar 05 18:33:00.581885 2026] [:error] [pid 41459:tid 41490] [client 163.7.9.86:59024] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.ghc.environment"] [unique_id "aalb3OdFBZEnZ3pzxrX8NwAAAVA"]
[Thu Mar 05 18:33:00.693904 2026] [:error] [pid 62435:tid 62461] [client 163.7.9.86:59028] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.hsenv"] [unique_id "aalb3CMZJMDfZh_-8sVtRQAAAMs"]
[Thu Mar 05 18:33:00.875843 2026] [:error] [pid 41459:tid 41480] [client 163.7.9.86:59040] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.list"] [unique_id "aalb3OdFBZEnZ3pzxrX8OAAAAUY"]
[Thu Mar 05 18:33:01.101235 2026] [:error] [pid 62435:tid 62456] [client 163.7.9.86:59052] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment"] [unique_id "aalb3SMZJMDfZh_-8sVtRgAAAMY"]
[Thu Mar 05 18:33:01.129096 2026] [:error] [pid 41459:tid 41491] [client 163.7.9.86:59032] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development.sample"] [unique_id "aalb3edFBZEnZ3pzxrX8OQAAAVE"]
[Thu Mar 05 18:33:01.593148 2026] [:error] [pid 41459:tid 41484] [client 163.7.9.86:59072] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.rbenv-version"] [unique_id "aalb3edFBZEnZ3pzxrX8OwAAAUo"]
[Thu Mar 05 18:33:01.651643 2026] [:error] [pid 41459:tid 41492] [client 163.7.9.86:59096] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.txt"] [unique_id "aalb3edFBZEnZ3pzxrX8PAAAAVI"]
[Thu Mar 05 18:33:01.656908 2026] [:error] [pid 41459:tid 41493] [client 163.7.9.86:59080] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.zshenv"] [unique_id "aalb3edFBZEnZ3pzxrX8PQAAAVM"]
[Thu Mar 05 18:33:02.602081 2026] [:error] [pid 41459:tid 41476] [client 163.7.9.86:59108] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/envrc"] [unique_id "aalb3udFBZEnZ3pzxrX8QAAAAUI"]
[Thu Mar 05 18:33:03.074468 2026] [:error] [pid 62435:tid 62466] [client 163.7.9.86:59124] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.hsenv"] [unique_id "aalb3yMZJMDfZh_-8sVtSAAAANA"]
[Thu Mar 05 18:33:03.362186 2026] [:error] [pid 62435:tid 62451] [client 163.7.9.86:59142] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.list"] [unique_id "aalb3yMZJMDfZh_-8sVtSQAAAME"]
[Thu Mar 05 18:33:03.508788 2026] [:error] [pid 62435:tid 62469] [client 163.7.9.86:59158] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env-sample"] [unique_id "aalb3yMZJMDfZh_-8sVtSgAAANM"]
[Thu Mar 05 18:33:03.531523 2026] [:error] [pid 62176:tid 62292] [client 163.7.9.86:59188] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.ts"] [unique_id "aalb3yNfTPJryi30JPnuuAAAAEg"]
[Thu Mar 05 18:33:03.928267 2026] [:error] [pid 62177:tid 62320] [client 163.7.9.86:59200] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.rbenv-version"] [unique_id "aalb3xWSQc2OzPrsnwW8ggAAAIk"]
[Thu Mar 05 18:33:04.569068 2026] [:error] [pid 62177:tid 62319] [client 163.7.9.86:59210] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.zshenv"] [unique_id "aalb4BWSQc2OzPrsnwW8gwAAAIg"]
[Thu Mar 05 18:33:04.784631 2026] [:error] [pid 53350:tid 53391] [client 163.7.9.86:59218] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/envrc"] [unique_id "aalb4KO0Baxc5WFYeP3zEwAAAQ4"]
[Thu Mar 05 18:33:05.394467 2026] [:error] [pid 62177:tid 62329] [client 163.7.9.86:59244] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod.local"] [unique_id "aalb4RWSQc2OzPrsnwW8hQAAAJE"]
[Thu Mar 05 18:33:05.431044 2026] [:error] [pid 62177:tid 62317] [client 163.7.9.86:59232] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.hsenv"] [unique_id "aalb4RWSQc2OzPrsnwW8hgAAAIY"]
[Thu Mar 05 18:33:05.538695 2026] [:error] [pid 62177:tid 62335] [client 163.7.9.86:59256] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment"] [unique_id "aalb4RWSQc2OzPrsnwW8hwAAAJc"]
[Thu Mar 05 18:33:05.590495 2026] [:error] [pid 62435:tid 62463] [client 163.7.9.86:59272] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.travis"] [unique_id "aalb4SMZJMDfZh_-8sVtTQAAAM0"]
[Thu Mar 05 18:33:05.674476 2026] [:error] [pid 62177:tid 62334] [client 163.7.9.86:59280] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.ts"] [unique_id "aalb4RWSQc2OzPrsnwW8iAAAAJY"]
[Thu Mar 05 18:33:07.224102 2026] [:error] [pid 53350:tid 53389] [client 163.7.9.86:59282] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.rbenv-version"] [unique_id "aalb46O0Baxc5WFYeP3zFAAAAQw"]
[Thu Mar 05 18:33:08.856865 2026] [:error] [pid 62177:tid 62321] [client 163.7.9.86:48516] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.2"] [unique_id "aalb5BWSQc2OzPrsnwW8jwAAAIo"]
[Thu Mar 05 18:33:12.177051 2026] [:error] [pid 41459:tid 41482] [client 163.7.9.86:48544] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aalb6OdFBZEnZ3pzxrX8RgAAAUg"]
[Thu Mar 05 18:33:12.415344 2026] [:error] [pid 62177:tid 62326] [client 163.7.9.86:48546] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.txt"] [unique_id "aalb6BWSQc2OzPrsnwW8lAAAAI4"]
[Thu Mar 05 18:33:12.678574 2026] [:error] [pid 53350:tid 53400] [client 163.7.9.86:48550] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aalb6KO0Baxc5WFYeP3zFwAAARc"]
[Thu Mar 05 18:33:12.728263 2026] [:error] [pid 53350:tid 53391] [client 163.7.9.86:48562] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/printenv.tmp"] [unique_id "aalb6KO0Baxc5WFYeP3zGAAAAQ4"]
[Thu Mar 05 18:33:12.854349 2026] [:error] [pid 62176:tid 62292] [client 163.7.9.86:48578] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.flaskenv"] [unique_id "aalb6CNfTPJryi30JPnuvwAAAEg"]
[Thu Mar 05 18:33:12.862102 2026] [:error] [pid 41459:tid 41490] [client 163.7.9.86:48590] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test.local"] [unique_id "aalb6OdFBZEnZ3pzxrX8SAAAAVA"]
[Thu Mar 05 18:33:13.222115 2026] [:error] [pid 62177:tid 62325] [client 163.7.9.86:48598] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.jenv-version"] [unique_id "aalb6RWSQc2OzPrsnwW8lgAAAI0"]
[Thu Mar 05 18:33:13.391890 2026] [:error] [pid 53350:tid 53381] [client 163.7.9.86:48600] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.envrc"] [unique_id "aalb6aO0Baxc5WFYeP3zGQAAAQY"]
[Thu Mar 05 18:33:14.196516 2026] [:error] [pid 62176:tid 62299] [client 163.7.9.86:48614] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dist"] [unique_id "aalb6iNfTPJryi30JPnuwAAAAE8"]
[Thu Mar 05 18:33:14.770950 2026] [:error] [pid 53350:tid 53398] [client 163.7.9.86:48662] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.bak"] [unique_id "aalb6qO0Baxc5WFYeP3zHAAAARU"]
[Thu Mar 05 18:33:15.063235 2026] [:error] [pid 62177:tid 62311] [client 163.7.9.86:48664] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.php"] [unique_id "aalb6xWSQc2OzPrsnwW8mgAAAIA"]
[Thu Mar 05 18:33:15.412704 2026] [:error] [pid 53350:tid 53401] [client 163.7.9.86:48692] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pms"] [unique_id "aalb66O0Baxc5WFYeP3zHgAAARg"]
[Thu Mar 05 18:33:15.423802 2026] [:error] [pid 53350:tid 53380] [client 163.7.9.86:48706] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/k8s/.env"] [unique_id "aalb66O0Baxc5WFYeP3zHwAAAQU"]
[Thu Mar 05 18:33:15.900009 2026] [:error] [pid 62177:tid 62317] [client 163.7.9.86:48712] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/config/.env"] [unique_id "aalb6xWSQc2OzPrsnwW8ngAAAIY"]
[Thu Mar 05 18:33:15.910020 2026] [:error] [pid 53350:tid 53397] [client 163.7.9.86:48732] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aalb66O0Baxc5WFYeP3zIAAAARQ"]
[Thu Mar 05 18:33:15.910835 2026] [:error] [pid 53350:tid 53397] [client 163.7.9.86:48716] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aalb66O0Baxc5WFYeP3zIQAAARQ"]
[Thu Mar 05 18:33:16.046817 2026] [:error] [pid 53350:tid 53392] [client 163.7.9.86:48734] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "aalb7KO0Baxc5WFYeP3zIwAAAQ8"]
[Thu Mar 05 18:33:16.054023 2026] [:error] [pid 62173:tid 62253] [client 163.7.9.86:48748] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/src/.env"] [unique_id "aalb7Gj_GWbFb-1ncGlviQAAAAE"]
[Thu Mar 05 18:33:16.085098 2026] [:error] [pid 53350:tid 53377] [client 163.7.9.86:48764] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aalb7KO0Baxc5WFYeP3zJgAAAQI"]
[Thu Mar 05 18:33:16.092826 2026] [:error] [pid 53350:tid 53400] [client 163.7.9.86:48780] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.env"] [unique_id "aalb7KO0Baxc5WFYeP3zJwAAARc"]
[Thu Mar 05 18:33:16.214074 2026] [:error] [pid 53350:tid 53381] [client 163.7.9.86:48786] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/web/.env"] [unique_id "aalb7KO0Baxc5WFYeP3zKAAAAQY"]
[Thu Mar 05 18:33:16.304146 2026] [:error] [pid 53350:tid 53396] [client 163.7.9.86:48796] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/server/.env"] [unique_id "aalb7KO0Baxc5WFYeP3zKQAAARM"]
[Thu Mar 05 18:33:16.465479 2026] [:error] [pid 53350:tid 53382] [client 163.7.9.86:48810] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/client/.env"] [unique_id "aalb7KO0Baxc5WFYeP3zKwAAAQc"]
[Thu Mar 05 18:33:16.465495 2026] [:error] [pid 53350:tid 53395] [client 163.7.9.86:48824] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/frontend/.env"] [unique_id "aalb7KO0Baxc5WFYeP3zKgAAARI"]
[Thu Mar 05 18:33:16.511127 2026] [:error] [pid 53350:tid 53388] [client 163.7.9.86:48834] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aalb7KO0Baxc5WFYeP3zLAAAAQs"]
[Thu Mar 05 18:33:17.102779 2026] [:error] [pid 62173:tid 62255] [client 163.7.9.86:48838] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aalb7Wj_GWbFb-1ncGlviwAAAAM"]
[Thu Mar 05 18:33:17.103664 2026] [:error] [pid 53350:tid 53398] [client 163.7.9.86:48840] [client 163.7.9.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.live"] [unique_id "aalb7aO0Baxc5WFYeP3zLgAAARU"]
[Thu Mar 05 18:33:17.130156 2026] [:error] [pid 41459:tid 41482] [client 163.7.9.86:48844] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.json"] [unique_id "aalb7edFBZEnZ3pzxrX8TgAAAUg"]
[Thu Mar 05 18:33:17.402414 2026] [:error] [pid 41459:tid 41494] [client 163.7.9.86:58418] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/config.php"] [unique_id "aalb7edFBZEnZ3pzxrX8TwAAAVQ"]
[Thu Mar 05 18:33:17.499246 2026] [:error] [pid 62435:tid 62450] [client 163.7.9.86:58434] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/config.php"] [unique_id "aalb7SMZJMDfZh_-8sVtVQAAAMA"]
[Thu Mar 05 18:33:17.943996 2026] [:error] [pid 62177:tid 62325] [client 163.7.9.86:58444] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/config.php"] [unique_id "aalb7RWSQc2OzPrsnwW8nwAAAI0"]
[Thu Mar 05 18:33:18.613565 2026] [:error] [pid 53350:tid 53394] [client 163.7.9.86:58454] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/config.php"] [unique_id "aalb7qO0Baxc5WFYeP3zMQAAARE"]
[Thu Mar 05 18:33:18.614893 2026] [:error] [pid 53350:tid 53397] [client 163.7.9.86:58462] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backend/config.php"] [unique_id "aalb7qO0Baxc5WFYeP3zMgAAARQ"]
[Thu Mar 05 18:33:18.688472 2026] [:error] [pid 62435:tid 62472] [client 163.7.9.86:58464] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.jenv-version"] [unique_id "aalb7iMZJMDfZh_-8sVtVwAAANY"]
[Thu Mar 05 18:33:18.778708 2026] [:error] [pid 62173:tid 62262] [client 163.7.9.86:58468] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.flaskenv"] [unique_id "aalb7mj_GWbFb-1ncGlvjAAAAAo"]
[Thu Mar 05 18:33:19.087210 2026] [:error] [pid 62435:tid 62460] [client 163.7.9.86:58470] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/printenv"] [unique_id "aalb7yMZJMDfZh_-8sVtWAAAAMo"]
[Thu Mar 05 18:33:19.904500 2026] [:error] [pid 41459:tid 41483] [client 163.7.9.86:58514] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/env.bak"] [unique_id "aalb7-dFBZEnZ3pzxrX8VgAAAUk"]
[Thu Mar 05 18:33:20.713374 2026] [:error] [pid 53350:tid 53393] [client 163.7.9.86:58542] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src/config.php"] [unique_id "aalb8KO0Baxc5WFYeP3zNgAAARA"]
[Thu Mar 05 18:33:20.759632 2026] [:error] [pid 53350:tid 53391] [client 163.7.9.86:58552] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/database.php"] [unique_id "aalb8KO0Baxc5WFYeP3zNwAAAQ4"]
[Thu Mar 05 18:33:21.583310 2026] [:error] [pid 53350:tid 53394] [client 163.7.9.86:58578] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/app.php"] [unique_id "aalb8aO0Baxc5WFYeP3zOQAAARE"]
[Thu Mar 05 18:33:21.667082 2026] [:error] [pid 53350:tid 53401] [client 163.7.9.86:58568] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config/mail.php"] [unique_id "aalb8aO0Baxc5WFYeP3zOgAAARg"]
[Thu Mar 05 18:33:21.895712 2026] [:error] [pid 62435:tid 62463] [client 163.7.9.86:58592] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.json"] [unique_id "aalb8SMZJMDfZh_-8sVtWgAAAM0"]
[Thu Mar 05 18:33:22.397012 2026] [:error] [pid 41459:tid 41487] [client 163.7.9.86:58614] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/config.php"] [unique_id "aalb8udFBZEnZ3pzxrX8WAAAAU0"]
[Thu Mar 05 18:33:22.521670 2026] [:error] [pid 41459:tid 41492] [client 163.7.9.86:58624] [client 163.7.9.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/api/config.php"] [unique_id "aalb8udFBZEnZ3pzxrX8WQAAAVI"]
[Thu Mar 05 19:08:13.269531 2026] [:error] [pid 53350:tid 53397] [client 103.77.106.118:61949] [client 103.77.106.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aalkHaO0Baxc5WFYeP0ChQAAARQ"]
[Thu Mar 05 19:08:13.488261 2026] [:error] [pid 53350:tid 53385] [client 103.77.106.118:61974] [client 103.77.106.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aalkHaO0Baxc5WFYeP0CiAAAAQk"]
[Thu Mar 05 19:10:57.658847 2026] [:error] [pid 53350:tid 53380] [client 170.78.33.43:16315] [client 170.78.33.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.78.33.43, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aalkwaO0Baxc5WFYeP0EpwAAAQU"]
[Thu Mar 05 19:10:57.663815 2026] [:error] [pid 53350:tid 53380] [client 170.78.33.43:16315] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 05 20:09:50.056534 2026] [:error] [pid 53350:tid 53391] [client 43.157.170.126:48860] [client 43.157.170.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aalyjqO0Baxc5WFYeP0uVAAAAQ4"]
[Thu Mar 05 22:40:29.192901 2026] [:error] [pid 53350:tid 53383] [client 157.15.40.88:51261] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "aamV3aO0Baxc5WFYeP2FjgAAAQg"]
[Thu Mar 05 22:40:29.503476 2026] [:error] [pid 41459:tid 41475] [client 157.15.40.88:51353] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/txets.php"] [unique_id "aamV3edFBZEnZ3pzxrWEsAAAAUE"]
[Thu Mar 05 22:40:29.762893 2026] [:error] [pid 62177:tid 62315] [client 157.15.40.88:51447] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/txets.php"] [unique_id "aamV3RWSQc2OzPrsnwX6nwAAAIQ"]
[Thu Mar 05 22:40:30.022659 2026] [:error] [pid 62435:tid 62463] [client 157.15.40.88:51530] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/txets.php"] [unique_id "aamV3iMZJMDfZh_-8sWTQAAAAM0"]
[Thu Mar 05 22:40:30.282289 2026] [:error] [pid 62177:tid 62329] [client 157.15.40.88:51603] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/schallfuns.php"] [unique_id "aamV3hWSQc2OzPrsnwX6vQAAAJE"]
[Thu Mar 05 22:40:30.601405 2026] [:error] [pid 62176:tid 62307] [client 157.15.40.88:51676] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/postnews.php"] [unique_id "aamV3iNfTPJryi30JPkKLwAAAFc"]
[Thu Mar 05 22:40:30.882929 2026] [:error] [pid 8151:tid 8217] [client 157.15.40.88:51759] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/postnews.php"] [unique_id "aamV3pO3dLEidct1HvCppAAAAYA"]
[Thu Mar 05 22:40:31.195961 2026] [:error] [pid 8151:tid 8220] [client 157.15.40.88:51821] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/postnews.php"] [unique_id "aamV35O3dLEidct1HvCpuQAAAYE"]
[Thu Mar 05 22:40:31.456154 2026] [:error] [pid 62176:tid 62306] [client 157.15.40.88:51904] [client 157.15.40.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/postnews.php"] [unique_id "aamV3yNfTPJryi30JPkKQAAAAFY"]
[Fri Mar 06 00:30:47.039179 2026] [:error] [pid 48372:tid 48400] [client 20.198.80.140:6603] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Mar 06 00:30:47.219263 2026] [:error] [pid 48372:tid 48393] [client 20.198.80.140:6603] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Mar 06 00:30:47.395680 2026] [:error] [pid 48372:tid 48401] [client 20.198.80.140:6603] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 06 00:30:47.948549 2026] [:error] [pid 48372:tid 48393] [client 20.198.80.140:6603] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 06 00:30:48.129099 2026] [:error] [pid 48372:tid 48411] [client 20.198.80.140:6603] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 06 00:30:48.489472 2026] [:error] [pid 48372:tid 48387] [client 20.198.80.140:6603] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 06 00:30:49.016606 2026] [:error] [pid 48372:tid 48400] [client 20.198.80.140:6603] [client 20.198.80.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aamvuUWaQyQyfhXPRrb73wAAAUw"]
[Fri Mar 06 00:30:49.721408 2026] [:error] [pid 48372:tid 48388] [client 20.198.80.140:6897] [client 20.198.80.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aamvuUWaQyQyfhXPRrb74AAAAUE"]
[Fri Mar 06 00:30:50.481208 2026] [:error] [pid 47665:tid 48024] [client 20.198.80.140:11749] [client 20.198.80.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aamvunvwcWrOi3qzRcdvXwAAAMg"]
[Fri Mar 06 00:30:51.192305 2026] [:error] [pid 47665:tid 48035] [client 20.198.80.140:6398] [client 20.198.80.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aamvu3vwcWrOi3qzRcdvYAAAANI"]
[Fri Mar 06 00:42:38.452300 2026] [:error] [pid 48372:tid 48397] [client 103.77.107.222:62442] [client 103.77.107.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aamyfkWaQyQyfhXPRrYFCgAAAUo"]
[Fri Mar 06 00:42:38.681269 2026] [:error] [pid 47665:tid 48040] [client 103.77.107.222:62558] [client 103.77.107.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aamyfnvwcWrOi3qzRcdygAAAANY"]
[Fri Mar 06 01:37:54.988686 2026] [:error] [pid 27687:tid 27722] [client 43.166.253.94:37732] [client 43.166.253.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aam_ckI2IG23EwU7sL8nfQAAAJU"]
[Fri Mar 06 09:05:02.478565 2026] [:error] [pid 8656:tid 8823] [client 99.209.173.182:64013] [client 99.209.173.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.209.173.182, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaooPpPxTG9Ff1TtP6NauAAAAI0"]
[Fri Mar 06 09:05:02.483949 2026] [:error] [pid 8656:tid 8823] [client 99.209.173.182:64013] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 09:06:30.018405 2026] [:error] [pid 44628:tid 44654] [client 189.91.231.46:57642] [client 189.91.231.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.91.231.46, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaooloZtiq7T54_AYvKW6AAAAUk"]
[Fri Mar 06 09:06:30.023694 2026] [:error] [pid 44628:tid 44654] [client 189.91.231.46:57642] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 09:36:12.367833 2026] [:error] [pid 44628:tid 44656] [client 115.147.38.123:62396] [client 115.147.38.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.147.38.123, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaovjIZtiq7T54_AYvKdFQAAAUs"]
[Fri Mar 06 09:36:12.373920 2026] [:error] [pid 44628:tid 44656] [client 115.147.38.123:62396] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 09:36:14.807511 2026] [:error] [pid 8656:tid 8819] [client 143.44.165.250:19666] [client 143.44.165.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.44.165.250, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aaovjpPxTG9Ff1TtP6N6fQAAAIk"]
[Fri Mar 06 09:36:14.812441 2026] [:error] [pid 8656:tid 8819] [client 143.44.165.250:19666] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 06 10:34:33.268982 2026] [:error] [pid 8945:tid 8971] [client 43.135.130.202:44168] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aao9OQttiLGNg13nMzJ7RAAAAMQ"]
[Fri Mar 06 11:55:46.153402 2026] [:error] [pid 16140:tid 16152] [client 223.15.245.170:36873] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aapQQpZVpEeGhAeSpv0APAAAAQo"]
[Fri Mar 06 18:27:49.626279 2026] [:error] [pid 59239:tid 59275] [client 60.188.57.0:39713] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aaqsJbG1EpnE909fvGeBgQAAA8Y"]
[Fri Mar 06 20:12:30.834074 2026] [:error] [pid 59237:tid 59266] [client 43.155.140.157:47746] [client 43.155.140.157] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aarEruqfMSBs0nxOTxEtXgAAA5g"]
[Fri Mar 06 22:11:25.841689 2026] [:error] [pid 59037:tid 59061] [client 43.133.66.51:56506] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aargjfLSf47J21UqfPZPsQAAAko"]
[Fri Mar 06 23:10:54.779145 2026] [:error] [pid 59237:tid 59246] [client 62.60.131.218:62208] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aarufuqfMSBs0nxOTxGY2AAAA4Q"]
[Fri Mar 06 23:30:32.775625 2026] [:error] [pid 16140:tid 16157] [client 45.168.89.184:40693] [client 45.168.89.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.89.184, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aarzGJZVpEeGhAeSpv0lhQAAAQ8"]
[Fri Mar 06 23:30:32.781721 2026] [:error] [pid 16140:tid 16157] [client 45.168.89.184:40693] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 07 01:31:47.212013 2026] [:error] [pid 7406:tid 7494] [client 182.44.10.67:43280] [client 182.44.10.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aasPg3tbeE4NFKnz6vfriQAAANc"]
[Sat Mar 07 07:26:56.823765 2026] [:error] [pid 4311:tid 4419] [client 43.138.68.113:57244] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aatiwHbyS653WMGf2vUBIwAAAEA"]
[Sat Mar 07 08:28:16.954930 2026] [:error] [pid 4307:tid 4400] [client 62.60.131.218:57939] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aatxIDeKp4wgnLc38f9erQAAABI"]
[Sat Mar 07 13:43:43.100890 2026] [:error] [pid 4609:tid 4641] [client 149.50.204.86:2172] [client 149.50.204.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 149.50.204.86, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aau7D-P7JMxUbw4Fd1YBCgAAAM0"]
[Sat Mar 07 13:43:43.107500 2026] [:error] [pid 4609:tid 4641] [client 149.50.204.86:2172] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 07 13:44:57.583234 2026] [:error] [pid 52484:tid 52507] [client 129.222.69.176:17707] [client 129.222.69.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 129.222.69.176, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aau7WfE9AnX6zUICFeQ_wgAAAQQ"]
[Sat Mar 07 13:44:57.592203 2026] [:error] [pid 52484:tid 52507] [client 129.222.69.176:17707] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 07 13:50:10.080180 2026] [:error] [pid 37998:tid 38064] [client 14.215.163.132:56284] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aau8ksl3xHpv0STGaSaWeAAAAVQ"]
[Sat Mar 07 14:37:33.379669 2026] [:error] [pid 37998:tid 38043] [client 34.24.47.138:59793] [client 34.24.47.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "aavHrcl3xHpv0STGaSbBKgAAAUA"]
[Sat Mar 07 15:17:50.804826 2026] [:error] [pid 4609:tid 4641] [client 43.135.148.92:46302] [client 43.135.148.92] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aavRHuP7JMxUbw4Fd1YhDgAAAM0"]
[Sat Mar 07 17:01:17.671079 2026] [:error] [pid 52484:tid 52508] [client 193.32.126.227:61878] [client 193.32.126.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.32.126.227, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aavpXfE9AnX6zUICFeR8BAAAAQU"]
[Sat Mar 07 17:01:17.674682 2026] [:error] [pid 52484:tid 52508] [client 193.32.126.227:61878] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Mar 07 17:43:56.140644 2026] [:error] [pid 31847:tid 31877] [client 89.163.146.197:64310] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Sat Mar 07 17:44:06.692670 2026] [:error] [pid 54127:tid 54146] [client 89.163.146.197:53646] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Sat Mar 07 21:13:47.891983 2026] [:error] [pid 31847:tid 31874] [client 101.33.80.42:48636] [client 101.33.80.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aawki_TG-z9jwgL8vXkunAAAAk0"]
[Sun Mar 08 03:36:19.325551 2026] [:error] [pid 43803:tid 43814] [client 14.215.163.132:34257] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aax-M3JlKBd3YjuckbJUVgAAAMk"]
[Sun Mar 08 08:07:48.341555 2026] [:error] [pid 22667:tid 22714] [client 49.184.141.130:57652] [client 49.184.141.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.184.141.130, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aay91OG7qk1roo-TRWNAbAAAAkk"]
[Sun Mar 08 08:07:48.346811 2026] [:error] [pid 22667:tid 22714] [client 49.184.141.130:57652] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 08 09:29:52.341261 2026] [:error] [pid 22788:tid 22877] [client 203.2.64.59:48688] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aazREEhwluk21OG9mScb3AAAA5Y"]
[Sun Mar 08 11:34:59.433325 2026] [:error] [pid 22790:tid 22884] [client 43.157.50.58:34412] [client 43.157.50.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aazuYxXbGDWrzD_dTOcNKwAAA8I"]
[Sun Mar 08 16:22:19.368498 2026] [:error] [pid 22561:tid 22570] [client 189.63.161.85:13340] [client 189.63.161.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.63.161.85, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa0xu8IVn0KLevwXc5FDtQAAAUU"]
[Sun Mar 08 16:22:19.374198 2026] [:error] [pid 22561:tid 22570] [client 189.63.161.85:13340] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 08 21:33:02.290880 2026] [:error] [pid 43671:tid 43740] [client 43.157.22.57:52914] [client 43.157.22.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aa16jq6AdwroU1gT3XHMTAAAAFE"]
[Sun Mar 08 23:09:21.259760 2026] [:error] [pid 22669:tid 22775] [client 123.187.240.242:48249] [client 123.187.240.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aa2RIWvqAhy8LIaua-rIhgAAAtA"]
[Mon Mar 09 03:19:36.173573 2026] [:error] [pid 35336:tid 35369] [client 43.153.54.14:36014] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aa3LyMDMRsOs0sTa1guZsgAAANY"]
[Mon Mar 09 05:34:03.413574 2026] [:error] [pid 5787:tid 5940] [client 203.2.64.59:53806] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aa3rS7GpMgQ18gGUaFNm2wAAAJI"]
[Mon Mar 09 06:20:19.746993 2026] [:error] [pid 6074:tid 6110] [client 20.196.201.163:9616] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Mon Mar 09 06:20:19.886645 2026] [:error] [pid 6074:tid 6108] [client 20.196.201.163:9616] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Mar 09 06:20:20.027726 2026] [:error] [pid 6074:tid 6109] [client 20.196.201.163:9616] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 09 06:20:20.167193 2026] [:error] [pid 6074:tid 6097] [client 20.196.201.163:9616] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Mar 09 06:20:20.308030 2026] [:error] [pid 6074:tid 6111] [client 20.196.201.163:9616] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Mar 09 06:20:20.447854 2026] [:error] [pid 6074:tid 6093] [client 20.196.201.163:9616] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Mon Mar 09 06:20:20.583707 2026] [:error] [pid 6074:tid 6099] [client 20.196.201.163:9616] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aa32JBgvXHMVGYw_ElzdDgAAAMg"]
[Mon Mar 09 06:20:21.162612 2026] [:error] [pid 17485:tid 17493] [client 20.196.201.163:5778] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aa32JdQOL_kxQEc1PTCPOAAAAQU"]
[Mon Mar 09 06:20:21.711251 2026] [:error] [pid 17485:tid 17490] [client 20.196.201.163:9479] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aa32JdQOL_kxQEc1PTCPPAAAAQI"]
[Mon Mar 09 06:20:22.251272 2026] [:error] [pid 17485:tid 17506] [client 20.196.201.163:9623] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "aa32JtQOL_kxQEc1PTCPPgAAARI"]
[Mon Mar 09 10:20:47.917452 2026] [:error] [pid 17485:tid 17502] [client 172.105.116.61:55108] [client 172.105.116.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wordpress"] [unique_id "aa4uf9QOL_kxQEc1PTBoBAAAAQ4"]
[Mon Mar 09 11:39:56.568694 2026] [:error] [pid 2145:tid 2191] [client 49.234.192.248:36584] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aa5BDHczzpD9XHtKwuCmTwAAAVM"]
[Mon Mar 09 14:39:30.676308 2026] [:error] [pid 5787:tid 5937] [client 168.197.230.234:47194] [client 168.197.230.234] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.197.230.234, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa5rIrGpMgQ18gGUaFMNFwAAAI8"]
[Mon Mar 09 14:39:30.685046 2026] [:error] [pid 5787:tid 5937] [client 168.197.230.234:47194] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 09 14:40:27.117565 2026] [:error] [pid 5779:tid 5875] [client 36.50.162.207:64161] [client 36.50.162.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.50.162.207, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa5rWwaHbHwtklaurgWwDgAAABQ"]
[Mon Mar 09 14:40:27.122892 2026] [:error] [pid 5779:tid 5875] [client 36.50.162.207:64161] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 09 14:46:33.106091 2026] [:error] [pid 17485:tid 17505] [client 197.248.89.127:5894] [client 197.248.89.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.248.89.127, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa5sydQOL_kxQEc1PTBeVAAAARE"]
[Mon Mar 09 14:46:33.110845 2026] [:error] [pid 17485:tid 17505] [client 197.248.89.127:5894] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 09 15:54:05.519263 2026] [:error] [pid 5787:tid 5936] [client 43.166.226.186:55262] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aa58nbGpMgQ18gGUaFMfuQAAAI4"]
[Mon Mar 09 18:02:42.472435 2026] [:error] [pid 44503:tid 44520] [client 170.106.72.93:53052] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aa6awspGKFA8jlKDDh2hjwAAAc0"]
[Mon Mar 09 18:24:52.482677 2026] [:error] [pid 5787:tid 5930] [client 106.54.62.156:34636] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aa6f9LGpMgQ18gGUaFOXCAAAAIg"]
[Mon Mar 09 23:27:12.292210 2026] [:error] [pid 5787:tid 5944] [client 43.153.67.21:37438] [client 43.153.67.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aa7m0LGpMgQ18gGUaFMchwAAAJY"]
[Tue Mar 10 00:34:23.917288 2026] [:error] [pid 64775:tid 64782] [client 143.105.233.187:13726] [client 143.105.233.187] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.105.233.187, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa72j-D6wJvkR_jrqnV_MQAAAQM"]
[Tue Mar 10 00:34:23.932213 2026] [:error] [pid 64775:tid 64782] [client 143.105.233.187:13726] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 10 01:17:54.036240 2026] [:error] [pid 64612:tid 64635] [client 221.229.106.25:35836] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aa8AwjQRjxCMnE2VMUh9twAAAAs"]
[Tue Mar 10 03:43:35.035523 2026] [:error] [pid 64775:tid 64787] [client 104.28.159.135:26044] [client 104.28.159.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aa8i5-D6wJvkR_jrqnXeFwAAAQg"]
[Tue Mar 10 05:23:21.679722 2026] [:error] [pid 8193:tid 8228] [client 62.60.131.218:58056] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aa86SR27LTs3sNpMSvwQXgAAAMg"]
[Tue Mar 10 05:40:48.757672 2026] [:error] [pid 7904:tid 8008] [client 62.60.131.218:58398] [client 62.60.131.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aa8-YNqdH-GCmASfJqHgSQAAABA"]
[Tue Mar 10 09:01:06.342071 2026] [:error] [pid 31981:tid 32141] [client 43.153.96.233:51806] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aa9tUrAfo6Bks64fCDZ3AQAAAIg"]
[Tue Mar 10 11:13:12.020459 2026] [:error] [pid 42730:tid 42739] [client 43.153.96.233:51374] [client 43.153.96.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aa-MSMhla5zfkJ-81FAqxAAAAcc"]
[Tue Mar 10 12:29:46.941591 2026] [:error] [pid 42666:tid 42678] [client 99.209.173.182:54211] [client 99.209.173.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.209.173.182, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-eOo0d5emjo-Hs705rGwAAAQo"]
[Tue Mar 10 12:29:46.946803 2026] [:error] [pid 42666:tid 42678] [client 99.209.173.182:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 10 12:30:27.368045 2026] [:error] [pid 39998:tid 40075] [client 152.237.114.21:63347] [client 152.237.114.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.237.114.21, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-eY40j9Ehux9Dpvl9DjQAAAIU"]
[Tue Mar 10 12:30:27.373978 2026] [:error] [pid 39998:tid 40075] [client 152.237.114.21:63347] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 10 12:30:36.982226 2026] [:error] [pid 42759:tid 42785] [client 223.185.58.114:30445] [client 223.185.58.114] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.58.114, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-ebPoOpjBGGv-2UuxpxAAAAhc"]
[Tue Mar 10 12:30:36.988561 2026] [:error] [pid 42759:tid 42785] [client 223.185.58.114:30445] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 10 12:30:50.058589 2026] [:error] [pid 42666:tid 42674] [client 103.50.150.73:23007] [client 103.50.150.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.50.150.73, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aa-eeo0d5emjo-Hs705rbgAAAQY"]
[Tue Mar 10 12:30:50.063658 2026] [:error] [pid 42666:tid 42674] [client 103.50.150.73:23007] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 10 16:57:46.745739 2026] [:error] [pid 21318:tid 21384] [client 139.59.32.166:60166] [client 139.59.32.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/"] [unique_id "aa_dChTTkPqKydpYiIKFXQAAAIo"], referer: binance.com
[Tue Mar 10 16:57:57.571462 2026] [:error] [pid 21317:tid 21361] [client 139.59.32.166:62344] [client 139.59.32.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "aa_dFVUUqcn7vK991D2YDgAAAE4"], referer: binance.com
[Tue Mar 10 16:58:07.492924 2026] [:error] [pid 21318:tid 21397] [client 139.59.32.166:64321] [client 139.59.32.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "aa_dHxTTkPqKydpYiIKFigAAAJc"], referer: binance.com
2026/03/10 19:52:16 [error] 14458#14458: *82042 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.68.236.95, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/10 19:52:17 [error] 14456#14456: *82053 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.68.236.95, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/10 20:38:31 [error] 3834#3834: *116984 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/woocommerce/readme.txt" failed (2: No such file or directory), client: 86.54.25.131, server: dbservices.com.au, request: "GET /wp-content/plugins/woocommerce/readme.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/10 21:37:44 [error] 3846#3846: *160315 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.175.129, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/10 21:59:48 [error] 3834#3834: *175390 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 52.167.144.57, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 00:07:52 [error] 3846#3846: *269176 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/v3/payment_gateways" failed (2: No such file or directory), client: 79.127.155.174, server: dbservices.com.au, request: "GET /wp-json/wc/v3/payment_gateways HTTP/1.1", host: "dbservices.com.au"
2026/03/11 00:07:53 [error] 3843#3843: *269182 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/v2/payment_gateways" failed (2: No such file or directory), client: 79.127.155.174, server: dbservices.com.au, request: "GET /wp-json/wc/v2/payment_gateways HTTP/1.1", host: "dbservices.com.au"
2026/03/11 00:07:53 [error] 3819#3819: *269190 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/store/v1/cart" failed (2: No such file or directory), client: 79.127.155.174, server: dbservices.com.au, request: "GET /wp-json/wc/store/v1/cart HTTP/1.1", host: "dbservices.com.au"
2026/03/11 00:07:54 [error] 3823#3823: *269196 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/store/v1/payment_methods" failed (2: No such file or directory), client: 79.127.155.174, server: dbservices.com.au, request: "GET /wp-json/wc/store/v1/payment_methods HTTP/1.1", host: "dbservices.com.au"
2026/03/11 00:52:28 [error] 6419#6419: *301017 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 154.136.149.77, server: dbservices.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "dbservices.com.au"
2026/03/11 00:59:54 [error] 6425#6425: *305401 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 66.249.75.169, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 01:42:48 [error] 6426#6426: *336385 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.89.129.34, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 02:05:41 [error] 6428#6428: *353089 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.237, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 02:05:42 [error] 6426#6426: *353108 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.227, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 02:05:42 [error] 6425#6425: *353126 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.242, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 02:05:43 [error] 6424#6424: *353137 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.233, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 03:04:57 [error] 6420#6420: *395177 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.241.175, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 07:48:40 [error] 3465#3465: *581860 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 209.87.169.123, server: dbservices.com.au, request: "GET /wp-login.php HTTP/1.1", host: "dbservices.com.au"
2026/03/11 09:15:52 [error] 3459#3459: *631117 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 185.104.253.138, server: dbservices.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "dbservices.com.au"
2026/03/11 11:07:47 [error] 53946#53946: *689617 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 184.32.71.168, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 11:18:33 [error] 53948#53948: *696233 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.253, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 11:18:34 [error] 53944#53944: *696243 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.253, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 11:18:34 [error] 53946#53946: *696250 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.233, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 11:18:35 [error] 53947#53947: *696254 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.174.58.227, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 11:18:38 [error] 53941#53941: *696278 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 54.174.58.249, server: dbservices.com.au, request: "GET /favicon.ico HTTP/1.1", host: "dbservices.com.au", referrer: "https://dbservices.com.au/"
2026/03/11 11:18:41 [error] 53948#53948: *696298 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 54.174.58.226, server: dbservices.com.au, request: "GET /favicon.ico HTTP/1.1", host: "dbservices.com.au", referrer: "https://dbservices.com.au/"
2026/03/11 12:06:06 [error] 53946#53946: *726417 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 3.126.163.49, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 12:06:08 [error] 53948#53948: *726424 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 18.159.234.92, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 12:06:08 [error] 53944#53944: *726437 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 3.127.53.179, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 12:06:09 [error] 53937#53937: *726441 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 3.127.178.149, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 12:43:10 [error] 53942#53942: *750720 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 44.251.95.230, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 15:05:17 [error] 53948#53948: *836685 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.75, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 15:05:18 [error] 53948#53948: *836694 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.74, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 15:05:18 [error] 53948#53948: *836709 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.95, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 15:05:18 [error] 53947#53947: *836714 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.94, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 17:09:38 [error] 53948#53948: *926461 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.68, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 17:09:39 [error] 53948#53948: *926473 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.79, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 17:09:39 [error] 53948#53948: *926487 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.95, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 17:09:40 [error] 53947#53947: *926495 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.68, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 19:07:58 [error] 53946#53946: *1015446 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.244.66.194, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 19:47:43 [error] 53947#53947: *1044067 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 177.253.181.186, server: dbservices.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "dbservices.com.au"
2026/03/11 20:09:35 [error] 53941#53941: *1060398 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 18.159.231.78, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 20:09:36 [error] 53948#53948: *1060413 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 18.193.15.23, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 20:09:37 [error] 53947#53947: *1060423 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 18.193.15.23, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 20:09:37 [error] 53946#53946: *1060430 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 3.127.178.149, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 22:40:50 [error] 53946#53946: *1169702 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.81, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 22:40:51 [error] 53947#53947: *1169715 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.78, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 22:40:51 [error] 53948#53948: *1169723 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.81, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 22:40:52 [error] 53941#53941: *1169728 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.41.81, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 23:28:23 [error] 53948#53948: *1202839 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.94, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 23:28:23 [error] 53947#53947: *1202853 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.87, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/11 23:28:24 [error] 53947#53947: *1202858 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.91, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/11 23:28:24 [error] 53947#53947: *1202862 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 216.157.40.91, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.dbservices.com.au"
2026/03/12 02:08:02 [error] 53500#53500: *1317055 openat() "/usr/local/apache/htdocs/suspended-page/go.php" failed (2: No such file or directory), client: 145.239.10.137, server: dbservices.com.au, request: "GET /go.php HTTP/1.1", host: "dbservices.com.au", referrer: "http://dbservices.com.au/go.php"
2026/03/12 02:08:03 [error] 53494#53494: *1317057 openat() "/usr/local/apache/htdocs/suspended-page/gmo.php" failed (2: No such file or directory), client: 145.239.10.137, server: dbservices.com.au, request: "GET /gmo.php HTTP/1.1", host: "dbservices.com.au", referrer: "http://dbservices.com.au/gmo.php"
2026/03/12 02:48:21 [error] 53500#53500: *1343021 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 51.161.65.52, server: dbservices.com.au, request: "GET /robots.txt HTTP/1.1", host: "dbservices.com.au"
2026/03/12 04:27:59 [error] 58921#58921: *1400405 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 196.118.14.253, server: dbservices.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "dbservices.com.au"
2026/03/12 04:29:40 [error] 58922#58922: *1400948 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 14.1.105.163, server: dbservices.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "dbservices.com.au"
[Thu Mar 12 07:24:00.073519 2026] [:error] [pid 51540:tid 51565] [client 43.159.128.155:38954] [client 43.159.128.155] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abH5kGOFFjotMIN2UD06AwAAANc"]
[Thu Mar 12 09:42:06.134915 2026] [:error] [pid 51455:tid 51465] [client 170.106.187.106:43068] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abIZ7pE0YyNxdg6PL_Ac-QAAAAU"]
[Thu Mar 12 10:41:54.718097 2026] [:error] [pid 51455:tid 51463] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Thu Mar 12 10:41:55.666838 2026] [:error] [pid 51455:tid 51463] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Thu Mar 12 10:41:55.875943 2026] [:error] [pid 51455:tid 51471] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Thu Mar 12 10:41:56.297412 2026] [:error] [pid 51455:tid 51464] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Thu Mar 12 10:41:56.509751 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Mar 12 10:41:56.719118 2026] [:error] [pid 51455:tid 51475] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Mar 12 10:41:56.933922 2026] [:error] [pid 51455:tid 51463] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 12 10:41:57.144428 2026] [:error] [pid 51455:tid 51477] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Thu Mar 12 10:41:57.354214 2026] [:error] [pid 51455:tid 51479] [client 4.204.236.223:30109] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu Mar 12 10:41:57.560509 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:30109] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "abIn9ZE0YyNxdg6PL_A7SQAAAAw"]
[Thu Mar 12 10:41:58.037798 2026] [:error] [pid 51455:tid 51465] [client 4.204.236.223:51884] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "abIn9pE0YyNxdg6PL_A7WQAAAAU"]
[Thu Mar 12 10:41:58.516480 2026] [:error] [pid 8249:tid 8267] [client 4.204.236.223:51889] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "abIn9iK5dL3-8Jdf0M32ogAAARA"]
[Thu Mar 12 10:41:58.977521 2026] [:error] [pid 51455:tid 51460] [client 4.204.236.223:30088] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "abIn9pE0YyNxdg6PL_A7XwAAAAA"]
[Thu Mar 12 10:41:59.491955 2026] [:error] [pid 11985:tid 12004] [client 4.204.236.223:51880] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "abIn93cAcNujsOssVDfeLwAAAY0"]
[Thu Mar 12 10:42:00.006176 2026] [:error] [pid 51540:tid 51542] [client 4.204.236.223:30104] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "abIn-GOFFjotMIN2UD15vgAAAMA"]
[Thu Mar 12 10:42:00.521641 2026] [:error] [pid 8249:tid 8261] [client 4.204.236.223:51846] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "abIn-CK5dL3-8Jdf0M32pgAAAQo"]
[Thu Mar 12 10:42:01.035041 2026] [:error] [pid 51455:tid 51483] [client 4.204.236.223:30100] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "abIn-ZE0YyNxdg6PL_A7ZQAAABc"]
[Thu Mar 12 10:42:01.555698 2026] [:error] [pid 8249:tid 8269] [client 4.204.236.223:30127] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "abIn-SK5dL3-8Jdf0M32qQAAARI"]
[Thu Mar 12 10:42:02.070621 2026] [:error] [pid 8249:tid 8271] [client 4.204.236.223:29504] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "abIn-iK5dL3-8Jdf0M32qwAAARQ"]
[Thu Mar 12 10:42:02.588613 2026] [:error] [pid 51455:tid 51478] [client 4.204.236.223:51842] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "abIn-pE0YyNxdg6PL_A7aQAAABI"]
[Thu Mar 12 10:42:03.101565 2026] [:error] [pid 51455:tid 51481] [client 4.204.236.223:29505] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "abIn-5E0YyNxdg6PL_A7awAAABU"]
[Thu Mar 12 10:42:03.615623 2026] [:error] [pid 8249:tid 8257] [client 4.204.236.223:30105] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "abIn-yK5dL3-8Jdf0M32rwAAAQY"]
[Thu Mar 12 10:42:04.076782 2026] [:error] [pid 8249:tid 8264] [client 4.204.236.223:51879] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "abIn_CK5dL3-8Jdf0M32tAAAAQ0"]
[Thu Mar 12 10:42:04.541306 2026] [:error] [pid 51455:tid 51463] [client 4.204.236.223:51891] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "abIn_JE0YyNxdg6PL_A7cQAAAAM"]
[Thu Mar 12 10:42:05.059653 2026] [:error] [pid 8249:tid 8254] [client 4.204.236.223:51896] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "abIn_SK5dL3-8Jdf0M32uAAAAQM"]
[Thu Mar 12 10:42:05.572744 2026] [:error] [pid 11986:tid 12037] [client 4.204.236.223:30082] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "abIn_TKqY2w-DVCrxTCjewAAAdM"]
[Thu Mar 12 10:42:06.088642 2026] [:error] [pid 51540:tid 51544] [client 4.204.236.223:51871] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "abIn_mOFFjotMIN2UD15wAAAAMI"]
[Thu Mar 12 10:42:06.605086 2026] [:error] [pid 51455:tid 51473] [client 4.204.236.223:30085] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "abIn_pE0YyNxdg6PL_A7eQAAAA0"]
[Thu Mar 12 10:42:07.117030 2026] [:error] [pid 11985:tid 12005] [client 4.204.236.223:30120] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "abIn_3cAcNujsOssVDfeMQAAAY4"]
[Thu Mar 12 10:42:07.629931 2026] [:error] [pid 8249:tid 8264] [client 4.204.236.223:51845] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "abIn_yK5dL3-8Jdf0M32wAAAAQ0"]
[Thu Mar 12 10:42:08.096877 2026] [:error] [pid 8249:tid 8258] [client 4.204.236.223:51897] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "abIoACK5dL3-8Jdf0M32wwAAAQc"]
[Thu Mar 12 10:42:08.560008 2026] [:error] [pid 51456:tid 51503] [client 4.204.236.223:30114] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "abIoABXu8LzVixNGr0tAgwAAAFA"]
[Thu Mar 12 10:42:09.073150 2026] [:error] [pid 51455:tid 51470] [client 4.204.236.223:51882] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "abIoAZE0YyNxdg6PL_A7fgAAAAo"]
[Thu Mar 12 10:42:09.590206 2026] [:error] [pid 51455:tid 51483] [client 4.204.236.223:51852] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "abIoAZE0YyNxdg6PL_A7fwAAABc"]
[Thu Mar 12 10:42:10.103420 2026] [:error] [pid 11985:tid 11992] [client 4.204.236.223:51888] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "abIoAncAcNujsOssVDfeMgAAAYE"]
[Thu Mar 12 10:42:10.615932 2026] [:error] [pid 11985:tid 11998] [client 4.204.236.223:30128] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "abIoAncAcNujsOssVDfeMwAAAYc"]
[Thu Mar 12 10:42:11.127552 2026] [:error] [pid 22063:tid 22086] [client 4.204.236.223:30119] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "abIoA60RUhS-MJyHWLSFgwAAAhU"]
[Thu Mar 12 10:42:11.640113 2026] [:error] [pid 8249:tid 8259] [client 4.204.236.223:30115] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "abIoAyK5dL3-8Jdf0M32ywAAAQg"]
[Thu Mar 12 10:42:12.162467 2026] [:error] [pid 51455:tid 51460] [client 4.204.236.223:30087] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "abIoBJE0YyNxdg6PL_A7gwAAAAA"]
[Thu Mar 12 10:42:12.675171 2026] [:error] [pid 22063:tid 22072] [client 4.204.236.223:30113] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "abIoBK0RUhS-MJyHWLSFhAAAAgc"]
[Thu Mar 12 10:42:13.187446 2026] [:error] [pid 11953:tid 11971] [client 4.204.236.223:51900] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "abIoBZudzqsnq3bvtDb2LgAAAVA"]
[Thu Mar 12 10:42:13.698538 2026] [:error] [pid 51455:tid 51477] [client 4.204.236.223:51901] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "abIoBZE0YyNxdg6PL_A7hQAAABE"]
[Thu Mar 12 10:42:14.211383 2026] [:error] [pid 11985:tid 11994] [client 4.204.236.223:29535] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "abIoBncAcNujsOssVDfeNQAAAYM"]
[Thu Mar 12 10:42:14.729043 2026] [:error] [pid 11986:tid 12036] [client 4.204.236.223:51894] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "abIoBjKqY2w-DVCrxTCjgAAAAdI"]
[Thu Mar 12 10:42:15.242492 2026] [:error] [pid 11985:tid 12006] [client 4.204.236.223:51868] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "abIoB3cAcNujsOssVDfeOAAAAY8"]
[Thu Mar 12 10:42:15.755174 2026] [:error] [pid 11985:tid 12010] [client 4.204.236.223:51885] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "abIoB3cAcNujsOssVDfeOQAAAZM"]
[Thu Mar 12 10:42:16.232060 2026] [:error] [pid 51455:tid 51475] [client 4.204.236.223:51853] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "abIoCJE0YyNxdg6PL_A7hwAAAA8"]
[Thu Mar 12 10:42:16.699640 2026] [:error] [pid 22063:tid 22079] [client 4.204.236.223:51849] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "abIoCK0RUhS-MJyHWLSFhQAAAg4"]
[Thu Mar 12 10:42:17.210136 2026] [:error] [pid 22063:tid 22070] [client 4.204.236.223:51844] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "abIoCa0RUhS-MJyHWLSFhgAAAgU"]
[Thu Mar 12 10:42:17.726094 2026] [:error] [pid 11986:tid 12033] [client 4.204.236.223:30122] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "abIoCTKqY2w-DVCrxTCjgwAAAc8"]
[Thu Mar 12 10:42:18.239335 2026] [:error] [pid 11985:tid 11996] [client 4.204.236.223:51870] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "abIoCncAcNujsOssVDfePAAAAYU"]
[Thu Mar 12 10:42:18.750666 2026] [:error] [pid 22063:tid 22065] [client 4.204.236.223:51844] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "abIoCq0RUhS-MJyHWLSFiQAAAgA"]
[Thu Mar 12 10:42:19.262373 2026] [:error] [pid 11986:tid 12021] [client 4.204.236.223:30131] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "abIoCzKqY2w-DVCrxTCjhQAAAcM"]
[Thu Mar 12 10:42:19.774627 2026] [:error] [pid 11953:tid 11956] [client 4.204.236.223:51858] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "abIoC5udzqsnq3bvtDb2NgAAAUE"]
[Thu Mar 12 10:42:20.293357 2026] [:error] [pid 11986:tid 12026] [client 4.204.236.223:51886] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "abIoDDKqY2w-DVCrxTCjhwAAAcg"]
[Thu Mar 12 10:42:20.783940 2026] [:error] [pid 11985:tid 12005] [client 4.204.236.223:51873] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "abIoDHcAcNujsOssVDfePwAAAY4"]
[Thu Mar 12 10:42:21.246222 2026] [:error] [pid 11985:tid 11999] [client 4.204.236.223:30133] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "abIoDXcAcNujsOssVDfeQAAAAYg"]
[Thu Mar 12 10:42:21.760117 2026] [:error] [pid 22063:tid 22078] [client 4.204.236.223:30094] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "abIoDa0RUhS-MJyHWLSFiwAAAg0"]
[Thu Mar 12 10:42:22.273999 2026] [:error] [pid 51540:tid 51555] [client 4.204.236.223:30138] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "abIoDmOFFjotMIN2UD15xgAAAM0"]
[Thu Mar 12 10:42:22.737910 2026] [:error] [pid 11953:tid 11960] [client 4.204.236.223:29506] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "abIoDpudzqsnq3bvtDb2OAAAAUU"]
[Thu Mar 12 10:42:23.158339 2026] [:error] [pid 22063:tid 22077] [client 4.204.236.223:30141] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "abIoD60RUhS-MJyHWLSFjAAAAgw"]
[Thu Mar 12 10:42:23.619948 2026] [:error] [pid 51456:tid 51505] [client 4.204.236.223:29524] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "abIoDxXu8LzVixNGr0tAhgAAAFI"]
[Thu Mar 12 10:42:24.080439 2026] [:error] [pid 51455:tid 51483] [client 4.204.236.223:51876] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "abIoEJE0YyNxdg6PL_A7jQAAABc"]
[Thu Mar 12 10:42:24.541972 2026] [:error] [pid 51455:tid 51466] [client 4.204.236.223:30136] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "abIoEJE0YyNxdg6PL_A7jgAAAAY"]
[Thu Mar 12 10:42:25.008644 2026] [:error] [pid 51455:tid 51462] [client 4.204.236.223:51892] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "abIoEZE0YyNxdg6PL_A7jwAAAAI"]
[Thu Mar 12 10:42:25.418661 2026] [:error] [pid 11986:tid 12039] [client 4.204.236.223:51889] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "abIoETKqY2w-DVCrxTCjjAAAAdU"]
[Thu Mar 12 10:42:25.881127 2026] [:error] [pid 22063:tid 22081] [client 4.204.236.223:30117] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "abIoEa0RUhS-MJyHWLSFjgAAAhA"]
[Thu Mar 12 10:42:26.404440 2026] [:error] [pid 11986:tid 12038] [client 4.204.236.223:51867] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "abIoEjKqY2w-DVCrxTCjjgAAAdQ"]
[Thu Mar 12 10:42:26.919363 2026] [:error] [pid 51457:tid 51526] [client 4.204.236.223:30125] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "abIoEijknw2FvT4H3DaNpAAAAIw"]
[Thu Mar 12 10:42:27.432219 2026] [:error] [pid 11986:tid 12034] [client 4.204.236.223:29558] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "abIoEzKqY2w-DVCrxTCjkAAAAdA"]
[Thu Mar 12 10:42:27.953135 2026] [:error] [pid 51457:tid 51528] [client 4.204.236.223:51872] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "abIoEyjknw2FvT4H3DaNpwAAAI4"]
[Thu Mar 12 10:42:28.467342 2026] [:error] [pid 11953:tid 11976] [client 4.204.236.223:51890] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "abIoFJudzqsnq3bvtDb2PAAAAVU"]
[Thu Mar 12 10:42:28.928950 2026] [:error] [pid 51457:tid 51517] [client 4.204.236.223:30111] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "abIoFCjknw2FvT4H3DaNqAAAAIM"]
[Thu Mar 12 10:42:29.391750 2026] [:error] [pid 11986:tid 12036] [client 4.204.236.223:29531] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "abIoFTKqY2w-DVCrxTCjkQAAAdI"]
[Thu Mar 12 10:42:29.906334 2026] [:error] [pid 8249:tid 8254] [client 4.204.236.223:29567] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "abIoFSK5dL3-8Jdf0M32zgAAAQM"]
[Thu Mar 12 10:42:30.375128 2026] [:error] [pid 51455:tid 51481] [client 4.204.236.223:28195] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "abIoFpE0YyNxdg6PL_A7kgAAABU"]
[Thu Mar 12 10:42:30.787326 2026] [:error] [pid 51540:tid 51545] [client 4.204.236.223:29521] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "abIoFmOFFjotMIN2UD15yQAAAMM"]
[Thu Mar 12 10:42:31.250876 2026] [:error] [pid 11985:tid 12012] [client 4.204.236.223:30124] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "abIoF3cAcNujsOssVDfeRQAAAZU"]
[Thu Mar 12 10:42:31.763864 2026] [:error] [pid 51455:tid 51477] [client 4.204.236.223:51877] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "abIoF5E0YyNxdg6PL_A7lwAAABE"]
[Thu Mar 12 10:42:32.277604 2026] [:error] [pid 51455:tid 51467] [client 4.204.236.223:29540] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "abIoGJE0YyNxdg6PL_A7mAAAAAc"]
[Thu Mar 12 10:42:32.745118 2026] [:error] [pid 8249:tid 8262] [client 4.204.236.223:29561] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "abIoGCK5dL3-8Jdf0M320wAAAQs"]
[Thu Mar 12 10:42:33.153732 2026] [:error] [pid 8249:tid 8258] [client 4.204.236.223:28222] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "abIoGSK5dL3-8Jdf0M321QAAAQc"]
[Thu Mar 12 10:42:33.615381 2026] [:error] [pid 8249:tid 8273] [client 4.204.236.223:30132] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "abIoGSK5dL3-8Jdf0M321wAAARY"]
[Thu Mar 12 10:42:34.132317 2026] [:error] [pid 11953:tid 11960] [client 4.204.236.223:29565] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "abIoGpudzqsnq3bvtDb2PwAAAUU"]
[Thu Mar 12 10:42:34.600058 2026] [:error] [pid 11985:tid 12011] [client 4.204.236.223:51895] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "abIoGncAcNujsOssVDfeSAAAAZQ"]
[Thu Mar 12 10:42:35.061669 2026] [:error] [pid 11986:tid 12020] [client 4.204.236.223:30090] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "abIoGzKqY2w-DVCrxTCjlQAAAcI"]
[Thu Mar 12 10:42:35.530439 2026] [:error] [pid 51457:tid 51524] [client 4.204.236.223:51861] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "abIoGyjknw2FvT4H3DaNqQAAAIo"]
[Thu Mar 12 10:42:35.994180 2026] [:error] [pid 11985:tid 11993] [client 4.204.236.223:30139] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "abIoG3cAcNujsOssVDfeSgAAAYI"]
[Thu Mar 12 10:42:36.455532 2026] [:error] [pid 11985:tid 12002] [client 4.204.236.223:29526] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "abIoHHcAcNujsOssVDfeTQAAAYs"]
[Thu Mar 12 10:42:36.866033 2026] [:error] [pid 22063:tid 22065] [client 4.204.236.223:51881] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "abIoHK0RUhS-MJyHWLSFkwAAAgA"]
[Thu Mar 12 10:42:37.276095 2026] [:error] [pid 51456:tid 51490] [client 4.204.236.223:51841] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "abIoHRXu8LzVixNGr0tAmQAAAEM"]
[Thu Mar 12 10:42:37.740210 2026] [:error] [pid 51540:tid 51566] [client 4.204.236.223:29553] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "abIoHWOFFjotMIN2UD15ygAAANg"]
[Thu Mar 12 10:42:38.201901 2026] [:error] [pid 11953:tid 11965] [client 4.204.236.223:30110] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "abIoHpudzqsnq3bvtDb2QQAAAUo"]
[Thu Mar 12 10:42:38.663893 2026] [:error] [pid 51456:tid 51497] [client 4.204.236.223:27395] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "abIoHhXu8LzVixNGr0tAmwAAAEo"]
[Thu Mar 12 10:42:39.179492 2026] [:error] [pid 51456:tid 51489] [client 4.204.236.223:30142] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "abIoHxXu8LzVixNGr0tAnAAAAEI"]
[Thu Mar 12 10:42:39.693158 2026] [:error] [pid 51540:tid 51560] [client 4.204.236.223:30083] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "abIoH2OFFjotMIN2UD15zQAAANI"]
[Thu Mar 12 10:42:40.154262 2026] [:error] [pid 11953:tid 11967] [client 4.204.236.223:51869] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "abIoIJudzqsnq3bvtDb2QgAAAUw"]
[Thu Mar 12 10:42:40.614733 2026] [:error] [pid 11986:tid 12027] [client 4.204.236.223:30121] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abIoIDKqY2w-DVCrxTCjmAAAAck"]
[Thu Mar 12 10:42:41.074504 2026] [:error] [pid 11953:tid 11969] [client 4.204.236.223:30123] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abIoIZudzqsnq3bvtDb2RAAAAU4"]
[Thu Mar 12 10:42:41.542928 2026] [:error] [pid 11953:tid 11961] [client 4.204.236.223:30126] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abIoIZudzqsnq3bvtDb2RQAAAUY"]
[Thu Mar 12 10:42:42.056644 2026] [:error] [pid 11953:tid 11959] [client 4.204.236.223:28199] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abIoIpudzqsnq3bvtDb2RgAAAUQ"]
[Thu Mar 12 10:42:42.569474 2026] [:error] [pid 51540:tid 51564] [client 4.204.236.223:30140] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoImOFFjotMIN2UD150QAAANY"]
[Thu Mar 12 10:42:43.030964 2026] [:error] [pid 51455:tid 51465] [client 4.204.236.223:51857] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoI5E0YyNxdg6PL_A7nAAAAAU"]
[Thu Mar 12 10:42:43.441476 2026] [:error] [pid 51455:tid 51479] [client 4.204.236.223:28211] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoI5E0YyNxdg6PL_A7ngAAABM"]
[Thu Mar 12 10:42:43.909058 2026] [:error] [pid 11953:tid 11974] [client 4.204.236.223:30107] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoI5udzqsnq3bvtDb2SAAAAVM"]
[Thu Mar 12 10:42:44.372924 2026] [:error] [pid 8249:tid 8260] [client 4.204.236.223:51847] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "abIoJCK5dL3-8Jdf0M323AAAAQk"]
[Thu Mar 12 10:42:44.835800 2026] [:error] [pid 11953:tid 11975] [client 4.204.236.223:28212] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "abIoJJudzqsnq3bvtDb2SwAAAVQ"]
[Thu Mar 12 10:42:45.349661 2026] [:error] [pid 8249:tid 8275] [client 4.204.236.223:51854] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "abIoJSK5dL3-8Jdf0M323QAAARg"]
[Thu Mar 12 10:42:45.867978 2026] [:error] [pid 8249:tid 8261] [client 4.204.236.223:51855] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "abIoJSK5dL3-8Jdf0M324AAAAQo"]
[Thu Mar 12 10:42:46.387451 2026] [:error] [pid 8249:tid 8256] [client 4.204.236.223:51866] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoJiK5dL3-8Jdf0M324gAAAQU"]
[Thu Mar 12 10:42:46.909088 2026] [:error] [pid 51457:tid 51517] [client 4.204.236.223:29551] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoJijknw2FvT4H3DaNsQAAAIM"]
[Thu Mar 12 10:42:47.370191 2026] [:error] [pid 11985:tid 12000] [client 4.204.236.223:29530] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoJ3cAcNujsOssVDfeVgAAAYk"]
[Thu Mar 12 10:42:47.779859 2026] [:error] [pid 51540:tid 51549] [client 4.204.236.223:29560] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "abIoJ2OFFjotMIN2UD151gAAAMc"]
[Thu Mar 12 10:42:48.241610 2026] [:error] [pid 51540:tid 51566] [client 4.204.236.223:29507] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "abIoKGOFFjotMIN2UD151wAAANg"]
[Thu Mar 12 10:42:48.759006 2026] [:error] [pid 11986:tid 12025] [client 4.204.236.223:27412] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "abIoKDKqY2w-DVCrxTCjpgAAAcc"]
[Thu Mar 12 10:42:49.276069 2026] [:error] [pid 51457:tid 51533] [client 4.204.236.223:28164] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "abIoKSjknw2FvT4H3DaNtQAAAJM"]
[Thu Mar 12 10:42:49.794134 2026] [:error] [pid 51457:tid 51527] [client 4.204.236.223:51859] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "abIoKSjknw2FvT4H3DaNtgAAAI0"]
[Thu Mar 12 10:42:50.311528 2026] [:error] [pid 51457:tid 51522] [client 4.204.236.223:51887] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "abIoKijknw2FvT4H3DaNuQAAAIg"]
[Thu Mar 12 10:42:50.773582 2026] [:error] [pid 51457:tid 51534] [client 4.204.236.223:30097] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "abIoKijknw2FvT4H3DaNugAAAJQ"]
[Thu Mar 12 10:42:51.236077 2026] [:error] [pid 51457:tid 51515] [client 4.204.236.223:30081] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "abIoKyjknw2FvT4H3DaNvAAAAIE"]
[Thu Mar 12 10:42:51.748021 2026] [:error] [pid 22063:tid 22071] [client 4.204.236.223:30143] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "abIoK60RUhS-MJyHWLSFmAAAAgY"]
[Thu Mar 12 10:42:52.261675 2026] [:error] [pid 51457:tid 51529] [client 4.204.236.223:28213] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "abIoLCjknw2FvT4H3DaNwAAAAI8"]
[Thu Mar 12 10:42:52.729695 2026] [:error] [pid 22063:tid 22082] [client 4.204.236.223:28166] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "abIoLK0RUhS-MJyHWLSFmQAAAhE"]
[Thu Mar 12 10:42:53.191957 2026] [:error] [pid 22063:tid 22083] [client 4.204.236.223:29532] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "abIoLa0RUhS-MJyHWLSFmgAAAhI"]
[Thu Mar 12 10:42:53.654464 2026] [:error] [pid 8249:tid 8257] [client 4.204.236.223:28178] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "abIoLSK5dL3-8Jdf0M325QAAAQY"]
[Thu Mar 12 10:42:54.118033 2026] [:error] [pid 8249:tid 8271] [client 4.204.236.223:29516] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "abIoLiK5dL3-8Jdf0M326AAAARQ"]
[Thu Mar 12 10:42:54.581798 2026] [:error] [pid 8249:tid 8258] [client 4.204.236.223:28170] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "abIoLiK5dL3-8Jdf0M326wAAAQc"]
[Thu Mar 12 10:42:55.043717 2026] [:error] [pid 22063:tid 22081] [client 4.204.236.223:30080] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "abIoL60RUhS-MJyHWLSFmwAAAhA"]
[Thu Mar 12 10:42:55.569200 2026] [:error] [pid 8249:tid 8273] [client 4.204.236.223:27396] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "abIoLyK5dL3-8Jdf0M328AAAARY"]
[Thu Mar 12 10:42:56.088112 2026] [:error] [pid 51540:tid 51550] [client 4.204.236.223:28161] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "abIoMGOFFjotMIN2UD153AAAAMg"]
[Thu Mar 12 10:42:56.600937 2026] [:error] [pid 11986:tid 12027] [client 4.204.236.223:28190] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "abIoMDKqY2w-DVCrxTCjqgAAAck"]
[Thu Mar 12 10:42:57.116875 2026] [:error] [pid 51455:tid 51461] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/xxw.php
[Thu Mar 12 10:42:57.378369 2026] [:error] [pid 51455:tid 51463] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Thu Mar 12 10:42:57.637928 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Thu Mar 12 10:42:59.426738 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Thu Mar 12 10:42:59.686312 2026] [:error] [pid 51455:tid 51469] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Mar 12 10:42:59.945248 2026] [:error] [pid 51455:tid 51468] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Thu Mar 12 10:43:00.206850 2026] [:error] [pid 51455:tid 51476] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Thu Mar 12 10:43:00.468348 2026] [:error] [pid 51455:tid 51481] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Thu Mar 12 10:43:00.996784 2026] [:error] [pid 51455:tid 51479] [client 4.204.236.223:51899] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Thu Mar 12 10:43:01.513158 2026] [:error] [pid 51455:tid 51477] [client 4.204.236.223:51899] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "abIoNZE0YyNxdg6PL_A7sgAAABE"]
[Thu Mar 12 10:43:01.974130 2026] [:error] [pid 22063:tid 22089] [client 4.204.236.223:51850] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "abIoNa0RUhS-MJyHWLSFngAAAhg"]
[Thu Mar 12 10:43:02.439244 2026] [:error] [pid 22063:tid 22072] [client 4.204.236.223:28209] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "abIoNq0RUhS-MJyHWLSFoAAAAgc"]
[Thu Mar 12 10:43:02.952721 2026] [:error] [pid 22063:tid 22079] [client 4.204.236.223:30118] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "abIoNq0RUhS-MJyHWLSFogAAAg4"]
[Thu Mar 12 10:43:03.432760 2026] [:error] [pid 51540:tid 51560] [client 4.204.236.223:28208] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "abIoN2OFFjotMIN2UD154gAAANI"]
[Thu Mar 12 10:43:03.844125 2026] [:error] [pid 11985:tid 12010] [client 4.204.236.223:29536] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "abIoN3cAcNujsOssVDfeXgAAAZM"]
[Thu Mar 12 10:43:04.304329 2026] [:error] [pid 11986:tid 12026] [client 4.204.236.223:29523] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "abIoODKqY2w-DVCrxTCjsQAAAcg"]
[Thu Mar 12 10:43:04.823298 2026] [:error] [pid 11985:tid 12014] [client 4.204.236.223:27392] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "abIoOHcAcNujsOssVDfeXwAAAZc"]
[Thu Mar 12 10:43:05.292118 2026] [:error] [pid 11986:tid 12039] [client 4.204.236.223:29509] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "abIoOTKqY2w-DVCrxTCjtAAAAdU"]
[Thu Mar 12 10:43:05.754677 2026] [:error] [pid 11986:tid 12021] [client 4.204.236.223:30103] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "abIoOTKqY2w-DVCrxTCjtQAAAcM"]
[Thu Mar 12 10:43:06.267754 2026] [:error] [pid 51540:tid 51556] [client 4.204.236.223:29559] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "abIoOmOFFjotMIN2UD155QAAAM4"]
[Thu Mar 12 10:43:06.734141 2026] [:error] [pid 22063:tid 22069] [client 4.204.236.223:28175] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "abIoOq0RUhS-MJyHWLSFpgAAAgQ"]
[Thu Mar 12 10:43:07.206721 2026] [:error] [pid 11986:tid 12036] [client 4.204.236.223:29518] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "abIoOzKqY2w-DVCrxTCjuAAAAdI"]
[Thu Mar 12 10:43:07.720975 2026] [:error] [pid 51540:tid 51550] [client 4.204.236.223:28174] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "abIoO2OFFjotMIN2UD155gAAAMg"]
[Thu Mar 12 10:43:08.233499 2026] [:error] [pid 11953:tid 11959] [client 4.204.236.223:29543] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "abIoPJudzqsnq3bvtDb2UAAAAUQ"]
[Thu Mar 12 10:43:08.695415 2026] [:error] [pid 8249:tid 8255] [client 4.204.236.223:29542] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "abIoPCK5dL3-8Jdf0M329QAAAQQ"]
[Thu Mar 12 10:43:09.157426 2026] [:error] [pid 51540:tid 51543] [client 4.204.236.223:51860] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "abIoPWOFFjotMIN2UD156AAAAME"]
[Thu Mar 12 10:43:09.669024 2026] [:error] [pid 51540:tid 51566] [client 4.204.236.223:28180] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "abIoPWOFFjotMIN2UD156gAAANg"]
[Thu Mar 12 10:43:10.180006 2026] [:error] [pid 22063:tid 22067] [client 4.204.236.223:30135] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "abIoPq0RUhS-MJyHWLSFqAAAAgI"]
[Thu Mar 12 10:43:10.708253 2026] [:error] [pid 22063:tid 22076] [client 4.204.236.223:28162] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "abIoPq0RUhS-MJyHWLSFqgAAAgs"]
[Thu Mar 12 10:43:11.222043 2026] [:error] [pid 22063:tid 22079] [client 4.204.236.223:29564] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "abIoP60RUhS-MJyHWLSFrAAAAg4"]
[Thu Mar 12 10:43:11.734889 2026] [:error] [pid 11953:tid 11974] [client 4.204.236.223:29556] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "abIoP5udzqsnq3bvtDb2UQAAAVM"]
[Thu Mar 12 10:43:12.253154 2026] [:error] [pid 22063:tid 22085] [client 4.204.236.223:29514] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "abIoQK0RUhS-MJyHWLSFrwAAAhQ"]
[Thu Mar 12 10:43:12.774167 2026] [:error] [pid 11986:tid 12042] [client 4.204.236.223:29519] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "abIoQDKqY2w-DVCrxTCjuwAAAdg"]
[Thu Mar 12 10:43:13.289283 2026] [:error] [pid 51457:tid 51537] [client 4.204.236.223:28194] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "abIoQSjknw2FvT4H3DaNxQAAAJc"]
[Thu Mar 12 10:43:13.819234 2026] [:error] [pid 8249:tid 8254] [client 4.204.236.223:30084] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "abIoQSK5dL3-8Jdf0M32-AAAAQM"]
[Thu Mar 12 10:43:14.330144 2026] [:error] [pid 22063:tid 22069] [client 4.204.236.223:30099] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "abIoQq0RUhS-MJyHWLSFtAAAAgQ"]
[Thu Mar 12 10:43:14.844073 2026] [:error] [pid 22063:tid 22068] [client 4.204.236.223:28193] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "abIoQq0RUhS-MJyHWLSFtQAAAgM"]
[Thu Mar 12 10:43:15.357745 2026] [:error] [pid 8249:tid 8252] [client 4.204.236.223:28207] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "abIoQyK5dL3-8Jdf0M32-gAAAQE"]
[Thu Mar 12 10:43:15.824711 2026] [:error] [pid 8249:tid 8264] [client 4.204.236.223:29539] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "abIoQyK5dL3-8Jdf0M32-wAAAQ0"]
[Thu Mar 12 10:43:16.236575 2026] [:error] [pid 8249:tid 8258] [client 4.204.236.223:29534] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "abIoRCK5dL3-8Jdf0M32_AAAAQc"]
[Thu Mar 12 10:43:16.707562 2026] [:error] [pid 22063:tid 22087] [client 4.204.236.223:28189] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "abIoRK0RUhS-MJyHWLSFuQAAAhY"]
[Thu Mar 12 10:43:17.168825 2026] [:error] [pid 22063:tid 22072] [client 4.204.236.223:29547] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "abIoRa0RUhS-MJyHWLSFuwAAAgc"]
[Thu Mar 12 10:43:17.629687 2026] [:error] [pid 51540:tid 51565] [client 4.204.236.223:29549] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "abIoRWOFFjotMIN2UD157gAAANc"]
[Thu Mar 12 10:43:18.141304 2026] [:error] [pid 22063:tid 22069] [client 4.204.236.223:27419] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "abIoRq0RUhS-MJyHWLSFvgAAAgQ"]
[Thu Mar 12 10:43:18.660123 2026] [:error] [pid 22063:tid 22071] [client 4.204.236.223:64901] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "abIoRq0RUhS-MJyHWLSFvwAAAgY"]
[Thu Mar 12 10:43:19.178598 2026] [:error] [pid 11986:tid 12029] [client 4.204.236.223:30086] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "abIoRzKqY2w-DVCrxTCjvwAAAcs"]
[Thu Mar 12 10:43:19.697404 2026] [:error] [pid 11986:tid 12036] [client 4.204.236.223:51851] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "abIoRzKqY2w-DVCrxTCjwAAAAdI"]
[Thu Mar 12 10:43:20.166367 2026] [:error] [pid 8249:tid 8263] [client 4.204.236.223:27415] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "abIoSCK5dL3-8Jdf0M33AAAAAQw"]
[Thu Mar 12 10:43:20.627092 2026] [:error] [pid 51457:tid 51531] [client 4.204.236.223:29522] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "abIoSCjknw2FvT4H3DaNxwAAAJE"]
[Thu Mar 12 10:43:21.139025 2026] [:error] [pid 11986:tid 12034] [client 4.204.236.223:30093] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "abIoSTKqY2w-DVCrxTCjwwAAAdA"]
[Thu Mar 12 10:43:21.602869 2026] [:error] [pid 22063:tid 22070] [client 4.204.236.223:28191] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "abIoSa0RUhS-MJyHWLSFwwAAAgU"]
[Thu Mar 12 10:43:22.062899 2026] [:error] [pid 22063:tid 22078] [client 4.204.236.223:29512] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "abIoSq0RUhS-MJyHWLSFxQAAAg0"]
[Thu Mar 12 10:43:22.580767 2026] [:error] [pid 22063:tid 22074] [client 4.204.236.223:29548] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "abIoSq0RUhS-MJyHWLSFyAAAAgk"]
[Thu Mar 12 10:43:23.094595 2026] [:error] [pid 11986:tid 12041] [client 4.204.236.223:51893] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "abIoSzKqY2w-DVCrxTCjxgAAAdc"]
[Thu Mar 12 10:43:23.561624 2026] [:error] [pid 51455:tid 51470] [client 4.204.236.223:29555] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "abIoS5E0YyNxdg6PL_A7vgAAAAo"]
[Thu Mar 12 10:43:24.028760 2026] [:error] [pid 8249:tid 8253] [client 4.204.236.223:28221] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "abIoTCK5dL3-8Jdf0M33AQAAAQI"]
[Thu Mar 12 10:43:24.496329 2026] [:error] [pid 51455:tid 51473] [client 4.204.236.223:27420] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "abIoTJE0YyNxdg6PL_A77QAAAA0"]
[Thu Mar 12 10:43:24.959799 2026] [:error] [pid 11985:tid 12012] [client 4.204.236.223:29552] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "abIoTHcAcNujsOssVDfemwAAAZU"]
[Thu Mar 12 10:43:25.473957 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:28165] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "abIoTZE0YyNxdg6PL_A78AAAAAw"]
[Thu Mar 12 10:43:25.991248 2026] [:error] [pid 51455:tid 51474] [client 4.204.236.223:64952] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "abIoTZE0YyNxdg6PL_A78QAAAA4"]
[Thu Mar 12 10:43:26.460671 2026] [:error] [pid 51455:tid 51479] [client 4.204.236.223:27449] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "abIoTpE0YyNxdg6PL_A79QAAABM"]
[Thu Mar 12 10:43:26.871949 2026] [:error] [pid 22063:tid 22077] [client 4.204.236.223:29515] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "abIoTq0RUhS-MJyHWLSF6gAAAgw"]
[Thu Mar 12 10:43:27.283815 2026] [:error] [pid 51456:tid 51494] [client 4.204.236.223:28210] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "abIoTxXu8LzVixNGr0tApgAAAEc"]
[Thu Mar 12 10:43:27.694889 2026] [:error] [pid 11953:tid 11979] [client 4.204.236.223:64903] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "abIoT5udzqsnq3bvtDb2VAAAAVg"]
[Thu Mar 12 10:43:28.161826 2026] [:error] [pid 51455:tid 51469] [client 4.204.236.223:30116] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "abIoUJE0YyNxdg6PL_A8AwAAAAk"]
[Thu Mar 12 10:43:28.675516 2026] [:error] [pid 51456:tid 51488] [client 4.204.236.223:30130] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "abIoUBXu8LzVixNGr0tApwAAAEE"]
[Thu Mar 12 10:43:29.188149 2026] [:error] [pid 51456:tid 51508] [client 4.204.236.223:27394] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "abIoURXu8LzVixNGr0tAqAAAAFU"]
[Thu Mar 12 10:43:29.649822 2026] [:error] [pid 51456:tid 51504] [client 4.204.236.223:28179] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "abIoURXu8LzVixNGr0tAqQAAAFE"]
[Thu Mar 12 10:43:30.112137 2026] [:error] [pid 22063:tid 22071] [client 4.204.236.223:28177] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "abIoUq0RUhS-MJyHWLSF8AAAAgY"]
[Thu Mar 12 10:43:30.626249 2026] [:error] [pid 22063:tid 22083] [client 4.204.236.223:28176] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "abIoUq0RUhS-MJyHWLSF8QAAAhI"]
[Thu Mar 12 10:43:31.087629 2026] [:error] [pid 8249:tid 8255] [client 4.204.236.223:27399] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "abIoUyK5dL3-8Jdf0M33EwAAAQQ"]
[Thu Mar 12 10:43:31.547949 2026] [:error] [pid 8249:tid 8272] [client 4.204.236.223:27443] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "abIoUyK5dL3-8Jdf0M33FQAAARU"]
[Thu Mar 12 10:43:32.059582 2026] [:error] [pid 51455:tid 51482] [client 4.204.236.223:51863] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "abIoVJE0YyNxdg6PL_A8DQAAABY"]
[Thu Mar 12 10:43:32.572580 2026] [:error] [pid 11953:tid 11962] [client 4.204.236.223:29541] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "abIoVJudzqsnq3bvtDb2VgAAAUc"]
[Thu Mar 12 10:43:33.086835 2026] [:error] [pid 51457:tid 51529] [client 4.204.236.223:29513] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "abIoVSjknw2FvT4H3DaNywAAAI8"]
[Thu Mar 12 10:43:33.604524 2026] [:error] [pid 51456:tid 51503] [client 4.204.236.223:28171] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "abIoVRXu8LzVixNGr0tAqwAAAFA"]
[Thu Mar 12 10:43:34.119333 2026] [:error] [pid 51457:tid 51523] [client 4.204.236.223:27411] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "abIoVijknw2FvT4H3DaNzAAAAIk"]
[Thu Mar 12 10:43:34.638559 2026] [:error] [pid 11986:tid 12027] [client 4.204.236.223:28220] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "abIoVjKqY2w-DVCrxTCjyAAAAck"]
[Thu Mar 12 10:43:35.155587 2026] [:error] [pid 11986:tid 12025] [client 4.204.236.223:28173] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "abIoVzKqY2w-DVCrxTCjyQAAAcc"]
[Thu Mar 12 10:43:35.667181 2026] [:error] [pid 22063:tid 22073] [client 4.204.236.223:27393] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "abIoV60RUhS-MJyHWLSF9AAAAgg"]
[Thu Mar 12 10:43:36.128946 2026] [:error] [pid 11986:tid 12035] [client 4.204.236.223:28206] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "abIoWDKqY2w-DVCrxTCjzAAAAdE"]
[Thu Mar 12 10:43:36.598542 2026] [:error] [pid 8249:tid 8263] [client 4.204.236.223:29546] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/intall.php"] [unique_id "abIoWCK5dL3-8Jdf0M33GgAAAQw"]
[Thu Mar 12 10:43:37.059349 2026] [:error] [pid 22063:tid 22076] [client 4.204.236.223:30106] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/intall.php"] [unique_id "abIoWa0RUhS-MJyHWLSF-AAAAgs"]
[Thu Mar 12 10:43:37.475051 2026] [:error] [pid 11985:tid 12006] [client 4.204.236.223:28187] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/intall.php"] [unique_id "abIoWXcAcNujsOssVDfe1AAAAY8"]
[Thu Mar 12 10:43:37.945808 2026] [:error] [pid 51455:tid 51482] [client 4.204.236.223:28188] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/intall.php"] [unique_id "abIoWZE0YyNxdg6PL_A8EAAAABY"]
[Thu Mar 12 10:43:38.472395 2026] [:error] [pid 51455:tid 51484] [client 4.204.236.223:28181] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "abIoWpE0YyNxdg6PL_A8EgAAABg"]
[Thu Mar 12 10:43:38.985517 2026] [:error] [pid 8249:tid 8271] [client 4.204.236.223:28219] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "abIoWiK5dL3-8Jdf0M33HgAAARQ"]
[Thu Mar 12 10:43:39.452161 2026] [:error] [pid 22063:tid 22089] [client 4.204.236.223:64933] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "abIoW60RUhS-MJyHWLSF-QAAAhg"]
[Thu Mar 12 10:43:39.920628 2026] [:error] [pid 11985:tid 11996] [client 4.204.236.223:27422] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "abIoW3cAcNujsOssVDfe1QAAAYU"]
[Thu Mar 12 10:43:40.434849 2026] [:error] [pid 11986:tid 12040] [client 4.204.236.223:27454] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "abIoXDKqY2w-DVCrxTCj0AAAAdY"]
[Thu Mar 12 10:43:40.947986 2026] [:error] [pid 51457:tid 51521] [client 4.204.236.223:27413] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "abIoXCjknw2FvT4H3DaNzgAAAIc"]
[Thu Mar 12 10:43:41.415204 2026] [:error] [pid 51455:tid 51477] [client 4.204.236.223:29517] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "abIoXZE0YyNxdg6PL_A8HwAAABE"]
[Thu Mar 12 10:43:41.826438 2026] [:error] [pid 11985:tid 12009] [client 4.204.236.223:28223] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "abIoXXcAcNujsOssVDfe2QAAAZI"]
[Thu Mar 12 10:43:42.258607 2026] [:error] [pid 22063:tid 22070] [client 4.204.236.223:27430] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "abIoXq0RUhS-MJyHWLSF_AAAAgU"]
[Thu Mar 12 10:43:42.681434 2026] [:error] [pid 51457:tid 51535] [client 4.204.236.223:64940] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "abIoXijknw2FvT4H3DaNzwAAAJU"]
[Thu Mar 12 10:43:43.094103 2026] [:error] [pid 51455:tid 51479] [client 4.204.236.223:30137] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "abIoX5E0YyNxdg6PL_A8IgAAABM"]
[Thu Mar 12 10:43:43.557112 2026] [:error] [pid 51455:tid 51474] [client 4.204.236.223:51862] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "abIoX5E0YyNxdg6PL_A8IwAAAA4"]
[Thu Mar 12 10:43:44.075829 2026] [:error] [pid 22063:tid 22071] [client 4.204.236.223:51878] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "abIoYK0RUhS-MJyHWLSF_QAAAgY"]
[Thu Mar 12 10:43:44.587939 2026] [:error] [pid 51455:tid 51466] [client 4.204.236.223:64904] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "abIoYJE0YyNxdg6PL_A8JQAAAAY"]
[Thu Mar 12 10:43:45.105634 2026] [:error] [pid 51457:tid 51532] [client 4.204.236.223:29527] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "abIoYSjknw2FvT4H3DaN0AAAAJI"]
[Thu Mar 12 10:43:45.567097 2026] [:error] [pid 22063:tid 22083] [client 4.204.236.223:27405] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "abIoYa0RUhS-MJyHWLSF_gAAAhI"]
[Thu Mar 12 10:43:46.029318 2026] [:error] [pid 8249:tid 8260] [client 4.204.236.223:27408] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "abIoYiK5dL3-8Jdf0M33VAAAAQk"]
[Thu Mar 12 10:43:46.492447 2026] [:error] [pid 11953:tid 11967] [client 4.204.236.223:27445] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "abIoYpudzqsnq3bvtDb2WAAAAUw"]
[Thu Mar 12 10:43:46.960327 2026] [:error] [pid 8249:tid 8266] [client 4.204.236.223:27431] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "abIoYiK5dL3-8Jdf0M33VgAAAQ8"]
[Thu Mar 12 10:43:47.476444 2026] [:error] [pid 22063:tid 22081] [client 4.204.236.223:30092] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "abIoY60RUhS-MJyHWLSGAAAAAhA"]
[Thu Mar 12 10:43:47.989629 2026] [:error] [pid 8249:tid 8251] [client 4.204.236.223:30112] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assacc.php"] [unique_id "abIoYyK5dL3-8Jdf0M33WQAAAQA"]
[Thu Mar 12 10:43:48.503237 2026] [:error] [pid 51457:tid 51527] [client 4.204.236.223:51856] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assacc.php"] [unique_id "abIoZCjknw2FvT4H3DaN0gAAAI0"]
[Thu Mar 12 10:43:48.964727 2026] [:error] [pid 11985:tid 11996] [client 4.204.236.223:27417] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assacc.php"] [unique_id "abIoZHcAcNujsOssVDfe4AAAAYU"]
[Thu Mar 12 10:43:49.382594 2026] [:error] [pid 51455:tid 51463] [client 4.204.236.223:29562] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assacc.php"] [unique_id "abIoZZE0YyNxdg6PL_A8KQAAAAM"]
[Thu Mar 12 10:43:49.844187 2026] [:error] [pid 51455:tid 51483] [client 4.204.236.223:29525] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "abIoZZE0YyNxdg6PL_A8KgAAABc"]
[Thu Mar 12 10:43:50.357203 2026] [:error] [pid 51455:tid 51468] [client 4.204.236.223:64913] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "abIoZpE0YyNxdg6PL_A8LQAAAAg"]
[Thu Mar 12 10:43:50.878378 2026] [:error] [pid 51455:tid 51465] [client 4.204.236.223:29529] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "abIoZpE0YyNxdg6PL_A8LwAAAAU"]
[Thu Mar 12 10:43:51.391868 2026] [:error] [pid 51455:tid 51466] [client 4.204.236.223:64834] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "abIoZ5E0YyNxdg6PL_A8MgAAAAY"]
[Thu Mar 12 10:43:51.910435 2026] [:error] [pid 51455:tid 51482] [client 4.204.236.223:64910] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abIoZ5E0YyNxdg6PL_A8NAAAABY"]
[Thu Mar 12 10:43:52.426740 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:30108] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abIoaJE0YyNxdg6PL_A8NgAAAAw"]
[Thu Mar 12 10:43:52.890041 2026] [:error] [pid 51455:tid 51460] [client 4.204.236.223:51865] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abIoaJE0YyNxdg6PL_A8OAAAAAA"]
[Thu Mar 12 10:43:53.301684 2026] [:error] [pid 51455:tid 51477] [client 4.204.236.223:27400] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abIoaZE0YyNxdg6PL_A8OgAAABE"]
[Thu Mar 12 10:43:53.712563 2026] [:error] [pid 51455:tid 51468] [client 4.204.236.223:28160] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "abIoaZE0YyNxdg6PL_A8PAAAAAg"]
[Thu Mar 12 10:43:54.124095 2026] [:error] [pid 51455:tid 51471] [client 4.204.236.223:64930] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "abIoapE0YyNxdg6PL_A8PQAAAAs"]
[Thu Mar 12 10:43:54.586946 2026] [:error] [pid 11986:tid 12041] [client 4.204.236.223:64913] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "abIoajKqY2w-DVCrxTCj1gAAAdc"]
[Thu Mar 12 10:43:55.048744 2026] [:error] [pid 51540:tid 51552] [client 4.204.236.223:51898] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/%E3%81%AE.php"] [unique_id "abIoa2OFFjotMIN2UD15-wAAAMo"]
[Thu Mar 12 10:43:55.510758 2026] [:error] [pid 11986:tid 12037] [client 4.204.236.223:64925] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtsr.php"] [unique_id "abIoazKqY2w-DVCrxTCj2gAAAdM"]
[Thu Mar 12 10:43:56.025158 2026] [:error] [pid 11986:tid 12042] [client 4.204.236.223:30134] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtsr.php"] [unique_id "abIobDKqY2w-DVCrxTCj2wAAAdg"]
[Thu Mar 12 10:43:56.539960 2026] [:error] [pid 51540:tid 51549] [client 4.204.236.223:27398] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtsr.php"] [unique_id "abIobGOFFjotMIN2UD15_QAAAMc"]
[Thu Mar 12 10:43:57.059879 2026] [:error] [pid 51540:tid 51559] [client 4.204.236.223:51864] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtsr.php"] [unique_id "abIobWOFFjotMIN2UD15_wAAANE"]
[Thu Mar 12 10:43:57.572690 2026] [:error] [pid 51455:tid 51473] [client 4.204.236.223:29544] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "abIobZE0YyNxdg6PL_A8QQAAAA0"]
[Thu Mar 12 10:43:58.035636 2026] [:error] [pid 51540:tid 51561] [client 4.204.236.223:28214] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "abIobmOFFjotMIN2UD16AgAAANM"]
[Thu Mar 12 10:43:58.502895 2026] [:error] [pid 51457:tid 51518] [client 4.204.236.223:27441] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "abIobijknw2FvT4H3DaN1gAAAIQ"]
[Thu Mar 12 10:43:59.021497 2026] [:error] [pid 51455:tid 51468] [client 4.204.236.223:27397] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "abIob5E0YyNxdg6PL_A8QgAAAAg"]
[Thu Mar 12 10:43:59.539425 2026] [:error] [pid 51455:tid 51461] [client 4.204.236.223:28196] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "abIob5E0YyNxdg6PL_A8RAAAAAE"]
[Thu Mar 12 10:44:00.003175 2026] [:error] [pid 51455:tid 51482] [client 4.204.236.223:28186] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "abIocJE0YyNxdg6PL_A8SAAAABY"]
[Thu Mar 12 10:44:00.471626 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:28204] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "abIocJE0YyNxdg6PL_A8SgAAAAw"]
[Thu Mar 12 10:44:00.989389 2026] [:error] [pid 51457:tid 51515] [client 4.204.236.223:27403] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "abIocCjknw2FvT4H3DaN1wAAAIE"]
[Thu Mar 12 10:44:01.511897 2026] [:error] [pid 22063:tid 22089] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Thu Mar 12 10:44:01.774883 2026] [:error] [pid 22063:tid 22082] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Thu Mar 12 10:44:02.037103 2026] [:error] [pid 22063:tid 22066] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Thu Mar 12 10:44:02.301862 2026] [:error] [pid 22063:tid 22070] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/awdld.php
[Thu Mar 12 10:44:02.563368 2026] [:error] [pid 22063:tid 22071] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Thu Mar 12 10:44:02.826989 2026] [:error] [pid 22063:tid 22083] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/krntz.php
[Thu Mar 12 10:44:03.089578 2026] [:error] [pid 22063:tid 22073] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/vhwwnrnmqc.php
[Thu Mar 12 10:44:03.351486 2026] [:error] [pid 22063:tid 22080] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/xenium4.php
[Thu Mar 12 10:44:03.631535 2026] [:error] [pid 22063:tid 22074] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Thu Mar 12 10:44:03.894473 2026] [:error] [pid 22063:tid 22078] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Thu Mar 12 10:44:04.156565 2026] [:error] [pid 22063:tid 22082] [client 4.204.236.223:64934] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Mar 12 10:44:04.416618 2026] [:error] [pid 22063:tid 22070] [client 4.204.236.223:64934] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "abIodK0RUhS-MJyHWLSGGAAAAgU"]
[Thu Mar 12 10:44:04.928994 2026] [:error] [pid 51455:tid 51460] [client 4.204.236.223:29550] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "abIodJE0YyNxdg6PL_A8WQAAAAA"]
[Thu Mar 12 10:44:05.443270 2026] [:error] [pid 51455:tid 51461] [client 4.204.236.223:64907] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "abIodZE0YyNxdg6PL_A8XAAAAAE"]
[Thu Mar 12 10:44:05.956917 2026] [:error] [pid 11986:tid 12018] [client 4.204.236.223:28192] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "abIodTKqY2w-DVCrxTCj5AAAAcA"]
[Thu Mar 12 10:44:06.475728 2026] [:error] [pid 51540:tid 51545] [client 4.204.236.223:27414] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "abIodmOFFjotMIN2UD16CAAAAMM"]
[Thu Mar 12 10:44:06.994185 2026] [:error] [pid 8249:tid 8275] [client 4.204.236.223:64900] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "abIodiK5dL3-8Jdf0M33YgAAARg"]
[Thu Mar 12 10:44:07.505211 2026] [:error] [pid 8249:tid 8269] [client 4.204.236.223:51875] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "abIodyK5dL3-8Jdf0M33ZAAAARI"]
[Thu Mar 12 10:44:08.018514 2026] [:error] [pid 22063:tid 22074] [client 4.204.236.223:27452] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "abIoeK0RUhS-MJyHWLSGGwAAAgk"]
[Thu Mar 12 10:44:08.537198 2026] [:error] [pid 11953:tid 11965] [client 4.204.236.223:27448] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "abIoeJudzqsnq3bvtDb2YwAAAUo"]
[Thu Mar 12 10:44:09.004900 2026] [:error] [pid 22063:tid 22079] [client 4.204.236.223:51843] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "abIoea0RUhS-MJyHWLSGHQAAAg4"]
[Thu Mar 12 10:44:09.416488 2026] [:error] [pid 11985:tid 11991] [client 4.204.236.223:27437] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "abIoeXcAcNujsOssVDfe6QAAAYA"]
[Thu Mar 12 10:44:09.825121 2026] [:error] [pid 11953:tid 11978] [client 4.204.236.223:64945] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "abIoeZudzqsnq3bvtDb2ZAAAAVc"]
[Thu Mar 12 10:44:10.293686 2026] [:error] [pid 51455:tid 51469] [client 4.204.236.223:64912] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "abIoepE0YyNxdg6PL_A8agAAAAk"]
[Thu Mar 12 10:44:10.804415 2026] [:error] [pid 22063:tid 22067] [client 4.204.236.223:27409] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "abIoeq0RUhS-MJyHWLSGJAAAAgI"]
[Thu Mar 12 10:44:11.271558 2026] [:error] [pid 51540:tid 51548] [client 4.204.236.223:27446] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "abIoe2OFFjotMIN2UD16EQAAAMY"]
[Thu Mar 12 10:44:11.731465 2026] [:error] [pid 22063:tid 22083] [client 4.204.236.223:28169] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "abIoe60RUhS-MJyHWLSGJQAAAhI"]
[Thu Mar 12 10:44:12.246989 2026] [:error] [pid 51456:tid 51494] [client 4.204.236.223:29557] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "abIofBXu8LzVixNGr0tAsQAAAEc"]
[Thu Mar 12 10:44:12.760663 2026] [:error] [pid 11986:tid 12029] [client 4.204.236.223:64958] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "abIofDKqY2w-DVCrxTCj5gAAAcs"]
[Thu Mar 12 10:44:13.279708 2026] [:error] [pid 51455:tid 51480] [client 4.204.236.223:30101] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "abIofZE0YyNxdg6PL_A8cgAAABQ"]
[Thu Mar 12 10:44:13.743351 2026] [:error] [pid 51540:tid 51563] [client 4.204.236.223:28203] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "abIofWOFFjotMIN2UD16MAAAANU"]
[Thu Mar 12 10:44:14.209687 2026] [:error] [pid 51540:tid 51552] [client 4.204.236.223:51848] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "abIofmOFFjotMIN2UD16MgAAAMo"]
[Thu Mar 12 10:44:14.723538 2026] [:error] [pid 8249:tid 8261] [client 4.204.236.223:64922] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "abIofiK5dL3-8Jdf0M33eAAAAQo"]
[Thu Mar 12 10:44:15.245600 2026] [:error] [pid 51540:tid 51560] [client 4.204.236.223:64902] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "abIof2OFFjotMIN2UD16NwAAANI"]
[Thu Mar 12 10:44:15.771947 2026] [:error] [pid 51455:tid 51477] [client 4.204.236.223:28218] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "abIof5E0YyNxdg6PL_A8hgAAABE"]
[Thu Mar 12 10:44:16.290719 2026] [:error] [pid 51455:tid 51474] [client 4.204.236.223:64853] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "abIogJE0YyNxdg6PL_A8hwAAAA4"]
[Thu Mar 12 10:44:16.851759 2026] [:error] [pid 51455:tid 51470] [client 4.204.236.223:64840] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "abIogJE0YyNxdg6PL_A8jAAAAAo"]
[Thu Mar 12 10:44:17.315427 2026] [:error] [pid 11986:tid 12034] [client 4.204.236.223:64843] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "abIogTKqY2w-DVCrxTCj6gAAAdA"]
[Thu Mar 12 10:44:17.779199 2026] [:error] [pid 8249:tid 8253] [client 4.204.236.223:27410] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "abIogSK5dL3-8Jdf0M33fwAAAQI"]
[Thu Mar 12 10:44:18.247346 2026] [:error] [pid 22063:tid 22067] [client 4.204.236.223:64896] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "abIogq0RUhS-MJyHWLSGLwAAAgI"]
[Thu Mar 12 10:44:18.715096 2026] [:error] [pid 51455:tid 51469] [client 4.204.236.223:28217] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "abIogpE0YyNxdg6PL_A8oQAAAAk"]
[Thu Mar 12 10:44:19.226711 2026] [:error] [pid 51455:tid 51476] [client 4.204.236.223:28168] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "abIog5E0YyNxdg6PL_A8pgAAABA"]
[Thu Mar 12 10:44:19.687670 2026] [:error] [pid 11986:tid 12035] [client 4.204.236.223:51840] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "abIogzKqY2w-DVCrxTCj6wAAAdE"]
[Thu Mar 12 10:44:20.174540 2026] [:error] [pid 11986:tid 12037] [client 4.204.236.223:27429] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "abIohDKqY2w-DVCrxTCj7QAAAdM"]
[Thu Mar 12 10:44:20.687206 2026] [:error] [pid 11985:tid 12012] [client 4.204.236.223:64859] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "abIohHcAcNujsOssVDffAwAAAZU"]
[Thu Mar 12 10:44:21.247539 2026] [:error] [pid 8249:tid 8264] [client 4.204.236.223:28163] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "abIohSK5dL3-8Jdf0M33hwAAAQ0"]
[Thu Mar 12 10:44:21.759109 2026] [:error] [pid 51540:tid 51554] [client 4.204.236.223:27432] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "abIohWOFFjotMIN2UD16SwAAAMw"]
[Thu Mar 12 10:44:22.234703 2026] [:error] [pid 51456:tid 51496] [client 4.204.236.223:29545] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vrhiw.php"] [unique_id "abIohhXu8LzVixNGr0tAugAAAEk"]
[Thu Mar 12 10:44:22.697050 2026] [:error] [pid 51455:tid 51468] [client 4.204.236.223:28197] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vrhiw.php"] [unique_id "abIohpE0YyNxdg6PL_A8swAAAAg"]
[Thu Mar 12 10:44:23.214122 2026] [:error] [pid 51540:tid 51561] [client 4.204.236.223:64832] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vrhiw.php"] [unique_id "abIoh2OFFjotMIN2UD16UgAAANM"]
[Thu Mar 12 10:44:23.738042 2026] [:error] [pid 22063:tid 22067] [client 4.204.236.223:27438] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vrhiw.php"] [unique_id "abIoh60RUhS-MJyHWLSGNwAAAgI"]
[Thu Mar 12 10:44:24.265633 2026] [:error] [pid 11953:tid 11973] [client 4.204.236.223:61699] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqjki.php"] [unique_id "abIoiJudzqsnq3bvtDb2jQAAAVI"]
[Thu Mar 12 10:44:24.824390 2026] [:error] [pid 8249:tid 8254] [client 4.204.236.223:27435] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqjki.php"] [unique_id "abIoiCK5dL3-8Jdf0M33lQAAAQM"]
[Thu Mar 12 10:44:25.374000 2026] [:error] [pid 8249:tid 8255] [client 4.204.236.223:29533] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqjki.php"] [unique_id "abIoiSK5dL3-8Jdf0M33mAAAAQQ"]
[Thu Mar 12 10:44:25.834303 2026] [:error] [pid 22063:tid 22072] [client 4.204.236.223:28198] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqjki.php"] [unique_id "abIoia0RUhS-MJyHWLSGQAAAAgc"]
[Thu Mar 12 10:44:26.296505 2026] [:error] [pid 8249:tid 8260] [client 4.204.236.223:29538] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "abIoiiK5dL3-8Jdf0M33oQAAAQk"]
[Thu Mar 12 10:44:26.814610 2026] [:error] [pid 51455:tid 51472] [client 4.204.236.223:64937] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "abIoipE0YyNxdg6PL_A8uQAAAAw"]
[Thu Mar 12 10:44:27.338467 2026] [:error] [pid 51455:tid 51474] [client 4.204.236.223:29537] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "abIoi5E0YyNxdg6PL_A8vgAAAA4"]
[Thu Mar 12 10:44:27.857644 2026] [:error] [pid 51455:tid 51470] [client 4.204.236.223:27401] [client 4.204.236.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "abIoi5E0YyNxdg6PL_A8xAAAAAo"]
[Thu Mar 12 12:38:54.743320 2026] [:error] [pid 11986:tid 12040] [client 104.28.153.126:18573] [client 104.28.153.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "abJDXjKqY2w-DVCrxTC3wAAAAdY"]
[Thu Mar 12 15:19:00.770219 2026] [:error] [pid 51455:tid 51467] [client 43.135.133.194:51426] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abJo5JE0YyNxdg6PL_DmPQAAAAc"]
[Thu Mar 12 17:46:36.251003 2026] [:error] [pid 51455:tid 51478] [client 182.42.111.213:47950] [client 182.42.111.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abKLfJE0YyNxdg6PL_AeRAAAABI"]
[Thu Mar 12 18:23:57.069641 2026] [:error] [pid 51540:tid 51545] [client 103.65.236.149:64235] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "abKUPWOFFjotMIN2UD3mMAAAAMM"]
[Thu Mar 12 18:23:57.288199 2026] [:error] [pid 51540:tid 51562] [client 103.65.236.149:64253] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUPWOFFjotMIN2UD3mMwAAANQ"]
[Thu Mar 12 23:09:47.095793 2026] [:error] [pid 8249:tid 8263] [client 4.205.20.132:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 12 23:09:47.593355 2026] [:error] [pid 8249:tid 8258] [client 4.205.20.132:44008] [client 4.205.20.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.20.132, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abLXOyK5dL3-8Jdf0M2Z_AAAAQc"]
[Thu Mar 12 23:09:47.843328 2026] [:error] [pid 8249:tid 8251] [client 4.205.20.132:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Thu Mar 12 23:09:48.748381 2026] [:error] [pid 8249:tid 8261] [client 4.205.20.132:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Thu Mar 12 23:09:49.484083 2026] [:error] [pid 8249:tid 8263] [client 4.205.20.132:44008] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Mar 12 23:09:49.725298 2026] [:error] [pid 8249:tid 8252] [client 4.205.20.132:44008] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLXPSK5dL3-8Jdf0M2aBwAAAQE"]
[Thu Mar 12 23:09:50.703566 2026] [:error] [pid 11953:tid 11962] [client 4.205.20.132:44002] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLXPpudzqsnq3bvtDZ8IgAAAUc"]
[Thu Mar 12 23:09:51.661979 2026] [:error] [pid 11953:tid 11972] [client 4.205.20.132:43994] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLXP5udzqsnq3bvtDZ8JgAAAVE"]
[Thu Mar 12 23:09:52.582777 2026] [:error] [pid 51457:tid 51531] [client 4.205.20.132:44007] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLXQCjknw2FvT4H3DbbEQAAAJE"]
[Fri Mar 13 00:14:48.640321 2026] [:error] [pid 11953:tid 11958] [client 43.130.106.18:50768] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abLmeJudzqsnq3bvtDaXqQAAAUM"]
[Fri Mar 13 01:38:10.724546 2026] [:error] [pid 47894:tid 48017] [client 4.205.20.132:43098] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abL6ApiuFpRtVNR6uOJ_8AAAAQ8"]
[Fri Mar 13 01:38:11.550690 2026] [:error] [pid 47893:tid 47988] [client 4.205.20.132:43117] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abL6AwYSdu6aqxO_YucjRgAAAI0"]
[Fri Mar 13 01:38:12.377499 2026] [:error] [pid 47894:tid 48013] [client 4.205.20.132:43143] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abL6BJiuFpRtVNR6uOJ_9gAAAQs"]
[Fri Mar 13 01:38:13.203153 2026] [:error] [pid 56003:tid 56029] [client 4.205.20.132:43141] [client 4.205.20.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abL6BRQtM0oeMdFWe6VrPQAAANg"]
[Fri Mar 13 02:28:28.081592 2026] [:error] [pid 47893:tid 47991] [client 43.166.131.228:44930] [client 43.166.131.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abMFzAYSdu6aqxO_YucvbgAAAJA"]
[Fri Mar 13 06:48:52.313883 2026] [:error] [pid 55077:tid 55088] [client 43.130.116.87:48658] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abNC1N9Ul5ym4M-PlQL_kwAAAUk"]
[Fri Mar 13 07:04:10.358957 2026] [:error] [pid 61927:tid 61959] [client 195.178.110.159:55796] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "abNGarLkK584eBa2J7XQSAAAAA0"]
[Fri Mar 13 08:40:08.299918 2026] [:error] [pid 55077:tid 55090] [client 195.178.110.159:43534] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "abNc6N9Ul5ym4M-PlQIxKAAAAUs"]
[Fri Mar 13 08:50:49.762786 2026] [:error] [pid 61929:tid 62021] [client 104.28.166.127:24917] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "abNfaTGGsow2jgUjLtx9GgAAAJE"]
[Fri Mar 13 09:50:33.485102 2026] [:error] [pid 44755:tid 44781] [client 45.131.195.147:20457] [client 45.131.195.147] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.147, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "abNtafONf1H0XrBFE4O3PwAAARg"]
[Fri Mar 13 09:50:33.491211 2026] [:error] [pid 44755:tid 44781] [client 45.131.195.147:20457] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 12:19:14.913510 2026] [:error] [pid 9309:tid 9345] [client 177.125.223.82:49011] [client 177.125.223.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.125.223.82, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abOQQqo1KEMMghNWAN-KSAAAAhY"]
[Fri Mar 13 12:19:14.918559 2026] [:error] [pid 9309:tid 9345] [client 177.125.223.82:49011] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 12:49:43.042646 2026] [:error] [pid 9311:tid 9360] [client 43.173.1.69:45662] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abOXZ1TiCkU4QLmYwPnX-wAAAkk"]
[Fri Mar 13 13:02:14.809033 2026] [:error] [pid 55077:tid 55080] [client 101.42.46.71:34180] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abOaVt9Ul5ym4M-PlQJ6BAAAAUE"]
[Fri Mar 13 14:47:18.525079 2026] [:error] [pid 44755:tid 44759] [client 96.44.136.159:38878] [client 96.44.136.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abOy9vONf1H0XrBFE4Ma1wAAAQI"], referer: https://www.google.com
[Fri Mar 13 14:53:35.666918 2026] [:error] [pid 9241:tid 9259] [client 43.155.27.244:46488] [client 43.155.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abO0bw48xagB6AsXkJ7zgQAAAcY"]
[Fri Mar 13 18:19:38.307378 2026] [:error] [pid 9309:tid 9342] [client 43.167.232.38:33642] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abPkuqo1KEMMghNWAN8gVwAAAhM"]
[Fri Mar 13 22:57:30.082743 2026] [:error] [pid 9311:tid 9358] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Mar 13 22:57:30.309625 2026] [:error] [pid 9311:tid 9373] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Fri Mar 13 22:57:30.521613 2026] [:error] [pid 9311:tid 9357] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Fri Mar 13 22:57:30.733725 2026] [:error] [pid 9311:tid 9368] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Mar 13 22:57:30.944787 2026] [:error] [pid 9311:tid 9367] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Mar 13 22:57:31.155035 2026] [:error] [pid 9311:tid 9374] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Mar 13 22:57:31.366491 2026] [:error] [pid 9311:tid 9351] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Mar 13 22:57:31.578082 2026] [:error] [pid 9311:tid 9352] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Fri Mar 13 22:57:31.789196 2026] [:error] [pid 9311:tid 9369] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Mar 13 22:57:31.999653 2026] [:error] [pid 9311:tid 9375] [client 4.204.197.4:2026] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Mar 13 22:57:32.206372 2026] [:error] [pid 9311:tid 9362] [client 4.204.197.4:2026] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "abQl3FTiCkU4QLmYwPk-9wAAAks"]
[Fri Mar 13 22:57:32.620829 2026] [:error] [pid 60496:tid 60517] [client 4.204.197.4:2030] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "abQl3Ab67oGiJ3jaL8wYsQAAA00"]
[Fri Mar 13 22:57:33.033580 2026] [:error] [pid 60496:tid 60505] [client 4.204.197.4:2015] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "abQl3Qb67oGiJ3jaL8wYtAAAA0E"]
[Fri Mar 13 22:57:33.446113 2026] [:error] [pid 60436:tid 60474] [client 4.204.197.4:2012] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "abQl3YI3PEddCArY1Aar2QAAAwU"]
[Fri Mar 13 22:57:33.864971 2026] [:error] [pid 60398:tid 60426] [client 4.204.197.4:2037] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "abQl3UCJdGSTt6QlH2BaEgAAApc"]
[Fri Mar 13 22:57:34.279628 2026] [:error] [pid 9311:tid 9353] [client 4.204.197.4:1929] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "abQl3lTiCkU4QLmYwPk--QAAAkI"]
[Fri Mar 13 22:57:34.692850 2026] [:error] [pid 60436:tid 60489] [client 4.204.197.4:2045] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "abQl3oI3PEddCArY1Aar2gAAAxQ"]
[Fri Mar 13 22:57:35.123826 2026] [:error] [pid 9311:tid 9370] [client 4.204.197.4:2009] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "abQl31TiCkU4QLmYwPk--wAAAlM"]
[Fri Mar 13 22:57:35.544194 2026] [:error] [pid 60496:tid 60518] [client 4.204.197.4:1988] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "abQl3wb67oGiJ3jaL8wYtwAAA04"]
[Fri Mar 13 22:57:35.958294 2026] [:error] [pid 60496:tid 60516] [client 4.204.197.4:1925] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "abQl3wb67oGiJ3jaL8wYuAAAA0w"]
[Fri Mar 13 22:57:36.379130 2026] [:error] [pid 60496:tid 60528] [client 4.204.197.4:1935] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "abQl4Ab67oGiJ3jaL8wYuwAAA1g"]
[Fri Mar 13 22:57:36.816313 2026] [:error] [pid 60496:tid 60512] [client 4.204.197.4:1921] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock.php"] [unique_id "abQl4Ab67oGiJ3jaL8wYvAAAA0g"]
[Fri Mar 13 22:57:37.233098 2026] [:error] [pid 9111:tid 9146] [client 4.204.197.4:1934] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "abQl4U-M156SLpD2BrtdcwAAAZQ"]
[Fri Mar 13 22:57:37.675398 2026] [:error] [pid 60436:tid 60484] [client 4.204.197.4:2024] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "abQl4YI3PEddCArY1Aar3QAAAw8"]
[Fri Mar 13 22:57:38.089696 2026] [:error] [pid 60436:tid 60492] [client 4.204.197.4:2013] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "abQl4oI3PEddCArY1Aar3wAAAxc"]
[Fri Mar 13 22:57:38.506335 2026] [:error] [pid 9111:tid 9139] [client 4.204.197.4:1932] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "abQl4k-M156SLpD2BrtddAAAAY0"]
[Fri Mar 13 22:57:38.930028 2026] [:error] [pid 61929:tid 62022] [client 4.204.197.4:2044] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "abQl4jGGsow2jgUjLty_iQAAAJI"]
[Fri Mar 13 22:57:39.345936 2026] [:error] [pid 60436:tid 60490] [client 4.204.197.4:2017] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "abQl44I3PEddCArY1Aar4gAAAxU"]
[Fri Mar 13 22:57:39.767569 2026] [:error] [pid 60496:tid 60508] [client 4.204.197.4:2010] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "abQl4wb67oGiJ3jaL8wYzQAAA0Q"]
[Fri Mar 13 22:57:40.183243 2026] [:error] [pid 60496:tid 60512] [client 4.204.197.4:1958] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "abQl5Ab67oGiJ3jaL8wY0AAAA0g"]
[Fri Mar 13 22:57:40.595540 2026] [:error] [pid 60496:tid 60523] [client 4.204.197.4:1996] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abQl5Ab67oGiJ3jaL8wY1wAAA1M"]
[Fri Mar 13 22:57:41.011021 2026] [:error] [pid 60496:tid 60516] [client 4.204.197.4:2028] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abQl5Qb67oGiJ3jaL8wY3QAAA0w"]
[Fri Mar 13 22:57:41.421537 2026] [:error] [pid 60496:tid 60514] [client 4.204.197.4:2021] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abQl5Qb67oGiJ3jaL8wY5AAAA0o"]
[Fri Mar 13 22:57:41.838263 2026] [:error] [pid 60496:tid 60507] [client 4.204.197.4:1992] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "abQl5Qb67oGiJ3jaL8wY7AAAA0M"]
[Fri Mar 13 22:57:42.274504 2026] [:error] [pid 60497:tid 60551] [client 4.204.197.4:1933] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "abQl5hjNYgapWlkb4ljJ-AAAA5M"]
[Fri Mar 13 22:57:42.727969 2026] [:error] [pid 60497:tid 60531] [client 4.204.197.4:2043] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "abQl5hjNYgapWlkb4ljJ-QAAA4A"]
[Fri Mar 13 22:57:43.151516 2026] [:error] [pid 60497:tid 60553] [client 4.204.197.4:2007] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "abQl5xjNYgapWlkb4ljJ-wAAA5U"]
[Fri Mar 13 22:57:43.602485 2026] [:error] [pid 55077:tid 55099] [client 4.204.197.4:1930] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "abQl599Ul5ym4M-PlQIBOwAAAVQ"]
[Fri Mar 13 22:57:44.054970 2026] [:error] [pid 61928:tid 61999] [client 4.204.197.4:1939] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQl6Aod66AHekJJZiquMwAAAFY"]
[Fri Mar 13 22:57:44.472888 2026] [:error] [pid 9311:tid 9364] [client 4.204.197.4:2002] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQl6FTiCkU4QLmYwPk-_AAAAk0"]
[Fri Mar 13 22:57:44.895609 2026] [:error] [pid 9311:tid 9371] [client 4.204.197.4:2033] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQl6FTiCkU4QLmYwPk-_QAAAlQ"]
[Fri Mar 13 22:57:45.333585 2026] [:error] [pid 61929:tid 62010] [client 4.204.197.4:2011] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abQl6TGGsow2jgUjLty_jgAAAIY"]
[Fri Mar 13 22:57:45.794985 2026] [:error] [pid 60497:tid 60532] [client 4.204.197.4:1986] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "abQl6RjNYgapWlkb4ljKAAAAA4E"]
[Fri Mar 13 22:57:46.253880 2026] [:error] [pid 61928:tid 61980] [client 4.204.197.4:1981] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "abQl6god66AHekJJZiquNQAAAEM"]
[Fri Mar 13 22:57:46.699128 2026] [:error] [pid 60497:tid 60533] [client 4.204.197.4:2003] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "abQl6hjNYgapWlkb4ljKAwAAA4I"]
[Fri Mar 13 22:57:47.171773 2026] [:error] [pid 60497:tid 60543] [client 4.204.197.4:1991] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "abQl6xjNYgapWlkb4ljKBAAAA4w"]
[Fri Mar 13 22:57:47.606572 2026] [:error] [pid 9309:tid 9345] [client 4.204.197.4:1959] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "abQl66o1KEMMghNWAN9W9AAAAhY"]
[Fri Mar 13 22:57:48.057592 2026] [:error] [pid 55077:tid 55093] [client 4.204.197.4:1881] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "abQl7N9Ul5ym4M-PlQIBPwAAAU4"]
[Fri Mar 13 22:57:48.480050 2026] [:error] [pid 60497:tid 60551] [client 4.204.197.4:2047] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "abQl7BjNYgapWlkb4ljKBgAAA5M"]
[Fri Mar 13 22:57:48.961738 2026] [:error] [pid 60436:tid 60473] [client 4.204.197.4:1872] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "abQl7II3PEddCArY1Aar4wAAAwQ"]
[Fri Mar 13 22:57:49.443391 2026] [:error] [pid 60497:tid 60553] [client 4.204.197.4:2005] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abQl7RjNYgapWlkb4ljKCgAAA5U"]
[Fri Mar 13 22:57:50.026198 2026] [:error] [pid 60497:tid 60555] [client 4.204.197.4:1955] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abQl7hjNYgapWlkb4ljKDgAAA5c"]
[Fri Mar 13 22:57:50.475176 2026] [:error] [pid 61928:tid 62000] [client 4.204.197.4:2022] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abQl7god66AHekJJZiquNwAAAFc"]
[Fri Mar 13 22:57:50.985064 2026] [:error] [pid 60398:tid 60424] [client 4.204.197.4:1861] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "abQl7kCJdGSTt6QlH2BaHwAAApU"]
[Sat Mar 14 02:43:52.827388 2026] [:error] [pid 47891:tid 47990] [client 49.7.227.204:44584] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abRa6PchNnuMqi7I_WEf-AAAAJg"]
[Sat Mar 14 02:55:34.034829 2026] [:error] [pid 48070:tid 48080] [client 170.106.72.93:41098] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abRdpkIvrhMS5BVHxNk9sgAAAAg"]
[Sat Mar 14 03:12:38.632316 2026] [:error] [pid 48070:tid 48092] [client 20.63.80.127:8138] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Mar 14 03:12:39.046513 2026] [:error] [pid 48070:tid 48094] [client 20.63.80.127:8138] [client 20.63.80.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.127, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abRhp0IvrhMS5BVHxNlB-wAAABY"]
[Sat Mar 14 03:12:39.259594 2026] [:error] [pid 48070:tid 48095] [client 20.63.80.127:8138] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sat Mar 14 03:12:40.201999 2026] [:error] [pid 48070:tid 48090] [client 20.63.80.127:8138] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sat Mar 14 03:12:40.912372 2026] [:error] [pid 48070:tid 48096] [client 20.63.80.127:8138] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Mar 14 03:12:41.119617 2026] [:error] [pid 48070:tid 48088] [client 20.63.80.127:8138] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRhqUIvrhMS5BVHxNlCBwAAABA"]
[Sat Mar 14 03:12:42.823417 2026] [:error] [pid 47905:tid 48016] [client 20.63.80.127:62070] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRhqhaYZayP4o4wpJdLsAAAAVc"]
[Sat Mar 14 03:12:43.933636 2026] [:error] [pid 48070:tid 48077] [client 20.63.80.127:8174] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRhq0IvrhMS5BVHxNlCCwAAAAU"]
[Sat Mar 14 03:12:45.296180 2026] [:error] [pid 47891:tid 47979] [client 20.63.80.127:62046] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRhrfchNnuMqi7I_WEwegAAAI0"]
[Sat Mar 14 03:32:04.869075 2026] [:error] [pid 48070:tid 48085] [client 45.231.74.209:64470] [client 45.231.74.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.231.74.209, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abRmNEIvrhMS5BVHxNlHDgAAAA0"]
[Sat Mar 14 03:32:04.874768 2026] [:error] [pid 48070:tid 48085] [client 45.231.74.209:64470] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 14 03:35:44.753620 2026] [:error] [pid 47891:tid 47967] [client 223.237.190.86:47876] [client 223.237.190.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.237.190.86, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abRnEPchNnuMqi7I_WE8UwAAAIE"]
[Sat Mar 14 03:35:44.761283 2026] [:error] [pid 47891:tid 47967] [client 223.237.190.86:47876] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 14 08:55:06.828166 2026] [:error] [pid 35801:tid 35825] [client 192.144.148.122:55992] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abSx6m8tVFelXGsqbU_YuwAAARU"]
[Sat Mar 14 09:40:42.560482 2026] [:error] [pid 57226:tid 57237] [client 43.153.71.12:43332] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abS8mmxFlXQvNewjeI9-ygAAAUc"]
[Sat Mar 14 12:33:44.175287 2026] [:error] [pid 13262:tid 13317] [client 170.106.84.136:51064] [client 170.106.84.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abTlKDAdvM7ft5BXQ2eB6AAAAZg"]
[Sat Mar 14 15:50:28.184148 2026] [:error] [pid 61384:tid 61459] [client 49.235.136.28:33448] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abUTRPzibL2IYJprDHKPCgAAAdA"]
[Sat Mar 14 18:45:17.605528 2026] [:error] [pid 13151:tid 13153] [client 124.156.157.91:51140] [client 124.156.157.91] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abU8PdbXrXQxFzrsw41O9QAAAIA"]
[Sat Mar 14 20:13:13.980005 2026] [:error] [pid 61383:tid 61426] [client 47.61.218.202:47097] [client 47.61.218.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 47.61.218.202, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abVQ2S4SAn4TCd4o0dX5XgAAAQo"]
[Sat Mar 14 20:13:13.987789 2026] [:error] [pid 61383:tid 61426] [client 47.61.218.202:47097] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 14 20:17:14.579948 2026] [:error] [pid 30154:tid 30183] [client 183.171.96.122:4813] [client 183.171.96.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 183.171.96.122, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abVRyl6OP9woRgp3v0F2TgAAANc"]
[Sat Mar 14 20:17:14.585359 2026] [:error] [pid 30154:tid 30183] [client 183.171.96.122:4813] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 14 23:57:39.513875 2026] [:error] [pid 49351:tid 49358] [client 43.155.195.141:33516] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abWFcxzAvuOUcwe0iz-SVQAAAwQ"]
[Sun Mar 15 11:40:41.197151 2026] [:error] [pid 45801:tid 45808] [client 43.154.127.188:35878] [client 43.154.127.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abYqOYaKHL9CTKoVzTDbKAAAAcU"]
[Sun Mar 15 13:59:48.247057 2026] [:error] [pid 45801:tid 45813] [client 43.135.133.194:55710] [client 43.135.133.194] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abZK1IaKHL9CTKoVzTD0mgAAAco"]
[Sun Mar 15 16:13:21.472308 2026] [:error] [pid 50986:tid 50997] [client 104.234.53.51:61079] [client 104.234.53.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.51, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "abZqISknK4c779bcQqF2nQAAAUg"]
[Sun Mar 15 16:13:21.476373 2026] [:error] [pid 50986:tid 50997] [client 104.234.53.51:61079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 17:41:12.271918 2026] [:error] [pid 38645:tid 38662] [client 43.165.190.5:57008] [client 43.165.190.5] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abZ-uBFPHtsDUuVrWDZ5oAAAAM8"]
[Sun Mar 15 18:25:18.692007 2026] [:error] [pid 50986:tid 50989] [client 5.36.92.137:59268] [client 5.36.92.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.36.92.137, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abaJDiknK4c779bcQqGvawAAAUE"]
[Sun Mar 15 18:25:18.695985 2026] [:error] [pid 50986:tid 50989] [client 5.36.92.137:59268] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 15 18:25:19.705126 2026] [:error] [pid 50986:tid 50993] [client 39.49.145.10:63879] [client 39.49.145.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.49.145.10, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abaJDyknK4c779bcQqGvbQAAAUU"]
[Sun Mar 15 18:25:19.709964 2026] [:error] [pid 50986:tid 50993] [client 39.49.145.10:63879] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 15 18:25:42.752928 2026] [:error] [pid 38541:tid 38620] [client 103.110.180.217:59682] [client 103.110.180.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.110.180.217, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abaJJnuOpex8jIO0jt6LmAAAAIc"]
[Sun Mar 15 18:25:42.757755 2026] [:error] [pid 38541:tid 38620] [client 103.110.180.217:59682] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 15 18:29:30.649896 2026] [:error] [pid 42570:tid 42583] [client 49.235.136.28:57308] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abaKCsIUXZJLmk_gYCMA6gAAAYo"]
[Sun Mar 15 22:53:22.502066 2026] [:error] [pid 38645:tid 38660] [client 43.130.139.177:57680] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abbH4hFPHtsDUuVrWDbwgQAAAM0"]
[Mon Mar 16 01:29:40.698085 2026] [:error] [pid 60947:tid 61022] [client 175.6.217.4:47673] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abbshP8DVbvyAQDJWh1hcQAAANM"]
[Mon Mar 16 07:02:26.385891 2026] [:error] [pid 52152:tid 52155] [client 203.188.168.25:58961] [client 203.188.168.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.25, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "abc6gsA6rS_GLRd0NKWH7AAAAQA"]
[Mon Mar 16 07:02:26.389937 2026] [:error] [pid 52152:tid 52155] [client 203.188.168.25:58961] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 16 08:01:05.546731 2026] [:error] [pid 12768:tid 12789] [client 185.104.253.133:62690] [client 185.104.253.133] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.104.253.133, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abdIQYvjhfol0SJym0_HvgAAAZA"]
[Mon Mar 16 08:01:05.555168 2026] [:error] [pid 12768:tid 12789] [client 185.104.253.133:62690] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 16 08:06:54.319584 2026] [:error] [pid 62529:tid 62553] [client 104.28.152.100:49096] [client 104.28.152.100] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.152.100, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abdJnj84-luOVYZKK0OfMQAAANA"]
[Mon Mar 16 08:06:54.327313 2026] [:error] [pid 62529:tid 62553] [client 104.28.152.100:49096] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 16 08:15:57.810802 2026] [:error] [pid 62429:tid 62506] [client 103.65.237.124:58488] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "abdLvVewIPukhLCowEH2-QAAAIo"]
[Mon Mar 16 10:56:39.660281 2026] [:error] [pid 62024:tid 62042] [client 170.106.165.76:42494] [client 170.106.165.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abdxZ4k-5rtjYvjqC_o2jgAAAA0"]
[Mon Mar 16 11:05:14.561727 2026] [:error] [pid 62025:tid 62077] [client 173.239.236.149:51045] [client 173.239.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abdzauimBfLmKh7zLXMCPwAAAFI"]
[Mon Mar 16 11:05:14.802095 2026] [:error] [pid 9305:tid 9326] [client 173.239.236.130:43537] [client 173.239.236.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abdzavRqyKiwGvzyRKyaCwAAAZA"]
[Mon Mar 16 11:05:15.034003 2026] [:error] [pid 62025:tid 62060] [client 173.239.236.153:39641] [client 173.239.236.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feed/"] [unique_id "abdza-imBfLmKh7zLXMCUAAAAEE"]
[Mon Mar 16 12:48:10.241914 2026] [:error] [pid 9305:tid 9319] [client 43.164.195.17:42782] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abeLivRqyKiwGvzyRKyliQAAAYk"]
[Mon Mar 16 14:09:58.030804 2026] [:error] [pid 9400:tid 9435] [client 192.144.148.122:58126] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abeetgSHzD8ZM8ddLEntBAAAAhM"]
[Mon Mar 16 16:17:25.214716 2026] [:error] [pid 9400:tid 9439] [client 43.135.130.202:43284] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abe8lQSHzD8ZM8ddLEktxwAAAhc"]
[Mon Mar 16 18:16:39.471607 2026] [:error] [pid 35929:tid 35955] [client 123.253.49.157:50649] [client 123.253.49.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 123.253.49.157, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abfYh9W47dGpmA63hwRyXgAAANg"]
[Mon Mar 16 18:16:39.477386 2026] [:error] [pid 35929:tid 35955] [client 123.253.49.157:50649] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 16 19:54:36.056931 2026] [:error] [pid 35840:tid 35916] [client 64.89.163.113:53417] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abfvfEJFzfEsmtPx-M0ItQAAAJM"]
[Mon Mar 16 19:54:36.566122 2026] [:error] [pid 39154:tid 39160] [client 64.89.163.113:50796] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abfvfBgq1_qjm7J1LqsimAAAAUM"]
[Mon Mar 16 19:54:37.082747 2026] [:error] [pid 1871:tid 1893] [client 64.89.163.113:53104] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abfvfTinTnZ8uiUPekE7MwAAAZQ"]
[Mon Mar 16 19:54:37.708908 2026] [:error] [pid 39154:tid 39160] [client 64.89.163.113:64291] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abfvfRgq1_qjm7J1LqsiqAAAAUM"]
[Mon Mar 16 19:54:38.217809 2026] [:error] [pid 35839:tid 35882] [client 64.89.163.113:52394] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abfvfqxyv6h8-aZrncsJXwAAAEw"]
[Mon Mar 16 20:56:20.391444 2026] [:error] [pid 1871:tid 1890] [client 125.94.144.102:54421] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abf99DinTnZ8uiUPekFTRAAAAZE"]
[Tue Mar 17 00:32:26.019436 2026] [:error] [pid 45652:tid 45672] [client 20.120.91.203:14647] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "abgwmveWZ4w4tc07R6kw2gAAANE"]
[Tue Mar 17 00:32:28.073576 2026] [:error] [pid 45652:tid 45674] [client 20.120.91.203:15041] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "abgwnPeWZ4w4tc07R6kw5QAAANM"]
[Tue Mar 17 00:32:30.771744 2026] [:error] [pid 45652:tid 45672] [client 20.120.91.203:15042] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "abgwnveWZ4w4tc07R6kw-QAAANE"]
[Tue Mar 17 00:32:31.856162 2026] [:error] [pid 45652:tid 45671] [client 20.120.91.203:14754] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "abgwn_eWZ4w4tc07R6kxAAAAANA"]
[Tue Mar 17 02:57:02.351845 2026] [:error] [pid 9635:tid 9646] [client 43.133.253.253:48620] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abhSfnsAHChuwZxGaSgODgAAAUk"]
[Tue Mar 17 03:34:48.575056 2026] [:error] [pid 46020:tid 46044] [client 49.233.45.47:54484] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abhbWH-nCcd9BdzGdLea4AAAANY"]
[Tue Mar 17 03:48:38.319212 2026] [:error] [pid 46020:tid 46041] [client 97.165.209.221:60382] [client 97.165.209.221] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 97.165.209.221, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abheln-nCcd9BdzGdLekNQAAANM"]
[Tue Mar 17 03:48:38.326117 2026] [:error] [pid 46020:tid 46041] [client 97.165.209.221:60382] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 03:50:02.737998 2026] [:error] [pid 45917:tid 45990] [client 186.158.2.194:48440] [client 186.158.2.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.158.2.194, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abhe6hMMhmeqL5fT_hdX6AAAAIE"]
[Tue Mar 17 03:50:02.743073 2026] [:error] [pid 45917:tid 45990] [client 186.158.2.194:48440] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 07:56:18.362978 2026] [:error] [pid 15013:tid 15078] [client 185.223.152.237:31883] [client 185.223.152.237] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.237, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "abiYolZc-p7DonmJmm2V6gAAAgE"]
[Tue Mar 17 07:56:18.374215 2026] [:error] [pid 15013:tid 15078] [client 185.223.152.237:31883] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 17 08:39:49.969758 2026] [:error] [pid 15013:tid 15097] [client 43.156.204.134:60756] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abii1VZc-p7DonmJmm2f8gAAAhQ"]
[Tue Mar 17 09:56:15.022456 2026] [:error] [pid 15011:tid 15055] [client 49.233.45.47:52880] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abi0v8NtgHlAHiPlDyoZygAAAcY"]
[Tue Mar 17 09:56:30.972155 2026] [:error] [pid 45915:tid 45943] [client 46.252.96.115:4807] [client 46.252.96.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.252.96.115, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abi0zph7U84ydzcrcndNcAAAAA4"]
[Tue Mar 17 09:56:30.978029 2026] [:error] [pid 45915:tid 45943] [client 46.252.96.115:4807] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 09:56:32.315785 2026] [:error] [pid 45915:tid 45937] [client 172.70.240.113:10211] [client 172.70.240.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "abi00Jh7U84ydzcrcndNhQAAAAg"]
[Tue Mar 17 09:56:32.315890 2026] [:error] [pid 45916:tid 45974] [client 172.70.240.112:13013] [client 172.70.240.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "abi00LiS53PnClk_C9BXyQAAAEw"]
[Tue Mar 17 09:56:32.343312 2026] [:error] [pid 45915:tid 45942] [client 172.70.240.113:10208] [client 172.70.240.113] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "abi00Jh7U84ydzcrcndNhwAAAA0"]
[Tue Mar 17 14:07:33.678572 2026] [:error] [pid 45916:tid 45984] [client 43.153.27.244:39668] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abjvpbiS53PnClk_C9DzUgAAAFY"]
[Tue Mar 17 16:44:34.906759 2026] [:error] [pid 45915:tid 45932] [client 122.51.236.174:33776] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abkUcph7U84ydzcrcncYvQAAAAM"]
[Tue Mar 17 21:11:21.863805 2026] [:error] [pid 45916:tid 45979] [client 43.153.102.138:50696] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ablS-biS53PnClk_C9CnrQAAAFE"]
[Tue Mar 17 23:35:01.131596 2026] [:error] [pid 15011:tid 15063] [client 43.140.247.223:41434] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abl0pcNtgHlAHiPlDypiewAAAc4"]
[Wed Mar 18 04:02:47.823490 2026] [:error] [pid 44966:tid 45057] [client 172.191.184.190:25141] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Mar 18 04:02:48.261792 2026] [:error] [pid 44966:tid 45040] [client 172.191.184.190:25141] [client 172.191.184.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.191.184.190, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abmzaLHml2_01Zq4-12Z5wAAAIM"]
[Wed Mar 18 04:02:48.487077 2026] [:error] [pid 44966:tid 45050] [client 172.191.184.190:25141] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Wed Mar 18 04:02:49.467176 2026] [:error] [pid 44966:tid 45049] [client 172.191.184.190:25141] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Wed Mar 18 04:02:50.208983 2026] [:error] [pid 44966:tid 45055] [client 172.191.184.190:25141] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Mar 18 04:02:50.428079 2026] [:error] [pid 44966:tid 45050] [client 172.191.184.190:25141] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmzarHml2_01Zq4-12Z_AAAAI0"]
[Wed Mar 18 04:02:57.956348 2026] [:error] [pid 44966:tid 45060] [client 172.191.184.190:25107] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmzcbHml2_01Zq4-12aGQAAAJc"]
[Wed Mar 18 04:03:00.054675 2026] [:error] [pid 44964:tid 44998] [client 172.191.184.190:24591] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmzdMvMufm4ayzOOhA7TAAAABQ"]
[Wed Mar 18 04:03:03.502808 2026] [:error] [pid 45069:tid 45073] [client 172.191.184.190:24991] [client 172.191.184.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abmzdzNzUMBULZVa94yuegAAAMI"]
[Wed Mar 18 05:43:38.541138 2026] [:error] [pid 44966:tid 45051] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Mar 18 05:43:38.690548 2026] [:error] [pid 44966:tid 45050] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Wed Mar 18 05:43:38.807792 2026] [:error] [pid 44966:tid 45058] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed Mar 18 05:43:38.924758 2026] [:error] [pid 44966:tid 45038] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 18 05:43:39.077415 2026] [:error] [pid 44966:tid 45047] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed Mar 18 05:43:39.461982 2026] [:error] [pid 44966:tid 45037] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Mar 18 05:43:39.580700 2026] [:error] [pid 44966:tid 45046] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Wed Mar 18 05:43:39.697221 2026] [:error] [pid 44966:tid 45044] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Mar 18 05:43:39.814826 2026] [:error] [pid 44966:tid 45057] [client 20.46.120.203:23783] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 18 05:43:39.928154 2026] [:error] [pid 44966:tid 45053] [client 20.46.120.203:23783] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "abnLC7Hml2_01Zq4-1237AAAAJA"]
[Wed Mar 18 05:43:40.410176 2026] [:error] [pid 13716:tid 13729] [client 20.46.120.203:17139] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "abnLDGWKzQVHkZkUHaTwSQAAAUs"]
[Wed Mar 18 05:43:40.896579 2026] [:error] [pid 44966:tid 45061] [client 20.46.120.203:17122] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "abnLDLHml2_01Zq4-1237QAAAJg"]
[Wed Mar 18 05:43:41.354119 2026] [:error] [pid 45069:tid 45079] [client 20.46.120.203:14401] [client 20.46.120.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "abnLDTNzUMBULZVa94zdnAAAAMg"]
[Wed Mar 18 06:19:39.744171 2026] [:error] [pid 44965:tid 45031] [client 43.157.95.239:45112] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abnTe6NZys-oG-hM22iCbAAAAFU"]
[Wed Mar 18 08:13:20.961548 2026] [:error] [pid 13676:tid 13699] [client 20.2.90.103:41448] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "abnuIGxDEHR5lvAEVIgUhwAAARU"]
[Wed Mar 18 08:28:47.017350 2026] [:error] [pid 14861:tid 14871] [client 43.132.214.228:49930] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abnxvyW0PeWaIC54JJbjgAAAAYU"]
[Wed Mar 18 11:40:01.186001 2026] [:error] [pid 31232:tid 31239] [client 27.61.32.51:54605] [client 27.61.32.51] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.61.32.51, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aboekWX6HV7dqh3BQD2RHQAAAEQ"]
[Wed Mar 18 11:40:01.202514 2026] [:error] [pid 31232:tid 31239] [client 27.61.32.51:54605] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 12:09:52.254393 2026] [:error] [pid 42970:tid 42996] [client 43.133.69.37:46596] [client 43.133.69.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abolkI5YFUj4vBJI0KT49AAAANg"]
[Wed Mar 18 12:16:35.636671 2026] [:error] [pid 53755:tid 53764] [client 175.6.217.4:37470] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abonI6qw5ZSRshmIhWlo4wAAAUc"]
[Wed Mar 18 16:28:56.625524 2026] [:error] [pid 31232:tid 31257] [client 152.59.56.69:60585] [client 152.59.56.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.56.69, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abpiSGX6HV7dqh3BQD1myAAAAFY"]
[Wed Mar 18 16:28:56.630776 2026] [:error] [pid 31232:tid 31257] [client 152.59.56.69:60585] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 17:48:10.533975 2026] [:error] [pid 42870:tid 42897] [client 43.157.46.118:47378] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abp02p6axlAooiuYyUwJwQAAAAw"]
[Wed Mar 18 18:56:51.410625 2026] [:error] [pid 53755:tid 53775] [client 43.138.68.113:51934] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abqE86qw5ZSRshmIhWn8ngAAAVI"]
[Wed Mar 18 21:33:39.087015 2026] [:error] [pid 42870:tid 42897] [client 173.239.254.86:29717] [client 173.239.254.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.86, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "abqps56axlAooiuYyUw9_AAAAAw"]
[Wed Mar 18 21:33:39.090660 2026] [:error] [pid 42870:tid 42897] [client 173.239.254.86:29717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 18 23:03:45.604337 2026] [:error] [pid 53755:tid 53771] [client 43.166.240.231:57612] [client 43.166.240.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abq-0aqw5ZSRshmIhWmLuQAAAU4"]
[Thu Mar 19 00:03:41.407456 2026] [:error] [pid 20667:tid 20689] [client 20.120.18.145:38277] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "abrM3ZgyfQyvBhzza_2oBwAAAZQ"]
[Thu Mar 19 00:03:49.478850 2026] [:error] [pid 42871:tid 42928] [client 20.120.18.145:38489] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 19 00:03:49.756058 2026] [:error] [pid 42871:tid 42937] [client 20.120.18.145:38489] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Mar 19 00:03:50.303355 2026] [:error] [pid 42871:tid 42922] [client 20.120.18.145:38489] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Mar 19 00:03:50.517747 2026] [:error] [pid 42871:tid 42932] [client 20.120.18.145:38489] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 19 00:03:51.008523 2026] [:error] [pid 42871:tid 42931] [client 20.120.18.145:38489] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu Mar 19 00:03:51.223058 2026] [:error] [pid 42871:tid 42920] [client 20.120.18.145:38489] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Mar 19 00:03:51.437767 2026] [:error] [pid 42871:tid 42919] [client 20.120.18.145:38489] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Mar 19 00:03:52.296956 2026] [:error] [pid 42871:tid 42928] [client 20.120.18.145:38489] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrM6GPUS0lM1M9nUaKmiAAAAI4"]
[Thu Mar 19 00:03:53.450340 2026] [:error] [pid 53755:tid 53765] [client 20.120.18.145:38281] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrM6aqw5ZSRshmIhWmoQgAAAUg"]
[Thu Mar 19 00:03:57.192539 2026] [:error] [pid 53755:tid 53776] [client 20.120.18.145:38846] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrM7aqw5ZSRshmIhWmoXAAAAVM"]
[Thu Mar 19 00:03:58.599825 2026] [:error] [pid 53755:tid 53767] [client 20.120.18.145:38837] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrM7qqw5ZSRshmIhWmoaAAAAUo"]
[Thu Mar 19 01:37:19.269184 2026] [:error] [pid 19196:tid 19325] [client 77.46.136.200:11797] [client 77.46.136.200] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.46.136.200, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abriz7QmdacT_YxarWRUiwAAAAk"]
[Thu Mar 19 01:37:19.273971 2026] [:error] [pid 19196:tid 19325] [client 77.46.136.200:11797] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 05:29:21.215348 2026] [:error] [pid 3278:tid 3305] [client 43.153.96.79:39786] [client 43.153.96.79] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "absZMQC2T_lM6ZgvfcQH_AAAARg"]
[Thu Mar 19 06:31:06.109361 2026] [:error] [pid 31205:tid 31229] [client 31.171.130.40:30825] [client 31.171.130.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.40, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "absnqlu5gZKGrGz5P1H5YgAAAUw"]
[Thu Mar 19 06:31:06.137096 2026] [:error] [pid 31205:tid 31229] [client 31.171.130.40:30825] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 09:45:14.287554 2026] [:error] [pid 3278:tid 3297] [client 128.140.55.176:45332] [client 128.140.55.176] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abtVKgC2T_lM6ZgvfcRKvgAAARA"]
[Thu Mar 19 09:55:22.717023 2026] [:error] [pid 3278:tid 3286] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Mar 19 09:55:22.936519 2026] [:error] [pid 3278:tid 3305] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Mar 19 09:55:23.164866 2026] [:error] [pid 3278:tid 3298] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Mar 19 09:55:23.429446 2026] [:error] [pid 3278:tid 3297] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Mar 19 09:55:23.702610 2026] [:error] [pid 3278:tid 3285] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Mar 19 09:55:23.950212 2026] [:error] [pid 3278:tid 3302] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Mar 19 09:55:24.191944 2026] [:error] [pid 3278:tid 3284] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Mar 19 09:55:24.461404 2026] [:error] [pid 3278:tid 3289] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 19 09:55:24.999439 2026] [:error] [pid 3278:tid 3305] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Mar 19 09:55:25.515415 2026] [:error] [pid 3278:tid 3300] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Mar 19 09:55:25.754670 2026] [:error] [pid 3278:tid 3285] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Mar 19 09:55:25.969782 2026] [:error] [pid 3278:tid 3302] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 19 09:55:26.267526 2026] [:error] [pid 3278:tid 3284] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Mar 19 09:55:26.539684 2026] [:error] [pid 3278:tid 3289] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Mar 19 09:55:26.784307 2026] [:error] [pid 3278:tid 3304] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Mar 19 09:55:27.025304 2026] [:error] [pid 3278:tid 3301] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Mar 19 09:55:27.263605 2026] [:error] [pid 3278:tid 3292] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Mar 19 09:55:27.540568 2026] [:error] [pid 3278:tid 3300] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Mar 19 09:55:27.815214 2026] [:error] [pid 3278:tid 3287] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Mar 19 09:55:28.122843 2026] [:error] [pid 3278:tid 3285] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Mar 19 09:55:28.378497 2026] [:error] [pid 3278:tid 3303] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Mar 19 09:55:28.660795 2026] [:error] [pid 3278:tid 3288] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Mar 19 09:55:28.906590 2026] [:error] [pid 3278:tid 3284] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Mar 19 09:55:29.368481 2026] [:error] [pid 3278:tid 3281] [client 209.87.169.62:39111] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Mar 19 09:55:29.645548 2026] [:error] [pid 3278:tid 3283] [client 209.87.169.62:39111] [client 209.87.169.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "abtXkQC2T_lM6ZgvfcRMeAAAAQI"]
[Thu Mar 19 09:55:30.115568 2026] [:error] [pid 31205:tid 31222] [client 209.87.169.68:36185] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Mar 19 09:55:30.354720 2026] [:error] [pid 31205:tid 31226] [client 209.87.169.68:36185] [client 209.87.169.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "abtXklu5gZKGrGz5P1FH9gAAAUk"]
[Thu Mar 19 09:55:31.042300 2026] [:error] [pid 23884:tid 23968] [client 45.131.195.237:33121] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Mar 19 09:55:31.260166 2026] [:error] [pid 23884:tid 23956] [client 45.131.195.237:33121] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Mar 19 09:55:31.507583 2026] [:error] [pid 23884:tid 23959] [client 45.131.195.237:33121] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Mar 19 09:55:31.742519 2026] [:error] [pid 23884:tid 23978] [client 45.131.195.237:33121] [client 45.131.195.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "abtXk16St-VCdOYnZMoeCQAAAJY"]
[Thu Mar 19 09:55:32.330258 2026] [:error] [pid 31447:tid 31457] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Mar 19 09:55:32.569728 2026] [:error] [pid 31447:tid 31456] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Mar 19 09:55:32.813934 2026] [:error] [pid 31447:tid 31479] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Mar 19 09:55:33.084903 2026] [:error] [pid 31447:tid 31474] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Mar 19 09:55:33.420708 2026] [:error] [pid 31447:tid 31474] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Mar 19 09:55:33.774988 2026] [:error] [pid 31447:tid 31475] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Mar 19 09:55:34.078720 2026] [:error] [pid 31447:tid 31477] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Mar 19 09:55:34.354611 2026] [:error] [pid 31447:tid 31478] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Mar 19 09:55:34.579155 2026] [:error] [pid 31447:tid 31476] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Mar 19 09:55:34.878893 2026] [:error] [pid 31447:tid 31477] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Mar 19 09:55:35.117246 2026] [:error] [pid 31447:tid 31455] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Mar 19 09:55:35.383667 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Mar 19 09:55:35.654307 2026] [:error] [pid 31447:tid 31458] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Mar 19 09:55:35.975390 2026] [:error] [pid 31447:tid 31455] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Mar 19 09:55:36.208555 2026] [:error] [pid 31447:tid 31460] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Mar 19 09:55:36.450290 2026] [:error] [pid 31447:tid 31473] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Mar 19 09:55:36.750415 2026] [:error] [pid 31447:tid 31455] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Mar 19 09:55:37.049597 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Mar 19 09:55:37.286296 2026] [:error] [pid 31447:tid 31473] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Mar 19 09:55:37.561038 2026] [:error] [pid 31447:tid 31465] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Mar 19 09:55:37.800143 2026] [:error] [pid 31447:tid 31470] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Mar 19 09:55:38.035629 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Mar 19 09:55:38.287510 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Mar 19 09:55:38.535711 2026] [:error] [pid 31447:tid 31459] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Mar 19 09:55:38.781950 2026] [:error] [pid 31447:tid 31470] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Mar 19 09:55:39.023369 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Mar 19 09:55:39.328646 2026] [:error] [pid 31447:tid 31473] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Mar 19 09:55:39.556273 2026] [:error] [pid 31447:tid 31459] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Mar 19 09:55:39.778910 2026] [:error] [pid 31447:tid 31474] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Mar 19 09:55:40.067345 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Mar 19 09:55:40.317283 2026] [:error] [pid 31447:tid 31476] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Mar 19 09:55:40.576434 2026] [:error] [pid 31447:tid 31458] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Mar 19 09:55:40.890335 2026] [:error] [pid 31447:tid 31457] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Mar 19 09:55:41.153647 2026] [:error] [pid 31447:tid 31478] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Mar 19 09:55:41.397399 2026] [:error] [pid 31447:tid 31477] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Mar 19 09:55:41.633254 2026] [:error] [pid 31447:tid 31470] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Mar 19 09:55:41.887604 2026] [:error] [pid 31447:tid 31464] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Mar 19 09:55:42.153802 2026] [:error] [pid 31447:tid 31477] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Mar 19 09:55:42.596884 2026] [:error] [pid 31447:tid 31477] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Mar 19 09:55:42.843036 2026] [:error] [pid 31447:tid 31457] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Mar 19 09:55:43.361979 2026] [:error] [pid 31447:tid 31459] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Mar 19 09:55:43.715410 2026] [:error] [pid 31447:tid 31470] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Mar 19 09:55:44.003059 2026] [:error] [pid 31447:tid 31472] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Mar 19 09:55:44.274604 2026] [:error] [pid 31447:tid 31458] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Mar 19 09:55:44.497618 2026] [:error] [pid 31447:tid 31465] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Mar 19 09:55:44.761523 2026] [:error] [pid 31447:tid 31472] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 19 09:55:44.989602 2026] [:error] [pid 31447:tid 31465] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Mar 19 09:55:45.230405 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Mar 19 09:55:45.465612 2026] [:error] [pid 31447:tid 31478] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Mar 19 09:55:45.707650 2026] [:error] [pid 31447:tid 31471] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Mar 19 09:55:45.976332 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Mar 19 09:55:46.261833 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Mar 19 09:55:46.518698 2026] [:error] [pid 31447:tid 31471] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Mar 19 09:55:46.748645 2026] [:error] [pid 31447:tid 31474] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Mar 19 09:55:47.050222 2026] [:error] [pid 31447:tid 31474] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Mar 19 09:55:47.359884 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Mar 19 09:55:47.612331 2026] [:error] [pid 31447:tid 31475] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Mar 19 09:55:47.840136 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Mar 19 09:55:48.103504 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Mar 19 09:55:48.599328 2026] [:error] [pid 31447:tid 31474] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 19 09:55:48.842049 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Mar 19 09:55:51.562610 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Mar 19 09:55:51.874612 2026] [:error] [pid 31447:tid 31473] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Mar 19 09:55:52.191167 2026] [:error] [pid 31447:tid 31464] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Mar 19 09:55:52.490495 2026] [:error] [pid 31447:tid 31478] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Mar 19 09:55:52.714651 2026] [:error] [pid 31447:tid 31456] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Mar 19 09:55:52.949700 2026] [:error] [pid 31447:tid 31468] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Mar 19 09:55:53.191020 2026] [:error] [pid 31447:tid 31472] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Mar 19 09:55:53.410558 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Mar 19 09:55:53.664350 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Mar 19 09:55:55.921749 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Mar 19 09:55:56.162896 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Mar 19 09:55:56.413370 2026] [:error] [pid 31447:tid 31457] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Mar 19 09:55:56.714935 2026] [:error] [pid 31447:tid 31455] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Mar 19 09:55:56.978518 2026] [:error] [pid 31447:tid 31467] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Mar 19 09:55:57.267253 2026] [:error] [pid 31447:tid 31466] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Mar 19 09:55:57.524312 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Mar 19 09:55:57.788983 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Mar 19 09:55:58.048469 2026] [:error] [pid 31447:tid 31477] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Mar 19 09:55:58.326721 2026] [:error] [pid 31447:tid 31464] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Mar 19 09:55:58.618273 2026] [:error] [pid 31447:tid 31457] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Mar 19 09:55:58.913845 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Mar 19 09:55:59.215224 2026] [:error] [pid 31447:tid 31477] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Mar 19 09:55:59.511194 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Mar 19 09:55:59.772332 2026] [:error] [pid 31447:tid 31464] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Mar 19 09:56:00.032463 2026] [:error] [pid 31447:tid 31462] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Mar 19 09:56:00.312193 2026] [:error] [pid 31447:tid 31464] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Mar 19 09:56:00.693281 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Mar 19 09:56:01.039106 2026] [:error] [pid 31447:tid 31459] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Mar 19 09:56:01.342474 2026] [:error] [pid 31447:tid 31468] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Mar 19 09:56:01.662201 2026] [:error] [pid 31447:tid 31468] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Mar 19 09:56:01.943051 2026] [:error] [pid 31447:tid 31461] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Mar 19 09:56:02.209197 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Mar 19 09:56:02.530926 2026] [:error] [pid 31447:tid 31469] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Mar 19 09:56:02.838935 2026] [:error] [pid 31447:tid 31463] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Mar 19 09:56:03.098813 2026] [:error] [pid 31447:tid 31473] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Mar 19 09:56:03.356872 2026] [:error] [pid 31447:tid 31459] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Mar 19 09:56:03.592989 2026] [:error] [pid 31447:tid 31465] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Mar 19 09:56:03.904183 2026] [:error] [pid 31447:tid 31464] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Mar 19 09:56:04.144217 2026] [:error] [pid 31447:tid 31465] [client 209.87.169.242:64061] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Mar 19 09:56:04.661190 2026] [:error] [pid 32226:tid 32236] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Mar 19 09:56:04.921463 2026] [:error] [pid 32226:tid 32238] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Mar 19 09:56:05.203189 2026] [:error] [pid 32226:tid 32233] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Mar 19 09:56:05.446935 2026] [:error] [pid 32226:tid 32230] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Mar 19 09:56:05.773411 2026] [:error] [pid 32226:tid 32244] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Mar 19 09:56:06.024477 2026] [:error] [pid 32226:tid 32236] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Mar 19 09:56:06.267523 2026] [:error] [pid 32226:tid 32251] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Mar 19 09:56:06.502331 2026] [:error] [pid 32226:tid 32249] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Mar 19 09:56:06.740253 2026] [:error] [pid 32226:tid 32234] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Mar 19 09:56:07.244230 2026] [:error] [pid 32226:tid 32243] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Mar 19 09:56:08.000324 2026] [:error] [pid 32226:tid 32251] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Mar 19 09:56:08.255914 2026] [:error] [pid 32226:tid 32243] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Mar 19 09:56:08.513806 2026] [:error] [pid 32226:tid 32240] [client 209.87.169.229:20421] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Mar 19 09:56:11.771013 2026] [:error] [pid 32226:tid 32238] [client 209.87.169.229:20421] [client 209.87.169.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abtXu7Bb58lgPwqxC6rIjQAAAwo"]
[Thu Mar 19 09:56:12.976200 2026] [:error] [pid 31447:tid 31463] [client 209.87.169.50:56595] [client 209.87.169.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abtXvBmVNRDSLnGvghibBwAAAgg"]
[Thu Mar 19 09:56:14.335299 2026] [:error] [pid 23988:tid 24006] [client 209.87.169.74:52021] [client 209.87.169.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abtXvmnlkSPXj2matr0r5QAAAM8"]
[Thu Mar 19 09:56:16.098608 2026] [:error] [pid 31447:tid 31479] [client 209.87.169.244:22935] [client 209.87.169.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abtXwBmVNRDSLnGvghibTgAAAhg"]
[Thu Mar 19 09:56:17.806022 2026] [:error] [pid 23884:tid 23961] [client 209.87.169.222:20459] [client 209.87.169.222] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abtXwV6St-VCdOYnZMofwQAAAIU"]
[Thu Mar 19 09:56:18.348107 2026] [:error] [pid 3278:tid 3282] [client 209.87.169.30:33057] [client 209.87.169.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abtXwgC2T_lM6ZgvfcRNdQAAAQE"]
[Thu Mar 19 09:56:18.867118 2026] [:error] [pid 23884:tid 23968] [client 209.87.169.69:20013] [client 209.87.169.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abtXwl6St-VCdOYnZMofzAAAAIw"]
[Thu Mar 19 09:56:19.310692 2026] [:error] [pid 31447:tid 31455] [client 209.87.169.71:27723] [client 209.87.169.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abtXwxmVNRDSLnGvghibhQAAAgA"]
[Thu Mar 19 09:56:19.785125 2026] [:error] [pid 31205:tid 31216] [client 209.87.169.38:44803] [client 209.87.169.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abtXw1u5gZKGrGz5P1FKTAAAAUA"]
[Thu Mar 19 09:56:20.454055 2026] [:error] [pid 32226:tid 32241] [client 209.87.169.62:26437] [client 209.87.169.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abtXxLBb58lgPwqxC6rI_AAAAw0"]
[Thu Mar 19 11:22:03.104320 2026] [:error] [pid 25135:tid 25147] [client 43.159.141.150:50168] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abtr26KtE0dzgMctjFXCCgAAA0o"]
[Thu Mar 19 12:54:15.382821 2026] [:error] [pid 25135:tid 25149] [client 154.16.49.101:7391] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abuBd6KtE0dzgMctjFXtwQAAA0w"]
[Thu Mar 19 12:54:15.878574 2026] [:error] [pid 23882:tid 23902] [client 154.16.49.101:7626] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBd7WnClbtbN12M7-UagAAAAA"]
[Thu Mar 19 12:54:16.371407 2026] [:error] [pid 25135:tid 25149] [client 154.16.49.101:7947] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feed/"] [unique_id "abuBeKKtE0dzgMctjFXt1gAAA0w"]
[Thu Mar 19 13:26:55.406006 2026] [:error] [pid 31205:tid 31217] [client 43.153.27.244:53252] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abuJH1u5gZKGrGz5P1GyUAAAAUE"]
[Thu Mar 19 16:37:45.950192 2026] [:error] [pid 48106:tid 48129] [client 106.219.161.156:28871] [client 106.219.161.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.161.156, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abu12cVZaUGvkz29lZHzgAAAAM8"]
[Thu Mar 19 16:37:45.954787 2026] [:error] [pid 48106:tid 48129] [client 106.219.161.156:28871] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 16:42:38.387123 2026] [:error] [pid 11110:tid 11121] [client 36.79.159.228:53019] [client 36.79.159.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 36.79.159.228, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abu2_gSNPqGfikw7k8J_mgAAAAY"]
[Thu Mar 19 16:42:38.393194 2026] [:error] [pid 11110:tid 11121] [client 36.79.159.228:53019] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 17:00:31.246830 2026] [:error] [pid 1247:tid 1255] [client 43.173.1.69:43848] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abu7Lw5tmeOr-yI4XNF3PwAAAcY"]
[Thu Mar 19 22:12:36.516179 2026] [:error] [pid 48106:tid 48118] [client 49.51.253.83:52502] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abwEVMVZaUGvkz29lZEfdQAAAMQ"]
[Thu Mar 19 23:21:18.444808 2026] [:error] [pid 1247:tid 1259] [client 20.151.141.24:44084] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 19 23:21:18.668193 2026] [:error] [pid 1247:tid 1266] [client 20.151.141.24:44084] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Mar 19 23:21:19.227042 2026] [:error] [pid 1247:tid 1271] [client 20.151.141.24:44084] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Mar 19 23:21:19.530383 2026] [:error] [pid 1247:tid 1270] [client 20.151.141.24:44084] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 19 23:21:20.059761 2026] [:error] [pid 1247:tid 1258] [client 20.151.141.24:44084] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Thu Mar 19 23:21:20.291353 2026] [:error] [pid 1247:tid 1260] [client 20.151.141.24:44084] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Mar 19 23:21:20.623338 2026] [:error] [pid 1247:tid 1263] [client 20.151.141.24:44084] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Mar 19 23:21:21.121152 2026] [:error] [pid 1247:tid 1250] [client 20.151.141.24:44084] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwUcQ5tmeOr-yI4XNEiagAAAcE"]
[Thu Mar 19 23:21:23.778345 2026] [:error] [pid 51091:tid 51134] [client 20.151.141.24:44046] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwUc77LZKhdJPD9CBvtxAAAAVc"]
[Thu Mar 19 23:21:25.278736 2026] [:error] [pid 1285:tid 1311] [client 20.151.141.24:44173] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwUdVE95r3zR75X1HpuHgAAAhg"]
[Thu Mar 19 23:21:30.362035 2026] [:error] [pid 1247:tid 1269] [client 20.151.141.24:44050] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abwUeg5tmeOr-yI4XNEicgAAAdQ"]
[Fri Mar 20 00:17:52.688782 2026] [:error] [pid 1285:tid 1311] [client 8.229.124.204:49531] [client 8.229.124.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.229.124.204, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "abwhsFE95r3zR75X1Hp-3QAAAhg"]
[Fri Mar 20 00:17:52.693615 2026] [:error] [pid 1285:tid 1311] [client 8.229.124.204:49531] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 00:17:54.931429 2026] [:error] [pid 1285:tid 1310] [client 8.229.124.204:49531] [client 8.229.124.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abwhslE95r3zR75X1Hp-_AAAAhc"]
[Fri Mar 20 00:17:55.317573 2026] [:error] [pid 1247:tid 1251] [client 8.229.124.204:49177] [client 8.229.124.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abwhsw5tmeOr-yI4XNE2GQAAAcI"]
[Fri Mar 20 00:17:55.668370 2026] [:error] [pid 1285:tid 1287] [client 8.229.124.204:63044] [client 8.229.124.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abwhs1E95r3zR75X1Hp_AgAAAgA"]
[Fri Mar 20 00:17:56.076979 2026] [:error] [pid 1247:tid 1273] [client 8.229.124.204:51309] [client 8.229.124.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abwhtA5tmeOr-yI4XNE2HwAAAdg"]
[Fri Mar 20 00:17:56.424123 2026] [:error] [pid 1285:tid 1305] [client 8.229.124.204:59873] [client 8.229.124.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abwhtFE95r3zR75X1Hp_AwAAAhI"]
[Fri Mar 20 00:17:56.877138 2026] [:error] [pid 11015:tid 11064] [client 8.229.124.204:59431] [client 8.229.124.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abwhtPPcMwFQZAVfzLSsOgAAAJI"]
[Fri Mar 20 00:17:57.333741 2026] [:error] [pid 1247:tid 1249] [client 8.229.124.204:54378] [client 8.229.124.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abwhtQ5tmeOr-yI4XNE2JAAAAcA"]
[Fri Mar 20 00:41:02.045456 2026] [:error] [pid 46126:tid 46216] [client 20.151.141.24:44455] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abwnHqQ44YePbsZz3j7ALQAAAQM"]
[Fri Mar 20 00:41:04.500033 2026] [:error] [pid 46124:tid 46200] [client 20.151.141.24:44429] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abwnIEzMrlLOY6zyCjJmewAAAFQ"]
[Fri Mar 20 00:41:06.793170 2026] [:error] [pid 46124:tid 46188] [client 20.151.141.24:44290] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abwnIkzMrlLOY6zyCjJmhgAAAEg"]
[Fri Mar 20 00:41:08.843178 2026] [:error] [pid 46125:tid 46223] [client 20.151.141.24:44454] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "abwnJGgN4lI6NHeckY5TBwAAAIc"]
[Fri Mar 20 01:14:32.020696 2026] [:error] [pid 46126:tid 46246] [client 209.97.171.56:60970] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abwu-KQ44YePbsZz3j7MZQAAARI"]
[Fri Mar 20 01:14:32.575475 2026] [:error] [pid 11258:tid 11270] [client 209.97.171.56:55963] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abwu-JPHb95f6xzHJOcPogAAAMo"]
[Fri Mar 20 02:04:57.563960 2026] [:error] [pid 11258:tid 11261] [client 20.151.141.24:44315] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "abw6yZPHb95f6xzHJOcr_gAAAME"]
[Fri Mar 20 02:05:01.262890 2026] [:error] [pid 11258:tid 11278] [client 20.151.141.24:44262] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "abw6zZPHb95f6xzHJOcsDwAAANI"]
[Fri Mar 20 02:05:04.936374 2026] [:error] [pid 46124:tid 46196] [client 20.151.141.24:44277] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "abw60EzMrlLOY6zyCjKJrQAAAFA"]
[Fri Mar 20 02:05:06.197940 2026] [:error] [pid 46125:tid 46247] [client 20.151.141.24:44317] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "abw60mgN4lI6NHeckY5nTQAAAJM"]
[Fri Mar 20 03:31:49.394361 2026] [:error] [pid 46264:tid 46288] [client 20.151.141.24:54530] File does not exist: /usr/local/apache/htdocs/suspended-page/cah.php
[Fri Mar 20 03:31:49.655773 2026] [:error] [pid 46264:tid 46294] [client 20.151.141.24:54530] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri Mar 20 03:31:49.868340 2026] [:error] [pid 46264:tid 46283] [client 20.151.141.24:54530] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Mar 20 03:31:50.123107 2026] [:error] [pid 46264:tid 46300] [client 20.151.141.24:54530] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php
[Fri Mar 20 03:31:50.386043 2026] [:error] [pid 46264:tid 46290] [client 20.151.141.24:54530] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "abxPJop3TruHFmWOt5EzUgAAAAc"]
[Fri Mar 20 03:31:51.933259 2026] [:error] [pid 46264:tid 46288] [client 20.151.141.24:44304] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Mar 20 03:31:52.140068 2026] [:error] [pid 46264:tid 46304] [client 20.151.141.24:44304] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "abxPKIp3TruHFmWOt5EzWAAAABU"]
[Fri Mar 20 03:31:54.734073 2026] [:error] [pid 46126:tid 46222] [client 20.151.141.24:54558] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "abxPKqQ44YePbsZz3j7ytwAAAQY"]
[Fri Mar 20 03:31:57.069659 2026] [:error] [pid 46264:tid 46307] [client 20.151.141.24:54591] [client 20.151.141.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "abxPLYp3TruHFmWOt5EzZAAAABg"]
[Fri Mar 20 03:31:58.422729 2026] [:error] [pid 46264:tid 46292] [client 20.151.141.24:44338] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Mar 20 03:31:58.631889 2026] [:error] [pid 46264:tid 46297] [client 20.151.141.24:44338] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Mar 20 03:31:58.947403 2026] [:error] [pid 46264:tid 46288] [client 20.151.141.24:44338] File does not exist: /usr/local/apache/htdocs/suspended-page/fi2.php
[Fri Mar 20 03:31:59.157579 2026] [:error] [pid 46264:tid 46298] [client 20.151.141.24:44338] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri Mar 20 03:31:59.365487 2026] [:error] [pid 46264:tid 46285] [client 20.151.141.24:44338] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "abxPL4p3TruHFmWOt5EzfwAAAAI"]
[Fri Mar 20 03:32:05.494301 2026] [:error] [pid 46124:tid 46188] [client 20.151.141.24:44328] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "abxPNUzMrlLOY6zyCjKrpAAAAEg"]
[Fri Mar 20 03:32:07.481897 2026] [:error] [pid 11258:tid 11279] [client 20.151.141.24:44322] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "abxPN5PHb95f6xzHJOdXqAAAANM"]
[Fri Mar 20 03:32:10.194546 2026] [:error] [pid 46124:tid 46180] [client 20.151.141.24:54578] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfanew.php"] [unique_id "abxPOkzMrlLOY6zyCjKrrgAAAEA"]
[Fri Mar 20 04:50:10.534015 2026] [:error] [pid 58126:tid 58183] [client 45.130.203.134:35749] [client 45.130.203.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "abxhgqKAmdXQSS0Y5KBJ6wAAAEs"]
[Fri Mar 20 04:50:11.252754 2026] [:error] [pid 58126:tid 58195] [client 45.130.203.162:33755] [client 45.130.203.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "abxhg6KAmdXQSS0Y5KBJ7QAAAFc"]
[Fri Mar 20 04:57:00.483710 2026] [:error] [pid 58127:tid 58201] [client 20.151.141.24:44459] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxjHLQ_HbYy8C6I_EHkcwAAAII"]
[Fri Mar 20 04:57:02.376618 2026] [:error] [pid 58127:tid 58205] [client 20.151.141.24:44431] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxjHrQ_HbYy8C6I_EHkegAAAIY"]
[Fri Mar 20 04:57:07.259973 2026] [:error] [pid 58126:tid 58176] [client 20.151.141.24:44298] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxjI6KAmdXQSS0Y5KBNUQAAAEQ"]
[Fri Mar 20 04:57:09.804659 2026] [:error] [pid 58127:tid 58217] [client 20.151.141.24:44467] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "abxjJbQ_HbYy8C6I_EHklQAAAJI"]
[Fri Mar 20 06:17:41.547471 2026] [:error] [pid 55301:tid 55395] [client 43.153.76.247:50664] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "abx2BcKP1x4sgmjd3xRNEwAAApM"]
[Fri Mar 20 06:21:19.459186 2026] [:error] [pid 55301:tid 55369] [client 20.151.141.24:57436] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri Mar 20 06:21:19.745250 2026] [:error] [pid 55301:tid 55374] [client 20.151.141.24:57436] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php
[Fri Mar 20 06:21:19.990193 2026] [:error] [pid 55301:tid 55365] [client 20.151.141.24:57436] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri Mar 20 06:21:20.266812 2026] [:error] [pid 55301:tid 55381] [client 20.151.141.24:57436] File does not exist: /usr/local/apache/htdocs/suspended-page/baxa1.php
[Fri Mar 20 06:21:20.476861 2026] [:error] [pid 55301:tid 55403] [client 20.151.141.24:57436] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "abx24MKP1x4sgmjd3xROpwAAApc"]
[Fri Mar 20 06:21:22.236391 2026] [:error] [pid 55301:tid 55366] [client 20.151.141.24:54812] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "abx24sKP1x4sgmjd3xROrQAAAoQ"]
[Fri Mar 20 06:21:23.802798 2026] [:error] [pid 58126:tid 58184] [client 20.151.141.24:54795] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "abx246KAmdXQSS0Y5KBjOwAAAEw"]
[Fri Mar 20 06:21:27.957374 2026] [:error] [pid 55452:tid 55490] [client 20.151.141.24:54845] [client 20.151.141.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "abx254lFvOIliSP0R2BHsAAAA4c"]
[Fri Mar 20 09:22:37.709489 2026] [:error] [pid 55299:tid 55308] [client 43.135.142.7:40250] [client 43.135.142.7] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abyhXfoGhbNgkNIkZwnCDwAAAgM"]
[Fri Mar 20 10:47:54.919530 2026] [:error] [pid 51714:tid 51731] [client 172.58.212.135:45304] [client 172.58.212.135] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.58.212.135, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aby1WjWI82pxvQ0gkss6PAAAAI8"]
[Fri Mar 20 10:47:54.923995 2026] [:error] [pid 51714:tid 51731] [client 172.58.212.135:45304] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 11:01:05.800582 2026] [:error] [pid 51714:tid 51735] [client 49.7.227.204:35368] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aby4cTWI82pxvQ0gkstHiQAAAJM"]
[Fri Mar 20 11:22:55.486007 2026] [:error] [pid 49082:tid 49153] [client 43.165.65.180:50340] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aby9j6pllYJI1LUIdL9YAQAAAUs"]
[Fri Mar 20 11:27:32.718583 2026] [:error] [pid 51714:tid 51722] [client 99.237.185.4:56380] [client 99.237.185.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 99.237.185.4, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aby-pDWI82pxvQ0gkstihAAAAIY"]
[Fri Mar 20 11:27:32.728828 2026] [:error] [pid 51714:tid 51722] [client 99.237.185.4:56380] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 15:32:40.970025 2026] [:error] [pid 49080:tid 49091] [client 43.166.136.202:47346] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "abz4GIk5CHi4V0A3ttiLBgAAAEU"]
[Fri Mar 20 16:52:42.008558 2026] [:error] [pid 49080:tid 49109] [client 209.87.169.23:56149] [client 209.87.169.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 209.87.169.23, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ab0K2ok5CHi4V0A3ttiwuAAAAFc"]
[Fri Mar 20 16:52:42.014838 2026] [:error] [pid 49080:tid 49109] [client 209.87.169.23:56149] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 20 17:03:35.137548 2026] [:error] [pid 49080:tid 49095] [client 106.215.151.117:14123] [client 106.215.151.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.151.117, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab0NZ4k5CHi4V0A3tti3kgAAAEk"]
[Fri Mar 20 17:03:35.142100 2026] [:error] [pid 49080:tid 49095] [client 106.215.151.117:14123] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 17:49:51.383418 2026] [:error] [pid 49081:tid 49124] [client 49.51.204.74:39090] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ab0YPxo1LBAUhfhYPR1ENwAAAQk"]
[Fri Mar 20 20:13:35.013249 2026] [:error] [pid 38219:tid 38236] [client 216.24.212.22:33377] [client 216.24.212.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.22, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ab0573LdNs2F_zXG7H_7rAAAAYY"]
[Fri Mar 20 20:13:35.019038 2026] [:error] [pid 38219:tid 38236] [client 216.24.212.22:33377] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 20 22:14:28.104210 2026] [:error] [pid 38378:tid 38386] [client 41.59.161.126:24119] [client 41.59.161.126] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.59.161.126, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab1WRFKb3npPsu9Iib2FwgAAAgQ"]
[Fri Mar 20 22:14:28.109171 2026] [:error] [pid 38378:tid 38386] [client 41.59.161.126:24119] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 05:23:26.807309 2026] [:error] [pid 1490:tid 1554] [client 45.190.158.64:9098] [client 45.190.158.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.190.158.64, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab26zmSWhIPTatyxDeBzowAAAFM"]
[Sat Mar 21 05:23:26.813664 2026] [:error] [pid 1490:tid 1554] [client 45.190.158.64:9098] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 08:22:53.516034 2026] [:error] [pid 1601:tid 1622] [client 114.96.103.33:56781] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ab3k3adDBYVcyITq-IFkwgAAANE"]
[Sat Mar 21 14:38:13.823764 2026] [:error] [pid 43052:tid 43063] [client 115.244.164.14:64385] [client 115.244.164.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 115.244.164.14, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab481V5fjm-AiInC1hKG0AAAA4k"]
[Sat Mar 21 14:38:13.829146 2026] [:error] [pid 43052:tid 43063] [client 115.244.164.14:64385] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 15:33:17.393016 2026] [:error] [pid 33456:tid 33468] [client 110.166.71.39:36272] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ab5JvQ-0Ziq_OzjHFfUYeAAAAYo"]
[Sat Mar 21 16:28:48.206193 2026] [:error] [pid 1490:tid 1546] [client 43.164.197.177:35980] [client 43.164.197.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ab5WwGSWhIPTatyxDeAfcAAAAEs"]
[Sat Mar 21 20:38:17.271142 2026] [:error] [pid 1489:tid 1514] [client 2.51.25.49:22232] [client 2.51.25.49] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 2.51.25.49, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab6ROVRvnvBO_DG9kxsJfQAAAAo"]
[Sat Mar 21 20:38:17.277803 2026] [:error] [pid 1489:tid 1514] [client 2.51.25.49:22232] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 22 01:50:17.902900 2026] [:error] [pid 40781:tid 41007] [client 43.157.82.252:50864] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ab7aWTJQuCgg1YvEGBLpWgAAAEE"]
[Sun Mar 22 05:04:05.699003 2026] [:error] [pid 51362:tid 51423] [client 43.157.52.37:55444] [client 43.157.52.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ab8HxcOwPm3DXzTDjUehOgAAAFY"]
[Sun Mar 22 05:45:22.002495 2026] [:error] [pid 51362:tid 51413] [client 122.51.236.174:36412] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ab8RccOwPm3DXzTDjUeukwAAAEw"]
[Sun Mar 22 10:09:02.130145 2026] [:error] [pid 51468:tid 51482] [client 119.28.140.106:40328] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ab9PPk2TppSvA8W5CBQI3gAAAMY"]
[Sun Mar 22 10:50:47.174725 2026] [:error] [pid 51468:tid 51498] [client 185.198.240.36:30361] [client 185.198.240.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.36, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ab9ZB02TppSvA8W5CBQcWgAAANY"]
[Sun Mar 22 10:50:47.179430 2026] [:error] [pid 51468:tid 51498] [client 185.198.240.36:30361] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 22 12:33:05.662326 2026] [:error] [pid 51363:tid 51454] [client 170.106.180.153:43942] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ab9xAVwa9x6OCTRkhl3Q-QAAAJg"]
[Sun Mar 22 17:20:05.159878 2026] [:error] [pid 51468:tid 51495] [client 103.72.2.9:10563] [client 103.72.2.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.72.2.9, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab-0RU2TppSvA8W5CBQQvQAAANM"]
[Sun Mar 22 17:20:05.164918 2026] [:error] [pid 51468:tid 51495] [client 103.72.2.9:10563] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 22 19:36:11.205249 2026] [:error] [pid 51363:tid 51440] [client 91.215.144.86:60015] [client 91.215.144.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.215.144.86, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ab_UK1wa9x6OCTRkhl2dkQAAAIs"]
[Sun Mar 22 19:36:11.210306 2026] [:error] [pid 51363:tid 51440] [client 91.215.144.86:60015] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 22 20:55:18.092709 2026] [:error] [pid 51362:tid 51400] [client 52.139.34.203:29244] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Mar 22 20:55:18.560895 2026] [:error] [pid 51362:tid 51409] [client 52.139.34.203:29244] [client 52.139.34.203] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.139.34.203, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_mtsOwPm3DXzTDjUfNSwAAAEg"]
[Sun Mar 22 20:55:18.871645 2026] [:error] [pid 51362:tid 51420] [client 52.139.34.203:29244] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sun Mar 22 20:55:19.743684 2026] [:error] [pid 51362:tid 51416] [client 52.139.34.203:29244] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sun Mar 22 20:55:20.494544 2026] [:error] [pid 51362:tid 51417] [client 52.139.34.203:29244] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sun Mar 22 20:55:20.706767 2026] [:error] [pid 51362:tid 51412] [client 52.139.34.203:29244] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_muMOwPm3DXzTDjUfNWQAAAEs"]
[Sun Mar 22 20:55:23.866460 2026] [:error] [pid 40039:tid 40047] [client 52.139.34.203:29114] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_mux3aDgUJfBYishm-iQAAAQY"]
[Sun Mar 22 20:55:25.217103 2026] [:error] [pid 30166:tid 30190] [client 52.139.34.203:29095] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_mvbm4_26jKMD0zy0CsAAAAU8"]
[Sun Mar 22 20:55:27.042956 2026] [:error] [pid 51361:tid 51376] [client 52.139.34.203:29101] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ab_mvxXYUsdvKC9YWpXwcAAAAAU"]
[Mon Mar 23 00:19:44.685440 2026] [:error] [pid 30166:tid 30189] [client 43.155.129.131:33540] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acAWoLm4_26jKMD0zy1LoAAAAU4"]
[Mon Mar 23 03:11:09.585659 2026] [:error] [pid 27776:tid 27853] [client 121.229.185.160:34974] [client 121.229.185.160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acA-zY3Eaq7IZ5L-4XV8fgAAAQc"]
[Mon Mar 23 04:21:05.981281 2026] [:error] [pid 23539:tid 23559] [client 170.106.179.68:57550] [client 170.106.179.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acBPMX7Dh3qWGSpIAZUf-wAAAMs"]
[Mon Mar 23 06:03:02.946995 2026] [:error] [pid 57265:tid 57276] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Mar 23 06:03:03.156108 2026] [:error] [pid 57265:tid 57273] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Mar 23 06:03:03.605173 2026] [:error] [pid 57265:tid 57278] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Mon Mar 23 06:03:03.814071 2026] [:error] [pid 57265:tid 57272] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Mon Mar 23 06:03:04.026027 2026] [:error] [pid 57265:tid 57279] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 23 06:03:04.267159 2026] [:error] [pid 57265:tid 57267] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Mar 23 06:03:04.475159 2026] [:error] [pid 57265:tid 57280] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Mon Mar 23 06:03:04.891842 2026] [:error] [pid 57265:tid 57271] [client 20.104.224.172:64745] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 23 06:03:05.096835 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:64745] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "acBnGWNLjPJJkhuqCsi32QAAAQ8"]
[Mon Mar 23 06:03:05.523033 2026] [:error] [pid 14573:tid 14583] [client 20.104.224.172:64750] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "acBnGe-oSmHn3q4_J1G2QAAAAUg"]
[Mon Mar 23 06:03:05.945992 2026] [:error] [pid 14573:tid 14579] [client 20.104.224.172:64747] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "acBnGe-oSmHn3q4_J1G2RQAAAUQ"]
[Mon Mar 23 06:03:06.401718 2026] [:error] [pid 23440:tid 23491] [client 20.104.224.172:64766] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "acBnGj49_8n8h_ttcUrQGwAAAE8"]
[Mon Mar 23 06:03:06.828303 2026] [:error] [pid 23439:tid 23454] [client 20.104.224.172:63560] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "acBnGqZv8XIzUKdgaMdAAwAAAAU"]
[Mon Mar 23 06:03:07.275515 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:64759] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "acBnG--oSmHn3q4_J1G2TgAAAUw"]
[Mon Mar 23 06:03:07.802645 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:64116] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "acBnG--oSmHn3q4_J1G2UwAAAU4"]
[Mon Mar 23 06:03:08.248035 2026] [:error] [pid 14573:tid 14578] [client 20.104.224.172:65325] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "acBnHO-oSmHn3q4_J1G2VQAAAUM"]
[Mon Mar 23 06:03:08.881172 2026] [:error] [pid 14573:tid 14582] [client 20.104.224.172:65360] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "acBnHO-oSmHn3q4_J1G2WAAAAUc"]
[Mon Mar 23 06:03:09.296446 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:63563] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "acBnHe-oSmHn3q4_J1G2WgAAAUo"]
[Mon Mar 23 06:03:09.809969 2026] [:error] [pid 23440:tid 23479] [client 20.104.224.172:65300] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "acBnHT49_8n8h_ttcUrQHwAAAEM"]
[Mon Mar 23 06:03:10.258189 2026] [:error] [pid 23539:tid 23561] [client 20.104.224.172:64017] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "acBnHn7Dh3qWGSpIAZVQ6gAAAM0"]
[Mon Mar 23 06:03:10.832285 2026] [:error] [pid 57265:tid 57274] [client 20.104.224.172:64721] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "acBnHmNLjPJJkhuqCsi33AAAAQc"]
[Mon Mar 23 06:03:11.335574 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:65292] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "acBnH--oSmHn3q4_J1G2XQAAAUE"]
[Mon Mar 23 06:03:11.753798 2026] [:error] [pid 14573:tid 14588] [client 20.104.224.172:64078] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "acBnH--oSmHn3q4_J1G2XgAAAU0"]
[Mon Mar 23 06:03:12.477649 2026] [:error] [pid 14573:tid 14575] [client 20.104.224.172:64720] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "acBnIO-oSmHn3q4_J1G2XwAAAUA"]
[Mon Mar 23 06:03:13.492729 2026] [:error] [pid 23539:tid 23554] [client 20.104.224.172:64065] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "acBnIX7Dh3qWGSpIAZVQ7gAAAMY"]
[Mon Mar 23 06:03:13.906650 2026] [:error] [pid 57265:tid 57290] [client 20.104.224.172:64763] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "acBnIWNLjPJJkhuqCsi33gAAARc"]
[Mon Mar 23 06:03:14.341372 2026] [:error] [pid 14573:tid 14577] [client 20.104.224.172:63592] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "acBnIu-oSmHn3q4_J1G2YgAAAUI"]
[Mon Mar 23 06:03:14.756080 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:65353] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "acBnIu-oSmHn3q4_J1G2YwAAAUw"]
[Mon Mar 23 06:03:15.196718 2026] [:error] [pid 14573:tid 14581] [client 20.104.224.172:65320] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "acBnI--oSmHn3q4_J1G2ZgAAAUY"]
[Mon Mar 23 06:03:15.625091 2026] [:error] [pid 14573:tid 14575] [client 20.104.224.172:64725] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "acBnI--oSmHn3q4_J1G2agAAAUA"]
[Mon Mar 23 06:03:16.039682 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:64698] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "acBnJO-oSmHn3q4_J1G2bQAAAUw"]
[Mon Mar 23 06:03:16.458834 2026] [:error] [pid 14573:tid 14583] [client 20.104.224.172:64108] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "acBnJO-oSmHn3q4_J1G2cwAAAUg"]
[Mon Mar 23 06:03:16.940154 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:64673] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "acBnJO-oSmHn3q4_J1G2dgAAAUE"]
[Mon Mar 23 06:03:17.454600 2026] [:error] [pid 23539:tid 23572] [client 20.104.224.172:64014] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "acBnJX7Dh3qWGSpIAZVQ9gAAANg"]
[Mon Mar 23 06:03:17.868562 2026] [:error] [pid 23539:tid 23561] [client 20.104.224.172:64681] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "acBnJX7Dh3qWGSpIAZVQ-AAAAM0"]
[Mon Mar 23 06:03:18.328364 2026] [:error] [pid 23439:tid 23451] [client 20.104.224.172:64013] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "acBnJqZv8XIzUKdgaMdACAAAAAI"]
[Mon Mar 23 06:03:18.822778 2026] [:error] [pid 23439:tid 23462] [client 20.104.224.172:65346] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acBnJqZv8XIzUKdgaMdACgAAAA0"]
[Mon Mar 23 06:03:19.308475 2026] [:error] [pid 14573:tid 14581] [client 20.104.224.172:63583] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acBnJ--oSmHn3q4_J1G2egAAAUY"]
[Mon Mar 23 06:03:19.736617 2026] [:error] [pid 57265:tid 57283] [client 20.104.224.172:65373] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acBnJ2NLjPJJkhuqCsi34QAAARA"]
[Mon Mar 23 06:03:20.151331 2026] [:error] [pid 23441:tid 23516] [client 20.104.224.172:64714] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acBnKBq7S-oOqSXZEr5bxAAAAI0"]
[Mon Mar 23 06:03:20.589462 2026] [:error] [pid 23440:tid 23476] [client 20.104.224.172:64642] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "acBnKD49_8n8h_ttcUrQLAAAAEA"]
[Mon Mar 23 06:03:21.007639 2026] [:error] [pid 14573:tid 14583] [client 20.104.224.172:64088] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "acBnKe-oSmHn3q4_J1G2fQAAAUg"]
[Mon Mar 23 06:03:21.424520 2026] [:error] [pid 14573:tid 14578] [client 20.104.224.172:63555] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "acBnKe-oSmHn3q4_J1G2gAAAAUM"]
[Mon Mar 23 06:03:21.837975 2026] [:error] [pid 23539:tid 23564] [client 20.104.224.172:64001] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "acBnKX7Dh3qWGSpIAZVQ-wAAANA"]
[Mon Mar 23 06:03:22.274993 2026] [:error] [pid 23441:tid 23517] [client 20.104.224.172:64071] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acBnKhq7S-oOqSXZEr5bxgAAAI4"]
[Mon Mar 23 06:03:22.723011 2026] [:error] [pid 23441:tid 23523] [client 20.104.224.172:64120] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acBnKhq7S-oOqSXZEr5byAAAAJQ"]
[Mon Mar 23 06:03:23.140542 2026] [:error] [pid 23441:tid 23506] [client 20.104.224.172:64035] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acBnKxq7S-oOqSXZEr5byQAAAIM"]
[Mon Mar 23 06:03:23.555850 2026] [:error] [pid 14573:tid 14580] [client 20.104.224.172:63556] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acBnK--oSmHn3q4_J1G2igAAAUU"]
[Mon Mar 23 06:03:23.967091 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:65324] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acBnK--oSmHn3q4_J1G2jQAAAVQ"]
[Mon Mar 23 06:03:24.393289 2026] [:error] [pid 23439:tid 23462] [client 20.104.224.172:64064] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acBnLKZv8XIzUKdgaMdAFQAAAA0"]
[Mon Mar 23 06:03:24.818407 2026] [:error] [pid 57265:tid 57288] [client 20.104.224.172:64657] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acBnLGNLjPJJkhuqCsi35gAAARU"]
[Mon Mar 23 06:03:25.231615 2026] [:error] [pid 57265:tid 57274] [client 20.104.224.172:64660] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acBnLWNLjPJJkhuqCsi35wAAAQc"]
[Mon Mar 23 06:03:25.653514 2026] [:error] [pid 23439:tid 23459] [client 20.104.224.172:64069] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "acBnLaZv8XIzUKdgaMdAGQAAAAo"]
[Mon Mar 23 06:03:26.074551 2026] [:error] [pid 23439:tid 23450] [client 20.104.224.172:62933] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "acBnLqZv8XIzUKdgaMdAGgAAAAE"]
[Mon Mar 23 06:03:26.495802 2026] [:error] [pid 23539:tid 23549] [client 20.104.224.172:65281] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "acBnLn7Dh3qWGSpIAZVRAwAAAME"]
[Mon Mar 23 06:03:26.911170 2026] [:error] [pid 14573:tid 14578] [client 20.104.224.172:64671] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "acBnLu-oSmHn3q4_J1G2lAAAAUM"]
[Mon Mar 23 06:03:27.326533 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:64075] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "acBnL--oSmHn3q4_J1G2lwAAAVQ"]
[Mon Mar 23 06:03:27.742131 2026] [:error] [pid 57265:tid 57283] [client 20.104.224.172:65403] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "acBnL2NLjPJJkhuqCsi36gAAARA"]
[Mon Mar 23 06:03:28.161230 2026] [:error] [pid 14573:tid 14582] [client 20.104.224.172:64675] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "acBnMO-oSmHn3q4_J1G2nQAAAUc"]
[Mon Mar 23 06:03:28.577342 2026] [:error] [pid 14573:tid 14588] [client 20.104.224.172:64752] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "acBnMO-oSmHn3q4_J1G2oAAAAU0"]
[Mon Mar 23 06:03:28.993362 2026] [:error] [pid 23440:tid 23482] [client 20.104.224.172:64705] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acBnMD49_8n8h_ttcUrQNAAAAEY"]
[Mon Mar 23 06:03:29.410636 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:64663] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acBnMe-oSmHn3q4_J1G2pgAAAVQ"]
[Mon Mar 23 06:03:29.843604 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:65338] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acBnMe-oSmHn3q4_J1G2qQAAAUw"]
[Mon Mar 23 06:03:30.255357 2026] [:error] [pid 14573:tid 14581] [client 20.104.224.172:62931] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acBnMu-oSmHn3q4_J1G2rQAAAUY"]
[Mon Mar 23 06:03:30.668619 2026] [:error] [pid 14573:tid 14592] [client 20.104.224.172:64732] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnMu-oSmHn3q4_J1G2rgAAAVE"]
[Mon Mar 23 06:03:31.080034 2026] [:error] [pid 23539:tid 23570] [client 20.104.224.172:63580] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnM37Dh3qWGSpIAZVRCQAAANY"]
[Mon Mar 23 06:03:31.494066 2026] [:error] [pid 23441:tid 23504] [client 20.104.224.172:63591] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnMxq7S-oOqSXZEr5bzQAAAIE"]
[Mon Mar 23 06:03:31.933579 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:64121] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnM--oSmHn3q4_J1G2sgAAAUE"]
[Mon Mar 23 06:03:32.359692 2026] [:error] [pid 14573:tid 14584] [client 20.104.224.172:64646] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "acBnNO-oSmHn3q4_J1G2uAAAAUk"]
[Mon Mar 23 06:03:32.778032 2026] [:error] [pid 23539:tid 23550] [client 20.104.224.172:63572] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "acBnNH7Dh3qWGSpIAZVRDAAAAMI"]
[Mon Mar 23 06:03:33.200778 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:64677] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "acBnNe-oSmHn3q4_J1G2vAAAAUw"]
[Mon Mar 23 06:03:33.627108 2026] [:error] [pid 23539:tid 23551] [client 20.104.224.172:64127] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "acBnNX7Dh3qWGSpIAZVREAAAAMM"]
[Mon Mar 23 06:03:34.041086 2026] [:error] [pid 23539:tid 23552] [client 20.104.224.172:64084] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "acBnNn7Dh3qWGSpIAZVREQAAAMQ"]
[Mon Mar 23 06:03:34.460611 2026] [:error] [pid 14573:tid 14597] [client 20.104.224.172:64016] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "acBnNu-oSmHn3q4_J1G2wAAAAVY"]
[Mon Mar 23 06:03:34.882843 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:64015] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "acBnNu-oSmHn3q4_J1G2wgAAAVQ"]
[Mon Mar 23 06:03:35.310173 2026] [:error] [pid 23441:tid 23526] [client 20.104.224.172:62442] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "acBnNxq7S-oOqSXZEr5bzwAAAJc"]
[Mon Mar 23 06:03:35.735988 2026] [:error] [pid 23539:tid 23569] [client 20.104.224.172:64077] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acBnN37Dh3qWGSpIAZVRHQAAANU"]
[Mon Mar 23 06:03:36.160312 2026] [:error] [pid 14573:tid 14594] [client 20.104.224.172:65388] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acBnOO-oSmHn3q4_J1G2ygAAAVM"]
[Mon Mar 23 06:03:36.588319 2026] [:error] [pid 23539:tid 23558] [client 20.104.224.172:63559] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acBnOH7Dh3qWGSpIAZVRHwAAAMo"]
[Mon Mar 23 06:03:37.001280 2026] [:error] [pid 14573:tid 14577] [client 20.104.224.172:64003] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "acBnOe-oSmHn3q4_J1G2zgAAAUI"]
[Mon Mar 23 06:03:37.416183 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:63589] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acBnOe-oSmHn3q4_J1G20gAAAU4"]
[Mon Mar 23 06:03:37.834433 2026] [:error] [pid 23441:tid 23505] [client 20.104.224.172:64648] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acBnORq7S-oOqSXZEr5b0AAAAII"]
[Mon Mar 23 06:03:38.257836 2026] [:error] [pid 23539:tid 23548] [client 20.104.224.172:64027] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acBnOn7Dh3qWGSpIAZVRJgAAAMA"]
[Mon Mar 23 06:03:38.679345 2026] [:error] [pid 23539:tid 23557] [client 20.104.224.172:64723] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "acBnOn7Dh3qWGSpIAZVRJwAAAMk"]
[Mon Mar 23 06:03:39.097533 2026] [:error] [pid 23439:tid 23455] [client 20.104.224.172:65407] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "acBnO6Zv8XIzUKdgaMdAHQAAAAY"]
[Mon Mar 23 06:03:39.522602 2026] [:error] [pid 23440:tid 23490] [client 20.104.224.172:64049] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "acBnOz49_8n8h_ttcUrQNQAAAE4"]
[Mon Mar 23 06:03:39.935639 2026] [:error] [pid 57265:tid 57284] [client 20.104.224.172:65380] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "acBnO2NLjPJJkhuqCsi38AAAARE"]
[Mon Mar 23 06:03:40.352009 2026] [:error] [pid 23539:tid 23570] [client 20.104.224.172:63579] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "acBnPH7Dh3qWGSpIAZVRLQAAANY"]
[Mon Mar 23 06:03:40.765133 2026] [:error] [pid 14573:tid 14590] [client 20.104.224.172:65326] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acBnPO-oSmHn3q4_J1G25AAAAU8"]
[Mon Mar 23 06:03:41.183314 2026] [:error] [pid 23440:tid 23488] [client 20.104.224.172:64040] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acBnPT49_8n8h_ttcUrQNgAAAEw"]
[Mon Mar 23 06:03:41.604096 2026] [:error] [pid 23539:tid 23561] [client 20.104.224.172:65361] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acBnPX7Dh3qWGSpIAZVRMQAAAM0"]
[Mon Mar 23 06:03:42.022607 2026] [:error] [pid 23441:tid 23520] [client 20.104.224.172:64644] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acBnPhq7S-oOqSXZEr5b0wAAAJE"]
[Mon Mar 23 06:03:42.443107 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:63537] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "acBnPu-oSmHn3q4_J1G27gAAAUo"]
[Mon Mar 23 06:03:42.876901 2026] [:error] [pid 57265:tid 57291] [client 20.104.224.172:64733] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "acBnPmNLjPJJkhuqCsi3-wAAARg"]
[Mon Mar 23 06:03:43.287920 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:64688] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "acBnP2NLjPJJkhuqCsi3_AAAAQ8"]
[Mon Mar 23 06:03:43.710593 2026] [:error] [pid 23539:tid 23559] [client 20.104.224.172:62436] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "acBnP37Dh3qWGSpIAZVRNAAAAMs"]
[Mon Mar 23 06:03:44.129487 2026] [:error] [pid 57265:tid 57268] [client 20.104.224.172:64094] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acBnQGNLjPJJkhuqCsi4AQAAAQE"]
[Mon Mar 23 06:03:44.546798 2026] [:error] [pid 23441:tid 23523] [client 20.104.224.172:64117] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acBnQBq7S-oOqSXZEr5b1QAAAJQ"]
[Mon Mar 23 06:03:44.959149 2026] [:error] [pid 23440:tid 23494] [client 20.104.224.172:65312] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acBnQD49_8n8h_ttcUrQOQAAAFI"]
[Mon Mar 23 06:03:45.371139 2026] [:error] [pid 23441:tid 23518] [client 20.104.224.172:64022] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acBnQRq7S-oOqSXZEr5b1gAAAI8"]
[Mon Mar 23 06:03:45.796934 2026] [:error] [pid 57265:tid 57287] [client 20.104.224.172:64083] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnQWNLjPJJkhuqCsi4BQAAARQ"]
[Mon Mar 23 06:03:46.212694 2026] [:error] [pid 23439:tid 23469] [client 20.104.224.172:65399] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnQqZv8XIzUKdgaMdAIAAAABQ"]
[Mon Mar 23 06:03:46.629132 2026] [:error] [pid 23441:tid 23503] [client 20.104.224.172:64692] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnQhq7S-oOqSXZEr5b2QAAAIA"]
[Mon Mar 23 06:03:47.042792 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:63568] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnQ--oSmHn3q4_J1G3CQAAAUE"]
[Mon Mar 23 06:03:47.462494 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:64767] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "acBnQ--oSmHn3q4_J1G3DAAAAU4"]
[Mon Mar 23 06:03:47.893897 2026] [:error] [pid 57265:tid 57286] [client 20.104.224.172:65382] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "acBnQ2NLjPJJkhuqCsi4CQAAARM"]
[Mon Mar 23 06:03:48.319037 2026] [:error] [pid 23440:tid 23477] [client 20.104.224.172:65365] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "acBnRD49_8n8h_ttcUrQPQAAAEE"]
[Mon Mar 23 06:03:48.738334 2026] [:error] [pid 23439:tid 23461] [client 20.104.224.172:64054] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "acBnRKZv8XIzUKdgaMdAIQAAAAw"]
[Mon Mar 23 06:03:49.155921 2026] [:error] [pid 23539:tid 23564] [client 20.104.224.172:65345] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "acBnRX7Dh3qWGSpIAZVROwAAANA"]
[Mon Mar 23 06:03:49.567460 2026] [:error] [pid 23539:tid 23548] [client 20.104.224.172:64035] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "acBnRX7Dh3qWGSpIAZVRPAAAAMA"]
[Mon Mar 23 06:03:49.979929 2026] [:error] [pid 23439:tid 23451] [client 20.104.224.172:64046] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "acBnRaZv8XIzUKdgaMdAIwAAAAI"]
[Mon Mar 23 06:03:50.392931 2026] [:error] [pid 57265:tid 57285] [client 20.104.224.172:65401] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "acBnRmNLjPJJkhuqCsi4DgAAARI"]
[Mon Mar 23 06:03:50.808816 2026] [:error] [pid 57265:tid 57270] [client 20.104.224.172:64762] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "acBnRmNLjPJJkhuqCsi4EAAAAQM"]
[Mon Mar 23 06:03:51.223207 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:64002] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "acBnR--oSmHn3q4_J1G3EwAAAUw"]
[Mon Mar 23 06:03:51.637249 2026] [:error] [pid 23440:tid 23487] [client 20.104.224.172:64045] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "acBnRz49_8n8h_ttcUrQQAAAAEs"]
[Mon Mar 23 06:03:52.046947 2026] [:error] [pid 23440:tid 23488] [client 20.104.224.172:65386] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "acBnSD49_8n8h_ttcUrQQgAAAEw"]
[Mon Mar 23 06:03:52.458781 2026] [:error] [pid 23440:tid 23500] [client 20.104.224.172:63575] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnSD49_8n8h_ttcUrQRQAAAFg"]
[Mon Mar 23 06:03:52.881968 2026] [:error] [pid 14573:tid 14588] [client 20.104.224.172:65363] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnSO-oSmHn3q4_J1G3FgAAAU0"]
[Mon Mar 23 06:03:53.307607 2026] [:error] [pid 23539:tid 23552] [client 20.104.224.172:64683] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnSX7Dh3qWGSpIAZVRQAAAAMQ"]
[Mon Mar 23 06:03:53.726046 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:64126] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnSe-oSmHn3q4_J1G3GAAAAU4"]
[Mon Mar 23 06:03:54.149158 2026] [:error] [pid 14573:tid 14582] [client 20.104.224.172:64097] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acBnSu-oSmHn3q4_J1G3GwAAAUc"]
[Mon Mar 23 06:03:54.565981 2026] [:error] [pid 14573:tid 14580] [client 20.104.224.172:64006] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acBnSu-oSmHn3q4_J1G3HAAAAUU"]
[Mon Mar 23 06:03:54.976077 2026] [:error] [pid 14573:tid 14579] [client 20.104.224.172:65284] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acBnSu-oSmHn3q4_J1G3HwAAAUQ"]
[Mon Mar 23 06:03:55.391015 2026] [:error] [pid 23539:tid 23565] [client 20.104.224.172:64051] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acBnS37Dh3qWGSpIAZVRQwAAANE"]
[Mon Mar 23 06:03:55.812341 2026] [:error] [pid 23441:tid 23506] [client 20.104.224.172:62346] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "acBnSxq7S-oOqSXZEr5b4QAAAIM"]
[Mon Mar 23 06:03:56.227081 2026] [:error] [pid 23441:tid 23511] [client 20.104.224.172:64707] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "acBnTBq7S-oOqSXZEr5b4gAAAIg"]
[Mon Mar 23 06:03:56.651089 2026] [:error] [pid 23440:tid 23491] [client 20.104.224.172:64018] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "acBnTD49_8n8h_ttcUrQSAAAAE8"]
[Mon Mar 23 06:03:57.068900 2026] [:error] [pid 23539:tid 23571] [client 20.104.224.172:62385] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "acBnTX7Dh3qWGSpIAZVRRQAAANc"]
[Mon Mar 23 06:03:57.494516 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:64710] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnTe-oSmHn3q4_J1G3JAAAAUo"]
[Mon Mar 23 06:03:57.906330 2026] [:error] [pid 23539:tid 23564] [client 20.104.224.172:64760] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnTX7Dh3qWGSpIAZVRRgAAANA"]
[Mon Mar 23 06:03:58.318008 2026] [:error] [pid 14573:tid 14591] [client 20.104.224.172:64645] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnTu-oSmHn3q4_J1G3JgAAAVA"]
[Mon Mar 23 06:03:58.751902 2026] [:error] [pid 23539:tid 23548] [client 20.104.224.172:62851] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "acBnTn7Dh3qWGSpIAZVRSAAAAMA"]
[Mon Mar 23 06:03:59.169824 2026] [:error] [pid 23539:tid 23549] [client 20.104.224.172:64060] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acBnT37Dh3qWGSpIAZVRSgAAAME"]
[Mon Mar 23 06:03:59.594324 2026] [:error] [pid 23539:tid 23551] [client 20.104.224.172:64087] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acBnT37Dh3qWGSpIAZVRTAAAAMM"]
[Mon Mar 23 06:04:00.007635 2026] [:error] [pid 23539:tid 23570] [client 20.104.224.172:64690] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acBnUH7Dh3qWGSpIAZVRTgAAANY"]
[Mon Mar 23 06:04:00.421924 2026] [:error] [pid 23441:tid 23504] [client 20.104.224.172:64649] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acBnUBq7S-oOqSXZEr5b5gAAAIE"]
[Mon Mar 23 06:04:00.843648 2026] [:error] [pid 23539:tid 23568] [client 20.104.224.172:64063] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acBnUH7Dh3qWGSpIAZVRUQAAANQ"]
[Mon Mar 23 06:04:01.258059 2026] [:error] [pid 23441:tid 23525] [client 20.104.224.172:64089] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acBnURq7S-oOqSXZEr5b6QAAAJY"]
[Mon Mar 23 06:04:01.680042 2026] [:error] [pid 14573:tid 14579] [client 20.104.224.172:65321] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acBnUe-oSmHn3q4_J1G3KAAAAUQ"]
[Mon Mar 23 06:04:02.102463 2026] [:error] [pid 14573:tid 14596] [client 20.104.224.172:65283] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "acBnUu-oSmHn3q4_J1G3KgAAAVU"]
[Mon Mar 23 06:04:02.520862 2026] [:error] [pid 23441:tid 23513] [client 20.104.224.172:63513] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acBnUhq7S-oOqSXZEr5b6gAAAIo"]
[Mon Mar 23 06:04:02.933768 2026] [:error] [pid 23539:tid 23554] [client 20.104.224.172:64111] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acBnUn7Dh3qWGSpIAZVRVQAAAMY"]
[Mon Mar 23 06:04:03.347659 2026] [:error] [pid 14573:tid 14597] [client 20.104.224.172:65318] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acBnU--oSmHn3q4_J1G3LAAAAVY"]
[Mon Mar 23 06:04:03.770999 2026] [:error] [pid 23441:tid 23516] [client 20.104.224.172:62953] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acBnUxq7S-oOqSXZEr5b7AAAAI0"]
[Mon Mar 23 06:04:04.399792 2026] [:error] [pid 23440:tid 23487] [client 20.104.224.172:63504] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Mar 23 06:04:04.609672 2026] [:error] [pid 23440:tid 23498] [client 20.104.224.172:63504] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Mar 23 06:04:04.820050 2026] [:error] [pid 23440:tid 23490] [client 20.104.224.172:63504] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Mar 23 06:04:05.029985 2026] [:error] [pid 23440:tid 23494] [client 20.104.224.172:63504] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 23 06:04:05.241133 2026] [:error] [pid 23440:tid 23489] [client 20.104.224.172:63504] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Mar 23 06:04:05.453335 2026] [:error] [pid 23440:tid 23483] [client 20.104.224.172:63504] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Mar 23 06:04:06.506221 2026] [:error] [pid 23440:tid 23484] [client 20.104.224.172:63504] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "acBnVj49_8n8h_ttcUrQWwAAAEg"]
[Mon Mar 23 06:04:06.918355 2026] [:error] [pid 14573:tid 14583] [client 20.104.224.172:65369] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "acBnVu-oSmHn3q4_J1G3MgAAAUg"]
[Mon Mar 23 06:04:07.331047 2026] [:error] [pid 14573:tid 14596] [client 20.104.224.172:64754] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "acBnV--oSmHn3q4_J1G3NAAAAVU"]
[Mon Mar 23 06:04:07.743642 2026] [:error] [pid 57265:tid 57274] [client 20.104.224.172:63497] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "acBnV2NLjPJJkhuqCsi4IAAAAQc"]
[Mon Mar 23 06:04:08.156385 2026] [:error] [pid 23539:tid 23572] [client 20.104.224.172:65328] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "acBnWH7Dh3qWGSpIAZVRVwAAANg"]
[Mon Mar 23 06:04:08.569340 2026] [:error] [pid 14573:tid 14590] [client 20.104.224.172:65336] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "acBnWO-oSmHn3q4_J1G3NgAAAU8"]
[Mon Mar 23 06:04:08.983936 2026] [:error] [pid 14573:tid 14588] [client 20.104.224.172:64106] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "acBnWO-oSmHn3q4_J1G3NwAAAU0"]
[Mon Mar 23 06:04:09.401906 2026] [:error] [pid 14573:tid 14578] [client 20.104.224.172:64070] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "acBnWe-oSmHn3q4_J1G3OgAAAUM"]
[Mon Mar 23 06:04:09.818711 2026] [:error] [pid 57265:tid 57278] [client 20.104.224.172:65313] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acBnWWNLjPJJkhuqCsi4IwAAAQs"]
[Mon Mar 23 06:04:10.228408 2026] [:error] [pid 23539:tid 23570] [client 20.104.224.172:65395] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acBnWn7Dh3qWGSpIAZVRWgAAANY"]
[Mon Mar 23 06:04:10.640279 2026] [:error] [pid 14573:tid 14577] [client 20.104.224.172:63552] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acBnWu-oSmHn3q4_J1G3PAAAAUI"]
[Mon Mar 23 06:04:11.056359 2026] [:error] [pid 23539:tid 23566] [client 20.104.224.172:64728] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "acBnW37Dh3qWGSpIAZVRWwAAANI"]
[Mon Mar 23 06:04:11.482061 2026] [:error] [pid 23439:tid 23465] [client 20.104.224.172:65406] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnW6Zv8XIzUKdgaMdAKQAAABA"]
[Mon Mar 23 06:04:11.899535 2026] [:error] [pid 23439:tid 23452] [client 20.104.224.172:64730] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnW6Zv8XIzUKdgaMdAKgAAAAM"]
[Mon Mar 23 06:04:12.323564 2026] [:error] [pid 57265:tid 57279] [client 20.104.224.172:63517] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnXGNLjPJJkhuqCsi4JgAAAQw"]
[Mon Mar 23 06:04:12.741516 2026] [:error] [pid 23439:tid 23464] [client 20.104.224.172:63596] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "acBnXKZv8XIzUKdgaMdALQAAAA8"]
[Mon Mar 23 06:04:13.157121 2026] [:error] [pid 23440:tid 23488] [client 20.104.224.172:64652] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "acBnXT49_8n8h_ttcUrQXwAAAEw"]
[Mon Mar 23 06:04:13.574084 2026] [:error] [pid 23441:tid 23523] [client 20.104.224.172:64107] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "acBnXRq7S-oOqSXZEr5b8AAAAJQ"]
[Mon Mar 23 06:04:13.991340 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:62426] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "acBnXWNLjPJJkhuqCsi4JwAAAQ8"]
[Mon Mar 23 06:04:14.422386 2026] [:error] [pid 23439:tid 23457] [client 20.104.224.172:64654] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "acBnXqZv8XIzUKdgaMdAMQAAAAg"]
[Mon Mar 23 06:04:14.838432 2026] [:error] [pid 14573:tid 14590] [client 20.104.224.172:64061] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acBnXu-oSmHn3q4_J1G3QwAAAU8"]
[Mon Mar 23 06:04:15.254944 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:65349] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acBnX--oSmHn3q4_J1G3RgAAAU4"]
[Mon Mar 23 06:04:15.670792 2026] [:error] [pid 23440:tid 23489] [client 20.104.224.172:64748] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acBnXz49_8n8h_ttcUrQYQAAAE0"]
[Mon Mar 23 06:04:16.084730 2026] [:error] [pid 57265:tid 57267] [client 20.104.224.172:64696] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acBnYGNLjPJJkhuqCsi4KgAAAQA"]
[Mon Mar 23 06:04:16.496813 2026] [:error] [pid 23440:tid 23500] [client 20.104.224.172:64669] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acBnYD49_8n8h_ttcUrQYgAAAFg"]
[Mon Mar 23 06:04:16.907912 2026] [:error] [pid 57265:tid 57290] [client 20.104.224.172:64086] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acBnYGNLjPJJkhuqCsi4LgAAARc"]
[Mon Mar 23 06:04:17.321019 2026] [:error] [pid 23441:tid 23515] [client 20.104.224.172:64048] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acBnYRq7S-oOqSXZEr5b8QAAAIw"]
[Mon Mar 23 06:04:17.749245 2026] [:error] [pid 14573:tid 14575] [client 20.104.224.172:61672] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acBnYe-oSmHn3q4_J1G3SQAAAUA"]
[Mon Mar 23 06:04:18.163742 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:64719] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acBnYu-oSmHn3q4_J1G3SwAAAUE"]
[Mon Mar 23 06:04:18.578511 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:63610] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acBnYmNLjPJJkhuqCsi4MwAAAQ8"]
[Mon Mar 23 06:04:18.991170 2026] [:error] [pid 23539:tid 23554] [client 20.104.224.172:62424] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acBnYn7Dh3qWGSpIAZVRXgAAAMY"]
[Mon Mar 23 06:04:19.406624 2026] [:error] [pid 23539:tid 23555] [client 20.104.224.172:65306] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acBnY37Dh3qWGSpIAZVRXwAAAMc"]
[Mon Mar 23 06:04:19.821139 2026] [:error] [pid 57265:tid 57275] [client 20.104.224.172:64643] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "acBnY2NLjPJJkhuqCsi4NQAAAQg"]
[Mon Mar 23 06:04:20.236501 2026] [:error] [pid 23441:tid 23521] [client 20.104.224.172:64091] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "acBnZBq7S-oOqSXZEr5b9wAAAJI"]
[Mon Mar 23 06:04:20.652901 2026] [:error] [pid 57265:tid 57267] [client 20.104.224.172:61582] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "acBnZGNLjPJJkhuqCsi4NgAAAQA"]
[Mon Mar 23 06:04:21.063920 2026] [:error] [pid 57265:tid 57268] [client 20.104.224.172:64044] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "acBnZWNLjPJJkhuqCsi4NwAAAQE"]
[Mon Mar 23 06:04:21.478226 2026] [:error] [pid 14573:tid 14590] [client 20.104.224.172:64104] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acBnZe-oSmHn3q4_J1G3TgAAAU8"]
[Mon Mar 23 06:04:21.891548 2026] [:error] [pid 57265:tid 57272] [client 20.104.224.172:62891] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acBnZWNLjPJJkhuqCsi4OQAAAQU"]
[Mon Mar 23 06:04:22.305071 2026] [:error] [pid 57265:tid 57276] [client 20.104.224.172:64092] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acBnZmNLjPJJkhuqCsi4OgAAAQk"]
[Mon Mar 23 06:04:22.717396 2026] [:error] [pid 57265:tid 57289] [client 20.104.224.172:64734] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acBnZmNLjPJJkhuqCsi4OwAAARY"]
[Mon Mar 23 06:04:23.130551 2026] [:error] [pid 57265:tid 57288] [client 20.104.224.172:63495] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "acBnZ2NLjPJJkhuqCsi4PQAAARU"]
[Mon Mar 23 06:04:23.551101 2026] [:error] [pid 23539:tid 23563] [client 20.104.224.172:65299] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "acBnZ37Dh3qWGSpIAZVRZAAAAM8"]
[Mon Mar 23 06:04:23.966918 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:63590] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "acBnZ2NLjPJJkhuqCsi4QAAAAQ8"]
[Mon Mar 23 06:04:24.376854 2026] [:error] [pid 57265:tid 57269] [client 20.104.224.172:62883] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "acBnaGNLjPJJkhuqCsi4QgAAAQI"]
[Mon Mar 23 06:04:24.793793 2026] [:error] [pid 57265:tid 57283] [client 20.104.224.172:64726] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acBnaGNLjPJJkhuqCsi4RAAAARA"]
[Mon Mar 23 06:04:25.205185 2026] [:error] [pid 14573:tid 14583] [client 20.104.224.172:64679] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acBnae-oSmHn3q4_J1G3UgAAAUg"]
[Mon Mar 23 06:04:25.615571 2026] [:error] [pid 23439:tid 23466] [client 20.104.224.172:65323] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acBnaaZv8XIzUKdgaMdAOQAAABE"]
[Mon Mar 23 06:04:26.026395 2026] [:error] [pid 23439:tid 23458] [client 20.104.224.172:64005] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "acBnaqZv8XIzUKdgaMdAOgAAAAk"]
[Mon Mar 23 06:04:26.441063 2026] [:error] [pid 57265:tid 57289] [client 20.104.224.172:65367] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acBnamNLjPJJkhuqCsi4RwAAARY"]
[Mon Mar 23 06:04:26.863193 2026] [:error] [pid 57265:tid 57270] [client 20.104.224.172:63604] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acBnamNLjPJJkhuqCsi4SQAAAQM"]
[Mon Mar 23 06:04:27.273951 2026] [:error] [pid 23439:tid 23454] [client 20.104.224.172:63567] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acBna6Zv8XIzUKdgaMdAPwAAAAU"]
[Mon Mar 23 06:04:27.707112 2026] [:error] [pid 23539:tid 23567] [client 20.104.224.172:64052] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "acBna37Dh3qWGSpIAZVRZwAAANM"]
[Mon Mar 23 06:04:28.120215 2026] [:error] [pid 57265:tid 57287] [client 20.104.224.172:64647] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acBnbGNLjPJJkhuqCsi4TAAAARQ"]
[Mon Mar 23 06:04:28.541421 2026] [:error] [pid 23439:tid 23456] [client 20.104.224.172:64124] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acBnbKZv8XIzUKdgaMdARAAAAAc"]
[Mon Mar 23 06:04:28.952941 2026] [:error] [pid 23539:tid 23548] [client 20.104.224.172:64038] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acBnbH7Dh3qWGSpIAZVRaAAAAMA"]
[Mon Mar 23 06:04:29.366523 2026] [:error] [pid 23539:tid 23556] [client 20.104.224.172:62867] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "acBnbX7Dh3qWGSpIAZVRaQAAAMg"]
[Mon Mar 23 06:04:29.784626 2026] [:error] [pid 23439:tid 23470] [client 20.104.224.172:62425] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acBnbaZv8XIzUKdgaMdARgAAABU"]
[Mon Mar 23 06:04:30.200084 2026] [:error] [pid 23440:tid 23493] [client 20.104.224.172:64109] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acBnbj49_8n8h_ttcUrQagAAAFE"]
[Mon Mar 23 06:04:30.621734 2026] [:error] [pid 23539:tid 23555] [client 20.104.224.172:62918] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acBnbn7Dh3qWGSpIAZVRbQAAAMc"]
[Mon Mar 23 06:04:31.053288 2026] [:error] [pid 23539:tid 23562] [client 20.104.224.172:64059] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acBnb37Dh3qWGSpIAZVRbwAAAM4"]
[Mon Mar 23 06:04:31.466082 2026] [:error] [pid 57265:tid 57283] [client 20.104.224.172:62923] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "acBnb2NLjPJJkhuqCsi4UAAAARA"]
[Mon Mar 23 06:04:31.882269 2026] [:error] [pid 23539:tid 23569] [client 20.104.224.172:64686] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "acBnb37Dh3qWGSpIAZVRcwAAANU"]
[Mon Mar 23 06:04:32.308797 2026] [:error] [pid 23539:tid 23548] [client 20.104.224.172:64031] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "acBncH7Dh3qWGSpIAZVRdQAAAMA"]
[Mon Mar 23 06:04:32.731999 2026] [:error] [pid 57265:tid 57274] [client 20.104.224.172:65289] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "acBncGNLjPJJkhuqCsi4VgAAAQc"]
[Mon Mar 23 06:04:33.144102 2026] [:error] [pid 14573:tid 14579] [client 20.104.224.172:65309] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acBnce-oSmHn3q4_J1G3VwAAAUQ"]
[Mon Mar 23 06:04:33.559365 2026] [:error] [pid 57265:tid 57281] [client 20.104.224.172:64050] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acBncWNLjPJJkhuqCsi4XAAAAQ4"]
[Mon Mar 23 06:04:33.970331 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:62449] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acBncWNLjPJJkhuqCsi4XgAAAQ8"]
[Mon Mar 23 06:04:34.380669 2026] [:error] [pid 14573:tid 14575] [client 20.104.224.172:64030] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acBncu-oSmHn3q4_J1G3XgAAAUA"]
[Mon Mar 23 06:04:34.795111 2026] [:error] [pid 14573:tid 14581] [client 20.104.224.172:65394] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "acBncu-oSmHn3q4_J1G3YAAAAUY"]
[Mon Mar 23 06:04:35.207648 2026] [:error] [pid 14573:tid 14579] [client 20.104.224.172:62949] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acBnc--oSmHn3q4_J1G3YwAAAUQ"]
[Mon Mar 23 06:04:35.628695 2026] [:error] [pid 14573:tid 14577] [client 20.104.224.172:63587] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acBnc--oSmHn3q4_J1G3ZgAAAUI"]
[Mon Mar 23 06:04:36.038864 2026] [:error] [pid 23539:tid 23550] [client 20.104.224.172:64047] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acBndH7Dh3qWGSpIAZVRfAAAAMI"]
[Mon Mar 23 06:04:36.473116 2026] [:error] [pid 23440:tid 23488] [client 20.104.224.172:64703] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acBndD49_8n8h_ttcUrQbAAAAEw"]
[Mon Mar 23 06:04:36.888325 2026] [:error] [pid 23539:tid 23563] [client 20.104.224.172:63603] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acBndH7Dh3qWGSpIAZVRfwAAAM8"]
[Mon Mar 23 06:04:37.300805 2026] [:error] [pid 23539:tid 23556] [client 20.104.224.172:63612] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acBndX7Dh3qWGSpIAZVRgwAAAMg"]
[Mon Mar 23 06:04:37.712514 2026] [:error] [pid 14573:tid 14582] [client 20.104.224.172:65372] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "acBnde-oSmHn3q4_J1G3bQAAAUc"]
[Mon Mar 23 06:04:38.130105 2026] [:error] [pid 23539:tid 23549] [client 20.104.224.172:64021] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acBndn7Dh3qWGSpIAZVRiAAAAME"]
[Mon Mar 23 06:04:38.540251 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:63515] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acBndmNLjPJJkhuqCsi4cgAAAQ8"]
[Mon Mar 23 06:04:38.952888 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:64709] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acBndu-oSmHn3q4_J1G3cgAAAUE"]
[Mon Mar 23 06:04:39.364528 2026] [:error] [pid 23440:tid 23494] [client 20.104.224.172:60942] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acBndz49_8n8h_ttcUrQbQAAAFI"]
[Mon Mar 23 06:04:39.776734 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:64074] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "acBnd--oSmHn3q4_J1G3eAAAAVQ"]
[Mon Mar 23 06:04:40.190040 2026] [:error] [pid 23441:tid 23514] [client 20.104.224.172:65327] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "acBneBq7S-oOqSXZEr5b_AAAAIs"]
[Mon Mar 23 06:04:40.601589 2026] [:error] [pid 23539:tid 23559] [client 20.104.224.172:65333] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "acBneH7Dh3qWGSpIAZVRjgAAAMs"]
[Mon Mar 23 06:04:41.013676 2026] [:error] [pid 57265:tid 57291] [client 20.104.224.172:64691] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "acBneWNLjPJJkhuqCsi4eAAAARg"]
[Mon Mar 23 06:04:41.429672 2026] [:error] [pid 23439:tid 23466] [client 20.104.224.172:61586] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acBneaZv8XIzUKdgaMdATQAAABE"]
[Mon Mar 23 06:04:41.844760 2026] [:error] [pid 23539:tid 23560] [client 20.104.224.172:65288] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acBneX7Dh3qWGSpIAZVRkwAAAMw"]
[Mon Mar 23 06:04:42.254379 2026] [:error] [pid 14573:tid 14584] [client 20.104.224.172:63557] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acBneu-oSmHn3q4_J1G3gQAAAUk"]
[Mon Mar 23 06:04:42.672450 2026] [:error] [pid 14573:tid 14593] [client 20.104.224.172:64011] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "acBneu-oSmHn3q4_J1G3ggAAAVI"]
[Mon Mar 23 06:04:43.088500 2026] [:error] [pid 23439:tid 23458] [client 20.104.224.172:64650] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acBne6Zv8XIzUKdgaMdAVAAAAAk"]
[Mon Mar 23 06:04:43.499205 2026] [:error] [pid 23440:tid 23492] [client 20.104.224.172:64043] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "acBnez49_8n8h_ttcUrQcQAAAFA"]
[Mon Mar 23 06:04:43.911616 2026] [:error] [pid 23440:tid 23491] [client 20.104.224.172:64039] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "acBnez49_8n8h_ttcUrQcwAAAE8"]
[Mon Mar 23 06:04:44.323483 2026] [:error] [pid 23441:tid 23520] [client 20.104.224.172:65294] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "acBnfBq7S-oOqSXZEr5cCAAAAJE"]
[Mon Mar 23 06:04:44.738672 2026] [:error] [pid 23441:tid 23517] [client 20.104.224.172:64042] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "acBnfBq7S-oOqSXZEr5cDAAAAI4"]
[Mon Mar 23 06:04:45.162283 2026] [:error] [pid 23440:tid 23481] [client 20.104.224.172:64055] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "acBnfT49_8n8h_ttcUrQdQAAAEU"]
[Mon Mar 23 06:04:45.581422 2026] [:error] [pid 57265:tid 57280] [client 20.104.224.172:63519] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "acBnfWNLjPJJkhuqCsi4fgAAAQ0"]
[Mon Mar 23 06:04:45.992614 2026] [:error] [pid 23440:tid 23479] [client 20.104.224.172:65400] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "acBnfT49_8n8h_ttcUrQdgAAAEM"]
[Mon Mar 23 06:04:46.402840 2026] [:error] [pid 23439:tid 23464] [client 20.104.224.172:62864] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "acBnfqZv8XIzUKdgaMdAXwAAAA8"]
[Mon Mar 23 06:04:46.814479 2026] [:error] [pid 57265:tid 57278] [client 20.104.224.172:63609] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "acBnfmNLjPJJkhuqCsi4hAAAAQs"]
[Mon Mar 23 06:04:47.238228 2026] [:error] [pid 23539:tid 23549] [client 20.104.224.172:64651] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "acBnf37Dh3qWGSpIAZVRmwAAAME"]
[Mon Mar 23 06:04:47.654197 2026] [:error] [pid 23441:tid 23525] [client 20.104.224.172:63562] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "acBnfxq7S-oOqSXZEr5cEQAAAJY"]
[Mon Mar 23 06:04:48.088189 2026] [:error] [pid 23441:tid 23505] [client 20.104.224.172:63588] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acBngBq7S-oOqSXZEr5cEgAAAII"]
[Mon Mar 23 06:04:48.507663 2026] [:error] [pid 23440:tid 23490] [client 20.104.224.172:62373] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acBngD49_8n8h_ttcUrQeQAAAE4"]
[Mon Mar 23 06:04:48.921950 2026] [:error] [pid 57265:tid 57285] [client 20.104.224.172:62446] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acBngGNLjPJJkhuqCsi4iwAAARI"]
[Mon Mar 23 06:04:49.343843 2026] [:error] [pid 23539:tid 23557] [client 20.104.224.172:65310] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acBngX7Dh3qWGSpIAZVRnAAAAMk"]
[Mon Mar 23 06:04:49.759984 2026] [:error] [pid 23440:tid 23488] [client 20.104.224.172:64653] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acBngT49_8n8h_ttcUrQegAAAEw"]
[Mon Mar 23 06:04:50.170881 2026] [:error] [pid 23439:tid 23454] [client 20.104.224.172:62935] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acBngqZv8XIzUKdgaMdAcQAAAAU"]
[Mon Mar 23 06:04:50.580364 2026] [:error] [pid 23439:tid 23452] [client 20.104.224.172:64096] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acBngqZv8XIzUKdgaMdAcwAAAAM"]
[Mon Mar 23 06:04:50.990543 2026] [:error] [pid 23439:tid 23464] [client 20.104.224.172:63599] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "acBngqZv8XIzUKdgaMdAdgAAAA8"]
[Mon Mar 23 06:04:51.409166 2026] [:error] [pid 14573:tid 14594] [client 20.104.224.172:64717] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "acBng--oSmHn3q4_J1G3mQAAAVM"]
[Mon Mar 23 06:04:51.821720 2026] [:error] [pid 14573:tid 14598] [client 20.104.224.172:64675] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "acBng--oSmHn3q4_J1G3mwAAAVc"]
[Mon Mar 23 06:04:52.242511 2026] [:error] [pid 14573:tid 14582] [client 20.104.224.172:62920] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "acBnhO-oSmHn3q4_J1G3nQAAAUc"]
[Mon Mar 23 06:04:52.660920 2026] [:error] [pid 14573:tid 14581] [client 20.104.224.172:63536] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "acBnhO-oSmHn3q4_J1G3oAAAAUY"]
[Mon Mar 23 06:04:53.070705 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:64664] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acBnhe-oSmHn3q4_J1G3pQAAAU4"]
[Mon Mar 23 06:04:53.489176 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:61682] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acBnhe-oSmHn3q4_J1G3qQAAAVQ"]
[Mon Mar 23 06:04:53.900885 2026] [:error] [pid 14573:tid 14586] [client 20.104.224.172:64056] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acBnhe-oSmHn3q4_J1G3rAAAAUs"]
[Mon Mar 23 06:04:54.313384 2026] [:error] [pid 14573:tid 14583] [client 20.104.224.172:64685] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "acBnhu-oSmHn3q4_J1G3rwAAAUg"]
[Mon Mar 23 06:04:54.726522 2026] [:error] [pid 23440:tid 23476] [client 20.104.224.172:62420] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acBnhj49_8n8h_ttcUrQewAAAEA"]
[Mon Mar 23 06:04:55.137398 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:62921] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acBnh--oSmHn3q4_J1G3sQAAAU4"]
[Mon Mar 23 06:04:55.548665 2026] [:error] [pid 14573:tid 14591] [client 20.104.224.172:64658] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acBnh--oSmHn3q4_J1G3swAAAVA"]
[Mon Mar 23 06:04:55.962009 2026] [:error] [pid 57265:tid 57288] [client 20.104.224.172:64112] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acBnh2NLjPJJkhuqCsi4mAAAARU"]
[Mon Mar 23 06:04:56.375811 2026] [:error] [pid 14573:tid 14590] [client 20.104.224.172:63602] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acBniO-oSmHn3q4_J1G3tgAAAU8"]
[Mon Mar 23 06:04:56.805938 2026] [:error] [pid 23539:tid 23568] [client 20.104.224.172:64700] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acBniH7Dh3qWGSpIAZVRpgAAANQ"]
[Mon Mar 23 06:04:57.220122 2026] [:error] [pid 23539:tid 23549] [client 20.104.224.172:61604] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acBniX7Dh3qWGSpIAZVRpwAAAME"]
[Mon Mar 23 06:04:57.633505 2026] [:error] [pid 23441:tid 23512] [client 20.104.224.172:64713] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "acBniRq7S-oOqSXZEr5cFQAAAIk"]
[Mon Mar 23 06:04:58.045210 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:63539] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acBniu-oSmHn3q4_J1G3vAAAAUo"]
[Mon Mar 23 06:04:58.459020 2026] [:error] [pid 23440:tid 23486] [client 20.104.224.172:64641] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acBnij49_8n8h_ttcUrQfgAAAEo"]
[Mon Mar 23 06:04:58.876760 2026] [:error] [pid 23539:tid 23566] [client 20.104.224.172:63577] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acBnin7Dh3qWGSpIAZVRqgAAANI"]
[Mon Mar 23 06:04:59.292458 2026] [:error] [pid 23539:tid 23550] [client 20.104.224.172:62924] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acBni37Dh3qWGSpIAZVRqwAAAMI"]
[Mon Mar 23 06:04:59.719162 2026] [:error] [pid 23539:tid 23564] [client 20.104.224.172:64072] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acBni37Dh3qWGSpIAZVRrwAAANA"]
[Mon Mar 23 06:05:00.146455 2026] [:error] [pid 23440:tid 23499] [client 20.104.224.172:65387] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acBnjD49_8n8h_ttcUrQfwAAAFc"]
[Mon Mar 23 06:05:00.564698 2026] [:error] [pid 23440:tid 23495] [client 20.104.224.172:62885] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acBnjD49_8n8h_ttcUrQgAAAAFM"]
[Mon Mar 23 06:05:00.978712 2026] [:error] [pid 23439:tid 23452] [client 20.104.224.172:60992] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acBnjKZv8XIzUKdgaMdAggAAAAM"]
[Mon Mar 23 06:05:01.392690 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:64025] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "acBnje-oSmHn3q4_J1G3wgAAAU4"]
[Mon Mar 23 06:05:01.806355 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:64740] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "acBnje-oSmHn3q4_J1G3xAAAAUw"]
[Mon Mar 23 06:05:02.230940 2026] [:error] [pid 23441:tid 23514] [client 20.104.224.172:65393] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "acBnjhq7S-oOqSXZEr5cGAAAAIs"]
[Mon Mar 23 06:05:02.650250 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:65341] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "acBnju-oSmHn3q4_J1G3ygAAAVQ"]
[Mon Mar 23 06:05:03.084216 2026] [:error] [pid 14573:tid 14598] [client 20.104.224.172:64738] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acBnj--oSmHn3q4_J1G3zAAAAVc"]
[Mon Mar 23 06:05:03.497941 2026] [:error] [pid 23539:tid 23556] [client 20.104.224.172:62445] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acBnj37Dh3qWGSpIAZVRswAAAMg"]
[Mon Mar 23 06:05:03.910921 2026] [:error] [pid 57265:tid 57278] [client 20.104.224.172:65334] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acBnj2NLjPJJkhuqCsi4nQAAAQs"]
[Mon Mar 23 06:05:04.325712 2026] [:error] [pid 23539:tid 23554] [client 20.104.224.172:65340] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acBnkH7Dh3qWGSpIAZVRtgAAAMY"]
[Mon Mar 23 06:05:04.742402 2026] [:error] [pid 23441:tid 23511] [client 20.104.224.172:62432] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acBnkBq7S-oOqSXZEr5cGgAAAIg"]
[Mon Mar 23 06:05:05.157019 2026] [:error] [pid 23539:tid 23563] [client 20.104.224.172:62440] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acBnkX7Dh3qWGSpIAZVRuAAAAM8"]
[Mon Mar 23 06:05:05.583344 2026] [:error] [pid 23441:tid 23525] [client 20.104.224.172:62427] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acBnkRq7S-oOqSXZEr5cHQAAAJY"]
[Mon Mar 23 06:05:05.995292 2026] [:error] [pid 23440:tid 23479] [client 20.104.224.172:63600] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "acBnkT49_8n8h_ttcUrQhQAAAEM"]
[Mon Mar 23 06:05:06.839433 2026] [:error] [pid 23440:tid 23488] [client 20.104.224.172:63601] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Mon Mar 23 06:05:07.050715 2026] [:error] [pid 23440:tid 23489] [client 20.104.224.172:63601] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Mon Mar 23 06:05:07.257584 2026] [:error] [pid 23440:tid 23500] [client 20.104.224.172:63601] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "acBnkz49_8n8h_ttcUrQjgAAAFg"]
[Mon Mar 23 06:05:07.680393 2026] [:error] [pid 57265:tid 57276] [client 20.104.224.172:64708] [client 20.104.224.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "acBnk2NLjPJJkhuqCsi4ogAAAQk"]
[Mon Mar 23 06:05:08.093798 2026] [:error] [pid 57265:tid 57288] [client 20.104.224.172:65350] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Mar 23 06:05:08.303764 2026] [:error] [pid 57265:tid 57289] [client 20.104.224.172:65350] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Mar 23 06:05:08.513644 2026] [:error] [pid 57265:tid 57280] [client 20.104.224.172:65350] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Mon Mar 23 06:05:08.724645 2026] [:error] [pid 57265:tid 57273] [client 20.104.224.172:65350] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Mon Mar 23 06:05:08.938740 2026] [:error] [pid 57265:tid 57285] [client 20.104.224.172:65350] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Mon Mar 23 06:05:09.147972 2026] [:error] [pid 57265:tid 57268] [client 20.104.224.172:65350] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Mon Mar 23 06:05:09.357624 2026] [:error] [pid 57265:tid 57269] [client 20.104.224.172:65350] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Mon Mar 23 06:05:09.563286 2026] [:error] [pid 57265:tid 57287] [client 20.104.224.172:65350] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "acBnlWNLjPJJkhuqCsi4qgAAARQ"]
[Mon Mar 23 06:05:09.976202 2026] [:error] [pid 23539:tid 23553] [client 20.104.224.172:61598] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "acBnlX7Dh3qWGSpIAZVRuwAAAMU"]
[Mon Mar 23 06:05:10.389838 2026] [:error] [pid 23439:tid 23470] [client 20.104.224.172:64758] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "acBnlqZv8XIzUKdgaMdAhwAAABU"]
[Mon Mar 23 06:05:10.831119 2026] [:error] [pid 23439:tid 23472] [client 20.104.224.172:64715] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "acBnlqZv8XIzUKdgaMdAiAAAABc"]
[Mon Mar 23 06:05:11.241841 2026] [:error] [pid 23441:tid 23512] [client 20.104.224.172:65329] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "acBnlxq7S-oOqSXZEr5cHwAAAIk"]
[Mon Mar 23 06:05:11.655694 2026] [:error] [pid 23441:tid 23523] [client 20.104.224.172:64009] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "acBnlxq7S-oOqSXZEr5cIgAAAJQ"]
[Mon Mar 23 06:05:12.074430 2026] [:error] [pid 23539:tid 23568] [client 20.104.224.172:63606] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "acBnmH7Dh3qWGSpIAZVRvwAAANQ"]
[Mon Mar 23 06:05:12.491431 2026] [:error] [pid 23441:tid 23517] [client 20.104.224.172:64712] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "acBnmBq7S-oOqSXZEr5cJAAAAI4"]
[Mon Mar 23 06:05:12.912457 2026] [:error] [pid 23440:tid 23476] [client 20.104.224.172:64076] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "acBnmD49_8n8h_ttcUrQlwAAAEA"]
[Mon Mar 23 06:05:13.324329 2026] [:error] [pid 14573:tid 14591] [client 20.104.224.172:64678] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "acBnme-oSmHn3q4_J1G30AAAAVA"]
[Mon Mar 23 06:05:13.734635 2026] [:error] [pid 23441:tid 23506] [client 20.104.224.172:65359] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "acBnmRq7S-oOqSXZEr5cJQAAAIM"]
[Mon Mar 23 06:05:14.146349 2026] [:error] [pid 23539:tid 23550] [client 20.104.224.172:63584] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "acBnmn7Dh3qWGSpIAZVRwwAAAMI"]
[Mon Mar 23 06:05:14.571937 2026] [:error] [pid 57265:tid 57280] [client 20.104.224.172:65297] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acBnmmNLjPJJkhuqCsi4sAAAAQ0"]
[Mon Mar 23 06:05:14.986438 2026] [:error] [pid 57265:tid 57285] [client 20.104.224.172:62404] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acBnmmNLjPJJkhuqCsi4sQAAARI"]
[Mon Mar 23 06:05:15.397983 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:65397] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acBnm--oSmHn3q4_J1G30gAAAVQ"]
[Mon Mar 23 06:05:15.812165 2026] [:error] [pid 23440:tid 23486] [client 20.104.224.172:62971] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acBnmz49_8n8h_ttcUrQmQAAAEo"]
[Mon Mar 23 06:05:16.242429 2026] [:error] [pid 23440:tid 23478] [client 20.104.224.172:62455] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acBnnD49_8n8h_ttcUrQmgAAAEI"]
[Mon Mar 23 06:05:16.669634 2026] [:error] [pid 23440:tid 23498] [client 20.104.224.172:61689] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acBnnD49_8n8h_ttcUrQnwAAAFY"]
[Mon Mar 23 06:05:17.088702 2026] [:error] [pid 23440:tid 23489] [client 20.104.224.172:60358] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acBnnT49_8n8h_ttcUrQogAAAE0"]
[Mon Mar 23 06:05:17.507166 2026] [:error] [pid 23440:tid 23478] [client 20.104.224.172:64765] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acBnnT49_8n8h_ttcUrQpAAAAEI"]
[Mon Mar 23 06:05:17.924682 2026] [:error] [pid 23440:tid 23487] [client 20.104.224.172:65330] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acBnnT49_8n8h_ttcUrQpwAAAEs"]
[Mon Mar 23 06:05:18.344458 2026] [:error] [pid 23539:tid 23559] [client 20.104.224.172:64037] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acBnnn7Dh3qWGSpIAZVRxAAAAMs"]
[Mon Mar 23 06:05:18.760977 2026] [:error] [pid 23441:tid 23522] [client 20.104.224.172:64668] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acBnnhq7S-oOqSXZEr5cKQAAAJM"]
[Mon Mar 23 06:05:19.176521 2026] [:error] [pid 23441:tid 23505] [client 20.104.224.172:62964] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acBnnxq7S-oOqSXZEr5cKwAAAII"]
[Mon Mar 23 06:05:19.589255 2026] [:error] [pid 23441:tid 23513] [client 20.104.224.172:65366] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "acBnnxq7S-oOqSXZEr5cLgAAAIo"]
[Mon Mar 23 06:05:20.001129 2026] [:error] [pid 23441:tid 23512] [client 20.104.224.172:62913] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "acBnoBq7S-oOqSXZEr5cMQAAAIk"]
[Mon Mar 23 06:05:20.415575 2026] [:error] [pid 23441:tid 23523] [client 20.104.224.172:64028] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "acBnoBq7S-oOqSXZEr5cMgAAAJQ"]
[Mon Mar 23 06:05:20.832961 2026] [:error] [pid 23539:tid 23562] [client 20.104.224.172:63573] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "acBnoH7Dh3qWGSpIAZVRyAAAAM4"]
[Mon Mar 23 06:05:21.249246 2026] [:error] [pid 23440:tid 23476] [client 20.104.224.172:64098] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "acBnoT49_8n8h_ttcUrQqQAAAEA"]
[Mon Mar 23 06:05:21.669463 2026] [:error] [pid 23440:tid 23479] [client 20.104.224.172:63496] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "acBnoT49_8n8h_ttcUrQqgAAAEM"]
[Mon Mar 23 06:05:22.082483 2026] [:error] [pid 23539:tid 23558] [client 20.104.224.172:63509] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "acBnon7Dh3qWGSpIAZVRzAAAAMo"]
[Mon Mar 23 06:05:22.496709 2026] [:error] [pid 23539:tid 23568] [client 20.104.224.172:64036] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "acBnon7Dh3qWGSpIAZVRzQAAANQ"]
[Mon Mar 23 06:05:22.910039 2026] [:error] [pid 23539:tid 23560] [client 20.104.224.172:64716] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "acBnon7Dh3qWGSpIAZVRzgAAAMw"]
[Mon Mar 23 06:05:23.337012 2026] [:error] [pid 23539:tid 23550] [client 20.104.224.172:64666] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "acBno37Dh3qWGSpIAZVR0AAAAMI"]
[Mon Mar 23 06:05:23.761133 2026] [:error] [pid 23539:tid 23559] [client 20.104.224.172:64019] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "acBno37Dh3qWGSpIAZVR0gAAAMs"]
[Mon Mar 23 06:05:24.176757 2026] [:error] [pid 14573:tid 14582] [client 20.104.224.172:64020] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "acBnpO-oSmHn3q4_J1G31wAAAUc"]
[Mon Mar 23 06:05:24.592582 2026] [:error] [pid 23440:tid 23491] [client 20.104.224.172:64102] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "acBnpD49_8n8h_ttcUrQrgAAAE8"]
[Mon Mar 23 06:05:25.004862 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:62423] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "acBnpe-oSmHn3q4_J1G32QAAAUo"]
[Mon Mar 23 06:05:25.429736 2026] [:error] [pid 14573:tid 14592] [client 20.104.224.172:65319] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "acBnpe-oSmHn3q4_J1G32wAAAVE"]
[Mon Mar 23 06:05:25.847832 2026] [:error] [pid 23439:tid 23450] [client 20.104.224.172:62889] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "acBnpaZv8XIzUKdgaMdAkQAAAAE"]
[Mon Mar 23 06:05:26.258541 2026] [:error] [pid 23539:tid 23570] [client 20.104.224.172:63520] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acBnpn7Dh3qWGSpIAZVR0wAAANY"]
[Mon Mar 23 06:05:26.671678 2026] [:error] [pid 14573:tid 14578] [client 20.104.224.172:64023] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acBnpu-oSmHn3q4_J1G34AAAAUM"]
[Mon Mar 23 06:05:27.082443 2026] [:error] [pid 14573:tid 14579] [client 20.104.224.172:64012] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acBnp--oSmHn3q4_J1G34gAAAUQ"]
[Mon Mar 23 06:05:27.494704 2026] [:error] [pid 23539:tid 23571] [client 20.104.224.172:62850] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acBnp37Dh3qWGSpIAZVR1QAAANc"]
[Mon Mar 23 06:05:27.911685 2026] [:error] [pid 23441:tid 23506] [client 20.104.224.172:61642] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "acBnpxq7S-oOqSXZEr5cNAAAAIM"]
[Mon Mar 23 06:05:28.324207 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:64744] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "acBnqO-oSmHn3q4_J1G35wAAAU4"]
[Mon Mar 23 06:05:28.747036 2026] [:error] [pid 14573:tid 14584] [client 20.104.224.172:63594] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "acBnqO-oSmHn3q4_J1G36QAAAUk"]
[Mon Mar 23 06:05:29.163134 2026] [:error] [pid 14573:tid 14581] [client 20.104.224.172:62952] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "acBnqe-oSmHn3q4_J1G36wAAAUY"]
[Mon Mar 23 06:05:29.577950 2026] [:error] [pid 14573:tid 14599] [client 20.104.224.172:63520] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "acBnqe-oSmHn3q4_J1G37QAAAVg"]
[Mon Mar 23 06:05:29.989425 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:65392] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "acBnqe-oSmHn3q4_J1G37wAAAVQ"]
[Mon Mar 23 06:05:30.400842 2026] [:error] [pid 14573:tid 14588] [client 20.104.224.172:64697] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "acBnqu-oSmHn3q4_J1G38gAAAU0"]
[Mon Mar 23 06:05:30.813160 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:65362] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "acBnqmNLjPJJkhuqCsi4tgAAAQ8"]
[Mon Mar 23 06:05:31.227432 2026] [:error] [pid 57265:tid 57291] [client 20.104.224.172:62438] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acBnq2NLjPJJkhuqCsi4twAAARg"]
[Mon Mar 23 06:05:31.648633 2026] [:error] [pid 57265:tid 57284] [client 20.104.224.172:62849] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acBnq2NLjPJJkhuqCsi4uAAAARE"]
[Mon Mar 23 06:05:32.061474 2026] [:error] [pid 23539:tid 23560] [client 20.104.224.172:64079] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acBnrH7Dh3qWGSpIAZVR2gAAAMw"]
[Mon Mar 23 06:05:32.479892 2026] [:error] [pid 14573:tid 14584] [client 20.104.224.172:64706] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acBnrO-oSmHn3q4_J1G39QAAAUk"]
[Mon Mar 23 06:05:32.893367 2026] [:error] [pid 23539:tid 23553] [client 20.104.224.172:64741] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acBnrH7Dh3qWGSpIAZVR4AAAAMU"]
[Mon Mar 23 06:05:33.305142 2026] [:error] [pid 23539:tid 23548] [client 20.104.224.172:62429] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acBnrX7Dh3qWGSpIAZVR4wAAAMA"]
[Mon Mar 23 06:05:33.715358 2026] [:error] [pid 23441:tid 23515] [client 20.104.224.172:62456] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acBnrRq7S-oOqSXZEr5cNwAAAIw"]
[Mon Mar 23 06:05:34.133615 2026] [:error] [pid 23539:tid 23571] [client 20.104.224.172:63502] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acBnrn7Dh3qWGSpIAZVR5QAAANc"]
[Mon Mar 23 06:05:34.556168 2026] [:error] [pid 23441:tid 23505] [client 20.104.224.172:63585] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acBnrhq7S-oOqSXZEr5cOAAAAII"]
[Mon Mar 23 06:05:34.965634 2026] [:error] [pid 23441:tid 23513] [client 20.104.224.172:62959] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acBnrhq7S-oOqSXZEr5cOQAAAIo"]
[Mon Mar 23 06:05:35.378432 2026] [:error] [pid 23539:tid 23558] [client 20.104.224.172:62942] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acBnr37Dh3qWGSpIAZVR5wAAAMo"]
[Mon Mar 23 06:05:35.790541 2026] [:error] [pid 23439:tid 23465] [client 20.104.224.172:64684] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acBnr6Zv8XIzUKdgaMdAlgAAABA"]
[Mon Mar 23 06:05:36.201896 2026] [:error] [pid 23440:tid 23497] [client 20.104.224.172:64122] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acBnsD49_8n8h_ttcUrQuQAAAFU"]
[Mon Mar 23 06:05:36.613333 2026] [:error] [pid 23539:tid 23567] [client 20.104.224.172:63492] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acBnsH7Dh3qWGSpIAZVR6AAAANM"]
[Mon Mar 23 06:05:37.025759 2026] [:error] [pid 14573:tid 14597] [client 20.104.224.172:65308] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acBnse-oSmHn3q4_J1G3-gAAAVY"]
[Mon Mar 23 06:05:37.440294 2026] [:error] [pid 14573:tid 14586] [client 20.104.224.172:63574] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acBnse-oSmHn3q4_J1G3_AAAAUs"]
[Mon Mar 23 06:05:37.858102 2026] [:error] [pid 14573:tid 14575] [client 20.104.224.172:65307] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "acBnse-oSmHn3q4_J1G3_QAAAUA"]
[Mon Mar 23 06:05:38.267613 2026] [:error] [pid 23441:tid 23508] [client 20.104.224.172:64004] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "acBnshq7S-oOqSXZEr5cOwAAAIU"]
[Mon Mar 23 06:05:38.684330 2026] [:error] [pid 23539:tid 23563] [client 20.104.224.172:62434] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "acBnsn7Dh3qWGSpIAZVR7AAAAM8"]
[Mon Mar 23 06:05:39.096505 2026] [:error] [pid 23440:tid 23499] [client 20.104.224.172:63595] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "acBnsz49_8n8h_ttcUrQuwAAAFc"]
[Mon Mar 23 06:05:39.509500 2026] [:error] [pid 57265:tid 57283] [client 20.104.224.172:62434] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "acBns2NLjPJJkhuqCsi4vQAAARA"]
[Mon Mar 23 06:05:39.919616 2026] [:error] [pid 14573:tid 14592] [client 20.104.224.172:64742] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "acBns--oSmHn3q4_J1G4AAAAAVE"]
[Mon Mar 23 06:05:40.334373 2026] [:error] [pid 57265:tid 57280] [client 20.104.224.172:64119] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "acBntGNLjPJJkhuqCsi4vgAAAQ0"]
[Mon Mar 23 06:05:40.764389 2026] [:error] [pid 14573:tid 14593] [client 20.104.224.172:64034] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "acBntO-oSmHn3q4_J1G4AQAAAVI"]
[Mon Mar 23 06:05:41.192747 2026] [:error] [pid 14573:tid 14580] [client 20.104.224.172:63535] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "acBnte-oSmHn3q4_J1G4AwAAAUU"]
[Mon Mar 23 06:05:41.622008 2026] [:error] [pid 23439:tid 23454] [client 20.104.224.172:63561] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "acBntaZv8XIzUKdgaMdAngAAAAU"]
[Mon Mar 23 06:05:42.039560 2026] [:error] [pid 23439:tid 23466] [client 20.104.224.172:65403] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "acBntqZv8XIzUKdgaMdAoAAAABE"]
[Mon Mar 23 06:05:42.451035 2026] [:error] [pid 14573:tid 14591] [client 20.104.224.172:62941] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "acBntu-oSmHn3q4_J1G4BAAAAVA"]
[Mon Mar 23 06:05:42.865320 2026] [:error] [pid 14573:tid 14599] [client 20.104.224.172:63548] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acBntu-oSmHn3q4_J1G4BgAAAVg"]
[Mon Mar 23 06:05:43.277954 2026] [:error] [pid 23539:tid 23557] [client 20.104.224.172:61662] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acBnt37Dh3qWGSpIAZVR7wAAAMk"]
[Mon Mar 23 06:05:43.695504 2026] [:error] [pid 23441:tid 23527] [client 20.104.224.172:65307] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acBntxq7S-oOqSXZEr5cPwAAAJg"]
[Mon Mar 23 06:05:44.106273 2026] [:error] [pid 23441:tid 23514] [client 20.104.224.172:64695] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acBnuBq7S-oOqSXZEr5cQAAAAIs"]
[Mon Mar 23 06:05:44.525157 2026] [:error] [pid 23441:tid 23511] [client 20.104.224.172:63578] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "acBnuBq7S-oOqSXZEr5cQQAAAIg"]
[Mon Mar 23 06:05:44.936664 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:64029] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "acBnuO-oSmHn3q4_J1G4CgAAAVQ"]
[Mon Mar 23 06:05:45.351166 2026] [:error] [pid 14573:tid 14583] [client 20.104.224.172:64125] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "acBnue-oSmHn3q4_J1G4CwAAAUg"]
[Mon Mar 23 06:05:45.761563 2026] [:error] [pid 57265:tid 57277] [client 20.104.224.172:65303] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "acBnuWNLjPJJkhuqCsi4wQAAAQo"]
[Mon Mar 23 06:05:46.178040 2026] [:error] [pid 23439:tid 23453] [client 20.104.224.172:63554] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "acBnuqZv8XIzUKdgaMdApgAAAAQ"]
[Mon Mar 23 06:05:46.596930 2026] [:error] [pid 23439:tid 23470] [client 20.104.224.172:63505] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "acBnuqZv8XIzUKdgaMdAqgAAABU"]
[Mon Mar 23 06:05:47.007696 2026] [:error] [pid 23439:tid 23462] [client 20.104.224.172:62350] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "acBnu6Zv8XIzUKdgaMdArQAAAA0"]
[Mon Mar 23 06:05:47.421519 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:64067] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "acBnu--oSmHn3q4_J1G4DwAAAUo"]
[Mon Mar 23 06:05:47.840588 2026] [:error] [pid 14573:tid 14593] [client 20.104.224.172:62402] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "acBnu--oSmHn3q4_J1G4EAAAAVI"]
[Mon Mar 23 06:05:48.249142 2026] [:error] [pid 57265:tid 57286] [client 20.104.224.172:65356] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "acBnvGNLjPJJkhuqCsi4wwAAARM"]
[Mon Mar 23 06:05:48.678940 2026] [:error] [pid 57265:tid 57282] [client 20.104.224.172:62856] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "acBnvGNLjPJJkhuqCsi4xQAAAQ8"]
[Mon Mar 23 06:05:49.102860 2026] [:error] [pid 23440:tid 23491] [client 20.104.224.172:63611] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "acBnvT49_8n8h_ttcUrQxAAAAE8"]
[Mon Mar 23 06:05:49.522569 2026] [:error] [pid 14573:tid 14590] [client 20.104.224.172:64746] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnve-oSmHn3q4_J1G4EwAAAU8"]
[Mon Mar 23 06:05:49.942977 2026] [:error] [pid 57265:tid 57289] [client 20.104.224.172:64718] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnvWNLjPJJkhuqCsi4yQAAARY"]
[Mon Mar 23 06:05:50.361919 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:65351] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnvu-oSmHn3q4_J1G4FQAAAUE"]
[Mon Mar 23 06:05:50.833860 2026] [:error] [pid 57265:tid 57284] [client 20.104.224.172:63499] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "acBnvmNLjPJJkhuqCsi5AwAAARE"]
[Mon Mar 23 06:05:51.266951 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:62975] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "acBnv--oSmHn3q4_J1G4GgAAAUo"]
[Mon Mar 23 06:05:51.681417 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:64114] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "acBnv--oSmHn3q4_J1G4HgAAAUw"]
[Mon Mar 23 06:05:52.102713 2026] [:error] [pid 23539:tid 23551] [client 20.104.224.172:64699] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "acBnwH7Dh3qWGSpIAZVR9gAAAMM"]
[Mon Mar 23 06:05:52.517732 2026] [:error] [pid 23539:tid 23559] [client 20.104.224.172:65337] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "acBnwH7Dh3qWGSpIAZVR-AAAAMs"]
[Mon Mar 23 06:05:52.937514 2026] [:error] [pid 23539:tid 23560] [client 20.104.224.172:61627] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acBnwH7Dh3qWGSpIAZVR-gAAAMw"]
[Mon Mar 23 06:05:53.351273 2026] [:error] [pid 23439:tid 23451] [client 20.104.224.172:62859] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acBnwaZv8XIzUKdgaMdAuwAAAAI"]
[Mon Mar 23 06:05:53.781899 2026] [:error] [pid 23539:tid 23564] [client 20.104.224.172:65355] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acBnwX7Dh3qWGSpIAZVR_gAAANA"]
[Mon Mar 23 06:05:54.217657 2026] [:error] [pid 23539:tid 23562] [client 20.104.224.172:62897] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acBnwn7Dh3qWGSpIAZVSAAAAAM4"]
[Mon Mar 23 06:05:54.631412 2026] [:error] [pid 23539:tid 23567] [client 20.104.224.172:64000] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "acBnwn7Dh3qWGSpIAZVSAQAAANM"]
[Mon Mar 23 06:05:55.050843 2026] [:error] [pid 14573:tid 14595] [client 20.104.224.172:62444] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "acBnw--oSmHn3q4_J1G4JAAAAVQ"]
[Mon Mar 23 06:05:55.465411 2026] [:error] [pid 14573:tid 14585] [client 20.104.224.172:62858] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "acBnw--oSmHn3q4_J1G4JQAAAUo"]
[Mon Mar 23 06:05:55.878062 2026] [:error] [pid 14573:tid 14587] [client 20.104.224.172:64764] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "acBnw--oSmHn3q4_J1G4KAAAAUw"]
[Mon Mar 23 06:05:56.303795 2026] [:error] [pid 23441:tid 23505] [client 20.104.224.172:65314] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "acBnxBq7S-oOqSXZEr5cWAAAAII"]
[Mon Mar 23 06:05:56.716159 2026] [:error] [pid 57265:tid 57273] [client 20.104.224.172:63565] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "acBnxGNLjPJJkhuqCsi5MgAAAQY"]
[Mon Mar 23 06:05:57.130448 2026] [:error] [pid 57265:tid 57285] [client 20.104.224.172:65375] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "acBnxWNLjPJJkhuqCsi5MwAAARI"]
[Mon Mar 23 06:05:57.544671 2026] [:error] [pid 23441:tid 23523] [client 20.104.224.172:63508] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "acBnxRq7S-oOqSXZEr5cWwAAAJQ"]
[Mon Mar 23 06:05:57.956083 2026] [:error] [pid 23441:tid 23510] [client 20.104.224.172:64687] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acBnxRq7S-oOqSXZEr5cXAAAAIc"]
[Mon Mar 23 06:05:58.367707 2026] [:error] [pid 23539:tid 23557] [client 20.104.224.172:62946] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acBnxn7Dh3qWGSpIAZVSBwAAAMk"]
[Mon Mar 23 06:05:58.781874 2026] [:error] [pid 23539:tid 23571] [client 20.104.224.172:62943] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acBnxn7Dh3qWGSpIAZVSCQAAANc"]
[Mon Mar 23 06:05:59.198303 2026] [:error] [pid 57265:tid 57285] [client 20.104.224.172:65298] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acBnx2NLjPJJkhuqCsi5OgAAARI"]
[Mon Mar 23 06:05:59.621939 2026] [:error] [pid 14573:tid 14575] [client 20.104.224.172:60293] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "acBnx--oSmHn3q4_J1G4MQAAAUA"]
[Mon Mar 23 06:06:00.040365 2026] [:error] [pid 23539:tid 23567] [client 20.104.224.172:61599] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "acBnyH7Dh3qWGSpIAZVSDAAAANM"]
[Mon Mar 23 06:06:00.458640 2026] [:error] [pid 23539:tid 23572] [client 20.104.224.172:63566] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "acBnyH7Dh3qWGSpIAZVSDwAAANg"]
[Mon Mar 23 06:06:00.874571 2026] [:error] [pid 14573:tid 14591] [client 20.104.224.172:63598] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "acBnyO-oSmHn3q4_J1G4MwAAAVA"]
[Mon Mar 23 06:06:01.293473 2026] [:error] [pid 23441:tid 23511] [client 20.104.224.172:64739] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "acBnyRq7S-oOqSXZEr5cYAAAAIg"]
[Mon Mar 23 06:06:01.727538 2026] [:error] [pid 23440:tid 23495] [client 20.104.224.172:64698] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "acBnyT49_8n8h_ttcUrQyQAAAFM"]
[Mon Mar 23 06:06:02.139206 2026] [:error] [pid 23440:tid 23482] [client 20.104.224.172:61692] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "acBnyj49_8n8h_ttcUrQygAAAEY"]
[Mon Mar 23 06:06:02.562292 2026] [:error] [pid 23441:tid 23524] [client 20.104.224.172:60390] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "acBnyhq7S-oOqSXZEr5cYgAAAJU"]
[Mon Mar 23 06:06:02.972464 2026] [:error] [pid 14573:tid 14599] [client 20.104.224.172:64110] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "acBnyu-oSmHn3q4_J1G4NgAAAVg"]
[Mon Mar 23 06:06:03.386540 2026] [:error] [pid 23440:tid 23490] [client 20.104.224.172:65358] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "acBnyz49_8n8h_ttcUrQzAAAAE4"]
[Mon Mar 23 06:06:03.808479 2026] [:error] [pid 23441:tid 23513] [client 20.104.224.172:62357] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "acBnyxq7S-oOqSXZEr5cZQAAAIo"]
[Mon Mar 23 06:06:04.228770 2026] [:error] [pid 23441:tid 23521] [client 20.104.224.172:62412] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "acBnzBq7S-oOqSXZEr5cZgAAAJI"]
[Mon Mar 23 06:06:04.643406 2026] [:error] [pid 23439:tid 23458] [client 20.104.224.172:65286] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "acBnzKZv8XIzUKdgaMdAxAAAAAk"]
[Mon Mar 23 06:06:05.057542 2026] [:error] [pid 23441:tid 23520] [client 20.104.224.172:61649] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "acBnzRq7S-oOqSXZEr5caAAAAJE"]
[Mon Mar 23 06:06:05.473083 2026] [:error] [pid 23439:tid 23460] [client 20.104.224.172:61575] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "acBnzaZv8XIzUKdgaMdAxQAAAAs"]
[Mon Mar 23 06:06:05.890104 2026] [:error] [pid 23440:tid 23489] [client 20.104.224.172:62410] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "acBnzT49_8n8h_ttcUrQzwAAAE0"]
[Mon Mar 23 06:06:06.300056 2026] [:error] [pid 23441:tid 23504] [client 20.104.224.172:65398] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "acBnzhq7S-oOqSXZEr5caQAAAIE"]
[Mon Mar 23 06:06:06.712621 2026] [:error] [pid 23440:tid 23478] [client 20.104.224.172:62880] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "acBnzj49_8n8h_ttcUrQ0gAAAEI"]
[Mon Mar 23 06:06:07.133471 2026] [:error] [pid 14573:tid 14589] [client 20.104.224.172:64674] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "acBnz--oSmHn3q4_J1G4OwAAAU4"]
[Mon Mar 23 06:06:07.551436 2026] [:error] [pid 23539:tid 23551] [client 20.104.224.172:65383] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtz.php"] [unique_id "acBnz37Dh3qWGSpIAZVSFAAAAMM"]
[Mon Mar 23 06:06:07.972523 2026] [:error] [pid 14573:tid 14592] [client 20.104.224.172:64082] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "acBnz--oSmHn3q4_J1G4PwAAAVE"]
[Mon Mar 23 06:06:08.389150 2026] [:error] [pid 23441:tid 23510] [client 20.104.224.172:62369] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "acBn0Bq7S-oOqSXZEr5cawAAAIc"]
[Mon Mar 23 06:06:08.812351 2026] [:error] [pid 23441:tid 23514] [client 20.104.224.172:64756] [client 20.104.224.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "acBn0Bq7S-oOqSXZEr5cbQAAAIs"]
[Mon Mar 23 06:06:09.255485 2026] [:error] [pid 14573:tid 14590] [client 20.104.224.172:65371] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Mon Mar 23 06:06:09.465894 2026] [:error] [pid 14573:tid 14593] [client 20.104.224.172:65371] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Mon Mar 23 06:06:09.677378 2026] [:error] [pid 14573:tid 14586] [client 20.104.224.172:65371] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Mon Mar 23 06:06:09.888616 2026] [:error] [pid 14573:tid 14576] [client 20.104.224.172:65371] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Mar 23 06:06:10.098460 2026] [:error] [pid 14573:tid 14597] [client 20.104.224.172:65371] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Mon Mar 23 09:43:39.809290 2026] [:error] [pid 23440:tid 23483] [client 200.158.181.5:65209] [client 200.158.181.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 200.158.181.5, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acCayz49_8n8h_ttcUrsRAAAAEc"]
[Mon Mar 23 09:43:39.814312 2026] [:error] [pid 23440:tid 23483] [client 200.158.181.5:65209] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 16:02:13.666992 2026] [:error] [pid 23439:tid 23459] [client 49.37.168.143:64810] [client 49.37.168.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.37.168.143, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acDzhaZv8XIzUKdgaMd_hQAAAAo"]
[Mon Mar 23 16:02:13.671315 2026] [:error] [pid 23439:tid 23459] [client 49.37.168.143:64810] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 16:52:18.629435 2026] [:error] [pid 57265:tid 57273] [client 43.138.68.113:33276] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acD_QmNLjPJJkhuqCsgA2gAAAQY"]
[Mon Mar 23 18:04:18.211791 2026] [:error] [pid 14573:tid 14577] [client 20.102.82.167:33732] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acEQIu-oSmHn3q4_J1G7LAAAAUI"]
[Mon Mar 23 18:04:19.077536 2026] [:error] [pid 23539:tid 23572] [client 20.102.82.167:32770] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acEQI37Dh3qWGSpIAZUZLAAAANg"]
[Mon Mar 23 18:04:19.948497 2026] [:error] [pid 35165:tid 35169] [client 20.102.82.167:33747] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acEQI86udpN6Esk7JKuwlwAAAYE"]
[Mon Mar 23 18:04:20.801068 2026] [:error] [pid 35165:tid 35191] [client 20.102.82.167:32799] [client 20.102.82.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acEQJM6udpN6Esk7JKuwmAAAAZc"]
[Mon Mar 23 21:15:04.651768 2026] [:error] [pid 38178:tid 38253] [client 43.130.67.33:41464] [client 43.130.67.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acE82A0axWfXsVvR9udAfgAAAIs"]
[Mon Mar 23 22:56:12.971843 2026] [:error] [pid 52341:tid 52344] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Mon Mar 23 22:56:13.180536 2026] [:error] [pid 52341:tid 52360] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Mon Mar 23 22:56:13.388985 2026] [:error] [pid 52341:tid 52353] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Mon Mar 23 22:56:13.595635 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Mon Mar 23 22:56:13.804035 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Mon Mar 23 22:56:14.012998 2026] [:error] [pid 52341:tid 52357] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Mon Mar 23 22:56:14.224841 2026] [:error] [pid 52341:tid 52358] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Mon Mar 23 22:56:14.433373 2026] [:error] [pid 52341:tid 52362] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Mon Mar 23 22:56:14.643085 2026] [:error] [pid 52341:tid 52364] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Mon Mar 23 22:56:14.851530 2026] [:error] [pid 52341:tid 52349] [client 40.85.222.197:2011] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Mon Mar 23 22:56:15.057197 2026] [:error] [pid 52341:tid 52361] [client 40.85.222.197:2011] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFUj6PKTBDR2u47Gb0MXwAAAVI"]
[Mon Mar 23 22:56:15.470449 2026] [:error] [pid 38306:tid 38310] [client 40.85.222.197:1990] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFUjzkL8qwu-hHc6BjEXQAAAQI"]
[Mon Mar 23 22:56:15.880275 2026] [:error] [pid 38306:tid 38322] [client 40.85.222.197:2006] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFUjzkL8qwu-hHc6BjEXwAAAQ4"]
[Mon Mar 23 22:56:16.292431 2026] [:error] [pid 38178:tid 38264] [client 40.85.222.197:1939] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFUkA0axWfXsVvR9udT5wAAAJY"]
[Mon Mar 23 22:56:16.704495 2026] [:error] [pid 38306:tid 38320] [client 40.85.222.197:2041] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "acFUkDkL8qwu-hHc6BjEYwAAAQw"]
[Mon Mar 23 22:56:17.114891 2026] [:error] [pid 52341:tid 52360] [client 40.85.222.197:1920] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "acFUkaPKTBDR2u47Gb0MYAAAAVE"]
[Mon Mar 23 22:56:17.525264 2026] [:error] [pid 52341:tid 52367] [client 40.85.222.197:2001] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "acFUkaPKTBDR2u47Gb0MYgAAAVg"]
[Mon Mar 23 22:56:17.936669 2026] [:error] [pid 38178:tid 38259] [client 40.85.222.197:2017] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "acFUkQ0axWfXsVvR9udT6gAAAJE"]
[Mon Mar 23 22:56:18.350597 2026] [:error] [pid 38306:tid 38311] [client 40.85.222.197:1936] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "acFUkjkL8qwu-hHc6BjEaAAAAQM"]
[Mon Mar 23 22:56:18.760975 2026] [:error] [pid 38178:tid 38245] [client 40.85.222.197:1994] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "acFUkg0axWfXsVvR9udT7QAAAIM"]
[Mon Mar 23 22:56:19.173156 2026] [:error] [pid 38276:tid 38289] [client 40.85.222.197:1997] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "acFUk5oKGiI-a7oME3IPDQAAAMo"]
[Mon Mar 23 22:56:19.585117 2026] [:error] [pid 38176:tid 38187] [client 40.85.222.197:1984] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "acFUk0tG4qlh1gvNjuJYtgAAAAA"]
[Mon Mar 23 22:56:20.007577 2026] [:error] [pid 38276:tid 38286] [client 40.85.222.197:1935] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "acFUlJoKGiI-a7oME3IPEwAAAMc"]
[Mon Mar 23 22:56:20.416899 2026] [:error] [pid 38306:tid 38321] [client 40.85.222.197:2043] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "acFUlDkL8qwu-hHc6BjEawAAAQ0"]
[Mon Mar 23 22:56:20.826683 2026] [:error] [pid 38306:tid 38330] [client 40.85.222.197:1985] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "acFUlDkL8qwu-hHc6BjEbAAAARY"]
[Mon Mar 23 22:56:21.238132 2026] [:error] [pid 38176:tid 38198] [client 40.85.222.197:1925] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fleen.php"] [unique_id "acFUlUtG4qlh1gvNjuJYuQAAAAs"]
[Mon Mar 23 22:56:21.651721 2026] [:error] [pid 38176:tid 38209] [client 40.85.222.197:2020] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFUlUtG4qlh1gvNjuJYuwAAABY"]
[Mon Mar 23 22:56:22.064985 2026] [:error] [pid 38176:tid 38188] [client 40.85.222.197:1960] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFUlktG4qlh1gvNjuJYvAAAAAE"]
[Mon Mar 23 22:56:22.475366 2026] [:error] [pid 38176:tid 38211] [client 40.85.222.197:2003] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFUlktG4qlh1gvNjuJYvgAAABg"]
[Mon Mar 23 22:56:22.887330 2026] [:error] [pid 52341:tid 52347] [client 40.85.222.197:1930] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tem.php"] [unique_id "acFUlqPKTBDR2u47Gb0MZwAAAUQ"]
[Mon Mar 23 22:56:23.299451 2026] [:error] [pid 38176:tid 38206] [client 40.85.222.197:1934] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "acFUl0tG4qlh1gvNjuJYvwAAABM"]
[Mon Mar 23 22:56:23.711039 2026] [:error] [pid 38306:tid 38317] [client 40.85.222.197:1971] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "acFUlzkL8qwu-hHc6BjEcwAAAQk"]
[Mon Mar 23 22:56:24.120473 2026] [:error] [pid 38306:tid 38328] [client 40.85.222.197:1921] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "acFUmDkL8qwu-hHc6BjEdAAAARQ"]
[Mon Mar 23 22:56:24.531221 2026] [:error] [pid 38306:tid 38323] [client 40.85.222.197:2031] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av6m.php"] [unique_id "acFUmDkL8qwu-hHc6BjEeAAAAQ8"]
[Mon Mar 23 22:56:24.943395 2026] [:error] [pid 38276:tid 38293] [client 40.85.222.197:2008] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "acFUmJoKGiI-a7oME3IPGQAAAM4"]
[Mon Mar 23 22:56:25.354810 2026] [:error] [pid 38276:tid 38290] [client 40.85.222.197:2023] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "acFUmZoKGiI-a7oME3IPGwAAAMs"]
[Mon Mar 23 22:56:25.766119 2026] [:error] [pid 38276:tid 38301] [client 40.85.222.197:2022] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "acFUmZoKGiI-a7oME3IPHAAAANY"]
[Mon Mar 23 22:56:26.177181 2026] [:error] [pid 38177:tid 38233] [client 40.85.222.197:1929] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autogooey.php"] [unique_id "acFUmnsYW-_HCI66MukChgAAAFI"]
[Mon Mar 23 22:56:26.590654 2026] [:error] [pid 38176:tid 38200] [client 40.85.222.197:2030] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "acFUmktG4qlh1gvNjuJYwwAAAA0"]
[Mon Mar 23 22:56:27.000436 2026] [:error] [pid 38176:tid 38208] [client 40.85.222.197:2013] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "acFUmktG4qlh1gvNjuJYxQAAABU"]
[Mon Mar 23 22:56:27.409879 2026] [:error] [pid 38176:tid 38198] [client 40.85.222.197:1964] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "acFUm0tG4qlh1gvNjuJYxwAAAAs"]
[Mon Mar 23 22:56:27.821102 2026] [:error] [pid 52341:tid 52346] [client 40.85.222.197:2010] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "acFUm6PKTBDR2u47Gb0MbQAAAUM"]
[Mon Mar 23 22:56:28.233759 2026] [:error] [pid 38276:tid 38296] [client 40.85.222.197:1927] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "acFUnJoKGiI-a7oME3IPIAAAANE"]
[Mon Mar 23 22:56:28.658551 2026] [:error] [pid 38306:tid 38315] [client 40.85.222.197:1950] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "acFUnDkL8qwu-hHc6BjEeQAAAQc"]
[Mon Mar 23 22:56:29.068518 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:2034] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "acFUnaPKTBDR2u47Gb0McQAAAUw"]
[Mon Mar 23 22:56:29.498800 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:1922] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "acFUnaPKTBDR2u47Gb0McgAAAUU"]
[Mon Mar 23 22:56:29.909614 2026] [:error] [pid 52341:tid 52345] [client 40.85.222.197:2019] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "acFUnaPKTBDR2u47Gb0MdQAAAUI"]
[Mon Mar 23 22:56:30.331819 2026] [:error] [pid 52341:tid 52358] [client 40.85.222.197:1989] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "acFUnqPKTBDR2u47Gb0MeAAAAU8"]
[Mon Mar 23 22:56:30.744896 2026] [:error] [pid 38306:tid 38312] [client 40.85.222.197:2009] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "acFUnjkL8qwu-hHc6BjEfQAAAQQ"]
[Mon Mar 23 22:56:31.157898 2026] [:error] [pid 52341:tid 52356] [client 40.85.222.197:1996] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "acFUn6PKTBDR2u47Gb0MegAAAU0"]
[Mon Mar 23 22:56:31.568507 2026] [:error] [pid 52341:tid 52363] [client 40.85.222.197:2042] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "acFUn6PKTBDR2u47Gb0MfAAAAVQ"]
[Mon Mar 23 22:56:31.979554 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:1956] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "acFUn6PKTBDR2u47Gb0MgAAAAUU"]
[Mon Mar 23 22:56:32.390659 2026] [:error] [pid 52341:tid 52347] [client 40.85.222.197:1933] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "acFUoKPKTBDR2u47Gb0MggAAAUQ"]
[Mon Mar 23 22:56:32.821648 2026] [:error] [pid 38178:tid 38255] [client 40.85.222.197:1992] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/agg.php"] [unique_id "acFUoA0axWfXsVvR9udT8QAAAI0"]
[Mon Mar 23 22:56:33.234741 2026] [:error] [pid 38306:tid 38317] [client 40.85.222.197:2026] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "acFUoTkL8qwu-hHc6BjEfwAAAQk"]
[Mon Mar 23 22:56:33.655334 2026] [:error] [pid 38176:tid 38201] [client 40.85.222.197:2025] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "acFUoUtG4qlh1gvNjuJYygAAAA4"]
[Mon Mar 23 22:56:34.066850 2026] [:error] [pid 38276:tid 38284] [client 40.85.222.197:1949] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "acFUopoKGiI-a7oME3IPIQAAAMU"]
[Mon Mar 23 22:56:34.477647 2026] [:error] [pid 38178:tid 38242] [client 40.85.222.197:1856] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "acFUog0axWfXsVvR9udT8gAAAIA"]
[Mon Mar 23 22:56:34.886638 2026] [:error] [pid 38178:tid 38254] [client 40.85.222.197:1967] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFUog0axWfXsVvR9udT9AAAAIw"]
[Mon Mar 23 22:56:35.301557 2026] [:error] [pid 38178:tid 38250] [client 40.85.222.197:1995] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFUow0axWfXsVvR9udT9QAAAIg"]
[Mon Mar 23 22:56:35.712275 2026] [:error] [pid 52341:tid 52362] [client 40.85.222.197:1866] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFUo6PKTBDR2u47Gb0MigAAAVM"]
[Mon Mar 23 22:56:36.122883 2026] [:error] [pid 38276:tid 38299] [client 40.85.222.197:2002] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acFUpJoKGiI-a7oME3IPIwAAANQ"]
[Mon Mar 23 22:56:36.535346 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:2024] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "acFUpKPKTBDR2u47Gb0MjAAAAUw"]
[Mon Mar 23 22:56:36.945541 2026] [:error] [pid 52341:tid 52367] [client 40.85.222.197:1968] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "acFUpKPKTBDR2u47Gb0MjQAAAVg"]
[Mon Mar 23 22:56:37.357782 2026] [:error] [pid 38306:tid 38309] [client 40.85.222.197:1948] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "acFUpTkL8qwu-hHc6BjEhQAAAQE"]
[Mon Mar 23 22:56:37.766049 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:2044] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "acFUpaPKTBDR2u47Gb0MjgAAAUU"]
[Mon Mar 23 22:56:38.177052 2026] [:error] [pid 38177:tid 38218] [client 40.85.222.197:1973] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acFUpnsYW-_HCI66MukCigAAAEM"]
[Mon Mar 23 22:56:38.591129 2026] [:error] [pid 38177:tid 38220] [client 40.85.222.197:1932] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acFUpnsYW-_HCI66MukCiwAAAEU"]
[Mon Mar 23 22:56:39.007820 2026] [:error] [pid 38177:tid 38229] [client 40.85.222.197:1986] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acFUp3sYW-_HCI66MukCjQAAAE4"]
[Mon Mar 23 22:56:39.418809 2026] [:error] [pid 38177:tid 38236] [client 40.85.222.197:1977] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acFUp3sYW-_HCI66MukCkAAAAFU"]
[Mon Mar 23 22:56:39.832990 2026] [:error] [pid 38177:tid 38226] [client 40.85.222.197:1931] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFUp3sYW-_HCI66MukCkQAAAEs"]
[Mon Mar 23 22:56:40.244127 2026] [:error] [pid 38306:tid 38308] [client 40.85.222.197:1873] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFUqDkL8qwu-hHc6BjEiAAAAQA"]
[Mon Mar 23 22:56:40.654742 2026] [:error] [pid 52341:tid 52349] [client 40.85.222.197:1868] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFUqKPKTBDR2u47Gb0MkwAAAUY"]
[Mon Mar 23 22:56:41.065982 2026] [:error] [pid 38306:tid 38312] [client 40.85.222.197:1865] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acFUqTkL8qwu-hHc6BjEigAAAQQ"]
[Mon Mar 23 22:56:41.486296 2026] [:error] [pid 38306:tid 38317] [client 40.85.222.197:1978] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFUqTkL8qwu-hHc6BjEiwAAAQk"]
[Mon Mar 23 22:56:41.899161 2026] [:error] [pid 38306:tid 38321] [client 40.85.222.197:2012] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFUqTkL8qwu-hHc6BjEjQAAAQ0"]
[Mon Mar 23 22:56:42.311563 2026] [:error] [pid 52341:tid 52362] [client 40.85.222.197:1957] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFUqqPKTBDR2u47Gb0MlgAAAVM"]
[Mon Mar 23 22:56:42.724740 2026] [:error] [pid 52341:tid 52346] [client 40.85.222.197:1886] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFUqqPKTBDR2u47Gb0MlwAAAUM"]
[Mon Mar 23 22:56:43.136446 2026] [:error] [pid 52341:tid 52355] [client 40.85.222.197:1980] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acFUq6PKTBDR2u47Gb0MmQAAAUw"]
[Mon Mar 23 22:56:43.548023 2026] [:error] [pid 52341:tid 52351] [client 40.85.222.197:1975] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acFUq6PKTBDR2u47Gb0MmwAAAUg"]
[Mon Mar 23 22:56:43.961727 2026] [:error] [pid 52341:tid 52357] [client 40.85.222.197:2037] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acFUq6PKTBDR2u47Gb0MngAAAU4"]
[Mon Mar 23 22:56:44.372887 2026] [:error] [pid 38306:tid 38329] [client 40.85.222.197:1872] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acFUrDkL8qwu-hHc6BjEkwAAARU"]
[Mon Mar 23 22:56:44.798768 2026] [:error] [pid 52341:tid 52343] [client 40.85.222.197:2040] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFUrKPKTBDR2u47Gb0MogAAAUA"]
[Mon Mar 23 22:56:45.210614 2026] [:error] [pid 38176:tid 38188] [client 40.85.222.197:1870] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFUrUtG4qlh1gvNjuJY1AAAAAE"]
[Mon Mar 23 22:56:45.621348 2026] [:error] [pid 38306:tid 38312] [client 40.85.222.197:1966] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFUrTkL8qwu-hHc6BjEmQAAAQQ"]
[Mon Mar 23 22:56:46.030957 2026] [:error] [pid 38176:tid 38211] [client 40.85.222.197:1947] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFUrktG4qlh1gvNjuJY1wAAABg"]
[Mon Mar 23 22:56:46.443343 2026] [:error] [pid 38306:tid 38323] [client 40.85.222.197:1869] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acFUrjkL8qwu-hHc6BjEmwAAAQ8"]
[Mon Mar 23 22:56:46.863387 2026] [:error] [pid 52341:tid 52363] [client 40.85.222.197:1940] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acFUrqPKTBDR2u47Gb0MpAAAAVQ"]
[Mon Mar 23 22:56:47.272998 2026] [:error] [pid 38176:tid 38192] [client 40.85.222.197:1876] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acFUr0tG4qlh1gvNjuJY2QAAAAU"]
[Mon Mar 23 22:56:47.686948 2026] [:error] [pid 38176:tid 38195] [client 40.85.222.197:1998] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "acFUr0tG4qlh1gvNjuJY2gAAAAg"]
[Mon Mar 23 22:56:48.099576 2026] [:error] [pid 38176:tid 38190] [client 40.85.222.197:1882] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFUsEtG4qlh1gvNjuJY3AAAAAM"]
[Mon Mar 23 22:56:48.512028 2026] [:error] [pid 52341:tid 52346] [client 40.85.222.197:1944] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFUsKPKTBDR2u47Gb0MpwAAAUM"]
[Mon Mar 23 22:56:48.922602 2026] [:error] [pid 38178:tid 38256] [client 40.85.222.197:2000] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFUsA0axWfXsVvR9udT-QAAAI4"]
[Mon Mar 23 22:56:49.335055 2026] [:error] [pid 38276:tid 38301] [client 40.85.222.197:1951] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFUsZoKGiI-a7oME3IPKAAAANY"]
[Mon Mar 23 22:56:49.748213 2026] [:error] [pid 38177:tid 38238] [client 40.85.222.197:2036] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFUsXsYW-_HCI66MukCmQAAAFc"]
[Mon Mar 23 22:56:50.159346 2026] [:error] [pid 52341:tid 52357] [client 40.85.222.197:1861] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFUsqPKTBDR2u47Gb0MqwAAAU4"]
[Mon Mar 23 22:56:50.569494 2026] [:error] [pid 52341:tid 52347] [client 40.85.222.197:1971] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFUsqPKTBDR2u47Gb0MrAAAAUQ"]
[Mon Mar 23 22:56:50.980016 2026] [:error] [pid 38177:tid 38227] [client 40.85.222.197:2038] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFUsnsYW-_HCI66MukCmwAAAEw"]
[Mon Mar 23 22:56:51.404828 2026] [:error] [pid 52341:tid 52354] [client 40.85.222.197:2016] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFUs6PKTBDR2u47Gb0MrwAAAUs"]
[Mon Mar 23 22:56:51.816502 2026] [:error] [pid 38176:tid 38211] [client 40.85.222.197:1943] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFUs0tG4qlh1gvNjuJY4wAAABg"]
[Mon Mar 23 22:56:52.233956 2026] [:error] [pid 38276:tid 38300] [client 40.85.222.197:1859] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFUtJoKGiI-a7oME3IPLQAAANU"]
[Mon Mar 23 22:56:52.645454 2026] [:error] [pid 52341:tid 52348] [client 40.85.222.197:1889] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/css/index.php"] [unique_id "acFUtKPKTBDR2u47Gb0MsQAAAUU"]
[Mon Mar 23 23:13:32.708348 2026] [:error] [pid 38276:tid 38284] [client 43.153.27.244:45476] [client 43.153.27.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acFYnJoKGiI-a7oME3ITHwAAAMU"]
[Tue Mar 24 00:05:13.216130 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Tue Mar 24 00:05:13.461005 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Tue Mar 24 00:05:13.709665 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Mar 24 00:05:14.008642 2026] [:error] [pid 52341:tid 52355] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Tue Mar 24 00:05:14.262318 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Tue Mar 24 00:05:14.523925 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Tue Mar 24 00:05:14.767375 2026] [:error] [pid 52341:tid 52353] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Tue Mar 24 00:05:15.010471 2026] [:error] [pid 52341:tid 52347] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Tue Mar 24 00:05:15.254106 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Tue Mar 24 00:05:15.499650 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:64326] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Mar 24 00:05:15.739349 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:64326] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFku6PKTBDR2u47Gb07QgAAAUc"]
[Tue Mar 24 00:05:16.220466 2026] [:error] [pid 38276:tid 38302] [client 158.158.96.39:64329] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFkvJoKGiI-a7oME3Ii_gAAANc"]
[Tue Mar 24 00:05:16.778273 2026] [:error] [pid 38178:tid 38261] [client 158.158.96.39:64942] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFkvA0axWfXsVvR9udkTAAAAJM"]
[Tue Mar 24 00:05:17.323566 2026] [:error] [pid 38178:tid 38244] [client 158.158.96.39:65015] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyiiz.php"] [unique_id "acFkvQ0axWfXsVvR9udkTwAAAII"]
[Tue Mar 24 00:05:17.869886 2026] [:error] [pid 52341:tid 52361] [client 158.158.96.39:64984] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acFkvaPKTBDR2u47Gb07SwAAAVI"]
[Tue Mar 24 00:05:18.392299 2026] [:error] [pid 52341:tid 52345] [client 158.158.96.39:64920] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acFkvqPKTBDR2u47Gb07TgAAAUI"]
[Tue Mar 24 00:05:18.953455 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:64963] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acFkvqPKTBDR2u47Gb07UQAAAUU"]
[Tue Mar 24 00:05:19.434332 2026] [:error] [pid 52341:tid 52351] [client 158.158.96.39:64978] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acFkv6PKTBDR2u47Gb07VAAAAUg"]
[Tue Mar 24 00:05:19.918065 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:64971] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acFkv6PKTBDR2u47Gb07VgAAAUs"]
[Tue Mar 24 00:05:20.503906 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:64929] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acFkwKPKTBDR2u47Gb07WwAAAVU"]
[Tue Mar 24 00:05:21.025729 2026] [:error] [pid 38276:tid 38281] [client 158.158.96.39:64904] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acFkwZoKGiI-a7oME3IjAwAAAMI"]
[Tue Mar 24 00:05:21.598326 2026] [:error] [pid 38306:tid 38326] [client 158.158.96.39:64981] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acFkwTkL8qwu-hHc6Bjk9QAAARI"]
[Tue Mar 24 00:05:32.126741 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:65014] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFkzDkL8qwu-hHc6BjlIgAAARQ"]
[Tue Mar 24 00:05:35.872336 2026] [:error] [pid 38276:tid 38297] [client 158.158.96.39:64897] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acFkz5oKGiI-a7oME3IjDgAAANI"]
[Tue Mar 24 00:05:37.236833 2026] [:error] [pid 38176:tid 38192] [client 158.158.96.39:64950] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acFk0UtG4qlh1gvNjuJwwAAAAAU"]
[Tue Mar 24 00:05:37.748452 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:65002] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acFk0aPKTBDR2u47Gb07fQAAAUE"]
[Tue Mar 24 00:05:38.283246 2026] [:error] [pid 38177:tid 38224] [client 158.158.96.39:64921] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acFk0nsYW-_HCI66MukQOAAAAEk"]
[Tue Mar 24 00:05:38.796008 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64998] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acFk0qPKTBDR2u47Gb07gQAAAU8"]
[Tue Mar 24 00:05:39.291772 2026] [:error] [pid 38177:tid 38222] [client 158.158.96.39:65022] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acFk03sYW-_HCI66MukQOQAAAEc"]
[Tue Mar 24 00:05:39.858549 2026] [:error] [pid 38178:tid 38245] [client 158.158.96.39:64302] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acFk0w0axWfXsVvR9udkegAAAIM"]
[Tue Mar 24 00:05:40.462019 2026] [:error] [pid 52341:tid 52357] [client 158.158.96.39:64321] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acFk1KPKTBDR2u47Gb07iAAAAU4"]
[Tue Mar 24 00:05:40.968702 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:64982] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acFk1KPKTBDR2u47Gb07iQAAAVU"]
[Tue Mar 24 00:05:41.461445 2026] [:error] [pid 38177:tid 38235] [client 158.158.96.39:65012] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "acFk1XsYW-_HCI66MukQPAAAAFQ"]
[Tue Mar 24 00:05:41.978313 2026] [:error] [pid 38178:tid 38251] [client 158.158.96.39:64968] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "acFk1Q0axWfXsVvR9udkgAAAAIk"]
[Tue Mar 24 00:05:42.482538 2026] [:error] [pid 52341:tid 52346] [client 158.158.96.39:64941] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "acFk1qPKTBDR2u47Gb07jgAAAUM"]
[Tue Mar 24 00:05:42.968642 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:65018] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "acFk1jkL8qwu-hHc6BjlPwAAAQE"]
[Tue Mar 24 00:05:43.451791 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64931] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acFk16PKTBDR2u47Gb07jwAAAU8"]
[Tue Mar 24 00:05:43.978500 2026] [:error] [pid 38177:tid 38223] [client 158.158.96.39:64981] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acFk13sYW-_HCI66MukQPgAAAEg"]
[Tue Mar 24 00:05:44.498070 2026] [:error] [pid 38177:tid 38230] [client 158.158.96.39:64969] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acFk2HsYW-_HCI66MukQQAAAAE8"]
[Tue Mar 24 00:05:45.050489 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:64928] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acFk2aPKTBDR2u47Gb07kwAAAUc"]
[Tue Mar 24 00:05:45.649729 2026] [:error] [pid 38177:tid 38218] [client 158.158.96.39:64987] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acFk2XsYW-_HCI66MukQQgAAAEM"]
[Tue Mar 24 00:05:46.135232 2026] [:error] [pid 38176:tid 38193] [client 158.158.96.39:64330] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acFk2ktG4qlh1gvNjuJwywAAAAY"]
[Tue Mar 24 00:05:46.647051 2026] [:error] [pid 38178:tid 38252] [client 158.158.96.39:64970] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acFk2g0axWfXsVvR9udkiAAAAIo"]
[Tue Mar 24 00:05:47.166329 2026] [:error] [pid 52341:tid 52356] [client 158.158.96.39:64907] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acFk26PKTBDR2u47Gb07nQAAAU0"]
[Tue Mar 24 00:05:47.658204 2026] [:error] [pid 38276:tid 38302] [client 158.158.96.39:65009] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acFk25oKGiI-a7oME3IjGgAAANc"]
[Tue Mar 24 00:05:48.212199 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:64924] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acFk3DkL8qwu-hHc6BjlRgAAARQ"]
[Tue Mar 24 00:05:48.728777 2026] [:error] [pid 38306:tid 38331] [client 158.158.96.39:65008] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acFk3DkL8qwu-hHc6BjlSAAAARc"]
[Tue Mar 24 00:05:49.221857 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:64993] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acFk3aPKTBDR2u47Gb07pQAAAVA"]
[Tue Mar 24 00:05:50.128088 2026] [:error] [pid 38306:tid 38312] [client 158.158.96.39:64956] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acFk3jkL8qwu-hHc6BjlUAAAAQQ"]
[Tue Mar 24 00:05:51.208928 2026] [:error] [pid 38178:tid 38265] [client 158.158.96.39:64922] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acFk3w0axWfXsVvR9udkjwAAAJc"]
[Tue Mar 24 00:05:51.979404 2026] [:error] [pid 38276:tid 38286] [client 158.158.96.39:64262] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acFk35oKGiI-a7oME3IjIQAAAMc"]
[Tue Mar 24 00:05:52.659176 2026] [:error] [pid 38306:tid 38331] [client 158.158.96.39:65013] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acFk4DkL8qwu-hHc6BjlWgAAARc"]
[Tue Mar 24 00:05:53.238030 2026] [:error] [pid 38176:tid 38206] [client 158.158.96.39:65001] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq13.php"] [unique_id "acFk4UtG4qlh1gvNjuJw0QAAABM"]
[Tue Mar 24 00:05:53.759056 2026] [:error] [pid 38306:tid 38320] [client 158.158.96.39:64996] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq13.php"] [unique_id "acFk4TkL8qwu-hHc6BjlYgAAAQw"]
[Tue Mar 24 00:05:54.406011 2026] [:error] [pid 38178:tid 38254] [client 158.158.96.39:64350] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq13.php"] [unique_id "acFk4g0axWfXsVvR9udkkAAAAIw"]
[Tue Mar 24 00:05:54.951338 2026] [:error] [pid 38276:tid 38300] [client 158.158.96.39:64320] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq13.php"] [unique_id "acFk4poKGiI-a7oME3IjJgAAANU"]
[Tue Mar 24 00:05:55.460841 2026] [:error] [pid 38177:tid 38226] [client 158.158.96.39:64916] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aapig.php"] [unique_id "acFk43sYW-_HCI66MukQSQAAAEs"]
[Tue Mar 24 00:05:55.961286 2026] [:error] [pid 38177:tid 38222] [client 158.158.96.39:64988] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aapig.php"] [unique_id "acFk43sYW-_HCI66MukQSgAAAEc"]
[Tue Mar 24 00:05:56.452949 2026] [:error] [pid 38177:tid 38221] [client 158.158.96.39:64991] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aapig.php"] [unique_id "acFk5HsYW-_HCI66MukQTAAAAEY"]
[Tue Mar 24 00:05:57.006627 2026] [:error] [pid 38276:tid 38290] [client 158.158.96.39:64995] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aapig.php"] [unique_id "acFk5ZoKGiI-a7oME3IjLgAAAMs"]
[Tue Mar 24 00:05:57.488741 2026] [:error] [pid 38276:tid 38293] [client 158.158.96.39:64944] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webadmin.php"] [unique_id "acFk5ZoKGiI-a7oME3IjMAAAAM4"]
[Tue Mar 24 00:05:57.970801 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:64323] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webadmin.php"] [unique_id "acFk5aPKTBDR2u47Gb07uAAAAVU"]
[Tue Mar 24 00:05:58.465931 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:64913] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webadmin.php"] [unique_id "acFk5jkL8qwu-hHc6BjlaAAAARQ"]
[Tue Mar 24 00:05:58.949655 2026] [:error] [pid 38178:tid 38263] [client 158.158.96.39:64355] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webadmin.php"] [unique_id "acFk5g0axWfXsVvR9udklwAAAJU"]
[Tue Mar 24 00:05:59.432705 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64926] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc0252.php"] [unique_id "acFk5zkL8qwu-hHc6BjlcgAAAQg"]
[Tue Mar 24 00:05:59.917183 2026] [:error] [pid 38178:tid 38252] [client 158.158.96.39:64925] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc0252.php"] [unique_id "acFk5w0axWfXsVvR9udkmAAAAIo"]
[Tue Mar 24 00:06:00.446872 2026] [:error] [pid 38177:tid 38239] [client 158.158.96.39:64933] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc0252.php"] [unique_id "acFk6HsYW-_HCI66MukQVQAAAFg"]
[Tue Mar 24 00:06:00.930144 2026] [:error] [pid 52341:tid 52352] [client 158.158.96.39:64342] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc0252.php"] [unique_id "acFk6KPKTBDR2u47Gb07wAAAAUk"]
[Tue Mar 24 00:06:01.410501 2026] [:error] [pid 38177:tid 38224] [client 158.158.96.39:64974] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acFk6XsYW-_HCI66MukQVgAAAEk"]
[Tue Mar 24 00:06:01.910504 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:64327] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acFk6TkL8qwu-hHc6BjldQAAARM"]
[Tue Mar 24 00:06:03.030239 2026] [:error] [pid 38178:tid 38254] [client 158.158.96.39:65021] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acFk6w0axWfXsVvR9udkoQAAAIw"]
[Tue Mar 24 00:06:03.514807 2026] [:error] [pid 38306:tid 38308] [client 158.158.96.39:64999] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acFk6zkL8qwu-hHc6BjleQAAAQA"]
[Tue Mar 24 00:06:04.021936 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64983] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acFk7KPKTBDR2u47Gb07xAAAAU8"]
[Tue Mar 24 00:06:04.512119 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64969] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acFk7DkL8qwu-hHc6BjlewAAAQ4"]
[Tue Mar 24 00:06:05.008038 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64347] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acFk7TkL8qwu-hHc6BjlfgAAAQg"]
[Tue Mar 24 00:06:05.548469 2026] [:error] [pid 52341:tid 52357] [client 158.158.96.39:63680] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acFk7aPKTBDR2u47Gb07zwAAAU4"]
[Tue Mar 24 00:06:06.060341 2026] [:error] [pid 52341:tid 52346] [client 158.158.96.39:64936] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mis.php"] [unique_id "acFk7qPKTBDR2u47Gb070wAAAUM"]
[Tue Mar 24 00:06:06.546909 2026] [:error] [pid 38306:tid 38314] [client 158.158.96.39:64377] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mis.php"] [unique_id "acFk7jkL8qwu-hHc6BjlfwAAAQY"]
[Tue Mar 24 00:06:07.201100 2026] [:error] [pid 38178:tid 38252] [client 158.158.96.39:64930] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mis.php"] [unique_id "acFk7w0axWfXsVvR9udkpQAAAIo"]
[Tue Mar 24 00:06:07.742047 2026] [:error] [pid 38176:tid 38205] [client 158.158.96.39:64919] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mis.php"] [unique_id "acFk70tG4qlh1gvNjuJw4gAAABI"]
[Tue Mar 24 00:06:08.221378 2026] [:error] [pid 38306:tid 38331] [client 158.158.96.39:64896] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acFk8DkL8qwu-hHc6BjlhAAAARc"]
[Tue Mar 24 00:06:08.709163 2026] [:error] [pid 52341:tid 52353] [client 158.158.96.39:65023] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acFk8KPKTBDR2u47Gb073QAAAUo"]
[Tue Mar 24 00:06:09.234531 2026] [:error] [pid 38276:tid 38286] [client 158.158.96.39:64938] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acFk8ZoKGiI-a7oME3IjOwAAAMc"]
[Tue Mar 24 00:06:09.723782 2026] [:error] [pid 38306:tid 38310] [client 158.158.96.39:64918] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acFk8TkL8qwu-hHc6BjljQAAAQI"]
[Tue Mar 24 00:06:10.583652 2026] [:error] [pid 38306:tid 38330] [client 158.158.96.39:64937] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xvs.php"] [unique_id "acFk8jkL8qwu-hHc6BjlkwAAARY"]
[Tue Mar 24 00:06:11.108106 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:64373] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xvs.php"] [unique_id "acFk8zkL8qwu-hHc6BjlmAAAAQo"]
[Tue Mar 24 00:06:11.629920 2026] [:error] [pid 38306:tid 38310] [client 158.158.96.39:64992] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xvs.php"] [unique_id "acFk8zkL8qwu-hHc6BjlnAAAAQI"]
[Tue Mar 24 00:06:12.119465 2026] [:error] [pid 38176:tid 38192] [client 158.158.96.39:64966] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acFk9EtG4qlh1gvNjuJw6AAAAAU"]
[Tue Mar 24 00:06:12.601695 2026] [:error] [pid 38176:tid 38191] [client 158.158.96.39:64335] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acFk9EtG4qlh1gvNjuJw6wAAAAQ"]
[Tue Mar 24 00:06:13.141963 2026] [:error] [pid 38276:tid 38299] [client 158.158.96.39:64324] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acFk9ZoKGiI-a7oME3IjQgAAANQ"]
[Tue Mar 24 00:06:13.621189 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64927] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acFk9aPKTBDR2u47Gb075gAAAUE"]
[Tue Mar 24 00:06:14.628602 2026] [:error] [pid 38276:tid 38303] [client 158.158.96.39:64958] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acFk9poKGiI-a7oME3IjRAAAANg"]
[Tue Mar 24 00:06:15.429218 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Tue Mar 24 00:06:15.731399 2026] [:error] [pid 38306:tid 38312] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Tue Mar 24 00:06:16.247633 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Tue Mar 24 00:06:16.552114 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/com.php
[Tue Mar 24 00:06:16.795052 2026] [:error] [pid 38306:tid 38320] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Mar 24 00:06:17.094825 2026] [:error] [pid 38306:tid 38319] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Tue Mar 24 00:06:17.340590 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Mar 24 00:06:17.590292 2026] [:error] [pid 38306:tid 38324] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Mar 24 00:06:18.076940 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:64331] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Tue Mar 24 00:06:18.402132 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64331] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acFk-jkL8qwu-hHc6BjltAAAARE"]
[Tue Mar 24 00:06:19.078981 2026] [:error] [pid 38178:tid 38247] [client 158.158.96.39:64341] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acFk-w0axWfXsVvR9udktAAAAIU"]
[Tue Mar 24 00:06:19.691996 2026] [:error] [pid 38276:tid 38299] [client 158.158.96.39:64945] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acFk-5oKGiI-a7oME3IjUQAAANQ"]
[Tue Mar 24 00:06:20.734601 2026] [:error] [pid 38306:tid 38313] [client 158.158.96.39:64260] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acFk_DkL8qwu-hHc6BjluwAAAQU"]
[Tue Mar 24 00:06:21.239768 2026] [:error] [pid 38306:tid 38316] [client 158.158.96.39:64953] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acFk_TkL8qwu-hHc6BjlwAAAAQg"]
[Tue Mar 24 00:06:21.722986 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64952] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acFk_TkL8qwu-hHc6BjlxQAAARE"]
[Tue Mar 24 00:06:22.206262 2026] [:error] [pid 38177:tid 38230] [client 158.158.96.39:64915] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acFk_nsYW-_HCI66MukQbQAAAE8"]
[Tue Mar 24 00:06:22.685875 2026] [:error] [pid 38276:tid 38293] [client 158.158.96.39:64934] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acFk_poKGiI-a7oME3IjXAAAAM4"]
[Tue Mar 24 00:06:23.243650 2026] [:error] [pid 38178:tid 38261] [client 158.158.96.39:65016] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wqqs.php"] [unique_id "acFk_w0axWfXsVvR9udkwQAAAJM"]
[Tue Mar 24 00:06:23.769295 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:64898] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wqqs.php"] [unique_id "acFk_6PKTBDR2u47Gb07-wAAAVc"]
[Tue Mar 24 00:06:24.273575 2026] [:error] [pid 38178:tid 38245] [client 158.158.96.39:64264] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wqqs.php"] [unique_id "acFlAA0axWfXsVvR9udkywAAAIM"]
[Tue Mar 24 00:06:24.787861 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64940] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wqqs.php"] [unique_id "acFlADkL8qwu-hHc6BjlzwAAAQ4"]
[Tue Mar 24 00:06:25.354840 2026] [:error] [pid 38177:tid 38221] [client 158.158.96.39:63688] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "acFlAXsYW-_HCI66MukQdQAAAEY"]
[Tue Mar 24 00:06:25.875251 2026] [:error] [pid 38176:tid 38194] [client 158.158.96.39:63691] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "acFlAUtG4qlh1gvNjuJw-AAAAAc"]
[Tue Mar 24 00:06:26.360645 2026] [:error] [pid 38178:tid 38255] [client 158.158.96.39:64291] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "acFlAg0axWfXsVvR9udk1wAAAI0"]
[Tue Mar 24 00:06:26.848733 2026] [:error] [pid 38178:tid 38252] [client 158.158.96.39:63702] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "acFlAg0axWfXsVvR9udk2gAAAIo"]
[Tue Mar 24 00:06:27.379371 2026] [:error] [pid 38176:tid 38211] [client 158.158.96.39:64278] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acFlA0tG4qlh1gvNjuJxBgAAABg"]
[Tue Mar 24 00:06:27.909302 2026] [:error] [pid 38177:tid 38220] [client 158.158.96.39:64994] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acFlA3sYW-_HCI66MukQdwAAAEU"]
[Tue Mar 24 00:06:28.427157 2026] [:error] [pid 38178:tid 38265] [client 158.158.96.39:64279] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acFlBA0axWfXsVvR9udk3gAAAJc"]
[Tue Mar 24 00:06:28.929533 2026] [:error] [pid 38176:tid 38203] [client 158.158.96.39:64328] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acFlBEtG4qlh1gvNjuJxCAAAABA"]
[Tue Mar 24 00:06:29.458752 2026] [:error] [pid 38176:tid 38194] [client 158.158.96.39:64372] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acFlBUtG4qlh1gvNjuJxCQAAAAc"]
[Tue Mar 24 00:06:29.968106 2026] [:error] [pid 38306:tid 38308] [client 158.158.96.39:64943] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acFlBTkL8qwu-hHc6Bjl1QAAAQA"]
[Tue Mar 24 00:06:30.477134 2026] [:error] [pid 38306:tid 38331] [client 158.158.96.39:64316] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acFlBjkL8qwu-hHc6Bjl2QAAARc"]
[Tue Mar 24 00:06:31.015176 2026] [:error] [pid 38306:tid 38320] [client 158.158.96.39:64336] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acFlBzkL8qwu-hHc6Bjl2wAAAQw"]
[Tue Mar 24 00:06:31.497482 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64256] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acFlB0tG4qlh1gvNjuJxFAAAAAw"]
[Tue Mar 24 00:06:32.002893 2026] [:error] [pid 38276:tid 38303] [client 158.158.96.39:64379] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acFlCJoKGiI-a7oME3IjcwAAANg"]
[Tue Mar 24 00:06:32.559825 2026] [:error] [pid 38176:tid 38190] [client 158.158.96.39:64354] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acFlCEtG4qlh1gvNjuJxHAAAAAM"]
[Tue Mar 24 00:06:33.050491 2026] [:error] [pid 38176:tid 38205] [client 158.158.96.39:64977] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acFlCUtG4qlh1gvNjuJxHwAAABI"]
[Tue Mar 24 00:06:33.568174 2026] [:error] [pid 38276:tid 38301] [client 158.158.96.39:64957] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acFlCZoKGiI-a7oME3IjfAAAANY"]
[Tue Mar 24 00:06:34.238526 2026] [:error] [pid 38276:tid 38294] [client 158.158.96.39:64905] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acFlCpoKGiI-a7oME3IjgAAAAM8"]
[Tue Mar 24 00:06:34.793505 2026] [:error] [pid 38306:tid 38325] [client 158.158.96.39:64910] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acFlCjkL8qwu-hHc6Bjl5QAAARE"]
[Tue Mar 24 00:06:35.339435 2026] [:error] [pid 38176:tid 38206] [client 158.158.96.39:64317] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acFlC0tG4qlh1gvNjuJxKAAAABM"]
[Tue Mar 24 00:06:35.922902 2026] [:error] [pid 52341:tid 52347] [client 158.158.96.39:64314] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acFlC6PKTBDR2u47Gb08AwAAAUQ"]
[Tue Mar 24 00:06:38.700497 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64381] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acFlDktG4qlh1gvNjuJxMwAAAAw"]
[Tue Mar 24 00:06:39.764149 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:65004] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acFlD6PKTBDR2u47Gb08DwAAAVg"]
[Tue Mar 24 00:06:40.409878 2026] [:error] [pid 38306:tid 38324] [client 158.158.96.39:64284] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acFlEDkL8qwu-hHc6Bjl9wAAARA"]
[Tue Mar 24 00:06:40.910298 2026] [:error] [pid 38306:tid 38329] [client 158.158.96.39:64357] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFlEDkL8qwu-hHc6Bjl-QAAARU"]
[Tue Mar 24 00:06:41.688808 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:63629] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFlEaPKTBDR2u47Gb08HQAAAUU"]
[Tue Mar 24 00:06:42.277896 2026] [:error] [pid 52341:tid 52351] [client 158.158.96.39:64376] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFlEqPKTBDR2u47Gb08IwAAAUg"]
[Tue Mar 24 00:06:42.821646 2026] [:error] [pid 52341:tid 52346] [client 158.158.96.39:64332] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acFlEqPKTBDR2u47Gb08JwAAAUM"]
[Tue Mar 24 00:06:43.354626 2026] [:error] [pid 38306:tid 38317] [client 158.158.96.39:65006] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFlEzkL8qwu-hHc6Bjl_wAAAQk"]
[Tue Mar 24 00:06:43.968691 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64939] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFlEzkL8qwu-hHc6BjmBAAAAQ4"]
[Tue Mar 24 00:06:44.486325 2026] [:error] [pid 38276:tid 38295] [client 158.158.96.39:65010] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFlFJoKGiI-a7oME3IjiAAAANA"]
[Tue Mar 24 00:06:44.990450 2026] [:error] [pid 38306:tid 38327] [client 158.158.96.39:64265] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acFlFDkL8qwu-hHc6BjmCwAAARM"]
[Tue Mar 24 00:06:45.477475 2026] [:error] [pid 38178:tid 38264] [client 158.158.96.39:64946] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "acFlFQ0axWfXsVvR9udk6wAAAJY"]
[Tue Mar 24 00:06:46.071871 2026] [:error] [pid 38178:tid 38247] [client 158.158.96.39:63684] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "acFlFg0axWfXsVvR9udk7gAAAIU"]
[Tue Mar 24 00:06:46.594811 2026] [:error] [pid 38177:tid 38227] [client 158.158.96.39:63699] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "acFlFnsYW-_HCI66MukQkQAAAEw"]
[Tue Mar 24 00:06:47.187343 2026] [:error] [pid 38177:tid 38228] [client 158.158.96.39:64333] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "acFlF3sYW-_HCI66MukQkgAAAE0"]
[Tue Mar 24 00:06:47.775766 2026] [:error] [pid 38276:tid 38298] [client 158.158.96.39:64980] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "acFlF5oKGiI-a7oME3IjkAAAANM"]
[Tue Mar 24 00:06:48.301828 2026] [:error] [pid 38178:tid 38250] [client 158.158.96.39:64334] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "acFlGA0axWfXsVvR9udk8gAAAIg"]
[Tue Mar 24 00:06:49.084540 2026] [:error] [pid 38178:tid 38255] [client 158.158.96.39:64311] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "acFlGQ0axWfXsVvR9udk9AAAAI0"]
[Tue Mar 24 00:06:49.593758 2026] [:error] [pid 38176:tid 38189] [client 158.158.96.39:64989] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "acFlGUtG4qlh1gvNjuJxQQAAAAI"]
[Tue Mar 24 00:06:50.102065 2026] [:error] [pid 38276:tid 38289] [client 158.158.96.39:65005] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acFlGpoKGiI-a7oME3IjlwAAAMo"]
[Tue Mar 24 00:06:50.634391 2026] [:error] [pid 38177:tid 38226] [client 158.158.96.39:64258] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acFlGnsYW-_HCI66MukQlgAAAEs"]
[Tue Mar 24 00:06:51.519738 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64343] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acFlGzkL8qwu-hHc6BjmFQAAAQM"]
[Tue Mar 24 00:06:52.070252 2026] [:error] [pid 38176:tid 38199] [client 158.158.96.39:64955] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acFlHEtG4qlh1gvNjuJxSwAAAAw"]
[Tue Mar 24 00:06:52.660349 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:64975] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acFlHKPKTBDR2u47Gb08NwAAAVc"]
[Tue Mar 24 00:06:53.146218 2026] [:error] [pid 38178:tid 38247] [client 158.158.96.39:64358] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acFlHQ0axWfXsVvR9udk_AAAAIU"]
[Tue Mar 24 00:06:53.628591 2026] [:error] [pid 38176:tid 38200] [client 158.158.96.39:64275] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acFlHUtG4qlh1gvNjuJxUAAAAA0"]
[Tue Mar 24 00:06:54.118400 2026] [:error] [pid 38178:tid 38242] [client 158.158.96.39:64277] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acFlHg0axWfXsVvR9udk_wAAAIA"]
[Tue Mar 24 00:06:54.621168 2026] [:error] [pid 38177:tid 38224] [client 158.158.96.39:63728] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acFlHnsYW-_HCI66MukQnAAAAEk"]
[Tue Mar 24 00:06:55.101428 2026] [:error] [pid 38177:tid 38233] [client 158.158.96.39:64369] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acFlH3sYW-_HCI66MukQngAAAFI"]
[Tue Mar 24 00:06:55.594283 2026] [:error] [pid 52341:tid 52360] [client 158.158.96.39:64911] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acFlH6PKTBDR2u47Gb08RAAAAVE"]
[Tue Mar 24 00:06:56.138346 2026] [:error] [pid 38276:tid 38287] [client 158.158.96.39:64906] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acFlIJoKGiI-a7oME3IjoQAAAMg"]
[Tue Mar 24 00:06:56.663814 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:64964] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acFlIKPKTBDR2u47Gb08RwAAAVA"]
[Tue Mar 24 00:06:57.242149 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:64285] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acFlIaPKTBDR2u47Gb08SAAAAUU"]
[Tue Mar 24 00:06:57.726777 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:64954] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acFlIUtG4qlh1gvNjuJxVQAAAAk"]
[Tue Mar 24 00:06:58.239557 2026] [:error] [pid 38176:tid 38187] [client 158.158.96.39:64293] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acFlIktG4qlh1gvNjuJxVwAAAAA"]
[Tue Mar 24 00:06:58.742880 2026] [:error] [pid 38306:tid 38332] [client 158.158.96.39:64294] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFlIjkL8qwu-hHc6BjmIQAAARg"]
[Tue Mar 24 00:06:59.335047 2026] [:error] [pid 38306:tid 38321] [client 158.158.96.39:64899] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFlIzkL8qwu-hHc6BjmIwAAAQ0"]
[Tue Mar 24 00:06:59.892927 2026] [:error] [pid 38178:tid 38248] [client 158.158.96.39:64362] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFlIw0axWfXsVvR9udlAwAAAIY"]
[Tue Mar 24 00:07:00.378017 2026] [:error] [pid 38178:tid 38266] [client 158.158.96.39:64947] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acFlJA0axWfXsVvR9udlBAAAAJg"]
[Tue Mar 24 00:07:00.862780 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:65000] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acFlJKPKTBDR2u47Gb08TwAAAVc"]
[Tue Mar 24 00:07:01.370603 2026] [:error] [pid 52341:tid 52355] [client 158.158.96.39:64900] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acFlJaPKTBDR2u47Gb08VAAAAUw"]
[Tue Mar 24 00:07:01.923766 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:64338] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acFlJaPKTBDR2u47Gb08WAAAAUs"]
[Tue Mar 24 00:07:02.409522 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:64312] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acFlJqPKTBDR2u47Gb08WwAAAVc"]
[Tue Mar 24 00:07:02.947116 2026] [:error] [pid 38276:tid 38301] [client 158.158.96.39:63682] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acFlJpoKGiI-a7oME3IjsAAAANY"]
[Tue Mar 24 00:07:03.455188 2026] [:error] [pid 38306:tid 38315] [client 158.158.96.39:64322] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acFlJzkL8qwu-hHc6BjmJwAAAQc"]
[Tue Mar 24 00:07:03.950635 2026] [:error] [pid 38306:tid 38331] [client 158.158.96.39:65019] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acFlJzkL8qwu-hHc6BjmKAAAARc"]
[Tue Mar 24 00:07:04.434270 2026] [:error] [pid 38176:tid 38193] [client 158.158.96.39:63695] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acFlKEtG4qlh1gvNjuJxYAAAAAY"]
[Tue Mar 24 00:07:04.982057 2026] [:error] [pid 38176:tid 38201] [client 158.158.96.39:64288] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acFlKEtG4qlh1gvNjuJxYgAAAA4"]
[Tue Mar 24 00:07:05.508107 2026] [:error] [pid 38176:tid 38208] [client 158.158.96.39:64339] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acFlKUtG4qlh1gvNjuJxZgAAABU"]
[Tue Mar 24 00:07:06.066675 2026] [:error] [pid 52341:tid 52354] [client 158.158.96.39:64346] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acFlKqPKTBDR2u47Gb08YAAAAUs"]
[Tue Mar 24 00:07:06.687121 2026] [:error] [pid 38178:tid 38254] [client 158.158.96.39:64299] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acFlKg0axWfXsVvR9udlCgAAAIw"]
[Tue Mar 24 00:07:07.416304 2026] [:error] [pid 38306:tid 38330] [client 158.158.96.39:63657] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acFlKzkL8qwu-hHc6BjmLgAAARY"]
[Tue Mar 24 00:07:07.989281 2026] [:error] [pid 38306:tid 38326] [client 158.158.96.39:64366] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acFlKzkL8qwu-hHc6BjmMQAAARI"]
[Tue Mar 24 00:07:08.589613 2026] [:error] [pid 38306:tid 38309] [client 158.158.96.39:64269] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acFlLDkL8qwu-hHc6BjmNwAAAQE"]
[Tue Mar 24 00:07:09.197664 2026] [:error] [pid 38306:tid 38308] [client 158.158.96.39:64917] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acFlLTkL8qwu-hHc6BjmOgAAAQA"]
[Tue Mar 24 00:07:09.734449 2026] [:error] [pid 52341:tid 52361] [client 158.158.96.39:64923] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acFlLaPKTBDR2u47Gb08YgAAAVI"]
[Tue Mar 24 00:07:10.283839 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:64352] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acFlLjkL8qwu-hHc6BjmQwAAARQ"]
[Tue Mar 24 00:07:10.787327 2026] [:error] [pid 38177:tid 38238] [client 158.158.96.39:64383] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acFlLnsYW-_HCI66MukQpgAAAFc"]
[Tue Mar 24 00:07:11.296697 2026] [:error] [pid 38276:tid 38289] [client 158.158.96.39:65017] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acFlL5oKGiI-a7oME3IjwAAAAMo"]
[Tue Mar 24 00:07:11.789808 2026] [:error] [pid 38276:tid 38283] [client 158.158.96.39:63642] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acFlL5oKGiI-a7oME3IjwgAAAMQ"]
[Tue Mar 24 00:07:12.403292 2026] [:error] [pid 38276:tid 38291] [client 158.158.96.39:64331] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acFlMJoKGiI-a7oME3IjxwAAAMw"]
[Tue Mar 24 00:07:12.899633 2026] [:error] [pid 38276:tid 38295] [client 158.158.96.39:64344] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acFlMJoKGiI-a7oME3IjyAAAANA"]
[Tue Mar 24 00:07:13.452077 2026] [:error] [pid 38276:tid 38303] [client 158.158.96.39:63623] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acFlMZoKGiI-a7oME3IjzgAAANg"]
[Tue Mar 24 00:07:14.028017 2026] [:error] [pid 38178:tid 38253] [client 158.158.96.39:63111] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acFlMg0axWfXsVvR9udlDwAAAIs"]
[Tue Mar 24 00:07:14.512802 2026] [:error] [pid 38276:tid 38279] [client 158.158.96.39:65020] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acFlMpoKGiI-a7oME3Ij1wAAAMA"]
[Tue Mar 24 00:07:15.035284 2026] [:error] [pid 38178:tid 38263] [client 158.158.96.39:63713] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acFlMw0axWfXsVvR9udlEgAAAJU"]
[Tue Mar 24 00:07:15.578156 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64914] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acFlM6PKTBDR2u47Gb08ZQAAAUE"]
[Tue Mar 24 00:07:16.142873 2026] [:error] [pid 52341:tid 52356] [client 158.158.96.39:63616] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acFlNKPKTBDR2u47Gb08ZgAAAU0"]
[Tue Mar 24 00:07:16.625097 2026] [:error] [pid 38276:tid 38284] [client 158.158.96.39:63726] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acFlNJoKGiI-a7oME3Ij3gAAAMU"]
[Tue Mar 24 00:07:17.157412 2026] [:error] [pid 38178:tid 38252] [client 158.158.96.39:64305] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acFlNQ0axWfXsVvR9udlEwAAAIo"]
[Tue Mar 24 00:07:17.642412 2026] [:error] [pid 52341:tid 52350] [client 158.158.96.39:64932] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acFlNaPKTBDR2u47Gb08aQAAAUc"]
[Tue Mar 24 00:07:18.189425 2026] [:error] [pid 38276:tid 38293] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Tue Mar 24 00:07:18.431938 2026] [:error] [pid 38276:tid 38287] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Tue Mar 24 00:07:18.676462 2026] [:error] [pid 38276:tid 38303] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Tue Mar 24 00:07:18.919045 2026] [:error] [pid 38276:tid 38302] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/55b76.php
[Tue Mar 24 00:07:19.162877 2026] [:error] [pid 38276:tid 38284] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Tue Mar 24 00:07:19.405125 2026] [:error] [pid 38276:tid 38280] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Tue Mar 24 00:07:19.647156 2026] [:error] [pid 38276:tid 38288] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Tue Mar 24 00:07:19.891103 2026] [:error] [pid 38276:tid 38301] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Tue Mar 24 00:07:20.170575 2026] [:error] [pid 38276:tid 38295] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Tue Mar 24 00:07:20.414369 2026] [:error] [pid 38276:tid 38299] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Tue Mar 24 00:07:20.658809 2026] [:error] [pid 38276:tid 38279] [client 158.158.96.39:64367] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Tue Mar 24 00:07:20.897381 2026] [:error] [pid 38276:tid 38292] [client 158.158.96.39:64367] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acFlOJoKGiI-a7oME3Ij8QAAAM0"]
[Tue Mar 24 00:07:21.426018 2026] [:error] [pid 52341:tid 52349] [client 158.158.96.39:64353] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acFlOaPKTBDR2u47Gb08fAAAAUY"]
[Tue Mar 24 00:07:22.088992 2026] [:error] [pid 52341:tid 52351] [client 158.158.96.39:63627] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acFlOqPKTBDR2u47Gb08hAAAAUg"]
[Tue Mar 24 00:07:22.717576 2026] [:error] [pid 52341:tid 52365] [client 158.158.96.39:64267] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acFlOqPKTBDR2u47Gb08jQAAAVY"]
[Tue Mar 24 00:07:23.304574 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64325] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "acFlOzkL8qwu-hHc6BjmVAAAAQ4"]
[Tue Mar 24 00:07:23.850631 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:64368] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "acFlO6PKTBDR2u47Gb08mAAAAUE"]
[Tue Mar 24 00:07:24.335324 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:64985] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "acFlPKPKTBDR2u47Gb08nQAAAVA"]
[Tue Mar 24 00:07:24.924599 2026] [:error] [pid 52341:tid 52364] [client 158.158.96.39:64297] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "acFlPKPKTBDR2u47Gb08pAAAAVU"]
[Tue Mar 24 00:07:25.672539 2026] [:error] [pid 52341:tid 52365] [client 158.158.96.39:64965] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acFlPaPKTBDR2u47Gb08rwAAAVY"]
[Tue Mar 24 00:07:26.553566 2026] [:error] [pid 38178:tid 38244] [client 158.158.96.39:64949] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acFlPg0axWfXsVvR9udlHQAAAII"]
[Tue Mar 24 00:07:27.310586 2026] [:error] [pid 38176:tid 38202] [client 158.158.96.39:64986] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acFlP0tG4qlh1gvNjuJxiQAAAA8"]
[Tue Mar 24 00:07:27.894368 2026] [:error] [pid 38276:tid 38300] [client 158.158.96.39:64266] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acFlP5oKGiI-a7oME3Ij9wAAANU"]
[Tue Mar 24 00:07:28.571163 2026] [:error] [pid 38177:tid 38228] [client 158.158.96.39:63721] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "acFlQHsYW-_HCI66MukQsAAAAE0"]
[Tue Mar 24 00:07:29.166310 2026] [:error] [pid 38177:tid 38221] [client 158.158.96.39:64935] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "acFlQXsYW-_HCI66MukQswAAAEY"]
[Tue Mar 24 00:07:29.752093 2026] [:error] [pid 38306:tid 38310] [client 158.158.96.39:64280] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "acFlQTkL8qwu-hHc6BjmaAAAAQI"]
[Tue Mar 24 00:07:30.288552 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:64268] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "acFlQktG4qlh1gvNjuJxjwAAAAk"]
[Tue Mar 24 00:07:30.790130 2026] [:error] [pid 38176:tid 38209] [client 158.158.96.39:64361] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acFlQktG4qlh1gvNjuJxkQAAABY"]
[Tue Mar 24 00:07:31.299922 2026] [:error] [pid 38176:tid 38207] [client 158.158.96.39:64363] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acFlQ0tG4qlh1gvNjuJxmAAAABQ"]
[Tue Mar 24 00:07:31.878384 2026] [:error] [pid 52341:tid 52344] [client 158.158.96.39:63734] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acFlQ6PKTBDR2u47Gb08vAAAAUE"]
[Tue Mar 24 00:07:32.382167 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:64951] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acFlREtG4qlh1gvNjuJxngAAAAk"]
[Tue Mar 24 00:07:32.979791 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:64303] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acFlRKPKTBDR2u47Gb08xwAAAUU"]
[Tue Mar 24 00:07:33.474175 2026] [:error] [pid 52341:tid 52361] [client 158.158.96.39:64912] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acFlRaPKTBDR2u47Gb08zwAAAVI"]
[Tue Mar 24 00:07:33.989644 2026] [:error] [pid 52341:tid 52355] [client 158.158.96.39:63620] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acFlRaPKTBDR2u47Gb081QAAAUw"]
[Tue Mar 24 00:07:34.635146 2026] [:error] [pid 38276:tid 38301] [client 158.158.96.39:63687] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acFlRpoKGiI-a7oME3IkCAAAANY"]
[Tue Mar 24 00:07:44.345317 2026] [:error] [pid 38306:tid 38328] [client 158.158.96.39:64263] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acFlUDkL8qwu-hHc6BjmjgAAARQ"]
[Tue Mar 24 00:07:45.223039 2026] [:error] [pid 38306:tid 38331] [client 158.158.96.39:64967] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acFlUTkL8qwu-hHc6BjmkwAAARc"]
[Tue Mar 24 00:07:45.836646 2026] [:error] [pid 38306:tid 38326] [client 158.158.96.39:63717] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acFlUTkL8qwu-hHc6BjmlwAAARI"]
[Tue Mar 24 00:07:46.331872 2026] [:error] [pid 38176:tid 38203] [client 158.158.96.39:63741] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acFlUktG4qlh1gvNjuJxwwAAABA"]
[Tue Mar 24 00:07:46.815936 2026] [:error] [pid 38176:tid 38209] [client 158.158.96.39:64345] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acFlUktG4qlh1gvNjuJxxQAAABY"]
[Tue Mar 24 00:07:47.298694 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64308] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acFlU6PKTBDR2u47Gb088QAAAU8"]
[Tue Mar 24 00:07:47.820928 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:64340] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acFlU6PKTBDR2u47Gb089gAAAVA"]
[Tue Mar 24 00:07:48.317177 2026] [:error] [pid 38176:tid 38211] [client 158.158.96.39:63722] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acFlVEtG4qlh1gvNjuJxywAAABg"]
[Tue Mar 24 00:07:48.851044 2026] [:error] [pid 52341:tid 52358] [client 158.158.96.39:64961] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acFlVKPKTBDR2u47Gb08_gAAAU8"]
[Tue Mar 24 00:07:49.352611 2026] [:error] [pid 52341:tid 52361] [client 158.158.96.39:64365] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acFlVaPKTBDR2u47Gb09BQAAAVI"]
[Tue Mar 24 00:07:49.968013 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:63705] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acFlVaPKTBDR2u47Gb09CQAAAVg"]
[Tue Mar 24 00:07:50.558322 2026] [:error] [pid 38306:tid 38317] [client 158.158.96.39:64997] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acFlVjkL8qwu-hHc6BjmngAAAQk"]
[Tue Mar 24 00:07:51.153090 2026] [:error] [pid 38176:tid 38204] [client 158.158.96.39:63707] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acFlV0tG4qlh1gvNjuJxzgAAABE"]
[Tue Mar 24 00:07:51.699749 2026] [:error] [pid 38177:tid 38229] [client 158.158.96.39:64349] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acFlV3sYW-_HCI66MukQxQAAAE4"]
[Tue Mar 24 00:07:52.398085 2026] [:error] [pid 38177:tid 38233] [client 158.158.96.39:64286] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acFlWHsYW-_HCI66MukQxwAAAFI"]
[Tue Mar 24 00:07:52.902854 2026] [:error] [pid 38178:tid 38250] [client 158.158.96.39:63669] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acFlWA0axWfXsVvR9udlVAAAAIg"]
[Tue Mar 24 00:07:53.454373 2026] [:error] [pid 38178:tid 38254] [client 158.158.96.39:64261] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acFlWQ0axWfXsVvR9udlWwAAAIw"]
[Tue Mar 24 00:07:53.950760 2026] [:error] [pid 52341:tid 52343] [client 158.158.96.39:64375] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acFlWaPKTBDR2u47Gb09DwAAAUA"]
[Tue Mar 24 00:07:54.447495 2026] [:error] [pid 38177:tid 38235] [client 158.158.96.39:63679] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acFlWnsYW-_HCI66MukQzAAAAFQ"]
[Tue Mar 24 00:07:54.986946 2026] [:error] [pid 38177:tid 38239] [client 158.158.96.39:63710] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acFlWnsYW-_HCI66MukQ0AAAAFg"]
[Tue Mar 24 00:07:55.472616 2026] [:error] [pid 38177:tid 38221] [client 158.158.96.39:64274] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFlW3sYW-_HCI66MukQ0wAAAEY"]
[Tue Mar 24 00:07:55.985046 2026] [:error] [pid 52341:tid 52363] [client 158.158.96.39:63631] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFlW6PKTBDR2u47Gb09EQAAAVQ"]
[Tue Mar 24 00:07:56.578474 2026] [:error] [pid 38276:tid 38303] [client 158.158.96.39:63630] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFlXJoKGiI-a7oME3IkOQAAANg"]
[Tue Mar 24 00:07:57.165645 2026] [:error] [pid 38276:tid 38283] [client 158.158.96.39:64360] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acFlXZoKGiI-a7oME3IkOgAAAMQ"]
[Tue Mar 24 00:07:57.844465 2026] [:error] [pid 38276:tid 38297] [client 158.158.96.39:63065] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acFlXZoKGiI-a7oME3IkPQAAANI"]
[Tue Mar 24 00:07:58.364178 2026] [:error] [pid 38276:tid 38298] [client 158.158.96.39:64370] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acFlXpoKGiI-a7oME3IkQgAAANM"]
[Tue Mar 24 00:07:58.904992 2026] [:error] [pid 52341:tid 52357] [client 158.158.96.39:63712] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acFlXqPKTBDR2u47Gb09GgAAAU4"]
[Tue Mar 24 00:07:59.434593 2026] [:error] [pid 38177:tid 38238] [client 158.158.96.39:63638] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acFlX3sYW-_HCI66MukQ1wAAAFc"]
[Tue Mar 24 00:07:59.921492 2026] [:error] [pid 52341:tid 52349] [client 158.158.96.39:64295] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "acFlX6PKTBDR2u47Gb09IAAAAUY"]
[Tue Mar 24 00:08:00.414952 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:64901] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "acFlYKPKTBDR2u47Gb09JgAAAVg"]
[Tue Mar 24 00:08:00.909146 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:64380] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "acFlYDkL8qwu-hHc6BjmrQAAAQM"]
[Tue Mar 24 00:08:01.427093 2026] [:error] [pid 38306:tid 38322] [client 158.158.96.39:64306] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "acFlYTkL8qwu-hHc6BjmsgAAAQ4"]
[Tue Mar 24 00:08:01.963780 2026] [:error] [pid 38306:tid 38318] [client 158.158.96.39:63625] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acFlYTkL8qwu-hHc6BjmtgAAAQo"]
[Tue Mar 24 00:08:02.451349 2026] [:error] [pid 38177:tid 38218] [client 158.158.96.39:63700] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acFlYnsYW-_HCI66MukQ2gAAAEM"]
[Tue Mar 24 00:08:02.946404 2026] [:error] [pid 38178:tid 38246] [client 158.158.96.39:63711] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acFlYg0axWfXsVvR9udlbgAAAIQ"]
[Tue Mar 24 00:08:03.431088 2026] [:error] [pid 38176:tid 38197] [client 158.158.96.39:63690] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acFlY0tG4qlh1gvNjuJx1gAAAAo"]
[Tue Mar 24 00:08:03.910518 2026] [:error] [pid 38176:tid 38196] [client 158.158.96.39:63703] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acFlY0tG4qlh1gvNjuJx2AAAAAk"]
[Tue Mar 24 00:08:04.396957 2026] [:error] [pid 52341:tid 52357] [client 158.158.96.39:63635] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acFlZKPKTBDR2u47Gb09JwAAAU4"]
[Tue Mar 24 00:08:04.980777 2026] [:error] [pid 38177:tid 38239] [client 158.158.96.39:64309] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acFlZHsYW-_HCI66MukQ9QAAAFg"]
[Tue Mar 24 00:08:05.518338 2026] [:error] [pid 38177:tid 38220] [client 158.158.96.39:64310] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acFlZXsYW-_HCI66MukQ_gAAAEU"]
[Tue Mar 24 00:08:06.005563 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:64348] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acFlZqPKTBDR2u47Gb09LAAAAVA"]
[Tue Mar 24 00:08:06.489893 2026] [:error] [pid 38276:tid 38302] [client 158.158.96.39:63693] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acFlZpoKGiI-a7oME3IkYgAAANc"]
[Tue Mar 24 00:08:07.036840 2026] [:error] [pid 52341:tid 52355] [client 158.158.96.39:63706] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acFlZ6PKTBDR2u47Gb09LQAAAUw"]
[Tue Mar 24 00:08:07.541076 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:64959] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acFlZ6PKTBDR2u47Gb09MQAAAVg"]
[Tue Mar 24 00:08:08.044847 2026] [:error] [pid 52341:tid 52353] [client 158.158.96.39:64351] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acFlaKPKTBDR2u47Gb09NgAAAUo"]
[Tue Mar 24 00:08:08.590446 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:63636] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acFlaKPKTBDR2u47Gb09OQAAAVA"]
[Tue Mar 24 00:08:09.091811 2026] [:error] [pid 38178:tid 38265] [client 158.158.96.39:63737] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acFlaQ0axWfXsVvR9udldwAAAJc"]
[Tue Mar 24 00:08:09.585458 2026] [:error] [pid 38176:tid 38209] [client 158.158.96.39:64900] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acFlaUtG4qlh1gvNjuJx5AAAABY"]
[Tue Mar 24 00:08:10.120026 2026] [:error] [pid 38177:tid 38226] [client 158.158.96.39:64371] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acFlansYW-_HCI66MukRBQAAAEs"]
[Tue Mar 24 00:08:10.608115 2026] [:error] [pid 38276:tid 38285] [client 158.158.96.39:64296] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acFlapoKGiI-a7oME3IkawAAAMY"]
[Tue Mar 24 00:08:11.139389 2026] [:error] [pid 38306:tid 38311] [client 158.158.96.39:63708] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acFlazkL8qwu-hHc6BjmywAAAQM"]
[Tue Mar 24 00:08:11.628593 2026] [:error] [pid 38306:tid 38324] [client 158.158.96.39:64374] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acFlazkL8qwu-hHc6BjmzQAAARA"]
[Tue Mar 24 00:08:12.108183 2026] [:error] [pid 52341:tid 52367] [client 158.158.96.39:64976] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acFlbKPKTBDR2u47Gb09PAAAAVg"]
[Tue Mar 24 00:08:12.680668 2026] [:error] [pid 52341:tid 52353] [client 158.158.96.39:64378] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acFlbKPKTBDR2u47Gb09QQAAAUo"]
[Tue Mar 24 00:08:13.198331 2026] [:error] [pid 38176:tid 38191] [client 158.158.96.39:64902] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acFlbUtG4qlh1gvNjuJx7AAAAAQ"]
[Tue Mar 24 00:08:13.681465 2026] [:error] [pid 38176:tid 38202] [client 158.158.96.39:64356] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acFlbUtG4qlh1gvNjuJx7gAAAA8"]
[Tue Mar 24 00:08:14.453018 2026] [:error] [pid 38176:tid 38193] [client 158.158.96.39:63639] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acFlbktG4qlh1gvNjuJx8wAAAAY"]
[Tue Mar 24 00:08:14.951251 2026] [:error] [pid 38276:tid 38302] [client 158.158.96.39:63725] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acFlbpoKGiI-a7oME3IkbwAAANc"]
[Tue Mar 24 00:08:15.482827 2026] [:error] [pid 38276:tid 38296] [client 158.158.96.39:64979] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acFlb5oKGiI-a7oME3IkcQAAANE"]
[Tue Mar 24 00:08:16.085063 2026] [:error] [pid 38306:tid 38313] [client 158.158.96.39:64973] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acFlcDkL8qwu-hHc6Bjm1gAAAQU"]
[Tue Mar 24 00:08:16.584460 2026] [:error] [pid 38306:tid 38324] [client 158.158.96.39:64272] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acFlcDkL8qwu-hHc6Bjm2wAAARA"]
[Tue Mar 24 00:08:17.236164 2026] [:error] [pid 38178:tid 38261] [client 158.158.96.39:63732] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acFlcQ0axWfXsVvR9udlfAAAAJM"]
[Tue Mar 24 00:08:17.723515 2026] [:error] [pid 38176:tid 38208] [client 158.158.96.39:64972] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acFlcUtG4qlh1gvNjuJx-QAAABU"]
[Tue Mar 24 00:08:18.215187 2026] [:error] [pid 38276:tid 38297] [client 158.158.96.39:63618] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acFlcpoKGiI-a7oME3IkcwAAANI"]
[Tue Mar 24 00:08:18.763038 2026] [:error] [pid 52341:tid 52348] [client 158.158.96.39:63675] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acFlcqPKTBDR2u47Gb09SgAAAUU"]
[Tue Mar 24 00:08:19.255656 2026] [:error] [pid 52341:tid 52355] [client 158.158.96.39:63685] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acFlc6PKTBDR2u47Gb09SwAAAUw"]
[Tue Mar 24 00:08:19.742080 2026] [:error] [pid 38276:tid 38281] [client 158.158.96.39:63617] [client 158.158.96.39] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acFlc5oKGiI-a7oME3IkeAAAAMI"]
[Tue Mar 24 00:08:20.224953 2026] [:error] [pid 52341:tid 52351] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/phina.php
[Tue Mar 24 00:08:20.468565 2026] [:error] [pid 52341:tid 52353] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Tue Mar 24 00:08:20.713308 2026] [:error] [pid 52341:tid 52366] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/rovoj.php
[Tue Mar 24 00:08:20.957036 2026] [:error] [pid 52341:tid 52345] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Tue Mar 24 00:08:21.200013 2026] [:error] [pid 52341:tid 52346] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/phpmini.php
[Tue Mar 24 00:08:21.443975 2026] [:error] [pid 52341:tid 52360] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/caiij.php
[Tue Mar 24 00:08:21.686513 2026] [:error] [pid 52341:tid 52356] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Tue Mar 24 00:08:21.930270 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:63686] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Tue Mar 24 00:08:22.735343 2026] [:error] [pid 52341:tid 52359] [client 158.158.96.39:63686] [client 158.158.96.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/app.php"] [unique_id "acFldqPKTBDR2u47Gb09WAAAAVA"]
[Tue Mar 24 00:42:40.379262 2026] [:error] [pid 56435:tid 56511] [client 117.33.163.216:58200] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acFtgMrwr-l5A-s9ryBY8wAAAQs"]
[Tue Mar 24 01:02:18.798292 2026] [:error] [pid 56435:tid 56509] [client 5.102.25.73:48345] [client 5.102.25.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.102.25.73, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acFyGsrwr-l5A-s9ryBq6AAAAQk"]
[Tue Mar 24 01:02:18.805463 2026] [:error] [pid 56435:tid 56509] [client 5.102.25.73:48345] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 02:50:30.604571 2026] [:error] [pid 31798:tid 31817] [client 43.159.132.207:48016] [client 43.159.132.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acGLdndtW_1bksndFbZliQAAABE"]
[Tue Mar 24 03:24:47.497332 2026] [:error] [pid 63866:tid 63873] [client 169.224.36.21:54778] [client 169.224.36.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.224.36.21, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acGTfywN6T6i83an-iIpMQAAAMU"]
[Tue Mar 24 03:24:47.503357 2026] [:error] [pid 63866:tid 63873] [client 169.224.36.21:54778] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 03:25:06.501549 2026] [:error] [pid 64171:tid 64188] [client 45.117.243.251:53465] [client 45.117.243.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.117.243.251, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acGTkh0mdUUPzZ76mlYaFAAAAQ8"]
[Tue Mar 24 03:25:06.506963 2026] [:error] [pid 64171:tid 64188] [client 45.117.243.251:53465] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 07:28:33.391262 2026] [:error] [pid 38767:tid 38794] [client 203.2.64.59:45158] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acHMofwkUqN4GJAI5oWgagAAARg"]
[Tue Mar 24 08:44:44.231044 2026] [:error] [pid 38767:tid 38780] [client 49.51.203.164:47672] [client 49.51.203.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acHefPwkUqN4GJAI5oW5-AAAAQo"]
[Tue Mar 24 09:02:47.390407 2026] [:error] [pid 3030:tid 3052] [client 185.223.152.144:42773] [client 185.223.152.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.144, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acHitwyOuILyynfcqfkW_AAAAAM"]
[Tue Mar 24 09:02:47.398255 2026] [:error] [pid 3030:tid 3052] [client 185.223.152.144:42773] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 24 11:01:08.707841 2026] [:error] [pid 48219:tid 48302] [client 43.163.206.70:48702] [client 43.163.206.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acH-dChf3b4R_lAIyv_7OAAAAhU"]
[Tue Mar 24 11:54:44.936410 2026] [:error] [pid 3032:tid 3109] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Tue Mar 24 11:54:45.179313 2026] [:error] [pid 3032:tid 3119] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Tue Mar 24 11:54:45.423895 2026] [:error] [pid 3032:tid 3110] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Tue Mar 24 11:54:45.696901 2026] [:error] [pid 3032:tid 3116] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Mar 24 11:54:45.936861 2026] [:error] [pid 3032:tid 3117] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Tue Mar 24 11:54:46.234232 2026] [:error] [pid 3032:tid 3105] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Tue Mar 24 11:54:46.541703 2026] [:error] [pid 3032:tid 3115] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Tue Mar 24 11:54:46.985279 2026] [:error] [pid 3032:tid 3113] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Tue Mar 24 11:54:47.225961 2026] [:error] [pid 3032:tid 3104] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Tue Mar 24 11:54:47.465317 2026] [:error] [pid 3032:tid 3118] [client 51.103.44.83:55481] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Tue Mar 24 11:54:47.701384 2026] [:error] [pid 3032:tid 3122] [client 51.103.44.83:55481] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "acILBya_-JXXD03-JNwPQgAAAJM"]
[Tue Mar 24 11:54:49.719905 2026] [:error] [pid 3137:tid 3148] [client 51.103.44.83:49007] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "acILCZdZesutm6dfYM-ZEAAAAMk"]
[Tue Mar 24 11:54:51.665119 2026] [:error] [pid 48219:tid 48284] [client 51.103.44.83:57975] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "acILCyhf3b4R_lAIyv8JzgAAAgM"]
[Tue Mar 24 11:54:53.037451 2026] [:error] [pid 38767:tid 38790] [client 51.103.44.83:46092] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "acILDfwkUqN4GJAI5oUoCAAAARQ"]
[Tue Mar 24 11:54:53.940878 2026] [:error] [pid 64198:tid 64207] [client 51.103.44.83:48981] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "acILDXVzJqf6OS_oSZ25KQAAAUc"]
[Tue Mar 24 11:54:55.095459 2026] [:error] [pid 64198:tid 64204] [client 51.103.44.83:57980] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "acILD3VzJqf6OS_oSZ25KwAAAUQ"]
[Tue Mar 24 11:54:55.710647 2026] [:error] [pid 64198:tid 64211] [client 51.103.44.83:57948] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "acILD3VzJqf6OS_oSZ25LQAAAUs"]
[Tue Mar 24 11:54:56.485357 2026] [:error] [pid 64198:tid 64214] [client 51.103.44.83:49009] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "acILEHVzJqf6OS_oSZ25MgAAAU4"]
[Tue Mar 24 11:54:57.157152 2026] [:error] [pid 64198:tid 64202] [client 51.103.44.83:54875] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acILEXVzJqf6OS_oSZ25NwAAAUI"]
[Tue Mar 24 11:54:57.840492 2026] [:error] [pid 64198:tid 64217] [client 51.103.44.83:64194] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acILEXVzJqf6OS_oSZ25PAAAAVE"]
[Tue Mar 24 11:54:58.878334 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:55467] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acILEnVzJqf6OS_oSZ25QQAAAVc"]
[Tue Mar 24 11:54:59.580441 2026] [:error] [pid 3137:tid 3146] [client 51.103.44.83:57055] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acILE5dZesutm6dfYM-ZFwAAAMc"]
[Tue Mar 24 11:55:00.302694 2026] [:error] [pid 48219:tid 48302] [client 51.103.44.83:48985] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acILFChf3b4R_lAIyv8J4wAAAhU"]
[Tue Mar 24 11:55:00.958368 2026] [:error] [pid 3137:tid 3154] [client 51.103.44.83:62593] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acILFJdZesutm6dfYM-ZHgAAAM8"]
[Tue Mar 24 11:55:01.911701 2026] [:error] [pid 48219:tid 48291] [client 51.103.44.83:63434] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acILFShf3b4R_lAIyv8J5gAAAgo"]
[Tue Mar 24 11:55:02.755802 2026] [:error] [pid 64198:tid 64203] [client 51.103.44.83:57050] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acILFnVzJqf6OS_oSZ25RgAAAUM"]
[Tue Mar 24 11:55:03.327712 2026] [:error] [pid 64198:tid 64208] [client 51.103.44.83:1217] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "acILF3VzJqf6OS_oSZ25TQAAAUg"]
[Tue Mar 24 11:55:03.891718 2026] [:error] [pid 3137:tid 3155] [client 51.103.44.83:57968] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "acILF5dZesutm6dfYM-ZIgAAANA"]
[Tue Mar 24 11:55:04.806022 2026] [:error] [pid 48219:tid 48290] [client 51.103.44.83:1279] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "acILGChf3b4R_lAIyv8KKwAAAgk"]
[Tue Mar 24 11:55:05.385445 2026] [:error] [pid 38767:tid 38788] [client 51.103.44.83:57042] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "acILGfwkUqN4GJAI5oUoXwAAARI"]
[Tue Mar 24 11:55:06.256965 2026] [:error] [pid 38767:tid 38791] [client 51.103.44.83:57086] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acILGvwkUqN4GJAI5oUoYwAAARU"]
[Tue Mar 24 11:55:07.745372 2026] [:error] [pid 38767:tid 38790] [client 51.103.44.83:57937] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acILG_wkUqN4GJAI5oUoZwAAARQ"]
[Tue Mar 24 11:55:08.629019 2026] [:error] [pid 3032:tid 3119] [client 51.103.44.83:57031] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acILHCa_-JXXD03-JNwPSAAAAJA"]
[Tue Mar 24 11:55:09.679017 2026] [:error] [pid 64198:tid 64222] [client 51.103.44.83:46089] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "acILHXVzJqf6OS_oSZ25bwAAAVY"]
[Tue Mar 24 11:55:10.860081 2026] [:error] [pid 64198:tid 64207] [client 51.103.44.83:57932] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acILHnVzJqf6OS_oSZ25cgAAAUc"]
[Tue Mar 24 11:55:11.838741 2026] [:error] [pid 38767:tid 38785] [client 51.103.44.83:54884] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acILH_wkUqN4GJAI5oUofQAAAQ8"]
[Tue Mar 24 11:55:12.910107 2026] [:error] [pid 38767:tid 38792] [client 51.103.44.83:46081] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acILIPwkUqN4GJAI5oUogQAAARY"]
[Tue Mar 24 11:55:14.263317 2026] [:error] [pid 64198:tid 64213] [client 51.103.44.83:55464] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acILInVzJqf6OS_oSZ25jQAAAU0"]
[Tue Mar 24 11:55:15.957936 2026] [:error] [pid 48219:tid 48286] [client 51.103.44.83:48970] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acILIyhf3b4R_lAIyv8KVQAAAgU"]
[Tue Mar 24 11:55:16.645864 2026] [:error] [pid 38767:tid 38790] [client 51.103.44.83:62605] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acILJPwkUqN4GJAI5oUonwAAARQ"]
[Tue Mar 24 11:55:17.471002 2026] [:error] [pid 64198:tid 64203] [client 51.103.44.83:55462] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acILJXVzJqf6OS_oSZ25ngAAAUM"]
[Tue Mar 24 11:55:18.288440 2026] [:error] [pid 64198:tid 64217] [client 51.103.44.83:54909] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acILJnVzJqf6OS_oSZ25owAAAVE"]
[Tue Mar 24 11:55:19.159166 2026] [:error] [pid 48128:tid 48174] [client 51.103.44.83:54866] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acILJ8vR4LIMFLbM5VkNrgAAAZU"]
[Tue Mar 24 11:55:19.832378 2026] [:error] [pid 64198:tid 64203] [client 51.103.44.83:48962] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acILJ3VzJqf6OS_oSZ25pgAAAUM"]
[Tue Mar 24 11:55:20.472273 2026] [:error] [pid 64198:tid 64209] [client 51.103.44.83:57058] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acILKHVzJqf6OS_oSZ25qQAAAUk"]
[Tue Mar 24 11:55:21.138689 2026] [:error] [pid 38767:tid 38792] [client 51.103.44.83:63442] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acILKfwkUqN4GJAI5oUopQAAARY"]
[Tue Mar 24 11:55:21.774190 2026] [:error] [pid 48128:tid 48154] [client 51.103.44.83:57946] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acILKcvR4LIMFLbM5VkNrwAAAYU"]
[Tue Mar 24 11:55:22.382102 2026] [:error] [pid 48214:tid 48259] [client 51.103.44.83:55430] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acILKreshLWZ3uUDHKkaoQAAAcc"]
[Tue Mar 24 11:55:23.043297 2026] [:error] [pid 38767:tid 38788] [client 51.103.44.83:49013] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acILK_wkUqN4GJAI5oUoqAAAARI"]
[Tue Mar 24 11:55:23.653136 2026] [:error] [pid 38767:tid 38793] [client 51.103.44.83:54910] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "acILK_wkUqN4GJAI5oUorAAAARc"]
[Tue Mar 24 11:55:24.569423 2026] [:error] [pid 38767:tid 38794] [client 51.103.44.83:54910] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "acILLPwkUqN4GJAI5oUorgAAARg"]
[Tue Mar 24 11:55:25.450041 2026] [:error] [pid 38767:tid 38786] [client 51.103.44.83:57044] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "acILLfwkUqN4GJAI5oUoswAAARA"]
[Tue Mar 24 11:55:26.674016 2026] [:error] [pid 3031:tid 3098] [client 51.103.44.83:57963] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "acILLqJBKytnG47nuiYRCQAAAFY"]
[Tue Mar 24 11:55:27.379278 2026] [:error] [pid 3032:tid 3113] [client 51.103.44.83:63427] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "acILLya_-JXXD03-JNwPTQAAAIo"]
[Tue Mar 24 11:55:28.131750 2026] [:error] [pid 64198:tid 64209] [client 51.103.44.83:55461] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "acILMHVzJqf6OS_oSZ25vgAAAUk"]
[Tue Mar 24 11:55:29.166631 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:60172] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "acILMXVzJqf6OS_oSZ25zAAAAVc"]
[Tue Mar 24 11:55:30.097611 2026] [:error] [pid 64198:tid 64208] [client 51.103.44.83:48978] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "acILMnVzJqf6OS_oSZ250AAAAUg"]
[Tue Mar 24 11:55:30.791492 2026] [:error] [pid 64198:tid 64202] [client 51.103.44.83:62603] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "acILMnVzJqf6OS_oSZ251AAAAUI"]
[Tue Mar 24 11:55:31.402293 2026] [:error] [pid 3030:tid 3064] [client 51.103.44.83:57944] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acILMwyOuILyynfcqfkpEQAAAA8"]
[Tue Mar 24 11:55:32.331173 2026] [:error] [pid 3137:tid 3145] [client 51.103.44.83:57982] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acILNJdZesutm6dfYM-ZUgAAAMY"]
[Tue Mar 24 11:55:32.926406 2026] [:error] [pid 3137:tid 3162] [client 51.103.44.83:49001] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acILNJdZesutm6dfYM-ZUwAAANc"]
[Tue Mar 24 11:55:33.717455 2026] [:error] [pid 64198:tid 64216] [client 51.103.44.83:62614] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acILNXVzJqf6OS_oSZ252QAAAVA"]
[Tue Mar 24 11:55:34.479985 2026] [:error] [pid 48219:tid 48305] [client 51.103.44.83:55428] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "acILNihf3b4R_lAIyv8KZAAAAhg"]
[Tue Mar 24 11:55:35.250721 2026] [:error] [pid 3137:tid 3152] [client 51.103.44.83:48976] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "acILN5dZesutm6dfYM-ZXAAAAM0"]
[Tue Mar 24 11:55:36.044404 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:57981] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "acILOHVzJqf6OS_oSZ252gAAAVc"]
[Tue Mar 24 11:55:36.683884 2026] [:error] [pid 64198:tid 64220] [client 51.103.44.83:62652] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "acILOHVzJqf6OS_oSZ252wAAAVQ"]
[Tue Mar 24 11:55:37.672661 2026] [:error] [pid 3137:tid 3151] [client 51.103.44.83:62608] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "acILOZdZesutm6dfYM-ZYgAAAMw"]
[Tue Mar 24 11:55:39.091048 2026] [:error] [pid 3137:tid 3150] [client 51.103.44.83:48988] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "acILO5dZesutm6dfYM-ZZQAAAMs"]
[Tue Mar 24 11:55:39.808805 2026] [:error] [pid 64198:tid 64204] [client 51.103.44.83:57077] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "acILO3VzJqf6OS_oSZ253wAAAUQ"]
[Tue Mar 24 11:55:40.620297 2026] [:error] [pid 64198:tid 64213] [client 51.103.44.83:62592] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "acILPHVzJqf6OS_oSZ254gAAAU0"]
[Tue Mar 24 11:55:41.590323 2026] [:error] [pid 64198:tid 64220] [client 51.103.44.83:57967] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acILPXVzJqf6OS_oSZ255gAAAVQ"]
[Tue Mar 24 11:55:42.265055 2026] [:error] [pid 3030:tid 3053] [client 51.103.44.83:55436] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acILPgyOuILyynfcqfkpFgAAAAQ"]
[Tue Mar 24 11:55:42.972178 2026] [:error] [pid 3032:tid 3124] [client 51.103.44.83:54906] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acILPia_-JXXD03-JNwPVAAAAJU"]
[Tue Mar 24 11:55:43.737861 2026] [:error] [pid 38767:tid 38771] [client 51.103.44.83:1221] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acILP_wkUqN4GJAI5oUouwAAAQE"]
[Tue Mar 24 11:55:44.467374 2026] [:error] [pid 3032:tid 3119] [client 51.103.44.83:63455] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acILQCa_-JXXD03-JNwPVgAAAJA"]
[Tue Mar 24 11:55:45.115660 2026] [:error] [pid 3032:tid 3108] [client 51.103.44.83:62596] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acILQSa_-JXXD03-JNwPVwAAAIU"]
[Tue Mar 24 11:55:45.799905 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:57942] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acILQXVzJqf6OS_oSZ258gAAAVc"]
[Tue Mar 24 11:55:46.624589 2026] [:error] [pid 3031:tid 3091] [client 51.103.44.83:63478] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acILQqJBKytnG47nuiYRDQAAAE8"]
[Tue Mar 24 11:55:47.846036 2026] [:error] [pid 38767:tid 38793] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Tue Mar 24 11:55:48.227863 2026] [:error] [pid 38767:tid 38773] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Mar 24 11:55:48.464072 2026] [:error] [pid 38767:tid 38791] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Tue Mar 24 11:55:49.009508 2026] [:error] [pid 38767:tid 38778] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Tue Mar 24 11:55:49.247838 2026] [:error] [pid 38767:tid 38777] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Tue Mar 24 11:55:49.486214 2026] [:error] [pid 38767:tid 38792] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Mar 24 11:55:49.727852 2026] [:error] [pid 38767:tid 38772] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Tue Mar 24 11:55:50.394623 2026] [:error] [pid 38767:tid 38786] [client 51.103.44.83:54870] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Mar 24 11:55:52.143816 2026] [:error] [pid 38767:tid 38782] [client 51.103.44.83:54870] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acILSPwkUqN4GJAI5oUo0QAAAQw"]
[Tue Mar 24 11:55:53.342968 2026] [:error] [pid 3030:tid 3071] [client 51.103.44.83:60185] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acILSQyOuILyynfcqfkpIAAAABY"]
[Tue Mar 24 11:55:54.486034 2026] [:error] [pid 64198:tid 64214] [client 51.103.44.83:63480] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acILSnVzJqf6OS_oSZ26HAAAAU4"]
[Tue Mar 24 11:55:55.559228 2026] [:error] [pid 3031:tid 3095] [client 51.103.44.83:62627] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acILS6JBKytnG47nuiYREAAAAFM"]
[Tue Mar 24 11:55:56.574150 2026] [:error] [pid 48219:tid 48298] [client 51.103.44.83:48992] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acILTChf3b4R_lAIyv8KdgAAAhE"]
[Tue Mar 24 11:55:57.957774 2026] [:error] [pid 3030:tid 3054] [client 51.103.44.83:57061] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acILTQyOuILyynfcqfkpIgAAAAU"]
[Tue Mar 24 11:55:58.860746 2026] [:error] [pid 48214:tid 48256] [client 51.103.44.83:55465] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acILTreshLWZ3uUDHKkarQAAAcQ"]
[Tue Mar 24 11:56:00.840458 2026] [:error] [pid 64198:tid 64218] [client 51.103.44.83:54902] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acILUHVzJqf6OS_oSZ26KAAAAVI"]
[Tue Mar 24 11:56:02.524975 2026] [:error] [pid 48219:tid 48291] [client 51.103.44.83:46080] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acILUihf3b4R_lAIyv8KigAAAgo"]
[Tue Mar 24 11:56:04.455518 2026] [:error] [pid 64198:tid 64213] [client 51.103.44.83:57947] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acILVHVzJqf6OS_oSZ26NQAAAU0"]
[Tue Mar 24 11:56:07.587194 2026] [:error] [pid 64198:tid 64201] [client 51.103.44.83:57066] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acILV3VzJqf6OS_oSZ26TQAAAUE"]
[Tue Mar 24 11:56:08.754195 2026] [:error] [pid 38767:tid 38771] [client 51.103.44.83:62644] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acILWPwkUqN4GJAI5oUo3wAAAQE"]
[Tue Mar 24 11:56:09.580835 2026] [:error] [pid 38767:tid 38779] [client 51.103.44.83:46139] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acILWfwkUqN4GJAI5oUo5gAAAQk"]
[Tue Mar 24 11:56:10.665626 2026] [:error] [pid 3137:tid 3155] [client 51.103.44.83:57026] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acILWpdZesutm6dfYM-ZcgAAANA"]
[Tue Mar 24 11:56:11.605781 2026] [:error] [pid 38767:tid 38790] [client 51.103.44.83:49008] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acILW_wkUqN4GJAI5oUo7QAAARQ"]
[Tue Mar 24 11:56:12.176557 2026] [:error] [pid 38767:tid 38784] [client 51.103.44.83:1180] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acILXPwkUqN4GJAI5oUo7wAAAQ4"]
[Tue Mar 24 11:56:12.864945 2026] [:error] [pid 38767:tid 38792] [client 51.103.44.83:57033] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acILXPwkUqN4GJAI5oUo8wAAARY"]
[Tue Mar 24 11:56:13.993461 2026] [:error] [pid 38767:tid 38773] [client 51.103.44.83:57965] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acILXfwkUqN4GJAI5oUo-gAAAQM"]
[Tue Mar 24 11:56:14.643840 2026] [:error] [pid 38767:tid 38789] [client 51.103.44.83:1262] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acILXvwkUqN4GJAI5oUo_gAAARM"]
[Tue Mar 24 11:56:15.509444 2026] [:error] [pid 38767:tid 38786] [client 51.103.44.83:46117] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acILX_wkUqN4GJAI5oUpAQAAARA"]
[Tue Mar 24 11:56:16.350584 2026] [:error] [pid 48219:tid 48294] [client 51.103.44.83:49000] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acILYChf3b4R_lAIyv8KjwAAAg0"]
[Tue Mar 24 11:56:17.076758 2026] [:error] [pid 3137:tid 3141] [client 51.103.44.83:1603] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acILYZdZesutm6dfYM-ZeAAAAMI"]
[Tue Mar 24 11:56:17.766772 2026] [:error] [pid 3137:tid 3150] [client 51.103.44.83:60221] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acILYZdZesutm6dfYM-ZfAAAAMs"]
[Tue Mar 24 11:56:18.990141 2026] [:error] [pid 48219:tid 48290] [client 51.103.44.83:57972] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acILYihf3b4R_lAIyv8KkgAAAgk"]
[Tue Mar 24 11:56:20.492586 2026] [:error] [pid 3137:tid 3148] [client 51.103.44.83:57067] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "acILZJdZesutm6dfYM-ZgwAAAMk"]
[Tue Mar 24 11:56:21.535945 2026] [:error] [pid 48128:tid 48164] [client 51.103.44.83:46131] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "acILZcvR4LIMFLbM5VkN1wAAAYw"]
[Tue Mar 24 11:56:22.228396 2026] [:error] [pid 38767:tid 38774] [client 51.103.44.83:62630] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "acILZvwkUqN4GJAI5oUpFAAAAQQ"]
[Tue Mar 24 11:56:23.041673 2026] [:error] [pid 3030:tid 3060] [client 51.103.44.83:64228] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "acILZwyOuILyynfcqfkpLQAAAAs"]
[Tue Mar 24 11:56:23.765637 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:46121] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acILZ3VzJqf6OS_oSZ26owAAAVc"]
[Tue Mar 24 11:56:24.871165 2026] [:error] [pid 48219:tid 48288] [client 51.103.44.83:57613] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acILaChf3b4R_lAIyv8KlwAAAgc"]
[Tue Mar 24 11:56:25.619940 2026] [:error] [pid 3032:tid 3118] [client 51.103.44.83:57045] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acILaSa_-JXXD03-JNwPZwAAAI8"]
[Tue Mar 24 11:56:26.772869 2026] [:error] [pid 38767:tid 38787] [client 51.103.44.83:57606] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "acILavwkUqN4GJAI5oUpUwAAARE"]
[Tue Mar 24 11:56:27.489973 2026] [:error] [pid 38767:tid 38770] [client 51.103.44.83:49017] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acILa_wkUqN4GJAI5oUpVQAAAQA"]
[Tue Mar 24 11:56:28.552970 2026] [:error] [pid 48219:tid 48295] [client 51.103.44.83:48974] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acILbChf3b4R_lAIyv8KmQAAAg4"]
[Tue Mar 24 11:56:29.321285 2026] [:error] [pid 3032:tid 3127] [client 51.103.44.83:55426] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acILbSa_-JXXD03-JNwPaQAAAJc"]
[Tue Mar 24 11:56:29.914380 2026] [:error] [pid 48214:tid 48256] [client 51.103.44.83:46097] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acILbbeshLWZ3uUDHKkavAAAAcQ"]
[Tue Mar 24 11:56:30.449865 2026] [:error] [pid 38767:tid 38789] [client 51.103.44.83:64223] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "acILbvwkUqN4GJAI5oUpWgAAARM"]
[Tue Mar 24 11:56:31.152825 2026] [:error] [pid 64198:tid 64207] [client 51.103.44.83:1607] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "acILb3VzJqf6OS_oSZ26tgAAAUc"]
[Tue Mar 24 11:56:31.887202 2026] [:error] [pid 3030:tid 3073] [client 51.103.44.83:55454] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "acILbwyOuILyynfcqfkpfQAAABg"]
[Tue Mar 24 11:56:32.632527 2026] [:error] [pid 64198:tid 64220] [client 51.103.44.83:62633] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "acILcHVzJqf6OS_oSZ26twAAAVQ"]
[Tue Mar 24 11:56:33.540985 2026] [:error] [pid 64198:tid 64202] [client 51.103.44.83:62613] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "acILcXVzJqf6OS_oSZ26ugAAAUI"]
[Tue Mar 24 11:56:34.271737 2026] [:error] [pid 64198:tid 64219] [client 51.103.44.83:55477] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "acILcnVzJqf6OS_oSZ26vAAAAVM"]
[Tue Mar 24 11:56:34.875556 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:1250] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "acILcnVzJqf6OS_oSZ26vgAAAVc"]
[Tue Mar 24 11:56:35.601272 2026] [:error] [pid 64198:tid 64210] [client 51.103.44.83:64247] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "acILc3VzJqf6OS_oSZ26xgAAAUo"]
[Tue Mar 24 11:56:36.361692 2026] [:error] [pid 38767:tid 38781] [client 51.103.44.83:63429] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acILdPwkUqN4GJAI5oUpXQAAAQs"]
[Tue Mar 24 11:56:37.227953 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:63487] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acILdXVzJqf6OS_oSZ26ywAAAVc"]
[Tue Mar 24 11:56:37.929274 2026] [:error] [pid 38767:tid 38793] [client 51.103.44.83:46109] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acILdfwkUqN4GJAI5oUpYgAAARc"]
[Tue Mar 24 11:56:38.620117 2026] [:error] [pid 3137:tid 3139] [client 51.103.44.83:55446] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acILdpdZesutm6dfYM-ZkgAAAMA"]
[Tue Mar 24 11:56:39.339981 2026] [:error] [pid 3032:tid 3107] [client 51.103.44.83:57943] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acILdya_-JXXD03-JNwPbAAAAIQ"]
[Tue Mar 24 11:56:39.949193 2026] [:error] [pid 64198:tid 64208] [client 51.103.44.83:57080] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acILd3VzJqf6OS_oSZ261AAAAUg"]
[Tue Mar 24 11:56:40.817741 2026] [:error] [pid 3137:tid 3159] [client 51.103.44.83:1222] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acILeJdZesutm6dfYM-ZlwAAANQ"]
[Tue Mar 24 11:56:41.489926 2026] [:error] [pid 38767:tid 38771] [client 51.103.44.83:57923] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acILefwkUqN4GJAI5oUpZAAAAQE"]
[Tue Mar 24 11:56:42.141493 2026] [:error] [pid 48214:tid 48260] [client 51.103.44.83:57959] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acILereshLWZ3uUDHKkawAAAAcg"]
[Tue Mar 24 11:56:42.717578 2026] [:error] [pid 64198:tid 64214] [client 51.103.44.83:54880] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acILenVzJqf6OS_oSZ263QAAAU4"]
[Tue Mar 24 11:56:43.475454 2026] [:error] [pid 3137:tid 3154] [client 51.103.44.83:57964] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acILe5dZesutm6dfYM-ZmQAAAM8"]
[Tue Mar 24 11:56:44.354823 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:62620] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acILfHVzJqf6OS_oSZ264gAAAVc"]
[Tue Mar 24 11:56:45.075993 2026] [:error] [pid 64198:tid 64216] [client 51.103.44.83:46135] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acILfXVzJqf6OS_oSZ265QAAAVA"]
[Tue Mar 24 11:56:45.743617 2026] [:error] [pid 64198:tid 64202] [client 51.103.44.83:46088] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acILfXVzJqf6OS_oSZ266AAAAUI"]
[Tue Mar 24 11:56:46.520639 2026] [:error] [pid 38767:tid 38788] [client 51.103.44.83:46100] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acILfvwkUqN4GJAI5oUpbgAAARI"]
[Tue Mar 24 11:56:47.477774 2026] [:error] [pid 38767:tid 38771] [client 51.103.44.83:63433] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acILf_wkUqN4GJAI5oUpcAAAAQE"]
[Tue Mar 24 11:56:48.117846 2026] [:error] [pid 64198:tid 64218] [client 51.103.44.83:62610] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acILgHVzJqf6OS_oSZ268AAAAVI"]
[Tue Mar 24 11:56:48.962484 2026] [:error] [pid 48128:tid 48176] [client 51.103.44.83:63473] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acILgMvR4LIMFLbM5VkN2gAAAZc"]
[Tue Mar 24 11:56:50.055919 2026] [:error] [pid 64198:tid 64201] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Mar 24 11:56:50.307361 2026] [:error] [pid 64198:tid 64204] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Mar 24 11:56:50.547730 2026] [:error] [pid 64198:tid 64211] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax.php
[Tue Mar 24 11:56:50.816605 2026] [:error] [pid 64198:tid 64208] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue Mar 24 11:56:51.316931 2026] [:error] [pid 64198:tid 64216] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Tue Mar 24 11:56:51.567312 2026] [:error] [pid 64198:tid 64204] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Tue Mar 24 11:56:51.808058 2026] [:error] [pid 64198:tid 64211] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Tue Mar 24 11:56:52.103543 2026] [:error] [pid 64198:tid 64200] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Tue Mar 24 11:56:52.351876 2026] [:error] [pid 64198:tid 64210] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Mar 24 11:56:52.591839 2026] [:error] [pid 64198:tid 64208] [client 51.103.44.83:49016] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Tue Mar 24 11:56:52.835853 2026] [:error] [pid 64198:tid 64212] [client 51.103.44.83:49016] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acILhHVzJqf6OS_oSZ27FAAAAUw"]
[Tue Mar 24 11:56:53.744443 2026] [:error] [pid 38767:tid 38777] [client 51.103.44.83:64226] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acILhfwkUqN4GJAI5oUpfAAAAQc"]
[Tue Mar 24 11:56:54.306318 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:64193] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acILhnVzJqf6OS_oSZ27FQAAAVc"]
[Tue Mar 24 11:56:54.810203 2026] [:error] [pid 3030:tid 3071] [client 51.103.44.83:1278] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acILhgyOuILyynfcqfkpgQAAABY"]
[Tue Mar 24 11:56:55.555735 2026] [:error] [pid 48214:tid 48252] [client 51.103.44.83:60212] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acILh7eshLWZ3uUDHKkaxwAAAcA"]
[Tue Mar 24 11:56:56.074164 2026] [:error] [pid 48128:tid 48169] [client 51.103.44.83:55459] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acILiMvR4LIMFLbM5VkN4wAAAZA"]
[Tue Mar 24 11:56:56.691191 2026] [:error] [pid 3137:tid 3142] [client 51.103.44.83:62654] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acILiJdZesutm6dfYM-ZpwAAAMM"]
[Tue Mar 24 11:56:57.469385 2026] [:error] [pid 64198:tid 64211] [client 51.103.44.83:1254] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acILiXVzJqf6OS_oSZ27FwAAAUs"]
[Tue Mar 24 11:56:58.125683 2026] [:error] [pid 3030:tid 3060] [client 51.103.44.83:63435] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acILigyOuILyynfcqfkpggAAAAs"]
[Tue Mar 24 11:56:58.935564 2026] [:error] [pid 48219:tid 48289] [client 51.103.44.83:54851] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acILiihf3b4R_lAIyv8KuQAAAgg"]
[Tue Mar 24 11:57:00.045041 2026] [:error] [pid 48219:tid 48282] [client 51.103.44.83:55472] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acILjChf3b4R_lAIyv8KvAAAAgE"]
[Tue Mar 24 11:57:00.782815 2026] [:error] [pid 64198:tid 64220] [client 51.103.44.83:48967] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acILjHVzJqf6OS_oSZ27GwAAAVQ"]
[Tue Mar 24 11:57:01.702115 2026] [:error] [pid 48214:tid 48256] [client 51.103.44.83:62625] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acILjbeshLWZ3uUDHKkaygAAAcQ"]
[Tue Mar 24 11:57:03.196500 2026] [:error] [pid 64198:tid 64216] [client 51.103.44.83:1230] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acILj3VzJqf6OS_oSZ27IQAAAVA"]
[Tue Mar 24 11:57:03.960818 2026] [:error] [pid 64198:tid 64203] [client 51.103.44.83:54890] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acILj3VzJqf6OS_oSZ27IwAAAUM"]
[Tue Mar 24 11:57:04.873530 2026] [:error] [pid 64198:tid 64220] [client 51.103.44.83:1257] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acILkHVzJqf6OS_oSZ27KgAAAVQ"]
[Tue Mar 24 11:57:06.061475 2026] [:error] [pid 64198:tid 64202] [client 51.103.44.83:63431] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "acILknVzJqf6OS_oSZ27LQAAAUI"]
[Tue Mar 24 11:57:07.752828 2026] [:error] [pid 38767:tid 38784] [client 51.103.44.83:63432] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "acILk_wkUqN4GJAI5oUpgAAAAQ4"]
[Tue Mar 24 11:57:08.957093 2026] [:error] [pid 38767:tid 38775] [client 51.103.44.83:57938] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "acILlPwkUqN4GJAI5oUphwAAAQU"]
[Tue Mar 24 11:57:09.905860 2026] [:error] [pid 48219:tid 48285] [client 51.103.44.83:49021] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "acILlShf3b4R_lAIyv8KxgAAAgQ"]
[Tue Mar 24 11:57:12.116765 2026] [:error] [pid 38767:tid 38780] [client 51.103.44.83:1209] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acILmPwkUqN4GJAI5oUpjQAAAQo"]
[Tue Mar 24 11:57:13.854189 2026] [:error] [pid 3032:tid 3107] [client 51.103.44.83:63446] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acILmSa_-JXXD03-JNwPegAAAIQ"]
[Tue Mar 24 11:57:16.563636 2026] [:error] [pid 38767:tid 38785] [client 51.103.44.83:1211] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acILnPwkUqN4GJAI5oUpkwAAAQ8"]
[Tue Mar 24 11:57:18.345565 2026] [:error] [pid 48219:tid 48301] [client 51.103.44.83:54858] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "acILnihf3b4R_lAIyv8K1gAAAhQ"]
[Tue Mar 24 11:57:19.622339 2026] [:error] [pid 38767:tid 38773] [client 51.103.44.83:1249] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acILn_wkUqN4GJAI5oUplwAAAQM"]
[Tue Mar 24 11:57:20.907377 2026] [:error] [pid 64198:tid 64210] [client 51.103.44.83:63425] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acILoHVzJqf6OS_oSZ27VAAAAUo"]
[Tue Mar 24 11:57:22.749924 2026] [:error] [pid 38767:tid 38793] [client 51.103.44.83:47948] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acILovwkUqN4GJAI5oUpvgAAARc"]
[Tue Mar 24 11:57:24.668336 2026] [:error] [pid 38767:tid 38775] [client 51.103.44.83:62612] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acILpPwkUqN4GJAI5oUpvwAAAQU"]
[Tue Mar 24 11:57:25.435566 2026] [:error] [pid 3030:tid 3068] [client 51.103.44.83:60164] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acILpQyOuILyynfcqfkpiQAAABM"]
[Tue Mar 24 11:57:26.161731 2026] [:error] [pid 64198:tid 64200] [client 51.103.44.83:46141] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acILpnVzJqf6OS_oSZ27YgAAAUA"]
[Tue Mar 24 11:57:27.695856 2026] [:error] [pid 3137:tid 3146] [client 51.103.44.83:54865] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acILp5dZesutm6dfYM-ZxgAAAMc"]
[Tue Mar 24 11:57:28.518435 2026] [:error] [pid 38767:tid 38772] [client 51.103.44.83:57970] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acILqPwkUqN4GJAI5oUpxAAAAQI"]
[Tue Mar 24 11:57:29.554250 2026] [:error] [pid 3031:tid 3089] [client 51.103.44.83:57622] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "acILqaJBKytnG47nuiYRHQAAAE0"]
[Tue Mar 24 11:57:30.548963 2026] [:error] [pid 3137:tid 3139] [client 51.103.44.83:63459] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "acILqpdZesutm6dfYM-ZygAAAMA"]
[Tue Mar 24 11:57:31.549759 2026] [:error] [pid 3031:tid 3092] [client 51.103.44.83:46138] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "acILq6JBKytnG47nuiYRHwAAAFA"]
[Tue Mar 24 11:57:32.404347 2026] [:error] [pid 48219:tid 48293] [client 51.103.44.83:54886] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "acILrChf3b4R_lAIyv8K-gAAAgw"]
[Tue Mar 24 11:57:34.084501 2026] [:error] [pid 38767:tid 38777] [client 51.103.44.83:63452] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acILrvwkUqN4GJAI5oUpzAAAAQc"]
[Tue Mar 24 11:57:34.814306 2026] [:error] [pid 3137:tid 3145] [client 51.103.44.83:1258] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acILrpdZesutm6dfYM-Z0AAAAMY"]
[Tue Mar 24 11:57:35.706897 2026] [:error] [pid 48128:tid 48165] [client 51.103.44.83:46143] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acILr8vR4LIMFLbM5VkN8QAAAY0"]
[Tue Mar 24 11:57:36.537687 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:64195] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acILsHVzJqf6OS_oSZ27cgAAAVc"]
[Tue Mar 24 11:57:37.360034 2026] [:error] [pid 38767:tid 38793] [client 51.103.44.83:60191] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "acILsfwkUqN4GJAI5oUp0QAAARc"]
[Tue Mar 24 11:57:38.095170 2026] [:error] [pid 38767:tid 38785] [client 51.103.44.83:1232] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "acILsvwkUqN4GJAI5oUp0gAAAQ8"]
[Tue Mar 24 11:57:39.452640 2026] [:error] [pid 3137:tid 3152] [client 51.103.44.83:57954] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "acILs5dZesutm6dfYM-Z2QAAAM0"]
[Tue Mar 24 11:57:40.429329 2026] [:error] [pid 64198:tid 64220] [client 51.103.44.83:46095] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "acILtHVzJqf6OS_oSZ27eQAAAVQ"]
[Tue Mar 24 11:57:42.154075 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:57927] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "acILtnVzJqf6OS_oSZ27fQAAAVc"]
[Tue Mar 24 11:57:43.365918 2026] [:error] [pid 64198:tid 64205] [client 51.103.44.83:63441] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "acILt3VzJqf6OS_oSZ27fgAAAUU"]
[Tue Mar 24 11:57:46.434207 2026] [:error] [pid 48219:tid 48281] [client 51.103.44.83:46086] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "acILuihf3b4R_lAIyv8LAAAAAgA"]
[Tue Mar 24 11:57:48.916636 2026] [:error] [pid 38767:tid 38778] [client 51.103.44.83:63461] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "acILvPwkUqN4GJAI5oUp7AAAAQg"]
[Tue Mar 24 11:57:50.045846 2026] [:error] [pid 48214:tid 48266] [client 51.103.44.83:60169] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acILvreshLWZ3uUDHKka9wAAAc4"]
[Tue Mar 24 11:57:51.131882 2026] [:error] [pid 64198:tid 64220] [client 51.103.44.83:46128] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acILv3VzJqf6OS_oSZ27lgAAAVQ"]
[Tue Mar 24 11:57:52.255343 2026] [:error] [pid 64198:tid 64200] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Tue Mar 24 11:57:53.417796 2026] [:error] [pid 64198:tid 64200] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Tue Mar 24 11:57:53.660157 2026] [:error] [pid 64198:tid 64217] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Mar 24 11:57:53.913674 2026] [:error] [pid 64198:tid 64221] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Tue Mar 24 11:57:54.394165 2026] [:error] [pid 64198:tid 64210] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Tue Mar 24 11:57:54.683826 2026] [:error] [pid 64198:tid 64209] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Tue Mar 24 11:57:54.937290 2026] [:error] [pid 64198:tid 64224] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Tue Mar 24 11:57:55.178200 2026] [:error] [pid 64198:tid 64214] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Tue Mar 24 11:57:56.741140 2026] [:error] [pid 64198:tid 64214] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Tue Mar 24 11:57:56.995215 2026] [:error] [pid 64198:tid 64204] [client 51.103.44.83:46091] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Tue Mar 24 11:57:57.263197 2026] [:error] [pid 64198:tid 64206] [client 51.103.44.83:46091] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "acILxXVzJqf6OS_oSZ27uAAAAUY"]
[Tue Mar 24 11:57:57.962249 2026] [:error] [pid 3032:tid 3115] [client 51.103.44.83:48971] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "acILxSa_-JXXD03-JNwPigAAAIw"]
[Tue Mar 24 11:57:58.601051 2026] [:error] [pid 3030:tid 3065] [client 51.103.44.83:57935] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "acILxgyOuILyynfcqfkplAAAABA"]
[Tue Mar 24 11:57:59.455339 2026] [:error] [pid 64198:tid 64206] [client 51.103.44.83:1269] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "acILx3VzJqf6OS_oSZ27vwAAAUY"]
[Tue Mar 24 11:58:00.276554 2026] [:error] [pid 3032:tid 3105] [client 51.103.44.83:49014] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acILyCa_-JXXD03-JNwPiwAAAII"]
[Tue Mar 24 11:58:00.957102 2026] [:error] [pid 38767:tid 38789] [client 51.103.44.83:63458] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acILyPwkUqN4GJAI5oUp9gAAARM"]
[Tue Mar 24 11:58:01.779398 2026] [:error] [pid 64198:tid 64203] [client 51.103.44.83:55438] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acILyXVzJqf6OS_oSZ27xQAAAUM"]
[Tue Mar 24 11:58:02.674877 2026] [:error] [pid 38767:tid 38771] [client 51.103.44.83:1270] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "acILyvwkUqN4GJAI5oUp9wAAAQE"]
[Tue Mar 24 11:58:03.483645 2026] [:error] [pid 3137:tid 3142] [client 51.103.44.83:63484] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acILy5dZesutm6dfYM-Z5QAAAMM"]
[Tue Mar 24 11:58:04.430074 2026] [:error] [pid 38767:tid 38773] [client 51.103.44.83:62651] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acILzPwkUqN4GJAI5oUp-QAAAQM"]
[Tue Mar 24 11:58:05.256974 2026] [:error] [pid 3030:tid 3053] [client 51.103.44.83:63424] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acILzQyOuILyynfcqfkpmgAAAAQ"]
[Tue Mar 24 11:58:06.149626 2026] [:error] [pid 38767:tid 38784] [client 51.103.44.83:46083] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "acILzvwkUqN4GJAI5oUp_QAAAQ4"]
[Tue Mar 24 11:58:06.894093 2026] [:error] [pid 64198:tid 64209] [client 51.103.44.83:57034] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/144.php"] [unique_id "acILznVzJqf6OS_oSZ270wAAAUk"]
[Tue Mar 24 11:58:08.127626 2026] [:error] [pid 38767:tid 38790] [client 51.103.44.83:54864] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/144.php"] [unique_id "acIL0PwkUqN4GJAI5oUqBAAAARQ"]
[Tue Mar 24 11:58:09.389912 2026] [:error] [pid 3137:tid 3149] [client 51.103.44.83:64241] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/144.php"] [unique_id "acIL0ZdZesutm6dfYM-Z7QAAAMo"]
[Tue Mar 24 11:58:10.416682 2026] [:error] [pid 38767:tid 38771] [client 51.103.44.83:57642] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/144.php"] [unique_id "acIL0vwkUqN4GJAI5oUqDQAAAQE"]
[Tue Mar 24 11:58:11.201419 2026] [:error] [pid 3137:tid 3161] [client 51.103.44.83:57983] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acIL05dZesutm6dfYM-Z9gAAANY"]
[Tue Mar 24 11:58:11.882681 2026] [:error] [pid 64198:tid 64204] [client 51.103.44.83:58008] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acIL03VzJqf6OS_oSZ271wAAAUQ"]
[Tue Mar 24 11:58:12.407150 2026] [:error] [pid 48214:tid 48259] [client 51.103.44.83:54911] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acIL1LeshLWZ3uUDHKkbTwAAAcc"]
[Tue Mar 24 11:58:12.954690 2026] [:error] [pid 48219:tid 48305] [client 51.103.44.83:62616] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acIL1Chf3b4R_lAIyv8LDAAAAhg"]
[Tue Mar 24 11:58:13.561923 2026] [:error] [pid 3031:tid 3087] [client 51.103.44.83:46094] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acIL1aJBKytnG47nuiYRKgAAAEs"]
[Tue Mar 24 11:58:14.167265 2026] [:error] [pid 3137:tid 3157] [client 51.103.44.83:60203] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acIL1pdZesutm6dfYM-Z-gAAANI"]
[Tue Mar 24 11:58:14.816539 2026] [:error] [pid 48214:tid 48270] [client 51.103.44.83:46104] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acIL1reshLWZ3uUDHKkbVgAAAdI"]
[Tue Mar 24 11:58:15.353529 2026] [:error] [pid 64198:tid 64212] [client 51.103.44.83:62607] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "acIL13VzJqf6OS_oSZ273gAAAUw"]
[Tue Mar 24 11:58:15.983662 2026] [:error] [pid 64198:tid 64215] [client 51.103.44.83:54867] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acIL13VzJqf6OS_oSZ274QAAAU8"]
[Tue Mar 24 11:58:16.625813 2026] [:error] [pid 38767:tid 38778] [client 51.103.44.83:55445] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acIL2PwkUqN4GJAI5oUqFQAAAQg"]
[Tue Mar 24 11:58:17.238743 2026] [:error] [pid 3137:tid 3150] [client 51.103.44.83:48973] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acIL2ZdZesutm6dfYM-aBwAAAMs"]
[Tue Mar 24 11:58:17.955038 2026] [:error] [pid 3032:tid 3128] [client 51.103.44.83:46127] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "acIL2Sa_-JXXD03-JNwPkQAAAJg"]
[Tue Mar 24 11:58:18.468820 2026] [:error] [pid 48214:tid 48271] [client 51.103.44.83:54860] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "acIL2reshLWZ3uUDHKkbWQAAAdM"]
[Tue Mar 24 11:58:19.139436 2026] [:error] [pid 3032:tid 3113] [client 51.103.44.83:64230] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "acIL2ya_-JXXD03-JNwPkwAAAIo"]
[Tue Mar 24 11:58:20.011518 2026] [:error] [pid 3030:tid 3057] [client 51.103.44.83:63476] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "acIL3AyOuILyynfcqfkpngAAAAg"]
[Tue Mar 24 11:58:21.137272 2026] [:error] [pid 38767:tid 38778] [client 51.103.44.83:57624] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "acIL3fwkUqN4GJAI5oUqJAAAAQg"]
[Tue Mar 24 11:58:21.872307 2026] [:error] [pid 48214:tid 48263] [client 51.103.44.83:62639] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acIL3beshLWZ3uUDHKkbXAAAAcs"]
[Tue Mar 24 11:58:22.574964 2026] [:error] [pid 3032:tid 3110] [client 51.103.44.83:1247] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acIL3ia_-JXXD03-JNwPlwAAAIc"]
[Tue Mar 24 11:58:23.110332 2026] [:error] [pid 48214:tid 48260] [client 51.103.44.83:46110] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acIL37eshLWZ3uUDHKkbYwAAAcg"]
[Tue Mar 24 11:58:23.798913 2026] [:error] [pid 64198:tid 64224] [client 51.103.44.83:60181] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acIL33VzJqf6OS_oSZ275AAAAVg"]
[Tue Mar 24 11:58:24.612043 2026] [:error] [pid 3032:tid 3122] [client 51.103.44.83:55448] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "acIL4Ca_-JXXD03-JNwPmQAAAJM"]
[Tue Mar 24 11:58:25.295799 2026] [:error] [pid 38767:tid 38770] [client 51.103.44.83:48986] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "acIL4fwkUqN4GJAI5oUqJwAAAQA"]
[Tue Mar 24 11:58:26.221153 2026] [:error] [pid 38767:tid 38772] [client 51.103.44.83:49005] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "acIL4vwkUqN4GJAI5oUqKQAAAQI"]
[Tue Mar 24 11:58:26.931394 2026] [:error] [pid 64198:tid 64201] [client 51.103.44.83:60201] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "acIL4nVzJqf6OS_oSZ276wAAAUE"]
[Tue Mar 24 11:58:27.695394 2026] [:error] [pid 48219:tid 48288] [client 51.103.44.83:57936] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "acIL4yhf3b4R_lAIyv8LFQAAAgc"]
[Tue Mar 24 11:58:28.385411 2026] [:error] [pid 48219:tid 48295] [client 51.103.44.83:63456] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "acIL5Chf3b4R_lAIyv8LFgAAAg4"]
[Tue Mar 24 11:58:29.140155 2026] [:error] [pid 48214:tid 48273] [client 51.103.44.83:64232] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "acIL5beshLWZ3uUDHKkbcgAAAdU"]
[Tue Mar 24 11:58:29.865477 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:63449] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "acIL5XVzJqf6OS_oSZ277wAAAVc"]
[Tue Mar 24 11:58:30.433916 2026] [:error] [pid 64198:tid 64211] [client 51.103.44.83:57941] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "acIL5nVzJqf6OS_oSZ278QAAAUs"]
[Tue Mar 24 11:58:31.096095 2026] [:error] [pid 48128:tid 48164] [client 51.103.44.83:48998] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "acIL58vR4LIMFLbM5VkOBQAAAYw"]
[Tue Mar 24 11:58:31.773579 2026] [:error] [pid 3137:tid 3147] [client 51.103.44.83:48984] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "acIL55dZesutm6dfYM-aJgAAAMg"]
[Tue Mar 24 11:58:32.686842 2026] [:error] [pid 3137:tid 3155] [client 51.103.44.83:55476] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "acIL6JdZesutm6dfYM-aMAAAANA"]
[Tue Mar 24 11:58:33.241294 2026] [:error] [pid 3031:tid 3089] [client 51.103.44.83:57978] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "acIL6aJBKytnG47nuiYRMQAAAE0"]
[Tue Mar 24 11:58:33.907300 2026] [:error] [pid 3032:tid 3113] [client 51.103.44.83:64207] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "acIL6Sa_-JXXD03-JNwPoAAAAIo"]
[Tue Mar 24 11:58:34.740883 2026] [:error] [pid 3032:tid 3124] [client 51.103.44.83:57070] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "acIL6ia_-JXXD03-JNwPoQAAAJU"]
[Tue Mar 24 11:58:35.480092 2026] [:error] [pid 3137:tid 3149] [client 51.103.44.83:57606] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "acIL65dZesutm6dfYM-aVQAAAMo"]
[Tue Mar 24 11:58:36.001956 2026] [:error] [pid 3137:tid 3151] [client 51.103.44.83:54853] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "acIL7JdZesutm6dfYM-aXQAAAMw"]
[Tue Mar 24 11:58:36.800098 2026] [:error] [pid 48214:tid 48266] [client 51.103.44.83:63467] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "acIL7LeshLWZ3uUDHKkbeAAAAc4"]
[Tue Mar 24 11:58:37.893088 2026] [:error] [pid 38767:tid 38781] [client 51.103.44.83:63454] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "acIL7fwkUqN4GJAI5oUqLQAAAQs"]
[Tue Mar 24 11:58:38.663621 2026] [:error] [pid 64198:tid 64202] [client 51.103.44.83:57039] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "acIL7nVzJqf6OS_oSZ28HwAAAUI"]
[Tue Mar 24 11:58:39.810306 2026] [:error] [pid 48128:tid 48150] [client 51.103.44.83:54877] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "acIL78vR4LIMFLbM5VkOHQAAAYE"]
[Tue Mar 24 11:58:40.602805 2026] [:error] [pid 48219:tid 48293] [client 51.103.44.83:57062] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "acIL8Chf3b4R_lAIyv8LHgAAAgw"]
[Tue Mar 24 11:58:41.709518 2026] [:error] [pid 48219:tid 48302] [client 51.103.44.83:1251] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "acIL8Shf3b4R_lAIyv8LIwAAAhU"]
[Tue Mar 24 11:58:43.789193 2026] [:error] [pid 38767:tid 38792] [client 51.103.44.83:57951] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "acIL8_wkUqN4GJAI5oUqQAAAARY"]
[Tue Mar 24 11:58:45.898911 2026] [:error] [pid 64198:tid 64210] [client 51.103.44.83:63447] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acIL9XVzJqf6OS_oSZ28MwAAAUo"]
[Tue Mar 24 11:58:46.619980 2026] [:error] [pid 3031:tid 3098] [client 51.103.44.83:1255] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acIL9qJBKytnG47nuiYRNgAAAFY"]
[Tue Mar 24 11:58:47.282904 2026] [:error] [pid 64198:tid 64205] [client 51.103.44.83:46112] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acIL93VzJqf6OS_oSZ28OQAAAUU"]
[Tue Mar 24 11:58:47.900690 2026] [:error] [pid 48214:tid 48256] [client 51.103.44.83:55444] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acIL97eshLWZ3uUDHKkbfAAAAcQ"]
[Tue Mar 24 11:58:48.579899 2026] [:error] [pid 48219:tid 48295] [client 51.103.44.83:47964] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "acIL-Chf3b4R_lAIyv8LLwAAAg4"]
[Tue Mar 24 11:58:50.491281 2026] [:error] [pid 48214:tid 48270] [client 51.103.44.83:57079] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "acIL-reshLWZ3uUDHKkbgQAAAdI"]
[Tue Mar 24 11:58:52.520774 2026] [:error] [pid 3137:tid 3156] [client 51.103.44.83:48990] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "acIL_JdZesutm6dfYM-ahAAAANE"]
[Tue Mar 24 11:58:53.676272 2026] [:error] [pid 48219:tid 48282] [client 51.103.44.83:57641] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "acIL_Shf3b4R_lAIyv8LNAAAAgE"]
[Tue Mar 24 11:58:56.126307 2026] [:error] [pid 64198:tid 64208] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Tue Mar 24 11:58:56.402752 2026] [:error] [pid 64198:tid 64214] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Tue Mar 24 11:58:56.682530 2026] [:error] [pid 64198:tid 64210] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/44.php
[Tue Mar 24 11:58:56.938297 2026] [:error] [pid 64198:tid 64217] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Tue Mar 24 11:58:57.192482 2026] [:error] [pid 64198:tid 64212] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Tue Mar 24 11:58:57.466133 2026] [:error] [pid 64198:tid 64209] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Tue Mar 24 11:58:57.731709 2026] [:error] [pid 64198:tid 64224] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Tue Mar 24 11:58:57.986097 2026] [:error] [pid 64198:tid 64202] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Tue Mar 24 11:58:58.269417 2026] [:error] [pid 64198:tid 64201] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Mar 24 11:58:58.555559 2026] [:error] [pid 64198:tid 64213] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Tue Mar 24 11:58:58.822908 2026] [:error] [pid 64198:tid 64218] [client 51.103.44.83:48999] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Tue Mar 24 11:58:59.086340 2026] [:error] [pid 64198:tid 64201] [client 51.103.44.83:48999] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acIMA3VzJqf6OS_oSZ28cgAAAUE"]
[Tue Mar 24 11:59:00.289775 2026] [:error] [pid 64198:tid 64216] [client 51.103.44.83:57948] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acIMBHVzJqf6OS_oSZ28cwAAAVA"]
[Tue Mar 24 11:59:01.432588 2026] [:error] [pid 3030:tid 3072] [client 51.103.44.83:46124] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acIMBQyOuILyynfcqfkpqgAAABc"]
[Tue Mar 24 11:59:02.543606 2026] [:error] [pid 3031:tid 3083] [client 51.103.44.83:63463] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acIMBqJBKytnG47nuiYROwAAAEc"]
[Tue Mar 24 11:59:04.279883 2026] [:error] [pid 48219:tid 48302] [client 51.103.44.83:62645] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acIMCChf3b4R_lAIyv8LOwAAAhU"]
[Tue Mar 24 11:59:06.799612 2026] [:error] [pid 38767:tid 38791] [client 51.103.44.83:55457] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acIMCvwkUqN4GJAI5oUqVQAAARU"]
[Tue Mar 24 11:59:08.615318 2026] [:error] [pid 38767:tid 38789] [client 51.103.44.83:17575] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acIMDPwkUqN4GJAI5oUqVwAAARM"]
[Tue Mar 24 11:59:09.504696 2026] [:error] [pid 64198:tid 64204] [client 51.103.44.83:1238] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acIMDXVzJqf6OS_oSZ28dgAAAUQ"]
[Tue Mar 24 11:59:10.398820 2026] [:error] [pid 38767:tid 38783] [client 51.103.44.83:62632] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acIMDvwkUqN4GJAI5oUqWQAAAQ0"]
[Tue Mar 24 11:59:11.632735 2026] [:error] [pid 48219:tid 48285] [client 51.103.44.83:55434] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acIMDyhf3b4R_lAIyv8LQQAAAgQ"]
[Tue Mar 24 11:59:12.320998 2026] [:error] [pid 64198:tid 64223] [client 51.103.44.83:57931] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acIMEHVzJqf6OS_oSZ28fgAAAVc"]
[Tue Mar 24 11:59:13.382494 2026] [:error] [pid 64198:tid 64217] [client 51.103.44.83:1168] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "acIMEXVzJqf6OS_oSZ28ggAAAVE"]
[Tue Mar 24 11:59:14.946142 2026] [:error] [pid 3030:tid 3061] [client 51.103.44.83:49382] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acIMEgyOuILyynfcqfkprwAAAAw"]
[Tue Mar 24 11:59:15.859204 2026] [:error] [pid 3031:tid 3078] [client 51.103.44.83:57036] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acIME6JBKytnG47nuiYRRQAAAEI"]
[Tue Mar 24 11:59:17.747040 2026] [:error] [pid 48214:tid 48269] [client 51.103.44.83:57083] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acIMFbeshLWZ3uUDHKkbqAAAAdE"]
[Tue Mar 24 11:59:19.223099 2026] [:error] [pid 48219:tid 48287] [client 51.103.44.83:57072] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acIMFyhf3b4R_lAIyv8LRgAAAgY"]
[Tue Mar 24 11:59:21.207974 2026] [:error] [pid 48214:tid 48252] [client 51.103.44.83:17552] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acIMGbeshLWZ3uUDHKkbrgAAAcA"]
[Tue Mar 24 11:59:24.971186 2026] [:error] [pid 64198:tid 64201] [client 51.103.44.83:46133] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acIMHHVzJqf6OS_oSZ28nwAAAUE"]
[Tue Mar 24 11:59:26.501646 2026] [:error] [pid 38767:tid 38792] [client 51.103.44.83:1220] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acIMHvwkUqN4GJAI5oUqXQAAARY"]
[Tue Mar 24 11:59:27.653508 2026] [:error] [pid 3137:tid 3145] [client 51.103.44.83:64231] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "acIMH5dZesutm6dfYM-anwAAAMY"]
[Tue Mar 24 11:59:29.380882 2026] [:error] [pid 3032:tid 3120] [client 51.103.44.83:55424] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acIMISa_-JXXD03-JNwPwwAAAJE"]
[Tue Mar 24 11:59:39.609183 2026] [:error] [pid 3030:tid 3051] [client 51.103.44.83:50411] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acIMKwyOuILyynfcqfkpuAAAAAI"]
[Tue Mar 24 11:59:40.515747 2026] [:error] [pid 38767:tid 38779] [client 51.103.44.83:50394] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acIMLPwkUqN4GJAI5oUqbQAAAQk"]
[Tue Mar 24 11:59:41.616656 2026] [:error] [pid 3031:tid 3098] [client 51.103.44.83:57980] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "acIMLaJBKytnG47nuiYRTgAAAFY"]
[Tue Mar 24 11:59:45.574896 2026] [:error] [pid 64198:tid 64224] [client 51.103.44.83:57032] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acIMMXVzJqf6OS_oSZ28uAAAAVg"]
[Tue Mar 24 11:59:47.718297 2026] [:error] [pid 38767:tid 38786] [client 51.103.44.83:1237] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acIMM_wkUqN4GJAI5oUqdwAAARA"]
[Tue Mar 24 11:59:49.872047 2026] [:error] [pid 3032:tid 3104] [client 51.103.44.83:57085] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acIMNSa_-JXXD03-JNwPyAAAAIE"]
[Tue Mar 24 11:59:53.820308 2026] [:error] [pid 3030:tid 3054] [client 51.103.44.83:48672] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acIMOQyOuILyynfcqfkpvQAAAAU"]
[Tue Mar 24 11:59:54.972674 2026] [:error] [pid 48219:tid 48300] [client 51.103.44.83:55432] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "acIMOihf3b4R_lAIyv8LbAAAAhM"]
[Tue Mar 24 11:59:55.721027 2026] [:error] [pid 48219:tid 48305] [client 51.103.44.83:49367] [client 51.103.44.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "acIMOyhf3b4R_lAIyv8LbgAAAhg"]
[Tue Mar 24 11:59:58.569873 2026] [:error] [pid 3031:tid 3078] [client 51.103.44.83:48669] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Mar 24 11:59:58.819984 2026] [:error] [pid 3031:tid 3094] [client 51.103.44.83:48669] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Tue Mar 24 14:39:34.518379 2026] [:error] [pid 38767:tid 38772] [client 43.135.182.95:57044] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acIxpvwkUqN4GJAI5oVvdgAAAQI"]
[Tue Mar 24 17:30:37.651860 2026] [:error] [pid 38767:tid 38776] [client 43.153.192.98:53124] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acJZvfwkUqN4GJAI5oXNHwAAAQY"]
[Tue Mar 24 18:47:57.486614 2026] [:error] [pid 3137:tid 3149] [client 106.51.202.236:45696] [client 106.51.202.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.51.202.236, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acJr3ZdZesutm6dfYM8UfwAAAMo"]
[Tue Mar 24 18:47:57.491180 2026] [:error] [pid 3137:tid 3149] [client 106.51.202.236:45696] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 19:33:16.141314 2026] [:error] [pid 3030:tid 3049] [client 43.159.128.237:47770] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acJ2fAyOuILyynfcqflZNQAAAAA"]
[Tue Mar 24 20:56:14.061915 2026] [:error] [pid 64198:tid 64217] [client 106.222.250.173:13917] [client 106.222.250.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.250.173, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acKJ7nVzJqf6OS_oSZ3CrAAAAVE"]
[Tue Mar 24 20:56:14.071204 2026] [:error] [pid 64198:tid 64217] [client 106.222.250.173:13917] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 21:46:42.327384 2026] [:error] [pid 3032:tid 3119] [client 94.247.172.129:60456] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acKVwia_-JXXD03-JNxgiQAAAJA"]
[Tue Mar 24 23:05:21.730301 2026] [:error] [pid 3137:tid 3157] [client 43.159.128.237:51424] [client 43.159.128.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acKoMZdZesutm6dfYM9hYgAAANI"]
[Wed Mar 25 00:07:56.508865 2026] [:error] [pid 64198:tid 64215] [client 110.166.71.39:48648] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acK23HVzJqf6OS_oSZ39KgAAAU8"]
[Wed Mar 25 01:09:54.223333 2026] [:error] [pid 57702:tid 57924] [client 43.135.135.57:57566] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acLFYqS8TU_xcQFvlnYBzQAAABU"]
[Wed Mar 25 02:22:34.139896 2026] [:error] [pid 58154:tid 58175] [client 193.19.109.69:39343] [client 193.19.109.69] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.19.109.69, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acLWag0pGUh6bwD3ouKvAwAAANI"]
[Wed Mar 25 02:22:34.143862 2026] [:error] [pid 58154:tid 58175] [client 193.19.109.69:39343] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 06:52:04.197501 2026] [:error] [pid 47989:tid 48015] [client 1.15.52.154:57792] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acMVlCWKdJMhIccROjmJKgAAAVg"]
[Wed Mar 25 07:26:10.458576 2026] [:error] [pid 756:tid 850] [client 43.164.195.17:60992] [client 43.164.195.17] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acMdkjOaW6oylMIDBCS7SQAAAIA"]
[Wed Mar 25 09:36:29.159532 2026] [:error] [pid 47989:tid 48007] [client 178.171.244.172:40544] [client 178.171.244.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.171.244.172, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acM8HSWKdJMhIccROjnOKQAAAVA"]
[Wed Mar 25 09:36:29.165826 2026] [:error] [pid 47989:tid 48007] [client 178.171.244.172:40544] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 12:06:47.036120 2026] [:error] [pid 26321:tid 26344] [client 223.185.62.223:23026] [client 223.185.62.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.185.62.223, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acNfV_KO65qqGZCSPZreEAAAAgU"]
[Wed Mar 25 12:06:47.040964 2026] [:error] [pid 26321:tid 26344] [client 223.185.62.223:23026] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 13:49:39.715510 2026] [:error] [pid 47989:tid 48000] [client 170.106.107.87:43252] [client 170.106.107.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acN3cyWKdJMhIccROjksNwAAAUk"]
[Wed Mar 25 16:30:38.236942 2026] [:error] [pid 26449:tid 26454] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Wed Mar 25 16:30:39.901361 2026] [:error] [pid 26449:tid 26454] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/xocx.php
[Wed Mar 25 16:30:40.170458 2026] [:error] [pid 26449:tid 26469] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/sace.php
[Wed Mar 25 16:30:40.463924 2026] [:error] [pid 26449:tid 26472] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Wed Mar 25 16:30:40.841998 2026] [:error] [pid 26449:tid 26476] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-zx.php
[Wed Mar 25 16:30:41.105910 2026] [:error] [pid 26449:tid 26475] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/north1.php
[Wed Mar 25 16:30:41.650103 2026] [:error] [pid 26449:tid 26453] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/420.php
[Wed Mar 25 16:30:42.054001 2026] [:error] [pid 26449:tid 26455] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Wed Mar 25 16:30:42.440836 2026] [:error] [pid 26449:tid 26456] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/zample.php
[Wed Mar 25 16:30:42.878230 2026] [:error] [pid 26449:tid 26458] [client 51.13.127.50:64641] File does not exist: /usr/local/apache/htdocs/suspended-page/read.php
[Wed Mar 25 16:30:43.141433 2026] [:error] [pid 26449:tid 26465] [client 51.13.127.50:64641] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOdM9pZ2T15NDqzAjFc2AAAAkw"]
[Wed Mar 25 16:30:44.135337 2026] [:error] [pid 26449:tid 26474] [client 51.13.127.50:62707] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOdNNpZ2T15NDqzAjFc2QAAAlU"]
[Wed Mar 25 16:30:45.161728 2026] [:error] [pid 25875:tid 25892] [client 51.13.127.50:63201] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOdNRJ38QkS3Nyfshy_ewAAAos"]
[Wed Mar 25 16:30:45.988419 2026] [:error] [pid 26321:tid 26364] [client 51.13.127.50:63214] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acOdNfKO65qqGZCSPZodYQAAAhc"]
[Wed Mar 25 16:30:46.673853 2026] [:error] [pid 47989:tid 47998] [client 51.13.127.50:63222] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acOdNiWKdJMhIccROjlyBAAAAUc"]
[Wed Mar 25 16:30:47.563598 2026] [:error] [pid 47989:tid 48005] [client 51.13.127.50:63689] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acOdNyWKdJMhIccROjlyCAAAAU4"]
[Wed Mar 25 16:30:48.296360 2026] [:error] [pid 25967:tid 25991] [client 51.13.127.50:62664] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acOdOPg8Qtq7ZM4mSFkM0gAAA1M"]
[Wed Mar 25 16:30:49.374730 2026] [:error] [pid 47989:tid 48006] [client 51.13.127.50:64149] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acOdOSWKdJMhIccROjlyEAAAAU8"]
[Wed Mar 25 16:30:50.627787 2026] [:error] [pid 26321:tid 26360] [client 51.13.127.50:64707] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acOdOvKO65qqGZCSPZodZAAAAhM"]
[Wed Mar 25 16:30:51.620568 2026] [:error] [pid 892:tid 919] [client 51.13.127.50:62662] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acOdOyT_G8WMU3T3yxq5ZAAAANQ"]
[Wed Mar 25 16:30:52.314435 2026] [:error] [pid 26321:tid 26348] [client 51.13.127.50:64180] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acOdPPKO65qqGZCSPZodaQAAAgc"]
[Wed Mar 25 16:30:53.212403 2026] [:error] [pid 47946:tid 47967] [client 51.13.127.50:65214] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acOdPTipQTqBMSeKYhd3iAAAARM"]
[Wed Mar 25 16:30:54.955246 2026] [:error] [pid 892:tid 910] [client 51.13.127.50:65202] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acOdPiT_G8WMU3T3yxq5ZwAAAMw"]
[Wed Mar 25 16:30:55.758754 2026] [:error] [pid 892:tid 899] [client 51.13.127.50:65228] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acOdPyT_G8WMU3T3yxq5aQAAAMM"]
[Wed Mar 25 16:30:56.352956 2026] [:error] [pid 25969:tid 26034] [client 51.13.127.50:65198] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acOdQBd3aEUmOfdKja_1-wAAA8g"]
[Wed Mar 25 16:30:57.178748 2026] [:error] [pid 47989:tid 47997] [client 51.13.127.50:64164] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acOdQSWKdJMhIccROjlyGgAAAUY"]
[Wed Mar 25 16:30:58.306487 2026] [:error] [pid 47989:tid 48012] [client 51.13.127.50:65155] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acOdQiWKdJMhIccROjlyHwAAAVU"]
[Wed Mar 25 16:30:59.470458 2026] [:error] [pid 26449:tid 26453] [client 51.13.127.50:64138] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acOdQ9pZ2T15NDqzAjFc5AAAAkA"]
[Wed Mar 25 16:31:00.603675 2026] [:error] [pid 26321:tid 26355] [client 51.13.127.50:63741] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acOdRPKO65qqGZCSPZodawAAAg4"]
[Wed Mar 25 16:31:02.049362 2026] [:error] [pid 26321:tid 26353] [client 51.13.127.50:62597] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acOdRvKO65qqGZCSPZodbQAAAgw"]
[Wed Mar 25 16:31:03.504088 2026] [:error] [pid 26321:tid 26358] [client 51.13.127.50:63171] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acOdR_KO65qqGZCSPZodcQAAAhE"]
[Wed Mar 25 16:31:04.911912 2026] [:error] [pid 26321:tid 26348] [client 51.13.127.50:64724] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acOdSPKO65qqGZCSPZodcgAAAgc"]
[Wed Mar 25 16:31:06.075522 2026] [:error] [pid 47989:tid 47998] [client 51.13.127.50:64727] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acOdSiWKdJMhIccROjlyKAAAAUc"]
[Wed Mar 25 16:31:06.684473 2026] [:error] [pid 26321:tid 26339] [client 51.13.127.50:62607] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acOdSvKO65qqGZCSPZodeQAAAgA"]
[Wed Mar 25 16:31:07.829446 2026] [:error] [pid 26449:tid 26460] [client 51.13.127.50:64706] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acOdS9pZ2T15NDqzAjFc7gAAAkc"]
[Wed Mar 25 16:31:09.566840 2026] [:error] [pid 25875:tid 25895] [client 51.13.127.50:65275] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acOdTRJ38QkS3Nyfshy_iwAAAo4"]
[Wed Mar 25 16:31:10.342222 2026] [:error] [pid 25967:tid 25989] [client 51.13.127.50:64759] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acOdTvg8Qtq7ZM4mSFkM3wAAA1E"]
[Wed Mar 25 16:31:11.023295 2026] [:error] [pid 25967:tid 25974] [client 51.13.127.50:64661] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acOdT_g8Qtq7ZM4mSFkM4AAAA0I"]
[Wed Mar 25 16:31:11.811344 2026] [:error] [pid 25967:tid 25995] [client 51.13.127.50:65173] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acOdT_g8Qtq7ZM4mSFkM4wAAA1c"]
[Wed Mar 25 16:31:12.763153 2026] [:error] [pid 25967:tid 25988] [client 51.13.127.50:64156] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acOdUPg8Qtq7ZM4mSFkM6AAAA1A"]
[Wed Mar 25 16:31:13.486643 2026] [:error] [pid 892:tid 912] [client 51.13.127.50:64220] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acOdUST_G8WMU3T3yxq5cwAAAM4"]
[Wed Mar 25 16:31:14.159167 2026] [:error] [pid 25875:tid 25903] [client 51.13.127.50:64199] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acOdUhJ38QkS3Nyfshy_jAAAApY"]
[Wed Mar 25 16:31:15.634978 2026] [:error] [pid 26321:tid 26348] [client 51.13.127.50:64747] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acOdU_KO65qqGZCSPZodhgAAAgc"]
[Wed Mar 25 16:31:16.375359 2026] [:error] [pid 26321:tid 26340] [client 51.13.127.50:63176] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acOdVPKO65qqGZCSPZodigAAAgE"]
[Wed Mar 25 16:31:17.071661 2026] [:error] [pid 47989:tid 48004] [client 51.13.127.50:62699] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acOdVSWKdJMhIccROjlyMgAAAU0"]
[Wed Mar 25 16:31:17.973321 2026] [:error] [pid 25967:tid 25986] [client 51.13.127.50:63660] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acOdVfg8Qtq7ZM4mSFkM7gAAA04"]
[Wed Mar 25 16:31:18.947669 2026] [:error] [pid 25967:tid 25995] [client 51.13.127.50:65193] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acOdVvg8Qtq7ZM4mSFkM8AAAA1c"]
[Wed Mar 25 16:31:19.656781 2026] [:error] [pid 25969:tid 26038] [client 51.13.127.50:62686] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acOdVxd3aEUmOfdKja_2BQAAA8w"]
[Wed Mar 25 16:31:21.012887 2026] [:error] [pid 25967:tid 25987] [client 51.13.127.50:62692] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acOdWfg8Qtq7ZM4mSFkM-QAAA08"]
[Wed Mar 25 16:31:23.971575 2026] [:error] [pid 26449:tid 26461] [client 51.13.127.50:65158] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acOdW9pZ2T15NDqzAjFc9gAAAkg"]
[Wed Mar 25 16:31:25.216914 2026] [:error] [pid 26269:tid 26289] [client 51.13.127.50:64204] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acOdXUn7e-ZQbaIs7qypxAAAAY0"]
[Wed Mar 25 16:31:25.892269 2026] [:error] [pid 47989:tid 48007] [client 51.13.127.50:62701] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acOdXSWKdJMhIccROjlyQwAAAVA"]
[Wed Mar 25 16:31:26.652038 2026] [:error] [pid 25875:tid 25893] [client 51.13.127.50:62666] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acOdXhJ38QkS3Nyfshy_lgAAAow"]
[Wed Mar 25 16:31:27.600129 2026] [:error] [pid 47989:tid 47998] [client 51.13.127.50:62169] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acOdXyWKdJMhIccROjlyRQAAAUc"]
[Wed Mar 25 16:31:28.332731 2026] [:error] [pid 47989:tid 48003] [client 51.13.127.50:62660] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acOdYCWKdJMhIccROjlySAAAAUw"]
[Wed Mar 25 16:31:29.328044 2026] [:error] [pid 47989:tid 48011] [client 51.13.127.50:63158] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acOdYSWKdJMhIccROjlyUAAAAVQ"]
[Wed Mar 25 16:31:30.115115 2026] [:error] [pid 47989:tid 47993] [client 51.13.127.50:63193] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acOdYiWKdJMhIccROjlyUgAAAUI"]
[Wed Mar 25 16:31:31.017885 2026] [:error] [pid 47946:tid 47971] [client 51.13.127.50:63139] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acOdYzipQTqBMSeKYhd3kAAAARc"]
[Wed Mar 25 16:31:31.794905 2026] [:error] [pid 892:tid 918] [client 51.13.127.50:63123] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acOdYyT_G8WMU3T3yxq5dgAAANM"]
[Wed Mar 25 16:31:32.703980 2026] [:error] [pid 26449:tid 26455] [client 51.13.127.50:65169] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acOdZNpZ2T15NDqzAjFc_gAAAkI"]
[Wed Mar 25 16:31:33.770607 2026] [:error] [pid 25875:tid 25901] [client 51.13.127.50:63677] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acOdZRJ38QkS3Nyfshy_nQAAApQ"]
[Wed Mar 25 16:31:36.671189 2026] [:error] [pid 25875:tid 25904] [client 51.13.127.50:62621] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acOdaBJ38QkS3Nyfshy_nwAAApc"]
[Wed Mar 25 16:31:38.513823 2026] [:error] [pid 26449:tid 26457] [client 51.13.127.50:64725] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acOdatpZ2T15NDqzAjFdAQAAAkQ"]
[Wed Mar 25 16:31:39.552644 2026] [:error] [pid 26321:tid 26353] [client 51.13.127.50:63192] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acOda_KO65qqGZCSPZodogAAAgw"]
[Wed Mar 25 16:31:40.446093 2026] [:error] [pid 47989:tid 48014] [client 51.13.127.50:63148] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acOdbCWKdJMhIccROjlyYwAAAVc"]
[Wed Mar 25 16:31:41.244825 2026] [:error] [pid 47989:tid 47995] [client 51.13.127.50:64128] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acOdbSWKdJMhIccROjlyZwAAAUQ"]
[Wed Mar 25 16:31:41.933687 2026] [:error] [pid 25967:tid 25975] [client 51.13.127.50:63619] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "acOdbfg8Qtq7ZM4mSFkNBgAAA0M"]
[Wed Mar 25 16:31:43.195844 2026] [:error] [pid 25875:tid 25881] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Wed Mar 25 16:31:43.538449 2026] [:error] [pid 25875:tid 25905] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Wed Mar 25 16:31:44.030811 2026] [:error] [pid 25875:tid 25901] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/swallowable.php
[Wed Mar 25 16:31:44.357852 2026] [:error] [pid 25875:tid 25885] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Wed Mar 25 16:31:44.621473 2026] [:error] [pid 25875:tid 25904] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Wed Mar 25 16:31:44.953820 2026] [:error] [pid 25875:tid 25894] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Wed Mar 25 16:31:45.291810 2026] [:error] [pid 25875:tid 25897] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Wed Mar 25 16:31:45.641849 2026] [:error] [pid 25875:tid 25888] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Mar 25 16:31:46.399294 2026] [:error] [pid 25875:tid 25900] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 25 16:31:47.688368 2026] [:error] [pid 25875:tid 25881] [client 51.13.127.50:64653] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Wed Mar 25 16:31:48.010659 2026] [:error] [pid 25875:tid 25884] [client 51.13.127.50:64653] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acOddBJ38QkS3Nyfshy_sgAAAoM"]
[Wed Mar 25 16:31:49.347153 2026] [:error] [pid 47989:tid 48008] [client 51.13.127.50:62714] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acOddSWKdJMhIccROjlycgAAAVE"]
[Wed Mar 25 16:31:50.368684 2026] [:error] [pid 26321:tid 26356] [client 51.13.127.50:64672] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acOddvKO65qqGZCSPZodrgAAAg8"]
[Wed Mar 25 16:31:51.216251 2026] [:error] [pid 25875:tid 25890] [client 51.13.127.50:64146] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acOddxJ38QkS3Nyfshy_swAAAok"]
[Wed Mar 25 16:31:51.838526 2026] [:error] [pid 25875:tid 25887] [client 51.13.127.50:63179] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acOddxJ38QkS3Nyfshy_tQAAAoY"]
[Wed Mar 25 16:31:54.211170 2026] [:error] [pid 25875:tid 25897] [client 51.13.127.50:63739] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acOdehJ38QkS3Nyfshy_wAAAApA"]
[Wed Mar 25 16:31:54.879767 2026] [:error] [pid 47989:tid 48013] [client 51.13.127.50:63665] [client 51.13.127.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acOdeiWKdJMhIccROjlyfgAAAVY"]
[Wed Mar 25 16:53:51.095487 2026] [:error] [pid 25967:tid 25981] [client 160.191.209.8:49211] [client 160.191.209.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.191.209.8, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acOin_g8Qtq7ZM4mSFkVkwAAA0k"]
[Wed Mar 25 16:53:51.101294 2026] [:error] [pid 25967:tid 25981] [client 160.191.209.8:49211] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 17:36:12.088920 2026] [:error] [pid 26321:tid 26362] [client 43.153.87.54:48482] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acOsjPKO65qqGZCSPZoqBAAAAhU"]
[Wed Mar 25 17:51:22.778615 2026] [:error] [pid 892:tid 923] [client 20.151.18.25:27010] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Mar 25 17:51:23.276379 2026] [:error] [pid 892:tid 910] [client 20.151.18.25:27010] [client 20.151.18.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.18.25, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acOwGyT_G8WMU3T3yxrD8AAAAMw"]
[Wed Mar 25 17:51:23.526559 2026] [:error] [pid 892:tid 904] [client 20.151.18.25:27010] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Wed Mar 25 17:51:24.530190 2026] [:error] [pid 892:tid 907] [client 20.151.18.25:27010] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Wed Mar 25 17:51:25.269440 2026] [:error] [pid 892:tid 902] [client 20.151.18.25:27010] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Wed Mar 25 17:51:25.512474 2026] [:error] [pid 892:tid 906] [client 20.151.18.25:27010] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOwHST_G8WMU3T3yxrD-wAAAMg"]
[Wed Mar 25 17:51:26.373218 2026] [:error] [pid 25875:tid 25903] [client 20.151.18.25:27080] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOwHhJ38QkS3NyfshzWYgAAApY"]
[Wed Mar 25 17:51:27.199693 2026] [:error] [pid 47989:tid 48002] [client 20.151.18.25:27052] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOwHyWKdJMhIccROjmaYwAAAUs"]
[Wed Mar 25 17:51:28.128064 2026] [:error] [pid 26449:tid 26456] [client 20.151.18.25:27024] [client 20.151.18.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acOwINpZ2T15NDqzAjFpcQAAAkM"]
[Wed Mar 25 19:51:30.078062 2026] [:error] [pid 26269:tid 26285] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/tx22.php
[Wed Mar 25 19:51:30.335155 2026] [:error] [pid 26269:tid 26289] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs.php
[Wed Mar 25 19:51:31.096479 2026] [:error] [pid 26269:tid 26294] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/lfm.php
[Wed Mar 25 19:51:31.349668 2026] [:error] [pid 26269:tid 26293] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/abca.php
[Wed Mar 25 19:51:31.603544 2026] [:error] [pid 26269:tid 26284] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Wed Mar 25 19:51:31.861668 2026] [:error] [pid 26269:tid 26292] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/ddd.php
[Wed Mar 25 19:51:32.116678 2026] [:error] [pid 26269:tid 26290] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2024.php
[Wed Mar 25 19:51:32.369894 2026] [:error] [pid 26269:tid 26295] [client 20.166.31.118:36085] File does not exist: /usr/local/apache/htdocs/suspended-page/fgd.php
[Wed Mar 25 19:51:32.619576 2026] [:error] [pid 26269:tid 26283] [client 20.166.31.118:36085] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AAAA.php"] [unique_id "acPMREn7e-ZQbaIs7qy7RAAAAYc"]
[Wed Mar 25 19:51:33.149804 2026] [:error] [pid 47989:tid 48006] [client 20.166.31.118:20718] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AAAA.php"] [unique_id "acPMRSWKdJMhIccROjngnwAAAU8"]
[Wed Mar 25 19:51:33.704131 2026] [:error] [pid 25875:tid 25891] [client 20.166.31.118:21008] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AAAA.php"] [unique_id "acPMRRJ38QkS3Nyfshz8sQAAAoo"]
[Wed Mar 25 19:51:34.229336 2026] [:error] [pid 25875:tid 25885] [client 20.166.31.118:24451] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AAAA.php"] [unique_id "acPMRhJ38QkS3Nyfshz8tQAAAoQ"]
[Wed Mar 25 19:51:34.800180 2026] [:error] [pid 25875:tid 25886] [client 20.166.31.118:36049] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fde.php"] [unique_id "acPMRhJ38QkS3Nyfshz8ugAAAoU"]
[Wed Mar 25 19:51:35.305617 2026] [:error] [pid 26449:tid 26453] [client 20.166.31.118:31394] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fde.php"] [unique_id "acPMR9pZ2T15NDqzAjF8tAAAAkA"]
[Wed Mar 25 19:51:35.844109 2026] [:error] [pid 26321:tid 26354] [client 20.166.31.118:54410] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yawa.php"] [unique_id "acPMR_KO65qqGZCSPZpKNgAAAg0"]
[Wed Mar 25 19:51:36.346438 2026] [:error] [pid 47989:tid 48013] [client 20.166.31.118:31403] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yawa.php"] [unique_id "acPMSCWKdJMhIccROjngpQAAAVY"]
[Wed Mar 25 19:51:36.909185 2026] [:error] [pid 892:tid 905] [client 20.166.31.118:45276] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bays.php"] [unique_id "acPMSCT_G8WMU3T3yxrUIwAAAMc"]
[Wed Mar 25 19:51:37.428213 2026] [:error] [pid 26269:tid 26287] [client 20.166.31.118:21054] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bays.php"] [unique_id "acPMSUn7e-ZQbaIs7qy7RQAAAYs"]
[Wed Mar 25 19:51:37.962428 2026] [:error] [pid 25969:tid 26045] [client 20.166.31.118:34820] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bays.php"] [unique_id "acPMSRd3aEUmOfdKja8KRAAAA9M"]
[Wed Mar 25 19:51:38.506616 2026] [:error] [pid 26449:tid 26476] [client 20.166.31.118:46471] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bays.php"] [unique_id "acPMStpZ2T15NDqzAjF8uQAAAlc"]
[Wed Mar 25 19:51:39.035298 2026] [:error] [pid 25875:tid 25904] [client 20.166.31.118:51494] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0rg.php"] [unique_id "acPMSxJ38QkS3Nyfshz8xQAAApc"]
[Wed Mar 25 19:51:39.535662 2026] [:error] [pid 25969:tid 26027] [client 20.166.31.118:48457] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0rg.php"] [unique_id "acPMSxd3aEUmOfdKja8KRwAAA8E"]
[Wed Mar 25 19:51:40.165413 2026] [:error] [pid 25967:tid 25995] [client 20.166.31.118:41443] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0rg.php"] [unique_id "acPMTPg8Qtq7ZM4mSFlbcAAAA1c"]
[Wed Mar 25 19:51:40.747249 2026] [:error] [pid 47989:tid 48005] [client 20.166.31.118:51480] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x0rg.php"] [unique_id "acPMTCWKdJMhIccROjngqAAAAU4"]
[Wed Mar 25 19:51:41.385626 2026] [:error] [pid 26321:tid 26356] [client 20.166.31.118:54447] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dk.php"] [unique_id "acPMTfKO65qqGZCSPZpKOQAAAg8"]
[Wed Mar 25 19:51:41.986946 2026] [:error] [pid 25875:tid 25902] [client 20.166.31.118:45772] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dk.php"] [unique_id "acPMTRJ38QkS3Nyfshz8zwAAApU"]
[Wed Mar 25 19:51:42.524902 2026] [:error] [pid 25875:tid 25892] [client 20.166.31.118:31401] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dk.php"] [unique_id "acPMThJ38QkS3Nyfshz80QAAAos"]
[Wed Mar 25 19:51:43.059100 2026] [:error] [pid 47989:tid 48012] [client 20.166.31.118:25244] [client 20.166.31.118] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dk.php"] [unique_id "acPMTyWKdJMhIccROjngqQAAAVU"]
[Wed Mar 25 21:09:34.386971 2026] [:error] [pid 25875:tid 25894] [client 187.19.173.208:50239] [client 187.19.173.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.19.173.208, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acPejhJ38QkS3NyfshwhDwAAAo0"]
[Wed Mar 25 21:09:34.392761 2026] [:error] [pid 25875:tid 25894] [client 187.19.173.208:50239] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 21:29:58.278787 2026] [:error] [pid 25969:tid 26029] [client 182.42.111.156:53400] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acPjVhd3aEUmOfdKja8TdAAAA8M"]
[Wed Mar 25 23:17:22.796989 2026] [:error] [pid 47989:tid 47992] [client 170.106.65.93:58206] [client 170.106.65.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acP8giWKdJMhIccROjkXIAAAAUE"]
[Thu Mar 26 01:30:58.287579 2026] [:error] [pid 32829:tid 32847] [client 43.130.91.95:33174] [client 43.130.91.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acQb0nFEeazI9mYaKszeVAAAAFA"]
[Thu Mar 26 03:59:59.769860 2026] [:error] [pid 16506:tid 16578] [client 20.216.138.90:19417] [client 20.216.138.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQ-v2yB6wBvYPbz_mrCMwAAAIs"]
[Thu Mar 26 04:00:00.267548 2026] [:error] [pid 16609:tid 16635] [client 20.216.138.90:47970] [client 20.216.138.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQ-wJwuhmhbS_OPKkrYDwAAANE"]
[Thu Mar 26 04:00:00.828093 2026] [:error] [pid 16609:tid 16631] [client 20.216.138.90:55435] [client 20.216.138.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQ-wJwuhmhbS_OPKkrYFAAAAM0"]
[Thu Mar 26 04:00:02.389900 2026] [:error] [pid 16506:tid 16584] [client 20.216.138.90:30205] [client 20.216.138.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acQ-wmyB6wBvYPbz_mrCNAAAAJE"]
[Thu Mar 26 04:59:37.304361 2026] [:error] [pid 60829:tid 60843] [client 108.165.47.212:58752] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Thu Mar 26 05:28:11.668210 2026] [:error] [pid 60829:tid 60837] [client 84.247.168.251:60062] [client 84.247.168.251] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 84.247.168.251, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acRTa_TdjHKeZokybaS82QAAAQY"]
[Thu Mar 26 05:28:11.671995 2026] [:error] [pid 60829:tid 60837] [client 84.247.168.251:60062] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 26 07:12:53.617861 2026] [:error] [pid 60829:tid 60842] [client 192.3.207.218:57569] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/artisan"] [unique_id "acRr9fTdjHKeZokybaQpngAAAQs"]
[Thu Mar 26 07:12:54.040819 2026] [:error] [pid 19711:tid 19753] [client 192.3.207.218:58174] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/artisan"] [unique_id "acRr9mj3l1y81GYfluRJiwAAAEQ"]
[Thu Mar 26 07:12:55.242033 2026] [:error] [pid 31717:tid 31730] [client 192.3.207.218:58695] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/artisan"] [unique_id "acRr97-SCF7YDISDX49wCQAAAYg"]
[Thu Mar 26 07:12:55.665023 2026] [:error] [pid 31670:tid 31676] [client 192.3.207.218:59642] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/artisan"] [unique_id "acRr9zXVthXxCnWjOTQxwQAAAUQ"]
[Thu Mar 26 07:12:56.512893 2026] [:error] [pid 31670:tid 31687] [client 192.3.207.218:60108] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "acRr-DXVthXxCnWjOTQyAQAAAU8"]
[Thu Mar 26 08:09:31.524334 2026] [:error] [pid 60829:tid 60853] [client 43.131.36.84:41614] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acR5O_TdjHKeZokybaQ4bwAAARY"]
[Thu Mar 26 08:51:16.377727 2026] [:error] [pid 31670:tid 31693] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 26 08:51:16.651986 2026] [:error] [pid 31670:tid 31687] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Mar 26 08:51:16.899327 2026] [:error] [pid 31670:tid 31673] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Thu Mar 26 08:51:17.168102 2026] [:error] [pid 31670:tid 31695] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Mar 26 08:51:17.407331 2026] [:error] [pid 31670:tid 31672] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Mar 26 08:51:17.648220 2026] [:error] [pid 31670:tid 31674] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Thu Mar 26 08:51:17.925997 2026] [:error] [pid 31670:tid 31692] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Thu Mar 26 08:51:18.164743 2026] [:error] [pid 31670:tid 31688] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Mar 26 08:51:18.404968 2026] [:error] [pid 31670:tid 31679] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu Mar 26 08:51:18.667098 2026] [:error] [pid 31670:tid 31678] [client 20.203.196.218:7945] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Mar 26 08:51:18.903203 2026] [:error] [pid 31670:tid 31690] [client 20.203.196.218:7945] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acSDBjXVthXxCnWjOTRp0QAAAVI"]
[Thu Mar 26 08:51:19.801062 2026] [:error] [pid 31780:tid 31829] [client 20.203.196.218:20145] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acSDB5JDwZsy5O4ZXEjOUAAAAgg"]
[Thu Mar 26 08:51:20.620955 2026] [:error] [pid 31717:tid 31726] [client 20.203.196.218:11131] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acSDCL-SCF7YDISDX4-CwgAAAYQ"]
[Thu Mar 26 08:51:21.332605 2026] [:error] [pid 19818:tid 19831] [client 20.203.196.218:22404] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acSDCczaSnm3d1BeM5WbxQAAAMs"]
[Thu Mar 26 08:51:22.244674 2026] [:error] [pid 31717:tid 31730] [client 20.203.196.218:32405] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acSDCr-SCF7YDISDX4-CyQAAAYg"]
[Thu Mar 26 08:51:22.916524 2026] [:error] [pid 31670:tid 31688] [client 20.203.196.218:11105] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acSDCjXVthXxCnWjOTRp1gAAAVA"]
[Thu Mar 26 08:51:23.485357 2026] [:error] [pid 31780:tid 31826] [client 20.203.196.218:20158] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acSDC5JDwZsy5O4ZXEjOVgAAAgY"]
[Thu Mar 26 08:51:24.052226 2026] [:error] [pid 31670:tid 31688] [client 20.203.196.218:22435] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "acSDDDXVthXxCnWjOTRp4AAAAVA"]
[Thu Mar 26 08:51:24.544315 2026] [:error] [pid 31670:tid 31690] [client 20.203.196.218:29608] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "acSDDDXVthXxCnWjOTRp4wAAAVI"]
[Thu Mar 26 08:51:25.127380 2026] [:error] [pid 31670:tid 31693] [client 20.203.196.218:8761] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "acSDDTXVthXxCnWjOTRp5wAAAVU"]
[Thu Mar 26 08:51:26.077536 2026] [:error] [pid 31670:tid 31691] [client 20.203.196.218:21349] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "acSDDjXVthXxCnWjOTRp8gAAAVM"]
[Thu Mar 26 08:51:26.835251 2026] [:error] [pid 31670:tid 31674] [client 20.203.196.218:28148] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "acSDDjXVthXxCnWjOTRp9wAAAUI"]
[Thu Mar 26 08:51:27.838739 2026] [:error] [pid 31670:tid 31675] [client 20.203.196.218:22042] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acSDDzXVthXxCnWjOTRp-wAAAUM"]
[Thu Mar 26 08:51:28.611754 2026] [:error] [pid 60829:tid 60841] [client 20.203.196.218:14857] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acSDEPTdjHKeZokybaRDdQAAAQo"]
[Thu Mar 26 08:51:29.242545 2026] [:error] [pid 19818:tid 19834] [client 20.203.196.218:25314] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acSDEczaSnm3d1BeM5WbxwAAAM4"]
[Thu Mar 26 08:51:29.995612 2026] [:error] [pid 19710:tid 19736] [client 20.203.196.218:14849] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "acSDEQVEWP8Ar68Njk60ZAAAAA4"]
[Thu Mar 26 08:51:31.295561 2026] [:error] [pid 31670:tid 31672] [client 20.203.196.218:11871] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acSDEzXVthXxCnWjOTRqAwAAAUA"]
[Thu Mar 26 08:51:32.880891 2026] [:error] [pid 31778:tid 31810] [client 20.203.196.218:7876] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acSDFA3kybI2o-xasmBdDQAAAdE"]
[Thu Mar 26 08:51:34.103602 2026] [:error] [pid 19710:tid 19746] [client 20.203.196.218:25287] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acSDFgVEWP8Ar68Njk60bQAAABg"]
[Thu Mar 26 08:51:34.678220 2026] [:error] [pid 31670:tid 31696] [client 20.203.196.218:11088] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acSDFjXVthXxCnWjOTRqEAAAAVg"]
[Thu Mar 26 08:51:39.790588 2026] [:error] [pid 31780:tid 31827] [client 20.203.196.218:30956] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acSDG5JDwZsy5O4ZXEjOXgAAAgc"]
[Thu Mar 26 08:51:41.005812 2026] [:error] [pid 60829:tid 60836] [client 20.203.196.218:22037] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acSDHfTdjHKeZokybaRDgQAAAQU"]
[Thu Mar 26 08:51:41.857322 2026] [:error] [pid 19712:tid 19792] [client 20.203.196.218:22422] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acSDHdWhKhRNqm23vFPmywAAAJA"]
[Thu Mar 26 08:51:43.589636 2026] [:error] [pid 19818:tid 19829] [client 20.203.196.218:21342] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acSDH8zaSnm3d1BeM5Wb0wAAAMk"]
[Thu Mar 26 08:51:44.928150 2026] [:error] [pid 60829:tid 60836] [client 20.203.196.218:7981] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acSDIPTdjHKeZokybaRDjAAAAQU"]
[Thu Mar 26 08:51:45.961950 2026] [:error] [pid 31778:tid 31812] [client 20.203.196.218:39973] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acSDIQ3kybI2o-xasmBdHwAAAdM"]
[Thu Mar 26 08:51:46.663885 2026] [:error] [pid 19711:tid 19760] [client 20.203.196.218:32409] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acSDImj3l1y81GYfluRTugAAAEs"]
[Thu Mar 26 08:51:47.743428 2026] [:error] [pid 31780:tid 31841] [client 20.203.196.218:7972] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acSDI5JDwZsy5O4ZXEjObwAAAhQ"]
[Thu Mar 26 08:51:48.522251 2026] [:error] [pid 31780:tid 31822] [client 20.203.196.218:4913] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acSDJJJDwZsy5O4ZXEjOdgAAAgI"]
[Thu Mar 26 08:51:49.495568 2026] [:error] [pid 31670:tid 31695] [client 20.203.196.218:11126] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acSDJTXVthXxCnWjOTRqHAAAAVc"]
[Thu Mar 26 08:51:50.721416 2026] [:error] [pid 31778:tid 31796] [client 20.203.196.218:21371] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acSDJg3kybI2o-xasmBdIgAAAcM"]
[Thu Mar 26 08:51:51.780639 2026] [:error] [pid 19818:tid 19825] [client 20.203.196.218:11109] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "acSDJ8zaSnm3d1BeM5Wb1gAAAMU"]
[Thu Mar 26 08:51:52.697890 2026] [:error] [pid 60829:tid 60849] [client 20.203.196.218:7998] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acSDKPTdjHKeZokybaRDlAAAARI"]
[Thu Mar 26 08:51:53.366697 2026] [:error] [pid 31670:tid 31682] [client 20.203.196.218:64310] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acSDKTXVthXxCnWjOTRqJgAAAUo"]
[Thu Mar 26 08:51:54.919879 2026] [:error] [pid 31717:tid 31741] [client 20.203.196.218:28126] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acSDKr-SCF7YDISDX4-C0wAAAZM"]
[Thu Mar 26 08:51:56.063075 2026] [:error] [pid 31670:tid 31678] [client 20.203.196.218:26443] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acSDLDXVthXxCnWjOTRqMAAAAUY"]
[Thu Mar 26 08:51:57.594599 2026] [:error] [pid 31717:tid 31736] [client 20.203.196.218:22071] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "acSDLb-SCF7YDISDX4-C1QAAAY4"]
[Thu Mar 26 08:51:59.141964 2026] [:error] [pid 60829:tid 60844] [client 20.203.196.218:20549] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "acSDL_TdjHKeZokybaRDmAAAAQ0"]
[Thu Mar 26 08:51:59.902948 2026] [:error] [pid 19712:tid 19799] [client 20.203.196.218:43201] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "acSDL9WhKhRNqm23vFPmzgAAAJc"]
[Thu Mar 26 08:52:00.751886 2026] [:error] [pid 31670:tid 31686] [client 20.203.196.218:34122] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "acSDMDXVthXxCnWjOTRqPwAAAU4"]
[Thu Mar 26 08:52:01.336853 2026] [:error] [pid 31778:tid 31796] [client 20.203.196.218:34140] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSDMQ3kybI2o-xasmBdLAAAAcM"]
[Thu Mar 26 08:52:02.087685 2026] [:error] [pid 60829:tid 60839] [client 20.203.196.218:9147] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSDMvTdjHKeZokybaRDpAAAAQg"]
[Thu Mar 26 08:52:02.763663 2026] [:error] [pid 31778:tid 31795] [client 20.203.196.218:27680] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSDMg3kybI2o-xasmBdLgAAAcI"]
[Thu Mar 26 08:52:04.801542 2026] [:error] [pid 31717:tid 31730] [client 20.203.196.218:23978] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acSDNL-SCF7YDISDX4-C2QAAAYg"]
[Thu Mar 26 08:52:15.692211 2026] [:error] [pid 31670:tid 31695] [client 20.203.196.218:39057] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "acSDPzXVthXxCnWjOTRqdAAAAVc"]
[Thu Mar 26 08:52:30.250596 2026] [:error] [pid 31780:tid 31844] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 26 08:52:30.525831 2026] [:error] [pid 31780:tid 31836] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 26 08:52:30.957323 2026] [:error] [pid 31780:tid 31821] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Thu Mar 26 08:52:31.217194 2026] [:error] [pid 31780:tid 31820] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Mar 26 08:52:31.580301 2026] [:error] [pid 31780:tid 31823] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Thu Mar 26 08:52:31.818828 2026] [:error] [pid 31780:tid 31822] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Thu Mar 26 08:52:32.121162 2026] [:error] [pid 31780:tid 31843] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Thu Mar 26 08:52:32.379470 2026] [:error] [pid 31780:tid 31829] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Thu Mar 26 08:52:32.618465 2026] [:error] [pid 31780:tid 31831] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Thu Mar 26 08:52:32.858956 2026] [:error] [pid 31780:tid 31842] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Thu Mar 26 08:52:33.098345 2026] [:error] [pid 31780:tid 31840] [client 20.203.196.218:4640] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Mar 26 08:52:33.333792 2026] [:error] [pid 31780:tid 31832] [client 20.203.196.218:4640] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "acSDUZJDwZsy5O4ZXEjOugAAAgs"]
[Thu Mar 26 08:52:34.848231 2026] [:error] [pid 31670:tid 31692] [client 20.203.196.218:20917] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "acSDUjXVthXxCnWjOTRqkgAAAVQ"]
[Thu Mar 26 08:52:35.584662 2026] [:error] [pid 31670:tid 31681] [client 20.203.196.218:30908] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "acSDUzXVthXxCnWjOTRqlQAAAUk"]
[Thu Mar 26 08:52:37.048537 2026] [:error] [pid 31778:tid 31808] [client 20.203.196.218:37997] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "acSDVQ3kybI2o-xasmBdUAAAAc8"]
[Thu Mar 26 08:52:39.049698 2026] [:error] [pid 31780:tid 31826] [client 20.203.196.218:35209] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acSDV5JDwZsy5O4ZXEjOvwAAAgY"]
[Thu Mar 26 08:52:39.924371 2026] [:error] [pid 31670:tid 31680] [client 20.203.196.218:19818] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acSDVzXVthXxCnWjOTRqngAAAUg"]
[Thu Mar 26 08:52:41.104795 2026] [:error] [pid 19710:tid 19746] [client 20.203.196.218:9856] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acSDWQVEWP8Ar68Njk60ewAAABg"]
[Thu Mar 26 08:52:42.402531 2026] [:error] [pid 31670:tid 31679] [client 20.203.196.218:19832] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acSDWjXVthXxCnWjOTRqowAAAUc"]
[Thu Mar 26 08:52:43.500439 2026] [:error] [pid 31780:tid 31829] [client 20.203.196.218:8488] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "acSDW5JDwZsy5O4ZXEjOwAAAAgg"]
[Thu Mar 26 08:52:44.272745 2026] [:error] [pid 31780:tid 31842] [client 20.203.196.218:4233] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "acSDXJJDwZsy5O4ZXEjOxQAAAhU"]
[Thu Mar 26 08:52:44.961274 2026] [:error] [pid 60829:tid 60835] [client 20.203.196.218:8456] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "acSDXPTdjHKeZokybaRDwAAAAQQ"]
[Thu Mar 26 08:52:45.796433 2026] [:error] [pid 19710:tid 19741] [client 20.203.196.218:42945] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "acSDXQVEWP8Ar68Njk60fAAAABM"]
[Thu Mar 26 08:52:47.141141 2026] [:error] [pid 31670:tid 31692] [client 20.203.196.218:8468] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSDXzXVthXxCnWjOTRqqgAAAVQ"]
[Thu Mar 26 08:52:48.357698 2026] [:error] [pid 31670:tid 31674] [client 20.203.196.218:37225] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSDYDXVthXxCnWjOTRqrwAAAUI"]
[Thu Mar 26 08:52:49.096508 2026] [:error] [pid 31670:tid 31686] [client 20.203.196.218:23581] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSDYTXVthXxCnWjOTRqtAAAAU4"]
[Thu Mar 26 08:52:50.117073 2026] [:error] [pid 60829:tid 60832] [client 20.203.196.218:8489] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acSDYvTdjHKeZokybaRDzAAAAQE"]
[Thu Mar 26 08:52:50.926526 2026] [:error] [pid 31780:tid 31822] [client 20.203.196.218:39399] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "acSDYpJDwZsy5O4ZXEjOzQAAAgI"]
[Thu Mar 26 08:52:51.556089 2026] [:error] [pid 31780:tid 31834] [client 20.203.196.218:23576] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "acSDY5JDwZsy5O4ZXEjO0QAAAg0"]
[Thu Mar 26 08:52:52.488154 2026] [:error] [pid 31780:tid 31833] [client 20.203.196.218:7430] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "acSDZJJDwZsy5O4ZXEjO1AAAAgw"]
[Thu Mar 26 08:52:53.095135 2026] [:error] [pid 31780:tid 31821] [client 20.203.196.218:24843] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "acSDZZJDwZsy5O4ZXEjO1gAAAgE"]
[Thu Mar 26 08:52:53.663832 2026] [:error] [pid 31778:tid 31806] [client 20.203.196.218:42992] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acSDZQ3kybI2o-xasmBdYQAAAc0"]
[Thu Mar 26 08:52:54.438856 2026] [:error] [pid 31780:tid 31826] [client 20.203.196.218:22093] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acSDZpJDwZsy5O4ZXEjO2gAAAgY"]
[Thu Mar 26 08:52:55.050768 2026] [:error] [pid 60829:tid 60837] [client 20.203.196.218:39415] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acSDZ_TdjHKeZokybaRD0QAAAQY"]
[Thu Mar 26 08:52:55.599667 2026] [:error] [pid 60829:tid 60843] [client 20.203.196.218:8459] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "acSDZ_TdjHKeZokybaRD0wAAAQw"]
[Thu Mar 26 08:52:56.256447 2026] [:error] [pid 31778:tid 31810] [client 20.203.196.218:29639] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acSDaA3kybI2o-xasmBdZwAAAdE"]
[Thu Mar 26 08:52:56.986171 2026] [:error] [pid 19712:tid 19782] [client 20.203.196.218:9898] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acSDaNWhKhRNqm23vFPm3gAAAIY"]
[Thu Mar 26 08:52:58.268353 2026] [:error] [pid 31670:tid 31680] [client 20.203.196.218:22107] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acSDajXVthXxCnWjOTRqxwAAAUg"]
[Thu Mar 26 08:52:58.908136 2026] [:error] [pid 31670:tid 31681] [client 20.203.196.218:29648] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "acSDajXVthXxCnWjOTRqywAAAUk"]
[Thu Mar 26 08:52:59.620477 2026] [:error] [pid 31670:tid 31673] [client 20.203.196.218:18768] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acSDazXVthXxCnWjOTRqzQAAAUE"]
[Thu Mar 26 08:53:01.606707 2026] [:error] [pid 31670:tid 31678] [client 20.203.196.218:22111] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acSDbTXVthXxCnWjOTRq1wAAAUY"]
[Thu Mar 26 08:53:02.564714 2026] [:error] [pid 31670:tid 31691] [client 20.203.196.218:18774] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acSDbjXVthXxCnWjOTRq2wAAAVM"]
[Thu Mar 26 08:53:04.097789 2026] [:error] [pid 19710:tid 19724] [client 20.203.196.218:22114] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acSDcAVEWP8Ar68Njk60gwAAAAI"]
[Thu Mar 26 08:53:05.398228 2026] [:error] [pid 19711:tid 19772] [client 20.203.196.218:12258] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acSDcWj3l1y81GYfluRTyAAAAFc"]
[Thu Mar 26 08:53:06.868378 2026] [:error] [pid 31670:tid 31676] [client 20.203.196.218:12226] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acSDcjXVthXxCnWjOTRq4wAAAUQ"]
[Thu Mar 26 08:53:07.977082 2026] [:error] [pid 19711:tid 19756] [client 20.203.196.218:39388] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acSDc2j3l1y81GYfluRTyQAAAEc"]
[Thu Mar 26 08:53:09.407608 2026] [:error] [pid 60829:tid 60833] [client 20.203.196.218:32015] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "acSDdfTdjHKeZokybaRD3AAAAQI"]
[Thu Mar 26 08:53:10.964822 2026] [:error] [pid 31780:tid 31833] [client 20.203.196.218:39396] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "acSDdpJDwZsy5O4ZXEjO4QAAAgw"]
[Thu Mar 26 08:53:11.703975 2026] [:error] [pid 31780:tid 31844] [client 20.203.196.218:40302] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "acSDd5JDwZsy5O4ZXEjO5gAAAhc"]
[Thu Mar 26 08:53:12.385002 2026] [:error] [pid 31778:tid 31794] [client 20.203.196.218:22092] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "acSDeA3kybI2o-xasmBdegAAAcE"]
[Thu Mar 26 08:53:13.217449 2026] [:error] [pid 31778:tid 31817] [client 20.203.196.218:29684] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "acSDeQ3kybI2o-xasmBdewAAAdg"]
[Thu Mar 26 08:53:14.360362 2026] [:error] [pid 31670:tid 31688] [client 20.203.196.218:13408] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acSDejXVthXxCnWjOTRq8AAAAVA"]
[Thu Mar 26 08:53:15.085990 2026] [:error] [pid 31778:tid 31799] [client 20.203.196.218:24394] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acSDew3kybI2o-xasmBdggAAAcY"]
[Thu Mar 26 08:53:16.072809 2026] [:error] [pid 31670:tid 31675] [client 20.203.196.218:32051] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acSDfDXVthXxCnWjOTRq8gAAAUM"]
[Thu Mar 26 08:53:16.749415 2026] [:error] [pid 31778:tid 31802] [client 20.203.196.218:42995] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "acSDfA3kybI2o-xasmBdjAAAAck"]
[Thu Mar 26 08:53:17.570926 2026] [:error] [pid 31670:tid 31674] [client 20.203.196.218:13780] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acSDfTXVthXxCnWjOTRq-wAAAUI"]
[Thu Mar 26 08:53:18.356290 2026] [:error] [pid 60829:tid 60848] [client 20.203.196.218:8013] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acSDfvTdjHKeZokybaRD4gAAARE"]
[Thu Mar 26 08:53:18.989404 2026] [:error] [pid 60829:tid 60836] [client 20.203.196.218:8479] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acSDfvTdjHKeZokybaRD5gAAAQU"]
[Thu Mar 26 08:53:19.711760 2026] [:error] [pid 60829:tid 60846] [client 20.203.196.218:8040] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acSDf_TdjHKeZokybaRD6AAAAQ8"]
[Thu Mar 26 08:53:21.049372 2026] [:error] [pid 60829:tid 60843] [client 20.203.196.218:24419] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acSDgfTdjHKeZokybaRD6gAAAQw"]
[Thu Mar 26 08:53:21.749121 2026] [:error] [pid 60829:tid 60840] [client 20.203.196.218:42952] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acSDgfTdjHKeZokybaRD7QAAAQk"]
[Thu Mar 26 08:53:22.389126 2026] [:error] [pid 31780:tid 31825] [client 20.203.196.218:38740] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acSDgpJDwZsy5O4ZXEjPAgAAAgU"]
[Thu Mar 26 08:53:23.089719 2026] [:error] [pid 31780:tid 31823] [client 20.203.196.218:12225] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "acSDg5JDwZsy5O4ZXEjPBwAAAgM"]
[Thu Mar 26 08:53:23.897507 2026] [:error] [pid 31670:tid 31691] [client 20.203.196.218:13383] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acSDgzXVthXxCnWjOTRrBwAAAVM"]
[Thu Mar 26 08:53:24.882988 2026] [:error] [pid 31778:tid 31797] [client 20.203.196.218:24395] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acSDhA3kybI2o-xasmBdkwAAAcQ"]
[Thu Mar 26 08:53:26.319353 2026] [:error] [pid 31780:tid 31820] [client 20.203.196.218:23614] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acSDhpJDwZsy5O4ZXEjPEgAAAgA"]
[Thu Mar 26 08:53:27.628254 2026] [:error] [pid 31780:tid 31845] [client 20.203.196.218:25613] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acSDh5JDwZsy5O4ZXEjPGQAAAhg"]
[Thu Mar 26 08:53:28.262941 2026] [:error] [pid 31670:tid 31684] [client 20.203.196.218:13778] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acSDiDXVthXxCnWjOTRrGwAAAUw"]
[Thu Mar 26 08:53:28.950056 2026] [:error] [pid 31780:tid 31834] [client 20.203.196.218:8060] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acSDiJJDwZsy5O4ZXEjPGwAAAg0"]
[Thu Mar 26 08:53:29.918826 2026] [:error] [pid 31780:tid 31838] [client 20.203.196.218:32053] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acSDiZJDwZsy5O4ZXEjPJAAAAhE"]
[Thu Mar 26 08:53:31.150161 2026] [:error] [pid 31670:tid 31689] [client 20.203.196.218:7187] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "acSDizXVthXxCnWjOTRrIgAAAVE"]
[Thu Mar 26 08:53:31.955952 2026] [:error] [pid 19711:tid 19759] [client 20.203.196.218:8474] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "acSDi2j3l1y81GYfluRT0QAAAEo"]
[Thu Mar 26 08:53:32.869869 2026] [:error] [pid 31717:tid 31729] [client 20.203.196.218:8483] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "acSDjL-SCF7YDISDX4-DCgAAAYc"]
[Thu Mar 26 08:53:33.489199 2026] [:error] [pid 31717:tid 31728] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Mar 26 08:53:33.730070 2026] [:error] [pid 31717:tid 31744] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Mar 26 08:53:33.991072 2026] [:error] [pid 31717:tid 31736] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Thu Mar 26 08:53:34.248641 2026] [:error] [pid 31717:tid 31743] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Mar 26 08:53:34.519981 2026] [:error] [pid 31717:tid 31730] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Thu Mar 26 08:53:34.779535 2026] [:error] [pid 31717:tid 31723] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Mar 26 08:53:35.020198 2026] [:error] [pid 31717:tid 31725] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Thu Mar 26 08:53:35.307783 2026] [:error] [pid 31717:tid 31745] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Mar 26 08:53:35.547856 2026] [:error] [pid 31717:tid 31729] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Thu Mar 26 08:53:36.050025 2026] [:error] [pid 31717:tid 31727] [client 20.203.196.218:13804] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Thu Mar 26 08:53:36.286796 2026] [:error] [pid 31717:tid 31737] [client 20.203.196.218:13804] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acSDkL-SCF7YDISDX4-DHgAAAY8"]
[Thu Mar 26 08:53:37.011117 2026] [:error] [pid 31670:tid 31673] [client 20.203.196.218:29647] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acSDkTXVthXxCnWjOTRrMAAAAUE"]
[Thu Mar 26 08:53:37.579624 2026] [:error] [pid 19711:tid 19770] [client 20.203.196.218:7181] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acSDkWj3l1y81GYfluRT1AAAAFU"]
[Thu Mar 26 08:53:38.560205 2026] [:error] [pid 31778:tid 31797] [client 20.203.196.218:39394] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "acSDkg3kybI2o-xasmBdmgAAAcQ"]
[Thu Mar 26 08:53:39.156652 2026] [:error] [pid 19712:tid 19797] [client 20.203.196.218:40293] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acSDk9WhKhRNqm23vFPm8AAAAJU"]
[Thu Mar 26 08:53:39.960068 2026] [:error] [pid 31780:tid 31832] [client 20.203.196.218:22080] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acSDk5JDwZsy5O4ZXEjPMgAAAgs"]
[Thu Mar 26 08:53:40.511273 2026] [:error] [pid 60829:tid 60846] [client 20.203.196.218:23580] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acSDlPTdjHKeZokybaRD_wAAAQ8"]
[Thu Mar 26 08:53:41.023382 2026] [:error] [pid 31780:tid 31827] [client 20.203.196.218:8495] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acSDlZJDwZsy5O4ZXEjPNQAAAgc"]
[Thu Mar 26 08:53:41.676203 2026] [:error] [pid 31780:tid 31823] [client 20.203.196.218:24442] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acSDlZJDwZsy5O4ZXEjPOAAAAgM"]
[Thu Mar 26 08:53:42.592590 2026] [:error] [pid 31670:tid 31686] [client 20.203.196.218:13414] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acSDljXVthXxCnWjOTRrQwAAAU4"]
[Thu Mar 26 08:53:43.222804 2026] [:error] [pid 31670:tid 31679] [client 20.203.196.218:12275] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acSDlzXVthXxCnWjOTRrRgAAAUc"]
[Thu Mar 26 08:53:44.033380 2026] [:error] [pid 31778:tid 31803] [client 20.203.196.218:23552] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acSDmA3kybI2o-xasmBdqAAAAco"]
[Thu Mar 26 08:53:44.955334 2026] [:error] [pid 31778:tid 31804] [client 20.203.196.218:22112] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acSDmA3kybI2o-xasmBdqgAAAcs"]
[Thu Mar 26 08:53:46.337971 2026] [:error] [pid 31780:tid 31832] [client 20.203.196.218:8463] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acSDmpJDwZsy5O4ZXEjPRQAAAgs"]
[Thu Mar 26 08:53:47.166056 2026] [:error] [pid 31670:tid 31683] [client 20.203.196.218:38744] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acSDmzXVthXxCnWjOTRrWQAAAUs"]
[Thu Mar 26 08:53:48.847507 2026] [:error] [pid 31717:tid 31738] [client 20.203.196.218:42907] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "acSDnL-SCF7YDISDX4-DIgAAAZA"]
[Thu Mar 26 08:53:51.048040 2026] [:error] [pid 31780:tid 31834] [client 20.203.196.218:12285] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "acSDn5JDwZsy5O4ZXEjPUAAAAg0"]
[Thu Mar 26 08:53:52.906803 2026] [:error] [pid 31670:tid 31679] [client 20.203.196.218:22135] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "acSDoDXVthXxCnWjOTRraAAAAUc"]
[Thu Mar 26 08:53:56.646044 2026] [:error] [pid 19712:tid 19790] [client 20.203.196.218:42920] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "acSDpNWhKhRNqm23vFPm8wAAAI4"]
[Thu Mar 26 08:53:57.511963 2026] [:error] [pid 31670:tid 31696] [client 20.203.196.218:8061] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "acSDpTXVthXxCnWjOTRreAAAAVg"]
[Thu Mar 26 08:53:58.837390 2026] [:error] [pid 31670:tid 31685] [client 20.203.196.218:8026] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acSDpjXVthXxCnWjOTRrfgAAAU0"]
[Thu Mar 26 08:53:59.812273 2026] [:error] [pid 31670:tid 31674] [client 20.203.196.218:24445] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acSDpzXVthXxCnWjOTRr1QAAAUI"]
[Thu Mar 26 08:54:00.691303 2026] [:error] [pid 31778:tid 31813] [client 20.203.196.218:37194] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acSDqA3kybI2o-xasmBdzQAAAdQ"]
[Thu Mar 26 08:54:01.418870 2026] [:error] [pid 19711:tid 19761] [client 20.203.196.218:7182] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/44.php"] [unique_id "acSDqWj3l1y81GYfluRT3gAAAEw"]
[Thu Mar 26 08:54:02.380126 2026] [:error] [pid 31778:tid 31811] [client 20.203.196.218:13394] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acSDqg3kybI2o-xasmBd0gAAAdI"]
[Thu Mar 26 08:54:04.015599 2026] [:error] [pid 60829:tid 60836] [client 20.203.196.218:42930] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acSDrPTdjHKeZokybaREDQAAAQU"]
[Thu Mar 26 08:54:05.302861 2026] [:error] [pid 31717:tid 31741] [client 20.203.196.218:38763] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acSDrb-SCF7YDISDX4-DMQAAAZM"]
[Thu Mar 26 08:54:07.982901 2026] [:error] [pid 19712:tid 19793] [client 20.203.196.218:32058] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "acSDr9WhKhRNqm23vFPm9QAAAJE"]
[Thu Mar 26 08:54:11.672981 2026] [:error] [pid 31780:tid 31824] [client 20.203.196.218:35239] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acSDs5JDwZsy5O4ZXEjPbgAAAgQ"]
[Thu Mar 26 08:54:12.596723 2026] [:error] [pid 31670:tid 31695] [client 20.203.196.218:29666] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acSDtDXVthXxCnWjOTRr9AAAAVc"]
[Thu Mar 26 08:54:14.824523 2026] [:error] [pid 60829:tid 60845] [client 20.203.196.218:24397] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acSDtvTdjHKeZokybaREGQAAAQ4"]
[Thu Mar 26 08:54:15.512179 2026] [:error] [pid 31780:tid 31834] [client 20.203.196.218:29674] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amp.php"] [unique_id "acSDt5JDwZsy5O4ZXEjPdAAAAg0"]
[Thu Mar 26 08:54:16.625911 2026] [:error] [pid 19710:tid 19746] [client 20.203.196.218:12198] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acSDuAVEWP8Ar68Njk60mQAAABg"]
[Thu Mar 26 08:54:17.579251 2026] [:error] [pid 31670:tid 31691] [client 20.203.196.218:13793] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acSDuTXVthXxCnWjOTRr_QAAAVM"]
[Thu Mar 26 08:54:19.273897 2026] [:error] [pid 31780:tid 31822] [client 20.203.196.218:25601] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acSDu5JDwZsy5O4ZXEjPeQAAAgI"]
[Thu Mar 26 08:54:20.697093 2026] [:error] [pid 19710:tid 19724] [client 20.203.196.218:45132] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "acSDvAVEWP8Ar68Njk60ngAAAAI"]
[Thu Mar 26 08:54:23.135903 2026] [:error] [pid 31670:tid 31695] [client 20.203.196.218:17202] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "acSDvzXVthXxCnWjOTRsAgAAAVc"]
[Thu Mar 26 08:54:24.605603 2026] [:error] [pid 31670:tid 31682] [client 20.203.196.218:19713] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "acSDwDXVthXxCnWjOTRsCgAAAUo"]
[Thu Mar 26 08:54:25.555797 2026] [:error] [pid 31670:tid 31695] [client 20.203.196.218:17215] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "acSDwTXVthXxCnWjOTRsDgAAAVc"]
[Thu Mar 26 08:54:27.645574 2026] [:error] [pid 31670:tid 31693] [client 20.203.196.218:38743] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "acSDwzXVthXxCnWjOTRsPwAAAVU"]
[Thu Mar 26 08:54:30.316100 2026] [:error] [pid 31670:tid 31692] [client 20.203.196.218:10735] [client 20.203.196.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "acSDxjXVthXxCnWjOTRsXQAAAVQ"]
[Thu Mar 26 08:54:48.217271 2026] [:error] [pid 31780:tid 31824] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Thu Mar 26 08:54:48.500379 2026] [:error] [pid 31780:tid 31845] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Thu Mar 26 08:54:48.762361 2026] [:error] [pid 31780:tid 31832] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Thu Mar 26 08:54:49.002826 2026] [:error] [pid 31780:tid 31840] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Thu Mar 26 08:54:49.280206 2026] [:error] [pid 31780:tid 31842] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Thu Mar 26 08:54:49.556301 2026] [:error] [pid 31780:tid 31824] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Thu Mar 26 08:54:49.823883 2026] [:error] [pid 31780:tid 31829] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Thu Mar 26 08:54:50.098289 2026] [:error] [pid 31780:tid 31833] [client 20.203.196.218:15354] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Thu Mar 26 11:56:03.466879 2026] [:error] [pid 60829:tid 60855] [client 43.166.245.120:49806] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acSuU_TdjHKeZokybaRrkQAAARg"]
[Thu Mar 26 14:08:54.181555 2026] [:error] [pid 19818:tid 19837] [client 43.153.85.46:59370] [client 43.153.85.46] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acTNdszaSnm3d1BeM5VoxQAAANE"]
[Thu Mar 26 17:28:54.064209 2026] [:error] [pid 19710:tid 19722] [client 95.74.140.242:3226] [client 95.74.140.242] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.74.140.242, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acT8VgVEWP8Ar68Njk71WAAAAAA"]
[Thu Mar 26 17:28:54.079713 2026] [:error] [pid 19710:tid 19722] [client 95.74.140.242:3226] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 17:49:46.725532 2026] [:error] [pid 19818:tid 19824] [client 45.89.60.157:52833] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Thu Mar 26 18:22:42.075503 2026] [:error] [pid 60829:tid 60843] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/classgoto24.php
[Thu Mar 26 18:22:42.448581 2026] [:error] [pid 60829:tid 60834] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Thu Mar 26 18:22:42.780554 2026] [:error] [pid 60829:tid 60841] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Mar 26 18:22:43.072736 2026] [:error] [pid 60829:tid 60835] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Mar 26 18:22:43.382952 2026] [:error] [pid 60829:tid 60833] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Mar 26 18:22:43.724028 2026] [:error] [pid 60829:tid 60838] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/h02ugyh.php
[Thu Mar 26 18:22:44.049916 2026] [:error] [pid 60829:tid 60836] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu Mar 26 18:22:44.420341 2026] [:error] [pid 60829:tid 60843] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Thu Mar 26 18:22:44.778339 2026] [:error] [pid 60829:tid 60851] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Thu Mar 26 18:22:45.037491 2026] [:error] [pid 60829:tid 60839] [client 20.215.248.112:21782] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Thu Mar 26 18:22:45.455833 2026] [:error] [pid 60829:tid 60831] [client 20.215.248.112:21782] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zcsu.php"] [unique_id "acUI9fTdjHKeZokybaS17AAAAQA"]
[Thu Mar 26 18:22:46.744653 2026] [:error] [pid 31670:tid 31684] [client 20.215.248.112:60541] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zcsu.php"] [unique_id "acUI9jXVthXxCnWjOTR4OgAAAUw"]
[Thu Mar 26 18:22:47.761280 2026] [:error] [pid 31670:tid 31693] [client 20.215.248.112:33754] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zcsu.php"] [unique_id "acUI9zXVthXxCnWjOTR4QgAAAVU"]
[Thu Mar 26 18:22:50.067814 2026] [:error] [pid 31670:tid 31685] [client 20.215.248.112:50697] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zcsu.php"] [unique_id "acUI-jXVthXxCnWjOTR4RgAAAU0"]
[Thu Mar 26 18:22:53.635821 2026] [:error] [pid 19818:tid 19830] [client 20.215.248.112:38961] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acUI_czaSnm3d1BeM5XvOgAAAMo"]
[Thu Mar 26 18:22:54.695460 2026] [:error] [pid 31717:tid 31733] [client 20.215.248.112:33730] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acUI_r-SCF7YDISDX4_dXwAAAYs"]
[Thu Mar 26 18:22:55.802916 2026] [:error] [pid 31780:tid 31824] [client 20.215.248.112:40224] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acUI_5JDwZsy5O4ZXEiRNQAAAgQ"]
[Thu Mar 26 18:22:57.259365 2026] [:error] [pid 31717:tid 31737] [client 20.215.248.112:28648] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acUJAb-SCF7YDISDX4_ddQAAAY8"]
[Thu Mar 26 18:22:58.283983 2026] [:error] [pid 19818:tid 19822] [client 20.215.248.112:63127] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acUJAszaSnm3d1BeM5XvmwAAAMI"]
[Thu Mar 26 18:23:00.269136 2026] [:error] [pid 31670:tid 31696] [client 20.215.248.112:63162] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acUJBDXVthXxCnWjOTR4VgAAAVg"]
[Thu Mar 26 18:23:01.231714 2026] [:error] [pid 19818:tid 19844] [client 20.215.248.112:46988] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acUJBczaSnm3d1BeM5XwAgAAANg"]
[Thu Mar 26 18:23:02.840145 2026] [:error] [pid 60829:tid 60846] [client 20.215.248.112:50701] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acUJBvTdjHKeZokybaS1-gAAAQ8"]
[Thu Mar 26 18:23:04.305883 2026] [:error] [pid 31780:tid 31835] [client 20.215.248.112:35015] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acUJCJJDwZsy5O4ZXEiRPgAAAg4"]
[Thu Mar 26 18:23:06.035536 2026] [:error] [pid 60829:tid 60844] [client 20.215.248.112:65515] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acUJCvTdjHKeZokybaS1_gAAAQ0"]
[Thu Mar 26 18:23:07.587226 2026] [:error] [pid 31670:tid 31686] [client 20.215.248.112:61693] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acUJCzXVthXxCnWjOTR4bwAAAU4"]
[Thu Mar 26 18:23:09.102746 2026] [:error] [pid 31670:tid 31675] [client 20.215.248.112:28819] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acUJDTXVthXxCnWjOTR4cwAAAUM"]
[Thu Mar 26 18:23:10.741180 2026] [:error] [pid 19710:tid 19731] [client 20.215.248.112:35022] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acUJDgVEWP8Ar68Njk78HAAAAAk"]
[Thu Mar 26 18:23:11.606637 2026] [:error] [pid 31670:tid 31693] [client 20.215.248.112:52566] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acUJDzXVthXxCnWjOTR4eQAAAVU"]
[Thu Mar 26 18:23:12.565583 2026] [:error] [pid 31780:tid 31832] [client 20.215.248.112:65525] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acUJEJJDwZsy5O4ZXEiRRAAAAgs"]
[Thu Mar 26 18:23:13.736211 2026] [:error] [pid 19710:tid 19732] [client 20.215.248.112:61671] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acUJEQVEWP8Ar68Njk78IQAAAAo"]
[Thu Mar 26 18:23:14.564305 2026] [:error] [pid 19710:tid 19745] [client 20.215.248.112:40195] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acUJEgVEWP8Ar68Njk78JAAAABc"]
[Thu Mar 26 18:23:15.541358 2026] [:error] [pid 31778:tid 31806] [client 20.215.248.112:35070] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acUJEw3kybI2o-xasmD0_AAAAc0"]
[Thu Mar 26 18:23:17.134494 2026] [:error] [pid 19818:tid 19834] [client 20.215.248.112:40193] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acUJFczaSnm3d1BeM5XwEwAAAM4"]
[Thu Mar 26 18:23:18.129300 2026] [:error] [pid 19710:tid 19731] [client 20.215.248.112:51795] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acUJFgVEWP8Ar68Njk78JQAAAAk"]
[Thu Mar 26 18:23:20.118095 2026] [:error] [pid 31670:tid 31686] [client 20.215.248.112:55443] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acUJGDXVthXxCnWjOTR4iQAAAU4"]
[Thu Mar 26 18:23:24.221513 2026] [:error] [pid 19818:tid 19823] [client 20.215.248.112:60418] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acUJHMzaSnm3d1BeM5XwIAAAAMM"]
[Thu Mar 26 18:23:25.855465 2026] [:error] [pid 31670:tid 31676] [client 20.215.248.112:61638] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acUJHTXVthXxCnWjOTR4lQAAAUQ"]
[Thu Mar 26 18:23:27.457225 2026] [:error] [pid 31780:tid 31821] [client 20.215.248.112:49767] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acUJH5JDwZsy5O4ZXEiRVAAAAgE"]
[Thu Mar 26 18:23:28.385466 2026] [:error] [pid 19710:tid 19733] [client 20.215.248.112:51797] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acUJIAVEWP8Ar68Njk78LAAAAAs"]
[Thu Mar 26 18:23:29.384977 2026] [:error] [pid 31670:tid 31689] [client 20.215.248.112:61658] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acUJITXVthXxCnWjOTR4nAAAAVE"]
[Thu Mar 26 18:23:30.745588 2026] [:error] [pid 19818:tid 19829] [client 20.215.248.112:3678] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acUJIszaSnm3d1BeM5XwLgAAAMk"]
[Thu Mar 26 18:23:33.321453 2026] [:error] [pid 19710:tid 19735] [client 20.215.248.112:36260] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "acUJJQVEWP8Ar68Njk78LQAAAA0"]
[Thu Mar 26 18:23:34.550200 2026] [:error] [pid 31778:tid 31798] [client 20.215.248.112:65048] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acUJJg3kybI2o-xasmD1GAAAAcU"]
[Thu Mar 26 18:23:35.776460 2026] [:error] [pid 60829:tid 60835] [client 20.215.248.112:36241] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acUJJ_TdjHKeZokybaS2DQAAAQQ"]
[Thu Mar 26 18:23:36.722954 2026] [:error] [pid 31778:tid 31813] [client 20.215.248.112:17552] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acUJKA3kybI2o-xasmD1HAAAAdQ"]
[Thu Mar 26 18:23:37.539995 2026] [:error] [pid 31778:tid 31811] [client 20.215.248.112:56191] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acUJKQ3kybI2o-xasmD1HgAAAdI"]
[Thu Mar 26 18:23:38.252633 2026] [:error] [pid 31670:tid 31677] [client 20.215.248.112:65070] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acUJKjXVthXxCnWjOTR4rgAAAUU"]
[Thu Mar 26 18:23:38.899064 2026] [:error] [pid 31780:tid 31824] [client 20.215.248.112:63487] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acUJKpJDwZsy5O4ZXEiRYgAAAgQ"]
[Thu Mar 26 18:23:50.366541 2026] [:error] [pid 19711:tid 19758] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Thu Mar 26 18:23:50.664608 2026] [:error] [pid 19711:tid 19762] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/xvs.php
[Thu Mar 26 18:23:51.034245 2026] [:error] [pid 19711:tid 19757] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Thu Mar 26 18:23:51.331866 2026] [:error] [pid 19711:tid 19753] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu Mar 26 18:23:51.678036 2026] [:error] [pid 19711:tid 19760] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Thu Mar 26 18:23:52.237689 2026] [:error] [pid 19711:tid 19750] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Thu Mar 26 18:23:52.494964 2026] [:error] [pid 19711:tid 19761] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Thu Mar 26 18:23:52.806564 2026] [:error] [pid 19711:tid 19771] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/feokc.php
[Thu Mar 26 18:23:53.180480 2026] [:error] [pid 19711:tid 19770] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Thu Mar 26 18:23:53.865412 2026] [:error] [pid 19711:tid 19773] [client 20.215.248.112:63573] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Thu Mar 26 18:23:54.288682 2026] [:error] [pid 19711:tid 19751] [client 20.215.248.112:63573] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acUJOmj3l1y81GYfluSOagAAAEI"]
[Thu Mar 26 18:23:55.621564 2026] [:error] [pid 31780:tid 31832] [client 20.215.248.112:63485] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acUJO5JDwZsy5O4ZXEiRggAAAgs"]
[Thu Mar 26 18:23:56.418549 2026] [:error] [pid 31780:tid 31843] [client 20.215.248.112:51756] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acUJPJJDwZsy5O4ZXEiRhQAAAhY"]
[Thu Mar 26 18:23:58.291375 2026] [:error] [pid 31670:tid 31673] [client 20.215.248.112:57779] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acUJPjXVthXxCnWjOTR4ugAAAUE"]
[Thu Mar 26 18:24:01.198488 2026] [:error] [pid 31670:tid 31675] [client 20.215.248.112:63608] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acUJQTXVthXxCnWjOTR4wgAAAUM"]
[Thu Mar 26 18:24:02.204912 2026] [:error] [pid 19711:tid 19764] [client 20.215.248.112:57776] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acUJQmj3l1y81GYfluSOcQAAAE8"]
[Thu Mar 26 18:24:03.224273 2026] [:error] [pid 31778:tid 31796] [client 20.215.248.112:64739] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acUJQw3kybI2o-xasmD1OQAAAcM"]
[Thu Mar 26 18:24:05.717996 2026] [:error] [pid 19711:tid 19762] [client 20.215.248.112:56945] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acUJRWj3l1y81GYfluSOdgAAAE0"]
[Thu Mar 26 18:24:06.942112 2026] [:error] [pid 19712:tid 19785] [client 20.215.248.112:51717] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acUJRtWhKhRNqm23vFMaAQAAAIk"]
[Thu Mar 26 18:24:09.701465 2026] [:error] [pid 31717:tid 31740] [client 20.215.248.112:63585] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acUJSb-SCF7YDISDX4_dqAAAAZI"]
[Thu Mar 26 18:24:11.148368 2026] [:error] [pid 60829:tid 60849] [client 20.215.248.112:63562] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acUJS_TdjHKeZokybaS2JgAAARI"]
[Thu Mar 26 18:24:12.717719 2026] [:error] [pid 31670:tid 31673] [client 20.215.248.112:35707] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acUJTDXVthXxCnWjOTR45gAAAUE"]
[Thu Mar 26 18:24:13.797188 2026] [:error] [pid 31670:tid 31687] [client 20.215.248.112:48631] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acUJTTXVthXxCnWjOTR46wAAAU8"]
[Thu Mar 26 18:24:14.886531 2026] [:error] [pid 19712:tid 19790] [client 20.215.248.112:60109] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acUJTtWhKhRNqm23vFMaCQAAAI4"]
[Thu Mar 26 18:24:15.753630 2026] [:error] [pid 31670:tid 31691] [client 20.215.248.112:48637] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acUJTzXVthXxCnWjOTR5AwAAAVM"]
[Thu Mar 26 18:24:17.451890 2026] [:error] [pid 31717:tid 31728] [client 20.215.248.112:42771] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acUJUb-SCF7YDISDX4_drgAAAYY"]
[Thu Mar 26 18:24:19.126045 2026] [:error] [pid 31780:tid 31844] [client 20.215.248.112:26932] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acUJU5JDwZsy5O4ZXEiRqAAAAhc"]
[Thu Mar 26 18:24:20.027352 2026] [:error] [pid 19712:tid 19778] [client 20.215.248.112:64714] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acUJVNWhKhRNqm23vFMaDQAAAII"]
[Thu Mar 26 18:24:21.579685 2026] [:error] [pid 31717:tid 31739] [client 20.215.248.112:41480] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acUJVb-SCF7YDISDX4_dtAAAAZE"]
[Thu Mar 26 18:24:22.802272 2026] [:error] [pid 31778:tid 31817] [client 20.215.248.112:23051] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aifa.php"] [unique_id "acUJVg3kybI2o-xasmD1UAAAAdg"]
[Thu Mar 26 18:24:23.892903 2026] [:error] [pid 31778:tid 31800] [client 20.215.248.112:54770] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acUJVw3kybI2o-xasmD1UgAAAcc"]
[Thu Mar 26 18:24:25.207149 2026] [:error] [pid 19818:tid 19826] [client 20.215.248.112:23093] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acUJWczaSnm3d1BeM5XwlAAAAMY"]
[Thu Mar 26 18:24:26.834647 2026] [:error] [pid 31670:tid 31674] [client 20.215.248.112:54728] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acUJWjXVthXxCnWjOTR5JQAAAUI"]
[Thu Mar 26 18:24:28.545418 2026] [:error] [pid 31780:tid 31839] [client 20.215.248.112:51734] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/erty.php"] [unique_id "acUJXJJDwZsy5O4ZXEiRsQAAAhI"]
[Thu Mar 26 18:24:29.773477 2026] [:error] [pid 31717:tid 31743] [client 20.215.248.112:33059] [client 20.215.248.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/app.php"] [unique_id "acUJXb-SCF7YDISDX4_dtwAAAZU"]
[Thu Mar 26 18:24:31.770471 2026] [:error] [pid 31778:tid 31795] [client 20.215.248.112:41503] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acUJXw3kybI2o-xasmD1XAAAAcI"]
[Thu Mar 26 18:24:32.991807 2026] [:error] [pid 31780:tid 31822] [client 20.215.248.112:51770] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acUJYJJDwZsy5O4ZXEiRuwAAAgI"]
[Thu Mar 26 18:24:34.384306 2026] [:error] [pid 31717:tid 31742] [client 20.215.248.112:35686] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acUJYr-SCF7YDISDX4_duwAAAZQ"]
[Thu Mar 26 18:24:35.250211 2026] [:error] [pid 60829:tid 60840] [client 20.215.248.112:60144] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acUJY_TdjHKeZokybaS2NQAAAQk"]
[Thu Mar 26 18:24:35.952380 2026] [:error] [pid 31717:tid 31745] [client 20.215.248.112:42799] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acUJY7-SCF7YDISDX4_dvwAAAZc"]
[Thu Mar 26 18:24:38.940629 2026] [:error] [pid 31670:tid 31681] [client 20.215.248.112:57757] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acUJZjXVthXxCnWjOTR5OgAAAUk"]
[Thu Mar 26 18:24:39.778501 2026] [:error] [pid 31670:tid 31691] [client 20.215.248.112:21202] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acUJZzXVthXxCnWjOTR5PQAAAVM"]
[Thu Mar 26 18:24:40.523314 2026] [:error] [pid 19712:tid 19788] [client 20.215.248.112:42781] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "acUJaNWhKhRNqm23vFMaFwAAAIw"]
[Thu Mar 26 18:24:41.374129 2026] [:error] [pid 19711:tid 19761] [client 20.215.248.112:31142] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acUJaWj3l1y81GYfluSOlwAAAEw"]
[Thu Mar 26 18:24:43.711592 2026] [:error] [pid 19818:tid 19843] [client 20.215.248.112:33050] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acUJa8zaSnm3d1BeM5XwnAAAANc"]
[Thu Mar 26 18:24:44.547525 2026] [:error] [pid 31717:tid 31726] [client 20.215.248.112:42783] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acUJbL-SCF7YDISDX4_dxwAAAYQ"]
[Thu Mar 26 18:24:45.443440 2026] [:error] [pid 31780:tid 31822] [client 20.215.248.112:41561] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "acUJbZJDwZsy5O4ZXEiRywAAAgI"]
[Thu Mar 26 18:24:46.939081 2026] [:error] [pid 19710:tid 19744] [client 20.215.248.112:55043] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acUJbgVEWP8Ar68Njk78WgAAABY"]
[Thu Mar 26 18:24:48.179989 2026] [:error] [pid 31670:tid 31683] [client 20.215.248.112:55078] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acUJcDXVthXxCnWjOTR5SgAAAUs"]
[Thu Mar 26 18:24:50.506455 2026] [:error] [pid 31670:tid 31681] [client 20.215.248.112:41551] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acUJcjXVthXxCnWjOTR5UwAAAUk"]
[Thu Mar 26 18:24:52.258659 2026] [:error] [pid 31670:tid 31673] [client 20.215.248.112:20740] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acUJdDXVthXxCnWjOTR5VQAAAUE"]
[Thu Mar 26 18:24:53.111459 2026] [:error] [pid 31778:tid 31805] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/aapig.php
[Thu Mar 26 18:24:53.455000 2026] [:error] [pid 31778:tid 31815] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/com.php
[Thu Mar 26 18:24:53.784272 2026] [:error] [pid 31778:tid 31811] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Thu Mar 26 18:24:54.194824 2026] [:error] [pid 31778:tid 31798] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Thu Mar 26 18:24:54.592264 2026] [:error] [pid 31778:tid 31804] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Mar 26 18:24:55.101898 2026] [:error] [pid 31778:tid 31813] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Thu Mar 26 18:24:55.361320 2026] [:error] [pid 31778:tid 31796] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Thu Mar 26 18:24:55.708353 2026] [:error] [pid 31778:tid 31793] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 26 18:24:56.040720 2026] [:error] [pid 31778:tid 31801] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Thu Mar 26 18:24:56.485554 2026] [:error] [pid 31778:tid 31817] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Thu Mar 26 18:24:56.788069 2026] [:error] [pid 31778:tid 31810] [client 20.215.248.112:35653] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Thu Mar 26 18:24:57.177089 2026] [:error] [pid 31778:tid 31794] [client 20.215.248.112:35653] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "acUJeQ3kybI2o-xasmD1fQAAAcE"]
[Thu Mar 26 18:24:58.145591 2026] [:error] [pid 19818:tid 19840] [client 20.215.248.112:26926] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "acUJeszaSnm3d1BeM5XwpwAAANQ"]
[Thu Mar 26 18:24:59.031360 2026] [:error] [pid 31670:tid 31686] [client 20.215.248.112:33079] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "acUJezXVthXxCnWjOTR5agAAAU4"]
[Thu Mar 26 18:25:00.211780 2026] [:error] [pid 19818:tid 19835] [client 20.215.248.112:31161] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web.php"] [unique_id "acUJfMzaSnm3d1BeM5XwsAAAAM8"]
[Thu Mar 26 18:25:02.049629 2026] [:error] [pid 31670:tid 31675] [client 20.215.248.112:23097] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acUJfjXVthXxCnWjOTR5fAAAAUM"]
[Thu Mar 26 18:25:04.096958 2026] [:error] [pid 31670:tid 31678] [client 20.215.248.112:42769] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acUJgDXVthXxCnWjOTR5hgAAAUY"]
[Thu Mar 26 18:25:04.779957 2026] [:error] [pid 31778:tid 31804] [client 20.215.248.112:48122] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acUJgA3kybI2o-xasmD1gAAAAcs"]
[Thu Mar 26 18:25:06.447677 2026] [:error] [pid 19818:tid 19836] [client 20.215.248.112:57764] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acUJgszaSnm3d1BeM5XwuQAAANA"]
[Thu Mar 26 18:25:08.763452 2026] [:error] [pid 31670:tid 31693] [client 20.215.248.112:48116] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acUJhDXVthXxCnWjOTR5kAAAAVU"]
[Thu Mar 26 18:25:11.767136 2026] [:error] [pid 19711:tid 19753] [client 20.215.248.112:31157] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acUJh2j3l1y81GYfluSOnwAAAEQ"]
[Thu Mar 26 18:25:12.954138 2026] [:error] [pid 31780:tid 31844] [client 20.215.248.112:60137] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acUJiJJDwZsy5O4ZXEiR6wAAAhc"]
[Thu Mar 26 18:25:13.735189 2026] [:error] [pid 60829:tid 60854] [client 20.215.248.112:26893] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "acUJifTdjHKeZokybaS2WQAAARc"]
[Thu Mar 26 18:25:14.726008 2026] [:error] [pid 19818:tid 19824] [client 20.215.248.112:55044] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acUJiszaSnm3d1BeM5XwvgAAAMQ"]
[Thu Mar 26 18:25:16.418643 2026] [:error] [pid 31670:tid 31675] [client 20.215.248.112:26928] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acUJjDXVthXxCnWjOTR5lwAAAUM"]
[Thu Mar 26 18:25:17.752489 2026] [:error] [pid 60829:tid 60843] [client 20.215.248.112:21231] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acUJjfTdjHKeZokybaS2YgAAAQw"]
[Thu Mar 26 18:25:19.128448 2026] [:error] [pid 31780:tid 31825] [client 20.215.248.112:20737] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acUJj5JDwZsy5O4ZXEiR8wAAAgU"]
[Thu Mar 26 18:25:20.271094 2026] [:error] [pid 60829:tid 60834] [client 20.215.248.112:38981] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acUJkPTdjHKeZokybaS2YwAAAQM"]
[Thu Mar 26 18:25:20.933621 2026] [:error] [pid 31780:tid 31837] [client 20.215.248.112:29517] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acUJkJJDwZsy5O4ZXEiR-QAAAhA"]
[Thu Mar 26 18:25:23.114505 2026] [:error] [pid 31717:tid 31732] [client 20.215.248.112:55783] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acUJk7-SCF7YDISDX4_d0QAAAYo"]
[Thu Mar 26 18:25:24.052839 2026] [:error] [pid 31778:tid 31795] [client 20.215.248.112:4082] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acUJlA3kybI2o-xasmD1iwAAAcI"]
[Thu Mar 26 18:25:24.921594 2026] [:error] [pid 31717:tid 31725] [client 20.215.248.112:23061] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acUJlL-SCF7YDISDX4_d1gAAAYM"]
[Thu Mar 26 18:25:26.474929 2026] [:error] [pid 31780:tid 31832] [client 20.215.248.112:38996] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acUJlpJDwZsy5O4ZXEiSAgAAAgs"]
[Thu Mar 26 18:25:27.193158 2026] [:error] [pid 19818:tid 19837] [client 20.215.248.112:28202] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acUJl8zaSnm3d1BeM5Xw2gAAANE"]
[Thu Mar 26 18:25:28.457722 2026] [:error] [pid 19818:tid 19839] [client 20.215.248.112:55787] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acUJmMzaSnm3d1BeM5Xw3wAAANM"]
[Thu Mar 26 18:25:29.444031 2026] [:error] [pid 19818:tid 19830] [client 20.215.248.112:28161] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acUJmczaSnm3d1BeM5Xw5QAAAMo"]
[Thu Mar 26 18:25:30.665017 2026] [:error] [pid 31717:tid 31746] [client 20.215.248.112:55776] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acUJmr-SCF7YDISDX4_d2AAAAZg"]
[Thu Mar 26 18:25:31.759969 2026] [:error] [pid 31670:tid 31687] [client 20.215.248.112:20767] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acUJmzXVthXxCnWjOTR5nAAAAU8"]
[Thu Mar 26 18:25:33.185162 2026] [:error] [pid 31670:tid 31678] [client 20.215.248.112:28164] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "acUJnTXVthXxCnWjOTR5owAAAUY"]
[Thu Mar 26 18:25:33.889377 2026] [:error] [pid 31780:tid 31844] [client 20.215.248.112:55099] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acUJnZJDwZsy5O4ZXEiSEAAAAhc"]
[Thu Mar 26 18:25:34.685844 2026] [:error] [pid 31780:tid 31833] [client 20.215.248.112:55763] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acUJnpJDwZsy5O4ZXEiSFgAAAgw"]
[Thu Mar 26 18:25:36.623938 2026] [:error] [pid 19710:tid 19732] [client 20.215.248.112:55780] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acUJoAVEWP8Ar68Njk78dQAAAAo"]
[Thu Mar 26 18:25:37.628107 2026] [:error] [pid 31717:tid 31744] [client 20.215.248.112:49710] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acUJob-SCF7YDISDX4_d3AAAAZY"]
[Thu Mar 26 18:25:38.436564 2026] [:error] [pid 31717:tid 31738] [client 20.215.248.112:55751] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acUJor-SCF7YDISDX4_d3wAAAZA"]
[Thu Mar 26 18:25:40.016922 2026] [:error] [pid 31670:tid 31678] [client 20.215.248.112:48112] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acUJpDXVthXxCnWjOTR5qQAAAUY"]
[Thu Mar 26 18:25:40.970103 2026] [:error] [pid 31670:tid 31680] [client 20.215.248.112:60043] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acUJpDXVthXxCnWjOTR5rgAAAUg"]
[Thu Mar 26 18:25:42.163271 2026] [:error] [pid 31778:tid 31799] [client 20.215.248.112:49708] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acUJpg3kybI2o-xasmD1lwAAAcY"]
[Thu Mar 26 18:25:43.329851 2026] [:error] [pid 31670:tid 31688] [client 20.215.248.112:54369] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acUJpzXVthXxCnWjOTR5tQAAAVA"]
[Thu Mar 26 18:25:44.338192 2026] [:error] [pid 31778:tid 31807] [client 20.215.248.112:49044] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acUJqA3kybI2o-xasmD1nAAAAc4"]
[Thu Mar 26 18:25:45.134667 2026] [:error] [pid 19710:tid 19727] [client 20.215.248.112:40929] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acUJqQVEWP8Ar68Njk78fQAAAAU"]
[Thu Mar 26 18:25:46.057843 2026] [:error] [pid 60829:tid 60846] [client 20.215.248.112:28185] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "acUJqvTdjHKeZokybaS2cAAAAQ8"]
[Thu Mar 26 18:25:46.970700 2026] [:error] [pid 19710:tid 19746] [client 20.215.248.112:39028] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "acUJqgVEWP8Ar68Njk78fgAAABg"]
[Thu Mar 26 18:25:48.367480 2026] [:error] [pid 31778:tid 31808] [client 20.215.248.112:50758] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "acUJrA3kybI2o-xasmD1pAAAAc8"]
[Thu Mar 26 18:25:49.909378 2026] [:error] [pid 19710:tid 19730] [client 20.215.248.112:28201] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "acUJrQVEWP8Ar68Njk78hAAAAAg"]
[Thu Mar 26 18:25:52.372114 2026] [:error] [pid 31670:tid 31684] [client 20.215.248.112:28176] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "acUJsDXVthXxCnWjOTR5wgAAAUw"]
[Thu Mar 26 18:25:53.602506 2026] [:error] [pid 31670:tid 31677] [client 20.215.248.112:3774] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acUJsTXVthXxCnWjOTR5ygAAAUU"]
[Thu Mar 26 18:25:54.494781 2026] [:error] [pid 19711:tid 19757] [client 20.215.248.112:28008] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "acUJsmj3l1y81GYfluSOsQAAAEg"]
[Thu Mar 26 18:25:57.178953 2026] [:error] [pid 31670:tid 31680] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 26 18:25:57.740137 2026] [:error] [pid 31670:tid 31686] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Thu Mar 26 18:25:58.001545 2026] [:error] [pid 31670:tid 31695] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Thu Mar 26 18:25:59.170034 2026] [:error] [pid 31670:tid 31691] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Thu Mar 26 18:25:59.463181 2026] [:error] [pid 31670:tid 31673] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Thu Mar 26 18:25:59.758825 2026] [:error] [pid 31670:tid 31695] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Thu Mar 26 18:26:00.015971 2026] [:error] [pid 31670:tid 31689] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq13.php
[Thu Mar 26 18:26:00.346351 2026] [:error] [pid 31670:tid 31693] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Thu Mar 26 18:26:00.612660 2026] [:error] [pid 31670:tid 31681] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Thu Mar 26 18:26:01.464536 2026] [:error] [pid 31670:tid 31673] [client 20.215.248.112:3778] File does not exist: /usr/local/apache/htdocs/suspended-page/fyiiz.php
[Thu Mar 26 18:26:01.765934 2026] [:error] [pid 31670:tid 31687] [client 20.215.248.112:3778] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acUJuTXVthXxCnWjOTR57AAAAU8"]
[Thu Mar 26 18:26:03.505195 2026] [:error] [pid 60829:tid 60853] [client 20.215.248.112:44031] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acUJu_TdjHKeZokybaS2dwAAARY"]
[Thu Mar 26 18:26:04.244721 2026] [:error] [pid 19710:tid 19744] [client 20.215.248.112:3769] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acUJvAVEWP8Ar68Njk78iwAAABY"]
[Thu Mar 26 18:26:05.500955 2026] [:error] [pid 19818:tid 19827] [client 20.215.248.112:28004] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "acUJvczaSnm3d1BeM5Xw_QAAAMc"]
[Thu Mar 26 18:26:06.352088 2026] [:error] [pid 19711:tid 19759] [client 20.215.248.112:50754] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acUJvmj3l1y81GYfluSOuAAAAEo"]
[Thu Mar 26 18:26:07.241846 2026] [:error] [pid 19711:tid 19764] [client 20.215.248.112:28275] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acUJv2j3l1y81GYfluSOugAAAE8"]
[Thu Mar 26 18:26:07.954523 2026] [:error] [pid 60829:tid 60838] [client 20.215.248.112:57283] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acUJv_TdjHKeZokybaS2ewAAAQc"]
[Thu Mar 26 18:26:08.882134 2026] [:error] [pid 19711:tid 19769] [client 20.215.248.112:50803] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acUJwGj3l1y81GYfluSOvwAAAFQ"]
[Thu Mar 26 18:26:09.742606 2026] [:error] [pid 31670:tid 31673] [client 20.215.248.112:61577] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acUJwTXVthXxCnWjOTR58AAAAUE"]
[Thu Mar 26 18:26:10.637776 2026] [:error] [pid 19712:tid 19779] [client 20.215.248.112:44021] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acUJwtWhKhRNqm23vFMaMQAAAIM"]
[Thu Mar 26 18:26:11.808470 2026] [:error] [pid 31780:tid 31834] [client 20.215.248.112:45895] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acUJw5JDwZsy5O4ZXEiSKAAAAg0"]
[Thu Mar 26 18:26:12.875563 2026] [:error] [pid 19710:tid 19745] [client 20.215.248.112:49040] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acUJxAVEWP8Ar68Njk78lAAAABc"]
[Thu Mar 26 18:26:13.557631 2026] [:error] [pid 31717:tid 31744] [client 20.215.248.112:45919] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acUJxb-SCF7YDISDX4_d7wAAAZY"]
[Thu Mar 26 18:26:14.347597 2026] [:error] [pid 19712:tid 19784] [client 20.215.248.112:49087] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acUJxtWhKhRNqm23vFMaNQAAAIg"]
[Thu Mar 26 18:26:15.696083 2026] [:error] [pid 19711:tid 19756] [client 20.215.248.112:61586] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acUJx2j3l1y81GYfluSOygAAAEc"]
[Thu Mar 26 18:26:16.552797 2026] [:error] [pid 19710:tid 19738] [client 20.215.248.112:3747] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acUJyAVEWP8Ar68Njk78mAAAABA"]
[Thu Mar 26 18:26:17.216543 2026] [:error] [pid 31670:tid 31678] [client 20.215.248.112:3749] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "acUJyTXVthXxCnWjOTR5-gAAAUY"]
[Thu Mar 26 18:26:18.219488 2026] [:error] [pid 31670:tid 31676] [client 20.215.248.112:65413] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "acUJyjXVthXxCnWjOTR6AQAAAUQ"]
[Thu Mar 26 18:26:19.709008 2026] [:error] [pid 19710:tid 19729] [client 20.215.248.112:44002] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "acUJywVEWP8Ar68Njk78nAAAAAc"]
[Thu Mar 26 18:26:22.371477 2026] [:error] [pid 31670:tid 31689] [client 20.215.248.112:31767] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "acUJzjXVthXxCnWjOTR6DgAAAVE"]
[Thu Mar 26 18:26:23.680096 2026] [:error] [pid 19711:tid 19751] [client 20.215.248.112:28271] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acUJz2j3l1y81GYfluSOzQAAAEI"]
[Thu Mar 26 18:26:24.737210 2026] [:error] [pid 19818:tid 19821] [client 20.215.248.112:31754] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acUJ0MzaSnm3d1BeM5XxBgAAAME"]
[Thu Mar 26 18:26:25.847128 2026] [:error] [pid 19711:tid 19768] [client 20.215.248.112:62095] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acUJ0Wj3l1y81GYfluSOzgAAAFM"]
[Thu Mar 26 18:26:26.764936 2026] [:error] [pid 31717:tid 31726] [client 20.215.248.112:61610] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "acUJ0r-SCF7YDISDX4_d9QAAAYQ"]
[Thu Mar 26 18:26:27.674177 2026] [:error] [pid 31780:tid 31842] [client 20.215.248.112:62085] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acUJ05JDwZsy5O4ZXEiSQgAAAhU"]
[Thu Mar 26 18:26:28.671139 2026] [:error] [pid 19711:tid 19772] [client 20.215.248.112:43969] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acUJ1Gj3l1y81GYfluSO0AAAAFc"]
[Thu Mar 26 18:26:30.076465 2026] [:error] [pid 31778:tid 31796] [client 20.215.248.112:64365] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acUJ1g3kybI2o-xasmD1xwAAAcM"]
[Thu Mar 26 18:26:32.171687 2026] [:error] [pid 19712:tid 19780] [client 20.215.248.112:65451] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "acUJ2NWhKhRNqm23vFMaRQAAAIQ"]
[Thu Mar 26 18:26:33.689369 2026] [:error] [pid 31670:tid 31690] [client 20.215.248.112:40264] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acUJ2TXVthXxCnWjOTR6MAAAAVI"]
[Thu Mar 26 18:26:37.245285 2026] [:error] [pid 60829:tid 60837] [client 20.215.248.112:35606] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acUJ3fTdjHKeZokybaS2kQAAAQY"]
[Thu Mar 26 18:26:38.694819 2026] [:error] [pid 31780:tid 31842] [client 20.215.248.112:52145] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acUJ3pJDwZsy5O4ZXEiSWgAAAhU"]
[Thu Mar 26 18:26:40.100664 2026] [:error] [pid 19711:tid 19771] [client 20.215.248.112:31768] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acUJ4Gj3l1y81GYfluSO1AAAAFY"]
[Thu Mar 26 18:26:41.964296 2026] [:error] [pid 31778:tid 31797] [client 20.215.248.112:43328] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "acUJ4Q3kybI2o-xasmD11wAAAcQ"]
[Thu Mar 26 18:26:42.733438 2026] [:error] [pid 31780:tid 31842] [client 20.215.248.112:43357] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "acUJ4pJDwZsy5O4ZXEiSYgAAAhU"]
[Thu Mar 26 18:26:43.933135 2026] [:error] [pid 31780:tid 31842] [client 20.215.248.112:35632] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "acUJ45JDwZsy5O4ZXEiSbAAAAhU"]
[Thu Mar 26 18:26:44.754515 2026] [:error] [pid 31780:tid 31832] [client 20.215.248.112:58582] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filesss.php"] [unique_id "acUJ5JJDwZsy5O4ZXEiScQAAAgs"]
[Thu Mar 26 18:26:46.306814 2026] [:error] [pid 19712:tid 19792] [client 20.215.248.112:60909] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acUJ5tWhKhRNqm23vFMaRwAAAJA"]
[Thu Mar 26 18:26:47.769270 2026] [:error] [pid 31717:tid 31729] [client 20.215.248.112:3120] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acUJ57-SCF7YDISDX4_eGwAAAYc"]
[Thu Mar 26 18:26:50.741192 2026] [:error] [pid 19818:tid 19841] [client 20.215.248.112:58937] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acUJ6szaSnm3d1BeM5XxQwAAANU"]
[Thu Mar 26 18:26:52.351891 2026] [:error] [pid 31780:tid 31832] [client 20.215.248.112:21158] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acUJ7JJDwZsy5O4ZXEiSfgAAAgs"]
[Thu Mar 26 18:26:56.531485 2026] [:error] [pid 60829:tid 60849] [client 20.215.248.112:60911] [client 20.215.248.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "acUJ8PTdjHKeZokybaS2tgAAARI"]
[Thu Mar 26 18:27:01.941365 2026] [:error] [pid 31670:tid 31688] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Thu Mar 26 18:27:02.360144 2026] [:error] [pid 31670:tid 31690] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Thu Mar 26 18:27:03.440649 2026] [:error] [pid 31670:tid 31672] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Thu Mar 26 18:27:03.701246 2026] [:error] [pid 31670:tid 31679] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Thu Mar 26 18:27:04.000944 2026] [:error] [pid 31670:tid 31682] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Thu Mar 26 18:27:04.434885 2026] [:error] [pid 31670:tid 31685] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/cord.php
[Thu Mar 26 18:27:04.742783 2026] [:error] [pid 31670:tid 31692] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/shlo.php
[Thu Mar 26 18:27:05.003495 2026] [:error] [pid 31670:tid 31674] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Thu Mar 26 18:27:05.649754 2026] [:error] [pid 31670:tid 31688] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Thu Mar 26 18:27:05.916442 2026] [:error] [pid 31670:tid 31696] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Thu Mar 26 18:27:06.230828 2026] [:error] [pid 31670:tid 31691] [client 20.215.248.112:64324] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Thu Mar 26 19:33:50.952283 2026] [:error] [pid 60829:tid 60839] [client 60.188.57.0:39043] [client 60.188.57.0] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acUZnvTdjHKeZokybaTDcQAAAQg"]
[Thu Mar 26 22:31:18.553385 2026] [:error] [pid 19818:tid 19842] [client 20.63.103.30:23227] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 26 22:31:18.972675 2026] [:error] [pid 19818:tid 19844] [client 20.63.103.30:23227] [client 20.63.103.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.103.30, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acVDNszaSnm3d1BeM5VBIwAAANg"]
[Thu Mar 26 22:31:19.186822 2026] [:error] [pid 19818:tid 19832] [client 20.63.103.30:23227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Thu Mar 26 22:31:20.024356 2026] [:error] [pid 19818:tid 19843] [client 20.63.103.30:23227] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Thu Mar 26 22:31:20.654984 2026] [:error] [pid 19818:tid 19826] [client 20.63.103.30:23227] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Mar 26 22:31:20.861326 2026] [:error] [pid 19818:tid 19833] [client 20.63.103.30:23227] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVDOMzaSnm3d1BeM5VBLwAAAM0"]
[Thu Mar 26 22:31:21.698825 2026] [:error] [pid 19818:tid 19834] [client 20.63.103.30:23200] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVDOczaSnm3d1BeM5VBNQAAAM4"]
[Thu Mar 26 22:31:22.529030 2026] [:error] [pid 19711:tid 19752] [client 20.63.103.30:23205] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVDOmj3l1y81GYfluTDdQAAAEM"]
[Thu Mar 26 22:31:23.358008 2026] [:error] [pid 19711:tid 19764] [client 20.63.103.30:22913] [client 20.63.103.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acVDO2j3l1y81GYfluTDdgAAAE8"]
[Fri Mar 27 01:34:29.638297 2026] [:error] [pid 62149:tid 62545] [client 185.169.4.152:50642] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "acVuJWHvvta9MPqU8PVkvAAAARU"]
[Fri Mar 27 02:53:58.062563 2026] [:error] [pid 62149:tid 62545] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Fri Mar 27 02:53:58.431986 2026] [:error] [pid 62149:tid 62547] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Fri Mar 27 02:53:58.915952 2026] [:error] [pid 62149:tid 62534] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Mar 27 02:53:59.234846 2026] [:error] [pid 62149:tid 62527] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Mar 27 02:53:59.500728 2026] [:error] [pid 62149:tid 62539] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Mar 27 02:53:59.797824 2026] [:error] [pid 62149:tid 62538] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Fri Mar 27 02:54:00.140185 2026] [:error] [pid 62149:tid 62525] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Fri Mar 27 02:54:00.454544 2026] [:error] [pid 62149:tid 62543] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Fri Mar 27 02:54:00.800777 2026] [:error] [pid 62149:tid 62530] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Fri Mar 27 02:54:01.075728 2026] [:error] [pid 62149:tid 62532] [client 20.240.134.170:35764] File does not exist: /usr/local/apache/htdocs/suspended-page/zcsu.php
[Fri Mar 27 02:54:01.373859 2026] [:error] [pid 62149:tid 62524] [client 20.240.134.170:35764] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acWAyWHvvta9MPqU8PV64AAAAQA"]
[Fri Mar 27 02:54:02.332192 2026] [:error] [pid 44058:tid 44079] [client 20.240.134.170:37043] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acWAyuqp9u5CVRGdZPExhQAAAJM"]
[Fri Mar 27 02:54:03.440098 2026] [:error] [pid 62551:tid 62564] [client 20.240.134.170:21645] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acWAy4QvFHgfE1g4p7CrKAAAAco"]
[Fri Mar 27 02:54:04.408073 2026] [:error] [pid 62551:tid 62576] [client 20.240.134.170:16605] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acWAzIQvFHgfE1g4p7CrKgAAAdY"]
[Fri Mar 27 02:54:05.644034 2026] [:error] [pid 62149:tid 62540] [client 20.240.134.170:21731] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acWAzWHvvta9MPqU8PV64gAAARA"]
[Fri Mar 27 02:54:06.728362 2026] [:error] [pid 62147:tid 62475] [client 20.240.134.170:37049] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acWAzhPjxn06mcLazN6iJAAAAA8"]
[Fri Mar 27 02:54:07.845363 2026] [:error] [pid 62148:tid 62497] [client 20.240.134.170:35735] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acWAz4duik-mTruBKFWBagAAAEA"]
[Fri Mar 27 02:54:08.766323 2026] [:error] [pid 62147:tid 62474] [client 20.240.134.170:11545] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acWA0BPjxn06mcLazN6iMQAAAA4"]
[Fri Mar 27 02:54:09.713325 2026] [:error] [pid 62147:tid 62482] [client 20.240.134.170:35775] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acWA0RPjxn06mcLazN6iNQAAABY"]
[Fri Mar 27 02:54:10.672060 2026] [:error] [pid 62148:tid 62518] [client 20.240.134.170:28047] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acWA0oduik-mTruBKFWBbQAAAFU"]
[Fri Mar 27 02:54:11.438923 2026] [:error] [pid 62149:tid 62546] [client 20.240.134.170:21656] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acWA02Hvvta9MPqU8PV68QAAARY"]
[Fri Mar 27 02:54:12.997106 2026] [:error] [pid 62551:tid 62577] [client 20.240.134.170:28089] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acWA1IQvFHgfE1g4p7CrMQAAAdc"]
[Fri Mar 27 02:54:13.954807 2026] [:error] [pid 62551:tid 62568] [client 20.240.134.170:55068] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acWA1YQvFHgfE1g4p7CrNwAAAc4"]
[Fri Mar 27 02:54:14.852522 2026] [:error] [pid 62147:tid 62464] [client 20.240.134.170:23449] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acWA1hPjxn06mcLazN6iQAAAAAQ"]
[Fri Mar 27 02:54:15.753223 2026] [:error] [pid 44058:tid 44074] [client 20.240.134.170:23473] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acWA1-qp9u5CVRGdZPExmAAAAI4"]
[Fri Mar 27 02:54:16.990484 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:11560] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acWA2Oqp9u5CVRGdZPExoAAAAJI"]
[Fri Mar 27 02:54:18.760417 2026] [:error] [pid 62147:tid 62472] [client 20.240.134.170:11579] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acWA2hPjxn06mcLazN6iRwAAAAw"]
[Fri Mar 27 02:54:19.890183 2026] [:error] [pid 62148:tid 62519] [client 20.240.134.170:16620] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acWA24duik-mTruBKFWBcgAAAFY"]
[Fri Mar 27 02:54:21.899666 2026] [:error] [pid 62148:tid 62515] [client 20.240.134.170:21690] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acWA3Yduik-mTruBKFWBeAAAAFI"]
[Fri Mar 27 02:54:22.803101 2026] [:error] [pid 62147:tid 62468] [client 20.240.134.170:8818] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acWA3hPjxn06mcLazN6iTAAAAAg"]
[Fri Mar 27 02:54:24.775091 2026] [:error] [pid 62149:tid 62528] [client 20.240.134.170:11566] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acWA4GHvvta9MPqU8PV7CAAAAQQ"]
[Fri Mar 27 02:54:25.633419 2026] [:error] [pid 62551:tid 62573] [client 20.240.134.170:22125] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acWA4YQvFHgfE1g4p7CrQAAAAdM"]
[Fri Mar 27 02:54:26.572481 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:43721] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acWA4uqp9u5CVRGdZPExvgAAAJc"]
[Fri Mar 27 02:54:28.177531 2026] [:error] [pid 44058:tid 44070] [client 20.240.134.170:21642] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acWA5Oqp9u5CVRGdZPExxAAAAIo"]
[Fri Mar 27 02:54:29.444570 2026] [:error] [pid 44058:tid 44081] [client 20.240.134.170:37029] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acWA5eqp9u5CVRGdZPExyQAAAJU"]
[Fri Mar 27 02:54:30.654562 2026] [:error] [pid 44058:tid 44076] [client 20.240.134.170:22023] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acWA5uqp9u5CVRGdZPEx1AAAAJA"]
[Fri Mar 27 02:54:31.574503 2026] [:error] [pid 44058:tid 44068] [client 20.240.134.170:8814] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acWA5-qp9u5CVRGdZPEx2QAAAIg"]
[Fri Mar 27 02:54:32.503788 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:13069] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acWA6Oqp9u5CVRGdZPEx5AAAAI8"]
[Fri Mar 27 02:54:33.373527 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:17474] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acWA6eqp9u5CVRGdZPEx6gAAAI8"]
[Fri Mar 27 02:54:34.055406 2026] [:error] [pid 44058:tid 44074] [client 20.240.134.170:11561] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acWA6uqp9u5CVRGdZPEx8AAAAI4"]
[Fri Mar 27 02:54:34.826688 2026] [:error] [pid 44058:tid 44070] [client 20.240.134.170:23470] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acWA6uqp9u5CVRGdZPEx9QAAAIo"]
[Fri Mar 27 02:54:35.641270 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:18610] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acWA6-qp9u5CVRGdZPEx-gAAAJc"]
[Fri Mar 27 02:54:36.378342 2026] [:error] [pid 62551:tid 62577] [client 20.240.134.170:12678] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acWA7IQvFHgfE1g4p7CrUQAAAdc"]
[Fri Mar 27 02:54:37.591749 2026] [:error] [pid 44058:tid 44062] [client 20.240.134.170:29434] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acWA7eqp9u5CVRGdZPEyCAAAAII"]
[Fri Mar 27 02:54:38.565465 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:33879] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acWA7uqp9u5CVRGdZPEyDQAAAIY"]
[Fri Mar 27 02:54:39.214463 2026] [:error] [pid 62551:tid 62568] [client 20.240.134.170:61950] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acWA74QvFHgfE1g4p7CrUwAAAc4"]
[Fri Mar 27 02:54:40.091869 2026] [:error] [pid 62147:tid 62463] [client 20.240.134.170:37007] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acWA8BPjxn06mcLazN6iWwAAAAM"]
[Fri Mar 27 02:54:40.774739 2026] [:error] [pid 62149:tid 62532] [client 20.240.134.170:13063] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acWA8GHvvta9MPqU8PV7DQAAAQg"]
[Fri Mar 27 02:54:41.532220 2026] [:error] [pid 62148:tid 62503] [client 20.240.134.170:18567] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acWA8Yduik-mTruBKFWBiAAAAEY"]
[Fri Mar 27 02:54:42.695199 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:11578] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acWA8uqp9u5CVRGdZPEyFwAAAIY"]
[Fri Mar 27 02:54:43.370934 2026] [:error] [pid 62147:tid 62479] [client 20.240.134.170:17515] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acWA8xPjxn06mcLazN6iXwAAABM"]
[Fri Mar 27 02:54:44.230706 2026] [:error] [pid 62147:tid 62460] [client 20.240.134.170:8820] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acWA9BPjxn06mcLazN6iYAAAAAA"]
[Fri Mar 27 02:54:45.323418 2026] [:error] [pid 62551:tid 62563] [client 20.240.134.170:35716] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acWA9YQvFHgfE1g4p7CrYAAAAck"]
[Fri Mar 27 02:54:46.082749 2026] [:error] [pid 62551:tid 62572] [client 20.240.134.170:41716] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acWA9oQvFHgfE1g4p7CrZQAAAdI"]
[Fri Mar 27 02:54:47.072325 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:24633] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acWA9-qp9u5CVRGdZPEyIAAAAIM"]
[Fri Mar 27 02:54:47.972571 2026] [:error] [pid 62147:tid 62466] [client 20.240.134.170:13095] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acWA9xPjxn06mcLazN6iZgAAAAY"]
[Fri Mar 27 02:54:48.711510 2026] [:error] [pid 44058:tid 44068] [client 20.240.134.170:35724] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acWA-Oqp9u5CVRGdZPEyLQAAAIg"]
[Fri Mar 27 02:54:49.420118 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:24583] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acWA-eqp9u5CVRGdZPEyMQAAAIk"]
[Fri Mar 27 02:54:50.225461 2026] [:error] [pid 62148:tid 62507] [client 20.240.134.170:41685] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acWA-oduik-mTruBKFWBjQAAAEo"]
[Fri Mar 27 02:54:51.176849 2026] [:error] [pid 62149:tid 62541] [client 20.240.134.170:43750] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acWA-2Hvvta9MPqU8PV7HAAAARE"]
[Fri Mar 27 02:54:51.997969 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:16612] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acWA--qp9u5CVRGdZPEyOgAAAIk"]
[Fri Mar 27 02:54:52.614686 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:33873] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acWA_Oqp9u5CVRGdZPEyPgAAAIM"]
[Fri Mar 27 02:54:53.353710 2026] [:error] [pid 62147:tid 62477] [client 20.240.134.170:61897] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acWA_RPjxn06mcLazN6ibwAAABE"]
[Fri Mar 27 02:54:54.376438 2026] [:error] [pid 62551:tid 62573] [client 20.240.134.170:20888] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acWA_oQvFHgfE1g4p7CrbgAAAdM"]
[Fri Mar 27 02:54:55.026631 2026] [:error] [pid 62148:tid 62506] [client 20.240.134.170:55146] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acWA_4duik-mTruBKFWBjwAAAEk"]
[Fri Mar 27 02:54:55.802195 2026] [:error] [pid 62147:tid 62460] [client 20.240.134.170:33899] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acWA_xPjxn06mcLazN6idgAAAAA"]
[Fri Mar 27 02:54:56.794009 2026] [:error] [pid 44058:tid 44080] [client 20.240.134.170:21658] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acWBAOqp9u5CVRGdZPEyTAAAAJQ"]
[Fri Mar 27 02:54:57.667286 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:39740] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acWBAeqp9u5CVRGdZPEyTwAAAJY"]
[Fri Mar 27 02:54:58.821908 2026] [:error] [pid 62149:tid 62533] [client 20.240.134.170:18577] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acWBAmHvvta9MPqU8PV7JAAAAQk"]
[Fri Mar 27 02:54:59.482828 2026] [:error] [pid 44058:tid 44081] [client 20.240.134.170:61924] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acWBA-qp9u5CVRGdZPEyVgAAAJU"]
[Fri Mar 27 02:55:00.198823 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:22117] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "acWBBOqp9u5CVRGdZPEyWQAAAIY"]
[Fri Mar 27 02:55:01.018376 2026] [:error] [pid 44058:tid 44081] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/fs6.php
[Fri Mar 27 02:55:01.344662 2026] [:error] [pid 44058:tid 44061] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/fs7.php
[Fri Mar 27 02:55:01.609341 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/kbfr.php
[Fri Mar 27 02:55:01.907887 2026] [:error] [pid 44058:tid 44081] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/595.php
[Fri Mar 27 02:55:02.264281 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Fri Mar 27 02:55:02.549726 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Fri Mar 27 02:55:02.842389 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Fri Mar 27 02:55:03.269973 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Fri Mar 27 02:55:03.534701 2026] [:error] [pid 44058:tid 44076] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Fri Mar 27 02:55:03.825650 2026] [:error] [pid 44058:tid 44072] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/ws79.php
[Fri Mar 27 02:55:04.098570 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:49874] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Fri Mar 27 02:55:04.422668 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:49874] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws50.php"] [unique_id "acWBCOqp9u5CVRGdZPEyewAAAIM"]
[Fri Mar 27 02:55:05.137406 2026] [:error] [pid 44058:tid 44062] [client 20.240.134.170:55158] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws50.php"] [unique_id "acWBCeqp9u5CVRGdZPEygQAAAII"]
[Fri Mar 27 02:55:05.918041 2026] [:error] [pid 44058:tid 44071] [client 20.240.134.170:10299] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws50.php"] [unique_id "acWBCeqp9u5CVRGdZPEyggAAAIs"]
[Fri Mar 27 02:55:06.856743 2026] [:error] [pid 44058:tid 44064] [client 20.240.134.170:32607] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws50.php"] [unique_id "acWBCuqp9u5CVRGdZPEygwAAAIQ"]
[Fri Mar 27 02:55:07.517170 2026] [:error] [pid 62147:tid 62478] [client 20.240.134.170:28682] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws44.php"] [unique_id "acWBCxPjxn06mcLazN6ifwAAABI"]
[Fri Mar 27 02:55:08.254873 2026] [:error] [pid 62148:tid 62505] [client 20.240.134.170:32617] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws44.php"] [unique_id "acWBDIduik-mTruBKFWBoQAAAEg"]
[Fri Mar 27 02:55:09.082466 2026] [:error] [pid 62148:tid 62517] [client 20.240.134.170:47909] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws44.php"] [unique_id "acWBDYduik-mTruBKFWBogAAAFQ"]
[Fri Mar 27 02:55:10.314982 2026] [:error] [pid 62551:tid 62558] [client 20.240.134.170:47917] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws44.php"] [unique_id "acWBDoQvFHgfE1g4p7CrdwAAAcQ"]
[Fri Mar 27 02:55:11.261059 2026] [:error] [pid 62147:tid 62480] [client 20.240.134.170:41621] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "acWBDxPjxn06mcLazN6ihQAAABQ"]
[Fri Mar 27 02:55:12.078645 2026] [:error] [pid 44058:tid 44073] [client 20.240.134.170:9525] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "acWBEOqp9u5CVRGdZPEyhwAAAI0"]
[Fri Mar 27 02:55:12.857300 2026] [:error] [pid 62147:tid 62463] [client 20.240.134.170:52538] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "acWBEBPjxn06mcLazN6ijAAAAAM"]
[Fri Mar 27 02:55:13.777873 2026] [:error] [pid 62148:tid 62498] [client 20.240.134.170:47923] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "acWBEYduik-mTruBKFWBqAAAAEE"]
[Fri Mar 27 02:55:14.867544 2026] [:error] [pid 62551:tid 62565] [client 20.240.134.170:13498] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "acWBEoQvFHgfE1g4p7CrfwAAAcs"]
[Fri Mar 27 02:55:17.657562 2026] [:error] [pid 44058:tid 44068] [client 20.240.134.170:6188] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "acWBFeqp9u5CVRGdZPEylAAAAIg"]
[Fri Mar 27 02:55:20.437991 2026] [:error] [pid 62148:tid 62510] [client 20.240.134.170:25808] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "acWBGIduik-mTruBKFWBrwAAAE0"]
[Fri Mar 27 02:55:21.541144 2026] [:error] [pid 62551:tid 62564] [client 20.240.134.170:10324] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "acWBGYQvFHgfE1g4p7CrigAAAco"]
[Fri Mar 27 02:55:23.094896 2026] [:error] [pid 62147:tid 62481] [client 20.240.134.170:54185] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws40.php"] [unique_id "acWBGxPjxn06mcLazN6imwAAABU"]
[Fri Mar 27 02:55:23.950694 2026] [:error] [pid 62147:tid 62470] [client 20.240.134.170:25838] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws40.php"] [unique_id "acWBGxPjxn06mcLazN6ingAAAAo"]
[Fri Mar 27 02:55:24.875705 2026] [:error] [pid 62551:tid 62563] [client 20.240.134.170:30058] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws40.php"] [unique_id "acWBHIQvFHgfE1g4p7CrjwAAAck"]
[Fri Mar 27 02:55:25.550877 2026] [:error] [pid 62551:tid 62575] [client 20.240.134.170:31965] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws40.php"] [unique_id "acWBHYQvFHgfE1g4p7CrkQAAAdU"]
[Fri Mar 27 02:55:26.426056 2026] [:error] [pid 44058:tid 44064] [client 20.240.134.170:10344] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws36.php"] [unique_id "acWBHuqp9u5CVRGdZPEyrgAAAIQ"]
[Fri Mar 27 02:55:27.246436 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:7565] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws36.php"] [unique_id "acWBH-qp9u5CVRGdZPEytgAAAJE"]
[Fri Mar 27 02:55:28.292432 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:39133] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws36.php"] [unique_id "acWBIOqp9u5CVRGdZPEyuwAAAI8"]
[Fri Mar 27 02:55:28.986212 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:13926] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws36.php"] [unique_id "acWBIOqp9u5CVRGdZPEyvgAAAIk"]
[Fri Mar 27 02:55:29.649082 2026] [:error] [pid 44058:tid 44061] [client 20.240.134.170:11943] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vwxbi.php"] [unique_id "acWBIeqp9u5CVRGdZPEywAAAAIE"]
[Fri Mar 27 02:55:30.231214 2026] [:error] [pid 62148:tid 62506] [client 20.240.134.170:22402] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vwxbi.php"] [unique_id "acWBIoduik-mTruBKFWBtAAAAEk"]
[Fri Mar 27 02:55:30.864292 2026] [:error] [pid 44058:tid 44074] [client 20.240.134.170:39107] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vwxbi.php"] [unique_id "acWBIuqp9u5CVRGdZPEyyAAAAI4"]
[Fri Mar 27 02:55:31.459533 2026] [:error] [pid 44058:tid 44076] [client 20.240.134.170:25832] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vwxbi.php"] [unique_id "acWBI-qp9u5CVRGdZPEyywAAAJA"]
[Fri Mar 27 02:55:32.390313 2026] [:error] [pid 62147:tid 62467] [client 20.240.134.170:19809] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acWBJBPjxn06mcLazN6iqQAAAAc"]
[Fri Mar 27 02:55:33.487766 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:56074] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acWBJeqp9u5CVRGdZPEy1QAAAIM"]
[Fri Mar 27 02:55:34.255915 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:22443] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acWBJuqp9u5CVRGdZPEy1wAAAIY"]
[Fri Mar 27 02:55:35.221069 2026] [:error] [pid 44058:tid 44062] [client 20.240.134.170:54203] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellerr.php"] [unique_id "acWBJ-qp9u5CVRGdZPEy3QAAAII"]
[Fri Mar 27 02:55:35.887451 2026] [:error] [pid 44058:tid 44074] [client 20.240.134.170:14677] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "acWBJ-qp9u5CVRGdZPEy5AAAAI4"]
[Fri Mar 27 02:55:36.716084 2026] [:error] [pid 62551:tid 62569] [client 20.240.134.170:48657] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "acWBKIQvFHgfE1g4p7CroAAAAc8"]
[Fri Mar 27 02:55:37.402540 2026] [:error] [pid 62147:tid 62480] [client 20.240.134.170:48640] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "acWBKRPjxn06mcLazN6iqwAAABQ"]
[Fri Mar 27 02:55:38.077167 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:48696] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "acWBKuqp9u5CVRGdZPEy6QAAAJI"]
[Fri Mar 27 02:55:38.846260 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:19807] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvz.php"] [unique_id "acWBKuqp9u5CVRGdZPEy7AAAAIk"]
[Fri Mar 27 02:55:39.472929 2026] [:error] [pid 62147:tid 62460] [client 20.240.134.170:14639] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvz.php"] [unique_id "acWBKxPjxn06mcLazN6isAAAAAA"]
[Fri Mar 27 02:55:40.172396 2026] [:error] [pid 44058:tid 44080] [client 20.240.134.170:39135] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvz.php"] [unique_id "acWBLOqp9u5CVRGdZPEy8AAAAJQ"]
[Fri Mar 27 02:55:40.994312 2026] [:error] [pid 62149:tid 62537] [client 20.240.134.170:12375] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvz.php"] [unique_id "acWBLGHvvta9MPqU8PV7VgAAAQ0"]
[Fri Mar 27 02:55:42.430977 2026] [:error] [pid 62149:tid 62527] [client 20.240.134.170:48699] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acWBLmHvvta9MPqU8PV7WgAAAQM"]
[Fri Mar 27 02:55:43.930942 2026] [:error] [pid 62551:tid 62555] [client 20.240.134.170:42489] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acWBL4QvFHgfE1g4p7CrrAAAAcE"]
[Fri Mar 27 02:56:06.979539 2026] [:error] [pid 44058:tid 44080] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Fri Mar 27 02:56:07.253096 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Fri Mar 27 02:56:07.567835 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Fri Mar 27 02:56:07.833922 2026] [:error] [pid 44058:tid 44076] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Fri Mar 27 02:56:08.140485 2026] [:error] [pid 44058:tid 44062] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Fri Mar 27 02:56:08.407076 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Mar 27 02:56:08.673181 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Fri Mar 27 02:56:09.245288 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/roter.php
[Fri Mar 27 02:56:09.511092 2026] [:error] [pid 44058:tid 44071] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Fri Mar 27 02:56:10.064777 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/save.php
[Fri Mar 27 02:56:10.472040 2026] [:error] [pid 44058:tid 44062] [client 20.240.134.170:43017] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Mar 27 02:56:10.798514 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:43017] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acWBSuqp9u5CVRGdZPEzVAAAAIk"]
[Fri Mar 27 02:56:11.834826 2026] [:error] [pid 44058:tid 44067] [client 20.240.134.170:24629] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acWBS-qp9u5CVRGdZPEzYAAAAIc"]
[Fri Mar 27 02:56:12.712539 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:20899] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acWBTOqp9u5CVRGdZPEzZwAAAIY"]
[Fri Mar 27 02:56:13.761851 2026] [:error] [pid 44058:tid 44071] [client 20.240.134.170:20927] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acWBTeqp9u5CVRGdZPEzbAAAAIs"]
[Fri Mar 27 02:56:14.612491 2026] [:error] [pid 44058:tid 44076] [client 20.240.134.170:16609] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acWBTuqp9u5CVRGdZPEzcAAAAJA"]
[Fri Mar 27 02:56:16.426133 2026] [:error] [pid 62551:tid 62565] [client 20.240.134.170:61891] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acWBUIQvFHgfE1g4p7CrywAAAcs"]
[Fri Mar 27 02:56:17.598103 2026] [:error] [pid 44058:tid 44071] [client 20.240.134.170:29409] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acWBUeqp9u5CVRGdZPEzfwAAAIs"]
[Fri Mar 27 02:56:18.687328 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:16618] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acWBUuqp9u5CVRGdZPEzgAAAAJI"]
[Fri Mar 27 02:56:19.961762 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:6222] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acWBU-qp9u5CVRGdZPEzjwAAAIU"]
[Fri Mar 27 02:56:21.119729 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:6256] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acWBVeqp9u5CVRGdZPEzmgAAAJE"]
[Fri Mar 27 02:56:22.126088 2026] [:error] [pid 44058:tid 44060] [client 20.240.134.170:55042] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acWBVuqp9u5CVRGdZPEzoQAAAIA"]
[Fri Mar 27 02:56:23.055567 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:20129] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acWBV-qp9u5CVRGdZPEzpwAAAJY"]
[Fri Mar 27 02:56:24.099502 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:6705] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acWBWOqp9u5CVRGdZPEzrwAAAJY"]
[Fri Mar 27 02:56:25.265447 2026] [:error] [pid 62551:tid 62563] [client 20.240.134.170:8707] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acWBWYQvFHgfE1g4p7Cr1gAAAck"]
[Fri Mar 27 02:56:26.111964 2026] [:error] [pid 62551:tid 62555] [client 20.240.134.170:40351] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acWBWoQvFHgfE1g4p7Cr2AAAAcE"]
[Fri Mar 27 02:56:26.835036 2026] [:error] [pid 62147:tid 62480] [client 20.240.134.170:18250] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acWBWhPjxn06mcLazN6i7gAAABQ"]
[Fri Mar 27 02:56:27.641734 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:26163] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acWBW-qp9u5CVRGdZPEzvgAAAIM"]
[Fri Mar 27 02:56:28.482339 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:23204] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acWBXOqp9u5CVRGdZPEzwQAAAJE"]
[Fri Mar 27 02:56:29.205760 2026] [:error] [pid 44058:tid 44079] [client 20.240.134.170:23231] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acWBXeqp9u5CVRGdZPEzxwAAAJM"]
[Fri Mar 27 02:56:29.956516 2026] [:error] [pid 62149:tid 62530] [client 20.240.134.170:26164] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acWBXWHvvta9MPqU8PV7tQAAAQY"]
[Fri Mar 27 02:56:31.127309 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:37712] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acWBX-qp9u5CVRGdZPEzzgAAAJI"]
[Fri Mar 27 02:56:31.812832 2026] [:error] [pid 44058:tid 44081] [client 20.240.134.170:6663] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acWBX-qp9u5CVRGdZPEz1AAAAJU"]
[Fri Mar 27 02:56:32.582423 2026] [:error] [pid 62148:tid 62520] [client 20.240.134.170:44415] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acWBYIduik-mTruBKFWCAAAAAFc"]
[Fri Mar 27 02:56:33.265188 2026] [:error] [pid 44058:tid 44064] [client 20.240.134.170:8721] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acWBYeqp9u5CVRGdZPEz2wAAAIQ"]
[Fri Mar 27 02:56:33.969782 2026] [:error] [pid 62551:tid 62557] [client 20.240.134.170:25430] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acWBYYQvFHgfE1g4p7Cr4wAAAcM"]
[Fri Mar 27 02:56:34.640121 2026] [:error] [pid 62147:tid 62474] [client 20.240.134.170:8759] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acWBYhPjxn06mcLazN6i9QAAAA4"]
[Fri Mar 27 02:56:35.341033 2026] [:error] [pid 62551:tid 62560] [client 20.240.134.170:8729] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acWBY4QvFHgfE1g4p7Cr5QAAAcY"]
[Fri Mar 27 02:56:36.381166 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:37757] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acWBZOqp9u5CVRGdZPEz4gAAAIU"]
[Fri Mar 27 02:56:37.110111 2026] [:error] [pid 62148:tid 62499] [client 20.240.134.170:23176] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acWBZYduik-mTruBKFWCBQAAAEI"]
[Fri Mar 27 02:56:37.882361 2026] [:error] [pid 62551:tid 62574] [client 20.240.134.170:23247] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acWBZYQvFHgfE1g4p7Cr6QAAAdQ"]
[Fri Mar 27 02:56:38.585285 2026] [:error] [pid 44058:tid 44068] [client 20.240.134.170:18268] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acWBZuqp9u5CVRGdZPEz6wAAAIg"]
[Fri Mar 27 02:56:39.817675 2026] [:error] [pid 62551:tid 62570] [client 20.240.134.170:24249] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acWBZ4QvFHgfE1g4p7Cr6wAAAdA"]
[Fri Mar 27 02:56:41.828096 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:23198] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acWBaeqp9u5CVRGdZPEz-wAAAI8"]
[Fri Mar 27 02:56:42.833572 2026] [:error] [pid 44058:tid 44074] [client 20.240.134.170:18987] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acWBauqp9u5CVRGdZPE0AQAAAI4"]
[Fri Mar 27 02:56:43.926517 2026] [:error] [pid 62551:tid 62557] [client 20.240.134.170:18270] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acWBa4QvFHgfE1g4p7Cr7gAAAcM"]
[Fri Mar 27 02:56:45.203320 2026] [:error] [pid 62551:tid 62554] [client 20.240.134.170:54208] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acWBbYQvFHgfE1g4p7Cr8QAAAcA"]
[Fri Mar 27 02:56:46.331971 2026] [:error] [pid 62149:tid 62535] [client 20.240.134.170:6443] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acWBbmHvvta9MPqU8PV7ywAAAQs"]
[Fri Mar 27 02:56:47.518011 2026] [:error] [pid 44058:tid 44081] [client 20.240.134.170:8747] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acWBb-qp9u5CVRGdZPE0DQAAAJU"]
[Fri Mar 27 02:56:48.673875 2026] [:error] [pid 44058:tid 44070] [client 20.240.134.170:23200] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acWBcOqp9u5CVRGdZPE0EQAAAIo"]
[Fri Mar 27 02:56:49.759402 2026] [:error] [pid 62147:tid 62484] [client 20.240.134.170:44389] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acWBcRPjxn06mcLazN6jCQAAABg"]
[Fri Mar 27 02:56:50.678991 2026] [:error] [pid 62147:tid 62467] [client 20.240.134.170:17835] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acWBchPjxn06mcLazN6jDgAAAAc"]
[Fri Mar 27 02:56:51.669062 2026] [:error] [pid 62147:tid 62468] [client 20.240.134.170:6242] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acWBcxPjxn06mcLazN6jEwAAAAg"]
[Fri Mar 27 02:56:52.776118 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:43017] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acWBdOqp9u5CVRGdZPE0HAAAAJc"]
[Fri Mar 27 02:56:53.626944 2026] [:error] [pid 62551:tid 62567] [client 20.240.134.170:24250] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acWBdYQvFHgfE1g4p7Cr_wAAAc0"]
[Fri Mar 27 02:56:54.562398 2026] [:error] [pid 44058:tid 44072] [client 20.240.134.170:24223] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acWBduqp9u5CVRGdZPE0HwAAAIw"]
[Fri Mar 27 02:56:55.202618 2026] [:error] [pid 62147:tid 62465] [client 20.240.134.170:62582] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acWBdxPjxn06mcLazN6jHAAAAAU"]
[Fri Mar 27 02:56:56.487129 2026] [:error] [pid 62551:tid 62554] [client 20.240.134.170:6761] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acWBeIQvFHgfE1g4p7CsDwAAAcA"]
[Fri Mar 27 02:56:57.131496 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:17807] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acWBeeqp9u5CVRGdZPE0JAAAAIM"]
[Fri Mar 27 02:56:57.715654 2026] [:error] [pid 44058:tid 44079] [client 20.240.134.170:17833] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acWBeeqp9u5CVRGdZPE0JgAAAJM"]
[Fri Mar 27 02:56:58.407089 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:8765] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acWBeuqp9u5CVRGdZPE0LAAAAJE"]
[Fri Mar 27 02:56:59.090684 2026] [:error] [pid 44058:tid 44073] [client 20.240.134.170:17807] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acWBe-qp9u5CVRGdZPE0MAAAAI0"]
[Fri Mar 27 02:56:59.768771 2026] [:error] [pid 62149:tid 62545] [client 20.240.134.170:28758] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acWBe2Hvvta9MPqU8PV71wAAARU"]
[Fri Mar 27 02:57:00.398111 2026] [:error] [pid 62551:tid 62558] [client 20.240.134.170:8707] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acWBfIQvFHgfE1g4p7CsFQAAAcQ"]
[Fri Mar 27 02:57:00.939648 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:23238] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acWBfOqp9u5CVRGdZPE0OgAAAIk"]
[Fri Mar 27 02:57:01.502814 2026] [:error] [pid 62147:tid 62461] [client 20.240.134.170:62541] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acWBfRPjxn06mcLazN6jJwAAAAE"]
[Fri Mar 27 02:57:02.059189 2026] [:error] [pid 44058:tid 44064] [client 20.240.134.170:6414] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acWBfuqp9u5CVRGdZPE0RAAAAIQ"]
[Fri Mar 27 02:57:02.680997 2026] [:error] [pid 62148:tid 62500] [client 20.240.134.170:17848] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acWBfoduik-mTruBKFWCDwAAAEM"]
[Fri Mar 27 02:57:03.297583 2026] [:error] [pid 62147:tid 62474] [client 20.240.134.170:44356] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acWBfxPjxn06mcLazN6jKAAAAA4"]
[Fri Mar 27 02:57:03.925071 2026] [:error] [pid 44058:tid 44067] [client 20.240.134.170:44376] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acWBf-qp9u5CVRGdZPE0UgAAAIc"]
[Fri Mar 27 02:57:04.568770 2026] [:error] [pid 62147:tid 62466] [client 20.240.134.170:23237] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acWBgBPjxn06mcLazN6jKwAAAAY"]
[Fri Mar 27 02:57:05.177715 2026] [:error] [pid 62147:tid 62478] [client 20.240.134.170:6458] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acWBgRPjxn06mcLazN6jLgAAABI"]
[Fri Mar 27 02:57:05.786498 2026] [:error] [pid 62147:tid 62469] [client 20.240.134.170:54233] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acWBgRPjxn06mcLazN6jMQAAAAk"]
[Fri Mar 27 02:57:06.391204 2026] [:error] [pid 62147:tid 62467] [client 20.240.134.170:44372] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acWBghPjxn06mcLazN6jOAAAAAc"]
[Fri Mar 27 02:57:06.999519 2026] [:error] [pid 62147:tid 62465] [client 20.240.134.170:12312] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acWBghPjxn06mcLazN6jOgAAAAU"]
[Fri Mar 27 02:57:07.566545 2026] [:error] [pid 44058:tid 44076] [client 20.240.134.170:45487] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acWBg-qp9u5CVRGdZPE0XwAAAJA"]
[Fri Mar 27 02:57:08.189123 2026] [:error] [pid 62551:tid 62577] [client 20.240.134.170:50545] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acWBhIQvFHgfE1g4p7CsJwAAAdc"]
[Fri Mar 27 02:57:08.829428 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:6408] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acWBhOqp9u5CVRGdZPE0YQAAAJE"]
[Fri Mar 27 02:57:09.438977 2026] [:error] [pid 62551:tid 62558] [client 20.240.134.170:24245] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acWBhYQvFHgfE1g4p7CsLAAAAcQ"]
[Fri Mar 27 02:57:10.074178 2026] [:error] [pid 62148:tid 62503] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Mar 27 02:57:10.350127 2026] [:error] [pid 62148:tid 62520] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/cc13.php
[Fri Mar 27 02:57:10.639390 2026] [:error] [pid 62148:tid 62516] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Fri Mar 27 02:57:10.949443 2026] [:error] [pid 62148:tid 62501] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Fri Mar 27 02:57:11.241286 2026] [:error] [pid 62148:tid 62510] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/ccu.php
[Fri Mar 27 02:57:11.591933 2026] [:error] [pid 62148:tid 62498] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Fri Mar 27 02:57:11.859353 2026] [:error] [pid 62148:tid 62511] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/north1.php
[Fri Mar 27 02:57:12.124118 2026] [:error] [pid 62148:tid 62502] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Fri Mar 27 02:57:12.393169 2026] [:error] [pid 62148:tid 62500] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Fri Mar 27 02:57:12.659993 2026] [:error] [pid 62148:tid 62509] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/caiij.php
[Fri Mar 27 02:57:12.926353 2026] [:error] [pid 62148:tid 62514] [client 20.240.134.170:50536] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Fri Mar 27 02:57:13.190020 2026] [:error] [pid 62148:tid 62518] [client 20.240.134.170:50536] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxijj.php"] [unique_id "acWBiYduik-mTruBKFWCIgAAAFU"]
[Fri Mar 27 02:57:14.007192 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:6415] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxijj.php"] [unique_id "acWBiuqp9u5CVRGdZPE0cgAAAJI"]
[Fri Mar 27 02:57:14.709578 2026] [:error] [pid 44058:tid 44081] [client 20.240.134.170:12341] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxijj.php"] [unique_id "acWBiuqp9u5CVRGdZPE0dQAAAJU"]
[Fri Mar 27 02:57:15.381628 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:23922] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxijj.php"] [unique_id "acWBi-qp9u5CVRGdZPE0ewAAAJc"]
[Fri Mar 27 02:57:16.029054 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:15075] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acWBjOqp9u5CVRGdZPE0gQAAAJY"]
[Fri Mar 27 02:57:16.681196 2026] [:error] [pid 44058:tid 44060] [client 20.240.134.170:19748] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acWBjOqp9u5CVRGdZPE0hwAAAIA"]
[Fri Mar 27 02:57:17.351226 2026] [:error] [pid 62148:tid 62508] [client 20.240.134.170:11588] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acWBjYduik-mTruBKFWCJAAAAEs"]
[Fri Mar 27 02:57:18.303305 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:21266] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acWBjuqp9u5CVRGdZPE0lQAAAJc"]
[Fri Mar 27 02:57:19.374296 2026] [:error] [pid 62147:tid 62483] [client 20.240.134.170:60987] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acWBjxPjxn06mcLazN6jTwAAABc"]
[Fri Mar 27 02:57:20.259949 2026] [:error] [pid 62147:tid 62466] [client 20.240.134.170:15080] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acWBkBPjxn06mcLazN6jVgAAAAY"]
[Fri Mar 27 02:57:21.509899 2026] [:error] [pid 62147:tid 62463] [client 20.240.134.170:44885] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acWBkRPjxn06mcLazN6jWQAAAAM"]
[Fri Mar 27 02:57:22.368768 2026] [:error] [pid 62149:tid 62536] [client 20.240.134.170:15092] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acWBkmHvvta9MPqU8PV79AAAAQw"]
[Fri Mar 27 02:57:23.040396 2026] [:error] [pid 62147:tid 62474] [client 20.240.134.170:46784] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acWBkxPjxn06mcLazN6jXgAAAA4"]
[Fri Mar 27 02:57:23.818296 2026] [:error] [pid 62147:tid 62466] [client 20.240.134.170:11608] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acWBkxPjxn06mcLazN6jYQAAAAY"]
[Fri Mar 27 02:57:24.959137 2026] [:error] [pid 44058:tid 44084] [client 20.240.134.170:49311] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acWBlOqp9u5CVRGdZPE0owAAAJg"]
[Fri Mar 27 02:57:25.738749 2026] [:error] [pid 44058:tid 44074] [client 20.240.134.170:17008] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acWBleqp9u5CVRGdZPE0pgAAAI4"]
[Fri Mar 27 02:57:26.469518 2026] [:error] [pid 44058:tid 44060] [client 20.240.134.170:16915] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acWBluqp9u5CVRGdZPE0rAAAAIA"]
[Fri Mar 27 02:57:27.135433 2026] [:error] [pid 62551:tid 62575] [client 20.240.134.170:16964] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acWBl4QvFHgfE1g4p7CsSwAAAdU"]
[Fri Mar 27 02:57:28.206112 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:9551] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acWBmOqp9u5CVRGdZPE0sAAAAJc"]
[Fri Mar 27 02:57:29.004643 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:7298] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acWBmeqp9u5CVRGdZPE0swAAAIU"]
[Fri Mar 27 02:57:29.705653 2026] [:error] [pid 44058:tid 44072] [client 20.240.134.170:44908] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acWBmeqp9u5CVRGdZPE0uAAAAIw"]
[Fri Mar 27 02:57:30.259837 2026] [:error] [pid 44058:tid 44078] [client 20.240.134.170:9039] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acWBmuqp9u5CVRGdZPE0uwAAAJI"]
[Fri Mar 27 02:57:30.846755 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:51195] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acWBmuqp9u5CVRGdZPE0wAAAAIM"]
[Fri Mar 27 02:57:31.648923 2026] [:error] [pid 44058:tid 44071] [client 20.240.134.170:47971] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acWBm-qp9u5CVRGdZPE0yQAAAIs"]
[Fri Mar 27 02:57:32.290109 2026] [:error] [pid 62149:tid 62548] [client 20.240.134.170:29955] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acWBnGHvvta9MPqU8PV7-gAAARg"]
[Fri Mar 27 02:57:32.961246 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:29960] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acWBnOqp9u5CVRGdZPE00gAAAI8"]
[Fri Mar 27 02:57:34.044003 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:32558] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acWBnuqp9u5CVRGdZPE01wAAAIk"]
[Fri Mar 27 02:57:34.824749 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:34531] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acWBnuqp9u5CVRGdZPE02gAAAJY"]
[Fri Mar 27 02:57:35.513987 2026] [:error] [pid 62149:tid 62538] [client 20.240.134.170:9058] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acWBn2Hvvta9MPqU8PV8AwAAAQ4"]
[Fri Mar 27 02:57:36.116202 2026] [:error] [pid 62551:tid 62559] [client 20.240.134.170:13183] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acWBoIQvFHgfE1g4p7CsUQAAAcU"]
[Fri Mar 27 02:57:36.746701 2026] [:error] [pid 62149:tid 62548] [client 20.240.134.170:34504] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acWBoGHvvta9MPqU8PV8BwAAARg"]
[Fri Mar 27 02:57:37.470156 2026] [:error] [pid 62149:tid 62529] [client 20.240.134.170:9045] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acWBoWHvvta9MPqU8PV8CwAAAQU"]
[Fri Mar 27 02:57:38.033140 2026] [:error] [pid 62551:tid 62574] [client 20.240.134.170:33806] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acWBooQvFHgfE1g4p7CsVAAAAdQ"]
[Fri Mar 27 02:57:38.614999 2026] [:error] [pid 62551:tid 62575] [client 20.240.134.170:13179] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acWBooQvFHgfE1g4p7CsVgAAAdU"]
[Fri Mar 27 02:57:39.202994 2026] [:error] [pid 62551:tid 62570] [client 20.240.134.170:42419] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acWBo4QvFHgfE1g4p7CsVwAAAdA"]
[Fri Mar 27 02:57:39.829441 2026] [:error] [pid 44058:tid 44062] [client 20.240.134.170:13136] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acWBo-qp9u5CVRGdZPE05gAAAII"]
[Fri Mar 27 02:57:40.617266 2026] [:error] [pid 44058:tid 44084] [client 20.240.134.170:42378] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acWBpOqp9u5CVRGdZPE06QAAAJg"]
[Fri Mar 27 02:57:41.246857 2026] [:error] [pid 62149:tid 62540] [client 20.240.134.170:49394] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acWBpWHvvta9MPqU8PV8FAAAARA"]
[Fri Mar 27 02:57:41.951883 2026] [:error] [pid 44058:tid 44062] [client 20.240.134.170:33844] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acWBpeqp9u5CVRGdZPE08AAAAII"]
[Fri Mar 27 02:57:42.712815 2026] [:error] [pid 44058:tid 44084] [client 20.240.134.170:9922] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acWBpuqp9u5CVRGdZPE09AAAAJg"]
[Fri Mar 27 02:57:43.284161 2026] [:error] [pid 62147:tid 62468] [client 20.240.134.170:29371] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acWBpxPjxn06mcLazN6jeAAAAAg"]
[Fri Mar 27 02:57:43.844775 2026] [:error] [pid 44058:tid 44079] [client 20.240.134.170:14220] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acWBp-qp9u5CVRGdZPE0-wAAAJM"]
[Fri Mar 27 02:57:44.468828 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:18200] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acWBqOqp9u5CVRGdZPE0_wAAAJE"]
[Fri Mar 27 02:57:45.044307 2026] [:error] [pid 62148:tid 62517] [client 20.240.134.170:7080] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acWBqYduik-mTruBKFWCNgAAAFQ"]
[Fri Mar 27 02:57:45.606338 2026] [:error] [pid 62147:tid 62478] [client 20.240.134.170:13836] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acWBqRPjxn06mcLazN6jfgAAABI"]
[Fri Mar 27 02:57:46.227463 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:25808] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acWBquqp9u5CVRGdZPE1BwAAAI8"]
[Fri Mar 27 02:57:46.929369 2026] [:error] [pid 62147:tid 62473] [client 20.240.134.170:42391] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acWBqhPjxn06mcLazN6jgAAAAA0"]
[Fri Mar 27 02:57:47.544143 2026] [:error] [pid 62148:tid 62504] [client 20.240.134.170:7977] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acWBq4duik-mTruBKFWCPgAAAEc"]
[Fri Mar 27 02:57:48.112049 2026] [:error] [pid 44058:tid 44069] [client 20.240.134.170:47236] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acWBrOqp9u5CVRGdZPE1DAAAAIk"]
[Fri Mar 27 02:57:48.722111 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:62482] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acWBrOqp9u5CVRGdZPE1DwAAAIU"]
[Fri Mar 27 02:57:49.449114 2026] [:error] [pid 62551:tid 62557] [client 20.240.134.170:47290] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acWBrYQvFHgfE1g4p7CsXwAAAcM"]
[Fri Mar 27 02:57:50.106765 2026] [:error] [pid 44058:tid 44072] [client 20.240.134.170:33829] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acWBruqp9u5CVRGdZPE1FgAAAIw"]
[Fri Mar 27 02:57:50.819041 2026] [:error] [pid 62147:tid 62468] [client 20.240.134.170:49387] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acWBrhPjxn06mcLazN6jjAAAAAg"]
[Fri Mar 27 02:57:51.455810 2026] [:error] [pid 62147:tid 62483] [client 20.240.134.170:6620] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acWBrxPjxn06mcLazN6jkQAAABc"]
[Fri Mar 27 02:57:52.109883 2026] [:error] [pid 62147:tid 62467] [client 20.240.134.170:7668] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acWBsBPjxn06mcLazN6jlQAAAAc"]
[Fri Mar 27 02:57:52.694246 2026] [:error] [pid 62551:tid 62569] [client 20.240.134.170:42415] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acWBsIQvFHgfE1g4p7CsYwAAAc8"]
[Fri Mar 27 02:57:53.283538 2026] [:error] [pid 62149:tid 62525] [client 20.240.134.170:15006] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acWBsWHvvta9MPqU8PV8IgAAAQE"]
[Fri Mar 27 02:57:53.851409 2026] [:error] [pid 62147:tid 62470] [client 20.240.134.170:15092] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acWBsRPjxn06mcLazN6jogAAAAo"]
[Fri Mar 27 02:57:54.481294 2026] [:error] [pid 62147:tid 62463] [client 20.240.134.170:6501] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acWBshPjxn06mcLazN6jpAAAAAM"]
[Fri Mar 27 02:57:55.171208 2026] [:error] [pid 62147:tid 62466] [client 20.240.134.170:49374] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acWBsxPjxn06mcLazN6jpwAAAAY"]
[Fri Mar 27 02:57:55.793951 2026] [:error] [pid 44058:tid 44072] [client 20.240.134.170:23825] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acWBs-qp9u5CVRGdZPE1GQAAAIw"]
[Fri Mar 27 02:57:56.408825 2026] [:error] [pid 62147:tid 62469] [client 20.240.134.170:8982] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acWBtBPjxn06mcLazN6jqgAAAAk"]
[Fri Mar 27 02:57:57.261570 2026] [:error] [pid 62149:tid 62534] [client 20.240.134.170:30622] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acWBtWHvvta9MPqU8PV8JQAAAQo"]
[Fri Mar 27 02:57:58.277313 2026] [:error] [pid 62149:tid 62538] [client 20.240.134.170:15453] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acWBtmHvvta9MPqU8PV8KwAAAQ4"]
[Fri Mar 27 02:57:59.132199 2026] [:error] [pid 62551:tid 62557] [client 20.240.134.170:41031] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acWBt4QvFHgfE1g4p7CsaQAAAcM"]
[Fri Mar 27 02:58:00.131140 2026] [:error] [pid 62551:tid 62567] [client 20.240.134.170:41056] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acWBuIQvFHgfE1g4p7CsbAAAAc0"]
[Fri Mar 27 02:58:00.973054 2026] [:error] [pid 62551:tid 62561] [client 20.240.134.170:33270] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acWBuIQvFHgfE1g4p7CsbwAAAcc"]
[Fri Mar 27 02:58:01.670187 2026] [:error] [pid 62551:tid 62565] [client 20.240.134.170:15418] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acWBuYQvFHgfE1g4p7CscgAAAcs"]
[Fri Mar 27 02:58:02.290380 2026] [:error] [pid 62149:tid 62526] [client 20.240.134.170:30653] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acWBumHvvta9MPqU8PV8MQAAAQI"]
[Fri Mar 27 02:58:03.120653 2026] [:error] [pid 62149:tid 62524] [client 20.240.134.170:9018] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acWBu2Hvvta9MPqU8PV8MgAAAQA"]
[Fri Mar 27 02:58:04.143497 2026] [:error] [pid 44058:tid 44083] [client 20.240.134.170:15429] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acWBvOqp9u5CVRGdZPE1IwAAAJc"]
[Fri Mar 27 02:58:05.675139 2026] [:error] [pid 62551:tid 62577] [client 20.240.134.170:12788] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acWBvYQvFHgfE1g4p7CseQAAAdc"]
[Fri Mar 27 02:58:06.441735 2026] [:error] [pid 62149:tid 62526] [client 20.240.134.170:12762] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acWBvmHvvta9MPqU8PV8NwAAAQI"]
[Fri Mar 27 02:58:07.189427 2026] [:error] [pid 62551:tid 62563] [client 20.240.134.170:37066] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acWBv4QvFHgfE1g4p7CsfgAAAck"]
[Fri Mar 27 02:58:08.117774 2026] [:error] [pid 62147:tid 62478] [client 20.240.134.170:19331] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acWBwBPjxn06mcLazN6jzAAAABI"]
[Fri Mar 27 02:58:08.722125 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:33246] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acWBwOqp9u5CVRGdZPE1MQAAAIU"]
[Fri Mar 27 02:58:09.292425 2026] [:error] [pid 62147:tid 62480] [client 20.240.134.170:61852] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acWBwRPjxn06mcLazN6j0QAAABQ"]
[Fri Mar 27 02:58:11.436504 2026] [:error] [pid 62147:tid 62471] [client 20.240.134.170:38444] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acWBwxPjxn06mcLazN6j1wAAAAs"]
[Fri Mar 27 02:58:12.134313 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/bywaf.php
[Fri Mar 27 02:58:12.429282 2026] [:error] [pid 44058:tid 44075] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-true.php
[Fri Mar 27 02:58:12.693722 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Fri Mar 27 02:58:12.973783 2026] [:error] [pid 44058:tid 44077] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/tx88.php
[Fri Mar 27 02:58:13.238670 2026] [:error] [pid 44058:tid 44068] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Fri Mar 27 02:58:13.528520 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Fri Mar 27 02:58:13.793283 2026] [:error] [pid 44058:tid 44073] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Fri Mar 27 02:58:14.384830 2026] [:error] [pid 44058:tid 44079] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/utky.php
[Fri Mar 27 02:58:14.650157 2026] [:error] [pid 44058:tid 44066] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/uang.php
[Fri Mar 27 02:58:14.982093 2026] [:error] [pid 44058:tid 44080] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/wp3.php
[Fri Mar 27 02:58:15.308654 2026] [:error] [pid 44058:tid 44072] [client 20.240.134.170:61000] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Mar 27 02:58:15.635961 2026] [:error] [pid 44058:tid 44067] [client 20.240.134.170:61000] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acWBx-qp9u5CVRGdZPE1RwAAAIc"]
[Fri Mar 27 02:58:17.113857 2026] [:error] [pid 44058:tid 44068] [client 20.240.134.170:25376] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acWByeqp9u5CVRGdZPE1SAAAAIg"]
[Fri Mar 27 02:58:17.758006 2026] [:error] [pid 44058:tid 44080] [client 20.240.134.170:6323] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acWByeqp9u5CVRGdZPE1SwAAAJQ"]
[Fri Mar 27 02:58:18.420549 2026] [:error] [pid 62551:tid 62577] [client 20.240.134.170:19338] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acWByoQvFHgfE1g4p7CshwAAAdc"]
[Fri Mar 27 02:58:19.185831 2026] [:error] [pid 44058:tid 44082] [client 20.240.134.170:40446] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ticket.php"] [unique_id "acWBy-qp9u5CVRGdZPE1UwAAAJY"]
[Fri Mar 27 02:58:19.990885 2026] [:error] [pid 44058:tid 44061] [client 20.240.134.170:6296] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ticket.php"] [unique_id "acWBy-qp9u5CVRGdZPE1VwAAAIE"]
[Fri Mar 27 02:58:20.742897 2026] [:error] [pid 44058:tid 44080] [client 20.240.134.170:25374] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ticket.php"] [unique_id "acWBzOqp9u5CVRGdZPE1XAAAAJQ"]
[Fri Mar 27 02:58:21.320258 2026] [:error] [pid 62551:tid 62554] [client 20.240.134.170:12790] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ticket.php"] [unique_id "acWBzYQvFHgfE1g4p7CsigAAAcA"]
[Fri Mar 27 02:58:21.975325 2026] [:error] [pid 62147:tid 62462] [client 20.240.134.170:20968] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "acWBzRPjxn06mcLazN6j3wAAAAI"]
[Fri Mar 27 02:58:22.613791 2026] [:error] [pid 62148:tid 62517] [client 20.240.134.170:36416] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "acWBzoduik-mTruBKFWCUgAAAFQ"]
[Fri Mar 27 02:58:23.425163 2026] [:error] [pid 62149:tid 62544] [client 20.240.134.170:24696] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "acWBz2Hvvta9MPqU8PV8XAAAARQ"]
[Fri Mar 27 02:58:24.174249 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:24649] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "acWB0Oqp9u5CVRGdZPE1ZAAAAIU"]
[Fri Mar 27 02:58:24.746675 2026] [:error] [pid 62148:tid 62501] [client 20.240.134.170:24293] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "acWB0Iduik-mTruBKFWCUwAAAEQ"]
[Fri Mar 27 02:58:25.417596 2026] [:error] [pid 62148:tid 62503] [client 20.240.134.170:61037] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "acWB0Yduik-mTruBKFWCVAAAAEY"]
[Fri Mar 27 02:58:25.995823 2026] [:error] [pid 62147:tid 62475] [client 20.240.134.170:31908] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "acWB0RPjxn06mcLazN6j7AAAAA8"]
[Fri Mar 27 02:58:26.620694 2026] [:error] [pid 62147:tid 62469] [client 20.240.134.170:36395] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpwer1.php"] [unique_id "acWB0hPjxn06mcLazN6j7wAAAAk"]
[Fri Mar 27 02:58:27.536090 2026] [:error] [pid 62551:tid 62576] [client 20.240.134.170:6378] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acWB04QvFHgfE1g4p7CslgAAAdY"]
[Fri Mar 27 02:58:28.178902 2026] [:error] [pid 62551:tid 62574] [client 20.240.134.170:15835] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acWB1IQvFHgfE1g4p7CsmAAAAdQ"]
[Fri Mar 27 02:58:28.924792 2026] [:error] [pid 62551:tid 62575] [client 20.240.134.170:27374] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acWB1IQvFHgfE1g4p7CsmQAAAdU"]
[Fri Mar 27 02:58:29.614023 2026] [:error] [pid 62147:tid 62461] [client 20.240.134.170:24668] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "acWB1RPjxn06mcLazN6j9wAAAAE"]
[Fri Mar 27 02:58:30.373353 2026] [:error] [pid 62149:tid 62537] [client 20.240.134.170:38464] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "acWB1mHvvta9MPqU8PV8ZAAAAQ0"]
[Fri Mar 27 02:58:31.253202 2026] [:error] [pid 44058:tid 44067] [client 20.240.134.170:15823] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "acWB1-qp9u5CVRGdZPE1bgAAAIc"]
[Fri Mar 27 02:58:31.874175 2026] [:error] [pid 44058:tid 44065] [client 20.240.134.170:38502] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "acWB1-qp9u5CVRGdZPE1cQAAAIU"]
[Fri Mar 27 02:58:32.457461 2026] [:error] [pid 62551:tid 62567] [client 20.240.134.170:15810] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "acWB2IQvFHgfE1g4p7CsoAAAAc0"]
[Fri Mar 27 02:58:33.093741 2026] [:error] [pid 62148:tid 62506] [client 20.240.134.170:27337] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpass.php"] [unique_id "acWB2Yduik-mTruBKFWCWgAAAEk"]
[Fri Mar 27 02:58:33.868034 2026] [:error] [pid 44058:tid 44073] [client 20.240.134.170:6810] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpass.php"] [unique_id "acWB2eqp9u5CVRGdZPE1dgAAAI0"]
[Fri Mar 27 02:58:34.576413 2026] [:error] [pid 62147:tid 62480] [client 20.240.134.170:36366] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpass.php"] [unique_id "acWB2hPjxn06mcLazN6kBQAAABQ"]
[Fri Mar 27 02:58:35.239591 2026] [:error] [pid 62147:tid 62463] [client 20.240.134.170:22870] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xpass.php"] [unique_id "acWB2xPjxn06mcLazN6kCgAAAAM"]
[Fri Mar 27 02:58:35.858654 2026] [:error] [pid 62149:tid 62535] [client 20.240.134.170:25404] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad.php"] [unique_id "acWB22Hvvta9MPqU8PV8ZwAAAQs"]
[Fri Mar 27 02:58:36.421017 2026] [:error] [pid 62147:tid 62463] [client 20.240.134.170:25366] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad.php"] [unique_id "acWB3BPjxn06mcLazN6kDwAAAAM"]
[Fri Mar 27 02:58:36.990023 2026] [:error] [pid 44058:tid 44063] [client 20.240.134.170:6384] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad.php"] [unique_id "acWB3Oqp9u5CVRGdZPE1fwAAAIM"]
[Fri Mar 27 02:58:37.633951 2026] [:error] [pid 62551:tid 62561] [client 20.240.134.170:24285] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ad.php"] [unique_id "acWB3YQvFHgfE1g4p7CspAAAAcc"]
[Fri Mar 27 02:58:38.212363 2026] [:error] [pid 62147:tid 62480] [client 20.240.134.170:6387] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acWB3hPjxn06mcLazN6kFwAAABQ"]
[Fri Mar 27 02:58:38.944751 2026] [:error] [pid 62147:tid 62464] [client 20.240.134.170:36407] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acWB3hPjxn06mcLazN6kGgAAAAQ"]
[Fri Mar 27 02:58:39.562684 2026] [:error] [pid 62147:tid 62476] [client 20.240.134.170:7589] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acWB3xPjxn06mcLazN6kHQAAABA"]
[Fri Mar 27 02:58:40.105197 2026] [:error] [pid 62148:tid 62510] [client 20.240.134.170:36457] [client 20.240.134.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h02ugyh.php"] [unique_id "acWB4Iduik-mTruBKFWCXwAAAE0"]
[Fri Mar 27 05:07:17.409047 2026] [:error] [pid 4293:tid 4316] [client 216.81.200.75:48512] [client 216.81.200.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "acWgBZLjeJUC3OKtEx9B-QAAAVU"]
[Fri Mar 27 05:08:02.379617 2026] [:error] [pid 27851:tid 27867] [client 216.234.213.5:43669] [client 216.234.213.5] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 216.234.213.5, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acWgMnR2ccxe3RMCLboDBAAAAMk"]
[Fri Mar 27 05:08:02.385511 2026] [:error] [pid 27851:tid 27867] [client 216.234.213.5:43669] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 05:19:00.615172 2026] [:error] [pid 27743:tid 27774] [client 43.165.65.180:52264] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acWixCA46UYYLqzw99D3ogAAAAo"]
[Fri Mar 27 09:46:40.234099 2026] [:error] [pid 63897:tid 63900] [client 223.15.245.170:40948] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acXhgGVSkmYmLu7ycYhyRQAAAQE"]
[Fri Mar 27 11:34:38.926652 2026] [:error] [pid 27750:tid 27818] [client 101.33.81.73:34494] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acX6zoaSil5rd17ieLyDeQAAAIA"]
[Fri Mar 27 15:28:33.452904 2026] [:error] [pid 4341:tid 4348] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Fri Mar 27 15:28:33.696897 2026] [:error] [pid 4341:tid 4345] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/xocx.php
[Fri Mar 27 15:28:33.935401 2026] [:error] [pid 4341:tid 4347] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/sodas.php
[Fri Mar 27 15:28:34.225656 2026] [:error] [pid 4341:tid 4359] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/zks.php
[Fri Mar 27 15:28:34.477891 2026] [:error] [pid 4341:tid 4357] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/xbc.php
[Fri Mar 27 15:28:34.715175 2026] [:error] [pid 4341:tid 4366] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/b1ack2.php
[Fri Mar 27 15:28:34.959188 2026] [:error] [pid 4341:tid 4348] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Fri Mar 27 15:28:35.197465 2026] [:error] [pid 4341:tid 4355] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/duea.php
[Fri Mar 27 15:28:35.478876 2026] [:error] [pid 4341:tid 4346] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Fri Mar 27 15:28:35.773767 2026] [:error] [pid 4341:tid 4352] [client 172.213.136.102:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa.php
[Fri Mar 27 15:28:36.129981 2026] [:error] [pid 4341:tid 4365] [client 172.213.136.102:65165] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sace.php"] [unique_id "acYxpOKJWrNB5dMlEREzXAAAAZY"]
[Fri Mar 27 15:28:40.320602 2026] [:error] [pid 27749:tid 27801] [client 172.213.136.102:63583] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sace.php"] [unique_id "acYxqMEqyoMni2Q6_X7GCgAAAEo"]
[Fri Mar 27 15:28:40.907079 2026] [:error] [pid 27749:tid 27806] [client 172.213.136.102:63634] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sace.php"] [unique_id "acYxqMEqyoMni2Q6_X7GDAAAAE8"]
[Fri Mar 27 15:28:42.127217 2026] [:error] [pid 27749:tid 27810] [client 172.213.136.102:63566] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sace.php"] [unique_id "acYxqsEqyoMni2Q6_X7GDwAAAFM"]
[Fri Mar 27 15:28:42.659113 2026] [:error] [pid 63897:tid 63919] [client 172.213.136.102:63573] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acYxqmVSkmYmLu7ycYj9RgAAARQ"]
[Fri Mar 27 15:28:43.397162 2026] [:error] [pid 63897:tid 63907] [client 172.213.136.102:63656] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acYxq2VSkmYmLu7ycYj9SQAAAQg"]
[Fri Mar 27 15:28:44.136659 2026] [:error] [pid 4293:tid 4304] [client 172.213.136.102:65104] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acYxrJLjeJUC3OKtEx_KGAAAAUk"]
[Fri Mar 27 15:28:44.805696 2026] [:error] [pid 27750:tid 27818] [client 172.213.136.102:63672] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acYxrIaSil5rd17ieLy4tAAAAIA"]
[Fri Mar 27 15:28:45.588934 2026] [:error] [pid 27750:tid 27830] [client 172.213.136.102:64145] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acYxrYaSil5rd17ieLy4ugAAAIw"]
[Fri Mar 27 15:28:46.453368 2026] [:error] [pid 27851:tid 27867] [client 172.213.136.102:65185] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acYxrnR2ccxe3RMCLbquVwAAAMk"]
[Fri Mar 27 15:28:47.099690 2026] [:error] [pid 4341:tid 4363] [client 172.213.136.102:63592] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acYxr-KJWrNB5dMlEREzbAAAAZQ"]
[Fri Mar 27 15:28:47.667907 2026] [:error] [pid 4341:tid 4348] [client 172.213.136.102:64662] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acYxr-KJWrNB5dMlEREzbgAAAYU"]
[Fri Mar 27 15:28:48.734781 2026] [:error] [pid 27851:tid 27872] [client 172.213.136.102:64702] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acYxsHR2ccxe3RMCLbquWwAAAM4"]
[Fri Mar 27 15:28:49.395627 2026] [:error] [pid 4341:tid 4364] [client 172.213.136.102:64594] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acYxseKJWrNB5dMlEREzdgAAAZU"]
[Fri Mar 27 15:28:50.658552 2026] [:error] [pid 27749:tid 27804] [client 172.213.136.102:65173] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acYxssEqyoMni2Q6_X7GEwAAAE0"]
[Fri Mar 27 15:28:51.528179 2026] [:error] [pid 27743:tid 27780] [client 172.213.136.102:64640] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acYxsyA46UYYLqzw99BT0AAAABA"]
[Fri Mar 27 15:28:52.504819 2026] [:error] [pid 4341:tid 4348] [client 172.213.136.102:63276] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acYxtOKJWrNB5dMlEREzeQAAAYU"]
[Fri Mar 27 15:28:53.508299 2026] [:error] [pid 4341:tid 4356] [client 172.213.136.102:64126] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acYxteKJWrNB5dMlEREzfQAAAY0"]
[Fri Mar 27 15:28:54.404756 2026] [:error] [pid 27743:tid 27788] [client 172.213.136.102:64120] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acYxtiA46UYYLqzw99BT0gAAABg"]
[Fri Mar 27 15:28:55.761810 2026] [:error] [pid 27750:tid 27821] [client 172.213.136.102:64677] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acYxt4aSil5rd17ieLy4xgAAAIM"]
[Fri Mar 27 15:28:56.591421 2026] [:error] [pid 4341:tid 4367] [client 172.213.136.102:64605] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acYxuOKJWrNB5dMlEREzgQAAAZg"]
[Fri Mar 27 15:28:57.274365 2026] [:error] [pid 27743:tid 27778] [client 172.213.136.102:63641] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acYxuSA46UYYLqzw99BT1AAAAA4"]
[Fri Mar 27 15:28:58.113022 2026] [:error] [pid 63897:tid 63905] [client 172.213.136.102:64142] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acYxumVSkmYmLu7ycYj9XgAAAQY"]
[Fri Mar 27 15:28:58.770636 2026] [:error] [pid 63897:tid 63914] [client 172.213.136.102:63670] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acYxumVSkmYmLu7ycYj9XwAAAQ8"]
[Fri Mar 27 15:28:59.347571 2026] [:error] [pid 4293:tid 4316] [client 172.213.136.102:64107] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acYxu5LjeJUC3OKtEx_KLgAAAVU"]
[Fri Mar 27 15:29:00.323968 2026] [:error] [pid 27851:tid 27882] [client 172.213.136.102:64118] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acYxvHR2ccxe3RMCLbquYwAAANg"]
[Fri Mar 27 15:29:02.046288 2026] [:error] [pid 27851:tid 27870] [client 172.213.136.102:64160] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acYxvnR2ccxe3RMCLbquZgAAAMw"]
[Fri Mar 27 15:29:02.696166 2026] [:error] [pid 27851:tid 27875] [client 172.213.136.102:62165] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acYxvnR2ccxe3RMCLbquagAAANE"]
[Fri Mar 27 15:29:03.407754 2026] [:error] [pid 27750:tid 27824] [client 172.213.136.102:65134] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acYxv4aSil5rd17ieLy4yAAAAIY"]
[Fri Mar 27 15:29:04.011394 2026] [:error] [pid 4293:tid 4309] [client 172.213.136.102:64064] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acYxwJLjeJUC3OKtEx_KMwAAAU4"]
[Fri Mar 27 15:29:04.789921 2026] [:error] [pid 4293:tid 4298] [client 172.213.136.102:63617] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acYxwJLjeJUC3OKtEx_KOAAAAUM"]
[Fri Mar 27 15:29:05.522127 2026] [:error] [pid 4293:tid 4318] [client 172.213.136.102:63599] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "acYxwZLjeJUC3OKtEx_KPAAAAVc"]
[Fri Mar 27 15:29:06.151134 2026] [:error] [pid 27851:tid 27864] [client 172.213.136.102:64177] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acYxwnR2ccxe3RMCLbqubwAAAMY"]
[Fri Mar 27 15:29:06.756108 2026] [:error] [pid 63897:tid 63921] [client 172.213.136.102:64675] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acYxwmVSkmYmLu7ycYj9agAAARY"]
[Fri Mar 27 15:29:07.639017 2026] [:error] [pid 4341:tid 4365] [client 172.213.136.102:65202] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acYxw-KJWrNB5dMlEREzjQAAAZY"]
[Fri Mar 27 15:29:08.201420 2026] [:error] [pid 4293:tid 4297] [client 172.213.136.102:63663] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acYxxJLjeJUC3OKtEx_KRAAAAUI"]
[Fri Mar 27 15:29:09.298843 2026] [:error] [pid 27851:tid 27859] [client 172.213.136.102:65142] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acYxxXR2ccxe3RMCLbqucgAAAME"]
[Fri Mar 27 15:29:09.932089 2026] [:error] [pid 4293:tid 4313] [client 172.213.136.102:65138] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acYxxZLjeJUC3OKtEx_KRwAAAVI"]
[Fri Mar 27 15:29:10.748484 2026] [:error] [pid 4293:tid 4308] [client 172.213.136.102:63612] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acYxxpLjeJUC3OKtEx_KTAAAAU0"]
[Fri Mar 27 15:29:11.645231 2026] [:error] [pid 27743:tid 27785] [client 172.213.136.102:64114] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless13.php"] [unique_id "acYxxyA46UYYLqzw99BT2QAAABU"]
[Fri Mar 27 15:29:12.390850 2026] [:error] [pid 27750:tid 27826] [client 172.213.136.102:64078] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acYxyIaSil5rd17ieLy4zwAAAIg"]
[Fri Mar 27 15:29:12.923979 2026] [:error] [pid 63897:tid 63921] [client 172.213.136.102:65214] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acYxyGVSkmYmLu7ycYj9cwAAARY"]
[Fri Mar 27 15:29:13.677442 2026] [:error] [pid 4293:tid 4301] [client 172.213.136.102:64621] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acYxyZLjeJUC3OKtEx_KUgAAAUY"]
[Fri Mar 27 15:29:14.311319 2026] [:error] [pid 27750:tid 27837] [client 172.213.136.102:65209] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acYxyoaSil5rd17ieLy40gAAAJM"]
[Fri Mar 27 15:29:14.862368 2026] [:error] [pid 4293:tid 4308] [client 172.213.136.102:63659] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acYxypLjeJUC3OKtEx_KVQAAAU0"]
[Fri Mar 27 15:29:15.430661 2026] [:error] [pid 4293:tid 4302] [client 172.213.136.102:63269] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acYxy5LjeJUC3OKtEx_KWgAAAUc"]
[Fri Mar 27 15:29:16.180385 2026] [:error] [pid 63897:tid 63916] [client 172.213.136.102:64678] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acYxzGVSkmYmLu7ycYj9fgAAARE"]
[Fri Mar 27 15:29:19.490786 2026] [:error] [pid 63897:tid 63915] [client 172.213.136.102:63676] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acYxz2VSkmYmLu7ycYj9hQAAARA"]
[Fri Mar 27 15:29:20.327710 2026] [:error] [pid 4293:tid 4299] [client 172.213.136.102:64137] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acYx0JLjeJUC3OKtEx_KZQAAAUQ"]
[Fri Mar 27 15:29:21.103140 2026] [:error] [pid 4293:tid 4302] [client 172.213.136.102:64610] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acYx0ZLjeJUC3OKtEx_KbQAAAUc"]
[Fri Mar 27 15:29:21.670006 2026] [:error] [pid 4293:tid 4315] [client 172.213.136.102:63651] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acYx0ZLjeJUC3OKtEx_KcQAAAVQ"]
[Fri Mar 27 15:29:22.252906 2026] [:error] [pid 4341:tid 4346] [client 172.213.136.102:63588] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acYx0uKJWrNB5dMlEREzmgAAAYM"]
[Fri Mar 27 15:29:22.794574 2026] [:error] [pid 27851:tid 27863] [client 172.213.136.102:64586] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acYx0nR2ccxe3RMCLbqufAAAAMU"]
[Fri Mar 27 15:29:23.413730 2026] [:error] [pid 27851:tid 27862] [client 172.213.136.102:64616] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acYx03R2ccxe3RMCLbqufgAAAMQ"]
[Fri Mar 27 15:29:24.345329 2026] [:error] [pid 27750:tid 27823] [client 172.213.136.102:64125] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acYx1IaSil5rd17ieLy43gAAAIU"]
[Fri Mar 27 15:29:25.175985 2026] [:error] [pid 27750:tid 27832] [client 172.213.136.102:65205] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acYx1YaSil5rd17ieLy44gAAAI4"]
[Fri Mar 27 15:29:25.811294 2026] [:error] [pid 4293:tid 4305] [client 172.213.136.102:63618] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acYx1ZLjeJUC3OKtEx_KfQAAAUo"]
[Fri Mar 27 15:29:26.482959 2026] [:error] [pid 27750:tid 27834] [client 172.213.136.102:64671] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acYx1oaSil5rd17ieLy45AAAAJA"]
[Fri Mar 27 15:29:27.494982 2026] [:error] [pid 4293:tid 4311] [client 172.213.136.102:65187] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acYx15LjeJUC3OKtEx_KgQAAAVA"]
[Fri Mar 27 15:29:28.105767 2026] [:error] [pid 27851:tid 27881] [client 172.213.136.102:63664] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "acYx2HR2ccxe3RMCLbqugwAAANc"]
[Fri Mar 27 15:29:29.106658 2026] [:error] [pid 27851:tid 27870] [client 172.213.136.102:63557] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acYx2XR2ccxe3RMCLbquigAAAMw"]
[Fri Mar 27 15:29:29.654393 2026] [:error] [pid 27851:tid 27864] [client 172.213.136.102:65109] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acYx2XR2ccxe3RMCLbqukwAAAMY"]
[Fri Mar 27 15:29:30.196802 2026] [:error] [pid 63897:tid 63901] [client 172.213.136.102:65128] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acYx2mVSkmYmLu7ycYj9kQAAAQI"]
[Fri Mar 27 15:29:30.826654 2026] [:error] [pid 27750:tid 27823] [client 172.213.136.102:63677] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acYx2oaSil5rd17ieLy45wAAAIU"]
[Fri Mar 27 15:29:31.513536 2026] [:error] [pid 4341:tid 4364] [client 172.213.136.102:65119] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acYx2-KJWrNB5dMlERE0JgAAAZU"]
[Fri Mar 27 15:29:32.111023 2026] [:error] [pid 4293:tid 4316] [client 172.213.136.102:63630] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acYx3JLjeJUC3OKtEx_KpQAAAVU"]
[Fri Mar 27 15:29:32.747772 2026] [:error] [pid 4341:tid 4358] [client 172.213.136.102:63596] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acYx3OKJWrNB5dMlERE0OQAAAY8"]
[Fri Mar 27 15:29:33.374810 2026] [:error] [pid 27749:tid 27810] [client 172.213.136.102:64700] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/settings.php"] [unique_id "acYx3cEqyoMni2Q6_X7GKAAAAFM"]
[Fri Mar 27 15:29:33.968120 2026] [:error] [pid 63897:tid 63910] [client 172.213.136.102:63244] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acYx3WVSkmYmLu7ycYj9pgAAAQs"]
[Fri Mar 27 15:29:34.607451 2026] [:error] [pid 4341:tid 4357] [client 172.213.136.102:65178] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acYx3uKJWrNB5dMlERE0XwAAAY4"]
[Fri Mar 27 15:29:35.577907 2026] [:error] [pid 27750:tid 27826] [client 172.213.136.102:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Fri Mar 27 15:29:36.000169 2026] [:error] [pid 27750:tid 27835] [client 172.213.136.102:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Fri Mar 27 15:29:36.240436 2026] [:error] [pid 27750:tid 27818] [client 172.213.136.102:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Fri Mar 27 15:29:36.578477 2026] [:error] [pid 27750:tid 27821] [client 172.213.136.102:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Fri Mar 27 15:29:36.852781 2026] [:error] [pid 27750:tid 27823] [client 172.213.136.102:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/swallowable.php
[Fri Mar 27 15:29:37.089573 2026] [:error] [pid 27750:tid 27840] [client 172.213.136.102:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Fri Mar 27 15:29:37.447130 2026] [:error] [pid 27750:tid 27842] [client 172.213.136.102:65088] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acYx4YaSil5rd17ieLy49gAAAJg"]
[Fri Mar 27 15:29:38.249997 2026] [:error] [pid 63897:tid 63902] [client 172.213.136.102:65206] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acYx4mVSkmYmLu7ycYj9twAAAQM"]
[Fri Mar 27 15:29:39.031822 2026] [:error] [pid 27851:tid 27882] [client 172.213.136.102:64595] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acYx43R2ccxe3RMCLbqusQAAANg"]
[Fri Mar 27 15:29:39.821823 2026] [:error] [pid 4293:tid 4314] [client 172.213.136.102:64134] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acYx45LjeJUC3OKtEx_K8QAAAVM"]
[Fri Mar 27 15:29:40.676803 2026] [:error] [pid 27851:tid 27858] [client 172.213.136.102:65114] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sty.php"] [unique_id "acYx5HR2ccxe3RMCLbquuAAAAMA"]
[Fri Mar 27 15:29:41.453312 2026] [:error] [pid 4293:tid 4303] [client 172.213.136.102:64108] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sty.php"] [unique_id "acYx5ZLjeJUC3OKtEx_K9QAAAUg"]
[Fri Mar 27 15:29:42.284247 2026] [:error] [pid 4293:tid 4315] [client 172.213.136.102:63247] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sty.php"] [unique_id "acYx5pLjeJUC3OKtEx_K-AAAAVQ"]
[Fri Mar 27 15:29:42.908260 2026] [:error] [pid 4293:tid 4314] [client 172.213.136.102:65170] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sty.php"] [unique_id "acYx5pLjeJUC3OKtEx_K_QAAAVM"]
[Fri Mar 27 15:29:43.608013 2026] [:error] [pid 4293:tid 4311] [client 172.213.136.102:64683] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "acYx55LjeJUC3OKtEx_LBQAAAVA"]
[Fri Mar 27 15:29:44.229663 2026] [:error] [pid 4341:tid 4353] [client 172.213.136.102:63638] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "acYx6OKJWrNB5dMlERE0lgAAAYo"]
[Fri Mar 27 15:29:44.835941 2026] [:error] [pid 4341:tid 4357] [client 172.213.136.102:65113] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "acYx6OKJWrNB5dMlERE0ngAAAY4"]
[Fri Mar 27 15:29:45.476832 2026] [:error] [pid 4341:tid 4359] [client 172.213.136.102:64097] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "acYx6eKJWrNB5dMlERE0ogAAAZA"]
[Fri Mar 27 15:29:46.361974 2026] [:error] [pid 27750:tid 27823] [client 172.213.136.102:62190] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acYx6oaSil5rd17ieLy4_gAAAIU"]
[Fri Mar 27 15:29:47.100190 2026] [:error] [pid 27851:tid 27872] [client 172.213.136.102:64654] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acYx63R2ccxe3RMCLbquvAAAAM4"]
[Fri Mar 27 15:29:47.711386 2026] [:error] [pid 27851:tid 27864] [client 172.213.136.102:63249] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acYx63R2ccxe3RMCLbquvgAAAMY"]
[Fri Mar 27 15:29:48.554736 2026] [:error] [pid 4341:tid 4348] [client 172.213.136.102:63578] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "acYx7OKJWrNB5dMlERE0rwAAAYU"]
[Fri Mar 27 15:29:49.186062 2026] [:error] [pid 4341:tid 4351] [client 172.213.136.102:63576] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acYx7eKJWrNB5dMlERE0swAAAYg"]
[Fri Mar 27 15:29:49.915870 2026] [:error] [pid 27851:tid 27877] [client 172.213.136.102:63266] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acYx7XR2ccxe3RMCLbquwQAAANM"]
[Fri Mar 27 15:29:50.632718 2026] [:error] [pid 4341:tid 4356] [client 172.213.136.102:64188] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acYx7uKJWrNB5dMlERE0uwAAAY0"]
[Fri Mar 27 15:29:51.305147 2026] [:error] [pid 4341:tid 4345] [client 172.213.136.102:63246] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acYx7-KJWrNB5dMlERE0xAAAAYI"]
[Fri Mar 27 15:29:51.860397 2026] [:error] [pid 27851:tid 27866] [client 172.213.136.102:64151] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acYx73R2ccxe3RMCLbquwwAAAMg"]
[Fri Mar 27 15:29:52.866451 2026] [:error] [pid 63897:tid 63904] [client 172.213.136.102:64696] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acYx8GVSkmYmLu7ycYj9zQAAAQU"]
[Fri Mar 27 15:29:53.457321 2026] [:error] [pid 63897:tid 63912] [client 172.213.136.102:65163] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acYx8WVSkmYmLu7ycYj90AAAAQ0"]
[Fri Mar 27 15:29:54.011869 2026] [:error] [pid 4293:tid 4312] [client 172.213.136.102:63571] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "acYx8pLjeJUC3OKtEx_LIQAAAVE"]
[Fri Mar 27 15:29:54.621596 2026] [:error] [pid 63897:tid 63910] [client 172.213.136.102:63616] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acYx8mVSkmYmLu7ycYj91gAAAQs"]
[Fri Mar 27 15:29:55.630670 2026] [:error] [pid 4341:tid 4353] [client 172.213.136.102:64695] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acYx8-KJWrNB5dMlERE04wAAAYo"]
[Fri Mar 27 15:29:56.344586 2026] [:error] [pid 4341:tid 4365] [client 172.213.136.102:65161] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acYx9OKJWrNB5dMlERE05wAAAZY"]
[Fri Mar 27 15:29:56.898887 2026] [:error] [pid 27750:tid 27821] [client 172.213.136.102:65100] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "acYx9IaSil5rd17ieLy5BwAAAIM"]
[Fri Mar 27 15:29:57.422240 2026] [:error] [pid 4341:tid 4361] [client 172.213.136.102:65176] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acYx9eKJWrNB5dMlERE08gAAAZI"]
[Fri Mar 27 15:29:58.062993 2026] [:error] [pid 27749:tid 27814] [client 172.213.136.102:63598] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acYx9sEqyoMni2Q6_X7GMgAAAFc"]
[Fri Mar 27 15:29:58.621946 2026] [:error] [pid 27851:tid 27862] [client 172.213.136.102:63577] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acYx9nR2ccxe3RMCLbquxwAAAMQ"]
[Fri Mar 27 15:29:59.151867 2026] [:error] [pid 27750:tid 27833] [client 172.213.136.102:64149] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "acYx94aSil5rd17ieLy5CQAAAI8"]
[Fri Mar 27 15:29:59.743224 2026] [:error] [pid 63897:tid 63911] [client 172.213.136.102:64579] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acYx92VSkmYmLu7ycYj94QAAAQw"]
[Fri Mar 27 15:30:00.369954 2026] [:error] [pid 4341:tid 4343] [client 172.213.136.102:63586] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acYx-OKJWrNB5dMlERE1CAAAAYA"]
[Fri Mar 27 15:30:01.019067 2026] [:error] [pid 27750:tid 27842] [client 172.213.136.102:63647] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acYx-YaSil5rd17ieLy5DAAAAJg"]
[Fri Mar 27 15:30:01.605124 2026] [:error] [pid 4341:tid 4357] [client 172.213.136.102:64665] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acYx-eKJWrNB5dMlERE1FAAAAY4"]
[Fri Mar 27 15:30:02.110113 2026] [:error] [pid 4293:tid 4300] [client 172.213.136.102:63654] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "acYx-pLjeJUC3OKtEx_LIwAAAUU"]
[Fri Mar 27 15:30:02.972701 2026] [:error] [pid 4293:tid 4299] [client 172.213.136.102:65125] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "acYx-pLjeJUC3OKtEx_LJAAAAUQ"]
[Fri Mar 27 15:30:03.790358 2026] [:error] [pid 4341:tid 4352] [client 172.213.136.102:64684] [client 172.213.136.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "acYx--KJWrNB5dMlERE1HgAAAYk"]
[Fri Mar 27 16:44:49.512608 2026] [:error] [pid 27851:tid 27860] [client 193.202.82.228:19741] [client 193.202.82.228] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "acZDgXR2ccxe3RMCLbrAOAAAAMI"], referer: https://www.google.com
[Fri Mar 27 16:44:53.121298 2026] [:error] [pid 63897:tid 63922] [client 193.202.82.228:25047] [client 193.202.82.228] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acZDhWVSkmYmLu7ycYgTngAAARc"]
[Fri Mar 27 16:44:53.121600 2026] [:error] [pid 63897:tid 63922] [client 193.202.82.228:25047] [client 193.202.82.228] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 193.202.82.228, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acZDhWVSkmYmLu7ycYgTngAAARc"]
[Fri Mar 27 16:44:53.125606 2026] [:error] [pid 63897:tid 63922] [client 193.202.82.228:25047] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 16:44:59.958583 2026] [:error] [pid 63897:tid 63918] [client 193.202.82.228:54143] [client 193.202.82.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.202.82.228, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acZDi2VSkmYmLu7ycYgTqQAAARM"], referer: https://www.google.com
[Fri Mar 27 16:44:59.960505 2026] [:error] [pid 63897:tid 63918] [client 193.202.82.228:54143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Fri Mar 27 16:45:04.239718 2026] [:error] [pid 27851:tid 27882] [client 193.202.82.228:40823] [client 193.202.82.228] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.202.82.228, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acZDkHR2ccxe3RMCLbrASwAAANg"], referer: https://www.google.com
[Fri Mar 27 16:45:04.244500 2026] [:error] [pid 27851:tid 27882] [client 193.202.82.228:40823] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Fri Mar 27 19:21:11.972004 2026] [:error] [pid 4341:tid 4363] [client 154.57.193.173:54067] [client 154.57.193.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.193.173, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acZoJ-KJWrNB5dMlERGQ4AAAAZQ"]
[Fri Mar 27 19:21:11.975990 2026] [:error] [pid 4341:tid 4363] [client 154.57.193.173:54067] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 20:38:14.807369 2026] [:error] [pid 4341:tid 4351] [client 43.155.195.141:57768] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acZ6NuKJWrNB5dMlERGtpAAAAYg"]
[Sat Mar 28 00:03:36.767881 2026] [:error] [pid 27750:tid 27827] [client 43.157.20.63:42930] [client 43.157.20.63] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acaqWIaSil5rd17ieLwcTwAAAIk"]
[Sat Mar 28 00:21:43.376083 2026] [:error] [pid 27749:tid 27792] [client 192.144.148.122:44700] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acaul8EqyoMni2Q6_X49FQAAAEE"]
[Sat Mar 28 02:19:40.289164 2026] [:error] [pid 11323:tid 11696] [client 85.203.36.152:39411] [client 85.203.36.152] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.203.36.152, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acbKPBruG7-TT-rIgF_-HAAAABA"]
[Sat Mar 28 02:19:40.292777 2026] [:error] [pid 11323:tid 11696] [client 85.203.36.152:39411] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Mar 28 04:28:40.609383 2026] [:error] [pid 64966:tid 64984] [client 43.157.95.239:50216] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acboeNfSvF5AFfSuKxXdqgAAAMs"]
[Sat Mar 28 06:06:20.573275 2026] [:error] [pid 64860:tid 64931] [client 173.239.254.123:42357] [client 173.239.254.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.123, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acb_XBkU3N0pg_4aEL-tjgAAAFc"]
[Sat Mar 28 06:06:20.577317 2026] [:error] [pid 64860:tid 64931] [client 173.239.254.123:42357] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Mar 28 08:57:26.376132 2026] [:error] [pid 43579:tid 43618] [client 45.227.127.149:62292] [client 45.227.127.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.227.127.149, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "accndiRqN4JVI8gB7AmgpQAAAoo"]
[Sat Mar 28 08:57:26.381000 2026] [:error] [pid 43579:tid 43618] [client 45.227.127.149:62292] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 09:06:58.088210 2026] [:error] [pid 64860:tid 64926] [client 20.220.9.32:38881] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "accpshkU3N0pg_4aEL8IxwAAAFI"]
[Sat Mar 28 09:06:59.526943 2026] [:error] [pid 64859:tid 64887] [client 20.220.9.32:38898] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "accps23qEBHXq3rHdBm22QAAAAY"]
[Sat Mar 28 09:07:00.947049 2026] [:error] [pid 34597:tid 34602] [client 20.220.9.32:38901] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "accptIluI7-e5s1cafc2hAAAAUE"]
[Sat Mar 28 09:07:02.371104 2026] [:error] [pid 43579:tid 43628] [client 20.220.9.32:38882] [client 20.220.9.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "accptiRqN4JVI8gB7AmhpgAAApQ"]
[Sat Mar 28 09:25:47.841126 2026] [:error] [pid 64966:tid 64973] [client 2.58.56.116:54473] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "accuG9fSvF5AFfSuKxX_mAAAAMA"]
[Sat Mar 28 09:25:48.345536 2026] [:error] [pid 64859:tid 64901] [client 2.58.56.116:55047] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "accuHG3qEBHXq3rHdBm46QAAABQ"]
[Sat Mar 28 09:25:48.848360 2026] [:error] [pid 43578:tid 43585] [client 2.58.56.116:55470] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "accuHHNG2YdGm41aN8LxSQAAAkQ"]
[Sat Mar 28 09:25:49.349251 2026] [:error] [pid 43547:tid 43553] [client 2.58.56.116:55966] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "accuHT4ZEfdetXP-9aC9IwAAAgQ"]
[Sat Mar 28 09:25:49.846253 2026] [:error] [pid 43579:tid 43626] [client 2.58.56.116:56263] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "accuHSRqN4JVI8gB7AmleAAAApI"]
[Sat Mar 28 11:01:38.124569 2026] [:error] [pid 34597:tid 34607] [client 43.157.153.236:56356] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acdEkoluI7-e5s1cafdLggAAAUY"]
[Sat Mar 28 13:56:16.041844 2026] [:error] [pid 64860:tid 64931] [client 43.166.226.186:40928] [client 43.166.226.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acdtgBkU3N0pg_4aEL9dnwAAAFc"]
[Sat Mar 28 14:42:03.460365 2026] [:error] [pid 43547:tid 43556] [client 223.15.245.170:48463] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acd4Oz4ZEfdetXP-9aDboQAAAgc"]
[Sat Mar 28 17:54:17.461640 2026] [:error] [pid 64860:tid 64921] [client 43.130.71.237:54202] [client 43.130.71.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acelSRkU3N0pg_4aEL-DzgAAAE0"]
[Sat Mar 28 20:01:57.013538 2026] [:error] [pid 64861:tid 64954] [client 43.153.71.12:37012] [client 43.153.71.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acfDNexK22_lUN2kvnVXzgAAAJM"]
[Sat Mar 28 21:19:34.083516 2026] [:error] [pid 34631:tid 34683] [client 45.86.58.52:51320] [client 45.86.58.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.86.58.52, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acfVZjtzjMMS6kojpeRYJgAAAdc"]
[Sat Mar 28 21:19:34.088773 2026] [:error] [pid 34631:tid 34683] [client 45.86.58.52:51320] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 21:21:12.486722 2026] [:error] [pid 64861:tid 64952] [client 161.248.46.210:59586] [client 161.248.46.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.248.46.210, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acfVyOxK22_lUN2kvnV6LwAAAJE"]
[Sat Mar 28 21:21:12.491761 2026] [:error] [pid 64861:tid 64952] [client 161.248.46.210:59586] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 22:08:00.195660 2026] [:error] [pid 64861:tid 64953] [client 49.233.45.47:38876] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acfgwOxK22_lUN2kvnWOFwAAAJI"]
[Sat Mar 28 23:11:44.171486 2026] [:error] [pid 34631:tid 34672] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sat Mar 28 23:11:44.411506 2026] [:error] [pid 34631:tid 34677] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Sat Mar 28 23:11:44.984531 2026] [:error] [pid 34631:tid 34677] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Mar 28 23:11:45.189486 2026] [:error] [pid 34631:tid 34670] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Mar 28 23:11:45.391992 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sat Mar 28 23:11:45.948539 2026] [:error] [pid 34631:tid 34682] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Mar 28 23:11:46.151173 2026] [:error] [pid 34631:tid 34664] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Sat Mar 28 23:11:46.356323 2026] [:error] [pid 34631:tid 34668] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Sat Mar 28 23:11:46.559769 2026] [:error] [pid 34631:tid 34672] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Sat Mar 28 23:11:46.763024 2026] [:error] [pid 34631:tid 34676] [client 20.122.187.158:16015] File does not exist: /usr/local/apache/htdocs/suspended-page/zcsu.php
[Sat Mar 28 23:11:46.962931 2026] [:error] [pid 34631:tid 34665] [client 20.122.187.158:16015] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acfvsjtzjMMS6kojpeR7dQAAAcU"]
[Sat Mar 28 23:11:47.399108 2026] [:error] [pid 64860:tid 64920] [client 20.122.187.158:16068] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acfvsxkU3N0pg_4aEL-2SQAAAEw"]
[Sat Mar 28 23:11:47.859042 2026] [:error] [pid 43547:tid 43572] [client 20.122.187.158:16119] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acfvsz4ZEfdetXP-9aAMqgAAAhc"]
[Sat Mar 28 23:11:48.277289 2026] [:error] [pid 64860:tid 64927] [client 20.122.187.158:16082] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acfvtBkU3N0pg_4aEL-2SgAAAFM"]
[Sat Mar 28 23:11:49.151837 2026] [:error] [pid 34631:tid 34664] [client 20.122.187.158:16097] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acfvtTtzjMMS6kojpeR7gQAAAcQ"]
[Sat Mar 28 23:11:49.662550 2026] [:error] [pid 34631:tid 34674] [client 20.122.187.158:16003] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acfvtTtzjMMS6kojpeR7hgAAAc4"]
[Sat Mar 28 23:11:50.216593 2026] [:error] [pid 34631:tid 34684] [client 20.122.187.158:16102] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acfvtjtzjMMS6kojpeR7jgAAAdg"]
[Sat Mar 28 23:11:50.626789 2026] [:error] [pid 2877:tid 2899] [client 20.122.187.158:16083] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cxs.php"] [unique_id "acfvtrgM4xL1Xj409YQbSAAAARQ"]
[Sat Mar 28 23:11:51.072090 2026] [:error] [pid 34631:tid 34663] [client 20.122.187.158:16006] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acfvtztzjMMS6kojpeR7lQAAAcM"]
[Sat Mar 28 23:11:51.482987 2026] [:error] [pid 43578:tid 43603] [client 20.122.187.158:16064] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acfvt3NG2YdGm41aN8IpIAAAAlY"]
[Sat Mar 28 23:11:52.149770 2026] [:error] [pid 64859:tid 64898] [client 20.122.187.158:16096] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acfvuG3qEBHXq3rHdBlx7QAAABE"]
[Sat Mar 28 23:11:52.631639 2026] [:error] [pid 64859:tid 64905] [client 20.122.187.158:16016] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-scanner.php"] [unique_id "acfvuG3qEBHXq3rHdBlx8AAAABg"]
[Sat Mar 28 23:11:53.074102 2026] [:error] [pid 34631:tid 34661] [client 20.122.187.158:16084] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acfvuTtzjMMS6kojpeR7nAAAAcE"]
[Sat Mar 28 23:11:54.127817 2026] [:error] [pid 34631:tid 34683] [client 20.122.187.158:16101] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acfvujtzjMMS6kojpeR7ogAAAdc"]
[Sat Mar 28 23:11:54.644097 2026] [:error] [pid 34631:tid 34668] [client 20.122.187.158:16089] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acfvujtzjMMS6kojpeR7owAAAcg"]
[Sat Mar 28 23:11:55.178471 2026] [:error] [pid 43579:tid 43624] [client 20.122.187.158:16115] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awh.php"] [unique_id "acfvuyRqN4JVI8gB7AkIRQAAApA"]
[Sat Mar 28 23:11:55.596011 2026] [:error] [pid 64861:tid 64949] [client 20.122.187.158:16085] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acfvu-xK22_lUN2kvnWpwgAAAI4"]
[Sat Mar 28 23:11:56.064327 2026] [:error] [pid 2877:tid 2903] [client 20.122.187.158:16074] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acfvvLgM4xL1Xj409YQbTAAAARg"]
[Sat Mar 28 23:11:56.488563 2026] [:error] [pid 43579:tid 43621] [client 20.122.187.158:16000] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acfvvCRqN4JVI8gB7AkITgAAAo0"]
[Sat Mar 28 23:11:56.990064 2026] [:error] [pid 64859:tid 64891] [client 20.122.187.158:16010] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24.php"] [unique_id "acfvvG3qEBHXq3rHdBlx-AAAAAo"]
[Sat Mar 28 23:11:57.459775 2026] [:error] [pid 64859:tid 64905] [client 20.122.187.158:16117] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acfvvW3qEBHXq3rHdBlx-gAAABg"]
[Sat Mar 28 23:11:57.869183 2026] [:error] [pid 64861:tid 64939] [client 20.122.187.158:16072] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acfvvexK22_lUN2kvnWpygAAAIQ"]
[Sat Mar 28 23:11:58.293986 2026] [:error] [pid 43578:tid 43585] [client 20.122.187.158:16077] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acfvvnNG2YdGm41aN8IpNQAAAkQ"]
[Sat Mar 28 23:11:58.742769 2026] [:error] [pid 43578:tid 43587] [client 20.122.187.158:16080] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "acfvvnNG2YdGm41aN8IpOAAAAkY"]
[Sat Mar 28 23:11:59.173893 2026] [:error] [pid 43578:tid 43582] [client 20.122.187.158:16122] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acfvv3NG2YdGm41aN8IpOQAAAkE"]
[Sat Mar 28 23:11:59.660151 2026] [:error] [pid 64859:tid 64886] [client 20.122.187.158:16065] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acfvv23qEBHXq3rHdBlyAwAAAAU"]
[Sat Mar 28 23:12:00.271845 2026] [:error] [pid 64861:tid 64954] [client 20.122.187.158:15938] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acfvwOxK22_lUN2kvnWp0QAAAJM"]
[Sat Mar 28 23:12:00.711923 2026] [:error] [pid 64861:tid 64936] [client 20.122.187.158:16073] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feokc.php"] [unique_id "acfvwOxK22_lUN2kvnWp1AAAAIE"]
[Sat Mar 28 23:12:01.153159 2026] [:error] [pid 43578:tid 43590] [client 20.122.187.158:16094] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acfvwXNG2YdGm41aN8IpPQAAAkk"]
[Sat Mar 28 23:12:01.566534 2026] [:error] [pid 64861:tid 64940] [client 20.122.187.158:16114] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acfvwexK22_lUN2kvnWp2gAAAIU"]
[Sat Mar 28 23:12:02.055285 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:16017] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acfvwnNG2YdGm41aN8IpPwAAAks"]
[Sat Mar 28 23:12:03.759205 2026] [:error] [pid 64860:tid 64925] [client 20.122.187.158:16108] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "acfvwxkU3N0pg_4aEL-2WgAAAFE"]
[Sat Mar 28 23:12:04.236155 2026] [:error] [pid 43578:tid 43590] [client 20.122.187.158:15948] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acfvxHNG2YdGm41aN8IpSgAAAkk"]
[Sat Mar 28 23:12:04.683754 2026] [:error] [pid 43578:tid 43597] [client 20.122.187.158:16013] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acfvxHNG2YdGm41aN8IpTgAAAlA"]
[Sat Mar 28 23:12:05.240552 2026] [:error] [pid 43578:tid 43593] [client 20.122.187.158:16007] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acfvxXNG2YdGm41aN8IpUgAAAkw"]
[Sat Mar 28 23:12:05.664801 2026] [:error] [pid 43547:tid 43569] [client 20.122.187.158:16095] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpmini.php"] [unique_id "acfvxT4ZEfdetXP-9aAMswAAAhQ"]
[Sat Mar 28 23:12:06.133932 2026] [:error] [pid 2877:tid 2896] [client 20.122.187.158:16009] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acfvxrgM4xL1Xj409YQbTwAAARE"]
[Sat Mar 28 23:12:06.601124 2026] [:error] [pid 43578:tid 43603] [client 20.122.187.158:16066] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acfvxnNG2YdGm41aN8IpYgAAAlY"]
[Sat Mar 28 23:12:07.032223 2026] [:error] [pid 43578:tid 43588] [client 20.122.187.158:16053] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acfvx3NG2YdGm41aN8IpZQAAAkc"]
[Sat Mar 28 23:12:07.813606 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:16026] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "acfvx3NG2YdGm41aN8IpagAAAks"]
[Sat Mar 28 23:12:08.325067 2026] [:error] [pid 43578:tid 43603] [client 20.122.187.158:16113] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acfvyHNG2YdGm41aN8IpcAAAAlY"]
[Sat Mar 28 23:12:08.763524 2026] [:error] [pid 43547:tid 43572] [client 20.122.187.158:16023] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acfvyD4ZEfdetXP-9aAMtgAAAhc"]
[Sat Mar 28 23:12:09.295133 2026] [:error] [pid 64860:tid 64931] [client 20.122.187.158:15950] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acfvyRkU3N0pg_4aEL-2YwAAAFc"]
[Sat Mar 28 23:12:09.829614 2026] [:error] [pid 43579:tid 43614] [client 20.122.187.158:16075] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tbute.php"] [unique_id "acfvySRqN4JVI8gB7AkIYgAAAoY"]
[Sat Mar 28 23:12:10.282008 2026] [:error] [pid 64860:tid 64921] [client 20.122.187.158:16071] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acfvyhkU3N0pg_4aEL-2ZQAAAE0"]
[Sat Mar 28 23:12:10.760791 2026] [:error] [pid 34631:tid 34683] [client 20.122.187.158:16088] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acfvyjtzjMMS6kojpeR7rQAAAdc"]
[Sat Mar 28 23:12:11.227956 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:16104] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acfvyztzjMMS6kojpeR7sAAAAdQ"]
[Sat Mar 28 23:12:11.688199 2026] [:error] [pid 34631:tid 34684] [client 20.122.187.158:16024] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rovoj.php"] [unique_id "acfvyztzjMMS6kojpeR7tgAAAdg"]
[Sat Mar 28 23:12:12.192566 2026] [:error] [pid 43578:tid 43590] [client 20.122.187.158:16067] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acfvzHNG2YdGm41aN8IpeAAAAkk"]
[Sat Mar 28 23:12:12.696709 2026] [:error] [pid 64860:tid 64923] [client 20.122.187.158:16004] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acfvzBkU3N0pg_4aEL-2ZwAAAE8"]
[Sat Mar 28 23:12:13.098966 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:16121] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acfvzXNG2YdGm41aN8IpfAAAAks"]
[Sat Mar 28 23:12:14.811521 2026] [:error] [pid 2877:tid 2886] [client 20.122.187.158:16110] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r3grt7.php"] [unique_id "acfvzrgM4xL1Xj409YQbWAAAAQc"]
[Sat Mar 28 23:12:15.278579 2026] [:error] [pid 2877:tid 2891] [client 20.122.187.158:16012] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acfvz7gM4xL1Xj409YQbXAAAAQw"]
[Sat Mar 28 23:12:15.957924 2026] [:error] [pid 64966:tid 64992] [client 20.122.187.158:16038] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acfvz9fSvF5AFfSuKxVEBgAAANM"]
[Sat Mar 28 23:12:16.682468 2026] [:error] [pid 64860:tid 64929] [client 20.122.187.158:16030] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acfv0BkU3N0pg_4aEL-2aQAAAFU"]
[Sat Mar 28 23:12:17.237043 2026] [:error] [pid 64966:tid 64975] [client 20.122.187.158:16005] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phina.php"] [unique_id "acfv0dfSvF5AFfSuKxVECQAAAMI"]
[Sat Mar 28 23:12:17.702199 2026] [:error] [pid 64861:tid 64946] [client 20.122.187.158:15971] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acfv0exK22_lUN2kvnWp7gAAAIs"]
[Sat Mar 28 23:12:18.149361 2026] [:error] [pid 43578:tid 43594] [client 20.122.187.158:16091] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acfv0nNG2YdGm41aN8IpgQAAAk0"]
[Sat Mar 28 23:12:18.712435 2026] [:error] [pid 64966:tid 64996] [client 20.122.187.158:16118] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acfv0tfSvF5AFfSuKxVEEAAAANc"]
[Sat Mar 28 23:12:19.141081 2026] [:error] [pid 64966:tid 64978] [client 20.122.187.158:16045] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "acfv09fSvF5AFfSuKxVEFAAAAMU"]
[Sat Mar 28 23:12:19.598327 2026] [:error] [pid 43547:tid 43561] [client 20.122.187.158:16025] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "acfv0z4ZEfdetXP-9aAMxgAAAgw"]
[Sat Mar 28 23:12:20.011464 2026] [:error] [pid 43547:tid 43560] [client 20.122.187.158:16078] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "acfv1D4ZEfdetXP-9aAMyQAAAgs"]
[Sat Mar 28 23:12:20.467799 2026] [:error] [pid 43578:tid 43603] [client 20.122.187.158:15880] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "acfv1HNG2YdGm41aN8IpgwAAAlY"]
[Sat Mar 28 23:12:20.882781 2026] [:error] [pid 64861:tid 64940] [client 20.122.187.158:16126] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "acfv1OxK22_lUN2kvnWp8QAAAIU"]
[Sat Mar 28 23:12:22.238560 2026] [:error] [pid 64861:tid 64941] [client 20.122.187.158:16069] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs7.php"] [unique_id "acfv1uxK22_lUN2kvnWp9QAAAIY"]
[Sat Mar 28 23:12:22.830778 2026] [:error] [pid 34597:tid 34605] [client 20.122.187.158:16058] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs7.php"] [unique_id "acfv1oluI7-e5s1cafewwQAAAUQ"]
[Sat Mar 28 23:12:23.285923 2026] [:error] [pid 64860:tid 64916] [client 20.122.187.158:15943] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs7.php"] [unique_id "acfv1xkU3N0pg_4aEL-2cAAAAEg"]
[Sat Mar 28 23:12:23.774120 2026] [:error] [pid 64860:tid 64925] [client 20.122.187.158:15942] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs7.php"] [unique_id "acfv1xkU3N0pg_4aEL-2cgAAAFE"]
[Sat Mar 28 23:12:24.496888 2026] [:error] [pid 34597:tid 34620] [client 20.122.187.158:15938] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "acfv2IluI7-e5s1cafewxAAAAVM"]
[Sat Mar 28 23:12:24.937635 2026] [:error] [pid 34597:tid 34614] [client 20.122.187.158:15936] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "acfv2IluI7-e5s1cafewygAAAU0"]
[Sat Mar 28 23:12:25.349569 2026] [:error] [pid 64859:tid 64893] [client 20.122.187.158:15955] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "acfv2W3qEBHXq3rHdBlyFwAAAAw"]
[Sat Mar 28 23:12:25.779075 2026] [:error] [pid 34597:tid 34617] [client 20.122.187.158:16086] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "acfv2YluI7-e5s1cafewzwAAAVA"]
[Sat Mar 28 23:12:26.195807 2026] [:error] [pid 64861:tid 64954] [client 20.122.187.158:16028] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/595.php"] [unique_id "acfv2uxK22_lUN2kvnWp9wAAAJM"]
[Sat Mar 28 23:12:28.665700 2026] [:error] [pid 34631:tid 34684] [client 20.122.187.158:16022] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/595.php"] [unique_id "acfv3DtzjMMS6kojpeR7xwAAAdg"]
[Sat Mar 28 23:12:29.087791 2026] [:error] [pid 43579:tid 43608] [client 20.122.187.158:16043] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/595.php"] [unique_id "acfv3SRqN4JVI8gB7AkIcwAAAoA"]
[Sat Mar 28 23:12:29.813983 2026] [:error] [pid 64966:tid 64976] [client 20.122.187.158:16002] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/595.php"] [unique_id "acfv3dfSvF5AFfSuKxVEIQAAAMM"]
[Sat Mar 28 23:12:30.591778 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:16081] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1.php"] [unique_id "acfv3jtzjMMS6kojpeR70gAAAdQ"]
[Sat Mar 28 23:12:30.992698 2026] [:error] [pid 34631:tid 34684] [client 20.122.187.158:16111] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1.php"] [unique_id "acfv3jtzjMMS6kojpeR71AAAAdg"]
[Sat Mar 28 23:12:31.434614 2026] [:error] [pid 43578:tid 43582] [client 20.122.187.158:16103] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1.php"] [unique_id "acfv33NG2YdGm41aN8IpjwAAAkE"]
[Sat Mar 28 23:12:31.866099 2026] [:error] [pid 34631:tid 34671] [client 20.122.187.158:16014] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1.php"] [unique_id "acfv3ztzjMMS6kojpeR72AAAAcs"]
[Sat Mar 28 23:12:32.405363 2026] [:error] [pid 43578:tid 43599] [client 20.122.187.158:16109] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acfv4HNG2YdGm41aN8IpkQAAAlI"]
[Sat Mar 28 23:12:32.849335 2026] [:error] [pid 43579:tid 43627] [client 20.122.187.158:16047] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acfv4CRqN4JVI8gB7AkIegAAApM"]
[Sat Mar 28 23:12:33.302603 2026] [:error] [pid 64859:tid 64885] [client 20.122.187.158:16105] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acfv4W3qEBHXq3rHdBlyGwAAAAQ"]
[Sat Mar 28 23:12:33.803291 2026] [:error] [pid 64861:tid 64959] [client 20.122.187.158:15887] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "acfv4exK22_lUN2kvnWp-gAAAJg"]
[Sat Mar 28 23:12:34.244177 2026] [:error] [pid 34597:tid 34619] [client 20.122.187.158:16090] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acfv4oluI7-e5s1cafew2QAAAVI"]
[Sat Mar 28 23:12:34.753431 2026] [:error] [pid 64861:tid 64953] [client 20.122.187.158:16018] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acfv4uxK22_lUN2kvnWp_AAAAJI"]
[Sat Mar 28 23:12:35.290359 2026] [:error] [pid 64966:tid 64984] [client 20.122.187.158:15945] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acfv49fSvF5AFfSuKxVEKAAAAMs"]
[Sat Mar 28 23:12:35.756586 2026] [:error] [pid 64966:tid 64983] [client 20.122.187.158:16063] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "acfv49fSvF5AFfSuKxVEKQAAAMo"]
[Sat Mar 28 23:12:36.217096 2026] [:error] [pid 43578:tid 43581] [client 20.122.187.158:16062] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "acfv5HNG2YdGm41aN8IplQAAAkA"]
[Sat Mar 28 23:12:36.766653 2026] [:error] [pid 64861:tid 64939] [client 20.122.187.158:16049] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "acfv5OxK22_lUN2kvnWqAQAAAIQ"]
[Sat Mar 28 23:12:37.728962 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:15941] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "acfv5TtzjMMS6kojpeR75AAAAdQ"]
[Sat Mar 28 23:12:38.148118 2026] [:error] [pid 64861:tid 64952] [client 20.122.187.158:16079] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "acfv5uxK22_lUN2kvnWqCAAAAJE"]
[Sat Mar 28 23:12:40.276193 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:16087] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "acfv6HNG2YdGm41aN8IpmQAAAks"]
[Sat Mar 28 23:12:40.791063 2026] [:error] [pid 43578:tid 43602] [client 20.122.187.158:16100] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "acfv6HNG2YdGm41aN8IpmwAAAlU"]
[Sat Mar 28 23:12:41.238373 2026] [:error] [pid 43578:tid 43604] [client 20.122.187.158:15957] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "acfv6XNG2YdGm41aN8IpngAAAlc"]
[Sat Mar 28 23:12:41.717334 2026] [:error] [pid 34631:tid 34663] [client 20.122.187.158:16098] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "acfv6TtzjMMS6kojpeR75wAAAcM"]
[Sat Mar 28 23:12:42.140587 2026] [:error] [pid 34631:tid 34661] [client 20.122.187.158:16112] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "acfv6jtzjMMS6kojpeR76AAAAcE"]
[Sat Mar 28 23:12:42.608758 2026] [:error] [pid 43578:tid 43593] [client 20.122.187.158:16027] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "acfv6nNG2YdGm41aN8IpogAAAkw"]
[Sat Mar 28 23:12:43.050166 2026] [:error] [pid 64861:tid 64946] [client 20.122.187.158:15968] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "acfv6-xK22_lUN2kvnWqHQAAAIs"]
[Sat Mar 28 23:12:43.571089 2026] [:error] [pid 64859:tid 64891] [client 20.122.187.158:15959] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws79.php"] [unique_id "acfv623qEBHXq3rHdBlyHwAAAAo"]
[Sat Mar 28 23:12:44.046400 2026] [:error] [pid 34597:tid 34607] [client 20.122.187.158:16050] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "acfv7IluI7-e5s1cafew3wAAAUY"]
[Sat Mar 28 23:12:44.483828 2026] [:error] [pid 43547:tid 43555] [client 20.122.187.158:16124] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "acfv7D4ZEfdetXP-9aAM3QAAAgY"]
[Sat Mar 28 23:12:45.583248 2026] [:error] [pid 64859:tid 64890] [client 20.122.187.158:15952] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "acfv7W3qEBHXq3rHdBlyJQAAAAk"]
[Sat Mar 28 23:12:46.044942 2026] [:error] [pid 64861:tid 64939] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sat Mar 28 23:12:46.253659 2026] [:error] [pid 64861:tid 64955] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/ws50.php
[Sat Mar 28 23:12:46.468467 2026] [:error] [pid 64861:tid 64950] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/ws44.php
[Sat Mar 28 23:12:46.678161 2026] [:error] [pid 64861:tid 64949] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/ws43.php
[Sat Mar 28 23:12:46.894247 2026] [:error] [pid 64861:tid 64959] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/ws42.php
[Sat Mar 28 23:12:47.102354 2026] [:error] [pid 64861:tid 64936] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/ws40.php
[Sat Mar 28 23:12:47.487210 2026] [:error] [pid 64861:tid 64937] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/ws36.php
[Sat Mar 28 23:12:47.694600 2026] [:error] [pid 64861:tid 64941] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/vwxbi.php
[Sat Mar 28 23:12:47.901926 2026] [:error] [pid 64861:tid 64951] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Sat Mar 28 23:12:48.141185 2026] [:error] [pid 64861:tid 64938] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Sat Mar 28 23:12:48.351607 2026] [:error] [pid 64861:tid 64942] [client 20.122.187.158:15980] File does not exist: /usr/local/apache/htdocs/suspended-page/cvz.php
[Sat Mar 28 23:12:48.556297 2026] [:error] [pid 64861:tid 64950] [client 20.122.187.158:15980] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acfv8OxK22_lUN2kvnWqPQAAAI8"]
[Sat Mar 28 23:12:48.971506 2026] [:error] [pid 64861:tid 64959] [client 20.122.187.158:15953] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acfv8OxK22_lUN2kvnWqQAAAAJg"]
[Sat Mar 28 23:12:49.473927 2026] [:error] [pid 34631:tid 34672] [client 20.122.187.158:16056] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acfv8TtzjMMS6kojpeR78gAAAcw"]
[Sat Mar 28 23:12:49.944339 2026] [:error] [pid 43578:tid 43586] [client 20.122.187.158:16011] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "acfv8XNG2YdGm41aN8IpqQAAAkU"]
[Sat Mar 28 23:12:50.412466 2026] [:error] [pid 34631:tid 34664] [client 20.122.187.158:15954] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acfv8jtzjMMS6kojpeR79wAAAcQ"]
[Sat Mar 28 23:12:50.852860 2026] [:error] [pid 43578:tid 43595] [client 20.122.187.158:15946] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acfv8nNG2YdGm41aN8IprwAAAk4"]
[Sat Mar 28 23:12:51.331024 2026] [:error] [pid 64861:tid 64952] [client 20.122.187.158:16034] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acfv8-xK22_lUN2kvnWqRQAAAJE"]
[Sat Mar 28 23:12:51.830386 2026] [:error] [pid 43578:tid 43601] [client 20.122.187.158:16052] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aee.php"] [unique_id "acfv83NG2YdGm41aN8IpsgAAAlQ"]
[Sat Mar 28 23:12:52.357809 2026] [:error] [pid 43578:tid 43582] [client 20.122.187.158:16033] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acfv9HNG2YdGm41aN8IptQAAAkE"]
[Sat Mar 28 23:12:52.779663 2026] [:error] [pid 64861:tid 64951] [client 20.122.187.158:16106] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acfv9OxK22_lUN2kvnWqSwAAAJA"]
[Sat Mar 28 23:12:53.601334 2026] [:error] [pid 34597:tid 34604] [client 20.122.187.158:16123] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acfv9YluI7-e5s1cafew5AAAAUM"]
[Sat Mar 28 23:12:54.230797 2026] [:error] [pid 34597:tid 34615] [client 20.122.187.158:15967] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sweg.php"] [unique_id "acfv9oluI7-e5s1cafew5gAAAU4"]
[Sat Mar 28 23:12:54.642427 2026] [:error] [pid 64859:tid 64897] [client 20.122.187.158:15970] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php"] [unique_id "acfv9m3qEBHXq3rHdBlyLQAAABA"]
[Sat Mar 28 23:12:55.099189 2026] [:error] [pid 64860:tid 64913] [client 20.122.187.158:16093] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php"] [unique_id "acfv9xkU3N0pg_4aEL-2iAAAAEU"]
[Sat Mar 28 23:12:55.510065 2026] [:error] [pid 34631:tid 34683] [client 20.122.187.158:16092] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php"] [unique_id "acfv9ztzjMMS6kojpeR7_AAAAdc"]
[Sat Mar 28 23:12:55.939387 2026] [:error] [pid 64861:tid 64946] [client 20.122.187.158:15951] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sql.php"] [unique_id "acfv9-xK22_lUN2kvnWqUAAAAIs"]
[Sat Mar 28 23:12:56.368348 2026] [:error] [pid 43579:tid 43609] [client 20.122.187.158:15949] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acfv-CRqN4JVI8gB7AkIiQAAAoE"]
[Sat Mar 28 23:12:56.820268 2026] [:error] [pid 34631:tid 34661] [client 20.122.187.158:16061] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acfv-DtzjMMS6kojpeR7_gAAAcE"]
[Sat Mar 28 23:12:57.283548 2026] [:error] [pid 43578:tid 43593] [client 20.122.187.158:15829] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acfv-XNG2YdGm41aN8IpuAAAAkw"]
[Sat Mar 28 23:12:57.795169 2026] [:error] [pid 43547:tid 43566] [client 20.122.187.158:15969] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sc.php"] [unique_id "acfv-T4ZEfdetXP-9aAM4gAAAhE"]
[Sat Mar 28 23:12:58.233078 2026] [:error] [pid 64861:tid 64937] [client 20.122.187.158:16036] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acfv-uxK22_lUN2kvnWqUwAAAII"]
[Sat Mar 28 23:12:58.769204 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:16055] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acfv-nNG2YdGm41aN8IpvAAAAks"]
[Sat Mar 28 23:12:59.247691 2026] [:error] [pid 34631:tid 34664] [client 20.122.187.158:16001] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acfv-ztzjMMS6kojpeR8AAAAAcQ"]
[Sat Mar 28 23:12:59.748250 2026] [:error] [pid 34631:tid 34682] [client 20.122.187.158:16054] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acfv-ztzjMMS6kojpeR8AgAAAdY"]
[Sat Mar 28 23:13:00.184584 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:15978] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acfv_DtzjMMS6kojpeR8AwAAAdQ"]
[Sat Mar 28 23:13:00.666303 2026] [:error] [pid 64861:tid 64939] [client 20.122.187.158:16120] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acfv_OxK22_lUN2kvnWqXgAAAIQ"]
[Sat Mar 28 23:13:01.091092 2026] [:error] [pid 64859:tid 64884] [client 20.122.187.158:15998] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acfv_W3qEBHXq3rHdBlyLwAAAAM"]
[Sat Mar 28 23:13:01.568898 2026] [:error] [pid 64861:tid 64943] [client 20.122.187.158:16070] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acfv_exK22_lUN2kvnWqYgAAAIg"]
[Sat Mar 28 23:13:02.080808 2026] [:error] [pid 64861:tid 64946] [client 20.122.187.158:15964] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "acfv_uxK22_lUN2kvnWqZQAAAIs"]
[Sat Mar 28 23:13:02.592404 2026] [:error] [pid 64859:tid 64883] [client 20.122.187.158:15988] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "acfv_m3qEBHXq3rHdBlyMgAAAAI"]
[Sat Mar 28 23:13:03.025112 2026] [:error] [pid 43578:tid 43595] [client 20.122.187.158:16059] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "acfv_3NG2YdGm41aN8IpxgAAAk4"]
[Sat Mar 28 23:13:03.496717 2026] [:error] [pid 34631:tid 34681] [client 20.122.187.158:15916] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "acfv_ztzjMMS6kojpeR8CwAAAdU"]
[Sat Mar 28 23:13:03.926491 2026] [:error] [pid 43578:tid 43600] [client 20.122.187.158:16021] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acfv_3NG2YdGm41aN8IpyAAAAlM"]
[Sat Mar 28 23:13:04.365596 2026] [:error] [pid 64859:tid 64890] [client 20.122.187.158:15983] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acfwAG3qEBHXq3rHdBlyNgAAAAk"]
[Sat Mar 28 23:13:04.804463 2026] [:error] [pid 64861:tid 64955] [client 20.122.187.158:15999] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acfwAOxK22_lUN2kvnWqZgAAAJQ"]
[Sat Mar 28 23:13:05.245709 2026] [:error] [pid 34631:tid 34677] [client 20.122.187.158:15992] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roter.php"] [unique_id "acfwATtzjMMS6kojpeR8EwAAAdE"]
[Sat Mar 28 23:13:06.045822 2026] [:error] [pid 43578:tid 43601] [client 20.122.187.158:15937] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "acfwAnNG2YdGm41aN8IpywAAAlQ"]
[Sat Mar 28 23:13:06.504671 2026] [:error] [pid 34597:tid 34616] [client 20.122.187.158:15977] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "acfwAoluI7-e5s1cafew7QAAAU8"]
[Sat Mar 28 23:13:06.983350 2026] [:error] [pid 34631:tid 34679] [client 20.122.187.158:15958] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "acfwAjtzjMMS6kojpeR8FgAAAdM"]
[Sat Mar 28 23:13:07.439045 2026] [:error] [pid 43578:tid 43581] [client 20.122.187.158:16116] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "acfwA3NG2YdGm41aN8IpzQAAAkA"]
[Sat Mar 28 23:13:07.951569 2026] [:error] [pid 43547:tid 43555] [client 20.122.187.158:15822] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acfwAz4ZEfdetXP-9aAM5gAAAgY"]
[Sat Mar 28 23:13:08.448969 2026] [:error] [pid 64966:tid 64981] [client 20.122.187.158:16042] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acfwBNfSvF5AFfSuKxVEMQAAAMg"]
[Sat Mar 28 23:13:08.883884 2026] [:error] [pid 64860:tid 64914] [client 20.122.187.158:15973] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acfwBBkU3N0pg_4aEL-2kAAAAEY"]
[Sat Mar 28 23:13:09.298243 2026] [:error] [pid 43578:tid 43586] [client 20.122.187.158:15928] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "acfwBXNG2YdGm41aN8Ip0AAAAkU"]
[Sat Mar 28 23:13:09.767983 2026] [:error] [pid 34631:tid 34676] [client 20.122.187.158:15882] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acfwBTtzjMMS6kojpeR8GAAAAdA"]
[Sat Mar 28 23:13:10.248827 2026] [:error] [pid 34597:tid 34615] [client 20.122.187.158:15966] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acfwBoluI7-e5s1cafew8QAAAU4"]
[Sat Mar 28 23:13:10.707583 2026] [:error] [pid 43578:tid 43599] [client 20.122.187.158:15986] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acfwBnNG2YdGm41aN8Ip1QAAAlI"]
[Sat Mar 28 23:13:11.220461 2026] [:error] [pid 34597:tid 34624] [client 20.122.187.158:16044] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "acfwB4luI7-e5s1cafew8gAAAVc"]
[Sat Mar 28 23:13:11.700351 2026] [:error] [pid 64861:tid 64958] [client 20.122.187.158:15813] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acfwB-xK22_lUN2kvnWqdwAAAJc"]
[Sat Mar 28 23:13:12.149593 2026] [:error] [pid 43578:tid 43587] [client 20.122.187.158:15886] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acfwCHNG2YdGm41aN8Ip2wAAAkY"]
[Sat Mar 28 23:13:12.570748 2026] [:error] [pid 64860:tid 64932] [client 20.122.187.158:15956] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acfwCBkU3N0pg_4aEL-2lQAAAFg"]
[Sat Mar 28 23:13:13.124466 2026] [:error] [pid 64966:tid 64980] [client 20.122.187.158:15892] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n1GiO.php"] [unique_id "acfwCdfSvF5AFfSuKxVENAAAAMc"]
[Sat Mar 28 23:13:13.534422 2026] [:error] [pid 43578:tid 43583] [client 20.122.187.158:16019] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acfwCXNG2YdGm41aN8Ip3gAAAkI"]
[Sat Mar 28 23:13:13.981222 2026] [:error] [pid 43579:tid 43624] [client 20.122.187.158:16037] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acfwCSRqN4JVI8gB7AkIkwAAApA"]
[Sat Mar 28 23:13:14.523712 2026] [:error] [pid 64861:tid 64948] [client 20.122.187.158:15982] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acfwCuxK22_lUN2kvnWqewAAAI0"]
[Sat Mar 28 23:13:15.139329 2026] [:error] [pid 43579:tid 43609] [client 20.122.187.158:15818] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pLdK1.php"] [unique_id "acfwCyRqN4JVI8gB7AkIlAAAAoE"]
[Sat Mar 28 23:13:15.582475 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:16060] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acfwCztzjMMS6kojpeR8HgAAAdQ"]
[Sat Mar 28 23:13:15.987550 2026] [:error] [pid 34597:tid 34625] [client 20.122.187.158:15891] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acfwC4luI7-e5s1cafew9AAAAVg"]
[Sat Mar 28 23:13:16.418293 2026] [:error] [pid 34597:tid 34602] [client 20.122.187.158:15884] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acfwDIluI7-e5s1cafew9QAAAUE"]
[Sat Mar 28 23:13:16.827910 2026] [:error] [pid 34597:tid 34617] [client 20.122.187.158:15989] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/llb1J.php"] [unique_id "acfwDIluI7-e5s1cafew9gAAAVA"]
[Sat Mar 28 23:13:17.294815 2026] [:error] [pid 43579:tid 43622] [client 20.122.187.158:15994] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acfwDSRqN4JVI8gB7AkIlQAAAo4"]
[Sat Mar 28 23:13:17.761964 2026] [:error] [pid 43578:tid 43590] [client 20.122.187.158:16031] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acfwDXNG2YdGm41aN8Ip6AAAAkk"]
[Sat Mar 28 23:13:18.201830 2026] [:error] [pid 43578:tid 43588] [client 20.122.187.158:15890] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acfwDnNG2YdGm41aN8Ip6gAAAkc"]
[Sat Mar 28 23:13:18.663072 2026] [:error] [pid 43578:tid 43587] [client 20.122.187.158:15939] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeZDu.php"] [unique_id "acfwDnNG2YdGm41aN8Ip6wAAAkY"]
[Sat Mar 28 23:13:19.111136 2026] [:error] [pid 43578:tid 43596] [client 20.122.187.158:15965] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acfwD3NG2YdGm41aN8Ip7wAAAk8"]
[Sat Mar 28 23:13:19.522153 2026] [:error] [pid 34631:tid 34663] [client 20.122.187.158:15987] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acfwDztzjMMS6kojpeR8KAAAAcM"]
[Sat Mar 28 23:13:19.985351 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:15919] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acfwDztzjMMS6kojpeR8KQAAAdQ"]
[Sat Mar 28 23:13:20.455180 2026] [:error] [pid 64860:tid 64927] [client 20.122.187.158:16051] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "acfwEBkU3N0pg_4aEL-2ngAAAFM"]
[Sat Mar 28 23:13:20.894744 2026] [:error] [pid 64860:tid 64930] [client 20.122.187.158:16032] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acfwEBkU3N0pg_4aEL-2oAAAAFY"]
[Sat Mar 28 23:13:21.295643 2026] [:error] [pid 34631:tid 34678] [client 20.122.187.158:16127] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acfwETtzjMMS6kojpeR8LQAAAdI"]
[Sat Mar 28 23:13:21.801638 2026] [:error] [pid 34631:tid 34677] [client 20.122.187.158:15997] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acfwETtzjMMS6kojpeR8LwAAAdE"]
[Sat Mar 28 23:13:22.634433 2026] [:error] [pid 43579:tid 43613] [client 20.122.187.158:15914] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfuKK.php"] [unique_id "acfwEiRqN4JVI8gB7AkIlgAAAoU"]
[Sat Mar 28 23:13:23.081865 2026] [:error] [pid 34631:tid 34680] [client 20.122.187.158:16046] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acfwEztzjMMS6kojpeR8MgAAAdQ"]
[Sat Mar 28 23:13:23.491494 2026] [:error] [pid 34597:tid 34605] [client 20.122.187.158:16035] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acfwE4luI7-e5s1cafew_gAAAUQ"]
[Sat Mar 28 23:13:24.003566 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:15923] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acfwFHNG2YdGm41aN8Ip9gAAAks"]
[Sat Mar 28 23:13:24.457535 2026] [:error] [pid 64859:tid 64893] [client 20.122.187.158:15909] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/OpVq6.php"] [unique_id "acfwFG3qEBHXq3rHdBlyQgAAAAw"]
[Sat Mar 28 23:13:25.273430 2026] [:error] [pid 43578:tid 43585] [client 20.122.187.158:15947] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acfwFXNG2YdGm41aN8Ip-QAAAkQ"]
[Sat Mar 28 23:13:26.005654 2026] [:error] [pid 64859:tid 64889] [client 20.122.187.158:16029] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acfwFm3qEBHXq3rHdBlySgAAAAg"]
[Sat Mar 28 23:13:26.496584 2026] [:error] [pid 43578:tid 43604] [client 20.122.187.158:15910] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acfwFnNG2YdGm41aN8Ip_AAAAlc"]
[Sat Mar 28 23:13:27.082500 2026] [:error] [pid 64861:tid 64958] [client 20.122.187.158:15920] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Q73BO.php"] [unique_id "acfwF-xK22_lUN2kvnWqiQAAAJc"]
[Sat Mar 28 23:13:27.584731 2026] [:error] [pid 43578:tid 43587] [client 20.122.187.158:15874] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acfwF3NG2YdGm41aN8IqAQAAAkY"]
[Sat Mar 28 23:13:27.992335 2026] [:error] [pid 43578:tid 43585] [client 20.122.187.158:15981] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acfwF3NG2YdGm41aN8IqBQAAAkQ"]
[Sat Mar 28 23:13:28.465955 2026] [:error] [pid 43578:tid 43604] [client 20.122.187.158:16125] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acfwGHNG2YdGm41aN8IqDAAAAlc"]
[Sat Mar 28 23:13:28.886980 2026] [:error] [pid 43578:tid 43600] [client 20.122.187.158:15974] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rmpoa.php"] [unique_id "acfwGHNG2YdGm41aN8IqDQAAAlM"]
[Sat Mar 28 23:13:29.300418 2026] [:error] [pid 43578:tid 43597] [client 20.122.187.158:16048] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acfwGXNG2YdGm41aN8IqDwAAAlA"]
[Sat Mar 28 23:13:29.738759 2026] [:error] [pid 64859:tid 64890] [client 20.122.187.158:15896] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acfwGW3qEBHXq3rHdBlyTQAAAAk"]
[Sat Mar 28 23:13:30.156529 2026] [:error] [pid 34631:tid 34674] [client 20.122.187.158:16125] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acfwGjtzjMMS6kojpeR8OgAAAc4"]
[Sat Mar 28 23:13:30.577149 2026] [:error] [pid 64861:tid 64948] [client 20.122.187.158:15931] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "acfwGuxK22_lUN2kvnWqkgAAAI0"]
[Sat Mar 28 23:13:31.065041 2026] [:error] [pid 34631:tid 34682] [client 20.122.187.158:15913] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acfwGztzjMMS6kojpeR8PwAAAdY"]
[Sat Mar 28 23:13:32.205705 2026] [:error] [pid 34597:tid 34613] [client 20.122.187.158:15972] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acfwHIluI7-e5s1cafexAgAAAUw"]
[Sat Mar 28 23:13:32.727307 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:15985] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acfwHHNG2YdGm41aN8IqGAAAAks"]
[Sat Mar 28 23:13:33.440577 2026] [:error] [pid 43578:tid 43587] [client 20.122.187.158:15876] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "acfwHXNG2YdGm41aN8IqGwAAAkY"]
[Sat Mar 28 23:13:33.860915 2026] [:error] [pid 43578:tid 43604] [client 20.122.187.158:15979] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acfwHXNG2YdGm41aN8IqHAAAAlc"]
[Sat Mar 28 23:13:34.508055 2026] [:error] [pid 43578:tid 43588] [client 20.122.187.158:15926] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acfwHnNG2YdGm41aN8IqIwAAAkc"]
[Sat Mar 28 23:13:34.971191 2026] [:error] [pid 34631:tid 34667] [client 20.122.187.158:16107] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acfwHjtzjMMS6kojpeR8RgAAAcc"]
[Sat Mar 28 23:13:35.418876 2026] [:error] [pid 43578:tid 43596] [client 20.122.187.158:15908] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "acfwH3NG2YdGm41aN8IqKQAAAk8"]
[Sat Mar 28 23:13:35.903651 2026] [:error] [pid 43578:tid 43601] [client 20.122.187.158:16040] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acfwH3NG2YdGm41aN8IqLAAAAlQ"]
[Sat Mar 28 23:13:36.352738 2026] [:error] [pid 34631:tid 34682] [client 20.122.187.158:15875] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acfwIDtzjMMS6kojpeR8RwAAAdY"]
[Sat Mar 28 23:13:36.763670 2026] [:error] [pid 43578:tid 43583] [client 20.122.187.158:15817] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acfwIHNG2YdGm41aN8IqLgAAAkI"]
[Sat Mar 28 23:13:37.385741 2026] [:error] [pid 43578:tid 43586] [client 20.122.187.158:16020] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "acfwIXNG2YdGm41aN8IqNQAAAkU"]
[Sat Mar 28 23:13:37.801368 2026] [:error] [pid 43578:tid 43603] [client 20.122.187.158:15870] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acfwIXNG2YdGm41aN8IqOAAAAlY"]
[Sat Mar 28 23:13:38.207763 2026] [:error] [pid 43578:tid 43593] [client 20.122.187.158:15885] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acfwInNG2YdGm41aN8IqOwAAAkw"]
[Sat Mar 28 23:13:38.819599 2026] [:error] [pid 43547:tid 43555] [client 20.122.187.158:15944] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acfwIj4ZEfdetXP-9aAM7gAAAgY"]
[Sat Mar 28 23:13:39.291681 2026] [:error] [pid 64860:tid 64915] [client 20.122.187.158:15940] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "acfwIxkU3N0pg_4aEL-2rQAAAEc"]
[Sat Mar 28 23:13:39.734740 2026] [:error] [pid 64860:tid 64914] [client 20.122.187.158:15872] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acfwIxkU3N0pg_4aEL-2rwAAAEY"]
[Sat Mar 28 23:13:40.251479 2026] [:error] [pid 34597:tid 34615] [client 20.122.187.158:15902] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acfwJIluI7-e5s1cafexCQAAAU4"]
[Sat Mar 28 23:13:40.997638 2026] [:error] [pid 64860:tid 64911] [client 20.122.187.158:15976] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acfwJBkU3N0pg_4aEL-2swAAAEM"]
[Sat Mar 28 23:13:41.757301 2026] [:error] [pid 64861:tid 64937] [client 20.122.187.158:15963] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "acfwJexK22_lUN2kvnWqngAAAII"]
[Sat Mar 28 23:13:42.220076 2026] [:error] [pid 43578:tid 43589] [client 20.122.187.158:16099] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acfwJnNG2YdGm41aN8IqSAAAAkg"]
[Sat Mar 28 23:13:42.650832 2026] [:error] [pid 64861:tid 64944] [client 20.122.187.158:15993] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acfwJuxK22_lUN2kvnWqnwAAAIk"]
[Sat Mar 28 23:13:43.153463 2026] [:error] [pid 43578:tid 43598] [client 20.122.187.158:15878] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acfwJ3NG2YdGm41aN8IqSwAAAlE"]
[Sat Mar 28 23:13:43.710705 2026] [:error] [pid 64861:tid 64959] [client 20.122.187.158:15990] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "acfwJ-xK22_lUN2kvnWqpAAAAJg"]
[Sat Mar 28 23:13:44.244615 2026] [:error] [pid 64861:tid 64943] [client 20.122.187.158:15888] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acfwKOxK22_lUN2kvnWqpwAAAIg"]
[Sat Mar 28 23:13:44.654735 2026] [:error] [pid 43578:tid 43583] [client 20.122.187.158:15996] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acfwKHNG2YdGm41aN8IqUQAAAkI"]
[Sat Mar 28 23:13:45.116767 2026] [:error] [pid 64861:tid 64940] [client 20.122.187.158:15903] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acfwKexK22_lUN2kvnWqqgAAAIU"]
[Sat Mar 28 23:13:45.538623 2026] [:error] [pid 64861:tid 64936] [client 20.122.187.158:15917] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "acfwKexK22_lUN2kvnWqrQAAAIE"]
[Sat Mar 28 23:13:45.947994 2026] [:error] [pid 64859:tid 64903] [client 20.122.187.158:15894] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acfwKW3qEBHXq3rHdBlyWQAAABY"]
[Sat Mar 28 23:13:46.383655 2026] [:error] [pid 34597:tid 34620] [client 20.122.187.158:16025] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acfwKoluI7-e5s1cafexEwAAAVM"]
[Sat Mar 28 23:13:46.827674 2026] [:error] [pid 34597:tid 34616] [client 20.122.187.158:15808] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acfwKoluI7-e5s1cafexFAAAAU8"]
[Sat Mar 28 23:13:47.278011 2026] [:error] [pid 64861:tid 64946] [client 20.122.187.158:15827] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "acfwK-xK22_lUN2kvnWqswAAAIs"]
[Sat Mar 28 23:13:47.745803 2026] [:error] [pid 64860:tid 64926] [client 20.122.187.158:15984] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "acfwKxkU3N0pg_4aEL-2uwAAAFI"]
[Sat Mar 28 23:13:48.211095 2026] [:error] [pid 64861:tid 64955] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/cc13.php
[Sat Mar 28 23:13:48.414083 2026] [:error] [pid 64861:tid 64940] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sat Mar 28 23:13:48.616052 2026] [:error] [pid 64861:tid 64956] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sat Mar 28 23:13:48.829359 2026] [:error] [pid 64861:tid 64950] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/ccu.php
[Sat Mar 28 23:13:49.031851 2026] [:error] [pid 64861:tid 64944] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Sat Mar 28 23:13:49.234023 2026] [:error] [pid 64861:tid 64952] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/north1.php
[Sat Mar 28 23:13:49.436086 2026] [:error] [pid 64861:tid 64941] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Sat Mar 28 23:13:49.704313 2026] [:error] [pid 64861:tid 64959] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sat Mar 28 23:13:49.906685 2026] [:error] [pid 64861:tid 64947] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/caiij.php
[Sat Mar 28 23:13:50.109076 2026] [:error] [pid 64861:tid 64938] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php
[Sat Mar 28 23:13:50.343049 2026] [:error] [pid 64861:tid 64949] [client 20.122.187.158:15873] File does not exist: /usr/local/apache/htdocs/suspended-page/uxijj.php
[Sat Mar 28 23:13:50.541984 2026] [:error] [pid 64861:tid 64945] [client 20.122.187.158:15873] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acfwLuxK22_lUN2kvnWqwgAAAIo"]
[Sat Mar 28 23:13:50.987912 2026] [:error] [pid 64861:tid 64955] [client 20.122.187.158:15826] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acfwLuxK22_lUN2kvnWqwwAAAJQ"]
[Sat Mar 28 23:13:51.420755 2026] [:error] [pid 43547:tid 43559] [client 20.122.187.158:15889] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acfwLz4ZEfdetXP-9aAM9wAAAgo"]
[Sat Mar 28 23:13:51.829076 2026] [:error] [pid 34631:tid 34675] [client 20.122.187.158:15883] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "acfwLztzjMMS6kojpeR8UAAAAc8"]
[Sat Mar 28 23:13:52.277913 2026] [:error] [pid 43578:tid 43596] [client 20.122.187.158:15907] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acfwMHNG2YdGm41aN8IqWwAAAk8"]
[Sat Mar 28 23:13:52.769649 2026] [:error] [pid 43578:tid 43599] [client 20.122.187.158:15842] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acfwMHNG2YdGm41aN8IqXgAAAlI"]
[Sat Mar 28 23:13:53.333012 2026] [:error] [pid 43578:tid 43591] [client 20.122.187.158:15859] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acfwMXNG2YdGm41aN8IqYgAAAko"]
[Sat Mar 28 23:13:53.768974 2026] [:error] [pid 64966:tid 64980] [client 20.122.187.158:16041] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resp.php"] [unique_id "acfwMdfSvF5AFfSuKxVEPgAAAMc"]
[Sat Mar 28 23:13:54.260370 2026] [:error] [pid 43579:tid 43617] [client 20.122.187.158:15975] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acfwMiRqN4JVI8gB7AkInAAAAok"]
[Sat Mar 28 23:13:54.726281 2026] [:error] [pid 64861:tid 64953] [client 20.122.187.158:15836] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acfwMuxK22_lUN2kvnWqxwAAAJI"]
[Sat Mar 28 23:13:55.666765 2026] [:error] [pid 43578:tid 43596] [client 20.122.187.158:15809] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acfwM3NG2YdGm41aN8IqaQAAAk8"]
[Sat Mar 28 23:13:56.078510 2026] [:error] [pid 43578:tid 43602] [client 20.122.187.158:15857] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lanou.php"] [unique_id "acfwNHNG2YdGm41aN8IqbAAAAlU"]
[Sat Mar 28 23:13:56.513604 2026] [:error] [pid 43578:tid 43585] [client 20.122.187.158:15905] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acfwNHNG2YdGm41aN8IqbwAAAkQ"]
[Sat Mar 28 23:13:57.003430 2026] [:error] [pid 2877:tid 2903] [client 20.122.187.158:15748] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acfwNbgM4xL1Xj409YQbeAAAARg"]
[Sat Mar 28 23:13:57.433033 2026] [:error] [pid 43578:tid 43581] [client 20.122.187.158:15854] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acfwNXNG2YdGm41aN8IqeAAAAkA"]
[Sat Mar 28 23:13:57.923302 2026] [:error] [pid 64859:tid 64897] [client 20.122.187.158:16039] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "acfwNW3qEBHXq3rHdBlyYQAAABA"]
[Sat Mar 28 23:13:58.333034 2026] [:error] [pid 43547:tid 43555] [client 20.122.187.158:15961] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acfwNj4ZEfdetXP-9aAM-QAAAgY"]
[Sat Mar 28 23:13:58.872178 2026] [:error] [pid 64859:tid 64905] [client 20.122.187.158:15915] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acfwNm3qEBHXq3rHdBlyZAAAABg"]
[Sat Mar 28 23:13:59.311474 2026] [:error] [pid 64861:tid 64948] [client 20.122.187.158:15901] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acfwN-xK22_lUN2kvnWqyAAAAI0"]
[Sat Mar 28 23:13:59.736808 2026] [:error] [pid 64861:tid 64938] [client 20.122.187.158:15898] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pas2.php"] [unique_id "acfwN-xK22_lUN2kvnWqyQAAAIM"]
[Sat Mar 28 23:14:00.174949 2026] [:error] [pid 64860:tid 64914] [client 20.122.187.158:15962] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acfwOBkU3N0pg_4aEL-2wQAAAEY"]
[Sat Mar 28 23:14:00.609811 2026] [:error] [pid 2877:tid 2895] [client 20.122.187.158:15900] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acfwOLgM4xL1Xj409YQbewAAARA"]
[Sat Mar 28 23:14:01.065315 2026] [:error] [pid 43547:tid 43568] [client 20.122.187.158:15820] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acfwOT4ZEfdetXP-9aAM-gAAAhM"]
[Sat Mar 28 23:14:01.512043 2026] [:error] [pid 64860:tid 64926] [client 20.122.187.158:15930] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/schal.php"] [unique_id "acfwORkU3N0pg_4aEL-2wwAAAFI"]
[Sat Mar 28 23:14:01.985995 2026] [:error] [pid 43578:tid 43585] [client 20.122.187.158:15832] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acfwOXNG2YdGm41aN8IqgQAAAkQ"]
[Sat Mar 28 23:14:02.441746 2026] [:error] [pid 64860:tid 64912] [client 20.122.187.158:16057] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acfwOhkU3N0pg_4aEL-2xAAAAEQ"]
[Sat Mar 28 23:14:03.106527 2026] [:error] [pid 43579:tid 43610] [client 20.122.187.158:15932] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acfwOyRqN4JVI8gB7AkIogAAAoI"]
[Sat Mar 28 23:14:03.547040 2026] [:error] [pid 64860:tid 64924] [client 20.122.187.158:15839] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xex.php"] [unique_id "acfwOxkU3N0pg_4aEL-2yAAAAFA"]
[Sat Mar 28 23:14:03.983000 2026] [:error] [pid 64860:tid 64932] [client 20.122.187.158:15819] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acfwOxkU3N0pg_4aEL-2ywAAAFg"]
[Sat Mar 28 23:14:04.395093 2026] [:error] [pid 64861:tid 64952] [client 20.122.187.158:15960] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acfwPOxK22_lUN2kvnWq1AAAAJE"]
[Sat Mar 28 23:14:04.794035 2026] [:error] [pid 64861:tid 64951] [client 20.122.187.158:15812] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acfwPOxK22_lUN2kvnWq1gAAAJA"]
[Sat Mar 28 23:14:05.322040 2026] [:error] [pid 64861:tid 64947] [client 20.122.187.158:15821] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acfwPexK22_lUN2kvnWq2AAAAIw"]
[Sat Mar 28 23:14:05.775567 2026] [:error] [pid 64859:tid 64896] [client 20.122.187.158:15851] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acfwPW3qEBHXq3rHdBlyaQAAAA8"]
[Sat Mar 28 23:14:06.219496 2026] [:error] [pid 34631:tid 34660] [client 20.122.187.158:15897] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acfwPjtzjMMS6kojpeR8WAAAAcA"]
[Sat Mar 28 23:14:06.686150 2026] [:error] [pid 43578:tid 43585] [client 20.122.187.158:15815] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acfwPnNG2YdGm41aN8IqhwAAAkQ"]
[Sat Mar 28 23:14:07.098888 2026] [:error] [pid 43547:tid 43565] [client 20.122.187.158:15806] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acfwPz4ZEfdetXP-9aAM_wAAAhA"]
[Sat Mar 28 23:14:07.518543 2026] [:error] [pid 43578:tid 43588] [client 20.122.187.158:15772] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acfwP3NG2YdGm41aN8IqiQAAAkc"]
[Sat Mar 28 23:14:07.980741 2026] [:error] [pid 2877:tid 2899] [client 20.122.187.158:15904] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acfwP7gM4xL1Xj409YQbfwAAARQ"]
[Sat Mar 28 23:14:08.409421 2026] [:error] [pid 43578:tid 43589] [client 20.122.187.158:15846] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acfwQHNG2YdGm41aN8IqigAAAkg"]
[Sat Mar 28 23:14:08.870013 2026] [:error] [pid 64860:tid 64927] [client 20.122.187.158:15837] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtyh.php"] [unique_id "acfwQBkU3N0pg_4aEL-20QAAAFM"]
[Sat Mar 28 23:14:09.340188 2026] [:error] [pid 34631:tid 34671] [client 20.122.187.158:15924] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acfwQTtzjMMS6kojpeR8XAAAAcs"]
[Sat Mar 28 23:14:09.793950 2026] [:error] [pid 64859:tid 64888] [client 20.122.187.158:15811] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acfwQW3qEBHXq3rHdBlybwAAAAc"]
[Sat Mar 28 23:14:10.298656 2026] [:error] [pid 34631:tid 34681] [client 20.122.187.158:15991] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acfwQjtzjMMS6kojpeR8XwAAAdU"]
[Sat Mar 28 23:14:10.754719 2026] [:error] [pid 2877:tid 2886] [client 20.122.187.158:15814] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wta.php"] [unique_id "acfwQrgM4xL1Xj409YQbgQAAAQc"]
[Sat Mar 28 23:14:11.197943 2026] [:error] [pid 64861:tid 64949] [client 20.122.187.158:15833] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acfwQ-xK22_lUN2kvnWq4wAAAI4"]
[Sat Mar 28 23:14:11.645094 2026] [:error] [pid 43578:tid 43594] [client 20.122.187.158:15844] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acfwQ3NG2YdGm41aN8IqkAAAAk0"]
[Sat Mar 28 23:14:12.119061 2026] [:error] [pid 64860:tid 64923] [client 20.122.187.158:15927] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acfwRBkU3N0pg_4aEL-21AAAAE8"]
[Sat Mar 28 23:14:12.593805 2026] [:error] [pid 64859:tid 64887] [client 20.122.187.158:15929] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "acfwRG3qEBHXq3rHdBlycQAAAAY"]
[Sat Mar 28 23:14:13.014465 2026] [:error] [pid 64860:tid 64914] [client 20.122.187.158:15791] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acfwRRkU3N0pg_4aEL-21gAAAEY"]
[Sat Mar 28 23:14:13.514312 2026] [:error] [pid 64860:tid 64932] [client 20.122.187.158:15763] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acfwRRkU3N0pg_4aEL-22AAAAFg"]
[Sat Mar 28 23:14:14.094771 2026] [:error] [pid 64859:tid 64897] [client 20.122.187.158:15824] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acfwRm3qEBHXq3rHdBlydgAAABA"]
[Sat Mar 28 23:14:14.587124 2026] [:error] [pid 64861:tid 64948] [client 20.122.187.158:15918] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "acfwRuxK22_lUN2kvnWq5wAAAI0"]
[Sat Mar 28 23:14:15.039839 2026] [:error] [pid 64861:tid 64958] [client 20.122.187.158:15843] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acfwR-xK22_lUN2kvnWq6AAAAJc"]
[Sat Mar 28 23:14:15.472435 2026] [:error] [pid 34631:tid 34666] [client 20.122.187.158:15848] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acfwRztzjMMS6kojpeR8ZwAAAcY"]
[Sat Mar 28 23:14:15.909127 2026] [:error] [pid 34631:tid 34671] [client 20.122.187.158:15841] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acfwRztzjMMS6kojpeR8awAAAcs"]
[Sat Mar 28 23:14:16.363139 2026] [:error] [pid 43578:tid 43590] [client 20.122.187.158:15868] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "acfwSHNG2YdGm41aN8IqmAAAAkk"]
[Sat Mar 28 23:14:16.813113 2026] [:error] [pid 43578:tid 43603] [client 20.122.187.158:15995] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acfwSHNG2YdGm41aN8IqmQAAAlY"]
[Sat Mar 28 23:14:17.330874 2026] [:error] [pid 43578:tid 43604] [client 20.122.187.158:15840] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acfwSXNG2YdGm41aN8IqnAAAAlc"]
[Sat Mar 28 23:14:17.794671 2026] [:error] [pid 43578:tid 43605] [client 20.122.187.158:15825] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acfwSXNG2YdGm41aN8IqoAAAAlg"]
[Sat Mar 28 23:14:18.198390 2026] [:error] [pid 64861:tid 64940] [client 20.122.187.158:15790] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acfwSuxK22_lUN2kvnWq7wAAAIU"]
[Sat Mar 28 23:14:18.644489 2026] [:error] [pid 64859:tid 64899] [client 20.122.187.158:15810] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acfwSm3qEBHXq3rHdBlyfwAAABI"]
[Sat Mar 28 23:14:19.086639 2026] [:error] [pid 43547:tid 43555] [client 20.122.187.158:15802] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acfwSz4ZEfdetXP-9aANBAAAAgY"]
[Sat Mar 28 23:14:19.507552 2026] [:error] [pid 2877:tid 2891] [client 20.122.187.158:15847] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acfwS7gM4xL1Xj409YQbgwAAAQw"]
[Sat Mar 28 23:14:19.964201 2026] [:error] [pid 34597:tid 34607] [client 20.122.187.158:15831] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acfwS4luI7-e5s1cafexIwAAAUY"]
[Sat Mar 28 23:14:20.389849 2026] [:error] [pid 43579:tid 43608] [client 20.122.187.158:16008] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acfwTCRqN4JVI8gB7AkIqAAAAoA"]
[Sat Mar 28 23:14:20.839508 2026] [:error] [pid 64859:tid 64904] [client 20.122.187.158:15834] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acfwTG3qEBHXq3rHdBlyhQAAABc"]
[Sat Mar 28 23:14:21.322413 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:15853] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acfwTXNG2YdGm41aN8IqpwAAAks"]
[Sat Mar 28 23:14:21.758745 2026] [:error] [pid 43578:tid 43585] [client 20.122.187.158:15899] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "acfwTXNG2YdGm41aN8IqqgAAAkQ"]
[Sat Mar 28 23:14:22.173510 2026] [:error] [pid 43578:tid 43587] [client 20.122.187.158:15830] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acfwTnNG2YdGm41aN8IqrwAAAkY"]
[Sat Mar 28 23:14:22.587456 2026] [:error] [pid 43579:tid 43609] [client 20.122.187.158:15895] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acfwTiRqN4JVI8gB7AkIqgAAAoE"]
[Sat Mar 28 23:14:23.025861 2026] [:error] [pid 64859:tid 64898] [client 20.122.187.158:15936] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acfwT23qEBHXq3rHdBlyiwAAABE"]
[Sat Mar 28 23:14:23.477078 2026] [:error] [pid 43547:tid 43556] [client 20.122.187.158:15681] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "acfwTz4ZEfdetXP-9aANCgAAAgc"]
[Sat Mar 28 23:14:23.879786 2026] [:error] [pid 34597:tid 34604] [client 20.122.187.158:15911] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acfwT4luI7-e5s1cafexJgAAAUM"]
[Sat Mar 28 23:14:24.392836 2026] [:error] [pid 34631:tid 34660] [client 20.122.187.158:15922] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acfwUDtzjMMS6kojpeR8bgAAAcA"]
[Sat Mar 28 23:14:24.835671 2026] [:error] [pid 34631:tid 34663] [client 20.122.187.158:15838] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acfwUDtzjMMS6kojpeR8dAAAAcM"]
[Sat Mar 28 23:14:25.261608 2026] [:error] [pid 64861:tid 64947] [client 20.122.187.158:15856] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bywaf.php"] [unique_id "acfwUexK22_lUN2kvnWq9AAAAIw"]
[Sat Mar 28 23:14:25.723739 2026] [:error] [pid 34631:tid 34677] [client 20.122.187.158:15921] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "acfwUTtzjMMS6kojpeR8eAAAAdE"]
[Sat Mar 28 23:14:26.166681 2026] [:error] [pid 64861:tid 64958] [client 20.122.187.158:15801] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "acfwUuxK22_lUN2kvnWq9gAAAJc"]
[Sat Mar 28 23:14:26.614019 2026] [:error] [pid 43547:tid 43566] [client 20.122.187.158:15925] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "acfwUj4ZEfdetXP-9aANDQAAAhE"]
[Sat Mar 28 23:14:27.054310 2026] [:error] [pid 64966:tid 64973] [client 20.122.187.158:15792] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "acfwU9fSvF5AFfSuKxVERQAAAMA"]
[Sat Mar 28 23:14:27.535582 2026] [:error] [pid 43547:tid 43570] [client 20.122.187.158:15762] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "acfwUz4ZEfdetXP-9aANDwAAAhU"]
[Sat Mar 28 23:14:27.960536 2026] [:error] [pid 64859:tid 64903] [client 20.122.187.158:15912] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "acfwU23qEBHXq3rHdBlylAAAABY"]
[Sat Mar 28 23:14:28.404177 2026] [:error] [pid 64859:tid 64886] [client 20.122.187.158:15798] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "acfwVG3qEBHXq3rHdBlymAAAAAU"]
[Sat Mar 28 23:14:28.825210 2026] [:error] [pid 64859:tid 64891] [client 20.122.187.158:15767] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp8.php"] [unique_id "acfwVG3qEBHXq3rHdBlynAAAAAo"]
[Sat Mar 28 23:14:29.241291 2026] [:error] [pid 43579:tid 43611] [client 20.122.187.158:15727] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx88.php"] [unique_id "acfwVSRqN4JVI8gB7AkIrQAAAoM"]
[Sat Mar 28 23:14:29.668784 2026] [:error] [pid 43578:tid 43605] [client 20.122.187.158:15849] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx88.php"] [unique_id "acfwVXNG2YdGm41aN8IqswAAAlg"]
[Sat Mar 28 23:14:30.133272 2026] [:error] [pid 2877:tid 2901] [client 20.122.187.158:15881] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx88.php"] [unique_id "acfwVrgM4xL1Xj409YQbiwAAARY"]
[Sat Mar 28 23:14:30.695607 2026] [:error] [pid 43578:tid 43594] [client 20.122.187.158:15855] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx88.php"] [unique_id "acfwVnNG2YdGm41aN8IqtwAAAk0"]
[Sat Mar 28 23:14:31.211934 2026] [:error] [pid 43578:tid 43586] [client 20.122.187.158:15745] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "acfwV3NG2YdGm41aN8IquQAAAkU"]
[Sat Mar 28 23:14:31.618959 2026] [:error] [pid 64861:tid 64938] [client 20.122.187.158:15749] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "acfwV-xK22_lUN2kvnWq-wAAAIM"]
[Sat Mar 28 23:14:32.066826 2026] [:error] [pid 64859:tid 64894] [client 20.122.187.158:15756] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "acfwWG3qEBHXq3rHdBlynwAAAA0"]
[Sat Mar 28 23:14:32.507761 2026] [:error] [pid 43579:tid 43614] [client 20.122.187.158:15800] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "acfwWCRqN4JVI8gB7AkIswAAAoY"]
[Sat Mar 28 23:14:32.953015 2026] [:error] [pid 64861:tid 64935] [client 20.122.187.158:15753] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "acfwWOxK22_lUN2kvnWq_wAAAIA"]
[Sat Mar 28 23:14:33.403049 2026] [:error] [pid 43578:tid 43605] [client 20.122.187.158:15765] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "acfwWXNG2YdGm41aN8IqwwAAAlg"]
[Sat Mar 28 23:14:33.820093 2026] [:error] [pid 34597:tid 34606] [client 20.122.187.158:15796] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "acfwWYluI7-e5s1cafexLwAAAUU"]
[Sat Mar 28 23:14:36.966332 2026] [:error] [pid 64966:tid 64983] [client 20.122.187.158:15787] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/max.php"] [unique_id "acfwXNfSvF5AFfSuKxVESQAAAMo"]
[Sat Mar 28 23:14:37.515930 2026] [:error] [pid 64861:tid 64945] [client 20.122.187.158:15860] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acfwXexK22_lUN2kvnWrDQAAAIo"]
[Sat Mar 28 23:14:37.936201 2026] [:error] [pid 43578:tid 43592] [client 20.122.187.158:15750] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acfwXXNG2YdGm41aN8IqyQAAAks"]
[Sat Mar 28 23:14:38.355661 2026] [:error] [pid 43578:tid 43595] [client 20.122.187.158:15850] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acfwXnNG2YdGm41aN8IqzgAAAk4"]
[Sat Mar 28 23:14:38.824624 2026] [:error] [pid 2877:tid 2902] [client 20.122.187.158:15893] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "acfwXrgM4xL1Xj409YQbjAAAARc"]
[Sat Mar 28 23:14:39.289672 2026] [:error] [pid 34631:tid 34672] [client 20.122.187.158:15682] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utky.php"] [unique_id "acfwXztzjMMS6kojpeR8ewAAAcw"]
[Sat Mar 28 23:14:39.741704 2026] [:error] [pid 34631:tid 34667] [client 20.122.187.158:15706] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utky.php"] [unique_id "acfwXztzjMMS6kojpeR8fwAAAcc"]
[Sat Mar 28 23:14:40.417954 2026] [:error] [pid 43578:tid 43602] [client 20.122.187.158:15783] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utky.php"] [unique_id "acfwYHNG2YdGm41aN8Iq1gAAAlU"]
[Sat Mar 28 23:14:40.873332 2026] [:error] [pid 34631:tid 34682] [client 20.122.187.158:15794] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utky.php"] [unique_id "acfwYDtzjMMS6kojpeR8gQAAAdY"]
[Sat Mar 28 23:14:41.362359 2026] [:error] [pid 64860:tid 64913] [client 20.122.187.158:15934] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "acfwYRkU3N0pg_4aEL-28QAAAEU"]
[Sat Mar 28 23:14:41.854344 2026] [:error] [pid 34631:tid 34673] [client 20.122.187.158:15777] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "acfwYTtzjMMS6kojpeR8hwAAAc0"]
[Sat Mar 28 23:14:42.322534 2026] [:error] [pid 64860:tid 64932] [client 20.122.187.158:15766] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "acfwYhkU3N0pg_4aEL-29AAAAFg"]
[Sat Mar 28 23:14:42.883554 2026] [:error] [pid 34631:tid 34676] [client 20.122.187.158:15835] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "acfwYjtzjMMS6kojpeR8iwAAAdA"]
[Sat Mar 28 23:14:43.437600 2026] [:error] [pid 34631:tid 34678] [client 20.122.187.158:15708] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp3.php"] [unique_id "acfwYztzjMMS6kojpeR8jgAAAdI"]
[Sat Mar 28 23:14:43.898725 2026] [:error] [pid 64860:tid 64925] [client 20.122.187.158:15879] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp3.php"] [unique_id "acfwYxkU3N0pg_4aEL-2-QAAAFE"]
[Sat Mar 28 23:14:44.442815 2026] [:error] [pid 34631:tid 34662] [client 20.122.187.158:15788] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp3.php"] [unique_id "acfwZDtzjMMS6kojpeR8kwAAAcI"]
[Sat Mar 28 23:14:44.909528 2026] [:error] [pid 64860:tid 64928] [client 20.122.187.158:15864] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp3.php"] [unique_id "acfwZBkU3N0pg_4aEL-2_wAAAFQ"]
[Sat Mar 28 23:14:45.389815 2026] [:error] [pid 43547:tid 43570] [client 20.122.187.158:15828] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acfwZT4ZEfdetXP-9aANFQAAAhU"]
[Sat Mar 28 23:14:45.914272 2026] [:error] [pid 43578:tid 43600] [client 20.122.187.158:15906] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acfwZXNG2YdGm41aN8Iq2wAAAlM"]
[Sat Mar 28 23:14:46.360623 2026] [:error] [pid 34597:tid 34601] [client 20.122.187.158:15744] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acfwZoluI7-e5s1cafexPwAAAUA"]
[Sat Mar 28 23:14:47.074723 2026] [:error] [pid 43547:tid 43562] [client 20.122.187.158:15869] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "acfwZz4ZEfdetXP-9aANFwAAAg0"]
[Sat Mar 28 23:14:47.560088 2026] [:error] [pid 43578:tid 43593] [client 20.122.187.158:15852] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acfwZ3NG2YdGm41aN8Iq4gAAAkw"]
[Sat Mar 28 23:14:48.016141 2026] [:error] [pid 64861:tid 64945] [client 20.122.187.158:15715] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acfwaOxK22_lUN2kvnWrEgAAAIo"]
[Sat Mar 28 23:14:48.523162 2026] [:error] [pid 64861:tid 64944] [client 20.122.187.158:15759] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acfwaOxK22_lUN2kvnWrFQAAAIk"]
[Sat Mar 28 23:14:48.987191 2026] [:error] [pid 43578:tid 43589] [client 20.122.187.158:15877] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acfwaHNG2YdGm41aN8Iq7QAAAkg"]
[Sat Mar 28 23:14:49.425058 2026] [:error] [pid 43578:tid 43603] [client 20.122.187.158:15769] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ticket.php"] [unique_id "acfwaXNG2YdGm41aN8Iq8AAAAlY"]
[Sat Mar 28 23:14:49.910649 2026] [:error] [pid 43578:tid 43598] [client 20.122.187.158:15867] [client 20.122.187.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ticket.php"] [unique_id "acfwaXNG2YdGm41aN8Iq9AAAAlE"]
[Sat Mar 28 23:14:50.433382 2026] [:error] [pid 43578:tid 43582] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/ticket.php
[Sat Mar 28 23:14:50.641136 2026] [:error] [pid 43578:tid 43599] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sat Mar 28 23:14:50.844723 2026] [:error] [pid 43578:tid 43581] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/xpwer1.php
[Sat Mar 28 23:14:51.047947 2026] [:error] [pid 43578:tid 43583] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat Mar 28 23:14:51.259053 2026] [:error] [pid 43578:tid 43597] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Sat Mar 28 23:14:51.524106 2026] [:error] [pid 43578:tid 43605] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/xpass.php
[Sat Mar 28 23:14:51.767915 2026] [:error] [pid 43578:tid 43589] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Sat Mar 28 23:14:51.988917 2026] [:error] [pid 43578:tid 43588] [client 20.122.187.158:15720] File does not exist: /usr/local/apache/htdocs/suspended-page/h02ugyh.php
[Sat Mar 28 23:36:41.633502 2026] [:error] [pid 64861:tid 64953] [client 45.94.31.49:53461] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acf1iexK22_lUN2kvnWz3gAAAJI"]
[Sat Mar 28 23:36:42.363601 2026] [:error] [pid 64966:tid 64980] [client 45.94.31.49:51553] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acf1itfSvF5AFfSuKxVGygAAAMc"]
[Sat Mar 28 23:36:43.239962 2026] [:error] [pid 2877:tid 2902] [client 45.94.31.49:64116] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acf1i7gM4xL1Xj409YQdpAAAARc"]
[Sat Mar 28 23:36:44.010911 2026] [:error] [pid 34631:tid 34671] [client 45.94.31.49:55206] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acf1jDtzjMMS6kojpeSEgAAAAcs"]
[Sat Mar 28 23:36:44.865896 2026] [:error] [pid 64860:tid 64931] [client 45.94.31.49:55206] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acf1jBkU3N0pg_4aEL-73gAAAFc"]
[Sun Mar 29 02:06:52.161182 2026] [:error] [pid 60346:tid 60374] [client 124.156.225.181:58818] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acgYvHVrXSgLxlxLi9Az8gAAARc"]
[Sun Mar 29 05:34:49.445252 2026] [:error] [pid 32359:tid 32382] [client 106.54.62.156:47850] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "achJeQMb8G3UzfQP3WjTwAAAANU"]
[Sun Mar 29 06:44:42.971378 2026] [:error] [pid 1524:tid 1531] [client 185.223.152.254:21379] [client 185.223.152.254] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "achZ2loaWSl2asqQCh8pTgAAAQM"]
[Sun Mar 29 07:23:04.905704 2026] [:error] [pid 23284:tid 23296] [client 43.165.65.180:40654] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "achi2IzBujdPHsq7wyRcpAAAAoo"]
[Sun Mar 29 08:51:43.029981 2026] [:error] [pid 32255:tid 32303] [client 45.94.31.49:62722] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ach3n2nfn-AtRoMbquyRJAAAAEw"]
[Sun Mar 29 08:51:43.512859 2026] [:error] [pid 32257:tid 32326] [client 45.94.31.49:50016] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ach3nyE3TArOFrUtgWpj3AAAAIg"]
[Sun Mar 29 08:51:44.004820 2026] [:error] [pid 23250:tid 23263] [client 45.94.31.49:53498] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ach3oJxrpj-dQjy1cvpf7QAAAks"]
[Sun Mar 29 08:51:44.493899 2026] [:error] [pid 23250:tid 23268] [client 45.94.31.49:61021] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ach3oJxrpj-dQjy1cvpgDwAAAlA"]
[Sun Mar 29 08:51:44.983177 2026] [:error] [pid 23168:tid 23218] [client 45.94.31.49:64860] [client 45.94.31.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ach3oGP8p0yRL8ot_28RfAAAAhU"]
[Sun Mar 29 10:17:55.803880 2026] [:error] [pid 1524:tid 1544] [client 43.153.73.200:37986] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aciL01oaWSl2asqQCh8-ewAAAQ0"]
[Sun Mar 29 12:27:07.963429 2026] [:error] [pid 23167:tid 23186] [client 223.15.245.170:50627] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aciqGxIAHJCFaHff3_f1CgAAAdA"]
[Sun Mar 29 14:31:54.864299 2026] [:error] [pid 23168:tid 23202] [client 43.153.113.127:53946] [client 43.153.113.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acjHWmP8p0yRL8ot_2899gAAAgU"]
[Sun Mar 29 17:19:45.596184 2026] [:error] [pid 32255:tid 32309] [client 74.248.20.136:64415] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun Mar 29 17:19:46.966576 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:64415] [client 74.248.20.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acjusmnfn-AtRoMbquxsoAAAAFE"]
[Sun Mar 29 17:19:47.619649 2026] [:error] [pid 23250:tid 23271] [client 74.248.20.136:64355] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Sun Mar 29 17:19:47.887416 2026] [:error] [pid 23250:tid 23275] [client 74.248.20.136:64355] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun Mar 29 17:19:48.167541 2026] [:error] [pid 23250:tid 23268] [client 74.248.20.136:64355] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sun Mar 29 17:19:48.456940 2026] [:error] [pid 23250:tid 23265] [client 74.248.20.136:64355] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Mar 29 17:19:48.738857 2026] [:error] [pid 23250:tid 23270] [client 74.248.20.136:64355] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Sun Mar 29 17:19:49.074552 2026] [:error] [pid 23250:tid 23273] [client 74.248.20.136:64355] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acjutZxrpj-dQjy1cvrPcgAAAlU"]
[Sun Mar 29 17:19:50.073666 2026] [:error] [pid 32255:tid 32306] [client 74.248.20.136:65164] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acjutmnfn-AtRoMbquxsqQAAAE8"]
[Sun Mar 29 17:19:50.791925 2026] [:error] [pid 23167:tid 23175] [client 74.248.20.136:64176] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acjuthIAHJCFaHff3_dthQAAAcU"]
[Sun Mar 29 17:19:51.402992 2026] [:error] [pid 32255:tid 32301] [client 74.248.20.136:65420] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acjut2nfn-AtRoMbquxsrwAAAEo"]
[Sun Mar 29 17:19:52.288686 2026] [:error] [pid 32255:tid 32313] [client 74.248.20.136:64602] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuuGnfn-AtRoMbquxstAAAAFY"]
[Sun Mar 29 17:19:52.956619 2026] [:error] [pid 32255:tid 32312] [client 74.248.20.136:64582] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuuGnfn-AtRoMbquxsuQAAAFU"]
[Sun Mar 29 17:19:54.237722 2026] [:error] [pid 23250:tid 23273] [client 74.248.20.136:64389] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuupxrpj-dQjy1cvrPfgAAAlU"]
[Sun Mar 29 17:19:54.820062 2026] [:error] [pid 23284:tid 23298] [client 74.248.20.136:64617] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuuozBujdPHsq7wyQHbQAAAow"]
[Sun Mar 29 17:19:55.525265 2026] [:error] [pid 23167:tid 23173] [client 74.248.20.136:65166] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuuxIAHJCFaHff3_dtmQAAAcM"]
[Sun Mar 29 17:19:56.171251 2026] [:error] [pid 23250:tid 23270] [client 74.248.20.136:64590] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuvJxrpj-dQjy1cvrPiAAAAlI"]
[Sun Mar 29 17:19:56.879833 2026] [:error] [pid 23168:tid 23221] [client 74.248.20.136:65388] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuvGP8p0yRL8ot_29UkgAAAhg"]
[Sun Mar 29 17:19:57.426896 2026] [:error] [pid 23167:tid 23171] [client 74.248.20.136:64147] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acjuvRIAHJCFaHff3_dtoQAAAcE"]
[Sun Mar 29 17:19:58.140037 2026] [:error] [pid 23250:tid 23268] [client 74.248.20.136:65418] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuvpxrpj-dQjy1cvrPkwAAAlA"]
[Sun Mar 29 17:19:59.073663 2026] [:error] [pid 23168:tid 23204] [client 74.248.20.136:64424] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuv2P8p0yRL8ot_29UlAAAAgc"]
[Sun Mar 29 17:19:59.866933 2026] [:error] [pid 23167:tid 23188] [client 74.248.20.136:64104] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuvxIAHJCFaHff3_dtrAAAAdI"]
[Sun Mar 29 17:20:01.166367 2026] [:error] [pid 32255:tid 32291] [client 74.248.20.136:64124] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuwWnfn-AtRoMbquxs1AAAAEA"]
[Sun Mar 29 17:20:01.990406 2026] [:error] [pid 23284:tid 23309] [client 74.248.20.136:64402] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuwYzBujdPHsq7wyQHewAAApc"]
[Sun Mar 29 17:20:03.563159 2026] [:error] [pid 32255:tid 32297] [client 74.248.20.136:64072] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuw2nfn-AtRoMbquxs3AAAAEY"]
[Sun Mar 29 17:20:04.481109 2026] [:error] [pid 32359:tid 32366] [client 74.248.20.136:64872] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuxAMb8G3UzfQP3WgQQQAAAMU"]
[Sun Mar 29 17:20:05.562710 2026] [:error] [pid 32255:tid 32292] [client 74.248.20.136:64862] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acjuxWnfn-AtRoMbquxs4wAAAEE"]
[Sun Mar 29 17:20:06.320860 2026] [:error] [pid 32255:tid 32298] [client 74.248.20.136:64638] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acjuxmnfn-AtRoMbquxs6QAAAEc"]
[Sun Mar 29 17:20:06.872657 2026] [:error] [pid 23167:tid 23172] [client 74.248.20.136:64654] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acjuxhIAHJCFaHff3_dtwgAAAcI"]
[Sun Mar 29 17:20:07.821662 2026] [:error] [pid 32255:tid 32297] [client 74.248.20.136:65186] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acjux2nfn-AtRoMbquxs-AAAAEY"]
[Sun Mar 29 17:20:09.686012 2026] [:error] [pid 23167:tid 23192] [client 74.248.20.136:64894] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acjuyRIAHJCFaHff3_dtyQAAAdY"]
[Sun Mar 29 17:20:10.918575 2026] [:error] [pid 32255:tid 32291] [client 74.248.20.136:65162] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acjuymnfn-AtRoMbquxtDgAAAEA"]
[Sun Mar 29 17:20:11.907496 2026] [:error] [pid 32255:tid 32299] [client 74.248.20.136:64333] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acjuy2nfn-AtRoMbquxtFQAAAEg"]
[Sun Mar 29 17:20:12.576390 2026] [:error] [pid 23167:tid 23182] [client 74.248.20.136:64368] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acjuzBIAHJCFaHff3_dt0AAAAcw"]
[Sun Mar 29 17:20:13.186552 2026] [:error] [pid 32254:tid 32286] [client 74.248.20.136:64186] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acjuzaug2IHuyGgCTn9ELgAAABY"]
[Sun Mar 29 17:20:15.099106 2026] [:error] [pid 23284:tid 23292] [client 74.248.20.136:65167] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acjuz4zBujdPHsq7wyQHngAAAoY"]
[Sun Mar 29 17:20:15.961811 2026] [:error] [pid 23137:tid 23141] [client 74.248.20.136:65199] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acjuzxaWQa7LdZ_qGFbVrAAAAYI"]
[Sun Mar 29 17:20:16.874251 2026] [:error] [pid 32359:tid 32381] [client 74.248.20.136:64334] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acju0AMb8G3UzfQP3WgQQwAAANQ"]
[Sun Mar 29 17:20:18.608117 2026] [:error] [pid 32257:tid 32318] [client 74.248.20.136:65203] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acju0iE3TArOFrUtgWq26gAAAIA"]
[Sun Mar 29 17:20:19.922293 2026] [:error] [pid 32257:tid 32332] [client 74.248.20.136:64925] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acju0yE3TArOFrUtgWq28QAAAI4"]
[Sun Mar 29 17:20:20.863189 2026] [:error] [pid 23168:tid 23211] [client 74.248.20.136:64381] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acju1GP8p0yRL8ot_29UqwAAAg4"]
[Sun Mar 29 17:20:21.688045 2026] [:error] [pid 23137:tid 23147] [client 74.248.20.136:65360] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acju1RaWQa7LdZ_qGFbVtQAAAYg"]
[Sun Mar 29 17:20:22.524319 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:65353] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acju1mnfn-AtRoMbquxtLAAAAE4"]
[Sun Mar 29 17:20:23.084111 2026] [:error] [pid 32255:tid 32295] [client 74.248.20.136:64643] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "acju12nfn-AtRoMbquxtLQAAAEQ"]
[Sun Mar 29 17:20:24.200537 2026] [:error] [pid 32257:tid 32330] [client 74.248.20.136:65144] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "acju2CE3TArOFrUtgWq3BgAAAIw"]
[Sun Mar 29 17:20:24.912296 2026] [:error] [pid 32257:tid 32326] [client 74.248.20.136:64842] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "acju2CE3TArOFrUtgWq3CQAAAIg"]
[Sun Mar 29 17:20:25.640811 2026] [:error] [pid 23168:tid 23198] [client 74.248.20.136:65465] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "acju2WP8p0yRL8ot_29UrAAAAgE"]
[Sun Mar 29 17:20:26.532964 2026] [:error] [pid 32359:tid 32367] [client 74.248.20.136:64103] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acju2gMb8G3UzfQP3WgQRgAAAMY"]
[Sun Mar 29 17:20:27.190012 2026] [:error] [pid 23167:tid 23185] [client 74.248.20.136:64174] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acju2xIAHJCFaHff3_dt9QAAAc8"]
[Sun Mar 29 17:20:27.924526 2026] [:error] [pid 32254:tid 32284] [client 74.248.20.136:64395] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acju26ug2IHuyGgCTn9EMQAAABQ"]
[Sun Mar 29 17:20:28.584878 2026] [:error] [pid 23167:tid 23192] [client 74.248.20.136:65129] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acju3BIAHJCFaHff3_dt_AAAAdY"]
[Sun Mar 29 17:20:29.307645 2026] [:error] [pid 23167:tid 23182] [client 74.248.20.136:65440] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acju3RIAHJCFaHff3_dt_gAAAcw"]
[Sun Mar 29 17:20:31.154815 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:64933] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acju3xIAHJCFaHff3_duBgAAAdU"]
[Sun Mar 29 17:20:31.843160 2026] [:error] [pid 23168:tid 23217] [client 74.248.20.136:64849] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acju32P8p0yRL8ot_29UswAAAhQ"]
[Sun Mar 29 17:20:32.573738 2026] [:error] [pid 23137:tid 23152] [client 74.248.20.136:64074] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acju4BaWQa7LdZ_qGFbVuwAAAY0"]
[Sun Mar 29 17:20:33.767799 2026] [:error] [pid 23168:tid 23212] [client 74.248.20.136:64852] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-2.php"] [unique_id "acju4WP8p0yRL8ot_29UtgAAAg8"]
[Sun Mar 29 17:20:34.612760 2026] [:error] [pid 23167:tid 23184] [client 74.248.20.136:64861] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-2.php"] [unique_id "acju4hIAHJCFaHff3_duFQAAAc4"]
[Sun Mar 29 17:20:35.315845 2026] [:error] [pid 32359:tid 32377] [client 74.248.20.136:65106] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-2.php"] [unique_id "acju4wMb8G3UzfQP3WgQRwAAANA"]
[Sun Mar 29 17:20:36.314489 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:65429] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-2.php"] [unique_id "acju5Gnfn-AtRoMbquxtTQAAAEs"]
[Sun Mar 29 17:20:37.183522 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:65091] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acju5Wnfn-AtRoMbquxtUAAAAFE"]
[Sun Mar 29 17:20:38.198035 2026] [:error] [pid 32255:tid 32296] [client 74.248.20.136:64426] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acju5mnfn-AtRoMbquxtVgAAAEU"]
[Sun Mar 29 17:20:40.012325 2026] [:error] [pid 32255:tid 32313] [client 74.248.20.136:64382] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acju6Gnfn-AtRoMbquxtXwAAAFY"]
[Sun Mar 29 17:20:41.259743 2026] [:error] [pid 23168:tid 23219] [client 74.248.20.136:64881] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acju6WP8p0yRL8ot_29UvAAAAhY"]
[Sun Mar 29 17:20:42.013732 2026] [:error] [pid 32359:tid 32369] [client 74.248.20.136:65454] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acju6gMb8G3UzfQP3WgQTQAAAMg"]
[Sun Mar 29 17:20:43.170436 2026] [:error] [pid 23284:tid 23306] [client 74.248.20.136:63902] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acju64zBujdPHsq7wyQH8AAAApQ"]
[Sun Mar 29 17:20:43.969169 2026] [:error] [pid 23284:tid 23290] [client 74.248.20.136:64649] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acju64zBujdPHsq7wyQH-QAAAoQ"]
[Sun Mar 29 17:20:44.784727 2026] [:error] [pid 32254:tid 32285] [client 74.248.20.136:64446] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acju7Kug2IHuyGgCTn9EOwAAABU"]
[Sun Mar 29 17:20:47.287170 2026] [:error] [pid 32359:tid 32380] [client 74.248.20.136:65443] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "acju7wMb8G3UzfQP3WgQWQAAANM"]
[Sun Mar 29 17:20:47.822978 2026] [:error] [pid 23250:tid 23254] [client 74.248.20.136:63907] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "acju75xrpj-dQjy1cvrPvAAAAkI"]
[Sun Mar 29 17:20:48.741592 2026] [:error] [pid 32257:tid 32327] [client 74.248.20.136:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Mar 29 17:20:48.999683 2026] [:error] [pid 32257:tid 32325] [client 74.248.20.136:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Mar 29 17:20:49.319799 2026] [:error] [pid 32257:tid 32324] [client 74.248.20.136:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 29 17:20:49.580568 2026] [:error] [pid 32257:tid 32339] [client 74.248.20.136:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 29 17:20:49.885551 2026] [:error] [pid 32257:tid 32321] [client 74.248.20.136:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/output.php
[Sun Mar 29 17:20:50.213783 2026] [:error] [pid 32257:tid 32331] [client 74.248.20.136:64087] File does not exist: /usr/local/apache/htdocs/suspended-page/output.php
[Sun Mar 29 17:20:50.470600 2026] [:error] [pid 32257:tid 32341] [client 74.248.20.136:64087] [client 74.248.20.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acju8iE3TArOFrUtgWq3RAAAAJc"]
[Sun Mar 29 17:20:51.322739 2026] [:error] [pid 23250:tid 23262] [client 74.248.20.136:64115] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Mar 29 17:20:52.131404 2026] [:error] [pid 23250:tid 23275] [client 74.248.20.136:64115] [client 74.248.20.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "acju9Jxrpj-dQjy1cvrP4AAAAlc"]
[Sun Mar 29 17:20:53.215443 2026] [:error] [pid 23284:tid 23309] [client 74.248.20.136:65210] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Mar 29 17:20:53.529221 2026] [:error] [pid 23284:tid 23310] [client 74.248.20.136:65210] [client 74.248.20.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "acju9YzBujdPHsq7wyQIEgAAApg"]
[Sun Mar 29 17:20:55.569966 2026] [:error] [pid 23250:tid 23259] [client 74.248.20.136:64122] [client 74.248.20.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acju95xrpj-dQjy1cvrP8wAAAkc"]
[Sun Mar 29 17:20:56.327860 2026] [:error] [pid 23167:tid 23188] [client 74.248.20.136:64151] File does not exist: /usr/local/apache/htdocs/suspended-page/x0x.php
[Sun Mar 29 17:20:56.665729 2026] [:error] [pid 23167:tid 23179] [client 74.248.20.136:64151] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sun Mar 29 17:20:57.003603 2026] [:error] [pid 23167:tid 23183] [client 74.248.20.136:64151] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "acju-RIAHJCFaHff3_duhgAAAc0"]
[Sun Mar 29 17:20:57.712933 2026] [:error] [pid 23167:tid 23173] [client 74.248.20.136:64591] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "acju-RIAHJCFaHff3_duiAAAAcM"]
[Sun Mar 29 17:20:58.429183 2026] [:error] [pid 23284:tid 23296] [client 74.248.20.136:64152] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "acju-ozBujdPHsq7wyQIIQAAAoo"]
[Sun Mar 29 17:20:59.147870 2026] [:error] [pid 32255:tid 32307] [client 74.248.20.136:64921] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-freya.php"] [unique_id "acju-2nfn-AtRoMbquxtoQAAAFA"]
[Sun Mar 29 17:21:00.931511 2026] [:error] [pid 23167:tid 23180] [client 74.248.20.136:65163] [client 74.248.20.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acju_BIAHJCFaHff3_dujgAAAco"]
[Sun Mar 29 17:21:02.546188 2026] [:error] [pid 23284:tid 23310] [client 74.248.20.136:64139] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "acju_ozBujdPHsq7wyQILwAAApg"]
[Sun Mar 29 17:21:03.873528 2026] [:error] [pid 23284:tid 23298] [client 74.248.20.136:65132] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "acju_4zBujdPHsq7wyQINgAAAow"]
[Sun Mar 29 17:21:05.382444 2026] [:error] [pid 23284:tid 23290] [client 74.248.20.136:64879] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "acjvAYzBujdPHsq7wyQIOgAAAoQ"]
[Sun Mar 29 17:21:06.753667 2026] [:error] [pid 23167:tid 23178] [client 74.248.20.136:64099] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "acjvAhIAHJCFaHff3_dunQAAAcg"]
[Sun Mar 29 17:21:07.531971 2026] [:error] [pid 23250:tid 23262] [client 74.248.20.136:64437] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "acjvA5xrpj-dQjy1cvrQBAAAAko"]
[Sun Mar 29 17:21:08.296688 2026] [:error] [pid 32255:tid 32313] [client 74.248.20.136:64902] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "acjvBGnfn-AtRoMbquxtuwAAAFY"]
[Sun Mar 29 17:21:08.897044 2026] [:error] [pid 32255:tid 32303] [client 74.248.20.136:64615] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "acjvBGnfn-AtRoMbquxtvAAAAEw"]
[Sun Mar 29 17:21:10.146548 2026] [:error] [pid 23284:tid 23288] [client 74.248.20.136:64909] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "acjvBozBujdPHsq7wyQIPgAAAoI"]
[Sun Mar 29 17:21:10.990303 2026] [:error] [pid 23167:tid 23175] [client 74.248.20.136:65365] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "acjvBhIAHJCFaHff3_dupgAAAcU"]
[Sun Mar 29 17:21:12.258430 2026] [:error] [pid 23168:tid 23217] [client 74.248.20.136:64847] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "acjvCGP8p0yRL8ot_29U2gAAAhQ"]
[Sun Mar 29 17:21:12.920895 2026] [:error] [pid 32254:tid 32264] [client 74.248.20.136:65150] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "acjvCKug2IHuyGgCTn9ESwAAAAA"]
[Sun Mar 29 17:21:13.551376 2026] [:error] [pid 32255:tid 32314] [client 74.248.20.136:64180] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7x.php"] [unique_id "acjvCWnfn-AtRoMbquxtyAAAAFc"]
[Sun Mar 29 17:21:14.483143 2026] [:error] [pid 32254:tid 32270] [client 74.248.20.136:64587] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "acjvCqug2IHuyGgCTn9ETAAAAAY"]
[Sun Mar 29 17:21:15.089195 2026] [:error] [pid 32255:tid 32300] [client 74.248.20.136:63881] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "acjvC2nfn-AtRoMbquxt1QAAAEk"]
[Sun Mar 29 17:21:15.970012 2026] [:error] [pid 32359:tid 32376] [client 74.248.20.136:64321] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "acjvCwMb8G3UzfQP3WgQYQAAAM8"]
[Sun Mar 29 17:21:16.758545 2026] [:error] [pid 32255:tid 32310] [client 74.248.20.136:64341] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "acjvDGnfn-AtRoMbquxt4QAAAFM"]
[Sun Mar 29 17:21:17.475589 2026] [:error] [pid 32255:tid 32300] [client 74.248.20.136:64598] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acjvDWnfn-AtRoMbquxt5wAAAEk"]
[Sun Mar 29 17:21:18.573146 2026] [:error] [pid 32254:tid 32283] [client 74.248.20.136:64662] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acjvDqug2IHuyGgCTn9ETQAAABM"]
[Sun Mar 29 17:21:19.333450 2026] [:error] [pid 23284:tid 23297] [client 74.248.20.136:64875] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acjvD4zBujdPHsq7wyQIQwAAAos"]
[Sun Mar 29 17:21:20.098232 2026] [:error] [pid 23167:tid 23186] [client 74.248.20.136:64431] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "acjvEBIAHJCFaHff3_durwAAAdA"]
[Sun Mar 29 17:21:21.690045 2026] [:error] [pid 23284:tid 23310] [client 74.248.20.136:65394] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "acjvEYzBujdPHsq7wyQIRgAAApg"]
[Sun Mar 29 17:21:22.370668 2026] [:error] [pid 23167:tid 23172] [client 74.248.20.136:64611] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "acjvEhIAHJCFaHff3_dutgAAAcI"]
[Sun Mar 29 17:21:23.060205 2026] [:error] [pid 23284:tid 23305] [client 74.248.20.136:64624] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "acjvE4zBujdPHsq7wyQITAAAApM"]
[Sun Mar 29 17:21:23.642774 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:64127] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "acjvExIAHJCFaHff3_duugAAAdE"]
[Sun Mar 29 17:21:24.459164 2026] [:error] [pid 23167:tid 23186] [client 74.248.20.136:65463] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acjvFBIAHJCFaHff3_duwgAAAdA"]
[Sun Mar 29 17:21:24.992369 2026] [:error] [pid 1524:tid 1556] [client 74.248.20.136:65358] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acjvFFoaWSl2asqQCh9p_QAAARg"]
[Sun Mar 29 17:21:25.682158 2026] [:error] [pid 23168:tid 23200] [client 74.248.20.136:65196] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acjvFWP8p0yRL8ot_29U8QAAAgM"]
[Sun Mar 29 17:21:26.591354 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:65468] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "acjvFhIAHJCFaHff3_duxwAAAdE"]
[Sun Mar 29 17:21:27.419257 2026] [:error] [pid 23137:tid 23147] [client 74.248.20.136:64428] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "acjvFxaWQa7LdZ_qGFbV1gAAAYg"]
[Sun Mar 29 17:21:28.120593 2026] [:error] [pid 23168:tid 23217] [client 74.248.20.136:63483] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "acjvGGP8p0yRL8ot_29U9AAAAhQ"]
[Sun Mar 29 17:21:28.708642 2026] [:error] [pid 32359:tid 32364] [client 74.248.20.136:64956] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "acjvGAMb8G3UzfQP3WgQaQAAAMM"]
[Sun Mar 29 17:21:29.520102 2026] [:error] [pid 23168:tid 23199] [client 74.248.20.136:64388] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "acjvGWP8p0yRL8ot_29U9gAAAgI"]
[Sun Mar 29 17:21:30.510102 2026] [:error] [pid 23167:tid 23182] [client 74.248.20.136:64178] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acjvGhIAHJCFaHff3_du1gAAAcw"]
[Sun Mar 29 17:21:32.539158 2026] [:error] [pid 23167:tid 23174] [client 74.248.20.136:65169] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acjvHBIAHJCFaHff3_du2wAAAcQ"]
[Sun Mar 29 17:21:33.368847 2026] [:error] [pid 1524:tid 1528] [client 74.248.20.136:63909] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acjvHVoaWSl2asqQCh9qDAAAAQE"]
[Sun Mar 29 17:21:34.142576 2026] [:error] [pid 1524:tid 1544] [client 74.248.20.136:64360] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acjvHloaWSl2asqQCh9qEAAAAQ0"]
[Sun Mar 29 17:21:34.684073 2026] [:error] [pid 23284:tid 23298] [client 74.248.20.136:65194] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "acjvHozBujdPHsq7wyQIZAAAAow"]
[Sun Mar 29 17:21:35.293327 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:64403] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "acjvHxIAHJCFaHff3_du6AAAAdU"]
[Sun Mar 29 17:21:36.308282 2026] [:error] [pid 23137:tid 23150] [client 74.248.20.136:64702] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "acjvIBaWQa7LdZ_qGFbV4gAAAYs"]
[Sun Mar 29 17:21:36.828218 2026] [:error] [pid 32255:tid 32312] [client 74.248.20.136:64952] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O-Simple.php"] [unique_id "acjvIGnfn-AtRoMbquxuEgAAAFU"]
[Sun Mar 29 17:21:37.410430 2026] [:error] [pid 32257:tid 32335] [client 74.248.20.136:65089] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acjvISE3TArOFrUtgWq3ZwAAAJE"]
[Sun Mar 29 17:21:38.207882 2026] [:error] [pid 23137:tid 23146] [client 74.248.20.136:64584] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acjvIhaWQa7LdZ_qGFbV5wAAAYc"]
[Sun Mar 29 17:21:38.973416 2026] [:error] [pid 23167:tid 23182] [client 74.248.20.136:63618] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acjvIhIAHJCFaHff3_du6gAAAcw"]
[Sun Mar 29 17:21:39.659313 2026] [:error] [pid 32257:tid 32337] [client 74.248.20.136:64957] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acjvIyE3TArOFrUtgWq3aQAAAJM"]
[Sun Mar 29 17:21:40.268169 2026] [:error] [pid 23168:tid 23210] [client 74.248.20.136:64081] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "acjvJGP8p0yRL8ot_29U-AAAAg0"]
[Sun Mar 29 17:21:41.024564 2026] [:error] [pid 23250:tid 23255] [client 74.248.20.136:65184] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "acjvJZxrpj-dQjy1cvrQGwAAAkM"]
[Sun Mar 29 17:21:41.678975 2026] [:error] [pid 32257:tid 32324] [client 74.248.20.136:64073] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "acjvJSE3TArOFrUtgWq3bQAAAIY"]
[Sun Mar 29 17:21:42.683476 2026] [:error] [pid 23284:tid 23299] [client 74.248.20.136:64361] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "acjvJozBujdPHsq7wyQIdgAAAo0"]
[Sun Mar 29 17:21:43.383702 2026] [:error] [pid 23284:tid 23295] [client 74.248.20.136:65165] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acjvJ4zBujdPHsq7wyQIegAAAok"]
[Sun Mar 29 17:21:44.376052 2026] [:error] [pid 23284:tid 23302] [client 74.248.20.136:65398] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acjvKIzBujdPHsq7wyQIfQAAApA"]
[Sun Mar 29 17:21:44.992882 2026] [:error] [pid 32257:tid 32331] [client 74.248.20.136:64673] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acjvKCE3TArOFrUtgWq3cAAAAI0"]
[Sun Mar 29 17:21:45.942587 2026] [:error] [pid 23137:tid 23155] [client 74.248.20.136:64841] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acjvKRaWQa7LdZ_qGFbV8QAAAZA"]
[Sun Mar 29 17:21:46.550092 2026] [:error] [pid 32255:tid 32301] [client 74.248.20.136:65143] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acjvKmnfn-AtRoMbquxuKAAAAEo"]
[Sun Mar 29 17:21:47.330947 2026] [:error] [pid 1524:tid 1535] [client 74.248.20.136:65215] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acjvK1oaWSl2asqQCh9qFAAAAQY"]
[Sun Mar 29 17:21:47.886624 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:64082] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acjvK2nfn-AtRoMbquxuMQAAAFE"]
[Sun Mar 29 17:21:48.578913 2026] [:error] [pid 23284:tid 23287] [client 74.248.20.136:65419] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acjvLIzBujdPHsq7wyQIgwAAAoE"]
[Sun Mar 29 17:21:49.301572 2026] [:error] [pid 23250:tid 23269] [client 74.248.20.136:64701] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acjvLZxrpj-dQjy1cvrQJwAAAlE"]
[Sun Mar 29 17:21:49.893138 2026] [:error] [pid 32254:tid 32285] [client 74.248.20.136:65208] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acjvLaug2IHuyGgCTn9EVwAAABU"]
[Sun Mar 29 17:21:50.483490 2026] [:error] [pid 23137:tid 23139] [client 74.248.20.136:65460] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acjvLhaWQa7LdZ_qGFbV9AAAAYA"]
[Sun Mar 29 17:21:51.179119 2026] [:error] [pid 23284:tid 23302] [client 74.248.20.136:64648] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acjvL4zBujdPHsq7wyQIiAAAApA"]
[Sun Mar 29 17:21:51.892375 2026] [:error] [pid 23284:tid 23309] [client 74.248.20.136:64072] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acjvL4zBujdPHsq7wyQIigAAApc"]
[Sun Mar 29 17:21:52.605628 2026] [:error] [pid 32255:tid 32306] [client 74.248.20.136:64845] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acjvMGnfn-AtRoMbquxuPAAAAE8"]
[Sun Mar 29 17:21:53.239851 2026] [:error] [pid 23284:tid 23310] [client 74.248.20.136:64944] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acjvMYzBujdPHsq7wyQIiwAAApg"]
[Sun Mar 29 17:21:53.797387 2026] [:error] [pid 23250:tid 23262] [client 74.248.20.136:64614] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acjvMZxrpj-dQjy1cvrQKwAAAko"]
[Sun Mar 29 17:21:54.423718 2026] [:error] [pid 32359:tid 32382] [client 74.248.20.136:64136] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "acjvMgMb8G3UzfQP3WgQegAAANU"]
[Sun Mar 29 17:21:55.059308 2026] [:error] [pid 32254:tid 32273] [client 74.248.20.136:65450] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "acjvM6ug2IHuyGgCTn9EWwAAAAk"]
[Sun Mar 29 17:21:55.723460 2026] [:error] [pid 23167:tid 23186] [client 74.248.20.136:65154] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "acjvMxIAHJCFaHff3_du_gAAAdA"]
[Sun Mar 29 17:21:56.825912 2026] [:error] [pid 23250:tid 23268] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Sun Mar 29 17:21:57.108430 2026] [:error] [pid 23250:tid 23258] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Sun Mar 29 17:21:57.403081 2026] [:error] [pid 23250:tid 23261] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sun Mar 29 17:21:57.675900 2026] [:error] [pid 23250:tid 23262] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Mar 29 17:21:57.934154 2026] [:error] [pid 23250:tid 23272] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Mar 29 17:21:58.192900 2026] [:error] [pid 23250:tid 23253] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sun Mar 29 17:21:58.470170 2026] [:error] [pid 23250:tid 23259] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun Mar 29 17:21:58.728954 2026] [:error] [pid 23250:tid 23271] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Mar 29 17:21:59.006420 2026] [:error] [pid 23250:tid 23264] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Mar 29 17:22:00.053679 2026] [:error] [pid 23250:tid 23275] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Sun Mar 29 17:22:00.313324 2026] [:error] [pid 23250:tid 23268] [client 74.248.20.136:64441] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Mar 29 17:22:00.616226 2026] [:error] [pid 23250:tid 23265] [client 74.248.20.136:64441] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acjvOJxrpj-dQjy1cvrQRgAAAk0"]
[Sun Mar 29 17:22:01.331563 2026] [:error] [pid 32359:tid 32366] [client 74.248.20.136:65445] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acjvOQMb8G3UzfQP3WgQfQAAAMU"]
[Sun Mar 29 17:22:02.021789 2026] [:error] [pid 23250:tid 23257] [client 74.248.20.136:63167] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acjvOpxrpj-dQjy1cvrQSAAAAkU"]
[Sun Mar 29 17:22:02.704477 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:65158] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acjvOmnfn-AtRoMbquxuUQAAAE4"]
[Sun Mar 29 17:22:03.580730 2026] [:error] [pid 32257:tid 32322] [client 74.248.20.136:64417] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acjvOyE3TArOFrUtgWq3hAAAAIQ"]
[Sun Mar 29 17:22:04.407060 2026] [:error] [pid 32257:tid 32338] [client 74.248.20.136:64337] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acjvPCE3TArOFrUtgWq3iAAAAJQ"]
[Sun Mar 29 17:22:05.145693 2026] [:error] [pid 32254:tid 32285] [client 74.248.20.136:64359] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acjvPaug2IHuyGgCTn9EYQAAABU"]
[Sun Mar 29 17:22:05.793269 2026] [:error] [pid 32255:tid 32299] [client 74.248.20.136:64098] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acjvPWnfn-AtRoMbquxuYAAAAEg"]
[Sun Mar 29 17:22:06.442470 2026] [:error] [pid 32255:tid 32298] [client 74.248.20.136:64320] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acjvPmnfn-AtRoMbquxuZgAAAEc"]
[Sun Mar 29 17:22:07.574865 2026] [:error] [pid 23167:tid 23175] [client 74.248.20.136:63886] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acjvPxIAHJCFaHff3_dvKwAAAcU"]
[Sun Mar 29 17:22:08.284713 2026] [:error] [pid 23284:tid 23310] [client 74.248.20.136:64699] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acjvQIzBujdPHsq7wyQIoAAAApg"]
[Sun Mar 29 17:22:09.120419 2026] [:error] [pid 32257:tid 32333] [client 74.248.20.136:64697] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acjvQSE3TArOFrUtgWq3jQAAAI8"]
[Sun Mar 29 17:22:30.111732 2026] [:error] [pid 23168:tid 23199] [client 74.248.20.136:65434] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acjvVmP8p0yRL8ot_29VIAAAAgI"]
[Sun Mar 29 17:22:31.078250 2026] [:error] [pid 23137:tid 23149] [client 74.248.20.136:64680] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acjvVxaWQa7LdZ_qGFbWFQAAAYo"]
[Sun Mar 29 17:22:32.283320 2026] [:error] [pid 23284:tid 23307] [client 74.248.20.136:65374] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acjvWIzBujdPHsq7wyQI1gAAApU"]
[Sun Mar 29 17:22:32.927653 2026] [:error] [pid 23137:tid 23150] [client 74.248.20.136:63424] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acjvWBaWQa7LdZ_qGFbWFwAAAYs"]
[Sun Mar 29 17:22:34.341557 2026] [:error] [pid 32257:tid 32323] [client 74.248.20.136:64639] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acjvWiE3TArOFrUtgWq3rAAAAIU"]
[Sun Mar 29 17:22:34.937696 2026] [:error] [pid 32257:tid 32342] [client 74.248.20.136:64676] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acjvWiE3TArOFrUtgWq3sgAAAJg"]
[Sun Mar 29 17:22:35.903852 2026] [:error] [pid 32257:tid 32335] [client 74.248.20.136:64362] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acjvWyE3TArOFrUtgWq3tQAAAJE"]
[Sun Mar 29 17:22:36.728825 2026] [:error] [pid 1524:tid 1546] [client 74.248.20.136:63890] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acjvXFoaWSl2asqQCh9qMAAAAQ8"]
[Sun Mar 29 17:22:37.496500 2026] [:error] [pid 23137:tid 23159] [client 74.248.20.136:64589] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acjvXRaWQa7LdZ_qGFbWHAAAAZQ"]
[Sun Mar 29 17:22:38.401479 2026] [:error] [pid 23168:tid 23204] [client 74.248.20.136:63912] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acjvXmP8p0yRL8ot_29VJAAAAgc"]
[Sun Mar 29 17:22:39.053460 2026] [:error] [pid 23250:tid 23271] [client 74.248.20.136:64182] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acjvX5xrpj-dQjy1cvrQfwAAAlM"]
[Sun Mar 29 17:22:39.683924 2026] [:error] [pid 23284:tid 23300] [client 74.248.20.136:64581] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acjvX4zBujdPHsq7wyQI4AAAAo4"]
[Sun Mar 29 17:22:40.460645 2026] [:error] [pid 23284:tid 23289] [client 74.248.20.136:64365] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acjvYIzBujdPHsq7wyQI5gAAAoM"]
[Sun Mar 29 17:22:41.218343 2026] [:error] [pid 23284:tid 23299] [client 74.248.20.136:64409] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acjvYYzBujdPHsq7wyQI7QAAAo0"]
[Sun Mar 29 17:22:42.191061 2026] [:error] [pid 23167:tid 23176] [client 74.248.20.136:63633] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acjvYhIAHJCFaHff3_dvYQAAAcY"]
[Sun Mar 29 17:22:42.952039 2026] [:error] [pid 23137:tid 23158] [client 74.248.20.136:64175] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acjvYhaWQa7LdZ_qGFbWHgAAAZM"]
[Sun Mar 29 17:22:43.577985 2026] [:error] [pid 23137:tid 23163] [client 74.248.20.136:65157] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acjvYxaWQa7LdZ_qGFbWHwAAAZg"]
[Sun Mar 29 17:22:44.192024 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:63933] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acjvZGnfn-AtRoMbquxuygAAAEs"]
[Sun Mar 29 17:22:44.921594 2026] [:error] [pid 32255:tid 32311] [client 74.248.20.136:65191] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acjvZGnfn-AtRoMbquxuzgAAAFQ"]
[Sun Mar 29 17:22:46.131376 2026] [:error] [pid 23284:tid 23308] [client 74.248.20.136:65371] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acjvZozBujdPHsq7wyQI-wAAApY"]
[Sun Mar 29 17:22:46.873020 2026] [:error] [pid 23137:tid 23143] [client 74.248.20.136:63712] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acjvZhaWQa7LdZ_qGFbWJAAAAYQ"]
[Sun Mar 29 17:22:47.838424 2026] [:error] [pid 23167:tid 23184] [client 74.248.20.136:62676] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acjvZxIAHJCFaHff3_dvaAAAAc4"]
[Sun Mar 29 17:22:48.477390 2026] [:error] [pid 23168:tid 23217] [client 74.248.20.136:63891] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acjvaGP8p0yRL8ot_29VKwAAAhQ"]
[Sun Mar 29 17:22:49.313771 2026] [:error] [pid 23168:tid 23207] [client 74.248.20.136:64118] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acjvaWP8p0yRL8ot_29VLgAAAgo"]
[Sun Mar 29 17:22:50.069755 2026] [:error] [pid 23167:tid 23186] [client 74.248.20.136:64919] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acjvahIAHJCFaHff3_dvagAAAdA"]
[Sun Mar 29 17:22:50.907919 2026] [:error] [pid 23167:tid 23194] [client 74.248.20.136:63879] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acjvahIAHJCFaHff3_dvbQAAAdg"]
[Sun Mar 29 17:22:51.772632 2026] [:error] [pid 32255:tid 32294] [client 74.248.20.136:62923] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acjva2nfn-AtRoMbquxu6AAAAEM"]
[Sun Mar 29 17:22:52.403112 2026] [:error] [pid 23167:tid 23192] [client 74.248.20.136:62699] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acjvbBIAHJCFaHff3_dvcQAAAdY"]
[Sun Mar 29 17:22:53.194940 2026] [:error] [pid 32255:tid 32295] [client 74.248.20.136:65393] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acjvbWnfn-AtRoMbquxu6QAAAEQ"]
[Sun Mar 29 17:22:53.920796 2026] [:error] [pid 23284:tid 23291] [client 74.248.20.136:64102] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acjvbYzBujdPHsq7wyQJBAAAAoU"]
[Sun Mar 29 17:22:54.645705 2026] [:error] [pid 23250:tid 23258] [client 74.248.20.136:64183] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acjvbpxrpj-dQjy1cvrQkgAAAkY"]
[Sun Mar 29 17:22:55.823142 2026] [:error] [pid 32257:tid 32329] [client 74.248.20.136:64155] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acjvbyE3TArOFrUtgWq3wwAAAIs"]
[Sun Mar 29 17:22:56.670726 2026] [:error] [pid 32254:tid 32264] [client 74.248.20.136:64092] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acjvcKug2IHuyGgCTn9EfAAAAAA"]
[Sun Mar 29 17:22:57.290227 2026] [:error] [pid 32255:tid 32312] [client 74.248.20.136:65104] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acjvcWnfn-AtRoMbquxu-AAAAFU"]
[Sun Mar 29 17:22:57.873086 2026] [:error] [pid 32255:tid 32311] [client 74.248.20.136:64850] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acjvcWnfn-AtRoMbquxu-gAAAFQ"]
[Sun Mar 29 17:22:58.451730 2026] [:error] [pid 1524:tid 1532] [client 74.248.20.136:65409] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acjvcloaWSl2asqQCh9qPAAAAQQ"]
[Sun Mar 29 17:22:59.241931 2026] [:error] [pid 32255:tid 32295] [client 74.248.20.136:64579] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "acjvc2nfn-AtRoMbquxvAgAAAEQ"]
[Sun Mar 29 17:22:59.926414 2026] [:error] [pid 23284:tid 23296] [client 74.248.20.136:65180] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "acjvc4zBujdPHsq7wyQJCwAAAoo"]
[Sun Mar 29 17:23:01.019553 2026] [:error] [pid 32255:tid 32313] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sun Mar 29 17:23:01.397270 2026] [:error] [pid 32255:tid 32296] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/ut.php
[Sun Mar 29 17:23:01.655739 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Sun Mar 29 17:23:01.916852 2026] [:error] [pid 32255:tid 32292] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Sun Mar 29 17:23:02.243071 2026] [:error] [pid 32255:tid 32295] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Sun Mar 29 17:23:02.653094 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/file52.php
[Sun Mar 29 17:23:02.975133 2026] [:error] [pid 32255:tid 32299] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/zde.php
[Sun Mar 29 17:23:03.236794 2026] [:error] [pid 32255:tid 32296] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Sun Mar 29 17:23:03.563384 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/aj.php
[Sun Mar 29 17:23:03.828949 2026] [:error] [pid 32255:tid 32304] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Sun Mar 29 17:23:04.132543 2026] [:error] [pid 32255:tid 32293] [client 74.248.20.136:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Sun Mar 29 17:23:04.387765 2026] [:error] [pid 32255:tid 32300] [client 74.248.20.136:63851] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "acjveGnfn-AtRoMbquxvPAAAAEk"]
[Sun Mar 29 17:23:05.929518 2026] [:error] [pid 1524:tid 1543] [client 74.248.20.136:64407] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "acjveVoaWSl2asqQCh9qQgAAAQw"]
[Sun Mar 29 17:23:06.546497 2026] [:error] [pid 23284:tid 23302] [client 74.248.20.136:65376] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "acjveozBujdPHsq7wyQJEgAAApA"]
[Sun Mar 29 17:23:07.393350 2026] [:error] [pid 23167:tid 23193] [client 74.248.20.136:64374] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lites.php"] [unique_id "acjvexIAHJCFaHff3_dvgAAAAdc"]
[Sun Mar 29 17:23:08.240100 2026] [:error] [pid 32359:tid 32371] [client 74.248.20.136:64634] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acjvfAMb8G3UzfQP3WgQnAAAAMo"]
[Sun Mar 29 17:23:09.070306 2026] [:error] [pid 32257:tid 32328] [client 74.248.20.136:64934] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acjvfSE3TArOFrUtgWq33gAAAIo"]
[Sun Mar 29 17:23:09.905447 2026] [:error] [pid 23167:tid 23192] [client 74.248.20.136:64070] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acjvfRIAHJCFaHff3_dvhwAAAdY"]
[Sun Mar 29 17:23:10.515105 2026] [:error] [pid 32255:tid 32301] [client 74.248.20.136:63834] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acjvfmnfn-AtRoMbquxvWAAAAEo"]
[Sun Mar 29 17:23:11.056642 2026] [:error] [pid 32257:tid 32337] [client 74.248.20.136:64686] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acjvfyE3TArOFrUtgWq34AAAAJM"]
[Sun Mar 29 17:23:11.639830 2026] [:error] [pid 32257:tid 32341] [client 74.248.20.136:64156] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acjvfyE3TArOFrUtgWq34wAAAJc"]
[Sun Mar 29 17:23:12.216832 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:63666] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acjvgGnfn-AtRoMbquxvagAAAE4"]
[Sun Mar 29 17:23:12.913571 2026] [:error] [pid 23284:tid 23307] [client 74.248.20.136:64430] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acjvgIzBujdPHsq7wyQJFgAAApU"]
[Sun Mar 29 17:23:13.858547 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:64111] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acjvgWnfn-AtRoMbquxvegAAAFE"]
[Sun Mar 29 17:23:14.438927 2026] [:error] [pid 23167:tid 23180] [client 74.248.20.136:64948] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acjvghIAHJCFaHff3_dvoAAAAco"]
[Sun Mar 29 17:23:15.251714 2026] [:error] [pid 23167:tid 23186] [client 74.248.20.136:62931] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acjvgxIAHJCFaHff3_dvqAAAAdA"]
[Sun Mar 29 17:23:15.859877 2026] [:error] [pid 32255:tid 32306] [client 74.248.20.136:64443] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acjvg2nfn-AtRoMbquxvfAAAAE8"]
[Sun Mar 29 17:23:16.614386 2026] [:error] [pid 1524:tid 1541] [client 74.248.20.136:65100] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acjvhFoaWSl2asqQCh9qSQAAAQo"]
[Sun Mar 29 17:23:17.221302 2026] [:error] [pid 23137:tid 23147] [client 74.248.20.136:64433] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acjvhRaWQa7LdZ_qGFbWMAAAAYg"]
[Sun Mar 29 17:23:17.831650 2026] [:error] [pid 32257:tid 32335] [client 74.248.20.136:64397] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acjvhSE3TArOFrUtgWq35gAAAJE"]
[Sun Mar 29 17:23:18.610071 2026] [:error] [pid 32255:tid 32293] [client 74.248.20.136:65424] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acjvhmnfn-AtRoMbquxvjQAAAEI"]
[Sun Mar 29 17:23:19.623441 2026] [:error] [pid 23167:tid 23183] [client 74.248.20.136:65118] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filename.php"] [unique_id "acjvhxIAHJCFaHff3_dvwwAAAc0"]
[Sun Mar 29 17:23:20.780220 2026] [:error] [pid 32255:tid 32307] [client 74.248.20.136:65097] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filename.php"] [unique_id "acjviGnfn-AtRoMbquxvmAAAAFA"]
[Sun Mar 29 17:23:21.602884 2026] [:error] [pid 32257:tid 32339] [client 74.248.20.136:64101] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filename.php"] [unique_id "acjviSE3TArOFrUtgWq37AAAAJU"]
[Sun Mar 29 17:23:22.216563 2026] [:error] [pid 23250:tid 23264] [client 74.248.20.136:65093] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filename.php"] [unique_id "acjvipxrpj-dQjy1cvrQsAAAAkw"]
[Sun Mar 29 17:23:22.868848 2026] [:error] [pid 32255:tid 32307] [client 74.248.20.136:65396] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acjvimnfn-AtRoMbquxvqAAAAFA"]
[Sun Mar 29 17:23:23.524564 2026] [:error] [pid 23284:tid 23306] [client 74.248.20.136:64871] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acjvi4zBujdPHsq7wyQJLAAAApQ"]
[Sun Mar 29 17:23:24.080403 2026] [:error] [pid 32255:tid 32310] [client 74.248.20.136:64358] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acjvjGnfn-AtRoMbquxvtgAAAFM"]
[Sun Mar 29 17:23:24.623973 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:64675] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acjvjGnfn-AtRoMbquxvvwAAAEs"]
[Sun Mar 29 17:23:25.382062 2026] [:error] [pid 23167:tid 23175] [client 74.248.20.136:64383] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acjvjRIAHJCFaHff3_dv2wAAAcU"]
[Sun Mar 29 17:23:25.953710 2026] [:error] [pid 32255:tid 32306] [client 74.248.20.136:64153] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acjvjWnfn-AtRoMbquxvzwAAAE8"]
[Sun Mar 29 17:23:26.675007 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:64189] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acjvjmnfn-AtRoMbquxv2gAAAE4"]
[Sun Mar 29 17:23:27.316412 2026] [:error] [pid 32255:tid 32300] [client 74.248.20.136:64423] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acjvj2nfn-AtRoMbquxv5QAAAEk"]
[Sun Mar 29 17:23:28.302769 2026] [:error] [pid 23284:tid 23310] [client 74.248.20.136:64608] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvkIzBujdPHsq7wyQJMQAAApg"]
[Sun Mar 29 17:23:28.939423 2026] [:error] [pid 23167:tid 23193] [client 74.248.20.136:64853] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvkBIAHJCFaHff3_dv5AAAAdc"]
[Sun Mar 29 17:23:29.574995 2026] [:error] [pid 23137:tid 23159] [client 74.248.20.136:65391] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvkRaWQa7LdZ_qGFbWMgAAAZQ"]
[Sun Mar 29 17:23:30.149349 2026] [:error] [pid 23167:tid 23185] [client 74.248.20.136:65119] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvkhIAHJCFaHff3_dv6gAAAc8"]
[Sun Mar 29 17:23:30.777110 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:62859] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvkhIAHJCFaHff3_dv7gAAAdE"]
[Sun Mar 29 17:23:31.928884 2026] [:error] [pid 23250:tid 23264] [client 74.248.20.136:65173] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvk5xrpj-dQjy1cvrQtwAAAkw"]
[Sun Mar 29 17:23:32.583114 2026] [:error] [pid 23167:tid 23180] [client 74.248.20.136:64937] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvlBIAHJCFaHff3_dv-QAAAco"]
[Sun Mar 29 17:23:33.177134 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:65366] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acjvlRIAHJCFaHff3_dv-gAAAdU"]
[Sun Mar 29 17:23:33.799788 2026] [:error] [pid 32255:tid 32294] [client 74.248.20.136:64138] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acjvlWnfn-AtRoMbquxwEwAAAEM"]
[Sun Mar 29 17:23:34.486642 2026] [:error] [pid 23167:tid 23182] [client 74.248.20.136:63667] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acjvlhIAHJCFaHff3_dv_gAAAcw"]
[Sun Mar 29 17:23:35.472794 2026] [:error] [pid 23137:tid 23161] [client 74.248.20.136:65372] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acjvlxaWQa7LdZ_qGFbWNgAAAZY"]
[Sun Mar 29 17:23:36.597743 2026] [:error] [pid 23168:tid 23200] [client 74.248.20.136:63221] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acjvmGP8p0yRL8ot_29VRwAAAgM"]
[Sun Mar 29 17:23:38.455792 2026] [:error] [pid 32255:tid 32291] [client 74.248.20.136:65206] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acjvmmnfn-AtRoMbquxwIgAAAEA"]
[Sun Mar 29 17:23:39.316747 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:64372] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acjvmxIAHJCFaHff3_dwDQAAAdU"]
[Sun Mar 29 17:23:40.193902 2026] [:error] [pid 32257:tid 32342] [client 74.248.20.136:64923] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acjvnCE3TArOFrUtgWq38gAAAJg"]
[Sun Mar 29 17:23:40.881320 2026] [:error] [pid 32257:tid 32328] [client 74.248.20.136:63901] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acjvnCE3TArOFrUtgWq39gAAAIo"]
[Sun Mar 29 17:23:41.783792 2026] [:error] [pid 32359:tid 32371] [client 74.248.20.136:64905] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acjvnQMb8G3UzfQP3WgQpwAAAMo"]
[Sun Mar 29 17:23:42.759170 2026] [:error] [pid 23168:tid 23211] [client 74.248.20.136:65137] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acjvnmP8p0yRL8ot_29VTwAAAg4"]
[Sun Mar 29 17:23:43.342453 2026] [:error] [pid 32255:tid 32313] [client 74.248.20.136:64891] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acjvn2nfn-AtRoMbquxwKgAAAFY"]
[Sun Mar 29 17:23:43.975620 2026] [:error] [pid 32255:tid 32307] [client 74.248.20.136:62917] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acjvn2nfn-AtRoMbquxwLQAAAFA"]
[Sun Mar 29 17:23:44.863111 2026] [:error] [pid 32255:tid 32292] [client 74.248.20.136:63644] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acjvoGnfn-AtRoMbquxwNQAAAEE"]
[Sun Mar 29 17:23:45.578691 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:63415] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acjvoWnfn-AtRoMbquxwOAAAAEs"]
[Sun Mar 29 17:23:46.255763 2026] [:error] [pid 23167:tid 23175] [client 74.248.20.136:64623] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acjvohIAHJCFaHff3_dwMwAAAcU"]
[Sun Mar 29 17:23:46.893545 2026] [:error] [pid 32255:tid 32303] [client 74.248.20.136:63208] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acjvomnfn-AtRoMbquxwPwAAAEw"]
[Sun Mar 29 17:23:48.092943 2026] [:error] [pid 32359:tid 32379] [client 74.248.20.136:63657] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acjvpAMb8G3UzfQP3WgQqQAAANI"]
[Sun Mar 29 17:23:49.012048 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:64893] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acjvpRIAHJCFaHff3_dwRAAAAdE"]
[Sun Mar 29 17:23:49.818210 2026] [:error] [pid 23284:tid 23310] [client 74.248.20.136:64322] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acjvpYzBujdPHsq7wyQJjAAAApg"]
[Sun Mar 29 17:23:50.664438 2026] [:error] [pid 32255:tid 32311] [client 74.248.20.136:64440] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acjvpmnfn-AtRoMbquxwRQAAAFQ"]
[Sun Mar 29 17:23:52.662323 2026] [:error] [pid 23284:tid 23304] [client 74.248.20.136:62887] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acjvqIzBujdPHsq7wyQJpAAAApI"]
[Sun Mar 29 17:23:53.493757 2026] [:error] [pid 32255:tid 32301] [client 74.248.20.136:63105] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acjvqWnfn-AtRoMbquxwTQAAAEo"]
[Sun Mar 29 17:23:54.386852 2026] [:error] [pid 23250:tid 23269] [client 74.248.20.136:65123] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acjvqpxrpj-dQjy1cvrQ0wAAAlE"]
[Sun Mar 29 17:23:55.282962 2026] [:error] [pid 23250:tid 23257] [client 74.248.20.136:64865] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acjvq5xrpj-dQjy1cvrQ2QAAAkU"]
[Sun Mar 29 17:23:55.894038 2026] [:error] [pid 23167:tid 23179] [client 74.248.20.136:64703] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "acjvqxIAHJCFaHff3_dwTQAAAck"]
[Sun Mar 29 17:23:56.547075 2026] [:error] [pid 32257:tid 32329] [client 74.248.20.136:64324] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "acjvrCE3TArOFrUtgWq4AgAAAIs"]
[Sun Mar 29 17:23:57.112377 2026] [:error] [pid 32257:tid 32320] [client 74.248.20.136:64599] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "acjvrSE3TArOFrUtgWq4BQAAAII"]
[Sun Mar 29 17:23:57.805991 2026] [:error] [pid 32255:tid 32291] [client 74.248.20.136:64422] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "acjvrWnfn-AtRoMbquxwYAAAAEA"]
[Sun Mar 29 17:23:58.516514 2026] [:error] [pid 23168:tid 23199] [client 74.248.20.136:65433] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "acjvrmP8p0yRL8ot_29VWAAAAgI"]
[Sun Mar 29 17:23:59.078177 2026] [:error] [pid 32254:tid 32272] [client 74.248.20.136:63378] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "acjvr6ug2IHuyGgCTn9EkAAAAAg"]
[Sun Mar 29 17:23:59.660204 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:65446] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "acjvrxIAHJCFaHff3_dwUQAAAdE"]
[Sun Mar 29 17:24:00.254062 2026] [:error] [pid 23167:tid 23171] [client 74.248.20.136:64400] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "acjvsBIAHJCFaHff3_dwUgAAAcE"]
[Sun Mar 29 17:24:00.862300 2026] [:error] [pid 32255:tid 32292] [client 74.248.20.136:62602] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acjvsGnfn-AtRoMbquxwaAAAAEE"]
[Sun Mar 29 17:24:01.480860 2026] [:error] [pid 23167:tid 23180] [client 74.248.20.136:64323] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acjvsRIAHJCFaHff3_dwVgAAAco"]
[Sun Mar 29 17:24:02.163340 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:63673] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acjvshIAHJCFaHff3_dwXAAAAdU"]
[Sun Mar 29 17:24:02.831173 2026] [:error] [pid 23167:tid 23171] [client 74.248.20.136:64882] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acjvshIAHJCFaHff3_dwYwAAAcE"]
[Sun Mar 29 17:24:03.606429 2026] [:error] [pid 32254:tid 32274] [client 74.248.20.136:63895] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acjvs6ug2IHuyGgCTn9ElAAAAAo"]
[Sun Mar 29 17:24:04.626272 2026] [:error] [pid 23168:tid 23198] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Mar 29 17:24:04.928210 2026] [:error] [pid 23168:tid 23215] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Sun Mar 29 17:24:05.188073 2026] [:error] [pid 23168:tid 23197] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/13k.php
[Sun Mar 29 17:24:05.473818 2026] [:error] [pid 23168:tid 23202] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Mar 29 17:24:06.001819 2026] [:error] [pid 23168:tid 23200] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Mar 29 17:24:06.276128 2026] [:error] [pid 23168:tid 23199] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Sun Mar 29 17:24:06.553755 2026] [:error] [pid 23168:tid 23201] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Sun Mar 29 17:24:06.815572 2026] [:error] [pid 23168:tid 23209] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/abe.php
[Sun Mar 29 17:24:07.331484 2026] [:error] [pid 23168:tid 23204] [client 74.248.20.136:65195] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Sun Mar 29 17:24:07.605095 2026] [:error] [pid 23168:tid 23208] [client 74.248.20.136:65195] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acjvt2P8p0yRL8ot_29VbgAAAgs"]
[Sun Mar 29 17:24:08.401791 2026] [:error] [pid 23168:tid 23214] [client 74.248.20.136:64171] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acjvuGP8p0yRL8ot_29VbwAAAhE"]
[Sun Mar 29 17:24:09.213084 2026] [:error] [pid 23284:tid 23293] [client 74.248.20.136:64419] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acjvuYzBujdPHsq7wyQJxwAAAoc"]
[Sun Mar 29 17:24:09.834206 2026] [:error] [pid 23137:tid 23148] [client 74.248.20.136:64172] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acjvuRaWQa7LdZ_qGFbWRgAAAYk"]
[Sun Mar 29 17:24:11.195381 2026] [:error] [pid 32255:tid 32298] [client 74.248.20.136:62674] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvu2nfn-AtRoMbquxwcgAAAEc"]
[Sun Mar 29 17:24:11.843059 2026] [:error] [pid 1524:tid 1551] [client 74.248.20.136:64920] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvu1oaWSl2asqQCh9qYQAAARM"]
[Sun Mar 29 17:24:12.816148 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:63892] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvvGnfn-AtRoMbquxwgQAAAE4"]
[Sun Mar 29 17:24:13.474773 2026] [:error] [pid 32255:tid 32300] [client 74.248.20.136:65354] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acjvvWnfn-AtRoMbquxwiQAAAEk"]
[Sun Mar 29 17:24:14.452442 2026] [:error] [pid 23250:tid 23264] [client 74.248.20.136:65349] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acjvvpxrpj-dQjy1cvrQ9QAAAkw"]
[Sun Mar 29 17:24:15.167456 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:64086] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acjvv2nfn-AtRoMbquxwkAAAAFE"]
[Sun Mar 29 17:24:16.584380 2026] [:error] [pid 32255:tid 32311] [client 74.248.20.136:63458] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acjvwGnfn-AtRoMbquxwngAAAFQ"]
[Sun Mar 29 17:24:17.569439 2026] [:error] [pid 23167:tid 23183] [client 74.248.20.136:64674] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acjvwRIAHJCFaHff3_dwggAAAc0"]
[Sun Mar 29 17:24:18.545630 2026] [:error] [pid 32255:tid 32292] [client 74.248.20.136:64634] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acjvwmnfn-AtRoMbquxwqgAAAEE"]
[Sun Mar 29 17:24:19.328977 2026] [:error] [pid 23167:tid 23184] [client 74.248.20.136:63220] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acjvwxIAHJCFaHff3_dwhgAAAc4"]
[Sun Mar 29 17:24:20.094118 2026] [:error] [pid 23167:tid 23176] [client 74.248.20.136:64958] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acjvxBIAHJCFaHff3_dwiwAAAcY"]
[Sun Mar 29 17:24:21.136942 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:64387] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acjvxRIAHJCFaHff3_dwlAAAAdU"]
[Sun Mar 29 17:24:21.918984 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:64425] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acjvxWnfn-AtRoMbquxwuwAAAEs"]
[Sun Mar 29 17:24:23.523651 2026] [:error] [pid 32255:tid 32309] [client 74.248.20.136:65176] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acjvx2nfn-AtRoMbquxwzAAAAFI"]
[Sun Mar 29 17:24:24.299566 2026] [:error] [pid 23250:tid 23263] [client 74.248.20.136:64067] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acjvyJxrpj-dQjy1cvrQ_QAAAks"]
[Sun Mar 29 17:24:24.910935 2026] [:error] [pid 23284:tid 23305] [client 74.248.20.136:64855] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acjvyIzBujdPHsq7wyQJywAAApM"]
[Sun Mar 29 17:24:25.671171 2026] [:error] [pid 23167:tid 23178] [client 74.248.20.136:64908] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acjvyRIAHJCFaHff3_dwnAAAAcg"]
[Sun Mar 29 17:24:26.310297 2026] [:error] [pid 23250:tid 23275] [client 74.248.20.136:63877] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acjvypxrpj-dQjy1cvrRAgAAAlc"]
[Sun Mar 29 17:24:27.098946 2026] [:error] [pid 23250:tid 23274] [client 74.248.20.136:65407] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acjvy5xrpj-dQjy1cvrRBgAAAlY"]
[Sun Mar 29 17:24:27.727421 2026] [:error] [pid 23250:tid 23265] [client 74.248.20.136:65199] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acjvy5xrpj-dQjy1cvrRCQAAAk0"]
[Sun Mar 29 17:24:29.076191 2026] [:error] [pid 32257:tid 32326] [client 74.248.20.136:65146] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "acjvzSE3TArOFrUtgWq4FwAAAIg"]
[Sun Mar 29 17:24:30.199846 2026] [:error] [pid 23167:tid 23171] [client 74.248.20.136:64185] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoyo.php"] [unique_id "acjvzhIAHJCFaHff3_dwrgAAAcE"]
[Sun Mar 29 17:24:51.355463 2026] [:error] [pid 23284:tid 23294] [client 74.248.20.136:64404] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "acjv44zBujdPHsq7wyQKCAAAAog"]
[Sun Mar 29 17:24:52.274781 2026] [:error] [pid 1524:tid 1551] [client 74.248.20.136:64347] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "acjv5FoaWSl2asqQCh9qbAAAARM"]
[Sun Mar 29 17:24:53.294944 2026] [:error] [pid 23250:tid 23274] [client 74.248.20.136:64665] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "acjv5Zxrpj-dQjy1cvrRJQAAAlY"]
[Sun Mar 29 17:24:54.080936 2026] [:error] [pid 23250:tid 23267] [client 74.248.20.136:64410] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "acjv5pxrpj-dQjy1cvrRLQAAAk8"]
[Sun Mar 29 17:24:54.897517 2026] [:error] [pid 23168:tid 23218] [client 74.248.20.136:63867] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "acjv5mP8p0yRL8ot_29VkQAAAhU"]
[Sun Mar 29 17:24:55.559988 2026] [:error] [pid 32255:tid 32309] [client 74.248.20.136:65094] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "acjv52nfn-AtRoMbquxxBwAAAFI"]
[Sun Mar 29 17:24:56.274973 2026] [:error] [pid 32255:tid 32300] [client 74.248.20.136:63887] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "acjv6Gnfn-AtRoMbquxxCQAAAEk"]
[Sun Mar 29 17:24:56.898032 2026] [:error] [pid 32257:tid 32326] [client 74.248.20.136:64904] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/waq.php"] [unique_id "acjv6CE3TArOFrUtgWq4LwAAAIg"]
[Sun Mar 29 17:24:57.611042 2026] [:error] [pid 32257:tid 32321] [client 74.248.20.136:65110] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "acjv6SE3TArOFrUtgWq4OwAAAIM"]
[Sun Mar 29 17:24:58.303291 2026] [:error] [pid 32255:tid 32293] [client 74.248.20.136:64184] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "acjv6mnfn-AtRoMbquxxGAAAAEI"]
[Sun Mar 29 17:24:59.057125 2026] [:error] [pid 23284:tid 23298] [client 74.248.20.136:64080] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "acjv64zBujdPHsq7wyQKIwAAAow"]
[Sun Mar 29 17:24:59.769052 2026] [:error] [pid 23250:tid 23273] [client 74.248.20.136:64075] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wakak.php"] [unique_id "acjv65xrpj-dQjy1cvrRWgAAAlU"]
[Sun Mar 29 17:25:00.440829 2026] [:error] [pid 32257:tid 32336] [client 74.248.20.136:65382] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "acjv7CE3TArOFrUtgWq4WAAAAJI"]
[Sun Mar 29 17:25:01.309626 2026] [:error] [pid 32254:tid 32280] [client 74.248.20.136:64586] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "acjv7aug2IHuyGgCTn9EpAAAABA"]
[Sun Mar 29 17:25:01.959060 2026] [:error] [pid 23168:tid 23217] [client 74.248.20.136:63852] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "acjv7WP8p0yRL8ot_29VmgAAAhQ"]
[Sun Mar 29 17:25:02.722305 2026] [:error] [pid 23168:tid 23201] [client 74.248.20.136:64925] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bipas.php"] [unique_id "acjv7mP8p0yRL8ot_29VnAAAAgQ"]
[Sun Mar 29 17:25:03.582004 2026] [:error] [pid 32255:tid 32303] [client 74.248.20.136:64106] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "acjv72nfn-AtRoMbquxxKgAAAEw"]
[Sun Mar 29 17:25:04.336136 2026] [:error] [pid 23168:tid 23198] [client 74.248.20.136:65090] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "acjv8GP8p0yRL8ot_29VoAAAAgE"]
[Sun Mar 29 17:25:04.973529 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:65125] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "acjv8Gnfn-AtRoMbquxxNAAAAEs"]
[Sun Mar 29 17:25:05.622913 2026] [:error] [pid 23167:tid 23183] [client 74.248.20.136:64104] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/conte.php"] [unique_id "acjv8RIAHJCFaHff3_dw-gAAAc0"]
[Sun Mar 29 17:25:06.603072 2026] [:error] [pid 23167:tid 23170] [client 74.248.20.136:65156] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class3.php"] [unique_id "acjv8hIAHJCFaHff3_dw-wAAAcA"]
[Sun Mar 29 17:25:07.241623 2026] [:error] [pid 23137:tid 23147] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/class3.php
[Sun Mar 29 17:25:07.502886 2026] [:error] [pid 23137:tid 23159] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs18.php
[Sun Mar 29 17:25:07.777037 2026] [:error] [pid 23137:tid 23141] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/claa.php
[Sun Mar 29 17:25:08.036147 2026] [:error] [pid 23137:tid 23152] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Sun Mar 29 17:25:08.315362 2026] [:error] [pid 23137:tid 23158] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sun Mar 29 17:25:08.591571 2026] [:error] [pid 23137:tid 23161] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun Mar 29 17:25:08.873010 2026] [:error] [pid 23137:tid 23139] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Sun Mar 29 17:25:09.149199 2026] [:error] [pid 23137:tid 23148] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Sun Mar 29 17:25:09.408825 2026] [:error] [pid 23137:tid 23157] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Sun Mar 29 17:25:09.676532 2026] [:error] [pid 23137:tid 23151] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sun Mar 29 17:25:09.956949 2026] [:error] [pid 23137:tid 23145] [client 74.248.20.136:65088] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Sun Mar 29 17:25:10.228132 2026] [:error] [pid 23137:tid 23147] [client 74.248.20.136:65088] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acjv9haWQa7LdZ_qGFbWbwAAAYg"]
[Sun Mar 29 17:25:10.862656 2026] [:error] [pid 23167:tid 23193] [client 74.248.20.136:64911] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acjv9hIAHJCFaHff3_dxBwAAAdc"]
[Sun Mar 29 17:25:12.155496 2026] [:error] [pid 32255:tid 32298] [client 74.248.20.136:65099] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acjv-Gnfn-AtRoMbquxxQQAAAEc"]
[Sun Mar 29 17:25:12.856487 2026] [:error] [pid 32257:tid 32331] [client 74.248.20.136:65400] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acjv-CE3TArOFrUtgWq4ZgAAAI0"]
[Sun Mar 29 17:25:13.628884 2026] [:error] [pid 32255:tid 32314] [client 74.248.20.136:64869] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acjv-Wnfn-AtRoMbquxxSQAAAFc"]
[Sun Mar 29 17:25:14.241860 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:64370] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acjv-hIAHJCFaHff3_dxDQAAAdE"]
[Sun Mar 29 17:25:15.194566 2026] [:error] [pid 23284:tid 23295] [client 74.248.20.136:63904] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acjv-4zBujdPHsq7wyQKPQAAAok"]
[Sun Mar 29 17:25:16.813333 2026] [:error] [pid 23167:tid 23185] [client 74.248.20.136:64902] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acjv_BIAHJCFaHff3_dxDwAAAc8"]
[Sun Mar 29 17:25:17.737560 2026] [:error] [pid 23167:tid 23170] [client 74.248.20.136:64693] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acjv_RIAHJCFaHff3_dxEAAAAcA"]
[Sun Mar 29 17:25:18.420206 2026] [:error] [pid 32255:tid 32299] [client 74.248.20.136:64607] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acjv_mnfn-AtRoMbquxxXgAAAEg"]
[Sun Mar 29 17:25:19.242972 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:64374] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acjv_xIAHJCFaHff3_dxFgAAAdU"]
[Sun Mar 29 17:25:20.080933 2026] [:error] [pid 23284:tid 23302] [client 74.248.20.136:63889] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acjwAIzBujdPHsq7wyQKRQAAApA"]
[Sun Mar 29 17:25:21.171864 2026] [:error] [pid 23284:tid 23290] [client 74.248.20.136:65417] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acjwAYzBujdPHsq7wyQKSQAAAoQ"]
[Sun Mar 29 17:25:21.937333 2026] [:error] [pid 32255:tid 32298] [client 74.248.20.136:64438] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acjwAWnfn-AtRoMbquxxbgAAAEc"]
[Sun Mar 29 17:25:22.777746 2026] [:error] [pid 23284:tid 23299] [client 74.248.20.136:65128] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acjwAozBujdPHsq7wyQKSwAAAo0"]
[Sun Mar 29 17:25:24.173315 2026] [:error] [pid 23167:tid 23185] [client 74.248.20.136:64093] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acjwBBIAHJCFaHff3_dxHwAAAc8"]
[Sun Mar 29 17:25:24.959965 2026] [:error] [pid 23167:tid 23178] [client 74.248.20.136:64334] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acjwBBIAHJCFaHff3_dxIwAAAcg"]
[Sun Mar 29 17:25:25.556802 2026] [:error] [pid 23284:tid 23288] [client 74.248.20.136:64429] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acjwBYzBujdPHsq7wyQKVAAAAoI"]
[Sun Mar 29 17:25:26.995647 2026] [:error] [pid 23167:tid 23192] [client 74.248.20.136:64395] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acjwBhIAHJCFaHff3_dxLAAAAdY"]
[Sun Mar 29 17:25:27.993747 2026] [:error] [pid 23284:tid 23303] [client 74.248.20.136:64844] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acjwB4zBujdPHsq7wyQKWwAAApE"]
[Sun Mar 29 17:25:29.092760 2026] [:error] [pid 23167:tid 23188] [client 74.248.20.136:65461] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acjwCRIAHJCFaHff3_dxMgAAAdI"]
[Sun Mar 29 17:25:29.799081 2026] [:error] [pid 32257:tid 32340] [client 74.248.20.136:64350] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acjwCSE3TArOFrUtgWq4agAAAJY"]
[Sun Mar 29 17:25:30.442218 2026] [:error] [pid 32257:tid 32333] [client 74.248.20.136:64580] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acjwCiE3TArOFrUtgWq4bAAAAI8"]
[Sun Mar 29 17:25:31.043188 2026] [:error] [pid 32257:tid 32322] [client 74.248.20.136:65109] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acjwCyE3TArOFrUtgWq4cgAAAIQ"]
[Sun Mar 29 17:25:31.722184 2026] [:error] [pid 23250:tid 23260] [client 74.248.20.136:65384] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acjwC5xrpj-dQjy1cvrRdAAAAkg"]
[Sun Mar 29 17:25:32.567325 2026] [:error] [pid 23250:tid 23264] [client 74.248.20.136:64421] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acjwDJxrpj-dQjy1cvrRdQAAAkw"]
[Sun Mar 29 17:25:33.452924 2026] [:error] [pid 23250:tid 23258] [client 74.248.20.136:65093] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acjwDZxrpj-dQjy1cvrReAAAAkY"]
[Sun Mar 29 17:25:34.205054 2026] [:error] [pid 23168:tid 23219] [client 74.248.20.136:64672] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acjwDmP8p0yRL8ot_29VtQAAAhY"]
[Sun Mar 29 17:25:34.820483 2026] [:error] [pid 23250:tid 23253] [client 74.248.20.136:64637] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acjwDpxrpj-dQjy1cvrRegAAAkE"]
[Sun Mar 29 17:25:35.471324 2026] [:error] [pid 32257:tid 32326] [client 74.248.20.136:64389] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acjwDyE3TArOFrUtgWq4dAAAAIg"]
[Sun Mar 29 17:25:36.060393 2026] [:error] [pid 32257:tid 32330] [client 74.248.20.136:64610] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acjwECE3TArOFrUtgWq4dQAAAIw"]
[Sun Mar 29 17:25:36.781032 2026] [:error] [pid 23250:tid 23263] [client 74.248.20.136:64137] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acjwEJxrpj-dQjy1cvrRewAAAks"]
[Sun Mar 29 17:25:37.447260 2026] [:error] [pid 32359:tid 32376] [client 74.248.20.136:63122] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acjwEQMb8G3UzfQP3WgQxAAAAM8"]
[Sun Mar 29 17:25:38.230951 2026] [:error] [pid 23250:tid 23254] [client 74.248.20.136:65098] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acjwEpxrpj-dQjy1cvrRgQAAAkI"]
[Sun Mar 29 17:25:39.101463 2026] [:error] [pid 23250:tid 23272] [client 74.248.20.136:65363] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acjwE5xrpj-dQjy1cvrRgwAAAlQ"]
[Sun Mar 29 17:25:39.815653 2026] [:error] [pid 23250:tid 23276] [client 74.248.20.136:64612] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acjwE5xrpj-dQjy1cvrRhwAAAlg"]
[Sun Mar 29 17:25:40.548449 2026] [:error] [pid 32255:tid 32291] [client 74.248.20.136:64628] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acjwFGnfn-AtRoMbquxxfQAAAEA"]
[Sun Mar 29 17:25:41.132440 2026] [:error] [pid 23167:tid 23183] [client 74.248.20.136:65148] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acjwFRIAHJCFaHff3_dxPQAAAc0"]
[Sun Mar 29 17:25:41.720459 2026] [:error] [pid 23250:tid 23274] [client 74.248.20.136:64835] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acjwFZxrpj-dQjy1cvrRjgAAAlY"]
[Sun Mar 29 17:25:42.486125 2026] [:error] [pid 1524:tid 1527] [client 74.248.20.136:63881] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acjwFloaWSl2asqQCh9qgQAAAQA"]
[Sun Mar 29 17:25:43.253223 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:64373] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acjwFxIAHJCFaHff3_dxTAAAAdE"]
[Sun Mar 29 17:25:43.894909 2026] [:error] [pid 32255:tid 32299] [client 74.248.20.136:65470] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acjwF2nfn-AtRoMbquxxfwAAAEg"]
[Sun Mar 29 17:25:44.512867 2026] [:error] [pid 32255:tid 32313] [client 74.248.20.136:62849] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acjwGGnfn-AtRoMbquxxgwAAAFY"]
[Sun Mar 29 17:25:45.246691 2026] [:error] [pid 23137:tid 23151] [client 74.248.20.136:65161] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acjwGRaWQa7LdZ_qGFbWeAAAAYw"]
[Sun Mar 29 17:25:45.946749 2026] [:error] [pid 23284:tid 23301] [client 74.248.20.136:64191] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acjwGYzBujdPHsq7wyQKggAAAo8"]
[Sun Mar 29 17:25:46.616992 2026] [:error] [pid 23167:tid 23183] [client 74.248.20.136:64938] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acjwGhIAHJCFaHff3_dxWgAAAc0"]
[Sun Mar 29 17:25:47.198592 2026] [:error] [pid 23168:tid 23200] [client 74.248.20.136:64849] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acjwG2P8p0yRL8ot_29VuQAAAgM"]
[Sun Mar 29 17:25:47.733917 2026] [:error] [pid 32255:tid 32304] [client 74.248.20.136:63720] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acjwG2nfn-AtRoMbquxxigAAAE0"]
[Sun Mar 29 17:25:48.304088 2026] [:error] [pid 23137:tid 23154] [client 74.248.20.136:63395] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acjwHBaWQa7LdZ_qGFbWeQAAAY8"]
[Sun Mar 29 17:25:49.008720 2026] [:error] [pid 32255:tid 32303] [client 74.248.20.136:65403] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acjwHWnfn-AtRoMbquxxkAAAAEw"]
[Sun Mar 29 17:25:49.602732 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:65172] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acjwHWnfn-AtRoMbquxxkwAAAEs"]
[Sun Mar 29 17:25:50.270117 2026] [:error] [pid 32257:tid 32319] [client 74.248.20.136:64109] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acjwHiE3TArOFrUtgWq4fQAAAIE"]
[Sun Mar 29 17:25:50.903355 2026] [:error] [pid 23284:tid 23308] [client 74.248.20.136:65170] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acjwHozBujdPHsq7wyQKhgAAApY"]
[Sun Mar 29 17:25:51.647542 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:64431] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acjwH2nfn-AtRoMbquxxnQAAAFE"]
[Sun Mar 29 17:25:52.340230 2026] [:error] [pid 23167:tid 23188] [client 74.248.20.136:64684] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acjwIBIAHJCFaHff3_dxawAAAdI"]
[Sun Mar 29 17:25:52.975777 2026] [:error] [pid 23137:tid 23162] [client 74.248.20.136:64116] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acjwIBaWQa7LdZ_qGFbWfAAAAZc"]
[Sun Mar 29 17:25:53.904158 2026] [:error] [pid 32254:tid 32266] [client 74.248.20.136:64915] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acjwIaug2IHuyGgCTn9EqgAAAAI"]
[Sun Mar 29 17:25:54.494143 2026] [:error] [pid 23284:tid 23309] [client 74.248.20.136:64834] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acjwIozBujdPHsq7wyQKjAAAApc"]
[Sun Mar 29 17:25:55.102101 2026] [:error] [pid 1524:tid 1545] [client 74.248.20.136:64873] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acjwI1oaWSl2asqQCh9qhwAAAQ4"]
[Sun Mar 29 17:25:55.714739 2026] [:error] [pid 23284:tid 23290] [client 74.248.20.136:64880] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acjwI4zBujdPHsq7wyQKlQAAAoQ"]
[Sun Mar 29 17:25:56.380986 2026] [:error] [pid 23167:tid 23183] [client 74.248.20.136:65112] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acjwJBIAHJCFaHff3_dxcgAAAc0"]
[Sun Mar 29 17:25:56.958408 2026] [:error] [pid 23167:tid 23192] [client 74.248.20.136:63681] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acjwJBIAHJCFaHff3_dxdQAAAdY"]
[Sun Mar 29 17:25:57.582090 2026] [:error] [pid 32255:tid 32310] [client 74.248.20.136:64099] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acjwJWnfn-AtRoMbquxxoQAAAFM"]
[Sun Mar 29 17:25:58.179485 2026] [:error] [pid 23284:tid 23289] [client 74.248.20.136:64656] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acjwJozBujdPHsq7wyQKmQAAAoM"]
[Sun Mar 29 17:25:58.782574 2026] [:error] [pid 32359:tid 32366] [client 74.248.20.136:65174] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acjwJgMb8G3UzfQP3WgQygAAAMU"]
[Sun Mar 29 17:25:59.379723 2026] [:error] [pid 32257:tid 32332] [client 74.248.20.136:64592] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acjwJyE3TArOFrUtgWq4fgAAAI4"]
[Sun Mar 29 17:26:00.338105 2026] [:error] [pid 23250:tid 23267] [client 74.248.20.136:64841] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acjwKJxrpj-dQjy1cvrRzAAAAk8"]
[Sun Mar 29 17:26:01.845954 2026] [:error] [pid 32359:tid 32379] [client 74.248.20.136:63223] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acjwKQMb8G3UzfQP3WgQzQAAANI"]
[Sun Mar 29 17:26:02.593782 2026] [:error] [pid 23250:tid 23263] [client 74.248.20.136:65127] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acjwKpxrpj-dQjy1cvrR0wAAAks"]
[Sun Mar 29 17:26:03.177635 2026] [:error] [pid 23250:tid 23266] [client 74.248.20.136:64401] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acjwK5xrpj-dQjy1cvrR1QAAAk4"]
[Sun Mar 29 17:26:04.882667 2026] [:error] [pid 23250:tid 23269] [client 74.248.20.136:64333] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acjwLJxrpj-dQjy1cvrR2gAAAlE"]
[Sun Mar 29 17:26:05.589066 2026] [:error] [pid 23168:tid 23207] [client 74.248.20.136:65155] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acjwLWP8p0yRL8ot_29VwQAAAgo"]
[Sun Mar 29 17:26:06.182122 2026] [:error] [pid 23167:tid 23185] [client 74.248.20.136:64147] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acjwLhIAHJCFaHff3_dxfQAAAc8"]
[Sun Mar 29 17:26:06.854631 2026] [:error] [pid 32254:tid 32281] [client 74.248.20.136:64625] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acjwLqug2IHuyGgCTn9ErQAAABE"]
[Sun Mar 29 17:26:07.569306 2026] [:error] [pid 23167:tid 23175] [client 74.248.20.136:65192] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acjwLxIAHJCFaHff3_dxhAAAAcU"]
[Sun Mar 29 17:26:08.406765 2026] [:error] [pid 23167:tid 23194] [client 74.248.20.136:65466] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acjwMBIAHJCFaHff3_dxhgAAAdg"]
[Sun Mar 29 17:26:09.799268 2026] [:error] [pid 32255:tid 32307] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Mar 29 17:26:10.119151 2026] [:error] [pid 32255:tid 32296] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Mar 29 17:26:10.461031 2026] [:error] [pid 32255:tid 32310] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Mar 29 17:26:10.749964 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Sun Mar 29 17:26:11.037172 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Sun Mar 29 17:26:11.296760 2026] [:error] [pid 32255:tid 32309] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/swallowable.php
[Sun Mar 29 17:26:11.559569 2026] [:error] [pid 32255:tid 32305] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Sun Mar 29 17:26:12.506899 2026] [:error] [pid 32255:tid 32307] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Mar 29 17:26:12.764619 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sun Mar 29 17:26:13.066986 2026] [:error] [pid 32255:tid 32314] [client 74.248.20.136:62057] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sun Mar 29 17:26:13.322191 2026] [:error] [pid 32255:tid 32294] [client 74.248.20.136:62057] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "acjwNWnfn-AtRoMbquxx0wAAAEM"]
[Sun Mar 29 17:26:13.973159 2026] [:error] [pid 23167:tid 23182] [client 74.248.20.136:65375] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "acjwNRIAHJCFaHff3_dxkQAAAcw"]
[Sun Mar 29 17:26:14.721480 2026] [:error] [pid 23167:tid 23185] [client 74.248.20.136:65095] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "acjwNhIAHJCFaHff3_dxkwAAAc8"]
[Sun Mar 29 17:26:15.608444 2026] [:error] [pid 23284:tid 23297] [client 74.248.20.136:63658] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "acjwN4zBujdPHsq7wyQKtAAAAos"]
[Sun Mar 29 17:26:16.220296 2026] [:error] [pid 32257:tid 32333] [client 74.248.20.136:64179] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "acjwOCE3TArOFrUtgWq4iwAAAI8"]
[Sun Mar 29 17:26:17.102550 2026] [:error] [pid 23250:tid 23272] [client 74.248.20.136:65120] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "acjwOZxrpj-dQjy1cvrR6AAAAlQ"]
[Sun Mar 29 17:26:17.999195 2026] [:error] [pid 32257:tid 32331] [client 74.248.20.136:63632] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "acjwOSE3TArOFrUtgWq4jwAAAI0"]
[Sun Mar 29 17:26:18.790369 2026] [:error] [pid 32255:tid 32299] [client 74.248.20.136:63644] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "acjwOmnfn-AtRoMbquxyAgAAAEg"]
[Sun Mar 29 17:26:19.331243 2026] [:error] [pid 23284:tid 23288] [client 74.248.20.136:64641] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acjwO4zBujdPHsq7wyQKuQAAAoI"]
[Sun Mar 29 17:26:20.166773 2026] [:error] [pid 32255:tid 32301] [client 74.248.20.136:64678] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acjwPGnfn-AtRoMbquxyDgAAAEo"]
[Sun Mar 29 17:26:20.758508 2026] [:error] [pid 32255:tid 32306] [client 74.248.20.136:64442] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acjwPGnfn-AtRoMbquxyFgAAAE8"]
[Sun Mar 29 17:26:21.533377 2026] [:error] [pid 23284:tid 23306] [client 74.248.20.136:63404] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acjwPYzBujdPHsq7wyQKwwAAApQ"]
[Sun Mar 29 17:26:22.219630 2026] [:error] [pid 23284:tid 23297] [client 74.248.20.136:64084] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "acjwPozBujdPHsq7wyQKxgAAAos"]
[Sun Mar 29 17:26:22.945344 2026] [:error] [pid 32255:tid 32315] [client 74.248.20.136:65464] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "acjwPmnfn-AtRoMbquxyKAAAAFg"]
[Sun Mar 29 17:26:23.662206 2026] [:error] [pid 32255:tid 32312] [client 74.248.20.136:64113] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "acjwP2nfn-AtRoMbquxyLwAAAFU"]
[Sun Mar 29 17:26:24.482707 2026] [:error] [pid 23284:tid 23300] [client 74.248.20.136:63463] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "acjwQIzBujdPHsq7wyQKywAAAo4"]
[Sun Mar 29 17:26:25.492709 2026] [:error] [pid 1524:tid 1530] [client 74.248.20.136:65105] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acjwQVoaWSl2asqQCh9qjgAAAQI"]
[Sun Mar 29 17:26:26.489679 2026] [:error] [pid 32257:tid 32337] [client 74.248.20.136:64366] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acjwQiE3TArOFrUtgWq4mwAAAJM"]
[Sun Mar 29 17:26:27.055353 2026] [:error] [pid 32255:tid 32312] [client 74.248.20.136:63655] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acjwQ2nfn-AtRoMbquxyOwAAAFU"]
[Sun Mar 29 17:26:28.017530 2026] [:error] [pid 32255:tid 32302] [client 74.248.20.136:62858] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "acjwRGnfn-AtRoMbquxyQwAAAEs"]
[Sun Mar 29 17:26:28.933940 2026] [:error] [pid 23167:tid 23177] [client 74.248.20.136:64588] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acjwRBIAHJCFaHff3_dxmAAAAcc"]
[Sun Mar 29 17:26:29.560489 2026] [:error] [pid 32255:tid 32312] [client 74.248.20.136:64405] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acjwRWnfn-AtRoMbquxySwAAAFU"]
[Sun Mar 29 17:26:30.282117 2026] [:error] [pid 32255:tid 32310] [client 74.248.20.136:64890] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acjwRmnfn-AtRoMbquxyVAAAAFM"]
[Sun Mar 29 17:26:31.030195 2026] [:error] [pid 23250:tid 23264] [client 74.248.20.136:64162] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "acjwR5xrpj-dQjy1cvrR8QAAAkw"]
[Sun Mar 29 17:26:31.719605 2026] [:error] [pid 23168:tid 23210] [client 74.248.20.136:64900] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acjwR2P8p0yRL8ot_29V0AAAAg0"]
[Sun Mar 29 17:26:32.498841 2026] [:error] [pid 32255:tid 32291] [client 74.248.20.136:62674] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acjwSGnfn-AtRoMbquxyWQAAAEA"]
[Sun Mar 29 17:26:33.232173 2026] [:error] [pid 23284:tid 23306] [client 74.248.20.136:63925] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acjwSYzBujdPHsq7wyQK1wAAApQ"]
[Sun Mar 29 17:26:33.929406 2026] [:error] [pid 23137:tid 23148] [client 74.248.20.136:63690] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acjwSRaWQa7LdZ_qGFbWkwAAAYk"]
[Sun Mar 29 17:26:34.798420 2026] [:error] [pid 23284:tid 23301] [client 74.248.20.136:64874] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acjwSozBujdPHsq7wyQK2gAAAo8"]
[Sun Mar 29 17:26:38.787892 2026] [:error] [pid 23284:tid 23306] [client 74.248.20.136:65139] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acjwTozBujdPHsq7wyQK8QAAApQ"]
[Sun Mar 29 17:26:39.566771 2026] [:error] [pid 32255:tid 32307] [client 74.248.20.136:65151] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acjwT2nfn-AtRoMbquxylAAAAFA"]
[Sun Mar 29 17:26:40.348917 2026] [:error] [pid 32255:tid 32311] [client 74.248.20.136:64364] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acjwUGnfn-AtRoMbquxynAAAAFQ"]
[Sun Mar 29 17:26:40.991104 2026] [:error] [pid 32255:tid 32293] [client 74.248.20.136:65211] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acjwUGnfn-AtRoMbquxyogAAAEI"]
[Sun Mar 29 17:26:42.597838 2026] [:error] [pid 32255:tid 32293] [client 74.248.20.136:63374] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acjwUmnfn-AtRoMbquxyrAAAAEI"]
[Sun Mar 29 17:26:43.473919 2026] [:error] [pid 23250:tid 23269] [client 74.248.20.136:65406] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acjwU5xrpj-dQjy1cvrR_QAAAlE"]
[Sun Mar 29 17:26:44.119519 2026] [:error] [pid 23167:tid 23180] [client 74.248.20.136:64416] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acjwVBIAHJCFaHff3_dxqAAAAco"]
[Sun Mar 29 17:26:45.356709 2026] [:error] [pid 32257:tid 32324] [client 74.248.20.136:63691] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acjwVSE3TArOFrUtgWq4rQAAAIY"]
[Sun Mar 29 17:26:45.990066 2026] [:error] [pid 32255:tid 32293] [client 74.248.20.136:64932] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acjwVWnfn-AtRoMbquxyuAAAAEI"]
[Sun Mar 29 17:26:46.872400 2026] [:error] [pid 23284:tid 23309] [client 74.248.20.136:64943] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acjwVozBujdPHsq7wyQK-AAAApc"]
[Sun Mar 29 17:26:47.901208 2026] [:error] [pid 23250:tid 23273] [client 74.248.20.136:63896] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acjwV5xrpj-dQjy1cvrSAAAAAlU"]
[Sun Mar 29 17:26:53.547712 2026] [:error] [pid 23284:tid 23308] [client 74.248.20.136:65457] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acjwXYzBujdPHsq7wyQLAQAAApY"]
[Sun Mar 29 17:26:54.923822 2026] [:error] [pid 23168:tid 23209] [client 74.248.20.136:64589] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acjwXmP8p0yRL8ot_29V5QAAAgw"]
[Sun Mar 29 17:26:55.625276 2026] [:error] [pid 32255:tid 32297] [client 74.248.20.136:64411] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acjwX2nfn-AtRoMbquxy5AAAAEY"]
[Sun Mar 29 17:26:56.203022 2026] [:error] [pid 32255:tid 32294] [client 74.248.20.136:64666] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acjwYGnfn-AtRoMbquxy5wAAAEM"]
[Sun Mar 29 17:26:56.969609 2026] [:error] [pid 23167:tid 23191] [client 74.248.20.136:65432] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acjwYBIAHJCFaHff3_dxtwAAAdU"]
[Sun Mar 29 17:26:57.817229 2026] [:error] [pid 23284:tid 23302] [client 74.248.20.136:63906] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acjwYYzBujdPHsq7wyQLAwAAApA"]
[Sun Mar 29 17:27:01.781429 2026] [:error] [pid 23250:tid 23261] [client 74.248.20.136:65449] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acjwZZxrpj-dQjy1cvrSCwAAAkk"]
[Sun Mar 29 17:27:03.261158 2026] [:error] [pid 23167:tid 23182] [client 74.248.20.136:64155] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acjwZxIAHJCFaHff3_dxvgAAAcw"]
[Sun Mar 29 17:27:03.986221 2026] [:error] [pid 23284:tid 23292] [client 74.248.20.136:64325] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acjwZ4zBujdPHsq7wyQLDgAAAoY"]
[Sun Mar 29 17:27:04.780523 2026] [:error] [pid 32255:tid 32308] [client 74.248.20.136:64657] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acjwaGnfn-AtRoMbquxy-gAAAFE"]
[Sun Mar 29 17:27:05.563700 2026] [:error] [pid 23168:tid 23216] [client 74.248.20.136:64682] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acjwaWP8p0yRL8ot_29V7AAAAhM"]
[Sun Mar 29 17:27:06.992384 2026] [:error] [pid 32257:tid 32320] [client 74.248.20.136:65132] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acjwaiE3TArOFrUtgWq4vgAAAII"]
[Sun Mar 29 17:27:08.855015 2026] [:error] [pid 23284:tid 23299] [client 74.248.20.136:63203] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acjwbIzBujdPHsq7wyQLEgAAAo0"]
[Sun Mar 29 17:27:10.046631 2026] [:error] [pid 23167:tid 23187] [client 74.248.20.136:63367] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acjwbhIAHJCFaHff3_dxzgAAAdE"]
[Sun Mar 29 17:27:10.747043 2026] [:error] [pid 23250:tid 23257] [client 74.248.20.136:64139] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acjwbpxrpj-dQjy1cvrSFgAAAkU"]
[Sun Mar 29 17:27:11.390645 2026] [:error] [pid 23250:tid 23264] [client 74.248.20.136:64688] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acjwb5xrpj-dQjy1cvrSGgAAAkw"]
[Sun Mar 29 17:27:12.663722 2026] [:error] [pid 32257:tid 32319] [client 74.248.20.136:64839] [client 74.248.20.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "acjwcCE3TArOFrUtgWq4yAAAAIE"]
[Sun Mar 29 17:27:14.260038 2026] [:error] [pid 32359:tid 32383] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Sun Mar 29 17:27:15.799949 2026] [:error] [pid 32359:tid 32372] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Sun Mar 29 17:27:16.119537 2026] [:error] [pid 32359:tid 32362] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Mar 29 17:27:16.488281 2026] [:error] [pid 32359:tid 32362] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Mar 29 17:27:17.086646 2026] [:error] [pid 32359:tid 32368] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 29 17:27:17.423305 2026] [:error] [pid 32359:tid 32366] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Sun Mar 29 17:27:17.713512 2026] [:error] [pid 32359:tid 32379] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Mar 29 17:27:18.006021 2026] [:error] [pid 32359:tid 32361] [client 74.248.20.136:62602] File does not exist: /usr/local/apache/htdocs/suspended-page/aa2.php
[Sun Mar 29 19:59:23.011276 2026] [:error] [pid 23168:tid 23208] [client 1.15.52.154:48832] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ackUG2P8p0yRL8ot_2977AAAAgs"]
[Sun Mar 29 21:01:14.451772 2026] [:error] [pid 23284:tid 23306] [client 165.245.188.9:54710] [client 165.245.188.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.245.188.9, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ackimozBujdPHsq7wyR8agAAApQ"]
[Sun Mar 29 21:01:14.455948 2026] [:error] [pid 23284:tid 23306] [client 165.245.188.9:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 29 23:01:14.053891 2026] [:error] [pid 32255:tid 32291] [client 68.155.154.154:5377] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Mar 29 23:01:14.253112 2026] [:error] [pid 32255:tid 32300] [client 68.155.154.154:5377] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Mar 29 23:01:14.650089 2026] [:error] [pid 32255:tid 32295] [client 68.155.154.154:5377] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Mar 29 23:01:14.844762 2026] [:error] [pid 32255:tid 32306] [client 68.155.154.154:5377] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 29 23:01:15.234479 2026] [:error] [pid 32255:tid 32296] [client 68.155.154.154:5377] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun Mar 29 23:01:15.430596 2026] [:error] [pid 32255:tid 32301] [client 68.155.154.154:5377] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 29 23:01:15.624538 2026] [:error] [pid 32255:tid 32293] [client 68.155.154.154:5377] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Mar 29 23:01:16.009465 2026] [:error] [pid 32255:tid 32307] [client 68.155.154.154:5377] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack-vGnfn-AtRoMbquwMVwAAAFA"]
[Sun Mar 29 23:01:16.787048 2026] [:error] [pid 23168:tid 23213] [client 68.155.154.154:14580] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack-vGP8p0yRL8ot_2-0EQAAAhA"]
[Sun Mar 29 23:01:17.578080 2026] [:error] [pid 23250:tid 23274] [client 68.155.154.154:5428] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack-vZxrpj-dQjy1cvoRtgAAAlY"]
[Sun Mar 29 23:01:18.355050 2026] [:error] [pid 32257:tid 32335] [client 68.155.154.154:31235] [client 68.155.154.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack-viE3TArOFrUtgWpbLwAAAJE"]
[Mon Mar 30 00:10:54.915412 2026] [:error] [pid 23284:tid 23295] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Mon Mar 30 00:10:55.126420 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Mon Mar 30 00:10:55.336211 2026] [:error] [pid 23284:tid 23292] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Mon Mar 30 00:10:55.556315 2026] [:error] [pid 23284:tid 23294] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Mon Mar 30 00:10:55.775046 2026] [:error] [pid 23284:tid 23306] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Mon Mar 30 00:10:55.983962 2026] [:error] [pid 23284:tid 23286] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Mon Mar 30 00:10:56.196150 2026] [:error] [pid 23284:tid 23308] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Mon Mar 30 00:10:56.410215 2026] [:error] [pid 23284:tid 23310] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Mon Mar 30 00:10:56.622478 2026] [:error] [pid 23284:tid 23305] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Mon Mar 30 00:10:56.849579 2026] [:error] [pid 23284:tid 23307] [client 20.65.118.88:28994] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Mon Mar 30 00:10:57.056952 2026] [:error] [pid 23284:tid 23299] [client 20.65.118.88:28994] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclPEYzBujdPHsq7wyQPfAAAAo0"]
[Mon Mar 30 00:10:57.516490 2026] [:error] [pid 23168:tid 23204] [client 20.65.118.88:19746] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclPEWP8p0yRL8ot_2_O5AAAAgc"]
[Mon Mar 30 00:10:57.972213 2026] [:error] [pid 23168:tid 23217] [client 20.65.118.88:28200] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclPEWP8p0yRL8ot_2_O6AAAAhQ"]
[Mon Mar 30 00:10:58.402867 2026] [:error] [pid 23168:tid 23211] [client 20.65.118.88:19747] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclPEmP8p0yRL8ot_2_O6wAAAg4"]
[Mon Mar 30 00:10:58.851460 2026] [:error] [pid 23284:tid 23304] [client 20.65.118.88:38492] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclPEozBujdPHsq7wyQPhQAAApI"]
[Mon Mar 30 00:10:59.367578 2026] [:error] [pid 32257:tid 32342] [client 20.65.118.88:3231] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclPEyE3TArOFrUtgWqHQQAAAJg"]
[Mon Mar 30 00:10:59.804818 2026] [:error] [pid 23284:tid 23286] [client 20.65.118.88:42995] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclPE4zBujdPHsq7wyQPhwAAAoA"]
[Mon Mar 30 00:11:00.255399 2026] [:error] [pid 32255:tid 32295] [client 20.65.118.88:29001] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclPFGnfn-AtRoMbquwvvgAAAEQ"]
[Mon Mar 30 00:11:00.663506 2026] [:error] [pid 32255:tid 32310] [client 20.65.118.88:19772] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclPFGnfn-AtRoMbquwvwAAAAFM"]
[Mon Mar 30 00:11:01.110407 2026] [:error] [pid 23284:tid 23296] [client 20.65.118.88:42989] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclPFYzBujdPHsq7wyQPjAAAAoo"]
[Mon Mar 30 00:11:01.573603 2026] [:error] [pid 23284:tid 23301] [client 20.65.118.88:21334] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclPFYzBujdPHsq7wyQPjwAAAo8"]
[Mon Mar 30 00:11:01.976664 2026] [:error] [pid 32254:tid 32266] [client 20.65.118.88:42978] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclPFaug2IHuyGgCTn9rdAAAAAI"]
[Mon Mar 30 00:11:02.413837 2026] [:error] [pid 32254:tid 32281] [client 20.65.118.88:43002] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclPFqug2IHuyGgCTn9reAAAABE"]
[Mon Mar 30 00:11:02.834642 2026] [:error] [pid 32257:tid 32334] [client 20.65.118.88:21339] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclPFiE3TArOFrUtgWqHRgAAAJA"]
[Mon Mar 30 00:11:03.264671 2026] [:error] [pid 32257:tid 32342] [client 20.65.118.88:29050] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclPFyE3TArOFrUtgWqHTAAAAJg"]
[Mon Mar 30 00:11:03.690595 2026] [:error] [pid 32257:tid 32325] [client 20.65.118.88:29016] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclPFyE3TArOFrUtgWqHUAAAAIc"]
[Mon Mar 30 00:11:04.160554 2026] [:error] [pid 23284:tid 23288] [client 20.65.118.88:20267] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclPGIzBujdPHsq7wyQPlQAAAoI"]
[Mon Mar 30 00:11:04.585667 2026] [:error] [pid 23168:tid 23218] [client 20.65.118.88:22350] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclPGGP8p0yRL8ot_2_O8wAAAhU"]
[Mon Mar 30 00:11:05.026996 2026] [:error] [pid 23137:tid 23139] [client 20.65.118.88:29477] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclPGRaWQa7LdZ_qGFYSGgAAAYA"]
[Mon Mar 30 00:11:05.490176 2026] [:error] [pid 32255:tid 32296] [client 20.65.118.88:20053] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclPGWnfn-AtRoMbquwvxAAAAEU"]
[Mon Mar 30 00:11:05.911214 2026] [:error] [pid 23137:tid 23145] [client 20.65.118.88:32376] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclPGRaWQa7LdZ_qGFYSHAAAAYY"]
[Mon Mar 30 00:11:06.315059 2026] [:error] [pid 23168:tid 23197] [client 20.65.118.88:21357] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclPGmP8p0yRL8ot_2_O-AAAAgA"]
[Mon Mar 30 00:11:06.727636 2026] [:error] [pid 32255:tid 32311] [client 20.65.118.88:3202] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclPGmnfn-AtRoMbquwvzQAAAFQ"]
[Mon Mar 30 00:11:07.190699 2026] [:error] [pid 8818:tid 8826] [client 20.65.118.88:33963] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclPGyCDvotZNSF0FBoANQAAAUQ"]
[Mon Mar 30 00:11:07.595436 2026] [:error] [pid 23137:tid 23146] [client 20.65.118.88:20823] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclPGxaWQa7LdZ_qGFYSHQAAAYc"]
[Mon Mar 30 00:11:08.009158 2026] [:error] [pid 32257:tid 32336] [client 20.65.118.88:38490] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclPHCE3TArOFrUtgWqHYAAAAJI"]
[Mon Mar 30 00:11:08.431795 2026] [:error] [pid 23284:tid 23298] [client 20.65.118.88:38483] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclPHIzBujdPHsq7wyQPmQAAAow"]
[Mon Mar 30 00:11:08.849355 2026] [:error] [pid 23250:tid 23257] [client 20.65.118.88:38477] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclPHJxrpj-dQjy1cvof5wAAAkU"]
[Mon Mar 30 00:11:09.273951 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:26153] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclPHYzBujdPHsq7wyQPngAAAoQ"]
[Mon Mar 30 00:11:09.682734 2026] [:error] [pid 32255:tid 32291] [client 20.65.118.88:33949] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclPHWnfn-AtRoMbquwv1wAAAEA"]
[Mon Mar 30 00:11:10.103847 2026] [:error] [pid 32255:tid 32302] [client 20.65.118.88:19762] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclPHmnfn-AtRoMbquwv2AAAAEs"]
[Mon Mar 30 00:11:10.566868 2026] [:error] [pid 32257:tid 32327] [client 20.65.118.88:32365] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclPHiE3TArOFrUtgWqHZQAAAIk"]
[Mon Mar 30 00:11:11.004927 2026] [:error] [pid 32257:tid 32328] [client 20.65.118.88:19745] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclPHyE3TArOFrUtgWqHaAAAAIo"]
[Mon Mar 30 00:11:11.438189 2026] [:error] [pid 8818:tid 8824] [client 20.65.118.88:28171] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclPHyCDvotZNSF0FBoANwAAAUI"]
[Mon Mar 30 00:11:11.886026 2026] [:error] [pid 32257:tid 32341] [client 20.65.118.88:43019] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclPHyE3TArOFrUtgWqHbAAAAJc"]
[Mon Mar 30 00:11:12.318440 2026] [:error] [pid 32257:tid 32323] [client 20.65.118.88:32360] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclPICE3TArOFrUtgWqHcAAAAIU"]
[Mon Mar 30 00:11:12.803245 2026] [:error] [pid 23168:tid 23208] [client 20.65.118.88:22393] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclPIGP8p0yRL8ot_2_O_AAAAgs"]
[Mon Mar 30 00:11:13.256866 2026] [:error] [pid 23168:tid 23209] [client 20.65.118.88:3211] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclPIWP8p0yRL8ot_2_O_QAAAgw"]
[Mon Mar 30 00:11:13.701338 2026] [:error] [pid 23168:tid 23217] [client 20.65.118.88:20862] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclPIWP8p0yRL8ot_2_PAQAAAhQ"]
[Mon Mar 30 00:11:14.134025 2026] [:error] [pid 32257:tid 32324] [client 20.65.118.88:29501] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclPIiE3TArOFrUtgWqHdQAAAIY"]
[Mon Mar 30 00:11:14.541098 2026] [:error] [pid 8818:tid 8837] [client 20.65.118.88:3900] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclPIiCDvotZNSF0FBoAOQAAAU8"]
[Mon Mar 30 00:11:14.953200 2026] [:error] [pid 23168:tid 23202] [client 20.65.118.88:3248] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclPImP8p0yRL8ot_2_PBwAAAgU"]
[Mon Mar 30 00:11:15.386733 2026] [:error] [pid 8818:tid 8845] [client 20.65.118.88:33881] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclPIyCDvotZNSF0FBoAOwAAAVc"]
[Mon Mar 30 00:11:15.824129 2026] [:error] [pid 23167:tid 23187] [client 20.65.118.88:21316] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclPIxIAHJCFaHff3_flawAAAdE"]
[Mon Mar 30 00:11:16.249890 2026] [:error] [pid 8818:tid 8834] [client 20.65.118.88:20093] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclPJCCDvotZNSF0FBoAPQAAAUw"]
[Mon Mar 30 00:11:16.649627 2026] [:error] [pid 23250:tid 23269] [client 20.65.118.88:29031] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclPJJxrpj-dQjy1cvof7gAAAlE"]
[Mon Mar 30 00:11:17.052592 2026] [:error] [pid 23168:tid 23200] [client 20.65.118.88:29010] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclPJWP8p0yRL8ot_2_PCQAAAgM"]
[Mon Mar 30 00:11:17.476851 2026] [:error] [pid 32255:tid 32303] [client 20.65.118.88:3868] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclPJWnfn-AtRoMbquwv5wAAAEw"]
[Mon Mar 30 00:11:17.926904 2026] [:error] [pid 32255:tid 32291] [client 20.65.118.88:22340] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclPJWnfn-AtRoMbquwv6AAAAEA"]
[Mon Mar 30 00:11:18.379004 2026] [:error] [pid 23168:tid 23206] [client 20.65.118.88:19741] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclPJmP8p0yRL8ot_2_PDgAAAgk"]
[Mon Mar 30 00:11:18.836683 2026] [:error] [pid 32255:tid 32307] [client 20.65.118.88:20041] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclPJmnfn-AtRoMbquwv8AAAAFA"]
[Mon Mar 30 00:11:19.260126 2026] [:error] [pid 32255:tid 32297] [client 20.65.118.88:43033] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclPJ2nfn-AtRoMbquwv9QAAAEY"]
[Mon Mar 30 00:11:19.679729 2026] [:error] [pid 23250:tid 23264] [client 20.65.118.88:19713] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclPJ5xrpj-dQjy1cvof8wAAAkw"]
[Mon Mar 30 00:11:20.089079 2026] [:error] [pid 23250:tid 23259] [client 20.65.118.88:20851] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclPKJxrpj-dQjy1cvof9QAAAkc"]
[Mon Mar 30 00:11:20.515042 2026] [:error] [pid 32257:tid 32332] [client 20.65.118.88:34241] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclPKCE3TArOFrUtgWqHhQAAAI4"]
[Mon Mar 30 00:11:20.957268 2026] [:error] [pid 23167:tid 23190] [client 20.65.118.88:34288] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclPKBIAHJCFaHff3_fleQAAAdQ"]
[Mon Mar 30 00:11:21.391020 2026] [:error] [pid 23167:tid 23187] [client 20.65.118.88:21327] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclPKRIAHJCFaHff3_flfAAAAdE"]
[Mon Mar 30 00:11:21.810932 2026] [:error] [pid 23284:tid 23291] [client 20.65.118.88:42293] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclPKYzBujdPHsq7wyQPvgAAAoU"]
[Mon Mar 30 00:11:22.227331 2026] [:error] [pid 23284:tid 23287] [client 20.65.118.88:28188] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclPKozBujdPHsq7wyQPwgAAAoE"]
[Mon Mar 30 00:11:22.656259 2026] [:error] [pid 23284:tid 23297] [client 20.65.118.88:28207] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclPKozBujdPHsq7wyQPxgAAAos"]
[Mon Mar 30 00:11:23.096280 2026] [:error] [pid 23284:tid 23304] [client 20.65.118.88:38478] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclPK4zBujdPHsq7wyQPxwAAApI"]
[Mon Mar 30 00:11:23.555132 2026] [:error] [pid 32257:tid 32329] [client 20.65.118.88:29034] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclPKyE3TArOFrUtgWqHigAAAIs"]
[Mon Mar 30 00:11:24.034254 2026] [:error] [pid 23168:tid 23202] [client 20.65.118.88:21344] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclPLGP8p0yRL8ot_2_PEQAAAgU"]
[Mon Mar 30 00:11:24.484394 2026] [:error] [pid 23284:tid 23307] [client 20.65.118.88:3893] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclPLIzBujdPHsq7wyQPzQAAApU"]
[Mon Mar 30 00:11:24.912814 2026] [:error] [pid 23168:tid 23205] [client 20.65.118.88:19735] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclPLGP8p0yRL8ot_2_PEgAAAgg"]
[Mon Mar 30 00:11:25.400417 2026] [:error] [pid 23284:tid 23301] [client 20.65.118.88:38505] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclPLYzBujdPHsq7wyQPzwAAAo8"]
[Mon Mar 30 00:11:25.819679 2026] [:error] [pid 23168:tid 23197] [client 20.65.118.88:29029] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclPLWP8p0yRL8ot_2_PFAAAAgA"]
[Mon Mar 30 00:11:26.273112 2026] [:error] [pid 32257:tid 32323] [client 20.65.118.88:20835] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclPLiE3TArOFrUtgWqHnAAAAIU"]
[Mon Mar 30 00:11:26.680495 2026] [:error] [pid 23284:tid 23299] [client 20.65.118.88:28172] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclPLozBujdPHsq7wyQP2gAAAo0"]
[Mon Mar 30 00:11:27.089854 2026] [:error] [pid 23284:tid 23305] [client 20.65.118.88:33905] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclPL4zBujdPHsq7wyQP3QAAApM"]
[Mon Mar 30 00:11:27.523031 2026] [:error] [pid 23167:tid 23184] [client 20.65.118.88:20813] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclPLxIAHJCFaHff3_fliQAAAc4"]
[Mon Mar 30 00:11:27.964552 2026] [:error] [pid 8818:tid 8830] [client 20.65.118.88:38486] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclPLyCDvotZNSF0FBoARAAAAUg"]
[Mon Mar 30 00:11:28.410590 2026] [:error] [pid 23284:tid 23293] [client 20.65.118.88:21313] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclPMIzBujdPHsq7wyQP6AAAAoc"]
[Mon Mar 30 00:11:28.823413 2026] [:error] [pid 32257:tid 32319] [client 20.65.118.88:42252] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclPMCE3TArOFrUtgWqHogAAAIE"]
[Mon Mar 30 00:11:29.260407 2026] [:error] [pid 32257:tid 32342] [client 20.65.118.88:43010] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclPMSE3TArOFrUtgWqHowAAAJg"]
[Mon Mar 30 00:11:29.659017 2026] [:error] [pid 23168:tid 23200] [client 20.65.118.88:28163] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclPMWP8p0yRL8ot_2_PFwAAAgM"]
[Mon Mar 30 00:11:30.113336 2026] [:error] [pid 23284:tid 23308] [client 20.65.118.88:34274] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclPMozBujdPHsq7wyQP7QAAApY"]
[Mon Mar 30 00:11:30.572337 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:29442] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclPMozBujdPHsq7wyQP8wAAAoQ"]
[Mon Mar 30 00:11:31.020318 2026] [:error] [pid 32255:tid 32291] [client 20.65.118.88:29451] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclPM2nfn-AtRoMbquwwAQAAAEA"]
[Mon Mar 30 00:11:31.464801 2026] [:error] [pid 23167:tid 23186] [client 20.65.118.88:43016] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclPMxIAHJCFaHff3_fllgAAAdA"]
[Mon Mar 30 00:11:31.863800 2026] [:error] [pid 32359:tid 32374] [client 20.65.118.88:21817] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclPMwMb8G3UzfQP3WhBhQAAAM0"]
[Mon Mar 30 00:11:32.308201 2026] [:error] [pid 23284:tid 23287] [client 20.65.118.88:42246] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclPNIzBujdPHsq7wyQP-QAAAoE"]
[Mon Mar 30 00:11:32.720905 2026] [:error] [pid 23284:tid 23304] [client 20.65.118.88:33913] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclPNIzBujdPHsq7wyQP_QAAApI"]
[Mon Mar 30 00:11:33.174879 2026] [:error] [pid 32359:tid 32385] [client 20.65.118.88:28175] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclPNQMb8G3UzfQP3WhBiAAAANg"]
[Mon Mar 30 00:11:33.581583 2026] [:error] [pid 32255:tid 32291] [client 20.65.118.88:19730] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclPNWnfn-AtRoMbquwwDQAAAEA"]
[Mon Mar 30 00:11:34.020475 2026] [:error] [pid 23168:tid 23218] [client 20.65.118.88:20802] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclPNmP8p0yRL8ot_2_PHAAAAhU"]
[Mon Mar 30 00:11:34.458280 2026] [:error] [pid 32359:tid 32381] [client 20.65.118.88:29494] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclPNgMb8G3UzfQP3WhBiQAAANQ"]
[Mon Mar 30 00:11:34.927585 2026] [:error] [pid 8818:tid 8846] [client 20.65.118.88:33877] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclPNiCDvotZNSF0FBoATgAAAVg"]
[Mon Mar 30 00:11:35.360920 2026] [:error] [pid 23284:tid 23289] [client 20.65.118.88:20048] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclPN4zBujdPHsq7wyQQBAAAAoM"]
[Mon Mar 30 00:11:35.781569 2026] [:error] [pid 23284:tid 23308] [client 20.65.118.88:21317] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclPN4zBujdPHsq7wyQQCAAAApY"]
[Mon Mar 30 00:11:36.206291 2026] [:error] [pid 32257:tid 32338] [client 20.65.118.88:42985] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclPOCE3TArOFrUtgWqHqwAAAJQ"]
[Mon Mar 30 00:11:36.620898 2026] [:error] [pid 32257:tid 32322] [client 20.65.118.88:20044] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclPOCE3TArOFrUtgWqHrAAAAIQ"]
[Mon Mar 30 00:11:37.046956 2026] [:error] [pid 32257:tid 32336] [client 20.65.118.88:29002] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclPOSE3TArOFrUtgWqHsQAAAJI"]
[Mon Mar 30 00:11:37.457859 2026] [:error] [pid 32257:tid 32335] [client 20.65.118.88:43054] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclPOSE3TArOFrUtgWqHswAAAJE"]
[Mon Mar 30 00:11:37.920611 2026] [:error] [pid 8818:tid 8836] [client 20.65.118.88:28217] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclPOSCDvotZNSF0FBoAUgAAAU4"]
[Mon Mar 30 00:11:38.331363 2026] [:error] [pid 32255:tid 32295] [client 20.65.118.88:32382] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclPOmnfn-AtRoMbquwwGAAAAEQ"]
[Mon Mar 30 00:11:38.762519 2026] [:error] [pid 32255:tid 32309] [client 20.65.118.88:3876] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclPOmnfn-AtRoMbquwwGwAAAFI"]
[Mon Mar 30 00:11:39.196058 2026] [:error] [pid 32255:tid 32293] [client 20.65.118.88:29448] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclPO2nfn-AtRoMbquwwHgAAAEI"]
[Mon Mar 30 00:11:39.605327 2026] [:error] [pid 32255:tid 32308] [client 20.65.118.88:29475] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclPO2nfn-AtRoMbquwwIwAAAFE"]
[Mon Mar 30 00:11:40.083034 2026] [:error] [pid 32255:tid 32305] [client 20.65.118.88:28191] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclPPGnfn-AtRoMbquwwLAAAAE4"]
[Mon Mar 30 00:11:40.546538 2026] [:error] [pid 32257:tid 32335] [client 20.65.118.88:42300] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclPPCE3TArOFrUtgWqHxAAAAJE"]
[Mon Mar 30 00:11:40.966414 2026] [:error] [pid 23284:tid 23308] [client 20.65.118.88:42946] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclPPIzBujdPHsq7wyQQFgAAApY"]
[Mon Mar 30 00:11:41.386690 2026] [:error] [pid 32255:tid 32294] [client 20.65.118.88:20095] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclPPWnfn-AtRoMbquwwMwAAAEM"]
[Mon Mar 30 00:11:41.818111 2026] [:error] [pid 32255:tid 32310] [client 20.65.118.88:21322] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclPPWnfn-AtRoMbquwwNgAAAFM"]
[Mon Mar 30 00:11:42.283890 2026] [:error] [pid 23167:tid 23182] [client 20.65.118.88:34290] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPPhIAHJCFaHff3_flnQAAAcw"]
[Mon Mar 30 00:11:42.712994 2026] [:error] [pid 23168:tid 23216] [client 20.65.118.88:20818] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPPmP8p0yRL8ot_2_PJAAAAhM"]
[Mon Mar 30 00:11:43.148544 2026] [:error] [pid 32257:tid 32322] [client 20.65.118.88:33971] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPPyE3TArOFrUtgWqH1QAAAIQ"]
[Mon Mar 30 00:11:43.577885 2026] [:error] [pid 23284:tid 23295] [client 20.65.118.88:21369] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPP4zBujdPHsq7wyQQIwAAAok"]
[Mon Mar 30 00:11:44.025552 2026] [:error] [pid 23168:tid 23200] [client 20.65.118.88:3853] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclPQGP8p0yRL8ot_2_PKAAAAgM"]
[Mon Mar 30 00:11:44.433405 2026] [:error] [pid 32257:tid 32326] [client 20.65.118.88:43034] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclPQCE3TArOFrUtgWqH4AAAAIg"]
[Mon Mar 30 00:11:44.855230 2026] [:error] [pid 23284:tid 23306] [client 20.65.118.88:33968] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclPQIzBujdPHsq7wyQQJAAAApQ"]
[Mon Mar 30 00:11:45.301669 2026] [:error] [pid 32257:tid 32327] [client 20.65.118.88:22388] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclPQSE3TArOFrUtgWqH5wAAAIk"]
[Mon Mar 30 00:11:45.718790 2026] [:error] [pid 8818:tid 8828] [client 20.65.118.88:29465] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclPQSCDvotZNSF0FBoAVgAAAUY"]
[Mon Mar 30 00:11:46.167998 2026] [:error] [pid 8818:tid 8845] [client 20.65.118.88:20080] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclPQiCDvotZNSF0FBoAVwAAAVc"]
[Mon Mar 30 00:11:46.579051 2026] [:error] [pid 32257:tid 32326] [client 20.65.118.88:33876] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclPQiE3TArOFrUtgWqH6wAAAIg"]
[Mon Mar 30 00:11:46.987310 2026] [:error] [pid 32257:tid 32342] [client 20.65.118.88:19714] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclPQiE3TArOFrUtgWqH7gAAAJg"]
[Mon Mar 30 00:11:47.444122 2026] [:error] [pid 32257:tid 32321] [client 20.65.118.88:19775] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclPQyE3TArOFrUtgWqH8gAAAIM"]
[Mon Mar 30 00:11:47.863073 2026] [:error] [pid 32257:tid 32333] [client 20.65.118.88:32370] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclPQyE3TArOFrUtgWqH9QAAAI8"]
[Mon Mar 30 00:11:48.299703 2026] [:error] [pid 23284:tid 23288] [client 20.65.118.88:34242] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclPRIzBujdPHsq7wyQQLQAAAoI"]
[Mon Mar 30 00:11:48.724143 2026] [:error] [pid 32359:tid 32371] [client 20.65.118.88:24175] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclPRAMb8G3UzfQP3WhBjwAAAMo"]
[Mon Mar 30 00:11:49.143251 2026] [:error] [pid 23168:tid 23216] [client 20.65.118.88:19721] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclPRWP8p0yRL8ot_2_PMQAAAhM"]
[Mon Mar 30 00:11:49.578249 2026] [:error] [pid 23167:tid 23175] [client 20.65.118.88:19720] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclPRRIAHJCFaHff3_floQAAAcU"]
[Mon Mar 30 00:11:50.017648 2026] [:error] [pid 8818:tid 8834] [client 20.65.118.88:32344] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclPRiCDvotZNSF0FBoAWgAAAUw"]
[Mon Mar 30 00:11:50.504779 2026] [:error] [pid 32257:tid 32326] [client 20.65.118.88:22337] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclPRiE3TArOFrUtgWqIBwAAAIg"]
[Mon Mar 30 00:11:50.959644 2026] [:error] [pid 8818:tid 8831] [client 20.65.118.88:32376] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclPRiCDvotZNSF0FBoAXAAAAUk"]
[Mon Mar 30 00:11:51.395171 2026] [:error] [pid 32257:tid 32322] [client 20.65.118.88:20846] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclPRyE3TArOFrUtgWqICwAAAIQ"]
[Mon Mar 30 00:11:51.816938 2026] [:error] [pid 32255:tid 32313] [client 20.65.118.88:3896] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclPR2nfn-AtRoMbquwwSAAAAFY"]
[Mon Mar 30 00:11:52.254920 2026] [:error] [pid 32255:tid 32304] [client 20.65.118.88:24128] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclPSGnfn-AtRoMbquwwSgAAAE0"]
[Mon Mar 30 00:11:52.683040 2026] [:error] [pid 23284:tid 23299] [client 20.65.118.88:20241] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclPSIzBujdPHsq7wyQQOwAAAo0"]
[Mon Mar 30 00:11:53.132541 2026] [:error] [pid 8818:tid 8835] [client 20.65.118.88:24619] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclPSSCDvotZNSF0FBoAYAAAAU0"]
[Mon Mar 30 00:11:53.562569 2026] [:error] [pid 23137:tid 23144] [client 20.65.118.88:34261] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclPSRaWQa7LdZ_qGFYSUgAAAYU"]
[Mon Mar 30 00:11:54.005051 2026] [:error] [pid 8818:tid 8846] [client 20.65.118.88:28209] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclPSiCDvotZNSF0FBoAYgAAAVg"]
[Mon Mar 30 00:11:54.437715 2026] [:error] [pid 32255:tid 32295] [client 20.65.118.88:29037] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclPSmnfn-AtRoMbquwwUAAAAEQ"]
[Mon Mar 30 00:11:54.874314 2026] [:error] [pid 23137:tid 23162] [client 20.65.118.88:3874] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclPShaWQa7LdZ_qGFYSVAAAAZc"]
[Mon Mar 30 00:11:55.311957 2026] [:error] [pid 23284:tid 23298] [client 20.65.118.88:42257] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclPS4zBujdPHsq7wyQQRAAAAow"]
[Mon Mar 30 00:11:55.772907 2026] [:error] [pid 23284:tid 23303] [client 20.65.118.88:32338] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclPS4zBujdPHsq7wyQQRwAAApE"]
[Mon Mar 30 00:11:56.219438 2026] [:error] [pid 32255:tid 32314] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Mon Mar 30 00:11:56.528112 2026] [:error] [pid 32255:tid 32314] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Mon Mar 30 00:11:56.731245 2026] [:error] [pid 32255:tid 32299] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Mon Mar 30 00:11:57.141464 2026] [:error] [pid 32255:tid 32306] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Mon Mar 30 00:11:57.344025 2026] [:error] [pid 32255:tid 32309] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Mon Mar 30 00:11:57.545120 2026] [:error] [pid 32255:tid 32310] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Mon Mar 30 00:11:57.747642 2026] [:error] [pid 32255:tid 32293] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/ws75.php
[Mon Mar 30 00:11:57.952294 2026] [:error] [pid 32255:tid 32312] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Mar 30 00:11:58.156075 2026] [:error] [pid 32255:tid 32315] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Mon Mar 30 00:11:58.361976 2026] [:error] [pid 32255:tid 32303] [client 20.65.118.88:20822] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Mon Mar 30 00:11:58.561026 2026] [:error] [pid 32255:tid 32295] [client 20.65.118.88:20822] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aclPTmnfn-AtRoMbquwwZQAAAEQ"]
[Mon Mar 30 00:11:58.991543 2026] [:error] [pid 32254:tid 32274] [client 20.65.118.88:29027] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aclPTqug2IHuyGgCTn9riwAAAAo"]
[Mon Mar 30 00:11:59.430371 2026] [:error] [pid 23167:tid 23182] [client 20.65.118.88:20072] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aclPTxIAHJCFaHff3_flsgAAAcw"]
[Mon Mar 30 00:11:59.852929 2026] [:error] [pid 23250:tid 23273] [client 20.65.118.88:21352] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aclPT5xrpj-dQjy1cvogDAAAAlU"]
[Mon Mar 30 00:12:00.281794 2026] [:error] [pid 23168:tid 23198] [client 20.65.118.88:42284] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aclPUGP8p0yRL8ot_2_PPQAAAgE"]
[Mon Mar 30 00:12:00.698654 2026] [:error] [pid 32257:tid 32338] [client 20.65.118.88:42956] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aclPUCE3TArOFrUtgWqIIgAAAJQ"]
[Mon Mar 30 00:12:01.131923 2026] [:error] [pid 32257:tid 32318] [client 20.65.118.88:3902] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aclPUSE3TArOFrUtgWqIJgAAAIA"]
[Mon Mar 30 00:12:01.559154 2026] [:error] [pid 32255:tid 32310] [client 20.65.118.88:33940] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aclPUWnfn-AtRoMbquwwaQAAAFM"]
[Mon Mar 30 00:12:01.978814 2026] [:error] [pid 32257:tid 32320] [client 20.65.118.88:29487] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aclPUSE3TArOFrUtgWqILQAAAII"]
[Mon Mar 30 00:12:02.391763 2026] [:error] [pid 23284:tid 23300] [client 20.65.118.88:42278] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aclPUozBujdPHsq7wyQQWwAAAo4"]
[Mon Mar 30 00:12:02.807989 2026] [:error] [pid 32255:tid 32301] [client 20.65.118.88:26132] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aclPUmnfn-AtRoMbquwwbgAAAEo"]
[Mon Mar 30 00:12:03.228524 2026] [:error] [pid 23168:tid 23206] [client 20.65.118.88:20825] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aclPU2P8p0yRL8ot_2_PQgAAAgk"]
[Mon Mar 30 00:12:03.655117 2026] [:error] [pid 32359:tid 32385] [client 20.65.118.88:42240] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aclPUwMb8G3UzfQP3WhBkQAAANg"]
[Mon Mar 30 00:12:04.099003 2026] [:error] [pid 32257:tid 32318] [client 20.65.118.88:29447] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aclPVCE3TArOFrUtgWqINAAAAIA"]
[Mon Mar 30 00:12:04.529924 2026] [:error] [pid 8818:tid 8831] [client 20.65.118.88:34523] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aclPVCCDvotZNSF0FBoAbAAAAUk"]
[Mon Mar 30 00:12:04.963740 2026] [:error] [pid 32255:tid 32309] [client 20.65.118.88:33891] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aclPVGnfn-AtRoMbquwwdgAAAFI"]
[Mon Mar 30 00:12:05.413832 2026] [:error] [pid 32255:tid 32296] [client 20.65.118.88:44877] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclPVWnfn-AtRoMbquwwewAAAEU"]
[Mon Mar 30 00:12:05.825018 2026] [:error] [pid 8818:tid 8827] [client 20.65.118.88:20054] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclPVSCDvotZNSF0FBoAbgAAAUU"]
[Mon Mar 30 00:12:06.246923 2026] [:error] [pid 23167:tid 23177] [client 20.65.118.88:22353] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclPVhIAHJCFaHff3_fltwAAAcc"]
[Mon Mar 30 00:12:06.660422 2026] [:error] [pid 32257:tid 32324] [client 20.65.118.88:34291] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclPViE3TArOFrUtgWqINgAAAIY"]
[Mon Mar 30 00:12:07.084427 2026] [:error] [pid 32257:tid 32330] [client 20.65.118.88:26457] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclPVyE3TArOFrUtgWqIOQAAAIw"]
[Mon Mar 30 00:12:07.496806 2026] [:error] [pid 23168:tid 23204] [client 20.65.118.88:33979] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclPV2P8p0yRL8ot_2_PTgAAAgc"]
[Mon Mar 30 00:12:07.921048 2026] [:error] [pid 32255:tid 32294] [client 20.65.118.88:28169] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclPV2nfn-AtRoMbquwwgAAAAEM"]
[Mon Mar 30 00:12:08.344010 2026] [:error] [pid 32255:tid 32295] [client 20.65.118.88:20832] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclPWGnfn-AtRoMbquwwgwAAAEQ"]
[Mon Mar 30 00:12:08.782179 2026] [:error] [pid 23168:tid 23206] [client 20.65.118.88:19722] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclPWGP8p0yRL8ot_2_PUAAAAgk"]
[Mon Mar 30 00:12:09.200125 2026] [:error] [pid 23284:tid 23291] [client 20.65.118.88:29454] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclPWYzBujdPHsq7wyQQaAAAAoU"]
[Mon Mar 30 00:12:09.621209 2026] [:error] [pid 23284:tid 23288] [client 20.65.118.88:24170] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclPWYzBujdPHsq7wyQQagAAAoI"]
[Mon Mar 30 00:12:10.127455 2026] [:error] [pid 23137:tid 23150] [client 20.65.118.88:29040] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclPWhaWQa7LdZ_qGFYSXQAAAYs"]
[Mon Mar 30 00:12:10.567879 2026] [:error] [pid 23168:tid 23203] [client 20.65.118.88:21315] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclPWmP8p0yRL8ot_2_PUwAAAgY"]
[Mon Mar 30 00:12:11.002827 2026] [:error] [pid 23168:tid 23220] [client 20.65.118.88:49605] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclPW2P8p0yRL8ot_2_PVQAAAhc"]
[Mon Mar 30 00:12:11.433911 2026] [:error] [pid 8818:tid 8835] [client 20.65.118.88:20087] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclPWyCDvotZNSF0FBoAfwAAAU0"]
[Mon Mar 30 00:12:11.861139 2026] [:error] [pid 8818:tid 8823] [client 20.65.118.88:24173] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclPWyCDvotZNSF0FBoAgAAAAUE"]
[Mon Mar 30 00:12:12.289860 2026] [:error] [pid 32254:tid 32271] [client 20.65.118.88:29294] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclPXKug2IHuyGgCTn9rkAAAAAc"]
[Mon Mar 30 00:12:12.698810 2026] [:error] [pid 8818:tid 8832] [client 20.65.118.88:34283] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclPXCCDvotZNSF0FBoAggAAAUo"]
[Mon Mar 30 00:12:13.116888 2026] [:error] [pid 23167:tid 23186] [client 20.65.118.88:22395] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclPXRIAHJCFaHff3_flwAAAAdA"]
[Mon Mar 30 00:12:13.536014 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:24617] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclPXYzBujdPHsq7wyQQbwAAAoQ"]
[Mon Mar 30 00:12:13.968889 2026] [:error] [pid 23284:tid 23287] [client 20.65.118.88:29481] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclPXYzBujdPHsq7wyQQcgAAAoE"]
[Mon Mar 30 00:12:14.388278 2026] [:error] [pid 23167:tid 23182] [client 20.65.118.88:21631] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclPXhIAHJCFaHff3_flyAAAAcw"]
[Mon Mar 30 00:12:14.831579 2026] [:error] [pid 23167:tid 23180] [client 20.65.118.88:34557] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclPXhIAHJCFaHff3_flygAAAco"]
[Mon Mar 30 00:12:15.271435 2026] [:error] [pid 23167:tid 23190] [client 20.65.118.88:19771] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclPXxIAHJCFaHff3_flzgAAAdQ"]
[Mon Mar 30 00:12:15.694000 2026] [:error] [pid 23167:tid 23186] [client 20.65.118.88:20840] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclPXxIAHJCFaHff3_flzwAAAdA"]
[Mon Mar 30 00:12:16.126683 2026] [:error] [pid 23168:tid 23221] [client 20.65.118.88:34538] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclPYGP8p0yRL8ot_2_PZwAAAhg"]
[Mon Mar 30 00:12:16.553430 2026] [:error] [pid 32255:tid 32309] [client 20.65.118.88:29011] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclPYGnfn-AtRoMbquwwiwAAAFI"]
[Mon Mar 30 00:12:16.983277 2026] [:error] [pid 32257:tid 32324] [client 20.65.118.88:20856] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclPYCE3TArOFrUtgWqIQQAAAIY"]
[Mon Mar 30 00:12:17.420036 2026] [:error] [pid 32254:tid 32285] [client 20.65.118.88:49646] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclPYaug2IHuyGgCTn9rkgAAABU"]
[Mon Mar 30 00:12:17.851204 2026] [:error] [pid 23284:tid 23304] [client 20.65.118.88:49610] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclPYYzBujdPHsq7wyQQeQAAApI"]
[Mon Mar 30 00:12:18.293362 2026] [:error] [pid 23137:tid 23158] [client 20.65.118.88:19754] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclPYhaWQa7LdZ_qGFYSZAAAAZM"]
[Mon Mar 30 00:12:18.749274 2026] [:error] [pid 23284:tid 23298] [client 20.65.118.88:29463] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclPYozBujdPHsq7wyQQfgAAAow"]
[Mon Mar 30 00:12:19.187697 2026] [:error] [pid 32359:tid 32370] [client 20.65.118.88:34297] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclPYwMb8G3UzfQP3WhBmwAAAMk"]
[Mon Mar 30 00:12:19.632561 2026] [:error] [pid 23284:tid 23297] [client 20.65.118.88:22373] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclPY4zBujdPHsq7wyQQgQAAAos"]
[Mon Mar 30 00:12:20.157370 2026] [:error] [pid 23284:tid 23306] [client 20.65.118.88:49628] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclPZIzBujdPHsq7wyQQgwAAApQ"]
[Mon Mar 30 00:12:20.579957 2026] [:error] [pid 23250:tid 23273] [client 20.65.118.88:39163] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclPZJxrpj-dQjy1cvogGgAAAlU"]
[Mon Mar 30 00:12:21.008406 2026] [:error] [pid 32359:tid 32374] [client 20.65.118.88:24162] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclPZQMb8G3UzfQP3WhBngAAAM0"]
[Mon Mar 30 00:12:21.411125 2026] [:error] [pid 32359:tid 32385] [client 20.65.118.88:32368] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclPZQMb8G3UzfQP3WhBnwAAANg"]
[Mon Mar 30 00:12:21.862187 2026] [:error] [pid 32359:tid 32376] [client 20.65.118.88:49633] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclPZQMb8G3UzfQP3WhBpQAAAM8"]
[Mon Mar 30 00:12:22.315487 2026] [:error] [pid 23168:tid 23212] [client 20.65.118.88:3861] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclPZmP8p0yRL8ot_2_PegAAAg8"]
[Mon Mar 30 00:12:22.754988 2026] [:error] [pid 32359:tid 32370] [client 20.65.118.88:32347] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclPZgMb8G3UzfQP3WhBqwAAAMk"]
[Mon Mar 30 00:12:23.190679 2026] [:error] [pid 23284:tid 23304] [client 20.65.118.88:39132] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclPZ4zBujdPHsq7wyQQhwAAApI"]
[Mon Mar 30 00:12:23.624911 2026] [:error] [pid 23284:tid 23291] [client 20.65.118.88:28164] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclPZ4zBujdPHsq7wyQQigAAAoU"]
[Mon Mar 30 00:12:24.076423 2026] [:error] [pid 32359:tid 32364] [client 20.65.118.88:33908] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclPaAMb8G3UzfQP3WhBrwAAAMM"]
[Mon Mar 30 00:12:24.511300 2026] [:error] [pid 23250:tid 23271] [client 20.65.118.88:24143] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclPaJxrpj-dQjy1cvogHwAAAlM"]
[Mon Mar 30 00:12:24.958913 2026] [:error] [pid 23168:tid 23211] [client 20.65.118.88:20824] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclPaGP8p0yRL8ot_2_PgAAAAg4"]
[Mon Mar 30 00:12:25.421645 2026] [:error] [pid 8818:tid 8843] [client 20.65.118.88:42242] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclPaSCDvotZNSF0FBoAhgAAAVU"]
[Mon Mar 30 00:12:25.889106 2026] [:error] [pid 8818:tid 8827] [client 20.65.118.88:20061] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclPaSCDvotZNSF0FBoAhwAAAUU"]
[Mon Mar 30 00:12:26.344853 2026] [:error] [pid 23284:tid 23309] [client 20.65.118.88:29007] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclPaozBujdPHsq7wyQQkQAAApc"]
[Mon Mar 30 00:12:26.755131 2026] [:error] [pid 32257:tid 32321] [client 20.65.118.88:30520] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclPaiE3TArOFrUtgWqIRwAAAIM"]
[Mon Mar 30 00:12:27.182111 2026] [:error] [pid 32257:tid 32336] [client 20.65.118.88:35228] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclPayE3TArOFrUtgWqISwAAAJI"]
[Mon Mar 30 00:12:27.600634 2026] [:error] [pid 32359:tid 32378] [client 20.65.118.88:28162] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclPawMb8G3UzfQP3WhBswAAANE"]
[Mon Mar 30 00:12:28.036182 2026] [:error] [pid 23250:tid 23267] [client 20.65.118.88:49622] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclPbJxrpj-dQjy1cvogIgAAAk8"]
[Mon Mar 30 00:12:28.472149 2026] [:error] [pid 23137:tid 23162] [client 20.65.118.88:46375] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclPbBaWQa7LdZ_qGFYSbwAAAZc"]
[Mon Mar 30 00:12:28.876080 2026] [:error] [pid 32254:tid 32279] [client 20.65.118.88:30523] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclPbKug2IHuyGgCTn9rmgAAAA8"]
[Mon Mar 30 00:12:29.301044 2026] [:error] [pid 23168:tid 23217] [client 20.65.118.88:33964] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclPbWP8p0yRL8ot_2_PiAAAAhQ"]
[Mon Mar 30 00:12:29.717446 2026] [:error] [pid 23167:tid 23192] [client 20.65.118.88:34534] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclPbRIAHJCFaHff3_fl6wAAAdY"]
[Mon Mar 30 00:12:30.153514 2026] [:error] [pid 23167:tid 23177] [client 20.65.118.88:33894] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclPbhIAHJCFaHff3_fl7gAAAcc"]
[Mon Mar 30 00:12:30.608747 2026] [:error] [pid 23167:tid 23180] [client 20.65.118.88:46354] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclPbhIAHJCFaHff3_fl8QAAAco"]
[Mon Mar 30 00:12:31.047854 2026] [:error] [pid 23137:tid 23143] [client 20.65.118.88:34505] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclPbxaWQa7LdZ_qGFYScgAAAYQ"]
[Mon Mar 30 00:12:31.475139 2026] [:error] [pid 23137:tid 23154] [client 20.65.118.88:42282] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclPbxaWQa7LdZ_qGFYSdgAAAY8"]
[Mon Mar 30 00:12:31.890465 2026] [:error] [pid 23167:tid 23175] [client 20.65.118.88:30516] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclPbxIAHJCFaHff3_fl-AAAAcU"]
[Mon Mar 30 00:12:32.332171 2026] [:error] [pid 32254:tid 32285] [client 20.65.118.88:3871] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclPcKug2IHuyGgCTn9rngAAABU"]
[Mon Mar 30 00:12:32.760383 2026] [:error] [pid 23167:tid 23194] [client 20.65.118.88:34302] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclPcBIAHJCFaHff3_fl-QAAAdg"]
[Mon Mar 30 00:12:33.192746 2026] [:error] [pid 8818:tid 8846] [client 20.65.118.88:46368] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclPcSCDvotZNSF0FBoAiAAAAVg"]
[Mon Mar 30 00:12:33.600077 2026] [:error] [pid 8818:tid 8823] [client 20.65.118.88:28178] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclPcSCDvotZNSF0FBoAigAAAUE"]
[Mon Mar 30 00:12:34.035140 2026] [:error] [pid 8818:tid 8826] [client 20.65.118.88:42256] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclPciCDvotZNSF0FBoAjgAAAUQ"]
[Mon Mar 30 00:12:34.489512 2026] [:error] [pid 23284:tid 23294] [client 20.65.118.88:25366] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclPcozBujdPHsq7wyQQmQAAAog"]
[Mon Mar 30 00:12:34.910534 2026] [:error] [pid 23168:tid 23207] [client 20.65.118.88:29545] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclPcmP8p0yRL8ot_2_PkwAAAgo"]
[Mon Mar 30 00:12:35.367703 2026] [:error] [pid 23168:tid 23197] [client 20.65.118.88:29506] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclPc2P8p0yRL8ot_2_PmQAAAgA"]
[Mon Mar 30 00:12:35.799933 2026] [:error] [pid 23167:tid 23189] [client 20.65.118.88:34269] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclPcxIAHJCFaHff3_fl_AAAAdM"]
[Mon Mar 30 00:12:36.245574 2026] [:error] [pid 23167:tid 23177] [client 20.65.118.88:3847] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclPdBIAHJCFaHff3_fl_gAAAcc"]
[Mon Mar 30 00:12:36.669024 2026] [:error] [pid 8818:tid 8837] [client 20.65.118.88:34246] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclPdCCDvotZNSF0FBoAkQAAAU8"]
[Mon Mar 30 00:12:37.089031 2026] [:error] [pid 8818:tid 8841] [client 20.65.118.88:3501] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclPdSCDvotZNSF0FBoAkwAAAVM"]
[Mon Mar 30 00:12:37.521933 2026] [:error] [pid 23137:tid 23148] [client 20.65.118.88:19752] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclPdRaWQa7LdZ_qGFYSggAAAYk"]
[Mon Mar 30 00:12:37.944865 2026] [:error] [pid 23250:tid 23266] [client 20.65.118.88:3852] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclPdZxrpj-dQjy1cvogKAAAAk4"]
[Mon Mar 30 00:12:38.429927 2026] [:error] [pid 32359:tid 32378] [client 20.65.118.88:49621] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclPdgMb8G3UzfQP3WhBuAAAANE"]
[Mon Mar 30 00:12:38.881312 2026] [:error] [pid 23250:tid 23264] [client 20.65.118.88:29522] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclPdpxrpj-dQjy1cvogKwAAAkw"]
[Mon Mar 30 00:12:39.310981 2026] [:error] [pid 23250:tid 23267] [client 20.65.118.88:31960] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclPd5xrpj-dQjy1cvogLgAAAk8"]
[Mon Mar 30 00:12:39.733692 2026] [:error] [pid 32257:tid 32342] [client 20.65.118.88:28019] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclPdyE3TArOFrUtgWqIVwAAAJg"]
[Mon Mar 30 00:12:40.213097 2026] [:error] [pid 32257:tid 32332] [client 20.65.118.88:34504] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclPeCE3TArOFrUtgWqIWQAAAI4"]
[Mon Mar 30 00:12:40.638099 2026] [:error] [pid 32359:tid 32367] [client 20.65.118.88:34182] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclPeAMb8G3UzfQP3WhBvAAAAMY"]
[Mon Mar 30 00:12:41.070877 2026] [:error] [pid 23168:tid 23209] [client 20.65.118.88:34521] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclPeWP8p0yRL8ot_2_PqwAAAgw"]
[Mon Mar 30 00:12:41.487869 2026] [:error] [pid 23284:tid 23291] [client 20.65.118.88:34207] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclPeYzBujdPHsq7wyQQmgAAAoU"]
[Mon Mar 30 00:12:41.919548 2026] [:error] [pid 23168:tid 23203] [client 20.65.118.88:34529] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclPeWP8p0yRL8ot_2_PrgAAAgY"]
[Mon Mar 30 00:12:42.363374 2026] [:error] [pid 32254:tid 32272] [client 20.65.118.88:20736] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclPequg2IHuyGgCTn9rqgAAAAg"]
[Mon Mar 30 00:12:42.784881 2026] [:error] [pid 23168:tid 23217] [client 20.65.118.88:3516] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclPemP8p0yRL8ot_2_PswAAAhQ"]
[Mon Mar 30 00:12:43.191659 2026] [:error] [pid 32257:tid 32337] [client 20.65.118.88:29811] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclPeyE3TArOFrUtgWqIYAAAAJM"]
[Mon Mar 30 00:12:43.605814 2026] [:error] [pid 23168:tid 23214] [client 20.65.118.88:44409] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclPe2P8p0yRL8ot_2_PugAAAhE"]
[Mon Mar 30 00:12:44.037610 2026] [:error] [pid 32257:tid 32331] [client 20.65.118.88:35250] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclPfCE3TArOFrUtgWqIZQAAAI0"]
[Mon Mar 30 00:12:44.449202 2026] [:error] [pid 8818:tid 8822] [client 20.65.118.88:52861] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclPfCCDvotZNSF0FBoAmQAAAUA"]
[Mon Mar 30 00:12:44.911678 2026] [:error] [pid 23168:tid 23198] [client 20.65.118.88:31984] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclPfGP8p0yRL8ot_2_PvwAAAgE"]
[Mon Mar 30 00:12:45.350162 2026] [:error] [pid 8818:tid 8840] [client 20.65.118.88:46378] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclPfSCDvotZNSF0FBoAnQAAAVI"]
[Mon Mar 30 00:12:45.773829 2026] [:error] [pid 23284:tid 23287] [client 20.65.118.88:52833] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclPfYzBujdPHsq7wyQQoQAAAoE"]
[Mon Mar 30 00:12:46.198979 2026] [:error] [pid 32254:tid 32287] [client 20.65.118.88:28015] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclPfqug2IHuyGgCTn9rrAAAABc"]
[Mon Mar 30 00:12:46.618113 2026] [:error] [pid 23167:tid 23173] [client 20.65.118.88:29788] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclPfhIAHJCFaHff3_fmDgAAAcM"]
[Mon Mar 30 00:12:47.043861 2026] [:error] [pid 23250:tid 23253] [client 20.65.118.88:41522] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclPf5xrpj-dQjy1cvogMwAAAkE"]
[Mon Mar 30 00:12:47.469282 2026] [:error] [pid 32359:tid 32371] [client 20.65.118.88:31990] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclPfwMb8G3UzfQP3WhBxQAAAMo"]
[Mon Mar 30 00:12:47.890749 2026] [:error] [pid 32359:tid 32361] [client 20.65.118.88:22630] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclPfwMb8G3UzfQP3WhByAAAAMA"]
[Mon Mar 30 00:12:48.361442 2026] [:error] [pid 32254:tid 32268] [client 20.65.118.88:23371] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclPgKug2IHuyGgCTn9rrQAAAAQ"]
[Mon Mar 30 00:12:48.786574 2026] [:error] [pid 23167:tid 23184] [client 20.65.118.88:17861] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclPgBIAHJCFaHff3_fmGwAAAc4"]
[Mon Mar 30 00:12:49.247329 2026] [:error] [pid 23168:tid 23209] [client 20.65.118.88:31978] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclPgWP8p0yRL8ot_2_PwgAAAgw"]
[Mon Mar 30 00:12:49.682732 2026] [:error] [pid 32255:tid 32304] [client 20.65.118.88:44474] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclPgWnfn-AtRoMbquwwpwAAAE0"]
[Mon Mar 30 00:12:50.224148 2026] [:error] [pid 23250:tid 23257] [client 20.65.118.88:26923] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclPgpxrpj-dQjy1cvogPgAAAkU"]
[Mon Mar 30 00:12:50.661071 2026] [:error] [pid 23250:tid 23268] [client 20.65.118.88:44463] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclPgpxrpj-dQjy1cvogPwAAAlA"]
[Mon Mar 30 00:12:51.085250 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:44431] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclPg4zBujdPHsq7wyQQrgAAAoQ"]
[Mon Mar 30 00:12:51.510429 2026] [:error] [pid 23250:tid 23256] [client 20.65.118.88:22607] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclPg5xrpj-dQjy1cvogQAAAAkQ"]
[Mon Mar 30 00:12:51.939384 2026] [:error] [pid 23137:tid 23161] [client 20.65.118.88:23068] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclPgxaWQa7LdZ_qGFYSigAAAZY"]
[Mon Mar 30 00:12:52.364220 2026] [:error] [pid 32257:tid 32326] [client 20.65.118.88:33089] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclPhCE3TArOFrUtgWqIdQAAAIg"]
[Mon Mar 30 00:12:52.789595 2026] [:error] [pid 32257:tid 32323] [client 20.65.118.88:27207] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclPhCE3TArOFrUtgWqIdwAAAIU"]
[Mon Mar 30 00:12:53.215941 2026] [:error] [pid 32257:tid 32336] [client 20.65.118.88:41928] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclPhSE3TArOFrUtgWqIfQAAAJI"]
[Mon Mar 30 00:12:53.627304 2026] [:error] [pid 32257:tid 32334] [client 20.65.118.88:17886] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclPhSE3TArOFrUtgWqIgwAAAJA"]
[Mon Mar 30 00:12:54.042266 2026] [:error] [pid 32257:tid 32321] [client 20.65.118.88:41920] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclPhiE3TArOFrUtgWqIiQAAAIM"]
[Mon Mar 30 00:12:54.467924 2026] [:error] [pid 32257:tid 32329] [client 20.65.118.88:34246] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclPhiE3TArOFrUtgWqIiwAAAIs"]
[Mon Mar 30 00:12:54.920855 2026] [:error] [pid 32257:tid 32336] [client 20.65.118.88:22831] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclPhiE3TArOFrUtgWqIjAAAAJI"]
[Mon Mar 30 00:12:55.347432 2026] [:error] [pid 23284:tid 23293] [client 20.65.118.88:22812] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclPh4zBujdPHsq7wyQQtQAAAoc"]
[Mon Mar 30 00:12:55.762061 2026] [:error] [pid 32257:tid 32322] [client 20.65.118.88:37297] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclPhyE3TArOFrUtgWqIkgAAAIQ"]
[Mon Mar 30 00:12:56.180702 2026] [:error] [pid 8818:tid 8839] [client 20.65.118.88:30226] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclPiCCDvotZNSF0FBoAowAAAVE"]
[Mon Mar 30 00:12:56.584124 2026] [:error] [pid 8818:tid 8834] [client 20.65.118.88:37069] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclPiCCDvotZNSF0FBoApgAAAUw"]
[Mon Mar 30 00:12:56.989852 2026] [:error] [pid 32257:tid 32325] [client 20.65.118.88:19553] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclPiCE3TArOFrUtgWqIlQAAAIc"]
[Mon Mar 30 00:12:57.402529 2026] [:error] [pid 23250:tid 23253] [client 20.65.118.88:37292] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aclPiZxrpj-dQjy1cvogQwAAAkE"]
[Mon Mar 30 00:12:57.843984 2026] [:error] [pid 23137:tid 23143] [client 20.65.118.88:29750] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aclPiRaWQa7LdZ_qGFYSkAAAAYQ"]
[Mon Mar 30 00:12:58.285203 2026] [:error] [pid 32257:tid 32332] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Mon Mar 30 00:12:58.495210 2026] [:error] [pid 32257:tid 32328] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Mon Mar 30 00:12:58.898538 2026] [:error] [pid 32257:tid 32342] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Mar 30 00:12:59.100491 2026] [:error] [pid 32257:tid 32320] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Mon Mar 30 00:12:59.302811 2026] [:error] [pid 32257:tid 32336] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Mon Mar 30 00:12:59.504510 2026] [:error] [pid 32257:tid 32318] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax.php
[Mon Mar 30 00:12:59.706795 2026] [:error] [pid 32257:tid 32328] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Mon Mar 30 00:13:00.111193 2026] [:error] [pid 32257:tid 32322] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Mon Mar 30 00:13:00.313910 2026] [:error] [pid 32257:tid 32338] [client 20.65.118.88:29732] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Mar 30 00:13:00.516721 2026] [:error] [pid 32257:tid 32339] [client 20.65.118.88:29732] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aclPjCE3TArOFrUtgWqItgAAAJU"]
[Mon Mar 30 00:13:00.925724 2026] [:error] [pid 23137:tid 23158] [client 20.65.118.88:45297] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aclPjBaWQa7LdZ_qGFYSkQAAAZM"]
[Mon Mar 30 00:13:01.374780 2026] [:error] [pid 32359:tid 32381] [client 20.65.118.88:23880] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aclPjQMb8G3UzfQP3WhB1gAAANQ"]
[Mon Mar 30 00:13:01.792370 2026] [:error] [pid 23250:tid 23264] [client 20.65.118.88:22137] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws60.php"] [unique_id "aclPjZxrpj-dQjy1cvogRQAAAkw"]
[Mon Mar 30 00:13:02.205508 2026] [:error] [pid 32359:tid 32383] [client 20.65.118.88:39046] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aclPjgMb8G3UzfQP3WhB2QAAANY"]
[Mon Mar 30 00:13:02.620009 2026] [:error] [pid 23168:tid 23216] [client 20.65.118.88:31022] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aclPjmP8p0yRL8ot_2_P0AAAAhM"]
[Mon Mar 30 00:13:03.048940 2026] [:error] [pid 23284:tid 23302] [client 20.65.118.88:31010] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aclPj4zBujdPHsq7wyQQxQAAApA"]
[Mon Mar 30 00:13:03.490879 2026] [:error] [pid 23168:tid 23204] [client 20.65.118.88:3455] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aclPj2P8p0yRL8ot_2_P0wAAAgc"]
[Mon Mar 30 00:13:03.935456 2026] [:error] [pid 32257:tid 32329] [client 20.65.118.88:38029] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aclPjyE3TArOFrUtgWqIwwAAAIs"]
[Mon Mar 30 00:13:04.371123 2026] [:error] [pid 32257:tid 32321] [client 20.65.118.88:43861] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aclPkCE3TArOFrUtgWqIxgAAAIM"]
[Mon Mar 30 00:13:04.839221 2026] [:error] [pid 23137:tid 23141] [client 20.65.118.88:3968] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aclPkBaWQa7LdZ_qGFYSmAAAAYI"]
[Mon Mar 30 00:13:05.301137 2026] [:error] [pid 32257:tid 32323] [client 20.65.118.88:37322] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aclPkSE3TArOFrUtgWqIywAAAIU"]
[Mon Mar 30 00:13:05.721085 2026] [:error] [pid 32257:tid 32334] [client 20.65.118.88:45662] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aclPkSE3TArOFrUtgWqIzgAAAJA"]
[Mon Mar 30 00:13:06.149663 2026] [:error] [pid 32257:tid 32330] [client 20.65.118.88:28700] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aclPkiE3TArOFrUtgWqI0AAAAIw"]
[Mon Mar 30 00:13:06.582840 2026] [:error] [pid 8818:tid 8837] [client 20.65.118.88:31033] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aclPkiCDvotZNSF0FBoArwAAAU8"]
[Mon Mar 30 00:13:07.023703 2026] [:error] [pid 32359:tid 32375] [client 20.65.118.88:28687] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "aclPkwMb8G3UzfQP3WhB3wAAAM4"]
[Mon Mar 30 00:13:07.451622 2026] [:error] [pid 23284:tid 23297] [client 20.65.118.88:3996] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aclPk4zBujdPHsq7wyQQyQAAAos"]
[Mon Mar 30 00:13:07.890299 2026] [:error] [pid 32257:tid 32327] [client 20.65.118.88:36036] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aclPkyE3TArOFrUtgWqI0wAAAIk"]
[Mon Mar 30 00:13:08.310189 2026] [:error] [pid 32257:tid 32332] [client 20.65.118.88:37315] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aclPlCE3TArOFrUtgWqI1QAAAI4"]
[Mon Mar 30 00:13:08.750009 2026] [:error] [pid 23137:tid 23162] [client 20.65.118.88:45678] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aclPlBaWQa7LdZ_qGFYSmwAAAZc"]
[Mon Mar 30 00:13:09.184613 2026] [:error] [pid 32254:tid 32267] [client 20.65.118.88:37353] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aclPlaug2IHuyGgCTn9rvQAAAAM"]
[Mon Mar 30 00:13:09.642900 2026] [:error] [pid 23167:tid 23180] [client 20.65.118.88:23320] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aclPlRIAHJCFaHff3_fmNgAAAco"]
[Mon Mar 30 00:13:10.170270 2026] [:error] [pid 23284:tid 23292] [client 20.65.118.88:36090] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aclPlozBujdPHsq7wyQQzQAAAoY"]
[Mon Mar 30 00:13:10.586876 2026] [:error] [pid 32359:tid 32382] [client 20.65.118.88:21263] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/okxh.php"] [unique_id "aclPlgMb8G3UzfQP3WhB5AAAANU"]
[Mon Mar 30 00:13:11.039781 2026] [:error] [pid 23168:tid 23217] [client 20.65.118.88:3935] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aclPl2P8p0yRL8ot_2_P2QAAAhQ"]
[Mon Mar 30 00:13:11.477629 2026] [:error] [pid 23168:tid 23206] [client 20.65.118.88:34246] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aclPl2P8p0yRL8ot_2_P3gAAAgk"]
[Mon Mar 30 00:13:11.898883 2026] [:error] [pid 32257:tid 32318] [client 20.65.118.88:28432] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aclPlyE3TArOFrUtgWqI2wAAAIA"]
[Mon Mar 30 00:13:12.340645 2026] [:error] [pid 23167:tid 23191] [client 20.65.118.88:27753] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aclPmBIAHJCFaHff3_fmOwAAAdU"]
[Mon Mar 30 00:13:12.813620 2026] [:error] [pid 23167:tid 23182] [client 20.65.118.88:44970] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "aclPmBIAHJCFaHff3_fmPAAAAcw"]
[Mon Mar 30 00:13:13.257066 2026] [:error] [pid 32257:tid 32327] [client 20.65.118.88:21281] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "aclPmSE3TArOFrUtgWqI3AAAAIk"]
[Mon Mar 30 00:13:13.692306 2026] [:error] [pid 32255:tid 32296] [client 20.65.118.88:43348] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "aclPmWnfn-AtRoMbquwwvwAAAEU"]
[Mon Mar 30 00:13:14.171527 2026] [:error] [pid 32257:tid 32322] [client 20.65.118.88:28963] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "aclPmiE3TArOFrUtgWqI5AAAAIQ"]
[Mon Mar 30 00:13:14.598774 2026] [:error] [pid 32257:tid 32320] [client 20.65.118.88:28443] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclPmiE3TArOFrUtgWqI5wAAAII"]
[Mon Mar 30 00:13:15.058974 2026] [:error] [pid 32257:tid 32325] [client 20.65.118.88:18659] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclPmyE3TArOFrUtgWqI6QAAAIc"]
[Mon Mar 30 00:13:15.497879 2026] [:error] [pid 23284:tid 23295] [client 20.65.118.88:38140] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclPm4zBujdPHsq7wyQQ1AAAAok"]
[Mon Mar 30 00:13:15.935231 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:45922] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclPm4zBujdPHsq7wyQQ1QAAAoQ"]
[Mon Mar 30 00:13:16.377542 2026] [:error] [pid 23284:tid 23306] [client 20.65.118.88:21270] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclPnIzBujdPHsq7wyQQ2AAAApQ"]
[Mon Mar 30 00:13:16.827502 2026] [:error] [pid 23284:tid 23287] [client 20.65.118.88:19203] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclPnIzBujdPHsq7wyQQ2wAAAoE"]
[Mon Mar 30 00:13:17.237042 2026] [:error] [pid 23284:tid 23288] [client 20.65.118.88:27173] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclPnYzBujdPHsq7wyQQ3gAAAoI"]
[Mon Mar 30 00:13:17.652246 2026] [:error] [pid 32257:tid 32337] [client 20.65.118.88:44949] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclPnSE3TArOFrUtgWqI8QAAAJM"]
[Mon Mar 30 00:13:18.069721 2026] [:error] [pid 32257:tid 32330] [client 20.65.118.88:35674] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclPniE3TArOFrUtgWqI9QAAAIw"]
[Mon Mar 30 00:13:18.505648 2026] [:error] [pid 32257:tid 32339] [client 20.65.118.88:17845] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclPniE3TArOFrUtgWqI-AAAAJU"]
[Mon Mar 30 00:13:18.925804 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:27737] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclPnozBujdPHsq7wyQQ5AAAAoQ"]
[Mon Mar 30 00:13:19.344668 2026] [:error] [pid 23168:tid 23202] [client 20.65.118.88:27750] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclPn2P8p0yRL8ot_2_P5gAAAgU"]
[Mon Mar 30 00:13:19.782360 2026] [:error] [pid 23137:tid 23157] [client 20.65.118.88:44972] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclPnxaWQa7LdZ_qGFYSnwAAAZI"]
[Mon Mar 30 00:13:20.233093 2026] [:error] [pid 32255:tid 32300] [client 20.65.118.88:27161] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclPoGnfn-AtRoMbquwwwwAAAEk"]
[Mon Mar 30 00:13:20.655508 2026] [:error] [pid 23284:tid 23297] [client 20.65.118.88:29219] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclPoIzBujdPHsq7wyQQ5QAAAos"]
[Mon Mar 30 00:13:21.118591 2026] [:error] [pid 23284:tid 23309] [client 20.65.118.88:19258] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclPoYzBujdPHsq7wyQQ6AAAApc"]
[Mon Mar 30 00:13:21.552886 2026] [:error] [pid 23168:tid 23217] [client 20.65.118.88:28949] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclPoWP8p0yRL8ot_2_P6QAAAhQ"]
[Mon Mar 30 00:13:21.986391 2026] [:error] [pid 23167:tid 23189] [client 20.65.118.88:21293] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclPoRIAHJCFaHff3_fmQQAAAdM"]
[Mon Mar 30 00:13:22.442031 2026] [:error] [pid 32257:tid 32338] [client 20.65.118.88:52177] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclPoiE3TArOFrUtgWqJBwAAAJQ"]
[Mon Mar 30 00:13:22.881535 2026] [:error] [pid 23284:tid 23289] [client 20.65.118.88:38129] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclPoozBujdPHsq7wyQQ6wAAAoM"]
[Mon Mar 30 00:13:23.310001 2026] [:error] [pid 23167:tid 23190] [client 20.65.118.88:44944] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclPoxIAHJCFaHff3_fmQgAAAdQ"]
[Mon Mar 30 00:13:23.764055 2026] [:error] [pid 8818:tid 8846] [client 20.65.118.88:17830] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclPoyCDvotZNSF0FBoAtwAAAVg"]
[Mon Mar 30 00:13:24.220611 2026] [:error] [pid 32257:tid 32336] [client 20.65.118.88:43369] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclPpCE3TArOFrUtgWqJEAAAAJI"]
[Mon Mar 30 00:13:24.671610 2026] [:error] [pid 32257:tid 32323] [client 20.65.118.88:19247] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclPpCE3TArOFrUtgWqJFAAAAIU"]
[Mon Mar 30 00:13:25.126334 2026] [:error] [pid 23250:tid 23262] [client 20.65.118.88:38111] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclPpZxrpj-dQjy1cvogVAAAAko"]
[Mon Mar 30 00:13:25.542611 2026] [:error] [pid 23250:tid 23268] [client 20.65.118.88:3956] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclPpZxrpj-dQjy1cvogVQAAAlA"]
[Mon Mar 30 00:13:26.039470 2026] [:error] [pid 32255:tid 32297] [client 20.65.118.88:32643] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclPpmnfn-AtRoMbquwwxwAAAEY"]
[Mon Mar 30 00:13:26.479497 2026] [:error] [pid 32255:tid 32308] [client 20.65.118.88:18664] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclPpmnfn-AtRoMbquwwyQAAAFE"]
[Mon Mar 30 00:13:26.931735 2026] [:error] [pid 8818:tid 8835] [client 20.65.118.88:26189] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclPpiCDvotZNSF0FBoAuAAAAU0"]
[Mon Mar 30 00:13:27.362789 2026] [:error] [pid 23137:tid 23153] [client 20.65.118.88:29198] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclPpxaWQa7LdZ_qGFYSoQAAAY4"]
[Mon Mar 30 00:13:27.800079 2026] [:error] [pid 23137:tid 23161] [client 20.65.118.88:3633] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclPpxaWQa7LdZ_qGFYSogAAAZY"]
[Mon Mar 30 00:13:28.288035 2026] [:error] [pid 23168:tid 23205] [client 20.65.118.88:3606] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclPqGP8p0yRL8ot_2_P7gAAAgg"]
[Mon Mar 30 00:13:28.786273 2026] [:error] [pid 32255:tid 32296] [client 20.65.118.88:38103] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclPqGnfn-AtRoMbquwwywAAAEU"]
[Mon Mar 30 00:13:29.359040 2026] [:error] [pid 32254:tid 32286] [client 20.65.118.88:19721] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclPqaug2IHuyGgCTn9rxAAAABY"]
[Mon Mar 30 00:13:29.778315 2026] [:error] [pid 32254:tid 32277] [client 20.65.118.88:38096] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclPqaug2IHuyGgCTn9rxQAAAA0"]
[Mon Mar 30 00:13:30.364864 2026] [:error] [pid 8818:tid 8836] [client 20.65.118.88:28983] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclPqiCDvotZNSF0FBoAuwAAAU4"]
[Mon Mar 30 00:13:30.825096 2026] [:error] [pid 32255:tid 32301] [client 20.65.118.88:38109] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclPqmnfn-AtRoMbquww0QAAAEo"]
[Mon Mar 30 00:13:31.256899 2026] [:error] [pid 23168:tid 23200] [client 20.65.118.88:46375] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclPq2P8p0yRL8ot_2_P8gAAAgM"]
[Mon Mar 30 00:13:31.672752 2026] [:error] [pid 32255:tid 32293] [client 20.65.118.88:19202] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclPq2nfn-AtRoMbquww1gAAAEI"]
[Mon Mar 30 00:13:32.126505 2026] [:error] [pid 23167:tid 23187] [client 20.65.118.88:27727] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclPrBIAHJCFaHff3_fmSQAAAdE"]
[Mon Mar 30 00:13:32.616753 2026] [:error] [pid 23284:tid 23289] [client 20.65.118.88:38133] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclPrIzBujdPHsq7wyQQ8QAAAoM"]
[Mon Mar 30 00:13:33.083432 2026] [:error] [pid 23284:tid 23292] [client 20.65.118.88:44931] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclPrYzBujdPHsq7wyQQ8wAAAoY"]
[Mon Mar 30 00:13:33.519652 2026] [:error] [pid 23284:tid 23304] [client 20.65.118.88:26186] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclPrYzBujdPHsq7wyQQ9QAAApI"]
[Mon Mar 30 00:13:33.974233 2026] [:error] [pid 32359:tid 32383] [client 20.65.118.88:52178] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclPrQMb8G3UzfQP3WhB9QAAANY"]
[Mon Mar 30 00:13:34.467974 2026] [:error] [pid 8818:tid 8831] [client 20.65.118.88:43332] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclPriCDvotZNSF0FBoAvgAAAUk"]
[Mon Mar 30 00:13:35.006622 2026] [:error] [pid 32255:tid 32291] [client 20.65.118.88:19255] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclPr2nfn-AtRoMbquww3AAAAEA"]
[Mon Mar 30 00:13:35.616075 2026] [:error] [pid 32255:tid 32295] [client 20.65.118.88:22393] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclPr2nfn-AtRoMbquww3wAAAEQ"]
[Mon Mar 30 00:13:36.061903 2026] [:error] [pid 32257:tid 32319] [client 20.65.118.88:52206] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclPsCE3TArOFrUtgWqJHAAAAIE"]
[Mon Mar 30 00:13:36.554800 2026] [:error] [pid 8818:tid 8825] [client 20.65.118.88:32690] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclPsCCDvotZNSF0FBoAxQAAAUM"]
[Mon Mar 30 00:13:36.969283 2026] [:error] [pid 32359:tid 32363] [client 20.65.118.88:19322] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclPsAMb8G3UzfQP3WhB-AAAAMI"]
[Mon Mar 30 00:13:37.500163 2026] [:error] [pid 32257:tid 32321] [client 20.65.118.88:45913] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclPsSE3TArOFrUtgWqJHgAAAIM"]
[Mon Mar 30 00:13:37.977149 2026] [:error] [pid 23284:tid 23287] [client 20.65.118.88:18631] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclPsYzBujdPHsq7wyQQ-wAAAoE"]
[Mon Mar 30 00:13:38.411219 2026] [:error] [pid 32255:tid 32301] [client 20.65.118.88:38090] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPsmnfn-AtRoMbquww5gAAAEo"]
[Mon Mar 30 00:13:38.865478 2026] [:error] [pid 23284:tid 23293] [client 20.65.118.88:45891] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPsozBujdPHsq7wyQRAAAAAoc"]
[Mon Mar 30 00:13:39.309174 2026] [:error] [pid 23284:tid 23298] [client 20.65.118.88:27752] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPs4zBujdPHsq7wyQRBAAAAow"]
[Mon Mar 30 00:13:39.733742 2026] [:error] [pid 32359:tid 32378] [client 20.65.118.88:35674] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclPswMb8G3UzfQP3WhB_QAAANE"]
[Mon Mar 30 00:13:40.210861 2026] [:error] [pid 23167:tid 23188] [client 20.65.118.88:32659] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclPtBIAHJCFaHff3_fmTAAAAdI"]
[Mon Mar 30 00:13:40.647814 2026] [:error] [pid 23168:tid 23198] [client 20.65.118.88:3622] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclPtGP8p0yRL8ot_2_P_AAAAgE"]
[Mon Mar 30 00:13:41.085763 2026] [:error] [pid 23167:tid 23189] [client 20.65.118.88:38105] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclPtRIAHJCFaHff3_fmTwAAAdM"]
[Mon Mar 30 00:13:41.525854 2026] [:error] [pid 23137:tid 23156] [client 20.65.118.88:17810] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclPtRaWQa7LdZ_qGFYSqgAAAZE"]
[Mon Mar 30 00:13:41.959071 2026] [:error] [pid 23250:tid 23256] [client 20.65.118.88:3621] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclPtZxrpj-dQjy1cvogYAAAAkQ"]
[Mon Mar 30 00:13:42.434802 2026] [:error] [pid 23250:tid 23255] [client 20.65.118.88:38099] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclPtpxrpj-dQjy1cvogYgAAAkM"]
[Mon Mar 30 00:13:42.892391 2026] [:error] [pid 23167:tid 23178] [client 20.65.118.88:43346] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclPthIAHJCFaHff3_fmUgAAAcg"]
[Mon Mar 30 00:13:43.332479 2026] [:error] [pid 32254:tid 32279] [client 20.65.118.88:18663] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclPt6ug2IHuyGgCTn9rywAAAA8"]
[Mon Mar 30 00:13:43.782404 2026] [:error] [pid 23137:tid 23144] [client 20.65.118.88:26201] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclPtxaWQa7LdZ_qGFYSrAAAAYU"]
[Mon Mar 30 00:13:44.214110 2026] [:error] [pid 23167:tid 23182] [client 20.65.118.88:3641] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclPuBIAHJCFaHff3_fmUwAAAcw"]
[Mon Mar 30 00:13:44.637984 2026] [:error] [pid 23167:tid 23186] [client 20.65.118.88:27399] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclPuBIAHJCFaHff3_fmVQAAAdA"]
[Mon Mar 30 00:13:45.102946 2026] [:error] [pid 23167:tid 23192] [client 20.65.118.88:3632] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclPuRIAHJCFaHff3_fmWgAAAdY"]
[Mon Mar 30 00:13:45.553806 2026] [:error] [pid 23167:tid 23184] [client 20.65.118.88:43378] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclPuRIAHJCFaHff3_fmXQAAAc4"]
[Mon Mar 30 00:13:45.965144 2026] [:error] [pid 32257:tid 32340] [client 20.65.118.88:52180] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclPuSE3TArOFrUtgWqJIAAAAJY"]
[Mon Mar 30 00:13:46.412745 2026] [:error] [pid 32257:tid 32329] [client 20.65.118.88:28937] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclPuiE3TArOFrUtgWqJIwAAAIs"]
[Mon Mar 30 00:13:46.847393 2026] [:error] [pid 32254:tid 32287] [client 20.65.118.88:3914] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclPuqug2IHuyGgCTn9r0AAAABc"]
[Mon Mar 30 00:13:47.268415 2026] [:error] [pid 32257:tid 32332] [client 20.65.118.88:32695] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclPuyE3TArOFrUtgWqJKQAAAI4"]
[Mon Mar 30 00:13:47.692773 2026] [:error] [pid 32254:tid 32283] [client 20.65.118.88:29188] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclPu6ug2IHuyGgCTn9r0gAAABM"]
[Mon Mar 30 00:13:48.120889 2026] [:error] [pid 23137:tid 23158] [client 20.65.118.88:19284] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclPvBaWQa7LdZ_qGFYSswAAAZM"]
[Mon Mar 30 00:13:48.539935 2026] [:error] [pid 32255:tid 32302] [client 20.65.118.88:45939] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclPvGnfn-AtRoMbquww6gAAAEs"]
[Mon Mar 30 00:13:48.989658 2026] [:error] [pid 32255:tid 32296] [client 20.65.118.88:35681] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclPvGnfn-AtRoMbquww7QAAAEU"]
[Mon Mar 30 00:13:49.421991 2026] [:error] [pid 32257:tid 32329] [client 20.65.118.88:17824] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclPvSE3TArOFrUtgWqJMwAAAIs"]
[Mon Mar 30 00:13:49.869005 2026] [:error] [pid 23137:tid 23149] [client 20.65.118.88:32654] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclPvRaWQa7LdZ_qGFYStgAAAYo"]
[Mon Mar 30 00:13:50.305330 2026] [:error] [pid 23250:tid 23268] [client 20.65.118.88:3659] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclPvpxrpj-dQjy1cvogZwAAAlA"]
[Mon Mar 30 00:13:50.742826 2026] [:error] [pid 23167:tid 23180] [client 20.65.118.88:19313] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclPvhIAHJCFaHff3_fmZQAAAco"]
[Mon Mar 30 00:13:51.165174 2026] [:error] [pid 23167:tid 23190] [client 20.65.118.88:21294] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclPvxIAHJCFaHff3_fmZwAAAdQ"]
[Mon Mar 30 00:13:51.571721 2026] [:error] [pid 32257:tid 32319] [client 20.65.118.88:18680] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclPvyE3TArOFrUtgWqJPQAAAIE"]
[Mon Mar 30 00:13:51.984528 2026] [:error] [pid 32257:tid 32335] [client 20.65.118.88:27438] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclPvyE3TArOFrUtgWqJQgAAAJE"]
[Mon Mar 30 00:13:52.410944 2026] [:error] [pid 32257:tid 32330] [client 20.65.118.88:43336] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclPwCE3TArOFrUtgWqJSgAAAIw"]
[Mon Mar 30 00:13:52.850514 2026] [:error] [pid 8818:tid 8826] [client 20.65.118.88:18638] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclPwCCDvotZNSF0FBoAzgAAAUQ"]
[Mon Mar 30 00:13:53.283356 2026] [:error] [pid 32257:tid 32335] [client 20.65.118.88:29206] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclPwSE3TArOFrUtgWqJTQAAAJE"]
[Mon Mar 30 00:13:53.713904 2026] [:error] [pid 32254:tid 32282] [client 20.65.118.88:32667] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclPwaug2IHuyGgCTn9r1gAAABI"]
[Mon Mar 30 00:13:54.148211 2026] [:error] [pid 23168:tid 23201] [client 20.65.118.88:45928] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclPwmP8p0yRL8ot_2_QBQAAAgQ"]
[Mon Mar 30 00:13:54.583161 2026] [:error] [pid 23168:tid 23210] [client 20.65.118.88:27453] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclPwmP8p0yRL8ot_2_QBgAAAg0"]
[Mon Mar 30 00:13:54.999363 2026] [:error] [pid 8818:tid 8841] [client 20.65.118.88:43370] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclPwiCDvotZNSF0FBoA0wAAAVM"]
[Mon Mar 30 00:13:55.456965 2026] [:error] [pid 32257:tid 32335] [client 20.65.118.88:44956] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclPwyE3TArOFrUtgWqJVQAAAJE"]
[Mon Mar 30 00:13:55.905796 2026] [:error] [pid 8818:tid 8828] [client 20.65.118.88:32682] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclPwyCDvotZNSF0FBoA1QAAAUY"]
[Mon Mar 30 00:13:56.323121 2026] [:error] [pid 32359:tid 32384] [client 20.65.118.88:43357] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclPxAMb8G3UzfQP3WhCBgAAANc"]
[Mon Mar 30 00:13:56.751581 2026] [:error] [pid 32255:tid 32300] [client 20.65.118.88:43356] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclPxGnfn-AtRoMbquww8AAAAEk"]
[Mon Mar 30 00:13:57.179905 2026] [:error] [pid 32255:tid 32293] [client 20.65.118.88:29194] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclPxWnfn-AtRoMbquww8QAAAEI"]
[Mon Mar 30 00:13:57.593134 2026] [:error] [pid 32255:tid 32297] [client 20.65.118.88:19238] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclPxWnfn-AtRoMbquww9gAAAEY"]
[Mon Mar 30 00:13:58.057857 2026] [:error] [pid 32257:tid 32339] [client 20.65.118.88:3612] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclPxiE3TArOFrUtgWqJWwAAAJU"]
[Mon Mar 30 00:13:58.477633 2026] [:error] [pid 32255:tid 32310] [client 20.65.118.88:44981] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclPxmnfn-AtRoMbquww-QAAAFM"]
[Mon Mar 30 00:13:58.905927 2026] [:error] [pid 23168:tid 23214] [client 20.65.118.88:3639] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclPxmP8p0yRL8ot_2_QEAAAAhE"]
[Mon Mar 30 00:13:59.340535 2026] [:error] [pid 32257:tid 32321] [client 20.65.118.88:3585] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "aclPxyE3TArOFrUtgWqJXAAAAIM"]
[Mon Mar 30 00:13:59.777330 2026] [:error] [pid 23168:tid 23210] [client 20.65.118.88:44988] [client 20.65.118.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "aclPx2P8p0yRL8ot_2_QFQAAAg0"]
[Mon Mar 30 00:14:00.228190 2026] [:error] [pid 23284:tid 23298] [client 20.65.118.88:3923] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Mon Mar 30 00:14:00.430969 2026] [:error] [pid 23284:tid 23289] [client 20.65.118.88:3923] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Mon Mar 30 00:14:00.637479 2026] [:error] [pid 23284:tid 23308] [client 20.65.118.88:3923] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Mon Mar 30 00:14:00.843151 2026] [:error] [pid 23284:tid 23290] [client 20.65.118.88:3923] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Mon Mar 30 00:14:01.045940 2026] [:error] [pid 23284:tid 23307] [client 20.65.118.88:3923] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Mar 30 00:14:01.248756 2026] [:error] [pid 23284:tid 23287] [client 20.65.118.88:3923] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Mon Mar 30 00:14:01.451913 2026] [:error] [pid 23284:tid 23305] [client 20.65.118.88:3923] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Mon Mar 30 00:37:11.851618 2026] [:error] [pid 8818:tid 8830] [client 20.226.46.201:35668] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Mon Mar 30 00:37:12.811301 2026] [:error] [pid 8818:tid 8830] [client 20.226.46.201:35668] File does not exist: /usr/local/apache/htdocs/suspended-page/ad1.php
[Mon Mar 30 00:37:13.122696 2026] [:error] [pid 8818:tid 8822] [client 20.226.46.201:35668] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Mon Mar 30 00:37:13.431326 2026] [:error] [pid 8818:tid 8840] [client 20.226.46.201:35668] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tanjiro.php"] [unique_id "aclVOSCDvotZNSF0FBoGgwAAAVI"]
[Mon Mar 30 00:37:14.049802 2026] [:error] [pid 23168:tid 23206] [client 20.226.46.201:35659] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tanjiro.php"] [unique_id "aclVOmP8p0yRL8ot_2_YOAAAAgk"]
[Mon Mar 30 00:37:14.671378 2026] [:error] [pid 32255:tid 32296] [client 20.226.46.201:35697] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tanjiro.php"] [unique_id "aclVOmnfn-AtRoMbquw7_QAAAEU"]
[Mon Mar 30 00:37:15.304345 2026] [:error] [pid 32254:tid 32270] [client 20.226.46.201:35676] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tanjiro.php"] [unique_id "aclVO6ug2IHuyGgCTn9udwAAAAY"]
[Mon Mar 30 00:37:15.921486 2026] [:error] [pid 23168:tid 23213] [client 20.226.46.201:35663] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aclVO2P8p0yRL8ot_2_YPQAAAhA"]
[Mon Mar 30 00:37:16.539911 2026] [:error] [pid 32257:tid 32330] [client 20.226.46.201:35709] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aclVPCE3TArOFrUtgWqepAAAAIw"]
[Mon Mar 30 00:37:17.194248 2026] [:error] [pid 32255:tid 32305] [client 20.226.46.201:35660] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aclVPWnfn-AtRoMbquw8CAAAAE4"]
[Mon Mar 30 00:37:17.811494 2026] [:error] [pid 32257:tid 32342] [client 20.226.46.201:35592] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aclVPSE3TArOFrUtgWqeqAAAAJg"]
[Mon Mar 30 00:37:18.451892 2026] [:error] [pid 23284:tid 23299] [client 20.226.46.201:35680] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aclVPozBujdPHsq7wyQg-gAAAo0"]
[Mon Mar 30 00:37:19.090321 2026] [:error] [pid 23284:tid 23296] [client 20.226.46.201:35686] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aclVP4zBujdPHsq7wyQg_QAAAoo"]
[Mon Mar 30 00:37:19.711981 2026] [:error] [pid 32255:tid 32293] [client 20.226.46.201:35696] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aclVP2nfn-AtRoMbquw8EwAAAEI"]
[Mon Mar 30 00:37:20.334577 2026] [:error] [pid 23250:tid 23259] [client 20.226.46.201:35695] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file22.php"] [unique_id "aclVQJxrpj-dQjy1cvoltAAAAkc"]
[Mon Mar 30 00:37:20.954316 2026] [:error] [pid 32257:tid 32318] [client 20.226.46.201:35590] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inwp.php"] [unique_id "aclVQCE3TArOFrUtgWqetQAAAIA"]
[Mon Mar 30 00:37:21.574897 2026] [:error] [pid 23168:tid 23218] [client 20.226.46.201:35699] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inwp.php"] [unique_id "aclVQWP8p0yRL8ot_2_YRgAAAhU"]
[Mon Mar 30 00:37:22.202890 2026] [:error] [pid 23167:tid 23180] [client 20.226.46.201:35599] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inwp.php"] [unique_id "aclVQhIAHJCFaHff3_fu5AAAAco"]
[Mon Mar 30 00:37:22.829918 2026] [:error] [pid 23284:tid 23296] [client 20.226.46.201:35687] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inwp.php"] [unique_id "aclVQozBujdPHsq7wyQhCQAAAoo"]
[Mon Mar 30 00:37:23.466545 2026] [:error] [pid 23167:tid 23173] [client 20.226.46.201:35704] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "aclVQxIAHJCFaHff3_fu5QAAAcM"]
[Mon Mar 30 00:37:24.093805 2026] [:error] [pid 32255:tid 32309] [client 20.226.46.201:35675] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "aclVRGnfn-AtRoMbquw8HQAAAFI"]
[Mon Mar 30 00:37:24.709634 2026] [:error] [pid 32257:tid 32331] [client 20.226.46.201:35625] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "aclVRCE3TArOFrUtgWqezgAAAI0"]
[Mon Mar 30 00:37:25.350746 2026] [:error] [pid 32254:tid 32266] [client 20.226.46.201:35609] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "aclVRaug2IHuyGgCTn9ufgAAAAI"]
[Mon Mar 30 00:37:25.974788 2026] [:error] [pid 23284:tid 23291] [client 20.226.46.201:35601] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nz.php"] [unique_id "aclVRYzBujdPHsq7wyQhDwAAAoU"]
[Mon Mar 30 00:37:26.591350 2026] [:error] [pid 32257:tid 32330] [client 20.226.46.201:35649] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nz.php"] [unique_id "aclVRiE3TArOFrUtgWqe1gAAAIw"]
[Mon Mar 30 00:37:27.217359 2026] [:error] [pid 23168:tid 23208] [client 20.226.46.201:35690] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nz.php"] [unique_id "aclVR2P8p0yRL8ot_2_YXAAAAgs"]
[Mon Mar 30 00:37:27.842986 2026] [:error] [pid 32257:tid 32340] [client 20.226.46.201:35602] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nz.php"] [unique_id "aclVRyE3TArOFrUtgWqe2wAAAJY"]
[Mon Mar 30 00:37:28.470924 2026] [:error] [pid 23284:tid 23306] [client 20.226.46.201:35604] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aclVSIzBujdPHsq7wyQhFwAAApQ"]
[Mon Mar 30 00:37:29.090549 2026] [:error] [pid 32255:tid 32314] [client 20.226.46.201:35618] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aclVSWnfn-AtRoMbquw8JwAAAFc"]
[Mon Mar 30 00:37:29.716972 2026] [:error] [pid 32255:tid 32294] [client 20.226.46.201:35670] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aclVSWnfn-AtRoMbquw8LAAAAEM"]
[Mon Mar 30 00:37:30.339191 2026] [:error] [pid 23168:tid 23210] [client 20.226.46.201:35662] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnn_.php"] [unique_id "aclVSmP8p0yRL8ot_2_YYQAAAg0"]
[Mon Mar 30 00:37:30.964875 2026] [:error] [pid 8818:tid 8823] [client 20.226.46.201:35664] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aclVSiCDvotZNSF0FBoGkQAAAUE"]
[Mon Mar 30 00:37:31.595042 2026] [:error] [pid 23137:tid 23147] [client 20.226.46.201:35679] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aclVSxaWQa7LdZ_qGFYXBAAAAYg"]
[Mon Mar 30 00:37:32.219703 2026] [:error] [pid 32257:tid 32319] [client 20.226.46.201:35672] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aclVTCE3TArOFrUtgWqe6gAAAIE"]
[Mon Mar 30 00:37:32.853745 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:35596] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anz.php"] [unique_id "aclVTCE3TArOFrUtgWqe8wAAAJE"]
[Mon Mar 30 00:37:33.477043 2026] [:error] [pid 32257:tid 32323] [client 20.226.46.201:35657] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclVTSE3TArOFrUtgWqe9wAAAIU"]
[Mon Mar 30 00:37:34.099655 2026] [:error] [pid 32257:tid 32328] [client 20.226.46.201:35708] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclVTiE3TArOFrUtgWqe_AAAAIo"]
[Mon Mar 30 00:37:34.725334 2026] [:error] [pid 32255:tid 32297] [client 20.226.46.201:35682] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclVTmnfn-AtRoMbquw8PgAAAEY"]
[Mon Mar 30 00:37:35.344265 2026] [:error] [pid 23167:tid 23188] [client 20.226.46.201:35594] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclVTxIAHJCFaHff3_fu6wAAAdI"]
[Mon Mar 30 00:37:35.967834 2026] [:error] [pid 32255:tid 32293] [client 20.226.46.201:35648] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aclVT2nfn-AtRoMbquw8QQAAAEI"]
[Mon Mar 30 00:37:36.593155 2026] [:error] [pid 32255:tid 32307] [client 20.226.46.201:35689] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aclVUGnfn-AtRoMbquw8RwAAAFA"]
[Mon Mar 30 00:37:37.209209 2026] [:error] [pid 8818:tid 8838] [client 20.226.46.201:35642] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aclVUSCDvotZNSF0FBoGoQAAAVA"]
[Mon Mar 30 00:37:37.834389 2026] [:error] [pid 23250:tid 23274] [client 20.226.46.201:35620] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file66.php"] [unique_id "aclVUZxrpj-dQjy1cvolwQAAAlY"]
[Mon Mar 30 00:37:38.460862 2026] [:error] [pid 32257:tid 32334] [client 20.226.46.201:35706] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aclVUiE3TArOFrUtgWqfFQAAAJA"]
[Mon Mar 30 00:37:39.090069 2026] [:error] [pid 32257:tid 32330] [client 20.226.46.201:35685] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aclVUyE3TArOFrUtgWqfGQAAAIw"]
[Mon Mar 30 00:37:39.706113 2026] [:error] [pid 32255:tid 32300] [client 20.226.46.201:35710] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aclVU2nfn-AtRoMbquw8TgAAAEk"]
[Mon Mar 30 00:37:40.330139 2026] [:error] [pid 23284:tid 23302] [client 20.226.46.201:35658] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kure.php"] [unique_id "aclVVIzBujdPHsq7wyQhIAAAApA"]
[Mon Mar 30 00:37:40.954430 2026] [:error] [pid 23284:tid 23306] [client 20.226.46.201:35655] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aclVVIzBujdPHsq7wyQhJAAAApQ"]
[Mon Mar 30 00:37:41.583758 2026] [:error] [pid 32255:tid 32294] [client 20.226.46.201:35591] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aclVVWnfn-AtRoMbquw8XAAAAEM"]
[Mon Mar 30 00:37:42.207377 2026] [:error] [pid 32255:tid 32300] [client 20.226.46.201:35674] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aclVVmnfn-AtRoMbquw8XwAAAEk"]
[Mon Mar 30 00:37:42.831089 2026] [:error] [pid 23167:tid 23174] [client 20.226.46.201:35551] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aclVVhIAHJCFaHff3_fvCgAAAcQ"]
[Mon Mar 30 00:37:43.496096 2026] [:error] [pid 32255:tid 32311] [client 20.226.46.201:35527] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aclVV2nfn-AtRoMbquw8ZQAAAFQ"]
[Mon Mar 30 00:37:44.120578 2026] [:error] [pid 32359:tid 32364] [client 20.226.46.201:35698] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aclVWAMb8G3UzfQP3WhE_QAAAMM"]
[Mon Mar 30 00:37:44.737686 2026] [:error] [pid 32257:tid 32337] [client 20.226.46.201:35598] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aclVWCE3TArOFrUtgWqfKAAAAJM"]
[Mon Mar 30 00:37:45.362280 2026] [:error] [pid 32255:tid 32296] [client 20.226.46.201:35711] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaje.php"] [unique_id "aclVWWnfn-AtRoMbquw8ZwAAAEU"]
[Mon Mar 30 00:37:45.982677 2026] [:error] [pid 23168:tid 23210] [client 20.226.46.201:35524] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aclVWWP8p0yRL8ot_2_YigAAAg0"]
[Mon Mar 30 00:37:46.607452 2026] [:error] [pid 32257:tid 32322] [client 20.226.46.201:35525] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aclVWiE3TArOFrUtgWqfMgAAAIQ"]
[Mon Mar 30 00:37:47.225657 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:35640] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aclVWyE3TArOFrUtgWqfOgAAAJE"]
[Mon Mar 30 00:37:47.844164 2026] [:error] [pid 32257:tid 32322] [client 20.226.46.201:35608] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/msy.php"] [unique_id "aclVWyE3TArOFrUtgWqfQwAAAIQ"]
[Mon Mar 30 00:37:48.466947 2026] [:error] [pid 32257:tid 32339] [client 20.226.46.201:35611] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aclVXCE3TArOFrUtgWqfRQAAAJU"]
[Mon Mar 30 00:37:49.092166 2026] [:error] [pid 23167:tid 23190] [client 20.226.46.201:35630] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aclVXRIAHJCFaHff3_fvGAAAAdQ"]
[Mon Mar 30 00:37:49.721894 2026] [:error] [pid 23284:tid 23289] [client 20.226.46.201:35584] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aclVXYzBujdPHsq7wyQhQwAAAoM"]
[Mon Mar 30 00:37:50.374422 2026] [:error] [pid 23284:tid 23296] [client 20.226.46.201:35665] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fgd.php"] [unique_id "aclVXozBujdPHsq7wyQhSgAAAoo"]
[Mon Mar 30 00:37:51.000449 2026] [:error] [pid 23284:tid 23295] [client 20.226.46.201:35600] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aclVXozBujdPHsq7wyQhTQAAAok"]
[Mon Mar 30 00:37:51.637519 2026] [:error] [pid 32257:tid 32338] [client 20.226.46.201:35619] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aclVXyE3TArOFrUtgWqfTwAAAJQ"]
[Mon Mar 30 00:37:52.274152 2026] [:error] [pid 32257:tid 32341] [client 20.226.46.201:35654] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aclVYCE3TArOFrUtgWqfVAAAAJc"]
[Mon Mar 30 00:37:53.012125 2026] [:error] [pid 23250:tid 23260] [client 20.226.46.201:35652] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/X7T6.php"] [unique_id "aclVYZxrpj-dQjy1cvolxwAAAkg"]
[Mon Mar 30 00:37:53.713141 2026] [:error] [pid 23284:tid 23289] [client 20.226.46.201:35628] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aclVYYzBujdPHsq7wyQhWwAAAoM"]
[Mon Mar 30 00:37:54.396275 2026] [:error] [pid 32255:tid 32304] [client 20.226.46.201:35616] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aclVYmnfn-AtRoMbquw8cAAAAE0"]
[Mon Mar 30 00:37:55.417802 2026] [:error] [pid 32257:tid 32326] [client 20.226.46.201:35585] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aclVYyE3TArOFrUtgWqfcAAAAIg"]
[Mon Mar 30 00:37:56.093126 2026] [:error] [pid 32257:tid 32318] [client 20.226.46.201:35681] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alog.php"] [unique_id "aclVZCE3TArOFrUtgWqfdgAAAIA"]
[Mon Mar 30 00:37:56.708727 2026] [:error] [pid 32257:tid 32325] [client 20.226.46.201:35692] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aclVZCE3TArOFrUtgWqffwAAAIc"]
[Mon Mar 30 00:37:57.344201 2026] [:error] [pid 32257:tid 32318] [client 20.226.46.201:35669] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aclVZSE3TArOFrUtgWqfhQAAAIA"]
[Mon Mar 30 00:37:57.965443 2026] [:error] [pid 8818:tid 8834] [client 20.226.46.201:35635] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aclVZSCDvotZNSF0FBoGtAAAAUw"]
[Mon Mar 30 00:37:58.591644 2026] [:error] [pid 23284:tid 23307] [client 20.226.46.201:35653] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aclVZozBujdPHsq7wyQhYgAAApU"]
[Mon Mar 30 00:37:59.213956 2026] [:error] [pid 23284:tid 23300] [client 20.226.46.201:35688] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sef.php"] [unique_id "aclVZ4zBujdPHsq7wyQhaAAAAo4"]
[Mon Mar 30 00:37:59.836530 2026] [:error] [pid 32257:tid 32325] [client 20.226.46.201:35651] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sef.php"] [unique_id "aclVZyE3TArOFrUtgWqflAAAAIc"]
[Mon Mar 30 00:38:00.461620 2026] [:error] [pid 32255:tid 32292] [client 20.226.46.201:35612] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sef.php"] [unique_id "aclVaGnfn-AtRoMbquw8ewAAAEE"]
[Mon Mar 30 00:38:01.082785 2026] [:error] [pid 23284:tid 23303] [client 20.226.46.201:35643] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sef.php"] [unique_id "aclVaYzBujdPHsq7wyQhbAAAApE"]
[Mon Mar 30 00:38:01.698670 2026] [:error] [pid 23284:tid 23308] [client 20.226.46.201:35631] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ztv.php"] [unique_id "aclVaYzBujdPHsq7wyQhdAAAApY"]
[Mon Mar 30 00:38:02.317697 2026] [:error] [pid 8818:tid 8823] [client 20.226.46.201:35537] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ztv.php"] [unique_id "aclVaiCDvotZNSF0FBoGuQAAAUE"]
[Mon Mar 30 00:38:02.946410 2026] [:error] [pid 32255:tid 32313] [client 20.226.46.201:35523] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ztv.php"] [unique_id "aclVamnfn-AtRoMbquw8ggAAAFY"]
[Mon Mar 30 00:38:03.562360 2026] [:error] [pid 32257:tid 32342] [client 20.226.46.201:35533] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ztv.php"] [unique_id "aclVayE3TArOFrUtgWqfnQAAAJg"]
[Mon Mar 30 00:38:04.182130 2026] [:error] [pid 32257:tid 32337] [client 20.226.46.201:35614] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Rk41.php"] [unique_id "aclVbCE3TArOFrUtgWqfpAAAAJM"]
[Mon Mar 30 00:38:04.802761 2026] [:error] [pid 23284:tid 23292] [client 20.226.46.201:35661] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Rk41.php"] [unique_id "aclVbIzBujdPHsq7wyQhgAAAAoY"]
[Mon Mar 30 00:38:05.421929 2026] [:error] [pid 32255:tid 32311] [client 20.226.46.201:35646] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Rk41.php"] [unique_id "aclVbWnfn-AtRoMbquw8igAAAFQ"]
[Mon Mar 30 00:38:06.037517 2026] [:error] [pid 32255:tid 32313] [client 20.226.46.201:35557] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Rk41.php"] [unique_id "aclVbmnfn-AtRoMbquw8kAAAAFY"]
[Mon Mar 30 00:38:06.656748 2026] [:error] [pid 23250:tid 23270] [client 20.226.46.201:35603] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "aclVbpxrpj-dQjy1cvolygAAAlI"]
[Mon Mar 30 00:38:07.280193 2026] [:error] [pid 23168:tid 23220] [client 20.226.46.201:35623] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclVb2P8p0yRL8ot_2_YoQAAAhc"]
[Mon Mar 30 00:38:07.904849 2026] [:error] [pid 32257:tid 32323] [client 20.226.46.201:35694] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclVbyE3TArOFrUtgWqfuwAAAIU"]
[Mon Mar 30 00:38:08.527363 2026] [:error] [pid 32255:tid 32300] [client 20.226.46.201:35521] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aclVcGnfn-AtRoMbquw8lgAAAEk"]
[Mon Mar 30 00:38:09.147810 2026] [:error] [pid 32255:tid 32314] [client 20.226.46.201:35471] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aclVcWnfn-AtRoMbquw8oAAAAFc"]
[Mon Mar 30 00:38:09.770573 2026] [:error] [pid 23284:tid 23302] [client 20.226.46.201:35541] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aclVcYzBujdPHsq7wyQhjAAAApA"]
[Mon Mar 30 00:38:10.393568 2026] [:error] [pid 23284:tid 23289] [client 20.226.46.201:35593] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aclVcozBujdPHsq7wyQhkAAAAoM"]
[Mon Mar 30 00:38:11.018104 2026] [:error] [pid 32257:tid 32341] [client 20.226.46.201:35613] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fm.php"] [unique_id "aclVcyE3TArOFrUtgWqfwwAAAJc"]
[Mon Mar 30 00:38:11.643802 2026] [:error] [pid 32359:tid 32381] [client 20.226.46.201:35641] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aclVcwMb8G3UzfQP3WhFBAAAANQ"]
[Mon Mar 30 00:38:12.265012 2026] [:error] [pid 23168:tid 23206] [client 20.226.46.201:35607] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aclVdGP8p0yRL8ot_2_YpwAAAgk"]
[Mon Mar 30 00:38:12.887977 2026] [:error] [pid 23284:tid 23291] [client 20.226.46.201:35707] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "aclVdIzBujdPHsq7wyQhlQAAAoU"]
[Mon Mar 30 00:38:14.184550 2026] [:error] [pid 23284:tid 23293] [client 20.226.46.201:35615] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Mon Mar 30 00:38:14.498469 2026] [:error] [pid 23284:tid 23291] [client 20.226.46.201:35615] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php
[Mon Mar 30 00:38:15.120953 2026] [:error] [pid 23284:tid 23295] [client 20.226.46.201:35615] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aclVd4zBujdPHsq7wyQhqQAAAok"]
[Mon Mar 30 00:38:16.054073 2026] [:error] [pid 23168:tid 23220] [client 20.226.46.201:35693] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Mon Mar 30 00:38:17.303323 2026] [:error] [pid 23168:tid 23203] [client 20.226.46.201:35693] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Mar 30 00:38:17.611817 2026] [:error] [pid 23168:tid 23211] [client 20.226.46.201:35693] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aclVeWP8p0yRL8ot_2_YuAAAAg4"]
[Mon Mar 30 00:38:18.254655 2026] [:error] [pid 32257:tid 32329] [client 20.226.46.201:35691] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aclVeiE3TArOFrUtgWqf4wAAAIs"]
[Mon Mar 30 00:38:18.874366 2026] [:error] [pid 32257:tid 32321] [client 20.226.46.201:35610] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aclVeiE3TArOFrUtgWqf6AAAAIM"]
[Mon Mar 30 00:38:19.492016 2026] [:error] [pid 23250:tid 23258] [client 20.226.46.201:35683] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aclVe5xrpj-dQjy1cvolzwAAAkY"]
[Mon Mar 30 00:38:20.113591 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:35677] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclVfCE3TArOFrUtgWqf8AAAAJE"]
[Mon Mar 30 00:38:20.732575 2026] [:error] [pid 32257:tid 32334] [client 20.226.46.201:35636] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclVfCE3TArOFrUtgWqf-AAAAJA"]
[Mon Mar 30 00:38:21.353868 2026] [:error] [pid 32257:tid 32318] [client 20.226.46.201:35589] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclVfSE3TArOFrUtgWqf_wAAAIA"]
[Mon Mar 30 00:38:21.979068 2026] [:error] [pid 32257:tid 32336] [client 20.226.46.201:35564] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aclVfSE3TArOFrUtgWqgCAAAAJI"]
[Mon Mar 30 00:38:22.598668 2026] [:error] [pid 8818:tid 8836] [client 20.226.46.201:35574] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aclVfiCDvotZNSF0FBoG0gAAAU4"]
[Mon Mar 30 00:38:23.219378 2026] [:error] [pid 23168:tid 23219] [client 20.226.46.201:35605] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aclVf2P8p0yRL8ot_2_YuQAAAhY"]
[Mon Mar 30 00:38:23.844442 2026] [:error] [pid 23250:tid 23273] [client 20.226.46.201:35621] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aclVf5xrpj-dQjy1cvol1AAAAlU"]
[Mon Mar 30 00:38:24.462135 2026] [:error] [pid 23284:tid 23287] [client 20.226.46.201:35553] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aclVgIzBujdPHsq7wyQhswAAAoE"]
[Mon Mar 30 00:38:25.081643 2026] [:error] [pid 32255:tid 32293] [client 20.226.46.201:35597] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclVgWnfn-AtRoMbquw8tQAAAEI"]
[Mon Mar 30 00:38:25.699218 2026] [:error] [pid 32255:tid 32307] [client 20.226.46.201:35462] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclVgWnfn-AtRoMbquw8twAAAFA"]
[Mon Mar 30 00:38:26.317192 2026] [:error] [pid 23137:tid 23155] [client 20.226.46.201:35703] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclVghaWQa7LdZ_qGFYXHAAAAZA"]
[Mon Mar 30 00:38:26.936873 2026] [:error] [pid 23284:tid 23309] [client 20.226.46.201:35520] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aclVgozBujdPHsq7wyQhwQAAApc"]
[Mon Mar 30 00:38:27.567090 2026] [:error] [pid 23284:tid 23291] [client 20.226.46.201:35540] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aclVg4zBujdPHsq7wyQhxQAAAoU"]
[Mon Mar 30 00:38:28.188491 2026] [:error] [pid 32255:tid 32305] [client 20.226.46.201:35617] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aclVhGnfn-AtRoMbquw8yQAAAE4"]
[Mon Mar 30 00:38:28.811091 2026] [:error] [pid 23284:tid 23289] [client 20.226.46.201:35539] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aclVhIzBujdPHsq7wyQhywAAAoM"]
[Mon Mar 30 00:38:29.431411 2026] [:error] [pid 23284:tid 23295] [client 20.226.46.201:35536] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aclVhYzBujdPHsq7wyQh0gAAAok"]
[Mon Mar 30 00:38:30.050381 2026] [:error] [pid 32255:tid 32292] [client 20.226.46.201:35392] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aclVhmnfn-AtRoMbquw80AAAAEE"]
[Mon Mar 30 00:38:30.666826 2026] [:error] [pid 32255:tid 32291] [client 20.226.46.201:35586] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "aclVhmnfn-AtRoMbquw81AAAAEA"]
[Mon Mar 30 00:38:31.287914 2026] [:error] [pid 23284:tid 23299] [client 20.226.46.201:35491] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aclVh4zBujdPHsq7wyQh4AAAAo0"]
[Mon Mar 30 00:38:31.909015 2026] [:error] [pid 32257:tid 32320] [client 20.226.46.201:35666] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aclVhyE3TArOFrUtgWqgJgAAAII"]
[Mon Mar 30 00:38:32.526716 2026] [:error] [pid 32257:tid 32334] [client 20.226.46.201:35700] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aclViCE3TArOFrUtgWqgKgAAAJA"]
[Mon Mar 30 00:38:33.146661 2026] [:error] [pid 32257:tid 32342] [client 20.226.46.201:35588] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "aclViSE3TArOFrUtgWqgMQAAAJg"]
[Mon Mar 30 00:38:33.770174 2026] [:error] [pid 32257:tid 32325] [client 20.226.46.201:35580] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/link.php"] [unique_id "aclViSE3TArOFrUtgWqgOgAAAIc"]
[Mon Mar 30 00:38:34.385736 2026] [:error] [pid 23168:tid 23215] [client 20.226.46.201:35684] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/link.php"] [unique_id "aclVimP8p0yRL8ot_2_YuwAAAhI"]
[Mon Mar 30 00:38:35.006865 2026] [:error] [pid 32257:tid 32330] [client 20.226.46.201:35529] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/link.php"] [unique_id "aclViyE3TArOFrUtgWqgQwAAAIw"]
[Mon Mar 30 00:38:35.626512 2026] [:error] [pid 23168:tid 23216] [client 20.226.46.201:35650] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/link.php"] [unique_id "aclVi2P8p0yRL8ot_2_YxAAAAhM"]
[Mon Mar 30 00:38:36.249181 2026] [:error] [pid 32257:tid 32321] [client 20.226.46.201:35645] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclVjCE3TArOFrUtgWqgTAAAAIM"]
[Mon Mar 30 00:38:36.867809 2026] [:error] [pid 23284:tid 23305] [client 20.226.46.201:35473] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclVjIzBujdPHsq7wyQh7AAAApM"]
[Mon Mar 30 00:38:37.486495 2026] [:error] [pid 23284:tid 23293] [client 20.226.46.201:35632] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclVjYzBujdPHsq7wyQh-AAAAoc"]
[Mon Mar 30 00:38:38.106035 2026] [:error] [pid 32257:tid 32319] [client 20.226.46.201:35538] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "aclVjiE3TArOFrUtgWqgXAAAAIE"]
[Mon Mar 30 00:38:38.730530 2026] [:error] [pid 32255:tid 32305] [client 20.226.46.201:35545] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclVjmnfn-AtRoMbquw84wAAAE4"]
[Mon Mar 30 00:38:39.354892 2026] [:error] [pid 32255:tid 32313] [client 20.226.46.201:35559] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclVj2nfn-AtRoMbquw86AAAAFY"]
[Mon Mar 30 00:38:39.973127 2026] [:error] [pid 23284:tid 23293] [client 20.226.46.201:35526] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclVj4zBujdPHsq7wyQiAwAAAoc"]
[Mon Mar 30 00:38:40.588601 2026] [:error] [pid 23284:tid 23296] [client 20.226.46.201:35467] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aclVkIzBujdPHsq7wyQiBwAAAoo"]
[Mon Mar 30 00:38:41.209063 2026] [:error] [pid 23284:tid 23309] [client 20.226.46.201:35464] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aclVkYzBujdPHsq7wyQiDQAAApc"]
[Mon Mar 30 00:38:41.826044 2026] [:error] [pid 23137:tid 23157] [client 20.226.46.201:35644] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aclVkRaWQa7LdZ_qGFYXLwAAAZI"]
[Mon Mar 30 00:38:42.445002 2026] [:error] [pid 23284:tid 23298] [client 20.226.46.201:35705] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aclVkozBujdPHsq7wyQiEAAAAow"]
[Mon Mar 30 00:38:43.066580 2026] [:error] [pid 32255:tid 32303] [client 20.226.46.201:35627] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/network.php"] [unique_id "aclVk2nfn-AtRoMbquw9AgAAAEw"]
[Mon Mar 30 00:38:43.689917 2026] [:error] [pid 32255:tid 32311] [client 20.226.46.201:35506] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclVk2nfn-AtRoMbquw9DQAAAFQ"]
[Mon Mar 30 00:38:44.313027 2026] [:error] [pid 32255:tid 32306] [client 20.226.46.201:35561] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclVlGnfn-AtRoMbquw9FAAAAE8"]
[Mon Mar 30 00:38:44.943720 2026] [:error] [pid 23250:tid 23266] [client 20.226.46.201:35485] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclVlJxrpj-dQjy1cvol4QAAAk4"]
[Mon Mar 30 00:38:45.565163 2026] [:error] [pid 23168:tid 23213] [client 20.226.46.201:35546] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aclVlWP8p0yRL8ot_2_Y0QAAAhA"]
[Mon Mar 30 00:38:46.181580 2026] [:error] [pid 32359:tid 32381] [client 20.226.46.201:35576] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclVlgMb8G3UzfQP3WhFFQAAANQ"]
[Mon Mar 30 00:38:46.829158 2026] [:error] [pid 23250:tid 23272] [client 20.226.46.201:35457] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclVlpxrpj-dQjy1cvol6QAAAlQ"]
[Mon Mar 30 00:38:47.447927 2026] [:error] [pid 32257:tid 32342] [client 20.226.46.201:35639] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclVlyE3TArOFrUtgWqgcAAAAJg"]
[Mon Mar 30 00:38:48.071838 2026] [:error] [pid 32257:tid 32337] [client 20.226.46.201:35535] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "aclVmCE3TArOFrUtgWqgeAAAAJM"]
[Mon Mar 30 00:38:48.688528 2026] [:error] [pid 32254:tid 32273] [client 20.226.46.201:35463] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclVmKug2IHuyGgCTn9usAAAAAk"]
[Mon Mar 30 00:38:49.310036 2026] [:error] [pid 8818:tid 8827] [client 20.226.46.201:35575] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclVmSCDvotZNSF0FBoG3QAAAUU"]
[Mon Mar 30 00:38:49.938294 2026] [:error] [pid 23167:tid 23175] [client 20.226.46.201:35678] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclVmRIAHJCFaHff3_fvbgAAAcU"]
[Mon Mar 30 00:38:50.566126 2026] [:error] [pid 32257:tid 32340] [client 20.226.46.201:35638] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "aclVmiE3TArOFrUtgWqggAAAAJY"]
[Mon Mar 30 00:38:51.193711 2026] [:error] [pid 32255:tid 32291] [client 20.226.46.201:35552] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aclVm2nfn-AtRoMbquw9KQAAAEA"]
[Mon Mar 30 00:38:51.823277 2026] [:error] [pid 8818:tid 8831] [client 20.226.46.201:35702] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclVmyCDvotZNSF0FBoG4gAAAUk"]
[Mon Mar 30 00:38:52.444485 2026] [:error] [pid 8818:tid 8829] [client 20.226.46.201:35543] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclVnCCDvotZNSF0FBoG5gAAAUc"]
[Mon Mar 30 00:38:53.068028 2026] [:error] [pid 23284:tid 23289] [client 20.226.46.201:35544] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "aclVnYzBujdPHsq7wyQiMwAAAoM"]
[Mon Mar 30 00:38:53.685583 2026] [:error] [pid 23284:tid 23295] [client 20.226.46.201:35510] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aclVnYzBujdPHsq7wyQiOAAAAok"]
[Mon Mar 30 00:38:54.310593 2026] [:error] [pid 32359:tid 32376] [client 20.226.46.201:35481] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aclVngMb8G3UzfQP3WhFGwAAAM8"]
[Mon Mar 30 00:38:54.938012 2026] [:error] [pid 23250:tid 23261] [client 20.226.46.201:35542] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aclVnpxrpj-dQjy1cvol-gAAAkk"]
[Mon Mar 30 00:38:55.563002 2026] [:error] [pid 32359:tid 32366] [client 20.226.46.201:35595] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aclVnwMb8G3UzfQP3WhFHwAAAMU"]
[Mon Mar 30 00:38:56.183321 2026] [:error] [pid 32257:tid 32322] [client 20.226.46.201:35622] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aclVoCE3TArOFrUtgWqglQAAAIQ"]
[Mon Mar 30 00:38:56.808555 2026] [:error] [pid 32255:tid 32295] [client 20.226.46.201:35558] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclVoGnfn-AtRoMbquw9LQAAAEQ"]
[Mon Mar 30 00:38:57.437465 2026] [:error] [pid 23284:tid 23300] [client 20.226.46.201:35671] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclVoYzBujdPHsq7wyQiRAAAAo4"]
[Mon Mar 30 00:38:58.057563 2026] [:error] [pid 23284:tid 23309] [client 20.226.46.201:35489] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclVoozBujdPHsq7wyQiSQAAApc"]
[Mon Mar 30 00:38:58.674904 2026] [:error] [pid 23284:tid 23287] [client 20.226.46.201:35701] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "aclVoozBujdPHsq7wyQiUgAAAoE"]
[Mon Mar 30 00:38:59.298239 2026] [:error] [pid 23137:tid 23159] [client 20.226.46.201:35572] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclVoxaWQa7LdZ_qGFYXQAAAAZQ"]
[Mon Mar 30 00:38:59.925005 2026] [:error] [pid 23167:tid 23191] [client 20.226.46.201:35474] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclVoxIAHJCFaHff3_fvggAAAdU"]
[Mon Mar 30 00:39:00.547056 2026] [:error] [pid 32257:tid 32340] [client 20.226.46.201:35509] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclVpCE3TArOFrUtgWqgowAAAJY"]
[Mon Mar 30 00:39:01.177342 2026] [:error] [pid 8818:tid 8835] [client 20.226.46.201:35647] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aclVpSCDvotZNSF0FBoG7QAAAU0"]
[Mon Mar 30 00:39:01.805994 2026] [:error] [pid 32255:tid 32298] [client 20.226.46.201:35498] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclVpWnfn-AtRoMbquw9NAAAAEc"]
[Mon Mar 30 00:39:02.424141 2026] [:error] [pid 32257:tid 32319] [client 20.226.46.201:35482] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclVpiE3TArOFrUtgWqgqwAAAIE"]
[Mon Mar 30 00:39:03.045506 2026] [:error] [pid 32255:tid 32310] [client 20.226.46.201:35563] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclVp2nfn-AtRoMbquw9OgAAAFM"]
[Mon Mar 30 00:39:03.661033 2026] [:error] [pid 32257:tid 32320] [client 20.226.46.201:35507] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "aclVpyE3TArOFrUtgWqguAAAAII"]
[Mon Mar 30 00:39:04.282818 2026] [:error] [pid 23168:tid 23210] [client 20.226.46.201:35568] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/xp.php"] [unique_id "aclVqGP8p0yRL8ot_2_Y_AAAAg0"]
[Mon Mar 30 00:39:04.902729 2026] [:error] [pid 32255:tid 32311] [client 20.226.46.201:35460] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/xp.php"] [unique_id "aclVqGnfn-AtRoMbquw9PAAAAFQ"]
[Mon Mar 30 00:39:05.522499 2026] [:error] [pid 32255:tid 32303] [client 20.226.46.201:35606] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/xp.php"] [unique_id "aclVqWnfn-AtRoMbquw9QgAAAEw"]
[Mon Mar 30 00:39:06.142982 2026] [:error] [pid 32257:tid 32333] [client 20.226.46.201:35582] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/xp.php"] [unique_id "aclVqiE3TArOFrUtgWqgxwAAAI8"]
[Mon Mar 30 00:39:06.771440 2026] [:error] [pid 23250:tid 23275] [client 20.226.46.201:35555] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "aclVqpxrpj-dQjy1cvol_gAAAlc"]
[Mon Mar 30 00:39:07.393014 2026] [:error] [pid 32257:tid 32328] [client 20.226.46.201:35534] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aclVqyE3TArOFrUtgWqgzQAAAIo"]
[Mon Mar 30 00:39:08.019795 2026] [:error] [pid 32255:tid 32313] [client 20.226.46.201:35477] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aclVrGnfn-AtRoMbquw9SQAAAFY"]
[Mon Mar 30 00:39:08.644418 2026] [:error] [pid 23137:tid 23153] [client 20.226.46.201:35579] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aclVrBaWQa7LdZ_qGFYXSQAAAY4"]
[Mon Mar 30 00:39:09.262594 2026] [:error] [pid 23137:tid 23159] [client 20.226.46.201:35578] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclVrRaWQa7LdZ_qGFYXTgAAAZQ"]
[Mon Mar 30 00:39:09.886812 2026] [:error] [pid 23167:tid 23170] [client 20.226.46.201:35394] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclVrRIAHJCFaHff3_fviwAAAcA"]
[Mon Mar 30 00:39:10.518003 2026] [:error] [pid 23284:tid 23286] [client 20.226.46.201:35624] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclVrozBujdPHsq7wyQifQAAAoA"]
[Mon Mar 30 00:39:11.146542 2026] [:error] [pid 32255:tid 32314] [client 20.226.46.201:35483] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aclVr2nfn-AtRoMbquw9UAAAAFc"]
[Mon Mar 30 00:39:11.768460 2026] [:error] [pid 32255:tid 32292] [client 20.226.46.201:35672] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aclVr2nfn-AtRoMbquw9VQAAAEE"]
[Mon Mar 30 00:39:12.390129 2026] [:error] [pid 23284:tid 23293] [client 20.226.46.201:35478] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aclVsIzBujdPHsq7wyQiiwAAAoc"]
[Mon Mar 30 00:39:13.010564 2026] [:error] [pid 32255:tid 32294] [client 20.226.46.201:35556] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/style.php"] [unique_id "aclVsWnfn-AtRoMbquw9XwAAAEM"]
[Mon Mar 30 00:39:13.629513 2026] [:error] [pid 32254:tid 32279] [client 20.226.46.201:35456] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/style.php"] [unique_id "aclVsaug2IHuyGgCTn9uwAAAAA8"]
[Mon Mar 30 00:39:14.251131 2026] [:error] [pid 32255:tid 32296] [client 20.226.46.201:35458] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/style.php"] [unique_id "aclVsmnfn-AtRoMbquw9agAAAEU"]
[Mon Mar 30 00:39:14.881690 2026] [:error] [pid 23284:tid 23290] [client 20.226.46.201:35560] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/style.php"] [unique_id "aclVsozBujdPHsq7wyQilAAAAoQ"]
[Mon Mar 30 00:39:15.518048 2026] [:error] [pid 23284:tid 23299] [client 20.226.46.201:35444] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclVs4zBujdPHsq7wyQimwAAAo0"]
[Mon Mar 30 00:39:16.147409 2026] [:error] [pid 23250:tid 23267] [client 20.226.46.201:35571] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclVtJxrpj-dQjy1cvomCAAAAk8"]
[Mon Mar 30 00:39:16.763010 2026] [:error] [pid 32255:tid 32313] [client 20.226.46.201:35549] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclVtGnfn-AtRoMbquw9dAAAAFY"]
[Mon Mar 30 00:39:17.380091 2026] [:error] [pid 32255:tid 32300] [client 20.226.46.201:35656] [client 20.226.46.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.226.46.201, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aclVtWnfn-AtRoMbquw9eAAAAEk"]
[Mon Mar 30 00:39:17.696434 2026] [:error] [pid 32255:tid 32292] [client 20.226.46.201:35656] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Mon Mar 30 00:39:18.007828 2026] [:error] [pid 32255:tid 32293] [client 20.226.46.201:35656] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aclVtmnfn-AtRoMbquw9gQAAAEI"]
[Mon Mar 30 00:39:18.635136 2026] [:error] [pid 32254:tid 32273] [client 20.226.46.201:35486] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "aclVtqug2IHuyGgCTn9uwgAAAAk"]
[Mon Mar 30 00:39:19.567311 2026] [:error] [pid 23167:tid 23176] [client 20.226.46.201:35479] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aclVtxIAHJCFaHff3_fvmAAAAcY"]
[Mon Mar 30 00:39:20.202100 2026] [:error] [pid 32359:tid 32367] [client 20.226.46.201:35587] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Mon Mar 30 00:39:20.513108 2026] [:error] [pid 32359:tid 32362] [client 20.226.46.201:35587] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Mar 30 00:39:22.072485 2026] [:error] [pid 32359:tid 32382] [client 20.226.46.201:35587] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "aclVugMb8G3UzfQP3WhFOgAAANU"]
[Mon Mar 30 00:39:23.003914 2026] [:error] [pid 8818:tid 8846] [client 20.226.46.201:35581] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Mar 30 00:39:23.311703 2026] [:error] [pid 8818:tid 8833] [client 20.226.46.201:35581] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aclVuyCDvotZNSF0FBoHCwAAAUs"]
[Mon Mar 30 00:39:23.933571 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:35428] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aclVuyE3TArOFrUtgWqg6AAAAJE"]
[Mon Mar 30 00:39:24.552299 2026] [:error] [pid 8818:tid 8831] [client 20.226.46.201:35528] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aclVvCCDvotZNSF0FBoHDgAAAUk"]
[Mon Mar 30 00:39:25.174620 2026] [:error] [pid 32359:tid 32380] [client 20.226.46.201:35488] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aclVvQMb8G3UzfQP3WhFPwAAANM"]
[Mon Mar 30 00:39:25.791337 2026] [:error] [pid 23284:tid 23286] [client 20.226.46.201:35626] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aclVvYzBujdPHsq7wyQi0QAAAoA"]
[Mon Mar 30 00:39:26.414003 2026] [:error] [pid 23284:tid 23294] [client 20.226.46.201:35497] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aclVvozBujdPHsq7wyQi1gAAAog"]
[Mon Mar 30 00:39:27.055874 2026] [:error] [pid 23167:tid 23176] [client 20.226.46.201:35476] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aclVvxIAHJCFaHff3_fvpgAAAcY"]
[Mon Mar 30 00:39:27.704459 2026] [:error] [pid 32359:tid 32370] [client 20.226.46.201:35573] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aclVvwMb8G3UzfQP3WhFQwAAAMk"]
[Mon Mar 30 00:39:28.354605 2026] [:error] [pid 23137:tid 23156] [client 20.226.46.201:35472] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aclVwBaWQa7LdZ_qGFYXawAAAZE"]
[Mon Mar 30 00:39:28.993111 2026] [:error] [pid 23284:tid 23305] [client 20.226.46.201:35415] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aclVwIzBujdPHsq7wyQi4QAAApM"]
[Mon Mar 30 00:39:29.647526 2026] [:error] [pid 32255:tid 32300] [client 20.226.46.201:35468] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aclVwWnfn-AtRoMbquw9igAAAEk"]
[Mon Mar 30 00:39:30.306900 2026] [:error] [pid 32254:tid 32268] [client 20.226.46.201:35577] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aclVwqug2IHuyGgCTn9uzAAAAAQ"]
[Mon Mar 30 00:39:30.936324 2026] [:error] [pid 23284:tid 23307] [client 20.226.46.201:35475] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin.php"] [unique_id "aclVwozBujdPHsq7wyQi6QAAApU"]
[Mon Mar 30 00:39:31.603105 2026] [:error] [pid 23284:tid 23297] [client 20.226.46.201:35396] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aclVw4zBujdPHsq7wyQi8QAAAos"]
[Mon Mar 30 00:39:32.231580 2026] [:error] [pid 23250:tid 23268] [client 20.226.46.201:35514] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Assets/edit.php"] [unique_id "aclVxJxrpj-dQjy1cvomHQAAAlA"]
[Mon Mar 30 00:39:32.851126 2026] [:error] [pid 32255:tid 32311] [client 20.226.46.201:35522] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Assets/edit.php"] [unique_id "aclVxGnfn-AtRoMbquw9mAAAAFQ"]
[Mon Mar 30 00:39:33.472543 2026] [:error] [pid 32255:tid 32306] [client 20.226.46.201:35667] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Assets/edit.php"] [unique_id "aclVxWnfn-AtRoMbquw9nwAAAE8"]
[Mon Mar 30 00:39:34.110150 2026] [:error] [pid 32254:tid 32279] [client 20.226.46.201:35407] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Assets/edit.php"] [unique_id "aclVxqug2IHuyGgCTn9uzwAAAA8"]
[Mon Mar 30 00:39:34.725783 2026] [:error] [pid 23137:tid 23146] [client 20.226.46.201:35419] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "aclVxhaWQa7LdZ_qGFYXdgAAAYc"]
[Mon Mar 30 00:39:35.345747 2026] [:error] [pid 32359:tid 32370] [client 20.226.46.201:35532] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file.php"] [unique_id "aclVxwMb8G3UzfQP3WhFSwAAAMk"]
[Mon Mar 30 00:39:35.965509 2026] [:error] [pid 23250:tid 23275] [client 20.226.46.201:35634] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file.php"] [unique_id "aclVx5xrpj-dQjy1cvomJwAAAlc"]
[Mon Mar 30 00:39:36.593883 2026] [:error] [pid 23284:tid 23293] [client 20.226.46.201:35565] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file.php"] [unique_id "aclVyIzBujdPHsq7wyQi_QAAAoc"]
[Mon Mar 30 00:39:37.217771 2026] [:error] [pid 32254:tid 32286] [client 20.226.46.201:35550] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "aclVyaug2IHuyGgCTn9u1gAAABY"]
[Mon Mar 30 00:39:37.836195 2026] [:error] [pid 23250:tid 23256] [client 20.226.46.201:35469] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "aclVyZxrpj-dQjy1cvomKgAAAkQ"]
[Mon Mar 30 00:39:38.464106 2026] [:error] [pid 32255:tid 32293] [client 20.226.46.201:35500] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "aclVymnfn-AtRoMbquw9qwAAAEI"]
[Mon Mar 30 00:39:39.086445 2026] [:error] [pid 23250:tid 23261] [client 20.226.46.201:35443] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/pkivalidation/log.php"] [unique_id "aclVy5xrpj-dQjy1cvomKwAAAkk"]
[Mon Mar 30 00:39:39.703704 2026] [:error] [pid 23284:tid 23301] [client 20.226.46.201:35393] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aclVy4zBujdPHsq7wyQjBwAAAo8"]
[Mon Mar 30 00:39:40.332036 2026] [:error] [pid 32254:tid 32280] [client 20.226.46.201:35633] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/packed.php"] [unique_id "aclVzKug2IHuyGgCTn9u3wAAABA"]
[Mon Mar 30 00:39:40.962976 2026] [:error] [pid 32359:tid 32377] [client 20.226.46.201:35566] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/packed.php"] [unique_id "aclVzAMb8G3UzfQP3WhFVwAAANA"]
[Mon Mar 30 00:39:41.600773 2026] [:error] [pid 23167:tid 23176] [client 20.226.46.201:35530] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/packed.php"] [unique_id "aclVzRIAHJCFaHff3_fvvwAAAcY"]
[Mon Mar 30 00:39:42.225660 2026] [:error] [pid 8818:tid 8827] [client 20.226.46.201:35487] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aclVziCDvotZNSF0FBoHKQAAAUU"]
[Mon Mar 30 00:39:42.841025 2026] [:error] [pid 8818:tid 8822] [client 20.226.46.201:35410] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aclVziCDvotZNSF0FBoHKwAAAUA"]
[Mon Mar 30 00:39:43.461846 2026] [:error] [pid 23167:tid 23189] [client 20.226.46.201:35431] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aclVzxIAHJCFaHff3_fvzAAAAdM"]
[Mon Mar 30 00:39:44.087909 2026] [:error] [pid 23168:tid 23209] [client 20.226.46.201:35496] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/user.php"] [unique_id "aclV0GP8p0yRL8ot_2_ZKQAAAgw"]
[Mon Mar 30 00:39:44.706156 2026] [:error] [pid 23284:tid 23299] [client 20.226.46.201:35494] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclV0IzBujdPHsq7wyQjHQAAAo0"]
[Mon Mar 30 00:39:45.330075 2026] [:error] [pid 23250:tid 23275] [client 20.226.46.201:35480] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclV0Zxrpj-dQjy1cvomMgAAAlc"]
[Mon Mar 30 00:39:45.959166 2026] [:error] [pid 23168:tid 23204] [client 20.226.46.201:35461] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclV0WP8p0yRL8ot_2_ZMQAAAgc"]
[Mon Mar 30 00:39:46.575788 2026] [:error] [pid 32255:tid 32307] [client 20.226.46.201:35531] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclV0mnfn-AtRoMbquw9uQAAAFA"]
[Mon Mar 30 00:39:47.195654 2026] [:error] [pid 32257:tid 32335] [client 20.226.46.201:35445] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aclV0yE3TArOFrUtgWqhAgAAAJE"]
[Mon Mar 30 00:39:47.814799 2026] [:error] [pid 32255:tid 32300] [client 20.226.46.201:35408] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "aclV02nfn-AtRoMbquw9ugAAAEk"]
[Mon Mar 30 00:47:38.281444 2026] [:error] [pid 32257:tid 32331] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Mon Mar 30 00:47:38.475712 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Mon Mar 30 00:47:38.669444 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Mon Mar 30 00:47:38.864530 2026] [:error] [pid 32257:tid 32332] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Mon Mar 30 00:47:39.059142 2026] [:error] [pid 32257:tid 32328] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Mon Mar 30 00:47:39.252991 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Mon Mar 30 00:47:39.447116 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Mon Mar 30 00:47:39.640497 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Mon Mar 30 00:47:39.836190 2026] [:error] [pid 32257:tid 32339] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Mon Mar 30 00:47:40.030274 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:32667] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Mon Mar 30 00:47:40.221826 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:32667] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclXrCE3TArOFrUtgWqnWgAAAIw"]
[Mon Mar 30 00:47:40.607337 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:31352] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclXrCE3TArOFrUtgWqnXQAAAIA"]
[Mon Mar 30 00:47:41.001604 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:23202] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclXrYzBujdPHsq7wyQoIgAAAoo"]
[Mon Mar 30 00:47:41.386076 2026] [:error] [pid 8818:tid 8841] [client 68.155.145.150:17760] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "aclXrSCDvotZNSF0FBoI-gAAAVM"]
[Mon Mar 30 00:47:41.766903 2026] [:error] [pid 32255:tid 32296] [client 68.155.145.150:31785] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclXrWnfn-AtRoMbquxBpwAAAEU"]
[Mon Mar 30 00:47:42.152584 2026] [:error] [pid 23168:tid 23197] [client 68.155.145.150:48160] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclXrmP8p0yRL8ot_2_djwAAAgA"]
[Mon Mar 30 00:47:42.538503 2026] [:error] [pid 23168:tid 23205] [client 68.155.145.150:31795] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclXrmP8p0yRL8ot_2_dkAAAAgg"]
[Mon Mar 30 00:47:42.927714 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:24307] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aclXrozBujdPHsq7wyQoLQAAAoU"]
[Mon Mar 30 00:47:43.312351 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:26264] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclXr4zBujdPHsq7wyQoMAAAAoo"]
[Mon Mar 30 00:47:43.701161 2026] [:error] [pid 8818:tid 8827] [client 68.155.145.150:31757] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclXryCDvotZNSF0FBoI_QAAAUU"]
[Mon Mar 30 00:47:44.098061 2026] [:error] [pid 23284:tid 23293] [client 68.155.145.150:23269] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclXsIzBujdPHsq7wyQoNAAAAoc"]
[Mon Mar 30 00:47:44.479619 2026] [:error] [pid 23168:tid 23212] [client 68.155.145.150:49424] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aclXsGP8p0yRL8ot_2_dlwAAAg8"]
[Mon Mar 30 00:47:44.859946 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:21633] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclXsCE3TArOFrUtgWqnaQAAAJM"]
[Mon Mar 30 00:47:45.240004 2026] [:error] [pid 32255:tid 32315] [client 68.155.145.150:33221] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclXsWnfn-AtRoMbquxBtwAAAFg"]
[Mon Mar 30 00:47:45.626349 2026] [:error] [pid 23167:tid 23188] [client 68.155.145.150:36102] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclXsRIAHJCFaHff3_fyzgAAAdI"]
[Mon Mar 30 00:47:46.014089 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:22163] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aclXsozBujdPHsq7wyQoPQAAAo8"]
[Mon Mar 30 00:47:46.404050 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:24263] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclXsozBujdPHsq7wyQoQwAAAoM"]
[Mon Mar 30 00:47:46.783506 2026] [:error] [pid 8818:tid 8832] [client 68.155.145.150:26245] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclXsiCDvotZNSF0FBoJAQAAAUo"]
[Mon Mar 30 00:47:47.163932 2026] [:error] [pid 32255:tid 32305] [client 68.155.145.150:41127] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclXs2nfn-AtRoMbquxBwAAAAE4"]
[Mon Mar 30 00:47:47.550194 2026] [:error] [pid 32255:tid 32314] [client 68.155.145.150:52698] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aclXs2nfn-AtRoMbquxBwQAAAFc"]
[Mon Mar 30 00:47:47.934837 2026] [:error] [pid 32255:tid 32312] [client 68.155.145.150:41145] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclXs2nfn-AtRoMbquxBwwAAAFU"]
[Mon Mar 30 00:47:48.316967 2026] [:error] [pid 23168:tid 23211] [client 68.155.145.150:26286] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclXtGP8p0yRL8ot_2_dngAAAg4"]
[Mon Mar 30 00:47:48.706297 2026] [:error] [pid 23168:tid 23197] [client 68.155.145.150:52678] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclXtGP8p0yRL8ot_2_dowAAAgA"]
[Mon Mar 30 00:47:49.095533 2026] [:error] [pid 32255:tid 32295] [client 68.155.145.150:32652] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "aclXtWnfn-AtRoMbquxBygAAAEQ"]
[Mon Mar 30 00:47:49.476489 2026] [:error] [pid 23167:tid 23173] [client 68.155.145.150:26279] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclXtRIAHJCFaHff3_fy1gAAAcM"]
[Mon Mar 30 00:47:49.880661 2026] [:error] [pid 23137:tid 23155] [client 68.155.145.150:52673] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclXtRaWQa7LdZ_qGFYY_AAAAZA"]
[Mon Mar 30 00:47:50.260644 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:52724] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclXtmnfn-AtRoMbquxB0AAAAFE"]
[Mon Mar 30 00:47:50.640772 2026] [:error] [pid 23284:tid 23303] [client 68.155.145.150:26292] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aclXtozBujdPHsq7wyQoSwAAApE"]
[Mon Mar 30 00:47:51.021353 2026] [:error] [pid 23167:tid 23177] [client 68.155.145.150:24277] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclXtxIAHJCFaHff3_fy3AAAAcc"]
[Mon Mar 30 00:47:51.402489 2026] [:error] [pid 32257:tid 32336] [client 68.155.145.150:42723] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclXtyE3TArOFrUtgWqneQAAAJI"]
[Mon Mar 30 00:47:51.792074 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:41113] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclXtyE3TArOFrUtgWqnfAAAAIA"]
[Mon Mar 30 00:47:52.171982 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:22159] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aclXuIzBujdPHsq7wyQoVAAAApc"]
[Mon Mar 30 00:47:52.552756 2026] [:error] [pid 23167:tid 23184] [client 68.155.145.150:23260] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclXuBIAHJCFaHff3_fy4AAAAc4"]
[Mon Mar 30 00:47:52.943045 2026] [:error] [pid 32257:tid 32331] [client 68.155.145.150:21668] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclXuCE3TArOFrUtgWqnggAAAI0"]
[Mon Mar 30 00:47:53.341862 2026] [:error] [pid 32257:tid 32336] [client 68.155.145.150:26242] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclXuSE3TArOFrUtgWqnhQAAAJI"]
[Mon Mar 30 00:47:53.730977 2026] [:error] [pid 23168:tid 23203] [client 68.155.145.150:26261] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "aclXuWP8p0yRL8ot_2_dqwAAAgY"]
[Mon Mar 30 00:47:54.119822 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:21659] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclXuiE3TArOFrUtgWqnhwAAAIM"]
[Mon Mar 30 00:47:54.509359 2026] [:error] [pid 23168:tid 23197] [client 68.155.145.150:49409] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclXumP8p0yRL8ot_2_dsAAAAgA"]
[Mon Mar 30 00:47:54.894502 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:33276] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclXuozBujdPHsq7wyQoWQAAApg"]
[Mon Mar 30 00:47:55.277427 2026] [:error] [pid 23284:tid 23304] [client 68.155.145.150:48165] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aclXu4zBujdPHsq7wyQoWwAAApI"]
[Mon Mar 30 00:47:55.675835 2026] [:error] [pid 32257:tid 32336] [client 68.155.145.150:26247] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclXuyE3TArOFrUtgWqnjwAAAJI"]
[Mon Mar 30 00:47:56.079266 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:24298] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclXvIzBujdPHsq7wyQoYwAAApA"]
[Mon Mar 30 00:47:56.463468 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:52681] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclXvIzBujdPHsq7wyQoZQAAAoM"]
[Mon Mar 30 00:47:56.845022 2026] [:error] [pid 32255:tid 32301] [client 68.155.145.150:33244] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aclXvGnfn-AtRoMbquxB3wAAAEo"]
[Mon Mar 30 00:47:57.226876 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:18727] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclXvYzBujdPHsq7wyQoaQAAAoI"]
[Mon Mar 30 00:47:57.640583 2026] [:error] [pid 8818:tid 8836] [client 68.155.145.150:21658] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclXvSCDvotZNSF0FBoJCgAAAU4"]
[Mon Mar 30 00:47:58.024605 2026] [:error] [pid 23168:tid 23203] [client 68.155.145.150:41105] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclXvmP8p0yRL8ot_2_duAAAAgY"]
[Mon Mar 30 00:47:58.413198 2026] [:error] [pid 32257:tid 32341] [client 68.155.145.150:26244] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aclXviE3TArOFrUtgWqnoQAAAJc"]
[Mon Mar 30 00:47:58.795589 2026] [:error] [pid 8818:tid 8838] [client 68.155.145.150:44203] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclXviCDvotZNSF0FBoJCwAAAVA"]
[Mon Mar 30 00:47:59.176548 2026] [:error] [pid 23250:tid 23259] [client 68.155.145.150:58047] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclXv5xrpj-dQjy1cvonhAAAAkc"]
[Mon Mar 30 00:47:59.566304 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:4221] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclXvyE3TArOFrUtgWqnpwAAAJQ"]
[Mon Mar 30 00:47:59.965752 2026] [:error] [pid 32257:tid 32339] [client 68.155.145.150:49454] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aclXvyE3TArOFrUtgWqnrAAAAJU"]
[Mon Mar 30 00:48:00.354407 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:31306] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclXwIzBujdPHsq7wyQocQAAAoM"]
[Mon Mar 30 00:48:00.741777 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:49470] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclXwIzBujdPHsq7wyQocwAAApY"]
[Mon Mar 30 00:48:01.125517 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:52682] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclXwYzBujdPHsq7wyQodgAAAoU"]
[Mon Mar 30 00:48:01.514193 2026] [:error] [pid 8818:tid 8845] [client 68.155.145.150:21677] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aclXwSCDvotZNSF0FBoJDQAAAVc"]
[Mon Mar 30 00:48:01.895562 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:21635] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclXwSE3TArOFrUtgWqnsAAAAIs"]
[Mon Mar 30 00:48:02.284370 2026] [:error] [pid 32257:tid 32339] [client 68.155.145.150:18688] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclXwiE3TArOFrUtgWqntAAAAJU"]
[Mon Mar 30 00:48:02.666076 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:31312] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclXwmnfn-AtRoMbquxB4wAAAE8"]
[Mon Mar 30 00:48:03.057763 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:44207] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aclXwyE3TArOFrUtgWqnuwAAAIA"]
[Mon Mar 30 00:48:03.443416 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:26259] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclXwyE3TArOFrUtgWqnwAAAAIw"]
[Mon Mar 30 00:48:03.828117 2026] [:error] [pid 8818:tid 8832] [client 68.155.145.150:26285] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclXwyCDvotZNSF0FBoJDgAAAUo"]
[Mon Mar 30 00:48:04.209461 2026] [:error] [pid 23250:tid 23267] [client 68.155.145.150:31348] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclXxJxrpj-dQjy1cvoniwAAAk8"]
[Mon Mar 30 00:48:04.600057 2026] [:error] [pid 23284:tid 23310] [client 68.155.145.150:18728] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aclXxIzBujdPHsq7wyQohwAAApg"]
[Mon Mar 30 00:48:04.991317 2026] [:error] [pid 32255:tid 32310] [client 68.155.145.150:36125] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclXxGnfn-AtRoMbquxB6gAAAFM"]
[Mon Mar 30 00:48:05.373134 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:31311] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclXxSE3TArOFrUtgWqn0gAAAJg"]
[Mon Mar 30 00:48:05.761918 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:31354] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclXxYzBujdPHsq7wyQoiwAAAoE"]
[Mon Mar 30 00:48:06.149049 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:56826] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aclXxozBujdPHsq7wyQojwAAAo8"]
[Mon Mar 30 00:48:06.536331 2026] [:error] [pid 23284:tid 23286] [client 68.155.145.150:24292] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclXxozBujdPHsq7wyQokQAAAoA"]
[Mon Mar 30 00:48:06.926802 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:49428] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclXxozBujdPHsq7wyQokgAAAoI"]
[Mon Mar 30 00:48:07.308731 2026] [:error] [pid 8818:tid 8828] [client 68.155.145.150:44177] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclXxyCDvotZNSF0FBoJEwAAAUY"]
[Mon Mar 30 00:48:07.695205 2026] [:error] [pid 23250:tid 23256] [client 68.155.145.150:21651] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aclXx5xrpj-dQjy1cvonkQAAAkQ"]
[Mon Mar 30 00:48:08.083844 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:49449] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclXyIzBujdPHsq7wyQomAAAAoE"]
[Mon Mar 30 00:48:08.471947 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:31325] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclXyIzBujdPHsq7wyQomwAAAoQ"]
[Mon Mar 30 00:48:08.865346 2026] [:error] [pid 23137:tid 23143] [client 68.155.145.150:49466] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclXyBaWQa7LdZ_qGFYZAwAAAYQ"]
[Mon Mar 30 00:48:09.260609 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:56771] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aclXySE3TArOFrUtgWqn2QAAAIs"]
[Mon Mar 30 00:48:09.662481 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:27782] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclXySE3TArOFrUtgWqn2wAAAJg"]
[Mon Mar 30 00:48:10.059758 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:58000] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclXyiE3TArOFrUtgWqn3AAAAJM"]
[Mon Mar 30 00:48:10.455159 2026] [:error] [pid 23137:tid 23162] [client 68.155.145.150:18729] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclXyhaWQa7LdZ_qGFYZCgAAAZc"]
[Mon Mar 30 00:48:10.838786 2026] [:error] [pid 8818:tid 8831] [client 68.155.145.150:33269] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "aclXyiCDvotZNSF0FBoJGgAAAUk"]
[Mon Mar 30 00:48:11.219115 2026] [:error] [pid 23168:tid 23210] [client 68.155.145.150:58014] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclXy2P8p0yRL8ot_2_d0gAAAg0"]
[Mon Mar 30 00:48:11.606216 2026] [:error] [pid 8818:tid 8827] [client 68.155.145.150:56812] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclXyyCDvotZNSF0FBoJHAAAAUU"]
[Mon Mar 30 00:48:11.988161 2026] [:error] [pid 23137:tid 23144] [client 68.155.145.150:18708] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclXyxaWQa7LdZ_qGFYZDgAAAYU"]
[Mon Mar 30 00:48:12.368843 2026] [:error] [pid 32257:tid 32334] [client 68.155.145.150:49427] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aclXzCE3TArOFrUtgWqn6wAAAJA"]
[Mon Mar 30 00:48:12.754757 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:33227] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclXzIzBujdPHsq7wyQorQAAApY"]
[Mon Mar 30 00:48:13.147144 2026] [:error] [pid 32254:tid 32270] [client 68.155.145.150:44213] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclXzaug2IHuyGgCTn9vxQAAAAY"]
[Mon Mar 30 00:48:13.534011 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:40220] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclXzWnfn-AtRoMbquxB-gAAAFA"]
[Mon Mar 30 00:48:13.922682 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:44784] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aclXzSE3TArOFrUtgWqn-gAAAI8"]
[Mon Mar 30 00:48:14.310175 2026] [:error] [pid 8818:tid 8840] [client 68.155.145.150:22747] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclXziCDvotZNSF0FBoJJAAAAVI"]
[Mon Mar 30 00:48:14.693463 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:22733] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclXzozBujdPHsq7wyQoswAAApc"]
[Mon Mar 30 00:48:15.084171 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:19619] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclXzyE3TArOFrUtgWqoCQAAAIM"]
[Mon Mar 30 00:48:15.480107 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:26350] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aclXzyE3TArOFrUtgWqoDQAAAI8"]
[Mon Mar 30 00:48:15.862454 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:37125] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclXzyE3TArOFrUtgWqoFQAAAJg"]
[Mon Mar 30 00:48:16.242903 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:40248] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclX0IzBujdPHsq7wyQowgAAApA"]
[Mon Mar 30 00:48:16.626668 2026] [:error] [pid 32359:tid 32370] [client 68.155.145.150:53637] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclX0AMb8G3UzfQP3WhGiwAAAMk"]
[Mon Mar 30 00:48:17.007732 2026] [:error] [pid 32257:tid 32339] [client 68.155.145.150:30946] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "aclX0SE3TArOFrUtgWqoIgAAAJU"]
[Mon Mar 30 00:48:17.394451 2026] [:error] [pid 32257:tid 32328] [client 68.155.145.150:37139] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclX0SE3TArOFrUtgWqoKAAAAIo"]
[Mon Mar 30 00:48:17.781772 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:44764] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclX0SE3TArOFrUtgWqoLwAAAIg"]
[Mon Mar 30 00:48:18.165208 2026] [:error] [pid 32257:tid 32334] [client 68.155.145.150:46247] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclX0iE3TArOFrUtgWqoNgAAAJA"]
[Mon Mar 30 00:48:18.546544 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:53670] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "aclX0iE3TArOFrUtgWqoPgAAAIE"]
[Mon Mar 30 00:48:18.927341 2026] [:error] [pid 32255:tid 32293] [client 68.155.145.150:44748] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclX0mnfn-AtRoMbquxCBgAAAEI"]
[Mon Mar 30 00:48:19.312370 2026] [:error] [pid 32257:tid 32328] [client 68.155.145.150:46215] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclX0yE3TArOFrUtgWqoSgAAAIo"]
[Mon Mar 30 00:48:19.707812 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:23768] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclX0yE3TArOFrUtgWqoUgAAAI8"]
[Mon Mar 30 00:48:20.100015 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:30912] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aclX1IzBujdPHsq7wyQozAAAAoI"]
[Mon Mar 30 00:48:20.496096 2026] [:error] [pid 23167:tid 23191] [client 68.155.145.150:46223] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclX1BIAHJCFaHff3_fy9QAAAdU"]
[Mon Mar 30 00:48:20.877545 2026] [:error] [pid 23137:tid 23158] [client 68.155.145.150:30964] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclX1BaWQa7LdZ_qGFYZEAAAAZM"]
[Mon Mar 30 00:48:21.257998 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:19643] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclX1SE3TArOFrUtgWqoYgAAAJQ"]
[Mon Mar 30 00:48:21.639278 2026] [:error] [pid 32257:tid 32331] [client 68.155.145.150:33637] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclX1SE3TArOFrUtgWqoZwAAAI0"]
[Mon Mar 30 00:48:22.029827 2026] [:error] [pid 23167:tid 23181] [client 68.155.145.150:23756] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclX1hIAHJCFaHff3_fy-QAAAcs"]
[Mon Mar 30 00:48:22.412030 2026] [:error] [pid 23167:tid 23185] [client 68.155.145.150:25239] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclX1hIAHJCFaHff3_fy-wAAAc8"]
[Mon Mar 30 00:48:22.794885 2026] [:error] [pid 23168:tid 23204] [client 68.155.145.150:28317] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclX1mP8p0yRL8ot_2_d6QAAAgc"]
[Mon Mar 30 00:48:23.175752 2026] [:error] [pid 23168:tid 23212] [client 68.155.145.150:46231] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aclX12P8p0yRL8ot_2_d7AAAAg8"]
[Mon Mar 30 00:48:23.564005 2026] [:error] [pid 23250:tid 23273] [client 68.155.145.150:58608] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclX15xrpj-dQjy1cvonogAAAlU"]
[Mon Mar 30 00:48:23.961677 2026] [:error] [pid 23167:tid 23178] [client 68.155.145.150:27387] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclX1xIAHJCFaHff3_fzAgAAAcg"]
[Mon Mar 30 00:48:24.356687 2026] [:error] [pid 32255:tid 32294] [client 68.155.145.150:38712] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclX2Gnfn-AtRoMbquxCCwAAAEM"]
[Mon Mar 30 00:48:24.741842 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:27389] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "aclX2Gnfn-AtRoMbquxCDQAAAE8"]
[Mon Mar 30 00:48:25.132467 2026] [:error] [pid 23167:tid 23194] [client 68.155.145.150:28838] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclX2RIAHJCFaHff3_fzBQAAAdg"]
[Mon Mar 30 00:48:25.546097 2026] [:error] [pid 32255:tid 32302] [client 68.155.145.150:23752] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclX2Wnfn-AtRoMbquxCEQAAAEs"]
[Mon Mar 30 00:48:25.940901 2026] [:error] [pid 23167:tid 23180] [client 68.155.145.150:51432] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclX2RIAHJCFaHff3_fzCwAAAco"]
[Mon Mar 30 00:48:26.321270 2026] [:error] [pid 8818:tid 8837] [client 68.155.145.150:22228] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aclX2iCDvotZNSF0FBoJLwAAAU8"]
[Mon Mar 30 00:48:26.703318 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:53658] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclX2iE3TArOFrUtgWqoiwAAAII"]
[Mon Mar 30 00:48:27.085880 2026] [:error] [pid 23168:tid 23209] [client 68.155.145.150:58621] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclX22P8p0yRL8ot_2_d9wAAAgw"]
[Mon Mar 30 00:48:27.476168 2026] [:error] [pid 23284:tid 23303] [client 68.155.145.150:30918] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclX24zBujdPHsq7wyQo6AAAApE"]
[Mon Mar 30 00:48:27.862324 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:51395] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aclX24zBujdPHsq7wyQo6gAAAo4"]
[Mon Mar 30 00:48:28.242440 2026] [:error] [pid 23168:tid 23216] [client 68.155.145.150:38660] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclX3GP8p0yRL8ot_2_eAwAAAhM"]
[Mon Mar 30 00:48:28.627657 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:51372] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclX3IzBujdPHsq7wyQo7AAAApY"]
[Mon Mar 30 00:48:29.023410 2026] [:error] [pid 32257:tid 32335] [client 68.155.145.150:25216] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclX3SE3TArOFrUtgWqomAAAAJE"]
[Mon Mar 30 00:48:29.406462 2026] [:error] [pid 23250:tid 23269] [client 68.155.145.150:58616] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aclX3Zxrpj-dQjy1cvonqQAAAlE"]
[Mon Mar 30 00:48:29.786994 2026] [:error] [pid 32257:tid 32328] [client 68.155.145.150:22266] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclX3SE3TArOFrUtgWqonQAAAIo"]
[Mon Mar 30 00:48:30.166945 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:46236] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclX3iE3TArOFrUtgWqooAAAAIk"]
[Mon Mar 30 00:48:30.562485 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:58603] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclX3iE3TArOFrUtgWqopQAAAIE"]
[Mon Mar 30 00:48:30.949597 2026] [:error] [pid 32255:tid 32294] [client 68.155.145.150:23806] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aclX3mnfn-AtRoMbquxCHQAAAEM"]
[Mon Mar 30 00:48:31.336868 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:51447] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclX34zBujdPHsq7wyQpBQAAApA"]
[Mon Mar 30 00:48:31.723676 2026] [:error] [pid 23284:tid 23292] [client 68.155.145.150:38703] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclX34zBujdPHsq7wyQpDAAAAoY"]
[Mon Mar 30 00:48:32.107466 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:46259] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclX4CE3TArOFrUtgWqoqwAAAIQ"]
[Mon Mar 30 00:48:32.492249 2026] [:error] [pid 32255:tid 32302] [client 68.155.145.150:54966] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aclX4Gnfn-AtRoMbquxCHwAAAEs"]
[Mon Mar 30 00:48:32.871693 2026] [:error] [pid 23167:tid 23184] [client 68.155.145.150:27269] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclX4BIAHJCFaHff3_fzEQAAAc4"]
[Mon Mar 30 00:48:33.251991 2026] [:error] [pid 32255:tid 32296] [client 68.155.145.150:51345] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclX4Wnfn-AtRoMbquxCIgAAAEU"]
[Mon Mar 30 00:48:33.636163 2026] [:error] [pid 23168:tid 23198] [client 68.155.145.150:30902] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclX4WP8p0yRL8ot_2_eGQAAAgE"]
[Mon Mar 30 00:48:34.017545 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:27342] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "aclX4iE3TArOFrUtgWqotgAAAJM"]
[Mon Mar 30 00:48:34.406101 2026] [:error] [pid 23284:tid 23308] [client 68.155.145.150:46220] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aclX4ozBujdPHsq7wyQpJQAAApY"]
[Mon Mar 30 00:48:34.789271 2026] [:error] [pid 32257:tid 32323] [client 68.155.145.150:46246] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aclX4iE3TArOFrUtgWqougAAAIU"]
[Mon Mar 30 00:48:35.168784 2026] [:error] [pid 32255:tid 32311] [client 68.155.145.150:53709] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aclX42nfn-AtRoMbquxCKAAAAFQ"]
[Mon Mar 30 00:48:35.552311 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:22226] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aclX42nfn-AtRoMbquxCKgAAAE8"]
[Mon Mar 30 00:48:35.939378 2026] [:error] [pid 32255:tid 32293] [client 68.155.145.150:28818] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aclX42nfn-AtRoMbquxCLQAAAEI"]
[Mon Mar 30 00:48:36.321082 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:30893] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aclX5Gnfn-AtRoMbquxCMAAAAFE"]
[Mon Mar 30 00:48:36.709159 2026] [:error] [pid 23250:tid 23266] [client 68.155.145.150:22269] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aclX5Jxrpj-dQjy1cvonrwAAAk4"]
[Mon Mar 30 00:48:37.097122 2026] [:error] [pid 32359:tid 32381] [client 68.155.145.150:5111] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aclX5QMb8G3UzfQP3WhGlQAAANQ"]
[Mon Mar 30 00:48:37.478312 2026] [:error] [pid 23167:tid 23171] [client 68.155.145.150:58588] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclX5RIAHJCFaHff3_fzFgAAAcE"]
[Mon Mar 30 00:48:37.866007 2026] [:error] [pid 23167:tid 23180] [client 68.155.145.150:27338] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclX5RIAHJCFaHff3_fzFwAAAco"]
[Mon Mar 30 00:48:38.245507 2026] [:error] [pid 32254:tid 32287] [client 68.155.145.150:26326] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclX5qug2IHuyGgCTn9vyQAAABc"]
[Mon Mar 30 00:48:38.628007 2026] [:error] [pid 32255:tid 32291] [client 68.155.145.150:38690] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "aclX5mnfn-AtRoMbquxCPQAAAEA"]
[Mon Mar 30 00:48:39.020457 2026] [:error] [pid 23137:tid 23152] [client 68.155.145.150:23779] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "aclX5xaWQa7LdZ_qGFYZFwAAAY0"]
[Mon Mar 30 00:48:39.404702 2026] [:error] [pid 23137:tid 23160] [client 68.155.145.150:23754] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "aclX5xaWQa7LdZ_qGFYZGAAAAZU"]
[Mon Mar 30 00:48:39.788165 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:21244] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "aclX5yE3TArOFrUtgWqoygAAAIk"]
[Mon Mar 30 00:48:40.172654 2026] [:error] [pid 32257:tid 32323] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Mon Mar 30 00:48:40.366542 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Mon Mar 30 00:48:40.560654 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Mon Mar 30 00:48:40.754252 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/ws75.php
[Mon Mar 30 00:48:40.948675 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Mar 30 00:48:41.143856 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Mon Mar 30 00:48:41.337965 2026] [:error] [pid 32257:tid 32332] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Mon Mar 30 00:48:41.531929 2026] [:error] [pid 32257:tid 32334] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Mar 30 00:48:41.725941 2026] [:error] [pid 32257:tid 32336] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Mon Mar 30 00:48:41.919758 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Mon Mar 30 00:48:42.114138 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Mon Mar 30 00:48:42.313331 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:27352] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclX6iE3TArOFrUtgWqo5wAAAIk"]
[Mon Mar 30 00:48:42.708754 2026] [:error] [pid 32359:tid 32364] [client 68.155.145.150:52050] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclX6gMb8G3UzfQP3WhGmQAAAMM"]
[Mon Mar 30 00:48:43.098719 2026] [:error] [pid 8818:tid 8829] [client 68.155.145.150:42326] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclX6yCDvotZNSF0FBoJNAAAAUc"]
[Mon Mar 30 00:48:43.482565 2026] [:error] [pid 23167:tid 23179] [client 68.155.145.150:27371] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aclX6xIAHJCFaHff3_fzGgAAAck"]
[Mon Mar 30 00:48:43.876293 2026] [:error] [pid 23167:tid 23185] [client 68.155.145.150:21212] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclX6xIAHJCFaHff3_fzGwAAAc8"]
[Mon Mar 30 00:48:44.272745 2026] [:error] [pid 32257:tid 32334] [client 68.155.145.150:21236] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclX7CE3TArOFrUtgWqo7gAAAJA"]
[Mon Mar 30 00:48:44.655870 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:27282] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclX7CE3TArOFrUtgWqo7wAAAIQ"]
[Mon Mar 30 00:48:45.041685 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:42321] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hehe.php"] [unique_id "aclX7YzBujdPHsq7wyQpSgAAAoo"]
[Mon Mar 30 00:48:45.428076 2026] [:error] [pid 23284:tid 23286] [client 68.155.145.150:54913] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclX7YzBujdPHsq7wyQpTAAAAoA"]
[Mon Mar 30 00:48:45.812581 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:21192] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclX7YzBujdPHsq7wyQpTgAAAo8"]
[Mon Mar 30 00:48:46.192967 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:5062] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclX7ozBujdPHsq7wyQpVAAAAoQ"]
[Mon Mar 30 00:48:46.592780 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:54940] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclX7ozBujdPHsq7wyQpVwAAAoM"]
[Mon Mar 30 00:48:46.975630 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:52033] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclX7ozBujdPHsq7wyQpWgAAApM"]
[Mon Mar 30 00:48:47.355718 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:28309] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclX7yE3TArOFrUtgWqo9wAAAIw"]
[Mon Mar 30 00:48:47.736274 2026] [:error] [pid 23168:tid 23208] [client 68.155.145.150:30856] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclX72P8p0yRL8ot_2_eLQAAAgs"]
[Mon Mar 30 00:48:48.116974 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:27366] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aclX8CE3TArOFrUtgWqo-QAAAJg"]
[Mon Mar 30 00:48:48.497653 2026] [:error] [pid 23284:tid 23299] [client 68.155.145.150:52045] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclX8IzBujdPHsq7wyQpYwAAAo0"]
[Mon Mar 30 00:48:48.881934 2026] [:error] [pid 23137:tid 23148] [client 68.155.145.150:21201] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclX8BaWQa7LdZ_qGFYZJgAAAYk"]
[Mon Mar 30 00:48:49.264581 2026] [:error] [pid 23137:tid 23161] [client 68.155.145.150:52087] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclX8RaWQa7LdZ_qGFYZJwAAAZY"]
[Mon Mar 30 00:48:49.658420 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:4691] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aclX8Wnfn-AtRoMbquxCQQAAAFA"]
[Mon Mar 30 00:48:50.046174 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:53746] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclX8iE3TArOFrUtgWqpAQAAAJQ"]
[Mon Mar 30 00:48:50.435311 2026] [:error] [pid 32257:tid 32340] [client 68.155.145.150:4712] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclX8iE3TArOFrUtgWqpBAAAAJY"]
[Mon Mar 30 00:48:50.819425 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:53733] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclX8iE3TArOFrUtgWqpBwAAAIs"]
[Mon Mar 30 00:48:51.199776 2026] [:error] [pid 23137:tid 23140] [client 68.155.145.150:42331] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aclX8xaWQa7LdZ_qGFYZKgAAAYE"]
[Mon Mar 30 00:48:51.586121 2026] [:error] [pid 23167:tid 23194] [client 68.155.145.150:53734] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclX8xIAHJCFaHff3_fzJAAAAdg"]
[Mon Mar 30 00:48:51.986917 2026] [:error] [pid 32257:tid 32331] [client 68.155.145.150:4433] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclX8yE3TArOFrUtgWqpDAAAAI0"]
[Mon Mar 30 00:48:52.367906 2026] [:error] [pid 23168:tid 23217] [client 68.155.145.150:51386] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclX9GP8p0yRL8ot_2_eNAAAAhQ"]
[Mon Mar 30 00:48:52.755511 2026] [:error] [pid 32254:tid 32269] [client 68.155.145.150:4419] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aclX9Kug2IHuyGgCTn9v0AAAAAU"]
[Mon Mar 30 00:48:53.149353 2026] [:error] [pid 23168:tid 23221] [client 68.155.145.150:42327] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclX9WP8p0yRL8ot_2_eOAAAAhg"]
[Mon Mar 30 00:48:53.561081 2026] [:error] [pid 23168:tid 23203] [client 68.155.145.150:54922] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclX9WP8p0yRL8ot_2_eOgAAAgY"]
[Mon Mar 30 00:48:53.946906 2026] [:error] [pid 32254:tid 32270] [client 68.155.145.150:21186] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclX9aug2IHuyGgCTn9v0QAAAAY"]
[Mon Mar 30 00:48:54.333605 2026] [:error] [pid 23168:tid 23209] [client 68.155.145.150:53732] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aclX9mP8p0yRL8ot_2_eQAAAAgw"]
[Mon Mar 30 00:48:54.722944 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:54939] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclX9mnfn-AtRoMbquxCSQAAAFE"]
[Mon Mar 30 00:48:55.119204 2026] [:error] [pid 32257:tid 32332] [client 68.155.145.150:48229] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclX9yE3TArOFrUtgWqpEwAAAI4"]
[Mon Mar 30 00:48:55.506639 2026] [:error] [pid 23168:tid 23199] [client 68.155.145.150:54961] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclX92P8p0yRL8ot_2_eRQAAAgI"]
[Mon Mar 30 00:48:55.902082 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:5061] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aclX9yE3TArOFrUtgWqpFgAAAII"]
[Mon Mar 30 00:48:56.284427 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:4725] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclX-Gnfn-AtRoMbquxCUQAAAFA"]
[Mon Mar 30 00:48:56.672724 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:35684] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclX-IzBujdPHsq7wyQpZQAAAoo"]
[Mon Mar 30 00:48:57.052220 2026] [:error] [pid 23284:tid 23295] [client 68.155.145.150:37742] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclX-YzBujdPHsq7wyQpZwAAAok"]
[Mon Mar 30 00:48:57.433199 2026] [:error] [pid 23168:tid 23197] [client 68.155.145.150:21209] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aclX-WP8p0yRL8ot_2_eSAAAAgA"]
[Mon Mar 30 00:48:57.822315 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:42317] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclX-YzBujdPHsq7wyQpaQAAAoQ"]
[Mon Mar 30 00:48:58.202078 2026] [:error] [pid 32257:tid 32328] [client 68.155.145.150:35673] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclX-iE3TArOFrUtgWqpGwAAAIo"]
[Mon Mar 30 00:48:58.586576 2026] [:error] [pid 23168:tid 23213] [client 68.155.145.150:53708] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclX-mP8p0yRL8ot_2_eTQAAAhA"]
[Mon Mar 30 00:48:58.988389 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:51335] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "aclX-mnfn-AtRoMbquxCVwAAAE8"]
[Mon Mar 30 00:48:59.374457 2026] [:error] [pid 32255:tid 32292] [client 68.155.145.150:4465] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclX-2nfn-AtRoMbquxCWAAAAEE"]
[Mon Mar 30 00:48:59.767103 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:54919] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclX-2nfn-AtRoMbquxCXQAAAFA"]
[Mon Mar 30 00:49:00.148863 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:39704] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclX_IzBujdPHsq7wyQpbgAAApc"]
[Mon Mar 30 00:49:00.549196 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:21185] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5e0a.php"] [unique_id "aclX_IzBujdPHsq7wyQpcQAAApM"]
[Mon Mar 30 00:49:00.939066 2026] [:error] [pid 8818:tid 8843] [client 68.155.145.150:4441] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclX_CCDvotZNSF0FBoJSgAAAVU"]
[Mon Mar 30 00:49:01.320807 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:4432] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclX_SE3TArOFrUtgWqpJAAAAIA"]
[Mon Mar 30 00:49:01.710055 2026] [:error] [pid 32257:tid 32341] [client 68.155.145.150:43700] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclX_SE3TArOFrUtgWqpKQAAAJc"]
[Mon Mar 30 00:49:02.100091 2026] [:error] [pid 23168:tid 23199] [client 68.155.145.150:52040] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aclX_mP8p0yRL8ot_2_eUQAAAgI"]
[Mon Mar 30 00:49:02.492153 2026] [:error] [pid 23168:tid 23221] [client 68.155.145.150:48201] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclX_mP8p0yRL8ot_2_eVAAAAhg"]
[Mon Mar 30 00:49:02.877768 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:57920] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclX_ozBujdPHsq7wyQpdAAAAoU"]
[Mon Mar 30 00:49:03.263919 2026] [:error] [pid 32255:tid 32313] [client 68.155.145.150:35696] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclX_2nfn-AtRoMbquxCYQAAAFY"]
[Mon Mar 30 00:49:03.645249 2026] [:error] [pid 8818:tid 8846] [client 68.155.145.150:5027] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aclX_yCDvotZNSF0FBoJTgAAAVg"]
[Mon Mar 30 00:49:04.039542 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:42323] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclYAIzBujdPHsq7wyQpeAAAAo8"]
[Mon Mar 30 00:49:04.429075 2026] [:error] [pid 23168:tid 23214] [client 68.155.145.150:4479] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclYAGP8p0yRL8ot_2_eVgAAAhE"]
[Mon Mar 30 00:49:04.817863 2026] [:error] [pid 23250:tid 23262] [client 68.155.145.150:43699] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclYAJxrpj-dQjy1cvonyAAAAko"]
[Mon Mar 30 00:49:05.198605 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:21242] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55b76.php"] [unique_id "aclYAYzBujdPHsq7wyQpfwAAAoI"]
[Mon Mar 30 00:49:05.591078 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:52085] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclYAYzBujdPHsq7wyQpgQAAAoo"]
[Mon Mar 30 00:49:05.992853 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:48200] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclYASE3TArOFrUtgWqpLgAAAIs"]
[Mon Mar 30 00:49:06.373440 2026] [:error] [pid 32255:tid 32298] [client 68.155.145.150:43652] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclYAmnfn-AtRoMbquxCZAAAAEc"]
[Mon Mar 30 00:49:06.757670 2026] [:error] [pid 23168:tid 23205] [client 68.155.145.150:43702] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aclYAmP8p0yRL8ot_2_eWgAAAgg"]
[Mon Mar 30 00:49:07.138896 2026] [:error] [pid 23168:tid 23207] [client 68.155.145.150:42328] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclYA2P8p0yRL8ot_2_eWwAAAgo"]
[Mon Mar 30 00:49:07.529973 2026] [:error] [pid 23168:tid 23215] [client 68.155.145.150:57924] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclYA2P8p0yRL8ot_2_eXwAAAhI"]
[Mon Mar 30 00:49:07.917215 2026] [:error] [pid 23168:tid 23220] [client 68.155.145.150:32253] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclYA2P8p0yRL8ot_2_eYQAAAhc"]
[Mon Mar 30 00:49:08.310306 2026] [:error] [pid 23168:tid 23209] [client 68.155.145.150:48215] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aclYBGP8p0yRL8ot_2_eZgAAAgw"]
[Mon Mar 30 00:49:08.702053 2026] [:error] [pid 8818:tid 8825] [client 68.155.145.150:57969] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclYBCCDvotZNSF0FBoJVgAAAUM"]
[Mon Mar 30 00:49:09.114878 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:50794] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclYBSE3TArOFrUtgWqpNQAAAII"]
[Mon Mar 30 00:49:09.529547 2026] [:error] [pid 8818:tid 8827] [client 68.155.145.150:37729] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclYBSCDvotZNSF0FBoJWQAAAUU"]
[Mon Mar 30 00:49:09.920259 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:35661] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aclYBWnfn-AtRoMbquxCagAAAE8"]
[Mon Mar 30 00:49:10.303977 2026] [:error] [pid 8818:tid 8833] [client 68.155.145.150:29384] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclYBiCDvotZNSF0FBoJXAAAAUs"]
[Mon Mar 30 00:49:10.703538 2026] [:error] [pid 32254:tid 32287] [client 68.155.145.150:37757] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclYBqug2IHuyGgCTn9v1QAAABc"]
[Mon Mar 30 00:49:11.087182 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:28368] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclYByE3TArOFrUtgWqpPQAAAI8"]
[Mon Mar 30 00:49:11.481079 2026] [:error] [pid 32255:tid 32303] [client 68.155.145.150:26858] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aclYB2nfn-AtRoMbquxCbwAAAEw"]
[Mon Mar 30 00:49:11.868221 2026] [:error] [pid 32359:tid 32384] [client 68.155.145.150:51983] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclYBwMb8G3UzfQP3WhGowAAANc"]
[Mon Mar 30 00:49:12.249714 2026] [:error] [pid 23137:tid 23145] [client 68.155.145.150:50788] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclYCBaWQa7LdZ_qGFYZNAAAAYY"]
[Mon Mar 30 00:49:12.646431 2026] [:error] [pid 23137:tid 23143] [client 68.155.145.150:43655] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclYCBaWQa7LdZ_qGFYZOAAAAYQ"]
[Mon Mar 30 00:49:13.038791 2026] [:error] [pid 23137:tid 23159] [client 68.155.145.150:39699] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aclYCRaWQa7LdZ_qGFYZOgAAAZQ"]
[Mon Mar 30 00:49:13.463367 2026] [:error] [pid 32257:tid 32334] [client 68.155.145.150:51970] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclYCSE3TArOFrUtgWqpQQAAAJA"]
[Mon Mar 30 00:49:13.851451 2026] [:error] [pid 32254:tid 32281] [client 68.155.145.150:47502] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclYCaug2IHuyGgCTn9v1wAAABE"]
[Mon Mar 30 00:49:14.243246 2026] [:error] [pid 8818:tid 8824] [client 68.155.145.150:39274] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclYCiCDvotZNSF0FBoJYAAAAUI"]
[Mon Mar 30 00:49:14.629329 2026] [:error] [pid 23137:tid 23152] [client 68.155.145.150:29392] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/file.php"] [unique_id "aclYChaWQa7LdZ_qGFYZPAAAAY0"]
[Mon Mar 30 00:49:15.025688 2026] [:error] [pid 32254:tid 32276] [client 68.155.145.150:39278] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclYC6ug2IHuyGgCTn9v2gAAAAw"]
[Mon Mar 30 00:49:15.417793 2026] [:error] [pid 32254:tid 32267] [client 68.155.145.150:35086] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclYC6ug2IHuyGgCTn9v2wAAAAM"]
[Mon Mar 30 00:49:15.805406 2026] [:error] [pid 32255:tid 32313] [client 68.155.145.150:19670] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclYC2nfn-AtRoMbquxCeQAAAFY"]
[Mon Mar 30 00:49:16.186006 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:44691] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "aclYDCE3TArOFrUtgWqpRgAAAIA"]
[Mon Mar 30 00:49:16.594189 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:29398] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclYDCE3TArOFrUtgWqpRwAAAIw"]
[Mon Mar 30 00:49:16.978350 2026] [:error] [pid 32257:tid 32323] [client 68.155.145.150:39273] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclYDCE3TArOFrUtgWqpTAAAAIU"]
[Mon Mar 30 00:49:17.362796 2026] [:error] [pid 8818:tid 8839] [client 68.155.145.150:44705] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclYDSCDvotZNSF0FBoJZAAAAVE"]
[Mon Mar 30 00:49:17.770688 2026] [:error] [pid 8818:tid 8830] [client 68.155.145.150:20722] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aclYDSCDvotZNSF0FBoJZQAAAUg"]
[Mon Mar 30 00:49:18.158192 2026] [:error] [pid 23167:tid 23171] [client 68.155.145.150:50813] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclYDhIAHJCFaHff3_fzPgAAAcE"]
[Mon Mar 30 00:49:18.538889 2026] [:error] [pid 32257:tid 32338] [client 68.155.145.150:44728] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclYDiE3TArOFrUtgWqpVwAAAJQ"]
[Mon Mar 30 00:49:18.947850 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:28891] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclYDiE3TArOFrUtgWqpXQAAAII"]
[Mon Mar 30 00:49:19.362915 2026] [:error] [pid 8818:tid 8827] [client 68.155.145.150:20681] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aclYDyCDvotZNSF0FBoJaAAAAUU"]
[Mon Mar 30 00:49:19.776519 2026] [:error] [pid 32359:tid 32377] [client 68.155.145.150:19662] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclYDwMb8G3UzfQP3WhGqgAAANA"]
[Mon Mar 30 00:49:20.165144 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:25855] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclYECE3TArOFrUtgWqpZwAAAII"]
[Mon Mar 30 00:49:20.561966 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:39290] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclYECE3TArOFrUtgWqpbwAAAIQ"]
[Mon Mar 30 00:49:20.963727 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:45201] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "aclYECE3TArOFrUtgWqpdAAAAIg"]
[Mon Mar 30 00:49:21.360669 2026] [:error] [pid 32359:tid 32378] [client 68.155.145.150:32224] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclYEQMb8G3UzfQP3WhGqwAAANE"]
[Mon Mar 30 00:49:21.748615 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:25239] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclYESE3TArOFrUtgWqpdQAAAIA"]
[Mon Mar 30 00:49:22.137395 2026] [:error] [pid 8818:tid 8843] [client 68.155.145.150:29396] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclYEiCDvotZNSF0FBoJawAAAVU"]
[Mon Mar 30 00:49:22.523864 2026] [:error] [pid 32254:tid 32275] [client 68.155.145.150:29411] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aclYEqug2IHuyGgCTn9v3gAAAAs"]
[Mon Mar 30 00:49:22.913104 2026] [:error] [pid 8818:tid 8833] [client 68.155.145.150:39260] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclYEiCDvotZNSF0FBoJbQAAAUs"]
[Mon Mar 30 00:49:23.312531 2026] [:error] [pid 23167:tid 23183] [client 68.155.145.150:20700] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclYExIAHJCFaHff3_fzQwAAAc0"]
[Mon Mar 30 00:49:23.697805 2026] [:error] [pid 8818:tid 8823] [client 68.155.145.150:29857] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclYEyCDvotZNSF0FBoJbwAAAUE"]
[Mon Mar 30 00:49:24.108025 2026] [:error] [pid 23167:tid 23189] [client 68.155.145.150:30441] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aclYFBIAHJCFaHff3_fzRAAAAdM"]
[Mon Mar 30 00:49:24.517448 2026] [:error] [pid 23137:tid 23141] [client 68.155.145.150:4725] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclYFBaWQa7LdZ_qGFYZSwAAAYI"]
[Mon Mar 30 00:49:24.914108 2026] [:error] [pid 23284:tid 23294] [client 68.155.145.150:4249] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclYFIzBujdPHsq7wyQpiwAAAog"]
[Mon Mar 30 00:49:25.306572 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:28391] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclYFYzBujdPHsq7wyQpjwAAApA"]
[Mon Mar 30 00:49:25.691078 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:22716] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aclYFSE3TArOFrUtgWqphgAAAIA"]
[Mon Mar 30 00:49:26.085115 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:4255] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclYFozBujdPHsq7wyQpkwAAApc"]
[Mon Mar 30 00:49:26.485745 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:51985] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclYFiE3TArOFrUtgWqpjAAAAI8"]
[Mon Mar 30 00:49:26.870652 2026] [:error] [pid 32257:tid 32339] [client 68.155.145.150:35077] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclYFiE3TArOFrUtgWqpjwAAAJU"]
[Mon Mar 30 00:49:27.257595 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:48242] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aclYF4zBujdPHsq7wyQpmAAAAoU"]
[Mon Mar 30 00:49:27.659407 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:47551] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclYF2nfn-AtRoMbquxCiwAAAFE"]
[Mon Mar 30 00:49:28.064604 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:39732] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclYGCE3TArOFrUtgWqpmwAAAIQ"]
[Mon Mar 30 00:49:28.462444 2026] [:error] [pid 23284:tid 23304] [client 68.155.145.150:39287] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclYGIzBujdPHsq7wyQpmgAAApI"]
[Mon Mar 30 00:49:28.876051 2026] [:error] [pid 32257:tid 32325] [client 68.155.145.150:20676] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aclYGCE3TArOFrUtgWqpqAAAAIc"]
[Mon Mar 30 00:49:29.297596 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:28356] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aclYGSE3TArOFrUtgWqprAAAAIw"]
[Mon Mar 30 00:49:29.682167 2026] [:error] [pid 32257:tid 32340] [client 68.155.145.150:5002] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aclYGSE3TArOFrUtgWqpsAAAAJY"]
[Mon Mar 30 00:49:30.091114 2026] [:error] [pid 23284:tid 23306] [client 68.155.145.150:47526] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aclYGozBujdPHsq7wyQpngAAApQ"]
[Mon Mar 30 00:49:30.522080 2026] [:error] [pid 23168:tid 23201] [client 68.155.145.150:43693] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aclYGmP8p0yRL8ot_2_ecQAAAgQ"]
[Mon Mar 30 00:49:30.923136 2026] [:error] [pid 23167:tid 23193] [client 68.155.145.150:4675] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "aclYGhIAHJCFaHff3_fzSgAAAdc"]
[Mon Mar 30 00:49:31.323588 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:47524] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "aclYGyE3TArOFrUtgWqptwAAAIw"]
[Mon Mar 30 00:49:31.716542 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:42672] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "aclYGyE3TArOFrUtgWqpugAAAIQ"]
[Mon Mar 30 00:49:32.112045 2026] [:error] [pid 23250:tid 23258] [client 68.155.145.150:4994] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "aclYHJxrpj-dQjy1cvonzAAAAkY"]
[Mon Mar 30 00:49:32.508364 2026] [:error] [pid 32255:tid 32305] [client 68.155.145.150:48227] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclYHGnfn-AtRoMbquxCjwAAAE4"]
[Mon Mar 30 00:49:32.891213 2026] [:error] [pid 23284:tid 23295] [client 68.155.145.150:42363] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclYHIzBujdPHsq7wyQppQAAAok"]
[Mon Mar 30 00:49:33.289985 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:43676] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclYHWnfn-AtRoMbquxClAAAAE8"]
[Mon Mar 30 00:49:33.686297 2026] [:error] [pid 32255:tid 32302] [client 68.155.145.150:51990] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aclYHWnfn-AtRoMbquxCmQAAAEs"]
[Mon Mar 30 00:49:34.093077 2026] [:error] [pid 32255:tid 32292] [client 68.155.145.150:39702] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclYHmnfn-AtRoMbquxCnAAAAEE"]
[Mon Mar 30 00:49:34.483319 2026] [:error] [pid 32257:tid 32324] [client 68.155.145.150:18810] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclYHiE3TArOFrUtgWqpygAAAIY"]
[Mon Mar 30 00:49:34.892574 2026] [:error] [pid 23168:tid 23209] [client 68.155.145.150:32214] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclYHmP8p0yRL8ot_2_edgAAAgw"]
[Mon Mar 30 00:49:35.289371 2026] [:error] [pid 23168:tid 23208] [client 68.155.145.150:48204] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aclYH2P8p0yRL8ot_2_efAAAAgs"]
[Mon Mar 30 00:49:35.678647 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:5021] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aclYH4zBujdPHsq7wyQpqQAAAo8"]
[Mon Mar 30 00:49:36.063518 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:39693] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aclYIGnfn-AtRoMbquxCogAAAE0"]
[Mon Mar 30 00:49:36.457001 2026] [:error] [pid 32255:tid 32303] [client 68.155.145.150:21196] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aclYIGnfn-AtRoMbquxCpAAAAEw"]
[Mon Mar 30 00:49:36.857685 2026] [:error] [pid 32255:tid 32294] [client 68.155.145.150:44728] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "aclYIGnfn-AtRoMbquxCpgAAAEM"]
[Mon Mar 30 00:49:37.237947 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:53701] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aclYIYzBujdPHsq7wyQprgAAApM"]
[Mon Mar 30 00:49:37.619946 2026] [:error] [pid 32255:tid 32310] [client 68.155.145.150:21203] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aclYIWnfn-AtRoMbquxCrgAAAFM"]
[Mon Mar 30 00:49:38.033510 2026] [:error] [pid 23284:tid 23304] [client 68.155.145.150:4450] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aclYIozBujdPHsq7wyQpsgAAApI"]
[Mon Mar 30 00:49:38.425481 2026] [:error] [pid 32255:tid 32293] [client 68.155.145.150:35663] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aclYImnfn-AtRoMbquxCsAAAAEI"]
[Mon Mar 30 00:49:38.818784 2026] [:error] [pid 23167:tid 23171] [client 68.155.145.150:42334] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "aclYIhIAHJCFaHff3_fzSwAAAcE"]
[Mon Mar 30 00:49:39.207754 2026] [:error] [pid 32255:tid 32297] [client 68.155.145.150:38708] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "aclYI2nfn-AtRoMbquxCtAAAAEY"]
[Mon Mar 30 00:49:39.613357 2026] [:error] [pid 23167:tid 23192] [client 68.155.145.150:54949] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "aclYIxIAHJCFaHff3_fzTQAAAdY"]
[Mon Mar 30 00:49:39.996132 2026] [:error] [pid 32257:tid 32341] [client 68.155.145.150:28339] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "aclYIyE3TArOFrUtgWqp0gAAAJc"]
[Mon Mar 30 00:49:40.392038 2026] [:error] [pid 23284:tid 23307] [client 68.155.145.150:41127] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aclYJIzBujdPHsq7wyQpugAAApU"]
[Mon Mar 30 00:49:40.812370 2026] [:error] [pid 32359:tid 32362] [client 68.155.145.150:38668] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aclYJAMb8G3UzfQP3WhGtQAAAME"]
[Mon Mar 30 00:49:41.193075 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:27374] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aclYJWnfn-AtRoMbquxCtwAAAFE"]
[Mon Mar 30 00:49:41.604447 2026] [:error] [pid 32255:tid 32293] [client 68.155.145.150:53671] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aclYJWnfn-AtRoMbquxCugAAAEI"]
[Mon Mar 30 00:49:41.989043 2026] [:error] [pid 32255:tid 32305] [client 68.155.145.150:37151] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aclYJWnfn-AtRoMbquxCvQAAAE4"]
[Mon Mar 30 00:49:42.568113 2026] [:error] [pid 32255:tid 32295] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Mon Mar 30 00:49:42.759601 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Mar 30 00:49:42.953274 2026] [:error] [pid 32255:tid 32312] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Mon Mar 30 00:49:43.153059 2026] [:error] [pid 32255:tid 32313] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Mon Mar 30 00:49:43.723494 2026] [:error] [pid 32255:tid 32313] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Mon Mar 30 00:49:43.915112 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Mon Mar 30 00:49:44.109132 2026] [:error] [pid 32255:tid 32311] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Mar 30 00:49:44.302551 2026] [:error] [pid 32255:tid 32295] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Mon Mar 30 00:49:44.496028 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon Mar 30 00:49:44.689422 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:25257] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Mon Mar 30 00:49:44.880249 2026] [:error] [pid 32255:tid 32301] [client 68.155.145.150:25257] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclYKGnfn-AtRoMbquxC1QAAAEo"]
[Mon Mar 30 00:49:45.280366 2026] [:error] [pid 23284:tid 23303] [client 68.155.145.150:26348] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclYKYzBujdPHsq7wyQpwgAAApE"]
[Mon Mar 30 00:49:45.670350 2026] [:error] [pid 23168:tid 23220] [client 68.155.145.150:27809] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclYKWP8p0yRL8ot_2_ehgAAAhc"]
[Mon Mar 30 00:49:46.066726 2026] [:error] [pid 32257:tid 32321] [client 68.155.145.150:19593] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aclYKiE3TArOFrUtgWqp4AAAAIM"]
[Mon Mar 30 00:49:46.450738 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:40253] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclYKozBujdPHsq7wyQpwwAAAoo"]
[Mon Mar 30 00:49:46.833200 2026] [:error] [pid 32255:tid 32312] [client 68.155.145.150:18745] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclYKmnfn-AtRoMbquxC1wAAAFU"]
[Mon Mar 30 00:49:47.228153 2026] [:error] [pid 32255:tid 32304] [client 68.155.145.150:49411] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclYK2nfn-AtRoMbquxC2wAAAE0"]
[Mon Mar 30 00:49:47.636925 2026] [:error] [pid 32257:tid 32341] [client 68.155.145.150:24295] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aclYKyE3TArOFrUtgWqp6AAAAJc"]
[Mon Mar 30 00:49:48.039135 2026] [:error] [pid 32257:tid 32323] [client 68.155.145.150:58028] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclYLCE3TArOFrUtgWqp7QAAAIU"]
[Mon Mar 30 00:49:48.431314 2026] [:error] [pid 32254:tid 32272] [client 68.155.145.150:46915] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclYLKug2IHuyGgCTn9v4wAAAAg"]
[Mon Mar 30 00:49:48.824688 2026] [:error] [pid 32254:tid 32286] [client 68.155.145.150:46952] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclYLKug2IHuyGgCTn9v5QAAABY"]
[Mon Mar 30 00:49:49.205185 2026] [:error] [pid 23137:tid 23143] [client 68.155.145.150:31320] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aclYLRaWQa7LdZ_qGFYZWgAAAYQ"]
[Mon Mar 30 00:49:49.603937 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:31329] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclYLYzBujdPHsq7wyQpxwAAAo8"]
[Mon Mar 30 00:49:49.989653 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:48129] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclYLSE3TArOFrUtgWqp9wAAAJM"]
[Mon Mar 30 00:49:50.371515 2026] [:error] [pid 32257:tid 32325] [client 68.155.145.150:46951] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclYLiE3TArOFrUtgWqp-AAAAIc"]
[Mon Mar 30 00:49:50.762520 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:18750] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aclYLiE3TArOFrUtgWqp-wAAAIQ"]
[Mon Mar 30 00:49:51.143408 2026] [:error] [pid 32257:tid 32320] [client 68.155.145.150:57997] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclYLyE3TArOFrUtgWqp_gAAAII"]
[Mon Mar 30 00:49:51.531197 2026] [:error] [pid 23168:tid 23207] [client 68.155.145.150:36101] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclYL2P8p0yRL8ot_2_ejgAAAgo"]
[Mon Mar 30 00:49:51.921219 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:52706] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclYL4zBujdPHsq7wyQpywAAAo4"]
[Mon Mar 30 00:49:52.301148 2026] [:error] [pid 32257:tid 32322] [client 68.155.145.150:56863] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aclYMCE3TArOFrUtgWqqCAAAAIQ"]
[Mon Mar 30 00:49:52.682758 2026] [:error] [pid 23284:tid 23297] [client 68.155.145.150:48131] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclYMIzBujdPHsq7wyQpzQAAAos"]
[Mon Mar 30 00:49:53.070358 2026] [:error] [pid 23250:tid 23275] [client 68.155.145.150:52726] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclYMZxrpj-dQjy1cvon0gAAAlc"]
[Mon Mar 30 00:49:53.454409 2026] [:error] [pid 32257:tid 32324] [client 68.155.145.150:18696] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclYMSE3TArOFrUtgWqqDAAAAIY"]
[Mon Mar 30 00:49:53.840313 2026] [:error] [pid 32257:tid 32342] [client 68.155.145.150:44776] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "aclYMSE3TArOFrUtgWqqDgAAAJg"]
[Mon Mar 30 00:49:54.219403 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:56858] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclYMiE3TArOFrUtgWqqDwAAAIg"]
[Mon Mar 30 00:49:54.603131 2026] [:error] [pid 8818:tid 8835] [client 68.155.145.150:18690] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclYMiCDvotZNSF0FBoJhQAAAU0"]
[Mon Mar 30 00:49:55.021184 2026] [:error] [pid 32255:tid 32291] [client 68.155.145.150:44771] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclYM2nfn-AtRoMbquxC5wAAAEA"]
[Mon Mar 30 00:49:55.404704 2026] [:error] [pid 23284:tid 23288] [client 68.155.145.150:49426] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "aclYM4zBujdPHsq7wyQp0QAAAoI"]
[Mon Mar 30 00:49:55.800279 2026] [:error] [pid 32255:tid 32308] [client 68.155.145.150:25744] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclYM2nfn-AtRoMbquxC7gAAAFE"]
[Mon Mar 30 00:49:56.180852 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:44178] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclYNIzBujdPHsq7wyQp1AAAAoE"]
[Mon Mar 30 00:49:56.566317 2026] [:error] [pid 23284:tid 23293] [client 68.155.145.150:18706] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclYNIzBujdPHsq7wyQp1wAAAoc"]
[Mon Mar 30 00:49:56.945790 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:46926] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "aclYNIzBujdPHsq7wyQp3QAAApM"]
[Mon Mar 30 00:49:57.325829 2026] [:error] [pid 23137:tid 23155] [client 68.155.145.150:18734] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclYNRaWQa7LdZ_qGFYZYgAAAZA"]
[Mon Mar 30 00:49:57.714081 2026] [:error] [pid 32254:tid 32285] [client 68.155.145.150:48139] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclYNaug2IHuyGgCTn9v6QAAABU"]
[Mon Mar 30 00:49:58.096950 2026] [:error] [pid 32359:tid 32383] [client 68.155.145.150:58624] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclYNgMb8G3UzfQP3WhGvgAAANY"]
[Mon Mar 30 00:49:58.483663 2026] [:error] [pid 32255:tid 32307] [client 68.155.145.150:58667] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aclYNmnfn-AtRoMbquxC7wAAAFA"]
[Mon Mar 30 00:49:58.872887 2026] [:error] [pid 32255:tid 32301] [client 68.155.145.150:24274] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclYNmnfn-AtRoMbquxC8AAAAEo"]
[Mon Mar 30 00:49:59.253867 2026] [:error] [pid 23137:tid 23140] [client 68.155.145.150:33229] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclYNxaWQa7LdZ_qGFYZZgAAAYE"]
[Mon Mar 30 00:49:59.636652 2026] [:error] [pid 32257:tid 32323] [client 68.155.145.150:18744] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclYNyE3TArOFrUtgWqqFgAAAIU"]
[Mon Mar 30 00:50:00.021293 2026] [:error] [pid 23137:tid 23161] [client 68.155.145.150:46970] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "aclYOBaWQa7LdZ_qGFYZagAAAZY"]
[Mon Mar 30 00:50:00.406917 2026] [:error] [pid 32359:tid 32368] [client 68.155.145.150:24290] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclYOAMb8G3UzfQP3WhGvwAAAMc"]
[Mon Mar 30 00:50:00.800027 2026] [:error] [pid 32255:tid 32303] [client 68.155.145.150:48177] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclYOGnfn-AtRoMbquxC-AAAAEw"]
[Mon Mar 30 00:50:01.180562 2026] [:error] [pid 23137:tid 23148] [client 68.155.145.150:36144] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclYORaWQa7LdZ_qGFYZcgAAAYk"]
[Mon Mar 30 00:50:01.576208 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:46920] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aclYOYzBujdPHsq7wyQp7gAAAo4"]
[Mon Mar 30 00:50:01.960013 2026] [:error] [pid 32257:tid 32324] [client 68.155.145.150:58647] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclYOSE3TArOFrUtgWqqGwAAAIY"]
[Mon Mar 30 00:50:02.343289 2026] [:error] [pid 32255:tid 32311] [client 68.155.145.150:36155] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclYOmnfn-AtRoMbquxC_AAAAFQ"]
[Mon Mar 30 00:50:02.726627 2026] [:error] [pid 8818:tid 8841] [client 68.155.145.150:58015] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclYOiCDvotZNSF0FBoJjwAAAVM"]
[Mon Mar 30 00:50:03.109263 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:48153] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aclYOyE3TArOFrUtgWqqIQAAAIk"]
[Mon Mar 30 00:50:03.492310 2026] [:error] [pid 23284:tid 23296] [client 68.155.145.150:36108] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclYO4zBujdPHsq7wyQp8QAAAoo"]
[Mon Mar 30 00:50:03.886837 2026] [:error] [pid 32257:tid 32318] [client 68.155.145.150:24270] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclYOyE3TArOFrUtgWqqIwAAAIA"]
[Mon Mar 30 00:50:04.282469 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:52734] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclYPCE3TArOFrUtgWqqJwAAAI8"]
[Mon Mar 30 00:50:04.676605 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:30458] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "aclYPIzBujdPHsq7wyQp9wAAApM"]
[Mon Mar 30 00:50:05.069197 2026] [:error] [pid 32255:tid 32301] [client 68.155.145.150:49460] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclYPWnfn-AtRoMbquxDAAAAAEo"]
[Mon Mar 30 00:50:05.456552 2026] [:error] [pid 23284:tid 23300] [client 68.155.145.150:21636] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclYPYzBujdPHsq7wyQp-AAAAo4"]
[Mon Mar 30 00:50:05.840653 2026] [:error] [pid 23167:tid 23177] [client 68.155.145.150:24284] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclYPRIAHJCFaHff3_fzWAAAAcc"]
[Mon Mar 30 00:50:06.221818 2026] [:error] [pid 23250:tid 23258] [client 68.155.145.150:21639] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "aclYPpxrpj-dQjy1cvon2AAAAkY"]
[Mon Mar 30 00:50:06.628196 2026] [:error] [pid 23168:tid 23211] [client 68.155.145.150:36153] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclYPmP8p0yRL8ot_2_emwAAAg4"]
[Mon Mar 30 00:50:07.022032 2026] [:error] [pid 23284:tid 23289] [client 68.155.145.150:48145] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclYP4zBujdPHsq7wyQqAAAAAoM"]
[Mon Mar 30 00:50:07.403399 2026] [:error] [pid 23284:tid 23287] [client 68.155.145.150:36127] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclYP4zBujdPHsq7wyQqAgAAAoE"]
[Mon Mar 30 00:50:07.805427 2026] [:error] [pid 23284:tid 23309] [client 68.155.145.150:18740] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aclYP4zBujdPHsq7wyQqBAAAApc"]
[Mon Mar 30 00:50:08.186446 2026] [:error] [pid 32257:tid 32337] [client 68.155.145.150:33250] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclYQCE3TArOFrUtgWqqLgAAAJM"]
[Mon Mar 30 00:50:08.574012 2026] [:error] [pid 23284:tid 23291] [client 68.155.145.150:48133] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclYQIzBujdPHsq7wyQqBwAAAoU"]
[Mon Mar 30 00:50:08.958819 2026] [:error] [pid 23167:tid 23173] [client 68.155.145.150:49452] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclYQBIAHJCFaHff3_fzWQAAAcM"]
[Mon Mar 30 00:50:09.359952 2026] [:error] [pid 23250:tid 23269] [client 68.155.145.150:52729] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aclYQZxrpj-dQjy1cvon3AAAAlE"]
[Mon Mar 30 00:50:09.744702 2026] [:error] [pid 23250:tid 23252] [client 68.155.145.150:31335] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclYQZxrpj-dQjy1cvon3gAAAkA"]
[Mon Mar 30 00:50:10.151486 2026] [:error] [pid 23250:tid 23263] [client 68.155.145.150:58011] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclYQpxrpj-dQjy1cvon4AAAAks"]
[Mon Mar 30 00:50:10.532734 2026] [:error] [pid 23284:tid 23299] [client 68.155.145.150:52716] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclYQozBujdPHsq7wyQqDAAAAo0"]
[Mon Mar 30 00:50:10.914907 2026] [:error] [pid 23168:tid 23215] [client 68.155.145.150:22750] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aclYQmP8p0yRL8ot_2_enQAAAhI"]
[Mon Mar 30 00:50:11.303100 2026] [:error] [pid 23168:tid 23206] [client 68.155.145.150:24269] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclYQ2P8p0yRL8ot_2_enwAAAgk"]
[Mon Mar 30 00:50:11.699399 2026] [:error] [pid 23284:tid 23298] [client 68.155.145.150:49435] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclYQ4zBujdPHsq7wyQqDwAAAow"]
[Mon Mar 30 00:50:12.079500 2026] [:error] [pid 23167:tid 23188] [client 68.155.145.150:25773] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclYRBIAHJCFaHff3_fzXQAAAdI"]
[Mon Mar 30 00:50:12.472228 2026] [:error] [pid 23250:tid 23273] [client 68.155.145.150:21681] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aclYRJxrpj-dQjy1cvon5gAAAlU"]
[Mon Mar 30 00:50:12.866106 2026] [:error] [pid 32257:tid 32339] [client 68.155.145.150:33235] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclYRCE3TArOFrUtgWqqOAAAAJU"]
[Mon Mar 30 00:50:13.249307 2026] [:error] [pid 23284:tid 23292] [client 68.155.145.150:58668] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclYRYzBujdPHsq7wyQqEwAAAoY"]
[Mon Mar 30 00:50:13.645647 2026] [:error] [pid 8818:tid 8835] [client 68.155.145.150:49448] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclYRSCDvotZNSF0FBoJkgAAAU0"]
[Mon Mar 30 00:50:14.063330 2026] [:error] [pid 32257:tid 32327] [client 68.155.145.150:21666] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aclYRiE3TArOFrUtgWqqOgAAAIk"]
[Mon Mar 30 00:50:14.475984 2026] [:error] [pid 32257:tid 32332] [client 68.155.145.150:56840] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclYRiE3TArOFrUtgWqqPgAAAI4"]
[Mon Mar 30 00:50:14.863533 2026] [:error] [pid 32257:tid 32333] [client 68.155.145.150:30418] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclYRiE3TArOFrUtgWqqQQAAAI8"]
[Mon Mar 30 00:50:15.249025 2026] [:error] [pid 32257:tid 32330] [client 68.155.145.150:36126] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclYRyE3TArOFrUtgWqqRQAAAIw"]
[Mon Mar 30 00:50:15.636409 2026] [:error] [pid 23284:tid 23292] [client 68.155.145.150:26287] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aclYR4zBujdPHsq7wyQqHgAAAoY"]
[Mon Mar 30 00:50:16.050553 2026] [:error] [pid 23284:tid 23301] [client 68.155.145.150:52697] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclYSIzBujdPHsq7wyQqIgAAAo8"]
[Mon Mar 30 00:50:16.440715 2026] [:error] [pid 8818:tid 8838] [client 68.155.145.150:31355] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclYSCCDvotZNSF0FBoJkwAAAVA"]
[Mon Mar 30 00:50:16.825412 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:18721] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclYSCE3TArOFrUtgWqqSwAAAIg"]
[Mon Mar 30 00:50:17.204116 2026] [:error] [pid 23167:tid 23182] [client 68.155.145.150:49422] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aclYSRIAHJCFaHff3_fzXgAAAcw"]
[Mon Mar 30 00:50:17.604675 2026] [:error] [pid 32255:tid 32306] [client 68.155.145.150:18718] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclYSWnfn-AtRoMbquxDDQAAAE8"]
[Mon Mar 30 00:50:17.985927 2026] [:error] [pid 23284:tid 23293] [client 68.155.145.150:56872] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclYSYzBujdPHsq7wyQqJgAAAoc"]
[Mon Mar 30 00:50:18.378879 2026] [:error] [pid 23284:tid 23294] [client 68.155.145.150:31330] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclYSozBujdPHsq7wyQqJwAAAog"]
[Mon Mar 30 00:50:18.767860 2026] [:error] [pid 23250:tid 23267] [client 68.155.145.150:18718] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aclYSpxrpj-dQjy1cvon6AAAAk8"]
[Mon Mar 30 00:50:19.158697 2026] [:error] [pid 32359:tid 32363] [client 68.155.145.150:18726] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclYSwMb8G3UzfQP3WhGxQAAAMI"]
[Mon Mar 30 00:50:19.548056 2026] [:error] [pid 32254:tid 32279] [client 68.155.145.150:30422] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclYS6ug2IHuyGgCTn9v7QAAAA8"]
[Mon Mar 30 00:50:19.942215 2026] [:error] [pid 32359:tid 32384] [client 68.155.145.150:48188] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclYSwMb8G3UzfQP3WhGxgAAANc"]
[Mon Mar 30 00:50:20.336469 2026] [:error] [pid 32255:tid 32294] [client 68.155.145.150:58634] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/wp-blog.php"] [unique_id "aclYTGnfn-AtRoMbquxDFQAAAEM"]
[Mon Mar 30 00:50:20.722826 2026] [:error] [pid 32359:tid 32381] [client 68.155.145.150:27794] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclYTAMb8G3UzfQP3WhGyAAAANQ"]
[Mon Mar 30 00:50:21.113076 2026] [:error] [pid 23167:tid 23180] [client 68.155.145.150:25764] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclYTRIAHJCFaHff3_fzYAAAAco"]
[Mon Mar 30 00:50:21.496698 2026] [:error] [pid 32359:tid 32362] [client 68.155.145.150:30405] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclYTQMb8G3UzfQP3WhGzQAAAME"]
[Mon Mar 30 00:50:21.876919 2026] [:error] [pid 23167:tid 23172] [client 68.155.145.150:26296] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aclYTRIAHJCFaHff3_fzYwAAAcI"]
[Mon Mar 30 00:50:22.259454 2026] [:error] [pid 23167:tid 23181] [client 68.155.145.150:30461] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclYThIAHJCFaHff3_fzZAAAAcs"]
[Mon Mar 30 00:50:22.641685 2026] [:error] [pid 23168:tid 23219] [client 68.155.145.150:56860] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclYTmP8p0yRL8ot_2_eqgAAAhY"]
[Mon Mar 30 00:50:23.037214 2026] [:error] [pid 32255:tid 32310] [client 68.155.145.150:30449] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclYT2nfn-AtRoMbquxDGgAAAFM"]
[Mon Mar 30 00:50:23.418940 2026] [:error] [pid 23167:tid 23178] [client 68.155.145.150:25768] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aclYTxIAHJCFaHff3_fzZwAAAcg"]
[Mon Mar 30 00:50:23.811057 2026] [:error] [pid 32257:tid 32319] [client 68.155.145.150:59270] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "aclYTyE3TArOFrUtgWqqVwAAAIE"]
[Mon Mar 30 00:50:24.192909 2026] [:error] [pid 23168:tid 23206] [client 68.155.145.150:52694] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "aclYUGP8p0yRL8ot_2_erQAAAgk"]
[Mon Mar 30 00:50:24.577350 2026] [:error] [pid 23168:tid 23205] [client 68.155.145.150:56837] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "aclYUGP8p0yRL8ot_2_ergAAAgg"]
[Mon Mar 30 00:50:24.959669 2026] [:error] [pid 23167:tid 23192] [client 68.155.145.150:48855] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "aclYUBIAHJCFaHff3_fzawAAAdY"]
[Mon Mar 30 00:50:25.343854 2026] [:error] [pid 23167:tid 23188] [client 68.155.145.150:18693] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aclYURIAHJCFaHff3_fzcAAAAdI"]
[Mon Mar 30 00:50:25.732380 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:59283] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aclYUSE3TArOFrUtgWqqXwAAAIg"]
[Mon Mar 30 00:50:26.118002 2026] [:error] [pid 23137:tid 23147] [client 68.155.145.150:36119] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aclYUhaWQa7LdZ_qGFYZgAAAAYg"]
[Mon Mar 30 00:50:26.500532 2026] [:error] [pid 23137:tid 23158] [client 68.155.145.150:44208] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aclYUhaWQa7LdZ_qGFYZgwAAAZM"]
[Mon Mar 30 00:50:26.891200 2026] [:error] [pid 23284:tid 23298] [client 68.155.145.150:26294] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aclYUozBujdPHsq7wyQqOwAAAow"]
[Mon Mar 30 00:50:27.271930 2026] [:error] [pid 23284:tid 23292] [client 68.155.145.150:26300] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aclYU4zBujdPHsq7wyQqQQAAAoY"]
[Mon Mar 30 00:50:27.654586 2026] [:error] [pid 32257:tid 32329] [client 68.155.145.150:25759] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aclYUyE3TArOFrUtgWqqZQAAAIs"]
[Mon Mar 30 00:50:28.039516 2026] [:error] [pid 23167:tid 23180] [client 68.155.145.150:25769] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aclYVBIAHJCFaHff3_fzcwAAAco"]
[Mon Mar 30 00:50:28.422461 2026] [:error] [pid 32255:tid 32312] [client 68.155.145.150:30444] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aclYVGnfn-AtRoMbquxDIgAAAFU"]
[Mon Mar 30 00:50:28.816217 2026] [:error] [pid 23284:tid 23307] [client 68.155.145.150:58004] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aclYVIzBujdPHsq7wyQqTwAAApU"]
[Mon Mar 30 00:50:29.206406 2026] [:error] [pid 23250:tid 23258] [client 68.155.145.150:30415] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aclYVZxrpj-dQjy1cvon8QAAAkY"]
[Mon Mar 30 00:50:29.603373 2026] [:error] [pid 23250:tid 23252] [client 68.155.145.150:48879] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aclYVZxrpj-dQjy1cvon9AAAAkA"]
[Mon Mar 30 00:50:29.984993 2026] [:error] [pid 8818:tid 8841] [client 68.155.145.150:26270] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aclYVSCDvotZNSF0FBoJmgAAAVM"]
[Mon Mar 30 00:50:30.375820 2026] [:error] [pid 32257:tid 32326] [client 68.155.145.150:52715] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aclYViE3TArOFrUtgWqqaAAAAIg"]
[Mon Mar 30 00:50:30.769395 2026] [:error] [pid 23284:tid 23297] [client 68.155.145.150:25784] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aclYVozBujdPHsq7wyQqVAAAAos"]
[Mon Mar 30 00:50:31.156684 2026] [:error] [pid 32255:tid 32298] [client 68.155.145.150:49421] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aclYV2nfn-AtRoMbquxDJgAAAEc"]
[Mon Mar 30 00:50:31.560620 2026] [:error] [pid 32255:tid 32313] [client 68.155.145.150:25742] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclYV2nfn-AtRoMbquxDKgAAAFY"]
[Mon Mar 30 00:50:31.945447 2026] [:error] [pid 32255:tid 32312] [client 68.155.145.150:48159] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclYV2nfn-AtRoMbquxDMAAAAFU"]
[Mon Mar 30 00:50:32.332296 2026] [:error] [pid 32359:tid 32363] [client 68.155.145.150:26283] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclYWAMb8G3UzfQP3WhG0gAAAMI"]
[Mon Mar 30 00:50:32.716567 2026] [:error] [pid 23284:tid 23290] [client 68.155.145.150:25771] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aclYWIzBujdPHsq7wyQqWAAAAoQ"]
[Mon Mar 30 00:50:33.106108 2026] [:error] [pid 23284:tid 23305] [client 68.155.145.150:30400] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclYWYzBujdPHsq7wyQqWgAAApM"]
[Mon Mar 30 00:50:33.496314 2026] [:error] [pid 23284:tid 23302] [client 68.155.145.150:36146] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclYWYzBujdPHsq7wyQqYQAAApA"]
[Mon Mar 30 00:50:33.882865 2026] [:error] [pid 23137:tid 23146] [client 68.155.145.150:36106] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclYWRaWQa7LdZ_qGFYZiAAAAYc"]
[Mon Mar 30 00:50:34.263702 2026] [:error] [pid 32359:tid 32382] [client 68.155.145.150:48838] [client 68.155.145.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "aclYWgMb8G3UzfQP3WhG1QAAANU"]
[Mon Mar 30 02:00:00.528174 2026] [:error] [pid 32359:tid 32370] [client 43.131.32.36:49382] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aclooAMb8G3UzfQP3WhSOwAAAMk"]
[Mon Mar 30 03:22:26.242881 2026] [:error] [pid 689:tid 765] [client 1.15.52.154:43778] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acl78v4r3N5Aei23bYwW7wAAAII"]
[Mon Mar 30 04:26:53.151723 2026] [:error] [pid 55884:tid 55969] [client 43.153.123.3:36672] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acmLDTjuYLVkve3Vbhx2BQAAARA"]
[Mon Mar 30 08:28:06.959739 2026] [:error] [pid 35249:tid 35285] [client 150.109.46.88:37020] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acnDliqCKiTq85d6rgDleQAAAIE"]
[Mon Mar 30 09:52:44.280190 2026] [:error] [pid 35343:tid 35353] [client 2.57.122.202:59448] [client 2.57.122.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/index"] [unique_id "acnXbKP5HurqmbvwN-I0UAAAAAg"]
[Mon Mar 30 13:43:55.009468 2026] [:error] [pid 41941:tid 41951] [client 104.168.44.59:6324] [client 104.168.44.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "acoNmyB2g7BNCXGBOJOuJQAAAQg"]
[Mon Mar 30 17:15:53.397470 2026] [:error] [pid 51065:tid 51079] [client 43.166.128.187:58224] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aco_SXMr8wtZeHSSB7IofAAAAcw"]
[Mon Mar 30 22:30:18.096980 2026] [:error] [pid 63557:tid 63563] [client 185.198.240.160:39447] [client 185.198.240.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acqI-q4QNVlzYgEvIjma9QAAAQQ"]
[Mon Mar 30 22:38:11.042684 2026] [:error] [pid 60747:tid 60820] [client 43.166.239.145:33992] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acqK0wU3IY-cCpy_-zE27wAAANE"]
[Mon Mar 30 23:37:29.636414 2026] [:error] [pid 63557:tid 63580] [client 20.104.195.176:2246] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 30 23:37:29.845373 2026] [:error] [pid 63557:tid 63569] [client 20.104.195.176:2246] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Mar 30 23:37:30.262420 2026] [:error] [pid 63557:tid 63563] [client 20.104.195.176:2246] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Mar 30 23:37:30.473468 2026] [:error] [pid 63557:tid 63578] [client 20.104.195.176:2246] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Mar 30 23:37:30.890706 2026] [:error] [pid 63557:tid 63576] [client 20.104.195.176:2246] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Mar 30 23:37:31.100253 2026] [:error] [pid 63557:tid 63561] [client 20.104.195.176:2246] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Mar 30 23:37:31.308928 2026] [:error] [pid 63557:tid 63562] [client 20.104.195.176:2246] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Mar 30 23:37:31.725099 2026] [:error] [pid 63557:tid 63572] [client 20.104.195.176:2246] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqYu64QNVlzYgEvIjnKoQAAAQ0"]
[Mon Mar 30 23:37:32.547470 2026] [:error] [pid 63557:tid 63582] [client 20.104.195.176:2846] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqYvK4QNVlzYgEvIjnKqgAAARc"]
[Mon Mar 30 23:37:33.398271 2026] [:error] [pid 60745:tid 60750] [client 20.104.195.176:2833] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqYvSQDBn75QnHaPb9WBwAAAEE"]
[Mon Mar 30 23:37:34.243045 2026] [:error] [pid 63557:tid 63580] [client 20.104.195.176:2258] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "acqYvq4QNVlzYgEvIjnKsAAAARU"]
[Tue Mar 31 01:20:57.323402 2026] [:error] [pid 36706:tid 36876] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Tue Mar 31 01:20:57.562554 2026] [:error] [pid 36706:tid 36867] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Tue Mar 31 01:20:57.801783 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/xendppio.php
[Tue Mar 31 01:20:58.042017 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/ycadmin.php
[Tue Mar 31 01:20:58.280304 2026] [:error] [pid 36706:tid 36870] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Tue Mar 31 01:20:58.519565 2026] [:error] [pid 36706:tid 36879] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/lti.php
[Tue Mar 31 01:20:58.757221 2026] [:error] [pid 36706:tid 36872] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Tue Mar 31 01:20:58.995355 2026] [:error] [pid 36706:tid 36873] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Mar 31 01:20:59.234351 2026] [:error] [pid 36706:tid 36875] [client 20.111.17.29:64088] File does not exist: /usr/local/apache/htdocs/suspended-page/cnusw.php
[Tue Mar 31 01:20:59.710659 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:64088] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqw-7a-eBLL1E34-UXs3QAAANM"]
[Tue Mar 31 01:21:00.189296 2026] [:error] [pid 36672:tid 36820] [client 20.111.17.29:64866] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqw_LKHDzEfeL3XiLo81AAAAE0"]
[Tue Mar 31 01:21:00.677450 2026] [:error] [pid 36939:tid 36964] [client 20.111.17.29:64875] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqw_MRDKH225Jeq1jc6fwAAABc"]
[Tue Mar 31 01:21:01.158794 2026] [:error] [pid 36706:tid 36866] [client 20.111.17.29:64825] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acqw_ba-eBLL1E34-UXs4wAAAMQ"]
[Tue Mar 31 01:21:01.638833 2026] [:error] [pid 36688:tid 36851] [client 20.111.17.29:64851] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqw_ZIe8NBGKiiCIcIJmwAAAJA"]
[Tue Mar 31 01:21:02.110999 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:64871] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqw_ra-eBLL1E34-UXs5QAAAMk"]
[Tue Mar 31 01:21:02.598387 2026] [:error] [pid 36939:tid 36942] [client 20.111.17.29:64855] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqw_sRDKH225Jeq1jc6hAAAAAE"]
[Tue Mar 31 01:21:03.076359 2026] [:error] [pid 36706:tid 36876] [client 20.111.17.29:64021] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acqw_7a-eBLL1E34-UXs6AAAAM4"]
[Tue Mar 31 01:21:03.549793 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:64831] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqw_7a-eBLL1E34-UXs6QAAANM"]
[Tue Mar 31 01:21:04.044789 2026] [:error] [pid 36672:tid 36828] [client 20.111.17.29:64117] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqxALKHDzEfeL3XiLo81wAAAFU"]
[Tue Mar 31 01:21:04.521491 2026] [:error] [pid 36939:tid 36945] [client 20.111.17.29:64815] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqxAMRDKH225Jeq1jc6igAAAAQ"]
[Tue Mar 31 01:21:04.995721 2026] [:error] [pid 36706:tid 36862] [client 20.111.17.29:64064] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acqxALa-eBLL1E34-UXs7wAAAMA"]
[Tue Mar 31 01:21:05.473839 2026] [:error] [pid 36688:tid 36840] [client 20.111.17.29:64878] [client 20.111.17.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acqxAZIe8NBGKiiCIcIJogAAAIU"]
[Tue Mar 31 01:21:05.945353 2026] [:error] [pid 36706:tid 36865] [client 20.111.17.29:64018] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "acqxAba-eBLL1E34-UXs8gAAAMM"]
[Tue Mar 31 01:21:06.416097 2026] [:error] [pid 36706:tid 36879] [client 20.111.17.29:64775] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "acqxAra-eBLL1E34-UXs-QAAANE"]
[Tue Mar 31 01:21:06.893030 2026] [:error] [pid 36706:tid 36863] [client 20.111.17.29:64078] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "acqxAra-eBLL1E34-UXs_QAAAME"]
[Tue Mar 31 01:21:07.369557 2026] [:error] [pid 36939:tid 36943] [client 20.111.17.29:64867] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "acqxA8RDKH225Jeq1jc6kQAAAAI"]
[Tue Mar 31 01:21:07.846120 2026] [:error] [pid 36706:tid 36864] [client 20.111.17.29:64860] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "acqxA7a-eBLL1E34-UXtAgAAAMI"]
[Tue Mar 31 01:21:08.358934 2026] [:error] [pid 36688:tid 36850] [client 20.111.17.29:64874] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "acqxBJIe8NBGKiiCIcIJpgAAAI8"]
[Tue Mar 31 01:21:08.831599 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:64114] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "acqxBCobgVY20PMQKVtTnAAAAQ8"]
[Tue Mar 31 01:21:09.300878 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:64074] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "acqxBSobgVY20PMQKVtTnQAAARE"]
[Tue Mar 31 01:21:09.772568 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:64882] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "acqxBSobgVY20PMQKVtToQAAAQA"]
[Tue Mar 31 01:21:10.258023 2026] [:error] [pid 36688:tid 36859] [client 20.111.17.29:64822] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "acqxBpIe8NBGKiiCIcIJqgAAAJg"]
[Tue Mar 31 01:21:10.740314 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:64012] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "acqxBiobgVY20PMQKVtTpwAAAQc"]
[Tue Mar 31 01:21:11.221818 2026] [:error] [pid 36688:tid 36844] [client 20.111.17.29:64859] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acqxB5Ie8NBGKiiCIcIJrAAAAIk"]
[Tue Mar 31 01:21:11.701523 2026] [:error] [pid 36688:tid 36852] [client 20.111.17.29:64121] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acqxB5Ie8NBGKiiCIcIJrwAAAJE"]
[Tue Mar 31 01:21:12.173887 2026] [:error] [pid 36688:tid 36835] [client 20.111.17.29:64823] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acqxCJIe8NBGKiiCIcIJsgAAAIA"]
[Tue Mar 31 01:21:12.643951 2026] [:error] [pid 36688:tid 36858] [client 20.111.17.29:64819] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "acqxCJIe8NBGKiiCIcIJtwAAAJc"]
[Tue Mar 31 01:21:13.125700 2026] [:error] [pid 36706:tid 36879] [client 20.111.17.29:64803] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "acqxCba-eBLL1E34-UXtBQAAANE"]
[Tue Mar 31 01:21:13.616568 2026] [:error] [pid 36706:tid 36862] [client 20.111.17.29:64025] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "acqxCba-eBLL1E34-UXtBwAAAMA"]
[Tue Mar 31 01:21:14.095372 2026] [:error] [pid 36672:tid 36829] [client 20.111.17.29:64103] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "acqxCrKHDzEfeL3XiLo88AAAAFY"]
[Tue Mar 31 01:21:14.568628 2026] [:error] [pid 36688:tid 36838] [client 20.111.17.29:64812] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file15.php"] [unique_id "acqxCpIe8NBGKiiCIcIJwAAAAIM"]
[Tue Mar 31 01:21:15.040619 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:64111] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acqxCyobgVY20PMQKVtTrgAAAQM"]
[Tue Mar 31 01:21:15.511454 2026] [:error] [pid 36672:tid 36815] [client 20.111.17.29:64780] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acqxC7KHDzEfeL3XiLo88gAAAEg"]
[Tue Mar 31 01:21:15.981591 2026] [:error] [pid 36672:tid 36813] [client 20.111.17.29:64857] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acqxC7KHDzEfeL3XiLo89AAAAEY"]
[Tue Mar 31 01:21:16.454698 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:64846] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "acqxDCobgVY20PMQKVtTsgAAARc"]
[Tue Mar 31 01:21:16.925322 2026] [:error] [pid 39123:tid 39134] [client 20.111.17.29:64039] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxDCobgVY20PMQKVtTtQAAAQk"]
[Tue Mar 31 01:21:17.397160 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:64079] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxDSobgVY20PMQKVtTvAAAAQU"]
[Tue Mar 31 01:21:17.886452 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:64102] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxDSobgVY20PMQKVtTvwAAAQY"]
[Tue Mar 31 01:21:18.356656 2026] [:error] [pid 39123:tid 39127] [client 20.111.17.29:64090] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxDiobgVY20PMQKVtTxQAAAQI"]
[Tue Mar 31 01:21:18.835159 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:64801] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxDiobgVY20PMQKVtTyQAAAQU"]
[Tue Mar 31 01:21:19.306515 2026] [:error] [pid 36706:tid 36865] [client 20.111.17.29:64010] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxD7a-eBLL1E34-UXtCgAAAMM"]
[Tue Mar 31 01:21:19.826117 2026] [:error] [pid 36706:tid 36866] [client 20.111.17.29:64873] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxD7a-eBLL1E34-UXtDQAAAMQ"]
[Tue Mar 31 01:21:20.296167 2026] [:error] [pid 39123:tid 39129] [client 20.111.17.29:64840] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "acqxECobgVY20PMQKVtT0gAAAQQ"]
[Tue Mar 31 01:21:20.772112 2026] [:error] [pid 36706:tid 36876] [client 20.111.17.29:64791] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxELa-eBLL1E34-UXtDgAAAM4"]
[Tue Mar 31 01:21:21.246914 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:64796] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxESobgVY20PMQKVtT2gAAAQs"]
[Tue Mar 31 01:21:21.740144 2026] [:error] [pid 36706:tid 36867] [client 20.111.17.29:63533] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxEba-eBLL1E34-UXtEAAAAMU"]
[Tue Mar 31 01:21:22.222501 2026] [:error] [pid 36939:tid 36941] [client 20.111.17.29:64051] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxEsRDKH225Jeq1jc6nAAAAAA"]
[Tue Mar 31 01:21:22.714709 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:64127] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxEiobgVY20PMQKVtT3gAAARI"]
[Tue Mar 31 01:21:23.194926 2026] [:error] [pid 36672:tid 36831] [client 20.111.17.29:64040] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxE7KHDzEfeL3XiLo9AQAAAFg"]
[Tue Mar 31 01:21:23.677701 2026] [:error] [pid 36672:tid 36830] [client 20.111.17.29:64029] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxE7KHDzEfeL3XiLo9AwAAAFc"]
[Tue Mar 31 01:21:24.148739 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:64075] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "acqxFCobgVY20PMQKVtT6AAAARI"]
[Tue Mar 31 01:21:24.627520 2026] [:error] [pid 36672:tid 36816] [client 20.111.17.29:64805] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acqxFLKHDzEfeL3XiLo9BwAAAEk"]
[Tue Mar 31 01:21:25.121298 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:64890] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acqxFSobgVY20PMQKVtT7AAAAQM"]
[Tue Mar 31 01:21:25.598703 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:62799] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acqxFSobgVY20PMQKVtT7wAAAQY"]
[Tue Mar 31 01:21:26.105555 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:64085] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hly.php"] [unique_id "acqxFiobgVY20PMQKVtT8wAAARQ"]
[Tue Mar 31 01:21:26.586793 2026] [:error] [pid 36939:tid 36945] [client 20.111.17.29:64022] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqxFsRDKH225Jeq1jc6qQAAAAQ"]
[Tue Mar 31 01:21:27.063583 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:64071] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqxFyobgVY20PMQKVtUAQAAARc"]
[Tue Mar 31 01:21:27.537605 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:64784] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqxFyobgVY20PMQKVtUCQAAAQU"]
[Tue Mar 31 01:21:28.014288 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:64818] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "acqxGCobgVY20PMQKVtUEAAAARQ"]
[Tue Mar 31 01:21:28.488625 2026] [:error] [pid 36688:tid 36856] [client 20.111.17.29:64101] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acqxGJIe8NBGKiiCIcIJ0AAAAJU"]
[Tue Mar 31 01:21:28.966245 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:64839] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acqxGCobgVY20PMQKVtUFwAAAQs"]
[Tue Mar 31 01:21:29.446461 2026] [:error] [pid 36706:tid 36885] [client 20.111.17.29:64894] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acqxGba-eBLL1E34-UXtMAAAANc"]
[Tue Mar 31 01:21:29.922326 2026] [:error] [pid 36672:tid 36827] [client 20.111.17.29:64077] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "acqxGbKHDzEfeL3XiLo9DwAAAFQ"]
[Tue Mar 31 01:21:30.402758 2026] [:error] [pid 36688:tid 36839] [client 20.111.17.29:64005] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acqxGpIe8NBGKiiCIcIJ1QAAAIQ"]
[Tue Mar 31 01:21:30.871686 2026] [:error] [pid 36688:tid 36847] [client 20.111.17.29:64872] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acqxGpIe8NBGKiiCIcIJ2AAAAIw"]
[Tue Mar 31 01:21:31.345298 2026] [:error] [pid 36706:tid 36865] [client 20.111.17.29:64113] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acqxG7a-eBLL1E34-UXtNgAAAMM"]
[Tue Mar 31 01:21:31.815063 2026] [:error] [pid 36706:tid 36869] [client 20.111.17.29:63556] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tajj.php"] [unique_id "acqxG7a-eBLL1E34-UXtOgAAAMc"]
[Tue Mar 31 01:21:32.292556 2026] [:error] [pid 36706:tid 36866] [client 20.111.17.29:64092] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logain5.php"] [unique_id "acqxHLa-eBLL1E34-UXtPAAAAMQ"]
[Tue Mar 31 01:21:32.766796 2026] [:error] [pid 36706:tid 36867] [client 20.111.17.29:64779] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logain5.php"] [unique_id "acqxHLa-eBLL1E34-UXtPwAAAMU"]
[Tue Mar 31 01:21:33.237134 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:64809] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logain5.php"] [unique_id "acqxHSobgVY20PMQKVtUJgAAAQU"]
[Tue Mar 31 01:21:33.712547 2026] [:error] [pid 36672:tid 36827] [client 20.111.17.29:64124] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/logain5.php"] [unique_id "acqxHbKHDzEfeL3XiLo9IQAAAFQ"]
[Tue Mar 31 01:21:34.199320 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:64790] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acqxHra-eBLL1E34-UXtSgAAAMY"]
[Tue Mar 31 01:21:34.676491 2026] [:error] [pid 36706:tid 36885] [client 20.111.17.29:63518] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acqxHra-eBLL1E34-UXtUAAAANc"]
[Tue Mar 31 01:21:35.151808 2026] [:error] [pid 36939:tid 36958] [client 20.111.17.29:63512] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acqxH8RDKH225Jeq1jc6rAAAABE"]
[Tue Mar 31 01:21:35.625185 2026] [:error] [pid 36939:tid 36942] [client 20.111.17.29:64843] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "acqxH8RDKH225Jeq1jc6rQAAAAE"]
[Tue Mar 31 01:21:36.107993 2026] [:error] [pid 36672:tid 36819] [client 20.111.17.29:64786] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqxILKHDzEfeL3XiLo9KgAAAEw"]
[Tue Mar 31 01:21:36.592140 2026] [:error] [pid 36688:tid 36852] [client 20.111.17.29:64122] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqxIJIe8NBGKiiCIcIJ4wAAAJE"]
[Tue Mar 31 01:21:37.065120 2026] [:error] [pid 36672:tid 36807] [client 20.111.17.29:64833] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqxIbKHDzEfeL3XiLo9LAAAAEA"]
[Tue Mar 31 01:21:37.587050 2026] [:error] [pid 36706:tid 36882] [client 20.111.17.29:63532] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "acqxIba-eBLL1E34-UXtXwAAANQ"]
[Tue Mar 31 01:21:38.066795 2026] [:error] [pid 36706:tid 36867] [client 20.111.17.29:64095] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqxIra-eBLL1E34-UXtYQAAAMU"]
[Tue Mar 31 01:21:38.537245 2026] [:error] [pid 36939:tid 36952] [client 20.111.17.29:64870] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqxIsRDKH225Jeq1jc6tAAAAAs"]
[Tue Mar 31 01:21:39.010519 2026] [:error] [pid 36939:tid 36953] [client 20.111.17.29:63499] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqxI8RDKH225Jeq1jc6uQAAAAw"]
[Tue Mar 31 01:21:39.485019 2026] [:error] [pid 36939:tid 36962] [client 20.111.17.29:64861] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "acqxI8RDKH225Jeq1jc6vwAAABU"]
[Tue Mar 31 01:21:39.956170 2026] [:error] [pid 36672:tid 36817] [client 20.111.17.29:63604] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acqxI7KHDzEfeL3XiLo9LwAAAEo"]
[Tue Mar 31 01:21:40.427308 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:64112] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acqxJCobgVY20PMQKVtUNQAAARA"]
[Tue Mar 31 01:21:40.903416 2026] [:error] [pid 36939:tid 36946] [client 20.111.17.29:64804] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acqxJMRDKH225Jeq1jc6xgAAAAU"]
[Tue Mar 31 01:21:41.376975 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:64106] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "acqxJcRDKH225Jeq1jc6zQAAAA8"]
[Tue Mar 31 01:21:41.860668 2026] [:error] [pid 36939:tid 36964] [client 20.111.17.29:64824] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "acqxJcRDKH225Jeq1jc60QAAABc"]
[Tue Mar 31 01:21:42.337621 2026] [:error] [pid 36939:tid 36946] [client 20.111.17.29:64817] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "acqxJsRDKH225Jeq1jc61AAAAAU"]
[Tue Mar 31 01:21:42.826710 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:63600] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "acqxJsRDKH225Jeq1jc61wAAABM"]
[Tue Mar 31 01:21:43.297758 2026] [:error] [pid 36939:tid 36951] [client 20.111.17.29:64044] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "acqxJ8RDKH225Jeq1jc62gAAAAo"]
[Tue Mar 31 01:21:43.774133 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:64830] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "acqxJyobgVY20PMQKVtUOQAAARI"]
[Tue Mar 31 01:21:44.252689 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:64834] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "acqxKLa-eBLL1E34-UXtbAAAANU"]
[Tue Mar 31 01:21:44.743158 2026] [:error] [pid 36672:tid 36821] [client 20.111.17.29:64771] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "acqxKLKHDzEfeL3XiLo9NQAAAE4"]
[Tue Mar 31 01:21:45.231480 2026] [:error] [pid 36672:tid 36826] [client 20.111.17.29:64774] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "acqxKbKHDzEfeL3XiLo9OQAAAFM"]
[Tue Mar 31 01:21:45.702529 2026] [:error] [pid 39123:tid 39137] [client 20.111.17.29:64120] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxKSobgVY20PMQKVtUQgAAAQw"]
[Tue Mar 31 01:21:46.175114 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:62795] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxKiobgVY20PMQKVtURQAAARA"]
[Tue Mar 31 01:21:46.647172 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:64881] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxKsRDKH225Jeq1jc64wAAAAc"]
[Tue Mar 31 01:21:47.123768 2026] [:error] [pid 36672:tid 36827] [client 20.111.17.29:64816] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxK7KHDzEfeL3XiLo9OgAAAFQ"]
[Tue Mar 31 01:21:47.596548 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:64093] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxKyobgVY20PMQKVtURwAAAQc"]
[Tue Mar 31 01:21:48.068174 2026] [:error] [pid 36672:tid 36825] [client 20.111.17.29:64895] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxLLKHDzEfeL3XiLo9PAAAAFI"]
[Tue Mar 31 01:21:48.541387 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:64782] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxLLa-eBLL1E34-UXtdgAAAMY"]
[Tue Mar 31 01:21:49.013802 2026] [:error] [pid 36688:tid 36844] [client 20.111.17.29:64769] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "acqxLZIe8NBGKiiCIcIJ7QAAAIk"]
[Tue Mar 31 01:21:49.487041 2026] [:error] [pid 36672:tid 36823] [client 20.111.17.29:64006] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxLbKHDzEfeL3XiLo9QQAAAFA"]
[Tue Mar 31 01:21:49.960263 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:64072] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxLcRDKH225Jeq1jc67AAAAAc"]
[Tue Mar 31 01:21:50.432148 2026] [:error] [pid 36706:tid 36872] [client 20.111.17.29:63546] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxLra-eBLL1E34-UXtegAAAMo"]
[Tue Mar 31 01:21:50.912860 2026] [:error] [pid 36688:tid 36835] [client 20.111.17.29:64001] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxLpIe8NBGKiiCIcIJ8wAAAIA"]
[Tue Mar 31 01:21:51.389176 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:64009] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxLyobgVY20PMQKVtUVQAAARI"]
[Tue Mar 31 01:21:51.866413 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:62830] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxL8RDKH225Jeq1jc68QAAABM"]
[Tue Mar 31 01:21:52.340094 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:64850] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxMCobgVY20PMQKVtUXAAAARA"]
[Tue Mar 31 01:21:52.813677 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:64893] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/output.php"] [unique_id "acqxMCobgVY20PMQKVtUXwAAARU"]
[Tue Mar 31 01:21:53.284018 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:64806] [client 20.111.17.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acqxMSobgVY20PMQKVtUYwAAAQs"]
[Tue Mar 31 01:21:53.761322 2026] [:error] [pid 36706:tid 36874] [client 20.111.17.29:64792] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acqxMba-eBLL1E34-UXtgwAAAMw"]
[Tue Mar 31 01:21:54.241974 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:64008] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acqxMiobgVY20PMQKVtUaQAAAQ0"]
[Tue Mar 31 01:21:54.713091 2026] [:error] [pid 39123:tid 39137] [client 20.111.17.29:64848] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acqxMiobgVY20PMQKVtUawAAAQw"]
[Tue Mar 31 01:21:55.204162 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:64865] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "acqxMyobgVY20PMQKVtUbQAAAQc"]
[Tue Mar 31 01:21:55.676546 2026] [:error] [pid 36672:tid 36823] [client 20.111.17.29:64845] [client 20.111.17.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "acqxM7KHDzEfeL3XiLo9TAAAAFA"]
[Tue Mar 31 01:21:56.153983 2026] [:error] [pid 36706:tid 36864] [client 20.111.17.29:64838] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acqxNLa-eBLL1E34-UXtjQAAAMI"]
[Tue Mar 31 01:21:56.627884 2026] [:error] [pid 36672:tid 36809] [client 20.111.17.29:64002] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acqxNLKHDzEfeL3XiLo9TwAAAEI"]
[Tue Mar 31 01:21:57.102012 2026] [:error] [pid 36672:tid 36831] [client 20.111.17.29:64876] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acqxNbKHDzEfeL3XiLo9UQAAAFg"]
[Tue Mar 31 01:21:57.579339 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:64116] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acqxNSobgVY20PMQKVtUdwAAAQc"]
[Tue Mar 31 01:21:58.051355 2026] [:error] [pid 36706:tid 36876] [client 20.111.17.29:64055] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "acqxNra-eBLL1E34-UXtkQAAAM4"]
[Tue Mar 31 01:21:58.536537 2026] [:error] [pid 36706:tid 36863] [client 20.111.17.29:64853] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "acqxNra-eBLL1E34-UXtkwAAAME"]
[Tue Mar 31 01:21:59.010996 2026] [:error] [pid 36939:tid 36942] [client 20.111.17.29:64858] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Mar 31 01:21:59.266585 2026] [:error] [pid 36939:tid 36953] [client 20.111.17.29:64858] [client 20.111.17.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acqxN8RDKH225Jeq1jc6_QAAAAw"]
[Tue Mar 31 01:21:59.747128 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:64038] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Tue Mar 31 01:21:59.984938 2026] [:error] [pid 36939:tid 36952] [client 20.111.17.29:64038] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Tue Mar 31 01:22:00.219897 2026] [:error] [pid 36939:tid 36959] [client 20.111.17.29:64038] [client 20.111.17.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acqxOMRDKH225Jeq1jc7AwAAABI"]
[Tue Mar 31 01:22:00.701878 2026] [:error] [pid 36706:tid 36886] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Tue Mar 31 01:22:00.941702 2026] [:error] [pid 36706:tid 36870] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Tue Mar 31 01:22:01.180983 2026] [:error] [pid 36706:tid 36866] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Tue Mar 31 01:22:01.419885 2026] [:error] [pid 36706:tid 36875] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Tue Mar 31 01:22:01.662649 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Tue Mar 31 01:22:01.902089 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Tue Mar 31 01:22:02.143080 2026] [:error] [pid 36706:tid 36862] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Tue Mar 31 01:22:02.381000 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:64067] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Mar 31 01:22:02.617046 2026] [:error] [pid 36706:tid 36863] [client 20.111.17.29:64067] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acqxOra-eBLL1E34-UXtrAAAAME"]
[Tue Mar 31 01:22:03.097085 2026] [:error] [pid 36672:tid 36808] [client 20.111.17.29:63567] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acqxO7KHDzEfeL3XiLo9ZQAAAEE"]
[Tue Mar 31 01:22:03.571307 2026] [:error] [pid 36939:tid 36949] [client 20.111.17.29:64084] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acqxO8RDKH225Jeq1jc7CwAAAAg"]
[Tue Mar 31 01:22:04.044333 2026] [:error] [pid 36939:tid 36958] [client 20.111.17.29:64768] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/thoms.php"] [unique_id "acqxPMRDKH225Jeq1jc7DwAAABE"]
[Tue Mar 31 01:22:04.537404 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:62819] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O00.php"] [unique_id "acqxPMRDKH225Jeq1jc7EwAAAA8"]
[Tue Mar 31 01:22:05.010954 2026] [:error] [pid 36939:tid 36946] [client 20.111.17.29:63582] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O00.php"] [unique_id "acqxPcRDKH225Jeq1jc7FQAAAAU"]
[Tue Mar 31 01:22:05.482885 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:64778] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O00.php"] [unique_id "acqxPSobgVY20PMQKVtUfgAAAQA"]
[Tue Mar 31 01:22:05.966192 2026] [:error] [pid 36939:tid 36943] [client 20.111.17.29:64080] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/O00.php"] [unique_id "acqxPcRDKH225Jeq1jc7GQAAAAI"]
[Tue Mar 31 01:22:06.448031 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:64098] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acqxPiobgVY20PMQKVtUhAAAAQ8"]
[Tue Mar 31 01:22:06.932985 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:64083] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acqxPiobgVY20PMQKVtUiwAAARA"]
[Tue Mar 31 01:22:07.408074 2026] [:error] [pid 36688:tid 36842] [client 20.111.17.29:63553] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acqxP5Ie8NBGKiiCIcIJ-gAAAIc"]
[Tue Mar 31 01:22:07.919676 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:64042] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-.php"] [unique_id "acqxPyobgVY20PMQKVtUlAAAAQ0"]
[Tue Mar 31 01:22:08.396121 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:64041] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acqxQCobgVY20PMQKVtUlgAAAQg"]
[Tue Mar 31 01:22:08.877592 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:64864] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acqxQCobgVY20PMQKVtUngAAARQ"]
[Tue Mar 31 01:22:09.348735 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:64868] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acqxQSobgVY20PMQKVtUpQAAAQg"]
[Tue Mar 31 01:22:09.823971 2026] [:error] [pid 36672:tid 36810] [client 20.111.17.29:63578] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ee.php"] [unique_id "acqxQbKHDzEfeL3XiLo9bgAAAEM"]
[Tue Mar 31 01:22:10.294124 2026] [:error] [pid 36939:tid 36946] [client 20.111.17.29:63592] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acqxQsRDKH225Jeq1jc7HwAAAAU"]
[Tue Mar 31 01:22:10.772810 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:62816] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acqxQiobgVY20PMQKVtUsQAAAQg"]
[Tue Mar 31 01:22:11.247584 2026] [:error] [pid 36939:tid 36955] [client 20.111.17.29:64863] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acqxQ8RDKH225Jeq1jc7IQAAAA4"]
[Tue Mar 31 01:22:11.718079 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:63589] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/epinyins.php"] [unique_id "acqxQ8RDKH225Jeq1jc7IwAAABM"]
[Tue Mar 31 01:22:12.192174 2026] [:error] [pid 36672:tid 36825] [client 20.111.17.29:64877] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acqxRLKHDzEfeL3XiLo9cwAAAFI"]
[Tue Mar 31 01:22:12.681380 2026] [:error] [pid 36706:tid 36878] [client 20.111.17.29:64820] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acqxRLa-eBLL1E34-UXttQAAANA"]
[Tue Mar 31 01:22:13.156585 2026] [:error] [pid 36706:tid 36885] [client 20.111.17.29:64770] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acqxRba-eBLL1E34-UXttgAAANc"]
[Tue Mar 31 01:22:13.636732 2026] [:error] [pid 36688:tid 36857] [client 20.111.17.29:64810] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i1.php"] [unique_id "acqxRZIe8NBGKiiCIcIJ_QAAAJY"]
[Tue Mar 31 01:22:14.106620 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:64886] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acqxRra-eBLL1E34-UXtuAAAANM"]
[Tue Mar 31 01:22:14.580382 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:64125] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acqxRiobgVY20PMQKVtUvgAAARA"]
[Tue Mar 31 01:22:15.065275 2026] [:error] [pid 36939:tid 36943] [client 20.111.17.29:64033] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acqxR8RDKH225Jeq1jc7LAAAAAI"]
[Tue Mar 31 01:22:15.539663 2026] [:error] [pid 36688:tid 36843] [client 20.111.17.29:64887] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vv.php"] [unique_id "acqxR5Ie8NBGKiiCIcIKAQAAAIg"]
[Tue Mar 31 01:22:16.024961 2026] [:error] [pid 39123:tid 39149] [client 20.111.17.29:64037] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "acqxSCobgVY20PMQKVtUwwAAARg"]
[Tue Mar 31 01:22:16.496689 2026] [:error] [pid 39123:tid 39144] [client 20.111.17.29:64888] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "acqxSCobgVY20PMQKVtUxAAAARM"]
[Tue Mar 31 01:22:16.969476 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:64027] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "acqxSCobgVY20PMQKVtUxwAAARA"]
[Tue Mar 31 01:22:17.458166 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:64852] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "acqxSSobgVY20PMQKVtUywAAARU"]
[Tue Mar 31 01:22:17.933914 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:63563] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk.php"] [unique_id "acqxSSobgVY20PMQKVtUzQAAAQg"]
[Tue Mar 31 01:22:18.411338 2026] [:error] [pid 39123:tid 39137] [client 20.111.17.29:64026] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk.php"] [unique_id "acqxSiobgVY20PMQKVtU0QAAAQw"]
[Tue Mar 31 01:22:18.897456 2026] [:error] [pid 36688:tid 36848] [client 20.111.17.29:64827] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk.php"] [unique_id "acqxSpIe8NBGKiiCIcIKBQAAAI0"]
[Tue Mar 31 01:22:19.387968 2026] [:error] [pid 36939:tid 36959] [client 20.111.17.29:63558] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk.php"] [unique_id "acqxS8RDKH225Jeq1jc7NQAAABI"]
[Tue Mar 31 01:22:19.861931 2026] [:error] [pid 36939:tid 36954] [client 20.111.17.29:63495] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "acqxS8RDKH225Jeq1jc7NgAAAA0"]
[Tue Mar 31 01:22:20.335302 2026] [:error] [pid 36672:tid 36823] [client 20.111.17.29:63526] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "acqxTLKHDzEfeL3XiLo9gQAAAFA"]
[Tue Mar 31 01:22:20.809539 2026] [:error] [pid 36672:tid 36810] [client 20.111.17.29:63541] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "acqxTLKHDzEfeL3XiLo9gwAAAEM"]
[Tue Mar 31 01:22:21.279964 2026] [:error] [pid 36688:tid 36842] [client 20.111.17.29:64879] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "acqxTZIe8NBGKiiCIcIKBwAAAIc"]
[Tue Mar 31 01:22:21.773741 2026] [:error] [pid 36939:tid 36942] [client 20.111.17.29:64793] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqxTcRDKH225Jeq1jc7PAAAAAE"]
[Tue Mar 31 01:22:22.261957 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:63583] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqxTsRDKH225Jeq1jc7PgAAAAc"]
[Tue Mar 31 01:22:22.735730 2026] [:error] [pid 36939:tid 36951] [client 20.111.17.29:64035] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqxTsRDKH225Jeq1jc7QAAAAAo"]
[Tue Mar 31 01:22:23.208366 2026] [:error] [pid 36672:tid 36824] [client 20.111.17.29:64109] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "acqxT7KHDzEfeL3XiLo9hQAAAFE"]
[Tue Mar 31 01:22:23.683296 2026] [:error] [pid 36688:tid 36839] [client 20.111.17.29:62304] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acqxT5Ie8NBGKiiCIcIKEAAAAIQ"]
[Tue Mar 31 01:22:24.196173 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:63599] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acqxUCobgVY20PMQKVtU3QAAARE"]
[Tue Mar 31 01:22:24.672408 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:64115] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acqxULa-eBLL1E34-UXtxgAAAMY"]
[Tue Mar 31 01:22:25.169936 2026] [:error] [pid 36939:tid 36945] [client 20.111.17.29:63517] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "acqxUcRDKH225Jeq1jc7SQAAAAQ"]
[Tue Mar 31 01:22:25.648577 2026] [:error] [pid 36939:tid 36963] [client 20.111.17.29:62829] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqxUcRDKH225Jeq1jc7TwAAABY"]
[Tue Mar 31 01:22:26.126693 2026] [:error] [pid 36672:tid 36809] [client 20.111.17.29:64794] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqxUrKHDzEfeL3XiLo9iwAAAEI"]
[Tue Mar 31 01:22:26.598113 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:64776] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqxUsRDKH225Jeq1jc7WAAAAA8"]
[Tue Mar 31 01:22:27.097833 2026] [:error] [pid 36688:tid 36847] [client 20.111.17.29:64100] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "acqxU5Ie8NBGKiiCIcIKFQAAAIw"]
[Tue Mar 31 01:22:27.571451 2026] [:error] [pid 39123:tid 39147] [client 20.111.17.29:64807] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acqxUyobgVY20PMQKVtU4gAAARY"]
[Tue Mar 31 01:22:28.053969 2026] [:error] [pid 36688:tid 36839] [client 20.111.17.29:63534] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acqxVJIe8NBGKiiCIcIKGAAAAIQ"]
[Tue Mar 31 01:22:28.532079 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:64066] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acqxVCobgVY20PMQKVtU5gAAARE"]
[Tue Mar 31 01:22:29.003109 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:64023] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "acqxVSobgVY20PMQKVtU6QAAAQU"]
[Tue Mar 31 01:22:29.476363 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:64015] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acqxVSobgVY20PMQKVtU7QAAARU"]
[Tue Mar 31 01:22:29.946703 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:63496] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acqxVba-eBLL1E34-UXtzgAAANU"]
[Tue Mar 31 01:22:30.451292 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:63547] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acqxVra-eBLL1E34-UXt0AAAANM"]
[Tue Mar 31 01:22:30.923558 2026] [:error] [pid 36672:tid 36827] [client 20.111.17.29:64034] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "acqxVrKHDzEfeL3XiLo9lQAAAFQ"]
[Tue Mar 31 01:22:31.416139 2026] [:error] [pid 39123:tid 39147] [client 20.111.17.29:62809] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "acqxVyobgVY20PMQKVtU8gAAARY"]
[Tue Mar 31 01:22:31.889629 2026] [:error] [pid 36672:tid 36816] [client 20.111.17.29:64127] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "acqxV7KHDzEfeL3XiLo9mQAAAEk"]
[Tue Mar 31 01:22:32.376771 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:63523] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "acqxWCobgVY20PMQKVtU9AAAARc"]
[Tue Mar 31 01:22:32.854907 2026] [:error] [pid 36672:tid 36817] [client 20.111.17.29:64099] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "acqxWLKHDzEfeL3XiLo9ngAAAEo"]
[Tue Mar 31 01:22:33.328288 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:64105] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "acqxWSobgVY20PMQKVtU9QAAARE"]
[Tue Mar 31 01:22:33.804683 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:64028] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "acqxWba-eBLL1E34-UXt2wAAANU"]
[Tue Mar 31 01:22:34.275352 2026] [:error] [pid 36672:tid 36820] [client 20.111.17.29:63498] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "acqxWrKHDzEfeL3XiLo9qgAAAE0"]
[Tue Mar 31 01:22:34.756179 2026] [:error] [pid 36672:tid 36824] [client 20.111.17.29:63508] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "acqxWrKHDzEfeL3XiLo9rQAAAFE"]
[Tue Mar 31 01:22:35.240172 2026] [:error] [pid 36672:tid 36814] [client 20.111.17.29:62788] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acqxW7KHDzEfeL3XiLo9sgAAAEc"]
[Tue Mar 31 01:22:35.712425 2026] [:error] [pid 36688:tid 36859] [client 20.111.17.29:62791] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acqxW5Ie8NBGKiiCIcIKJQAAAJg"]
[Tue Mar 31 01:22:36.193733 2026] [:error] [pid 36706:tid 36864] [client 20.111.17.29:62785] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acqxXLa-eBLL1E34-UXt5QAAAMI"]
[Tue Mar 31 01:22:36.668813 2026] [:error] [pid 36706:tid 36873] [client 20.111.17.29:62756] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "acqxXLa-eBLL1E34-UXt6gAAAMs"]
[Tue Mar 31 01:22:37.145306 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:63489] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acqxXcRDKH225Jeq1jc7YQAAAA8"]
[Tue Mar 31 01:22:37.617143 2026] [:error] [pid 36672:tid 36817] [client 20.111.17.29:64783] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acqxXbKHDzEfeL3XiLo9wQAAAEo"]
[Tue Mar 31 01:22:38.088719 2026] [:error] [pid 36939:tid 36944] [client 20.111.17.29:62735] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acqxXsRDKH225Jeq1jc7YgAAAAM"]
[Tue Mar 31 01:22:38.557697 2026] [:error] [pid 39123:tid 39137] [client 20.111.17.29:64862] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "acqxXiobgVY20PMQKVtU_gAAAQw"]
[Tue Mar 31 01:22:39.046941 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:63509] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acqxX7a-eBLL1E34-UXt9gAAAMk"]
[Tue Mar 31 01:22:39.541484 2026] [:error] [pid 36672:tid 36815] [client 20.111.17.29:64813] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acqxX7KHDzEfeL3XiLo9zwAAAEg"]
[Tue Mar 31 01:22:40.014929 2026] [:error] [pid 36939:tid 36947] [client 20.111.17.29:64088] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acqxYMRDKH225Jeq1jc7ZAAAAAY"]
[Tue Mar 31 01:22:40.512332 2026] [:error] [pid 36939:tid 36955] [client 20.111.17.29:64118] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "acqxYMRDKH225Jeq1jc7ZgAAAA4"]
[Tue Mar 31 01:22:40.983889 2026] [:error] [pid 39123:tid 39129] [client 20.111.17.29:64032] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acqxYCobgVY20PMQKVtVAwAAAQQ"]
[Tue Mar 31 01:22:41.459322 2026] [:error] [pid 39123:tid 39134] [client 20.111.17.29:64073] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acqxYSobgVY20PMQKVtVCAAAAQk"]
[Tue Mar 31 01:22:41.937166 2026] [:error] [pid 36706:tid 36873] [client 20.111.17.29:63562] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acqxYba-eBLL1E34-UXt_wAAAMs"]
[Tue Mar 31 01:22:42.420609 2026] [:error] [pid 36939:tid 36949] [client 20.111.17.29:64082] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "acqxYsRDKH225Jeq1jc7ZwAAAAg"]
[Tue Mar 31 01:22:42.896862 2026] [:error] [pid 36706:tid 36878] [client 20.111.17.29:64785] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "acqxYra-eBLL1E34-UXuAgAAANA"]
[Tue Mar 31 01:22:43.388915 2026] [:error] [pid 36939:tid 36954] [client 20.111.17.29:64004] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "acqxY8RDKH225Jeq1jc7bAAAAA0"]
[Tue Mar 31 01:22:43.865419 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:64019] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "acqxY8RDKH225Jeq1jc7bgAAAA8"]
[Tue Mar 31 01:22:44.363779 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:64024] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "acqxZCobgVY20PMQKVtVDwAAAQ0"]
[Tue Mar 31 01:22:44.849895 2026] [:error] [pid 36706:tid 36886] [client 20.111.17.29:64054] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acqxZLa-eBLL1E34-UXuCgAAANg"]
[Tue Mar 31 01:22:45.325849 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:63590] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acqxZSobgVY20PMQKVtVFQAAARU"]
[Tue Mar 31 01:22:45.808121 2026] [:error] [pid 36706:tid 36864] [client 20.111.17.29:63493] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acqxZba-eBLL1E34-UXuDgAAAMI"]
[Tue Mar 31 01:22:46.278856 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:64086] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "acqxZiobgVY20PMQKVtVGQAAARQ"]
[Tue Mar 31 01:22:46.771947 2026] [:error] [pid 36706:tid 36875] [client 20.111.17.29:63579] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acqxZra-eBLL1E34-UXuEQAAAM0"]
[Tue Mar 31 01:22:47.248456 2026] [:error] [pid 39123:tid 39127] [client 20.111.17.29:63519] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acqxZyobgVY20PMQKVtVIAAAAQI"]
[Tue Mar 31 01:22:47.728548 2026] [:error] [pid 36706:tid 36872] [client 20.111.17.29:64808] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acqxZ7a-eBLL1E34-UXuEwAAAMo"]
[Tue Mar 31 01:22:48.202589 2026] [:error] [pid 36672:tid 36821] [client 20.111.17.29:64060] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "acqxaLKHDzEfeL3XiLo99gAAAE4"]
[Tue Mar 31 01:22:48.672821 2026] [:error] [pid 36672:tid 36831] [client 20.111.17.29:64048] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acqxaLKHDzEfeL3XiLo9-QAAAFg"]
[Tue Mar 31 01:22:49.146814 2026] [:error] [pid 36939:tid 36958] [client 20.111.17.29:64854] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acqxacRDKH225Jeq1jc7dgAAABE"]
[Tue Mar 31 01:22:49.622813 2026] [:error] [pid 36939:tid 36951] [client 20.111.17.29:63570] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acqxacRDKH225Jeq1jc7dwAAAAo"]
[Tue Mar 31 01:22:50.095829 2026] [:error] [pid 36706:tid 36886] [client 20.111.17.29:64014] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "acqxara-eBLL1E34-UXuHAAAANg"]
[Tue Mar 31 01:22:50.566400 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:62771] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acqxaiobgVY20PMQKVtVKAAAARE"]
[Tue Mar 31 01:22:51.041090 2026] [:error] [pid 39123:tid 39149] [client 20.111.17.29:64097] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acqxayobgVY20PMQKVtVKgAAARg"]
[Tue Mar 31 01:22:51.517744 2026] [:error] [pid 36672:tid 36807] [client 20.111.17.29:63504] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acqxa7KHDzEfeL3XiLo9-wAAAEA"]
[Tue Mar 31 01:22:52.029478 2026] [:error] [pid 36672:tid 36830] [client 20.111.17.29:64030] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "acqxbLKHDzEfeL3XiLo9_gAAAFc"]
[Tue Mar 31 01:22:52.506493 2026] [:error] [pid 36672:tid 36809] [client 20.111.17.29:63587] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acqxbLKHDzEfeL3XiLo9_wAAAEI"]
[Tue Mar 31 01:22:52.998793 2026] [:error] [pid 36939:tid 36963] [client 20.111.17.29:64036] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acqxbMRDKH225Jeq1jc7gwAAABY"]
[Tue Mar 31 01:22:53.473859 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:64081] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acqxbSobgVY20PMQKVtVMAAAAQg"]
[Tue Mar 31 01:22:53.948890 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:64043] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acqxbSobgVY20PMQKVtVMgAAAQY"]
[Tue Mar 31 01:22:54.418575 2026] [:error] [pid 39123:tid 39147] [client 20.111.17.29:63565] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acqxbiobgVY20PMQKVtVNgAAARY"]
[Tue Mar 31 01:22:54.890034 2026] [:error] [pid 39123:tid 39137] [client 20.111.17.29:63601] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acqxbiobgVY20PMQKVtVOwAAAQw"]
[Tue Mar 31 01:22:55.363147 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:62317] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acqxbyobgVY20PMQKVtVPgAAAQc"]
[Tue Mar 31 01:22:55.845818 2026] [:error] [pid 36672:tid 36819] [client 20.111.17.29:62822] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "acqxb7KHDzEfeL3XiLo-AwAAAEw"]
[Tue Mar 31 01:22:56.323782 2026] [:error] [pid 36672:tid 36813] [client 20.111.17.29:64107] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acqxcLKHDzEfeL3XiLo-BgAAAEY"]
[Tue Mar 31 01:22:56.796374 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:64052] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acqxcMRDKH225Jeq1jc7jQAAABM"]
[Tue Mar 31 01:22:57.265875 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:64842] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acqxcSobgVY20PMQKVtVQAAAAQg"]
[Tue Mar 31 01:22:57.744130 2026] [:error] [pid 36688:tid 36839] [client 20.111.17.29:63538] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "acqxcZIe8NBGKiiCIcIKNAAAAIQ"]
[Tue Mar 31 01:22:58.216628 2026] [:error] [pid 36939:tid 36953] [client 20.111.17.29:63502] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acqxcsRDKH225Jeq1jc7kgAAAAw"]
[Tue Mar 31 01:22:58.694859 2026] [:error] [pid 36939:tid 36946] [client 20.111.17.29:64781] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acqxcsRDKH225Jeq1jc7lgAAAAU"]
[Tue Mar 31 01:22:59.214069 2026] [:error] [pid 36939:tid 36962] [client 20.111.17.29:64068] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acqxc8RDKH225Jeq1jc7nAAAABU"]
[Tue Mar 31 01:22:59.691533 2026] [:error] [pid 39123:tid 39137] [client 20.111.17.29:64069] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yanz.php"] [unique_id "acqxcyobgVY20PMQKVtVRgAAAQw"]
[Tue Mar 31 01:23:00.166948 2026] [:error] [pid 39123:tid 39139] [client 20.111.17.29:62218] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqxdCobgVY20PMQKVtVSgAAAQ4"]
[Tue Mar 31 01:23:00.650756 2026] [:error] [pid 36672:tid 36809] [client 20.111.17.29:62741] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqxdLKHDzEfeL3XiLo-DwAAAEI"]
[Tue Mar 31 01:23:01.127950 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:63557] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqxdSobgVY20PMQKVtVUAAAARU"]
[Tue Mar 31 01:23:01.599804 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:63611] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acqxdSobgVY20PMQKVtVUwAAARQ"]
[Tue Mar 31 01:23:02.090578 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Tue Mar 31 01:23:02.329578 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/ut.php
[Tue Mar 31 01:23:02.567843 2026] [:error] [pid 39123:tid 39134] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Tue Mar 31 01:23:02.815498 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Tue Mar 31 01:23:03.070762 2026] [:error] [pid 39123:tid 39144] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Tue Mar 31 01:23:03.313098 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/zde.php
[Tue Mar 31 01:23:03.558777 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Tue Mar 31 01:23:03.797213 2026] [:error] [pid 39123:tid 39135] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/aj.php
[Tue Mar 31 01:23:04.036081 2026] [:error] [pid 39123:tid 39149] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Tue Mar 31 01:23:04.274631 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Tue Mar 31 01:23:04.513495 2026] [:error] [pid 39123:tid 39144] [client 20.111.17.29:62826] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Tue Mar 31 01:23:04.749197 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:62826] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acqxeCobgVY20PMQKVtVcwAAAQ0"]
[Tue Mar 31 01:23:05.233491 2026] [:error] [pid 39123:tid 39129] [client 20.111.17.29:64087] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acqxeSobgVY20PMQKVtVdAAAAQQ"]
[Tue Mar 31 01:23:05.711244 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:64028] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acqxeSobgVY20PMQKVtVdwAAARU"]
[Tue Mar 31 01:23:06.191264 2026] [:error] [pid 39123:tid 39144] [client 20.111.17.29:64065] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gorila.php"] [unique_id "acqxeiobgVY20PMQKVtVfQAAARM"]
[Tue Mar 31 01:23:06.663993 2026] [:error] [pid 36688:tid 36841] [client 20.111.17.29:64799] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqxepIe8NBGKiiCIcIKQAAAAIY"]
[Tue Mar 31 01:23:07.139792 2026] [:error] [pid 36939:tid 36964] [client 20.111.17.29:64011] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqxe8RDKH225Jeq1jc7oAAAABc"]
[Tue Mar 31 01:23:07.659403 2026] [:error] [pid 36688:tid 36840] [client 20.111.17.29:62319] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqxe5Ie8NBGKiiCIcIKRAAAAIU"]
[Tue Mar 31 01:23:08.136453 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:63539] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acqxfCobgVY20PMQKVtVhwAAAQc"]
[Tue Mar 31 01:23:08.619686 2026] [:error] [pid 36688:tid 36850] [client 20.111.17.29:64016] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acqxfJIe8NBGKiiCIcIKRgAAAI8"]
[Tue Mar 31 01:23:09.091756 2026] [:error] [pid 36706:tid 36886] [client 20.111.17.29:62792] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acqxfba-eBLL1E34-UXuMQAAANg"]
[Tue Mar 31 01:23:09.569986 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:63595] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acqxfba-eBLL1E34-UXuMwAAAMk"]
[Tue Mar 31 01:23:10.050616 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:63500] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/main.php"] [unique_id "acqxfiobgVY20PMQKVtVjgAAAQg"]
[Tue Mar 31 01:23:10.531962 2026] [:error] [pid 36688:tid 36846] [client 20.111.17.29:64889] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acqxfpIe8NBGKiiCIcIKSgAAAIs"]
[Tue Mar 31 01:23:11.009722 2026] [:error] [pid 36706:tid 36874] [client 20.111.17.29:64013] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acqxf7a-eBLL1E34-UXuNQAAAMw"]
[Tue Mar 31 01:23:11.484587 2026] [:error] [pid 39123:tid 39129] [client 20.111.17.29:64789] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acqxfyobgVY20PMQKVtVkgAAAQQ"]
[Tue Mar 31 01:23:11.963369 2026] [:error] [pid 36688:tid 36844] [client 20.111.17.29:63586] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "acqxf5Ie8NBGKiiCIcIKTwAAAIk"]
[Tue Mar 31 01:23:12.440354 2026] [:error] [pid 36688:tid 36851] [client 20.111.17.29:64829] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "acqxgJIe8NBGKiiCIcIKUAAAAJA"]
[Tue Mar 31 01:23:12.919433 2026] [:error] [pid 36688:tid 36839] [client 20.111.17.29:63585] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "acqxgJIe8NBGKiiCIcIKUgAAAIQ"]
[Tue Mar 31 01:23:13.395745 2026] [:error] [pid 36688:tid 36854] [client 20.111.17.29:64883] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "acqxgZIe8NBGKiiCIcIKVgAAAJM"]
[Tue Mar 31 01:23:13.886597 2026] [:error] [pid 36688:tid 36846] [client 20.111.17.29:62314] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f.php"] [unique_id "acqxgZIe8NBGKiiCIcIKWgAAAIs"]
[Tue Mar 31 01:23:14.362618 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:64070] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acqxgsRDKH225Jeq1jc7pQAAAAc"]
[Tue Mar 31 01:23:14.839809 2026] [:error] [pid 36939:tid 36944] [client 20.111.17.29:62808] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acqxgsRDKH225Jeq1jc7qQAAAAM"]
[Tue Mar 31 01:23:15.311042 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:62729] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acqxgyobgVY20PMQKVtVnwAAARI"]
[Tue Mar 31 01:23:15.795773 2026] [:error] [pid 36939:tid 36942] [client 20.111.17.29:62733] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "acqxg8RDKH225Jeq1jc7rQAAAAE"]
[Tue Mar 31 01:23:16.277669 2026] [:error] [pid 36939:tid 36957] [client 20.111.17.29:63576] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqxhMRDKH225Jeq1jc7rwAAABA"]
[Tue Mar 31 01:23:16.750847 2026] [:error] [pid 36688:tid 36839] [client 20.111.17.29:62824] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqxhJIe8NBGKiiCIcIKXQAAAIQ"]
[Tue Mar 31 01:23:17.225943 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:64058] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqxhSobgVY20PMQKVtVowAAAQM"]
[Tue Mar 31 01:23:17.701108 2026] [:error] [pid 36672:tid 36819] [client 20.111.17.29:62804] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acqxhbKHDzEfeL3XiLo-GQAAAEw"]
[Tue Mar 31 01:23:18.184203 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:62731] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxhiobgVY20PMQKVtVqQAAARI"]
[Tue Mar 31 01:23:18.655313 2026] [:error] [pid 36672:tid 36813] [client 20.111.17.29:62750] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxhrKHDzEfeL3XiLo-HAAAAEY"]
[Tue Mar 31 01:23:19.128541 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:64828] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxh7a-eBLL1E34-UXuQwAAANU"]
[Tue Mar 31 01:23:19.599542 2026] [:error] [pid 36706:tid 36862] [client 20.111.17.29:64884] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxh7a-eBLL1E34-UXuRQAAAMA"]
[Tue Mar 31 01:23:20.074701 2026] [:error] [pid 36939:tid 36950] [client 20.111.17.29:63514] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxiMRDKH225Jeq1jc7wAAAAAk"]
[Tue Mar 31 01:23:20.547355 2026] [:error] [pid 36688:tid 36839] [client 20.111.17.29:62329] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxiJIe8NBGKiiCIcIKZgAAAIQ"]
[Tue Mar 31 01:23:21.022568 2026] [:error] [pid 36688:tid 36837] [client 20.111.17.29:63584] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxiZIe8NBGKiiCIcIKaAAAAII"]
[Tue Mar 31 01:23:21.498897 2026] [:error] [pid 36672:tid 36829] [client 20.111.17.29:62239] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "acqxibKHDzEfeL3XiLo-JAAAAFY"]
[Tue Mar 31 01:23:21.976595 2026] [:error] [pid 36688:tid 36841] [client 20.111.17.29:62803] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqxiZIe8NBGKiiCIcIKbgAAAIY"]
[Tue Mar 31 01:23:22.451001 2026] [:error] [pid 36688:tid 36851] [client 20.111.17.29:64795] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqxipIe8NBGKiiCIcIKcgAAAJA"]
[Tue Mar 31 01:23:22.928269 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:63528] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqxira-eBLL1E34-UXuSgAAAMk"]
[Tue Mar 31 01:23:23.421662 2026] [:error] [pid 36688:tid 36844] [client 20.111.17.29:64061] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "acqxi5Ie8NBGKiiCIcIKeQAAAIk"]
[Tue Mar 31 01:23:23.892658 2026] [:error] [pid 39123:tid 39147] [client 20.111.17.29:63573] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acqxiyobgVY20PMQKVtVsQAAARY"]
[Tue Mar 31 01:23:24.372799 2026] [:error] [pid 36706:tid 36869] [client 20.111.17.29:64835] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acqxjLa-eBLL1E34-UXuUQAAAMc"]
[Tue Mar 31 01:23:24.862901 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:62762] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acqxjCobgVY20PMQKVtVtgAAAQY"]
[Tue Mar 31 01:23:25.334680 2026] [:error] [pid 39123:tid 39139] [client 20.111.17.29:62784] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "acqxjSobgVY20PMQKVtVugAAAQ4"]
[Tue Mar 31 01:23:25.813852 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:63510] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acqxjSobgVY20PMQKVtVvgAAAQs"]
[Tue Mar 31 01:23:26.299454 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:64836] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acqxjiobgVY20PMQKVtVxAAAAQU"]
[Tue Mar 31 01:23:26.773567 2026] [:error] [pid 36688:tid 36854] [client 20.111.17.29:62798] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acqxjpIe8NBGKiiCIcIKfgAAAJM"]
[Tue Mar 31 01:23:27.268204 2026] [:error] [pid 36688:tid 36858] [client 20.111.17.29:64841] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mt.php"] [unique_id "acqxj5Ie8NBGKiiCIcIKgQAAAJc"]
[Tue Mar 31 01:23:27.750048 2026] [:error] [pid 36706:tid 36880] [client 20.111.17.29:62825] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acqxj7a-eBLL1E34-UXuWQAAANI"]
[Tue Mar 31 01:23:28.231732 2026] [:error] [pid 36688:tid 36847] [client 20.111.17.29:62242] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acqxkJIe8NBGKiiCIcIKhwAAAIw"]
[Tue Mar 31 01:23:28.706655 2026] [:error] [pid 36706:tid 36864] [client 20.111.17.29:64063] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acqxkLa-eBLL1E34-UXuXQAAAMI"]
[Tue Mar 31 01:23:29.180361 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:62751] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "acqxkba-eBLL1E34-UXuYAAAANU"]
[Tue Mar 31 01:23:29.661187 2026] [:error] [pid 36672:tid 36814] [client 20.111.17.29:64059] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acqxkbKHDzEfeL3XiLo-MQAAAEc"]
[Tue Mar 31 01:23:30.137071 2026] [:error] [pid 36688:tid 36835] [client 20.111.17.29:63513] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acqxkpIe8NBGKiiCIcIKkQAAAIA"]
[Tue Mar 31 01:23:30.610105 2026] [:error] [pid 36672:tid 36816] [client 20.111.17.29:63564] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acqxkrKHDzEfeL3XiLo-MwAAAEk"]
[Tue Mar 31 01:23:31.094122 2026] [:error] [pid 36688:tid 36843] [client 20.111.17.29:64788] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zews.php"] [unique_id "acqxk5Ie8NBGKiiCIcIKkwAAAIg"]
[Tue Mar 31 01:23:31.567357 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:64110] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acqxkyobgVY20PMQKVtVygAAAQs"]
[Tue Mar 31 01:23:32.038943 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:63580] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acqxlCobgVY20PMQKVtVzAAAARc"]
[Tue Mar 31 01:23:32.512109 2026] [:error] [pid 36688:tid 36836] [client 20.111.17.29:64885] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acqxlJIe8NBGKiiCIcIKmAAAAIE"]
[Tue Mar 31 01:23:32.984163 2026] [:error] [pid 36672:tid 36815] [client 20.111.17.29:62847] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "acqxlLKHDzEfeL3XiLo-NwAAAEg"]
[Tue Mar 31 01:23:33.464557 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:64814] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acqxlSobgVY20PMQKVtV1AAAAQM"]
[Tue Mar 31 01:23:33.934563 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:63549] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acqxlSobgVY20PMQKVtV2AAAARc"]
[Tue Mar 31 01:23:34.410566 2026] [:error] [pid 36706:tid 36862] [client 20.111.17.29:64076] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acqxlra-eBLL1E34-UXucQAAAMA"]
[Tue Mar 31 01:23:34.886906 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:64091] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "acqxlsRDKH225Jeq1jc7xwAAAA8"]
[Tue Mar 31 01:23:35.356854 2026] [:error] [pid 39123:tid 39135] [client 20.111.17.29:63615] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acqxlyobgVY20PMQKVtV5AAAAQo"]
[Tue Mar 31 01:23:35.834466 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:63612] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acqxlyobgVY20PMQKVtV5QAAARE"]
[Tue Mar 31 01:23:36.316752 2026] [:error] [pid 36688:tid 36835] [client 20.111.17.29:62760] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acqxmJIe8NBGKiiCIcIKnQAAAIA"]
[Tue Mar 31 01:23:36.794118 2026] [:error] [pid 39123:tid 39126] [client 20.111.17.29:64020] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "acqxmCobgVY20PMQKVtV5wAAAQE"]
[Tue Mar 31 01:23:37.267828 2026] [:error] [pid 36688:tid 36845] [client 20.111.17.29:64856] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "acqxmZIe8NBGKiiCIcIKngAAAIo"]
[Tue Mar 31 01:23:37.737323 2026] [:error] [pid 36706:tid 36862] [client 20.111.17.29:62283] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "acqxmba-eBLL1E34-UXueQAAAMA"]
[Tue Mar 31 01:23:38.218387 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:63529] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "acqxmiobgVY20PMQKVtV7AAAAQs"]
[Tue Mar 31 01:23:38.693775 2026] [:error] [pid 36706:tid 36884] [client 20.111.17.29:64119] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "acqxmra-eBLL1E34-UXufAAAANY"]
[Tue Mar 31 01:23:39.167314 2026] [:error] [pid 36688:tid 36838] [client 20.111.17.29:63494] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acqxm5Ie8NBGKiiCIcIKowAAAIM"]
[Tue Mar 31 01:23:39.651405 2026] [:error] [pid 36706:tid 36865] [client 20.111.17.29:63551] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acqxm7a-eBLL1E34-UXufgAAAMM"]
[Tue Mar 31 01:23:40.133761 2026] [:error] [pid 36706:tid 36878] [client 20.111.17.29:62846] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acqxnLa-eBLL1E34-UXufwAAANA"]
[Tue Mar 31 01:23:40.604182 2026] [:error] [pid 36706:tid 36880] [client 20.111.17.29:63542] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "acqxnLa-eBLL1E34-UXugQAAANI"]
[Tue Mar 31 01:23:41.094746 2026] [:error] [pid 36672:tid 36822] [client 20.111.17.29:64104] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acqxnbKHDzEfeL3XiLo-PQAAAE8"]
[Tue Mar 31 01:23:41.567816 2026] [:error] [pid 36672:tid 36826] [client 20.111.17.29:62732] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acqxnbKHDzEfeL3XiLo-PwAAAFM"]
[Tue Mar 31 01:23:42.043973 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:62823] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acqxnra-eBLL1E34-UXuhwAAAMY"]
[Tue Mar 31 01:23:42.531401 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:64802] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "acqxniobgVY20PMQKVtV9AAAARQ"]
[Tue Mar 31 01:23:43.012978 2026] [:error] [pid 39123:tid 39135] [client 20.111.17.29:63560] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acqxnyobgVY20PMQKVtV9gAAAQo"]
[Tue Mar 31 01:23:43.491623 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:59073] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acqxnyobgVY20PMQKVtV-wAAAQ8"]
[Tue Mar 31 01:23:43.969268 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:63488] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acqxnyobgVY20PMQKVtV_wAAAQU"]
[Tue Mar 31 01:23:44.439116 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:63598] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mn.php"] [unique_id "acqxoCobgVY20PMQKVtWAgAAARI"]
[Tue Mar 31 01:23:44.910050 2026] [:error] [pid 39123:tid 39126] [client 20.111.17.29:62744] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "acqxoCobgVY20PMQKVtWBgAAAQE"]
[Tue Mar 31 01:23:45.387007 2026] [:error] [pid 39123:tid 39129] [client 20.111.17.29:63531] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "acqxoSobgVY20PMQKVtWCgAAAQQ"]
[Tue Mar 31 01:23:45.865078 2026] [:error] [pid 39123:tid 39149] [client 20.111.17.29:64800] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "acqxoSobgVY20PMQKVtWEQAAARg"]
[Tue Mar 31 01:23:46.343290 2026] [:error] [pid 36688:tid 36842] [client 20.111.17.29:62326] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "acqxopIe8NBGKiiCIcIKqgAAAIc"]
[Tue Mar 31 01:23:46.831526 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:63522] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "acqxoiobgVY20PMQKVtWFgAAARU"]
[Tue Mar 31 01:23:47.307029 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:64049] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "acqxoyobgVY20PMQKVtWFwAAAQU"]
[Tue Mar 31 01:23:47.788554 2026] [:error] [pid 36672:tid 36820] [client 20.111.17.29:62802] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "acqxo7KHDzEfeL3XiLo-QwAAAE0"]
[Tue Mar 31 01:23:48.266998 2026] [:error] [pid 36688:tid 36856] [client 20.111.17.29:63591] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "acqxpJIe8NBGKiiCIcIKrAAAAJU"]
[Tue Mar 31 01:23:48.741442 2026] [:error] [pid 36688:tid 36847] [client 20.111.17.29:62821] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqxpJIe8NBGKiiCIcIKrgAAAIw"]
[Tue Mar 31 01:23:49.225792 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:62213] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqxpcRDKH225Jeq1jc73AAAAA8"]
[Tue Mar 31 01:23:49.704526 2026] [:error] [pid 36688:tid 36854] [client 20.111.17.29:62208] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqxpZIe8NBGKiiCIcIKsgAAAJM"]
[Tue Mar 31 01:23:50.194685 2026] [:error] [pid 39123:tid 39147] [client 20.111.17.29:62225] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acqxpiobgVY20PMQKVtWIAAAARY"]
[Tue Mar 31 01:23:50.672814 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:63516] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acqxpiobgVY20PMQKVtWJAAAAQ0"]
[Tue Mar 31 01:23:51.152646 2026] [:error] [pid 36688:tid 36852] [client 20.111.17.29:64869] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acqxp5Ie8NBGKiiCIcIKswAAAJE"]
[Tue Mar 31 01:23:51.624389 2026] [:error] [pid 36688:tid 36857] [client 20.111.17.29:63511] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acqxp5Ie8NBGKiiCIcIKtAAAAJY"]
[Tue Mar 31 01:23:52.094632 2026] [:error] [pid 36672:tid 36821] [client 20.111.17.29:63520] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "acqxqLKHDzEfeL3XiLo-SwAAAE4"]
[Tue Mar 31 01:23:52.570296 2026] [:error] [pid 36939:tid 36942] [client 20.111.17.29:62778] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acqxqMRDKH225Jeq1jc74AAAAAE"]
[Tue Mar 31 01:23:53.057333 2026] [:error] [pid 36939:tid 36962] [client 20.111.17.29:63511] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acqxqcRDKH225Jeq1jc74gAAABU"]
[Tue Mar 31 01:23:53.527508 2026] [:error] [pid 36706:tid 36886] [client 20.111.17.29:64094] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acqxqba-eBLL1E34-UXulwAAANg"]
[Tue Mar 31 01:23:53.999469 2026] [:error] [pid 36706:tid 36867] [client 20.111.17.29:62831] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelay.php"] [unique_id "acqxqba-eBLL1E34-UXumgAAAMU"]
[Tue Mar 31 01:23:54.470607 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:63527] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acqxqra-eBLL1E34-UXunQAAAMk"]
[Tue Mar 31 01:23:54.943615 2026] [:error] [pid 36688:tid 36842] [client 20.111.17.29:64126] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acqxqpIe8NBGKiiCIcIKuQAAAIc"]
[Tue Mar 31 01:23:55.420891 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:64003] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acqxqyobgVY20PMQKVtWMwAAAQY"]
[Tue Mar 31 01:23:55.895389 2026] [:error] [pid 36688:tid 36846] [client 20.111.17.29:62777] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "acqxq5Ie8NBGKiiCIcIKvgAAAIs"]
[Tue Mar 31 01:23:56.368864 2026] [:error] [pid 36706:tid 36879] [client 20.111.17.29:63609] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acqxrLa-eBLL1E34-UXuoAAAANE"]
[Tue Mar 31 01:23:56.842952 2026] [:error] [pid 39123:tid 39144] [client 20.111.17.29:62310] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acqxrCobgVY20PMQKVtWOQAAARM"]
[Tue Mar 31 01:23:57.320987 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:62745] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acqxrSobgVY20PMQKVtWPQAAAQs"]
[Tue Mar 31 01:23:57.804556 2026] [:error] [pid 36706:tid 36886] [client 20.111.17.29:63544] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "acqxrba-eBLL1E34-UXupgAAANg"]
[Tue Mar 31 01:23:58.295117 2026] [:error] [pid 36688:tid 36857] [client 20.111.17.29:62295] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acqxrpIe8NBGKiiCIcIKwAAAAJY"]
[Tue Mar 31 01:23:58.773457 2026] [:error] [pid 39123:tid 39135] [client 20.111.17.29:63497] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acqxriobgVY20PMQKVtWRQAAAQo"]
[Tue Mar 31 01:23:59.252201 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:62247] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acqxryobgVY20PMQKVtWSgAAARA"]
[Tue Mar 31 01:23:59.724956 2026] [:error] [pid 36688:tid 36850] [client 20.111.17.29:63561] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acqxr5Ie8NBGKiiCIcIKwwAAAI8"]
[Tue Mar 31 01:24:00.208916 2026] [:error] [pid 36939:tid 36950] [client 20.111.17.29:62794] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqxsMRDKH225Jeq1jc77wAAAAk"]
[Tue Mar 31 01:24:00.693174 2026] [:error] [pid 36939:tid 36943] [client 20.111.17.29:64108] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqxsMRDKH225Jeq1jc78QAAAAI"]
[Tue Mar 31 01:24:01.164191 2026] [:error] [pid 36672:tid 36816] [client 20.111.17.29:64000] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqxsbKHDzEfeL3XiLo-VwAAAEk"]
[Tue Mar 31 01:24:01.639969 2026] [:error] [pid 36672:tid 36831] [client 20.111.17.29:62720] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsvvs.php"] [unique_id "acqxsbKHDzEfeL3XiLo-WQAAAFg"]
[Tue Mar 31 01:24:02.120768 2026] [:error] [pid 36706:tid 36872] [client 20.111.17.29:63608] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acqxsra-eBLL1E34-UXurwAAAMo"]
[Tue Mar 31 01:24:02.594761 2026] [:error] [pid 36672:tid 36808] [client 20.111.17.29:63607] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acqxsrKHDzEfeL3XiLo-XgAAAEE"]
[Tue Mar 31 01:24:03.071608 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:62775] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acqxs7a-eBLL1E34-UXusgAAANM"]
[Tue Mar 31 01:24:03.547977 2026] [:error] [pid 36688:tid 36837] [client 20.111.17.29:63588] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbbn.php"] [unique_id "acqxs5Ie8NBGKiiCIcIKzQAAAII"]
[Tue Mar 31 01:24:04.029271 2026] [:error] [pid 36939:tid 36965] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/shoyo.php
[Tue Mar 31 01:24:04.272279 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Mar 31 01:24:04.514275 2026] [:error] [pid 36939:tid 36947] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/waq.php
[Tue Mar 31 01:24:04.753512 2026] [:error] [pid 36939:tid 36949] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/wakak.php
[Tue Mar 31 01:24:04.992349 2026] [:error] [pid 36939:tid 36957] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/bipas.php
[Tue Mar 31 01:24:05.266052 2026] [:error] [pid 36939:tid 36954] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/conte.php
[Tue Mar 31 01:24:05.505802 2026] [:error] [pid 36939:tid 36941] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/class3.php
[Tue Mar 31 01:24:05.744078 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/blurbs18.php
[Tue Mar 31 01:24:05.982996 2026] [:error] [pid 36939:tid 36958] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/claa.php
[Tue Mar 31 01:24:06.223466 2026] [:error] [pid 36939:tid 36954] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Tue Mar 31 01:24:06.462017 2026] [:error] [pid 36939:tid 36961] [client 20.111.17.29:64056] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Mar 31 01:24:06.697579 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:64056] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "acqxtsRDKH225Jeq1jc8EwAAAAc"]
[Tue Mar 31 01:24:07.177699 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:64123] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "acqxt8RDKH225Jeq1jc8GAAAABM"]
[Tue Mar 31 01:24:07.660903 2026] [:error] [pid 36939:tid 36955] [client 20.111.17.29:63555] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "acqxt8RDKH225Jeq1jc8GgAAAA4"]
[Tue Mar 31 01:24:08.142175 2026] [:error] [pid 36688:tid 36857] [client 20.111.17.29:62774] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wa.php"] [unique_id "acqxuJIe8NBGKiiCIcIK1wAAAJY"]
[Tue Mar 31 01:24:08.631169 2026] [:error] [pid 36688:tid 36844] [client 20.111.17.29:63596] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acqxuJIe8NBGKiiCIcIK2wAAAIk"]
[Tue Mar 31 01:24:09.105613 2026] [:error] [pid 36706:tid 36879] [client 20.111.17.29:62789] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acqxuba-eBLL1E34-UXuyQAAANE"]
[Tue Mar 31 01:24:09.581918 2026] [:error] [pid 36706:tid 36880] [client 20.111.17.29:62320] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acqxuba-eBLL1E34-UXuzAAAANI"]
[Tue Mar 31 01:24:10.054013 2026] [:error] [pid 36706:tid 36863] [client 20.111.17.29:64773] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "acqxura-eBLL1E34-UXuzwAAAME"]
[Tue Mar 31 01:24:10.532130 2026] [:error] [pid 36672:tid 36830] [client 20.111.17.29:62836] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acqxurKHDzEfeL3XiLo-bQAAAFc"]
[Tue Mar 31 01:24:11.003699 2026] [:error] [pid 36688:tid 36844] [client 20.111.17.29:64772] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acqxu5Ie8NBGKiiCIcIK6gAAAIk"]
[Tue Mar 31 01:24:11.524423 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:64861] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acqxu7a-eBLL1E34-UXu2AAAAMk"]
[Tue Mar 31 01:24:12.001565 2026] [:error] [pid 36688:tid 36855] [client 20.111.17.29:63568] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "acqxvJIe8NBGKiiCIcIK8AAAAJQ"]
[Tue Mar 31 01:24:12.474605 2026] [:error] [pid 36688:tid 36858] [client 20.111.17.29:62845] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acqxvJIe8NBGKiiCIcIK9AAAAJc"]
[Tue Mar 31 01:24:12.949640 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:64031] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acqxvCobgVY20PMQKVtWWgAAAQs"]
[Tue Mar 31 01:24:13.423790 2026] [:error] [pid 36706:tid 36885] [client 20.111.17.29:62756] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acqxvba-eBLL1E34-UXu3wAAANc"]
[Tue Mar 31 01:24:13.901697 2026] [:error] [pid 36706:tid 36874] [client 20.111.17.29:64798] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "acqxvba-eBLL1E34-UXu4gAAAMw"]
[Tue Mar 31 01:24:14.383501 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:63536] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "acqxvsRDKH225Jeq1jc8LQAAABM"]
[Tue Mar 31 01:24:14.861829 2026] [:error] [pid 36706:tid 36882] [client 20.111.17.29:62843] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "acqxvra-eBLL1E34-UXu6wAAANQ"]
[Tue Mar 31 01:24:15.345640 2026] [:error] [pid 39123:tid 39135] [client 20.111.17.29:62249] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "acqxvyobgVY20PMQKVtWZgAAAQo"]
[Tue Mar 31 01:24:15.827492 2026] [:error] [pid 36706:tid 36880] [client 20.111.17.29:62840] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "acqxv7a-eBLL1E34-UXu7AAAANI"]
[Tue Mar 31 01:24:16.297057 2026] [:error] [pid 39123:tid 39126] [client 20.111.17.29:63575] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "acqxwCobgVY20PMQKVtWbwAAAQE"]
[Tue Mar 31 01:24:16.767953 2026] [:error] [pid 36939:tid 36958] [client 20.111.17.29:63524] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "acqxwMRDKH225Jeq1jc8NAAAABE"]
[Tue Mar 31 01:24:17.240336 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:63574] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "acqxwba-eBLL1E34-UXu7gAAANM"]
[Tue Mar 31 01:24:17.713361 2026] [:error] [pid 36706:tid 36877] [client 20.111.17.29:62736] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "acqxwba-eBLL1E34-UXu8AAAAM8"]
[Tue Mar 31 01:24:18.197687 2026] [:error] [pid 39123:tid 39127] [client 20.111.17.29:64096] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acqxwiobgVY20PMQKVtWdgAAAQI"]
[Tue Mar 31 01:24:18.669587 2026] [:error] [pid 36939:tid 36951] [client 20.111.17.29:63505] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acqxwsRDKH225Jeq1jc8QwAAAAo"]
[Tue Mar 31 01:24:19.163964 2026] [:error] [pid 36939:tid 36955] [client 20.111.17.29:62228] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acqxw8RDKH225Jeq1jc8RwAAAA4"]
[Tue Mar 31 01:24:19.636627 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:62263] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "acqxwyobgVY20PMQKVtWeAAAARQ"]
[Tue Mar 31 01:24:20.119834 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:62300] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acqxxCobgVY20PMQKVtWfQAAAQc"]
[Tue Mar 31 01:24:20.594350 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:64821] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acqxxCobgVY20PMQKVtWfwAAAQY"]
[Tue Mar 31 01:24:21.073034 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:62328] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acqxxSobgVY20PMQKVtWigAAARQ"]
[Tue Mar 31 01:24:21.544630 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:62282] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "acqxxSobgVY20PMQKVtWjwAAARE"]
[Tue Mar 31 01:24:22.041819 2026] [:error] [pid 39123:tid 39134] [client 20.111.17.29:62812] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acqxxiobgVY20PMQKVtWmAAAAQk"]
[Tue Mar 31 01:24:22.519997 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:63525] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acqxxiobgVY20PMQKVtWnAAAARQ"]
[Tue Mar 31 01:24:22.997312 2026] [:error] [pid 39123:tid 39147] [client 20.111.17.29:62297] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acqxxiobgVY20PMQKVtWogAAARY"]
[Tue Mar 31 01:24:23.471880 2026] [:error] [pid 36939:tid 36962] [client 20.111.17.29:62815] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lopst.php"] [unique_id "acqxx8RDKH225Jeq1jc8XgAAABU"]
[Tue Mar 31 01:24:23.954252 2026] [:error] [pid 36706:tid 36869] [client 20.111.17.29:62273] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acqxx7a-eBLL1E34-UXu_gAAAMc"]
[Tue Mar 31 01:24:24.444420 2026] [:error] [pid 39123:tid 39136] [client 20.111.17.29:64811] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acqxyCobgVY20PMQKVtWqgAAAQs"]
[Tue Mar 31 01:24:24.918726 2026] [:error] [pid 36672:tid 36810] [client 20.111.17.29:62727] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acqxyLKHDzEfeL3XiLo-ggAAAEM"]
[Tue Mar 31 01:24:25.394495 2026] [:error] [pid 36688:tid 36855] [client 20.111.17.29:62275] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wft.php"] [unique_id "acqxyZIe8NBGKiiCIcILAwAAAJQ"]
[Tue Mar 31 01:24:25.878921 2026] [:error] [pid 36688:tid 36842] [client 20.111.17.29:62742] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acqxyZIe8NBGKiiCIcILBgAAAIc"]
[Tue Mar 31 01:24:26.365055 2026] [:error] [pid 36688:tid 36853] [client 20.111.17.29:62786] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acqxypIe8NBGKiiCIcILCQAAAJI"]
[Tue Mar 31 01:24:26.836811 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:64062] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acqxyiobgVY20PMQKVtWtAAAARc"]
[Tue Mar 31 01:24:27.323539 2026] [:error] [pid 36672:tid 36817] [client 20.111.17.29:63613] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "acqxy7KHDzEfeL3XiLo-hAAAAEo"]
[Tue Mar 31 01:24:27.795830 2026] [:error] [pid 36672:tid 36818] [client 20.111.17.29:63614] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acqxy7KHDzEfeL3XiLo-hgAAAEs"]
[Tue Mar 31 01:24:28.267356 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:63577] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acqxzLa-eBLL1E34-UXvAAAAANM"]
[Tue Mar 31 01:24:28.738011 2026] [:error] [pid 36939:tid 36965] [client 20.111.17.29:62722] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acqxzMRDKH225Jeq1jc8egAAABg"]
[Tue Mar 31 01:24:29.208496 2026] [:error] [pid 36688:tid 36855] [client 20.111.17.29:59009] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "acqxzZIe8NBGKiiCIcILEgAAAJQ"]
[Tue Mar 31 01:24:29.680772 2026] [:error] [pid 36939:tid 36946] [client 20.111.17.29:62755] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acqxzcRDKH225Jeq1jc8gwAAAAU"]
[Tue Mar 31 01:24:30.157709 2026] [:error] [pid 36688:tid 36841] [client 20.111.17.29:62308] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acqxzpIe8NBGKiiCIcILFAAAAIY"]
[Tue Mar 31 01:24:30.637675 2026] [:error] [pid 36672:tid 36815] [client 20.111.17.29:63571] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acqxzrKHDzEfeL3XiLo-jAAAAEg"]
[Tue Mar 31 01:24:31.115413 2026] [:error] [pid 36672:tid 36808] [client 20.111.17.29:62722] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "acqxz7KHDzEfeL3XiLo-jQAAAEE"]
[Tue Mar 31 01:24:31.591487 2026] [:error] [pid 36688:tid 36847] [client 20.111.17.29:63492] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acqxz5Ie8NBGKiiCIcILHQAAAIw"]
[Tue Mar 31 01:24:32.073688 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:62787] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acqx0CobgVY20PMQKVtWvQAAARU"]
[Tue Mar 31 01:24:32.564662 2026] [:error] [pid 36939:tid 36941] [client 20.111.17.29:63593] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acqx0MRDKH225Jeq1jc8kQAAAAA"]
[Tue Mar 31 01:24:33.039037 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:62291] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "acqx0cRDKH225Jeq1jc8lAAAABM"]
[Tue Mar 31 01:24:33.534945 2026] [:error] [pid 36939:tid 36944] [client 20.111.17.29:62807] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acqx0cRDKH225Jeq1jc8nAAAAAM"]
[Tue Mar 31 01:24:34.014211 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:62223] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acqx0ra-eBLL1E34-UXvDQAAANM"]
[Tue Mar 31 01:24:34.490706 2026] [:error] [pid 36939:tid 36961] [client 20.111.17.29:62748] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acqx0sRDKH225Jeq1jc8pAAAABQ"]
[Tue Mar 31 01:24:34.973123 2026] [:error] [pid 36939:tid 36958] [client 20.111.17.29:58438] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "acqx0sRDKH225Jeq1jc8qAAAABE"]
[Tue Mar 31 01:24:35.448854 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:62316] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acqx0yobgVY20PMQKVtWzQAAAQU"]
[Tue Mar 31 01:24:35.932533 2026] [:error] [pid 39123:tid 39144] [client 20.111.17.29:62769] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acqx0yobgVY20PMQKVtWzgAAARM"]
[Tue Mar 31 01:24:36.435935 2026] [:error] [pid 39123:tid 39137] [client 20.111.17.29:64057] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acqx1CobgVY20PMQKVtW0gAAAQw"]
[Tue Mar 31 01:24:36.909980 2026] [:error] [pid 36672:tid 36807] [client 20.111.17.29:62279] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acqx1LKHDzEfeL3XiLo-kQAAAEA"]
[Tue Mar 31 01:24:37.387199 2026] [:error] [pid 36706:tid 36882] [client 20.111.17.29:62800] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acqx1ba-eBLL1E34-UXvEgAAANQ"]
[Tue Mar 31 01:24:37.863812 2026] [:error] [pid 36688:tid 36841] [client 20.111.17.29:59100] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acqx1ZIe8NBGKiiCIcILKgAAAIY"]
[Tue Mar 31 01:24:38.342548 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:62743] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acqx1iobgVY20PMQKVtW1wAAAQU"]
[Tue Mar 31 01:24:38.820994 2026] [:error] [pid 36939:tid 36943] [client 20.111.17.29:62842] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "acqx1sRDKH225Jeq1jc8wwAAAAI"]
[Tue Mar 31 01:24:39.294524 2026] [:error] [pid 36939:tid 36949] [client 20.111.17.29:62332] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acqx18RDKH225Jeq1jc8xAAAAAg"]
[Tue Mar 31 01:24:39.773389 2026] [:error] [pid 36706:tid 36867] [client 20.111.17.29:62801] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acqx17a-eBLL1E34-UXvFQAAAMU"]
[Tue Mar 31 01:24:40.244849 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:62256] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acqx2CobgVY20PMQKVtW4wAAAQg"]
[Tue Mar 31 01:24:40.753519 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:62817] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "acqx2CobgVY20PMQKVtW5QAAAQA"]
[Tue Mar 31 01:24:41.255975 2026] [:error] [pid 36939:tid 36947] [client 20.111.17.29:59024] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acqx2cRDKH225Jeq1jc8zwAAAAY"]
[Tue Mar 31 01:24:41.732906 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:63545] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acqx2SobgVY20PMQKVtW6wAAAQY"]
[Tue Mar 31 01:24:42.206258 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:62754] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acqx2iobgVY20PMQKVtW7wAAAQA"]
[Tue Mar 31 01:24:42.679770 2026] [:error] [pid 36706:tid 36865] [client 20.111.17.29:62734] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "acqx2ra-eBLL1E34-UXvGwAAAMM"]
[Tue Mar 31 01:24:43.161361 2026] [:error] [pid 36672:tid 36827] [client 20.111.17.29:64797] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acqx27KHDzEfeL3XiLo-lwAAAFQ"]
[Tue Mar 31 01:24:43.654642 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:62770] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acqx2yobgVY20PMQKVtW-AAAARQ"]
[Tue Mar 31 01:24:44.131383 2026] [:error] [pid 39123:tid 39126] [client 20.111.17.29:63501] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acqx3CobgVY20PMQKVtW-gAAAQE"]
[Tue Mar 31 01:24:44.609541 2026] [:error] [pid 36672:tid 36823] [client 20.111.17.29:59110] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "acqx3LKHDzEfeL3XiLo-nAAAAFA"]
[Tue Mar 31 01:24:45.085774 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:59089] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acqx3ba-eBLL1E34-UXvHgAAAMY"]
[Tue Mar 31 01:24:45.562491 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:63515] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acqx3SobgVY20PMQKVtXBgAAARA"]
[Tue Mar 31 01:24:46.038259 2026] [:error] [pid 36688:tid 36852] [client 20.111.17.29:62820] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acqx3pIe8NBGKiiCIcILLwAAAJE"]
[Tue Mar 31 01:24:46.509530 2026] [:error] [pid 36688:tid 36840] [client 20.111.17.29:62767] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "acqx3pIe8NBGKiiCIcILNAAAAIU"]
[Tue Mar 31 01:24:46.990733 2026] [:error] [pid 36688:tid 36859] [client 20.111.17.29:62267] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acqx3pIe8NBGKiiCIcILOgAAAJg"]
[Tue Mar 31 01:24:47.476225 2026] [:error] [pid 36706:tid 36866] [client 20.111.17.29:62831] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acqx37a-eBLL1E34-UXvIAAAAMQ"]
[Tue Mar 31 01:24:47.953469 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:64046] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acqx3yobgVY20PMQKVtXDgAAAQ8"]
[Tue Mar 31 01:24:48.437178 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:62236] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/read.php"] [unique_id "acqx4La-eBLL1E34-UXvIgAAAMk"]
[Tue Mar 31 01:24:48.916202 2026] [:error] [pid 36672:tid 36823] [client 20.111.17.29:62253] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqx4LKHDzEfeL3XiLo-qQAAAFA"]
[Tue Mar 31 01:24:49.387748 2026] [:error] [pid 36706:tid 36885] [client 20.111.17.29:64053] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqx4ba-eBLL1E34-UXvJAAAANc"]
[Tue Mar 31 01:24:49.859108 2026] [:error] [pid 36706:tid 36863] [client 20.111.17.29:62269] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqx4ba-eBLL1E34-UXvJgAAAME"]
[Tue Mar 31 01:24:50.341316 2026] [:error] [pid 36939:tid 36950] [client 20.111.17.29:63603] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "acqx4sRDKH225Jeq1jc85AAAAAk"]
[Tue Mar 31 01:24:50.849784 2026] [:error] [pid 36939:tid 36957] [client 20.111.17.29:62231] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqx4sRDKH225Jeq1jc85wAAABA"]
[Tue Mar 31 01:24:51.322683 2026] [:error] [pid 36672:tid 36828] [client 20.111.17.29:63610] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqx47KHDzEfeL3XiLo-swAAAFU"]
[Tue Mar 31 01:24:51.797858 2026] [:error] [pid 36706:tid 36873] [client 20.111.17.29:63566] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqx47a-eBLL1E34-UXvLQAAAMs"]
[Tue Mar 31 01:24:52.268562 2026] [:error] [pid 36672:tid 36822] [client 20.111.17.29:62723] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "acqx5LKHDzEfeL3XiLo-tQAAAE8"]
[Tue Mar 31 01:24:52.754062 2026] [:error] [pid 36688:tid 36846] [client 20.111.17.29:58372] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqx5JIe8NBGKiiCIcILVAAAAIs"]
[Tue Mar 31 01:24:53.235542 2026] [:error] [pid 36706:tid 36882] [client 20.111.17.29:62740] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqx5ba-eBLL1E34-UXvMgAAANQ"]
[Tue Mar 31 01:24:53.708602 2026] [:error] [pid 36939:tid 36951] [client 20.111.17.29:62768] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqx5cRDKH225Jeq1jc88AAAAAo"]
[Tue Mar 31 01:24:54.182901 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:62764] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "acqx5sRDKH225Jeq1jc88gAAABM"]
[Tue Mar 31 01:24:54.659270 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:62835] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acqx5iobgVY20PMQKVtXGAAAAQA"]
[Tue Mar 31 01:24:55.129683 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:62259] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acqx5yobgVY20PMQKVtXGgAAAQ0"]
[Tue Mar 31 01:24:55.602563 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:62240] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acqx5yobgVY20PMQKVtXHAAAAQ8"]
[Tue Mar 31 01:24:56.089677 2026] [:error] [pid 39123:tid 39147] [client 20.111.17.29:62211] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "acqx6CobgVY20PMQKVtXIAAAARY"]
[Tue Mar 31 01:24:56.563728 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:62738] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acqx6MRDKH225Jeq1jc89wAAAAc"]
[Tue Mar 31 01:24:57.057371 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:59099] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acqx6SobgVY20PMQKVtXJwAAAQM"]
[Tue Mar 31 01:24:57.544038 2026] [:error] [pid 36706:tid 36865] [client 20.111.17.29:62763] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acqx6ba-eBLL1E34-UXvOQAAAMM"]
[Tue Mar 31 01:24:58.043368 2026] [:error] [pid 36939:tid 36945] [client 20.111.17.29:63597] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "acqx6sRDKH225Jeq1jc8-gAAAAQ"]
[Tue Mar 31 01:24:58.517425 2026] [:error] [pid 39123:tid 39127] [client 20.111.17.29:62232] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acqx6iobgVY20PMQKVtXLgAAAQI"]
[Tue Mar 31 01:24:58.991903 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:64047] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acqx6iobgVY20PMQKVtXMwAAAQA"]
[Tue Mar 31 01:24:59.496908 2026] [:error] [pid 36672:tid 36809] [client 20.111.17.29:62227] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acqx67KHDzEfeL3XiLo-xAAAAEI"]
[Tue Mar 31 01:24:59.969020 2026] [:error] [pid 36688:tid 36853] [client 20.111.17.29:62324] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "acqx65Ie8NBGKiiCIcILcgAAAJI"]
[Tue Mar 31 01:25:00.456814 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:62783] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acqx7CobgVY20PMQKVtXPgAAAQ0"]
[Tue Mar 31 01:25:00.932941 2026] [:error] [pid 36706:tid 36878] [client 20.111.17.29:62303] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acqx7La-eBLL1E34-UXvOwAAANA"]
[Tue Mar 31 01:25:01.408714 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:62816] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acqx7SobgVY20PMQKVtXQwAAARI"]
[Tue Mar 31 01:25:01.880440 2026] [:error] [pid 36939:tid 36965] [client 20.111.17.29:62837] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "acqx7cRDKH225Jeq1jc9AQAAABg"]
[Tue Mar 31 01:25:02.354073 2026] [:error] [pid 39123:tid 39127] [client 20.111.17.29:62797] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "acqx7iobgVY20PMQKVtXSAAAAQI"]
[Tue Mar 31 01:25:02.828770 2026] [:error] [pid 36706:tid 36879] [client 20.111.17.29:62765] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "acqx7ra-eBLL1E34-UXvPwAAANE"]
[Tue Mar 31 01:25:03.300197 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:62753] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "acqx77a-eBLL1E34-UXvRgAAANU"]
[Tue Mar 31 01:25:03.782634 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:62805] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "acqx7yobgVY20PMQKVtXTAAAAQA"]
[Tue Mar 31 01:25:04.255005 2026] [:error] [pid 36706:tid 36871] [client 20.111.17.29:59034] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "acqx8La-eBLL1E34-UXvSgAAAMk"]
[Tue Mar 31 01:25:04.736324 2026] [:error] [pid 36706:tid 36880] [client 20.111.17.29:64074] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "acqx8La-eBLL1E34-UXvTAAAANI"]
[Tue Mar 31 01:25:05.208351 2026] [:error] [pid 36672:tid 36812] [client 20.111.17.29:62272] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "acqx8bKHDzEfeL3XiLo-xwAAAEU"]
[Tue Mar 31 01:25:05.688097 2026] [:error] [pid 36939:tid 36949] [client 20.111.17.29:63543] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "acqx8cRDKH225Jeq1jc9BwAAAAg"]
[Tue Mar 31 01:25:06.163844 2026] [:error] [pid 39123:tid 39127] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Tue Mar 31 01:25:06.640930 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Tue Mar 31 01:25:06.879072 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Tue Mar 31 01:25:07.117074 2026] [:error] [pid 39123:tid 39134] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Tue Mar 31 01:25:07.355999 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Tue Mar 31 01:25:07.594285 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Mar 31 01:25:08.075325 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Tue Mar 31 01:25:08.312642 2026] [:error] [pid 39123:tid 39132] [client 20.111.17.29:62782] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Mar 31 01:25:08.785204 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:62782] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqx9CobgVY20PMQKVtXawAAARQ"]
[Tue Mar 31 01:25:09.278229 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:62281] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqx9SobgVY20PMQKVtXcAAAARU"]
[Tue Mar 31 01:25:09.773658 2026] [:error] [pid 36688:tid 36851] [client 20.111.17.29:59081] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqx9ZIe8NBGKiiCIcILdQAAAJA"]
[Tue Mar 31 01:25:10.247785 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:64021] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "acqx9iobgVY20PMQKVtXdAAAAQM"]
[Tue Mar 31 01:25:10.725205 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:62726] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acqx9iobgVY20PMQKVtXdwAAAQg"]
[Tue Mar 31 01:25:11.203152 2026] [:error] [pid 36706:tid 36866] [client 20.111.17.29:62323] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acqx97a-eBLL1E34-UXvVgAAAMQ"]
[Tue Mar 31 01:25:11.681935 2026] [:error] [pid 36939:tid 36954] [client 20.111.17.29:62284] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acqx98RDKH225Jeq1jc9DwAAAA0"]
[Tue Mar 31 01:25:12.152858 2026] [:error] [pid 36672:tid 36822] [client 20.111.17.29:58465] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "acqx-LKHDzEfeL3XiLo-0gAAAE8"]
[Tue Mar 31 01:25:12.630505 2026] [:error] [pid 36672:tid 36825] [client 20.111.17.29:62290] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acqx-LKHDzEfeL3XiLo-1QAAAFI"]
[Tue Mar 31 01:25:13.112107 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:62235] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acqx-SobgVY20PMQKVtXgQAAAQg"]
[Tue Mar 31 01:25:13.590519 2026] [:error] [pid 36672:tid 36817] [client 20.111.17.29:64087] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acqx-bKHDzEfeL3XiLo-2QAAAEo"]
[Tue Mar 31 01:25:14.066782 2026] [:error] [pid 39123:tid 39130] [client 20.111.17.29:59014] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "acqx-iobgVY20PMQKVtXhgAAAQU"]
[Tue Mar 31 01:25:14.553214 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:64867] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acqx-iobgVY20PMQKVtXiQAAAQM"]
[Tue Mar 31 01:25:15.027283 2026] [:error] [pid 39123:tid 39126] [client 20.111.17.29:62252] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acqx-yobgVY20PMQKVtXjwAAAQE"]
[Tue Mar 31 01:25:15.503217 2026] [:error] [pid 36672:tid 36809] [client 20.111.17.29:59132] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acqx-7KHDzEfeL3XiLo-4QAAAEI"]
[Tue Mar 31 01:25:15.978966 2026] [:error] [pid 39123:tid 39142] [client 20.111.17.29:62266] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "acqx-yobgVY20PMQKVtXmAAAARE"]
[Tue Mar 31 01:25:16.460628 2026] [:error] [pid 39123:tid 39131] [client 20.111.17.29:62265] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acqx_CobgVY20PMQKVtXnAAAAQY"]
[Tue Mar 31 01:25:16.934754 2026] [:error] [pid 39123:tid 39138] [client 20.111.17.29:62725] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acqx_CobgVY20PMQKVtXoAAAAQ0"]
[Tue Mar 31 01:25:17.410192 2026] [:error] [pid 39123:tid 39125] [client 20.111.17.29:64822] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acqx_SobgVY20PMQKVtXpAAAAQA"]
[Tue Mar 31 01:25:17.886416 2026] [:error] [pid 39123:tid 39129] [client 20.111.17.29:62224] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "acqx_SobgVY20PMQKVtXqAAAAQQ"]
[Tue Mar 31 01:25:18.359754 2026] [:error] [pid 39123:tid 39145] [client 20.111.17.29:59082] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acqx_iobgVY20PMQKVtXqwAAARQ"]
[Tue Mar 31 01:25:18.835306 2026] [:error] [pid 36688:tid 36848] [client 20.111.17.29:62810] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acqx_pIe8NBGKiiCIcILdgAAAI0"]
[Tue Mar 31 01:25:19.314693 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:64819] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acqx_yobgVY20PMQKVtXrQAAARI"]
[Tue Mar 31 01:25:19.799147 2026] [:error] [pid 36706:tid 36880] [client 20.111.17.29:64826] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "acqx_7a-eBLL1E34-UXvXgAAANI"]
[Tue Mar 31 01:25:20.270482 2026] [:error] [pid 36939:tid 36960] [client 20.111.17.29:62806] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acqyAMRDKH225Jeq1jc9GwAAABM"]
[Tue Mar 31 01:25:20.745513 2026] [:error] [pid 39123:tid 39133] [client 20.111.17.29:63572] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acqyACobgVY20PMQKVtXswAAAQg"]
[Tue Mar 31 01:25:21.240519 2026] [:error] [pid 39123:tid 39140] [client 20.111.17.29:62832] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acqyASobgVY20PMQKVtXtwAAAQ8"]
[Tue Mar 31 01:25:21.710875 2026] [:error] [pid 39123:tid 39128] [client 20.111.17.29:62277] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "acqyASobgVY20PMQKVtXvgAAAQM"]
[Tue Mar 31 01:25:22.206863 2026] [:error] [pid 36706:tid 36885] [client 20.111.17.29:62333] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acqyAra-eBLL1E34-UXvYQAAANc"]
[Tue Mar 31 01:25:22.681765 2026] [:error] [pid 36706:tid 36863] [client 20.111.17.29:62828] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acqyAra-eBLL1E34-UXvZQAAAME"]
[Tue Mar 31 01:25:23.153404 2026] [:error] [pid 36706:tid 36875] [client 20.111.17.29:64880] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acqyA7a-eBLL1E34-UXvZwAAAM0"]
[Tue Mar 31 01:25:23.636501 2026] [:error] [pid 36939:tid 36948] [client 20.111.17.29:62322] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fffff.php"] [unique_id "acqyA8RDKH225Jeq1jc9JQAAAAc"]
[Tue Mar 31 01:25:24.110919 2026] [:error] [pid 36672:tid 36819] [client 20.111.17.29:59075] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "acqyBLKHDzEfeL3XiLo-9wAAAEw"]
[Tue Mar 31 01:25:24.600953 2026] [:error] [pid 36706:tid 36883] [client 20.111.17.29:62790] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "acqyBLa-eBLL1E34-UXvcwAAANU"]
[Tue Mar 31 01:25:25.075685 2026] [:error] [pid 39123:tid 39148] [client 20.111.17.29:62780] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "acqyBSobgVY20PMQKVtXxAAAARc"]
[Tue Mar 31 01:25:25.572517 2026] [:error] [pid 39123:tid 39143] [client 20.111.17.29:64121] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "acqyBSobgVY20PMQKVtXyQAAARI"]
[Tue Mar 31 01:25:26.045345 2026] [:error] [pid 39123:tid 39141] [client 20.111.17.29:64812] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "acqyBiobgVY20PMQKVtXzAAAARA"]
[Tue Mar 31 01:25:26.517936 2026] [:error] [pid 39123:tid 39146] [client 20.111.17.29:64840] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "acqyBiobgVY20PMQKVtXzQAAARU"]
[Tue Mar 31 01:25:26.990962 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:63530] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "acqyBsRDKH225Jeq1jc9KwAAAA8"]
[Tue Mar 31 01:25:27.462701 2026] [:error] [pid 36706:tid 36862] [client 20.111.17.29:63533] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "acqyB7a-eBLL1E34-UXveQAAAMA"]
[Tue Mar 31 01:25:27.936750 2026] [:error] [pid 36672:tid 36814] [client 20.111.17.29:62210] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acqyB7KHDzEfeL3XiLo_AQAAAEc"]
[Tue Mar 31 01:25:28.430341 2026] [:error] [pid 36672:tid 36812] [client 20.111.17.29:62260] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acqyCLKHDzEfeL3XiLo_BQAAAEU"]
[Tue Mar 31 01:25:28.905737 2026] [:error] [pid 36706:tid 36872] [client 20.111.17.29:63550] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acqyCLa-eBLL1E34-UXvfgAAAMo"]
[Tue Mar 31 01:25:29.380581 2026] [:error] [pid 36672:tid 36828] [client 20.111.17.29:59074] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "acqyCbKHDzEfeL3XiLo_CgAAAFU"]
[Tue Mar 31 01:25:29.862179 2026] [:error] [pid 36672:tid 36823] [client 20.111.17.29:62254] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acqyCbKHDzEfeL3XiLo_DgAAAFA"]
[Tue Mar 31 01:25:30.341860 2026] [:error] [pid 36672:tid 36831] [client 20.111.17.29:59016] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acqyCrKHDzEfeL3XiLo_EQAAAFg"]
[Tue Mar 31 01:25:30.814381 2026] [:error] [pid 36672:tid 36824] [client 20.111.17.29:63548] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acqyCrKHDzEfeL3XiLo_FwAAAFE"]
[Tue Mar 31 01:25:31.289810 2026] [:error] [pid 36939:tid 36947] [client 20.111.17.29:58460] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "acqyC8RDKH225Jeq1jc9MgAAAAY"]
[Tue Mar 31 01:25:31.764103 2026] [:error] [pid 36672:tid 36820] [client 20.111.17.29:64039] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "acqyC7KHDzEfeL3XiLo_HgAAAE0"]
[Tue Mar 31 01:25:32.237142 2026] [:error] [pid 36939:tid 36953] [client 20.111.17.29:62293] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "acqyDMRDKH225Jeq1jc9NAAAAAw"]
[Tue Mar 31 01:25:32.717743 2026] [:error] [pid 36706:tid 36875] [client 20.111.17.29:62730] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "acqyDLa-eBLL1E34-UXvgwAAAM0"]
[Tue Mar 31 01:25:33.187555 2026] [:error] [pid 36706:tid 36868] [client 20.111.17.29:63506] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "acqyDba-eBLL1E34-UXvhwAAAMY"]
[Tue Mar 31 01:25:33.663751 2026] [:error] [pid 36706:tid 36873] [client 20.111.17.29:64775] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqyDba-eBLL1E34-UXviQAAAMs"]
[Tue Mar 31 01:25:34.137200 2026] [:error] [pid 36939:tid 36942] [client 20.111.17.29:59050] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqyDsRDKH225Jeq1jc9NgAAAAE"]
[Tue Mar 31 01:25:34.610905 2026] [:error] [pid 36688:tid 36855] [client 20.111.17.29:64126] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqyDpIe8NBGKiiCIcILegAAAJQ"]
[Tue Mar 31 01:25:35.092703 2026] [:error] [pid 36688:tid 36857] [client 20.111.17.29:64064] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php/admin.php"] [unique_id "acqyD5Ie8NBGKiiCIcILfQAAAJY"]
[Tue Mar 31 01:25:35.567738 2026] [:error] [pid 36939:tid 36957] [client 20.111.17.29:58485] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acqyD8RDKH225Jeq1jc9OwAAABA"]
[Tue Mar 31 01:25:36.052698 2026] [:error] [pid 36939:tid 36963] [client 20.111.17.29:59035] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acqyEMRDKH225Jeq1jc9PAAAABY"]
[Tue Mar 31 01:25:36.524881 2026] [:error] [pid 36939:tid 36952] [client 20.111.17.29:62244] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acqyEMRDKH225Jeq1jc9PgAAAAs"]
[Tue Mar 31 01:25:37.058178 2026] [:error] [pid 36688:tid 36856] [client 20.111.17.29:62230] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "acqyEZIe8NBGKiiCIcILggAAAJU"]
[Tue Mar 31 01:25:37.532431 2026] [:error] [pid 36706:tid 36873] [client 20.111.17.29:64784] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acqyEba-eBLL1E34-UXvlgAAAMs"]
[Tue Mar 31 01:25:38.020005 2026] [:error] [pid 36672:tid 36813] [client 20.111.17.29:64089] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acqyErKHDzEfeL3XiLo_KAAAAEY"]
[Tue Mar 31 01:25:38.490976 2026] [:error] [pid 36706:tid 36881] [client 20.111.17.29:62766] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acqyEra-eBLL1E34-UXvmgAAANM"]
[Tue Mar 31 01:25:38.962026 2026] [:error] [pid 36939:tid 36956] [client 20.111.17.29:64805] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "acqyEsRDKH225Jeq1jc9RQAAAA8"]
[Tue Mar 31 01:25:39.433493 2026] [:error] [pid 36672:tid 36821] [client 20.111.17.29:62721] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "acqyE7KHDzEfeL3XiLo_KQAAAE4"]
[Tue Mar 31 01:25:39.909690 2026] [:error] [pid 36706:tid 36876] [client 20.111.17.29:59008] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "acqyE7a-eBLL1E34-UXvoAAAAM4"]
[Tue Mar 31 01:25:40.378782 2026] [:error] [pid 36706:tid 36874] [client 20.111.17.29:62301] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "acqyFLa-eBLL1E34-UXvoQAAAMw"]
[Tue Mar 31 01:25:40.856305 2026] [:error] [pid 36672:tid 36826] [client 20.111.17.29:64855] [client 20.111.17.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa2.php"] [unique_id "acqyFLKHDzEfeL3XiLo_KwAAAFM"]
[Tue Mar 31 02:39:02.421642 2026] [:error] [pid 39123:tid 39143] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Tue Mar 31 02:39:02.659809 2026] [:error] [pid 39123:tid 39141] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Tue Mar 31 02:39:02.899663 2026] [:error] [pid 39123:tid 39148] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Tue Mar 31 02:39:03.139616 2026] [:error] [pid 39123:tid 39144] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Tue Mar 31 02:39:03.378643 2026] [:error] [pid 39123:tid 39142] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/y.php
[Tue Mar 31 02:39:03.623224 2026] [:error] [pid 39123:tid 39148] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Mar 31 02:39:03.861947 2026] [:error] [pid 39123:tid 39127] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/abouta.php
[Tue Mar 31 02:39:04.100752 2026] [:error] [pid 39123:tid 39144] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/zfe.php
[Tue Mar 31 02:39:04.339023 2026] [:error] [pid 39123:tid 39125] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Mar 31 02:39:04.580722 2026] [:error] [pid 39123:tid 39135] [client 20.208.32.234:28438] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Tue Mar 31 02:39:04.820970 2026] [:error] [pid 39123:tid 39127] [client 20.208.32.234:28438] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acrDSCobgVY20PMQKVuffQAAAQI"]
[Tue Mar 31 02:39:05.717094 2026] [:error] [pid 36706:tid 36886] [client 20.208.32.234:9462] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acrDSba-eBLL1E34-UUWnQAAANg"]
[Tue Mar 31 02:39:06.663846 2026] [:error] [pid 36706:tid 36869] [client 20.208.32.234:37018] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acrDSra-eBLL1E34-UUWpAAAAMc"]
[Tue Mar 31 02:39:07.931115 2026] [:error] [pid 36939:tid 36964] [client 20.208.32.234:20827] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "acrDS8RDKH225Jeq1jdv5gAAABc"]
[Tue Mar 31 02:39:08.847818 2026] [:error] [pid 36706:tid 36872] [client 20.208.32.234:37016] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "acrDTLa-eBLL1E34-UUWrAAAAMo"]
[Tue Mar 31 02:39:10.028331 2026] [:error] [pid 36939:tid 36962] [client 20.208.32.234:61457] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "acrDTsRDKH225Jeq1jdv8gAAABU"]
[Tue Mar 31 02:39:11.428867 2026] [:error] [pid 39123:tid 39149] [client 20.208.32.234:5438] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "acrDTyobgVY20PMQKVufrAAAARg"]
[Tue Mar 31 02:39:12.653028 2026] [:error] [pid 36939:tid 36957] [client 20.208.32.234:46380] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "acrDUMRDKH225Jeq1jdwBAAAABA"]
[Tue Mar 31 02:39:13.786153 2026] [:error] [pid 39123:tid 39147] [client 20.208.32.234:5387] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "acrDUSobgVY20PMQKVuf1QAAARY"]
[Tue Mar 31 02:39:14.678044 2026] [:error] [pid 36939:tid 36963] [client 20.208.32.234:45747] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrDUsRDKH225Jeq1jdwBgAAABY"]
[Tue Mar 31 02:39:15.510142 2026] [:error] [pid 36706:tid 36880] [client 20.208.32.234:20814] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrDU7a-eBLL1E34-UUWuAAAANI"]
[Tue Mar 31 02:39:16.340490 2026] [:error] [pid 36939:tid 36951] [client 20.208.32.234:50361] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrDVMRDKH225Jeq1jdwEAAAAAo"]
[Tue Mar 31 02:39:17.425004 2026] [:error] [pid 36672:tid 36815] [client 20.208.32.234:46339] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrDVbKHDzEfeL3XiLpawwAAAEg"]
[Tue Mar 31 02:39:18.638670 2026] [:error] [pid 36939:tid 36945] [client 20.208.32.234:60395] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-thi.php"] [unique_id "acrDVsRDKH225Jeq1jdwHgAAAAQ"]
[Tue Mar 31 02:39:20.013511 2026] [:error] [pid 36688:tid 36846] [client 20.208.32.234:61440] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-thi.php"] [unique_id "acrDWJIe8NBGKiiCIcIr6QAAAIs"]
[Tue Mar 31 02:39:21.206417 2026] [:error] [pid 36688:tid 36836] [client 20.208.32.234:45713] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acrDWZIe8NBGKiiCIcIr7wAAAIE"]
[Tue Mar 31 02:39:22.125946 2026] [:error] [pid 36939:tid 36961] [client 20.208.32.234:49685] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acrDWsRDKH225Jeq1jdwMwAAABQ"]
[Tue Mar 31 02:39:22.873232 2026] [:error] [pid 36688:tid 36835] [client 20.208.32.234:61446] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acrDWpIe8NBGKiiCIcIr9wAAAIA"]
[Tue Mar 31 02:39:24.939312 2026] [:error] [pid 36706:tid 36864] [client 20.208.32.234:20815] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "acrDXLa-eBLL1E34-UUW3gAAAMI"]
[Tue Mar 31 02:39:25.872854 2026] [:error] [pid 36688:tid 36853] [client 20.208.32.234:52183] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "acrDXZIe8NBGKiiCIcIsAAAAAJI"]
[Tue Mar 31 02:39:26.973321 2026] [:error] [pid 36672:tid 36817] [client 20.208.32.234:28435] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "acrDXrKHDzEfeL3XiLpa5wAAAEo"]
[Tue Mar 31 02:39:27.662508 2026] [:error] [pid 36672:tid 36829] [client 20.208.32.234:34503] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "acrDX7KHDzEfeL3XiLpa7AAAAFY"]
[Tue Mar 31 02:39:28.713554 2026] [:error] [pid 36939:tid 36943] [client 20.208.32.234:45731] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "acrDYMRDKH225Jeq1jdwSQAAAAI"]
[Tue Mar 31 02:39:29.937591 2026] [:error] [pid 36706:tid 36864] [client 20.208.32.234:34559] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "acrDYba-eBLL1E34-UUW6AAAAMI"]
[Tue Mar 31 02:39:30.622914 2026] [:error] [pid 36706:tid 36878] [client 20.208.32.234:61503] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "acrDYra-eBLL1E34-UUW6wAAANA"]
[Tue Mar 31 02:39:32.036963 2026] [:error] [pid 39123:tid 39126] [client 20.208.32.234:24233] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "acrDZCobgVY20PMQKVugLAAAAQE"]
[Tue Mar 31 02:39:33.181700 2026] [:error] [pid 36688:tid 36835] [client 20.208.32.234:7269] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "acrDZZIe8NBGKiiCIcIsEQAAAIA"]
[Tue Mar 31 02:39:34.221379 2026] [:error] [pid 36939:tid 36956] [client 20.208.32.234:61501] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vvedr.php"] [unique_id "acrDZsRDKH225Jeq1jdwcwAAAA8"]
[Tue Mar 31 02:39:35.961416 2026] [:error] [pid 36706:tid 36876] [client 20.208.32.234:45702] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acrDZ7a-eBLL1E34-UUW9AAAAM4"]
[Tue Mar 31 02:39:36.669760 2026] [:error] [pid 36672:tid 36808] [client 20.208.32.234:20812] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "acrDaLKHDzEfeL3XiLpbGAAAAEE"]
[Tue Mar 31 02:39:37.680516 2026] [:error] [pid 36706:tid 36871] [client 20.208.32.234:34330] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xhejulap.php"] [unique_id "acrDaba-eBLL1E34-UUXAAAAAMk"]
[Tue Mar 31 02:39:39.059760 2026] [:error] [pid 36706:tid 36884] [client 20.208.32.234:61441] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xhejulap.php"] [unique_id "acrDa7a-eBLL1E34-UUXjgAAANY"]
[Tue Mar 31 02:39:39.792073 2026] [:error] [pid 36939:tid 36949] [client 20.208.32.234:9423] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xhejulap.php"] [unique_id "acrDa8RDKH225Jeq1jdwtQAAAAg"]
[Tue Mar 31 02:39:40.922095 2026] [:error] [pid 36706:tid 36865] [client 20.208.32.234:52739] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrDbLa-eBLL1E34-UUXpgAAAMM"]
[Tue Mar 31 02:39:42.308906 2026] [:error] [pid 36672:tid 36820] [client 20.208.32.234:34338] [client 20.208.32.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrDbrKHDzEfeL3XiLpbKQAAAE0"]
[Tue Mar 31 04:26:01.108537 2026] [:error] [pid 18334:tid 18413] [client 60.54.33.1:60651] [client 60.54.33.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.54.33.1, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acrcWXqQrXLbk1cg3mgiIQAAAIc"]
[Tue Mar 31 04:26:01.113869 2026] [:error] [pid 18334:tid 18413] [client 60.54.33.1:60651] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 31 04:55:43.301272 2026] [:error] [pid 18334:tid 18409] [client 43.154.250.181:47106] [client 43.154.250.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acrjT3qQrXLbk1cg3mg3RAAAAIM"]
[Tue Mar 31 07:40:22.881394 2026] [:error] [pid 41421:tid 41445] [client 4.204.246.56:16337] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsJ5hSaDjY9kKFtUQAoBQAAARU"]
[Tue Mar 31 07:40:23.344805 2026] [:error] [pid 41421:tid 41438] [client 4.204.246.56:16353] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsJ5xSaDjY9kKFtUQAoDAAAAQ4"]
[Tue Mar 31 07:40:23.790110 2026] [:error] [pid 36982:tid 37002] [client 4.204.246.56:16341] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsJ5_lMmeoQKN0r_GNSpgAAANE"]
[Tue Mar 31 07:40:24.227659 2026] [:error] [pid 36982:tid 36986] [client 4.204.246.56:16374] [client 4.204.246.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsJ6PlMmeoQKN0r_GNSsgAAAME"]
[Tue Mar 31 08:42:23.303160 2026] [:error] [pid 41421:tid 41429] [client 49.51.132.100:36232] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acsYbxSaDjY9kKFtUQBmCQAAAQU"]
[Tue Mar 31 09:42:52.479039 2026] [:error] [pid 36890:tid 36910] [client 98.71.65.172:33969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Tue Mar 31 10:15:12.573599 2026] [:error] [pid 41421:tid 41440] [client 2.57.122.202:53526] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Tue Mar 31 10:15:13.229005 2026] [:error] [pid 36890:tid 36918] [client 2.57.122.202:44266] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Tue Mar 31 10:56:43.921532 2026] [:error] [pid 36892:tid 36959] [client 43.131.39.179:50962] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acs360yj9S4G0ek3O4L2EwAAAIg"]
[Tue Mar 31 12:00:14.734377 2026] [:error] [pid 6548:tid 6562] [client 14.215.163.132:51090] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "actGzrgIz9HgMl9YwE7_WAAAAUw"]
[Tue Mar 31 14:38:46.324104 2026] [:error] [pid 36982:tid 36990] [client 43.166.255.102:39354] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "actr9vlMmeoQKN0r_GO6DgAAAMU"]
[Tue Mar 31 16:50:25.020453 2026] [:error] [pid 36982:tid 36996] [client 43.130.139.177:47590] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acuK0flMmeoQKN0r_GMe5QAAAMs"]
[Tue Mar 31 18:23:58.338396 2026] [:error] [pid 36982:tid 36992] [client 182.42.111.156:58855] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acugvvlMmeoQKN0r_GNoUgAAAMc"]
[Tue Mar 31 22:14:08.155910 2026] [:error] [pid 6548:tid 6551] [client 49.51.183.84:45406] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acvWsLgIz9HgMl9YwE5wegAAAUE"]
[Wed Apr 01 00:11:26.093935 2026] [:error] [pid 2836:tid 2864] [client 197.248.148.181:6553] [client 197.248.148.181] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 197.248.148.181, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acvyLipQtaf_GRF3iPf2pQAAAhU"]
[Wed Apr 01 00:11:26.100574 2026] [:error] [pid 2836:tid 2864] [client 197.248.148.181:6553] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 01 01:18:53.687020 2026] [:error] [pid 52836:tid 52895] [client 182.42.111.156:45346] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acwB_Zjk_YTY8bXnEz4wVQAAAEM"]
[Wed Apr 01 04:55:08.264292 2026] [:error] [pid 23715:tid 23763] [client 43.166.247.82:57610] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acw0rK-REzOruNbiT9wUmwAAAEI"]
[Wed Apr 01 05:39:36.116514 2026] [:error] [pid 24314:tid 24329] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Wed Apr 01 05:39:36.360032 2026] [:error] [pid 24314:tid 24337] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Wed Apr 01 05:39:36.598951 2026] [:error] [pid 24314:tid 24319] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Wed Apr 01 05:39:36.837715 2026] [:error] [pid 24314:tid 24334] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Wed Apr 01 05:39:37.077208 2026] [:error] [pid 24314:tid 24341] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Wed Apr 01 05:39:37.316482 2026] [:error] [pid 24314:tid 24335] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Wed Apr 01 05:39:37.556958 2026] [:error] [pid 24314:tid 24322] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/abouta.php
[Wed Apr 01 05:39:37.797362 2026] [:error] [pid 24314:tid 24336] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/zfe.php
[Wed Apr 01 05:39:38.035986 2026] [:error] [pid 24314:tid 24326] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Wed Apr 01 05:39:38.275991 2026] [:error] [pid 24314:tid 24342] [client 20.19.190.161:39153] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Wed Apr 01 05:39:38.511581 2026] [:error] [pid 24314:tid 24328] [client 20.19.190.161:39153] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acw_GpRF3FCzjmMUX5bWeAAAAQo"]
[Wed Apr 01 05:39:38.982114 2026] [:error] [pid 24314:tid 24332] [client 20.19.190.161:40993] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acw_GpRF3FCzjmMUX5bWegAAAQ4"]
[Wed Apr 01 05:39:39.461306 2026] [:error] [pid 23714:tid 23757] [client 20.19.190.161:6276] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acw_G0HxDDU2ETcG9DSmqgAAABc"]
[Wed Apr 01 05:39:39.950382 2026] [:error] [pid 24348:tid 24397] [client 20.19.190.161:6146] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "acw_G20Vs69Y5nF1HA_B8gAAAZI"]
[Wed Apr 01 05:39:40.422683 2026] [:error] [pid 23715:tid 23774] [client 20.19.190.161:6298] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acw_HK-REzOruNbiT9wr4wAAAE0"]
[Wed Apr 01 05:39:40.895835 2026] [:error] [pid 23715:tid 23769] [client 20.19.190.161:39126] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acw_HK-REzOruNbiT9wr6AAAAEg"]
[Wed Apr 01 05:39:41.367840 2026] [:error] [pid 23714:tid 23738] [client 20.19.190.161:52144] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acw_HUHxDDU2ETcG9DSmsAAAAAQ"]
[Wed Apr 01 05:39:41.840449 2026] [:error] [pid 23716:tid 23804] [client 20.19.190.161:36353] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "acw_HXVtFUg_mx-RYb5cowAAAJA"]
[Wed Apr 01 05:39:42.313902 2026] [:error] [pid 23715:tid 23781] [client 20.19.190.161:6310] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "acw_Hq-REzOruNbiT9wr7AAAAFQ"]
[Wed Apr 01 05:39:42.790174 2026] [:error] [pid 24314:tid 24319] [client 20.19.190.161:39163] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "acw_HpRF3FCzjmMUX5bWfQAAAQE"]
[Wed Apr 01 05:39:43.262573 2026] [:error] [pid 24314:tid 24325] [client 20.19.190.161:52122] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "acw_H5RF3FCzjmMUX5bWgAAAAQc"]
[Wed Apr 01 05:39:43.743844 2026] [:error] [pid 24314:tid 24341] [client 20.19.190.161:52097] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/000.php"] [unique_id "acw_H5RF3FCzjmMUX5bWggAAARc"]
[Wed Apr 01 05:39:44.217103 2026] [:error] [pid 24314:tid 24336] [client 20.19.190.161:6194] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw_IJRF3FCzjmMUX5bWgwAAARI"]
[Wed Apr 01 05:39:44.690030 2026] [:error] [pid 24348:tid 24385] [client 20.19.190.161:6163] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw_IG0Vs69Y5nF1HA_B9QAAAYY"]
[Wed Apr 01 05:39:45.176622 2026] [:error] [pid 23714:tid 23748] [client 20.19.190.161:41016] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw_IUHxDDU2ETcG9DSmtgAAAA4"]
[Wed Apr 01 05:39:45.655211 2026] [:error] [pid 24314:tid 24337] [client 20.19.190.161:6287] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zlnckdxn.php"] [unique_id "acw_IZRF3FCzjmMUX5bWiwAAARM"]
[Wed Apr 01 05:39:46.131831 2026] [:error] [pid 23714:tid 23756] [client 20.19.190.161:52118] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-thi.php"] [unique_id "acw_IkHxDDU2ETcG9DSmuAAAABY"]
[Wed Apr 01 05:39:46.605798 2026] [:error] [pid 24348:tid 24380] [client 20.19.190.161:36362] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-thi.php"] [unique_id "acw_Im0Vs69Y5nF1HA_B9wAAAYE"]
[Wed Apr 01 05:39:47.079027 2026] [:error] [pid 23715:tid 23785] [client 20.19.190.161:36393] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-thi.php"] [unique_id "acw_I6-REzOruNbiT9wr7wAAAFg"]
[Wed Apr 01 05:39:47.552364 2026] [:error] [pid 24348:tid 24403] [client 20.19.190.161:39160] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-thi.php"] [unique_id "acw_I20Vs69Y5nF1HA_B-wAAAZg"]
[Wed Apr 01 05:39:48.022883 2026] [:error] [pid 23716:tid 23790] [client 20.19.190.161:52111] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "acw_JHVtFUg_mx-RYb5csgAAAII"]
[Wed Apr 01 05:39:48.495712 2026] [:error] [pid 23714:tid 23736] [client 20.19.190.161:39147] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "acw_JEHxDDU2ETcG9DSmvgAAAAI"]
[Wed Apr 01 05:39:48.971387 2026] [:error] [pid 24314:tid 24321] [client 20.19.190.161:39151] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "acw_JJRF3FCzjmMUX5bWkAAAAQM"]
[Wed Apr 01 05:39:49.462467 2026] [:error] [pid 23716:tid 23807] [client 20.19.190.161:38408] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "acw_JXVtFUg_mx-RYb5cuAAAAJM"]
[Wed Apr 01 05:39:49.934666 2026] [:error] [pid 23714:tid 23747] [client 20.19.190.161:41017] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "acw_JUHxDDU2ETcG9DSmwQAAAA0"]
[Wed Apr 01 05:39:50.407408 2026] [:error] [pid 24346:tid 24357] [client 20.19.190.161:36383] [client 20.19.190.161] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "acw_Jrc1l8kg9MhGHIJ4pQAAAUU"]
[Wed Apr 01 07:54:51.224491 2026] [:error] [pid 24346:tid 24375] [client 88.218.45.86:64333] [client 88.218.45.86] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "acxey7c1l8kg9MhGHIKclAAAAVc"], referer: https://www.google.com
[Wed Apr 01 07:54:59.091554 2026] [:error] [pid 23716:tid 23802] [client 88.218.45.86:23817] [client 88.218.45.86] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acxe03VtFUg_mx-RYb5zUgAAAI4"]
[Wed Apr 01 07:54:59.091835 2026] [:error] [pid 23716:tid 23802] [client 88.218.45.86:23817] [client 88.218.45.86] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 88.218.45.86, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "acxe03VtFUg_mx-RYb5zUgAAAI4"]
[Wed Apr 01 07:54:59.096327 2026] [:error] [pid 23716:tid 23802] [client 88.218.45.86:23817] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 01 07:55:00.850140 2026] [:error] [pid 23714:tid 23756] [client 88.218.45.86:46427] [client 88.218.45.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.218.45.86, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acxe1EHxDDU2ETcG9DT-1wAAABY"], referer: https://www.google.com
[Wed Apr 01 07:55:00.854214 2026] [:error] [pid 23714:tid 23756] [client 88.218.45.86:46427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Apr 01 07:55:04.279780 2026] [:error] [pid 23819:tid 23835] [client 88.218.45.86:63463] [client 88.218.45.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 88.218.45.86, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "acxe2NdfUS_37wFAM770KAAAAM0"], referer: https://www.google.com
[Wed Apr 01 07:55:04.283808 2026] [:error] [pid 23819:tid 23835] [client 88.218.45.86:63463] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Wed Apr 01 08:35:13.025762 2026] [:error] [pid 24346:tid 24355] [client 158.158.49.164:46215] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Wed Apr 01 08:35:13.268410 2026] [:error] [pid 24346:tid 24357] [client 158.158.49.164:46215] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Wed Apr 01 11:11:38.879771 2026] [:error] [pid 24348:tid 24384] [client 43.130.106.18:34576] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "acyM6m0Vs69Y5nF1HA9BcQAAAYU"]
[Wed Apr 01 13:01:00.259682 2026] [:error] [pid 24314:tid 24318] [client 216.24.210.30:64545] [client 216.24.210.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acymjJRF3FCzjmMUX5YwaQAAAQA"]
[Wed Apr 01 13:52:25.736743 2026] [:error] [pid 8910:tid 8991] [client 49.7.227.204:44044] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "acyymaJZINUcF3tYgEza4wAAARc"]
[Wed Apr 01 15:21:55.943616 2026] [:error] [pid 8910:tid 8981] [client 117.96.41.27:25641] [client 117.96.41.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.96.41.27, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aczHk6JZINUcF3tYgEz8UwAAAQ0"]
[Wed Apr 01 15:21:55.948607 2026] [:error] [pid 8910:tid 8981] [client 117.96.41.27:25641] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 01 16:35:18.207092 2026] [:error] [pid 17856:tid 17882] [client 74.248.17.99:40072] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczYxj7Idlm5j9frhqSLSgAAAFg"]
[Wed Apr 01 16:35:19.158450 2026] [:error] [pid 8995:tid 9006] [client 74.248.17.99:38629] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczYx-onaBjs3qxcRed2MgAAAAg"]
[Wed Apr 01 16:35:20.092550 2026] [:error] [pid 8908:tid 8931] [client 74.248.17.99:2409] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczYyPkmxtJXGnLdvgAMggAAAJI"]
[Wed Apr 01 16:35:21.344180 2026] [:error] [pid 17856:tid 17867] [client 74.248.17.99:36481] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczYyT7Idlm5j9frhqSLVgAAAEk"]
[Wed Apr 01 16:35:30.613373 2026] [:error] [pid 8910:tid 8971] [client 74.248.17.99:50547] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczY0qJZINUcF3tYgEwdZwAAAQM"]
[Wed Apr 01 16:35:31.750201 2026] [:error] [pid 8909:tid 8953] [client 74.248.17.99:15328] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczY0zvP_a0662gDl6DkKQAAAMw"]
[Wed Apr 01 16:35:32.666351 2026] [:error] [pid 8909:tid 8958] [client 74.248.17.99:15300] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczY1DvP_a0662gDl6DkLgAAANE"]
[Wed Apr 01 16:35:33.492376 2026] [:error] [pid 8909:tid 8948] [client 74.248.17.99:61026] [client 74.248.17.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aczY1TvP_a0662gDl6DkNAAAAMc"]
[Wed Apr 01 16:37:15.496594 2026] [:error] [pid 8908:tid 8916] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/fffff.php
[Wed Apr 01 16:37:15.754599 2026] [:error] [pid 8908:tid 8919] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/xdd.php
[Wed Apr 01 16:37:16.106029 2026] [:error] [pid 8908:tid 8931] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Wed Apr 01 16:37:16.343751 2026] [:error] [pid 8908:tid 8916] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Wed Apr 01 16:37:16.583490 2026] [:error] [pid 8908:tid 8918] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/ws79.php
[Wed Apr 01 16:37:16.825228 2026] [:error] [pid 8908:tid 8918] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Wed Apr 01 16:37:17.101997 2026] [:error] [pid 8908:tid 8914] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Wed Apr 01 16:37:17.341588 2026] [:error] [pid 8908:tid 8932] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Wed Apr 01 16:37:17.679183 2026] [:error] [pid 8908:tid 8919] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Wed Apr 01 16:37:17.916744 2026] [:error] [pid 8908:tid 8930] [client 51.103.96.231:11229] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Apr 01 16:37:18.209462 2026] [:error] [pid 8908:tid 8917] [client 51.103.96.231:11229] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "aczZPvkmxtJXGnLdvgANpwAAAIQ"]
[Wed Apr 01 16:37:19.856787 2026] [:error] [pid 8909:tid 8954] [client 51.103.96.231:28069] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "aczZPzvP_a0662gDl6DknQAAAM0"]
[Wed Apr 01 16:37:20.653699 2026] [:error] [pid 8995:tid 9017] [client 51.103.96.231:35479] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "aczZQOonaBjs3qxcRed2_QAAABM"]
[Wed Apr 01 16:37:21.775024 2026] [:error] [pid 17856:tid 17859] [client 51.103.96.231:11248] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.php"] [unique_id "aczZQT7Idlm5j9frhqSM_QAAAEE"]
[Wed Apr 01 16:37:23.006114 2026] [:error] [pid 8995:tid 9008] [client 51.103.96.231:20746] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "aczZQ-onaBjs3qxcRed3DQAAAAo"]
[Wed Apr 01 16:37:24.223942 2026] [:error] [pid 8909:tid 8949] [client 51.103.96.231:11216] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "aczZRDvP_a0662gDl6DkpAAAAMg"]
[Wed Apr 01 16:37:25.201395 2026] [:error] [pid 8908:tid 8918] [client 51.103.96.231:35495] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "aczZRfkmxtJXGnLdvgANqgAAAIU"]
[Wed Apr 01 16:37:26.357194 2026] [:error] [pid 8909:tid 8951] [client 51.103.96.231:20748] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws42.php"] [unique_id "aczZRjvP_a0662gDl6DkrAAAAMo"]
[Wed Apr 01 16:37:27.594729 2026] [:error] [pid 8909:tid 8958] [client 51.103.96.231:20572] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aczZRzvP_a0662gDl6DkrQAAANE"]
[Wed Apr 01 16:37:28.735637 2026] [:error] [pid 8908:tid 8915] [client 51.103.96.231:34927] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aczZSPkmxtJXGnLdvgANtQAAAII"]
[Wed Apr 01 16:37:29.788688 2026] [:error] [pid 8908:tid 8927] [client 51.103.96.231:35498] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aczZSfkmxtJXGnLdvgANuAAAAI4"]
[Wed Apr 01 16:37:30.953701 2026] [:error] [pid 8910:tid 8983] [client 51.103.96.231:26004] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aczZSqJZINUcF3tYgEweAAAAAQ8"]
[Wed Apr 01 16:37:31.737100 2026] [:error] [pid 8910:tid 8976] [client 51.103.96.231:16736] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aczZS6JZINUcF3tYgEweBQAAAQg"]
[Wed Apr 01 16:37:32.728843 2026] [:error] [pid 17856:tid 17871] [client 51.103.96.231:13220] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aczZTD7Idlm5j9frhqSNEwAAAE0"]
[Wed Apr 01 16:37:33.550119 2026] [:error] [pid 17856:tid 17865] [client 51.103.96.231:13451] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aczZTT7Idlm5j9frhqSNGAAAAEc"]
[Wed Apr 01 16:37:35.718608 2026] [:error] [pid 8995:tid 9008] [client 51.103.96.231:13033] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aczZT-onaBjs3qxcRed3KQAAAAo"]
[Wed Apr 01 16:37:37.093763 2026] [:error] [pid 8910:tid 8970] [client 51.103.96.231:17451] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aczZUaJZINUcF3tYgEweEgAAAQI"]
[Wed Apr 01 16:37:37.935813 2026] [:error] [pid 8908:tid 8937] [client 51.103.96.231:14527] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aczZUfkmxtJXGnLdvgANyQAAAJg"]
[Wed Apr 01 16:37:39.496999 2026] [:error] [pid 8910:tid 8988] [client 51.103.96.231:16125] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aczZU6JZINUcF3tYgEweFwAAARQ"]
[Wed Apr 01 16:37:40.402902 2026] [:error] [pid 8995:tid 9001] [client 51.103.96.231:13036] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aczZVOonaBjs3qxcRed3MQAAAAM"]
[Wed Apr 01 16:37:42.647053 2026] [:error] [pid 8995:tid 9000] [client 51.103.96.231:16760] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "aczZVuonaBjs3qxcRed3OQAAAAI"]
[Wed Apr 01 16:37:44.507161 2026] [:error] [pid 8908:tid 8937] [client 51.103.96.231:13206] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "aczZWPkmxtJXGnLdvgAN4wAAAJg"]
[Wed Apr 01 16:37:45.943957 2026] [:error] [pid 17856:tid 17877] [client 51.103.96.231:11771] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "aczZWT7Idlm5j9frhqSNJgAAAFM"]
[Wed Apr 01 16:37:46.725414 2026] [:error] [pid 8995:tid 9005] [client 51.103.96.231:11747] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/north1.php"] [unique_id "aczZWuonaBjs3qxcRed3PwAAAAc"]
[Wed Apr 01 16:37:48.272218 2026] [:error] [pid 8995:tid 9010] [client 51.103.96.231:20596] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "aczZXOonaBjs3qxcRed3RAAAAAw"]
[Wed Apr 01 16:37:49.570075 2026] [:error] [pid 8910:tid 8979] [client 51.103.96.231:13228] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "aczZXaJZINUcF3tYgEweIQAAAQs"]
[Wed Apr 01 16:37:50.495042 2026] [:error] [pid 17856:tid 17863] [client 51.103.96.231:18483] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "aczZXj7Idlm5j9frhqSNMgAAAEU"]
[Wed Apr 01 16:37:52.574851 2026] [:error] [pid 17856:tid 17882] [client 51.103.96.231:16067] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "aczZYD7Idlm5j9frhqSNWQAAAFg"]
[Wed Apr 01 16:37:53.850948 2026] [:error] [pid 8910:tid 8992] [client 51.103.96.231:13042] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "aczZYaJZINUcF3tYgEweJgAAARg"]
[Wed Apr 01 16:37:54.604145 2026] [:error] [pid 8995:tid 9011] [client 51.103.96.231:12212] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "aczZYuonaBjs3qxcRed3UwAAAA0"]
[Wed Apr 01 16:37:55.852988 2026] [:error] [pid 8908:tid 8921] [client 51.103.96.231:33725] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "aczZY_kmxtJXGnLdvgAOBgAAAIg"]
[Wed Apr 01 16:37:57.436766 2026] [:error] [pid 8909:tid 8962] [client 51.103.96.231:11398] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "aczZZTvP_a0662gDl6Dk2AAAANU"]
[Wed Apr 01 16:37:58.628759 2026] [:error] [pid 17856:tid 17866] [client 51.103.96.231:13039] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczZZj7Idlm5j9frhqSNdwAAAEg"]
[Wed Apr 01 16:38:00.563090 2026] [:error] [pid 17856:tid 17860] [client 51.103.96.231:11424] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczZaD7Idlm5j9frhqSNfQAAAEI"]
[Wed Apr 01 16:38:01.389799 2026] [:error] [pid 8908:tid 8916] [client 51.103.96.231:12283] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczZafkmxtJXGnLdvgAOFQAAAIM"]
[Wed Apr 01 16:38:03.121899 2026] [:error] [pid 8908:tid 8914] [client 51.103.96.231:23077] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aczZa_kmxtJXGnLdvgAOHQAAAIE"]
[Wed Apr 01 16:38:05.360767 2026] [:error] [pid 8995:tid 9000] [client 51.103.96.231:18438] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aczZbeonaBjs3qxcRed3ZAAAAAI"]
[Wed Apr 01 16:38:06.435261 2026] [:error] [pid 17856:tid 17874] [client 51.103.96.231:18477] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aczZbj7Idlm5j9frhqSNjgAAAFA"]
[Wed Apr 01 16:38:07.172570 2026] [:error] [pid 8995:tid 9004] [client 51.103.96.231:23089] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aczZb-onaBjs3qxcRed3bAAAAAY"]
[Wed Apr 01 16:38:08.385664 2026] [:error] [pid 8908:tid 8923] [client 51.103.96.231:27094] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aczZcPkmxtJXGnLdvgAOKAAAAIo"]
[Wed Apr 01 16:38:09.550757 2026] [:error] [pid 17856:tid 17875] [client 51.103.96.231:24120] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aczZcT7Idlm5j9frhqSNkwAAAFE"]
[Wed Apr 01 16:38:10.284815 2026] [:error] [pid 8995:tid 9012] [client 51.103.96.231:21336] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aczZcuonaBjs3qxcRed3dAAAAA4"]
[Wed Apr 01 16:38:11.619183 2026] [:error] [pid 8995:tid 9000] [client 51.103.96.231:21837] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aczZc-onaBjs3qxcRed3dgAAAAI"]
[Wed Apr 01 16:38:12.822793 2026] [:error] [pid 8909:tid 8941] [client 51.103.96.231:11704] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aczZdDvP_a0662gDl6Dk6AAAAMA"]
[Wed Apr 01 16:38:14.514981 2026] [:error] [pid 8908:tid 8921] [client 51.103.96.231:11425] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aczZdvkmxtJXGnLdvgAOMAAAAIg"]
[Wed Apr 01 16:38:15.796931 2026] [:error] [pid 17856:tid 17863] [client 51.103.96.231:23045] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aczZdz7Idlm5j9frhqSNnAAAAEU"]
[Wed Apr 01 16:38:16.744420 2026] [:error] [pid 17856:tid 17874] [client 51.103.96.231:18466] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aczZeD7Idlm5j9frhqSNoAAAAFA"]
[Wed Apr 01 16:38:17.496078 2026] [:error] [pid 8908:tid 8923] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Wed Apr 01 16:38:17.965305 2026] [:error] [pid 8908:tid 8921] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Wed Apr 01 16:38:18.289878 2026] [:error] [pid 8908:tid 8935] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Wed Apr 01 16:38:18.574991 2026] [:error] [pid 8908:tid 8934] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/h02ugyh.php
[Wed Apr 01 16:38:18.895590 2026] [:error] [pid 8908:tid 8926] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/ad.php
[Wed Apr 01 16:38:19.137014 2026] [:error] [pid 8908:tid 8936] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Wed Apr 01 16:38:19.434572 2026] [:error] [pid 8908:tid 8931] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Wed Apr 01 16:38:19.996462 2026] [:error] [pid 8908:tid 8928] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Wed Apr 01 16:38:20.244836 2026] [:error] [pid 8908:tid 8914] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Wed Apr 01 16:38:20.777564 2026] [:error] [pid 8908:tid 8923] [client 51.103.96.231:12217] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Apr 01 16:38:21.109198 2026] [:error] [pid 8908:tid 8918] [client 51.103.96.231:12217] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aczZffkmxtJXGnLdvgAORwAAAIU"]
[Wed Apr 01 16:38:23.141764 2026] [:error] [pid 8908:tid 8927] [client 51.103.96.231:2664] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aczZf_kmxtJXGnLdvgAOSwAAAI4"]
[Wed Apr 01 16:38:26.200100 2026] [:error] [pid 8995:tid 9021] [client 51.103.96.231:16102] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aczZguonaBjs3qxcRed3kwAAABc"]
[Wed Apr 01 16:38:27.483764 2026] [:error] [pid 8909:tid 8945] [client 51.103.96.231:21865] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aczZgzvP_a0662gDl6Dk8AAAAMQ"]
[Wed Apr 01 16:38:29.206519 2026] [:error] [pid 17856:tid 17879] [client 51.103.96.231:21884] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aczZhT7Idlm5j9frhqSNwAAAAFU"]
[Wed Apr 01 16:38:30.025818 2026] [:error] [pid 17856:tid 17858] [client 51.103.96.231:11655] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aczZhj7Idlm5j9frhqSNxAAAAEA"]
[Wed Apr 01 16:38:30.670414 2026] [:error] [pid 17856:tid 17872] [client 51.103.96.231:25185] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aczZhj7Idlm5j9frhqSNygAAAE4"]
[Wed Apr 01 16:38:31.296657 2026] [:error] [pid 8995:tid 9010] [client 51.103.96.231:21865] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aczZh-onaBjs3qxcRed3ngAAAAw"]
[Wed Apr 01 16:38:32.165027 2026] [:error] [pid 17856:tid 17878] [client 51.103.96.231:18474] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "aczZiD7Idlm5j9frhqSN0gAAAFQ"]
[Wed Apr 01 16:38:32.967789 2026] [:error] [pid 8910:tid 8972] [client 51.103.96.231:18528] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "aczZiKJZINUcF3tYgEweUAAAAQQ"]
[Wed Apr 01 16:38:33.669150 2026] [:error] [pid 8909:tid 8944] [client 51.103.96.231:18548] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "aczZiTvP_a0662gDl6Dk-AAAAMM"]
[Wed Apr 01 16:38:34.255684 2026] [:error] [pid 8909:tid 8951] [client 51.103.96.231:27119] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uang.php"] [unique_id "aczZijvP_a0662gDl6Dk-QAAAMo"]
[Wed Apr 01 16:38:35.021149 2026] [:error] [pid 8908:tid 8925] [client 51.103.96.231:11422] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "aczZi_kmxtJXGnLdvgAOZwAAAIw"]
[Wed Apr 01 16:38:36.124117 2026] [:error] [pid 8909:tid 8947] [client 51.103.96.231:12246] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "aczZjDvP_a0662gDl6Dk_wAAAMY"]
[Wed Apr 01 16:38:37.485352 2026] [:error] [pid 17856:tid 17877] [client 51.103.96.231:17259] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "aczZjT7Idlm5j9frhqSN1gAAAFM"]
[Wed Apr 01 16:38:38.426393 2026] [:error] [pid 8995:tid 9011] [client 51.103.96.231:11450] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/save.php"] [unique_id "aczZjuonaBjs3qxcRed3rQAAAA0"]
[Wed Apr 01 16:38:39.578114 2026] [:error] [pid 17856:tid 17862] [client 51.103.96.231:31124] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aczZjz7Idlm5j9frhqSN2gAAAEQ"]
[Wed Apr 01 16:38:40.318416 2026] [:error] [pid 8910:tid 8982] [client 51.103.96.231:27305] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aczZkKJZINUcF3tYgEweXQAAAQ4"]
[Wed Apr 01 16:38:41.079214 2026] [:error] [pid 8908:tid 8922] [client 51.103.96.231:18768] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aczZkfkmxtJXGnLdvgAOdgAAAIk"]
[Wed Apr 01 16:38:42.088704 2026] [:error] [pid 17856:tid 17877] [client 51.103.96.231:2705] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aczZkj7Idlm5j9frhqSN4wAAAFM"]
[Wed Apr 01 16:38:42.804632 2026] [:error] [pid 17856:tid 17882] [client 51.103.96.231:21352] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aczZkj7Idlm5j9frhqSN6AAAAFg"]
[Wed Apr 01 16:38:43.697799 2026] [:error] [pid 8910:tid 8970] [client 51.103.96.231:25183] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aczZk6JZINUcF3tYgEweXwAAAQI"]
[Wed Apr 01 16:38:44.590672 2026] [:error] [pid 17856:tid 17876] [client 51.103.96.231:25182] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aczZlD7Idlm5j9frhqSN7gAAAFI"]
[Wed Apr 01 16:38:45.409064 2026] [:error] [pid 8908:tid 8930] [client 51.103.96.231:35548] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aczZlfkmxtJXGnLdvgAOegAAAJE"]
[Wed Apr 01 16:38:46.362312 2026] [:error] [pid 8909:tid 8956] [client 51.103.96.231:21880] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aczZljvP_a0662gDl6DlDgAAAM8"]
[Wed Apr 01 16:38:47.385751 2026] [:error] [pid 8995:tid 9014] [client 51.103.96.231:31445] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aczZl-onaBjs3qxcRed3vgAAABA"]
[Wed Apr 01 16:38:48.733785 2026] [:error] [pid 8995:tid 9017] [client 51.103.96.231:31159] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aczZmOonaBjs3qxcRed3wQAAABM"]
[Wed Apr 01 16:38:49.622335 2026] [:error] [pid 17856:tid 17866] [client 51.103.96.231:21826] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aczZmT7Idlm5j9frhqSN-QAAAEg"]
[Wed Apr 01 16:38:50.286654 2026] [:error] [pid 8908:tid 8919] [client 51.103.96.231:15795] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aczZmvkmxtJXGnLdvgAOhwAAAIY"]
[Wed Apr 01 16:38:52.592819 2026] [:error] [pid 8909:tid 8945] [client 51.103.96.231:2705] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aczZnDvP_a0662gDl6DlGgAAAMQ"]
[Wed Apr 01 16:38:54.825663 2026] [:error] [pid 8909:tid 8951] [client 51.103.96.231:18459] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aczZnjvP_a0662gDl6DlIwAAAMo"]
[Wed Apr 01 16:38:56.056924 2026] [:error] [pid 17856:tid 17881] [client 51.103.96.231:31164] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aczZoD7Idlm5j9frhqSOEAAAAFc"]
[Wed Apr 01 16:38:59.121243 2026] [:error] [pid 8995:tid 9012] [client 51.103.96.231:15792] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aczZo-onaBjs3qxcRed30QAAAA4"]
[Wed Apr 01 16:39:44.743588 2026] [:error] [pid 8909:tid 8951] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Wed Apr 01 16:39:45.051962 2026] [:error] [pid 8909:tid 8956] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed Apr 01 16:39:45.549462 2026] [:error] [pid 8909:tid 8960] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Wed Apr 01 16:39:45.787123 2026] [:error] [pid 8909:tid 8947] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/xpwer1.php
[Wed Apr 01 16:39:46.097656 2026] [:error] [pid 8909:tid 8944] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/ws40.php
[Wed Apr 01 16:39:46.336986 2026] [:error] [pid 8909:tid 8949] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Wed Apr 01 16:39:46.655767 2026] [:error] [pid 8909:tid 8948] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Wed Apr 01 16:39:46.944983 2026] [:error] [pid 8909:tid 8961] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Wed Apr 01 16:39:47.225624 2026] [:error] [pid 8909:tid 8952] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scanner.php
[Wed Apr 01 16:39:47.627078 2026] [:error] [pid 8909:tid 8957] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Wed Apr 01 16:39:48.922081 2026] [:error] [pid 8909:tid 8957] [client 51.103.96.231:23829] File does not exist: /usr/local/apache/htdocs/suspended-page/to.php
[Wed Apr 01 16:39:49.236471 2026] [:error] [pid 8909:tid 8945] [client 51.103.96.231:23829] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aczZ1TvP_a0662gDl6Dl5QAAAMQ"]
[Wed Apr 01 16:39:50.028193 2026] [:error] [pid 17856:tid 17869] [client 51.103.96.231:16683] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aczZ1j7Idlm5j9frhqSO_gAAAEs"]
[Wed Apr 01 16:39:51.144832 2026] [:error] [pid 62559:tid 62579] [client 51.103.96.231:16644] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aczZ1y7NKI8IaNKZFIc_aQAAAVI"]
[Wed Apr 01 16:39:52.114114 2026] [:error] [pid 8909:tid 8962] [client 51.103.96.231:29689] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aczZ2DvP_a0662gDl6Dl-QAAANU"]
[Wed Apr 01 16:39:52.798943 2026] [:error] [pid 8909:tid 8943] [client 51.103.96.231:12729] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aczZ2DvP_a0662gDl6Dl-wAAAMI"]
[Wed Apr 01 16:39:53.703078 2026] [:error] [pid 8909:tid 8948] [client 51.103.96.231:29692] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aczZ2TvP_a0662gDl6Dl_wAAAMc"]
[Wed Apr 01 16:39:54.860839 2026] [:error] [pid 8909:tid 8949] [client 51.103.96.231:34569] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aczZ2jvP_a0662gDl6DmBwAAAMg"]
[Wed Apr 01 16:39:55.702590 2026] [:error] [pid 8908:tid 8928] [client 51.103.96.231:34616] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "aczZ2_kmxtJXGnLdvgAPDAAAAI8"]
[Wed Apr 01 16:39:57.183652 2026] [:error] [pid 8995:tid 9010] [client 51.103.96.231:29365] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aczZ3eonaBjs3qxcRed4ZgAAAAw"]
[Wed Apr 01 16:39:59.103861 2026] [:error] [pid 8908:tid 8923] [client 51.103.96.231:22823] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aczZ3_kmxtJXGnLdvgAPFAAAAIo"]
[Wed Apr 01 16:40:00.858162 2026] [:error] [pid 8909:tid 8964] [client 51.103.96.231:34273] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aczZ4DvP_a0662gDl6DmKQAAANc"]
[Wed Apr 01 16:40:02.276157 2026] [:error] [pid 8995:tid 9011] [client 51.103.96.231:27623] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aczZ4uonaBjs3qxcRed4awAAAA0"]
[Wed Apr 01 16:40:03.905859 2026] [:error] [pid 8910:tid 8990] [client 51.103.96.231:2500] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aczZ46JZINUcF3tYgEwe0gAAARY"]
[Wed Apr 01 16:40:05.618527 2026] [:error] [pid 17856:tid 17861] [client 51.103.96.231:19738] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aczZ5T7Idlm5j9frhqSPBgAAAEM"]
[Wed Apr 01 16:40:06.487904 2026] [:error] [pid 8995:tid 9020] [client 51.103.96.231:19983] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aczZ5uonaBjs3qxcRed4bwAAABY"]
[Wed Apr 01 16:40:07.520884 2026] [:error] [pid 17856:tid 17875] [client 51.103.96.231:27556] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aczZ5z7Idlm5j9frhqSPCgAAAFE"]
[Wed Apr 01 16:40:08.518974 2026] [:error] [pid 8909:tid 8944] [client 51.103.96.231:3043] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aczZ6DvP_a0662gDl6DmPgAAAMM"]
[Wed Apr 01 16:40:09.155124 2026] [:error] [pid 8909:tid 8946] [client 51.103.96.231:35569] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aczZ6TvP_a0662gDl6DmQAAAAMU"]
[Wed Apr 01 16:40:10.429522 2026] [:error] [pid 8909:tid 8960] [client 51.103.96.231:2496] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aczZ6jvP_a0662gDl6DmRgAAANM"]
[Wed Apr 01 16:40:12.104153 2026] [:error] [pid 17856:tid 17872] [client 51.103.96.231:19717] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "aczZ7D7Idlm5j9frhqSPFwAAAE4"]
[Wed Apr 01 16:40:13.393985 2026] [:error] [pid 8909:tid 8948] [client 51.103.96.231:35526] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aczZ7TvP_a0662gDl6DmUgAAAMc"]
[Wed Apr 01 16:40:14.199979 2026] [:error] [pid 8908:tid 8929] [client 51.103.96.231:30434] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aczZ7vkmxtJXGnLdvgAPLgAAAJA"]
[Wed Apr 01 16:40:15.217468 2026] [:error] [pid 17856:tid 17864] [client 51.103.96.231:30456] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aczZ7z7Idlm5j9frhqSPHwAAAEY"]
[Wed Apr 01 16:40:16.154647 2026] [:error] [pid 8910:tid 8991] [client 51.103.96.231:21557] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "aczZ8KJZINUcF3tYgEwe4gAAARc"]
[Wed Apr 01 16:40:16.926730 2026] [:error] [pid 8908:tid 8937] [client 51.103.96.231:2619] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aczZ8PkmxtJXGnLdvgAPMgAAAJg"]
[Wed Apr 01 16:40:17.829397 2026] [:error] [pid 17856:tid 17863] [client 51.103.96.231:16325] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aczZ8T7Idlm5j9frhqSPJwAAAEU"]
[Wed Apr 01 16:40:18.592475 2026] [:error] [pid 8910:tid 8986] [client 51.103.96.231:25431] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aczZ8qJZINUcF3tYgEwe6wAAARI"]
[Wed Apr 01 16:40:19.300930 2026] [:error] [pid 62559:tid 62575] [client 51.103.96.231:16668] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aczZ8y7NKI8IaNKZFIc_dAAAAU4"]
[Wed Apr 01 16:40:20.214514 2026] [:error] [pid 8995:tid 9010] [client 51.103.96.231:15510] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "aczZ9OonaBjs3qxcRed4dgAAAAw"]
[Wed Apr 01 16:40:20.985733 2026] [:error] [pid 8910:tid 8988] [client 51.103.96.231:19713] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "aczZ9KJZINUcF3tYgEwe7QAAARQ"]
[Wed Apr 01 16:40:21.751460 2026] [:error] [pid 17856:tid 17862] [client 51.103.96.231:2609] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "aczZ9T7Idlm5j9frhqSPVwAAAEQ"]
[Wed Apr 01 16:40:22.625928 2026] [:error] [pid 8910:tid 8987] [client 51.103.96.231:15020] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws43.php"] [unique_id "aczZ9qJZINUcF3tYgEwe8gAAARM"]
[Wed Apr 01 16:40:23.430809 2026] [:error] [pid 8995:tid 9017] [client 51.103.96.231:30204] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aczZ9-onaBjs3qxcRed4eAAAABM"]
[Wed Apr 01 16:40:24.303600 2026] [:error] [pid 8995:tid 8998] [client 51.103.96.231:24394] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aczZ-OonaBjs3qxcRed4egAAAAA"]
[Wed Apr 01 16:40:25.226123 2026] [:error] [pid 17856:tid 17861] [client 51.103.96.231:15012] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aczZ-T7Idlm5j9frhqSPXgAAAEM"]
[Wed Apr 01 16:40:25.936178 2026] [:error] [pid 8908:tid 8918] [client 51.103.96.231:24436] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gec.php"] [unique_id "aczZ-fkmxtJXGnLdvgAPSQAAAIU"]
[Wed Apr 01 16:40:26.806624 2026] [:error] [pid 8908:tid 8922] [client 51.103.96.231:16698] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aczZ-vkmxtJXGnLdvgAPTwAAAIk"]
[Wed Apr 01 16:40:27.695853 2026] [:error] [pid 8908:tid 8923] [client 51.103.96.231:19314] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aczZ-_kmxtJXGnLdvgAPUQAAAIo"]
[Wed Apr 01 16:40:28.381100 2026] [:error] [pid 8908:tid 8917] [client 51.103.96.231:29632] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aczZ_PkmxtJXGnLdvgAPVwAAAIQ"]
[Wed Apr 01 16:40:29.756508 2026] [:error] [pid 17856:tid 17876] [client 51.103.96.231:35540] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aczZ_T7Idlm5j9frhqSPZQAAAFI"]
[Wed Apr 01 16:40:30.639788 2026] [:error] [pid 17856:tid 17868] [client 51.103.96.231:19045] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aczZ_j7Idlm5j9frhqSPaQAAAEo"]
[Wed Apr 01 16:40:31.531170 2026] [:error] [pid 17856:tid 17866] [client 51.103.96.231:16656] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aczZ_z7Idlm5j9frhqSPbwAAAEg"]
[Wed Apr 01 16:40:32.349085 2026] [:error] [pid 17856:tid 17862] [client 51.103.96.231:10418] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aczaAD7Idlm5j9frhqSPcgAAAEQ"]
[Wed Apr 01 16:40:33.186069 2026] [:error] [pid 8909:tid 8946] [client 51.103.96.231:24443] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aczaATvP_a0662gDl6DmigAAAMU"]
[Wed Apr 01 16:40:34.755752 2026] [:error] [pid 8909:tid 8955] [client 51.103.96.231:30678] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "aczaAjvP_a0662gDl6DmjgAAAM4"]
[Wed Apr 01 16:40:35.675478 2026] [:error] [pid 8908:tid 8915] [client 51.103.96.231:19739] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "aczaA_kmxtJXGnLdvgAPYAAAAII"]
[Wed Apr 01 16:40:37.114642 2026] [:error] [pid 8909:tid 8955] [client 51.103.96.231:2225] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "aczaBTvP_a0662gDl6DmmQAAAM4"]
[Wed Apr 01 16:40:38.110172 2026] [:error] [pid 8910:tid 8989] [client 51.103.96.231:31940] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/size.php"] [unique_id "aczaBqJZINUcF3tYgEwfAAAAARU"]
[Wed Apr 01 16:40:38.737628 2026] [:error] [pid 8995:tid 9004] [client 51.103.96.231:18024] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aczaBuonaBjs3qxcRed4iQAAAAY"]
[Wed Apr 01 16:40:39.802388 2026] [:error] [pid 62559:tid 62585] [client 51.103.96.231:19254] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aczaBy7NKI8IaNKZFIc_ggAAAVg"]
[Wed Apr 01 16:40:40.624215 2026] [:error] [pid 8909:tid 8960] [client 51.103.96.231:14986] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aczaCDvP_a0662gDl6DmqAAAANM"]
[Wed Apr 01 16:40:41.402990 2026] [:error] [pid 8910:tid 8988] [client 51.103.96.231:16645] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aczaCaJZINUcF3tYgEwfAgAAARQ"]
[Wed Apr 01 16:40:42.168673 2026] [:error] [pid 8909:tid 8964] [client 51.103.96.231:18047] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aczaCjvP_a0662gDl6DmrQAAANc"]
[Wed Apr 01 16:40:42.904221 2026] [:error] [pid 8908:tid 8933] [client 51.103.96.231:34275] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aczaCvkmxtJXGnLdvgAPZwAAAJQ"]
[Wed Apr 01 16:40:43.735768 2026] [:error] [pid 8995:tid 9002] [client 51.103.96.231:29695] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aczaC-onaBjs3qxcRed4kwAAAAQ"]
[Wed Apr 01 16:40:44.635202 2026] [:error] [pid 8909:tid 8953] [client 51.103.96.231:27896] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aczaDDvP_a0662gDl6DmvAAAAMw"]
[Wed Apr 01 16:40:45.746163 2026] [:error] [pid 62559:tid 62567] [client 51.103.96.231:17754] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aczaDS7NKI8IaNKZFIc_hQAAAUY"]
[Wed Apr 01 16:40:46.634579 2026] [:error] [pid 17856:tid 17868] [client 51.103.96.231:29633] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aczaDj7Idlm5j9frhqSPiQAAAEo"]
[Wed Apr 01 16:40:47.280077 2026] [:error] [pid 8909:tid 8948] [client 51.103.96.231:16667] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aczaDzvP_a0662gDl6DmvwAAAMc"]
[Wed Apr 01 16:40:48.383253 2026] [:error] [pid 62559:tid 62575] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Wed Apr 01 16:40:48.759832 2026] [:error] [pid 62559:tid 62583] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Apr 01 16:40:49.071652 2026] [:error] [pid 62559:tid 62576] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Wed Apr 01 16:40:49.406066 2026] [:error] [pid 62559:tid 62582] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Wed Apr 01 16:40:49.991565 2026] [:error] [pid 62559:tid 62572] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Wed Apr 01 16:40:50.987032 2026] [:error] [pid 62559:tid 62570] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Wed Apr 01 16:40:51.359464 2026] [:error] [pid 62559:tid 62566] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Wed Apr 01 16:40:52.070614 2026] [:error] [pid 62559:tid 62562] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp3.php
[Wed Apr 01 16:40:52.395942 2026] [:error] [pid 62559:tid 62584] [client 51.103.96.231:2615] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Wed Apr 01 16:40:53.085011 2026] [:error] [pid 62559:tid 62573] [client 51.103.96.231:2615] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aczaFS7NKI8IaNKZFIc_lQAAAUw"]
[Wed Apr 01 16:40:54.124902 2026] [:error] [pid 8910:tid 8968] [client 51.103.96.231:34984] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aczaFqJZINUcF3tYgEwfCgAAAQA"]
[Wed Apr 01 16:40:55.373850 2026] [:error] [pid 8909:tid 8944] [client 51.103.96.231:2599] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aczaFzvP_a0662gDl6Dm2QAAAMM"]
[Wed Apr 01 16:40:56.373507 2026] [:error] [pid 8995:tid 9019] [client 51.103.96.231:19046] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "aczaGOonaBjs3qxcRed4qQAAABU"]
[Wed Apr 01 16:40:57.214952 2026] [:error] [pid 8909:tid 8950] [client 51.103.96.231:34957] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aczaGTvP_a0662gDl6Dm4gAAAMk"]
[Wed Apr 01 16:40:58.905896 2026] [:error] [pid 8910:tid 8975] [client 51.103.96.231:10427] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aczaGqJZINUcF3tYgEwfFgAAAQc"]
[Wed Apr 01 16:40:59.800802 2026] [:error] [pid 62559:tid 62574] [client 51.103.96.231:20807] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aczaGy7NKI8IaNKZFIc_ogAAAU0"]
[Wed Apr 01 16:41:01.384362 2026] [:error] [pid 8909:tid 8964] [client 51.103.96.231:10414] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d2.php"] [unique_id "aczaHTvP_a0662gDl6Dm5gAAANc"]
[Wed Apr 01 16:41:04.013680 2026] [:error] [pid 8909:tid 8959] [client 51.103.96.231:25347] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aczaIDvP_a0662gDl6Dm7wAAANI"]
[Wed Apr 01 16:41:04.982943 2026] [:error] [pid 8908:tid 8919] [client 51.103.96.231:30863] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aczaIPkmxtJXGnLdvgAPjAAAAIY"]
[Wed Apr 01 16:41:06.111412 2026] [:error] [pid 8909:tid 8962] [client 51.103.96.231:26554] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aczaIjvP_a0662gDl6Dm9QAAANU"]
[Wed Apr 01 16:41:07.165527 2026] [:error] [pid 17856:tid 17877] [client 51.103.96.231:24374] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xc.php"] [unique_id "aczaIz7Idlm5j9frhqSQIwAAAFM"]
[Wed Apr 01 16:41:07.872375 2026] [:error] [pid 17856:tid 17871] [client 51.103.96.231:25360] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aczaIz7Idlm5j9frhqSQKgAAAE0"]
[Wed Apr 01 16:41:08.533436 2026] [:error] [pid 62559:tid 62565] [client 51.103.96.231:16664] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aczaJC7NKI8IaNKZFIc_qwAAAUQ"]
[Wed Apr 01 16:41:09.110354 2026] [:error] [pid 8909:tid 8953] [client 51.103.96.231:16675] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aczaJTvP_a0662gDl6Dm-gAAAMw"]
[Wed Apr 01 16:41:09.862596 2026] [:error] [pid 17856:tid 17866] [client 51.103.96.231:2589] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aczaJT7Idlm5j9frhqSQLAAAAEg"]
[Wed Apr 01 16:41:10.428575 2026] [:error] [pid 17856:tid 17858] [client 51.103.96.231:3013] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aczaJj7Idlm5j9frhqSQLQAAAEA"]
[Wed Apr 01 16:41:11.212886 2026] [:error] [pid 8909:tid 8954] [client 51.103.96.231:26556] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aczaJzvP_a0662gDl6DnAgAAAM0"]
[Wed Apr 01 16:41:11.877293 2026] [:error] [pid 8909:tid 8955] [client 51.103.96.231:19772] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aczaJzvP_a0662gDl6DnBwAAAM4"]
[Wed Apr 01 16:41:12.452671 2026] [:error] [pid 8995:tid 8999] [client 51.103.96.231:34392] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "aczaKOonaBjs3qxcRed4uQAAAAE"]
[Wed Apr 01 16:41:13.221038 2026] [:error] [pid 8995:tid 9009] [client 51.103.96.231:24399] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aczaKeonaBjs3qxcRed4ugAAAAs"]
[Wed Apr 01 16:41:13.934820 2026] [:error] [pid 17856:tid 17881] [client 51.103.96.231:24384] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aczaKT7Idlm5j9frhqSQPQAAAFc"]
[Wed Apr 01 16:41:14.944948 2026] [:error] [pid 62559:tid 62585] [client 51.103.96.231:34241] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aczaKi7NKI8IaNKZFIc_sgAAAVg"]
[Wed Apr 01 16:41:15.744993 2026] [:error] [pid 8995:tid 9014] [client 51.103.96.231:30861] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aczaK-onaBjs3qxcRed4vgAAABA"]
[Wed Apr 01 16:41:16.617468 2026] [:error] [pid 8910:tid 8983] [client 51.103.96.231:34410] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aczaLKJZINUcF3tYgEwfKQAAAQ8"]
[Wed Apr 01 16:41:19.651053 2026] [:error] [pid 62559:tid 62577] [client 51.103.96.231:35529] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aczaLy7NKI8IaNKZFIc_ugAAAVA"]
[Wed Apr 01 16:41:20.496523 2026] [:error] [pid 17856:tid 17867] [client 51.103.96.231:30878] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aczaMD7Idlm5j9frhqSQUwAAAEk"]
[Wed Apr 01 16:41:21.613826 2026] [:error] [pid 8909:tid 8959] [client 51.103.96.231:10410] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/20.php"] [unique_id "aczaMTvP_a0662gDl6DnKwAAANI"]
[Wed Apr 01 16:41:22.653155 2026] [:error] [pid 8909:tid 8948] [client 51.103.96.231:16700] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aczaMjvP_a0662gDl6DnMQAAAMc"]
[Wed Apr 01 16:41:23.768675 2026] [:error] [pid 8995:tid 9014] [client 51.103.96.231:26287] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aczaM-onaBjs3qxcRed4ygAAABA"]
[Wed Apr 01 16:41:25.064703 2026] [:error] [pid 8995:tid 9015] [client 51.103.96.231:34262] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aczaNeonaBjs3qxcRed4zQAAABE"]
[Wed Apr 01 16:41:26.235496 2026] [:error] [pid 62559:tid 62580] [client 51.103.96.231:25364] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aczaNi7NKI8IaNKZFIc_wQAAAVM"]
[Wed Apr 01 16:41:26.982367 2026] [:error] [pid 17856:tid 17876] [client 51.103.96.231:2802] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aczaNj7Idlm5j9frhqSQYQAAAFI"]
[Wed Apr 01 16:41:28.134442 2026] [:error] [pid 62559:tid 62569] [client 51.103.96.231:16682] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aczaOC7NKI8IaNKZFIc_yAAAAUg"]
[Wed Apr 01 16:41:28.815253 2026] [:error] [pid 8909:tid 8964] [client 51.103.96.231:26279] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aczaODvP_a0662gDl6DnTwAAANc"]
[Wed Apr 01 16:41:29.505538 2026] [:error] [pid 17856:tid 17880] [client 51.103.96.231:24926] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c.php"] [unique_id "aczaOT7Idlm5j9frhqSQcAAAAFY"]
[Wed Apr 01 16:41:30.203408 2026] [:error] [pid 17856:tid 17872] [client 51.103.96.231:10385] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aczaOj7Idlm5j9frhqSQdAAAAE4"]
[Wed Apr 01 16:41:31.193597 2026] [:error] [pid 8909:tid 8961] [client 51.103.96.231:26752] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aczaOzvP_a0662gDl6DnWAAAANQ"]
[Wed Apr 01 16:41:31.910206 2026] [:error] [pid 62559:tid 62574] [client 51.103.96.231:10386] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aczaOy7NKI8IaNKZFIc_zQAAAU0"]
[Wed Apr 01 16:41:33.010034 2026] [:error] [pid 8910:tid 8971] [client 51.103.96.231:3033] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "aczaPaJZINUcF3tYgEwfOQAAAQM"]
[Wed Apr 01 16:41:34.290968 2026] [:error] [pid 17856:tid 17869] [client 51.103.96.231:19744] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aczaPj7Idlm5j9frhqSQhwAAAEs"]
[Wed Apr 01 16:41:35.158303 2026] [:error] [pid 17856:tid 17876] [client 51.103.96.231:24950] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aczaPz7Idlm5j9frhqSQjwAAAFI"]
[Wed Apr 01 16:41:36.236959 2026] [:error] [pid 8909:tid 8943] [client 51.103.96.231:19746] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aczaQDvP_a0662gDl6DnYgAAAMI"]
[Wed Apr 01 16:41:37.157968 2026] [:error] [pid 8909:tid 8957] [client 51.103.96.231:34293] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "aczaQTvP_a0662gDl6DnZgAAANA"]
[Wed Apr 01 16:41:38.010882 2026] [:error] [pid 8909:tid 8946] [client 51.103.96.231:31182] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aczaQjvP_a0662gDl6DnagAAAMU"]
[Wed Apr 01 16:41:38.907647 2026] [:error] [pid 8909:tid 8952] [client 51.103.96.231:19764] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aczaQjvP_a0662gDl6DncQAAAMs"]
[Wed Apr 01 16:41:40.136818 2026] [:error] [pid 8909:tid 8962] [client 51.103.96.231:25185] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aczaRDvP_a0662gDl6DndwAAANU"]
[Wed Apr 01 16:41:43.714033 2026] [:error] [pid 62559:tid 62582] [client 51.103.96.231:26269] [client 51.103.96.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "aczaRy7NKI8IaNKZFIc_3QAAAVU"]
[Wed Apr 01 21:34:50.220657 2026] [:error] [pid 17856:tid 17860] [client 3.96.171.193:60762] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "ac0e-j7Idlm5j9frhqRGdAAAAEI"]
[Wed Apr 01 21:34:51.088206 2026] [:error] [pid 17856:tid 17862] [client 3.96.171.193:60852] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "ac0e-z7Idlm5j9frhqRGegAAAEQ"]
[Wed Apr 01 21:34:51.963129 2026] [:error] [pid 8909:tid 8951] [client 3.96.171.193:60898] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "ac0e-zvP_a0662gDl6DdtAAAAMo"]
[Wed Apr 01 21:34:52.830534 2026] [:error] [pid 17856:tid 17876] [client 3.96.171.193:60998] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.staging"] [unique_id "ac0e_D7Idlm5j9frhqRGhwAAAFI"]
[Wed Apr 01 21:34:53.697078 2026] [:error] [pid 8909:tid 8946] [client 3.96.171.193:32846] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "ac0e_TvP_a0662gDl6DdugAAAMU"]
[Wed Apr 01 21:34:54.563648 2026] [:error] [pid 8995:tid 9006] [client 3.96.171.193:32908] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.test"] [unique_id "ac0e_uonaBjs3qxcRefSaQAAAAg"]
[Wed Apr 01 21:34:55.434589 2026] [:error] [pid 8909:tid 8958] [client 3.96.171.193:32962] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.remote"] [unique_id "ac0e_zvP_a0662gDl6DdvgAAANE"]
[Wed Apr 01 21:34:56.306075 2026] [:error] [pid 8910:tid 8984] [client 3.96.171.193:33016] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "ac0fAKJZINUcF3tYgExpAAAAARA"]
[Wed Apr 01 21:34:57.175302 2026] [:error] [pid 8909:tid 8957] [client 3.96.171.193:33078] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.backup"] [unique_id "ac0fATvP_a0662gDl6DdyAAAANA"]
[Wed Apr 01 21:34:58.043746 2026] [:error] [pid 17856:tid 17872] [client 3.96.171.193:33132] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.save"] [unique_id "ac0fAj7Idlm5j9frhqRGoQAAAE4"]
[Wed Apr 01 21:34:58.914877 2026] [:error] [pid 17856:tid 17878] [client 3.96.171.193:33188] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.old"] [unique_id "ac0fAj7Idlm5j9frhqRGqQAAAFQ"]
[Wed Apr 01 21:34:59.784360 2026] [:error] [pid 17856:tid 17880] [client 3.96.171.193:33220] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.sample"] [unique_id "ac0fAz7Idlm5j9frhqRGqwAAAFY"]
[Wed Apr 01 21:35:00.653439 2026] [:error] [pid 8909:tid 8951] [client 3.96.171.193:33260] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/vendor/.env"] [unique_id "ac0fBDvP_a0662gDl6Dd0gAAAMo"]
[Wed Apr 01 21:35:01.522785 2026] [:error] [pid 17856:tid 17874] [client 3.96.171.193:33300] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/lib/.env"] [unique_id "ac0fBT7Idlm5j9frhqRGsQAAAFA"]
[Wed Apr 01 21:35:02.391386 2026] [:error] [pid 8909:tid 8943] [client 3.96.171.193:33366] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/lab/.env"] [unique_id "ac0fBjvP_a0662gDl6Dd3gAAAMI"]
[Wed Apr 01 21:35:03.259001 2026] [:error] [pid 17856:tid 17879] [client 3.96.171.193:33432] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/cronlab/.env"] [unique_id "ac0fBz7Idlm5j9frhqRGugAAAFU"]
[Wed Apr 01 21:35:04.129137 2026] [:error] [pid 8909:tid 8943] [client 3.96.171.193:33488] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/cron/.env"] [unique_id "ac0fCDvP_a0662gDl6Dd6gAAAMI"]
[Wed Apr 01 21:35:04.996425 2026] [:error] [pid 17856:tid 17866] [client 3.96.171.193:33558] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/core/.env"] [unique_id "ac0fCD7Idlm5j9frhqRGwAAAAEg"]
[Wed Apr 01 21:35:05.865147 2026] [:error] [pid 17856:tid 17875] [client 3.96.171.193:33600] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/core/app/.env"] [unique_id "ac0fCT7Idlm5j9frhqRGzAAAAFE"]
[Wed Apr 01 21:35:06.734295 2026] [:error] [pid 8995:tid 9017] [client 3.96.171.193:33662] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/core/Datavase/.env"] [unique_id "ac0fCuonaBjs3qxcRefSbwAAABM"]
[Wed Apr 01 21:35:07.602513 2026] [:error] [pid 8995:tid 9011] [client 3.96.171.193:33722] [client 3.96.171.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/database/.env"] [unique_id "ac0fC-onaBjs3qxcRefScAAAAA0"]
[Thu Apr 02 02:35:32.657099 2026] [:error] [pid 8035:tid 8058] [client 122.51.236.174:59832] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac1ldAY2zflwGmvw_Qb_NQAAAJI"]
[Thu Apr 02 03:38:56.579847 2026] [:error] [pid 59201:tid 59277] [client 85.107.88.216:61893] [client 85.107.88.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.107.88.216, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ac10UMAC0Tw8eL6gzZ5O5QAAAIo"]
[Thu Apr 02 03:38:56.587717 2026] [:error] [pid 59201:tid 59277] [client 85.107.88.216:61893] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 02 03:45:32.994982 2026] [:error] [pid 59305:tid 59327] [client 178.253.99.129:64629] [client 178.253.99.129] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.253.99.129, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ac113Kr2tV4rDwKFxKfsFwAAANI"]
[Thu Apr 02 03:45:32.999641 2026] [:error] [pid 59305:tid 59327] [client 178.253.99.129:64629] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 02 05:30:51.303523 2026] [:error] [pid 37543:tid 37559] [client 43.153.123.3:50554] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ac2Oi3hdk2bEYJCvILYBswAAAU4"]
[Thu Apr 02 06:24:03.870550 2026] [:error] [pid 37543:tid 37565] [client 130.49.77.156:59301] [client 130.49.77.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 130.49.77.156, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ac2bA3hdk2bEYJCvILYipQAAAVQ"]
[Thu Apr 02 06:24:03.874632 2026] [:error] [pid 37543:tid 37565] [client 130.49.77.156:59301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Apr 02 09:32:52.859412 2026] [:error] [pid 59201:tid 59288] [client 43.157.181.189:58630] [client 43.157.181.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac3HRMAC0Tw8eL6gzZ6sqQAAAJU"]
[Thu Apr 02 15:28:51.698546 2026] [:error] [pid 29467:tid 29491] [client 170.106.35.187:59096] [client 170.106.35.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac4as74VUBFCJAq-WOm_XgAAARU"]
[Thu Apr 02 16:46:12.483307 2026] [:error] [pid 59200:tid 59256] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Thu Apr 02 16:46:12.740743 2026] [:error] [pid 59200:tid 59242] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Thu Apr 02 16:46:13.020306 2026] [:error] [pid 59200:tid 59262] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Thu Apr 02 16:46:13.263336 2026] [:error] [pid 59200:tid 59249] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 02 16:46:13.546436 2026] [:error] [pid 59200:tid 59251] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 02 16:46:13.796151 2026] [:error] [pid 59200:tid 59245] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu Apr 02 16:46:14.082756 2026] [:error] [pid 59200:tid 59260] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Thu Apr 02 16:46:15.978892 2026] [:error] [pid 59200:tid 59260] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Thu Apr 02 16:46:16.261758 2026] [:error] [pid 59200:tid 59247] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Thu Apr 02 16:46:16.550192 2026] [:error] [pid 59200:tid 59258] [client 68.221.136.149:2408] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Thu Apr 02 16:46:16.811133 2026] [:error] [pid 59200:tid 59263] [client 68.221.136.149:2408] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "ac4s2LfP26txrdLs3EpOdQAAAFc"]
[Thu Apr 02 16:46:17.559313 2026] [:error] [pid 29467:tid 29482] [client 68.221.136.149:28528] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "ac4s2b4VUBFCJAq-WOnuzgAAAQw"]
[Thu Apr 02 16:46:18.266484 2026] [:error] [pid 23927:tid 23944] [client 68.221.136.149:2591] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "ac4s2ksZwqCndhl9uKBgDQAAAY8"]
[Thu Apr 02 16:46:18.868135 2026] [:error] [pid 29467:tid 29492] [client 68.221.136.149:10805] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "ac4s2r4VUBFCJAq-WOnu1AAAARY"]
[Thu Apr 02 16:46:19.489033 2026] [:error] [pid 29467:tid 29482] [client 68.221.136.149:48386] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "ac4s274VUBFCJAq-WOnu2gAAAQw"]
[Thu Apr 02 16:46:20.163102 2026] [:error] [pid 23927:tid 23941] [client 68.221.136.149:60153] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "ac4s3EsZwqCndhl9uKBgFgAAAYw"]
[Thu Apr 02 16:46:20.739906 2026] [:error] [pid 23927:tid 23931] [client 68.221.136.149:2597] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "ac4s3EsZwqCndhl9uKBgGgAAAYI"]
[Thu Apr 02 16:46:21.294179 2026] [:error] [pid 29467:tid 29474] [client 68.221.136.149:9541] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "ac4s3b4VUBFCJAq-WOnu7wAAAQQ"]
[Thu Apr 02 16:46:22.868760 2026] [:error] [pid 29467:tid 29472] [client 68.221.136.149:26873] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "ac4s3r4VUBFCJAq-WOnu-AAAAQI"]
[Thu Apr 02 16:46:23.627088 2026] [:error] [pid 29467:tid 29491] [client 68.221.136.149:12891] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "ac4s374VUBFCJAq-WOnu_AAAARU"]
[Thu Apr 02 16:46:24.455074 2026] [:error] [pid 29467:tid 29472] [client 68.221.136.149:8095] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "ac4s4L4VUBFCJAq-WOnvAgAAAQI"]
[Thu Apr 02 16:46:25.250299 2026] [:error] [pid 59200:tid 59256] [client 68.221.136.149:55794] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "ac4s4bfP26txrdLs3EpOewAAAFA"]
[Thu Apr 02 16:46:25.817611 2026] [:error] [pid 59200:tid 59261] [client 68.221.136.149:60129] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ac4s4bfP26txrdLs3EpOfAAAAFU"]
[Thu Apr 02 16:46:26.731892 2026] [:error] [pid 59201:tid 59272] [client 68.221.136.149:38346] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ac4s4sAC0Tw8eL6gzZ7uuQAAAIU"]
[Thu Apr 02 16:46:27.432397 2026] [:error] [pid 23927:tid 23939] [client 68.221.136.149:37706] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ac4s40sZwqCndhl9uKBgHgAAAYo"]
[Thu Apr 02 16:46:28.161631 2026] [:error] [pid 54384:tid 54408] [client 68.221.136.149:7545] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ac4s5NWWpaby3TVN7MfQeAAAAdY"]
[Thu Apr 02 16:46:28.798507 2026] [:error] [pid 29467:tid 29475] [client 68.221.136.149:43614] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "ac4s5L4VUBFCJAq-WOnvEwAAAQU"]
[Thu Apr 02 16:46:29.446982 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:61416] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "ac4s5b4VUBFCJAq-WOnvFwAAARg"]
[Thu Apr 02 16:46:30.026455 2026] [:error] [pid 59194:tid 59231] [client 68.221.136.149:7544] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "ac4s5hMpAeV11hcQehwitgAAABI"]
[Thu Apr 02 16:46:30.705721 2026] [:error] [pid 59305:tid 59320] [client 68.221.136.149:56383] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "ac4s5qr2tV4rDwKFxKchSgAAAMs"]
[Thu Apr 02 16:46:31.316980 2026] [:error] [pid 29467:tid 29484] [client 68.221.136.149:26849] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "ac4s574VUBFCJAq-WOnvGQAAAQ4"]
[Thu Apr 02 16:46:31.974874 2026] [:error] [pid 59201:tid 59267] [client 68.221.136.149:28489] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "ac4s58AC0Tw8eL6gzZ7uvQAAAIA"]
[Thu Apr 02 16:46:32.475263 2026] [:error] [pid 54384:tid 54393] [client 68.221.136.149:43603] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "ac4s6NWWpaby3TVN7MfQewAAAcc"]
[Thu Apr 02 16:46:33.496375 2026] [:error] [pid 37543:tid 37548] [client 68.221.136.149:28507] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "ac4s6Xhdk2bEYJCvILamSQAAAUM"]
[Thu Apr 02 16:46:34.357607 2026] [:error] [pid 59305:tid 59312] [client 68.221.136.149:60151] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ac4s6qr2tV4rDwKFxKchUgAAAMM"]
[Thu Apr 02 16:46:34.943675 2026] [:error] [pid 59305:tid 59314] [client 68.221.136.149:56345] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ac4s6qr2tV4rDwKFxKchUwAAAMU"]
[Thu Apr 02 16:46:35.584611 2026] [:error] [pid 29467:tid 29489] [client 68.221.136.149:37751] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ac4s674VUBFCJAq-WOnvHQAAARM"]
[Thu Apr 02 16:46:36.210249 2026] [:error] [pid 29467:tid 29474] [client 68.221.136.149:23180] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ac4s7L4VUBFCJAq-WOnvIgAAAQQ"]
[Thu Apr 02 16:46:37.007132 2026] [:error] [pid 29467:tid 29471] [client 68.221.136.149:61405] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4s7b4VUBFCJAq-WOnvJgAAAQE"]
[Thu Apr 02 16:46:37.561460 2026] [:error] [pid 59201:tid 59270] [client 68.221.136.149:2390] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4s7cAC0Tw8eL6gzZ7uwgAAAIM"]
[Thu Apr 02 16:46:38.527225 2026] [:error] [pid 54384:tid 54400] [client 68.221.136.149:60100] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4s7tWWpaby3TVN7MfQhAAAAc4"]
[Thu Apr 02 16:46:39.237113 2026] [:error] [pid 59201:tid 59268] [client 68.221.136.149:2413] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4s78AC0Tw8eL6gzZ7uxwAAAIE"]
[Thu Apr 02 16:46:39.999587 2026] [:error] [pid 54384:tid 54397] [client 68.221.136.149:10794] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file31.php"] [unique_id "ac4s79WWpaby3TVN7MfQiAAAAcs"]
[Thu Apr 02 16:46:40.986520 2026] [:error] [pid 59194:tid 59226] [client 68.221.136.149:38374] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file31.php"] [unique_id "ac4s8BMpAeV11hcQehwiugAAAA0"]
[Thu Apr 02 16:46:41.727668 2026] [:error] [pid 59201:tid 59288] [client 68.221.136.149:28500] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file31.php"] [unique_id "ac4s8cAC0Tw8eL6gzZ7uywAAAJU"]
[Thu Apr 02 16:46:42.689424 2026] [:error] [pid 59201:tid 59273] [client 68.221.136.149:7264] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file31.php"] [unique_id "ac4s8sAC0Tw8eL6gzZ7uzgAAAIY"]
[Thu Apr 02 16:46:43.514001 2026] [:error] [pid 59201:tid 59271] [client 68.221.136.149:43591] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "ac4s88AC0Tw8eL6gzZ7u0QAAAIQ"]
[Thu Apr 02 16:46:44.394396 2026] [:error] [pid 37543:tid 37569] [client 68.221.136.149:60140] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "ac4s9Hhdk2bEYJCvILamUgAAAVg"]
[Thu Apr 02 16:46:44.993217 2026] [:error] [pid 54384:tid 54407] [client 68.221.136.149:28515] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "ac4s9NWWpaby3TVN7MfQkAAAAdU"]
[Thu Apr 02 16:46:45.491088 2026] [:error] [pid 59194:tid 59230] [client 68.221.136.149:7253] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "ac4s9RMpAeV11hcQehwivQAAABE"]
[Thu Apr 02 16:46:46.032088 2026] [:error] [pid 54384:tid 54404] [client 68.221.136.149:28497] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "ac4s9tWWpaby3TVN7MfQlQAAAdI"]
[Thu Apr 02 16:46:46.600640 2026] [:error] [pid 54384:tid 54392] [client 68.221.136.149:48389] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "ac4s9tWWpaby3TVN7MfQmAAAAcY"]
[Thu Apr 02 16:46:47.127407 2026] [:error] [pid 37543:tid 37546] [client 68.221.136.149:9569] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "ac4s93hdk2bEYJCvILamWAAAAUE"]
[Thu Apr 02 16:46:47.808515 2026] [:error] [pid 54384:tid 54389] [client 68.221.136.149:59004] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "ac4s99WWpaby3TVN7MfQnQAAAcM"]
[Thu Apr 02 16:46:48.536779 2026] [:error] [pid 29467:tid 29472] [client 68.221.136.149:2576] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ac4s-L4VUBFCJAq-WOnvKQAAAQI"]
[Thu Apr 02 16:46:49.837661 2026] [:error] [pid 59305:tid 59315] [client 68.221.136.149:13063] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ac4s-ar2tV4rDwKFxKchYAAAAMY"]
[Thu Apr 02 16:46:50.505494 2026] [:error] [pid 54384:tid 54391] [client 68.221.136.149:59006] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ac4s-tWWpaby3TVN7MfQoAAAAcU"]
[Thu Apr 02 16:46:51.128540 2026] [:error] [pid 59200:tid 59256] [client 68.221.136.149:9536] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ac4s-7fP26txrdLs3EpOhQAAAFA"]
[Thu Apr 02 16:46:51.855866 2026] [:error] [pid 59201:tid 59280] [client 68.221.136.149:14909] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1111.php"] [unique_id "ac4s-8AC0Tw8eL6gzZ7u2wAAAI0"]
[Thu Apr 02 16:46:52.502681 2026] [:error] [pid 23927:tid 23940] [client 68.221.136.149:18127] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1111.php"] [unique_id "ac4s_EsZwqCndhl9uKBgKAAAAYs"]
[Thu Apr 02 16:46:53.195328 2026] [:error] [pid 29467:tid 29480] [client 68.221.136.149:48396] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1111.php"] [unique_id "ac4s_b4VUBFCJAq-WOnvLQAAAQo"]
[Thu Apr 02 16:46:54.162197 2026] [:error] [pid 37543:tid 37545] [client 68.221.136.149:58987] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1111.php"] [unique_id "ac4s_nhdk2bEYJCvILamXAAAAUA"]
[Thu Apr 02 16:46:54.815006 2026] [:error] [pid 23927:tid 23935] [client 68.221.136.149:2570] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "ac4s_ksZwqCndhl9uKBgKwAAAYY"]
[Thu Apr 02 16:46:55.510845 2026] [:error] [pid 29467:tid 29477] [client 68.221.136.149:13169] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "ac4s_74VUBFCJAq-WOnvMgAAAQc"]
[Thu Apr 02 16:46:56.222812 2026] [:error] [pid 59201:tid 59274] [client 68.221.136.149:7631] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "ac4tAMAC0Tw8eL6gzZ7u4QAAAIc"]
[Thu Apr 02 16:46:56.963444 2026] [:error] [pid 59305:tid 59310] [client 68.221.136.149:16229] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "ac4tAKr2tV4rDwKFxKchbAAAAME"]
[Thu Apr 02 16:46:57.624277 2026] [:error] [pid 59305:tid 59322] [client 68.221.136.149:14879] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ac4tAar2tV4rDwKFxKchbwAAAM0"]
[Thu Apr 02 16:46:59.398387 2026] [:error] [pid 23927:tid 23948] [client 68.221.136.149:34040] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ac4tA0sZwqCndhl9uKBgNAAAAZM"]
[Thu Apr 02 16:47:00.046842 2026] [:error] [pid 59194:tid 59226] [client 68.221.136.149:16232] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ac4tBBMpAeV11hcQehwiwgAAAA0"]
[Thu Apr 02 16:47:00.724941 2026] [:error] [pid 59194:tid 59214] [client 68.221.136.149:16877] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ac4tBBMpAeV11hcQehwixgAAAAE"]
[Thu Apr 02 16:47:01.268894 2026] [:error] [pid 59305:tid 59316] [client 68.221.136.149:14865] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac4tBar2tV4rDwKFxKcheAAAAMc"]
[Thu Apr 02 16:47:01.815589 2026] [:error] [pid 59305:tid 59331] [client 68.221.136.149:13160] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac4tBar2tV4rDwKFxKcheQAAANY"]
[Thu Apr 02 16:47:02.427726 2026] [:error] [pid 59305:tid 59313] [client 68.221.136.149:46628] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac4tBqr2tV4rDwKFxKchfgAAAMQ"]
[Thu Apr 02 16:47:03.169759 2026] [:error] [pid 59305:tid 59310] [client 68.221.136.149:12098] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac4tB6r2tV4rDwKFxKchggAAAME"]
[Thu Apr 02 16:47:03.828947 2026] [:error] [pid 54384:tid 54396] [client 68.221.136.149:17303] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac4tB9WWpaby3TVN7MfQrAAAAco"]
[Thu Apr 02 16:47:04.768120 2026] [:error] [pid 54384:tid 54405] [client 68.221.136.149:52605] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac4tCNWWpaby3TVN7MfQsQAAAdM"]
[Thu Apr 02 16:47:05.390107 2026] [:error] [pid 37543:tid 37556] [client 68.221.136.149:15374] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac4tCXhdk2bEYJCvILamZwAAAUs"]
[Thu Apr 02 16:47:05.957268 2026] [:error] [pid 29467:tid 29479] [client 68.221.136.149:13165] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac4tCb4VUBFCJAq-WOnvSwAAAQk"]
[Thu Apr 02 16:47:06.525268 2026] [:error] [pid 29467:tid 29487] [client 68.221.136.149:16841] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "ac4tCr4VUBFCJAq-WOnvTwAAARE"]
[Thu Apr 02 16:47:07.260723 2026] [:error] [pid 59200:tid 59264] [client 68.221.136.149:12121] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "ac4tC7fP26txrdLs3EpOjwAAAFg"]
[Thu Apr 02 16:47:07.833678 2026] [:error] [pid 23927:tid 23933] [client 68.221.136.149:33994] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "ac4tC0sZwqCndhl9uKBgQQAAAYQ"]
[Thu Apr 02 16:47:08.414925 2026] [:error] [pid 54384:tid 54399] [client 68.221.136.149:18126] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "ac4tDNWWpaby3TVN7MfQtAAAAc0"]
[Thu Apr 02 16:47:08.960495 2026] [:error] [pid 29467:tid 29477] [client 68.221.136.149:16198] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "ac4tDL4VUBFCJAq-WOnvWgAAAQc"]
[Thu Apr 02 16:47:09.870042 2026] [:error] [pid 54384:tid 54389] [client 68.221.136.149:16163] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "ac4tDdWWpaby3TVN7MfQuAAAAcM"]
[Thu Apr 02 16:47:10.390002 2026] [:error] [pid 29467:tid 29477] [client 68.221.136.149:52602] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "ac4tDr4VUBFCJAq-WOnvYQAAAQc"]
[Thu Apr 02 16:47:11.264439 2026] [:error] [pid 59200:tid 59248] [client 68.221.136.149:17322] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "ac4tD7fP26txrdLs3EpOkwAAAEg"]
[Thu Apr 02 16:47:11.812317 2026] [:error] [pid 54384:tid 54399] [client 68.221.136.149:55113] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ac4tD9WWpaby3TVN7MfQuwAAAc0"]
[Thu Apr 02 16:47:12.496818 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:11827] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ac4tEL4VUBFCJAq-WOnvZAAAARg"]
[Thu Apr 02 16:47:13.106657 2026] [:error] [pid 29467:tid 29472] [client 68.221.136.149:15194] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ac4tEb4VUBFCJAq-WOnvZQAAAQI"]
[Thu Apr 02 16:47:13.837824 2026] [:error] [pid 59201:tid 59284] [client 68.221.136.149:14448] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ac4tEcAC0Tw8eL6gzZ7u8QAAAJE"]
[Thu Apr 02 16:47:14.602410 2026] [:error] [pid 23927:tid 23938] [client 68.221.136.149:12802] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "ac4tEksZwqCndhl9uKBgUgAAAYk"]
[Thu Apr 02 16:47:15.377590 2026] [:error] [pid 59200:tid 59251] [client 68.221.136.149:30459] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "ac4tE7fP26txrdLs3EpOlAAAAEs"]
[Thu Apr 02 16:47:15.938624 2026] [:error] [pid 54384:tid 54407] [client 68.221.136.149:7763] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "ac4tE9WWpaby3TVN7MfQwgAAAdU"]
[Thu Apr 02 16:47:16.497233 2026] [:error] [pid 54384:tid 54400] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Thu Apr 02 16:47:16.741907 2026] [:error] [pid 54384:tid 54387] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Thu Apr 02 16:47:16.986004 2026] [:error] [pid 54384:tid 54397] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/zample.php
[Thu Apr 02 16:47:17.247898 2026] [:error] [pid 54384:tid 54392] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/read.php
[Thu Apr 02 16:47:17.597917 2026] [:error] [pid 54384:tid 54393] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kd4xalrg7m.php
[Thu Apr 02 16:47:17.841106 2026] [:error] [pid 54384:tid 54410] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Thu Apr 02 16:47:18.094795 2026] [:error] [pid 54384:tid 54403] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Thu Apr 02 16:47:18.339269 2026] [:error] [pid 54384:tid 54408] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu Apr 02 16:47:18.629812 2026] [:error] [pid 54384:tid 54388] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 02 16:47:18.892942 2026] [:error] [pid 54384:tid 54391] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mter.php
[Thu Apr 02 16:47:19.180051 2026] [:error] [pid 54384:tid 54391] [client 68.221.136.149:61325] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Thu Apr 02 16:47:19.420613 2026] [:error] [pid 54384:tid 54400] [client 68.221.136.149:61325] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "ac4tF9WWpaby3TVN7MfQ1gAAAc4"]
[Thu Apr 02 16:47:20.139993 2026] [:error] [pid 59305:tid 59314] [client 68.221.136.149:58942] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "ac4tGKr2tV4rDwKFxKchigAAAMU"]
[Thu Apr 02 16:47:20.617894 2026] [:error] [pid 59305:tid 59332] [client 68.221.136.149:12807] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "ac4tGKr2tV4rDwKFxKchiwAAANc"]
[Thu Apr 02 16:47:21.277794 2026] [:error] [pid 59305:tid 59325] [client 68.221.136.149:30412] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "ac4tGar2tV4rDwKFxKchjwAAANA"]
[Thu Apr 02 16:47:22.819212 2026] [:error] [pid 59305:tid 59320] [client 68.221.136.149:10863] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tGqr2tV4rDwKFxKchkgAAAMs"]
[Thu Apr 02 16:47:23.519336 2026] [:error] [pid 29467:tid 29474] [client 68.221.136.149:7770] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tG74VUBFCJAq-WOnvdQAAAQQ"]
[Thu Apr 02 16:47:24.182592 2026] [:error] [pid 37543:tid 37568] [client 68.221.136.149:53868] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tHHhdk2bEYJCvILambQAAAVc"]
[Thu Apr 02 16:47:24.840486 2026] [:error] [pid 37543:tid 37548] [client 68.221.136.149:53814] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tHHhdk2bEYJCvILambgAAAUM"]
[Thu Apr 02 16:47:25.594669 2026] [:error] [pid 29467:tid 29476] [client 68.221.136.149:29791] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "ac4tHb4VUBFCJAq-WOnvdwAAAQY"]
[Thu Apr 02 16:47:26.358246 2026] [:error] [pid 59200:tid 59243] [client 68.221.136.149:8031] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "ac4tHrfP26txrdLs3EpOmwAAAEM"]
[Thu Apr 02 16:47:27.135090 2026] [:error] [pid 59200:tid 59256] [client 68.221.136.149:29766] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "ac4tH7fP26txrdLs3EpOngAAAFA"]
[Thu Apr 02 16:47:27.838384 2026] [:error] [pid 54384:tid 54390] [client 68.221.136.149:10851] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "ac4tH9WWpaby3TVN7MfQ4QAAAcQ"]
[Thu Apr 02 16:47:28.836645 2026] [:error] [pid 59305:tid 59332] [client 68.221.136.149:10867] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "ac4tIKr2tV4rDwKFxKchlwAAANc"]
[Thu Apr 02 16:47:29.467500 2026] [:error] [pid 59305:tid 59323] [client 68.221.136.149:30430] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "ac4tIar2tV4rDwKFxKchmgAAAM4"]
[Thu Apr 02 16:47:30.179428 2026] [:error] [pid 37543:tid 37560] [client 68.221.136.149:12068] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "ac4tInhdk2bEYJCvILamewAAAU8"]
[Thu Apr 02 16:47:30.792191 2026] [:error] [pid 54384:tid 54400] [client 68.221.136.149:15184] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "ac4tItWWpaby3TVN7MfQ5QAAAc4"]
[Thu Apr 02 16:47:31.314384 2026] [:error] [pid 29467:tid 29489] [client 68.221.136.149:2086] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4tI74VUBFCJAq-WOnvigAAARM"]
[Thu Apr 02 16:47:31.912021 2026] [:error] [pid 29467:tid 29487] [client 68.221.136.149:58911] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4tI74VUBFCJAq-WOnvjgAAARE"]
[Thu Apr 02 16:47:32.557998 2026] [:error] [pid 29467:tid 29473] [client 68.221.136.149:12085] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4tJL4VUBFCJAq-WOnvkwAAAQM"]
[Thu Apr 02 16:47:33.206842 2026] [:error] [pid 59305:tid 59314] [client 68.221.136.149:30413] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4tJar2tV4rDwKFxKchpAAAAMU"]
[Thu Apr 02 16:47:33.770749 2026] [:error] [pid 37543:tid 37567] [client 68.221.136.149:7786] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "ac4tJXhdk2bEYJCvILamiAAAAVY"]
[Thu Apr 02 16:47:34.565508 2026] [:error] [pid 59201:tid 59289] [client 68.221.136.149:10857] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "ac4tJsAC0Tw8eL6gzZ7vDQAAAJY"]
[Thu Apr 02 16:47:35.229898 2026] [:error] [pid 23927:tid 23938] [client 68.221.136.149:47201] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "ac4tJ0sZwqCndhl9uKBgegAAAYk"]
[Thu Apr 02 16:47:35.787118 2026] [:error] [pid 37543:tid 37564] [client 68.221.136.149:29775] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eee.php"] [unique_id "ac4tJ3hdk2bEYJCvILamiwAAAVM"]
[Thu Apr 02 16:47:36.384468 2026] [:error] [pid 59200:tid 59252] [client 68.221.136.149:12062] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "ac4tKLfP26txrdLs3EpOoQAAAEw"]
[Thu Apr 02 16:47:36.870125 2026] [:error] [pid 59305:tid 59317] [client 68.221.136.149:53883] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "ac4tKKr2tV4rDwKFxKchrQAAAMg"]
[Thu Apr 02 16:47:37.545658 2026] [:error] [pid 29467:tid 29488] [client 68.221.136.149:58889] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "ac4tKb4VUBFCJAq-WOnvlQAAARI"]
[Thu Apr 02 16:47:38.089556 2026] [:error] [pid 23927:tid 23940] [client 68.221.136.149:61319] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "ac4tKksZwqCndhl9uKBgggAAAYs"]
[Thu Apr 02 16:47:38.581202 2026] [:error] [pid 23927:tid 23942] [client 68.221.136.149:58941] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "ac4tKksZwqCndhl9uKBggwAAAY0"]
[Thu Apr 02 16:47:39.115056 2026] [:error] [pid 59200:tid 59241] [client 68.221.136.149:53774] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "ac4tK7fP26txrdLs3EpOogAAAEE"]
[Thu Apr 02 16:47:39.658380 2026] [:error] [pid 23927:tid 23933] [client 68.221.136.149:2062] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "ac4tK0sZwqCndhl9uKBghgAAAYQ"]
[Thu Apr 02 16:47:40.254287 2026] [:error] [pid 54384:tid 54409] [client 68.221.136.149:2981] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "ac4tLNWWpaby3TVN7MfQ6AAAAdc"]
[Thu Apr 02 16:47:40.809007 2026] [:error] [pid 23927:tid 23940] [client 68.221.136.149:30462] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "ac4tLEsZwqCndhl9uKBgiwAAAYs"]
[Thu Apr 02 16:47:41.496077 2026] [:error] [pid 29467:tid 29488] [client 68.221.136.149:12863] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "ac4tLb4VUBFCJAq-WOnvoAAAARI"]
[Thu Apr 02 16:47:42.145765 2026] [:error] [pid 29467:tid 29485] [client 68.221.136.149:53827] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "ac4tLr4VUBFCJAq-WOnvpAAAAQ8"]
[Thu Apr 02 16:47:42.706436 2026] [:error] [pid 54384:tid 54404] [client 68.221.136.149:30434] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/swallowable.php"] [unique_id "ac4tLtWWpaby3TVN7MfQ6QAAAdI"]
[Thu Apr 02 16:47:43.393575 2026] [:error] [pid 59201:tid 59291] [client 68.221.136.149:58903] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "ac4tL8AC0Tw8eL6gzZ7vFAAAAJg"]
[Thu Apr 02 16:47:44.321924 2026] [:error] [pid 37543:tid 37554] [client 68.221.136.149:28425] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "ac4tMHhdk2bEYJCvILamkgAAAUk"]
[Thu Apr 02 16:47:45.053434 2026] [:error] [pid 29467:tid 29479] [client 68.221.136.149:15192] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "ac4tMb4VUBFCJAq-WOnvqwAAAQk"]
[Thu Apr 02 16:47:45.720064 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:29818] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "ac4tMb4VUBFCJAq-WOnvsAAAARg"]
[Thu Apr 02 16:47:46.448445 2026] [:error] [pid 59305:tid 59313] [client 68.221.136.149:53880] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac4tMqr2tV4rDwKFxKchuwAAAMQ"]
[Thu Apr 02 16:47:47.068070 2026] [:error] [pid 59201:tid 59280] [client 68.221.136.149:13316] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac4tM8AC0Tw8eL6gzZ7vFQAAAI0"]
[Thu Apr 02 16:47:47.689113 2026] [:error] [pid 37543:tid 37557] [client 68.221.136.149:53780] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac4tM3hdk2bEYJCvILamlQAAAUw"]
[Thu Apr 02 16:47:48.190635 2026] [:error] [pid 59305:tid 59328] [client 68.221.136.149:14452] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac4tNKr2tV4rDwKFxKchwAAAANM"]
[Thu Apr 02 16:47:48.787564 2026] [:error] [pid 37543:tid 37559] [client 68.221.136.149:14433] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ac4tNHhdk2bEYJCvILamlwAAAU4"]
[Thu Apr 02 16:47:49.512155 2026] [:error] [pid 29467:tid 29477] [client 68.221.136.149:53847] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ac4tNb4VUBFCJAq-WOnvtwAAAQc"]
[Thu Apr 02 16:47:50.094709 2026] [:error] [pid 29467:tid 29478] [client 68.221.136.149:53810] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ac4tNr4VUBFCJAq-WOnvuwAAAQg"]
[Thu Apr 02 16:47:50.897434 2026] [:error] [pid 59201:tid 59273] [client 68.221.136.149:55106] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ac4tNsAC0Tw8eL6gzZ7vGAAAAIY"]
[Thu Apr 02 16:47:51.544768 2026] [:error] [pid 23927:tid 23942] [client 68.221.136.149:30411] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ac4tN0sZwqCndhl9uKBgkwAAAY0"]
[Thu Apr 02 16:47:52.201710 2026] [:error] [pid 23927:tid 23947] [client 68.221.136.149:8004] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ac4tOEsZwqCndhl9uKBglgAAAZI"]
[Thu Apr 02 16:47:52.810869 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:16134] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ac4tOL4VUBFCJAq-WOnvzgAAARg"]
[Thu Apr 02 16:47:53.379473 2026] [:error] [pid 29467:tid 29480] [client 68.221.136.149:61316] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ac4tOb4VUBFCJAq-WOnv0wAAAQo"]
[Thu Apr 02 16:47:54.185914 2026] [:error] [pid 29467:tid 29477] [client 68.221.136.149:11784] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4tOr4VUBFCJAq-WOnv2QAAAQc"]
[Thu Apr 02 16:47:54.910202 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:29788] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4tOr4VUBFCJAq-WOnv3gAAARg"]
[Thu Apr 02 16:47:55.549359 2026] [:error] [pid 29467:tid 29475] [client 68.221.136.149:53845] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4tO74VUBFCJAq-WOnv5AAAAQU"]
[Thu Apr 02 16:47:56.066163 2026] [:error] [pid 37543:tid 37568] [client 68.221.136.149:53837] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac4tPHhdk2bEYJCvILamoAAAAVc"]
[Thu Apr 02 16:47:56.735723 2026] [:error] [pid 29467:tid 29493] [client 68.221.136.149:17282] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tPL4VUBFCJAq-WOnv8AAAARc"]
[Thu Apr 02 16:47:57.538843 2026] [:error] [pid 29467:tid 29480] [client 68.221.136.149:12094] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tPb4VUBFCJAq-WOnv-wAAAQo"]
[Thu Apr 02 16:47:58.242983 2026] [:error] [pid 29467:tid 29492] [client 68.221.136.149:17294] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tPr4VUBFCJAq-WOnwAQAAARY"]
[Thu Apr 02 16:48:00.172675 2026] [:error] [pid 23927:tid 23932] [client 68.221.136.149:16207] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tQEsZwqCndhl9uKBgvwAAAYM"]
[Thu Apr 02 16:48:00.740438 2026] [:error] [pid 23927:tid 23935] [client 68.221.136.149:15373] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ac4tQEsZwqCndhl9uKBgwQAAAYY"]
[Thu Apr 02 16:48:01.282004 2026] [:error] [pid 54384:tid 54394] [client 68.221.136.149:16881] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ac4tQdWWpaby3TVN7MfQ9gAAAcg"]
[Thu Apr 02 16:48:01.980119 2026] [:error] [pid 59201:tid 59284] [client 68.221.136.149:46639] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ac4tQcAC0Tw8eL6gzZ7vJwAAAJE"]
[Thu Apr 02 16:48:02.701279 2026] [:error] [pid 59305:tid 59317] [client 68.221.136.149:12108] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ac4tQqr2tV4rDwKFxKch2wAAAMg"]
[Thu Apr 02 16:48:03.390489 2026] [:error] [pid 29467:tid 29486] [client 68.221.136.149:2592] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ac4tQ74VUBFCJAq-WOnwEQAAARA"]
[Thu Apr 02 16:48:03.974708 2026] [:error] [pid 23927:tid 23951] [client 68.221.136.149:7637] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ac4tQ0sZwqCndhl9uKBgxAAAAZY"]
[Thu Apr 02 16:48:04.583041 2026] [:error] [pid 23927:tid 23929] [client 68.221.136.149:11014] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ac4tREsZwqCndhl9uKBgxQAAAYA"]
[Thu Apr 02 16:48:05.280741 2026] [:error] [pid 29467:tid 29485] [client 68.221.136.149:52577] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ac4tRb4VUBFCJAq-WOnwFgAAAQ8"]
[Thu Apr 02 16:48:06.354798 2026] [:error] [pid 59194:tid 59224] [client 68.221.136.149:52577] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac4tRhMpAeV11hcQehwi3gAAAAs"]
[Thu Apr 02 16:48:07.070692 2026] [:error] [pid 23927:tid 23938] [client 68.221.136.149:13128] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac4tR0sZwqCndhl9uKBgzQAAAYk"]
[Thu Apr 02 16:48:07.768439 2026] [:error] [pid 59201:tid 59288] [client 68.221.136.149:17296] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac4tR8AC0Tw8eL6gzZ7vLQAAAJU"]
[Thu Apr 02 16:48:08.350763 2026] [:error] [pid 59201:tid 59289] [client 68.221.136.149:46613] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac4tSMAC0Tw8eL6gzZ7vLwAAAJY"]
[Thu Apr 02 16:48:09.354201 2026] [:error] [pid 29467:tid 29472] [client 68.221.136.149:14892] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac4tSb4VUBFCJAq-WOnwGgAAAQI"]
[Thu Apr 02 16:48:09.935288 2026] [:error] [pid 59305:tid 59325] [client 68.221.136.149:14872] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac4tSar2tV4rDwKFxKch3QAAANA"]
[Thu Apr 02 16:48:10.535308 2026] [:error] [pid 59305:tid 59319] [client 68.221.136.149:7292] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac4tSqr2tV4rDwKFxKch3gAAAMo"]
[Thu Apr 02 16:48:11.087350 2026] [:error] [pid 29467:tid 29483] [client 68.221.136.149:58947] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac4tS74VUBFCJAq-WOnwIAAAAQ0"]
[Thu Apr 02 16:48:11.669088 2026] [:error] [pid 29467:tid 29490] [client 68.221.136.149:23218] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac4tS74VUBFCJAq-WOnwIwAAARQ"]
[Thu Apr 02 16:48:12.472536 2026] [:error] [pid 54384:tid 54390] [client 68.221.136.149:13113] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac4tTNWWpaby3TVN7MfQ_wAAAcQ"]
[Thu Apr 02 16:48:13.075515 2026] [:error] [pid 23927:tid 23947] [client 68.221.136.149:48384] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac4tTUsZwqCndhl9uKBg0QAAAZI"]
[Thu Apr 02 16:48:13.591732 2026] [:error] [pid 59200:tid 59260] [client 68.221.136.149:2569] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac4tTbfP26txrdLs3EpOqQAAAFQ"]
[Thu Apr 02 16:48:14.210350 2026] [:error] [pid 29467:tid 29479] [client 68.221.136.149:48420] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "ac4tTr4VUBFCJAq-WOnwMAAAAQk"]
[Thu Apr 02 16:48:15.023329 2026] [:error] [pid 59201:tid 59281] [client 68.221.136.149:55745] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "ac4tT8AC0Tw8eL6gzZ7vMQAAAI4"]
[Thu Apr 02 16:48:15.897263 2026] [:error] [pid 29467:tid 29491] [client 68.221.136.149:61420] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "ac4tT74VUBFCJAq-WOnwMwAAARU"]
[Thu Apr 02 16:48:16.819994 2026] [:error] [pid 29467:tid 29480] [client 68.221.136.149:8778] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "ac4tUL4VUBFCJAq-WOnwNgAAAQo"]
[Thu Apr 02 16:48:17.451252 2026] [:error] [pid 29467:tid 29475] [client 68.221.136.149:61427] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ac4tUb4VUBFCJAq-WOnwOQAAAQU"]
[Thu Apr 02 16:48:18.074289 2026] [:error] [pid 29467:tid 29470] [client 68.221.136.149:48421] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ac4tUr4VUBFCJAq-WOnwPAAAAQA"]
[Thu Apr 02 16:48:19.218905 2026] [:error] [pid 29467:tid 29480] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Apr 02 16:48:19.505521 2026] [:error] [pid 29467:tid 29471] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 02 16:48:19.805981 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 02 16:48:20.369409 2026] [:error] [pid 29467:tid 29475] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/bless4.php
[Thu Apr 02 16:48:20.613796 2026] [:error] [pid 29467:tid 29483] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Apr 02 16:48:20.929538 2026] [:error] [pid 29467:tid 29487] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Thu Apr 02 16:48:21.236587 2026] [:error] [pid 29467:tid 29479] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Thu Apr 02 16:48:21.557375 2026] [:error] [pid 29467:tid 29489] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Thu Apr 02 16:48:21.820889 2026] [:error] [pid 29467:tid 29490] [client 68.221.136.149:60157] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 02 16:48:22.306530 2026] [:error] [pid 29467:tid 29472] [client 68.221.136.149:60157] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ac4tVr4VUBFCJAq-WOnwTwAAAQI"]
[Thu Apr 02 16:48:23.011590 2026] [:error] [pid 59305:tid 59325] [client 68.221.136.149:30998] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ac4tV6r2tV4rDwKFxKch9AAAANA"]
[Thu Apr 02 16:48:23.746246 2026] [:error] [pid 37543:tid 37553] [client 68.221.136.149:21213] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ac4tV3hdk2bEYJCvILamzAAAAUg"]
[Thu Apr 02 16:48:24.566688 2026] [:error] [pid 29467:tid 29486] [client 68.221.136.149:25763] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ac4tWL4VUBFCJAq-WOnwUgAAARA"]
[Thu Apr 02 16:48:25.163258 2026] [:error] [pid 59305:tid 59311] [client 68.221.136.149:9496] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "ac4tWar2tV4rDwKFxKciAQAAAMI"]
[Thu Apr 02 16:48:28.617747 2026] [:error] [pid 59305:tid 59329] [client 68.221.136.149:9488] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "ac4tXKr2tV4rDwKFxKciLwAAANQ"]
[Thu Apr 02 16:48:34.960964 2026] [:error] [pid 29467:tid 29478] [client 68.221.136.149:41643] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "ac4tYr4VUBFCJAq-WOnwWwAAAQg"]
[Thu Apr 02 16:49:09.209561 2026] [:error] [pid 54384:tid 54399] [client 68.221.136.149:9847] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ac4thdWWpaby3TVN7MfRKwAAAc0"]
[Thu Apr 02 16:49:09.909115 2026] [:error] [pid 23927:tid 23930] [client 68.221.136.149:11329] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ac4thUsZwqCndhl9uKBhCQAAAYE"]
[Thu Apr 02 16:49:10.469403 2026] [:error] [pid 37543:tid 37557] [client 68.221.136.149:9805] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ac4thnhdk2bEYJCvILam8AAAAUw"]
[Thu Apr 02 16:49:11.141334 2026] [:error] [pid 54384:tid 54398] [client 68.221.136.149:29167] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ac4th9WWpaby3TVN7MfRLAAAAcw"]
[Thu Apr 02 16:49:11.773728 2026] [:error] [pid 54384:tid 54406] [client 68.221.136.149:12310] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4th9WWpaby3TVN7MfRLQAAAdQ"]
[Thu Apr 02 16:49:12.382197 2026] [:error] [pid 59200:tid 59241] [client 68.221.136.149:24194] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4tiLfP26txrdLs3EpO0QAAAEE"]
[Thu Apr 02 16:49:12.980510 2026] [:error] [pid 59201:tid 59287] [client 68.221.136.149:9854] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4tiMAC0Tw8eL6gzZ7vVwAAAJQ"]
[Thu Apr 02 16:49:13.688364 2026] [:error] [pid 59305:tid 59322] [client 68.221.136.149:10577] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4tiar2tV4rDwKFxKciZwAAAM0"]
[Thu Apr 02 16:49:14.367969 2026] [:error] [pid 59194:tid 59223] [client 68.221.136.149:60081] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ac4tihMpAeV11hcQehwjBgAAAAo"]
[Thu Apr 02 16:49:14.967088 2026] [:error] [pid 59201:tid 59289] [client 68.221.136.149:2255] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ac4tisAC0Tw8eL6gzZ7vWgAAAJY"]
[Thu Apr 02 16:49:15.515895 2026] [:error] [pid 23927:tid 23931] [client 68.221.136.149:29179] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ac4ti0sZwqCndhl9uKBhDgAAAYI"]
[Thu Apr 02 16:49:16.064957 2026] [:error] [pid 59201:tid 59270] [client 68.221.136.149:31680] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "ac4tjMAC0Tw8eL6gzZ7vWwAAAIM"]
[Thu Apr 02 16:49:16.586192 2026] [:error] [pid 37543:tid 37564] [client 68.221.136.149:26348] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tjHhdk2bEYJCvILam-QAAAVM"]
[Thu Apr 02 16:49:17.109832 2026] [:error] [pid 59305:tid 59320] [client 68.221.136.149:36599] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tjar2tV4rDwKFxKciaAAAAMs"]
[Thu Apr 02 16:49:17.608984 2026] [:error] [pid 54384:tid 54393] [client 68.221.136.149:2751] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tjdWWpaby3TVN7MfRMQAAAcc"]
[Thu Apr 02 16:49:18.200897 2026] [:error] [pid 29467:tid 29484] [client 68.221.136.149:16796] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ac4tjr4VUBFCJAq-WOnwygAAAQ4"]
[Thu Apr 02 16:49:18.737870 2026] [:error] [pid 59305:tid 59321] [client 68.221.136.149:17751] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ac4tjqr2tV4rDwKFxKciawAAAMw"]
[Thu Apr 02 16:49:19.281825 2026] [:error] [pid 29467:tid 29489] [client 68.221.136.149:33945] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ac4tj74VUBFCJAq-WOnwzgAAARM"]
[Thu Apr 02 16:49:19.811175 2026] [:error] [pid 59305:tid 59316] [client 68.221.136.149:60922] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ac4tj6r2tV4rDwKFxKcicQAAAMc"]
[Thu Apr 02 16:49:20.348940 2026] [:error] [pid 59305:tid 59311] [client 68.221.136.149:10560] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ac4tkKr2tV4rDwKFxKcidQAAAMI"]
[Thu Apr 02 16:49:20.841542 2026] [:error] [pid 54384:tid 54398] [client 68.221.136.149:11884] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "ac4tkNWWpaby3TVN7MfROQAAAcw"]
[Thu Apr 02 16:49:21.432017 2026] [:error] [pid 54384:tid 54410] [client 68.221.136.149:43580] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "ac4tkdWWpaby3TVN7MfRPAAAAdg"]
[Thu Apr 02 16:49:22.226812 2026] [:error] [pid 59305:tid 59324] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 02 16:49:22.488051 2026] [:error] [pid 59305:tid 59314] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 02 16:49:22.730174 2026] [:error] [pid 59305:tid 59326] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Apr 02 16:49:22.984607 2026] [:error] [pid 59305:tid 59318] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Apr 02 16:49:23.549833 2026] [:error] [pid 59305:tid 59331] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Thu Apr 02 16:49:24.054067 2026] [:error] [pid 59305:tid 59310] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Thu Apr 02 16:49:24.318164 2026] [:error] [pid 59305:tid 59319] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Thu Apr 02 16:49:24.599837 2026] [:error] [pid 59305:tid 59325] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 02 16:49:24.841572 2026] [:error] [pid 59305:tid 59312] [client 68.221.136.149:2275] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Thu Apr 02 16:49:25.080288 2026] [:error] [pid 59305:tid 59315] [client 68.221.136.149:2275] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ac4tlar2tV4rDwKFxKciiAAAAMY"]
[Thu Apr 02 16:49:25.663722 2026] [:error] [pid 59305:tid 59332] [client 68.221.136.149:11851] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ac4tlar2tV4rDwKFxKciiQAAANc"]
[Thu Apr 02 16:49:26.337691 2026] [:error] [pid 54384:tid 54407] [client 68.221.136.149:7831] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ac4tltWWpaby3TVN7MfRQgAAAdU"]
[Thu Apr 02 16:49:26.896999 2026] [:error] [pid 29467:tid 29493] [client 68.221.136.149:14938] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ac4tlr4VUBFCJAq-WOnw4QAAARc"]
[Thu Apr 02 16:49:27.604658 2026] [:error] [pid 54384:tid 54388] [client 68.221.136.149:60868] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ac4tl9WWpaby3TVN7MfRRAAAAcI"]
[Thu Apr 02 16:49:28.225402 2026] [:error] [pid 59200:tid 59254] [client 68.221.136.149:36586] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ac4tmLfP26txrdLs3EpO2QAAAE4"]
[Thu Apr 02 16:49:28.831674 2026] [:error] [pid 29467:tid 29474] [client 68.221.136.149:21738] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ac4tmL4VUBFCJAq-WOnw5gAAAQQ"]
[Thu Apr 02 16:49:29.471918 2026] [:error] [pid 29467:tid 29480] [client 68.221.136.149:36544] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ac4tmb4VUBFCJAq-WOnw6gAAAQo"]
[Thu Apr 02 16:49:30.037451 2026] [:error] [pid 29467:tid 29486] [client 68.221.136.149:16801] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ac4tmr4VUBFCJAq-WOnw8AAAARA"]
[Thu Apr 02 16:49:30.576254 2026] [:error] [pid 59200:tid 59247] [client 68.221.136.149:27298] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ac4tmrfP26txrdLs3EpO3AAAAEc"]
[Thu Apr 02 16:49:31.108464 2026] [:error] [pid 29467:tid 29482] [client 68.221.136.149:2715] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ac4tm74VUBFCJAq-WOnw9wAAAQw"]
[Thu Apr 02 16:49:31.746593 2026] [:error] [pid 59305:tid 59327] [client 68.221.136.149:24783] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ac4tm6r2tV4rDwKFxKcijAAAANI"]
[Thu Apr 02 16:49:32.453073 2026] [:error] [pid 29467:tid 29488] [client 68.221.136.149:27813] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ac4tnL4VUBFCJAq-WOnw_gAAARI"]
[Thu Apr 02 16:49:33.028092 2026] [:error] [pid 29467:tid 29479] [client 68.221.136.149:27294] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ac4tnb4VUBFCJAq-WOnxAQAAAQk"]
[Thu Apr 02 16:49:33.902452 2026] [:error] [pid 23927:tid 23933] [client 68.221.136.149:17367] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ac4tnUsZwqCndhl9uKBhFwAAAYQ"]
[Thu Apr 02 16:49:34.424302 2026] [:error] [pid 29467:tid 29490] [client 68.221.136.149:17352] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ac4tnr4VUBFCJAq-WOnxBgAAARQ"]
[Thu Apr 02 16:49:35.251052 2026] [:error] [pid 59305:tid 59312] [client 68.221.136.149:24774] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "ac4tn6r2tV4rDwKFxKcijQAAAMM"]
[Thu Apr 02 16:49:35.878275 2026] [:error] [pid 29467:tid 29471] [client 68.221.136.149:27795] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "ac4tn74VUBFCJAq-WOnxDQAAAQE"]
[Thu Apr 02 16:49:36.712530 2026] [:error] [pid 29467:tid 29491] [client 68.221.136.149:10555] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "ac4toL4VUBFCJAq-WOnxEQAAARU"]
[Thu Apr 02 16:49:37.247048 2026] [:error] [pid 29467:tid 29487] [client 68.221.136.149:17368] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "ac4tob4VUBFCJAq-WOnxFwAAARE"]
[Thu Apr 02 16:49:37.796084 2026] [:error] [pid 23927:tid 23931] [client 68.221.136.149:32308] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac4toUsZwqCndhl9uKBhGgAAAYI"]
[Thu Apr 02 16:49:38.472824 2026] [:error] [pid 59305:tid 59317] [client 68.221.136.149:2702] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac4toqr2tV4rDwKFxKcilAAAAMg"]
[Thu Apr 02 16:49:39.004351 2026] [:error] [pid 23927:tid 23945] [client 68.221.136.149:47802] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac4to0sZwqCndhl9uKBhHwAAAZA"]
[Thu Apr 02 16:49:39.546105 2026] [:error] [pid 29467:tid 29473] [client 68.221.136.149:42261] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac4to74VUBFCJAq-WOnxGQAAAQM"]
[Thu Apr 02 16:49:40.361647 2026] [:error] [pid 37543:tid 37551] [client 68.221.136.149:21699] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ac4tpHhdk2bEYJCvILanBQAAAUY"]
[Thu Apr 02 16:49:41.132521 2026] [:error] [pid 29467:tid 29484] [client 68.221.136.149:2688] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ac4tpb4VUBFCJAq-WOnxIAAAAQ4"]
[Thu Apr 02 16:49:41.736319 2026] [:error] [pid 29467:tid 29478] [client 68.221.136.149:7857] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ac4tpb4VUBFCJAq-WOnxJwAAAQg"]
[Thu Apr 02 16:49:42.526785 2026] [:error] [pid 29467:tid 29475] [client 68.221.136.149:47772] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ac4tpr4VUBFCJAq-WOnxLAAAAQU"]
[Thu Apr 02 16:49:43.358246 2026] [:error] [pid 59194:tid 59216] [client 68.221.136.149:24786] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tpxMpAeV11hcQehwjEgAAAAM"]
[Thu Apr 02 16:49:43.853307 2026] [:error] [pid 29467:tid 29488] [client 68.221.136.149:32283] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tp74VUBFCJAq-WOnxMgAAARI"]
[Thu Apr 02 16:49:44.531515 2026] [:error] [pid 29467:tid 29477] [client 68.221.136.149:27789] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tqL4VUBFCJAq-WOnxNwAAAQc"]
[Thu Apr 02 16:49:45.338928 2026] [:error] [pid 23927:tid 23930] [client 68.221.136.149:16456] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ac4tqUsZwqCndhl9uKBhIgAAAYE"]
[Thu Apr 02 16:49:46.438959 2026] [:error] [pid 23927:tid 23931] [client 68.221.136.149:42282] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ac4tqksZwqCndhl9uKBhJQAAAYI"]
[Thu Apr 02 16:49:47.089159 2026] [:error] [pid 23927:tid 23950] [client 68.221.136.149:59592] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ac4tq0sZwqCndhl9uKBhJwAAAZU"]
[Thu Apr 02 16:49:47.696007 2026] [:error] [pid 59305:tid 59329] [client 68.221.136.149:15143] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ac4tq6r2tV4rDwKFxKcimQAAANQ"]
[Thu Apr 02 16:49:48.644004 2026] [:error] [pid 59200:tid 59247] [client 68.221.136.149:16477] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ac4trLfP26txrdLs3EpO4wAAAEc"]
[Thu Apr 02 16:49:49.441532 2026] [:error] [pid 29467:tid 29478] [client 68.221.136.149:15111] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ac4trb4VUBFCJAq-WOnxQAAAAQg"]
[Thu Apr 02 16:49:50.208938 2026] [:error] [pid 29467:tid 29493] [client 68.221.136.149:46686] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ac4trr4VUBFCJAq-WOnxQQAAARc"]
[Thu Apr 02 16:49:51.044178 2026] [:error] [pid 54384:tid 54408] [client 68.221.136.149:7373] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ac4tr9WWpaby3TVN7MfRTQAAAdY"]
[Thu Apr 02 16:49:51.737423 2026] [:error] [pid 29467:tid 29489] [client 68.221.136.149:32269] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ac4tr74VUBFCJAq-WOnxRwAAARM"]
[Thu Apr 02 16:49:52.610842 2026] [:error] [pid 23927:tid 23940] [client 68.221.136.149:55070] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ac4tsEsZwqCndhl9uKBhLAAAAYs"]
[Thu Apr 02 16:49:53.320042 2026] [:error] [pid 59200:tid 59263] [client 68.221.136.149:42259] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ac4tsbfP26txrdLs3EpO6AAAAFc"]
[Thu Apr 02 16:49:53.911025 2026] [:error] [pid 29467:tid 29470] [client 68.221.136.149:2822] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ac4tsb4VUBFCJAq-WOnxTgAAAQA"]
[Thu Apr 02 16:49:55.308048 2026] [:error] [pid 59305:tid 59321] [client 68.221.136.149:15134] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ac4ts6r2tV4rDwKFxKcinwAAAMw"]
[Thu Apr 02 16:49:56.105601 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:46714] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ac4ttL4VUBFCJAq-WOnxVQAAARg"]
[Thu Apr 02 16:49:56.806542 2026] [:error] [pid 59194:tid 59231] [client 68.221.136.149:32294] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ac4ttBMpAeV11hcQehwjEwAAABI"]
[Thu Apr 02 16:49:58.044305 2026] [:error] [pid 59200:tid 59264] [client 68.221.136.149:27291] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ac4ttrfP26txrdLs3EpO6wAAAFg"]
[Thu Apr 02 16:49:58.660720 2026] [:error] [pid 59201:tid 59281] [client 68.221.136.149:40608] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ac4ttsAC0Tw8eL6gzZ7vZgAAAI4"]
[Thu Apr 02 16:49:59.287868 2026] [:error] [pid 23927:tid 23932] [client 68.221.136.149:14691] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about2.php"] [unique_id "ac4tt0sZwqCndhl9uKBhMQAAAYM"]
[Thu Apr 02 16:50:00.017516 2026] [:error] [pid 37543:tid 37568] [client 68.221.136.149:7384] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about2.php"] [unique_id "ac4tuHhdk2bEYJCvILanFAAAAVc"]
[Thu Apr 02 16:50:00.782858 2026] [:error] [pid 59200:tid 59240] [client 68.221.136.149:18889] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about2.php"] [unique_id "ac4tuLfP26txrdLs3EpO9gAAAEA"]
[Thu Apr 02 16:50:01.273344 2026] [:error] [pid 37543:tid 37565] [client 68.221.136.149:56975] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about2.php"] [unique_id "ac4tuXhdk2bEYJCvILanFgAAAVQ"]
[Thu Apr 02 16:50:01.827948 2026] [:error] [pid 37543:tid 37548] [client 68.221.136.149:40625] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "ac4tuXhdk2bEYJCvILanGAAAAUM"]
[Thu Apr 02 16:50:02.432244 2026] [:error] [pid 37543:tid 37552] [client 68.221.136.149:7345] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "ac4tunhdk2bEYJCvILanGgAAAUc"]
[Thu Apr 02 16:50:03.270810 2026] [:error] [pid 59200:tid 59252] [client 68.221.136.149:57018] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "ac4tu7fP26txrdLs3EpO-wAAAEw"]
[Thu Apr 02 16:50:04.444640 2026] [:error] [pid 29467:tid 29490] [client 68.221.136.149:7404] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "ac4tvL4VUBFCJAq-WOnxbgAAARQ"]
[Thu Apr 02 16:50:05.396149 2026] [:error] [pid 59305:tid 59314] [client 68.221.136.149:53147] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ac4tvar2tV4rDwKFxKcirQAAAMU"]
[Thu Apr 02 16:50:06.182552 2026] [:error] [pid 54384:tid 54389] [client 68.221.136.149:40666] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ac4tvtWWpaby3TVN7MfRWgAAAcM"]
[Thu Apr 02 16:50:06.859643 2026] [:error] [pid 59305:tid 59317] [client 68.221.136.149:15126] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ac4tvqr2tV4rDwKFxKcirgAAAMg"]
[Thu Apr 02 16:50:07.534813 2026] [:error] [pid 37543:tid 37563] [client 68.221.136.149:42258] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ac4tv3hdk2bEYJCvILanKwAAAVI"]
[Thu Apr 02 16:50:08.513437 2026] [:error] [pid 59201:tid 59278] [client 68.221.136.149:53154] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac4twMAC0Tw8eL6gzZ7vbQAAAIs"]
[Thu Apr 02 16:50:09.282133 2026] [:error] [pid 23927:tid 23931] [client 68.221.136.149:15154] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac4twUsZwqCndhl9uKBhPQAAAYI"]
[Thu Apr 02 16:50:09.945825 2026] [:error] [pid 54384:tid 54395] [client 68.221.136.149:2830] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac4twdWWpaby3TVN7MfRXwAAAck"]
[Thu Apr 02 16:50:10.734665 2026] [:error] [pid 37543:tid 37549] [client 68.221.136.149:46681] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac4twnhdk2bEYJCvILanLwAAAUQ"]
[Thu Apr 02 16:50:11.768580 2026] [:error] [pid 29467:tid 29488] [client 68.221.136.149:53162] [client 68.221.136.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ac4tw74VUBFCJAq-WOnxfAAAARI"]
[Thu Apr 02 16:50:12.418179 2026] [:error] [pid 59194:tid 59218] [client 68.221.136.149:42269] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ac4txBMpAeV11hcQehwjJgAAAAU"]
[Thu Apr 02 16:50:13.665054 2026] [:error] [pid 29467:tid 29481] [client 68.221.136.149:15148] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ac4txb4VUBFCJAq-WOnxfgAAAQs"]
[Thu Apr 02 16:50:15.591871 2026] [:error] [pid 29467:tid 29489] [client 68.221.136.149:17282] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ac4tx74VUBFCJAq-WOnxhwAAARM"]
[Thu Apr 02 16:50:16.999768 2026] [:error] [pid 59201:tid 59280] [client 68.221.136.149:15116] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ac4tyMAC0Tw8eL6gzZ7vcwAAAI0"]
[Thu Apr 02 16:50:18.182814 2026] [:error] [pid 59305:tid 59330] [client 68.221.136.149:2479] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ac4tyqr2tV4rDwKFxKciswAAANU"]
[Thu Apr 02 16:50:19.280411 2026] [:error] [pid 37543:tid 37548] [client 68.221.136.149:53177] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ac4ty3hdk2bEYJCvILanOwAAAUM"]
[Thu Apr 02 16:50:20.281112 2026] [:error] [pid 29467:tid 29482] [client 68.221.136.149:47783] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ac4tzL4VUBFCJAq-WOnxlQAAAQw"]
[Thu Apr 02 16:50:20.872661 2026] [:error] [pid 59305:tid 59310] [client 68.221.136.149:40680] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ac4tzKr2tV4rDwKFxKcitQAAAME"]
[Thu Apr 02 16:50:21.963146 2026] [:error] [pid 23927:tid 23952] [client 68.221.136.149:40687] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ac4tzUsZwqCndhl9uKBhTQAAAZc"]
[Thu Apr 02 16:50:22.604297 2026] [:error] [pid 59194:tid 59226] [client 68.221.136.149:55060] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ac4tzhMpAeV11hcQehwjKwAAAA0"]
[Thu Apr 02 16:50:23.278738 2026] [:error] [pid 29467:tid 29478] [client 68.221.136.149:40684] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ac4tz74VUBFCJAq-WOnxnAAAAQg"]
[Thu Apr 02 16:50:24.258582 2026] [:error] [pid 29467:tid 29474] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Thu Apr 02 16:50:24.499512 2026] [:error] [pid 29467:tid 29481] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Apr 02 16:50:24.799086 2026] [:error] [pid 29467:tid 29482] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Thu Apr 02 16:50:25.103102 2026] [:error] [pid 29467:tid 29483] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Thu Apr 02 16:50:25.347685 2026] [:error] [pid 29467:tid 29492] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Thu Apr 02 16:50:25.601108 2026] [:error] [pid 29467:tid 29488] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Thu Apr 02 16:50:25.845671 2026] [:error] [pid 29467:tid 29481] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Thu Apr 02 16:50:26.087275 2026] [:error] [pid 29467:tid 29477] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Apr 02 16:50:26.328396 2026] [:error] [pid 29467:tid 29494] [client 68.221.136.149:31631] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Thu Apr 02 16:50:26.808058 2026] [:error] [pid 29467:tid 29483] [client 68.221.136.149:31631] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "ac4t0r4VUBFCJAq-WOnxuQAAAQ0"]
[Thu Apr 02 16:50:27.445398 2026] [:error] [pid 59305:tid 59318] [client 68.221.136.149:53136] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "ac4t06r2tV4rDwKFxKcivAAAAMk"]
[Thu Apr 02 16:50:28.033958 2026] [:error] [pid 59305:tid 59316] [client 68.221.136.149:10082] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "ac4t1Kr2tV4rDwKFxKciwAAAAMc"]
[Thu Apr 02 16:50:28.550849 2026] [:error] [pid 59305:tid 59315] [client 68.221.136.149:16413] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "ac4t1Kr2tV4rDwKFxKcixwAAAMY"]
[Thu Apr 02 16:50:29.085733 2026] [:error] [pid 23927:tid 23946] [client 68.221.136.149:14712] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "ac4t1UsZwqCndhl9uKBhWgAAAZE"]
[Thu Apr 02 16:50:29.659926 2026] [:error] [pid 59194:tid 59233] [client 68.221.136.149:10328] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "ac4t1RMpAeV11hcQehwjLwAAABQ"]
[Thu Apr 02 16:50:30.635321 2026] [:error] [pid 54384:tid 54391] [client 68.221.136.149:14701] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "ac4t1tWWpaby3TVN7MfReAAAAcU"]
[Thu Apr 02 16:50:32.244711 2026] [:error] [pid 59305:tid 59313] [client 68.221.136.149:42873] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "ac4t2Kr2tV4rDwKFxKci1AAAAMQ"]
[Thu Apr 02 16:50:33.234900 2026] [:error] [pid 59194:tid 59237] [client 68.221.136.149:15129] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ac4t2RMpAeV11hcQehwjNQAAABg"]
[Thu Apr 02 16:50:33.939360 2026] [:error] [pid 59200:tid 59253] [client 68.221.136.149:40616] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ac4t2bfP26txrdLs3EpPSwAAAE0"]
[Thu Apr 02 16:50:35.144161 2026] [:error] [pid 59305:tid 59330] [client 68.221.136.149:19230] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ac4t26r2tV4rDwKFxKci2wAAANU"]
[Thu Apr 02 16:50:35.807606 2026] [:error] [pid 59305:tid 59323] [client 68.221.136.149:53175] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ac4t26r2tV4rDwKFxKci3gAAAM4"]
[Thu Apr 02 16:50:36.511850 2026] [:error] [pid 54384:tid 54390] [client 68.221.136.149:12654] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ac4t3NWWpaby3TVN7MfRfgAAAcQ"]
[Thu Apr 02 16:50:37.256252 2026] [:error] [pid 59305:tid 59320] [client 68.221.136.149:10050] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ac4t3ar2tV4rDwKFxKci5wAAAMs"]
[Thu Apr 02 16:50:37.870539 2026] [:error] [pid 59305:tid 59314] [client 68.221.136.149:14184] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ac4t3ar2tV4rDwKFxKci6gAAAMU"]
[Thu Apr 02 16:50:38.471963 2026] [:error] [pid 29467:tid 29478] [client 68.221.136.149:40650] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ac4t3r4VUBFCJAq-WOnxyAAAAQg"]
[Thu Apr 02 16:50:39.299421 2026] [:error] [pid 59305:tid 59309] [client 68.221.136.149:31677] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "ac4t36r2tV4rDwKFxKci8AAAAMA"]
[Thu Apr 02 16:50:40.038028 2026] [:error] [pid 59305:tid 59332] [client 68.221.136.149:20353] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "ac4t4Kr2tV4rDwKFxKci9gAAANc"]
[Thu Apr 02 16:50:40.611843 2026] [:error] [pid 29467:tid 29482] [client 68.221.136.149:14678] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "ac4t4L4VUBFCJAq-WOnxzQAAAQw"]
[Thu Apr 02 16:50:41.162782 2026] [:error] [pid 29467:tid 29479] [client 68.221.136.149:18097] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "ac4t4b4VUBFCJAq-WOnx0QAAAQk"]
[Thu Apr 02 16:50:41.721105 2026] [:error] [pid 59305:tid 59317] [client 68.221.136.149:9262] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac4t4ar2tV4rDwKFxKcjCQAAAMg"]
[Thu Apr 02 16:50:42.540098 2026] [:error] [pid 23927:tid 23949] [client 68.221.136.149:31674] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac4t4ksZwqCndhl9uKBhYgAAAZQ"]
[Thu Apr 02 16:50:43.391956 2026] [:error] [pid 23927:tid 23945] [client 68.221.136.149:16441] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac4t40sZwqCndhl9uKBhaAAAAZA"]
[Thu Apr 02 16:50:44.038017 2026] [:error] [pid 23927:tid 23934] [client 68.221.136.149:31625] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac4t5EsZwqCndhl9uKBhaQAAAYU"]
[Thu Apr 02 16:50:44.739044 2026] [:error] [pid 29467:tid 29489] [client 68.221.136.149:12625] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "ac4t5L4VUBFCJAq-WOnx2AAAARM"]
[Thu Apr 02 16:50:45.435731 2026] [:error] [pid 54384:tid 54388] [client 68.221.136.149:12633] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "ac4t5dWWpaby3TVN7MfRhAAAAcI"]
[Thu Apr 02 16:50:46.027136 2026] [:error] [pid 29467:tid 29485] [client 68.221.136.149:16405] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "ac4t5r4VUBFCJAq-WOnx3gAAAQ8"]
[Thu Apr 02 16:50:46.594110 2026] [:error] [pid 29467:tid 29486] [client 68.221.136.149:10348] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "ac4t5r4VUBFCJAq-WOnx4AAAARA"]
[Thu Apr 02 16:50:47.660302 2026] [:error] [pid 23927:tid 23931] [client 68.221.136.149:31669] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac4t50sZwqCndhl9uKBhdAAAAYI"]
[Thu Apr 02 16:50:48.590008 2026] [:error] [pid 37543:tid 37564] [client 68.221.136.149:16394] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac4t6Hhdk2bEYJCvILanTgAAAVM"]
[Thu Apr 02 16:50:49.353086 2026] [:error] [pid 29467:tid 29491] [client 68.221.136.149:18458] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac4t6b4VUBFCJAq-WOnx5AAAARU"]
[Thu Apr 02 16:50:50.300527 2026] [:error] [pid 37543:tid 37567] [client 68.221.136.149:55055] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac4t6nhdk2bEYJCvILanVAAAAVY"]
[Thu Apr 02 16:50:51.278360 2026] [:error] [pid 54384:tid 54390] [client 68.221.136.149:12620] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "ac4t69WWpaby3TVN7MfRiQAAAcQ"]
[Thu Apr 02 16:50:52.092673 2026] [:error] [pid 59194:tid 59230] [client 68.221.136.149:9230] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "ac4t7BMpAeV11hcQehwjRAAAABE"]
[Thu Apr 02 16:50:53.156318 2026] [:error] [pid 59305:tid 59317] [client 68.221.136.149:18903] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "ac4t7ar2tV4rDwKFxKcjGQAAAMg"]
[Thu Apr 02 16:50:54.218855 2026] [:error] [pid 29467:tid 29491] [client 68.221.136.149:42819] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "ac4t7r4VUBFCJAq-WOnx7wAAARU"]
[Thu Apr 02 16:50:55.179779 2026] [:error] [pid 54384:tid 54398] [client 68.221.136.149:14197] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "ac4t79WWpaby3TVN7MfRiwAAAcw"]
[Thu Apr 02 16:50:55.953784 2026] [:error] [pid 29467:tid 29480] [client 68.221.136.149:9020] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "ac4t774VUBFCJAq-WOnx-AAAAQo"]
[Thu Apr 02 16:50:57.021393 2026] [:error] [pid 37543:tid 37557] [client 68.221.136.149:10059] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "ac4t8Xhdk2bEYJCvILanVwAAAUw"]
[Thu Apr 02 16:50:57.646534 2026] [:error] [pid 59305:tid 59314] [client 68.221.136.149:7472] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "ac4t8ar2tV4rDwKFxKcjKQAAAMU"]
[Thu Apr 02 16:50:58.421922 2026] [:error] [pid 59201:tid 59272] [client 68.221.136.149:9009] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "ac4t8sAC0Tw8eL6gzZ7vmAAAAIU"]
[Thu Apr 02 16:50:59.154461 2026] [:error] [pid 29467:tid 29485] [client 68.221.136.149:18902] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "ac4t874VUBFCJAq-WOnx_gAAAQ8"]
[Thu Apr 02 16:51:01.321779 2026] [:error] [pid 54384:tid 54407] [client 68.221.136.149:18881] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "ac4t9dWWpaby3TVN7MfRjwAAAdU"]
[Thu Apr 02 16:51:02.509764 2026] [:error] [pid 59200:tid 59243] [client 68.221.136.149:53152] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "ac4t9rfP26txrdLs3EpPWgAAAEM"]
[Thu Apr 02 16:51:03.172130 2026] [:error] [pid 54384:tid 54397] [client 68.221.136.149:12668] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "ac4t99WWpaby3TVN7MfRkQAAAcs"]
[Thu Apr 02 16:51:04.054572 2026] [:error] [pid 29467:tid 29492] [client 68.221.136.149:10055] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "ac4t-L4VUBFCJAq-WOnyAgAAARY"]
[Thu Apr 02 16:51:04.695525 2026] [:error] [pid 37543:tid 37564] [client 68.221.136.149:10093] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "ac4t-Hhdk2bEYJCvILanYAAAAVM"]
[Thu Apr 02 16:51:05.326222 2026] [:error] [pid 23927:tid 23945] [client 68.221.136.149:10366] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "ac4t-UsZwqCndhl9uKBhmAAAAZA"]
[Thu Apr 02 16:51:05.908388 2026] [:error] [pid 54384:tid 54401] [client 68.221.136.149:18932] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "ac4t-dWWpaby3TVN7MfRlAAAAc8"]
[Thu Apr 02 16:51:06.911865 2026] [:error] [pid 59194:tid 59232] [client 68.221.136.149:40662] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "ac4t-hMpAeV11hcQehwjbwAAABM"]
[Thu Apr 02 16:51:08.966764 2026] [:error] [pid 23927:tid 23940] [client 68.221.136.149:14164] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "ac4t_EsZwqCndhl9uKBhoQAAAYs"]
[Thu Apr 02 16:51:12.403460 2026] [:error] [pid 59305:tid 59329] [client 68.221.136.149:18454] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "ac4uAKr2tV4rDwKFxKcjOgAAANQ"]
[Thu Apr 02 16:51:13.061211 2026] [:error] [pid 59201:tid 59272] [client 68.221.136.149:12658] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "ac4uAcAC0Tw8eL6gzZ7vnAAAAIU"]
[Thu Apr 02 16:51:13.677213 2026] [:error] [pid 59305:tid 59323] [client 68.221.136.149:16385] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "ac4uAar2tV4rDwKFxKcjPAAAAM4"]
[Thu Apr 02 16:51:14.317185 2026] [:error] [pid 59305:tid 59324] [client 68.221.136.149:53138] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "ac4uAqr2tV4rDwKFxKcjPQAAAM8"]
[Thu Apr 02 16:51:14.862283 2026] [:error] [pid 59305:tid 59312] [client 68.221.136.149:42836] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "ac4uAqr2tV4rDwKFxKcjPgAAAMM"]
[Thu Apr 02 16:51:15.780802 2026] [:error] [pid 59305:tid 59320] [client 68.221.136.149:10363] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "ac4uA6r2tV4rDwKFxKcjQgAAAMs"]
[Thu Apr 02 16:51:16.530271 2026] [:error] [pid 59305:tid 59322] [client 68.221.136.149:14162] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "ac4uBKr2tV4rDwKFxKcjRAAAAM0"]
[Thu Apr 02 16:51:17.385864 2026] [:error] [pid 59305:tid 59310] [client 68.221.136.149:7487] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "ac4uBar2tV4rDwKFxKcjSgAAAME"]
[Thu Apr 02 16:51:18.034890 2026] [:error] [pid 59305:tid 59309] [client 68.221.136.149:53146] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/efile.php"] [unique_id "ac4uBqr2tV4rDwKFxKcjTgAAAMA"]
[Thu Apr 02 16:51:18.933328 2026] [:error] [pid 23927:tid 23932] [client 68.221.136.149:8989] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "ac4uBksZwqCndhl9uKBhpgAAAYM"]
[Thu Apr 02 16:51:19.591894 2026] [:error] [pid 29467:tid 29484] [client 68.221.136.149:16410] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "ac4uB74VUBFCJAq-WOnyHAAAAQ4"]
[Thu Apr 02 16:51:20.383304 2026] [:error] [pid 29467:tid 29491] [client 68.221.136.149:19968] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "ac4uCL4VUBFCJAq-WOnyHgAAARU"]
[Thu Apr 02 16:51:21.623367 2026] [:error] [pid 23927:tid 23948] [client 68.221.136.149:31667] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "ac4uCUsZwqCndhl9uKBhrwAAAZM"]
[Thu Apr 02 16:51:22.217740 2026] [:error] [pid 29467:tid 29473] [client 68.221.136.149:16406] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "ac4uCr4VUBFCJAq-WOnyJgAAAQM"]
[Thu Apr 02 16:51:22.771418 2026] [:error] [pid 59305:tid 59318] [client 68.221.136.149:28417] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "ac4uCqr2tV4rDwKFxKcjUwAAAMk"]
[Thu Apr 02 16:51:23.722514 2026] [:error] [pid 59201:tid 59271] [client 68.221.136.149:18925] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "ac4uC8AC0Tw8eL6gzZ7vrAAAAIQ"]
[Thu Apr 02 16:51:24.486378 2026] [:error] [pid 23927:tid 23937] [client 68.221.136.149:28426] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "ac4uDEsZwqCndhl9uKBhtAAAAYg"]
[Thu Apr 02 16:51:25.037701 2026] [:error] [pid 29467:tid 29473] [client 68.221.136.149:18892] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac4uDb4VUBFCJAq-WOnyMgAAAQM"]
[Thu Apr 02 16:51:25.837502 2026] [:error] [pid 29467:tid 29478] [client 68.221.136.149:28439] [client 68.221.136.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac4uDb4VUBFCJAq-WOnyOAAAAQg"]
[Thu Apr 02 16:51:26.900250 2026] [:error] [pid 59305:tid 59321] [client 68.221.136.149:14204] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Apr 02 16:51:27.182822 2026] [:error] [pid 59305:tid 59330] [client 68.221.136.149:14204] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Thu Apr 02 16:51:27.448353 2026] [:error] [pid 59305:tid 59324] [client 68.221.136.149:14204] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 02 16:51:27.723465 2026] [:error] [pid 59305:tid 59311] [client 68.221.136.149:14204] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 02 17:07:23.626397 2026] [:error] [pid 59305:tid 59314] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Thu Apr 02 17:07:24.951413 2026] [:error] [pid 59305:tid 59314] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Thu Apr 02 17:07:25.225687 2026] [:error] [pid 59305:tid 59326] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/f2.php
[Thu Apr 02 17:07:25.490800 2026] [:error] [pid 59305:tid 59315] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/classc.php
[Thu Apr 02 17:07:25.755843 2026] [:error] [pid 59305:tid 59318] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Thu Apr 02 17:07:26.026362 2026] [:error] [pid 59305:tid 59333] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/class-cc.php
[Thu Apr 02 17:07:26.292130 2026] [:error] [pid 59305:tid 59310] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 02 17:07:26.557930 2026] [:error] [pid 59305:tid 59311] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/brtnd.php
[Thu Apr 02 17:07:26.839651 2026] [:error] [pid 59305:tid 59328] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/azrhw.php
[Thu Apr 02 17:07:27.109367 2026] [:error] [pid 59305:tid 59322] [client 51.12.92.153:14626] File does not exist: /usr/local/apache/htdocs/suspended-page/cnusw.php
[Thu Apr 02 17:07:27.372819 2026] [:error] [pid 59305:tid 59316] [client 51.12.92.153:14626] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dtwpf.php"] [unique_id "ac4xz6r2tV4rDwKFxKcraAAAAMc"]
[Thu Apr 02 17:07:28.006306 2026] [:error] [pid 54384:tid 54399] [client 51.12.92.153:64476] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac4x0NWWpaby3TVN7MfV2wAAAc0"]
[Thu Apr 02 17:07:28.918964 2026] [:error] [pid 29467:tid 29482] [client 51.12.92.153:64507] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac4x0L4VUBFCJAq-WOn9fwAAAQw"]
[Thu Apr 02 17:07:29.704428 2026] [:error] [pid 29467:tid 29487] [client 51.12.92.153:12683] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac4x0b4VUBFCJAq-WOn9hAAAARE"]
[Thu Apr 02 17:07:30.421117 2026] [:error] [pid 59200:tid 59252] [client 51.12.92.153:63492] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac4x0rfP26txrdLs3EpR_wAAAEw"]
[Thu Apr 02 17:07:31.029375 2026] [:error] [pid 29467:tid 29494] [client 51.12.92.153:60944] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lef.php"] [unique_id "ac4x074VUBFCJAq-WOn9hwAAARg"]
[Thu Apr 02 17:07:31.953645 2026] [:error] [pid 59200:tid 59247] [client 51.12.92.153:10479] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lef.php"] [unique_id "ac4x07fP26txrdLs3EpSAgAAAEc"]
[Thu Apr 02 17:07:32.637901 2026] [:error] [pid 59194:tid 59234] [client 51.12.92.153:20038] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lef.php"] [unique_id "ac4x1BMpAeV11hcQehwmEwAAABU"]
[Thu Apr 02 17:07:33.435719 2026] [:error] [pid 59200:tid 59254] [client 51.12.92.153:60991] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lef.php"] [unique_id "ac4x1bfP26txrdLs3EpSCAAAAE4"]
[Thu Apr 02 17:07:34.175526 2026] [:error] [pid 59200:tid 59242] [client 51.12.92.153:14603] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4x1rfP26txrdLs3EpSDQAAAEI"]
[Thu Apr 02 17:07:34.989033 2026] [:error] [pid 59194:tid 59237] [client 51.12.92.153:63514] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4x1hMpAeV11hcQehwmHgAAABg"]
[Thu Apr 02 17:07:35.624993 2026] [:error] [pid 29467:tid 29470] [client 51.12.92.153:64259] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4x174VUBFCJAq-WOn9jwAAAQA"]
[Thu Apr 02 17:07:36.233640 2026] [:error] [pid 37543:tid 37568] [client 51.12.92.153:2978] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ac4x2Hhdk2bEYJCvILarHQAAAVc"]
[Thu Apr 02 17:07:37.321883 2026] [:error] [pid 29467:tid 29486] [client 51.12.92.153:2668] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac4x2b4VUBFCJAq-WOn9ngAAARA"]
[Thu Apr 02 17:07:38.902952 2026] [:error] [pid 59305:tid 59324] [client 51.12.92.153:2678] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac4x2qr2tV4rDwKFxKcrhgAAAM8"]
[Thu Apr 02 17:07:39.770982 2026] [:error] [pid 59305:tid 59325] [client 51.12.92.153:60423] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac4x26r2tV4rDwKFxKcrhwAAANA"]
[Thu Apr 02 17:07:40.498648 2026] [:error] [pid 59305:tid 59322] [client 51.12.92.153:63494] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac4x3Kr2tV4rDwKFxKcrjgAAAM0"]
[Thu Apr 02 17:07:41.566400 2026] [:error] [pid 37543:tid 37565] [client 51.12.92.153:20065] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "ac4x3Xhdk2bEYJCvILarLQAAAVQ"]
[Thu Apr 02 17:07:42.211755 2026] [:error] [pid 29467:tid 29485] [client 51.12.92.153:14625] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "ac4x3r4VUBFCJAq-WOn9sgAAAQ8"]
[Thu Apr 02 17:07:43.111903 2026] [:error] [pid 23927:tid 23931] [client 51.12.92.153:63596] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "ac4x30sZwqCndhl9uKBneAAAAYI"]
[Thu Apr 02 17:07:43.755319 2026] [:error] [pid 59305:tid 59317] [client 51.12.92.153:2965] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "ac4x36r2tV4rDwKFxKcrnwAAAMg"]
[Thu Apr 02 17:07:44.415903 2026] [:error] [pid 59305:tid 59329] [client 51.12.92.153:10456] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ac4x4Kr2tV4rDwKFxKcroQAAANQ"]
[Thu Apr 02 17:07:45.252178 2026] [:error] [pid 23927:tid 23944] [client 51.12.92.153:63492] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ac4x4UsZwqCndhl9uKBnfAAAAY8"]
[Thu Apr 02 17:07:46.205728 2026] [:error] [pid 59305:tid 59317] [client 51.12.92.153:14649] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ac4x4qr2tV4rDwKFxKcrqwAAAMg"]
[Thu Apr 02 17:07:47.535651 2026] [:error] [pid 29467:tid 29494] [client 51.12.92.153:2983] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ac4x474VUBFCJAq-WOn91QAAARg"]
[Thu Apr 02 17:07:49.389999 2026] [:error] [pid 59201:tid 59281] [client 51.12.92.153:60937] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "ac4x5cAC0Tw8eL6gzZ7y_AAAAI4"]
[Thu Apr 02 17:08:05.860387 2026] [:error] [pid 37543:tid 37563] [client 51.12.92.153:2643] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilng.php"] [unique_id "ac4x9Xhdk2bEYJCvILarPgAAAVI"]
[Thu Apr 02 17:08:07.007859 2026] [:error] [pid 59305:tid 59333] [client 51.12.92.153:14631] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilng.php"] [unique_id "ac4x96r2tV4rDwKFxKcr8QAAANg"]
[Thu Apr 02 17:08:08.293579 2026] [:error] [pid 59200:tid 59245] [client 51.12.92.153:2672] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilng.php"] [unique_id "ac4x-LfP26txrdLs3EpSJQAAAEU"]
[Thu Apr 02 17:08:09.635061 2026] [:error] [pid 29467:tid 29481] [client 51.12.92.153:20043] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f222.php"] [unique_id "ac4x-b4VUBFCJAq-WOn-TwAAAQs"]
[Thu Apr 02 17:08:10.251980 2026] [:error] [pid 23927:tid 23938] [client 51.12.92.153:64286] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f222.php"] [unique_id "ac4x-ksZwqCndhl9uKBnpAAAAYk"]
[Thu Apr 02 17:08:11.051531 2026] [:error] [pid 29467:tid 29481] [client 51.12.92.153:63567] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f222.php"] [unique_id "ac4x-74VUBFCJAq-WOn-VgAAAQs"]
[Thu Apr 02 17:08:12.050851 2026] [:error] [pid 59200:tid 59250] [client 51.12.92.153:64492] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f222.php"] [unique_id "ac4x_LfP26txrdLs3EpSJwAAAEo"]
[Thu Apr 02 17:08:12.735953 2026] [:error] [pid 29467:tid 29475] [client 51.12.92.153:64460] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac4x_L4VUBFCJAq-WOn-YQAAAQU"]
[Thu Apr 02 17:08:13.548319 2026] [:error] [pid 59194:tid 59227] [client 51.12.92.153:63519] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac4x_RMpAeV11hcQehwmKgAAAA4"]
[Thu Apr 02 17:08:14.334215 2026] [:error] [pid 59305:tid 59322] [client 51.12.92.153:20082] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac4x_qr2tV4rDwKFxKcr_gAAAM0"]
[Thu Apr 02 17:08:14.949517 2026] [:error] [pid 29467:tid 29477] [client 51.12.92.153:63506] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ac4x_r4VUBFCJAq-WOn-bQAAAQc"]
[Thu Apr 02 17:08:15.615536 2026] [:error] [pid 23927:tid 23931] [client 51.12.92.153:20054] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "ac4x_0sZwqCndhl9uKBnswAAAYI"]
[Thu Apr 02 17:08:16.455476 2026] [:error] [pid 29467:tid 29490] [client 51.12.92.153:64299] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "ac4yAL4VUBFCJAq-WOn-cQAAARQ"]
[Thu Apr 02 17:08:17.109158 2026] [:error] [pid 54384:tid 54407] [client 51.12.92.153:63558] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "ac4yAdWWpaby3TVN7MfWIgAAAdU"]
[Thu Apr 02 17:08:18.300526 2026] [:error] [pid 29467:tid 29473] [client 51.12.92.153:63594] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "ac4yAr4VUBFCJAq-WOn-dAAAAQM"]
[Thu Apr 02 17:08:18.838430 2026] [:error] [pid 54384:tid 54397] [client 51.12.92.153:60465] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4yAtWWpaby3TVN7MfWJAAAAcs"]
[Thu Apr 02 17:08:19.856875 2026] [:error] [pid 23927:tid 23937] [client 51.12.92.153:10449] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4yA0sZwqCndhl9uKBnwAAAAYg"]
[Thu Apr 02 17:08:21.093222 2026] [:error] [pid 59305:tid 59309] [client 51.12.92.153:64260] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4yBar2tV4rDwKFxKcsFQAAAMA"]
[Thu Apr 02 17:08:22.939776 2026] [:error] [pid 59201:tid 59282] [client 51.12.92.153:14618] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ac4yBsAC0Tw8eL6gzZ7zDgAAAI8"]
[Thu Apr 02 17:08:23.689257 2026] [:error] [pid 59194:tid 59236] [client 51.12.92.153:60430] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4yBxMpAeV11hcQehwmLgAAABc"]
[Thu Apr 02 17:08:24.685608 2026] [:error] [pid 59305:tid 59321] [client 51.12.92.153:64475] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4yCKr2tV4rDwKFxKcsJAAAAMw"]
[Thu Apr 02 17:08:25.254266 2026] [:error] [pid 59305:tid 59332] [client 51.12.92.153:63600] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4yCar2tV4rDwKFxKcsJwAAANc"]
[Thu Apr 02 17:08:26.172400 2026] [:error] [pid 23927:tid 23930] [client 51.12.92.153:3006] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ac4yCksZwqCndhl9uKBn0QAAAYE"]
[Thu Apr 02 17:08:26.843283 2026] [:error] [pid 29467:tid 29479] [client 51.12.92.153:64296] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "ac4yCr4VUBFCJAq-WOn-hAAAAQk"]
[Thu Apr 02 17:08:27.678958 2026] [:error] [pid 37543:tid 37552] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/ckk.php
[Thu Apr 02 17:08:27.945517 2026] [:error] [pid 37543:tid 37566] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/kiwkiw.php
[Thu Apr 02 17:08:28.217769 2026] [:error] [pid 37543:tid 37563] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Thu Apr 02 17:08:28.484827 2026] [:error] [pid 37543:tid 37550] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu Apr 02 17:08:28.751860 2026] [:error] [pid 37543:tid 37553] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-upload.php
[Thu Apr 02 17:08:29.016677 2026] [:error] [pid 37543:tid 37547] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Thu Apr 02 17:08:29.281487 2026] [:error] [pid 37543:tid 37548] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Thu Apr 02 17:08:29.561071 2026] [:error] [pid 37543:tid 37554] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa.php
[Thu Apr 02 17:08:29.825847 2026] [:error] [pid 37543:tid 37561] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Apr 02 17:08:30.093565 2026] [:error] [pid 37543:tid 37559] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Thu Apr 02 17:08:30.361361 2026] [:error] [pid 37543:tid 37559] [client 51.12.92.153:63502] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Thu Apr 02 17:08:30.623185 2026] [:error] [pid 37543:tid 37558] [client 51.12.92.153:63502] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "ac4yDnhdk2bEYJCvILarWQAAAU0"]
[Thu Apr 02 17:08:31.670637 2026] [:error] [pid 29467:tid 29493] [client 51.12.92.153:14619] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "ac4yD74VUBFCJAq-WOn-kgAAARc"]
[Thu Apr 02 17:08:32.609148 2026] [:error] [pid 59305:tid 59318] [client 51.12.92.153:2991] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "ac4yEKr2tV4rDwKFxKcsNAAAAMk"]
[Thu Apr 02 17:08:33.338607 2026] [:error] [pid 59305:tid 59328] [client 51.12.92.153:20084] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "ac4yEar2tV4rDwKFxKcsNwAAANM"]
[Thu Apr 02 17:08:34.176941 2026] [:error] [pid 29467:tid 29490] [client 51.12.92.153:2967] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "ac4yEr4VUBFCJAq-WOn-nwAAARQ"]
[Thu Apr 02 17:08:35.832900 2026] [:error] [pid 59201:tid 59275] [client 51.12.92.153:63614] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "ac4yE8AC0Tw8eL6gzZ7zIAAAAIg"]
[Thu Apr 02 17:08:36.863657 2026] [:error] [pid 59305:tid 59319] [client 51.12.92.153:2673] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "ac4yFKr2tV4rDwKFxKcsPQAAAMo"]
[Thu Apr 02 17:08:37.909224 2026] [:error] [pid 59194:tid 59213] [client 51.12.92.153:60983] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "ac4yFRMpAeV11hcQehwmNAAAAAA"]
[Thu Apr 02 17:08:38.867350 2026] [:error] [pid 59201:tid 59282] [client 51.12.92.153:12690] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmp.php"] [unique_id "ac4yFsAC0Tw8eL6gzZ7zIwAAAI8"]
[Thu Apr 02 17:08:40.832247 2026] [:error] [pid 59305:tid 59317] [client 51.12.92.153:64464] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ac4yGKr2tV4rDwKFxKcsSQAAAMg"]
[Thu Apr 02 17:08:41.408452 2026] [:error] [pid 59201:tid 59274] [client 51.12.92.153:54195] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ac4yGcAC0Tw8eL6gzZ7zKgAAAIc"]
[Thu Apr 02 17:08:42.346541 2026] [:error] [pid 37543:tid 37564] [client 51.12.92.153:60948] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ac4yGnhdk2bEYJCvILarWgAAAVM"]
[Thu Apr 02 17:08:43.718934 2026] [:error] [pid 37543:tid 37567] [client 51.12.92.153:54170] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ac4yG3hdk2bEYJCvILarXAAAAVY"]
[Thu Apr 02 17:08:44.955904 2026] [:error] [pid 54384:tid 54408] [client 51.12.92.153:20047] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ac4yHNWWpaby3TVN7MfWSgAAAdY"]
[Thu Apr 02 17:08:45.884281 2026] [:error] [pid 59305:tid 59318] [client 51.12.92.153:12688] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ac4yHar2tV4rDwKFxKcsWAAAAMk"]
[Thu Apr 02 17:08:47.125708 2026] [:error] [pid 59305:tid 59328] [client 51.12.92.153:12731] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ac4yH6r2tV4rDwKFxKcsXAAAANM"]
[Thu Apr 02 17:08:48.889760 2026] [:error] [pid 59201:tid 59281] [client 51.12.92.153:12692] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ac4yIMAC0Tw8eL6gzZ7zMAAAAI4"]
[Thu Apr 02 17:08:49.748774 2026] [:error] [pid 23927:tid 23944] [client 51.12.92.153:12697] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "ac4yIUsZwqCndhl9uKBn7gAAAY8"]
[Thu Apr 02 17:08:51.922595 2026] [:error] [pid 54384:tid 54387] [client 51.12.92.153:64509] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "ac4yI9WWpaby3TVN7MfWTgAAAcE"]
[Thu Apr 02 17:08:53.239578 2026] [:error] [pid 54384:tid 54392] [client 51.12.92.153:20095] [client 51.12.92.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "ac4yJdWWpaby3TVN7MfWUwAAAcY"]
[Thu Apr 02 17:47:36.842663 2026] [:error] [pid 59200:tid 59246] [client 43.155.129.131:47362] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ac47OLfP26txrdLs3EpY6gAAAEY"]
[Thu Apr 02 21:26:50.777207 2026] [:error] [pid 59201:tid 59267] [client 43.157.179.227:38304] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac5umsAC0Tw8eL6gzZ4vYAAAAIA"]
[Thu Apr 02 22:15:57.656577 2026] [:error] [pid 54384:tid 54386] [client 172.213.211.100:10920] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Thu Apr 02 23:00:16.198826 2026] [:error] [pid 54384:tid 54407] [client 216.24.210.250:31809] [client 216.24.210.250] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac6EgNWWpaby3TVN7MdH7QAAAdU"]
[Fri Apr 03 00:04:06.113268 2026] [:error] [pid 37543:tid 37562] [client 51.103.96.198:26475] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Fri Apr 03 00:42:56.820474 2026] [:error] [pid 25018:tid 25419] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Fri Apr 03 00:42:57.087057 2026] [:error] [pid 25018:tid 25411] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/8daf1238_1774208172.php
[Fri Apr 03 00:42:57.353609 2026] [:error] [pid 25018:tid 25412] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/0yellow.php
[Fri Apr 03 00:42:57.619666 2026] [:error] [pid 25018:tid 25437] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/dichku.php
[Fri Apr 03 00:42:57.888424 2026] [:error] [pid 25018:tid 25424] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 03 00:42:58.154001 2026] [:error] [pid 25018:tid 25432] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Fri Apr 03 00:42:58.421141 2026] [:error] [pid 25018:tid 25427] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 03 00:42:59.889385 2026] [:error] [pid 25018:tid 25427] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/a9.php
[Fri Apr 03 00:43:00.161989 2026] [:error] [pid 25018:tid 25431] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 03 00:43:00.429698 2026] [:error] [pid 25018:tid 25419] [client 20.91.188.46:16992] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Fri Apr 03 00:43:01.013669 2026] [:error] [pid 25018:tid 25419] [client 20.91.188.46:16992] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "ac6clXupR6lXnAUzFGrdZAAAAEY"]
[Fri Apr 03 00:43:01.554259 2026] [:error] [pid 25035:tid 25462] [client 20.91.188.46:14973] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "ac6clRhR292toNOkLqGVQgAAAJQ"]
[Fri Apr 03 00:43:02.102611 2026] [:error] [pid 25035:tid 25464] [client 20.91.188.46:16456] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "ac6clhhR292toNOkLqGVQwAAAJY"]
[Fri Apr 03 00:43:02.643680 2026] [:error] [pid 25035:tid 25444] [client 20.91.188.46:16493] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "ac6clhhR292toNOkLqGVRQAAAII"]
[Fri Apr 03 00:43:03.171814 2026] [:error] [pid 25035:tid 25447] [client 20.91.188.46:16974] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6clxhR292toNOkLqGVSAAAAIU"]
[Fri Apr 03 00:43:03.698040 2026] [:error] [pid 25035:tid 25454] [client 20.91.188.46:11193] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6clxhR292toNOkLqGVSwAAAIw"]
[Fri Apr 03 00:43:04.237470 2026] [:error] [pid 25010:tid 25357] [client 20.91.188.46:19243] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6cmI_KcjFQF5TuqTV_owAAAAk"]
[Fri Apr 03 00:43:04.765294 2026] [:error] [pid 25470:tid 25488] [client 20.91.188.46:22840] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "ac6cmHhROcck6_9HYyjgygAAANA"]
[Fri Apr 03 00:43:05.307844 2026] [:error] [pid 25035:tid 25444] [client 20.91.188.46:24312] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac6cmRhR292toNOkLqGVVQAAAII"]
[Fri Apr 03 00:43:05.836119 2026] [:error] [pid 25010:tid 25354] [client 20.91.188.46:8341] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac6cmY_KcjFQF5TuqTV_pQAAAAY"]
[Fri Apr 03 00:43:06.367485 2026] [:error] [pid 25470:tid 25493] [client 20.91.188.46:53095] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac6cmnhROcck6_9HYyjg1wAAANU"]
[Fri Apr 03 00:43:06.919019 2026] [:error] [pid 25018:tid 25414] [client 20.91.188.46:24268] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac6cmnupR6lXnAUzFGrdewAAAEI"]
[Fri Apr 03 00:43:07.453539 2026] [:error] [pid 25470:tid 25480] [client 20.91.188.46:29166] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "ac6cm3hROcck6_9HYyjg3QAAAMg"]
[Fri Apr 03 00:43:07.980744 2026] [:error] [pid 25018:tid 25428] [client 20.91.188.46:22791] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "ac6cm3upR6lXnAUzFGrdgAAAAE8"]
[Fri Apr 03 00:43:08.509472 2026] [:error] [pid 25470:tid 25476] [client 20.91.188.46:17012] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "ac6cnHhROcck6_9HYyjg5QAAAMQ"]
[Fri Apr 03 00:43:09.042082 2026] [:error] [pid 25470:tid 25478] [client 20.91.188.46:16994] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "ac6cnXhROcck6_9HYyjg7AAAAMY"]
[Fri Apr 03 00:43:09.568041 2026] [:error] [pid 25470:tid 25492] [client 20.91.188.46:2024] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6cnXhROcck6_9HYyjg9AAAANQ"]
[Fri Apr 03 00:43:10.106136 2026] [:error] [pid 25010:tid 25369] [client 20.91.188.46:29164] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6cno_KcjFQF5TuqTV_rAAAABQ"]
[Fri Apr 03 00:43:10.647156 2026] [:error] [pid 25035:tid 25443] [client 20.91.188.46:14940] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6cnhhR292toNOkLqGVcgAAAIE"]
[Fri Apr 03 00:43:11.186053 2026] [:error] [pid 25018:tid 25432] [client 20.91.188.46:16197] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318124352.php"] [unique_id "ac6cn3upR6lXnAUzFGrdiQAAAFM"]
[Fri Apr 03 00:43:11.715275 2026] [:error] [pid 25035:tid 25461] [client 20.91.188.46:24264] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6cnxhR292toNOkLqGVdwAAAJM"]
[Fri Apr 03 00:43:12.246115 2026] [:error] [pid 25010:tid 25354] [client 20.91.188.46:53089] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6coI_KcjFQF5TuqTV_rwAAAAY"]
[Fri Apr 03 00:43:12.772081 2026] [:error] [pid 25010:tid 25372] [client 20.91.188.46:19209] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6coI_KcjFQF5TuqTV_sgAAABc"]
[Fri Apr 03 00:43:13.299159 2026] [:error] [pid 25010:tid 25347] [client 20.91.188.46:22843] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac6coY_KcjFQF5TuqTV_tAAAAAA"]
[Fri Apr 03 00:43:13.838746 2026] [:error] [pid 25010:tid 25368] [client 20.91.188.46:11185] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "ac6coY_KcjFQF5TuqTV_twAAABM"]
[Fri Apr 03 00:43:14.395253 2026] [:error] [pid 25010:tid 25361] [client 20.91.188.46:1360] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "ac6coo_KcjFQF5TuqTV_uQAAAAw"]
[Fri Apr 03 00:43:14.937900 2026] [:error] [pid 25010:tid 25364] [client 20.91.188.46:24313] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "ac6coo_KcjFQF5TuqTV_vgAAAA8"]
[Fri Apr 03 00:43:15.468323 2026] [:error] [pid 25035:tid 25451] [client 20.91.188.46:26278] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "ac6coxhR292toNOkLqGVggAAAIk"]
[Fri Apr 03 00:43:16.009517 2026] [:error] [pid 25035:tid 25452] [client 20.91.188.46:24263] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6cpBhR292toNOkLqGViQAAAIo"]
[Fri Apr 03 00:43:16.537145 2026] [:error] [pid 25010:tid 25367] [client 20.91.188.46:29635] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6cpI_KcjFQF5TuqTV_xQAAABI"]
[Fri Apr 03 00:43:17.078361 2026] [:error] [pid 25010:tid 25352] [client 20.91.188.46:17015] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6cpY_KcjFQF5TuqTV_zAAAAAQ"]
[Fri Apr 03 00:43:17.609049 2026] [:error] [pid 25010:tid 25366] [client 20.91.188.46:29672] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "ac6cpY_KcjFQF5TuqTV_1QAAABE"]
[Fri Apr 03 00:43:18.144722 2026] [:error] [pid 25018:tid 25426] [client 20.91.188.46:13004] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6cpnupR6lXnAUzFGrdowAAAE0"]
[Fri Apr 03 00:43:18.678584 2026] [:error] [pid 25018:tid 25429] [client 20.91.188.46:13024] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6cpnupR6lXnAUzFGrdqwAAAFA"]
[Fri Apr 03 00:43:19.214039 2026] [:error] [pid 25470:tid 25479] [client 20.91.188.46:10888] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6cp3hROcck6_9HYyjhKgAAAMc"]
[Fri Apr 03 00:43:19.739566 2026] [:error] [pid 25470:tid 25496] [client 20.91.188.46:15743] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kthusnjbc8ab0jiryls2jinCdefault.php"] [unique_id "ac6cp3hROcck6_9HYyjhLwAAANg"]
[Fri Apr 03 00:43:20.268852 2026] [:error] [pid 25470:tid 25476] [client 20.91.188.46:51778] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ac6cqHhROcck6_9HYyjhNAAAAMQ"]
[Fri Apr 03 00:43:20.800181 2026] [:error] [pid 25010:tid 25363] [client 20.91.188.46:10902] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ac6cqI_KcjFQF5TuqTV_6gAAAA4"]
[Fri Apr 03 00:43:21.333176 2026] [:error] [pid 25470:tid 25495] [client 20.91.188.46:21862] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ac6cqXhROcck6_9HYyjhPgAAANc"]
[Fri Apr 03 00:43:21.860320 2026] [:error] [pid 25470:tid 25494] [client 20.91.188.46:10935] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ac6cqXhROcck6_9HYyjhRAAAANY"]
[Fri Apr 03 00:43:22.396855 2026] [:error] [pid 25470:tid 25479] [client 20.91.188.46:10948] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "ac6cqnhROcck6_9HYyjhSgAAAMc"]
[Fri Apr 03 00:43:22.936850 2026] [:error] [pid 25470:tid 25495] [client 20.91.188.46:48756] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "ac6cqnhROcck6_9HYyjhTwAAANc"]
[Fri Apr 03 00:43:23.474511 2026] [:error] [pid 25470:tid 25484] [client 20.91.188.46:15690] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "ac6cq3hROcck6_9HYyjhVwAAAMw"]
[Fri Apr 03 00:43:24.013898 2026] [:error] [pid 25018:tid 25424] [client 20.91.188.46:29117] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "ac6crHupR6lXnAUzFGrduAAAAEs"]
[Fri Apr 03 00:43:24.538618 2026] [:error] [pid 25470:tid 25489] [client 20.91.188.46:11000] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac6crHhROcck6_9HYyjhZAAAANE"]
[Fri Apr 03 00:43:25.063146 2026] [:error] [pid 25010:tid 25373] [client 20.91.188.46:29093] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac6crY_KcjFQF5TuqTV_9gAAABg"]
[Fri Apr 03 00:43:25.591531 2026] [:error] [pid 25470:tid 25492] [client 20.91.188.46:30646] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac6crXhROcck6_9HYyjhbgAAANQ"]
[Fri Apr 03 00:43:26.121282 2026] [:error] [pid 25470:tid 25487] [client 20.91.188.46:17207] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "ac6crnhROcck6_9HYyjhdwAAAM8"]
[Fri Apr 03 00:43:26.672966 2026] [:error] [pid 25018:tid 25425] [client 20.91.188.46:29099] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac6crnupR6lXnAUzFGrdugAAAEw"]
[Fri Apr 03 00:43:27.209230 2026] [:error] [pid 25035:tid 25444] [client 20.91.188.46:30635] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac6crxhR292toNOkLqGVuwAAAII"]
[Fri Apr 03 00:43:27.740947 2026] [:error] [pid 25010:tid 25349] [client 20.91.188.46:17212] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac6cr4_KcjFQF5TuqTV__gAAAAI"]
[Fri Apr 03 00:43:28.267829 2026] [:error] [pid 25010:tid 25364] [client 20.91.188.46:41641] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac6csI_KcjFQF5TuqTWAAAAAAA8"]
[Fri Apr 03 00:43:28.802740 2026] [:error] [pid 25470:tid 25480] [client 20.91.188.46:42328] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "ac6csHhROcck6_9HYyjhjAAAAMg"]
[Fri Apr 03 00:43:29.342117 2026] [:error] [pid 25470:tid 25494] [client 20.91.188.46:40994] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "ac6csXhROcck6_9HYyjhkAAAANY"]
[Fri Apr 03 00:43:29.889638 2026] [:error] [pid 25470:tid 25491] [client 20.91.188.46:1711] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "ac6csXhROcck6_9HYyjhlgAAANM"]
[Fri Apr 03 00:43:30.430942 2026] [:error] [pid 25010:tid 25365] [client 20.91.188.46:41723] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "ac6cso_KcjFQF5TuqTWABQAAABA"]
[Fri Apr 03 00:43:30.974194 2026] [:error] [pid 25010:tid 25351] [client 20.91.188.46:29063] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6cso_KcjFQF5TuqTWACAAAAAM"]
[Fri Apr 03 00:43:31.502628 2026] [:error] [pid 25470:tid 25479] [client 20.91.188.46:21368] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6cs3hROcck6_9HYyjhnQAAAMc"]
[Fri Apr 03 00:43:32.040346 2026] [:error] [pid 25470:tid 25496] [client 20.91.188.46:29621] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6ctHhROcck6_9HYyjhogAAANg"]
[Fri Apr 03 00:43:32.572041 2026] [:error] [pid 25018:tid 25412] [client 20.91.188.46:30180] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac6ctHupR6lXnAUzFGrdvgAAAEE"]
[Fri Apr 03 00:43:33.102228 2026] [:error] [pid 25470:tid 25489] [client 20.91.188.46:41629] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac6ctXhROcck6_9HYyjhqgAAANE"]
[Fri Apr 03 00:43:33.645115 2026] [:error] [pid 25010:tid 25362] [client 20.91.188.46:34529] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac6ctY_KcjFQF5TuqTWAEgAAAA0"]
[Fri Apr 03 00:43:34.188916 2026] [:error] [pid 25035:tid 25457] [client 20.91.188.46:21355] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac6cthhR292toNOkLqGVwwAAAI8"]
[Fri Apr 03 00:43:34.733448 2026] [:error] [pid 25035:tid 25460] [client 20.91.188.46:30177] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "ac6cthhR292toNOkLqGVxgAAAJI"]
[Fri Apr 03 00:43:35.263665 2026] [:error] [pid 25470:tid 25490] [client 20.91.188.46:15436] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6ct3hROcck6_9HYyjhsQAAANI"]
[Fri Apr 03 00:43:35.800015 2026] [:error] [pid 25035:tid 25452] [client 20.91.188.46:11727] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6ctxhR292toNOkLqGVzAAAAIo"]
[Fri Apr 03 00:43:36.327481 2026] [:error] [pid 25470:tid 25488] [client 20.91.188.46:17223] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6cuHhROcck6_9HYyjhtwAAANA"]
[Fri Apr 03 00:43:36.860613 2026] [:error] [pid 25470:tid 25474] [client 20.91.188.46:42287] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-20260318122951.php"] [unique_id "ac6cuHhROcck6_9HYyjhuAAAAMI"]
[Fri Apr 03 00:43:37.392427 2026] [:error] [pid 25010:tid 25354] [client 20.91.188.46:6945] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ac6cuY_KcjFQF5TuqTWAHwAAAAY"]
[Fri Apr 03 00:43:37.928428 2026] [:error] [pid 25010:tid 25366] [client 20.91.188.46:24705] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ac6cuY_KcjFQF5TuqTWAIAAAABE"]
[Fri Apr 03 00:43:38.460560 2026] [:error] [pid 25018:tid 25424] [client 20.91.188.46:15423] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ac6cunupR6lXnAUzFGrdzgAAAEs"]
[Fri Apr 03 00:43:39.035687 2026] [:error] [pid 25035:tid 25453] [client 20.91.188.46:53708] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ac6cuxhR292toNOkLqGVzgAAAIs"]
[Fri Apr 03 00:43:39.571965 2026] [:error] [pid 25018:tid 25422] [client 20.91.188.46:27383] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6cu3upR6lXnAUzFGrd0wAAAEk"]
[Fri Apr 03 00:43:40.109108 2026] [:error] [pid 25035:tid 25450] [client 20.91.188.46:15211] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6cvBhR292toNOkLqGV0AAAAIg"]
[Fri Apr 03 00:43:40.636333 2026] [:error] [pid 25035:tid 25449] [client 20.91.188.46:36592] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6cvBhR292toNOkLqGV1QAAAIc"]
[Fri Apr 03 00:43:41.166781 2026] [:error] [pid 25018:tid 25423] [client 20.91.188.46:35960] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "ac6cvXupR6lXnAUzFGrd2QAAAEo"]
[Fri Apr 03 00:43:41.708526 2026] [:error] [pid 25035:tid 25452] [client 20.91.188.46:17567] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac6cvRhR292toNOkLqGV2QAAAIo"]
[Fri Apr 03 00:43:42.254714 2026] [:error] [pid 25035:tid 25448] [client 20.91.188.46:13983] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac6cvhhR292toNOkLqGV2wAAAIY"]
[Fri Apr 03 00:43:42.787455 2026] [:error] [pid 25035:tid 25454] [client 20.91.188.46:13996] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac6cvhhR292toNOkLqGV4AAAAIw"]
[Fri Apr 03 00:43:43.323320 2026] [:error] [pid 25470:tid 25486] [client 20.91.188.46:13290] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac6cv3hROcck6_9HYyjh0AAAAM4"]
[Fri Apr 03 00:43:43.854624 2026] [:error] [pid 25470:tid 25491] [client 20.91.188.46:11668] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac6cv3hROcck6_9HYyjh1QAAANM"]
[Fri Apr 03 00:43:44.389730 2026] [:error] [pid 25470:tid 25483] [client 20.91.188.46:17590] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac6cwHhROcck6_9HYyjh1wAAAMs"]
[Fri Apr 03 00:43:44.919523 2026] [:error] [pid 25010:tid 25369] [client 20.91.188.46:38981] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac6cwI_KcjFQF5TuqTWAOwAAABQ"]
[Fri Apr 03 00:43:45.452528 2026] [:error] [pid 25010:tid 25362] [client 20.91.188.46:8721] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac6cwY_KcjFQF5TuqTWAPQAAAA0"]
[Fri Apr 03 00:43:45.982754 2026] [:error] [pid 25035:tid 25449] [client 20.91.188.46:1202] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6cwRhR292toNOkLqGV8wAAAIc"]
[Fri Apr 03 00:43:46.513763 2026] [:error] [pid 25470:tid 25487] [client 20.91.188.46:46144] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6cwnhROcck6_9HYyjh4wAAAM8"]
[Fri Apr 03 00:43:47.043765 2026] [:error] [pid 25018:tid 25428] [client 20.91.188.46:13955] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6cw3upR6lXnAUzFGrd6AAAAE8"]
[Fri Apr 03 00:43:47.575797 2026] [:error] [pid 25010:tid 25349] [client 20.91.188.46:28398] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "ac6cw4_KcjFQF5TuqTWASAAAAAI"]
[Fri Apr 03 00:43:48.109547 2026] [:error] [pid 25470:tid 25490] [client 20.91.188.46:46170] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ac6cxHhROcck6_9HYyjh8AAAANI"]
[Fri Apr 03 00:43:48.638967 2026] [:error] [pid 25010:tid 25366] [client 20.91.188.46:19276] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ac6cxI_KcjFQF5TuqTWATgAAABE"]
[Fri Apr 03 00:43:49.166186 2026] [:error] [pid 25010:tid 25347] [client 20.91.188.46:1243] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ac6cxY_KcjFQF5TuqTWAUwAAAAA"]
[Fri Apr 03 00:43:49.694570 2026] [:error] [pid 25010:tid 25349] [client 20.91.188.46:38977] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ac6cxY_KcjFQF5TuqTWAWQAAAAI"]
[Fri Apr 03 00:43:50.222909 2026] [:error] [pid 25018:tid 25424] [client 20.91.188.46:19273] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac6cxnupR6lXnAUzFGrd7wAAAEs"]
[Fri Apr 03 00:43:50.750203 2026] [:error] [pid 25018:tid 25421] [client 20.91.188.46:46089] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac6cxnupR6lXnAUzFGrd8gAAAEg"]
[Fri Apr 03 00:43:51.277691 2026] [:error] [pid 25010:tid 25348] [client 20.91.188.46:28395] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac6cx4_KcjFQF5TuqTWAZAAAAAE"]
[Fri Apr 03 00:43:51.802183 2026] [:error] [pid 25470:tid 25491] [client 20.91.188.46:13269] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac6cx3hROcck6_9HYyjiBQAAANM"]
[Fri Apr 03 00:43:52.334797 2026] [:error] [pid 25018:tid 25429] [client 20.91.188.46:39034] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac6cyHupR6lXnAUzFGrd9gAAAFA"]
[Fri Apr 03 00:43:52.864397 2026] [:error] [pid 25018:tid 25434] [client 20.91.188.46:28390] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac6cyHupR6lXnAUzFGrd-wAAAFU"]
[Fri Apr 03 00:43:53.389945 2026] [:error] [pid 25010:tid 25361] [client 20.91.188.46:13287] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac6cyY_KcjFQF5TuqTWAbQAAAAw"]
[Fri Apr 03 00:43:53.917275 2026] [:error] [pid 25010:tid 25357] [client 20.91.188.46:1212] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac6cyY_KcjFQF5TuqTWAbwAAAAk"]
[Fri Apr 03 00:43:54.445699 2026] [:error] [pid 25035:tid 25448] [client 20.91.188.46:14905] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ac6cyhhR292toNOkLqGWCwAAAIY"]
[Fri Apr 03 00:43:54.978506 2026] [:error] [pid 25010:tid 25349] [client 20.91.188.46:13959] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ac6cyo_KcjFQF5TuqTWAdQAAAAI"]
[Fri Apr 03 00:43:55.507949 2026] [:error] [pid 25010:tid 25359] [client 20.91.188.46:13266] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ac6cy4_KcjFQF5TuqTWAegAAAAs"]
[Fri Apr 03 00:43:56.042828 2026] [:error] [pid 25010:tid 25367] [client 20.91.188.46:39010] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ac6czI_KcjFQF5TuqTWAfwAAABI"]
[Fri Apr 03 00:43:56.566925 2026] [:error] [pid 25010:tid 25359] [client 20.91.188.46:11658] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac6czI_KcjFQF5TuqTWAhAAAAAs"]
[Fri Apr 03 00:43:57.106847 2026] [:error] [pid 25010:tid 25362] [client 20.91.188.46:13975] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac6czY_KcjFQF5TuqTWAigAAAA0"]
[Fri Apr 03 00:43:57.646786 2026] [:error] [pid 25010:tid 25361] [client 20.91.188.46:46147] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac6czY_KcjFQF5TuqTWAkwAAAAw"]
[Fri Apr 03 00:43:58.179619 2026] [:error] [pid 25035:tid 25451] [client 20.91.188.46:13307] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "ac6czhhR292toNOkLqGWEwAAAIk"]
[Fri Apr 03 00:43:58.708447 2026] [:error] [pid 25018:tid 25419] [client 20.91.188.46:11420] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "ac6cznupR6lXnAUzFGreCQAAAEY"]
[Fri Apr 03 00:43:59.236880 2026] [:error] [pid 25035:tid 25446] [client 20.91.188.46:11410] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "ac6czxhR292toNOkLqGWGAAAAIQ"]
[Fri Apr 03 00:43:59.767556 2026] [:error] [pid 25470:tid 25495] [client 20.91.188.46:40336] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "ac6cz3hROcck6_9HYyjiLgAAANc"]
[Fri Apr 03 00:44:00.313270 2026] [:error] [pid 25035:tid 25465] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/new3.php
[Fri Apr 03 00:44:00.578841 2026] [:error] [pid 25035:tid 25443] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Fri Apr 03 00:44:00.845068 2026] [:error] [pid 25035:tid 25454] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/rogsa.php
[Fri Apr 03 00:44:01.110638 2026] [:error] [pid 25035:tid 25446] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/htzevfl4k9ey5hoaywdwiCdefault.php
[Fri Apr 03 00:44:01.378317 2026] [:error] [pid 25035:tid 25450] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 03 00:44:01.644809 2026] [:error] [pid 25035:tid 25457] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/nhj6t74aqmkde3hgpCdefault.php
[Fri Apr 03 00:44:01.908951 2026] [:error] [pid 25035:tid 25449] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/wlld5fjtdpjmjhsds3qzmipfCdefault.php
[Fri Apr 03 00:44:02.175933 2026] [:error] [pid 25035:tid 25442] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Fri Apr 03 00:44:02.442271 2026] [:error] [pid 25035:tid 25464] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Fri Apr 03 00:44:02.709832 2026] [:error] [pid 25035:tid 25451] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/ynjli.php
[Fri Apr 03 00:44:02.976049 2026] [:error] [pid 25035:tid 25465] [client 20.91.188.46:13281] File does not exist: /usr/local/apache/htdocs/suspended-page/a6.php
[Fri Apr 03 00:44:03.251982 2026] [:error] [pid 25035:tid 25444] [client 20.91.188.46:13281] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6c0xhR292toNOkLqGWMAAAAII"]
[Fri Apr 03 00:44:03.788443 2026] [:error] [pid 25470:tid 25483] [client 20.91.188.46:46598] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6c03hROcck6_9HYyjiOQAAAMs"]
[Fri Apr 03 00:44:04.333816 2026] [:error] [pid 25018:tid 25424] [client 20.91.188.46:11422] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6c1HupR6lXnAUzFGreGQAAAEs"]
[Fri Apr 03 00:44:04.861762 2026] [:error] [pid 25018:tid 25414] [client 20.91.188.46:35119] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac6c1HupR6lXnAUzFGreHgAAAEI"]
[Fri Apr 03 00:44:05.403571 2026] [:error] [pid 25010:tid 25372] [client 20.91.188.46:40322] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "ac6c1Y_KcjFQF5TuqTWArgAAABc"]
[Fri Apr 03 00:44:05.937996 2026] [:error] [pid 25470:tid 25476] [client 20.91.188.46:11705] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "ac6c1XhROcck6_9HYyjiRQAAAMQ"]
[Fri Apr 03 00:44:06.468292 2026] [:error] [pid 25470:tid 25485] [client 20.91.188.46:11655] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "ac6c1nhROcck6_9HYyjiTgAAAM0"]
[Fri Apr 03 00:44:06.997811 2026] [:error] [pid 25035:tid 25450] [client 20.91.188.46:11431] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "ac6c1hhR292toNOkLqGWNAAAAIg"]
[Fri Apr 03 00:44:07.535189 2026] [:error] [pid 25018:tid 25415] [client 20.91.188.46:28375] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6c13upR6lXnAUzFGreJQAAAEM"]
[Fri Apr 03 00:44:08.064181 2026] [:error] [pid 25010:tid 25372] [client 20.91.188.46:11454] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6c2I_KcjFQF5TuqTWAuAAAABc"]
[Fri Apr 03 00:44:08.596535 2026] [:error] [pid 25470:tid 25484] [client 20.91.188.46:11675] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6c2HhROcck6_9HYyjiVwAAAMw"]
[Fri Apr 03 00:44:09.131810 2026] [:error] [pid 25035:tid 25448] [client 20.91.188.46:39014] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hbvdoz7cy9k6xge9zhuvkvitCdefault.php"] [unique_id "ac6c2RhR292toNOkLqGWNwAAAIY"]
[Fri Apr 03 00:44:09.662246 2026] [:error] [pid 25010:tid 25359] [client 20.91.188.46:16150] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac6c2Y_KcjFQF5TuqTWAzAAAAAs"]
[Fri Apr 03 00:44:10.187045 2026] [:error] [pid 25470:tid 25488] [client 20.91.188.46:25760] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac6c2nhROcck6_9HYyjiWgAAANA"]
[Fri Apr 03 00:44:10.715063 2026] [:error] [pid 25035:tid 25451] [client 20.91.188.46:41052] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac6c2hhR292toNOkLqGWPAAAAIk"]
[Fri Apr 03 00:44:11.247249 2026] [:error] [pid 25470:tid 25484] [client 20.91.188.46:16160] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac6c23hROcck6_9HYyjiYAAAAMw"]
[Fri Apr 03 00:44:11.780730 2026] [:error] [pid 25018:tid 25425] [client 20.91.188.46:30180] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac6c23upR6lXnAUzFGreKQAAAEw"]
[Fri Apr 03 00:44:12.314443 2026] [:error] [pid 25018:tid 25429] [client 20.91.188.46:11444] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac6c3HupR6lXnAUzFGreLAAAAFA"]
[Fri Apr 03 00:44:12.847409 2026] [:error] [pid 25018:tid 25434] [client 20.91.188.46:16133] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac6c3HupR6lXnAUzFGreMAAAAFU"]
[Fri Apr 03 00:44:13.392305 2026] [:error] [pid 25470:tid 25486] [client 20.91.188.46:46100] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsgdjkl.php"] [unique_id "ac6c3XhROcck6_9HYyjiZAAAAM4"]
[Fri Apr 03 00:44:13.919689 2026] [:error] [pid 25470:tid 25479] [client 20.91.188.46:1510] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6c3XhROcck6_9HYyjiZwAAAMc"]
[Fri Apr 03 00:44:14.449634 2026] [:error] [pid 25470:tid 25495] [client 20.91.188.46:59076] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6c3nhROcck6_9HYyjibwAAANc"]
[Fri Apr 03 00:44:14.980143 2026] [:error] [pid 25470:tid 25476] [client 20.91.188.46:43147] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6c3nhROcck6_9HYyjidgAAAMQ"]
[Fri Apr 03 00:44:15.519079 2026] [:error] [pid 25010:tid 25359] [client 20.91.188.46:53008] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac6c34_KcjFQF5TuqTWA_AAAAAs"]
[Fri Apr 03 00:44:16.049418 2026] [:error] [pid 25470:tid 25491] [client 20.91.188.46:43246] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "ac6c4HhROcck6_9HYyjiegAAANM"]
[Fri Apr 03 00:44:16.593552 2026] [:error] [pid 25470:tid 25478] [client 20.91.188.46:59070] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "ac6c4HhROcck6_9HYyjigAAAAMY"]
[Fri Apr 03 00:44:17.128166 2026] [:error] [pid 25470:tid 25473] [client 20.91.188.46:59059] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "ac6c4XhROcck6_9HYyjigwAAAME"]
[Fri Apr 03 00:44:17.661141 2026] [:error] [pid 25010:tid 25351] [client 20.91.188.46:43206] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "ac6c4Y_KcjFQF5TuqTWBEAAAAAM"]
[Fri Apr 03 00:44:18.197957 2026] [:error] [pid 25470:tid 25495] [client 20.91.188.46:6727] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "ac6c4nhROcck6_9HYyjijAAAANc"]
[Fri Apr 03 00:44:18.738457 2026] [:error] [pid 25010:tid 25357] [client 20.91.188.46:53023] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "ac6c4o_KcjFQF5TuqTWBFwAAAAk"]
[Fri Apr 03 00:44:19.266009 2026] [:error] [pid 25470:tid 25488] [client 20.91.188.46:20245] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "ac6c43hROcck6_9HYyjikgAAANA"]
[Fri Apr 03 00:44:19.799646 2026] [:error] [pid 25470:tid 25474] [client 20.91.188.46:33046] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "ac6c43hROcck6_9HYyjimAAAAMI"]
[Fri Apr 03 00:44:20.333534 2026] [:error] [pid 25470:tid 25495] [client 20.91.188.46:22314] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6c5HhROcck6_9HYyjinQAAANc"]
[Fri Apr 03 00:44:20.858263 2026] [:error] [pid 25470:tid 25476] [client 20.91.188.46:11250] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6c5HhROcck6_9HYyjipAAAAMQ"]
[Fri Apr 03 00:44:21.395791 2026] [:error] [pid 25470:tid 25494] [client 20.91.188.46:22279] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6c5XhROcck6_9HYyjirQAAANY"]
[Fri Apr 03 00:44:21.923718 2026] [:error] [pid 25010:tid 25370] [client 20.91.188.46:16704] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac6c5Y_KcjFQF5TuqTWBNQAAABU"]
[Fri Apr 03 00:44:22.453084 2026] [:error] [pid 25010:tid 25352] [client 20.91.188.46:1566] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac6c5o_KcjFQF5TuqTWBPAAAAAQ"]
[Fri Apr 03 00:44:22.992275 2026] [:error] [pid 25035:tid 25443] [client 20.91.188.46:11249] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac6c5hhR292toNOkLqGWXAAAAIE"]
[Fri Apr 03 00:44:23.520570 2026] [:error] [pid 25010:tid 25370] [client 20.91.188.46:15124] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac6c54_KcjFQF5TuqTWBRAAAABU"]
[Fri Apr 03 00:44:24.050038 2026] [:error] [pid 25035:tid 25459] [client 20.91.188.46:8577] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac6c6BhR292toNOkLqGWZAAAAJE"]
[Fri Apr 03 00:44:24.577314 2026] [:error] [pid 25470:tid 25477] [client 20.91.188.46:1588] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac6c6HhROcck6_9HYyjivwAAAMU"]
[Fri Apr 03 00:44:25.102130 2026] [:error] [pid 25035:tid 25454] [client 20.91.188.46:20235] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac6c6RhR292toNOkLqGWbAAAAIw"]
[Fri Apr 03 00:44:25.633339 2026] [:error] [pid 25035:tid 25452] [client 20.91.188.46:18144] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac6c6RhR292toNOkLqGWcgAAAIo"]
[Fri Apr 03 00:44:26.177633 2026] [:error] [pid 25018:tid 25417] [client 20.91.188.46:18149] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac6c6nupR6lXnAUzFGreTwAAAEQ"]
[Fri Apr 03 00:44:26.722192 2026] [:error] [pid 25010:tid 25361] [client 20.91.188.46:22322] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac6c6o_KcjFQF5TuqTWBXQAAAAw"]
[Fri Apr 03 00:44:27.265128 2026] [:error] [pid 25010:tid 25371] [client 20.91.188.46:8813] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac6c64_KcjFQF5TuqTWBZgAAABY"]
[Fri Apr 03 00:44:27.799523 2026] [:error] [pid 25470:tid 25477] [client 20.91.188.46:25335] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac6c63hROcck6_9HYyjiyQAAAMU"]
[Fri Apr 03 00:44:28.333923 2026] [:error] [pid 25035:tid 25452] [client 20.91.188.46:6519] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index-20260330022921.php"] [unique_id "ac6c7BhR292toNOkLqGWfgAAAIo"]
[Fri Apr 03 00:44:28.860575 2026] [:error] [pid 25470:tid 25486] [client 20.91.188.46:11210] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "ac6c7HhROcck6_9HYyjiywAAAM4"]
[Fri Apr 03 00:44:29.393489 2026] [:error] [pid 25018:tid 25419] [client 20.91.188.46:18168] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "ac6c7XupR6lXnAUzFGreVwAAAEY"]
[Fri Apr 03 00:44:29.923372 2026] [:error] [pid 25010:tid 25348] [client 20.91.188.46:8826] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "ac6c7Y_KcjFQF5TuqTWBfAAAAAE"]
[Fri Apr 03 00:44:30.454891 2026] [:error] [pid 25035:tid 25443] [client 20.91.188.46:6522] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "ac6c7hhR292toNOkLqGWhQAAAIE"]
[Fri Apr 03 00:44:30.999409 2026] [:error] [pid 25010:tid 25353] [client 20.91.188.46:18162] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ac6c7o_KcjFQF5TuqTWBiAAAAAU"]
[Fri Apr 03 00:44:31.524983 2026] [:error] [pid 25470:tid 25475] [client 20.91.188.46:39791] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ac6c73hROcck6_9HYyji1wAAAMM"]
[Fri Apr 03 00:44:32.051691 2026] [:error] [pid 25470:tid 25496] [client 20.91.188.46:11227] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ac6c8HhROcck6_9HYyji3gAAANg"]
[Fri Apr 03 00:44:32.576863 2026] [:error] [pid 25470:tid 25491] [client 20.91.188.46:18125] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ac6c8HhROcck6_9HYyji5AAAANM"]
[Fri Apr 03 00:44:33.123911 2026] [:error] [pid 25035:tid 25443] [client 20.91.188.46:31218] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac6c8RhR292toNOkLqGWkgAAAIE"]
[Fri Apr 03 00:44:33.650025 2026] [:error] [pid 25035:tid 25447] [client 20.91.188.46:26278] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac6c8RhR292toNOkLqGWlQAAAIU"]
[Fri Apr 03 00:44:34.192700 2026] [:error] [pid 25470:tid 25496] [client 20.91.188.46:25289] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac6c8nhROcck6_9HYyji7wAAANg"]
[Fri Apr 03 00:44:34.720856 2026] [:error] [pid 25035:tid 25449] [client 20.91.188.46:30666] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ac6c8hhR292toNOkLqGWoAAAAIc"]
[Fri Apr 03 00:44:35.248141 2026] [:error] [pid 25470:tid 25483] [client 20.91.188.46:18124] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "ac6c83hROcck6_9HYyji8wAAAMs"]
[Fri Apr 03 00:44:35.774783 2026] [:error] [pid 25470:tid 25482] [client 20.91.188.46:8816] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "ac6c83hROcck6_9HYyji_QAAAMo"]
[Fri Apr 03 00:44:36.307308 2026] [:error] [pid 25010:tid 25371] [client 20.91.188.46:25760] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "ac6c9I_KcjFQF5TuqTWBnQAAABY"]
[Fri Apr 03 00:44:36.843555 2026] [:error] [pid 25010:tid 25365] [client 20.91.188.46:39794] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "ac6c9I_KcjFQF5TuqTWBpAAAABA"]
[Fri Apr 03 00:44:37.388920 2026] [:error] [pid 25018:tid 25426] [client 20.91.188.46:39767] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac6c9XupR6lXnAUzFGredgAAAE0"]
[Fri Apr 03 00:44:37.919714 2026] [:error] [pid 25035:tid 25448] [client 20.91.188.46:20240] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac6c9RhR292toNOkLqGWpwAAAIY"]
[Fri Apr 03 00:44:38.448124 2026] [:error] [pid 25035:tid 25459] [client 20.91.188.46:1746] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac6c9hhR292toNOkLqGWqwAAAJE"]
[Fri Apr 03 00:44:38.983774 2026] [:error] [pid 25470:tid 25491] [client 20.91.188.46:12932] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac6c9nhROcck6_9HYyjjGwAAANM"]
[Fri Apr 03 00:44:39.510545 2026] [:error] [pid 25035:tid 25464] [client 20.91.188.46:30713] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ac6c9xhR292toNOkLqGWrAAAAJY"]
[Fri Apr 03 00:44:40.036757 2026] [:error] [pid 25018:tid 25422] [client 20.91.188.46:18113] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ac6c-HupR6lXnAUzFGregwAAAEk"]
[Fri Apr 03 00:44:40.575582 2026] [:error] [pid 25018:tid 25427] [client 20.91.188.46:31189] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ac6c-HupR6lXnAUzFGreiwAAAE4"]
[Fri Apr 03 00:44:41.123710 2026] [:error] [pid 25010:tid 25359] [client 20.91.188.46:1772] [client 20.91.188.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ac6c-Y_KcjFQF5TuqTWBqgAAAAs"]
[Fri Apr 03 01:57:19.524585 2026] [:error] [pid 25035:tid 25455] [client 172.161.104.93:58723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Fri Apr 03 03:10:34.230929 2026] [:error] [pid 6718:tid 6735] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Fri Apr 03 03:10:34.506529 2026] [:error] [pid 6718:tid 6720] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 03 03:10:34.773305 2026] [:error] [pid 6718:tid 6732] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 03:10:35.649718 2026] [:error] [pid 6718:tid 6724] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 03 03:10:35.991606 2026] [:error] [pid 6718:tid 6721] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 03 03:10:36.298854 2026] [:error] [pid 6718:tid 6740] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Apr 03 03:10:36.892653 2026] [:error] [pid 6718:tid 6720] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 03:10:37.157144 2026] [:error] [pid 6718:tid 6725] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 03 03:10:37.425887 2026] [:error] [pid 6718:tid 6741] [client 20.91.227.129:63832] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 03 03:10:37.689857 2026] [:error] [pid 6718:tid 6744] [client 20.91.227.129:63832] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6_LRcJBvdSRfIrgC4htgAAAdg"]
[Fri Apr 03 03:10:38.374598 2026] [:error] [pid 6754:tid 6780] [client 20.91.227.129:62987] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6_LiueCuy-hU9kX37fbAAAAhc"]
[Fri Apr 03 03:10:38.916552 2026] [:error] [pid 25018:tid 25419] [client 20.91.227.129:63794] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6_LnupR6lXnAUzFGoliwAAAEY"]
[Fri Apr 03 03:10:39.457497 2026] [:error] [pid 7029:tid 7052] [client 20.91.227.129:63069] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac6_LwXgjNoKcFYPs7jytAAAA1E"]
[Fri Apr 03 03:10:41.280019 2026] [:error] [pid 7029:tid 7056] [client 20.91.227.129:64483] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "ac6_MQXgjNoKcFYPs7jytwAAA1U"]
[Fri Apr 03 03:10:41.814158 2026] [:error] [pid 6852:tid 6859] [client 20.91.227.129:63099] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "ac6_Mcd4tRtTDmfkwZjzPgAAAoI"]
[Fri Apr 03 03:10:42.497548 2026] [:error] [pid 7029:tid 7035] [client 20.91.227.129:63080] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "ac6_MgXgjNoKcFYPs7jyuQAAA0I"]
[Fri Apr 03 03:10:43.041898 2026] [:error] [pid 6638:tid 6664] [client 20.91.227.129:64460] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n.php"] [unique_id "ac6_M82khZ4zPe7L5k5-XwAAAVQ"]
[Fri Apr 03 03:10:43.626311 2026] [:error] [pid 6754:tid 6759] [client 20.91.227.129:64429] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ac6_MyueCuy-hU9kX37fdAAAAgI"]
[Fri Apr 03 03:10:45.446394 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:64466] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ac6_NQXgjNoKcFYPs7jyygAAA0w"]
[Fri Apr 03 03:10:45.997576 2026] [:error] [pid 25035:tid 25452] [client 20.91.227.129:63789] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ac6_NRhR292toNOkLqHsegAAAIo"]
[Fri Apr 03 03:10:46.533080 2026] [:error] [pid 25035:tid 25459] [client 20.91.227.129:63769] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ac6_NhhR292toNOkLqHsfQAAAJE"]
[Fri Apr 03 03:10:47.075956 2026] [:error] [pid 6638:tid 6668] [client 20.91.227.129:64400] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ac6_N82khZ4zPe7L5k5-YgAAAVg"]
[Fri Apr 03 03:10:47.631475 2026] [:error] [pid 6638:tid 6665] [client 20.91.227.129:63034] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ac6_N82khZ4zPe7L5k5-YwAAAVU"]
[Fri Apr 03 03:10:48.174550 2026] [:error] [pid 6904:tid 6927] [client 20.91.227.129:63008] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ac6_ONFsvwmj2JDzXTy2gQAAAs0"]
[Fri Apr 03 03:10:48.836056 2026] [:error] [pid 7029:tid 7038] [client 20.91.227.129:63083] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ac6_OAXgjNoKcFYPs7jy0wAAA0U"]
[Fri Apr 03 03:10:49.544739 2026] [:error] [pid 6638:tid 6655] [client 20.91.227.129:63776] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6_Oc2khZ4zPe7L5k5-aQAAAUs"]
[Fri Apr 03 03:10:50.086459 2026] [:error] [pid 6754:tid 6780] [client 20.91.227.129:64442] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6_OiueCuy-hU9kX37fdgAAAhc"]
[Fri Apr 03 03:10:50.646924 2026] [:error] [pid 25035:tid 25466] [client 20.91.227.129:63807] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6_OhhR292toNOkLqHshAAAAJg"]
[Fri Apr 03 03:10:51.175890 2026] [:error] [pid 6638:tid 6651] [client 20.91.227.129:62985] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ac6_O82khZ4zPe7L5k5-bAAAAUc"]
[Fri Apr 03 03:10:51.776165 2026] [:error] [pid 6680:tid 6691] [client 20.91.227.129:63841] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6_O36tYxvgZTk2y5WzyQAAAYk"]
[Fri Apr 03 03:10:52.330871 2026] [:error] [pid 25035:tid 25452] [client 20.91.227.129:63865] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6_PBhR292toNOkLqHsiQAAAIo"]
[Fri Apr 03 03:10:52.944878 2026] [:error] [pid 6798:tid 6810] [client 20.91.227.129:63856] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6_PPZdLmBdUlbuwjrsVgAAAkY"]
[Fri Apr 03 03:10:53.581327 2026] [:error] [pid 6718:tid 6723] [client 20.91.227.129:64447] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac6_PRcJBvdSRfIrgC4htwAAAcM"]
[Fri Apr 03 03:10:54.110816 2026] [:error] [pid 7029:tid 7044] [client 20.91.227.129:63057] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "ac6_PgXgjNoKcFYPs7jy3wAAA0s"]
[Fri Apr 03 03:10:54.642056 2026] [:error] [pid 6852:tid 6867] [client 20.91.227.129:63795] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "ac6_Psd4tRtTDmfkwZjzRgAAAok"]
[Fri Apr 03 03:10:55.191469 2026] [:error] [pid 6852:tid 6864] [client 20.91.227.129:62378] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "ac6_P8d4tRtTDmfkwZjzRwAAAoc"]
[Fri Apr 03 03:10:55.747099 2026] [:error] [pid 6852:tid 6857] [client 20.91.227.129:62408] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "ac6_P8d4tRtTDmfkwZjzSAAAAoA"]
[Fri Apr 03 03:10:56.414409 2026] [:error] [pid 6852:tid 6881] [client 20.91.227.129:63032] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ac6_QMd4tRtTDmfkwZjzSQAAApY"]
[Fri Apr 03 03:10:57.090105 2026] [:error] [pid 6852:tid 6877] [client 20.91.227.129:63762] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ac6_Qcd4tRtTDmfkwZjzTAAAApI"]
[Fri Apr 03 03:10:57.913187 2026] [:error] [pid 6852:tid 6883] [client 20.91.227.129:64511] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "ac6_Qcd4tRtTDmfkwZjzUQAAApg"]
[Fri Apr 03 03:10:58.558156 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:64498] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "ac6_QgXgjNoKcFYPs7jy5wAAA1Y"]
[Fri Apr 03 03:10:59.616995 2026] [:error] [pid 7029:tid 7056] [client 20.91.227.129:63756] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "ac6_QwXgjNoKcFYPs7jy7AAAA1U"]
[Fri Apr 03 03:11:00.946639 2026] [:error] [pid 6754:tid 6773] [client 20.91.227.129:62401] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/o.php"] [unique_id "ac6_RCueCuy-hU9kX37ffQAAAhA"]
[Fri Apr 03 03:11:01.616356 2026] [:error] [pid 6754:tid 6775] [client 20.91.227.129:63022] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "ac6_RSueCuy-hU9kX37ffwAAAhI"]
[Fri Apr 03 03:11:02.311723 2026] [:error] [pid 6754:tid 6778] [client 20.91.227.129:64427] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "ac6_RiueCuy-hU9kX37fgQAAAhU"]
[Fri Apr 03 03:11:03.015126 2026] [:error] [pid 6718:tid 6722] [client 20.91.227.129:63817] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "ac6_RxcJBvdSRfIrgC4hwwAAAcI"]
[Fri Apr 03 03:11:03.799839 2026] [:error] [pid 7029:tid 7059] [client 20.91.227.129:63837] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "ac6_RwXgjNoKcFYPs7jy9wAAA1c"]
[Fri Apr 03 03:11:04.858829 2026] [:error] [pid 25035:tid 25454] [client 20.91.227.129:64391] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "ac6_SBhR292toNOkLqHsnwAAAIw"]
[Fri Apr 03 03:11:05.629063 2026] [:error] [pid 6718:tid 6736] [client 20.91.227.129:63850] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "ac6_SRcJBvdSRfIrgC4h0AAAAdA"]
[Fri Apr 03 03:11:06.296576 2026] [:error] [pid 6718:tid 6735] [client 20.91.227.129:64433] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "ac6_ShcJBvdSRfIrgC4h1AAAAc8"]
[Fri Apr 03 03:11:07.126746 2026] [:error] [pid 6904:tid 6921] [client 20.91.227.129:62976] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "ac6_S9Fsvwmj2JDzXTy2iwAAAsc"]
[Fri Apr 03 03:11:08.199007 2026] [:error] [pid 6718:tid 6736] [client 20.91.227.129:62460] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6_TBcJBvdSRfIrgC4h3QAAAdA"]
[Fri Apr 03 03:11:09.319568 2026] [:error] [pid 6718:tid 6740] [client 20.91.227.129:64415] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6_TRcJBvdSRfIrgC4h4QAAAdQ"]
[Fri Apr 03 03:11:10.848004 2026] [:error] [pid 6904:tid 6913] [client 20.91.227.129:64396] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6_TtFsvwmj2JDzXTy2kgAAAsE"]
[Fri Apr 03 03:11:12.734282 2026] [:error] [pid 25018:tid 25414] [client 20.91.227.129:63857] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac6_UHupR6lXnAUzFGolmwAAAEI"]
[Fri Apr 03 03:11:13.950429 2026] [:error] [pid 6904:tid 6932] [client 20.91.227.129:63005] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac6_UdFsvwmj2JDzXTy2lQAAAtE"]
[Fri Apr 03 03:11:14.580642 2026] [:error] [pid 6718:tid 6728] [client 20.91.227.129:64393] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac6_UhcJBvdSRfIrgC4h5gAAAcg"]
[Fri Apr 03 03:11:15.185153 2026] [:error] [pid 6718:tid 6738] [client 20.91.227.129:63784] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac6_UxcJBvdSRfIrgC4h5wAAAdI"]
[Fri Apr 03 03:11:15.739610 2026] [:error] [pid 6718:tid 6729] [client 20.91.227.129:63089] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "ac6_UxcJBvdSRfIrgC4h7QAAAck"]
[Fri Apr 03 03:11:16.316599 2026] [:error] [pid 7029:tid 7039] [client 20.91.227.129:63087] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6_VAXgjNoKcFYPs7jzFQAAA0Y"]
[Fri Apr 03 03:11:16.875123 2026] [:error] [pid 25018:tid 25431] [client 20.91.227.129:62405] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6_VHupR6lXnAUzFGolnwAAAFI"]
[Fri Apr 03 03:11:17.453919 2026] [:error] [pid 25035:tid 25465] [client 20.91.227.129:62984] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6_VRhR292toNOkLqHsrQAAAJc"]
[Fri Apr 03 03:11:18.444112 2026] [:error] [pid 7029:tid 7040] [client 20.91.227.129:64493] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ac6_VgXgjNoKcFYPs7jzGQAAA0c"]
[Fri Apr 03 03:11:19.253830 2026] [:error] [pid 6718:tid 6726] [client 20.91.227.129:61661] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ac6_VxcJBvdSRfIrgC4h8gAAAcY"]
[Fri Apr 03 03:11:19.903935 2026] [:error] [pid 25018:tid 25421] [client 20.91.227.129:64501] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ac6_V3upR6lXnAUzFGoloAAAAEg"]
[Fri Apr 03 03:11:20.551224 2026] [:error] [pid 6798:tid 6814] [client 20.91.227.129:64492] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ac6_WPZdLmBdUlbuwjrsWgAAAko"]
[Fri Apr 03 03:11:21.145330 2026] [:error] [pid 6718:tid 6728] [client 20.91.227.129:63011] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ac6_WRcJBvdSRfIrgC4h8wAAAcg"]
[Fri Apr 03 03:11:21.860113 2026] [:error] [pid 6904:tid 6933] [client 20.91.227.129:63098] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ac6_WdFsvwmj2JDzXTy2nAAAAtI"]
[Fri Apr 03 03:11:22.426311 2026] [:error] [pid 6718:tid 6722] [client 20.91.227.129:61689] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ac6_WhcJBvdSRfIrgC4h-gAAAcI"]
[Fri Apr 03 03:11:23.010308 2026] [:error] [pid 6718:tid 6724] [client 20.91.227.129:63770] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ac6_WxcJBvdSRfIrgC4h_gAAAcQ"]
[Fri Apr 03 03:11:23.711506 2026] [:error] [pid 6852:tid 6873] [client 20.91.227.129:63760] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ac6_W8d4tRtTDmfkwZjzYwAAAo8"]
[Fri Apr 03 03:11:24.271432 2026] [:error] [pid 25018:tid 25433] [client 20.91.227.129:63849] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "ac6_XHupR6lXnAUzFGolowAAAFQ"]
[Fri Apr 03 03:11:24.878933 2026] [:error] [pid 25035:tid 25447] [client 20.91.227.129:63067] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "ac6_XBhR292toNOkLqHssAAAAIU"]
[Fri Apr 03 03:11:25.420496 2026] [:error] [pid 7029:tid 7038] [client 20.91.227.129:62977] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "ac6_XQXgjNoKcFYPs7jzKAAAA0U"]
[Fri Apr 03 03:11:26.066298 2026] [:error] [pid 7029:tid 7050] [client 20.91.227.129:63853] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nope.php"] [unique_id "ac6_XgXgjNoKcFYPs7jzKgAAA08"]
[Fri Apr 03 03:11:26.593389 2026] [:error] [pid 25035:tid 25459] [client 20.91.227.129:63037] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "ac6_XhhR292toNOkLqHstQAAAJE"]
[Fri Apr 03 03:11:27.146830 2026] [:error] [pid 7029:tid 7036] [client 20.91.227.129:61638] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "ac6_XwXgjNoKcFYPs7jzKwAAA0M"]
[Fri Apr 03 03:11:27.698093 2026] [:error] [pid 25018:tid 25428] [client 20.91.227.129:64455] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "ac6_X3upR6lXnAUzFGolqgAAAE8"]
[Fri Apr 03 03:11:28.358604 2026] [:error] [pid 6718:tid 6733] [client 20.91.227.129:64410] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js.php"] [unique_id "ac6_YBcJBvdSRfIrgC4iCgAAAc0"]
[Fri Apr 03 03:11:28.959729 2026] [:error] [pid 7029:tid 7038] [client 20.91.227.129:63036] [client 20.91.227.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac6_YAXgjNoKcFYPs7jzMwAAA0U"]
[Fri Apr 03 03:11:29.802594 2026] [:error] [pid 6852:tid 6870] [client 20.91.227.129:63004] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "ac6_Ycd4tRtTDmfkwZjzZQAAAow"]
[Fri Apr 03 03:11:30.426632 2026] [:error] [pid 7029:tid 7034] [client 20.91.227.129:64504] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "ac6_YgXgjNoKcFYPs7jzOQAAA0E"]
[Fri Apr 03 03:11:31.009798 2026] [:error] [pid 7029:tid 7049] [client 20.91.227.129:64472] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "ac6_YwXgjNoKcFYPs7jzPgAAA04"]
[Fri Apr 03 03:11:31.546129 2026] [:error] [pid 7029:tid 7036] [client 20.91.227.129:64394] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/num.php"] [unique_id "ac6_YwXgjNoKcFYPs7jzQgAAA0M"]
[Fri Apr 03 03:11:33.422429 2026] [:error] [pid 6852:tid 6862] [client 20.91.227.129:61143] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "ac6_Zcd4tRtTDmfkwZjzcAAAAoU"]
[Fri Apr 03 03:11:33.958882 2026] [:error] [pid 6638:tid 6662] [client 20.91.227.129:62994] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "ac6_Zc2khZ4zPe7L5k5-kQAAAVI"]
[Fri Apr 03 03:11:34.504108 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:63062] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "ac6_ZgXgjNoKcFYPs7jzUwAAA0w"]
[Fri Apr 03 03:11:35.062740 2026] [:error] [pid 7029:tid 7059] [client 20.91.227.129:63854] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "ac6_ZwXgjNoKcFYPs7jzWAAAA1c"]
[Fri Apr 03 03:11:35.683196 2026] [:error] [pid 25035:tid 25453] [client 20.91.227.129:63071] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6_ZxhR292toNOkLqHswAAAAIs"]
[Fri Apr 03 03:11:36.220304 2026] [:error] [pid 6718:tid 6742] [client 20.91.227.129:64461] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6_aBcJBvdSRfIrgC4iEgAAAdY"]
[Fri Apr 03 03:11:36.948578 2026] [:error] [pid 6718:tid 6732] [client 20.91.227.129:64423] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ac6_aBcJBvdSRfIrgC4iFAAAAcw"]
[Fri Apr 03 03:11:37.519480 2026] [:error] [pid 6754:tid 6759] [client 20.91.227.129:64507] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 03 03:11:37.784781 2026] [:error] [pid 6754:tid 6779] [client 20.91.227.129:64507] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 03 03:11:38.050057 2026] [:error] [pid 6754:tid 6778] [client 20.91.227.129:64507] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Fri Apr 03 03:11:38.471974 2026] [:error] [pid 6754:tid 6773] [client 20.91.227.129:64507] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 03 03:11:38.737756 2026] [:error] [pid 6754:tid 6758] [client 20.91.227.129:64507] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Fri Apr 03 03:11:39.004049 2026] [:error] [pid 6754:tid 6766] [client 20.91.227.129:64507] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 03 03:11:39.272185 2026] [:error] [pid 6754:tid 6769] [client 20.91.227.129:64507] [client 20.91.227.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "ac6_ayueCuy-hU9kX37fpgAAAgw"]
[Fri Apr 03 03:11:39.848189 2026] [:error] [pid 6718:tid 6738] [client 20.91.227.129:63058] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Fri Apr 03 03:11:40.113508 2026] [:error] [pid 6718:tid 6741] [client 20.91.227.129:63058] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 03 03:11:40.701430 2026] [:error] [pid 6718:tid 6744] [client 20.91.227.129:63058] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Apr 03 03:11:40.966384 2026] [:error] [pid 6718:tid 6728] [client 20.91.227.129:63058] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Fri Apr 03 03:11:41.228879 2026] [:error] [pid 6718:tid 6730] [client 20.91.227.129:63058] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "ac6_bRcJBvdSRfIrgC4iJQAAAco"]
[Fri Apr 03 03:11:41.884982 2026] [:error] [pid 25018:tid 25434] [client 20.91.227.129:62999] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "ac6_bXupR6lXnAUzFGolvgAAAFU"]
[Fri Apr 03 03:11:42.421627 2026] [:error] [pid 25035:tid 25448] [client 20.91.227.129:63092] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "ac6_bhhR292toNOkLqHszAAAAIY"]
[Fri Apr 03 03:11:42.980155 2026] [:error] [pid 7029:tid 7049] [client 20.91.227.129:63078] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "ac6_bgXgjNoKcFYPs7jzbAAAA04"]
[Fri Apr 03 03:11:43.521173 2026] [:error] [pid 7029:tid 7036] [client 20.91.227.129:63047] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "ac6_bwXgjNoKcFYPs7jzbQAAA0M"]
[Fri Apr 03 03:11:44.102163 2026] [:error] [pid 25018:tid 25431] [client 20.91.227.129:63858] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "ac6_cHupR6lXnAUzFGolwgAAAFI"]
[Fri Apr 03 03:11:44.631454 2026] [:error] [pid 25018:tid 25418] [client 20.91.227.129:62400] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "ac6_cHupR6lXnAUzFGolxQAAAEU"]
[Fri Apr 03 03:11:45.168588 2026] [:error] [pid 6798:tid 6811] [client 20.91.227.129:63019] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "ac6_cfZdLmBdUlbuwjrsbAAAAkc"]
[Fri Apr 03 03:11:45.725171 2026] [:error] [pid 6638:tid 6663] [client 20.91.227.129:61633] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac6_cc2khZ4zPe7L5k5-pwAAAVM"]
[Fri Apr 03 03:11:46.258823 2026] [:error] [pid 6798:tid 6820] [client 20.91.227.129:62986] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac6_cvZdLmBdUlbuwjrsbgAAAlA"]
[Fri Apr 03 03:11:46.810475 2026] [:error] [pid 25018:tid 25436] [client 20.91.227.129:63860] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac6_cnupR6lXnAUzFGolyAAAAFc"]
[Fri Apr 03 03:11:47.464206 2026] [:error] [pid 25035:tid 25461] [client 20.91.227.129:63038] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "ac6_cxhR292toNOkLqHs0gAAAJM"]
[Fri Apr 03 03:11:48.006022 2026] [:error] [pid 25035:tid 25444] [client 20.91.227.129:61610] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "ac6_dBhR292toNOkLqHs1AAAAII"]
[Fri Apr 03 03:11:48.579961 2026] [:error] [pid 25035:tid 25452] [client 20.91.227.129:64407] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "ac6_dBhR292toNOkLqHs2AAAAIo"]
[Fri Apr 03 03:11:49.286775 2026] [:error] [pid 25018:tid 25426] [client 20.91.227.129:63780] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "ac6_dXupR6lXnAUzFGolzgAAAE0"]
[Fri Apr 03 03:11:49.946379 2026] [:error] [pid 6798:tid 6806] [client 20.91.227.129:64386] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "ac6_dfZdLmBdUlbuwjrsdgAAAkI"]
[Fri Apr 03 03:11:50.570552 2026] [:error] [pid 6798:tid 6804] [client 20.91.227.129:63095] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "ac6_dvZdLmBdUlbuwjrsdwAAAkA"]
[Fri Apr 03 03:11:51.118715 2026] [:error] [pid 25035:tid 25466] [client 20.91.227.129:64485] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "ac6_dxhR292toNOkLqHs3wAAAJg"]
[Fri Apr 03 03:11:51.652849 2026] [:error] [pid 25018:tid 25415] [client 20.91.227.129:63779] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "ac6_d3upR6lXnAUzFGol0gAAAEM"]
[Fri Apr 03 03:11:52.188601 2026] [:error] [pid 7029:tid 7053] [client 20.91.227.129:63030] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "ac6_eAXgjNoKcFYPs7jzdwAAA1I"]
[Fri Apr 03 03:11:52.723695 2026] [:error] [pid 25018:tid 25427] [client 20.91.227.129:64495] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ac6_eHupR6lXnAUzFGol1AAAAE4"]
[Fri Apr 03 03:11:53.377316 2026] [:error] [pid 6638:tid 6659] [client 20.91.227.129:63818] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ac6_ec2khZ4zPe7L5k5-sQAAAU8"]
[Fri Apr 03 03:11:53.914856 2026] [:error] [pid 25018:tid 25426] [client 20.91.227.129:63748] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ac6_eXupR6lXnAUzFGol2AAAAE0"]
[Fri Apr 03 03:11:54.481735 2026] [:error] [pid 6798:tid 6812] [client 20.91.227.129:61632] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ac6_evZdLmBdUlbuwjrseQAAAkg"]
[Fri Apr 03 03:11:55.038625 2026] [:error] [pid 6638:tid 6652] [client 20.91.227.129:63039] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac6_e82khZ4zPe7L5k5-swAAAUg"]
[Fri Apr 03 03:11:55.598811 2026] [:error] [pid 6718:tid 6732] [client 20.91.227.129:62979] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac6_excJBvdSRfIrgC4iLQAAAcw"]
[Fri Apr 03 03:11:56.130395 2026] [:error] [pid 6718:tid 6724] [client 20.91.227.129:63768] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac6_fBcJBvdSRfIrgC4iLwAAAcQ"]
[Fri Apr 03 03:11:56.660122 2026] [:error] [pid 6852:tid 6870] [client 20.91.227.129:63799] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "ac6_fMd4tRtTDmfkwZjzegAAAow"]
[Fri Apr 03 03:11:57.513840 2026] [:error] [pid 25018:tid 25411] [client 20.91.227.129:61659] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ac6_fXupR6lXnAUzFGol3gAAAEA"]
[Fri Apr 03 03:11:58.066421 2026] [:error] [pid 6798:tid 6826] [client 20.91.227.129:64401] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ac6_fvZdLmBdUlbuwjrsfgAAAlY"]
[Fri Apr 03 03:11:58.653079 2026] [:error] [pid 7029:tid 7054] [client 20.91.227.129:63031] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ac6_fgXgjNoKcFYPs7jzfwAAA1M"]
[Fri Apr 03 03:11:59.361832 2026] [:error] [pid 6680:tid 6700] [client 20.91.227.129:63024] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ac6_f36tYxvgZTk2y5Wz2gAAAZI"]
[Fri Apr 03 03:11:59.895846 2026] [:error] [pid 25018:tid 25423] [client 20.91.227.129:63045] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ac6_f3upR6lXnAUzFGol5AAAAEo"]
[Fri Apr 03 03:12:00.422640 2026] [:error] [pid 25018:tid 25435] [client 20.91.227.129:63044] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ac6_gHupR6lXnAUzFGol6AAAAFY"]
[Fri Apr 03 03:12:00.954783 2026] [:error] [pid 6718:tid 6744] [client 20.91.227.129:64384] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ac6_gBcJBvdSRfIrgC4iOAAAAdg"]
[Fri Apr 03 03:12:01.548294 2026] [:error] [pid 6718:tid 6730] [client 20.91.227.129:63775] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ac6_gRcJBvdSRfIrgC4iOgAAAco"]
[Fri Apr 03 03:12:02.092358 2026] [:error] [pid 6680:tid 6685] [client 20.91.227.129:63063] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6_gn6tYxvgZTk2y5Wz3AAAAYM"]
[Fri Apr 03 03:12:02.631719 2026] [:error] [pid 6798:tid 6804] [client 20.91.227.129:62981] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6_gvZdLmBdUlbuwjrsgwAAAkA"]
[Fri Apr 03 03:12:03.596901 2026] [:error] [pid 6680:tid 6690] [client 20.91.227.129:63800] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6_g36tYxvgZTk2y5Wz3QAAAYg"]
[Fri Apr 03 03:12:05.123851 2026] [:error] [pid 25018:tid 25423] [client 20.91.227.129:63811] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ac6_hXupR6lXnAUzFGol8AAAAEo"]
[Fri Apr 03 03:12:05.662443 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:64416] [client 20.91.227.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac6_hQXgjNoKcFYPs7jzhgAAA1Y"]
[Fri Apr 03 03:12:06.198028 2026] [:error] [pid 6754:tid 6767] [client 20.91.227.129:64473] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6_hiueCuy-hU9kX37fuQAAAgo"]
[Fri Apr 03 03:12:06.735146 2026] [:error] [pid 6754:tid 6775] [client 20.91.227.129:63796] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6_hiueCuy-hU9kX37fuwAAAhI"]
[Fri Apr 03 03:12:07.281120 2026] [:error] [pid 6680:tid 6683] [client 20.91.227.129:64405] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6_h36tYxvgZTk2y5Wz4AAAAYE"]
[Fri Apr 03 03:12:07.815926 2026] [:error] [pid 7029:tid 7033] [client 20.91.227.129:62410] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "ac6_hwXgjNoKcFYPs7jziwAAA0A"]
[Fri Apr 03 03:12:08.353065 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:63772] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "ac6_iAXgjNoKcFYPs7jzjQAAA0w"]
[Fri Apr 03 03:12:08.885384 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:63000] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "ac6_iAXgjNoKcFYPs7jzkAAAA1Y"]
[Fri Apr 03 03:12:09.491059 2026] [:error] [pid 25035:tid 25455] [client 20.91.227.129:61620] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "ac6_iRhR292toNOkLqHs7wAAAI0"]
[Fri Apr 03 03:12:10.146303 2026] [:error] [pid 7029:tid 7049] [client 20.91.227.129:64462] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ext.php"] [unique_id "ac6_igXgjNoKcFYPs7jzlwAAA04"]
[Fri Apr 03 03:12:10.705978 2026] [:error] [pid 6904:tid 6943] [client 20.91.227.129:61667] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "ac6_itFsvwmj2JDzXTy2qwAAAtg"]
[Fri Apr 03 03:12:11.268864 2026] [:error] [pid 6680:tid 6699] [client 20.91.227.129:63765] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "ac6_i36tYxvgZTk2y5Wz4QAAAZE"]
[Fri Apr 03 03:12:11.800364 2026] [:error] [pid 6754:tid 6759] [client 20.91.227.129:64490] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "ac6_iyueCuy-hU9kX37fwAAAAgI"]
[Fri Apr 03 03:12:12.334852 2026] [:error] [pid 6904:tid 6937] [client 20.91.227.129:63097] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about3.php"] [unique_id "ac6_jNFsvwmj2JDzXTy2rwAAAtY"]
[Fri Apr 03 03:12:13.030612 2026] [:error] [pid 6852:tid 6873] [client 20.91.227.129:62998] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac6_jcd4tRtTDmfkwZjzfwAAAo8"]
[Fri Apr 03 03:12:13.686996 2026] [:error] [pid 6852:tid 6880] [client 20.91.227.129:63041] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac6_jcd4tRtTDmfkwZjzhAAAApU"]
[Fri Apr 03 03:12:14.233930 2026] [:error] [pid 6798:tid 6824] [client 20.91.227.129:63809] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac6_jvZdLmBdUlbuwjrsigAAAlQ"]
[Fri Apr 03 03:12:14.768228 2026] [:error] [pid 6798:tid 6804] [client 20.91.227.129:60598] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac6_jvZdLmBdUlbuwjrsjQAAAkA"]
[Fri Apr 03 03:12:15.296299 2026] [:error] [pid 7029:tid 7046] [client 20.91.227.129:63101] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ac6_jwXgjNoKcFYPs7jzoQAAA00"]
[Fri Apr 03 03:12:15.903510 2026] [:error] [pid 6680:tid 6706] [client 20.91.227.129:61634] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ac6_j36tYxvgZTk2y5Wz5QAAAZg"]
[Fri Apr 03 03:12:16.431039 2026] [:error] [pid 6798:tid 6828] [client 20.91.227.129:63788] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ac6_kPZdLmBdUlbuwjrskQAAAlg"]
[Fri Apr 03 03:12:17.001953 2026] [:error] [pid 25035:tid 25452] [client 20.91.227.129:63797] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ac6_kRhR292toNOkLqHs8QAAAIo"]
[Fri Apr 03 03:12:17.541454 2026] [:error] [pid 25035:tid 25446] [client 20.91.227.129:63870] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ac6_kRhR292toNOkLqHs8gAAAIQ"]
[Fri Apr 03 03:12:18.184940 2026] [:error] [pid 25035:tid 25445] [client 20.91.227.129:63023] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ac6_khhR292toNOkLqHs9QAAAIM"]
[Fri Apr 03 03:12:18.760497 2026] [:error] [pid 25018:tid 25430] [client 20.91.227.129:63018] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ac6_knupR6lXnAUzFGol_QAAAFE"]
[Fri Apr 03 03:12:19.294769 2026] [:error] [pid 7029:tid 7049] [client 20.91.227.129:64443] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ac6_kwXgjNoKcFYPs7jzqwAAA04"]
[Fri Apr 03 03:12:19.888822 2026] [:error] [pid 6638:tid 6645] [client 20.91.227.129:61162] [client 20.91.227.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "ac6_k82khZ4zPe7L5k5-wQAAAUE"]
[Fri Apr 03 03:12:20.417841 2026] [:error] [pid 6718:tid 6738] [client 20.91.227.129:64440] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "ac6_lBcJBvdSRfIrgC4iRgAAAdI"]
[Fri Apr 03 03:12:20.944777 2026] [:error] [pid 7029:tid 7053] [client 20.91.227.129:61134] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "ac6_lAXgjNoKcFYPs7jzrQAAA1I"]
[Fri Apr 03 03:12:21.481063 2026] [:error] [pid 7029:tid 7050] [client 20.91.227.129:64469] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "ac6_lQXgjNoKcFYPs7jzsAAAA08"]
[Fri Apr 03 03:12:22.069174 2026] [:error] [pid 25035:tid 25457] [client 20.91.227.129:64439] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "ac6_lhhR292toNOkLqHs-AAAAI8"]
[Fri Apr 03 03:12:22.608396 2026] [:error] [pid 25035:tid 25455] [client 20.91.227.129:62404] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac6_lhhR292toNOkLqHs-QAAAI0"]
[Fri Apr 03 03:12:23.204101 2026] [:error] [pid 7029:tid 7046] [client 20.91.227.129:62982] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac6_lwXgjNoKcFYPs7jztAAAA00"]
[Fri Apr 03 03:12:23.875437 2026] [:error] [pid 6718:tid 6732] [client 20.91.227.129:63863] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac6_lxcJBvdSRfIrgC4iTQAAAcw"]
[Fri Apr 03 03:12:24.485976 2026] [:error] [pid 6638:tid 6661] [client 20.91.227.129:63773] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "ac6_mM2khZ4zPe7L5k5-xQAAAVE"]
[Fri Apr 03 03:12:25.049761 2026] [:error] [pid 7029:tid 7049] [client 20.91.227.129:63785] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ac6_mQXgjNoKcFYPs7jzuAAAA04"]
[Fri Apr 03 03:12:25.590666 2026] [:error] [pid 6718:tid 6738] [client 20.91.227.129:64459] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ac6_mRcJBvdSRfIrgC4iVAAAAdI"]
[Fri Apr 03 03:12:26.141852 2026] [:error] [pid 7029:tid 7034] [client 20.91.227.129:61625] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ac6_mgXgjNoKcFYPs7jzvQAAA0E"]
[Fri Apr 03 03:12:26.673070 2026] [:error] [pid 6638:tid 6655] [client 20.91.227.129:61587] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ac6_ms2khZ4zPe7L5k5-zgAAAUs"]
[Fri Apr 03 03:12:27.206071 2026] [:error] [pid 25035:tid 25445] [client 20.91.227.129:63774] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6_mxhR292toNOkLqHtAwAAAIM"]
[Fri Apr 03 03:12:27.824367 2026] [:error] [pid 25018:tid 25412] [client 20.91.227.129:61079] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6_m3upR6lXnAUzFGomAQAAAEE"]
[Fri Apr 03 03:12:28.377614 2026] [:error] [pid 25035:tid 25443] [client 20.91.227.129:63040] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6_nBhR292toNOkLqHtBAAAAIE"]
[Fri Apr 03 03:12:28.912008 2026] [:error] [pid 6718:tid 6732] [client 20.91.227.129:63828] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac6_nBcJBvdSRfIrgC4iXAAAAcw"]
[Fri Apr 03 03:12:29.444808 2026] [:error] [pid 6718:tid 6735] [client 20.91.227.129:62450] [client 20.91.227.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac6_nRcJBvdSRfIrgC4iYAAAAc8"]
[Fri Apr 03 03:12:29.972335 2026] [:error] [pid 6638:tid 6659] [client 20.91.227.129:64387] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "ac6_nc2khZ4zPe7L5k5-0gAAAU8"]
[Fri Apr 03 03:12:30.522417 2026] [:error] [pid 25035:tid 25450] [client 20.91.227.129:63812] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "ac6_nhhR292toNOkLqHtCAAAAIg"]
[Fri Apr 03 03:12:31.070646 2026] [:error] [pid 25035:tid 25452] [client 20.91.227.129:63056] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "ac6_nxhR292toNOkLqHtCgAAAIo"]
[Fri Apr 03 03:12:31.670149 2026] [:error] [pid 25035:tid 25463] [client 20.91.227.129:64428] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "ac6_nxhR292toNOkLqHtDgAAAJU"]
[Fri Apr 03 03:12:32.205915 2026] [:error] [pid 6718:tid 6739] [client 20.91.227.129:61138] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "ac6_oBcJBvdSRfIrgC4iZAAAAdM"]
[Fri Apr 03 03:12:32.790143 2026] [:error] [pid 6638:tid 6649] [client 20.91.227.129:63871] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "ac6_oM2khZ4zPe7L5k5-1QAAAUU"]
[Fri Apr 03 03:12:33.324126 2026] [:error] [pid 6718:tid 6728] [client 20.91.227.129:62399] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "ac6_oRcJBvdSRfIrgC4iZgAAAcg"]
[Fri Apr 03 03:12:33.859289 2026] [:error] [pid 6852:tid 6881] [client 20.91.227.129:63802] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6_ocd4tRtTDmfkwZjzkQAAApY"]
[Fri Apr 03 03:12:34.392299 2026] [:error] [pid 25035:tid 25452] [client 20.91.227.129:64446] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6_ohhR292toNOkLqHtFQAAAIo"]
[Fri Apr 03 03:12:34.924877 2026] [:error] [pid 6904:tid 6937] [client 20.91.227.129:63033] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6_otFsvwmj2JDzXTy2uAAAAtY"]
[Fri Apr 03 03:12:35.453108 2026] [:error] [pid 6718:tid 6736] [client 20.91.227.129:62418] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "ac6_oxcJBvdSRfIrgC4iagAAAdA"]
[Fri Apr 03 03:12:35.982883 2026] [:error] [pid 6754:tid 6760] [client 20.91.227.129:63787] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6_oyueCuy-hU9kX37fwwAAAgM"]
[Fri Apr 03 03:12:36.512408 2026] [:error] [pid 7029:tid 7042] [client 20.91.227.129:61642] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6_pAXgjNoKcFYPs7jzwwAAA0k"]
[Fri Apr 03 03:12:37.071536 2026] [:error] [pid 25035:tid 25453] [client 20.91.227.129:64419] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6_pRhR292toNOkLqHtGQAAAIs"]
[Fri Apr 03 03:12:37.730948 2026] [:error] [pid 6754:tid 6767] [client 20.91.227.129:62365] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac6_pSueCuy-hU9kX37fxQAAAgo"]
[Fri Apr 03 03:12:38.260203 2026] [:error] [pid 25018:tid 25425] [client 20.91.227.129:63869] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "ac6_pnupR6lXnAUzFGomDAAAAEw"]
[Fri Apr 03 03:12:38.800745 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:64401] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "ac6_pgXgjNoKcFYPs7jzygAAA1Y"]
[Fri Apr 03 03:12:39.334143 2026] [:error] [pid 6798:tid 6810] [client 20.91.227.129:63843] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "ac6_p_ZdLmBdUlbuwjrsmQAAAkY"]
[Fri Apr 03 03:12:39.866983 2026] [:error] [pid 6638:tid 6645] [client 20.91.227.129:63091] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dlu.php"] [unique_id "ac6_p82khZ4zPe7L5k5-2QAAAUE"]
[Fri Apr 03 03:12:40.405633 2026] [:error] [pid 6680:tid 6693] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Fri Apr 03 03:12:40.740747 2026] [:error] [pid 6680:tid 6697] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Apr 03 03:12:41.009253 2026] [:error] [pid 6680:tid 6703] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Apr 03 03:12:41.274037 2026] [:error] [pid 6680:tid 6694] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Fri Apr 03 03:12:41.541934 2026] [:error] [pid 6680:tid 6691] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri Apr 03 03:12:41.886520 2026] [:error] [pid 6680:tid 6699] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/hook.php
[Fri Apr 03 03:12:42.178838 2026] [:error] [pid 6680:tid 6682] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 03 03:12:42.443757 2026] [:error] [pid 6680:tid 6686] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 03 03:12:42.726768 2026] [:error] [pid 6680:tid 6687] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Fri Apr 03 03:12:43.023441 2026] [:error] [pid 6680:tid 6701] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Fri Apr 03 03:12:43.289794 2026] [:error] [pid 6680:tid 6692] [client 20.91.227.129:64486] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 03 03:12:43.552699 2026] [:error] [pid 6680:tid 6706] [client 20.91.227.129:64486] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "ac6_q36tYxvgZTk2y5Wz-AAAAZg"]
[Fri Apr 03 03:12:44.137363 2026] [:error] [pid 6754:tid 6776] [client 20.91.227.129:61127] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "ac6_rCueCuy-hU9kX37fzAAAAhM"]
[Fri Apr 03 03:12:44.665490 2026] [:error] [pid 6718:tid 6737] [client 20.91.227.129:64409] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "ac6_rBcJBvdSRfIrgC4ifAAAAdE"]
[Fri Apr 03 03:12:45.203675 2026] [:error] [pid 25018:tid 25422] [client 20.91.227.129:61182] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "ac6_rXupR6lXnAUzFGomFwAAAEk"]
[Fri Apr 03 03:12:46.696794 2026] [:error] [pid 25018:tid 25429] [client 20.91.227.129:61626] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6_rnupR6lXnAUzFGomHQAAAFA"]
[Fri Apr 03 03:12:47.234788 2026] [:error] [pid 6680:tid 6696] [client 20.91.227.129:63076] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6_r36tYxvgZTk2y5Wz-QAAAY4"]
[Fri Apr 03 03:12:47.793522 2026] [:error] [pid 6754:tid 6766] [client 20.91.227.129:61066] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6_ryueCuy-hU9kX37fzgAAAgk"]
[Fri Apr 03 03:12:48.397522 2026] [:error] [pid 25035:tid 25445] [client 20.91.227.129:63804] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ac6_sBhR292toNOkLqHtHwAAAIM"]
[Fri Apr 03 03:12:48.932620 2026] [:error] [pid 6798:tid 6827] [client 20.91.227.129:61148] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac6_sPZdLmBdUlbuwjrspgAAAlc"]
[Fri Apr 03 03:12:49.471690 2026] [:error] [pid 6852:tid 6863] [client 20.91.227.129:61643] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac6_scd4tRtTDmfkwZjzlQAAAoY"]
[Fri Apr 03 03:12:50.073625 2026] [:error] [pid 25018:tid 25432] [client 20.91.227.129:63017] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac6_snupR6lXnAUzFGomIAAAAFM"]
[Fri Apr 03 03:12:50.631902 2026] [:error] [pid 7029:tid 7056] [client 20.91.227.129:64444] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac6_sgXgjNoKcFYPs7jz3gAAA1U"]
[Fri Apr 03 03:12:51.188359 2026] [:error] [pid 6680:tid 6703] [client 20.91.227.129:62338] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "ac6_s36tYxvgZTk2y5Wz_AAAAZU"]
[Fri Apr 03 03:12:51.795733 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:63016] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "ac6_swXgjNoKcFYPs7jz4QAAA1Y"]
[Fri Apr 03 03:12:52.332047 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:64475] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "ac6_tAXgjNoKcFYPs7jz6AAAA0w"]
[Fri Apr 03 03:12:52.873363 2026] [:error] [pid 7029:tid 7038] [client 20.91.227.129:63072] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "ac6_tAXgjNoKcFYPs7jz7gAAA0U"]
[Fri Apr 03 03:12:53.398025 2026] [:error] [pid 7029:tid 7035] [client 20.91.227.129:61685] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6_tQXgjNoKcFYPs7jz9QAAA0I"]
[Fri Apr 03 03:12:54.146294 2026] [:error] [pid 25035:tid 25462] [client 20.91.227.129:60584] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6_thhR292toNOkLqHtJAAAAJQ"]
[Fri Apr 03 03:12:54.719989 2026] [:error] [pid 6754:tid 6775] [client 20.91.227.129:61618] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6_tiueCuy-hU9kX37f0wAAAhI"]
[Fri Apr 03 03:12:55.308063 2026] [:error] [pid 6798:tid 6816] [client 20.91.227.129:63783] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/manager.php"] [unique_id "ac6_t_ZdLmBdUlbuwjrsqAAAAkw"]
[Fri Apr 03 03:12:55.868047 2026] [:error] [pid 6638:tid 6644] [client 20.91.227.129:63761] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac6_t82khZ4zPe7L5k5-4AAAAUA"]
[Fri Apr 03 03:12:56.403758 2026] [:error] [pid 7029:tid 7035] [client 20.91.227.129:61117] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac6_uAXgjNoKcFYPs7j0AQAAA0I"]
[Fri Apr 03 03:12:57.047298 2026] [:error] [pid 6638:tid 6655] [client 20.91.227.129:61140] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac6_uc2khZ4zPe7L5k5-4wAAAUs"]
[Fri Apr 03 03:12:57.647681 2026] [:error] [pid 6638:tid 6664] [client 20.91.227.129:63009] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "ac6_uc2khZ4zPe7L5k5-5QAAAVQ"]
[Fri Apr 03 03:12:58.189070 2026] [:error] [pid 6718:tid 6721] [client 20.91.227.129:62354] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac6_uhcJBvdSRfIrgC4ihAAAAcE"]
[Fri Apr 03 03:12:58.724744 2026] [:error] [pid 6904:tid 6913] [client 20.91.227.129:63042] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac6_utFsvwmj2JDzXTy2vAAAAsE"]
[Fri Apr 03 03:12:59.270450 2026] [:error] [pid 7029:tid 7033] [client 20.91.227.129:63805] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac6_uwXgjNoKcFYPs7j0BwAAA0A"]
[Fri Apr 03 03:12:59.818784 2026] [:error] [pid 25035:tid 25464] [client 20.91.227.129:63086] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "ac6_uxhR292toNOkLqHtOQAAAJY"]
[Fri Apr 03 03:13:00.421321 2026] [:error] [pid 6638:tid 6646] [client 20.91.227.129:62992] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ac6_vM2khZ4zPe7L5k5-6QAAAUI"]
[Fri Apr 03 03:13:00.974185 2026] [:error] [pid 7029:tid 7034] [client 20.91.227.129:60603] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ac6_vAXgjNoKcFYPs7j0DAAAA0E"]
[Fri Apr 03 03:13:01.653723 2026] [:error] [pid 25035:tid 25457] [client 20.91.227.129:61576] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ac6_vRhR292toNOkLqHtQgAAAI8"]
[Fri Apr 03 03:13:02.286011 2026] [:error] [pid 6904:tid 6922] [client 20.91.227.129:64487] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ac6_vtFsvwmj2JDzXTy2wAAAAsg"]
[Fri Apr 03 03:13:02.893342 2026] [:error] [pid 6680:tid 6705] [client 20.91.227.129:64413] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6_vn6tYxvgZTk2y5W0AgAAAZc"]
[Fri Apr 03 03:13:03.466637 2026] [:error] [pid 7029:tid 7038] [client 20.91.227.129:62409] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6_vwXgjNoKcFYPs7j0DgAAA0U"]
[Fri Apr 03 03:13:03.998787 2026] [:error] [pid 6754:tid 6769] [client 20.91.227.129:61611] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6_vyueCuy-hU9kX37f3wAAAgw"]
[Fri Apr 03 03:13:04.549466 2026] [:error] [pid 6904:tid 6934] [client 20.91.227.129:63079] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac6_wNFsvwmj2JDzXTy2wgAAAtM"]
[Fri Apr 03 03:13:05.369762 2026] [:error] [pid 25035:tid 25452] [client 20.91.227.129:62447] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoha.php"] [unique_id "ac6_wRhR292toNOkLqHtVgAAAIo"]
[Fri Apr 03 03:13:05.995451 2026] [:error] [pid 6754:tid 6772] [client 20.91.227.129:61606] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoha.php"] [unique_id "ac6_wSueCuy-hU9kX37f4gAAAg8"]
[Fri Apr 03 03:13:06.603696 2026] [:error] [pid 25035:tid 25454] [client 20.91.227.129:63855] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoha.php"] [unique_id "ac6_whhR292toNOkLqHtXwAAAIw"]
[Fri Apr 03 03:13:07.246867 2026] [:error] [pid 6904:tid 6923] [client 20.91.227.129:64464] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shoha.php"] [unique_id "ac6_w9Fsvwmj2JDzXTy2xQAAAsk"]
[Fri Apr 03 03:13:07.789065 2026] [:error] [pid 6754:tid 6779] [client 20.91.227.129:62463] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "ac6_wyueCuy-hU9kX37f5AAAAhY"]
[Fri Apr 03 03:13:08.324820 2026] [:error] [pid 6798:tid 6823] [client 20.91.227.129:64481] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "ac6_xPZdLmBdUlbuwjrssAAAAlM"]
[Fri Apr 03 03:13:08.920526 2026] [:error] [pid 6680:tid 6688] [client 20.91.227.129:63070] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "ac6_xH6tYxvgZTk2y5W0CQAAAYY"]
[Fri Apr 03 03:13:09.561144 2026] [:error] [pid 6754:tid 6778] [client 20.91.227.129:62337] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "ac6_xSueCuy-hU9kX37f5gAAAhU"]
[Fri Apr 03 03:13:10.090705 2026] [:error] [pid 6718:tid 6733] [client 20.91.227.129:63070] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ac6_xhcJBvdSRfIrgC4iigAAAc0"]
[Fri Apr 03 03:13:10.809547 2026] [:error] [pid 6852:tid 6873] [client 20.91.227.129:62989] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ac6_xsd4tRtTDmfkwZjzmwAAAo8"]
[Fri Apr 03 03:13:11.460439 2026] [:error] [pid 6638:tid 6653] [client 20.91.227.129:63025] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ac6_x82khZ4zPe7L5k5-8gAAAUk"]
[Fri Apr 03 03:13:12.026258 2026] [:error] [pid 25035:tid 25457] [client 20.91.227.129:63808] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ac6_yBhR292toNOkLqHtbwAAAI8"]
[Fri Apr 03 03:13:12.553260 2026] [:error] [pid 6638:tid 6650] [client 20.91.227.129:63003] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ac6_yM2khZ4zPe7L5k5-9QAAAUY"]
[Fri Apr 03 03:13:13.132324 2026] [:error] [pid 25035:tid 25442] [client 20.91.227.129:62339] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ac6_yRhR292toNOkLqHtcgAAAIA"]
[Fri Apr 03 03:13:13.683663 2026] [:error] [pid 6638:tid 6666] [client 20.91.227.129:64445] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ac6_yc2khZ4zPe7L5k5--AAAAVY"]
[Fri Apr 03 03:13:14.385517 2026] [:error] [pid 25018:tid 25418] [client 20.91.227.129:63027] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ac6_ynupR6lXnAUzFGomNQAAAEU"]
[Fri Apr 03 03:13:14.934079 2026] [:error] [pid 6680:tid 6702] [client 20.91.227.129:64435] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "ac6_yn6tYxvgZTk2y5W0EQAAAZQ"]
[Fri Apr 03 03:13:15.465481 2026] [:error] [pid 25035:tid 25456] [client 20.91.227.129:62988] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "ac6_yxhR292toNOkLqHtfgAAAI4"]
[Fri Apr 03 03:13:16.100298 2026] [:error] [pid 25035:tid 25459] [client 20.91.227.129:63075] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "ac6_zBhR292toNOkLqHtgAAAAJE"]
[Fri Apr 03 03:13:17.426021 2026] [:error] [pid 6754:tid 6767] [client 20.91.227.129:64477] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "ac6_zSueCuy-hU9kX37f6QAAAgo"]
[Fri Apr 03 03:13:17.958414 2026] [:error] [pid 6718:tid 6721] [client 20.91.227.129:63081] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ac6_zRcJBvdSRfIrgC4ijgAAAcE"]
[Fri Apr 03 03:13:18.561972 2026] [:error] [pid 6638:tid 6650] [client 20.91.227.129:61668] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ac6_zs2khZ4zPe7L5k5-_wAAAUY"]
[Fri Apr 03 03:13:19.097854 2026] [:error] [pid 25035:tid 25447] [client 20.91.227.129:62402] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ac6_zxhR292toNOkLqHtiwAAAIU"]
[Fri Apr 03 03:13:19.642776 2026] [:error] [pid 25018:tid 25424] [client 20.91.227.129:61628] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ac6_z3upR6lXnAUzFGomPgAAAEs"]
[Fri Apr 03 03:13:19.758130 2026] [:error] [pid 25035:tid 25458] [client 20.91.227.129:64988] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6_zxhR292toNOkLqHtjgAAAJA"]
[Fri Apr 03 03:13:20.230400 2026] [:error] [pid 25035:tid 25466] [client 20.91.227.129:64449] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ac6_0BhR292toNOkLqHtjwAAAJg"]
[Fri Apr 03 03:13:20.350418 2026] [:error] [pid 25035:tid 25448] [client 20.91.227.129:63452] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6_0BhR292toNOkLqHtkQAAAIY"]
[Fri Apr 03 03:13:20.802915 2026] [:error] [pid 6638:tid 6661] [client 20.91.227.129:62406] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ac6_0M2khZ4zPe7L5k5_AgAAAVE"]
[Fri Apr 03 03:13:20.893512 2026] [:error] [pid 6638:tid 6654] [client 20.91.227.129:64048] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6_0M2khZ4zPe7L5k5_AwAAAUo"]
[Fri Apr 03 03:13:21.339095 2026] [:error] [pid 7029:tid 7051] [client 20.91.227.129:61078] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ac6_0QXgjNoKcFYPs7j0GAAAA1A"]
[Fri Apr 03 03:13:21.483679 2026] [:error] [pid 25018:tid 25435] [client 20.91.227.129:64084] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac6_0XupR6lXnAUzFGomQwAAAFY"]
[Fri Apr 03 03:13:21.924783 2026] [:error] [pid 6638:tid 6656] [client 20.91.227.129:62407] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ac6_0c2khZ4zPe7L5k5_BQAAAUw"]
[Fri Apr 03 03:13:22.496934 2026] [:error] [pid 25018:tid 25421] [client 20.91.227.129:63791] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ac6_0nupR6lXnAUzFGomRAAAAEg"]
[Fri Apr 03 03:13:23.047103 2026] [:error] [pid 6718:tid 6736] [client 20.91.227.129:63084] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ac6_0xcJBvdSRfIrgC4ijwAAAdA"]
[Fri Apr 03 03:13:23.592705 2026] [:error] [pid 6718:tid 6741] [client 20.91.227.129:63766] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ac6_0xcJBvdSRfIrgC4ikwAAAdU"]
[Fri Apr 03 03:13:24.120926 2026] [:error] [pid 6754:tid 6759] [client 20.91.227.129:63830] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ac6_1CueCuy-hU9kX37f7wAAAgI"]
[Fri Apr 03 03:13:24.650082 2026] [:error] [pid 6904:tid 6937] [client 20.91.227.129:63074] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6_1NFsvwmj2JDzXTy2ywAAAtY"]
[Fri Apr 03 03:13:25.260775 2026] [:error] [pid 6718:tid 6721] [client 20.91.227.129:63861] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6_1RcJBvdSRfIrgC4inAAAAcE"]
[Fri Apr 03 03:13:25.841743 2026] [:error] [pid 6680:tid 6696] [client 20.91.227.129:63767] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6_1X6tYxvgZTk2y5W0GwAAAY4"]
[Fri Apr 03 03:13:26.501172 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:64471] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ac6_1gXgjNoKcFYPs7j0HAAAA0w"]
[Fri Apr 03 03:13:27.228779 2026] [:error] [pid 6718:tid 6736] [client 20.91.227.129:62375] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac6_1xcJBvdSRfIrgC4ingAAAdA"]
[Fri Apr 03 03:13:27.766025 2026] [:error] [pid 6718:tid 6730] [client 20.91.227.129:64456] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac6_1xcJBvdSRfIrgC4iogAAAco"]
[Fri Apr 03 03:13:28.449424 2026] [:error] [pid 6718:tid 6727] [client 20.91.227.129:62397] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac6_2BcJBvdSRfIrgC4ipwAAAcc"]
[Fri Apr 03 03:13:29.220315 2026] [:error] [pid 6904:tid 6929] [client 20.91.227.129:64398] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ac6_2dFsvwmj2JDzXTy2zAAAAs8"]
[Fri Apr 03 03:13:30.059947 2026] [:error] [pid 6852:tid 6876] [client 20.91.227.129:64488] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ac6_2sd4tRtTDmfkwZjznQAAApE"]
[Fri Apr 03 03:13:30.619327 2026] [:error] [pid 6718:tid 6744] [client 20.91.227.129:62436] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ac6_2hcJBvdSRfIrgC4irwAAAdg"]
[Fri Apr 03 03:13:31.145064 2026] [:error] [pid 6638:tid 6667] [client 20.91.227.129:64385] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ac6_282khZ4zPe7L5k5_EQAAAVc"]
[Fri Apr 03 03:13:31.772997 2026] [:error] [pid 25035:tid 25451] [client 20.91.227.129:63763] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ac6_2xhR292toNOkLqHtqQAAAIk"]
[Fri Apr 03 03:13:32.321460 2026] [:error] [pid 6638:tid 6649] [client 20.91.227.129:64505] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "ac6_3M2khZ4zPe7L5k5_EgAAAUU"]
[Fri Apr 03 03:13:32.859543 2026] [:error] [pid 6718:tid 6742] [client 20.91.227.129:64457] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "ac6_3BcJBvdSRfIrgC4itgAAAdY"]
[Fri Apr 03 03:13:33.396861 2026] [:error] [pid 6718:tid 6738] [client 20.91.227.129:64411] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "ac6_3RcJBvdSRfIrgC4iuQAAAdI"]
[Fri Apr 03 03:13:33.940178 2026] [:error] [pid 7029:tid 7059] [client 20.91.227.129:61132] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "ac6_3QXgjNoKcFYPs7j0IQAAA1c"]
[Fri Apr 03 03:13:34.521929 2026] [:error] [pid 7029:tid 7050] [client 20.91.227.129:64496] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6_3gXgjNoKcFYPs7j0JQAAA08"]
[Fri Apr 03 03:13:35.049326 2026] [:error] [pid 7029:tid 7052] [client 20.91.227.129:61124] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6_3wXgjNoKcFYPs7j0KgAAA1E"]
[Fri Apr 03 03:13:35.580524 2026] [:error] [pid 6852:tid 6862] [client 20.91.227.129:63064] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6_38d4tRtTDmfkwZjzogAAAoU"]
[Fri Apr 03 03:13:36.123520 2026] [:error] [pid 6718:tid 6742] [client 20.91.227.129:63073] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/NewFile.php"] [unique_id "ac6_4BcJBvdSRfIrgC4ivgAAAdY"]
[Fri Apr 03 03:13:36.774650 2026] [:error] [pid 6754:tid 6777] [client 20.91.227.129:62394] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ac6_4CueCuy-hU9kX37f9gAAAhQ"]
[Fri Apr 03 03:13:37.322232 2026] [:error] [pid 25035:tid 25461] [client 20.91.227.129:62993] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ac6_4RhR292toNOkLqHtsAAAAJM"]
[Fri Apr 03 03:13:37.876831 2026] [:error] [pid 25035:tid 25466] [client 20.91.227.129:61580] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ac6_4RhR292toNOkLqHtsgAAAJg"]
[Fri Apr 03 03:13:38.426573 2026] [:error] [pid 6718:tid 6728] [client 20.91.227.129:64431] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ac6_4hcJBvdSRfIrgC4ixQAAAcg"]
[Fri Apr 03 03:13:38.997159 2026] [:error] [pid 6680:tid 6687] [client 20.91.227.129:61131] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6_4n6tYxvgZTk2y5W0KAAAAYU"]
[Fri Apr 03 03:13:39.617691 2026] [:error] [pid 25018:tid 25436] [client 20.91.227.129:62420] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6_43upR6lXnAUzFGombgAAAFc"]
[Fri Apr 03 03:13:40.223880 2026] [:error] [pid 25035:tid 25459] [client 20.91.227.129:64480] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6_5BhR292toNOkLqHttgAAAJE"]
[Fri Apr 03 03:13:40.790599 2026] [:error] [pid 6798:tid 6826] [client 20.91.227.129:64470] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "ac6_5PZdLmBdUlbuwjrs2gAAAlY"]
[Fri Apr 03 03:13:41.402864 2026] [:error] [pid 6798:tid 6820] [client 20.91.227.129:63013] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "ac6_5fZdLmBdUlbuwjrs3AAAAlA"]
[Fri Apr 03 03:13:41.955204 2026] [:error] [pid 6638:tid 6666] [client 20.91.227.129:60555] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "ac6_5c2khZ4zPe7L5k5_GwAAAVY"]
[Fri Apr 03 03:13:42.529149 2026] [:error] [pid 6754:tid 6773] [client 20.91.227.129:62413] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "ac6_5iueCuy-hU9kX37f_gAAAhA"]
[Fri Apr 03 03:13:43.340484 2026] [:error] [pid 25035:tid 25455] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Fri Apr 03 03:13:43.634027 2026] [:error] [pid 25035:tid 25450] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Fri Apr 03 03:13:44.182808 2026] [:error] [pid 25035:tid 25451] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 03 03:13:44.458741 2026] [:error] [pid 25035:tid 25466] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Apr 03 03:13:44.734055 2026] [:error] [pid 25035:tid 25460] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Apr 03 03:13:45.145579 2026] [:error] [pid 25035:tid 25447] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Fri Apr 03 03:13:45.412117 2026] [:error] [pid 25035:tid 25457] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Fri Apr 03 03:13:45.680987 2026] [:error] [pid 25035:tid 25453] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Fri Apr 03 03:13:46.236452 2026] [:error] [pid 25035:tid 25459] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Fri Apr 03 03:13:47.670725 2026] [:error] [pid 25035:tid 25459] [client 20.91.227.129:63852] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Fri Apr 03 03:13:47.975674 2026] [:error] [pid 25035:tid 25444] [client 20.91.227.129:63852] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ac6_6xhR292toNOkLqHtygAAAII"]
[Fri Apr 03 03:13:48.727419 2026] [:error] [pid 7029:tid 7038] [client 20.91.227.129:61181] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ac6_7AXgjNoKcFYPs7j0OwAAA0U"]
[Fri Apr 03 03:13:49.609051 2026] [:error] [pid 7029:tid 7036] [client 20.91.227.129:61677] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ac6_7QXgjNoKcFYPs7j0QQAAA0M"]
[Fri Apr 03 03:13:50.200454 2026] [:error] [pid 25035:tid 25461] [client 20.91.227.129:63798] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ac6_7hhR292toNOkLqHtzwAAAJM"]
[Fri Apr 03 03:13:52.000563 2026] [:error] [pid 7029:tid 7052] [client 20.91.227.129:61577] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6_8AXgjNoKcFYPs7j0SgAAA1E"]
[Fri Apr 03 03:13:52.827177 2026] [:error] [pid 25035:tid 25456] [client 20.91.227.129:63028] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6_8BhR292toNOkLqHt1gAAAI4"]
[Fri Apr 03 03:13:53.402789 2026] [:error] [pid 6638:tid 6660] [client 20.91.227.129:64389] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6_8c2khZ4zPe7L5k5_KAAAAVA"]
[Fri Apr 03 03:13:54.023864 2026] [:error] [pid 6718:tid 6722] [client 20.91.227.129:62443] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac6_8hcJBvdSRfIrgC4i4gAAAcI"]
[Fri Apr 03 03:13:54.614605 2026] [:error] [pid 6852:tid 6869] [client 20.91.227.129:64510] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "ac6_8sd4tRtTDmfkwZjzqgAAAos"]
[Fri Apr 03 03:13:55.381718 2026] [:error] [pid 25035:tid 25454] [client 20.91.227.129:63838] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "ac6_8xhR292toNOkLqHt4gAAAIw"]
[Fri Apr 03 03:13:56.103521 2026] [:error] [pid 25035:tid 25464] [client 20.91.227.129:63029] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "ac6_9BhR292toNOkLqHt5wAAAJY"]
[Fri Apr 03 03:13:56.644555 2026] [:error] [pid 25035:tid 25456] [client 20.91.227.129:62360] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc.php"] [unique_id "ac6_9BhR292toNOkLqHt7QAAAI4"]
[Fri Apr 03 03:13:57.234522 2026] [:error] [pid 25035:tid 25457] [client 20.91.227.129:62990] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6_9RhR292toNOkLqHt8QAAAI8"]
[Fri Apr 03 03:13:57.828826 2026] [:error] [pid 25035:tid 25453] [client 20.91.227.129:63752] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6_9RhR292toNOkLqHt-gAAAIs"]
[Fri Apr 03 03:13:59.434477 2026] [:error] [pid 6718:tid 6728] [client 20.91.227.129:63825] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6_9xcJBvdSRfIrgC4i7AAAAcg"]
[Fri Apr 03 03:14:00.113503 2026] [:error] [pid 6754:tid 6768] [client 20.91.227.129:63827] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "ac6_-CueCuy-hU9kX37gIwAAAgs"]
[Fri Apr 03 03:14:00.655630 2026] [:error] [pid 6718:tid 6735] [client 20.91.227.129:62978] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ac6_-BcJBvdSRfIrgC4i8AAAAc8"]
[Fri Apr 03 03:14:01.200160 2026] [:error] [pid 6718:tid 6734] [client 20.91.227.129:64390] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ac6_-RcJBvdSRfIrgC4i8gAAAc4"]
[Fri Apr 03 03:14:01.747170 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:63833] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ac6_-QXgjNoKcFYPs7j0XAAAA0w"]
[Fri Apr 03 03:14:02.349036 2026] [:error] [pid 6718:tid 6732] [client 20.91.227.129:61111] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ac6_-hcJBvdSRfIrgC4i9QAAAcw"]
[Fri Apr 03 03:14:02.894105 2026] [:error] [pid 25018:tid 25427] [client 20.91.227.129:63065] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "ac6_-nupR6lXnAUzFGomywAAAE4"]
[Fri Apr 03 03:14:03.435273 2026] [:error] [pid 6718:tid 6739] [client 20.91.227.129:61105] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "ac6_-xcJBvdSRfIrgC4i-QAAAdM"]
[Fri Apr 03 03:14:04.097393 2026] [:error] [pid 6718:tid 6736] [client 20.91.227.129:63048] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "ac6__BcJBvdSRfIrgC4i_AAAAdA"]
[Fri Apr 03 03:14:04.871915 2026] [:error] [pid 6718:tid 6725] [client 20.91.227.129:62361] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "ac6__BcJBvdSRfIrgC4jAQAAAcU"]
[Fri Apr 03 03:14:05.499188 2026] [:error] [pid 6638:tid 6662] [client 20.91.227.129:63059] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ac6__c2khZ4zPe7L5k5_MwAAAVI"]
[Fri Apr 03 03:14:06.061415 2026] [:error] [pid 6638:tid 6653] [client 20.91.227.129:64497] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ac6__s2khZ4zPe7L5k5_NAAAAUk"]
[Fri Apr 03 03:14:06.601009 2026] [:error] [pid 25018:tid 25415] [client 20.91.227.129:63847] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ac6__nupR6lXnAUzFGomzQAAAEM"]
[Fri Apr 03 03:14:07.135176 2026] [:error] [pid 6638:tid 6650] [client 20.91.227.129:63085] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ac6__82khZ4zPe7L5k5_NwAAAUY"]
[Fri Apr 03 03:14:07.692876 2026] [:error] [pid 25018:tid 25434] [client 20.91.227.129:61687] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac6__3upR6lXnAUzFGom0QAAAFU"]
[Fri Apr 03 03:14:08.242843 2026] [:error] [pid 6798:tid 6814] [client 20.91.227.129:64467] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7AAPZdLmBdUlbuwjrs_AAAAko"]
[Fri Apr 03 03:14:08.953983 2026] [:error] [pid 25035:tid 25450] [client 20.91.227.129:61149] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7AABhR292toNOkLqHuOAAAAIg"]
[Fri Apr 03 03:14:09.490712 2026] [:error] [pid 6638:tid 6651] [client 20.91.227.129:61150] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac7AAc2khZ4zPe7L5k5_PAAAAUc"]
[Fri Apr 03 03:14:10.092739 2026] [:error] [pid 6904:tid 6930] [client 20.91.227.129:62444] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7AAtFsvwmj2JDzXTy23wAAAtA"]
[Fri Apr 03 03:14:10.708203 2026] [:error] [pid 7029:tid 7059] [client 20.91.227.129:62382] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7AAgXgjNoKcFYPs7j0fAAAA1c"]
[Fri Apr 03 03:14:11.265175 2026] [:error] [pid 25035:tid 25446] [client 20.91.227.129:63751] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7AAxhR292toNOkLqHuQwAAAIQ"]
[Fri Apr 03 03:14:11.809751 2026] [:error] [pid 6718:tid 6735] [client 20.91.227.129:62423] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7AAxcJBvdSRfIrgC4jDwAAAc8"]
[Fri Apr 03 03:14:12.363603 2026] [:error] [pid 6754:tid 6777] [client 20.91.227.129:64426] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "ac7ABCueCuy-hU9kX37gUQAAAhQ"]
[Fri Apr 03 03:14:12.898555 2026] [:error] [pid 6638:tid 6663] [client 20.91.227.129:64434] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "ac7ABM2khZ4zPe7L5k5_RAAAAVM"]
[Fri Apr 03 03:14:13.451936 2026] [:error] [pid 6718:tid 6724] [client 20.91.227.129:61658] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "ac7ABRcJBvdSRfIrgC4jEwAAAcQ"]
[Fri Apr 03 03:14:14.050143 2026] [:error] [pid 6798:tid 6805] [client 20.91.227.129:64441] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "ac7ABvZdLmBdUlbuwjrtBgAAAkE"]
[Fri Apr 03 03:14:14.623410 2026] [:error] [pid 6798:tid 6815] [client 20.91.227.129:62446] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac7ABvZdLmBdUlbuwjrtCwAAAks"]
[Fri Apr 03 03:14:15.154542 2026] [:error] [pid 7029:tid 7040] [client 20.91.227.129:61574] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac7ABwXgjNoKcFYPs7j0jQAAA0c"]
[Fri Apr 03 03:14:15.759488 2026] [:error] [pid 6798:tid 6828] [client 20.91.227.129:64506] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac7AB_ZdLmBdUlbuwjrtEgAAAlg"]
[Fri Apr 03 03:14:16.342481 2026] [:error] [pid 6638:tid 6655] [client 20.91.227.129:61592] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "ac7ACM2khZ4zPe7L5k5_TgAAAUs"]
[Fri Apr 03 03:14:16.980416 2026] [:error] [pid 7029:tid 7053] [client 20.91.227.129:63823] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ac7ACAXgjNoKcFYPs7j0kwAAA1I"]
[Fri Apr 03 03:14:17.514663 2026] [:error] [pid 6852:tid 6882] [client 20.91.227.129:62373] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ac7ACcd4tRtTDmfkwZjz3gAAApc"]
[Fri Apr 03 03:14:18.049055 2026] [:error] [pid 6798:tid 6824] [client 20.91.227.129:62403] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ac7ACvZdLmBdUlbuwjrtGQAAAlQ"]
[Fri Apr 03 03:14:18.577053 2026] [:error] [pid 6798:tid 6823] [client 20.91.227.129:60577] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ac7ACvZdLmBdUlbuwjrtGwAAAlM"]
[Fri Apr 03 03:14:19.106186 2026] [:error] [pid 7029:tid 7051] [client 20.91.227.129:64484] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ac7ACwXgjNoKcFYPs7j0lgAAA1A"]
[Fri Apr 03 03:14:19.651228 2026] [:error] [pid 25018:tid 25427] [client 20.91.227.129:62343] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ac7AC3upR6lXnAUzFGom5wAAAE4"]
[Fri Apr 03 03:14:20.193798 2026] [:error] [pid 25018:tid 25436] [client 20.91.227.129:63747] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ac7ADHupR6lXnAUzFGom6gAAAFc"]
[Fri Apr 03 03:14:20.756213 2026] [:error] [pid 6680:tid 6698] [client 20.91.227.129:62456] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ac7ADH6tYxvgZTk2y5W0PwAAAZA"]
[Fri Apr 03 03:14:21.296954 2026] [:error] [pid 6754:tid 6772] [client 20.91.227.129:62452] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ac7ADSueCuy-hU9kX37gXwAAAg8"]
[Fri Apr 03 03:14:21.993862 2026] [:error] [pid 7029:tid 7033] [client 20.91.227.129:63103] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ac7ADQXgjNoKcFYPs7j0pQAAA0A"]
[Fri Apr 03 03:14:22.629981 2026] [:error] [pid 7029:tid 7059] [client 20.91.227.129:63749] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ac7ADgXgjNoKcFYPs7j0qQAAA1c"]
[Fri Apr 03 03:14:23.174565 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:62991] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ac7ADwXgjNoKcFYPs7j0rgAAA0w"]
[Fri Apr 03 03:14:23.755133 2026] [:error] [pid 6798:tid 6812] [client 20.91.227.129:62356] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7AD_ZdLmBdUlbuwjrtIQAAAkg"]
[Fri Apr 03 03:14:24.291840 2026] [:error] [pid 25018:tid 25412] [client 20.91.227.129:63867] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7AEHupR6lXnAUzFGom7wAAAEE"]
[Fri Apr 03 03:14:24.890204 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:62421] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7AEAXgjNoKcFYPs7j0tAAAA1Y"]
[Fri Apr 03 03:14:25.455081 2026] [:error] [pid 6638:tid 6648] [client 20.91.227.129:61137] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac7AEc2khZ4zPe7L5k5_WgAAAUQ"]
[Fri Apr 03 03:14:26.169087 2026] [:error] [pid 6718:tid 6735] [client 20.91.227.129:61674] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "ac7AEhcJBvdSRfIrgC4jIQAAAc8"]
[Fri Apr 03 03:14:26.705575 2026] [:error] [pid 7029:tid 7036] [client 20.91.227.129:64484] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "ac7AEgXgjNoKcFYPs7j0vwAAA0M"]
[Fri Apr 03 03:14:27.241223 2026] [:error] [pid 6638:tid 6667] [client 20.91.227.129:63020] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "ac7AE82khZ4zPe7L5k5_XAAAAVc"]
[Fri Apr 03 03:14:27.863350 2026] [:error] [pid 25035:tid 25460] [client 20.91.227.129:61692] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "ac7AExhR292toNOkLqHuVAAAAJI"]
[Fri Apr 03 03:14:28.395360 2026] [:error] [pid 6638:tid 6665] [client 20.91.227.129:61122] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7AFM2khZ4zPe7L5k5_YQAAAVU"]
[Fri Apr 03 03:14:28.931318 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:63826] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7AFAXgjNoKcFYPs7j0xwAAA1Y"]
[Fri Apr 03 03:14:29.518176 2026] [:error] [pid 7029:tid 7039] [client 20.91.227.129:62348] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7AFQXgjNoKcFYPs7j0ywAAA0Y"]
[Fri Apr 03 03:14:30.143183 2026] [:error] [pid 25018:tid 25427] [client 20.91.227.129:60641] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac7AFnupR6lXnAUzFGom8wAAAE4"]
[Fri Apr 03 03:14:30.681629 2026] [:error] [pid 25035:tid 25453] [client 20.91.227.129:61652] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/himu.php"] [unique_id "ac7AFhhR292toNOkLqHuWQAAAIs"]
[Fri Apr 03 03:14:31.228342 2026] [:error] [pid 25035:tid 25457] [client 20.91.227.129:62422] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/himu.php"] [unique_id "ac7AFxhR292toNOkLqHuXQAAAI8"]
[Fri Apr 03 03:14:31.773988 2026] [:error] [pid 7029:tid 7055] [client 20.91.227.129:63786] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/himu.php"] [unique_id "ac7AFwXgjNoKcFYPs7j01QAAA1Q"]
[Fri Apr 03 03:14:32.418356 2026] [:error] [pid 6904:tid 6925] [client 20.91.227.129:62432] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/himu.php"] [unique_id "ac7AGNFsvwmj2JDzXTy26wAAAss"]
[Fri Apr 03 03:14:33.093471 2026] [:error] [pid 7029:tid 7060] [client 20.91.227.129:62431] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ac7AGQXgjNoKcFYPs7j03AAAA1g"]
[Fri Apr 03 03:14:33.627805 2026] [:error] [pid 7029:tid 7044] [client 20.91.227.129:63034] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ac7AGQXgjNoKcFYPs7j04AAAA0s"]
[Fri Apr 03 03:14:34.165333 2026] [:error] [pid 7029:tid 7053] [client 20.91.227.129:63002] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ac7AGgXgjNoKcFYPs7j04wAAA1I"]
[Fri Apr 03 03:14:34.877401 2026] [:error] [pid 25035:tid 25457] [client 20.91.227.129:63046] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ac7AGhhR292toNOkLqHuaQAAAI8"]
[Fri Apr 03 03:14:35.436460 2026] [:error] [pid 7029:tid 7045] [client 20.91.227.129:63745] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "ac7AGwXgjNoKcFYPs7j07wAAA0w"]
[Fri Apr 03 03:14:36.095497 2026] [:error] [pid 6754:tid 6770] [client 20.91.227.129:61673] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "ac7AHCueCuy-hU9kX37gYwAAAg0"]
[Fri Apr 03 03:14:36.631199 2026] [:error] [pid 25035:tid 25454] [client 20.91.227.129:64418] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "ac7AHBhR292toNOkLqHubAAAAIw"]
[Fri Apr 03 03:14:37.204340 2026] [:error] [pid 25035:tid 25466] [client 20.91.227.129:63091] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/png.php"] [unique_id "ac7AHRhR292toNOkLqHucAAAAJg"]
[Fri Apr 03 03:14:37.769024 2026] [:error] [pid 25018:tid 25418] [client 20.91.227.129:60595] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ac7AHXupR6lXnAUzFGom9wAAAEU"]
[Fri Apr 03 03:14:45.112713 2026] [:error] [pid 7029:tid 7049] [client 20.91.227.129:61646] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ac7AJQXgjNoKcFYPs7j1FAAAA04"]
[Fri Apr 03 03:14:45.793641 2026] [:error] [pid 7029:tid 7051] [client 20.91.227.129:64384] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ac7AJQXgjNoKcFYPs7j1GwAAA1A"]
[Fri Apr 03 03:14:46.344285 2026] [:error] [pid 6852:tid 6877] [client 20.91.227.129:62439] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ac7AJsd4tRtTDmfkwZjz7QAAApI"]
[Fri Apr 03 03:14:46.870711 2026] [:error] [pid 7029:tid 7057] [client 20.91.227.129:64463] [client 20.91.227.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ac7AJgXgjNoKcFYPs7j1LgAAA1Y"]
[Fri Apr 03 03:14:47.532708 2026] [:error] [pid 6718:tid 6729] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Apr 03 03:14:47.799878 2026] [:error] [pid 6718:tid 6730] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Apr 03 03:14:48.106629 2026] [:error] [pid 6718:tid 6733] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-is.php
[Fri Apr 03 03:14:48.390569 2026] [:error] [pid 6718:tid 6725] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Fri Apr 03 03:14:48.657347 2026] [:error] [pid 6718:tid 6726] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Fri Apr 03 03:14:48.925959 2026] [:error] [pid 6718:tid 6723] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 03 03:14:49.206512 2026] [:error] [pid 6718:tid 6744] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Apr 03 03:14:49.474632 2026] [:error] [pid 6718:tid 6738] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Apr 03 03:14:49.751367 2026] [:error] [pid 6718:tid 6728] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Fri Apr 03 03:14:50.043709 2026] [:error] [pid 6718:tid 6734] [client 20.91.227.129:61064] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Apr 03 03:50:05.075270 2026] [:error] [pid 22672:tid 22722] [client 49.51.204.74:38132] [client 49.51.204.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac7IbazrgXkFSOK0fvpUAQAAAEM"]
[Fri Apr 03 04:21:40.733895 2026] [:error] [pid 22778:tid 22789] [client 182.44.2.148:41116] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac7P1PS-q9hkdFqUjq9LtwAAAMQ"]
[Fri Apr 03 10:25:58.657077 2026] [:error] [pid 35469:tid 35480] [client 114.96.103.33:52190] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ac8lNqGvTIc8-wY3jURJmQAAAQk"]
[Fri Apr 03 12:56:57.092173 2026] [:error] [pid 33445:tid 33454] [client 43.165.69.68:40654] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ac9ImVlRNZ0iDVmJWM37hwAAAAQ"]
[Fri Apr 03 16:47:35.555893 2026] [:error] [pid 35469:tid 35476] [client 106.54.62.156:59662] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac9-p6GvTIc8-wY3jUTotwAAAQU"]
[Fri Apr 03 16:58:05.369337 2026] [:error] [pid 40562:tid 40582] [client 43.128.156.124:49630] [client 43.128.156.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac-BHTfFMXuP9zvqCeotfwAAAZE"]
[Fri Apr 03 19:00:45.454894 2026] [:error] [pid 40562:tid 40577] [client 43.159.141.150:47908] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ac-d3TfFMXuP9zvqCepUvAAAAYw"]
[Fri Apr 03 22:06:28.219692 2026] [:error] [pid 33445:tid 33473] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Fri Apr 03 22:06:28.461656 2026] [:error] [pid 33445:tid 33461] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Fri Apr 03 22:06:28.734575 2026] [:error] [pid 33445:tid 33474] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Fri Apr 03 22:06:28.985209 2026] [:error] [pid 33445:tid 33455] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 03 22:06:29.227550 2026] [:error] [pid 33445:tid 33472] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 03 22:06:29.490856 2026] [:error] [pid 33445:tid 33454] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Fri Apr 03 22:06:29.734102 2026] [:error] [pid 33445:tid 33470] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 03 22:06:30.001952 2026] [:error] [pid 33445:tid 33467] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Fri Apr 03 22:06:30.291698 2026] [:error] [pid 33445:tid 33474] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Fri Apr 03 22:06:30.606572 2026] [:error] [pid 33445:tid 33457] [client 158.158.51.12:16111] File does not exist: /usr/local/apache/htdocs/suspended-page/t2gorhwasq4vioshtatw5eCdefault.php
[Fri Apr 03 22:06:31.399840 2026] [:error] [pid 33445:tid 33451] [client 158.158.51.12:16111] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac_JZ1lRNZ0iDVmJWM0iQAAAAAE"]
[Fri Apr 03 22:06:32.568407 2026] [:error] [pid 33542:tid 33558] [client 158.158.51.12:42428] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac_JaHwb6uB1LaGtepYGXAAAAM0"]
[Fri Apr 03 22:06:33.488769 2026] [:error] [pid 33542:tid 33546] [client 158.158.51.12:36708] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac_JaXwb6uB1LaGtepYGbAAAAME"]
[Fri Apr 03 22:06:34.628105 2026] [:error] [pid 40533:tid 40545] [client 158.158.51.12:22105] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ac_JavbIAA8AViDmwsu8dQAAAUo"]
[Fri Apr 03 22:06:35.172336 2026] [:error] [pid 40533:tid 40540] [client 158.158.51.12:30874] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac_Ja_bIAA8AViDmwsu8ewAAAUU"]
[Fri Apr 03 22:06:36.493966 2026] [:error] [pid 33542:tid 33547] [client 158.158.51.12:36677] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac_JbHwb6uB1LaGtepYGegAAAMI"]
[Fri Apr 03 22:06:37.365147 2026] [:error] [pid 33445:tid 33452] [client 158.158.51.12:22127] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac_JbVlRNZ0iDVmJWM0iTgAAAAI"]
[Fri Apr 03 22:06:37.863216 2026] [:error] [pid 40533:tid 40538] [client 158.158.51.12:22124] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ac_JbfbIAA8AViDmwsu8hwAAAUM"]
[Fri Apr 03 22:06:38.412703 2026] [:error] [pid 33445:tid 33471] [client 158.158.51.12:20533] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_JbllRNZ0iDVmJWM0iVwAAABU"]
[Fri Apr 03 22:06:39.202326 2026] [:error] [pid 33542:tid 33556] [client 158.158.51.12:20558] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_Jb3wb6uB1LaGtepYGgQAAAMs"]
[Fri Apr 03 22:06:39.924089 2026] [:error] [pid 33446:tid 33495] [client 158.158.51.12:30849] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_Jb9g3dCqFYIIdw0qDJQAAAFI"]
[Fri Apr 03 22:06:40.634698 2026] [:error] [pid 35469:tid 35495] [client 158.158.51.12:20516] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ac_JcKGvTIc8-wY3jUS2kQAAARg"]
[Fri Apr 03 22:06:42.620516 2026] [:error] [pid 33446:tid 33490] [client 158.158.51.12:20518] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_Jctg3dCqFYIIdw0qDLwAAAE0"]
[Fri Apr 03 22:06:43.779185 2026] [:error] [pid 40533:tid 40547] [client 158.158.51.12:30903] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_Jc_bIAA8AViDmwsu8kQAAAUw"]
[Fri Apr 03 22:06:45.949154 2026] [:error] [pid 33447:tid 33518] [client 158.158.51.12:48676] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_JdUgaPmDHz92j4lNYrQAAAI4"]
[Fri Apr 03 22:06:47.123794 2026] [:error] [pid 33445:tid 33455] [client 158.158.51.12:37745] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_Jd1lRNZ0iDVmJWM0icwAAAAU"]
[Fri Apr 03 22:06:49.486479 2026] [:error] [pid 33542:tid 33567] [client 158.158.51.12:31697] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ac_JeXwb6uB1LaGtepYGigAAANY"]
[Fri Apr 03 22:06:52.112116 2026] [:error] [pid 33446:tid 33495] [client 158.158.51.12:59040] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ac_JfNg3dCqFYIIdw0qDVwAAAFI"]
[Fri Apr 03 22:06:54.349674 2026] [:error] [pid 40533:tid 40544] [client 158.158.51.12:54334] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ac_JfvbIAA8AViDmwsu8owAAAUk"]
[Fri Apr 03 22:06:55.470674 2026] [:error] [pid 55174:tid 55197] [client 158.158.51.12:46278] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ac_Jf5_WKqUonPNUHYwCwwAAAdU"]
[Fri Apr 03 22:06:57.300500 2026] [:error] [pid 40533:tid 40537] [client 158.158.51.12:1887] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_JgfbIAA8AViDmwsu8rQAAAUI"]
[Fri Apr 03 22:06:58.196346 2026] [:error] [pid 40562:tid 40574] [client 158.158.51.12:39880] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_JgjfFMXuP9zvqCeqWhwAAAYk"]
[Fri Apr 03 22:06:59.298131 2026] [:error] [pid 33445:tid 33471] [client 158.158.51.12:39895] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_Jg1lRNZ0iDVmJWM0ijQAAABU"]
[Fri Apr 03 22:07:00.459392 2026] [:error] [pid 40533:tid 40550] [client 158.158.51.12:50661] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "ac_JhPbIAA8AViDmwsu8wwAAAU8"]
[Fri Apr 03 22:07:01.156939 2026] [:error] [pid 33445:tid 33459] [client 158.158.51.12:37640] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_JhVlRNZ0iDVmJWM0ikwAAAAk"]
[Fri Apr 03 22:07:02.560469 2026] [:error] [pid 33446:tid 33481] [client 158.158.51.12:37742] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_Jhtg3dCqFYIIdw0qDkAAAAEQ"]
[Fri Apr 03 22:07:03.746285 2026] [:error] [pid 33446:tid 33479] [client 158.158.51.12:1869] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_Jh9g3dCqFYIIdw0qDlwAAAEI"]
[Fri Apr 03 22:07:04.678583 2026] [:error] [pid 40533:tid 40547] [client 158.158.51.12:55508] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "ac_JiPbIAA8AViDmwsu80QAAAUw"]
[Fri Apr 03 22:07:05.245448 2026] [:error] [pid 40562:tid 40589] [client 158.158.51.12:50636] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_JiTfFMXuP9zvqCeqWkgAAAZg"]
[Fri Apr 03 22:07:06.237886 2026] [:error] [pid 55174:tid 55184] [client 158.158.51.12:16827] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_Jip_WKqUonPNUHYwC2wAAAcg"]
[Fri Apr 03 22:07:06.730354 2026] [:error] [pid 33542:tid 33556] [client 158.158.51.12:45456] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_Jinwb6uB1LaGtepYHEwAAAMs"]
[Fri Apr 03 22:07:07.248360 2026] [:error] [pid 33446:tid 33485] [client 158.158.51.12:28423] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "ac_Ji9g3dCqFYIIdw0qDqQAAAEg"]
[Fri Apr 03 22:07:07.849166 2026] [:error] [pid 35469:tid 35486] [client 158.158.51.12:37656] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_Ji6GvTIc8-wY3jUS2uAAAAQ8"]
[Fri Apr 03 22:07:08.374072 2026] [:error] [pid 33445:tid 33458] [client 158.158.51.12:59671] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_JjFlRNZ0iDVmJWM0iqwAAAAg"]
[Fri Apr 03 22:07:09.090806 2026] [:error] [pid 33447:tid 33507] [client 158.158.51.12:50644] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_JjUgaPmDHz92j4lNYwwAAAIM"]
[Fri Apr 03 22:07:09.879999 2026] [:error] [pid 40533:tid 40550] [client 158.158.51.12:47496] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "ac_JjfbIAA8AViDmwsu82AAAAU8"]
[Fri Apr 03 22:07:10.638208 2026] [:error] [pid 33542:tid 33545] [client 158.158.51.12:47545] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_Jjnwb6uB1LaGtepYHHAAAAMA"]
[Fri Apr 03 22:07:11.313997 2026] [:error] [pid 33445:tid 33459] [client 158.158.51.12:37690] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_Jj1lRNZ0iDVmJWM0ivAAAAAk"]
[Fri Apr 03 22:07:12.153213 2026] [:error] [pid 33542:tid 33552] [client 158.158.51.12:48722] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_JkHwb6uB1LaGtepYHHQAAAMc"]
[Fri Apr 03 22:07:12.857944 2026] [:error] [pid 33447:tid 33518] [client 158.158.51.12:16788] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ac_JkEgaPmDHz92j4lNYyQAAAI4"]
[Fri Apr 03 22:07:13.495768 2026] [:error] [pid 33445:tid 33467] [client 158.158.51.12:50654] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_JkVlRNZ0iDVmJWM0ixQAAABE"]
[Fri Apr 03 22:07:13.976260 2026] [:error] [pid 33445:tid 33450] [client 158.158.51.12:16811] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_JkVlRNZ0iDVmJWM0ixgAAAAA"]
[Fri Apr 03 22:07:14.619732 2026] [:error] [pid 33445:tid 33458] [client 158.158.51.12:39923] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_JkllRNZ0iDVmJWM0iyAAAAAg"]
[Fri Apr 03 22:07:15.198927 2026] [:error] [pid 40562:tid 40585] [client 158.158.51.12:45464] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac_JkzfFMXuP9zvqCeqWpwAAAZQ"]
[Fri Apr 03 22:07:15.695714 2026] [:error] [pid 33445:tid 33455] [client 158.158.51.12:37649] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_Jk1lRNZ0iDVmJWM0izAAAAAU"]
[Fri Apr 03 22:07:16.378454 2026] [:error] [pid 33446:tid 33486] [client 158.158.51.12:50628] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_JlNg3dCqFYIIdw0qDwwAAAEk"]
[Fri Apr 03 22:07:17.332036 2026] [:error] [pid 40533:tid 40556] [client 158.158.51.12:37671] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_JlfbIAA8AViDmwsu85gAAAVU"]
[Fri Apr 03 22:07:18.390831 2026] [:error] [pid 33542:tid 33553] [client 158.158.51.12:31661] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ac_Jlnwb6uB1LaGtepYHQwAAAMg"]
[Fri Apr 03 22:07:19.273153 2026] [:error] [pid 33445:tid 33458] [client 158.158.51.12:31676] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ac_Jl1lRNZ0iDVmJWM0i1gAAAAg"]
[Fri Apr 03 22:07:20.372660 2026] [:error] [pid 35469:tid 35481] [client 158.158.51.12:43698] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ac_JmKGvTIc8-wY3jUS2wwAAAQo"]
[Fri Apr 03 22:07:21.143209 2026] [:error] [pid 33446:tid 33488] [client 158.158.51.12:26437] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ac_Jmdg3dCqFYIIdw0qD0AAAAEs"]
[Fri Apr 03 22:07:22.760064 2026] [:error] [pid 55174:tid 55192] [client 158.158.51.12:47501] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ac_Jmp_WKqUonPNUHYwC8gAAAdA"]
[Fri Apr 03 22:07:23.985115 2026] [:error] [pid 35469:tid 35492] [client 158.158.51.12:31648] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ac_Jm6GvTIc8-wY3jUS2ygAAARU"]
[Fri Apr 03 22:07:25.284547 2026] [:error] [pid 33445:tid 33465] [client 158.158.51.12:16829] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ac_JnVlRNZ0iDVmJWM0i7gAAAA8"]
[Fri Apr 03 22:07:26.301914 2026] [:error] [pid 33447:tid 33512] [client 158.158.51.12:31318] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ac_JnkgaPmDHz92j4lNY0wAAAIg"]
[Fri Apr 03 22:07:27.773037 2026] [:error] [pid 40533:tid 40546] [client 158.158.51.12:55531] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ac_Jn_bIAA8AViDmwsu88QAAAUs"]
[Fri Apr 03 22:07:29.225149 2026] [:error] [pid 33542:tid 33565] [client 158.158.51.12:58980] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "ac_JoXwb6uB1LaGtepYHfgAAANQ"]
[Fri Apr 03 22:07:30.084933 2026] [:error] [pid 40533:tid 40551] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Fri Apr 03 22:07:31.139787 2026] [:error] [pid 40533:tid 40551] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 03 22:07:31.417496 2026] [:error] [pid 40533:tid 40535] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Apr 03 22:07:31.846102 2026] [:error] [pid 40533:tid 40555] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Fri Apr 03 22:07:32.122155 2026] [:error] [pid 40533:tid 40549] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 03 22:07:32.591517 2026] [:error] [pid 40533:tid 40543] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Fri Apr 03 22:07:32.835049 2026] [:error] [pid 40533:tid 40540] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Fri Apr 03 22:07:33.077417 2026] [:error] [pid 40533:tid 40551] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Apr 03 22:07:33.383561 2026] [:error] [pid 40533:tid 40547] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Apr 03 22:07:33.668143 2026] [:error] [pid 40533:tid 40558] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/b4txckoieeyhynhsrpi9lCdefault.php
[Fri Apr 03 22:07:33.910178 2026] [:error] [pid 40533:tid 40550] [client 158.158.51.12:43652] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 03 22:07:34.211650 2026] [:error] [pid 40533:tid 40535] [client 158.158.51.12:43652] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_JpvbIAA8AViDmwsu9EQAAAUA"]
[Fri Apr 03 22:07:34.760657 2026] [:error] [pid 33542:tid 33556] [client 158.158.51.12:16796] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_Jpnwb6uB1LaGtepYHnAAAAMs"]
[Fri Apr 03 22:07:35.317172 2026] [:error] [pid 40562:tid 40572] [client 158.158.51.12:61604] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_JpzfFMXuP9zvqCeqWzgAAAYc"]
[Fri Apr 03 22:07:35.966782 2026] [:error] [pid 35469:tid 35492] [client 158.158.51.12:48717] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac_Jp6GvTIc8-wY3jUS21AAAARU"]
[Fri Apr 03 22:07:36.557520 2026] [:error] [pid 33446:tid 33487] [client 158.158.51.12:55521] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "ac_JqNg3dCqFYIIdw0qD7AAAAEo"]
[Fri Apr 03 22:07:37.535735 2026] [:error] [pid 33445:tid 33474] [client 158.158.51.12:26447] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "ac_JqVlRNZ0iDVmJWM0jRQAAABg"]
[Fri Apr 03 22:07:38.365271 2026] [:error] [pid 35469:tid 35483] [client 158.158.51.12:29845] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "ac_JqqGvTIc8-wY3jUS22gAAAQw"]
[Fri Apr 03 22:07:40.055053 2026] [:error] [pid 33447:tid 33528] [client 158.158.51.12:27986] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "ac_JrEgaPmDHz92j4lNY5QAAAJg"]
[Fri Apr 03 22:07:59.931404 2026] [:error] [pid 40562:tid 40583] [client 158.158.51.12:29874] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_JvzfFMXuP9zvqCeqW9AAAAZI"]
[Fri Apr 03 22:08:04.848970 2026] [:error] [pid 33445:tid 33468] [client 158.158.51.12:40367] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_JxFlRNZ0iDVmJWM0jngAAABI"]
[Fri Apr 03 22:08:06.311311 2026] [:error] [pid 35469:tid 35480] [client 158.158.51.12:46265] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_JxqGvTIc8-wY3jUS3DAAAAQk"]
[Fri Apr 03 22:08:07.284934 2026] [:error] [pid 33542:tid 33545] [client 158.158.51.12:39849] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_Jx3wb6uB1LaGtepYIDAAAAMA"]
[Fri Apr 03 22:08:09.354975 2026] [:error] [pid 33445:tid 33456] [client 158.158.51.12:46248] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_JyVlRNZ0iDVmJWM0jtgAAAAY"]
[Fri Apr 03 22:08:11.224759 2026] [:error] [pid 33542:tid 33553] [client 158.158.51.12:63469] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_Jy3wb6uB1LaGtepYIEQAAAMg"]
[Fri Apr 03 22:08:15.769519 2026] [:error] [pid 33542:tid 33557] [client 158.158.51.12:21589] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_Jz3wb6uB1LaGtepYIEgAAAMw"]
[Fri Apr 03 22:08:17.215821 2026] [:error] [pid 33445:tid 33467] [client 158.158.51.12:36648] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ac_J0VlRNZ0iDVmJWM0j6QAAABE"]
[Fri Apr 03 22:08:21.828158 2026] [:error] [pid 55174:tid 55178] [client 158.158.51.12:41677] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "ac_J1Z_WKqUonPNUHYwDLQAAAcI"]
[Fri Apr 03 22:09:26.194477 2026] [:error] [pid 33445:tid 33467] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 03 22:09:26.436795 2026] [:error] [pid 33445:tid 33463] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Fri Apr 03 22:09:26.707989 2026] [:error] [pid 33445:tid 33469] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/irpl4xz4fmlzm4tlvvu4h1mCdefault.php
[Fri Apr 03 22:09:26.971698 2026] [:error] [pid 33445:tid 33462] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Fri Apr 03 22:09:27.231277 2026] [:error] [pid 33445:tid 33457] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/wlld5fjtdpjmjhsds3qzmipfCdefault.php
[Fri Apr 03 22:09:27.471030 2026] [:error] [pid 33445:tid 33452] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Apr 03 22:09:27.713969 2026] [:error] [pid 33445:tid 33464] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Apr 03 22:09:27.976190 2026] [:error] [pid 33445:tid 33466] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 22:09:28.498458 2026] [:error] [pid 33445:tid 33460] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/q7lhrgzoo7ijhnkcedq2Cdefault.php
[Fri Apr 03 22:09:28.794344 2026] [:error] [pid 33445:tid 33463] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/0yellow.php
[Fri Apr 03 22:09:29.036442 2026] [:error] [pid 33445:tid 33452] [client 158.158.51.12:29903] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Fri Apr 03 22:09:29.300564 2026] [:error] [pid 33445:tid 33470] [client 158.158.51.12:29903] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_KGVlRNZ0iDVmJWM0klgAAABQ"]
[Fri Apr 03 22:09:32.741062 2026] [:error] [pid 33542:tid 33555] [client 158.158.51.12:33330] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_KHHwb6uB1LaGtepYIjgAAAMo"]
[Fri Apr 03 22:09:35.059811 2026] [:error] [pid 33542:tid 33567] [client 158.158.51.12:30397] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_KH3wb6uB1LaGtepYIkgAAANY"]
[Fri Apr 03 22:09:36.438792 2026] [:error] [pid 35469:tid 35478] [client 158.158.51.12:43742] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "ac_KIKGvTIc8-wY3jUS3TgAAAQc"]
[Fri Apr 03 22:09:37.412837 2026] [:error] [pid 35469:tid 35472] [client 158.158.51.12:43733] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac_KIaGvTIc8-wY3jUS3UwAAAQE"]
[Fri Apr 03 22:09:38.970489 2026] [:error] [pid 55174:tid 55186] [client 158.158.51.12:27471] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac_KIp_WKqUonPNUHYwDWQAAAco"]
[Fri Apr 03 22:09:40.119894 2026] [:error] [pid 33446:tid 33492] [client 158.158.51.12:28521] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac_KJNg3dCqFYIIdw0qEYAAAAE8"]
[Fri Apr 03 22:09:41.155699 2026] [:error] [pid 55174:tid 55177] [client 158.158.51.12:15661] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ac_KJZ_WKqUonPNUHYwDXAAAAcE"]
[Fri Apr 03 22:09:41.848938 2026] [:error] [pid 40533:tid 40556] [client 158.158.51.12:28494] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_KJfbIAA8AViDmwsu94QAAAVU"]
[Fri Apr 03 22:09:42.792193 2026] [:error] [pid 33447:tid 33513] [client 158.158.51.12:36631] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_KJkgaPmDHz92j4lNZIgAAAIk"]
[Fri Apr 03 22:09:43.315435 2026] [:error] [pid 35469:tid 35481] [client 158.158.51.12:15703] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_KJ6GvTIc8-wY3jUS3XQAAAQo"]
[Fri Apr 03 22:09:44.269278 2026] [:error] [pid 33446:tid 33477] [client 158.158.51.12:21576] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_KKNg3dCqFYIIdw0qEZgAAAEA"]
[Fri Apr 03 22:09:44.995208 2026] [:error] [pid 40562:tid 40585] [client 158.158.51.12:40375] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac_KKDfFMXuP9zvqCeqXcwAAAZQ"]
[Fri Apr 03 22:09:45.728531 2026] [:error] [pid 33447:tid 33519] [client 158.158.51.12:36650] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac_KKUgaPmDHz92j4lNZKAAAAI8"]
[Fri Apr 03 22:09:47.064936 2026] [:error] [pid 33542:tid 33551] [client 158.158.51.12:51219] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac_KK3wb6uB1LaGtepYImwAAAMY"]
[Fri Apr 03 22:09:47.681496 2026] [:error] [pid 40533:tid 40540] [client 158.158.51.12:49934] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "ac_KK_bIAA8AViDmwsu96QAAAUU"]
[Fri Apr 03 22:09:48.353603 2026] [:error] [pid 40533:tid 40551] [client 158.158.51.12:36628] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac_KLPbIAA8AViDmwsu97gAAAVA"]
[Fri Apr 03 22:09:49.027247 2026] [:error] [pid 33445:tid 33450] [client 158.158.51.12:58305] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac_KLVlRNZ0iDVmJWM0krwAAAAA"]
[Fri Apr 03 22:09:49.573276 2026] [:error] [pid 33445:tid 33469] [client 158.158.51.12:1769] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac_KLVlRNZ0iDVmJWM0ksAAAABM"]
[Fri Apr 03 22:09:50.267219 2026] [:error] [pid 40533:tid 40550] [client 158.158.51.12:49948] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ac_KLvbIAA8AViDmwsu99AAAAU8"]
[Fri Apr 03 22:09:50.916533 2026] [:error] [pid 33542:tid 33550] [client 158.158.51.12:21603] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_KLnwb6uB1LaGtepYIoQAAAMU"]
[Fri Apr 03 22:09:52.000728 2026] [:error] [pid 35469:tid 35493] [client 158.158.51.12:24950] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_KL6GvTIc8-wY3jUS3dgAAARY"]
[Fri Apr 03 22:09:52.981760 2026] [:error] [pid 40533:tid 40559] [client 158.158.51.12:64620] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_KMPbIAA8AViDmwsu99wAAAVg"]
[Fri Apr 03 22:09:54.080243 2026] [:error] [pid 40533:tid 40544] [client 158.158.51.12:25970] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ac_KMvbIAA8AViDmwsu9-AAAAUk"]
[Fri Apr 03 22:09:55.145530 2026] [:error] [pid 40533:tid 40541] [client 158.158.51.12:64612] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac_KM_bIAA8AViDmwsu9_QAAAUY"]
[Fri Apr 03 22:09:56.009611 2026] [:error] [pid 33445:tid 33457] [client 158.158.51.12:58312] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac_KNFlRNZ0iDVmJWM0kxAAAAAc"]
[Fri Apr 03 22:09:56.828245 2026] [:error] [pid 33445:tid 33471] [client 158.158.51.12:64607] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac_KNFlRNZ0iDVmJWM0kxwAAABU"]
[Fri Apr 03 22:09:57.864701 2026] [:error] [pid 33542:tid 33549] [client 158.158.51.12:59671] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ac_KNXwb6uB1LaGtepYIrwAAAMQ"]
[Fri Apr 03 22:09:58.792764 2026] [:error] [pid 33445:tid 33461] [client 158.158.51.12:20029] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac_KNllRNZ0iDVmJWM0k0AAAAAs"]
[Fri Apr 03 22:09:59.856637 2026] [:error] [pid 33445:tid 33451] [client 158.158.51.12:42988] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac_KN1lRNZ0iDVmJWM0k3AAAAAE"]
[Fri Apr 03 22:10:00.573650 2026] [:error] [pid 33445:tid 33468] [client 158.158.51.12:36082] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac_KOFlRNZ0iDVmJWM0k4gAAABI"]
[Fri Apr 03 22:10:01.799319 2026] [:error] [pid 33445:tid 33461] [client 158.158.51.12:55907] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ac_KOVlRNZ0iDVmJWM0k6gAAAAs"]
[Fri Apr 03 22:10:02.604493 2026] [:error] [pid 33445:tid 33451] [client 158.158.51.12:42968] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ac_KOllRNZ0iDVmJWM0k7wAAAAE"]
[Fri Apr 03 22:10:03.977109 2026] [:error] [pid 33445:tid 33474] [client 158.158.51.12:55933] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ac_KO1lRNZ0iDVmJWM0k-QAAABg"]
[Fri Apr 03 22:10:05.193894 2026] [:error] [pid 33542:tid 33565] [client 158.158.51.12:24948] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ac_KPXwb6uB1LaGtepYItgAAANQ"]
[Fri Apr 03 22:10:06.218938 2026] [:error] [pid 33446:tid 33478] [client 158.158.51.12:29421] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ac_KPtg3dCqFYIIdw0qEdwAAAEE"]
[Fri Apr 03 22:10:08.185531 2026] [:error] [pid 33447:tid 33517] [client 158.158.51.12:25928] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac_KQEgaPmDHz92j4lNZPAAAAI0"]
[Fri Apr 03 22:10:09.001353 2026] [:error] [pid 35469:tid 35484] [client 158.158.51.12:19986] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac_KQaGvTIc8-wY3jUS3fgAAAQ0"]
[Fri Apr 03 22:10:09.845771 2026] [:error] [pid 33445:tid 33460] [client 158.158.51.12:60778] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac_KQVlRNZ0iDVmJWM0lCAAAAAo"]
[Fri Apr 03 22:10:11.806717 2026] [:error] [pid 33447:tid 33504] [client 158.158.51.12:42894] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "ac_KQ0gaPmDHz92j4lNZPgAAAIA"]
[Fri Apr 03 22:10:13.229784 2026] [:error] [pid 40533:tid 40538] [client 158.158.51.12:24946] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_KRfbIAA8AViDmwsu-DQAAAUM"]
[Fri Apr 03 22:10:14.341776 2026] [:error] [pid 33445:tid 33450] [client 158.158.51.12:24928] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_KRllRNZ0iDVmJWM0lDAAAAAA"]
[Fri Apr 03 22:10:14.966206 2026] [:error] [pid 33445:tid 33458] [client 158.158.51.12:25981] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_KRllRNZ0iDVmJWM0lDgAAAAg"]
[Fri Apr 03 22:10:16.480493 2026] [:error] [pid 40533:tid 40546] [client 158.158.51.12:21588] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5xkfgawzejgwqh9hiaznCdefault.php"] [unique_id "ac_KSPbIAA8AViDmwsu-LQAAAUs"]
[Fri Apr 03 22:10:17.168089 2026] [:error] [pid 40533:tid 40542] [client 158.158.51.12:63467] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ac_KSfbIAA8AViDmwsu-MgAAAUc"]
[Fri Apr 03 22:10:19.289268 2026] [:error] [pid 33447:tid 33507] [client 158.158.51.12:49981] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ac_KS0gaPmDHz92j4lNZRgAAAIM"]
[Fri Apr 03 22:10:20.521498 2026] [:error] [pid 55174:tid 55191] [client 158.158.51.12:24936] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ac_KTJ_WKqUonPNUHYwDeAAAAc8"]
[Fri Apr 03 22:10:21.348384 2026] [:error] [pid 33445:tid 33472] [client 158.158.51.12:64636] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ac_KTVlRNZ0iDVmJWM0lFQAAABY"]
[Fri Apr 03 22:10:22.004971 2026] [:error] [pid 33445:tid 33451] [client 158.158.51.12:29407] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "ac_KTllRNZ0iDVmJWM0lGQAAAAE"]
[Fri Apr 03 22:10:22.750910 2026] [:error] [pid 33445:tid 33470] [client 158.158.51.12:49973] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "ac_KTllRNZ0iDVmJWM0lGwAAABQ"]
[Fri Apr 03 22:10:23.784360 2026] [:error] [pid 33446:tid 33487] [client 158.158.51.12:20009] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "ac_KT9g3dCqFYIIdw0qElgAAAEo"]
[Fri Apr 03 22:10:24.456200 2026] [:error] [pid 33542:tid 33565] [client 158.158.51.12:55879] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "ac_KUHwb6uB1LaGtepYI4wAAANQ"]
[Fri Apr 03 22:10:25.147755 2026] [:error] [pid 33542:tid 33552] [client 158.158.51.12:55874] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "ac_KUXwb6uB1LaGtepYI5wAAAMc"]
[Fri Apr 03 22:10:26.294532 2026] [:error] [pid 33445:tid 33464] [client 158.158.51.12:18559] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "ac_KUllRNZ0iDVmJWM0lIAAAAA4"]
[Fri Apr 03 22:10:26.950164 2026] [:error] [pid 40533:tid 40551] [client 158.158.51.12:49929] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "ac_KUvbIAA8AViDmwsu-QQAAAVA"]
[Fri Apr 03 22:10:27.885952 2026] [:error] [pid 33445:tid 33462] [client 158.158.51.12:42973] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "ac_KU1lRNZ0iDVmJWM0lJQAAAAw"]
[Fri Apr 03 22:10:28.520649 2026] [:error] [pid 33445:tid 33451] [client 158.158.51.12:46266] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "ac_KVFlRNZ0iDVmJWM0lKAAAAAE"]
[Fri Apr 03 22:10:29.370211 2026] [:error] [pid 33445:tid 33461] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 03 22:10:29.612069 2026] [:error] [pid 33445:tid 33455] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Fri Apr 03 22:10:29.855198 2026] [:error] [pid 33445:tid 33460] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Fri Apr 03 22:10:30.934940 2026] [:error] [pid 33445:tid 33462] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Fri Apr 03 22:10:31.185855 2026] [:error] [pid 33445:tid 33451] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 03 22:10:31.451548 2026] [:error] [pid 33445:tid 33467] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Fri Apr 03 22:10:31.705611 2026] [:error] [pid 33445:tid 33463] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Fri Apr 03 22:10:32.080979 2026] [:error] [pid 33445:tid 33473] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Fri Apr 03 22:10:32.387825 2026] [:error] [pid 33445:tid 33461] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Fri Apr 03 22:10:32.630954 2026] [:error] [pid 33445:tid 33456] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 03 22:10:32.873214 2026] [:error] [pid 33445:tid 33459] [client 158.158.51.12:64599] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Fri Apr 03 22:10:33.112339 2026] [:error] [pid 33445:tid 33457] [client 158.158.51.12:64599] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ac_KWVlRNZ0iDVmJWM0lPwAAAAc"]
[Fri Apr 03 22:10:33.625513 2026] [:error] [pid 33445:tid 33474] [client 158.158.51.12:42971] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ac_KWVlRNZ0iDVmJWM0lQAAAABg"]
[Fri Apr 03 22:10:34.720046 2026] [:error] [pid 40562:tid 40583] [client 158.158.51.12:19980] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ac_KWjfFMXuP9zvqCeqXqgAAAZI"]
[Fri Apr 03 22:10:35.420826 2026] [:error] [pid 33542:tid 33552] [client 158.158.51.12:42984] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ac_KW3wb6uB1LaGtepYI-AAAAMc"]
[Fri Apr 03 22:10:36.686578 2026] [:error] [pid 40533:tid 40549] [client 158.158.51.12:25942] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "ac_KXPbIAA8AViDmwsu-XgAAAU4"]
[Fri Apr 03 22:10:37.946808 2026] [:error] [pid 33446:tid 33482] [client 158.158.51.12:22547] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "ac_KXdg3dCqFYIIdw0qEpwAAAEU"]
[Fri Apr 03 22:10:39.429030 2026] [:error] [pid 40533:tid 40548] [client 158.158.51.12:49938] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "ac_KX_bIAA8AViDmwsu-ZgAAAU0"]
[Fri Apr 03 22:10:40.356903 2026] [:error] [pid 40533:tid 40558] [client 158.158.51.12:42945] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "ac_KYPbIAA8AViDmwsu-aQAAAVc"]
[Fri Apr 03 22:10:41.605726 2026] [:error] [pid 40533:tid 40552] [client 158.158.51.12:42980] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ac_KYfbIAA8AViDmwsu-cAAAAVE"]
[Fri Apr 03 22:10:42.728067 2026] [:error] [pid 33542:tid 33545] [client 158.158.51.12:24957] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ac_KYnwb6uB1LaGtepYJAwAAAMA"]
[Fri Apr 03 22:10:44.042405 2026] [:error] [pid 40533:tid 40548] [client 158.158.51.12:55872] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ac_KZPbIAA8AViDmwsu-cwAAAU0"]
[Fri Apr 03 22:10:45.999077 2026] [:error] [pid 33542:tid 33546] [client 158.158.51.12:22530] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ac_KZXwb6uB1LaGtepYJCAAAAME"]
[Fri Apr 03 22:10:46.941688 2026] [:error] [pid 35469:tid 35488] [client 158.158.51.12:24392] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ac_KZqGvTIc8-wY3jUS3mwAAARE"]
[Fri Apr 03 22:10:49.046429 2026] [:error] [pid 40533:tid 40535] [client 158.158.51.12:42941] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ac_KafbIAA8AViDmwsu-hQAAAUA"]
[Fri Apr 03 22:10:50.442850 2026] [:error] [pid 33542:tid 33565] [client 158.158.51.12:55929] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ac_Kanwb6uB1LaGtepYJEwAAANQ"]
[Fri Apr 03 22:10:51.291491 2026] [:error] [pid 40533:tid 40555] [client 158.158.51.12:1281] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ac_Ka_bIAA8AViDmwsu-kQAAAVQ"]
[Fri Apr 03 22:10:52.090480 2026] [:error] [pid 33542:tid 33552] [client 158.158.51.12:18532] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ac_KbHwb6uB1LaGtepYJFgAAAMc"]
[Fri Apr 03 22:10:52.746062 2026] [:error] [pid 33446:tid 33501] [client 158.158.51.12:29434] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ac_KbNg3dCqFYIIdw0qEtAAAAFg"]
[Fri Apr 03 22:10:53.373317 2026] [:error] [pid 33447:tid 33516] [client 158.158.51.12:64038] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ac_KbUgaPmDHz92j4lNZUgAAAIw"]
[Fri Apr 03 22:10:54.077756 2026] [:error] [pid 33447:tid 33526] [client 158.158.51.12:42882] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ac_KbkgaPmDHz92j4lNZVQAAAJY"]
[Fri Apr 03 22:10:54.684681 2026] [:error] [pid 40533:tid 40558] [client 158.158.51.12:64063] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "ac_KbvbIAA8AViDmwsu-ngAAAVc"]
[Fri Apr 03 22:10:55.455453 2026] [:error] [pid 40533:tid 40540] [client 158.158.51.12:39864] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "ac_Kb_bIAA8AViDmwsu-ogAAAUU"]
[Fri Apr 03 22:10:56.712405 2026] [:error] [pid 33447:tid 33511] [client 158.158.51.12:1340] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "ac_KcEgaPmDHz92j4lNZXwAAAIc"]
[Fri Apr 03 22:10:57.680862 2026] [:error] [pid 33447:tid 33528] [client 158.158.51.12:29421] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "ac_KcUgaPmDHz92j4lNZYQAAAJg"]
[Fri Apr 03 22:10:59.004794 2026] [:error] [pid 33445:tid 33464] [client 158.158.51.12:42910] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "ac_Kc1lRNZ0iDVmJWM0lTQAAAA4"]
[Fri Apr 03 22:11:00.717471 2026] [:error] [pid 33445:tid 33454] [client 158.158.51.12:29382] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "ac_KdFlRNZ0iDVmJWM0lUQAAAAQ"]
[Fri Apr 03 22:11:05.933893 2026] [:error] [pid 33446:tid 33486] [client 158.158.51.12:29397] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "ac_Kedg3dCqFYIIdw0qExAAAAEk"]
[Fri Apr 03 22:11:10.252363 2026] [:error] [pid 33445:tid 33473] [client 158.158.51.12:29376] [client 158.158.51.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "ac_KfllRNZ0iDVmJWM0lZQAAABc"]
[Fri Apr 03 22:33:09.420695 2026] [:error] [pid 33542:tid 33564] [client 101.33.81.73:50042] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ac_PpXwb6uB1LaGtepYSdQAAANM"]
[Fri Apr 03 23:23:33.447395 2026] [:error] [pid 55174:tid 55193] [client 175.6.217.4:46628] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ac_bdZ_WKqUonPNUHYwQ0wAAAdE"]
[Sat Apr 04 01:00:34.298361 2026] [:error] [pid 12081:tid 12122] [client 43.130.72.40:32806] [client 43.130.72.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ac_yMqMJBCYerZTQdmLp_gAAAFY"]
[Sat Apr 04 02:06:04.923557 2026] [:error] [pid 12097:tid 12167] [client 20.199.111.128:52130] [client 20.199.111.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adABjBnkcvJ01y2CY3nCzQAAAMw"]
[Sat Apr 04 05:38:46.849864 2026] [:error] [pid 2567:tid 2577] [client 106.54.62.156:33928] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adAzZmJJmfRsTrAKjdRZ-AAAAMM"]
[Sat Apr 04 05:39:47.720378 2026] [:error] [pid 2459:tid 2542] [client 49.149.41.211:49962] [client 49.149.41.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.149.41.211, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adAzowefyCmu4LR_PlpsWgAAAIo"]
[Sat Apr 04 05:39:47.727028 2026] [:error] [pid 2459:tid 2542] [client 49.149.41.211:49962] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 04 08:41:13.716378 2026] [:error] [pid 2567:tid 2594] [client 43.166.244.192:39196] [client 43.166.244.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adBeKWJJmfRsTrAKjdTcDwAAANQ"]
[Sat Apr 04 12:05:25.722946 2026] [:error] [pid 2567:tid 2575] [client 182.44.2.148:48268] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adCOBWJJmfRsTrAKjdRngAAAAME"]
[Sat Apr 04 14:26:23.814215 2026] [:error] [pid 2459:tid 2541] [client 59.177.102.183:51430] [client 59.177.102.183] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.177.102.183, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adCvDwefyCmu4LR_PlowtgAAAIk"]
[Sat Apr 04 14:26:23.818710 2026] [:error] [pid 2459:tid 2541] [client 59.177.102.183:51430] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 04 16:41:26.712557 2026] [:error] [pid 2459:tid 2535] [client 43.153.123.3:48012] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adDOtgefyCmu4LR_PlpkogAAAIQ"]
[Sat Apr 04 18:42:47.011132 2026] [:error] [pid 2459:tid 2543] [client 182.42.104.32:50340] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adDrJwefyCmu4LR_PlrARgAAAIs"]
[Sat Apr 04 18:50:05.395781 2026] [:error] [pid 2458:tid 2509] [client 170.106.82.209:51516] [client 170.106.82.209] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adDs3SNozic5SuWqclniFgAAAEU"]
[Sat Apr 04 22:19:52.481114 2026] [:error] [pid 2457:tid 2497] [client 43.157.188.74:50426] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adEeCEmNHppaMd92ZpdyMgAAABQ"]
[Sun Apr 05 00:33:15.202029 2026] [:error] [pid 53821:tid 53934] [client 101.32.49.171:43080] [client 101.32.49.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adE9S4r_VtuiSAUdPhl2xgAAAIY"]
[Sun Apr 05 01:23:32.406708 2026] [:error] [pid 63313:tid 63340] [client 223.244.35.77:34088] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adFJFO1cPeVj2b7ZXSRAqgAAARU"]
[Sun Apr 05 06:02:55.057472 2026] [:error] [pid 30921:tid 30945] [client 43.157.53.115:54244] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adGKj2FGQVn8Q0ueB25xLQAAARY"]
[Sun Apr 05 06:52:08.503551 2026] [:error] [pid 45305:tid 45385] [client 51.107.75.125:7424] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Sun Apr 05 07:14:52.536470 2026] [:error] [pid 30921:tid 30943] [client 20.70.191.87:20298] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 05 07:14:52.554652 2026] [:error] [pid 30921:tid 30938] [client 20.70.191.87:20298] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 05 07:14:52.609143 2026] [:error] [pid 30921:tid 30937] [client 20.70.191.87:20298] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 05 07:14:52.627067 2026] [:error] [pid 30921:tid 30940] [client 20.70.191.87:20298] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 05 07:14:52.700002 2026] [:error] [pid 30921:tid 30931] [client 20.70.191.87:20298] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Sun Apr 05 07:14:54.301337 2026] [:error] [pid 30921:tid 30923] [client 20.70.191.87:20298] [client 20.70.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "adGbbmFGQVn8Q0ueB26SQAAAAQA"]
[Sun Apr 05 07:14:54.366354 2026] [:error] [pid 45305:tid 45374] [client 20.70.191.87:4491] [client 20.70.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "adGbbujDQjr7aWhjflBaaQAAAIM"]
[Sun Apr 05 07:14:54.449420 2026] [:error] [pid 45305:tid 45382] [client 20.70.191.87:22040] [client 20.70.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "adGbbujDQjr7aWhjflBaagAAAIs"]
[Sun Apr 05 07:14:54.510434 2026] [:error] [pid 45305:tid 45383] [client 20.70.191.87:11270] [client 20.70.191.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "adGbbujDQjr7aWhjflBaawAAAIw"]
[Sun Apr 05 11:10:38.582460 2026] [:error] [pid 45305:tid 45394] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Sun Apr 05 11:10:38.856647 2026] [:error] [pid 45305:tid 45374] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Sun Apr 05 11:10:39.161774 2026] [:error] [pid 45305:tid 45380] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sun Apr 05 11:10:39.429022 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sun Apr 05 11:10:39.698846 2026] [:error] [pid 45305:tid 45391] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Apr 05 11:10:39.967228 2026] [:error] [pid 45305:tid 45387] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Sun Apr 05 11:10:40.233357 2026] [:error] [pid 45305:tid 45384] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sun Apr 05 11:10:40.499004 2026] [:error] [pid 45305:tid 45395] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sun Apr 05 11:10:40.764742 2026] [:error] [pid 45305:tid 45374] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Sun Apr 05 11:10:41.029983 2026] [:error] [pid 45305:tid 45390] [client 4.225.160.61:18561] File does not exist: /usr/local/apache/htdocs/suspended-page/t2gorhwasq4vioshtatw5eCdefault.php
[Sun Apr 05 11:10:41.300321 2026] [:error] [pid 45305:tid 45381] [client 4.225.160.61:18561] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adHSsejDQjr7aWhjflAXQQAAAIo"]
[Sun Apr 05 11:10:42.855805 2026] [:error] [pid 45305:tid 45378] [client 4.225.160.61:30989] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adHSsujDQjr7aWhjflAXSgAAAIc"]
[Sun Apr 05 11:10:44.503395 2026] [:error] [pid 30921:tid 30943] [client 4.225.160.61:2340] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adHStGFGQVn8Q0ueB271GAAAARQ"]
[Sun Apr 05 11:10:47.187821 2026] [:error] [pid 45409:tid 45428] [client 4.225.160.61:29213] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adHSt9Ht_Oyw03gjCNiEBwAAANE"]
[Sun Apr 05 11:10:50.879719 2026] [:error] [pid 30921:tid 30930] [client 4.225.160.61:29632] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adHSumFGQVn8Q0ueB271KQAAAQc"]
[Sun Apr 05 11:10:54.872486 2026] [:error] [pid 45303:tid 45341] [client 4.225.160.61:2709] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adHSvrboQ9eViZ4hdnnv5gAAABg"]
[Sun Apr 05 11:10:57.008516 2026] [:error] [pid 45305:tid 45385] [client 4.225.160.61:19976] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adHSwejDQjr7aWhjflAXhQAAAI4"]
[Sun Apr 05 11:10:59.236322 2026] [:error] [pid 30921:tid 30927] [client 4.225.160.61:13604] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adHSw2FGQVn8Q0ueB271QAAAAQQ"]
[Sun Apr 05 11:11:01.597429 2026] [:error] [pid 30921:tid 30944] [client 4.225.160.61:21575] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adHSxWFGQVn8Q0ueB271UwAAARU"]
[Sun Apr 05 11:11:04.684681 2026] [:error] [pid 30921:tid 30923] [client 4.225.160.61:22822] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adHSyGFGQVn8Q0ueB271ZAAAAQA"]
[Sun Apr 05 11:11:06.029919 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:10724] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adHSyrboQ9eViZ4hdnnv9wAAAAY"]
[Sun Apr 05 11:11:07.633144 2026] [:error] [pid 45409:tid 45431] [client 4.225.160.61:46273] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adHSy9Ht_Oyw03gjCNiEQQAAANQ"]
[Sun Apr 05 11:11:10.096905 2026] [:error] [pid 45303:tid 45328] [client 4.225.160.61:13990] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHSzrboQ9eViZ4hdnnv_AAAAAs"]
[Sun Apr 05 11:11:13.867691 2026] [:error] [pid 45303:tid 45319] [client 4.225.160.61:9349] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHS0bboQ9eViZ4hdnnwBQAAAAI"]
[Sun Apr 05 11:11:15.074936 2026] [:error] [pid 45409:tid 45423] [client 4.225.160.61:13879] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHS09Ht_Oyw03gjCNiEYQAAAMw"]
[Sun Apr 05 11:11:16.696932 2026] [:error] [pid 45305:tid 45386] [client 4.225.160.61:17075] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adHS1OjDQjr7aWhjflAX6wAAAI8"]
[Sun Apr 05 11:11:18.079803 2026] [:error] [pid 45305:tid 45391] [client 4.225.160.61:4438] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "adHS1ujDQjr7aWhjflAX9gAAAJQ"]
[Sun Apr 05 11:11:18.727716 2026] [:error] [pid 45303:tid 45337] [client 4.225.160.61:17596] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "adHS1rboQ9eViZ4hdnnwCwAAABQ"]
[Sun Apr 05 11:11:19.966511 2026] [:error] [pid 45409:tid 45414] [client 4.225.160.61:2205] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "adHS19Ht_Oyw03gjCNiEbQAAAMM"]
[Sun Apr 05 11:11:21.262563 2026] [:error] [pid 45305:tid 45390] [client 4.225.160.61:4369] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "adHS2ejDQjr7aWhjflAYAQAAAJM"]
[Sun Apr 05 11:11:22.010845 2026] [:error] [pid 45303:tid 45340] [client 4.225.160.61:27922] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHS2rboQ9eViZ4hdnnwDwAAABc"]
[Sun Apr 05 11:11:22.902739 2026] [:error] [pid 45305:tid 45393] [client 4.225.160.61:13690] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHS2ujDQjr7aWhjflAYCwAAAJY"]
[Sun Apr 05 11:11:23.796042 2026] [:error] [pid 45305:tid 45378] [client 4.225.160.61:13670] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHS2-jDQjr7aWhjflAYDwAAAIc"]
[Sun Apr 05 11:11:24.742670 2026] [:error] [pid 45409:tid 45412] [client 4.225.160.61:42937] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adHS3NHt_Oyw03gjCNiEgAAAAME"]
[Sun Apr 05 11:11:25.394414 2026] [:error] [pid 45409:tid 45428] [client 4.225.160.61:13386] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adHS3dHt_Oyw03gjCNiEhAAAANE"]
[Sun Apr 05 11:11:26.635260 2026] [:error] [pid 45305:tid 45395] [client 4.225.160.61:13854] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adHS3ujDQjr7aWhjflAYGQAAAJg"]
[Sun Apr 05 11:11:27.590729 2026] [:error] [pid 45304:tid 45348] [client 4.225.160.61:10413] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adHS3w5jnqDKKovdRkliYAAAAEQ"]
[Sun Apr 05 11:11:28.896803 2026] [:error] [pid 45305:tid 45381] [client 4.225.160.61:27912] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adHS4OjDQjr7aWhjflAYHwAAAIo"]
[Sun Apr 05 11:11:31.739019 2026] [:error] [pid 45409:tid 45414] [client 4.225.160.61:2514] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHS49Ht_Oyw03gjCNiEkAAAAMM"]
[Sun Apr 05 11:11:33.399083 2026] [:error] [pid 30921:tid 30945] [client 4.225.160.61:13932] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHS5WFGQVn8Q0ueB271jAAAARY"]
[Sun Apr 05 11:11:34.574339 2026] [:error] [pid 45409:tid 45423] [client 4.225.160.61:13890] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHS5tHt_Oyw03gjCNiEmQAAAMw"]
[Sun Apr 05 11:11:35.479550 2026] [:error] [pid 30921:tid 30936] [client 4.225.160.61:45081] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8daf1238_1774208172.php"] [unique_id "adHS52FGQVn8Q0ueB271kQAAAQ0"]
[Sun Apr 05 11:11:36.790541 2026] [:error] [pid 45409:tid 45435] [client 4.225.160.61:4439] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adHS6NHt_Oyw03gjCNiEngAAANg"]
[Sun Apr 05 11:11:37.556752 2026] [:error] [pid 45305:tid 45375] [client 4.225.160.61:37038] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adHS6ejDQjr7aWhjflAYQAAAAIQ"]
[Sun Apr 05 11:11:38.792859 2026] [:error] [pid 45409:tid 45421] [client 4.225.160.61:2546] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adHS6tHt_Oyw03gjCNiErQAAAMo"]
[Sun Apr 05 11:11:41.008039 2026] [:error] [pid 45409:tid 45414] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun Apr 05 11:11:41.272479 2026] [:error] [pid 45409:tid 45427] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Apr 05 11:11:41.541773 2026] [:error] [pid 45409:tid 45431] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Sun Apr 05 11:11:41.807031 2026] [:error] [pid 45409:tid 45421] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/wziar1.php
[Sun Apr 05 11:11:42.072275 2026] [:error] [pid 45409:tid 45424] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sun Apr 05 11:11:42.337393 2026] [:error] [pid 45409:tid 45429] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sun Apr 05 11:11:42.601034 2026] [:error] [pid 45409:tid 45411] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Apr 05 11:11:44.227148 2026] [:error] [pid 45409:tid 45411] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 05 11:11:44.493708 2026] [:error] [pid 45409:tid 45426] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Apr 05 11:11:45.217067 2026] [:error] [pid 45409:tid 45429] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sun Apr 05 11:11:45.481300 2026] [:error] [pid 45409:tid 45418] [client 4.225.160.61:45089] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 05 11:11:45.742931 2026] [:error] [pid 45409:tid 45414] [client 4.225.160.61:45089] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adHS8dHt_Oyw03gjCNiExAAAAMM"]
[Sun Apr 05 11:11:53.118044 2026] [:error] [pid 45305:tid 45389] [client 4.225.160.61:26010] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adHS-ejDQjr7aWhjflAYngAAAJI"]
[Sun Apr 05 11:11:57.634014 2026] [:error] [pid 45409:tid 45430] [client 4.225.160.61:33661] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adHS_dHt_Oyw03gjCNiE2AAAANM"]
[Sun Apr 05 11:12:03.576103 2026] [:error] [pid 45303:tid 45340] [client 4.225.160.61:14638] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "adHTA7boQ9eViZ4hdnnwQAAAABc"]
[Sun Apr 05 11:12:04.653951 2026] [:error] [pid 45305:tid 45381] [client 4.225.160.61:27913] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "adHTBOjDQjr7aWhjflAYuwAAAIo"]
[Sun Apr 05 11:12:05.822557 2026] [:error] [pid 45409:tid 45425] [client 4.225.160.61:11824] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "adHTBdHt_Oyw03gjCNiE9QAAAM4"]
[Sun Apr 05 11:12:06.598497 2026] [:error] [pid 45305:tid 45378] [client 4.225.160.61:35214] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "adHTBujDQjr7aWhjflAYxQAAAIc"]
[Sun Apr 05 11:12:07.567965 2026] [:error] [pid 45304:tid 45363] [client 4.225.160.61:13637] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adHTBw5jnqDKKovdRklifgAAAFM"]
[Sun Apr 05 11:12:08.735499 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:8398] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adHTCLboQ9eViZ4hdnnwSwAAAAY"]
[Sun Apr 05 11:12:09.907019 2026] [:error] [pid 45303:tid 45321] [client 4.225.160.61:37076] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adHTCbboQ9eViZ4hdnnwTQAAAAQ"]
[Sun Apr 05 11:12:14.524793 2026] [:error] [pid 45305:tid 45381] [client 4.225.160.61:59874] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adHTDujDQjr7aWhjflAY7QAAAIo"]
[Sun Apr 05 11:12:21.103357 2026] [:error] [pid 30921:tid 30938] [client 4.225.160.61:9357] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adHTFWFGQVn8Q0ueB2711gAAAQ8"]
[Sun Apr 05 11:12:25.849892 2026] [:error] [pid 45409:tid 45421] [client 4.225.160.61:18073] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adHTGdHt_Oyw03gjCNiFIgAAAMo"]
[Sun Apr 05 11:12:28.413037 2026] [:error] [pid 45305:tid 45395] [client 4.225.160.61:26703] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adHTHOjDQjr7aWhjflAZFwAAAJg"]
[Sun Apr 05 11:12:29.346538 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:15087] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adHTHejDQjr7aWhjflAZHAAAAIA"]
[Sun Apr 05 11:12:30.435078 2026] [:error] [pid 45303:tid 45331] [client 4.225.160.61:26713] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHTHrboQ9eViZ4hdnnwagAAAA4"]
[Sun Apr 05 11:12:31.404121 2026] [:error] [pid 45305:tid 45386] [client 4.225.160.61:26699] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHTH-jDQjr7aWhjflAZIgAAAI8"]
[Sun Apr 05 11:12:32.584479 2026] [:error] [pid 45303:tid 45332] [client 4.225.160.61:23329] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHTILboQ9eViZ4hdnnwbgAAAA8"]
[Sun Apr 05 11:12:33.565160 2026] [:error] [pid 45304:tid 45350] [client 4.225.160.61:17054] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adHTIQ5jnqDKKovdRklinAAAAEY"]
[Sun Apr 05 11:12:35.454535 2026] [:error] [pid 45305:tid 45382] [client 4.225.160.61:11776] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adHTI-jDQjr7aWhjflAZLAAAAIs"]
[Sun Apr 05 11:12:37.859858 2026] [:error] [pid 45305:tid 45394] [client 4.225.160.61:13969] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adHTJejDQjr7aWhjflAZOAAAAJc"]
[Sun Apr 05 11:12:42.369780 2026] [:error] [pid 45409:tid 45418] [client 4.225.160.61:12864] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adHTKtHt_Oyw03gjCNiFPwAAAMc"]
[Sun Apr 05 11:12:44.429128 2026] [:error] [pid 30921:tid 30928] [client 4.225.160.61:23325] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adHTLGFGQVn8Q0ueB272AwAAAQU"]
[Sun Apr 05 11:12:48.160584 2026] [:error] [pid 45409:tid 45413] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Sun Apr 05 11:12:48.424662 2026] [:error] [pid 45409:tid 45430] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sun Apr 05 11:12:48.690994 2026] [:error] [pid 45409:tid 45415] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Sun Apr 05 11:12:48.972936 2026] [:error] [pid 45409:tid 45417] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sun Apr 05 11:12:49.238633 2026] [:error] [pid 45409:tid 45427] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sun Apr 05 11:12:49.510098 2026] [:error] [pid 45409:tid 45424] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Apr 05 11:12:49.775750 2026] [:error] [pid 45409:tid 45429] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 05 11:12:50.043212 2026] [:error] [pid 45409:tid 45425] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Apr 05 11:12:50.316581 2026] [:error] [pid 45409:tid 45433] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/irpl4xz4fmlzm4tlvvu4h1mCdefault.php
[Sun Apr 05 11:12:50.582515 2026] [:error] [pid 45409:tid 45424] [client 4.225.160.61:31866] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Sun Apr 05 11:12:50.869822 2026] [:error] [pid 45409:tid 45416] [client 4.225.160.61:31866] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adHTMtHt_Oyw03gjCNiFZAAAAMU"]
[Sun Apr 05 11:12:52.482783 2026] [:error] [pid 30921:tid 30945] [client 4.225.160.61:23302] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adHTNGFGQVn8Q0ueB272JQAAARY"]
[Sun Apr 05 11:12:54.904795 2026] [:error] [pid 45305:tid 45389] [client 4.225.160.61:2115] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adHTNujDQjr7aWhjflAZawAAAJI"]
[Sun Apr 05 11:12:56.431471 2026] [:error] [pid 45304:tid 45368] [client 4.225.160.61:25930] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adHTOA5jnqDKKovdRklisgAAAFg"]
[Sun Apr 05 11:12:57.715219 2026] [:error] [pid 45305:tid 45387] [client 4.225.160.61:44162] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adHTOejDQjr7aWhjflAZfgAAAJA"]
[Sun Apr 05 11:12:59.523038 2026] [:error] [pid 45409:tid 45418] [client 4.225.160.61:11211] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adHTO9Ht_Oyw03gjCNiFbgAAAMc"]
[Sun Apr 05 11:13:00.997004 2026] [:error] [pid 45303:tid 45335] [client 4.225.160.61:44213] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adHTPLboQ9eViZ4hdnnwjAAAABI"]
[Sun Apr 05 11:13:01.916113 2026] [:error] [pid 45303:tid 45321] [client 4.225.160.61:44196] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adHTPbboQ9eViZ4hdnnwjQAAAAQ"]
[Sun Apr 05 11:13:02.762864 2026] [:error] [pid 45305:tid 45388] [client 4.225.160.61:11252] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adHTPujDQjr7aWhjflAZlQAAAJE"]
[Sun Apr 05 11:13:04.168086 2026] [:error] [pid 45303:tid 45338] [client 4.225.160.61:44172] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adHTQLboQ9eViZ4hdnnwjgAAABU"]
[Sun Apr 05 11:13:05.556652 2026] [:error] [pid 45304:tid 45362] [client 4.225.160.61:30354] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adHTQQ5jnqDKKovdRkliugAAAFI"]
[Sun Apr 05 11:13:06.967370 2026] [:error] [pid 45304:tid 45361] [client 4.225.160.61:11222] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adHTQg5jnqDKKovdRklivQAAAFE"]
[Sun Apr 05 11:13:08.398974 2026] [:error] [pid 45409:tid 45427] [client 4.225.160.61:46294] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adHTRNHt_Oyw03gjCNiFhAAAANA"]
[Sun Apr 05 11:13:09.985431 2026] [:error] [pid 45304:tid 45353] [client 4.225.160.61:31792] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adHTRQ5jnqDKKovdRkliwgAAAEk"]
[Sun Apr 05 11:13:11.642370 2026] [:error] [pid 45409:tid 45416] [client 4.225.160.61:10697] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adHTR9Ht_Oyw03gjCNiFkAAAAMU"]
[Sun Apr 05 11:13:13.057345 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:31799] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adHTSbboQ9eViZ4hdnnwoAAAAAY"]
[Sun Apr 05 11:13:14.581889 2026] [:error] [pid 45303:tid 45338] [client 4.225.160.61:2402] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHTSrboQ9eViZ4hdnnwpAAAABU"]
[Sun Apr 05 11:13:16.633798 2026] [:error] [pid 45409:tid 45427] [client 4.225.160.61:2495] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHTTNHt_Oyw03gjCNiFmgAAANA"]
[Sun Apr 05 11:13:18.438296 2026] [:error] [pid 45305:tid 45387] [client 4.225.160.61:22270] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHTTujDQjr7aWhjflAZvgAAAJA"]
[Sun Apr 05 11:13:19.961999 2026] [:error] [pid 45303:tid 45320] [client 4.225.160.61:12586] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/q7lhrgzoo7ijhnkcedq2Cdefault.php"] [unique_id "adHTT7boQ9eViZ4hdnnwqwAAAAM"]
[Sun Apr 05 11:13:20.594793 2026] [:error] [pid 30921:tid 30940] [client 4.225.160.61:30336] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adHTUGFGQVn8Q0ueB272RAAAARE"]
[Sun Apr 05 11:13:21.449826 2026] [:error] [pid 30921:tid 30941] [client 4.225.160.61:46315] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adHTUWFGQVn8Q0ueB272RgAAARI"]
[Sun Apr 05 11:13:22.137498 2026] [:error] [pid 45305:tid 45383] [client 4.225.160.61:12618] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adHTUujDQjr7aWhjflAZzAAAAIw"]
[Sun Apr 05 11:13:23.086501 2026] [:error] [pid 45304:tid 45360] [client 4.225.160.61:9453] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adHTUw5jnqDKKovdRklizQAAAFA"]
[Sun Apr 05 11:13:26.790549 2026] [:error] [pid 30921:tid 30931] [client 4.225.160.61:30396] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "adHTVmFGQVn8Q0ueB272TwAAAQg"]
[Sun Apr 05 11:13:29.620888 2026] [:error] [pid 45304:tid 45348] [client 4.225.160.61:13082] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "adHTWQ5jnqDKKovdRkli1QAAAEQ"]
[Sun Apr 05 11:13:32.371087 2026] [:error] [pid 45305:tid 45381] [client 4.225.160.61:14822] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "adHTXOjDQjr7aWhjflAZ2gAAAIo"]
[Sun Apr 05 11:13:42.249449 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:29175] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHTZujDQjr7aWhjflAZ8QAAAII"]
[Sun Apr 05 11:13:43.675366 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:45742] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHTZ-jDQjr7aWhjflAZ-QAAAII"]
[Sun Apr 05 11:13:45.422647 2026] [:error] [pid 45303:tid 45319] [client 4.225.160.61:25478] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHTabboQ9eViZ4hdnnw2wAAAAI"]
[Sun Apr 05 11:13:47.323823 2026] [:error] [pid 45304:tid 45351] [client 4.225.160.61:25479] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/exhds0ucw0ju9vjgasxqCdefault.php"] [unique_id "adHTaw5jnqDKKovdRkli9wAAAEc"]
[Sun Apr 05 11:13:48.783752 2026] [:error] [pid 45303:tid 45330] [client 4.225.160.61:12055] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "adHTbLboQ9eViZ4hdnnw4wAAAA0"]
[Sun Apr 05 11:13:50.837193 2026] [:error] [pid 45305:tid 45380] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Apr 05 11:13:51.101580 2026] [:error] [pid 45305:tid 45381] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/mI35rZhMg1zJ1vuXdefault.php
[Sun Apr 05 11:13:51.365884 2026] [:error] [pid 45305:tid 45372] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sun Apr 05 11:13:51.630802 2026] [:error] [pid 45305:tid 45387] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sun Apr 05 11:13:51.913724 2026] [:error] [pid 45305:tid 45394] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sun Apr 05 11:13:52.250204 2026] [:error] [pid 45305:tid 45383] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun Apr 05 11:13:52.514750 2026] [:error] [pid 45305:tid 45376] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 05 11:13:52.781280 2026] [:error] [pid 45305:tid 45388] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 05 11:13:53.045306 2026] [:error] [pid 45305:tid 45385] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sun Apr 05 11:13:53.311947 2026] [:error] [pid 45305:tid 45389] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/5xkfgawzejgwqh9hiaznCdefault.php
[Sun Apr 05 11:13:53.807352 2026] [:error] [pid 45305:tid 45380] [client 4.225.160.61:13631] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 05 11:13:54.073359 2026] [:error] [pid 45305:tid 45373] [client 4.225.160.61:13631] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adHTcujDQjr7aWhjflAaGwAAAII"]
[Sun Apr 05 11:13:54.755184 2026] [:error] [pid 45304:tid 45346] [client 4.225.160.61:24995] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adHTcg5jnqDKKovdRkljCAAAAEI"]
[Sun Apr 05 11:13:55.369212 2026] [:error] [pid 45305:tid 45390] [client 4.225.160.61:43609] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adHTc-jDQjr7aWhjflAaHAAAAJM"]
[Sun Apr 05 11:13:56.266090 2026] [:error] [pid 45305:tid 45382] [client 4.225.160.61:15511] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adHTdOjDQjr7aWhjflAaIQAAAIs"]
[Sun Apr 05 11:13:57.118001 2026] [:error] [pid 45303:tid 45324] [client 4.225.160.61:12084] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adHTdbboQ9eViZ4hdnnw8gAAAAc"]
[Sun Apr 05 11:13:58.960138 2026] [:error] [pid 45304:tid 45361] [client 4.225.160.61:9615] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adHTdg5jnqDKKovdRkljEQAAAFE"]
[Sun Apr 05 11:14:00.161932 2026] [:error] [pid 45304:tid 45347] [client 4.225.160.61:43638] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adHTeA5jnqDKKovdRkljEwAAAEM"]
[Sun Apr 05 11:14:01.178300 2026] [:error] [pid 45305:tid 45378] [client 4.225.160.61:12033] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adHTeejDQjr7aWhjflAaMQAAAIc"]
[Sun Apr 05 11:14:03.039928 2026] [:error] [pid 30921:tid 30931] [client 4.225.160.61:9635] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "adHTe2FGQVn8Q0ueB272cgAAAQg"]
[Sun Apr 05 11:14:05.576452 2026] [:error] [pid 45409:tid 45420] [client 4.225.160.61:13591] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "adHTfdHt_Oyw03gjCNiF9AAAAMk"]
[Sun Apr 05 11:14:07.945521 2026] [:error] [pid 30921:tid 30936] [client 4.225.160.61:2830] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "adHTf2FGQVn8Q0ueB272ewAAAQ0"]
[Sun Apr 05 11:14:08.899735 2026] [:error] [pid 45304:tid 45354] [client 4.225.160.61:15551] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "adHTgA5jnqDKKovdRkljHQAAAEo"]
[Sun Apr 05 11:14:11.190282 2026] [:error] [pid 45304:tid 45351] [client 4.225.160.61:25516] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adHTgw5jnqDKKovdRkljIgAAAEc"]
[Sun Apr 05 11:14:14.922278 2026] [:error] [pid 45304:tid 45352] [client 4.225.160.61:9856] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adHThg5jnqDKKovdRkljJwAAAEg"]
[Sun Apr 05 11:14:17.062971 2026] [:error] [pid 45305:tid 45389] [client 4.225.160.61:10493] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adHTiejDQjr7aWhjflAaaAAAAJI"]
[Sun Apr 05 11:14:18.925629 2026] [:error] [pid 45304:tid 45345] [client 4.225.160.61:25535] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adHTig5jnqDKKovdRkljMAAAAEE"]
[Sun Apr 05 11:14:22.477704 2026] [:error] [pid 45305:tid 45390] [client 4.225.160.61:20301] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "adHTjujDQjr7aWhjflAaiwAAAJM"]
[Sun Apr 05 11:14:24.649808 2026] [:error] [pid 45305:tid 45384] [client 4.225.160.61:25510] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "adHTkOjDQjr7aWhjflAamgAAAI0"]
[Sun Apr 05 11:14:27.343340 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:2640] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "adHTk-jDQjr7aWhjflAasAAAAIA"]
[Sun Apr 05 11:14:28.676998 2026] [:error] [pid 30921:tid 30924] [client 4.225.160.61:10475] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "adHTlGFGQVn8Q0ueB272mgAAAQE"]
[Sun Apr 05 11:14:30.270047 2026] [:error] [pid 45303:tid 45329] [client 4.225.160.61:25509] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adHTlrboQ9eViZ4hdnnxIAAAAAw"]
[Sun Apr 05 11:14:31.298472 2026] [:error] [pid 45409:tid 45420] [client 4.225.160.61:25512] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adHTl9Ht_Oyw03gjCNiGHgAAAMk"]
[Sun Apr 05 11:14:33.347387 2026] [:error] [pid 45409:tid 45427] [client 4.225.160.61:2965] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adHTmdHt_Oyw03gjCNiGJAAAANA"]
[Sun Apr 05 11:14:34.866639 2026] [:error] [pid 45305:tid 45371] [client 4.225.160.61:9908] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adHTmujDQjr7aWhjflAaxAAAAIA"]
[Sun Apr 05 11:14:36.348381 2026] [:error] [pid 45409:tid 45421] [client 4.225.160.61:10468] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adHTnNHt_Oyw03gjCNiGLAAAAMo"]
[Sun Apr 05 11:14:37.837715 2026] [:error] [pid 45305:tid 45376] [client 4.225.160.61:14532] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adHTnejDQjr7aWhjflAazwAAAIU"]
[Sun Apr 05 11:14:39.025107 2026] [:error] [pid 45305:tid 45383] [client 4.225.160.61:20307] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adHTn-jDQjr7aWhjflAa0gAAAIw"]
[Sun Apr 05 11:14:40.328114 2026] [:error] [pid 45409:tid 45435] [client 4.225.160.61:13125] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adHToNHt_Oyw03gjCNiGOAAAANg"]
[Sun Apr 05 11:14:41.479931 2026] [:error] [pid 45305:tid 45390] [client 4.225.160.61:56148] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adHToejDQjr7aWhjflAa3gAAAJM"]
[Sun Apr 05 11:14:43.755672 2026] [:error] [pid 45305:tid 45388] [client 4.225.160.61:44697] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adHTo-jDQjr7aWhjflAa5gAAAJE"]
[Sun Apr 05 11:14:46.161046 2026] [:error] [pid 30921:tid 30927] [client 4.225.160.61:21611] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adHTpmFGQVn8Q0ueB272qQAAAQQ"]
[Sun Apr 05 11:14:47.536770 2026] [:error] [pid 45304:tid 45356] [client 4.225.160.61:20809] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adHTpw5jnqDKKovdRkljRwAAAEw"]
[Sun Apr 05 11:14:48.995313 2026] [:error] [pid 45303:tid 45336] [client 4.225.160.61:36585] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adHTqLboQ9eViZ4hdnnxNAAAABM"]
[Sun Apr 05 11:14:50.283166 2026] [:error] [pid 45305:tid 45394] [client 4.225.160.61:10211] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adHTqujDQjr7aWhjflAa-AAAAJc"]
[Sun Apr 05 11:14:51.270332 2026] [:error] [pid 30921:tid 30942] [client 4.225.160.61:10933] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adHTq2FGQVn8Q0ueB272swAAARM"]
[Sun Apr 05 11:14:52.339819 2026] [:error] [pid 30921:tid 30930] [client 4.225.160.61:45772] [client 4.225.160.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adHTrGFGQVn8Q0ueB272tQAAAQc"]
[Sun Apr 05 11:14:53.297801 2026] [:error] [pid 45303:tid 45329] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Sun Apr 05 11:14:53.562595 2026] [:error] [pid 45303:tid 45321] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sun Apr 05 11:14:53.843141 2026] [:error] [pid 45303:tid 45322] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sun Apr 05 11:14:54.107906 2026] [:error] [pid 45303:tid 45319] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 05 11:14:54.374214 2026] [:error] [pid 45303:tid 45335] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sun Apr 05 11:14:54.658129 2026] [:error] [pid 45303:tid 45332] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sun Apr 05 11:14:54.923047 2026] [:error] [pid 45303:tid 45328] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sun Apr 05 11:14:55.188232 2026] [:error] [pid 45303:tid 45324] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sun Apr 05 11:14:55.472838 2026] [:error] [pid 45303:tid 45334] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sun Apr 05 11:14:55.757531 2026] [:error] [pid 45303:tid 45336] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sun Apr 05 11:14:56.051912 2026] [:error] [pid 45303:tid 45323] [client 4.225.160.61:16482] File does not exist: /usr/local/apache/htdocs/suspended-page/hhxc.php
[Sun Apr 05 11:20:54.994369 2026] [:error] [pid 45409:tid 45433] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 05 11:20:55.261426 2026] [:error] [pid 45409:tid 45435] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 05 11:20:55.538149 2026] [:error] [pid 45409:tid 45434] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/taff.php
[Sun Apr 05 11:20:55.833356 2026] [:error] [pid 45409:tid 45424] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sun Apr 05 11:20:56.100454 2026] [:error] [pid 45409:tid 45415] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Sun Apr 05 11:20:56.365538 2026] [:error] [pid 45409:tid 45413] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Apr 05 11:20:56.631166 2026] [:error] [pid 45409:tid 45414] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sun Apr 05 11:20:56.972593 2026] [:error] [pid 45409:tid 45422] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/xxc.php
[Sun Apr 05 11:20:57.237767 2026] [:error] [pid 45409:tid 45416] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Sun Apr 05 11:20:57.503735 2026] [:error] [pid 45409:tid 45423] [client 4.223.104.110:2127] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun Apr 05 11:20:57.765971 2026] [:error] [pid 45409:tid 45429] [client 4.223.104.110:2127] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "adHVGdHt_Oyw03gjCNiKAQAAANI"]
[Sun Apr 05 11:20:58.355042 2026] [:error] [pid 45409:tid 45433] [client 4.223.104.110:38664] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "adHVGtHt_Oyw03gjCNiKBwAAANY"]
[Sun Apr 05 11:20:59.006098 2026] [:error] [pid 45305:tid 45385] [client 4.223.104.110:38706] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "adHVG-jDQjr7aWhjflAf3wAAAI4"]
[Sun Apr 05 11:20:59.600221 2026] [:error] [pid 45304:tid 45347] [client 4.223.104.110:12985] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "adHVGw5jnqDKKovdRkllDAAAAEM"]
[Sun Apr 05 11:21:00.248791 2026] [:error] [pid 45303:tid 45341] [client 4.223.104.110:27988] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adHVHLboQ9eViZ4hdnnzaAAAABg"]
[Sun Apr 05 11:21:00.998184 2026] [:error] [pid 45305:tid 45379] [client 4.223.104.110:26096] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adHVHOjDQjr7aWhjflAf6AAAAIg"]
[Sun Apr 05 11:21:01.732413 2026] [:error] [pid 30921:tid 30937] [client 4.223.104.110:38693] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adHVHWFGQVn8Q0ueB275IwAAAQ4"]
[Sun Apr 05 11:21:02.493379 2026] [:error] [pid 45303:tid 45319] [client 4.223.104.110:47124] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adHVHrboQ9eViZ4hdnnzbQAAAAI"]
[Sun Apr 05 11:21:03.226660 2026] [:error] [pid 45305:tid 45380] [client 4.223.104.110:34684] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "adHVH-jDQjr7aWhjflAf8QAAAIk"]
[Sun Apr 05 11:21:03.899687 2026] [:error] [pid 45305:tid 45379] [client 4.223.104.110:33992] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "adHVH-jDQjr7aWhjflAf8wAAAIg"]
[Sun Apr 05 11:21:04.624652 2026] [:error] [pid 45304:tid 45359] [client 4.223.104.110:26072] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "adHVIA5jnqDKKovdRkllDwAAAE8"]
[Sun Apr 05 11:21:05.205504 2026] [:error] [pid 30921:tid 30931] [client 4.223.104.110:26079] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "adHVIWFGQVn8Q0ueB275LAAAAQg"]
[Sun Apr 05 11:21:06.052121 2026] [:error] [pid 30921:tid 30937] [client 4.223.104.110:34000] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "adHVImFGQVn8Q0ueB275MAAAAQ4"]
[Sun Apr 05 11:21:06.983697 2026] [:error] [pid 30921:tid 30941] [client 4.223.104.110:28007] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "adHVImFGQVn8Q0ueB275PgAAARI"]
[Sun Apr 05 11:21:07.640989 2026] [:error] [pid 30921:tid 30926] [client 4.223.104.110:28002] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "adHVI2FGQVn8Q0ueB275QwAAAQM"]
[Sun Apr 05 11:21:08.438906 2026] [:error] [pid 45305:tid 45384] [client 4.223.104.110:2124] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "adHVJOjDQjr7aWhjflAf-QAAAI0"]
[Sun Apr 05 11:21:09.506588 2026] [:error] [pid 30921:tid 30943] [client 4.223.104.110:28019] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "adHVJWFGQVn8Q0ueB275SwAAARQ"]
[Sun Apr 05 11:21:10.182537 2026] [:error] [pid 45303:tid 45340] [client 4.223.104.110:38665] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "adHVJrboQ9eViZ4hdnnzcwAAABc"]
[Sun Apr 05 11:21:10.825323 2026] [:error] [pid 45304:tid 45360] [client 4.223.104.110:3063] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "adHVJg5jnqDKKovdRkllGQAAAFA"]
[Sun Apr 05 11:21:11.457076 2026] [:error] [pid 45303:tid 45324] [client 4.223.104.110:34667] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "adHVJ7boQ9eViZ4hdnnzdwAAAAc"]
[Sun Apr 05 11:21:12.207806 2026] [:error] [pid 45304:tid 45366] [client 4.223.104.110:26080] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adHVKA5jnqDKKovdRkllHQAAAFY"]
[Sun Apr 05 11:21:12.777749 2026] [:error] [pid 45409:tid 45421] [client 4.223.104.110:2115] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adHVKNHt_Oyw03gjCNiKMQAAAMo"]
[Sun Apr 05 11:21:13.445315 2026] [:error] [pid 30921:tid 30924] [client 4.223.104.110:47164] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adHVKWFGQVn8Q0ueB275VgAAAQE"]
[Sun Apr 05 11:21:14.082616 2026] [:error] [pid 45303:tid 45340] [client 4.223.104.110:27990] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "adHVKrboQ9eViZ4hdnnzggAAABc"]
[Sun Apr 05 11:21:14.722996 2026] [:error] [pid 45305:tid 45392] [client 4.223.104.110:34021] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "adHVKujDQjr7aWhjflAf_AAAAJU"]
[Sun Apr 05 11:21:15.719457 2026] [:error] [pid 45409:tid 45417] [client 4.223.104.110:34655] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "adHVK9Ht_Oyw03gjCNiKOQAAAMY"]
[Sun Apr 05 11:21:16.380839 2026] [:error] [pid 30921:tid 30942] [client 4.223.104.110:3026] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "adHVLGFGQVn8Q0ueB275XgAAARM"]
[Sun Apr 05 11:21:16.987440 2026] [:error] [pid 45305:tid 45387] [client 4.223.104.110:12988] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "adHVLOjDQjr7aWhjflAgCAAAAJA"]
[Sun Apr 05 11:21:17.586894 2026] [:error] [pid 45303:tid 45325] [client 4.223.104.110:10530] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHVLbboQ9eViZ4hdnnzkQAAAAg"]
[Sun Apr 05 11:21:18.502942 2026] [:error] [pid 45305:tid 45393] [client 4.223.104.110:34657] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHVLujDQjr7aWhjflAgCwAAAJY"]
[Sun Apr 05 11:21:19.171130 2026] [:error] [pid 45304:tid 45356] [client 4.223.104.110:26109] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHVLw5jnqDKKovdRkllKwAAAEw"]
[Sun Apr 05 11:21:19.784896 2026] [:error] [pid 45303:tid 45341] [client 4.223.104.110:47144] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lvminl.php"] [unique_id "adHVL7boQ9eViZ4hdnnzlQAAABg"]
[Sun Apr 05 11:21:20.424336 2026] [:error] [pid 45303:tid 45322] [client 4.223.104.110:26103] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adHVMLboQ9eViZ4hdnnzmwAAAAU"]
[Sun Apr 05 11:21:21.382243 2026] [:error] [pid 45409:tid 45427] [client 4.223.104.110:34624] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adHVMdHt_Oyw03gjCNiKQwAAANA"]
[Sun Apr 05 11:21:22.027203 2026] [:error] [pid 30921:tid 30934] [client 4.223.104.110:38708] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adHVMmFGQVn8Q0ueB275bAAAAQs"]
[Sun Apr 05 11:21:22.671498 2026] [:error] [pid 45303:tid 45325] [client 4.223.104.110:38719] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adHVMrboQ9eViZ4hdnnzogAAAAg"]
[Sun Apr 05 11:21:23.353920 2026] [:error] [pid 45305:tid 45372] [client 4.223.104.110:12951] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dczem.php"] [unique_id "adHVM-jDQjr7aWhjflAgGQAAAIE"]
[Sun Apr 05 11:21:23.992673 2026] [:error] [pid 45409:tid 45414] [client 4.223.104.110:34685] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dczem.php"] [unique_id "adHVM9Ht_Oyw03gjCNiKTAAAAMM"]
[Sun Apr 05 11:21:24.804367 2026] [:error] [pid 45409:tid 45421] [client 4.223.104.110:12959] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dczem.php"] [unique_id "adHVNNHt_Oyw03gjCNiKTwAAAMo"]
[Sun Apr 05 11:21:25.882405 2026] [:error] [pid 45409:tid 45412] [client 4.223.104.110:12967] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dczem.php"] [unique_id "adHVNdHt_Oyw03gjCNiKUAAAAME"]
[Sun Apr 05 11:21:26.920909 2026] [:error] [pid 45305:tid 45380] [client 4.223.104.110:34673] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adHVNujDQjr7aWhjflAgIQAAAIk"]
[Sun Apr 05 11:21:28.192461 2026] [:error] [pid 30921:tid 30930] [client 4.223.104.110:26070] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adHVOGFGQVn8Q0ueB275hQAAAQc"]
[Sun Apr 05 11:21:29.076388 2026] [:error] [pid 45305:tid 45382] [client 4.223.104.110:47109] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adHVOejDQjr7aWhjflAgKgAAAIs"]
[Sun Apr 05 11:21:30.377648 2026] [:error] [pid 45409:tid 45416] [client 4.223.104.110:28011] [client 4.223.104.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adHVOtHt_Oyw03gjCNiKXAAAAMU"]
[Sun Apr 05 11:27:34.858680 2026] [:error] [pid 45304:tid 45364] [client 4.223.104.110:36736] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Sun Apr 05 11:57:25.124192 2026] [:error] [pid 45305:tid 45376] [client 74.248.146.253:28564] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Sun Apr 05 13:40:58.516246 2026] [:error] [pid 45409:tid 45412] [client 43.133.253.253:44832] [client 43.133.253.253] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adH16tHt_Oyw03gjCNjcJwAAAME"]
[Sun Apr 05 19:41:30.505123 2026] [:error] [pid 45409:tid 45423] [client 43.166.136.24:55380] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adJKatHt_Oyw03gjCNipJQAAAMw"]
[Sun Apr 05 21:44:29.612693 2026] [:error] [pid 45304:tid 45362] [client 43.159.149.216:45942] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adJnPQ5jnqDKKovdRkkerAAAAFI"]
[Mon Apr 06 02:31:38.355332 2026] [:error] [pid 51584:tid 51697] [client 216.24.210.151:40395] [client 216.24.210.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adKqisZ4qY_GoNCPARBKywAAAMA"]
[Mon Apr 06 05:35:43.532953 2026] [:error] [pid 35686:tid 35701] [client 103.140.199.90:49601] [client 103.140.199.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.140.199.90, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adLVr8MKdea6oORd2fxLVQAAAAU"]
[Mon Apr 06 05:35:43.540113 2026] [:error] [pid 35686:tid 35701] [client 103.140.199.90:49601] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 06 08:11:10.257923 2026] [:error] [pid 9442:tid 9461] [client 170.106.187.106:44684] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adL6HkPsNnAJTnmz6sYyIQAAARE"]
[Mon Apr 06 09:19:01.027402 2026] [:error] [pid 35688:tid 35760] [client 175.6.217.4:56450] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adMKBeZ85qg4jLsRpQzspAAAAIo"]
[Mon Apr 06 10:42:46.037654 2026] [:error] [pid 35686:tid 35699] [client 43.165.70.220:42510] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adMdpsMKdea6oORd2fzJfwAAAAM"]
[Mon Apr 06 14:46:33.930479 2026] [:error] [pid 35688:tid 35764] [client 43.153.122.30:44328] [client 43.153.122.30] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adNWyeZ85qg4jLsRpQw0NAAAAI4"]
[Mon Apr 06 17:01:37.450664 2026] [:error] [pid 10280:tid 10295] [client 43.135.182.95:55310] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adN2cV8QUJkf8g-BFfOY3wAAAcw"]
[Mon Apr 06 18:40:17.063802 2026] [:error] [pid 35686:tid 35713] [client 202.179.83.162:44596] [client 202.179.83.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.179.83.162, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adONkcMKdea6oORd2fzB5QAAABE"]
[Mon Apr 06 18:40:17.068582 2026] [:error] [pid 35686:tid 35713] [client 202.179.83.162:44596] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 06 20:26:05.231033 2026] [:error] [pid 9413:tid 9419] [client 43.153.74.75:52958] [client 43.153.74.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adOmXXllvEK3chn01wHEtQAAAYQ"]
[Mon Apr 06 22:25:31.915615 2026] [:error] [pid 9442:tid 9466] [client 43.157.180.116:50000] [client 43.157.180.116] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adPCW0PsNnAJTnmz6sYy-gAAARY"]
[Tue Apr 07 00:04:28.746339 2026] [:error] [pid 35688:tid 35751] [client 62.164.177.15:37768] File does not exist: /usr/local/apache/htdocs/suspended-page/fileupload.php
[Tue Apr 07 02:16:51.445772 2026] [:error] [pid 39748:tid 39760] [client 43.166.7.113:52184] [client 43.166.7.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adP4kygic31vPbqmSIrOLAAAAMU"]
[Tue Apr 07 04:42:32.094576 2026] [:error] [pid 12948:tid 12957] [client 114.80.36.40:53578] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adQauMbeSPAN8LvMqsbVBgAAAQY"]
[Tue Apr 07 04:50:27.626772 2026] [:error] [pid 37596:tid 37617] [client 43.153.10.13:42220] [client 43.153.10.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adQck6paAOZHEjRWjP3fQwAAAAs"]
[Tue Apr 07 07:20:21.364773 2026] [:error] [pid 37719:tid 37727] [client 181.118.45.238:59810] [client 181.118.45.238] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 181.118.45.238, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adQ_tU09Xv52u2xXGLBjDQAAAMU"]
[Tue Apr 07 07:20:21.370396 2026] [:error] [pid 37719:tid 37727] [client 181.118.45.238:59810] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 07 08:43:42.731905 2026] [:error] [pid 12948:tid 12965] [client 49.51.245.241:38422] [client 49.51.245.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adRTPsbeSPAN8LvMqsa8kAAAAQ4"]
[Tue Apr 07 08:59:37.143127 2026] [:error] [pid 37719:tid 37741] [client 170.83.175.149:10142] [client 170.83.175.149] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.83.175.149, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adRW-U09Xv52u2xXGLCldgAAANM"]
[Tue Apr 07 08:59:37.148612 2026] [:error] [pid 37719:tid 37741] [client 170.83.175.149:10142] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 07 10:54:24.638076 2026] [:error] [pid 37596:tid 37623] [client 182.44.9.147:53325] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adRx4KpaAOZHEjRWjP1V9gAAABE"]
[Tue Apr 07 10:57:20.863113 2026] [:error] [pid 37598:tid 37685] [client 217.216.72.68:60504] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "adRykO9g7q_cV2WhPawTqAAAAJg"]
[Tue Apr 07 10:57:22.250650 2026] [:error] [pid 12948:tid 12967] [client 217.216.72.68:59724] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "adRyksbeSPAN8LvMqsY3dwAAARA"]
[Tue Apr 07 10:57:32.308185 2026] [:error] [pid 37598:tid 37664] [client 217.216.72.68:54915] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "adRynO9g7q_cV2WhPawUAgAAAIM"]
[Tue Apr 07 10:57:32.448435 2026] [:error] [pid 12948:tid 12970] [client 217.216.72.68:54920] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adRynMbeSPAN8LvMqsY3vAAAARM"]
[Tue Apr 07 10:57:46.672380 2026] [:error] [pid 59660:tid 59681] [client 217.216.72.68:60523] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "adRyqjp3-oiX2o5bTsyw-AAAAdM"]
[Tue Apr 07 10:57:56.032587 2026] [:error] [pid 37598:tid 37683] [client 217.216.72.68:53092] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "adRytO9g7q_cV2WhPawUYwAAAJY"]
[Tue Apr 07 10:57:56.464824 2026] [:error] [pid 37598:tid 37676] [client 217.216.72.68:56190] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adRytO9g7q_cV2WhPawUZgAAAI8"]
[Tue Apr 07 11:01:16.110433 2026] [:error] [pid 37598:tid 37676] [client 43.135.145.77:36980] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adRzfO9g7q_cV2WhPawWSgAAAI8"]
[Tue Apr 07 17:30:21.944483 2026] [:error] [pid 37719:tid 37722] [client 49.235.136.28:44352] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adTOrU09Xv52u2xXGLCoOAAAAMA"]
[Tue Apr 07 19:53:10.675975 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:50928] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Tue Apr 07 19:53:10.716057 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:50930] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Tue Apr 07 19:53:10.919352 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:50928] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 07 19:53:10.958546 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:50930] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 07 19:53:11.157806 2026] [:error] [pid 37597:tid 37643] [client 4.178.176.82:50928] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 07 19:53:11.199628 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:50930] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 07 19:53:11.464214 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:50928] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Tue Apr 07 19:53:11.464214 2026] [:error] [pid 37597:tid 37634] [client 4.178.176.82:50930] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Tue Apr 07 19:53:11.746087 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:50930] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Apr 07 19:53:11.781882 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:50928] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTwJw6uAY0QAy-8EEJhHwAAAFc"]
[Tue Apr 07 19:53:12.004458 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:50930] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwKA6uAY0QAy-8EEJhIAAAAFg"]
[Tue Apr 07 19:53:12.359930 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:61278] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTwKE09Xv52u2xXGLAJwwAAANg"]
[Tue Apr 07 19:53:12.743308 2026] [:error] [pid 37719:tid 37734] [client 4.178.176.82:51347] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwKE09Xv52u2xXGLAJxQAAAMw"]
[Tue Apr 07 19:53:12.940669 2026] [:error] [pid 37597:tid 37653] [client 4.178.176.82:9604] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTwKA6uAY0QAy-8EEJhIQAAAFM"]
[Tue Apr 07 19:53:13.661133 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:51391] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTwKQ6uAY0QAy-8EEJhJQAAAFI"]
[Tue Apr 07 19:53:13.833591 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:51379] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwKQ6uAY0QAy-8EEJhKQAAAEI"]
[Tue Apr 07 19:53:14.349312 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:9625] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwKg6uAY0QAy-8EEJhLAAAAEg"]
[Tue Apr 07 19:53:14.583794 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:57399] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwKg6uAY0QAy-8EEJhLgAAAE8"]
[Tue Apr 07 19:53:14.927125 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:57347] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwKg6uAY0QAy-8EEJhMAAAAFA"]
[Tue Apr 07 19:53:15.140176 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:50358] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwKw6uAY0QAy-8EEJhMgAAAEc"]
[Tue Apr 07 19:53:15.613765 2026] [:error] [pid 59551:tid 59553] [client 4.178.176.82:57388] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwK17LN7Ubyqs-sVv8YQAAAYA"]
[Tue Apr 07 19:53:15.911865 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:46348] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwKw6uAY0QAy-8EEJhNQAAAEI"]
[Tue Apr 07 19:53:16.218807 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:57375] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTwLA6uAY0QAy-8EEJhOAAAAEg"]
[Tue Apr 07 19:53:16.775405 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:61274] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwLE09Xv52u2xXGLAJzAAAAM8"]
[Tue Apr 07 19:53:17.028737 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:56066] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwLQ6uAY0QAy-8EEJhPgAAAEc"]
[Tue Apr 07 19:53:17.332772 2026] [:error] [pid 37719:tid 37732] [client 4.178.176.82:61252] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwLU09Xv52u2xXGLAJzQAAAMo"]
[Tue Apr 07 19:53:17.561357 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:9627] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwLU09Xv52u2xXGLAJzgAAAMk"]
[Tue Apr 07 19:53:17.929159 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:46370] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwLQ6uAY0QAy-8EEJhRAAAAEs"]
[Tue Apr 07 19:53:18.091796 2026] [:error] [pid 59804:tid 59817] [client 4.178.176.82:50342] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwLnYVIXiPh5_eJTme_wAAAgs"]
[Tue Apr 07 19:53:18.474697 2026] [:error] [pid 37596:tid 37611] [client 4.178.176.82:9977] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTwLqpaAOZHEjRWjP2ZGAAAAAU"]
[Tue Apr 07 19:53:18.634533 2026] [:error] [pid 12948:tid 12953] [client 4.178.176.82:46395] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwLsbeSPAN8LvMqsaoQgAAAQI"]
[Tue Apr 07 19:53:19.148370 2026] [:error] [pid 37596:tid 37621] [client 4.178.176.82:51369] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwL6paAOZHEjRWjP2ZGgAAAA8"]
[Tue Apr 07 19:53:19.221916 2026] [:error] [pid 37596:tid 37616] [client 4.178.176.82:56118] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwL6paAOZHEjRWjP2ZGwAAAAo"]
[Tue Apr 07 19:53:19.698839 2026] [:error] [pid 12948:tid 12960] [client 4.178.176.82:57348] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwL8beSPAN8LvMqsaoRQAAAQk"]
[Tue Apr 07 19:53:19.800918 2026] [:error] [pid 37596:tid 37628] [client 4.178.176.82:50363] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwL6paAOZHEjRWjP2ZHAAAABY"]
[Tue Apr 07 19:53:20.190755 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:50320] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwME09Xv52u2xXGLAJ1wAAAMM"]
[Tue Apr 07 19:53:20.359491 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:57396] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwME09Xv52u2xXGLAJ2wAAANA"]
[Tue Apr 07 19:53:20.664044 2026] [:error] [pid 12948:tid 12962] [client 4.178.176.82:50362] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTwMMbeSPAN8LvMqsaoRwAAAQs"]
[Tue Apr 07 19:53:21.087505 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:9624] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwMU09Xv52u2xXGLAJ4QAAAMk"]
[Tue Apr 07 19:53:21.181533 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:57362] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwMU09Xv52u2xXGLAJ4gAAANM"]
[Tue Apr 07 19:53:21.863418 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:56067] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwMU09Xv52u2xXGLAJ5wAAAM0"]
[Tue Apr 07 19:53:22.605675 2026] [:error] [pid 37598:tid 37678] [client 4.178.176.82:9969] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwMu9g7q_cV2WhPaywYQAAAJE"]
[Tue Apr 07 19:53:23.026281 2026] [:error] [pid 59804:tid 59824] [client 4.178.176.82:61308] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwM3YVIXiPh5_eJTmfAAAAAhI"]
[Tue Apr 07 19:53:23.383060 2026] [:error] [pid 37598:tid 37668] [client 4.178.176.82:9633] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwM-9g7q_cV2WhPaywZQAAAIc"]
[Tue Apr 07 19:53:23.880625 2026] [:error] [pid 59804:tid 59819] [client 4.178.176.82:9975] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwM3YVIXiPh5_eJTmfAwAAAg0"]
[Tue Apr 07 19:53:24.293539 2026] [:error] [pid 59804:tid 59808] [client 4.178.176.82:57394] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTwNHYVIXiPh5_eJTmfBQAAAgI"]
[Tue Apr 07 19:53:24.486136 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:57406] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwNE09Xv52u2xXGLAJ8AAAAMk"]
[Tue Apr 07 19:53:24.808895 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:51338] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwNE09Xv52u2xXGLAJ8QAAANM"]
[Tue Apr 07 19:53:25.020665 2026] [:error] [pid 37719:tid 37745] [client 4.178.176.82:61301] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwNU09Xv52u2xXGLAJ8wAAANc"]
[Tue Apr 07 19:53:25.330986 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:56081] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwNU09Xv52u2xXGLAJ9QAAANg"]
[Tue Apr 07 19:53:25.587884 2026] [:error] [pid 59490:tid 59511] [client 4.178.176.82:56089] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwNUcw8OFbiUZ7Rx1lMwAAAVM"]
[Tue Apr 07 19:53:25.814183 2026] [:error] [pid 59660:tid 59669] [client 4.178.176.82:9621] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwNTp3-oiX2o5bTswOmQAAAcc"]
[Tue Apr 07 19:53:26.284509 2026] [:error] [pid 37598:tid 37685] [client 4.178.176.82:56086] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwNu9g7q_cV2WhPaywbQAAAJg"]
[Tue Apr 07 19:53:26.304016 2026] [:error] [pid 12948:tid 12970] [client 4.178.176.82:46386] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTwNsbeSPAN8LvMqsaoSQAAARM"]
[Tue Apr 07 19:53:26.779405 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:50315] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwNk09Xv52u2xXGLAJ-AAAAMk"]
[Tue Apr 07 19:53:26.909337 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:9638] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwNk09Xv52u2xXGLAJ-QAAANA"]
[Tue Apr 07 19:53:27.267345 2026] [:error] [pid 59660:tid 59663] [client 4.178.176.82:9949] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwNzp3-oiX2o5bTswOngAAAcE"]
[Tue Apr 07 19:53:27.524349 2026] [:error] [pid 59490:tid 59510] [client 4.178.176.82:56091] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwN0cw8OFbiUZ7Rx1lNgAAAVI"]
[Tue Apr 07 19:53:27.755709 2026] [:error] [pid 59490:tid 59501] [client 4.178.176.82:46388] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwN0cw8OFbiUZ7Rx1lNwAAAUk"]
[Tue Apr 07 19:53:28.224671 2026] [:error] [pid 59490:tid 59498] [client 4.178.176.82:9653] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwOEcw8OFbiUZ7Rx1lOAAAAUY"]
[Tue Apr 07 19:53:28.262780 2026] [:error] [pid 12948:tid 12963] [client 4.178.176.82:56075] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTwOMbeSPAN8LvMqsaoSwAAAQw"]
[Tue Apr 07 19:53:28.784841 2026] [:error] [pid 37596:tid 37614] [client 4.178.176.82:9953] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOKpaAOZHEjRWjP2ZHgAAAAg"]
[Tue Apr 07 19:53:29.028606 2026] [:error] [pid 37596:tid 37617] [client 4.178.176.82:54954] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOapaAOZHEjRWjP2ZHwAAAAs"]
[Tue Apr 07 19:53:29.291466 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:61265] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOU09Xv52u2xXGLAKBgAAANA"]
[Tue Apr 07 19:53:29.629197 2026] [:error] [pid 37596:tid 37627] [client 4.178.176.82:57373] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOapaAOZHEjRWjP2ZIAAAABU"]
[Tue Apr 07 19:53:29.891728 2026] [:error] [pid 59490:tid 59492] [client 4.178.176.82:50333] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOUcw8OFbiUZ7Rx1lOwAAAUA"]
[Tue Apr 07 19:53:30.454801 2026] [:error] [pid 59804:tid 59830] [client 4.178.176.82:9957] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOnYVIXiPh5_eJTmfCAAAAhg"]
[Tue Apr 07 19:53:30.654264 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:46344] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOg6uAY0QAy-8EEJhSgAAAFQ"]
[Tue Apr 07 19:53:31.043120 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:51360] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwOw6uAY0QAy-8EEJhSwAAAEY"]
[Tue Apr 07 19:53:31.579353 2026] [:error] [pid 37597:tid 37648] [client 4.178.176.82:51330] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwOw6uAY0QAy-8EEJhUAAAAE4"]
[Tue Apr 07 19:53:31.872842 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:50309] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTwOw6uAY0QAy-8EEJhUgAAAFE"]
[Tue Apr 07 19:53:32.425119 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:51334] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwPA6uAY0QAy-8EEJhVQAAAFU"]
[Tue Apr 07 19:53:32.730492 2026] [:error] [pid 59490:tid 59505] [client 4.178.176.82:61309] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwPEcw8OFbiUZ7Rx1lPAAAAU0"]
[Tue Apr 07 19:53:32.918089 2026] [:error] [pid 37598:tid 37684] [client 4.178.176.82:9930] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwPO9g7q_cV2WhPaywcgAAAJc"]
[Tue Apr 07 19:53:33.563001 2026] [:error] [pid 37598:tid 37661] [client 4.178.176.82:46349] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwPe9g7q_cV2WhPaywdAAAAIA"]
[Tue Apr 07 19:53:33.664244 2026] [:error] [pid 37598:tid 37678] [client 4.178.176.82:61305] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwPe9g7q_cV2WhPaywdQAAAJE"]
[Tue Apr 07 19:53:34.303519 2026] [:error] [pid 37596:tid 37615] [client 4.178.176.82:61253] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwPqpaAOZHEjRWjP2ZIwAAAAk"]
[Tue Apr 07 19:53:34.464164 2026] [:error] [pid 12948:tid 12953] [client 4.178.176.82:49113] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwPsbeSPAN8LvMqsaoTwAAAQI"]
[Tue Apr 07 19:53:34.976928 2026] [:error] [pid 59551:tid 59553] [client 4.178.176.82:9982] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwPl7LN7Ubyqs-sVv8agAAAYA"]
[Tue Apr 07 19:53:35.345147 2026] [:error] [pid 59490:tid 59494] [client 4.178.176.82:9946] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTwP0cw8OFbiUZ7Rx1lPwAAAUI"]
[Tue Apr 07 19:53:36.165500 2026] [:error] [pid 37598:tid 37683] [client 4.178.176.82:50322] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwQO9g7q_cV2WhPaywdwAAAJY"]
[Tue Apr 07 19:53:36.268184 2026] [:error] [pid 12948:tid 12975] [client 4.178.176.82:9934] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwQMbeSPAN8LvMqsaoVAAAARg"]
[Tue Apr 07 19:53:37.725350 2026] [:error] [pid 59551:tid 59567] [client 4.178.176.82:49106] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwQV7LN7Ubyqs-sVv8bgAAAY4"]
[Tue Apr 07 19:53:40.185631 2026] [:error] [pid 59660:tid 59664] [client 4.178.176.82:46372] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwRDp3-oiX2o5bTswOrQAAAcI"]
[Tue Apr 07 19:53:40.562579 2026] [:error] [pid 59490:tid 59499] [client 4.178.176.82:9635] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwREcw8OFbiUZ7Rx1lRAAAAUc"]
[Tue Apr 07 19:53:41.696618 2026] [:error] [pid 59490:tid 59504] [client 4.178.176.82:61263] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwRUcw8OFbiUZ7Rx1lSQAAAUw"]
[Tue Apr 07 19:53:41.994166 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:61287] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwRQ6uAY0QAy-8EEJhXQAAAEc"]
[Tue Apr 07 19:53:44.162556 2026] [:error] [pid 37598:tid 37678] [client 4.178.176.82:46359] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTwSO9g7q_cV2WhPaywtAAAAJE"]
[Tue Apr 07 19:53:45.164637 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:46337] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwSU09Xv52u2xXGLAKKAAAANM"]
[Tue Apr 07 19:53:46.109352 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:61307] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwSg6uAY0QAy-8EEJhYAAAAFc"]
[Tue Apr 07 19:53:46.544118 2026] [:error] [pid 59551:tid 59559] [client 4.178.176.82:51372] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwSl7LN7Ubyqs-sVv8fgAAAYY"]
[Tue Apr 07 19:53:46.885072 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:49129] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwSl7LN7Ubyqs-sVv8fwAAAYs"]
[Tue Apr 07 19:53:47.387507 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:46393] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwSw6uAY0QAy-8EEJhYwAAAEY"]
[Tue Apr 07 19:53:48.091412 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:9610] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwTA6uAY0QAy-8EEJhZQAAAFY"]
[Tue Apr 07 19:53:48.102835 2026] [:error] [pid 59490:tid 59504] [client 4.178.176.82:9661] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwTEcw8OFbiUZ7Rx1lXAAAAUw"]
[Tue Apr 07 19:53:48.714200 2026] [:error] [pid 37596:tid 37622] [client 4.178.176.82:46371] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwTKpaAOZHEjRWjP2ZKQAAABA"]
[Tue Apr 07 19:53:48.735529 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:46374] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTwTA6uAY0QAy-8EEJhZwAAAEU"]
[Tue Apr 07 19:53:49.275758 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:57405] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwTQ6uAY0QAy-8EEJhaAAAAFU"]
[Tue Apr 07 19:53:49.369874 2026] [:error] [pid 37597:tid 37648] [client 4.178.176.82:57390] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwTQ6uAY0QAy-8EEJhagAAAE4"]
[Tue Apr 07 19:53:49.811111 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:51352] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwTQ6uAY0QAy-8EEJhbAAAAEg"]
[Tue Apr 07 19:53:50.048143 2026] [:error] [pid 59551:tid 59567] [client 4.178.176.82:57355] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwTl7LN7Ubyqs-sVv8hAAAAY4"]
[Tue Apr 07 19:53:50.535762 2026] [:error] [pid 37596:tid 37625] [client 4.178.176.82:50334] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwTqpaAOZHEjRWjP2ZKwAAABM"]
[Tue Apr 07 19:53:50.676097 2026] [:error] [pid 59804:tid 59808] [client 4.178.176.82:54955] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwTnYVIXiPh5_eJTmfEgAAAgI"]
[Tue Apr 07 19:53:51.166977 2026] [:error] [pid 59804:tid 59813] [client 4.178.176.82:50325] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwT3YVIXiPh5_eJTmfFgAAAgc"]
[Tue Apr 07 19:53:51.298151 2026] [:error] [pid 37597:tid 37643] [client 4.178.176.82:9980] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTwTw6uAY0QAy-8EEJhcgAAAEk"]
[Tue Apr 07 19:53:51.678172 2026] [:error] [pid 59804:tid 59818] [client 4.178.176.82:51368] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwT3YVIXiPh5_eJTmfGQAAAgw"]
[Tue Apr 07 19:53:52.159616 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:57392] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwUF7LN7Ubyqs-sVv8hwAAAYI"]
[Tue Apr 07 19:53:52.386024 2026] [:error] [pid 12948:tid 12964] [client 4.178.176.82:51361] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwUMbeSPAN8LvMqsaoaAAAAQ0"]
[Tue Apr 07 19:53:52.860309 2026] [:error] [pid 59804:tid 59826] [client 4.178.176.82:57374] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwUHYVIXiPh5_eJTmfGwAAAhQ"]
[Tue Apr 07 19:53:52.986055 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:9618] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwUA6uAY0QAy-8EEJhdQAAAEU"]
[Tue Apr 07 19:53:53.406887 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:61285] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwUQ6uAY0QAy-8EEJhdgAAAFU"]
[Tue Apr 07 19:53:53.471515 2026] [:error] [pid 37598:tid 37665] [client 4.178.176.82:56065] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwUe9g7q_cV2WhPaywwwAAAIQ"]
[Tue Apr 07 19:53:53.921598 2026] [:error] [pid 59551:tid 59559] [client 4.178.176.82:56074] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwUV7LN7Ubyqs-sVv8iwAAAYY"]
[Tue Apr 07 19:53:54.337009 2026] [:error] [pid 37597:tid 37653] [client 4.178.176.82:51382] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTwUg6uAY0QAy-8EEJheQAAAFM"]
[Tue Apr 07 19:53:55.141494 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:56108] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwU009Xv52u2xXGLAKZgAAAM0"]
[Tue Apr 07 19:53:55.169751 2026] [:error] [pid 37596:tid 37608] [client 4.178.176.82:60852] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwU6paAOZHEjRWjP2ZLQAAAAI"]
[Tue Apr 07 19:53:55.900344 2026] [:error] [pid 37719:tid 37742] [client 4.178.176.82:51365] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwU009Xv52u2xXGLAKagAAANQ"]
[Tue Apr 07 19:53:56.090743 2026] [:error] [pid 12948:tid 12972] [client 4.178.176.82:56110] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwVMbeSPAN8LvMqsaobQAAARU"]
[Tue Apr 07 19:53:56.653451 2026] [:error] [pid 59490:tid 59499] [client 4.178.176.82:9979] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwVEcw8OFbiUZ7Rx1lZAAAAUc"]
[Tue Apr 07 19:53:56.700186 2026] [:error] [pid 59490:tid 59509] [client 4.178.176.82:61261] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwVEcw8OFbiUZ7Rx1lZQAAAVE"]
[Tue Apr 07 19:53:57.243137 2026] [:error] [pid 37719:tid 37727] [client 4.178.176.82:50885] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTwVU09Xv52u2xXGLAKbgAAAMU"]
[Tue Apr 07 19:53:57.326048 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:50364] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwVU09Xv52u2xXGLAKbwAAAMk"]
[Tue Apr 07 19:53:57.791140 2026] [:error] [pid 59660:tid 59677] [client 4.178.176.82:56078] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwVTp3-oiX2o5bTswOtwAAAc8"]
[Tue Apr 07 19:53:57.990748 2026] [:error] [pid 37598:tid 37677] [client 4.178.176.82:9956] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwVe9g7q_cV2WhPaywxwAAAJA"]
[Tue Apr 07 19:53:58.383048 2026] [:error] [pid 59660:tid 59672] [client 4.178.176.82:50354] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwVjp3-oiX2o5bTswOvQAAAco"]
[Tue Apr 07 19:53:58.559704 2026] [:error] [pid 59804:tid 59823] [client 4.178.176.82:54932] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwVnYVIXiPh5_eJTmfHQAAAhE"]
[Tue Apr 07 19:53:58.950136 2026] [:error] [pid 59490:tid 59505] [client 4.178.176.82:51336] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwVkcw8OFbiUZ7Rx1laQAAAU0"]
[Tue Apr 07 19:53:59.064008 2026] [:error] [pid 37596:tid 37626] [client 4.178.176.82:50899] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwV6paAOZHEjRWjP2ZMQAAABQ"]
[Tue Apr 07 19:53:59.454200 2026] [:error] [pid 59660:tid 59685] [client 4.178.176.82:57361] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTwVzp3-oiX2o5bTswOvwAAAdc"]
[Tue Apr 07 19:53:59.597262 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:51381] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwV17LN7Ubyqs-sVv8lQAAAZg"]
[Tue Apr 07 19:54:00.067010 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:46343] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwWA6uAY0QAy-8EEJhewAAAEY"]
[Tue Apr 07 19:54:00.094585 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:50331] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwWA6uAY0QAy-8EEJhfAAAAFI"]
[Tue Apr 07 19:54:00.590612 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:57401] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwWA6uAY0QAy-8EEJhfwAAAFU"]
[Tue Apr 07 19:54:00.628312 2026] [:error] [pid 37597:tid 37653] [client 4.178.176.82:9966] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwWA6uAY0QAy-8EEJhggAAAFM"]
[Tue Apr 07 19:54:01.077625 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:56115] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwWQ6uAY0QAy-8EEJhhAAAAEg"]
[Tue Apr 07 19:54:01.153051 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:46379] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwWQ6uAY0QAy-8EEJhhgAAAFg"]
[Tue Apr 07 19:54:01.600170 2026] [:error] [pid 37598:tid 37672] [client 4.178.176.82:61311] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a.php"] [unique_id "adTwWe9g7q_cV2WhPaywzAAAAIs"]
[Tue Apr 07 19:54:01.644716 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:57407] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwWQ6uAY0QAy-8EEJhiQAAAFI"]
[Tue Apr 07 19:54:02.080431 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:54935] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwWg6uAY0QAy-8EEJhjwAAAEc"]
[Tue Apr 07 19:54:02.124024 2026] [:error] [pid 37597:tid 37634] [client 4.178.176.82:9961] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwWg6uAY0QAy-8EEJhkAAAAEA"]
[Tue Apr 07 19:54:02.583729 2026] [:error] [pid 59660:tid 59679] [client 4.178.176.82:51332] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwWjp3-oiX2o5bTswOwAAAAdE"]
[Tue Apr 07 19:54:02.614060 2026] [:error] [pid 59660:tid 59678] [client 4.178.176.82:57382] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwWjp3-oiX2o5bTswOwQAAAdA"]
[Tue Apr 07 19:54:03.120146 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:57346] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwWw6uAY0QAy-8EEJhmAAAAFQ"]
[Tue Apr 07 19:54:03.243352 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:57372] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwWw6uAY0QAy-8EEJhmgAAAEY"]
[Tue Apr 07 19:54:03.763810 2026] [:error] [pid 37719:tid 37742] [client 4.178.176.82:50337] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwW009Xv52u2xXGLAKdQAAANQ"]
[Tue Apr 07 19:54:03.835680 2026] [:error] [pid 37719:tid 37733] [client 4.178.176.82:50366] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTwW009Xv52u2xXGLAKdgAAAMs"]
[Tue Apr 07 19:54:04.285330 2026] [:error] [pid 37719:tid 37734] [client 4.178.176.82:57402] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwXE09Xv52u2xXGLAKegAAAMw"]
[Tue Apr 07 19:54:04.795757 2026] [:error] [pid 59804:tid 59821] [client 4.178.176.82:61307] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwXHYVIXiPh5_eJTmfJQAAAg8"]
[Tue Apr 07 19:54:04.803490 2026] [:error] [pid 37597:tid 37653] [client 4.178.176.82:49148] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwXA6uAY0QAy-8EEJhngAAAFM"]
[Tue Apr 07 19:54:05.282147 2026] [:error] [pid 37598:tid 37662] [client 4.178.176.82:61248] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwXe9g7q_cV2WhPayw0QAAAIE"]
[Tue Apr 07 19:54:05.375942 2026] [:error] [pid 12948:tid 12958] [client 4.178.176.82:61277] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwXcbeSPAN8LvMqsaocAAAAQc"]
[Tue Apr 07 19:54:05.836014 2026] [:error] [pid 37597:tid 37634] [client 4.178.176.82:46377] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwXQ6uAY0QAy-8EEJhoQAAAEA"]
[Tue Apr 07 19:54:05.873179 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:44803] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTwXQ6uAY0QAy-8EEJhowAAAE8"]
[Tue Apr 07 19:54:06.324687 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:56107] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTwXg6uAY0QAy-8EEJhpAAAAEs"]
[Tue Apr 07 19:54:06.370465 2026] [:error] [pid 37597:tid 37646] [client 4.178.176.82:9943] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTwXg6uAY0QAy-8EEJhpQAAAEw"]
[Tue Apr 07 19:54:06.904018 2026] [:error] [pid 59804:tid 59825] [client 4.178.176.82:60861] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTwXnYVIXiPh5_eJTmfKAAAAhM"]
[Tue Apr 07 19:54:06.940898 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:49137] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwXg6uAY0QAy-8EEJhpwAAAEI"]
[Tue Apr 07 19:54:07.636268 2026] [:error] [pid 59551:tid 59571] [client 4.178.176.82:56070] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwX17LN7Ubyqs-sVv8pwAAAZI"]
[Tue Apr 07 19:54:07.710520 2026] [:error] [pid 37596:tid 37629] [client 4.178.176.82:51354] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTwX6paAOZHEjRWjP2ZNwAAABc"]
[Tue Apr 07 19:54:08.310003 2026] [:error] [pid 37598:tid 37667] [client 4.178.176.82:9939] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwYO9g7q_cV2WhPayw1gAAAIY"]
[Tue Apr 07 19:54:08.333250 2026] [:error] [pid 37598:tid 37677] [client 4.178.176.82:9654] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTwYO9g7q_cV2WhPayw1wAAAJA"]
[Tue Apr 07 19:54:08.999294 2026] [:error] [pid 59804:tid 59813] [client 4.178.176.82:51341] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTwYHYVIXiPh5_eJTmfKgAAAgc"]
[Tue Apr 07 19:54:09.013072 2026] [:error] [pid 59804:tid 59830] [client 4.178.176.82:50916] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTwYXYVIXiPh5_eJTmfKwAAAhg"]
[Tue Apr 07 19:54:09.547075 2026] [:error] [pid 59551:tid 59553] [client 4.178.176.82:9655] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTwYV7LN7Ubyqs-sVv8qwAAAYA"]
[Tue Apr 07 19:54:09.591461 2026] [:error] [pid 59660:tid 59670] [client 4.178.176.82:50306] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTwYTp3-oiX2o5bTswOxwAAAcg"]
[Tue Apr 07 19:54:10.031032 2026] [:error] [pid 12948:tid 12954] [client 4.178.176.82:50351] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTwYsbeSPAN8LvMqsaocwAAAQM"]
[Tue Apr 07 19:54:10.077822 2026] [:error] [pid 12948:tid 12955] [client 4.178.176.82:9935] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTwYsbeSPAN8LvMqsaodAAAAQQ"]
[Tue Apr 07 19:54:10.609508 2026] [:error] [pid 59490:tid 59499] [client 4.178.176.82:49115] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTwYkcw8OFbiUZ7Rx1lbwAAAUc"]
[Tue Apr 07 19:54:10.621897 2026] [:error] [pid 59660:tid 59684] [client 4.178.176.82:51388] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTwYjp3-oiX2o5bTswOywAAAdY"]
[Tue Apr 07 19:54:11.215504 2026] [:error] [pid 37598:tid 37675] [client 4.178.176.82:54974] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Tue Apr 07 19:54:11.453270 2026] [:error] [pid 37598:tid 37680] [client 4.178.176.82:54974] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Tue Apr 07 19:54:11.677477 2026] [:error] [pid 59804:tid 59820] [client 4.178.176.82:51390] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Apr 07 19:54:11.689468 2026] [:error] [pid 37598:tid 37676] [client 4.178.176.82:54974] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Tue Apr 07 19:54:11.923912 2026] [:error] [pid 37598:tid 37671] [client 4.178.176.82:54974] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adTwY-9g7q_cV2WhPayw4QAAAIo"]
[Tue Apr 07 19:54:11.948188 2026] [:error] [pid 59804:tid 59823] [client 4.178.176.82:51390] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Apr 07 19:54:12.185298 2026] [:error] [pid 59804:tid 59808] [client 4.178.176.82:51390] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Tue Apr 07 19:54:12.432289 2026] [:error] [pid 59804:tid 59828] [client 4.178.176.82:51390] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Tue Apr 07 19:54:12.681689 2026] [:error] [pid 59804:tid 59822] [client 4.178.176.82:51390] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Tue Apr 07 19:54:12.853244 2026] [:error] [pid 37596:tid 37606] [client 4.178.176.82:9970] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Tue Apr 07 19:54:12.928514 2026] [:error] [pid 59804:tid 59809] [client 4.178.176.82:51390] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adTwZHYVIXiPh5_eJTmfOQAAAgM"]
[Tue Apr 07 19:54:13.091811 2026] [:error] [pid 37596:tid 37612] [client 4.178.176.82:9970] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Apr 07 19:54:13.363006 2026] [:error] [pid 37596:tid 37614] [client 4.178.176.82:9970] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Apr 07 19:54:13.598382 2026] [:error] [pid 37596:tid 37617] [client 4.178.176.82:9970] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwZapaAOZHEjRWjP2ZQQAAAAs"]
[Tue Apr 07 19:54:13.808914 2026] [:error] [pid 12948:tid 12956] [client 4.178.176.82:56103] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTwZcbeSPAN8LvMqsaoegAAAQU"]
[Tue Apr 07 19:54:14.276947 2026] [:error] [pid 59804:tid 59829] [client 4.178.176.82:57350] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwZnYVIXiPh5_eJTmfOgAAAhc"]
[Tue Apr 07 19:54:14.587587 2026] [:error] [pid 37598:tid 37685] [client 4.178.176.82:51355] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTwZu9g7q_cV2WhPayw6AAAAJg"]
[Tue Apr 07 19:54:14.850611 2026] [:error] [pid 12948:tid 12971] [client 4.178.176.82:9644] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwZsbeSPAN8LvMqsaofAAAARQ"]
[Tue Apr 07 19:54:15.162436 2026] [:error] [pid 12948:tid 12960] [client 4.178.176.82:57344] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTwZ8beSPAN8LvMqsaofQAAAQk"]
[Tue Apr 07 19:54:15.378286 2026] [:error] [pid 59804:tid 59807] [client 4.178.176.82:54357] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwZ3YVIXiPh5_eJTmfPAAAAgE"]
[Tue Apr 07 19:54:15.703300 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:9650] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTwZw6uAY0QAy-8EEJhrgAAAFI"]
[Tue Apr 07 19:54:15.875361 2026] [:error] [pid 12948:tid 12961] [client 4.178.176.82:50360] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwZ8beSPAN8LvMqsaofwAAAQo"]
[Tue Apr 07 19:54:16.365905 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:50329] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwaE09Xv52u2xXGLAKgwAAANM"]
[Tue Apr 07 19:54:16.383358 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:61262] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTwaE09Xv52u2xXGLAKhAAAAM8"]
[Tue Apr 07 19:54:16.864516 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:60848] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwaF7LN7Ubyqs-sVv8rgAAAYI"]
[Tue Apr 07 19:54:16.986360 2026] [:error] [pid 37598:tid 37671] [client 4.178.176.82:57363] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTwaO9g7q_cV2WhPayw6wAAAIo"]
[Tue Apr 07 19:54:17.335852 2026] [:error] [pid 12948:tid 12958] [client 4.178.176.82:9617] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwacbeSPAN8LvMqsaogwAAAQc"]
[Tue Apr 07 19:54:17.682355 2026] [:error] [pid 59660:tid 59681] [client 4.178.176.82:57358] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTwaTp3-oiX2o5bTswO0AAAAdM"]
[Tue Apr 07 19:54:17.824971 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:9641] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwaU09Xv52u2xXGLAKiwAAAMQ"]
[Tue Apr 07 19:54:18.307593 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:9964] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTwak09Xv52u2xXGLAKjgAAANA"]
[Tue Apr 07 19:54:18.351001 2026] [:error] [pid 59551:tid 59568] [client 4.178.176.82:51358] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwal7LN7Ubyqs-sVv8sAAAAY8"]
[Tue Apr 07 19:54:18.893854 2026] [:error] [pid 37719:tid 37733] [client 4.178.176.82:49128] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwak09Xv52u2xXGLAKkwAAAMs"]
[Tue Apr 07 19:54:19.062667 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:9973] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTwa009Xv52u2xXGLAKlAAAAM8"]
[Tue Apr 07 19:54:19.541444 2026] [:error] [pid 59804:tid 59821] [client 4.178.176.82:56068] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwa3YVIXiPh5_eJTmfQAAAAg8"]
[Tue Apr 07 19:54:19.564090 2026] [:error] [pid 12948:tid 12973] [client 4.178.176.82:60857] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTwa8beSPAN8LvMqsaohAAAARY"]
[Tue Apr 07 19:54:20.024151 2026] [:error] [pid 59804:tid 59824] [client 4.178.176.82:49088] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTwbHYVIXiPh5_eJTmfQgAAAhI"]
[Tue Apr 07 19:54:20.104491 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:50359] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTwbA6uAY0QAy-8EEJhswAAAEE"]
[Tue Apr 07 19:54:20.536767 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:51328] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTwbA6uAY0QAy-8EEJhtQAAAEg"]
[Tue Apr 07 19:54:20.734290 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:50353] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTwbA6uAY0QAy-8EEJhtgAAAEc"]
[Tue Apr 07 19:54:21.024144 2026] [:error] [pid 59490:tid 59492] [client 4.178.176.82:50938] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTwbUcw8OFbiUZ7Rx1ldQAAAUA"]
[Tue Apr 07 19:54:21.353540 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:47614] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwbU09Xv52u2xXGLAKmQAAAMk"]
[Tue Apr 07 19:54:21.635218 2026] [:error] [pid 59490:tid 59515] [client 4.178.176.82:47561] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTwbUcw8OFbiUZ7Rx1ldwAAAVc"]
[Tue Apr 07 19:54:21.857286 2026] [:error] [pid 59660:tid 59669] [client 4.178.176.82:47581] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwbTp3-oiX2o5bTswO0gAAAcc"]
[Tue Apr 07 19:54:22.131519 2026] [:error] [pid 37719:tid 37722] [client 4.178.176.82:9942] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwbk09Xv52u2xXGLAKmgAAAMA"]
[Tue Apr 07 19:54:22.618807 2026] [:error] [pid 37719:tid 37724] [client 4.178.176.82:57385] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwbk09Xv52u2xXGLAKnQAAAMI"]
[Tue Apr 07 19:54:22.668358 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:51363] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwbg6uAY0QAy-8EEJhtwAAAEI"]
[Tue Apr 07 19:54:23.159816 2026] [:error] [pid 37596:tid 37630] [client 4.178.176.82:46361] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwb6paAOZHEjRWjP2ZSQAAABg"]
[Tue Apr 07 19:54:23.265860 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:9648] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTwb009Xv52u2xXGLAKnwAAAMc"]
[Tue Apr 07 19:54:23.631975 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:47586] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwb009Xv52u2xXGLAKoQAAAM8"]
[Tue Apr 07 19:54:23.871797 2026] [:error] [pid 37597:tid 37638] [client 4.178.176.82:47598] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwbw6uAY0QAy-8EEJhvQAAAEQ"]
[Tue Apr 07 19:54:24.375470 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:47588] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/filemanager.php"] [unique_id "adTwcA6uAY0QAy-8EEJhvwAAAFA"]
[Tue Apr 07 19:54:24.409637 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:54369] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwcA6uAY0QAy-8EEJhwAAAAFI"]
[Tue Apr 07 19:54:24.916430 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:47564] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTwcA6uAY0QAy-8EEJhxAAAAEg"]
[Tue Apr 07 19:54:25.306102 2026] [:error] [pid 37597:tid 37647] [client 4.178.176.82:9622] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwcQ6uAY0QAy-8EEJhyAAAAE0"]
[Tue Apr 07 19:54:25.449665 2026] [:error] [pid 59660:tid 59672] [client 4.178.176.82:56096] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTwcTp3-oiX2o5bTswO1AAAAco"]
[Tue Apr 07 19:54:25.840418 2026] [:error] [pid 59804:tid 59813] [client 4.178.176.82:46350] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTwcXYVIXiPh5_eJTmfSQAAAgc"]
[Tue Apr 07 19:54:26.046810 2026] [:error] [pid 37597:tid 37646] [client 4.178.176.82:47611] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTwcg6uAY0QAy-8EEJhzAAAAEw"]
[Tue Apr 07 19:54:26.803861 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:61266] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwck09Xv52u2xXGLAKpwAAANM"]
[Tue Apr 07 19:54:26.880180 2026] [:error] [pid 37597:tid 37643] [client 4.178.176.82:54965] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwcg6uAY0QAy-8EEJhzQAAAEk"]
[Tue Apr 07 19:54:27.304566 2026] [:error] [pid 59660:tid 59684] [client 4.178.176.82:56117] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwczp3-oiX2o5bTswO1wAAAdY"]
[Tue Apr 07 19:54:27.479478 2026] [:error] [pid 59490:tid 59501] [client 4.178.176.82:9960] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwc0cw8OFbiUZ7Rx1legAAAUk"]
[Tue Apr 07 19:54:27.924599 2026] [:error] [pid 59551:tid 59554] [client 4.178.176.82:54375] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwc17LN7Ubyqs-sVv8sQAAAYE"]
[Tue Apr 07 19:54:28.090094 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:50344] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwdE09Xv52u2xXGLAKqAAAAM8"]
[Tue Apr 07 19:54:28.600303 2026] [:error] [pid 37719:tid 37732] [client 4.178.176.82:9978] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwdE09Xv52u2xXGLAKqQAAAMo"]
[Tue Apr 07 19:54:28.728986 2026] [:error] [pid 37719:tid 37734] [client 4.178.176.82:54936] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTwdE09Xv52u2xXGLAKqgAAAMw"]
[Tue Apr 07 19:54:29.169269 2026] [:error] [pid 12948:tid 12968] [client 4.178.176.82:46391] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwdcbeSPAN8LvMqsaolQAAARE"]
[Tue Apr 07 19:54:29.316492 2026] [:error] [pid 12948:tid 12954] [client 4.178.176.82:9609] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTwdcbeSPAN8LvMqsaolgAAAQM"]
[Tue Apr 07 19:54:29.898349 2026] [:error] [pid 12948:tid 12964] [client 4.178.176.82:61299] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwdcbeSPAN8LvMqsaomQAAAQ0"]
[Tue Apr 07 19:54:30.106707 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:46398] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTwdk09Xv52u2xXGLAKrQAAAMQ"]
[Tue Apr 07 19:54:30.387917 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:61290] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwdk09Xv52u2xXGLAKrgAAANA"]
[Tue Apr 07 19:54:30.631300 2026] [:error] [pid 59551:tid 59553] [client 4.178.176.82:47565] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTwdl7LN7Ubyqs-sVv8tAAAAYA"]
[Tue Apr 07 19:54:31.078580 2026] [:error] [pid 59660:tid 59662] [client 4.178.176.82:51387] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwdzp3-oiX2o5bTswO2gAAAcA"]
[Tue Apr 07 19:54:31.862622 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:50330] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTwdw6uAY0QAy-8EEJhzgAAAE8"]
[Tue Apr 07 19:54:32.436867 2026] [:error] [pid 59804:tid 59821] [client 4.178.176.82:57391] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTweHYVIXiPh5_eJTmfSwAAAg8"]
[Tue Apr 07 19:54:32.564410 2026] [:error] [pid 37596:tid 37608] [client 4.178.176.82:55520] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTweKpaAOZHEjRWjP2ZVQAAAAI"]
[Tue Apr 07 19:54:33.121560 2026] [:error] [pid 12948:tid 12957] [client 4.178.176.82:47605] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTwecbeSPAN8LvMqsaonQAAAQY"]
[Tue Apr 07 19:54:34.084189 2026] [:error] [pid 37719:tid 37722] [client 4.178.176.82:50327] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTwek09Xv52u2xXGLAKsQAAAMA"]
[Tue Apr 07 19:54:34.429811 2026] [:error] [pid 37719:tid 37732] [client 4.178.176.82:61270] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwek09Xv52u2xXGLAKtAAAAMo"]
[Tue Apr 07 19:54:34.742261 2026] [:error] [pid 37719:tid 37734] [client 4.178.176.82:51335] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwek09Xv52u2xXGLAKtwAAAMw"]
[Tue Apr 07 19:54:34.918923 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:61293] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwek09Xv52u2xXGLAKugAAAM0"]
[Tue Apr 07 19:54:35.350923 2026] [:error] [pid 59660:tid 59669] [client 4.178.176.82:60840] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwezp3-oiX2o5bTswO5QAAAcc"]
[Tue Apr 07 19:54:35.399933 2026] [:error] [pid 59660:tid 59668] [client 4.178.176.82:47605] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwezp3-oiX2o5bTswO5gAAAcY"]
[Tue Apr 07 19:54:35.949736 2026] [:error] [pid 59551:tid 59562] [client 4.178.176.82:50339] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTwe17LN7Ubyqs-sVv8ugAAAYk"]
[Tue Apr 07 19:54:36.000667 2026] [:error] [pid 37598:tid 37667] [client 4.178.176.82:47573] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwe-9g7q_cV2WhPayw9gAAAIY"]
[Tue Apr 07 19:54:36.450046 2026] [:error] [pid 59490:tid 59497] [client 4.178.176.82:61249] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/filemanager.php"] [unique_id "adTwfEcw8OFbiUZ7Rx1lfwAAAUU"]
[Tue Apr 07 19:54:36.772831 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:56090] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwfF7LN7Ubyqs-sVv8vQAAAZA"]
[Tue Apr 07 19:54:36.977452 2026] [:error] [pid 59660:tid 59671] [client 4.178.176.82:50311] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTwfDp3-oiX2o5bTswO5wAAAck"]
[Tue Apr 07 19:54:37.342546 2026] [:error] [pid 12948:tid 12957] [client 4.178.176.82:55507] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwfcbeSPAN8LvMqsaoogAAAQY"]
[Tue Apr 07 19:54:37.546769 2026] [:error] [pid 59804:tid 59811] [client 4.178.176.82:46376] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTwfXYVIXiPh5_eJTmfTAAAAgU"]
[Tue Apr 07 19:54:37.890573 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:51331] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwfQ6uAY0QAy-8EEJh0gAAAEo"]
[Tue Apr 07 19:54:38.162574 2026] [:error] [pid 59804:tid 59816] [client 4.178.176.82:50316] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTwfnYVIXiPh5_eJTmfTQAAAgo"]
[Tue Apr 07 19:54:38.573648 2026] [:error] [pid 59660:tid 59677] [client 4.178.176.82:50884] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwfjp3-oiX2o5bTswO6QAAAc8"]
[Tue Apr 07 19:54:39.288170 2026] [:error] [pid 59490:tid 59493] [client 4.178.176.82:60841] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwf0cw8OFbiUZ7Rx1lhAAAAUE"]
[Tue Apr 07 19:54:39.430381 2026] [:error] [pid 59660:tid 59684] [client 4.178.176.82:50943] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTwfzp3-oiX2o5bTswO6gAAAdY"]
[Tue Apr 07 19:54:39.832682 2026] [:error] [pid 37598:tid 37672] [client 4.178.176.82:50343] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwf-9g7q_cV2WhPayw_AAAAIs"]
[Tue Apr 07 19:54:39.960941 2026] [:error] [pid 37598:tid 37664] [client 4.178.176.82:54975] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwf-9g7q_cV2WhPayw_QAAAIM"]
[Tue Apr 07 19:54:40.305053 2026] [:error] [pid 59551:tid 59565] [client 4.178.176.82:57383] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwgF7LN7Ubyqs-sVv8wQAAAYw"]
[Tue Apr 07 19:54:40.717741 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:9612] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwgF7LN7Ubyqs-sVv8xAAAAYg"]
[Tue Apr 07 19:54:41.136405 2026] [:error] [pid 59551:tid 59567] [client 4.178.176.82:57377] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwgV7LN7Ubyqs-sVv8xwAAAY4"]
[Tue Apr 07 19:54:41.223358 2026] [:error] [pid 12948:tid 12973] [client 4.178.176.82:47579] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwgcbeSPAN8LvMqsaopAAAARY"]
[Tue Apr 07 19:54:42.009909 2026] [:error] [pid 37596:tid 37627] [client 4.178.176.82:9929] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwgqpaAOZHEjRWjP2ZWwAAABU"]
[Tue Apr 07 19:54:42.346406 2026] [:error] [pid 37596:tid 37623] [client 4.178.176.82:50367] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTwgqpaAOZHEjRWjP2ZXAAAABE"]
[Tue Apr 07 19:54:42.502605 2026] [:error] [pid 59660:tid 59682] [client 4.178.176.82:46364] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwgjp3-oiX2o5bTswO7QAAAdQ"]
[Tue Apr 07 19:54:43.041250 2026] [:error] [pid 37719:tid 37734] [client 4.178.176.82:46358] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwg009Xv52u2xXGLAKwQAAAMw"]
[Tue Apr 07 19:54:43.190124 2026] [:error] [pid 59660:tid 59679] [client 4.178.176.82:54920] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwgzp3-oiX2o5bTswO8QAAAdE"]
[Tue Apr 07 19:54:43.798057 2026] [:error] [pid 59660:tid 59673] [client 4.178.176.82:61272] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwgzp3-oiX2o5bTswO8wAAAcs"]
[Tue Apr 07 19:54:43.834563 2026] [:error] [pid 59660:tid 59686] [client 4.178.176.82:51380] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwgzp3-oiX2o5bTswO9AAAAdg"]
[Tue Apr 07 19:54:44.372886 2026] [:error] [pid 59551:tid 59571] [client 4.178.176.82:9640] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwhF7LN7Ubyqs-sVv8ygAAAZI"]
[Tue Apr 07 19:54:44.415003 2026] [:error] [pid 59551:tid 59557] [client 4.178.176.82:55504] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwhF7LN7Ubyqs-sVv8ywAAAYQ"]
[Tue Apr 07 19:54:44.954936 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:47578] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwhF7LN7Ubyqs-sVv8zwAAAYg"]
[Tue Apr 07 19:54:45.662132 2026] [:error] [pid 37596:tid 37615] [client 4.178.176.82:47603] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwhapaAOZHEjRWjP2ZYAAAAAk"]
[Tue Apr 07 19:54:45.908604 2026] [:error] [pid 37598:tid 37669] [client 4.178.176.82:47615] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/moon.php"] [unique_id "adTwhe9g7q_cV2WhPayxBAAAAIg"]
[Tue Apr 07 19:54:46.306546 2026] [:error] [pid 37719:tid 37740] [client 4.178.176.82:9925] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwhk09Xv52u2xXGLAKyAAAANI"]
[Tue Apr 07 19:54:46.855147 2026] [:error] [pid 37719:tid 37744] [client 4.178.176.82:56112] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTwhk09Xv52u2xXGLAKygAAANY"]
[Tue Apr 07 19:54:46.934040 2026] [:error] [pid 37719:tid 37743] [client 4.178.176.82:57359] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwhk09Xv52u2xXGLAKywAAANU"]
[Tue Apr 07 19:54:47.371403 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:9955] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTwh17LN7Ubyqs-sVv80QAAAYI"]
[Tue Apr 07 19:54:47.880602 2026] [:error] [pid 37597:tid 37648] [client 4.178.176.82:44838] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwhw6uAY0QAy-8EEJh2QAAAE4"]
[Tue Apr 07 19:54:47.983834 2026] [:error] [pid 37597:tid 37638] [client 4.178.176.82:61284] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTwhw6uAY0QAy-8EEJh2gAAAEQ"]
[Tue Apr 07 19:54:48.643301 2026] [:error] [pid 12948:tid 12956] [client 4.178.176.82:60854] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTwiMbeSPAN8LvMqsaoqgAAAQU"]
[Tue Apr 07 19:54:49.124642 2026] [:error] [pid 12948:tid 12967] [client 4.178.176.82:54940] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwicbeSPAN8LvMqsaoqwAAARA"]
[Tue Apr 07 19:54:49.458345 2026] [:error] [pid 37598:tid 37679] [client 4.178.176.82:57367] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwie9g7q_cV2WhPayxBwAAAJI"]
[Tue Apr 07 19:54:50.087003 2026] [:error] [pid 12948:tid 12961] [client 4.178.176.82:55528] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwisbeSPAN8LvMqsaosAAAAQo"]
[Tue Apr 07 19:54:50.279946 2026] [:error] [pid 37719:tid 37732] [client 4.178.176.82:54925] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwik09Xv52u2xXGLAK0QAAAMo"]
[Tue Apr 07 19:54:50.718494 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:56064] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwig6uAY0QAy-8EEJh3QAAAFc"]
[Tue Apr 07 19:54:50.930817 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:46354] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwig6uAY0QAy-8EEJh3wAAAEg"]
[Tue Apr 07 19:54:51.332867 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:51337] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwiw6uAY0QAy-8EEJh4QAAAFY"]
[Tue Apr 07 19:54:52.008990 2026] [:error] [pid 59551:tid 59571] [client 4.178.176.82:9971] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwjF7LN7Ubyqs-sVv80gAAAZI"]
[Tue Apr 07 19:54:52.318414 2026] [:error] [pid 37597:tid 37647] [client 4.178.176.82:60800] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTwjA6uAY0QAy-8EEJh5AAAAE0"]
[Tue Apr 07 19:54:52.948650 2026] [:error] [pid 12948:tid 12968] [client 4.178.176.82:47613] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwjMbeSPAN8LvMqsaosQAAARE"]
[Tue Apr 07 19:54:53.444428 2026] [:error] [pid 59551:tid 59574] [client 4.178.176.82:50324] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwjV7LN7Ubyqs-sVv81QAAAZU"]
[Tue Apr 07 19:54:53.934697 2026] [:error] [pid 59551:tid 59567] [client 4.178.176.82:56108] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwjV7LN7Ubyqs-sVv81wAAAY4"]
[Tue Apr 07 19:54:54.509833 2026] [:error] [pid 12948:tid 12964] [client 4.178.176.82:49096] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwjsbeSPAN8LvMqsaosgAAAQ0"]
[Tue Apr 07 19:54:55.383875 2026] [:error] [pid 37598:tid 37661] [client 4.178.176.82:61286] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTwj-9g7q_cV2WhPayxDwAAAIA"]
[Tue Apr 07 19:54:56.133324 2026] [:error] [pid 59804:tid 59817] [client 4.178.176.82:57389] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwkHYVIXiPh5_eJTmfWQAAAgs"]
[Tue Apr 07 19:54:56.960613 2026] [:error] [pid 59804:tid 59825] [client 4.178.176.82:54351] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwkHYVIXiPh5_eJTmfXQAAAhM"]
[Tue Apr 07 19:54:57.163466 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:47559] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwkV7LN7Ubyqs-sVv83QAAAZA"]
[Tue Apr 07 19:54:57.615041 2026] [:error] [pid 59804:tid 59806] [client 4.178.176.82:9636] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwkXYVIXiPh5_eJTmfXwAAAgA"]
[Tue Apr 07 19:54:57.956513 2026] [:error] [pid 59804:tid 59815] [client 4.178.176.82:47560] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTwkXYVIXiPh5_eJTmfYQAAAgk"]
[Tue Apr 07 19:54:58.351896 2026] [:error] [pid 12948:tid 12952] [client 4.178.176.82:50332] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTwksbeSPAN8LvMqsaotwAAAQE"]
[Tue Apr 07 19:54:58.427934 2026] [:error] [pid 59804:tid 59811] [client 4.178.176.82:47612] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTwknYVIXiPh5_eJTmfZAAAAgU"]
[Tue Apr 07 19:54:59.351819 2026] [:error] [pid 59804:tid 59828] [client 4.178.176.82:57384] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwk3YVIXiPh5_eJTmfaQAAAhY"]
[Tue Apr 07 19:54:59.477162 2026] [:error] [pid 12948:tid 12951] [client 4.178.176.82:9620] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTwk8beSPAN8LvMqsaouAAAAQA"]
[Tue Apr 07 19:54:59.968951 2026] [:error] [pid 37596:tid 37614] [client 4.178.176.82:54966] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTwk6paAOZHEjRWjP2ZZgAAAAg"]
[Tue Apr 07 19:55:00.132393 2026] [:error] [pid 12948:tid 12957] [client 4.178.176.82:46352] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwlMbeSPAN8LvMqsaouwAAAQY"]
[Tue Apr 07 19:55:00.594094 2026] [:error] [pid 37598:tid 37675] [client 4.178.176.82:56102] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTwlO9g7q_cV2WhPayxGAAAAI4"]
[Tue Apr 07 19:55:01.290867 2026] [:error] [pid 59804:tid 59812] [client 4.178.176.82:51356] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTwlXYVIXiPh5_eJTmfagAAAgY"]
[Tue Apr 07 19:55:01.291107 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:46387] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwlV7LN7Ubyqs-sVv83wAAAYg"]
[Tue Apr 07 19:55:01.495110 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:49509] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adTwlQ6uAY0QAy-8EEJh8QAAAFA"]
[Tue Apr 07 19:55:02.143963 2026] [:error] [pid 59551:tid 59574] [client 4.178.176.82:63425] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adTwll7LN7Ubyqs-sVv84QAAAZU"]
[Tue Apr 07 19:55:02.376615 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:60828] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTwlg6uAY0QAy-8EEJh8wAAAFg"]
[Tue Apr 07 19:55:02.756871 2026] [:error] [pid 59660:tid 59667] [client 4.178.176.82:63462] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adTwljp3-oiX2o5bTswO_AAAAcU"]
[Tue Apr 07 19:55:03.187628 2026] [:error] [pid 37719:tid 37745] [client 4.178.176.82:51345] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTwl009Xv52u2xXGLAK1AAAANc"]
[Tue Apr 07 19:55:03.280402 2026] [:error] [pid 37719:tid 37723] [client 4.178.176.82:47590] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTwl009Xv52u2xXGLAK1QAAAME"]
[Tue Apr 07 19:55:03.752466 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:47566] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwl009Xv52u2xXGLAK2QAAAM8"]
[Tue Apr 07 19:55:03.791344 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:63480] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adTwlw6uAY0QAy-8EEJh9wAAAFU"]
[Tue Apr 07 19:55:04.035717 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:9943] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTwmA6uAY0QAy-8EEJh-QAAAEY"]
[Tue Apr 07 19:55:04.746965 2026] [:error] [pid 37597:tid 37638] [client 4.178.176.82:61288] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwmA6uAY0QAy-8EEJh_QAAAEQ"]
[Tue Apr 07 19:55:04.927480 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:54944] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTwmA6uAY0QAy-8EEJh_gAAAFE"]
[Tue Apr 07 19:55:05.513288 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:50348] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwmU09Xv52u2xXGLAK3AAAAM0"]
[Tue Apr 07 19:55:05.815877 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:9950] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTwmQ6uAY0QAy-8EEJiAgAAAFY"]
[Tue Apr 07 19:55:06.304765 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:49145] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTwml7LN7Ubyqs-sVv86QAAAZg"]
[Tue Apr 07 19:55:06.521751 2026] [:error] [pid 59660:tid 59669] [client 4.178.176.82:9602] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTwmjp3-oiX2o5bTswO_gAAAcc"]
[Tue Apr 07 19:55:06.997420 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:54344] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwmk09Xv52u2xXGLAK3QAAAMk"]
[Tue Apr 07 19:55:07.792141 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:61275] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adTwm17LN7Ubyqs-sVv87QAAAYI"]
[Tue Apr 07 19:55:07.836216 2026] [:error] [pid 12948:tid 12969] [client 4.178.176.82:9623] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwm8beSPAN8LvMqsaowgAAARI"]
[Tue Apr 07 19:55:08.461344 2026] [:error] [pid 59660:tid 59671] [client 4.178.176.82:56125] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwnDp3-oiX2o5bTswO_wAAAck"]
[Tue Apr 07 19:55:08.661772 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:60824] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTwnA6uAY0QAy-8EEJiCAAAAEM"]
[Tue Apr 07 19:55:09.237711 2026] [:error] [pid 37598:tid 37681] [client 4.178.176.82:61302] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTwne9g7q_cV2WhPayxHAAAAJQ"]
[Tue Apr 07 19:55:09.516804 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:51343] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTwnU09Xv52u2xXGLAK5wAAAM8"]
[Tue Apr 07 19:55:09.759381 2026] [:error] [pid 37596:tid 37630] [client 4.178.176.82:54307] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwnapaAOZHEjRWjP2ZagAAABg"]
[Tue Apr 07 19:55:10.004970 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:46382] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTwnk09Xv52u2xXGLAK6QAAAMc"]
[Tue Apr 07 19:55:10.370201 2026] [:error] [pid 37719:tid 37739] [client 4.178.176.82:51378] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwnk09Xv52u2xXGLAK7AAAANE"]
[Tue Apr 07 19:55:10.688949 2026] [:error] [pid 37598:tid 37662] [client 4.178.176.82:9968] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTwnu9g7q_cV2WhPayxHgAAAIE"]
[Tue Apr 07 19:55:10.982793 2026] [:error] [pid 59551:tid 59553] [client 4.178.176.82:46355] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwnl7LN7Ubyqs-sVv87wAAAYA"]
[Tue Apr 07 19:55:11.199674 2026] [:error] [pid 37719:tid 37723] [client 4.178.176.82:54942] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "adTwn009Xv52u2xXGLAK8wAAAME"]
[Tue Apr 07 19:55:11.609057 2026] [:error] [pid 59551:tid 59560] [client 4.178.176.82:50920] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTwn17LN7Ubyqs-sVv88AAAAYc"]
[Tue Apr 07 19:55:11.872206 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:50888] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "adTwnw6uAY0QAy-8EEJiDAAAAEo"]
[Tue Apr 07 19:55:12.441096 2026] [:error] [pid 59660:tid 59685] [client 4.178.176.82:50313] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTwoDp3-oiX2o5bTswPAQAAAdc"]
[Tue Apr 07 19:55:12.638299 2026] [:error] [pid 59660:tid 59682] [client 4.178.176.82:55537] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "adTwoDp3-oiX2o5bTswPAgAAAdQ"]
[Tue Apr 07 19:55:13.103616 2026] [:error] [pid 59804:tid 59829] [client 4.178.176.82:46351] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Apr 07 19:55:13.173745 2026] [:error] [pid 37598:tid 37683] [client 4.178.176.82:49119] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Tue Apr 07 19:55:13.397634 2026] [:error] [pid 59804:tid 59807] [client 4.178.176.82:46351] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Tue Apr 07 19:55:13.454368 2026] [:error] [pid 37598:tid 37680] [client 4.178.176.82:49119] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Tue Apr 07 19:55:13.706579 2026] [:error] [pid 37598:tid 37679] [client 4.178.176.82:49119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 07 19:55:13.830017 2026] [:error] [pid 59804:tid 59813] [client 4.178.176.82:46351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Tue Apr 07 19:55:14.005198 2026] [:error] [pid 37598:tid 37665] [client 4.178.176.82:49119] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Apr 07 19:55:14.064082 2026] [:error] [pid 59804:tid 59818] [client 4.178.176.82:46351] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adTwonYVIXiPh5_eJTmfegAAAgw"]
[Tue Apr 07 19:55:14.246806 2026] [:error] [pid 37598:tid 37672] [client 4.178.176.82:49119] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Apr 07 19:55:14.482329 2026] [:error] [pid 37598:tid 37663] [client 4.178.176.82:49119] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/fm.php"] [unique_id "adTwou9g7q_cV2WhPayxJQAAAII"]
[Tue Apr 07 19:55:14.979192 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:61273] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Tue Apr 07 19:55:15.261656 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:61273] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Tue Apr 07 19:55:15.313304 2026] [:error] [pid 59490:tid 59494] [client 4.178.176.82:46357] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwo0cw8OFbiUZ7Rx1ljwAAAUI"]
[Tue Apr 07 19:55:15.517721 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:61273] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adTwow6uAY0QAy-8EEJiGQAAAFQ"]
[Tue Apr 07 19:55:15.799318 2026] [:error] [pid 37598:tid 37670] [client 4.178.176.82:49148] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwo-9g7q_cV2WhPayxJgAAAIk"]
[Tue Apr 07 19:55:16.134723 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:56124] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adTwpE09Xv52u2xXGLAK_QAAAM0"]
[Tue Apr 07 19:55:16.407353 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:55513] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwpA6uAY0QAy-8EEJiIAAAAEo"]
[Tue Apr 07 19:55:16.895561 2026] [:error] [pid 37719:tid 37730] [client 4.178.176.82:50907] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adTwpE09Xv52u2xXGLALAAAAAMg"]
[Tue Apr 07 19:55:17.080283 2026] [:error] [pid 37719:tid 37743] [client 4.178.176.82:9923] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwpU09Xv52u2xXGLALAwAAANU"]
[Tue Apr 07 19:55:17.506894 2026] [:error] [pid 59551:tid 59574] [client 4.178.176.82:56073] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adTwpV7LN7Ubyqs-sVv8-QAAAZU"]
[Tue Apr 07 19:55:18.180164 2026] [:error] [pid 12948:tid 12958] [client 4.178.176.82:9614] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTwpsbeSPAN8LvMqsaoxgAAAQc"]
[Tue Apr 07 19:55:18.507494 2026] [:error] [pid 59804:tid 59816] [client 4.178.176.82:57404] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwpnYVIXiPh5_eJTmfhAAAAgo"]
[Tue Apr 07 19:55:18.914975 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:50348] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTwpg6uAY0QAy-8EEJiIQAAAEs"]
[Tue Apr 07 19:55:19.294804 2026] [:error] [pid 37597:tid 37634] [client 4.178.176.82:51389] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwpw6uAY0QAy-8EEJiIwAAAEA"]
[Tue Apr 07 19:55:20.108031 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:46362] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTwqF7LN7Ubyqs-sVv8_gAAAZg"]
[Tue Apr 07 19:55:22.179453 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:61306] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwqk09Xv52u2xXGLALCAAAANg"]
[Tue Apr 07 19:55:23.801624 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:50319] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTwq17LN7Ubyqs-sVv9AgAAAYs"]
[Tue Apr 07 19:55:26.230679 2026] [:error] [pid 12948:tid 12967] [client 4.178.176.82:50886] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwrsbeSPAN8LvMqsaoywAAARA"]
[Tue Apr 07 19:55:27.214410 2026] [:error] [pid 37719:tid 37723] [client 4.178.176.82:9663] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTwr009Xv52u2xXGLALEwAAAME"]
[Tue Apr 07 19:55:27.444501 2026] [:error] [pid 37719:tid 37742] [client 4.178.176.82:49102] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTwr009Xv52u2xXGLALFAAAANQ"]
[Tue Apr 07 19:55:31.114367 2026] [:error] [pid 37597:tid 37647] [client 4.178.176.82:61269] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTwsw6uAY0QAy-8EEJiQAAAAE0"]
[Tue Apr 07 19:55:32.269816 2026] [:error] [pid 37597:tid 37634] [client 4.178.176.82:50895] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTwtA6uAY0QAy-8EEJiQgAAAEA"]
[Tue Apr 07 19:55:32.282579 2026] [:error] [pid 59660:tid 59666] [client 4.178.176.82:50308] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTwtDp3-oiX2o5bTswPKgAAAcQ"]
[Tue Apr 07 19:55:32.971374 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:50338] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTwtE09Xv52u2xXGLALGwAAANg"]
[Tue Apr 07 19:55:33.325839 2026] [:error] [pid 37719:tid 37727] [client 4.178.176.82:54957] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTwtU09Xv52u2xXGLALHQAAAMU"]
[Tue Apr 07 19:55:34.290372 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:56113] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTwtg6uAY0QAy-8EEJiSAAAAEY"]
[Tue Apr 07 19:55:34.730165 2026] [:error] [pid 37719:tid 37739] [client 4.178.176.82:10155] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTwtk09Xv52u2xXGLALJwAAANE"]
[Tue Apr 07 19:55:35.686935 2026] [:error] [pid 59490:tid 59508] [client 4.178.176.82:47580] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/fm.php"] [unique_id "adTwt0cw8OFbiUZ7Rx1lnAAAAVA"]
[Tue Apr 07 19:55:35.710216 2026] [:error] [pid 59551:tid 59562] [client 4.178.176.82:46340] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTwt17LN7Ubyqs-sVv9DgAAAYk"]
[Tue Apr 07 19:55:36.374057 2026] [:error] [pid 59551:tid 59560] [client 4.178.176.82:54288] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTwuF7LN7Ubyqs-sVv9EAAAAYc"]
[Tue Apr 07 19:55:37.059707 2026] [:error] [pid 59551:tid 59576] [client 4.178.176.82:9974] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTwuV7LN7Ubyqs-sVv9FAAAAZc"]
[Tue Apr 07 19:55:37.300615 2026] [:error] [pid 59551:tid 59563] [client 4.178.176.82:61264] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwuV7LN7Ubyqs-sVv9FgAAAYo"]
[Tue Apr 07 19:55:37.769903 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:51365] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adTwuV7LN7Ubyqs-sVv9GQAAAZA"]
[Tue Apr 07 19:55:38.786371 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:50927] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwug6uAY0QAy-8EEJiUgAAAEs"]
[Tue Apr 07 19:55:39.358664 2026] [:error] [pid 59551:tid 59559] [client 4.178.176.82:50323] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTwu17LN7Ubyqs-sVv9HAAAAYY"]
[Tue Apr 07 19:55:40.175340 2026] [:error] [pid 59804:tid 59814] [client 4.178.176.82:57354] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwvHYVIXiPh5_eJTmfjgAAAgg"]
[Tue Apr 07 19:55:40.544715 2026] [:error] [pid 59804:tid 59830] [client 4.178.176.82:51339] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTwvHYVIXiPh5_eJTmfkQAAAhg"]
[Tue Apr 07 19:55:42.190020 2026] [:error] [pid 59660:tid 59675] [client 4.178.176.82:57351] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTwvjp3-oiX2o5bTswPOgAAAc0"]
[Tue Apr 07 19:55:43.280244 2026] [:error] [pid 12948:tid 12961] [client 4.178.176.82:46390] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTwv8beSPAN8LvMqsao0gAAAQo"]
[Tue Apr 07 19:55:44.319572 2026] [:error] [pid 59551:tid 59562] [client 4.178.176.82:54968] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTwwF7LN7Ubyqs-sVv9JAAAAYk"]
[Tue Apr 07 19:55:44.499765 2026] [:error] [pid 59551:tid 59571] [client 4.178.176.82:60845] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwwF7LN7Ubyqs-sVv9JwAAAZI"]
[Tue Apr 07 19:55:46.484055 2026] [:error] [pid 12948:tid 12966] [client 4.178.176.82:49132] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwwsbeSPAN8LvMqsao1AAAAQ8"]
[Tue Apr 07 19:55:46.997541 2026] [:error] [pid 59551:tid 59572] [client 4.178.176.82:47568] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTwwl7LN7Ubyqs-sVv9LwAAAZM"]
[Tue Apr 07 19:55:48.058656 2026] [:error] [pid 12948:tid 12971] [client 4.178.176.82:61283] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwxMbeSPAN8LvMqsao2QAAARQ"]
[Tue Apr 07 19:55:48.229177 2026] [:error] [pid 12948:tid 12954] [client 4.178.176.82:50304] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTwxMbeSPAN8LvMqsao2gAAAQM"]
[Tue Apr 07 19:55:49.489170 2026] [:error] [pid 59804:tid 59828] [client 4.178.176.82:60834] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTwxXYVIXiPh5_eJTmfngAAAhY"]
[Tue Apr 07 19:55:49.976608 2026] [:error] [pid 59804:tid 59829] [client 4.178.176.82:9656] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTwxXYVIXiPh5_eJTmfoQAAAhc"]
[Tue Apr 07 19:55:52.098047 2026] [:error] [pid 12948:tid 12965] [client 4.178.176.82:47606] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTwyMbeSPAN8LvMqsao4QAAAQ4"]
[Tue Apr 07 19:55:52.468391 2026] [:error] [pid 37596:tid 37628] [client 4.178.176.82:50346] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTwyKpaAOZHEjRWjP2ZeAAAABY"]
[Tue Apr 07 19:55:53.477178 2026] [:error] [pid 59490:tid 59515] [client 4.178.176.82:57393] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTwyUcw8OFbiUZ7Rx1lugAAAVc"]
[Tue Apr 07 19:55:53.907556 2026] [:error] [pid 59660:tid 59677] [client 4.178.176.82:49116] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTwyTp3-oiX2o5bTswPQgAAAc8"]
[Tue Apr 07 19:55:56.951430 2026] [:error] [pid 37719:tid 37722] [client 4.178.176.82:51384] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTwzE09Xv52u2xXGLALXAAAAMA"]
[Tue Apr 07 19:55:57.626950 2026] [:error] [pid 12948:tid 12974] [client 4.178.176.82:60815] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTwzcbeSPAN8LvMqsao8QAAARc"]
[Tue Apr 07 19:56:01.132860 2026] [:error] [pid 37597:tid 37638] [client 4.178.176.82:61256] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTw0Q6uAY0QAy-8EEJikAAAAEQ"]
[Tue Apr 07 19:56:01.209556 2026] [:error] [pid 37597:tid 37646] [client 4.178.176.82:51370] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTw0Q6uAY0QAy-8EEJikQAAAEw"]
[Tue Apr 07 19:56:02.782697 2026] [:error] [pid 59804:tid 59809] [client 4.178.176.82:51362] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTw0nYVIXiPh5_eJTmfxgAAAgM"]
[Tue Apr 07 19:56:04.232656 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:54391] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTw1E09Xv52u2xXGLALdwAAAMQ"]
[Tue Apr 07 19:56:07.044960 2026] [:error] [pid 37719:tid 37728] [client 4.178.176.82:9616] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTw1009Xv52u2xXGLALiAAAAMY"]
[Tue Apr 07 19:56:07.200917 2026] [:error] [pid 37596:tid 37630] [client 4.178.176.82:55496] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTw16paAOZHEjRWjP2ZgAAAABg"]
[Tue Apr 07 19:56:09.462993 2026] [:error] [pid 37719:tid 37728] [client 4.178.176.82:60839] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTw2U09Xv52u2xXGLALlgAAAMY"]
[Tue Apr 07 19:56:09.532849 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:61260] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTw2Q6uAY0QAy-8EEJiowAAAFA"]
[Tue Apr 07 19:56:12.070561 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:54290] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTw3A6uAY0QAy-8EEJirAAAAE8"]
[Tue Apr 07 19:56:12.194354 2026] [:error] [pid 37597:tid 37643] [client 4.178.176.82:56127] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTw3A6uAY0QAy-8EEJirQAAAEk"]
[Tue Apr 07 19:56:13.131437 2026] [:error] [pid 59551:tid 59556] [client 4.178.176.82:50921] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dlu.php"] [unique_id "adTw3V7LN7Ubyqs-sVv9UgAAAYM"]
[Tue Apr 07 19:56:13.946816 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:60843] [client 4.178.176.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adTw3Q6uAY0QAy-8EEJiuAAAAFY"]
[Tue Apr 07 19:56:15.092767 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:54928] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Apr 07 19:56:15.190160 2026] [:error] [pid 59804:tid 59827] [client 4.178.176.82:60812] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Tue Apr 07 19:56:15.331010 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:54928] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Apr 07 19:56:15.429561 2026] [:error] [pid 59804:tid 59812] [client 4.178.176.82:60812] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Tue Apr 07 19:56:16.438075 2026] [:error] [pid 59804:tid 59830] [client 4.178.176.82:60812] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 07 19:56:16.568573 2026] [:error] [pid 37597:tid 37643] [client 4.178.176.82:54928] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Tue Apr 07 19:56:16.679820 2026] [:error] [pid 59804:tid 59819] [client 4.178.176.82:60812] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Tue Apr 07 19:56:17.012996 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:54928] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Tue Apr 07 19:56:17.268283 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:54928] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 07 19:56:17.351686 2026] [:error] [pid 59804:tid 59809] [client 4.178.176.82:60812] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw4XYVIXiPh5_eJTmf0wAAAgM"]
[Tue Apr 07 19:56:17.507950 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:54928] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "adTw4Q6uAY0QAy-8EEJi1QAAAFA"]
[Tue Apr 07 19:56:18.318139 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:56120] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw4k09Xv52u2xXGLALzAAAAMM"]
[Tue Apr 07 19:56:18.420068 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:59440] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "adTw4g6uAY0QAy-8EEJi2wAAAEo"]
[Tue Apr 07 19:56:18.975182 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:54276] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw4g6uAY0QAy-8EEJi3wAAAEE"]
[Tue Apr 07 19:56:19.458705 2026] [:error] [pid 59490:tid 59502] [client 4.178.176.82:9967] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "adTw40cw8OFbiUZ7Rx1lxgAAAUo"]
[Tue Apr 07 19:56:19.755439 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:10179] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw4009Xv52u2xXGLAL0gAAAMQ"]
[Tue Apr 07 19:56:20.070639 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:9921] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/403.php"] [unique_id "adTw5A6uAY0QAy-8EEJi6QAAAE8"]
[Tue Apr 07 19:56:20.599161 2026] [:error] [pid 59551:tid 59567] [client 4.178.176.82:61304] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw5F7LN7Ubyqs-sVv9XwAAAY4"]
[Tue Apr 07 19:56:20.788090 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:55489] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw5A6uAY0QAy-8EEJi8AAAAEE"]
[Tue Apr 07 19:56:21.153908 2026] [:error] [pid 12948:tid 12955] [client 4.178.176.82:47569] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw5cbeSPAN8LvMqsapDAAAAQQ"]
[Tue Apr 07 19:56:21.381358 2026] [:error] [pid 59804:tid 59811] [client 4.178.176.82:60826] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw5XYVIXiPh5_eJTmf1gAAAgU"]
[Tue Apr 07 19:56:22.010487 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:56104] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw5g6uAY0QAy-8EEJi_AAAAEE"]
[Tue Apr 07 19:56:22.064333 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:51350] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw5g6uAY0QAy-8EEJi_QAAAFg"]
[Tue Apr 07 19:56:22.618580 2026] [:error] [pid 37597:tid 37634] [client 4.178.176.82:54338] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tox.php"] [unique_id "adTw5g6uAY0QAy-8EEJjAgAAAEA"]
[Tue Apr 07 19:56:22.647922 2026] [:error] [pid 59551:tid 59575] [client 4.178.176.82:9603] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw5l7LN7Ubyqs-sVv9YQAAAZY"]
[Tue Apr 07 19:56:23.387973 2026] [:error] [pid 59490:tid 59499] [client 4.178.176.82:57387] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw50cw8OFbiUZ7Rx1lyAAAAUc"]
[Tue Apr 07 19:56:23.646122 2026] [:error] [pid 59551:tid 59571] [client 4.178.176.82:51377] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw517LN7Ubyqs-sVv9ZQAAAZI"]
[Tue Apr 07 19:56:24.293482 2026] [:error] [pid 59804:tid 59820] [client 4.178.176.82:57381] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw6HYVIXiPh5_eJTmf3AAAAg4"]
[Tue Apr 07 19:56:24.389300 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:60815] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw6E09Xv52u2xXGLAL5gAAANA"]
[Tue Apr 07 19:56:25.247642 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:49151] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw6Q6uAY0QAy-8EEJjEgAAAEo"]
[Tue Apr 07 19:56:25.381160 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:9959] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw6Q6uAY0QAy-8EEJjFAAAAE8"]
[Tue Apr 07 19:56:25.737651 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:61259] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTw6Q6uAY0QAy-8EEJjFgAAAFE"]
[Tue Apr 07 19:56:26.251524 2026] [:error] [pid 59551:tid 59573] [client 4.178.176.82:54285] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw6l7LN7Ubyqs-sVv9aAAAAZQ"]
[Tue Apr 07 19:56:26.334377 2026] [:error] [pid 59551:tid 59570] [client 4.178.176.82:46336] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw6l7LN7Ubyqs-sVv9aQAAAZE"]
[Tue Apr 07 19:56:26.723996 2026] [:error] [pid 12948:tid 12971] [client 4.178.176.82:54916] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw6sbeSPAN8LvMqsapDgAAARQ"]
[Tue Apr 07 19:56:26.945961 2026] [:error] [pid 59490:tid 59497] [client 4.178.176.82:56121] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw6kcw8OFbiUZ7Rx1lzgAAAUU"]
[Tue Apr 07 19:56:27.266816 2026] [:error] [pid 59551:tid 59557] [client 4.178.176.82:57400] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw617LN7Ubyqs-sVv9bQAAAYQ"]
[Tue Apr 07 19:56:27.616130 2026] [:error] [pid 59490:tid 59513] [client 4.178.176.82:54289] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw60cw8OFbiUZ7Rx1l0AAAAVU"]
[Tue Apr 07 19:56:27.745954 2026] [:error] [pid 59490:tid 59505] [client 4.178.176.82:9927] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTw60cw8OFbiUZ7Rx1l0wAAAU0"]
[Tue Apr 07 19:56:28.097216 2026] [:error] [pid 59660:tid 59683] [client 4.178.176.82:46363] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw7Dp3-oiX2o5bTswPUQAAAdU"]
[Tue Apr 07 19:56:28.227001 2026] [:error] [pid 59660:tid 59669] [client 4.178.176.82:10199] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw7Dp3-oiX2o5bTswPUgAAAcc"]
[Tue Apr 07 19:56:28.799796 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:61294] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw7E09Xv52u2xXGLAL-wAAANA"]
[Tue Apr 07 19:56:29.018368 2026] [:error] [pid 59804:tid 59809] [client 4.178.176.82:60397] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw7XYVIXiPh5_eJTmf4gAAAgM"]
[Tue Apr 07 19:56:29.294140 2026] [:error] [pid 59490:tid 59501] [client 4.178.176.82:57395] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw7Ucw8OFbiUZ7Rx1l2QAAAUk"]
[Tue Apr 07 19:56:29.688315 2026] [:error] [pid 59551:tid 59566] [client 4.178.176.82:60853] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw7V7LN7Ubyqs-sVv9cwAAAY0"]
[Tue Apr 07 19:56:29.880816 2026] [:error] [pid 59551:tid 59573] [client 4.178.176.82:9954] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTw7V7LN7Ubyqs-sVv9dgAAAZQ"]
[Tue Apr 07 19:56:30.350195 2026] [:error] [pid 59551:tid 59554] [client 4.178.176.82:56098] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw7l7LN7Ubyqs-sVv9ewAAAYE"]
[Tue Apr 07 19:56:30.609913 2026] [:error] [pid 37719:tid 37727] [client 4.178.176.82:51359] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw7k09Xv52u2xXGLAMAgAAAMU"]
[Tue Apr 07 19:56:31.211162 2026] [:error] [pid 12948:tid 12951] [client 4.178.176.82:50933] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw78beSPAN8LvMqsapEAAAAQA"]
[Tue Apr 07 19:56:31.981137 2026] [:error] [pid 12948:tid 12954] [client 4.178.176.82:46360] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw78beSPAN8LvMqsapEQAAAQM"]
[Tue Apr 07 19:56:32.447034 2026] [:error] [pid 59660:tid 59668] [client 4.178.176.82:49089] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw8Dp3-oiX2o5bTswPVAAAAcY"]
[Tue Apr 07 19:56:32.970028 2026] [:error] [pid 37596:tid 37610] [client 4.178.176.82:51348] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw8KpaAOZHEjRWjP2ZjwAAAAQ"]
[Tue Apr 07 19:56:33.153075 2026] [:error] [pid 59551:tid 59574] [client 4.178.176.82:57403] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw8V7LN7Ubyqs-sVv9hwAAAZU"]
[Tue Apr 07 19:56:34.379529 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:49150] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw8l7LN7Ubyqs-sVv9jAAAAYs"]
[Tue Apr 07 19:56:36.249970 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:59397] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTw9F7LN7Ubyqs-sVv9lAAAAZg"]
[Tue Apr 07 19:56:36.804335 2026] [:error] [pid 12948:tid 12970] [client 4.178.176.82:46373] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw9MbeSPAN8LvMqsapGAAAARM"]
[Tue Apr 07 19:56:36.850405 2026] [:error] [pid 59804:tid 59822] [client 4.178.176.82:54371] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw9HYVIXiPh5_eJTmf6wAAAhA"]
[Tue Apr 07 19:56:38.213064 2026] [:error] [pid 37719:tid 37732] [client 4.178.176.82:46341] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw9k09Xv52u2xXGLAMHwAAAMo"]
[Tue Apr 07 19:56:39.438776 2026] [:error] [pid 59804:tid 59806] [client 4.178.176.82:46367] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw93YVIXiPh5_eJTmf-AAAAgA"]
[Tue Apr 07 19:56:39.556296 2026] [:error] [pid 59804:tid 59807] [client 4.178.176.82:54350] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw93YVIXiPh5_eJTmf-wAAAgE"]
[Tue Apr 07 19:56:41.294747 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:54330] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTw-Q6uAY0QAy-8EEJjVwAAAE8"]
[Tue Apr 07 19:56:42.044070 2026] [:error] [pid 59804:tid 59818] [client 4.178.176.82:50890] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw-nYVIXiPh5_eJTmgAwAAAgw"]
[Tue Apr 07 19:56:42.672140 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:56119] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw-k09Xv52u2xXGLAMKwAAAMM"]
[Tue Apr 07 19:56:43.306983 2026] [:error] [pid 37719:tid 37739] [client 4.178.176.82:50939] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw-009Xv52u2xXGLAMMAAAANE"]
[Tue Apr 07 19:56:43.806695 2026] [:error] [pid 37598:tid 37677] [client 4.178.176.82:46356] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw--9g7q_cV2WhPayxcwAAAJA"]
[Tue Apr 07 19:56:44.503433 2026] [:error] [pid 37598:tid 37683] [client 4.178.176.82:61289] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw_O9g7q_cV2WhPayxeAAAAJY"]
[Tue Apr 07 19:56:44.703684 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:57352] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw_A6uAY0QAy-8EEJjagAAAEU"]
[Tue Apr 07 19:56:45.207741 2026] [:error] [pid 12948:tid 12957] [client 4.178.176.82:9944] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw_cbeSPAN8LvMqsapKwAAAQY"]
[Tue Apr 07 19:56:45.445523 2026] [:error] [pid 12948:tid 12954] [client 4.178.176.82:47604] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTw_cbeSPAN8LvMqsapLAAAAQM"]
[Tue Apr 07 19:56:46.048539 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:60842] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTw_k09Xv52u2xXGLAMOwAAAMM"]
[Tue Apr 07 19:56:46.212872 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:51385] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTw_k09Xv52u2xXGLAMPgAAANM"]
[Tue Apr 07 19:56:46.913130 2026] [:error] [pid 37719:tid 37739] [client 4.178.176.82:9631] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTw_k09Xv52u2xXGLAMRAAAANE"]
[Tue Apr 07 19:56:47.127909 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:54365] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTw_009Xv52u2xXGLAMRgAAANg"]
[Tue Apr 07 19:56:47.512592 2026] [:error] [pid 59551:tid 59572] [client 4.178.176.82:54943] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTw_17LN7Ubyqs-sVv9pQAAAZM"]
[Tue Apr 07 19:56:47.699285 2026] [:error] [pid 37598:tid 37672] [client 4.178.176.82:50305] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTw_-9g7q_cV2WhPayxewAAAIs"]
[Tue Apr 07 19:56:47.990112 2026] [:error] [pid 59804:tid 59815] [client 4.178.176.82:9962] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTw_3YVIXiPh5_eJTmgDQAAAgk"]
[Tue Apr 07 19:56:48.199547 2026] [:error] [pid 59551:tid 59560] [client 4.178.176.82:60830] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTxAF7LN7Ubyqs-sVv9pwAAAYc"]
[Tue Apr 07 19:56:48.713731 2026] [:error] [pid 37598:tid 37665] [client 4.178.176.82:51340] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAO9g7q_cV2WhPayxfgAAAIQ"]
[Tue Apr 07 19:56:48.845247 2026] [:error] [pid 59804:tid 59806] [client 4.178.176.82:47610] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAHYVIXiPh5_eJTmgDwAAAgA"]
[Tue Apr 07 19:56:49.256930 2026] [:error] [pid 59804:tid 59821] [client 4.178.176.82:60809] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAXYVIXiPh5_eJTmgFQAAAg8"]
[Tue Apr 07 19:56:49.556544 2026] [:error] [pid 59804:tid 59817] [client 4.178.176.82:9958] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAXYVIXiPh5_eJTmgFwAAAgs"]
[Tue Apr 07 19:56:50.033748 2026] [:error] [pid 59551:tid 59563] [client 4.178.176.82:54379] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAl7LN7Ubyqs-sVv9qgAAAYo"]
[Tue Apr 07 19:56:50.097998 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:49126] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAk09Xv52u2xXGLAMVQAAANA"]
[Tue Apr 07 19:56:50.607576 2026] [:error] [pid 59551:tid 59576] [client 4.178.176.82:60847] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAl7LN7Ubyqs-sVv9rgAAAZc"]
[Tue Apr 07 19:56:50.973226 2026] [:error] [pid 59551:tid 59567] [client 4.178.176.82:54969] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTxAl7LN7Ubyqs-sVv9sQAAAY4"]
[Tue Apr 07 19:56:51.382800 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:46380] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxA17LN7Ubyqs-sVv9tAAAAYI"]
[Tue Apr 07 19:56:51.564429 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:61255] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxA17LN7Ubyqs-sVv9tQAAAYs"]
[Tue Apr 07 19:56:51.949621 2026] [:error] [pid 59551:tid 59560] [client 4.178.176.82:50310] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxA17LN7Ubyqs-sVv9tgAAAYc"]
[Tue Apr 07 19:56:52.107765 2026] [:error] [pid 37719:tid 37742] [client 4.178.176.82:47584] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxBE09Xv52u2xXGLAMYgAAANQ"]
[Tue Apr 07 19:56:52.433258 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:9660] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxBE09Xv52u2xXGLAMZgAAANA"]
[Tue Apr 07 19:56:52.613708 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:9922] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxBE09Xv52u2xXGLAMaAAAAM0"]
[Tue Apr 07 19:56:52.959714 2026] [:error] [pid 37719:tid 37727] [client 4.178.176.82:54929] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxBE09Xv52u2xXGLAMagAAAMU"]
[Tue Apr 07 19:56:53.396822 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:56123] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTxBU09Xv52u2xXGLAMcAAAAMM"]
[Tue Apr 07 19:56:53.580393 2026] [:error] [pid 37719:tid 37731] [client 4.178.176.82:61295] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxBU09Xv52u2xXGLAMcQAAAMk"]
[Tue Apr 07 19:56:54.061890 2026] [:error] [pid 37598:tid 37661] [client 4.178.176.82:54292] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxBu9g7q_cV2WhPayxfwAAAIA"]
[Tue Apr 07 19:56:54.240807 2026] [:error] [pid 37719:tid 37742] [client 4.178.176.82:9649] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxBk09Xv52u2xXGLAMdwAAANQ"]
[Tue Apr 07 19:56:54.568830 2026] [:error] [pid 37598:tid 37662] [client 4.178.176.82:47585] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxBu9g7q_cV2WhPayxgQAAAIE"]
[Tue Apr 07 19:56:54.844860 2026] [:error] [pid 59660:tid 59677] [client 4.178.176.82:54917] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxBjp3-oiX2o5bTswPXQAAAc8"]
[Tue Apr 07 19:56:55.061639 2026] [:error] [pid 37598:tid 37671] [client 4.178.176.82:46399] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxB-9g7q_cV2WhPayxgwAAAIo"]
[Tue Apr 07 19:56:55.510953 2026] [:error] [pid 59551:tid 59556] [client 4.178.176.82:9941] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxB17LN7Ubyqs-sVv9vAAAAYM"]
[Tue Apr 07 19:56:55.582709 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:50880] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTxB17LN7Ubyqs-sVv9vQAAAYg"]
[Tue Apr 07 19:56:56.010039 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:46396] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxCF7LN7Ubyqs-sVv9vgAAAYI"]
[Tue Apr 07 19:56:56.125368 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:56106] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxCF7LN7Ubyqs-sVv9wAAAAYs"]
[Tue Apr 07 19:56:56.620416 2026] [:error] [pid 37598:tid 37677] [client 4.178.176.82:54366] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxCO9g7q_cV2WhPayxhQAAAJA"]
[Tue Apr 07 19:56:56.829486 2026] [:error] [pid 37719:tid 37724] [client 4.178.176.82:9607] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxCE09Xv52u2xXGLAMgwAAAMI"]
[Tue Apr 07 19:56:57.710956 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:56084] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxCQ6uAY0QAy-8EEJjbAAAAEc"]
[Tue Apr 07 19:56:58.169935 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:54918] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxCg6uAY0QAy-8EEJjbgAAAEE"]
[Tue Apr 07 19:56:58.422281 2026] [:error] [pid 59551:tid 59556] [client 4.178.176.82:50941] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxCl7LN7Ubyqs-sVv9xwAAAYM"]
[Tue Apr 07 19:56:58.999146 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:47567] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxCg6uAY0QAy-8EEJjcQAAAEs"]
[Tue Apr 07 19:56:59.336950 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:60837] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTxC009Xv52u2xXGLAMhgAAAMc"]
[Tue Apr 07 19:56:59.528458 2026] [:error] [pid 37598:tid 37663] [client 4.178.176.82:60851] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxC-9g7q_cV2WhPayxiAAAAII"]
[Tue Apr 07 19:57:00.042632 2026] [:error] [pid 59551:tid 59570] [client 4.178.176.82:46342] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxDF7LN7Ubyqs-sVv9zgAAAZE"]
[Tue Apr 07 19:57:00.528051 2026] [:error] [pid 59551:tid 59553] [client 4.178.176.82:54939] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxDF7LN7Ubyqs-sVv9zwAAAYA"]
[Tue Apr 07 19:57:00.793637 2026] [:error] [pid 37598:tid 37685] [client 4.178.176.82:49107] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxDO9g7q_cV2WhPayxiwAAAJg"]
[Tue Apr 07 19:57:01.041443 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:54921] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxDQ6uAY0QAy-8EEJjdgAAAEU"]
[Tue Apr 07 19:57:01.498205 2026] [:error] [pid 59660:tid 59673] [client 4.178.176.82:51362] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxDTp3-oiX2o5bTswPYgAAAcs"]
[Tue Apr 07 19:57:01.659961 2026] [:error] [pid 59804:tid 59829] [client 4.178.176.82:50356] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxDXYVIXiPh5_eJTmgHAAAAhc"]
[Tue Apr 07 19:57:02.134398 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:54360] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxDg6uAY0QAy-8EEJjeAAAAFU"]
[Tue Apr 07 19:57:02.170189 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:54354] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxDg6uAY0QAy-8EEJjeQAAAE8"]
[Tue Apr 07 19:57:02.652918 2026] [:error] [pid 12948:tid 12965] [client 4.178.176.82:57407] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxDsbeSPAN8LvMqsapMAAAAQ4"]
[Tue Apr 07 19:57:02.699281 2026] [:error] [pid 59490:tid 59494] [client 4.178.176.82:57364] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTxDkcw8OFbiUZ7Rx1l8QAAAUI"]
[Tue Apr 07 19:57:03.235250 2026] [:error] [pid 12948:tid 12966] [client 4.178.176.82:61271] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxD8beSPAN8LvMqsapMgAAAQ8"]
[Tue Apr 07 19:57:03.236425 2026] [:error] [pid 59490:tid 59509] [client 4.178.176.82:50349] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxD0cw8OFbiUZ7Rx1l8gAAAVE"]
[Tue Apr 07 19:57:03.787093 2026] [:error] [pid 59660:tid 59663] [client 4.178.176.82:9983] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxDzp3-oiX2o5bTswPZAAAAcE"]
[Tue Apr 07 19:57:03.788681 2026] [:error] [pid 59660:tid 59662] [client 4.178.176.82:49114] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxDzp3-oiX2o5bTswPZQAAAcA"]
[Tue Apr 07 19:57:04.296621 2026] [:error] [pid 59660:tid 59667] [client 4.178.176.82:61298] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxEDp3-oiX2o5bTswPaAAAAcU"]
[Tue Apr 07 19:57:04.389201 2026] [:error] [pid 59804:tid 59814] [client 4.178.176.82:51371] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxEHYVIXiPh5_eJTmgHQAAAgg"]
[Tue Apr 07 19:57:04.868849 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:9936] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTxEE09Xv52u2xXGLAMiAAAAMM"]
[Tue Apr 07 19:57:04.919686 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:60862] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxEA6uAY0QAy-8EEJjegAAAEc"]
[Tue Apr 07 19:57:05.351984 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:60811] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxEQ6uAY0QAy-8EEJjfQAAAFg"]
[Tue Apr 07 19:57:05.415865 2026] [:error] [pid 37597:tid 37653] [client 4.178.176.82:46346] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxEQ6uAY0QAy-8EEJjfgAAAFM"]
[Tue Apr 07 19:57:05.955071 2026] [:error] [pid 59660:tid 59672] [client 4.178.176.82:57367] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxETp3-oiX2o5bTswPbQAAAco"]
[Tue Apr 07 19:57:06.012802 2026] [:error] [pid 59660:tid 59668] [client 4.178.176.82:49111] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxEjp3-oiX2o5bTswPbgAAAcY"]
[Tue Apr 07 19:57:06.499054 2026] [:error] [pid 59660:tid 59671] [client 4.178.176.82:54305] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxEjp3-oiX2o5bTswPbwAAAck"]
[Tue Apr 07 19:57:06.501950 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:49110] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxEg6uAY0QAy-8EEJjhAAAAEo"]
[Tue Apr 07 19:57:07.023900 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:60805] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTxEw6uAY0QAy-8EEJjhQAAAEU"]
[Tue Apr 07 19:57:07.360809 2026] [:error] [pid 37597:tid 37647] [client 4.178.176.82:54967] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxEw6uAY0QAy-8EEJjiAAAAE0"]
[Tue Apr 07 19:57:07.780494 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:54913] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxEw6uAY0QAy-8EEJjjAAAAEc"]
[Tue Apr 07 19:57:08.247628 2026] [:error] [pid 37598:tid 37672] [client 4.178.176.82:60813] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxFO9g7q_cV2WhPayxkAAAAIs"]
[Tue Apr 07 19:57:08.493064 2026] [:error] [pid 59804:tid 59826] [client 4.178.176.82:50317] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxFHYVIXiPh5_eJTmgIAAAAhQ"]
[Tue Apr 07 19:57:09.011827 2026] [:error] [pid 37597:tid 37638] [client 4.178.176.82:61303] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxFQ6uAY0QAy-8EEJjkAAAAEQ"]
[Tue Apr 07 19:57:09.060136 2026] [:error] [pid 12948:tid 12967] [client 4.178.176.82:9952] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxFcbeSPAN8LvMqsapNgAAARA"]
[Tue Apr 07 19:57:09.613448 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:51366] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTxFQ6uAY0QAy-8EEJjlAAAAEo"]
[Tue Apr 07 19:57:09.621174 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:9628] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxFQ6uAY0QAy-8EEJjlQAAAEU"]
[Tue Apr 07 19:57:10.153542 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:61297] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxFg6uAY0QAy-8EEJjmQAAAEM"]
[Tue Apr 07 19:57:10.174522 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:47609] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxFg6uAY0QAy-8EEJjmgAAAFE"]
[Tue Apr 07 19:57:10.806490 2026] [:error] [pid 37719:tid 37728] [client 4.178.176.82:55488] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxFk09Xv52u2xXGLAMjwAAAMY"]
[Tue Apr 07 19:57:10.855309 2026] [:error] [pid 37598:tid 37665] [client 4.178.176.82:56079] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxFu9g7q_cV2WhPayxlAAAAIQ"]
[Tue Apr 07 19:57:11.307554 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:51364] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxF009Xv52u2xXGLAMkwAAAMc"]
[Tue Apr 07 19:57:11.533333 2026] [:error] [pid 37597:tid 37638] [client 4.178.176.82:62670] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxFw6uAY0QAy-8EEJjnQAAAEQ"]
[Tue Apr 07 19:57:11.973025 2026] [:error] [pid 37598:tid 37675] [client 4.178.176.82:60820] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxF-9g7q_cV2WhPayxlgAAAI4"]
[Tue Apr 07 19:57:12.491614 2026] [:error] [pid 59551:tid 59568] [client 4.178.176.82:54384] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adTxGF7LN7Ubyqs-sVv93gAAAY8"]
[Tue Apr 07 19:57:12.752302 2026] [:error] [pid 37597:tid 37648] [client 4.178.176.82:60844] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxGA6uAY0QAy-8EEJjpAAAAE4"]
[Tue Apr 07 19:57:13.028346 2026] [:error] [pid 37598:tid 37671] [client 4.178.176.82:61292] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxGe9g7q_cV2WhPayxmAAAAIo"]
[Tue Apr 07 19:57:14.088505 2026] [:error] [pid 59551:tid 59556] [client 4.178.176.82:46384] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxGl7LN7Ubyqs-sVv93wAAAYM"]
[Tue Apr 07 19:57:14.115086 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:47576] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "adTxGl7LN7Ubyqs-sVv94AAAAZA"]
[Tue Apr 07 19:57:14.799272 2026] [:error] [pid 59551:tid 59573] [client 4.178.176.82:10236] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxGl7LN7Ubyqs-sVv95AAAAZQ"]
[Tue Apr 07 19:57:15.124592 2026] [:error] [pid 59551:tid 59557] [client 4.178.176.82:54359] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "adTxG17LN7Ubyqs-sVv95gAAAYQ"]
[Tue Apr 07 19:57:15.495173 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:56109] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php"] [unique_id "adTxG17LN7Ubyqs-sVv95wAAAZg"]
[Tue Apr 07 19:57:15.942465 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:50345] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "adTxGw6uAY0QAy-8EEJjqgAAAFE"]
[Tue Apr 07 19:57:16.123764 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:56088] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "adTxHA6uAY0QAy-8EEJjqwAAAEc"]
[Tue Apr 07 19:57:16.637046 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:46385] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "adTxHA6uAY0QAy-8EEJjrgAAAEo"]
[Tue Apr 07 19:57:16.757708 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:9601] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "adTxHE09Xv52u2xXGLAMmgAAANM"]
[Tue Apr 07 19:57:17.321888 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:54387] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Apr 07 19:57:17.444583 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:54956] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Tue Apr 07 19:57:17.559551 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:54387] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Tue Apr 07 19:57:17.706354 2026] [:error] [pid 37719:tid 37734] [client 4.178.176.82:54956] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Tue Apr 07 19:57:17.840768 2026] [:error] [pid 37597:tid 37646] [client 4.178.176.82:54387] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Tue Apr 07 19:57:18.003967 2026] [:error] [pid 37719:tid 37728] [client 4.178.176.82:54956] File does not exist: /usr/local/apache/htdocs/suspended-page/mo.php
[Tue Apr 07 19:57:18.085325 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:54387] File does not exist: /usr/local/apache/htdocs/suspended-page/mo.php
[Tue Apr 07 19:57:18.243875 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:54956] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 07 19:57:18.324095 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:54387] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 07 19:57:18.482715 2026] [:error] [pid 37719:tid 37727] [client 4.178.176.82:54956] File does not exist: /usr/local/apache/htdocs/suspended-page/inde.php
[Tue Apr 07 19:57:18.572479 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:54387] File does not exist: /usr/local/apache/htdocs/suspended-page/inde.php
[Tue Apr 07 19:57:18.717996 2026] [:error] [pid 37719:tid 37733] [client 4.178.176.82:54956] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxHk09Xv52u2xXGLAMpAAAAMs"]
[Tue Apr 07 19:57:18.904287 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:54387] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxHg6uAY0QAy-8EEJjwAAAAEE"]
[Tue Apr 07 19:57:19.525749 2026] [:error] [pid 37719:tid 37736] [client 4.178.176.82:9647] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxH009Xv52u2xXGLAMpQAAAM4"]
[Tue Apr 07 19:57:19.680982 2026] [:error] [pid 37719:tid 37745] [client 4.178.176.82:59416] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxH009Xv52u2xXGLAMpwAAANc"]
[Tue Apr 07 19:57:20.167010 2026] [:error] [pid 37719:tid 37722] [client 4.178.176.82:9615] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxIE09Xv52u2xXGLAMqAAAAMA"]
[Tue Apr 07 19:57:20.604890 2026] [:error] [pid 59804:tid 59821] [client 4.178.176.82:50335] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxIHYVIXiPh5_eJTmgIwAAAg8"]
[Tue Apr 07 19:57:21.802872 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:54938] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxIU09Xv52u2xXGLAMqwAAANM"]
[Tue Apr 07 19:57:22.460966 2026] [:error] [pid 59804:tid 59810] [client 4.178.176.82:47607] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTxInYVIXiPh5_eJTmgKAAAAgQ"]
[Tue Apr 07 19:57:22.867910 2026] [:error] [pid 12948:tid 12970] [client 4.178.176.82:61258] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxIsbeSPAN8LvMqsapPwAAARM"]
[Tue Apr 07 19:57:23.336850 2026] [:error] [pid 59551:tid 59554] [client 4.178.176.82:44845] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxI17LN7Ubyqs-sVv9-gAAAYE"]
[Tue Apr 07 19:57:23.733959 2026] [:error] [pid 12948:tid 12964] [client 4.178.176.82:55508] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxI8beSPAN8LvMqsapQgAAAQ0"]
[Tue Apr 07 19:57:24.025154 2026] [:error] [pid 12948:tid 12971] [client 4.178.176.82:54931] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxJMbeSPAN8LvMqsapRAAAARQ"]
[Tue Apr 07 19:57:24.543060 2026] [:error] [pid 59804:tid 59814] [client 4.178.176.82:60817] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxJHYVIXiPh5_eJTmgKwAAAgg"]
[Tue Apr 07 19:57:24.597802 2026] [:error] [pid 37596:tid 37610] [client 4.178.176.82:61280] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxJKpaAOZHEjRWjP2Z1AAAAAQ"]
[Tue Apr 07 19:57:25.058567 2026] [:error] [pid 37719:tid 37728] [client 4.178.176.82:46389] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxJU09Xv52u2xXGLAMrgAAAMY"]
[Tue Apr 07 19:57:25.091934 2026] [:error] [pid 59804:tid 59820] [client 4.178.176.82:54326] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTxJXYVIXiPh5_eJTmgLQAAAg4"]
[Tue Apr 07 19:57:25.636987 2026] [:error] [pid 59804:tid 59826] [client 4.178.176.82:54354] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJXYVIXiPh5_eJTmgLwAAAhQ"]
[Tue Apr 07 19:57:25.724511 2026] [:error] [pid 37719:tid 37733] [client 4.178.176.82:46366] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJU09Xv52u2xXGLAMswAAAMs"]
[Tue Apr 07 19:57:26.210049 2026] [:error] [pid 37719:tid 37739] [client 4.178.176.82:47552] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJk09Xv52u2xXGLAMtgAAANE"]
[Tue Apr 07 19:57:26.511568 2026] [:error] [pid 59490:tid 59512] [client 4.178.176.82:50342] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJkcw8OFbiUZ7Rx1l9wAAAVQ"]
[Tue Apr 07 19:57:26.721984 2026] [:error] [pid 59804:tid 59825] [client 4.178.176.82:61300] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJnYVIXiPh5_eJTmgMAAAAhM"]
[Tue Apr 07 19:57:27.207503 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:46383] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJ009Xv52u2xXGLAMuwAAAMM"]
[Tue Apr 07 19:57:27.256004 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:54352] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJ009Xv52u2xXGLAMvQAAANM"]
[Tue Apr 07 19:57:27.800306 2026] [:error] [pid 37596:tid 37629] [client 4.178.176.82:9954] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTxJ6paAOZHEjRWjP2Z1QAAABc"]
[Tue Apr 07 19:57:27.887704 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:57397] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxJw6uAY0QAy-8EEJj2AAAAFQ"]
[Tue Apr 07 19:57:28.374140 2026] [:error] [pid 59660:tid 59664] [client 4.178.176.82:60831] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxKDp3-oiX2o5bTswPdQAAAcI"]
[Tue Apr 07 19:57:28.552996 2026] [:error] [pid 59660:tid 59682] [client 4.178.176.82:51351] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxKDp3-oiX2o5bTswPdgAAAdQ"]
[Tue Apr 07 19:57:28.855869 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:55489] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxKE09Xv52u2xXGLAMwAAAAMc"]
[Tue Apr 07 19:57:29.049784 2026] [:error] [pid 37598:tid 37676] [client 4.178.176.82:10136] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxKe9g7q_cV2WhPayxpAAAAI8"]
[Tue Apr 07 19:57:29.329602 2026] [:error] [pid 37598:tid 37677] [client 4.178.176.82:9975] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxKe9g7q_cV2WhPayxpQAAAJA"]
[Tue Apr 07 19:57:29.559757 2026] [:error] [pid 59660:tid 59674] [client 4.178.176.82:49103] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxKTp3-oiX2o5bTswPeAAAAcw"]
[Tue Apr 07 19:57:29.957150 2026] [:error] [pid 37598:tid 37669] [client 4.178.176.82:10207] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTxKe9g7q_cV2WhPayxpwAAAIg"]
[Tue Apr 07 19:57:30.044936 2026] [:error] [pid 59551:tid 59563] [client 4.178.176.82:50350] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxKl7LN7Ubyqs-sVv-DwAAAYo"]
[Tue Apr 07 19:57:30.509420 2026] [:error] [pid 12948:tid 12959] [client 4.178.176.82:9605] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxKsbeSPAN8LvMqsapSQAAAQg"]
[Tue Apr 07 19:57:30.745610 2026] [:error] [pid 37719:tid 37742] [client 4.178.176.82:54317] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxKk09Xv52u2xXGLAMwwAAANQ"]
[Tue Apr 07 19:57:31.177391 2026] [:error] [pid 37719:tid 37736] [client 4.178.176.82:54341] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxK009Xv52u2xXGLAMxwAAAM4"]
[Tue Apr 07 19:57:31.399731 2026] [:error] [pid 37719:tid 37743] [client 4.178.176.82:56083] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxK009Xv52u2xXGLAMygAAANU"]
[Tue Apr 07 19:57:31.830063 2026] [:error] [pid 37598:tid 37683] [client 4.178.176.82:51367] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxK-9g7q_cV2WhPayxqAAAAJY"]
[Tue Apr 07 19:57:32.002332 2026] [:error] [pid 37719:tid 37728] [client 4.178.176.82:54279] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxLE09Xv52u2xXGLAMzQAAAMY"]
[Tue Apr 07 19:57:32.373998 2026] [:error] [pid 37598:tid 37663] [client 4.178.176.82:49104] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTxLO9g7q_cV2WhPayxqwAAAII"]
[Tue Apr 07 19:57:32.508509 2026] [:error] [pid 37596:tid 37621] [client 4.178.176.82:49143] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLKpaAOZHEjRWjP2Z1gAAAA8"]
[Tue Apr 07 19:57:33.023981 2026] [:error] [pid 37598:tid 37662] [client 4.178.176.82:44839] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLe9g7q_cV2WhPayxtgAAAIE"]
[Tue Apr 07 19:57:33.063932 2026] [:error] [pid 37719:tid 37730] [client 4.178.176.82:61279] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLU09Xv52u2xXGLAM0AAAAMg"]
[Tue Apr 07 19:57:33.532095 2026] [:error] [pid 59551:tid 59554] [client 4.178.176.82:56093] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLV7LN7Ubyqs-sVv-EwAAAYE"]
[Tue Apr 07 19:57:33.629308 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:51373] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLQ6uAY0QAy-8EEJj9AAAAEE"]
[Tue Apr 07 19:57:34.059903 2026] [:error] [pid 37719:tid 37744] [client 4.178.176.82:56076] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLk09Xv52u2xXGLAM1QAAANY"]
[Tue Apr 07 19:57:34.206092 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:54923] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLl7LN7Ubyqs-sVv-FAAAAYg"]
[Tue Apr 07 19:57:34.773787 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:49111] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxLk09Xv52u2xXGLAM2wAAAMQ"]
[Tue Apr 07 19:57:34.962659 2026] [:error] [pid 37719:tid 37736] [client 4.178.176.82:59396] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTxLk09Xv52u2xXGLAM3QAAAM4"]
[Tue Apr 07 19:57:35.407366 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:44812] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxL009Xv52u2xXGLAM4QAAANg"]
[Tue Apr 07 19:57:35.800755 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:49127] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxLw6uAY0QAy-8EEJkAQAAAFE"]
[Tue Apr 07 19:57:35.921971 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:54283] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxLw6uAY0QAy-8EEJkAgAAAFY"]
[Tue Apr 07 19:57:36.445105 2026] [:error] [pid 37596:tid 37627] [client 4.178.176.82:57356] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxMKpaAOZHEjRWjP2Z1wAAABU"]
[Tue Apr 07 19:57:36.477961 2026] [:error] [pid 37596:tid 37628] [client 4.178.176.82:49117] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxMKpaAOZHEjRWjP2Z2AAAABY"]
[Tue Apr 07 19:57:37.198165 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:46388] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxMQ6uAY0QAy-8EEJkCgAAAEE"]
[Tue Apr 07 19:57:37.219391 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:47602] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxMQ6uAY0QAy-8EEJkCwAAAFg"]
[Tue Apr 07 19:57:37.792686 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:10229] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxMQ6uAY0QAy-8EEJkDwAAAFU"]
[Tue Apr 07 19:57:37.916229 2026] [:error] [pid 59660:tid 59679] [client 4.178.176.82:54949] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxMTp3-oiX2o5bTswPgAAAAdE"]
[Tue Apr 07 19:57:38.396199 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:9611] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxMl7LN7Ubyqs-sVv-IAAAAZg"]
[Tue Apr 07 19:57:38.514713 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:9947] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxMl7LN7Ubyqs-sVv-IwAAAYs"]
[Tue Apr 07 19:57:38.952557 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:50908] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxMg6uAY0QAy-8EEJkEgAAAEM"]
[Tue Apr 07 19:57:39.267249 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:49112] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxMw6uAY0QAy-8EEJkFQAAAEE"]
[Tue Apr 07 19:57:39.453340 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:54311] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxMw6uAY0QAy-8EEJkFgAAAFg"]
[Tue Apr 07 19:57:39.934175 2026] [:error] [pid 59551:tid 59568] [client 4.178.176.82:9949] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxM17LN7Ubyqs-sVv-KQAAAY8"]
[Tue Apr 07 19:57:40.084741 2026] [:error] [pid 59551:tid 59572] [client 4.178.176.82:51360] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxNF7LN7Ubyqs-sVv-KgAAAZM"]
[Tue Apr 07 19:57:40.491193 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:50915] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTxNA6uAY0QAy-8EEJkGgAAAFU"]
[Tue Apr 07 19:57:40.578572 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:9645] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxNA6uAY0QAy-8EEJkHAAAAFA"]
[Tue Apr 07 19:57:41.021122 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:60821] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxNQ6uAY0QAy-8EEJkIAAAAEs"]
[Tue Apr 07 19:57:41.115058 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:57399] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxNQ6uAY0QAy-8EEJkIgAAAE8"]
[Tue Apr 07 19:57:41.567151 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:54964] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxNQ6uAY0QAy-8EEJkJQAAAFY"]
[Tue Apr 07 19:57:41.987985 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:49141] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxNQ6uAY0QAy-8EEJkKgAAAFI"]
[Tue Apr 07 19:57:42.355286 2026] [:error] [pid 59660:tid 59669] [client 4.178.176.82:54306] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxNjp3-oiX2o5bTswPggAAAcc"]
[Tue Apr 07 19:57:42.506202 2026] [:error] [pid 59660:tid 59681] [client 4.178.176.82:54361] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxNjp3-oiX2o5bTswPgwAAAdM"]
[Tue Apr 07 19:57:42.905649 2026] [:error] [pid 37719:tid 37724] [client 4.178.176.82:61310] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTxNk09Xv52u2xXGLAM5QAAAMI"]
[Tue Apr 07 19:57:43.221174 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:54398] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxN009Xv52u2xXGLAM5gAAANA"]
[Tue Apr 07 19:57:43.386888 2026] [:error] [pid 37597:tid 37653] [client 4.178.176.82:9606] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxNw6uAY0QAy-8EEJkLwAAAFM"]
[Tue Apr 07 19:57:43.880912 2026] [:error] [pid 37598:tid 37674] [client 4.178.176.82:61268] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxN-9g7q_cV2WhPayxugAAAI0"]
[Tue Apr 07 19:57:43.953759 2026] [:error] [pid 59551:tid 59576] [client 4.178.176.82:47556] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxN17LN7Ubyqs-sVv-NwAAAZc"]
[Tue Apr 07 19:57:44.517654 2026] [:error] [pid 59551:tid 59562] [client 4.178.176.82:50940] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxOF7LN7Ubyqs-sVv-OwAAAYk"]
[Tue Apr 07 19:57:44.810694 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:54337] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxOF7LN7Ubyqs-sVv-PAAAAZg"]
[Tue Apr 07 19:57:45.252693 2026] [:error] [pid 37719:tid 37733] [client 4.178.176.82:50328] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxOU09Xv52u2xXGLAM7gAAAMs"]
[Tue Apr 07 19:57:45.630159 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:50314] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTxOU09Xv52u2xXGLAM8QAAANg"]
[Tue Apr 07 19:57:45.832435 2026] [:error] [pid 37597:tid 37647] [client 4.178.176.82:50930] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxOQ6uAY0QAy-8EEJkNgAAAE0"]
[Tue Apr 07 19:57:46.542805 2026] [:error] [pid 37598:tid 37666] [client 4.178.176.82:50326] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxOu9g7q_cV2WhPayxuwAAAIU"]
[Tue Apr 07 19:57:46.906842 2026] [:error] [pid 59551:tid 59576] [client 4.178.176.82:9643] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxOl7LN7Ubyqs-sVv-QAAAAZc"]
[Tue Apr 07 19:57:47.427384 2026] [:error] [pid 37598:tid 37678] [client 4.178.176.82:46386] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxO-9g7q_cV2WhPayxvQAAAJE"]
[Tue Apr 07 19:57:47.747903 2026] [:error] [pid 12948:tid 12962] [client 4.178.176.82:46370] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxO8beSPAN8LvMqsapTwAAAQs"]
[Tue Apr 07 19:57:48.164091 2026] [:error] [pid 12948:tid 12961] [client 4.178.176.82:10180] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxPMbeSPAN8LvMqsapUAAAAQo"]
[Tue Apr 07 19:57:48.254971 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:56101] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxPF7LN7Ubyqs-sVv-SQAAAZA"]
[Tue Apr 07 19:57:48.635180 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:49141] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTxPF7LN7Ubyqs-sVv-TQAAAYg"]
[Tue Apr 07 19:57:48.905137 2026] [:error] [pid 12948:tid 12968] [client 4.178.176.82:60804] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxPMbeSPAN8LvMqsapUwAAARE"]
[Tue Apr 07 19:57:49.143945 2026] [:error] [pid 12948:tid 12972] [client 4.178.176.82:46338] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxPcbeSPAN8LvMqsapVAAAARU"]
[Tue Apr 07 19:57:49.460945 2026] [:error] [pid 37596:tid 37619] [client 4.178.176.82:54971] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxPapaAOZHEjRWjP2Z3QAAAA0"]
[Tue Apr 07 19:57:49.752006 2026] [:error] [pid 37719:tid 37730] [client 4.178.176.82:50887] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxPU09Xv52u2xXGLAM9gAAAMg"]
[Tue Apr 07 19:57:50.187720 2026] [:error] [pid 59490:tid 59492] [client 4.178.176.82:57378] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxPkcw8OFbiUZ7Rx1mAgAAAUA"]
[Tue Apr 07 19:57:50.439154 2026] [:error] [pid 59490:tid 59497] [client 4.178.176.82:50355] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxPkcw8OFbiUZ7Rx1mAwAAAUU"]
[Tue Apr 07 19:57:50.925119 2026] [:error] [pid 59660:tid 59670] [client 4.178.176.82:59439] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxPjp3-oiX2o5bTswPhwAAAcg"]
[Tue Apr 07 19:57:51.325197 2026] [:error] [pid 59660:tid 59684] [client 4.178.176.82:56081] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTxPzp3-oiX2o5bTswPiQAAAdY"]
[Tue Apr 07 19:57:51.638977 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:49105] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxPw6uAY0QAy-8EEJkPgAAAFU"]
[Tue Apr 07 19:57:52.163358 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:47587] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxQA6uAY0QAy-8EEJkPwAAAFA"]
[Tue Apr 07 19:57:52.617409 2026] [:error] [pid 37598:tid 37662] [client 4.178.176.82:47563] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxQO9g7q_cV2WhPayxwAAAAIE"]
[Tue Apr 07 19:57:53.100957 2026] [:error] [pid 37598:tid 37665] [client 4.178.176.82:57370] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxQe9g7q_cV2WhPayxwQAAAIQ"]
[Tue Apr 07 19:57:53.687215 2026] [:error] [pid 12948:tid 12973] [client 4.178.176.82:44849] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxQcbeSPAN8LvMqsapYAAAARY"]
[Tue Apr 07 19:57:54.490297 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:10226] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxQl7LN7Ubyqs-sVv-VAAAAZg"]
[Tue Apr 07 19:57:54.627362 2026] [:error] [pid 59551:tid 59558] [client 4.178.176.82:51375] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxQl7LN7Ubyqs-sVv-VQAAAYU"]
[Tue Apr 07 19:57:55.444462 2026] [:error] [pid 59551:tid 59557] [client 4.178.176.82:51369] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTxQ17LN7Ubyqs-sVv-WgAAAYQ"]
[Tue Apr 07 19:57:55.607764 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:56091] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxQ17LN7Ubyqs-sVv-WwAAAZA"]
[Tue Apr 07 19:57:56.268219 2026] [:error] [pid 12948:tid 12957] [client 4.178.176.82:9657] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxRMbeSPAN8LvMqsapbAAAAQY"]
[Tue Apr 07 19:57:56.318361 2026] [:error] [pid 12948:tid 12967] [client 4.178.176.82:50901] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxRMbeSPAN8LvMqsapbgAAARA"]
[Tue Apr 07 19:57:56.883333 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:51391] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxRA6uAY0QAy-8EEJkQwAAAEc"]
[Tue Apr 07 19:57:57.116082 2026] [:error] [pid 12948:tid 12960] [client 4.178.176.82:57365] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxRcbeSPAN8LvMqsapdgAAAQk"]
[Tue Apr 07 19:57:57.583155 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:50362] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxRU09Xv52u2xXGLANAQAAAMM"]
[Tue Apr 07 19:57:57.655412 2026] [:error] [pid 59804:tid 59825] [client 4.178.176.82:60863] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxRXYVIXiPh5_eJTmgPwAAAhM"]
[Tue Apr 07 19:57:58.378041 2026] [:error] [pid 37719:tid 37732] [client 4.178.176.82:50889] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxRk09Xv52u2xXGLANAwAAAMo"]
[Tue Apr 07 19:57:58.406457 2026] [:error] [pid 37719:tid 37723] [client 4.178.176.82:63174] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ton.php"] [unique_id "adTxRk09Xv52u2xXGLANBAAAAME"]
[Tue Apr 07 19:57:58.928650 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:51344] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxRk09Xv52u2xXGLANCAAAAM0"]
[Tue Apr 07 19:57:58.973134 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:54380] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxRk09Xv52u2xXGLANCQAAAMQ"]
[Tue Apr 07 19:57:59.520367 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:59395] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxR009Xv52u2xXGLANCwAAAMc"]
[Tue Apr 07 19:57:59.700125 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:46337] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxR009Xv52u2xXGLANDAAAANg"]
[Tue Apr 07 19:58:00.133026 2026] [:error] [pid 37719:tid 37740] [client 4.178.176.82:50361] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxSE09Xv52u2xXGLANDwAAANI"]
[Tue Apr 07 19:58:00.491699 2026] [:error] [pid 59804:tid 59806] [client 4.178.176.82:9948] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxSHYVIXiPh5_eJTmgQgAAAgA"]
[Tue Apr 07 19:58:00.721893 2026] [:error] [pid 59551:tid 59562] [client 4.178.176.82:51344] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxSF7LN7Ubyqs-sVv-YQAAAYk"]
[Tue Apr 07 19:58:01.240571 2026] [:error] [pid 59804:tid 59827] [client 4.178.176.82:9972] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media.php"] [unique_id "adTxSXYVIXiPh5_eJTmgRQAAAhU"]
[Tue Apr 07 19:58:01.513635 2026] [:error] [pid 12948:tid 12975] [client 4.178.176.82:60858] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxScbeSPAN8LvMqsapjQAAARg"]
[Tue Apr 07 19:58:02.000610 2026] [:error] [pid 59551:tid 59560] [client 4.178.176.82:63195] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxSV7LN7Ubyqs-sVv-ZQAAAYc"]
[Tue Apr 07 19:58:02.192162 2026] [:error] [pid 59551:tid 59566] [client 4.178.176.82:46371] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxSl7LN7Ubyqs-sVv-ZgAAAY0"]
[Tue Apr 07 19:58:02.800768 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:50333] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxSk09Xv52u2xXGLANFQAAAM0"]
[Tue Apr 07 19:58:02.869548 2026] [:error] [pid 59551:tid 59565] [client 4.178.176.82:59435] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxSl7LN7Ubyqs-sVv-ZwAAAYw"]
[Tue Apr 07 19:58:03.271920 2026] [:error] [pid 37596:tid 37618] [client 4.178.176.82:9938] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxS6paAOZHEjRWjP2Z4gAAAAw"]
[Tue Apr 07 19:58:03.542655 2026] [:error] [pid 59804:tid 59814] [client 4.178.176.82:54964] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxS3YVIXiPh5_eJTmgSgAAAgg"]
[Tue Apr 07 19:58:03.822982 2026] [:error] [pid 59490:tid 59494] [client 4.178.176.82:50322] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxS0cw8OFbiUZ7Rx1mCQAAAUI"]
[Tue Apr 07 19:58:04.058873 2026] [:error] [pid 59804:tid 59820] [client 4.178.176.82:54912] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adTxTHYVIXiPh5_eJTmgTQAAAg4"]
[Tue Apr 07 19:58:04.330475 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:50896] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxTE09Xv52u2xXGLANFgAAAM8"]
[Tue Apr 07 19:58:04.585515 2026] [:error] [pid 59490:tid 59504] [client 4.178.176.82:63186] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxTEcw8OFbiUZ7Rx1mCwAAAUw"]
[Tue Apr 07 19:58:04.872181 2026] [:error] [pid 37598:tid 37676] [client 4.178.176.82:56070] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxTO9g7q_cV2WhPayxywAAAI8"]
[Tue Apr 07 19:58:05.137476 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:57373] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxTV7LN7Ubyqs-sVv-awAAAYg"]
[Tue Apr 07 19:58:05.352414 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:9630] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxTU09Xv52u2xXGLANGQAAANA"]
[Tue Apr 07 19:58:05.922710 2026] [:error] [pid 59804:tid 59822] [client 4.178.176.82:60816] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxTXYVIXiPh5_eJTmgUAAAAhA"]
[Tue Apr 07 19:58:06.039258 2026] [:error] [pid 59804:tid 59816] [client 4.178.176.82:10145] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxTnYVIXiPh5_eJTmgUQAAAgo"]
[Tue Apr 07 19:58:06.960572 2026] [:error] [pid 37719:tid 37743] [client 4.178.176.82:46369] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTxTk09Xv52u2xXGLANHgAAANU"]
[Tue Apr 07 19:58:06.985781 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:9931] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxTg6uAY0QAy-8EEJkRwAAAFc"]
[Tue Apr 07 19:58:07.520131 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:54322] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxT17LN7Ubyqs-sVv-bwAAAZg"]
[Tue Apr 07 19:58:07.808042 2026] [:error] [pid 59551:tid 59558] [client 4.178.176.82:49098] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxT17LN7Ubyqs-sVv-cAAAAYU"]
[Tue Apr 07 19:58:08.027120 2026] [:error] [pid 59804:tid 59821] [client 4.178.176.82:49090] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxUHYVIXiPh5_eJTmgVgAAAg8"]
[Tue Apr 07 19:58:08.493284 2026] [:error] [pid 59551:tid 59565] [client 4.178.176.82:51353] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxUF7LN7Ubyqs-sVv-cgAAAYw"]
[Tue Apr 07 19:58:08.552115 2026] [:error] [pid 59551:tid 59554] [client 4.178.176.82:60822] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxUF7LN7Ubyqs-sVv-cwAAAYE"]
[Tue Apr 07 19:58:09.025149 2026] [:error] [pid 59804:tid 59808] [client 4.178.176.82:63206] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxUXYVIXiPh5_eJTmgWQAAAgI"]
[Tue Apr 07 19:58:09.074572 2026] [:error] [pid 59804:tid 59814] [client 4.178.176.82:46347] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxUXYVIXiPh5_eJTmgWgAAAgg"]
[Tue Apr 07 19:58:09.623692 2026] [:error] [pid 59490:tid 59516] [client 4.178.176.82:47589] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTxUUcw8OFbiUZ7Rx1mDQAAAVg"]
[Tue Apr 07 19:58:09.843538 2026] [:error] [pid 37596:tid 37613] [client 4.178.176.82:54958] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxUapaAOZHEjRWjP2Z5wAAAAc"]
[Tue Apr 07 19:58:10.626998 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:59398] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxUg6uAY0QAy-8EEJkTAAAAFU"]
[Tue Apr 07 19:58:10.645434 2026] [:error] [pid 37598:tid 37669] [client 4.178.176.82:56111] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxUu9g7q_cV2WhPayxzQAAAIg"]
[Tue Apr 07 19:58:11.303876 2026] [:error] [pid 59804:tid 59825] [client 4.178.176.82:50320] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxU3YVIXiPh5_eJTmgXwAAAhM"]
[Tue Apr 07 19:58:11.443069 2026] [:error] [pid 59551:tid 59559] [client 4.178.176.82:50943] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxU17LN7Ubyqs-sVv-egAAAYY"]
[Tue Apr 07 19:58:11.931731 2026] [:error] [pid 59551:tid 59574] [client 4.178.176.82:57345] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxU17LN7Ubyqs-sVv-ewAAAZU"]
[Tue Apr 07 19:58:12.017283 2026] [:error] [pid 37598:tid 37685] [client 4.178.176.82:55499] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxVO9g7q_cV2WhPayxzwAAAJg"]
[Tue Apr 07 19:58:12.622905 2026] [:error] [pid 59551:tid 59558] [client 4.178.176.82:60818] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxVF7LN7Ubyqs-sVv-fgAAAYU"]
[Tue Apr 07 19:58:12.963391 2026] [:error] [pid 59660:tid 59685] [client 4.178.176.82:50912] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTxVDp3-oiX2o5bTswPiwAAAdc"]
[Tue Apr 07 19:58:13.189605 2026] [:error] [pid 37719:tid 37743] [client 4.178.176.82:54332] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxVU09Xv52u2xXGLANJwAAANU"]
[Tue Apr 07 19:58:13.563730 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:51347] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxVU09Xv52u2xXGLANKAAAANA"]
[Tue Apr 07 19:58:13.748339 2026] [:error] [pid 37598:tid 37683] [client 4.178.176.82:50315] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxVe9g7q_cV2WhPayx0QAAAJY"]
[Tue Apr 07 19:58:14.261086 2026] [:error] [pid 37719:tid 37739] [client 4.178.176.82:54955] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTxVk09Xv52u2xXGLANKQAAANE"]
[Tue Apr 07 19:58:14.375937 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:9639] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxVk09Xv52u2xXGLANKgAAANg"]
[Tue Apr 07 19:58:14.749985 2026] [:error] [pid 37719:tid 37737] [client 4.178.176.82:60828] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTxVk09Xv52u2xXGLANLAAAAM8"]
[Tue Apr 07 19:58:14.963205 2026] [:error] [pid 12948:tid 12957] [client 4.178.176.82:50318] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxVsbeSPAN8LvMqsapxgAAAQY"]
[Tue Apr 07 19:58:15.271603 2026] [:error] [pid 37719:tid 37727] [client 4.178.176.82:54914] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTxV009Xv52u2xXGLANLQAAAMU"]
[Tue Apr 07 19:58:15.673802 2026] [:error] [pid 37719:tid 37728] [client 4.178.176.82:51354] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTxV009Xv52u2xXGLANLgAAAMY"]
[Tue Apr 07 19:58:15.767172 2026] [:error] [pid 37719:tid 37723] [client 4.178.176.82:10187] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTxV009Xv52u2xXGLANLwAAAME"]
[Tue Apr 07 19:58:16.153537 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:47575] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxWA6uAY0QAy-8EEJkTwAAAEc"]
[Tue Apr 07 19:58:16.411633 2026] [:error] [pid 37598:tid 37684] [client 4.178.176.82:50309] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTxWO9g7q_cV2WhPayx0wAAAJc"]
[Tue Apr 07 19:58:16.809449 2026] [:error] [pid 37719:tid 37733] [client 4.178.176.82:57405] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxWE09Xv52u2xXGLANNQAAAMs"]
[Tue Apr 07 19:58:16.938995 2026] [:error] [pid 37719:tid 37736] [client 4.178.176.82:63207] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTxWE09Xv52u2xXGLANNwAAAM4"]
[Tue Apr 07 19:58:17.384568 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:9931] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxWU09Xv52u2xXGLANOwAAANA"]
[Tue Apr 07 19:58:17.856434 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:47591] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTxWU09Xv52u2xXGLANPQAAAMc"]
[Tue Apr 07 19:58:17.895030 2026] [:error] [pid 59490:tid 59494] [client 4.178.176.82:54941] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTxWUcw8OFbiUZ7Rx1mEgAAAUI"]
[Tue Apr 07 19:58:18.426451 2026] [:error] [pid 37596:tid 37608] [client 4.178.176.82:50336] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Tue Apr 07 19:58:18.587182 2026] [:error] [pid 37596:tid 37607] [client 4.178.176.82:9957] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Tue Apr 07 19:58:18.665313 2026] [:error] [pid 37596:tid 37615] [client 4.178.176.82:50336] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Tue Apr 07 19:58:18.861548 2026] [:error] [pid 37596:tid 37616] [client 4.178.176.82:9957] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue Apr 07 19:58:18.904618 2026] [:error] [pid 37596:tid 37617] [client 4.178.176.82:50336] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue Apr 07 19:58:19.101130 2026] [:error] [pid 37596:tid 37622] [client 4.178.176.82:9957] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue Apr 07 19:58:19.143619 2026] [:error] [pid 37596:tid 37630] [client 4.178.176.82:50336] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue Apr 07 19:58:19.589515 2026] [:error] [pid 37596:tid 37610] [client 4.178.176.82:9957] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Tue Apr 07 19:58:19.653751 2026] [:error] [pid 37596:tid 37629] [client 4.178.176.82:50336] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Tue Apr 07 19:58:19.827571 2026] [:error] [pid 37596:tid 37621] [client 4.178.176.82:9957] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxW6paAOZHEjRWjP2Z9QAAAA8"]
[Tue Apr 07 19:58:19.911612 2026] [:error] [pid 37596:tid 37627] [client 4.178.176.82:50336] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxW6paAOZHEjRWjP2Z9gAAABU"]
[Tue Apr 07 19:58:20.410336 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:9935] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxXF7LN7Ubyqs-sVv-iQAAAZg"]
[Tue Apr 07 19:58:20.459148 2026] [:error] [pid 37719:tid 37740] [client 4.178.176.82:63173] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxXE09Xv52u2xXGLANSAAAANI"]
[Tue Apr 07 19:58:21.046932 2026] [:error] [pid 37598:tid 37670] [client 4.178.176.82:9951] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxXe9g7q_cV2WhPayx2wAAAIk"]
[Tue Apr 07 19:58:21.164333 2026] [:error] [pid 37719:tid 37725] [client 4.178.176.82:56075] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxXU09Xv52u2xXGLANTwAAAMM"]
[Tue Apr 07 19:58:21.683586 2026] [:error] [pid 12948:tid 12953] [client 4.178.176.82:47577] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxXcbeSPAN8LvMqsap4AAAAQI"]
[Tue Apr 07 19:58:21.833794 2026] [:error] [pid 37719:tid 37722] [client 4.178.176.82:51352] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTxXU09Xv52u2xXGLANVQAAAMA"]
[Tue Apr 07 19:58:22.210986 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:47554] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxXg6uAY0QAy-8EEJkUQAAAFg"]
[Tue Apr 07 19:58:22.357436 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:54930] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxXg6uAY0QAy-8EEJkUgAAAFY"]
[Tue Apr 07 19:58:22.777819 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:63231] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxXg6uAY0QAy-8EEJkVAAAAFc"]
[Tue Apr 07 19:58:22.866714 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:46369] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxXg6uAY0QAy-8EEJkVQAAAFQ"]
[Tue Apr 07 19:58:23.326300 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:9961] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxXw6uAY0QAy-8EEJkVgAAAEM"]
[Tue Apr 07 19:58:23.505582 2026] [:error] [pid 12948:tid 12951] [client 4.178.176.82:49131] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxX8beSPAN8LvMqsap5AAAAQA"]
[Tue Apr 07 19:58:23.866267 2026] [:error] [pid 59804:tid 59809] [client 4.178.176.82:59400] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxX3YVIXiPh5_eJTmgbgAAAgM"]
[Tue Apr 07 19:58:24.004138 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:63181] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTxYA6uAY0QAy-8EEJkWQAAAEo"]
[Tue Apr 07 19:58:24.492657 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:49123] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxYA6uAY0QAy-8EEJkWwAAAEs"]
[Tue Apr 07 19:58:24.589637 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:47553] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxYF7LN7Ubyqs-sVv-iwAAAZA"]
[Tue Apr 07 19:58:25.376258 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:50899] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxYQ6uAY0QAy-8EEJkYgAAAE8"]
[Tue Apr 07 19:58:25.566549 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:44806] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxYQ6uAY0QAy-8EEJkYwAAAEY"]
[Tue Apr 07 19:58:26.058864 2026] [:error] [pid 37597:tid 37658] [client 4.178.176.82:9661] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxYg6uAY0QAy-8EEJkZgAAAFg"]
[Tue Apr 07 19:58:26.145530 2026] [:error] [pid 59551:tid 59562] [client 4.178.176.82:9604] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxYl7LN7Ubyqs-sVv-jQAAAYk"]
[Tue Apr 07 19:58:26.860153 2026] [:error] [pid 59551:tid 59574] [client 4.178.176.82:50925] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxYl7LN7Ubyqs-sVv-kQAAAZU"]
[Tue Apr 07 19:58:27.182787 2026] [:error] [pid 12948:tid 12975] [client 4.178.176.82:50900] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTxY8beSPAN8LvMqsap5gAAARg"]
[Tue Apr 07 19:58:27.652608 2026] [:error] [pid 59660:tid 59667] [client 4.178.176.82:10232] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxYzp3-oiX2o5bTswPkgAAAcU"]
[Tue Apr 07 19:58:28.028613 2026] [:error] [pid 59660:tid 59678] [client 4.178.176.82:46374] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxZDp3-oiX2o5bTswPlAAAAdA"]
[Tue Apr 07 19:58:28.470751 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:9970] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxZA6uAY0QAy-8EEJkaQAAAEE"]
[Tue Apr 07 19:58:28.647021 2026] [:error] [pid 59490:tid 59507] [client 4.178.176.82:50337] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxZEcw8OFbiUZ7Rx1mHQAAAU8"]
[Tue Apr 07 19:58:29.315698 2026] [:error] [pid 59804:tid 59812] [client 4.178.176.82:8146] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxZXYVIXiPh5_eJTmgdAAAAgY"]
[Tue Apr 07 19:58:29.362768 2026] [:error] [pid 59804:tid 59829] [client 4.178.176.82:51332] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxZXYVIXiPh5_eJTmgdQAAAhc"]
[Tue Apr 07 19:58:29.940306 2026] [:error] [pid 59804:tid 59816] [client 4.178.176.82:47581] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxZXYVIXiPh5_eJTmgdwAAAgo"]
[Tue Apr 07 19:58:30.003003 2026] [:error] [pid 59804:tid 59825] [client 4.178.176.82:61248] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTxZnYVIXiPh5_eJTmgeAAAAhM"]
[Tue Apr 07 19:58:30.620211 2026] [:error] [pid 37597:tid 37646] [client 4.178.176.82:9966] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxZg6uAY0QAy-8EEJkbQAAAEw"]
[Tue Apr 07 19:58:30.620292 2026] [:error] [pid 37597:tid 37647] [client 4.178.176.82:49146] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxZg6uAY0QAy-8EEJkbgAAAE0"]
[Tue Apr 07 19:58:31.341253 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:46375] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxZw6uAY0QAy-8EEJkcwAAAEo"]
[Tue Apr 07 19:58:31.848940 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:8149] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxZw6uAY0QAy-8EEJkdwAAAEY"]
[Tue Apr 07 19:58:31.896747 2026] [:error] [pid 37597:tid 37646] [client 4.178.176.82:44804] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxZw6uAY0QAy-8EEJkeAAAAEw"]
[Tue Apr 07 19:58:32.410175 2026] [:error] [pid 59490:tid 59501] [client 4.178.176.82:8178] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxaEcw8OFbiUZ7Rx1mIgAAAUk"]
[Tue Apr 07 19:58:32.720525 2026] [:error] [pid 59804:tid 59818] [client 4.178.176.82:49124] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxaHYVIXiPh5_eJTmgewAAAgw"]
[Tue Apr 07 19:58:33.363109 2026] [:error] [pid 37596:tid 37623] [client 4.178.176.82:46349] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxaapaAOZHEjRWjP2Z-QAAABE"]
[Tue Apr 07 19:58:33.423135 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:50307] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTxaQ6uAY0QAy-8EEJkggAAAEY"]
[Tue Apr 07 19:58:33.913391 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:50329] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxaQ6uAY0QAy-8EEJkhgAAAFQ"]
[Tue Apr 07 19:58:33.989920 2026] [:error] [pid 37597:tid 37635] [client 4.178.176.82:54932] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxaQ6uAY0QAy-8EEJkigAAAEE"]
[Tue Apr 07 19:58:34.396307 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:50934] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxal7LN7Ubyqs-sVv-nwAAAYg"]
[Tue Apr 07 19:58:34.540279 2026] [:error] [pid 59490:tid 59508] [client 4.178.176.82:56107] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxakcw8OFbiUZ7Rx1mIwAAAVA"]
[Tue Apr 07 19:58:34.906752 2026] [:error] [pid 37598:tid 37672] [client 4.178.176.82:10149] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxau9g7q_cV2WhPayx9gAAAIs"]
[Tue Apr 07 19:58:35.201919 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:46343] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxa009Xv52u2xXGLANjAAAANA"]
[Tue Apr 07 19:58:35.394179 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:45340] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTxaw6uAY0QAy-8EEJkkwAAAEU"]
[Tue Apr 07 19:58:35.687861 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:49216] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxa009Xv52u2xXGLANjgAAAMQ"]
[Tue Apr 07 19:58:35.875024 2026] [:error] [pid 37597:tid 37656] [client 4.178.176.82:49136] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxaw6uAY0QAy-8EEJklgAAAFY"]
[Tue Apr 07 19:58:36.212028 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:60852] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxbA6uAY0QAy-8EEJkmAAAAFc"]
[Tue Apr 07 19:58:36.439172 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:54932] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxbA6uAY0QAy-8EEJkmwAAAFA"]
[Tue Apr 07 19:58:36.832168 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:56126] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxbA6uAY0QAy-8EEJknQAAAEc"]
[Tue Apr 07 19:58:36.916528 2026] [:error] [pid 37719:tid 37739] [client 4.178.176.82:9934] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxbE09Xv52u2xXGLANjwAAANE"]
[Tue Apr 07 19:58:37.416152 2026] [:error] [pid 37719:tid 37745] [client 4.178.176.82:56082] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxbU09Xv52u2xXGLANkgAAANc"]
[Tue Apr 07 19:58:37.523102 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:8189] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTxbU09Xv52u2xXGLANkwAAAMc"]
[Tue Apr 07 19:58:38.094623 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:63177] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxbg6uAY0QAy-8EEJkoAAAAFc"]
[Tue Apr 07 19:58:38.173132 2026] [:error] [pid 59804:tid 59823] [client 4.178.176.82:47557] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxbnYVIXiPh5_eJTmgjAAAAhE"]
[Tue Apr 07 19:58:38.688654 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:49225] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxbl7LN7Ubyqs-sVv-oQAAAYI"]
[Tue Apr 07 19:58:38.796188 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:50360] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxbl7LN7Ubyqs-sVv-owAAAZA"]
[Tue Apr 07 19:58:39.160134 2026] [:error] [pid 37598:tid 37669] [client 4.178.176.82:56114] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxb-9g7q_cV2WhPayx_gAAAIg"]
[Tue Apr 07 19:58:39.306132 2026] [:error] [pid 37719:tid 37724] [client 4.178.176.82:50364] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxb009Xv52u2xXGLANlwAAAMI"]
[Tue Apr 07 19:58:39.708680 2026] [:error] [pid 59804:tid 59824] [client 4.178.176.82:56126] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxb3YVIXiPh5_eJTmgjgAAAhI"]
[Tue Apr 07 19:58:39.833267 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:46378] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTxb009Xv52u2xXGLANmAAAANg"]
[Tue Apr 07 19:58:40.191642 2026] [:error] [pid 37719:tid 37723] [client 4.178.176.82:9939] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxcE09Xv52u2xXGLANmQAAAME"]
[Tue Apr 07 19:58:40.305440 2026] [:error] [pid 37598:tid 37677] [client 4.178.176.82:8130] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxcO9g7q_cV2WhPayyAQAAAJA"]
[Tue Apr 07 19:58:40.745694 2026] [:error] [pid 37596:tid 37617] [client 4.178.176.82:9662] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxcKpaAOZHEjRWjP2Z_QAAAAs"]
[Tue Apr 07 19:58:40.881376 2026] [:error] [pid 37719:tid 37722] [client 4.178.176.82:63208] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxcE09Xv52u2xXGLANnQAAAMA"]
[Tue Apr 07 19:58:41.249031 2026] [:error] [pid 37598:tid 37668] [client 4.178.176.82:57350] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxce9g7q_cV2WhPayyBQAAAIc"]
[Tue Apr 07 19:58:41.782748 2026] [:error] [pid 37719:tid 37736] [client 4.178.176.82:57362] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxcU09Xv52u2xXGLANngAAAM4"]
[Tue Apr 07 19:58:41.801881 2026] [:error] [pid 12948:tid 12960] [client 4.178.176.82:63178] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxccbeSPAN8LvMqsap6QAAAQk"]
[Tue Apr 07 19:58:42.321483 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:61270] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxcg6uAY0QAy-8EEJkpQAAAEs"]
[Tue Apr 07 19:58:42.513130 2026] [:error] [pid 59660:tid 59666] [client 4.178.176.82:49268] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTxcjp3-oiX2o5bTswPnAAAAcQ"]
[Tue Apr 07 19:58:42.965849 2026] [:error] [pid 59660:tid 59663] [client 4.178.176.82:46381] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxcjp3-oiX2o5bTswPnQAAAcE"]
[Tue Apr 07 19:58:43.181325 2026] [:error] [pid 59804:tid 59820] [client 4.178.176.82:8144] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxc3YVIXiPh5_eJTmgkQAAAg4"]
[Tue Apr 07 19:58:43.789399 2026] [:error] [pid 37719:tid 37744] [client 4.178.176.82:49225] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxc009Xv52u2xXGLANoAAAANY"]
[Tue Apr 07 19:58:43.889940 2026] [:error] [pid 12948:tid 12953] [client 4.178.176.82:10169] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxc8beSPAN8LvMqsap6wAAAQI"]
[Tue Apr 07 19:58:44.324541 2026] [:error] [pid 59490:tid 59500] [client 4.178.176.82:59421] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxdEcw8OFbiUZ7Rx1mJgAAAUg"]
[Tue Apr 07 19:58:44.620176 2026] [:error] [pid 59490:tid 59507] [client 4.178.176.82:50893] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxdEcw8OFbiUZ7Rx1mJwAAAU8"]
[Tue Apr 07 19:58:45.232507 2026] [:error] [pid 37719:tid 37743] [client 4.178.176.82:49266] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTxdU09Xv52u2xXGLANowAAANU"]
[Tue Apr 07 19:58:45.332071 2026] [:error] [pid 59660:tid 59667] [client 4.178.176.82:63230] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxdTp3-oiX2o5bTswPngAAAcU"]
[Tue Apr 07 19:58:45.848599 2026] [:error] [pid 37598:tid 37671] [client 4.178.176.82:8140] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxde9g7q_cV2WhPayyEAAAAIo"]
[Tue Apr 07 19:58:45.894204 2026] [:error] [pid 37598:tid 37683] [client 4.178.176.82:46395] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxde9g7q_cV2WhPayyEgAAAJY"]
[Tue Apr 07 19:58:46.408938 2026] [:error] [pid 59490:tid 59503] [client 4.178.176.82:49255] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxdkcw8OFbiUZ7Rx1mKAAAAUs"]
[Tue Apr 07 19:58:46.411835 2026] [:error] [pid 59804:tid 59811] [client 4.178.176.82:49264] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxdnYVIXiPh5_eJTmgkwAAAgU"]
[Tue Apr 07 19:58:47.016676 2026] [:error] [pid 37596:tid 37628] [client 4.178.176.82:8135] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxd6paAOZHEjRWjP2aAQAAABY"]
[Tue Apr 07 19:58:47.327995 2026] [:error] [pid 59660:tid 59665] [client 4.178.176.82:8141] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxdzp3-oiX2o5bTswPnwAAAcM"]
[Tue Apr 07 19:58:47.537675 2026] [:error] [pid 37597:tid 37644] [client 4.178.176.82:56092] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxdw6uAY0QAy-8EEJkqAAAAEo"]
[Tue Apr 07 19:58:48.009378 2026] [:error] [pid 37597:tid 37651] [client 4.178.176.82:63182] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTxeA6uAY0QAy-8EEJkqgAAAFE"]
[Tue Apr 07 19:58:48.370711 2026] [:error] [pid 59660:tid 59678] [client 4.178.176.82:47565] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxeDp3-oiX2o5bTswPoAAAAdA"]
[Tue Apr 07 19:58:48.572991 2026] [:error] [pid 37719:tid 37738] [client 4.178.176.82:49270] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxeE09Xv52u2xXGLANqQAAANA"]
[Tue Apr 07 19:58:49.243681 2026] [:error] [pid 37719:tid 37726] [client 4.178.176.82:49265] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxeU09Xv52u2xXGLANqwAAAMQ"]
[Tue Apr 07 19:58:49.269180 2026] [:error] [pid 37597:tid 37646] [client 4.178.176.82:54327] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxeQ6uAY0QAy-8EEJkrgAAAEw"]
[Tue Apr 07 19:58:49.984366 2026] [:error] [pid 59804:tid 59825] [client 4.178.176.82:51334] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxeXYVIXiPh5_eJTmgmQAAAhM"]
[Tue Apr 07 19:58:50.150973 2026] [:error] [pid 59551:tid 59555] [client 4.178.176.82:10250] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxel7LN7Ubyqs-sVv-rgAAAYI"]
[Tue Apr 07 19:58:50.730167 2026] [:error] [pid 59551:tid 59561] [client 4.178.176.82:51341] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTxel7LN7Ubyqs-sVv-sAAAAYg"]
[Tue Apr 07 19:58:50.865597 2026] [:error] [pid 59551:tid 59574] [client 4.178.176.82:63228] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxel7LN7Ubyqs-sVv-sgAAAZU"]
[Tue Apr 07 19:58:51.334790 2026] [:error] [pid 37597:tid 37637] [client 4.178.176.82:9956] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxew6uAY0QAy-8EEJktAAAAEM"]
[Tue Apr 07 19:58:51.587894 2026] [:error] [pid 37598:tid 37684] [client 4.178.176.82:49218] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxe-9g7q_cV2WhPayyFQAAAJc"]
[Tue Apr 07 19:58:52.648894 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:57394] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxfA6uAY0QAy-8EEJkvQAAAFU"]
[Tue Apr 07 19:58:52.935065 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:47583] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxfA6uAY0QAy-8EEJkvwAAAEs"]
[Tue Apr 07 19:58:53.507196 2026] [:error] [pid 59551:tid 59557] [client 4.178.176.82:54395] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxfV7LN7Ubyqs-sVv-uAAAAYQ"]
[Tue Apr 07 19:58:53.642539 2026] [:error] [pid 37719:tid 37727] [client 4.178.176.82:50885] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxfU09Xv52u2xXGLANsgAAAMU"]
[Tue Apr 07 19:58:54.210075 2026] [:error] [pid 37597:tid 37641] [client 4.178.176.82:63213] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTxfg6uAY0QAy-8EEJkwQAAAEc"]
[Tue Apr 07 19:58:54.679595 2026] [:error] [pid 59551:tid 59573] [client 4.178.176.82:9926] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxfl7LN7Ubyqs-sVv-vQAAAZQ"]
[Tue Apr 07 19:58:54.906885 2026] [:error] [pid 37596:tid 37620] [client 4.178.176.82:46353] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxfqpaAOZHEjRWjP2aAwAAAA4"]
[Tue Apr 07 19:58:55.449054 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:50309] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxfw6uAY0QAy-8EEJkxgAAAFc"]
[Tue Apr 07 19:58:55.606371 2026] [:error] [pid 37598:tid 37680] [client 4.178.176.82:57380] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxf-9g7q_cV2WhPayyFgAAAJM"]
[Tue Apr 07 19:58:56.546984 2026] [:error] [pid 59490:tid 59510] [client 4.178.176.82:49248] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxgEcw8OFbiUZ7Rx1mMgAAAVI"]
[Tue Apr 07 19:58:56.652110 2026] [:error] [pid 37597:tid 37639] [client 4.178.176.82:53801] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxgA6uAY0QAy-8EEJkzQAAAEU"]
[Tue Apr 07 19:58:57.140512 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:62172] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxgQ6uAY0QAy-8EEJk0gAAAEI"]
[Tue Apr 07 19:58:57.339462 2026] [:error] [pid 37719:tid 37729] [client 4.178.176.82:59397] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTxgU09Xv52u2xXGLANtgAAAMc"]
[Tue Apr 07 19:58:57.913994 2026] [:error] [pid 37597:tid 37648] [client 4.178.176.82:49229] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxgQ6uAY0QAy-8EEJk2AAAAE4"]
[Tue Apr 07 19:58:58.087152 2026] [:error] [pid 37597:tid 37645] [client 4.178.176.82:64983] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxgg6uAY0QAy-8EEJk2QAAAEs"]
[Tue Apr 07 19:58:58.695440 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:62151] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxgg6uAY0QAy-8EEJk3gAAAEI"]
[Tue Apr 07 19:58:58.783455 2026] [:error] [pid 37597:tid 37655] [client 4.178.176.82:49253] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxgg6uAY0QAy-8EEJk4AAAAFU"]
[Tue Apr 07 19:58:59.618098 2026] [:error] [pid 37719:tid 37746] [client 4.178.176.82:64998] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxg009Xv52u2xXGLANuwAAANg"]
[Tue Apr 07 19:58:59.627172 2026] [:error] [pid 37719:tid 37724] [client 4.178.176.82:53786] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxg009Xv52u2xXGLANvAAAAMI"]
[Tue Apr 07 19:59:00.213721 2026] [:error] [pid 37597:tid 37653] [client 4.178.176.82:49250] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxhA6uAY0QAy-8EEJk5gAAAFM"]
[Tue Apr 07 19:59:00.519164 2026] [:error] [pid 37597:tid 37649] [client 4.178.176.82:9904] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTxhA6uAY0QAy-8EEJk6QAAAE8"]
[Tue Apr 07 19:59:01.275324 2026] [:error] [pid 12948:tid 12956] [client 4.178.176.82:65005] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxhcbeSPAN8LvMqsap-QAAAQU"]
[Tue Apr 07 19:59:02.271184 2026] [:error] [pid 37596:tid 37624] [client 4.178.176.82:64442] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxhqpaAOZHEjRWjP2aCgAAABI"]
[Tue Apr 07 19:59:03.424993 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:9909] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxh17LN7Ubyqs-sVv-xAAAAYs"]
[Tue Apr 07 19:59:04.784054 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:54976] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxiF7LN7Ubyqs-sVv-xwAAAZg"]
[Tue Apr 07 19:59:05.464753 2026] [:error] [pid 37597:tid 37636] [client 4.178.176.82:53795] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxiQ6uAY0QAy-8EEJk-QAAAEI"]
[Tue Apr 07 19:59:05.852262 2026] [:error] [pid 37597:tid 37650] [client 4.178.176.82:60767] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxiQ6uAY0QAy-8EEJk-gAAAFA"]
[Tue Apr 07 19:59:06.092803 2026] [:error] [pid 37719:tid 37741] [client 4.178.176.82:59421] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxik09Xv52u2xXGLANwgAAANM"]
[Tue Apr 07 19:59:06.815387 2026] [:error] [pid 59804:tid 59824] [client 4.178.176.82:58948] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxinYVIXiPh5_eJTmgpwAAAhI"]
[Tue Apr 07 19:59:06.899297 2026] [:error] [pid 12948:tid 12955] [client 4.178.176.82:45846] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxisbeSPAN8LvMqsap_wAAAQQ"]
[Tue Apr 07 19:59:07.409385 2026] [:error] [pid 37598:tid 37684] [client 4.178.176.82:45830] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxi-9g7q_cV2WhPayyIwAAAJc"]
[Tue Apr 07 19:59:07.417073 2026] [:error] [pid 37598:tid 37680] [client 4.178.176.82:55022] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTxi-9g7q_cV2WhPayyJQAAAJM"]
[Tue Apr 07 19:59:08.018615 2026] [:error] [pid 37719:tid 37735] [client 4.178.176.82:55020] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxjE09Xv52u2xXGLANxAAAAM0"]
[Tue Apr 07 19:59:08.035080 2026] [:error] [pid 37719:tid 37745] [client 4.178.176.82:55035] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxjE09Xv52u2xXGLANxgAAANc"]
[Tue Apr 07 19:59:08.605919 2026] [:error] [pid 59804:tid 59811] [client 4.178.176.82:46432] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxjHYVIXiPh5_eJTmgqwAAAgU"]
[Tue Apr 07 19:59:08.685662 2026] [:error] [pid 59490:tid 59515] [client 4.178.176.82:54985] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxjEcw8OFbiUZ7Rx1mMwAAAVc"]
[Tue Apr 07 19:59:09.212318 2026] [:error] [pid 59490:tid 59511] [client 4.178.176.82:49955] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxjUcw8OFbiUZ7Rx1mNAAAAVM"]
[Tue Apr 07 19:59:09.362624 2026] [:error] [pid 59804:tid 59815] [client 4.178.176.82:49965] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxjXYVIXiPh5_eJTmgrAAAAgk"]
[Tue Apr 07 19:59:09.965058 2026] [:error] [pid 59660:tid 59684] [client 4.178.176.82:49945] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTxjTp3-oiX2o5bTswPqAAAAdY"]
[Tue Apr 07 19:59:10.216470 2026] [:error] [pid 12948:tid 12958] [client 4.178.176.82:58461] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxjsbeSPAN8LvMqsaqBAAAAQc"]
[Tue Apr 07 19:59:10.520388 2026] [:error] [pid 59660:tid 59666] [client 4.178.176.82:60762] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxjjp3-oiX2o5bTswPqQAAAcQ"]
[Tue Apr 07 19:59:10.831865 2026] [:error] [pid 37597:tid 37657] [client 4.178.176.82:60751] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxjg6uAY0QAy-8EEJk_gAAAFc"]
[Tue Apr 07 19:59:11.107909 2026] [:error] [pid 59660:tid 59663] [client 4.178.176.82:10074] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxjzp3-oiX2o5bTswPqgAAAcE"]
[Tue Apr 07 19:59:11.431874 2026] [:error] [pid 37596:tid 37626] [client 4.178.176.82:10087] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxj6paAOZHEjRWjP2aEgAAABQ"]
[Tue Apr 07 19:59:11.624429 2026] [:error] [pid 59804:tid 59824] [client 4.178.176.82:55474] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxj3YVIXiPh5_eJTmgtAAAAhI"]
[Tue Apr 07 19:59:12.099330 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:10069] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxkF7LN7Ubyqs-sVv-zQAAAYs"]
[Tue Apr 07 19:59:12.390020 2026] [:error] [pid 59551:tid 59577] [client 4.178.176.82:62757] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTxkF7LN7Ubyqs-sVv-0AAAAZg"]
[Tue Apr 07 19:59:12.810135 2026] [:error] [pid 59490:tid 59513] [client 4.178.176.82:50532] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxkEcw8OFbiUZ7Rx1mNgAAAVU"]
[Tue Apr 07 19:59:13.138268 2026] [:error] [pid 59551:tid 59573] [client 4.178.176.82:10093] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxkV7LN7Ubyqs-sVv-0gAAAZQ"]
[Tue Apr 07 19:59:13.624409 2026] [:error] [pid 59551:tid 59567] [client 4.178.176.82:55434] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxkV7LN7Ubyqs-sVv-1QAAAY4"]
[Tue Apr 07 19:59:13.845864 2026] [:error] [pid 59551:tid 59569] [client 4.178.176.82:62764] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxkV7LN7Ubyqs-sVv-1wAAAZA"]
[Tue Apr 07 19:59:14.552168 2026] [:error] [pid 37597:tid 37652] [client 4.178.176.82:45866] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxkg6uAY0QAy-8EEJlAgAAAFI"]
[Tue Apr 07 19:59:14.886937 2026] [:error] [pid 37597:tid 37654] [client 4.178.176.82:50530] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTxkg6uAY0QAy-8EEJlBAAAAFQ"]
[Tue Apr 07 19:59:15.386098 2026] [:error] [pid 37719:tid 37745] [client 4.178.176.82:58468] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTxk009Xv52u2xXGLAN1gAAANc"]
[Tue Apr 07 19:59:16.055962 2026] [:error] [pid 37597:tid 37642] [client 4.178.176.82:60743] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTxlA6uAY0QAy-8EEJlCQAAAEg"]
[Tue Apr 07 19:59:16.589914 2026] [:error] [pid 59551:tid 59564] [client 4.178.176.82:58450] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTxlF7LN7Ubyqs-sVv-3QAAAYs"]
[Tue Apr 07 19:59:17.829936 2026] [:error] [pid 59551:tid 59553] [client 4.178.176.82:10061] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTxlV7LN7Ubyqs-sVv-4AAAAYA"]
[Tue Apr 07 19:59:18.032143 2026] [:error] [pid 37597:tid 37640] [client 4.178.176.82:50498] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTxlg6uAY0QAy-8EEJlGAAAAEY"]
[Tue Apr 07 19:59:18.710338 2026] [:error] [pid 37598:tid 37667] [client 4.178.176.82:62757] [client 4.178.176.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTxlu9g7q_cV2WhPayyLAAAAIY"]
[Tue Apr 07 19:59:19.019937 2026] [:error] [pid 59551:tid 59566] [client 4.178.176.82:45871] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Apr 07 19:59:19.265802 2026] [:error] [pid 59551:tid 59560] [client 4.178.176.82:45871] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Tue Apr 07 19:59:20.000394 2026] [:error] [pid 59804:tid 59807] [client 4.178.176.82:48553] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Apr 07 19:59:20.130500 2026] [:error] [pid 59551:tid 59559] [client 4.178.176.82:45871] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Apr 07 19:59:20.279704 2026] [:error] [pid 59804:tid 59816] [client 4.178.176.82:48553] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Tue Apr 07 19:59:20.518388 2026] [:error] [pid 59804:tid 59815] [client 4.178.176.82:48553] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Apr 07 19:59:51.882153 2026] [:error] [pid 59551:tid 59554] [client 20.215.218.174:62431] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Tue Apr 07 19:59:52.211468 2026] [:error] [pid 37719:tid 37728] [client 20.215.218.174:38202] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Tue Apr 07 19:59:52.281648 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:62431] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 07 19:59:52.486333 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:38202] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 07 19:59:52.563822 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:62431] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 07 19:59:52.745883 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:38202] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 07 19:59:52.823339 2026] [:error] [pid 59551:tid 59569] [client 20.215.218.174:62431] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Tue Apr 07 19:59:53.004138 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:38202] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Tue Apr 07 19:59:53.092786 2026] [:error] [pid 59551:tid 59553] [client 20.215.218.174:62431] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Apr 07 19:59:53.291767 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:38202] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTxuU09Xv52u2xXGLAN9AAAANM"]
[Tue Apr 07 19:59:53.364903 2026] [:error] [pid 59551:tid 59554] [client 20.215.218.174:62431] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxuV7LN7Ubyqs-sVv_LAAAAYE"]
[Tue Apr 07 19:59:54.475624 2026] [:error] [pid 59490:tid 59512] [client 20.215.218.174:38187] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTxukcw8OFbiUZ7Rx1mRQAAAVQ"]
[Tue Apr 07 19:59:54.481832 2026] [:error] [pid 59660:tid 59681] [client 20.215.218.174:49318] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxujp3-oiX2o5bTswPuAAAAdM"]
[Tue Apr 07 19:59:55.540784 2026] [:error] [pid 37596:tid 37629] [client 20.215.218.174:46383] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxu6paAOZHEjRWjP2aHwAAABc"]
[Tue Apr 07 19:59:55.784263 2026] [:error] [pid 59490:tid 59505] [client 20.215.218.174:40461] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTxu0cw8OFbiUZ7Rx1mRgAAAU0"]
[Tue Apr 07 19:59:56.462651 2026] [:error] [pid 37598:tid 37666] [client 20.215.218.174:38197] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxvO9g7q_cV2WhPayyPAAAAIU"]
[Tue Apr 07 19:59:56.717936 2026] [:error] [pid 37598:tid 37673] [client 20.215.218.174:43282] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adTxvO9g7q_cV2WhPayyPgAAAIw"]
[Tue Apr 07 19:59:57.223101 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:62340] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxvQ6uAY0QAy-8EEJlYgAAAEo"]
[Tue Apr 07 19:59:57.596826 2026] [:error] [pid 37719:tid 37733] [client 20.215.218.174:46443] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxvU09Xv52u2xXGLAN-QAAAMs"]
[Tue Apr 07 19:59:58.202041 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:65172] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxvk09Xv52u2xXGLAN_QAAAMk"]
[Tue Apr 07 19:59:58.417475 2026] [:error] [pid 37719:tid 37732] [client 20.215.218.174:43270] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxvk09Xv52u2xXGLAN_gAAAMo"]
[Tue Apr 07 19:59:59.022133 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:65170] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxv17LN7Ubyqs-sVv_MQAAAYQ"]
[Tue Apr 07 19:59:59.411777 2026] [:error] [pid 37719:tid 37733] [client 20.215.218.174:38900] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxv009Xv52u2xXGLAOAgAAAMs"]
[Tue Apr 07 19:59:59.765313 2026] [:error] [pid 59660:tid 59665] [client 20.215.218.174:46459] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxvzp3-oiX2o5bTswPvQAAAcM"]
[Tue Apr 07 20:00:00.208001 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:49287] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "adTxwO9g7q_cV2WhPayyQgAAAJI"]
[Tue Apr 07 20:00:00.644708 2026] [:error] [pid 37597:tid 37638] [client 20.215.218.174:49313] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxwA6uAY0QAy-8EEJlZQAAAEQ"]
[Tue Apr 07 20:00:00.975985 2026] [:error] [pid 59804:tid 59813] [client 20.215.218.174:38155] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxwHYVIXiPh5_eJTmg4gAAAgc"]
[Tue Apr 07 20:00:01.542519 2026] [:error] [pid 37719:tid 37723] [client 20.215.218.174:56877] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxwU09Xv52u2xXGLAOCQAAAME"]
[Tue Apr 07 20:00:01.919206 2026] [:error] [pid 37719:tid 37745] [client 20.215.218.174:38195] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxwU09Xv52u2xXGLAOCwAAANc"]
[Tue Apr 07 20:00:02.162751 2026] [:error] [pid 59551:tid 59562] [client 20.215.218.174:37203] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxwl7LN7Ubyqs-sVv_NQAAAYk"]
[Tue Apr 07 20:00:02.618793 2026] [:error] [pid 12948:tid 12954] [client 20.215.218.174:62425] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxwsbeSPAN8LvMqsaqKQAAAQM"]
[Tue Apr 07 20:00:03.316910 2026] [:error] [pid 37719:tid 37736] [client 20.215.218.174:56875] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxw009Xv52u2xXGLAOEgAAAM4"]
[Tue Apr 07 20:00:04.020189 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:43276] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTxxA6uAY0QAy-8EEJlbgAAAE0"]
[Tue Apr 07 20:00:04.221186 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:38185] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "adTxxA6uAY0QAy-8EEJlbwAAAEA"]
[Tue Apr 07 20:00:05.198834 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:49280] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxxQ6uAY0QAy-8EEJlcwAAAEM"]
[Tue Apr 07 20:00:05.239128 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:56887] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTxxU09Xv52u2xXGLAOFwAAAMU"]
[Tue Apr 07 20:00:06.623287 2026] [:error] [pid 37719:tid 37738] [client 20.215.218.174:6581] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTxxk09Xv52u2xXGLAOGgAAANA"]
[Tue Apr 07 20:00:06.705055 2026] [:error] [pid 37719:tid 37746] [client 20.215.218.174:62368] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxxk09Xv52u2xXGLAOGwAAANg"]
[Tue Apr 07 20:00:08.072183 2026] [:error] [pid 59660:tid 59668] [client 20.215.218.174:62458] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTxyDp3-oiX2o5bTswPwwAAAcY"]
[Tue Apr 07 20:00:08.670222 2026] [:error] [pid 37719:tid 37739] [client 20.215.218.174:40456] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxyE09Xv52u2xXGLAOHAAAANE"]
[Tue Apr 07 20:00:09.478070 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:56848] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTxyU09Xv52u2xXGLAOIAAAAMU"]
[Tue Apr 07 20:00:09.770653 2026] [:error] [pid 59660:tid 59662] [client 20.215.218.174:52877] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTxyTp3-oiX2o5bTswPxgAAAcA"]
[Tue Apr 07 20:00:11.027893 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:62411] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTxy009Xv52u2xXGLAOIwAAAMg"]
[Tue Apr 07 20:00:11.327298 2026] [:error] [pid 12948:tid 12970] [client 20.215.218.174:51879] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTxy8beSPAN8LvMqsaqLwAAARM"]
[Tue Apr 07 20:00:11.662926 2026] [:error] [pid 59804:tid 59824] [client 20.215.218.174:51855] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTxy3YVIXiPh5_eJTmg5wAAAhI"]
[Tue Apr 07 20:00:12.348246 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:48060] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTxzE09Xv52u2xXGLAOJwAAANU"]
[Tue Apr 07 20:00:13.495246 2026] [:error] [pid 59804:tid 59827] [client 20.215.218.174:37208] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTxzXYVIXiPh5_eJTmg6gAAAhU"]
[Tue Apr 07 20:00:14.217812 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:49312] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTxzk09Xv52u2xXGLAOLQAAAM0"]
[Tue Apr 07 20:00:14.490100 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:40506] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTxzk09Xv52u2xXGLAOLwAAAMw"]
[Tue Apr 07 20:00:16.070749 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:38174] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "adTx0A6uAY0QAy-8EEJligAAAEA"]
[Tue Apr 07 20:00:17.280469 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:46457] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTx0Q6uAY0QAy-8EEJlkAAAAFc"]
[Tue Apr 07 20:00:18.258314 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:62383] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTx0k09Xv52u2xXGLAOOgAAAMw"]
[Tue Apr 07 20:00:19.035439 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:48006] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTx0w6uAY0QAy-8EEJlmAAAAFA"]
[Tue Apr 07 20:00:19.977632 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:6586] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adTx0009Xv52u2xXGLAOQwAAANI"]
[Tue Apr 07 20:00:20.110717 2026] [:error] [pid 37598:tid 37667] [client 20.215.218.174:6546] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTx1O9g7q_cV2WhPayyRQAAAIY"]
[Tue Apr 07 20:00:20.917697 2026] [:error] [pid 59804:tid 59819] [client 20.215.218.174:49282] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTx1HYVIXiPh5_eJTmg8AAAAg0"]
[Tue Apr 07 20:00:21.896150 2026] [:error] [pid 59660:tid 59681] [client 20.215.218.174:6567] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTx1Tp3-oiX2o5bTswP1wAAAdM"]
[Tue Apr 07 20:00:22.478212 2026] [:error] [pid 59490:tid 59493] [client 20.215.218.174:37212] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTx1kcw8OFbiUZ7Rx1mWgAAAUE"]
[Tue Apr 07 20:00:22.996179 2026] [:error] [pid 59551:tid 59577] [client 20.215.218.174:48558] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx1l7LN7Ubyqs-sVv_OAAAAZg"]
[Tue Apr 07 20:00:23.794893 2026] [:error] [pid 12948:tid 12961] [client 20.215.218.174:47031] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx18beSPAN8LvMqsaqXAAAAQo"]
[Tue Apr 07 20:00:24.845285 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:38796] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx2E09Xv52u2xXGLAOTgAAANU"]
[Tue Apr 07 20:00:25.910091 2026] [:error] [pid 59551:tid 59567] [client 20.215.218.174:47582] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx2V7LN7Ubyqs-sVv_OgAAAY4"]
[Tue Apr 07 20:00:26.107674 2026] [:error] [pid 59551:tid 59576] [client 20.215.218.174:46991] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTx2l7LN7Ubyqs-sVv_PAAAAZc"]
[Tue Apr 07 20:00:26.922582 2026] [:error] [pid 59490:tid 59502] [client 20.215.218.174:58048] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx2kcw8OFbiUZ7Rx1mWwAAAUo"]
[Tue Apr 07 20:00:27.500919 2026] [:error] [pid 37598:tid 37662] [client 20.215.218.174:58057] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTx2-9g7q_cV2WhPayySAAAAIE"]
[Tue Apr 07 20:00:28.241928 2026] [:error] [pid 59551:tid 59563] [client 20.215.218.174:64455] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx3F7LN7Ubyqs-sVv_RwAAAYo"]
[Tue Apr 07 20:00:29.298058 2026] [:error] [pid 59660:tid 59684] [client 20.215.218.174:41393] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx3Tp3-oiX2o5bTswP3QAAAdY"]
[Tue Apr 07 20:00:29.706549 2026] [:error] [pid 37596:tid 37608] [client 20.215.218.174:52394] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adTx3apaAOZHEjRWjP2aJwAAAAI"]
[Tue Apr 07 20:00:30.578060 2026] [:error] [pid 59551:tid 59572] [client 20.215.218.174:7025] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx3l7LN7Ubyqs-sVv_UAAAAZM"]
[Tue Apr 07 20:00:31.099412 2026] [:error] [pid 59490:tid 59509] [client 20.215.218.174:41895] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx30cw8OFbiUZ7Rx1mXAAAAVE"]
[Tue Apr 07 20:00:31.800779 2026] [:error] [pid 59490:tid 59499] [client 20.215.218.174:57296] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx30cw8OFbiUZ7Rx1mXQAAAUc"]
[Tue Apr 07 20:00:33.303363 2026] [:error] [pid 12948:tid 12968] [client 20.215.218.174:40539] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx4cbeSPAN8LvMqsaqfAAAARE"]
[Tue Apr 07 20:00:33.566197 2026] [:error] [pid 37596:tid 37613] [client 20.215.218.174:44067] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx4apaAOZHEjRWjP2aLgAAAAc"]
[Tue Apr 07 20:00:34.129990 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:40515] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx4g6uAY0QAy-8EEJlsAAAAE0"]
[Tue Apr 07 20:00:34.868923 2026] [:error] [pid 59551:tid 59576] [client 20.215.218.174:44066] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx4l7LN7Ubyqs-sVv_VAAAAZc"]
[Tue Apr 07 20:00:35.881410 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:61501] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx417LN7Ubyqs-sVv_igAAAY0"]
[Tue Apr 07 20:00:36.707892 2026] [:error] [pid 37719:tid 37739] [client 20.215.218.174:52917] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx5E09Xv52u2xXGLAOdwAAANE"]
[Tue Apr 07 20:00:36.785402 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:6708] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx5E09Xv52u2xXGLAOeQAAAM0"]
[Tue Apr 07 20:00:37.730789 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:6674] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx5Q6uAY0QAy-8EEJl7QAAAFU"]
[Tue Apr 07 20:00:37.943976 2026] [:error] [pid 37596:tid 37626] [client 20.215.218.174:44045] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/n.php"] [unique_id "adTx5apaAOZHEjRWjP2aLwAAABQ"]
[Tue Apr 07 20:00:38.617372 2026] [:error] [pid 12948:tid 12956] [client 20.215.218.174:55740] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx5sbeSPAN8LvMqsaqigAAAQU"]
[Tue Apr 07 20:00:39.000889 2026] [:error] [pid 59660:tid 59675] [client 20.215.218.174:6708] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx5zp3-oiX2o5bTswP5AAAAc0"]
[Tue Apr 07 20:00:39.683621 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:54872] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTx5w6uAY0QAy-8EEJmDgAAAEo"]
[Tue Apr 07 20:00:40.353388 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:43331] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx6E09Xv52u2xXGLAOhgAAAMU"]
[Tue Apr 07 20:00:40.858435 2026] [:error] [pid 59804:tid 59826] [client 20.215.218.174:6698] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTx6HYVIXiPh5_eJTmg_QAAAhQ"]
[Tue Apr 07 20:00:41.432993 2026] [:error] [pid 59804:tid 59820] [client 20.215.218.174:54898] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx6XYVIXiPh5_eJTmhAAAAAg4"]
[Tue Apr 07 20:00:42.808098 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:6607] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTx6k09Xv52u2xXGLAOjAAAANY"]
[Tue Apr 07 20:00:42.891939 2026] [:error] [pid 37596:tid 37615] [client 20.215.218.174:45764] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "adTx6qpaAOZHEjRWjP2aMAAAAAk"]
[Tue Apr 07 20:00:44.122724 2026] [:error] [pid 59804:tid 59816] [client 20.215.218.174:6628] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx7HYVIXiPh5_eJTmhBQAAAgo"]
[Tue Apr 07 20:00:44.827112 2026] [:error] [pid 37598:tid 37667] [client 20.215.218.174:61465] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTx7O9g7q_cV2WhPayyXgAAAIY"]
[Tue Apr 07 20:00:45.523447 2026] [:error] [pid 59551:tid 59573] [client 20.215.218.174:45815] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx7V7LN7Ubyqs-sVv_1gAAAZQ"]
[Tue Apr 07 20:00:45.756889 2026] [:error] [pid 37598:tid 37684] [client 20.215.218.174:65257] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTx7e9g7q_cV2WhPayyYAAAAJc"]
[Tue Apr 07 20:00:46.420499 2026] [:error] [pid 59660:tid 59664] [client 20.215.218.174:61494] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTx7jp3-oiX2o5bTswP7gAAAcI"]
[Tue Apr 07 20:00:46.955685 2026] [:error] [pid 59660:tid 59673] [client 20.215.218.174:55681] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx7jp3-oiX2o5bTswP7wAAAcs"]
[Tue Apr 07 20:00:47.173083 2026] [:error] [pid 59660:tid 59679] [client 20.215.218.174:41208] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTx7zp3-oiX2o5bTswP8QAAAdE"]
[Tue Apr 07 20:00:47.779102 2026] [:error] [pid 37597:tid 37646] [client 20.215.218.174:45773] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class.php"] [unique_id "adTx7w6uAY0QAy-8EEJmTwAAAEw"]
[Tue Apr 07 20:00:47.915653 2026] [:error] [pid 37598:tid 37681] [client 20.215.218.174:6634] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new4.php"] [unique_id "adTx7-9g7q_cV2WhPayyZQAAAJQ"]
[Tue Apr 07 20:00:48.538989 2026] [:error] [pid 59804:tid 59822] [client 20.215.218.174:43727] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTx8HYVIXiPh5_eJTmhDwAAAhA"]
[Tue Apr 07 20:00:48.786297 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:60990] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx8F7LN7Ubyqs-sVv_4AAAAZY"]
[Tue Apr 07 20:00:49.187218 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:6712] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTx8V7LN7Ubyqs-sVv_5AAAAY0"]
[Tue Apr 07 20:00:49.789516 2026] [:error] [pid 59804:tid 59827] [client 20.215.218.174:52924] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx8XYVIXiPh5_eJTmhGQAAAhU"]
[Tue Apr 07 20:00:50.002983 2026] [:error] [pid 59660:tid 59686] [client 20.215.218.174:41213] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTx8jp3-oiX2o5bTswP8wAAAdg"]
[Tue Apr 07 20:00:50.496096 2026] [:error] [pid 12948:tid 12972] [client 20.215.218.174:61467] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx8sbeSPAN8LvMqsaqqQAAARU"]
[Tue Apr 07 20:00:50.751999 2026] [:error] [pid 59490:tid 59509] [client 20.215.218.174:61488] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless11.php"] [unique_id "adTx8kcw8OFbiUZ7Rx1mhgAAAVE"]
[Tue Apr 07 20:00:51.242874 2026] [:error] [pid 37598:tid 37667] [client 20.215.218.174:6654] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "adTx8-9g7q_cV2WhPayyaQAAAIY"]
[Tue Apr 07 20:00:51.515692 2026] [:error] [pid 12948:tid 12968] [client 20.215.218.174:43342] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTx88beSPAN8LvMqsaqqwAAARE"]
[Tue Apr 07 20:00:51.885564 2026] [:error] [pid 12948:tid 12969] [client 20.215.218.174:41156] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTx88beSPAN8LvMqsaqrAAAARI"]
[Tue Apr 07 20:00:52.206005 2026] [:error] [pid 59490:tid 59516] [client 20.215.218.174:61503] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/o.php"] [unique_id "adTx9Ecw8OFbiUZ7Rx1migAAAVg"]
[Tue Apr 07 20:00:52.749758 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:52883] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adTx9F7LN7Ubyqs-sVv_-AAAAYQ"]
[Tue Apr 07 20:00:53.124178 2026] [:error] [pid 59551:tid 59576] [client 20.215.218.174:55740] File does not exist: /usr/local/apache/htdocs/suspended-page/o.php
[Tue Apr 07 20:00:53.394874 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:55740] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Apr 07 20:00:53.655922 2026] [:error] [pid 59551:tid 59574] [client 20.215.218.174:55740] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Apr 07 20:00:53.769200 2026] [:error] [pid 12948:tid 12963] [client 20.215.218.174:45802] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue Apr 07 20:00:54.042695 2026] [:error] [pid 12948:tid 12957] [client 20.215.218.174:45802] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Tue Apr 07 20:00:54.198938 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:55740] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Tue Apr 07 20:00:54.315280 2026] [:error] [pid 12948:tid 12971] [client 20.215.218.174:45802] File does not exist: /usr/local/apache/htdocs/suspended-page/o.php
[Tue Apr 07 20:00:54.462959 2026] [:error] [pid 59551:tid 59565] [client 20.215.218.174:55740] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Apr 07 20:00:54.573949 2026] [:error] [pid 12948:tid 12975] [client 20.215.218.174:45802] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Apr 07 20:00:54.718362 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:55740] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTx9l7LN7Ubyqs-sVsADAAAAYQ"]
[Tue Apr 07 20:00:54.829522 2026] [:error] [pid 12948:tid 12965] [client 20.215.218.174:45802] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTx9sbeSPAN8LvMqsaqtAAAAQ4"]
[Tue Apr 07 20:00:55.648373 2026] [:error] [pid 37598:tid 37674] [client 20.215.218.174:6690] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTx9-9g7q_cV2WhPayycAAAAI0"]
[Tue Apr 07 20:00:55.764068 2026] [:error] [pid 37598:tid 37671] [client 20.215.218.174:65273] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTx9-9g7q_cV2WhPayycQAAAIo"]
[Tue Apr 07 20:00:56.515409 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:6615] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTx-E09Xv52u2xXGLAOlAAAANY"]
[Tue Apr 07 20:00:56.806031 2026] [:error] [pid 59551:tid 59570] [client 20.215.218.174:55711] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTx-F7LN7Ubyqs-sVsAFQAAAZE"]
[Tue Apr 07 20:00:57.396885 2026] [:error] [pid 37598:tid 37661] [client 20.215.218.174:65239] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system_log.php"] [unique_id "adTx-e9g7q_cV2WhPayydwAAAIA"]
[Tue Apr 07 20:00:58.338501 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:43753] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTx-g6uAY0QAy-8EEJmYQAAAEc"]
[Tue Apr 07 20:00:58.610444 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:6701] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTx-k09Xv52u2xXGLAOmQAAANI"]
[Tue Apr 07 20:00:59.227839 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:41203] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTx-w6uAY0QAy-8EEJmaQAAAFY"]
[Tue Apr 07 20:00:59.904616 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:6600] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTx-w6uAY0QAy-8EEJmgQAAAFI"]
[Tue Apr 07 20:01:00.415337 2026] [:error] [pid 37598:tid 37682] [client 20.215.218.174:55690] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTx_O9g7q_cV2WhPayygQAAAJU"]
[Tue Apr 07 20:01:00.525521 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:43749] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTx_E09Xv52u2xXGLAOqwAAANY"]
[Tue Apr 07 20:01:01.800695 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:43367] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTx_Q6uAY0QAy-8EEJmjwAAAFY"]
[Tue Apr 07 20:01:02.510552 2026] [:error] [pid 59660:tid 59683] [client 20.215.218.174:52906] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adTx_jp3-oiX2o5bTswP-wAAAdU"]
[Tue Apr 07 20:01:02.556006 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:45808] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTx_g6uAY0QAy-8EEJmlAAAAEM"]
[Tue Apr 07 20:01:03.514565 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:61461] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTx_w6uAY0QAy-8EEJmlQAAAEc"]
[Tue Apr 07 20:01:03.733955 2026] [:error] [pid 59660:tid 59670] [client 20.215.218.174:61480] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTx_zp3-oiX2o5bTswP_AAAAcg"]
[Tue Apr 07 20:01:04.792963 2026] [:error] [pid 59660:tid 59662] [client 20.215.218.174:6635] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTyADp3-oiX2o5bTswP_wAAAcA"]
[Tue Apr 07 20:01:04.929426 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:55695] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTyAA6uAY0QAy-8EEJmmAAAAFA"]
[Tue Apr 07 20:01:05.908495 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:52926] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTyAQ6uAY0QAy-8EEJmoAAAAEA"]
[Tue Apr 07 20:01:06.250726 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:60928] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTyAl7LN7Ubyqs-sVsAOAAAAYQ"]
[Tue Apr 07 20:01:06.869486 2026] [:error] [pid 59551:tid 59562] [client 20.215.218.174:50927] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTyAl7LN7Ubyqs-sVsAPAAAAYk"]
[Tue Apr 07 20:01:07.736712 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:55736] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyA009Xv52u2xXGLAOvgAAAMc"]
[Tue Apr 07 20:01:07.774201 2026] [:error] [pid 59551:tid 59561] [client 20.215.218.174:60973] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adTyA17LN7Ubyqs-sVsAPwAAAYg"]
[Tue Apr 07 20:01:08.657535 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:61481] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTyBA6uAY0QAy-8EEJmpgAAAFA"]
[Tue Apr 07 20:01:08.726946 2026] [:error] [pid 37719:tid 37728] [client 20.215.218.174:61459] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyBE09Xv52u2xXGLAOvwAAAMY"]
[Tue Apr 07 20:01:09.324377 2026] [:error] [pid 37597:tid 37643] [client 20.215.218.174:45022] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTyBQ6uAY0QAy-8EEJmqAAAAEk"]
[Tue Apr 07 20:01:10.649934 2026] [:error] [pid 37719:tid 37722] [client 20.215.218.174:65266] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyBk09Xv52u2xXGLAOxQAAAMA"]
[Tue Apr 07 20:01:11.205215 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:41209] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTyBw6uAY0QAy-8EEJmrAAAAEE"]
[Tue Apr 07 20:01:12.018178 2026] [:error] [pid 59660:tid 59685] [client 20.215.218.174:52876] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adTyCDp3-oiX2o5bTswQAgAAAdc"]
[Tue Apr 07 20:01:12.198047 2026] [:error] [pid 59660:tid 59686] [client 20.215.218.174:43720] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyCDp3-oiX2o5bTswQAwAAAdg"]
[Tue Apr 07 20:01:12.928643 2026] [:error] [pid 12948:tid 12955] [client 20.215.218.174:43375] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTyCMbeSPAN8LvMqsaqtwAAAQQ"]
[Tue Apr 07 20:01:12.989169 2026] [:error] [pid 59660:tid 59671] [client 20.215.218.174:61472] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adTyCDp3-oiX2o5bTswQBwAAAck"]
[Tue Apr 07 20:01:13.677484 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:6685] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTyCU09Xv52u2xXGLAOzQAAAMI"]
[Tue Apr 07 20:01:13.687046 2026] [:error] [pid 37719:tid 37745] [client 20.215.218.174:6627] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTyCU09Xv52u2xXGLAOzgAAANc"]
[Tue Apr 07 20:01:14.399379 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:41199] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTyCg6uAY0QAy-8EEJmsQAAAEY"]
[Tue Apr 07 20:01:14.742706 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:45794] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTyCg6uAY0QAy-8EEJmsgAAAFE"]
[Tue Apr 07 20:01:15.591869 2026] [:error] [pid 37598:tid 37661] [client 20.215.218.174:52868] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css.php"] [unique_id "adTyC-9g7q_cV2WhPayyigAAAIA"]
[Tue Apr 07 20:01:15.698013 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:55712] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTyCw6uAY0QAy-8EEJmtQAAAEo"]
[Tue Apr 07 20:01:16.593461 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:60936] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyDE09Xv52u2xXGLAO0QAAAMc"]
[Tue Apr 07 20:01:16.632455 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:45788] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTyDA6uAY0QAy-8EEJmtwAAAEI"]
[Tue Apr 07 20:01:17.490149 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:43355] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyDe9g7q_cV2WhPayyjgAAAJI"]
[Tue Apr 07 20:01:17.913999 2026] [:error] [pid 37596:tid 37628] [client 20.215.218.174:45809] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTyDapaAOZHEjRWjP2aQwAAABY"]
[Tue Apr 07 20:01:18.223953 2026] [:error] [pid 59660:tid 59684] [client 20.215.218.174:45781] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyDjp3-oiX2o5bTswQDQAAAdY"]
[Tue Apr 07 20:01:19.069794 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:6646] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyD009Xv52u2xXGLAO0wAAANI"]
[Tue Apr 07 20:01:19.423939 2026] [:error] [pid 59551:tid 59564] [client 20.215.218.174:43772] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTyD17LN7Ubyqs-sVsAUgAAAYs"]
[Tue Apr 07 20:01:20.018194 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:43722] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyEA6uAY0QAy-8EEJmwgAAAFQ"]
[Tue Apr 07 20:01:20.933665 2026] [:error] [pid 59660:tid 59681] [client 20.215.218.174:43348] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file32.php"] [unique_id "adTyEDp3-oiX2o5bTswQEwAAAdM"]
[Tue Apr 07 20:01:21.041633 2026] [:error] [pid 12948:tid 12953] [client 20.215.218.174:41212] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyEcbeSPAN8LvMqsaqwQAAAQI"]
[Tue Apr 07 20:01:22.100507 2026] [:error] [pid 37598:tid 37665] [client 20.215.218.174:61470] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTyEu9g7q_cV2WhPayykQAAAIQ"]
[Tue Apr 07 20:01:22.218841 2026] [:error] [pid 59660:tid 59680] [client 20.215.218.174:52892] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyEjp3-oiX2o5bTswQFAAAAdI"]
[Tue Apr 07 20:01:23.159498 2026] [:error] [pid 37596:tid 37619] [client 20.215.218.174:45770] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTyE6paAOZHEjRWjP2aRAAAAA0"]
[Tue Apr 07 20:01:23.333166 2026] [:error] [pid 59551:tid 59565] [client 20.215.218.174:43349] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyE17LN7Ubyqs-sVsAXwAAAYw"]
[Tue Apr 07 20:01:24.297025 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:45001] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTyFE09Xv52u2xXGLAO1gAAAMw"]
[Tue Apr 07 20:01:24.900543 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:52890] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyFO9g7q_cV2WhPayylAAAAJI"]
[Tue Apr 07 20:01:25.173437 2026] [:error] [pid 59804:tid 59820] [client 20.215.218.174:41165] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nope.php"] [unique_id "adTyFXYVIXiPh5_eJTmhKwAAAg4"]
[Tue Apr 07 20:01:25.996610 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:6715] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyFU09Xv52u2xXGLAO3gAAAMg"]
[Tue Apr 07 20:01:26.107706 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:43363] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyFk09Xv52u2xXGLAO3wAAANY"]
[Tue Apr 07 20:01:26.762750 2026] [:error] [pid 37719:tid 37737] [client 20.215.218.174:52874] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyFk09Xv52u2xXGLAO5QAAAM8"]
[Tue Apr 07 20:01:26.925762 2026] [:error] [pid 37719:tid 37725] [client 20.215.218.174:45816] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyFk09Xv52u2xXGLAO5gAAAMM"]
[Tue Apr 07 20:01:27.644221 2026] [:error] [pid 59551:tid 59563] [client 20.215.218.174:52909] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyF17LN7Ubyqs-sVsAYgAAAYo"]
[Tue Apr 07 20:01:27.829845 2026] [:error] [pid 59804:tid 59810] [client 20.215.218.174:45780] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyF3YVIXiPh5_eJTmhLQAAAgQ"]
[Tue Apr 07 20:01:28.330382 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:61485] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js.php"] [unique_id "adTyGA6uAY0QAy-8EEJm2AAAAFU"]
[Tue Apr 07 20:01:28.464851 2026] [:error] [pid 37719:tid 37745] [client 20.215.218.174:45798] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyGE09Xv52u2xXGLAO6gAAANc"]
[Tue Apr 07 20:01:28.933560 2026] [:error] [pid 37719:tid 37726] [client 20.215.218.174:61451] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adTyGE09Xv52u2xXGLAO7AAAAMQ"]
[Tue Apr 07 20:01:29.170126 2026] [:error] [pid 37719:tid 37732] [client 20.215.218.174:47490] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyGU09Xv52u2xXGLAO7wAAAMo"]
[Tue Apr 07 20:01:29.497765 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:45783] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTyGU09Xv52u2xXGLAO8QAAAMU"]
[Tue Apr 07 20:01:30.083899 2026] [:error] [pid 59804:tid 59814] [client 20.215.218.174:52913] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyGnYVIXiPh5_eJTmhLwAAAgg"]
[Tue Apr 07 20:01:30.317441 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:45763] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTyGg6uAY0QAy-8EEJm3QAAAFE"]
[Tue Apr 07 20:01:30.762832 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:61462] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyGg6uAY0QAy-8EEJm4wAAAEc"]
[Tue Apr 07 20:01:31.078994 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:60966] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTyGw6uAY0QAy-8EEJm5wAAAFU"]
[Tue Apr 07 20:01:31.736652 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:45784] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyGw6uAY0QAy-8EEJm8QAAAEc"]
[Tue Apr 07 20:01:31.852691 2026] [:error] [pid 37598:tid 37673] [client 20.215.218.174:41157] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/num.php"] [unique_id "adTyG-9g7q_cV2WhPayylgAAAIw"]
[Tue Apr 07 20:01:32.536180 2026] [:error] [pid 37719:tid 37745] [client 20.215.218.174:45006] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyHE09Xv52u2xXGLAO-AAAANc"]
[Tue Apr 07 20:01:32.723611 2026] [:error] [pid 59551:tid 59567] [client 20.215.218.174:55730] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyHF7LN7Ubyqs-sVsAaAAAAY4"]
[Tue Apr 07 20:01:33.459313 2026] [:error] [pid 37596:tid 37606] [client 20.215.218.174:38642] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyHapaAOZHEjRWjP2aRQAAAAA"]
[Tue Apr 07 20:01:33.473963 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:56270] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyHQ6uAY0QAy-8EEJm_QAAAFc"]
[Tue Apr 07 20:01:34.356826 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:47506] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyHl7LN7Ubyqs-sVsAawAAAY0"]
[Tue Apr 07 20:01:34.416803 2026] [:error] [pid 59551:tid 59560] [client 20.215.218.174:47513] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyHl7LN7Ubyqs-sVsAbAAAAYc"]
[Tue Apr 07 20:01:35.355538 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:6219] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mah.php"] [unique_id "adTyH17LN7Ubyqs-sVsAbQAAAZY"]
[Tue Apr 07 20:01:35.731851 2026] [:error] [pid 59660:tid 59673] [client 20.215.218.174:47530] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTyHzp3-oiX2o5bTswQFwAAAcs"]
[Tue Apr 07 20:01:36.234827 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:45039] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyIA6uAY0QAy-8EEJnBwAAAFM"]
[Tue Apr 07 20:01:37.031362 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:52901] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTyIQ6uAY0QAy-8EEJnDQAAAEI"]
[Tue Apr 07 20:01:37.547610 2026] [:error] [pid 12948:tid 12959] [client 20.215.218.174:47547] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyIcbeSPAN8LvMqsaq4gAAAQg"]
[Tue Apr 07 20:01:37.971544 2026] [:error] [pid 59551:tid 59568] [client 20.215.218.174:44478] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTyIV7LN7Ubyqs-sVsAcwAAAY8"]
[Tue Apr 07 20:01:38.557747 2026] [:error] [pid 12948:tid 12963] [client 20.215.218.174:47075] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyIsbeSPAN8LvMqsaq5QAAAQw"]
[Tue Apr 07 20:01:38.980438 2026] [:error] [pid 59660:tid 59664] [client 20.215.218.174:44652] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTyIjp3-oiX2o5bTswQGAAAAcI"]
[Tue Apr 07 20:01:39.611762 2026] [:error] [pid 12948:tid 12971] [client 20.215.218.174:60443] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adTyI8beSPAN8LvMqsaq5gAAARQ"]
[Tue Apr 07 20:01:40.119700 2026] [:error] [pid 59804:tid 59812] [client 20.215.218.174:60475] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTyJHYVIXiPh5_eJTmhNQAAAgY"]
[Tue Apr 07 20:01:40.656709 2026] [:error] [pid 59551:tid 59559] [client 20.215.218.174:37160] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyJF7LN7Ubyqs-sVsAdwAAAYY"]
[Tue Apr 07 20:01:41.252274 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:44431] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTyJe9g7q_cV2WhPayyoAAAAJI"]
[Tue Apr 07 20:01:41.629920 2026] [:error] [pid 59660:tid 59675] [client 20.215.218.174:44670] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyJTp3-oiX2o5bTswQIAAAAc0"]
[Tue Apr 07 20:01:42.521911 2026] [:error] [pid 59660:tid 59680] [client 20.215.218.174:38647] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTyJjp3-oiX2o5bTswQIQAAAdI"]
[Tue Apr 07 20:01:42.651089 2026] [:error] [pid 59660:tid 59683] [client 20.215.218.174:37173] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyJjp3-oiX2o5bTswQIgAAAdU"]
[Tue Apr 07 20:01:43.362783 2026] [:error] [pid 59804:tid 59808] [client 20.215.218.174:51425] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adTyJ3YVIXiPh5_eJTmhPAAAAgI"]
[Tue Apr 07 20:01:43.417701 2026] [:error] [pid 37598:tid 37672] [client 20.215.218.174:51429] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/atomlib.php"] [unique_id "adTyJ-9g7q_cV2WhPayyogAAAIs"]
[Tue Apr 07 20:01:44.180558 2026] [:error] [pid 12948:tid 12956] [client 20.215.218.174:44611] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyKMbeSPAN8LvMqsaq6QAAAQU"]
[Tue Apr 07 20:01:44.451819 2026] [:error] [pid 59804:tid 59826] [client 20.215.218.174:62411] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/filemanager.php"] [unique_id "adTyKHYVIXiPh5_eJTmhPgAAAhQ"]
[Tue Apr 07 20:01:44.983155 2026] [:error] [pid 59804:tid 59813] [client 20.215.218.174:37725] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyKHYVIXiPh5_eJTmhPwAAAgc"]
[Tue Apr 07 20:01:45.622147 2026] [:error] [pid 12948:tid 12957] [client 20.215.218.174:41956] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTyKcbeSPAN8LvMqsaq6wAAAQY"]
[Tue Apr 07 20:01:45.957642 2026] [:error] [pid 59551:tid 59569] [client 20.215.218.174:37705] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyKV7LN7Ubyqs-sVsAfAAAAZA"]
[Tue Apr 07 20:01:46.545987 2026] [:error] [pid 59490:tid 59501] [client 20.215.218.174:47067] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wfile.php"] [unique_id "adTyKkcw8OFbiUZ7Rx1mnAAAAUk"]
[Tue Apr 07 20:01:47.124205 2026] [:error] [pid 37596:tid 37624] [client 20.215.218.174:37120] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTyK6paAOZHEjRWjP2aSQAAABI"]
[Tue Apr 07 20:01:47.666110 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:37133] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyK17LN7Ubyqs-sVsAgQAAAY0"]
[Tue Apr 07 20:01:48.506462 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:51376] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "adTyLA6uAY0QAy-8EEJnHAAAAFI"]
[Tue Apr 07 20:01:48.716165 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:44938] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyLA6uAY0QAy-8EEJnHgAAAFM"]
[Tue Apr 07 20:01:49.523962 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:44476] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyLQ6uAY0QAy-8EEJnJgAAAEI"]
[Tue Apr 07 20:01:49.845494 2026] [:error] [pid 59804:tid 59824] [client 20.215.218.174:51365] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTyLXYVIXiPh5_eJTmhRwAAAhI"]
[Tue Apr 07 20:01:51.357225 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:47063] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "adTyL009Xv52u2xXGLAPDwAAAMI"]
[Tue Apr 07 20:01:51.462104 2026] [:error] [pid 37719:tid 37722] [client 20.215.218.174:6915] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTyL009Xv52u2xXGLAPEAAAAMA"]
[Tue Apr 07 20:01:53.184570 2026] [:error] [pid 59490:tid 59492] [client 20.215.218.174:40036] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "adTyMUcw8OFbiUZ7Rx1moQAAAUA"]
[Tue Apr 07 20:01:53.496479 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:61005] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "adTyMQ6uAY0QAy-8EEJnLQAAAFc"]
[Tue Apr 07 20:01:54.152074 2026] [:error] [pid 37597:tid 37649] [client 20.215.218.174:59928] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Tue Apr 07 20:01:54.572118 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:59928] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Apr 07 20:01:54.827390 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:59928] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/filemanager.php"] [unique_id "adTyMg6uAY0QAy-8EEJnOgAAAEY"]
[Tue Apr 07 20:01:56.461744 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:58026] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Tue Apr 07 20:01:57.003029 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:58026] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Apr 07 20:01:57.261368 2026] [:error] [pid 37719:tid 37728] [client 20.215.218.174:58026] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Tue Apr 07 20:01:57.521411 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:58026] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 07 20:01:57.779577 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:58026] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Tue Apr 07 20:01:58.191733 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:61011] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Apr 07 20:01:58.306227 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:58026] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTyNk09Xv52u2xXGLAPHwAAAMU"]
[Tue Apr 07 20:01:59.818577 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:61011] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTyNw6uAY0QAy-8EEJnWwAAAFE"]
[Tue Apr 07 20:02:00.085834 2026] [:error] [pid 37719:tid 37725] [client 20.215.218.174:59958] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTyOE09Xv52u2xXGLAPIgAAAMM"]
[Tue Apr 07 20:02:01.133828 2026] [:error] [pid 37719:tid 37736] [client 20.215.218.174:59948] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTyOU09Xv52u2xXGLAPJgAAAM4"]
[Tue Apr 07 20:02:01.295299 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:6903] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTyOQ6uAY0QAy-8EEJnYgAAAEA"]
[Tue Apr 07 20:02:02.508529 2026] [:error] [pid 59490:tid 59502] [client 20.215.218.174:6886] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTyOkcw8OFbiUZ7Rx1mpQAAAUo"]
[Tue Apr 07 20:02:03.565550 2026] [:error] [pid 12948:tid 12967] [client 20.215.218.174:6872] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTyO8beSPAN8LvMqsaq-gAAARA"]
[Tue Apr 07 20:02:04.204829 2026] [:error] [pid 59804:tid 59809] [client 20.215.218.174:42977] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/33.php"] [unique_id "adTyPHYVIXiPh5_eJTmhVAAAAgM"]
[Tue Apr 07 20:02:04.565649 2026] [:error] [pid 59804:tid 59815] [client 20.215.218.174:59915] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyPHYVIXiPh5_eJTmhVQAAAgk"]
[Tue Apr 07 20:02:05.700520 2026] [:error] [pid 37598:tid 37664] [client 20.215.218.174:41666] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTyPe9g7q_cV2WhPayyrQAAAIM"]
[Tue Apr 07 20:02:05.943177 2026] [:error] [pid 59490:tid 59514] [client 20.215.218.174:6477] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyPUcw8OFbiUZ7Rx1mqwAAAVY"]
[Tue Apr 07 20:02:06.899791 2026] [:error] [pid 59660:tid 59676] [client 20.215.218.174:7127] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTyPjp3-oiX2o5bTswQKAAAAc4"]
[Tue Apr 07 20:02:07.721455 2026] [:error] [pid 59804:tid 59829] [client 20.215.218.174:54787] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyP3YVIXiPh5_eJTmhWQAAAhc"]
[Tue Apr 07 20:02:07.921394 2026] [:error] [pid 59551:tid 59574] [client 20.215.218.174:7134] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTyP17LN7Ubyqs-sVsAkAAAAZU"]
[Tue Apr 07 20:02:08.781609 2026] [:error] [pid 59490:tid 59516] [client 20.215.218.174:39697] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adTyQEcw8OFbiUZ7Rx1msQAAAVg"]
[Tue Apr 07 20:02:08.831208 2026] [:error] [pid 12948:tid 12962] [client 20.215.218.174:54842] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyQMbeSPAN8LvMqsarAAAAAQs"]
[Tue Apr 07 20:02:09.626319 2026] [:error] [pid 37719:tid 37728] [client 20.215.218.174:52988] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTyQU09Xv52u2xXGLAPMwAAAMY"]
[Tue Apr 07 20:02:10.076907 2026] [:error] [pid 37598:tid 37665] [client 20.215.218.174:40232] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyQu9g7q_cV2WhPayytAAAAIQ"]
[Tue Apr 07 20:02:10.179197 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:55677] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTyQk09Xv52u2xXGLAPNQAAAMk"]
[Tue Apr 07 20:02:11.296344 2026] [:error] [pid 59490:tid 59502] [client 20.215.218.174:61566] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyQ0cw8OFbiUZ7Rx1mtQAAAUo"]
[Tue Apr 07 20:02:11.555875 2026] [:error] [pid 37598:tid 37669] [client 20.215.218.174:6495] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTyQ-9g7q_cV2WhPayyuQAAAIg"]
[Tue Apr 07 20:02:12.096190 2026] [:error] [pid 37719:tid 37742] [client 20.215.218.174:61526] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyRE09Xv52u2xXGLAPOgAAANQ"]
[Tue Apr 07 20:02:12.869791 2026] [:error] [pid 59490:tid 59515] [client 20.215.218.174:39741] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyREcw8OFbiUZ7Rx1muAAAAVc"]
[Tue Apr 07 20:02:12.875875 2026] [:error] [pid 59490:tid 59496] [client 20.215.218.174:42125] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/shell.php"] [unique_id "adTyREcw8OFbiUZ7Rx1muQAAAUQ"]
[Tue Apr 07 20:02:13.740962 2026] [:error] [pid 59551:tid 59560] [client 20.215.218.174:51951] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTyRV7LN7Ubyqs-sVsAlgAAAYc"]
[Tue Apr 07 20:02:14.244376 2026] [:error] [pid 59804:tid 59824] [client 20.215.218.174:61506] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTyRnYVIXiPh5_eJTmhYAAAAhI"]
[Tue Apr 07 20:02:14.557466 2026] [:error] [pid 12948:tid 12951] [client 20.215.218.174:64732] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTyRsbeSPAN8LvMqsarAgAAAQA"]
[Tue Apr 07 20:02:15.378164 2026] [:error] [pid 59490:tid 59514] [client 20.215.218.174:64705] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTyR0cw8OFbiUZ7Rx1mugAAAVY"]
[Tue Apr 07 20:02:15.505977 2026] [:error] [pid 59551:tid 59568] [client 20.215.218.174:54795] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTyR17LN7Ubyqs-sVsAnAAAAY8"]
[Tue Apr 07 20:02:16.055193 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:39549] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTySE09Xv52u2xXGLAPQQAAANU"]
[Tue Apr 07 20:02:16.450833 2026] [:error] [pid 59490:tid 59513] [client 20.215.218.174:55622] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTySEcw8OFbiUZ7Rx1muwAAAVU"]
[Tue Apr 07 20:02:16.828331 2026] [:error] [pid 59490:tid 59501] [client 20.215.218.174:48602] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTySEcw8OFbiUZ7Rx1mvQAAAUk"]
[Tue Apr 07 20:02:17.580141 2026] [:error] [pid 59660:tid 59675] [client 20.215.218.174:51931] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adTySTp3-oiX2o5bTswQNQAAAc0"]
[Tue Apr 07 20:02:17.707353 2026] [:error] [pid 59660:tid 59677] [client 20.215.218.174:48639] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTySTp3-oiX2o5bTswQNgAAAc8"]
[Tue Apr 07 20:02:18.736461 2026] [:error] [pid 59804:tid 59829] [client 20.215.218.174:54827] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTySnYVIXiPh5_eJTmhZAAAAhc"]
[Tue Apr 07 20:02:18.937018 2026] [:error] [pid 59804:tid 59821] [client 20.215.218.174:42117] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTySnYVIXiPh5_eJTmhZQAAAg8"]
[Tue Apr 07 20:02:20.276859 2026] [:error] [pid 37596:tid 37619] [client 20.215.218.174:39519] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTyTKpaAOZHEjRWjP2aWwAAAA0"]
[Tue Apr 07 20:02:21.174570 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:39729] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTyTQ6uAY0QAy-8EEJnZwAAAE4"]
[Tue Apr 07 20:02:22.892184 2026] [:error] [pid 59551:tid 59559] [client 20.215.218.174:51957] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTyTl7LN7Ubyqs-sVsApQAAAYY"]
[Tue Apr 07 20:02:24.324490 2026] [:error] [pid 12948:tid 12969] [client 20.215.218.174:54829] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-x7.php"] [unique_id "adTyUMbeSPAN8LvMqsarCwAAARI"]
[Tue Apr 07 20:02:24.501001 2026] [:error] [pid 59804:tid 59826] [client 20.215.218.174:61547] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTyUHYVIXiPh5_eJTmhbwAAAhQ"]
[Tue Apr 07 20:02:25.617081 2026] [:error] [pid 59804:tid 59808] [client 20.215.218.174:38242] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyUXYVIXiPh5_eJTmhcQAAAgI"]
[Tue Apr 07 20:02:26.166858 2026] [:error] [pid 37596:tid 37622] [client 20.215.218.174:48637] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTyUqpaAOZHEjRWjP2aXgAAABA"]
[Tue Apr 07 20:02:28.313361 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:39728] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTyVF7LN7Ubyqs-sVsAqgAAAZY"]
[Tue Apr 07 20:02:28.341602 2026] [:error] [pid 59551:tid 59560] [client 20.215.218.174:39720] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyVF7LN7Ubyqs-sVsAqwAAAYc"]
[Tue Apr 07 20:02:31.350537 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:39743] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an7.php"] [unique_id "adTyVw6uAY0QAy-8EEJnmgAAAFE"]
[Tue Apr 07 20:02:31.604091 2026] [:error] [pid 59804:tid 59812] [client 20.215.218.174:50864] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyV3YVIXiPh5_eJTmhegAAAgY"]
[Tue Apr 07 20:02:33.029436 2026] [:error] [pid 12948:tid 12966] [client 20.215.218.174:39490] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTyWcbeSPAN8LvMqsarDwAAAQ8"]
[Tue Apr 07 20:02:34.053930 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:37636] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/log.php"] [unique_id "adTyWu9g7q_cV2WhPayywgAAAJI"]
[Tue Apr 07 20:02:34.685277 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:64757] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTyWg6uAY0QAy-8EEJnpQAAAEc"]
[Tue Apr 07 20:02:34.992041 2026] [:error] [pid 12948:tid 12975] [client 20.215.218.174:64717] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyWsbeSPAN8LvMqsarEwAAARg"]
[Tue Apr 07 20:02:35.969966 2026] [:error] [pid 37598:tid 37673] [client 20.215.218.174:40244] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTyW-9g7q_cV2WhPayyxwAAAIw"]
[Tue Apr 07 20:02:36.060166 2026] [:error] [pid 59490:tid 59510] [client 20.215.218.174:50868] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyXEcw8OFbiUZ7Rx1mxQAAAVI"]
[Tue Apr 07 20:02:36.843764 2026] [:error] [pid 37598:tid 37664] [client 20.215.218.174:39740] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyXO9g7q_cV2WhPayyyQAAAIM"]
[Tue Apr 07 20:02:36.869918 2026] [:error] [pid 37598:tid 37671] [client 20.215.218.174:38247] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "adTyXO9g7q_cV2WhPayyygAAAIo"]
[Tue Apr 07 20:02:37.795428 2026] [:error] [pid 59551:tid 59573] [client 20.215.218.174:41956] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v4.php"] [unique_id "adTyXV7LN7Ubyqs-sVsAtwAAAZQ"]
[Tue Apr 07 20:02:38.010374 2026] [:error] [pid 59551:tid 59563] [client 20.215.218.174:50828] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adTyXl7LN7Ubyqs-sVsAuAAAAYo"]
[Tue Apr 07 20:02:38.656451 2026] [:error] [pid 37598:tid 37683] [client 20.215.218.174:48579] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTyXu9g7q_cV2WhPayy0gAAAJY"]
[Tue Apr 07 20:02:39.463600 2026] [:error] [pid 59551:tid 59577] [client 20.215.218.174:40219] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTyX17LN7Ubyqs-sVsAugAAAZg"]
[Tue Apr 07 20:02:40.332923 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:50818] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTyYA6uAY0QAy-8EEJnqwAAAE4"]
[Tue Apr 07 20:02:41.956860 2026] [:error] [pid 59551:tid 59569] [client 20.215.218.174:37678] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTyYV7LN7Ubyqs-sVsAxQAAAZA"]
[Tue Apr 07 20:02:44.144811 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:53438] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTyZA6uAY0QAy-8EEJntwAAAEM"]
[Tue Apr 07 20:02:45.784819 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:50850] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTyZQ6uAY0QAy-8EEJnvQAAAEY"]
[Tue Apr 07 20:02:47.510283 2026] [:error] [pid 37597:tid 37638] [client 20.215.218.174:38227] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adTyZw6uAY0QAy-8EEJnwwAAAEQ"]
[Tue Apr 07 20:02:50.633723 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:40876] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTyag6uAY0QAy-8EEJnzgAAAEs"]
[Tue Apr 07 20:02:50.762307 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:50831] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adTyag6uAY0QAy-8EEJnzwAAAFg"]
[Tue Apr 07 20:02:53.163267 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:37671] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTybQ6uAY0QAy-8EEJn4AAAAFE"]
[Tue Apr 07 20:02:54.802963 2026] [:error] [pid 59804:tid 59829] [client 20.215.218.174:38231] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTybnYVIXiPh5_eJTmhkwAAAhc"]
[Tue Apr 07 20:02:54.985517 2026] [:error] [pid 59551:tid 59564] [client 20.215.218.174:48582] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ext.php"] [unique_id "adTybl7LN7Ubyqs-sVsA0gAAAYs"]
[Tue Apr 07 20:02:56.733787 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:56365] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file.php"] [unique_id "adTycA6uAY0QAy-8EEJn5QAAAFM"]
[Tue Apr 07 20:02:58.149794 2026] [:error] [pid 59551:tid 59555] [client 20.215.218.174:45707] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Tue Apr 07 20:02:58.407548 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:45707] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Tue Apr 07 20:02:58.528615 2026] [:error] [pid 37598:tid 37664] [client 20.215.218.174:57276] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Tue Apr 07 20:02:58.702789 2026] [:error] [pid 59551:tid 59577] [client 20.215.218.174:45707] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 07 20:02:58.785437 2026] [:error] [pid 37598:tid 37675] [client 20.215.218.174:57276] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Tue Apr 07 20:02:58.975081 2026] [:error] [pid 59551:tid 59568] [client 20.215.218.174:45707] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Apr 07 20:02:59.040143 2026] [:error] [pid 37598:tid 37663] [client 20.215.218.174:57276] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adTyc-9g7q_cV2WhPayy_AAAAII"]
[Tue Apr 07 20:03:00.697026 2026] [:error] [pid 59551:tid 59562] [client 20.215.218.174:45707] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Apr 07 20:03:00.952419 2026] [:error] [pid 59551:tid 59569] [client 20.215.218.174:45707] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/fm.php"] [unique_id "adTydF7LN7Ubyqs-sVsA5AAAAZA"]
[Tue Apr 07 20:03:02.297887 2026] [:error] [pid 59490:tid 59500] [client 20.215.218.174:39443] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Tue Apr 07 20:03:02.569444 2026] [:error] [pid 59490:tid 59516] [client 20.215.218.174:39443] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Tue Apr 07 20:03:02.832794 2026] [:error] [pid 59490:tid 59503] [client 20.215.218.174:39443] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 07 20:03:03.087561 2026] [:error] [pid 59490:tid 59510] [client 20.215.218.174:39443] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTyd0cw8OFbiUZ7Rx1m0AAAAVI"]
[Tue Apr 07 20:03:04.855889 2026] [:error] [pid 59804:tid 59815] [client 20.215.218.174:39474] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTyeHYVIXiPh5_eJTmhpgAAAgk"]
[Tue Apr 07 20:03:06.083229 2026] [:error] [pid 12948:tid 12959] [client 20.215.218.174:40919] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTyesbeSPAN8LvMqsarJAAAAQg"]
[Tue Apr 07 20:03:07.695856 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:6759] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTyew6uAY0QAy-8EEJn8gAAAEs"]
[Tue Apr 07 20:03:09.468925 2026] [:error] [pid 59551:tid 59555] [client 20.215.218.174:40957] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTyfV7LN7Ubyqs-sVsBDAAAAYI"]
[Tue Apr 07 20:03:10.108775 2026] [:error] [pid 59660:tid 59677] [client 20.215.218.174:7081] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zwso.php"] [unique_id "adTyfjp3-oiX2o5bTswQUwAAAc8"]
[Tue Apr 07 20:03:13.731641 2026] [:error] [pid 59804:tid 59823] [client 20.215.218.174:6761] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTygXYVIXiPh5_eJTmhuQAAAhE"]
[Tue Apr 07 20:03:14.287176 2026] [:error] [pid 59490:tid 59497] [client 20.215.218.174:50277] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTygkcw8OFbiUZ7Rx1m1AAAAUU"]
[Tue Apr 07 20:03:15.130728 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:50261] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTyg009Xv52u2xXGLAPbwAAAMI"]
[Tue Apr 07 20:03:15.740716 2026] [:error] [pid 37719:tid 37736] [client 20.215.218.174:39248] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTyg009Xv52u2xXGLAPeQAAAM4"]
[Tue Apr 07 20:03:16.173116 2026] [:error] [pid 37719:tid 37738] [client 20.215.218.174:6780] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTyhE09Xv52u2xXGLAPggAAANA"]
[Tue Apr 07 20:03:16.773947 2026] [:error] [pid 37598:tid 37661] [client 20.215.218.174:60512] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTyhO9g7q_cV2WhPayzEgAAAIA"]
[Tue Apr 07 20:03:17.770173 2026] [:error] [pid 37598:tid 37677] [client 20.215.218.174:60499] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "adTyhe9g7q_cV2WhPayzEwAAAJA"]
[Tue Apr 07 20:03:18.309271 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:6732] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTyhg6uAY0QAy-8EEJoEwAAAFg"]
[Tue Apr 07 20:03:18.615359 2026] [:error] [pid 12948:tid 12963] [client 20.215.218.174:7084] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.dbservices.com.au"] [uri "/fm.php"] [unique_id "adTyhsbeSPAN8LvMqsarLgAAAQw"]
[Tue Apr 07 20:03:20.066481 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:60507] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTyiF7LN7Ubyqs-sVsBGQAAAYQ"]
[Tue Apr 07 20:03:22.838245 2026] [:error] [pid 37596:tid 37607] [client 20.215.218.174:56768] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTyiqpaAOZHEjRWjP2aeAAAAAE"]
[Tue Apr 07 20:03:23.032024 2026] [:error] [pid 37596:tid 37627] [client 20.215.218.174:39292] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTyi6paAOZHEjRWjP2aeQAAABU"]
[Tue Apr 07 20:03:24.931102 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:49835] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTyjA6uAY0QAy-8EEJoFgAAAEY"]
[Tue Apr 07 20:03:26.598415 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:6747] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTyjk09Xv52u2xXGLAPlQAAANI"]
[Tue Apr 07 20:03:26.833818 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:39291] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ahax.php"] [unique_id "adTyjg6uAY0QAy-8EEJoGgAAAEA"]
[Tue Apr 07 20:03:28.251497 2026] [:error] [pid 59804:tid 59828] [client 20.215.218.174:53443] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTykHYVIXiPh5_eJTmh0QAAAhY"]
[Tue Apr 07 20:03:28.463624 2026] [:error] [pid 12948:tid 12951] [client 20.215.218.174:58097] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTykMbeSPAN8LvMqsarNgAAAQA"]
[Tue Apr 07 20:03:29.065843 2026] [:error] [pid 59804:tid 59829] [client 20.215.218.174:49831] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTykXYVIXiPh5_eJTmh1QAAAhc"]
[Tue Apr 07 20:03:29.462876 2026] [:error] [pid 59804:tid 59807] [client 20.215.218.174:50242] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTykXYVIXiPh5_eJTmh1wAAAgE"]
[Tue Apr 07 20:03:30.346491 2026] [:error] [pid 37719:tid 37732] [client 20.215.218.174:7060] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTykk09Xv52u2xXGLAPnQAAAMo"]
[Tue Apr 07 20:03:30.630478 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:60483] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTykg6uAY0QAy-8EEJoKQAAAFI"]
[Tue Apr 07 20:03:31.678933 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:41363] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adTykw6uAY0QAy-8EEJoLgAAAFA"]
[Tue Apr 07 20:03:33.459938 2026] [:error] [pid 59804:tid 59821] [client 20.215.218.174:64239] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTylXYVIXiPh5_eJTmh6QAAAg8"]
[Tue Apr 07 20:03:33.676017 2026] [:error] [pid 59551:tid 59556] [client 20.215.218.174:64175] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTylV7LN7Ubyqs-sVsBJwAAAYM"]
[Tue Apr 07 20:03:34.978758 2026] [:error] [pid 37598:tid 37681] [client 20.215.218.174:6749] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTylu9g7q_cV2WhPayzIgAAAJQ"]
[Tue Apr 07 20:03:35.847737 2026] [:error] [pid 59804:tid 59809] [client 20.215.218.174:56803] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTyl3YVIXiPh5_eJTmh7AAAAgM"]
[Tue Apr 07 20:03:35.992858 2026] [:error] [pid 59804:tid 59828] [client 20.215.218.174:41366] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTyl3YVIXiPh5_eJTmh7QAAAhY"]
[Tue Apr 07 20:03:36.873423 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:64240] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTymA6uAY0QAy-8EEJoPAAAAEs"]
[Tue Apr 07 20:03:36.998562 2026] [:error] [pid 37719:tid 37722] [client 20.215.218.174:49852] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTymE09Xv52u2xXGLAPoQAAAMA"]
[Tue Apr 07 20:03:37.924879 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:49830] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/0x.php"] [unique_id "adTymQ6uAY0QAy-8EEJoPgAAAEI"]
[Tue Apr 07 20:03:38.698506 2026] [:error] [pid 59551:tid 59564] [client 20.215.218.174:39233] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adTyml7LN7Ubyqs-sVsBKQAAAYs"]
[Tue Apr 07 20:03:39.750404 2026] [:error] [pid 37598:tid 37670] [client 20.215.218.174:64187] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTym-9g7q_cV2WhPayzKwAAAIk"]
[Tue Apr 07 20:03:39.926269 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:58086] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTymw6uAY0QAy-8EEJoSAAAAEA"]
[Tue Apr 07 20:03:40.997980 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:7058] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTynA6uAY0QAy-8EEJoTwAAAFA"]
[Tue Apr 07 20:03:41.915675 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:50253] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTynU09Xv52u2xXGLAPowAAANU"]
[Tue Apr 07 20:03:43.020770 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:58088] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTyn009Xv52u2xXGLAPpgAAAMI"]
[Tue Apr 07 20:03:43.033879 2026] [:error] [pid 37719:tid 37738] [client 20.215.218.174:7064] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTyn009Xv52u2xXGLAPpwAAANA"]
[Tue Apr 07 20:03:43.954071 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:41347] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTynw6uAY0QAy-8EEJoVQAAAFE"]
[Tue Apr 07 20:03:44.104719 2026] [:error] [pid 59660:tid 59671] [client 20.215.218.174:6742] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adTyoDp3-oiX2o5bTswQaAAAAck"]
[Tue Apr 07 20:03:44.812682 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:49383] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTyoA6uAY0QAy-8EEJoWQAAAEs"]
[Tue Apr 07 20:03:45.060862 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:56811] [client 20.215.218.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adTyoQ6uAY0QAy-8EEJoWgAAAE4"]
[Tue Apr 07 20:03:45.899046 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:41877] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTyoQ6uAY0QAy-8EEJoXQAAAFc"]
[Tue Apr 07 20:03:45.962042 2026] [:error] [pid 37598:tid 37666] [client 20.215.218.174:64145] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTyoe9g7q_cV2WhPayzLwAAAIU"]
[Tue Apr 07 20:03:46.785259 2026] [:error] [pid 59551:tid 59570] [client 20.215.218.174:64193] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTyol7LN7Ubyqs-sVsBMgAAAZE"]
[Tue Apr 07 20:03:47.408812 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:58082] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTyow6uAY0QAy-8EEJoZAAAAEs"]
[Tue Apr 07 20:03:48.031750 2026] [:error] [pid 37597:tid 37639] [client 20.215.218.174:49809] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTypA6uAY0QAy-8EEJoaAAAAEU"]
[Tue Apr 07 20:03:49.304553 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:64144] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTypQ6uAY0QAy-8EEJobQAAAEY"]
[Tue Apr 07 20:03:49.714785 2026] [:error] [pid 37596:tid 37614] [client 20.215.218.174:64182] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/k.php"] [unique_id "adTypapaAOZHEjRWjP2ahAAAAAg"]
[Tue Apr 07 20:03:50.452046 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:39247] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTypk09Xv52u2xXGLAPqwAAAMw"]
[Tue Apr 07 20:03:51.423660 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:50303] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTyp009Xv52u2xXGLAPrwAAAM0"]
[Tue Apr 07 20:03:51.818094 2026] [:error] [pid 37719:tid 37732] [client 20.215.218.174:58091] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTyp009Xv52u2xXGLAPsgAAAMo"]
[Tue Apr 07 20:03:52.746964 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:50289] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTyqA6uAY0QAy-8EEJocwAAAEg"]
[Tue Apr 07 20:03:53.519428 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:54078] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTyqQ6uAY0QAy-8EEJoeQAAAFM"]
[Tue Apr 07 20:03:54.175970 2026] [:error] [pid 59551:tid 59569] [client 20.215.218.174:64136] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTyql7LN7Ubyqs-sVsBNgAAAZA"]
[Tue Apr 07 20:03:54.775305 2026] [:error] [pid 59551:tid 59567] [client 20.215.218.174:49815] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTyql7LN7Ubyqs-sVsBOgAAAY4"]
[Tue Apr 07 20:03:55.666006 2026] [:error] [pid 59551:tid 59561] [client 20.215.218.174:53442] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "adTyq17LN7Ubyqs-sVsBPQAAAYg"]
[Tue Apr 07 20:03:55.903584 2026] [:error] [pid 37598:tid 37683] [client 20.215.218.174:49877] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTyq-9g7q_cV2WhPayzMQAAAJY"]
[Tue Apr 07 20:03:56.862331 2026] [:error] [pid 37596:tid 37612] [client 20.215.218.174:49390] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTyrKpaAOZHEjRWjP2ahwAAAAY"]
[Tue Apr 07 20:03:57.169668 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:50265] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTyrQ6uAY0QAy-8EEJofgAAAEE"]
[Tue Apr 07 20:03:57.843321 2026] [:error] [pid 37598:tid 37667] [client 20.215.218.174:49915] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTyre9g7q_cV2WhPayzMwAAAIY"]
[Tue Apr 07 20:03:58.229967 2026] [:error] [pid 37598:tid 37670] [client 20.215.218.174:49353] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTyru9g7q_cV2WhPayzNQAAAIk"]
[Tue Apr 07 20:03:58.753040 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:50284] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTyrk09Xv52u2xXGLAPvgAAAMg"]
[Tue Apr 07 20:03:59.279117 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:6745] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dlu.php"] [unique_id "adTyrw6uAY0QAy-8EEJogQAAAFE"]
[Tue Apr 07 20:04:00.007564 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:45764] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager.php"] [unique_id "adTysE09Xv52u2xXGLAPyAAAAMk"]
[Tue Apr 07 20:04:00.789710 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:7055] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTysE09Xv52u2xXGLAPzQAAAMc"]
[Tue Apr 07 20:04:00.868707 2026] [:error] [pid 37719:tid 37745] [client 20.215.218.174:54018] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dlu.php"] [unique_id "adTysE09Xv52u2xXGLAPzwAAANc"]
[Tue Apr 07 20:04:01.864800 2026] [:error] [pid 59551:tid 59572] [client 20.215.218.174:54050] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adTysV7LN7Ubyqs-sVsBRAAAAZM"]
[Tue Apr 07 20:04:02.059922 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:49863] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Tue Apr 07 20:04:02.318647 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:49863] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Tue Apr 07 20:04:02.580848 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:49863] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 07 20:04:02.988296 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:49863] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Tue Apr 07 20:04:03.026525 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:49395] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Tue Apr 07 20:04:03.247037 2026] [:error] [pid 37597:tid 37643] [client 20.215.218.174:49863] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Tue Apr 07 20:04:03.284534 2026] [:error] [pid 59551:tid 59573] [client 20.215.218.174:49395] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Tue Apr 07 20:04:03.783789 2026] [:error] [pid 59551:tid 59573] [client 20.215.218.174:49395] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 07 20:04:04.401986 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:49395] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Tue Apr 07 20:04:04.660596 2026] [:error] [pid 59551:tid 59564] [client 20.215.218.174:49395] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Tue Apr 07 20:04:04.953155 2026] [:error] [pid 59551:tid 59577] [client 20.215.218.174:49395] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTytF7LN7Ubyqs-sVsBTgAAAZg"]
[Tue Apr 07 20:04:05.044336 2026] [:error] [pid 37597:tid 37643] [client 20.215.218.174:49863] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTytQ6uAY0QAy-8EEJokAAAAEk"]
[Tue Apr 07 20:04:05.928065 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:58109] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTytQ6uAY0QAy-8EEJokQAAAFU"]
[Tue Apr 07 20:04:05.951501 2026] [:error] [pid 59551:tid 59574] [client 20.215.218.174:64183] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTytV7LN7Ubyqs-sVsBUQAAAZU"]
[Tue Apr 07 20:04:06.743807 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:56824] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTytg6uAY0QAy-8EEJolQAAAEI"]
[Tue Apr 07 20:04:06.823981 2026] [:error] [pid 59804:tid 59826] [client 20.215.218.174:41361] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTytnYVIXiPh5_eJTmiDQAAAhQ"]
[Tue Apr 07 20:04:07.588340 2026] [:error] [pid 12948:tid 12961] [client 20.215.218.174:46364] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTyt8beSPAN8LvMqsarRwAAAQo"]
[Tue Apr 07 20:04:08.075954 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:49841] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lv.php"] [unique_id "adTyuE09Xv52u2xXGLAP4wAAAM0"]
[Tue Apr 07 20:04:08.338175 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:41115] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyuE09Xv52u2xXGLAP5QAAAMw"]
[Tue Apr 07 20:04:09.106559 2026] [:error] [pid 59804:tid 59822] [client 20.215.218.174:54019] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyuXYVIXiPh5_eJTmiEgAAAhA"]
[Tue Apr 07 20:04:09.253278 2026] [:error] [pid 37598:tid 37669] [client 20.215.218.174:46356] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyue9g7q_cV2WhPayzPAAAAIg"]
[Tue Apr 07 20:04:10.306111 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:46363] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyul7LN7Ubyqs-sVsBUwAAAZY"]
[Tue Apr 07 20:04:10.507877 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:46352] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyug6uAY0QAy-8EEJolwAAAFA"]
[Tue Apr 07 20:04:11.363305 2026] [:error] [pid 37597:tid 37649] [client 20.215.218.174:46338] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyuw6uAY0QAy-8EEJomQAAAE8"]
[Tue Apr 07 20:04:11.414309 2026] [:error] [pid 59490:tid 59503] [client 20.215.218.174:54047] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyu0cw8OFbiUZ7Rx1m5QAAAUs"]
[Tue Apr 07 20:04:12.068558 2026] [:error] [pid 12948:tid 12968] [client 20.215.218.174:49892] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTyvMbeSPAN8LvMqsarSQAAARE"]
[Tue Apr 07 20:04:12.446679 2026] [:error] [pid 12948:tid 12951] [client 20.215.218.174:49871] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hook.php"] [unique_id "adTyvMbeSPAN8LvMqsarSwAAAQA"]
[Tue Apr 07 20:04:13.117322 2026] [:error] [pid 37719:tid 37746] [client 20.215.218.174:49374] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTyvU09Xv52u2xXGLAP9wAAANg"]
[Tue Apr 07 20:04:13.907891 2026] [:error] [pid 59804:tid 59821] [client 20.215.218.174:49872] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTyvXYVIXiPh5_eJTmiFwAAAg8"]
[Tue Apr 07 20:04:14.312839 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:46372] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTyvg6uAY0QAy-8EEJomwAAAEg"]
[Tue Apr 07 20:04:15.422068 2026] [:error] [pid 59551:tid 59570] [client 20.215.218.174:64192] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTyv17LN7Ubyqs-sVsBVwAAAZE"]
[Tue Apr 07 20:04:15.558127 2026] [:error] [pid 59551:tid 59565] [client 20.215.218.174:49816] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTyv17LN7Ubyqs-sVsBWAAAAYw"]
[Tue Apr 07 20:04:16.604311 2026] [:error] [pid 37598:tid 37672] [client 20.215.218.174:64222] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTywO9g7q_cV2WhPayzRwAAAIs"]
[Tue Apr 07 20:04:16.715410 2026] [:error] [pid 59804:tid 59820] [client 20.215.218.174:46350] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTywHYVIXiPh5_eJTmiGgAAAg4"]
[Tue Apr 07 20:04:17.329860 2026] [:error] [pid 59804:tid 59828] [client 20.215.218.174:56786] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTywXYVIXiPh5_eJTmiGwAAAhY"]
[Tue Apr 07 20:04:17.833968 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:49392] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "adTywQ6uAY0QAy-8EEJonQAAAE0"]
[Tue Apr 07 20:04:18.181343 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:49891] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTywg6uAY0QAy-8EEJonwAAAFY"]
[Tue Apr 07 20:04:18.746639 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:56784] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTywg6uAY0QAy-8EEJoowAAAEo"]
[Tue Apr 07 20:04:18.990076 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:49906] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTywg6uAY0QAy-8EEJopgAAAEc"]
[Tue Apr 07 20:04:19.581349 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:52386] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTyww6uAY0QAy-8EEJoqwAAAEI"]
[Tue Apr 07 20:04:20.331269 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:49861] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyxA6uAY0QAy-8EEJorwAAAFY"]
[Tue Apr 07 20:04:21.143297 2026] [:error] [pid 59551:tid 59564] [client 20.215.218.174:49854] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTyxV7LN7Ubyqs-sVsBXAAAAYs"]
[Tue Apr 07 20:04:21.310765 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:54023] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyxQ6uAY0QAy-8EEJotAAAAEc"]
[Tue Apr 07 20:04:22.155433 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:64230] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyxg6uAY0QAy-8EEJotwAAAEs"]
[Tue Apr 07 20:04:22.213093 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:64209] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adTyxg6uAY0QAy-8EEJouAAAAFc"]
[Tue Apr 07 20:04:23.217980 2026] [:error] [pid 12948:tid 12961] [client 20.215.218.174:46376] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyx8beSPAN8LvMqsarTwAAAQo"]
[Tue Apr 07 20:04:24.481997 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:46357] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyyA6uAY0QAy-8EEJovwAAAFE"]
[Tue Apr 07 20:04:25.235677 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:7053] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyyQ6uAY0QAy-8EEJowgAAAEg"]
[Tue Apr 07 20:04:25.696173 2026] [:error] [pid 37597:tid 37638] [client 20.215.218.174:49873] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyyQ6uAY0QAy-8EEJoxAAAAEQ"]
[Tue Apr 07 20:04:26.134719 2026] [:error] [pid 12948:tid 12953] [client 20.215.218.174:39771] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyysbeSPAN8LvMqsarUQAAAQI"]
[Tue Apr 07 20:04:26.844181 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:62434] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v.php"] [unique_id "adTyyk09Xv52u2xXGLAQGAAAANY"]
[Tue Apr 07 20:04:27.163189 2026] [:error] [pid 59660:tid 59679] [client 20.215.218.174:39803] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyyzp3-oiX2o5bTswQcAAAAdE"]
[Tue Apr 07 20:04:27.956967 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:49384] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyy009Xv52u2xXGLAQHgAAAMc"]
[Tue Apr 07 20:04:28.071289 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:62030] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyzE09Xv52u2xXGLAQIAAAANU"]
[Tue Apr 07 20:04:29.163213 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:62462] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyzU09Xv52u2xXGLAQJgAAANM"]
[Tue Apr 07 20:04:29.403339 2026] [:error] [pid 37719:tid 37725] [client 20.215.218.174:42576] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyzU09Xv52u2xXGLAQKAAAAMM"]
[Tue Apr 07 20:04:30.241199 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:56849] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTyzg6uAY0QAy-8EEJoyQAAAFA"]
[Tue Apr 07 20:04:30.328274 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:48000] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyzg6uAY0QAy-8EEJoygAAAEo"]
[Tue Apr 07 20:04:31.082244 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:48538] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTyzw6uAY0QAy-8EEJozAAAAFE"]
[Tue Apr 07 20:04:31.796734 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:52372] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/te.php"] [unique_id "adTyzw6uAY0QAy-8EEJozgAAAE0"]
[Tue Apr 07 20:04:31.805074 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:62078] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTyz009Xv52u2xXGLAQMQAAAMc"]
[Tue Apr 07 20:04:32.501919 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:62426] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTy0E09Xv52u2xXGLAQNwAAAMU"]
[Tue Apr 07 20:04:33.435828 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:51876] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy0Q6uAY0QAy-8EEJo0gAAAEI"]
[Tue Apr 07 20:04:33.944116 2026] [:error] [pid 37596:tid 37609] [client 20.215.218.174:51864] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTy0apaAOZHEjRWjP2aiwAAAAM"]
[Tue Apr 07 20:04:34.503300 2026] [:error] [pid 59551:tid 59576] [client 20.215.218.174:38807] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy0l7LN7Ubyqs-sVsBaAAAAZc"]
[Tue Apr 07 20:04:35.592127 2026] [:error] [pid 37596:tid 37620] [client 20.215.218.174:46430] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy06paAOZHEjRWjP2ajAAAAA4"]
[Tue Apr 07 20:04:35.916601 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:46438] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTy0w6uAY0QAy-8EEJo2QAAAE4"]
[Tue Apr 07 20:04:36.775787 2026] [:error] [pid 59804:tid 59828] [client 20.215.218.174:44553] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy1HYVIXiPh5_eJTmiIwAAAhY"]
[Tue Apr 07 20:04:37.591298 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:6174] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy1U09Xv52u2xXGLAQVwAAAM0"]
[Tue Apr 07 20:04:38.332650 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:6145] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy1g6uAY0QAy-8EEJo3AAAAEA"]
[Tue Apr 07 20:04:38.422231 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:64435] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTy1g6uAY0QAy-8EEJo3QAAAFU"]
[Tue Apr 07 20:04:39.179985 2026] [:error] [pid 59804:tid 59813] [client 20.215.218.174:54103] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy13YVIXiPh5_eJTmiJgAAAgc"]
[Tue Apr 07 20:04:40.150812 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:44143] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy2A6uAY0QAy-8EEJo4gAAAEo"]
[Tue Apr 07 20:04:40.716638 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:6287] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "adTy2F7LN7Ubyqs-sVsBbgAAAYQ"]
[Tue Apr 07 20:04:41.367076 2026] [:error] [pid 59551:tid 59563] [client 20.215.218.174:6433] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy2V7LN7Ubyqs-sVsBbwAAAYo"]
[Tue Apr 07 20:04:41.858417 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:44101] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy2Q6uAY0QAy-8EEJo6AAAAFI"]
[Tue Apr 07 20:04:42.468713 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:64412] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy2l7LN7Ubyqs-sVsBcAAAAZY"]
[Tue Apr 07 20:04:42.974632 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:6423] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy2g6uAY0QAy-8EEJo6gAAAFM"]
[Tue Apr 07 20:04:43.461583 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:6416] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy2w6uAY0QAy-8EEJo7AAAAEg"]
[Tue Apr 07 20:04:44.395546 2026] [:error] [pid 59551:tid 59573] [client 20.215.218.174:6278] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy3F7LN7Ubyqs-sVsBdgAAAZQ"]
[Tue Apr 07 20:04:44.474849 2026] [:error] [pid 59660:tid 59662] [client 20.215.218.174:41647] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy3Dp3-oiX2o5bTswQdwAAAcA"]
[Tue Apr 07 20:04:45.829941 2026] [:error] [pid 59804:tid 59808] [client 20.215.218.174:37231] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy3XYVIXiPh5_eJTmiKgAAAgI"]
[Tue Apr 07 20:04:45.887328 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:6790] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/12.php"] [unique_id "adTy3Q6uAY0QAy-8EEJo8QAAAEE"]
[Tue Apr 07 20:04:46.879473 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:6830] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy3k09Xv52u2xXGLAQkQAAANU"]
[Tue Apr 07 20:04:47.048249 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:64476] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy3w6uAY0QAy-8EEJo8wAAAFU"]
[Tue Apr 07 20:04:48.061274 2026] [:error] [pid 59551:tid 59554] [client 20.215.218.174:37222] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy4F7LN7Ubyqs-sVsBdwAAAYE"]
[Tue Apr 07 20:04:48.073681 2026] [:error] [pid 37598:tid 37683] [client 20.215.218.174:37200] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy4O9g7q_cV2WhPayzUgAAAJY"]
[Tue Apr 07 20:04:49.049473 2026] [:error] [pid 37719:tid 37722] [client 20.215.218.174:6443] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy4U09Xv52u2xXGLAQogAAAMA"]
[Tue Apr 07 20:04:49.092777 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:64482] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy4Q6uAY0QAy-8EEJo9QAAAEc"]
[Tue Apr 07 20:04:49.918480 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:6180] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adTy4U09Xv52u2xXGLAQqAAAANI"]
[Tue Apr 07 20:04:50.288662 2026] [:error] [pid 37719:tid 37726] [client 20.215.218.174:6846] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy4k09Xv52u2xXGLAQqwAAAMQ"]
[Tue Apr 07 20:04:51.055210 2026] [:error] [pid 59551:tid 59571] [client 20.215.218.174:44571] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy417LN7Ubyqs-sVsBewAAAZI"]
[Tue Apr 07 20:04:51.124570 2026] [:error] [pid 59551:tid 59574] [client 20.215.218.174:6428] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy417LN7Ubyqs-sVsBfAAAAZU"]
[Tue Apr 07 20:04:51.951056 2026] [:error] [pid 59551:tid 59563] [client 20.215.218.174:44130] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy417LN7Ubyqs-sVsBfQAAAYo"]
[Tue Apr 07 20:04:52.185064 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:6839] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy5O9g7q_cV2WhPayzVQAAAJI"]
[Tue Apr 07 20:04:52.846724 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:52444] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy5A6uAY0QAy-8EEJo-QAAAFI"]
[Tue Apr 07 20:04:53.210580 2026] [:error] [pid 59804:tid 59813] [client 20.215.218.174:44556] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy5XYVIXiPh5_eJTmiLAAAAgc"]
[Tue Apr 07 20:04:53.894016 2026] [:error] [pid 37596:tid 37626] [client 20.215.218.174:44586] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTy5apaAOZHEjRWjP2ajwAAABQ"]
[Tue Apr 07 20:04:54.036288 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:43289] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "adTy5g6uAY0QAy-8EEJo_QAAAEc"]
[Tue Apr 07 20:04:55.211501 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:44591] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTy5w6uAY0QAy-8EEJo_wAAAFA"]
[Tue Apr 07 20:04:55.442132 2026] [:error] [pid 59804:tid 59823] [client 20.215.218.174:46357] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy53YVIXiPh5_eJTmiLgAAAhE"]
[Tue Apr 07 20:04:56.315987 2026] [:error] [pid 59551:tid 59554] [client 20.215.218.174:41361] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTy6F7LN7Ubyqs-sVsBggAAAYE"]
[Tue Apr 07 20:04:56.767835 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:44113] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy6A6uAY0QAy-8EEJpBAAAAEM"]
[Tue Apr 07 20:04:57.334004 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:43274] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adTy6Q6uAY0QAy-8EEJpBwAAAE0"]
[Tue Apr 07 20:04:58.035633 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:6313] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy6g6uAY0QAy-8EEJpCwAAAEY"]
[Tue Apr 07 20:04:58.159375 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:44564] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTy6g6uAY0QAy-8EEJpDQAAAEE"]
[Tue Apr 07 20:04:58.750449 2026] [:error] [pid 37597:tid 37646] [client 20.215.218.174:41648] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lock360.php"] [unique_id "adTy6g6uAY0QAy-8EEJpDwAAAEw"]
[Tue Apr 07 20:04:59.483980 2026] [:error] [pid 37598:tid 37664] [client 20.215.218.174:6788] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTy6-9g7q_cV2WhPayzVwAAAIM"]
[Tue Apr 07 20:04:59.842699 2026] [:error] [pid 37598:tid 37662] [client 20.215.218.174:55297] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy6-9g7q_cV2WhPayzWAAAAIE"]
[Tue Apr 07 20:05:00.598948 2026] [:error] [pid 59551:tid 59563] [client 20.215.218.174:37205] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTy7F7LN7Ubyqs-sVsBhgAAAYo"]
[Tue Apr 07 20:05:00.991199 2026] [:error] [pid 59551:tid 59555] [client 20.215.218.174:42620] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy7F7LN7Ubyqs-sVsBiAAAAYI"]
[Tue Apr 07 20:05:01.701440 2026] [:error] [pid 59551:tid 59577] [client 20.215.218.174:37194] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adTy7V7LN7Ubyqs-sVsBiQAAAZg"]
[Tue Apr 07 20:05:02.218677 2026] [:error] [pid 37598:tid 37671] [client 20.215.218.174:52468] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy7u9g7q_cV2WhPayzYwAAAIo"]
[Tue Apr 07 20:05:02.944291 2026] [:error] [pid 37719:tid 37742] [client 20.215.218.174:6844] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v2.php"] [unique_id "adTy7k09Xv52u2xXGLAQ5AAAANQ"]
[Tue Apr 07 20:05:03.199593 2026] [:error] [pid 59490:tid 59514] [client 20.215.218.174:55336] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/manager.php"] [unique_id "adTy70cw8OFbiUZ7Rx1m8AAAAVY"]
[Tue Apr 07 20:05:04.133166 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:44585] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Tue Apr 07 20:05:04.495632 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:37237] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 07 20:05:04.756109 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:37237] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Tue Apr 07 20:05:05.013656 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:44585] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 07 20:05:05.014193 2026] [:error] [pid 37597:tid 37646] [client 20.215.218.174:37237] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Tue Apr 07 20:05:05.675446 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:37237] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 07 20:05:05.686661 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:44585] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Apr 07 20:05:05.935848 2026] [:error] [pid 37597:tid 37646] [client 20.215.218.174:37237] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Apr 07 20:05:05.944784 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:44585] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Tue Apr 07 20:05:06.241765 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:44585] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy8g6uAY0QAy-8EEJpYgAAAFU"]
[Tue Apr 07 20:05:06.249899 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:37237] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "adTy8g6uAY0QAy-8EEJpYwAAAE0"]
[Tue Apr 07 20:05:06.968926 2026] [:error] [pid 59490:tid 59513] [client 20.215.218.174:37120] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy8kcw8OFbiUZ7Rx1m8QAAAVU"]
[Tue Apr 07 20:05:07.217107 2026] [:error] [pid 37598:tid 37683] [client 20.215.218.174:42623] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "adTy8-9g7q_cV2WhPayziwAAAJY"]
[Tue Apr 07 20:05:07.657791 2026] [:error] [pid 59490:tid 59501] [client 20.215.218.174:41625] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy80cw8OFbiUZ7Rx1m8wAAAUk"]
[Tue Apr 07 20:05:08.367899 2026] [:error] [pid 59551:tid 59559] [client 20.215.218.174:41634] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "adTy9F7LN7Ubyqs-sVsBkAAAAYY"]
[Tue Apr 07 20:05:08.725074 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:6456] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy9A6uAY0QAy-8EEJpdAAAAEc"]
[Tue Apr 07 20:05:09.200569 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:42577] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "adTy9Q6uAY0QAy-8EEJpegAAAFg"]
[Tue Apr 07 20:05:09.476398 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:43281] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTy9Q6uAY0QAy-8EEJpfQAAAFI"]
[Tue Apr 07 20:05:10.482181 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:40316] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTy9g6uAY0QAy-8EEJpgwAAAFY"]
[Tue Apr 07 20:05:10.493072 2026] [:error] [pid 37598:tid 37669] [client 20.215.218.174:64467] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy9u9g7q_cV2WhPayzlwAAAIg"]
[Tue Apr 07 20:05:11.469841 2026] [:error] [pid 59490:tid 59504] [client 20.215.218.174:55339] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTy90cw8OFbiUZ7Rx1m9AAAAUw"]
[Tue Apr 07 20:05:12.157402 2026] [:error] [pid 37597:tid 37649] [client 20.215.218.174:52419] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTy-A6uAY0QAy-8EEJpjwAAAE8"]
[Tue Apr 07 20:05:12.415337 2026] [:error] [pid 59490:tid 59508] [client 20.215.218.174:64506] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy-Ecw8OFbiUZ7Rx1m9QAAAVA"]
[Tue Apr 07 20:05:12.856110 2026] [:error] [pid 37596:tid 37622] [client 20.215.218.174:64468] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTy-KpaAOZHEjRWjP2atgAAABA"]
[Tue Apr 07 20:05:13.328290 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:52458] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy-V7LN7Ubyqs-sVsBlQAAAZY"]
[Tue Apr 07 20:05:13.709312 2026] [:error] [pid 59551:tid 59576] [client 20.215.218.174:42605] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTy-V7LN7Ubyqs-sVsBlwAAAZc"]
[Tue Apr 07 20:05:14.350153 2026] [:error] [pid 59660:tid 59675] [client 20.215.218.174:6432] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTy-jp3-oiX2o5bTswQfgAAAc0"]
[Tue Apr 07 20:05:14.559922 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:41604] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/akcc.php"] [unique_id "adTy-g6uAY0QAy-8EEJplgAAAEI"]
[Tue Apr 07 20:05:15.360404 2026] [:error] [pid 59804:tid 59820] [client 20.215.218.174:52441] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTy-3YVIXiPh5_eJTmiWQAAAg4"]
[Tue Apr 07 20:05:16.973858 2026] [:error] [pid 59804:tid 59828] [client 20.215.218.174:43299] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTy_HYVIXiPh5_eJTmiWgAAAhY"]
[Tue Apr 07 20:05:19.033165 2026] [:error] [pid 59551:tid 59569] [client 20.215.218.174:39974] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTy_17LN7Ubyqs-sVsBnAAAAZA"]
[Tue Apr 07 20:05:19.540506 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:43311] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTy_w6uAY0QAy-8EEJppgAAAFQ"]
[Tue Apr 07 20:05:20.465896 2026] [:error] [pid 37719:tid 37738] [client 20.215.218.174:52447] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTzAE09Xv52u2xXGLARAwAAANA"]
[Tue Apr 07 20:05:20.636995 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:41649] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTzAE09Xv52u2xXGLARBAAAAMg"]
[Tue Apr 07 20:05:21.459429 2026] [:error] [pid 37719:tid 37726] [client 20.215.218.174:43300] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTzAU09Xv52u2xXGLARCAAAAMQ"]
[Tue Apr 07 20:05:21.506867 2026] [:error] [pid 59660:tid 59673] [client 20.215.218.174:37228] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTzATp3-oiX2o5bTswQgAAAAcs"]
[Tue Apr 07 20:05:22.574490 2026] [:error] [pid 37598:tid 37681] [client 20.215.218.174:6837] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mo.php"] [unique_id "adTzAu9g7q_cV2WhPayzqQAAAJQ"]
[Tue Apr 07 20:05:22.617096 2026] [:error] [pid 59490:tid 59499] [client 20.215.218.174:55299] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzAkcw8OFbiUZ7Rx1m9wAAAUc"]
[Tue Apr 07 20:05:23.412040 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:43282] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTzAw6uAY0QAy-8EEJpswAAAE0"]
[Tue Apr 07 20:05:23.899710 2026] [:error] [pid 59551:tid 59574] [client 20.215.218.174:64495] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzA17LN7Ubyqs-sVsBngAAAZU"]
[Tue Apr 07 20:05:24.263206 2026] [:error] [pid 59804:tid 59816] [client 20.215.218.174:44550] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTzBHYVIXiPh5_eJTmiXAAAAgo"]
[Tue Apr 07 20:05:25.398142 2026] [:error] [pid 37598:tid 37685] [client 20.215.218.174:52462] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTzBe9g7q_cV2WhPayzqgAAAJg"]
[Tue Apr 07 20:05:25.420021 2026] [:error] [pid 59551:tid 59561] [client 20.215.218.174:42587] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzBV7LN7Ubyqs-sVsBoAAAAYg"]
[Tue Apr 07 20:05:26.412147 2026] [:error] [pid 59660:tid 59677] [client 20.215.218.174:55306] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/doc.php"] [unique_id "adTzBjp3-oiX2o5bTswQggAAAc8"]
[Tue Apr 07 20:05:26.853423 2026] [:error] [pid 59660:tid 59667] [client 20.215.218.174:64507] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzBjp3-oiX2o5bTswQgwAAAcU"]
[Tue Apr 07 20:05:27.267011 2026] [:error] [pid 59804:tid 59812] [client 20.215.218.174:42573] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTzB3YVIXiPh5_eJTmiXQAAAgY"]
[Tue Apr 07 20:05:27.966861 2026] [:error] [pid 37719:tid 37738] [client 20.215.218.174:41609] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTzB009Xv52u2xXGLAREQAAANA"]
[Tue Apr 07 20:05:28.033988 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:41627] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzCE09Xv52u2xXGLAREgAAAMg"]
[Tue Apr 07 20:05:28.658180 2026] [:error] [pid 59660:tid 59662] [client 20.215.218.174:6811] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTzCDp3-oiX2o5bTswQhAAAAcA"]
[Tue Apr 07 20:05:28.939030 2026] [:error] [pid 37719:tid 37726] [client 20.215.218.174:55317] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzCE09Xv52u2xXGLARFAAAAMQ"]
[Tue Apr 07 20:05:29.449078 2026] [:error] [pid 37596:tid 37626] [client 20.215.218.174:39964] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inde.php"] [unique_id "adTzCapaAOZHEjRWjP2augAAABQ"]
[Tue Apr 07 20:05:30.117006 2026] [:error] [pid 59551:tid 59564] [client 20.215.218.174:41611] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzCl7LN7Ubyqs-sVsBpAAAAYs"]
[Tue Apr 07 20:05:30.577647 2026] [:error] [pid 59551:tid 59570] [client 20.215.218.174:39937] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzCl7LN7Ubyqs-sVsBpwAAAZE"]
[Tue Apr 07 20:05:31.206371 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:39999] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzC009Xv52u2xXGLARFwAAANM"]
[Tue Apr 07 20:05:31.467755 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:52436] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzCw6uAY0QAy-8EEJpuQAAAFM"]
[Tue Apr 07 20:05:32.171615 2026] [:error] [pid 37719:tid 37739] [client 20.215.218.174:42563] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzDE09Xv52u2xXGLARHQAAANE"]
[Tue Apr 07 20:05:32.489862 2026] [:error] [pid 37719:tid 37723] [client 20.215.218.174:37244] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzDE09Xv52u2xXGLARHwAAAME"]
[Tue Apr 07 20:05:33.076974 2026] [:error] [pid 37719:tid 37737] [client 20.215.218.174:43312] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adTzDU09Xv52u2xXGLARJAAAAM8"]
[Tue Apr 07 20:05:33.448533 2026] [:error] [pid 59551:tid 59572] [client 20.215.218.174:6440] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzDV7LN7Ubyqs-sVsBqgAAAZM"]
[Tue Apr 07 20:05:33.720841 2026] [:error] [pid 37597:tid 37638] [client 20.215.218.174:6785] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzDQ6uAY0QAy-8EEJpvAAAAEQ"]
[Tue Apr 07 20:05:34.539850 2026] [:error] [pid 59804:tid 59806] [client 20.215.218.174:55334] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzDnYVIXiPh5_eJTmiYQAAAgA"]
[Tue Apr 07 20:05:34.607518 2026] [:error] [pid 59804:tid 59807] [client 20.215.218.174:6411] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzDnYVIXiPh5_eJTmiYgAAAgE"]
[Tue Apr 07 20:05:35.363873 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:37203] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzD009Xv52u2xXGLARKAAAAMU"]
[Tue Apr 07 20:05:35.734805 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:42609] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzDw6uAY0QAy-8EEJpxgAAAFc"]
[Tue Apr 07 20:05:36.154079 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:43302] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adTzEA6uAY0QAy-8EEJpyAAAAEg"]
[Tue Apr 07 20:05:36.645663 2026] [:error] [pid 12948:tid 12961] [client 20.215.218.174:60475] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzEMbeSPAN8LvMqsarmQAAAQo"]
[Tue Apr 07 20:05:36.777268 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:40271] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzEA6uAY0QAy-8EEJpywAAAFM"]
[Tue Apr 07 20:05:37.272790 2026] [:error] [pid 37719:tid 37742] [client 20.215.218.174:37193] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzEU09Xv52u2xXGLARLgAAANQ"]
[Tue Apr 07 20:05:37.557374 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:41450] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzEQ6uAY0QAy-8EEJp0AAAAFg"]
[Tue Apr 07 20:05:38.147126 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:40286] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzEg6uAY0QAy-8EEJp1QAAAEs"]
[Tue Apr 07 20:05:38.304359 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:64498] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzEg6uAY0QAy-8EEJp1gAAAEI"]
[Tue Apr 07 20:05:38.893465 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:6835] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzEg6uAY0QAy-8EEJp2gAAAEo"]
[Tue Apr 07 20:05:39.150395 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:64472] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zxin.php"] [unique_id "adTzEw6uAY0QAy-8EEJp3QAAAFU"]
[Tue Apr 07 20:05:39.663524 2026] [:error] [pid 37719:tid 37746] [client 20.215.218.174:42564] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzE009Xv52u2xXGLARMQAAANg"]
[Tue Apr 07 20:05:40.081697 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:43309] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzFE09Xv52u2xXGLARNAAAAMg"]
[Tue Apr 07 20:05:40.299433 2026] [:error] [pid 59551:tid 59554] [client 20.215.218.174:55332] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzFF7LN7Ubyqs-sVsBrwAAAYE"]
[Tue Apr 07 20:05:40.929337 2026] [:error] [pid 37597:tid 37652] [client 20.215.218.174:43326] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzFA6uAY0QAy-8EEJp4AAAAFI"]
[Tue Apr 07 20:05:41.237162 2026] [:error] [pid 59804:tid 59825] [client 20.215.218.174:64499] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzFXYVIXiPh5_eJTmiZQAAAhM"]
[Tue Apr 07 20:05:41.852979 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:55305] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzFU09Xv52u2xXGLARNwAAANM"]
[Tue Apr 07 20:05:42.513178 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:40259] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzFg6uAY0QAy-8EEJp4gAAAEo"]
[Tue Apr 07 20:05:42.763124 2026] [:error] [pid 37596:tid 37613] [client 20.215.218.174:55312] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/index/function.php"] [unique_id "adTzFqpaAOZHEjRWjP2avgAAAAc"]
[Tue Apr 07 20:05:43.392300 2026] [:error] [pid 37598:tid 37667] [client 20.215.218.174:62390] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzF-9g7q_cV2WhPayzsAAAAIY"]
[Tue Apr 07 20:05:43.538649 2026] [:error] [pid 37598:tid 37671] [client 20.215.218.174:45052] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzF-9g7q_cV2WhPayzsQAAAIo"]
[Tue Apr 07 20:05:44.208184 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:57310] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzGA6uAY0QAy-8EEJp5QAAAFg"]
[Tue Apr 07 20:05:44.234746 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:59973] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzGA6uAY0QAy-8EEJp5gAAAFQ"]
[Tue Apr 07 20:05:45.168274 2026] [:error] [pid 37596:tid 37629] [client 20.215.218.174:40556] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzGapaAOZHEjRWjP2avwAAABc"]
[Tue Apr 07 20:05:45.358964 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:47515] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzGQ6uAY0QAy-8EEJp6wAAAEE"]
[Tue Apr 07 20:05:46.376493 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:42907] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/NewFile.php"] [unique_id "adTzGg6uAY0QAy-8EEJp7QAAAE0"]
[Tue Apr 07 20:05:46.535996 2026] [:error] [pid 37597:tid 37653] [client 20.215.218.174:54854] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzGg6uAY0QAy-8EEJp7gAAAFM"]
[Tue Apr 07 20:05:47.395656 2026] [:error] [pid 59804:tid 59810] [client 20.215.218.174:45034] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzG3YVIXiPh5_eJTmiawAAAgQ"]
[Tue Apr 07 20:05:47.460357 2026] [:error] [pid 12948:tid 12968] [client 20.215.218.174:42227] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzG8beSPAN8LvMqsarmgAAARE"]
[Tue Apr 07 20:05:48.321318 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:45019] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzHA6uAY0QAy-8EEJp8AAAAEM"]
[Tue Apr 07 20:05:48.723916 2026] [:error] [pid 37597:tid 37649] [client 20.215.218.174:45009] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzHA6uAY0QAy-8EEJp9AAAAE8"]
[Tue Apr 07 20:05:49.588315 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:40535] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzHQ6uAY0QAy-8EEJp9wAAAEg"]
[Tue Apr 07 20:05:49.815202 2026] [:error] [pid 59660:tid 59684] [client 20.215.218.174:6988] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzHTp3-oiX2o5bTswQhwAAAdY"]
[Tue Apr 07 20:05:50.438838 2026] [:error] [pid 59551:tid 59563] [client 20.215.218.174:42202] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzHl7LN7Ubyqs-sVsBtQAAAYo"]
[Tue Apr 07 20:05:50.482926 2026] [:error] [pid 59551:tid 59573] [client 20.215.218.174:60950] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "adTzHl7LN7Ubyqs-sVsBtgAAAZQ"]
[Tue Apr 07 20:05:51.168258 2026] [:error] [pid 59551:tid 59556] [client 20.215.218.174:65274] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzH17LN7Ubyqs-sVsBuAAAAYM"]
[Tue Apr 07 20:05:51.785625 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:42919] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzH009Xv52u2xXGLARQgAAAMk"]
[Tue Apr 07 20:05:51.874101 2026] [:error] [pid 37719:tid 37725] [client 20.215.218.174:45004] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzH009Xv52u2xXGLARQwAAAMM"]
[Tue Apr 07 20:05:52.521800 2026] [:error] [pid 59660:tid 59686] [client 20.215.218.174:62363] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzIDp3-oiX2o5bTswQigAAAdg"]
[Tue Apr 07 20:05:52.759420 2026] [:error] [pid 59660:tid 59678] [client 20.215.218.174:42546] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzIDp3-oiX2o5bTswQjAAAAdA"]
[Tue Apr 07 20:05:53.282073 2026] [:error] [pid 59551:tid 59562] [client 20.215.218.174:65250] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzIV7LN7Ubyqs-sVsBugAAAYk"]
[Tue Apr 07 20:05:53.619356 2026] [:error] [pid 59804:tid 59807] [client 20.215.218.174:42903] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzIXYVIXiPh5_eJTmibwAAAgE"]
[Tue Apr 07 20:05:54.038251 2026] [:error] [pid 37719:tid 37742] [client 20.215.218.174:65267] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzIk09Xv52u2xXGLARSQAAANQ"]
[Tue Apr 07 20:05:54.438268 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:51951] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wolv2.php"] [unique_id "adTzIl7LN7Ubyqs-sVsBwAAAAY0"]
[Tue Apr 07 20:05:54.623918 2026] [:error] [pid 37719:tid 37737] [client 20.215.218.174:55399] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzIk09Xv52u2xXGLARSwAAAM8"]
[Tue Apr 07 20:05:55.161047 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:60474] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzI009Xv52u2xXGLARTgAAAMw"]
[Tue Apr 07 20:05:55.298060 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:42226] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzI009Xv52u2xXGLARTwAAANI"]
[Tue Apr 07 20:05:55.815353 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:39728] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzI009Xv52u2xXGLARUwAAAMc"]
[Tue Apr 07 20:05:56.148771 2026] [:error] [pid 59490:tid 59512] [client 20.215.218.174:50942] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzJEcw8OFbiUZ7Rx1nLAAAAVQ"]
[Tue Apr 07 20:05:56.616801 2026] [:error] [pid 59490:tid 59499] [client 20.215.218.174:40575] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzJEcw8OFbiUZ7Rx1nLgAAAUc"]
[Tue Apr 07 20:05:56.753752 2026] [:error] [pid 59804:tid 59815] [client 20.215.218.174:42527] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzJHYVIXiPh5_eJTmicQAAAgk"]
[Tue Apr 07 20:05:57.179336 2026] [:error] [pid 59490:tid 59516] [client 20.215.218.174:42236] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzJUcw8OFbiUZ7Rx1nMQAAAVg"]
[Tue Apr 07 20:05:57.419743 2026] [:error] [pid 59490:tid 59494] [client 20.215.218.174:60426] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/geck.php"] [unique_id "adTzJUcw8OFbiUZ7Rx1nNAAAAUI"]
[Tue Apr 07 20:05:57.724948 2026] [:error] [pid 37719:tid 37728] [client 20.215.218.174:40534] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzJU09Xv52u2xXGLARWAAAAMY"]
[Tue Apr 07 20:05:58.376068 2026] [:error] [pid 59660:tid 59666] [client 20.215.218.174:56309] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzJjp3-oiX2o5bTswQjwAAAcQ"]
[Tue Apr 07 20:05:58.550879 2026] [:error] [pid 59660:tid 59662] [client 20.215.218.174:44479] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzJjp3-oiX2o5bTswQkgAAAcA"]
[Tue Apr 07 20:05:58.954987 2026] [:error] [pid 59551:tid 59556] [client 20.215.218.174:44463] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTzJl7LN7Ubyqs-sVsBwwAAAYM"]
[Tue Apr 07 20:05:59.181543 2026] [:error] [pid 59804:tid 59822] [client 20.215.218.174:40571] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzJ3YVIXiPh5_eJTmidAAAAhA"]
[Tue Apr 07 20:05:59.553020 2026] [:error] [pid 59551:tid 59561] [client 20.215.218.174:50178] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTzJ17LN7Ubyqs-sVsBxwAAAYg"]
[Tue Apr 07 20:06:00.042926 2026] [:error] [pid 59804:tid 59813] [client 20.215.218.174:50915] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzKHYVIXiPh5_eJTmidgAAAgc"]
[Tue Apr 07 20:06:00.323691 2026] [:error] [pid 59804:tid 59811] [client 20.215.218.174:44424] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTzKHYVIXiPh5_eJTmieQAAAgU"]
[Tue Apr 07 20:06:00.680129 2026] [:error] [pid 59804:tid 59812] [client 20.215.218.174:49384] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xtt.php"] [unique_id "adTzKHYVIXiPh5_eJTmifAAAAgY"]
[Tue Apr 07 20:06:00.896249 2026] [:error] [pid 59551:tid 59569] [client 20.215.218.174:50236] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTzKF7LN7Ubyqs-sVsBygAAAZA"]
[Tue Apr 07 20:06:01.401809 2026] [:error] [pid 37598:tid 37671] [client 20.215.218.174:65260] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzKe9g7q_cV2WhPayzuQAAAIo"]
[Tue Apr 07 20:06:01.557335 2026] [:error] [pid 59660:tid 59684] [client 20.215.218.174:50880] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTzKTp3-oiX2o5bTswQlQAAAdY"]
[Tue Apr 07 20:06:02.113987 2026] [:error] [pid 12948:tid 12962] [client 20.215.218.174:56309] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzKsbeSPAN8LvMqsarnwAAAQs"]
[Tue Apr 07 20:06:02.115438 2026] [:error] [pid 12948:tid 12963] [client 20.215.218.174:50202] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTzKsbeSPAN8LvMqsaroAAAAQw"]
[Tue Apr 07 20:06:02.841891 2026] [:error] [pid 59551:tid 59571] [client 20.215.218.174:56272] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzKl7LN7Ubyqs-sVsBzwAAAZI"]
[Tue Apr 07 20:06:02.879287 2026] [:error] [pid 59551:tid 59556] [client 20.215.218.174:50934] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTzKl7LN7Ubyqs-sVsB0AAAAYM"]
[Tue Apr 07 20:06:03.488884 2026] [:error] [pid 12948:tid 12969] [client 20.215.218.174:64691] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/manager.php"] [unique_id "adTzK8beSPAN8LvMqsarowAAARI"]
[Tue Apr 07 20:06:03.800854 2026] [:error] [pid 12948:tid 12964] [client 20.215.218.174:6228] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adTzK8beSPAN8LvMqsarpAAAAQ0"]
[Tue Apr 07 20:06:04.100316 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:56290] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTzLA6uAY0QAy-8EEJp-wAAAEs"]
[Tue Apr 07 20:06:04.686468 2026] [:error] [pid 12948:tid 12961] [client 20.215.218.174:6913] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/system.php"] [unique_id "adTzLMbeSPAN8LvMqsarpwAAAQo"]
[Tue Apr 07 20:06:04.926040 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:37734] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gdn.php"] [unique_id "adTzLE09Xv52u2xXGLARWgAAAMc"]
[Tue Apr 07 20:06:05.616873 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:60462] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Tue Apr 07 20:06:05.680901 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:6942] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Tue Apr 07 20:06:07.173932 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:6942] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Tue Apr 07 20:06:07.174335 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:60462] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Apr 07 20:06:07.461487 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:60462] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Tue Apr 07 20:06:07.468658 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:6942] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Tue Apr 07 20:06:07.726086 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:60462] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Tue Apr 07 20:06:07.986835 2026] [:error] [pid 37719:tid 37732] [client 20.215.218.174:60462] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Tue Apr 07 20:06:08.077969 2026] [:error] [pid 37719:tid 37723] [client 20.215.218.174:6942] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Tue Apr 07 20:06:08.332475 2026] [:error] [pid 37719:tid 37736] [client 20.215.218.174:6942] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzME09Xv52u2xXGLARcQAAAM4"]
[Tue Apr 07 20:06:08.578864 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:60462] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTzME09Xv52u2xXGLARcgAAAM0"]
[Tue Apr 07 20:06:08.930789 2026] [:error] [pid 12948:tid 12973] [client 20.215.218.174:64684] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzMMbeSPAN8LvMqsarqAAAARY"]
[Tue Apr 07 20:06:09.357266 2026] [:error] [pid 59551:tid 59560] [client 20.215.218.174:39177] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTzMV7LN7Ubyqs-sVsB2AAAAYc"]
[Tue Apr 07 20:06:09.469420 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:44965] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzMQ6uAY0QAy-8EEJp_wAAAFg"]
[Tue Apr 07 20:06:10.062684 2026] [:error] [pid 37719:tid 37745] [client 20.215.218.174:39192] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzMk09Xv52u2xXGLARcwAAANc"]
[Tue Apr 07 20:06:10.267914 2026] [:error] [pid 37719:tid 37722] [client 20.215.218.174:6958] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTzMk09Xv52u2xXGLARdQAAAMA"]
[Tue Apr 07 20:06:10.785608 2026] [:error] [pid 37719:tid 37733] [client 20.215.218.174:41964] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzMk09Xv52u2xXGLARdwAAAMs"]
[Tue Apr 07 20:06:10.919683 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:48084] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admir.php"] [unique_id "adTzMk09Xv52u2xXGLAReQAAANU"]
[Tue Apr 07 20:06:11.353263 2026] [:error] [pid 59804:tid 59820] [client 20.215.218.174:40047] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzM3YVIXiPh5_eJTmiggAAAg4"]
[Tue Apr 07 20:06:11.585861 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:39227] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzM009Xv52u2xXGLARewAAANM"]
[Tue Apr 07 20:06:12.292267 2026] [:error] [pid 59551:tid 59572] [client 20.215.218.174:6378] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzNF7LN7Ubyqs-sVsB3wAAAZM"]
[Tue Apr 07 20:06:12.300456 2026] [:error] [pid 59551:tid 59576] [client 20.215.218.174:6919] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzNF7LN7Ubyqs-sVsB4AAAAZc"]
[Tue Apr 07 20:06:13.064111 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:41945] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzNU09Xv52u2xXGLARfAAAANY"]
[Tue Apr 07 20:06:13.158071 2026] [:error] [pid 12948:tid 12959] [client 20.215.218.174:44940] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzNcbeSPAN8LvMqsarqgAAAQg"]
[Tue Apr 07 20:06:13.833548 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:41940] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "adTzNU09Xv52u2xXGLARfgAAAM0"]
[Tue Apr 07 20:06:14.082322 2026] [:error] [pid 37597:tid 37649] [client 20.215.218.174:45809] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzNg6uAY0QAy-8EEJqAQAAAE8"]
[Tue Apr 07 20:06:14.676440 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:44952] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzNg6uAY0QAy-8EEJqAgAAAEc"]
[Tue Apr 07 20:06:14.840404 2026] [:error] [pid 12948:tid 12965] [client 20.215.218.174:40011] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzNsbeSPAN8LvMqsarqwAAAQ4"]
[Tue Apr 07 20:06:15.344899 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:41975] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzNw6uAY0QAy-8EEJqBAAAAEg"]
[Tue Apr 07 20:06:15.403646 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:7149] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzNw6uAY0QAy-8EEJqBQAAAEE"]
[Tue Apr 07 20:06:16.045375 2026] [:error] [pid 37719:tid 37738] [client 20.215.218.174:41968] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzOE09Xv52u2xXGLARhQAAANA"]
[Tue Apr 07 20:06:16.236759 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:6365] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzOE09Xv52u2xXGLARiAAAANM"]
[Tue Apr 07 20:06:16.690253 2026] [:error] [pid 37597:tid 37640] [client 20.215.218.174:37723] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/error.php"] [unique_id "adTzOA6uAY0QAy-8EEJqBwAAAEY"]
[Tue Apr 07 20:06:17.199214 2026] [:error] [pid 37719:tid 37740] [client 20.215.218.174:44956] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzOU09Xv52u2xXGLARigAAANI"]
[Tue Apr 07 20:06:17.491956 2026] [:error] [pid 37597:tid 37639] [client 20.215.218.174:40020] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzOQ6uAY0QAy-8EEJqCQAAAEU"]
[Tue Apr 07 20:06:17.902686 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:7150] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzOQ6uAY0QAy-8EEJqCgAAAFE"]
[Tue Apr 07 20:06:18.282080 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:44032] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzOg6uAY0QAy-8EEJqCwAAAFU"]
[Tue Apr 07 20:06:18.788864 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:44986] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzOg6uAY0QAy-8EEJqDQAAAE0"]
[Tue Apr 07 20:06:19.324467 2026] [:error] [pid 37596:tid 37630] [client 20.215.218.174:61017] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzO6paAOZHEjRWjP2axwAAABg"]
[Tue Apr 07 20:06:19.632422 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:44086] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzOw6uAY0QAy-8EEJqEAAAAFY"]
[Tue Apr 07 20:06:20.101445 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:45787] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "adTzPE09Xv52u2xXGLARjQAAAM0"]
[Tue Apr 07 20:06:20.252958 2026] [:error] [pid 37598:tid 37674] [client 20.215.218.174:47090] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzPO9g7q_cV2WhPayzxQAAAI0"]
[Tue Apr 07 20:06:20.839801 2026] [:error] [pid 59551:tid 59561] [client 20.215.218.174:61038] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzPF7LN7Ubyqs-sVsB5QAAAYg"]
[Tue Apr 07 20:06:21.056052 2026] [:error] [pid 37597:tid 37646] [client 20.215.218.174:6396] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzPQ6uAY0QAy-8EEJqEgAAAEw"]
[Tue Apr 07 20:06:21.475790 2026] [:error] [pid 37719:tid 37738] [client 20.215.218.174:41877] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzPU09Xv52u2xXGLARjwAAANA"]
[Tue Apr 07 20:06:22.008658 2026] [:error] [pid 37719:tid 37732] [client 20.215.218.174:51375] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzPk09Xv52u2xXGLARkAAAAMo"]
[Tue Apr 07 20:06:22.129471 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:45771] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzPg6uAY0QAy-8EEJqFAAAAEE"]
[Tue Apr 07 20:06:22.610087 2026] [:error] [pid 37598:tid 37681] [client 20.215.218.174:43662] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzPu9g7q_cV2WhPayzyAAAAJQ"]
[Tue Apr 07 20:06:22.911518 2026] [:error] [pid 59551:tid 59575] [client 20.215.218.174:44092] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cc.php"] [unique_id "adTzPl7LN7Ubyqs-sVsB6AAAAZY"]
[Tue Apr 07 20:06:23.311094 2026] [:error] [pid 37719:tid 37742] [client 20.215.218.174:44533] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzP009Xv52u2xXGLARkQAAANQ"]
[Tue Apr 07 20:06:24.023285 2026] [:error] [pid 37719:tid 37723] [client 20.215.218.174:61044] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzQE09Xv52u2xXGLARlAAAAME"]
[Tue Apr 07 20:06:24.124536 2026] [:error] [pid 37719:tid 37725] [client 20.215.218.174:44482] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzQE09Xv52u2xXGLARlQAAAMM"]
[Tue Apr 07 20:06:25.211698 2026] [:error] [pid 37598:tid 37675] [client 20.215.218.174:44040] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzQe9g7q_cV2WhPayzygAAAI4"]
[Tue Apr 07 20:06:25.232181 2026] [:error] [pid 12948:tid 12957] [client 20.215.218.174:44058] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzQcbeSPAN8LvMqsarrQAAAQY"]
[Tue Apr 07 20:06:27.507974 2026] [:error] [pid 59804:tid 59821] [client 20.215.218.174:47086] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzQ3YVIXiPh5_eJTmihwAAAg8"]
[Tue Apr 07 20:06:27.684377 2026] [:error] [pid 37719:tid 37733] [client 20.215.218.174:61010] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzQ009Xv52u2xXGLARmAAAAMs"]
[Tue Apr 07 20:06:28.338460 2026] [:error] [pid 37719:tid 37722] [client 20.215.218.174:51369] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzRE09Xv52u2xXGLARmQAAAMA"]
[Tue Apr 07 20:06:29.023400 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:47068] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adTzRQ6uAY0QAy-8EEJqHgAAAEc"]
[Tue Apr 07 20:06:29.441114 2026] [:error] [pid 37597:tid 37642] [client 20.215.218.174:6884] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzRQ6uAY0QAy-8EEJqIAAAAEg"]
[Tue Apr 07 20:06:31.327931 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:61501] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzR009Xv52u2xXGLARnQAAAMk"]
[Tue Apr 07 20:06:31.556790 2026] [:error] [pid 37596:tid 37610] [client 20.215.218.174:61499] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzR6paAOZHEjRWjP2ayAAAAAQ"]
[Tue Apr 07 20:06:32.866314 2026] [:error] [pid 37719:tid 37723] [client 20.215.218.174:41704] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzSE09Xv52u2xXGLARoQAAAME"]
[Tue Apr 07 20:06:33.341334 2026] [:error] [pid 37596:tid 37617] [client 20.215.218.174:44040] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzSapaAOZHEjRWjP2aygAAAAs"]
[Tue Apr 07 20:06:34.267973 2026] [:error] [pid 37598:tid 37683] [client 20.215.218.174:55656] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzSu9g7q_cV2WhPayzzgAAAJY"]
[Tue Apr 07 20:06:35.530494 2026] [:error] [pid 12948:tid 12955] [client 20.215.218.174:41726] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzS8beSPAN8LvMqsarswAAAQQ"]
[Tue Apr 07 20:06:35.724889 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:44627] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzSw6uAY0QAy-8EEJqLwAAAEE"]
[Tue Apr 07 20:06:36.891985 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:55670] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lo.php"] [unique_id "adTzTF7LN7Ubyqs-sVsB7AAAAYQ"]
[Tue Apr 07 20:06:37.189762 2026] [:error] [pid 59660:tid 59674] [client 20.215.218.174:42961] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzTTp3-oiX2o5bTswQmQAAAcw"]
[Tue Apr 07 20:06:38.288411 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:6638] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzTg6uAY0QAy-8EEJqPAAAAFc"]
[Tue Apr 07 20:06:38.556103 2026] [:error] [pid 59660:tid 59680] [client 20.215.218.174:43700] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzTjp3-oiX2o5bTswQmwAAAdI"]
[Tue Apr 07 20:06:39.219844 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:51404] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzTw6uAY0QAy-8EEJqQgAAAFg"]
[Tue Apr 07 20:06:39.865107 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:55649] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzTw6uAY0QAy-8EEJqSAAAAEM"]
[Tue Apr 07 20:06:40.017832 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:51430] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzUA6uAY0QAy-8EEJqSQAAAE4"]
[Tue Apr 07 20:06:41.168318 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:52981] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzUQ6uAY0QAy-8EEJqTwAAAEo"]
[Tue Apr 07 20:06:41.168338 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:43380] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzUQ6uAY0QAy-8EEJqUAAAAEI"]
[Tue Apr 07 20:06:41.871195 2026] [:error] [pid 59551:tid 59561] [client 20.215.218.174:44649] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzUV7LN7Ubyqs-sVsB7gAAAYg"]
[Tue Apr 07 20:06:42.325657 2026] [:error] [pid 37719:tid 37744] [client 20.215.218.174:44666] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adTzUk09Xv52u2xXGLARqQAAANY"]
[Tue Apr 07 20:06:42.584651 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:6632] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzUk09Xv52u2xXGLARqgAAAM0"]
[Tue Apr 07 20:06:43.374162 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:52958] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzUw6uAY0QAy-8EEJqVAAAAFU"]
[Tue Apr 07 20:06:43.546336 2026] [:error] [pid 59551:tid 59567] [client 20.215.218.174:6649] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzU17LN7Ubyqs-sVsB8AAAAY4"]
[Tue Apr 07 20:06:44.119924 2026] [:error] [pid 59551:tid 59577] [client 20.215.218.174:58033] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzVF7LN7Ubyqs-sVsB8wAAAZg"]
[Tue Apr 07 20:06:44.835504 2026] [:error] [pid 37596:tid 37627] [client 20.215.218.174:52873] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzVKpaAOZHEjRWjP2azAAAABU"]
[Tue Apr 07 20:06:44.934521 2026] [:error] [pid 59551:tid 59559] [client 20.215.218.174:41715] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzVF7LN7Ubyqs-sVsB9AAAAYY"]
[Tue Apr 07 20:06:45.637489 2026] [:error] [pid 59490:tid 59512] [client 20.215.218.174:41687] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzVUcw8OFbiUZ7Rx1nagAAAVQ"]
[Tue Apr 07 20:06:45.899189 2026] [:error] [pid 59551:tid 59556] [client 20.215.218.174:55672] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzVV7LN7Ubyqs-sVsB9wAAAYM"]
[Tue Apr 07 20:06:46.442751 2026] [:error] [pid 37719:tid 37733] [client 20.215.218.174:58023] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzVk09Xv52u2xXGLARrgAAAMs"]
[Tue Apr 07 20:06:46.758045 2026] [:error] [pid 37719:tid 37736] [client 20.215.218.174:44644] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/layout.php"] [unique_id "adTzVk09Xv52u2xXGLARrwAAAM4"]
[Tue Apr 07 20:06:47.082907 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:55660] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzV009Xv52u2xXGLARsQAAAMk"]
[Tue Apr 07 20:06:47.740754 2026] [:error] [pid 37596:tid 37613] [client 20.215.218.174:57993] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzV6paAOZHEjRWjP2azgAAAAc"]
[Tue Apr 07 20:06:47.864412 2026] [:error] [pid 37596:tid 37629] [client 20.215.218.174:42973] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzV6paAOZHEjRWjP2azwAAABc"]
[Tue Apr 07 20:06:48.485621 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:41158] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTzWE09Xv52u2xXGLARtAAAAMI"]
[Tue Apr 07 20:06:48.716074 2026] [:error] [pid 12948:tid 12971] [client 20.215.218.174:6521] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzWMbeSPAN8LvMqsartQAAARQ"]
[Tue Apr 07 20:06:49.176634 2026] [:error] [pid 37597:tid 37657] [client 20.215.218.174:6510] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTzWQ6uAY0QAy-8EEJqVgAAAFc"]
[Tue Apr 07 20:06:49.464590 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:57999] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzWU09Xv52u2xXGLARtQAAAMU"]
[Tue Apr 07 20:06:50.104703 2026] [:error] [pid 37719:tid 37725] [client 20.215.218.174:55723] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTzWk09Xv52u2xXGLARtwAAAMM"]
[Tue Apr 07 20:06:50.567128 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:58040] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "adTzWk09Xv52u2xXGLARugAAAMg"]
[Tue Apr 07 20:06:51.062280 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:41203] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTzWw6uAY0QAy-8EEJqWwAAAFA"]
[Tue Apr 07 20:06:51.764356 2026] [:error] [pid 59660:tid 59679] [client 20.215.218.174:57994] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzWzp3-oiX2o5bTswQogAAAdE"]
[Tue Apr 07 20:06:53.270645 2026] [:error] [pid 37719:tid 37726] [client 20.215.218.174:47515] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTzXU09Xv52u2xXGLARvAAAAMQ"]
[Tue Apr 07 20:06:53.304779 2026] [:error] [pid 59660:tid 59678] [client 20.215.218.174:61543] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzXTp3-oiX2o5bTswQowAAAdA"]
[Tue Apr 07 20:06:54.840607 2026] [:error] [pid 59804:tid 59807] [client 20.215.218.174:6620] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTzXnYVIXiPh5_eJTmijwAAAgE"]
[Tue Apr 07 20:06:55.814423 2026] [:error] [pid 59804:tid 59818] [client 20.215.218.174:43002] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTzX3YVIXiPh5_eJTmilwAAAgw"]
[Tue Apr 07 20:06:56.257661 2026] [:error] [pid 59804:tid 59830] [client 20.215.218.174:6628] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzYHYVIXiPh5_eJTmimQAAAhg"]
[Tue Apr 07 20:06:57.882507 2026] [:error] [pid 37597:tid 37635] [client 20.215.218.174:6631] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yas.php"] [unique_id "adTzYQ6uAY0QAy-8EEJqZQAAAEE"]
[Tue Apr 07 20:06:58.854776 2026] [:error] [pid 37596:tid 37622] [client 20.215.218.174:61528] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adTzYqpaAOZHEjRWjP2a1AAAABA"]
[Tue Apr 07 20:06:59.358409 2026] [:error] [pid 59660:tid 59664] [client 20.215.218.174:6489] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTzYzp3-oiX2o5bTswQpwAAAcI"]
[Tue Apr 07 20:07:00.985793 2026] [:error] [pid 37719:tid 37725] [client 20.215.218.174:52908] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTzZE09Xv52u2xXGLARvgAAAMM"]
[Tue Apr 07 20:07:01.207083 2026] [:error] [pid 59490:tid 59512] [client 20.215.218.174:43339] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzZUcw8OFbiUZ7Rx1ncgAAAVQ"]
[Tue Apr 07 20:07:02.124298 2026] [:error] [pid 59660:tid 59682] [client 20.215.218.174:43345] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTzZjp3-oiX2o5bTswQqwAAAdQ"]
[Tue Apr 07 20:07:02.952967 2026] [:error] [pid 59551:tid 59565] [client 20.215.218.174:55707] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzZl7LN7Ubyqs-sVsCBgAAAYw"]
[Tue Apr 07 20:07:02.953370 2026] [:error] [pid 59804:tid 59820] [client 20.215.218.174:55719] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file5.php"] [unique_id "adTzZnYVIXiPh5_eJTmioQAAAg4"]
[Tue Apr 07 20:07:03.681951 2026] [:error] [pid 12948:tid 12960] [client 20.215.218.174:59913] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTzZ8beSPAN8LvMqsarvAAAAQk"]
[Tue Apr 07 20:07:04.022752 2026] [:error] [pid 12948:tid 12974] [client 20.215.218.174:61980] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzaMbeSPAN8LvMqsarvQAAARc"]
[Tue Apr 07 20:07:04.669989 2026] [:error] [pid 59551:tid 59570] [client 20.215.218.174:59911] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTzaF7LN7Ubyqs-sVsCCAAAAZE"]
[Tue Apr 07 20:07:05.221828 2026] [:error] [pid 59490:tid 59504] [client 20.215.218.174:61508] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/content.php"] [unique_id "adTzaUcw8OFbiUZ7Rx1ndAAAAUw"]
[Tue Apr 07 20:07:05.813145 2026] [:error] [pid 59551:tid 59568] [client 20.215.218.174:62003] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTzaV7LN7Ubyqs-sVsCCQAAAY8"]
[Tue Apr 07 20:07:06.538959 2026] [:error] [pid 59804:tid 59807] [client 20.215.218.174:58043] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/v3.php"] [unique_id "adTzanYVIXiPh5_eJTmiogAAAgE"]
[Tue Apr 07 20:07:06.683299 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:43353] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTzau9g7q_cV2WhPayz2AAAAJI"]
[Tue Apr 07 20:07:07.639101 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:52950] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adTzaw6uAY0QAy-8EEJqZwAAAFQ"]
[Tue Apr 07 20:07:07.682149 2026] [:error] [pid 37597:tid 37641] [client 20.215.218.174:59933] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-configs.php"] [unique_id "adTzaw6uAY0QAy-8EEJqaAAAAEc"]
[Tue Apr 07 20:07:08.594622 2026] [:error] [pid 59804:tid 59830] [client 20.215.218.174:6475] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Tue Apr 07 20:07:08.616959 2026] [:error] [pid 37597:tid 37646] [client 20.215.218.174:52892] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Tue Apr 07 20:07:08.888342 2026] [:error] [pid 37597:tid 37639] [client 20.215.218.174:52892] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Tue Apr 07 20:07:09.111179 2026] [:error] [pid 59804:tid 59829] [client 20.215.218.174:6475] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Tue Apr 07 20:07:09.180735 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:52892] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Apr 07 20:07:09.369193 2026] [:error] [pid 59804:tid 59809] [client 20.215.218.174:6475] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Tue Apr 07 20:07:09.439562 2026] [:error] [pid 37597:tid 37634] [client 20.215.218.174:52892] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Tue Apr 07 20:07:09.637641 2026] [:error] [pid 59804:tid 59811] [client 20.215.218.174:6475] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Tue Apr 07 20:07:09.894291 2026] [:error] [pid 59804:tid 59817] [client 20.215.218.174:6475] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzbXYVIXiPh5_eJTmiqgAAAgs"]
[Tue Apr 07 20:07:09.966567 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:52892] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTzbQ6uAY0QAy-8EEJqdQAAAFA"]
[Tue Apr 07 20:07:10.774592 2026] [:error] [pid 59490:tid 59507] [client 20.215.218.174:62006] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzbkcw8OFbiUZ7Rx1ndgAAAU8"]
[Tue Apr 07 20:07:11.153056 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:40840] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTzbw6uAY0QAy-8EEJqeAAAAFQ"]
[Tue Apr 07 20:07:12.062003 2026] [:error] [pid 59490:tid 59500] [client 20.215.218.174:6465] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzcEcw8OFbiUZ7Rx1ndwAAAUg"]
[Tue Apr 07 20:07:13.056691 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:52880] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTzcQ6uAY0QAy-8EEJqewAAAEM"]
[Tue Apr 07 20:07:13.154833 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:41165] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzcQ6uAY0QAy-8EEJqfAAAAEo"]
[Tue Apr 07 20:07:14.298679 2026] [:error] [pid 37597:tid 37656] [client 20.215.218.174:61516] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzcg6uAY0QAy-8EEJqggAAAFY"]
[Tue Apr 07 20:07:15.701738 2026] [:error] [pid 59804:tid 59821] [client 20.215.218.174:39510] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gg.php"] [unique_id "adTzc3YVIXiPh5_eJTmirQAAAg8"]
[Tue Apr 07 20:07:15.880155 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:59952] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzcw6uAY0QAy-8EEJqhQAAAFE"]
[Tue Apr 07 20:07:16.844729 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:39697] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzdA6uAY0QAy-8EEJqhgAAAFQ"]
[Tue Apr 07 20:07:17.205219 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:39707] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTzdQ6uAY0QAy-8EEJqhwAAAE4"]
[Tue Apr 07 20:07:18.422769 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:39550] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzdk09Xv52u2xXGLARwAAAANM"]
[Tue Apr 07 20:07:18.992655 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:42577] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTzdg6uAY0QAy-8EEJqigAAAEo"]
[Tue Apr 07 20:07:19.898831 2026] [:error] [pid 37598:tid 37677] [client 20.215.218.174:40875] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzd-9g7q_cV2WhPayz3QAAAJA"]
[Tue Apr 07 20:07:21.472823 2026] [:error] [pid 59551:tid 59566] [client 20.215.218.174:40832] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzeV7LN7Ubyqs-sVsCEQAAAY0"]
[Tue Apr 07 20:07:22.846789 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:40255] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzeg6uAY0QAy-8EEJqkQAAAFg"]
[Tue Apr 07 20:07:23.038153 2026] [:error] [pid 59551:tid 59567] [client 20.215.218.174:51962] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTze17LN7Ubyqs-sVsCGgAAAY4"]
[Tue Apr 07 20:07:23.838189 2026] [:error] [pid 37719:tid 37731] [client 20.215.218.174:39546] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adTze009Xv52u2xXGLARwwAAAMk"]
[Tue Apr 07 20:07:24.034897 2026] [:error] [pid 37719:tid 37743] [client 20.215.218.174:59929] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzfE09Xv52u2xXGLARxAAAANU"]
[Tue Apr 07 20:07:24.898398 2026] [:error] [pid 37719:tid 37724] [client 20.215.218.174:50915] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTzfE09Xv52u2xXGLARxwAAAMI"]
[Tue Apr 07 20:07:25.163921 2026] [:error] [pid 37719:tid 37734] [client 20.215.218.174:39692] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTzfU09Xv52u2xXGLARyQAAAMw"]
[Tue Apr 07 20:07:25.932515 2026] [:error] [pid 37719:tid 37729] [client 20.215.218.174:40894] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTzfU09Xv52u2xXGLAR0AAAAMc"]
[Tue Apr 07 20:07:25.975986 2026] [:error] [pid 37719:tid 37730] [client 20.215.218.174:40195] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTzfU09Xv52u2xXGLAR0QAAAMg"]
[Tue Apr 07 20:07:26.813484 2026] [:error] [pid 59804:tid 59806] [client 20.215.218.174:6678] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTzfnYVIXiPh5_eJTmiuAAAAgA"]
[Tue Apr 07 20:07:27.116789 2026] [:error] [pid 59804:tid 59822] [client 20.215.218.174:64764] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTzf3YVIXiPh5_eJTmiuwAAAhA"]
[Tue Apr 07 20:07:27.512991 2026] [:error] [pid 59804:tid 59829] [client 20.215.218.174:59912] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTzf3YVIXiPh5_eJTmivQAAAhc"]
[Tue Apr 07 20:07:28.395996 2026] [:error] [pid 12948:tid 12959] [client 20.215.218.174:39545] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/himu.php"] [unique_id "adTzgMbeSPAN8LvMqsarxwAAAQg"]
[Tue Apr 07 20:07:28.663727 2026] [:error] [pid 37597:tid 37648] [client 20.215.218.174:6683] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzgA6uAY0QAy-8EEJqlwAAAE4"]
[Tue Apr 07 20:07:29.703749 2026] [:error] [pid 37597:tid 37644] [client 20.215.218.174:38241] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzgQ6uAY0QAy-8EEJqmwAAAEo"]
[Tue Apr 07 20:07:29.841022 2026] [:error] [pid 37719:tid 37732] [client 20.215.218.174:38586] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTzgU09Xv52u2xXGLAR1gAAAMo"]
[Tue Apr 07 20:07:30.548141 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:40227] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTzgg6uAY0QAy-8EEJqnQAAAFA"]
[Tue Apr 07 20:07:30.614052 2026] [:error] [pid 37597:tid 37637] [client 20.215.218.174:39541] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzgg6uAY0QAy-8EEJqnwAAAEM"]
[Tue Apr 07 20:07:31.730710 2026] [:error] [pid 59490:tid 59502] [client 20.215.218.174:64720] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzg0cw8OFbiUZ7Rx1nfAAAAUo"]
[Tue Apr 07 20:07:32.031548 2026] [:error] [pid 37719:tid 37739] [client 20.215.218.174:42175] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTzhE09Xv52u2xXGLAR2AAAANE"]
[Tue Apr 07 20:07:32.544016 2026] [:error] [pid 37719:tid 37735] [client 20.215.218.174:42154] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTzhE09Xv52u2xXGLAR2gAAAM0"]
[Tue Apr 07 20:07:33.365067 2026] [:error] [pid 59551:tid 59570] [client 20.215.218.174:39547] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/z.php"] [unique_id "adTzhV7LN7Ubyqs-sVsCKQAAAZE"]
[Tue Apr 07 20:07:33.515532 2026] [:error] [pid 37719:tid 37722] [client 20.215.218.174:6686] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTzhU09Xv52u2xXGLAR4QAAAMA"]
[Tue Apr 07 20:07:34.267172 2026] [:error] [pid 59551:tid 59557] [client 20.215.218.174:51933] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTzhl7LN7Ubyqs-sVsCLQAAAYQ"]
[Tue Apr 07 20:07:34.858068 2026] [:error] [pid 37598:tid 37681] [client 20.215.218.174:40872] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTzhu9g7q_cV2WhPayz5wAAAJQ"]
[Tue Apr 07 20:07:35.324729 2026] [:error] [pid 59490:tid 59506] [client 20.215.218.174:51929] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTzh0cw8OFbiUZ7Rx1nfwAAAU4"]
[Tue Apr 07 20:07:36.298022 2026] [:error] [pid 37598:tid 37664] [client 20.215.218.174:42113] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTziO9g7q_cV2WhPayz6gAAAIM"]
[Tue Apr 07 20:07:36.448611 2026] [:error] [pid 37598:tid 37666] [client 20.215.218.174:40883] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTziO9g7q_cV2WhPayz7AAAAIU"]
[Tue Apr 07 20:07:37.457309 2026] [:error] [pid 37596:tid 37618] [client 20.215.218.174:6670] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTziapaAOZHEjRWjP2a3QAAAAw"]
[Tue Apr 07 20:07:37.688977 2026] [:error] [pid 37598:tid 37676] [client 20.215.218.174:38238] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTzie9g7q_cV2WhPayz7QAAAI8"]
[Tue Apr 07 20:07:38.471917 2026] [:error] [pid 59804:tid 59814] [client 20.215.218.174:64733] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTzinYVIXiPh5_eJTmixQAAAgg"]
[Tue Apr 07 20:07:38.605367 2026] [:error] [pid 37596:tid 37614] [client 20.215.218.174:64714] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/png.php"] [unique_id "adTziqpaAOZHEjRWjP2a4QAAAAg"]
[Tue Apr 07 20:07:39.422171 2026] [:error] [pid 12948:tid 12967] [client 20.215.218.174:64722] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adTzi8beSPAN8LvMqsarzwAAARA"]
[Tue Apr 07 20:07:39.739232 2026] [:error] [pid 12948:tid 12964] [client 20.215.218.174:41203] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzi8beSPAN8LvMqsar0QAAAQ0"]
[Tue Apr 07 20:07:40.411995 2026] [:error] [pid 59660:tid 59668] [client 20.215.218.174:64741] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTzjDp3-oiX2o5bTswQuQAAAcY"]
[Tue Apr 07 20:07:41.093439 2026] [:error] [pid 59551:tid 59556] [client 20.215.218.174:40884] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzjV7LN7Ubyqs-sVsCMgAAAYM"]
[Tue Apr 07 20:07:41.433556 2026] [:error] [pid 37719:tid 37741] [client 20.215.218.174:39441] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTzjU09Xv52u2xXGLAR9AAAANM"]
[Tue Apr 07 20:07:42.326759 2026] [:error] [pid 37598:tid 37685] [client 20.215.218.174:45755] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTzju9g7q_cV2WhPayz8QAAAJg"]
[Tue Apr 07 20:07:42.467825 2026] [:error] [pid 37598:tid 37665] [client 20.215.218.174:54829] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzju9g7q_cV2WhPayz8gAAAIQ"]
[Tue Apr 07 20:07:43.007933 2026] [:error] [pid 37598:tid 37675] [client 20.215.218.174:50865] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/an.php"] [unique_id "adTzj-9g7q_cV2WhPayz9AAAAI4"]
[Tue Apr 07 20:07:43.566292 2026] [:error] [pid 59490:tid 59494] [client 20.215.218.174:42546] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mds.php"] [unique_id "adTzj0cw8OFbiUZ7Rx1ngwAAAUI"]
[Tue Apr 07 20:07:43.819323 2026] [:error] [pid 37719:tid 37737] [client 20.215.218.174:45699] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTzj009Xv52u2xXGLAR_AAAAM8"]
[Tue Apr 07 20:07:44.500462 2026] [:error] [pid 59551:tid 59577] [client 20.215.218.174:50816] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTzkF7LN7Ubyqs-sVsCNQAAAZg"]
[Tue Apr 07 20:07:44.791900 2026] [:error] [pid 59551:tid 59553] [client 20.215.218.174:40902] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzkF7LN7Ubyqs-sVsCNwAAAYA"]
[Tue Apr 07 20:07:45.562968 2026] [:error] [pid 59660:tid 59676] [client 20.215.218.174:40243] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzkTp3-oiX2o5bTswQvQAAAc4"]
[Tue Apr 07 20:07:45.615713 2026] [:error] [pid 37597:tid 37645] [client 20.215.218.174:41883] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTzkQ6uAY0QAy-8EEJqxQAAAEs"]
[Tue Apr 07 20:07:46.465114 2026] [:error] [pid 37597:tid 37655] [client 20.215.218.174:54803] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/404.php"] [unique_id "adTzkg6uAY0QAy-8EEJqxgAAAFU"]
[Tue Apr 07 20:07:47.435698 2026] [:error] [pid 37598:tid 37683] [client 20.215.218.174:40207] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzk-9g7q_cV2WhPayz9gAAAJY"]
[Tue Apr 07 20:07:47.606947 2026] [:error] [pid 37598:tid 37676] [client 20.215.218.174:38236] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lol.php"] [unique_id "adTzk-9g7q_cV2WhPayz9wAAAI8"]
[Tue Apr 07 20:07:48.878905 2026] [:error] [pid 59804:tid 59822] [client 20.215.218.174:41897] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lol.php"] [unique_id "adTzlHYVIXiPh5_eJTmizQAAAhA"]
[Tue Apr 07 20:07:49.427832 2026] [:error] [pid 12948:tid 12962] [client 20.215.218.174:38210] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adTzlcbeSPAN8LvMqsar2AAAAQs"]
[Tue Apr 07 20:07:50.031852 2026] [:error] [pid 37598:tid 37672] [client 20.215.218.174:42150] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lol.php"] [unique_id "adTzlu9g7q_cV2WhPayz-QAAAIs"]
[Tue Apr 07 20:07:50.862895 2026] [:error] [pid 37597:tid 37638] [client 20.215.218.174:54796] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzlg6uAY0QAy-8EEJqzAAAAEQ"]
[Tue Apr 07 20:07:51.058483 2026] [:error] [pid 59660:tid 59671] [client 20.215.218.174:38228] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lol.php"] [unique_id "adTzlzp3-oiX2o5bTswQwgAAAck"]
[Tue Apr 07 20:07:52.016586 2026] [:error] [pid 59804:tid 59820] [client 20.215.218.174:6566] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "adTzmHYVIXiPh5_eJTmi1AAAAg4"]
[Tue Apr 07 20:07:52.217041 2026] [:error] [pid 37597:tid 37650] [client 20.215.218.174:38578] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzmA6uAY0QAy-8EEJqzgAAAFA"]
[Tue Apr 07 20:07:53.286800 2026] [:error] [pid 37597:tid 37658] [client 20.215.218.174:40932] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzmQ6uAY0QAy-8EEJq0QAAAFg"]
[Tue Apr 07 20:07:53.337301 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:54805] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "adTzmQ6uAY0QAy-8EEJq0gAAAFQ"]
[Tue Apr 07 20:07:54.141554 2026] [:error] [pid 37597:tid 37636] [client 20.215.218.174:6544] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/m.php"] [unique_id "adTzmg6uAY0QAy-8EEJq1wAAAEI"]
[Tue Apr 07 20:07:54.253388 2026] [:error] [pid 37597:tid 37639] [client 20.215.218.174:45728] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "adTzmg6uAY0QAy-8EEJq2QAAAEU"]
[Tue Apr 07 20:07:54.902761 2026] [:error] [pid 59804:tid 59817] [client 20.215.218.174:42174] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "adTzmnYVIXiPh5_eJTmi1gAAAgs"]
[Tue Apr 07 20:07:55.134161 2026] [:error] [pid 12948:tid 12963] [client 20.215.218.174:41906] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTzm8beSPAN8LvMqsar2gAAAQw"]
[Tue Apr 07 20:07:57.364042 2026] [:error] [pid 37597:tid 37651] [client 20.215.218.174:39731] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTznQ6uAY0QAy-8EEJq6QAAAFE"]
[Tue Apr 07 20:07:58.849795 2026] [:error] [pid 12948:tid 12969] [client 20.215.218.174:48603] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTznsbeSPAN8LvMqsar2wAAARI"]
[Tue Apr 07 20:07:59.755917 2026] [:error] [pid 37719:tid 37727] [client 20.215.218.174:6536] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-is.php"] [unique_id "adTzn009Xv52u2xXGLASCgAAAMU"]
[Tue Apr 07 20:08:00.911460 2026] [:error] [pid 59804:tid 59817] [client 20.215.218.174:37640] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzoHYVIXiPh5_eJTmi3gAAAgs"]
[Tue Apr 07 20:08:01.773830 2026] [:error] [pid 37597:tid 37647] [client 20.215.218.174:48638] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzoQ6uAY0QAy-8EEJq-gAAAE0"]
[Tue Apr 07 20:08:03.778600 2026] [:error] [pid 59804:tid 59814] [client 20.215.218.174:40909] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzo3YVIXiPh5_eJTmi4QAAAgg"]
[Tue Apr 07 20:08:05.119580 2026] [:error] [pid 59804:tid 59816] [client 20.215.218.174:46453] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file15.php"] [unique_id "adTzpXYVIXiPh5_eJTmi5QAAAgo"]
[Tue Apr 07 20:08:06.691050 2026] [:error] [pid 37597:tid 37654] [client 20.215.218.174:41088] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTzpg6uAY0QAy-8EEJrDgAAAFQ"]
[Tue Apr 07 20:08:07.808005 2026] [:error] [pid 59551:tid 59573] [client 20.215.218.174:48611] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTzp17LN7Ubyqs-sVsCPwAAAZQ"]
[Tue Apr 07 20:08:08.490812 2026] [:error] [pid 59551:tid 59556] [client 20.215.218.174:39289] [client 20.215.218.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wsd.php"] [unique_id "adTzqF7LN7Ubyqs-sVsCQAAAAYM"]
[Tue Apr 07 20:08:09.353928 2026] [:error] [pid 37598:tid 37676] [client 20.215.218.174:40556] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Tue Apr 07 20:08:09.613201 2026] [:error] [pid 37598:tid 37680] [client 20.215.218.174:40556] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 07 20:08:09.871324 2026] [:error] [pid 37598:tid 37668] [client 20.215.218.174:40556] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Apr 07 20:08:10.128943 2026] [:error] [pid 37598:tid 37673] [client 20.215.218.174:40556] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Apr 07 20:08:10.571809 2026] [:error] [pid 37598:tid 37679] [client 20.215.218.174:40556] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Tue Apr 07 20:08:10.844595 2026] [:error] [pid 37598:tid 37671] [client 20.215.218.174:40556] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed Apr 08 00:06:58.624132 2026] [:error] [pid 59804:tid 59825] [client 117.33.163.216:35624] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adUronYVIXiPh5_eJTkSLgAAAhM"]
[Wed Apr 08 02:47:58.669435 2026] [:error] [pid 303:tid 313] [client 177.92.53.39:15461] [client 177.92.53.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.92.53.39, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adVRXs9wWR0DHTrNMugsvAAAAUc"]
[Wed Apr 08 02:47:58.674094 2026] [:error] [pid 303:tid 313] [client 177.92.53.39:15461] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 08 03:41:11.166080 2026] [:error] [pid 43034:tid 43063] [client 68.221.128.217:11106] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Wed Apr 08 03:41:11.409246 2026] [:error] [pid 43034:tid 43061] [client 68.221.128.217:11106] File does not exist: /usr/local/apache/htdocs/suspended-page/bogles.php
[Wed Apr 08 03:41:11.893424 2026] [:error] [pid 43034:tid 43044] [client 68.221.128.217:11106] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 08 03:41:12.133694 2026] [:error] [pid 43034:tid 43052] [client 68.221.128.217:11106] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Wed Apr 08 03:41:12.377284 2026] [:error] [pid 43034:tid 43055] [client 68.221.128.217:11106] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Wed Apr 08 03:41:12.864829 2026] [:error] [pid 43034:tid 43049] [client 68.221.128.217:11106] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Wed Apr 08 03:41:13.108819 2026] [:error] [pid 43034:tid 43056] [client 68.221.128.217:11106] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 08 03:42:27.463854 2026] [:error] [pid 43738:tid 43763] [client 43.167.232.38:43684] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adVeIwjwY_KYpD8o1SfBFAAAANc"]
[Wed Apr 08 07:45:51.818331 2026] [:error] [pid 47625:tid 47649] [client 129.226.174.80:58966] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adWXLyVuHyNWzZlE8PAengAAAA8"]
[Wed Apr 08 09:25:24.882146 2026] [:error] [pid 16630:tid 16632] [client 103.168.67.159:46158] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adWuhCjfVAkPG-jgJEpQggAAAQA"]
[Wed Apr 08 09:25:25.602115 2026] [:error] [pid 16630:tid 16639] [client 103.168.67.159:46504] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adWuhSjfVAkPG-jgJEpQjQAAAQc"]
[Wed Apr 08 09:25:26.302601 2026] [:error] [pid 47626:tid 47686] [client 103.168.67.159:46822] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adWuhqjWI8TWtHx2sdZJvAAAAFI"]
[Wed Apr 08 09:25:27.004019 2026] [:error] [pid 16630:tid 16642] [client 103.168.67.159:47140] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adWuhyjfVAkPG-jgJEpQnwAAAQo"]
[Wed Apr 08 09:25:27.701886 2026] [:error] [pid 47627:tid 47722] [client 103.168.67.159:47508] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dashboard"] [unique_id "adWuh3Oljf1Quv_kDjn0LQAAAJc"]
[Wed Apr 08 09:25:28.416938 2026] [:error] [pid 47732:tid 47747] [client 103.168.67.159:47908] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dashboard"] [unique_id "adWuiIm4N5QW9Mh7G127rwAAAM0"]
[Wed Apr 08 09:25:29.121411 2026] [:error] [pid 47626:tid 47675] [client 103.168.67.159:48330] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dashboard"] [unique_id "adWuiajWI8TWtHx2sdZJ0QAAAEc"]
[Wed Apr 08 09:25:29.825589 2026] [:error] [pid 47732:tid 47757] [client 103.168.67.159:48778] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dashboard"] [unique_id "adWuiYm4N5QW9Mh7G127xAAAANc"]
[Wed Apr 08 09:39:02.840701 2026] [:error] [pid 47625:tid 47645] [client 20.203.160.85:14377] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Wed Apr 08 09:39:03.079179 2026] [:error] [pid 47625:tid 47650] [client 20.203.160.85:14377] File does not exist: /usr/local/apache/htdocs/suspended-page/bogles.php
[Wed Apr 08 09:39:03.557510 2026] [:error] [pid 47625:tid 47656] [client 20.203.160.85:14377] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 08 09:39:03.796274 2026] [:error] [pid 47625:tid 47643] [client 20.203.160.85:14377] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Wed Apr 08 09:39:04.034880 2026] [:error] [pid 47625:tid 47641] [client 20.203.160.85:14377] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Wed Apr 08 09:39:04.515755 2026] [:error] [pid 47625:tid 47634] [client 20.203.160.85:14377] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Wed Apr 08 09:39:04.818199 2026] [:error] [pid 47625:tid 47634] [client 20.203.160.85:14377] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 08 10:09:01.088172 2026] [:error] [pid 49984:tid 49995] [client 43.156.204.134:40094] [client 43.156.204.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adW4veYY_Bz5lRHcJIFFsQAAAUU"]
[Wed Apr 08 12:25:34.490517 2026] [:error] [pid 12490:tid 12493] [client 182.44.2.148:60945] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adXYvm1Fea4F4fbumr0NkwAAAME"]
[Wed Apr 08 13:32:23.091493 2026] [:error] [pid 12385:tid 12398] [client 45.131.195.210:27649] [client 45.131.195.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adXoZyAjtvRQEkLosq35ngAAAAk"]
[Wed Apr 08 15:56:19.684972 2026] [:error] [pid 12386:tid 12430] [client 49.51.252.146:43624] [client 49.51.252.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adYKIxLhhLtqHi2gK7WnUAAAAQ4"]
[Wed Apr 08 19:33:58.941626 2026] [:error] [pid 64066:tid 64087] [client 124.156.226.179:42454] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adY9JlR3WucJgr2vZGYp5gAAAVI"]
[Wed Apr 08 20:07:13.471868 2026] [:error] [pid 12453:tid 12457] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/xfile25.php
[Wed Apr 08 20:07:13.729135 2026] [:error] [pid 12453:tid 12459] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Wed Apr 08 20:07:14.108136 2026] [:error] [pid 12453:tid 12478] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cxx.php
[Wed Apr 08 20:07:14.369698 2026] [:error] [pid 12453:tid 12460] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/water.php
[Wed Apr 08 20:07:14.637125 2026] [:error] [pid 12453:tid 12470] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Wed Apr 08 20:07:14.897780 2026] [:error] [pid 12453:tid 12468] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/ghhjh.php
[Wed Apr 08 20:07:15.179646 2026] [:error] [pid 12453:tid 12455] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Wed Apr 08 20:07:15.436721 2026] [:error] [pid 12453:tid 12476] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Wed Apr 08 20:07:15.694810 2026] [:error] [pid 12453:tid 12462] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/bbny.php
[Wed Apr 08 20:07:15.951900 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:63338] File does not exist: /usr/local/apache/htdocs/suspended-page/wert.php
[Wed Apr 08 20:07:16.261917 2026] [:error] [pid 12453:tid 12472] [client 20.215.66.172:63338] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adZE9BjtW7S6XsLPvrQYRwAAAJE"]
[Wed Apr 08 20:07:16.836755 2026] [:error] [pid 35642:tid 35654] [client 20.215.66.172:52856] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adZE9A-CqryxdEs5DN9TJwAAAEo"]
[Wed Apr 08 20:07:17.580873 2026] [:error] [pid 64066:tid 64077] [client 20.215.66.172:49300] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adZE9VR3WucJgr2vZGYyggAAAUg"]
[Wed Apr 08 20:07:18.171210 2026] [:error] [pid 12453:tid 12464] [client 20.215.66.172:63299] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adZE9hjtW7S6XsLPvrQYSAAAAIk"]
[Wed Apr 08 20:07:19.012085 2026] [:error] [pid 12385:tid 12400] [client 20.215.66.172:56317] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adZE9yAjtvRQEkLosq2ZLQAAAAs"]
[Wed Apr 08 20:07:19.778074 2026] [:error] [pid 12385:tid 12404] [client 20.215.66.172:63319] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adZE9yAjtvRQEkLosq2ZLwAAAA8"]
[Wed Apr 08 20:07:20.407557 2026] [:error] [pid 7189:tid 7204] [client 20.215.66.172:56290] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adZE-BaBqhBSu0L37lrEgQAAAc0"]
[Wed Apr 08 20:07:21.098421 2026] [:error] [pid 64066:tid 64090] [client 20.215.66.172:52817] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adZE-VR3WucJgr2vZGYygwAAAVU"]
[Wed Apr 08 20:07:21.849749 2026] [:error] [pid 64066:tid 64073] [client 20.215.66.172:59550] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adZE-VR3WucJgr2vZGYyhQAAAUQ"]
[Wed Apr 08 20:07:22.461431 2026] [:error] [pid 12385:tid 12411] [client 20.215.66.172:56062] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adZE-iAjtvRQEkLosq2ZNAAAABY"]
[Wed Apr 08 20:07:22.991667 2026] [:error] [pid 7189:tid 7215] [client 20.215.66.172:52779] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adZE-haBqhBSu0L37lrEhAAAAdg"]
[Wed Apr 08 20:07:23.517350 2026] [:error] [pid 12385:tid 12397] [client 20.215.66.172:48983] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adZE-yAjtvRQEkLosq2ZNQAAAAg"]
[Wed Apr 08 20:07:24.087930 2026] [:error] [pid 12386:tid 12421] [client 20.215.66.172:59687] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lela.php"] [unique_id "adZE_BLhhLtqHi2gK7USyQAAAQU"]
[Wed Apr 08 20:07:24.688323 2026] [:error] [pid 64066:tid 64088] [client 20.215.66.172:56008] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lela.php"] [unique_id "adZE_FR3WucJgr2vZGYyhgAAAVM"]
[Wed Apr 08 20:07:25.250089 2026] [:error] [pid 64066:tid 64084] [client 20.215.66.172:49283] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lela.php"] [unique_id "adZE_VR3WucJgr2vZGYyiAAAAU8"]
[Wed Apr 08 20:07:25.811087 2026] [:error] [pid 7189:tid 7207] [client 20.215.66.172:52791] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lela.php"] [unique_id "adZE_RaBqhBSu0L37lrEjQAAAdA"]
[Wed Apr 08 20:07:26.432133 2026] [:error] [pid 64066:tid 64082] [client 20.215.66.172:49295] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adZE_lR3WucJgr2vZGYyiQAAAU0"]
[Wed Apr 08 20:07:27.048136 2026] [:error] [pid 12386:tid 12424] [client 20.215.66.172:59670] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adZE_xLhhLtqHi2gK7USzAAAAQg"]
[Wed Apr 08 20:07:27.668370 2026] [:error] [pid 12386:tid 12435] [client 20.215.66.172:48963] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adZE_xLhhLtqHi2gK7USzQAAARM"]
[Wed Apr 08 20:07:28.386118 2026] [:error] [pid 35642:tid 35644] [client 20.215.66.172:63352] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adZFAA-CqryxdEs5DN9TKwAAAEA"]
[Wed Apr 08 20:07:28.989296 2026] [:error] [pid 7189:tid 7200] [client 20.215.66.172:49334] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adZFABaBqhBSu0L37lrEkgAAAck"]
[Wed Apr 08 20:07:29.606244 2026] [:error] [pid 7189:tid 7205] [client 20.215.66.172:59676] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adZFARaBqhBSu0L37lrEkwAAAc4"]
[Wed Apr 08 20:07:30.207139 2026] [:error] [pid 64066:tid 64089] [client 20.215.66.172:63324] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adZFAlR3WucJgr2vZGYyjwAAAVQ"]
[Wed Apr 08 20:07:30.738561 2026] [:error] [pid 64066:tid 64071] [client 20.215.66.172:44924] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adZFAlR3WucJgr2vZGYykgAAAUI"]
[Wed Apr 08 20:07:31.283140 2026] [:error] [pid 64066:tid 64079] [client 20.215.66.172:59564] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adZFA1R3WucJgr2vZGYykwAAAUo"]
[Wed Apr 08 20:07:31.871328 2026] [:error] [pid 64066:tid 64074] [client 20.215.66.172:56294] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adZFA1R3WucJgr2vZGYylAAAAUU"]
[Wed Apr 08 20:07:32.406063 2026] [:error] [pid 35642:tid 35668] [client 20.215.66.172:63342] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adZFBA-CqryxdEs5DN9TMAAAAFg"]
[Wed Apr 08 20:07:33.145450 2026] [:error] [pid 35642:tid 35658] [client 20.215.66.172:59559] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adZFBQ-CqryxdEs5DN9TMQAAAE4"]
[Wed Apr 08 20:07:33.809831 2026] [:error] [pid 64066:tid 64085] [client 20.215.66.172:48960] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "adZFBVR3WucJgr2vZGYylwAAAVA"]
[Wed Apr 08 20:07:34.677888 2026] [:error] [pid 12453:tid 12478] [client 20.215.66.172:63593] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "adZFBhjtW7S6XsLPvrQYSwAAAJc"]
[Wed Apr 08 20:07:35.802856 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:63333] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "adZFB-Nh3oGO3pKiCzz8jgAAAZI"]
[Wed Apr 08 20:07:37.806403 2026] [:error] [pid 35642:tid 35661] [client 20.215.66.172:59655] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "adZFCQ-CqryxdEs5DN9TMwAAAFE"]
[Wed Apr 08 20:07:38.684865 2026] [:error] [pid 7047:tid 7053] [client 20.215.66.172:63589] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqa.php"] [unique_id "adZFCuNh3oGO3pKiCzz8nAAAAYQ"]
[Wed Apr 08 20:07:39.309368 2026] [:error] [pid 12453:tid 12472] [client 20.215.66.172:48970] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqa.php"] [unique_id "adZFCxjtW7S6XsLPvrQYUgAAAJE"]
[Wed Apr 08 20:07:40.106930 2026] [:error] [pid 35642:tid 35646] [client 20.215.66.172:59553] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqa.php"] [unique_id "adZFDA-CqryxdEs5DN9TNAAAAEI"]
[Wed Apr 08 20:07:40.675681 2026] [:error] [pid 7047:tid 7052] [client 20.215.66.172:44910] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqa.php"] [unique_id "adZFDONh3oGO3pKiCzz8pQAAAYM"]
[Wed Apr 08 20:07:41.304641 2026] [:error] [pid 7047:tid 7068] [client 20.215.66.172:63300] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adZFDeNh3oGO3pKiCzz8qQAAAZM"]
[Wed Apr 08 20:07:42.085633 2026] [:error] [pid 7047:tid 7053] [client 20.215.66.172:52850] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adZFDuNh3oGO3pKiCzz8rgAAAYQ"]
[Wed Apr 08 20:07:42.668051 2026] [:error] [pid 7047:tid 7059] [client 20.215.66.172:59548] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adZFDuNh3oGO3pKiCzz8sgAAAYo"]
[Wed Apr 08 20:07:43.258274 2026] [:error] [pid 12453:tid 12472] [client 20.215.66.172:49292] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adZFDxjtW7S6XsLPvrQYZAAAAJE"]
[Wed Apr 08 20:07:43.837772 2026] [:error] [pid 35642:tid 35650] [client 20.215.66.172:63558] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adZFDw-CqryxdEs5DN9TNQAAAEY"]
[Wed Apr 08 20:07:44.603337 2026] [:error] [pid 7047:tid 7053] [client 20.215.66.172:59563] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adZFEONh3oGO3pKiCzz8ugAAAYQ"]
[Wed Apr 08 20:07:45.299865 2026] [:error] [pid 7189:tid 7192] [client 20.215.66.172:59688] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adZFERaBqhBSu0L37lrEogAAAcE"]
[Wed Apr 08 20:07:45.962695 2026] [:error] [pid 12453:tid 12465] [client 20.215.66.172:59557] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adZFERjtW7S6XsLPvrQYZQAAAIo"]
[Wed Apr 08 20:07:46.628756 2026] [:error] [pid 64066:tid 64077] [client 20.215.66.172:52830] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adZFElR3WucJgr2vZGYynwAAAUg"]
[Wed Apr 08 20:07:47.247365 2026] [:error] [pid 12386:tid 12431] [client 20.215.66.172:56300] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adZFExLhhLtqHi2gK7US1AAAAQ8"]
[Wed Apr 08 20:07:47.890622 2026] [:error] [pid 64066:tid 64084] [client 20.215.66.172:63315] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adZFE1R3WucJgr2vZGYyoQAAAU8"]
[Wed Apr 08 20:07:48.814672 2026] [:error] [pid 12490:tid 12495] [client 20.215.66.172:52757] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adZFFG1Fea4F4fbumr33ggAAAMM"]
[Wed Apr 08 20:07:49.375977 2026] [:error] [pid 12453:tid 12478] [client 20.215.66.172:63573] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adZFFRjtW7S6XsLPvrQYZwAAAJc"]
[Wed Apr 08 20:07:50.060467 2026] [:error] [pid 12386:tid 12438] [client 20.215.66.172:59572] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adZFFhLhhLtqHi2gK7US1QAAARY"]
[Wed Apr 08 20:07:50.613203 2026] [:error] [pid 12490:tid 12505] [client 20.215.66.172:59664] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adZFFm1Fea4F4fbumr33hgAAAM0"]
[Wed Apr 08 20:07:51.323997 2026] [:error] [pid 12385:tid 12407] [client 20.215.66.172:37600] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adZFFyAjtvRQEkLosq2ZPAAAABI"]
[Wed Apr 08 20:07:51.880042 2026] [:error] [pid 12490:tid 12513] [client 20.215.66.172:49320] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adZFF21Fea4F4fbumr33iQAAANU"]
[Wed Apr 08 20:07:52.763734 2026] [:error] [pid 12490:tid 12492] [client 20.215.66.172:59540] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adZFGG1Fea4F4fbumr33iwAAAMA"]
[Wed Apr 08 20:07:53.480474 2026] [:error] [pid 35642:tid 35645] [client 20.215.66.172:52852] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adZFGQ-CqryxdEs5DN9TNwAAAEE"]
[Wed Apr 08 20:07:54.074539 2026] [:error] [pid 64066:tid 64080] [client 20.215.66.172:49306] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adZFGlR3WucJgr2vZGYypAAAAUs"]
[Wed Apr 08 20:07:54.764985 2026] [:error] [pid 12386:tid 12424] [client 20.215.66.172:59577] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adZFGhLhhLtqHi2gK7US1gAAAQg"]
[Wed Apr 08 20:07:55.686991 2026] [:error] [pid 12385:tid 12409] [client 20.215.66.172:52834] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adZFGyAjtvRQEkLosq2ZPQAAABQ"]
[Wed Apr 08 20:07:56.402164 2026] [:error] [pid 64066:tid 64092] [client 20.215.66.172:56054] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adZFHFR3WucJgr2vZGYyrAAAAVc"]
[Wed Apr 08 20:07:57.236600 2026] [:error] [pid 7047:tid 7072] [client 20.215.66.172:63613] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adZFHeNh3oGO3pKiCzz83QAAAZc"]
[Wed Apr 08 20:07:57.864442 2026] [:error] [pid 35642:tid 35655] [client 20.215.66.172:56031] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adZFHQ-CqryxdEs5DN9TOwAAAEs"]
[Wed Apr 08 20:07:58.884538 2026] [:error] [pid 7047:tid 7056] [client 20.215.66.172:59706] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adZFHuNh3oGO3pKiCzz84AAAAYc"]
[Wed Apr 08 20:08:00.047826 2026] [:error] [pid 35642:tid 35661] [client 20.215.66.172:56263] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adZFIA-CqryxdEs5DN9TPwAAAFE"]
[Wed Apr 08 20:08:01.583995 2026] [:error] [pid 12385:tid 12400] [client 20.215.66.172:56043] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adZFISAjtvRQEkLosq2ZQAAAAAs"]
[Wed Apr 08 20:08:02.168312 2026] [:error] [pid 64066:tid 64087] [client 20.215.66.172:63563] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adZFIlR3WucJgr2vZGYytgAAAVI"]
[Wed Apr 08 20:08:02.904423 2026] [:error] [pid 7047:tid 7070] [client 20.215.66.172:52796] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adZFIuNh3oGO3pKiCzz87gAAAZU"]
[Wed Apr 08 20:08:03.593309 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:63554] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adZFI-Nh3oGO3pKiCzz88wAAAZI"]
[Wed Apr 08 20:08:04.343755 2026] [:error] [pid 64066:tid 64088] [client 20.215.66.172:48962] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adZFJFR3WucJgr2vZGYyuAAAAVM"]
[Wed Apr 08 20:08:05.303603 2026] [:error] [pid 7047:tid 7071] [client 20.215.66.172:63326] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adZFJeNh3oGO3pKiCzz8_gAAAZY"]
[Wed Apr 08 20:08:06.093334 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:56000] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adZFJhjtW7S6XsLPvrQYbgAAAJA"]
[Wed Apr 08 20:08:06.915904 2026] [:error] [pid 12453:tid 12466] [client 20.215.66.172:52831] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adZFJhjtW7S6XsLPvrQYcAAAAIs"]
[Wed Apr 08 20:08:07.674745 2026] [:error] [pid 7047:tid 7071] [client 20.215.66.172:63571] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adZFJ-Nh3oGO3pKiCzz9DwAAAZY"]
[Wed Apr 08 20:08:08.315605 2026] [:error] [pid 64066:tid 64075] [client 20.215.66.172:59648] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adZFKFR3WucJgr2vZGYyugAAAUY"]
[Wed Apr 08 20:08:09.228638 2026] [:error] [pid 12385:tid 12408] [client 20.215.66.172:56011] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adZFKSAjtvRQEkLosq2ZRAAAABM"]
[Wed Apr 08 20:08:09.873705 2026] [:error] [pid 64066:tid 64084] [client 20.215.66.172:56009] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adZFKVR3WucJgr2vZGYyvQAAAU8"]
[Wed Apr 08 20:08:10.470634 2026] [:error] [pid 35642:tid 35661] [client 20.215.66.172:59689] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adZFKg-CqryxdEs5DN9TRgAAAFE"]
[Wed Apr 08 20:08:11.330826 2026] [:error] [pid 12386:tid 12439] [client 20.215.66.172:52847] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adZFKxLhhLtqHi2gK7US2gAAARc"]
[Wed Apr 08 20:08:11.931327 2026] [:error] [pid 12386:tid 12420] [client 20.215.66.172:52809] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adZFKxLhhLtqHi2gK7US2wAAAQQ"]
[Wed Apr 08 20:08:12.484111 2026] [:error] [pid 35642:tid 35662] [client 20.215.66.172:56282] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adZFLA-CqryxdEs5DN9TRwAAAFI"]
[Wed Apr 08 20:08:13.216514 2026] [:error] [pid 7047:tid 7063] [client 20.215.66.172:59662] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adZFLeNh3oGO3pKiCzz9NQAAAY4"]
[Wed Apr 08 20:08:13.799804 2026] [:error] [pid 7047:tid 7068] [client 20.215.66.172:52794] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "adZFLeNh3oGO3pKiCzz9OQAAAZM"]
[Wed Apr 08 20:08:14.400644 2026] [:error] [pid 7047:tid 7061] [client 20.215.66.172:63344] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "adZFLuNh3oGO3pKiCzz9PwAAAYw"]
[Wed Apr 08 20:08:14.981077 2026] [:error] [pid 7047:tid 7063] [client 20.215.66.172:45217] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "adZFLuNh3oGO3pKiCzz9RAAAAY4"]
[Wed Apr 08 20:08:15.497442 2026] [:error] [pid 7047:tid 7055] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/.mopj.php
[Wed Apr 08 20:08:15.778949 2026] [:error] [pid 7047:tid 7072] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Wed Apr 08 20:08:17.383095 2026] [:error] [pid 7047:tid 7072] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/nano.php
[Wed Apr 08 20:08:17.641569 2026] [:error] [pid 7047:tid 7061] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Wed Apr 08 20:08:17.899745 2026] [:error] [pid 7047:tid 7053] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Wed Apr 08 20:08:18.157424 2026] [:error] [pid 7047:tid 7062] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/file31.php
[Wed Apr 08 20:08:18.417278 2026] [:error] [pid 7047:tid 7055] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Wed Apr 08 20:08:18.731544 2026] [:error] [pid 7047:tid 7050] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/control.php
[Wed Apr 08 20:08:18.988795 2026] [:error] [pid 7047:tid 7059] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Wed Apr 08 20:08:19.263807 2026] [:error] [pid 7047:tid 7051] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Wed Apr 08 20:08:19.538458 2026] [:error] [pid 7047:tid 7058] [client 20.215.66.172:59521] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Wed Apr 08 20:08:19.796421 2026] [:error] [pid 7047:tid 7071] [client 20.215.66.172:59521] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adZFM-Nh3oGO3pKiCzz9WQAAAZY"]
[Wed Apr 08 20:08:20.422483 2026] [:error] [pid 35642:tid 35667] [client 20.215.66.172:49311] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adZFNA-CqryxdEs5DN9TTgAAAFc"]
[Wed Apr 08 20:08:21.040331 2026] [:error] [pid 12385:tid 12396] [client 20.215.66.172:52861] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adZFNSAjtvRQEkLosq2ZRwAAAAc"]
[Wed Apr 08 20:08:21.667443 2026] [:error] [pid 7047:tid 7062] [client 20.215.66.172:63577] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adZFNeNh3oGO3pKiCzz9WgAAAY0"]
[Wed Apr 08 20:08:22.212107 2026] [:error] [pid 35642:tid 35664] [client 20.215.66.172:49333] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adZFNg-CqryxdEs5DN9TUgAAAFQ"]
[Wed Apr 08 20:08:22.878194 2026] [:error] [pid 12453:tid 12457] [client 20.215.66.172:59656] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adZFNhjtW7S6XsLPvrQYfwAAAII"]
[Wed Apr 08 20:08:23.573407 2026] [:error] [pid 35642:tid 35662] [client 20.215.66.172:52798] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adZFNw-CqryxdEs5DN9TVgAAAFI"]
[Wed Apr 08 20:08:24.377615 2026] [:error] [pid 35642:tid 35663] [client 20.215.66.172:63331] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adZFOA-CqryxdEs5DN9TWAAAAFM"]
[Wed Apr 08 20:08:24.894963 2026] [:error] [pid 7047:tid 7068] [client 20.215.66.172:52837] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adZFOONh3oGO3pKiCzz9XQAAAZM"]
[Wed Apr 08 20:08:25.568000 2026] [:error] [pid 35642:tid 35645] [client 20.215.66.172:56063] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adZFOQ-CqryxdEs5DN9TWgAAAEE"]
[Wed Apr 08 20:08:26.201415 2026] [:error] [pid 35642:tid 35647] [client 20.215.66.172:48994] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adZFOg-CqryxdEs5DN9TWwAAAEM"]
[Wed Apr 08 20:08:26.782529 2026] [:error] [pid 7047:tid 7069] [client 20.215.66.172:56013] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adZFOuNh3oGO3pKiCzz9XgAAAZQ"]
[Wed Apr 08 20:08:27.399700 2026] [:error] [pid 12386:tid 12438] [client 20.215.66.172:63567] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adZFOxLhhLtqHi2gK7US4gAAARY"]
[Wed Apr 08 20:08:28.007960 2026] [:error] [pid 12490:tid 12513] [client 20.215.66.172:63343] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adZFPG1Fea4F4fbumr33xwAAANU"]
[Wed Apr 08 20:08:28.696527 2026] [:error] [pid 35642:tid 35664] [client 20.215.66.172:56257] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adZFPA-CqryxdEs5DN9TXwAAAFQ"]
[Wed Apr 08 20:08:29.478168 2026] [:error] [pid 64066:tid 64078] [client 20.215.66.172:56267] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adZFPVR3WucJgr2vZGYy0wAAAUk"]
[Wed Apr 08 20:08:30.352584 2026] [:error] [pid 7047:tid 7061] [client 20.215.66.172:56312] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adZFPuNh3oGO3pKiCzz9YQAAAYw"]
[Wed Apr 08 20:08:31.162136 2026] [:error] [pid 12453:tid 12472] [client 20.215.66.172:63321] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adZFPxjtW7S6XsLPvrQYhQAAAJE"]
[Wed Apr 08 20:08:31.855782 2026] [:error] [pid 64066:tid 64086] [client 20.215.66.172:56002] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adZFP1R3WucJgr2vZGYy2AAAAVE"]
[Wed Apr 08 20:08:32.521785 2026] [:error] [pid 7189:tid 7198] [client 20.215.66.172:52737] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adZFQBaBqhBSu0L37lrFAgAAAcc"]
[Wed Apr 08 20:08:33.063213 2026] [:error] [pid 7189:tid 7215] [client 20.215.66.172:59546] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adZFQRaBqhBSu0L37lrFBwAAAdg"]
[Wed Apr 08 20:08:33.613158 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:52771] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adZFQRjtW7S6XsLPvrQYhwAAAJA"]
[Wed Apr 08 20:08:34.791424 2026] [:error] [pid 35642:tid 35660] [client 20.215.66.172:28710] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adZFQg-CqryxdEs5DN9TYQAAAFA"]
[Wed Apr 08 20:08:35.537268 2026] [:error] [pid 12453:tid 12457] [client 20.215.66.172:63591] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adZFQxjtW7S6XsLPvrQYjQAAAII"]
[Wed Apr 08 20:08:36.990253 2026] [:error] [pid 12453:tid 12460] [client 20.215.66.172:28701] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adZFRBjtW7S6XsLPvrQYkAAAAIU"]
[Wed Apr 08 20:08:37.715176 2026] [:error] [pid 7047:tid 7064] [client 20.215.66.172:59679] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adZFReNh3oGO3pKiCzz9ZAAAAY8"]
[Wed Apr 08 20:08:38.617733 2026] [:error] [pid 64066:tid 64074] [client 20.215.66.172:49340] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adZFRlR3WucJgr2vZGYy2wAAAUU"]
[Wed Apr 08 20:08:39.832463 2026] [:error] [pid 64066:tid 64082] [client 20.215.66.172:63559] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adZFR1R3WucJgr2vZGYy3QAAAU0"]
[Wed Apr 08 20:08:40.470208 2026] [:error] [pid 7047:tid 7061] [client 20.215.66.172:56023] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adZFSONh3oGO3pKiCzz9bwAAAYw"]
[Wed Apr 08 20:08:41.175772 2026] [:error] [pid 12453:tid 12474] [client 20.215.66.172:59554] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adZFSRjtW7S6XsLPvrQYlgAAAJM"]
[Wed Apr 08 20:08:41.921082 2026] [:error] [pid 12453:tid 12456] [client 20.215.66.172:59580] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adZFSRjtW7S6XsLPvrQYmgAAAIE"]
[Wed Apr 08 20:08:42.856655 2026] [:error] [pid 12490:tid 12508] [client 20.215.66.172:59551] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adZFSm1Fea4F4fbumr33yQAAANA"]
[Wed Apr 08 20:08:43.778705 2026] [:error] [pid 12453:tid 12473] [client 20.215.66.172:52784] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adZFSxjtW7S6XsLPvrQYnAAAAJI"]
[Wed Apr 08 20:08:44.704821 2026] [:error] [pid 7047:tid 7064] [client 20.215.66.172:63555] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adZFTONh3oGO3pKiCzz9dgAAAY8"]
[Wed Apr 08 20:08:46.051586 2026] [:error] [pid 35642:tid 35651] [client 20.215.66.172:56045] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adZFTg-CqryxdEs5DN9TZQAAAEc"]
[Wed Apr 08 20:08:46.712983 2026] [:error] [pid 7189:tid 7200] [client 20.215.66.172:56295] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adZFThaBqhBSu0L37lrFOgAAAck"]
[Wed Apr 08 20:08:47.546872 2026] [:error] [pid 7047:tid 7061] [client 20.215.66.172:48999] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adZFT-Nh3oGO3pKiCzz9hQAAAYw"]
[Wed Apr 08 20:08:48.390536 2026] [:error] [pid 7047:tid 7070] [client 20.215.66.172:56057] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adZFUONh3oGO3pKiCzz9jAAAAZU"]
[Wed Apr 08 20:08:49.269158 2026] [:error] [pid 7047:tid 7059] [client 20.215.66.172:56050] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adZFUeNh3oGO3pKiCzz9lQAAAYo"]
[Wed Apr 08 20:08:50.026854 2026] [:error] [pid 12386:tid 12438] [client 20.215.66.172:59526] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adZFUhLhhLtqHi2gK7US6QAAARY"]
[Wed Apr 08 20:08:51.227071 2026] [:error] [pid 7047:tid 7065] [client 20.215.66.172:38559] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "adZFU-Nh3oGO3pKiCzz9ngAAAZA"]
[Wed Apr 08 20:08:52.041275 2026] [:error] [pid 12490:tid 12513] [client 20.215.66.172:52756] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "adZFVG1Fea4F4fbumr331wAAANU"]
[Wed Apr 08 20:08:52.988753 2026] [:error] [pid 64066:tid 64091] [client 20.215.66.172:63359] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "adZFVFR3WucJgr2vZGYy4wAAAVY"]
[Wed Apr 08 20:08:53.931762 2026] [:error] [pid 12453:tid 12469] [client 20.215.66.172:48981] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mter.php"] [unique_id "adZFVRjtW7S6XsLPvrQYpgAAAI4"]
[Wed Apr 08 20:08:54.746221 2026] [:error] [pid 12490:tid 12509] [client 20.215.66.172:63603] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adZFVm1Fea4F4fbumr332QAAANE"]
[Wed Apr 08 20:08:56.251054 2026] [:error] [pid 7047:tid 7059] [client 20.215.66.172:59696] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adZFWONh3oGO3pKiCzz9uAAAAYo"]
[Wed Apr 08 20:08:57.462729 2026] [:error] [pid 7189:tid 7214] [client 20.215.66.172:49304] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adZFWRaBqhBSu0L37lrFQwAAAdc"]
[Wed Apr 08 20:08:58.251853 2026] [:error] [pid 7047:tid 7062] [client 20.215.66.172:59529] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adZFWuNh3oGO3pKiCzz9yAAAAY0"]
[Wed Apr 08 20:08:58.953591 2026] [:error] [pid 12453:tid 12477] [client 20.215.66.172:48968] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "adZFWhjtW7S6XsLPvrQYrQAAAJY"]
[Wed Apr 08 20:08:59.550638 2026] [:error] [pid 12385:tid 12392] [client 20.215.66.172:56003] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "adZFWyAjtvRQEkLosq2ZXAAAAAM"]
[Wed Apr 08 20:09:00.403223 2026] [:error] [pid 7047:tid 7069] [client 20.215.66.172:63327] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "adZFXONh3oGO3pKiCzz90AAAAZQ"]
[Wed Apr 08 20:09:01.228313 2026] [:error] [pid 7047:tid 7059] [client 20.215.66.172:52758] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "adZFXeNh3oGO3pKiCzz91wAAAYo"]
[Wed Apr 08 20:09:01.928129 2026] [:error] [pid 35642:tid 35645] [client 20.215.66.172:59571] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFXQ-CqryxdEs5DN9TcwAAAEE"]
[Wed Apr 08 20:09:03.267043 2026] [:error] [pid 35642:tid 35664] [client 20.215.66.172:63609] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFXw-CqryxdEs5DN9TdwAAAFQ"]
[Wed Apr 08 20:09:04.053133 2026] [:error] [pid 7047:tid 7063] [client 20.215.66.172:59579] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFYONh3oGO3pKiCzz94QAAAY4"]
[Wed Apr 08 20:09:04.774529 2026] [:error] [pid 12490:tid 12513] [client 20.215.66.172:63341] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFYG1Fea4F4fbumr335AAAANU"]
[Wed Apr 08 20:09:05.564230 2026] [:error] [pid 7047:tid 7062] [client 20.215.66.172:48979] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adZFYeNh3oGO3pKiCzz95wAAAY0"]
[Wed Apr 08 20:09:06.189151 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:48975] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adZFYhjtW7S6XsLPvrQYsAAAAJA"]
[Wed Apr 08 20:09:06.907286 2026] [:error] [pid 35642:tid 35657] [client 20.215.66.172:49294] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adZFYg-CqryxdEs5DN9TegAAAE0"]
[Wed Apr 08 20:09:07.738863 2026] [:error] [pid 12453:tid 12463] [client 20.215.66.172:59570] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adZFYxjtW7S6XsLPvrQYtwAAAIg"]
[Wed Apr 08 20:09:08.515647 2026] [:error] [pid 7189:tid 7197] [client 20.215.66.172:63304] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adZFZBaBqhBSu0L37lrFVQAAAcY"]
[Wed Apr 08 20:09:10.097288 2026] [:error] [pid 7189:tid 7194] [client 20.215.66.172:52801] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adZFZhaBqhBSu0L37lrFWAAAAcM"]
[Wed Apr 08 20:09:11.213141 2026] [:error] [pid 7047:tid 7063] [client 20.215.66.172:49023] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adZFZ-Nh3oGO3pKiCzz-EAAAAY4"]
[Wed Apr 08 20:09:11.946452 2026] [:error] [pid 7047:tid 7051] [client 20.215.66.172:56304] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adZFZ-Nh3oGO3pKiCzz-EQAAAYI"]
[Wed Apr 08 20:09:13.137494 2026] [:error] [pid 7047:tid 7065] [client 20.215.66.172:52847] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adZFaeNh3oGO3pKiCzz-FwAAAZA"]
[Wed Apr 08 20:09:14.399730 2026] [:error] [pid 7047:tid 7066] [client 20.215.66.172:52755] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adZFauNh3oGO3pKiCzz-GgAAAZE"]
[Wed Apr 08 20:09:16.284828 2026] [:error] [pid 64066:tid 64080] [client 20.215.66.172:48992] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adZFbFR3WucJgr2vZGYy7AAAAUs"]
[Wed Apr 08 20:09:17.667156 2026] [:error] [pid 12385:tid 12407] [client 20.215.66.172:59698] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adZFbSAjtvRQEkLosq2ZXQAAABI"]
[Wed Apr 08 20:09:18.955050 2026] [:error] [pid 7189:tid 7210] [client 20.215.66.172:52824] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adZFbhaBqhBSu0L37lrFWwAAAdM"]
[Wed Apr 08 20:09:22.097757 2026] [:error] [pid 64066:tid 64069] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Wed Apr 08 20:09:22.355361 2026] [:error] [pid 64066:tid 64092] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Wed Apr 08 20:09:22.614557 2026] [:error] [pid 64066:tid 64077] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/swallowable.php
[Wed Apr 08 20:09:23.046300 2026] [:error] [pid 64066:tid 64076] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Wed Apr 08 20:09:23.319811 2026] [:error] [pid 64066:tid 64079] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Wed Apr 08 20:09:23.773533 2026] [:error] [pid 64066:tid 64082] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 08 20:09:24.034970 2026] [:error] [pid 64066:tid 64090] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 08 20:09:25.789614 2026] [:error] [pid 64066:tid 64069] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Wed Apr 08 20:09:26.048028 2026] [:error] [pid 64066:tid 64093] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Wed Apr 08 20:09:26.307701 2026] [:error] [pid 64066:tid 64075] [client 20.215.66.172:44865] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Wed Apr 08 20:09:26.608641 2026] [:error] [pid 64066:tid 64086] [client 20.215.66.172:44865] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adZFdlR3WucJgr2vZGYzDgAAAVE"]
[Wed Apr 08 20:09:28.002966 2026] [:error] [pid 7189:tid 7196] [client 20.215.66.172:56042] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adZFeBaBqhBSu0L37lrFZQAAAcU"]
[Wed Apr 08 20:09:28.728857 2026] [:error] [pid 7189:tid 7202] [client 20.215.66.172:49317] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adZFeBaBqhBSu0L37lrFZwAAAcs"]
[Wed Apr 08 20:09:29.661211 2026] [:error] [pid 7047:tid 7072] [client 20.215.66.172:49009] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adZFeeNh3oGO3pKiCzz-NQAAAZc"]
[Wed Apr 08 20:09:30.496100 2026] [:error] [pid 7047:tid 7049] [client 20.215.66.172:49327] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adZFeuNh3oGO3pKiCzz-OQAAAYA"]
[Wed Apr 08 20:09:32.478402 2026] [:error] [pid 7189:tid 7210] [client 20.215.66.172:56030] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adZFfBaBqhBSu0L37lrFawAAAdM"]
[Wed Apr 08 20:09:34.304346 2026] [:error] [pid 7047:tid 7056] [client 20.215.66.172:63552] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adZFfuNh3oGO3pKiCzz-QwAAAYc"]
[Wed Apr 08 20:09:36.172533 2026] [:error] [pid 12490:tid 12501] [client 20.215.66.172:49307] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adZFgG1Fea4F4fbumr337wAAAMk"]
[Wed Apr 08 20:09:36.995039 2026] [:error] [pid 12386:tid 12430] [client 20.215.66.172:59581] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adZFgBLhhLtqHi2gK7US8gAAAQ4"]
[Wed Apr 08 20:09:38.516451 2026] [:error] [pid 12386:tid 12432] [client 20.215.66.172:59671] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adZFghLhhLtqHi2gK7US9QAAARA"]
[Wed Apr 08 20:09:39.939692 2026] [:error] [pid 12385:tid 12399] [client 20.215.66.172:59659] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adZFgyAjtvRQEkLosq2ZZwAAAAo"]
[Wed Apr 08 20:09:40.613183 2026] [:error] [pid 35642:tid 35657] [client 20.215.66.172:48972] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adZFhA-CqryxdEs5DN9TlgAAAE0"]
[Wed Apr 08 20:09:41.186120 2026] [:error] [pid 7189:tid 7205] [client 20.215.66.172:49338] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adZFhRaBqhBSu0L37lrFegAAAc4"]
[Wed Apr 08 20:09:42.058590 2026] [:error] [pid 12453:tid 12462] [client 20.215.66.172:56297] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adZFhhjtW7S6XsLPvrQY3AAAAIc"]
[Wed Apr 08 20:09:42.761048 2026] [:error] [pid 12453:tid 12455] [client 20.215.66.172:44913] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adZFhhjtW7S6XsLPvrQY4AAAAIA"]
[Wed Apr 08 20:09:43.394470 2026] [:error] [pid 7189:tid 7192] [client 20.215.66.172:63597] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adZFhxaBqhBSu0L37lrFhAAAAcE"]
[Wed Apr 08 20:09:43.996505 2026] [:error] [pid 7189:tid 7193] [client 20.215.66.172:49017] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZFhxaBqhBSu0L37lrFhgAAAcI"]
[Wed Apr 08 20:09:44.593826 2026] [:error] [pid 7189:tid 7211] [client 20.215.66.172:59700] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZFiBaBqhBSu0L37lrFhwAAAdQ"]
[Wed Apr 08 20:09:45.185369 2026] [:error] [pid 12490:tid 12504] [client 20.215.66.172:44895] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZFiW1Fea4F4fbumr339QAAAMw"]
[Wed Apr 08 20:09:46.012575 2026] [:error] [pid 7047:tid 7073] [client 20.215.66.172:38541] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZFiuNh3oGO3pKiCzz-WwAAAZg"]
[Wed Apr 08 20:09:46.556137 2026] [:error] [pid 64066:tid 64091] [client 20.215.66.172:63572] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adZFilR3WucJgr2vZGYzGgAAAVY"]
[Wed Apr 08 20:09:47.227158 2026] [:error] [pid 64066:tid 64092] [client 20.215.66.172:52793] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adZFi1R3WucJgr2vZGYzHQAAAVc"]
[Wed Apr 08 20:09:47.953145 2026] [:error] [pid 7047:tid 7072] [client 20.215.66.172:63568] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adZFi-Nh3oGO3pKiCzz-YwAAAZc"]
[Wed Apr 08 20:09:48.675764 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:59534] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adZFjONh3oGO3pKiCzz-awAAAZI"]
[Wed Apr 08 20:09:49.257244 2026] [:error] [pid 7047:tid 7065] [client 20.215.66.172:56268] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adZFjeNh3oGO3pKiCzz-cQAAAZA"]
[Wed Apr 08 20:09:49.991493 2026] [:error] [pid 7047:tid 7069] [client 20.215.66.172:59542] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adZFjeNh3oGO3pKiCzz-dAAAAZQ"]
[Wed Apr 08 20:09:50.571925 2026] [:error] [pid 12453:tid 12462] [client 20.215.66.172:59533] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adZFjhjtW7S6XsLPvrQY6QAAAIc"]
[Wed Apr 08 20:09:51.511359 2026] [:error] [pid 7047:tid 7066] [client 20.215.66.172:44868] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adZFj-Nh3oGO3pKiCzz-gAAAAZE"]
[Wed Apr 08 20:09:52.133372 2026] [:error] [pid 7047:tid 7053] [client 20.215.66.172:63566] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adZFkONh3oGO3pKiCzz-hgAAAYQ"]
[Wed Apr 08 20:09:52.709497 2026] [:error] [pid 12453:tid 12469] [client 20.215.66.172:56274] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adZFkBjtW7S6XsLPvrQY7QAAAI4"]
[Wed Apr 08 20:09:53.290219 2026] [:error] [pid 12490:tid 12513] [client 20.215.66.172:52748] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adZFkW1Fea4F4fbumr33-QAAANU"]
[Wed Apr 08 20:09:53.916184 2026] [:error] [pid 7189:tid 7192] [client 20.215.66.172:49325] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adZFkRaBqhBSu0L37lrFlAAAAcE"]
[Wed Apr 08 20:09:54.520633 2026] [:error] [pid 12386:tid 12425] [client 20.215.66.172:38529] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adZFkhLhhLtqHi2gK7US-wAAAQk"]
[Wed Apr 08 20:09:55.277964 2026] [:error] [pid 7189:tid 7195] [client 20.215.66.172:56258] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adZFkxaBqhBSu0L37lrFmAAAAcQ"]
[Wed Apr 08 20:09:55.809127 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:63346] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adZFkxjtW7S6XsLPvrQY8wAAAJA"]
[Wed Apr 08 20:09:56.826408 2026] [:error] [pid 12490:tid 12496] [client 20.215.66.172:52827] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adZFlG1Fea4F4fbumr33_AAAAMQ"]
[Wed Apr 08 20:09:57.512152 2026] [:error] [pid 12453:tid 12464] [client 20.215.66.172:52822] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adZFlRjtW7S6XsLPvrQY9wAAAIk"]
[Wed Apr 08 20:09:58.120639 2026] [:error] [pid 12453:tid 12479] [client 20.215.66.172:59699] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adZFlhjtW7S6XsLPvrQY-wAAAJg"]
[Wed Apr 08 20:09:58.737100 2026] [:error] [pid 35642:tid 35665] [client 20.215.66.172:63576] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adZFlg-CqryxdEs5DN9TogAAAFU"]
[Wed Apr 08 20:09:59.362505 2026] [:error] [pid 12453:tid 12472] [client 20.215.66.172:49285] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adZFlxjtW7S6XsLPvrQY_wAAAJE"]
[Wed Apr 08 20:10:00.151999 2026] [:error] [pid 7189:tid 7214] [client 20.215.66.172:48971] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adZFmBaBqhBSu0L37lrFpAAAAdc"]
[Wed Apr 08 20:10:00.774764 2026] [:error] [pid 12490:tid 12502] [client 20.215.66.172:37581] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adZFmG1Fea4F4fbumr33_gAAAMo"]
[Wed Apr 08 20:10:01.657961 2026] [:error] [pid 12385:tid 12391] [client 20.215.66.172:56055] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adZFmSAjtvRQEkLosq2ZbAAAAAI"]
[Wed Apr 08 20:10:02.354514 2026] [:error] [pid 7047:tid 7052] [client 20.215.66.172:59567] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adZFmuNh3oGO3pKiCzz-mgAAAYM"]
[Wed Apr 08 20:10:03.077095 2026] [:error] [pid 7047:tid 7058] [client 20.215.66.172:39991] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adZFm-Nh3oGO3pKiCzz-nQAAAYk"]
[Wed Apr 08 20:10:03.697149 2026] [:error] [pid 12385:tid 12411] [client 20.215.66.172:49330] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adZFmyAjtvRQEkLosq2ZbwAAABY"]
[Wed Apr 08 20:10:04.293801 2026] [:error] [pid 35642:tid 35644] [client 20.215.66.172:52808] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adZFnA-CqryxdEs5DN9TowAAAEA"]
[Wed Apr 08 20:10:04.833875 2026] [:error] [pid 7047:tid 7060] [client 20.215.66.172:52857] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adZFnONh3oGO3pKiCzz-ogAAAYs"]
[Wed Apr 08 20:10:05.420722 2026] [:error] [pid 12386:tid 12435] [client 20.215.66.172:49014] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adZFnRLhhLtqHi2gK7UTAQAAARM"]
[Wed Apr 08 20:10:05.981497 2026] [:error] [pid 12490:tid 12497] [client 20.215.66.172:52825] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adZFnW1Fea4F4fbumr34AwAAAMU"]
[Wed Apr 08 20:10:06.580625 2026] [:error] [pid 7189:tid 7198] [client 20.215.66.172:45237] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adZFnhaBqhBSu0L37lrFrwAAAcc"]
[Wed Apr 08 20:10:07.122703 2026] [:error] [pid 7047:tid 7054] [client 20.215.66.172:56018] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adZFn-Nh3oGO3pKiCzz-pwAAAYU"]
[Wed Apr 08 20:10:07.701897 2026] [:error] [pid 7047:tid 7070] [client 20.215.66.172:52815] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adZFn-Nh3oGO3pKiCzz-qwAAAZU"]
[Wed Apr 08 20:10:08.245465 2026] [:error] [pid 7047:tid 7065] [client 20.215.66.172:63298] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adZFoONh3oGO3pKiCzz-sAAAAZA"]
[Wed Apr 08 20:10:08.812414 2026] [:error] [pid 35642:tid 35658] [client 20.215.66.172:56310] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adZFoA-CqryxdEs5DN9TpAAAAE4"]
[Wed Apr 08 20:10:09.368280 2026] [:error] [pid 12490:tid 12507] [client 20.215.66.172:59680] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adZFoW1Fea4F4fbumr34BwAAAM8"]
[Wed Apr 08 20:10:09.896912 2026] [:error] [pid 12453:tid 12479] [client 20.215.66.172:52802] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adZFoRjtW7S6XsLPvrQZBwAAAJg"]
[Wed Apr 08 20:10:10.424086 2026] [:error] [pid 12453:tid 12467] [client 20.215.66.172:49336] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adZFohjtW7S6XsLPvrQZCgAAAIw"]
[Wed Apr 08 20:10:10.968369 2026] [:error] [pid 64066:tid 64077] [client 20.215.66.172:59539] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adZFolR3WucJgr2vZGYzLwAAAUg"]
[Wed Apr 08 20:10:11.477165 2026] [:error] [pid 7189:tid 7192] [client 20.215.66.172:63309] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adZFoxaBqhBSu0L37lrFswAAAcE"]
[Wed Apr 08 20:10:12.018801 2026] [:error] [pid 64066:tid 64075] [client 20.215.66.172:39943] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adZFpFR3WucJgr2vZGYzMgAAAUY"]
[Wed Apr 08 20:10:12.546503 2026] [:error] [pid 64066:tid 64086] [client 20.215.66.172:56012] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adZFpFR3WucJgr2vZGYzMwAAAVE"]
[Wed Apr 08 20:10:13.073330 2026] [:error] [pid 7189:tid 7199] [client 20.215.66.172:56034] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adZFpRaBqhBSu0L37lrFuAAAAcg"]
[Wed Apr 08 20:10:13.622427 2026] [:error] [pid 64066:tid 64074] [client 20.215.66.172:56261] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adZFpVR3WucJgr2vZGYzNwAAAUU"]
[Wed Apr 08 20:10:14.153193 2026] [:error] [pid 12453:tid 12459] [client 20.215.66.172:63313] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adZFphjtW7S6XsLPvrQZDQAAAIQ"]
[Wed Apr 08 20:10:14.706536 2026] [:error] [pid 7047:tid 7065] [client 20.215.66.172:38562] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adZFpuNh3oGO3pKiCzz-wQAAAZA"]
[Wed Apr 08 20:10:15.259393 2026] [:error] [pid 7047:tid 7068] [client 20.215.66.172:49329] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adZFp-Nh3oGO3pKiCzz-yAAAAZM"]
[Wed Apr 08 20:10:15.771163 2026] [:error] [pid 7047:tid 7073] [client 20.215.66.172:59691] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adZFp-Nh3oGO3pKiCzz-zAAAAZg"]
[Wed Apr 08 20:10:16.287330 2026] [:error] [pid 12453:tid 12464] [client 20.215.66.172:59658] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZFqBjtW7S6XsLPvrQZFgAAAIk"]
[Wed Apr 08 20:10:16.839596 2026] [:error] [pid 35642:tid 35648] [client 20.215.66.172:49287] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZFqA-CqryxdEs5DN9TpgAAAEQ"]
[Wed Apr 08 20:10:17.414172 2026] [:error] [pid 12490:tid 12496] [client 20.215.66.172:59575] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZFqW1Fea4F4fbumr34CAAAAMQ"]
[Wed Apr 08 20:10:17.960722 2026] [:error] [pid 7189:tid 7205] [client 20.215.66.172:63323] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adZFqRaBqhBSu0L37lrFuwAAAc4"]
[Wed Apr 08 20:10:18.483400 2026] [:error] [pid 12453:tid 12458] [client 20.215.66.172:49321] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZFqhjtW7S6XsLPvrQZGgAAAIM"]
[Wed Apr 08 20:10:19.017410 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:45223] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZFq-Nh3oGO3pKiCzz-1wAAAZI"]
[Wed Apr 08 20:10:19.559728 2026] [:error] [pid 7189:tid 7202] [client 20.215.66.172:63588] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZFqxaBqhBSu0L37lrFvAAAAcs"]
[Wed Apr 08 20:10:20.094250 2026] [:error] [pid 12453:tid 12475] [client 20.215.66.172:59704] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adZFrBjtW7S6XsLPvrQZHgAAAJQ"]
[Wed Apr 08 20:10:20.831907 2026] [:error] [pid 7047:tid 7071] [client 20.215.66.172:52787] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adZFrONh3oGO3pKiCzz-3wAAAZY"]
[Wed Apr 08 20:10:21.569602 2026] [:error] [pid 7047:tid 7068] [client 20.215.66.172:52785] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adZFreNh3oGO3pKiCzz-4QAAAZM"]
[Wed Apr 08 20:10:22.110690 2026] [:error] [pid 7189:tid 7215] [client 20.215.66.172:52781] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adZFrhaBqhBSu0L37lrFvQAAAdg"]
[Wed Apr 08 20:10:22.726651 2026] [:error] [pid 7189:tid 7212] [client 20.215.66.172:52749] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adZFrhaBqhBSu0L37lrFvgAAAdU"]
[Wed Apr 08 20:10:23.287416 2026] [:error] [pid 35642:tid 35653] [client 20.215.66.172:59552] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adZFrw-CqryxdEs5DN9TqwAAAEk"]
[Wed Apr 08 20:10:23.809979 2026] [:error] [pid 12453:tid 12479] [client 20.215.66.172:59697] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adZFrxjtW7S6XsLPvrQZKQAAAJg"]
[Wed Apr 08 20:10:24.355169 2026] [:error] [pid 12490:tid 12516] [client 20.215.66.172:45218] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adZFsG1Fea4F4fbumr34EgAAANg"]
[Wed Apr 08 20:10:25.040963 2026] [:error] [pid 7189:tid 7191] [client 20.215.66.172:63608] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adZFsRaBqhBSu0L37lrFxQAAAcA"]
[Wed Apr 08 20:10:25.719520 2026] [:error] [pid 7189:tid 7199] [client 20.215.66.172:49324] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adZFsRaBqhBSu0L37lrFyAAAAcg"]
[Wed Apr 08 20:10:26.360287 2026] [:error] [pid 12453:tid 12455] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Apr 08 20:10:26.647549 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Apr 08 20:10:26.953420 2026] [:error] [pid 12453:tid 12473] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Apr 08 20:10:27.469608 2026] [:error] [pid 12453:tid 12456] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Wed Apr 08 20:10:27.985469 2026] [:error] [pid 12453:tid 12457] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Wed Apr 08 20:10:28.245354 2026] [:error] [pid 12453:tid 12460] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Wed Apr 08 20:10:28.503696 2026] [:error] [pid 12453:tid 12472] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Wed Apr 08 20:10:28.761767 2026] [:error] [pid 12453:tid 12478] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Wed Apr 08 20:10:29.019453 2026] [:error] [pid 12453:tid 12461] [client 20.215.66.172:56001] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Wed Apr 08 20:10:29.274546 2026] [:error] [pid 12453:tid 12476] [client 20.215.66.172:56001] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adZFtRjtW7S6XsLPvrQZTQAAAJU"]
[Wed Apr 08 20:10:29.807681 2026] [:error] [pid 12453:tid 12458] [client 20.215.66.172:45247] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adZFtRjtW7S6XsLPvrQZTwAAAIM"]
[Wed Apr 08 20:10:30.447001 2026] [:error] [pid 12490:tid 12497] [client 20.215.66.172:37579] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adZFtm1Fea4F4fbumr34FAAAAMU"]
[Wed Apr 08 20:10:31.012514 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:63602] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adZFtxjtW7S6XsLPvrQZUQAAAJA"]
[Wed Apr 08 20:10:31.716632 2026] [:error] [pid 7189:tid 7207] [client 20.215.66.172:52780] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adZFtxaBqhBSu0L37lrF3AAAAdA"]
[Wed Apr 08 20:10:32.449029 2026] [:error] [pid 12453:tid 12476] [client 20.215.66.172:49326] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adZFuBjtW7S6XsLPvrQZVwAAAJU"]
[Wed Apr 08 20:10:33.130468 2026] [:error] [pid 7189:tid 7191] [client 20.215.66.172:52739] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adZFuRaBqhBSu0L37lrF3gAAAcA"]
[Wed Apr 08 20:10:33.811756 2026] [:error] [pid 12385:tid 12401] [client 20.215.66.172:52752] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adZFuSAjtvRQEkLosq2ZcQAAAAw"]
[Wed Apr 08 20:10:34.487713 2026] [:error] [pid 64066:tid 64069] [client 20.215.66.172:63578] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adZFulR3WucJgr2vZGYzSAAAAUA"]
[Wed Apr 08 20:10:35.181805 2026] [:error] [pid 12490:tid 12504] [client 20.215.66.172:40548] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adZFu21Fea4F4fbumr34FgAAAMw"]
[Wed Apr 08 20:10:35.816707 2026] [:error] [pid 64066:tid 64085] [client 20.215.66.172:63596] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adZFu1R3WucJgr2vZGYzSQAAAVA"]
[Wed Apr 08 20:10:36.413340 2026] [:error] [pid 64066:tid 64075] [client 20.215.66.172:63310] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adZFvFR3WucJgr2vZGYzSgAAAUY"]
[Wed Apr 08 20:10:36.945186 2026] [:error] [pid 35642:tid 35662] [client 20.215.66.172:63328] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adZFvA-CqryxdEs5DN9TwAAAAFI"]
[Wed Apr 08 20:10:37.474848 2026] [:error] [pid 64066:tid 64079] [client 20.215.66.172:59555] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adZFvVR3WucJgr2vZGYzTQAAAUo"]
[Wed Apr 08 20:10:38.115750 2026] [:error] [pid 7047:tid 7070] [client 20.215.66.172:38551] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adZFvuNh3oGO3pKiCzz_EgAAAZU"]
[Wed Apr 08 20:10:38.692287 2026] [:error] [pid 7047:tid 7054] [client 20.215.66.172:62797] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adZFvuNh3oGO3pKiCzz_FAAAAYU"]
[Wed Apr 08 20:10:39.413790 2026] [:error] [pid 12385:tid 12392] [client 20.215.66.172:63301] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adZFvyAjtvRQEkLosq2ZdAAAAAM"]
[Wed Apr 08 20:10:40.120183 2026] [:error] [pid 12490:tid 12510] [client 20.215.66.172:59691] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adZFwG1Fea4F4fbumr34GQAAANI"]
[Wed Apr 08 20:10:40.775840 2026] [:error] [pid 7047:tid 7064] [client 20.215.66.172:56281] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adZFwONh3oGO3pKiCzz_GAAAAY8"]
[Wed Apr 08 20:10:41.542509 2026] [:error] [pid 7047:tid 7056] [client 20.215.66.172:56314] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adZFweNh3oGO3pKiCzz_HQAAAYc"]
[Wed Apr 08 20:10:42.212044 2026] [:error] [pid 12386:tid 12426] [client 20.215.66.172:40552] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adZFwhLhhLtqHi2gK7UTCwAAAQo"]
[Wed Apr 08 20:10:42.757488 2026] [:error] [pid 12490:tid 12506] [client 20.215.66.172:56264] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adZFwm1Fea4F4fbumr34GwAAAM4"]
[Wed Apr 08 20:10:43.462159 2026] [:error] [pid 12386:tid 12430] [client 20.215.66.172:56280] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adZFwxLhhLtqHi2gK7UTDAAAAQ4"]
[Wed Apr 08 20:10:44.031797 2026] [:error] [pid 7189:tid 7194] [client 20.215.66.172:56311] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adZFxBaBqhBSu0L37lrF7QAAAcM"]
[Wed Apr 08 20:10:45.117452 2026] [:error] [pid 64066:tid 64091] [client 20.215.66.172:48976] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFxVR3WucJgr2vZGYzUgAAAVY"]
[Wed Apr 08 20:10:45.834878 2026] [:error] [pid 7047:tid 7068] [client 20.215.66.172:59685] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFxeNh3oGO3pKiCzz_IgAAAZM"]
[Wed Apr 08 20:10:46.574590 2026] [:error] [pid 7047:tid 7052] [client 20.215.66.172:63574] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFxuNh3oGO3pKiCzz_JAAAAYM"]
[Wed Apr 08 20:10:48.023473 2026] [:error] [pid 12453:tid 12466] [client 20.215.66.172:49331] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adZFyBjtW7S6XsLPvrQZagAAAIs"]
[Wed Apr 08 20:10:48.615594 2026] [:error] [pid 7189:tid 7213] [client 20.215.66.172:38534] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adZFyBaBqhBSu0L37lrF8QAAAdY"]
[Wed Apr 08 20:10:49.288255 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:63347] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adZFyeNh3oGO3pKiCzz_LAAAAZI"]
[Wed Apr 08 20:10:50.511977 2026] [:error] [pid 12453:tid 12475] [client 20.215.66.172:63351] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adZFyhjtW7S6XsLPvrQZcAAAAJQ"]
[Wed Apr 08 20:10:51.425587 2026] [:error] [pid 12453:tid 12458] [client 20.215.66.172:59541] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adZFyxjtW7S6XsLPvrQZdwAAAIM"]
[Wed Apr 08 20:10:52.640756 2026] [:error] [pid 12490:tid 12509] [client 20.215.66.172:59662] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZFzG1Fea4F4fbumr34HwAAANE"]
[Wed Apr 08 20:10:53.651119 2026] [:error] [pid 12453:tid 12464] [client 20.215.66.172:59538] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZFzRjtW7S6XsLPvrQZfQAAAIk"]
[Wed Apr 08 20:10:54.641309 2026] [:error] [pid 12453:tid 12461] [client 20.215.66.172:56053] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZFzhjtW7S6XsLPvrQZfgAAAIY"]
[Wed Apr 08 20:10:57.175836 2026] [:error] [pid 64066:tid 64075] [client 20.215.66.172:40538] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adZF0VR3WucJgr2vZGYzYgAAAUY"]
[Wed Apr 08 20:10:59.534099 2026] [:error] [pid 35642:tid 35649] [client 20.215.66.172:37623] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adZF0w-CqryxdEs5DN9T0QAAAEU"]
[Wed Apr 08 20:11:01.122223 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:59668] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adZF1eNh3oGO3pKiCzz_NgAAAZI"]
[Wed Apr 08 20:11:02.723483 2026] [:error] [pid 12490:tid 12505] [client 20.215.66.172:52764] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adZF1m1Fea4F4fbumr34JwAAAM0"]
[Wed Apr 08 20:11:04.501768 2026] [:error] [pid 7189:tid 7204] [client 20.215.66.172:39998] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adZF2BaBqhBSu0L37lrGAgAAAc0"]
[Wed Apr 08 20:11:05.724341 2026] [:error] [pid 7189:tid 7199] [client 20.215.66.172:56040] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adZF2RaBqhBSu0L37lrGBAAAAcg"]
[Wed Apr 08 20:11:08.169012 2026] [:error] [pid 7047:tid 7071] [client 20.215.66.172:48971] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adZF3ONh3oGO3pKiCzz_PwAAAZY"]
[Wed Apr 08 20:11:10.176612 2026] [:error] [pid 12490:tid 12501] [client 20.215.66.172:59679] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adZF3m1Fea4F4fbumr34LQAAAMk"]
[Wed Apr 08 20:11:11.664303 2026] [:error] [pid 12386:tid 12420] [client 20.215.66.172:48984] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adZF3xLhhLtqHi2gK7UTIQAAAQQ"]
[Wed Apr 08 20:11:12.940275 2026] [:error] [pid 12453:tid 12478] [client 20.215.66.172:56298] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adZF4BjtW7S6XsLPvrQZjgAAAJc"]
[Wed Apr 08 20:11:13.702102 2026] [:error] [pid 35642:tid 35651] [client 20.215.66.172:37619] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adZF4Q-CqryxdEs5DN9T1QAAAEc"]
[Wed Apr 08 20:11:14.803018 2026] [:error] [pid 7047:tid 7070] [client 20.215.66.172:56289] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adZF4uNh3oGO3pKiCzz_RAAAAZU"]
[Wed Apr 08 20:11:15.688227 2026] [:error] [pid 35642:tid 35652] [client 20.215.66.172:52843] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adZF4w-CqryxdEs5DN9T1gAAAEg"]
[Wed Apr 08 20:11:18.423285 2026] [:error] [pid 35642:tid 35653] [client 20.215.66.172:49335] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adZF5g-CqryxdEs5DN9T1wAAAEk"]
[Wed Apr 08 20:11:19.402140 2026] [:error] [pid 7047:tid 7058] [client 20.215.66.172:63614] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adZF5-Nh3oGO3pKiCzz_TQAAAYk"]
[Wed Apr 08 20:11:20.505486 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:59545] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adZF6ONh3oGO3pKiCzz_UQAAAZI"]
[Wed Apr 08 20:11:22.158895 2026] [:error] [pid 64066:tid 64081] [client 20.215.66.172:59672] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adZF6lR3WucJgr2vZGYzdAAAAUw"]
[Wed Apr 08 20:11:23.729419 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:56024] [client 20.215.66.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adZF6-Nh3oGO3pKiCzz_XAAAAZI"]
[Wed Apr 08 20:11:24.924048 2026] [:error] [pid 7047:tid 7051] [client 20.215.66.172:52789] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adZF7ONh3oGO3pKiCzz_ZAAAAYI"]
[Wed Apr 08 20:11:26.617282 2026] [:error] [pid 12386:tid 12434] [client 20.215.66.172:56036] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adZF7hLhhLtqHi2gK7UTJgAAARI"]
[Wed Apr 08 20:11:27.876161 2026] [:error] [pid 7189:tid 7204] [client 20.215.66.172:48991] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adZF7xaBqhBSu0L37lrGGgAAAc0"]
[Wed Apr 08 20:11:31.738640 2026] [:error] [pid 12453:tid 12465] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Apr 08 20:11:32.531100 2026] [:error] [pid 12453:tid 12457] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Wed Apr 08 20:11:32.788450 2026] [:error] [pid 12453:tid 12464] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Wed Apr 08 20:11:33.450163 2026] [:error] [pid 12453:tid 12462] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Wed Apr 08 20:11:33.713423 2026] [:error] [pid 12453:tid 12458] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Wed Apr 08 20:11:34.038141 2026] [:error] [pid 12453:tid 12477] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Wed Apr 08 20:11:34.515756 2026] [:error] [pid 12453:tid 12476] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Wed Apr 08 20:11:34.772047 2026] [:error] [pid 12453:tid 12474] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Wed Apr 08 20:11:35.045598 2026] [:error] [pid 12453:tid 12478] [client 20.215.66.172:49308] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Wed Apr 08 20:11:35.350704 2026] [:error] [pid 12453:tid 12460] [client 20.215.66.172:49308] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adZF9xjtW7S6XsLPvrQZrgAAAIU"]
[Wed Apr 08 20:11:38.069635 2026] [:error] [pid 7047:tid 7067] [client 20.215.66.172:63311] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adZF-uNh3oGO3pKiCzz_igAAAZI"]
[Wed Apr 08 20:11:39.428144 2026] [:error] [pid 12490:tid 12509] [client 20.215.66.172:56275] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adZF-21Fea4F4fbumr34SQAAANE"]
[Wed Apr 08 20:11:40.689787 2026] [:error] [pid 7189:tid 7206] [client 20.215.66.172:48995] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adZF_BaBqhBSu0L37lrGJgAAAc8"]
[Wed Apr 08 20:11:47.209287 2026] [:error] [pid 12453:tid 12475] [client 20.215.66.172:28699] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adZGAxjtW7S6XsLPvrQZwQAAAJQ"]
[Wed Apr 08 20:11:48.804335 2026] [:error] [pid 12386:tid 12428] [client 20.215.66.172:56022] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adZGBBLhhLtqHi2gK7UTLgAAAQw"]
[Wed Apr 08 20:11:50.928666 2026] [:error] [pid 12490:tid 12495] [client 20.215.66.172:45222] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adZGBm1Fea4F4fbumr34TgAAAMM"]
[Wed Apr 08 20:11:55.672187 2026] [:error] [pid 12490:tid 12502] [client 20.215.66.172:52744] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adZGC21Fea4F4fbumr34XQAAAMo"]
[Wed Apr 08 20:11:57.907018 2026] [:error] [pid 7189:tid 7214] [client 20.215.66.172:49309] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adZGDRaBqhBSu0L37lrGNgAAAdc"]
[Wed Apr 08 20:12:02.548328 2026] [:error] [pid 12453:tid 12457] [client 20.215.66.172:52768] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adZGEhjtW7S6XsLPvrQZzAAAAII"]
[Wed Apr 08 20:12:04.263067 2026] [:error] [pid 12490:tid 12497] [client 20.215.66.172:63324] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adZGFG1Fea4F4fbumr34agAAAMU"]
[Wed Apr 08 20:12:07.300358 2026] [:error] [pid 7189:tid 7200] [client 20.215.66.172:59531] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adZGFxaBqhBSu0L37lrGRAAAAck"]
[Wed Apr 08 20:12:08.327218 2026] [:error] [pid 35642:tid 35656] [client 20.215.66.172:59537] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adZGGA-CqryxdEs5DN9UEwAAAEw"]
[Wed Apr 08 20:12:09.714605 2026] [:error] [pid 7189:tid 7206] [client 20.215.66.172:59705] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adZGGRaBqhBSu0L37lrGSAAAAc8"]
[Wed Apr 08 20:12:11.097112 2026] [:error] [pid 12453:tid 12464] [client 20.215.66.172:63319] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adZGGxjtW7S6XsLPvrQZ1AAAAIk"]
[Wed Apr 08 20:12:12.369271 2026] [:error] [pid 12453:tid 12460] [client 20.215.66.172:56269] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adZGHBjtW7S6XsLPvrQZ1QAAAIU"]
[Wed Apr 08 20:12:13.441902 2026] [:error] [pid 12453:tid 12455] [client 20.215.66.172:59578] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adZGHRjtW7S6XsLPvrQZ2AAAAIA"]
[Wed Apr 08 20:12:14.113286 2026] [:error] [pid 12490:tid 12516] [client 20.215.66.172:63297] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adZGHm1Fea4F4fbumr34dgAAANg"]
[Wed Apr 08 20:12:15.329478 2026] [:error] [pid 12453:tid 12473] [client 20.215.66.172:63314] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adZGHxjtW7S6XsLPvrQZ5AAAAJI"]
[Wed Apr 08 20:12:16.321164 2026] [:error] [pid 12453:tid 12471] [client 20.215.66.172:56000] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adZGIBjtW7S6XsLPvrQZ6gAAAJA"]
[Wed Apr 08 20:12:17.269024 2026] [:error] [pid 7047:tid 7066] [client 20.215.66.172:45188] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adZGIeNh3oGO3pKiCzz_1wAAAZE"]
[Wed Apr 08 20:12:18.360573 2026] [:error] [pid 7047:tid 7053] [client 20.215.66.172:49300] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adZGIuNh3oGO3pKiCzz_2wAAAYQ"]
[Wed Apr 08 20:12:19.190617 2026] [:error] [pid 12386:tid 12431] [client 20.215.66.172:45206] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adZGIxLhhLtqHi2gK7UTQAAAAQ8"]
[Wed Apr 08 20:12:20.378332 2026] [:error] [pid 35642:tid 35646] [client 20.215.66.172:63353] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adZGJA-CqryxdEs5DN9UHwAAAEI"]
[Wed Apr 08 20:12:21.435703 2026] [:error] [pid 64066:tid 64074] [client 20.215.66.172:59651] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adZGJVR3WucJgr2vZGYzrQAAAUU"]
[Wed Apr 08 20:12:22.550888 2026] [:error] [pid 12385:tid 12409] [client 20.215.66.172:59655] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adZGJiAjtvRQEkLosq2ZswAAABQ"]
[Wed Apr 08 20:12:23.666473 2026] [:error] [pid 12490:tid 12497] [client 20.215.66.172:39957] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adZGJ21Fea4F4fbumr34fwAAAMU"]
[Wed Apr 08 20:12:24.563518 2026] [:error] [pid 7189:tid 7208] [client 20.215.66.172:52836] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adZGKBaBqhBSu0L37lrG8gAAAdE"]
[Wed Apr 08 20:12:25.791837 2026] [:error] [pid 64066:tid 64077] [client 20.215.66.172:59561] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adZGKVR3WucJgr2vZGYztgAAAUg"]
[Wed Apr 08 20:12:26.764506 2026] [:error] [pid 12490:tid 12492] [client 20.215.66.172:38576] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adZGKm1Fea4F4fbumr34hQAAAMA"]
[Wed Apr 08 20:12:28.189124 2026] [:error] [pid 12453:tid 12469] [client 20.215.66.172:58648] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adZGLBjtW7S6XsLPvrQaAQAAAI4"]
[Wed Apr 08 20:12:29.701973 2026] [:error] [pid 64066:tid 64091] [client 20.215.66.172:52774] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adZGLVR3WucJgr2vZGYzvQAAAVY"]
[Wed Apr 08 20:12:30.854524 2026] [:error] [pid 35642:tid 35645] [client 20.215.66.172:56054] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adZGLg-CqryxdEs5DN9UJQAAAEE"]
[Wed Apr 08 20:12:32.001772 2026] [:error] [pid 7047:tid 7050] [client 20.215.66.172:59566] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adZGMONh3oGO3pKiCzz__gAAAYE"]
[Wed Apr 08 20:12:33.030468 2026] [:error] [pid 64066:tid 64076] [client 20.215.66.172:56308] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adZGMVR3WucJgr2vZGYzwQAAAUc"]
[Wed Apr 08 20:12:33.797559 2026] [:error] [pid 12453:tid 12467] [client 20.215.66.172:52862] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adZGMRjtW7S6XsLPvrQaCgAAAIw"]
[Wed Apr 08 20:12:34.594640 2026] [:error] [pid 64066:tid 64083] [client 20.215.66.172:59694] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adZGMlR3WucJgr2vZGYzxQAAAU4"]
[Wed Apr 08 20:12:35.834606 2026] [:error] [pid 12386:tid 12423] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed Apr 08 20:12:36.223403 2026] [:error] [pid 12386:tid 12420] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Wed Apr 08 20:12:36.495926 2026] [:error] [pid 12386:tid 12418] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Wed Apr 08 20:12:36.756572 2026] [:error] [pid 12386:tid 12433] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Wed Apr 08 20:12:37.157772 2026] [:error] [pid 12386:tid 12426] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Wed Apr 08 20:12:37.415829 2026] [:error] [pid 12386:tid 12438] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Wed Apr 08 20:12:37.676669 2026] [:error] [pid 12386:tid 12431] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Wed Apr 08 20:12:38.090346 2026] [:error] [pid 12386:tid 12425] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Wed Apr 08 20:12:38.348292 2026] [:error] [pid 12386:tid 12432] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Apr 08 20:12:38.670606 2026] [:error] [pid 12386:tid 12435] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Wed Apr 08 20:12:38.986505 2026] [:error] [pid 12386:tid 12439] [client 20.215.66.172:59701] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Apr 08 20:12:39.345917 2026] [:error] [pid 12386:tid 12429] [client 20.215.66.172:59701] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adZGNxLhhLtqHi2gK7UTWgAAAQ0"]
[Wed Apr 08 20:12:40.058268 2026] [:error] [pid 64066:tid 64073] [client 20.215.66.172:49019] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adZGOFR3WucJgr2vZGYzywAAAUQ"]
[Wed Apr 08 20:12:40.940390 2026] [:error] [pid 12453:tid 12463] [client 20.215.66.172:37624] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adZGOBjtW7S6XsLPvrQaEQAAAIg"]
[Wed Apr 08 20:12:42.168396 2026] [:error] [pid 12490:tid 12493] [client 20.215.66.172:52740] [client 20.215.66.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adZGOm1Fea4F4fbumr34nwAAAME"]
[Wed Apr 08 20:51:10.540553 2026] [:error] [pid 7047:tid 7061] [client 20.250.23.224:8235] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Apr 08 20:51:10.863037 2026] [:error] [pid 7047:tid 7058] [client 20.250.23.224:8235] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu2.php
[Wed Apr 08 20:51:11.141761 2026] [:error] [pid 7047:tid 7052] [client 20.250.23.224:8235] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Wed Apr 08 20:51:11.405649 2026] [:error] [pid 7047:tid 7053] [client 20.250.23.224:8235] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Wed Apr 08 20:51:11.668576 2026] [:error] [pid 7047:tid 7067] [client 20.250.23.224:8235] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 08 20:51:11.946126 2026] [:error] [pid 7047:tid 7064] [client 20.250.23.224:8235] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Wed Apr 08 20:51:12.224748 2026] [:error] [pid 7047:tid 7049] [client 20.250.23.224:8235] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Apr 08 20:51:12.499394 2026] [:error] [pid 7047:tid 7071] [client 20.250.23.224:8235] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/124.php"] [unique_id "adZPQONh3oGO3pKiCzwWlgAAAZY"]
[Wed Apr 08 20:51:14.668653 2026] [:error] [pid 12490:tid 12497] [client 20.250.23.224:55571] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/124.php"] [unique_id "adZPQm1Fea4F4fbumr0AvwAAAMU"]
[Wed Apr 08 20:52:47.270011 2026] [:error] [pid 12453:tid 12469] [client 20.250.23.224:55517] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "adZPnxjtW7S6XsLPvrQrqQAAAI4"]
[Wed Apr 08 20:52:48.865004 2026] [:error] [pid 35642:tid 35644] [client 20.250.23.224:42351] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geck.php"] [unique_id "adZPoA-CqryxdEs5DN9atwAAAEA"]
[Wed Apr 08 20:53:02.411734 2026] [:error] [pid 64066:tid 64081] [client 20.250.23.224:51859] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "adZPrlR3WucJgr2vZGY-owAAAUw"]
[Wed Apr 08 20:53:05.185444 2026] [:error] [pid 7047:tid 7053] [client 20.250.23.224:46413] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "adZPseNh3oGO3pKiCzwX1wAAAYQ"]
[Wed Apr 08 20:53:06.667027 2026] [:error] [pid 7047:tid 7064] [client 20.250.23.224:8461] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "adZPsuNh3oGO3pKiCzwX6AAAAY8"]
[Wed Apr 08 20:53:08.286537 2026] [:error] [pid 12453:tid 12461] [client 20.250.23.224:56754] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shout.php"] [unique_id "adZPtBjtW7S6XsLPvrQr0gAAAIY"]
[Wed Apr 08 20:55:11.655601 2026] [:error] [pid 7047:tid 7062] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Wed Apr 08 20:55:12.090208 2026] [:error] [pid 7047:tid 7054] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Wed Apr 08 20:55:12.383660 2026] [:error] [pid 7047:tid 7066] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mt.php
[Wed Apr 08 20:55:12.654679 2026] [:error] [pid 7047:tid 7049] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Wed Apr 08 20:55:12.926364 2026] [:error] [pid 7047:tid 7073] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Wed Apr 08 20:55:13.193394 2026] [:error] [pid 7047:tid 7060] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Wed Apr 08 20:55:13.463660 2026] [:error] [pid 7047:tid 7056] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Apr 08 20:55:13.737312 2026] [:error] [pid 7047:tid 7054] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Apr 08 20:55:14.276817 2026] [:error] [pid 7047:tid 7063] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Wed Apr 08 20:55:15.292553 2026] [:error] [pid 7047:tid 7060] [client 20.250.23.224:34010] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Wed Apr 08 20:55:15.625702 2026] [:error] [pid 7047:tid 7065] [client 20.250.23.224:34010] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "adZQM-Nh3oGO3pKiCzwZaQAAAZA"]
[Wed Apr 08 20:55:18.579171 2026] [:error] [pid 12453:tid 12457] [client 20.250.23.224:51451] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "adZQNhjtW7S6XsLPvrQsyQAAAII"]
[Wed Apr 08 20:55:25.088703 2026] [:error] [pid 7047:tid 7059] [client 20.250.23.224:49376] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "adZQPeNh3oGO3pKiCzwZngAAAYo"]
[Wed Apr 08 20:55:28.506113 2026] [:error] [pid 7047:tid 7064] [client 20.250.23.224:59378] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "adZQQONh3oGO3pKiCzwZqAAAAY8"]
[Wed Apr 08 20:55:40.081178 2026] [:error] [pid 7047:tid 7071] [client 20.250.23.224:35257] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adZQTONh3oGO3pKiCzwZ5wAAAZY"]
[Wed Apr 08 20:55:48.100107 2026] [:error] [pid 7047:tid 7066] [client 20.250.23.224:43023] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "adZQVONh3oGO3pKiCzwaDgAAAZE"]
[Wed Apr 08 20:55:50.019194 2026] [:error] [pid 7047:tid 7056] [client 20.250.23.224:45213] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "adZQVuNh3oGO3pKiCzwaGQAAAYc"]
[Wed Apr 08 20:56:41.355999 2026] [:error] [pid 12453:tid 12457] [client 20.250.23.224:46912] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Wed Apr 08 20:56:41.623546 2026] [:error] [pid 12453:tid 12461] [client 20.250.23.224:46912] File does not exist: /usr/local/apache/htdocs/suspended-page/qing.php
[Wed Apr 08 20:56:41.891297 2026] [:error] [pid 12453:tid 12456] [client 20.250.23.224:46912] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "adZQiRjtW7S6XsLPvrQt2QAAAIE"]
[Wed Apr 08 20:56:45.335866 2026] [:error] [pid 12386:tid 12439] [client 20.250.23.224:44220] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "adZQjRLhhLtqHi2gK7UZ5QAAARc"]
[Wed Apr 08 20:56:57.783314 2026] [:error] [pid 7047:tid 7068] [client 20.250.23.224:56648] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "adZQmeNh3oGO3pKiCzwaygAAAZM"]
[Wed Apr 08 20:57:02.016408 2026] [:error] [pid 12385:tid 12413] [client 20.250.23.224:53818] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mms.php"] [unique_id "adZQniAjtvRQEkLosq2fNQAAABg"]
[Wed Apr 08 20:57:05.467620 2026] [:error] [pid 64066:tid 64089] [client 20.250.23.224:63069] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mms.php"] [unique_id "adZQoVR3WucJgr2vZGY_mgAAAVQ"]
[Wed Apr 08 20:57:10.275398 2026] [:error] [pid 7047:tid 7066] [client 20.250.23.224:58992] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mms.php"] [unique_id "adZQpuNh3oGO3pKiCzwa5wAAAZE"]
[Wed Apr 08 20:57:12.360431 2026] [:error] [pid 7047:tid 7061] [client 20.250.23.224:55675] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mms.php"] [unique_id "adZQqONh3oGO3pKiCzwa7QAAAYw"]
[Wed Apr 08 20:57:15.989189 2026] [:error] [pid 35642:tid 35651] [client 20.250.23.224:50400] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "adZQqw-CqryxdEs5DN9bkQAAAEc"]
[Wed Apr 08 20:57:17.223966 2026] [:error] [pid 12386:tid 12436] [client 20.250.23.224:40596] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "adZQrRLhhLtqHi2gK7UaEQAAARQ"]
[Wed Apr 08 20:57:21.007571 2026] [:error] [pid 12453:tid 12475] [client 20.250.23.224:53258] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "adZQsRjtW7S6XsLPvrQuHgAAAJQ"]
[Wed Apr 08 20:57:34.171602 2026] [:error] [pid 64066:tid 64070] [client 20.250.23.224:9085] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "adZQvlR3WucJgr2vZGY_vQAAAUE"]
[Wed Apr 08 20:57:37.697015 2026] [:error] [pid 12453:tid 12469] [client 20.250.23.224:56727] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "adZQwRjtW7S6XsLPvrQuQAAAAI4"]
[Wed Apr 08 20:58:12.363647 2026] [:error] [pid 7189:tid 7202] [client 20.250.23.224:34607] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "adZQ5BaBqhBSu0L37lrVmAAAAcs"]
[Wed Apr 08 20:58:15.611857 2026] [:error] [pid 12490:tid 12500] [client 20.250.23.224:55045] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "adZQ521Fea4F4fbumr0CRAAAAMg"]
[Wed Apr 08 20:58:22.291181 2026] [:error] [pid 12453:tid 12475] [client 20.250.23.224:39352] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "adZQ7hjtW7S6XsLPvrQujwAAAJQ"]
[Wed Apr 08 20:58:26.320577 2026] [:error] [pid 7047:tid 7049] [client 20.250.23.224:39323] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "adZQ8uNh3oGO3pKiCzwbeQAAAYA"]
[Wed Apr 08 20:58:34.629648 2026] [:error] [pid 7047:tid 7063] [client 20.250.23.224:48544] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "adZQ-uNh3oGO3pKiCzwbkQAAAY4"]
[Wed Apr 08 20:58:50.249664 2026] [:error] [pid 12453:tid 12474] [client 20.250.23.224:34083] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adZRChjtW7S6XsLPvrQuvQAAAJM"]
[Wed Apr 08 20:58:53.447713 2026] [:error] [pid 7189:tid 7200] [client 20.250.23.224:55482] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adZRDRaBqhBSu0L37lrVwgAAAck"]
[Wed Apr 08 20:59:08.899933 2026] [:error] [pid 35642:tid 35656] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Apr 08 20:59:09.224756 2026] [:error] [pid 35642:tid 35649] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Apr 08 20:59:09.489075 2026] [:error] [pid 35642:tid 35658] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php
[Wed Apr 08 20:59:10.104866 2026] [:error] [pid 35642:tid 35660] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Wed Apr 08 20:59:10.372218 2026] [:error] [pid 35642:tid 35659] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Wed Apr 08 20:59:10.637567 2026] [:error] [pid 35642:tid 35651] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/02.php
[Wed Apr 08 20:59:10.965336 2026] [:error] [pid 35642:tid 35666] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Wed Apr 08 20:59:11.257733 2026] [:error] [pid 35642:tid 35661] [client 20.250.23.224:33573] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Wed Apr 08 20:59:11.522024 2026] [:error] [pid 35642:tid 35652] [client 20.250.23.224:33573] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13k.php"] [unique_id "adZRHw-CqryxdEs5DN9cCAAAAEg"]
[Wed Apr 08 20:59:14.597924 2026] [:error] [pid 7047:tid 7072] [client 20.250.23.224:50869] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13k.php"] [unique_id "adZRIuNh3oGO3pKiCzwb3QAAAZc"]
[Wed Apr 08 20:59:20.322217 2026] [:error] [pid 12490:tid 12507] [client 20.250.23.224:51341] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13k.php"] [unique_id "adZRKG1Fea4F4fbumr0CbwAAAM8"]
[Wed Apr 08 20:59:22.051308 2026] [:error] [pid 12385:tid 12409] [client 20.250.23.224:44792] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13k.php"] [unique_id "adZRKiAjtvRQEkLosq2fmgAAABQ"]
[Wed Apr 08 20:59:47.169947 2026] [:error] [pid 7047:tid 7068] [client 20.250.23.224:60270] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "adZRQ-Nh3oGO3pKiCzwcVwAAAZM"]
[Wed Apr 08 20:59:48.569191 2026] [:error] [pid 7047:tid 7058] [client 20.250.23.224:8470] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypass.php"] [unique_id "adZRRONh3oGO3pKiCzwcYQAAAYk"]
[Wed Apr 08 21:00:21.832581 2026] [:error] [pid 12453:tid 12478] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Wed Apr 08 21:00:22.106022 2026] [:error] [pid 12453:tid 12464] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Wed Apr 08 21:00:22.370375 2026] [:error] [pid 12453:tid 12460] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/cf.php
[Wed Apr 08 21:00:22.651698 2026] [:error] [pid 12453:tid 12473] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/456.php
[Wed Apr 08 21:00:23.164111 2026] [:error] [pid 12453:tid 12458] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Wed Apr 08 21:00:23.425634 2026] [:error] [pid 12453:tid 12456] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/2x.php
[Wed Apr 08 21:00:23.887927 2026] [:error] [pid 12453:tid 12462] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 08 21:00:24.173041 2026] [:error] [pid 12453:tid 12471] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Apr 08 21:00:24.473154 2026] [:error] [pid 12453:tid 12476] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Wed Apr 08 21:00:24.739522 2026] [:error] [pid 12453:tid 12475] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/file32.php
[Wed Apr 08 21:00:25.467878 2026] [:error] [pid 12453:tid 12459] [client 20.250.23.224:61389] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed Apr 08 21:00:25.733916 2026] [:error] [pid 12453:tid 12463] [client 20.250.23.224:61389] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "adZRaRjtW7S6XsLPvrQvnwAAAIg"]
[Wed Apr 08 21:00:46.824761 2026] [:error] [pid 7047:tid 7069] [client 20.250.23.224:52855] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adZRfuNh3oGO3pKiCzwdMwAAAZQ"]
[Wed Apr 08 21:00:52.942620 2026] [:error] [pid 7047:tid 7069] [client 20.250.23.224:61550] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adZRhONh3oGO3pKiCzwdaQAAAZQ"]
[Wed Apr 08 21:01:05.333777 2026] [:error] [pid 12386:tid 12436] [client 20.250.23.224:51452] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adZRkRLhhLtqHi2gK7UahwAAARQ"]
[Wed Apr 08 21:01:08.312876 2026] [:error] [pid 12490:tid 12498] [client 20.250.23.224:39979] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adZRlG1Fea4F4fbumr0CwQAAAMY"]
[Wed Apr 08 21:01:11.396494 2026] [:error] [pid 64066:tid 64086] [client 20.250.23.224:43015] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adZRl1R3WucJgr2vZGZAsQAAAVE"]
[Wed Apr 08 21:01:18.120144 2026] [:error] [pid 7047:tid 7050] [client 20.250.23.224:54686] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ll.php"] [unique_id "adZRnuNh3oGO3pKiCzwdygAAAYE"]
[Wed Apr 08 21:01:22.027329 2026] [:error] [pid 7047:tid 7065] [client 20.250.23.224:53366] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ll.php"] [unique_id "adZRouNh3oGO3pKiCzwdzwAAAZA"]
[Wed Apr 08 21:01:23.774582 2026] [:error] [pid 12385:tid 12398] [client 20.250.23.224:33049] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ll.php"] [unique_id "adZRoyAjtvRQEkLosq2fwgAAAAk"]
[Wed Apr 08 21:01:26.552412 2026] [:error] [pid 12453:tid 12469] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/ll.php
[Wed Apr 08 21:01:27.403347 2026] [:error] [pid 12453:tid 12462] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Apr 08 21:01:28.614079 2026] [:error] [pid 12453:tid 12462] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Apr 08 21:01:28.879179 2026] [:error] [pid 12453:tid 12477] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Wed Apr 08 21:01:29.333672 2026] [:error] [pid 12453:tid 12465] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/asus.php
[Wed Apr 08 21:01:29.597095 2026] [:error] [pid 12453:tid 12460] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 08 21:01:29.861150 2026] [:error] [pid 12453:tid 12458] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Apr 08 21:01:30.126846 2026] [:error] [pid 12453:tid 12479] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Wed Apr 08 21:01:30.389302 2026] [:error] [pid 12453:tid 12467] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Wed Apr 08 21:01:30.654776 2026] [:error] [pid 12453:tid 12459] [client 20.250.23.224:45186] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Apr 08 21:01:30.917280 2026] [:error] [pid 12453:tid 12470] [client 20.250.23.224:45186] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adZRqhjtW7S6XsLPvrQwRQAAAI8"]
[Wed Apr 08 21:01:38.004397 2026] [:error] [pid 7047:tid 7073] [client 20.250.23.224:38882] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adZRsuNh3oGO3pKiCzwd9wAAAZg"]
[Wed Apr 08 21:01:42.099980 2026] [:error] [pid 12490:tid 12502] [client 20.250.23.224:57063] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adZRtm1Fea4F4fbumr0C-wAAAMo"]
[Wed Apr 08 21:01:43.698129 2026] [:error] [pid 12453:tid 12458] [client 20.250.23.224:46963] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adZRtxjtW7S6XsLPvrQweAAAAIM"]
[Wed Apr 08 21:01:45.734821 2026] [:error] [pid 64066:tid 64075] [client 20.250.23.224:55619] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/html.php"] [unique_id "adZRuVR3WucJgr2vZGZA7wAAAUY"]
[Wed Apr 08 21:01:47.547750 2026] [:error] [pid 7047:tid 7063] [client 20.250.23.224:50404] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/html.php"] [unique_id "adZRu-Nh3oGO3pKiCzweEgAAAY4"]
[Wed Apr 08 21:01:51.313524 2026] [:error] [pid 7189:tid 7207] [client 20.250.23.224:48061] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/html.php"] [unique_id "adZRvxaBqhBSu0L37lrWmAAAAdA"]
[Wed Apr 08 21:01:54.404065 2026] [:error] [pid 12385:tid 12411] [client 20.250.23.224:39419] [client 20.250.23.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/html.php"] [unique_id "adZRwiAjtvRQEkLosq2f0AAAABY"]
[Wed Apr 08 21:31:45.638905 2026] [:error] [pid 64066:tid 64082] [client 43.135.130.202:55362] [client 43.135.130.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adZYwVR3WucJgr2vZGZIuwAAAU0"]
[Wed Apr 08 21:39:32.242376 2026] [:error] [pid 12490:tid 12496] [client 43.165.70.220:52434] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adZalG1Fea4F4fbumr0NvQAAAMQ"]
[Thu Apr 09 01:20:57.547679 2026] [:error] [pid 22056:tid 22078] [client 192.144.148.122:33120] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adaOeWQ3CidOGkmVXZgoOQAAANQ"]
[Thu Apr 09 02:52:07.555146 2026] [:error] [pid 40460:tid 40469] [client 158.158.121.169:10192] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 09 02:53:03.645833 2026] [:error] [pid 40053:tid 40066] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/aj.php
[Thu Apr 09 02:53:04.518323 2026] [:error] [pid 40053:tid 40075] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Thu Apr 09 02:53:04.783148 2026] [:error] [pid 40053:tid 40063] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Thu Apr 09 02:53:05.036093 2026] [:error] [pid 40053:tid 40068] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mails.php
[Thu Apr 09 02:53:05.289629 2026] [:error] [pid 40053:tid 40060] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Thu Apr 09 02:53:05.556743 2026] [:error] [pid 40053:tid 40058] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Thu Apr 09 02:53:05.916276 2026] [:error] [pid 40053:tid 40062] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/NdANa5.php
[Thu Apr 09 02:53:06.169382 2026] [:error] [pid 40053:tid 40059] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Thu Apr 09 02:53:06.422439 2026] [:error] [pid 40053:tid 40078] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/karma_296b.php
[Thu Apr 09 02:53:06.716944 2026] [:error] [pid 40053:tid 40070] [client 94.245.109.106:42426] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-718.php
[Thu Apr 09 02:53:06.987558 2026] [:error] [pid 40053:tid 40080] [client 94.245.109.106:42426] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "adakEtdyKTqfO6aiQ6Un8gAAABY"]
[Thu Apr 09 02:53:11.019248 2026] [:error] [pid 40460:tid 40463] [client 94.245.109.106:25038] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "adakF4w-4-9CKD2kKMZUPwAAAEA"]
[Thu Apr 09 02:53:16.556041 2026] [:error] [pid 40055:tid 40153] [client 94.245.109.106:22783] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "adakHH_5SjAJycOw5k_j2AAAAJc"]
[Thu Apr 09 02:53:22.176852 2026] [:error] [pid 40460:tid 40471] [client 94.245.109.106:51562] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "adakIow-4-9CKD2kKMZUawAAAEg"]
[Thu Apr 09 02:53:28.747884 2026] [:error] [pid 40460:tid 40477] [client 94.245.109.106:52057] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aq.php"] [unique_id "adakKIw-4-9CKD2kKMZUiAAAAE4"]
[Thu Apr 09 02:53:34.251649 2026] [:error] [pid 40055:tid 40138] [client 94.245.109.106:20655] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aq.php"] [unique_id "adakLn_5SjAJycOw5k_j8QAAAIg"]
[Thu Apr 09 02:53:38.369080 2026] [:error] [pid 40055:tid 40133] [client 94.245.109.106:43803] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "adakMn_5SjAJycOw5k_j-gAAAIM"]
[Thu Apr 09 02:53:48.611153 2026] [:error] [pid 22056:tid 22066] [client 94.245.109.106:51825] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "adakPGQ3CidOGkmVXZhtWQAAAMg"]
[Thu Apr 09 02:53:52.400391 2026] [:error] [pid 40460:tid 40486] [client 94.245.109.106:23936] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "adakQIw-4-9CKD2kKMZU0gAAAFc"]
[Thu Apr 09 02:53:56.157030 2026] [:error] [pid 40055:tid 40139] [client 94.245.109.106:29724] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adakRH_5SjAJycOw5k_kEQAAAIk"]
[Thu Apr 09 02:54:01.496075 2026] [:error] [pid 40053:tid 40061] [client 94.245.109.106:42890] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adakSddyKTqfO6aiQ6UoKwAAAAM"]
[Thu Apr 09 02:54:16.612141 2026] [:error] [pid 40460:tid 40470] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/brad.php
[Thu Apr 09 02:54:16.863587 2026] [:error] [pid 40460:tid 40463] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Thu Apr 09 02:54:17.117588 2026] [:error] [pid 40460:tid 40466] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Thu Apr 09 02:54:17.381585 2026] [:error] [pid 40460:tid 40475] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/shellsur.php
[Thu Apr 09 02:54:17.662416 2026] [:error] [pid 40460:tid 40465] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/ksvbdsyi.php
[Thu Apr 09 02:54:17.915380 2026] [:error] [pid 40460:tid 40480] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/bom30txv.php
[Thu Apr 09 02:54:18.171504 2026] [:error] [pid 40460:tid 40469] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/eufajvpq.php
[Thu Apr 09 02:54:18.453010 2026] [:error] [pid 40460:tid 40463] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/isp.php
[Thu Apr 09 02:54:18.724681 2026] [:error] [pid 40460:tid 40479] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/mmk.php
[Thu Apr 09 02:54:18.987746 2026] [:error] [pid 40460:tid 40485] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/tor.php
[Thu Apr 09 02:54:20.576885 2026] [:error] [pid 40460:tid 40485] [client 94.245.109.106:42895] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Thu Apr 09 02:54:20.839923 2026] [:error] [pid 40460:tid 40481] [client 94.245.109.106:42895] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "adakXIw-4-9CKD2kKMZVPgAAAFI"]
[Thu Apr 09 02:54:24.274798 2026] [:error] [pid 40054:tid 40118] [client 94.245.109.106:34569] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "adakYKymwSVk3s67lDecOgAAARM"]
[Thu Apr 09 02:54:29.231500 2026] [:error] [pid 40055:tid 40150] [client 94.245.109.106:30516] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "adakZX_5SjAJycOw5k_kTgAAAJQ"]
[Thu Apr 09 02:54:33.993492 2026] [:error] [pid 22056:tid 22069] [client 94.245.109.106:59517] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "adakaWQ3CidOGkmVXZht8QAAAMs"]
[Thu Apr 09 02:54:41.382150 2026] [:error] [pid 22056:tid 22064] [client 94.245.109.106:51469] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "adakcWQ3CidOGkmVXZhuAgAAAMY"]
[Thu Apr 09 02:54:45.472142 2026] [:error] [pid 40055:tid 40152] [client 94.245.109.106:22208] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "adakdX_5SjAJycOw5k_kcAAAAJY"]
[Thu Apr 09 02:54:49.622839 2026] [:error] [pid 40054:tid 40112] [client 94.245.109.106:43405] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "adakeaymwSVk3s67lDecZQAAAQ0"]
[Thu Apr 09 02:54:56.321836 2026] [:error] [pid 40460:tid 40480] [client 94.245.109.106:39793] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjufaqo.php"] [unique_id "adakgIw-4-9CKD2kKMZVlwAAAFE"]
[Thu Apr 09 02:54:57.241829 2026] [:error] [pid 40460:tid 40477] [client 94.245.109.106:37481] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjufaqo.php"] [unique_id "adakgYw-4-9CKD2kKMZVnAAAAE4"]
[Thu Apr 09 02:55:03.831306 2026] [:error] [pid 22056:tid 22061] [client 94.245.109.106:44049] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjufaqo.php"] [unique_id "adakh2Q3CidOGkmVXZhuLAAAAMM"]
[Thu Apr 09 02:55:07.637555 2026] [:error] [pid 40055:tid 40154] [client 94.245.109.106:44083] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p-4sd6kt.php"] [unique_id "adaki3_5SjAJycOw5k_kiAAAAJg"]
[Thu Apr 09 02:55:10.111124 2026] [:error] [pid 40055:tid 40141] [client 94.245.109.106:34669] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p-4sd6kt.php"] [unique_id "adakjn_5SjAJycOw5k_kjwAAAIs"]
[Thu Apr 09 02:55:16.480751 2026] [:error] [pid 40055:tid 40143] [client 94.245.109.106:39805] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p-4sd6kt.php"] [unique_id "adaklH_5SjAJycOw5k_knAAAAI0"]
[Thu Apr 09 02:55:22.172504 2026] [:error] [pid 40460:tid 40484] [client 94.245.109.106:31271] File does not exist: /usr/local/apache/htdocs/suspended-page/p-4sd6kt.php
[Thu Apr 09 02:55:23.364255 2026] [:error] [pid 40460:tid 40480] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-0fsdhv.php
[Thu Apr 09 02:55:23.616985 2026] [:error] [pid 40460:tid 40466] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/20025Tn.php
[Thu Apr 09 02:55:23.868920 2026] [:error] [pid 40460:tid 40479] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Thu Apr 09 02:55:24.127945 2026] [:error] [pid 40460:tid 40473] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/yawa.php
[Thu Apr 09 02:55:24.380284 2026] [:error] [pid 40460:tid 40472] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Thu Apr 09 02:55:24.635531 2026] [:error] [pid 40460:tid 40482] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Thu Apr 09 02:55:24.905013 2026] [:error] [pid 40460:tid 40478] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/irpyzwaf.php
[Thu Apr 09 02:55:25.158046 2026] [:error] [pid 40460:tid 40464] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/pdkebrby.php
[Thu Apr 09 02:55:25.414934 2026] [:error] [pid 40460:tid 40484] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu Apr 09 02:55:25.674847 2026] [:error] [pid 40460:tid 40483] [client 94.245.109.106:32079] File does not exist: /usr/local/apache/htdocs/suspended-page/xex .php
[Thu Apr 09 02:55:25.934139 2026] [:error] [pid 40460:tid 40474] [client 94.245.109.106:32079] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "adaknYw-4-9CKD2kKMZV1wAAAEs"]
[Thu Apr 09 02:55:30.308554 2026] [:error] [pid 22056:tid 22082] [client 94.245.109.106:32070] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "adakomQ3CidOGkmVXZhuZQAAANg"]
[Thu Apr 09 02:55:33.484201 2026] [:error] [pid 22056:tid 22077] [client 94.245.109.106:42483] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "adakpWQ3CidOGkmVXZhuegAAANM"]
[Thu Apr 09 02:55:38.431577 2026] [:error] [pid 40053:tid 40077] [client 94.245.109.106:4202] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "adakqtdyKTqfO6aiQ6UopwAAABM"]
[Thu Apr 09 02:55:41.749783 2026] [:error] [pid 40460:tid 40477] [client 94.245.109.106:53828] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adakrYw-4-9CKD2kKMZV_QAAAE4"]
[Thu Apr 09 02:55:46.177363 2026] [:error] [pid 22056:tid 22079] [client 94.245.109.106:31253] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adaksmQ3CidOGkmVXZhuygAAANU"]
[Thu Apr 09 02:55:48.913071 2026] [:error] [pid 22056:tid 22065] [client 94.245.109.106:31265] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkxzo.php"] [unique_id "adaktGQ3CidOGkmVXZhu3AAAAMc"]
[Thu Apr 09 02:55:54.492044 2026] [:error] [pid 22056:tid 22080] [client 94.245.109.106:34232] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "adakumQ3CidOGkmVXZhu9QAAANY"]
[Thu Apr 09 02:55:58.011387 2026] [:error] [pid 40053:tid 40058] [client 94.245.109.106:23781] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "adakvtdyKTqfO6aiQ6UoxgAAAAA"]
[Thu Apr 09 02:56:01.211125 2026] [:error] [pid 40055:tid 40145] [client 94.245.109.106:39698] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "adakwX_5SjAJycOw5k_k9wAAAI8"]
[Thu Apr 09 02:56:04.801301 2026] [:error] [pid 22056:tid 22082] [client 94.245.109.106:41989] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iko.php"] [unique_id "adakxGQ3CidOGkmVXZhvJAAAANg"]
[Thu Apr 09 02:56:16.123111 2026] [:error] [pid 40055:tid 40142] [client 94.245.109.106:32758] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/miso.php"] [unique_id "adak0H_5SjAJycOw5k_lBwAAAIw"]
[Thu Apr 09 02:56:20.713783 2026] [:error] [pid 22056:tid 22077] [client 94.245.109.106:30169] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rzki.php"] [unique_id "adak1GQ3CidOGkmVXZhvcgAAANM"]
[Thu Apr 09 02:56:25.809047 2026] [:error] [pid 22056:tid 22081] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/rzki.php
[Thu Apr 09 02:56:26.082033 2026] [:error] [pid 22056:tid 22080] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/sad821.php
[Thu Apr 09 02:56:26.335470 2026] [:error] [pid 22056:tid 22077] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8210.php
[Thu Apr 09 02:56:26.602512 2026] [:error] [pid 22056:tid 22076] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8rd1.php
[Thu Apr 09 02:56:26.875620 2026] [:error] [pid 22056:tid 22062] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/sder5252u.php
[Thu Apr 09 02:56:27.130245 2026] [:error] [pid 22056:tid 22061] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Thu Apr 09 02:56:27.382331 2026] [:error] [pid 22056:tid 22080] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Thu Apr 09 02:56:27.650981 2026] [:error] [pid 22056:tid 22060] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Thu Apr 09 02:56:27.910974 2026] [:error] [pid 22056:tid 22071] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/wwx.php
[Thu Apr 09 02:56:28.163228 2026] [:error] [pid 22056:tid 22069] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/0xD.php
[Thu Apr 09 02:56:28.417145 2026] [:error] [pid 22056:tid 22063] [client 94.245.109.106:28022] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Thu Apr 09 02:56:28.668929 2026] [:error] [pid 22056:tid 22059] [client 94.245.109.106:28022] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "adak3GQ3CidOGkmVXZhvpQAAAME"]
[Thu Apr 09 02:56:31.444976 2026] [:error] [pid 40460:tid 40472] [client 94.245.109.106:36872] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "adak34w-4-9CKD2kKMZWeAAAAEk"]
[Thu Apr 09 02:56:33.787062 2026] [:error] [pid 22056:tid 22070] [client 94.245.109.106:36909] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "adak4WQ3CidOGkmVXZhvrwAAAMw"]
[Thu Apr 09 02:56:54.897544 2026] [:error] [pid 22056:tid 22080] [client 94.245.109.106:20292] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "adak9mQ3CidOGkmVXZhwHQAAANY"]
[Thu Apr 09 02:56:58.821231 2026] [:error] [pid 40053:tid 40071] [client 94.245.109.106:33131] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "adak-tdyKTqfO6aiQ6UpFAAAAA0"]
[Thu Apr 09 02:57:03.239355 2026] [:error] [pid 40054:tid 40103] [client 94.245.109.106:4622] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "adak_6ymwSVk3s67lDedMgAAAQU"]
[Thu Apr 09 02:57:10.650630 2026] [:error] [pid 40460:tid 40473] [client 94.245.109.106:23732] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adalBow-4-9CKD2kKMZW1QAAAEo"]
[Thu Apr 09 02:57:17.191838 2026] [:error] [pid 22056:tid 22064] [client 94.245.109.106:52658] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adalDWQ3CidOGkmVXZhwUAAAAMY"]
[Thu Apr 09 02:57:22.608711 2026] [:error] [pid 40460:tid 40482] [client 94.245.109.106:52874] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "adalEow-4-9CKD2kKMZW9wAAAFM"]
[Thu Apr 09 02:57:26.492931 2026] [:error] [pid 40053:tid 40077] [client 94.245.109.106:24572] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "adalFtdyKTqfO6aiQ6UpUgAAABM"]
[Thu Apr 09 02:57:28.972864 2026] [:error] [pid 40054:tid 40100] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Thu Apr 09 02:57:29.229324 2026] [:error] [pid 40054:tid 40115] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/ckk.php
[Thu Apr 09 02:57:29.482498 2026] [:error] [pid 40054:tid 40119] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Thu Apr 09 02:57:29.734027 2026] [:error] [pid 40054:tid 40113] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 09 02:57:29.993848 2026] [:error] [pid 40054:tid 40112] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Thu Apr 09 02:57:30.246699 2026] [:error] [pid 40054:tid 40099] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Thu Apr 09 02:57:30.499660 2026] [:error] [pid 40054:tid 40123] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 09 02:57:30.752991 2026] [:error] [pid 40054:tid 40104] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Thu Apr 09 02:57:31.006691 2026] [:error] [pid 40054:tid 40105] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Thu Apr 09 02:57:31.263580 2026] [:error] [pid 40054:tid 40107] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-l10n-cache.php
[Thu Apr 09 02:57:31.538896 2026] [:error] [pid 40054:tid 40101] [client 94.245.109.106:36496] File does not exist: /usr/local/apache/htdocs/suspended-page/2ksm17n.php
[Thu Apr 09 02:57:31.798343 2026] [:error] [pid 40054:tid 40100] [client 94.245.109.106:36496] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "adalG6ymwSVk3s67lDedeAAAAQI"]
[Thu Apr 09 02:57:34.714833 2026] [:error] [pid 40460:tid 40472] [client 94.245.109.106:49305] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "adalHow-4-9CKD2kKMZXCAAAAEk"]
[Thu Apr 09 02:57:41.978428 2026] [:error] [pid 22056:tid 22062] [client 94.245.109.106:22739] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "adalJWQ3CidOGkmVXZhw2gAAAMQ"]
[Thu Apr 09 02:57:48.807867 2026] [:error] [pid 40053:tid 40062] [client 94.245.109.106:27509] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "adalLNdyKTqfO6aiQ6UpZwAAAAQ"]
[Thu Apr 09 02:57:51.188339 2026] [:error] [pid 22056:tid 22064] [client 94.245.109.106:47748] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "adalL2Q3CidOGkmVXZhw9wAAAMY"]
[Thu Apr 09 02:57:54.234598 2026] [:error] [pid 22056:tid 22078] [client 94.245.109.106:40523] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "adalMmQ3CidOGkmVXZhxCwAAANQ"]
[Thu Apr 09 02:57:58.657014 2026] [:error] [pid 22056:tid 22070] [client 94.245.109.106:49292] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "adalNmQ3CidOGkmVXZhxGAAAAMw"]
[Thu Apr 09 02:58:01.067747 2026] [:error] [pid 22056:tid 22079] [client 94.245.109.106:27066] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adalOWQ3CidOGkmVXZhxJAAAANU"]
[Thu Apr 09 02:58:07.424830 2026] [:error] [pid 40054:tid 40123] [client 94.245.109.106:35717] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adalP6ymwSVk3s67lDedtgAAARc"]
[Thu Apr 09 02:58:12.248527 2026] [:error] [pid 22056:tid 22069] [client 94.245.109.106:26203] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adalRGQ3CidOGkmVXZhxTQAAAMs"]
[Thu Apr 09 02:58:19.532572 2026] [:error] [pid 40053:tid 40064] [client 94.245.109.106:46072] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7.php"] [unique_id "adalS9dyKTqfO6aiQ6UpkwAAAAY"]
[Thu Apr 09 02:58:32.303559 2026] [:error] [pid 40053:tid 40060] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/x7.php
[Thu Apr 09 02:58:32.570744 2026] [:error] [pid 40053:tid 40073] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Apr 09 02:58:32.844121 2026] [:error] [pid 40053:tid 40082] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Thu Apr 09 02:58:33.096048 2026] [:error] [pid 40053:tid 40069] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Thu Apr 09 02:58:33.361313 2026] [:error] [pid 40053:tid 40078] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/wbbw.php
[Thu Apr 09 02:58:33.645619 2026] [:error] [pid 40053:tid 40062] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sign.php
[Thu Apr 09 02:58:33.906887 2026] [:error] [pid 40053:tid 40074] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Thu Apr 09 02:58:34.414649 2026] [:error] [pid 40053:tid 40061] [client 94.245.109.106:30973] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Apr 09 02:58:35.282907 2026] [:error] [pid 40053:tid 40071] [client 94.245.109.106:30973] [client 94.245.109.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adalW9dyKTqfO6aiQ6UprgAAAA0"]
[Thu Apr 09 02:58:38.502927 2026] [:error] [pid 40054:tid 40122] [client 94.245.109.106:38372] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Thu Apr 09 02:58:38.757000 2026] [:error] [pid 40054:tid 40116] [client 94.245.109.106:38372] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Thu Apr 09 02:58:39.012956 2026] [:error] [pid 40054:tid 40110] [client 94.245.109.106:38372] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adalX6ymwSVk3s67lDeeNAAAAQw"]
[Thu Apr 09 02:58:42.316993 2026] [:error] [pid 40460:tid 40468] [client 94.245.109.106:4467] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adalYow-4-9CKD2kKMZX1QAAAEU"]
[Thu Apr 09 02:58:45.337304 2026] [:error] [pid 40460:tid 40478] [client 94.245.109.106:24504] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adalZYw-4-9CKD2kKMZX4AAAAE8"]
[Thu Apr 09 02:58:52.835321 2026] [:error] [pid 40055:tid 40146] [client 94.245.109.106:33413] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adalbH_5SjAJycOw5k_mRgAAAJA"]
[Thu Apr 09 02:58:55.630807 2026] [:error] [pid 40055:tid 40141] [client 94.245.109.106:49831] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congeree.php"] [unique_id "adalb3_5SjAJycOw5k_mUQAAAIs"]
[Thu Apr 09 02:58:58.597677 2026] [:error] [pid 40460:tid 40484] [client 94.245.109.106:33084] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congeree.php"] [unique_id "adalcow-4-9CKD2kKMZX_QAAAFU"]
[Thu Apr 09 02:59:03.045947 2026] [:error] [pid 40054:tid 40119] [client 94.245.109.106:48419] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congeree.php"] [unique_id "adald6ymwSVk3s67lDeeZQAAARQ"]
[Thu Apr 09 02:59:07.602969 2026] [:error] [pid 40054:tid 40098] [client 94.245.109.106:40136] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/congeree.php"] [unique_id "adale6ymwSVk3s67lDeecQAAAQA"]
[Thu Apr 09 02:59:10.114134 2026] [:error] [pid 40054:tid 40109] [client 94.245.109.106:23955] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "adalfqymwSVk3s67lDeedwAAAQs"]
[Thu Apr 09 02:59:14.478564 2026] [:error] [pid 22056:tid 22064] [client 94.245.109.106:48441] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "adalgmQ3CidOGkmVXZhyCgAAAMY"]
[Thu Apr 09 02:59:18.439528 2026] [:error] [pid 40054:tid 40107] [client 94.245.109.106:24481] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "adalhqymwSVk3s67lDeehgAAAQk"]
[Thu Apr 09 02:59:27.326457 2026] [:error] [pid 22056:tid 22074] [client 94.245.109.106:27091] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/enum.php"] [unique_id "adalj2Q3CidOGkmVXZhyRwAAANA"]
[Thu Apr 09 02:59:32.129906 2026] [:error] [pid 40460:tid 40482] [client 94.245.109.106:46720] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/enum.php"] [unique_id "adallIw-4-9CKD2kKMZYSgAAAFM"]
[Thu Apr 09 02:59:35.728171 2026] [:error] [pid 40053:tid 40067] [client 94.245.109.106:46762] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/enum.php"] [unique_id "adall9dyKTqfO6aiQ6Up7wAAAAk"]
[Thu Apr 09 02:59:42.125315 2026] [:error] [pid 40460:tid 40485] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Thu Apr 09 02:59:42.679114 2026] [:error] [pid 40460:tid 40467] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Thu Apr 09 02:59:42.948379 2026] [:error] [pid 40460:tid 40470] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 09 02:59:43.220244 2026] [:error] [pid 40460:tid 40471] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 09 02:59:43.497839 2026] [:error] [pid 40460:tid 40474] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/v1.php
[Thu Apr 09 02:59:44.041010 2026] [:error] [pid 40460:tid 40482] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 09 02:59:44.434482 2026] [:error] [pid 40460:tid 40484] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 09 02:59:44.688939 2026] [:error] [pid 40460:tid 40466] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Thu Apr 09 02:59:44.962842 2026] [:error] [pid 40460:tid 40487] [client 94.245.109.106:4360] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 09 02:59:45.229958 2026] [:error] [pid 40460:tid 40479] [client 94.245.109.106:4360] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adaloYw-4-9CKD2kKMZYbgAAAFA"]
[Thu Apr 09 02:59:48.875843 2026] [:error] [pid 22056:tid 22067] [client 94.245.109.106:4549] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adalpGQ3CidOGkmVXZhyngAAAMk"]
[Thu Apr 09 02:59:53.311524 2026] [:error] [pid 22056:tid 22064] [client 94.245.109.106:4357] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adalqWQ3CidOGkmVXZhyqwAAAMY"]
[Thu Apr 09 02:59:59.511221 2026] [:error] [pid 40054:tid 40099] [client 94.245.109.106:43451] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "adalr6ymwSVk3s67lDeeyAAAAQE"]
[Thu Apr 09 03:00:02.999331 2026] [:error] [pid 22056:tid 22067] [client 94.245.109.106:4364] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adalsmQ3CidOGkmVXZhyyAAAAMk"]
[Thu Apr 09 03:00:12.212702 2026] [:error] [pid 40053:tid 40059] [client 94.245.109.106:32419] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adalvNdyKTqfO6aiQ6UqJQAAAAE"]
[Thu Apr 09 03:00:19.889768 2026] [:error] [pid 40460:tid 40476] [client 94.245.109.106:22671] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/233.php"] [unique_id "adalw4w-4-9CKD2kKMZYrAAAAE0"]
[Thu Apr 09 03:00:27.421576 2026] [:error] [pid 40460:tid 40472] [client 94.245.109.106:35454] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/233.php"] [unique_id "adaly4w-4-9CKD2kKMZYxgAAAEk"]
[Thu Apr 09 03:00:35.992273 2026] [:error] [pid 22056:tid 22063] [client 94.245.109.106:43417] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ay.php"] [unique_id "adal02Q3CidOGkmVXZhzTgAAAMU"]
[Thu Apr 09 03:00:40.868270 2026] [:error] [pid 40460:tid 40472] [client 94.245.109.106:39249] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ay.php"] [unique_id "adal2Iw-4-9CKD2kKMZY4wAAAEk"]
[Thu Apr 09 03:00:47.049866 2026] [:error] [pid 40053:tid 40074] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Thu Apr 09 03:00:47.307571 2026] [:error] [pid 40053:tid 40075] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Thu Apr 09 03:00:47.570330 2026] [:error] [pid 40053:tid 40081] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Apr 09 03:00:47.824475 2026] [:error] [pid 40053:tid 40067] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/health.php
[Thu Apr 09 03:00:48.080750 2026] [:error] [pid 40053:tid 40077] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 09 03:00:48.341807 2026] [:error] [pid 40053:tid 40066] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Apr 09 03:00:48.594098 2026] [:error] [pid 40053:tid 40065] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/worksec.php
[Thu Apr 09 03:00:48.881387 2026] [:error] [pid 40053:tid 40059] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Thu Apr 09 03:00:49.134930 2026] [:error] [pid 40053:tid 40064] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/unloathness.php
[Thu Apr 09 03:00:49.392456 2026] [:error] [pid 40053:tid 40079] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Thu Apr 09 03:00:49.667784 2026] [:error] [pid 40053:tid 40076] [client 94.245.109.106:53862] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Thu Apr 09 03:00:49.917154 2026] [:error] [pid 40053:tid 40070] [client 94.245.109.106:53862] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/multirole.php"] [unique_id "adal4ddyKTqfO6aiQ6UqQAAAAAw"]
[Thu Apr 09 03:00:53.435517 2026] [:error] [pid 40054:tid 40117] [client 94.245.109.106:32501] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/multirole.php"] [unique_id "adal5aymwSVk3s67lDefMgAAARI"]
[Thu Apr 09 03:01:02.597086 2026] [:error] [pid 40053:tid 40079] [client 94.245.109.106:28367] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/multirole.php"] [unique_id "adal7tdyKTqfO6aiQ6UqUgAAABU"]
[Thu Apr 09 03:01:12.168323 2026] [:error] [pid 40460:tid 40479] [client 94.245.109.106:31315] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "adal-Iw-4-9CKD2kKMZZNwAAAFA"]
[Thu Apr 09 03:01:15.965245 2026] [:error] [pid 22056:tid 22069] [client 94.245.109.106:32456] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "adal-2Q3CidOGkmVXZhz6wAAAMs"]
[Thu Apr 09 03:01:27.251124 2026] [:error] [pid 40460:tid 40464] [client 94.245.109.106:25019] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/about.php"] [unique_id "adamB4w-4-9CKD2kKMZZTwAAAEE"]
[Thu Apr 09 03:01:45.413492 2026] [:error] [pid 40054:tid 40117] [client 94.245.109.106:52289] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "adamGaymwSVk3s67lDefgQAAARI"]
[Thu Apr 09 03:01:52.443080 2026] [:error] [pid 40460:tid 40473] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Thu Apr 09 03:01:52.713713 2026] [:error] [pid 40460:tid 40465] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Thu Apr 09 03:01:52.965512 2026] [:error] [pid 40460:tid 40467] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Apr 09 03:01:54.853541 2026] [:error] [pid 40460:tid 40484] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Thu Apr 09 03:01:55.105874 2026] [:error] [pid 40460:tid 40463] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Thu Apr 09 03:01:55.368797 2026] [:error] [pid 40460:tid 40467] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/ex.php
[Thu Apr 09 03:01:55.635008 2026] [:error] [pid 40460:tid 40471] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Thu Apr 09 03:01:55.889709 2026] [:error] [pid 40460:tid 40480] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Thu Apr 09 03:01:56.142125 2026] [:error] [pid 40460:tid 40464] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 09 03:01:56.395023 2026] [:error] [pid 40460:tid 40468] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Thu Apr 09 03:01:56.659532 2026] [:error] [pid 40460:tid 40484] [client 94.245.109.106:23955] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 09 03:01:56.919022 2026] [:error] [pid 40460:tid 40472] [client 94.245.109.106:23955] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adamJIw-4-9CKD2kKMZZ0AAAAEk"]
[Thu Apr 09 03:02:04.121870 2026] [:error] [pid 40055:tid 40146] [client 94.245.109.106:46471] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adamLH_5SjAJycOw5k_nsQAAAJA"]
[Thu Apr 09 03:02:08.271355 2026] [:error] [pid 22056:tid 22072] [client 94.245.109.106:27461] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adamMGQ3CidOGkmVXZh0rQAAAM4"]
[Thu Apr 09 03:02:11.072372 2026] [:error] [pid 40460:tid 40485] [client 94.245.109.106:34250] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adamM4w-4-9CKD2kKMZaCAAAAFY"]
[Thu Apr 09 03:02:15.107517 2026] [:error] [pid 22056:tid 22081] [client 94.245.109.106:43516] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/144.php"] [unique_id "adamN2Q3CidOGkmVXZh0xgAAANc"]
[Thu Apr 09 03:02:17.298307 2026] [:error] [pid 22056:tid 22063] [client 94.245.109.106:34992] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/144.php"] [unique_id "adamOWQ3CidOGkmVXZh00AAAAMU"]
[Thu Apr 09 03:02:26.398327 2026] [:error] [pid 40460:tid 40464] [client 94.245.109.106:52973] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/144.php"] [unique_id "adamQow-4-9CKD2kKMZaVwAAAEE"]
[Thu Apr 09 03:02:33.379218 2026] [:error] [pid 40054:tid 40124] [client 94.245.109.106:23729] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adamSaymwSVk3s67lDefxgAAARg"]
[Thu Apr 09 03:02:35.842069 2026] [:error] [pid 40055:tid 40153] [client 94.245.109.106:30855] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adamS3_5SjAJycOw5k_n5wAAAJc"]
[Thu Apr 09 03:02:38.352637 2026] [:error] [pid 22056:tid 22068] [client 94.245.109.106:32685] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adamTmQ3CidOGkmVXZh1EAAAAMo"]
[Thu Apr 09 03:02:48.238865 2026] [:error] [pid 40055:tid 40132] [client 94.245.109.106:4661] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "adamWH_5SjAJycOw5k_n-gAAAII"]
[Thu Apr 09 03:02:55.124136 2026] [:error] [pid 40053:tid 40071] [client 94.245.109.106:30974] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "adamX9dyKTqfO6aiQ6UqugAAAA0"]
[Thu Apr 09 03:02:59.816058 2026] [:error] [pid 40053:tid 40076] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu Apr 09 03:03:00.613226 2026] [:error] [pid 40053:tid 40069] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Thu Apr 09 03:03:00.881869 2026] [:error] [pid 40053:tid 40077] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 09 03:03:01.292319 2026] [:error] [pid 40053:tid 40064] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Thu Apr 09 03:03:01.546757 2026] [:error] [pid 40053:tid 40065] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Apr 09 03:03:02.344418 2026] [:error] [pid 40053:tid 40059] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Thu Apr 09 03:03:03.799610 2026] [:error] [pid 40053:tid 40059] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Thu Apr 09 03:03:04.066393 2026] [:error] [pid 40053:tid 40075] [client 94.245.109.106:30912] File does not exist: /usr/local/apache/htdocs/suspended-page/yawa.php
[Thu Apr 09 03:03:04.316331 2026] [:error] [pid 40053:tid 40061] [client 94.245.109.106:30912] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "adamaNdyKTqfO6aiQ6UqzwAAAAM"]
[Thu Apr 09 03:03:08.353811 2026] [:error] [pid 40053:tid 40065] [client 94.245.109.106:27910] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "adambNdyKTqfO6aiQ6Uq3QAAAAc"]
[Thu Apr 09 03:03:11.180407 2026] [:error] [pid 40053:tid 40076] [client 94.245.109.106:48893] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "adamb9dyKTqfO6aiQ6Uq5gAAABI"]
[Thu Apr 09 03:03:14.273381 2026] [:error] [pid 40055:tid 40134] [client 94.245.109.106:58586] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "adamcn_5SjAJycOw5k_oIwAAAIQ"]
[Thu Apr 09 03:03:18.651750 2026] [:error] [pid 22056:tid 22064] [client 94.245.109.106:48145] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "adamdmQ3CidOGkmVXZh1kAAAAMY"]
[Thu Apr 09 03:03:23.715405 2026] [:error] [pid 40054:tid 40113] [client 94.245.109.106:24566] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "adame6ymwSVk3s67lDegBAAAAQ4"]
[Thu Apr 09 03:03:30.485722 2026] [:error] [pid 22056:tid 22079] [client 94.245.109.106:46065] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "adamgmQ3CidOGkmVXZh1tgAAANU"]
[Thu Apr 09 03:03:33.569572 2026] [:error] [pid 22056:tid 22082] [client 94.245.109.106:46841] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "adamhWQ3CidOGkmVXZh1vwAAANg"]
[Thu Apr 09 03:03:35.298276 2026] [:error] [pid 40053:tid 40072] [client 94.245.109.106:27039] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "adamh9dyKTqfO6aiQ6UrAgAAAA4"]
[Thu Apr 09 03:03:37.783954 2026] [:error] [pid 40055:tid 40147] [client 94.245.109.106:4885] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "adamiX_5SjAJycOw5k_oQAAAAJE"]
[Thu Apr 09 03:03:40.857148 2026] [:error] [pid 40053:tid 40064] [client 94.245.109.106:22245] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oo.php"] [unique_id "adamjNdyKTqfO6aiQ6UrBAAAAAY"]
[Thu Apr 09 03:03:45.249514 2026] [:error] [pid 40055:tid 40151] [client 94.245.109.106:41511] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wssw.php"] [unique_id "adamkX_5SjAJycOw5k_oUAAAAJU"]
[Thu Apr 09 03:03:48.783171 2026] [:error] [pid 40055:tid 40135] [client 94.245.109.106:32392] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wssw.php"] [unique_id "adamlH_5SjAJycOw5k_oVQAAAIU"]
[Thu Apr 09 03:03:54.171257 2026] [:error] [pid 40055:tid 40154] [client 94.245.109.106:27413] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wssw.php"] [unique_id "adammn_5SjAJycOw5k_oVgAAAJg"]
[Thu Apr 09 03:03:57.891588 2026] [:error] [pid 40053:tid 40058] [client 94.245.109.106:51459] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "adamnddyKTqfO6aiQ6UrIgAAAAA"]
[Thu Apr 09 03:03:59.723620 2026] [:error] [pid 22056:tid 22060] [client 94.245.109.106:28019] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "adamn2Q3CidOGkmVXZh2CgAAAMI"]
[Thu Apr 09 03:04:02.169304 2026] [:error] [pid 22056:tid 22081] [client 94.245.109.106:29797] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "adamomQ3CidOGkmVXZh2EgAAANc"]
[Thu Apr 09 03:04:08.183485 2026] [:error] [pid 40460:tid 40482] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/ws73.php
[Thu Apr 09 03:04:08.437186 2026] [:error] [pid 40460:tid 40471] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 09 03:04:08.691033 2026] [:error] [pid 40460:tid 40472] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 09 03:04:08.981330 2026] [:error] [pid 40460:tid 40483] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Thu Apr 09 03:04:09.234627 2026] [:error] [pid 40460:tid 40466] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu Apr 09 03:04:09.501656 2026] [:error] [pid 40460:tid 40463] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 09 03:04:09.761244 2026] [:error] [pid 40460:tid 40464] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Thu Apr 09 03:04:10.035350 2026] [:error] [pid 40460:tid 40478] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Thu Apr 09 03:04:10.289651 2026] [:error] [pid 40460:tid 40487] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 09 03:04:10.564779 2026] [:error] [pid 40460:tid 40465] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Apr 09 03:04:10.821694 2026] [:error] [pid 40460:tid 40469] [client 94.245.109.106:21200] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 09 03:04:11.071765 2026] [:error] [pid 40460:tid 40467] [client 94.245.109.106:21200] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adamq4w-4-9CKD2kKMZbZAAAAEQ"]
[Thu Apr 09 03:04:13.841418 2026] [:error] [pid 40460:tid 40477] [client 94.245.109.106:33073] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adamrYw-4-9CKD2kKMZbZwAAAE4"]
[Thu Apr 09 03:04:18.376604 2026] [:error] [pid 22056:tid 22082] [client 94.245.109.106:50597] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adamsmQ3CidOGkmVXZh2JgAAANg"]
[Thu Apr 09 03:04:23.229362 2026] [:error] [pid 40054:tid 40119] [client 94.245.109.106:31269] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adamt6ymwSVk3s67lDegOAAAARQ"]
[Thu Apr 09 03:04:29.841104 2026] [:error] [pid 40055:tid 40134] [client 94.245.109.106:51736] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adamvX_5SjAJycOw5k_ohQAAAIQ"]
[Thu Apr 09 03:04:32.737348 2026] [:error] [pid 40055:tid 40138] [client 94.245.109.106:4239] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adamwH_5SjAJycOw5k_ojwAAAIg"]
[Thu Apr 09 03:04:36.798768 2026] [:error] [pid 40055:tid 40140] [client 94.245.109.106:20238] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adamxH_5SjAJycOw5k_onAAAAIo"]
[Thu Apr 09 03:04:44.232129 2026] [:error] [pid 40460:tid 40475] [client 94.245.109.106:4187] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adamzIw-4-9CKD2kKMZbugAAAEw"]
[Thu Apr 09 03:04:47.284147 2026] [:error] [pid 22056:tid 22068] [client 94.245.109.106:4183] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adamz2Q3CidOGkmVXZh2WAAAAMo"]
[Thu Apr 09 03:04:53.003296 2026] [:error] [pid 40055:tid 40132] [client 94.245.109.106:51097] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adam1X_5SjAJycOw5k_o3gAAAII"]
[Thu Apr 09 03:04:55.016372 2026] [:error] [pid 40055:tid 40130] [client 94.245.109.106:40074] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adam13_5SjAJycOw5k_o6gAAAIA"]
[Thu Apr 09 03:05:01.519410 2026] [:error] [pid 40053:tid 40070] [client 94.245.109.106:42023] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lwvwpmg.php"] [unique_id "adam3ddyKTqfO6aiQ6UrXgAAAAw"]
[Thu Apr 09 03:05:06.255992 2026] [:error] [pid 22056:tid 22065] [client 94.245.109.106:28698] [client 94.245.109.106] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lwvwpmg.php"] [unique_id "adam4mQ3CidOGkmVXZh2kQAAAMc"]
[Thu Apr 09 03:05:10.101427 2026] [:error] [pid 40054:tid 40121] [client 94.245.109.106:46003] File does not exist: /usr/local/apache/htdocs/suspended-page/lwvwpmg.php
[Thu Apr 09 03:05:10.355879 2026] [:error] [pid 40054:tid 40102] [client 94.245.109.106:46003] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 09 03:05:10.609685 2026] [:error] [pid 40054:tid 40104] [client 94.245.109.106:46003] File does not exist: /usr/local/apache/htdocs/suspended-page/wb.php
[Thu Apr 09 03:40:12.530641 2026] [:error] [pid 20537:tid 20618] [client 43.130.3.120:54622] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adavHMSTjpSeyrxLmN7QAwAAAJQ"]
[Thu Apr 09 07:40:20.904112 2026] [:error] [pid 20641:tid 20669] [client 125.75.66.97:47116] [client 125.75.66.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adbnZG3LksBSF-6rlkablAAAANg"]
[Thu Apr 09 08:36:01.025335 2026] [:error] [pid 20536:tid 20594] [client 43.155.26.193:41318] [client 43.155.26.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adb0ccPqyUJM1s3YpIZTKAAAAFc"]
[Thu Apr 09 13:43:24.868549 2026] [:error] [pid 24927:tid 24931] [client 20.220.57.112:23323] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 13:58:58.408708 2026] [:error] [pid 24516:tid 24557] [client 223.15.245.170:54690] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "addAIthW7vSS-UkeWCXxSgAAAEo"]
[Thu Apr 09 15:09:52.715439 2026] [:error] [pid 24624:tid 24626] [client 43.130.78.203:56310] [client 43.130.78.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "addQwO4Jn-WvK1ZBTviIqwAAAMA"]
[Thu Apr 09 17:24:40.442437 2026] [:error] [pid 20837:tid 20848] [client 43.153.26.165:45146] [client 43.153.26.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "addwWPSL71FHZkjrGzO84gAAAYk"]
[Thu Apr 09 18:54:04.870565 2026] [:error] [pid 24927:tid 24939] [client 51.103.166.20:15970] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 20:55:00.638465 2026] [:error] [pid 24515:tid 24541] [client 43.163.110.140:56734] [client 43.163.110.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adehpK1OMnvM2fMnB1Oy8AAAABY"]
[Thu Apr 09 22:31:11.029767 2026] [:error] [pid 24515:tid 24539] [client 143.198.210.125:60034] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ade4L61OMnvM2fMnB1PkngAAABQ"]
[Thu Apr 09 22:31:18.998538 2026] [:error] [pid 24515:tid 24540] [client 143.198.210.125:47972] [client 143.198.210.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ade4Nq1OMnvM2fMnB1PkvAAAABU"]
[Thu Apr 09 23:51:31.748164 2026] [:error] [pid 63331:tid 63351] [client 4.223.166.35:2836] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Thu Apr 09 23:51:32.013517 2026] [:error] [pid 63331:tid 63349] [client 4.223.166.35:2836] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Thu Apr 09 23:51:32.280808 2026] [:error] [pid 63331:tid 63338] [client 4.223.166.35:2836] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Thu Apr 09 23:51:32.550937 2026] [:error] [pid 63331:tid 63333] [client 4.223.166.35:2836] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Thu Apr 09 23:51:32.816413 2026] [:error] [pid 63331:tid 63344] [client 4.223.166.35:2836] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Thu Apr 09 23:51:33.082031 2026] [:error] [pid 63331:tid 63356] [client 4.223.166.35:2836] File does not exist: /usr/local/apache/htdocs/suspended-page/bypltspd.php
[Fri Apr 10 02:45:24.266373 2026] [:error] [pid 36397:tid 36404] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Fri Apr 10 02:45:24.506212 2026] [:error] [pid 36397:tid 36425] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/6xBAm3vODE05BSzkJZRAws.php
[Fri Apr 10 02:45:24.778908 2026] [:error] [pid 36397:tid 36411] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/qiumnpor3orjwr6me3zmgqCdefault.php
[Fri Apr 10 02:45:25.021781 2026] [:error] [pid 36397:tid 36414] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Fri Apr 10 02:45:25.276898 2026] [:error] [pid 36397:tid 36408] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/5xkfgawzejgwqh9hiaznCdefault.php
[Fri Apr 10 02:45:25.515033 2026] [:error] [pid 36397:tid 36410] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 10 02:45:25.758786 2026] [:error] [pid 36397:tid 36417] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 10 02:45:25.998525 2026] [:error] [pid 36397:tid 36416] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 10 02:45:26.243078 2026] [:error] [pid 36397:tid 36402] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Fri Apr 10 02:45:26.482966 2026] [:error] [pid 36397:tid 36420] [client 158.158.105.216:14055] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 10 02:45:26.730824 2026] [:error] [pid 36397:tid 36422] [client 158.158.105.216:14055] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "adfzxmhis4RvVEWEv9v8jAAAABU"]
[Fri Apr 10 02:45:29.455510 2026] [:error] [pid 29569:tid 29596] [client 158.158.105.216:18468] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "adfzybt9mkieWu8HPk5W4AAAAVc"]
[Fri Apr 10 02:45:31.421153 2026] [:error] [pid 36672:tid 36679] [client 158.158.105.216:21838] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "adfzyz99r9VLJsT_o8igHQAAAMU"]
[Fri Apr 10 02:45:32.906136 2026] [:error] [pid 29569:tid 29590] [client 158.158.105.216:18455] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "adfzzLt9mkieWu8HPk5W5AAAAVE"]
[Fri Apr 10 02:45:38.130274 2026] [:error] [pid 36672:tid 36681] [client 158.158.105.216:18461] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adfz0j99r9VLJsT_o8igLQAAAMc"]
[Fri Apr 10 02:45:39.398046 2026] [:error] [pid 36672:tid 36680] [client 158.158.105.216:18444] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adfz0z99r9VLJsT_o8igMAAAAMY"]
[Fri Apr 10 02:45:40.330139 2026] [:error] [pid 36672:tid 36674] [client 158.158.105.216:18464] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adfz1D99r9VLJsT_o8igNgAAAMA"]
[Fri Apr 10 02:45:41.505317 2026] [:error] [pid 36672:tid 36689] [client 158.158.105.216:18436] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adfz1T99r9VLJsT_o8igOwAAAM8"]
[Fri Apr 10 02:45:42.521134 2026] [:error] [pid 36672:tid 36697] [client 158.158.105.216:14028] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "adfz1j99r9VLJsT_o8igQAAAANc"]
[Fri Apr 10 02:45:43.212948 2026] [:error] [pid 36397:tid 36409] [client 158.158.105.216:14039] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "adfz12his4RvVEWEv9v8ogAAAAg"]
[Fri Apr 10 02:45:44.238696 2026] [:error] [pid 36399:tid 36479] [client 158.158.105.216:18451] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "adfz2K8Hkxpyh6_TlVRCTQAAAJg"]
[Fri Apr 10 02:45:45.123146 2026] [:error] [pid 36398:tid 36447] [client 158.158.105.216:18458] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "adfz2eX640wXZwwgfP9_YwAAAFM"]
[Fri Apr 10 02:45:46.399407 2026] [:error] [pid 21486:tid 21501] [client 158.158.105.216:18457] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "adfz2qBRftltyNdYwLoyygAAAQ0"]
[Fri Apr 10 02:45:47.207701 2026] [:error] [pid 36398:tid 36429] [client 158.158.105.216:14033] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "adfz2-X640wXZwwgfP9_ZQAAAEE"]
[Fri Apr 10 02:45:47.895515 2026] [:error] [pid 36399:tid 36472] [client 158.158.105.216:14051] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "adfz268Hkxpyh6_TlVRCUAAAAJE"]
[Fri Apr 10 02:45:48.694763 2026] [:error] [pid 36399:tid 36477] [client 158.158.105.216:18478] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "adfz3K8Hkxpyh6_TlVRCUQAAAJY"]
[Fri Apr 10 02:45:49.348382 2026] [:error] [pid 21486:tid 21506] [client 158.158.105.216:18437] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adfz3aBRftltyNdYwLoy0AAAARI"]
[Fri Apr 10 02:45:50.241125 2026] [:error] [pid 21486:tid 21511] [client 158.158.105.216:14029] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adfz3qBRftltyNdYwLoy1QAAARc"]
[Fri Apr 10 02:45:50.780967 2026] [:error] [pid 21486:tid 21488] [client 158.158.105.216:18482] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adfz3qBRftltyNdYwLoy1wAAAQA"]
[Fri Apr 10 02:45:51.364276 2026] [:error] [pid 36398:tid 36440] [client 158.158.105.216:18432] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adfz3-X640wXZwwgfP9_agAAAEw"]
[Fri Apr 10 02:45:52.234114 2026] [:error] [pid 21486:tid 21501] [client 158.158.105.216:14050] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "adfz4KBRftltyNdYwLoy4AAAAQ0"]
[Fri Apr 10 02:45:53.286885 2026] [:error] [pid 21486:tid 21495] [client 158.158.105.216:14063] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "adfz4aBRftltyNdYwLoy6QAAAQc"]
[Fri Apr 10 02:45:54.098913 2026] [:error] [pid 36398:tid 36443] [client 158.158.105.216:18475] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "adfz4uX640wXZwwgfP9_bQAAAE8"]
[Fri Apr 10 02:45:55.986972 2026] [:error] [pid 21486:tid 21508] [client 158.158.105.216:21871] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "adfz46BRftltyNdYwLoy-QAAARQ"]
[Fri Apr 10 02:45:58.697547 2026] [:error] [pid 36397:tid 36416] [client 158.158.105.216:14025] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adfz5mhis4RvVEWEv9v8sQAAAA8"]
[Fri Apr 10 02:46:00.082722 2026] [:error] [pid 36397:tid 36409] [client 158.158.105.216:14016] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adfz6Ghis4RvVEWEv9v8sgAAAAg"]
[Fri Apr 10 02:46:01.236876 2026] [:error] [pid 36672:tid 36676] [client 158.158.105.216:18483] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adfz6T99r9VLJsT_o8igTQAAAMI"]
[Fri Apr 10 02:46:01.950168 2026] [:error] [pid 21486:tid 21494] [client 158.158.105.216:14027] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adfz6aBRftltyNdYwLozCwAAAQY"]
[Fri Apr 10 02:46:03.393654 2026] [:error] [pid 36672:tid 36681] [client 158.158.105.216:18490] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adfz6z99r9VLJsT_o8igUAAAAMc"]
[Fri Apr 10 02:46:04.905344 2026] [:error] [pid 36672:tid 36690] [client 158.158.105.216:18477] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adfz7D99r9VLJsT_o8igVAAAANA"]
[Fri Apr 10 02:46:06.556589 2026] [:error] [pid 36399:tid 36474] [client 158.158.105.216:14047] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adfz7q8Hkxpyh6_TlVRCWAAAAJM"]
[Fri Apr 10 02:46:08.065185 2026] [:error] [pid 21486:tid 21512] [client 158.158.105.216:14034] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adfz8KBRftltyNdYwLozOAAAARg"]
[Fri Apr 10 02:46:09.803115 2026] [:error] [pid 29569:tid 29580] [client 158.158.105.216:14071] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adfz8bt9mkieWu8HPk5W9gAAAUc"]
[Fri Apr 10 02:46:11.014080 2026] [:error] [pid 21486:tid 21491] [client 158.158.105.216:18433] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adfz86BRftltyNdYwLozTQAAAQM"]
[Fri Apr 10 02:46:12.061155 2026] [:error] [pid 21486:tid 21488] [client 158.158.105.216:18493] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adfz9KBRftltyNdYwLozUgAAAQA"]
[Fri Apr 10 02:46:13.354295 2026] [:error] [pid 21486:tid 21500] [client 158.158.105.216:14036] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gfd.php"] [unique_id "adfz9aBRftltyNdYwLozVwAAAQw"]
[Fri Apr 10 02:46:13.978643 2026] [:error] [pid 29569:tid 29582] [client 158.158.105.216:18445] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "adfz9bt9mkieWu8HPk5W_gAAAUk"]
[Fri Apr 10 02:46:14.749263 2026] [:error] [pid 36399:tid 36459] [client 158.158.105.216:18438] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "adfz9q8Hkxpyh6_TlVRCXwAAAIQ"]
[Fri Apr 10 02:46:15.466919 2026] [:error] [pid 29569:tid 29587] [client 158.158.105.216:14021] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "adfz97t9mkieWu8HPk5W_wAAAU4"]
[Fri Apr 10 02:46:16.412401 2026] [:error] [pid 36672:tid 36678] [client 158.158.105.216:18441] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "adfz-D99r9VLJsT_o8igWQAAAMQ"]
[Fri Apr 10 02:46:17.558302 2026] [:error] [pid 36672:tid 36697] [client 158.158.105.216:14045] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adfz-T99r9VLJsT_o8igXQAAANc"]
[Fri Apr 10 02:46:18.577091 2026] [:error] [pid 36672:tid 36688] [client 158.158.105.216:18459] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adfz-j99r9VLJsT_o8igYAAAAM4"]
[Fri Apr 10 02:46:19.621086 2026] [:error] [pid 29569:tid 29590] [client 158.158.105.216:18471] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adfz-7t9mkieWu8HPk5XBQAAAVE"]
[Fri Apr 10 02:46:20.700718 2026] [:error] [pid 36399:tid 36457] [client 158.158.105.216:21847] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adfz_K8Hkxpyh6_TlVRCYQAAAII"]
[Fri Apr 10 02:46:21.993332 2026] [:error] [pid 21486:tid 21497] [client 158.158.105.216:18466] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adfz_aBRftltyNdYwLozeAAAAQk"]
[Fri Apr 10 02:46:22.935789 2026] [:error] [pid 36399:tid 36474] [client 158.158.105.216:14030] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adfz_q8Hkxpyh6_TlVRCZQAAAJM"]
[Fri Apr 10 02:46:24.337516 2026] [:error] [pid 36397:tid 36401] [client 158.158.105.216:18474] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adf0AGhis4RvVEWEv9v8uwAAAAA"]
[Fri Apr 10 02:46:25.687005 2026] [:error] [pid 36399:tid 36469] [client 158.158.105.216:18439] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adf0Aa8Hkxpyh6_TlVRCbAAAAI4"]
[Fri Apr 10 02:46:27.240925 2026] [:error] [pid 21486:tid 21489] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Fri Apr 10 02:46:27.479375 2026] [:error] [pid 21486:tid 21495] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 10 02:46:27.732080 2026] [:error] [pid 21486:tid 21508] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Fri Apr 10 02:46:27.994117 2026] [:error] [pid 21486:tid 21510] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/mI35rZhMg1zJ1vuXdefault.php
[Fri Apr 10 02:46:28.232823 2026] [:error] [pid 21486:tid 21499] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/q7lhrgzoo7ijhnkcedq2Cdefault.php
[Fri Apr 10 02:46:28.503812 2026] [:error] [pid 21486:tid 21506] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/exhds0ucw0ju9vjgasxqCdefault.php
[Fri Apr 10 02:46:28.742436 2026] [:error] [pid 21486:tid 21492] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Fri Apr 10 02:46:29.250973 2026] [:error] [pid 21486:tid 21497] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 10 02:46:29.490853 2026] [:error] [pid 21486:tid 21490] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 10 02:46:29.729066 2026] [:error] [pid 21486:tid 21498] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 10 02:46:29.977325 2026] [:error] [pid 21486:tid 21509] [client 158.158.105.216:14049] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 10 02:46:30.215737 2026] [:error] [pid 21486:tid 21501] [client 158.158.105.216:14049] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf0BqBRftltyNdYwLozjAAAAQ0"]
[Fri Apr 10 02:46:31.323014 2026] [:error] [pid 36672:tid 36693] [client 158.158.105.216:21827] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf0Bz99r9VLJsT_o8igaQAAANM"]
[Fri Apr 10 02:46:33.092950 2026] [:error] [pid 29569:tid 29578] [client 158.158.105.216:18469] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf0Cbt9mkieWu8HPk5XCQAAAUU"]
[Fri Apr 10 02:46:34.451637 2026] [:error] [pid 36399:tid 36478] [client 158.158.105.216:14069] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adf0Cq8Hkxpyh6_TlVRCcwAAAJc"]
[Fri Apr 10 02:46:35.071765 2026] [:error] [pid 36398:tid 36439] [client 158.158.105.216:14040] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adf0C-X640wXZwwgfP9_ggAAAEs"]
[Fri Apr 10 02:46:36.054208 2026] [:error] [pid 36398:tid 36450] [client 158.158.105.216:18494] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adf0DOX640wXZwwgfP9_hAAAAFY"]
[Fri Apr 10 02:46:37.390958 2026] [:error] [pid 36398:tid 36447] [client 158.158.105.216:18463] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adf0DeX640wXZwwgfP9_hQAAAFM"]
[Fri Apr 10 02:46:38.550621 2026] [:error] [pid 29569:tid 29596] [client 158.158.105.216:12435] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adf0Drt9mkieWu8HPk5XDQAAAVc"]
[Fri Apr 10 02:46:39.340472 2026] [:error] [pid 36672:tid 36676] [client 158.158.105.216:14019] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "adf0Dz99r9VLJsT_o8igawAAAMI"]
[Fri Apr 10 02:46:39.994664 2026] [:error] [pid 29569:tid 29574] [client 158.158.105.216:21824] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "adf0D7t9mkieWu8HPk5XDgAAAUE"]
[Fri Apr 10 02:46:40.987136 2026] [:error] [pid 36398:tid 36434] [client 158.158.105.216:14046] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "adf0EOX640wXZwwgfP9_iQAAAEY"]
[Fri Apr 10 02:46:42.226324 2026] [:error] [pid 21486:tid 21502] [client 158.158.105.216:14061] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "adf0EqBRftltyNdYwLozkwAAAQ4"]
[Fri Apr 10 02:46:44.556659 2026] [:error] [pid 36672:tid 36697] [client 158.158.105.216:18446] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adf0FD99r9VLJsT_o8igbwAAANc"]
[Fri Apr 10 02:46:47.890727 2026] [:error] [pid 36672:tid 36687] [client 158.158.105.216:14053] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adf0Fz99r9VLJsT_o8igdwAAAM0"]
[Fri Apr 10 02:46:49.619711 2026] [:error] [pid 36672:tid 36694] [client 158.158.105.216:14056] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adf0GT99r9VLJsT_o8igeAAAANQ"]
[Fri Apr 10 02:46:51.642066 2026] [:error] [pid 29569:tid 29574] [client 158.158.105.216:18448] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adf0G7t9mkieWu8HPk5XGwAAAUE"]
[Fri Apr 10 02:46:52.666052 2026] [:error] [pid 36672:tid 36695] [client 158.158.105.216:18495] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adf0HD99r9VLJsT_o8igfAAAANU"]
[Fri Apr 10 02:46:53.792853 2026] [:error] [pid 36397:tid 36409] [client 158.158.105.216:18481] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adf0HWhis4RvVEWEv9v84gAAAAg"]
[Fri Apr 10 02:46:55.018579 2026] [:error] [pid 36672:tid 36697] [client 158.158.105.216:14026] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adf0Hz99r9VLJsT_o8iggQAAANc"]
[Fri Apr 10 02:46:56.019850 2026] [:error] [pid 29569:tid 29580] [client 158.158.105.216:14044] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adf0ILt9mkieWu8HPk5XIgAAAUc"]
[Fri Apr 10 02:46:58.242182 2026] [:error] [pid 29569:tid 29585] [client 158.158.105.216:14058] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adf0Irt9mkieWu8HPk5XJwAAAUw"]
[Fri Apr 10 02:47:01.474029 2026] [:error] [pid 21486:tid 21502] [client 158.158.105.216:21835] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adf0JaBRftltyNdYwLozpgAAAQ4"]
[Fri Apr 10 02:47:05.294471 2026] [:error] [pid 29569:tid 29591] [client 158.158.105.216:14052] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adf0Kbt9mkieWu8HPk5XMQAAAVI"]
[Fri Apr 10 02:47:06.900200 2026] [:error] [pid 36672:tid 36676] [client 158.158.105.216:12426] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adf0Kj99r9VLJsT_o8igigAAAMI"]
[Fri Apr 10 02:47:09.318159 2026] [:error] [pid 36672:tid 36683] [client 158.158.105.216:18462] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf0LT99r9VLJsT_o8iglQAAAMk"]
[Fri Apr 10 02:47:10.441717 2026] [:error] [pid 36672:tid 36686] [client 158.158.105.216:18492] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf0Lj99r9VLJsT_o8ignAAAAMw"]
[Fri Apr 10 02:47:11.137345 2026] [:error] [pid 36672:tid 36677] [client 158.158.105.216:14057] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf0Lz99r9VLJsT_o8ignwAAAMM"]
[Fri Apr 10 02:47:12.206931 2026] [:error] [pid 36399:tid 36466] [client 158.158.105.216:14022] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adf0MK8Hkxpyh6_TlVRCiwAAAIs"]
[Fri Apr 10 02:47:13.239138 2026] [:error] [pid 36399:tid 36478] [client 158.158.105.216:18480] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf0Ma8Hkxpyh6_TlVRCkAAAAJc"]
[Fri Apr 10 02:47:13.781635 2026] [:error] [pid 36398:tid 36448] [client 158.158.105.216:18450] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf0MeX640wXZwwgfP9_jQAAAFQ"]
[Fri Apr 10 02:47:14.972177 2026] [:error] [pid 29569:tid 29580] [client 158.158.105.216:14064] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf0Mrt9mkieWu8HPk5XPQAAAUc"]
[Fri Apr 10 02:47:16.288763 2026] [:error] [pid 29569:tid 29595] [client 158.158.105.216:18454] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wlld5fjtdpjmjhsds3qzmipfCdefault.php"] [unique_id "adf0NLt9mkieWu8HPk5XQwAAAVY"]
[Fri Apr 10 02:47:17.662655 2026] [:error] [pid 21486:tid 21488] [client 158.158.105.216:18443] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf0NaBRftltyNdYwLozwAAAAQA"]
[Fri Apr 10 02:47:19.959584 2026] [:error] [pid 29569:tid 29575] [client 158.158.105.216:18465] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf0N7t9mkieWu8HPk5XSgAAAUI"]
[Fri Apr 10 02:47:22.151036 2026] [:error] [pid 36398:tid 36432] [client 158.158.105.216:18456] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf0OuX640wXZwwgfP9_kQAAAEQ"]
[Fri Apr 10 02:47:24.271826 2026] [:error] [pid 36398:tid 36429] [client 158.158.105.216:18460] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adf0POX640wXZwwgfP9_kgAAAEE"]
[Fri Apr 10 02:47:27.065994 2026] [:error] [pid 29569:tid 29589] [client 158.158.105.216:18489] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adf0P7t9mkieWu8HPk5XTgAAAVA"]
[Fri Apr 10 02:47:28.433751 2026] [:error] [pid 36399:tid 36468] [client 158.158.105.216:14062] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adf0QK8Hkxpyh6_TlVRCmgAAAI0"]
[Fri Apr 10 02:47:29.254507 2026] [:error] [pid 21486:tid 21497] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 10 02:47:29.494707 2026] [:error] [pid 21486:tid 21490] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Fri Apr 10 02:47:29.734664 2026] [:error] [pid 21486:tid 21509] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 10 02:47:29.985492 2026] [:error] [pid 21486:tid 21508] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Apr 10 02:47:30.239669 2026] [:error] [pid 21486:tid 21498] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 10 02:47:30.480795 2026] [:error] [pid 21486:tid 21488] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Fri Apr 10 02:47:31.405039 2026] [:error] [pid 21486:tid 21491] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Fri Apr 10 02:47:31.646432 2026] [:error] [pid 21486:tid 21496] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 10 02:47:31.886442 2026] [:error] [pid 21486:tid 21511] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Fri Apr 10 02:47:32.139941 2026] [:error] [pid 21486:tid 21502] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 10 02:47:32.389895 2026] [:error] [pid 21486:tid 21503] [client 158.158.105.216:14060] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Fri Apr 10 02:47:32.637356 2026] [:error] [pid 21486:tid 21489] [client 158.158.105.216:14060] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adf0RKBRftltyNdYwLoz2AAAAQE"]
[Fri Apr 10 02:47:33.551228 2026] [:error] [pid 36397:tid 36421] [client 158.158.105.216:21859] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adf0RWhis4RvVEWEv9v88QAAABQ"]
[Fri Apr 10 02:47:34.170837 2026] [:error] [pid 21486:tid 21505] [client 158.158.105.216:12416] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adf0RqBRftltyNdYwLoz3QAAARE"]
[Fri Apr 10 02:47:35.340231 2026] [:error] [pid 29569:tid 29593] [client 158.158.105.216:18470] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "adf0R7t9mkieWu8HPk5XXwAAAVQ"]
[Fri Apr 10 02:47:35.912978 2026] [:error] [pid 36398:tid 36431] [client 158.158.105.216:12421] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf0R-X640wXZwwgfP9_ngAAAEM"]
[Fri Apr 10 02:47:36.591654 2026] [:error] [pid 36399:tid 36462] [client 158.158.105.216:18486] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf0SK8Hkxpyh6_TlVRCoAAAAIc"]
[Fri Apr 10 02:47:38.004780 2026] [:error] [pid 36398:tid 36444] [client 158.158.105.216:18485] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf0SuX640wXZwwgfP9_oQAAAFA"]
[Fri Apr 10 02:47:39.024505 2026] [:error] [pid 36399:tid 36471] [client 158.158.105.216:14068] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adf0S68Hkxpyh6_TlVRCpQAAAJA"]
[Fri Apr 10 02:47:39.743397 2026] [:error] [pid 36672:tid 36691] [client 158.158.105.216:18473] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adf0Sz99r9VLJsT_o8igsAAAANE"]
[Fri Apr 10 02:47:40.478650 2026] [:error] [pid 36397:tid 36405] [client 158.158.105.216:18485] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adf0TGhis4RvVEWEv9v89AAAAAQ"]
[Fri Apr 10 02:47:41.740483 2026] [:error] [pid 36398:tid 36447] [client 158.158.105.216:21854] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adf0TeX640wXZwwgfP9_pAAAAFM"]
[Fri Apr 10 02:47:43.001545 2026] [:error] [pid 29569:tid 29596] [client 158.158.105.216:12425] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adf0T7t9mkieWu8HPk5XagAAAVc"]
[Fri Apr 10 02:47:44.246735 2026] [:error] [pid 21486:tid 21504] [client 158.158.105.216:21856] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adf0UKBRftltyNdYwLoz7gAAARA"]
[Fri Apr 10 02:47:45.359408 2026] [:error] [pid 36398:tid 36433] [client 158.158.105.216:14059] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adf0UeX640wXZwwgfP9_qAAAAEU"]
[Fri Apr 10 02:47:46.684853 2026] [:error] [pid 36672:tid 36678] [client 158.158.105.216:14031] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adf0Uj99r9VLJsT_o8igsgAAAMQ"]
[Fri Apr 10 02:47:48.713097 2026] [:error] [pid 36672:tid 36687] [client 158.158.105.216:19457] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adf0VD99r9VLJsT_o8igtAAAAM0"]
[Fri Apr 10 02:47:50.850868 2026] [:error] [pid 36399:tid 36474] [client 158.158.105.216:14023] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adf0Vq8Hkxpyh6_TlVRCqgAAAJM"]
[Fri Apr 10 02:47:52.038520 2026] [:error] [pid 36399:tid 36470] [client 158.158.105.216:14070] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adf0WK8Hkxpyh6_TlVRCrAAAAI8"]
[Fri Apr 10 02:47:52.759593 2026] [:error] [pid 36399:tid 36462] [client 158.158.105.216:18453] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adf0WK8Hkxpyh6_TlVRCrgAAAIc"]
[Fri Apr 10 02:47:53.894935 2026] [:error] [pid 21486:tid 21491] [client 158.158.105.216:12429] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "adf0WaBRftltyNdYwLoz9AAAAQM"]
[Fri Apr 10 02:47:54.586134 2026] [:error] [pid 36397:tid 36403] [client 158.158.105.216:21836] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adf0Wmhis4RvVEWEv9v9AwAAAAI"]
[Fri Apr 10 02:47:55.716355 2026] [:error] [pid 36398:tid 36445] [client 158.158.105.216:21884] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adf0W-X640wXZwwgfP9_rgAAAFE"]
[Fri Apr 10 02:47:57.906569 2026] [:error] [pid 36399:tid 36471] [client 158.158.105.216:14041] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adf0Xa8Hkxpyh6_TlVRCtAAAAJA"]
[Fri Apr 10 02:47:59.039393 2026] [:error] [pid 36399:tid 36467] [client 158.158.105.216:14076] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t2gorhwasq4vioshtatw5eCdefault.php"] [unique_id "adf0X68Hkxpyh6_TlVRCuAAAAIw"]
[Fri Apr 10 02:48:01.193968 2026] [:error] [pid 36398:tid 36429] [client 158.158.105.216:21853] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adf0YeX640wXZwwgfP9_tAAAAEE"]
[Fri Apr 10 02:48:02.220034 2026] [:error] [pid 29569:tid 29595] [client 158.158.105.216:14020] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adf0Yrt9mkieWu8HPk5XhQAAAVY"]
[Fri Apr 10 02:48:03.375033 2026] [:error] [pid 36399:tid 36478] [client 158.158.105.216:21842] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adf0Y68Hkxpyh6_TlVRCvAAAAJc"]
[Fri Apr 10 02:48:04.409537 2026] [:error] [pid 29569:tid 29585] [client 158.158.105.216:21870] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adf0ZLt9mkieWu8HPk5XiQAAAUw"]
[Fri Apr 10 02:48:05.815526 2026] [:error] [pid 36398:tid 36440] [client 158.158.105.216:21849] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adf0ZeX640wXZwwgfP9_tgAAAEw"]
[Fri Apr 10 02:48:06.897656 2026] [:error] [pid 36398:tid 36433] [client 158.158.105.216:21850] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adf0ZuX640wXZwwgfP9_twAAAEU"]
[Fri Apr 10 02:48:08.167892 2026] [:error] [pid 21486:tid 21501] [client 158.158.105.216:12431] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adf0aKBRftltyNdYwLoz9gAAAQ0"]
[Fri Apr 10 02:48:09.127027 2026] [:error] [pid 36397:tid 36417] [client 158.158.105.216:19488] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b4txckoieeyhynhsrpi9lCdefault.php"] [unique_id "adf0aWhis4RvVEWEv9v9DQAAABA"]
[Fri Apr 10 02:48:09.776068 2026] [:error] [pid 36672:tid 36694] [client 158.158.105.216:18440] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adf0aT99r9VLJsT_o8iguQAAANQ"]
[Fri Apr 10 02:48:10.794140 2026] [:error] [pid 36397:tid 36409] [client 158.158.105.216:21882] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adf0amhis4RvVEWEv9v9EAAAAAg"]
[Fri Apr 10 02:48:11.796434 2026] [:error] [pid 36397:tid 36405] [client 158.158.105.216:14075] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adf0a2his4RvVEWEv9v9FAAAAAQ"]
[Fri Apr 10 02:48:12.723986 2026] [:error] [pid 36397:tid 36419] [client 158.158.105.216:12460] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adf0bGhis4RvVEWEv9v9FgAAABI"]
[Fri Apr 10 02:48:13.777488 2026] [:error] [pid 36397:tid 36415] [client 158.158.105.216:14048] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adf0bWhis4RvVEWEv9v9GAAAAA4"]
[Fri Apr 10 02:48:15.298130 2026] [:error] [pid 36399:tid 36471] [client 158.158.105.216:18467] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adf0b68Hkxpyh6_TlVRC0QAAAJA"]
[Fri Apr 10 02:48:16.100328 2026] [:error] [pid 36399:tid 36473] [client 158.158.105.216:21887] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adf0cK8Hkxpyh6_TlVRC1AAAAJI"]
[Fri Apr 10 02:48:17.311477 2026] [:error] [pid 36397:tid 36410] [client 158.158.105.216:21833] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adf0cWhis4RvVEWEv9v9HAAAAAk"]
[Fri Apr 10 02:48:19.570377 2026] [:error] [pid 36398:tid 36428] [client 158.158.105.216:18488] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adf0c-X640wXZwwgfP9_ugAAAEA"]
[Fri Apr 10 02:48:20.866311 2026] [:error] [pid 36397:tid 36420] [client 158.158.105.216:18447] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adf0dGhis4RvVEWEv9v9HwAAABM"]
[Fri Apr 10 02:48:22.693212 2026] [:error] [pid 29569:tid 29593] [client 158.158.105.216:18442] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adf0drt9mkieWu8HPk5XoAAAAVQ"]
[Fri Apr 10 02:48:23.760188 2026] [:error] [pid 29569:tid 29591] [client 158.158.105.216:12428] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adf0d7t9mkieWu8HPk5XpAAAAVI"]
[Fri Apr 10 02:48:29.999405 2026] [:error] [pid 21486:tid 21505] [client 158.158.105.216:21857] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adf0faBRftltyNdYwLoz-gAAARE"]
[Fri Apr 10 02:48:32.416904 2026] [:error] [pid 36397:tid 36403] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 10 02:48:32.654806 2026] [:error] [pid 36397:tid 36411] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/8daf1238_1774208172.php
[Fri Apr 10 02:48:33.936554 2026] [:error] [pid 36397:tid 36404] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Fri Apr 10 02:48:34.175973 2026] [:error] [pid 36397:tid 36423] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Fri Apr 10 02:48:34.437856 2026] [:error] [pid 36397:tid 36408] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 10 02:48:34.685640 2026] [:error] [pid 36397:tid 36412] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Fri Apr 10 02:48:34.992246 2026] [:error] [pid 36397:tid 36416] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Fri Apr 10 02:48:35.244209 2026] [:error] [pid 36397:tid 36417] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Fri Apr 10 02:48:35.504013 2026] [:error] [pid 36397:tid 36414] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 10 02:48:35.754353 2026] [:error] [pid 36397:tid 36410] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Apr 10 02:48:35.992077 2026] [:error] [pid 36397:tid 36402] [client 158.158.105.216:21861] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Fri Apr 10 02:48:36.227342 2026] [:error] [pid 36397:tid 36422] [client 158.158.105.216:21861] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adf0hGhis4RvVEWEv9v9OgAAABU"]
[Fri Apr 10 02:48:38.215191 2026] [:error] [pid 36672:tid 36686] [client 158.158.105.216:21851] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adf0hj99r9VLJsT_o8ig3AAAAMw"]
[Fri Apr 10 02:48:38.928611 2026] [:error] [pid 36398:tid 36435] [client 158.158.105.216:14024] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adf0huX640wXZwwgfP9_zgAAAEc"]
[Fri Apr 10 02:48:39.712548 2026] [:error] [pid 29569:tid 29585] [client 158.158.105.216:21848] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adf0h7t9mkieWu8HPk5XqwAAAUw"]
[Fri Apr 10 02:48:41.719426 2026] [:error] [pid 36399:tid 36464] [client 158.158.105.216:21840] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adf0ia8Hkxpyh6_TlVRC4AAAAIk"]
[Fri Apr 10 02:48:42.860336 2026] [:error] [pid 36399:tid 36470] [client 158.158.105.216:19466] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adf0iq8Hkxpyh6_TlVRC4gAAAI8"]
[Fri Apr 10 02:48:44.593190 2026] [:error] [pid 36672:tid 36683] [client 158.158.105.216:21852] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adf0jD99r9VLJsT_o8ig3wAAAMk"]
[Fri Apr 10 02:48:46.527530 2026] [:error] [pid 36398:tid 36434] [client 158.158.105.216:14038] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "adf0juX640wXZwwgfP9_1wAAAEY"]
[Fri Apr 10 02:48:47.358770 2026] [:error] [pid 36397:tid 36404] [client 158.158.105.216:21872] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "adf0j2his4RvVEWEv9v9PwAAAAM"]
[Fri Apr 10 02:48:48.928352 2026] [:error] [pid 29569:tid 29586] [client 158.158.105.216:12453] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "adf0kLt9mkieWu8HPk5XtQAAAU0"]
[Fri Apr 10 02:48:50.170342 2026] [:error] [pid 36672:tid 36694] [client 158.158.105.216:21844] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "adf0kj99r9VLJsT_o8ig-QAAANQ"]
[Fri Apr 10 02:48:50.898908 2026] [:error] [pid 36672:tid 36689] [client 158.158.105.216:14037] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "adf0kj99r9VLJsT_o8ig-wAAAM8"]
[Fri Apr 10 02:48:51.486347 2026] [:error] [pid 36672:tid 36691] [client 158.158.105.216:18495] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adf0kz99r9VLJsT_o8ig_wAAANE"]
[Fri Apr 10 02:48:52.120106 2026] [:error] [pid 36397:tid 36410] [client 158.158.105.216:14074] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adf0lGhis4RvVEWEv9v9QwAAAAk"]
[Fri Apr 10 02:48:53.015992 2026] [:error] [pid 29569:tid 29594] [client 158.158.105.216:21855] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adf0lbt9mkieWu8HPk5XuwAAAVU"]
[Fri Apr 10 02:48:54.267848 2026] [:error] [pid 29569:tid 29586] [client 158.158.105.216:12432] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adf0lrt9mkieWu8HPk5XxAAAAU0"]
[Fri Apr 10 02:48:54.992910 2026] [:error] [pid 21486:tid 21489] [client 158.158.105.216:18452] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adf0lqBRftltyNdYwLo0BwAAAQE"]
[Fri Apr 10 02:48:55.649287 2026] [:error] [pid 36672:tid 36683] [client 158.158.105.216:14079] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adf0lz99r9VLJsT_o8ihBQAAAMk"]
[Fri Apr 10 02:48:56.179987 2026] [:error] [pid 21486:tid 21510] [client 158.158.105.216:19507] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adf0mKBRftltyNdYwLo0DAAAARY"]
[Fri Apr 10 02:48:56.699772 2026] [:error] [pid 36397:tid 36421] [client 158.158.105.216:14054] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adf0mGhis4RvVEWEv9v9RAAAABQ"]
[Fri Apr 10 02:48:57.399037 2026] [:error] [pid 36397:tid 36424] [client 158.158.105.216:12471] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf0mWhis4RvVEWEv9v9RgAAABc"]
[Fri Apr 10 02:48:58.094207 2026] [:error] [pid 36672:tid 36698] [client 158.158.105.216:12433] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf0mj99r9VLJsT_o8ihBwAAANg"]
[Fri Apr 10 02:48:58.704467 2026] [:error] [pid 36672:tid 36680] [client 158.158.105.216:14017] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf0mj99r9VLJsT_o8ihCQAAAMY"]
[Fri Apr 10 02:48:59.192473 2026] [:error] [pid 36672:tid 36676] [client 158.158.105.216:21829] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adf0mz99r9VLJsT_o8ihCwAAAMI"]
[Fri Apr 10 02:48:59.759997 2026] [:error] [pid 36398:tid 36428] [client 158.158.105.216:21864] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adf0m-X640wXZwwgfP9_2QAAAEA"]
[Fri Apr 10 02:49:00.644661 2026] [:error] [pid 36399:tid 36473] [client 158.158.105.216:18434] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adf0nK8Hkxpyh6_TlVRC7AAAAJI"]
[Fri Apr 10 02:49:01.252733 2026] [:error] [pid 29569:tid 29587] [client 158.158.105.216:12451] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adf0nbt9mkieWu8HPk5XygAAAU4"]
[Fri Apr 10 02:49:03.134323 2026] [:error] [pid 36398:tid 36446] [client 158.158.105.216:19475] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adf0n-X640wXZwwgfP9_3gAAAFI"]
[Fri Apr 10 02:49:04.955707 2026] [:error] [pid 36672:tid 36685] [client 158.158.105.216:21828] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf0oD99r9VLJsT_o8ihEwAAAMs"]
[Fri Apr 10 02:49:06.321698 2026] [:error] [pid 29569:tid 29590] [client 158.158.105.216:18476] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf0ort9mkieWu8HPk5X0wAAAVE"]
[Fri Apr 10 02:49:07.754068 2026] [:error] [pid 36672:tid 36677] [client 158.158.105.216:12456] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf0oz99r9VLJsT_o8ihHAAAAMM"]
[Fri Apr 10 02:49:11.076441 2026] [:error] [pid 29569:tid 29588] [client 158.158.105.216:21862] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/irpl4xz4fmlzm4tlvvu4h1mCdefault.php"] [unique_id "adf0p7t9mkieWu8HPk5X3AAAAU8"]
[Fri Apr 10 02:49:15.089479 2026] [:error] [pid 36399:tid 36475] [client 158.158.105.216:12422] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "adf0q68Hkxpyh6_TlVRC_AAAAJQ"]
[Fri Apr 10 02:49:17.891576 2026] [:error] [pid 36672:tid 36689] [client 158.158.105.216:21877] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "adf0rT99r9VLJsT_o8ihQgAAAM8"]
[Fri Apr 10 02:49:19.392342 2026] [:error] [pid 36672:tid 36696] [client 158.158.105.216:12472] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "adf0rz99r9VLJsT_o8ihSAAAANY"]
[Fri Apr 10 02:49:19.989854 2026] [:error] [pid 36398:tid 36445] [client 158.158.105.216:14018] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myfile.php"] [unique_id "adf0r-X640wXZwwgfP9_6QAAAFE"]
[Fri Apr 10 02:49:20.472735 2026] [:error] [pid 36398:tid 36432] [client 158.158.105.216:12474] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adf0sOX640wXZwwgfP9_6wAAAEQ"]
[Fri Apr 10 02:49:21.376470 2026] [:error] [pid 36399:tid 36473] [client 158.158.105.216:14078] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adf0sa8Hkxpyh6_TlVRDFAAAAJI"]
[Fri Apr 10 02:49:21.994028 2026] [:error] [pid 36672:tid 36686] [client 158.158.105.216:21825] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adf0sT99r9VLJsT_o8ihTgAAAMw"]
[Fri Apr 10 02:49:22.569697 2026] [:error] [pid 36672:tid 36681] [client 158.158.105.216:12455] [client 158.158.105.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adf0sj99r9VLJsT_o8ihUAAAAMc"]
[Fri Apr 10 02:54:31.515116 2026] [:error] [pid 29569:tid 29588] [client 43.163.110.140:47110] [client 43.163.110.140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adf157t9mkieWu8HPk5Y2wAAAU8"]
[Fri Apr 10 05:27:42.234816 2026] [:error] [pid 59098:tid 59121] [client 170.106.187.106:34396] [client 170.106.187.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adgZziZshs05JVy8bJ4SzwAAARQ"]
[Fri Apr 10 06:36:33.619871 2026] [:error] [pid 59144:tid 59166] [client 8.221.141.88:54894] [client 8.221.141.88] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adgp8Rta6MlufQo3_orwnQAAAVQ"]
[Fri Apr 10 09:44:58.561486 2026] [:error] [pid 13102:tid 13177] [client 43.166.244.251:59658] [client 43.166.244.251] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adhWGv9xLvjW2guI55YrWQAAABE"]
[Fri Apr 10 10:38:48.094309 2026] [:error] [pid 13189:tid 13214] [client 43.165.65.75:40294] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adhiuJAxiJKPums3eBALvQAAAFY"]
[Fri Apr 10 11:03:08.268305 2026] [:error] [pid 13102:tid 13171] [client 154.208.40.209:26943] [client 154.208.40.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.208.40.209, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adhobP9xLvjW2guI55Zc-gAAAAs"]
[Fri Apr 10 11:03:08.277395 2026] [:error] [pid 13102:tid 13171] [client 154.208.40.209:26943] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 10 12:01:08.730901 2026] [:error] [pid 13189:tid 13214] [client 43.135.133.241:35680] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adh2BJAxiJKPums3eBBgjgAAAFY"]
[Fri Apr 10 14:30:10.453510 2026] [:error] [pid 13100:tid 13111] [client 41.70.44.25:62163] [client 41.70.44.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.70.44.25, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adiY8lzg-ZkZ0InWIP0tJQAAAQY"]
[Fri Apr 10 14:30:10.459816 2026] [:error] [pid 13100:tid 13111] [client 41.70.44.25:62163] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 10 15:08:18.788183 2026] [:error] [pid 13102:tid 13166] [client 144.172.94.2:42334] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "adih4v9xLvjW2guI55bqCQAAAAY"]
[Fri Apr 10 15:08:30.513727 2026] [:error] [pid 3934:tid 3943] [client 144.172.94.2:60212] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "adih7oa41m-BS8mg82e-ygAAAMQ"]
[Fri Apr 10 15:08:33.059088 2026] [:error] [pid 3934:tid 3943] [client 144.172.94.2:60226] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "adih8Ya41m-BS8mg82e-4AAAAMQ"]
[Fri Apr 10 15:08:35.446110 2026] [:error] [pid 13101:tid 13145] [client 144.172.94.2:60242] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "adih898Ldw85818pj2pBWAAAAIw"]
[Fri Apr 10 15:08:40.301542 2026] [:error] [pid 13189:tid 13202] [client 144.172.94.2:34228] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development.local"] [unique_id "adih-JAxiJKPums3eBDgDQAAAEo"]
[Fri Apr 10 15:08:43.142922 2026] [:error] [pid 13102:tid 13169] [client 144.172.94.2:34242] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development.sample"] [unique_id "adih-_9xLvjW2guI55bqLQAAAAk"]
[Fri Apr 10 15:08:46.235634 2026] [:error] [pid 3934:tid 3959] [client 144.172.94.2:34250] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dist"] [unique_id "adih_oa41m-BS8mg82e_FAAAANQ"]
[Fri Apr 10 15:08:51.524905 2026] [:error] [pid 13189:tid 13210] [client 144.172.94.2:38602] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "adiiA5AxiJKPums3eBDgGQAAAFI"]
[Fri Apr 10 15:08:53.396250 2026] [:error] [pid 13189:tid 13210] [client 144.172.94.2:38602] [client 144.172.94.2] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "152.53.241.40_242e16f48f4ccfe32298b6afa80815b2069746b9"): Internal error (specific information not available) [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "adiiA5AxiJKPums3eBDgGQAAAFI"]
[Fri Apr 10 15:08:59.661901 2026] [:error] [pid 3934:tid 3949] [client 144.172.94.2:53228] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "adiiC4a41m-BS8mg82e_OgAAAMo"]
[Fri Apr 10 15:09:19.787743 2026] [:error] [pid 3934:tid 3941] [client 144.172.94.2:53806] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "adiiH4a41m-BS8mg82e_xwAAAMI"]
[Fri Apr 10 15:09:22.762507 2026] [:error] [pid 3934:tid 3955] [client 144.172.94.2:53822] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.local"] [unique_id "adiiIoa41m-BS8mg82e_zQAAANA"]
[Fri Apr 10 15:09:27.671443 2026] [:error] [pid 13102:tid 13162] [client 144.172.94.2:53826] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "adiiJ_9xLvjW2guI55bqcwAAAAI"]
[Fri Apr 10 15:09:30.617920 2026] [:error] [pid 3934:tid 3950] [client 144.172.94.2:35232] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "adiiKoa41m-BS8mg82e_7AAAAMs"]
[Fri Apr 10 15:09:32.975535 2026] [:error] [pid 3934:tid 3958] [client 144.172.94.2:35240] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.stage"] [unique_id "adiiLIa41m-BS8mg82e_-QAAANM"]
[Fri Apr 10 15:09:44.440819 2026] [:error] [pid 13189:tid 13210] [client 144.172.94.2:53342] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "adiiOJAxiJKPums3eBDgqgAAAFI"]
[Fri Apr 10 15:09:47.298037 2026] [:error] [pid 13189:tid 13213] [client 144.172.94.2:53356] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.travis"] [unique_id "adiiO5AxiJKPums3eBDgtQAAAFU"]
[Fri Apr 10 15:09:55.405167 2026] [:error] [pid 13102:tid 13172] [client 144.172.94.2:40392] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.envs"] [unique_id "adiiQ_9xLvjW2guI55bqoQAAAAw"]
[Fri Apr 10 15:09:57.919489 2026] [:error] [pid 13102:tid 13176] [client 144.172.94.2:58628] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.environment"] [unique_id "adiiRf9xLvjW2guI55bqpgAAABA"]
[Fri Apr 10 15:10:16.070793 2026] [:error] [pid 13102:tid 13179] [client 144.172.94.2:58290] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/env.bak"] [unique_id "adiiWP9xLvjW2guI55bqyQAAABM"]
[Fri Apr 10 15:10:44.767934 2026] [:error] [pid 13100:tid 13116] [client 144.172.94.2:58170] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "adiidFzg-ZkZ0InWIP04YQAAAQs"]
[Fri Apr 10 15:10:53.591382 2026] [:error] [pid 13100:tid 13122] [client 144.172.94.2:44502] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.local"] [unique_id "adiifVzg-ZkZ0InWIP04dAAAARE"]
[Fri Apr 10 15:10:58.082526 2026] [:error] [pid 13101:tid 13135] [client 144.172.94.2:44516] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.production"] [unique_id "adiigt8Ldw85818pj2pCOQAAAII"]
[Fri Apr 10 15:11:00.489218 2026] [:error] [pid 13102:tid 13177] [client 144.172.94.2:47928] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env.staging"] [unique_id "adiihP9xLvjW2guI55brHwAAABE"]
[Fri Apr 10 15:11:18.287736 2026] [:error] [pid 13189:tid 13215] [client 144.172.94.2:38684] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.local"] [unique_id "adiilpAxiJKPums3eBDhwAAAAFc"]
[Fri Apr 10 15:11:20.921024 2026] [:error] [pid 13189:tid 13210] [client 144.172.94.2:38700] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.production"] [unique_id "adiimJAxiJKPums3eBDhyAAAAFI"]
[Fri Apr 10 15:11:23.697703 2026] [:error] [pid 3934:tid 3942] [client 144.172.94.2:38714] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.staging"] [unique_id "adiim4a41m-BS8mg82fBcgAAAMM"]
[Fri Apr 10 15:11:27.686342 2026] [:error] [pid 13101:tid 13143] [client 144.172.94.2:47278] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env.test"] [unique_id "adiin98Ldw85818pj2pCcwAAAIo"]
[Fri Apr 10 15:12:09.237437 2026] [:error] [pid 13189:tid 13205] [client 144.172.94.2:56826] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.local"] [unique_id "adiiyZAxiJKPums3eBDiQAAAAE0"]
[Fri Apr 10 15:12:12.088829 2026] [:error] [pid 13101:tid 13152] [client 144.172.94.2:56836] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.production"] [unique_id "adiizN8Ldw85818pj2pCwgAAAJM"]
[Fri Apr 10 15:12:13.397171 2026] [:error] [pid 3934:tid 3942] [client 144.172.94.2:56848] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.staging"] [unique_id "adiizYa41m-BS8mg82fCOQAAAMM"]
[Fri Apr 10 15:12:15.810758 2026] [:error] [pid 3934:tid 3957] [client 144.172.94.2:56850] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.test"] [unique_id "adiiz4a41m-BS8mg82fCPgAAANI"]
[Fri Apr 10 15:12:18.359790 2026] [:error] [pid 13189:tid 13211] [client 144.172.94.2:38340] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/config.php"] [unique_id "adii0pAxiJKPums3eBDiWQAAAFM"]
[Fri Apr 10 15:12:22.248908 2026] [:error] [pid 13101:tid 13152] [client 144.172.94.2:38348] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/config.json"] [unique_id "adii1t8Ldw85818pj2pCzgAAAJM"]
[Fri Apr 10 15:12:31.017554 2026] [:error] [pid 13102:tid 13172] [client 144.172.94.2:34044] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/settings.php"] [unique_id "adii3_9xLvjW2guI55br7AAAAAw"]
[Fri Apr 10 15:12:33.071345 2026] [:error] [pid 13101:tid 13136] [client 144.172.94.2:34056] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/application/.env"] [unique_id "adii4d8Ldw85818pj2pC6wAAAIM"]
[Fri Apr 10 15:12:35.648413 2026] [:error] [pid 13101:tid 13153] [client 144.172.94.2:34058] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application/config/config.php"] [unique_id "adii498Ldw85818pj2pC9wAAAJQ"]
[Fri Apr 10 15:12:40.105977 2026] [:error] [pid 13189:tid 13198] [client 144.172.94.2:55776] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application/config/database.php"] [unique_id "adii6JAxiJKPums3eBDimAAAAEY"]
[Fri Apr 10 15:12:48.518542 2026] [:error] [pid 3934:tid 3948] [client 144.172.94.2:57760] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application/config/routes.php"] [unique_id "adii8Ia41m-BS8mg82fCtgAAAMk"]
[Fri Apr 10 15:12:51.660554 2026] [:error] [pid 3934:tid 3948] [client 144.172.94.2:57768] [client 144.172.94.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application.properties"] [unique_id "adii84a41m-BS8mg82fCxAAAAMk"]
[Fri Apr 10 15:13:01.295907 2026] [:error] [pid 3934:tid 3961] [client 144.172.94.2:59254] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "adii_Ya41m-BS8mg82fC4AAAANY"]
[Fri Apr 10 15:13:03.831379 2026] [:error] [pid 3934:tid 3956] [client 144.172.94.2:59268] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env.local"] [unique_id "adii_4a41m-BS8mg82fC7wAAANE"]
[Fri Apr 10 15:13:07.836595 2026] [:error] [pid 13101:tid 13150] [client 144.172.94.2:35514] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env.production"] [unique_id "adijA98Ldw85818pj2pDQwAAAJE"]
[Fri Apr 10 15:13:11.657000 2026] [:error] [pid 3934:tid 3951] [client 144.172.94.2:35522] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env.staging"] [unique_id "adijB4a41m-BS8mg82fDDQAAAMw"]
[Fri Apr 10 15:13:27.439838 2026] [:error] [pid 3934:tid 3955] [client 144.172.94.2:52448] [client 144.172.94.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backup/.env"] [unique_id "adijF4a41m-BS8mg82fDjAAAANA"]
[Fri Apr 10 15:45:40.192091 2026] [:error] [pid 13101:tid 13155] [client 182.42.105.85:49900] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adiqpN8Ldw85818pj2pRQwAAAJY"]
[Fri Apr 10 15:53:35.505959 2026] [:error] [pid 13189:tid 13202] [client 43.157.172.39:54662] [client 43.157.172.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adisf5AxiJKPums3eBD--AAAAEo"]
[Fri Apr 10 18:03:31.362011 2026] [:error] [pid 13102:tid 13180] [client 43.166.239.145:48042] [client 43.166.239.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adjK8_9xLvjW2guI55ZP7QAAABQ"]
[Fri Apr 10 20:59:12.527480 2026] [:error] [pid 13100:tid 13108] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Fri Apr 10 20:59:12.763681 2026] [:error] [pid 13100:tid 13120] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Fri Apr 10 20:59:12.997870 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Fri Apr 10 20:59:13.235162 2026] [:error] [pid 13100:tid 13113] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Fri Apr 10 20:59:13.467615 2026] [:error] [pid 13100:tid 13125] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Fri Apr 10 20:59:13.711451 2026] [:error] [pid 13100:tid 13110] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/filemanger2.php
[Fri Apr 10 20:59:13.944003 2026] [:error] [pid 13100:tid 13122] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 10 20:59:14.176872 2026] [:error] [pid 13100:tid 13115] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-vn1.php
[Fri Apr 10 20:59:14.412292 2026] [:error] [pid 13100:tid 13117] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Fri Apr 10 20:59:14.645444 2026] [:error] [pid 13100:tid 13109] [client 172.213.241.33:23221] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Fri Apr 10 20:59:14.876945 2026] [:error] [pid 13100:tid 13108] [client 172.213.241.33:23221] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adj0Ilzg-ZkZ0InWIP24_QAAAQM"]
[Fri Apr 10 20:59:15.575005 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:51190] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adj0I4a41m-BS8mg82fftAAAAMU"]
[Fri Apr 10 20:59:16.561522 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:14664] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adj0JN8Ldw85818pj2rTHwAAAIU"]
[Fri Apr 10 20:59:17.181624 2026] [:error] [pid 3934:tid 3961] [client 172.213.241.33:14143] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adj0JYa41m-BS8mg82ffwQAAANY"]
[Fri Apr 10 20:59:18.082308 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:51152] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adj0Joa41m-BS8mg82ffyAAAAMc"]
[Fri Apr 10 20:59:18.918882 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:38445] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adj0JrsdbY_MC14OH14Q-gAAAU4"]
[Fri Apr 10 20:59:19.879759 2026] [:error] [pid 25984:tid 25993] [client 172.213.241.33:14706] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adj0J7sdbY_MC14OH14RAQAAAUQ"]
[Fri Apr 10 20:59:20.856552 2026] [:error] [pid 13189:tid 13197] [client 172.213.241.33:30541] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adj0KJAxiJKPums3eBCuyAAAAEU"]
[Fri Apr 10 20:59:21.545009 2026] [:error] [pid 13101:tid 13152] [client 172.213.241.33:32505] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adj0Kd8Ldw85818pj2rTKgAAAJM"]
[Fri Apr 10 20:59:22.462292 2026] [:error] [pid 13101:tid 13156] [client 172.213.241.33:38403] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adj0Kt8Ldw85818pj2rTLgAAAJc"]
[Fri Apr 10 20:59:23.282375 2026] [:error] [pid 13102:tid 13177] [client 172.213.241.33:23172] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adj0K_9xLvjW2guI55a78QAAABE"]
[Fri Apr 10 20:59:24.058559 2026] [:error] [pid 25984:tid 26005] [client 172.213.241.33:14122] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adj0LLsdbY_MC14OH14RCAAAAVA"]
[Fri Apr 10 20:59:24.621840 2026] [:error] [pid 13100:tid 13106] [client 172.213.241.33:28753] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adj0LFzg-ZkZ0InWIP25CAAAAQE"]
[Fri Apr 10 20:59:25.332668 2026] [:error] [pid 13102:tid 13169] [client 172.213.241.33:15380] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adj0Lf9xLvjW2guI55a79gAAAAk"]
[Fri Apr 10 20:59:26.214482 2026] [:error] [pid 25984:tid 25992] [client 172.213.241.33:55760] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adj0LrsdbY_MC14OH14REgAAAUM"]
[Fri Apr 10 20:59:27.031330 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:33841] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adj0L_9xLvjW2guI55a7-wAAABA"]
[Fri Apr 10 20:59:27.705869 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:30552] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adj0L4a41m-BS8mg82ff2gAAAME"]
[Fri Apr 10 20:59:28.429618 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:14141] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adj0MP9xLvjW2guI55a7_gAAAAc"]
[Fri Apr 10 20:59:29.170972 2026] [:error] [pid 13101:tid 13147] [client 172.213.241.33:14695] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adj0Md8Ldw85818pj2rTOwAAAI4"]
[Fri Apr 10 20:59:29.885522 2026] [:error] [pid 13189:tid 13196] [client 172.213.241.33:23212] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adj0MZAxiJKPums3eBCuywAAAEQ"]
[Fri Apr 10 20:59:30.544422 2026] [:error] [pid 13101:tid 13144] [client 172.213.241.33:22864] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj0Mt8Ldw85818pj2rTPgAAAIs"]
[Fri Apr 10 20:59:31.147362 2026] [:error] [pid 13101:tid 13155] [client 172.213.241.33:23193] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj0M98Ldw85818pj2rTQgAAAJY"]
[Fri Apr 10 20:59:31.805394 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:51169] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj0M4a41m-BS8mg82ff4AAAAM0"]
[Fri Apr 10 20:59:32.460937 2026] [:error] [pid 13100:tid 13125] [client 172.213.241.33:30537] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adj0NFzg-ZkZ0InWIP25DwAAARQ"]
[Fri Apr 10 20:59:33.174755 2026] [:error] [pid 13100:tid 13117] [client 172.213.241.33:14098] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adj0NVzg-ZkZ0InWIP25EQAAAQw"]
[Fri Apr 10 20:59:34.067314 2026] [:error] [pid 25984:tid 26007] [client 172.213.241.33:63274] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adj0NrsdbY_MC14OH14RHAAAAVI"]
[Fri Apr 10 20:59:34.724739 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:57024] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adj0Nv9xLvjW2guI55a8EAAAABQ"]
[Fri Apr 10 20:59:35.362941 2026] [:error] [pid 13102:tid 13175] [client 172.213.241.33:63261] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adj0N_9xLvjW2guI55a8FQAAAA8"]
[Fri Apr 10 20:59:36.346297 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:27926] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adj0OJAxiJKPums3eBCu0gAAAE4"]
[Fri Apr 10 20:59:36.881324 2026] [:error] [pid 13100:tid 13127] [client 172.213.241.33:14628] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adj0OFzg-ZkZ0InWIP25FwAAARY"]
[Fri Apr 10 20:59:37.448339 2026] [:error] [pid 13102:tid 13165] [client 172.213.241.33:22867] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adj0Of9xLvjW2guI55a8IAAAAAU"]
[Fri Apr 10 20:59:38.192187 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:22871] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adj0OpAxiJKPums3eBCu2AAAAFQ"]
[Fri Apr 10 20:59:38.970539 2026] [:error] [pid 13101:tid 13151] [client 172.213.241.33:57033] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adj0Ot8Ldw85818pj2rTUwAAAJI"]
[Fri Apr 10 20:59:39.653292 2026] [:error] [pid 13101:tid 13150] [client 172.213.241.33:23188] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adj0O98Ldw85818pj2rTVwAAAJE"]
[Fri Apr 10 20:59:40.226711 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:19228] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adj0PIa41m-BS8mg82ff4wAAANU"]
[Fri Apr 10 20:59:40.801643 2026] [:error] [pid 13189:tid 13201] [client 172.213.241.33:60690] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adj0PJAxiJKPums3eBCu5wAAAEk"]
[Fri Apr 10 20:59:41.622197 2026] [:error] [pid 25984:tid 26005] [client 172.213.241.33:63330] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adj0PbsdbY_MC14OH14RKQAAAVA"]
[Fri Apr 10 20:59:42.257586 2026] [:error] [pid 13101:tid 13141] [client 172.213.241.33:14116] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adj0Pt8Ldw85818pj2rTXQAAAIg"]
[Fri Apr 10 20:59:43.064670 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:63346] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adj0P_9xLvjW2guI55a8KgAAABg"]
[Fri Apr 10 20:59:43.811050 2026] [:error] [pid 13102:tid 13163] [client 172.213.241.33:23189] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adj0P_9xLvjW2guI55a8LQAAAAM"]
[Fri Apr 10 20:59:44.536389 2026] [:error] [pid 25984:tid 26006] [client 172.213.241.33:55756] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adj0QLsdbY_MC14OH14RLQAAAVE"]
[Fri Apr 10 20:59:45.131693 2026] [:error] [pid 25984:tid 25996] [client 172.213.241.33:55747] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adj0QbsdbY_MC14OH14RMQAAAUc"]
[Fri Apr 10 20:59:45.745285 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:7561] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adj0QYa41m-BS8mg82ff6QAAAM8"]
[Fri Apr 10 20:59:46.321493 2026] [:error] [pid 25984:tid 26012] [client 172.213.241.33:51941] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adj0QrsdbY_MC14OH14ROQAAAVc"]
[Fri Apr 10 20:59:46.843317 2026] [:error] [pid 25984:tid 25994] [client 172.213.241.33:56376] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adj0QrsdbY_MC14OH14RQwAAAUU"]
[Fri Apr 10 20:59:47.519694 2026] [:error] [pid 25984:tid 26012] [client 172.213.241.33:56328] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adj0Q7sdbY_MC14OH14RSQAAAVc"]
[Fri Apr 10 20:59:48.062181 2026] [:error] [pid 13100:tid 13106] [client 172.213.241.33:7578] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adj0RFzg-ZkZ0InWIP25LAAAAQE"]
[Fri Apr 10 20:59:48.692434 2026] [:error] [pid 13100:tid 13116] [client 172.213.241.33:15464] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adj0RFzg-ZkZ0InWIP25LQAAAQs"]
[Fri Apr 10 20:59:49.359525 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:55773] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adj0Rf9xLvjW2guI55a8NgAAABQ"]
[Fri Apr 10 20:59:49.904195 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:18530] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adj0Rf9xLvjW2guI55a8PQAAAAE"]
[Fri Apr 10 20:59:50.576868 2026] [:error] [pid 25984:tid 26001] [client 172.213.241.33:28714] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adj0RrsdbY_MC14OH14RUQAAAUw"]
[Fri Apr 10 20:59:51.137643 2026] [:error] [pid 13189:tid 13216] [client 172.213.241.33:51914] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adj0R5AxiJKPums3eBCu8wAAAFg"]
[Fri Apr 10 20:59:51.651213 2026] [:error] [pid 25984:tid 26013] [client 172.213.241.33:51955] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adj0R7sdbY_MC14OH14RVwAAAVg"]
[Fri Apr 10 20:59:52.146510 2026] [:error] [pid 13100:tid 13108] [client 172.213.241.33:46669] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adj0SFzg-ZkZ0InWIP25MAAAAQM"]
[Fri Apr 10 20:59:52.922100 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:57037] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adj0SIa41m-BS8mg82ff8gAAANI"]
[Fri Apr 10 20:59:53.668830 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:60692] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adj0SYa41m-BS8mg82ff9AAAAM8"]
[Fri Apr 10 20:59:54.392656 2026] [:error] [pid 13101:tid 13149] [client 172.213.241.33:31843] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adj0St8Ldw85818pj2rTcAAAAJA"]
[Fri Apr 10 20:59:55.142700 2026] [:error] [pid 13100:tid 13119] [client 172.213.241.33:46688] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adj0S1zg-ZkZ0InWIP25PAAAAQ4"]
[Fri Apr 10 20:59:55.830537 2026] [:error] [pid 13189:tid 13204] [client 172.213.241.33:63295] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adj0S5AxiJKPums3eBCvBQAAAEw"]
[Fri Apr 10 20:59:56.331347 2026] [:error] [pid 25984:tid 26000] [client 172.213.241.33:64405] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adj0TLsdbY_MC14OH14RXgAAAUs"]
[Fri Apr 10 20:59:56.908225 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:46691] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adj0TIa41m-BS8mg82ff-QAAAM0"]
[Fri Apr 10 20:59:57.504143 2026] [:error] [pid 13189:tid 13194] [client 172.213.241.33:60682] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adj0TZAxiJKPums3eBCvDQAAAEI"]
[Fri Apr 10 20:59:58.047130 2026] [:error] [pid 13102:tid 13174] [client 172.213.241.33:28734] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adj0Tv9xLvjW2guI55a8RwAAAA4"]
[Fri Apr 10 20:59:58.685161 2026] [:error] [pid 13102:tid 13177] [client 172.213.241.33:63318] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adj0Tv9xLvjW2guI55a8SQAAABE"]
[Fri Apr 10 20:59:59.307964 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:63900] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adj0T4a41m-BS8mg82fgAAAAAMA"]
[Fri Apr 10 20:59:59.821601 2026] [:error] [pid 13102:tid 13169] [client 172.213.241.33:14169] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adj0T_9xLvjW2guI55a8TgAAAAk"]
[Fri Apr 10 21:00:00.335906 2026] [:error] [pid 13102:tid 13171] [client 172.213.241.33:64395] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adj0UP9xLvjW2guI55a8UgAAAAs"]
[Fri Apr 10 21:00:00.896344 2026] [:error] [pid 13102:tid 13165] [client 172.213.241.33:63873] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adj0UP9xLvjW2guI55a8VgAAAAU"]
[Fri Apr 10 21:00:01.451583 2026] [:error] [pid 13101:tid 13143] [client 172.213.241.33:13138] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adj0Ud8Ldw85818pj2rTdwAAAIo"]
[Fri Apr 10 21:00:02.051330 2026] [:error] [pid 13189:tid 13205] [client 172.213.241.33:46714] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adj0UpAxiJKPums3eBCvFgAAAE0"]
[Fri Apr 10 21:00:02.605344 2026] [:error] [pid 13189:tid 13214] [client 172.213.241.33:27171] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adj0UpAxiJKPums3eBCvGQAAAFY"]
[Fri Apr 10 21:00:03.103182 2026] [:error] [pid 13101:tid 13134] [client 172.213.241.33:31868] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adj0U98Ldw85818pj2rTewAAAIE"]
[Fri Apr 10 21:00:03.692307 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:46711] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adj0U4a41m-BS8mg82fgBAAAAME"]
[Fri Apr 10 21:00:04.238498 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:24469] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adj0VIa41m-BS8mg82fgBgAAAMs"]
[Fri Apr 10 21:00:04.802408 2026] [:error] [pid 13101:tid 13148] [client 172.213.241.33:43071] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adj0VN8Ldw85818pj2rTfAAAAI8"]
[Fri Apr 10 21:00:05.325493 2026] [:error] [pid 3934:tid 3951] [client 172.213.241.33:43051] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adj0VYa41m-BS8mg82fgCgAAAMw"]
[Fri Apr 10 21:00:06.036306 2026] [:error] [pid 13189:tid 13216] [client 172.213.241.33:55783] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adj0VpAxiJKPums3eBCvIQAAAFg"]
[Fri Apr 10 21:00:06.613004 2026] [:error] [pid 13189:tid 13215] [client 172.213.241.33:63925] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adj0VpAxiJKPums3eBCvIgAAAFc"]
[Fri Apr 10 21:00:07.236721 2026] [:error] [pid 13101:tid 13157] [client 172.213.241.33:51952] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adj0V98Ldw85818pj2rTgQAAAJg"]
[Fri Apr 10 21:00:07.740922 2026] [:error] [pid 25984:tid 26000] [client 172.213.241.33:14204] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adj0V7sdbY_MC14OH14RZwAAAUs"]
[Fri Apr 10 21:00:08.277448 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:34459] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adj0WIa41m-BS8mg82fgDgAAAMU"]
[Fri Apr 10 21:00:08.814589 2026] [:error] [pid 3934:tid 3956] [client 172.213.241.33:19205] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adj0WIa41m-BS8mg82fgEAAAANE"]
[Fri Apr 10 21:00:09.340874 2026] [:error] [pid 13100:tid 13120] [client 172.213.241.33:12582] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adj0WVzg-ZkZ0InWIP25VwAAAQ8"]
[Fri Apr 10 21:00:10.072653 2026] [:error] [pid 13102:tid 13168] [client 172.213.241.33:20262] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adj0Wv9xLvjW2guI55a8YAAAAAg"]
[Fri Apr 10 21:00:10.556858 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:34480] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adj0WpAxiJKPums3eBCvJQAAAEE"]
[Fri Apr 10 21:00:11.107401 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:24492] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adj0W98Ldw85818pj2rTiQAAAJU"]
[Fri Apr 10 21:00:11.632187 2026] [:error] [pid 13189:tid 13202] [client 172.213.241.33:14176] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adj0W5AxiJKPums3eBCvKAAAAEo"]
[Fri Apr 10 21:00:12.196103 2026] [:error] [pid 13101:tid 13156] [client 172.213.241.33:13160] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adj0XN8Ldw85818pj2rTjQAAAJc"]
[Fri Apr 10 21:00:12.841348 2026] [:error] [pid 3934:tid 3956] [client 172.213.241.33:24499] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adj0XIa41m-BS8mg82fgGwAAANE"]
[Fri Apr 10 21:00:13.473470 2026] [:error] [pid 25984:tid 25996] [client 172.213.241.33:43059] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adj0XbsdbY_MC14OH14RbwAAAUc"]
[Fri Apr 10 21:00:14.034803 2026] [:error] [pid 13102:tid 13177] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Fri Apr 10 21:00:14.271322 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Fri Apr 10 21:00:14.507873 2026] [:error] [pid 13102:tid 13182] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Fri Apr 10 21:00:14.742802 2026] [:error] [pid 13102:tid 13175] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 10 21:00:14.976949 2026] [:error] [pid 13102:tid 13169] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 10 21:00:15.213278 2026] [:error] [pid 13102:tid 13170] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 10 21:00:15.447099 2026] [:error] [pid 13102:tid 13168] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/.mopj.php
[Fri Apr 10 21:00:15.907802 2026] [:error] [pid 13102:tid 13168] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 10 21:00:16.145994 2026] [:error] [pid 13102:tid 13160] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/nano.php
[Fri Apr 10 21:00:16.385072 2026] [:error] [pid 13102:tid 13172] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Fri Apr 10 21:00:16.620670 2026] [:error] [pid 13102:tid 13179] [client 172.213.241.33:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 10 21:00:16.852320 2026] [:error] [pid 13102:tid 13182] [client 172.213.241.33:13149] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "adj0YP9xLvjW2guI55a8egAAABY"]
[Fri Apr 10 21:00:17.464221 2026] [:error] [pid 13102:tid 13183] [client 172.213.241.33:63877] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "adj0Yf9xLvjW2guI55a8fgAAABc"]
[Fri Apr 10 21:00:18.146881 2026] [:error] [pid 3934:tid 3963] [client 172.213.241.33:34495] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "adj0Yoa41m-BS8mg82fgJwAAANg"]
[Fri Apr 10 21:00:18.846948 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:30552] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "adj0YpAxiJKPums3eBCvMQAAAE4"]
[Fri Apr 10 21:00:19.439205 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:12583] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "adj0Y4a41m-BS8mg82fgKQAAAMs"]
[Fri Apr 10 21:00:20.176359 2026] [:error] [pid 13100:tid 13129] [client 172.213.241.33:41950] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "adj0ZFzg-ZkZ0InWIP25XAAAARg"]
[Fri Apr 10 21:00:20.805667 2026] [:error] [pid 13102:tid 13170] [client 172.213.241.33:20271] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "adj0ZP9xLvjW2guI55a8igAAAAo"]
[Fri Apr 10 21:00:21.461101 2026] [:error] [pid 25984:tid 26012] [client 172.213.241.33:43027] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "adj0ZbsdbY_MC14OH14RegAAAVc"]
[Fri Apr 10 21:00:22.053308 2026] [:error] [pid 13101:tid 13147] [client 172.213.241.33:20260] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adj0Zt8Ldw85818pj2rTmwAAAI4"]
[Fri Apr 10 21:00:22.710336 2026] [:error] [pid 25984:tid 25992] [client 172.213.241.33:24496] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adj0ZrsdbY_MC14OH14RggAAAUM"]
[Fri Apr 10 21:00:23.302321 2026] [:error] [pid 25984:tid 26007] [client 172.213.241.33:13131] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adj0Z7sdbY_MC14OH14RhAAAAVI"]
[Fri Apr 10 21:00:23.902421 2026] [:error] [pid 25984:tid 25994] [client 172.213.241.33:20251] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adj0Z7sdbY_MC14OH14RiQAAAUU"]
[Fri Apr 10 21:00:24.399102 2026] [:error] [pid 25984:tid 26000] [client 172.213.241.33:20247] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adj0aLsdbY_MC14OH14RjAAAAUs"]
[Fri Apr 10 21:00:24.986038 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:18730] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adj0aIa41m-BS8mg82fgMQAAAMA"]
[Fri Apr 10 21:00:25.572381 2026] [:error] [pid 25984:tid 25999] [client 172.213.241.33:12551] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adj0absdbY_MC14OH14RkAAAAUo"]
[Fri Apr 10 21:00:26.170039 2026] [:error] [pid 13189:tid 13198] [client 172.213.241.33:21490] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adj0apAxiJKPums3eBCvQgAAAEY"]
[Fri Apr 10 21:00:26.699292 2026] [:error] [pid 13101:tid 13137] [client 172.213.241.33:16189] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adj0at8Ldw85818pj2rTnAAAAIQ"]
[Fri Apr 10 21:00:27.236748 2026] [:error] [pid 25984:tid 26012] [client 172.213.241.33:41936] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adj0a7sdbY_MC14OH14RlgAAAVc"]
[Fri Apr 10 21:00:27.843022 2026] [:error] [pid 25984:tid 26001] [client 172.213.241.33:41889] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adj0a7sdbY_MC14OH14RmQAAAUw"]
[Fri Apr 10 21:00:28.583710 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:34477] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adj0bLsdbY_MC14OH14RoQAAAVU"]
[Fri Apr 10 21:00:29.115389 2026] [:error] [pid 13101:tid 13150] [client 172.213.241.33:27193] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adj0bd8Ldw85818pj2rToAAAAJE"]
[Fri Apr 10 21:00:30.023398 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:12595] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adj0boa41m-BS8mg82fgNAAAAMM"]
[Fri Apr 10 21:00:30.738288 2026] [:error] [pid 3934:tid 3947] [client 172.213.241.33:23995] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adj0boa41m-BS8mg82fgNwAAAMg"]
[Fri Apr 10 21:00:31.276867 2026] [:error] [pid 25984:tid 25994] [client 172.213.241.33:21453] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "adj0b7sdbY_MC14OH14RqAAAAUU"]
[Fri Apr 10 21:00:31.888632 2026] [:error] [pid 13102:tid 13160] [client 172.213.241.33:23969] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adj0b_9xLvjW2guI55a8xgAAAAA"]
[Fri Apr 10 21:00:32.524000 2026] [:error] [pid 25984:tid 26009] [client 172.213.241.33:61327] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adj0cLsdbY_MC14OH14RsAAAAVQ"]
[Fri Apr 10 21:00:33.193544 2026] [:error] [pid 13189:tid 13207] [client 172.213.241.33:61329] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adj0cZAxiJKPums3eBCvZwAAAE8"]
[Fri Apr 10 21:00:33.866433 2026] [:error] [pid 25984:tid 25996] [client 172.213.241.33:18690] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adj0cbsdbY_MC14OH14RtAAAAUc"]
[Fri Apr 10 21:00:34.470743 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:23984] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adj0crsdbY_MC14OH14RuQAAAU4"]
[Fri Apr 10 21:00:35.068410 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:25967] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adj0c4a41m-BS8mg82fgPAAAANU"]
[Fri Apr 10 21:00:35.741387 2026] [:error] [pid 13189:tid 13194] [client 172.213.241.33:27190] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adj0c5AxiJKPums3eBCvdgAAAEI"]
[Fri Apr 10 21:00:36.525312 2026] [:error] [pid 13189:tid 13211] [client 172.213.241.33:61314] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adj0dJAxiJKPums3eBCvewAAAFM"]
[Fri Apr 10 21:00:37.317420 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:23953] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adj0dZAxiJKPums3eBCvgAAAAFE"]
[Fri Apr 10 21:00:37.991891 2026] [:error] [pid 25984:tid 26006] [client 172.213.241.33:40535] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adj0dbsdbY_MC14OH14RxgAAAVE"]
[Fri Apr 10 21:00:38.626966 2026] [:error] [pid 13189:tid 13192] [client 172.213.241.33:40549] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adj0dpAxiJKPums3eBCviQAAAEA"]
[Fri Apr 10 21:00:39.260990 2026] [:error] [pid 25984:tid 25994] [client 172.213.241.33:41922] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adj0d7sdbY_MC14OH14RygAAAUU"]
[Fri Apr 10 21:00:40.033722 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:41983] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adj0eLsdbY_MC14OH14RywAAAU0"]
[Fri Apr 10 21:00:40.626976 2026] [:error] [pid 25984:tid 26008] [client 172.213.241.33:23951] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adj0eLsdbY_MC14OH14R0QAAAVM"]
[Fri Apr 10 21:00:41.248041 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:43054] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adj0ef9xLvjW2guI55a8_AAAABI"]
[Fri Apr 10 21:00:41.801425 2026] [:error] [pid 13102:tid 13183] [client 172.213.241.33:55715] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adj0ef9xLvjW2guI55a9AQAAABc"]
[Fri Apr 10 21:00:42.353992 2026] [:error] [pid 13102:tid 13181] [client 172.213.241.33:12553] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj0ev9xLvjW2guI55a9AwAAABU"]
[Fri Apr 10 21:00:42.938369 2026] [:error] [pid 13100:tid 13120] [client 172.213.241.33:14174] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj0elzg-ZkZ0InWIP25ZAAAAQ8"]
[Fri Apr 10 21:00:43.512010 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:25939] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj0e4a41m-BS8mg82fgQgAAAME"]
[Fri Apr 10 21:00:44.168649 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:16146] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adj0fP9xLvjW2guI55a9DgAAAAY"]
[Fri Apr 10 21:00:44.741528 2026] [:error] [pid 13189:tid 13204] [client 172.213.241.33:31863] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adj0fJAxiJKPums3eBCvrQAAAEw"]
[Fri Apr 10 21:00:45.293028 2026] [:error] [pid 13101:tid 13146] [client 172.213.241.33:60784] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adj0fd8Ldw85818pj2rTrQAAAI0"]
[Fri Apr 10 21:00:45.893636 2026] [:error] [pid 13101:tid 13147] [client 172.213.241.33:25930] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adj0fd8Ldw85818pj2rTrgAAAI4"]
[Fri Apr 10 21:00:46.576171 2026] [:error] [pid 13100:tid 13114] [client 172.213.241.33:55741] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adj0flzg-ZkZ0InWIP25bQAAAQk"]
[Fri Apr 10 21:00:47.272443 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:25868] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adj0f_9xLvjW2guI55a9FQAAAAI"]
[Fri Apr 10 21:00:47.988676 2026] [:error] [pid 13189:tid 13213] [client 172.213.241.33:15996] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adj0f5AxiJKPums3eBCvvgAAAFU"]
[Fri Apr 10 21:00:48.770108 2026] [:error] [pid 25984:tid 26001] [client 172.213.241.33:27212] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adj0gLsdbY_MC14OH14R6AAAAUw"]
[Fri Apr 10 21:00:49.555395 2026] [:error] [pid 13100:tid 13120] [client 172.213.241.33:27217] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adj0gVzg-ZkZ0InWIP25cwAAAQ8"]
[Fri Apr 10 21:00:50.194917 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:25973] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adj0grsdbY_MC14OH14R7wAAAU0"]
[Fri Apr 10 21:00:50.807544 2026] [:error] [pid 25984:tid 26012] [client 172.213.241.33:21478] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adj0grsdbY_MC14OH14R8wAAAVc"]
[Fri Apr 10 21:00:51.476693 2026] [:error] [pid 13101:tid 13141] [client 172.213.241.33:41908] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adj0g98Ldw85818pj2rTtwAAAIg"]
[Fri Apr 10 21:00:52.003869 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:40573] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adj0hLsdbY_MC14OH14R-QAAAU4"]
[Fri Apr 10 21:00:52.525471 2026] [:error] [pid 25984:tid 26007] [client 172.213.241.33:21475] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adj0hLsdbY_MC14OH14R_QAAAVI"]
[Fri Apr 10 21:00:53.024840 2026] [:error] [pid 13189:tid 13210] [client 172.213.241.33:61352] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adj0hZAxiJKPums3eBCvzwAAAFI"]
[Fri Apr 10 21:00:53.606079 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:60774] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adj0hbsdbY_MC14OH14SAgAAAVU"]
[Fri Apr 10 21:00:54.298181 2026] [:error] [pid 25984:tid 26000] [client 172.213.241.33:41891] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adj0hrsdbY_MC14OH14SCAAAAUs"]
[Fri Apr 10 21:00:55.026577 2026] [:error] [pid 25984:tid 25998] [client 172.213.241.33:27223] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adj0h7sdbY_MC14OH14SDAAAAUk"]
[Fri Apr 10 21:00:55.786123 2026] [:error] [pid 25984:tid 25992] [client 172.213.241.33:25858] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adj0h7sdbY_MC14OH14SEAAAAUM"]
[Fri Apr 10 21:00:56.392802 2026] [:error] [pid 13102:tid 13168] [client 172.213.241.33:34544] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adj0iP9xLvjW2guI55a9JQAAAAg"]
[Fri Apr 10 21:00:57.027882 2026] [:error] [pid 13102:tid 13182] [client 172.213.241.33:25865] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adj0if9xLvjW2guI55a9LgAAABY"]
[Fri Apr 10 21:00:57.528685 2026] [:error] [pid 13101:tid 13149] [client 172.213.241.33:25929] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adj0id8Ldw85818pj2rTuwAAAJA"]
[Fri Apr 10 21:00:58.113434 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:60789] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adj0ioa41m-BS8mg82fgUwAAANA"]
[Fri Apr 10 21:00:58.697170 2026] [:error] [pid 13102:tid 13172] [client 172.213.241.33:63955] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adj0iv9xLvjW2guI55a9MgAAAAw"]
[Fri Apr 10 21:00:59.248955 2026] [:error] [pid 25984:tid 25990] [client 172.213.241.33:16133] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adj0i7sdbY_MC14OH14SGQAAAUE"]
[Fri Apr 10 21:00:59.925811 2026] [:error] [pid 25984:tid 25998] [client 172.213.241.33:63975] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adj0i7sdbY_MC14OH14SHgAAAUk"]
[Fri Apr 10 21:01:00.516338 2026] [:error] [pid 25984:tid 26013] [client 172.213.241.33:12572] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adj0jLsdbY_MC14OH14SHwAAAVg"]
[Fri Apr 10 21:01:01.064756 2026] [:error] [pid 25984:tid 25996] [client 172.213.241.33:23221] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adj0jbsdbY_MC14OH14SJAAAAUc"]
[Fri Apr 10 21:01:01.695189 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:25946] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adj0jd8Ldw85818pj2rTwQAAAJU"]
[Fri Apr 10 21:01:02.291270 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:16165] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adj0jv9xLvjW2guI55a9NAAAABA"]
[Fri Apr 10 21:01:02.827448 2026] [:error] [pid 13189:tid 13194] [client 172.213.241.33:19917] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adj0jpAxiJKPums3eBCv2QAAAEI"]
[Fri Apr 10 21:01:03.406500 2026] [:error] [pid 25984:tid 26008] [client 172.213.241.33:16416] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adj0j7sdbY_MC14OH14SMAAAAVM"]
[Fri Apr 10 21:01:03.958995 2026] [:error] [pid 25984:tid 26005] [client 172.213.241.33:15995] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adj0j7sdbY_MC14OH14SMgAAAVA"]
[Fri Apr 10 21:01:04.537967 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:24535] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adj0kLsdbY_MC14OH14SNwAAAVU"]
[Fri Apr 10 21:01:05.126661 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:27162] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adj0kYa41m-BS8mg82fgXgAAANc"]
[Fri Apr 10 21:01:05.784799 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:15949] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adj0kYa41m-BS8mg82fgYwAAAMs"]
[Fri Apr 10 21:01:06.522622 2026] [:error] [pid 13101:tid 13149] [client 172.213.241.33:37168] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adj0kt8Ldw85818pj2rTxwAAAJA"]
[Fri Apr 10 21:01:07.191063 2026] [:error] [pid 13189:tid 13199] [client 172.213.241.33:63970] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adj0k5AxiJKPums3eBCv4wAAAEc"]
[Fri Apr 10 21:01:07.696012 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:16253] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adj0k_9xLvjW2guI55a9OwAAABg"]
[Fri Apr 10 21:01:08.286290 2026] [:error] [pid 3934:tid 3940] [client 172.213.241.33:15207] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adj0lIa41m-BS8mg82fgaAAAAME"]
[Fri Apr 10 21:01:08.905562 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:16384] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adj0lIa41m-BS8mg82fgawAAAM8"]
[Fri Apr 10 21:01:09.404731 2026] [:error] [pid 13101:tid 13148] [client 172.213.241.33:25886] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adj0ld8Ldw85818pj2rTzQAAAI8"]
[Fri Apr 10 21:01:10.079125 2026] [:error] [pid 13101:tid 13137] [client 172.213.241.33:19964] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adj0lt8Ldw85818pj2rTzwAAAIQ"]
[Fri Apr 10 21:01:10.661296 2026] [:error] [pid 13101:tid 13150] [client 172.213.241.33:37966] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adj0lt8Ldw85818pj2rT0wAAAJE"]
[Fri Apr 10 21:01:11.199468 2026] [:error] [pid 13100:tid 13124] [client 172.213.241.33:16130] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adj0l1zg-ZkZ0InWIP25qgAAARM"]
[Fri Apr 10 21:01:11.848599 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:21478] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adj0l_9xLvjW2guI55a9SQAAABg"]
[Fri Apr 10 21:01:12.452762 2026] [:error] [pid 13102:tid 13183] [client 172.213.241.33:15967] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adj0mP9xLvjW2guI55a9TQAAABc"]
[Fri Apr 10 21:01:12.999277 2026] [:error] [pid 25984:tid 25993] [client 172.213.241.33:24532] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adj0mLsdbY_MC14OH14SQQAAAUQ"]
[Fri Apr 10 21:01:13.690105 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:16444] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adj0mbsdbY_MC14OH14SRgAAAVU"]
[Fri Apr 10 21:01:14.236420 2026] [:error] [pid 13101:tid 13151] [client 172.213.241.33:24536] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj0mt8Ldw85818pj2rT3QAAAJI"]
[Fri Apr 10 21:01:14.837715 2026] [:error] [pid 13102:tid 13181] [client 172.213.241.33:65135] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj0mv9xLvjW2guI55a9UwAAABU"]
[Fri Apr 10 21:01:15.426734 2026] [:error] [pid 25984:tid 26008] [client 172.213.241.33:60742] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj0m7sdbY_MC14OH14SUAAAAVM"]
[Fri Apr 10 21:01:16.766975 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 10 21:01:16.999246 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 10 21:01:17.233325 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 10 21:01:17.466126 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 10 21:01:17.726837 2026] [:error] [pid 3934:tid 3943] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 10 21:01:17.960191 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Apr 10 21:01:18.194167 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Apr 10 21:01:18.427980 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 10 21:01:18.916954 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:37988] File does not exist: /usr/local/apache/htdocs/suspended-page/bless4.php
[Fri Apr 10 21:01:19.148530 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:37988] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adj0n4a41m-BS8mg82fghQAAANM"]
[Fri Apr 10 21:01:19.792005 2026] [:error] [pid 25984:tid 25990] [client 172.213.241.33:15208] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adj0n7sdbY_MC14OH14SYgAAAUE"]
[Fri Apr 10 21:01:20.306747 2026] [:error] [pid 25984:tid 25996] [client 172.213.241.33:37178] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adj0oLsdbY_MC14OH14SZwAAAUc"]
[Fri Apr 10 21:01:20.918659 2026] [:error] [pid 25984:tid 25997] [client 172.213.241.33:16229] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adj0oLsdbY_MC14OH14SbwAAAUg"]
[Fri Apr 10 21:01:21.623417 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:27208] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adj0oYa41m-BS8mg82fgiAAAANI"]
[Fri Apr 10 21:01:22.198021 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:19934] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adj0orsdbY_MC14OH14SdQAAAU0"]
[Fri Apr 10 21:01:22.779117 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:16208] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adj0orsdbY_MC14OH14SeQAAAU4"]
[Fri Apr 10 21:01:23.490655 2026] [:error] [pid 3934:tid 3948] [client 172.213.241.33:65131] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adj0o4a41m-BS8mg82fgiwAAAMk"]
[Fri Apr 10 21:01:24.061501 2026] [:error] [pid 13189:tid 13201] [client 172.213.241.33:15224] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adj0pJAxiJKPums3eBCv-QAAAEk"]
[Fri Apr 10 21:01:24.755380 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:35106] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adj0pIa41m-BS8mg82fgkAAAAMc"]
[Fri Apr 10 21:01:25.310576 2026] [:error] [pid 25984:tid 26008] [client 172.213.241.33:65137] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adj0pbsdbY_MC14OH14ShgAAAVM"]
[Fri Apr 10 21:01:26.033010 2026] [:error] [pid 25984:tid 26005] [client 172.213.241.33:21060] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adj0prsdbY_MC14OH14SigAAAVA"]
[Fri Apr 10 21:01:26.593164 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:65066] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adj0poa41m-BS8mg82fgmAAAAMs"]
[Fri Apr 10 21:01:27.273424 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:35157] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adj0p4a41m-BS8mg82fgmwAAAMc"]
[Fri Apr 10 21:01:28.037678 2026] [:error] [pid 25984:tid 25997] [client 172.213.241.33:32411] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adj0qLsdbY_MC14OH14SkwAAAUg"]
[Fri Apr 10 21:01:28.885484 2026] [:error] [pid 25984:tid 25990] [client 172.213.241.33:21083] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adj0qLsdbY_MC14OH14SlwAAAUE"]
[Fri Apr 10 21:01:29.578177 2026] [:error] [pid 25984:tid 25998] [client 172.213.241.33:32430] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj0qbsdbY_MC14OH14SngAAAUk"]
[Fri Apr 10 21:01:30.281577 2026] [:error] [pid 13100:tid 13105] [client 172.213.241.33:26501] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj0qlzg-ZkZ0InWIP25sgAAAQA"]
[Fri Apr 10 21:01:31.101683 2026] [:error] [pid 25984:tid 26013] [client 172.213.241.33:65042] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj0q7sdbY_MC14OH14SqAAAAVg"]
[Fri Apr 10 21:01:31.719322 2026] [:error] [pid 13189:tid 13199] [client 172.213.241.33:56436] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adj0q5AxiJKPums3eBCwAgAAAEc"]
[Fri Apr 10 21:01:32.513858 2026] [:error] [pid 13189:tid 13195] [client 172.213.241.33:12624] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj0rJAxiJKPums3eBCwBQAAAEM"]
[Fri Apr 10 21:01:33.274304 2026] [:error] [pid 13189:tid 13213] [client 172.213.241.33:32403] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj0rZAxiJKPums3eBCwCAAAAFU"]
[Fri Apr 10 21:01:33.893615 2026] [:error] [pid 13101:tid 13139] [client 172.213.241.33:65031] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj0rd8Ldw85818pj2rT9QAAAIY"]
[Fri Apr 10 21:01:34.728712 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:12632] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adj0roa41m-BS8mg82fgpgAAANM"]
[Fri Apr 10 21:01:35.363989 2026] [:error] [pid 13101:tid 13143] [client 172.213.241.33:35135] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj0r98Ldw85818pj2rT_wAAAIo"]
[Fri Apr 10 21:01:36.420660 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:35088] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj0sLsdbY_MC14OH14SrwAAAU0"]
[Fri Apr 10 21:01:37.127836 2026] [:error] [pid 3934:tid 3953] [client 172.213.241.33:21111] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj0sYa41m-BS8mg82fgrAAAAM4"]
[Fri Apr 10 21:01:37.842912 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:46607] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adj0sZAxiJKPums3eBCwFAAAAEE"]
[Fri Apr 10 21:01:38.799900 2026] [:error] [pid 13101:tid 13134] [client 172.213.241.33:35129] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adj0st8Ldw85818pj2rUCQAAAIE"]
[Fri Apr 10 21:01:39.428849 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:35840] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adj0s7sdbY_MC14OH14SsgAAAVU"]
[Fri Apr 10 21:01:40.282703 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:35844] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adj0tJAxiJKPums3eBCwJwAAAFE"]
[Fri Apr 10 21:01:40.931040 2026] [:error] [pid 13102:tid 13163] [client 172.213.241.33:35083] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adj0tP9xLvjW2guI55a9jQAAAAM"]
[Fri Apr 10 21:01:41.552119 2026] [:error] [pid 13102:tid 13170] [client 172.213.241.33:35074] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adj0tf9xLvjW2guI55a9kAAAAAo"]
[Fri Apr 10 21:01:42.318086 2026] [:error] [pid 25984:tid 25995] [client 172.213.241.33:32427] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adj0trsdbY_MC14OH14SuAAAAUY"]
[Fri Apr 10 21:01:43.125595 2026] [:error] [pid 13189:tid 13216] [client 172.213.241.33:35109] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adj0t5AxiJKPums3eBCwMAAAAFg"]
[Fri Apr 10 21:01:43.930423 2026] [:error] [pid 25984:tid 26012] [client 172.213.241.33:26555] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adj0t7sdbY_MC14OH14SwwAAAVc"]
[Fri Apr 10 21:01:44.476150 2026] [:error] [pid 13102:tid 13179] [client 172.213.241.33:35852] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj0uP9xLvjW2guI55a9lAAAABM"]
[Fri Apr 10 21:01:44.963023 2026] [:error] [pid 13102:tid 13183] [client 172.213.241.33:12665] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj0uP9xLvjW2guI55a9mgAAABc"]
[Fri Apr 10 21:01:45.691504 2026] [:error] [pid 13102:tid 13169] [client 172.213.241.33:51088] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj0uf9xLvjW2guI55a9ogAAAAk"]
[Fri Apr 10 21:01:46.394738 2026] [:error] [pid 13189:tid 13195] [client 172.213.241.33:65083] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adj0upAxiJKPums3eBCwNQAAAEM"]
[Fri Apr 10 21:01:47.189164 2026] [:error] [pid 13102:tid 13160] [client 172.213.241.33:65112] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj0u_9xLvjW2guI55a9rwAAAAA"]
[Fri Apr 10 21:01:47.820125 2026] [:error] [pid 13102:tid 13164] [client 172.213.241.33:35128] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj0u_9xLvjW2guI55a9sgAAAAQ"]
[Fri Apr 10 21:01:48.446548 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:13621] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj0vLsdbY_MC14OH14SzgAAAU4"]
[Fri Apr 10 21:01:49.066735 2026] [:error] [pid 13101:tid 13148] [client 172.213.241.33:51091] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adj0vd8Ldw85818pj2rUIQAAAI8"]
[Fri Apr 10 21:01:49.616910 2026] [:error] [pid 13101:tid 13140] [client 172.213.241.33:25939] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj0vd8Ldw85818pj2rUJAAAAIc"]
[Fri Apr 10 21:01:50.183951 2026] [:error] [pid 13100:tid 13110] [client 172.213.241.33:35155] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj0vlzg-ZkZ0InWIP252QAAAQU"]
[Fri Apr 10 21:01:50.892893 2026] [:error] [pid 13189:tid 13193] [client 172.213.241.33:33859] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj0vpAxiJKPums3eBCwQwAAAEE"]
[Fri Apr 10 21:01:51.542585 2026] [:error] [pid 13102:tid 13171] [client 172.213.241.33:12626] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adj0v_9xLvjW2guI55a9xgAAAAs"]
[Fri Apr 10 21:01:52.301650 2026] [:error] [pid 13189:tid 13198] [client 172.213.241.33:29283] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0wJAxiJKPums3eBCwSAAAAEY"]
[Fri Apr 10 21:01:53.026186 2026] [:error] [pid 13102:tid 13175] [client 172.213.241.33:35142] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0wf9xLvjW2guI55a90QAAAA8"]
[Fri Apr 10 21:01:53.655622 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:33856] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0wf9xLvjW2guI55a91gAAAAc"]
[Fri Apr 10 21:01:54.169771 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:21103] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0wv9xLvjW2guI55a92gAAAAI"]
[Fri Apr 10 21:01:54.836698 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:15901] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adj0wv9xLvjW2guI55a94AAAAAY"]
[Fri Apr 10 21:01:55.435558 2026] [:error] [pid 13100:tid 13124] [client 172.213.241.33:65032] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adj0w1zg-ZkZ0InWIP255QAAARM"]
[Fri Apr 10 21:01:56.031735 2026] [:error] [pid 13102:tid 13170] [client 172.213.241.33:13611] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adj0xP9xLvjW2guI55a94wAAAAo"]
[Fri Apr 10 21:01:56.588789 2026] [:error] [pid 25984:tid 26004] [client 172.213.241.33:32387] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adj0xLsdbY_MC14OH14S2QAAAU8"]
[Fri Apr 10 21:01:57.114023 2026] [:error] [pid 13102:tid 13174] [client 172.213.241.33:51120] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adj0xf9xLvjW2guI55a96AAAAA4"]
[Fri Apr 10 21:01:57.749738 2026] [:error] [pid 13101:tid 13135] [client 172.213.241.33:12649] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adj0xd8Ldw85818pj2rUMgAAAII"]
[Fri Apr 10 21:01:58.547012 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:32429] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adj0xv9xLvjW2guI55a96wAAABg"]
[Fri Apr 10 21:01:59.065156 2026] [:error] [pid 13101:tid 13139] [client 172.213.241.33:56385] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adj0x98Ldw85818pj2rUNAAAAIY"]
[Fri Apr 10 21:01:59.703307 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:59423] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0x7sdbY_MC14OH14S5wAAAVU"]
[Fri Apr 10 21:02:00.193786 2026] [:error] [pid 13101:tid 13142] [client 172.213.241.33:32409] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0yN8Ldw85818pj2rUOAAAAIk"]
[Fri Apr 10 21:02:00.844159 2026] [:error] [pid 13101:tid 13154] [client 172.213.241.33:65096] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0yN8Ldw85818pj2rUOwAAAJU"]
[Fri Apr 10 21:02:01.431881 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:26545] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adj0yf9xLvjW2guI55a99wAAAAc"]
[Fri Apr 10 21:02:02.125734 2026] [:error] [pid 13100:tid 13106] [client 172.213.241.33:51094] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adj0ylzg-ZkZ0InWIP257wAAAQE"]
[Fri Apr 10 21:02:02.728482 2026] [:error] [pid 13100:tid 13115] [client 172.213.241.33:12615] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adj0ylzg-ZkZ0InWIP259AAAAQo"]
[Fri Apr 10 21:02:03.531528 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:35847] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adj0y_9xLvjW2guI55a9_AAAABQ"]
[Fri Apr 10 21:02:04.272202 2026] [:error] [pid 25984:tid 25989] [client 172.213.241.33:56421] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adj0zLsdbY_MC14OH14S9QAAAUA"]
[Fri Apr 10 21:02:04.831137 2026] [:error] [pid 25984:tid 25998] [client 172.213.241.33:51112] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj0zLsdbY_MC14OH14S_AAAAUk"]
[Fri Apr 10 21:02:05.500396 2026] [:error] [pid 3934:tid 3947] [client 172.213.241.33:13863] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj0zYa41m-BS8mg82fg1gAAAMg"]
[Fri Apr 10 21:02:06.683336 2026] [:error] [pid 13101:tid 13142] [client 172.213.241.33:38007] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj0zt8Ldw85818pj2rURQAAAIk"]
[Fri Apr 10 21:02:07.600415 2026] [:error] [pid 25984:tid 25999] [client 172.213.241.33:37137] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adj0z7sdbY_MC14OH14TDAAAAUo"]
[Fri Apr 10 21:02:08.358138 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:41902] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adj00LsdbY_MC14OH14TEgAAAU4"]
[Fri Apr 10 21:02:09.113189 2026] [:error] [pid 13189:tid 13208] [client 172.213.241.33:32393] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adj00ZAxiJKPums3eBCwVAAAAFA"]
[Fri Apr 10 21:02:09.763060 2026] [:error] [pid 13189:tid 13195] [client 172.213.241.33:25942] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adj00ZAxiJKPums3eBCwWwAAAEM"]
[Fri Apr 10 21:02:10.525838 2026] [:error] [pid 25984:tid 26009] [client 172.213.241.33:15965] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adj00rsdbY_MC14OH14TGQAAAVQ"]
[Fri Apr 10 21:02:11.190573 2026] [:error] [pid 25984:tid 25998] [client 172.213.241.33:16175] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj007sdbY_MC14OH14THwAAAUk"]
[Fri Apr 10 21:02:11.803178 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:21440] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj005AxiJKPums3eBCwZwAAAFE"]
[Fri Apr 10 21:02:12.421164 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:40533] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj01LsdbY_MC14OH14TJQAAAU0"]
[Fri Apr 10 21:02:12.989956 2026] [:error] [pid 25984:tid 26013] [client 172.213.241.33:20254] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj01LsdbY_MC14OH14TJwAAAVg"]
[Fri Apr 10 21:02:13.629551 2026] [:error] [pid 3934:tid 3942] [client 172.213.241.33:41888] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adj01Ya41m-BS8mg82fg3wAAAMM"]
[Fri Apr 10 21:02:14.285102 2026] [:error] [pid 13189:tid 13199] [client 172.213.241.33:60690] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adj01pAxiJKPums3eBCwcQAAAEc"]
[Fri Apr 10 21:02:14.831057 2026] [:error] [pid 3934:tid 3952] [client 172.213.241.33:28689] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adj01oa41m-BS8mg82fg5wAAAM0"]
[Fri Apr 10 21:02:15.300054 2026] [:error] [pid 13101:tid 13144] [client 172.213.241.33:14179] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adj0198Ldw85818pj2rUVwAAAIs"]
[Fri Apr 10 21:02:15.863728 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:27166] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adj01_9xLvjW2guI55a-DgAAAAY"]
[Fri Apr 10 21:02:16.415047 2026] [:error] [pid 25984:tid 26005] [client 172.213.241.33:15424] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adj02LsdbY_MC14OH14TNAAAAVA"]
[Fri Apr 10 21:02:16.974749 2026] [:error] [pid 25984:tid 25990] [client 172.213.241.33:63926] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adj02LsdbY_MC14OH14TOAAAAUE"]
[Fri Apr 10 21:02:17.474992 2026] [:error] [pid 13101:tid 13157] [client 172.213.241.33:64426] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adj02d8Ldw85818pj2rUYwAAAJg"]
[Fri Apr 10 21:02:18.081387 2026] [:error] [pid 13102:tid 13161] [client 172.213.241.33:55744] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Apr 10 21:02:18.318202 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:55744] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Fri Apr 10 21:02:18.552799 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:55744] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Fri Apr 10 21:02:19.031783 2026] [:error] [pid 13102:tid 13177] [client 172.213.241.33:55744] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri Apr 10 21:02:19.504430 2026] [:error] [pid 13102:tid 13182] [client 172.213.241.33:55744] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Fri Apr 10 21:02:19.742797 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:55744] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 10 21:02:20.217585 2026] [:error] [pid 13102:tid 13183] [client 172.213.241.33:55744] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Fri Apr 10 21:02:20.688834 2026] [:error] [pid 13102:tid 13160] [client 172.213.241.33:55744] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adj03P9xLvjW2guI55a-IAAAAAA"]
[Fri Apr 10 21:02:21.157268 2026] [:error] [pid 13102:tid 13164] [client 172.213.241.33:63302] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adj03f9xLvjW2guI55a-IQAAAAQ"]
[Fri Apr 10 21:02:21.659978 2026] [:error] [pid 13102:tid 13174] [client 172.213.241.33:55774] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adj03f9xLvjW2guI55a-IgAAAA4"]
[Fri Apr 10 21:02:22.191993 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:31854] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adj03rsdbY_MC14OH14TYQAAAVU"]
[Fri Apr 10 21:02:22.704487 2026] [:error] [pid 25984:tid 25997] [client 172.213.241.33:39107] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adj03rsdbY_MC14OH14TZgAAAUg"]
[Fri Apr 10 21:02:23.193044 2026] [:error] [pid 25984:tid 26011] [client 172.213.241.33:26545] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adj037sdbY_MC14OH14TcAAAAVY"]
[Fri Apr 10 21:02:23.734176 2026] [:error] [pid 25984:tid 25998] [client 172.213.241.33:18525] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adj037sdbY_MC14OH14TdAAAAUk"]
[Fri Apr 10 21:02:24.190972 2026] [:error] [pid 3934:tid 3962] [client 172.213.241.33:63291] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adj04Ia41m-BS8mg82fg9AAAANc"]
[Fri Apr 10 21:02:24.666937 2026] [:error] [pid 25984:tid 25989] [client 172.213.241.33:15411] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adj04LsdbY_MC14OH14TfAAAAUA"]
[Fri Apr 10 21:02:25.156832 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:63303] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adj04bsdbY_MC14OH14TfgAAAU0"]
[Fri Apr 10 21:02:25.644579 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:39138] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adj04bsdbY_MC14OH14TggAAAU4"]
[Fri Apr 10 21:02:26.154116 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:37953] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adj04v9xLvjW2guI55a-KQAAABA"]
[Fri Apr 10 21:02:26.645921 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:22890] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adj04oa41m-BS8mg82fg-gAAAMc"]
[Fri Apr 10 21:02:27.119877 2026] [:error] [pid 13102:tid 13171] [client 172.213.241.33:15409] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adj04_9xLvjW2guI55a-LAAAAAs"]
[Fri Apr 10 21:02:27.627244 2026] [:error] [pid 13189:tid 13197] [client 172.213.241.33:28675] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adj045AxiJKPums3eBCwggAAAEU"]
[Fri Apr 10 21:02:28.111039 2026] [:error] [pid 13189:tid 13204] [client 172.213.241.33:57049] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adj05JAxiJKPums3eBCwhAAAAEw"]
[Fri Apr 10 21:02:28.572931 2026] [:error] [pid 3934:tid 3949] [client 172.213.241.33:63349] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adj05Ia41m-BS8mg82fg_QAAAMo"]
[Fri Apr 10 21:02:29.104722 2026] [:error] [pid 13102:tid 13164] [client 172.213.241.33:19263] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adj05f9xLvjW2guI55a-MwAAAAQ"]
[Fri Apr 10 21:02:29.612150 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:55801] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adj05Ya41m-BS8mg82fhBwAAAMU"]
[Fri Apr 10 21:02:30.135266 2026] [:error] [pid 13189:tid 13209] [client 172.213.241.33:57070] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adj05pAxiJKPums3eBCwigAAAFE"]
[Fri Apr 10 21:02:30.707286 2026] [:error] [pid 13100:tid 13122] [client 172.213.241.33:19226] [client 172.213.241.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adj05lzg-ZkZ0InWIP26GwAAARE"]
[Fri Apr 10 21:02:31.208906 2026] [:error] [pid 3934:tid 3959] [client 172.213.241.33:7568] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adj054a41m-BS8mg82fhDAAAANQ"]
[Fri Apr 10 21:02:31.743623 2026] [:error] [pid 13100:tid 13118] [client 172.213.241.33:15117] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adj051zg-ZkZ0InWIP26HgAAAQ0"]
[Fri Apr 10 21:02:32.201209 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:55797] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adj06Ia41m-BS8mg82fhDgAAAMA"]
[Fri Apr 10 21:02:32.719000 2026] [:error] [pid 13100:tid 13108] [client 172.213.241.33:35926] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adj06Fzg-ZkZ0InWIP26HwAAAQM"]
[Fri Apr 10 21:02:33.184219 2026] [:error] [pid 13100:tid 13106] [client 172.213.241.33:35962] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adj06Vzg-ZkZ0InWIP26IQAAAQE"]
[Fri Apr 10 21:02:33.679132 2026] [:error] [pid 13100:tid 13111] [client 172.213.241.33:55755] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adj06Vzg-ZkZ0InWIP26IwAAAQY"]
[Fri Apr 10 21:02:34.163089 2026] [:error] [pid 13102:tid 13173] [client 172.213.241.33:15408] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adj06v9xLvjW2guI55a-PAAAAA0"]
[Fri Apr 10 21:02:34.683975 2026] [:error] [pid 25984:tid 26005] [client 172.213.241.33:15120] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adj06rsdbY_MC14OH14TkgAAAVA"]
[Fri Apr 10 21:02:35.179876 2026] [:error] [pid 13102:tid 13175] [client 172.213.241.33:63254] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adj06_9xLvjW2guI55a-QAAAAA8"]
[Fri Apr 10 21:02:35.660105 2026] [:error] [pid 13101:tid 13157] [client 172.213.241.33:18279] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adj0698Ldw85818pj2rUfwAAAJg"]
[Fri Apr 10 21:02:36.179966 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:18545] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adj07Ia41m-BS8mg82fhGwAAAMU"]
[Fri Apr 10 21:02:36.693742 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:31794] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "adj07Ia41m-BS8mg82fhHAAAANI"]
[Fri Apr 10 21:02:37.197163 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:14960] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "adj07Ya41m-BS8mg82fhHwAAAMI"]
[Fri Apr 10 21:02:37.720580 2026] [:error] [pid 13101:tid 13149] [client 172.213.241.33:18526] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "adj07d8Ldw85818pj2rUhAAAAJA"]
[Fri Apr 10 21:02:38.184520 2026] [:error] [pid 3934:tid 3946] [client 172.213.241.33:18256] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prv8.php"] [unique_id "adj07oa41m-BS8mg82fhJAAAAMc"]
[Fri Apr 10 21:02:38.772038 2026] [:error] [pid 13101:tid 13156] [client 172.213.241.33:22200] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "adj07t8Ldw85818pj2rUhgAAAJc"]
[Fri Apr 10 21:02:39.257435 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:57065] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "adj077sdbY_MC14OH14TnQAAAU0"]
[Fri Apr 10 21:02:39.726520 2026] [:error] [pid 13101:tid 13139] [client 172.213.241.33:57063] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "adj0798Ldw85818pj2rUiwAAAIY"]
[Fri Apr 10 21:02:40.196977 2026] [:error] [pid 3934:tid 3944] [client 172.213.241.33:22870] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "adj08Ia41m-BS8mg82fhKAAAAMU"]
[Fri Apr 10 21:02:40.690530 2026] [:error] [pid 13189:tid 13201] [client 172.213.241.33:22206] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "adj08JAxiJKPums3eBCwoAAAAEk"]
[Fri Apr 10 21:02:41.188602 2026] [:error] [pid 25984:tid 26009] [client 172.213.241.33:19260] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "adj08bsdbY_MC14OH14TnwAAAVQ"]
[Fri Apr 10 21:02:41.705382 2026] [:error] [pid 13102:tid 13160] [client 172.213.241.33:57041] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "adj08f9xLvjW2guI55a-SwAAAAA"]
[Fri Apr 10 21:02:42.195423 2026] [:error] [pid 13102:tid 13183] [client 172.213.241.33:55750] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "adj08v9xLvjW2guI55a-TwAAABc"]
[Fri Apr 10 21:02:42.685974 2026] [:error] [pid 13102:tid 13181] [client 172.213.241.33:15157] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "adj08v9xLvjW2guI55a-VAAAABU"]
[Fri Apr 10 21:02:43.201207 2026] [:error] [pid 25984:tid 26010] [client 172.213.241.33:15167] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "adj087sdbY_MC14OH14TpgAAAVU"]
[Fri Apr 10 21:02:43.712054 2026] [:error] [pid 13102:tid 13171] [client 172.213.241.33:63343] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "adj08_9xLvjW2guI55a-WQAAAAs"]
[Fri Apr 10 21:02:44.189522 2026] [:error] [pid 13100:tid 13127] [client 172.213.241.33:24461] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "adj09Fzg-ZkZ0InWIP26KAAAARY"]
[Fri Apr 10 21:02:44.654992 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:7572] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "adj09Ia41m-BS8mg82fhNAAAANI"]
[Fri Apr 10 21:02:45.163882 2026] [:error] [pid 3934:tid 3945] [client 172.213.241.33:39132] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "adj09Ya41m-BS8mg82fhNgAAAMY"]
[Fri Apr 10 21:02:45.684671 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:63281] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "adj09Ya41m-BS8mg82fhOQAAANA"]
[Fri Apr 10 21:02:46.186174 2026] [:error] [pid 25984:tid 25997] [client 172.213.241.33:15405] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "adj09rsdbY_MC14OH14TrgAAAUg"]
[Fri Apr 10 21:02:46.653861 2026] [:error] [pid 25984:tid 25999] [client 172.213.241.33:17199] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adj09rsdbY_MC14OH14TswAAAUo"]
[Fri Apr 10 21:02:47.150098 2026] [:error] [pid 25984:tid 26005] [client 172.213.241.33:63246] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adj097sdbY_MC14OH14TuwAAAVA"]
[Fri Apr 10 21:02:47.624656 2026] [:error] [pid 13102:tid 13174] [client 172.213.241.33:63279] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adj09_9xLvjW2guI55a-bgAAAA4"]
[Fri Apr 10 21:02:48.096022 2026] [:error] [pid 13101:tid 13138] [client 172.213.241.33:18254] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adj0-N8Ldw85818pj2rUkQAAAIU"]
[Fri Apr 10 21:02:48.565214 2026] [:error] [pid 13101:tid 13155] [client 172.213.241.33:22857] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adj0-N8Ldw85818pj2rUkgAAAJY"]
[Fri Apr 10 21:02:49.112361 2026] [:error] [pid 13101:tid 13144] [client 172.213.241.33:14922] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adj0-d8Ldw85818pj2rUlAAAAIs"]
[Fri Apr 10 21:02:49.585761 2026] [:error] [pid 13189:tid 13199] [client 172.213.241.33:31745] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adj0-ZAxiJKPums3eBCwrQAAAEc"]
[Fri Apr 10 21:02:50.097440 2026] [:error] [pid 13102:tid 13172] [client 172.213.241.33:15404] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adj0-v9xLvjW2guI55a-fQAAAAw"]
[Fri Apr 10 21:02:50.615512 2026] [:error] [pid 25984:tid 25990] [client 172.213.241.33:22159] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "adj0-rsdbY_MC14OH14T0AAAAUE"]
[Fri Apr 10 21:02:51.082629 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:57044] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "adj0-_9xLvjW2guI55a-gAAAAAI"]
[Fri Apr 10 21:02:51.558497 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:35908] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "adj0-7sdbY_MC14OH14T1QAAAU4"]
[Fri Apr 10 21:02:52.050779 2026] [:error] [pid 25984:tid 25994] [client 172.213.241.33:19246] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "adj0_LsdbY_MC14OH14T2QAAAUU"]
[Fri Apr 10 21:02:52.568933 2026] [:error] [pid 25984:tid 26002] [client 172.213.241.33:58805] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adj0_LsdbY_MC14OH14T3gAAAU0"]
[Fri Apr 10 21:02:53.060221 2026] [:error] [pid 13102:tid 13169] [client 172.213.241.33:55753] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adj0_f9xLvjW2guI55a-hAAAAAk"]
[Fri Apr 10 21:02:53.545044 2026] [:error] [pid 13100:tid 13107] [client 172.213.241.33:15414] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adj0_Vzg-ZkZ0InWIP26KgAAAQI"]
[Fri Apr 10 21:02:54.041313 2026] [:error] [pid 13102:tid 13166] [client 172.213.241.33:15398] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "adj0_v9xLvjW2guI55a-jAAAAAY"]
[Fri Apr 10 21:02:54.510272 2026] [:error] [pid 13102:tid 13177] [client 172.213.241.33:35955] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj0_v9xLvjW2guI55a-kQAAABE"]
[Fri Apr 10 21:02:54.987948 2026] [:error] [pid 13189:tid 13200] [client 172.213.241.33:22153] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj0_pAxiJKPums3eBCwtgAAAEg"]
[Fri Apr 10 21:02:55.488735 2026] [:error] [pid 13102:tid 13172] [client 172.213.241.33:17160] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj0__9xLvjW2guI55a-mQAAAAw"]
[Fri Apr 10 21:02:55.986652 2026] [:error] [pid 13102:tid 13176] [client 172.213.241.33:63253] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adj0__9xLvjW2guI55a-ngAAABA"]
[Fri Apr 10 21:02:56.496180 2026] [:error] [pid 13102:tid 13180] [client 172.213.241.33:18278] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adj1AP9xLvjW2guI55a-oQAAABQ"]
[Fri Apr 10 21:02:57.031629 2026] [:error] [pid 13189:tid 13212] [client 172.213.241.33:55772] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adj1AZAxiJKPums3eBCwvAAAAFQ"]
[Fri Apr 10 21:02:57.566181 2026] [:error] [pid 13102:tid 13160] [client 172.213.241.33:7597] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adj1Af9xLvjW2guI55a-pQAAAAA"]
[Fri Apr 10 21:02:58.030793 2026] [:error] [pid 25984:tid 26007] [client 172.213.241.33:31797] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adj1ArsdbY_MC14OH14T4wAAAVI"]
[Fri Apr 10 21:02:58.543524 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:57073] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adj1ArsdbY_MC14OH14T5wAAAU4"]
[Fri Apr 10 21:02:59.063570 2026] [:error] [pid 13189:tid 13206] [client 172.213.241.33:39115] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adj1A5AxiJKPums3eBCwwQAAAE4"]
[Fri Apr 10 21:02:59.537315 2026] [:error] [pid 3934:tid 3948] [client 172.213.241.33:58785] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adj1A4a41m-BS8mg82fhSwAAAMk"]
[Fri Apr 10 21:03:00.026424 2026] [:error] [pid 3934:tid 3957] [client 172.213.241.33:31754] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adj1BIa41m-BS8mg82fhTAAAANI"]
[Fri Apr 10 21:03:00.515384 2026] [:error] [pid 13102:tid 13183] [client 172.213.241.33:7608] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adj1BP9xLvjW2guI55a-ugAAABc"]
[Fri Apr 10 21:03:01.010184 2026] [:error] [pid 13102:tid 13177] [client 172.213.241.33:39161] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adj1Bf9xLvjW2guI55a-wQAAABE"]
[Fri Apr 10 21:03:01.499033 2026] [:error] [pid 13102:tid 13168] [client 172.213.241.33:22145] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adj1Bf9xLvjW2guI55a-xQAAAAg"]
[Fri Apr 10 21:03:01.998303 2026] [:error] [pid 13102:tid 13175] [client 172.213.241.33:18296] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adj1Bf9xLvjW2guI55a-yQAAAA8"]
[Fri Apr 10 21:03:02.483401 2026] [:error] [pid 25984:tid 25990] [client 172.213.241.33:18512] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adj1BrsdbY_MC14OH14T8wAAAUE"]
[Fri Apr 10 21:03:02.977691 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:63238] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adj1BrsdbY_MC14OH14T9gAAAU4"]
[Fri Apr 10 21:03:03.444587 2026] [:error] [pid 25984:tid 26001] [client 172.213.241.33:7567] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adj1B7sdbY_MC14OH14T-AAAAUw"]
[Fri Apr 10 21:03:03.908184 2026] [:error] [pid 13100:tid 13117] [client 172.213.241.33:18287] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adj1B1zg-ZkZ0InWIP26KwAAAQw"]
[Fri Apr 10 21:03:04.439709 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:35957] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adj1CIa41m-BS8mg82fhTwAAAMI"]
[Fri Apr 10 21:03:04.944279 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:7575] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adj1CIa41m-BS8mg82fhUwAAAMA"]
[Fri Apr 10 21:03:05.407495 2026] [:error] [pid 13102:tid 13178] [client 172.213.241.33:14930] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adj1Cf9xLvjW2guI55a-1AAAABI"]
[Fri Apr 10 21:03:05.891369 2026] [:error] [pid 13102:tid 13163] [client 172.213.241.33:35967] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adj1Cf9xLvjW2guI55a-1wAAAAM"]
[Fri Apr 10 21:03:06.351551 2026] [:error] [pid 13100:tid 13115] [client 172.213.241.33:63266] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adj1Clzg-ZkZ0InWIP26LQAAAQo"]
[Fri Apr 10 21:03:06.850008 2026] [:error] [pid 13189:tid 13215] [client 172.213.241.33:63255] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adj1CpAxiJKPums3eBCw0AAAAFc"]
[Fri Apr 10 21:03:07.335510 2026] [:error] [pid 3934:tid 3950] [client 172.213.241.33:31865] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adj1C4a41m-BS8mg82fhWQAAAMs"]
[Fri Apr 10 21:03:07.811078 2026] [:error] [pid 3934:tid 3939] [client 172.213.241.33:14965] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adj1C4a41m-BS8mg82fhXAAAAMA"]
[Fri Apr 10 21:03:08.322698 2026] [:error] [pid 13102:tid 13162] [client 172.213.241.33:39112] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj1DP9xLvjW2guI55a-4AAAAAI"]
[Fri Apr 10 21:03:08.824065 2026] [:error] [pid 13102:tid 13163] [client 172.213.241.33:14934] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj1DP9xLvjW2guI55a-4wAAAAM"]
[Fri Apr 10 21:03:09.309313 2026] [:error] [pid 13102:tid 13168] [client 172.213.241.33:17187] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj1Df9xLvjW2guI55a-5wAAAAg"]
[Fri Apr 10 21:03:09.788578 2026] [:error] [pid 13189:tid 13196] [client 172.213.241.33:35919] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adj1DZAxiJKPums3eBCw2AAAAEQ"]
[Fri Apr 10 21:03:10.290213 2026] [:error] [pid 13101:tid 13136] [client 172.213.241.33:15122] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adj1Dt8Ldw85818pj2rUqgAAAIM"]
[Fri Apr 10 21:03:10.768365 2026] [:error] [pid 25984:tid 26004] [client 172.213.241.33:22159] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adj1DrsdbY_MC14OH14UCQAAAU8"]
[Fri Apr 10 21:03:11.280814 2026] [:error] [pid 3934:tid 3955] [client 172.213.241.33:15407] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adj1D4a41m-BS8mg82fhZgAAANA"]
[Fri Apr 10 21:03:11.768385 2026] [:error] [pid 13102:tid 13170] [client 172.213.241.33:55758] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adj1D_9xLvjW2guI55a-8AAAAAo"]
[Fri Apr 10 21:03:12.261847 2026] [:error] [pid 25984:tid 26009] [client 172.213.241.33:18283] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adj1ELsdbY_MC14OH14UDAAAAVQ"]
[Fri Apr 10 21:03:12.753775 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:39145] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adj1EP9xLvjW2guI55a-9QAAAAc"]
[Fri Apr 10 21:03:13.236552 2026] [:error] [pid 25984:tid 25998] [client 172.213.241.33:39128] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adj1EbsdbY_MC14OH14UEwAAAUk"]
[Fri Apr 10 21:03:13.716799 2026] [:error] [pid 13102:tid 13174] [client 172.213.241.33:7563] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adj1Ef9xLvjW2guI55a-9gAAAA4"]
[Fri Apr 10 21:03:14.187936 2026] [:error] [pid 3934:tid 3958] [client 172.213.241.33:55800] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adj1Eoa41m-BS8mg82fhbgAAANM"]
[Fri Apr 10 21:03:14.723793 2026] [:error] [pid 13102:tid 13163] [client 172.213.241.33:55748] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adj1Ev9xLvjW2guI55a--wAAAAM"]
[Fri Apr 10 21:03:15.189096 2026] [:error] [pid 13189:tid 13211] [client 172.213.241.33:57071] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adj1E5AxiJKPums3eBCw6wAAAFM"]
[Fri Apr 10 21:03:15.717055 2026] [:error] [pid 13100:tid 13126] [client 172.213.241.33:39151] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adj1E1zg-ZkZ0InWIP26NQAAARU"]
[Fri Apr 10 21:03:16.184007 2026] [:error] [pid 13100:tid 13107] [client 172.213.241.33:55761] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adj1FFzg-ZkZ0InWIP26NwAAAQI"]
[Fri Apr 10 21:03:16.671305 2026] [:error] [pid 13101:tid 13152] [client 172.213.241.33:31759] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adj1FN8Ldw85818pj2rUrAAAAJM"]
[Fri Apr 10 21:03:17.147964 2026] [:error] [pid 13102:tid 13184] [client 172.213.241.33:14974] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adj1Ff9xLvjW2guI55a_CwAAABg"]
[Fri Apr 10 21:03:17.622633 2026] [:error] [pid 13100:tid 13125] [client 172.213.241.33:15412] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adj1FVzg-ZkZ0InWIP26OAAAARQ"]
[Fri Apr 10 21:03:18.102190 2026] [:error] [pid 13102:tid 13167] [client 172.213.241.33:14950] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adj1Fv9xLvjW2guI55a_DwAAAAc"]
[Fri Apr 10 21:03:18.589037 2026] [:error] [pid 3934:tid 3941] [client 172.213.241.33:15148] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adj1Foa41m-BS8mg82fhdwAAAMI"]
[Fri Apr 10 21:03:19.088135 2026] [:error] [pid 3934:tid 3954] [client 172.213.241.33:63232] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adj1F4a41m-BS8mg82fhegAAAM8"]
[Fri Apr 10 21:03:19.560217 2026] [:error] [pid 3934:tid 3960] [client 172.213.241.33:57027] [client 172.213.241.33] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adj1F4a41m-BS8mg82fhfQAAANU"]
[Fri Apr 10 21:03:20.100105 2026] [:error] [pid 25984:tid 25994] [client 172.213.241.33:22169] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Fri Apr 10 21:03:20.335665 2026] [:error] [pid 25984:tid 26013] [client 172.213.241.33:22169] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Fri Apr 10 21:03:20.574913 2026] [:error] [pid 25984:tid 25992] [client 172.213.241.33:22169] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 10 21:03:20.809156 2026] [:error] [pid 25984:tid 26006] [client 172.213.241.33:22169] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Fri Apr 10 21:03:21.043344 2026] [:error] [pid 25984:tid 25995] [client 172.213.241.33:22169] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 10 21:03:21.278097 2026] [:error] [pid 25984:tid 26003] [client 172.213.241.33:22169] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 10 21:32:54.608670 2026] [:error] [pid 62884:tid 62909] [client 43.159.143.139:36068] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adj8BuUCK1xrhnnmpo2DDQAAAtI"]
[Fri Apr 10 22:22:43.291938 2026] [:error] [pid 62710:tid 62725] [client 182.44.12.37:44416] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adkHs-ME7qrf5xEWWJspVQAAAgw"]
[Sat Apr 11 01:23:44.462686 2026] [:error] [pid 21568:tid 21572] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Sat Apr 11 01:23:44.696535 2026] [:error] [pid 21568:tid 21583] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sat Apr 11 01:23:44.931268 2026] [:error] [pid 21568:tid 21589] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sat Apr 11 01:23:45.165349 2026] [:error] [pid 21568:tid 21595] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sat Apr 11 01:23:45.399530 2026] [:error] [pid 21568:tid 21586] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Sat Apr 11 01:23:45.632307 2026] [:error] [pid 21568:tid 21580] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 11 01:23:45.872935 2026] [:error] [pid 21568:tid 21584] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Sat Apr 11 01:23:46.105889 2026] [:error] [pid 21568:tid 21573] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sat Apr 11 01:23:46.338757 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Sat Apr 11 01:23:46.572012 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:23492] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Sat Apr 11 01:23:46.802340 2026] [:error] [pid 21568:tid 21594] [client 72.146.30.147:23492] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adkyIoiz5v_ljZxkpR-1PwAAARY"]
[Sat Apr 11 01:23:47.270958 2026] [:error] [pid 21570:tid 21687] [client 72.146.30.147:58201] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adkyIzKs5t9xRSNL6cm1NAAAAE0"]
[Sat Apr 11 01:23:47.754280 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:24132] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adkyIzKs5t9xRSNL6cm1NgAAAEw"]
[Sat Apr 11 01:23:48.240097 2026] [:error] [pid 21570:tid 21670] [client 72.146.30.147:37903] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adkyJDKs5t9xRSNL6cm1OgAAAEQ"]
[Sat Apr 11 01:23:48.714729 2026] [:error] [pid 21570:tid 21682] [client 72.146.30.147:37938] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "adkyJDKs5t9xRSNL6cm1PQAAAEs"]
[Sat Apr 11 01:23:49.197185 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:23519] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "adkyJTKs5t9xRSNL6cm1QQAAAEE"]
[Sat Apr 11 01:23:49.668944 2026] [:error] [pid 21706:tid 21710] [client 72.146.30.147:23548] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "adkyJSGQ1M5d8fQSsLGNVgAAAAI"]
[Sat Apr 11 01:23:50.151613 2026] [:error] [pid 21568:tid 21586] [client 72.146.30.147:38595] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "adkyJoiz5v_ljZxkpR-1RwAAAQ4"]
[Sat Apr 11 01:23:50.776952 2026] [:error] [pid 55451:tid 55457] [client 72.146.30.147:24168] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adkyJnApxuyB7yCS5Rnl6AAAAMQ"]
[Sat Apr 11 01:23:51.264704 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:61317] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adkyJ3ApxuyB7yCS5Rnl7gAAAM8"]
[Sat Apr 11 01:23:51.813404 2026] [:error] [pid 55451:tid 55473] [client 72.146.30.147:23497] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adkyJ3ApxuyB7yCS5Rnl9AAAANQ"]
[Sat Apr 11 01:23:52.291708 2026] [:error] [pid 55451:tid 55471] [client 72.146.30.147:65078] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adkyKHApxuyB7yCS5Rnl-gAAANI"]
[Sat Apr 11 01:23:52.763718 2026] [:error] [pid 21569:tid 21649] [client 72.146.30.147:23494] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "adkyKHAvQTgvXJ6vHoqL9gAAAIQ"]
[Sat Apr 11 01:23:53.226002 2026] [:error] [pid 21569:tid 21669] [client 72.146.30.147:38624] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "adkyKXAvQTgvXJ6vHoqL-gAAAJI"]
[Sat Apr 11 01:23:53.707379 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:38626] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "adkyKSGQ1M5d8fQSsLGNXQAAAA0"]
[Sat Apr 11 01:23:54.188578 2026] [:error] [pid 21706:tid 21717] [client 72.146.30.147:37889] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "adkyKiGQ1M5d8fQSsLGNYwAAAAk"]
[Sat Apr 11 01:23:54.660768 2026] [:error] [pid 21570:tid 21673] [client 72.146.30.147:24163] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adkyKjKs5t9xRSNL6cm1TAAAAEY"]
[Sat Apr 11 01:23:55.127786 2026] [:error] [pid 55451:tid 55462] [client 72.146.30.147:65050] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adkyK3ApxuyB7yCS5RnmAgAAAMk"]
[Sat Apr 11 01:23:55.610745 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:22195] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adkyK4iz5v_ljZxkpR-1UAAAARU"]
[Sat Apr 11 01:23:56.079399 2026] [:error] [pid 55451:tid 55453] [client 72.146.30.147:24173] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "adkyLHApxuyB7yCS5RnmBAAAAMA"]
[Sat Apr 11 01:23:56.553266 2026] [:error] [pid 21706:tid 21714] [client 72.146.30.147:22181] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adkyLCGQ1M5d8fQSsLGNagAAAAY"]
[Sat Apr 11 01:23:57.022878 2026] [:error] [pid 55451:tid 55473] [client 72.146.30.147:58202] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adkyLXApxuyB7yCS5RnmEQAAANQ"]
[Sat Apr 11 01:23:57.482401 2026] [:error] [pid 21706:tid 21711] [client 72.146.30.147:61350] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adkyLSGQ1M5d8fQSsLGNbAAAAAM"]
[Sat Apr 11 01:23:57.949602 2026] [:error] [pid 21568:tid 21587] [client 72.146.30.147:38653] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "adkyLYiz5v_ljZxkpR-1XQAAAQ8"]
[Sat Apr 11 01:23:58.422030 2026] [:error] [pid 21568:tid 21582] [client 72.146.30.147:38649] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "adkyLoiz5v_ljZxkpR-1YQAAAQo"]
[Sat Apr 11 01:23:58.894573 2026] [:error] [pid 21568:tid 21579] [client 72.146.30.147:22150] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "adkyLoiz5v_ljZxkpR-1ZgAAAQc"]
[Sat Apr 11 01:23:59.366087 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:58831] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "adkyL3AvQTgvXJ6vHoqMCQAAAJQ"]
[Sat Apr 11 01:23:59.861786 2026] [:error] [pid 21706:tid 21713] [client 72.146.30.147:61362] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "adkyLyGQ1M5d8fQSsLGNcAAAAAU"]
[Sat Apr 11 01:24:00.327366 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:37892] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adkyMCGQ1M5d8fQSsLGNcwAAABI"]
[Sat Apr 11 01:24:00.812365 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:58220] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adkyMCGQ1M5d8fQSsLGNeAAAABA"]
[Sat Apr 11 01:24:01.279776 2026] [:error] [pid 21569:tid 21648] [client 72.146.30.147:23549] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adkyMXAvQTgvXJ6vHoqMDAAAAIM"]
[Sat Apr 11 01:24:01.767655 2026] [:error] [pid 21568:tid 21594] [client 72.146.30.147:65030] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adkyMYiz5v_ljZxkpR-1bgAAARY"]
[Sat Apr 11 01:24:02.251190 2026] [:error] [pid 55451:tid 55455] [client 72.146.30.147:37925] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "adkyMnApxuyB7yCS5RnmPQAAAMI"]
[Sat Apr 11 01:24:02.729882 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:24128] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "adkyMoiz5v_ljZxkpR-1cQAAARU"]
[Sat Apr 11 01:24:03.202188 2026] [:error] [pid 21569:tid 21646] [client 72.146.30.147:22168] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "adkyM3AvQTgvXJ6vHoqMEQAAAIE"]
[Sat Apr 11 01:24:03.686976 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:37901] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "adkyMzKs5t9xRSNL6cm1YAAAAEo"]
[Sat Apr 11 01:24:04.170589 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:24189] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adkyNHApxuyB7yCS5RnmRwAAANU"]
[Sat Apr 11 01:24:04.637051 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:58231] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adkyNIiz5v_ljZxkpR-1egAAARQ"]
[Sat Apr 11 01:24:05.581845 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:37928] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adkyNSGQ1M5d8fQSsLGNgQAAAA0"]
[Sat Apr 11 01:24:06.068582 2026] [:error] [pid 21706:tid 21714] [client 72.146.30.147:24190] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adkyNiGQ1M5d8fQSsLGNgwAAAAY"]
[Sat Apr 11 01:24:06.764838 2026] [:error] [pid 21570:tid 21695] [client 72.146.30.147:24172] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "adkyNjKs5t9xRSNL6cm1ZQAAAFU"]
[Sat Apr 11 01:24:07.304548 2026] [:error] [pid 21570:tid 21691] [client 72.146.30.147:65069] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "adkyNzKs5t9xRSNL6cm1ZwAAAFE"]
[Sat Apr 11 01:24:08.068159 2026] [:error] [pid 21706:tid 21725] [client 72.146.30.147:22159] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "adkyOCGQ1M5d8fQSsLGNhgAAABE"]
[Sat Apr 11 01:24:08.547351 2026] [:error] [pid 55451:tid 55469] [client 72.146.30.147:58178] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "adkyOHApxuyB7yCS5RnmUgAAANA"]
[Sat Apr 11 01:24:09.026133 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:23541] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "adkyOTKs5t9xRSNL6cm1bQAAAEw"]
[Sat Apr 11 01:24:09.529805 2026] [:error] [pid 21569:tid 21651] [client 72.146.30.147:58834] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "adkyOXAvQTgvXJ6vHoqMGQAAAIY"]
[Sat Apr 11 01:24:10.008053 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:65060] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "adkyOiGQ1M5d8fQSsLGNjgAAABA"]
[Sat Apr 11 01:24:10.492913 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:37893] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "adkyOnApxuyB7yCS5RnmXAAAAMM"]
[Sat Apr 11 01:24:11.088946 2026] [:error] [pid 21568:tid 21583] [client 72.146.30.147:37935] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "adkyO4iz5v_ljZxkpR-1jQAAAQs"]
[Sat Apr 11 01:24:11.558740 2026] [:error] [pid 21570:tid 21670] [client 72.146.30.147:37910] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "adkyOzKs5t9xRSNL6cm1cAAAAEQ"]
[Sat Apr 11 01:24:12.028815 2026] [:error] [pid 21706:tid 21717] [client 72.146.30.147:38643] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "adkyPCGQ1M5d8fQSsLGNlAAAAAk"]
[Sat Apr 11 01:24:12.499203 2026] [:error] [pid 21706:tid 21714] [client 72.146.30.147:38652] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "adkyPCGQ1M5d8fQSsLGNlgAAAAY"]
[Sat Apr 11 01:24:12.967149 2026] [:error] [pid 21706:tid 21711] [client 72.146.30.147:24140] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkyPCGQ1M5d8fQSsLGNmwAAAAM"]
[Sat Apr 11 01:24:13.430175 2026] [:error] [pid 21570:tid 21688] [client 72.146.30.147:22193] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkyPTKs5t9xRSNL6cm1dQAAAE4"]
[Sat Apr 11 01:24:13.901962 2026] [:error] [pid 55451:tid 55454] [client 72.146.30.147:22192] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkyPXApxuyB7yCS5RnmbgAAAME"]
[Sat Apr 11 01:24:14.446202 2026] [:error] [pid 21568:tid 21594] [client 72.146.30.147:22164] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkyPoiz5v_ljZxkpR-1kwAAARY"]
[Sat Apr 11 01:24:14.950886 2026] [:error] [pid 21569:tid 21654] [client 72.146.30.147:58218] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adkyPnAvQTgvXJ6vHoqMGwAAAIk"]
[Sat Apr 11 01:24:15.409754 2026] [:error] [pid 55451:tid 55466] [client 72.146.30.147:58222] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adkyP3ApxuyB7yCS5RnmdwAAAM0"]
[Sat Apr 11 01:24:15.889599 2026] [:error] [pid 21569:tid 21660] [client 72.146.30.147:22153] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adkyP3AvQTgvXJ6vHoqMHwAAAI4"]
[Sat Apr 11 01:24:16.511485 2026] [:error] [pid 21706:tid 21731] [client 72.146.30.147:58230] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adkyQCGQ1M5d8fQSsLGNqQAAABc"]
[Sat Apr 11 01:24:17.961302 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:65047] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "adkyQYiz5v_ljZxkpR-1mQAAARI"]
[Sat Apr 11 01:24:18.432943 2026] [:error] [pid 21569:tid 21648] [client 72.146.30.147:22194] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "adkyQnAvQTgvXJ6vHoqMIwAAAIM"]
[Sat Apr 11 01:24:18.903459 2026] [:error] [pid 21568:tid 21578] [client 72.146.30.147:24133] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "adkyQoiz5v_ljZxkpR-1nQAAAQY"]
[Sat Apr 11 01:24:19.372079 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:23518] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "adkyQ4iz5v_ljZxkpR-1ngAAARU"]
[Sat Apr 11 01:24:19.835798 2026] [:error] [pid 21569:tid 21651] [client 72.146.30.147:23527] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "adkyQ3AvQTgvXJ6vHoqMJgAAAIY"]
[Sat Apr 11 01:24:20.317841 2026] [:error] [pid 55451:tid 55471] [client 72.146.30.147:23525] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "adkyRHApxuyB7yCS5RnmjgAAANI"]
[Sat Apr 11 01:24:20.785148 2026] [:error] [pid 21570:tid 21698] [client 72.146.30.147:65084] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "adkyRDKs5t9xRSNL6cm1egAAAFg"]
[Sat Apr 11 01:24:21.249144 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:61359] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "adkyRSGQ1M5d8fQSsLGNtwAAABI"]
[Sat Apr 11 01:24:21.713033 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:58211] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkyRXAvQTgvXJ6vHoqMLQAAAJA"]
[Sat Apr 11 01:24:22.306572 2026] [:error] [pid 21569:tid 21667] [client 72.146.30.147:22152] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkyRnAvQTgvXJ6vHoqMMQAAAJE"]
[Sat Apr 11 01:24:22.769468 2026] [:error] [pid 21706:tid 21710] [client 72.146.30.147:23502] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkyRiGQ1M5d8fQSsLGNuwAAAAI"]
[Sat Apr 11 01:24:23.244998 2026] [:error] [pid 21568:tid 21573] [client 72.146.30.147:61349] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkyR4iz5v_ljZxkpR-1pQAAAQE"]
[Sat Apr 11 01:24:23.714260 2026] [:error] [pid 55451:tid 55463] [client 72.146.30.147:23535] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adkyR3ApxuyB7yCS5RnmnwAAAMo"]
[Sat Apr 11 01:24:24.441438 2026] [:error] [pid 21706:tid 21717] [client 72.146.30.147:23543] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adkySCGQ1M5d8fQSsLGNvwAAAAk"]
[Sat Apr 11 01:24:24.931452 2026] [:error] [pid 21706:tid 21709] [client 72.146.30.147:58210] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adkySCGQ1M5d8fQSsLGNwwAAAAE"]
[Sat Apr 11 01:24:25.578469 2026] [:error] [pid 21706:tid 21725] [client 72.146.30.147:65040] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "adkySSGQ1M5d8fQSsLGN1QAAABE"]
[Sat Apr 11 01:24:26.045308 2026] [:error] [pid 21568:tid 21575] [client 72.146.30.147:58215] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adkySoiz5v_ljZxkpR-1rQAAAQM"]
[Sat Apr 11 01:24:26.520180 2026] [:error] [pid 21568:tid 21572] [client 72.146.30.147:38621] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adkySoiz5v_ljZxkpR-1sAAAAQA"]
[Sat Apr 11 01:24:26.993332 2026] [:error] [pid 21568:tid 21582] [client 72.146.30.147:22199] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adkySoiz5v_ljZxkpR-1tgAAAQo"]
[Sat Apr 11 01:24:27.468781 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:22179] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "adkyS4iz5v_ljZxkpR-1uQAAARI"]
[Sat Apr 11 01:24:27.929072 2026] [:error] [pid 21570:tid 21691] [client 72.146.30.147:61357] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxivicLhot.php"] [unique_id "adkySzKs5t9xRSNL6cm1hgAAAFE"]
[Sat Apr 11 01:24:28.399978 2026] [:error] [pid 55451:tid 55467] [client 72.146.30.147:38607] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxivicLhot.php"] [unique_id "adkyTHApxuyB7yCS5RnmsAAAAM4"]
[Sat Apr 11 01:24:28.861304 2026] [:error] [pid 21706:tid 21723] [client 72.146.30.147:38645] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxivicLhot.php"] [unique_id "adkyTCGQ1M5d8fQSsLGOAgAAAA8"]
[Sat Apr 11 01:24:29.338694 2026] [:error] [pid 55451:tid 55472] [client 72.146.30.147:61313] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxivicLhot.php"] [unique_id "adkyTXApxuyB7yCS5RnmtQAAANM"]
[Sat Apr 11 01:24:29.800833 2026] [:error] [pid 21570:tid 21697] [client 72.146.30.147:65066] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "adkyTTKs5t9xRSNL6cm1iQAAAFc"]
[Sat Apr 11 01:24:30.319004 2026] [:error] [pid 55451:tid 55461] [client 72.146.30.147:22148] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "adkyTnApxuyB7yCS5RnmvQAAAMg"]
[Sat Apr 11 01:24:30.805933 2026] [:error] [pid 21570:tid 21682] [client 72.146.30.147:37940] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "adkyTjKs5t9xRSNL6cm1iwAAAEs"]
[Sat Apr 11 01:24:31.280076 2026] [:error] [pid 21568:tid 21576] [client 72.146.30.147:37913] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "adkyT4iz5v_ljZxkpR-1xQAAAQQ"]
[Sat Apr 11 01:24:31.755157 2026] [:error] [pid 55451:tid 55476] [client 72.146.30.147:61329] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "adkyT3ApxuyB7yCS5RnmvwAAANc"]
[Sat Apr 11 01:24:32.235704 2026] [:error] [pid 21706:tid 21714] [client 72.146.30.147:24149] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "adkyUCGQ1M5d8fQSsLGOGQAAAAY"]
[Sat Apr 11 01:24:32.705888 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:38598] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "adkyUCGQ1M5d8fQSsLGOHAAAAA0"]
[Sat Apr 11 01:24:33.178674 2026] [:error] [pid 55451:tid 55453] [client 72.146.30.147:22172] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "adkyUXApxuyB7yCS5RnmxQAAAMA"]
[Sat Apr 11 01:24:33.644136 2026] [:error] [pid 21706:tid 21715] [client 72.146.30.147:37930] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "adkyUSGQ1M5d8fQSsLGOJAAAAAc"]
[Sat Apr 11 01:24:34.119705 2026] [:error] [pid 21706:tid 21709] [client 72.146.30.147:61351] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "adkyUiGQ1M5d8fQSsLGOKAAAAAE"]
[Sat Apr 11 01:24:34.617616 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:65076] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "adkyUnApxuyB7yCS5RnmzAAAAMM"]
[Sat Apr 11 01:24:35.079681 2026] [:error] [pid 21569:tid 21655] [client 72.146.30.147:22180] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "adkyU3AvQTgvXJ6vHoqMQAAAAIo"]
[Sat Apr 11 01:24:35.550610 2026] [:error] [pid 21568:tid 21593] [client 72.146.30.147:58189] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "adkyU4iz5v_ljZxkpR-10QAAARU"]
[Sat Apr 11 01:24:36.039390 2026] [:error] [pid 21568:tid 21587] [client 72.146.30.147:38633] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "adkyVIiz5v_ljZxkpR-10gAAAQ8"]
[Sat Apr 11 01:24:36.541557 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:58184] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "adkyVHApxuyB7yCS5RnmzwAAANU"]
[Sat Apr 11 01:24:37.012142 2026] [:error] [pid 21706:tid 21725] [client 72.146.30.147:37929] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "adkyVSGQ1M5d8fQSsLGONwAAABE"]
[Sat Apr 11 01:24:37.509782 2026] [:error] [pid 55451:tid 55466] [client 72.146.30.147:58237] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adkyVXApxuyB7yCS5Rnm0AAAAM0"]
[Sat Apr 11 01:24:37.989801 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:22184] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adkyVYiz5v_ljZxkpR-12AAAARQ"]
[Sat Apr 11 01:24:38.478986 2026] [:error] [pid 21706:tid 21715] [client 72.146.30.147:24148] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adkyViGQ1M5d8fQSsLGORgAAAAc"]
[Sat Apr 11 01:24:38.942344 2026] [:error] [pid 21570:tid 21694] [client 72.146.30.147:61334] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adkyVjKs5t9xRSNL6cm1nQAAAFQ"]
[Sat Apr 11 01:24:39.409191 2026] [:error] [pid 21569:tid 21646] [client 72.146.30.147:61327] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "adkyV3AvQTgvXJ6vHoqMTgAAAIE"]
[Sat Apr 11 01:24:39.877728 2026] [:error] [pid 55451:tid 55474] [client 72.146.30.147:22175] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "adkyV3ApxuyB7yCS5Rnm2QAAANU"]
[Sat Apr 11 01:24:40.354379 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:22182] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "adkyWHApxuyB7yCS5Rnm2gAAAMY"]
[Sat Apr 11 01:24:40.846062 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:61369] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "adkyWDKs5t9xRSNL6cm1ogAAAFY"]
[Sat Apr 11 01:24:41.343450 2026] [:error] [pid 21570:tid 21697] [client 72.146.30.147:58231] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "adkyWTKs5t9xRSNL6cm1qgAAAFc"]
[Sat Apr 11 01:24:41.854704 2026] [:error] [pid 21568:tid 21594] [client 72.146.30.147:58819] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "adkyWYiz5v_ljZxkpR-13gAAARY"]
[Sat Apr 11 01:24:42.354911 2026] [:error] [pid 21569:tid 21645] [client 72.146.30.147:38615] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "adkyWnAvQTgvXJ6vHoqMTwAAAIA"]
[Sat Apr 11 01:24:42.840743 2026] [:error] [pid 21570:tid 21689] [client 72.146.30.147:61340] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "adkyWjKs5t9xRSNL6cm1rgAAAE8"]
[Sat Apr 11 01:24:43.303101 2026] [:error] [pid 55451:tid 55458] [client 72.146.30.147:62549] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "adkyW3ApxuyB7yCS5Rnm6gAAAMU"]
[Sat Apr 11 01:24:43.786727 2026] [:error] [pid 55451:tid 55461] [client 72.146.30.147:38596] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "adkyW3ApxuyB7yCS5Rnm7wAAAMg"]
[Sat Apr 11 01:24:44.282073 2026] [:error] [pid 55451:tid 55475] [client 72.146.30.147:63758] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "adkyXHApxuyB7yCS5Rnm8QAAANY"]
[Sat Apr 11 01:24:44.743473 2026] [:error] [pid 21706:tid 21711] [client 72.146.30.147:37924] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "adkyXCGQ1M5d8fQSsLGObwAAAAM"]
[Sat Apr 11 01:24:45.212380 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:65033] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "adkyXXApxuyB7yCS5Rnm-AAAAMY"]
[Sat Apr 11 01:24:46.224340 2026] [:error] [pid 55451:tid 55454] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Sat Apr 11 01:24:46.455632 2026] [:error] [pid 55451:tid 55476] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 11 01:24:46.688270 2026] [:error] [pid 55451:tid 55455] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/9EaklzMysJ.php
[Sat Apr 11 01:24:46.935869 2026] [:error] [pid 55451:tid 55472] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Sat Apr 11 01:24:47.169089 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/s3FiyJ2WGCnF0p1default.php
[Sat Apr 11 01:24:47.414674 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Sat Apr 11 01:24:47.645623 2026] [:error] [pid 55451:tid 55467] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sat Apr 11 01:24:47.877948 2026] [:error] [pid 55451:tid 55453] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 11 01:24:48.148346 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Apr 11 01:24:48.381101 2026] [:error] [pid 55451:tid 55461] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/p14rAeWytPdH5hZcscCFdefault.php
[Sat Apr 11 01:24:48.627194 2026] [:error] [pid 55451:tid 55463] [client 72.146.30.147:61332] File does not exist: /usr/local/apache/htdocs/suspended-page/iindv.php
[Sat Apr 11 01:24:48.888470 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:61332] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "adkyYHApxuyB7yCS5RnnGAAAANg"]
[Sat Apr 11 01:24:49.353396 2026] [:error] [pid 21569:tid 21651] [client 72.146.30.147:37932] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "adkyYXAvQTgvXJ6vHoqMVwAAAIY"]
[Sat Apr 11 01:24:49.825777 2026] [:error] [pid 21568:tid 21583] [client 72.146.30.147:22155] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "adkyYYiz5v_ljZxkpR-16wAAAQs"]
[Sat Apr 11 01:24:50.314821 2026] [:error] [pid 55451:tid 55458] [client 72.146.30.147:61325] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "adkyYnApxuyB7yCS5RnnHwAAAMU"]
[Sat Apr 11 01:24:50.783991 2026] [:error] [pid 21706:tid 21730] [client 72.146.30.147:22174] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adkyYiGQ1M5d8fQSsLGOlgAAABY"]
[Sat Apr 11 01:24:51.245031 2026] [:error] [pid 21706:tid 21717] [client 72.146.30.147:65055] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adkyYyGQ1M5d8fQSsLGOmwAAAAk"]
[Sat Apr 11 01:24:51.709512 2026] [:error] [pid 21568:tid 21595] [client 72.146.30.147:24139] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adkyY4iz5v_ljZxkpR-17wAAARc"]
[Sat Apr 11 01:24:52.202384 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:24174] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adkyZHAvQTgvXJ6vHoqMXQAAAI8"]
[Sat Apr 11 01:24:52.670581 2026] [:error] [pid 21568:tid 21588] [client 72.146.30.147:58830] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adkyZIiz5v_ljZxkpR-19AAAARA"]
[Sat Apr 11 01:24:53.150287 2026] [:error] [pid 21570:tid 21692] [client 72.146.30.147:37912] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adkyZTKs5t9xRSNL6cm1tgAAAFI"]
[Sat Apr 11 01:24:53.646637 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:65044] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adkyZTKs5t9xRSNL6cm1twAAAEE"]
[Sat Apr 11 01:24:54.124560 2026] [:error] [pid 55451:tid 55475] [client 72.146.30.147:24182] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adkyZnApxuyB7yCS5RnnNQAAANY"]
[Sat Apr 11 01:24:54.596305 2026] [:error] [pid 21569:tid 21649] [client 72.146.30.147:37917] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "adkyZnAvQTgvXJ6vHoqMXgAAAIQ"]
[Sat Apr 11 01:24:55.092175 2026] [:error] [pid 21569:tid 21660] [client 72.146.30.147:65065] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "adkyZ3AvQTgvXJ6vHoqMXwAAAI4"]
[Sat Apr 11 01:24:55.582525 2026] [:error] [pid 55451:tid 55467] [client 72.146.30.147:58832] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "adkyZ3ApxuyB7yCS5RnnOgAAAM4"]
[Sat Apr 11 01:24:56.058315 2026] [:error] [pid 21706:tid 21716] [client 72.146.30.147:59465] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "adkyaCGQ1M5d8fQSsLGOwgAAAAg"]
[Sat Apr 11 01:24:56.526802 2026] [:error] [pid 21568:tid 21595] [client 72.146.30.147:38613] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkyaIiz5v_ljZxkpR-1-AAAARc"]
[Sat Apr 11 01:24:56.992103 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:24144] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkyaHApxuyB7yCS5RnnPwAAANg"]
[Sat Apr 11 01:24:57.453420 2026] [:error] [pid 21706:tid 21713] [client 72.146.30.147:38641] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkyaSGQ1M5d8fQSsLGOzQAAAAU"]
[Sat Apr 11 01:25:00.862479 2026] [:error] [pid 21568:tid 21578] [client 72.146.30.147:24166] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkybIiz5v_ljZxkpR-1_wAAAQY"]
[Sat Apr 11 01:25:01.336081 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:65062] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "adkybSGQ1M5d8fQSsLGO5AAAABg"]
[Sat Apr 11 01:25:01.814658 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:65036] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "adkybXAvQTgvXJ6vHoqMagAAAI8"]
[Sat Apr 11 01:25:02.283873 2026] [:error] [pid 21568:tid 21596] [client 72.146.30.147:24187] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "adkyboiz5v_ljZxkpR-2AgAAARg"]
[Sat Apr 11 01:25:02.747782 2026] [:error] [pid 21569:tid 21649] [client 72.146.30.147:23539] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "adkybnAvQTgvXJ6vHoqMawAAAIQ"]
[Sat Apr 11 01:25:03.212704 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:58176] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adkyb3AvQTgvXJ6vHoqMbAAAAJQ"]
[Sat Apr 11 01:25:03.690652 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:65026] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adkyb3ApxuyB7yCS5RnnYQAAAMs"]
[Sat Apr 11 01:25:04.152353 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:24162] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adkycDKs5t9xRSNL6cm1zQAAAFY"]
[Sat Apr 11 01:25:04.617106 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:61370] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adkycHApxuyB7yCS5RnnYwAAAM8"]
[Sat Apr 11 01:25:05.078944 2026] [:error] [pid 21569:tid 21648] [client 72.146.30.147:38638] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adkycXAvQTgvXJ6vHoqMcQAAAIM"]
[Sat Apr 11 01:25:05.638473 2026] [:error] [pid 21570:tid 21693] [client 72.146.30.147:58236] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adkycTKs5t9xRSNL6cm11AAAAFM"]
[Sat Apr 11 01:25:06.205787 2026] [:error] [pid 21568:tid 21574] [client 72.146.30.147:38639] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adkycoiz5v_ljZxkpR-2CwAAAQI"]
[Sat Apr 11 01:25:06.681442 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:24138] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adkycnApxuyB7yCS5RnnbwAAANg"]
[Sat Apr 11 01:25:07.190677 2026] [:error] [pid 55451:tid 55466] [client 72.146.30.147:61335] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adkyc3ApxuyB7yCS5RnncwAAAM0"]
[Sat Apr 11 01:25:07.655365 2026] [:error] [pid 55451:tid 55465] [client 72.146.30.147:61856] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adkyc3ApxuyB7yCS5RnneAAAAMw"]
[Sat Apr 11 01:25:08.122515 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:58199] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adkydCGQ1M5d8fQSsLGO7gAAAAo"]
[Sat Apr 11 01:25:08.650812 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:58861] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adkydHAvQTgvXJ6vHoqMeAAAAI8"]
[Sat Apr 11 01:25:09.119541 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:61318] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "adkydXAvQTgvXJ6vHoqMegAAAJA"]
[Sat Apr 11 01:25:10.729085 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:37923] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "adkydnApxuyB7yCS5RnnhgAAAMM"]
[Sat Apr 11 01:25:11.199645 2026] [:error] [pid 55451:tid 55458] [client 72.146.30.147:37931] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "adkyd3ApxuyB7yCS5RnniwAAAMU"]
[Sat Apr 11 01:25:11.673511 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:22196] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "adkyd3AvQTgvXJ6vHoqMgwAAAJA"]
[Sat Apr 11 01:25:12.146958 2026] [:error] [pid 21569:tid 21667] [client 72.146.30.147:65037] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adkyeHAvQTgvXJ6vHoqMhQAAAJE"]
[Sat Apr 11 01:25:12.855813 2026] [:error] [pid 21568:tid 21596] [client 72.146.30.147:62561] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adkyeIiz5v_ljZxkpR-2HQAAARg"]
[Sat Apr 11 01:25:13.340337 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:58842] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adkyeXApxuyB7yCS5RnnmQAAAMs"]
[Sat Apr 11 01:25:13.945066 2026] [:error] [pid 21706:tid 21710] [client 72.146.30.147:61849] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adkyeSGQ1M5d8fQSsLGO9AAAAAI"]
[Sat Apr 11 01:25:14.530247 2026] [:error] [pid 21570:tid 21691] [client 72.146.30.147:65074] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adkyejKs5t9xRSNL6cm13QAAAFE"]
[Sat Apr 11 01:25:14.998612 2026] [:error] [pid 21706:tid 21720] [client 72.146.30.147:23488] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adkyeiGQ1M5d8fQSsLGO-AAAAAw"]
[Sat Apr 11 01:25:15.468732 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:22160] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adkyeyGQ1M5d8fQSsLGO-wAAAAo"]
[Sat Apr 11 01:25:15.945693 2026] [:error] [pid 21568:tid 21575] [client 72.146.30.147:58182] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adkye4iz5v_ljZxkpR-2IAAAAQM"]
[Sat Apr 11 01:25:16.428426 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:23496] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "adkyfIiz5v_ljZxkpR-2IwAAARQ"]
[Sat Apr 11 01:25:16.902858 2026] [:error] [pid 21568:tid 21584] [client 72.146.30.147:38655] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "adkyfIiz5v_ljZxkpR-2JgAAAQw"]
[Sat Apr 11 01:25:17.455411 2026] [:error] [pid 21568:tid 21595] [client 72.146.30.147:65079] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "adkyfYiz5v_ljZxkpR-2JwAAARc"]
[Sat Apr 11 01:25:18.032196 2026] [:error] [pid 55451:tid 55473] [client 72.146.30.147:61825] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "adkyfnApxuyB7yCS5RnnpgAAANQ"]
[Sat Apr 11 01:25:18.510625 2026] [:error] [pid 55451:tid 55471] [client 72.146.30.147:23526] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adkyfnApxuyB7yCS5RnnqwAAANI"]
[Sat Apr 11 01:25:19.015461 2026] [:error] [pid 55451:tid 55465] [client 72.146.30.147:58234] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adkyf3ApxuyB7yCS5RnnsAAAAMw"]
[Sat Apr 11 01:25:19.483194 2026] [:error] [pid 55451:tid 55470] [client 72.146.30.147:22207] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adkyf3ApxuyB7yCS5RnntAAAANE"]
[Sat Apr 11 01:25:19.949463 2026] [:error] [pid 21706:tid 21729] [client 72.146.30.147:61358] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adkyfyGQ1M5d8fQSsLGPDAAAABU"]
[Sat Apr 11 01:25:20.431205 2026] [:error] [pid 55451:tid 55473] [client 72.146.30.147:58219] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adkygHApxuyB7yCS5RnnvAAAANQ"]
[Sat Apr 11 01:25:20.903812 2026] [:error] [pid 55451:tid 55454] [client 72.146.30.147:38637] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adkygHApxuyB7yCS5RnnwQAAAME"]
[Sat Apr 11 01:25:21.449031 2026] [:error] [pid 21568:tid 21577] [client 72.146.30.147:24177] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adkygYiz5v_ljZxkpR-2LAAAAQU"]
[Sat Apr 11 01:25:21.912502 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:23530] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adkygTKs5t9xRSNL6cm16AAAAFY"]
[Sat Apr 11 01:25:22.376639 2026] [:error] [pid 21568:tid 21574] [client 72.146.30.147:63780] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adkygoiz5v_ljZxkpR-2MQAAAQI"]
[Sat Apr 11 01:25:22.845796 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:24131] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adkygnAvQTgvXJ6vHoqMiwAAAI8"]
[Sat Apr 11 01:25:23.363788 2026] [:error] [pid 55451:tid 55473] [client 72.146.30.147:61333] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adkyg3ApxuyB7yCS5RnnyQAAANQ"]
[Sat Apr 11 01:25:23.836684 2026] [:error] [pid 21568:tid 21579] [client 72.146.30.147:23489] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "adkyg4iz5v_ljZxkpR-2OgAAAQc"]
[Sat Apr 11 01:25:24.434941 2026] [:error] [pid 21568:tid 21580] [client 72.146.30.147:38635] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adkyhIiz5v_ljZxkpR-2PAAAAQg"]
[Sat Apr 11 01:25:24.899294 2026] [:error] [pid 21570:tid 21661] [client 72.146.30.147:61355] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adkyhDKs5t9xRSNL6cm18gAAAEA"]
[Sat Apr 11 01:25:25.374760 2026] [:error] [pid 21570:tid 21665] [client 72.146.30.147:23512] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adkyhTKs5t9xRSNL6cm19gAAAEI"]
[Sat Apr 11 01:25:25.837103 2026] [:error] [pid 21570:tid 21691] [client 72.146.30.147:62530] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adkyhTKs5t9xRSNL6cm1-QAAAFE"]
[Sat Apr 11 01:25:26.316304 2026] [:error] [pid 21570:tid 21694] [client 72.146.30.147:62582] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adkyhjKs5t9xRSNL6cm1_gAAAFQ"]
[Sat Apr 11 01:25:26.785764 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:22185] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adkyhjKs5t9xRSNL6cm2AQAAAEc"]
[Sat Apr 11 01:25:27.249047 2026] [:error] [pid 21568:tid 21584] [client 72.146.30.147:62551] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adkyh4iz5v_ljZxkpR-2RgAAAQw"]
[Sat Apr 11 01:25:27.751610 2026] [:error] [pid 21706:tid 21713] [client 72.146.30.147:61360] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adkyhyGQ1M5d8fQSsLGPHQAAAAU"]
[Sat Apr 11 01:25:28.265020 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:61835] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adkyiCGQ1M5d8fQSsLGPIAAAABA"]
[Sat Apr 11 01:25:28.828084 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:62587] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adkyiCGQ1M5d8fQSsLGPJAAAAA0"]
[Sat Apr 11 01:25:29.297503 2026] [:error] [pid 21706:tid 21711] [client 72.146.30.147:58181] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adkyiSGQ1M5d8fQSsLGPKAAAAAM"]
[Sat Apr 11 01:25:29.767322 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:65087] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "adkyiSGQ1M5d8fQSsLGPLgAAABA"]
[Sat Apr 11 01:25:30.231413 2026] [:error] [pid 21568:tid 21577] [client 72.146.30.147:65083] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyioiz5v_ljZxkpR-2SQAAAQU"]
[Sat Apr 11 01:25:30.705421 2026] [:error] [pid 21570:tid 21668] [client 72.146.30.147:61342] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyijKs5t9xRSNL6cm2FwAAAEM"]
[Sat Apr 11 01:25:31.173630 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:22163] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyi3ApxuyB7yCS5Rnn0gAAAMY"]
[Sat Apr 11 01:25:31.665951 2026] [:error] [pid 21706:tid 21728] [client 72.146.30.147:59491] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyiyGQ1M5d8fQSsLGPNwAAABQ"]
[Sat Apr 11 01:25:32.135104 2026] [:error] [pid 21568:tid 21575] [client 72.146.30.147:65087] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adkyjIiz5v_ljZxkpR-2SwAAAQM"]
[Sat Apr 11 01:25:32.597749 2026] [:error] [pid 21569:tid 21651] [client 72.146.30.147:61319] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adkyjHAvQTgvXJ6vHoqMkwAAAIY"]
[Sat Apr 11 01:25:33.065080 2026] [:error] [pid 21706:tid 21730] [client 72.146.30.147:58177] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adkyjSGQ1M5d8fQSsLGPPgAAABY"]
[Sat Apr 11 01:25:33.534836 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:61353] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adkyjSGQ1M5d8fQSsLGPQgAAAA4"]
[Sat Apr 11 01:25:34.002105 2026] [:error] [pid 21569:tid 21646] [client 72.146.30.147:4418] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adkyjnAvQTgvXJ6vHoqMlQAAAIE"]
[Sat Apr 11 01:25:34.464548 2026] [:error] [pid 21569:tid 21654] [client 72.146.30.147:63208] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adkyjnAvQTgvXJ6vHoqMmAAAAIk"]
[Sat Apr 11 01:25:34.927863 2026] [:error] [pid 55451:tid 55461] [client 72.146.30.147:23550] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adkyjnApxuyB7yCS5Rnn3wAAAMg"]
[Sat Apr 11 01:25:35.442991 2026] [:error] [pid 21569:tid 21649] [client 72.146.30.147:23508] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "adkyj3AvQTgvXJ6vHoqMnwAAAIQ"]
[Sat Apr 11 01:25:35.925377 2026] [:error] [pid 21569:tid 21669] [client 72.146.30.147:58835] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adkyj3AvQTgvXJ6vHoqMoQAAAJI"]
[Sat Apr 11 01:25:36.574696 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:58223] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adkykHApxuyB7yCS5Rnn4wAAAMY"]
[Sat Apr 11 01:25:37.046031 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:38646] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adkykXApxuyB7yCS5Rnn5gAAAMs"]
[Sat Apr 11 01:25:37.515400 2026] [:error] [pid 21706:tid 21714] [client 72.146.30.147:23528] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "adkykSGQ1M5d8fQSsLGPUwAAAAY"]
[Sat Apr 11 01:25:37.990738 2026] [:error] [pid 21706:tid 21718] [client 72.146.30.147:58868] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adkykSGQ1M5d8fQSsLGPWAAAAAo"]
[Sat Apr 11 01:25:38.465924 2026] [:error] [pid 21706:tid 21728] [client 72.146.30.147:62567] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adkykiGQ1M5d8fQSsLGPWwAAABQ"]
[Sat Apr 11 01:25:39.003495 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:38605] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adkykyGQ1M5d8fQSsLGPYQAAAAQ"]
[Sat Apr 11 01:25:39.466974 2026] [:error] [pid 55451:tid 55471] [client 72.146.30.147:62580] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "adkyk3ApxuyB7yCS5Rnn6gAAANI"]
[Sat Apr 11 01:25:40.024623 2026] [:error] [pid 55451:tid 55465] [client 72.146.30.147:23533] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adkylHApxuyB7yCS5Rnn7gAAAMw"]
[Sat Apr 11 01:25:40.491515 2026] [:error] [pid 55451:tid 55460] [client 72.146.30.147:61321] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adkylHApxuyB7yCS5Rnn8QAAAMc"]
[Sat Apr 11 01:25:41.034513 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:58844] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adkylTKs5t9xRSNL6cm2JwAAAEc"]
[Sat Apr 11 01:25:41.497288 2026] [:error] [pid 21570:tid 21672] [client 72.146.30.147:22191] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "adkylTKs5t9xRSNL6cm2KgAAAEU"]
[Sat Apr 11 01:25:41.973917 2026] [:error] [pid 21569:tid 21660] [client 72.146.30.147:38600] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adkylXAvQTgvXJ6vHoqMqAAAAI4"]
[Sat Apr 11 01:25:42.568459 2026] [:error] [pid 21706:tid 21717] [client 72.146.30.147:61320] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adkyliGQ1M5d8fQSsLGPcgAAAAk"]
[Sat Apr 11 01:25:43.028092 2026] [:error] [pid 21569:tid 21650] [client 72.146.30.147:58827] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adkyl3AvQTgvXJ6vHoqMqwAAAIU"]
[Sat Apr 11 01:25:43.491043 2026] [:error] [pid 55451:tid 55466] [client 72.146.30.147:38648] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "adkyl3ApxuyB7yCS5Rnn-wAAAM0"]
[Sat Apr 11 01:25:43.994494 2026] [:error] [pid 55451:tid 55454] [client 72.146.30.147:4444] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adkyl3ApxuyB7yCS5Rnn_gAAAME"]
[Sat Apr 11 01:25:44.553632 2026] [:error] [pid 21569:tid 21646] [client 72.146.30.147:38597] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adkymHAvQTgvXJ6vHoqMrgAAAIE"]
[Sat Apr 11 01:25:45.019470 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:63744] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adkymTKs5t9xRSNL6cm2MAAAAEw"]
[Sat Apr 11 01:25:45.491660 2026] [:error] [pid 21570:tid 21670] [client 72.146.30.147:24180] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "adkymTKs5t9xRSNL6cm2MQAAAEQ"]
[Sat Apr 11 01:25:45.961080 2026] [:error] [pid 21568:tid 21576] [client 72.146.30.147:58198] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adkymYiz5v_ljZxkpR-2XgAAAQQ"]
[Sat Apr 11 01:25:46.431035 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:38634] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adkymnAvQTgvXJ6vHoqMtwAAAJQ"]
[Sat Apr 11 01:25:46.896705 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:61871] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adkymjKs5t9xRSNL6cm2OQAAAEE"]
[Sat Apr 11 01:25:47.360481 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:4441] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "adkymzKs5t9xRSNL6cm2OwAAAEw"]
[Sat Apr 11 01:25:47.825607 2026] [:error] [pid 21706:tid 21709] [client 72.146.30.147:23523] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkymyGQ1M5d8fQSsLGPfQAAAAE"]
[Sat Apr 11 01:25:48.519975 2026] [:error] [pid 21570:tid 21661] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Apr 11 01:25:48.752444 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Apr 11 01:25:48.983625 2026] [:error] [pid 21570:tid 21689] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat Apr 11 01:25:49.216412 2026] [:error] [pid 21570:tid 21672] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Apr 11 01:25:49.447905 2026] [:error] [pid 21570:tid 21692] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Apr 11 01:25:49.678923 2026] [:error] [pid 21570:tid 21690] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sat Apr 11 01:25:49.909649 2026] [:error] [pid 21570:tid 21682] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 11 01:25:50.141153 2026] [:error] [pid 21570:tid 21665] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 01:25:50.372943 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sat Apr 11 01:25:50.613716 2026] [:error] [pid 21570:tid 21688] [client 72.146.30.147:61875] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat Apr 11 01:25:50.841935 2026] [:error] [pid 21570:tid 21661] [client 72.146.30.147:61875] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adkynjKs5t9xRSNL6cm2UAAAAEA"]
[Sat Apr 11 01:25:51.311865 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:62546] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adkyn3AvQTgvXJ6vHoqMwQAAAJA"]
[Sat Apr 11 01:25:51.785307 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:4463] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adkynzKs5t9xRSNL6cm2VwAAAFY"]
[Sat Apr 11 01:25:52.256222 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:58839] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "adkyoDKs5t9xRSNL6cm2WwAAAEo"]
[Sat Apr 11 01:25:52.716993 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:65039] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adkyoHAvQTgvXJ6vHoqMxgAAAI8"]
[Sat Apr 11 01:25:53.182553 2026] [:error] [pid 21570:tid 21673] [client 72.146.30.147:65052] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adkyoTKs5t9xRSNL6cm2XgAAAEY"]
[Sat Apr 11 01:25:53.643607 2026] [:error] [pid 21706:tid 21728] [client 72.146.30.147:61344] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adkyoSGQ1M5d8fQSsLGPkgAAABQ"]
[Sat Apr 11 01:25:54.106175 2026] [:error] [pid 21706:tid 21721] [client 72.146.30.147:63182] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adkyoiGQ1M5d8fQSsLGPlgAAAA0"]
[Sat Apr 11 01:25:54.579885 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:61851] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adkyoiGQ1M5d8fQSsLGPmwAAABA"]
[Sat Apr 11 01:25:55.123767 2026] [:error] [pid 21569:tid 21659] [client 72.146.30.147:37906] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adkyo3AvQTgvXJ6vHoqMygAAAI0"]
[Sat Apr 11 01:25:55.595424 2026] [:error] [pid 55451:tid 55470] [client 72.146.30.147:63767] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adkyo3ApxuyB7yCS5RnoDQAAANE"]
[Sat Apr 11 01:25:56.060072 2026] [:error] [pid 21568:tid 21577] [client 72.146.30.147:61352] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "adkypIiz5v_ljZxkpR-2ZwAAAQU"]
[Sat Apr 11 01:25:56.521869 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:22186] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "adkypHAvQTgvXJ6vHoqMywAAAJQ"]
[Sat Apr 11 01:25:56.987039 2026] [:error] [pid 21569:tid 21662] [client 72.146.30.147:48378] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "adkypHAvQTgvXJ6vHoqMzgAAAI8"]
[Sat Apr 11 01:25:57.568148 2026] [:error] [pid 21570:tid 21665] [client 72.146.30.147:61868] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "adkypTKs5t9xRSNL6cm2ZwAAAEI"]
[Sat Apr 11 01:25:58.051924 2026] [:error] [pid 21569:tid 21648] [client 72.146.30.147:61879] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "adkypnAvQTgvXJ6vHoqMzwAAAIM"]
[Sat Apr 11 01:25:58.515571 2026] [:error] [pid 21570:tid 21673] [client 72.146.30.147:38599] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adkypjKs5t9xRSNL6cm2bgAAAEY"]
[Sat Apr 11 01:25:58.981434 2026] [:error] [pid 21568:tid 21591] [client 72.146.30.147:65042] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adkypoiz5v_ljZxkpR-2bgAAARM"]
[Sat Apr 11 01:25:59.593590 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:38610] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adkypzKs5t9xRSNL6cm2bwAAAEE"]
[Sat Apr 11 01:26:00.200248 2026] [:error] [pid 21570:tid 21665] [client 72.146.30.147:22166] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "adkyqDKs5t9xRSNL6cm2cQAAAEI"]
[Sat Apr 11 01:26:00.958463 2026] [:error] [pid 21569:tid 21646] [client 72.146.30.147:58206] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adkyqHAvQTgvXJ6vHoqM0wAAAIE"]
[Sat Apr 11 01:26:01.420323 2026] [:error] [pid 21569:tid 21659] [client 72.146.30.147:58238] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adkyqXAvQTgvXJ6vHoqM1QAAAI0"]
[Sat Apr 11 01:26:01.886041 2026] [:error] [pid 21706:tid 21709] [client 72.146.30.147:22200] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adkyqSGQ1M5d8fQSsLGPvwAAAAE"]
[Sat Apr 11 01:26:02.353369 2026] [:error] [pid 21570:tid 21695] [client 72.146.30.147:23495] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adkyqjKs5t9xRSNL6cm2dQAAAFU"]
[Sat Apr 11 01:26:03.053924 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:58197] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adkyqyGQ1M5d8fQSsLGPwAAAAA4"]
[Sat Apr 11 01:26:03.542104 2026] [:error] [pid 21569:tid 21683] [client 72.146.30.147:58865] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adkyq3AvQTgvXJ6vHoqM2AAAAJg"]
[Sat Apr 11 01:26:04.017874 2026] [:error] [pid 21569:tid 21664] [client 72.146.30.147:58228] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adkyrHAvQTgvXJ6vHoqM2QAAAJA"]
[Sat Apr 11 01:26:04.501734 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:65077] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adkyrDKs5t9xRSNL6cm2fwAAAEw"]
[Sat Apr 11 01:26:04.977986 2026] [:error] [pid 55451:tid 55472] [client 72.146.30.147:59458] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyrHApxuyB7yCS5RnoIAAAANM"]
[Sat Apr 11 01:26:05.632760 2026] [:error] [pid 55451:tid 55477] [client 72.146.30.147:64432] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyrXApxuyB7yCS5RnoJAAAANg"]
[Sat Apr 11 01:26:06.252123 2026] [:error] [pid 55451:tid 55466] [client 72.146.30.147:58858] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyrnApxuyB7yCS5RnoJwAAAM0"]
[Sat Apr 11 01:26:06.922504 2026] [:error] [pid 55451:tid 55455] [client 72.146.30.147:58820] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "adkyrnApxuyB7yCS5RnoKwAAAMI"]
[Sat Apr 11 01:26:07.397180 2026] [:error] [pid 21569:tid 21652] [client 72.146.30.147:23510] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adkyr3AvQTgvXJ6vHoqM4wAAAIc"]
[Sat Apr 11 01:26:07.941612 2026] [:error] [pid 21570:tid 21661] [client 72.146.30.147:61348] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adkyrzKs5t9xRSNL6cm2hAAAAEA"]
[Sat Apr 11 01:26:08.502619 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:62578] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adkysIiz5v_ljZxkpR-2fAAAARQ"]
[Sat Apr 11 01:26:09.026442 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:63178] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adkysXAvQTgvXJ6vHoqM5gAAAJQ"]
[Sat Apr 11 01:26:09.489718 2026] [:error] [pid 21568:tid 21579] [client 72.146.30.147:65072] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adkysYiz5v_ljZxkpR-2fwAAAQc"]
[Sat Apr 11 01:26:09.953562 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:38606] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adkysTKs5t9xRSNL6cm2iAAAAEE"]
[Sat Apr 11 01:26:10.423809 2026] [:error] [pid 21570:tid 21687] [client 72.146.30.147:38611] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adkysjKs5t9xRSNL6cm2iwAAAE0"]
[Sat Apr 11 01:26:10.884718 2026] [:error] [pid 21706:tid 21710] [client 72.146.30.147:63804] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "adkysiGQ1M5d8fQSsLGP0wAAAAI"]
[Sat Apr 11 01:26:11.357620 2026] [:error] [pid 21569:tid 21676] [client 72.146.30.147:61347] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkys3AvQTgvXJ6vHoqM6gAAAJU"]
[Sat Apr 11 01:26:11.860292 2026] [:error] [pid 21569:tid 21651] [client 72.146.30.147:65054] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkys3AvQTgvXJ6vHoqM7AAAAIY"]
[Sat Apr 11 01:26:12.357761 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:22183] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkytDKs5t9xRSNL6cm2jwAAAEc"]
[Sat Apr 11 01:26:12.822489 2026] [:error] [pid 21569:tid 21683] [client 72.146.30.147:38630] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkytHAvQTgvXJ6vHoqM8AAAAJg"]
[Sat Apr 11 01:26:13.281805 2026] [:error] [pid 21569:tid 21674] [client 72.146.30.147:37897] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adkytXAvQTgvXJ6vHoqM8gAAAJQ"]
[Sat Apr 11 01:26:13.773500 2026] [:error] [pid 21568:tid 21587] [client 72.146.30.147:65080] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adkytYiz5v_ljZxkpR-2jgAAAQ8"]
[Sat Apr 11 01:26:14.238322 2026] [:error] [pid 21706:tid 21731] [client 72.146.30.147:38647] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adkytiGQ1M5d8fQSsLGP2wAAABc"]
[Sat Apr 11 01:26:14.762900 2026] [:error] [pid 21568:tid 21577] [client 72.146.30.147:63176] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "adkytoiz5v_ljZxkpR-2kwAAAQU"]
[Sat Apr 11 01:26:15.222985 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:59506] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkytyGQ1M5d8fQSsLGP4gAAABA"]
[Sat Apr 11 01:26:15.698345 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:59512] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkytyGQ1M5d8fQSsLGP5AAAAA4"]
[Sat Apr 11 01:26:16.168958 2026] [:error] [pid 21570:tid 21696] [client 72.146.30.147:38608] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkyuDKs5t9xRSNL6cm2lQAAAFY"]
[Sat Apr 11 01:26:16.631434 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:63183] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkyuHApxuyB7yCS5RnoPAAAAMY"]
[Sat Apr 11 01:26:17.102538 2026] [:error] [pid 21568:tid 21578] [client 72.146.30.147:37946] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adkyuYiz5v_ljZxkpR-2oAAAAQY"]
[Sat Apr 11 01:26:17.568687 2026] [:error] [pid 21570:tid 21695] [client 72.146.30.147:23504] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adkyuTKs5t9xRSNL6cm2mQAAAFU"]
[Sat Apr 11 01:26:18.033629 2026] [:error] [pid 21568:tid 21591] [client 72.146.30.147:22169] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adkyuoiz5v_ljZxkpR-2pgAAARM"]
[Sat Apr 11 01:26:18.501179 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:65061] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "adkyujKs5t9xRSNL6cm2mwAAAEo"]
[Sat Apr 11 01:26:19.096574 2026] [:error] [pid 21570:tid 21677] [client 72.146.30.147:38651] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkyuzKs5t9xRSNL6cm2nAAAAEg"]
[Sat Apr 11 01:26:19.721662 2026] [:error] [pid 21570:tid 21693] [client 72.146.30.147:59480] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkyuzKs5t9xRSNL6cm2oQAAAFM"]
[Sat Apr 11 01:26:20.200027 2026] [:error] [pid 21570:tid 21668] [client 72.146.30.147:59482] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkyvDKs5t9xRSNL6cm2pgAAAEM"]
[Sat Apr 11 01:26:20.678988 2026] [:error] [pid 21706:tid 21724] [client 72.146.30.147:58183] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkyvCGQ1M5d8fQSsLGP6wAAABA"]
[Sat Apr 11 01:26:21.144929 2026] [:error] [pid 55451:tid 55457] [client 72.146.30.147:62579] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adkyvXApxuyB7yCS5RnoPwAAAMQ"]
[Sat Apr 11 01:26:21.614839 2026] [:error] [pid 21568:tid 21590] [client 72.146.30.147:63752] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adkyvYiz5v_ljZxkpR-2sQAAARI"]
[Sat Apr 11 01:26:22.087144 2026] [:error] [pid 21568:tid 21578] [client 72.146.30.147:24186] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adkyvoiz5v_ljZxkpR-2tAAAAQY"]
[Sat Apr 11 01:26:22.573346 2026] [:error] [pid 21569:tid 21653] [client 72.146.30.147:58186] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "adkyvnAvQTgvXJ6vHoqM-wAAAIg"]
[Sat Apr 11 01:26:23.046858 2026] [:error] [pid 21706:tid 21712] [client 72.146.30.147:37909] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adkyvyGQ1M5d8fQSsLGP8AAAAAQ"]
[Sat Apr 11 01:26:23.528466 2026] [:error] [pid 21568:tid 21592] [client 72.146.30.147:65067] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adkyv4iz5v_ljZxkpR-2tgAAARQ"]
[Sat Apr 11 01:26:23.996320 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:23534] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adkyvyGQ1M5d8fQSsLGP-QAAABI"]
[Sat Apr 11 01:26:24.483194 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:24181] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adkywDKs5t9xRSNL6cm2uAAAAEo"]
[Sat Apr 11 01:26:24.946087 2026] [:error] [pid 55451:tid 55459] [client 72.146.30.147:59467] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "adkywHApxuyB7yCS5RnoUQAAAMY"]
[Sat Apr 11 01:26:25.431367 2026] [:error] [pid 21569:tid 21667] [client 72.146.30.147:61863] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "adkywXAvQTgvXJ6vHoqNAAAAAJE"]
[Sat Apr 11 01:26:25.898898 2026] [:error] [pid 21568:tid 21583] [client 72.146.30.147:58856] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "adkywYiz5v_ljZxkpR-2uwAAAQs"]
[Sat Apr 11 01:26:26.453691 2026] [:error] [pid 55451:tid 55461] [client 72.146.30.147:24143] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "adkywnApxuyB7yCS5RnoXwAAAMg"]
[Sat Apr 11 01:26:26.989490 2026] [:error] [pid 21568:tid 21575] [client 72.146.30.147:62542] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "adkywoiz5v_ljZxkpR-2vQAAAQM"]
[Sat Apr 11 01:26:27.450881 2026] [:error] [pid 21570:tid 21672] [client 72.146.30.147:24185] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "adkywzKs5t9xRSNL6cm2ugAAAEU"]
[Sat Apr 11 01:26:27.915153 2026] [:error] [pid 21570:tid 21682] [client 72.146.30.147:23532] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "adkywzKs5t9xRSNL6cm2vQAAAEs"]
[Sat Apr 11 01:26:28.437442 2026] [:error] [pid 21568:tid 21589] [client 72.146.30.147:24156] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "adkyxIiz5v_ljZxkpR-2wAAAARE"]
[Sat Apr 11 01:26:28.905965 2026] [:error] [pid 21570:tid 21681] [client 72.146.30.147:22165] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adkyxDKs5t9xRSNL6cm2vwAAAEo"]
[Sat Apr 11 01:26:29.428298 2026] [:error] [pid 21569:tid 21652] [client 72.146.30.147:63748] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adkyxXAvQTgvXJ6vHoqNBwAAAIc"]
[Sat Apr 11 01:26:29.902351 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:22197] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adkyxTKs5t9xRSNL6cm2wwAAAEc"]
[Sat Apr 11 01:26:30.417982 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:38654] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "adkyxjKs5t9xRSNL6cm2xQAAAEE"]
[Sat Apr 11 01:26:30.878630 2026] [:error] [pid 21568:tid 21587] [client 72.146.30.147:61857] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adkyxoiz5v_ljZxkpR-2ygAAAQ8"]
[Sat Apr 11 01:26:31.338434 2026] [:error] [pid 21570:tid 21692] [client 72.146.30.147:24135] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adkyxzKs5t9xRSNL6cm2zAAAAFI"]
[Sat Apr 11 01:26:31.805768 2026] [:error] [pid 21569:tid 21671] [client 72.146.30.147:61366] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adkyx3AvQTgvXJ6vHoqNCwAAAJM"]
[Sat Apr 11 01:26:32.265897 2026] [:error] [pid 21568:tid 21572] [client 72.146.30.147:58190] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "adkyyIiz5v_ljZxkpR-21AAAAQA"]
[Sat Apr 11 01:26:32.793676 2026] [:error] [pid 21568:tid 21580] [client 72.146.30.147:23511] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "adkyyIiz5v_ljZxkpR-21gAAAQg"]
[Sat Apr 11 01:26:33.260066 2026] [:error] [pid 21568:tid 21582] [client 72.146.30.147:65073] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "adkyyYiz5v_ljZxkpR-22gAAAQo"]
[Sat Apr 11 01:26:33.723305 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:58846] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "adkyySGQ1M5d8fQSsLGQCQAAABI"]
[Sat Apr 11 01:26:34.199686 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:59510] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "adkyyjKs5t9xRSNL6cm20gAAAEc"]
[Sat Apr 11 01:26:34.665282 2026] [:error] [pid 21570:tid 21665] [client 72.146.30.147:24130] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adkyyjKs5t9xRSNL6cm21AAAAEI"]
[Sat Apr 11 01:26:35.127314 2026] [:error] [pid 21568:tid 21594] [client 72.146.30.147:59487] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adkyy4iz5v_ljZxkpR-24AAAARY"]
[Sat Apr 11 01:26:35.594608 2026] [:error] [pid 21568:tid 21588] [client 72.146.30.147:58232] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adkyy4iz5v_ljZxkpR-25AAAARA"]
[Sat Apr 11 01:26:36.059133 2026] [:error] [pid 21570:tid 21685] [client 72.146.30.147:37902] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "adkyzDKs5t9xRSNL6cm22AAAAEw"]
[Sat Apr 11 01:26:36.664557 2026] [:error] [pid 21570:tid 21687] [client 72.146.30.147:37947] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "adkyzDKs5t9xRSNL6cm22wAAAE0"]
[Sat Apr 11 01:26:37.144723 2026] [:error] [pid 21568:tid 21583] [client 72.146.30.147:61847] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "adkyzYiz5v_ljZxkpR-26gAAAQs"]
[Sat Apr 11 01:26:37.608831 2026] [:error] [pid 21569:tid 21676] [client 72.146.30.147:62535] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "adkyzXAvQTgvXJ6vHoqNGwAAAJU"]
[Sat Apr 11 01:26:38.073683 2026] [:error] [pid 55451:tid 55471] [client 72.146.30.147:23506] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "adkyznApxuyB7yCS5RnoowAAANI"]
[Sat Apr 11 01:26:38.537838 2026] [:error] [pid 21568:tid 21576] [client 72.146.30.147:59470] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "adkyzoiz5v_ljZxkpR-27AAAAQQ"]
[Sat Apr 11 01:26:39.002558 2026] [:error] [pid 55451:tid 55462] [client 72.146.30.147:38640] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "adkyz3ApxuyB7yCS5RnoqwAAAMk"]
[Sat Apr 11 01:26:39.463788 2026] [:error] [pid 55451:tid 55466] [client 72.146.30.147:62562] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "adkyz3ApxuyB7yCS5RnorQAAAM0"]
[Sat Apr 11 01:26:39.929890 2026] [:error] [pid 21568:tid 21588] [client 72.146.30.147:59485] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "adkyz4iz5v_ljZxkpR-28QAAARA"]
[Sat Apr 11 01:26:40.399131 2026] [:error] [pid 21569:tid 21660] [client 72.146.30.147:65081] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adky0HAvQTgvXJ6vHoqNIgAAAI4"]
[Sat Apr 11 01:26:40.872298 2026] [:error] [pid 21568:tid 21584] [client 72.146.30.147:64384] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adky0Iiz5v_ljZxkpR-29QAAAQw"]
[Sat Apr 11 01:26:41.346644 2026] [:error] [pid 55451:tid 55453] [client 72.146.30.147:61326] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adky0XApxuyB7yCS5RnouwAAAMA"]
[Sat Apr 11 01:26:41.817500 2026] [:error] [pid 55451:tid 55466] [client 72.146.30.147:58823] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "adky0XApxuyB7yCS5RnowQAAAM0"]
[Sat Apr 11 01:26:42.460407 2026] [:error] [pid 55451:tid 55464] [client 72.146.30.147:4426] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "adky0nApxuyB7yCS5RnoyAAAAMs"]
[Sat Apr 11 01:26:42.922415 2026] [:error] [pid 55451:tid 55467] [client 72.146.30.147:23498] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "adky0nApxuyB7yCS5Rno0AAAAM4"]
[Sat Apr 11 01:26:43.418666 2026] [:error] [pid 55451:tid 55455] [client 72.146.30.147:22158] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "adky03ApxuyB7yCS5Rno2AAAAMI"]
[Sat Apr 11 01:26:44.030015 2026] [:error] [pid 55451:tid 55456] [client 72.146.30.147:22190] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "adky1HApxuyB7yCS5Rno4gAAAMM"]
[Sat Apr 11 01:26:44.502301 2026] [:error] [pid 21570:tid 21663] [client 72.146.30.147:38602] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "adky1DKs5t9xRSNL6cm23gAAAEE"]
[Sat Apr 11 01:26:45.284146 2026] [:error] [pid 21569:tid 21655] [client 72.146.30.147:24167] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "adky1XAvQTgvXJ6vHoqNLQAAAIo"]
[Sat Apr 11 01:26:45.769125 2026] [:error] [pid 21570:tid 21697] [client 72.146.30.147:61365] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "adky1TKs5t9xRSNL6cm25AAAAFc"]
[Sat Apr 11 01:26:46.241082 2026] [:error] [pid 21570:tid 21689] [client 72.146.30.147:65049] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "adky1jKs5t9xRSNL6cm25wAAAE8"]
[Sat Apr 11 01:26:46.708259 2026] [:error] [pid 21570:tid 21675] [client 72.146.30.147:58221] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "adky1jKs5t9xRSNL6cm26wAAAEc"]
[Sat Apr 11 01:26:47.177308 2026] [:error] [pid 21706:tid 21710] [client 72.146.30.147:65057] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "adky1yGQ1M5d8fQSsLGQIQAAAAI"]
[Sat Apr 11 01:26:48.431126 2026] [:error] [pid 21706:tid 21725] [client 72.146.30.147:61373] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "adky2CGQ1M5d8fQSsLGQKAAAABE"]
[Sat Apr 11 01:26:48.894323 2026] [:error] [pid 21706:tid 21729] [client 72.146.30.147:37948] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "adky2CGQ1M5d8fQSsLGQLwAAABU"]
[Sat Apr 11 01:26:49.388154 2026] [:error] [pid 21706:tid 21722] [client 72.146.30.147:23531] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/jp.php"] [unique_id "adky2SGQ1M5d8fQSsLGQNgAAAA4"]
[Sat Apr 11 01:26:49.879042 2026] [:error] [pid 55451:tid 55468] [client 72.146.30.147:24176] [client 72.146.30.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/jp.php"] [unique_id "adky2XApxuyB7yCS5RnpBAAAAM8"]
[Sat Apr 11 01:26:50.682308 2026] [:error] [pid 21706:tid 21725] [client 72.146.30.147:24157] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 11 01:26:50.914743 2026] [:error] [pid 21706:tid 21717] [client 72.146.30.147:24157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sat Apr 11 01:26:51.160105 2026] [:error] [pid 21706:tid 21715] [client 72.146.30.147:24157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Apr 11 01:26:51.392940 2026] [:error] [pid 21706:tid 21726] [client 72.146.30.147:24157] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat Apr 11 01:26:51.626290 2026] [:error] [pid 21706:tid 21708] [client 72.146.30.147:24157] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat Apr 11 01:26:51.885737 2026] [:error] [pid 21706:tid 21732] [client 72.146.30.147:24157] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Sat Apr 11 02:39:49.709884 2026] [:error] [pid 21706:tid 21729] [client 186.158.6.152:64624] [client 186.158.6.152] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.158.6.152, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adlD9SGQ1M5d8fQSsLHRSgAAABU"]
[Sat Apr 11 02:39:49.714767 2026] [:error] [pid 21706:tid 21729] [client 186.158.6.152:64624] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 11 02:56:28.537142 2026] [:error] [pid 55451:tid 55468] [client 20.100.191.67:2688] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 09:14:26.531957 2026] [:error] [pid 19452:tid 19468] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-942.php
[Sat Apr 11 09:14:26.770521 2026] [:error] [pid 19452:tid 19460] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sat Apr 11 09:14:27.035604 2026] [:error] [pid 19452:tid 19467] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sat Apr 11 09:14:27.274810 2026] [:error] [pid 19452:tid 19463] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sat Apr 11 09:14:27.521430 2026] [:error] [pid 19452:tid 19466] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Sat Apr 11 09:14:27.765965 2026] [:error] [pid 19452:tid 19462] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 11 09:14:28.064774 2026] [:error] [pid 19452:tid 19463] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Sat Apr 11 09:14:28.342367 2026] [:error] [pid 19452:tid 19477] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sat Apr 11 09:14:28.584516 2026] [:error] [pid 19452:tid 19471] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Sat Apr 11 09:14:28.825597 2026] [:error] [pid 19452:tid 19467] [client 68.221.64.41:30414] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Sat Apr 11 09:14:29.107582 2026] [:error] [pid 19452:tid 19459] [client 68.221.64.41:30414] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admgdeVaim9CK1Y72sIx4gAAAAU"]
[Sat Apr 11 09:14:29.640793 2026] [:error] [pid 18016:tid 18037] [client 68.221.64.41:55305] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admgdecxaCYZQ49a1dm-tAAAAFM"]
[Sat Apr 11 09:14:30.285708 2026] [:error] [pid 19483:tid 19495] [client 68.221.64.41:59245] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admgdkfhEoDX8oI2QgsaDgAAAIo"]
[Sat Apr 11 09:14:30.951251 2026] [:error] [pid 18016:tid 18040] [client 68.221.64.41:30444] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "admgducxaCYZQ49a1dm-twAAAFY"]
[Sat Apr 11 09:14:31.734548 2026] [:error] [pid 19452:tid 19472] [client 68.221.64.41:55434] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "admgd-Vaim9CK1Y72sIx6QAAABI"]
[Sat Apr 11 09:14:32.412819 2026] [:error] [pid 18016:tid 18036] [client 68.221.64.41:26080] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "admgeOcxaCYZQ49a1dm-vwAAAFI"]
[Sat Apr 11 09:14:33.327103 2026] [:error] [pid 17921:tid 18004] [client 68.221.64.41:59220] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "admgeVBsNecLQSPLg3D0kAAAAZg"]
[Sat Apr 11 09:14:34.055849 2026] [:error] [pid 18016:tid 18027] [client 68.221.64.41:56623] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "admgeucxaCYZQ49a1dm-xAAAAEk"]
[Sat Apr 11 09:14:34.907612 2026] [:error] [pid 19452:tid 19471] [client 68.221.64.41:26093] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admgeuVaim9CK1Y72sIx7QAAABE"]
[Sat Apr 11 09:14:35.589824 2026] [:error] [pid 19452:tid 19469] [client 68.221.64.41:34363] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admge-Vaim9CK1Y72sIx8AAAAA8"]
[Sat Apr 11 09:14:36.191511 2026] [:error] [pid 18016:tid 18021] [client 68.221.64.41:34330] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admgfOcxaCYZQ49a1dm-zwAAAEM"]
[Sat Apr 11 09:14:36.726529 2026] [:error] [pid 19483:tid 19494] [client 68.221.64.41:26094] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "admgfEfhEoDX8oI2QgsaKwAAAIk"]
[Sat Apr 11 09:14:37.405206 2026] [:error] [pid 18016:tid 18020] [client 68.221.64.41:55487] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "admgfecxaCYZQ49a1dm-1gAAAEI"]
[Sat Apr 11 09:14:38.573838 2026] [:error] [pid 19452:tid 19473] [client 68.221.64.41:20674] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "admgfuVaim9CK1Y72sIx9AAAABM"]
[Sat Apr 11 09:14:40.018046 2026] [:error] [pid 18016:tid 18036] [client 68.221.64.41:56596] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "admggOcxaCYZQ49a1dm-4AAAAFI"]
[Sat Apr 11 09:14:40.865225 2026] [:error] [pid 18016:tid 18039] [client 68.221.64.41:55457] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "admggOcxaCYZQ49a1dm-5QAAAFU"]
[Sat Apr 11 09:14:41.885519 2026] [:error] [pid 17921:tid 17981] [client 68.221.64.41:55307] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "admggVBsNecLQSPLg3D0lwAAAYE"]
[Sat Apr 11 09:14:43.006214 2026] [:error] [pid 19452:tid 19474] [client 68.221.64.41:56634] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "admgg-Vaim9CK1Y72sIx_wAAABQ"]
[Sat Apr 11 09:14:43.863917 2026] [:error] [pid 19452:tid 19454] [client 68.221.64.41:20705] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "admgg-Vaim9CK1Y72sIyBAAAAAA"]
[Sat Apr 11 09:14:44.522640 2026] [:error] [pid 19483:tid 19508] [client 68.221.64.41:34239] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "admghEfhEoDX8oI2QgsaVwAAAJc"]
[Sat Apr 11 09:14:45.267095 2026] [:error] [pid 17921:tid 17994] [client 68.221.64.41:55459] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admghVBsNecLQSPLg3D0mAAAAY4"]
[Sat Apr 11 09:14:46.651047 2026] [:error] [pid 17920:tid 17958] [client 68.221.64.41:33593] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admghj5Lc1p-Aqpat3luqAAAAUU"]
[Sat Apr 11 09:14:48.358331 2026] [:error] [pid 17919:tid 17937] [client 68.221.64.41:30458] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admgiA4Th_c8TGOTho7pegAAAQ0"]
[Sat Apr 11 09:14:49.789491 2026] [:error] [pid 19483:tid 19493] [client 68.221.64.41:33580] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "admgiUfhEoDX8oI2QgsaagAAAIg"]
[Sat Apr 11 09:14:52.559655 2026] [:error] [pid 18016:tid 18030] [client 68.221.64.41:62781] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "admgjOcxaCYZQ49a1dm_BgAAAEw"]
[Sat Apr 11 09:15:17.371252 2026] [:error] [pid 18016:tid 18040] [client 68.221.64.41:38706] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admgpecxaCYZQ49a1dm_WwAAAFY"]
[Sat Apr 11 09:15:18.105250 2026] [:error] [pid 18016:tid 18027] [client 68.221.64.41:36804] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admgpucxaCYZQ49a1dm_XwAAAEk"]
[Sat Apr 11 09:15:18.943126 2026] [:error] [pid 18016:tid 18019] [client 68.221.64.41:20079] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admgpucxaCYZQ49a1dm_ZwAAAEE"]
[Sat Apr 11 09:15:19.766884 2026] [:error] [pid 19483:tid 19498] [client 68.221.64.41:63382] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "admgp0fhEoDX8oI2QgsaxQAAAI0"]
[Sat Apr 11 09:15:20.464780 2026] [:error] [pid 19483:tid 19490] [client 68.221.64.41:43778] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "admgqEfhEoDX8oI2QgsaywAAAIU"]
[Sat Apr 11 09:15:21.084111 2026] [:error] [pid 18016:tid 18021] [client 68.221.64.41:43842] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "admgqecxaCYZQ49a1dm_dwAAAEM"]
[Sat Apr 11 09:15:21.872078 2026] [:error] [pid 17919:tid 17946] [client 68.221.64.41:43787] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "admgqQ4Th_c8TGOTho7pqAAAARY"]
[Sat Apr 11 09:15:22.502631 2026] [:error] [pid 18016:tid 18037] [client 68.221.64.41:29934] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "admgqucxaCYZQ49a1dm_hAAAAFM"]
[Sat Apr 11 09:15:23.140735 2026] [:error] [pid 19483:tid 19501] [client 68.221.64.41:44494] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "admgq0fhEoDX8oI2Qgsa0QAAAJA"]
[Sat Apr 11 09:15:23.739847 2026] [:error] [pid 19483:tid 19493] [client 68.221.64.41:44491] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "admgq0fhEoDX8oI2Qgsa1gAAAIg"]
[Sat Apr 11 09:15:24.303343 2026] [:error] [pid 18016:tid 18034] [client 68.221.64.41:38684] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "admgrOcxaCYZQ49a1dm_kgAAAFA"]
[Sat Apr 11 09:15:24.849459 2026] [:error] [pid 18016:tid 18032] [client 68.221.64.41:38662] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "admgrOcxaCYZQ49a1dm_lwAAAE4"]
[Sat Apr 11 09:15:25.366411 2026] [:error] [pid 18016:tid 18035] [client 68.221.64.41:63415] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "admgrecxaCYZQ49a1dm_mwAAAFE"]
[Sat Apr 11 09:15:26.043212 2026] [:error] [pid 19483:tid 19493] [client 68.221.64.41:64122] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "admgrkfhEoDX8oI2Qgsa5AAAAIg"]
[Sat Apr 11 09:15:26.624856 2026] [:error] [pid 19483:tid 19485] [client 68.221.64.41:64068] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "admgrkfhEoDX8oI2Qgsa6wAAAIA"]
[Sat Apr 11 09:15:27.255885 2026] [:error] [pid 19483:tid 19487] [client 68.221.64.41:38703] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "admgr0fhEoDX8oI2Qgsa8QAAAII"]
[Sat Apr 11 09:15:27.775189 2026] [:error] [pid 17920:tid 17960] [client 68.221.64.41:38714] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "admgrz5Lc1p-Aqpat3lu5wAAAUc"]
[Sat Apr 11 09:15:28.366412 2026] [:error] [pid 18016:tid 18037] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Sat Apr 11 09:15:28.618598 2026] [:error] [pid 18016:tid 18029] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Sat Apr 11 09:15:28.861572 2026] [:error] [pid 18016:tid 18036] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Sat Apr 11 09:15:29.114829 2026] [:error] [pid 18016:tid 18024] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/2nzyHnOkEg.php
[Sat Apr 11 09:15:29.505881 2026] [:error] [pid 18016:tid 18039] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/oircv.php
[Sat Apr 11 09:15:29.748162 2026] [:error] [pid 18016:tid 18023] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Sat Apr 11 09:15:30.029625 2026] [:error] [pid 18016:tid 18032] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Sat Apr 11 09:15:30.298853 2026] [:error] [pid 18016:tid 18040] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Sat Apr 11 09:15:30.560345 2026] [:error] [pid 18016:tid 18018] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Sat Apr 11 09:15:30.804182 2026] [:error] [pid 18016:tid 18030] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Sat Apr 11 09:15:31.061134 2026] [:error] [pid 18016:tid 18038] [client 68.221.64.41:44538] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sat Apr 11 09:15:31.299680 2026] [:error] [pid 18016:tid 18037] [client 68.221.64.41:44538] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "admgs-cxaCYZQ49a1dm_tgAAAFM"]
[Sat Apr 11 09:15:32.018195 2026] [:error] [pid 19452:tid 19462] [client 68.221.64.41:29897] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "admgtOVaim9CK1Y72sIySgAAAAg"]
[Sat Apr 11 09:15:33.241612 2026] [:error] [pid 18016:tid 18040] [client 68.221.64.41:44527] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "admgtecxaCYZQ49a1dm_vQAAAFY"]
[Sat Apr 11 09:15:34.299208 2026] [:error] [pid 18016:tid 18024] [client 68.221.64.41:43825] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "admgtucxaCYZQ49a1dm_xwAAAEY"]
[Sat Apr 11 09:15:35.406922 2026] [:error] [pid 17919:tid 17941] [client 68.221.64.41:43805] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "admgtw4Th_c8TGOTho7ptQAAARE"]
[Sat Apr 11 09:15:35.943950 2026] [:error] [pid 17919:tid 17946] [client 68.221.64.41:29919] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "admgtw4Th_c8TGOTho7ptwAAARY"]
[Sat Apr 11 09:15:36.768282 2026] [:error] [pid 18016:tid 18037] [client 68.221.64.41:43800] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "admguOcxaCYZQ49a1dm_zAAAAFM"]
[Sat Apr 11 09:15:38.043388 2026] [:error] [pid 17919:tid 17924] [client 68.221.64.41:29298] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "admgug4Th_c8TGOTho7pvgAAAQA"]
[Sat Apr 11 09:15:40.153129 2026] [:error] [pid 18016:tid 18029] [client 68.221.64.41:29907] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "admgvOcxaCYZQ49a1dm_2gAAAEs"]
[Sat Apr 11 09:15:41.623687 2026] [:error] [pid 18016:tid 18024] [client 68.221.64.41:29904] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "admgvecxaCYZQ49a1dm_5wAAAEY"]
[Sat Apr 11 09:15:42.683121 2026] [:error] [pid 19452:tid 19474] [client 68.221.64.41:63361] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "admgvuVaim9CK1Y72sIyWAAAABQ"]
[Sat Apr 11 09:15:43.667842 2026] [:error] [pid 18016:tid 18022] [client 68.221.64.41:64758] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "admgv-cxaCYZQ49a1dm_7wAAAEQ"]
[Sat Apr 11 09:15:45.004814 2026] [:error] [pid 19452:tid 19472] [client 68.221.64.41:65394] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "admgweVaim9CK1Y72sIyYgAAABI"]
[Sat Apr 11 09:15:46.483179 2026] [:error] [pid 19483:tid 19490] [client 68.221.64.41:35550] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "admgwkfhEoDX8oI2QgsbMQAAAIU"]
[Sat Apr 11 09:15:47.457683 2026] [:error] [pid 19483:tid 19495] [client 68.221.64.41:29235] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "admgw0fhEoDX8oI2QgsbNQAAAIo"]
[Sat Apr 11 09:15:48.179469 2026] [:error] [pid 18016:tid 18033] [client 68.221.64.41:36814] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "admgxOcxaCYZQ49a1dnAEQAAAE8"]
[Sat Apr 11 09:15:48.896739 2026] [:error] [pid 18016:tid 18025] [client 68.221.64.41:38686] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "admgxOcxaCYZQ49a1dnAEwAAAEc"]
[Sat Apr 11 09:15:49.553328 2026] [:error] [pid 18016:tid 18040] [client 68.221.64.41:64764] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "admgxecxaCYZQ49a1dnAGAAAAFY"]
[Sat Apr 11 09:15:50.559054 2026] [:error] [pid 18016:tid 18018] [client 68.221.64.41:29301] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "admgxucxaCYZQ49a1dnAHQAAAEA"]
[Sat Apr 11 09:15:51.320587 2026] [:error] [pid 19452:tid 19462] [client 68.221.64.41:64759] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "admgx-Vaim9CK1Y72sIycwAAAAg"]
[Sat Apr 11 09:15:52.037101 2026] [:error] [pid 18016:tid 18019] [client 68.221.64.41:36811] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "admgyOcxaCYZQ49a1dnAKwAAAEE"]
[Sat Apr 11 09:15:52.695050 2026] [:error] [pid 17920:tid 17974] [client 68.221.64.41:64750] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "admgyD5Lc1p-Aqpat3lu_gAAAVU"]
[Sat Apr 11 09:15:53.274420 2026] [:error] [pid 18016:tid 18027] [client 68.221.64.41:62139] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "admgyecxaCYZQ49a1dnAMAAAAEk"]
[Sat Apr 11 09:15:53.981718 2026] [:error] [pid 19452:tid 19463] [client 68.221.64.41:29941] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "admgyeVaim9CK1Y72sIyegAAAAk"]
[Sat Apr 11 09:15:54.607482 2026] [:error] [pid 18016:tid 18024] [client 68.221.64.41:29900] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "admgyucxaCYZQ49a1dnAOAAAAEY"]
[Sat Apr 11 09:15:55.204166 2026] [:error] [pid 18016:tid 18034] [client 68.221.64.41:23619] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "admgy-cxaCYZQ49a1dnAPwAAAFA"]
[Sat Apr 11 09:15:55.860152 2026] [:error] [pid 18016:tid 18033] [client 68.221.64.41:62122] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "admgy-cxaCYZQ49a1dnARAAAAE8"]
[Sat Apr 11 09:15:56.627286 2026] [:error] [pid 18016:tid 18031] [client 68.221.64.41:62085] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "admgzOcxaCYZQ49a1dnATAAAAE0"]
[Sat Apr 11 09:15:57.261686 2026] [:error] [pid 18016:tid 18037] [client 68.221.64.41:63401] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "admgzecxaCYZQ49a1dnAVAAAAFM"]
[Sat Apr 11 09:15:57.802174 2026] [:error] [pid 18016:tid 18040] [client 68.221.64.41:29226] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "admgzecxaCYZQ49a1dnAWQAAAFY"]
[Sat Apr 11 09:15:58.338886 2026] [:error] [pid 18016:tid 18026] [client 68.221.64.41:29892] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "admgzucxaCYZQ49a1dnAXgAAAEg"]
[Sat Apr 11 09:15:58.896209 2026] [:error] [pid 17919:tid 17933] [client 68.221.64.41:65353] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "admgzg4Th_c8TGOTho7pzQAAAQk"]
[Sat Apr 11 09:15:59.407366 2026] [:error] [pid 19483:tid 19493] [client 68.221.64.41:29261] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "admgz0fhEoDX8oI2QgsbRwAAAIg"]
[Sat Apr 11 09:16:00.013999 2026] [:error] [pid 18016:tid 18034] [client 68.221.64.41:64742] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "admg0OcxaCYZQ49a1dnAZAAAAFA"]
[Sat Apr 11 09:16:00.674764 2026] [:error] [pid 18016:tid 18032] [client 68.221.64.41:65380] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "admg0OcxaCYZQ49a1dnAaAAAAE4"]
[Sat Apr 11 09:16:01.319192 2026] [:error] [pid 18016:tid 18039] [client 68.221.64.41:32350] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "admg0ecxaCYZQ49a1dnAcQAAAFU"]
[Sat Apr 11 09:16:02.162334 2026] [:error] [pid 18016:tid 18025] [client 68.221.64.41:29213] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admg0ucxaCYZQ49a1dnAeQAAAEc"]
[Sat Apr 11 09:16:03.017175 2026] [:error] [pid 17919:tid 17930] [client 68.221.64.41:65345] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admg0w4Th_c8TGOTho7p1wAAAQY"]
[Sat Apr 11 09:16:03.715667 2026] [:error] [pid 17920:tid 17959] [client 68.221.64.41:29305] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admg0z5Lc1p-Aqpat3lvBgAAAUY"]
[Sat Apr 11 09:16:04.292469 2026] [:error] [pid 19483:tid 19496] [client 68.221.64.41:32332] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "admg1EfhEoDX8oI2QgsbTgAAAIs"]
[Sat Apr 11 09:16:05.040361 2026] [:error] [pid 19483:tid 19490] [client 68.221.64.41:23637] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "admg1UfhEoDX8oI2QgsbTwAAAIU"]
[Sat Apr 11 09:16:05.586171 2026] [:error] [pid 19452:tid 19465] [client 68.221.64.41:29299] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "admg1eVaim9CK1Y72sIygAAAAAs"]
[Sat Apr 11 09:16:06.391694 2026] [:error] [pid 18016:tid 18019] [client 68.221.64.41:32337] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "admg1ucxaCYZQ49a1dnAlQAAAEE"]
[Sat Apr 11 09:16:07.145918 2026] [:error] [pid 19483:tid 19487] [client 68.221.64.41:20075] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "admg10fhEoDX8oI2QgsbWAAAAII"]
[Sat Apr 11 09:16:07.901478 2026] [:error] [pid 17919:tid 17938] [client 68.221.64.41:23674] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admg1w4Th_c8TGOTho7p4QAAAQ4"]
[Sat Apr 11 09:16:08.889594 2026] [:error] [pid 17921:tid 17983] [client 68.221.64.41:64710] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admg2FBsNecLQSPLg3D1BgAAAYM"]
[Sat Apr 11 09:16:09.765773 2026] [:error] [pid 18016:tid 18031] [client 68.221.64.41:29309] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admg2ecxaCYZQ49a1dnAogAAAE0"]
[Sat Apr 11 09:16:10.391996 2026] [:error] [pid 19483:tid 19488] [client 68.221.64.41:29227] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "admg2kfhEoDX8oI2QgsbYgAAAIM"]
[Sat Apr 11 09:16:11.063095 2026] [:error] [pid 19483:tid 19497] [client 68.221.64.41:40021] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "admg20fhEoDX8oI2QgsbZAAAAIw"]
[Sat Apr 11 09:16:11.622192 2026] [:error] [pid 17919:tid 17925] [client 68.221.64.41:29279] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "admg2w4Th_c8TGOTho7p6QAAAQE"]
[Sat Apr 11 09:16:12.307930 2026] [:error] [pid 19452:tid 19458] [client 68.221.64.41:23642] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "admg3OVaim9CK1Y72sIyjwAAAAQ"]
[Sat Apr 11 09:16:13.072375 2026] [:error] [pid 17920:tid 17959] [client 68.221.64.41:23646] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "admg3T5Lc1p-Aqpat3lvGAAAAUY"]
[Sat Apr 11 09:16:13.595307 2026] [:error] [pid 19483:tid 19488] [client 68.221.64.41:29923] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "admg3UfhEoDX8oI2QgsbbQAAAIM"]
[Sat Apr 11 09:16:14.178365 2026] [:error] [pid 17921:tid 17997] [client 68.221.64.41:33540] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "admg3lBsNecLQSPLg3D1FgAAAZE"]
[Sat Apr 11 09:16:14.972353 2026] [:error] [pid 18016:tid 18032] [client 68.221.64.41:22491] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "admg3ucxaCYZQ49a1dnAuQAAAE4"]
[Sat Apr 11 09:16:15.650636 2026] [:error] [pid 18016:tid 18023] [client 68.221.64.41:26750] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "admg3-cxaCYZQ49a1dnAwQAAAEU"]
[Sat Apr 11 09:16:16.171994 2026] [:error] [pid 19483:tid 19487] [client 68.221.64.41:33538] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "admg4EfhEoDX8oI2QgsbbgAAAII"]
[Sat Apr 11 09:16:16.834780 2026] [:error] [pid 18016:tid 18039] [client 68.221.64.41:38778] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "admg4OcxaCYZQ49a1dnAzwAAAFU"]
[Sat Apr 11 09:16:17.529699 2026] [:error] [pid 18016:tid 18033] [client 68.221.64.41:22507] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "admg4ecxaCYZQ49a1dnA1AAAAE8"]
[Sat Apr 11 09:16:18.660751 2026] [:error] [pid 18016:tid 18034] [client 68.221.64.41:38759] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "admg4ucxaCYZQ49a1dnA2gAAAFA"]
[Sat Apr 11 09:16:19.769185 2026] [:error] [pid 18016:tid 18034] [client 68.221.64.41:23639] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "admg4-cxaCYZQ49a1dnA6wAAAFA"]
[Sat Apr 11 09:16:21.667545 2026] [:error] [pid 18016:tid 18030] [client 68.221.64.41:62104] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "admg5ecxaCYZQ49a1dnBBAAAAEw"]
[Sat Apr 11 09:16:22.610814 2026] [:error] [pid 17919:tid 17935] [client 68.221.64.41:55836] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "admg5g4Th_c8TGOTho7p-wAAAQs"]
[Sat Apr 11 09:16:23.372191 2026] [:error] [pid 17919:tid 17942] [client 68.221.64.41:29240] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "admg5w4Th_c8TGOTho7p_gAAARI"]
[Sat Apr 11 09:16:24.281160 2026] [:error] [pid 18016:tid 18037] [client 68.221.64.41:21191] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admg6OcxaCYZQ49a1dnBKAAAAFM"]
[Sat Apr 11 09:16:26.080655 2026] [:error] [pid 19483:tid 19498] [client 68.221.64.41:23675] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admg6kfhEoDX8oI2QgsbfwAAAI0"]
[Sat Apr 11 09:16:27.096675 2026] [:error] [pid 17921:tid 17985] [client 68.221.64.41:21219] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admg61BsNecLQSPLg3D1NgAAAYU"]
[Sat Apr 11 09:16:27.972784 2026] [:error] [pid 19483:tid 19499] [client 68.221.64.41:62137] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "admg60fhEoDX8oI2QgsbhwAAAI4"]
[Sat Apr 11 09:16:28.707776 2026] [:error] [pid 19452:tid 19463] [client 68.221.64.41:18271] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "admg7OVaim9CK1Y72sIyoQAAAAk"]
[Sat Apr 11 09:16:29.258712 2026] [:error] [pid 17920:tid 17964] [client 68.221.64.41:26737] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "admg7T5Lc1p-Aqpat3lvPAAAAUs"]
[Sat Apr 11 09:16:29.763895 2026] [:error] [pid 17920:tid 17954] [client 68.221.64.41:40063] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "admg7T5Lc1p-Aqpat3lvPQAAAUE"]
[Sat Apr 11 09:16:30.399845 2026] [:error] [pid 19452:tid 19454] [client 68.221.64.41:18242] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "admg7uVaim9CK1Y72sIypAAAAAA"]
[Sat Apr 11 09:16:31.127534 2026] [:error] [pid 19452:tid 19460] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/maintura.php
[Sat Apr 11 09:16:31.378751 2026] [:error] [pid 19452:tid 19476] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/iee52ruz0s81ndrdefault.php
[Sat Apr 11 09:16:31.619536 2026] [:error] [pid 19452:tid 19474] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/nvwf4svpvqohxdjtbjCdefault.php
[Sat Apr 11 09:16:32.030259 2026] [:error] [pid 19452:tid 19462] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-220.php
[Sat Apr 11 09:16:32.274319 2026] [:error] [pid 19452:tid 19459] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/r9pbhistk1lifhnjadpCdefault.php
[Sat Apr 11 09:16:32.515366 2026] [:error] [pid 19452:tid 19470] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sat Apr 11 09:16:32.793914 2026] [:error] [pid 19452:tid 19464] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/xxiviLDIot.php
[Sat Apr 11 09:16:33.034852 2026] [:error] [pid 19452:tid 19469] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/hanyatersenyum.php
[Sat Apr 11 09:16:33.296546 2026] [:error] [pid 19452:tid 19457] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php
[Sat Apr 11 09:16:33.536562 2026] [:error] [pid 19452:tid 19467] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/upll22.php
[Sat Apr 11 09:16:33.818923 2026] [:error] [pid 19452:tid 19465] [client 68.221.64.41:55871] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sat Apr 11 09:16:34.088978 2026] [:error] [pid 19452:tid 19455] [client 68.221.64.41:55871] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "admg8uVaim9CK1Y72sIytAAAAAE"]
[Sat Apr 11 09:16:34.913756 2026] [:error] [pid 19483:tid 19502] [client 68.221.64.41:40053] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "admg8kfhEoDX8oI2QgsbnAAAAJE"]
[Sat Apr 11 09:16:35.430072 2026] [:error] [pid 18016:tid 18020] [client 68.221.64.41:22518] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "admg8-cxaCYZQ49a1dnBSwAAAEI"]
[Sat Apr 11 09:16:36.165511 2026] [:error] [pid 19452:tid 19457] [client 68.221.64.41:32331] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "admg9OVaim9CK1Y72sIywAAAAAM"]
[Sat Apr 11 09:16:36.756414 2026] [:error] [pid 19452:tid 19454] [client 68.221.64.41:20635] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "admg9OVaim9CK1Y72sIyxQAAAAA"]
[Sat Apr 11 09:16:37.710140 2026] [:error] [pid 17919:tid 17940] [client 68.221.64.41:32345] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "admg9Q4Th_c8TGOTho7qIgAAARA"]
[Sat Apr 11 09:16:38.415558 2026] [:error] [pid 19483:tid 19498] [client 68.221.64.41:38757] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "admg9kfhEoDX8oI2QgsbqAAAAI0"]
[Sat Apr 11 09:16:39.357755 2026] [:error] [pid 17920:tid 17970] [client 68.221.64.41:33630] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "admg9z5Lc1p-Aqpat3lvUgAAAVE"]
[Sat Apr 11 09:16:40.335151 2026] [:error] [pid 19452:tid 19455] [client 68.221.64.41:40022] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admg-OVaim9CK1Y72sIy0gAAAAE"]
[Sat Apr 11 09:16:41.138993 2026] [:error] [pid 19452:tid 19477] [client 68.221.64.41:21186] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admg-eVaim9CK1Y72sIy2QAAABc"]
[Sat Apr 11 09:16:42.127158 2026] [:error] [pid 19483:tid 19486] [client 68.221.64.41:20648] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admg-kfhEoDX8oI2QgsbuQAAAIE"]
[Sat Apr 11 09:16:42.902814 2026] [:error] [pid 19452:tid 19463] [client 68.221.64.41:60900] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "admg-uVaim9CK1Y72sIy4QAAAAk"]
[Sat Apr 11 09:16:43.643324 2026] [:error] [pid 19483:tid 19489] [client 68.221.64.41:55417] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "admg-0fhEoDX8oI2QgsbxgAAAIQ"]
[Sat Apr 11 09:16:44.744109 2026] [:error] [pid 19452:tid 19478] [client 68.221.64.41:55382] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "admg_OVaim9CK1Y72sIy6wAAABg"]
[Sat Apr 11 09:16:45.887556 2026] [:error] [pid 17919:tid 17941] [client 68.221.64.41:18299] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "admg_Q4Th_c8TGOTho7qLAAAARE"]
[Sat Apr 11 09:16:46.597583 2026] [:error] [pid 19452:tid 19454] [client 68.221.64.41:55398] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "admg_uVaim9CK1Y72sIy7gAAAAA"]
[Sat Apr 11 09:16:47.261707 2026] [:error] [pid 18016:tid 18025] [client 68.221.64.41:3580] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "admg_-cxaCYZQ49a1dnBbwAAAEc"]
[Sat Apr 11 09:16:48.046536 2026] [:error] [pid 18016:tid 18022] [client 68.221.64.41:18244] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "admhAOcxaCYZQ49a1dnBcgAAAEQ"]
[Sat Apr 11 09:16:48.716543 2026] [:error] [pid 19452:tid 19466] [client 68.221.64.41:38779] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "admhAOVaim9CK1Y72sIy9gAAAAw"]
[Sat Apr 11 09:16:49.296290 2026] [:error] [pid 19452:tid 19468] [client 68.221.64.41:38777] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "admhAeVaim9CK1Y72sIy-QAAAA4"]
[Sat Apr 11 09:16:49.864711 2026] [:error] [pid 18016:tid 18034] [client 68.221.64.41:60910] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admhAecxaCYZQ49a1dnBfwAAAFA"]
[Sat Apr 11 09:16:53.464555 2026] [:error] [pid 22663:tid 22670] [client 68.221.64.41:33639] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admhBY1p7ez17BT2hZYENAAAAQI"]
[Sat Apr 11 09:16:54.224913 2026] [:error] [pid 22663:tid 22678] [client 68.221.64.41:47137] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admhBo1p7ez17BT2hZYEVgAAAQo"]
[Sat Apr 11 09:16:54.724142 2026] [:error] [pid 22663:tid 22673] [client 68.221.64.41:55820] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "admhBo1p7ez17BT2hZYEWwAAAQU"]
[Sat Apr 11 09:16:55.395629 2026] [:error] [pid 22756:tid 22758] [client 68.221.64.41:47117] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admhB2foSJ40LEm6kfqp9wAAAAA"]
[Sat Apr 11 09:16:55.929771 2026] [:error] [pid 22663:tid 22673] [client 68.221.64.41:18259] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admhB41p7ez17BT2hZYEZwAAAQU"]
[Sat Apr 11 09:16:56.438618 2026] [:error] [pid 22663:tid 22671] [client 68.221.64.41:39423] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admhCI1p7ez17BT2hZYEbQAAAQM"]
[Sat Apr 11 09:16:56.960248 2026] [:error] [pid 22665:tid 22735] [client 68.221.64.41:3479] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "admhCEgi15J0QUr6OrPb4QAAAYs"]
[Sat Apr 11 09:16:57.561768 2026] [:error] [pid 22663:tid 22687] [client 68.221.64.41:18253] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "admhCY1p7ez17BT2hZYEdQAAARM"]
[Sat Apr 11 09:16:58.091520 2026] [:error] [pid 22665:tid 22738] [client 68.221.64.41:39390] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "admhCkgi15J0QUr6OrPb5AAAAY4"]
[Sat Apr 11 09:16:58.601363 2026] [:error] [pid 22663:tid 22669] [client 68.221.64.41:3540] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "admhCo1p7ez17BT2hZYEfQAAAQE"]
[Sat Apr 11 09:16:59.122840 2026] [:error] [pid 22665:tid 22746] [client 68.221.64.41:39364] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "admhC0gi15J0QUr6OrPb6gAAAZY"]
[Sat Apr 11 09:16:59.616312 2026] [:error] [pid 22664:tid 22702] [client 68.221.64.41:60879] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhCwRS_OPFpcXOZmWCEgAAAUU"]
[Sat Apr 11 09:17:00.145757 2026] [:error] [pid 22756:tid 22771] [client 68.221.64.41:32322] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhDGfoSJ40LEm6kfqqAAAAAA0"]
[Sat Apr 11 09:17:00.832896 2026] [:error] [pid 22756:tid 22778] [client 68.221.64.41:39381] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhDGfoSJ40LEm6kfqqBgAAABQ"]
[Sat Apr 11 09:17:01.325399 2026] [:error] [pid 22756:tid 22781] [client 68.221.64.41:18273] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhDWfoSJ40LEm6kfqqCQAAABc"]
[Sat Apr 11 09:17:01.956569 2026] [:error] [pid 22665:tid 22733] [client 68.221.64.41:21807] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "admhDUgi15J0QUr6OrPb8QAAAYk"]
[Sat Apr 11 09:17:02.448285 2026] [:error] [pid 22756:tid 22769] [client 68.221.64.41:21767] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "admhDmfoSJ40LEm6kfqqDwAAAAs"]
[Sat Apr 11 09:17:03.017148 2026] [:error] [pid 22665:tid 22738] [client 68.221.64.41:21209] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "admhD0gi15J0QUr6OrPb9AAAAY4"]
[Sat Apr 11 09:17:03.560618 2026] [:error] [pid 22664:tid 22721] [client 68.221.64.41:3558] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "admhDwRS_OPFpcXOZmWCHAAAAVg"]
[Sat Apr 11 09:17:04.079274 2026] [:error] [pid 22664:tid 22701] [client 68.221.64.41:39408] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "admhEARS_OPFpcXOZmWCHgAAAUQ"]
[Sat Apr 11 09:17:04.619184 2026] [:error] [pid 22664:tid 22707] [client 68.221.64.41:26716] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "admhEARS_OPFpcXOZmWCIwAAAUo"]
[Sat Apr 11 09:17:05.170465 2026] [:error] [pid 22663:tid 22686] [client 68.221.64.41:47154] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "admhEY1p7ez17BT2hZYEogAAARI"]
[Sat Apr 11 09:17:05.846038 2026] [:error] [pid 22665:tid 22728] [client 68.221.64.41:60903] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "admhEUgi15J0QUr6OrPb-QAAAYQ"]
[Sat Apr 11 09:17:06.332453 2026] [:error] [pid 22664:tid 22720] [client 68.221.64.41:52411] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "admhEgRS_OPFpcXOZmWCLAAAAVc"]
[Sat Apr 11 09:17:06.922543 2026] [:error] [pid 22663:tid 22676] [client 68.221.64.41:3536] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "admhEo1p7ez17BT2hZYEswAAAQg"]
[Sat Apr 11 09:17:07.474288 2026] [:error] [pid 22756:tid 22777] [client 68.221.64.41:45097] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "admhE2foSJ40LEm6kfqqJgAAABM"]
[Sat Apr 11 09:17:08.021212 2026] [:error] [pid 22664:tid 22712] [client 68.221.64.41:52357] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "admhFARS_OPFpcXOZmWCMwAAAU8"]
[Sat Apr 11 09:17:08.605534 2026] [:error] [pid 22664:tid 22710] [client 68.221.64.41:52386] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "admhFARS_OPFpcXOZmWCOQAAAU0"]
[Sat Apr 11 09:17:09.238327 2026] [:error] [pid 22756:tid 22765] [client 68.221.64.41:52368] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "admhFWfoSJ40LEm6kfqqPAAAAAc"]
[Sat Apr 11 09:17:09.984750 2026] [:error] [pid 22756:tid 22779] [client 68.221.64.41:20643] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "admhFWfoSJ40LEm6kfqqTwAAABU"]
[Sat Apr 11 09:17:10.798532 2026] [:error] [pid 22756:tid 22773] [client 68.221.64.41:3515] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "admhFmfoSJ40LEm6kfqqYQAAAA8"]
[Sat Apr 11 09:17:13.033786 2026] [:error] [pid 22664:tid 22708] [client 68.221.64.41:52402] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "admhGQRS_OPFpcXOZmWCYQAAAUs"]
[Sat Apr 11 09:17:14.310513 2026] [:error] [pid 22664:tid 22705] [client 68.221.64.41:20653] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "admhGgRS_OPFpcXOZmWCaQAAAUg"]
[Sat Apr 11 09:17:15.140386 2026] [:error] [pid 22756:tid 22769] [client 68.221.64.41:39386] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "admhG2foSJ40LEm6kfqqgwAAAAs"]
[Sat Apr 11 09:17:16.164281 2026] [:error] [pid 22665:tid 22730] [client 68.221.64.41:27925] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "admhHEgi15J0QUr6OrPcJwAAAYY"]
[Sat Apr 11 09:17:16.878045 2026] [:error] [pid 22756:tid 22764] [client 68.221.64.41:27927] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "admhHGfoSJ40LEm6kfqqjgAAAAY"]
[Sat Apr 11 09:17:17.404373 2026] [:error] [pid 22756:tid 22781] [client 68.221.64.41:21772] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "admhHWfoSJ40LEm6kfqqlAAAABc"]
[Sat Apr 11 09:17:17.986576 2026] [:error] [pid 22665:tid 22743] [client 68.221.64.41:47155] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "admhHUgi15J0QUr6OrPcLgAAAZM"]
[Sat Apr 11 09:17:18.580363 2026] [:error] [pid 22665:tid 22747] [client 68.221.64.41:39412] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "admhHkgi15J0QUr6OrPcMQAAAZc"]
[Sat Apr 11 09:17:19.389685 2026] [:error] [pid 22664:tid 22697] [client 68.221.64.41:3477] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "admhHwRS_OPFpcXOZmWCgAAAAUA"]
[Sat Apr 11 09:17:20.211919 2026] [:error] [pid 22664:tid 22701] [client 68.221.64.41:52407] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "admhIARS_OPFpcXOZmWChQAAAUQ"]
[Sat Apr 11 09:17:20.774459 2026] [:error] [pid 22664:tid 22700] [client 68.221.64.41:47119] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "admhIARS_OPFpcXOZmWCiwAAAUM"]
[Sat Apr 11 09:17:21.368093 2026] [:error] [pid 22665:tid 22742] [client 68.221.64.41:54263] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "admhIUgi15J0QUr6OrPcOQAAAZI"]
[Sat Apr 11 09:17:21.945826 2026] [:error] [pid 22756:tid 22771] [client 68.221.64.41:3483] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "admhIWfoSJ40LEm6kfqqnwAAAA0"]
[Sat Apr 11 09:17:22.577373 2026] [:error] [pid 22756:tid 22760] [client 68.221.64.41:54246] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "admhImfoSJ40LEm6kfqqpQAAAAI"]
[Sat Apr 11 09:17:23.136990 2026] [:error] [pid 22664:tid 22698] [client 68.221.64.41:60871] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "admhIwRS_OPFpcXOZmWCkwAAAUE"]
[Sat Apr 11 09:17:23.624377 2026] [:error] [pid 22665:tid 22745] [client 68.221.64.41:3514] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "admhI0gi15J0QUr6OrPcPAAAAZU"]
[Sat Apr 11 09:17:24.126560 2026] [:error] [pid 22665:tid 22739] [client 68.221.64.41:54226] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhJEgi15J0QUr6OrPcPgAAAY8"]
[Sat Apr 11 09:17:24.672290 2026] [:error] [pid 22665:tid 22728] [client 68.221.64.41:60916] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhJEgi15J0QUr6OrPcQQAAAYQ"]
[Sat Apr 11 09:17:25.159476 2026] [:error] [pid 22664:tid 22718] [client 68.221.64.41:45112] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhJQRS_OPFpcXOZmWCnQAAAVU"]
[Sat Apr 11 09:17:25.754925 2026] [:error] [pid 22665:tid 22734] [client 68.221.64.41:45080] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhJUgi15J0QUr6OrPcRAAAAYo"]
[Sat Apr 11 09:17:26.348327 2026] [:error] [pid 22665:tid 22735] [client 68.221.64.41:54230] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "admhJkgi15J0QUr6OrPcSAAAAYs"]
[Sat Apr 11 09:17:26.900597 2026] [:error] [pid 22664:tid 22708] [client 68.221.64.41:20625] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "admhJgRS_OPFpcXOZmWCpAAAAUs"]
[Sat Apr 11 09:17:27.437846 2026] [:error] [pid 22756:tid 22765] [client 68.221.64.41:60919] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "admhJ2foSJ40LEm6kfqqswAAAAc"]
[Sat Apr 11 09:17:27.968945 2026] [:error] [pid 22756:tid 22776] [client 68.221.64.41:45104] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "admhJ2foSJ40LEm6kfqqtgAAABI"]
[Sat Apr 11 09:17:28.514623 2026] [:error] [pid 22756:tid 22774] [client 68.221.64.41:3575] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "admhKGfoSJ40LEm6kfqqugAAABA"]
[Sat Apr 11 09:17:29.059599 2026] [:error] [pid 22756:tid 22759] [client 68.221.64.41:21771] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "admhKWfoSJ40LEm6kfqqvwAAAAE"]
[Sat Apr 11 09:17:29.614194 2026] [:error] [pid 22665:tid 22729] [client 68.221.64.41:21780] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "admhKUgi15J0QUr6OrPcUQAAAYU"]
[Sat Apr 11 09:17:30.227994 2026] [:error] [pid 22756:tid 22772] [client 68.221.64.41:3567] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "admhKmfoSJ40LEm6kfqqyQAAAA4"]
[Sat Apr 11 09:17:30.867338 2026] [:error] [pid 22756:tid 22759] [client 68.221.64.41:45110] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "admhKmfoSJ40LEm6kfqq0AAAAAE"]
[Sat Apr 11 09:17:31.358111 2026] [:error] [pid 22756:tid 22770] [client 68.221.64.41:27317] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "admhK2foSJ40LEm6kfqq1QAAAAw"]
[Sat Apr 11 09:17:32.311318 2026] [:error] [pid 22756:tid 22769] [client 68.221.64.41:21779] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "admhLGfoSJ40LEm6kfqq2AAAAAs"]
[Sat Apr 11 09:17:32.890118 2026] [:error] [pid 22756:tid 22777] [client 68.221.64.41:3503] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "admhLGfoSJ40LEm6kfqq2wAAABM"]
[Sat Apr 11 09:17:33.447334 2026] [:error] [pid 22756:tid 22773] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Apr 11 09:17:33.687291 2026] [:error] [pid 22756:tid 22775] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Apr 11 09:17:33.978128 2026] [:error] [pid 22756:tid 22772] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sat Apr 11 09:17:34.218810 2026] [:error] [pid 22756:tid 22759] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 11 09:17:34.467432 2026] [:error] [pid 22756:tid 22778] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 09:17:34.707072 2026] [:error] [pid 22756:tid 22762] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sat Apr 11 09:17:34.948625 2026] [:error] [pid 22756:tid 22766] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat Apr 11 09:17:36.468814 2026] [:error] [pid 22756:tid 22766] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat Apr 11 09:17:36.711526 2026] [:error] [pid 22756:tid 22776] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Apr 11 09:17:37.040030 2026] [:error] [pid 22756:tid 22760] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Sat Apr 11 09:17:37.280537 2026] [:error] [pid 22756:tid 22778] [client 68.221.64.41:21798] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 11 09:17:37.547463 2026] [:error] [pid 22756:tid 22779] [client 68.221.64.41:21798] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "admhMWfoSJ40LEm6kfqrAAAAABU"]
[Sat Apr 11 09:17:38.259583 2026] [:error] [pid 22665:tid 22743] [client 68.221.64.41:27318] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "admhMkgi15J0QUr6OrPcZQAAAZM"]
[Sat Apr 11 09:17:38.953162 2026] [:error] [pid 22663:tid 22676] [client 68.221.64.41:3830] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "admhMo1p7ez17BT2hZYFGQAAAQg"]
[Sat Apr 11 09:17:39.547295 2026] [:error] [pid 22665:tid 22741] [client 68.221.64.41:22978] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "admhM0gi15J0QUr6OrPcaQAAAZE"]
[Sat Apr 11 09:17:40.125891 2026] [:error] [pid 22756:tid 22780] [client 68.221.64.41:21808] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "admhNGfoSJ40LEm6kfqrGwAAABY"]
[Sat Apr 11 09:17:40.689379 2026] [:error] [pid 22665:tid 22746] [client 68.221.64.41:38123] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "admhNEgi15J0QUr6OrPccQAAAZY"]
[Sat Apr 11 09:17:41.288837 2026] [:error] [pid 22664:tid 22704] [client 68.221.64.41:3666] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "admhNQRS_OPFpcXOZmWCuQAAAUc"]
[Sat Apr 11 09:17:42.069001 2026] [:error] [pid 22756:tid 22779] [client 68.221.64.41:54220] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "admhNmfoSJ40LEm6kfqrQAAAABU"]
[Sat Apr 11 09:17:42.698899 2026] [:error] [pid 22665:tid 22732] [client 68.221.64.41:21766] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "admhNkgi15J0QUr6OrPcfwAAAYg"]
[Sat Apr 11 09:17:43.944552 2026] [:error] [pid 22665:tid 22726] [client 68.221.64.41:3516] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "admhN0gi15J0QUr6OrPciAAAAYI"]
[Sat Apr 11 09:17:44.895626 2026] [:error] [pid 22756:tid 22760] [client 68.221.64.41:40647] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "admhOGfoSJ40LEm6kfqrdwAAAAI"]
[Sat Apr 11 09:17:46.171110 2026] [:error] [pid 22756:tid 22782] [client 68.221.64.41:3652] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "admhOmfoSJ40LEm6kfqriAAAABg"]
[Sat Apr 11 09:17:47.441967 2026] [:error] [pid 22756:tid 22763] [client 68.221.64.41:3685] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhO2foSJ40LEm6kfqrlQAAAAU"]
[Sat Apr 11 09:17:49.295323 2026] [:error] [pid 22664:tid 22710] [client 68.221.64.41:26014] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhPQRS_OPFpcXOZmWCzAAAAU0"]
[Sat Apr 11 09:17:50.171373 2026] [:error] [pid 22665:tid 22731] [client 68.221.64.41:24292] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhPkgi15J0QUr6OrPclQAAAYc"]
[Sat Apr 11 09:17:51.677602 2026] [:error] [pid 22665:tid 22737] [client 68.221.64.41:38106] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "admhP0gi15J0QUr6OrPcnwAAAY0"]
[Sat Apr 11 09:17:52.372813 2026] [:error] [pid 22664:tid 22709] [client 68.221.64.41:54208] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "admhQARS_OPFpcXOZmWC1QAAAUw"]
[Sat Apr 11 09:17:53.266655 2026] [:error] [pid 22664:tid 22713] [client 68.221.64.41:22982] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "admhQQRS_OPFpcXOZmWC1gAAAVA"]
[Sat Apr 11 09:17:54.044892 2026] [:error] [pid 22665:tid 22738] [client 68.221.64.41:23008] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "admhQkgi15J0QUr6OrPcqAAAAY4"]
[Sat Apr 11 09:17:54.691748 2026] [:error] [pid 22756:tid 22763] [client 68.221.64.41:23013] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "admhQmfoSJ40LEm6kfqryAAAAAU"]
[Sat Apr 11 09:17:55.285706 2026] [:error] [pid 22665:tid 22746] [client 68.221.64.41:25995] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "admhQ0gi15J0QUr6OrPcrQAAAZY"]
[Sat Apr 11 09:17:55.891942 2026] [:error] [pid 22665:tid 22742] [client 68.221.64.41:3228] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "admhQ0gi15J0QUr6OrPcrwAAAZI"]
[Sat Apr 11 09:17:56.386921 2026] [:error] [pid 22663:tid 22687] [client 68.221.64.41:3970] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "admhRI1p7ez17BT2hZYFMgAAARM"]
[Sat Apr 11 09:17:56.997104 2026] [:error] [pid 22664:tid 22719] [client 68.221.64.41:47141] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "admhRARS_OPFpcXOZmWC3QAAAVY"]
[Sat Apr 11 09:17:57.535510 2026] [:error] [pid 22756:tid 22771] [client 68.221.64.41:60834] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhRWfoSJ40LEm6kfqr2gAAAA0"]
[Sat Apr 11 09:17:58.184359 2026] [:error] [pid 22756:tid 22780] [client 68.221.64.41:38104] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhRmfoSJ40LEm6kfqr4AAAABY"]
[Sat Apr 11 09:17:58.698433 2026] [:error] [pid 22663:tid 22671] [client 68.221.64.41:62152] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhRo1p7ez17BT2hZYFOAAAAQM"]
[Sat Apr 11 09:17:59.183001 2026] [:error] [pid 22663:tid 22683] [client 68.221.64.41:22923] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "admhR41p7ez17BT2hZYFOQAAAQ8"]
[Sat Apr 11 09:17:59.792641 2026] [:error] [pid 22665:tid 22744] [client 68.221.64.41:4020] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "admhR0gi15J0QUr6OrPcugAAAZQ"]
[Sat Apr 11 09:18:00.289498 2026] [:error] [pid 22665:tid 22728] [client 68.221.64.41:60830] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "admhSEgi15J0QUr6OrPcvAAAAYQ"]
[Sat Apr 11 09:18:00.796182 2026] [:error] [pid 22664:tid 22709] [client 68.221.64.41:3989] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "admhSARS_OPFpcXOZmWC7wAAAUw"]
[Sat Apr 11 09:18:01.326782 2026] [:error] [pid 22665:tid 22725] [client 68.221.64.41:24282] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "admhSUgi15J0QUr6OrPcwgAAAYE"]
[Sat Apr 11 09:18:01.990029 2026] [:error] [pid 22665:tid 22745] [client 68.221.64.41:22941] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admhSUgi15J0QUr6OrPcxAAAAZU"]
[Sat Apr 11 09:18:02.588468 2026] [:error] [pid 22756:tid 22763] [client 68.221.64.41:3256] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admhSmfoSJ40LEm6kfqsAgAAAAU"]
[Sat Apr 11 09:18:03.163113 2026] [:error] [pid 22756:tid 22771] [client 68.221.64.41:3816] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admhS2foSJ40LEm6kfqsBgAAAA0"]
[Sat Apr 11 09:18:03.674396 2026] [:error] [pid 22756:tid 22770] [client 68.221.64.41:45140] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "admhS2foSJ40LEm6kfqsCwAAAAw"]
[Sat Apr 11 09:18:04.472869 2026] [:error] [pid 22663:tid 22674] [client 68.221.64.41:22970] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "admhTI1p7ez17BT2hZYFPgAAAQY"]
[Sat Apr 11 09:18:04.955178 2026] [:error] [pid 22665:tid 22738] [client 68.221.64.41:62169] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "admhTEgi15J0QUr6OrPc1QAAAY4"]
[Sat Apr 11 09:18:05.435327 2026] [:error] [pid 22665:tid 22744] [client 68.221.64.41:62164] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "admhTUgi15J0QUr6OrPc2AAAAZQ"]
[Sat Apr 11 09:18:05.997929 2026] [:error] [pid 22756:tid 22762] [client 68.221.64.41:40703] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "admhTWfoSJ40LEm6kfqsMQAAAAQ"]
[Sat Apr 11 09:18:06.571246 2026] [:error] [pid 22665:tid 22739] [client 68.221.64.41:62145] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admhTkgi15J0QUr6OrPc3AAAAY8"]
[Sat Apr 11 09:18:07.191639 2026] [:error] [pid 22756:tid 22777] [client 68.221.64.41:60802] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admhT2foSJ40LEm6kfqsQgAAABM"]
[Sat Apr 11 09:18:07.767621 2026] [:error] [pid 22756:tid 22763] [client 68.221.64.41:3979] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admhT2foSJ40LEm6kfqsTQAAAAU"]
[Sat Apr 11 09:18:08.278581 2026] [:error] [pid 22663:tid 22690] [client 68.221.64.41:40656] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "admhUI1p7ez17BT2hZYFQgAAARY"]
[Sat Apr 11 09:18:08.799329 2026] [:error] [pid 22665:tid 22735] [client 68.221.64.41:62197] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "admhUEgi15J0QUr6OrPc4QAAAYs"]
[Sat Apr 11 09:18:09.368187 2026] [:error] [pid 22663:tid 22670] [client 68.221.64.41:24923] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "admhUY1p7ez17BT2hZYFRQAAAQI"]
[Sat Apr 11 09:18:09.971357 2026] [:error] [pid 22665:tid 22737] [client 68.221.64.41:54251] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "admhUUgi15J0QUr6OrPc5AAAAY0"]
[Sat Apr 11 09:18:10.504156 2026] [:error] [pid 22756:tid 22771] [client 68.221.64.41:62206] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "admhUmfoSJ40LEm6kfqsXwAAAA0"]
[Sat Apr 11 09:18:11.074555 2026] [:error] [pid 22665:tid 22724] [client 68.221.64.41:45148] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "admhU0gi15J0QUr6OrPc5gAAAYA"]
[Sat Apr 11 09:18:11.563800 2026] [:error] [pid 22665:tid 22738] [client 68.221.64.41:40701] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "admhU0gi15J0QUr6OrPc5wAAAY4"]
[Sat Apr 11 09:18:12.213431 2026] [:error] [pid 22665:tid 22742] [client 68.221.64.41:45140] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "admhVEgi15J0QUr6OrPc6gAAAZI"]
[Sat Apr 11 09:18:12.839140 2026] [:error] [pid 22665:tid 22729] [client 68.221.64.41:3763] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "admhVEgi15J0QUr6OrPc8AAAAYU"]
[Sat Apr 11 09:18:13.398060 2026] [:error] [pid 22756:tid 22778] [client 68.221.64.41:21163] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "admhVWfoSJ40LEm6kfqsdwAAABQ"]
[Sat Apr 11 09:18:13.901725 2026] [:error] [pid 22663:tid 22677] [client 68.221.64.41:21165] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "admhVY1p7ez17BT2hZYFYgAAAQk"]
[Sat Apr 11 09:18:14.402455 2026] [:error] [pid 22756:tid 22774] [client 68.221.64.41:60835] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "admhVmfoSJ40LEm6kfqsewAAABA"]
[Sat Apr 11 09:18:14.887148 2026] [:error] [pid 22756:tid 22773] [client 68.221.64.41:24302] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "admhVmfoSJ40LEm6kfqsfQAAAA8"]
[Sat Apr 11 09:18:15.473495 2026] [:error] [pid 22756:tid 22778] [client 68.221.64.41:19334] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "admhV2foSJ40LEm6kfqsgwAAABQ"]
[Sat Apr 11 09:18:15.983097 2026] [:error] [pid 22756:tid 22780] [client 68.221.64.41:60860] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "admhV2foSJ40LEm6kfqshQAAABY"]
[Sat Apr 11 09:18:16.559621 2026] [:error] [pid 22664:tid 22709] [client 68.221.64.41:22917] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "admhWARS_OPFpcXOZmWDRgAAAUw"]
[Sat Apr 11 09:18:17.127433 2026] [:error] [pid 22756:tid 22762] [client 68.221.64.41:60838] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "admhWWfoSJ40LEm6kfqsiAAAAAQ"]
[Sat Apr 11 09:18:17.757441 2026] [:error] [pid 22756:tid 22772] [client 68.221.64.41:19357] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "admhWWfoSJ40LEm6kfqsiwAAAA4"]
[Sat Apr 11 09:18:18.371386 2026] [:error] [pid 22664:tid 22716] [client 68.221.64.41:21158] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "admhWgRS_OPFpcXOZmWDUQAAAVM"]
[Sat Apr 11 09:18:18.893520 2026] [:error] [pid 22663:tid 22692] [client 68.221.64.41:45164] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "admhWo1p7ez17BT2hZYFcAAAARg"]
[Sat Apr 11 09:18:19.648635 2026] [:error] [pid 22756:tid 22767] [client 68.221.64.41:3722] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "admhW2foSJ40LEm6kfqskwAAAAk"]
[Sat Apr 11 09:18:20.727759 2026] [:error] [pid 22756:tid 22773] [client 68.221.64.41:24264] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "admhXGfoSJ40LEm6kfqsnAAAAA8"]
[Sat Apr 11 09:18:21.384107 2026] [:error] [pid 22756:tid 22772] [client 68.221.64.41:33771] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "admhXWfoSJ40LEm6kfqspgAAAA4"]
[Sat Apr 11 09:18:21.987103 2026] [:error] [pid 22756:tid 22773] [client 68.221.64.41:41287] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "admhXWfoSJ40LEm6kfqsqwAAAA8"]
[Sat Apr 11 09:18:22.466270 2026] [:error] [pid 22756:tid 22759] [client 68.221.64.41:37461] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "admhXmfoSJ40LEm6kfqsrwAAAAE"]
[Sat Apr 11 09:18:22.943342 2026] [:error] [pid 22756:tid 22758] [client 68.221.64.41:37474] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "admhXmfoSJ40LEm6kfqsswAAAAA"]
[Sat Apr 11 09:18:23.529630 2026] [:error] [pid 22756:tid 22764] [client 68.221.64.41:21153] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "admhX2foSJ40LEm6kfqsuQAAAAY"]
[Sat Apr 11 09:18:24.203040 2026] [:error] [pid 22756:tid 22771] [client 68.221.64.41:21434] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "admhYGfoSJ40LEm6kfqswQAAAA0"]
[Sat Apr 11 09:18:24.925537 2026] [:error] [pid 22756:tid 22781] [client 68.221.64.41:3719] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "admhYGfoSJ40LEm6kfqsxgAAABc"]
[Sat Apr 11 09:18:25.491310 2026] [:error] [pid 22663:tid 22672] [client 68.221.64.41:54690] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "admhYY1p7ez17BT2hZYFhAAAAQQ"]
[Sat Apr 11 09:18:25.985109 2026] [:error] [pid 22663:tid 22684] [client 68.221.64.41:37488] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "admhYY1p7ez17BT2hZYFiwAAARA"]
[Sat Apr 11 09:18:26.640814 2026] [:error] [pid 22663:tid 22677] [client 68.221.64.41:3745] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "admhYo1p7ez17BT2hZYFkAAAAQk"]
[Sat Apr 11 09:18:27.220056 2026] [:error] [pid 22664:tid 22698] [client 68.221.64.41:36221] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "admhYwRS_OPFpcXOZmWDYQAAAUE"]
[Sat Apr 11 09:18:28.271894 2026] [:error] [pid 22663:tid 22680] [client 68.221.64.41:40628] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "admhZI1p7ez17BT2hZYFmAAAAQw"]
[Sat Apr 11 09:18:30.036287 2026] [:error] [pid 22756:tid 22765] [client 68.221.64.41:21155] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "admhZmfoSJ40LEm6kfqs1QAAAAc"]
[Sat Apr 11 09:18:31.993122 2026] [:error] [pid 22756:tid 22776] [client 68.221.64.41:37451] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "admhZ2foSJ40LEm6kfqs5QAAABI"]
[Sat Apr 11 09:18:32.838173 2026] [:error] [pid 22756:tid 22765] [client 68.221.64.41:41300] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "admhaGfoSJ40LEm6kfqs6wAAAAc"]
[Sat Apr 11 09:18:33.673213 2026] [:error] [pid 22756:tid 22768] [client 68.221.64.41:55927] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "admhaWfoSJ40LEm6kfqs8wAAAAo"]
[Sat Apr 11 09:18:34.537537 2026] [:error] [pid 22756:tid 22777] [client 68.221.64.41:36214] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "admhamfoSJ40LEm6kfqs_QAAABM"]
[Sat Apr 11 09:18:35.977480 2026] [:error] [pid 22756:tid 22779] [client 68.221.64.41:37501] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "admha2foSJ40LEm6kfqtCQAAABU"]
[Sat Apr 11 09:18:36.969328 2026] [:error] [pid 22756:tid 22773] [client 68.221.64.41:37482] [client 68.221.64.41] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "admhbGfoSJ40LEm6kfqtEAAAAA8"]
[Sat Apr 11 09:18:38.186768 2026] [:error] [pid 22756:tid 22765] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sat Apr 11 09:18:38.472065 2026] [:error] [pid 22756:tid 22771] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 11 09:18:38.712551 2026] [:error] [pid 22756:tid 22762] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sat Apr 11 09:18:38.987004 2026] [:error] [pid 22756:tid 22766] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sat Apr 11 09:18:39.491626 2026] [:error] [pid 22756:tid 22776] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 11 09:18:39.731505 2026] [:error] [pid 22756:tid 22770] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sat Apr 11 09:18:39.993635 2026] [:error] [pid 22756:tid 22772] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Apr 11 09:18:40.254957 2026] [:error] [pid 22756:tid 22768] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat Apr 11 09:18:40.492480 2026] [:error] [pid 22756:tid 22765] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat Apr 11 09:18:40.743282 2026] [:error] [pid 22756:tid 22761] [client 68.221.64.41:54710] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Sat Apr 11 09:22:17.463445 2026] [:error] [pid 22756:tid 22763] [client 20.234.0.30:14337] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 09:22:17.714789 2026] [:error] [pid 22756:tid 22762] [client 20.234.0.30:14337] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-demomav.php
[Sat Apr 11 09:22:17.966359 2026] [:error] [pid 22756:tid 22774] [client 20.234.0.30:14337] File does not exist: /usr/local/apache/htdocs/suspended-page/itil.php
[Sat Apr 11 09:22:18.217311 2026] [:error] [pid 22756:tid 22758] [client 20.234.0.30:14337] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat Apr 11 09:22:18.469530 2026] [:error] [pid 22756:tid 22769] [client 20.234.0.30:14337] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-filters.php
[Sat Apr 11 09:22:18.721020 2026] [:error] [pid 22756:tid 22764] [client 20.234.0.30:14337] File does not exist: /usr/local/apache/htdocs/suspended-page/new2.php
[Sat Apr 11 09:22:18.972587 2026] [:error] [pid 22756:tid 22770] [client 20.234.0.30:14337] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Sat Apr 11 09:42:48.065735 2026] [:error] [pid 34911:tid 34923] [client 157.15.40.61:60432] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnGA4Dca235WG8VGLIFQAAAAo"]
[Sat Apr 11 10:41:56.989989 2026] [:error] [pid 64683:tid 64705] [client 43.165.65.75:58474] [client 43.165.65.75] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adm09OtZkZ2crw4IIJl8tAAAAFQ"]
[Sat Apr 11 10:48:01.315378 2026] [:error] [pid 2297:tid 2312] [client 182.44.9.147:60418] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adm2YbXJS-Jji11jZk1q-gAAAQs"]
[Sat Apr 11 11:04:09.323465 2026] [:error] [pid 2188:tid 2270] [client 43.159.135.203:33052] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adm6KYDhDA-Xtn2nRSfBOgAAAM4"]
[Sat Apr 11 12:30:00.022040 2026] [:error] [pid 2187:tid 2237] [client 187.78.175.8:54786] [client 187.78.175.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.78.175.8, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adnOSA4J29_qQi0FkjhtVgAAAAk"]
[Sat Apr 11 12:30:00.027243 2026] [:error] [pid 2187:tid 2237] [client 187.78.175.8:54786] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 11 13:56:25.995694 2026] [:error] [pid 2187:tid 2227] [client 216.73.216.29:16423] [client 216.73.216.29] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||dbservices.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "adniiQ4J29_qQi0FkjiEqwAAAAE"]
[Sat Apr 11 14:11:41.088119 2026] [:error] [pid 2187:tid 2250] [client 157.15.40.61:57028] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adnmHQ4J29_qQi0FkjiIZAAAABY"]
[Sat Apr 11 14:11:41.360090 2026] [:error] [pid 2186:tid 2197] [client 157.15.40.61:57067] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmHcibnOEEvcO8wPL9qwAAAIc"]
[Sat Apr 11 14:11:41.625296 2026] [:error] [pid 11067:tid 11085] [client 157.15.40.61:57120] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmHcW3w7N67R04YCKRIgAAAFA"]
[Sat Apr 11 14:11:44.078155 2026] [:error] [pid 2186:tid 2210] [client 157.15.40.61:57398] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmIMibnOEEvcO8wPL92AAAAJQ"]
[Sat Apr 11 14:11:44.833620 2026] [:error] [pid 2188:tid 2275] [client 157.15.40.61:57705] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmIIDhDA-Xtn2nRScKMwAAANM"]
[Sat Apr 11 14:11:45.853632 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:57858] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adnmIcW3w7N67R04YCKSFAAAAFU"]
[Sat Apr 11 14:11:48.065530 2026] [:error] [pid 2187:tid 2246] [client 157.15.40.61:58216] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adnmJA4J29_qQi0FkjiIwAAAABI"]
[Sat Apr 11 14:11:51.910957 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:59045] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "adnmJ8W3w7N67R04YCKTVgAAAEc"]
[Sat Apr 11 14:11:52.159294 2026] [:error] [pid 11067:tid 11081] [client 157.15.40.61:59090] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "adnmKMW3w7N67R04YCKTaAAAAEw"]
[Sat Apr 11 14:11:52.427364 2026] [:error] [pid 2187:tid 2246] [client 157.15.40.61:59141] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "adnmKA4J29_qQi0FkjiI-gAAABI"]
[Sat Apr 11 14:11:53.687687 2026] [:error] [pid 2297:tid 2306] [client 157.15.40.61:59197] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "adnmKbXJS-Jji11jZk3bvgAAAQU"]
[Sat Apr 11 14:11:54.465696 2026] [:error] [pid 2188:tid 2280] [client 157.15.40.61:59508] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/blurbs.php"] [unique_id "adnmKoDhDA-Xtn2nRScLVwAAANg"]
[Sat Apr 11 14:11:54.722848 2026] [:error] [pid 2297:tid 2313] [client 157.15.40.61:59542] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/akcc.php"] [unique_id "adnmKrXJS-Jji11jZk3bxwAAAQw"]
[Sat Apr 11 14:11:54.995319 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:59598] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adnmKsW3w7N67R04YCKULAAAAEg"]
[Sat Apr 11 14:11:55.259884 2026] [:error] [pid 2187:tid 2242] [client 157.15.40.61:59662] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "adnmKw4J29_qQi0FkjiJNQAAAA4"]
[Sat Apr 11 14:11:55.543019 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:59737] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/cord.php"] [unique_id "adnmK8W3w7N67R04YCKUYQAAAFE"]
[Sat Apr 11 14:11:55.798631 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:59804] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/dex.php"] [unique_id "adnmK8W3w7N67R04YCKUcQAAAEQ"]
[Sat Apr 11 14:11:57.080130 2026] [:error] [pid 2186:tid 2192] [client 157.15.40.61:59875] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmLcibnOEEvcO8wPL-0AAAAII"]
[Sat Apr 11 14:11:57.756857 2026] [:error] [pid 2188:tid 2277] [client 157.15.40.61:60271] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "adnmLYDhDA-Xtn2nRScLqQAAANU"]
[Sat Apr 11 14:12:01.038359 2026] [:error] [pid 11067:tid 11077] [client 157.15.40.61:60336] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "adnmMcW3w7N67R04YCKWawAAAEg"]
[Sat Apr 11 14:12:02.297628 2026] [:error] [pid 11067:tid 11090] [client 157.15.40.61:61097] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmMsW3w7N67R04YCKWnwAAAFU"]
[Sat Apr 11 14:12:03.563810 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:61320] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmM8W3w7N67R04YCKWxQAAAE0"]
[Sat Apr 11 14:12:07.848870 2026] [:error] [pid 2188:tid 2267] [client 157.15.40.61:49717] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "adnmN4DhDA-Xtn2nRScMXQAAAMs"]
[Sat Apr 11 14:12:11.527615 2026] [:error] [pid 2187:tid 2246] [client 157.15.40.61:50034] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "adnmOw4J29_qQi0FkjiKPwAAABI"]
[Sat Apr 11 14:12:15.805644 2026] [:error] [pid 2186:tid 2203] [client 157.15.40.61:51052] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "adnmP8ibnOEEvcO8wPL_oQAAAI0"]
[Sat Apr 11 14:12:16.072422 2026] [:error] [pid 2186:tid 2207] [client 157.15.40.61:51213] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "adnmQMibnOEEvcO8wPL_pAAAAJE"]
[Sat Apr 11 14:12:17.924341 2026] [:error] [pid 2297:tid 2319] [client 157.15.40.61:51418] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/php8.php"] [unique_id "adnmQbXJS-Jji11jZk3dTQAAARI"]
[Sat Apr 11 14:12:18.204402 2026] [:error] [pid 2186:tid 2210] [client 157.15.40.61:51493] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/lufix1.php"] [unique_id "adnmQsibnOEEvcO8wPL_vQAAAJQ"]
[Sat Apr 11 14:12:30.962985 2026] [:error] [pid 11067:tid 11069] [client 157.15.40.61:51660] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/witmm.php"] [unique_id "adnmTsW3w7N67R04YCKYbgAAAEA"]
[Sat Apr 11 14:12:32.189199 2026] [:error] [pid 2187:tid 2226] [client 157.15.40.61:53140] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmUA4J29_qQi0FkjiKwwAAAAA"]
[Sat Apr 11 14:12:32.438950 2026] [:error] [pid 11067:tid 11069] [client 157.15.40.61:53179] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmUMW3w7N67R04YCKYggAAAEA"]
[Sat Apr 11 14:12:35.359293 2026] [:error] [pid 11067:tid 11081] [client 157.15.40.61:53308] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmU8W3w7N67R04YCKYnwAAAEw"]
[Sat Apr 11 14:12:39.635508 2026] [:error] [pid 2297:tid 2313] [client 157.15.40.61:54131] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmV7XJS-Jji11jZk3eEQAAAQw"]
[Sat Apr 11 14:12:40.406987 2026] [:error] [pid 11067:tid 11074] [client 157.15.40.61:54359] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adnmWMW3w7N67R04YCKYvgAAAEU"]
[Sat Apr 11 14:12:42.207933 2026] [:error] [pid 2187:tid 2249] [client 157.15.40.61:54449] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "adnmWg4J29_qQi0FkjiK-gAAABU"]
[Sat Apr 11 14:12:45.489849 2026] [:error] [pid 2187:tid 2232] [client 157.15.40.61:55036] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-editor.php"] [unique_id "adnmXQ4J29_qQi0FkjiLAwAAAAQ"]
[Sat Apr 11 21:51:27.796010 2026] [:error] [pid 42221:tid 42287] [client 106.219.121.143:32175] [client 106.219.121.143] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.121.143, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adpR302gt0pb_0-cc6mL9gAAAEk"]
[Sat Apr 11 21:51:27.800944 2026] [:error] [pid 42221:tid 42287] [client 106.219.121.143:32175] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 11 21:53:15.369597 2026] [:error] [pid 42219:tid 42243] [client 43.165.67.57:51570] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adpSSw-4IkVbTQx_J-2FIAAAAJQ"]
[Sun Apr 12 00:07:16.439988 2026] [:error] [pid 42221:tid 42295] [client 103.144.104.32:59140] [client 103.144.104.32] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.144.104.32, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adpxtE2gt0pb_0-cc6mzwAAAAFE"]
[Sun Apr 12 00:07:16.445090 2026] [:error] [pid 42221:tid 42295] [client 103.144.104.32:59140] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 12 00:08:44.305466 2026] [:error] [pid 42219:tid 42223] [client 91.214.142.62:60054] [client 91.214.142.62] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.214.142.62, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adpyDA-4IkVbTQx_J-241wAAAIA"]
[Sun Apr 12 00:08:44.313438 2026] [:error] [pid 42219:tid 42223] [client 91.214.142.62:60054] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 12 02:32:31.455245 2026] [:error] [pid 44698:tid 44726] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sun Apr 12 02:32:31.699068 2026] [:error] [pid 44698:tid 44717] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sun Apr 12 02:32:31.940358 2026] [:error] [pid 44698:tid 44709] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Sun Apr 12 02:32:32.182774 2026] [:error] [pid 44698:tid 44719] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Sun Apr 12 02:32:32.426157 2026] [:error] [pid 44698:tid 44715] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Sun Apr 12 02:32:32.671269 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/filemanger2.php
[Sun Apr 12 02:32:32.912056 2026] [:error] [pid 44698:tid 44726] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 12 02:32:33.152330 2026] [:error] [pid 44698:tid 44710] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-vn1.php
[Sun Apr 12 02:32:33.393897 2026] [:error] [pid 44698:tid 44724] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Sun Apr 12 02:32:33.634158 2026] [:error] [pid 44698:tid 44719] [client 158.158.55.67:63851] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sun Apr 12 02:32:33.881036 2026] [:error] [pid 44698:tid 44706] [client 158.158.55.67:63851] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adqTwRgoH9UWd-U3D56HqQAAAIM"]
[Sun Apr 12 02:32:34.370692 2026] [:error] [pid 44701:tid 44778] [client 158.158.55.67:40918] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adqTwhGZAP4MrlxEPFdQMwAAAEY"]
[Sun Apr 12 02:32:34.852480 2026] [:error] [pid 36938:tid 36945] [client 158.158.55.67:40948] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adqTwoSWpa_VL1JPU6z8JwAAAYU"]
[Sun Apr 12 02:32:35.361022 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:62122] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adqTw4SWpa_VL1JPU6z8KgAAAYY"]
[Sun Apr 12 02:32:35.840969 2026] [:error] [pid 45064:tid 45092] [client 158.158.55.67:62099] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adqTw5cHBvLyJ6EUhUoS-QAAAUA"]
[Sun Apr 12 02:32:36.333195 2026] [:error] [pid 34152:tid 34154] [client 158.158.55.67:45122] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adqTxIFtE4RhFslT1DrPWwAAAAA"]
[Sun Apr 12 02:32:36.807993 2026] [:error] [pid 45064:tid 45106] [client 158.158.55.67:62107] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adqTxJcHBvLyJ6EUhUoS-gAAAU0"]
[Sun Apr 12 02:32:37.295641 2026] [:error] [pid 44698:tid 44708] [client 158.158.55.67:40935] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "adqTxRgoH9UWd-U3D56HqwAAAIU"]
[Sun Apr 12 02:32:37.784452 2026] [:error] [pid 44700:tid 44768] [client 158.158.55.67:40929] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adqTxWryPgh_uW4QPCl6_AAAANg"]
[Sun Apr 12 02:32:38.285145 2026] [:error] [pid 44700:tid 44755] [client 158.158.55.67:63931] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adqTxmryPgh_uW4QPCl7AAAAAMs"]
[Sun Apr 12 02:32:38.779681 2026] [:error] [pid 36938:tid 36950] [client 158.158.55.67:65148] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adqTxoSWpa_VL1JPU6z8NQAAAYo"]
[Sun Apr 12 02:32:39.269066 2026] [:error] [pid 44698:tid 44707] [client 158.158.55.67:63924] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adqTxxgoH9UWd-U3D56HtwAAAIQ"]
[Sun Apr 12 02:32:39.756146 2026] [:error] [pid 45064:tid 45108] [client 158.158.55.67:40925] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adqTx5cHBvLyJ6EUhUoTAgAAAU8"]
[Sun Apr 12 02:32:40.265815 2026] [:error] [pid 36938:tid 36961] [client 158.158.55.67:63872] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adqTyISWpa_VL1JPU6z8OgAAAZU"]
[Sun Apr 12 02:32:40.770051 2026] [:error] [pid 44698:tid 44712] [client 158.158.55.67:65139] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adqTyBgoH9UWd-U3D56HvgAAAIk"]
[Sun Apr 12 02:32:41.260970 2026] [:error] [pid 36938:tid 36963] [client 158.158.55.67:39158] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "adqTyYSWpa_VL1JPU6z8PgAAAZc"]
[Sun Apr 12 02:32:41.740607 2026] [:error] [pid 36938:tid 36941] [client 158.158.55.67:65130] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adqTyYSWpa_VL1JPU6z8QQAAAYE"]
[Sun Apr 12 02:32:42.241468 2026] [:error] [pid 45064:tid 45104] [client 158.158.55.67:63922] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adqTypcHBvLyJ6EUhUoTCwAAAUs"]
[Sun Apr 12 02:32:42.731338 2026] [:error] [pid 36938:tid 36960] [client 158.158.55.67:62141] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adqTyoSWpa_VL1JPU6z8RQAAAZQ"]
[Sun Apr 12 02:32:43.209558 2026] [:error] [pid 45064:tid 45113] [client 158.158.55.67:49416] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "adqTy5cHBvLyJ6EUhUoTEwAAAVQ"]
[Sun Apr 12 02:32:43.693448 2026] [:error] [pid 36938:tid 36942] [client 158.158.55.67:63870] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adqTy4SWpa_VL1JPU6z8SwAAAYI"]
[Sun Apr 12 02:32:44.208201 2026] [:error] [pid 45064:tid 45093] [client 158.158.55.67:45135] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adqTzJcHBvLyJ6EUhUoTGAAAAUE"]
[Sun Apr 12 02:32:44.691635 2026] [:error] [pid 44700:tid 44761] [client 158.158.55.67:62110] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adqTzGryPgh_uW4QPCl7AQAAANE"]
[Sun Apr 12 02:32:45.179146 2026] [:error] [pid 44700:tid 44744] [client 158.158.55.67:40917] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adqTzWryPgh_uW4QPCl7AgAAAMA"]
[Sun Apr 12 02:32:45.701196 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:63890] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adqTzUGk5GhxTCzHUOouawAAAQI"]
[Sun Apr 12 02:32:46.251112 2026] [:error] [pid 45064:tid 45097] [client 158.158.55.67:63895] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adqTzpcHBvLyJ6EUhUoTGgAAAUU"]
[Sun Apr 12 02:32:46.739532 2026] [:error] [pid 44700:tid 44766] [client 158.158.55.67:40932] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adqTzmryPgh_uW4QPCl7BAAAANY"]
[Sun Apr 12 02:32:47.214365 2026] [:error] [pid 36938:tid 36963] [client 158.158.55.67:45163] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "adqTz4SWpa_VL1JPU6z8ZAAAAZc"]
[Sun Apr 12 02:32:47.698920 2026] [:error] [pid 36909:tid 36921] [client 158.158.55.67:63885] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adqTz0Gk5GhxTCzHUOoucAAAAQo"]
[Sun Apr 12 02:32:48.189774 2026] [:error] [pid 44698:tid 44723] [client 158.158.55.67:65106] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adqT0BgoH9UWd-U3D56HzgAAAJQ"]
[Sun Apr 12 02:32:48.664986 2026] [:error] [pid 36938:tid 36953] [client 158.158.55.67:40943] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adqT0ISWpa_VL1JPU6z8aQAAAY0"]
[Sun Apr 12 02:32:49.161272 2026] [:error] [pid 36938:tid 36964] [client 158.158.55.67:63904] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "adqT0YSWpa_VL1JPU6z8bAAAAZg"]
[Sun Apr 12 02:32:49.644990 2026] [:error] [pid 34152:tid 34169] [client 158.158.55.67:63887] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adqT0YFtE4RhFslT1DrPYwAAAA8"]
[Sun Apr 12 02:32:50.120646 2026] [:error] [pid 34152:tid 34167] [client 158.158.55.67:49414] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adqT0oFtE4RhFslT1DrPZAAAAA0"]
[Sun Apr 12 02:32:50.594465 2026] [:error] [pid 34152:tid 34176] [client 158.158.55.67:40908] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adqT0oFtE4RhFslT1DrPZwAAABY"]
[Sun Apr 12 02:32:51.087732 2026] [:error] [pid 36938:tid 36943] [client 158.158.55.67:63822] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "adqT04SWpa_VL1JPU6z8bgAAAYM"]
[Sun Apr 12 02:32:51.624306 2026] [:error] [pid 45064:tid 45114] [client 158.158.55.67:40952] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adqT05cHBvLyJ6EUhUoTJAAAAVU"]
[Sun Apr 12 02:32:52.113841 2026] [:error] [pid 45064:tid 45097] [client 158.158.55.67:62136] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adqT1JcHBvLyJ6EUhUoTJwAAAUU"]
[Sun Apr 12 02:32:52.624347 2026] [:error] [pid 36938:tid 36952] [client 158.158.55.67:49432] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adqT1ISWpa_VL1JPU6z8cgAAAYw"]
[Sun Apr 12 02:32:53.119445 2026] [:error] [pid 36938:tid 36954] [client 158.158.55.67:65135] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "adqT1YSWpa_VL1JPU6z8dAAAAY4"]
[Sun Apr 12 02:32:53.595126 2026] [:error] [pid 36909:tid 36928] [client 158.158.55.67:45147] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adqT1UGk5GhxTCzHUOoueAAAARE"]
[Sun Apr 12 02:32:54.095562 2026] [:error] [pid 44698:tid 44714] [client 158.158.55.67:45133] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adqT1hgoH9UWd-U3D56H1AAAAIs"]
[Sun Apr 12 02:32:54.569361 2026] [:error] [pid 44701:tid 44771] [client 158.158.55.67:62132] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adqT1hGZAP4MrlxEPFdQSQAAAEA"]
[Sun Apr 12 02:32:55.080165 2026] [:error] [pid 44701:tid 44798] [client 158.158.55.67:49409] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "adqT1xGZAP4MrlxEPFdQSgAAAFY"]
[Sun Apr 12 02:32:55.568813 2026] [:error] [pid 44700:tid 44764] [client 158.158.55.67:63860] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adqT12ryPgh_uW4QPCl7DQAAANQ"]
[Sun Apr 12 02:32:56.076727 2026] [:error] [pid 36909:tid 36933] [client 158.158.55.67:40934] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adqT2EGk5GhxTCzHUOoufwAAARY"]
[Sun Apr 12 02:32:56.558071 2026] [:error] [pid 44698:tid 44723] [client 158.158.55.67:65137] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adqT2BgoH9UWd-U3D56H3QAAAJQ"]
[Sun Apr 12 02:32:57.083738 2026] [:error] [pid 44698:tid 44711] [client 158.158.55.67:62128] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "adqT2RgoH9UWd-U3D56H4QAAAIg"]
[Sun Apr 12 02:32:57.559313 2026] [:error] [pid 44701:tid 44778] [client 158.158.55.67:63823] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adqT2RGZAP4MrlxEPFdQTwAAAEY"]
[Sun Apr 12 02:32:58.076583 2026] [:error] [pid 44701:tid 44796] [client 158.158.55.67:39141] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adqT2hGZAP4MrlxEPFdQUQAAAFU"]
[Sun Apr 12 02:32:58.558169 2026] [:error] [pid 44701:tid 44799] [client 158.158.55.67:65142] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adqT2hGZAP4MrlxEPFdQVwAAAFc"]
[Sun Apr 12 02:32:59.046055 2026] [:error] [pid 36909:tid 36928] [client 158.158.55.67:63928] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "adqT20Gk5GhxTCzHUOouhQAAARE"]
[Sun Apr 12 02:32:59.557880 2026] [:error] [pid 44700:tid 44751] [client 158.158.55.67:45127] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adqT22ryPgh_uW4QPCl7EAAAAMc"]
[Sun Apr 12 02:33:00.075220 2026] [:error] [pid 44698:tid 44712] [client 158.158.55.67:40951] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adqT3BgoH9UWd-U3D56H5QAAAIk"]
[Sun Apr 12 02:33:00.588230 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:62126] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adqT3BgoH9UWd-U3D56H6QAAAIA"]
[Sun Apr 12 02:33:01.064928 2026] [:error] [pid 44698:tid 44721] [client 158.158.55.67:62138] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adqT3RgoH9UWd-U3D56H6gAAAJI"]
[Sun Apr 12 02:33:01.615928 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:65147] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adqT3UGk5GhxTCzHUOoukgAAAQI"]
[Sun Apr 12 02:33:02.105655 2026] [:error] [pid 44701:tid 44786] [client 158.158.55.67:40940] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adqT3hGZAP4MrlxEPFdQXQAAAEw"]
[Sun Apr 12 02:33:02.609371 2026] [:error] [pid 44698:tid 44716] [client 158.158.55.67:65136] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adqT3hgoH9UWd-U3D56H7QAAAI0"]
[Sun Apr 12 02:33:03.115712 2026] [:error] [pid 44700:tid 44747] [client 158.158.55.67:45181] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "adqT32ryPgh_uW4QPCl7FAAAAMM"]
[Sun Apr 12 02:33:03.634747 2026] [:error] [pid 36909:tid 36912] [client 158.158.55.67:62106] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adqT30Gk5GhxTCzHUOoumgAAAQE"]
[Sun Apr 12 02:33:04.144045 2026] [:error] [pid 36938:tid 36952] [client 158.158.55.67:45121] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adqT4ISWpa_VL1JPU6z8hAAAAYw"]
[Sun Apr 12 02:33:04.657185 2026] [:error] [pid 44701:tid 44795] [client 158.158.55.67:40903] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adqT4BGZAP4MrlxEPFdQYQAAAFQ"]
[Sun Apr 12 02:33:05.173153 2026] [:error] [pid 44698:tid 44722] [client 158.158.55.67:39877] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adqT4RgoH9UWd-U3D56H-AAAAJM"]
[Sun Apr 12 02:33:05.692462 2026] [:error] [pid 36938:tid 36945] [client 158.158.55.67:63899] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adqT4YSWpa_VL1JPU6z8hQAAAYU"]
[Sun Apr 12 02:33:06.173888 2026] [:error] [pid 36909:tid 36929] [client 158.158.55.67:62086] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adqT4kGk5GhxTCzHUOounAAAARI"]
[Sun Apr 12 02:33:06.660842 2026] [:error] [pid 36909:tid 36934] [client 158.158.55.67:45164] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adqT4kGk5GhxTCzHUOoungAAARc"]
[Sun Apr 12 02:33:07.142292 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:65102] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "adqT40Gk5GhxTCzHUOoupQAAAQg"]
[Sun Apr 12 02:33:07.663578 2026] [:error] [pid 36909:tid 36920] [client 158.158.55.67:63863] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adqT40Gk5GhxTCzHUOoupwAAAQk"]
[Sun Apr 12 02:33:08.149483 2026] [:error] [pid 36909:tid 36929] [client 158.158.55.67:63889] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adqT5EGk5GhxTCzHUOouqQAAARI"]
[Sun Apr 12 02:33:08.705930 2026] [:error] [pid 36938:tid 36962] [client 158.158.55.67:63836] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adqT5ISWpa_VL1JPU6z8iAAAAZY"]
[Sun Apr 12 02:33:09.258103 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:63918] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "adqT5UGk5GhxTCzHUOourwAAAQg"]
[Sun Apr 12 02:33:09.797012 2026] [:error] [pid 36938:tid 36958] [client 158.158.55.67:40946] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adqT5YSWpa_VL1JPU6z8igAAAZI"]
[Sun Apr 12 02:33:10.300532 2026] [:error] [pid 44698:tid 44716] [client 158.158.55.67:63820] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adqT5hgoH9UWd-U3D56IBwAAAI0"]
[Sun Apr 12 02:33:10.901273 2026] [:error] [pid 44698:tid 44708] [client 158.158.55.67:63817] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adqT5hgoH9UWd-U3D56ICQAAAIU"]
[Sun Apr 12 02:33:11.491296 2026] [:error] [pid 44701:tid 44773] [client 158.158.55.67:65095] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "adqT5xGZAP4MrlxEPFdQZgAAAEE"]
[Sun Apr 12 02:33:12.049328 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:45179] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adqT6EGk5GhxTCzHUOouugAAAQY"]
[Sun Apr 12 02:33:12.581531 2026] [:error] [pid 44701:tid 44787] [client 158.158.55.67:40920] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adqT6BGZAP4MrlxEPFdQaAAAAE0"]
[Sun Apr 12 02:33:13.073955 2026] [:error] [pid 36938:tid 36944] [client 158.158.55.67:45149] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adqT6YSWpa_VL1JPU6z8lAAAAYQ"]
[Sun Apr 12 02:33:13.580680 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:63854] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adqT6YSWpa_VL1JPU6z8mAAAAYY"]
[Sun Apr 12 02:33:14.059529 2026] [:error] [pid 36909:tid 36928] [client 158.158.55.67:63845] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adqT6kGk5GhxTCzHUOouwgAAARE"]
[Sun Apr 12 02:33:14.561097 2026] [:error] [pid 36938:tid 36956] [client 158.158.55.67:63812] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adqT6oSWpa_VL1JPU6z8mwAAAZA"]
[Sun Apr 12 02:33:15.100798 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:65131] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adqT60Gk5GhxTCzHUOouxwAAAQA"]
[Sun Apr 12 02:33:15.596946 2026] [:error] [pid 36909:tid 36929] [client 158.158.55.67:65132] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adqT60Gk5GhxTCzHUOouywAAARI"]
[Sun Apr 12 02:33:16.130896 2026] [:error] [pid 44701:tid 44778] [client 158.158.55.67:65141] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adqT7BGZAP4MrlxEPFdQawAAAEY"]
[Sun Apr 12 02:33:16.794593 2026] [:error] [pid 36909:tid 36918] [client 158.158.55.67:63883] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adqT7EGk5GhxTCzHUOou1gAAAQc"]
[Sun Apr 12 02:33:17.280962 2026] [:error] [pid 36938:tid 36961] [client 158.158.55.67:49435] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adqT7YSWpa_VL1JPU6z8nwAAAZU"]
[Sun Apr 12 02:33:17.793249 2026] [:error] [pid 36938:tid 36949] [client 158.158.55.67:63831] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "adqT7YSWpa_VL1JPU6z8oQAAAYk"]
[Sun Apr 12 02:33:18.272419 2026] [:error] [pid 36938:tid 36963] [client 158.158.55.67:65126] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adqT7oSWpa_VL1JPU6z8pQAAAZc"]
[Sun Apr 12 02:33:18.759472 2026] [:error] [pid 36909:tid 36922] [client 158.158.55.67:45168] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adqT7kGk5GhxTCzHUOou4AAAAQs"]
[Sun Apr 12 02:33:19.286178 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:62089] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adqT70Gk5GhxTCzHUOou4wAAARM"]
[Sun Apr 12 02:33:19.823336 2026] [:error] [pid 36938:tid 36957] [client 158.158.55.67:40928] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "adqT74SWpa_VL1JPU6z8qAAAAZE"]
[Sun Apr 12 02:33:20.419371 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:65119] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adqT8EGk5GhxTCzHUOou5QAAAQY"]
[Sun Apr 12 02:33:20.910056 2026] [:error] [pid 44701:tid 44777] [client 158.158.55.67:65129] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adqT8BGZAP4MrlxEPFdQcgAAAEU"]
[Sun Apr 12 02:33:21.453699 2026] [:error] [pid 45064:tid 45112] [client 158.158.55.67:40955] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adqT8ZcHBvLyJ6EUhUoTPwAAAVM"]
[Sun Apr 12 02:33:21.939922 2026] [:error] [pid 36938:tid 36955] [client 158.158.55.67:40970] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "adqT8YSWpa_VL1JPU6z8qwAAAY8"]
[Sun Apr 12 02:33:22.416792 2026] [:error] [pid 36909:tid 36926] [client 158.158.55.67:45157] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adqT8kGk5GhxTCzHUOou7QAAAQ8"]
[Sun Apr 12 02:33:22.959557 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:40900] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adqT8kGk5GhxTCzHUOou9AAAAQ0"]
[Sun Apr 12 02:33:23.469711 2026] [:error] [pid 36909:tid 36932] [client 158.158.55.67:65099] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adqT80Gk5GhxTCzHUOou-gAAARU"]
[Sun Apr 12 02:33:23.952472 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:63878] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "adqT80Gk5GhxTCzHUOovAAAAAQg"]
[Sun Apr 12 02:33:24.447620 2026] [:error] [pid 36909:tid 36932] [client 158.158.55.67:63809] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adqT9EGk5GhxTCzHUOovBgAAARU"]
[Sun Apr 12 02:33:24.934009 2026] [:error] [pid 36909:tid 36931] [client 158.158.55.67:45124] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adqT9EGk5GhxTCzHUOovCgAAARQ"]
[Sun Apr 12 02:33:25.484416 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:62139] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adqT9UGk5GhxTCzHUOovFAAAAQA"]
[Sun Apr 12 02:33:26.000336 2026] [:error] [pid 36909:tid 36922] [client 158.158.55.67:49417] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "adqT9UGk5GhxTCzHUOovGQAAAQs"]
[Sun Apr 12 02:33:26.482260 2026] [:error] [pid 36938:tid 36944] [client 158.158.55.67:62115] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adqT9oSWpa_VL1JPU6z8rgAAAYQ"]
[Sun Apr 12 02:33:26.958443 2026] [:error] [pid 34152:tid 34163] [client 158.158.55.67:45183] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adqT9oFtE4RhFslT1DrPcgAAAAk"]
[Sun Apr 12 02:33:27.440692 2026] [:error] [pid 44698:tid 44726] [client 158.158.55.67:65103] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adqT9xgoH9UWd-U3D56IGAAAAJc"]
[Sun Apr 12 02:33:27.954130 2026] [:error] [pid 36909:tid 36925] [client 158.158.55.67:45137] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "adqT90Gk5GhxTCzHUOovJQAAAQ4"]
[Sun Apr 12 02:33:28.447397 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:63832] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adqT-EGk5GhxTCzHUOovLAAAAQ0"]
[Sun Apr 12 02:33:28.952169 2026] [:error] [pid 36938:tid 36963] [client 158.158.55.67:40977] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adqT-ISWpa_VL1JPU6z8sgAAAZc"]
[Sun Apr 12 02:33:29.437082 2026] [:error] [pid 36938:tid 36945] [client 158.158.55.67:63891] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adqT-YSWpa_VL1JPU6z8tAAAAYU"]
[Sun Apr 12 02:33:29.960816 2026] [:error] [pid 36938:tid 36942] [client 158.158.55.67:63824] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "adqT-YSWpa_VL1JPU6z8tgAAAYI"]
[Sun Apr 12 02:33:30.441359 2026] [:error] [pid 36938:tid 36948] [client 158.158.55.67:65118] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "adqT-oSWpa_VL1JPU6z8uAAAAYg"]
[Sun Apr 12 02:33:30.920654 2026] [:error] [pid 36938:tid 36964] [client 158.158.55.67:62129] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "adqT-oSWpa_VL1JPU6z8uwAAAZg"]
[Sun Apr 12 02:33:31.446906 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:40907] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "adqT-0Gk5GhxTCzHUOovMgAAARM"]
[Sun Apr 12 02:33:31.923520 2026] [:error] [pid 36909:tid 36933] [client 158.158.55.67:63828] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "adqT-0Gk5GhxTCzHUOovMwAAARY"]
[Sun Apr 12 02:33:32.400924 2026] [:error] [pid 36909:tid 36928] [client 158.158.55.67:62132] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adqT_EGk5GhxTCzHUOovNwAAARE"]
[Sun Apr 12 02:33:32.971509 2026] [:error] [pid 36909:tid 36931] [client 158.158.55.67:62090] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adqT_EGk5GhxTCzHUOovOwAAARQ"]
[Sun Apr 12 02:33:33.543565 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Apr 12 02:33:33.790763 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/nano.php
[Sun Apr 12 02:33:34.032538 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Sun Apr 12 02:33:34.272981 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sun Apr 12 02:33:34.530748 2026] [:error] [pid 36909:tid 36935] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Sun Apr 12 02:33:34.770760 2026] [:error] [pid 36909:tid 36925] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Sun Apr 12 02:33:35.016307 2026] [:error] [pid 36909:tid 36922] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sun Apr 12 02:33:35.277633 2026] [:error] [pid 36909:tid 36926] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Sun Apr 12 02:33:35.517963 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sun Apr 12 02:33:35.765776 2026] [:error] [pid 36909:tid 36914] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Sun Apr 12 02:33:36.005339 2026] [:error] [pid 36909:tid 36933] [client 158.158.55.67:62133] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 12 02:33:36.242651 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:62133] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adqUAEGk5GhxTCzHUOovTwAAAQY"]
[Sun Apr 12 02:33:36.744157 2026] [:error] [pid 44698:tid 44713] [client 158.158.55.67:62142] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adqUABgoH9UWd-U3D56ILQAAAIo"]
[Sun Apr 12 02:33:37.261292 2026] [:error] [pid 36938:tid 36949] [client 158.158.55.67:40902] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adqUAYSWpa_VL1JPU6z80gAAAYk"]
[Sun Apr 12 02:33:37.758122 2026] [:error] [pid 44700:tid 44756] [client 158.158.55.67:63841] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "adqUAWryPgh_uW4QPCl7OAAAAMw"]
[Sun Apr 12 02:33:38.237417 2026] [:error] [pid 44701:tid 44776] [client 158.158.55.67:45144] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adqUAhGZAP4MrlxEPFdQhQAAAEQ"]
[Sun Apr 12 02:33:38.733741 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:40991] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adqUAhgoH9UWd-U3D56IMgAAAIA"]
[Sun Apr 12 02:33:39.214123 2026] [:error] [pid 45064:tid 45092] [client 158.158.55.67:39123] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adqUA5cHBvLyJ6EUhUoTUAAAAUA"]
[Sun Apr 12 02:33:39.705641 2026] [:error] [pid 44698:tid 44707] [client 158.158.55.67:45177] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "adqUAxgoH9UWd-U3D56INAAAAIQ"]
[Sun Apr 12 02:33:40.190884 2026] [:error] [pid 44698:tid 44714] [client 158.158.55.67:40950] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adqUBBgoH9UWd-U3D56INwAAAIs"]
[Sun Apr 12 02:33:40.672774 2026] [:error] [pid 44700:tid 44768] [client 158.158.55.67:40931] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adqUBGryPgh_uW4QPCl7PAAAANg"]
[Sun Apr 12 02:33:41.190008 2026] [:error] [pid 44698:tid 44723] [client 158.158.55.67:62140] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adqUBRgoH9UWd-U3D56IPAAAAJQ"]
[Sun Apr 12 02:33:41.678070 2026] [:error] [pid 45064:tid 45096] [client 158.158.55.67:63834] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "adqUBZcHBvLyJ6EUhUoTUgAAAUQ"]
[Sun Apr 12 02:33:42.161737 2026] [:error] [pid 36938:tid 36958] [client 158.158.55.67:63847] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adqUBoSWpa_VL1JPU6z82wAAAZI"]
[Sun Apr 12 02:33:42.643513 2026] [:error] [pid 44698:tid 44721] [client 158.158.55.67:40986] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adqUBhgoH9UWd-U3D56IPwAAAJI"]
[Sun Apr 12 02:33:43.130924 2026] [:error] [pid 36938:tid 36962] [client 158.158.55.67:45178] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adqUB4SWpa_VL1JPU6z84gAAAZY"]
[Sun Apr 12 02:33:43.610896 2026] [:error] [pid 36909:tid 36932] [client 158.158.55.67:62134] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adqUB0Gk5GhxTCzHUOovVgAAARU"]
[Sun Apr 12 02:33:44.090940 2026] [:error] [pid 44701:tid 44799] [client 158.158.55.67:45129] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adqUCBGZAP4MrlxEPFdQiwAAAFc"]
[Sun Apr 12 02:33:44.581700 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:63840] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adqUCEGk5GhxTCzHUOovWQAAARM"]
[Sun Apr 12 02:33:45.088992 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:49412] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adqUCUGk5GhxTCzHUOovXgAAAQI"]
[Sun Apr 12 02:33:45.563161 2026] [:error] [pid 36909:tid 36932] [client 158.158.55.67:65134] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "adqUCUGk5GhxTCzHUOovZAAAARU"]
[Sun Apr 12 02:33:46.041901 2026] [:error] [pid 34152:tid 34165] [client 158.158.55.67:38596] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adqUCoFtE4RhFslT1DrPiAAAAAs"]
[Sun Apr 12 02:33:46.528712 2026] [:error] [pid 45064:tid 45104] [client 158.158.55.67:65109] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adqUCpcHBvLyJ6EUhUoTUwAAAUs"]
[Sun Apr 12 02:33:47.006739 2026] [:error] [pid 36938:tid 36952] [client 158.158.55.67:45170] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adqUC4SWpa_VL1JPU6z85wAAAYw"]
[Sun Apr 12 02:33:47.482509 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:62108] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adqUC0Gk5GhxTCzHUOovcAAAAQA"]
[Sun Apr 12 02:33:47.958127 2026] [:error] [pid 45064:tid 45115] [client 158.158.55.67:62112] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adqUC5cHBvLyJ6EUhUoTVQAAAVY"]
[Sun Apr 12 02:33:48.438129 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:65101] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adqUDEGk5GhxTCzHUOovdAAAAQY"]
[Sun Apr 12 02:33:48.930326 2026] [:error] [pid 36938:tid 36962] [client 158.158.55.67:63929] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adqUDISWpa_VL1JPU6z86gAAAZY"]
[Sun Apr 12 02:33:49.407128 2026] [:error] [pid 36909:tid 36915] [client 158.158.55.67:63935] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "adqUDUGk5GhxTCzHUOoveAAAAQQ"]
[Sun Apr 12 02:33:49.899402 2026] [:error] [pid 44698:tid 44714] [client 158.158.55.67:63882] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUDRgoH9UWd-U3D56IUAAAAIs"]
[Sun Apr 12 02:33:50.397943 2026] [:error] [pid 44701:tid 44776] [client 158.158.55.67:65140] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUDhGZAP4MrlxEPFdQlgAAAEQ"]
[Sun Apr 12 02:33:50.890193 2026] [:error] [pid 45064:tid 45103] [client 158.158.55.67:40997] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUDpcHBvLyJ6EUhUoTVwAAAUo"]
[Sun Apr 12 02:33:51.403143 2026] [:error] [pid 36909:tid 36934] [client 158.158.55.67:40924] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUD0Gk5GhxTCzHUOovfgAAARc"]
[Sun Apr 12 02:33:51.880775 2026] [:error] [pid 44698:tid 44723] [client 158.158.55.67:49993] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adqUDxgoH9UWd-U3D56IVQAAAJQ"]
[Sun Apr 12 02:33:52.369692 2026] [:error] [pid 45064:tid 45111] [client 158.158.55.67:45158] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adqUEJcHBvLyJ6EUhUoTXQAAAVI"]
[Sun Apr 12 02:33:52.847016 2026] [:error] [pid 36909:tid 36918] [client 158.158.55.67:63871] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adqUEEGk5GhxTCzHUOovggAAAQc"]
[Sun Apr 12 02:33:53.328279 2026] [:error] [pid 36909:tid 36920] [client 158.158.55.67:50006] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "adqUEUGk5GhxTCzHUOovhQAAAQk"]
[Sun Apr 12 02:33:53.827478 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:39127] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adqUEUGk5GhxTCzHUOoviwAAAQ0"]
[Sun Apr 12 02:33:54.313063 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:62105] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adqUEkGk5GhxTCzHUOovjQAAAQg"]
[Sun Apr 12 02:33:54.794781 2026] [:error] [pid 44701:tid 44775] [client 158.158.55.67:65094] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adqUEhGZAP4MrlxEPFdQmQAAAEM"]
[Sun Apr 12 02:33:55.277523 2026] [:error] [pid 44701:tid 44774] [client 158.158.55.67:62119] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "adqUExGZAP4MrlxEPFdQmgAAAEI"]
[Sun Apr 12 02:33:55.756654 2026] [:error] [pid 44700:tid 44753] [client 158.158.55.67:65096] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adqUE2ryPgh_uW4QPCl7UgAAAMk"]
[Sun Apr 12 02:33:56.254075 2026] [:error] [pid 44701:tid 44777] [client 158.158.55.67:63839] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adqUFBGZAP4MrlxEPFdQnQAAAEU"]
[Sun Apr 12 02:33:56.739017 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:62114] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adqUFEGk5GhxTCzHUOovmAAAARM"]
[Sun Apr 12 02:33:57.220501 2026] [:error] [pid 34152:tid 34160] [client 158.158.55.67:45175] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "adqUFYFtE4RhFslT1DrPlgAAAAY"]
[Sun Apr 12 02:33:57.695581 2026] [:error] [pid 36909:tid 36921] [client 158.158.55.67:62096] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adqUFUGk5GhxTCzHUOovmgAAAQo"]
[Sun Apr 12 02:33:58.222717 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:50020] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adqUFkGk5GhxTCzHUOovoQAAAQ0"]
[Sun Apr 12 02:33:58.700883 2026] [:error] [pid 34152:tid 34159] [client 158.158.55.67:63867] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adqUFoFtE4RhFslT1DrPmQAAAAU"]
[Sun Apr 12 02:33:59.190434 2026] [:error] [pid 36909:tid 36928] [client 158.158.55.67:40905] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "adqUF0Gk5GhxTCzHUOovpgAAARE"]
[Sun Apr 12 02:33:59.680949 2026] [:error] [pid 44701:tid 44789] [client 158.158.55.67:63811] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adqUFxGZAP4MrlxEPFdQoAAAAE4"]
[Sun Apr 12 02:34:00.170982 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:62111] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adqUGEGk5GhxTCzHUOovrQAAAQI"]
[Sun Apr 12 02:34:00.657110 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:45141] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adqUGBgoH9UWd-U3D56IWgAAAIA"]
[Sun Apr 12 02:34:01.146162 2026] [:error] [pid 44698:tid 44713] [client 158.158.55.67:39880] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adqUGRgoH9UWd-U3D56IXQAAAIo"]
[Sun Apr 12 02:34:01.636134 2026] [:error] [pid 45064:tid 45098] [client 158.158.55.67:40906] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adqUGZcHBvLyJ6EUhUoTZAAAAUY"]
[Sun Apr 12 02:34:02.178470 2026] [:error] [pid 44700:tid 44758] [client 158.158.55.67:40919] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adqUGmryPgh_uW4QPCl7VwAAAM4"]
[Sun Apr 12 02:34:02.653483 2026] [:error] [pid 44698:tid 44714] [client 158.158.55.67:40944] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adqUGhgoH9UWd-U3D56IXwAAAIs"]
[Sun Apr 12 02:34:03.198528 2026] [:error] [pid 36909:tid 36914] [client 158.158.55.67:45125] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "adqUG0Gk5GhxTCzHUOovsgAAAQM"]
[Sun Apr 12 02:34:03.676112 2026] [:error] [pid 36909:tid 36932] [client 158.158.55.67:45173] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adqUG0Gk5GhxTCzHUOovuQAAARU"]
[Sun Apr 12 02:34:04.161823 2026] [:error] [pid 36909:tid 36934] [client 158.158.55.67:65115] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adqUHEGk5GhxTCzHUOovvAAAARc"]
[Sun Apr 12 02:34:04.664498 2026] [:error] [pid 45064:tid 45113] [client 158.158.55.67:45120] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adqUHJcHBvLyJ6EUhUoTZgAAAVQ"]
[Sun Apr 12 02:34:05.222567 2026] [:error] [pid 45064:tid 45099] [client 158.158.55.67:62088] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "adqUHZcHBvLyJ6EUhUoTZwAAAUc"]
[Sun Apr 12 02:34:05.708187 2026] [:error] [pid 36938:tid 36940] [client 158.158.55.67:39119] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adqUHYSWpa_VL1JPU6z8-wAAAYA"]
[Sun Apr 12 02:34:06.203645 2026] [:error] [pid 44700:tid 44751] [client 158.158.55.67:45132] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adqUHmryPgh_uW4QPCl7YAAAAMc"]
[Sun Apr 12 02:34:06.701517 2026] [:error] [pid 44701:tid 44787] [client 158.158.55.67:45176] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adqUHhGZAP4MrlxEPFdQowAAAE0"]
[Sun Apr 12 02:34:07.328757 2026] [:error] [pid 45064:tid 45114] [client 158.158.55.67:45159] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adqUH5cHBvLyJ6EUhUoTagAAAVU"]
[Sun Apr 12 02:34:07.819044 2026] [:error] [pid 45064:tid 45097] [client 158.158.55.67:40941] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqUH5cHBvLyJ6EUhUoTbQAAAUU"]
[Sun Apr 12 02:34:08.297190 2026] [:error] [pid 36938:tid 36950] [client 158.158.55.67:63914] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqUIISWpa_VL1JPU6z9AQAAAYo"]
[Sun Apr 12 02:34:08.781598 2026] [:error] [pid 44698:tid 44716] [client 158.158.55.67:45170] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqUIBgoH9UWd-U3D56IcgAAAI0"]
[Sun Apr 12 02:34:09.299639 2026] [:error] [pid 44698:tid 44705] [client 158.158.55.67:50027] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqUIRgoH9UWd-U3D56IeAAAAII"]
[Sun Apr 12 02:34:09.778067 2026] [:error] [pid 44698:tid 44718] [client 158.158.55.67:63856] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "adqUIRgoH9UWd-U3D56IegAAAI8"]
[Sun Apr 12 02:34:10.344481 2026] [:error] [pid 36938:tid 36949] [client 158.158.55.67:49424] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "adqUIoSWpa_VL1JPU6z9BAAAAYk"]
[Sun Apr 12 02:34:10.813795 2026] [:error] [pid 36909:tid 36915] [client 158.158.55.67:45126] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "adqUIkGk5GhxTCzHUOov2wAAAQQ"]
[Sun Apr 12 02:34:11.305294 2026] [:error] [pid 45064:tid 45117] [client 158.158.55.67:63865] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "adqUI5cHBvLyJ6EUhUoTcQAAAVg"]
[Sun Apr 12 02:34:11.822058 2026] [:error] [pid 45064:tid 45108] [client 158.158.55.67:63930] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adqUI5cHBvLyJ6EUhUoTcgAAAU8"]
[Sun Apr 12 02:34:12.318597 2026] [:error] [pid 36938:tid 36960] [client 158.158.55.67:63898] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adqUJISWpa_VL1JPU6z9CAAAAZQ"]
[Sun Apr 12 02:34:12.800482 2026] [:error] [pid 36909:tid 36914] [client 158.158.55.67:63903] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adqUJEGk5GhxTCzHUOov5QAAAQM"]
[Sun Apr 12 02:34:13.367807 2026] [:error] [pid 36938:tid 36947] [client 158.158.55.67:63818] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "adqUJYSWpa_VL1JPU6z9DgAAAYc"]
[Sun Apr 12 02:34:13.843203 2026] [:error] [pid 36938:tid 36949] [client 158.158.55.67:40947] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "adqUJYSWpa_VL1JPU6z9EgAAAYk"]
[Sun Apr 12 02:34:14.320860 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:50037] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "adqUJhgoH9UWd-U3D56IhwAAAIA"]
[Sun Apr 12 02:34:14.798656 2026] [:error] [pid 34152:tid 34156] [client 158.158.55.67:41022] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "adqUJoFtE4RhFslT1DrPngAAAAI"]
[Sun Apr 12 02:34:15.294970 2026] [:error] [pid 44700:tid 44746] [client 158.158.55.67:65123] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "adqUJ2ryPgh_uW4QPCl7bQAAAMI"]
[Sun Apr 12 02:34:15.780078 2026] [:error] [pid 34152:tid 34170] [client 158.158.55.67:62085] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adqUJ4FtE4RhFslT1DrPoQAAABA"]
[Sun Apr 12 02:34:16.261199 2026] [:error] [pid 44700:tid 44759] [client 158.158.55.67:39148] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adqUKGryPgh_uW4QPCl7bgAAAM8"]
[Sun Apr 12 02:34:16.739684 2026] [:error] [pid 36909:tid 36926] [client 158.158.55.67:39137] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adqUKEGk5GhxTCzHUOov9gAAAQ8"]
[Sun Apr 12 02:34:17.232670 2026] [:error] [pid 44701:tid 44793] [client 158.158.55.67:41010] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "adqUKRGZAP4MrlxEPFdQqwAAAFI"]
[Sun Apr 12 02:34:17.708354 2026] [:error] [pid 44698:tid 44719] [client 158.158.55.67:63925] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adqUKRgoH9UWd-U3D56IkgAAAJA"]
[Sun Apr 12 02:34:18.190175 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:45143] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adqUKoSWpa_VL1JPU6z9FwAAAYY"]
[Sun Apr 12 02:34:18.674169 2026] [:error] [pid 36938:tid 36942] [client 158.158.55.67:65121] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adqUKoSWpa_VL1JPU6z9HAAAAYI"]
[Sun Apr 12 02:34:19.168092 2026] [:error] [pid 44698:tid 44707] [client 158.158.55.67:63810] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adqUKxgoH9UWd-U3D56IlgAAAIQ"]
[Sun Apr 12 02:34:19.642443 2026] [:error] [pid 44700:tid 44757] [client 158.158.55.67:45182] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adqUK2ryPgh_uW4QPCl7cgAAAM0"]
[Sun Apr 12 02:34:20.152716 2026] [:error] [pid 44700:tid 44762] [client 158.158.55.67:65088] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adqULGryPgh_uW4QPCl7dAAAANI"]
[Sun Apr 12 02:34:20.629361 2026] [:error] [pid 44698:tid 44720] [client 158.158.55.67:45161] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adqULBgoH9UWd-U3D56InQAAAJE"]
[Sun Apr 12 02:34:21.162164 2026] [:error] [pid 34152:tid 34173] [client 158.158.55.67:40983] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "adqULYFtE4RhFslT1DrPowAAABM"]
[Sun Apr 12 02:34:21.661498 2026] [:error] [pid 44700:tid 44752] [client 158.158.55.67:63855] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adqULWryPgh_uW4QPCl7eAAAAMg"]
[Sun Apr 12 02:34:22.201833 2026] [:error] [pid 44700:tid 44758] [client 158.158.55.67:40973] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adqULmryPgh_uW4QPCl7egAAAM4"]
[Sun Apr 12 02:34:22.735896 2026] [:error] [pid 34152:tid 34157] [client 158.158.55.67:63907] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adqULoFtE4RhFslT1DrPpgAAAAM"]
[Sun Apr 12 02:34:23.223972 2026] [:error] [pid 36909:tid 36914] [client 158.158.55.67:63819] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "adqUL0Gk5GhxTCzHUOowEwAAAQM"]
[Sun Apr 12 02:34:23.735024 2026] [:error] [pid 44700:tid 44759] [client 158.158.55.67:65122] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUL2ryPgh_uW4QPCl7ewAAAM8"]
[Sun Apr 12 02:34:24.209274 2026] [:error] [pid 34152:tid 34178] [client 158.158.55.67:63874] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUMIFtE4RhFslT1DrPqQAAABg"]
[Sun Apr 12 02:34:24.691279 2026] [:error] [pid 34152:tid 34166] [client 158.158.55.67:45123] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUMIFtE4RhFslT1DrPqgAAAAw"]
[Sun Apr 12 02:34:25.169206 2026] [:error] [pid 34152:tid 34163] [client 158.158.55.67:39145] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUMYFtE4RhFslT1DrPrAAAAAk"]
[Sun Apr 12 02:34:25.644511 2026] [:error] [pid 36938:tid 36940] [client 158.158.55.67:63816] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqUMYSWpa_VL1JPU6z9MQAAAYA"]
[Sun Apr 12 02:34:26.123918 2026] [:error] [pid 36938:tid 36951] [client 158.158.55.67:63830] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqUMoSWpa_VL1JPU6z9MgAAAYs"]
[Sun Apr 12 02:34:26.634141 2026] [:error] [pid 36938:tid 36960] [client 158.158.55.67:63864] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqUMoSWpa_VL1JPU6z9NgAAAZQ"]
[Sun Apr 12 02:34:27.107208 2026] [:error] [pid 36938:tid 36941] [client 158.158.55.67:45165] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqUM4SWpa_VL1JPU6z9PAAAAYE"]
[Sun Apr 12 02:34:27.600358 2026] [:error] [pid 36938:tid 36943] [client 158.158.55.67:45167] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adqUM4SWpa_VL1JPU6z9QAAAAYM"]
[Sun Apr 12 02:34:28.084812 2026] [:error] [pid 44698:tid 44708] [client 158.158.55.67:63897] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adqUNBgoH9UWd-U3D56IrwAAAIU"]
[Sun Apr 12 02:34:28.560770 2026] [:error] [pid 44700:tid 44760] [client 158.158.55.67:49440] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adqUNGryPgh_uW4QPCl7gwAAANA"]
[Sun Apr 12 02:34:29.034382 2026] [:error] [pid 44701:tid 44776] [client 158.158.55.67:62103] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "adqUNRGZAP4MrlxEPFdQvQAAAEQ"]
[Sun Apr 12 02:34:29.518723 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:39916] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adqUNRgoH9UWd-U3D56IsQAAAIA"]
[Sun Apr 12 02:34:29.989289 2026] [:error] [pid 44700:tid 44756] [client 158.158.55.67:41014] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adqUNWryPgh_uW4QPCl7hAAAAMw"]
[Sun Apr 12 02:34:30.482084 2026] [:error] [pid 44701:tid 44786] [client 158.158.55.67:40896] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adqUNhGZAP4MrlxEPFdQvgAAAEw"]
[Sun Apr 12 02:34:30.955387 2026] [:error] [pid 45064:tid 45101] [client 158.158.55.67:49985] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "adqUNpcHBvLyJ6EUhUoTjwAAAUg"]
[Sun Apr 12 02:34:31.433961 2026] [:error] [pid 44701:tid 44800] [client 158.158.55.67:40901] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adqUNxGZAP4MrlxEPFdQwgAAAFg"]
[Sun Apr 12 02:34:31.919807 2026] [:error] [pid 44701:tid 44794] [client 158.158.55.67:45136] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adqUNxGZAP4MrlxEPFdQxQAAAFM"]
[Sun Apr 12 02:34:32.472027 2026] [:error] [pid 44701:tid 44791] [client 158.158.55.67:39113] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adqUOBGZAP4MrlxEPFdQxwAAAFA"]
[Sun Apr 12 02:34:32.973158 2026] [:error] [pid 44698:tid 44711] [client 158.158.55.67:62082] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "adqUOBgoH9UWd-U3D56IvQAAAIg"]
[Sun Apr 12 02:34:33.450247 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:63913] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adqUOUGk5GhxTCzHUOowMQAAARM"]
[Sun Apr 12 02:34:33.959396 2026] [:error] [pid 45064:tid 45109] [client 158.158.55.67:65105] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adqUOZcHBvLyJ6EUhUoTkwAAAVA"]
[Sun Apr 12 02:34:34.446575 2026] [:error] [pid 44698:tid 44725] [client 158.158.55.67:49454] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adqUOhgoH9UWd-U3D56IwQAAAJY"]
[Sun Apr 12 02:34:34.920107 2026] [:error] [pid 36909:tid 36935] [client 158.158.55.67:49453] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "adqUOkGk5GhxTCzHUOowNAAAARg"]
[Sun Apr 12 02:34:35.420915 2026] [:error] [pid 45064:tid 45117] [client 158.158.55.67:49441] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adqUO5cHBvLyJ6EUhUoTmgAAAVg"]
[Sun Apr 12 02:34:35.894808 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:63850] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "adqUO0Gk5GhxTCzHUOowNwAAAQA"]
[Sun Apr 12 02:34:36.414423 2026] [:error] [pid 44701:tid 44790] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sun Apr 12 02:34:36.663024 2026] [:error] [pid 44701:tid 44786] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 12 02:34:38.403945 2026] [:error] [pid 44701:tid 44777] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Sun Apr 12 02:34:38.652574 2026] [:error] [pid 44701:tid 44775] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Sun Apr 12 02:34:38.893042 2026] [:error] [pid 44701:tid 44779] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun Apr 12 02:34:39.136800 2026] [:error] [pid 44701:tid 44793] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Apr 12 02:34:39.871015 2026] [:error] [pid 44701:tid 44773] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 12 02:34:40.120595 2026] [:error] [pid 44701:tid 44791] [client 158.158.55.67:50029] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 12 02:34:40.368392 2026] [:error] [pid 44701:tid 44798] [client 158.158.55.67:50029] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adqUQBGZAP4MrlxEPFdQ1wAAAFY"]
[Sun Apr 12 02:34:40.850392 2026] [:error] [pid 45064:tid 45105] [client 158.158.55.67:63894] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adqUQJcHBvLyJ6EUhUoTnQAAAUw"]
[Sun Apr 12 02:34:41.336909 2026] [:error] [pid 45064:tid 45114] [client 158.158.55.67:49411] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adqUQZcHBvLyJ6EUhUoToAAAAVU"]
[Sun Apr 12 02:34:41.813262 2026] [:error] [pid 36938:tid 36963] [client 158.158.55.67:40957] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "adqUQYSWpa_VL1JPU6z9TgAAAZc"]
[Sun Apr 12 02:34:42.301578 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:40959] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adqUQoSWpa_VL1JPU6z9UgAAAYY"]
[Sun Apr 12 02:34:42.796143 2026] [:error] [pid 36909:tid 36921] [client 158.158.55.67:50025] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adqUQkGk5GhxTCzHUOowSwAAAQo"]
[Sun Apr 12 02:34:43.273186 2026] [:error] [pid 44700:tid 44767] [client 158.158.55.67:61369] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adqUQ2ryPgh_uW4QPCl7igAAANc"]
[Sun Apr 12 02:34:43.806379 2026] [:error] [pid 44700:tid 44757] [client 158.158.55.67:39129] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adqUQ2ryPgh_uW4QPCl7jAAAAM0"]
[Sun Apr 12 02:34:44.341597 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:63849] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adqUREGk5GhxTCzHUOowUwAAARM"]
[Sun Apr 12 02:34:44.826408 2026] [:error] [pid 44700:tid 44764] [client 158.158.55.67:65110] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adqURGryPgh_uW4QPCl7jQAAANQ"]
[Sun Apr 12 02:34:45.315116 2026] [:error] [pid 36909:tid 36926] [client 158.158.55.67:50021] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adqURUGk5GhxTCzHUOowYgAAAQ8"]
[Sun Apr 12 02:34:45.803022 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:40923] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adqURUGk5GhxTCzHUOowZQAAARM"]
[Sun Apr 12 02:34:46.334251 2026] [:error] [pid 36938:tid 36958] [client 158.158.55.67:45152] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqURoSWpa_VL1JPU6z9WwAAAZI"]
[Sun Apr 12 02:34:46.835347 2026] [:error] [pid 36938:tid 36961] [client 158.158.55.67:49457] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqURoSWpa_VL1JPU6z9YAAAAZU"]
[Sun Apr 12 02:34:47.351534 2026] [:error] [pid 36938:tid 36964] [client 158.158.55.67:45148] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqUR4SWpa_VL1JPU6z9YwAAAZg"]
[Sun Apr 12 02:34:47.883465 2026] [:error] [pid 36938:tid 36958] [client 158.158.55.67:63919] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqUR4SWpa_VL1JPU6z9ZwAAAZI"]
[Sun Apr 12 02:34:48.372127 2026] [:error] [pid 36938:tid 36947] [client 158.158.55.67:49408] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adqUSISWpa_VL1JPU6z9bAAAAYc"]
[Sun Apr 12 02:34:48.845387 2026] [:error] [pid 36938:tid 36944] [client 158.158.55.67:65114] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adqUSISWpa_VL1JPU6z9bQAAAYQ"]
[Sun Apr 12 02:34:49.450013 2026] [:error] [pid 44700:tid 44765] [client 158.158.55.67:63861] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adqUSWryPgh_uW4QPCl7kgAAANU"]
[Sun Apr 12 02:34:49.939531 2026] [:error] [pid 34152:tid 34166] [client 158.158.55.67:45156] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "adqUSYFtE4RhFslT1DrP5wAAAAw"]
[Sun Apr 12 02:34:50.592206 2026] [:error] [pid 36938:tid 36958] [client 158.158.55.67:62083] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUSoSWpa_VL1JPU6z9cQAAAZI"]
[Sun Apr 12 02:34:51.106445 2026] [:error] [pid 44700:tid 44767] [client 158.158.55.67:40911] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUS2ryPgh_uW4QPCl7lQAAANc"]
[Sun Apr 12 02:34:51.753177 2026] [:error] [pid 44701:tid 44787] [client 158.158.55.67:40916] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUSxGZAP4MrlxEPFdQ2wAAAE0"]
[Sun Apr 12 02:34:52.363763 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:45146] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUTEGk5GhxTCzHUOowiQAAAQ0"]
[Sun Apr 12 02:34:52.916213 2026] [:error] [pid 44701:tid 44777] [client 158.158.55.67:65092] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adqUTBGZAP4MrlxEPFdQ3QAAAEU"]
[Sun Apr 12 02:34:53.655883 2026] [:error] [pid 36909:tid 36916] [client 158.158.55.67:63842] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adqUTUGk5GhxTCzHUOowlwAAAQU"]
[Sun Apr 12 02:34:54.305803 2026] [:error] [pid 34152:tid 34175] [client 158.158.55.67:40989] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adqUToFtE4RhFslT1DrP6QAAABU"]
[Sun Apr 12 02:34:54.795297 2026] [:error] [pid 36909:tid 36934] [client 158.158.55.67:63908] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "adqUTkGk5GhxTCzHUOowogAAARc"]
[Sun Apr 12 02:34:55.451933 2026] [:error] [pid 34152:tid 34164] [client 158.158.55.67:65113] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adqUT4FtE4RhFslT1DrP7AAAAAo"]
[Sun Apr 12 02:34:55.943802 2026] [:error] [pid 36909:tid 36933] [client 158.158.55.67:65133] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adqUT0Gk5GhxTCzHUOowrgAAARY"]
[Sun Apr 12 02:34:56.490898 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:65143] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adqUUBgoH9UWd-U3D56I4gAAAIA"]
[Sun Apr 12 02:34:57.165420 2026] [:error] [pid 36909:tid 36929] [client 158.158.55.67:40954] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "adqUUUGk5GhxTCzHUOowtgAAARI"]
[Sun Apr 12 02:34:57.647183 2026] [:error] [pid 44700:tid 44760] [client 158.158.55.67:39901] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adqUUWryPgh_uW4QPCl7mQAAANA"]
[Sun Apr 12 02:34:58.238248 2026] [:error] [pid 44698:tid 44712] [client 158.158.55.67:65124] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adqUUhgoH9UWd-U3D56I5AAAAIk"]
[Sun Apr 12 02:34:58.734023 2026] [:error] [pid 36909:tid 36916] [client 158.158.55.67:39926] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adqUUkGk5GhxTCzHUOowwwAAAQU"]
[Sun Apr 12 02:34:59.245791 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:63858] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adqUU0Gk5GhxTCzHUOowxwAAAQ0"]
[Sun Apr 12 02:34:59.900310 2026] [:error] [pid 36909:tid 36927] [client 158.158.55.67:50000] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adqUU0Gk5GhxTCzHUOowygAAARA"]
[Sun Apr 12 02:35:00.413551 2026] [:error] [pid 36938:tid 36958] [client 158.158.55.67:38638] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adqUVISWpa_VL1JPU6z9iAAAAZI"]
[Sun Apr 12 02:35:01.014085 2026] [:error] [pid 45064:tid 45111] [client 158.158.55.67:45150] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adqUVZcHBvLyJ6EUhUoTrAAAAVI"]
[Sun Apr 12 02:35:01.545133 2026] [:error] [pid 44700:tid 44755] [client 158.158.55.67:62101] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adqUVWryPgh_uW4QPCl7ngAAAMs"]
[Sun Apr 12 02:35:02.041838 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:45138] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adqUVkGk5GhxTCzHUOow1AAAAQA"]
[Sun Apr 12 02:35:02.599111 2026] [:error] [pid 36909:tid 36932] [client 158.158.55.67:45160] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adqUVkGk5GhxTCzHUOow2gAAARU"]
[Sun Apr 12 02:35:03.135945 2026] [:error] [pid 36909:tid 36926] [client 158.158.55.67:40936] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adqUV0Gk5GhxTCzHUOow3QAAAQ8"]
[Sun Apr 12 02:35:03.627753 2026] [:error] [pid 36909:tid 36922] [client 158.158.55.67:62127] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adqUV0Gk5GhxTCzHUOow4gAAAQs"]
[Sun Apr 12 02:35:04.212998 2026] [:error] [pid 36938:tid 36959] [client 158.158.55.67:39897] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqUWISWpa_VL1JPU6z9jQAAAZM"]
[Sun Apr 12 02:35:04.700362 2026] [:error] [pid 36909:tid 36928] [client 158.158.55.67:63857] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqUWEGk5GhxTCzHUOow7QAAARE"]
[Sun Apr 12 02:35:05.229866 2026] [:error] [pid 44698:tid 44706] [client 158.158.55.67:49462] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqUWRgoH9UWd-U3D56I6AAAAIM"]
[Sun Apr 12 02:35:05.714771 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:63813] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqUWUGk5GhxTCzHUOow9QAAAQA"]
[Sun Apr 12 02:35:06.212448 2026] [:error] [pid 36909:tid 36929] [client 158.158.55.67:50008] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqUWkGk5GhxTCzHUOow-gAAARI"]
[Sun Apr 12 02:35:06.779482 2026] [:error] [pid 36909:tid 36923] [client 158.158.55.67:65150] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqUWkGk5GhxTCzHUOow_wAAAQw"]
[Sun Apr 12 02:35:07.424668 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:40999] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqUW0Gk5GhxTCzHUOoxBwAAAQA"]
[Sun Apr 12 02:35:07.949936 2026] [:error] [pid 36909:tid 36918] [client 158.158.55.67:49463] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adqUW0Gk5GhxTCzHUOoxCgAAAQc"]
[Sun Apr 12 02:35:08.580292 2026] [:error] [pid 34152:tid 34176] [client 158.158.55.67:45139] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqUXIFtE4RhFslT1DrP7wAAABY"]
[Sun Apr 12 02:35:09.077898 2026] [:error] [pid 36938:tid 36944] [client 158.158.55.67:39905] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqUXYSWpa_VL1JPU6z9lwAAAYQ"]
[Sun Apr 12 02:35:09.913778 2026] [:error] [pid 36938:tid 36947] [client 158.158.55.67:65125] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqUXYSWpa_VL1JPU6z9ngAAAYc"]
[Sun Apr 12 02:35:10.451720 2026] [:error] [pid 44698:tid 44725] [client 158.158.55.67:49455] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adqUXhgoH9UWd-U3D56I8AAAAJY"]
[Sun Apr 12 02:35:11.099948 2026] [:error] [pid 36909:tid 36931] [client 158.158.55.67:49464] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adqUX0Gk5GhxTCzHUOoxEAAAARQ"]
[Sun Apr 12 02:35:11.707356 2026] [:error] [pid 36909:tid 36914] [client 158.158.55.67:65107] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adqUX0Gk5GhxTCzHUOoxEgAAAQM"]
[Sun Apr 12 02:35:12.700269 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:65144] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adqUYBgoH9UWd-U3D56I-wAAAIA"]
[Sun Apr 12 02:35:13.311900 2026] [:error] [pid 44698:tid 44725] [client 158.158.55.67:45130] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "adqUYRgoH9UWd-U3D56I_QAAAJY"]
[Sun Apr 12 02:35:14.187879 2026] [:error] [pid 44698:tid 44711] [client 158.158.55.67:45128] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adqUYhgoH9UWd-U3D56JBAAAAIg"]
[Sun Apr 12 02:35:15.178499 2026] [:error] [pid 34152:tid 34165] [client 158.158.55.67:62109] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adqUY4FtE4RhFslT1DrP9AAAAAs"]
[Sun Apr 12 02:35:16.140969 2026] [:error] [pid 36909:tid 36935] [client 158.158.55.67:49456] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adqUZEGk5GhxTCzHUOoxGQAAARg"]
[Sun Apr 12 02:35:16.749000 2026] [:error] [pid 44700:tid 44756] [client 158.158.55.67:63862] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "adqUZGryPgh_uW4QPCl7qgAAAMw"]
[Sun Apr 12 02:35:17.609174 2026] [:error] [pid 36938:tid 36954] [client 158.158.55.67:49468] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqUZYSWpa_VL1JPU6z9yQAAAY4"]
[Sun Apr 12 02:35:18.282758 2026] [:error] [pid 44698:tid 44708] [client 158.158.55.67:63923] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqUZhgoH9UWd-U3D56JDQAAAIU"]
[Sun Apr 12 02:35:19.132554 2026] [:error] [pid 44698:tid 44715] [client 158.158.55.67:40962] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqUZxgoH9UWd-U3D56JEQAAAIw"]
[Sun Apr 12 02:35:19.901942 2026] [:error] [pid 36909:tid 36920] [client 158.158.55.67:39159] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adqUZ0Gk5GhxTCzHUOoxIAAAAQk"]
[Sun Apr 12 02:35:20.538001 2026] [:error] [pid 36909:tid 36912] [client 158.158.55.67:41018] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUaEGk5GhxTCzHUOoxIgAAAQE"]
[Sun Apr 12 02:35:21.084003 2026] [:error] [pid 44698:tid 44706] [client 158.158.55.67:41006] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUaRgoH9UWd-U3D56JFwAAAIM"]
[Sun Apr 12 02:35:21.670621 2026] [:error] [pid 36909:tid 36921] [client 158.158.55.67:60083] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUaUGk5GhxTCzHUOoxKwAAAQo"]
[Sun Apr 12 02:35:22.372313 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:39932] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "adqUakGk5GhxTCzHUOoxLgAAAQY"]
[Sun Apr 12 02:35:22.865739 2026] [:error] [pid 36909:tid 36925] [client 158.158.55.67:45145] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqUakGk5GhxTCzHUOoxMwAAAQ4"]
[Sun Apr 12 02:35:23.431000 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:63906] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqUa0Gk5GhxTCzHUOoxOQAAAQ0"]
[Sun Apr 12 02:35:23.996820 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:49423] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqUa0Gk5GhxTCzHUOoxPgAAARM"]
[Sun Apr 12 02:35:24.624056 2026] [:error] [pid 36938:tid 36957] [client 158.158.55.67:49460] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adqUbISWpa_VL1JPU6z95gAAAZE"]
[Sun Apr 12 02:35:25.180831 2026] [:error] [pid 36909:tid 36928] [client 158.158.55.67:39915] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUbUGk5GhxTCzHUOoxRAAAARE"]
[Sun Apr 12 02:35:25.682861 2026] [:error] [pid 36909:tid 36918] [client 158.158.55.67:62098] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUbUGk5GhxTCzHUOoxRgAAAQc"]
[Sun Apr 12 02:35:26.175245 2026] [:error] [pid 44698:tid 44716] [client 158.158.55.67:49466] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUbhgoH9UWd-U3D56JGgAAAI0"]
[Sun Apr 12 02:35:26.708220 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:62080] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "adqUbkGk5GhxTCzHUOoxTgAAAQA"]
[Sun Apr 12 02:35:27.341868 2026] [:error] [pid 36909:tid 36918] [client 158.158.55.67:63814] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adqUb0Gk5GhxTCzHUOoxUAAAAQc"]
[Sun Apr 12 02:35:27.835300 2026] [:error] [pid 36909:tid 36933] [client 158.158.55.67:45172] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adqUb0Gk5GhxTCzHUOoxVwAAARY"]
[Sun Apr 12 02:35:28.404249 2026] [:error] [pid 44701:tid 44787] [client 158.158.55.67:40912] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adqUcBGZAP4MrlxEPFdQ6QAAAE0"]
[Sun Apr 12 02:35:28.917421 2026] [:error] [pid 44701:tid 44786] [client 158.158.55.67:49988] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adqUcBGZAP4MrlxEPFdQ6gAAAEw"]
[Sun Apr 12 02:35:29.471291 2026] [:error] [pid 44701:tid 44790] [client 158.158.55.67:62097] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adqUcRGZAP4MrlxEPFdQ7AAAAE8"]
[Sun Apr 12 02:35:30.032071 2026] [:error] [pid 44701:tid 44775] [client 158.158.55.67:63852] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adqUchGZAP4MrlxEPFdQ7QAAAEM"]
[Sun Apr 12 02:35:30.550131 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:62092] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adqUcoSWpa_VL1JPU6z97gAAAYY"]
[Sun Apr 12 02:35:31.076225 2026] [:error] [pid 36909:tid 36924] [client 158.158.55.67:45150] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "adqUc0Gk5GhxTCzHUOoxWgAAAQ0"]
[Sun Apr 12 02:35:31.667155 2026] [:error] [pid 36909:tid 36914] [client 158.158.55.67:40939] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adqUc0Gk5GhxTCzHUOoxXwAAAQM"]
[Sun Apr 12 02:35:32.209043 2026] [:error] [pid 44698:tid 44718] [client 158.158.55.67:40971] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adqUdBgoH9UWd-U3D56JKQAAAI8"]
[Sun Apr 12 02:35:34.090460 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:45153] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adqUdkGk5GhxTCzHUOoxaQAAARM"]
[Sun Apr 12 02:35:34.618648 2026] [:error] [pid 36938:tid 36947] [client 158.158.55.67:38634] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "adqUdoSWpa_VL1JPU6z99QAAAYc"]
[Sun Apr 12 02:35:35.232950 2026] [:error] [pid 36938:tid 36945] [client 158.158.55.67:39894] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adqUd4SWpa_VL1JPU6z9-AAAAYU"]
[Sun Apr 12 02:35:36.043461 2026] [:error] [pid 44698:tid 44719] [client 158.158.55.67:60063] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adqUeBgoH9UWd-U3D56JLAAAAJA"]
[Sun Apr 12 02:35:36.621193 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:50016] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adqUeISWpa_VL1JPU6z9_gAAAYY"]
[Sun Apr 12 02:35:37.283081 2026] [:error] [pid 44698:tid 44725] [client 158.158.55.67:49433] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "adqUeRgoH9UWd-U3D56JLQAAAJY"]
[Sun Apr 12 02:35:38.001520 2026] [:error] [pid 44700:tid 44761] [client 158.158.55.67:62093] [client 158.158.55.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adqUemryPgh_uW4QPCl7rwAAANE"]
[Sun Apr 12 02:35:38.554881 2026] [:error] [pid 36938:tid 36948] [client 158.158.55.67:38641] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adqUeoSWpa_VL1JPU6z9_wAAAYg"]
[Sun Apr 12 02:35:39.098697 2026] [:error] [pid 36938:tid 36951] [client 158.158.55.67:45154] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adqUe4SWpa_VL1JPU6z-AAAAAYs"]
[Sun Apr 12 02:35:39.688420 2026] [:error] [pid 44701:tid 44771] [client 158.158.55.67:39106] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adqUexGZAP4MrlxEPFdQ9gAAAEA"]
[Sun Apr 12 02:35:40.670583 2026] [:error] [pid 45064:tid 45096] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Sun Apr 12 02:35:40.961091 2026] [:error] [pid 45064:tid 45102] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Apr 12 02:35:41.201106 2026] [:error] [pid 45064:tid 45105] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Sun Apr 12 02:35:41.441893 2026] [:error] [pid 45064:tid 45093] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sun Apr 12 02:35:41.701579 2026] [:error] [pid 45064:tid 45103] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sun Apr 12 02:35:41.940825 2026] [:error] [pid 45064:tid 45104] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Sun Apr 12 02:35:42.181574 2026] [:error] [pid 45064:tid 45106] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sun Apr 12 02:35:42.421603 2026] [:error] [pid 45064:tid 45111] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Apr 12 02:35:42.660599 2026] [:error] [pid 45064:tid 45101] [client 158.158.55.67:40915] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Sun Apr 12 02:35:42.896045 2026] [:error] [pid 45064:tid 45116] [client 158.158.55.67:40915] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqUfpcHBvLyJ6EUhUoTzgAAAVc"]
[Sun Apr 12 02:35:43.458195 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:39149] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqUf0Gk5GhxTCzHUOoxeAAAAQI"]
[Sun Apr 12 02:35:43.967533 2026] [:error] [pid 44698:tid 44706] [client 158.158.55.67:45175] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqUfxgoH9UWd-U3D56JOwAAAIM"]
[Sun Apr 12 02:35:44.454882 2026] [:error] [pid 36909:tid 36927] [client 158.158.55.67:41023] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqUgEGk5GhxTCzHUOoxfAAAARA"]
[Sun Apr 12 02:35:44.955095 2026] [:error] [pid 45064:tid 45099] [client 158.158.55.67:39881] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adqUgJcHBvLyJ6EUhUoT0QAAAUc"]
[Sun Apr 12 02:35:45.502473 2026] [:error] [pid 36909:tid 36930] [client 158.158.55.67:40922] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adqUgUGk5GhxTCzHUOoxgAAAARM"]
[Sun Apr 12 02:35:45.985380 2026] [:error] [pid 36909:tid 36935] [client 158.158.55.67:63853] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adqUgUGk5GhxTCzHUOoxggAAARg"]
[Sun Apr 12 02:35:46.494631 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:62130] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "adqUgkGk5GhxTCzHUOoxhAAAAQg"]
[Sun Apr 12 02:35:47.073702 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:41017] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adqUg4SWpa_VL1JPU6z-BgAAAYY"]
[Sun Apr 12 02:35:47.603606 2026] [:error] [pid 44698:tid 44711] [client 158.158.55.67:39878] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adqUgxgoH9UWd-U3D56JPwAAAIg"]
[Sun Apr 12 02:35:48.118968 2026] [:error] [pid 44698:tid 44704] [client 158.158.55.67:41001] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adqUhBgoH9UWd-U3D56JQAAAAIE"]
[Sun Apr 12 02:35:48.644057 2026] [:error] [pid 36909:tid 36912] [client 158.158.55.67:39928] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adqUhEGk5GhxTCzHUOoxigAAAQE"]
[Sun Apr 12 02:35:49.202600 2026] [:error] [pid 44701:tid 44795] [client 158.158.55.67:40958] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adqUhRGZAP4MrlxEPFdQ-gAAAFQ"]
[Sun Apr 12 02:35:49.728953 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:45140] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adqUhUGk5GhxTCzHUOoxkQAAAQY"]
[Sun Apr 12 02:35:50.260385 2026] [:error] [pid 44701:tid 44777] [client 158.158.55.67:49419] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adqUhhGZAP4MrlxEPFdQ-wAAAEU"]
[Sun Apr 12 02:35:50.786570 2026] [:error] [pid 44701:tid 44785] [client 158.158.55.67:50022] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "adqUhhGZAP4MrlxEPFdQ_AAAAEs"]
[Sun Apr 12 02:35:51.365765 2026] [:error] [pid 44700:tid 44749] [client 158.158.55.67:63905] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adqUh2ryPgh_uW4QPCl7tAAAAMU"]
[Sun Apr 12 02:35:51.900507 2026] [:error] [pid 34152:tid 34154] [client 158.158.55.67:50025] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adqUh4FtE4RhFslT1DrQAQAAAAA"]
[Sun Apr 12 02:35:52.527840 2026] [:error] [pid 36938:tid 36955] [client 158.158.55.67:39121] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adqUiISWpa_VL1JPU6z-DQAAAY8"]
[Sun Apr 12 02:35:53.049344 2026] [:error] [pid 45064:tid 45104] [client 158.158.55.67:63869] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "adqUiZcHBvLyJ6EUhUoT1AAAAUs"]
[Sun Apr 12 02:35:53.541811 2026] [:error] [pid 36938:tid 36945] [client 158.158.55.67:61333] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adqUiYSWpa_VL1JPU6z-DwAAAYU"]
[Sun Apr 12 02:35:54.043919 2026] [:error] [pid 36938:tid 36958] [client 158.158.55.67:62123] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adqUioSWpa_VL1JPU6z-EQAAAZI"]
[Sun Apr 12 02:35:54.535609 2026] [:error] [pid 44698:tid 44712] [client 158.158.55.67:63896] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adqUihgoH9UWd-U3D56JQwAAAIk"]
[Sun Apr 12 02:35:55.061513 2026] [:error] [pid 36938:tid 36946] [client 158.158.55.67:45162] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "adqUi4SWpa_VL1JPU6z-FAAAAYY"]
[Sun Apr 12 02:35:55.616368 2026] [:error] [pid 44700:tid 44761] [client 158.158.55.67:39150] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adqUi2ryPgh_uW4QPCl7ugAAANE"]
[Sun Apr 12 02:35:56.190862 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:61341] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adqUjEGk5GhxTCzHUOoxngAAAQI"]
[Sun Apr 12 02:35:56.746432 2026] [:error] [pid 36938:tid 36944] [client 158.158.55.67:40988] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adqUjISWpa_VL1JPU6z-FwAAAYQ"]
[Sun Apr 12 02:35:57.232375 2026] [:error] [pid 36938:tid 36960] [client 158.158.55.67:63821] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "adqUjYSWpa_VL1JPU6z-GAAAAZQ"]
[Sun Apr 12 02:35:57.806527 2026] [:error] [pid 45064:tid 45101] [client 158.158.55.67:40994] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUjZcHBvLyJ6EUhUoT2AAAAUg"]
[Sun Apr 12 02:35:58.349834 2026] [:error] [pid 36938:tid 36957] [client 158.158.55.67:39879] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUjoSWpa_VL1JPU6z-GwAAAZE"]
[Sun Apr 12 02:35:58.887911 2026] [:error] [pid 36938:tid 36945] [client 158.158.55.67:38629] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUjoSWpa_VL1JPU6z-HQAAAYU"]
[Sun Apr 12 02:35:59.459494 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:63825] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "adqUj0Gk5GhxTCzHUOoxqQAAAQg"]
[Sun Apr 12 02:35:59.958074 2026] [:error] [pid 36909:tid 36916] [client 158.158.55.67:45134] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adqUj0Gk5GhxTCzHUOoxrAAAAQU"]
[Sun Apr 12 02:36:00.441945 2026] [:error] [pid 36938:tid 36962] [client 158.158.55.67:40938] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adqUkISWpa_VL1JPU6z-IAAAAZY"]
[Sun Apr 12 02:36:00.931695 2026] [:error] [pid 44701:tid 44793] [client 158.158.55.67:39124] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adqUkBGZAP4MrlxEPFdQ_wAAAFI"]
[Sun Apr 12 02:36:01.413229 2026] [:error] [pid 36938:tid 36953] [client 158.158.55.67:38599] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "adqUkYSWpa_VL1JPU6z-IgAAAY0"]
[Sun Apr 12 02:36:01.909117 2026] [:error] [pid 36938:tid 36942] [client 158.158.55.67:63915] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adqUkYSWpa_VL1JPU6z-JgAAAYI"]
[Sun Apr 12 02:36:02.454208 2026] [:error] [pid 45064:tid 45096] [client 158.158.55.67:49430] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adqUkpcHBvLyJ6EUhUoT3AAAAUQ"]
[Sun Apr 12 02:36:02.964315 2026] [:error] [pid 36938:tid 36948] [client 158.158.55.67:40945] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adqUkoSWpa_VL1JPU6z-JwAAAYg"]
[Sun Apr 12 02:36:03.447573 2026] [:error] [pid 36938:tid 36961] [client 158.158.55.67:41000] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "adqUk4SWpa_VL1JPU6z-KwAAAZU"]
[Sun Apr 12 02:36:03.927657 2026] [:error] [pid 44701:tid 44796] [client 158.158.55.67:49445] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adqUkxGZAP4MrlxEPFdRBQAAAFU"]
[Sun Apr 12 02:36:04.448555 2026] [:error] [pid 34152:tid 34169] [client 158.158.55.67:41008] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adqUlIFtE4RhFslT1DrQBQAAAA8"]
[Sun Apr 12 02:36:05.030872 2026] [:error] [pid 34152:tid 34174] [client 158.158.55.67:49431] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adqUlYFtE4RhFslT1DrQCAAAABQ"]
[Sun Apr 12 02:36:05.539551 2026] [:error] [pid 44701:tid 44775] [client 158.158.55.67:40933] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "adqUlRGZAP4MrlxEPFdRCgAAAEM"]
[Sun Apr 12 02:36:06.028921 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:41020] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adqUlkGk5GhxTCzHUOoxswAAAQI"]
[Sun Apr 12 02:36:06.516717 2026] [:error] [pid 44700:tid 44756] [client 158.158.55.67:50026] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adqUlmryPgh_uW4QPCl7vgAAAMw"]
[Sun Apr 12 02:36:07.214854 2026] [:error] [pid 36909:tid 36921] [client 158.158.55.67:41002] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adqUl0Gk5GhxTCzHUOoxtAAAAQo"]
[Sun Apr 12 02:36:07.752725 2026] [:error] [pid 34152:tid 34160] [client 158.158.55.67:45180] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "adqUl4FtE4RhFslT1DrQCgAAAAY"]
[Sun Apr 12 02:36:08.295003 2026] [:error] [pid 44701:tid 44776] [client 158.158.55.67:65111] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adqUmBGZAP4MrlxEPFdREgAAAEQ"]
[Sun Apr 12 02:36:08.868918 2026] [:error] [pid 44700:tid 44746] [client 158.158.55.67:40961] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adqUmGryPgh_uW4QPCl7wwAAAMI"]
[Sun Apr 12 02:36:09.409492 2026] [:error] [pid 44698:tid 44716] [client 158.158.55.67:65151] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adqUmRgoH9UWd-U3D56JSQAAAI0"]
[Sun Apr 12 02:36:09.905725 2026] [:error] [pid 44698:tid 44724] [client 158.158.55.67:49992] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "adqUmRgoH9UWd-U3D56JTAAAAJU"]
[Sun Apr 12 02:36:10.524512 2026] [:error] [pid 36938:tid 36954] [client 158.158.55.67:39120] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "adqUmoSWpa_VL1JPU6z-MgAAAY4"]
[Sun Apr 12 02:36:11.169003 2026] [:error] [pid 36909:tid 36915] [client 158.158.55.67:65145] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "adqUm0Gk5GhxTCzHUOoxugAAAQQ"]
[Sun Apr 12 02:36:11.713909 2026] [:error] [pid 44698:tid 44712] [client 158.158.55.67:39922] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "adqUmxgoH9UWd-U3D56JTwAAAIk"]
[Sun Apr 12 02:36:12.310931 2026] [:error] [pid 44700:tid 44768] [client 158.158.55.67:41011] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "adqUnGryPgh_uW4QPCl7ywAAANg"]
[Sun Apr 12 02:36:12.919392 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:49999] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "adqUnEGk5GhxTCzHUOoxuwAAAQA"]
[Sun Apr 12 02:36:13.398698 2026] [:error] [pid 36909:tid 36925] [client 158.158.55.67:39142] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "adqUnUGk5GhxTCzHUOoxvAAAAQ4"]
[Sun Apr 12 02:36:14.086072 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:38644] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "adqUnkGk5GhxTCzHUOoxwAAAAQY"]
[Sun Apr 12 02:36:14.621866 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:60032] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "adqUnkGk5GhxTCzHUOoxwwAAAQI"]
[Sun Apr 12 02:36:15.188542 2026] [:error] [pid 44698:tid 44711] [client 158.158.55.67:41004] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "adqUnxgoH9UWd-U3D56JVwAAAIg"]
[Sun Apr 12 02:36:15.672392 2026] [:error] [pid 36938:tid 36944] [client 158.158.55.67:62094] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "adqUn4SWpa_VL1JPU6z-NwAAAYQ"]
[Sun Apr 12 02:36:16.167352 2026] [:error] [pid 36909:tid 36912] [client 158.158.55.67:40930] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "adqUoEGk5GhxTCzHUOoxxwAAAQE"]
[Sun Apr 12 02:36:16.651715 2026] [:error] [pid 34152:tid 34176] [client 158.158.55.67:60048] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "adqUoIFtE4RhFslT1DrQFAAAABY"]
[Sun Apr 12 02:36:17.155258 2026] [:error] [pid 36909:tid 36911] [client 158.158.55.67:49420] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adqUoUGk5GhxTCzHUOoxygAAAQA"]
[Sun Apr 12 02:36:17.631966 2026] [:error] [pid 36909:tid 36917] [client 158.158.55.67:49410] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adqUoUGk5GhxTCzHUOoxzgAAAQY"]
[Sun Apr 12 02:36:18.134536 2026] [:error] [pid 36909:tid 36913] [client 158.158.55.67:61322] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adqUokGk5GhxTCzHUOoxzwAAAQI"]
[Sun Apr 12 02:36:18.621858 2026] [:error] [pid 36909:tid 36919] [client 158.158.55.67:39110] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adqUokGk5GhxTCzHUOox0wAAAQg"]
[Sun Apr 12 02:36:19.110778 2026] [:error] [pid 36909:tid 36912] [client 158.158.55.67:50023] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "adqUo0Gk5GhxTCzHUOox1wAAAQE"]
[Sun Apr 12 02:36:19.591427 2026] [:error] [pid 44700:tid 44746] [client 158.158.55.67:40956] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "adqUo2ryPgh_uW4QPCl70QAAAMI"]
[Sun Apr 12 02:36:20.081818 2026] [:error] [pid 45064:tid 45109] [client 158.158.55.67:50005] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "adqUpJcHBvLyJ6EUhUoT6QAAAVA"]
[Sun Apr 12 02:36:20.559803 2026] [:error] [pid 44698:tid 44706] [client 158.158.55.67:63911] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "adqUpBgoH9UWd-U3D56JXAAAAIM"]
[Sun Apr 12 02:36:21.036194 2026] [:error] [pid 36909:tid 36922] [client 158.158.55.67:63846] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adqUpUGk5GhxTCzHUOox3QAAAQs"]
[Sun Apr 12 02:36:21.541584 2026] [:error] [pid 36909:tid 36916] [client 158.158.55.67:50009] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adqUpUGk5GhxTCzHUOox4AAAAQU"]
[Sun Apr 12 02:36:22.023845 2026] [:error] [pid 44698:tid 44703] [client 158.158.55.67:40913] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adqUphgoH9UWd-U3D56JXwAAAIA"]
[Sun Apr 12 02:36:22.511579 2026] [:error] [pid 44700:tid 44763] [client 158.158.55.67:65093] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "adqUpmryPgh_uW4QPCl71QAAANM"]
[Sun Apr 12 02:36:23.016604 2026] [:error] [pid 44698:tid 44718] [client 158.158.55.67:49442] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adqUpxgoH9UWd-U3D56JYgAAAI8"]
[Sun Apr 12 02:36:23.499412 2026] [:error] [pid 44698:tid 44705] [client 158.158.55.67:63902] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adqUpxgoH9UWd-U3D56JYwAAAII"]
[Sun Apr 12 02:36:23.982749 2026] [:error] [pid 44701:tid 44798] [client 158.158.55.67:49438] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adqUpxGZAP4MrlxEPFdRPAAAAFY"]
[Sun Apr 12 02:36:24.683470 2026] [:error] [pid 44698:tid 44724] [client 158.158.55.67:41003] [client 158.158.55.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "adqUqBgoH9UWd-U3D56JZgAAAJU"]
[Sun Apr 12 05:21:10.636619 2026] [:error] [pid 25328:tid 25367] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Apr 12 05:21:10.862325 2026] [:error] [pid 25328:tid 25408] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Apr 12 05:21:11.626623 2026] [:error] [pid 25328:tid 25375] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Apr 12 05:21:11.835423 2026] [:error] [pid 25328:tid 25398] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sun Apr 12 05:21:12.061449 2026] [:error] [pid 25328:tid 25367] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 12 05:21:12.283801 2026] [:error] [pid 25328:tid 25408] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sun Apr 12 05:21:12.540807 2026] [:error] [pid 25328:tid 25377] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Sun Apr 12 05:21:12.973486 2026] [:error] [pid 25328:tid 25403] [client 13.71.185.179:64621] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 12 05:21:13.179718 2026] [:error] [pid 25328:tid 25375] [client 13.71.185.179:64621] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "adq7ScxUaQZxT-e0YsDV_gAAAEk"]
[Sun Apr 12 05:21:13.664858 2026] [:error] [pid 26599:tid 26610] [client 13.71.185.179:64631] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "adq7SXG89LXoQbk_rwA10AAAAUg"]
[Sun Apr 12 05:21:14.752273 2026] [:error] [pid 25328:tid 25398] [client 13.71.185.179:63939] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "adq7SsxUaQZxT-e0YsDWAAAAAFQ"]
[Sun Apr 12 05:21:15.441578 2026] [:error] [pid 26600:tid 26644] [client 13.71.185.179:63936] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "adq7S-1YwAZiXhQKLYpxtgAAAY8"]
[Sun Apr 12 05:21:16.014965 2026] [:error] [pid 26567:tid 26592] [client 13.71.185.179:64596] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "adq7THhRpg6ptWFyFx339AAAARc"]
[Sun Apr 12 05:21:16.489989 2026] [:error] [pid 26567:tid 26591] [client 13.71.185.179:64537] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "adq7THhRpg6ptWFyFx339QAAARY"]
[Sun Apr 12 05:21:17.066472 2026] [:error] [pid 26567:tid 26586] [client 13.71.185.179:64517] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "adq7TXhRpg6ptWFyFx33-AAAARE"]
[Sun Apr 12 05:21:17.881841 2026] [:error] [pid 26567:tid 26573] [client 13.71.185.179:63948] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "adq7TXhRpg6ptWFyFx33-wAAAQQ"]
[Sun Apr 12 05:21:18.752379 2026] [:error] [pid 25437:tid 25456] [client 13.71.185.179:64542] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "adq7Tnf97wYZje1ep_NN_QAAANE"]
[Sun Apr 12 05:21:19.675984 2026] [:error] [pid 60280:tid 60296] [client 13.71.185.179:63969] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "adq7T3BlLnDOYuIykkjWywAAAc4"]
[Sun Apr 12 05:21:20.315864 2026] [:error] [pid 26600:tid 26639] [client 13.71.185.179:63980] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "adq7UO1YwAZiXhQKLYpxvAAAAYo"]
[Sun Apr 12 05:21:20.750826 2026] [:error] [pid 26599:tid 26613] [client 13.71.185.179:64602] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "adq7UHG89LXoQbk_rwA12AAAAUs"]
[Sun Apr 12 05:21:21.842982 2026] [:error] [pid 60280:tid 60304] [client 13.71.185.179:64591] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "adq7UXBlLnDOYuIykkjW0QAAAdY"]
[Sun Apr 12 05:21:22.577833 2026] [:error] [pid 26567:tid 26588] [client 13.71.185.179:63947] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "adq7UnhRpg6ptWFyFx34EgAAARM"]
[Sun Apr 12 05:21:23.438464 2026] [:error] [pid 26600:tid 26650] [client 13.71.185.179:64521] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "adq7U-1YwAZiXhQKLYpxwAAAAZU"]
[Sun Apr 12 05:21:24.112413 2026] [:error] [pid 25327:tid 25339] [client 13.71.185.179:64558] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "adq7VC6h2tZEVJo9JFI-vgAAAAM"]
[Sun Apr 12 05:21:24.800718 2026] [:error] [pid 26600:tid 26653] [client 13.71.185.179:64578] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "adq7VO1YwAZiXhQKLYpxwgAAAZg"]
[Sun Apr 12 05:21:26.040825 2026] [:error] [pid 26567:tid 26578] [client 13.71.185.179:63951] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "adq7VnhRpg6ptWFyFx34GwAAAQk"]
[Sun Apr 12 05:21:27.138337 2026] [:error] [pid 26567:tid 26580] [client 13.71.185.179:63972] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "adq7V3hRpg6ptWFyFx34JQAAAQs"]
[Sun Apr 12 05:21:28.005084 2026] [:error] [pid 26599:tid 26607] [client 13.71.185.179:64636] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "adq7WHG89LXoQbk_rwA13QAAAUU"]
[Sun Apr 12 05:21:29.247337 2026] [:error] [pid 60280:tid 60287] [client 13.71.185.179:64617] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "adq7WXBlLnDOYuIykkjW4gAAAcU"]
[Sun Apr 12 05:21:30.092917 2026] [:error] [pid 25328:tid 25383] [client 13.71.185.179:63938] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "adq7WsxUaQZxT-e0YsDWAwAAAE0"]
[Sun Apr 12 05:21:30.621140 2026] [:error] [pid 25328:tid 25372] [client 13.71.185.179:64600] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "adq7WsxUaQZxT-e0YsDWBgAAAEc"]
[Sun Apr 12 05:21:31.140705 2026] [:error] [pid 26600:tid 26636] [client 13.71.185.179:64524] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "adq7W-1YwAZiXhQKLYpxxgAAAYc"]
[Sun Apr 12 05:21:32.146660 2026] [:error] [pid 25327:tid 25342] [client 13.71.185.179:64559] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "adq7XC6h2tZEVJo9JFI-xQAAAAY"]
[Sun Apr 12 05:21:32.613400 2026] [:error] [pid 60280:tid 60299] [client 13.71.185.179:63970] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "adq7XHBlLnDOYuIykkjW7QAAAdE"]
[Sun Apr 12 05:21:33.258161 2026] [:error] [pid 26599:tid 26616] [client 13.71.185.179:64597] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "adq7XXG89LXoQbk_rwA14gAAAU4"]
[Sun Apr 12 05:21:33.785531 2026] [:error] [pid 25328:tid 25389] [client 13.71.185.179:64603] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "adq7XcxUaQZxT-e0YsDWFwAAAFA"]
[Sun Apr 12 05:21:34.440503 2026] [:error] [pid 26600:tid 26634] [client 13.71.185.179:63307] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adq7Xu1YwAZiXhQKLYpxygAAAYU"]
[Sun Apr 12 05:21:34.890530 2026] [:error] [pid 25437:tid 25450] [client 13.71.185.179:64533] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adq7Xnf97wYZje1ep_NOBwAAAMs"]
[Sun Apr 12 05:21:35.641118 2026] [:error] [pid 60280:tid 60282] [client 13.71.185.179:64593] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adq7X3BlLnDOYuIykkjW8QAAAcA"]
[Sun Apr 12 05:21:36.523680 2026] [:error] [pid 26599:tid 26610] [client 13.71.185.179:64565] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "adq7YHG89LXoQbk_rwA15AAAAUg"]
[Sun Apr 12 05:21:37.203609 2026] [:error] [pid 26567:tid 26571] [client 13.71.185.179:63994] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "adq7YXhRpg6ptWFyFx34PQAAAQI"]
[Sun Apr 12 05:21:37.985214 2026] [:error] [pid 25328:tid 25377] [client 13.71.185.179:63993] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "adq7YcxUaQZxT-e0YsDWHAAAAEo"]
[Sun Apr 12 05:21:38.684172 2026] [:error] [pid 25327:tid 25345] [client 13.71.185.179:64512] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "adq7Yi6h2tZEVJo9JFI-xwAAAAk"]
[Sun Apr 12 05:21:39.765051 2026] [:error] [pid 26567:tid 26569] [client 13.71.185.179:64536] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "adq7Y3hRpg6ptWFyFx34QAAAAQA"]
[Sun Apr 12 05:21:40.251536 2026] [:error] [pid 26600:tid 26643] [client 13.71.185.179:63945] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "adq7ZO1YwAZiXhQKLYpxzQAAAY4"]
[Sun Apr 12 05:21:40.826022 2026] [:error] [pid 25328:tid 25368] [client 13.71.185.179:63350] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "adq7ZMxUaQZxT-e0YsDWHwAAAEQ"]
[Sun Apr 12 05:21:41.502989 2026] [:error] [pid 26567:tid 26582] [client 13.71.185.179:64515] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "adq7ZXhRpg6ptWFyFx34QgAAAQ0"]
[Sun Apr 12 05:21:42.127615 2026] [:error] [pid 25328:tid 25373] [client 13.71.185.179:64610] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "adq7ZsxUaQZxT-e0YsDWIwAAAEg"]
[Sun Apr 12 05:21:42.779852 2026] [:error] [pid 25437:tid 25443] [client 13.71.185.179:64553] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "adq7Znf97wYZje1ep_NOEwAAAMQ"]
[Sun Apr 12 05:21:43.205126 2026] [:error] [pid 25328:tid 25375] [client 13.71.185.179:63965] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "adq7Z8xUaQZxT-e0YsDWJAAAAEk"]
[Sun Apr 12 05:21:43.698359 2026] [:error] [pid 25437:tid 25455] [client 13.71.185.179:63942] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "adq7Z3f97wYZje1ep_NOGAAAANA"]
[Sun Apr 12 05:21:44.984168 2026] [:error] [pid 26567:tid 26585] [client 13.71.185.179:64519] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "adq7aHhRpg6ptWFyFx34SgAAARA"]
[Sun Apr 12 05:21:45.813885 2026] [:error] [pid 25327:tid 25351] [client 13.71.185.179:64548] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "adq7aS6h2tZEVJo9JFI-ygAAAA8"]
[Sun Apr 12 05:21:46.475441 2026] [:error] [pid 25328:tid 25405] [client 13.71.185.179:64550] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "adq7asxUaQZxT-e0YsDWJwAAAFc"]
[Sun Apr 12 05:21:47.161747 2026] [:error] [pid 26599:tid 26626] [client 13.71.185.179:64569] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "adq7a3G89LXoQbk_rwA16wAAAVg"]
[Sun Apr 12 05:21:47.608343 2026] [:error] [pid 60280:tid 60295] [client 13.71.185.179:63297] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gtc.php"] [unique_id "adq7a3BlLnDOYuIykkjXCwAAAc0"]
[Sun Apr 12 05:21:48.370999 2026] [:error] [pid 26567:tid 26589] [client 13.71.185.179:63959] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "adq7bHhRpg6ptWFyFx34TgAAARQ"]
[Sun Apr 12 05:21:49.406164 2026] [:error] [pid 26567:tid 26576] [client 13.71.185.179:63332] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "adq7bXhRpg6ptWFyFx34UgAAAQc"]
[Sun Apr 12 05:21:52.092120 2026] [:error] [pid 26600:tid 26638] [client 13.71.185.179:63955] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "adq7cO1YwAZiXhQKLYpx1QAAAYk"]
[Sun Apr 12 05:21:53.191841 2026] [:error] [pid 25328:tid 25385] [client 13.71.185.179:63973] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atx.php"] [unique_id "adq7ccxUaQZxT-e0YsDWNwAAAE4"]
[Sun Apr 12 05:21:54.162279 2026] [:error] [pid 25328:tid 25408] [client 13.71.185.179:63873] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "adq7csxUaQZxT-e0YsDWOgAAAFg"]
[Sun Apr 12 05:21:55.209192 2026] [:error] [pid 60280:tid 60282] [client 13.71.185.179:63952] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "adq7c3BlLnDOYuIykkjXGQAAAcA"]
[Sun Apr 12 05:21:56.758909 2026] [:error] [pid 26567:tid 26588] [client 13.71.185.179:64637] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "adq7dHhRpg6ptWFyFx34WQAAARM"]
[Sun Apr 12 05:21:58.271050 2026] [:error] [pid 60280:tid 60288] [client 13.71.185.179:64576] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z60.php"] [unique_id "adq7dnBlLnDOYuIykkjXIwAAAcY"]
[Sun Apr 12 05:22:02.898018 2026] [:error] [pid 60280:tid 60282] [client 13.71.185.179:64567] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq7enBlLnDOYuIykkjXKgAAAcA"]
[Sun Apr 12 05:22:04.686391 2026] [:error] [pid 26599:tid 26625] [client 13.71.185.179:63903] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq7fHG89LXoQbk_rwA2CQAAAVc"]
[Sun Apr 12 05:22:07.067816 2026] [:error] [pid 25328:tid 25405] [client 13.71.185.179:64520] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq7f8xUaQZxT-e0YsDWVgAAAFc"]
[Sun Apr 12 05:22:08.311640 2026] [:error] [pid 25328:tid 25389] [client 13.71.185.179:64528] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq7gMxUaQZxT-e0YsDWVwAAAFA"]
[Sun Apr 12 05:22:08.872278 2026] [:error] [pid 60280:tid 60285] [client 13.71.185.179:64634] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "adq7gHBlLnDOYuIykkjXOgAAAcM"]
[Sun Apr 12 05:22:09.492964 2026] [:error] [pid 26599:tid 26620] [client 13.71.185.179:63996] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "adq7gXG89LXoQbk_rwA2EQAAAVI"]
[Sun Apr 12 05:22:09.956338 2026] [:error] [pid 60280:tid 60299] [client 13.71.185.179:64608] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "adq7gXBlLnDOYuIykkjXOwAAAdE"]
[Sun Apr 12 05:22:10.669950 2026] [:error] [pid 26600:tid 26647] [client 13.71.185.179:63908] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/m.php"] [unique_id "adq7gu1YwAZiXhQKLYpx5gAAAZI"]
[Sun Apr 12 05:22:11.114617 2026] [:error] [pid 60280:tid 60291] [client 13.71.185.179:64545] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "adq7g3BlLnDOYuIykkjXPwAAAck"]
[Sun Apr 12 05:22:11.786709 2026] [:error] [pid 25329:tid 25412] [client 13.71.185.179:63880] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "adq7g2dcIYsS8Iyaj10rnAAAAJU"]
[Sun Apr 12 05:22:12.458737 2026] [:error] [pid 25329:tid 25393] [client 13.71.185.179:63248] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 12 05:22:13.364327 2026] [:error] [pid 25329:tid 25404] [client 13.71.185.179:63248] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Apr 12 05:22:13.585114 2026] [:error] [pid 25329:tid 25390] [client 13.71.185.179:63248] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Apr 12 05:22:13.867595 2026] [:error] [pid 25329:tid 25382] [client 13.71.185.179:63248] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Apr 12 05:22:14.076546 2026] [:error] [pid 25329:tid 25400] [client 13.71.185.179:63248] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 12 05:22:14.288933 2026] [:error] [pid 25329:tid 25381] [client 13.71.185.179:63248] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sun Apr 12 05:22:14.497327 2026] [:error] [pid 25329:tid 25402] [client 13.71.185.179:63248] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun Apr 12 05:22:14.702537 2026] [:error] [pid 25329:tid 25399] [client 13.71.185.179:63248] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adq7hmdcIYsS8Iyaj10rqgAAAI0"]
[Sun Apr 12 05:22:15.478689 2026] [:error] [pid 25329:tid 25397] [client 13.71.185.179:64604] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun Apr 12 05:22:15.724992 2026] [:error] [pid 25329:tid 25407] [client 13.71.185.179:64604] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sun Apr 12 05:22:16.111432 2026] [:error] [pid 25329:tid 25413] [client 13.71.185.179:64604] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "adq7iGdcIYsS8Iyaj10rtAAAAJY"]
[Sun Apr 12 05:22:16.701779 2026] [:error] [pid 60280:tid 60291] [client 13.71.185.179:63895] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "adq7iHBlLnDOYuIykkjXTQAAAck"]
[Sun Apr 12 05:22:17.750028 2026] [:error] [pid 60280:tid 60289] [client 13.71.185.179:64612] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "adq7iXBlLnDOYuIykkjXUAAAAcc"]
[Sun Apr 12 05:22:18.501290 2026] [:error] [pid 60280:tid 60305] [client 13.71.185.179:64581] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "adq7inBlLnDOYuIykkjXUwAAAdc"]
[Sun Apr 12 05:22:19.078185 2026] [:error] [pid 26567:tid 26590] [client 13.71.185.179:64627] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adq7i3hRpg6ptWFyFx34cQAAARU"]
[Sun Apr 12 05:22:19.616053 2026] [:error] [pid 26567:tid 26578] [client 13.71.185.179:64572] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adq7i3hRpg6ptWFyFx34dgAAAQk"]
[Sun Apr 12 05:22:20.281450 2026] [:error] [pid 26567:tid 26573] [client 13.71.185.179:64572] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adq7jHhRpg6ptWFyFx34dwAAAQQ"]
[Sun Apr 12 05:22:20.921824 2026] [:error] [pid 60280:tid 60284] [client 13.71.185.179:64562] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adq7jHBlLnDOYuIykkjXWwAAAcI"]
[Sun Apr 12 05:22:21.518547 2026] [:error] [pid 25329:tid 25397] [client 13.71.185.179:63940] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "adq7jWdcIYsS8Iyaj10rwgAAAIw"]
[Sun Apr 12 05:22:22.359799 2026] [:error] [pid 26599:tid 26610] [client 13.71.185.179:63984] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "adq7jnG89LXoQbk_rwA2FwAAAUg"]
[Sun Apr 12 05:22:23.425199 2026] [:error] [pid 26567:tid 26589] [client 13.71.185.179:63975] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "adq7j3hRpg6ptWFyFx34fQAAARQ"]
[Sun Apr 12 05:22:24.038070 2026] [:error] [pid 25328:tid 25366] [client 13.71.185.179:63950] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "adq7kMxUaQZxT-e0YsDWawAAAEI"]
[Sun Apr 12 05:22:24.715270 2026] [:error] [pid 25328:tid 25370] [client 13.71.185.179:64546] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "adq7kMxUaQZxT-e0YsDWbgAAAEY"]
[Sun Apr 12 05:22:25.454966 2026] [:error] [pid 60280:tid 60288] [client 13.71.185.179:64625] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "adq7kXBlLnDOYuIykkjXbAAAAcY"]
[Sun Apr 12 05:22:26.197495 2026] [:error] [pid 26600:tid 26650] [client 13.71.185.179:63874] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "adq7ku1YwAZiXhQKLYpx-AAAAZU"]
[Sun Apr 12 05:22:26.770334 2026] [:error] [pid 26600:tid 26634] [client 13.71.185.179:64583] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "adq7ku1YwAZiXhQKLYpx-gAAAYU"]
[Sun Apr 12 05:22:27.320513 2026] [:error] [pid 25328:tid 25377] [client 13.71.185.179:64518] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adq7k8xUaQZxT-e0YsDWbwAAAEo"]
[Sun Apr 12 05:22:28.135152 2026] [:error] [pid 26599:tid 26608] [client 13.71.185.179:64526] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adq7lHG89LXoQbk_rwA2GwAAAUY"]
[Sun Apr 12 05:22:28.705071 2026] [:error] [pid 26600:tid 26631] [client 13.71.185.179:63968] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adq7lO1YwAZiXhQKLYpx_QAAAYI"]
[Sun Apr 12 05:22:29.650557 2026] [:error] [pid 25329:tid 25411] [client 13.71.185.179:64525] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "adq7lWdcIYsS8Iyaj10rxQAAAJQ"]
[Sun Apr 12 05:22:30.102135 2026] [:error] [pid 25329:tid 25393] [client 13.71.185.179:63233] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "adq7lmdcIYsS8Iyaj10rxwAAAIo"]
[Sun Apr 12 05:22:30.677747 2026] [:error] [pid 25327:tid 25336] [client 13.71.185.179:64560] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "adq7li6h2tZEVJo9JFI-zQAAAAA"]
[Sun Apr 12 05:22:31.437931 2026] [:error] [pid 60280:tid 60283] [client 13.71.185.179:64527] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "adq7l3BlLnDOYuIykkjXegAAAcE"]
[Sun Apr 12 05:22:32.464539 2026] [:error] [pid 25328:tid 25373] [client 13.71.185.179:64624] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "adq7mMxUaQZxT-e0YsDWcwAAAEg"]
[Sun Apr 12 05:22:33.087646 2026] [:error] [pid 25328:tid 25369] [client 13.71.185.179:63325] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adq7mcxUaQZxT-e0YsDWdQAAAEU"]
[Sun Apr 12 05:22:34.066104 2026] [:error] [pid 26599:tid 26624] [client 13.71.185.179:63978] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adq7mnG89LXoQbk_rwA2IAAAAVY"]
[Sun Apr 12 05:22:35.570189 2026] [:error] [pid 25328:tid 25380] [client 13.71.185.179:63884] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adq7m8xUaQZxT-e0YsDWmQAAAEw"]
[Sun Apr 12 05:22:37.618354 2026] [:error] [pid 25437:tid 25459] [client 13.71.185.179:64570] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "adq7nXf97wYZje1ep_NOQQAAANQ"]
[Sun Apr 12 05:22:39.206398 2026] [:error] [pid 26600:tid 26639] [client 13.71.185.179:64575] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adq7n-1YwAZiXhQKLYpyGAAAAYo"]
[Sun Apr 12 05:22:39.980529 2026] [:error] [pid 25437:tid 25446] [client 13.71.185.179:63309] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adq7n3f97wYZje1ep_NOQgAAAMc"]
[Sun Apr 12 05:22:41.472629 2026] [:error] [pid 25437:tid 25456] [client 13.71.185.179:63299] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adq7oXf97wYZje1ep_NOQwAAANE"]
[Sun Apr 12 05:22:42.597676 2026] [:error] [pid 26599:tid 26625] [client 13.71.185.179:64530] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adq7onG89LXoQbk_rwA2JQAAAVc"]
[Sun Apr 12 05:22:44.190925 2026] [:error] [pid 26599:tid 26617] [client 13.71.185.179:64623] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adq7pHG89LXoQbk_rwA2KgAAAU8"]
[Sun Apr 12 05:22:46.133925 2026] [:error] [pid 60280:tid 60302] [client 13.71.185.179:63256] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adq7pnBlLnDOYuIykkjXgQAAAdQ"]
[Sun Apr 12 05:22:46.878992 2026] [:error] [pid 60280:tid 60290] [client 13.71.185.179:64531] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adq7pnBlLnDOYuIykkjXiAAAAcg"]
[Sun Apr 12 05:22:47.500470 2026] [:error] [pid 26600:tid 26635] [client 13.71.185.179:64523] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "adq7p-1YwAZiXhQKLYpyIAAAAYY"]
[Sun Apr 12 05:22:48.340385 2026] [:error] [pid 26567:tid 26587] [client 13.71.185.179:64549] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adq7qHhRpg6ptWFyFx34kgAAARI"]
[Sun Apr 12 05:22:50.148581 2026] [:error] [pid 25329:tid 25406] [client 13.71.185.179:63977] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adq7qmdcIYsS8Iyaj10r5wAAAJE"]
[Sun Apr 12 05:22:51.475080 2026] [:error] [pid 60280:tid 60306] [client 13.71.185.179:64573] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adq7q3BlLnDOYuIykkjXkwAAAdg"]
[Sun Apr 12 05:22:52.023762 2026] [:error] [pid 25328:tid 25387] [client 13.71.185.179:63269] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "adq7rMxUaQZxT-e0YsDWqQAAAE8"]
[Sun Apr 12 05:22:52.966136 2026] [:error] [pid 25437:tid 25458] [client 13.71.185.179:63989] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "adq7rHf97wYZje1ep_NOTAAAANM"]
[Sun Apr 12 05:22:54.602720 2026] [:error] [pid 25328:tid 25398] [client 13.71.185.179:63961] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "adq7rsxUaQZxT-e0YsDWtAAAAFQ"]
[Sun Apr 12 05:22:56.037463 2026] [:error] [pid 26599:tid 26619] [client 13.71.185.179:63904] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "adq7sHG89LXoQbk_rwA2UAAAAVE"]
[Sun Apr 12 05:22:56.944527 2026] [:error] [pid 26599:tid 26620] [client 13.71.185.179:63946] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "adq7sHG89LXoQbk_rwA2VQAAAVI"]
[Sun Apr 12 05:22:57.671770 2026] [:error] [pid 25328:tid 25389] [client 13.71.185.179:63963] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adq7scxUaQZxT-e0YsDWuQAAAFA"]
[Sun Apr 12 05:22:58.498108 2026] [:error] [pid 25328:tid 25383] [client 13.71.185.179:64571] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adq7ssxUaQZxT-e0YsDWwAAAAE0"]
[Sun Apr 12 05:23:03.615908 2026] [:error] [pid 60280:tid 60304] [client 13.71.185.179:63999] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adq7t3BlLnDOYuIykkjXqwAAAdY"]
[Sun Apr 12 05:23:04.695246 2026] [:error] [pid 60280:tid 60284] [client 13.71.185.179:64513] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "adq7uHBlLnDOYuIykkjXsAAAAcI"]
[Sun Apr 12 05:23:05.819107 2026] [:error] [pid 25328:tid 25369] [client 13.71.185.179:63305] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adq7ucxUaQZxT-e0YsDW2AAAAEU"]
[Sun Apr 12 05:23:07.843197 2026] [:error] [pid 60280:tid 60287] [client 13.71.185.179:64551] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adq7u3BlLnDOYuIykkjXuwAAAcU"]
[Sun Apr 12 05:23:09.471107 2026] [:error] [pid 26567:tid 26571] [client 13.71.185.179:63953] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adq7vXhRpg6ptWFyFx34rAAAAQI"]
[Sun Apr 12 05:23:10.618305 2026] [:error] [pid 26567:tid 26591] [client 13.71.185.179:63250] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "adq7vnhRpg6ptWFyFx34tQAAARY"]
[Sun Apr 12 05:23:12.309829 2026] [:error] [pid 60280:tid 60291] [client 13.71.185.179:64601] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "adq7wHBlLnDOYuIykkjXxAAAAck"]
[Sun Apr 12 05:23:14.553546 2026] [:error] [pid 26599:tid 26612] [client 13.71.185.179:63249] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "adq7wnG89LXoQbk_rwA2aAAAAUo"]
[Sun Apr 12 05:23:16.708882 2026] [:error] [pid 26567:tid 26572] [client 13.71.185.179:63949] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Apr 12 05:23:17.786366 2026] [:error] [pid 26567:tid 26576] [client 13.71.185.179:63949] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Apr 12 05:23:17.996559 2026] [:error] [pid 26567:tid 26574] [client 13.71.185.179:63949] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Apr 12 05:23:20.097981 2026] [:error] [pid 26567:tid 26579] [client 13.71.185.179:63949] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Sun Apr 12 05:23:20.346143 2026] [:error] [pid 26567:tid 26589] [client 13.71.185.179:63949] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Sun Apr 12 05:23:22.402181 2026] [:error] [pid 26567:tid 26589] [client 13.71.185.179:63949] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "adq7ynhRpg6ptWFyFx347gAAARQ"]
[Sun Apr 12 05:23:23.417102 2026] [:error] [pid 26599:tid 26613] [client 13.71.185.179:63960] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "adq7y3G89LXoQbk_rwA2dgAAAUs"]
[Sun Apr 12 05:23:23.961712 2026] [:error] [pid 26599:tid 26624] [client 13.71.185.179:64582] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "adq7y3G89LXoQbk_rwA2egAAAVY"]
[Sun Apr 12 05:23:24.826336 2026] [:error] [pid 25328:tid 25396] [client 13.71.185.179:64588] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "adq7zMxUaQZxT-e0YsDW8QAAAFM"]
[Sun Apr 12 05:23:25.623938 2026] [:error] [pid 60280:tid 60303] [client 13.71.185.179:64552] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq7zXBlLnDOYuIykkjX1wAAAdU"]
[Sun Apr 12 05:23:26.893851 2026] [:error] [pid 26567:tid 26574] [client 13.71.185.179:64555] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq7znhRpg6ptWFyFx349QAAAQU"]
[Sun Apr 12 05:23:28.108302 2026] [:error] [pid 26600:tid 26633] [client 13.71.185.179:64606] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq70O1YwAZiXhQKLYpyVgAAAYQ"]
[Sun Apr 12 05:23:29.054635 2026] [:error] [pid 26567:tid 26580] [client 13.71.185.179:64554] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adq70XhRpg6ptWFyFx35AgAAAQs"]
[Sun Apr 12 05:23:29.868062 2026] [:error] [pid 26567:tid 26592] [client 13.71.185.179:64534] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "adq70XhRpg6ptWFyFx35BgAAARc"]
[Sun Apr 12 05:23:30.694148 2026] [:error] [pid 25327:tid 25357] [client 13.71.185.179:64618] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "adq70i6h2tZEVJo9JFI-_wAAABU"]
[Sun Apr 12 05:23:31.344184 2026] [:error] [pid 60280:tid 60300] [client 13.71.185.179:64619] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "adq703BlLnDOYuIykkjX4gAAAdI"]
[Sun Apr 12 05:23:32.077797 2026] [:error] [pid 26600:tid 26630] [client 13.71.185.179:63982] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "adq71O1YwAZiXhQKLYpyXwAAAYE"]
[Sun Apr 12 05:23:32.650607 2026] [:error] [pid 25327:tid 25341] [client 13.71.185.179:63881] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adq71C6h2tZEVJo9JFI_AQAAAAU"]
[Sun Apr 12 05:23:33.753964 2026] [:error] [pid 60280:tid 60287] [client 13.71.185.179:64616] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adq71XBlLnDOYuIykkjX7AAAAcU"]
[Sun Apr 12 05:23:34.355782 2026] [:error] [pid 25437:tid 25446] [client 13.71.185.179:63326] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adq71nf97wYZje1ep_NOcAAAAMc"]
[Sun Apr 12 05:23:35.204758 2026] [:error] [pid 60280:tid 60288] [client 13.71.185.179:64539] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "adq713BlLnDOYuIykkjX7gAAAcY"]
[Sun Apr 12 05:23:36.466866 2026] [:error] [pid 25437:tid 25450] [client 13.71.185.179:64595] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq72Hf97wYZje1ep_NOdQAAAMs"]
[Sun Apr 12 05:23:37.686864 2026] [:error] [pid 26600:tid 26645] [client 13.71.185.179:64535] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq72e1YwAZiXhQKLYpycwAAAZA"]
[Sun Apr 12 05:23:38.455122 2026] [:error] [pid 26599:tid 26618] [client 13.71.185.179:63920] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq72nG89LXoQbk_rwA2jwAAAVA"]
[Sun Apr 12 05:23:39.686096 2026] [:error] [pid 25328:tid 25377] [client 13.71.185.179:64614] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq728xUaQZxT-e0YsDW9wAAAEo"]
[Sun Apr 12 05:23:40.587153 2026] [:error] [pid 26599:tid 26615] [client 13.71.185.179:63906] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "adq73HG89LXoQbk_rwA2kwAAAU0"]
[Sun Apr 12 05:23:42.318632 2026] [:error] [pid 25328:tid 25380] [client 13.71.185.179:63878] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "adq73sxUaQZxT-e0YsDW_QAAAEw"]
[Sun Apr 12 05:23:43.695208 2026] [:error] [pid 26599:tid 26609] [client 13.71.185.179:63911] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "adq733G89LXoQbk_rwA2lwAAAUc"]
[Sun Apr 12 05:23:45.778748 2026] [:error] [pid 25329:tid 25393] [client 13.71.185.179:63888] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "adq74WdcIYsS8Iyaj10sEgAAAIo"]
[Sun Apr 12 05:23:46.930756 2026] [:error] [pid 25329:tid 25388] [client 13.71.185.179:64538] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adq74mdcIYsS8Iyaj10sFAAAAIc"]
[Sun Apr 12 05:23:47.918651 2026] [:error] [pid 25328:tid 25405] [client 13.71.185.179:63877] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adq748xUaQZxT-e0YsDXEAAAAFc"]
[Sun Apr 12 05:23:51.062342 2026] [:error] [pid 26599:tid 26620] [client 13.71.185.179:64632] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adq753G89LXoQbk_rwA2nQAAAVI"]
[Sun Apr 12 05:23:52.142539 2026] [:error] [pid 25328:tid 25387] [client 13.71.185.179:64579] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "adq76MxUaQZxT-e0YsDXFwAAAE8"]
[Sun Apr 12 05:23:54.559309 2026] [:error] [pid 26599:tid 26614] [client 13.71.185.179:63976] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adq76nG89LXoQbk_rwA2oAAAAUw"]
[Sun Apr 12 05:23:55.971604 2026] [:error] [pid 25328:tid 25364] [client 13.71.185.179:63334] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adq768xUaQZxT-e0YsDXGQAAAEA"]
[Sun Apr 12 05:23:59.723147 2026] [:error] [pid 60280:tid 60304] [client 13.71.185.179:63966] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adq773BlLnDOYuIykkjYDgAAAdY"]
[Sun Apr 12 05:24:05.616513 2026] [:error] [pid 26600:tid 26629] [client 13.71.185.179:63327] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adq79e1YwAZiXhQKLYpyhAAAAYA"]
[Sun Apr 12 05:24:08.478093 2026] [:error] [pid 25437:tid 25445] [client 13.71.185.179:63900] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "adq7-Hf97wYZje1ep_NOlAAAAMY"]
[Sun Apr 12 05:24:09.422717 2026] [:error] [pid 26567:tid 26593] [client 13.71.185.179:64607] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "adq7-XhRpg6ptWFyFx35FgAAARg"]
[Sun Apr 12 05:24:10.059836 2026] [:error] [pid 26567:tid 26579] [client 13.71.185.179:64629] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "adq7-nhRpg6ptWFyFx35FwAAAQo"]
[Sun Apr 12 05:24:11.491769 2026] [:error] [pid 25328:tid 25372] [client 13.71.185.179:64563] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "adq7-8xUaQZxT-e0YsDXLwAAAEc"]
[Sun Apr 12 05:24:12.054837 2026] [:error] [pid 26567:tid 26580] [client 13.71.185.179:63997] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "adq7_HhRpg6ptWFyFx35HAAAAQs"]
[Sun Apr 12 05:24:12.806686 2026] [:error] [pid 60280:tid 60286] [client 13.71.185.179:63916] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "adq7_HBlLnDOYuIykkjYIQAAAcQ"]
[Sun Apr 12 05:24:13.578806 2026] [:error] [pid 60280:tid 60283] [client 13.71.185.179:63910] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "adq7_XBlLnDOYuIykkjYJAAAAcE"]
[Sun Apr 12 05:24:14.030496 2026] [:error] [pid 60280:tid 60306] [client 13.71.185.179:64566] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "adq7_nBlLnDOYuIykkjYJQAAAdg"]
[Sun Apr 12 05:24:14.537520 2026] [:error] [pid 25328:tid 25370] [client 13.71.185.179:64633] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adq7_sxUaQZxT-e0YsDXNAAAAEY"]
[Sun Apr 12 05:24:15.005178 2026] [:error] [pid 26600:tid 26630] [client 13.71.185.179:63301] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "adq7_-1YwAZiXhQKLYpymAAAAYE"]
[Sun Apr 12 05:24:15.631639 2026] [:error] [pid 25329:tid 25376] [client 13.71.185.179:63875] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "adq7_2dcIYsS8Iyaj10sKwAAAIE"]
[Sun Apr 12 05:24:16.365147 2026] [:error] [pid 25329:tid 25382] [client 13.71.185.179:63964] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "adq8AGdcIYsS8Iyaj10sLAAAAIQ"]
[Sun Apr 12 05:24:17.368279 2026] [:error] [pid 25329:tid 25411] [client 13.71.185.179:63956] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/index.php"] [unique_id "adq8AWdcIYsS8Iyaj10sMQAAAJQ"]
[Sun Apr 12 05:24:18.940926 2026] [:error] [pid 26567:tid 26574] [client 13.71.185.179:63353] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "adq8AnhRpg6ptWFyFx35MAAAAQU"]
[Sun Apr 12 05:24:19.933301 2026] [:error] [pid 25328:tid 25401] [client 13.71.185.179:63302] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adq8A8xUaQZxT-e0YsDXNwAAAFU"]
[Sun Apr 12 05:24:21.868533 2026] [:error] [pid 26599:tid 26608] [client 13.71.185.179:63882] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adq8BXG89LXoQbk_rwA2wAAAAUY"]
[Sun Apr 12 05:24:23.557210 2026] [:error] [pid 26567:tid 26589] [client 13.71.185.179:64626] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "adq8B3hRpg6ptWFyFx35PgAAARQ"]
[Sun Apr 12 05:24:24.068083 2026] [:error] [pid 26599:tid 26626] [client 13.71.185.179:63317] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Sun Apr 12 05:24:24.880548 2026] [:error] [pid 26599:tid 26610] [client 13.71.185.179:63317] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Apr 12 05:24:25.444934 2026] [:error] [pid 26599:tid 26621] [client 13.71.185.179:63317] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Sun Apr 12 05:24:25.652807 2026] [:error] [pid 26599:tid 26602] [client 13.71.185.179:63317] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adq8CXG89LXoQbk_rwA22gAAAUA"]
[Sun Apr 12 05:24:26.937303 2026] [:error] [pid 25328:tid 25372] [client 13.71.185.179:63922] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adq8CsxUaQZxT-e0YsDXQAAAAEc"]
[Sun Apr 12 05:24:27.966513 2026] [:error] [pid 25328:tid 25383] [client 13.71.185.179:63315] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adq8C8xUaQZxT-e0YsDXQwAAAE0"]
[Sun Apr 12 05:24:28.678656 2026] [:error] [pid 25328:tid 25373] [client 13.71.185.179:64611] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adq8DMxUaQZxT-e0YsDXRwAAAEg"]
[Sun Apr 12 05:24:31.049323 2026] [:error] [pid 26567:tid 26591] [client 13.71.185.179:63270] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adq8D3hRpg6ptWFyFx35RwAAARY"]
[Sun Apr 12 05:24:32.220844 2026] [:error] [pid 25437:tid 25448] [client 13.71.185.179:62700] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adq8EHf97wYZje1ep_NOmgAAAMk"]
[Sun Apr 12 05:24:33.255761 2026] [:error] [pid 26599:tid 26616] [client 13.71.185.179:63339] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adq8EXG89LXoQbk_rwA29gAAAU4"]
[Sun Apr 12 05:24:33.748722 2026] [:error] [pid 26567:tid 26572] [client 13.71.185.179:64630] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adq8EXhRpg6ptWFyFx35TQAAAQM"]
[Sun Apr 12 05:24:34.506679 2026] [:error] [pid 26567:tid 26577] [client 13.71.185.179:63930] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adq8EnhRpg6ptWFyFx35UAAAAQg"]
[Sun Apr 12 05:24:35.124202 2026] [:error] [pid 26599:tid 26608] [client 13.71.185.179:62688] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adq8E3G89LXoQbk_rwA3AwAAAUY"]
[Sun Apr 12 05:24:35.602650 2026] [:error] [pid 25327:tid 25339] [client 13.71.185.179:63333] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adq8Ey6h2tZEVJo9JFI_JgAAAAM"]
[Sun Apr 12 05:24:36.101857 2026] [:error] [pid 25327:tid 25346] [client 13.71.185.179:63313] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adq8FC6h2tZEVJo9JFI_JwAAAAo"]
[Sun Apr 12 05:24:37.212191 2026] [:error] [pid 60280:tid 60302] [client 13.71.185.179:63358] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adq8FXBlLnDOYuIykkjYTQAAAdQ"]
[Sun Apr 12 05:24:37.646473 2026] [:error] [pid 25328:tid 25389] [client 13.71.185.179:64574] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adq8FcxUaQZxT-e0YsDXdQAAAFA"]
[Sun Apr 12 05:24:38.333404 2026] [:error] [pid 25437:tid 25456] [client 13.71.185.179:63885] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adq8Fnf97wYZje1ep_NOsAAAANE"]
[Sun Apr 12 05:24:38.997431 2026] [:error] [pid 26599:tid 26624] [client 13.71.185.179:63333] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "adq8FnG89LXoQbk_rwA3LAAAAVY"]
[Sun Apr 12 05:24:40.026137 2026] [:error] [pid 60280:tid 60304] [client 13.71.185.179:63899] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adq8GHBlLnDOYuIykkjYkAAAAdY"]
[Sun Apr 12 05:24:40.607861 2026] [:error] [pid 25328:tid 25396] [client 13.71.185.179:63917] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adq8GMxUaQZxT-e0YsDXrAAAAFM"]
[Sun Apr 12 05:24:41.123130 2026] [:error] [pid 26600:tid 26636] [client 13.71.185.179:63239] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adq8Ge1YwAZiXhQKLYpy8AAAAYc"]
[Sun Apr 12 05:24:41.704341 2026] [:error] [pid 60280:tid 60288] [client 13.71.185.179:63897] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adq8GXBlLnDOYuIykkjYnAAAAcY"]
[Sun Apr 12 05:24:42.514044 2026] [:error] [pid 60280:tid 60306] [client 13.71.185.179:64541] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "adq8GnBlLnDOYuIykkjYoAAAAdg"]
[Sun Apr 12 05:24:43.579221 2026] [:error] [pid 26599:tid 26621] [client 13.71.185.179:63251] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "adq8G3G89LXoQbk_rwA3PAAAAVM"]
[Sun Apr 12 05:24:44.726985 2026] [:error] [pid 26600:tid 26633] [client 13.71.185.179:63928] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "adq8HO1YwAZiXhQKLYpy9wAAAYQ"]
[Sun Apr 12 05:24:45.334966 2026] [:error] [pid 25328:tid 25375] [client 13.71.185.179:63919] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "adq8HcxUaQZxT-e0YsDXsQAAAEk"]
[Sun Apr 12 05:24:45.954383 2026] [:error] [pid 26600:tid 26642] [client 13.71.185.179:63971] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq8He1YwAZiXhQKLYpy_AAAAY0"]
[Sun Apr 12 05:24:46.454042 2026] [:error] [pid 26600:tid 26634] [client 13.71.185.179:63998] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq8Hu1YwAZiXhQKLYpy_wAAAYU"]
[Sun Apr 12 05:24:46.893419 2026] [:error] [pid 26567:tid 26583] [client 13.71.185.179:63943] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq8HnhRpg6ptWFyFx35kwAAAQ4"]
[Sun Apr 12 05:24:47.707142 2026] [:error] [pid 25328:tid 25391] [client 13.71.185.179:63928] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adq8H8xUaQZxT-e0YsDXuAAAAFE"]
[Sun Apr 12 05:24:48.386057 2026] [:error] [pid 25328:tid 25373] [client 13.71.185.179:63292] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adq8IMxUaQZxT-e0YsDXuwAAAEg"]
[Sun Apr 12 05:24:48.980371 2026] [:error] [pid 25328:tid 25401] [client 13.71.185.179:63985] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adq8IMxUaQZxT-e0YsDXvAAAAFU"]
[Sun Apr 12 05:24:49.437480 2026] [:error] [pid 60280:tid 60299] [client 13.71.185.179:63267] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adq8IXBlLnDOYuIykkjYtAAAAdE"]
[Sun Apr 12 05:24:49.971499 2026] [:error] [pid 25328:tid 25389] [client 13.71.185.179:64587] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adq8IcxUaQZxT-e0YsDXwAAAAFA"]
[Sun Apr 12 05:24:50.515587 2026] [:error] [pid 26600:tid 26640] [client 13.71.185.179:63298] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adq8Iu1YwAZiXhQKLYpzAAAAAYs"]
[Sun Apr 12 05:24:51.039865 2026] [:error] [pid 60280:tid 60291] [client 13.71.185.179:63957] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adq8I3BlLnDOYuIykkjYtgAAAck"]
[Sun Apr 12 05:24:51.613990 2026] [:error] [pid 25328:tid 25375] [client 13.71.185.179:63286] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adq8I8xUaQZxT-e0YsDXwQAAAEk"]
[Sun Apr 12 05:24:52.181791 2026] [:error] [pid 25328:tid 25391] [client 13.71.185.179:63308] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adq8JMxUaQZxT-e0YsDXxgAAAFE"]
[Sun Apr 12 05:24:53.091202 2026] [:error] [pid 60280:tid 60297] [client 13.71.185.179:63901] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "adq8JXBlLnDOYuIykkjYuAAAAc8"]
[Sun Apr 12 05:24:53.634525 2026] [:error] [pid 25437:tid 25461] [client 13.71.185.179:62675] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "adq8JXf97wYZje1ep_NOwwAAANY"]
[Sun Apr 12 05:24:54.233965 2026] [:error] [pid 25437:tid 25450] [client 13.71.185.179:64598] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "adq8Jnf97wYZje1ep_NOxQAAAMs"]
[Sun Apr 12 05:24:54.669598 2026] [:error] [pid 60280:tid 60283] [client 13.71.185.179:63909] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "adq8JnBlLnDOYuIykkjYvAAAAcE"]
[Sun Apr 12 05:24:55.148855 2026] [:error] [pid 60280:tid 60289] [client 13.71.185.179:64589] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "adq8J3BlLnDOYuIykkjYwQAAAcc"]
[Sun Apr 12 05:24:55.628879 2026] [:error] [pid 60280:tid 60293] [client 13.71.185.179:64585] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "adq8J3BlLnDOYuIykkjYwwAAAcs"]
[Sun Apr 12 05:24:56.250151 2026] [:error] [pid 60280:tid 60301] [client 13.71.185.179:63284] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "adq8KHBlLnDOYuIykkjYxQAAAdM"]
[Sun Apr 12 05:24:56.666654 2026] [:error] [pid 60280:tid 60294] [client 13.71.185.179:63931] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "adq8KHBlLnDOYuIykkjYxgAAAcw"]
[Sun Apr 12 05:24:57.148710 2026] [:error] [pid 60280:tid 60303] [client 13.71.185.179:63907] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "adq8KXBlLnDOYuIykkjYyAAAAdU"]
[Sun Apr 12 05:24:57.812672 2026] [:error] [pid 26567:tid 26569] [client 13.71.185.179:63905] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "adq8KXhRpg6ptWFyFx35lQAAAQA"]
[Sun Apr 12 05:24:58.307457 2026] [:error] [pid 60280:tid 60282] [client 13.71.185.179:64580] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "adq8KnBlLnDOYuIykkjYzwAAAcA"]
[Sun Apr 12 05:24:58.776583 2026] [:error] [pid 60280:tid 60305] [client 13.71.185.179:64522] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "adq8KnBlLnDOYuIykkjY0gAAAdc"]
[Sun Apr 12 05:24:59.503192 2026] [:error] [pid 60280:tid 60298] [client 13.71.185.179:64514] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adq8K3BlLnDOYuIykkjY2QAAAdA"]
[Sun Apr 12 05:24:59.994053 2026] [:error] [pid 60280:tid 60295] [client 13.71.185.179:62604] [client 13.71.185.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "adq8K3BlLnDOYuIykkjY2gAAAc0"]
[Sun Apr 12 05:25:00.740005 2026] [:error] [pid 25437:tid 25439] [client 13.71.185.179:64599] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "adq8LHf97wYZje1ep_NOxwAAAMA"]
[Sun Apr 12 05:25:01.238749 2026] [:error] [pid 26567:tid 26578] [client 13.71.185.179:63274] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "adq8LXhRpg6ptWFyFx35mAAAAQk"]
[Sun Apr 12 05:25:02.046066 2026] [:error] [pid 26600:tid 26648] [client 13.71.185.179:63322] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "adq8Lu1YwAZiXhQKLYpzBAAAAZM"]
[Sun Apr 12 05:25:02.522063 2026] [:error] [pid 25328:tid 25373] [client 13.71.185.179:63934] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "adq8LsxUaQZxT-e0YsDX1QAAAEg"]
[Sun Apr 12 05:25:03.048931 2026] [:error] [pid 25437:tid 25451] [client 13.71.185.179:63337] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adq8L3f97wYZje1ep_NOygAAAMw"]
[Sun Apr 12 05:25:03.582258 2026] [:error] [pid 25437:tid 25445] [client 13.71.185.179:62668] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adq8L3f97wYZje1ep_NOywAAAMY"]
[Sun Apr 12 05:25:06.506986 2026] [:error] [pid 26567:tid 26593] [client 13.71.185.179:63254] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adq8MnhRpg6ptWFyFx35oAAAARg"]
[Sun Apr 12 05:25:11.943752 2026] [:error] [pid 60280:tid 60283] [client 13.71.185.179:63941] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "adq8N3BlLnDOYuIykkjY7AAAAcE"]
[Sun Apr 12 05:25:21.446510 2026] [:error] [pid 26600:tid 26640] [client 13.71.185.179:64635] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "adq8Qe1YwAZiXhQKLYpzHAAAAYs"]
[Sun Apr 12 05:25:28.126157 2026] [:error] [pid 26600:tid 26648] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Sun Apr 12 05:25:28.358113 2026] [:error] [pid 26600:tid 26637] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Sun Apr 12 05:25:28.594015 2026] [:error] [pid 26600:tid 26645] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sun Apr 12 05:25:28.824150 2026] [:error] [pid 26600:tid 26649] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Sun Apr 12 05:25:29.042128 2026] [:error] [pid 26600:tid 26651] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Sun Apr 12 05:25:29.286485 2026] [:error] [pid 26600:tid 26631] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sun Apr 12 05:25:29.495537 2026] [:error] [pid 26600:tid 26653] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Sun Apr 12 05:25:29.744071 2026] [:error] [pid 26600:tid 26648] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Sun Apr 12 05:25:29.961497 2026] [:error] [pid 26600:tid 26641] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Apr 12 05:25:30.194977 2026] [:error] [pid 26600:tid 26629] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sun Apr 12 05:25:30.441581 2026] [:error] [pid 26600:tid 26630] [client 13.71.185.179:62708] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Sun Apr 12 05:25:30.706592 2026] [:error] [pid 26600:tid 26637] [client 13.71.185.179:62708] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "adq8Su1YwAZiXhQKLYpzPgAAAYg"]
[Sun Apr 12 05:25:41.127125 2026] [:error] [pid 60280:tid 60299] [client 13.71.185.179:63876] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "adq8VXBlLnDOYuIykkjY9AAAAdE"]
[Sun Apr 12 05:26:14.493614 2026] [:error] [pid 25328:tid 25372] [client 13.71.185.179:63319] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "adq8dsxUaQZxT-e0YsDYLwAAAEc"]
[Sun Apr 12 05:26:15.888713 2026] [:error] [pid 25437:tid 25453] [client 13.71.185.179:63942] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "adq8d3f97wYZje1ep_NO4wAAAM4"]
[Sun Apr 12 05:26:17.371483 2026] [:error] [pid 26599:tid 26613] [client 13.71.185.179:64593] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "adq8eXG89LXoQbk_rwA3mQAAAUs"]
[Sun Apr 12 05:26:18.622781 2026] [:error] [pid 25329:tid 25404] [client 13.71.185.179:64542] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "adq8emdcIYsS8Iyaj10sbwAAAJA"]
[Sun Apr 12 05:26:19.187109 2026] [:error] [pid 26600:tid 26640] [client 13.71.185.179:64577] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "adq8e-1YwAZiXhQKLYpzgwAAAYs"]
[Sun Apr 12 05:26:20.573386 2026] [:error] [pid 26600:tid 26638] [client 13.71.185.179:63345] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "adq8fO1YwAZiXhQKLYpzhgAAAYk"]
[Sun Apr 12 05:26:21.614418 2026] [:error] [pid 26600:tid 26641] [client 13.71.185.179:64600] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "adq8fe1YwAZiXhQKLYpzkAAAAYw"]
[Sun Apr 12 05:26:22.126282 2026] [:error] [pid 26600:tid 26629] [client 13.71.185.179:64565] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bibil.php"] [unique_id "adq8fu1YwAZiXhQKLYpzkwAAAYA"]
[Sun Apr 12 05:26:22.774608 2026] [:error] [pid 26600:tid 26644] [client 13.71.185.179:64550] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "adq8fu1YwAZiXhQKLYpzlwAAAY8"]
[Sun Apr 12 05:26:23.466144 2026] [:error] [pid 26567:tid 26571] [client 13.71.185.179:63988] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "adq8f3hRpg6ptWFyFx354QAAAQI"]
[Sun Apr 12 05:26:24.380304 2026] [:error] [pid 60280:tid 60292] [client 13.71.185.179:64547] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "adq8gHBlLnDOYuIykkjZswAAAco"]
[Sun Apr 12 05:26:24.869586 2026] [:error] [pid 26600:tid 26639] [client 13.71.185.179:64556] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "adq8gO1YwAZiXhQKLYpznAAAAYo"]
[Sun Apr 12 05:26:25.526573 2026] [:error] [pid 25328:tid 25394] [client 13.71.185.179:63310] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "adq8gcxUaQZxT-e0YsDYPAAAAFI"]
[Sun Apr 12 05:26:26.454333 2026] [:error] [pid 60280:tid 60293] [client 13.71.185.179:64536] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "adq8gnBlLnDOYuIykkjZtwAAAcs"]
[Sun Apr 12 05:26:27.101749 2026] [:error] [pid 60280:tid 60290] [client 13.71.185.179:64572] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "adq8g3BlLnDOYuIykkjZuwAAAcg"]
[Sun Apr 12 05:26:28.530247 2026] [:error] [pid 60280:tid 60285] [client 13.71.185.179:64615] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files.php"] [unique_id "adq8hHBlLnDOYuIykkjZwAAAAcM"]
[Sun Apr 12 05:26:29.372410 2026] [:error] [pid 25437:tid 25439] [client 13.71.185.179:64578] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "adq8hXf97wYZje1ep_NO9wAAAMA"]
[Sun Apr 12 05:26:31.544564 2026] [:error] [pid 26567:tid 26589] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Sun Apr 12 05:26:31.754125 2026] [:error] [pid 26567:tid 26576] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 12 05:26:32.518736 2026] [:error] [pid 26567:tid 26580] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sun Apr 12 05:26:32.727160 2026] [:error] [pid 26567:tid 26578] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sun Apr 12 05:26:32.936801 2026] [:error] [pid 26567:tid 26569] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Apr 12 05:26:33.147824 2026] [:error] [pid 26567:tid 26592] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Sun Apr 12 05:26:33.357731 2026] [:error] [pid 26567:tid 26579] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Sun Apr 12 05:26:33.566688 2026] [:error] [pid 26567:tid 26584] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Sun Apr 12 05:26:33.827368 2026] [:error] [pid 26567:tid 26588] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sun Apr 12 05:26:34.457075 2026] [:error] [pid 26567:tid 26572] [client 13.71.185.179:62658] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Sun Apr 12 05:26:34.673063 2026] [:error] [pid 26567:tid 26589] [client 13.71.185.179:62658] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq8inhRpg6ptWFyFx36AAAAARQ"]
[Sun Apr 12 05:26:35.739040 2026] [:error] [pid 25328:tid 25403] [client 13.71.185.179:64518] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq8i8xUaQZxT-e0YsDYVQAAAFY"]
[Sun Apr 12 05:26:37.132562 2026] [:error] [pid 26567:tid 26580] [client 13.71.185.179:63354] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq8jXhRpg6ptWFyFx36AgAAAQs"]
[Sun Apr 12 05:26:38.575737 2026] [:error] [pid 26567:tid 26585] [client 13.71.185.179:63272] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "adq8jnhRpg6ptWFyFx36BgAAARA"]
[Sun Apr 12 05:26:39.821438 2026] [:error] [pid 25437:tid 25461] [client 13.71.185.179:64564] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "adq8j3f97wYZje1ep_NO_gAAANY"]
[Sun Apr 12 05:26:41.552135 2026] [:error] [pid 60280:tid 60294] [client 13.71.185.179:64559] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "adq8kXBlLnDOYuIykkjZzQAAAcw"]
[Sun Apr 12 05:26:44.728416 2026] [:error] [pid 60280:tid 60285] [client 13.71.185.179:64576] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "adq8lHBlLnDOYuIykkjZ2QAAAcM"]
[Sun Apr 12 05:26:47.109830 2026] [:error] [pid 26600:tid 26645] [client 13.71.185.179:64591] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "adq8l-1YwAZiXhQKLYpzqgAAAZA"]
[Sun Apr 12 05:26:52.067568 2026] [:error] [pid 26567:tid 26592] [client 13.71.185.179:64521] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "adq8nHhRpg6ptWFyFx36FQAAARc"]
[Sun Apr 12 05:26:53.843400 2026] [:error] [pid 26600:tid 26646] [client 13.71.185.179:64528] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "adq8ne1YwAZiXhQKLYpzzQAAAZE"]
[Sun Apr 12 05:26:54.841977 2026] [:error] [pid 26600:tid 26647] [client 13.71.185.179:64581] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "adq8nu1YwAZiXhQKLYpz0QAAAZI"]
[Sun Apr 12 05:26:56.193764 2026] [:error] [pid 25437:tid 25455] [client 13.71.185.179:63873] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "adq8oHf97wYZje1ep_NPCwAAANA"]
[Sun Apr 12 05:26:57.830657 2026] [:error] [pid 60280:tid 60297] [client 13.71.185.179:63304] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "adq8oXBlLnDOYuIykkjZ5wAAAc8"]
[Sun Apr 12 05:27:00.564008 2026] [:error] [pid 60280:tid 60288] [client 13.71.185.179:63968] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "adq8pHBlLnDOYuIykkjZ8wAAAcY"]
[Sun Apr 12 05:27:01.452682 2026] [:error] [pid 26599:tid 26622] [client 13.71.185.179:63974] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "adq8pXG89LXoQbk_rwA3twAAAVQ"]
[Sun Apr 12 05:27:02.704249 2026] [:error] [pid 60280:tid 60299] [client 13.71.185.179:63973] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "adq8pnBlLnDOYuIykkjaBQAAAdE"]
[Sun Apr 12 05:27:03.457662 2026] [:error] [pid 25329:tid 25392] [client 13.71.185.179:64527] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "adq8p2dcIYsS8Iyaj10segAAAIk"]
[Sun Apr 12 05:27:04.318476 2026] [:error] [pid 25328:tid 25377] [client 13.71.185.179:64569] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "adq8qMxUaQZxT-e0YsDYXwAAAEo"]
[Sun Apr 12 05:27:04.830555 2026] [:error] [pid 60280:tid 60304] [client 13.71.185.179:63259] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "adq8qHBlLnDOYuIykkjaFwAAAdY"]
[Sun Apr 12 05:27:05.932401 2026] [:error] [pid 26600:tid 26652] [client 13.71.185.179:64560] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pop.php"] [unique_id "adq8qe1YwAZiXhQKLYpz2QAAAZc"]
[Sun Apr 12 05:27:07.232154 2026] [:error] [pid 25437:tid 25463] [client 13.71.185.179:63323] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "adq8q3f97wYZje1ep_NPDQAAANg"]
[Sun Apr 12 05:27:08.367554 2026] [:error] [pid 25327:tid 25359] [client 13.71.185.179:63246] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "adq8rC6h2tZEVJo9JFI_ZgAAABc"]
[Sun Apr 12 05:27:09.213149 2026] [:error] [pid 25328:tid 25364] [client 13.71.185.179:63951] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "adq8rcxUaQZxT-e0YsDYawAAAEA"]
[Sun Apr 12 05:27:10.070102 2026] [:error] [pid 26600:tid 26641] [client 13.71.185.179:64526] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/az.php"] [unique_id "adq8ru1YwAZiXhQKLYpz3QAAAYw"]
[Sun Apr 12 05:27:10.987184 2026] [:error] [pid 25328:tid 25375] [client 13.71.185.179:64592] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "adq8rsxUaQZxT-e0YsDYcQAAAEk"]
[Sun Apr 12 05:27:11.756144 2026] [:error] [pid 25328:tid 25394] [client 13.71.185.179:64570] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "adq8r8xUaQZxT-e0YsDYeAAAAFI"]
[Sun Apr 12 05:27:13.334807 2026] [:error] [pid 25327:tid 25346] [client 13.71.185.179:63316] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "adq8sS6h2tZEVJo9JFI_aQAAAAo"]
[Sun Apr 12 05:27:14.370806 2026] [:error] [pid 25328:tid 25408] [client 13.71.185.179:63961] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xaz.php"] [unique_id "adq8ssxUaQZxT-e0YsDYhwAAAFg"]
[Sun Apr 12 05:27:15.319768 2026] [:error] [pid 25328:tid 25364] [client 13.71.185.179:63895] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "adq8s8xUaQZxT-e0YsDYjQAAAEA"]
[Sun Apr 12 05:27:16.238360 2026] [:error] [pid 26567:tid 26584] [client 13.71.185.179:64604] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "adq8tHhRpg6ptWFyFx36LAAAAQ8"]
[Sun Apr 12 05:27:17.149165 2026] [:error] [pid 26567:tid 26587] [client 13.71.185.179:63320] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "adq8tXhRpg6ptWFyFx36MAAAARI"]
[Sun Apr 12 05:27:17.790742 2026] [:error] [pid 26567:tid 26571] [client 13.71.185.179:64545] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up4.php"] [unique_id "adq8tXhRpg6ptWFyFx36MgAAAQI"]
[Sun Apr 12 05:27:18.440606 2026] [:error] [pid 25437:tid 25448] [client 13.71.185.179:63959] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adq8tnf97wYZje1ep_NPFwAAAMk"]
[Sun Apr 12 05:27:21.261686 2026] [:error] [pid 26599:tid 26611] [client 13.71.185.179:64548] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adq8uXG89LXoQbk_rwA3xAAAAUk"]
[Sun Apr 12 05:27:23.629748 2026] [:error] [pid 25328:tid 25385] [client 13.71.185.179:63977] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adq8u8xUaQZxT-e0YsDYlQAAAE4"]
[Sun Apr 12 05:27:27.117959 2026] [:error] [pid 60280:tid 60305] [client 13.71.185.179:63967] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adq8v3BlLnDOYuIykkjaQwAAAdc"]
[Sun Apr 12 05:27:32.825269 2026] [:error] [pid 60280:tid 60282] [client 13.71.185.179:61902] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "adq8xHBlLnDOYuIykkjaaAAAAcA"]
[Sun Apr 12 05:27:37.363417 2026] [:error] [pid 26600:tid 26652] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Apr 12 05:27:37.597977 2026] [:error] [pid 26600:tid 26637] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Sun Apr 12 05:27:37.812436 2026] [:error] [pid 26600:tid 26642] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Sun Apr 12 05:27:38.044974 2026] [:error] [pid 26600:tid 26643] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Sun Apr 12 05:27:39.643406 2026] [:error] [pid 26600:tid 26643] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Sun Apr 12 05:27:39.898231 2026] [:error] [pid 26600:tid 26629] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sun Apr 12 05:27:40.347488 2026] [:error] [pid 26600:tid 26635] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun Apr 12 05:27:40.563508 2026] [:error] [pid 26600:tid 26651] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sun Apr 12 05:27:40.863453 2026] [:error] [pid 26600:tid 26652] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sun Apr 12 05:27:41.748511 2026] [:error] [pid 26600:tid 26633] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 12 05:27:41.956973 2026] [:error] [pid 26600:tid 26643] [client 13.71.185.179:63874] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sun Apr 12 05:27:42.278136 2026] [:error] [pid 26600:tid 26646] [client 13.71.185.179:63874] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "adq8zu1YwAZiXhQKLYp0FwAAAZE"]
[Sun Apr 12 05:27:43.176822 2026] [:error] [pid 26567:tid 26581] [client 13.71.185.179:63958] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "adq8z3hRpg6ptWFyFx36TQAAAQw"]
[Sun Apr 12 05:27:43.941592 2026] [:error] [pid 60280:tid 60298] [client 13.71.185.179:64590] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "adq8z3BlLnDOYuIykkjahQAAAdA"]
[Sun Apr 12 05:27:45.000281 2026] [:error] [pid 60280:tid 60291] [client 13.71.185.179:64515] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "adq80HBlLnDOYuIykkjajAAAAck"]
[Sun Apr 12 05:27:45.880035 2026] [:error] [pid 25327:tid 25347] [client 13.71.185.179:63312] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites.php"] [unique_id "adq80S6h2tZEVJo9JFI_egAAAAs"]
[Sun Apr 12 05:27:47.111605 2026] [:error] [pid 25327:tid 25345] [client 13.71.185.179:64631] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites.php"] [unique_id "adq80y6h2tZEVJo9JFI_gAAAAAk"]
[Sun Apr 12 05:27:48.385924 2026] [:error] [pid 25437:tid 25457] [client 13.71.185.179:63880] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites.php"] [unique_id "adq81Hf97wYZje1ep_NPMQAAANI"]
[Sun Apr 12 05:27:49.626701 2026] [:error] [pid 25327:tid 25359] [client 13.71.185.179:64621] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sites.php"] [unique_id "adq81S6h2tZEVJo9JFI_hAAAABc"]
[Sun Apr 12 05:27:51.056581 2026] [:error] [pid 26600:tid 26633] [client 13.71.185.179:63969] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq81-1YwAZiXhQKLYp0PgAAAYQ"]
[Sun Apr 12 05:27:51.942505 2026] [:error] [pid 26600:tid 26644] [client 13.71.185.179:63898] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq81-1YwAZiXhQKLYp0SAAAAY8"]
[Sun Apr 12 05:27:52.871943 2026] [:error] [pid 25327:tid 25346] [client 13.71.185.179:63300] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq82C6h2tZEVJo9JFI_hgAAAAo"]
[Sun Apr 12 05:27:53.610959 2026] [:error] [pid 25327:tid 25343] [client 13.71.185.179:63890] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "adq82S6h2tZEVJo9JFI_iAAAAAc"]
[Sun Apr 12 05:27:54.379421 2026] [:error] [pid 25328:tid 25391] [client 13.71.185.179:63950] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adq82sxUaQZxT-e0YsDYvwAAAFE"]
[Sun Apr 12 05:27:55.452897 2026] [:error] [pid 26567:tid 26569] [client 13.71.185.179:64555] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adq823hRpg6ptWFyFx36WwAAAQA"]
[Sun Apr 12 05:27:57.126792 2026] [:error] [pid 26600:tid 26646] [client 13.71.185.179:63972] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adq83e1YwAZiXhQKLYp0bAAAAZE"]
[Sun Apr 12 05:27:57.999870 2026] [:error] [pid 60280:tid 60297] [client 13.71.185.179:64544] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "adq83XBlLnDOYuIykkjarQAAAc8"]
[Sun Apr 12 05:27:59.016808 2026] [:error] [pid 60280:tid 60298] [client 13.71.185.179:64535] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "adq833BlLnDOYuIykkjasQAAAdA"]
[Sun Apr 12 05:28:00.032710 2026] [:error] [pid 26600:tid 26642] [client 13.71.185.179:64624] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "adq84O1YwAZiXhQKLYp0eQAAAY0"]
[Sun Apr 12 05:28:00.920835 2026] [:error] [pid 25328:tid 25377] [client 13.71.185.179:63335] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "adq84MxUaQZxT-e0YsDYwwAAAEo"]
[Sun Apr 12 05:28:01.667494 2026] [:error] [pid 25328:tid 25368] [client 13.71.185.179:63883] [client 13.71.185.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "adq84cxUaQZxT-e0YsDYyAAAAEQ"]
[Sun Apr 12 05:38:19.351887 2026] [:error] [pid 60280:tid 60300] [client 213.177.179.116:64685] [client 213.177.179.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "adq_S3BlLnDOYuIykkjhUgAAAdI"]
[Sun Apr 12 05:38:23.128810 2026] [:error] [pid 25328:tid 25398] [client 213.177.179.116:62443] [client 213.177.179.116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "adq_T8xUaQZxT-e0YsDdxgAAAFQ"]
[Sun Apr 12 05:49:07.560930 2026] [:error] [pid 25328:tid 25401] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Sun Apr 12 05:49:07.820803 2026] [:error] [pid 25328:tid 25377] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun Apr 12 05:49:08.079764 2026] [:error] [pid 25328:tid 25408] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sun Apr 12 05:49:08.341371 2026] [:error] [pid 25328:tid 25375] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sun Apr 12 05:49:08.608450 2026] [:error] [pid 25328:tid 25368] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Sun Apr 12 05:49:08.875475 2026] [:error] [pid 25328:tid 25364] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 12 05:49:09.140529 2026] [:error] [pid 25328:tid 25396] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Sun Apr 12 05:49:09.412263 2026] [:error] [pid 25328:tid 25398] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sun Apr 12 05:49:09.671646 2026] [:error] [pid 25328:tid 25403] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 12 05:49:09.932598 2026] [:error] [pid 25328:tid 25369] [client 20.100.203.99:61848] File does not exist: /usr/local/apache/htdocs/suspended-page/ga.php
[Sun Apr 12 05:49:10.189418 2026] [:error] [pid 25328:tid 25401] [client 20.100.203.99:61848] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "adrB1sxUaQZxT-e0YsDjBgAAAFU"]
[Sun Apr 12 05:49:11.126281 2026] [:error] [pid 60280:tid 60293] [client 20.100.203.99:48100] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "adrB13BlLnDOYuIykkjkpwAAAcs"]
[Sun Apr 12 05:49:12.433302 2026] [:error] [pid 26567:tid 26571] [client 20.100.203.99:46109] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "adrB2HhRpg6ptWFyFx0AoQAAAQI"]
[Sun Apr 12 05:49:14.298936 2026] [:error] [pid 25328:tid 25387] [client 20.100.203.99:46094] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "adrB2sxUaQZxT-e0YsDjGQAAAE8"]
[Sun Apr 12 05:49:16.204681 2026] [:error] [pid 26599:tid 26617] [client 20.100.203.99:46084] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3x.php"] [unique_id "adrB3HG89LXoQbk_rwBAQQAAAU8"]
[Sun Apr 12 05:49:17.233748 2026] [:error] [pid 26599:tid 26605] [client 20.100.203.99:37317] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3x.php"] [unique_id "adrB3XG89LXoQbk_rwBARQAAAUM"]
[Sun Apr 12 05:49:18.699718 2026] [:error] [pid 26567:tid 26586] [client 20.100.203.99:44624] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3x.php"] [unique_id "adrB3nhRpg6ptWFyFx0AtAAAARE"]
[Sun Apr 12 05:49:19.779463 2026] [:error] [pid 26600:tid 26635] [client 20.100.203.99:41160] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3x.php"] [unique_id "adrB3-1YwAZiXhQKLYp7ZQAAAYY"]
[Sun Apr 12 05:49:21.193722 2026] [:error] [pid 25328:tid 25373] [client 20.100.203.99:48068] [client 20.100.203.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adrB4cxUaQZxT-e0YsDjMAAAAEg"]
[Sun Apr 12 05:49:22.313694 2026] [:error] [pid 25437:tid 25452] [client 20.100.203.99:61717] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "adrB4nf97wYZje1ep_NUFQAAAM0"]
[Sun Apr 12 05:49:23.832122 2026] [:error] [pid 26600:tid 26650] [client 20.100.203.99:59734] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "adrB4-1YwAZiXhQKLYp7bAAAAZU"]
[Sun Apr 12 05:49:24.985826 2026] [:error] [pid 60280:tid 60291] [client 20.100.203.99:8178] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "adrB5HBlLnDOYuIykkjkyAAAAck"]
[Sun Apr 12 05:49:25.752245 2026] [:error] [pid 26567:tid 26569] [client 20.100.203.99:41208] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "adrB5XhRpg6ptWFyFx0AwAAAAQA"]
[Sun Apr 12 05:49:26.601100 2026] [:error] [pid 25327:tid 25337] [client 20.100.203.99:8151] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "adrB5i6h2tZEVJo9JFJDEgAAAAE"]
[Sun Apr 12 05:49:27.858165 2026] [:error] [pid 25328:tid 25375] [client 20.100.203.99:44667] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "adrB58xUaQZxT-e0YsDjPgAAAEk"]
[Sun Apr 12 05:49:30.950077 2026] [:error] [pid 25329:tid 25409] [client 20.100.203.99:41211] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "adrB6mdcIYsS8Iyaj10wUwAAAJM"]
[Sun Apr 12 05:49:33.213717 2026] [:error] [pid 26599:tid 26614] [client 20.100.203.99:55956] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "adrB7XG89LXoQbk_rwBAlwAAAUw"]
[Sun Apr 12 05:49:35.667737 2026] [:error] [pid 25328:tid 25387] [client 20.100.203.99:44653] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "adrB78xUaQZxT-e0YsDjYAAAAE8"]
[Sun Apr 12 05:49:36.868923 2026] [:error] [pid 25329:tid 25384] [client 20.100.203.99:61850] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "adrB8GdcIYsS8Iyaj10wVwAAAIU"]
[Sun Apr 12 05:49:38.345992 2026] [:error] [pid 26599:tid 26607] [client 20.100.203.99:55938] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "adrB8nG89LXoQbk_rwBAtgAAAUU"]
[Sun Apr 12 05:49:39.299849 2026] [:error] [pid 25327:tid 25355] [client 20.100.203.99:44654] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "adrB8y6h2tZEVJo9JFJDGgAAABM"]
[Sun Apr 12 05:49:40.178428 2026] [:error] [pid 25328:tid 25396] [client 20.100.203.99:41192] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adrB9MxUaQZxT-e0YsDjcAAAAFM"]
[Sun Apr 12 05:49:41.412745 2026] [:error] [pid 25329:tid 25392] [client 20.100.203.99:46122] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adrB9WdcIYsS8Iyaj10wWgAAAIk"]
[Sun Apr 12 05:49:42.993130 2026] [:error] [pid 25437:tid 25461] [client 20.100.203.99:56333] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adrB9nf97wYZje1ep_NUSgAAANY"]
[Sun Apr 12 05:49:43.957061 2026] [:error] [pid 25328:tid 25398] [client 20.100.203.99:61806] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "adrB98xUaQZxT-e0YsDjfgAAAFQ"]
[Sun Apr 12 05:49:45.484015 2026] [:error] [pid 25329:tid 25381] [client 20.100.203.99:51716] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/97.php"] [unique_id "adrB-WdcIYsS8Iyaj10wXQAAAIM"]
[Sun Apr 12 05:49:46.776182 2026] [:error] [pid 25328:tid 25364] [client 20.100.203.99:44252] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/97.php"] [unique_id "adrB-sxUaQZxT-e0YsDjiAAAAEA"]
[Sun Apr 12 05:49:47.992913 2026] [:error] [pid 26600:tid 26636] [client 20.100.203.99:55886] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/97.php"] [unique_id "adrB--1YwAZiXhQKLYp7mAAAAYc"]
[Sun Apr 12 05:49:48.997356 2026] [:error] [pid 26600:tid 26644] [client 20.100.203.99:7763] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/97.php"] [unique_id "adrB_O1YwAZiXhQKLYp7mwAAAY8"]
[Sun Apr 12 05:49:49.861719 2026] [:error] [pid 25327:tid 25353] [client 20.100.203.99:38444] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrB_S6h2tZEVJo9JFJDHwAAABE"]
[Sun Apr 12 05:49:50.641481 2026] [:error] [pid 26600:tid 26639] [client 20.100.203.99:7798] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrB_u1YwAZiXhQKLYp7oAAAAYo"]
[Sun Apr 12 05:49:51.601144 2026] [:error] [pid 26599:tid 26605] [client 20.100.203.99:47404] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrB_3G89LXoQbk_rwBAyQAAAUM"]
[Sun Apr 12 05:49:52.383914 2026] [:error] [pid 26599:tid 26621] [client 20.100.203.99:42609] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "adrCAHG89LXoQbk_rwBA0AAAAVM"]
[Sun Apr 12 05:49:53.338403 2026] [:error] [pid 25328:tid 25377] [client 20.100.203.99:47407] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "adrCAcxUaQZxT-e0YsDjnAAAAEo"]
[Sun Apr 12 05:49:55.553986 2026] [:error] [pid 26599:tid 26616] [client 20.100.203.99:46624] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "adrCA3G89LXoQbk_rwBA3QAAAU4"]
[Sun Apr 12 05:49:57.852862 2026] [:error] [pid 25329:tid 25393] [client 20.100.203.99:43612] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "adrCBWdcIYsS8Iyaj10wYgAAAIo"]
[Sun Apr 12 05:49:59.162808 2026] [:error] [pid 26567:tid 26578] [client 20.100.203.99:56272] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "adrCB3hRpg6ptWFyFx0A5wAAAQk"]
[Sun Apr 12 05:50:00.355101 2026] [:error] [pid 26599:tid 26626] [client 20.100.203.99:44198] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "adrCCHG89LXoQbk_rwBA8wAAAVg"]
[Sun Apr 12 05:50:01.419067 2026] [:error] [pid 26599:tid 26620] [client 20.100.203.99:57835] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "adrCCXG89LXoQbk_rwBA-AAAAVI"]
[Sun Apr 12 05:50:02.601731 2026] [:error] [pid 26599:tid 26608] [client 20.100.203.99:43627] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "adrCCnG89LXoQbk_rwBA-QAAAUY"]
[Sun Apr 12 05:50:04.020828 2026] [:error] [pid 26599:tid 26619] [client 20.100.203.99:7601] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "adrCDHG89LXoQbk_rwBA-wAAAVE"]
[Sun Apr 12 05:50:05.336535 2026] [:error] [pid 60280:tid 60306] [client 20.100.203.99:7595] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "adrCDXBlLnDOYuIykkjk4wAAAdg"]
[Sun Apr 12 05:50:06.843249 2026] [:error] [pid 25327:tid 25357] [client 20.100.203.99:7234] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "adrCDi6h2tZEVJo9JFJDJwAAABU"]
[Sun Apr 12 05:50:08.116484 2026] [:error] [pid 25328:tid 25385] [client 20.100.203.99:7214] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "adrCEMxUaQZxT-e0YsDjugAAAE4"]
[Sun Apr 12 05:50:08.853686 2026] [:error] [pid 26599:tid 26605] [client 20.100.203.99:7282] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "adrCEHG89LXoQbk_rwBBHQAAAUM"]
[Sun Apr 12 05:50:10.044105 2026] [:error] [pid 26599:tid 26608] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun Apr 12 05:50:10.302878 2026] [:error] [pid 26599:tid 26616] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Sun Apr 12 05:50:10.561052 2026] [:error] [pid 26599:tid 26626] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Sun Apr 12 05:50:10.835775 2026] [:error] [pid 26599:tid 26618] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 12 05:50:11.101175 2026] [:error] [pid 26599:tid 26604] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/wswer1.php
[Sun Apr 12 05:50:11.359496 2026] [:error] [pid 26599:tid 26610] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sun Apr 12 05:50:11.625649 2026] [:error] [pid 26599:tid 26612] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Sun Apr 12 05:50:11.884986 2026] [:error] [pid 26599:tid 26623] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sun Apr 12 05:50:12.184072 2026] [:error] [pid 26599:tid 26622] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/new3.php
[Sun Apr 12 05:50:12.442073 2026] [:error] [pid 26599:tid 26618] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-turn.php
[Sun Apr 12 05:50:14.057998 2026] [:error] [pid 26599:tid 26618] [client 20.100.203.99:7279] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Sun Apr 12 05:50:14.313340 2026] [:error] [pid 26599:tid 26625] [client 20.100.203.99:7279] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/red.php"] [unique_id "adrCFnG89LXoQbk_rwBBPwAAAVc"]
[Sun Apr 12 05:50:15.608118 2026] [:error] [pid 26599:tid 26623] [client 20.100.203.99:56289] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/red.php"] [unique_id "adrCF3G89LXoQbk_rwBBQgAAAVU"]
[Sun Apr 12 05:50:17.287033 2026] [:error] [pid 25327:tid 25342] [client 20.100.203.99:41124] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/red.php"] [unique_id "adrCGS6h2tZEVJo9JFJDKQAAAAY"]
[Sun Apr 12 05:50:18.227735 2026] [:error] [pid 25437:tid 25445] [client 20.100.203.99:7435] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/red.php"] [unique_id "adrCGnf97wYZje1ep_NUXQAAAMY"]
[Sun Apr 12 05:50:20.041101 2026] [:error] [pid 25327:tid 25350] [client 20.100.203.99:45090] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "adrCHC6h2tZEVJo9JFJDKwAAAA4"]
[Sun Apr 12 05:50:21.523105 2026] [:error] [pid 25328:tid 25403] [client 20.100.203.99:7566] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "adrCHcxUaQZxT-e0YsDj0AAAAFY"]
[Sun Apr 12 05:50:23.612110 2026] [:error] [pid 25328:tid 25405] [client 20.100.203.99:7184] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "adrCH8xUaQZxT-e0YsDj1wAAAFc"]
[Sun Apr 12 05:50:24.969955 2026] [:error] [pid 25327:tid 25349] [client 20.100.203.99:7246] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "adrCIC6h2tZEVJo9JFJDMgAAAA0"]
[Sun Apr 12 05:50:26.452209 2026] [:error] [pid 26567:tid 26583] [client 20.100.203.99:8052] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrCInhRpg6ptWFyFx0A_QAAAQ4"]
[Sun Apr 12 05:50:27.297648 2026] [:error] [pid 25328:tid 25408] [client 20.100.203.99:59172] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrCI8xUaQZxT-e0YsDj2wAAAFg"]
[Sun Apr 12 05:50:28.750594 2026] [:error] [pid 25328:tid 25383] [client 20.100.203.99:7233] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrCJMxUaQZxT-e0YsDj4AAAAE0"]
[Sun Apr 12 05:50:30.230350 2026] [:error] [pid 60280:tid 60297] [client 20.100.203.99:45081] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "adrCJnBlLnDOYuIykkjk9AAAAc8"]
[Sun Apr 12 05:50:31.221653 2026] [:error] [pid 25329:tid 25393] [client 20.100.203.99:7863] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "adrCJ2dcIYsS8Iyaj10wcQAAAIo"]
[Sun Apr 12 05:50:32.442359 2026] [:error] [pid 26567:tid 26572] [client 20.100.203.99:7853] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "adrCKHhRpg6ptWFyFx0BAQAAAQM"]
[Sun Apr 12 05:50:33.919746 2026] [:error] [pid 26567:tid 26576] [client 20.100.203.99:7828] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "adrCKXhRpg6ptWFyFx0BAwAAAQc"]
[Sun Apr 12 05:50:34.626708 2026] [:error] [pid 60280:tid 60298] [client 20.100.203.99:7455] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "adrCKnBlLnDOYuIykkjk-wAAAdA"]
[Sun Apr 12 05:50:36.019217 2026] [:error] [pid 26599:tid 26611] [client 20.100.203.99:45072] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adrCLHG89LXoQbk_rwBBhgAAAUk"]
[Sun Apr 12 05:50:37.310812 2026] [:error] [pid 25437:tid 25455] [client 20.100.203.99:7288] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adrCLXf97wYZje1ep_NUYwAAANA"]
[Sun Apr 12 05:50:38.328109 2026] [:error] [pid 26567:tid 26570] [client 20.100.203.99:45086] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adrCLnhRpg6ptWFyFx0BBwAAAQE"]
[Sun Apr 12 05:50:41.256293 2026] [:error] [pid 26599:tid 26618] [client 20.100.203.99:45078] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "adrCMXG89LXoQbk_rwBBjgAAAVA"]
[Sun Apr 12 05:50:42.525250 2026] [:error] [pid 25327:tid 25338] [client 20.100.203.99:49750] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "adrCMi6h2tZEVJo9JFJDSwAAAAI"]
[Sun Apr 12 05:50:43.994667 2026] [:error] [pid 26599:tid 26611] [client 20.100.203.99:59155] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "adrCM3G89LXoQbk_rwBBlAAAAUk"]
[Sun Apr 12 05:50:46.312707 2026] [:error] [pid 26599:tid 26603] [client 20.100.203.99:7425] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "adrCNnG89LXoQbk_rwBBnAAAAUE"]
[Sun Apr 12 05:50:47.083030 2026] [:error] [pid 26599:tid 26618] [client 20.100.203.99:7460] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "adrCN3G89LXoQbk_rwBBnwAAAVA"]
[Sun Apr 12 05:50:48.069863 2026] [:error] [pid 26599:tid 26619] [client 20.100.203.99:46659] [client 20.100.203.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adrCOHG89LXoQbk_rwBBoQAAAVE"]
[Sun Apr 12 05:50:49.316206 2026] [:error] [pid 25437:tid 25457] [client 20.100.203.99:46657] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "adrCOXf97wYZje1ep_NUaQAAANI"]
[Sun Apr 12 05:50:50.737054 2026] [:error] [pid 60280:tid 60296] [client 20.100.203.99:40695] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "adrCOnBlLnDOYuIykkjlHAAAAc4"]
[Sun Apr 12 05:50:51.924752 2026] [:error] [pid 25327:tid 25343] [client 20.100.203.99:45075] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "adrCOy6h2tZEVJo9JFJDawAAAAc"]
[Sun Apr 12 05:50:52.764003 2026] [:error] [pid 60280:tid 60282] [client 20.100.203.99:47459] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "adrCPHBlLnDOYuIykkjlUgAAAcA"]
[Sun Apr 12 05:50:53.869999 2026] [:error] [pid 25329:tid 25392] [client 20.100.203.99:59179] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myy.php"] [unique_id "adrCPWdcIYsS8Iyaj10wvwAAAIk"]
[Sun Apr 12 05:50:54.835136 2026] [:error] [pid 25329:tid 25404] [client 20.100.203.99:57319] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myy.php"] [unique_id "adrCPmdcIYsS8Iyaj10wwgAAAJA"]
[Sun Apr 12 05:50:55.721478 2026] [:error] [pid 25329:tid 25415] [client 20.100.203.99:37903] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myy.php"] [unique_id "adrCP2dcIYsS8Iyaj10wxgAAAJg"]
[Sun Apr 12 05:50:56.878146 2026] [:error] [pid 60280:tid 60298] [client 20.100.203.99:52823] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/myy.php"] [unique_id "adrCQHBlLnDOYuIykkjljwAAAdA"]
[Sun Apr 12 05:50:58.012077 2026] [:error] [pid 60280:tid 60303] [client 20.100.203.99:61504] [client 20.100.203.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "adrCQnBlLnDOYuIykkjlkgAAAdU"]
[Sun Apr 12 05:51:00.195939 2026] [:error] [pid 25327:tid 25341] [client 20.100.203.99:57873] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "adrCRC6h2tZEVJo9JFJDnQAAAAU"]
[Sun Apr 12 05:51:01.665720 2026] [:error] [pid 26599:tid 26619] [client 20.100.203.99:49273] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "adrCRXG89LXoQbk_rwBBvAAAAVE"]
[Sun Apr 12 05:51:03.311518 2026] [:error] [pid 60280:tid 60291] [client 20.100.203.99:57858] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "adrCR3BlLnDOYuIykkjlkwAAAck"]
[Sun Apr 12 05:51:05.040888 2026] [:error] [pid 25328:tid 25380] [client 20.100.203.99:62891] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "adrCScxUaQZxT-e0YsDkYgAAAEw"]
[Sun Apr 12 05:51:07.203846 2026] [:error] [pid 25328:tid 25389] [client 20.100.203.99:7618] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adrCS8xUaQZxT-e0YsDkZQAAAFA"]
[Sun Apr 12 05:51:10.563589 2026] [:error] [pid 26567:tid 26572] [client 20.100.203.99:49191] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adrCTnhRpg6ptWFyFx0BRAAAAQM"]
[Sun Apr 12 05:51:11.711474 2026] [:error] [pid 60280:tid 60292] [client 20.100.203.99:40076] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adrCT3BlLnDOYuIykkjlqwAAAco"]
[Sun Apr 12 05:51:13.424497 2026] [:error] [pid 26600:tid 26629] [client 20.100.203.99:40085] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "adrCUe1YwAZiXhQKLYp79AAAAYA"]
[Sun Apr 12 05:51:14.370606 2026] [:error] [pid 60280:tid 60299] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/wsheet1.php
[Sun Apr 12 05:51:14.643145 2026] [:error] [pid 60280:tid 60297] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sun Apr 12 05:51:14.999812 2026] [:error] [pid 60280:tid 60291] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Sun Apr 12 05:51:15.262064 2026] [:error] [pid 60280:tid 60295] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Sun Apr 12 05:51:15.677243 2026] [:error] [pid 60280:tid 60305] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Sun Apr 12 05:51:15.946600 2026] [:error] [pid 60280:tid 60301] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun Apr 12 05:51:16.453908 2026] [:error] [pid 60280:tid 60282] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Apr 12 05:51:16.757084 2026] [:error] [pid 60280:tid 60296] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Sun Apr 12 05:51:17.027761 2026] [:error] [pid 60280:tid 60306] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/riz.php
[Sun Apr 12 05:51:17.285712 2026] [:error] [pid 60280:tid 60288] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sun Apr 12 05:51:17.550015 2026] [:error] [pid 60280:tid 60295] [client 20.100.203.99:49200] File does not exist: /usr/local/apache/htdocs/suspended-page/om.php
[Sun Apr 12 05:51:17.922871 2026] [:error] [pid 60280:tid 60287] [client 20.100.203.99:49200] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/006.php"] [unique_id "adrCVXBlLnDOYuIykkjl0wAAAcU"]
[Sun Apr 12 05:51:18.912075 2026] [:error] [pid 60280:tid 60295] [client 20.100.203.99:47056] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/006.php"] [unique_id "adrCVnBlLnDOYuIykkjl3QAAAc0"]
[Sun Apr 12 05:51:20.693330 2026] [:error] [pid 25437:tid 25454] [client 20.100.203.99:39684] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/006.php"] [unique_id "adrCWHf97wYZje1ep_NU-AAAAM8"]
[Sun Apr 12 05:51:21.500125 2026] [:error] [pid 25329:tid 25415] [client 20.100.203.99:62904] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/006.php"] [unique_id "adrCWWdcIYsS8Iyaj10w5QAAAJg"]
[Sun Apr 12 05:51:22.866057 2026] [:error] [pid 25328:tid 25398] [client 20.100.203.99:62900] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adrCWsxUaQZxT-e0YsDkgAAAAFQ"]
[Sun Apr 12 05:51:23.583977 2026] [:error] [pid 26600:tid 26637] [client 20.100.203.99:7628] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adrCW-1YwAZiXhQKLYp8AgAAAYg"]
[Sun Apr 12 05:51:24.550896 2026] [:error] [pid 25437:tid 25449] [client 20.100.203.99:7636] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adrCXHf97wYZje1ep_NVAAAAAMo"]
[Sun Apr 12 05:51:26.534764 2026] [:error] [pid 25329:tid 25390] [client 20.100.203.99:7656] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "adrCXmdcIYsS8Iyaj10w7gAAAIg"]
[Sun Apr 12 05:51:27.238836 2026] [:error] [pid 26567:tid 26579] [client 20.100.203.99:58242] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "adrCX3hRpg6ptWFyFx0BWgAAAQo"]
[Sun Apr 12 05:51:28.263214 2026] [:error] [pid 60280:tid 60282] [client 20.100.203.99:50675] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "adrCYHBlLnDOYuIykkjl6gAAAcA"]
[Sun Apr 12 05:51:29.860226 2026] [:error] [pid 26599:tid 26605] [client 20.100.203.99:39735] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "adrCYXG89LXoQbk_rwBB0AAAAUM"]
[Sun Apr 12 05:51:31.945853 2026] [:error] [pid 26599:tid 26602] [client 20.100.203.99:55137] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "adrCY3G89LXoQbk_rwBB2AAAAUA"]
[Sun Apr 12 05:51:32.624864 2026] [:error] [pid 26599:tid 26606] [client 20.100.203.99:50670] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf.php"] [unique_id "adrCZHG89LXoQbk_rwBB2wAAAUQ"]
[Sun Apr 12 05:51:33.865199 2026] [:error] [pid 26600:tid 26633] [client 20.100.203.99:50676] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf.php"] [unique_id "adrCZe1YwAZiXhQKLYp8EAAAAYQ"]
[Sun Apr 12 05:51:35.132802 2026] [:error] [pid 25327:tid 25351] [client 20.100.203.99:39721] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf.php"] [unique_id "adrCZy6h2tZEVJo9JFJD3AAAAA8"]
[Sun Apr 12 05:51:36.425683 2026] [:error] [pid 26600:tid 26642] [client 20.100.203.99:7730] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolf.php"] [unique_id "adrCaO1YwAZiXhQKLYp8EgAAAY0"]
[Sun Apr 12 05:51:37.382560 2026] [:error] [pid 25329:tid 25388] [client 20.100.203.99:55166] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adrCaWdcIYsS8Iyaj10xBwAAAIc"]
[Sun Apr 12 05:51:39.355480 2026] [:error] [pid 26599:tid 26616] [client 20.100.203.99:54430] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adrCa3G89LXoQbk_rwBB6QAAAU4"]
[Sun Apr 12 05:51:41.324224 2026] [:error] [pid 60280:tid 60306] [client 20.100.203.99:54408] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adrCbXBlLnDOYuIykkjmMwAAAdg"]
[Sun Apr 12 05:51:42.317510 2026] [:error] [pid 60280:tid 60303] [client 20.100.203.99:37299] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "adrCbnBlLnDOYuIykkjmNwAAAdU"]
[Sun Apr 12 05:51:43.077078 2026] [:error] [pid 25328:tid 25380] [client 20.100.203.99:39686] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrCb8xUaQZxT-e0YsDkqgAAAEw"]
[Sun Apr 12 05:51:44.532063 2026] [:error] [pid 60280:tid 60296] [client 20.100.203.99:8151] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrCcHBlLnDOYuIykkjmUwAAAc4"]
[Sun Apr 12 05:51:45.440830 2026] [:error] [pid 25328:tid 25405] [client 20.100.203.99:50649] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrCccxUaQZxT-e0YsDkrgAAAFc"]
[Sun Apr 12 05:51:46.718974 2026] [:error] [pid 26600:tid 26632] [client 20.100.203.99:38978] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adrCcu1YwAZiXhQKLYp8HAAAAYM"]
[Sun Apr 12 05:51:48.765038 2026] [:error] [pid 60280:tid 60297] [client 20.100.203.99:39740] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adrCdHBlLnDOYuIykkjmYwAAAc8"]
[Sun Apr 12 05:51:49.595381 2026] [:error] [pid 25328:tid 25368] [client 20.100.203.99:38947] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adrCdcxUaQZxT-e0YsDktwAAAEQ"]
[Sun Apr 12 05:51:51.924094 2026] [:error] [pid 25328:tid 25372] [client 20.100.203.99:55143] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adrCd8xUaQZxT-e0YsDkwAAAAEc"]
[Sun Apr 12 05:51:52.652088 2026] [:error] [pid 25329:tid 25414] [client 20.100.203.99:7693] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1aa.php"] [unique_id "adrCeGdcIYsS8Iyaj10xEQAAAJc"]
[Sun Apr 12 05:51:54.089104 2026] [:error] [pid 25328:tid 25385] [client 20.100.203.99:61487] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "adrCesxUaQZxT-e0YsDkzQAAAE4"]
[Sun Apr 12 05:51:54.813858 2026] [:error] [pid 25329:tid 25382] [client 20.100.203.99:7709] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "adrCemdcIYsS8Iyaj10xHAAAAIQ"]
[Sun Apr 12 05:51:55.714946 2026] [:error] [pid 26599:tid 26602] [client 20.100.203.99:50643] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "adrCe3G89LXoQbk_rwBB8QAAAUA"]
[Sun Apr 12 05:51:56.741968 2026] [:error] [pid 26600:tid 26641] [client 20.100.203.99:51815] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "adrCfO1YwAZiXhQKLYp8LAAAAYw"]
[Sun Apr 12 05:51:57.686606 2026] [:error] [pid 25329:tid 25409] [client 20.100.203.99:55163] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrCfWdcIYsS8Iyaj10xJQAAAJM"]
[Sun Apr 12 05:51:59.257516 2026] [:error] [pid 60280:tid 60293] [client 20.100.203.99:51779] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrCf3BlLnDOYuIykkjmbgAAAcs"]
[Sun Apr 12 05:51:59.847720 2026] [:error] [pid 25329:tid 25413] [client 20.100.203.99:37248] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrCf2dcIYsS8Iyaj10xLAAAAJY"]
[Sun Apr 12 05:52:00.643264 2026] [:error] [pid 60280:tid 60295] [client 20.100.203.99:37283] [client 20.100.203.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adrCgHBlLnDOYuIykkjmdgAAAc0"]
[Sun Apr 12 07:19:30.887741 2026] [:error] [pid 25327:tid 25341] [client 43.130.3.120:39692] [client 43.130.3.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adrXAi6h2tZEVJo9JFJUOQAAAAU"]
[Sun Apr 12 08:21:11.969311 2026] [:error] [pid 26600:tid 26630] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sun Apr 12 08:21:12.229074 2026] [:error] [pid 26600:tid 26633] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sun Apr 12 08:21:12.484165 2026] [:error] [pid 26600:tid 26634] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Sun Apr 12 08:21:12.720426 2026] [:error] [pid 26600:tid 26631] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Sun Apr 12 08:21:12.969415 2026] [:error] [pid 26600:tid 26632] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 12 08:21:13.238470 2026] [:error] [pid 26600:tid 26640] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/8QXC9v.php
[Sun Apr 12 08:21:13.474653 2026] [:error] [pid 26600:tid 26630] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 12 08:21:13.708847 2026] [:error] [pid 26600:tid 26635] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/panel.php
[Sun Apr 12 08:21:13.943301 2026] [:error] [pid 26600:tid 26637] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Sun Apr 12 08:21:14.256948 2026] [:error] [pid 26600:tid 26647] [client 20.111.60.230:54226] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sun Apr 12 08:21:14.492337 2026] [:error] [pid 26600:tid 26644] [client 20.111.60.230:54226] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adrleu1YwAZiXhQKLYqbaQAAAY8"]
[Sun Apr 12 08:21:15.072311 2026] [:error] [pid 60280:tid 60303] [client 20.111.60.230:51444] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adrle3BlLnDOYuIykkgiHAAAAdU"]
[Sun Apr 12 08:21:15.564960 2026] [:error] [pid 26600:tid 26640] [client 20.111.60.230:23623] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adrle-1YwAZiXhQKLYqbbQAAAYs"]
[Sun Apr 12 08:21:16.205869 2026] [:error] [pid 26599:tid 26616] [client 20.111.60.230:51430] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nwflm.php"] [unique_id "adrlfHG89LXoQbk_rwBx7wAAAU4"]
[Sun Apr 12 08:21:16.673663 2026] [:error] [pid 25327:tid 25341] [client 20.111.60.230:23627] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "adrlfC6h2tZEVJo9JFJl6QAAAAU"]
[Sun Apr 12 08:21:17.189341 2026] [:error] [pid 25327:tid 25345] [client 20.111.60.230:54258] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "adrlfS6h2tZEVJo9JFJl6wAAAAk"]
[Sun Apr 12 08:21:17.793029 2026] [:error] [pid 26599:tid 26602] [client 20.111.60.230:54231] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "adrlfXG89LXoQbk_rwBx8wAAAUA"]
[Sun Apr 12 08:21:18.342192 2026] [:error] [pid 26600:tid 26645] [client 20.111.60.230:9746] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "adrlfu1YwAZiXhQKLYqbfAAAAZA"]
[Sun Apr 12 08:21:18.958382 2026] [:error] [pid 25327:tid 25336] [client 20.111.60.230:23654] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xff.php"] [unique_id "adrlfi6h2tZEVJo9JFJl7QAAAAA"]
[Sun Apr 12 08:21:19.533913 2026] [:error] [pid 26567:tid 26574] [client 20.111.60.230:63062] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xff.php"] [unique_id "adrlf3hRpg6ptWFyFx0rzwAAAQU"]
[Sun Apr 12 08:21:20.041250 2026] [:error] [pid 26600:tid 26639] [client 20.111.60.230:23671] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xff.php"] [unique_id "adrlgO1YwAZiXhQKLYqbgwAAAYo"]
[Sun Apr 12 08:21:20.699365 2026] [:error] [pid 25327:tid 25347] [client 20.111.60.230:17666] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xff.php"] [unique_id "adrlgC6h2tZEVJo9JFJl7gAAAAs"]
[Sun Apr 12 08:21:21.250542 2026] [:error] [pid 26599:tid 26622] [client 20.111.60.230:23636] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lupo.php"] [unique_id "adrlgXG89LXoQbk_rwBx-AAAAVQ"]
[Sun Apr 12 08:21:21.759949 2026] [:error] [pid 25328:tid 25375] [client 20.111.60.230:54267] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lupo.php"] [unique_id "adrlgcxUaQZxT-e0YsAiUQAAAEk"]
[Sun Apr 12 08:21:22.393633 2026] [:error] [pid 25328:tid 25383] [client 20.111.60.230:17668] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lupo.php"] [unique_id "adrlgsxUaQZxT-e0YsAiUgAAAE0"]
[Sun Apr 12 08:21:22.878411 2026] [:error] [pid 26599:tid 26606] [client 20.111.60.230:63058] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lupo.php"] [unique_id "adrlgnG89LXoQbk_rwBx_AAAAUQ"]
[Sun Apr 12 08:21:23.718871 2026] [:error] [pid 26599:tid 26603] [client 20.111.60.230:17707] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/awa.php"] [unique_id "adrlg3G89LXoQbk_rwBx_wAAAUE"]
[Sun Apr 12 08:21:24.292545 2026] [:error] [pid 26599:tid 26625] [client 20.111.60.230:23660] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/awa.php"] [unique_id "adrlhHG89LXoQbk_rwByBAAAAVc"]
[Sun Apr 12 08:21:24.930163 2026] [:error] [pid 25327:tid 25350] [client 20.111.60.230:9760] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/awa.php"] [unique_id "adrlhC6h2tZEVJo9JFJl9AAAAA4"]
[Sun Apr 12 08:21:25.651467 2026] [:error] [pid 25327:tid 25340] [client 20.111.60.230:9754] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/awa.php"] [unique_id "adrlhS6h2tZEVJo9JFJl-gAAAAQ"]
[Sun Apr 12 08:21:26.241119 2026] [:error] [pid 25327:tid 25354] [client 20.111.60.230:9749] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/popo.php"] [unique_id "adrlhi6h2tZEVJo9JFJmAgAAABI"]
[Sun Apr 12 08:21:26.715958 2026] [:error] [pid 60280:tid 60284] [client 20.111.60.230:23634] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/popo.php"] [unique_id "adrlhnBlLnDOYuIykkgiJQAAAcI"]
[Sun Apr 12 08:21:27.263256 2026] [:error] [pid 25437:tid 25462] [client 20.111.60.230:63075] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/popo.php"] [unique_id "adrlh3f97wYZje1ep_N9MQAAANc"]
[Sun Apr 12 08:21:28.032560 2026] [:error] [pid 25437:tid 25463] [client 20.111.60.230:54242] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/popo.php"] [unique_id "adrliHf97wYZje1ep_N9MgAAANg"]
[Sun Apr 12 08:21:28.583571 2026] [:error] [pid 25328:tid 25373] [client 20.111.60.230:9771] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/water.php"] [unique_id "adrliMxUaQZxT-e0YsAiWgAAAEg"]
[Sun Apr 12 08:21:29.128066 2026] [:error] [pid 25329:tid 25400] [client 20.111.60.230:9761] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/water.php"] [unique_id "adrliWdcIYsS8Iyaj11duwAAAI4"]
[Sun Apr 12 08:21:29.737843 2026] [:error] [pid 26567:tid 26588] [client 20.111.60.230:17672] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/water.php"] [unique_id "adrliXhRpg6ptWFyFx0r1QAAARM"]
[Sun Apr 12 08:21:30.250854 2026] [:error] [pid 60280:tid 60296] [client 20.111.60.230:23629] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/water.php"] [unique_id "adrlinBlLnDOYuIykkgiKQAAAc4"]
[Sun Apr 12 08:21:31.201352 2026] [:error] [pid 60280:tid 60294] [client 20.111.60.230:54253] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ggb.php"] [unique_id "adrli3BlLnDOYuIykkgiLQAAAcw"]
[Sun Apr 12 08:21:31.887738 2026] [:error] [pid 26600:tid 26629] [client 20.111.60.230:63083] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ggb.php"] [unique_id "adrli-1YwAZiXhQKLYqbnAAAAYA"]
[Sun Apr 12 08:21:32.753590 2026] [:error] [pid 26600:tid 26645] [client 20.111.60.230:54261] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ggb.php"] [unique_id "adrljO1YwAZiXhQKLYqboQAAAZA"]
[Sun Apr 12 08:21:33.596312 2026] [:error] [pid 25329:tid 25402] [client 20.111.60.230:17664] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ggb.php"] [unique_id "adrljWdcIYsS8Iyaj11dwAAAAI8"]
[Sun Apr 12 08:21:34.114450 2026] [:error] [pid 26600:tid 26637] [client 20.111.60.230:23666] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/13.php"] [unique_id "adrlju1YwAZiXhQKLYqbpwAAAYg"]
[Sun Apr 12 08:21:34.847104 2026] [:error] [pid 26600:tid 26635] [client 20.111.60.230:9774] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/13.php"] [unique_id "adrlju1YwAZiXhQKLYqbqwAAAYY"]
[Sun Apr 12 08:21:35.627111 2026] [:error] [pid 26600:tid 26634] [client 20.111.60.230:51403] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/13.php"] [unique_id "adrlj-1YwAZiXhQKLYqbsQAAAYU"]
[Sun Apr 12 08:21:36.529168 2026] [:error] [pid 26567:tid 26569] [client 20.111.60.230:17669] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/13.php"] [unique_id "adrlkHhRpg6ptWFyFx0r5AAAAQA"]
[Sun Apr 12 08:21:37.077127 2026] [:error] [pid 26600:tid 26647] [client 20.111.60.230:17704] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wert.php"] [unique_id "adrlke1YwAZiXhQKLYqbvwAAAZI"]
[Sun Apr 12 08:21:37.871199 2026] [:error] [pid 25437:tid 25457] [client 20.111.60.230:50231] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wert.php"] [unique_id "adrlkXf97wYZje1ep_N9OwAAANI"]
[Sun Apr 12 08:21:38.625438 2026] [:error] [pid 26600:tid 26632] [client 20.111.60.230:23659] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wert.php"] [unique_id "adrlku1YwAZiXhQKLYqb1QAAAYM"]
[Sun Apr 12 08:21:39.299396 2026] [:error] [pid 26600:tid 26638] [client 20.111.60.230:53775] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wert.php"] [unique_id "adrlk-1YwAZiXhQKLYqb2wAAAYk"]
[Sun Apr 12 08:21:39.885987 2026] [:error] [pid 26600:tid 26630] [client 20.111.60.230:51429] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/11.php"] [unique_id "adrlk-1YwAZiXhQKLYqb4QAAAYE"]
[Sun Apr 12 08:21:40.541497 2026] [:error] [pid 26600:tid 26640] [client 20.111.60.230:63057] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/11.php"] [unique_id "adrllO1YwAZiXhQKLYqb6AAAAYs"]
[Sun Apr 12 08:21:41.307505 2026] [:error] [pid 25328:tid 25394] [client 20.111.60.230:17673] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/11.php"] [unique_id "adrllcxUaQZxT-e0YsAiZgAAAFI"]
[Sun Apr 12 08:21:41.975085 2026] [:error] [pid 25328:tid 25385] [client 20.111.60.230:23622] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/11.php"] [unique_id "adrllcxUaQZxT-e0YsAiagAAAE4"]
[Sun Apr 12 08:21:42.500378 2026] [:error] [pid 26599:tid 26623] [client 20.111.60.230:48862] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adrllnG89LXoQbk_rwByGwAAAVU"]
[Sun Apr 12 08:21:43.089681 2026] [:error] [pid 25329:tid 25395] [client 20.111.60.230:63084] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adrll2dcIYsS8Iyaj11dxgAAAIs"]
[Sun Apr 12 08:21:43.703272 2026] [:error] [pid 26599:tid 26606] [client 20.111.60.230:23673] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adrll3G89LXoQbk_rwByIAAAAUQ"]
[Sun Apr 12 08:21:44.298843 2026] [:error] [pid 26599:tid 26619] [client 20.111.60.230:63086] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p.php"] [unique_id "adrlmHG89LXoQbk_rwByIgAAAVE"]
[Sun Apr 12 08:21:44.851514 2026] [:error] [pid 25327:tid 25346] [client 20.111.60.230:9748] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adrlmC6h2tZEVJo9JFJmFAAAAAo"]
[Sun Apr 12 08:21:45.504814 2026] [:error] [pid 25328:tid 25391] [client 20.111.60.230:54264] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adrlmcxUaQZxT-e0YsAidQAAAFE"]
[Sun Apr 12 08:21:46.203612 2026] [:error] [pid 25328:tid 25375] [client 20.111.60.230:17679] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adrlmsxUaQZxT-e0YsAieAAAAEk"]
[Sun Apr 12 08:21:46.842521 2026] [:error] [pid 25437:tid 25442] [client 20.111.60.230:54230] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "adrlmnf97wYZje1ep_N9PgAAAMM"]
[Sun Apr 12 08:21:47.502101 2026] [:error] [pid 26599:tid 26617] [client 20.111.60.230:17690] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bthil.php"] [unique_id "adrlm3G89LXoQbk_rwByKQAAAU8"]
[Sun Apr 12 08:21:48.063454 2026] [:error] [pid 25437:tid 25441] [client 20.111.60.230:51404] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bthil.php"] [unique_id "adrlnHf97wYZje1ep_N9QgAAAMI"]
[Sun Apr 12 08:21:48.685516 2026] [:error] [pid 26599:tid 26622] [client 20.111.60.230:63103] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bthil.php"] [unique_id "adrlnHG89LXoQbk_rwByKgAAAVQ"]
[Sun Apr 12 08:21:49.237939 2026] [:error] [pid 26599:tid 26614] [client 20.111.60.230:23640] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bthil.php"] [unique_id "adrlnXG89LXoQbk_rwByLQAAAUw"]
[Sun Apr 12 08:21:49.824671 2026] [:error] [pid 25329:tid 25390] [client 20.111.60.230:23616] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adrlnWdcIYsS8Iyaj11dywAAAIg"]
[Sun Apr 12 08:21:50.498977 2026] [:error] [pid 25437:tid 25449] [client 20.111.60.230:9751] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adrlnnf97wYZje1ep_N9RwAAAMo"]
[Sun Apr 12 08:21:51.296303 2026] [:error] [pid 26567:tid 26593] [client 20.111.60.230:9755] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adrln3hRpg6ptWFyFx0r9gAAARg"]
[Sun Apr 12 08:21:51.850691 2026] [:error] [pid 26600:tid 26649] [client 20.111.60.230:54227] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/turkshell.php"] [unique_id "adrln-1YwAZiXhQKLYqcAwAAAZQ"]
[Sun Apr 12 08:21:52.516129 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:23619] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tea.php"] [unique_id "adrloC6h2tZEVJo9JFJmHgAAABc"]
[Sun Apr 12 08:21:53.115357 2026] [:error] [pid 26600:tid 26643] [client 20.111.60.230:54270] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tea.php"] [unique_id "adrloe1YwAZiXhQKLYqcEAAAAY4"]
[Sun Apr 12 08:21:53.759665 2026] [:error] [pid 25327:tid 25349] [client 20.111.60.230:9744] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tea.php"] [unique_id "adrloS6h2tZEVJo9JFJmHwAAAA0"]
[Sun Apr 12 08:21:54.531636 2026] [:error] [pid 26600:tid 26635] [client 20.111.60.230:63096] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tea.php"] [unique_id "adrlou1YwAZiXhQKLYqcFwAAAYY"]
[Sun Apr 12 08:21:55.351568 2026] [:error] [pid 26599:tid 26617] [client 20.111.60.230:51421] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seo.php"] [unique_id "adrlo3G89LXoQbk_rwByNwAAAU8"]
[Sun Apr 12 08:21:55.908934 2026] [:error] [pid 25327:tid 25346] [client 20.111.60.230:51409] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seo.php"] [unique_id "adrloy6h2tZEVJo9JFJmJwAAAAo"]
[Sun Apr 12 08:21:56.610154 2026] [:error] [pid 26599:tid 26618] [client 20.111.60.230:51428] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seo.php"] [unique_id "adrlpHG89LXoQbk_rwByOwAAAVA"]
[Sun Apr 12 08:21:57.175462 2026] [:error] [pid 26599:tid 26606] [client 20.111.60.230:63072] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/seo.php"] [unique_id "adrlpXG89LXoQbk_rwByQAAAAUQ"]
[Sun Apr 12 08:21:57.688279 2026] [:error] [pid 26599:tid 26616] [client 20.111.60.230:51439] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/7.php"] [unique_id "adrlpXG89LXoQbk_rwByQwAAAU4"]
[Sun Apr 12 08:21:58.478142 2026] [:error] [pid 25328:tid 25401] [client 20.111.60.230:53763] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/7.php"] [unique_id "adrlpsxUaQZxT-e0YsAiiwAAAFU"]
[Sun Apr 12 08:21:59.052455 2026] [:error] [pid 25327:tid 25339] [client 20.111.60.230:51427] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/7.php"] [unique_id "adrlpy6h2tZEVJo9JFJmLAAAAAM"]
[Sun Apr 12 08:21:59.674209 2026] [:error] [pid 26567:tid 26576] [client 20.111.60.230:54257] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/7.php"] [unique_id "adrlp3hRpg6ptWFyFx0r-gAAAQc"]
[Sun Apr 12 08:22:00.235050 2026] [:error] [pid 26567:tid 26587] [client 20.111.60.230:9730] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "adrlqHhRpg6ptWFyFx0r_gAAARI"]
[Sun Apr 12 08:22:00.769937 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:23657] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "adrlqC6h2tZEVJo9JFJmMAAAABc"]
[Sun Apr 12 08:22:01.442670 2026] [:error] [pid 25327:tid 25346] [client 20.111.60.230:54232] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "adrlqS6h2tZEVJo9JFJmNgAAAAo"]
[Sun Apr 12 08:22:02.056668 2026] [:error] [pid 26599:tid 26612] [client 20.111.60.230:9737] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "adrlqnG89LXoQbk_rwByUQAAAUo"]
[Sun Apr 12 08:22:02.637298 2026] [:error] [pid 25327:tid 25336] [client 20.111.60.230:57407] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "adrlqi6h2tZEVJo9JFJmPAAAAAA"]
[Sun Apr 12 08:22:03.391411 2026] [:error] [pid 25327:tid 25338] [client 20.111.60.230:54218] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "adrlqy6h2tZEVJo9JFJmPQAAAAI"]
[Sun Apr 12 08:22:04.029422 2026] [:error] [pid 25327:tid 25342] [client 20.111.60.230:53816] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "adrlrC6h2tZEVJo9JFJmPwAAAAY"]
[Sun Apr 12 08:22:04.944828 2026] [:error] [pid 25329:tid 25376] [client 20.111.60.230:63099] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/1.php"] [unique_id "adrlrGdcIYsS8Iyaj11d3AAAAIE"]
[Sun Apr 12 08:22:05.566983 2026] [:error] [pid 25329:tid 25402] [client 20.111.60.230:51449] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adrlrWdcIYsS8Iyaj11d3gAAAI8"]
[Sun Apr 12 08:22:06.076208 2026] [:error] [pid 26600:tid 26643] [client 20.111.60.230:54222] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adrlru1YwAZiXhQKLYqcLgAAAY4"]
[Sun Apr 12 08:22:06.718994 2026] [:error] [pid 25329:tid 25395] [client 20.111.60.230:9741] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adrlrmdcIYsS8Iyaj11d5gAAAIs"]
[Sun Apr 12 08:22:07.457667 2026] [:error] [pid 25329:tid 25399] [client 20.111.60.230:63049] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2.php"] [unique_id "adrlr2dcIYsS8Iyaj11d6QAAAI0"]
[Sun Apr 12 08:22:07.974780 2026] [:error] [pid 60280:tid 60288] [client 20.111.60.230:63053] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "adrlr3BlLnDOYuIykkgiUQAAAcY"]
[Sun Apr 12 08:22:08.524968 2026] [:error] [pid 60280:tid 60293] [client 20.111.60.230:9741] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "adrlsHBlLnDOYuIykkgiVQAAAcs"]
[Sun Apr 12 08:22:09.121841 2026] [:error] [pid 25327:tid 25343] [client 20.111.60.230:23632] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "adrlsS6h2tZEVJo9JFJmRwAAAAc"]
[Sun Apr 12 08:22:09.729086 2026] [:error] [pid 26567:tid 26574] [client 20.111.60.230:23628] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "adrlsXhRpg6ptWFyFx0sAwAAAQU"]
[Sun Apr 12 08:22:10.447419 2026] [:error] [pid 25327:tid 25357] [client 20.111.60.230:57394] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4.php"] [unique_id "adrlsi6h2tZEVJo9JFJmUQAAABU"]
[Sun Apr 12 08:22:11.135818 2026] [:error] [pid 26600:tid 26650] [client 20.111.60.230:17713] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4.php"] [unique_id "adrls-1YwAZiXhQKLYqcQwAAAZU"]
[Sun Apr 12 08:22:11.727154 2026] [:error] [pid 26600:tid 26630] [client 20.111.60.230:53805] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4.php"] [unique_id "adrls-1YwAZiXhQKLYqcRgAAAYE"]
[Sun Apr 12 08:22:12.221947 2026] [:error] [pid 25329:tid 25392] [client 20.111.60.230:54252] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4.php"] [unique_id "adrltGdcIYsS8Iyaj11d6wAAAIk"]
[Sun Apr 12 08:22:12.865483 2026] [:error] [pid 25327:tid 25343] [client 20.111.60.230:17681] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/5.php"] [unique_id "adrltC6h2tZEVJo9JFJmWgAAAAc"]
[Sun Apr 12 08:22:13.428257 2026] [:error] [pid 26600:tid 26652] [client 20.111.60.230:54211] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/5.php"] [unique_id "adrlte1YwAZiXhQKLYqcVQAAAZc"]
[Sun Apr 12 08:22:13.908338 2026] [:error] [pid 26600:tid 26644] [client 20.111.60.230:9790] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/5.php"] [unique_id "adrlte1YwAZiXhQKLYqcWgAAAY8"]
[Sun Apr 12 08:22:14.408055 2026] [:error] [pid 26600:tid 26641] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Sun Apr 12 08:22:14.643118 2026] [:error] [pid 26600:tid 26647] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Sun Apr 12 08:22:14.941926 2026] [:error] [pid 26600:tid 26651] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Sun Apr 12 08:22:15.217040 2026] [:error] [pid 26600:tid 26642] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Sun Apr 12 08:22:15.451709 2026] [:error] [pid 26600:tid 26646] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/.mopj.php
[Sun Apr 12 08:22:15.685867 2026] [:error] [pid 26600:tid 26638] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Apr 12 08:22:15.941311 2026] [:error] [pid 26600:tid 26645] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/nano.php
[Sun Apr 12 08:22:16.176056 2026] [:error] [pid 26600:tid 26636] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Sun Apr 12 08:22:16.410715 2026] [:error] [pid 26600:tid 26637] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sun Apr 12 08:22:16.649863 2026] [:error] [pid 26600:tid 26632] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Sun Apr 12 08:22:16.884068 2026] [:error] [pid 26600:tid 26633] [client 20.111.60.230:63044] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Sun Apr 12 08:22:17.125598 2026] [:error] [pid 26600:tid 26635] [client 20.111.60.230:63044] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aligk.php"] [unique_id "adrlue1YwAZiXhQKLYqccQAAAYY"]
[Sun Apr 12 08:22:17.782535 2026] [:error] [pid 25327:tid 25343] [client 20.111.60.230:9780] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aligk.php"] [unique_id "adrluS6h2tZEVJo9JFJmfwAAAAc"]
[Sun Apr 12 08:22:18.405389 2026] [:error] [pid 25327:tid 25355] [client 20.111.60.230:63059] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aligk.php"] [unique_id "adrlui6h2tZEVJo9JFJmhgAAABM"]
[Sun Apr 12 08:22:19.001143 2026] [:error] [pid 25327:tid 25341] [client 20.111.60.230:63068] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aligk.php"] [unique_id "adrluy6h2tZEVJo9JFJmkwAAAAU"]
[Sun Apr 12 08:22:19.504849 2026] [:error] [pid 26600:tid 26651] [client 20.111.60.230:63063] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adrlu-1YwAZiXhQKLYqcdAAAAZY"]
[Sun Apr 12 08:22:20.058756 2026] [:error] [pid 26599:tid 26613] [client 20.111.60.230:9791] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adrlvHG89LXoQbk_rwBydAAAAUs"]
[Sun Apr 12 08:22:20.626879 2026] [:error] [pid 26567:tid 26577] [client 20.111.60.230:9786] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adrlvHhRpg6ptWFyFx0sEQAAAQg"]
[Sun Apr 12 08:22:21.176659 2026] [:error] [pid 26599:tid 26603] [client 20.111.60.230:54224] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byrgo.php"] [unique_id "adrlvXG89LXoQbk_rwBydgAAAUE"]
[Sun Apr 12 08:22:21.806482 2026] [:error] [pid 25327:tid 25345] [client 20.111.60.230:17701] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adrlvS6h2tZEVJo9JFJmoAAAAAk"]
[Sun Apr 12 08:22:22.397956 2026] [:error] [pid 26567:tid 26578] [client 20.111.60.230:23637] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adrlvnhRpg6ptWFyFx0sFAAAAQk"]
[Sun Apr 12 08:22:22.989602 2026] [:error] [pid 25437:tid 25441] [client 20.111.60.230:23624] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adrlvnf97wYZje1ep_N9UgAAAMI"]
[Sun Apr 12 08:22:23.538354 2026] [:error] [pid 26599:tid 26608] [client 20.111.60.230:23647] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwpg.php"] [unique_id "adrlv3G89LXoQbk_rwByewAAAUY"]
[Sun Apr 12 08:22:24.011725 2026] [:error] [pid 60280:tid 60282] [client 20.111.60.230:23618] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ass.php"] [unique_id "adrlwHBlLnDOYuIykkgiaAAAAcA"]
[Sun Apr 12 08:22:24.501964 2026] [:error] [pid 25437:tid 25462] [client 20.111.60.230:17687] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ass.php"] [unique_id "adrlwHf97wYZje1ep_N9VQAAANc"]
[Sun Apr 12 08:22:24.988161 2026] [:error] [pid 25327:tid 25344] [client 20.111.60.230:54234] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ass.php"] [unique_id "adrlwC6h2tZEVJo9JFJmqwAAAAg"]
[Sun Apr 12 08:22:25.594570 2026] [:error] [pid 26599:tid 26605] [client 20.111.60.230:23672] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ass.php"] [unique_id "adrlwXG89LXoQbk_rwBygAAAAUM"]
[Sun Apr 12 08:22:26.095759 2026] [:error] [pid 25329:tid 25392] [client 20.111.60.230:54262] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adrlwmdcIYsS8Iyaj11d-wAAAIk"]
[Sun Apr 12 08:22:26.573012 2026] [:error] [pid 25329:tid 25397] [client 20.111.60.230:51425] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adrlwmdcIYsS8Iyaj11d_AAAAIw"]
[Sun Apr 12 08:22:27.049432 2026] [:error] [pid 25328:tid 25403] [client 20.111.60.230:9732] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adrlw8xUaQZxT-e0YsAitwAAAFY"]
[Sun Apr 12 08:22:27.529924 2026] [:error] [pid 25329:tid 25374] [client 20.111.60.230:54239] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "adrlw2dcIYsS8Iyaj11eAQAAAIA"]
[Sun Apr 12 08:22:28.116899 2026] [:error] [pid 60280:tid 60283] [client 20.111.60.230:63061] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "adrlxHBlLnDOYuIykkgicwAAAcE"]
[Sun Apr 12 08:22:28.796014 2026] [:error] [pid 25328:tid 25396] [client 20.111.60.230:54235] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "adrlxMxUaQZxT-e0YsAiwAAAAFM"]
[Sun Apr 12 08:22:29.262142 2026] [:error] [pid 26567:tid 26587] [client 20.111.60.230:50216] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "adrlxXhRpg6ptWFyFx0sHAAAARI"]
[Sun Apr 12 08:22:29.732956 2026] [:error] [pid 26599:tid 26611] [client 20.111.60.230:9756] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "adrlxXG89LXoQbk_rwByigAAAUk"]
[Sun Apr 12 08:22:30.258249 2026] [:error] [pid 25328:tid 25372] [client 20.111.60.230:57397] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fine.php"] [unique_id "adrlxsxUaQZxT-e0YsAiywAAAEc"]
[Sun Apr 12 08:22:30.796615 2026] [:error] [pid 26599:tid 26621] [client 20.111.60.230:9776] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fine.php"] [unique_id "adrlxnG89LXoQbk_rwByjgAAAVM"]
[Sun Apr 12 08:22:31.268636 2026] [:error] [pid 26567:tid 26584] [client 20.111.60.230:23621] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fine.php"] [unique_id "adrlx3hRpg6ptWFyFx0sJwAAAQ8"]
[Sun Apr 12 08:22:31.806814 2026] [:error] [pid 26600:tid 26645] [client 20.111.60.230:54250] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fine.php"] [unique_id "adrlx-1YwAZiXhQKLYqcgwAAAZA"]
[Sun Apr 12 08:22:32.279652 2026] [:error] [pid 25327:tid 25354] [client 20.111.60.230:54254] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zample.php"] [unique_id "adrlyC6h2tZEVJo9JFJmuQAAABI"]
[Sun Apr 12 08:22:32.752209 2026] [:error] [pid 26599:tid 26622] [client 20.111.60.230:51393] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zample.php"] [unique_id "adrlyHG89LXoQbk_rwBylAAAAVQ"]
[Sun Apr 12 08:22:33.225114 2026] [:error] [pid 26567:tid 26582] [client 20.111.60.230:17676] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zample.php"] [unique_id "adrlyXhRpg6ptWFyFx0sLgAAAQ0"]
[Sun Apr 12 08:22:33.771781 2026] [:error] [pid 60280:tid 60291] [client 20.111.60.230:63055] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zample.php"] [unique_id "adrlyXBlLnDOYuIykkgifAAAAck"]
[Sun Apr 12 08:22:34.237109 2026] [:error] [pid 26567:tid 26589] [client 20.111.60.230:17674] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adrlynhRpg6ptWFyFx0sMwAAARQ"]
[Sun Apr 12 08:22:34.713088 2026] [:error] [pid 25327:tid 25338] [client 20.111.60.230:51413] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adrlyi6h2tZEVJo9JFJmvgAAAAI"]
[Sun Apr 12 08:22:35.219598 2026] [:error] [pid 60280:tid 60306] [client 20.111.60.230:63095] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adrly3BlLnDOYuIykkgihwAAAdg"]
[Sun Apr 12 08:22:35.723842 2026] [:error] [pid 26567:tid 26586] [client 20.111.60.230:23661] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "adrly3hRpg6ptWFyFx0sNAAAARE"]
[Sun Apr 12 08:22:36.226703 2026] [:error] [pid 26567:tid 26583] [client 20.111.60.230:9747] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "adrlzHhRpg6ptWFyFx0sNwAAAQ4"]
[Sun Apr 12 08:22:36.712569 2026] [:error] [pid 25328:tid 25377] [client 20.111.60.230:9759] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "adrlzMxUaQZxT-e0YsAi1QAAAEo"]
[Sun Apr 12 08:22:37.202899 2026] [:error] [pid 26600:tid 26650] [client 20.111.60.230:54229] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "adrlze1YwAZiXhQKLYqchgAAAZU"]
[Sun Apr 12 08:22:37.884677 2026] [:error] [pid 26567:tid 26591] [client 20.111.60.230:23641] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xa.php"] [unique_id "adrlzXhRpg6ptWFyFx0sPgAAARY"]
[Sun Apr 12 08:22:38.365292 2026] [:error] [pid 25327:tid 25342] [client 20.111.60.230:50193] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adrlzi6h2tZEVJo9JFJmzQAAAAY"]
[Sun Apr 12 08:22:38.879801 2026] [:error] [pid 25327:tid 25351] [client 20.111.60.230:54256] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adrlzi6h2tZEVJo9JFJm1AAAAA8"]
[Sun Apr 12 08:22:39.371285 2026] [:error] [pid 25327:tid 25358] [client 20.111.60.230:17726] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adrlzy6h2tZEVJo9JFJm2gAAABY"]
[Sun Apr 12 08:22:39.901118 2026] [:error] [pid 25327:tid 25338] [client 20.111.60.230:48859] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php"] [unique_id "adrlzy6h2tZEVJo9JFJm2wAAAAI"]
[Sun Apr 12 08:22:40.480039 2026] [:error] [pid 60280:tid 60289] [client 20.111.60.230:48864] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inege.php"] [unique_id "adrl0HBlLnDOYuIykkgikgAAAcc"]
[Sun Apr 12 08:22:40.963274 2026] [:error] [pid 25329:tid 25382] [client 20.111.60.230:9752] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inege.php"] [unique_id "adrl0GdcIYsS8Iyaj11eDQAAAIQ"]
[Sun Apr 12 08:22:41.448281 2026] [:error] [pid 26600:tid 26653] [client 20.111.60.230:23635] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inege.php"] [unique_id "adrl0e1YwAZiXhQKLYqciwAAAZg"]
[Sun Apr 12 08:22:41.983529 2026] [:error] [pid 25327:tid 25336] [client 20.111.60.230:50212] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inege.php"] [unique_id "adrl0S6h2tZEVJo9JFJm3gAAAAA"]
[Sun Apr 12 08:22:42.547595 2026] [:error] [pid 26599:tid 26605] [client 20.111.60.230:63041] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrl0nG89LXoQbk_rwByoQAAAUM"]
[Sun Apr 12 08:22:43.084303 2026] [:error] [pid 26599:tid 26620] [client 20.111.60.230:51406] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrl03G89LXoQbk_rwByogAAAVI"]
[Sun Apr 12 08:22:43.685750 2026] [:error] [pid 25327:tid 25352] [client 20.111.60.230:53761] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrl0y6h2tZEVJo9JFJm3wAAABA"]
[Sun Apr 12 08:22:44.266761 2026] [:error] [pid 25327:tid 25344] [client 20.111.60.230:50210] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrl1C6h2tZEVJo9JFJm4gAAAAg"]
[Sun Apr 12 08:22:44.831469 2026] [:error] [pid 25327:tid 25356] [client 20.111.60.230:63089] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "adrl1C6h2tZEVJo9JFJm6QAAABQ"]
[Sun Apr 12 08:22:45.350010 2026] [:error] [pid 25328:tid 25369] [client 20.111.60.230:57364] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "adrl1cxUaQZxT-e0YsAi8gAAAEU"]
[Sun Apr 12 08:22:45.984008 2026] [:error] [pid 25327:tid 25338] [client 20.111.60.230:54269] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "adrl1S6h2tZEVJo9JFJm7AAAAAI"]
[Sun Apr 12 08:22:46.526327 2026] [:error] [pid 60280:tid 60293] [client 20.111.60.230:63085] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "adrl1nBlLnDOYuIykkgioQAAAcs"]
[Sun Apr 12 08:22:47.192734 2026] [:error] [pid 26567:tid 26592] [client 20.111.60.230:17709] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sf.php"] [unique_id "adrl13hRpg6ptWFyFx0sSgAAARc"]
[Sun Apr 12 08:22:47.703435 2026] [:error] [pid 26599:tid 26619] [client 20.111.60.230:62488] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sf.php"] [unique_id "adrl13G89LXoQbk_rwByrgAAAVE"]
[Sun Apr 12 08:22:48.278669 2026] [:error] [pid 26600:tid 26647] [client 20.111.60.230:51395] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sf.php"] [unique_id "adrl2O1YwAZiXhQKLYqcnwAAAZI"]
[Sun Apr 12 08:22:48.789081 2026] [:error] [pid 26600:tid 26642] [client 20.111.60.230:9765] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sf.php"] [unique_id "adrl2O1YwAZiXhQKLYqcoQAAAY0"]
[Sun Apr 12 08:22:49.260718 2026] [:error] [pid 26600:tid 26644] [client 20.111.60.230:17724] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no1.php"] [unique_id "adrl2e1YwAZiXhQKLYqcpQAAAY8"]
[Sun Apr 12 08:22:49.781002 2026] [:error] [pid 26600:tid 26630] [client 20.111.60.230:23644] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no1.php"] [unique_id "adrl2e1YwAZiXhQKLYqcqgAAAYE"]
[Sun Apr 12 08:22:50.302305 2026] [:error] [pid 60280:tid 60294] [client 20.111.60.230:53760] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no1.php"] [unique_id "adrl2nBlLnDOYuIykkgipwAAAcw"]
[Sun Apr 12 08:22:50.873445 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:23658] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no1.php"] [unique_id "adrl2i6h2tZEVJo9JFJm8gAAABc"]
[Sun Apr 12 08:22:51.373429 2026] [:error] [pid 25328:tid 25370] [client 20.111.60.230:62526] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/w2025.php"] [unique_id "adrl28xUaQZxT-e0YsAi_wAAAEY"]
[Sun Apr 12 08:22:51.845701 2026] [:error] [pid 26567:tid 26570] [client 20.111.60.230:23675] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/w2025.php"] [unique_id "adrl23hRpg6ptWFyFx0sUwAAAQE"]
[Sun Apr 12 08:22:52.344505 2026] [:error] [pid 25437:tid 25443] [client 20.111.60.230:51405] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/w2025.php"] [unique_id "adrl3Hf97wYZje1ep_N9ggAAAMQ"]
[Sun Apr 12 08:22:52.844727 2026] [:error] [pid 25437:tid 25439] [client 20.111.60.230:9784] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/w2025.php"] [unique_id "adrl3Hf97wYZje1ep_N9gwAAAMA"]
[Sun Apr 12 08:22:53.364141 2026] [:error] [pid 26600:tid 26644] [client 20.111.60.230:50221] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adrl3e1YwAZiXhQKLYqctQAAAY8"]
[Sun Apr 12 08:22:53.881789 2026] [:error] [pid 25437:tid 25457] [client 20.111.60.230:9773] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adrl3Xf97wYZje1ep_N9hQAAANI"]
[Sun Apr 12 08:22:54.453418 2026] [:error] [pid 25437:tid 25447] [client 20.111.60.230:63082] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adrl3nf97wYZje1ep_N9iQAAAMg"]
[Sun Apr 12 08:22:55.012862 2026] [:error] [pid 25328:tid 25394] [client 20.111.60.230:53821] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fvvff.php"] [unique_id "adrl38xUaQZxT-e0YsAjBwAAAFI"]
[Sun Apr 12 08:22:55.626534 2026] [:error] [pid 26567:tid 26592] [client 20.111.60.230:51423] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adrl33hRpg6ptWFyFx0sWgAAARc"]
[Sun Apr 12 08:22:56.178960 2026] [:error] [pid 25328:tid 25389] [client 20.111.60.230:54216] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adrl4MxUaQZxT-e0YsAjDwAAAFA"]
[Sun Apr 12 08:22:56.754204 2026] [:error] [pid 25327:tid 25345] [client 20.111.60.230:9762] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adrl4C6h2tZEVJo9JFJm_QAAAAk"]
[Sun Apr 12 08:22:57.421940 2026] [:error] [pid 25327:tid 25350] [client 20.111.60.230:9736] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a2.php"] [unique_id "adrl4S6h2tZEVJo9JFJnAgAAAA4"]
[Sun Apr 12 08:22:57.918091 2026] [:error] [pid 25328:tid 25364] [client 20.111.60.230:53773] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "adrl4cxUaQZxT-e0YsAjEQAAAEA"]
[Sun Apr 12 08:22:58.484700 2026] [:error] [pid 25328:tid 25401] [client 20.111.60.230:53788] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "adrl4sxUaQZxT-e0YsAjFQAAAFU"]
[Sun Apr 12 08:22:59.038436 2026] [:error] [pid 25327:tid 25353] [client 20.111.60.230:17719] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "adrl4y6h2tZEVJo9JFJnCQAAABE"]
[Sun Apr 12 08:22:59.560534 2026] [:error] [pid 25329:tid 25414] [client 20.111.60.230:63074] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "adrl42dcIYsS8Iyaj11eJgAAAJc"]
[Sun Apr 12 08:23:00.056789 2026] [:error] [pid 25327:tid 25344] [client 20.111.60.230:23663] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adrl5C6h2tZEVJo9JFJnEQAAAAg"]
[Sun Apr 12 08:23:00.536356 2026] [:error] [pid 25328:tid 25405] [client 20.111.60.230:56649] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adrl5MxUaQZxT-e0YsAjGwAAAFc"]
[Sun Apr 12 08:23:01.040064 2026] [:error] [pid 25327:tid 25351] [client 20.111.60.230:23630] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adrl5S6h2tZEVJo9JFJnFQAAAA8"]
[Sun Apr 12 08:23:01.561963 2026] [:error] [pid 25328:tid 25365] [client 20.111.60.230:48846] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "adrl5cxUaQZxT-e0YsAjIAAAAEE"]
[Sun Apr 12 08:23:02.118653 2026] [:error] [pid 25437:tid 25452] [client 20.111.60.230:54216] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrl5nf97wYZje1ep_N9jAAAAM0"]
[Sun Apr 12 08:23:02.668386 2026] [:error] [pid 25328:tid 25398] [client 20.111.60.230:54210] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrl5sxUaQZxT-e0YsAjJAAAAFQ"]
[Sun Apr 12 08:23:03.220611 2026] [:error] [pid 25328:tid 25367] [client 20.111.60.230:51424] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrl58xUaQZxT-e0YsAjJgAAAEM"]
[Sun Apr 12 08:23:03.812138 2026] [:error] [pid 25437:tid 25446] [client 20.111.60.230:9738] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrl53f97wYZje1ep_N9kAAAAMc"]
[Sun Apr 12 08:23:04.372572 2026] [:error] [pid 60280:tid 60287] [client 20.111.60.230:9781] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "adrl6HBlLnDOYuIykkgitgAAAcU"]
[Sun Apr 12 08:23:04.879157 2026] [:error] [pid 25328:tid 25380] [client 20.111.60.230:63095] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "adrl6MxUaQZxT-e0YsAjLAAAAEw"]
[Sun Apr 12 08:23:05.367712 2026] [:error] [pid 26567:tid 26589] [client 20.111.60.230:9735] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "adrl6XhRpg6ptWFyFx0sXwAAARQ"]
[Sun Apr 12 08:23:05.882579 2026] [:error] [pid 26599:tid 26612] [client 20.111.60.230:54221] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "adrl6XG89LXoQbk_rwByuAAAAUo"]
[Sun Apr 12 08:23:06.445880 2026] [:error] [pid 26600:tid 26651] [client 20.111.60.230:54247] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "adrl6u1YwAZiXhQKLYqcvgAAAZY"]
[Sun Apr 12 08:23:07.005058 2026] [:error] [pid 25327:tid 25355] [client 20.111.60.230:51435] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "adrl6y6h2tZEVJo9JFJnLgAAABM"]
[Sun Apr 12 08:23:07.488823 2026] [:error] [pid 25327:tid 25350] [client 20.111.60.230:9753] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "adrl6y6h2tZEVJo9JFJnMwAAAA4"]
[Sun Apr 12 08:23:08.039817 2026] [:error] [pid 25327:tid 25357] [client 20.111.60.230:23670] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "adrl7C6h2tZEVJo9JFJnNgAAABU"]
[Sun Apr 12 08:23:08.530656 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:53767] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adrl7C6h2tZEVJo9JFJnOgAAABc"]
[Sun Apr 12 08:23:09.020661 2026] [:error] [pid 25327:tid 25352] [client 20.111.60.230:51411] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adrl7S6h2tZEVJo9JFJnQQAAABA"]
[Sun Apr 12 08:23:09.488799 2026] [:error] [pid 26599:tid 26623] [client 20.111.60.230:51408] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adrl7XG89LXoQbk_rwByvgAAAVU"]
[Sun Apr 12 08:23:09.978290 2026] [:error] [pid 26567:tid 26578] [client 20.111.60.230:23668] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ol.php"] [unique_id "adrl7XhRpg6ptWFyFx0sZgAAAQk"]
[Sun Apr 12 08:23:10.458271 2026] [:error] [pid 60280:tid 60284] [client 20.111.60.230:53810] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adrl7nBlLnDOYuIykkgiuAAAAcI"]
[Sun Apr 12 08:23:10.939199 2026] [:error] [pid 25329:tid 25390] [client 20.111.60.230:17725] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adrl7mdcIYsS8Iyaj11eNgAAAIg"]
[Sun Apr 12 08:23:11.434120 2026] [:error] [pid 26600:tid 26651] [client 20.111.60.230:48882] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adrl7-1YwAZiXhQKLYqcywAAAZY"]
[Sun Apr 12 08:23:11.940566 2026] [:error] [pid 26600:tid 26636] [client 20.111.60.230:51416] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/f6.php"] [unique_id "adrl7-1YwAZiXhQKLYqczwAAAYc"]
[Sun Apr 12 08:23:12.446484 2026] [:error] [pid 26600:tid 26645] [client 20.111.60.230:17686] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adrl8O1YwAZiXhQKLYqc1AAAAZA"]
[Sun Apr 12 08:23:12.976227 2026] [:error] [pid 25327:tid 25338] [client 20.111.60.230:9745] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adrl8C6h2tZEVJo9JFJnTgAAAAI"]
[Sun Apr 12 08:23:13.480978 2026] [:error] [pid 26567:tid 26588] [client 20.111.60.230:53794] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adrl8XhRpg6ptWFyFx0sawAAARM"]
[Sun Apr 12 08:23:13.970464 2026] [:error] [pid 26567:tid 26584] [client 20.111.60.230:48885] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "adrl8XhRpg6ptWFyFx0sbgAAAQ8"]
[Sun Apr 12 08:23:14.551382 2026] [:error] [pid 60280:tid 60290] [client 20.111.60.230:62503] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/style.php"] [unique_id "adrl8nBlLnDOYuIykkgivwAAAcg"]
[Sun Apr 12 08:23:15.045687 2026] [:error] [pid 26567:tid 26577] [client 20.111.60.230:9740] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/style.php"] [unique_id "adrl83hRpg6ptWFyFx0scgAAAQg"]
[Sun Apr 12 08:23:15.530277 2026] [:error] [pid 25327:tid 25340] [client 20.111.60.230:51396] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/style.php"] [unique_id "adrl8y6h2tZEVJo9JFJnXAAAAAQ"]
[Sun Apr 12 08:23:16.014659 2026] [:error] [pid 25327:tid 25355] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Apr 12 08:23:16.277629 2026] [:error] [pid 25327:tid 25349] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Apr 12 08:23:16.513150 2026] [:error] [pid 25327:tid 25347] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Apr 12 08:23:16.998003 2026] [:error] [pid 25327:tid 25360] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/bless4.php
[Sun Apr 12 08:23:18.546479 2026] [:error] [pid 25327:tid 25360] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sun Apr 12 08:23:18.784344 2026] [:error] [pid 25327:tid 25336] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Sun Apr 12 08:23:19.089899 2026] [:error] [pid 25327:tid 25337] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Sun Apr 12 08:23:19.326042 2026] [:error] [pid 25327:tid 25350] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sun Apr 12 08:23:19.562537 2026] [:error] [pid 25327:tid 25340] [client 20.111.60.230:63045] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 12 08:23:20.039278 2026] [:error] [pid 25327:tid 25345] [client 20.111.60.230:63045] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adrl-C6h2tZEVJo9JFJneAAAAAk"]
[Sun Apr 12 08:23:20.540287 2026] [:error] [pid 25327:tid 25355] [client 20.111.60.230:48848] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adrl-C6h2tZEVJo9JFJnewAAABM"]
[Sun Apr 12 08:23:21.103144 2026] [:error] [pid 26599:tid 26614] [client 20.111.60.230:48890] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adrl-XG89LXoQbk_rwByyQAAAUw"]
[Sun Apr 12 08:23:21.604930 2026] [:error] [pid 26599:tid 26624] [client 20.111.60.230:17703] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adrl-XG89LXoQbk_rwByygAAAVY"]
[Sun Apr 12 08:23:22.120551 2026] [:error] [pid 25327:tid 25337] [client 20.111.60.230:50192] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adrl-i6h2tZEVJo9JFJnhgAAAAE"]
[Sun Apr 12 08:23:22.652041 2026] [:error] [pid 25327:tid 25346] [client 20.111.60.230:51446] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adrl-i6h2tZEVJo9JFJniQAAAAo"]
[Sun Apr 12 08:23:23.166250 2026] [:error] [pid 26567:tid 26585] [client 20.111.60.230:63042] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adrl-3hRpg6ptWFyFx0shQAAARA"]
[Sun Apr 12 08:23:23.661250 2026] [:error] [pid 25327:tid 25342] [client 20.111.60.230:17711] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-update.php"] [unique_id "adrl-y6h2tZEVJo9JFJnkQAAAAY"]
[Sun Apr 12 08:23:24.160486 2026] [:error] [pid 25327:tid 25346] [client 20.111.60.230:50182] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adrl_C6h2tZEVJo9JFJnmAAAAAo"]
[Sun Apr 12 08:23:24.661925 2026] [:error] [pid 26567:tid 26592] [client 20.111.60.230:63060] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adrl_HhRpg6ptWFyFx0siAAAARc"]
[Sun Apr 12 08:23:25.142252 2026] [:error] [pid 25327:tid 25338] [client 20.111.60.230:50217] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adrl_S6h2tZEVJo9JFJnnAAAAAI"]
[Sun Apr 12 08:23:25.621718 2026] [:error] [pid 25327:tid 25342] [client 20.111.60.230:53784] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sbhu.php"] [unique_id "adrl_S6h2tZEVJo9JFJnogAAAAY"]
[Sun Apr 12 08:23:26.099950 2026] [:error] [pid 60280:tid 60283] [client 20.111.60.230:51410] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adrl_nBlLnDOYuIykkgiygAAAcE"]
[Sun Apr 12 08:23:26.597027 2026] [:error] [pid 25328:tid 25403] [client 20.111.60.230:23678] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adrl_sxUaQZxT-e0YsAjQAAAAFY"]
[Sun Apr 12 08:23:27.079806 2026] [:error] [pid 26600:tid 26639] [client 20.111.60.230:53791] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adrl_-1YwAZiXhQKLYqc1wAAAYo"]
[Sun Apr 12 08:23:27.584303 2026] [:error] [pid 25328:tid 25383] [client 20.111.60.230:23633] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "adrl_8xUaQZxT-e0YsAjQwAAAE0"]
[Sun Apr 12 08:23:28.055890 2026] [:error] [pid 26599:tid 26623] [client 20.111.60.230:53766] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adrmAHG89LXoQbk_rwByzwAAAVU"]
[Sun Apr 12 08:23:28.527661 2026] [:error] [pid 25328:tid 25379] [client 20.111.60.230:9779] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adrmAMxUaQZxT-e0YsAjRwAAAEs"]
[Sun Apr 12 08:23:29.000278 2026] [:error] [pid 25327:tid 25357] [client 20.111.60.230:62496] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adrmAC6h2tZEVJo9JFJnswAAABU"]
[Sun Apr 12 08:23:29.482972 2026] [:error] [pid 26599:tid 26613] [client 20.111.60.230:23652] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adrmAXG89LXoQbk_rwBy1QAAAUs"]
[Sun Apr 12 08:23:29.951282 2026] [:error] [pid 26599:tid 26610] [client 20.111.60.230:53807] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrmAXG89LXoQbk_rwBy2QAAAUg"]
[Sun Apr 12 08:23:30.436116 2026] [:error] [pid 25327:tid 25352] [client 20.111.60.230:17723] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrmAi6h2tZEVJo9JFJntwAAABA"]
[Sun Apr 12 08:23:30.902661 2026] [:error] [pid 26599:tid 26619] [client 20.111.60.230:9782] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrmAnG89LXoQbk_rwBy3QAAAVE"]
[Sun Apr 12 08:23:31.374455 2026] [:error] [pid 26567:tid 26575] [client 20.111.60.230:63093] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "adrmA3hRpg6ptWFyFx0sjQAAAQY"]
[Sun Apr 12 08:23:31.841544 2026] [:error] [pid 26567:tid 26584] [client 20.111.60.230:17677] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmA3hRpg6ptWFyFx0sjwAAAQ8"]
[Sun Apr 12 08:23:32.332101 2026] [:error] [pid 25437:tid 25444] [client 20.111.60.230:48856] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmBHf97wYZje1ep_N9qAAAAMU"]
[Sun Apr 12 08:23:32.795996 2026] [:error] [pid 25328:tid 25372] [client 20.111.60.230:17682] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmBMxUaQZxT-e0YsAjTAAAAEc"]
[Sun Apr 12 08:23:33.263043 2026] [:error] [pid 25328:tid 25401] [client 20.111.60.230:54243] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmBcxUaQZxT-e0YsAjTgAAAFU"]
[Sun Apr 12 08:23:33.733203 2026] [:error] [pid 25329:tid 25397] [client 20.111.60.230:54266] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adrmBWdcIYsS8Iyaj11ePgAAAIw"]
[Sun Apr 12 08:23:34.203387 2026] [:error] [pid 25329:tid 25393] [client 20.111.60.230:54268] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adrmBmdcIYsS8Iyaj11eQgAAAIo"]
[Sun Apr 12 08:23:34.673596 2026] [:error] [pid 25329:tid 25413] [client 20.111.60.230:54246] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adrmBmdcIYsS8Iyaj11eQwAAAJY"]
[Sun Apr 12 08:23:35.152795 2026] [:error] [pid 25329:tid 25404] [client 20.111.60.230:53789] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "adrmB2dcIYsS8Iyaj11eRAAAAJA"]
[Sun Apr 12 08:23:35.625955 2026] [:error] [pid 25328:tid 25366] [client 20.111.60.230:54251] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goods.php"] [unique_id "adrmB8xUaQZxT-e0YsAjUQAAAEI"]
[Sun Apr 12 08:23:36.094756 2026] [:error] [pid 25329:tid 25406] [client 20.111.60.230:9446] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goods.php"] [unique_id "adrmCGdcIYsS8Iyaj11eSAAAAJE"]
[Sun Apr 12 08:23:36.559765 2026] [:error] [pid 26599:tid 26620] [client 20.111.60.230:57390] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goods.php"] [unique_id "adrmCHG89LXoQbk_rwBy5gAAAVI"]
[Sun Apr 12 08:23:37.128003 2026] [:error] [pid 26599:tid 26607] [client 20.111.60.230:54263] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/goods.php"] [unique_id "adrmCXG89LXoQbk_rwBy7AAAAUU"]
[Sun Apr 12 08:23:37.630430 2026] [:error] [pid 25327:tid 25340] [client 20.111.60.230:51431] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmCS6h2tZEVJo9JFJnzgAAAAQ"]
[Sun Apr 12 08:23:38.134120 2026] [:error] [pid 25328:tid 25379] [client 20.111.60.230:23625] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmCsxUaQZxT-e0YsAjWAAAAEs"]
[Sun Apr 12 08:23:38.609657 2026] [:error] [pid 26600:tid 26642] [client 20.111.60.230:62499] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmCu1YwAZiXhQKLYqc3wAAAY0"]
[Sun Apr 12 08:23:39.090786 2026] [:error] [pid 26600:tid 26650] [client 20.111.60.230:17710] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "adrmC-1YwAZiXhQKLYqc4AAAAZU"]
[Sun Apr 12 08:23:39.591198 2026] [:error] [pid 26600:tid 26633] [client 20.111.60.230:63102] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adrmC-1YwAZiXhQKLYqc4wAAAYQ"]
[Sun Apr 12 08:23:40.126447 2026] [:error] [pid 26600:tid 26641] [client 20.111.60.230:9789] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adrmDO1YwAZiXhQKLYqc6QAAAYw"]
[Sun Apr 12 08:23:40.791171 2026] [:error] [pid 25437:tid 25463] [client 20.111.60.230:54244] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adrmDHf97wYZje1ep_N9rAAAANg"]
[Sun Apr 12 08:23:41.317573 2026] [:error] [pid 25327:tid 25358] [client 20.111.60.230:17708] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/222.php"] [unique_id "adrmDS6h2tZEVJo9JFJn2AAAABY"]
[Sun Apr 12 08:23:41.893948 2026] [:error] [pid 25327:tid 25344] [client 20.111.60.230:23642] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adrmDS6h2tZEVJo9JFJn3QAAAAg"]
[Sun Apr 12 08:23:42.511894 2026] [:error] [pid 60280:tid 60302] [client 20.111.60.230:23677] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adrmDnBlLnDOYuIykkgizwAAAdQ"]
[Sun Apr 12 08:23:42.985395 2026] [:error] [pid 25328:tid 25365] [client 20.111.60.230:56679] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adrmDsxUaQZxT-e0YsAjXAAAAEE"]
[Sun Apr 12 08:23:43.529508 2026] [:error] [pid 26599:tid 26622] [client 20.111.60.230:53762] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adrmD3G89LXoQbk_rwBy9gAAAVQ"]
[Sun Apr 12 08:23:44.035354 2026] [:error] [pid 25328:tid 25396] [client 20.111.60.230:56640] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fff.php"] [unique_id "adrmEMxUaQZxT-e0YsAjXQAAAFM"]
[Sun Apr 12 08:23:44.562856 2026] [:error] [pid 26599:tid 26612] [client 20.111.60.230:51412] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fff.php"] [unique_id "adrmEHG89LXoQbk_rwBy_QAAAUo"]
[Sun Apr 12 08:23:45.064283 2026] [:error] [pid 26567:tid 26580] [client 20.111.60.230:23617] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fff.php"] [unique_id "adrmEXhRpg6ptWFyFx0smgAAAQs"]
[Sun Apr 12 08:23:45.687116 2026] [:error] [pid 25327:tid 25350] [client 20.111.60.230:56662] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fff.php"] [unique_id "adrmES6h2tZEVJo9JFJn6AAAAA4"]
[Sun Apr 12 08:23:46.155316 2026] [:error] [pid 25327:tid 25351] [client 20.111.60.230:62511] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmEi6h2tZEVJo9JFJn6wAAAA8"]
[Sun Apr 12 08:23:46.776832 2026] [:error] [pid 25327:tid 25358] [client 20.111.60.230:17696] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmEi6h2tZEVJo9JFJn7AAAABY"]
[Sun Apr 12 08:23:47.284065 2026] [:error] [pid 26600:tid 26636] [client 20.111.60.230:53806] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmE-1YwAZiXhQKLYqc7QAAAYc"]
[Sun Apr 12 08:23:47.854724 2026] [:error] [pid 26599:tid 26620] [client 20.111.60.230:17691] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmE3G89LXoQbk_rwBzAwAAAVI"]
[Sun Apr 12 08:23:48.434364 2026] [:error] [pid 60280:tid 60284] [client 20.111.60.230:51417] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we.php"] [unique_id "adrmFHBlLnDOYuIykkgi2AAAAcI"]
[Sun Apr 12 08:23:49.012695 2026] [:error] [pid 26567:tid 26571] [client 20.111.60.230:23671] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we.php"] [unique_id "adrmFXhRpg6ptWFyFx0smwAAAQI"]
[Sun Apr 12 08:23:49.490825 2026] [:error] [pid 26600:tid 26639] [client 20.111.60.230:53800] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we.php"] [unique_id "adrmFe1YwAZiXhQKLYqc9wAAAYo"]
[Sun Apr 12 08:23:49.971539 2026] [:error] [pid 25328:tid 25401] [client 20.111.60.230:50209] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/we.php"] [unique_id "adrmFcxUaQZxT-e0YsAjYAAAAFU"]
[Sun Apr 12 08:23:50.472886 2026] [:error] [pid 26567:tid 26579] [client 20.111.60.230:17715] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpha.php"] [unique_id "adrmFnhRpg6ptWFyFx0soAAAAQo"]
[Sun Apr 12 08:23:50.975905 2026] [:error] [pid 26600:tid 26652] [client 20.111.60.230:17693] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpha.php"] [unique_id "adrmFu1YwAZiXhQKLYqc-wAAAZc"]
[Sun Apr 12 08:23:51.478933 2026] [:error] [pid 25328:tid 25369] [client 20.111.60.230:23664] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpha.php"] [unique_id "adrmF8xUaQZxT-e0YsAjYgAAAEU"]
[Sun Apr 12 08:23:51.976428 2026] [:error] [pid 26600:tid 26630] [client 20.111.60.230:50239] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alpha.php"] [unique_id "adrmF-1YwAZiXhQKLYqdAgAAAYE"]
[Sun Apr 12 08:23:52.480246 2026] [:error] [pid 26600:tid 26653] [client 20.111.60.230:56654] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adrmGO1YwAZiXhQKLYqdBAAAAZg"]
[Sun Apr 12 08:23:52.945723 2026] [:error] [pid 25437:tid 25456] [client 20.111.60.230:48844] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adrmGHf97wYZje1ep_N9tAAAANE"]
[Sun Apr 12 08:23:53.422749 2026] [:error] [pid 60280:tid 60290] [client 20.111.60.230:23665] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adrmGXBlLnDOYuIykkgi3gAAAcg"]
[Sun Apr 12 08:23:53.912787 2026] [:error] [pid 26600:tid 26646] [client 20.111.60.230:23674] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "adrmGe1YwAZiXhQKLYqdBgAAAZE"]
[Sun Apr 12 08:23:54.393068 2026] [:error] [pid 25327:tid 25343] [client 20.111.60.230:51436] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adrmGi6h2tZEVJo9JFJn9gAAAAc"]
[Sun Apr 12 08:23:54.870795 2026] [:error] [pid 26600:tid 26641] [client 20.111.60.230:50215] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adrmGu1YwAZiXhQKLYqdCQAAAYw"]
[Sun Apr 12 08:23:55.344280 2026] [:error] [pid 25328:tid 25391] [client 20.111.60.230:62491] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adrmG8xUaQZxT-e0YsAjZgAAAFE"]
[Sun Apr 12 08:23:55.812344 2026] [:error] [pid 25328:tid 25405] [client 20.111.60.230:51438] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "adrmG8xUaQZxT-e0YsAjaQAAAFc"]
[Sun Apr 12 08:23:56.288268 2026] [:error] [pid 25328:tid 25370] [client 20.111.60.230:62502] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adrmHMxUaQZxT-e0YsAjcAAAAEY"]
[Sun Apr 12 08:23:56.813098 2026] [:error] [pid 26600:tid 26633] [client 20.111.60.230:17727] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adrmHO1YwAZiXhQKLYqdDwAAAYQ"]
[Sun Apr 12 08:23:57.290689 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:62509] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adrmHS6h2tZEVJo9JFJn-QAAABc"]
[Sun Apr 12 08:23:57.819516 2026] [:error] [pid 25327:tid 25341] [client 20.111.60.230:63070] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "adrmHS6h2tZEVJo9JFJn_AAAAAU"]
[Sun Apr 12 08:23:58.308464 2026] [:error] [pid 25327:tid 25345] [client 20.111.60.230:17722] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adrmHi6h2tZEVJo9JFJn_wAAAAk"]
[Sun Apr 12 08:23:58.820041 2026] [:error] [pid 25327:tid 25344] [client 20.111.60.230:9441] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adrmHi6h2tZEVJo9JFJoBQAAAAg"]
[Sun Apr 12 08:23:59.289961 2026] [:error] [pid 25327:tid 25343] [client 20.111.60.230:51407] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adrmHy6h2tZEVJo9JFJoCAAAAAc"]
[Sun Apr 12 08:23:59.804080 2026] [:error] [pid 25327:tid 25356] [client 20.111.60.230:63088] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adrmHy6h2tZEVJo9JFJoDQAAABQ"]
[Sun Apr 12 08:24:00.289842 2026] [:error] [pid 26599:tid 26602] [client 20.111.60.230:9766] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adrmIHG89LXoQbk_rwBzDgAAAUA"]
[Sun Apr 12 08:24:00.776710 2026] [:error] [pid 26600:tid 26634] [client 20.111.60.230:62525] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adrmIO1YwAZiXhQKLYqdGwAAAYU"]
[Sun Apr 12 08:24:01.242606 2026] [:error] [pid 26600:tid 26635] [client 20.111.60.230:48880] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adrmIe1YwAZiXhQKLYqdHgAAAYY"]
[Sun Apr 12 08:24:01.731815 2026] [:error] [pid 26600:tid 26647] [client 20.111.60.230:48876] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "adrmIe1YwAZiXhQKLYqdHwAAAZI"]
[Sun Apr 12 08:24:02.220871 2026] [:error] [pid 26599:tid 26610] [client 20.111.60.230:53774] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adrmInG89LXoQbk_rwBzEgAAAUg"]
[Sun Apr 12 08:24:02.740393 2026] [:error] [pid 26599:tid 26606] [client 20.111.60.230:17699] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adrmInG89LXoQbk_rwBzEwAAAUQ"]
[Sun Apr 12 08:24:03.217092 2026] [:error] [pid 26600:tid 26649] [client 20.111.60.230:9734] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adrmI-1YwAZiXhQKLYqdLAAAAZQ"]
[Sun Apr 12 08:24:03.745442 2026] [:error] [pid 26567:tid 26576] [client 20.111.60.230:9775] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adrmI3hRpg6ptWFyFx0srAAAAQc"]
[Sun Apr 12 08:24:04.216290 2026] [:error] [pid 26600:tid 26630] [client 20.111.60.230:9785] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "adrmJO1YwAZiXhQKLYqdMQAAAYE"]
[Sun Apr 12 08:24:04.686068 2026] [:error] [pid 25329:tid 25404] [client 20.111.60.230:51420] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "adrmJGdcIYsS8Iyaj11eVQAAAJA"]
[Sun Apr 12 08:24:05.160656 2026] [:error] [pid 60280:tid 60289] [client 20.111.60.230:48872] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "adrmJXBlLnDOYuIykkgi6AAAAcc"]
[Sun Apr 12 08:24:05.638642 2026] [:error] [pid 26567:tid 26588] [client 20.111.60.230:62485] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "adrmJXhRpg6ptWFyFx0srgAAARM"]
[Sun Apr 12 08:24:06.116968 2026] [:error] [pid 26599:tid 26617] [client 20.111.60.230:63066] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adrmJnG89LXoQbk_rwBzFwAAAU8"]
[Sun Apr 12 08:24:06.658503 2026] [:error] [pid 26599:tid 26622] [client 20.111.60.230:48878] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adrmJnG89LXoQbk_rwBzGwAAAVQ"]
[Sun Apr 12 08:24:07.134918 2026] [:error] [pid 26599:tid 26602] [client 20.111.60.230:63078] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adrmJ3G89LXoQbk_rwBzIAAAAUA"]
[Sun Apr 12 08:24:07.606880 2026] [:error] [pid 26599:tid 26610] [client 20.111.60.230:53797] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp.php"] [unique_id "adrmJ3G89LXoQbk_rwBzIgAAAUg"]
[Sun Apr 12 08:24:08.075519 2026] [:error] [pid 25327:tid 25346] [client 20.111.60.230:48883] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adrmKC6h2tZEVJo9JFJoEwAAAAo"]
[Sun Apr 12 08:24:08.575934 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:23656] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adrmKC6h2tZEVJo9JFJoGAAAABc"]
[Sun Apr 12 08:24:09.045585 2026] [:error] [pid 26599:tid 26615] [client 20.111.60.230:53808] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adrmKXG89LXoQbk_rwBzJQAAAU0"]
[Sun Apr 12 08:24:09.543990 2026] [:error] [pid 25327:tid 25349] [client 20.111.60.230:17685] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adrmKS6h2tZEVJo9JFJoHAAAAA0"]
[Sun Apr 12 08:24:10.070874 2026] [:error] [pid 26600:tid 26644] [client 20.111.60.230:50197] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrmKu1YwAZiXhQKLYqdNgAAAY8"]
[Sun Apr 12 08:24:10.559378 2026] [:error] [pid 25327:tid 25352] [client 20.111.60.230:9456] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrmKi6h2tZEVJo9JFJoIQAAABA"]
[Sun Apr 12 08:24:11.064727 2026] [:error] [pid 26599:tid 26609] [client 20.111.60.230:50207] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrmK3G89LXoQbk_rwBzJwAAAUc"]
[Sun Apr 12 08:24:11.546892 2026] [:error] [pid 26599:tid 26625] [client 20.111.60.230:50232] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fe5.php"] [unique_id "adrmK3G89LXoQbk_rwBzKQAAAVc"]
[Sun Apr 12 08:24:12.072438 2026] [:error] [pid 26599:tid 26618] [client 20.111.60.230:9769] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adrmLHG89LXoQbk_rwBzLgAAAVA"]
[Sun Apr 12 08:24:12.547843 2026] [:error] [pid 26600:tid 26641] [client 20.111.60.230:63065] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adrmLO1YwAZiXhQKLYqdOAAAAYw"]
[Sun Apr 12 08:24:13.061070 2026] [:error] [pid 26600:tid 26649] [client 20.111.60.230:50235] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adrmLe1YwAZiXhQKLYqdOgAAAZQ"]
[Sun Apr 12 08:24:13.563743 2026] [:error] [pid 25437:tid 25457] [client 20.111.60.230:48894] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adrmLXf97wYZje1ep_N9wAAAANI"]
[Sun Apr 12 08:24:14.085402 2026] [:error] [pid 25329:tid 25395] [client 20.111.60.230:53782] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/av.php"] [unique_id "adrmLmdcIYsS8Iyaj11eXQAAAIs"]
[Sun Apr 12 08:24:14.704157 2026] [:error] [pid 25327:tid 25336] [client 20.111.60.230:48874] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/av.php"] [unique_id "adrmLi6h2tZEVJo9JFJoJAAAAAA"]
[Sun Apr 12 08:24:15.238684 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:48888] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/av.php"] [unique_id "adrmLy6h2tZEVJo9JFJoJwAAABc"]
[Sun Apr 12 08:24:15.832123 2026] [:error] [pid 26599:tid 26609] [client 20.111.60.230:23640] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/av.php"] [unique_id "adrmL3G89LXoQbk_rwBzNgAAAUc"]
[Sun Apr 12 08:24:16.338725 2026] [:error] [pid 26599:tid 26618] [client 20.111.60.230:50184] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "adrmMHG89LXoQbk_rwBzPAAAAVA"]
[Sun Apr 12 08:24:16.866918 2026] [:error] [pid 25329:tid 25378] [client 20.111.60.230:62496] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "adrmMGdcIYsS8Iyaj11eXwAAAII"]
[Sun Apr 12 08:24:17.419285 2026] [:error] [pid 26567:tid 26590] [client 20.111.60.230:51452] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "adrmMXhRpg6ptWFyFx0stQAAARU"]
[Sun Apr 12 08:24:18.006077 2026] [:error] [pid 26599:tid 26618] [client 20.111.60.230:48853] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abcd.php"] [unique_id "adrmMnG89LXoQbk_rwBzSAAAAVA"]
[Sun Apr 12 08:24:18.524795 2026] [:error] [pid 25327:tid 25360] [client 20.111.60.230:48832] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fi.php"] [unique_id "adrmMi6h2tZEVJo9JFJoMwAAABg"]
[Sun Apr 12 08:24:19.056781 2026] [:error] [pid 25327:tid 25348] [client 20.111.60.230:63101] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Sun Apr 12 08:24:19.293593 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:63101] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sun Apr 12 08:24:19.768983 2026] [:error] [pid 25327:tid 25347] [client 20.111.60.230:63101] [client 20.111.60.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adrmMy6h2tZEVJo9JFJoOwAAAAs"]
[Sun Apr 12 08:24:20.338795 2026] [:error] [pid 26599:tid 26622] [client 20.111.60.230:23650] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Apr 12 08:24:21.049611 2026] [:error] [pid 26599:tid 26624] [client 20.111.60.230:23650] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Sun Apr 12 08:24:21.287812 2026] [:error] [pid 26599:tid 26623] [client 20.111.60.230:23650] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sun Apr 12 08:24:21.522979 2026] [:error] [pid 26599:tid 26619] [client 20.111.60.230:23650] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Sun Apr 12 08:24:21.767900 2026] [:error] [pid 26599:tid 26602] [client 20.111.60.230:23650] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sun Apr 12 08:24:22.005072 2026] [:error] [pid 26599:tid 26621] [client 20.111.60.230:23650] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sun Apr 12 08:24:22.238525 2026] [:error] [pid 26599:tid 26617] [client 20.111.60.230:23650] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adrmNnG89LXoQbk_rwBzXwAAAU8"]
[Sun Apr 12 08:24:22.814825 2026] [:error] [pid 26600:tid 26633] [client 20.111.60.230:23620] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adrmNu1YwAZiXhQKLYqdRwAAAYQ"]
[Sun Apr 12 08:24:23.294433 2026] [:error] [pid 26599:tid 26625] [client 20.111.60.230:53813] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adrmN3G89LXoQbk_rwBzYQAAAVc"]
[Sun Apr 12 08:24:23.766839 2026] [:error] [pid 26600:tid 26647] [client 20.111.60.230:23653] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gssdd.php"] [unique_id "adrmN-1YwAZiXhQKLYqdSgAAAZI"]
[Sun Apr 12 08:24:24.268407 2026] [:error] [pid 25327:tid 25355] [client 20.111.60.230:9787] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "adrmOC6h2tZEVJo9JFJoQAAAABM"]
[Sun Apr 12 08:24:24.740197 2026] [:error] [pid 26567:tid 26587] [client 20.111.60.230:50185] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "adrmOHhRpg6ptWFyFx0stwAAARI"]
[Sun Apr 12 08:24:25.254600 2026] [:error] [pid 26599:tid 26609] [client 20.111.60.230:51394] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "adrmOXG89LXoQbk_rwBzZwAAAUc"]
[Sun Apr 12 08:24:25.785507 2026] [:error] [pid 25327:tid 25351] [client 20.111.60.230:23646] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "adrmOS6h2tZEVJo9JFJoQgAAAA8"]
[Sun Apr 12 08:24:26.338890 2026] [:error] [pid 25327:tid 25342] [client 20.111.60.230:51398] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bs1.php"] [unique_id "adrmOi6h2tZEVJo9JFJoRAAAAAY"]
[Sun Apr 12 08:24:26.849312 2026] [:error] [pid 26600:tid 26641] [client 20.111.60.230:9788] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bs1.php"] [unique_id "adrmOu1YwAZiXhQKLYqdTwAAAYw"]
[Sun Apr 12 08:24:27.325993 2026] [:error] [pid 26599:tid 26607] [client 20.111.60.230:53804] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bs1.php"] [unique_id "adrmO3G89LXoQbk_rwBzbgAAAUU"]
[Sun Apr 12 08:24:27.861516 2026] [:error] [pid 26600:tid 26652] [client 20.111.60.230:53771] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bs1.php"] [unique_id "adrmO-1YwAZiXhQKLYqdWAAAAZc"]
[Sun Apr 12 08:24:28.357051 2026] [:error] [pid 26599:tid 26609] [client 20.111.60.230:9731] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bengi.php"] [unique_id "adrmPHG89LXoQbk_rwBzcQAAAUc"]
[Sun Apr 12 08:24:28.901749 2026] [:error] [pid 26600:tid 26629] [client 20.111.60.230:9729] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bengi.php"] [unique_id "adrmPO1YwAZiXhQKLYqdXQAAAYA"]
[Sun Apr 12 08:24:29.376870 2026] [:error] [pid 26600:tid 26643] [client 20.111.60.230:63087] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bengi.php"] [unique_id "adrmPe1YwAZiXhQKLYqdZAAAAY4"]
[Sun Apr 12 08:24:29.917128 2026] [:error] [pid 26600:tid 26638] [client 20.111.60.230:51414] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bengi.php"] [unique_id "adrmPe1YwAZiXhQKLYqdaQAAAYk"]
[Sun Apr 12 08:24:30.415330 2026] [:error] [pid 25327:tid 25355] [client 20.111.60.230:56642] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adrmPi6h2tZEVJo9JFJoTQAAABM"]
[Sun Apr 12 08:24:30.963470 2026] [:error] [pid 26600:tid 26653] [client 20.111.60.230:54236] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adrmPu1YwAZiXhQKLYqdbgAAAZg"]
[Sun Apr 12 08:24:31.520357 2026] [:error] [pid 25327:tid 25336] [client 20.111.60.230:56686] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adrmPy6h2tZEVJo9JFJoTwAAAAA"]
[Sun Apr 12 08:24:32.080039 2026] [:error] [pid 26600:tid 26652] [client 20.111.60.230:63079] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adrmQO1YwAZiXhQKLYqddgAAAZc"]
[Sun Apr 12 08:24:32.587579 2026] [:error] [pid 26600:tid 26641] [client 20.111.60.230:63080] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/axx.php"] [unique_id "adrmQO1YwAZiXhQKLYqdewAAAYw"]
[Sun Apr 12 08:24:33.168726 2026] [:error] [pid 25327:tid 25353] [client 20.111.60.230:62477] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/axx.php"] [unique_id "adrmQS6h2tZEVJo9JFJoUQAAABE"]
[Sun Apr 12 08:24:33.710179 2026] [:error] [pid 25327:tid 25359] [client 20.111.60.230:63073] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/axx.php"] [unique_id "adrmQS6h2tZEVJo9JFJoVAAAABc"]
[Sun Apr 12 08:24:34.209708 2026] [:error] [pid 25327:tid 25337] [client 20.111.60.230:62480] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/axx.php"] [unique_id "adrmQi6h2tZEVJo9JFJoVQAAAAE"]
[Sun Apr 12 08:24:34.838737 2026] [:error] [pid 25327:tid 25343] [client 20.111.60.230:62482] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adrmQi6h2tZEVJo9JFJoWgAAAAc"]
[Sun Apr 12 08:24:35.326524 2026] [:error] [pid 26599:tid 26612] [client 20.111.60.230:23669] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adrmQ3G89LXoQbk_rwBzeQAAAUo"]
[Sun Apr 12 08:24:35.840726 2026] [:error] [pid 26600:tid 26646] [client 20.111.60.230:9433] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adrmQ-1YwAZiXhQKLYqdgwAAAZE"]
[Sun Apr 12 08:24:36.324596 2026] [:error] [pid 26599:tid 26625] [client 20.111.60.230:57381] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfashell.php"] [unique_id "adrmRHG89LXoQbk_rwBzfAAAAVc"]
[Sun Apr 12 08:24:36.854199 2026] [:error] [pid 25327:tid 25351] [client 20.111.60.230:48844] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "adrmRC6h2tZEVJo9JFJoYQAAAA8"]
[Sun Apr 12 08:24:37.424590 2026] [:error] [pid 25437:tid 25442] [client 20.111.60.230:9770] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "adrmRXf97wYZje1ep_N9xQAAAMM"]
[Sun Apr 12 08:24:37.945421 2026] [:error] [pid 26599:tid 26619] [client 20.111.60.230:48873] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "adrmRXG89LXoQbk_rwBzgQAAAVE"]
[Sun Apr 12 08:24:38.468298 2026] [:error] [pid 26600:tid 26645] [client 20.111.60.230:50202] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "adrmRu1YwAZiXhQKLYqdhgAAAZA"]
[Sun Apr 12 08:24:39.051506 2026] [:error] [pid 26599:tid 26606] [client 20.111.60.230:62513] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adrmR3G89LXoQbk_rwBzhQAAAUQ"]
[Sun Apr 12 08:24:39.650097 2026] [:error] [pid 26600:tid 26648] [client 20.111.60.230:9739] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adrmR-1YwAZiXhQKLYqdjAAAAZM"]
[Sun Apr 12 08:24:40.211673 2026] [:error] [pid 25437:tid 25458] [client 20.111.60.230:48881] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adrmSHf97wYZje1ep_N9xwAAANM"]
[Sun Apr 12 08:24:40.810302 2026] [:error] [pid 26599:tid 26612] [client 20.111.60.230:17702] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/acp.php"] [unique_id "adrmSHG89LXoQbk_rwBzigAAAUo"]
[Sun Apr 12 08:24:41.343905 2026] [:error] [pid 25327:tid 25338] [client 20.111.60.230:9411] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "adrmSS6h2tZEVJo9JFJoYwAAAAI"]
[Sun Apr 12 08:24:41.945861 2026] [:error] [pid 25327:tid 25355] [client 20.111.60.230:54238] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "adrmSS6h2tZEVJo9JFJoZQAAABM"]
[Sun Apr 12 08:24:42.505180 2026] [:error] [pid 26567:tid 26581] [client 20.111.60.230:57403] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "adrmSnhRpg6ptWFyFx0swAAAAQw"]
[Sun Apr 12 08:24:43.089908 2026] [:error] [pid 60280:tid 60291] [client 20.111.60.230:51453] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file48.php"] [unique_id "adrmS3BlLnDOYuIykkgjBAAAAck"]
[Sun Apr 12 08:24:43.621707 2026] [:error] [pid 25329:tid 25399] [client 20.111.60.230:51450] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adrmS2dcIYsS8Iyaj11eZgAAAI0"]
[Sun Apr 12 08:24:44.114557 2026] [:error] [pid 26567:tid 26578] [client 20.111.60.230:56697] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adrmTHhRpg6ptWFyFx0swgAAAQk"]
[Sun Apr 12 08:24:44.589004 2026] [:error] [pid 25327:tid 25353] [client 20.111.60.230:53785] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adrmTC6h2tZEVJo9JFJobAAAABE"]
[Sun Apr 12 08:24:45.116104 2026] [:error] [pid 26600:tid 26636] [client 20.111.60.230:23639] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/g.php"] [unique_id "adrmTe1YwAZiXhQKLYqdlgAAAYc"]
[Sun Apr 12 08:24:45.694215 2026] [:error] [pid 25327:tid 25358] [client 20.111.60.230:53819] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmTS6h2tZEVJo9JFJocAAAABY"]
[Sun Apr 12 08:24:46.196724 2026] [:error] [pid 26600:tid 26635] [client 20.111.60.230:51442] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmTu1YwAZiXhQKLYqdmQAAAYY"]
[Sun Apr 12 08:24:46.687920 2026] [:error] [pid 26600:tid 26629] [client 20.111.60.230:9416] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmTu1YwAZiXhQKLYqdnAAAAYA"]
[Sun Apr 12 08:24:47.185984 2026] [:error] [pid 25327:tid 25357] [client 20.111.60.230:48889] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/"] [unique_id "adrmTy6h2tZEVJo9JFJocgAAABU"]
[Sun Apr 12 08:24:47.662805 2026] [:error] [pid 26600:tid 26651] [client 20.111.60.230:51443] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adrmT-1YwAZiXhQKLYqdoQAAAZY"]
[Sun Apr 12 08:24:48.202660 2026] [:error] [pid 25328:tid 25380] [client 20.111.60.230:48834] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adrmUMxUaQZxT-e0YsAjiAAAAEw"]
[Sun Apr 12 08:24:48.794825 2026] [:error] [pid 26600:tid 26634] [client 20.111.60.230:55387] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adrmUO1YwAZiXhQKLYqdpQAAAYU"]
[Sun Apr 12 08:24:49.350176 2026] [:error] [pid 26599:tid 26613] [client 20.111.60.230:51437] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/simple.php"] [unique_id "adrmUXG89LXoQbk_rwBzlwAAAUs"]
[Sun Apr 12 08:24:49.821753 2026] [:error] [pid 25329:tid 25397] [client 20.111.60.230:23676] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ew.php"] [unique_id "adrmUWdcIYsS8Iyaj11ebAAAAIw"]
[Sun Apr 12 08:24:50.332417 2026] [:error] [pid 60280:tid 60297] [client 20.111.60.230:10096] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ew.php"] [unique_id "adrmUnBlLnDOYuIykkgjCQAAAc8"]
[Sun Apr 12 08:24:50.804475 2026] [:error] [pid 60280:tid 60285] [client 20.111.60.230:51400] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ew.php"] [unique_id "adrmUnBlLnDOYuIykkgjCwAAAcM"]
[Sun Apr 12 08:24:51.329885 2026] [:error] [pid 25327:tid 25358] [client 20.111.60.230:57347] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ew.php"] [unique_id "adrmUy6h2tZEVJo9JFJoewAAABY"]
[Sun Apr 12 08:24:51.835076 2026] [:error] [pid 25328:tid 25370] [client 20.111.60.230:48833] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file21.php"] [unique_id "adrmU8xUaQZxT-e0YsAjigAAAEY"]
[Sun Apr 12 08:24:52.352881 2026] [:error] [pid 25328:tid 25389] [client 20.111.60.230:63094] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file21.php"] [unique_id "adrmVMxUaQZxT-e0YsAjjAAAAFA"]
[Sun Apr 12 08:24:52.841892 2026] [:error] [pid 25328:tid 25365] [client 20.111.60.230:56644] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file21.php"] [unique_id "adrmVMxUaQZxT-e0YsAjjQAAAEE"]
[Sun Apr 12 08:24:53.417504 2026] [:error] [pid 25329:tid 25382] [client 20.111.60.230:63047] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file21.php"] [unique_id "adrmVWdcIYsS8Iyaj11ecAAAAIQ"]
[Sun Apr 12 08:24:53.921945 2026] [:error] [pid 26600:tid 26644] [client 20.111.60.230:50234] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class19.php"] [unique_id "adrmVe1YwAZiXhQKLYqdqwAAAY8"]
[Sun Apr 12 08:24:54.419603 2026] [:error] [pid 26600:tid 26640] [client 20.111.60.230:63076] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class19.php"] [unique_id "adrmVu1YwAZiXhQKLYqdrgAAAYs"]
[Sun Apr 12 08:24:54.903421 2026] [:error] [pid 26600:tid 26647] [client 20.111.60.230:48836] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class19.php"] [unique_id "adrmVu1YwAZiXhQKLYqdsAAAAZI"]
[Sun Apr 12 08:24:55.400070 2026] [:error] [pid 26600:tid 26636] [client 20.111.60.230:9743] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class19.php"] [unique_id "adrmV-1YwAZiXhQKLYqdsQAAAYc"]
[Sun Apr 12 08:24:55.912175 2026] [:error] [pid 25328:tid 25403] [client 20.111.60.230:63064] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class20.php"] [unique_id "adrmV8xUaQZxT-e0YsAjlAAAAFY"]
[Sun Apr 12 08:24:56.398460 2026] [:error] [pid 25327:tid 25343] [client 20.111.60.230:9757] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class20.php"] [unique_id "adrmWC6h2tZEVJo9JFJogQAAAAc"]
[Sun Apr 12 08:24:56.894572 2026] [:error] [pid 25437:tid 25445] [client 20.111.60.230:48871] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class20.php"] [unique_id "adrmWHf97wYZje1ep_N9ywAAAMY"]
[Sun Apr 12 08:24:57.456887 2026] [:error] [pid 25327:tid 25357] [client 20.111.60.230:54208] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class20.php"] [unique_id "adrmWS6h2tZEVJo9JFJomwAAABU"]
[Sun Apr 12 08:24:57.961823 2026] [:error] [pid 25327:tid 25340] [client 20.111.60.230:50219] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file18.php"] [unique_id "adrmWS6h2tZEVJo9JFJonwAAAAQ"]
[Sun Apr 12 08:24:58.524748 2026] [:error] [pid 25327:tid 25339] [client 20.111.60.230:50233] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file18.php"] [unique_id "adrmWi6h2tZEVJo9JFJotQAAAAM"]
[Sun Apr 12 08:24:59.045583 2026] [:error] [pid 60280:tid 60286] [client 20.111.60.230:17712] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file18.php"] [unique_id "adrmW3BlLnDOYuIykkgjOQAAAcQ"]
[Sun Apr 12 08:24:59.523881 2026] [:error] [pid 60280:tid 60290] [client 20.111.60.230:53778] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file18.php"] [unique_id "adrmW3BlLnDOYuIykkgjOwAAAcg"]
[Sun Apr 12 08:25:00.101344 2026] [:error] [pid 26567:tid 26575] [client 20.111.60.230:50186] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vee.php"] [unique_id "adrmXHhRpg6ptWFyFx0s6wAAAQY"]
[Sun Apr 12 08:25:00.599831 2026] [:error] [pid 26599:tid 26619] [client 20.111.60.230:63040] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vee.php"] [unique_id "adrmXHG89LXoQbk_rwBzwwAAAVE"]
[Sun Apr 12 08:25:01.302793 2026] [:error] [pid 25328:tid 25366] [client 20.111.60.230:53777] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vee.php"] [unique_id "adrmXcxUaQZxT-e0YsAjxgAAAEI"]
[Sun Apr 12 08:25:01.831999 2026] [:error] [pid 26600:tid 26643] [client 20.111.60.230:48872] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vee.php"] [unique_id "adrmXe1YwAZiXhQKLYqd_gAAAY4"]
[Sun Apr 12 08:25:02.338735 2026] [:error] [pid 26599:tid 26611] [client 20.111.60.230:53820] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cabs.php"] [unique_id "adrmXnG89LXoQbk_rwBzxQAAAUk"]
[Sun Apr 12 08:25:02.894106 2026] [:error] [pid 26567:tid 26574] [client 20.111.60.230:57399] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cabs.php"] [unique_id "adrmXnhRpg6ptWFyFx0tDAAAAQU"]
[Sun Apr 12 08:25:03.481022 2026] [:error] [pid 25328:tid 25379] [client 20.111.60.230:54237] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cabs.php"] [unique_id "adrmX8xUaQZxT-e0YsAjygAAAEs"]
[Sun Apr 12 08:25:04.072012 2026] [:error] [pid 25329:tid 25400] [client 20.111.60.230:50195] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cabs.php"] [unique_id "adrmYGdcIYsS8Iyaj11epgAAAI4"]
[Sun Apr 12 08:25:04.595470 2026] [:error] [pid 25329:tid 25374] [client 20.111.60.230:54233] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adrmYGdcIYsS8Iyaj11epwAAAIA"]
[Sun Apr 12 08:25:05.091512 2026] [:error] [pid 25329:tid 25407] [client 20.111.60.230:17695] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adrmYWdcIYsS8Iyaj11erAAAAJI"]
[Sun Apr 12 08:25:05.737921 2026] [:error] [pid 26567:tid 26582] [client 20.111.60.230:9758] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adrmYXhRpg6ptWFyFx0tDgAAAQ0"]
[Sun Apr 12 08:25:06.294989 2026] [:error] [pid 26599:tid 26612] [client 20.111.60.230:62504] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "adrmYnG89LXoQbk_rwBzygAAAUo"]
[Sun Apr 12 08:25:06.799244 2026] [:error] [pid 26600:tid 26629] [client 20.111.60.230:48845] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x1da.php"] [unique_id "adrmYu1YwAZiXhQKLYqeAwAAAYA"]
[Sun Apr 12 08:25:07.341118 2026] [:error] [pid 26567:tid 26580] [client 20.111.60.230:54223] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x1da.php"] [unique_id "adrmY3hRpg6ptWFyFx0tGAAAAQs"]
[Sun Apr 12 08:25:07.884043 2026] [:error] [pid 25328:tid 25401] [client 20.111.60.230:57406] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x1da.php"] [unique_id "adrmY8xUaQZxT-e0YsAj0QAAAFU"]
[Sun Apr 12 08:25:08.542112 2026] [:error] [pid 25329:tid 25378] [client 20.111.60.230:17718] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/x1da.php"] [unique_id "adrmZGdcIYsS8Iyaj11ergAAAII"]
[Sun Apr 12 08:25:09.182299 2026] [:error] [pid 25328:tid 25377] [client 20.111.60.230:62483] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adrmZcxUaQZxT-e0YsAj0wAAAEo"]
[Sun Apr 12 08:25:09.826930 2026] [:error] [pid 26600:tid 26639] [client 20.111.60.230:63067] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adrmZe1YwAZiXhQKLYqeFAAAAYo"]
[Sun Apr 12 08:25:10.321300 2026] [:error] [pid 60280:tid 60298] [client 20.111.60.230:62469] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adrmZnBlLnDOYuIykkgjSwAAAdA"]
[Sun Apr 12 08:25:10.904003 2026] [:error] [pid 25328:tid 25383] [client 20.111.60.230:9768] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jp.php"] [unique_id "adrmZsxUaQZxT-e0YsAj1QAAAE0"]
[Sun Apr 12 08:25:11.555243 2026] [:error] [pid 25329:tid 25406] [client 20.111.60.230:53803] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adrmZ2dcIYsS8Iyaj11esQAAAJE"]
[Sun Apr 12 08:25:12.199577 2026] [:error] [pid 26567:tid 26583] [client 20.111.60.230:54214] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adrmaHhRpg6ptWFyFx0tIgAAAQ4"]
[Sun Apr 12 08:25:12.731654 2026] [:error] [pid 26567:tid 26569] [client 20.111.60.230:62524] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adrmaHhRpg6ptWFyFx0tJgAAAQA"]
[Sun Apr 12 08:25:13.332511 2026] [:error] [pid 26600:tid 26650] [client 20.111.60.230:56691] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen.php"] [unique_id "adrmae1YwAZiXhQKLYqeKwAAAZU"]
[Sun Apr 12 10:56:45.362653 2026] [:error] [pid 25437:tid 25448] [client 43.165.69.68:55946] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adsJ7Xf97wYZje1ep_OuywAAAMk"]
[Sun Apr 12 12:46:55.519296 2026] [:error] [pid 26600:tid 26653] [client 192.144.148.122:52364] [client 192.144.148.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adsjv-1YwAZiXhQKLYrffAAAAZg"]
[Sun Apr 12 15:21:11.479174 2026] [:error] [pid 25328:tid 25372] [client 43.159.140.236:43668] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adtH58xUaQZxT-e0YsDJ6QAAAEc"]
[Sun Apr 12 18:00:02.734549 2026] [:error] [pid 60280:tid 60290] [client 43.135.182.43:44876] [client 43.135.182.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adttInBlLnDOYuIykkhUEwAAAcg"]
[Sun Apr 12 20:27:16.781660 2026] [:error] [pid 60280:tid 60304] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sun Apr 12 20:27:17.019974 2026] [:error] [pid 60280:tid 60302] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sun Apr 12 20:27:17.287506 2026] [:error] [pid 60280:tid 60295] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun Apr 12 20:27:17.577352 2026] [:error] [pid 60280:tid 60285] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sun Apr 12 20:27:17.817353 2026] [:error] [pid 60280:tid 60292] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sun Apr 12 20:27:18.056536 2026] [:error] [pid 60280:tid 60288] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sun Apr 12 20:27:18.634762 2026] [:error] [pid 60280:tid 60286] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sun Apr 12 20:27:19.635019 2026] [:error] [pid 60280:tid 60293] [client 158.158.73.158:26049] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sun Apr 12 20:27:20.316265 2026] [:error] [pid 60280:tid 60287] [client 158.158.73.158:26049] [client 158.158.73.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aduPqHBlLnDOYuIykki19gAAAcU"]
[Sun Apr 12 20:27:22.565313 2026] [:error] [pid 25327:tid 25354] [client 158.158.73.158:39771] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sun Apr 12 20:27:22.804123 2026] [:error] [pid 25327:tid 25353] [client 158.158.73.158:39771] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun Apr 12 20:27:23.042087 2026] [:error] [pid 25327:tid 25356] [client 158.158.73.158:39771] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aduPqy6h2tZEVJo9JFLkRQAAABQ"]
[Sun Apr 12 20:27:25.895337 2026] [:error] [pid 25328:tid 25380] [client 158.158.73.158:23104] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aduPrcxUaQZxT-e0YsBIKgAAAEw"]
[Sun Apr 12 20:27:28.852557 2026] [:error] [pid 26599:tid 26606] [client 158.158.73.158:61480] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aduPsHG89LXoQbk_rwDY3gAAAUQ"]
[Sun Apr 12 20:27:31.474768 2026] [:error] [pid 60280:tid 60302] [client 158.158.73.158:47477] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aduPs3BlLnDOYuIykki2KAAAAdQ"]
[Sun Apr 12 20:27:33.297379 2026] [:error] [pid 25329:tid 25374] [client 158.158.73.158:61477] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aduPtWdcIYsS8Iyaj126FwAAAIA"]
[Sun Apr 12 20:27:36.606028 2026] [:error] [pid 25329:tid 25404] [client 158.158.73.158:24129] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aduPuGdcIYsS8Iyaj126GQAAAJA"]
[Sun Apr 12 20:27:38.032135 2026] [:error] [pid 25328:tid 25389] [client 158.158.73.158:25576] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aduPusxUaQZxT-e0YsBIQgAAAFA"]
[Sun Apr 12 20:27:40.304429 2026] [:error] [pid 26567:tid 26574] [client 158.158.73.158:35603] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aduPvHhRpg6ptWFyFx2-QQAAAQU"]
[Sun Apr 12 20:27:42.135782 2026] [:error] [pid 60280:tid 60295] [client 158.158.73.158:25584] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aduPvnBlLnDOYuIykki2WQAAAc0"]
[Sun Apr 12 20:27:46.144813 2026] [:error] [pid 25328:tid 25373] [client 158.158.73.158:24075] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aduPwsxUaQZxT-e0YsBIUQAAAEg"]
[Sun Apr 12 20:27:51.988730 2026] [:error] [pid 26599:tid 26622] [client 158.158.73.158:24134] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aduPx3G89LXoQbk_rwDY-gAAAVQ"]
[Sun Apr 12 20:27:55.634772 2026] [:error] [pid 25328:tid 25377] [client 158.158.73.158:46488] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aduPy8xUaQZxT-e0YsBIaAAAAEo"]
[Sun Apr 12 20:27:59.596617 2026] [:error] [pid 26567:tid 26584] [client 158.158.73.158:41896] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aduPz3hRpg6ptWFyFx2-YgAAAQ8"]
[Sun Apr 12 20:28:01.526435 2026] [:error] [pid 26567:tid 26578] [client 158.158.73.158:33558] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aduP0XhRpg6ptWFyFx2-ZwAAAQk"]
[Sun Apr 12 20:28:03.054778 2026] [:error] [pid 26567:tid 26585] [client 158.158.73.158:40772] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aduP03hRpg6ptWFyFx2-bAAAARA"]
[Sun Apr 12 20:28:04.461625 2026] [:error] [pid 26567:tid 26592] [client 158.158.73.158:40820] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aduP1HhRpg6ptWFyFx2-cwAAARc"]
[Sun Apr 12 20:28:05.580266 2026] [:error] [pid 26600:tid 26641] [client 158.158.73.158:53777] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aduP1e1YwAZiXhQKLYpNwwAAAYw"]
[Sun Apr 12 20:28:06.721455 2026] [:error] [pid 60280:tid 60305] [client 158.158.73.158:24146] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aduP1nBlLnDOYuIykki2hAAAAdc"]
[Sun Apr 12 20:28:07.774484 2026] [:error] [pid 26567:tid 26569] [client 158.158.73.158:24141] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aduP13hRpg6ptWFyFx2-fgAAAQA"]
[Sun Apr 12 20:28:10.540667 2026] [:error] [pid 26600:tid 26652] [client 158.158.73.158:40774] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aduP2u1YwAZiXhQKLYpNyAAAAZc"]
[Sun Apr 12 20:28:11.735451 2026] [:error] [pid 60280:tid 60296] [client 158.158.73.158:40826] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aduP23BlLnDOYuIykki2mQAAAc4"]
[Sun Apr 12 20:28:12.577755 2026] [:error] [pid 60280:tid 60305] [client 158.158.73.158:23337] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aduP3HBlLnDOYuIykki2ngAAAdc"]
[Sun Apr 12 20:28:13.946841 2026] [:error] [pid 60280:tid 60282] [client 158.158.73.158:54371] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aduP3XBlLnDOYuIykki2rwAAAcA"]
[Sun Apr 12 20:28:15.401379 2026] [:error] [pid 25327:tid 25351] [client 158.158.73.158:36182] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aduP3y6h2tZEVJo9JFLkbgAAAA8"]
[Sun Apr 12 20:28:16.425074 2026] [:error] [pid 60280:tid 60302] [client 158.158.73.158:3464] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aduP4HBlLnDOYuIykki2uwAAAdQ"]
[Sun Apr 12 20:28:17.263563 2026] [:error] [pid 26567:tid 26589] [client 158.158.73.158:36210] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aduP4XhRpg6ptWFyFx2-kwAAARQ"]
[Sun Apr 12 20:28:18.711024 2026] [:error] [pid 25329:tid 25393] [client 158.158.73.158:30810] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aduP4mdcIYsS8Iyaj126UwAAAIo"]
[Sun Apr 12 20:28:20.489128 2026] [:error] [pid 60280:tid 60301] [client 158.158.73.158:36194] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aduP5HBlLnDOYuIykki20QAAAdM"]
[Sun Apr 12 20:28:21.471030 2026] [:error] [pid 60280:tid 60303] [client 158.158.73.158:53918] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aduP5XBlLnDOYuIykki23QAAAdU"]
[Sun Apr 12 20:28:22.899511 2026] [:error] [pid 26600:tid 26650] [client 158.158.73.158:38984] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Sun Apr 12 20:28:23.137995 2026] [:error] [pid 26600:tid 26645] [client 158.158.73.158:38984] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun Apr 12 20:28:23.377398 2026] [:error] [pid 26600:tid 26653] [client 158.158.73.158:38984] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun Apr 12 20:28:24.196104 2026] [:error] [pid 26600:tid 26633] [client 158.158.73.158:38984] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sun Apr 12 20:28:24.434514 2026] [:error] [pid 26600:tid 26648] [client 158.158.73.158:38984] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Sun Apr 12 20:28:24.929576 2026] [:error] [pid 26600:tid 26634] [client 158.158.73.158:38984] [client 158.158.73.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aduP6O1YwAZiXhQKLYpN2wAAAYU"]
[Sun Apr 12 20:28:26.368758 2026] [:error] [pid 25328:tid 25380] [client 158.158.73.158:30821] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Sun Apr 12 20:28:26.608750 2026] [:error] [pid 25328:tid 25379] [client 158.158.73.158:30821] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Sun Apr 12 20:28:26.930391 2026] [:error] [pid 25328:tid 25365] [client 158.158.73.158:30821] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 12 20:28:27.171004 2026] [:error] [pid 25328:tid 25394] [client 158.158.73.158:30821] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sun Apr 12 20:28:27.454639 2026] [:error] [pid 25328:tid 25398] [client 158.158.73.158:30821] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/footer.php"] [unique_id "aduP68xUaQZxT-e0YsBIoQAAAFQ"]
[Sun Apr 12 20:28:28.739869 2026] [:error] [pid 25328:tid 25391] [client 158.158.73.158:30821] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/footer.php"] [unique_id "aduP7MxUaQZxT-e0YsBIpAAAAFE"]
[Sun Apr 12 20:28:30.663829 2026] [:error] [pid 60280:tid 60287] [client 158.158.73.158:38974] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/footer.php"] [unique_id "aduP7nBlLnDOYuIykki3AAAAAcU"]
[Sun Apr 12 20:28:32.930723 2026] [:error] [pid 25437:tid 25448] [client 158.158.73.158:54277] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/footer.php"] [unique_id "aduP8Hf97wYZje1ep_NgAgAAAMk"]
[Sun Apr 12 20:28:35.471280 2026] [:error] [pid 60280:tid 60303] [client 158.158.73.158:54317] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aduP83BlLnDOYuIykki3HgAAAdU"]
[Sun Apr 12 20:28:36.314041 2026] [:error] [pid 60280:tid 60299] [client 158.158.73.158:53819] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aduP9HBlLnDOYuIykki3IQAAAdE"]
[Sun Apr 12 20:28:37.423143 2026] [:error] [pid 60280:tid 60287] [client 158.158.73.158:30821] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aduP9XBlLnDOYuIykki3LwAAAcU"]
[Sun Apr 12 20:28:38.437904 2026] [:error] [pid 60280:tid 60285] [client 158.158.73.158:46468] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aduP9nBlLnDOYuIykki3NgAAAcM"]
[Sun Apr 12 20:28:42.541785 2026] [:error] [pid 25328:tid 25368] [client 158.158.73.158:61615] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aduP-sxUaQZxT-e0YsBIvwAAAEQ"]
[Sun Apr 12 20:28:45.952836 2026] [:error] [pid 25437:tid 25460] [client 158.158.73.158:36767] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aduP_Xf97wYZje1ep_NgFgAAANU"]
[Sun Apr 12 20:29:09.276643 2026] [:error] [pid 60280:tid 60303] [client 158.158.73.158:41800] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aduQFXBlLnDOYuIykki3gQAAAdU"]
[Sun Apr 12 20:29:10.561781 2026] [:error] [pid 25329:tid 25414] [client 158.158.73.158:41848] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aduQFmdcIYsS8Iyaj126bAAAAJc"]
[Sun Apr 12 20:29:12.109286 2026] [:error] [pid 25437:tid 25442] [client 158.158.73.158:38689] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aduQGHf97wYZje1ep_NgVQAAAMM"]
[Sun Apr 12 20:29:13.073318 2026] [:error] [pid 60280:tid 60305] [client 158.158.73.158:50884] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aduQGXBlLnDOYuIykki3igAAAdc"]
[Sun Apr 12 20:29:14.555633 2026] [:error] [pid 60280:tid 60301] [client 158.158.73.158:50922] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aduQGnBlLnDOYuIykki3kgAAAdM"]
[Sun Apr 12 20:29:16.336355 2026] [:error] [pid 60280:tid 60293] [client 158.158.73.158:30737] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aduQHHBlLnDOYuIykki3nwAAAcs"]
[Sun Apr 12 20:29:17.424538 2026] [:error] [pid 60280:tid 60304] [client 158.158.73.158:3092] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aduQHXBlLnDOYuIykki3qAAAAdY"]
[Sun Apr 12 20:29:18.468550 2026] [:error] [pid 25329:tid 25376] [client 158.158.73.158:38674] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aduQHmdcIYsS8Iyaj126bwAAAIE"]
[Sun Apr 12 20:29:19.437130 2026] [:error] [pid 26599:tid 26614] [client 158.158.73.158:3074] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aduQH3G89LXoQbk_rwDZIwAAAUw"]
[Sun Apr 12 20:29:20.746354 2026] [:error] [pid 60280:tid 60293] [client 158.158.73.158:32460] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aduQIHBlLnDOYuIykki3tAAAAcs"]
[Sun Apr 12 20:29:21.558813 2026] [:error] [pid 60280:tid 60284] [client 158.158.73.158:3842] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aduQIXBlLnDOYuIykki3ugAAAcI"]
[Sun Apr 12 20:29:23.111781 2026] [:error] [pid 25328:tid 25380] [client 158.158.73.158:28895] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aduQI8xUaQZxT-e0YsBJAwAAAEw"]
[Sun Apr 12 20:29:35.705138 2026] [:error] [pid 26567:tid 26585] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sun Apr 12 20:29:35.966962 2026] [:error] [pid 26567:tid 26571] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 12 20:29:36.217376 2026] [:error] [pid 26567:tid 26574] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 12 20:29:36.458331 2026] [:error] [pid 26567:tid 26581] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Apr 12 20:29:36.697962 2026] [:error] [pid 26567:tid 26578] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 12 20:29:36.938565 2026] [:error] [pid 26567:tid 26573] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun Apr 12 20:29:37.186367 2026] [:error] [pid 26567:tid 26570] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sun Apr 12 20:29:37.698286 2026] [:error] [pid 26567:tid 26590] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sun Apr 12 20:29:37.941415 2026] [:error] [pid 26567:tid 26569] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sun Apr 12 20:29:38.181311 2026] [:error] [pid 26567:tid 26585] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 12 20:29:38.440004 2026] [:error] [pid 26567:tid 26571] [client 158.158.73.158:30264] File does not exist: /usr/local/apache/htdocs/suspended-page/1s7y8wt9dz.php
[Sun Apr 12 20:29:38.689253 2026] [:error] [pid 26567:tid 26577] [client 158.158.73.158:30264] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aduQMnhRpg6ptWFyFx2_HQAAAQg"]
[Sun Apr 12 20:29:40.155089 2026] [:error] [pid 25437:tid 25462] [client 158.158.73.158:33202] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aduQNHf97wYZje1ep_NgcgAAANc"]
[Sun Apr 12 20:29:45.096581 2026] [:error] [pid 25328:tid 25364] [client 158.158.73.158:32399] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aduQOcxUaQZxT-e0YsBJHgAAAEA"]
[Sun Apr 12 20:29:52.876328 2026] [:error] [pid 25328:tid 25405] [client 158.158.73.158:32435] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aduQQMxUaQZxT-e0YsBJMgAAAFc"]
[Sun Apr 12 20:29:56.627114 2026] [:error] [pid 25327:tid 25343] [client 158.158.73.158:4062] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v5.php"] [unique_id "aduQRC6h2tZEVJo9JFLk3AAAAAc"]
[Sun Apr 12 20:30:01.703884 2026] [:error] [pid 25328:tid 25394] [client 158.158.73.158:37515] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v5.php"] [unique_id "aduQScxUaQZxT-e0YsBJOgAAAFI"]
[Sun Apr 12 20:30:04.502066 2026] [:error] [pid 60280:tid 60290] [client 158.158.73.158:49252] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v5.php"] [unique_id "aduQTHBlLnDOYuIykki4CQAAAcg"]
[Sun Apr 12 20:30:14.401808 2026] [:error] [pid 26600:tid 26649] [client 158.158.73.158:48028] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aduQVu1YwAZiXhQKLYpOhAAAAZQ"]
[Sun Apr 12 20:30:17.403387 2026] [:error] [pid 25437:tid 25440] [client 158.158.73.158:4005] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aduQWXf97wYZje1ep_NgqwAAAME"]
[Sun Apr 12 20:30:20.076817 2026] [:error] [pid 60280:tid 60306] [client 158.158.73.158:28070] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aduQXHBlLnDOYuIykki4LgAAAdg"]
[Sun Apr 12 20:30:21.837945 2026] [:error] [pid 60280:tid 60282] [client 158.158.73.158:27318] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aduQXXBlLnDOYuIykki4QgAAAcA"]
[Sun Apr 12 20:30:24.943454 2026] [:error] [pid 26600:tid 26631] [client 158.158.73.158:29208] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aduQYO1YwAZiXhQKLYpOkwAAAYI"]
[Sun Apr 12 20:30:27.597798 2026] [:error] [pid 25328:tid 25375] [client 158.158.73.158:29193] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aduQY8xUaQZxT-e0YsBJiwAAAEk"]
[Sun Apr 12 20:30:28.952174 2026] [:error] [pid 60280:tid 60303] [client 158.158.73.158:53124] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aduQZHBlLnDOYuIykki4awAAAdU"]
[Sun Apr 12 20:30:30.092130 2026] [:error] [pid 60280:tid 60296] [client 158.158.73.158:25514] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aduQZnBlLnDOYuIykki4dAAAAc4"]
[Sun Apr 12 20:30:31.237618 2026] [:error] [pid 26567:tid 26581] [client 158.158.73.158:45702] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aduQZ3hRpg6ptWFyFx2_UQAAAQw"]
[Sun Apr 12 20:30:32.424206 2026] [:error] [pid 60280:tid 60295] [client 158.158.73.158:29192] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aduQaHBlLnDOYuIykki4gAAAAc0"]
[Sun Apr 12 20:30:33.379742 2026] [:error] [pid 25328:tid 25396] [client 158.158.73.158:23062] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aduQacxUaQZxT-e0YsBJmAAAAFM"]
[Sun Apr 12 20:30:34.415303 2026] [:error] [pid 26599:tid 26613] [client 158.158.73.158:32090] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aduQanG89LXoQbk_rwDZXQAAAUs"]
[Sun Apr 12 20:30:35.008316 2026] [:error] [pid 25437:tid 25439] [client 158.158.73.158:32104] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aduQa3f97wYZje1ep_NguAAAAMA"]
[Sun Apr 12 20:30:35.808674 2026] [:error] [pid 25328:tid 25394] [client 158.158.73.158:29217] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aduQa8xUaQZxT-e0YsBJnwAAAFI"]
[Sun Apr 12 20:30:36.655436 2026] [:error] [pid 25327:tid 25344] [client 158.158.73.158:50504] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aduQbC6h2tZEVJo9JFLlOgAAAAg"]
[Sun Apr 12 20:30:37.611949 2026] [:error] [pid 25437:tid 25458] [client 158.158.73.158:52410] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aduQbXf97wYZje1ep_NgugAAANM"]
[Sun Apr 12 20:30:38.338617 2026] [:error] [pid 25437:tid 25452] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sun Apr 12 20:30:38.649016 2026] [:error] [pid 25437:tid 25441] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Sun Apr 12 20:30:39.002003 2026] [:error] [pid 25437:tid 25457] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sun Apr 12 20:30:39.263221 2026] [:error] [pid 25437:tid 25456] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Sun Apr 12 20:30:39.534971 2026] [:error] [pid 25437:tid 25445] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Sun Apr 12 20:30:39.776917 2026] [:error] [pid 25437:tid 25462] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sun Apr 12 20:30:40.018187 2026] [:error] [pid 25437:tid 25439] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Sun Apr 12 20:30:40.563449 2026] [:error] [pid 25437:tid 25442] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sun Apr 12 20:30:40.802759 2026] [:error] [pid 25437:tid 25452] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Sun Apr 12 20:30:41.171551 2026] [:error] [pid 25437:tid 25443] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/qqa.php
[Sun Apr 12 20:30:41.411320 2026] [:error] [pid 25437:tid 25463] [client 158.158.73.158:52376] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 12 20:30:41.653162 2026] [:error] [pid 25437:tid 25457] [client 158.158.73.158:52376] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aduQcXf97wYZje1ep_Ng0wAAANI"]
[Sun Apr 12 20:30:42.794873 2026] [:error] [pid 25437:tid 25442] [client 158.158.73.158:23556] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aduQcnf97wYZje1ep_Ng2QAAAMM"]
[Sun Apr 12 20:30:43.575936 2026] [:error] [pid 25328:tid 25372] [client 158.158.73.158:42412] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aduQc8xUaQZxT-e0YsBJrQAAAEc"]
[Sun Apr 12 20:30:44.851033 2026] [:error] [pid 60280:tid 60282] [client 158.158.73.158:23563] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aduQdHBlLnDOYuIykki4kAAAAcA"]
[Sun Apr 12 20:30:46.517440 2026] [:error] [pid 60280:tid 60287] [client 158.158.73.158:40892] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aduQdnBlLnDOYuIykki4mwAAAcU"]
[Sun Apr 12 20:30:47.250795 2026] [:error] [pid 60280:tid 60298] [client 158.158.73.158:34438] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aduQd3BlLnDOYuIykki4pAAAAdA"]
[Sun Apr 12 20:30:48.653273 2026] [:error] [pid 60280:tid 60286] [client 158.158.73.158:32801] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aduQeHBlLnDOYuIykki4qQAAAcQ"]
[Sun Apr 12 20:30:49.429108 2026] [:error] [pid 60280:tid 60305] [client 158.158.73.158:42391] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aduQeXBlLnDOYuIykki4rgAAAdc"]
[Sun Apr 12 20:30:50.103402 2026] [:error] [pid 60280:tid 60294] [client 158.158.73.158:50957] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aduQenBlLnDOYuIykki4sQAAAcw"]
[Sun Apr 12 20:30:50.890167 2026] [:error] [pid 26599:tid 26624] [client 158.158.73.158:42375] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aduQenG89LXoQbk_rwDZZgAAAVY"]
[Sun Apr 12 20:30:51.805295 2026] [:error] [pid 25437:tid 25448] [client 158.158.73.158:50983] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aduQe3f97wYZje1ep_Ng6wAAAMk"]
[Sun Apr 12 20:30:52.514584 2026] [:error] [pid 25437:tid 25443] [client 158.158.73.158:32806] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aduQfHf97wYZje1ep_Ng8QAAAMQ"]
[Sun Apr 12 20:30:53.326537 2026] [:error] [pid 60280:tid 60302] [client 158.158.73.158:26010] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aduQfXBlLnDOYuIykki4ugAAAdQ"]
[Sun Apr 12 20:30:54.376560 2026] [:error] [pid 60280:tid 60300] [client 158.158.73.158:37935] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aduQfnBlLnDOYuIykki4wwAAAdI"]
[Sun Apr 12 20:30:56.347625 2026] [:error] [pid 60280:tid 60299] [client 158.158.73.158:34452] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aduQgHBlLnDOYuIykki4zAAAAdE"]
[Sun Apr 12 20:30:59.373430 2026] [:error] [pid 26600:tid 26635] [client 158.158.73.158:37898] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aduQg-1YwAZiXhQKLYpOqwAAAYY"]
[Sun Apr 12 20:31:05.599187 2026] [:error] [pid 60280:tid 60286] [client 158.158.73.158:51003] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aduQiXBlLnDOYuIykki4_wAAAcQ"]
[Sun Apr 12 20:31:13.800813 2026] [:error] [pid 25328:tid 25394] [client 158.158.73.158:36407] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aduQkcxUaQZxT-e0YsBJ3wAAAFI"]
[Sun Apr 12 20:31:19.865199 2026] [:error] [pid 26567:tid 26578] [client 158.158.73.158:3914] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aduQl3hRpg6ptWFyFx2_mQAAAQk"]
[Sun Apr 12 20:31:33.074490 2026] [:error] [pid 26567:tid 26578] [client 158.158.73.158:26925] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aduQpXhRpg6ptWFyFx2_qAAAAQk"]
[Sun Apr 12 20:31:42.452162 2026] [:error] [pid 25329:tid 25413] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lo.php
[Sun Apr 12 20:31:42.691979 2026] [:error] [pid 25329:tid 25390] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sun Apr 12 20:31:43.104748 2026] [:error] [pid 25329:tid 25395] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/Ipv6.php
[Sun Apr 12 20:31:43.372122 2026] [:error] [pid 25329:tid 25393] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Sun Apr 12 20:31:43.732840 2026] [:error] [pid 25329:tid 25404] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sun Apr 12 20:31:44.027895 2026] [:error] [pid 25329:tid 25411] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sun Apr 12 20:31:44.321169 2026] [:error] [pid 25329:tid 25406] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sun Apr 12 20:31:44.563866 2026] [:error] [pid 25329:tid 25381] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sun Apr 12 20:31:45.094106 2026] [:error] [pid 25329:tid 25415] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Sun Apr 12 20:31:45.334968 2026] [:error] [pid 25329:tid 25402] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Sun Apr 12 20:31:45.617489 2026] [:error] [pid 25329:tid 25399] [client 158.158.73.158:23883] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sun Apr 12 20:31:45.860108 2026] [:error] [pid 25329:tid 25376] [client 158.158.73.158:23883] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aduQsWdcIYsS8Iyaj1264gAAAIE"]
[Sun Apr 12 20:31:47.050174 2026] [:error] [pid 25327:tid 25342] [client 158.158.73.158:61679] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aduQsy6h2tZEVJo9JFLlggAAAAY"]
[Sun Apr 12 20:31:47.789735 2026] [:error] [pid 26567:tid 26588] [client 158.158.73.158:51322] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aduQs3hRpg6ptWFyFx2_wAAAARM"]
[Sun Apr 12 20:31:50.110100 2026] [:error] [pid 26600:tid 26644] [client 158.158.73.158:23597] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aduQtu1YwAZiXhQKLYpPCQAAAY8"]
[Sun Apr 12 20:31:51.425243 2026] [:error] [pid 25437:tid 25450] [client 158.158.73.158:61669] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3x.php"] [unique_id "aduQt3f97wYZje1ep_NhXwAAAMs"]
[Sun Apr 12 20:31:52.259957 2026] [:error] [pid 60280:tid 60297] [client 158.158.73.158:36182] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3x.php"] [unique_id "aduQuHBlLnDOYuIykki5UwAAAc8"]
[Sun Apr 12 20:32:02.671724 2026] [:error] [pid 60280:tid 60283] [client 158.158.73.158:29189] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x3x.php"] [unique_id "aduQwnBlLnDOYuIykki5gAAAAcE"]
[Sun Apr 12 20:32:14.775816 2026] [:error] [pid 26567:tid 26590] [client 158.158.73.158:25510] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aduQznhRpg6ptWFyFx2_6wAAARU"]
[Sun Apr 12 20:32:16.661796 2026] [:error] [pid 26567:tid 26589] [client 158.158.73.158:29224] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aduQ0HhRpg6ptWFyFx2_7wAAARQ"]
[Sun Apr 12 20:32:18.524065 2026] [:error] [pid 60280:tid 60286] [client 158.158.73.158:52384] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aduQ0nBlLnDOYuIykki5sgAAAcQ"]
[Sun Apr 12 20:32:20.102824 2026] [:error] [pid 25437:tid 25447] [client 158.158.73.158:23916] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aduQ1Hf97wYZje1ep_NhkQAAAMg"]
[Sun Apr 12 20:32:21.061132 2026] [:error] [pid 60280:tid 60282] [client 158.158.73.158:29216] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/global.php"] [unique_id "aduQ1XBlLnDOYuIykki5wgAAAcA"]
[Sun Apr 12 20:32:22.554852 2026] [:error] [pid 25437:tid 25462] [client 158.158.73.158:40220] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/global.php"] [unique_id "aduQ1nf97wYZje1ep_NhkwAAANc"]
[Sun Apr 12 20:32:25.053562 2026] [:error] [pid 25328:tid 25408] [client 158.158.73.158:23929] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/global.php"] [unique_id "aduQ2cxUaQZxT-e0YsBKcQAAAFg"]
[Sun Apr 12 20:32:26.607874 2026] [:error] [pid 26567:tid 26590] [client 158.158.73.158:32054] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/global.php"] [unique_id "aduQ2nhRpg6ptWFyFx2_-gAAARU"]
[Sun Apr 12 20:32:27.467202 2026] [:error] [pid 26600:tid 26638] [client 158.158.73.158:26910] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aduQ2-1YwAZiXhQKLYpPRwAAAYk"]
[Sun Apr 12 20:32:29.109353 2026] [:error] [pid 25329:tid 25395] [client 158.158.73.158:47589] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aduQ3WdcIYsS8Iyaj127HQAAAIs"]
[Sun Apr 12 20:32:31.150109 2026] [:error] [pid 26599:tid 26620] [client 158.158.73.158:32006] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aduQ33G89LXoQbk_rwDZ2wAAAVI"]
[Sun Apr 12 20:32:33.546425 2026] [:error] [pid 25329:tid 25381] [client 158.158.73.158:40192] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aduQ4WdcIYsS8Iyaj127JAAAAIM"]
[Sun Apr 12 20:32:36.369815 2026] [:error] [pid 25328:tid 25368] [client 158.158.73.158:3946] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aduQ5MxUaQZxT-e0YsBKhgAAAEQ"]
[Sun Apr 12 20:32:37.673468 2026] [:error] [pid 60280:tid 60293] [client 158.158.73.158:23820] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aduQ5XBlLnDOYuIykki50AAAAcs"]
[Sun Apr 12 20:32:39.796980 2026] [:error] [pid 25328:tid 25367] [client 158.158.73.158:51296] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aduQ58xUaQZxT-e0YsBKjAAAAEM"]
[Sun Apr 12 20:32:40.700597 2026] [:error] [pid 26599:tid 26621] [client 158.158.73.158:50498] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aduQ6HG89LXoQbk_rwDZ8AAAAVM"]
[Sun Apr 12 20:32:41.734099 2026] [:error] [pid 26599:tid 26618] [client 158.158.73.158:32041] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aduQ6XG89LXoQbk_rwDZ9gAAAVA"]
[Sun Apr 12 20:32:42.851325 2026] [:error] [pid 26567:tid 26580] [client 158.158.73.158:32027] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aduQ6nhRpg6ptWFyFx3ACQAAAQs"]
[Sun Apr 12 20:32:44.251269 2026] [:error] [pid 26567:tid 26576] [client 158.158.73.158:32056] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aduQ7HhRpg6ptWFyFx3ADQAAAQc"]
[Sun Apr 12 20:32:46.063749 2026] [:error] [pid 25329:tid 25407] [client 158.158.73.158:27351] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun Apr 12 20:32:46.303327 2026] [:error] [pid 25329:tid 25386] [client 158.158.73.158:27351] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sun Apr 12 20:32:46.538328 2026] [:error] [pid 25329:tid 25399] [client 158.158.73.158:27351] [client 158.158.73.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aduQ7mdcIYsS8Iyaj127MAAAAI0"]
[Sun Apr 12 20:32:49.360544 2026] [:error] [pid 25437:tid 25439] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 12 20:32:49.601086 2026] [:error] [pid 25437:tid 25461] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Sun Apr 12 20:32:49.843052 2026] [:error] [pid 25437:tid 25440] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sun Apr 12 20:32:50.111211 2026] [:error] [pid 25437:tid 25442] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sun Apr 12 20:32:50.358070 2026] [:error] [pid 25437:tid 25456] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Sun Apr 12 20:32:50.598058 2026] [:error] [pid 25437:tid 25448] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sun Apr 12 20:32:50.837615 2026] [:error] [pid 25437:tid 25458] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Apr 12 20:32:51.090075 2026] [:error] [pid 25437:tid 25460] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Sun Apr 12 20:32:51.354146 2026] [:error] [pid 25437:tid 25444] [client 158.158.73.158:27352] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-01ul.php
[Sun Apr 12 20:32:51.622292 2026] [:error] [pid 25437:tid 25447] [client 158.158.73.158:27352] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aduQ83f97wYZje1ep_NhyAAAAMg"]
[Sun Apr 12 20:32:53.839548 2026] [:error] [pid 60280:tid 60306] [client 158.158.73.158:37193] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aduQ9XBlLnDOYuIykki55wAAAdg"]
[Sun Apr 12 20:32:55.381622 2026] [:error] [pid 60280:tid 60285] [client 158.158.73.158:3967] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aduQ93BlLnDOYuIykki57gAAAcM"]
[Sun Apr 12 20:32:56.226949 2026] [:error] [pid 60280:tid 60305] [client 158.158.73.158:37200] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aduQ-HBlLnDOYuIykki58wAAAdc"]
[Sun Apr 12 20:32:57.365289 2026] [:error] [pid 26600:tid 26651] [client 158.158.73.158:51303] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aduQ-e1YwAZiXhQKLYpPagAAAZY"]
[Sun Apr 12 20:32:58.814730 2026] [:error] [pid 60280:tid 60295] [client 158.158.73.158:23921] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aduQ-nBlLnDOYuIykki5_gAAAc0"]
[Sun Apr 12 20:32:59.700849 2026] [:error] [pid 26567:tid 26585] [client 158.158.73.158:27340] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aduQ-3hRpg6ptWFyFx3AFAAAARA"]
[Sun Apr 12 20:33:00.528916 2026] [:error] [pid 60280:tid 60306] [client 158.158.73.158:50507] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aduQ_HBlLnDOYuIykki6AQAAAdg"]
[Sun Apr 12 20:33:01.628439 2026] [:error] [pid 25437:tid 25461] [client 158.158.73.158:32046] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aduQ_Xf97wYZje1ep_Nh0wAAANY"]
[Sun Apr 12 20:33:02.731255 2026] [:error] [pid 26600:tid 26632] [client 158.158.73.158:50530] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aduQ_u1YwAZiXhQKLYpPdgAAAYM"]
[Sun Apr 12 20:33:08.004381 2026] [:error] [pid 60280:tid 60287] [client 158.158.73.158:50983] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aduRBHBlLnDOYuIykki6GgAAAcU"]
[Sun Apr 12 20:33:11.480171 2026] [:error] [pid 25437:tid 25458] [client 158.158.73.158:50501] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aduRB3f97wYZje1ep_Nh4AAAANM"]
[Sun Apr 12 20:33:14.331945 2026] [:error] [pid 60280:tid 60286] [client 158.158.73.158:23884] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aduRCnBlLnDOYuIykki6LwAAAcQ"]
[Sun Apr 12 20:33:15.602790 2026] [:error] [pid 25328:tid 25403] [client 158.158.73.158:23839] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aduRC8xUaQZxT-e0YsBKxQAAAFY"]
[Sun Apr 12 20:33:16.269174 2026] [:error] [pid 26567:tid 26576] [client 158.158.73.158:23827] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aduRDHhRpg6ptWFyFx3ALAAAAQc"]
[Sun Apr 12 20:33:17.232829 2026] [:error] [pid 25327:tid 25358] [client 158.158.73.158:27388] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aduRDS6h2tZEVJo9JFLl2QAAABY"]
[Sun Apr 12 20:33:18.502105 2026] [:error] [pid 25328:tid 25403] [client 158.158.73.158:51287] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aduRDsxUaQZxT-e0YsBK0gAAAFY"]
[Sun Apr 12 20:33:19.536503 2026] [:error] [pid 26599:tid 26621] [client 158.158.73.158:61515] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aduRD3G89LXoQbk_rwDaJgAAAVM"]
[Sun Apr 12 20:33:20.543245 2026] [:error] [pid 26567:tid 26584] [client 158.158.73.158:27357] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aduREHhRpg6ptWFyFx3ANQAAAQ8"]
[Sun Apr 12 20:33:21.559372 2026] [:error] [pid 60280:tid 60289] [client 158.158.73.158:23931] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aduREXBlLnDOYuIykki6QAAAAcc"]
[Sun Apr 12 20:33:22.507638 2026] [:error] [pid 25437:tid 25448] [client 158.158.73.158:3951] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aduREnf97wYZje1ep_Nh5wAAAMk"]
[Sun Apr 12 20:33:24.294296 2026] [:error] [pid 25327:tid 25358] [client 158.158.73.158:3294] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aduRFC6h2tZEVJo9JFLl4QAAABY"]
[Sun Apr 12 20:33:25.433594 2026] [:error] [pid 25437:tid 25452] [client 158.158.73.158:27333] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aduRFXf97wYZje1ep_Nh9wAAAM0"]
[Sun Apr 12 20:33:26.689176 2026] [:error] [pid 60280:tid 60299] [client 158.158.73.158:32007] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aduRFnBlLnDOYuIykki6SgAAAdE"]
[Sun Apr 12 20:33:27.965388 2026] [:error] [pid 60280:tid 60286] [client 158.158.73.158:27330] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aduRF3BlLnDOYuIykki6VQAAAcQ"]
[Sun Apr 12 20:33:29.318716 2026] [:error] [pid 60280:tid 60305] [client 158.158.73.158:46133] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aduRGXBlLnDOYuIykki6WwAAAdc"]
[Sun Apr 12 20:33:30.112598 2026] [:error] [pid 25437:tid 25440] [client 158.158.73.158:37240] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aduRGnf97wYZje1ep_Nh_wAAAME"]
[Sun Apr 12 20:33:32.712587 2026] [:error] [pid 60280:tid 60298] [client 158.158.73.158:61552] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aduRHHBlLnDOYuIykki6YwAAAdA"]
[Sun Apr 12 20:33:37.064613 2026] [:error] [pid 25328:tid 25408] [client 158.158.73.158:3325] [client 158.158.73.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aduRIcxUaQZxT-e0YsBLFQAAAFg"]
[Sun Apr 12 20:33:52.348059 2026] [:error] [pid 25329:tid 25407] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sun Apr 12 20:33:52.588841 2026] [:error] [pid 25329:tid 25399] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Sun Apr 12 20:33:52.830461 2026] [:error] [pid 25329:tid 25381] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sun Apr 12 20:33:53.340164 2026] [:error] [pid 25329:tid 25386] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Apr 12 20:33:53.580601 2026] [:error] [pid 25329:tid 25400] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 12 20:33:53.821687 2026] [:error] [pid 25329:tid 25409] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Apr 12 20:33:54.067901 2026] [:error] [pid 25329:tid 25414] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Sun Apr 12 20:33:54.315127 2026] [:error] [pid 25329:tid 25376] [client 158.158.73.158:51279] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260401065719.php
[Mon Apr 13 00:05:05.662375 2026] [:error] [pid 26600:tid 26633] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Mon Apr 13 00:05:05.893726 2026] [:error] [pid 26600:tid 26637] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/rkszbxbh.php
[Mon Apr 13 00:05:06.101758 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:65093] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Mon Apr 13 00:05:06.102225 2026] [:error] [pid 26600:tid 26634] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/hanna1337.php
[Mon Apr 13 00:05:06.337090 2026] [:error] [pid 26600:tid 26630] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/gt.php
[Mon Apr 13 00:05:06.337299 2026] [:error] [pid 25327:tid 25341] [client 20.151.218.28:65093] File does not exist: /usr/local/apache/htdocs/suspended-page/rkszbxbh.php
[Mon Apr 13 00:05:06.546506 2026] [:error] [pid 25327:tid 25344] [client 20.151.218.28:65093] File does not exist: /usr/local/apache/htdocs/suspended-page/hanna1337.php
[Mon Apr 13 00:05:07.004645 2026] [:error] [pid 26600:tid 26648] [client 20.151.218.28:64499] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCs-1YwAZiXhQKLYp6wAAAAZM"]
[Mon Apr 13 00:05:07.060450 2026] [:error] [pid 25327:tid 25340] [client 20.151.218.28:65093] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gt.php"] [unique_id "advCsy6h2tZEVJo9JFIs8QAAAAQ"]
[Mon Apr 13 00:05:07.730856 2026] [:error] [pid 60280:tid 60304] [client 20.151.218.28:64455] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCs3BlLnDOYuIykkgvcwAAAdY"]
[Mon Apr 13 00:05:08.303028 2026] [:error] [pid 60280:tid 60286] [client 20.151.218.28:65106] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gt.php"] [unique_id "advCtHBlLnDOYuIykkgvdgAAAcQ"]
[Mon Apr 13 00:05:08.738725 2026] [:error] [pid 25329:tid 25411] [client 20.151.218.28:65046] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCtGdcIYsS8Iyaj13wcQAAAJQ"]
[Mon Apr 13 00:05:09.696733 2026] [:error] [pid 26600:tid 26647] [client 20.151.218.28:64410] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCte1YwAZiXhQKLYp6xAAAAZI"]
[Mon Apr 13 00:05:09.741006 2026] [:error] [pid 25328:tid 25377] [client 20.151.218.28:65054] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gt.php"] [unique_id "advCtcxUaQZxT-e0YsCOhgAAAEo"]
[Mon Apr 13 00:05:11.035212 2026] [:error] [pid 26600:tid 26646] [client 20.151.218.28:65133] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advCt-1YwAZiXhQKLYp6xgAAAZE"]
[Mon Apr 13 00:05:11.148301 2026] [:error] [pid 25437:tid 25440] [client 20.151.218.28:65101] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gt.php"] [unique_id "advCt3f97wYZje1ep_OYQgAAAME"]
[Mon Apr 13 00:05:12.093206 2026] [:error] [pid 25437:tid 25448] [client 20.151.218.28:65096] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/datab"] [unique_id "advCuHf97wYZje1ep_OYRAAAAMk"]
[Mon Apr 13 00:05:12.453657 2026] [:error] [pid 26599:tid 26602] [client 20.151.218.28:64489] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advCuHG89LXoQbk_rwD5_gAAAUA"]
[Mon Apr 13 00:05:13.756433 2026] [:error] [pid 26599:tid 26613] [client 20.151.218.28:65086] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advCuXG89LXoQbk_rwD6BAAAAUs"]
[Mon Apr 13 00:05:14.037332 2026] [:error] [pid 25329:tid 25374] [client 20.151.218.28:64511] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/datab"] [unique_id "advCumdcIYsS8Iyaj13wdAAAAIA"]
[Mon Apr 13 00:05:14.734388 2026] [:error] [pid 26599:tid 26612] [client 20.151.218.28:64386] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advCunG89LXoQbk_rwD6BgAAAUo"]
[Mon Apr 13 00:05:15.590463 2026] [:error] [pid 25328:tid 25398] [client 20.151.218.28:64482] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/datab"] [unique_id "advCu8xUaQZxT-e0YsCOjQAAAFQ"]
[Mon Apr 13 00:05:15.787889 2026] [:error] [pid 25437:tid 25442] [client 20.151.218.28:64503] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "advCu3f97wYZje1ep_OYSwAAAMM"]
[Mon Apr 13 00:05:16.432584 2026] [:error] [pid 25329:tid 25392] [client 20.151.218.28:65038] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "advCvGdcIYsS8Iyaj13weQAAAIk"]
[Mon Apr 13 00:05:17.144475 2026] [:error] [pid 25329:tid 25382] [client 20.151.218.28:65137] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/datab"] [unique_id "advCvWdcIYsS8Iyaj13wfAAAAIQ"]
[Mon Apr 13 00:05:17.394010 2026] [:error] [pid 60280:tid 60298] [client 20.151.218.28:65074] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "advCvXBlLnDOYuIykkgvggAAAdA"]
[Mon Apr 13 00:05:18.309206 2026] [:error] [pid 25327:tid 25358] [client 20.151.218.28:65039] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "advCvi6h2tZEVJo9JFIs9gAAABY"]
[Mon Apr 13 00:05:19.132576 2026] [:error] [pid 25327:tid 25344] [client 20.151.218.28:64506] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "advCvy6h2tZEVJo9JFIs9wAAAAg"]
[Mon Apr 13 00:05:19.250850 2026] [:error] [pid 25327:tid 25345] [client 20.151.218.28:65077] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/sxx.php"] [unique_id "advCvy6h2tZEVJo9JFIs-AAAAAk"]
[Mon Apr 13 00:05:19.865230 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:64466] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "advCvy6h2tZEVJo9JFIs-QAAAAc"]
[Mon Apr 13 00:05:21.376824 2026] [:error] [pid 60280:tid 60298] [client 20.151.218.28:64487] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "advCwXBlLnDOYuIykkgvjAAAAdA"]
[Mon Apr 13 00:05:22.508611 2026] [:error] [pid 26600:tid 26650] [client 20.151.218.28:65053] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "advCwu1YwAZiXhQKLYp6zwAAAZU"]
[Mon Apr 13 00:05:22.746283 2026] [:error] [pid 25327:tid 25342] [client 20.151.218.28:64454] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/sxx.php"] [unique_id "advCwi6h2tZEVJo9JFIs_QAAAAY"]
[Mon Apr 13 00:05:23.618745 2026] [:error] [pid 26567:tid 26592] [client 20.151.218.28:65081] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "advCw3hRpg6ptWFyFx3kNgAAARc"]
[Mon Apr 13 00:05:24.531288 2026] [:error] [pid 25437:tid 25455] [client 20.151.218.28:64077] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "advCxHf97wYZje1ep_OYUwAAANA"]
[Mon Apr 13 00:05:24.583251 2026] [:error] [pid 25329:tid 25415] [client 20.151.218.28:65060] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/sxx.php"] [unique_id "advCxGdcIYsS8Iyaj13whwAAAJg"]
[Mon Apr 13 00:05:25.045794 2026] [:error] [pid 26567:tid 26588] [client 20.151.218.28:64397] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "advCxXhRpg6ptWFyFx3kOAAAARM"]
[Mon Apr 13 00:05:25.778670 2026] [:error] [pid 25437:tid 25444] [client 20.151.218.28:64405] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/sxx.php"] [unique_id "advCxXf97wYZje1ep_OYVQAAAMU"]
[Mon Apr 13 00:05:25.842317 2026] [:error] [pid 25327:tid 25342] [client 20.151.218.28:64408] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "advCxS6h2tZEVJo9JFItCQAAAAY"]
[Mon Apr 13 00:05:27.088614 2026] [:error] [pid 25329:tid 25409] [client 20.151.218.28:65122] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "advCx2dcIYsS8Iyaj13wiwAAAJM"]
[Mon Apr 13 00:05:28.132620 2026] [:error] [pid 26599:tid 26625] [client 20.151.218.28:64472] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCyHG89LXoQbk_rwD6GwAAAVc"]
[Mon Apr 13 00:05:28.582046 2026] [:error] [pid 26599:tid 26604] [client 20.151.218.28:64505] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "advCyHG89LXoQbk_rwD6HgAAAUI"]
[Mon Apr 13 00:05:29.900673 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:65048] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "advCyXBlLnDOYuIykkgvnAAAAdQ"]
[Mon Apr 13 00:05:30.398319 2026] [:error] [pid 25437:tid 25445] [client 20.151.218.28:64390] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCynf97wYZje1ep_OYXAAAAMY"]
[Mon Apr 13 00:05:31.450714 2026] [:error] [pid 25329:tid 25402] [client 20.151.218.28:64458] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "advCy2dcIYsS8Iyaj13wkwAAAI8"]
[Mon Apr 13 00:05:32.614517 2026] [:error] [pid 25329:tid 25400] [client 20.151.218.28:65119] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "advCzGdcIYsS8Iyaj13wlQAAAI4"]
[Mon Apr 13 00:05:33.034781 2026] [:error] [pid 25327:tid 25348] [client 20.151.218.28:64106] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCzS6h2tZEVJo9JFItDgAAAAw"]
[Mon Apr 13 00:05:33.568645 2026] [:error] [pid 60280:tid 60304] [client 20.151.218.28:65145] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "advCzXBlLnDOYuIykkgvoQAAAdY"]
[Mon Apr 13 00:05:35.023698 2026] [:error] [pid 26567:tid 26583] [client 20.151.218.28:64509] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/r1.php"] [unique_id "advCz3hRpg6ptWFyFx3kQwAAAQ4"]
[Mon Apr 13 00:05:35.590833 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:64460] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "advCz3BlLnDOYuIykkgvqQAAAcY"]
[Mon Apr 13 00:05:36.257936 2026] [:error] [pid 25329:tid 25402] [client 20.151.218.28:64462] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advC0GdcIYsS8Iyaj13wnAAAAI8"]
[Mon Apr 13 00:05:37.220208 2026] [:error] [pid 26600:tid 26632] [client 20.151.218.28:65115] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "advC0e1YwAZiXhQKLYp62gAAAYM"]
[Mon Apr 13 00:05:37.924261 2026] [:error] [pid 25327:tid 25351] [client 20.151.218.28:64393] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advC0S6h2tZEVJo9JFItEQAAAA8"]
[Mon Apr 13 00:05:38.484585 2026] [:error] [pid 25327:tid 25345] [client 20.151.218.28:65026] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "advC0i6h2tZEVJo9JFItFAAAAAk"]
[Mon Apr 13 00:05:40.085517 2026] [:error] [pid 26599:tid 26624] [client 20.151.218.28:65098] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advC1HG89LXoQbk_rwD6NQAAAVY"]
[Mon Apr 13 00:05:40.797956 2026] [:error] [pid 26567:tid 26586] [client 20.151.218.28:64507] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "advC1HhRpg6ptWFyFx3kSQAAARE"]
[Mon Apr 13 00:05:42.848639 2026] [:error] [pid 60280:tid 60306] [client 20.151.218.28:64120] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "advC1nBlLnDOYuIykkgvrQAAAdg"]
[Mon Apr 13 00:05:44.882603 2026] [:error] [pid 25328:tid 25380] [client 20.151.218.28:65135] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "advC2MxUaQZxT-e0YsCOkwAAAEw"]
[Mon Apr 13 00:05:44.977092 2026] [:error] [pid 26567:tid 26572] [client 20.151.218.28:64072] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rk1.php"] [unique_id "advC2HhRpg6ptWFyFx3kVwAAAQM"]
[Mon Apr 13 00:05:46.218039 2026] [:error] [pid 26567:tid 26570] [client 20.151.218.28:64403] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC2nhRpg6ptWFyFx3kWAAAAQE"]
[Mon Apr 13 00:05:47.555151 2026] [:error] [pid 25327:tid 25359] [client 20.151.218.28:64491] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC2y6h2tZEVJo9JFItIgAAABc"]
[Mon Apr 13 00:05:49.184382 2026] [:error] [pid 25329:tid 25381] [client 20.151.218.28:65062] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC3WdcIYsS8Iyaj13wogAAAIM"]
[Mon Apr 13 00:05:49.870805 2026] [:error] [pid 25329:tid 25376] [client 20.151.218.28:64387] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "advC3WdcIYsS8Iyaj13wowAAAIE"]
[Mon Apr 13 00:05:50.512000 2026] [:error] [pid 26599:tid 26606] [client 20.151.218.28:64090] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC3nG89LXoQbk_rwD6SgAAAUQ"]
[Mon Apr 13 00:05:52.302356 2026] [:error] [pid 60280:tid 60297] [client 20.151.218.28:65024] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC4HBlLnDOYuIykkgvxgAAAc8"]
[Mon Apr 13 00:05:54.805815 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:65031] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC4nBlLnDOYuIykkgv1AAAAcY"]
[Mon Apr 13 00:05:55.637356 2026] [:error] [pid 25437:tid 25463] [client 20.151.218.28:65118] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "advC43f97wYZje1ep_OYdQAAANg"]
[Mon Apr 13 00:05:59.364073 2026] [:error] [pid 60280:tid 60283] [client 20.151.218.28:65029] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC53BlLnDOYuIykkgv5QAAAcE"]
[Mon Apr 13 00:06:00.092454 2026] [:error] [pid 60280:tid 60285] [client 20.151.218.28:64480] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah/xBrain.php"] [unique_id "advC6HBlLnDOYuIykkgv5wAAAcM"]
[Mon Apr 13 00:06:01.685220 2026] [:error] [pid 25437:tid 25444] [client 20.151.218.28:64492] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC6Xf97wYZje1ep_OYfgAAAMU"]
[Mon Apr 13 00:06:03.004932 2026] [:error] [pid 25328:tid 25379] [client 20.151.218.28:65150] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "advC68xUaQZxT-e0YsCOoAAAAEs"]
[Mon Apr 13 00:06:03.951327 2026] [:error] [pid 26600:tid 26646] [client 20.151.218.28:65042] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "advC6-1YwAZiXhQKLYp68wAAAZE"]
[Mon Apr 13 00:06:04.370583 2026] [:error] [pid 26599:tid 26611] [client 20.151.218.28:65150] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "advC7HG89LXoQbk_rwD6UAAAAUk"]
[Mon Apr 13 00:06:05.232075 2026] [:error] [pid 25437:tid 25447] [client 20.151.218.28:65144] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "advC7Xf97wYZje1ep_OYhwAAAMg"]
[Mon Apr 13 00:06:05.448222 2026] [:error] [pid 60280:tid 60285] [client 20.151.218.28:64074] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pegi.PhP8"] [unique_id "advC7XBlLnDOYuIykkgv8AAAAcM"]
[Mon Apr 13 00:06:06.288301 2026] [:error] [pid 25327:tid 25354] [client 20.151.218.28:65087] File does not exist: /usr/local/apache/htdocs/suspended-page/4563.php
[Mon Apr 13 00:06:06.498301 2026] [:error] [pid 25327:tid 25360] [client 20.151.218.28:65087] File does not exist: /usr/local/apache/htdocs/suspended-page/wunaivpl.php
[Mon Apr 13 00:06:07.098873 2026] [:error] [pid 25327:tid 25346] [client 20.151.218.28:64400] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa-rex1.php
[Mon Apr 13 00:06:07.180635 2026] [:error] [pid 25327:tid 25344] [client 20.151.218.28:65087] File does not exist: /usr/local/apache/htdocs/suspended-page/reune.php
[Mon Apr 13 00:06:07.308501 2026] [:error] [pid 25327:tid 25353] [client 20.151.218.28:64400] File does not exist: /usr/local/apache/htdocs/suspended-page/suck.php
[Mon Apr 13 00:06:07.396035 2026] [:error] [pid 25327:tid 25358] [client 20.151.218.28:65087] File does not exist: /usr/local/apache/htdocs/suspended-page/dw.php
[Mon Apr 13 00:06:07.518215 2026] [:error] [pid 25327:tid 25350] [client 20.151.218.28:64400] File does not exist: /usr/local/apache/htdocs/suspended-page/hikudpno.php
[Mon Apr 13 00:06:07.827586 2026] [:error] [pid 25327:tid 25355] [client 20.151.218.28:65087] File does not exist: /usr/local/apache/htdocs/suspended-page/shellx.php
[Mon Apr 13 00:06:08.057793 2026] [:error] [pid 25327:tid 25352] [client 20.151.218.28:64400] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC8C6h2tZEVJo9JFItQAAAABA"]
[Mon Apr 13 00:06:08.182153 2026] [:error] [pid 25327:tid 25345] [client 20.151.218.28:65087] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "advC8C6h2tZEVJo9JFItQQAAAAk"]
[Mon Apr 13 00:06:08.941912 2026] [:error] [pid 60280:tid 60287] [client 20.151.218.28:65143] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC8HBlLnDOYuIykkgv9QAAAcU"]
[Mon Apr 13 00:06:09.093438 2026] [:error] [pid 25328:tid 25375] [client 20.151.218.28:64490] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "advC8cxUaQZxT-e0YsCOowAAAEk"]
[Mon Apr 13 00:06:09.823541 2026] [:error] [pid 26567:tid 26577] [client 20.151.218.28:65035] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "advC8XhRpg6ptWFyFx3kZQAAAQg"]
[Mon Apr 13 00:06:10.008292 2026] [:error] [pid 25327:tid 25360] [client 20.151.218.28:64415] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC8i6h2tZEVJo9JFItQgAAABg"]
[Mon Apr 13 00:06:10.557836 2026] [:error] [pid 26600:tid 26640] [client 20.151.218.28:64444] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "advC8u1YwAZiXhQKLYp6_wAAAYs"]
[Mon Apr 13 00:06:11.048913 2026] [:error] [pid 26600:tid 26632] [client 20.151.218.28:64488] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "advC8-1YwAZiXhQKLYp7AQAAAYM"]
[Mon Apr 13 00:06:11.271879 2026] [:error] [pid 26600:tid 26649] [client 20.151.218.28:65082] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "advC8-1YwAZiXhQKLYp7AwAAAZQ"]
[Mon Apr 13 00:06:11.765045 2026] [:error] [pid 25327:tid 25349] [client 20.151.218.28:65028] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC8y6h2tZEVJo9JFItRwAAAA0"]
[Mon Apr 13 00:06:12.010814 2026] [:error] [pid 25327:tid 25344] [client 20.151.218.28:64450] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "advC9C6h2tZEVJo9JFItSQAAAAg"]
[Mon Apr 13 00:06:12.894393 2026] [:error] [pid 60280:tid 60295] [client 20.151.218.28:65068] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC9HBlLnDOYuIykkgv_wAAAc0"]
[Mon Apr 13 00:06:13.124281 2026] [:error] [pid 60280:tid 60306] [client 20.151.218.28:61125] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "advC9XBlLnDOYuIykkgwAAAAAdg"]
[Mon Apr 13 00:06:14.229408 2026] [:error] [pid 26599:tid 26612] [client 20.151.218.28:65141] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "advC9nG89LXoQbk_rwD6WgAAAUo"]
[Mon Apr 13 00:06:14.429877 2026] [:error] [pid 60280:tid 60298] [client 20.151.218.28:65121] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC9nBlLnDOYuIykkgwAgAAAdA"]
[Mon Apr 13 00:06:15.273585 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:65112] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "advC93BlLnDOYuIykkgwBQAAAdQ"]
[Mon Apr 13 00:06:15.926996 2026] [:error] [pid 60280:tid 60300] [client 20.151.218.28:64452] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "advC93BlLnDOYuIykkgwCgAAAdI"]
[Mon Apr 13 00:06:16.327109 2026] [:error] [pid 26567:tid 26582] [client 20.151.218.28:64508] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "advC-HhRpg6ptWFyFx3kZwAAAQ0"]
[Mon Apr 13 00:06:17.240668 2026] [:error] [pid 26600:tid 26644] [client 20.151.218.28:65071] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "advC-e1YwAZiXhQKLYp7CQAAAY8"]
[Mon Apr 13 00:06:17.775277 2026] [:error] [pid 25328:tid 25370] [client 20.151.218.28:65126] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "advC-cxUaQZxT-e0YsCOsAAAAEY"]
[Mon Apr 13 00:06:18.126847 2026] [:error] [pid 25437:tid 25460] [client 20.151.218.28:65131] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "advC-nf97wYZje1ep_OYjQAAANU"]
[Mon Apr 13 00:06:18.830302 2026] [:error] [pid 25437:tid 25457] [client 20.151.218.28:64019] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "advC-nf97wYZje1ep_OYjgAAANI"]
[Mon Apr 13 00:06:19.526970 2026] [:error] [pid 25329:tid 25415] [client 20.151.218.28:65139] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "advC-2dcIYsS8Iyaj13wuQAAAJg"]
[Mon Apr 13 00:06:19.645757 2026] [:error] [pid 26567:tid 26571] [client 20.151.218.28:64427] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "advC-3hRpg6ptWFyFx3kaQAAAQI"]
[Mon Apr 13 00:06:20.329523 2026] [:error] [pid 25327:tid 25345] [client 20.151.218.28:65089] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "advC_C6h2tZEVJo9JFItVgAAAAk"]
[Mon Apr 13 00:06:21.872791 2026] [:error] [pid 26600:tid 26635] [client 20.151.218.28:65142] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "advC_e1YwAZiXhQKLYp7GAAAAYY"]
[Mon Apr 13 00:06:22.953164 2026] [:error] [pid 60280:tid 60289] [client 20.151.218.28:64023] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "advC_nBlLnDOYuIykkgwKAAAAcc"]
[Mon Apr 13 00:06:23.762104 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:64385] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "advC_y6h2tZEVJo9JFItYQAAAAc"]
[Mon Apr 13 00:06:23.986678 2026] [:error] [pid 25327:tid 25346] [client 20.151.218.28:65057] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "advC_y6h2tZEVJo9JFItYwAAAAo"]
[Mon Apr 13 00:06:24.583836 2026] [:error] [pid 26567:tid 26578] [client 20.151.218.28:64107] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "advDAHhRpg6ptWFyFx3kbwAAAQk"]
[Mon Apr 13 00:06:25.673216 2026] [:error] [pid 26600:tid 26630] [client 20.151.218.28:64095] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "advDAe1YwAZiXhQKLYp7GwAAAYE"]
[Mon Apr 13 00:06:25.744104 2026] [:error] [pid 60280:tid 60295] [client 20.151.218.28:64039] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "advDAXBlLnDOYuIykkgwKwAAAc0"]
[Mon Apr 13 00:06:27.125806 2026] [:error] [pid 60280:tid 60290] [client 20.151.218.28:65032] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "advDA3BlLnDOYuIykkgwMwAAAcg"]
[Mon Apr 13 00:06:27.562218 2026] [:error] [pid 26600:tid 26634] [client 20.151.218.28:65025] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "advDA-1YwAZiXhQKLYp7HQAAAYU"]
[Mon Apr 13 00:06:28.425566 2026] [:error] [pid 25437:tid 25461] [client 20.151.218.28:64502] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "advDBHf97wYZje1ep_OYlgAAANY"]
[Mon Apr 13 00:06:29.606419 2026] [:error] [pid 25327:tid 25347] [client 20.151.218.28:65109] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "advDBS6h2tZEVJo9JFItcwAAAAs"]
[Mon Apr 13 00:06:30.896565 2026] [:error] [pid 26600:tid 26632] [client 20.151.218.28:65049] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "advDBu1YwAZiXhQKLYp7IwAAAYM"]
[Mon Apr 13 00:06:31.630528 2026] [:error] [pid 25327:tid 25352] [client 20.151.218.28:64081] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "advDBy6h2tZEVJo9JFItegAAABA"]
[Mon Apr 13 00:06:32.507941 2026] [:error] [pid 25437:tid 25449] [client 20.151.218.28:64401] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "advDCHf97wYZje1ep_OYngAAAMo"]
[Mon Apr 13 00:06:33.567967 2026] [:error] [pid 25437:tid 25453] [client 20.151.218.28:61095] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "advDCXf97wYZje1ep_OYpQAAAM4"]
[Mon Apr 13 00:06:33.708720 2026] [:error] [pid 25327:tid 25359] [client 20.151.218.28:64439] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "advDCS6h2tZEVJo9JFItgAAAABc"]
[Mon Apr 13 00:06:34.901830 2026] [:error] [pid 26600:tid 26634] [client 20.151.218.28:64442] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "advDCu1YwAZiXhQKLYp7KAAAAYU"]
[Mon Apr 13 00:06:35.094628 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:64048] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "advDCy6h2tZEVJo9JFIthAAAAAA"]
[Mon Apr 13 00:06:36.537478 2026] [:error] [pid 25328:tid 25369] [client 20.151.218.28:64412] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "advDDMxUaQZxT-e0YsCOzwAAAEU"]
[Mon Apr 13 00:06:37.000867 2026] [:error] [pid 25328:tid 25385] [client 20.151.218.28:64437] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "advDDcxUaQZxT-e0YsCO0QAAAE4"]
[Mon Apr 13 00:06:37.689969 2026] [:error] [pid 25328:tid 25380] [client 20.151.218.28:64475] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "advDDcxUaQZxT-e0YsCO1AAAAEw"]
[Mon Apr 13 00:06:38.993675 2026] [:error] [pid 25327:tid 25347] [client 20.151.218.28:65104] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "advDDi6h2tZEVJo9JFItjgAAAAs"]
[Mon Apr 13 00:06:39.536529 2026] [:error] [pid 25328:tid 25396] [client 20.151.218.28:65055] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "advDD8xUaQZxT-e0YsCO2AAAAFM"]
[Mon Apr 13 00:06:40.239378 2026] [:error] [pid 25328:tid 25365] [client 20.151.218.28:65111] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDEMxUaQZxT-e0YsCO2gAAAEE"]
[Mon Apr 13 00:06:41.950929 2026] [:error] [pid 26567:tid 26592] [client 20.151.218.28:64399] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDEXhRpg6ptWFyFx3kiwAAARc"]
[Mon Apr 13 00:06:42.570579 2026] [:error] [pid 25328:tid 25366] [client 20.151.218.28:65030] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "advDEsxUaQZxT-e0YsCO5QAAAEI"]
[Mon Apr 13 00:06:43.650546 2026] [:error] [pid 25329:tid 25376] [client 20.151.218.28:65132] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDE2dcIYsS8Iyaj13wwgAAAIE"]
[Mon Apr 13 00:06:45.174941 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:64411] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "advDFS6h2tZEVJo9JFItlAAAAAc"]
[Mon Apr 13 00:06:45.303489 2026] [:error] [pid 25327:tid 25337] [client 20.151.218.28:64414] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDFS6h2tZEVJo9JFItlQAAAAE"]
[Mon Apr 13 00:06:46.434866 2026] [:error] [pid 26599:tid 26608] [client 20.151.218.28:65079] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDFnG89LXoQbk_rwD6ZwAAAUY"]
[Mon Apr 13 00:06:46.910837 2026] [:error] [pid 25327:tid 25351] [client 20.151.218.28:64072] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "advDFi6h2tZEVJo9JFItmgAAAA8"]
[Mon Apr 13 00:06:47.869783 2026] [:error] [pid 60280:tid 60294] [client 20.151.218.28:65044] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDF3BlLnDOYuIykkgwPwAAAcw"]
[Mon Apr 13 00:06:47.983214 2026] [:error] [pid 25437:tid 25453] [client 20.151.218.28:64099] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "advDF3f97wYZje1ep_OYtAAAAM4"]
[Mon Apr 13 00:06:48.977889 2026] [:error] [pid 25437:tid 25441] [client 20.151.218.28:65033] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advDGHf97wYZje1ep_OYuAAAAMI"]
[Mon Apr 13 00:06:49.343034 2026] [:error] [pid 25328:tid 25389] [client 20.151.218.28:64457] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDGcxUaQZxT-e0YsCO7QAAAFA"]
[Mon Apr 13 00:06:50.412618 2026] [:error] [pid 25437:tid 25457] [client 20.151.218.28:64402] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advDGnf97wYZje1ep_OYuwAAANI"]
[Mon Apr 13 00:06:50.927292 2026] [:error] [pid 25329:tid 25382] [client 20.151.218.28:64053] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDGmdcIYsS8Iyaj13w1QAAAIQ"]
[Mon Apr 13 00:06:52.111799 2026] [:error] [pid 25329:tid 25374] [client 20.151.218.28:64406] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advDHGdcIYsS8Iyaj13w2wAAAIA"]
[Mon Apr 13 00:06:52.147952 2026] [:error] [pid 25329:tid 25404] [client 20.151.218.28:65040] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDHGdcIYsS8Iyaj13w3AAAAJA"]
[Mon Apr 13 00:06:52.846120 2026] [:error] [pid 25329:tid 25378] [client 20.151.218.28:64425] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDHGdcIYsS8Iyaj13w4AAAAII"]
[Mon Apr 13 00:06:53.736385 2026] [:error] [pid 25327:tid 25342] [client 20.151.218.28:61144] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advDHS6h2tZEVJo9JFItoQAAAAY"]
[Mon Apr 13 00:06:53.851920 2026] [:error] [pid 25329:tid 25390] [client 20.151.218.28:64113] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDHWdcIYsS8Iyaj13w5wAAAIg"]
[Mon Apr 13 00:06:55.031289 2026] [:error] [pid 25327:tid 25344] [client 20.151.218.28:65036] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDHy6h2tZEVJo9JFItpwAAAAg"]
[Mon Apr 13 00:06:55.516914 2026] [:error] [pid 25327:tid 25340] [client 20.151.218.28:64476] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "advDHy6h2tZEVJo9JFItqAAAAAQ"]
[Mon Apr 13 00:06:56.051099 2026] [:error] [pid 25328:tid 25370] [client 20.151.218.28:64469] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDIMxUaQZxT-e0YsCO8gAAAEY"]
[Mon Apr 13 00:06:57.024521 2026] [:error] [pid 25329:tid 25378] [client 20.151.218.28:65045] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDIWdcIYsS8Iyaj13w-AAAAII"]
[Mon Apr 13 00:06:57.645195 2026] [:error] [pid 25329:tid 25395] [client 20.151.218.28:64002] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "advDIWdcIYsS8Iyaj13w-gAAAIs"]
[Mon Apr 13 00:06:58.059871 2026] [:error] [pid 25327:tid 25347] [client 20.151.218.28:64496] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDIi6h2tZEVJo9JFIttAAAAAs"]
[Mon Apr 13 00:06:58.815462 2026] [:error] [pid 25327:tid 25359] [client 20.151.218.28:61060] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDIi6h2tZEVJo9JFItuwAAABc"]
[Mon Apr 13 00:06:59.759797 2026] [:error] [pid 25328:tid 25408] [client 20.151.218.28:64470] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "advDI8xUaQZxT-e0YsCO8wAAAFg"]
[Mon Apr 13 00:06:59.771623 2026] [:error] [pid 26599:tid 26616] [client 20.151.218.28:64421] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDI3G89LXoQbk_rwD6aAAAAU4"]
[Mon Apr 13 00:07:00.625291 2026] [:error] [pid 25437:tid 25442] [client 20.151.218.28:64384] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDJHf97wYZje1ep_OYygAAAMM"]
[Mon Apr 13 00:07:01.200526 2026] [:error] [pid 25328:tid 25366] [client 20.151.218.28:64123] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "advDJcxUaQZxT-e0YsCO9wAAAEI"]
[Mon Apr 13 00:07:01.361219 2026] [:error] [pid 26567:tid 26574] [client 20.151.218.28:64453] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDJXhRpg6ptWFyFx3kpAAAAQU"]
[Mon Apr 13 00:07:02.306599 2026] [:error] [pid 60280:tid 60293] [client 20.151.218.28:64477] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "advDJnBlLnDOYuIykkgwQQAAAcs"]
[Mon Apr 13 00:07:02.387362 2026] [:error] [pid 25327:tid 25356] [client 20.151.218.28:61138] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDJi6h2tZEVJo9JFItxAAAABQ"]
[Mon Apr 13 00:07:03.694767 2026] [:error] [pid 26600:tid 26633] [client 20.151.218.28:65116] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "advDJ-1YwAZiXhQKLYp7OwAAAYQ"]
[Mon Apr 13 00:07:03.726012 2026] [:error] [pid 25437:tid 25446] [client 20.151.218.28:64116] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "advDJ3f97wYZje1ep_OYzAAAAMc"]
[Mon Apr 13 00:07:05.087628 2026] [:error] [pid 25329:tid 25386] [client 20.151.218.28:64117] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "advDKWdcIYsS8Iyaj13xDgAAAIY"]
[Mon Apr 13 00:07:05.841917 2026] [:error] [pid 25328:tid 25364] [client 20.151.218.28:64014] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "advDKcxUaQZxT-e0YsCPBgAAAEA"]
[Mon Apr 13 00:07:06.811837 2026] [:error] [pid 25329:tid 25407] [client 20.151.218.28:65090] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "advDKmdcIYsS8Iyaj13xEgAAAJI"]
[Mon Apr 13 00:07:08.097059 2026] [:error] [pid 26600:tid 26639] [client 20.151.218.28:64471] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Mon Apr 13 00:07:08.268780 2026] [:error] [pid 25327:tid 25340] [client 20.151.218.28:64422] File does not exist: /usr/local/apache/htdocs/suspended-page/packages.php
[Mon Apr 13 00:07:08.304750 2026] [:error] [pid 26600:tid 26643] [client 20.151.218.28:64471] File does not exist: /usr/local/apache/htdocs/suspended-page/lnexugel.php
[Mon Apr 13 00:07:08.546388 2026] [:error] [pid 26600:tid 26638] [client 20.151.218.28:64471] File does not exist: /usr/local/apache/htdocs/suspended-page/online.php
[Mon Apr 13 00:07:08.757592 2026] [:error] [pid 26600:tid 26641] [client 20.151.218.28:64471] File does not exist: /usr/local/apache/htdocs/suspended-page/up-kon.php
[Mon Apr 13 00:07:08.825751 2026] [:error] [pid 25327:tid 25352] [client 20.151.218.28:64422] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Mon Apr 13 00:07:08.979263 2026] [:error] [pid 26600:tid 26642] [client 20.151.218.28:64471] File does not exist: /usr/local/apache/htdocs/suspended-page/word.php
[Mon Apr 13 00:07:09.227620 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:64422] File does not exist: /usr/local/apache/htdocs/suspended-page/vbv.php
[Mon Apr 13 00:07:09.437388 2026] [:error] [pid 25327:tid 25357] [client 20.151.218.28:64422] File does not exist: /usr/local/apache/htdocs/suspended-page/mk.php
[Mon Apr 13 00:07:09.740432 2026] [:error] [pid 25327:tid 25346] [client 20.151.218.28:64422] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "advDLS6h2tZEVJo9JFIt0wAAAAo"]
[Mon Apr 13 00:07:09.811322 2026] [:error] [pid 26600:tid 26645] [client 20.151.218.28:64471] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDLe1YwAZiXhQKLYp7TwAAAZA"]
[Mon Apr 13 00:07:10.656597 2026] [:error] [pid 25327:tid 25354] [client 20.151.218.28:64118] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "advDLi6h2tZEVJo9JFIt1AAAABI"]
[Mon Apr 13 00:07:11.863884 2026] [:error] [pid 26567:tid 26593] [client 20.151.218.28:64428] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDL3hRpg6ptWFyFx3krAAAARg"]
[Mon Apr 13 00:07:12.092695 2026] [:error] [pid 25437:tid 25442] [client 20.151.218.28:64388] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "advDMHf97wYZje1ep_OY0wAAAMM"]
[Mon Apr 13 00:07:13.341304 2026] [:error] [pid 25437:tid 25451] [client 20.151.218.28:61175] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "advDMXf97wYZje1ep_OY2wAAAMw"]
[Mon Apr 13 00:07:13.479768 2026] [:error] [pid 25327:tid 25353] [client 20.151.218.28:64485] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDMS6h2tZEVJo9JFIt2wAAABE"]
[Mon Apr 13 00:07:15.107786 2026] [:error] [pid 25327:tid 25345] [client 20.151.218.28:64498] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "advDMy6h2tZEVJo9JFIt4QAAAAk"]
[Mon Apr 13 00:07:16.027084 2026] [:error] [pid 25327:tid 25349] [client 20.151.218.28:64504] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "advDNC6h2tZEVJo9JFIt5gAAAA0"]
[Mon Apr 13 00:07:16.868875 2026] [:error] [pid 60280:tid 60299] [client 20.151.218.28:64102] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "advDNHBlLnDOYuIykkgwTgAAAdE"]
[Mon Apr 13 00:07:17.541595 2026] [:error] [pid 60280:tid 60294] [client 20.151.218.28:64473] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDNXBlLnDOYuIykkgwVAAAAcw"]
[Mon Apr 13 00:07:18.119669 2026] [:error] [pid 60280:tid 60284] [client 20.151.218.28:64481] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "advDNnBlLnDOYuIykkgwVgAAAcI"]
[Mon Apr 13 00:07:19.197620 2026] [:error] [pid 26567:tid 26569] [client 20.151.218.28:64052] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple-shell.php"] [unique_id "advDN3hRpg6ptWFyFx3ksAAAAQA"]
[Mon Apr 13 00:07:20.005647 2026] [:error] [pid 25329:tid 25407] [client 20.151.218.28:64432] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDOGdcIYsS8Iyaj13xMQAAAJI"]
[Mon Apr 13 00:07:20.090917 2026] [:error] [pid 25327:tid 25360] [client 20.151.218.28:64091] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advDOC6h2tZEVJo9JFIt6wAAABg"]
[Mon Apr 13 00:07:21.402004 2026] [:error] [pid 26567:tid 26575] [client 20.151.218.28:65127] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advDOXhRpg6ptWFyFx3kswAAAQY"]
[Mon Apr 13 00:07:21.939779 2026] [:error] [pid 26600:tid 26644] [client 20.151.218.28:65094] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDOe1YwAZiXhQKLYp7VQAAAY8"]
[Mon Apr 13 00:07:23.007024 2026] [:error] [pid 60280:tid 60291] [client 20.151.218.28:65052] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advDO3BlLnDOYuIykkgwXgAAAck"]
[Mon Apr 13 00:07:23.540218 2026] [:error] [pid 25329:tid 25390] [client 20.151.218.28:64440] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "advDO2dcIYsS8Iyaj13xOQAAAIg"]
[Mon Apr 13 00:07:24.743442 2026] [:error] [pid 60280:tid 60292] [client 20.151.218.28:64459] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advDPHBlLnDOYuIykkgwYAAAAco"]
[Mon Apr 13 00:07:25.484794 2026] [:error] [pid 26599:tid 26606] [client 20.151.218.28:64438] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDPXG89LXoQbk_rwD6cQAAAUQ"]
[Mon Apr 13 00:07:26.162220 2026] [:error] [pid 25327:tid 25348] [client 20.151.218.28:64032] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "advDPi6h2tZEVJo9JFIt_AAAAAw"]
[Mon Apr 13 00:07:26.865689 2026] [:error] [pid 25327:tid 25342] [client 20.151.218.28:61156] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDPi6h2tZEVJo9JFIt_gAAAAY"]
[Mon Apr 13 00:07:27.301804 2026] [:error] [pid 26600:tid 26638] [client 20.151.218.28:64463] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "advDP-1YwAZiXhQKLYp7WgAAAYk"]
[Mon Apr 13 00:07:29.192179 2026] [:error] [pid 25329:tid 25412] [client 20.151.218.28:64464] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDQWdcIYsS8Iyaj13xTgAAAJU"]
[Mon Apr 13 00:07:29.585973 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:64486] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "advDQS6h2tZEVJo9JFIuBAAAAAA"]
[Mon Apr 13 00:07:31.102473 2026] [:error] [pid 25328:tid 25366] [client 20.151.218.28:64423] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDQ8xUaQZxT-e0YsCPIQAAAEI"]
[Mon Apr 13 00:07:32.104477 2026] [:error] [pid 26567:tid 26569] [client 20.151.218.28:65124] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDRHhRpg6ptWFyFx3kvAAAAQA"]
[Mon Apr 13 00:07:32.448984 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:65076] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2Vu80QG.php"] [unique_id "advDRHBlLnDOYuIykkgwZgAAAdQ"]
[Mon Apr 13 00:07:33.700248 2026] [:error] [pid 60280:tid 60303] [client 20.151.218.28:64448] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDRXBlLnDOYuIykkgwbAAAAdU"]
[Mon Apr 13 00:07:34.498893 2026] [:error] [pid 25328:tid 25369] [client 20.151.218.28:64394] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "advDRsxUaQZxT-e0YsCPJwAAAEU"]
[Mon Apr 13 00:07:35.559643 2026] [:error] [pid 60280:tid 60295] [client 20.151.218.28:65129] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDR3BlLnDOYuIykkgwdgAAAc0"]
[Mon Apr 13 00:07:36.955294 2026] [:error] [pid 25329:tid 25400] [client 20.151.218.28:64114] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "advDSGdcIYsS8Iyaj13xdgAAAI4"]
[Mon Apr 13 00:07:38.172175 2026] [:error] [pid 25329:tid 25415] [client 20.151.218.28:64080] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDSmdcIYsS8Iyaj13xfAAAAJg"]
[Mon Apr 13 00:07:38.746984 2026] [:error] [pid 60280:tid 60306] [client 20.151.218.28:64465] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "advDSnBlLnDOYuIykkgwfQAAAdg"]
[Mon Apr 13 00:07:39.573703 2026] [:error] [pid 26599:tid 26616] [client 20.151.218.28:65148] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDS3G89LXoQbk_rwD6hgAAAU4"]
[Mon Apr 13 00:07:39.977967 2026] [:error] [pid 25329:tid 25374] [client 20.151.218.28:65099] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bsr.php"] [unique_id "advDS2dcIYsS8Iyaj13xiAAAAIA"]
[Mon Apr 13 00:07:40.775049 2026] [:error] [pid 25329:tid 25400] [client 20.151.218.28:64461] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDTGdcIYsS8Iyaj13xiQAAAI4"]
[Mon Apr 13 00:07:40.951710 2026] [:error] [pid 25329:tid 25402] [client 20.151.218.28:64065] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "advDTGdcIYsS8Iyaj13xjAAAAI8"]
[Mon Apr 13 00:07:42.670904 2026] [:error] [pid 26600:tid 26636] [client 20.151.218.28:65063] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "advDTu1YwAZiXhQKLYp7XwAAAYc"]
[Mon Apr 13 00:07:43.327165 2026] [:error] [pid 25327:tid 25358] [client 20.151.218.28:64115] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDTy6h2tZEVJo9JFIuFAAAABY"]
[Mon Apr 13 00:07:44.882318 2026] [:error] [pid 60280:tid 60284] [client 20.151.218.28:65084] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "advDUHBlLnDOYuIykkgwjAAAAcI"]
[Mon Apr 13 00:07:45.786574 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:64044] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "advDUS6h2tZEVJo9JFIuGwAAAAA"]
[Mon Apr 13 00:07:47.354441 2026] [:error] [pid 26567:tid 26578] [client 20.151.218.28:65080] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ans.php"] [unique_id "advDU3hRpg6ptWFyFx3k1AAAAQk"]
[Mon Apr 13 00:07:48.992073 2026] [:error] [pid 60280:tid 60289] [client 20.151.218.28:65075] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "advDVHBlLnDOYuIykkgwmQAAAcc"]
[Mon Apr 13 00:07:50.785095 2026] [:error] [pid 26567:tid 26585] [client 20.151.218.28:65120] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDVnhRpg6ptWFyFx3k2AAAARA"]
[Mon Apr 13 00:07:51.557338 2026] [:error] [pid 26600:tid 26635] [client 20.151.218.28:64495] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "advDV-1YwAZiXhQKLYp7ZAAAAYY"]
[Mon Apr 13 00:07:52.265922 2026] [:error] [pid 60280:tid 60295] [client 20.151.218.28:64042] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDWHBlLnDOYuIykkgwowAAAc0"]
[Mon Apr 13 00:07:53.052485 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:64006] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "advDWXBlLnDOYuIykkgwqwAAAdQ"]
[Mon Apr 13 00:07:53.385914 2026] [:error] [pid 60280:tid 60305] [client 20.151.218.28:64028] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDWXBlLnDOYuIykkgwrgAAAdc"]
[Mon Apr 13 00:07:54.185905 2026] [:error] [pid 25329:tid 25374] [client 20.151.218.28:64389] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDWmdcIYsS8Iyaj13xtAAAAIA"]
[Mon Apr 13 00:07:54.583090 2026] [:error] [pid 26567:tid 26590] [client 20.151.218.28:64015] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "advDWnhRpg6ptWFyFx3k3QAAARU"]
[Mon Apr 13 00:07:55.068102 2026] [:error] [pid 25329:tid 25399] [client 20.151.218.28:64067] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDW2dcIYsS8Iyaj13xtQAAAI0"]
[Mon Apr 13 00:07:55.622142 2026] [:error] [pid 25329:tid 25413] [client 20.151.218.28:65069] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDW2dcIYsS8Iyaj13xuwAAAJY"]
[Mon Apr 13 00:07:56.091037 2026] [:error] [pid 25329:tid 25382] [client 20.151.218.28:61178] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDXGdcIYsS8Iyaj13xvQAAAIQ"]
[Mon Apr 13 00:07:56.657593 2026] [:error] [pid 25437:tid 25455] [client 20.151.218.28:64501] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "advDXHf97wYZje1ep_OY_AAAANA"]
[Mon Apr 13 00:07:56.874371 2026] [:error] [pid 25328:tid 25367] [client 20.151.218.28:64391] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDXMxUaQZxT-e0YsCPOQAAAEM"]
[Mon Apr 13 00:07:57.636027 2026] [:error] [pid 26600:tid 26644] [client 20.151.218.28:64445] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "advDXe1YwAZiXhQKLYp7aQAAAY8"]
[Mon Apr 13 00:07:57.646544 2026] [:error] [pid 60280:tid 60306] [client 20.151.218.28:64034] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDXXBlLnDOYuIykkgwtAAAAdg"]
[Mon Apr 13 00:07:58.503938 2026] [:error] [pid 25328:tid 25385] [client 20.151.218.28:64510] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDXsxUaQZxT-e0YsCPPAAAAE4"]
[Mon Apr 13 00:07:58.636635 2026] [:error] [pid 60280:tid 60303] [client 20.151.218.28:64125] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "advDXnBlLnDOYuIykkgwtgAAAdU"]
[Mon Apr 13 00:07:59.188497 2026] [:error] [pid 25328:tid 25396] [client 20.151.218.28:65078] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDX8xUaQZxT-e0YsCPRAAAAFM"]
[Mon Apr 13 00:07:59.571400 2026] [:error] [pid 60280:tid 60299] [client 20.151.218.28:65058] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "advDX3BlLnDOYuIykkgwtwAAAdE"]
[Mon Apr 13 00:07:59.861747 2026] [:error] [pid 60280:tid 60291] [client 20.151.218.28:64124] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDX3BlLnDOYuIykkgwuQAAAck"]
[Mon Apr 13 00:08:00.643860 2026] [:error] [pid 25437:tid 25463] [client 20.151.218.28:65097] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "advDYHf97wYZje1ep_OZAAAAANg"]
[Mon Apr 13 00:08:00.894555 2026] [:error] [pid 60280:tid 60283] [client 20.151.218.28:65114] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDYHBlLnDOYuIykkgwvgAAAcE"]
[Mon Apr 13 00:08:01.563212 2026] [:error] [pid 25327:tid 25338] [client 20.151.218.28:65103] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "advDYS6h2tZEVJo9JFIuLQAAAAI"]
[Mon Apr 13 00:08:01.959361 2026] [:error] [pid 60280:tid 60286] [client 20.151.218.28:64478] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDYXBlLnDOYuIykkgwwwAAAcQ"]
[Mon Apr 13 00:08:02.259703 2026] [:error] [pid 26600:tid 26653] [client 20.151.218.28:60499] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "advDYu1YwAZiXhQKLYp7bgAAAZg"]
[Mon Apr 13 00:08:02.606559 2026] [:error] [pid 25437:tid 25457] [client 20.151.218.28:61142] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDYnf97wYZje1ep_OZAQAAANI"]
[Mon Apr 13 00:08:02.845052 2026] [:error] [pid 25328:tid 25373] [client 20.151.218.28:65146] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "advDYsxUaQZxT-e0YsCPTwAAAEg"]
[Mon Apr 13 00:08:03.393691 2026] [:error] [pid 25328:tid 25405] [client 20.151.218.28:64024] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDY8xUaQZxT-e0YsCPUgAAAFc"]
[Mon Apr 13 00:08:03.894108 2026] [:error] [pid 26567:tid 26593] [client 20.151.218.28:65128] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "advDY3hRpg6ptWFyFx3k5gAAARg"]
[Mon Apr 13 00:08:04.855385 2026] [:error] [pid 25437:tid 25442] [client 20.151.218.28:64429] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDZHf97wYZje1ep_OZBgAAAMM"]
[Mon Apr 13 00:08:05.340719 2026] [:error] [pid 25329:tid 25411] [client 20.151.218.28:64392] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "advDZWdcIYsS8Iyaj13x4QAAAJQ"]
[Mon Apr 13 00:08:05.805017 2026] [:error] [pid 25329:tid 25412] [client 20.151.218.28:64426] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDZWdcIYsS8Iyaj13x4wAAAJU"]
[Mon Apr 13 00:08:06.270573 2026] [:error] [pid 60280:tid 60292] [client 20.151.218.28:64040] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "advDZnBlLnDOYuIykkgwxwAAAco"]
[Mon Apr 13 00:08:06.669004 2026] [:error] [pid 60280:tid 60301] [client 20.151.218.28:64098] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDZnBlLnDOYuIykkgwyQAAAdM"]
[Mon Apr 13 00:08:07.132782 2026] [:error] [pid 25437:tid 25446] [client 20.151.218.28:64426] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDZ3f97wYZje1ep_OZCAAAAMc"]
[Mon Apr 13 00:08:07.279840 2026] [:error] [pid 25437:tid 25444] [client 20.151.218.28:61132] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "advDZ3f97wYZje1ep_OZCgAAAMU"]
[Mon Apr 13 00:08:07.787730 2026] [:error] [pid 60280:tid 60297] [client 20.151.218.28:61139] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "advDZ3BlLnDOYuIykkgwywAAAc8"]
[Mon Apr 13 00:08:08.207603 2026] [:error] [pid 26567:tid 26582] [client 20.151.218.28:61092] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "advDaHhRpg6ptWFyFx3k7gAAAQ0"]
[Mon Apr 13 00:08:08.441913 2026] [:error] [pid 25437:tid 25461] [client 20.151.218.28:64396] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "advDaHf97wYZje1ep_OZDgAAANY"]
[Mon Apr 13 00:08:09.066280 2026] [:error] [pid 26567:tid 26589] [client 20.151.218.28:65125] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Mon Apr 13 00:08:09.179653 2026] [:error] [pid 25437:tid 25441] [client 20.151.218.28:64022] File does not exist: /usr/local/apache/htdocs/suspended-page/moderation.php
[Mon Apr 13 00:08:09.369227 2026] [:error] [pid 26567:tid 26581] [client 20.151.218.28:65125] File does not exist: /usr/local/apache/htdocs/suspended-page/uxquidwa.php
[Mon Apr 13 00:08:09.389919 2026] [:error] [pid 25437:tid 25451] [client 20.151.218.28:64022] File does not exist: /usr/local/apache/htdocs/suspended-page/simple-shell.php
[Mon Apr 13 00:08:09.644034 2026] [:error] [pid 26567:tid 26591] [client 20.151.218.28:65125] File does not exist: /usr/local/apache/htdocs/suspended-page/combined.php
[Mon Apr 13 00:08:09.807621 2026] [:error] [pid 25437:tid 25443] [client 20.151.218.28:64022] File does not exist: /usr/local/apache/htdocs/suspended-page/2Vu80QG.php
[Mon Apr 13 00:08:09.854085 2026] [:error] [pid 26567:tid 26571] [client 20.151.218.28:65125] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php
[Mon Apr 13 00:08:10.038177 2026] [:error] [pid 25437:tid 25452] [client 20.151.218.28:64022] File does not exist: /usr/local/apache/htdocs/suspended-page/bsr.php
[Mon Apr 13 00:08:10.092151 2026] [:error] [pid 26567:tid 26577] [client 20.151.218.28:65125] File does not exist: /usr/local/apache/htdocs/suspended-page/kodox.php
[Mon Apr 13 00:08:10.274817 2026] [:error] [pid 25437:tid 25454] [client 20.151.218.28:64022] File does not exist: /usr/local/apache/htdocs/suspended-page/ans.php
[Mon Apr 13 00:08:10.298590 2026] [:error] [pid 26567:tid 26590] [client 20.151.218.28:65125] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDanhRpg6ptWFyFx3k-QAAARU"]
[Mon Apr 13 00:08:10.482213 2026] [:error] [pid 25437:tid 25462] [client 20.151.218.28:64022] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDanf97wYZje1ep_OZFwAAANc"]
[Mon Apr 13 00:08:11.025882 2026] [:error] [pid 26600:tid 26648] [client 20.151.218.28:64404] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDa-1YwAZiXhQKLYp7cwAAAZM"]
[Mon Apr 13 00:08:11.691803 2026] [:error] [pid 26600:tid 26640] [client 20.151.218.28:64121] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDa-1YwAZiXhQKLYp7dQAAAYs"]
[Mon Apr 13 00:08:11.699004 2026] [:error] [pid 26600:tid 26644] [client 20.151.218.28:64479] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDa-1YwAZiXhQKLYp7dgAAAY8"]
[Mon Apr 13 00:08:12.349973 2026] [:error] [pid 60280:tid 60294] [client 20.151.218.28:61141] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDbHBlLnDOYuIykkgw0AAAAcw"]
[Mon Apr 13 00:08:12.609568 2026] [:error] [pid 60280:tid 60290] [client 20.151.218.28:61065] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDbHBlLnDOYuIykkgw0QAAAcg"]
[Mon Apr 13 00:08:12.994819 2026] [:error] [pid 26599:tid 26610] [client 20.151.218.28:65037] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDbHG89LXoQbk_rwD6kwAAAUg"]
[Mon Apr 13 00:08:13.287635 2026] [:error] [pid 25327:tid 25341] [client 20.151.218.28:64474] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "advDbS6h2tZEVJo9JFIuMAAAAAU"]
[Mon Apr 13 00:08:13.738052 2026] [:error] [pid 26600:tid 26641] [client 20.151.218.28:64054] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDbe1YwAZiXhQKLYp7fAAAAYw"]
[Mon Apr 13 00:08:14.759200 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:64484] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDbnBlLnDOYuIykkgw2AAAAcY"]
[Mon Apr 13 00:08:15.042658 2026] [:error] [pid 60280:tid 60296] [client 20.151.218.28:61098] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDb3BlLnDOYuIykkgw2gAAAc4"]
[Mon Apr 13 00:08:15.968800 2026] [:error] [pid 25329:tid 25386] [client 20.151.218.28:64500] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDb2dcIYsS8Iyaj13x_AAAAIY"]
[Mon Apr 13 00:08:16.732363 2026] [:error] [pid 26599:tid 26611] [client 20.151.218.28:64434] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDcHG89LXoQbk_rwD6lAAAAUk"]
[Mon Apr 13 00:08:17.484645 2026] [:error] [pid 26599:tid 26615] [client 20.151.218.28:64038] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDcXG89LXoQbk_rwD6lQAAAU0"]
[Mon Apr 13 00:08:18.910819 2026] [:error] [pid 25327:tid 25351] [client 20.151.218.28:65037] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDci6h2tZEVJo9JFIuSwAAAA8"]
[Mon Apr 13 00:08:19.802591 2026] [:error] [pid 25329:tid 25392] [client 20.151.218.28:64435] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDc2dcIYsS8Iyaj13yAgAAAIk"]
[Mon Apr 13 00:08:21.060166 2026] [:error] [pid 60280:tid 60303] [client 20.151.218.28:61177] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Core-wp.php"] [unique_id "advDdXBlLnDOYuIykkgw5gAAAdU"]
[Mon Apr 13 00:08:21.455908 2026] [:error] [pid 26567:tid 26585] [client 20.151.218.28:65138] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDdXhRpg6ptWFyFx3k_wAAARA"]
[Mon Apr 13 00:08:22.417738 2026] [:error] [pid 60280:tid 60299] [client 20.151.218.28:61099] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDdnBlLnDOYuIykkgw8QAAAdE"]
[Mon Apr 13 00:08:22.836482 2026] [:error] [pid 60280:tid 60284] [client 20.151.218.28:64012] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDdnBlLnDOYuIykkgw9QAAAcI"]
[Mon Apr 13 00:08:23.651281 2026] [:error] [pid 26599:tid 26626] [client 20.151.218.28:64045] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDd3G89LXoQbk_rwD6mAAAAVg"]
[Mon Apr 13 00:08:25.109650 2026] [:error] [pid 25327:tid 25356] [client 20.151.218.28:64111] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDeS6h2tZEVJo9JFIuZwAAABQ"]
[Mon Apr 13 00:08:25.178228 2026] [:error] [pid 60280:tid 60282] [client 20.151.218.28:64447] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDeXBlLnDOYuIykkgxAgAAAcA"]
[Mon Apr 13 00:08:25.612744 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:61130] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDeXBlLnDOYuIykkgxBQAAAcY"]
[Mon Apr 13 00:08:26.051497 2026] [:error] [pid 26599:tid 26608] [client 20.151.218.28:64092] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/src.php"] [unique_id "advDenG89LXoQbk_rwD6mQAAAUY"]
[Mon Apr 13 00:08:26.219871 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:64076] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDenBlLnDOYuIykkgxCwAAAcY"]
[Mon Apr 13 00:08:26.784590 2026] [:error] [pid 26600:tid 26642] [client 20.151.218.28:64409] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDeu1YwAZiXhQKLYp7igAAAY0"]
[Mon Apr 13 00:08:26.965900 2026] [:error] [pid 26599:tid 26617] [client 20.151.218.28:61090] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDenG89LXoQbk_rwD6nAAAAU8"]
[Mon Apr 13 00:08:27.451334 2026] [:error] [pid 60280:tid 60299] [client 20.151.218.28:64110] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDe3BlLnDOYuIykkgxEQAAAdE"]
[Mon Apr 13 00:08:27.452817 2026] [:error] [pid 25328:tid 25385] [client 20.151.218.28:60453] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "advDe8xUaQZxT-e0YsCPXQAAAE4"]
[Mon Apr 13 00:08:28.000903 2026] [:error] [pid 25328:tid 25375] [client 20.151.218.28:65041] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "advDe8xUaQZxT-e0YsCPXwAAAEk"]
[Mon Apr 13 00:08:28.474579 2026] [:error] [pid 60280:tid 60297] [client 20.151.218.28:64468] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDfHBlLnDOYuIykkgxFwAAAc8"]
[Mon Apr 13 00:08:28.611863 2026] [:error] [pid 26600:tid 26645] [client 20.151.218.28:64076] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "advDfO1YwAZiXhQKLYp7jQAAAZA"]
[Mon Apr 13 00:08:29.158248 2026] [:error] [pid 60280:tid 60282] [client 20.151.218.28:61123] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "advDfXBlLnDOYuIykkgxGgAAAcA"]
[Mon Apr 13 00:08:29.350168 2026] [:error] [pid 60280:tid 60291] [client 20.151.218.28:65134] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/v2.php"] [unique_id "advDfXBlLnDOYuIykkgxHAAAAck"]
[Mon Apr 13 00:08:29.748335 2026] [:error] [pid 60280:tid 60296] [client 20.151.218.28:61134] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "advDfXBlLnDOYuIykkgxIAAAAc4"]
[Mon Apr 13 00:08:30.627736 2026] [:error] [pid 25328:tid 25391] [client 20.151.218.28:61146] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDfsxUaQZxT-e0YsCPZAAAAFE"]
[Mon Apr 13 00:08:30.670145 2026] [:error] [pid 25328:tid 25405] [client 20.151.218.28:65059] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "advDfsxUaQZxT-e0YsCPZQAAAFc"]
[Mon Apr 13 00:08:31.185734 2026] [:error] [pid 25328:tid 25364] [client 20.151.218.28:64049] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "advDf8xUaQZxT-e0YsCPaAAAAEA"]
[Mon Apr 13 00:08:31.548844 2026] [:error] [pid 25328:tid 25387] [client 20.151.218.28:61163] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDf8xUaQZxT-e0YsCPagAAAE8"]
[Mon Apr 13 00:08:31.806416 2026] [:error] [pid 26567:tid 26592] [client 20.151.218.28:65070] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "advDf3hRpg6ptWFyFx3lBAAAARc"]
[Mon Apr 13 00:08:32.377280 2026] [:error] [pid 26600:tid 26649] [client 20.151.218.28:60506] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "advDgO1YwAZiXhQKLYp7jwAAAZQ"]
[Mon Apr 13 00:08:32.625608 2026] [:error] [pid 25437:tid 25440] [client 20.151.218.28:61067] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDgHf97wYZje1ep_OZHwAAAME"]
[Mon Apr 13 00:08:32.996006 2026] [:error] [pid 25327:tid 25359] [client 20.151.218.28:64079] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "advDgC6h2tZEVJo9JFIudQAAABc"]
[Mon Apr 13 00:08:33.449734 2026] [:error] [pid 26567:tid 26570] [client 20.151.218.28:61096] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "advDgXhRpg6ptWFyFx3lBQAAAQE"]
[Mon Apr 13 00:08:33.546061 2026] [:error] [pid 26599:tid 26604] [client 20.151.218.28:61146] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nxd.php"] [unique_id "advDgXG89LXoQbk_rwD6oAAAAUI"]
[Mon Apr 13 00:08:34.057122 2026] [:error] [pid 25327:tid 25356] [client 20.151.218.28:65047] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "advDgi6h2tZEVJo9JFIuegAAABQ"]
[Mon Apr 13 00:08:34.455675 2026] [:error] [pid 25327:tid 25345] [client 20.151.218.28:60503] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "advDgi6h2tZEVJo9JFIufQAAAAk"]
[Mon Apr 13 00:08:34.687913 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:64466] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "advDgi6h2tZEVJo9JFIugAAAAAA"]
[Mon Apr 13 00:08:35.123427 2026] [:error] [pid 25327:tid 25342] [client 20.151.218.28:64395] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "advDgy6h2tZEVJo9JFIugwAAAAY"]
[Mon Apr 13 00:08:35.257966 2026] [:error] [pid 25329:tid 25393] [client 20.151.218.28:64088] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "advDg2dcIYsS8Iyaj13yNgAAAIo"]
[Mon Apr 13 00:08:35.856746 2026] [:error] [pid 60280:tid 60293] [client 20.151.218.28:64050] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "advDg3BlLnDOYuIykkgxJQAAAcs"]
[Mon Apr 13 00:08:36.059870 2026] [:error] [pid 60280:tid 60294] [client 20.151.218.28:64431] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "advDhHBlLnDOYuIykkgxJgAAAcw"]
[Mon Apr 13 00:08:36.471547 2026] [:error] [pid 25327:tid 25352] [client 20.151.218.28:64008] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "advDhC6h2tZEVJo9JFIuiQAAABA"]
[Mon Apr 13 00:08:36.886290 2026] [:error] [pid 60280:tid 60291] [client 20.151.218.28:64058] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "advDhHBlLnDOYuIykkgxKgAAAck"]
[Mon Apr 13 00:08:37.056437 2026] [:error] [pid 26600:tid 26637] [client 20.151.218.28:65064] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "advDhe1YwAZiXhQKLYp7kAAAAYg"]
[Mon Apr 13 00:08:37.562922 2026] [:error] [pid 25437:tid 25459] [client 20.151.218.28:64033] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "advDhXf97wYZje1ep_OZIwAAANQ"]
[Mon Apr 13 00:08:37.796071 2026] [:error] [pid 25327:tid 25347] [client 20.151.218.28:64467] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "advDhS6h2tZEVJo9JFIujwAAAAs"]
[Mon Apr 13 00:08:38.045988 2026] [:error] [pid 25437:tid 25455] [client 20.151.218.28:61133] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "advDhnf97wYZje1ep_OZJQAAANA"]
[Mon Apr 13 00:08:38.489502 2026] [:error] [pid 25437:tid 25441] [client 20.151.218.28:64105] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "advDhnf97wYZje1ep_OZJwAAAMI"]
[Mon Apr 13 00:08:38.616691 2026] [:error] [pid 25327:tid 25339] [client 20.151.218.28:64064] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "advDhi6h2tZEVJo9JFIukQAAAAM"]
[Mon Apr 13 00:08:38.973738 2026] [:error] [pid 25327:tid 25358] [client 20.151.218.28:59842] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "advDhi6h2tZEVJo9JFIulQAAABY"]
[Mon Apr 13 00:08:39.457803 2026] [:error] [pid 26567:tid 26583] [client 20.151.218.28:64094] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "advDh3hRpg6ptWFyFx3lCAAAAQ4"]
[Mon Apr 13 00:08:39.671360 2026] [:error] [pid 25327:tid 25338] [client 20.151.218.28:60427] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "advDhy6h2tZEVJo9JFIumwAAAAI"]
[Mon Apr 13 00:08:39.972827 2026] [:error] [pid 25327:tid 25357] [client 20.151.218.28:64493] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "advDhy6h2tZEVJo9JFIungAAABU"]
[Mon Apr 13 00:08:40.528770 2026] [:error] [pid 25327:tid 25355] [client 20.151.218.28:64026] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "advDiC6h2tZEVJo9JFIuogAAABM"]
[Mon Apr 13 00:08:40.921883 2026] [:error] [pid 25437:tid 25463] [client 20.151.218.28:64046] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "advDiHf97wYZje1ep_OZKwAAANg"]
[Mon Apr 13 00:08:41.226535 2026] [:error] [pid 25437:tid 25457] [client 20.151.218.28:64446] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDiXf97wYZje1ep_OZLQAAANI"]
[Mon Apr 13 00:08:41.860157 2026] [:error] [pid 60280:tid 60297] [client 20.151.218.28:64398] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDiXBlLnDOYuIykkgxLAAAAc8"]
[Mon Apr 13 00:08:42.382555 2026] [:error] [pid 25328:tid 25385] [client 20.151.218.28:60488] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "advDisxUaQZxT-e0YsCPdwAAAE4"]
[Mon Apr 13 00:08:42.478760 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:64068] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDinBlLnDOYuIykkgxLgAAAdQ"]
[Mon Apr 13 00:08:42.972438 2026] [:error] [pid 25328:tid 25369] [client 20.151.218.28:64087] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDisxUaQZxT-e0YsCPeQAAAEU"]
[Mon Apr 13 00:08:43.549999 2026] [:error] [pid 26600:tid 26632] [client 20.151.218.28:65050] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDi-1YwAZiXhQKLYp7lQAAAYM"]
[Mon Apr 13 00:08:44.056583 2026] [:error] [pid 26599:tid 26602] [client 20.151.218.28:64069] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "advDjHG89LXoQbk_rwD6pQAAAUA"]
[Mon Apr 13 00:08:44.270077 2026] [:error] [pid 25327:tid 25346] [client 20.151.218.28:64016] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDjC6h2tZEVJo9JFIuqwAAAAo"]
[Mon Apr 13 00:08:44.932961 2026] [:error] [pid 25328:tid 25389] [client 20.151.218.28:64434] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDjMxUaQZxT-e0YsCPfAAAAFA"]
[Mon Apr 13 00:08:45.252674 2026] [:error] [pid 26599:tid 26603] [client 20.151.218.28:61171] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "advDjXG89LXoQbk_rwD6pwAAAUE"]
[Mon Apr 13 00:08:45.566278 2026] [:error] [pid 25437:tid 25456] [client 20.151.218.28:64070] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDjXf97wYZje1ep_OZMwAAANE"]
[Mon Apr 13 00:08:46.093731 2026] [:error] [pid 26599:tid 26624] [client 20.151.218.28:64007] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDjnG89LXoQbk_rwD6qAAAAVY"]
[Mon Apr 13 00:08:46.117314 2026] [:error] [pid 26567:tid 26582] [client 20.151.218.28:64084] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "advDjnhRpg6ptWFyFx3lCgAAAQ0"]
[Mon Apr 13 00:08:46.966292 2026] [:error] [pid 25329:tid 25382] [client 20.151.218.28:64029] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDjmdcIYsS8Iyaj13yQAAAAIQ"]
[Mon Apr 13 00:08:47.260295 2026] [:error] [pid 26599:tid 26613] [client 20.151.218.28:60486] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "advDj3G89LXoQbk_rwD6qgAAAUs"]
[Mon Apr 13 00:08:48.209591 2026] [:error] [pid 25329:tid 25406] [client 20.151.218.28:60483] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDkGdcIYsS8Iyaj13yQwAAAJE"]
[Mon Apr 13 00:08:49.137569 2026] [:error] [pid 25327:tid 25342] [client 20.151.218.28:61089] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDkS6h2tZEVJo9JFIuugAAAAY"]
[Mon Apr 13 00:08:49.689462 2026] [:error] [pid 26599:tid 26604] [client 20.151.218.28:61140] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "advDkXG89LXoQbk_rwD6rAAAAUI"]
[Mon Apr 13 00:08:50.362941 2026] [:error] [pid 25329:tid 25413] [client 20.151.218.28:59798] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDkmdcIYsS8Iyaj13ySwAAAJY"]
[Mon Apr 13 00:08:50.876916 2026] [:error] [pid 26599:tid 26615] [client 20.151.218.28:64456] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "advDknG89LXoQbk_rwD6sQAAAU0"]
[Mon Apr 13 00:08:52.179550 2026] [:error] [pid 25327:tid 25346] [client 20.151.218.28:61057] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDlC6h2tZEVJo9JFIuwgAAAAo"]
[Mon Apr 13 00:08:52.541813 2026] [:error] [pid 25327:tid 25338] [client 20.151.218.28:64443] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "advDlC6h2tZEVJo9JFIuxAAAAAI"]
[Mon Apr 13 00:08:53.149268 2026] [:error] [pid 25437:tid 25454] [client 20.151.218.28:64108] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDlXf97wYZje1ep_OZOQAAAM8"]
[Mon Apr 13 00:08:53.779303 2026] [:error] [pid 25327:tid 25353] [client 20.151.218.28:64420] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDlS6h2tZEVJo9JFIuyAAAABE"]
[Mon Apr 13 00:08:53.963209 2026] [:error] [pid 26567:tid 26571] [client 20.151.218.28:61126] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "advDlXhRpg6ptWFyFx3lEQAAAQI"]
[Mon Apr 13 00:08:54.364950 2026] [:error] [pid 25329:tid 25395] [client 20.151.218.28:64424] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDlmdcIYsS8Iyaj13yTQAAAIs"]
[Mon Apr 13 00:08:54.607678 2026] [:error] [pid 25327:tid 25337] [client 20.151.218.28:60535] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "advDli6h2tZEVJo9JFIuzQAAAAE"]
[Mon Apr 13 00:08:55.021338 2026] [:error] [pid 25327:tid 25347] [client 20.151.218.28:60497] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDly6h2tZEVJo9JFIu0AAAAAs"]
[Mon Apr 13 00:08:55.632429 2026] [:error] [pid 25327:tid 25353] [client 20.151.218.28:61064] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDly6h2tZEVJo9JFIu1AAAABE"]
[Mon Apr 13 00:08:55.797177 2026] [:error] [pid 25328:tid 25370] [client 20.151.218.28:65051] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "advDl8xUaQZxT-e0YsCPjQAAAEY"]
[Mon Apr 13 00:08:56.157710 2026] [:error] [pid 26567:tid 26583] [client 20.151.218.28:65151] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDmHhRpg6ptWFyFx3lEgAAAQ4"]
[Mon Apr 13 00:08:57.156419 2026] [:error] [pid 25437:tid 25453] [client 20.151.218.28:64066] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "advDmXf97wYZje1ep_OZPQAAAM4"]
[Mon Apr 13 00:08:57.206640 2026] [:error] [pid 25328:tid 25389] [client 20.151.218.28:61061] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDmcxUaQZxT-e0YsCPkgAAAFA"]
[Mon Apr 13 00:08:57.920365 2026] [:error] [pid 25328:tid 25387] [client 20.151.218.28:60458] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDmcxUaQZxT-e0YsCPlgAAAE8"]
[Mon Apr 13 00:08:58.512834 2026] [:error] [pid 25327:tid 25355] [client 20.151.218.28:64056] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDmi6h2tZEVJo9JFIu3wAAABM"]
[Mon Apr 13 00:08:58.863146 2026] [:error] [pid 25437:tid 25460] [client 20.151.218.28:64103] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDmnf97wYZje1ep_OZQQAAANU"]
[Mon Apr 13 00:08:59.293868 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:61151] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDmy6h2tZEVJo9JFIu4wAAAAc"]
[Mon Apr 13 00:08:59.808736 2026] [:error] [pid 26599:tid 26612] [client 20.151.218.28:64420] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDm3G89LXoQbk_rwD6tAAAAUo"]
[Mon Apr 13 00:09:00.006953 2026] [:error] [pid 25329:tid 25393] [client 20.151.218.28:61066] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDnGdcIYsS8Iyaj13yUQAAAIo"]
[Mon Apr 13 00:09:00.297273 2026] [:error] [pid 26567:tid 26578] [client 20.151.218.28:64122] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDnHhRpg6ptWFyFx3lGwAAAQk"]
[Mon Apr 13 00:09:00.794533 2026] [:error] [pid 25329:tid 25384] [client 20.151.218.28:64413] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "advDnGdcIYsS8Iyaj13yUwAAAIU"]
[Mon Apr 13 00:09:00.799074 2026] [:error] [pid 26567:tid 26570] [client 20.151.218.28:60489] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDnHhRpg6ptWFyFx3lHAAAAQE"]
[Mon Apr 13 00:09:01.388793 2026] [:error] [pid 25329:tid 25411] [client 20.151.218.28:60498] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDnWdcIYsS8Iyaj13yVAAAAJQ"]
[Mon Apr 13 00:09:01.440904 2026] [:error] [pid 25329:tid 25414] [client 20.151.218.28:61161] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDnWdcIYsS8Iyaj13yVQAAAJc"]
[Mon Apr 13 00:09:02.020604 2026] [:error] [pid 26567:tid 26571] [client 20.151.218.28:64084] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDnnhRpg6ptWFyFx3lHgAAAQI"]
[Mon Apr 13 00:09:02.034995 2026] [:error] [pid 26567:tid 26584] [client 20.151.218.28:61105] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDnnhRpg6ptWFyFx3lHwAAAQ8"]
[Mon Apr 13 00:09:02.532952 2026] [:error] [pid 25329:tid 25376] [client 20.151.218.28:61181] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDnmdcIYsS8Iyaj13yWQAAAIE"]
[Mon Apr 13 00:09:02.628290 2026] [:error] [pid 25327:tid 25351] [client 20.151.218.28:65123] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advDni6h2tZEVJo9JFIu7QAAAA8"]
[Mon Apr 13 00:09:03.225639 2026] [:error] [pid 25437:tid 25459] [client 20.151.218.28:65085] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "advDn3f97wYZje1ep_OZSgAAANQ"]
[Mon Apr 13 00:09:03.233750 2026] [:error] [pid 25437:tid 25444] [client 20.151.218.28:61117] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advDn3f97wYZje1ep_OZSwAAAMU"]
[Mon Apr 13 00:09:03.745300 2026] [:error] [pid 25327:tid 25342] [client 20.151.218.28:61169] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advDny6h2tZEVJo9JFIu7wAAAAY"]
[Mon Apr 13 00:09:03.778039 2026] [:error] [pid 60280:tid 60295] [client 20.151.218.28:64494] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDn3BlLnDOYuIykkgxOgAAAc0"]
[Mon Apr 13 00:09:04.237583 2026] [:error] [pid 25328:tid 25405] [client 20.151.218.28:60517] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advDoMxUaQZxT-e0YsCPmAAAAFc"]
[Mon Apr 13 00:09:04.312625 2026] [:error] [pid 25437:tid 25456] [client 20.151.218.28:61063] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDoHf97wYZje1ep_OZUQAAANE"]
[Mon Apr 13 00:09:05.012175 2026] [:error] [pid 26567:tid 26570] [client 20.151.218.28:65061] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDoXhRpg6ptWFyFx3lJgAAAQE"]
[Mon Apr 13 00:09:05.112012 2026] [:error] [pid 25437:tid 25450] [client 20.151.218.28:65067] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advDoXf97wYZje1ep_OZUwAAAMs"]
[Mon Apr 13 00:09:06.043067 2026] [:error] [pid 25437:tid 25448] [client 20.151.218.28:64030] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advDonf97wYZje1ep_OZVQAAAMk"]
[Mon Apr 13 00:09:06.312858 2026] [:error] [pid 25327:tid 25340] [client 20.151.218.28:61100] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "advDoi6h2tZEVJo9JFIu8wAAAAQ"]
[Mon Apr 13 00:09:06.827063 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:60451] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advDoi6h2tZEVJo9JFIu9AAAAAA"]
[Mon Apr 13 00:09:07.014329 2026] [:error] [pid 60280:tid 60286] [client 20.151.218.28:61068] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDo3BlLnDOYuIykkgxQQAAAcQ"]
[Mon Apr 13 00:09:07.580141 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:61135] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advDo3BlLnDOYuIykkgxRgAAAdQ"]
[Mon Apr 13 00:09:07.851415 2026] [:error] [pid 60280:tid 60293] [client 20.151.218.28:61152] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDo3BlLnDOYuIykkgxSQAAAcs"]
[Mon Apr 13 00:09:08.503082 2026] [:error] [pid 60280:tid 60305] [client 20.151.218.28:64407] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "advDpHBlLnDOYuIykkgxTgAAAdc"]
[Mon Apr 13 00:09:08.731870 2026] [:error] [pid 60280:tid 60290] [client 20.151.218.28:64004] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDpHBlLnDOYuIykkgxUAAAAcg"]
[Mon Apr 13 00:09:09.721676 2026] [:error] [pid 25328:tid 25373] [client 20.151.218.28:61165] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "advDpcxUaQZxT-e0YsCPnQAAAEg"]
[Mon Apr 13 00:09:09.932247 2026] [:error] [pid 25329:tid 25390] [client 20.151.218.28:60437] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "advDpWdcIYsS8Iyaj13yYQAAAIg"]
[Mon Apr 13 00:09:10.555734 2026] [:error] [pid 26600:tid 26653] [client 20.151.218.28:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/luf.php
[Mon Apr 13 00:09:10.631964 2026] [:error] [pid 60280:tid 60299] [client 20.151.218.28:65113] File does not exist: /usr/local/apache/htdocs/suspended-page/owlmailer.php
[Mon Apr 13 00:09:11.902306 2026] [:error] [pid 60280:tid 60299] [client 20.151.218.28:65113] File does not exist: /usr/local/apache/htdocs/suspended-page/F0x.php
[Mon Apr 13 00:09:11.902305 2026] [:error] [pid 26600:tid 26653] [client 20.151.218.28:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/bs2.php
[Mon Apr 13 00:09:12.111249 2026] [:error] [pid 26600:tid 26631] [client 20.151.218.28:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/wf.php
[Mon Apr 13 00:09:12.111249 2026] [:error] [pid 60280:tid 60300] [client 20.151.218.28:65113] File does not exist: /usr/local/apache/htdocs/suspended-page/rlpc.php
[Mon Apr 13 00:09:12.321685 2026] [:error] [pid 26600:tid 26644] [client 20.151.218.28:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/vcard.php
[Mon Apr 13 00:09:12.552941 2026] [:error] [pid 60280:tid 60304] [client 20.151.218.28:65113] File does not exist: /usr/local/apache/htdocs/suspended-page/sale.php
[Mon Apr 13 00:09:12.745528 2026] [:error] [pid 26600:tid 26629] [client 20.151.218.28:65147] File does not exist: /usr/local/apache/htdocs/suspended-page/ddgg.php
[Mon Apr 13 00:09:12.967432 2026] [:error] [pid 26600:tid 26640] [client 20.151.218.28:65147] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDqO1YwAZiXhQKLYp7rQAAAYs"]
[Mon Apr 13 00:09:13.116180 2026] [:error] [pid 60280:tid 60305] [client 20.151.218.28:65113] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "advDqXBlLnDOYuIykkgxZQAAAdc"]
[Mon Apr 13 00:09:13.480647 2026] [:error] [pid 25329:tid 25395] [client 20.151.218.28:61097] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDqWdcIYsS8Iyaj13yZAAAAIs"]
[Mon Apr 13 00:09:14.024310 2026] [:error] [pid 25329:tid 25392] [client 20.151.218.28:64063] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDqmdcIYsS8Iyaj13yaQAAAIk"]
[Mon Apr 13 00:09:14.125974 2026] [:error] [pid 25328:tid 25385] [client 20.151.218.28:61155] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "advDqsxUaQZxT-e0YsCPpgAAAE4"]
[Mon Apr 13 00:09:14.817027 2026] [:error] [pid 26599:tid 26626] [client 20.151.218.28:61082] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "advDqnG89LXoQbk_rwD6vQAAAVg"]
[Mon Apr 13 00:09:15.368750 2026] [:error] [pid 25327:tid 25346] [client 20.151.218.28:64097] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "advDqy6h2tZEVJo9JFIvBwAAAAo"]
[Mon Apr 13 00:09:15.927996 2026] [:error] [pid 25327:tid 25341] [client 20.151.218.28:65056] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDqy6h2tZEVJo9JFIvCwAAAAU"]
[Mon Apr 13 00:09:16.504297 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:64416] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDrC6h2tZEVJo9JFIvDgAAAAc"]
[Mon Apr 13 00:09:16.663416 2026] [:error] [pid 26600:tid 26650] [client 20.151.218.28:65091] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ran.php"] [unique_id "advDrO1YwAZiXhQKLYp7twAAAZU"]
[Mon Apr 13 00:09:17.130154 2026] [:error] [pid 60280:tid 60291] [client 20.151.218.28:60435] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDrXBlLnDOYuIykkgxagAAAck"]
[Mon Apr 13 00:09:17.515652 2026] [:error] [pid 25329:tid 25395] [client 20.151.218.28:61078] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advDrWdcIYsS8Iyaj13ycwAAAIs"]
[Mon Apr 13 00:09:17.880042 2026] [:error] [pid 25329:tid 25407] [client 20.151.218.28:60441] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "advDrWdcIYsS8Iyaj13ydwAAAJI"]
[Mon Apr 13 00:09:18.889926 2026] [:error] [pid 25328:tid 25379] [client 20.151.218.28:61154] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advDrsxUaQZxT-e0YsCPrgAAAEs"]
[Mon Apr 13 00:09:18.949488 2026] [:error] [pid 25328:tid 25375] [client 20.151.218.28:60441] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDrsxUaQZxT-e0YsCPrwAAAEk"]
[Mon Apr 13 00:09:19.818377 2026] [:error] [pid 26600:tid 26651] [client 20.151.218.28:64104] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDr-1YwAZiXhQKLYp7vwAAAZY"]
[Mon Apr 13 00:09:20.073469 2026] [:error] [pid 25328:tid 25383] [client 20.151.218.28:61120] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advDsMxUaQZxT-e0YsCPswAAAE0"]
[Mon Apr 13 00:09:20.731079 2026] [:error] [pid 26600:tid 26646] [client 20.151.218.28:64017] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDsO1YwAZiXhQKLYp7wQAAAZE"]
[Mon Apr 13 00:09:21.071012 2026] [:error] [pid 26599:tid 26609] [client 20.151.218.28:64489] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advDsXG89LXoQbk_rwD6ywAAAUc"]
[Mon Apr 13 00:09:21.638769 2026] [:error] [pid 25329:tid 25390] [client 20.151.218.28:64031] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "advDsWdcIYsS8Iyaj13ygAAAAIg"]
[Mon Apr 13 00:09:21.712562 2026] [:error] [pid 26600:tid 26636] [client 20.151.218.28:64483] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advDse1YwAZiXhQKLYp7wwAAAYc"]
[Mon Apr 13 00:09:22.219893 2026] [:error] [pid 60280:tid 60296] [client 20.151.218.28:65095] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDsnBlLnDOYuIykkgxbQAAAc4"]
[Mon Apr 13 00:09:22.452338 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:64497] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advDsnBlLnDOYuIykkgxbgAAAcY"]
[Mon Apr 13 00:09:22.736195 2026] [:error] [pid 25329:tid 25402] [client 20.151.218.28:61128] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDsmdcIYsS8Iyaj13yhAAAAI8"]
[Mon Apr 13 00:09:23.110726 2026] [:error] [pid 25329:tid 25404] [client 20.151.218.28:60446] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advDs2dcIYsS8Iyaj13yhgAAAJA"]
[Mon Apr 13 00:09:23.364503 2026] [:error] [pid 25437:tid 25459] [client 20.151.218.28:65054] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDs3f97wYZje1ep_OZWgAAANQ"]
[Mon Apr 13 00:09:24.019106 2026] [:error] [pid 25329:tid 25413] [client 20.151.218.28:64482] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advDtGdcIYsS8Iyaj13yiQAAAJY"]
[Mon Apr 13 00:09:24.019168 2026] [:error] [pid 25329:tid 25384] [client 20.151.218.28:65133] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "advDtGdcIYsS8Iyaj13yigAAAIU"]
[Mon Apr 13 00:09:24.581568 2026] [:error] [pid 25437:tid 25441] [client 20.151.218.28:65096] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDtHf97wYZje1ep_OZXQAAAMI"]
[Mon Apr 13 00:09:24.662569 2026] [:error] [pid 25437:tid 25447] [client 20.151.218.28:64025] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advDtHf97wYZje1ep_OZXwAAAMg"]
[Mon Apr 13 00:09:25.286580 2026] [:error] [pid 25329:tid 25386] [client 20.151.218.28:59796] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advDtWdcIYsS8Iyaj13ylQAAAIY"]
[Mon Apr 13 00:09:25.400438 2026] [:error] [pid 26567:tid 26579] [client 20.151.218.28:65038] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDtXhRpg6ptWFyFx3lLgAAAQo"]
[Mon Apr 13 00:09:25.953489 2026] [:error] [pid 26567:tid 26576] [client 20.151.218.28:64126] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advDtXhRpg6ptWFyFx3lLwAAAQc"]
[Mon Apr 13 00:09:26.891927 2026] [:error] [pid 25329:tid 25395] [client 20.151.218.28:61083] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDtmdcIYsS8Iyaj13ymgAAAIs"]
[Mon Apr 13 00:09:27.696162 2026] [:error] [pid 25329:tid 25400] [client 20.151.218.28:65108] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advDt2dcIYsS8Iyaj13ynwAAAI4"]
[Mon Apr 13 00:09:29.399803 2026] [:error] [pid 26567:tid 26571] [client 20.151.218.28:60525] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advDuXhRpg6ptWFyFx3lMgAAAQI"]
[Mon Apr 13 00:09:31.829613 2026] [:error] [pid 26599:tid 26612] [client 20.151.218.28:64430] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "advDu3G89LXoQbk_rwD60AAAAUo"]
[Mon Apr 13 00:09:33.295389 2026] [:error] [pid 26600:tid 26645] [client 20.151.218.28:59878] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advDve1YwAZiXhQKLYp7zgAAAZA"]
[Mon Apr 13 00:09:33.905119 2026] [:error] [pid 26599:tid 26604] [client 20.151.218.28:64112] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDvXG89LXoQbk_rwD60gAAAUI"]
[Mon Apr 13 00:09:36.908844 2026] [:error] [pid 25437:tid 25441] [client 20.151.218.28:65046] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advDwHf97wYZje1ep_OZbgAAAMI"]
[Mon Apr 13 00:09:38.518925 2026] [:error] [pid 26600:tid 26649] [client 20.151.218.28:60459] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDwu1YwAZiXhQKLYp75AAAAZQ"]
[Mon Apr 13 00:09:39.024790 2026] [:error] [pid 26600:tid 26635] [client 20.151.218.28:65137] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advDw-1YwAZiXhQKLYp75gAAAYY"]
[Mon Apr 13 00:09:41.885419 2026] [:error] [pid 26600:tid 26637] [client 20.151.218.28:65048] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDxe1YwAZiXhQKLYp76wAAAYg"]
[Mon Apr 13 00:09:42.003625 2026] [:error] [pid 26599:tid 26624] [client 20.151.218.28:64418] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advDxnG89LXoQbk_rwD63AAAAVY"]
[Mon Apr 13 00:09:45.963746 2026] [:error] [pid 25328:tid 25373] [client 20.151.218.28:60421] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "advDycxUaQZxT-e0YsCPxQAAAEg"]
[Mon Apr 13 00:09:46.156070 2026] [:error] [pid 26599:tid 26610] [client 20.151.218.28:60433] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advDynG89LXoQbk_rwD64AAAAUg"]
[Mon Apr 13 00:09:47.413582 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:65066] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDyy6h2tZEVJo9JFIvPAAAAAA"]
[Mon Apr 13 00:09:48.646918 2026] [:error] [pid 60280:tid 60306] [client 20.151.218.28:64511] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advDzHBlLnDOYuIykkgxfwAAAdg"]
[Mon Apr 13 00:09:49.509124 2026] [:error] [pid 60280:tid 60303] [client 20.151.218.28:61062] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDzXBlLnDOYuIykkgxggAAAdU"]
[Mon Apr 13 00:09:50.218943 2026] [:error] [pid 26599:tid 26611] [client 20.151.218.28:59852] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDznG89LXoQbk_rwD66QAAAUk"]
[Mon Apr 13 00:09:50.249867 2026] [:error] [pid 25327:tid 25351] [client 20.151.218.28:61145] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advDzi6h2tZEVJo9JFIvQQAAAA8"]
[Mon Apr 13 00:09:51.074774 2026] [:error] [pid 26600:tid 26652] [client 20.151.218.28:64089] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "advDz-1YwAZiXhQKLYp7_AAAAZc"]
[Mon Apr 13 00:09:51.811959 2026] [:error] [pid 25327:tid 25340] [client 20.151.218.28:64003] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advDzy6h2tZEVJo9JFIvSAAAAAQ"]
[Mon Apr 13 00:09:51.978579 2026] [:error] [pid 25329:tid 25414] [client 20.151.218.28:64460] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advDz2dcIYsS8Iyaj13ywQAAAJc"]
[Mon Apr 13 00:09:52.700174 2026] [:error] [pid 25327:tid 25349] [client 20.151.218.28:61070] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advD0C6h2tZEVJo9JFIvTQAAAA0"]
[Mon Apr 13 00:09:53.344351 2026] [:error] [pid 26600:tid 26629] [client 20.151.218.28:65115] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advD0e1YwAZiXhQKLYp7_QAAAYA"]
[Mon Apr 13 00:09:53.443649 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:64009] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advD0S6h2tZEVJo9JFIvTwAAAAc"]
[Mon Apr 13 00:09:55.318777 2026] [:error] [pid 26600:tid 26651] [client 20.151.218.28:64027] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advD0-1YwAZiXhQKLYp7_gAAAZY"]
[Mon Apr 13 00:09:55.426019 2026] [:error] [pid 60280:tid 60295] [client 20.151.218.28:64462] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "advD03BlLnDOYuIykkgxigAAAc0"]
[Mon Apr 13 00:09:59.239996 2026] [:error] [pid 26599:tid 26606] [client 20.151.218.28:65053] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advD13G89LXoQbk_rwD69AAAAUQ"]
[Mon Apr 13 00:09:59.331173 2026] [:error] [pid 25437:tid 25440] [client 20.151.218.28:64509] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advD13f97wYZje1ep_OZewAAAME"]
[Mon Apr 13 00:10:00.505402 2026] [:error] [pid 25327:tid 25356] [client 20.151.218.28:64100] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advD2C6h2tZEVJo9JFIvVAAAABQ"]
[Mon Apr 13 00:10:02.213337 2026] [:error] [pid 25437:tid 25448] [client 20.151.218.28:65149] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advD2nf97wYZje1ep_OZggAAAMk"]
[Mon Apr 13 00:10:02.570328 2026] [:error] [pid 25437:tid 25455] [client 20.151.218.28:65060] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD2nf97wYZje1ep_OZgwAAANA"]
[Mon Apr 13 00:10:05.015498 2026] [:error] [pid 26600:tid 26639] [client 20.151.218.28:61074] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD3e1YwAZiXhQKLYp8AQAAAYo"]
[Mon Apr 13 00:10:05.291673 2026] [:error] [pid 26599:tid 26624] [client 20.151.218.28:64487] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advD3XG89LXoQbk_rwD6-AAAAVY"]
[Mon Apr 13 00:10:06.772164 2026] [:error] [pid 60280:tid 60305] [client 20.151.218.28:65135] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "advD3nBlLnDOYuIykkgxqwAAAdc"]
[Mon Apr 13 00:10:06.926244 2026] [:error] [pid 25329:tid 25411] [client 20.151.218.28:64013] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD3mdcIYsS8Iyaj13yyQAAAJQ"]
[Mon Apr 13 00:10:07.661810 2026] [:error] [pid 60280:tid 60286] [client 20.151.218.28:60464] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "advD33BlLnDOYuIykkgxrwAAAcQ"]
[Mon Apr 13 00:10:08.546069 2026] [:error] [pid 60280:tid 60301] [client 20.151.218.28:61113] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD4HBlLnDOYuIykkgxtQAAAdM"]
[Mon Apr 13 00:10:09.133669 2026] [:error] [pid 25329:tid 25399] [client 20.151.218.28:61085] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD4WdcIYsS8Iyaj13yzgAAAI0"]
[Mon Apr 13 00:10:09.467552 2026] [:error] [pid 26567:tid 26581] [client 20.151.218.28:60531] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "advD4XhRpg6ptWFyFx3lVQAAAQw"]
[Mon Apr 13 00:10:10.020106 2026] [:error] [pid 60280:tid 60286] [client 20.151.218.28:65031] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD4nBlLnDOYuIykkgxuwAAAcQ"]
[Mon Apr 13 00:10:10.412009 2026] [:error] [pid 26567:tid 26592] [client 20.151.218.28:60518] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "advD4nhRpg6ptWFyFx3lVgAAARc"]
[Mon Apr 13 00:10:10.821906 2026] [:error] [pid 26567:tid 26578] [client 20.151.218.28:65098] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD4nhRpg6ptWFyFx3lVwAAAQk"]
[Mon Apr 13 00:10:11.407342 2026] [:error] [pid 60280:tid 60294] [client 20.151.218.28:64093] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "advD43BlLnDOYuIykkgxvgAAAcw"]
[Mon Apr 13 00:10:11.611604 2026] [:error] [pid 25327:tid 25354] [client 20.151.218.28:64109] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD4y6h2tZEVJo9JFIvYwAAABI"]
[Mon Apr 13 00:10:12.185556 2026] [:error] [pid 25327:tid 25337] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/xBrain.php
[Mon Apr 13 00:10:12.264060 2026] [:error] [pid 25329:tid 25413] [client 20.151.218.28:61147] File does not exist: /usr/local/apache/htdocs/suspended-page/F0x.php
[Mon Apr 13 00:10:12.393986 2026] [:error] [pid 25327:tid 25360] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/sagafif.php
[Mon Apr 13 00:10:12.484100 2026] [:error] [pid 25329:tid 25412] [client 20.151.218.28:61147] File does not exist: /usr/local/apache/htdocs/suspended-page/rlpc.php
[Mon Apr 13 00:10:12.603172 2026] [:error] [pid 25327:tid 25338] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trc.php
[Mon Apr 13 00:10:12.811085 2026] [:error] [pid 25327:tid 25352] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/tesla1.php
[Mon Apr 13 00:10:12.923678 2026] [:error] [pid 25329:tid 25407] [client 20.151.218.28:61147] File does not exist: /usr/local/apache/htdocs/suspended-page/sale.php
[Mon Apr 13 00:10:13.091195 2026] [:error] [pid 25327:tid 25357] [client 20.151.218.28:64499] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Mon Apr 13 00:10:13.134443 2026] [:error] [pid 25329:tid 25415] [client 20.151.218.28:61147] File does not exist: /usr/local/apache/htdocs/suspended-page/ran.php
[Mon Apr 13 00:10:13.339886 2026] [:error] [pid 25329:tid 25395] [client 20.151.218.28:61147] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advD5WdcIYsS8Iyaj13y3wAAAIs"]
[Mon Apr 13 00:10:13.507723 2026] [:error] [pid 25327:tid 25344] [client 20.151.218.28:64499] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advD5S6h2tZEVJo9JFIvawAAAAg"]
[Mon Apr 13 00:10:14.408283 2026] [:error] [pid 60280:tid 60293] [client 20.151.218.28:60516] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advD5nBlLnDOYuIykkgxxgAAAcs"]
[Mon Apr 13 00:10:14.453997 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:61076] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advD5i6h2tZEVJo9JFIvcQAAAAc"]
[Mon Apr 13 00:10:15.085166 2026] [:error] [pid 25327:tid 25337] [client 20.151.218.28:64415] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advD5y6h2tZEVJo9JFIveAAAAAE"]
[Mon Apr 13 00:10:15.223950 2026] [:error] [pid 60280:tid 60287] [client 20.151.218.28:64082] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advD53BlLnDOYuIykkgxywAAAcU"]
[Mon Apr 13 00:10:15.728743 2026] [:error] [pid 60280:tid 60298] [client 20.151.218.28:60543] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advD53BlLnDOYuIykkgxzwAAAdA"]
[Mon Apr 13 00:10:16.381646 2026] [:error] [pid 60280:tid 60305] [client 20.151.218.28:60494] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advD6HBlLnDOYuIykkgx1AAAAdc"]
[Mon Apr 13 00:10:16.420521 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:64405] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k90.php"] [unique_id "advD6HBlLnDOYuIykkgx1wAAAcY"]
[Mon Apr 13 00:10:16.946805 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:61173] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advD6C6h2tZEVJo9JFIvgQAAAAc"]
[Mon Apr 13 00:10:17.063046 2026] [:error] [pid 25327:tid 25351] [client 20.151.218.28:61136] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advD6S6h2tZEVJo9JFIvggAAAA8"]
[Mon Apr 13 00:10:17.557798 2026] [:error] [pid 25437:tid 25459] [client 20.151.218.28:64035] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advD6Xf97wYZje1ep_OZigAAANQ"]
[Mon Apr 13 00:10:17.787630 2026] [:error] [pid 60280:tid 60306] [client 20.151.218.28:64043] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advD6XBlLnDOYuIykkgx3wAAAdg"]
[Mon Apr 13 00:10:18.240957 2026] [:error] [pid 60280:tid 60297] [client 20.151.218.28:61164] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advD6nBlLnDOYuIykkgx4wAAAc8"]
[Mon Apr 13 00:10:18.747248 2026] [:error] [pid 60280:tid 60282] [client 20.151.218.28:65144] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advD6nBlLnDOYuIykkgx6QAAAcA"]
[Mon Apr 13 00:10:18.956387 2026] [:error] [pid 25329:tid 25378] [client 20.151.218.28:65027] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advD6mdcIYsS8Iyaj13y4AAAAII"]
[Mon Apr 13 00:10:19.774772 2026] [:error] [pid 25329:tid 25390] [client 20.151.218.28:61088] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/taff.php"] [unique_id "advD62dcIYsS8Iyaj13y4QAAAIg"]
[Mon Apr 13 00:10:19.849692 2026] [:error] [pid 25437:tid 25449] [client 20.151.218.28:61077] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advD63f97wYZje1ep_OZkAAAAMo"]
[Mon Apr 13 00:10:20.340323 2026] [:error] [pid 25327:tid 25354] [client 20.151.218.28:60507] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advD7C6h2tZEVJo9JFIvmQAAABI"]
[Mon Apr 13 00:10:20.782126 2026] [:error] [pid 26600:tid 26633] [client 20.151.218.28:61177] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advD7O1YwAZiXhQKLYp8CAAAAYQ"]
[Mon Apr 13 00:10:20.992552 2026] [:error] [pid 26600:tid 26653] [client 20.151.218.28:60539] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advD7O1YwAZiXhQKLYp8CQAAAZg"]
[Mon Apr 13 00:10:21.372435 2026] [:error] [pid 26567:tid 26580] [client 20.151.218.28:64047] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advD7XhRpg6ptWFyFx3lWAAAAQs"]
[Mon Apr 13 00:10:21.733942 2026] [:error] [pid 25437:tid 25442] [client 20.151.218.28:64036] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advD7Xf97wYZje1ep_OZkQAAAMM"]
[Mon Apr 13 00:10:21.953203 2026] [:error] [pid 25437:tid 25439] [client 20.151.218.28:65086] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advD7Xf97wYZje1ep_OZkgAAAMA"]
[Mon Apr 13 00:10:22.299631 2026] [:error] [pid 25327:tid 25339] [client 20.151.218.28:64451] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "advD7i6h2tZEVJo9JFIvnwAAAAM"]
[Mon Apr 13 00:10:22.530548 2026] [:error] [pid 25437:tid 25450] [client 20.151.218.28:65119] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advD7nf97wYZje1ep_OZlgAAAMs"]
[Mon Apr 13 00:10:23.000255 2026] [:error] [pid 25437:tid 25440] [client 20.151.218.28:61162] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advD7nf97wYZje1ep_OZmAAAAME"]
[Mon Apr 13 00:10:23.115331 2026] [:error] [pid 25437:tid 25445] [client 20.151.218.28:61172] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advD73f97wYZje1ep_OZmgAAAMY"]
[Mon Apr 13 00:10:23.712437 2026] [:error] [pid 60280:tid 60292] [client 20.151.218.28:65065] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advD73BlLnDOYuIykkgx8wAAAco"]
[Mon Apr 13 00:10:23.720414 2026] [:error] [pid 60280:tid 60303] [client 20.151.218.28:64390] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advD73BlLnDOYuIykkgx9AAAAdU"]
[Mon Apr 13 00:10:24.223970 2026] [:error] [pid 60280:tid 60282] [client 20.151.218.28:61160] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advD8HBlLnDOYuIykkgx9wAAAcA"]
[Mon Apr 13 00:10:24.272696 2026] [:error] [pid 60280:tid 60296] [client 20.151.218.28:60523] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advD8HBlLnDOYuIykkgx-AAAAc4"]
[Mon Apr 13 00:10:24.874847 2026] [:error] [pid 60280:tid 60298] [client 20.151.218.28:64444] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "advD8HBlLnDOYuIykkgx-wAAAdA"]
[Mon Apr 13 00:10:24.955900 2026] [:error] [pid 25329:tid 25404] [client 20.151.218.28:60512] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advD8GdcIYsS8Iyaj13y6wAAAJA"]
[Mon Apr 13 00:10:25.677028 2026] [:error] [pid 25437:tid 25448] [client 20.151.218.28:64480] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advD8Xf97wYZje1ep_OZngAAAMk"]
[Mon Apr 13 00:10:25.839026 2026] [:error] [pid 25437:tid 25462] [client 20.151.218.28:60522] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advD8Xf97wYZje1ep_OZnwAAANc"]
[Mon Apr 13 00:10:26.766703 2026] [:error] [pid 25327:tid 25352] [client 20.151.218.28:64397] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advD8i6h2tZEVJo9JFIvqQAAABA"]
[Mon Apr 13 00:10:27.145424 2026] [:error] [pid 25327:tid 25347] [client 20.151.218.28:64125] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advD8y6h2tZEVJo9JFIvrAAAAAs"]
[Mon Apr 13 00:10:27.846636 2026] [:error] [pid 26600:tid 26650] [client 20.151.218.28:60528] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advD8-1YwAZiXhQKLYp8DAAAAZU"]
[Mon Apr 13 00:10:28.490303 2026] [:error] [pid 25329:tid 25392] [client 20.151.218.28:59776] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssxsl.php"] [unique_id "advD9GdcIYsS8Iyaj13y7QAAAIk"]
[Mon Apr 13 00:10:29.242133 2026] [:error] [pid 26600:tid 26641] [client 20.151.218.28:60536] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advD9e1YwAZiXhQKLYp8EAAAAYw"]
[Mon Apr 13 00:10:29.897315 2026] [:error] [pid 60280:tid 60283] [client 20.151.218.28:61149] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "advD9XBlLnDOYuIykkgyBAAAAcE"]
[Mon Apr 13 00:10:30.156831 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:64410] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advD9nBlLnDOYuIykkgyCAAAAdQ"]
[Mon Apr 13 00:10:30.695857 2026] [:error] [pid 25328:tid 25379] [client 20.151.218.28:60520] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advD9sxUaQZxT-e0YsCP1AAAAEs"]
[Mon Apr 13 00:10:31.122371 2026] [:error] [pid 26599:tid 26622] [client 20.151.218.28:61129] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/AE5VAL.php"] [unique_id "advD93G89LXoQbk_rwD7AQAAAVQ"]
[Mon Apr 13 00:10:31.625613 2026] [:error] [pid 60280:tid 60305] [client 20.151.218.28:65029] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD93BlLnDOYuIykkgyHAAAAdc"]
[Mon Apr 13 00:10:32.226460 2026] [:error] [pid 60280:tid 60298] [client 20.151.218.28:59830] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD-HBlLnDOYuIykkgyJwAAAdA"]
[Mon Apr 13 00:10:32.705001 2026] [:error] [pid 60280:tid 60294] [client 20.151.218.28:61069] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD-HBlLnDOYuIykkgyMAAAAcw"]
[Mon Apr 13 00:10:33.263705 2026] [:error] [pid 25329:tid 25411] [client 20.151.218.28:61124] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gold.php"] [unique_id "advD-WdcIYsS8Iyaj13y8gAAAJQ"]
[Mon Apr 13 00:10:33.373177 2026] [:error] [pid 60280:tid 60302] [client 20.151.218.28:65081] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "advD-XBlLnDOYuIykkgyOgAAAdQ"]
[Mon Apr 13 00:10:33.800031 2026] [:error] [pid 25329:tid 25384] [client 20.151.218.28:64023] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD-WdcIYsS8Iyaj13y9AAAAIU"]
[Mon Apr 13 00:10:33.952576 2026] [:error] [pid 60280:tid 60284] [client 20.151.218.28:60500] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "advD-XBlLnDOYuIykkgyQwAAAcI"]
[Mon Apr 13 00:10:34.485820 2026] [:error] [pid 25329:tid 25414] [client 20.151.218.28:65032] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "advD-mdcIYsS8Iyaj13y9wAAAJc"]
[Mon Apr 13 00:10:34.891303 2026] [:error] [pid 26600:tid 26644] [client 20.151.218.28:65136] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD-u1YwAZiXhQKLYp8EwAAAY8"]
[Mon Apr 13 00:10:35.076598 2026] [:error] [pid 25327:tid 25355] [client 20.151.218.28:59824] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "advD-y6h2tZEVJo9JFIvxgAAABM"]
[Mon Apr 13 00:10:35.533803 2026] [:error] [pid 60280:tid 60306] [client 20.151.218.28:59859] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "advD-3BlLnDOYuIykkgyUAAAAdg"]
[Mon Apr 13 00:10:35.977709 2026] [:error] [pid 60280:tid 60299] [client 20.151.218.28:65073] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "advD-3BlLnDOYuIykkgyVgAAAdE"]
[Mon Apr 13 00:10:36.156850 2026] [:error] [pid 60280:tid 60304] [client 20.151.218.28:65100] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD_HBlLnDOYuIykkgyWQAAAdY"]
[Mon Apr 13 00:10:36.577180 2026] [:error] [pid 60280:tid 60301] [client 20.151.218.28:65043] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "advD_HBlLnDOYuIykkgyXQAAAdM"]
[Mon Apr 13 00:10:36.918728 2026] [:error] [pid 60280:tid 60287] [client 20.151.218.28:65062] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "advD_HBlLnDOYuIykkgyYQAAAcU"]
[Mon Apr 13 00:10:37.710986 2026] [:error] [pid 60280:tid 60293] [client 20.151.218.28:65072] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advD_XBlLnDOYuIykkgybAAAAcs"]
[Mon Apr 13 00:10:38.878472 2026] [:error] [pid 25327:tid 25356] [client 20.151.218.28:65142] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advD_i6h2tZEVJo9JFIvygAAABQ"]
[Mon Apr 13 00:10:40.082610 2026] [:error] [pid 25329:tid 25413] [client 20.151.218.28:60455] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advEAGdcIYsS8Iyaj13zAAAAAJY"]
[Mon Apr 13 00:10:41.560054 2026] [:error] [pid 25328:tid 25383] [client 20.151.218.28:61102] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advEAcxUaQZxT-e0YsCP2QAAAE0"]
[Mon Apr 13 00:10:42.999727 2026] [:error] [pid 60280:tid 60300] [client 20.151.218.28:61086] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "advEAnBlLnDOYuIykkgysAAAAdI"]
[Mon Apr 13 00:10:43.946591 2026] [:error] [pid 25329:tid 25381] [client 20.151.218.28:64393] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "advEA2dcIYsS8Iyaj13zGAAAAIM"]
[Mon Apr 13 00:10:44.860285 2026] [:error] [pid 25329:tid 25386] [client 20.151.218.28:65074] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "advEBGdcIYsS8Iyaj13zGgAAAIY"]
[Mon Apr 13 00:10:45.769133 2026] [:error] [pid 25327:tid 25355] [client 20.151.218.28:64057] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "advEBS6h2tZEVJo9JFIv9wAAABM"]
[Mon Apr 13 00:10:46.883901 2026] [:error] [pid 25328:tid 25379] [client 20.151.218.28:59413] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "advEBsxUaQZxT-e0YsCP4gAAAEs"]
[Mon Apr 13 00:10:48.454621 2026] [:error] [pid 60280:tid 60292] [client 20.151.218.28:64386] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "advECHBlLnDOYuIykkgy6wAAAco"]
[Mon Apr 13 00:10:49.604109 2026] [:error] [pid 60280:tid 60289] [client 20.151.218.28:65105] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "advECXBlLnDOYuIykkgy-AAAAcc"]
[Mon Apr 13 00:10:50.366489 2026] [:error] [pid 60280:tid 60283] [client 20.151.218.28:65072] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "advECnBlLnDOYuIykkgzAAAAAcE"]
[Mon Apr 13 00:10:51.315415 2026] [:error] [pid 60280:tid 60300] [client 20.151.218.28:60436] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "advEC3BlLnDOYuIykkgzDAAAAdI"]
[Mon Apr 13 00:10:52.097494 2026] [:error] [pid 25328:tid 25367] [client 20.151.218.28:60480] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "advEDMxUaQZxT-e0YsCP6QAAAEM"]
[Mon Apr 13 00:10:52.707676 2026] [:error] [pid 25327:tid 25343] [client 20.151.218.28:60542] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "advEDC6h2tZEVJo9JFIwCQAAAAc"]
[Mon Apr 13 00:10:53.513159 2026] [:error] [pid 26567:tid 26581] [client 20.151.218.28:61148] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "advEDXhRpg6ptWFyFx3lYwAAAQw"]
[Mon Apr 13 00:10:54.185528 2026] [:error] [pid 60280:tid 60296] [client 20.151.218.28:61159] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "advEDnBlLnDOYuIykkgzHAAAAc4"]
[Mon Apr 13 00:10:54.978459 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:65025] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "advEDi6h2tZEVJo9JFIwDAAAAAA"]
[Mon Apr 13 00:10:55.651133 2026] [:error] [pid 25327:tid 25355] [client 20.151.218.28:61071] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "advEDy6h2tZEVJo9JFIwDQAAABM"]
[Mon Apr 13 00:10:56.261439 2026] [:error] [pid 25328:tid 25365] [client 20.151.218.28:60509] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "advEEMxUaQZxT-e0YsCP8AAAAEE"]
[Mon Apr 13 00:10:57.351262 2026] [:error] [pid 25329:tid 25384] [client 20.151.218.28:64081] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "advEEWdcIYsS8Iyaj13zJQAAAIU"]
[Mon Apr 13 00:10:58.281346 2026] [:error] [pid 26567:tid 26580] [client 20.151.218.28:61110] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "advEEnhRpg6ptWFyFx3lZQAAAQs"]
[Mon Apr 13 00:10:59.041654 2026] [:error] [pid 60280:tid 60294] [client 20.151.218.28:65121] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "advEE3BlLnDOYuIykkgzPgAAAcw"]
[Mon Apr 13 00:10:59.977384 2026] [:error] [pid 25328:tid 25373] [client 20.151.218.28:65088] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "advEE8xUaQZxT-e0YsCP9wAAAEg"]
[Mon Apr 13 00:11:00.658179 2026] [:error] [pid 25328:tid 25398] [client 20.151.218.28:64400] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advEFMxUaQZxT-e0YsCP-QAAAFQ"]
[Mon Apr 13 00:11:01.106425 2026] [:error] [pid 60280:tid 60283] [client 20.151.218.28:64507] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advEFXBlLnDOYuIykkgzTgAAAcE"]
[Mon Apr 13 00:11:01.790440 2026] [:error] [pid 25329:tid 25386] [client 20.151.218.28:64408] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advEFWdcIYsS8Iyaj13zLQAAAIY"]
[Mon Apr 13 00:11:02.651217 2026] [:error] [pid 25329:tid 25413] [client 20.151.218.28:61075] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "advEFmdcIYsS8Iyaj13zMgAAAJY"]
[Mon Apr 13 00:11:03.171164 2026] [:error] [pid 25327:tid 25349] [client 20.151.218.28:64411] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advEFy6h2tZEVJo9JFIwFwAAAA0"]
[Mon Apr 13 00:11:03.736894 2026] [:error] [pid 25437:tid 25460] [client 20.151.218.28:60538] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advEF3f97wYZje1ep_OZvQAAANU"]
[Mon Apr 13 00:11:04.449307 2026] [:error] [pid 25327:tid 25345] [client 20.151.218.28:64002] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advEGC6h2tZEVJo9JFIwGgAAAAk"]
[Mon Apr 13 00:11:04.941638 2026] [:error] [pid 60280:tid 60283] [client 20.151.218.28:64071] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "advEGHBlLnDOYuIykkgzZgAAAcE"]
[Mon Apr 13 00:11:05.571127 2026] [:error] [pid 25437:tid 25450] [client 20.151.218.28:60513] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advEGXf97wYZje1ep_OZwAAAAMs"]
[Mon Apr 13 00:11:06.217557 2026] [:error] [pid 25329:tid 25397] [client 20.151.218.28:65033] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advEGmdcIYsS8Iyaj13zOAAAAIw"]
[Mon Apr 13 00:11:06.951279 2026] [:error] [pid 26567:tid 26574] [client 20.151.218.28:65104] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advEGnhRpg6ptWFyFx3lbgAAAQU"]
[Mon Apr 13 00:11:07.532007 2026] [:error] [pid 60280:tid 60288] [client 20.151.218.28:61125] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "advEG3BlLnDOYuIykkgzfwAAAcY"]
[Mon Apr 13 00:11:08.005885 2026] [:error] [pid 25327:tid 25355] [client 20.151.218.28:64476] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advEHC6h2tZEVJo9JFIwJAAAABM"]
[Mon Apr 13 00:11:08.606952 2026] [:error] [pid 60280:tid 60296] [client 20.151.218.28:64119] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advEHHBlLnDOYuIykkgziQAAAc4"]
[Mon Apr 13 00:11:09.216478 2026] [:error] [pid 25327:tid 25354] [client 20.151.218.28:64433] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advEHS6h2tZEVJo9JFIwJgAAABI"]
[Mon Apr 13 00:11:09.801501 2026] [:error] [pid 26600:tid 26653] [client 20.151.218.28:64455] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "advEHe1YwAZiXhQKLYp8MQAAAZg"]
[Mon Apr 13 00:11:10.248375 2026] [:error] [pid 60280:tid 60301] [client 20.151.218.28:59860] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advEHnBlLnDOYuIykkgzlwAAAdM"]
[Mon Apr 13 00:11:11.180923 2026] [:error] [pid 26599:tid 26613] [client 20.151.218.28:65028] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advEH3G89LXoQbk_rwD7DgAAAUs"]
[Mon Apr 13 00:11:12.833710 2026] [:error] [pid 25327:tid 25336] [client 20.151.218.28:65141] [client 20.151.218.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "advEIC6h2tZEVJo9JFIwKgAAAAA"]
[Mon Apr 13 00:11:15.578568 2026] [:error] [pid 25329:tid 25378] [client 20.151.218.28:64412] File does not exist: /usr/local/apache/htdocs/suspended-page/xBrain.php
[Mon Apr 13 00:11:15.791273 2026] [:error] [pid 25329:tid 25392] [client 20.151.218.28:64412] File does not exist: /usr/local/apache/htdocs/suspended-page/yunu.php
[Mon Apr 13 00:11:17.473815 2026] [:error] [pid 25329:tid 25393] [client 20.151.218.28:64412] File does not exist: /usr/local/apache/htdocs/suspended-page/lexy.php
[Mon Apr 13 00:20:07.606043 2026] [:error] [pid 60280:tid 60298] [client 49.36.182.223:53899] [client 49.36.182.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.182.223, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "advGN3BlLnDOYuIykkg5ZQAAAdA"]
[Mon Apr 13 00:20:07.611937 2026] [:error] [pid 60280:tid 60298] [client 49.36.182.223:53899] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 02:14:47.834053 2026] [:error] [pid 32010:tid 32022] [client 119.96.24.54:36958] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "advhFw0nq-t9pXyV1fyl9QAAAMo"]
[Mon Apr 13 03:04:31.400302 2026] [:error] [pid 32010:tid 32035] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Mon Apr 13 03:04:31.663948 2026] [:error] [pid 32010:tid 32021] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Mon Apr 13 03:04:31.929279 2026] [:error] [pid 32010:tid 32032] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Mon Apr 13 03:04:32.192155 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Mon Apr 13 03:04:33.824545 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Mon Apr 13 03:04:34.087090 2026] [:error] [pid 32010:tid 32028] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/8QXC9v.php
[Mon Apr 13 03:04:34.348904 2026] [:error] [pid 32010:tid 32012] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Apr 13 03:04:34.801376 2026] [:error] [pid 32010:tid 32021] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/panel.php
[Mon Apr 13 03:04:35.075028 2026] [:error] [pid 32010:tid 32019] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Mon Apr 13 03:04:35.541116 2026] [:error] [pid 32010:tid 32023] [client 4.223.67.199:57169] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Mon Apr 13 03:04:35.827943 2026] [:error] [pid 32010:tid 32024] [client 4.223.67.199:57169] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "advsww0nq-t9pXyV1fy7aQAAAMw"]
[Mon Apr 13 03:04:37.072482 2026] [:error] [pid 31606:tid 31722] [client 4.223.67.199:29074] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "advsxT9vCsshNhLmCiCMUwAAAFA"]
[Mon Apr 13 03:04:37.926127 2026] [:error] [pid 31607:tid 31743] [client 4.223.67.199:29095] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "advsxWjn_I-KYTWngjJLzAAAAIY"]
[Mon Apr 13 03:04:39.024908 2026] [:error] [pid 31607:tid 31755] [client 4.223.67.199:57181] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "advsx2jn_I-KYTWngjJL0gAAAJI"]
[Mon Apr 13 03:04:40.029306 2026] [:error] [pid 32010:tid 32027] [client 4.223.67.199:57180] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "advsyA0nq-t9pXyV1fy7cQAAAM8"]
[Mon Apr 13 03:04:42.013424 2026] [:error] [pid 32010:tid 32033] [client 4.223.67.199:62698] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "advsyg0nq-t9pXyV1fy7dAAAANU"]
[Mon Apr 13 03:04:43.211500 2026] [:error] [pid 31607:tid 31755] [client 4.223.67.199:62696] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "advsy2jn_I-KYTWngjJL2QAAAJI"]
[Mon Apr 13 03:04:44.130461 2026] [:error] [pid 31606:tid 31715] [client 4.223.67.199:57156] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "advszD9vCsshNhLmCiCMWgAAAEk"]
[Mon Apr 13 03:04:44.988287 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:29091] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "advszGyJMmaONUqF0tCm3gAAAQ0"]
[Mon Apr 13 03:04:46.126374 2026] [:error] [pid 31607:tid 31743] [client 4.223.67.199:29094] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "advszmjn_I-KYTWngjJL3wAAAIY"]
[Mon Apr 13 03:04:47.747211 2026] [:error] [pid 54671:tid 54683] [client 4.223.67.199:29083] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "advsz2yJMmaONUqF0tCm4QAAAQg"]
[Mon Apr 13 03:04:48.982193 2026] [:error] [pid 54671:tid 54689] [client 4.223.67.199:57215] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "advs0GyJMmaONUqF0tCm5gAAAQ4"]
[Mon Apr 13 03:04:49.820099 2026] [:error] [pid 31606:tid 31723] [client 4.223.67.199:62716] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "advs0T9vCsshNhLmCiCMYgAAAFE"]
[Mon Apr 13 03:04:50.549394 2026] [:error] [pid 54671:tid 54682] [client 4.223.67.199:57166] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "advs0myJMmaONUqF0tCm6QAAAQc"]
[Mon Apr 13 03:04:51.292425 2026] [:error] [pid 31606:tid 31725] [client 4.223.67.199:62666] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "advs0z9vCsshNhLmCiCMZAAAAFM"]
[Mon Apr 13 03:04:51.896493 2026] [:error] [pid 31605:tid 31644] [client 4.223.67.199:62660] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "advs029Py-Y-9VQ02eHcOAAAAAE"]
[Mon Apr 13 03:04:52.568976 2026] [:error] [pid 54671:tid 54694] [client 4.223.67.199:57153] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "advs1GyJMmaONUqF0tCm7wAAARM"]
[Mon Apr 13 03:04:53.219869 2026] [:error] [pid 54671:tid 54685] [client 4.223.67.199:29119] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "advs1WyJMmaONUqF0tCm9AAAAQo"]
[Mon Apr 13 03:04:53.956870 2026] [:error] [pid 32010:tid 32015] [client 4.223.67.199:57189] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "advs1Q0nq-t9pXyV1fy7gAAAAMM"]
[Mon Apr 13 03:04:54.676809 2026] [:error] [pid 31607:tid 31757] [client 4.223.67.199:57182] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "advs1mjn_I-KYTWngjJL6wAAAJQ"]
[Mon Apr 13 03:04:55.330031 2026] [:error] [pid 31607:tid 31744] [client 4.223.67.199:62689] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "advs12jn_I-KYTWngjJL7gAAAIc"]
[Mon Apr 13 03:04:56.413646 2026] [:error] [pid 31605:tid 31655] [client 4.223.67.199:24706] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "advs2G9Py-Y-9VQ02eHcPAAAAAw"]
[Mon Apr 13 03:04:57.112472 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:57206] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "advs2WyJMmaONUqF0tCnAgAAARA"]
[Mon Apr 13 03:04:58.010282 2026] [:error] [pid 54671:tid 54683] [client 4.223.67.199:24714] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "advs2myJMmaONUqF0tCnBwAAAQg"]
[Mon Apr 13 03:04:58.773755 2026] [:error] [pid 54671:tid 54697] [client 4.223.67.199:57168] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "advs2myJMmaONUqF0tCnCgAAARY"]
[Mon Apr 13 03:04:59.329815 2026] [:error] [pid 54671:tid 54699] [client 4.223.67.199:57208] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "advs22yJMmaONUqF0tCnDwAAARg"]
[Mon Apr 13 03:05:00.023835 2026] [:error] [pid 54671:tid 54676] [client 4.223.67.199:29086] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "advs3GyJMmaONUqF0tCnFAAAAQE"]
[Mon Apr 13 03:05:00.716033 2026] [:error] [pid 31606:tid 31717] [client 4.223.67.199:62661] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/water.php"] [unique_id "advs3D9vCsshNhLmCiCMbgAAAEs"]
[Mon Apr 13 03:05:01.282562 2026] [:error] [pid 31607:tid 31750] [client 4.223.67.199:29102] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "advs3Wjn_I-KYTWngjJL-wAAAI0"]
[Mon Apr 13 03:05:01.965754 2026] [:error] [pid 31605:tid 31661] [client 4.223.67.199:29103] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "advs3W9Py-Y-9VQ02eHcRgAAABI"]
[Mon Apr 13 03:05:02.684374 2026] [:error] [pid 54671:tid 54689] [client 4.223.67.199:29080] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "advs3myJMmaONUqF0tCnGQAAAQ4"]
[Mon Apr 13 03:05:03.288970 2026] [:error] [pid 54671:tid 54698] [client 4.223.67.199:62690] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "advs32yJMmaONUqF0tCnGgAAARc"]
[Mon Apr 13 03:05:04.630470 2026] [:error] [pid 31605:tid 31655] [client 4.223.67.199:24721] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "advs4G9Py-Y-9VQ02eHcSQAAAAw"]
[Mon Apr 13 03:05:06.439296 2026] [:error] [pid 54671:tid 54692] [client 4.223.67.199:62679] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "advs4myJMmaONUqF0tCnHgAAARE"]
[Mon Apr 13 03:05:08.414106 2026] [:error] [pid 31605:tid 31653] [client 4.223.67.199:57192] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "advs5G9Py-Y-9VQ02eHcTgAAAAo"]
[Mon Apr 13 03:05:11.935487 2026] [:error] [pid 31606:tid 31716] [client 4.223.67.199:17683] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "advs5z9vCsshNhLmCiCMfAAAAEo"]
[Mon Apr 13 03:05:14.256599 2026] [:error] [pid 54671:tid 54697] [client 4.223.67.199:57162] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "advs6myJMmaONUqF0tCnOwAAARY"]
[Mon Apr 13 03:05:15.750968 2026] [:error] [pid 32010:tid 32027] [client 4.223.67.199:62712] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "advs6w0nq-t9pXyV1fy7kgAAAM8"]
[Mon Apr 13 03:05:16.494552 2026] [:error] [pid 31607:tid 31739] [client 4.223.67.199:29078] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "advs7Gjn_I-KYTWngjJMEAAAAII"]
[Mon Apr 13 03:05:17.289939 2026] [:error] [pid 32010:tid 32015] [client 4.223.67.199:57176] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "advs7Q0nq-t9pXyV1fy7lwAAAMM"]
[Mon Apr 13 03:05:18.019983 2026] [:error] [pid 31606:tid 31726] [client 4.223.67.199:29058] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "advs7j9vCsshNhLmCiCMggAAAFQ"]
[Mon Apr 13 03:05:19.118889 2026] [:error] [pid 31605:tid 31643] [client 4.223.67.199:17673] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "advs729Py-Y-9VQ02eHcXAAAAAA"]
[Mon Apr 13 03:05:20.031188 2026] [:error] [pid 32010:tid 32035] [client 4.223.67.199:24709] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "advs8A0nq-t9pXyV1fy7nQAAANc"]
[Mon Apr 13 03:05:21.219551 2026] [:error] [pid 32010:tid 32024] [client 4.223.67.199:62658] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "advs8Q0nq-t9pXyV1fy7ngAAAMw"]
[Mon Apr 13 03:05:22.346473 2026] [:error] [pid 32010:tid 32015] [client 4.223.67.199:29057] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "advs8g0nq-t9pXyV1fy7oAAAAMM"]
[Mon Apr 13 03:05:23.529161 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:62664] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "advs8w0nq-t9pXyV1fy7owAAAMo"]
[Mon Apr 13 03:05:24.655188 2026] [:error] [pid 32010:tid 32034] [client 4.223.67.199:57210] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "advs9A0nq-t9pXyV1fy7pAAAANY"]
[Mon Apr 13 03:05:25.661696 2026] [:error] [pid 31607:tid 31747] [client 4.223.67.199:57170] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "advs9Wjn_I-KYTWngjJMGgAAAIo"]
[Mon Apr 13 03:05:26.704863 2026] [:error] [pid 31606:tid 31719] [client 4.223.67.199:29092] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "advs9j9vCsshNhLmCiCMiwAAAE0"]
[Mon Apr 13 03:05:27.898673 2026] [:error] [pid 54671:tid 54677] [client 4.223.67.199:29109] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "advs92yJMmaONUqF0tCnVQAAAQI"]
[Mon Apr 13 03:05:29.534517 2026] [:error] [pid 31606:tid 31729] [client 4.223.67.199:16294] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "advs-T9vCsshNhLmCiCMjQAAAFc"]
[Mon Apr 13 03:05:31.693079 2026] [:error] [pid 54671:tid 54697] [client 4.223.67.199:62705] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oij98gy.php"] [unique_id "advs-2yJMmaONUqF0tCnZgAAARY"]
[Mon Apr 13 03:05:33.009595 2026] [:error] [pid 31606:tid 31727] [client 4.223.67.199:29060] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "advs_T9vCsshNhLmCiCMkAAAAFU"]
[Mon Apr 13 03:05:34.012027 2026] [:error] [pid 31606:tid 31710] [client 4.223.67.199:29077] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "advs_j9vCsshNhLmCiCMlAAAAEQ"]
[Mon Apr 13 03:05:35.023535 2026] [:error] [pid 31605:tid 31658] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Mon Apr 13 03:05:35.310552 2026] [:error] [pid 31605:tid 31651] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/turkshell.php
[Mon Apr 13 03:05:35.578701 2026] [:error] [pid 31605:tid 31645] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/tea.php
[Mon Apr 13 03:05:35.843117 2026] [:error] [pid 31605:tid 31665] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Mon Apr 13 03:05:36.106336 2026] [:error] [pid 31605:tid 31656] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Mon Apr 13 03:05:36.369919 2026] [:error] [pid 31605:tid 31666] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Mon Apr 13 03:05:36.871424 2026] [:error] [pid 31605:tid 31644] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Apr 13 03:05:37.134198 2026] [:error] [pid 31605:tid 31646] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Mon Apr 13 03:05:37.397812 2026] [:error] [pid 31605:tid 31659] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Mon Apr 13 03:05:37.661408 2026] [:error] [pid 31605:tid 31661] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Mon Apr 13 03:05:37.924002 2026] [:error] [pid 31605:tid 31648] [client 4.223.67.199:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Mon Apr 13 03:05:38.197483 2026] [:error] [pid 31605:tid 31643] [client 4.223.67.199:24743] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "advtAm9Py-Y-9VQ02eHchQAAAAA"]
[Mon Apr 13 03:05:39.506799 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:57154] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "advtA2yJMmaONUqF0tCncgAAARA"]
[Mon Apr 13 03:05:40.498727 2026] [:error] [pid 31606:tid 31723] [client 4.223.67.199:62702] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "advtBD9vCsshNhLmCiCMoAAAAFE"]
[Mon Apr 13 03:05:41.507525 2026] [:error] [pid 32010:tid 32030] [client 4.223.67.199:29059] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "advtBQ0nq-t9pXyV1fy7sQAAANI"]
[Mon Apr 13 03:05:42.483321 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:24716] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "advtBg0nq-t9pXyV1fy7tAAAAMo"]
[Mon Apr 13 03:05:43.529153 2026] [:error] [pid 54671:tid 54692] [client 4.223.67.199:62668] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "advtB2yJMmaONUqF0tCnfwAAARE"]
[Mon Apr 13 03:05:44.457147 2026] [:error] [pid 31607:tid 31738] [client 4.223.67.199:29079] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "advtCGjn_I-KYTWngjJMLAAAAIE"]
[Mon Apr 13 03:05:45.342233 2026] [:error] [pid 54671:tid 54683] [client 4.223.67.199:57209] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "advtCWyJMmaONUqF0tCniQAAAQg"]
[Mon Apr 13 03:05:46.139438 2026] [:error] [pid 31605:tid 31661] [client 4.223.67.199:16276] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "advtCm9Py-Y-9VQ02eHcjAAAABI"]
[Mon Apr 13 03:05:46.990095 2026] [:error] [pid 31607:tid 31743] [client 4.223.67.199:57172] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "advtCmjn_I-KYTWngjJMLwAAAIY"]
[Mon Apr 13 03:05:47.832320 2026] [:error] [pid 32010:tid 32031] [client 4.223.67.199:17703] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "advtCw0nq-t9pXyV1fy7ugAAANM"]
[Mon Apr 13 03:05:48.671975 2026] [:error] [pid 54671:tid 54693] [client 4.223.67.199:62677] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "advtDGyJMmaONUqF0tCnjQAAARI"]
[Mon Apr 13 03:05:49.745448 2026] [:error] [pid 31606:tid 31708] [client 4.223.67.199:62710] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "advtDT9vCsshNhLmCiCMrwAAAEI"]
[Mon Apr 13 03:05:50.485092 2026] [:error] [pid 31605:tid 31665] [client 4.223.67.199:29090] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "advtDm9Py-Y-9VQ02eHclgAAABY"]
[Mon Apr 13 03:05:51.320307 2026] [:error] [pid 31605:tid 31653] [client 4.223.67.199:62709] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "advtD29Py-Y-9VQ02eHclwAAAAo"]
[Mon Apr 13 03:05:52.032043 2026] [:error] [pid 31605:tid 31667] [client 4.223.67.199:57204] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.mopj.php"] [unique_id "advtEG9Py-Y-9VQ02eHcmQAAABg"]
[Mon Apr 13 03:05:52.760228 2026] [:error] [pid 31607:tid 31758] [client 4.223.67.199:17664] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "advtEGjn_I-KYTWngjJMPQAAAJU"]
[Mon Apr 13 03:05:53.432896 2026] [:error] [pid 31607:tid 31742] [client 4.223.67.199:24717] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "advtEWjn_I-KYTWngjJMQAAAAIU"]
[Mon Apr 13 03:05:54.248193 2026] [:error] [pid 54671:tid 54686] [client 4.223.67.199:57163] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "advtEmyJMmaONUqF0tCnkQAAAQs"]
[Mon Apr 13 03:05:54.938697 2026] [:error] [pid 54671:tid 54682] [client 4.223.67.199:29097] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "advtEmyJMmaONUqF0tCnkgAAAQc"]
[Mon Apr 13 03:05:55.805812 2026] [:error] [pid 54671:tid 54687] [client 4.223.67.199:16272] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "advtE2yJMmaONUqF0tCnlwAAAQw"]
[Mon Apr 13 03:05:56.668782 2026] [:error] [pid 32010:tid 32033] [client 4.223.67.199:29076] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "advtFA0nq-t9pXyV1fy7yQAAANU"]
[Mon Apr 13 03:05:57.487202 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:24723] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "advtFQ0nq-t9pXyV1fy7zQAAAMo"]
[Mon Apr 13 03:05:58.177278 2026] [:error] [pid 31607:tid 31759] [client 4.223.67.199:24764] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nano.php"] [unique_id "advtFmjn_I-KYTWngjJMTQAAAJY"]
[Mon Apr 13 03:05:58.959032 2026] [:error] [pid 31605:tid 31647] [client 4.223.67.199:57173] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "advtFm9Py-Y-9VQ02eHcpgAAAAQ"]
[Mon Apr 13 03:05:59.740227 2026] [:error] [pid 32010:tid 32021] [client 4.223.67.199:57187] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "advtFw0nq-t9pXyV1fy72AAAAMk"]
[Mon Apr 13 03:06:00.600853 2026] [:error] [pid 31605:tid 31662] [client 4.223.67.199:57157] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "advtGG9Py-Y-9VQ02eHcqAAAABM"]
[Mon Apr 13 03:06:01.276898 2026] [:error] [pid 54671:tid 54685] [client 4.223.67.199:17671] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "advtGWyJMmaONUqF0tCnmgAAAQo"]
[Mon Apr 13 03:06:01.949758 2026] [:error] [pid 54671:tid 54681] [client 4.223.67.199:29107] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "advtGWyJMmaONUqF0tCnoAAAAQY"]
[Mon Apr 13 03:06:02.735281 2026] [:error] [pid 31605:tid 31650] [client 4.223.67.199:29098] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "advtGm9Py-Y-9VQ02eHcrgAAAAc"]
[Mon Apr 13 03:06:03.428083 2026] [:error] [pid 31605:tid 31663] [client 4.223.67.199:24719] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "advtG29Py-Y-9VQ02eHcsQAAABQ"]
[Mon Apr 13 03:06:04.123094 2026] [:error] [pid 54671:tid 54690] [client 4.223.67.199:24726] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "advtHGyJMmaONUqF0tCnqQAAAQ8"]
[Mon Apr 13 03:06:04.698496 2026] [:error] [pid 54671:tid 54679] [client 4.223.67.199:57184] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "advtHGyJMmaONUqF0tCnrAAAAQQ"]
[Mon Apr 13 03:06:05.445433 2026] [:error] [pid 31606:tid 31708] [client 4.223.67.199:24735] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "advtHT9vCsshNhLmCiCMsgAAAEI"]
[Mon Apr 13 03:06:06.196397 2026] [:error] [pid 32010:tid 32030] [client 4.223.67.199:29089] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "advtHg0nq-t9pXyV1fy75AAAANI"]
[Mon Apr 13 03:06:07.330135 2026] [:error] [pid 54671:tid 54676] [client 4.223.67.199:62684] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "advtH2yJMmaONUqF0tCnsgAAAQE"]
[Mon Apr 13 03:06:07.941503 2026] [:error] [pid 31605:tid 31648] [client 4.223.67.199:62675] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "advtH29Py-Y-9VQ02eHcvAAAAAU"]
[Mon Apr 13 03:06:08.704222 2026] [:error] [pid 32010:tid 32034] [client 4.223.67.199:29118] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "advtIA0nq-t9pXyV1fy76gAAANY"]
[Mon Apr 13 03:06:09.422058 2026] [:error] [pid 54671:tid 54682] [client 4.223.67.199:62707] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "advtIWyJMmaONUqF0tCntgAAAQc"]
[Mon Apr 13 03:06:10.154990 2026] [:error] [pid 31607:tid 31738] [client 4.223.67.199:17679] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "advtImjn_I-KYTWngjJMVAAAAIE"]
[Mon Apr 13 03:06:10.843107 2026] [:error] [pid 31605:tid 31660] [client 4.223.67.199:24705] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "advtIm9Py-Y-9VQ02eHcwAAAABE"]
[Mon Apr 13 03:06:11.596765 2026] [:error] [pid 31605:tid 31643] [client 4.223.67.199:24734] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "advtI29Py-Y-9VQ02eHcxAAAAAA"]
[Mon Apr 13 03:06:12.505367 2026] [:error] [pid 31607:tid 31753] [client 4.223.67.199:29084] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "advtJGjn_I-KYTWngjJMWwAAAJA"]
[Mon Apr 13 03:06:13.419539 2026] [:error] [pid 31607:tid 31741] [client 4.223.67.199:62682] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "advtJWjn_I-KYTWngjJMXgAAAIQ"]
[Mon Apr 13 03:06:14.053428 2026] [:error] [pid 31607:tid 31751] [client 4.223.67.199:29072] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "advtJmjn_I-KYTWngjJMYQAAAI4"]
[Mon Apr 13 03:06:14.828559 2026] [:error] [pid 32010:tid 32014] [client 4.223.67.199:62715] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "advtJg0nq-t9pXyV1fy8DAAAAMI"]
[Mon Apr 13 03:06:15.673806 2026] [:error] [pid 54671:tid 54685] [client 4.223.67.199:57179] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "advtJ2yJMmaONUqF0tCnwAAAAQo"]
[Mon Apr 13 03:06:16.333056 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:29111] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "advtKGyJMmaONUqF0tCnxAAAAQ0"]
[Mon Apr 13 03:06:17.137480 2026] [:error] [pid 31607:tid 31759] [client 4.223.67.199:24708] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "advtKWjn_I-KYTWngjJMYwAAAJY"]
[Mon Apr 13 03:06:18.112853 2026] [:error] [pid 32010:tid 32036] [client 4.223.67.199:29106] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "advtKg0nq-t9pXyV1fy8FAAAANg"]
[Mon Apr 13 03:06:18.837573 2026] [:error] [pid 32010:tid 32031] [client 4.223.67.199:29108] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "advtKg0nq-t9pXyV1fy8FwAAANM"]
[Mon Apr 13 03:06:19.558387 2026] [:error] [pid 32010:tid 32030] [client 4.223.67.199:57159] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "advtKw0nq-t9pXyV1fy8GgAAANI"]
[Mon Apr 13 03:06:20.242066 2026] [:error] [pid 31605:tid 31663] [client 4.223.67.199:62703] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "advtLG9Py-Y-9VQ02eHcywAAABQ"]
[Mon Apr 13 03:06:21.226993 2026] [:error] [pid 31607:tid 31751] [client 4.223.67.199:29099] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "advtLWjn_I-KYTWngjJMagAAAI4"]
[Mon Apr 13 03:06:22.185113 2026] [:error] [pid 31605:tid 31657] [client 4.223.67.199:62708] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "advtLm9Py-Y-9VQ02eHczwAAAA4"]
[Mon Apr 13 03:06:22.845419 2026] [:error] [pid 31606:tid 31727] [client 4.223.67.199:17669] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "advtLj9vCsshNhLmCiCMwgAAAFU"]
[Mon Apr 13 03:06:23.761210 2026] [:error] [pid 54671:tid 54679] [client 4.223.67.199:24720] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "advtL2yJMmaONUqF0tCnyQAAAQQ"]
[Mon Apr 13 03:06:24.704095 2026] [:error] [pid 31607:tid 31750] [client 4.223.67.199:17697] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "advtMGjn_I-KYTWngjJMbQAAAI0"]
[Mon Apr 13 03:06:25.446795 2026] [:error] [pid 54671:tid 54675] [client 4.223.67.199:24724] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "advtMWyJMmaONUqF0tCn0QAAAQA"]
[Mon Apr 13 03:06:26.102484 2026] [:error] [pid 54671:tid 54693] [client 4.223.67.199:24713] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "advtMmyJMmaONUqF0tCn1AAAARI"]
[Mon Apr 13 03:06:27.159889 2026] [:error] [pid 31605:tid 31646] [client 4.223.67.199:62701] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "advtM29Py-Y-9VQ02eHc1AAAAAM"]
[Mon Apr 13 03:06:28.104209 2026] [:error] [pid 54671:tid 54697] [client 4.223.67.199:57211] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "advtNGyJMmaONUqF0tCn1wAAARY"]
[Mon Apr 13 03:06:28.995635 2026] [:error] [pid 31605:tid 31665] [client 4.223.67.199:29115] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "advtNG9Py-Y-9VQ02eHc2AAAABY"]
[Mon Apr 13 03:06:29.790877 2026] [:error] [pid 54671:tid 54692] [client 4.223.67.199:24727] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "advtNWyJMmaONUqF0tCn2QAAARE"]
[Mon Apr 13 03:06:30.726342 2026] [:error] [pid 32010:tid 32029] [client 4.223.67.199:16296] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "advtNg0nq-t9pXyV1fy8JAAAANE"]
[Mon Apr 13 03:06:31.785433 2026] [:error] [pid 31606:tid 31722] [client 4.223.67.199:17717] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "advtNz9vCsshNhLmCiCMwwAAAFA"]
[Mon Apr 13 03:06:32.665618 2026] [:error] [pid 54671:tid 54698] [client 4.223.67.199:62714] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "advtOGyJMmaONUqF0tCn4QAAARc"]
[Mon Apr 13 03:06:33.427114 2026] [:error] [pid 31606:tid 31710] [client 4.223.67.199:17724] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "advtOT9vCsshNhLmCiCMxwAAAEQ"]
[Mon Apr 13 03:06:34.280465 2026] [:error] [pid 32010:tid 32020] [client 4.223.67.199:16262] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "advtOg0nq-t9pXyV1fy8KgAAAMg"]
[Mon Apr 13 03:06:35.085299 2026] [:error] [pid 54671:tid 54681] [client 4.223.67.199:24757] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "advtO2yJMmaONUqF0tCn6QAAAQY"]
[Mon Apr 13 03:06:35.927866 2026] [:error] [pid 31605:tid 31658] [client 4.223.67.199:29117] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "advtO29Py-Y-9VQ02eHc4gAAAA8"]
[Mon Apr 13 03:06:36.677074 2026] [:error] [pid 54671:tid 54686] [client 4.223.67.199:8385] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zample.php"] [unique_id "advtPGyJMmaONUqF0tCn6wAAAQs"]
[Mon Apr 13 03:06:37.374834 2026] [:error] [pid 31605:tid 31650] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Mon Apr 13 03:06:37.638959 2026] [:error] [pid 31605:tid 31645] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Mon Apr 13 03:06:37.902204 2026] [:error] [pid 31605:tid 31667] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 13 03:06:38.165558 2026] [:error] [pid 31605:tid 31660] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Mon Apr 13 03:06:38.502731 2026] [:error] [pid 31605:tid 31651] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Mon Apr 13 03:06:38.764299 2026] [:error] [pid 31605:tid 31652] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Mon Apr 13 03:06:39.026737 2026] [:error] [pid 31605:tid 31648] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Mon Apr 13 03:06:39.288976 2026] [:error] [pid 31605:tid 31644] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Mon Apr 13 03:06:39.573568 2026] [:error] [pid 31605:tid 31659] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Mon Apr 13 03:06:39.835519 2026] [:error] [pid 31605:tid 31647] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Mon Apr 13 03:06:40.121204 2026] [:error] [pid 31605:tid 31662] [client 4.223.67.199:62669] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Mon Apr 13 03:06:40.419172 2026] [:error] [pid 31605:tid 31657] [client 4.223.67.199:62669] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "advtQG9Py-Y-9VQ02eHc8QAAAA4"]
[Mon Apr 13 03:06:41.647859 2026] [:error] [pid 32010:tid 32033] [client 4.223.67.199:29067] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "advtQQ0nq-t9pXyV1fy8MwAAANU"]
[Mon Apr 13 03:06:42.636077 2026] [:error] [pid 54671:tid 54689] [client 4.223.67.199:57198] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "advtQmyJMmaONUqF0tCn9QAAAQ4"]
[Mon Apr 13 03:06:44.134999 2026] [:error] [pid 54671:tid 54683] [client 4.223.67.199:17702] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "advtRGyJMmaONUqF0tCn-AAAAQg"]
[Mon Apr 13 03:06:45.270964 2026] [:error] [pid 32010:tid 32025] [client 4.223.67.199:62704] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "advtRQ0nq-t9pXyV1fy8PAAAAM0"]
[Mon Apr 13 03:06:45.976577 2026] [:error] [pid 31607:tid 31752] [client 4.223.67.199:57171] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "advtRWjn_I-KYTWngjJMdgAAAI8"]
[Mon Apr 13 03:06:46.986712 2026] [:error] [pid 31605:tid 31644] [client 4.223.67.199:8538] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "advtRm9Py-Y-9VQ02eHc9QAAAAE"]
[Mon Apr 13 03:06:47.817945 2026] [:error] [pid 31605:tid 31653] [client 4.223.67.199:57188] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "advtR29Py-Y-9VQ02eHc-QAAAAo"]
[Mon Apr 13 03:06:48.891227 2026] [:error] [pid 31607:tid 31739] [client 4.223.67.199:24740] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "advtSGjn_I-KYTWngjJMeQAAAII"]
[Mon Apr 13 03:06:49.870377 2026] [:error] [pid 32010:tid 32013] [client 4.223.67.199:29110] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "advtSQ0nq-t9pXyV1fy8PgAAAME"]
[Mon Apr 13 03:06:50.736099 2026] [:error] [pid 32010:tid 32012] [client 4.223.67.199:29116] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "advtSg0nq-t9pXyV1fy8PwAAAMA"]
[Mon Apr 13 03:06:51.509962 2026] [:error] [pid 31605:tid 31654] [client 4.223.67.199:62700] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "advtS29Py-Y-9VQ02eHc_QAAAAs"]
[Mon Apr 13 03:06:52.918597 2026] [:error] [pid 31605:tid 31660] [client 4.223.67.199:24767] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "advtTG9Py-Y-9VQ02eHdAAAAABE"]
[Mon Apr 13 03:06:53.996003 2026] [:error] [pid 32010:tid 32021] [client 4.223.67.199:24707] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "advtTQ0nq-t9pXyV1fy8QQAAAMk"]
[Mon Apr 13 03:06:55.062993 2026] [:error] [pid 31606:tid 31716] [client 4.223.67.199:57195] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "advtTz9vCsshNhLmCiCM0QAAAEo"]
[Mon Apr 13 03:06:55.878545 2026] [:error] [pid 31606:tid 31712] [client 4.223.67.199:62717] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "advtTz9vCsshNhLmCiCM0gAAAEY"]
[Mon Apr 13 03:06:56.547728 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:8432] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "advtUGyJMmaONUqF0tCoEgAAAQ0"]
[Mon Apr 13 03:06:57.359117 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:29087] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "advtUWyJMmaONUqF0tCoEwAAARA"]
[Mon Apr 13 03:06:58.416196 2026] [:error] [pid 32010:tid 32034] [client 4.223.67.199:16277] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "advtUg0nq-t9pXyV1fy8SQAAANY"]
[Mon Apr 13 03:06:59.511904 2026] [:error] [pid 32010:tid 32027] [client 4.223.67.199:57178] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "advtUw0nq-t9pXyV1fy8TAAAAM8"]
[Mon Apr 13 03:07:00.749846 2026] [:error] [pid 54671:tid 54679] [client 4.223.67.199:62670] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "advtVGyJMmaONUqF0tCoHAAAAQQ"]
[Mon Apr 13 03:07:01.937491 2026] [:error] [pid 31605:tid 31646] [client 4.223.67.199:24730] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "advtVW9Py-Y-9VQ02eHdCQAAAAM"]
[Mon Apr 13 03:07:02.912153 2026] [:error] [pid 31606:tid 31722] [client 4.223.67.199:17667] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "advtVj9vCsshNhLmCiCM2AAAAFA"]
[Mon Apr 13 03:07:03.609451 2026] [:error] [pid 31606:tid 31718] [client 4.223.67.199:62699] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "advtVz9vCsshNhLmCiCM2wAAAEw"]
[Mon Apr 13 03:07:04.224136 2026] [:error] [pid 31605:tid 31658] [client 4.223.67.199:29112] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "advtWG9Py-Y-9VQ02eHdDAAAAA8"]
[Mon Apr 13 03:07:04.992522 2026] [:error] [pid 32010:tid 32036] [client 4.223.67.199:57197] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "advtWA0nq-t9pXyV1fy8UgAAANg"]
[Mon Apr 13 03:07:05.780483 2026] [:error] [pid 31606:tid 31719] [client 4.223.67.199:62681] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "advtWT9vCsshNhLmCiCM4AAAAE0"]
[Mon Apr 13 03:07:06.534179 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:24704] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "advtWmyJMmaONUqF0tCoIgAAARA"]
[Mon Apr 13 03:07:07.192957 2026] [:error] [pid 32010:tid 32026] [client 4.223.67.199:17706] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "advtWw0nq-t9pXyV1fy8WQAAAM4"]
[Mon Apr 13 03:07:08.099818 2026] [:error] [pid 31605:tid 31664] [client 4.223.67.199:57213] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "advtXG9Py-Y-9VQ02eHdFgAAABU"]
[Mon Apr 13 03:07:08.654732 2026] [:error] [pid 54671:tid 54675] [client 4.223.67.199:24760] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "advtXGyJMmaONUqF0tCoKgAAAQA"]
[Mon Apr 13 03:07:09.233124 2026] [:error] [pid 54671:tid 54694] [client 4.223.67.199:17715] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "advtXWyJMmaONUqF0tCoLAAAARM"]
[Mon Apr 13 03:07:10.076269 2026] [:error] [pid 32010:tid 32024] [client 4.223.67.199:16274] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "advtXg0nq-t9pXyV1fy8XAAAAMw"]
[Mon Apr 13 03:07:10.929420 2026] [:error] [pid 54671:tid 54687] [client 4.223.67.199:29101] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "advtXmyJMmaONUqF0tCoNAAAAQw"]
[Mon Apr 13 03:07:11.598583 2026] [:error] [pid 54671:tid 54693] [client 4.223.67.199:29064] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "advtX2yJMmaONUqF0tCoNwAAARI"]
[Mon Apr 13 03:07:12.310622 2026] [:error] [pid 32010:tid 32034] [client 4.223.67.199:57196] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "advtYA0nq-t9pXyV1fy8XwAAANY"]
[Mon Apr 13 03:07:13.333114 2026] [:error] [pid 32010:tid 32033] [client 4.223.67.199:17665] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "advtYQ0nq-t9pXyV1fy8ZAAAANU"]
[Mon Apr 13 03:07:13.988352 2026] [:error] [pid 31605:tid 31644] [client 4.223.67.199:62688] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "advtYW9Py-Y-9VQ02eHdGgAAAAE"]
[Mon Apr 13 03:07:14.796339 2026] [:error] [pid 31607:tid 31742] [client 4.223.67.199:17727] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "advtYmjn_I-KYTWngjJMhQAAAIU"]
[Mon Apr 13 03:07:15.424076 2026] [:error] [pid 31605:tid 31657] [client 4.223.67.199:17710] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "advtY29Py-Y-9VQ02eHdHwAAAA4"]
[Mon Apr 13 03:07:16.208176 2026] [:error] [pid 31606:tid 31716] [client 4.223.67.199:57166] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advtZD9vCsshNhLmCiCM5gAAAEo"]
[Mon Apr 13 03:07:16.837218 2026] [:error] [pid 31606:tid 31711] [client 4.223.67.199:17708] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advtZD9vCsshNhLmCiCM6gAAAEU"]
[Mon Apr 13 03:07:17.433315 2026] [:error] [pid 32010:tid 32031] [client 4.223.67.199:8396] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advtZQ0nq-t9pXyV1fy8awAAANM"]
[Mon Apr 13 03:07:18.138258 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:24710] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advtZg0nq-t9pXyV1fy8bQAAAMo"]
[Mon Apr 13 03:07:18.851356 2026] [:error] [pid 54671:tid 54676] [client 4.223.67.199:57174] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "advtZmyJMmaONUqF0tCoQgAAAQE"]
[Mon Apr 13 03:07:19.483207 2026] [:error] [pid 54671:tid 54693] [client 4.223.67.199:29056] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "advtZ2yJMmaONUqF0tCoRgAAARI"]
[Mon Apr 13 03:07:20.186362 2026] [:error] [pid 54671:tid 54697] [client 4.223.67.199:8540] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "advtaGyJMmaONUqF0tCoSAAAARY"]
[Mon Apr 13 03:07:21.045710 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:24746] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "advtaWyJMmaONUqF0tCoTAAAARA"]
[Mon Apr 13 03:07:21.806630 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:16265] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "advtaWyJMmaONUqF0tCoUAAAAQ0"]
[Mon Apr 13 03:07:22.675621 2026] [:error] [pid 31605:tid 31659] [client 4.223.67.199:62718] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "advtam9Py-Y-9VQ02eHdJwAAABA"]
[Mon Apr 13 03:07:23.433842 2026] [:error] [pid 31605:tid 31662] [client 4.223.67.199:57167] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "advta29Py-Y-9VQ02eHdKAAAABM"]
[Mon Apr 13 03:07:24.230605 2026] [:error] [pid 54671:tid 54698] [client 4.223.67.199:29105] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless4.php"] [unique_id "advtbGyJMmaONUqF0tCoVgAAARc"]
[Mon Apr 13 03:07:24.909351 2026] [:error] [pid 31607:tid 31755] [client 4.223.67.199:24711] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "advtbGjn_I-KYTWngjJMjgAAAJI"]
[Mon Apr 13 03:07:25.661176 2026] [:error] [pid 31607:tid 31756] [client 4.223.67.199:8528] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "advtbWjn_I-KYTWngjJMkgAAAJM"]
[Mon Apr 13 03:07:26.440045 2026] [:error] [pid 32010:tid 32019] [client 4.223.67.199:57183] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "advtbg0nq-t9pXyV1fy8dgAAAMc"]
[Mon Apr 13 03:07:27.362429 2026] [:error] [pid 32010:tid 32033] [client 4.223.67.199:24761] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "advtbw0nq-t9pXyV1fy8eAAAANU"]
[Mon Apr 13 03:07:27.953997 2026] [:error] [pid 31605:tid 31646] [client 4.223.67.199:29113] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "advtb29Py-Y-9VQ02eHdMAAAAAM"]
[Mon Apr 13 03:07:29.449372 2026] [:error] [pid 32010:tid 32015] [client 4.223.67.199:24731] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "advtcQ0nq-t9pXyV1fy8gAAAAMM"]
[Mon Apr 13 03:07:31.204655 2026] [:error] [pid 31605:tid 31661] [client 4.223.67.199:24736] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "advtc29Py-Y-9VQ02eHdNgAAABI"]
[Mon Apr 13 03:07:32.118488 2026] [:error] [pid 32010:tid 32018] [client 4.223.67.199:16314] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "advtdA0nq-t9pXyV1fy8iAAAAMY"]
[Mon Apr 13 03:07:33.645379 2026] [:error] [pid 31605:tid 31666] [client 4.223.67.199:8397] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "advtdW9Py-Y-9VQ02eHdOwAAABc"]
[Mon Apr 13 03:07:35.435524 2026] [:error] [pid 31605:tid 31652] [client 4.223.67.199:24744] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "advtd29Py-Y-9VQ02eHdPgAAAAk"]
[Mon Apr 13 03:07:37.032646 2026] [:error] [pid 54671:tid 54676] [client 4.223.67.199:17689] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "advteWyJMmaONUqF0tCodQAAAQE"]
[Mon Apr 13 03:07:38.054093 2026] [:error] [pid 54671:tid 54678] [client 4.223.67.199:24738] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "advtemyJMmaONUqF0tCoeAAAAQM"]
[Mon Apr 13 03:07:39.054781 2026] [:error] [pid 32010:tid 32026] [client 4.223.67.199:24737] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "advtew0nq-t9pXyV1fy8kwAAAM4"]
[Mon Apr 13 03:07:40.323811 2026] [:error] [pid 54671:tid 54699] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Mon Apr 13 03:07:40.633866 2026] [:error] [pid 54671:tid 54677] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Apr 13 03:07:41.903657 2026] [:error] [pid 54671:tid 54683] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Mon Apr 13 03:07:42.246911 2026] [:error] [pid 54671:tid 54687] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Mon Apr 13 03:07:42.512105 2026] [:error] [pid 54671:tid 54677] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Mon Apr 13 03:07:42.775246 2026] [:error] [pid 54671:tid 54698] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Mon Apr 13 03:07:43.594298 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Apr 13 03:07:43.857720 2026] [:error] [pid 54671:tid 54682] [client 4.223.67.199:24751] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon Apr 13 03:07:44.143960 2026] [:error] [pid 54671:tid 54675] [client 4.223.67.199:24751] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "advtgGyJMmaONUqF0tCopAAAAQA"]
[Mon Apr 13 03:07:44.778050 2026] [:error] [pid 31607:tid 31758] [client 4.223.67.199:24756] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "advtgGjn_I-KYTWngjJMmwAAAJU"]
[Mon Apr 13 03:07:45.346758 2026] [:error] [pid 54671:tid 54696] [client 4.223.67.199:29071] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "advtgWyJMmaONUqF0tCoqwAAARU"]
[Mon Apr 13 03:07:45.943668 2026] [:error] [pid 31607:tid 31737] [client 4.223.67.199:17713] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "advtgWjn_I-KYTWngjJMnAAAAIA"]
[Mon Apr 13 03:07:46.601553 2026] [:error] [pid 31607:tid 31739] [client 4.223.67.199:17723] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "advtgmjn_I-KYTWngjJMnwAAAII"]
[Mon Apr 13 03:07:47.281678 2026] [:error] [pid 31606:tid 31709] [client 4.223.67.199:16267] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "advtgz9vCsshNhLmCiCM8gAAAEM"]
[Mon Apr 13 03:07:48.025721 2026] [:error] [pid 31605:tid 31643] [client 4.223.67.199:57214] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "advthG9Py-Y-9VQ02eHdRgAAAAA"]
[Mon Apr 13 03:07:48.666694 2026] [:error] [pid 31606:tid 31711] [client 4.223.67.199:57194] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "advthD9vCsshNhLmCiCM8wAAAEU"]
[Mon Apr 13 03:07:49.303762 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:62674] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "advthQ0nq-t9pXyV1fy8qQAAAMo"]
[Mon Apr 13 03:07:49.938768 2026] [:error] [pid 31607:tid 31752] [client 4.223.67.199:62694] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "advthWjn_I-KYTWngjJMowAAAI8"]
[Mon Apr 13 03:07:50.609612 2026] [:error] [pid 31605:tid 31656] [client 4.223.67.199:8518] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "advthm9Py-Y-9VQ02eHdSwAAAA0"]
[Mon Apr 13 03:07:51.233578 2026] [:error] [pid 31605:tid 31650] [client 4.223.67.199:8428] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "advth29Py-Y-9VQ02eHdTAAAAAc"]
[Mon Apr 13 03:07:51.869016 2026] [:error] [pid 31607:tid 31742] [client 4.223.67.199:8560] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "advth2jn_I-KYTWngjJMqAAAAIU"]
[Mon Apr 13 03:07:52.609946 2026] [:error] [pid 31606:tid 31715] [client 4.223.67.199:24748] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "advtiD9vCsshNhLmCiCM_AAAAEk"]
[Mon Apr 13 03:07:53.240927 2026] [:error] [pid 31606:tid 31713] [client 4.223.67.199:57194] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "advtiT9vCsshNhLmCiCM_gAAAEc"]
[Mon Apr 13 03:07:53.829162 2026] [:error] [pid 54671:tid 54681] [client 4.223.67.199:8516] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "advtiWyJMmaONUqF0tCorgAAAQY"]
[Mon Apr 13 03:07:54.540977 2026] [:error] [pid 32010:tid 32023] [client 4.223.67.199:17676] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "advtig0nq-t9pXyV1fy8sgAAAMs"]
[Mon Apr 13 03:07:55.287162 2026] [:error] [pid 32010:tid 32029] [client 4.223.67.199:24722] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "advtiw0nq-t9pXyV1fy8tAAAANE"]
[Mon Apr 13 03:07:56.009667 2026] [:error] [pid 31606:tid 31708] [client 4.223.67.199:8433] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "advtjD9vCsshNhLmCiCNAAAAAEI"]
[Mon Apr 13 03:07:56.666655 2026] [:error] [pid 31606:tid 31709] [client 4.223.67.199:17691] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "advtjD9vCsshNhLmCiCNAgAAAEM"]
[Mon Apr 13 03:07:57.309130 2026] [:error] [pid 32010:tid 32016] [client 4.223.67.199:57155] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advtjQ0nq-t9pXyV1fy8uAAAAMQ"]
[Mon Apr 13 03:07:57.928753 2026] [:error] [pid 31605:tid 31648] [client 4.223.67.199:29088] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advtjW9Py-Y-9VQ02eHdUgAAAAU"]
[Mon Apr 13 03:07:58.678715 2026] [:error] [pid 32010:tid 32013] [client 4.223.67.199:16279] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advtjg0nq-t9pXyV1fy8uwAAAME"]
[Mon Apr 13 03:07:59.305466 2026] [:error] [pid 31607:tid 31759] [client 4.223.67.199:16294] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advtj2jn_I-KYTWngjJMuAAAAJY"]
[Mon Apr 13 03:07:59.861009 2026] [:error] [pid 31605:tid 31655] [client 4.223.67.199:29093] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "advtj29Py-Y-9VQ02eHdVgAAAAw"]
[Mon Apr 13 03:08:00.612846 2026] [:error] [pid 31607:tid 31753] [client 4.223.67.199:16279] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "advtkGjn_I-KYTWngjJMvAAAAJA"]
[Mon Apr 13 03:08:01.228785 2026] [:error] [pid 32010:tid 32034] [client 4.223.67.199:29066] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "advtkQ0nq-t9pXyV1fy8wAAAANY"]
[Mon Apr 13 03:08:01.838223 2026] [:error] [pid 32010:tid 32014] [client 4.223.67.199:8437] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "advtkQ0nq-t9pXyV1fy8wwAAAMI"]
[Mon Apr 13 03:08:02.711612 2026] [:error] [pid 32010:tid 32025] [client 4.223.67.199:16312] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "advtkg0nq-t9pXyV1fy8xwAAAM0"]
[Mon Apr 13 03:08:03.585483 2026] [:error] [pid 31606:tid 31716] [client 4.223.67.199:16293] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "advtkz9vCsshNhLmCiCNCwAAAEo"]
[Mon Apr 13 03:08:04.551343 2026] [:error] [pid 32010:tid 32026] [client 4.223.67.199:62691] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "advtlA0nq-t9pXyV1fy8zwAAAM4"]
[Mon Apr 13 03:08:05.442823 2026] [:error] [pid 31607:tid 31739] [client 4.223.67.199:57161] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "advtlWjn_I-KYTWngjJMxgAAAII"]
[Mon Apr 13 03:08:06.049210 2026] [:error] [pid 31607:tid 31745] [client 4.223.67.199:8417] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "advtlmjn_I-KYTWngjJMygAAAIg"]
[Mon Apr 13 03:08:06.636431 2026] [:error] [pid 54671:tid 54696] [client 4.223.67.199:29114] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "advtlmyJMmaONUqF0tCougAAARU"]
[Mon Apr 13 03:08:07.215164 2026] [:error] [pid 32010:tid 32025] [client 4.223.67.199:8412] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "advtlw0nq-t9pXyV1fy80gAAAM0"]
[Mon Apr 13 03:08:07.782104 2026] [:error] [pid 32010:tid 32036] [client 4.223.67.199:17709] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "advtlw0nq-t9pXyV1fy81AAAANg"]
[Mon Apr 13 03:08:08.367632 2026] [:error] [pid 54671:tid 54689] [client 4.223.67.199:8445] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "advtmGyJMmaONUqF0tCowQAAAQ4"]
[Mon Apr 13 03:08:09.148624 2026] [:error] [pid 31607:tid 31759] [client 4.223.67.199:29068] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "advtmWjn_I-KYTWngjJMzAAAAJY"]
[Mon Apr 13 03:08:09.905493 2026] [:error] [pid 31605:tid 31655] [client 4.223.67.199:62713] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "advtmW9Py-Y-9VQ02eHdYAAAAAw"]
[Mon Apr 13 03:08:10.641199 2026] [:error] [pid 31605:tid 31664] [client 4.223.67.199:16285] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "advtmm9Py-Y-9VQ02eHdZAAAABU"]
[Mon Apr 13 03:08:11.448119 2026] [:error] [pid 31607:tid 31749] [client 4.223.67.199:16304] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "advtm2jn_I-KYTWngjJM0gAAAIw"]
[Mon Apr 13 03:08:11.992308 2026] [:error] [pid 31605:tid 31645] [client 4.223.67.199:24759] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "advtm29Py-Y-9VQ02eHdawAAAAI"]
[Mon Apr 13 03:08:12.791977 2026] [:error] [pid 54671:tid 54695] [client 4.223.67.199:56835] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "advtnGyJMmaONUqF0tCoyAAAARQ"]
[Mon Apr 13 03:08:13.371029 2026] [:error] [pid 54671:tid 54686] [client 4.223.67.199:62665] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "advtnWyJMmaONUqF0tCozgAAAQs"]
[Mon Apr 13 03:08:13.928062 2026] [:error] [pid 54671:tid 54699] [client 4.223.67.199:62678] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "advtnWyJMmaONUqF0tCo1gAAARg"]
[Mon Apr 13 03:08:14.520406 2026] [:error] [pid 32010:tid 32025] [client 4.223.67.199:24739] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "advtng0nq-t9pXyV1fy82QAAAM0"]
[Mon Apr 13 03:08:15.147473 2026] [:error] [pid 31607:tid 31738] [client 4.223.67.199:16286] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "advtn2jn_I-KYTWngjJM1QAAAIE"]
[Mon Apr 13 03:08:15.810910 2026] [:error] [pid 54671:tid 54676] [client 4.223.67.199:57164] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "advtn2yJMmaONUqF0tCo4gAAAQE"]
[Mon Apr 13 03:08:16.361608 2026] [:error] [pid 54671:tid 54687] [client 4.223.67.199:8532] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "advtoGyJMmaONUqF0tCo5wAAAQw"]
[Mon Apr 13 03:08:16.930055 2026] [:error] [pid 31605:tid 31656] [client 4.223.67.199:16287] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "advtoG9Py-Y-9VQ02eHdbgAAAA0"]
[Mon Apr 13 03:08:17.647175 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:16301] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "advtoWyJMmaONUqF0tCo8gAAAQ0"]
[Mon Apr 13 03:08:18.346010 2026] [:error] [pid 31606:tid 31721] [client 4.223.67.199:17718] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "advtoj9vCsshNhLmCiCNEQAAAE8"]
[Mon Apr 13 03:08:19.006577 2026] [:error] [pid 31606:tid 31720] [client 4.223.67.199:8937] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "advtoz9vCsshNhLmCiCNEgAAAE4"]
[Mon Apr 13 03:08:19.636878 2026] [:error] [pid 31606:tid 31710] [client 4.223.67.199:17682] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "advtoz9vCsshNhLmCiCNEwAAAEQ"]
[Mon Apr 13 03:08:20.324313 2026] [:error] [pid 31607:tid 31758] [client 4.223.67.199:17721] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "advtpGjn_I-KYTWngjJM3gAAAJU"]
[Mon Apr 13 03:08:20.892210 2026] [:error] [pid 31607:tid 31737] [client 4.223.67.199:17701] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "advtpGjn_I-KYTWngjJM4gAAAIA"]
[Mon Apr 13 03:08:21.455901 2026] [:error] [pid 31607:tid 31746] [client 4.223.67.199:16282] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "advtpWjn_I-KYTWngjJM5AAAAIk"]
[Mon Apr 13 03:08:22.006088 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:16288] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "advtpmyJMmaONUqF0tCo-QAAAQ0"]
[Mon Apr 13 03:08:22.594562 2026] [:error] [pid 32010:tid 32034] [client 4.223.67.199:17692] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "advtpg0nq-t9pXyV1fy83wAAANY"]
[Mon Apr 13 03:08:23.240802 2026] [:error] [pid 31607:tid 31757] [client 4.223.67.199:24758] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "advtp2jn_I-KYTWngjJM5wAAAJQ"]
[Mon Apr 13 03:08:24.055763 2026] [:error] [pid 31607:tid 31737] [client 4.223.67.199:16307] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "advtqGjn_I-KYTWngjJM7gAAAIA"]
[Mon Apr 13 03:08:24.730785 2026] [:error] [pid 32010:tid 32015] [client 4.223.67.199:29069] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "advtqA0nq-t9pXyV1fy84gAAAMM"]
[Mon Apr 13 03:08:25.335335 2026] [:error] [pid 31606:tid 31731] [client 4.223.67.199:16309] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "advtqT9vCsshNhLmCiCNGwAAAFg"]
[Mon Apr 13 03:08:26.038136 2026] [:error] [pid 31606:tid 31728] [client 4.223.67.199:57201] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "advtqj9vCsshNhLmCiCNHAAAAFY"]
[Mon Apr 13 03:08:26.708596 2026] [:error] [pid 32010:tid 32018] [client 4.223.67.199:24763] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "advtqg0nq-t9pXyV1fy86AAAAMY"]
[Mon Apr 13 03:08:27.265277 2026] [:error] [pid 31607:tid 31758] [client 4.223.67.199:62659] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "advtq2jn_I-KYTWngjJM9AAAAJU"]
[Mon Apr 13 03:08:27.836042 2026] [:error] [pid 31605:tid 31654] [client 4.223.67.199:17707] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "advtq29Py-Y-9VQ02eHddwAAAAs"]
[Mon Apr 13 03:08:28.462662 2026] [:error] [pid 31605:tid 31661] [client 4.223.67.199:8430] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "advtrG9Py-Y-9VQ02eHdeQAAABI"]
[Mon Apr 13 03:08:29.060120 2026] [:error] [pid 31605:tid 31648] [client 4.223.67.199:29070] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "advtrW9Py-Y-9VQ02eHdegAAAAU"]
[Mon Apr 13 03:08:29.639097 2026] [:error] [pid 31606:tid 31711] [client 4.223.67.199:56862] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "advtrT9vCsshNhLmCiCNJAAAAEU"]
[Mon Apr 13 03:08:30.234106 2026] [:error] [pid 31606:tid 31714] [client 4.223.67.199:29057] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "advtrj9vCsshNhLmCiCNJwAAAEg"]
[Mon Apr 13 03:08:30.813990 2026] [:error] [pid 31607:tid 31746] [client 4.223.67.199:62685] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "advtrmjn_I-KYTWngjJM-AAAAIk"]
[Mon Apr 13 03:08:31.410974 2026] [:error] [pid 31607:tid 31741] [client 4.223.67.199:17684] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "advtr2jn_I-KYTWngjJM-gAAAIQ"]
[Mon Apr 13 03:08:31.957355 2026] [:error] [pid 31606:tid 31713] [client 4.223.67.199:16278] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "advtrz9vCsshNhLmCiCNLAAAAEc"]
[Mon Apr 13 03:08:32.502632 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:57177] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "advtsGyJMmaONUqF0tCo_AAAAQ0"]
[Mon Apr 13 03:08:33.027252 2026] [:error] [pid 31606:tid 31727] [client 4.223.67.199:8384] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "advtsT9vCsshNhLmCiCNLwAAAFU"]
[Mon Apr 13 03:08:33.767613 2026] [:error] [pid 31607:tid 31748] [client 4.223.67.199:62657] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advtsWjn_I-KYTWngjJNAQAAAIs"]
[Mon Apr 13 03:08:34.432035 2026] [:error] [pid 31606:tid 31723] [client 4.223.67.199:57160] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advtsj9vCsshNhLmCiCNMgAAAFE"]
[Mon Apr 13 03:08:34.966913 2026] [:error] [pid 32010:tid 32018] [client 4.223.67.199:17687] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advtsg0nq-t9pXyV1fy87QAAAMY"]
[Mon Apr 13 03:08:35.929026 2026] [:error] [pid 31605:tid 31662] [client 4.223.67.199:62676] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "advts29Py-Y-9VQ02eHdgAAAABM"]
[Mon Apr 13 03:08:36.680981 2026] [:error] [pid 54671:tid 54680] [client 4.223.67.199:24745] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "advttGyJMmaONUqF0tCpAwAAAQU"]
[Mon Apr 13 03:08:37.513033 2026] [:error] [pid 31607:tid 31757] [client 4.223.67.199:29075] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "advttWjn_I-KYTWngjJNBwAAAJQ"]
[Mon Apr 13 03:08:38.288986 2026] [:error] [pid 54671:tid 54698] [client 4.223.67.199:17722] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "advttmyJMmaONUqF0tCpBQAAARc"]
[Mon Apr 13 03:08:39.076127 2026] [:error] [pid 31605:tid 31656] [client 4.223.67.199:24733] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "advtt29Py-Y-9VQ02eHdhAAAAA0"]
[Mon Apr 13 03:08:39.798959 2026] [:error] [pid 54671:tid 54679] [client 4.223.67.199:62719] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "advtt2yJMmaONUqF0tCpCQAAAQQ"]
[Mon Apr 13 03:08:40.464991 2026] [:error] [pid 54671:tid 54677] [client 4.223.67.199:8523] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "advtuGyJMmaONUqF0tCpDQAAAQI"]
[Mon Apr 13 03:08:41.213465 2026] [:error] [pid 31606:tid 31717] [client 4.223.67.199:8425] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "advtuT9vCsshNhLmCiCNNQAAAEs"]
[Mon Apr 13 03:08:42.018488 2026] [:error] [pid 31606:tid 31723] [client 4.223.67.199:62684] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "advtuj9vCsshNhLmCiCNNwAAAFE"]
[Mon Apr 13 03:08:42.681178 2026] [:error] [pid 31605:tid 31648] [client 4.223.67.199:16316] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "advtum9Py-Y-9VQ02eHdjAAAAAU"]
[Mon Apr 13 03:08:43.694181 2026] [:error] [pid 32010:tid 32029] [client 4.223.67.199:16313] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Mon Apr 13 03:08:44.216060 2026] [:error] [pid 32010:tid 32014] [client 4.223.67.199:16313] [client 4.223.67.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "advtvA0nq-t9pXyV1fy9AwAAAMI"]
[Mon Apr 13 03:08:44.978728 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:8414] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Mon Apr 13 03:08:45.764402 2026] [:error] [pid 54671:tid 54683] [client 4.223.67.199:8414] File does not exist: /usr/local/apache/htdocs/suspended-page/prv8.php
[Mon Apr 13 03:08:46.101284 2026] [:error] [pid 54671:tid 54695] [client 4.223.67.199:8414] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Apr 13 03:08:46.391293 2026] [:error] [pid 54671:tid 54699] [client 4.223.67.199:8414] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Mon Apr 13 03:08:46.680579 2026] [:error] [pid 54671:tid 54685] [client 4.223.67.199:8414] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Mon Apr 13 03:08:46.948951 2026] [:error] [pid 54671:tid 54693] [client 4.223.67.199:8414] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Mon Apr 13 03:08:47.210746 2026] [:error] [pid 54671:tid 54680] [client 4.223.67.199:8414] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Mon Apr 13 03:08:47.468785 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:8414] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "advtv2yJMmaONUqF0tCpIgAAAQ0"]
[Mon Apr 13 03:08:48.585294 2026] [:error] [pid 31605:tid 31653] [client 4.223.67.199:17666] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "advtwG9Py-Y-9VQ02eHdmAAAAAo"]
[Mon Apr 13 03:08:49.801323 2026] [:error] [pid 31606:tid 31724] [client 4.223.67.199:16318] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "advtwT9vCsshNhLmCiCNPAAAAFI"]
[Mon Apr 13 03:08:51.820540 2026] [:error] [pid 31606:tid 31723] [client 4.223.67.199:24765] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "advtwz9vCsshNhLmCiCNQQAAAFE"]
[Mon Apr 13 03:08:52.809224 2026] [:error] [pid 31606:tid 31731] [client 4.223.67.199:62680] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "advtxD9vCsshNhLmCiCNSAAAAFg"]
[Mon Apr 13 03:08:53.591320 2026] [:error] [pid 31605:tid 31659] [client 4.223.67.199:62686] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "advtxW9Py-Y-9VQ02eHdnAAAABA"]
[Mon Apr 13 03:08:54.391541 2026] [:error] [pid 54671:tid 54685] [client 4.223.67.199:8552] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "advtxmyJMmaONUqF0tCpKAAAAQo"]
[Mon Apr 13 03:08:55.113552 2026] [:error] [pid 32010:tid 32025] [client 4.223.67.199:24728] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "advtxw0nq-t9pXyV1fy9EgAAAM0"]
[Mon Apr 13 03:08:55.785553 2026] [:error] [pid 31607:tid 31740] [client 4.223.67.199:8441] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "advtx2jn_I-KYTWngjJNEQAAAIM"]
[Mon Apr 13 03:08:56.463278 2026] [:error] [pid 54671:tid 54675] [client 4.223.67.199:17675] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "advtyGyJMmaONUqF0tCpLQAAAQA"]
[Mon Apr 13 03:08:57.073536 2026] [:error] [pid 54671:tid 54694] [client 4.223.67.199:16291] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "advtyWyJMmaONUqF0tCpLgAAARM"]
[Mon Apr 13 03:08:57.671065 2026] [:error] [pid 54671:tid 54676] [client 4.223.67.199:17685] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "advtyWyJMmaONUqF0tCpNAAAAQE"]
[Mon Apr 13 03:08:58.307172 2026] [:error] [pid 32010:tid 32027] [client 4.223.67.199:29062] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "advtyg0nq-t9pXyV1fy9GAAAAM8"]
[Mon Apr 13 03:08:59.044966 2026] [:error] [pid 31605:tid 31648] [client 4.223.67.199:8567] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "advty29Py-Y-9VQ02eHdpwAAAAU"]
[Mon Apr 13 03:08:59.942361 2026] [:error] [pid 32010:tid 32026] [client 4.223.67.199:57191] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "advtyw0nq-t9pXyV1fy9GQAAAM4"]
[Mon Apr 13 03:09:00.751041 2026] [:error] [pid 32010:tid 32012] [client 4.223.67.199:16308] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "advtzA0nq-t9pXyV1fy9HwAAAMA"]
[Mon Apr 13 03:09:01.338126 2026] [:error] [pid 54671:tid 54675] [client 4.223.67.199:29091] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "advtzWyJMmaONUqF0tCpPQAAAQA"]
[Mon Apr 13 03:09:02.067417 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:29063] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "advtzmyJMmaONUqF0tCpPgAAARA"]
[Mon Apr 13 03:09:02.696404 2026] [:error] [pid 31606:tid 31716] [client 4.223.67.199:16305] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "advtzj9vCsshNhLmCiCNSwAAAEo"]
[Mon Apr 13 03:09:03.434914 2026] [:error] [pid 31607:tid 31749] [client 4.223.67.199:8406] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "advtz2jn_I-KYTWngjJNIgAAAIw"]
[Mon Apr 13 03:09:04.017736 2026] [:error] [pid 54671:tid 54677] [client 4.223.67.199:24729] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "advt0GyJMmaONUqF0tCpQQAAAQI"]
[Mon Apr 13 03:09:04.589776 2026] [:error] [pid 32010:tid 32032] [client 4.223.67.199:17700] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "advt0A0nq-t9pXyV1fy9JAAAANQ"]
[Mon Apr 13 03:09:05.197678 2026] [:error] [pid 31606:tid 31721] [client 4.223.67.199:8390] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "advt0T9vCsshNhLmCiCNTwAAAE8"]
[Mon Apr 13 03:09:05.900507 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:17672] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "advt0WyJMmaONUqF0tCpRQAAAQ0"]
[Mon Apr 13 03:09:06.526632 2026] [:error] [pid 31607:tid 31750] [client 4.223.67.199:8402] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "advt0mjn_I-KYTWngjJNKQAAAI0"]
[Mon Apr 13 03:09:07.138911 2026] [:error] [pid 54671:tid 54676] [client 4.223.67.199:57193] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "advt02yJMmaONUqF0tCpRgAAAQE"]
[Mon Apr 13 03:09:07.704536 2026] [:error] [pid 54671:tid 54679] [client 4.223.67.199:29100] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "advt02yJMmaONUqF0tCpSAAAAQQ"]
[Mon Apr 13 03:09:08.263672 2026] [:error] [pid 54671:tid 54680] [client 4.223.67.199:57158] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "advt1GyJMmaONUqF0tCpSwAAAQU"]
[Mon Apr 13 03:09:08.884670 2026] [:error] [pid 31606:tid 31726] [client 4.223.67.199:57207] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "advt1D9vCsshNhLmCiCNVAAAAFQ"]
[Mon Apr 13 03:09:09.559267 2026] [:error] [pid 32010:tid 32020] [client 4.223.67.199:29102] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "advt1Q0nq-t9pXyV1fy9LQAAAMg"]
[Mon Apr 13 03:09:10.188094 2026] [:error] [pid 32010:tid 32015] [client 4.223.67.199:24712] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "advt1g0nq-t9pXyV1fy9MQAAAMM"]
[Mon Apr 13 03:09:10.752306 2026] [:error] [pid 54671:tid 54694] [client 4.223.67.199:8422] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "advt1myJMmaONUqF0tCpUgAAARM"]
[Mon Apr 13 03:09:11.348341 2026] [:error] [pid 54671:tid 54696] [client 4.223.67.199:16266] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "advt12yJMmaONUqF0tCpVQAAARU"]
[Mon Apr 13 03:09:11.930655 2026] [:error] [pid 32010:tid 32022] [client 4.223.67.199:57203] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "advt1w0nq-t9pXyV1fy9NAAAAMo"]
[Mon Apr 13 03:09:12.524545 2026] [:error] [pid 54671:tid 54684] [client 4.223.67.199:62695] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "advt2GyJMmaONUqF0tCpWgAAAQk"]
[Mon Apr 13 03:09:13.109516 2026] [:error] [pid 32010:tid 32021] [client 4.223.67.199:62698] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "advt2Q0nq-t9pXyV1fy9NwAAAMk"]
[Mon Apr 13 03:09:13.804205 2026] [:error] [pid 32010:tid 32015] [client 4.223.67.199:16261] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "advt2Q0nq-t9pXyV1fy9OgAAAMM"]
[Mon Apr 13 03:09:14.622869 2026] [:error] [pid 54671:tid 54696] [client 4.223.67.199:62716] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "advt2myJMmaONUqF0tCpYgAAARU"]
[Mon Apr 13 03:09:15.779349 2026] [:error] [pid 31607:tid 31743] [client 4.223.67.199:16319] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "advt22jn_I-KYTWngjJNMQAAAIY"]
[Mon Apr 13 03:09:16.642730 2026] [:error] [pid 54671:tid 54693] [client 4.223.67.199:24750] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "advt3GyJMmaONUqF0tCpaAAAARI"]
[Mon Apr 13 03:09:17.353366 2026] [:error] [pid 54671:tid 54691] [client 4.223.67.199:57202] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advt3WyJMmaONUqF0tCpagAAARA"]
[Mon Apr 13 03:09:18.058903 2026] [:error] [pid 54671:tid 54698] [client 4.223.67.199:17688] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advt3myJMmaONUqF0tCpbgAAARc"]
[Mon Apr 13 03:09:18.790314 2026] [:error] [pid 31606:tid 31713] [client 4.223.67.199:57156] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advt3j9vCsshNhLmCiCNWQAAAEc"]
[Mon Apr 13 03:09:19.377661 2026] [:error] [pid 31605:tid 31649] [client 4.223.67.199:29085] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "advt329Py-Y-9VQ02eHdsAAAAAY"]
[Mon Apr 13 03:09:20.240860 2026] [:error] [pid 31605:tid 31658] [client 4.223.67.199:62692] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "advt4G9Py-Y-9VQ02eHdtQAAAA8"]
[Mon Apr 13 03:09:20.909987 2026] [:error] [pid 32010:tid 32017] [client 4.223.67.199:17686] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "advt4A0nq-t9pXyV1fy9TAAAAMU"]
[Mon Apr 13 03:09:21.607454 2026] [:error] [pid 32010:tid 32024] [client 4.223.67.199:8442] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "advt4Q0nq-t9pXyV1fy9TgAAAMw"]
[Mon Apr 13 03:09:22.383452 2026] [:error] [pid 31607:tid 31738] [client 4.223.67.199:24714] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "advt4mjn_I-KYTWngjJNNwAAAIE"]
[Mon Apr 13 03:09:23.049947 2026] [:error] [pid 54671:tid 54682] [client 4.223.67.199:24706] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "advt42yJMmaONUqF0tCpdgAAAQc"]
[Mon Apr 13 03:09:23.601762 2026] [:error] [pid 32010:tid 32014] [client 4.223.67.199:16273] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "advt4w0nq-t9pXyV1fy9TwAAAMI"]
[Mon Apr 13 03:09:24.227991 2026] [:error] [pid 31606:tid 31710] [client 4.223.67.199:57199] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "advt5D9vCsshNhLmCiCNYAAAAEQ"]
[Mon Apr 13 03:09:24.853116 2026] [:error] [pid 31605:tid 31665] [client 4.223.67.199:57152] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "advt5G9Py-Y-9VQ02eHdwQAAABY"]
[Mon Apr 13 03:09:25.549133 2026] [:error] [pid 31605:tid 31652] [client 4.223.67.199:8403] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "advt5W9Py-Y-9VQ02eHdwwAAAAk"]
[Mon Apr 13 03:09:26.196868 2026] [:error] [pid 31605:tid 31661] [client 4.223.67.199:62697] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "advt5m9Py-Y-9VQ02eHdxwAAABI"]
[Mon Apr 13 03:09:26.809627 2026] [:error] [pid 54671:tid 54689] [client 4.223.67.199:29094] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "advt5myJMmaONUqF0tCpfwAAAQ4"]
[Mon Apr 13 03:09:27.529586 2026] [:error] [pid 54671:tid 54680] [client 4.223.67.199:29119] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "advt52yJMmaONUqF0tCphQAAAQU"]
[Mon Apr 13 03:09:28.128160 2026] [:error] [pid 54671:tid 54688] [client 4.223.67.199:57153] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "advt6GyJMmaONUqF0tCphgAAAQ0"]
[Mon Apr 13 03:09:28.693811 2026] [:error] [pid 31606:tid 31716] [client 4.223.67.199:16271] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "advt6D9vCsshNhLmCiCNZQAAAEo"]
[Mon Apr 13 03:09:29.275544 2026] [:error] [pid 54671:tid 54697] [client 4.223.67.199:29104] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "advt6WyJMmaONUqF0tCpjgAAARY"]
[Mon Apr 13 03:09:29.808206 2026] [:error] [pid 32010:tid 32014] [client 4.223.67.199:8565] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "advt6Q0nq-t9pXyV1fy9XAAAAMI"]
[Mon Apr 13 03:09:30.387290 2026] [:error] [pid 31607:tid 31749] [client 4.223.67.199:29073] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "advt6mjn_I-KYTWngjJNPwAAAIw"]
[Mon Apr 13 03:09:30.948932 2026] [:error] [pid 31606:tid 31728] [client 4.223.67.199:29074] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "advt6j9vCsshNhLmCiCNZwAAAFY"]
[Mon Apr 13 03:09:31.637659 2026] [:error] [pid 54671:tid 54695] [client 4.223.67.199:57210] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "advt62yJMmaONUqF0tCpmgAAARQ"]
[Mon Apr 13 03:09:32.258816 2026] [:error] [pid 54671:tid 54675] [client 4.223.67.199:57182] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class20.php"] [unique_id "advt7GyJMmaONUqF0tCpnAAAAQA"]
[Mon Apr 13 03:09:32.912140 2026] [:error] [pid 54671:tid 54699] [client 4.223.67.199:62712] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "advt7GyJMmaONUqF0tCpoAAAARg"]
[Mon Apr 13 03:09:33.665937 2026] [:error] [pid 31605:tid 31653] [client 4.223.67.199:16292] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "advt7W9Py-Y-9VQ02eHdzQAAAAo"]
[Mon Apr 13 03:09:34.234040 2026] [:error] [pid 31605:tid 31645] [client 4.223.67.199:17677] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "advt7m9Py-Y-9VQ02eHdzgAAAAI"]
[Mon Apr 13 03:09:34.905876 2026] [:error] [pid 54671:tid 54678] [client 4.223.67.199:57212] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "advt7myJMmaONUqF0tCpqgAAAQM"]
[Mon Apr 13 03:09:35.609202 2026] [:error] [pid 31606:tid 31731] [client 4.223.67.199:24715] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "advt7z9vCsshNhLmCiCNcQAAAFg"]
[Mon Apr 13 03:09:36.246547 2026] [:error] [pid 31606:tid 31728] [client 4.223.67.199:8435] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "advt8D9vCsshNhLmCiCNdQAAAFY"]
[Mon Apr 13 03:09:36.882331 2026] [:error] [pid 31607:tid 31752] [client 4.223.67.199:8423] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "advt8Gjn_I-KYTWngjJNRgAAAI8"]
[Mon Apr 13 03:09:37.473512 2026] [:error] [pid 31606:tid 31726] [client 4.223.67.199:8573] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "advt8T9vCsshNhLmCiCNeAAAAFQ"]
[Mon Apr 13 03:09:38.031441 2026] [:error] [pid 31606:tid 31708] [client 4.223.67.199:56880] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "advt8j9vCsshNhLmCiCNegAAAEI"]
[Mon Apr 13 03:09:38.583081 2026] [:error] [pid 54671:tid 54686] [client 4.223.67.199:29082] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "advt8myJMmaONUqF0tCprAAAAQs"]
[Mon Apr 13 03:09:39.230333 2026] [:error] [pid 54671:tid 54677] [client 4.223.67.199:24766] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "advt82yJMmaONUqF0tCpsAAAAQI"]
[Mon Apr 13 03:09:39.871515 2026] [:error] [pid 31605:tid 31643] [client 4.223.67.199:56846] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "advt829Py-Y-9VQ02eHd0wAAAAA"]
[Mon Apr 13 03:09:40.482832 2026] [:error] [pid 31607:tid 31744] [client 4.223.67.199:17705] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "advt9Gjn_I-KYTWngjJNSgAAAIc"]
[Mon Apr 13 03:09:41.142436 2026] [:error] [pid 31606:tid 31713] [client 4.223.67.199:8921] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "advt9T9vCsshNhLmCiCNggAAAEc"]
[Mon Apr 13 03:09:41.715124 2026] [:error] [pid 31607:tid 31740] [client 4.223.67.199:16315] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "advt9Wjn_I-KYTWngjJNTQAAAIM"]
[Mon Apr 13 03:09:42.381268 2026] [:error] [pid 31605:tid 31647] [client 4.223.67.199:24721] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "advt9m9Py-Y-9VQ02eHd2AAAAAQ"]
[Mon Apr 13 03:09:43.038003 2026] [:error] [pid 31605:tid 31655] [client 4.223.67.199:62658] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "advt929Py-Y-9VQ02eHd2gAAAAw"]
[Mon Apr 13 03:09:43.835735 2026] [:error] [pid 54671:tid 54680] [client 4.223.67.199:29081] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "advt92yJMmaONUqF0tCpuAAAAQU"]
[Mon Apr 13 03:09:44.642172 2026] [:error] [pid 31607:tid 31746] [client 4.223.67.199:56867] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "advt-Gjn_I-KYTWngjJNWQAAAIk"]
[Mon Apr 13 03:09:45.327877 2026] [:error] [pid 31606:tid 31712] [client 4.223.67.199:62693] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "advt-T9vCsshNhLmCiCNiAAAAEY"]
[Mon Apr 13 03:09:46.027772 2026] [:error] [pid 31607:tid 31760] [client 4.223.67.199:62656] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "advt-mjn_I-KYTWngjJNWgAAAJc"]
[Mon Apr 13 03:09:46.975223 2026] [:error] [pid 31607:tid 31740] [client 4.223.67.199:57206] [client 4.223.67.199] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "advt-mjn_I-KYTWngjJNXQAAAIM"]
[Mon Apr 13 03:09:48.273795 2026] [:error] [pid 54671:tid 54679] [client 4.223.67.199:8550] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Mon Apr 13 03:09:48.586217 2026] [:error] [pid 54671:tid 54683] [client 4.223.67.199:8550] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Mon Apr 13 05:07:30.991754 2026] [:error] [pid 11325:tid 11341] [client 43.153.54.14:50696] [client 43.153.54.14] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adwJkuCGj3EEJtCwa0NyZgAAAQ4"]
[Mon Apr 13 06:51:27.072254 2026] [:error] [pid 34048:tid 34059] [client 4.210.65.73:10529] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 06:51:27.346881 2026] [:error] [pid 34048:tid 34069] [client 4.210.65.73:10529] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 06:51:27.617221 2026] [:error] [pid 34048:tid 34057] [client 4.210.65.73:10529] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 06:51:27.887096 2026] [:error] [pid 34048:tid 34052] [client 4.210.65.73:10529] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 06:51:28.162113 2026] [:error] [pid 34048:tid 34064] [client 4.210.65.73:10529] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 06:51:28.432475 2026] [:error] [pid 34048:tid 34053] [client 4.210.65.73:10529] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 06:57:26.389138 2026] [:error] [pid 11325:tid 11344] [client 20.151.248.149:38786] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 06:57:26.598286 2026] [:error] [pid 11325:tid 11329] [client 20.151.248.149:38786] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 06:57:26.807078 2026] [:error] [pid 11325:tid 11346] [client 20.151.248.149:38786] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 06:57:27.016191 2026] [:error] [pid 11325:tid 11335] [client 20.151.248.149:38786] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 06:57:27.224645 2026] [:error] [pid 11325:tid 11329] [client 20.151.248.149:38786] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 06:57:27.435350 2026] [:error] [pid 11325:tid 11331] [client 20.151.248.149:38786] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 07:32:15.638122 2026] [:error] [pid 33943:tid 34022] [client 158.158.73.245:62210] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Mon Apr 13 07:32:15.877880 2026] [:error] [pid 33943:tid 34011] [client 158.158.73.245:62210] File does not exist: /usr/local/apache/htdocs/suspended-page/rkszbxbh.php
[Mon Apr 13 07:32:17.514656 2026] [:error] [pid 33943:tid 34011] [client 158.158.73.245:62210] File does not exist: /usr/local/apache/htdocs/suspended-page/hanna1337.php
[Mon Apr 13 07:32:17.754478 2026] [:error] [pid 33943:tid 34008] [client 158.158.73.245:62210] File does not exist: /usr/local/apache/htdocs/suspended-page/gt.php
[Mon Apr 13 07:32:18.729011 2026] [:error] [pid 33943:tid 34007] [client 158.158.73.245:62210] File does not exist: /usr/local/apache/htdocs/suspended-page/rk1.php
[Mon Apr 13 07:32:19.450066 2026] [:error] [pid 33943:tid 34024] [client 158.158.73.245:62210] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwrg6yoXuZjocnxM5GdEAAAAJI"]
[Mon Apr 13 07:32:19.936046 2026] [:error] [pid 33942:tid 33989] [client 158.158.73.245:62258] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwrgxNHe8geO_lMeFbDOAAAAEo"]
[Mon Apr 13 07:32:20.437096 2026] [:error] [pid 33943:tid 34021] [client 158.158.73.245:62225] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwrhKyoXuZjocnxM5GdEgAAAI8"]
[Mon Apr 13 07:32:20.921119 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:62185] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa-rex1.php"] [unique_id "adwrhBNHe8geO_lMeFbDPQAAAEY"]
[Mon Apr 13 07:32:21.399352 2026] [:error] [pid 33942:tid 33983] [client 158.158.73.245:62148] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "adwrhRNHe8geO_lMeFbDPgAAAEQ"]
[Mon Apr 13 07:32:21.875071 2026] [:error] [pid 33943:tid 34011] [client 158.158.73.245:62194] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "adwrhayoXuZjocnxM5GdFgAAAIU"]
[Mon Apr 13 07:32:22.364452 2026] [:error] [pid 33943:tid 34025] [client 158.158.73.245:62253] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "adwrhqyoXuZjocnxM5GdGQAAAJM"]
[Mon Apr 13 07:32:22.840506 2026] [:error] [pid 11325:tid 11334] [client 158.158.73.245:62149] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/suck.php"] [unique_id "adwrhuCGj3EEJtCwa0PaIgAAAQc"]
[Mon Apr 13 07:32:23.317873 2026] [:error] [pid 11325:tid 11342] [client 158.158.73.245:62219] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "adwrh-CGj3EEJtCwa0PaJQAAAQ8"]
[Mon Apr 13 07:32:23.788652 2026] [:error] [pid 34048:tid 34061] [client 158.158.73.245:62235] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "adwrh_SiQ_PJjlY5EhwTUwAAAMs"]
[Mon Apr 13 07:32:24.273766 2026] [:error] [pid 33942:tid 33981] [client 158.158.73.245:62150] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "adwriBNHe8geO_lMeFbDQgAAAEI"]
[Mon Apr 13 07:32:24.751704 2026] [:error] [pid 11325:tid 11347] [client 158.158.73.245:62232] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hikudpno.php"] [unique_id "adwriOCGj3EEJtCwa0PaKAAAARQ"]
[Mon Apr 13 07:32:25.231079 2026] [:error] [pid 33941:tid 33967] [client 158.158.73.245:62259] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwriW_NKERAxgG-rYNT3wAAABA"]
[Mon Apr 13 07:32:25.730613 2026] [:error] [pid 33943:tid 34013] [client 158.158.73.245:62255] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwriayoXuZjocnxM5GdHQAAAIc"]
[Mon Apr 13 07:32:26.209762 2026] [:error] [pid 11325:tid 11348] [client 158.158.73.245:62249] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwriuCGj3EEJtCwa0PaKwAAARU"]
[Mon Apr 13 07:32:26.706042 2026] [:error] [pid 11325:tid 11340] [client 158.158.73.245:62260] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/moon.php"] [unique_id "adwriuCGj3EEJtCwa0PaMQAAAQ0"]
[Mon Apr 13 07:32:27.277104 2026] [:error] [pid 11325:tid 11348] [client 158.158.73.245:62167] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "adwri-CGj3EEJtCwa0PaNgAAARU"]
[Mon Apr 13 07:32:27.749625 2026] [:error] [pid 11325:tid 11337] [client 158.158.73.245:62200] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "adwri-CGj3EEJtCwa0PaOwAAAQo"]
[Mon Apr 13 07:32:28.318126 2026] [:error] [pid 33941:tid 33974] [client 158.158.73.245:62203] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "adwrjG_NKERAxgG-rYNT4QAAABc"]
[Mon Apr 13 07:32:28.790846 2026] [:error] [pid 11325:tid 11343] [client 158.158.73.245:62212] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sure.php"] [unique_id "adwrjOCGj3EEJtCwa0PaQQAAARA"]
[Mon Apr 13 07:32:29.302843 2026] [:error] [pid 11325:tid 11348] [client 158.158.73.245:62237] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "adwrjeCGj3EEJtCwa0PaQwAAARU"]
[Mon Apr 13 07:32:29.775157 2026] [:error] [pid 33941:tid 33973] [client 158.158.73.245:62216] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "adwrjW_NKERAxgG-rYNT4gAAABY"]
[Mon Apr 13 07:32:30.265185 2026] [:error] [pid 33943:tid 34011] [client 158.158.73.245:62239] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "adwrjqyoXuZjocnxM5GdIAAAAIU"]
[Mon Apr 13 07:32:30.737972 2026] [:error] [pid 33943:tid 34022] [client 158.158.73.245:62168] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "adwrjqyoXuZjocnxM5GdIgAAAJA"]
[Mon Apr 13 07:32:31.235479 2026] [:error] [pid 11325:tid 11333] [client 158.158.73.245:62226] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "adwrj-CGj3EEJtCwa0PaSQAAAQY"]
[Mon Apr 13 07:32:31.712414 2026] [:error] [pid 11325:tid 11336] [client 158.158.73.245:59537] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "adwrj-CGj3EEJtCwa0PaTQAAAQk"]
[Mon Apr 13 07:32:32.194358 2026] [:error] [pid 34048:tid 34072] [client 158.158.73.245:62157] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "adwrkPSiQ_PJjlY5EhwTXQAAANY"]
[Mon Apr 13 07:32:32.672681 2026] [:error] [pid 34048:tid 34051] [client 158.158.73.245:62214] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4563.php"] [unique_id "adwrkPSiQ_PJjlY5EhwTXwAAAME"]
[Mon Apr 13 07:32:33.160256 2026] [:error] [pid 33943:tid 34013] [client 158.158.73.245:62145] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "adwrkayoXuZjocnxM5GdJwAAAIc"]
[Mon Apr 13 07:32:33.645862 2026] [:error] [pid 11325:tid 11333] [client 158.158.73.245:59459] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "adwrkeCGj3EEJtCwa0PaUwAAAQY"]
[Mon Apr 13 07:32:34.135113 2026] [:error] [pid 33943:tid 34016] [client 158.158.73.245:62270] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "adwrkqyoXuZjocnxM5GdLAAAAIo"]
[Mon Apr 13 07:32:34.620101 2026] [:error] [pid 11325:tid 11347] [client 158.158.73.245:62238] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wunaivpl.php"] [unique_id "adwrkuCGj3EEJtCwa0PaWAAAARQ"]
[Mon Apr 13 07:32:35.099620 2026] [:error] [pid 11325:tid 11338] [client 158.158.73.245:62261] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "adwrk-CGj3EEJtCwa0PaXAAAAQs"]
[Mon Apr 13 07:32:35.582394 2026] [:error] [pid 33943:tid 34023] [client 158.158.73.245:59572] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "adwrk6yoXuZjocnxM5GdLgAAAJE"]
[Mon Apr 13 07:32:36.056275 2026] [:error] [pid 33942:tid 33997] [client 158.158.73.245:62161] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "adwrlBNHe8geO_lMeFbDXQAAAFI"]
[Mon Apr 13 07:32:36.538989 2026] [:error] [pid 33942:tid 34000] [client 158.158.73.245:62159] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/reune.php"] [unique_id "adwrlBNHe8geO_lMeFbDYAAAAFU"]
[Mon Apr 13 07:32:37.025459 2026] [:error] [pid 33943:tid 34009] [client 158.158.73.245:62217] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "adwrlayoXuZjocnxM5GdMAAAAIM"]
[Mon Apr 13 07:32:37.499249 2026] [:error] [pid 33943:tid 34022] [client 158.158.73.245:62256] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "adwrlayoXuZjocnxM5GdMgAAAJA"]
[Mon Apr 13 07:32:37.981989 2026] [:error] [pid 33943:tid 34017] [client 158.158.73.245:62174] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "adwrlayoXuZjocnxM5GdMwAAAIs"]
[Mon Apr 13 07:32:38.453128 2026] [:error] [pid 34048:tid 34059] [client 158.158.73.245:62188] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dw.php"] [unique_id "adwrlvSiQ_PJjlY5EhwTaQAAAMk"]
[Mon Apr 13 07:32:38.924679 2026] [:error] [pid 33943:tid 34025] [client 158.158.73.245:62254] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwrlqyoXuZjocnxM5GdNAAAAJM"]
[Mon Apr 13 07:32:39.401402 2026] [:error] [pid 33943:tid 34019] [client 158.158.73.245:62269] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwrl6yoXuZjocnxM5GdNwAAAI0"]
[Mon Apr 13 07:32:39.875091 2026] [:error] [pid 33943:tid 34007] [client 158.158.73.245:62190] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwrl6yoXuZjocnxM5GdOgAAAIE"]
[Mon Apr 13 07:32:40.353566 2026] [:error] [pid 33943:tid 34016] [client 158.158.73.245:62201] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "adwrmKyoXuZjocnxM5GdPQAAAIo"]
[Mon Apr 13 07:32:40.829690 2026] [:error] [pid 33943:tid 34023] [client 158.158.73.245:62197] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "adwrmKyoXuZjocnxM5GdPwAAAJE"]
[Mon Apr 13 07:32:41.306012 2026] [:error] [pid 33943:tid 34006] [client 158.158.73.245:62169] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "adwrmayoXuZjocnxM5GdQwAAAIA"]
[Mon Apr 13 07:32:41.778700 2026] [:error] [pid 33943:tid 34019] [client 158.158.73.245:62187] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "adwrmayoXuZjocnxM5GdRgAAAI0"]
[Mon Apr 13 07:32:42.260845 2026] [:error] [pid 33943:tid 34015] [client 158.158.73.245:62152] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellx.php"] [unique_id "adwrmqyoXuZjocnxM5GdSQAAAIk"]
[Mon Apr 13 07:32:42.732275 2026] [:error] [pid 11325:tid 11348] [client 158.158.73.245:62199] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "adwrmuCGj3EEJtCwa0PaZAAAARU"]
[Mon Apr 13 07:32:43.219958 2026] [:error] [pid 33942:tid 33993] [client 158.158.73.245:62224] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "adwrmxNHe8geO_lMeFbDZAAAAE4"]
[Mon Apr 13 07:32:43.725723 2026] [:error] [pid 33943:tid 34028] [client 158.158.73.245:62221] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "adwrm6yoXuZjocnxM5GdTwAAAJY"]
[Mon Apr 13 07:32:44.215547 2026] [:error] [pid 33943:tid 34009] [client 158.158.73.245:59552] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/l.php"] [unique_id "adwrnKyoXuZjocnxM5GdUgAAAIM"]
[Mon Apr 13 07:32:44.703137 2026] [:error] [pid 11325:tid 11333] [client 158.158.73.245:62251] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "adwrnOCGj3EEJtCwa0PaagAAAQY"]
[Mon Apr 13 07:32:45.197111 2026] [:error] [pid 33942:tid 33992] [client 158.158.73.245:59530] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "adwrnRNHe8geO_lMeFbDZwAAAE0"]
[Mon Apr 13 07:32:45.683354 2026] [:error] [pid 11325:tid 11328] [client 158.158.73.245:62252] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "adwrneCGj3EEJtCwa0PaawAAAQE"]
[Mon Apr 13 07:32:46.162479 2026] [:error] [pid 11325:tid 11331] [client 158.158.73.245:62166] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "adwrnuCGj3EEJtCwa0PabQAAAQQ"]
[Mon Apr 13 07:32:46.686142 2026] [:error] [pid 33943:tid 34008] [client 158.158.73.245:62191] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "adwrnqyoXuZjocnxM5GdVgAAAII"]
[Mon Apr 13 07:32:47.160926 2026] [:error] [pid 33943:tid 34027] [client 158.158.73.245:62208] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "adwrn6yoXuZjocnxM5GdWAAAAJU"]
[Mon Apr 13 07:32:47.665343 2026] [:error] [pid 33943:tid 34014] [client 158.158.73.245:62177] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "adwrn6yoXuZjocnxM5GdXAAAAIg"]
[Mon Apr 13 07:32:48.143740 2026] [:error] [pid 11325:tid 11341] [client 158.158.73.245:62144] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lnexugel.php"] [unique_id "adwroOCGj3EEJtCwa0PacgAAAQ4"]
[Mon Apr 13 07:32:48.658656 2026] [:error] [pid 11325:tid 11335] [client 158.158.73.245:59540] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "adwroOCGj3EEJtCwa0PadAAAAQg"]
[Mon Apr 13 07:32:49.142338 2026] [:error] [pid 11325:tid 11334] [client 158.158.73.245:62243] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "adwroeCGj3EEJtCwa0PaeAAAAQc"]
[Mon Apr 13 07:32:49.643859 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:62183] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "adwroRNHe8geO_lMeFbDagAAAEY"]
[Mon Apr 13 07:32:50.130096 2026] [:error] [pid 33942:tid 33995] [client 158.158.73.245:59577] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/online.php"] [unique_id "adwrohNHe8geO_lMeFbDbAAAAFA"]
[Mon Apr 13 07:32:50.633299 2026] [:error] [pid 11325:tid 11348] [client 158.158.73.245:62207] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "adwrouCGj3EEJtCwa0PagwAAARU"]
[Mon Apr 13 07:32:51.132337 2026] [:error] [pid 34048:tid 34055] [client 158.158.73.245:62147] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "adwro_SiQ_PJjlY5EhwTgAAAAMU"]
[Mon Apr 13 07:32:51.609908 2026] [:error] [pid 11325:tid 11338] [client 158.158.73.245:62264] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "adwro-CGj3EEJtCwa0PahwAAAQs"]
[Mon Apr 13 07:32:52.108194 2026] [:error] [pid 33942:tid 34003] [client 158.158.73.245:62262] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up-kon.php"] [unique_id "adwrpBNHe8geO_lMeFbDbwAAAFg"]
[Mon Apr 13 07:32:52.594783 2026] [:error] [pid 11325:tid 11341] [client 158.158.73.245:59550] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "adwrpOCGj3EEJtCwa0PaigAAAQ4"]
[Mon Apr 13 07:32:53.066432 2026] [:error] [pid 34048:tid 34065] [client 158.158.73.245:62189] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "adwrpfSiQ_PJjlY5EhwTggAAAM8"]
[Mon Apr 13 07:32:53.544509 2026] [:error] [pid 34048:tid 34050] [client 158.158.73.245:59570] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "adwrpfSiQ_PJjlY5EhwTgwAAAMA"]
[Mon Apr 13 07:32:54.016693 2026] [:error] [pid 34048:tid 34061] [client 158.158.73.245:59470] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/word.php"] [unique_id "adwrpvSiQ_PJjlY5EhwThAAAAMs"]
[Mon Apr 13 07:32:54.499315 2026] [:error] [pid 11325:tid 11344] [client 158.158.73.245:59539] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "adwrpuCGj3EEJtCwa0PajAAAARE"]
[Mon Apr 13 07:32:55.079672 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:59541] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "adwrpxNHe8geO_lMeFbDdgAAAEY"]
[Mon Apr 13 07:32:55.604878 2026] [:error] [pid 34048:tid 34060] [client 158.158.73.245:62206] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "adwrp_SiQ_PJjlY5EhwTiwAAAMo"]
[Mon Apr 13 07:32:56.114483 2026] [:error] [pid 33943:tid 34012] [client 158.158.73.245:59553] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "adwrqKyoXuZjocnxM5GdZAAAAIY"]
[Mon Apr 13 07:32:56.685821 2026] [:error] [pid 33942:tid 34003] [client 158.158.73.245:62227] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "adwrqBNHe8geO_lMeFbDewAAAFg"]
[Mon Apr 13 07:32:57.229130 2026] [:error] [pid 33941:tid 33962] [client 158.158.73.245:59476] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "adwrqW_NKERAxgG-rYNT_wAAAAs"]
[Mon Apr 13 07:32:57.793641 2026] [:error] [pid 34048:tid 34067] [client 158.158.73.245:62267] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "adwrqfSiQ_PJjlY5EhwTkgAAANE"]
[Mon Apr 13 07:32:58.323114 2026] [:error] [pid 33942:tid 33998] [client 158.158.73.245:62218] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jcsonquo.php"] [unique_id "adwrqhNHe8geO_lMeFbDiQAAAFM"]
[Mon Apr 13 07:32:58.913683 2026] [:error] [pid 33941:tid 33952] [client 158.158.73.245:62162] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "adwrqm_NKERAxgG-rYNUAQAAAAI"]
[Mon Apr 13 07:32:59.437355 2026] [:error] [pid 34048:tid 34057] [client 158.158.73.245:59521] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "adwrq_SiQ_PJjlY5EhwTlgAAAMc"]
[Mon Apr 13 07:32:59.928512 2026] [:error] [pid 33941:tid 33973] [client 158.158.73.245:59469] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "adwrq2_NKERAxgG-rYNUAgAAABY"]
[Mon Apr 13 07:33:00.530356 2026] [:error] [pid 34048:tid 34052] [client 158.158.73.245:59527] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/termps.php"] [unique_id "adwrrPSiQ_PJjlY5EhwTmgAAAMI"]
[Mon Apr 13 07:33:01.225228 2026] [:error] [pid 33942:tid 34000] [client 158.158.73.245:62184] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwrrRNHe8geO_lMeFbDjAAAAFU"]
[Mon Apr 13 07:33:01.746170 2026] [:error] [pid 33942:tid 33990] [client 158.158.73.245:62193] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwrrRNHe8geO_lMeFbDjQAAAEs"]
[Mon Apr 13 07:33:02.241270 2026] [:error] [pid 33942:tid 33997] [client 158.158.73.245:62250] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwrrhNHe8geO_lMeFbDjwAAAFI"]
[Mon Apr 13 07:33:02.824696 2026] [:error] [pid 33942:tid 33998] [client 158.158.73.245:62263] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwrrhNHe8geO_lMeFbDkAAAAFM"]
[Mon Apr 13 07:33:03.440846 2026] [:error] [pid 33943:tid 34010] [client 158.158.73.245:59491] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwrr6yoXuZjocnxM5GdfQAAAIQ"]
[Mon Apr 13 07:33:04.018992 2026] [:error] [pid 33942:tid 34002] [client 158.158.73.245:59475] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwrsBNHe8geO_lMeFbDlgAAAFc"]
[Mon Apr 13 07:33:04.551372 2026] [:error] [pid 33943:tid 34008] [client 158.158.73.245:55112] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwrsKyoXuZjocnxM5GdfwAAAII"]
[Mon Apr 13 07:33:05.166209 2026] [:error] [pid 11325:tid 11343] [client 158.158.73.245:62153] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwrseCGj3EEJtCwa0PalgAAARA"]
[Mon Apr 13 07:33:05.725453 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:62155] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "adwrsRNHe8geO_lMeFbDlwAAAEY"]
[Mon Apr 13 07:33:06.273500 2026] [:error] [pid 11325:tid 11336] [client 158.158.73.245:59488] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "adwrsuCGj3EEJtCwa0PamgAAAQk"]
[Mon Apr 13 07:33:06.779330 2026] [:error] [pid 33942:tid 33997] [client 158.158.73.245:55117] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "adwrshNHe8geO_lMeFbDmgAAAFI"]
[Mon Apr 13 07:33:07.344715 2026] [:error] [pid 33941:tid 33974] [client 158.158.73.245:59520] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rin.php"] [unique_id "adwrs2_NKERAxgG-rYNUBwAAABc"]
[Mon Apr 13 07:33:07.952597 2026] [:error] [pid 34048:tid 34052] [client 158.158.73.245:59495] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "adwrs_SiQ_PJjlY5EhwTsAAAAMI"]
[Mon Apr 13 07:33:08.436334 2026] [:error] [pid 33942:tid 33981] [client 158.158.73.245:59482] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "adwrtBNHe8geO_lMeFbDpgAAAEI"]
[Mon Apr 13 07:33:08.947107 2026] [:error] [pid 11325:tid 11350] [client 158.158.73.245:59538] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "adwrtOCGj3EEJtCwa0PapQAAARc"]
[Mon Apr 13 07:33:09.586534 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:62160] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packages.php"] [unique_id "adwrtRNHe8geO_lMeFbDpwAAAEY"]
[Mon Apr 13 07:33:10.161446 2026] [:error] [pid 11325:tid 11351] [client 158.158.73.245:59519] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "adwrtuCGj3EEJtCwa0PaqAAAARg"]
[Mon Apr 13 07:33:10.678609 2026] [:error] [pid 33941:tid 33963] [client 158.158.73.245:59574] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "adwrtm_NKERAxgG-rYNUCgAAAAw"]
[Mon Apr 13 07:33:11.269793 2026] [:error] [pid 34048:tid 34061] [client 158.158.73.245:59524] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "adwrt_SiQ_PJjlY5EhwTuAAAAMs"]
[Mon Apr 13 07:33:11.803318 2026] [:error] [pid 34048:tid 34059] [client 158.158.73.245:62215] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi.php"] [unique_id "adwrt_SiQ_PJjlY5EhwTuwAAAMk"]
[Mon Apr 13 07:33:12.478461 2026] [:error] [pid 11325:tid 11341] [client 158.158.73.245:62172] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "adwruOCGj3EEJtCwa0PargAAAQ4"]
[Mon Apr 13 07:33:13.405659 2026] [:error] [pid 33943:tid 34024] [client 158.158.73.245:62182] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "adwruayoXuZjocnxM5GdjAAAAJI"]
[Mon Apr 13 07:33:13.898529 2026] [:error] [pid 11325:tid 11333] [client 158.158.73.245:55163] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "adwrueCGj3EEJtCwa0PasgAAAQY"]
[Mon Apr 13 07:33:14.788055 2026] [:error] [pid 33942:tid 33980] [client 158.158.73.245:59535] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vbv.php"] [unique_id "adwruhNHe8geO_lMeFbDsgAAAEE"]
[Mon Apr 13 07:33:15.314703 2026] [:error] [pid 33943:tid 34027] [client 158.158.73.245:62176] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "adwru6yoXuZjocnxM5GdkQAAAJU"]
[Mon Apr 13 07:33:15.825010 2026] [:error] [pid 33943:tid 34009] [client 158.158.73.245:62211] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "adwru6yoXuZjocnxM5GdlQAAAIM"]
[Mon Apr 13 07:33:16.343388 2026] [:error] [pid 33943:tid 34008] [client 158.158.73.245:62196] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "adwrvKyoXuZjocnxM5GdmAAAAII"]
[Mon Apr 13 07:33:16.946581 2026] [:error] [pid 33943:tid 34012] [client 158.158.73.245:62170] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "adwrvKyoXuZjocnxM5GdmwAAAIY"]
[Mon Apr 13 07:33:17.857044 2026] [:error] [pid 33942:tid 33992] [client 158.158.73.245:59565] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "adwrvRNHe8geO_lMeFbDuwAAAE0"]
[Mon Apr 13 07:33:18.437725 2026] [:error] [pid 33942:tid 33998] [client 158.158.73.245:59533] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moderation.php"] [unique_id "adwrvhNHe8geO_lMeFbDvgAAAFM"]
[Mon Apr 13 07:33:19.437062 2026] [:error] [pid 33941:tid 33953] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/moderation.php
[Mon Apr 13 07:33:19.688477 2026] [:error] [pid 33941:tid 33974] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/simple-shell.php
[Mon Apr 13 07:33:20.178456 2026] [:error] [pid 33941:tid 33973] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/2Vu80QG.php
[Mon Apr 13 07:33:20.418829 2026] [:error] [pid 33941:tid 33950] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/bsr.php
[Mon Apr 13 07:33:20.676053 2026] [:error] [pid 33941:tid 33970] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/ans.php
[Mon Apr 13 07:33:20.916107 2026] [:error] [pid 33941:tid 33972] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tot.php
[Mon Apr 13 07:33:21.212065 2026] [:error] [pid 33941:tid 33956] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/Core-wp.php
[Mon Apr 13 07:33:21.454502 2026] [:error] [pid 33941:tid 33967] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/src.php
[Mon Apr 13 07:33:21.941508 2026] [:error] [pid 33941:tid 33951] [client 158.158.73.245:62165] File does not exist: /usr/local/apache/htdocs/suspended-page/nxd.php
[Mon Apr 13 07:33:22.186259 2026] [:error] [pid 33941:tid 33971] [client 158.158.73.245:62165] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "adwrwm_NKERAxgG-rYNUHgAAABQ"]
[Mon Apr 13 07:33:22.699065 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:62228] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "adwrwhNHe8geO_lMeFbDwAAAAEY"]
[Mon Apr 13 07:33:23.403620 2026] [:error] [pid 33941:tid 33975] [client 158.158.73.245:62268] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "adwrw2_NKERAxgG-rYNUHwAAABg"]
[Mon Apr 13 07:33:23.910153 2026] [:error] [pid 11325:tid 11349] [client 158.158.73.245:62236] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/payout.php"] [unique_id "adwrw-CGj3EEJtCwa0PazQAAARY"]
[Mon Apr 13 07:33:24.553597 2026] [:error] [pid 11325:tid 11336] [client 158.158.73.245:59559] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "adwrxOCGj3EEJtCwa0Pa0wAAAQk"]
[Mon Apr 13 07:33:25.282538 2026] [:error] [pid 11325:tid 11334] [client 158.158.73.245:55119] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "adwrxeCGj3EEJtCwa0Pa2wAAAQc"]
[Mon Apr 13 07:33:25.788254 2026] [:error] [pid 34048:tid 34055] [client 158.158.73.245:59522] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "adwrxfSiQ_PJjlY5EhwT1wAAAMU"]
[Mon Apr 13 07:33:26.480697 2026] [:error] [pid 11325:tid 11346] [client 158.158.73.245:59563] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uxquidwa.php"] [unique_id "adwrxuCGj3EEJtCwa0Pa5AAAARM"]
[Mon Apr 13 07:33:26.977904 2026] [:error] [pid 11325:tid 11334] [client 158.158.73.245:59514] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "adwrxuCGj3EEJtCwa0Pa6QAAAQc"]
[Mon Apr 13 07:33:27.614619 2026] [:error] [pid 34048:tid 34057] [client 158.158.73.245:62205] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "adwrx_SiQ_PJjlY5EhwT2gAAAMc"]
[Mon Apr 13 07:33:28.287848 2026] [:error] [pid 34048:tid 34058] [client 158.158.73.245:55121] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "adwryPSiQ_PJjlY5EhwT3AAAAMg"]
[Mon Apr 13 07:33:28.791184 2026] [:error] [pid 33942:tid 33995] [client 158.158.73.245:62234] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/combined.php"] [unique_id "adwryBNHe8geO_lMeFbDxQAAAFA"]
[Mon Apr 13 07:33:29.428726 2026] [:error] [pid 11325:tid 11331] [client 158.158.73.245:62230] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "adwryeCGj3EEJtCwa0Pa9AAAAQQ"]
[Mon Apr 13 07:33:29.955565 2026] [:error] [pid 34048:tid 34066] [client 158.158.73.245:62171] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "adwryfSiQ_PJjlY5EhwT4AAAANA"]
[Mon Apr 13 07:33:30.461540 2026] [:error] [pid 34048:tid 34072] [client 158.158.73.245:62195] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "adwryvSiQ_PJjlY5EhwT4wAAANY"]
[Mon Apr 13 07:33:30.969003 2026] [:error] [pid 33943:tid 34008] [client 158.158.73.245:59543] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mari.php"] [unique_id "adwryqyoXuZjocnxM5GdwgAAAII"]
[Mon Apr 13 07:33:31.593657 2026] [:error] [pid 33943:tid 34024] [client 158.158.73.245:62204] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "adwry6yoXuZjocnxM5GdxAAAAJI"]
[Mon Apr 13 07:33:32.122521 2026] [:error] [pid 33942:tid 33987] [client 158.158.73.245:59545] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "adwrzBNHe8geO_lMeFbDyQAAAEg"]
[Mon Apr 13 07:33:32.843309 2026] [:error] [pid 33943:tid 34006] [client 158.158.73.245:62246] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "adwrzKyoXuZjocnxM5GdyAAAAIA"]
[Mon Apr 13 07:33:33.613351 2026] [:error] [pid 33942:tid 33981] [client 158.158.73.245:59556] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kodox.php"] [unique_id "adwrzRNHe8geO_lMeFbDzAAAAEI"]
[Mon Apr 13 07:33:34.246198 2026] [:error] [pid 33942:tid 34001] [client 158.158.73.245:59456] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "adwrzhNHe8geO_lMeFbD0QAAAFY"]
[Mon Apr 13 07:33:34.908533 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:62180] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "adwrzhNHe8geO_lMeFbD0wAAAEY"]
[Mon Apr 13 07:33:35.467506 2026] [:error] [pid 11325:tid 11335] [client 158.158.73.245:62198] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "adwrz-CGj3EEJtCwa0PbDgAAAQg"]
[Mon Apr 13 07:33:36.377523 2026] [:error] [pid 33942:tid 33997] [client 158.158.73.245:62181] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ak47shell.php"] [unique_id "adwr0BNHe8geO_lMeFbD1gAAAFI"]
[Mon Apr 13 07:33:37.092335 2026] [:error] [pid 33943:tid 34022] [client 158.158.73.245:62181] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "adwr0ayoXuZjocnxM5Gd0wAAAJA"]
[Mon Apr 13 07:33:37.717328 2026] [:error] [pid 33943:tid 34015] [client 158.158.73.245:55118] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "adwr0ayoXuZjocnxM5Gd1QAAAIk"]
[Mon Apr 13 07:33:38.343077 2026] [:error] [pid 11325:tid 11330] [client 158.158.73.245:62220] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "adwr0uCGj3EEJtCwa0PbIAAAAQM"]
[Mon Apr 13 07:33:38.868764 2026] [:error] [pid 11325:tid 11344] [client 158.158.73.245:59511] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "adwr0uCGj3EEJtCwa0PbJAAAARE"]
[Mon Apr 13 07:33:39.370327 2026] [:error] [pid 11325:tid 11347] [client 158.158.73.245:62213] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "adwr0-CGj3EEJtCwa0PbKQAAARQ"]
[Mon Apr 13 07:33:39.876445 2026] [:error] [pid 11325:tid 11327] [client 158.158.73.245:59487] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "adwr0-CGj3EEJtCwa0PbLQAAAQA"]
[Mon Apr 13 07:33:40.396002 2026] [:error] [pid 33941:tid 33959] [client 158.158.73.245:55131] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "adwr1G_NKERAxgG-rYNUKwAAAAg"]
[Mon Apr 13 07:33:41.051676 2026] [:error] [pid 11325:tid 11335] [client 158.158.73.245:59564] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log404.php"] [unique_id "adwr1eCGj3EEJtCwa0PbNQAAAQg"]
[Mon Apr 13 07:33:41.603716 2026] [:error] [pid 11325:tid 11336] [client 158.158.73.245:59571] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "adwr1eCGj3EEJtCwa0PbOQAAAQk"]
[Mon Apr 13 07:33:42.233599 2026] [:error] [pid 34048:tid 34060] [client 158.158.73.245:55144] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "adwr1vSiQ_PJjlY5EhwT8gAAAMo"]
[Mon Apr 13 07:33:42.715269 2026] [:error] [pid 33941:tid 33973] [client 158.158.73.245:59575] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "adwr1m_NKERAxgG-rYNULQAAABY"]
[Mon Apr 13 07:33:43.314881 2026] [:error] [pid 34048:tid 34073] [client 158.158.73.245:59566] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wh.php"] [unique_id "adwr1_SiQ_PJjlY5EhwT9QAAANc"]
[Mon Apr 13 07:33:43.880222 2026] [:error] [pid 34048:tid 34055] [client 158.158.73.245:59548] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "adwr1_SiQ_PJjlY5EhwT-AAAAMU"]
[Mon Apr 13 07:33:44.459030 2026] [:error] [pid 34048:tid 34057] [client 158.158.73.245:59528] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "adwr2PSiQ_PJjlY5EhwT_AAAAMc"]
[Mon Apr 13 07:33:44.973251 2026] [:error] [pid 11325:tid 11331] [client 158.158.73.245:59508] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "adwr2OCGj3EEJtCwa0PbRgAAAQQ"]
[Mon Apr 13 07:33:45.502368 2026] [:error] [pid 33942:tid 33999] [client 158.158.73.245:62156] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luf.php"] [unique_id "adwr2RNHe8geO_lMeFbD3gAAAFQ"]
[Mon Apr 13 07:33:46.020280 2026] [:error] [pid 33943:tid 34011] [client 158.158.73.245:62179] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "adwr2qyoXuZjocnxM5Gd3AAAAIU"]
[Mon Apr 13 07:33:46.545149 2026] [:error] [pid 11325:tid 11342] [client 158.158.73.245:59517] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "adwr2uCGj3EEJtCwa0PbSgAAAQ8"]
[Mon Apr 13 07:33:47.056315 2026] [:error] [pid 11325:tid 11338] [client 158.158.73.245:59531] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "adwr2-CGj3EEJtCwa0PbTQAAAQs"]
[Mon Apr 13 07:33:47.697154 2026] [:error] [pid 11325:tid 11334] [client 158.158.73.245:62192] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs2.php"] [unique_id "adwr2-CGj3EEJtCwa0PbVAAAAQc"]
[Mon Apr 13 07:33:48.255736 2026] [:error] [pid 33943:tid 34012] [client 158.158.73.245:59531] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "adwr3KyoXuZjocnxM5Gd4AAAAIY"]
[Mon Apr 13 07:33:48.744171 2026] [:error] [pid 34048:tid 34051] [client 158.158.73.245:59464] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "adwr3PSiQ_PJjlY5EhwUAwAAAME"]
[Mon Apr 13 07:33:49.334312 2026] [:error] [pid 33943:tid 34030] [client 158.158.73.245:55060] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "adwr3ayoXuZjocnxM5Gd4QAAAJg"]
[Mon Apr 13 07:33:49.842963 2026] [:error] [pid 33943:tid 34015] [client 158.158.73.245:59504] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wf.php"] [unique_id "adwr3ayoXuZjocnxM5Gd5AAAAIk"]
[Mon Apr 13 07:33:50.331822 2026] [:error] [pid 11325:tid 11335] [client 158.158.73.245:62192] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "adwr3uCGj3EEJtCwa0PbZAAAAQg"]
[Mon Apr 13 07:33:50.881048 2026] [:error] [pid 33943:tid 34023] [client 158.158.73.245:59458] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "adwr3qyoXuZjocnxM5Gd5gAAAJE"]
[Mon Apr 13 07:33:51.442368 2026] [:error] [pid 34048:tid 34054] [client 158.158.73.245:59515] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "adwr3_SiQ_PJjlY5EhwUBgAAAMQ"]
[Mon Apr 13 07:33:51.954874 2026] [:error] [pid 11325:tid 11338] [client 158.158.73.245:55166] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vcard.php"] [unique_id "adwr3-CGj3EEJtCwa0PbbQAAAQs"]
[Mon Apr 13 07:33:52.467531 2026] [:error] [pid 33943:tid 34021] [client 158.158.73.245:59579] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwr4KyoXuZjocnxM5Gd6QAAAI8"]
[Mon Apr 13 07:33:53.007174 2026] [:error] [pid 34048:tid 34051] [client 158.158.73.245:59581] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwr4fSiQ_PJjlY5EhwUCgAAAME"]
[Mon Apr 13 07:33:53.509067 2026] [:error] [pid 33942:tid 33984] [client 158.158.73.245:59457] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwr4RNHe8geO_lMeFbD5wAAAEU"]
[Mon Apr 13 07:33:54.022740 2026] [:error] [pid 11325:tid 11349] [client 158.158.73.245:59503] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/file2.php"] [unique_id "adwr4uCGj3EEJtCwa0PbdAAAARY"]
[Mon Apr 13 07:33:54.538052 2026] [:error] [pid 33942:tid 33979] [client 158.158.73.245:62257] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "adwr4hNHe8geO_lMeFbD6QAAAEA"]
[Mon Apr 13 07:33:55.070351 2026] [:error] [pid 33942:tid 33995] [client 158.158.73.245:62146] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "adwr4xNHe8geO_lMeFbD6gAAAFA"]
[Mon Apr 13 07:33:55.566321 2026] [:error] [pid 34048:tid 34057] [client 158.158.73.245:59583] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "adwr4_SiQ_PJjlY5EhwUDwAAAMc"]
[Mon Apr 13 07:33:56.206506 2026] [:error] [pid 33942:tid 33989] [client 158.158.73.245:59529] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ddgg.php"] [unique_id "adwr5BNHe8geO_lMeFbD7gAAAEo"]
[Mon Apr 13 07:33:56.749453 2026] [:error] [pid 33943:tid 34015] [client 158.158.73.245:55156] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwr5KyoXuZjocnxM5Gd7wAAAIk"]
[Mon Apr 13 07:33:57.233489 2026] [:error] [pid 11325:tid 11333] [client 158.158.73.245:62233] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwr5eCGj3EEJtCwa0PbggAAAQY"]
[Mon Apr 13 07:33:57.733850 2026] [:error] [pid 11325:tid 11344] [client 158.158.73.245:62178] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwr5eCGj3EEJtCwa0PbhAAAARE"]
[Mon Apr 13 07:33:58.304222 2026] [:error] [pid 11325:tid 11332] [client 158.158.73.245:55114] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rc.php7"] [unique_id "adwr5uCGj3EEJtCwa0PbhwAAAQU"]
[Mon Apr 13 07:33:58.809615 2026] [:error] [pid 33941:tid 33962] [client 158.158.73.245:62223] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwr5m_NKERAxgG-rYNUMwAAAAs"]
[Mon Apr 13 07:33:59.358000 2026] [:error] [pid 11325:tid 11335] [client 158.158.73.245:62186] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwr5-CGj3EEJtCwa0PbjAAAAQg"]
[Mon Apr 13 07:33:59.839870 2026] [:error] [pid 33943:tid 34026] [client 158.158.73.245:62266] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwr56yoXuZjocnxM5Gd8QAAAJQ"]
[Mon Apr 13 07:34:00.362034 2026] [:error] [pid 33942:tid 33991] [client 158.158.73.245:59525] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/indo.php"] [unique_id "adwr6BNHe8geO_lMeFbD-gAAAEw"]
[Mon Apr 13 07:34:00.838658 2026] [:error] [pid 11325:tid 11329] [client 158.158.73.245:55158] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "adwr6OCGj3EEJtCwa0PbkAAAAQI"]
[Mon Apr 13 07:34:01.372128 2026] [:error] [pid 11325:tid 11348] [client 158.158.73.245:62154] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "adwr6eCGj3EEJtCwa0PbkgAAARU"]
[Mon Apr 13 07:34:02.058280 2026] [:error] [pid 33942:tid 33997] [client 158.158.73.245:55153] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "adwr6hNHe8geO_lMeFbEAwAAAFI"]
[Mon Apr 13 07:34:02.570198 2026] [:error] [pid 33943:tid 34013] [client 158.158.73.245:59500] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pu.php"] [unique_id "adwr6qyoXuZjocnxM5Gd9QAAAIc"]
[Mon Apr 13 07:34:03.183730 2026] [:error] [pid 33943:tid 34006] [client 158.158.73.245:55142] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "adwr66yoXuZjocnxM5Gd9wAAAIA"]
[Mon Apr 13 07:34:03.750725 2026] [:error] [pid 11325:tid 11334] [client 158.158.73.245:59480] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "adwr6-CGj3EEJtCwa0PbmAAAAQc"]
[Mon Apr 13 07:34:04.312227 2026] [:error] [pid 11325:tid 11346] [client 158.158.73.245:62231] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "adwr7OCGj3EEJtCwa0PbnQAAARM"]
[Mon Apr 13 07:34:04.839080 2026] [:error] [pid 11325:tid 11344] [client 158.158.73.245:55160] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs.php"] [unique_id "adwr7OCGj3EEJtCwa0PbnwAAARE"]
[Mon Apr 13 07:34:05.471595 2026] [:error] [pid 11325:tid 11331] [client 158.158.73.245:62242] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "adwr7eCGj3EEJtCwa0PbogAAAQQ"]
[Mon Apr 13 07:34:05.968036 2026] [:error] [pid 34048:tid 34072] [client 158.158.73.245:59483] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "adwr7fSiQ_PJjlY5EhwUGAAAANY"]
[Mon Apr 13 07:34:06.546449 2026] [:error] [pid 33943:tid 34010] [client 158.158.73.245:59523] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "adwr7qyoXuZjocnxM5Gd-QAAAIQ"]
[Mon Apr 13 07:34:07.033862 2026] [:error] [pid 11325:tid 11339] [client 158.158.73.245:59490] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/cache.php"] [unique_id "adwr7-CGj3EEJtCwa0PbqQAAAQw"]
[Mon Apr 13 07:34:07.614448 2026] [:error] [pid 11325:tid 11343] [client 158.158.73.245:59510] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "adwr7-CGj3EEJtCwa0PbrwAAARA"]
[Mon Apr 13 07:34:08.136229 2026] [:error] [pid 11325:tid 11329] [client 158.158.73.245:59582] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "adwr8OCGj3EEJtCwa0PbsQAAAQI"]
[Mon Apr 13 07:34:08.638867 2026] [:error] [pid 11325:tid 11350] [client 158.158.73.245:55165] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "adwr8OCGj3EEJtCwa0PbtAAAARc"]
[Mon Apr 13 07:34:09.169767 2026] [:error] [pid 33943:tid 34017] [client 158.158.73.245:59471] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "adwr8ayoXuZjocnxM5Gd_AAAAIs"]
[Mon Apr 13 07:34:09.649451 2026] [:error] [pid 11325:tid 11348] [client 158.158.73.245:55147] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "adwr8eCGj3EEJtCwa0PbuQAAARU"]
[Mon Apr 13 07:34:10.136459 2026] [:error] [pid 11325:tid 11346] [client 158.158.73.245:55099] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "adwr8uCGj3EEJtCwa0PbuwAAARM"]
[Mon Apr 13 07:34:10.633670 2026] [:error] [pid 33941:tid 33959] [client 158.158.73.245:62173] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "adwr8m_NKERAxgG-rYNUOwAAAAg"]
[Mon Apr 13 07:34:11.160879 2026] [:error] [pid 33941:tid 33970] [client 158.158.73.245:62244] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/XX.php"] [unique_id "adwr82_NKERAxgG-rYNUPQAAABM"]
[Mon Apr 13 07:34:11.822497 2026] [:error] [pid 33941:tid 33950] [client 158.158.73.245:59549] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwr82_NKERAxgG-rYNUPgAAAAA"]
[Mon Apr 13 07:34:12.701874 2026] [:error] [pid 33943:tid 34023] [client 158.158.73.245:59461] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwr9KyoXuZjocnxM5GeBgAAAJE"]
[Mon Apr 13 07:34:13.227559 2026] [:error] [pid 33942:tid 33996] [client 158.158.73.245:59561] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwr9RNHe8geO_lMeFbEMAAAAFE"]
[Mon Apr 13 07:34:13.834903 2026] [:error] [pid 33942:tid 33984] [client 158.158.73.245:59502] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fm.php/sts.php"] [unique_id "adwr9RNHe8geO_lMeFbENQAAAEU"]
[Mon Apr 13 07:34:14.445073 2026] [:error] [pid 33941:tid 33963] [client 158.158.73.245:59546] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwr9m_NKERAxgG-rYNUQgAAAAw"]
[Mon Apr 13 07:34:14.970744 2026] [:error] [pid 33943:tid 34029] [client 158.158.73.245:59547] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwr9qyoXuZjocnxM5GeDwAAAJc"]
[Mon Apr 13 07:34:15.507069 2026] [:error] [pid 33942:tid 34003] [client 158.158.73.245:55113] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwr9xNHe8geO_lMeFbEQAAAAFg"]
[Mon Apr 13 07:34:16.140100 2026] [:error] [pid 33942:tid 33999] [client 158.158.73.245:59484] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/cloud.php"] [unique_id "adwr-BNHe8geO_lMeFbERAAAAFQ"]
[Mon Apr 13 07:34:16.688040 2026] [:error] [pid 11325:tid 11342] [client 158.158.73.245:59569] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "adwr-OCGj3EEJtCwa0PbvQAAAQ8"]
[Mon Apr 13 07:34:17.347962 2026] [:error] [pid 11325:tid 11349] [client 158.158.73.245:55080] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "adwr-eCGj3EEJtCwa0PbvgAAARY"]
[Mon Apr 13 07:34:17.894181 2026] [:error] [pid 33943:tid 34017] [client 158.158.73.245:55106] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "adwr-ayoXuZjocnxM5GeEwAAAIs"]
[Mon Apr 13 07:34:18.504974 2026] [:error] [pid 11325:tid 11350] [client 158.158.73.245:59468] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owlmailer.php"] [unique_id "adwr-uCGj3EEJtCwa0PbwgAAARc"]
[Mon Apr 13 07:34:19.030927 2026] [:error] [pid 11325:tid 11339] [client 158.158.73.245:55058] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "adwr--CGj3EEJtCwa0PbxgAAAQw"]
[Mon Apr 13 07:34:19.527612 2026] [:error] [pid 11325:tid 11332] [client 158.158.73.245:59463] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "adwr--CGj3EEJtCwa0PbyQAAAQU"]
[Mon Apr 13 07:34:20.059120 2026] [:error] [pid 33943:tid 34018] [client 158.158.73.245:59578] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "adwr_KyoXuZjocnxM5GeFAAAAIw"]
[Mon Apr 13 07:34:20.612812 2026] [:error] [pid 33942:tid 33979] [client 158.158.73.245:59573] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/F0x.php"] [unique_id "adwr_BNHe8geO_lMeFbESgAAAEA"]
[Mon Apr 13 07:34:21.227543 2026] [:error] [pid 34048:tid 34055] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/rlpc.php
[Mon Apr 13 07:34:21.708194 2026] [:error] [pid 34048:tid 34058] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/sale.php
[Mon Apr 13 07:34:21.953272 2026] [:error] [pid 34048:tid 34050] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/ran.php
[Mon Apr 13 07:34:22.207597 2026] [:error] [pid 34048:tid 34074] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/k90.php
[Mon Apr 13 07:34:22.456716 2026] [:error] [pid 34048:tid 34063] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/taff.php
[Mon Apr 13 07:34:22.698480 2026] [:error] [pid 34048:tid 34073] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Mon Apr 13 07:34:22.939357 2026] [:error] [pid 34048:tid 34071] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Mon Apr 13 07:34:23.181651 2026] [:error] [pid 34048:tid 34057] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/ssxsl.php
[Mon Apr 13 07:34:23.422607 2026] [:error] [pid 34048:tid 34051] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/AE5VAL.php
[Mon Apr 13 07:34:23.663245 2026] [:error] [pid 34048:tid 34072] [client 158.158.73.245:59536] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Mon Apr 13 07:34:23.905582 2026] [:error] [pid 34048:tid 34067] [client 158.158.73.245:59536] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "adwr__SiQ_PJjlY5EhwUOgAAANE"]
[Mon Apr 13 07:34:24.378487 2026] [:error] [pid 33942:tid 33984] [client 158.158.73.245:62248] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "adwsABNHe8geO_lMeFbEUgAAAEU"]
[Mon Apr 13 07:34:24.905218 2026] [:error] [pid 34048:tid 34069] [client 158.158.73.245:59532] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "adwsAPSiQ_PJjlY5EhwUPAAAANM"]
[Mon Apr 13 07:34:25.410319 2026] [:error] [pid 33943:tid 34011] [client 158.158.73.245:55149] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gely.php"] [unique_id "adwsAayoXuZjocnxM5GeGAAAAIU"]
[Mon Apr 13 07:34:25.918018 2026] [:error] [pid 33943:tid 34022] [client 158.158.73.245:55108] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsAayoXuZjocnxM5GeGgAAAJA"]
[Mon Apr 13 07:34:26.414251 2026] [:error] [pid 33943:tid 34013] [client 158.158.73.245:62245] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsAqyoXuZjocnxM5GeGwAAAIc"]
[Mon Apr 13 07:34:26.919541 2026] [:error] [pid 33943:tid 34012] [client 158.158.73.245:55104] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsAqyoXuZjocnxM5GeHgAAAIY"]
[Mon Apr 13 07:34:27.462487 2026] [:error] [pid 11325:tid 11327] [client 158.158.73.245:59507] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsA-CGj3EEJtCwa0Pb1QAAAQA"]
[Mon Apr 13 07:34:27.995303 2026] [:error] [pid 11325:tid 11350] [client 158.158.73.245:55129] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "adwsA-CGj3EEJtCwa0Pb2AAAARc"]
[Mon Apr 13 07:34:28.490272 2026] [:error] [pid 33943:tid 34010] [client 158.158.73.245:55136] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "adwsBKyoXuZjocnxM5GeIQAAAIQ"]
[Mon Apr 13 07:34:29.051446 2026] [:error] [pid 33943:tid 34007] [client 158.158.73.245:55047] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "adwsBayoXuZjocnxM5GeIwAAAIE"]
[Mon Apr 13 07:34:29.742468 2026] [:error] [pid 33943:tid 34026] [client 158.158.73.245:59513] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagafif.php"] [unique_id "adwsBayoXuZjocnxM5GeJQAAAJQ"]
[Mon Apr 13 07:34:30.315809 2026] [:error] [pid 33943:tid 34024] [client 158.158.73.245:55141] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "adwsBqyoXuZjocnxM5GeKAAAAJI"]
[Mon Apr 13 07:34:30.901721 2026] [:error] [pid 11325:tid 11327] [client 158.158.73.245:55146] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "adwsBuCGj3EEJtCwa0Pb4AAAAQA"]
[Mon Apr 13 07:34:31.415601 2026] [:error] [pid 34048:tid 34065] [client 158.158.73.245:59497] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "adwsB_SiQ_PJjlY5EhwUSQAAAM8"]
[Mon Apr 13 07:34:31.956797 2026] [:error] [pid 11325:tid 11329] [client 158.158.73.245:59477] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trc.php"] [unique_id "adwsB-CGj3EEJtCwa0Pb5gAAAQI"]
[Mon Apr 13 07:34:32.436865 2026] [:error] [pid 33942:tid 33990] [client 158.158.73.245:59480] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "adwsCBNHe8geO_lMeFbEXgAAAEs"]
[Mon Apr 13 07:34:32.997147 2026] [:error] [pid 11325:tid 11351] [client 158.158.73.245:55090] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "adwsCOCGj3EEJtCwa0Pb7AAAARg"]
[Mon Apr 13 07:34:33.611120 2026] [:error] [pid 33943:tid 34029] [client 158.158.73.245:62209] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "adwsCayoXuZjocnxM5GeKwAAAJc"]
[Mon Apr 13 07:34:34.241013 2026] [:error] [pid 33942:tid 34002] [client 158.158.73.245:59492] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tesla1.php"] [unique_id "adwsChNHe8geO_lMeFbEYwAAAFc"]
[Mon Apr 13 07:34:34.921288 2026] [:error] [pid 33943:tid 34007] [client 158.158.73.245:62212] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "adwsCqyoXuZjocnxM5GeLQAAAIE"]
[Mon Apr 13 07:34:35.433047 2026] [:error] [pid 11325:tid 11335] [client 158.158.73.245:55130] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "adwsC-CGj3EEJtCwa0Pb8QAAAQg"]
[Mon Apr 13 07:34:35.981597 2026] [:error] [pid 33941:tid 33960] [client 158.158.73.245:59555] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "adwsC2_NKERAxgG-rYNUVQAAAAk"]
[Mon Apr 13 07:34:36.587446 2026] [:error] [pid 34048:tid 34056] [client 158.158.73.245:55127] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aks.php"] [unique_id "adwsDPSiQ_PJjlY5EhwUTwAAAMY"]
[Mon Apr 13 07:34:37.123141 2026] [:error] [pid 33943:tid 34009] [client 158.158.73.245:59494] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "adwsDayoXuZjocnxM5GeMQAAAIM"]
[Mon Apr 13 07:34:37.670246 2026] [:error] [pid 11325:tid 11349] [client 158.158.73.245:55140] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "adwsDeCGj3EEJtCwa0Pb-AAAARY"]
[Mon Apr 13 07:34:38.160282 2026] [:error] [pid 11325:tid 11330] [client 158.158.73.245:62241] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "adwsDuCGj3EEJtCwa0Pb-wAAAQM"]
[Mon Apr 13 07:34:38.677867 2026] [:error] [pid 11325:tid 11344] [client 158.158.73.245:51402] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pomo/l.php"] [unique_id "adwsDuCGj3EEJtCwa0Pb_gAAARE"]
[Mon Apr 13 07:34:39.203838 2026] [:error] [pid 33942:tid 33981] [client 158.158.73.245:59551] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "adwsDxNHe8geO_lMeFbEaAAAAEI"]
[Mon Apr 13 07:34:39.762432 2026] [:error] [pid 33943:tid 34029] [client 158.158.73.245:59496] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "adwsD6yoXuZjocnxM5GeNgAAAJc"]
[Mon Apr 13 07:34:40.294495 2026] [:error] [pid 33943:tid 34010] [client 158.158.73.245:55056] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "adwsEKyoXuZjocnxM5GeNwAAAIQ"]
[Mon Apr 13 07:34:40.782499 2026] [:error] [pid 33943:tid 34027] [client 158.158.73.245:55152] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ase.php"] [unique_id "adwsEKyoXuZjocnxM5GeOgAAAJU"]
[Mon Apr 13 07:34:41.288904 2026] [:error] [pid 11325:tid 11345] [client 158.158.73.245:59478] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "adwsEeCGj3EEJtCwa0PcCAAAARI"]
[Mon Apr 13 07:34:41.812437 2026] [:error] [pid 33943:tid 34006] [client 158.158.73.245:55045] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "adwsEayoXuZjocnxM5GePAAAAIA"]
[Mon Apr 13 07:34:42.295688 2026] [:error] [pid 33942:tid 33987] [client 158.158.73.245:62254] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "adwsEhNHe8geO_lMeFbEbAAAAEg"]
[Mon Apr 13 07:34:42.801991 2026] [:error] [pid 34048:tid 34059] [client 158.158.73.245:59516] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktgob.php"] [unique_id "adwsEvSiQ_PJjlY5EhwUVQAAAMk"]
[Mon Apr 13 07:34:43.349707 2026] [:error] [pid 33942:tid 34002] [client 158.158.73.245:59493] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "adwsExNHe8geO_lMeFbEbQAAAFc"]
[Mon Apr 13 07:34:43.830306 2026] [:error] [pid 33943:tid 34019] [client 158.158.73.245:55148] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "adwsE6yoXuZjocnxM5GePgAAAI0"]
[Mon Apr 13 07:34:44.340281 2026] [:error] [pid 33943:tid 34008] [client 158.158.73.245:62164] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "adwsFKyoXuZjocnxM5GePwAAAII"]
[Mon Apr 13 07:34:44.828891 2026] [:error] [pid 33943:tid 34020] [client 158.158.73.245:55072] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "adwsFKyoXuZjocnxM5GeQAAAAI4"]
[Mon Apr 13 07:34:45.304286 2026] [:error] [pid 33943:tid 34029] [client 158.158.73.245:55093] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "adwsFayoXuZjocnxM5GeQgAAAJc"]
[Mon Apr 13 07:34:45.788208 2026] [:error] [pid 33941:tid 33971] [client 158.158.73.245:55110] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "adwsFW_NKERAxgG-rYNUYAAAABQ"]
[Mon Apr 13 07:34:46.271711 2026] [:error] [pid 33941:tid 33973] [client 158.158.73.245:51393] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "adwsFm_NKERAxgG-rYNUYQAAABY"]
[Mon Apr 13 07:34:46.759856 2026] [:error] [pid 11325:tid 11336] [client 158.158.73.245:59465] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/afile.php"] [unique_id "adwsFuCGj3EEJtCwa0PcDAAAAQk"]
[Mon Apr 13 07:34:47.333860 2026] [:error] [pid 11325:tid 11346] [client 158.158.73.245:51408] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsF-CGj3EEJtCwa0PcDwAAARM"]
[Mon Apr 13 07:34:47.807677 2026] [:error] [pid 33943:tid 34007] [client 158.158.73.245:59460] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsF6yoXuZjocnxM5GeRwAAAIE"]
[Mon Apr 13 07:34:48.292196 2026] [:error] [pid 33942:tid 33985] [client 158.158.73.245:59567] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsGBNHe8geO_lMeFbEcwAAAEY"]
[Mon Apr 13 07:34:48.764359 2026] [:error] [pid 33941:tid 33953] [client 158.158.73.245:55052] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xBrain.php"] [unique_id "adwsGG_NKERAxgG-rYNUZQAAAAM"]
[Mon Apr 13 07:34:49.320277 2026] [:error] [pid 33943:tid 34030] [client 158.158.73.245:62151] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "adwsGayoXuZjocnxM5GeSQAAAJg"]
[Mon Apr 13 07:34:49.794568 2026] [:error] [pid 11325:tid 11341] [client 158.158.73.245:55062] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "adwsGeCGj3EEJtCwa0PcFwAAAQ4"]
[Mon Apr 13 07:34:50.295367 2026] [:error] [pid 11325:tid 11340] [client 158.158.73.245:51426] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "adwsGuCGj3EEJtCwa0PcGQAAAQ0"]
[Mon Apr 13 07:34:50.780654 2026] [:error] [pid 11325:tid 11345] [client 158.158.73.245:62175] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yunu.php"] [unique_id "adwsGuCGj3EEJtCwa0PcHAAAARI"]
[Mon Apr 13 07:34:51.266256 2026] [:error] [pid 11325:tid 11343] [client 158.158.73.245:55138] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "adwsG-CGj3EEJtCwa0PcHwAAARA"]
[Mon Apr 13 07:34:51.777335 2026] [:error] [pid 34048:tid 34071] [client 158.158.73.245:62265] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "adwsG_SiQ_PJjlY5EhwUYgAAANU"]
[Mon Apr 13 07:34:52.280510 2026] [:error] [pid 11325:tid 11340] [client 158.158.73.245:59562] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "adwsHOCGj3EEJtCwa0PcLQAAAQ0"]
[Mon Apr 13 07:34:52.768669 2026] [:error] [pid 33943:tid 34018] [client 158.158.73.245:59479] [client 158.158.73.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lexy.php"] [unique_id "adwsHKyoXuZjocnxM5GeTwAAAIw"]
[Mon Apr 13 07:37:18.561351 2026] [:error] [pid 11325:tid 11329] [client 150.109.230.210:48898] [client 150.109.230.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adwsruCGj3EEJtCwa0Pd1QAAAQI"]
[Mon Apr 13 08:12:28.331572 2026] [:error] [pid 63311:tid 63384] [client 122.51.236.174:59700] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adw07KHjrGN1MqBCVFkkgAAAAI0"]
[Mon Apr 13 09:56:54.932618 2026] [:error] [pid 63406:tid 63424] [client 20.104.245.70:56696] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 09:56:55.146910 2026] [:error] [pid 63406:tid 63435] [client 20.104.245.70:56696] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 09:56:55.361516 2026] [:error] [pid 63406:tid 63427] [client 20.104.245.70:56696] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 09:56:55.576381 2026] [:error] [pid 63406:tid 63428] [client 20.104.245.70:56696] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 09:56:55.791066 2026] [:error] [pid 63406:tid 63413] [client 20.104.245.70:56696] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 09:56:56.009964 2026] [:error] [pid 63406:tid 63433] [client 20.104.245.70:56696] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 10:17:17.684099 2026] [:error] [pid 63310:tid 63367] [client 185.61.223.125:48541] [client 185.61.223.125] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users"] [unique_id "adxSLXoXpRU5ztmwPjLR9QAAAFc"], referer: https://www.google.com
[Mon Apr 13 10:17:24.840087 2026] [:error] [pid 63309:tid 63315] [client 185.61.223.125:22401] [client 185.61.223.125] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adxSNEpIKZ10weXpf0W1uQAAAAI"]
[Mon Apr 13 10:17:24.840427 2026] [:error] [pid 63309:tid 63315] [client 185.61.223.125:22401] [client 185.61.223.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.61.223.125, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adxSNEpIKZ10weXpf0W1uQAAAAI"]
[Mon Apr 13 10:17:24.844666 2026] [:error] [pid 63309:tid 63315] [client 185.61.223.125:22401] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 10:17:26.786693 2026] [:error] [pid 63310:tid 63368] [client 185.61.223.125:28639] [client 185.61.223.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.61.223.125, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "adxSNnoXpRU5ztmwPjLSBQAAAFg"], referer: https://www.google.com
[Mon Apr 13 10:17:26.790212 2026] [:error] [pid 63310:tid 63368] [client 185.61.223.125:28639] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Mon Apr 13 10:17:29.342019 2026] [:error] [pid 7228:tid 7251] [client 185.61.223.125:13135] [client 185.61.223.125] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.61.223.125, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "adxSOQEnn1dQrOSHHNVOxQAAARU"], referer: https://www.google.com
[Mon Apr 13 10:17:29.346253 2026] [:error] [pid 7228:tid 7251] [client 185.61.223.125:13135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Mon Apr 13 11:26:55.336428 2026] [:error] [pid 57183:tid 57199] [client 20.104.245.70:34580] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 11:26:55.544764 2026] [:error] [pid 57183:tid 57191] [client 20.104.245.70:34580] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 11:26:55.753503 2026] [:error] [pid 57183:tid 57187] [client 20.104.245.70:34580] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Mon Apr 13 11:26:55.961890 2026] [:error] [pid 57183:tid 57209] [client 20.104.245.70:34580] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 11:26:56.169782 2026] [:error] [pid 57183:tid 57205] [client 20.104.245.70:34580] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 11:26:56.380294 2026] [:error] [pid 57183:tid 57203] [client 20.104.245.70:34580] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 11:56:37.562908 2026] [:error] [pid 63309:tid 63330] [client 136.107.200.121:49548] [client 136.107.200.121] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.107.200.121, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adxpdUpIKZ10weXpf0XLHwAAABE"]
[Mon Apr 13 11:56:37.567410 2026] [:error] [pid 63309:tid 63330] [client 136.107.200.121:49548] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 11:56:40.185582 2026] [:error] [pid 63309:tid 63318] [client 136.107.200.121:49548] [client 136.107.200.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adxpeEpIKZ10weXpf0XLLQAAAAU"]
[Mon Apr 13 11:56:40.700983 2026] [:error] [pid 63309:tid 63325] [client 136.107.200.121:54353] [client 136.107.200.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adxpeEpIKZ10weXpf0XLLgAAAAw"]
[Mon Apr 13 11:56:41.158258 2026] [:error] [pid 63311:tid 63385] [client 136.107.200.121:61987] [client 136.107.200.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adxpeaHjrGN1MqBCVFl4tQAAAI4"]
[Mon Apr 13 11:56:41.604861 2026] [:error] [pid 63309:tid 63328] [client 136.107.200.121:55116] [client 136.107.200.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adxpeUpIKZ10weXpf0XLMQAAAA8"]
[Mon Apr 13 11:56:42.071059 2026] [:error] [pid 63310:tid 63348] [client 136.107.200.121:57158] [client 136.107.200.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adxpenoXpRU5ztmwPjLq_gAAAEQ"]
[Mon Apr 13 11:56:42.507773 2026] [:error] [pid 63311:tid 63373] [client 136.107.200.121:59540] [client 136.107.200.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adxpeqHjrGN1MqBCVFl4vQAAAII"]
[Mon Apr 13 11:56:42.952788 2026] [:error] [pid 63406:tid 63430] [client 136.107.200.121:52602] [client 136.107.200.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adxperHZEIkQ0Zmgp5pxdQAAANM"]
[Mon Apr 13 12:11:53.867511 2026] [:error] [pid 57183:tid 57196] [client 129.226.174.80:46004] [client 129.226.174.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adxtCTDO3t8R5NaxzYQn_AAAAUs"]
[Mon Apr 13 13:10:42.050329 2026] [:error] [pid 57183:tid 57200] [client 20.104.245.70:58048] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx60jDO3t8R5NaxzYRDXwAAAU8"]
[Mon Apr 13 13:10:42.735567 2026] [:error] [pid 63309:tid 63323] [client 20.104.245.70:58056] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx60kpIKZ10weXpf0XYzQAAAAo"]
[Mon Apr 13 13:10:43.457781 2026] [:error] [pid 63406:tid 63423] [client 20.104.245.70:57990] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx607HZEIkQ0Zmgp5qNFAAAAMw"]
[Mon Apr 13 13:10:44.495983 2026] [:error] [pid 63311:tid 63393] [client 20.104.245.70:58083] [client 20.104.245.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx61KHjrGN1MqBCVFmMsgAAAJY"]
[Mon Apr 13 13:43:45.895322 2026] [:error] [pid 63406:tid 63431] [client 8.228.104.225:58692] [client 8.228.104.225] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.228.104.225, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "adyCkbHZEIkQ0Zmgp5qczAAAANQ"]
[Mon Apr 13 13:43:45.899748 2026] [:error] [pid 63406:tid 63431] [client 8.228.104.225:58692] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 13:43:48.461203 2026] [:error] [pid 63406:tid 63417] [client 8.228.104.225:58692] [client 8.228.104.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adyClLHZEIkQ0Zmgp5qc2AAAAMY"]
[Mon Apr 13 13:43:48.910632 2026] [:error] [pid 57183:tid 57194] [client 8.228.104.225:50766] [client 8.228.104.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adyClDDO3t8R5NaxzYRVGQAAAUk"]
[Mon Apr 13 13:43:49.368181 2026] [:error] [pid 7228:tid 7232] [client 8.228.104.225:57747] [client 8.228.104.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adyClQEnn1dQrOSHHNXiSwAAAQI"]
[Mon Apr 13 13:43:49.820867 2026] [:error] [pid 7228:tid 7252] [client 8.228.104.225:49455] [client 8.228.104.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adyClQEnn1dQrOSHHNXiTAAAARY"]
[Mon Apr 13 13:43:50.250870 2026] [:error] [pid 57183:tid 57195] [client 8.228.104.225:64049] [client 8.228.104.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adyCljDO3t8R5NaxzYRVHwAAAUo"]
[Mon Apr 13 13:43:50.686087 2026] [:error] [pid 7228:tid 7239] [client 8.228.104.225:53570] [client 8.228.104.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adyClgEnn1dQrOSHHNXiUQAAAQk"]
[Mon Apr 13 13:43:51.134369 2026] [:error] [pid 63311:tid 63383] [client 8.228.104.225:53602] [client 8.228.104.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adyCl6HjrGN1MqBCVFmVngAAAIw"]
[Mon Apr 13 14:47:59.995317 2026] [:error] [pid 7228:tid 7237] [client 223.244.35.77:41352] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adyRnwEnn1dQrOSHHNUWuQAAAQc"]
[Mon Apr 13 20:38:03.247118 2026] [:error] [pid 63311:tid 63394] [client 103.77.107.178:53012] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "adzjq6HjrGN1MqBCVFkA1wAAAJc"]
[Mon Apr 13 20:38:03.457452 2026] [:error] [pid 63406:tid 63415] [client 103.77.107.178:53026] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzjq7HZEIkQ0Zmgp5qo8gAAAMQ"]
[Mon Apr 13 21:04:32.784785 2026] [:error] [pid 63309:tid 63323] [client 43.153.47.201:50450] [client 43.153.47.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adzp4EpIKZ10weXpf0Us2wAAAAo"]
[Mon Apr 13 21:05:43.779696 2026] [:error] [pid 57183:tid 57209] [client 111.172.249.49:35509] [client 111.172.249.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "adzqJzDO3t8R5NaxzYRJqAAAAVg"]
[Mon Apr 13 22:33:19.266542 2026] [:error] [pid 57183:tid 57204] [client 43.165.69.68:42612] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "adz-rzDO3t8R5NaxzYR6ZAAAAVM"]
[Tue Apr 14 04:10:05.938029 2026] [:error] [pid 19689:tid 19755] [client 221.229.106.25:41254] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ad1NnZWU15arjG3aJyQ-qQAAAIA"]
[Tue Apr 14 04:43:29.751368 2026] [:error] [pid 19688:tid 19735] [client 43.164.197.224:46398] [client 43.164.197.224] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ad1VcYHoi57o76xPstKy5gAAAEc"]
[Tue Apr 14 10:54:38.132065 2026] [:error] [pid 35713:tid 35722] [client 43.131.39.179:53330] [client 43.131.39.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad2sbq6-hhx6ZepqOSkSgQAAAMY"]
[Tue Apr 14 11:12:18.596587 2026] [:error] [pid 37226:tid 37241] [client 43.165.69.68:43196] [client 43.165.69.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad2wkpOA5-IQ0IVmQCr8tAAAAU0"]
[Tue Apr 14 11:26:05.544257 2026] [:error] [pid 4902:tid 4912] [client 14.39.136.85:1235] [client 14.39.136.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 14.39.136.85, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ad2zzYv8vJvl9lGy39hGBgAAAYg"]
[Tue Apr 14 11:26:05.549360 2026] [:error] [pid 4902:tid 4912] [client 14.39.136.85:1235] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 14 11:42:17.418437 2026] [:error] [pid 37048:tid 37064] [client 182.42.110.255:46257] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad23mZ52Bo1OyzeXo_zGwwAAAQ4"]
[Tue Apr 14 12:14:49.470760 2026] [:error] [pid 37226:tid 37243] [client 212.47.78.118:53689] [client 212.47.78.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ad2_OZOA5-IQ0IVmQCoR6wAAAU8"]
[Tue Apr 14 12:14:50.046616 2026] [:error] [pid 4902:tid 4916] [client 212.47.78.118:56586] [client 212.47.78.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ad2_Oov8vJvl9lGy39hN_QAAAYw"]
[Tue Apr 14 12:14:50.595397 2026] [:error] [pid 37048:tid 37066] [client 212.47.78.118:63950] [client 212.47.78.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "ad2_Op52Bo1OyzeXo_zN4wAAARA"]
[Tue Apr 14 16:39:50.424966 2026] [:error] [pid 60074:tid 60077] [client 185.238.231.10:52185] [client 185.238.231.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.238.231.10, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ad39VutqnEmNU9vpHCkV9gAAAME"]
[Tue Apr 14 16:39:50.427447 2026] [:error] [pid 60074:tid 60077] [client 185.238.231.10:52185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 14 18:06:20.471375 2026] [:error] [pid 59986:tid 60025] [client 114.80.36.40:41026] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ad4RnJ6axKeW6bX4H7clKQAAAEU"]
[Tue Apr 14 18:59:17.709210 2026] [:error] [pid 22177:tid 22201] [client 43.133.14.237:34504] [client 43.133.14.237] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ad4eBYTVeJSXHDIlEDtcjgAAARY"]
[Tue Apr 14 23:23:30.849490 2026] [:error] [pid 3810:tid 3832] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Apr 14 23:23:31.061592 2026] [:error] [pid 3810:tid 3814] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/mamzi.php
[Tue Apr 14 23:23:31.408776 2026] [:error] [pid 3810:tid 3820] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/lef.php
[Tue Apr 14 23:23:31.640626 2026] [:error] [pid 3810:tid 3825] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/new2.php
[Tue Apr 14 23:23:31.873043 2026] [:error] [pid 3810:tid 3837] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/fallbackapi.php
[Tue Apr 14 23:23:32.100894 2026] [:error] [pid 3810:tid 3833] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-0fsdhv.php
[Tue Apr 14 23:23:32.580066 2026] [:error] [pid 3810:tid 3836] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/rnenu.php
[Tue Apr 14 23:23:32.791294 2026] [:error] [pid 3810:tid 3831] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/congeree.php
[Tue Apr 14 23:23:33.021156 2026] [:error] [pid 3810:tid 3821] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Tue Apr 14 23:23:33.257646 2026] [:error] [pid 3810:tid 3834] [client 20.151.227.112:1981] File does not exist: /usr/local/apache/htdocs/suspended-page/jatuh.php
[Tue Apr 14 23:23:33.493147 2026] [:error] [pid 3810:tid 3837] [client 20.151.227.112:1981] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ad5b9cqc5XaYZhFXVGfbXgAAAZg"]
[Tue Apr 14 23:23:44.058808 2026] [:error] [pid 60074:tid 60090] [client 20.151.227.112:1980] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ad5cAOtqnEmNU9vpHCnQ8QAAAM4"]
[Tue Apr 14 23:23:45.822666 2026] [:error] [pid 3778:tid 3788] [client 20.151.227.112:1933] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ad5cARx5DfpNmYF_PaEOHAAAAUg"]
[Tue Apr 14 23:23:46.718071 2026] [:error] [pid 59985:tid 59994] [client 20.151.227.112:1921] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "ad5cAugHaxkvLE6V1kl6uQAAAAE"]
[Tue Apr 14 23:23:47.971333 2026] [:error] [pid 3810:tid 3824] [client 20.151.227.112:1667] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/multirole.php"] [unique_id "ad5cA8qc5XaYZhFXVGfbhAAAAYs"]
[Tue Apr 14 23:23:50.961831 2026] [:error] [pid 59985:tid 59999] [client 20.151.227.112:1952] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/multirole.php"] [unique_id "ad5cBugHaxkvLE6V1kl6zwAAAAY"]
[Tue Apr 14 23:23:51.764921 2026] [:error] [pid 59987:tid 60069] [client 20.151.227.112:1979] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/multirole.php"] [unique_id "ad5cB1Wpk-Tfi6_vLKpVOAAAAJY"]
[Tue Apr 14 23:23:52.203121 2026] [:error] [pid 59986:tid 60043] [client 20.151.227.112:1939] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/multirole.php"] [unique_id "ad5cCJ6axKeW6bX4H7fDBAAAAFc"]
[Tue Apr 14 23:23:53.375263 2026] [:error] [pid 3778:tid 3797] [client 20.151.227.112:1931] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "ad5cCRx5DfpNmYF_PaEOIQAAAVE"]
[Tue Apr 14 23:23:54.006094 2026] [:error] [pid 3810:tid 3831] [client 20.151.227.112:1975] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "ad5cCsqc5XaYZhFXVGfbiAAAAZI"]
[Tue Apr 14 23:23:54.577455 2026] [:error] [pid 59987:tid 60067] [client 20.151.227.112:1955] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "ad5cClWpk-Tfi6_vLKpVOwAAAJQ"]
[Tue Apr 14 23:23:55.139705 2026] [:error] [pid 3810:tid 3832] [client 20.151.227.112:1680] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "ad5cC8qc5XaYZhFXVGfbjAAAAZM"]
[Tue Apr 14 23:23:55.630148 2026] [:error] [pid 3778:tid 3788] [client 20.151.227.112:1945] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "ad5cCxx5DfpNmYF_PaEOJwAAAUg"]
[Tue Apr 14 23:23:56.175972 2026] [:error] [pid 3778:tid 3790] [client 20.151.227.112:1947] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "ad5cDBx5DfpNmYF_PaEOKQAAAUo"]
[Tue Apr 14 23:23:56.756793 2026] [:error] [pid 60074:tid 60098] [client 20.151.227.112:1949] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "ad5cDOtqnEmNU9vpHCnRCAAAANY"]
[Tue Apr 14 23:23:57.271786 2026] [:error] [pid 60074:tid 60086] [client 20.151.227.112:1936] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "ad5cDetqnEmNU9vpHCnRCQAAAMo"]
[Tue Apr 14 23:23:58.057896 2026] [:error] [pid 3778:tid 3792] [client 20.151.227.112:1935] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cobaini.php"] [unique_id "ad5cDhx5DfpNmYF_PaEOLwAAAUw"]
[Tue Apr 14 23:23:58.568349 2026] [:error] [pid 59987:tid 60050] [client 20.151.227.112:1723] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cobaini.php"] [unique_id "ad5cDlWpk-Tfi6_vLKpVPgAAAIM"]
[Tue Apr 14 23:23:59.283683 2026] [:error] [pid 3778:tid 3798] [client 20.151.227.112:1940] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cobaini.php"] [unique_id "ad5cDxx5DfpNmYF_PaEOMwAAAVI"]
[Tue Apr 14 23:24:00.037170 2026] [:error] [pid 3778:tid 3780] [client 20.151.227.112:1943] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cobaini.php"] [unique_id "ad5cEBx5DfpNmYF_PaEOOQAAAUA"]
[Tue Apr 14 23:24:00.780629 2026] [:error] [pid 22177:tid 22203] [client 20.151.227.112:1668] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmp.php"] [unique_id "ad5cEITVeJSXHDIlEDuixQAAARg"]
[Tue Apr 14 23:24:01.314070 2026] [:error] [pid 3778:tid 3782] [client 20.151.227.112:1353] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmp.php"] [unique_id "ad5cERx5DfpNmYF_PaEOPgAAAUI"]
[Tue Apr 14 23:24:02.109368 2026] [:error] [pid 22177:tid 22199] [client 20.151.227.112:1669] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmp.php"] [unique_id "ad5cEoTVeJSXHDIlEDuizwAAARQ"]
[Tue Apr 14 23:24:02.940591 2026] [:error] [pid 60074:tid 60098] [client 20.151.227.112:1967] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mmp.php"] [unique_id "ad5cEutqnEmNU9vpHCnRGQAAANY"]
[Tue Apr 14 23:24:03.474215 2026] [:error] [pid 60074:tid 60100] [client 20.151.227.112:1689] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ad5cE-tqnEmNU9vpHCnRHAAAANg"]
[Tue Apr 14 23:24:04.103990 2026] [:error] [pid 60074:tid 60087] [client 20.151.227.112:1978] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ad5cFOtqnEmNU9vpHCnRHgAAAMs"]
[Tue Apr 14 23:24:04.803861 2026] [:error] [pid 60074:tid 60079] [client 20.151.227.112:1973] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ad5cFOtqnEmNU9vpHCnRIAAAAMM"]
[Tue Apr 14 23:24:05.760761 2026] [:error] [pid 3778:tid 3785] [client 20.151.227.112:1721] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "ad5cFRx5DfpNmYF_PaEOQQAAAUU"]
[Tue Apr 14 23:24:06.580922 2026] [:error] [pid 3778:tid 3782] [client 20.151.227.112:1944] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ad5cFhx5DfpNmYF_PaEORAAAAUI"]
[Tue Apr 14 23:24:07.423760 2026] [:error] [pid 3778:tid 3795] [client 20.151.227.112:1953] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ad5cFxx5DfpNmYF_PaEORgAAAU8"]
[Tue Apr 14 23:24:08.270578 2026] [:error] [pid 60074:tid 60083] [client 20.151.227.112:1664] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ad5cGOtqnEmNU9vpHCnRKgAAAMc"]
[Tue Apr 14 23:24:09.063806 2026] [:error] [pid 60074:tid 60078] [client 20.151.227.112:1965] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "ad5cGetqnEmNU9vpHCnRLgAAAMI"]
[Tue Apr 14 23:24:09.709183 2026] [:error] [pid 60074:tid 60089] [client 20.151.227.112:1679] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "ad5cGetqnEmNU9vpHCnRMgAAAM0"]
[Tue Apr 14 23:24:10.472665 2026] [:error] [pid 3778:tid 3802] [client 20.151.227.112:1958] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "ad5cGhx5DfpNmYF_PaEOSgAAAVY"]
[Tue Apr 14 23:24:11.222481 2026] [:error] [pid 22177:tid 22203] [client 20.151.227.112:1357] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "ad5cG4TVeJSXHDIlEDui6AAAARg"]
[Tue Apr 14 23:24:12.043870 2026] [:error] [pid 3778:tid 3786] [client 20.151.227.112:1712] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "ad5cHBx5DfpNmYF_PaEOUwAAAUY"]
[Tue Apr 14 23:24:12.725636 2026] [:error] [pid 3778:tid 3782] [client 20.151.227.112:1673] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "ad5cHBx5DfpNmYF_PaEOVgAAAUI"]
[Tue Apr 14 23:24:13.776430 2026] [:error] [pid 60074:tid 60079] [client 20.151.227.112:1678] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "ad5cHetqnEmNU9vpHCnRPQAAAMM"]
[Tue Apr 14 23:24:14.368855 2026] [:error] [pid 60074:tid 60094] [client 20.151.227.112:1682] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "ad5cHutqnEmNU9vpHCnRQAAAANI"]
[Tue Apr 14 23:24:14.806482 2026] [:error] [pid 3778:tid 3803] [client 20.151.227.112:1695] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "ad5cHhx5DfpNmYF_PaEOWQAAAVc"]
[Tue Apr 14 23:24:15.509280 2026] [:error] [pid 60074:tid 60079] [client 20.151.227.112:1677] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahaoi.php"] [unique_id "ad5cH-tqnEmNU9vpHCnRSgAAAMM"]
[Tue Apr 14 23:24:16.167413 2026] [:error] [pid 59986:tid 60041] [client 20.151.227.112:1948] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahaoi.php"] [unique_id "ad5cIJ6axKeW6bX4H7fDEAAAAFU"]
[Tue Apr 14 23:24:16.629981 2026] [:error] [pid 59986:tid 60039] [client 20.151.227.112:1964] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahaoi.php"] [unique_id "ad5cIJ6axKeW6bX4H7fDEwAAAFM"]
[Tue Apr 14 23:24:17.287829 2026] [:error] [pid 3810:tid 3828] [client 20.151.227.112:1969] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahaoi.php"] [unique_id "ad5cIcqc5XaYZhFXVGfbowAAAY8"]
[Tue Apr 14 23:24:17.912709 2026] [:error] [pid 3810:tid 3823] [client 20.151.227.112:1974] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bogles.php"] [unique_id "ad5cIcqc5XaYZhFXVGfbpgAAAYo"]
[Tue Apr 14 23:24:18.391691 2026] [:error] [pid 3810:tid 3837] [client 20.151.227.112:1675] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bogles.php"] [unique_id "ad5cIsqc5XaYZhFXVGfbqAAAAZg"]
[Tue Apr 14 23:24:19.200096 2026] [:error] [pid 22177:tid 22179] [client 20.151.227.112:1698] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bogles.php"] [unique_id "ad5cI4TVeJSXHDIlEDui7gAAAQA"]
[Tue Apr 14 23:24:19.705750 2026] [:error] [pid 59987:tid 60067] [client 20.151.227.112:1696] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bogles.php"] [unique_id "ad5cI1Wpk-Tfi6_vLKpVTwAAAJQ"]
[Tue Apr 14 23:24:20.182971 2026] [:error] [pid 3810:tid 3819] [client 20.151.227.112:1676] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ad5cJMqc5XaYZhFXVGfbrAAAAYY"]
[Tue Apr 14 23:24:20.640648 2026] [:error] [pid 3778:tid 3796] [client 20.151.227.112:1692] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ad5cJBx5DfpNmYF_PaEOXgAAAVA"]
[Tue Apr 14 23:24:21.210483 2026] [:error] [pid 22177:tid 22193] [client 20.151.227.112:1684] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ad5cJYTVeJSXHDIlEDui8wAAAQ4"]
[Tue Apr 14 23:24:21.835008 2026] [:error] [pid 59987:tid 60063] [client 20.151.227.112:1376] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ad5cJVWpk-Tfi6_vLKpVUwAAAJA"]
[Tue Apr 14 23:24:22.666040 2026] [:error] [pid 59987:tid 60066] [client 20.151.227.112:1928] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad5cJlWpk-Tfi6_vLKpVVgAAAJM"]
[Tue Apr 14 23:24:23.561697 2026] [:error] [pid 59987:tid 60064] [client 20.151.227.112:1972] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad5cJ1Wpk-Tfi6_vLKpVXAAAAJE"]
[Tue Apr 14 23:24:24.361815 2026] [:error] [pid 3810:tid 3822] [client 20.151.227.112:1693] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad5cKMqc5XaYZhFXVGfbsgAAAYk"]
[Tue Apr 14 23:24:27.635800 2026] [:error] [pid 3810:tid 3815] [client 20.151.227.112:1670] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad5cK8qc5XaYZhFXVGfbwAAAAYI"]
[Tue Apr 14 23:24:29.798689 2026] [:error] [pid 3778:tid 3799] [client 20.151.227.112:1686] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unloathness.php"] [unique_id "ad5cLRx5DfpNmYF_PaEOagAAAVM"]
[Tue Apr 14 23:24:32.062656 2026] [:error] [pid 3810:tid 3836] [client 20.151.227.112:1970] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unloathness.php"] [unique_id "ad5cMMqc5XaYZhFXVGfbzgAAAZc"]
[Tue Apr 14 23:24:33.292046 2026] [:error] [pid 59986:tid 60042] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/unloathness.php
[Tue Apr 14 23:24:33.572747 2026] [:error] [pid 59986:tid 60021] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/doo.php
[Tue Apr 14 23:24:33.845319 2026] [:error] [pid 59986:tid 60023] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Tue Apr 14 23:24:34.055262 2026] [:error] [pid 59986:tid 60039] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Tue Apr 14 23:24:34.263558 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/greateb.php
[Tue Apr 14 23:24:34.554406 2026] [:error] [pid 59986:tid 60026] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Apr 14 23:24:34.863233 2026] [:error] [pid 59986:tid 60037] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Tue Apr 14 23:24:35.071602 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/bjeni.php
[Tue Apr 14 23:24:35.544072 2026] [:error] [pid 59986:tid 60035] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/export.php
[Tue Apr 14 23:24:35.750909 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Tue Apr 14 23:24:36.053543 2026] [:error] [pid 59986:tid 60033] [client 20.151.227.112:1971] File does not exist: /usr/local/apache/htdocs/suspended-page/rrr.php
[Tue Apr 14 23:24:36.339192 2026] [:error] [pid 59986:tid 60036] [client 20.151.227.112:1971] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "ad5cNJ6axKeW6bX4H7fDOwAAAFA"]
[Tue Apr 14 23:24:36.908468 2026] [:error] [pid 3810:tid 3818] [client 20.151.227.112:1369] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "ad5cNMqc5XaYZhFXVGfb5QAAAYU"]
[Tue Apr 14 23:24:38.134527 2026] [:error] [pid 59985:tid 60017] [client 20.151.227.112:1681] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "ad5cNugHaxkvLE6V1kl65QAAABg"]
[Tue Apr 14 23:24:39.031034 2026] [:error] [pid 59985:tid 60007] [client 20.151.227.112:1724] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "ad5cN-gHaxkvLE6V1kl65gAAAA4"]
[Tue Apr 14 23:24:39.747126 2026] [:error] [pid 59986:tid 60039] [client 20.151.227.112:1360] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "ad5cN56axKeW6bX4H7fDQQAAAFM"]
[Tue Apr 14 23:24:40.438077 2026] [:error] [pid 60074:tid 60089] [client 20.151.227.112:1932] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "ad5cOOtqnEmNU9vpHCnRbAAAAM0"]
[Tue Apr 14 23:24:41.199285 2026] [:error] [pid 60074:tid 60078] [client 20.151.227.112:1937] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "ad5cOetqnEmNU9vpHCnRbgAAAMI"]
[Tue Apr 14 23:24:41.668706 2026] [:error] [pid 59986:tid 60034] [client 20.151.227.112:1690] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "ad5cOZ6axKeW6bX4H7fDRQAAAE4"]
[Tue Apr 14 23:24:42.143792 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1714] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "ad5cOp6axKeW6bX4H7fDSQAAAEs"]
[Tue Apr 14 23:24:43.637767 2026] [:error] [pid 59986:tid 60027] [client 20.151.227.112:1683] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "ad5cO56axKeW6bX4H7fDWAAAAEc"]
[Tue Apr 14 23:24:44.635904 2026] [:error] [pid 59985:tid 60016] [client 20.151.227.112:1685] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "ad5cPOgHaxkvLE6V1kl68AAAABc"]
[Tue Apr 14 23:24:45.291062 2026] [:error] [pid 3810:tid 3830] [client 20.151.227.112:1378] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-wlx.php"] [unique_id "ad5cPcqc5XaYZhFXVGfb_wAAAZE"]
[Tue Apr 14 23:24:46.273192 2026] [:error] [pid 60074:tid 60096] [client 20.151.227.112:1706] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvz89.php"] [unique_id "ad5cPutqnEmNU9vpHCnReAAAANQ"]
[Tue Apr 14 23:24:47.231651 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1346] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvz89.php"] [unique_id "ad5cP56axKeW6bX4H7fDZAAAAEs"]
[Tue Apr 14 23:24:47.942796 2026] [:error] [pid 3810:tid 3826] [client 20.151.227.112:1365] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvz89.php"] [unique_id "ad5cP8qc5XaYZhFXVGfcBgAAAY0"]
[Tue Apr 14 23:24:50.798967 2026] [:error] [pid 60074:tid 60079] [client 20.151.227.112:1956] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvz89.php"] [unique_id "ad5cQutqnEmNU9vpHCnRfQAAAMM"]
[Tue Apr 14 23:24:51.762884 2026] [:error] [pid 59986:tid 60030] [client 20.151.227.112:1722] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "ad5cQ56axKeW6bX4H7fDbAAAAEo"]
[Tue Apr 14 23:24:52.570643 2026] [:error] [pid 60074:tid 60096] [client 20.151.227.112:1352] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "ad5cROtqnEmNU9vpHCnRggAAANQ"]
[Tue Apr 14 23:24:53.368110 2026] [:error] [pid 3810:tid 3831] [client 20.151.227.112:1982] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "ad5cRcqc5XaYZhFXVGfcFAAAAZI"]
[Tue Apr 14 23:24:54.102588 2026] [:error] [pid 3810:tid 3813] [client 20.151.227.112:1968] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "ad5cRsqc5XaYZhFXVGfcGAAAAYA"]
[Tue Apr 14 23:24:55.025180 2026] [:error] [pid 3810:tid 3829] [client 20.151.227.112:1941] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl9.php"] [unique_id "ad5cR8qc5XaYZhFXVGfcGgAAAZA"]
[Tue Apr 14 23:24:55.560748 2026] [:error] [pid 22177:tid 22179] [client 20.151.227.112:1926] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl9.php"] [unique_id "ad5cR4TVeJSXHDIlEDujEQAAAQA"]
[Tue Apr 14 23:24:56.019713 2026] [:error] [pid 22177:tid 22182] [client 20.151.227.112:1366] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl9.php"] [unique_id "ad5cSITVeJSXHDIlEDujEgAAAQM"]
[Tue Apr 14 23:24:56.559431 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1925] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xl9.php"] [unique_id "ad5cSJ6axKeW6bX4H7fDbQAAAEs"]
[Tue Apr 14 23:24:57.397001 2026] [:error] [pid 59986:tid 60044] [client 20.151.227.112:1671] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "ad5cSZ6axKeW6bX4H7fDcgAAAFg"]
[Tue Apr 14 23:24:59.149335 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1344] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "ad5cS56axKeW6bX4H7fDdwAAAFI"]
[Tue Apr 14 23:24:59.983184 2026] [:error] [pid 60074:tid 60089] [client 20.151.227.112:1687] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "ad5cS-tqnEmNU9vpHCnRjwAAAM0"]
[Tue Apr 14 23:25:00.594230 2026] [:error] [pid 3810:tid 3819] [client 20.151.227.112:1725] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "ad5cTMqc5XaYZhFXVGfcJgAAAYY"]
[Tue Apr 14 23:25:01.217803 2026] [:error] [pid 3810:tid 3834] [client 20.151.227.112:1356] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ad5cTcqc5XaYZhFXVGfcKgAAAZU"]
[Tue Apr 14 23:25:01.816424 2026] [:error] [pid 60074:tid 60098] [client 20.151.227.112:1946] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ad5cTetqnEmNU9vpHCnRkQAAANY"]
[Tue Apr 14 23:25:02.387546 2026] [:error] [pid 3810:tid 3828] [client 20.151.227.112:4160] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ad5cTsqc5XaYZhFXVGfcMQAAAY8"]
[Tue Apr 14 23:25:03.024731 2026] [:error] [pid 3810:tid 3837] [client 20.151.227.112:1703] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ad5cT8qc5XaYZhFXVGfcNgAAAZg"]
[Tue Apr 14 23:25:04.055509 2026] [:error] [pid 60074:tid 60084] [client 20.151.227.112:1384] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad5cUOtqnEmNU9vpHCnRkwAAAMg"]
[Tue Apr 14 23:25:04.724640 2026] [:error] [pid 3810:tid 3830] [client 20.151.227.112:1717] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad5cUMqc5XaYZhFXVGfcPwAAAZE"]
[Tue Apr 14 23:25:05.259585 2026] [:error] [pid 59986:tid 60035] [client 20.151.227.112:4171] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad5cUZ6axKeW6bX4H7fDgAAAAE8"]
[Tue Apr 14 23:25:05.815042 2026] [:error] [pid 3778:tid 3802] [client 20.151.227.112:4174] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "ad5cURx5DfpNmYF_PaEOgwAAAVY"]
[Tue Apr 14 23:25:06.542768 2026] [:error] [pid 60074:tid 60094] [client 20.151.227.112:4199] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "ad5cUutqnEmNU9vpHCnRlAAAANI"]
[Tue Apr 14 23:25:07.371253 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1709] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "ad5cU56axKeW6bX4H7fDhQAAAEU"]
[Tue Apr 14 23:25:07.887587 2026] [:error] [pid 59986:tid 60027] [client 20.151.227.112:1374] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "ad5cU56axKeW6bX4H7fDjAAAAEc"]
[Tue Apr 14 23:25:08.705482 2026] [:error] [pid 59986:tid 60042] [client 20.151.227.112:1976] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-4sd6kt.php"] [unique_id "ad5cVJ6axKeW6bX4H7fDkAAAAFY"]
[Tue Apr 14 23:25:09.599337 2026] [:error] [pid 3778:tid 3781] [client 20.151.227.112:1345] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ad5cVRx5DfpNmYF_PaEOhQAAAUE"]
[Tue Apr 14 23:25:10.208269 2026] [:error] [pid 59987:tid 60071] [client 20.151.227.112:1963] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ad5cVlWpk-Tfi6_vLKpVeQAAAJg"]
[Tue Apr 14 23:25:11.263196 2026] [:error] [pid 3810:tid 3826] [client 20.151.227.112:1713] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ad5cV8qc5XaYZhFXVGfcSgAAAY0"]
[Tue Apr 14 23:25:11.930502 2026] [:error] [pid 59987:tid 60063] [client 20.151.227.112:1934] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ad5cV1Wpk-Tfi6_vLKpVfAAAAJA"]
[Tue Apr 14 23:25:12.432832 2026] [:error] [pid 60074:tid 60092] [client 20.151.227.112:1704] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disagrsxr.php"] [unique_id "ad5cWOtqnEmNU9vpHCnRnAAAANA"]
[Tue Apr 14 23:25:13.112208 2026] [:error] [pid 59987:tid 60052] [client 20.151.227.112:1392] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disagrsxr.php"] [unique_id "ad5cWVWpk-Tfi6_vLKpVfwAAAIU"]
[Tue Apr 14 23:25:13.785538 2026] [:error] [pid 3778:tid 3786] [client 20.151.227.112:1699] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disagrsxr.php"] [unique_id "ad5cWRx5DfpNmYF_PaEOiwAAAUY"]
[Tue Apr 14 23:25:14.383377 2026] [:error] [pid 3778:tid 3790] [client 20.151.227.112:1716] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/disagrsxr.php"] [unique_id "ad5cWhx5DfpNmYF_PaEOjQAAAUo"]
[Tue Apr 14 23:25:15.398445 2026] [:error] [pid 59986:tid 60022] [client 20.151.227.112:1719] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "ad5cW56axKeW6bX4H7fDnAAAAEI"]
[Tue Apr 14 23:25:16.083287 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:1954] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "ad5cXJ6axKeW6bX4H7fDoAAAAFQ"]
[Tue Apr 14 23:25:16.739121 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1688] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "ad5cXJ6axKeW6bX4H7fDowAAAEg"]
[Tue Apr 14 23:25:17.415364 2026] [:error] [pid 59986:tid 60043] [client 20.151.227.112:1929] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa1.php"] [unique_id "ad5cXZ6axKeW6bX4H7fDpgAAAFc"]
[Tue Apr 14 23:25:17.963857 2026] [:error] [pid 59986:tid 60032] [client 20.151.227.112:1923] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7W.php"] [unique_id "ad5cXZ6axKeW6bX4H7fDqgAAAEw"]
[Tue Apr 14 23:25:18.886608 2026] [:error] [pid 59986:tid 60036] [client 20.151.227.112:1349] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7W.php"] [unique_id "ad5cXp6axKeW6bX4H7fDrQAAAFA"]
[Tue Apr 14 23:25:19.921855 2026] [:error] [pid 59987:tid 60050] [client 20.151.227.112:4161] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7W.php"] [unique_id "ad5cX1Wpk-Tfi6_vLKpVjwAAAIM"]
[Tue Apr 14 23:25:20.654923 2026] [:error] [pid 59987:tid 60051] [client 20.151.227.112:1672] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x7W.php"] [unique_id "ad5cYFWpk-Tfi6_vLKpVkgAAAIQ"]
[Tue Apr 14 23:25:21.821929 2026] [:error] [pid 59987:tid 60066] [client 20.151.227.112:1405] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ad5cYVWpk-Tfi6_vLKpVlwAAAJM"]
[Tue Apr 14 23:25:22.617563 2026] [:error] [pid 59985:tid 59996] [client 20.151.227.112:4165] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ad5cYugHaxkvLE6V1kl6_AAAAAM"]
[Tue Apr 14 23:25:23.273617 2026] [:error] [pid 59985:tid 59995] [client 20.151.227.112:1375] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ad5cY-gHaxkvLE6V1kl6_wAAAAI"]
[Tue Apr 14 23:25:23.831457 2026] [:error] [pid 59985:tid 60008] [client 20.151.227.112:1701] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ad5cY-gHaxkvLE6V1kl7BAAAAA8"]
[Tue Apr 14 23:25:24.776550 2026] [:error] [pid 59987:tid 60055] [client 20.151.227.112:1407] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "ad5cZFWpk-Tfi6_vLKpVngAAAIg"]
[Tue Apr 14 23:25:25.821724 2026] [:error] [pid 59986:tid 60029] [client 20.151.227.112:1372] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "ad5cZZ6axKeW6bX4H7fDswAAAEk"]
[Tue Apr 14 23:25:26.543844 2026] [:error] [pid 3810:tid 3819] [client 20.151.227.112:1382] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "ad5cZsqc5XaYZhFXVGfcZAAAAYY"]
[Tue Apr 14 23:25:27.169268 2026] [:error] [pid 59986:tid 60022] [client 20.151.227.112:1385] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "ad5cZ56axKeW6bX4H7fDtgAAAEI"]
[Tue Apr 14 23:25:27.734413 2026] [:error] [pid 60074:tid 60095] [client 20.151.227.112:1961] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad5cZ-tqnEmNU9vpHCnRswAAANM"]
[Tue Apr 14 23:25:28.218291 2026] [:error] [pid 3778:tid 3790] [client 20.151.227.112:1977] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad5caBx5DfpNmYF_PaEOkQAAAUo"]
[Tue Apr 14 23:25:28.772777 2026] [:error] [pid 3778:tid 3801] [client 20.151.227.112:1922] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad5caBx5DfpNmYF_PaEOlQAAAVU"]
[Tue Apr 14 23:25:29.229253 2026] [:error] [pid 3810:tid 3817] [client 20.151.227.112:4201] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad5cacqc5XaYZhFXVGfcbQAAAYQ"]
[Tue Apr 14 23:25:30.207364 2026] [:error] [pid 3810:tid 3818] [client 20.151.227.112:1347] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes4.php"] [unique_id "ad5casqc5XaYZhFXVGfcdAAAAYU"]
[Tue Apr 14 23:25:30.714491 2026] [:error] [pid 22177:tid 22180] [client 20.151.227.112:1402] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes4.php"] [unique_id "ad5caoTVeJSXHDIlEDujNgAAAQE"]
[Tue Apr 14 23:25:31.175467 2026] [:error] [pid 59987:tid 60054] [client 20.151.227.112:4164] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes4.php"] [unique_id "ad5ca1Wpk-Tfi6_vLKpVpQAAAIc"]
[Tue Apr 14 23:25:31.680859 2026] [:error] [pid 59987:tid 60065] [client 20.151.227.112:4166] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes4.php"] [unique_id "ad5ca1Wpk-Tfi6_vLKpVpwAAAJI"]
[Tue Apr 14 23:25:33.382173 2026] [:error] [pid 59985:tid 60001] [client 20.151.227.112:1381] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "ad5cbegHaxkvLE6V1kl7DwAAAAg"]
[Tue Apr 14 23:25:34.121100 2026] [:error] [pid 59987:tid 60050] [client 20.151.227.112:1957] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "ad5cblWpk-Tfi6_vLKpVqgAAAIM"]
[Tue Apr 14 23:25:34.767323 2026] [:error] [pid 59985:tid 60002] [client 20.151.227.112:4178] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "ad5cbugHaxkvLE6V1kl7FAAAAAk"]
[Tue Apr 14 23:25:35.440421 2026] [:error] [pid 3778:tid 3785] [client 20.151.227.112:4174] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsc.php"] [unique_id "ad5cbxx5DfpNmYF_PaEOngAAAUU"]
[Tue Apr 14 23:25:36.148618 2026] [:error] [pid 59987:tid 60066] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Tue Apr 14 23:25:36.357249 2026] [:error] [pid 59987:tid 60057] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/zeal.php
[Tue Apr 14 23:25:36.564567 2026] [:error] [pid 59987:tid 60048] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Tue Apr 14 23:25:36.774283 2026] [:error] [pid 59987:tid 60059] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/lolz.php
[Tue Apr 14 23:25:36.981567 2026] [:error] [pid 59987:tid 60061] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Tue Apr 14 23:25:37.212789 2026] [:error] [pid 59987:tid 60065] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Tue Apr 14 23:25:37.440860 2026] [:error] [pid 59987:tid 60050] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Tue Apr 14 23:25:37.730638 2026] [:error] [pid 59987:tid 60062] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/rea889y.php
[Tue Apr 14 23:25:37.947157 2026] [:error] [pid 59987:tid 60047] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Tue Apr 14 23:25:38.154312 2026] [:error] [pid 59987:tid 60063] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/prosell2.php
[Tue Apr 14 23:25:38.428029 2026] [:error] [pid 59987:tid 60066] [client 20.151.227.112:1983] File does not exist: /usr/local/apache/htdocs/suspended-page/22name.php
[Tue Apr 14 23:25:38.633001 2026] [:error] [pid 59987:tid 60057] [client 20.151.227.112:1983] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs9.php"] [unique_id "ad5cclWpk-Tfi6_vLKpVwAAAAIo"]
[Tue Apr 14 23:25:39.124403 2026] [:error] [pid 59986:tid 60030] [client 20.151.227.112:1876] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs9.php"] [unique_id "ad5cc56axKeW6bX4H7fDugAAAEo"]
[Tue Apr 14 23:25:39.953799 2026] [:error] [pid 22177:tid 22191] [client 20.151.227.112:1710] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs9.php"] [unique_id "ad5cc4TVeJSXHDIlEDujPgAAAQw"]
[Tue Apr 14 23:25:40.666604 2026] [:error] [pid 59985:tid 60012] [client 20.151.227.112:1351] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs9.php"] [unique_id "ad5cdOgHaxkvLE6V1kl7FQAAABM"]
[Tue Apr 14 23:25:41.423344 2026] [:error] [pid 3778:tid 3792] [client 20.151.227.112:1370] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ad5cdRx5DfpNmYF_PaEOswAAAUw"]
[Tue Apr 14 23:25:43.731804 2026] [:error] [pid 59987:tid 60062] [client 20.151.227.112:1666] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ad5cd1Wpk-Tfi6_vLKpVxQAAAI8"]
[Tue Apr 14 23:25:45.636775 2026] [:error] [pid 3810:tid 3815] [client 20.151.227.112:1960] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ad5cecqc5XaYZhFXVGfclgAAAYI"]
[Tue Apr 14 23:25:50.069096 2026] [:error] [pid 3778:tid 3781] [client 20.151.227.112:1924] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ad5cfhx5DfpNmYF_PaEOwwAAAUE"]
[Tue Apr 14 23:25:54.077984 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1720] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2.php"] [unique_id "ad5cgp6axKeW6bX4H7fDywAAAEg"]
[Tue Apr 14 23:25:54.921625 2026] [:error] [pid 59986:tid 60043] [client 20.151.227.112:1951] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2.php"] [unique_id "ad5cgp6axKeW6bX4H7fDzgAAAFc"]
[Tue Apr 14 23:25:55.857333 2026] [:error] [pid 3778:tid 3788] [client 20.151.227.112:1920] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2.php"] [unique_id "ad5cgxx5DfpNmYF_PaEOywAAAUg"]
[Tue Apr 14 23:25:58.296163 2026] [:error] [pid 59986:tid 60042] [client 20.151.227.112:1674] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f2.php"] [unique_id "ad5chp6axKeW6bX4H7fD2AAAAFY"]
[Tue Apr 14 23:25:59.588337 2026] [:error] [pid 59986:tid 60037] [client 20.151.227.112:1726] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ad5ch56axKeW6bX4H7fD3gAAAFE"]
[Tue Apr 14 23:26:00.539813 2026] [:error] [pid 3778:tid 3795] [client 20.151.227.112:1962] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ad5ciBx5DfpNmYF_PaEO1QAAAU8"]
[Tue Apr 14 23:26:02.770890 2026] [:error] [pid 3810:tid 3821] [client 20.151.227.112:1715] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ad5cisqc5XaYZhFXVGfctAAAAYg"]
[Tue Apr 14 23:26:04.573181 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1354] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "ad5cjJ6axKeW6bX4H7fD5AAAAEU"]
[Tue Apr 14 23:26:05.282068 2026] [:error] [pid 59987:tid 60054] [client 20.151.227.112:1718] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shadow-bot.php"] [unique_id "ad5cjVWpk-Tfi6_vLKpV1AAAAIc"]
[Tue Apr 14 23:26:06.942214 2026] [:error] [pid 59985:tid 60014] [client 20.151.227.112:1404] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shadow-bot.php"] [unique_id "ad5cjugHaxkvLE6V1kl7IwAAABU"]
[Tue Apr 14 23:26:07.632866 2026] [:error] [pid 59987:tid 60056] [client 20.151.227.112:1359] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shadow-bot.php"] [unique_id "ad5cj1Wpk-Tfi6_vLKpV3QAAAIk"]
[Tue Apr 14 23:26:08.098382 2026] [:error] [pid 59987:tid 60064] [client 20.151.227.112:4181] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shadow-bot.php"] [unique_id "ad5ckFWpk-Tfi6_vLKpV3wAAAJE"]
[Tue Apr 14 23:26:08.882880 2026] [:error] [pid 22177:tid 22182] [client 20.151.227.112:1691] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ad5ckITVeJSXHDIlEDujVgAAAQM"]
[Tue Apr 14 23:26:09.948925 2026] [:error] [pid 59987:tid 60069] [client 20.151.227.112:1861] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ad5ckVWpk-Tfi6_vLKpV5AAAAJY"]
[Tue Apr 14 23:26:10.521868 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:1388] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ad5ckp6axKeW6bX4H7fD7QAAAFQ"]
[Tue Apr 14 23:26:11.337493 2026] [:error] [pid 59986:tid 60035] [client 20.151.227.112:1959] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ianmg.php"] [unique_id "ad5ck56axKeW6bX4H7fD8AAAAE8"]
[Tue Apr 14 23:26:12.014399 2026] [:error] [pid 60074:tid 60081] [client 20.151.227.112:1708] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ad5clOtqnEmNU9vpHCnR4gAAAMU"]
[Tue Apr 14 23:26:12.549077 2026] [:error] [pid 59985:tid 60010] [client 20.151.227.112:1927] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ad5clOgHaxkvLE6V1kl7MQAAABE"]
[Tue Apr 14 23:26:13.755012 2026] [:error] [pid 59987:tid 60068] [client 20.151.227.112:4184] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ad5clVWpk-Tfi6_vLKpV8wAAAJU"]
[Tue Apr 14 23:26:14.374598 2026] [:error] [pid 59987:tid 60049] [client 20.151.227.112:1858] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ad5cllWpk-Tfi6_vLKpV9gAAAII"]
[Tue Apr 14 23:26:14.999539 2026] [:error] [pid 59986:tid 60032] [client 20.151.227.112:1389] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssh3ll.php"] [unique_id "ad5clp6axKeW6bX4H7fD9wAAAEw"]
[Tue Apr 14 23:26:15.550138 2026] [:error] [pid 59985:tid 60006] [client 20.151.227.112:1395] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssh3ll.php"] [unique_id "ad5cl-gHaxkvLE6V1kl7MwAAAA0"]
[Tue Apr 14 23:26:16.364387 2026] [:error] [pid 3778:tid 3786] [client 20.151.227.112:1355] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssh3ll.php"] [unique_id "ad5cmBx5DfpNmYF_PaEO5gAAAUY"]
[Tue Apr 14 23:26:16.901420 2026] [:error] [pid 59985:tid 59998] [client 20.151.227.112:1383] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ssh3ll.php"] [unique_id "ad5cmOgHaxkvLE6V1kl7NAAAAAU"]
[Tue Apr 14 23:26:17.546527 2026] [:error] [pid 59986:tid 60020] [client 20.151.227.112:1394] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itil.php"] [unique_id "ad5cmZ6axKeW6bX4H7fD_gAAAEA"]
[Tue Apr 14 23:26:18.042778 2026] [:error] [pid 59986:tid 60044] [client 20.151.227.112:1393] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itil.php"] [unique_id "ad5cmp6axKeW6bX4H7fEAwAAAFg"]
[Tue Apr 14 23:26:18.575547 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1665] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itil.php"] [unique_id "ad5cmp6axKeW6bX4H7fEBQAAAFI"]
[Tue Apr 14 23:26:19.795622 2026] [:error] [pid 22177:tid 22189] [client 20.151.227.112:1707] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itil.php"] [unique_id "ad5cm4TVeJSXHDIlEDujYAAAAQo"]
[Tue Apr 14 23:26:20.343812 2026] [:error] [pid 22177:tid 22185] [client 20.151.227.112:4221] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snus.php"] [unique_id "ad5cnITVeJSXHDIlEDujYwAAAQY"]
[Tue Apr 14 23:26:20.900511 2026] [:error] [pid 3810:tid 3825] [client 20.151.227.112:1727] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snus.php"] [unique_id "ad5cnMqc5XaYZhFXVGfcxAAAAYw"]
[Tue Apr 14 23:26:21.714302 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1871] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snus.php"] [unique_id "ad5cnZ6axKeW6bX4H7fEDwAAAFI"]
[Tue Apr 14 23:26:22.296829 2026] [:error] [pid 59986:tid 60037] [client 20.151.227.112:4194] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/snus.php"] [unique_id "ad5cnp6axKeW6bX4H7fEEQAAAFE"]
[Tue Apr 14 23:26:23.046836 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:1350] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "ad5cn56axKeW6bX4H7fEEwAAAFQ"]
[Tue Apr 14 23:26:23.672982 2026] [:error] [pid 3810:tid 3826] [client 20.151.227.112:1700] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "ad5cn8qc5XaYZhFXVGfczgAAAY0"]
[Tue Apr 14 23:26:24.212337 2026] [:error] [pid 3810:tid 3819] [client 20.151.227.112:1403] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "ad5coMqc5XaYZhFXVGfc0AAAAYY"]
[Tue Apr 14 23:26:24.734102 2026] [:error] [pid 22177:tid 22181] [client 20.151.227.112:1361] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shlo.php"] [unique_id "ad5coITVeJSXHDIlEDujbQAAAQI"]
[Tue Apr 14 23:26:25.232968 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1363] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mas80.php"] [unique_id "ad5coZ6axKeW6bX4H7fEFgAAAFI"]
[Tue Apr 14 23:26:26.020996 2026] [:error] [pid 3810:tid 3818] [client 20.151.227.112:4195] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mas80.php"] [unique_id "ad5cosqc5XaYZhFXVGfc1QAAAYU"]
[Tue Apr 14 23:26:26.558034 2026] [:error] [pid 3810:tid 3834] [client 20.151.227.112:4190] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mas80.php"] [unique_id "ad5cosqc5XaYZhFXVGfc2QAAAZU"]
[Tue Apr 14 23:26:27.036148 2026] [:error] [pid 22177:tid 22190] [client 20.151.227.112:4175] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mas80.php"] [unique_id "ad5co4TVeJSXHDIlEDujcQAAAQs"]
[Tue Apr 14 23:26:27.589623 2026] [:error] [pid 3778:tid 3789] [client 20.151.227.112:4200] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "ad5coxx5DfpNmYF_PaEO7AAAAUk"]
[Tue Apr 14 23:26:28.135665 2026] [:error] [pid 59987:tid 60066] [client 20.151.227.112:1856] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "ad5cpFWpk-Tfi6_vLKpWLgAAAJM"]
[Tue Apr 14 23:26:28.588347 2026] [:error] [pid 3810:tid 3817] [client 20.151.227.112:1882] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "ad5cpMqc5XaYZhFXVGfc5AAAAYQ"]
[Tue Apr 14 23:26:29.057755 2026] [:error] [pid 3778:tid 3781] [client 20.151.227.112:4177] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/torsa.php"] [unique_id "ad5cpRx5DfpNmYF_PaEO7wAAAUE"]
[Tue Apr 14 23:26:29.822879 2026] [:error] [pid 59986:tid 60022] [client 20.151.227.112:4188] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ad5cpZ6axKeW6bX4H7fEHQAAAEI"]
[Tue Apr 14 23:26:30.299031 2026] [:error] [pid 59986:tid 60026] [client 20.151.227.112:4222] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ad5cpp6axKeW6bX4H7fEHwAAAEY"]
[Tue Apr 14 23:26:30.908204 2026] [:error] [pid 3778:tid 3790] [client 20.151.227.112:1396] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ad5cphx5DfpNmYF_PaEO8gAAAUo"]
[Tue Apr 14 23:26:31.999202 2026] [:error] [pid 3778:tid 3787] [client 20.151.227.112:4179] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ad5cpxx5DfpNmYF_PaEO9AAAAUc"]
[Tue Apr 14 23:26:32.670943 2026] [:error] [pid 60074:tid 60099] [client 20.151.227.112:1930] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-upload.php"] [unique_id "ad5cqOtqnEmNU9vpHCnR7wAAANc"]
[Tue Apr 14 23:26:33.248128 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1938] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-upload.php"] [unique_id "ad5cqZ6axKeW6bX4H7fEJgAAAEg"]
[Tue Apr 14 23:26:33.835928 2026] [:error] [pid 59986:tid 60044] [client 20.151.227.112:4192] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-upload.php"] [unique_id "ad5cqZ6axKeW6bX4H7fEKQAAAFg"]
[Tue Apr 14 23:26:34.475109 2026] [:error] [pid 59987:tid 60049] [client 20.151.227.112:4170] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-upload.php"] [unique_id "ad5cqlWpk-Tfi6_vLKpWTAAAAII"]
[Tue Apr 14 23:26:34.971850 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1364] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fcnlp.php"] [unique_id "ad5cqp6axKeW6bX4H7fELAAAAEs"]
[Tue Apr 14 23:26:35.577706 2026] [:error] [pid 22177:tid 22199] [client 20.151.227.112:1399] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fcnlp.php"] [unique_id "ad5cq4TVeJSXHDIlEDujfgAAARQ"]
[Tue Apr 14 23:26:36.113912 2026] [:error] [pid 59985:tid 60007] [client 20.151.227.112:1371] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fcnlp.php"] [unique_id "ad5crOgHaxkvLE6V1kl7QwAAAA4"]
[Tue Apr 14 23:26:36.729487 2026] [:error] [pid 59986:tid 60020] [client 20.151.227.112:1379] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fcnlp.php"] [unique_id "ad5crJ6axKeW6bX4H7fELwAAAEA"]
[Tue Apr 14 23:26:37.359926 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1711] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxc.php"] [unique_id "ad5crZ6axKeW6bX4H7fEMwAAAEU"]
[Tue Apr 14 23:26:37.973080 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1373] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxc.php"] [unique_id "ad5crZ6axKeW6bX4H7fEOAAAAFI"]
[Tue Apr 14 23:26:38.672752 2026] [:error] [pid 59987:tid 60057] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/xxc.php
[Tue Apr 14 23:26:38.882908 2026] [:error] [pid 59987:tid 60062] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-su.php
[Tue Apr 14 23:26:39.145071 2026] [:error] [pid 59987:tid 60052] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/ZSLeDE.php
[Tue Apr 14 23:26:39.358033 2026] [:error] [pid 59987:tid 60063] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Tue Apr 14 23:26:39.577772 2026] [:error] [pid 59987:tid 60047] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/bngv.php
[Tue Apr 14 23:26:39.912250 2026] [:error] [pid 59987:tid 60049] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-filters.php
[Tue Apr 14 23:26:40.121760 2026] [:error] [pid 59987:tid 60065] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Tue Apr 14 23:26:40.498966 2026] [:error] [pid 59987:tid 60051] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Tue Apr 14 23:26:40.713770 2026] [:error] [pid 59987:tid 60059] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/kiwkiw.php
[Tue Apr 14 23:26:41.168419 2026] [:error] [pid 59987:tid 60067] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Tue Apr 14 23:26:41.377843 2026] [:error] [pid 59987:tid 60071] [client 20.151.227.112:1401] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Tue Apr 14 23:26:41.583528 2026] [:error] [pid 59987:tid 60056] [client 20.151.227.112:1401] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ad5csVWpk-Tfi6_vLKpWbgAAAIk"]
[Tue Apr 14 23:26:42.514354 2026] [:error] [pid 59985:tid 59993] [client 20.151.227.112:4191] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ad5csugHaxkvLE6V1kl7TQAAAAA"]
[Tue Apr 14 23:26:43.687191 2026] [:error] [pid 60074:tid 60098] [client 20.151.227.112:4219] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ad5cs-tqnEmNU9vpHCnR_gAAANY"]
[Tue Apr 14 23:26:44.278028 2026] [:error] [pid 60074:tid 60081] [client 20.151.227.112:1398] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ad5ctOtqnEmNU9vpHCnSAAAAAMU"]
[Tue Apr 14 23:26:44.984162 2026] [:error] [pid 60074:tid 60095] [client 20.151.227.112:1697] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "ad5ctOtqnEmNU9vpHCnSBAAAANM"]
[Tue Apr 14 23:26:45.580023 2026] [:error] [pid 3778:tid 3787] [client 20.151.227.112:4186] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "ad5ctRx5DfpNmYF_PaEO_AAAAUc"]
[Tue Apr 14 23:26:46.388505 2026] [:error] [pid 3810:tid 3825] [client 20.151.227.112:4193] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "ad5ctsqc5XaYZhFXVGfdCwAAAYw"]
[Tue Apr 14 23:26:47.211343 2026] [:error] [pid 3810:tid 3814] [client 20.151.227.112:4180] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "ad5ct8qc5XaYZhFXVGfdDwAAAYE"]
[Tue Apr 14 23:26:47.871979 2026] [:error] [pid 3810:tid 3826] [client 20.151.227.112:1942] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "ad5ct8qc5XaYZhFXVGfdFAAAAY0"]
[Tue Apr 14 23:26:48.482554 2026] [:error] [pid 22177:tid 22186] [client 20.151.227.112:4214] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "ad5cuITVeJSXHDIlEDujjAAAAQc"]
[Tue Apr 14 23:26:49.219912 2026] [:error] [pid 59986:tid 60022] [client 20.151.227.112:1913] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "ad5cuZ6axKeW6bX4H7fERgAAAEI"]
[Tue Apr 14 23:26:50.041450 2026] [:error] [pid 59986:tid 60033] [client 20.151.227.112:4198] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "ad5cup6axKeW6bX4H7fETQAAAE0"]
[Tue Apr 14 23:26:51.515465 2026] [:error] [pid 22177:tid 22184] [client 20.151.227.112:1367] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ad5cu4TVeJSXHDIlEDujkQAAAQU"]
[Tue Apr 14 23:26:52.610846 2026] [:error] [pid 59987:tid 60055] [client 20.151.227.112:4223] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ad5cvFWpk-Tfi6_vLKpWcwAAAIg"]
[Tue Apr 14 23:26:53.719337 2026] [:error] [pid 3810:tid 3833] [client 20.151.227.112:1881] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ad5cvcqc5XaYZhFXVGfdIQAAAZQ"]
[Tue Apr 14 23:26:54.382559 2026] [:error] [pid 3810:tid 3824] [client 20.151.227.112:4185] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ad5cvsqc5XaYZhFXVGfdJAAAAYs"]
[Tue Apr 14 23:26:55.431178 2026] [:error] [pid 22177:tid 22203] [client 20.151.227.112:1874] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ad5cv4TVeJSXHDIlEDujlgAAARg"]
[Tue Apr 14 23:26:55.987862 2026] [:error] [pid 59986:tid 60021] [client 20.151.227.112:1362] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ad5cv56axKeW6bX4H7fEXQAAAEE"]
[Tue Apr 14 23:26:56.507743 2026] [:error] [pid 59986:tid 60039] [client 20.151.227.112:1702] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ad5cwJ6axKeW6bX4H7fEYAAAAFM"]
[Tue Apr 14 23:26:57.334808 2026] [:error] [pid 60074:tid 60097] [client 20.151.227.112:1902] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ad5cwetqnEmNU9vpHCnSEQAAANU"]
[Tue Apr 14 23:26:57.987946 2026] [:error] [pid 3810:tid 3835] [client 20.151.227.112:4215] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rujgeote.php"] [unique_id "ad5cwcqc5XaYZhFXVGfdKgAAAZY"]
[Tue Apr 14 23:26:58.569092 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1916] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rujgeote.php"] [unique_id "ad5cwp6axKeW6bX4H7fEZwAAAEs"]
[Tue Apr 14 23:26:59.222634 2026] [:error] [pid 22177:tid 22201] [client 20.151.227.112:4206] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rujgeote.php"] [unique_id "ad5cw4TVeJSXHDIlEDujmwAAARY"]
[Tue Apr 14 23:26:59.720548 2026] [:error] [pid 3778:tid 3788] [client 20.151.227.112:1694] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rujgeote.php"] [unique_id "ad5cwxx5DfpNmYF_PaEPBgAAAUg"]
[Tue Apr 14 23:27:00.219665 2026] [:error] [pid 59985:tid 60012] [client 20.151.227.112:4209] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "ad5cxOgHaxkvLE6V1kl7WQAAABM"]
[Tue Apr 14 23:27:01.115655 2026] [:error] [pid 59987:tid 60064] [client 20.151.227.112:4205] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "ad5cxVWpk-Tfi6_vLKpWdgAAAJE"]
[Tue Apr 14 23:27:01.989826 2026] [:error] [pid 22177:tid 22196] [client 20.151.227.112:4203] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "ad5cxYTVeJSXHDIlEDujogAAARE"]
[Tue Apr 14 23:27:02.941913 2026] [:error] [pid 59985:tid 60007] [client 20.151.227.112:4162] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "ad5cxugHaxkvLE6V1kl7YQAAAA4"]
[Tue Apr 14 23:27:03.761301 2026] [:error] [pid 60074:tid 60094] [client 20.151.227.112:1894] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad5cx-tqnEmNU9vpHCnSFwAAANI"]
[Tue Apr 14 23:27:04.440729 2026] [:error] [pid 3810:tid 3817] [client 20.151.227.112:1348] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad5cyMqc5XaYZhFXVGfdMgAAAYQ"]
[Tue Apr 14 23:27:05.290125 2026] [:error] [pid 59985:tid 59996] [client 20.151.227.112:1406] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad5cyegHaxkvLE6V1kl7ZgAAAAM"]
[Tue Apr 14 23:27:05.841668 2026] [:error] [pid 3778:tid 3796] [client 20.151.227.112:1397] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad5cyRx5DfpNmYF_PaEPCQAAAVA"]
[Tue Apr 14 23:27:06.335189 2026] [:error] [pid 59986:tid 60020] [client 20.151.227.112:4217] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ad5cyp6axKeW6bX4H7fEawAAAEA"]
[Tue Apr 14 23:27:06.855337 2026] [:error] [pid 3810:tid 3825] [client 20.151.227.112:4208] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ad5cysqc5XaYZhFXVGfdNQAAAYw"]
[Tue Apr 14 23:27:07.536475 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:4210] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ad5cy56axKeW6bX4H7fEcQAAAFQ"]
[Tue Apr 14 23:27:08.167716 2026] [:error] [pid 59986:tid 60042] [client 20.151.227.112:1705] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "ad5czJ6axKeW6bX4H7fEcwAAAFY"]
[Tue Apr 14 23:27:09.783137 2026] [:error] [pid 60074:tid 60080] [client 20.151.227.112:1918] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ad5czetqnEmNU9vpHCnSLAAAAMQ"]
[Tue Apr 14 23:27:10.427462 2026] [:error] [pid 59986:tid 60035] [client 20.151.227.112:4176] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ad5czp6axKeW6bX4H7fEeQAAAE8"]
[Tue Apr 14 23:27:11.118345 2026] [:error] [pid 3810:tid 3822] [client 20.151.227.112:4172] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ad5cz8qc5XaYZhFXVGfdOAAAAYk"]
[Tue Apr 14 23:27:11.949911 2026] [:error] [pid 59985:tid 59993] [client 20.151.227.112:1400] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/un.php"] [unique_id "ad5cz-gHaxkvLE6V1kl7bQAAAAA"]
[Tue Apr 14 23:27:13.280340 2026] [:error] [pid 59986:tid 60044] [client 20.151.227.112:4216] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-bugs.php"] [unique_id "ad5c0Z6axKeW6bX4H7fEfAAAAFg"]
[Tue Apr 14 23:27:14.036149 2026] [:error] [pid 59985:tid 60011] [client 20.151.227.112:1870] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-bugs.php"] [unique_id "ad5c0ugHaxkvLE6V1kl7bwAAABI"]
[Tue Apr 14 23:27:14.532335 2026] [:error] [pid 59987:tid 60061] [client 20.151.227.112:4197] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-bugs.php"] [unique_id "ad5c0lWpk-Tfi6_vLKpWfgAAAI4"]
[Tue Apr 14 23:27:15.503765 2026] [:error] [pid 59987:tid 60050] [client 20.151.227.112:1966] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-bugs.php"] [unique_id "ad5c01Wpk-Tfi6_vLKpWhAAAAIM"]
[Tue Apr 14 23:27:18.428149 2026] [:error] [pid 3810:tid 3819] [client 20.151.227.112:1950] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ad5c1sqc5XaYZhFXVGfdQwAAAYY"]
[Tue Apr 14 23:27:19.313390 2026] [:error] [pid 22177:tid 22185] [client 20.151.227.112:4211] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ad5c14TVeJSXHDIlEDujuQAAAQY"]
[Tue Apr 14 23:27:20.019969 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:4168] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ad5c2J6axKeW6bX4H7fEjAAAAFQ"]
[Tue Apr 14 23:27:21.571470 2026] [:error] [pid 3810:tid 3826] [client 20.151.227.112:4183] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ad5c2cqc5XaYZhFXVGfdSwAAAY0"]
[Tue Apr 14 23:27:22.434057 2026] [:error] [pid 59985:tid 60017] [client 20.151.227.112:4202] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "ad5c2ugHaxkvLE6V1kl7dgAAABg"]
[Tue Apr 14 23:27:23.428878 2026] [:error] [pid 59986:tid 60037] [client 20.151.227.112:1697] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "ad5c256axKeW6bX4H7fEnQAAAFE"]
[Tue Apr 14 23:27:24.310062 2026] [:error] [pid 59986:tid 60026] [client 20.151.227.112:1890] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "ad5c3J6axKeW6bX4H7fEpQAAAEY"]
[Tue Apr 14 23:27:25.918623 2026] [:error] [pid 60074:tid 60096] [client 20.151.227.112:4167] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs6.php"] [unique_id "ad5c3etqnEmNU9vpHCnSRwAAANQ"]
[Tue Apr 14 23:27:26.824564 2026] [:error] [pid 3810:tid 3835] [client 20.151.227.112:4204] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ad5c3sqc5XaYZhFXVGfdUQAAAZY"]
[Tue Apr 14 23:27:27.600592 2026] [:error] [pid 59986:tid 60020] [client 20.151.227.112:1380] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ad5c356axKeW6bX4H7fEtgAAAEA"]
[Tue Apr 14 23:27:29.151671 2026] [:error] [pid 3810:tid 3829] [client 20.151.227.112:1893] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ad5c4cqc5XaYZhFXVGfdWAAAAZA"]
[Tue Apr 14 23:27:30.409683 2026] [:error] [pid 3810:tid 3822] [client 20.151.227.112:1358] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ad5c4sqc5XaYZhFXVGfdWwAAAYk"]
[Tue Apr 14 23:27:31.241314 2026] [:error] [pid 60074:tid 60082] [client 20.151.227.112:1865] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "ad5c4-tqnEmNU9vpHCnSUgAAAMY"]
[Tue Apr 14 23:27:31.937169 2026] [:error] [pid 22177:tid 22189] [client 20.151.227.112:1878] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "ad5c44TVeJSXHDIlEDujxQAAAQo"]
[Tue Apr 14 23:27:33.289520 2026] [:error] [pid 59985:tid 59996] [client 20.151.227.112:4212] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "ad5c5egHaxkvLE6V1kl7dwAAAAM"]
[Tue Apr 14 23:27:33.850613 2026] [:error] [pid 3810:tid 3837] [client 20.151.227.112:1390] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/btx25.php"] [unique_id "ad5c5cqc5XaYZhFXVGfdZQAAAZg"]
[Tue Apr 14 23:27:34.559777 2026] [:error] [pid 59985:tid 60016] [client 20.151.227.112:4187] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "ad5c5ugHaxkvLE6V1kl7eAAAABc"]
[Tue Apr 14 23:27:35.469894 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:4218] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "ad5c556axKeW6bX4H7fEyAAAAFI"]
[Tue Apr 14 23:27:36.591782 2026] [:error] [pid 59986:tid 60042] [client 20.151.227.112:1905] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "ad5c6J6axKeW6bX4H7fEzAAAAFY"]
[Tue Apr 14 23:27:38.129662 2026] [:error] [pid 3778:tid 3797] [client 20.151.227.112:4169] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "ad5c6hx5DfpNmYF_PaEPFgAAAVE"]
[Tue Apr 14 23:27:39.049988 2026] [:error] [pid 3810:tid 3823] [client 20.151.227.112:1907] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "ad5c68qc5XaYZhFXVGfdbQAAAYo"]
[Tue Apr 14 23:27:40.246914 2026] [:error] [pid 3810:tid 3827] [client 20.151.227.112:1585] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "ad5c7Mqc5XaYZhFXVGfddAAAAY4"]
[Tue Apr 14 23:27:41.127021 2026] [:error] [pid 59986:tid 60027] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/co.php
[Tue Apr 14 23:27:41.336279 2026] [:error] [pid 59986:tid 60043] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/obfuscate.php
[Tue Apr 14 23:27:41.664144 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Tue Apr 14 23:27:41.901953 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tymanage.php
[Tue Apr 14 23:27:42.111507 2026] [:error] [pid 59986:tid 60029] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Tue Apr 14 23:27:42.369084 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 14 23:27:42.636477 2026] [:error] [pid 59986:tid 60035] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/55.php
[Tue Apr 14 23:27:42.846044 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Tue Apr 14 23:27:43.129172 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Tue Apr 14 23:27:43.441858 2026] [:error] [pid 59986:tid 60033] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/bardbdze.php
[Tue Apr 14 23:27:43.814440 2026] [:error] [pid 59986:tid 60021] [client 20.151.227.112:1903] File does not exist: /usr/local/apache/htdocs/suspended-page/zz.php
[Tue Apr 14 23:27:44.024039 2026] [:error] [pid 59986:tid 60022] [client 20.151.227.112:1903] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ad5c8J6axKeW6bX4H7fE6wAAAEI"]
[Tue Apr 14 23:27:45.362702 2026] [:error] [pid 3778:tid 3802] [client 20.151.227.112:1910] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ad5c8Rx5DfpNmYF_PaEPHgAAAVY"]
[Tue Apr 14 23:27:47.779047 2026] [:error] [pid 59985:tid 60010] [client 20.151.227.112:1895] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ad5c8-gHaxkvLE6V1kl7egAAABE"]
[Tue Apr 14 23:27:49.404016 2026] [:error] [pid 59986:tid 60024] [client 20.151.227.112:1354] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "ad5c9Z6axKeW6bX4H7fE_wAAAEQ"]
[Tue Apr 14 23:27:51.381969 2026] [:error] [pid 3810:tid 3821] [client 20.151.227.112:4189] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ad5c98qc5XaYZhFXVGfdgwAAAYg"]
[Tue Apr 14 23:27:53.265400 2026] [:error] [pid 59987:tid 60051] [client 20.151.227.112:1887] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ad5c-VWpk-Tfi6_vLKpWlgAAAIQ"]
[Tue Apr 14 23:27:56.891002 2026] [:error] [pid 22177:tid 22183] [client 20.151.227.112:1556] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ad5c_ITVeJSXHDIlEDuj4wAAAQQ"]
[Tue Apr 14 23:27:58.861681 2026] [:error] [pid 3810:tid 3824] [client 20.151.227.112:1866] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.yuf.php"] [unique_id "ad5c_sqc5XaYZhFXVGfdlQAAAYs"]
[Tue Apr 14 23:27:59.705022 2026] [:error] [pid 59986:tid 60032] [client 20.151.227.112:1667] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "ad5c_56axKeW6bX4H7fFBgAAAEw"]
[Tue Apr 14 23:28:00.142303 2026] [:error] [pid 59986:tid 60033] [client 20.151.227.112:1883] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "ad5dAJ6axKeW6bX4H7fFBwAAAE0"]
[Tue Apr 14 23:28:01.216470 2026] [:error] [pid 22177:tid 22201] [client 20.151.227.112:1981] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "ad5dAYTVeJSXHDIlEDuj6AAAARY"]
[Tue Apr 14 23:28:01.843354 2026] [:error] [pid 59985:tid 60005] [client 20.151.227.112:1891] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "ad5dAegHaxkvLE6V1kl7gAAAAAw"]
[Tue Apr 14 23:28:02.410466 2026] [:error] [pid 59987:tid 60067] [client 20.151.227.112:1885] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ad5dAlWpk-Tfi6_vLKpWogAAAJQ"]
[Tue Apr 14 23:28:03.588289 2026] [:error] [pid 59985:tid 60017] [client 20.151.227.112:4207] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ad5dA-gHaxkvLE6V1kl7hgAAABg"]
[Tue Apr 14 23:28:04.168910 2026] [:error] [pid 59985:tid 59996] [client 20.151.227.112:1864] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ad5dBOgHaxkvLE6V1kl7iQAAAAM"]
[Tue Apr 14 23:28:04.935138 2026] [:error] [pid 59985:tid 59999] [client 20.151.227.112:1979] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "ad5dBOgHaxkvLE6V1kl7jgAAAAY"]
[Tue Apr 14 23:28:05.626231 2026] [:error] [pid 22177:tid 22184] [client 20.151.227.112:1548] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ad5dBYTVeJSXHDIlEDuj7wAAAQU"]
[Tue Apr 14 23:28:06.303349 2026] [:error] [pid 59986:tid 60026] [client 20.151.227.112:1975] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ad5dBp6axKeW6bX4H7fFEQAAAEY"]
[Tue Apr 14 23:28:07.019678 2026] [:error] [pid 22177:tid 22196] [client 20.151.227.112:1555] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ad5dB4TVeJSXHDIlEDuj8gAAARE"]
[Tue Apr 14 23:28:07.505119 2026] [:error] [pid 60074:tid 60099] [client 20.151.227.112:1939] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ad5dB-tqnEmNU9vpHCnSxQAAANc"]
[Tue Apr 14 23:28:08.100086 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1917] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "ad5dCJ6axKeW6bX4H7fFFgAAAFI"]
[Tue Apr 14 23:28:09.362416 2026] [:error] [pid 59985:tid 60005] [client 20.151.227.112:1579] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "ad5dCegHaxkvLE6V1kl7kgAAAAw"]
[Tue Apr 14 23:28:10.752889 2026] [:error] [pid 3810:tid 3828] [client 20.151.227.112:1862] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "ad5dCsqc5XaYZhFXVGfdpAAAAY8"]
[Tue Apr 14 23:28:11.938297 2026] [:error] [pid 3778:tid 3785] [client 20.151.227.112:1868] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpb.php"] [unique_id "ad5dCxx5DfpNmYF_PaEPPAAAAUU"]
[Tue Apr 14 23:28:17.497107 2026] [:error] [pid 59985:tid 60016] [client 20.151.227.112:1859] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ad5dEegHaxkvLE6V1kl7lQAAABc"]
[Tue Apr 14 23:28:18.340039 2026] [:error] [pid 59985:tid 60011] [client 20.151.227.112:1550] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ad5dEugHaxkvLE6V1kl7lwAAABI"]
[Tue Apr 14 23:28:20.243464 2026] [:error] [pid 3810:tid 3834] [client 20.151.227.112:1543] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ad5dFMqc5XaYZhFXVGfdswAAAZU"]
[Tue Apr 14 23:28:22.171008 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:1872] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "ad5dFp6axKeW6bX4H7fFLQAAAFQ"]
[Tue Apr 14 23:28:22.960957 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1695] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "ad5dFp6axKeW6bX4H7fFMwAAAEg"]
[Tue Apr 14 23:28:24.144383 2026] [:error] [pid 3810:tid 3832] [client 20.151.227.112:1387] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "ad5dGMqc5XaYZhFXVGfduAAAAZM"]
[Tue Apr 14 23:28:25.668619 2026] [:error] [pid 59986:tid 60033] [client 20.151.227.112:1668] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "ad5dGZ6axKeW6bX4H7fFPgAAAE0"]
[Tue Apr 14 23:28:27.223613 2026] [:error] [pid 3778:tid 3791] [client 20.151.227.112:1559] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "ad5dGxx5DfpNmYF_PaEPTgAAAUs"]
[Tue Apr 14 23:28:28.237346 2026] [:error] [pid 3778:tid 3803] [client 20.151.227.112:1892] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ad5dHBx5DfpNmYF_PaEPUQAAAVc"]
[Tue Apr 14 23:28:29.204864 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1945] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ad5dHZ6axKeW6bX4H7fFRAAAAEg"]
[Tue Apr 14 23:28:29.967931 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1974] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ad5dHZ6axKeW6bX4H7fFSgAAAEU"]
[Tue Apr 14 23:28:32.510554 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1692] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ad5dIJ6axKeW6bX4H7fFWAAAAEU"]
[Tue Apr 14 23:28:33.855479 2026] [:error] [pid 3810:tid 3823] [client 20.151.227.112:1914] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "ad5dIcqc5XaYZhFXVGfd4QAAAYo"]
[Tue Apr 14 23:28:35.166849 2026] [:error] [pid 59985:tid 60003] [client 20.151.227.112:1955] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "ad5dI-gHaxkvLE6V1kl7mwAAAAo"]
[Tue Apr 14 23:28:36.174252 2026] [:error] [pid 59985:tid 59994] [client 20.151.227.112:1969] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "ad5dJOgHaxkvLE6V1kl7nQAAAAE"]
[Tue Apr 14 23:28:37.120082 2026] [:error] [pid 3778:tid 3785] [client 20.151.227.112:1539] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "ad5dJRx5DfpNmYF_PaEPlwAAAUU"]
[Tue Apr 14 23:28:38.636518 2026] [:error] [pid 3810:tid 3824] [client 20.151.227.112:1906] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ad5dJsqc5XaYZhFXVGfeDwAAAYs"]
[Tue Apr 14 23:28:40.088280 2026] [:error] [pid 22177:tid 22197] [client 20.151.227.112:1678] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ad5dKITVeJSXHDIlEDukOAAAARI"]
[Tue Apr 14 23:28:41.157246 2026] [:error] [pid 60074:tid 60098] [client 20.151.227.112:4213] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ad5dKetqnEmNU9vpHCnTEwAAANY"]
[Tue Apr 14 23:28:42.043150 2026] [:error] [pid 60074:tid 60078] [client 20.151.227.112:1972] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/haz.php"] [unique_id "ad5dKutqnEmNU9vpHCnTGQAAAMI"]
[Tue Apr 14 23:28:42.799613 2026] [:error] [pid 60074:tid 60089] [client 20.151.227.112:1935] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f222.php"] [unique_id "ad5dKutqnEmNU9vpHCnTIAAAAM0"]
[Tue Apr 14 23:28:43.488887 2026] [:error] [pid 22177:tid 22191] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/f222.php
[Tue Apr 14 23:28:43.698539 2026] [:error] [pid 22177:tid 22203] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Tue Apr 14 23:28:43.922884 2026] [:error] [pid 22177:tid 22194] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/sfcl.php
[Tue Apr 14 23:28:44.439805 2026] [:error] [pid 22177:tid 22189] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/ca-022.php
[Tue Apr 14 23:28:44.647503 2026] [:error] [pid 22177:tid 22199] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/act.php
[Tue Apr 14 23:28:44.861444 2026] [:error] [pid 22177:tid 22183] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/enacting.php
[Tue Apr 14 23:28:45.080899 2026] [:error] [pid 22177:tid 22201] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Tue Apr 14 23:28:45.288352 2026] [:error] [pid 22177:tid 22195] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/cilng.php
[Tue Apr 14 23:28:45.495743 2026] [:error] [pid 22177:tid 22190] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Tue Apr 14 23:28:45.704154 2026] [:error] [pid 22177:tid 22198] [client 20.151.227.112:1860] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Apr 14 23:28:46.057421 2026] [:error] [pid 22177:tid 22181] [client 20.151.227.112:1860] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nti.php"] [unique_id "ad5dLoTVeJSXHDIlEDukSwAAAQI"]
[Tue Apr 14 23:28:46.856121 2026] [:error] [pid 59987:tid 60070] [client 20.151.227.112:1682] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nti.php"] [unique_id "ad5dLlWpk-Tfi6_vLKpWzgAAAJc"]
[Tue Apr 14 23:28:48.486694 2026] [:error] [pid 59986:tid 60020] [client 20.151.227.112:1696] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nti.php"] [unique_id "ad5dMJ6axKeW6bX4H7fFhwAAAEA"]
[Tue Apr 14 23:28:49.623197 2026] [:error] [pid 3810:tid 3831] [client 20.151.227.112:1943] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nti.php"] [unique_id "ad5dMcqc5XaYZhFXVGfeJAAAAZI"]
[Tue Apr 14 23:28:50.345248 2026] [:error] [pid 3810:tid 3819] [client 20.151.227.112:1953] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "ad5dMsqc5XaYZhFXVGfeKQAAAYY"]
[Tue Apr 14 23:28:51.330833 2026] [:error] [pid 59986:tid 60030] [client 20.151.227.112:1944] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "ad5dM56axKeW6bX4H7fFiQAAAEo"]
[Tue Apr 14 23:28:52.212804 2026] [:error] [pid 3810:tid 3823] [client 20.151.227.112:1537] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "ad5dNMqc5XaYZhFXVGfeLQAAAYo"]
[Tue Apr 14 23:28:54.658795 2026] [:error] [pid 22177:tid 22199] [client 20.151.227.112:1896] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "ad5dNoTVeJSXHDIlEDukVwAAARQ"]
[Tue Apr 14 23:28:55.891110 2026] [:error] [pid 59985:tid 60003] [client 20.151.227.112:1936] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Eva.php"] [unique_id "ad5dN-gHaxkvLE6V1kl7qgAAAAo"]
[Tue Apr 14 23:28:56.833839 2026] [:error] [pid 3810:tid 3828] [client 20.151.227.112:1928] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Eva.php"] [unique_id "ad5dOMqc5XaYZhFXVGfeNgAAAY8"]
[Tue Apr 14 23:28:57.920178 2026] [:error] [pid 3778:tid 3797] [client 20.151.227.112:1577] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Eva.php"] [unique_id "ad5dORx5DfpNmYF_PaEPtgAAAVE"]
[Tue Apr 14 23:28:58.727952 2026] [:error] [pid 3810:tid 3835] [client 20.151.227.112:1875] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Eva.php"] [unique_id "ad5dOsqc5XaYZhFXVGfeQAAAAZY"]
[Tue Apr 14 23:28:59.524929 2026] [:error] [pid 3810:tid 3829] [client 20.151.227.112:1676] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nco.php"] [unique_id "ad5dO8qc5XaYZhFXVGfeQwAAAZA"]
[Tue Apr 14 23:29:00.266539 2026] [:error] [pid 3778:tid 3798] [client 20.151.227.112:1952] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nco.php"] [unique_id "ad5dPBx5DfpNmYF_PaEPtwAAAVI"]
[Tue Apr 14 23:29:01.105054 2026] [:error] [pid 59986:tid 60028] [client 20.151.227.112:1968] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nco.php"] [unique_id "ad5dPZ6axKeW6bX4H7fFlQAAAEg"]
[Tue Apr 14 23:29:02.353284 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1901] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nco.php"] [unique_id "ad5dPp6axKeW6bX4H7fFmQAAAFI"]
[Tue Apr 14 23:29:03.125899 2026] [:error] [pid 59987:tid 60063] [client 20.151.227.112:1723] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ad5dP1Wpk-Tfi6_vLKpW1wAAAJA"]
[Tue Apr 14 23:29:04.201453 2026] [:error] [pid 3778:tid 3795] [client 20.151.227.112:1698] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ad5dQBx5DfpNmYF_PaEPuQAAAU8"]
[Tue Apr 14 23:29:07.180009 2026] [:error] [pid 59987:tid 60057] [client 20.151.227.112:1947] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ad5dQ1Wpk-Tfi6_vLKpW3gAAAIo"]
[Tue Apr 14 23:29:08.004943 2026] [:error] [pid 59986:tid 60032] [client 20.151.227.112:1956] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ad5dRJ6axKeW6bX4H7fFnwAAAEw"]
[Tue Apr 14 23:29:09.341133 2026] [:error] [pid 3778:tid 3792] [client 20.151.227.112:1366] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "ad5dRRx5DfpNmYF_PaEPvgAAAUw"]
[Tue Apr 14 23:29:11.629104 2026] [:error] [pid 59987:tid 60051] [client 20.151.227.112:1973] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "ad5dR1Wpk-Tfi6_vLKpW5QAAAIQ"]
[Tue Apr 14 23:29:14.077194 2026] [:error] [pid 3810:tid 3823] [client 20.151.227.112:1376] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "ad5dSsqc5XaYZhFXVGfeUAAAAYo"]
[Tue Apr 14 23:29:16.577732 2026] [:error] [pid 59986:tid 60039] [client 20.151.227.112:1970] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55l453.php"] [unique_id "ad5dTJ6axKeW6bX4H7fFtgAAAFM"]
[Tue Apr 14 23:29:19.426074 2026] [:error] [pid 3778:tid 3795] [client 20.151.227.112:1352] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-stat.php"] [unique_id "ad5dTxx5DfpNmYF_PaEPxQAAAU8"]
[Tue Apr 14 23:29:21.955781 2026] [:error] [pid 3810:tid 3818] [client 20.151.227.112:1664] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-stat.php"] [unique_id "ad5dUcqc5XaYZhFXVGfeWgAAAYU"]
[Tue Apr 14 23:29:23.517745 2026] [:error] [pid 3778:tid 3801] [client 20.151.227.112:1346] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-stat.php"] [unique_id "ad5dUxx5DfpNmYF_PaEPzQAAAVU"]
[Tue Apr 14 23:29:25.996899 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1670] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-stat.php"] [unique_id "ad5dVZ6axKeW6bX4H7fFzgAAAFI"]
[Tue Apr 14 23:29:27.248677 2026] [:error] [pid 3778:tid 3782] [client 20.151.227.112:1722] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ad5dVxx5DfpNmYF_PaEP1AAAAUI"]
[Tue Apr 14 23:29:28.256167 2026] [:error] [pid 3778:tid 3792] [client 20.151.227.112:1690] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ad5dWBx5DfpNmYF_PaEP2AAAAUw"]
[Tue Apr 14 23:29:29.197110 2026] [:error] [pid 59987:tid 60061] [client 20.151.227.112:1967] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ad5dWVWpk-Tfi6_vLKpW-AAAAI4"]
[Tue Apr 14 23:29:30.154093 2026] [:error] [pid 60074:tid 60092] [client 20.151.227.112:1672] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ad5dWutqnEmNU9vpHCnTVgAAANA"]
[Tue Apr 14 23:29:30.982100 2026] [:error] [pid 60074:tid 60087] [client 20.151.227.112:1724] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php/itil.php"] [unique_id "ad5dWutqnEmNU9vpHCnTWwAAAMs"]
[Tue Apr 14 23:29:31.928971 2026] [:error] [pid 59986:tid 60038] [client 20.151.227.112:1926] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php/itil.php"] [unique_id "ad5dW56axKeW6bX4H7fF2AAAAFI"]
[Tue Apr 14 23:29:33.132172 2026] [:error] [pid 59987:tid 60056] [client 20.151.227.112:1677] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php/itil.php"] [unique_id "ad5dXVWpk-Tfi6_vLKpW_QAAAIk"]
[Tue Apr 14 23:29:34.251374 2026] [:error] [pid 59986:tid 60033] [client 20.151.227.112:1701] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php/itil.php"] [unique_id "ad5dXp6axKeW6bX4H7fF3wAAAE0"]
[Tue Apr 14 23:29:35.700482 2026] [:error] [pid 59985:tid 60001] [client 20.151.227.112:1931] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "ad5dX-gHaxkvLE6V1kl7ugAAAAg"]
[Tue Apr 14 23:29:38.688269 2026] [:error] [pid 22177:tid 22180] [client 20.151.227.112:1971] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "ad5dYoTVeJSXHDIlEDukiAAAAQE"]
[Tue Apr 14 23:29:39.554266 2026] [:error] [pid 3778:tid 3802] [client 20.151.227.112:1932] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "ad5dYxx5DfpNmYF_PaEP3gAAAVY"]
[Tue Apr 14 23:29:40.242157 2026] [:error] [pid 3778:tid 3781] [client 20.151.227.112:1978] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "ad5dZBx5DfpNmYF_PaEP4gAAAUE"]
[Tue Apr 14 23:29:41.968801 2026] [:error] [pid 3810:tid 3824] [client 20.151.227.112:1357] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxpass.php"] [unique_id "ad5dZcqc5XaYZhFXVGfedgAAAYs"]
[Tue Apr 14 23:29:44.760147 2026] [:error] [pid 59986:tid 60039] [client 20.151.227.112:1925] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxpass.php"] [unique_id "ad5daJ6axKeW6bX4H7fF-AAAAFM"]
[Tue Apr 14 23:29:45.641505 2026] [:error] [pid 22177:tid 22185] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Tue Apr 14 23:29:45.903149 2026] [:error] [pid 22177:tid 22188] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-demomav.php
[Tue Apr 14 23:29:46.114027 2026] [:error] [pid 22177:tid 22181] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Tue Apr 14 23:29:46.325471 2026] [:error] [pid 22177:tid 22182] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Tue Apr 14 23:29:46.549174 2026] [:error] [pid 22177:tid 22192] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Tue Apr 14 23:29:46.758228 2026] [:error] [pid 22177:tid 22179] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Tue Apr 14 23:29:47.230758 2026] [:error] [pid 22177:tid 22186] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/ckk.php
[Tue Apr 14 23:29:47.439523 2026] [:error] [pid 22177:tid 22191] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Tue Apr 14 23:29:47.648223 2026] [:error] [pid 22177:tid 22194] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/zt2.php
[Tue Apr 14 23:29:47.856936 2026] [:error] [pid 22177:tid 22201] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/class-cc.php
[Tue Apr 14 23:29:48.065529 2026] [:error] [pid 22177:tid 22199] [client 20.151.227.112:1923] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lvminl.php
[Tue Apr 14 23:29:48.285570 2026] [:error] [pid 22177:tid 22184] [client 20.151.227.112:1923] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bx.php"] [unique_id "ad5dbITVeJSXHDIlEDukoAAAAQU"]
[Tue Apr 14 23:29:49.728878 2026] [:error] [pid 59986:tid 60023] [client 20.151.227.112:1934] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bx.php"] [unique_id "ad5dbZ6axKeW6bX4H7fF_AAAAEM"]
[Tue Apr 14 23:29:50.626529 2026] [:error] [pid 59986:tid 60041] [client 20.151.227.112:1940] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bx.php"] [unique_id "ad5dbp6axKeW6bX4H7fF_wAAAFU"]
[Tue Apr 14 23:29:52.269679 2026] [:error] [pid 59986:tid 60044] [client 20.151.227.112:1963] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bx.php"] [unique_id "ad5dcJ6axKeW6bX4H7fGBwAAAFg"]
[Tue Apr 14 23:29:53.234255 2026] [:error] [pid 22177:tid 22182] [client 20.151.227.112:1675] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5dcYTVeJSXHDIlEDukpQAAAQM"]
[Tue Apr 14 23:29:53.995932 2026] [:error] [pid 59987:tid 60050] [client 20.151.227.112:1704] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5dcVWpk-Tfi6_vLKpXBgAAAIM"]
[Tue Apr 14 23:29:54.813855 2026] [:error] [pid 59987:tid 60056] [client 20.151.227.112:1703] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5dclWpk-Tfi6_vLKpXBwAAAIk"]
[Tue Apr 14 23:29:57.267679 2026] [:error] [pid 59987:tid 60064] [client 20.151.227.112:1687] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5ddVWpk-Tfi6_vLKpXCAAAAJE"]
[Tue Apr 14 23:30:06.117270 2026] [:error] [pid 22177:tid 22203] [client 20.151.227.112:1933] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "ad5dfoTVeJSXHDIlEDukqgAAARg"]
[Tue Apr 14 23:30:09.101266 2026] [:error] [pid 59986:tid 60037] [client 20.151.227.112:1699] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "ad5dgZ6axKeW6bX4H7fGKAAAAFE"]
[Tue Apr 14 23:30:10.252009 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:1977] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "ad5dgp6axKeW6bX4H7fGKgAAAEU"]
[Tue Apr 14 23:30:11.313332 2026] [:error] [pid 59986:tid 60040] [client 20.151.227.112:1706] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "ad5dg56axKeW6bX4H7fGLgAAAFQ"]
[Tue Apr 14 23:30:12.132469 2026] [:error] [pid 60074:tid 60092] [client 20.151.227.112:1983] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24name.php"] [unique_id "ad5dhOtqnEmNU9vpHCnTnAAAANA"]
[Tue Apr 14 23:30:13.490444 2026] [:error] [pid 59987:tid 60058] [client 20.151.227.112:1937] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24name.php"] [unique_id "ad5dhVWpk-Tfi6_vLKpXEwAAAIs"]
[Tue Apr 14 23:30:14.466825 2026] [:error] [pid 60074:tid 60077] [client 20.151.227.112:1674] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24name.php"] [unique_id "ad5dhutqnEmNU9vpHCnTogAAAME"]
[Tue Apr 14 23:30:15.266475 2026] [:error] [pid 59986:tid 60025] [client 20.151.227.112:4161] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/24name.php"] [unique_id "ad5dh56axKeW6bX4H7fGNwAAAEU"]
[Tue Apr 14 23:30:15.833407 2026] [:error] [pid 3810:tid 3820] [client 20.151.227.112:1671] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "ad5dh8qc5XaYZhFXVGfejQAAAYc"]
[Tue Apr 14 23:30:18.039920 2026] [:error] [pid 59987:tid 60049] [client 20.151.227.112:1684] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "ad5dilWpk-Tfi6_vLKpXGQAAAII"]
[Tue Apr 14 23:30:20.127086 2026] [:error] [pid 3778:tid 3800] [client 20.151.227.112:1388] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "ad5djBx5DfpNmYF_PaEQIgAAAVQ"]
[Tue Apr 14 23:30:20.940980 2026] [:error] [pid 59985:tid 60011] [client 20.151.227.112:1980] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/re.php"] [unique_id "ad5djOgHaxkvLE6V1kl79gAAABI"]
[Tue Apr 14 23:30:21.690571 2026] [:error] [pid 3810:tid 3818] [client 20.151.227.112:1958] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ad5djcqc5XaYZhFXVGfelwAAAYU"]
[Tue Apr 14 23:30:22.572521 2026] [:error] [pid 22177:tid 22181] [client 20.151.227.112:1959] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ad5djoTVeJSXHDIlEDukvwAAAQI"]
[Tue Apr 14 23:30:23.212972 2026] [:error] [pid 3810:tid 3835] [client 20.151.227.112:4171] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ad5dj8qc5XaYZhFXVGfengAAAZY"]
[Tue Apr 14 23:30:24.189793 2026] [:error] [pid 3810:tid 3821] [client 20.151.227.112:1725] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ad5dkMqc5XaYZhFXVGfepAAAAYg"]
[Tue Apr 14 23:30:24.917446 2026] [:error] [pid 60074:tid 60083] [client 20.151.227.112:1720] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "ad5dkOtqnEmNU9vpHCnTqQAAAMc"]
[Tue Apr 14 23:30:25.532001 2026] [:error] [pid 3810:tid 3830] [client 20.151.227.112:1719] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "ad5dkcqc5XaYZhFXVGfepwAAAZE"]
[Tue Apr 14 23:30:26.381335 2026] [:error] [pid 59987:tid 60053] [client 20.151.227.112:1691] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "ad5dklWpk-Tfi6_vLKpXIgAAAIY"]
[Tue Apr 14 23:30:27.007556 2026] [:error] [pid 59986:tid 60031] [client 20.151.227.112:1561] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "ad5dk56axKeW6bX4H7fGSQAAAEs"]
[Tue Apr 14 23:30:27.934129 2026] [:error] [pid 3810:tid 3834] [client 20.151.227.112:1344] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ad5dk8qc5XaYZhFXVGfesAAAAZU"]
[Tue Apr 14 23:30:29.916500 2026] [:error] [pid 59985:tid 59994] [client 20.151.227.112:1679] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ad5dlegHaxkvLE6V1kl7_QAAAAE"]
[Tue Apr 14 23:30:31.523457 2026] [:error] [pid 60074:tid 60085] [client 20.151.227.112:1361] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ad5dl-tqnEmNU9vpHCnTqgAAAMk"]
[Tue Apr 14 23:30:33.940849 2026] [:error] [pid 3810:tid 3823] [client 20.151.227.112:1542] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ad5dmcqc5XaYZhFXVGfeuwAAAYo"]
[Tue Apr 14 23:30:36.313054 2026] [:error] [pid 59986:tid 60034] [client 20.151.227.112:1572] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cibai.php"] [unique_id "ad5dnJ6axKeW6bX4H7fGXQAAAE4"]
[Tue Apr 14 23:30:37.784328 2026] [:error] [pid 59987:tid 60054] [client 20.151.227.112:1717] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cibai.php"] [unique_id "ad5dnVWpk-Tfi6_vLKpXKgAAAIc"]
[Tue Apr 14 23:30:38.898003 2026] [:error] [pid 59987:tid 60063] [client 20.151.227.112:1353] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cibai.php"] [unique_id "ad5dnlWpk-Tfi6_vLKpXMQAAAJA"]
[Tue Apr 14 23:30:39.566667 2026] [:error] [pid 22177:tid 22188] [client 20.151.227.112:1681] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cibai.php"] [unique_id "ad5dn4TVeJSXHDIlEDukzQAAAQk"]
[Tue Apr 14 23:30:40.697589 2026] [:error] [pid 3810:tid 3822] [client 20.151.227.112:1374] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso-x569.php"] [unique_id "ad5doMqc5XaYZhFXVGfe1wAAAYk"]
[Tue Apr 14 23:30:41.519187 2026] [:error] [pid 59986:tid 60032] [client 20.151.227.112:1721] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso-x569.php"] [unique_id "ad5doZ6axKeW6bX4H7fGZgAAAEw"]
[Tue Apr 14 23:30:42.403983 2026] [:error] [pid 59986:tid 60039] [client 20.151.227.112:1395] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso-x569.php"] [unique_id "ad5dop6axKeW6bX4H7fGagAAAFM"]
[Tue Apr 14 23:30:43.351564 2026] [:error] [pid 3778:tid 3791] [client 20.151.227.112:1879] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso-x569.php"] [unique_id "ad5doxx5DfpNmYF_PaEQQgAAAUs"]
[Tue Apr 14 23:30:44.061424 2026] [:error] [pid 3778:tid 3786] [client 20.151.227.112:1363] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ad5dpBx5DfpNmYF_PaEQRAAAAUY"]
[Tue Apr 14 23:30:44.894185 2026] [:error] [pid 59987:tid 60049] [client 20.151.227.112:1403] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ad5dpFWpk-Tfi6_vLKpXNgAAAII"]
[Tue Apr 14 23:30:45.753784 2026] [:error] [pid 59985:tid 59999] [client 20.151.227.112:1716] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ad5dpegHaxkvLE6V1kl8CgAAAAY"]
[Tue Apr 14 23:30:46.650949 2026] [:error] [pid 3810:tid 3826] [client 20.151.227.112:1976] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "ad5dpsqc5XaYZhFXVGfe8AAAAY0"]
[Tue Apr 14 23:30:47.594636 2026] [:error] [pid 3778:tid 3792] [client 20.151.227.112:1399] [client 20.151.227.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classc.php"] [unique_id "ad5dpxx5DfpNmYF_PaEQSQAAAUw"]
[Tue Apr 14 23:30:49.401649 2026] [:error] [pid 3810:tid 3822] [client 20.151.227.112:1922] File does not exist: /usr/local/apache/htdocs/suspended-page/classc.php
[Tue Apr 14 23:30:49.629167 2026] [:error] [pid 3810:tid 3826] [client 20.151.227.112:1922] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Tue Apr 14 23:30:49.839838 2026] [:error] [pid 3810:tid 3818] [client 20.151.227.112:1922] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Tue Apr 14 23:30:50.047580 2026] [:error] [pid 3810:tid 3815] [client 20.151.227.112:1922] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Tue Apr 14 23:56:47.874836 2026] [:error] [pid 59986:tid 60027] [client 20.220.197.80:33351] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5jv56axKeW6bX4H7fWjAAAAEc"]
[Tue Apr 14 23:56:49.222612 2026] [:error] [pid 3810:tid 3835] [client 20.220.197.80:33387] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5jwcqc5XaYZhFXVGfrSwAAAZY"]
[Tue Apr 14 23:56:53.425481 2026] [:error] [pid 59987:tid 60063] [client 20.220.197.80:33294] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5jxVWpk-Tfi6_vLKpeOwAAAJA"]
[Tue Apr 14 23:56:56.969081 2026] [:error] [pid 3778:tid 3800] [client 20.220.197.80:33363] [client 20.220.197.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad5jyBx5DfpNmYF_PaEYLQAAAVQ"]
[Wed Apr 15 00:30:25.304366 2026] [:error] [pid 3778:tid 3794] [client 36.41.75.167:58607] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad5roRx5DfpNmYF_PaEiMAAAAU4"]
[Wed Apr 15 01:29:25.511688 2026] [:error] [pid 62295:tid 62311] [client 43.153.123.3:59436] [client 43.153.123.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ad55dRng-JDNFCa0Bnh-fgAAAAw"]
[Wed Apr 15 01:47:46.624767 2026] [:error] [pid 62295:tid 62318] [client 154.54.100.171:33722] [client 154.54.100.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ad59whng-JDNFCa0BniGjQAAABM"]
[Wed Apr 15 02:57:06.995034 2026] [:error] [pid 62296:tid 62345] [client 5.195.219.154:50521] [client 5.195.219.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.195.219.154, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ad6OAsTNd04nWM2DK4SyEgAAAFI"]
[Wed Apr 15 02:57:06.999723 2026] [:error] [pid 62296:tid 62345] [client 5.195.219.154:50521] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 15 03:13:48.747290 2026] [:error] [pid 62295:tid 62308] [client 59.126.168.24:61028] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Wed Apr 15 03:13:54.560405 2026] [:error] [pid 62296:tid 62327] [client 59.126.168.24:61103] File does not exist: /usr/local/apache/htdocs/suspended-page/luuf.php
[Wed Apr 15 06:15:11.869059 2026] [:error] [pid 4065:tid 4097] [client 43.167.232.38:36326] [client 43.167.232.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad68bwWArgJTHu2_6OzLgAAAABU"]
[Wed Apr 15 11:08:38.176972 2026] [:error] [pid 51186:tid 51206] [client 43.165.67.57:38310] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad8BNlfx1CjK_ZPfY1RyowAAAVI"]
[Wed Apr 15 19:04:20.697753 2026] [:error] [pid 30956:tid 30976] [client 188.26.218.56:64797] [client 188.26.218.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.26.218.56, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ad9wtEBGUpjaWntNYq1d_wAAABA"]
[Wed Apr 15 19:04:20.702694 2026] [:error] [pid 30956:tid 30976] [client 188.26.218.56:64797] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 15 20:20:50.395192 2026] [:error] [pid 31053:tid 31057] [client 170.106.113.159:44192] [client 170.106.113.159] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad-CohcEkLCmvF0fjDfKEgAAAIE"]
[Thu Apr 16 01:42:38.990140 2026] [:error] [pid 16664:tid 16739] [client 162.158.111.74:9226] [client 162.158.111.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad_ODjdzt684awDJwRT3UQAAAZQ"]
[Thu Apr 16 01:57:25.485420 2026] [:error] [pid 34542:tid 34553] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu Apr 16 01:57:25.777858 2026] [:error] [pid 34542:tid 34556] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 16 01:57:26.020131 2026] [:error] [pid 34542:tid 34553] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 16 01:57:26.325121 2026] [:error] [pid 34542:tid 34560] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 16 01:57:26.596620 2026] [:error] [pid 34542:tid 34567] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Thu Apr 16 01:57:27.193179 2026] [:error] [pid 34542:tid 34546] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Apr 16 01:57:27.447329 2026] [:error] [pid 34542:tid 34562] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Thu Apr 16 01:57:27.741082 2026] [:error] [pid 34542:tid 34559] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 16 01:57:28.041795 2026] [:error] [pid 34542:tid 34549] [client 158.158.55.117:33505] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Thu Apr 16 01:57:28.308311 2026] [:error] [pid 34542:tid 34544] [client 158.158.55.117:33505] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ad_RiAdF4OGi-asleB6KTQAAAUA"]
[Thu Apr 16 01:57:28.919579 2026] [:error] [pid 20548:tid 20567] [client 158.158.55.117:32130] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ad_RiKkpqgnqCHq6bJa0vwAAAJA"]
[Thu Apr 16 01:57:29.688614 2026] [:error] [pid 34542:tid 34559] [client 158.158.55.117:23789] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ad_RiQdF4OGi-asleB6KUAAAAU8"]
[Thu Apr 16 01:57:30.750482 2026] [:error] [pid 34542:tid 34556] [client 158.158.55.117:11236] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ad_RigdF4OGi-asleB6KVQAAAUw"]
[Thu Apr 16 01:57:31.718162 2026] [:error] [pid 20548:tid 20558] [client 158.158.55.117:49608] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ad_Ri6kpqgnqCHq6bJa0zwAAAIc"]
[Thu Apr 16 01:57:32.288167 2026] [:error] [pid 34542:tid 34559] [client 158.158.55.117:11207] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ad_RjAdF4OGi-asleB6KWQAAAU8"]
[Thu Apr 16 01:57:32.801488 2026] [:error] [pid 54814:tid 54820] [client 158.158.55.117:28888] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ad_RjDrHu_-tAAe-BOWtNgAAAYA"]
[Thu Apr 16 01:57:33.590313 2026] [:error] [pid 790:tid 808] [client 158.158.55.117:18310] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ad_RjSHz-rbrjNOa3VKpGgAAAA0"]
[Thu Apr 16 01:57:34.182136 2026] [:error] [pid 20548:tid 20559] [client 158.158.55.117:49616] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad_RjqkpqgnqCHq6bJa06gAAAIg"]
[Thu Apr 16 01:57:34.934298 2026] [:error] [pid 20548:tid 20567] [client 158.158.55.117:13716] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad_RjqkpqgnqCHq6bJa07AAAAJA"]
[Thu Apr 16 01:57:35.514139 2026] [:error] [pid 791:tid 841] [client 158.158.55.117:7179] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad_Rj7xl5Y18om2fepnbVgAAAEE"]
[Thu Apr 16 01:57:36.158748 2026] [:error] [pid 20548:tid 20562] [client 158.158.55.117:10447] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "ad_RkKkpqgnqCHq6bJa08wAAAIs"]
[Thu Apr 16 01:57:36.712189 2026] [:error] [pid 34542:tid 34547] [client 158.158.55.117:10665] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ad_RkAdF4OGi-asleB6KaAAAAUM"]
[Thu Apr 16 01:57:37.637024 2026] [:error] [pid 792:tid 876] [client 158.158.55.117:21136] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ad_Rkd3PZ8z30TezIkZgigAAAMc"]
[Thu Apr 16 01:57:38.968954 2026] [:error] [pid 20548:tid 20575] [client 158.158.55.117:9129] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ad_RkqkpqgnqCHq6bJa0_QAAAJg"]
[Thu Apr 16 01:57:40.142737 2026] [:error] [pid 34542:tid 34557] [client 158.158.55.117:33462] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "ad_RlAdF4OGi-asleB6KdgAAAU0"]
[Thu Apr 16 01:57:41.175641 2026] [:error] [pid 34542:tid 34554] [client 158.158.55.117:21700] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ad_RlQdF4OGi-asleB6KeQAAAUo"]
[Thu Apr 16 01:57:42.175872 2026] [:error] [pid 34542:tid 34553] [client 158.158.55.117:33496] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ad_RlgdF4OGi-asleB6KfgAAAUk"]
[Thu Apr 16 01:57:43.206530 2026] [:error] [pid 912:tid 970] [client 158.158.55.117:7171] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ad_Rl8U0_VzYCBipADkyQQAAAQI"]
[Thu Apr 16 01:57:44.036036 2026] [:error] [pid 20548:tid 20551] [client 158.158.55.117:11253] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ad_RmKkpqgnqCHq6bJa1EgAAAIA"]
[Thu Apr 16 01:57:44.860914 2026] [:error] [pid 20548:tid 20559] [client 158.158.55.117:10640] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ad_RmKkpqgnqCHq6bJa1GwAAAIg"]
[Thu Apr 16 01:57:45.623956 2026] [:error] [pid 54814:tid 54844] [client 158.158.55.117:21735] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ad_RmTrHu_-tAAe-BOWtRAAAAZg"]
[Thu Apr 16 01:57:46.827697 2026] [:error] [pid 20548:tid 20553] [client 158.158.55.117:37326] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ad_RmqkpqgnqCHq6bJa1JQAAAII"]
[Thu Apr 16 01:57:48.508813 2026] [:error] [pid 20548:tid 20575] [client 158.158.55.117:35223] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "ad_RnKkpqgnqCHq6bJa1LwAAAJg"]
[Thu Apr 16 01:57:49.664436 2026] [:error] [pid 912:tid 977] [client 158.158.55.117:21735] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ad_RncU0_VzYCBipADkyRAAAAQk"]
[Thu Apr 16 01:57:50.589406 2026] [:error] [pid 20548:tid 20574] [client 158.158.55.117:47137] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ad_RnqkpqgnqCHq6bJa1PwAAAJc"]
[Thu Apr 16 01:57:51.331965 2026] [:error] [pid 20548:tid 20566] [client 158.158.55.117:35248] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ad_Rn6kpqgnqCHq6bJa1SAAAAI8"]
[Thu Apr 16 01:57:52.156295 2026] [:error] [pid 912:tid 974] [client 158.158.55.117:35286] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ad_RoMU0_VzYCBipADkySAAAAQY"]
[Thu Apr 16 01:57:53.079944 2026] [:error] [pid 34542:tid 34550] [client 158.158.55.117:25764] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ad_RoQdF4OGi-asleB6KjgAAAUY"]
[Thu Apr 16 01:57:53.925133 2026] [:error] [pid 20548:tid 20572] [client 158.158.55.117:37310] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ad_RoakpqgnqCHq6bJa1XAAAAJU"]
[Thu Apr 16 01:57:56.113775 2026] [:error] [pid 20548:tid 20569] [client 158.158.55.117:30928] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ad_RpKkpqgnqCHq6bJa1hgAAAJI"]
[Thu Apr 16 01:57:57.338437 2026] [:error] [pid 20548:tid 20570] [client 158.158.55.117:30874] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ad_RpakpqgnqCHq6bJa1oQAAAJM"]
[Thu Apr 16 01:57:58.509750 2026] [:error] [pid 912:tid 972] [client 158.158.55.117:9119] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "ad_RpsU0_VzYCBipADkyTwAAAQQ"]
[Thu Apr 16 01:57:59.912148 2026] [:error] [pid 792:tid 896] [client 158.158.55.117:25778] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "ad_Rp93PZ8z30TezIkZgkQAAANI"]
[Thu Apr 16 01:58:02.597467 2026] [:error] [pid 792:tid 905] [client 158.158.55.117:25761] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "ad_Rqt3PZ8z30TezIkZglgAAANc"]
[Thu Apr 16 01:59:08.184344 2026] [:error] [pid 20548:tid 20557] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 16 01:59:08.425725 2026] [:error] [pid 20548:tid 20571] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 16 01:59:08.666959 2026] [:error] [pid 20548:tid 20574] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Thu Apr 16 01:59:09.099729 2026] [:error] [pid 20548:tid 20551] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Thu Apr 16 01:59:09.438542 2026] [:error] [pid 20548:tid 20562] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Thu Apr 16 01:59:09.789527 2026] [:error] [pid 20548:tid 20560] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Thu Apr 16 01:59:10.051417 2026] [:error] [pid 20548:tid 20568] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 16 01:59:10.294344 2026] [:error] [pid 20548:tid 20557] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 16 01:59:10.535984 2026] [:error] [pid 20548:tid 20554] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu Apr 16 01:59:10.777088 2026] [:error] [pid 20548:tid 20564] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Thu Apr 16 01:59:11.019250 2026] [:error] [pid 20548:tid 20571] [client 158.158.55.117:24263] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Thu Apr 16 01:59:11.259639 2026] [:error] [pid 20548:tid 20569] [client 158.158.55.117:24263] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ad_R76kpqgnqCHq6bJa25AAAAJI"]
[Thu Apr 16 01:59:12.022585 2026] [:error] [pid 792:tid 872] [client 158.158.55.117:3048] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ad_R8N3PZ8z30TezIkZg1QAAAMM"]
[Thu Apr 16 01:59:12.933896 2026] [:error] [pid 792:tid 874] [client 158.158.55.117:23194] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ad_R8N3PZ8z30TezIkZg2AAAAMU"]
[Thu Apr 16 01:59:13.628717 2026] [:error] [pid 792:tid 893] [client 158.158.55.117:2808] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ad_R8d3PZ8z30TezIkZg2wAAAM8"]
[Thu Apr 16 01:59:14.265811 2026] [:error] [pid 792:tid 881] [client 158.158.55.117:29874] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad_R8t3PZ8z30TezIkZg3QAAAMk"]
[Thu Apr 16 01:59:14.912003 2026] [:error] [pid 20548:tid 20572] [client 158.158.55.117:44588] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad_R8qkpqgnqCHq6bJa26AAAAJU"]
[Thu Apr 16 01:59:15.433320 2026] [:error] [pid 912:tid 985] [client 158.158.55.117:37838] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad_R88U0_VzYCBipADkyqgAAARE"]
[Thu Apr 16 01:59:16.276679 2026] [:error] [pid 54814:tid 54823] [client 158.158.55.117:11163] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "ad_R9DrHu_-tAAe-BOWt1AAAAYM"]
[Thu Apr 16 01:59:17.135063 2026] [:error] [pid 790:tid 836] [client 158.158.55.117:49154] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "ad_R9SHz-rbrjNOa3VKpKgAAABc"]
[Thu Apr 16 01:59:17.735341 2026] [:error] [pid 792:tid 873] [client 158.158.55.117:29367] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "ad_R9d3PZ8z30TezIkZg3gAAAMQ"]
[Thu Apr 16 01:59:18.363093 2026] [:error] [pid 54814:tid 54841] [client 158.158.55.117:15302] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "ad_R9jrHu_-tAAe-BOWt2wAAAZU"]
[Thu Apr 16 01:59:18.895021 2026] [:error] [pid 54814:tid 54825] [client 158.158.55.117:23198] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "ad_R9jrHu_-tAAe-BOWt3gAAAYU"]
[Thu Apr 16 01:59:19.520998 2026] [:error] [pid 34542:tid 34558] [client 158.158.55.117:2406] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_R9wdF4OGi-asleB6LegAAAU4"]
[Thu Apr 16 01:59:20.936908 2026] [:error] [pid 20548:tid 20575] [client 158.158.55.117:29329] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_R-KkpqgnqCHq6bJa29QAAAJg"]
[Thu Apr 16 01:59:21.684014 2026] [:error] [pid 792:tid 895] [client 158.158.55.117:22753] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_R-d3PZ8z30TezIkZg4QAAANE"]
[Thu Apr 16 01:59:22.751552 2026] [:error] [pid 20548:tid 20555] [client 158.158.55.117:3065] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ad_R-qkpqgnqCHq6bJa2_wAAAIQ"]
[Thu Apr 16 01:59:24.189896 2026] [:error] [pid 34542:tid 34559] [client 158.158.55.117:49549] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ad_R_AdF4OGi-asleB6LnAAAAU8"]
[Thu Apr 16 01:59:24.893109 2026] [:error] [pid 20548:tid 20555] [client 158.158.55.117:39100] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ad_R_KkpqgnqCHq6bJa3EQAAAIQ"]
[Thu Apr 16 01:59:26.271276 2026] [:error] [pid 20548:tid 20551] [client 158.158.55.117:30620] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ad_R_qkpqgnqCHq6bJa3GQAAAIA"]
[Thu Apr 16 01:59:28.183574 2026] [:error] [pid 20548:tid 20575] [client 158.158.55.117:45438] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ad_SAKkpqgnqCHq6bJa3JQAAAJg"]
[Thu Apr 16 01:59:29.263469 2026] [:error] [pid 54814:tid 54820] [client 158.158.55.117:2973] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ad_SATrHu_-tAAe-BOWt7QAAAYA"]
[Thu Apr 16 01:59:29.863976 2026] [:error] [pid 54814:tid 54832] [client 158.158.55.117:39082] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ad_SATrHu_-tAAe-BOWt8AAAAYw"]
[Thu Apr 16 01:59:30.539732 2026] [:error] [pid 792:tid 881] [client 158.158.55.117:32215] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ad_SAt3PZ8z30TezIkZg5QAAAMk"]
[Thu Apr 16 01:59:31.088950 2026] [:error] [pid 34542:tid 34554] [client 158.158.55.117:14807] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ad_SAwdF4OGi-asleB6L3QAAAUo"]
[Thu Apr 16 01:59:31.662251 2026] [:error] [pid 912:tid 974] [client 158.158.55.117:23741] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ad_SA8U0_VzYCBipADkywAAAAQY"]
[Thu Apr 16 01:59:32.393490 2026] [:error] [pid 34542:tid 34562] [client 158.158.55.117:26290] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ad_SBAdF4OGi-asleB6L3gAAAVI"]
[Thu Apr 16 01:59:33.140017 2026] [:error] [pid 34542:tid 34557] [client 158.158.55.117:14817] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ad_SBQdF4OGi-asleB6L4gAAAU0"]
[Thu Apr 16 01:59:33.696175 2026] [:error] [pid 20548:tid 20555] [client 158.158.55.117:26260] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ad_SBakpqgnqCHq6bJa3KwAAAIQ"]
[Thu Apr 16 01:59:35.311919 2026] [:error] [pid 34542:tid 34553] [client 158.158.55.117:13299] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_SBwdF4OGi-asleB6L5gAAAUk"]
[Thu Apr 16 01:59:36.202029 2026] [:error] [pid 20548:tid 20574] [client 158.158.55.117:23258] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_SCKkpqgnqCHq6bJa3MQAAAJc"]
[Thu Apr 16 01:59:37.138999 2026] [:error] [pid 34542:tid 34560] [client 158.158.55.117:8523] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_SCQdF4OGi-asleB6L6QAAAVA"]
[Thu Apr 16 01:59:38.338510 2026] [:error] [pid 791:tid 865] [client 158.158.55.117:23276] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ad_SCrxl5Y18om2fepnbvwAAAFc"]
[Thu Apr 16 01:59:39.143067 2026] [:error] [pid 34542:tid 34551] [client 158.158.55.117:16369] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "ad_SCwdF4OGi-asleB6L7QAAAUc"]
[Thu Apr 16 01:59:40.091908 2026] [:error] [pid 34542:tid 34554] [client 158.158.55.117:2563] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "ad_SDAdF4OGi-asleB6L8AAAAUo"]
[Thu Apr 16 01:59:40.724289 2026] [:error] [pid 20548:tid 20560] [client 158.158.55.117:38504] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "ad_SDKkpqgnqCHq6bJa3PAAAAIk"]
[Thu Apr 16 01:59:41.332254 2026] [:error] [pid 790:tid 824] [client 158.158.55.117:23259] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "ad_SDSHz-rbrjNOa3VKpLwAAABM"]
[Thu Apr 16 01:59:42.118197 2026] [:error] [pid 34542:tid 34552] [client 158.158.55.117:14326] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad_SDgdF4OGi-asleB6L8gAAAUg"]
[Thu Apr 16 01:59:42.691248 2026] [:error] [pid 34542:tid 34558] [client 158.158.55.117:14281] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad_SDgdF4OGi-asleB6L8wAAAU4"]
[Thu Apr 16 01:59:43.441103 2026] [:error] [pid 34542:tid 34562] [client 158.158.55.117:42800] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad_SDwdF4OGi-asleB6L9AAAAVI"]
[Thu Apr 16 01:59:44.720694 2026] [:error] [pid 34542:tid 34560] [client 158.158.55.117:14720] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad_SEAdF4OGi-asleB6L9QAAAVA"]
[Thu Apr 16 01:59:46.546898 2026] [:error] [pid 34542:tid 34558] [client 158.158.55.117:24718] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "ad_SEgdF4OGi-asleB6L_wAAAU4"]
[Thu Apr 16 01:59:48.303328 2026] [:error] [pid 20548:tid 20560] [client 158.158.55.117:38518] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "ad_SFKkpqgnqCHq6bJa3VAAAAIk"]
[Thu Apr 16 01:59:49.115757 2026] [:error] [pid 20548:tid 20555] [client 158.158.55.117:18833] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "ad_SFakpqgnqCHq6bJa3WAAAAIQ"]
[Thu Apr 16 01:59:50.081679 2026] [:error] [pid 791:tid 860] [client 158.158.55.117:23248] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "ad_SFrxl5Y18om2fepnbyAAAAFI"]
[Thu Apr 16 01:59:50.940638 2026] [:error] [pid 791:tid 862] [client 158.158.55.117:24755] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "ad_SFrxl5Y18om2fepnbygAAAFQ"]
[Thu Apr 16 01:59:52.105857 2026] [:error] [pid 34542:tid 34551] [client 158.158.55.117:41719] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "ad_SGAdF4OGi-asleB6MDwAAAUc"]
[Thu Apr 16 01:59:53.179057 2026] [:error] [pid 34542:tid 34552] [client 158.158.55.117:42801] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "ad_SGQdF4OGi-asleB6MGgAAAUg"]
[Thu Apr 16 01:59:54.270197 2026] [:error] [pid 792:tid 905] [client 158.158.55.117:42797] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "ad_SGt3PZ8z30TezIkZg7wAAANc"]
[Thu Apr 16 01:59:55.023718 2026] [:error] [pid 54814:tid 54844] [client 158.158.55.117:19349] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ad_SGzrHu_-tAAe-BOWuAAAAAZg"]
[Thu Apr 16 01:59:55.709466 2026] [:error] [pid 912:tid 976] [client 158.158.55.117:12757] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ad_SG8U0_VzYCBipADky3wAAAQg"]
[Thu Apr 16 01:59:56.222508 2026] [:error] [pid 912:tid 986] [client 158.158.55.117:19363] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ad_SHMU0_VzYCBipADky4gAAARI"]
[Thu Apr 16 01:59:56.851706 2026] [:error] [pid 792:tid 894] [client 158.158.55.117:48553] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ad_SHN3PZ8z30TezIkZg9AAAANA"]
[Thu Apr 16 01:59:57.713976 2026] [:error] [pid 54814:tid 54833] [client 158.158.55.117:42784] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "ad_SHTrHu_-tAAe-BOWuCQAAAY0"]
[Thu Apr 16 01:59:58.378504 2026] [:error] [pid 54814:tid 54844] [client 158.158.55.117:24758] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "ad_SHjrHu_-tAAe-BOWuDgAAAZg"]
[Thu Apr 16 01:59:59.101005 2026] [:error] [pid 20548:tid 20563] [client 158.158.55.117:48531] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "ad_SH6kpqgnqCHq6bJa3ZAAAAIw"]
[Thu Apr 16 01:59:59.857825 2026] [:error] [pid 912:tid 977] [client 158.158.55.117:10940] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "ad_SH8U0_VzYCBipADky6gAAAQk"]
[Thu Apr 16 02:00:00.418530 2026] [:error] [pid 912:tid 990] [client 158.158.55.117:33955] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ad_SIMU0_VzYCBipADky7QAAARY"]
[Thu Apr 16 02:00:00.939404 2026] [:error] [pid 912:tid 988] [client 158.158.55.117:37764] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ad_SIMU0_VzYCBipADky7wAAARQ"]
[Thu Apr 16 02:00:01.537143 2026] [:error] [pid 912:tid 976] [client 158.158.55.117:8571] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ad_SIcU0_VzYCBipADky8QAAAQg"]
[Thu Apr 16 02:00:02.036126 2026] [:error] [pid 791:tid 843] [client 158.158.55.117:23279] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "ad_SIrxl5Y18om2fepnb0QAAAEM"]
[Thu Apr 16 02:00:02.570150 2026] [:error] [pid 54814:tid 54837] [client 158.158.55.117:48623] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ad_SIjrHu_-tAAe-BOWuHwAAAZE"]
[Thu Apr 16 02:00:03.220840 2026] [:error] [pid 792:tid 896] [client 158.158.55.117:9357] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ad_SI93PZ8z30TezIkZg9gAAANI"]
[Thu Apr 16 02:00:03.744099 2026] [:error] [pid 54814:tid 54843] [client 158.158.55.117:16352] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ad_SIzrHu_-tAAe-BOWuIQAAAZc"]
[Thu Apr 16 02:00:04.271440 2026] [:error] [pid 792:tid 877] [client 158.158.55.117:19424] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ad_SJN3PZ8z30TezIkZg-gAAAMg"]
[Thu Apr 16 02:00:04.990798 2026] [:error] [pid 34542:tid 34564] [client 158.158.55.117:37804] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "ad_SJAdF4OGi-asleB6MKAAAAVQ"]
[Thu Apr 16 02:00:05.585310 2026] [:error] [pid 791:tid 860] [client 158.158.55.117:9362] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "ad_SJbxl5Y18om2fepnb3AAAAFI"]
[Thu Apr 16 02:00:06.255746 2026] [:error] [pid 54814:tid 54820] [client 158.158.55.117:48613] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "ad_SJjrHu_-tAAe-BOWuJwAAAYA"]
[Thu Apr 16 02:00:06.981855 2026] [:error] [pid 792:tid 904] [client 158.158.55.117:40362] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "ad_SJt3PZ8z30TezIkZg_QAAANY"]
[Thu Apr 16 02:00:07.490570 2026] [:error] [pid 54814:tid 54831] [client 158.158.55.117:2635] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ad_SJzrHu_-tAAe-BOWuKQAAAYs"]
[Thu Apr 16 02:00:08.020293 2026] [:error] [pid 912:tid 968] [client 158.158.55.117:33962] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ad_SKMU0_VzYCBipADkzAwAAAQA"]
[Thu Apr 16 02:00:08.621110 2026] [:error] [pid 34542:tid 34553] [client 158.158.55.117:16348] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ad_SKAdF4OGi-asleB6MLgAAAUk"]
[Thu Apr 16 02:00:09.173517 2026] [:error] [pid 34542:tid 34546] [client 158.158.55.117:14322] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ad_SKQdF4OGi-asleB6MMQAAAUI"]
[Thu Apr 16 02:00:09.713090 2026] [:error] [pid 54814:tid 54828] [client 158.158.55.117:19348] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "ad_SKTrHu_-tAAe-BOWuLAAAAYg"]
[Thu Apr 16 02:00:10.687369 2026] [:error] [pid 34542:tid 34551] [client 158.158.55.117:2652] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "ad_SKgdF4OGi-asleB6MOgAAAUc"]
[Thu Apr 16 02:00:11.460169 2026] [:error] [pid 20548:tid 20573] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Thu Apr 16 02:00:11.728846 2026] [:error] [pid 20548:tid 20552] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Thu Apr 16 02:00:12.099090 2026] [:error] [pid 20548:tid 20570] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu Apr 16 02:00:12.379616 2026] [:error] [pid 20548:tid 20555] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Thu Apr 16 02:00:12.939220 2026] [:error] [pid 20548:tid 20556] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/ws48.php
[Thu Apr 16 02:00:13.181523 2026] [:error] [pid 20548:tid 20563] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu Apr 16 02:00:13.546493 2026] [:error] [pid 20548:tid 20575] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Apr 16 02:00:13.873718 2026] [:error] [pid 20548:tid 20566] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu Apr 16 02:00:14.153290 2026] [:error] [pid 20548:tid 20557] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Thu Apr 16 02:00:14.445862 2026] [:error] [pid 20548:tid 20574] [client 158.158.55.117:2680] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Thu Apr 16 02:00:14.881929 2026] [:error] [pid 20548:tid 20551] [client 158.158.55.117:2680] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_SLqkpqgnqCHq6bJa3fgAAAIA"]
[Thu Apr 16 02:00:15.667647 2026] [:error] [pid 54814:tid 54821] [client 158.158.55.117:41703] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_SLzrHu_-tAAe-BOWuQQAAAYE"]
[Thu Apr 16 02:00:16.514453 2026] [:error] [pid 20548:tid 20560] [client 158.158.55.117:14750] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_SMKkpqgnqCHq6bJa3gQAAAIk"]
[Thu Apr 16 02:00:17.949019 2026] [:error] [pid 791:tid 856] [client 158.158.55.117:16355] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ad_SMbxl5Y18om2fepnb6QAAAE4"]
[Thu Apr 16 02:00:18.956708 2026] [:error] [pid 20548:tid 20559] [client 158.158.55.117:41676] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ad_SMqkpqgnqCHq6bJa3iAAAAIg"]
[Thu Apr 16 02:00:19.969987 2026] [:error] [pid 20548:tid 20551] [client 158.158.55.117:23249] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ad_SM6kpqgnqCHq6bJa3jgAAAIA"]
[Thu Apr 16 02:00:20.614418 2026] [:error] [pid 20548:tid 20572] [client 158.158.55.117:17308] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ad_SNKkpqgnqCHq6bJa3kgAAAJU"]
[Thu Apr 16 02:00:21.434091 2026] [:error] [pid 54814:tid 54830] [client 158.158.55.117:26262] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "ad_SNTrHu_-tAAe-BOWuUgAAAYo"]
[Thu Apr 16 02:00:23.237684 2026] [:error] [pid 790:tid 800] [client 158.158.55.117:14838] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ad_SNyHz-rbrjNOa3VKpQwAAAAY"]
[Thu Apr 16 02:00:23.927760 2026] [:error] [pid 34542:tid 34559] [client 158.158.55.117:27538] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ad_SNwdF4OGi-asleB6MTgAAAU8"]
[Thu Apr 16 02:00:24.905619 2026] [:error] [pid 20548:tid 20553] [client 158.158.55.117:34782] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ad_SOKkpqgnqCHq6bJa3mQAAAII"]
[Thu Apr 16 02:00:25.855871 2026] [:error] [pid 34542:tid 34545] [client 158.158.55.117:23237] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ad_SOQdF4OGi-asleB6MYgAAAUE"]
[Thu Apr 16 02:00:26.416040 2026] [:error] [pid 54814:tid 54829] [client 158.158.55.117:26255] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ad_SOjrHu_-tAAe-BOWuXgAAAYk"]
[Thu Apr 16 02:00:26.966935 2026] [:error] [pid 20548:tid 20552] [client 158.158.55.117:18863] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ad_SOqkpqgnqCHq6bJa3nQAAAIE"]
[Thu Apr 16 02:00:27.619023 2026] [:error] [pid 912:tid 991] [client 158.158.55.117:26288] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ad_SO8U0_VzYCBipADkzJgAAARc"]
[Thu Apr 16 02:00:28.311292 2026] [:error] [pid 54814:tid 54823] [client 158.158.55.117:29942] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ad_SPDrHu_-tAAe-BOWuYgAAAYM"]
[Thu Apr 16 02:00:28.847866 2026] [:error] [pid 912:tid 972] [client 158.158.55.117:14742] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ad_SPMU0_VzYCBipADkzKgAAAQQ"]
[Thu Apr 16 02:00:29.552580 2026] [:error] [pid 912:tid 970] [client 158.158.55.117:17302] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ad_SPcU0_VzYCBipADkzLAAAAQI"]
[Thu Apr 16 02:00:30.231784 2026] [:error] [pid 20548:tid 20562] [client 158.158.55.117:50425] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ad_SPqkpqgnqCHq6bJa3qAAAAIs"]
[Thu Apr 16 02:00:31.218506 2026] [:error] [pid 791:tid 847] [client 158.158.55.117:50404] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ad_SP7xl5Y18om2fepnb9gAAAEc"]
[Thu Apr 16 02:00:31.914211 2026] [:error] [pid 790:tid 822] [client 158.158.55.117:36506] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "ad_SPyHz-rbrjNOa3VKpSAAAABE"]
[Thu Apr 16 02:00:32.537577 2026] [:error] [pid 791:tid 863] [client 158.158.55.117:32248] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "ad_SQLxl5Y18om2fepnb_AAAAFU"]
[Thu Apr 16 02:00:33.081929 2026] [:error] [pid 912:tid 981] [client 158.158.55.117:2548] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "ad_SQcU0_VzYCBipADkzMAAAAQ0"]
[Thu Apr 16 02:00:34.007935 2026] [:error] [pid 54814:tid 54840] [client 158.158.55.117:32220] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "ad_SQjrHu_-tAAe-BOWubgAAAZQ"]
[Thu Apr 16 02:00:34.846908 2026] [:error] [pid 912:tid 969] [client 158.158.55.117:2504] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ad_SQsU0_VzYCBipADkzOAAAAQE"]
[Thu Apr 16 02:00:36.062026 2026] [:error] [pid 912:tid 992] [client 158.158.55.117:32209] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ad_SRMU0_VzYCBipADkzOwAAARg"]
[Thu Apr 16 02:00:37.201321 2026] [:error] [pid 792:tid 895] [client 158.158.55.117:39083] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ad_SRd3PZ8z30TezIkZhPwAAANE"]
[Thu Apr 16 02:00:38.001199 2026] [:error] [pid 34542:tid 34557] [client 158.158.55.117:9466] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ad_SRQdF4OGi-asleB6MqwAAAU0"]
[Thu Apr 16 02:00:38.924320 2026] [:error] [pid 792:tid 881] [client 158.158.55.117:9462] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "ad_SRt3PZ8z30TezIkZhRQAAAMk"]
[Thu Apr 16 02:00:40.110387 2026] [:error] [pid 912:tid 977] [client 158.158.55.117:9948] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "ad_SSMU0_VzYCBipADkzQwAAAQk"]
[Thu Apr 16 02:00:41.092445 2026] [:error] [pid 790:tid 823] [client 158.158.55.117:39683] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "ad_SSSHz-rbrjNOa3VKpYwAAABI"]
[Thu Apr 16 02:00:41.772552 2026] [:error] [pid 20548:tid 20565] [client 158.158.55.117:61265] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "ad_SSakpqgnqCHq6bJa3vgAAAI4"]
[Thu Apr 16 02:00:42.615524 2026] [:error] [pid 912:tid 991] [client 158.158.55.117:2911] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ad_SSsU0_VzYCBipADkzSQAAARc"]
[Thu Apr 16 02:00:43.354450 2026] [:error] [pid 34542:tid 34550] [client 158.158.55.117:36484] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ad_SSwdF4OGi-asleB6MxgAAAUY"]
[Thu Apr 16 02:00:44.056891 2026] [:error] [pid 20548:tid 20553] [client 158.158.55.117:2920] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ad_STKkpqgnqCHq6bJa3wgAAAII"]
[Thu Apr 16 02:00:44.669992 2026] [:error] [pid 34542:tid 34553] [client 158.158.55.117:28827] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ad_STAdF4OGi-asleB6M0AAAAUk"]
[Thu Apr 16 02:00:45.345192 2026] [:error] [pid 790:tid 797] [client 158.158.55.117:44033] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad_STSHz-rbrjNOa3VKpbAAAAAM"]
[Thu Apr 16 02:00:46.142623 2026] [:error] [pid 790:tid 808] [client 158.158.55.117:61291] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad_STiHz-rbrjNOa3VKpcAAAAA0"]
[Thu Apr 16 02:00:46.741535 2026] [:error] [pid 790:tid 800] [client 158.158.55.117:30647] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad_STiHz-rbrjNOa3VKpdAAAAAY"]
[Thu Apr 16 02:00:47.385480 2026] [:error] [pid 54814:tid 54826] [client 158.158.55.117:61294] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "ad_STzrHu_-tAAe-BOWuhAAAAYY"]
[Thu Apr 16 02:00:47.987878 2026] [:error] [pid 54814:tid 54836] [client 158.158.55.117:39048] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ad_STzrHu_-tAAe-BOWujAAAAZA"]
[Thu Apr 16 02:00:48.834634 2026] [:error] [pid 20548:tid 20556] [client 158.158.55.117:45406] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ad_SUKkpqgnqCHq6bJa30wAAAIU"]
[Thu Apr 16 02:00:50.521431 2026] [:error] [pid 790:tid 822] [client 158.158.55.117:44081] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ad_SUiHz-rbrjNOa3VKpdwAAABE"]
[Thu Apr 16 02:00:51.364881 2026] [:error] [pid 912:tid 984] [client 158.158.55.117:19931] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ad_SU8U0_VzYCBipADkzUAAAARA"]
[Thu Apr 16 02:00:52.604508 2026] [:error] [pid 54814:tid 54826] [client 158.158.55.117:23185] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "ad_SVDrHu_-tAAe-BOWukAAAAYY"]
[Thu Apr 16 02:00:53.318336 2026] [:error] [pid 20548:tid 20568] [client 158.158.55.117:18373] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "ad_SVakpqgnqCHq6bJa36gAAAJE"]
[Thu Apr 16 02:00:53.930097 2026] [:error] [pid 20548:tid 20570] [client 158.158.55.117:29339] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "ad_SVakpqgnqCHq6bJa39AAAAJM"]
[Thu Apr 16 02:00:54.760470 2026] [:error] [pid 790:tid 806] [client 158.158.55.117:30896] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "ad_SViHz-rbrjNOa3VKpegAAAAs"]
[Thu Apr 16 02:00:55.288125 2026] [:error] [pid 54814:tid 54835] [client 158.158.55.117:3051] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ad_SVzrHu_-tAAe-BOWumgAAAY8"]
[Thu Apr 16 02:00:55.986688 2026] [:error] [pid 54814:tid 54844] [client 158.158.55.117:40959] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ad_SVzrHu_-tAAe-BOWungAAAZg"]
[Thu Apr 16 02:00:56.618738 2026] [:error] [pid 54814:tid 54840] [client 158.158.55.117:30967] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ad_SWDrHu_-tAAe-BOWuowAAAZQ"]
[Thu Apr 16 02:00:57.174456 2026] [:error] [pid 20548:tid 20553] [client 158.158.55.117:30955] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ad_SWakpqgnqCHq6bJa4EQAAAII"]
[Thu Apr 16 02:00:57.774140 2026] [:error] [pid 791:tid 861] [client 158.158.55.117:2777] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "ad_SWbxl5Y18om2fepncHwAAAFM"]
[Thu Apr 16 02:00:58.353028 2026] [:error] [pid 790:tid 804] [client 158.158.55.117:29361] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "ad_SWiHz-rbrjNOa3VKpewAAAAk"]
[Thu Apr 16 02:00:59.035778 2026] [:error] [pid 34542:tid 34544] [client 158.158.55.117:29345] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "ad_SWwdF4OGi-asleB6M7AAAAUA"]
[Thu Apr 16 02:00:59.734176 2026] [:error] [pid 792:tid 871] [client 158.158.55.117:32948] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "ad_SW93PZ8z30TezIkZhUgAAAMI"]
[Thu Apr 16 02:01:00.618893 2026] [:error] [pid 791:tid 863] [client 158.158.55.117:26305] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ad_SXLxl5Y18om2fepncIwAAAFU"]
[Thu Apr 16 02:01:01.216859 2026] [:error] [pid 792:tid 904] [client 158.158.55.117:30944] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ad_SXd3PZ8z30TezIkZhUwAAANY"]
[Thu Apr 16 02:01:01.889527 2026] [:error] [pid 34542:tid 34563] [client 158.158.55.117:24289] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ad_SXQdF4OGi-asleB6M8QAAAVM"]
[Thu Apr 16 02:01:02.786329 2026] [:error] [pid 34542:tid 34561] [client 158.158.55.117:30877] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ad_SXgdF4OGi-asleB6M8gAAAVE"]
[Thu Apr 16 02:01:03.459624 2026] [:error] [pid 54814:tid 54822] [client 158.158.55.117:8309] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_SXzrHu_-tAAe-BOWurwAAAYI"]
[Thu Apr 16 02:01:04.066460 2026] [:error] [pid 912:tid 991] [client 158.158.55.117:2782] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_SYMU0_VzYCBipADkzUwAAARc"]
[Thu Apr 16 02:01:04.771220 2026] [:error] [pid 34542:tid 34550] [client 158.158.55.117:8304] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_SYAdF4OGi-asleB6M8wAAAUY"]
[Thu Apr 16 02:01:08.258894 2026] [:error] [pid 912:tid 973] [client 158.158.55.117:10967] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "ad_SZMU0_VzYCBipADkzVwAAAQU"]
[Thu Apr 16 02:01:10.159254 2026] [:error] [pid 790:tid 826] [client 158.158.55.117:33507] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad_SZiHz-rbrjNOa3VKpfQAAABU"]
[Thu Apr 16 02:01:11.229306 2026] [:error] [pid 20548:tid 20569] [client 158.158.55.117:7742] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad_SZ6kpqgnqCHq6bJa4QAAAAJI"]
[Thu Apr 16 02:01:11.908194 2026] [:error] [pid 34542:tid 34550] [client 158.158.55.117:10679] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad_SZwdF4OGi-asleB6M-wAAAUY"]
[Thu Apr 16 02:01:12.605227 2026] [:error] [pid 34542:tid 34556] [client 158.158.55.117:9089] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "ad_SaAdF4OGi-asleB6NBwAAAUw"]
[Thu Apr 16 02:01:13.564857 2026] [:error] [pid 912:tid 992] [client 158.158.55.117:7739] [client 158.158.55.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "ad_SacU0_VzYCBipADkzWgAAARg"]
[Thu Apr 16 02:01:14.361116 2026] [:error] [pid 912:tid 990] [client 158.158.55.117:21173] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Thu Apr 16 02:01:14.607378 2026] [:error] [pid 912:tid 979] [client 158.158.55.117:21173] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Thu Apr 16 02:01:14.850665 2026] [:error] [pid 912:tid 986] [client 158.158.55.117:21173] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Thu Apr 16 02:01:15.194127 2026] [:error] [pid 912:tid 974] [client 158.158.55.117:21173] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Thu Apr 16 02:01:15.730251 2026] [:error] [pid 912:tid 980] [client 158.158.55.117:21173] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Thu Apr 16 02:01:16.270872 2026] [:error] [pid 912:tid 972] [client 158.158.55.117:21173] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Thu Apr 16 02:01:17.331124 2026] [:error] [pid 912:tid 971] [client 158.158.55.117:21173] [client 158.158.55.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "ad_SbcU0_VzYCBipADkzYwAAAQM"]
[Thu Apr 16 02:01:19.788290 2026] [:error] [pid 790:tid 794] [client 158.158.55.117:24228] File does not exist: /usr/local/apache/htdocs/suspended-page/mk.php
[Thu Apr 16 02:03:29.863607 2026] [:error] [pid 34542:tid 34558] [client 36.111.67.189:46301] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad_S8QdF4OGi-asleB6PSQAAAU4"]
[Thu Apr 16 02:43:11.324312 2026] [:error] [pid 790:tid 804] [client 91.200.101.138:50684] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/graphql"] [unique_id "ad_cPyHz-rbrjNOa3VKtRgAAAAk"]
[Thu Apr 16 03:32:53.858765 2026] [:error] [pid 53372:tid 53531] [client 43.153.36.110:33590] [client 43.153.36.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ad_n5bPhhzWT6ZgixWAj2QAAAEo"]
[Thu Apr 16 04:22:39.114418 2026] [ssl:error] [pid 57639:tid 57666] [client 143.244.47.83:20866] AH02032: Hostname www.topflightoutfitters.com provided via SNI and hostname dbservices.com.au provided via HTTP have no compatible SSL setup
[Thu Apr 16 05:31:37.043568 2026] [:error] [pid 49094:tid 49114] [client 216.73.216.189:1219] [client 216.73.216.189] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.dbservices.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/robots.txt"] [unique_id "aeADuTbDwvcXorHR_MxtoQAAAVI"]
[Thu Apr 16 06:21:12.254583 2026] [:error] [pid 57538:tid 57619] [client 170.106.110.146:57610] [client 170.106.110.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeAPWMuMaiEF5SVR2Bc0nwAAAJE"]
[Thu Apr 16 10:56:07.827366 2026] [:error] [pid 7880:tid 7891] [client 49.51.166.228:47742] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeBPx6aezm4fSGc0yULyZwAAAYY"]
[Thu Apr 16 13:06:12.673053 2026] [:error] [pid 57639:tid 57649] [client 20.199.125.41:56122] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php
[Thu Apr 16 13:45:03.352740 2026] [:error] [pid 7880:tid 7891] [client 98.93.160.221:39444] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aeB3X6aezm4fSGc0yUIsqgAAAYY"]
[Thu Apr 16 14:14:00.866716 2026] [:error] [pid 57538:tid 57622] [client 36.111.67.189:51466] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeB-KMuMaiEF5SVR2BeTdwAAAJQ"]
[Thu Apr 16 14:21:01.079504 2026] [:error] [pid 49094:tid 49110] [client 98.93.160.221:39046] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aeB_zTbDwvcXorHR_MwyDwAAAU4"]
[Thu Apr 16 16:45:38.508691 2026] [:error] [pid 57639:tid 57648] [client 43.130.72.177:56546] [client 43.130.72.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeChsqMCQoTw7TsxWuniMgAAAMI"]
[Thu Apr 16 17:27:42.148021 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Thu Apr 16 17:27:42.598024 2026] [:error] [pid 57639:tid 57652] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Thu Apr 16 17:27:42.880025 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/il.php
[Thu Apr 16 17:27:43.221312 2026] [:error] [pid 57639:tid 57660] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Thu Apr 16 17:27:43.757726 2026] [:error] [pid 57639:tid 57662] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/ypp.php
[Thu Apr 16 17:27:44.031149 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/2468.php
[Thu Apr 16 17:27:44.309665 2026] [:error] [pid 57639:tid 57652] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/eterezrezt.php
[Thu Apr 16 17:27:45.000627 2026] [:error] [pid 57639:tid 57646] [client 51.12.89.191:11138] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Thu Apr 16 17:27:45.265831 2026] [:error] [pid 57639:tid 57647] [client 51.12.89.191:11138] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeCrkaMCQoTw7TsxWun8uAAAAME"]
[Thu Apr 16 17:27:45.821103 2026] [:error] [pid 57538:tid 57623] [client 51.12.89.191:11219] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeCrkcuMaiEF5SVR2BetfAAAAJU"]
[Thu Apr 16 17:27:46.352876 2026] [:error] [pid 57639:tid 57670] [client 51.12.89.191:11253] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeCrkqMCQoTw7TsxWun8uwAAANg"]
[Thu Apr 16 17:27:46.976568 2026] [:error] [pid 29603:tid 29608] [client 51.12.89.191:11240] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeCrklfGOR6fpTWUAzpdGgAAAQM"]
[Thu Apr 16 17:27:47.524649 2026] [:error] [pid 7880:tid 7889] [client 51.12.89.191:11231] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeCrk6aezm4fSGc0yUJfjwAAAYQ"]
[Thu Apr 16 17:27:48.142395 2026] [:error] [pid 29603:tid 29626] [client 51.12.89.191:11217] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeCrlFfGOR6fpTWUAzpdHAAAARU"]
[Thu Apr 16 17:27:48.706939 2026] [:error] [pid 7880:tid 7902] [client 51.12.89.191:11201] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeCrlKaezm4fSGc0yUJfkQAAAZE"]
[Thu Apr 16 17:27:49.238674 2026] [:error] [pid 7880:tid 7895] [client 51.12.89.191:11221] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeCrlaaezm4fSGc0yUJflQAAAYo"]
[Thu Apr 16 17:27:49.851757 2026] [:error] [pid 57536:tid 57562] [client 51.12.89.191:11162] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeCrlSQU4faGja6jpDsgeQAAAA4"]
[Thu Apr 16 17:27:50.439094 2026] [:error] [pid 57536:tid 57554] [client 51.12.89.191:11151] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeCrliQU4faGja6jpDsgfwAAAAY"]
[Thu Apr 16 17:27:50.977541 2026] [:error] [pid 57536:tid 57549] [client 51.12.89.191:11144] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeCrliQU4faGja6jpDsghQAAAAE"]
[Thu Apr 16 17:27:51.506193 2026] [:error] [pid 29603:tid 29625] [client 51.12.89.191:11248] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeCrl1fGOR6fpTWUAzpdIAAAARQ"]
[Thu Apr 16 17:27:52.037960 2026] [:error] [pid 49094:tid 49114] [client 51.12.89.191:11165] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeCrmDbDwvcXorHR_MxhzwAAAVI"]
[Thu Apr 16 17:27:52.567503 2026] [:error] [pid 57537:tid 57581] [client 51.12.89.191:11260] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeCrmFVQRS8nm73ENAmRwQAAAEY"]
[Thu Apr 16 17:27:53.096643 2026] [:error] [pid 49094:tid 49112] [client 51.12.89.191:11154] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeCrmTbDwvcXorHR_Mxh0gAAAVA"]
[Thu Apr 16 17:27:53.670171 2026] [:error] [pid 29603:tid 29628] [client 51.12.89.191:11243] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeCrmVfGOR6fpTWUAzpdJgAAARc"]
[Thu Apr 16 17:27:54.199604 2026] [:error] [pid 49094:tid 49119] [client 51.12.89.191:11212] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeCrmjbDwvcXorHR_Mxh1wAAAVc"]
[Thu Apr 16 17:27:54.782853 2026] [:error] [pid 29603:tid 29613] [client 51.12.89.191:11235] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeCrmlfGOR6fpTWUAzpdKAAAAQg"]
[Thu Apr 16 17:27:55.323282 2026] [:error] [pid 29603:tid 29608] [client 51.12.89.191:11194] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeCrm1fGOR6fpTWUAzpdLAAAAQM"]
[Thu Apr 16 17:27:55.929472 2026] [:error] [pid 57537:tid 57598] [client 51.12.89.191:11209] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeCrm1VQRS8nm73ENAmRxwAAAFc"]
[Thu Apr 16 17:27:56.463404 2026] [:error] [pid 57537:tid 57588] [client 51.12.89.191:11245] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeCrnFVQRS8nm73ENAmRywAAAE0"]
[Thu Apr 16 17:27:57.012722 2026] [:error] [pid 57537:tid 57591] [client 51.12.89.191:11258] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeCrnVVQRS8nm73ENAmRzQAAAFA"]
[Thu Apr 16 17:27:57.597545 2026] [:error] [pid 49094:tid 49102] [client 51.12.89.191:11238] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeCrnTbDwvcXorHR_Mxh4gAAAUY"]
[Thu Apr 16 17:27:58.125362 2026] [:error] [pid 49094:tid 49104] [client 51.12.89.191:11263] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeCrnjbDwvcXorHR_Mxh4wAAAUg"]
[Thu Apr 16 17:27:58.703563 2026] [:error] [pid 49094:tid 49108] [client 51.12.89.191:11210] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "aeCrnjbDwvcXorHR_Mxh6QAAAUw"]
[Thu Apr 16 17:27:59.324823 2026] [:error] [pid 29603:tid 29627] [client 51.12.89.191:11224] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "aeCrn1fGOR6fpTWUAzpdMwAAARY"]
[Thu Apr 16 17:27:59.910616 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:11145] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "aeCrn6MCQoTw7TsxWun8yQAAAMg"]
[Thu Apr 16 17:28:00.455105 2026] [:error] [pid 29603:tid 29628] [client 51.12.89.191:11139] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nwflm.php"] [unique_id "aeCroFfGOR6fpTWUAzpdNQAAARc"]
[Thu Apr 16 17:28:00.986506 2026] [:error] [pid 57537:tid 57595] [client 51.12.89.191:11244] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeCroFVQRS8nm73ENAmR0wAAAFQ"]
[Thu Apr 16 17:28:01.517598 2026] [:error] [pid 57536:tid 57565] [client 51.12.89.191:11237] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeCroSQU4faGja6jpDsglwAAABE"]
[Thu Apr 16 17:28:02.104334 2026] [:error] [pid 49094:tid 49117] [client 51.12.89.191:11143] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeCrojbDwvcXorHR_Mxh7AAAAVU"]
[Thu Apr 16 17:28:02.680371 2026] [:error] [pid 29603:tid 29629] [client 51.12.89.191:11259] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeCrolfGOR6fpTWUAzpdNwAAARg"]
[Thu Apr 16 17:28:03.264989 2026] [:error] [pid 57538:tid 57614] [client 51.12.89.191:11249] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeCro8uMaiEF5SVR2BetgQAAAIw"]
[Thu Apr 16 17:28:03.802776 2026] [:error] [pid 49094:tid 49106] [client 51.12.89.191:11150] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeCrozbDwvcXorHR_Mxh7gAAAUo"]
[Thu Apr 16 17:28:04.332475 2026] [:error] [pid 57537:tid 57591] [client 51.12.89.191:11226] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeCrpFVQRS8nm73ENAmR2wAAAFA"]
[Thu Apr 16 17:28:04.859458 2026] [:error] [pid 49094:tid 49103] [client 51.12.89.191:11099] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeCrpDbDwvcXorHR_Mxh7wAAAUc"]
[Thu Apr 16 17:28:05.386331 2026] [:error] [pid 7880:tid 7902] [client 51.12.89.191:11084] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeCrpaaezm4fSGc0yUJfoQAAAZE"]
[Thu Apr 16 17:28:05.983342 2026] [:error] [pid 7880:tid 7907] [client 51.12.89.191:11250] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeCrpaaezm4fSGc0yUJfwwAAAZY"]
[Thu Apr 16 17:28:06.515599 2026] [:error] [pid 49094:tid 49114] [client 51.12.89.191:11141] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeCrpjbDwvcXorHR_Mxh8AAAAVI"]
[Thu Apr 16 17:28:07.060898 2026] [:error] [pid 57639:tid 57667] [client 51.12.89.191:11169] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeCrp6MCQoTw7TsxWun88QAAANU"]
[Thu Apr 16 17:28:07.649315 2026] [:error] [pid 49094:tid 49096] [client 51.12.89.191:11173] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeCrpzbDwvcXorHR_Mxh8wAAAUA"]
[Thu Apr 16 17:28:08.247199 2026] [:error] [pid 29603:tid 29622] [client 51.12.89.191:11189] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeCrqFfGOR6fpTWUAzpdTwAAARE"]
[Thu Apr 16 17:28:08.843337 2026] [:error] [pid 29603:tid 29607] [client 51.12.89.191:11137] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeCrqFfGOR6fpTWUAzpdUQAAAQI"]
[Thu Apr 16 17:28:09.429635 2026] [:error] [pid 57538:tid 57608] [client 51.12.89.191:11161] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeCrqcuMaiEF5SVR2BetpQAAAIY"]
[Thu Apr 16 17:28:09.965014 2026] [:error] [pid 49094:tid 49104] [client 51.12.89.191:11140] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "aeCrqTbDwvcXorHR_Mxh9QAAAUg"]
[Thu Apr 16 17:28:10.490791 2026] [:error] [pid 29603:tid 29605] [client 51.12.89.191:11142] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "aeCrqlfGOR6fpTWUAzpdWAAAAQA"]
[Thu Apr 16 17:28:11.089026 2026] [:error] [pid 29603:tid 29613] [client 51.12.89.191:11256] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "aeCrq1fGOR6fpTWUAzpdWQAAAQg"]
[Thu Apr 16 17:28:11.679602 2026] [:error] [pid 57537:tid 57598] [client 51.12.89.191:11082] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "aeCrq1VQRS8nm73ENAmSAwAAAFc"]
[Thu Apr 16 17:28:12.202624 2026] [:error] [pid 57537:tid 57595] [client 51.12.89.191:11186] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeCrrFVQRS8nm73ENAmSBQAAAFQ"]
[Thu Apr 16 17:28:12.801574 2026] [:error] [pid 49094:tid 49116] [client 51.12.89.191:11241] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeCrrDbDwvcXorHR_Mxh-wAAAVQ"]
[Thu Apr 16 17:28:13.387742 2026] [:error] [pid 7880:tid 7908] [client 51.12.89.191:11152] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeCrraaezm4fSGc0yUJf4QAAAZc"]
[Thu Apr 16 17:28:13.973494 2026] [:error] [pid 49094:tid 49120] [client 51.12.89.191:11232] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeCrrTbDwvcXorHR_Mxh_AAAAVg"]
[Thu Apr 16 17:28:14.608487 2026] [:error] [pid 49094:tid 49099] [client 51.12.89.191:11218] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeCrrjbDwvcXorHR_Mxh_gAAAUM"]
[Thu Apr 16 17:28:15.210902 2026] [:error] [pid 57639:tid 57659] [client 51.12.89.191:11214] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeCrr6MCQoTw7TsxWun9AQAAAM0"]
[Thu Apr 16 17:28:15.749651 2026] [:error] [pid 57639:tid 57668] [client 51.12.89.191:11251] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeCrr6MCQoTw7TsxWun9AwAAANY"]
[Thu Apr 16 17:28:16.326050 2026] [:error] [pid 57639:tid 57664] [client 51.12.89.191:11242] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeCrsKMCQoTw7TsxWun9CQAAANI"]
[Thu Apr 16 17:28:16.856322 2026] [:error] [pid 57639:tid 57658] [client 51.12.89.191:11223] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeCrsKMCQoTw7TsxWun9DQAAAMw"]
[Thu Apr 16 17:28:17.392297 2026] [:error] [pid 57538:tid 57605] [client 51.12.89.191:11180] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeCrscuMaiEF5SVR2BetrwAAAIM"]
[Thu Apr 16 17:28:17.972557 2026] [:error] [pid 49094:tid 49119] [client 51.12.89.191:11166] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeCrsTbDwvcXorHR_MxiBgAAAVc"]
[Thu Apr 16 17:28:18.524852 2026] [:error] [pid 49094:tid 49103] [client 51.12.89.191:11197] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeCrsjbDwvcXorHR_MxiCwAAAUc"]
[Thu Apr 16 17:28:19.116090 2026] [:error] [pid 29603:tid 29620] [client 51.12.89.191:11255] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeCrs1fGOR6fpTWUAzpdZwAAAQ8"]
[Thu Apr 16 17:28:19.647393 2026] [:error] [pid 29603:tid 29609] [client 51.12.89.191:11181] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeCrs1fGOR6fpTWUAzpdaAAAAQQ"]
[Thu Apr 16 17:28:20.183774 2026] [:error] [pid 49094:tid 49102] [client 51.12.89.191:11090] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeCrtDbDwvcXorHR_MxiEQAAAUY"]
[Thu Apr 16 17:28:20.712773 2026] [:error] [pid 49094:tid 49100] [client 51.12.89.191:11100] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeCrtDbDwvcXorHR_MxiFwAAAUQ"]
[Thu Apr 16 17:28:21.302033 2026] [:error] [pid 7880:tid 7895] [client 51.12.89.191:11079] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeCrtaaezm4fSGc0yUJf6QAAAYo"]
[Thu Apr 16 17:28:21.825033 2026] [:error] [pid 7880:tid 7907] [client 51.12.89.191:11233] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeCrtaaezm4fSGc0yUJf7AAAAZY"]
[Thu Apr 16 17:28:22.411988 2026] [:error] [pid 49094:tid 49103] [client 51.12.89.191:11216] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeCrtjbDwvcXorHR_MxiIgAAAUc"]
[Thu Apr 16 17:28:22.941494 2026] [:error] [pid 7880:tid 7904] [client 51.12.89.191:11220] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeCrtqaezm4fSGc0yUJf7wAAAZM"]
[Thu Apr 16 17:28:23.527944 2026] [:error] [pid 57536:tid 57571] [client 51.12.89.191:11213] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeCrtyQU4faGja6jpDsguAAAABc"]
[Thu Apr 16 17:28:24.120879 2026] [:error] [pid 7880:tid 7902] [client 51.12.89.191:11086] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeCruKaezm4fSGc0yUJf9wAAAZE"]
[Thu Apr 16 17:28:24.704129 2026] [:error] [pid 7880:tid 7889] [client 51.12.89.191:11203] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeCruKaezm4fSGc0yUJf-AAAAYQ"]
[Thu Apr 16 17:28:25.266570 2026] [:error] [pid 7880:tid 7888] [client 51.12.89.191:11164] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeCruaaezm4fSGc0yUJf-gAAAYM"]
[Thu Apr 16 17:28:25.807895 2026] [:error] [pid 7880:tid 7891] [client 51.12.89.191:11149] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeCruaaezm4fSGc0yUJf-wAAAYY"]
[Thu Apr 16 17:28:26.388780 2026] [:error] [pid 49094:tid 49120] [client 51.12.89.191:11155] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeCrujbDwvcXorHR_MxiMwAAAVg"]
[Thu Apr 16 17:28:26.975080 2026] [:error] [pid 57538:tid 57618] [client 51.12.89.191:11254] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeCrusuMaiEF5SVR2BetuQAAAJA"]
[Thu Apr 16 17:28:27.522750 2026] [:error] [pid 29603:tid 29611] [client 51.12.89.191:11108] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeCru1fGOR6fpTWUAzpdcwAAAQY"]
[Thu Apr 16 17:28:28.099299 2026] [:error] [pid 57538:tid 57614] [client 51.12.89.191:11222] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeCrvMuMaiEF5SVR2BetuwAAAIw"]
[Thu Apr 16 17:28:28.723940 2026] [:error] [pid 57538:tid 57617] [client 51.12.89.191:11211] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeCrvMuMaiEF5SVR2BetvAAAAI8"]
[Thu Apr 16 17:28:29.309641 2026] [:error] [pid 49094:tid 49100] [client 51.12.89.191:11147] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeCrvTbDwvcXorHR_MxiNgAAAUQ"]
[Thu Apr 16 17:28:29.838174 2026] [:error] [pid 57536:tid 57550] [client 51.12.89.191:11089] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeCrvSQU4faGja6jpDsgyQAAAAI"]
[Thu Apr 16 17:28:30.426514 2026] [:error] [pid 57639:tid 57646] [client 51.12.89.191:11073] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeCrvqMCQoTw7TsxWun9HwAAAMA"]
[Thu Apr 16 17:28:31.000625 2026] [:error] [pid 7880:tid 7897] [client 51.12.89.191:11227] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeCrvqaezm4fSGc0yUJgBAAAAYw"]
[Thu Apr 16 17:28:31.585965 2026] [:error] [pid 57639:tid 57649] [client 51.12.89.191:11257] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeCrv6MCQoTw7TsxWun9IwAAAMM"]
[Thu Apr 16 17:28:32.169921 2026] [:error] [pid 57639:tid 57658] [client 51.12.89.191:11193] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeCrwKMCQoTw7TsxWun9JgAAAMw"]
[Thu Apr 16 17:28:32.755570 2026] [:error] [pid 57639:tid 57657] [client 51.12.89.191:11228] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeCrwKMCQoTw7TsxWun9KQAAAMs"]
[Thu Apr 16 17:28:33.329094 2026] [:error] [pid 57639:tid 57667] [client 51.12.89.191:11190] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeCrwaMCQoTw7TsxWun9KgAAANU"]
[Thu Apr 16 17:28:33.852404 2026] [:error] [pid 57639:tid 57661] [client 51.12.89.191:11087] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeCrwaMCQoTw7TsxWun9LwAAAM8"]
[Thu Apr 16 17:28:34.381539 2026] [:error] [pid 57639:tid 57665] [client 51.12.89.191:11153] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeCrwqMCQoTw7TsxWun9MgAAANM"]
[Thu Apr 16 17:28:34.966629 2026] [:error] [pid 29603:tid 29605] [client 51.12.89.191:11170] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeCrwlfGOR6fpTWUAzpdfwAAAQA"]
[Thu Apr 16 17:28:35.494595 2026] [:error] [pid 57537:tid 57590] [client 51.12.89.191:11188] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeCrw1VQRS8nm73ENAmSHAAAAE8"]
[Thu Apr 16 17:28:36.023311 2026] [:error] [pid 49094:tid 49101] [client 51.12.89.191:11247] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeCrxDbDwvcXorHR_MxiOwAAAUU"]
[Thu Apr 16 17:28:36.611535 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:11176] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeCrxKMCQoTw7TsxWun9OQAAAMg"]
[Thu Apr 16 17:28:37.219096 2026] [:error] [pid 57538:tid 57621] [client 51.12.89.191:11163] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeCrxcuMaiEF5SVR2BetwgAAAJM"]
[Thu Apr 16 17:28:37.808076 2026] [:error] [pid 57536:tid 57565] [client 51.12.89.191:11204] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeCrxSQU4faGja6jpDsgzQAAABE"]
[Thu Apr 16 17:28:38.335946 2026] [:error] [pid 49094:tid 49108] [client 51.12.89.191:11225] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeCrxjbDwvcXorHR_MxiQgAAAUw"]
[Thu Apr 16 17:28:38.874976 2026] [:error] [pid 7880:tid 7906] [client 51.12.89.191:11123] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeCrxqaezm4fSGc0yUJgCAAAAZU"]
[Thu Apr 16 17:28:39.461000 2026] [:error] [pid 57538:tid 57623] [client 51.12.89.191:11191] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeCrx8uMaiEF5SVR2BetxwAAAJU"]
[Thu Apr 16 17:28:40.047401 2026] [:error] [pid 57538:tid 57614] [client 51.12.89.191:11136] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeCryMuMaiEF5SVR2BetyAAAAIw"]
[Thu Apr 16 17:28:40.570721 2026] [:error] [pid 57639:tid 57655] [client 51.12.89.191:11178] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeCryKMCQoTw7TsxWun9PQAAAMk"]
[Thu Apr 16 17:28:41.165862 2026] [:error] [pid 57639:tid 57648] [client 51.12.89.191:11262] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeCryaMCQoTw7TsxWun9QAAAAMI"]
[Thu Apr 16 17:28:41.750820 2026] [:error] [pid 57538:tid 57625] [client 51.12.89.191:11206] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeCrycuMaiEF5SVR2BetzgAAAJc"]
[Thu Apr 16 17:28:42.276686 2026] [:error] [pid 49094:tid 49107] [client 51.12.89.191:11179] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeCryjbDwvcXorHR_MxiTAAAAUs"]
[Thu Apr 16 17:28:42.810120 2026] [:error] [pid 57639:tid 57662] [client 51.12.89.191:11205] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeCryqMCQoTw7TsxWun9QwAAANA"]
[Thu Apr 16 17:28:43.412865 2026] [:error] [pid 57538:tid 57608] [client 51.12.89.191:11208] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeCry8uMaiEF5SVR2Bet0gAAAIY"]
[Thu Apr 16 17:28:43.997915 2026] [:error] [pid 57538:tid 57622] [client 51.12.89.191:11129] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "aeCry8uMaiEF5SVR2Bet0wAAAJQ"]
[Thu Apr 16 17:28:44.585909 2026] [:error] [pid 57536:tid 57551] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Thu Apr 16 17:28:44.879427 2026] [:error] [pid 57536:tid 57554] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Thu Apr 16 17:28:45.175439 2026] [:error] [pid 57536:tid 57571] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Thu Apr 16 17:28:45.471504 2026] [:error] [pid 57536:tid 57549] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Thu Apr 16 17:28:45.769894 2026] [:error] [pid 57536:tid 57559] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu Apr 16 17:28:46.360919 2026] [:error] [pid 57536:tid 57566] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Thu Apr 16 17:28:46.656305 2026] [:error] [pid 57536:tid 57552] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Thu Apr 16 17:28:46.951756 2026] [:error] [pid 57536:tid 57561] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Thu Apr 16 17:28:47.248101 2026] [:error] [pid 57536:tid 57557] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Thu Apr 16 17:28:47.545599 2026] [:error] [pid 57536:tid 57562] [client 51.12.89.191:11157] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 16 17:28:47.838076 2026] [:error] [pid 57536:tid 57569] [client 51.12.89.191:11157] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeCrzyQU4faGja6jpDsg6AAAABU"]
[Thu Apr 16 17:28:48.424035 2026] [:error] [pid 57536:tid 57565] [client 51.12.89.191:11261] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeCr0CQU4faGja6jpDsg6QAAABE"]
[Thu Apr 16 17:28:48.956109 2026] [:error] [pid 57538:tid 57606] [client 51.12.89.191:11124] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeCr0MuMaiEF5SVR2Bet2AAAAIQ"]
[Thu Apr 16 17:28:49.528588 2026] [:error] [pid 29603:tid 29611] [client 51.12.89.191:11155] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeCr0VfGOR6fpTWUAzpdlwAAAQY"]
[Thu Apr 16 17:28:50.101371 2026] [:error] [pid 57537:tid 57586] [client 51.12.89.191:11229] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeCr0lVQRS8nm73ENAmSKQAAAEs"]
[Thu Apr 16 17:28:50.631685 2026] [:error] [pid 57538:tid 57614] [client 51.12.89.191:11185] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeCr0suMaiEF5SVR2Bet3gAAAIw"]
[Thu Apr 16 17:28:51.159647 2026] [:error] [pid 57639:tid 57661] [client 51.12.89.191:11078] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeCr06MCQoTw7TsxWun9UAAAAM8"]
[Thu Apr 16 17:28:51.682953 2026] [:error] [pid 49094:tid 49102] [client 51.12.89.191:11024] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeCr0zbDwvcXorHR_MxiXQAAAUY"]
[Thu Apr 16 17:28:52.211805 2026] [:error] [pid 57537:tid 57582] [client 51.12.89.191:11172] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeCr1FVQRS8nm73ENAmSLQAAAEc"]
[Thu Apr 16 17:28:52.743098 2026] [:error] [pid 57639:tid 57669] [client 51.12.89.191:11207] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeCr1KMCQoTw7TsxWun9VAAAANc"]
[Thu Apr 16 17:28:53.338716 2026] [:error] [pid 57538:tid 57606] [client 51.12.89.191:11012] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeCr1cuMaiEF5SVR2Bet4wAAAIQ"]
[Thu Apr 16 17:28:53.860958 2026] [:error] [pid 29603:tid 29621] [client 51.12.89.191:11230] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeCr1VfGOR6fpTWUAzpdogAAARA"]
[Thu Apr 16 17:28:54.395995 2026] [:error] [pid 57536:tid 57558] [client 51.12.89.191:11029] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeCr1iQU4faGja6jpDsg6gAAAAo"]
[Thu Apr 16 17:28:54.984735 2026] [:error] [pid 57538:tid 57608] [client 51.12.89.191:11148] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeCr1suMaiEF5SVR2Bet5QAAAIY"]
[Thu Apr 16 17:28:55.516093 2026] [:error] [pid 49094:tid 49110] [client 51.12.89.191:11080] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeCr1zbDwvcXorHR_MxiZAAAAU4"]
[Thu Apr 16 17:28:56.045800 2026] [:error] [pid 49094:tid 49120] [client 51.12.89.191:11175] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeCr2DbDwvcXorHR_MxiZgAAAVg"]
[Thu Apr 16 17:28:56.570185 2026] [:error] [pid 49094:tid 49117] [client 51.12.89.191:11030] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeCr2DbDwvcXorHR_MxiaAAAAVU"]
[Thu Apr 16 17:28:57.160520 2026] [:error] [pid 49094:tid 49097] [client 51.12.89.191:11058] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeCr2TbDwvcXorHR_MxibQAAAUE"]
[Thu Apr 16 17:28:57.690837 2026] [:error] [pid 29603:tid 29612] [client 51.12.89.191:11198] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeCr2VfGOR6fpTWUAzpdqAAAAQc"]
[Thu Apr 16 17:28:58.276803 2026] [:error] [pid 57639:tid 57670] [client 51.12.89.191:11098] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeCr2qMCQoTw7TsxWun9bAAAANg"]
[Thu Apr 16 17:28:58.863732 2026] [:error] [pid 57639:tid 57666] [client 51.12.89.191:11159] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeCr2qMCQoTw7TsxWun9cQAAANQ"]
[Thu Apr 16 17:28:59.396403 2026] [:error] [pid 49094:tid 49120] [client 51.12.89.191:11187] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeCr2zbDwvcXorHR_MxicgAAAVg"]
[Thu Apr 16 17:28:59.982124 2026] [:error] [pid 49094:tid 49113] [client 51.12.89.191:11177] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeCr2zbDwvcXorHR_MxidgAAAVE"]
[Thu Apr 16 17:29:00.512976 2026] [:error] [pid 29603:tid 29608] [client 51.12.89.191:11113] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeCr3FfGOR6fpTWUAzpdqgAAAQM"]
[Thu Apr 16 17:29:01.106379 2026] [:error] [pid 57536:tid 57550] [client 51.12.89.191:11167] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeCr3SQU4faGja6jpDsg7wAAAAI"]
[Thu Apr 16 17:29:01.692820 2026] [:error] [pid 57536:tid 57566] [client 51.12.89.191:11096] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeCr3SQU4faGja6jpDsg8QAAABI"]
[Thu Apr 16 17:29:02.278764 2026] [:error] [pid 7880:tid 7900] [client 51.12.89.191:11088] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeCr3qaezm4fSGc0yUJgFgAAAY8"]
[Thu Apr 16 17:29:02.803059 2026] [:error] [pid 57537:tid 57586] [client 51.12.89.191:11127] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeCr3lVQRS8nm73ENAmSQQAAAEs"]
[Thu Apr 16 17:29:03.390932 2026] [:error] [pid 49094:tid 49116] [client 51.12.89.191:11023] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeCr3zbDwvcXorHR_MxidwAAAVQ"]
[Thu Apr 16 17:29:03.923170 2026] [:error] [pid 49094:tid 49096] [client 51.12.89.191:11199] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeCr3zbDwvcXorHR_MxiegAAAUA"]
[Thu Apr 16 17:29:04.508970 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:11252] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeCr4KMCQoTw7TsxWun9egAAAMg"]
[Thu Apr 16 17:29:05.046443 2026] [:error] [pid 57639:tid 57667] [client 51.12.89.191:11183] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeCr4aMCQoTw7TsxWun9fAAAANU"]
[Thu Apr 16 17:29:05.633683 2026] [:error] [pid 57639:tid 57669] [client 51.12.89.191:11015] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeCr4aMCQoTw7TsxWun9ggAAANc"]
[Thu Apr 16 17:29:06.223575 2026] [:error] [pid 7880:tid 7895] [client 51.12.89.191:11126] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeCr4qaezm4fSGc0yUJgIAAAAYo"]
[Thu Apr 16 17:29:06.806673 2026] [:error] [pid 7880:tid 7906] [client 51.12.89.191:11017] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeCr4qaezm4fSGc0yUJgJAAAAZU"]
[Thu Apr 16 17:29:07.394606 2026] [:error] [pid 49094:tid 49105] [client 51.12.89.191:11054] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeCr4zbDwvcXorHR_MxigwAAAUk"]
[Thu Apr 16 17:29:07.918582 2026] [:error] [pid 49094:tid 49100] [client 51.12.89.191:11102] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeCr4zbDwvcXorHR_MxihQAAAUQ"]
[Thu Apr 16 17:29:08.442251 2026] [:error] [pid 49094:tid 49112] [client 51.12.89.191:11133] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeCr5DbDwvcXorHR_MxiiAAAAVA"]
[Thu Apr 16 17:29:09.027346 2026] [:error] [pid 29603:tid 29618] [client 51.12.89.191:11091] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeCr5VfGOR6fpTWUAzpdsgAAAQ0"]
[Thu Apr 16 17:29:09.612296 2026] [:error] [pid 7880:tid 7892] [client 51.12.89.191:11076] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeCr5aaezm4fSGc0yUJgJwAAAYc"]
[Thu Apr 16 17:29:10.190478 2026] [:error] [pid 57536:tid 57559] [client 51.12.89.191:11095] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCr5iQU4faGja6jpDshAAAAAAs"]
[Thu Apr 16 17:29:10.719577 2026] [:error] [pid 57536:tid 57560] [client 51.12.89.191:11060] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCr5iQU4faGja6jpDshBwAAAAw"]
[Thu Apr 16 17:29:11.243083 2026] [:error] [pid 57536:tid 57569] [client 51.12.89.191:11168] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCr5yQU4faGja6jpDshCQAAABU"]
[Thu Apr 16 17:29:11.828985 2026] [:error] [pid 49094:tid 49109] [client 51.12.89.191:11026] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCr5zbDwvcXorHR_MxijgAAAU0"]
[Thu Apr 16 17:29:12.354195 2026] [:error] [pid 57536:tid 57553] [client 51.12.89.191:11083] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeCr6CQU4faGja6jpDshDQAAAAU"]
[Thu Apr 16 17:29:12.878319 2026] [:error] [pid 7880:tid 7899] [client 51.12.89.191:11239] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeCr6Kaezm4fSGc0yUJgKQAAAY4"]
[Thu Apr 16 17:29:13.408366 2026] [:error] [pid 7880:tid 7889] [client 51.12.89.191:11182] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeCr6aaezm4fSGc0yUJgKwAAAYQ"]
[Thu Apr 16 17:29:13.937731 2026] [:error] [pid 57536:tid 57552] [client 51.12.89.191:11156] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeCr6SQU4faGja6jpDshEAAAAAQ"]
[Thu Apr 16 17:29:14.476388 2026] [:error] [pid 49094:tid 49114] [client 51.12.89.191:11120] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeCr6jbDwvcXorHR_MxikQAAAVI"]
[Thu Apr 16 17:29:15.008408 2026] [:error] [pid 49094:tid 49101] [client 51.12.89.191:11160] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeCr6zbDwvcXorHR_MxilAAAAUU"]
[Thu Apr 16 17:29:15.607686 2026] [:error] [pid 49094:tid 49117] [client 51.12.89.191:11039] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeCr6zbDwvcXorHR_MxilwAAAVU"]
[Thu Apr 16 17:29:16.195101 2026] [:error] [pid 49094:tid 49096] [client 51.12.89.191:11093] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeCr7DbDwvcXorHR_MxinAAAAUA"]
[Thu Apr 16 17:29:16.787043 2026] [:error] [pid 49094:tid 49109] [client 51.12.89.191:11119] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeCr7DbDwvcXorHR_MxinwAAAU0"]
[Thu Apr 16 17:29:17.311432 2026] [:error] [pid 49094:tid 49112] [client 51.12.89.191:11031] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeCr7TbDwvcXorHR_MxioQAAAVA"]
[Thu Apr 16 17:29:17.899969 2026] [:error] [pid 49094:tid 49114] [client 51.12.89.191:11075] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeCr7TbDwvcXorHR_MxiogAAAVI"]
[Thu Apr 16 17:29:18.437587 2026] [:error] [pid 49094:tid 49106] [client 51.12.89.191:11042] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeCr7jbDwvcXorHR_MxipAAAAUo"]
[Thu Apr 16 17:29:19.026575 2026] [:error] [pid 57639:tid 57647] [client 51.12.89.191:11215] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeCr76MCQoTw7TsxWun9jQAAAME"]
[Thu Apr 16 17:29:19.562610 2026] [:error] [pid 49094:tid 49115] [client 51.12.89.191:11046] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeCr7zbDwvcXorHR_MxiqAAAAVM"]
[Thu Apr 16 17:29:20.169379 2026] [:error] [pid 57639:tid 57665] [client 51.12.89.191:11103] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeCr8KMCQoTw7TsxWun9kQAAANM"]
[Thu Apr 16 17:29:20.761852 2026] [:error] [pid 57639:tid 57651] [client 51.12.89.191:11135] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeCr8KMCQoTw7TsxWun9lAAAAMU"]
[Thu Apr 16 17:29:21.314741 2026] [:error] [pid 7880:tid 7898] [client 51.12.89.191:11013] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeCr8aaezm4fSGc0yUJgLwAAAY0"]
[Thu Apr 16 17:29:21.839532 2026] [:error] [pid 29603:tid 29610] [client 51.12.89.191:11178] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeCr8VfGOR6fpTWUAzpdtwAAAQU"]
[Thu Apr 16 17:29:22.415050 2026] [:error] [pid 57538:tid 57605] [client 51.12.89.191:11085] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeCr8suMaiEF5SVR2Bet9gAAAIM"]
[Thu Apr 16 17:29:22.943870 2026] [:error] [pid 57639:tid 57664] [client 51.12.89.191:11011] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeCr8qMCQoTw7TsxWun9lwAAANI"]
[Thu Apr 16 17:29:23.556546 2026] [:error] [pid 49094:tid 49111] [client 51.12.89.191:10978] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeCr8zbDwvcXorHR_MxisgAAAU8"]
[Thu Apr 16 17:29:24.087007 2026] [:error] [pid 57639:tid 57669] [client 51.12.89.191:11014] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeCr9KMCQoTw7TsxWun9mQAAANc"]
[Thu Apr 16 17:29:24.616739 2026] [:error] [pid 57639:tid 57648] [client 51.12.89.191:11130] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeCr9KMCQoTw7TsxWun9nAAAAMI"]
[Thu Apr 16 17:29:25.208976 2026] [:error] [pid 49094:tid 49099] [client 51.12.89.191:11112] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeCr9TbDwvcXorHR_MxitQAAAUM"]
[Thu Apr 16 17:29:25.732872 2026] [:error] [pid 49094:tid 49115] [client 51.12.89.191:10945] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeCr9TbDwvcXorHR_MxitgAAAVM"]
[Thu Apr 16 17:29:26.323492 2026] [:error] [pid 49094:tid 49110] [client 51.12.89.191:11055] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeCr9jbDwvcXorHR_MxiuQAAAU4"]
[Thu Apr 16 17:29:26.849559 2026] [:error] [pid 57639:tid 57662] [client 51.12.89.191:11128] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeCr9qMCQoTw7TsxWun9owAAANA"]
[Thu Apr 16 17:29:27.446246 2026] [:error] [pid 49094:tid 49117] [client 51.12.89.191:10986] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeCr9zbDwvcXorHR_MxivQAAAVU"]
[Thu Apr 16 17:29:27.982742 2026] [:error] [pid 49094:tid 49119] [client 51.12.89.191:11019] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCr9zbDwvcXorHR_MxiwQAAAVc"]
[Thu Apr 16 17:29:28.512998 2026] [:error] [pid 57536:tid 57554] [client 51.12.89.191:11016] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCr-CQU4faGja6jpDshHgAAAAY"]
[Thu Apr 16 17:29:29.099350 2026] [:error] [pid 49094:tid 49107] [client 51.12.89.191:11053] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCr-TbDwvcXorHR_MxixQAAAUs"]
[Thu Apr 16 17:29:29.697250 2026] [:error] [pid 49094:tid 49097] [client 51.12.89.191:11121] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCr-TbDwvcXorHR_MxiyAAAAUE"]
[Thu Apr 16 17:29:30.219774 2026] [:error] [pid 49094:tid 49119] [client 51.12.89.191:11117] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeCr-jbDwvcXorHR_MxizwAAAVc"]
[Thu Apr 16 17:29:30.775437 2026] [:error] [pid 57538:tid 57617] [client 51.12.89.191:11195] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeCr-suMaiEF5SVR2Bet-wAAAI8"]
[Thu Apr 16 17:29:31.360849 2026] [:error] [pid 7880:tid 7888] [client 51.12.89.191:11053] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeCr-6aezm4fSGc0yUJgPQAAAYM"]
[Thu Apr 16 17:29:31.889701 2026] [:error] [pid 7880:tid 7896] [client 51.12.89.191:11045] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeCr-6aezm4fSGc0yUJgQQAAAYs"]
[Thu Apr 16 17:29:32.481879 2026] [:error] [pid 7880:tid 7886] [client 51.12.89.191:11018] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeCr_Kaezm4fSGc0yUJgRwAAAYE"]
[Thu Apr 16 17:29:33.090759 2026] [:error] [pid 57639:tid 57667] [client 51.12.89.191:11196] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeCr_aMCQoTw7TsxWun9qgAAANU"]
[Thu Apr 16 17:29:33.676416 2026] [:error] [pid 57639:tid 57662] [client 51.12.89.191:11115] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeCr_aMCQoTw7TsxWun9qwAAANA"]
[Thu Apr 16 17:29:34.268691 2026] [:error] [pid 7880:tid 7888] [client 51.12.89.191:11008] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeCr_qaezm4fSGc0yUJgSgAAAYM"]
[Thu Apr 16 17:29:34.800368 2026] [:error] [pid 57537:tid 57588] [client 51.12.89.191:11044] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeCr_lVQRS8nm73ENAmSWAAAAE0"]
[Thu Apr 16 17:29:35.403308 2026] [:error] [pid 29603:tid 29614] [client 51.12.89.191:11021] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeCr_1fGOR6fpTWUAzpdugAAAQk"]
[Thu Apr 16 17:29:35.934680 2026] [:error] [pid 49094:tid 49112] [client 51.12.89.191:10946] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeCr_zbDwvcXorHR_Mxi1gAAAVA"]
[Thu Apr 16 17:29:36.461533 2026] [:error] [pid 49094:tid 49107] [client 51.12.89.191:11092] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeCsADbDwvcXorHR_Mxi2QAAAUs"]
[Thu Apr 16 17:29:36.987458 2026] [:error] [pid 49094:tid 49117] [client 51.12.89.191:11067] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeCsADbDwvcXorHR_Mxi3gAAAVU"]
[Thu Apr 16 17:29:37.582879 2026] [:error] [pid 57639:tid 57648] [client 51.12.89.191:10948] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeCsAaMCQoTw7TsxWun9sQAAAMI"]
[Thu Apr 16 17:29:38.156369 2026] [:error] [pid 57639:tid 57670] [client 51.12.89.191:11072] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeCsAqMCQoTw7TsxWun9swAAANg"]
[Thu Apr 16 17:29:38.742944 2026] [:error] [pid 49094:tid 49106] [client 51.12.89.191:11048] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeCsAjbDwvcXorHR_Mxi4wAAAUo"]
[Thu Apr 16 17:29:39.279811 2026] [:error] [pid 7880:tid 7894] [client 51.12.89.191:10968] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeCsA6aezm4fSGc0yUJgUAAAAYk"]
[Thu Apr 16 17:29:39.852644 2026] [:error] [pid 29603:tid 29618] [client 51.12.89.191:11132] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeCsA1fGOR6fpTWUAzpdvAAAAQ0"]
[Thu Apr 16 17:29:40.445762 2026] [:error] [pid 29603:tid 29626] [client 51.12.89.191:11028] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeCsBFfGOR6fpTWUAzpdvQAAARU"]
[Thu Apr 16 17:29:40.973123 2026] [:error] [pid 57538:tid 57618] [client 51.12.89.191:10989] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeCsBMuMaiEF5SVR2BeuAwAAAJA"]
[Thu Apr 16 17:29:41.558345 2026] [:error] [pid 49094:tid 49108] [client 51.12.89.191:11009] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeCsBTbDwvcXorHR_Mxi5wAAAUw"]
[Thu Apr 16 17:29:42.147624 2026] [:error] [pid 57537:tid 57579] [client 51.12.89.191:10975] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeCsBlVQRS8nm73ENAmSXAAAAEQ"]
[Thu Apr 16 17:29:42.785866 2026] [:error] [pid 7880:tid 7899] [client 51.12.89.191:11041] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeCsBqaezm4fSGc0yUJgWwAAAY4"]
[Thu Apr 16 17:29:43.390080 2026] [:error] [pid 57536:tid 57559] [client 51.12.89.191:11037] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeCsByQU4faGja6jpDshMQAAAAs"]
[Thu Apr 16 17:29:43.923351 2026] [:error] [pid 57537:tid 57582] [client 51.12.89.191:11049] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeCsB1VQRS8nm73ENAmSXgAAAEc"]
[Thu Apr 16 17:29:44.462299 2026] [:error] [pid 7880:tid 7903] [client 51.12.89.191:11118] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeCsCKaezm4fSGc0yUJgYQAAAZI"]
[Thu Apr 16 17:29:45.071332 2026] [:error] [pid 57639:tid 57652] [client 51.12.89.191:11081] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeCsCaMCQoTw7TsxWun9tgAAAMY"]
[Thu Apr 16 17:29:45.666798 2026] [:error] [pid 7880:tid 7896] [client 51.12.89.191:11184] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeCsCaaezm4fSGc0yUJgaQAAAYs"]
[Thu Apr 16 17:29:46.215857 2026] [:error] [pid 57536:tid 57552] [client 51.12.89.191:10964] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeCsCiQU4faGja6jpDshOQAAAAQ"]
[Thu Apr 16 17:29:46.747541 2026] [:error] [pid 57639:tid 57646] [client 51.12.89.191:11047] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeCsCqMCQoTw7TsxWun9uQAAAMA"]
[Thu Apr 16 17:29:47.324805 2026] [:error] [pid 57536:tid 57559] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 16 17:29:49.022988 2026] [:error] [pid 57536:tid 57563] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/bless4.php
[Thu Apr 16 17:29:49.313186 2026] [:error] [pid 57536:tid 57548] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Thu Apr 16 17:29:49.602716 2026] [:error] [pid 57536:tid 57555] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Thu Apr 16 17:29:49.892285 2026] [:error] [pid 57536:tid 57567] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Thu Apr 16 17:29:50.182895 2026] [:error] [pid 57536:tid 57571] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Thu Apr 16 17:29:50.471355 2026] [:error] [pid 57536:tid 57549] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 16 17:29:52.066619 2026] [:error] [pid 57536:tid 57572] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Thu Apr 16 17:29:52.357095 2026] [:error] [pid 57536:tid 57568] [client 51.12.89.191:10966] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Thu Apr 16 17:29:52.643288 2026] [:error] [pid 57536:tid 57559] [client 51.12.89.191:10966] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeCsECQU4faGja6jpDshTAAAAAs"]
[Thu Apr 16 17:29:53.171977 2026] [:error] [pid 57537:tid 57590] [client 51.12.89.191:11010] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeCsEVVQRS8nm73ENAmSYgAAAE8"]
[Thu Apr 16 17:29:53.758996 2026] [:error] [pid 57536:tid 57557] [client 51.12.89.191:11074] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeCsESQU4faGja6jpDshTQAAAAk"]
[Thu Apr 16 17:29:54.344018 2026] [:error] [pid 57639:tid 57656] [client 51.12.89.191:11192] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeCsEqMCQoTw7TsxWun90AAAAMo"]
[Thu Apr 16 17:29:54.916843 2026] [:error] [pid 57536:tid 57569] [client 51.12.89.191:11246] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeCsEiQU4faGja6jpDshUwAAABU"]
[Thu Apr 16 17:29:55.515690 2026] [:error] [pid 57639:tid 57661] [client 51.12.89.191:11040] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeCsE6MCQoTw7TsxWun91AAAAM8"]
[Thu Apr 16 17:29:56.039631 2026] [:error] [pid 57639:tid 57653] [client 51.12.89.191:11022] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeCsFKMCQoTw7TsxWun91QAAAMc"]
[Thu Apr 16 17:29:56.570523 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:11106] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeCsFKMCQoTw7TsxWun92gAAANE"]
[Thu Apr 16 17:29:57.143786 2026] [:error] [pid 57639:tid 57656] [client 51.12.89.191:11125] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeCsFaMCQoTw7TsxWun92wAAAMo"]
[Thu Apr 16 17:29:57.674027 2026] [:error] [pid 57538:tid 57611] [client 51.12.89.191:10949] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeCsFcuMaiEF5SVR2BeuGQAAAIk"]
[Thu Apr 16 17:29:58.266459 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:11236] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeCsFqMCQoTw7TsxWun93gAAAMg"]
[Thu Apr 16 17:29:58.790390 2026] [:error] [pid 57536:tid 57561] [client 51.12.89.191:11034] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeCsFiQU4faGja6jpDshWAAAAA0"]
[Thu Apr 16 17:29:59.384607 2026] [:error] [pid 57639:tid 57656] [client 51.12.89.191:11027] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCsF6MCQoTw7TsxWun95AAAAMo"]
[Thu Apr 16 17:29:59.913643 2026] [:error] [pid 57639:tid 57666] [client 51.12.89.191:11051] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCsF6MCQoTw7TsxWun96QAAANQ"]
[Thu Apr 16 17:30:00.447698 2026] [:error] [pid 57537:tid 57588] [client 51.12.89.191:10984] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCsGFVQRS8nm73ENAmSYwAAAE0"]
[Thu Apr 16 17:30:00.978188 2026] [:error] [pid 57538:tid 57616] [client 51.12.89.191:11061] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCsGMuMaiEF5SVR2BeuIQAAAI4"]
[Thu Apr 16 17:30:01.566731 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:11033] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsGaMCQoTw7TsxWun97QAAANE"]
[Thu Apr 16 17:30:01.916425 2026] [:error] [pid 57537:tid 57588] [client 51.12.89.191:10984] [client 51.12.89.191] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "192.178.8.72_ba222591f25674c45fae469fb01980afb9599ff5"): Internal error (specific information not available) [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeCsGFVQRS8nm73ENAmSYwAAAE0"]
[Thu Apr 16 17:30:02.155516 2026] [:error] [pid 57639:tid 57647] [client 51.12.89.191:11109] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsGqMCQoTw7TsxWun97wAAAME"]
[Thu Apr 16 17:30:02.684555 2026] [:error] [pid 29603:tid 29607] [client 51.12.89.191:11066] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsGlfGOR6fpTWUAzpdwAAAAQI"]
[Thu Apr 16 17:30:03.214320 2026] [:error] [pid 29603:tid 29613] [client 51.12.89.191:11052] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsG1fGOR6fpTWUAzpdwgAAAQg"]
[Thu Apr 16 17:30:03.738613 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:11146] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeCsG6MCQoTw7TsxWun99wAAANE"]
[Thu Apr 16 17:30:04.271430 2026] [:error] [pid 57538:tid 57604] [client 51.12.89.191:11035] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeCsHMuMaiEF5SVR2BeuKAAAAII"]
[Thu Apr 16 17:30:04.858200 2026] [:error] [pid 49094:tid 49100] [client 51.12.89.191:10952] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeCsHDbDwvcXorHR_Mxi-AAAAUQ"]
[Thu Apr 16 17:30:05.392018 2026] [:error] [pid 57538:tid 57609] [client 51.12.89.191:11114] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeCsHcuMaiEF5SVR2BeuLAAAAIc"]
[Thu Apr 16 17:30:05.920350 2026] [:error] [pid 29603:tid 29627] [client 51.12.89.191:11043] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aeCsHVfGOR6fpTWUAzpdxgAAARY"]
[Thu Apr 16 17:30:06.447000 2026] [:error] [pid 57538:tid 57605] [client 51.12.89.191:11036] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aeCsHsuMaiEF5SVR2BeuLwAAAIM"]
[Thu Apr 16 17:30:06.989790 2026] [:error] [pid 49094:tid 49097] [client 51.12.89.191:11077] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aeCsHjbDwvcXorHR_Mxi-wAAAUE"]
[Thu Apr 16 17:30:07.562304 2026] [:error] [pid 49094:tid 49110] [client 51.12.89.191:11003] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aeCsHzbDwvcXorHR_Mxi_QAAAU4"]
[Thu Apr 16 17:30:08.157032 2026] [:error] [pid 57639:tid 57668] [client 51.12.89.191:11111] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsIKMCQoTw7TsxWun-AQAAANY"]
[Thu Apr 16 17:30:08.679881 2026] [:error] [pid 57639:tid 57650] [client 51.12.89.191:11062] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsIKMCQoTw7TsxWun-AwAAAMQ"]
[Thu Apr 16 17:30:09.209661 2026] [:error] [pid 57536:tid 57562] [client 51.12.89.191:11056] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsISQU4faGja6jpDshXgAAAA4"]
[Thu Apr 16 17:30:09.795330 2026] [:error] [pid 57536:tid 57555] [client 51.12.89.191:10987] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeCsISQU4faGja6jpDshYAAAAAc"]
[Thu Apr 16 17:30:10.325499 2026] [:error] [pid 57639:tid 57651] [client 51.12.89.191:11107] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeCsIqMCQoTw7TsxWun-DAAAAMU"]
[Thu Apr 16 17:30:10.898719 2026] [:error] [pid 29603:tid 29620] [client 51.12.89.191:11071] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeCsIlfGOR6fpTWUAzpdywAAAQ8"]
[Thu Apr 16 17:30:11.422324 2026] [:error] [pid 29603:tid 29618] [client 51.12.89.191:10954] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeCsI1fGOR6fpTWUAzpdzAAAAQ0"]
[Thu Apr 16 17:30:12.007005 2026] [:error] [pid 57639:tid 57653] [client 51.12.89.191:10977] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeCsJKMCQoTw7TsxWun-EAAAAMc"]
[Thu Apr 16 17:30:12.543900 2026] [:error] [pid 57536:tid 57549] [client 51.12.89.191:11101] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeCsJCQU4faGja6jpDshYgAAAAE"]
[Thu Apr 16 17:30:13.068333 2026] [:error] [pid 57639:tid 57660] [client 51.12.89.191:10973] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeCsJaMCQoTw7TsxWun-FwAAAM4"]
[Thu Apr 16 17:30:13.593359 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:10886] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeCsJaMCQoTw7TsxWun-GgAAANE"]
[Thu Apr 16 17:30:14.181778 2026] [:error] [pid 57639:tid 57652] [client 51.12.89.191:10969] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeCsJqMCQoTw7TsxWun-HgAAAMY"]
[Thu Apr 16 17:30:14.766600 2026] [:error] [pid 57536:tid 57572] [client 51.12.89.191:10980] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aeCsJiQU4faGja6jpDshZQAAABg"]
[Thu Apr 16 17:30:15.356159 2026] [:error] [pid 57536:tid 57565] [client 51.12.89.191:10991] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aeCsJyQU4faGja6jpDshaAAAABE"]
[Thu Apr 16 17:30:15.883593 2026] [:error] [pid 57536:tid 57548] [client 51.12.89.191:11171] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aeCsJyQU4faGja6jpDshagAAAAA"]
[Thu Apr 16 17:30:16.449955 2026] [:error] [pid 57536:tid 57569] [client 51.12.89.191:11032] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "aeCsKCQU4faGja6jpDshbgAAABU"]
[Thu Apr 16 17:30:17.036120 2026] [:error] [pid 49094:tid 49116] [client 51.12.89.191:11065] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsKTbDwvcXorHR_MxjCQAAAVQ"]
[Thu Apr 16 17:30:17.558366 2026] [:error] [pid 49094:tid 49118] [client 51.12.89.191:10895] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsKTbDwvcXorHR_MxjCwAAAVY"]
[Thu Apr 16 17:30:18.131287 2026] [:error] [pid 49094:tid 49114] [client 51.12.89.191:10935] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsKjbDwvcXorHR_MxjDwAAAVI"]
[Thu Apr 16 17:30:18.676823 2026] [:error] [pid 49094:tid 49111] [client 51.12.89.191:11202] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsKjbDwvcXorHR_MxjEAAAAU8"]
[Thu Apr 16 17:30:19.206301 2026] [:error] [pid 57536:tid 57553] [client 51.12.89.191:10892] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aeCsKyQU4faGja6jpDshcgAAAAU"]
[Thu Apr 16 17:30:19.729120 2026] [:error] [pid 57639:tid 57650] [client 51.12.89.191:10974] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aeCsK6MCQoTw7TsxWun-KQAAAMQ"]
[Thu Apr 16 17:30:20.257172 2026] [:error] [pid 57639:tid 57655] [client 51.12.89.191:10962] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aeCsLKMCQoTw7TsxWun-LAAAAMk"]
[Thu Apr 16 17:30:20.785201 2026] [:error] [pid 57639:tid 57667] [client 51.12.89.191:11000] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "aeCsLKMCQoTw7TsxWun-MAAAANU"]
[Thu Apr 16 17:30:21.316135 2026] [:error] [pid 57536:tid 57548] [client 51.12.89.191:11097] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aeCsLSQU4faGja6jpDsheQAAAAA"]
[Thu Apr 16 17:30:21.891254 2026] [:error] [pid 57639:tid 57652] [client 51.12.89.191:11116] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aeCsLaMCQoTw7TsxWun-MgAAAMY"]
[Thu Apr 16 17:30:22.421021 2026] [:error] [pid 49094:tid 49107] [client 51.12.89.191:10947] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aeCsLjbDwvcXorHR_MxjFwAAAUs"]
[Thu Apr 16 17:30:22.948440 2026] [:error] [pid 49094:tid 49103] [client 51.12.89.191:11105] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aeCsLjbDwvcXorHR_MxjGwAAAUc"]
[Thu Apr 16 17:30:23.551056 2026] [:error] [pid 49094:tid 49106] [client 51.12.89.191:10958] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeCsLzbDwvcXorHR_MxjHgAAAUo"]
[Thu Apr 16 17:30:24.141864 2026] [:error] [pid 49094:tid 49109] [client 51.12.89.191:11070] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeCsMDbDwvcXorHR_MxjIwAAAU0"]
[Thu Apr 16 17:30:24.735432 2026] [:error] [pid 57538:tid 57605] [client 51.12.89.191:10988] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeCsMMuMaiEF5SVR2BeuMgAAAIM"]
[Thu Apr 16 17:30:25.320834 2026] [:error] [pid 57639:tid 57655] [client 51.12.89.191:10818] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeCsMaMCQoTw7TsxWun-NgAAAMk"]
[Thu Apr 16 17:30:25.906138 2026] [:error] [pid 57538:tid 57621] [client 51.12.89.191:10953] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeCsMcuMaiEF5SVR2BeuNQAAAJM"]
[Thu Apr 16 17:30:26.491623 2026] [:error] [pid 49094:tid 49101] [client 51.12.89.191:10888] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeCsMjbDwvcXorHR_MxjMgAAAUU"]
[Thu Apr 16 17:30:27.023404 2026] [:error] [pid 49094:tid 49111] [client 51.12.89.191:11130] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeCsMzbDwvcXorHR_MxjOQAAAU8"]
[Thu Apr 16 17:30:27.609674 2026] [:error] [pid 49094:tid 49107] [client 51.12.89.191:10891] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-michan.php"] [unique_id "aeCsMzbDwvcXorHR_MxjPwAAAUs"]
[Thu Apr 16 17:30:28.149969 2026] [:error] [pid 57536:tid 57550] [client 51.12.89.191:10883] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeCsNCQU4faGja6jpDshfAAAAAI"]
[Thu Apr 16 17:30:28.674822 2026] [:error] [pid 57639:tid 57648] [client 51.12.89.191:10880] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeCsNKMCQoTw7TsxWun-NwAAAMI"]
[Thu Apr 16 17:30:29.221486 2026] [:error] [pid 49094:tid 49115] [client 51.12.89.191:10971] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeCsNTbDwvcXorHR_MxjSgAAAVM"]
[Thu Apr 16 17:30:29.794494 2026] [:error] [pid 57639:tid 57666] [client 51.12.89.191:10963] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeCsNaMCQoTw7TsxWun-OAAAANQ"]
[Thu Apr 16 17:30:30.368580 2026] [:error] [pid 49094:tid 49118] [client 51.12.89.191:11002] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeCsNjbDwvcXorHR_MxjVAAAAVY"]
[Thu Apr 16 17:30:30.958642 2026] [:error] [pid 49094:tid 49112] [client 51.12.89.191:10896] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeCsNjbDwvcXorHR_MxjWAAAAVA"]
[Thu Apr 16 17:30:31.531933 2026] [:error] [pid 7880:tid 7908] [client 51.12.89.191:10959] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeCsN6aezm4fSGc0yUJgeQAAAZc"]
[Thu Apr 16 17:30:32.121433 2026] [:error] [pid 57536:tid 57554] [client 51.12.89.191:10894] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeCsOCQU4faGja6jpDshfwAAAAY"]
[Thu Apr 16 17:30:32.727156 2026] [:error] [pid 57536:tid 57564] [client 51.12.89.191:10937] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeCsOCQU4faGja6jpDshgQAAABA"]
[Thu Apr 16 17:30:33.268212 2026] [:error] [pid 57536:tid 57558] [client 51.12.89.191:11122] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeCsOSQU4faGja6jpDshhAAAAAo"]
[Thu Apr 16 17:30:33.856602 2026] [:error] [pid 57639:tid 57650] [client 51.12.89.191:10884] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeCsOaMCQoTw7TsxWun-OwAAAMQ"]
[Thu Apr 16 17:30:34.443260 2026] [:error] [pid 57639:tid 57662] [client 51.12.89.191:11110] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeCsOqMCQoTw7TsxWun-PQAAANA"]
[Thu Apr 16 17:30:35.031728 2026] [:error] [pid 57639:tid 57647] [client 51.12.89.191:11068] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeCsO6MCQoTw7TsxWun-PwAAAME"]
[Thu Apr 16 17:30:35.565468 2026] [:error] [pid 57538:tid 57624] [client 51.12.89.191:11134] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeCsO8uMaiEF5SVR2BeuPwAAAJY"]
[Thu Apr 16 17:30:36.094202 2026] [:error] [pid 7880:tid 7888] [client 51.12.89.191:11020] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeCsPKaezm4fSGc0yUJgewAAAYM"]
[Thu Apr 16 17:30:36.675502 2026] [:error] [pid 49094:tid 49101] [client 51.12.89.191:10996] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeCsPDbDwvcXorHR_MxjaAAAAUU"]
[Thu Apr 16 17:30:37.215041 2026] [:error] [pid 29603:tid 29610] [client 51.12.89.191:10908] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeCsPVfGOR6fpTWUAzpd4AAAAQU"]
[Thu Apr 16 17:30:37.754158 2026] [:error] [pid 57639:tid 57657] [client 51.12.89.191:10901] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeCsPaMCQoTw7TsxWun-QQAAAMs"]
[Thu Apr 16 17:30:38.285402 2026] [:error] [pid 57639:tid 57646] [client 51.12.89.191:10961] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeCsPqMCQoTw7TsxWun-QwAAAMA"]
[Thu Apr 16 17:30:38.883323 2026] [:error] [pid 57536:tid 57558] [client 51.12.89.191:10917] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeCsPiQU4faGja6jpDshjQAAAAo"]
[Thu Apr 16 17:30:39.413083 2026] [:error] [pid 49094:tid 49103] [client 51.12.89.191:10957] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeCsPzbDwvcXorHR_MxjdAAAAUc"]
[Thu Apr 16 17:30:39.963291 2026] [:error] [pid 49094:tid 49113] [client 51.12.89.191:10905] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeCsPzbDwvcXorHR_MxjdwAAAVE"]
[Thu Apr 16 17:30:40.511806 2026] [:error] [pid 49094:tid 49100] [client 51.12.89.191:10900] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeCsQDbDwvcXorHR_MxjewAAAUQ"]
[Thu Apr 16 17:30:41.168821 2026] [:error] [pid 57639:tid 57664] [client 51.12.89.191:11104] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeCsQaMCQoTw7TsxWun-SAAAANI"]
[Thu Apr 16 17:30:41.753739 2026] [:error] [pid 7880:tid 7894] [client 51.12.89.191:10999] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeCsQaaezm4fSGc0yUJggAAAAYk"]
[Thu Apr 16 17:30:42.282152 2026] [:error] [pid 49094:tid 49113] [client 51.12.89.191:10950] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeCsQjbDwvcXorHR_MxjjAAAAVE"]
[Thu Apr 16 17:30:42.858366 2026] [:error] [pid 57639:tid 57662] [client 51.12.89.191:10970] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeCsQqMCQoTw7TsxWun-SwAAANA"]
[Thu Apr 16 17:30:43.449378 2026] [:error] [pid 7880:tid 7908] [client 51.12.89.191:11007] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeCsQ6aezm4fSGc0yUJgggAAAZc"]
[Thu Apr 16 17:30:43.997501 2026] [:error] [pid 7880:tid 7909] [client 51.12.89.191:11063] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCsQ6aezm4fSGc0yUJggwAAAZg"]
[Thu Apr 16 17:30:44.523400 2026] [:error] [pid 57536:tid 57568] [client 51.12.89.191:11094] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCsRCQU4faGja6jpDshkAAAABQ"]
[Thu Apr 16 17:30:45.090438 2026] [:error] [pid 49094:tid 49113] [client 51.12.89.191:11025] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCsRTbDwvcXorHR_MxjmAAAAVE"]
[Thu Apr 16 17:30:45.627640 2026] [:error] [pid 49094:tid 49096] [client 51.12.89.191:10860] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeCsRTbDwvcXorHR_MxjnAAAAUA"]
[Thu Apr 16 17:30:46.172128 2026] [:error] [pid 49094:tid 49119] [client 51.12.89.191:10967] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeCsRjbDwvcXorHR_MxjngAAAVc"]
[Thu Apr 16 17:30:46.701309 2026] [:error] [pid 57538:tid 57606] [client 51.12.89.191:10898] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeCsRsuMaiEF5SVR2BeuRQAAAIQ"]
[Thu Apr 16 17:30:47.289079 2026] [:error] [pid 57639:tid 57649] [client 51.12.89.191:10882] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeCsR6MCQoTw7TsxWun-UgAAAMM"]
[Thu Apr 16 17:30:47.813211 2026] [:error] [pid 57537:tid 57588] [client 51.12.89.191:10913] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeCsR1VQRS8nm73ENAmSdgAAAE0"]
[Thu Apr 16 17:30:48.356732 2026] [:error] [pid 7880:tid 7905] [client 51.12.89.191:10936] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeCsSKaezm4fSGc0yUJghgAAAZQ"]
[Thu Apr 16 17:30:48.880878 2026] [:error] [pid 57639:tid 57662] [client 51.12.89.191:10976] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeCsSKMCQoTw7TsxWun-VwAAANA"]
[Thu Apr 16 17:30:49.405701 2026] [:error] [pid 57639:tid 57647] [client 51.12.89.191:10837] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeCsSaMCQoTw7TsxWun-WAAAAME"]
[Thu Apr 16 17:30:49.936746 2026] [:error] [pid 57639:tid 57660] [client 51.12.89.191:11234] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeCsSaMCQoTw7TsxWun-WQAAAM4"]
[Thu Apr 16 17:30:50.521713 2026] [:error] [pid 57639:tid 57667] [client 51.12.89.191:11038] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeCsSqMCQoTw7TsxWun-XQAAANU"]
[Thu Apr 16 17:30:51.057982 2026] [:error] [pid 49094:tid 49111] [client 51.12.89.191:10985] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeCsSzbDwvcXorHR_MxjrgAAAU8"]
[Thu Apr 16 17:30:51.585097 2026] [:error] [pid 29603:tid 29622] [client 51.12.89.191:11059] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeCsS1fGOR6fpTWUAzpd5gAAARE"]
[Thu Apr 16 17:30:52.123122 2026] [:error] [pid 57639:tid 57666] [client 51.12.89.191:10998] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Apr 16 17:30:52.388055 2026] [:error] [pid 57639:tid 57669] [client 51.12.89.191:10998] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Thu Apr 16 17:30:52.653463 2026] [:error] [pid 57639:tid 57650] [client 51.12.89.191:10998] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Thu Apr 16 17:30:53.191975 2026] [:error] [pid 57639:tid 57660] [client 51.12.89.191:10998] [client 51.12.89.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeCsTaMCQoTw7TsxWun-aAAAAM4"]
[Thu Apr 16 17:30:53.727573 2026] [:error] [pid 57536:tid 57570] [client 51.12.89.191:10910] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 16 17:30:54.820164 2026] [:error] [pid 57536:tid 57556] [client 51.12.89.191:10910] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Apr 16 17:30:55.092069 2026] [:error] [pid 57536:tid 57567] [client 51.12.89.191:10910] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Thu Apr 16 17:30:55.360542 2026] [:error] [pid 57536:tid 57555] [client 51.12.89.191:10910] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Thu Apr 16 17:30:55.625923 2026] [:error] [pid 57536:tid 57552] [client 51.12.89.191:10910] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aeCsTyQU4faGja6jpDshowAAAAQ"]
[Thu Apr 16 17:30:56.214035 2026] [:error] [pid 7880:tid 7887] [client 51.12.89.191:10926] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aeCsUKaezm4fSGc0yUJgjgAAAYI"]
[Thu Apr 16 17:30:56.798726 2026] [:error] [pid 29603:tid 29629] [client 51.12.89.191:10918] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aeCsUFfGOR6fpTWUAzpd7QAAARg"]
[Thu Apr 16 17:30:57.375969 2026] [:error] [pid 57537:tid 57589] [client 51.12.89.191:10881] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "aeCsUVVQRS8nm73ENAmSewAAAE4"]
[Thu Apr 16 17:30:57.900136 2026] [:error] [pid 7880:tid 7899] [client 51.12.89.191:10990] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aeCsUaaezm4fSGc0yUJgkgAAAY4"]
[Thu Apr 16 17:30:58.485289 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:10912] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aeCsUqMCQoTw7TsxWun-aQAAANE"]
[Thu Apr 16 17:30:59.008197 2026] [:error] [pid 57639:tid 57653] [client 51.12.89.191:10997] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aeCsU6MCQoTw7TsxWun-awAAAMc"]
[Thu Apr 16 17:30:59.594149 2026] [:error] [pid 57639:tid 57655] [client 51.12.89.191:10889] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "aeCsU6MCQoTw7TsxWun-bgAAAMk"]
[Thu Apr 16 17:31:00.124081 2026] [:error] [pid 57537:tid 57578] [client 51.12.89.191:10899] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeCsVFVQRS8nm73ENAmSfQAAAEM"]
[Thu Apr 16 17:31:00.713204 2026] [:error] [pid 29603:tid 29615] [client 51.12.89.191:11006] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeCsVFfGOR6fpTWUAzpd8QAAAQo"]
[Thu Apr 16 17:31:01.236556 2026] [:error] [pid 57538:tid 57611] [client 51.12.89.191:10885] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeCsVcuMaiEF5SVR2BeuTwAAAIk"]
[Thu Apr 16 17:31:01.769787 2026] [:error] [pid 49094:tid 49097] [client 51.12.89.191:10994] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeCsVTbDwvcXorHR_MxjwQAAAUE"]
[Thu Apr 16 17:31:02.344022 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:10921] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeCsVqMCQoTw7TsxWun-cQAAAMg"]
[Thu Apr 16 17:31:02.865779 2026] [:error] [pid 49094:tid 49114] [client 51.12.89.191:10972] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeCsVjbDwvcXorHR_MxjxQAAAVI"]
[Thu Apr 16 17:31:03.469657 2026] [:error] [pid 57537:tid 57577] [client 51.12.89.191:10982] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeCsV1VQRS8nm73ENAmSgQAAAEI"]
[Thu Apr 16 17:31:03.993275 2026] [:error] [pid 57639:tid 57658] [client 51.12.89.191:10979] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeCsV6MCQoTw7TsxWun-dgAAAMw"]
[Thu Apr 16 17:31:04.521419 2026] [:error] [pid 57639:tid 57650] [client 51.12.89.191:10890] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aeCsWKMCQoTw7TsxWun-dwAAAMQ"]
[Thu Apr 16 17:31:05.096175 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:11174] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aeCsWaMCQoTw7TsxWun-eQAAANE"]
[Thu Apr 16 17:31:05.626954 2026] [:error] [pid 57639:tid 57659] [client 51.12.89.191:11004] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aeCsWaMCQoTw7TsxWun-egAAAM0"]
[Thu Apr 16 17:31:06.159062 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:10915] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bengi.php"] [unique_id "aeCsWqMCQoTw7TsxWun-fgAAAMg"]
[Thu Apr 16 17:31:06.688289 2026] [:error] [pid 57536:tid 57558] [client 51.12.89.191:10842] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeCsWiQU4faGja6jpDshpQAAAAo"]
[Thu Apr 16 17:31:07.269091 2026] [:error] [pid 7880:tid 7905] [client 51.12.89.191:10951] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeCsW6aezm4fSGc0yUJgmAAAAZQ"]
[Thu Apr 16 17:31:07.842327 2026] [:error] [pid 57536:tid 57548] [client 51.12.89.191:10941] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeCsWyQU4faGja6jpDshpwAAAAA"]
[Thu Apr 16 17:31:08.365926 2026] [:error] [pid 57536:tid 57551] [client 51.12.89.191:10844] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeCsXCQU4faGja6jpDshqwAAAAM"]
[Thu Apr 16 17:31:08.889685 2026] [:error] [pid 57639:tid 57646] [client 51.12.89.191:11064] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeCsXKMCQoTw7TsxWun-hwAAAMA"]
[Thu Apr 16 17:31:09.417460 2026] [:error] [pid 57639:tid 57654] [client 51.12.89.191:10939] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeCsXaMCQoTw7TsxWun-iwAAAMg"]
[Thu Apr 16 17:31:09.952948 2026] [:error] [pid 57639:tid 57656] [client 51.12.89.191:10924] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeCsXaMCQoTw7TsxWun-jgAAAMo"]
[Thu Apr 16 17:31:10.476538 2026] [:error] [pid 57536:tid 57557] [client 51.12.89.191:10944] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeCsXiQU4faGja6jpDshsQAAAAk"]
[Thu Apr 16 17:31:11.006724 2026] [:error] [pid 29603:tid 29625] [client 51.12.89.191:10956] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aeCsX1fGOR6fpTWUAzpd-AAAARQ"]
[Thu Apr 16 17:31:11.592196 2026] [:error] [pid 57538:tid 57613] [client 51.12.89.191:10822] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aeCsX8uMaiEF5SVR2BeuUQAAAIs"]
[Thu Apr 16 17:31:12.121567 2026] [:error] [pid 7880:tid 7908] [client 51.12.89.191:10995] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aeCsYKaezm4fSGc0yUJgnwAAAZc"]
[Thu Apr 16 17:31:12.645713 2026] [:error] [pid 7880:tid 7899] [client 51.12.89.191:10983] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "aeCsYKaezm4fSGc0yUJgogAAAY4"]
[Thu Apr 16 17:31:13.236672 2026] [:error] [pid 57639:tid 57664] [client 51.12.89.191:10955] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeCsYaMCQoTw7TsxWun-lwAAANI"]
[Thu Apr 16 17:31:13.820541 2026] [:error] [pid 7880:tid 7888] [client 51.12.89.191:11148] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeCsYaaezm4fSGc0yUJgpwAAAYM"]
[Thu Apr 16 17:31:14.409949 2026] [:error] [pid 57538:tid 57617] [client 51.12.89.191:10848] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeCsYsuMaiEF5SVR2BeuVgAAAI8"]
[Thu Apr 16 17:31:14.939396 2026] [:error] [pid 29603:tid 29617] [client 51.12.89.191:11131] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeCsYlfGOR6fpTWUAzpd_gAAAQw"]
[Thu Apr 16 17:31:15.470161 2026] [:error] [pid 29603:tid 29616] [client 51.12.89.191:10931] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeCsY1fGOR6fpTWUAzpeAQAAAQs"]
[Thu Apr 16 17:31:15.992994 2026] [:error] [pid 29603:tid 29623] [client 51.12.89.191:10903] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeCsY1fGOR6fpTWUAzpeAwAAARI"]
[Thu Apr 16 17:31:16.521635 2026] [:error] [pid 7880:tid 7889] [client 51.12.89.191:10938] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeCsZKaezm4fSGc0yUJgsAAAAYQ"]
[Thu Apr 16 17:31:17.045078 2026] [:error] [pid 7880:tid 7900] [client 51.12.89.191:10853] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeCsZaaezm4fSGc0yUJgsQAAAY8"]
[Thu Apr 16 17:31:17.628202 2026] [:error] [pid 57639:tid 57656] [client 51.12.89.191:11050] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeCsZaMCQoTw7TsxWun-ogAAAMo"]
[Thu Apr 16 17:31:18.151133 2026] [:error] [pid 57639:tid 57664] [client 51.12.89.191:11057] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeCsZqMCQoTw7TsxWun-pAAAANI"]
[Thu Apr 16 17:31:18.674786 2026] [:error] [pid 57639:tid 57657] [client 51.12.89.191:11069] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeCsZqMCQoTw7TsxWun-qAAAAMs"]
[Thu Apr 16 17:31:19.197800 2026] [:error] [pid 29603:tid 29618] [client 51.12.89.191:10824] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeCsZ1fGOR6fpTWUAzpeBAAAAQ0"]
[Thu Apr 16 17:31:19.782037 2026] [:error] [pid 29603:tid 29617] [client 51.12.89.191:10761] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeCsZ1fGOR6fpTWUAzpeBwAAAQw"]
[Thu Apr 16 17:31:20.356819 2026] [:error] [pid 57639:tid 57646] [client 51.12.89.191:11005] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeCsaKMCQoTw7TsxWun-rAAAAMA"]
[Thu Apr 16 17:31:20.894382 2026] [:error] [pid 57639:tid 57650] [client 51.12.89.191:10887] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeCsaKMCQoTw7TsxWun-rgAAAMQ"]
[Thu Apr 16 17:31:21.418297 2026] [:error] [pid 49094:tid 49102] [client 51.12.89.191:10777] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeCsaTbDwvcXorHR_MxjywAAAUY"]
[Thu Apr 16 17:31:21.947427 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:10907] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsaaMCQoTw7TsxWun-swAAANE"]
[Thu Apr 16 17:31:22.533018 2026] [:error] [pid 49094:tid 49117] [client 51.12.89.191:10874] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsajbDwvcXorHR_MxjzgAAAVU"]
[Thu Apr 16 17:31:23.068110 2026] [:error] [pid 57639:tid 57670] [client 51.12.89.191:10928] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsa6MCQoTw7TsxWun-uAAAANg"]
[Thu Apr 16 17:31:23.641609 2026] [:error] [pid 7880:tid 7901] [client 51.12.89.191:10867] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeCsa6aezm4fSGc0yUJgtwAAAZA"]
[Thu Apr 16 17:31:24.175082 2026] [:error] [pid 7880:tid 7886] [client 51.12.89.191:10897] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeCsbKaezm4fSGc0yUJguAAAAYE"]
[Thu Apr 16 17:31:24.747831 2026] [:error] [pid 57538:tid 57619] [client 51.12.89.191:10816] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeCsbMuMaiEF5SVR2BeuXgAAAJE"]
[Thu Apr 16 17:31:25.334013 2026] [:error] [pid 29603:tid 29606] [client 51.12.89.191:10909] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeCsbVfGOR6fpTWUAzpeDQAAAQE"]
[Thu Apr 16 17:31:25.857981 2026] [:error] [pid 57639:tid 57664] [client 51.12.89.191:10904] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeCsbaMCQoTw7TsxWun-vQAAANI"]
[Thu Apr 16 17:31:26.434542 2026] [:error] [pid 57639:tid 57668] [client 51.12.89.191:10825] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeCsbqMCQoTw7TsxWun-wAAAANY"]
[Thu Apr 16 17:31:27.024874 2026] [:error] [pid 7880:tid 7892] [client 51.12.89.191:10838] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeCsb6aezm4fSGc0yUJgvwAAAYc"]
[Thu Apr 16 17:31:27.553293 2026] [:error] [pid 49094:tid 49116] [client 51.12.89.191:10841] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeCsbzbDwvcXorHR_Mxj1wAAAVQ"]
[Thu Apr 16 17:31:28.139373 2026] [:error] [pid 7880:tid 7906] [client 51.12.89.191:10930] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeCscKaezm4fSGc0yUJgwAAAAZU"]
[Thu Apr 16 17:31:28.664110 2026] [:error] [pid 57639:tid 57661] [client 51.12.89.191:10902] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeCscKMCQoTw7TsxWun-xQAAAM8"]
[Thu Apr 16 17:31:29.237932 2026] [:error] [pid 49094:tid 49119] [client 51.12.89.191:10877] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeCscTbDwvcXorHR_Mxj3wAAAVc"]
[Thu Apr 16 17:31:29.768353 2026] [:error] [pid 7880:tid 7896] [client 51.12.89.191:10981] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeCscaaezm4fSGc0yUJgwwAAAYs"]
[Thu Apr 16 17:31:30.341100 2026] [:error] [pid 49094:tid 49109] [client 51.12.89.191:10819] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeCscjbDwvcXorHR_Mxj4gAAAU0"]
[Thu Apr 16 17:31:30.874983 2026] [:error] [pid 49094:tid 49107] [client 51.12.89.191:10835] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeCscjbDwvcXorHR_Mxj4wAAAUs"]
[Thu Apr 16 17:31:31.465084 2026] [:error] [pid 49094:tid 49105] [client 51.12.89.191:10960] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeCsczbDwvcXorHR_Mxj6AAAAUk"]
[Thu Apr 16 17:31:32.050985 2026] [:error] [pid 57639:tid 57665] [client 51.12.89.191:10846] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeCsdKMCQoTw7TsxWun-ygAAANM"]
[Thu Apr 16 17:31:32.630449 2026] [:error] [pid 57639:tid 57655] [client 51.12.89.191:10922] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeCsdKMCQoTw7TsxWun-zgAAAMk"]
[Thu Apr 16 17:31:33.155587 2026] [:error] [pid 49094:tid 49108] [client 51.12.89.191:11158] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeCsdTbDwvcXorHR_Mxj7QAAAUw"]
[Thu Apr 16 17:31:33.684590 2026] [:error] [pid 57639:tid 57659] [client 51.12.89.191:10933] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeCsdaMCQoTw7TsxWun-0gAAAM0"]
[Thu Apr 16 17:31:34.271158 2026] [:error] [pid 49094:tid 49114] [client 51.12.89.191:10831] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeCsdjbDwvcXorHR_Mxj8AAAAVI"]
[Thu Apr 16 17:31:34.794489 2026] [:error] [pid 57639:tid 57663] [client 51.12.89.191:10868] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeCsdqMCQoTw7TsxWun-1wAAANE"]
[Thu Apr 16 17:31:35.380709 2026] [:error] [pid 29603:tid 29618] [client 51.12.89.191:10864] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aeCsd1fGOR6fpTWUAzpeFwAAAQ0"]
[Thu Apr 16 17:31:35.971036 2026] [:error] [pid 29603:tid 29609] [client 51.12.89.191:10817] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aeCsd1fGOR6fpTWUAzpeGQAAAQQ"]
[Thu Apr 16 17:31:36.498990 2026] [:error] [pid 29603:tid 29607] [client 51.12.89.191:10940] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aeCseFfGOR6fpTWUAzpeGgAAAQI"]
[Thu Apr 16 17:31:37.026334 2026] [:error] [pid 29603:tid 29611] [client 51.12.89.191:10821] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aeCseVfGOR6fpTWUAzpeHAAAAQY"]
[Thu Apr 16 17:31:37.555531 2026] [:error] [pid 57538:tid 57610] [client 51.12.89.191:10914] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aeCsecuMaiEF5SVR2BeuYwAAAIg"]
[Thu Apr 16 17:31:38.087870 2026] [:error] [pid 57639:tid 57670] [client 51.12.89.191:10876] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aeCseqMCQoTw7TsxWun-3wAAANg"]
[Thu Apr 16 17:31:38.618959 2026] [:error] [pid 7880:tid 7888] [client 51.12.89.191:10766] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aeCseqaezm4fSGc0yUJg1gAAAYM"]
[Thu Apr 16 17:31:39.149092 2026] [:error] [pid 7880:tid 7897] [client 51.12.89.191:10932] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cabs.php"] [unique_id "aeCse6aezm4fSGc0yUJg2AAAAYw"]
[Thu Apr 16 17:31:39.735408 2026] [:error] [pid 57639:tid 57665] [client 51.12.89.191:10920] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeCse6MCQoTw7TsxWun-5AAAANM"]
[Thu Apr 16 17:31:40.262401 2026] [:error] [pid 29603:tid 29610] [client 51.12.89.191:10832] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeCsfFfGOR6fpTWUAzpeIgAAAQU"]
[Thu Apr 16 17:31:40.787906 2026] [:error] [pid 49094:tid 49111] [client 51.12.89.191:10847] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeCsfDbDwvcXorHR_Mxj9gAAAU8"]
[Thu Apr 16 17:31:41.312986 2026] [:error] [pid 49094:tid 49106] [client 51.12.89.191:10775] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeCsfTbDwvcXorHR_Mxj-AAAAUo"]
[Thu Apr 16 17:31:41.898812 2026] [:error] [pid 57537:tid 57585] [client 51.12.89.191:10916] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "aeCsfVVQRS8nm73ENAmSnQAAAEo"]
[Thu Apr 16 17:31:42.423427 2026] [:error] [pid 7880:tid 7906] [client 51.12.89.191:10943] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "aeCsfqaezm4fSGc0yUJg2wAAAZU"]
[Thu Apr 16 17:31:42.952929 2026] [:error] [pid 49094:tid 49118] [client 51.12.89.191:10826] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "aeCsfjbDwvcXorHR_Mxj-wAAAVY"]
[Thu Apr 16 17:31:43.477074 2026] [:error] [pid 57538:tid 57621] [client 51.12.89.191:10878] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x1da.php"] [unique_id "aeCsf8uMaiEF5SVR2BeuZgAAAJM"]
[Thu Apr 16 17:31:44.070518 2026] [:error] [pid 57538:tid 57618] [client 51.12.89.191:10863] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aeCsgMuMaiEF5SVR2BeuZwAAAJA"]
[Thu Apr 16 17:31:44.644189 2026] [:error] [pid 57538:tid 57614] [client 51.12.89.191:10942] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aeCsgMuMaiEF5SVR2BeubAAAAIw"]
[Thu Apr 16 17:31:45.173216 2026] [:error] [pid 29603:tid 29613] [client 51.12.89.191:10778] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aeCsgVfGOR6fpTWUAzpeLQAAAQg"]
[Thu Apr 16 17:31:45.809837 2026] [:error] [pid 57536:tid 57558] [client 51.12.89.191:10830] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jp.php"] [unique_id "aeCsgSQU4faGja6jpDshugAAAAo"]
[Thu Apr 16 17:31:46.343716 2026] [:error] [pid 57536:tid 57548] [client 51.12.89.191:10919] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeCsgiQU4faGja6jpDshuwAAAAA"]
[Thu Apr 16 17:31:46.879227 2026] [:error] [pid 7880:tid 7892] [client 51.12.89.191:10759] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeCsgqaezm4fSGc0yUJg3gAAAYc"]
[Thu Apr 16 17:31:47.413917 2026] [:error] [pid 57536:tid 57550] [client 51.12.89.191:10852] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeCsgyQU4faGja6jpDshvQAAAAI"]
[Thu Apr 16 17:31:48.027574 2026] [:error] [pid 49094:tid 49101] [client 51.12.89.191:10773] [client 51.12.89.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeCshDbDwvcXorHR_MxkBwAAAUU"]
[Thu Apr 16 17:54:05.749409 2026] [:error] [pid 57639:tid 57654] [client 157.230.155.243:54857] [client 157.230.155.243] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.155.243, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeCxvaMCQoTw7TsxWukJfwAAAMg"]
[Thu Apr 16 17:54:05.753252 2026] [:error] [pid 57639:tid 57654] [client 157.230.155.243:54857] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Apr 16 21:16:31.170005 2026] [:error] [pid 57639:tid 57648] [client 45.130.203.170:60531] [client 45.130.203.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aeDhL6MCQoTw7TsxWumoPAAAAMI"]
[Thu Apr 16 21:16:31.850764 2026] [:error] [pid 57639:tid 57655] [client 45.130.203.171:26651] [client 45.130.203.171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aeDhL6MCQoTw7TsxWumoPgAAAMk"]
[Thu Apr 16 21:33:48.066107 2026] [:error] [pid 29603:tid 29611] [client 170.64.176.144:53153] [client 170.64.176.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.176.144, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeDlPFfGOR6fpTWUAzqcJQAAAQY"]
[Thu Apr 16 21:33:48.070073 2026] [:error] [pid 29603:tid 29611] [client 170.64.176.144:53153] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Apr 16 22:02:34.692631 2026] [:error] [pid 57537:tid 57576] [client 62.164.177.15:54188] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax.php
[Thu Apr 16 22:04:37.587430 2026] [:error] [pid 57536:tid 57572] [client 43.159.143.139:59768] [client 43.159.143.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeDsdSQU4faGja6jpDuS_wAAABg"]
[Thu Apr 16 22:36:05.949292 2026] [:error] [pid 49094:tid 49117] [client 34.9.180.63:51305] [client 34.9.180.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.9.180.63, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeDz1TbDwvcXorHR_MwJ3gAAAVU"]
[Thu Apr 16 22:36:05.952880 2026] [:error] [pid 49094:tid 49117] [client 34.9.180.63:51305] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 16 22:36:08.239285 2026] [:error] [pid 49094:tid 49118] [client 34.9.180.63:51305] [client 34.9.180.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeDz2DbDwvcXorHR_MwJ-AAAAVY"]
[Thu Apr 16 22:36:08.661829 2026] [:error] [pid 49094:tid 49113] [client 34.9.180.63:54396] [client 34.9.180.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeDz2DbDwvcXorHR_MwJ_wAAAVE"]
[Thu Apr 16 22:36:09.135564 2026] [:error] [pid 7880:tid 7909] [client 34.9.180.63:62015] [client 34.9.180.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeDz2aaezm4fSGc0yULFVgAAAZg"]
[Thu Apr 16 22:36:09.562453 2026] [:error] [pid 57639:tid 57659] [client 34.9.180.63:62378] [client 34.9.180.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeDz2aMCQoTw7TsxWunmrwAAAM0"]
[Thu Apr 16 22:36:10.052398 2026] [:error] [pid 57639:tid 57670] [client 34.9.180.63:52121] [client 34.9.180.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeDz2qMCQoTw7TsxWunmsAAAANg"]
[Thu Apr 16 22:36:10.538985 2026] [:error] [pid 57639:tid 57666] [client 34.9.180.63:51410] [client 34.9.180.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeDz2qMCQoTw7TsxWunmuAAAANQ"]
[Thu Apr 16 22:36:11.143991 2026] [:error] [pid 57639:tid 57655] [client 34.9.180.63:56709] [client 34.9.180.63] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeDz26MCQoTw7TsxWunmwgAAAMk"]
[Thu Apr 16 22:36:55.493253 2026] [:error] [pid 57536:tid 57566] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu Apr 16 22:36:55.762840 2026] [:error] [pid 57536:tid 57567] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 16 22:36:56.031781 2026] [:error] [pid 57536:tid 57563] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 16 22:36:56.299598 2026] [:error] [pid 57536:tid 57552] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 16 22:36:56.570920 2026] [:error] [pid 57536:tid 57554] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Thu Apr 16 22:36:57.123917 2026] [:error] [pid 57536:tid 57561] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Apr 16 22:36:57.394365 2026] [:error] [pid 57536:tid 57569] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Thu Apr 16 22:36:57.661988 2026] [:error] [pid 57536:tid 57548] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 16 22:36:57.930605 2026] [:error] [pid 57536:tid 57571] [client 4.225.164.196:65165] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Thu Apr 16 22:36:58.207995 2026] [:error] [pid 57536:tid 57560] [client 4.225.164.196:65165] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeD0CiQU4faGja6jpDugyAAAAAw"]
[Thu Apr 16 22:36:58.771609 2026] [:error] [pid 49094:tid 49120] [client 4.225.164.196:65115] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeD0CjbDwvcXorHR_MwKYwAAAVg"]
[Thu Apr 16 22:36:59.309166 2026] [:error] [pid 57639:tid 57651] [client 4.225.164.196:65119] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeD0C6MCQoTw7TsxWunnzAAAAMU"]
[Thu Apr 16 22:36:59.883295 2026] [:error] [pid 57536:tid 57552] [client 4.225.164.196:64585] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeD0CyQU4faGja6jpDug0gAAAAQ"]
[Thu Apr 16 22:37:00.451035 2026] [:error] [pid 57639:tid 57648] [client 4.225.164.196:65172] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeD0DKMCQoTw7TsxWunn3gAAAMI"]
[Thu Apr 16 22:37:01.103400 2026] [:error] [pid 29603:tid 29624] [client 4.225.164.196:65095] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeD0DVfGOR6fpTWUAzqtVwAAARM"]
[Thu Apr 16 22:37:01.692807 2026] [:error] [pid 7880:tid 7892] [client 4.225.164.196:65102] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeD0Daaezm4fSGc0yULFkgAAAYc"]
[Thu Apr 16 22:37:02.216442 2026] [:error] [pid 29603:tid 29615] [client 4.225.164.196:64652] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeD0DlfGOR6fpTWUAzqtWgAAAQo"]
[Thu Apr 16 22:37:02.819614 2026] [:error] [pid 57537:tid 57579] [client 4.225.164.196:65213] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeD0DlVQRS8nm73ENAnGfwAAAEQ"]
[Thu Apr 16 22:37:03.357723 2026] [:error] [pid 7880:tid 7887] [client 4.225.164.196:65199] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeD0D6aezm4fSGc0yULFlAAAAYI"]
[Thu Apr 16 22:37:03.964892 2026] [:error] [pid 57639:tid 57665] [client 4.225.164.196:65160] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeD0D6MCQoTw7TsxWunn9QAAANM"]
[Thu Apr 16 22:37:04.547154 2026] [:error] [pid 57639:tid 57666] [client 4.225.164.196:65116] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeD0EKMCQoTw7TsxWunn-AAAANQ"]
[Thu Apr 16 22:37:05.144710 2026] [:error] [pid 49094:tid 49103] [client 4.225.164.196:64703] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeD0ETbDwvcXorHR_MwKcQAAAUc"]
[Thu Apr 16 22:37:05.741289 2026] [:error] [pid 29603:tid 29605] [client 4.225.164.196:65209] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeD0EVfGOR6fpTWUAzqtXQAAAQA"]
[Thu Apr 16 22:37:06.391345 2026] [:error] [pid 57538:tid 57621] [client 4.225.164.196:65120] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeD0EsuMaiEF5SVR2Bf1MgAAAJM"]
[Thu Apr 16 22:37:07.024098 2026] [:error] [pid 57639:tid 57659] [client 4.225.164.196:64679] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeD0E6MCQoTw7TsxWunoAQAAAM0"]
[Thu Apr 16 22:37:08.012474 2026] [:error] [pid 57538:tid 57606] [client 4.225.164.196:64682] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeD0FMuMaiEF5SVR2Bf1NQAAAIQ"]
[Thu Apr 16 22:37:08.589938 2026] [:error] [pid 57536:tid 57570] [client 4.225.164.196:65189] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeD0FCQU4faGja6jpDug6wAAABY"]
[Thu Apr 16 22:37:09.339705 2026] [:error] [pid 7880:tid 7909] [client 4.225.164.196:64646] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeD0Faaezm4fSGc0yULFmAAAAZg"]
[Thu Apr 16 22:37:09.945436 2026] [:error] [pid 57536:tid 57568] [client 4.225.164.196:65088] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeD0FSQU4faGja6jpDug7gAAABQ"]
[Thu Apr 16 22:37:10.515021 2026] [:error] [pid 57536:tid 57562] [client 4.225.164.196:65184] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeD0FiQU4faGja6jpDug8AAAAA4"]
[Thu Apr 16 22:37:11.085804 2026] [:error] [pid 57538:tid 57602] [client 4.225.164.196:64244] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeD0F8uMaiEF5SVR2Bf1OwAAAIA"]
[Thu Apr 16 22:37:11.750430 2026] [:error] [pid 29603:tid 29628] [client 4.225.164.196:65149] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeD0F1fGOR6fpTWUAzqtYwAAARc"]
[Thu Apr 16 22:37:12.328193 2026] [:error] [pid 49094:tid 49097] [client 4.225.164.196:65093] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeD0GDbDwvcXorHR_MwKeAAAAUE"]
[Thu Apr 16 22:37:12.990286 2026] [:error] [pid 57536:tid 57561] [client 4.225.164.196:64675] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeD0GCQU4faGja6jpDug-QAAAA0"]
[Thu Apr 16 22:37:13.586822 2026] [:error] [pid 7880:tid 7889] [client 4.225.164.196:64680] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeD0Gaaezm4fSGc0yULFnAAAAYQ"]
[Thu Apr 16 22:37:14.124060 2026] [:error] [pid 57538:tid 57610] [client 4.225.164.196:65158] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeD0GsuMaiEF5SVR2Bf1QQAAAIg"]
[Thu Apr 16 22:37:14.716913 2026] [:error] [pid 29603:tid 29618] [client 4.225.164.196:65185] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeD0GlfGOR6fpTWUAzqtZgAAAQ0"]
[Thu Apr 16 22:37:15.249545 2026] [:error] [pid 57536:tid 57553] [client 4.225.164.196:65171] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeD0GyQU4faGja6jpDuhAwAAAAU"]
[Thu Apr 16 22:37:15.836147 2026] [:error] [pid 57639:tid 57654] [client 4.225.164.196:64670] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeD0G6MCQoTw7TsxWunoEQAAAMg"]
[Thu Apr 16 22:37:16.366843 2026] [:error] [pid 49094:tid 49107] [client 4.225.164.196:65202] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeD0HDbDwvcXorHR_MwKhAAAAUs"]
[Thu Apr 16 22:37:16.929740 2026] [:error] [pid 57537:tid 57581] [client 4.225.164.196:65101] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeD0HFVQRS8nm73ENAnGiQAAAEY"]
[Thu Apr 16 22:37:17.533013 2026] [:error] [pid 57639:tid 57665] [client 4.225.164.196:64665] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeD0HaMCQoTw7TsxWunoFQAAANM"]
[Thu Apr 16 22:37:18.067484 2026] [:error] [pid 57536:tid 57560] [client 4.225.164.196:65154] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeD0HiQU4faGja6jpDuhCgAAAAw"]
[Thu Apr 16 22:37:18.712887 2026] [:error] [pid 57536:tid 57557] [client 4.225.164.196:64696] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeD0HiQU4faGja6jpDuhDAAAAAk"]
[Thu Apr 16 22:37:19.243766 2026] [:error] [pid 57538:tid 57602] [client 4.225.164.196:64584] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeD0H8uMaiEF5SVR2Bf1SQAAAIA"]
[Thu Apr 16 22:37:19.824736 2026] [:error] [pid 49094:tid 49097] [client 4.225.164.196:64650] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeD0HzbDwvcXorHR_MwKoQAAAUE"]
[Thu Apr 16 22:37:20.439008 2026] [:error] [pid 49094:tid 49112] [client 4.225.164.196:65131] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeD0IDbDwvcXorHR_MwKpQAAAVA"]
[Thu Apr 16 22:37:21.030083 2026] [:error] [pid 49094:tid 49107] [client 4.225.164.196:65169] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeD0ITbDwvcXorHR_MwKrAAAAUs"]
[Thu Apr 16 22:37:21.650682 2026] [:error] [pid 7880:tid 7893] [client 4.225.164.196:65166] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeD0Iaaezm4fSGc0yULFpAAAAYg"]
[Thu Apr 16 22:37:22.318791 2026] [:error] [pid 49094:tid 49104] [client 4.225.164.196:64621] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeD0IjbDwvcXorHR_MwKsgAAAUg"]
[Thu Apr 16 22:37:22.850843 2026] [:error] [pid 7880:tid 7904] [client 4.225.164.196:64672] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeD0Iqaezm4fSGc0yULFpwAAAZM"]
[Thu Apr 16 22:37:23.432956 2026] [:error] [pid 57639:tid 57659] [client 4.225.164.196:65162] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeD0I6MCQoTw7TsxWunoHwAAAM0"]
[Thu Apr 16 22:37:24.037528 2026] [:error] [pid 49094:tid 49107] [client 4.225.164.196:65141] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeD0JDbDwvcXorHR_MwKuQAAAUs"]
[Thu Apr 16 22:37:24.571330 2026] [:error] [pid 49094:tid 49114] [client 4.225.164.196:65192] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeD0JDbDwvcXorHR_MwKvQAAAVI"]
[Thu Apr 16 22:37:25.181711 2026] [:error] [pid 7880:tid 7903] [client 4.225.164.196:65156] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeD0Jaaezm4fSGc0yULFqgAAAZI"]
[Thu Apr 16 22:37:25.767969 2026] [:error] [pid 49094:tid 49112] [client 4.225.164.196:65130] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeD0JTbDwvcXorHR_MwKwwAAAVA"]
[Thu Apr 16 22:37:26.306160 2026] [:error] [pid 29603:tid 29608] [client 4.225.164.196:64699] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeD0JlfGOR6fpTWUAzqtcwAAAQM"]
[Thu Apr 16 22:37:26.907194 2026] [:error] [pid 57536:tid 57569] [client 4.225.164.196:65113] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeD0JiQU4faGja6jpDuhGgAAABU"]
[Thu Apr 16 22:37:27.494862 2026] [:error] [pid 57538:tid 57625] [client 4.225.164.196:64684] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeD0J8uMaiEF5SVR2Bf1VQAAAJc"]
[Thu Apr 16 22:37:28.050545 2026] [:error] [pid 29603:tid 29628] [client 4.225.164.196:64673] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeD0KFfGOR6fpTWUAzqtfwAAARc"]
[Thu Apr 16 22:37:28.584535 2026] [:error] [pid 57639:tid 57651] [client 4.225.164.196:64668] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeD0KKMCQoTw7TsxWunoJgAAAMU"]
[Thu Apr 16 22:37:29.117194 2026] [:error] [pid 57639:tid 57653] [client 4.225.164.196:64657] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeD0KaMCQoTw7TsxWunoKgAAAMc"]
[Thu Apr 16 22:37:29.732923 2026] [:error] [pid 57639:tid 57661] [client 4.225.164.196:64694] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeD0KaMCQoTw7TsxWunoLQAAAM8"]
[Thu Apr 16 22:37:30.264654 2026] [:error] [pid 57639:tid 57667] [client 4.225.164.196:65157] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeD0KqMCQoTw7TsxWunoMQAAANU"]
[Thu Apr 16 22:37:30.827911 2026] [:error] [pid 57538:tid 57610] [client 4.225.164.196:64238] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeD0KsuMaiEF5SVR2Bf1WQAAAIg"]
[Thu Apr 16 22:37:31.360561 2026] [:error] [pid 57639:tid 57658] [client 4.225.164.196:64206] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeD0K6MCQoTw7TsxWunoOgAAAMw"]
[Thu Apr 16 22:37:31.939490 2026] [:error] [pid 57538:tid 57614] [client 4.225.164.196:65127] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeD0K8uMaiEF5SVR2Bf1WwAAAIw"]
[Thu Apr 16 22:37:32.535127 2026] [:error] [pid 49094:tid 49107] [client 4.225.164.196:65178] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeD0LDbDwvcXorHR_MwK0QAAAUs"]
[Thu Apr 16 22:37:33.087397 2026] [:error] [pid 57538:tid 57622] [client 4.225.164.196:64660] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeD0LcuMaiEF5SVR2Bf1XQAAAJQ"]
[Thu Apr 16 22:37:33.655535 2026] [:error] [pid 49094:tid 49118] [client 4.225.164.196:65122] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeD0LTbDwvcXorHR_MwK1gAAAVY"]
[Thu Apr 16 22:37:34.232097 2026] [:error] [pid 49094:tid 49101] [client 4.225.164.196:64301] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeD0LjbDwvcXorHR_MwK1wAAAUU"]
[Thu Apr 16 22:37:34.819035 2026] [:error] [pid 57639:tid 57653] [client 4.225.164.196:64648] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeD0LqMCQoTw7TsxWunoSAAAAMc"]
[Thu Apr 16 22:37:35.414133 2026] [:error] [pid 57639:tid 57646] [client 4.225.164.196:65124] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeD0L6MCQoTw7TsxWunoUAAAAMA"]
[Thu Apr 16 22:37:35.988906 2026] [:error] [pid 7880:tid 7899] [client 4.225.164.196:65196] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeD0L6aezm4fSGc0yULFuwAAAY4"]
[Thu Apr 16 22:37:36.520725 2026] [:error] [pid 7880:tid 7905] [client 4.225.164.196:65147] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeD0MKaezm4fSGc0yULFvQAAAZQ"]
[Thu Apr 16 22:37:37.093909 2026] [:error] [pid 7880:tid 7887] [client 4.225.164.196:64598] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeD0Maaezm4fSGc0yULFwgAAAYI"]
[Thu Apr 16 22:37:37.686667 2026] [:error] [pid 49094:tid 49100] [client 4.225.164.196:65129] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeD0MTbDwvcXorHR_MwK2wAAAUQ"]
[Thu Apr 16 22:37:38.222209 2026] [:error] [pid 49094:tid 49116] [client 4.225.164.196:64681] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeD0MjbDwvcXorHR_MwK3wAAAVQ"]
[Thu Apr 16 22:37:38.808735 2026] [:error] [pid 7880:tid 7902] [client 4.225.164.196:64643] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeD0Mqaezm4fSGc0yULFywAAAZE"]
[Thu Apr 16 22:37:39.364771 2026] [:error] [pid 29603:tid 29623] [client 4.225.164.196:65105] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeD0M1fGOR6fpTWUAzqtkgAAARI"]
[Thu Apr 16 22:37:40.000987 2026] [:error] [pid 57537:tid 57590] [client 4.225.164.196:64623] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeD0NFVQRS8nm73ENAnGkAAAAE8"]
[Thu Apr 16 22:37:40.589072 2026] [:error] [pid 29603:tid 29626] [client 4.225.164.196:65161] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeD0NFfGOR6fpTWUAzqtlQAAARU"]
[Thu Apr 16 22:37:41.394586 2026] [:error] [pid 57639:tid 57659] [client 4.225.164.196:64581] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeD0NaMCQoTw7TsxWunoWwAAAM0"]
[Thu Apr 16 22:37:42.060103 2026] [:error] [pid 49094:tid 49104] [client 4.225.164.196:64594] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeD0NjbDwvcXorHR_MwK5gAAAUg"]
[Thu Apr 16 22:37:42.603975 2026] [:error] [pid 57639:tid 57664] [client 4.225.164.196:65173] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeD0NqMCQoTw7TsxWunoYQAAANI"]
[Thu Apr 16 22:37:43.273817 2026] [:error] [pid 57639:tid 57661] [client 4.225.164.196:65142] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeD0N6MCQoTw7TsxWunoZAAAAM8"]
[Thu Apr 16 22:37:44.035699 2026] [:error] [pid 57536:tid 57560] [client 4.225.164.196:64235] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeD0OCQU4faGja6jpDuhMgAAAAw"]
[Thu Apr 16 22:37:44.880529 2026] [:error] [pid 57538:tid 57619] [client 4.225.164.196:64222] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeD0OMuMaiEF5SVR2Bf1eQAAAJE"]
[Thu Apr 16 22:37:45.430451 2026] [:error] [pid 7880:tid 7888] [client 4.225.164.196:65210] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeD0Oaaezm4fSGc0yULF1QAAAYM"]
[Thu Apr 16 22:37:46.010423 2026] [:error] [pid 7880:tid 7895] [client 4.225.164.196:65096] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeD0Oqaezm4fSGc0yULF1wAAAYo"]
[Thu Apr 16 22:37:46.587039 2026] [:error] [pid 29603:tid 29618] [client 4.225.164.196:64579] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeD0OlfGOR6fpTWUAzqtmwAAAQ0"]
[Thu Apr 16 22:37:47.163717 2026] [:error] [pid 57537:tid 57576] [client 4.225.164.196:65211] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeD0O1VQRS8nm73ENAnGmQAAAEE"]
[Thu Apr 16 22:37:47.707662 2026] [:error] [pid 57639:tid 57669] [client 4.225.164.196:65179] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeD0O6MCQoTw7TsxWunoaQAAANc"]
[Thu Apr 16 22:37:48.282668 2026] [:error] [pid 57538:tid 57617] [client 4.225.164.196:65167] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeD0PMuMaiEF5SVR2Bf1fQAAAI8"]
[Thu Apr 16 22:37:48.882831 2026] [:error] [pid 57538:tid 57614] [client 4.225.164.196:64225] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeD0PMuMaiEF5SVR2Bf1ggAAAIw"]
[Thu Apr 16 22:37:49.464834 2026] [:error] [pid 57639:tid 57665] [client 4.225.164.196:64265] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeD0PaMCQoTw7TsxWunobAAAANM"]
[Thu Apr 16 22:37:49.993351 2026] [:error] [pid 7880:tid 7896] [client 4.225.164.196:64657] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeD0Paaezm4fSGc0yULF3gAAAYs"]
[Thu Apr 16 22:37:50.583227 2026] [:error] [pid 7880:tid 7885] [client 4.225.164.196:65215] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeD0Pqaezm4fSGc0yULF4QAAAYA"]
[Thu Apr 16 22:37:51.177316 2026] [:error] [pid 57537:tid 57592] [client 4.225.164.196:64589] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeD0P1VQRS8nm73ENAnGoQAAAFE"]
[Thu Apr 16 22:37:51.768151 2026] [:error] [pid 57537:tid 57597] [client 4.225.164.196:63514] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeD0P1VQRS8nm73ENAnGogAAAFY"]
[Thu Apr 16 22:37:52.327408 2026] [:error] [pid 29603:tid 29605] [client 4.225.164.196:64608] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeD0QFfGOR6fpTWUAzqtowAAAQA"]
[Thu Apr 16 22:37:52.871889 2026] [:error] [pid 57639:tid 57667] [client 4.225.164.196:64655] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeD0QKMCQoTw7TsxWunocAAAANU"]
[Thu Apr 16 22:37:53.405498 2026] [:error] [pid 57639:tid 57660] [client 4.225.164.196:64262] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeD0QaMCQoTw7TsxWunodwAAAM4"]
[Thu Apr 16 22:37:53.947471 2026] [:error] [pid 57639:tid 57661] [client 4.225.164.196:64263] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeD0QaMCQoTw7TsxWunofwAAAM8"]
[Thu Apr 16 22:37:54.489482 2026] [:error] [pid 57639:tid 57649] [client 4.225.164.196:64656] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeD0QqMCQoTw7TsxWunohgAAAMM"]
[Thu Apr 16 22:37:55.054252 2026] [:error] [pid 57639:tid 57670] [client 4.225.164.196:64580] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeD0Q6MCQoTw7TsxWunokAAAANg"]
[Thu Apr 16 22:37:55.631403 2026] [:error] [pid 29603:tid 29629] [client 4.225.164.196:64578] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeD0Q1fGOR6fpTWUAzqtpwAAARg"]
[Thu Apr 16 22:37:56.204593 2026] [:error] [pid 57536:tid 57558] [client 4.225.164.196:64605] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeD0RCQU4faGja6jpDuhQQAAAAo"]
[Thu Apr 16 22:37:56.810158 2026] [:error] [pid 49094:tid 49100] [client 4.225.164.196:64002] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeD0RDbDwvcXorHR_MwLHQAAAUQ"]
[Thu Apr 16 22:37:57.441499 2026] [:error] [pid 7880:tid 7902] [client 4.225.164.196:64669] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Thu Apr 16 22:37:57.732620 2026] [:error] [pid 7880:tid 7887] [client 4.225.164.196:64669] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Thu Apr 16 22:37:58.617094 2026] [:error] [pid 7880:tid 7904] [client 4.225.164.196:64669] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Thu Apr 16 22:38:00.175449 2026] [:error] [pid 7880:tid 7889] [client 4.225.164.196:64669] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Thu Apr 16 22:38:00.466185 2026] [:error] [pid 7880:tid 7888] [client 4.225.164.196:64669] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Apr 16 22:38:00.755329 2026] [:error] [pid 7880:tid 7909] [client 4.225.164.196:64669] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Thu Apr 16 22:38:01.041656 2026] [:error] [pid 7880:tid 7905] [client 4.225.164.196:64669] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeD0Saaezm4fSGc0yULGBwAAAZQ"]
[Thu Apr 16 22:38:01.617701 2026] [:error] [pid 7880:tid 7904] [client 4.225.164.196:64270] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeD0Saaezm4fSGc0yULGDAAAAZM"]
[Thu Apr 16 22:38:02.143736 2026] [:error] [pid 57538:tid 57607] [client 4.225.164.196:65114] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeD0SsuMaiEF5SVR2Bf1ogAAAIU"]
[Thu Apr 16 22:38:02.701481 2026] [:error] [pid 57536:tid 57557] [client 4.225.164.196:65134] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeD0SiQU4faGja6jpDuhVgAAAAk"]
[Thu Apr 16 22:38:03.328634 2026] [:error] [pid 49094:tid 49101] [client 4.225.164.196:65155] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aeD0SzbDwvcXorHR_MwLSgAAAUU"]
[Thu Apr 16 22:38:03.971144 2026] [:error] [pid 7880:tid 7892] [client 4.225.164.196:64590] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aeD0S6aezm4fSGc0yULGEAAAAYc"]
[Thu Apr 16 22:38:04.554693 2026] [:error] [pid 57536:tid 57554] [client 4.225.164.196:64634] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aeD0TCQU4faGja6jpDuhYwAAAAY"]
[Thu Apr 16 22:38:05.179685 2026] [:error] [pid 57536:tid 57562] [client 4.225.164.196:65170] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aeD0TSQU4faGja6jpDuhZQAAAA4"]
[Thu Apr 16 22:38:05.783339 2026] [:error] [pid 7880:tid 7904] [client 4.225.164.196:65133] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeD0Taaezm4fSGc0yULGEwAAAZM"]
[Thu Apr 16 22:38:06.348531 2026] [:error] [pid 57537:tid 57585] [client 4.225.164.196:65118] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeD0TlVQRS8nm73ENAnGtwAAAEo"]
[Thu Apr 16 22:38:06.887499 2026] [:error] [pid 57536:tid 57571] [client 4.225.164.196:64640] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeD0TiQU4faGja6jpDuhbgAAABc"]
[Thu Apr 16 22:38:07.546623 2026] [:error] [pid 57536:tid 57569] [client 4.225.164.196:64307] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeD0TyQU4faGja6jpDuhcwAAABU"]
[Thu Apr 16 22:38:08.142553 2026] [:error] [pid 57639:tid 57660] [client 4.225.164.196:64702] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeD0UKMCQoTw7TsxWunonQAAAM4"]
[Thu Apr 16 22:38:08.797781 2026] [:error] [pid 57639:tid 57669] [client 4.225.164.196:64600] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeD0UKMCQoTw7TsxWunooQAAANc"]
[Thu Apr 16 22:38:09.544046 2026] [:error] [pid 57639:tid 57654] [client 4.225.164.196:64697] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeD0UaMCQoTw7TsxWunopwAAAMg"]
[Thu Apr 16 22:38:10.231457 2026] [:error] [pid 7880:tid 7903] [client 4.225.164.196:64586] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeD0Uqaezm4fSGc0yULGFgAAAZI"]
[Thu Apr 16 22:38:10.778030 2026] [:error] [pid 29603:tid 29614] [client 4.225.164.196:65090] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeD0UlfGOR6fpTWUAzqtwQAAAQk"]
[Thu Apr 16 22:38:11.390434 2026] [:error] [pid 57639:tid 57651] [client 4.225.164.196:64678] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeD0U6MCQoTw7TsxWunorgAAAMU"]
[Thu Apr 16 22:38:12.097418 2026] [:error] [pid 29603:tid 29623] [client 4.225.164.196:64294] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeD0VFfGOR6fpTWUAzqtxwAAARI"]
[Thu Apr 16 22:38:12.738001 2026] [:error] [pid 57536:tid 57558] [client 4.225.164.196:65097] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeD0VCQU4faGja6jpDuhjwAAAAo"]
[Thu Apr 16 22:38:13.286546 2026] [:error] [pid 29603:tid 29617] [client 4.225.164.196:65174] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeD0VVfGOR6fpTWUAzqtyAAAAQw"]
[Thu Apr 16 22:38:14.108771 2026] [:error] [pid 57537:tid 57596] [client 4.225.164.196:64677] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeD0VlVQRS8nm73ENAnGwAAAAFU"]
[Thu Apr 16 22:38:14.664480 2026] [:error] [pid 7880:tid 7895] [client 4.225.164.196:65214] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeD0Vqaezm4fSGc0yULGIAAAAYo"]
[Thu Apr 16 22:38:15.249344 2026] [:error] [pid 57639:tid 57653] [client 4.225.164.196:65139] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeD0V6MCQoTw7TsxWunouQAAAMc"]
[Thu Apr 16 22:38:15.890170 2026] [:error] [pid 57537:tid 57592] [client 4.225.164.196:64700] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeD0V1VQRS8nm73ENAnGxwAAAFE"]
[Thu Apr 16 22:38:16.473297 2026] [:error] [pid 57639:tid 57647] [client 4.225.164.196:64593] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeD0WKMCQoTw7TsxWunovgAAAME"]
[Thu Apr 16 22:38:17.002903 2026] [:error] [pid 57639:tid 57651] [client 4.225.164.196:64269] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeD0WaMCQoTw7TsxWunowgAAAMU"]
[Thu Apr 16 22:38:17.582508 2026] [:error] [pid 57537:tid 57598] [client 4.225.164.196:65203] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeD0WVVQRS8nm73ENAnGyQAAAFc"]
[Thu Apr 16 22:38:18.119842 2026] [:error] [pid 57639:tid 57663] [client 4.225.164.196:64698] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeD0WqMCQoTw7TsxWunoygAAANE"]
[Thu Apr 16 22:38:18.744372 2026] [:error] [pid 29603:tid 29616] [client 4.225.164.196:64203] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeD0WlfGOR6fpTWUAzqt1gAAAQs"]
[Thu Apr 16 22:38:19.322104 2026] [:error] [pid 57536:tid 57561] [client 4.225.164.196:64687] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeD0WyQU4faGja6jpDuhmQAAAA0"]
[Thu Apr 16 22:38:19.929280 2026] [:error] [pid 49094:tid 49114] [client 4.225.164.196:65111] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeD0WzbDwvcXorHR_MwLjgAAAVI"]
[Thu Apr 16 22:38:20.548901 2026] [:error] [pid 49094:tid 49113] [client 4.225.164.196:64317] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeD0XDbDwvcXorHR_MwLlAAAAVE"]
[Thu Apr 16 22:38:21.095197 2026] [:error] [pid 7880:tid 7908] [client 4.225.164.196:64624] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeD0Xaaezm4fSGc0yULGKAAAAZc"]
[Thu Apr 16 22:38:21.653466 2026] [:error] [pid 7880:tid 7907] [client 4.225.164.196:64615] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeD0Xaaezm4fSGc0yULGKwAAAZY"]
[Thu Apr 16 22:38:22.213039 2026] [:error] [pid 7880:tid 7893] [client 4.225.164.196:65100] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeD0Xqaezm4fSGc0yULGMQAAAYg"]
[Thu Apr 16 22:38:22.782657 2026] [:error] [pid 57639:tid 57651] [client 4.225.164.196:65151] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeD0XqMCQoTw7TsxWuno1wAAAMU"]
[Thu Apr 16 22:38:23.339651 2026] [:error] [pid 57537:tid 57593] [client 4.225.164.196:64649] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeD0X1VQRS8nm73ENAnGzgAAAFI"]
[Thu Apr 16 22:38:23.864502 2026] [:error] [pid 7880:tid 7906] [client 4.225.164.196:65144] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeD0X6aezm4fSGc0yULGPgAAAZU"]
[Thu Apr 16 22:38:24.458956 2026] [:error] [pid 7880:tid 7908] [client 4.225.164.196:64260] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeD0YKaezm4fSGc0yULGPwAAAZc"]
[Thu Apr 16 22:38:25.003289 2026] [:error] [pid 57639:tid 57650] [client 4.225.164.196:65148] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeD0YaMCQoTw7TsxWuno2QAAAMQ"]
[Thu Apr 16 22:38:25.586454 2026] [:error] [pid 57639:tid 57663] [client 4.225.164.196:64662] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeD0YaMCQoTw7TsxWuno3AAAANE"]
[Thu Apr 16 22:38:26.196370 2026] [:error] [pid 57536:tid 57551] [client 4.225.164.196:64219] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeD0YiQU4faGja6jpDuhoQAAAAM"]
[Thu Apr 16 22:38:26.777106 2026] [:error] [pid 57536:tid 57565] [client 4.225.164.196:64596] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeD0YiQU4faGja6jpDuhowAAABE"]
[Thu Apr 16 22:38:27.312413 2026] [:error] [pid 49094:tid 49109] [client 4.225.164.196:64035] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeD0YzbDwvcXorHR_MwLoAAAAU0"]
[Thu Apr 16 22:38:27.921674 2026] [:error] [pid 57538:tid 57615] [client 4.225.164.196:64592] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeD0Y8uMaiEF5SVR2Bf1zAAAAI0"]
[Thu Apr 16 22:38:28.531194 2026] [:error] [pid 49094:tid 49117] [client 4.225.164.196:64210] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeD0ZDbDwvcXorHR_MwLpAAAAVU"]
[Thu Apr 16 22:38:29.067329 2026] [:error] [pid 57639:tid 57670] [client 4.225.164.196:65190] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeD0ZaMCQoTw7TsxWuno7gAAANg"]
[Thu Apr 16 22:38:29.665462 2026] [:error] [pid 57537:tid 57586] [client 4.225.164.196:65188] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeD0ZVVQRS8nm73ENAnG2QAAAEs"]
[Thu Apr 16 22:38:30.216083 2026] [:error] [pid 49094:tid 49105] [client 4.225.164.196:65176] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeD0ZjbDwvcXorHR_MwLpwAAAUk"]
[Thu Apr 16 22:38:30.739844 2026] [:error] [pid 57639:tid 57651] [client 4.225.164.196:64666] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeD0ZqMCQoTw7TsxWuno_QAAAMU"]
[Thu Apr 16 22:38:31.279252 2026] [:error] [pid 49094:tid 49096] [client 4.225.164.196:64630] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeD0ZzbDwvcXorHR_MwLqAAAAUA"]
[Thu Apr 16 22:38:31.824526 2026] [:error] [pid 57537:tid 57581] [client 4.225.164.196:64695] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeD0Z1VQRS8nm73ENAnG3AAAAEY"]
[Thu Apr 16 22:38:32.391594 2026] [:error] [pid 7880:tid 7908] [client 4.225.164.196:65163] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeD0aKaezm4fSGc0yULGSwAAAZc"]
[Thu Apr 16 22:38:32.974531 2026] [:error] [pid 57536:tid 57555] [client 4.225.164.196:64653] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeD0aCQU4faGja6jpDuhrwAAAAc"]
[Thu Apr 16 22:38:33.631913 2026] [:error] [pid 57536:tid 57552] [client 4.225.164.196:64625] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeD0aSQU4faGja6jpDuhsgAAAAQ"]
[Thu Apr 16 22:38:34.213889 2026] [:error] [pid 57639:tid 57657] [client 4.225.164.196:65180] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeD0aqMCQoTw7TsxWunpGwAAAMs"]
[Thu Apr 16 22:38:34.774861 2026] [:error] [pid 29603:tid 29628] [client 4.225.164.196:65108] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeD0alfGOR6fpTWUAzqt8gAAARc"]
[Thu Apr 16 22:38:35.343276 2026] [:error] [pid 29603:tid 29609] [client 4.225.164.196:64597] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeD0a1fGOR6fpTWUAzqt9AAAAQQ"]
[Thu Apr 16 22:38:35.916619 2026] [:error] [pid 57639:tid 57662] [client 4.225.164.196:65135] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeD0a6MCQoTw7TsxWunpJwAAANA"]
[Thu Apr 16 22:38:36.515693 2026] [:error] [pid 57639:tid 57657] [client 4.225.164.196:64644] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeD0bKMCQoTw7TsxWunpKgAAAMs"]
[Thu Apr 16 22:38:37.100990 2026] [:error] [pid 57537:tid 57592] [client 4.225.164.196:64305] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeD0bVVQRS8nm73ENAnG5gAAAFE"]
[Thu Apr 16 22:38:37.689140 2026] [:error] [pid 49094:tid 49107] [client 4.225.164.196:64606] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeD0bTbDwvcXorHR_MwLqwAAAUs"]
[Thu Apr 16 22:38:38.313545 2026] [:error] [pid 57639:tid 57669] [client 4.225.164.196:64686] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeD0bqMCQoTw7TsxWunpMQAAANc"]
[Thu Apr 16 22:38:38.890908 2026] [:error] [pid 57639:tid 57670] [client 4.225.164.196:64651] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeD0bqMCQoTw7TsxWunpNwAAANg"]
[Thu Apr 16 22:38:39.421249 2026] [:error] [pid 57639:tid 57649] [client 4.225.164.196:64658] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeD0b6MCQoTw7TsxWunpOgAAAMM"]
[Thu Apr 16 22:38:40.008635 2026] [:error] [pid 57536:tid 57548] [client 4.225.164.196:65186] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeD0cCQU4faGja6jpDuhvgAAAAA"]
[Thu Apr 16 22:38:40.559555 2026] [:error] [pid 57639:tid 57660] [client 4.225.164.196:64628] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeD0cKMCQoTw7TsxWunpQwAAAM4"]
[Thu Apr 16 22:38:41.131899 2026] [:error] [pid 29603:tid 29612] [client 4.225.164.196:65117] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeD0cVfGOR6fpTWUAzqt-gAAAQc"]
[Thu Apr 16 22:38:41.768017 2026] [:error] [pid 57639:tid 57653] [client 4.225.164.196:64288] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeD0caMCQoTw7TsxWunpTgAAAMc"]
[Thu Apr 16 22:38:42.315199 2026] [:error] [pid 57537:tid 57590] [client 4.225.164.196:65175] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeD0clVQRS8nm73ENAnG6wAAAE8"]
[Thu Apr 16 22:38:42.853133 2026] [:error] [pid 57639:tid 57648] [client 4.225.164.196:64014] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeD0cqMCQoTw7TsxWunpWgAAAMI"]
[Thu Apr 16 22:38:43.438432 2026] [:error] [pid 7880:tid 7894] [client 4.225.164.196:64310] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeD0c6aezm4fSGc0yULGVAAAAYk"]
[Thu Apr 16 22:38:43.963288 2026] [:error] [pid 57639:tid 57667] [client 4.225.164.196:64582] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeD0c6MCQoTw7TsxWunpXwAAANU"]
[Thu Apr 16 22:38:44.540251 2026] [:error] [pid 57536:tid 57567] [client 4.225.164.196:64286] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeD0dCQU4faGja6jpDuhywAAABM"]
[Thu Apr 16 22:38:45.122921 2026] [:error] [pid 49094:tid 49105] [client 4.225.164.196:64251] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeD0dTbDwvcXorHR_MwLygAAAUk"]
[Thu Apr 16 22:38:45.664752 2026] [:error] [pid 49094:tid 49112] [client 4.225.164.196:64661] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeD0dTbDwvcXorHR_MwLzwAAAVA"]
[Thu Apr 16 22:38:46.223931 2026] [:error] [pid 57537:tid 57577] [client 4.225.164.196:64314] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeD0dlVQRS8nm73ENAnG7QAAAEI"]
[Thu Apr 16 22:38:46.758733 2026] [:error] [pid 29603:tid 29624] [client 4.225.164.196:64304] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeD0dlfGOR6fpTWUAzquAgAAARM"]
[Thu Apr 16 22:38:47.289026 2026] [:error] [pid 49094:tid 49109] [client 4.225.164.196:65194] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeD0dzbDwvcXorHR_MwL2QAAAU0"]
[Thu Apr 16 22:38:47.815036 2026] [:error] [pid 57536:tid 57558] [client 4.225.164.196:64313] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeD0dyQU4faGja6jpDuh0gAAAAo"]
[Thu Apr 16 22:38:48.377907 2026] [:error] [pid 29603:tid 29626] [client 4.225.164.196:64249] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeD0eFfGOR6fpTWUAzquBwAAARU"]
[Thu Apr 16 22:38:48.952836 2026] [:error] [pid 7880:tid 7907] [client 4.225.164.196:64264] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeD0eKaezm4fSGc0yULGbQAAAZY"]
[Thu Apr 16 22:38:49.537444 2026] [:error] [pid 7880:tid 7905] [client 4.225.164.196:64633] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeD0eaaezm4fSGc0yULGbwAAAZQ"]
[Thu Apr 16 22:38:50.064749 2026] [:error] [pid 49094:tid 49120] [client 4.225.164.196:64003] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeD0ejbDwvcXorHR_MwL3QAAAVg"]
[Thu Apr 16 22:38:50.591967 2026] [:error] [pid 57537:tid 57590] [client 4.225.164.196:63942] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeD0elVQRS8nm73ENAnG-gAAAE8"]
[Thu Apr 16 22:38:51.170453 2026] [:error] [pid 57639:tid 57666] [client 4.225.164.196:65182] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeD0e6MCQoTw7TsxWunpbgAAANQ"]
[Thu Apr 16 22:38:51.701856 2026] [:error] [pid 57639:tid 57658] [client 4.225.164.196:64024] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeD0e6MCQoTw7TsxWunpcgAAAMw"]
[Thu Apr 16 22:38:52.276255 2026] [:error] [pid 29603:tid 29605] [client 4.225.164.196:64233] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeD0fFfGOR6fpTWUAzquFQAAAQA"]
[Thu Apr 16 22:38:52.934108 2026] [:error] [pid 57639:tid 57646] [client 4.225.164.196:64636] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeD0fKMCQoTw7TsxWunpeQAAAMA"]
[Thu Apr 16 22:38:53.480713 2026] [:error] [pid 57639:tid 57662] [client 4.225.164.196:64308] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeD0faMCQoTw7TsxWunpewAAANA"]
[Thu Apr 16 22:38:54.014852 2026] [:error] [pid 49094:tid 49115] [client 4.225.164.196:65109] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeD0fjbDwvcXorHR_MwL3gAAAVM"]
[Thu Apr 16 22:38:54.627971 2026] [:error] [pid 49094:tid 49111] [client 4.225.164.196:64595] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeD0fjbDwvcXorHR_MwL3wAAAU8"]
[Thu Apr 16 22:38:55.231688 2026] [:error] [pid 49094:tid 49108] [client 4.225.164.196:64577] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeD0fzbDwvcXorHR_MwL4AAAAUw"]
[Thu Apr 16 22:38:55.818585 2026] [:error] [pid 49094:tid 49105] [client 4.225.164.196:63958] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeD0fzbDwvcXorHR_MwL4wAAAUk"]
[Thu Apr 16 22:38:56.442066 2026] [:error] [pid 7880:tid 7895] [client 4.225.164.196:65091] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeD0gKaezm4fSGc0yULGfAAAAYo"]
[Thu Apr 16 22:38:57.017989 2026] [:error] [pid 57537:tid 57586] [client 4.225.164.196:64280] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeD0gVVQRS8nm73ENAnHDQAAAEs"]
[Thu Apr 16 22:38:57.550907 2026] [:error] [pid 49094:tid 49104] [client 4.225.164.196:64275] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeD0gTbDwvcXorHR_MwL5gAAAUg"]
[Thu Apr 16 22:38:58.123180 2026] [:error] [pid 49094:tid 49110] [client 4.225.164.196:64629] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeD0gjbDwvcXorHR_MwL5wAAAU4"]
[Thu Apr 16 22:38:58.723944 2026] [:error] [pid 49094:tid 49103] [client 4.225.164.196:64276] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeD0gjbDwvcXorHR_MwL6AAAAUc"]
[Thu Apr 16 22:38:59.527107 2026] [:error] [pid 29603:tid 29627] [client 4.225.164.196:64039] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeD0g1fGOR6fpTWUAzquMAAAARY"]
[Thu Apr 16 22:39:00.086231 2026] [:error] [pid 57536:tid 57571] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Apr 16 22:39:00.352456 2026] [:error] [pid 57536:tid 57563] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Thu Apr 16 22:39:00.619365 2026] [:error] [pid 57536:tid 57568] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Thu Apr 16 22:39:00.897908 2026] [:error] [pid 57536:tid 57572] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Thu Apr 16 22:39:02.567944 2026] [:error] [pid 57536:tid 57572] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Thu Apr 16 22:39:02.834338 2026] [:error] [pid 57536:tid 57549] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Thu Apr 16 22:39:03.151148 2026] [:error] [pid 57536:tid 57566] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Thu Apr 16 22:39:03.416122 2026] [:error] [pid 57536:tid 57559] [client 4.225.164.196:64268] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Thu Apr 16 22:39:03.678124 2026] [:error] [pid 57536:tid 57557] [client 4.225.164.196:64268] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "aeD0hyQU4faGja6jpDuiBwAAAAk"]
[Thu Apr 16 22:39:04.257310 2026] [:error] [pid 57536:tid 57554] [client 4.225.164.196:64701] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "aeD0iCQU4faGja6jpDuiDwAAAAY"]
[Thu Apr 16 22:39:04.792186 2026] [:error] [pid 57536:tid 57548] [client 4.225.164.196:65200] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "aeD0iCQU4faGja6jpDuiFAAAAAA"]
[Thu Apr 16 22:39:05.323697 2026] [:error] [pid 7880:tid 7898] [client 4.225.164.196:64041] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/set.php"] [unique_id "aeD0iaaezm4fSGc0yULGxQAAAY0"]
[Thu Apr 16 22:39:05.861442 2026] [:error] [pid 49094:tid 49106] [client 4.225.164.196:64297] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hroxw.php"] [unique_id "aeD0iTbDwvcXorHR_MwMDgAAAUo"]
[Thu Apr 16 22:39:06.449096 2026] [:error] [pid 49094:tid 49119] [client 4.225.164.196:64273] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hroxw.php"] [unique_id "aeD0ijbDwvcXorHR_MwMGAAAAVc"]
[Thu Apr 16 22:39:07.027960 2026] [:error] [pid 49094:tid 49113] [client 4.225.164.196:64690] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hroxw.php"] [unique_id "aeD0izbDwvcXorHR_MwMIwAAAVE"]
[Thu Apr 16 22:39:07.613774 2026] [:error] [pid 49094:tid 49102] [client 4.225.164.196:64229] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hroxw.php"] [unique_id "aeD0izbDwvcXorHR_MwMKQAAAUY"]
[Thu Apr 16 22:39:08.187087 2026] [:error] [pid 7880:tid 7902] [client 4.225.164.196:64667] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aeD0jKaezm4fSGc0yULGzAAAAZE"]
[Thu Apr 16 22:39:08.766472 2026] [:error] [pid 57538:tid 57609] [client 4.225.164.196:65193] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aeD0jMuMaiEF5SVR2Bf2CAAAAIc"]
[Thu Apr 16 22:39:09.296289 2026] [:error] [pid 57538:tid 57619] [client 4.225.164.196:65187] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aeD0jcuMaiEF5SVR2Bf2DQAAAJE"]
[Thu Apr 16 22:39:09.950655 2026] [:error] [pid 29603:tid 29617] [client 4.225.164.196:65212] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aeD0jVfGOR6fpTWUAzquNwAAAQw"]
[Thu Apr 16 22:39:10.487080 2026] [:error] [pid 49094:tid 49109] [client 4.225.164.196:64632] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeD0jjbDwvcXorHR_MwMMAAAAU0"]
[Thu Apr 16 22:39:11.077902 2026] [:error] [pid 57639:tid 57654] [client 4.225.164.196:64316] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeD0j6MCQoTw7TsxWunptwAAAMg"]
[Thu Apr 16 22:39:11.681276 2026] [:error] [pid 57538:tid 57622] [client 4.225.164.196:64620] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeD0j8uMaiEF5SVR2Bf2FwAAAJQ"]
[Thu Apr 16 22:39:12.238916 2026] [:error] [pid 49094:tid 49108] [client 4.225.164.196:64016] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeD0kDbDwvcXorHR_MwMMgAAAUw"]
[Thu Apr 16 22:39:12.813286 2026] [:error] [pid 7880:tid 7896] [client 4.225.164.196:64017] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aeD0kKaezm4fSGc0yULG2gAAAYs"]
[Thu Apr 16 22:39:13.371464 2026] [:error] [pid 57639:tid 57666] [client 4.225.164.196:64618] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aeD0kaMCQoTw7TsxWunpwAAAANQ"]
[Thu Apr 16 22:39:14.005675 2026] [:error] [pid 57639:tid 57658] [client 4.225.164.196:64234] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aeD0kqMCQoTw7TsxWunpzQAAAMw"]
[Thu Apr 16 22:39:14.549980 2026] [:error] [pid 57537:tid 57594] [client 4.225.164.196:65126] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gaza.php"] [unique_id "aeD0klVQRS8nm73ENAnHVAAAAFM"]
[Thu Apr 16 22:39:15.131187 2026] [:error] [pid 57537:tid 57581] [client 4.225.164.196:63941] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeD0k1VQRS8nm73ENAnHVQAAAEY"]
[Thu Apr 16 22:39:15.727525 2026] [:error] [pid 7880:tid 7892] [client 4.225.164.196:65128] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeD0k6aezm4fSGc0yULG3gAAAYc"]
[Thu Apr 16 22:39:16.274796 2026] [:error] [pid 29603:tid 29609] [client 4.225.164.196:64008] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeD0lFfGOR6fpTWUAzquPgAAAQQ"]
[Thu Apr 16 22:39:16.804165 2026] [:error] [pid 49094:tid 49097] [client 4.225.164.196:65103] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeD0lDbDwvcXorHR_MwMSwAAAUE"]
[Thu Apr 16 22:39:17.349312 2026] [:error] [pid 57639:tid 57669] [client 4.225.164.196:63497] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeD0laMCQoTw7TsxWunp3wAAANc"]
[Thu Apr 16 22:39:17.886591 2026] [:error] [pid 49094:tid 49105] [client 4.225.164.196:65137] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeD0lTbDwvcXorHR_MwMUgAAAUk"]
[Thu Apr 16 22:39:18.481019 2026] [:error] [pid 57639:tid 57661] [client 4.225.164.196:64261] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeD0lqMCQoTw7TsxWunp5AAAAM8"]
[Thu Apr 16 22:39:19.068120 2026] [:error] [pid 57639:tid 57658] [client 4.225.164.196:64298] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeD0l6MCQoTw7TsxWunp5QAAAMw"]
[Thu Apr 16 22:39:19.653822 2026] [:error] [pid 49094:tid 49113] [client 4.225.164.196:65181] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeD0lzbDwvcXorHR_MwMXgAAAVE"]
[Thu Apr 16 22:39:20.244750 2026] [:error] [pid 49094:tid 49101] [client 4.225.164.196:65123] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeD0mDbDwvcXorHR_MwMYQAAAUU"]
[Thu Apr 16 22:39:20.780990 2026] [:error] [pid 7880:tid 7904] [client 4.225.164.196:64601] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeD0mKaezm4fSGc0yULG7AAAAZM"]
[Thu Apr 16 22:39:21.356627 2026] [:error] [pid 57538:tid 57613] [client 4.225.164.196:64309] [client 4.225.164.196] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeD0mcuMaiEF5SVR2Bf2KAAAAIs"]
[Thu Apr 16 22:39:21.879924 2026] [:error] [pid 57639:tid 57668] [client 4.225.164.196:65198] [client 4.225.164.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aeD0maMCQoTw7TsxWunp9QAAANY"]
[Thu Apr 16 22:54:26.859504 2026] [:error] [pid 57538:tid 57616] [client 43.165.65.180:44688] [client 43.165.65.180] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeD4IsuMaiEF5SVR2Bf6_QAAAI4"]
[Fri Apr 17 02:16:44.006983 2026] [:error] [pid 43385:tid 43411] [client 20.220.15.7:5117] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Apr 17 02:16:44.348777 2026] [:error] [pid 43385:tid 43389] [client 20.220.15.7:5117] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri Apr 17 02:16:44.563119 2026] [:error] [pid 43385:tid 43393] [client 20.220.15.7:5117] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Fri Apr 17 02:16:44.845907 2026] [:error] [pid 43385:tid 43401] [client 20.220.15.7:5117] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aeEnjMnIxkJaUI8KNs4u3AAAAAw"]
[Fri Apr 17 02:16:46.189461 2026] [:error] [pid 11854:tid 11876] [client 20.220.15.7:5097] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aeEnjtxJCSIaqP1XSdahpAAAAlM"]
[Fri Apr 17 02:16:47.338676 2026] [:error] [pid 43386:tid 43429] [client 20.220.15.7:5112] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aeEnj-91GAVgUfhPVDHebQAAAEk"]
[Fri Apr 17 02:16:48.633282 2026] [:error] [pid 3245:tid 3281] [client 20.220.15.7:4998] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-load.php"] [unique_id "aeEnkKESOMTHVLs-uFDbpQAAARM"]
[Fri Apr 17 02:16:49.774468 2026] [:error] [pid 43482:tid 43508] [client 20.220.15.7:5115] [client 20.220.15.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/wp-config.php"] [unique_id "aeEnkT9SZnuKxlHrct2zUQAAANg"]
[Fri Apr 17 02:16:51.313884 2026] [:error] [pid 11854:tid 11861] [client 20.220.15.7:5106] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aeEnk9xJCSIaqP1XSdahqAAAAkQ"]
[Fri Apr 17 02:16:52.735330 2026] [:error] [pid 11854:tid 11880] [client 20.220.15.7:5084] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aeEnlNxJCSIaqP1XSdahsgAAAlc"]
[Fri Apr 17 02:16:54.406910 2026] [:error] [pid 26102:tid 26117] [client 20.220.15.7:5078] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aeEnlv127aFqw6ALdngenwAAAYw"]
[Fri Apr 17 02:16:56.485770 2026] [:error] [pid 26480:tid 26492] [client 20.220.15.7:5056] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-settings.php"] [unique_id "aeEnmAwLDJKTQNfarA2KLwAAAco"]
[Fri Apr 17 02:16:58.919819 2026] [:error] [pid 26480:tid 26485] [client 20.220.15.7:4935] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeEnmgwLDJKTQNfarA2KOwAAAcM"]
[Fri Apr 17 02:17:00.329562 2026] [:error] [pid 26102:tid 26106] [client 20.220.15.7:5060] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeEnnP127aFqw6ALdngepwAAAYE"]
[Fri Apr 17 02:17:02.724410 2026] [:error] [pid 26102:tid 26119] [client 20.220.15.7:5091] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeEnnv127aFqw6ALdngesQAAAY4"]
[Fri Apr 17 02:17:05.839332 2026] [:error] [pid 43482:tid 43489] [client 20.220.15.7:5005] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeEnoT9SZnuKxlHrct2zYgAAAMU"]
[Fri Apr 17 02:17:09.780912 2026] [:error] [pid 11854:tid 11861] [client 20.220.15.7:5007] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeEnpdxJCSIaqP1XSdahzwAAAkQ"]
[Fri Apr 17 02:17:11.752129 2026] [:error] [pid 26102:tid 26111] [client 20.220.15.7:5107] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeEnp_127aFqw6ALdngewAAAAYY"]
[Fri Apr 17 02:17:14.325908 2026] [:error] [pid 43387:tid 43461] [client 20.220.15.7:5093] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeEnqiBNsONqHxWTakVJsgAAAIo"]
[Fri Apr 17 02:17:19.375064 2026] [:error] [pid 26102:tid 26122] [client 20.220.15.7:5062] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "aeEnr_127aFqw6ALdnge1QAAAZE"]
[Fri Apr 17 02:17:26.891213 2026] [:error] [pid 26480:tid 26502] [client 20.220.15.7:5030] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/function.php"] [unique_id "aeEntgwLDJKTQNfarA2KVAAAAdQ"]
[Fri Apr 17 02:17:29.334357 2026] [:error] [pid 43386:tid 43425] [client 20.220.15.7:5103] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/function.php"] [unique_id "aeEnue91GAVgUfhPVDHetwAAAEU"]
[Fri Apr 17 02:17:31.267323 2026] [:error] [pid 43386:tid 43424] [client 20.220.15.7:5011] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/function.php"] [unique_id "aeEnu-91GAVgUfhPVDHeyQAAAEQ"]
[Fri Apr 17 02:17:34.030256 2026] [:error] [pid 43386:tid 43425] [client 20.220.15.7:5009] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/function.php"] [unique_id "aeEnvu91GAVgUfhPVDHe3wAAAEU"]
[Fri Apr 17 02:17:38.278334 2026] [:error] [pid 4086:tid 4091] [client 20.220.15.7:5101] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aeEnwllz7gxl_exM0FpOUAAAAUM"]
[Fri Apr 17 02:17:41.085298 2026] [:error] [pid 4086:tid 4105] [client 20.220.15.7:5000] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aeEnxVlz7gxl_exM0FpOUgAAAVE"]
[Fri Apr 17 02:17:43.241325 2026] [:error] [pid 3245:tid 3272] [client 20.220.15.7:4999] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/alfa.php"] [unique_id "aeEnx6ESOMTHVLs-uFDbxgAAAQo"]
[Fri Apr 17 02:17:44.825540 2026] [:error] [pid 43386:tid 43437] [client 20.220.15.7:5022] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Apr 17 02:17:45.165759 2026] [:error] [pid 43386:tid 43424] [client 20.220.15.7:5022] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 17 02:17:45.778683 2026] [:error] [pid 43386:tid 43441] [client 20.220.15.7:5022] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 17 02:17:45.995130 2026] [:error] [pid 43386:tid 43427] [client 20.220.15.7:5022] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri Apr 17 02:17:46.205923 2026] [:error] [pid 43386:tid 43433] [client 20.220.15.7:5022] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Apr 17 02:17:46.451014 2026] [:error] [pid 43386:tid 43426] [client 20.220.15.7:5022] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri Apr 17 02:17:46.661166 2026] [:error] [pid 43386:tid 43428] [client 20.220.15.7:5022] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Fri Apr 17 02:17:48.568087 2026] [:error] [pid 43386:tid 43422] [client 20.220.15.7:5022] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "aeEnzO91GAVgUfhPVDHe_AAAAEI"]
[Fri Apr 17 02:17:50.240005 2026] [:error] [pid 26480:tid 26488] [client 20.220.15.7:4997] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "aeEnzgwLDJKTQNfarA2KbgAAAcY"]
[Fri Apr 17 02:17:52.178147 2026] [:error] [pid 43387:tid 43473] [client 20.220.15.7:5104] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "aeEn0CBNsONqHxWTakVJywAAAJQ"]
[Fri Apr 17 02:17:53.190226 2026] [:error] [pid 3245:tid 3264] [client 20.220.15.7:5057] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "aeEn0aESOMTHVLs-uFDb1AAAAQI"]
[Fri Apr 17 02:17:55.126875 2026] [:error] [pid 26480:tid 26496] [client 20.220.15.7:5010] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "aeEn0wwLDJKTQNfarA2KdQAAAc4"]
[Fri Apr 17 02:17:56.806042 2026] [:error] [pid 43482:tid 43507] [client 20.220.15.7:4931] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "aeEn1D9SZnuKxlHrct2zvgAAANc"]
[Fri Apr 17 02:17:57.983473 2026] [:error] [pid 43386:tid 43421] [client 20.220.15.7:4942] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "aeEn1e91GAVgUfhPVDHfAQAAAEE"]
[Fri Apr 17 02:17:59.025589 2026] [:error] [pid 11692:tid 11712] [client 20.220.15.7:5069] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "aeEn181AYuhm4BZwKNojkgAAAg8"]
[Fri Apr 17 02:18:00.671903 2026] [:error] [pid 11692:tid 11700] [client 20.220.15.7:4955] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hh.php"] [unique_id "aeEn2M1AYuhm4BZwKNojlwAAAgM"]
[Fri Apr 17 02:18:02.774101 2026] [:error] [pid 11692:tid 11707] [client 20.220.15.7:5006] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hh.php"] [unique_id "aeEn2s1AYuhm4BZwKNojoQAAAgo"]
[Fri Apr 17 02:18:05.022491 2026] [:error] [pid 43482:tid 43508] [client 20.220.15.7:5024] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hh.php"] [unique_id "aeEn3T9SZnuKxlHrct2zyAAAANg"]
[Fri Apr 17 02:18:07.579467 2026] [:error] [pid 43387:tid 43457] [client 20.220.15.7:5082] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hh.php"] [unique_id "aeEn3yBNsONqHxWTakVJ3AAAAIY"]
[Fri Apr 17 02:18:08.208694 2026] [:error] [pid 43385:tid 43402] [client 20.220.15.7:5058] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rt.php"] [unique_id "aeEn4MnIxkJaUI8KNs4vNgAAAA0"]
[Fri Apr 17 02:18:10.454838 2026] [:error] [pid 26102:tid 26115] [client 20.220.15.7:5070] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rt.php"] [unique_id "aeEn4v127aFqw6ALdngfLQAAAYo"]
[Fri Apr 17 02:18:12.133742 2026] [:error] [pid 43482:tid 43490] [client 20.220.15.7:5098] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rt.php"] [unique_id "aeEn5D9SZnuKxlHrct2z1AAAAMY"]
[Fri Apr 17 02:18:13.602034 2026] [:error] [pid 43387:tid 43465] [client 20.220.15.7:5036] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rt.php"] [unique_id "aeEn5SBNsONqHxWTakVJ9gAAAIw"]
[Fri Apr 17 02:18:16.142295 2026] [:error] [pid 43482:tid 43496] [client 20.220.15.7:5105] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ex.php"] [unique_id "aeEn6D9SZnuKxlHrct2z2QAAAMw"]
[Fri Apr 17 02:18:18.344016 2026] [:error] [pid 4086:tid 4099] [client 20.220.15.7:5037] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ex.php"] [unique_id "aeEn6llz7gxl_exM0FpOZgAAAUs"]
[Fri Apr 17 02:18:20.628011 2026] [:error] [pid 26480:tid 26501] [client 20.220.15.7:5027] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ex.php"] [unique_id "aeEn7AwLDJKTQNfarA2KlAAAAdM"]
[Fri Apr 17 02:18:23.388061 2026] [:error] [pid 43482:tid 43503] [client 20.220.15.7:5119] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ex.php"] [unique_id "aeEn7z9SZnuKxlHrct2z3gAAANM"]
[Fri Apr 17 02:18:24.506573 2026] [:error] [pid 43386:tid 43444] [client 20.220.15.7:5072] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "aeEn8O91GAVgUfhPVDHfLgAAAFc"]
[Fri Apr 17 02:18:25.908155 2026] [:error] [pid 11854:tid 11858] [client 20.220.15.7:4992] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "aeEn8dxJCSIaqP1XSdaiAQAAAkE"]
[Fri Apr 17 02:18:27.633377 2026] [:error] [pid 43482:tid 43498] [client 20.220.15.7:4940] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "aeEn8z9SZnuKxlHrct2z7wAAAM4"]
[Fri Apr 17 02:18:29.021444 2026] [:error] [pid 26480:tid 26498] [client 20.220.15.7:4884] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/radio.php"] [unique_id "aeEn9QwLDJKTQNfarA2KowAAAdA"]
[Fri Apr 17 02:18:31.084357 2026] [:error] [pid 43482:tid 43505] [client 20.220.15.7:5035] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeEn9z9SZnuKxlHrct2z8wAAANU"]
[Fri Apr 17 02:18:33.798528 2026] [:error] [pid 26480:tid 26505] [client 20.220.15.7:5116] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeEn-QwLDJKTQNfarA2KqQAAAdc"]
[Fri Apr 17 02:18:35.799121 2026] [:error] [pid 26480:tid 26483] [client 20.220.15.7:5086] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeEn-wwLDJKTQNfarA2KsgAAAcE"]
[Fri Apr 17 02:18:37.869781 2026] [:error] [pid 43387:tid 43476] [client 20.220.15.7:5018] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeEn_SBNsONqHxWTakVKLQAAAJc"]
[Fri Apr 17 02:18:39.156752 2026] [:error] [pid 43386:tid 43434] [client 20.220.15.7:5080] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/about.php"] [unique_id "aeEn_-91GAVgUfhPVDHfPwAAAE4"]
[Fri Apr 17 02:18:47.534700 2026] [:error] [pid 43387:tid 43453] [client 20.220.15.7:5079] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 17 02:18:47.761273 2026] [:error] [pid 43387:tid 43469] [client 20.220.15.7:5079] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Fri Apr 17 02:18:47.972260 2026] [:error] [pid 43387:tid 43460] [client 20.220.15.7:5079] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Apr 17 02:18:48.183166 2026] [:error] [pid 43387:tid 43474] [client 20.220.15.7:5079] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Apr 17 02:18:48.401832 2026] [:error] [pid 43387:tid 43473] [client 20.220.15.7:5079] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Apr 17 02:18:48.844040 2026] [:error] [pid 43387:tid 43456] [client 20.220.15.7:5079] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 17 02:18:49.060953 2026] [:error] [pid 43387:tid 43459] [client 20.220.15.7:5079] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kk.php"] [unique_id "aeEoCSBNsONqHxWTakVKVgAAAIg"]
[Fri Apr 17 02:18:52.534500 2026] [:error] [pid 43386:tid 43425] [client 20.220.15.7:4994] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kk.php"] [unique_id "aeEoDO91GAVgUfhPVDHfeAAAAEU"]
[Fri Apr 17 02:18:58.343748 2026] [:error] [pid 43387:tid 43469] [client 20.220.15.7:5110] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kk.php"] [unique_id "aeEoEiBNsONqHxWTakVKXQAAAJA"]
[Fri Apr 17 02:18:59.860858 2026] [:error] [pid 43482:tid 43489] [client 20.220.15.7:5074] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kk.php"] [unique_id "aeEoEz9SZnuKxlHrct20IwAAAMU"]
[Fri Apr 17 02:19:00.756876 2026] [:error] [pid 4086:tid 4089] [client 20.220.15.7:5023] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aeEoFFlz7gxl_exM0FpOiQAAAUE"]
[Fri Apr 17 02:19:01.503122 2026] [:error] [pid 3245:tid 3286] [client 20.220.15.7:5021] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aeEoFaESOMTHVLs-uFDb7wAAARg"]
[Fri Apr 17 02:19:02.337944 2026] [:error] [pid 26480:tid 26489] [client 20.220.15.7:5076] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aeEoFgwLDJKTQNfarA2K6gAAAcc"]
[Fri Apr 17 02:19:03.120569 2026] [:error] [pid 43387:tid 43448] [client 20.220.15.7:5064] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "aeEoFyBNsONqHxWTakVKZAAAAIA"]
[Fri Apr 17 02:19:04.027114 2026] [:error] [pid 4086:tid 4096] [client 20.220.15.7:5073] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aeEoGFlz7gxl_exM0FpOjAAAAUg"]
[Fri Apr 17 02:19:04.645041 2026] [:error] [pid 3245:tid 3282] [client 20.220.15.7:5075] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aeEoGKESOMTHVLs-uFDb9QAAARQ"]
[Fri Apr 17 02:19:05.461766 2026] [:error] [pid 43386:tid 43443] [client 20.220.15.7:5042] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aeEoGe91GAVgUfhPVDHffgAAAFY"]
[Fri Apr 17 02:19:06.841288 2026] [:error] [pid 43386:tid 43423] [client 20.220.15.7:5100] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aeEoGu91GAVgUfhPVDHfgQAAAEM"]
[Fri Apr 17 02:19:09.545655 2026] [:error] [pid 43482:tid 43493] [client 20.220.15.7:5031] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/test1.php"] [unique_id "aeEoHT9SZnuKxlHrct20PQAAAMk"]
[Fri Apr 17 02:19:17.862136 2026] [:error] [pid 43386:tid 43428] [client 20.220.15.7:5102] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/test1.php"] [unique_id "aeEoJe91GAVgUfhPVDHfqgAAAEg"]
[Fri Apr 17 02:19:21.008390 2026] [:error] [pid 43386:tid 43421] [client 20.220.15.7:5085] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/test1.php"] [unique_id "aeEoKe91GAVgUfhPVDHfugAAAEE"]
[Fri Apr 17 02:19:25.594381 2026] [:error] [pid 43386:tid 43427] [client 20.220.15.7:5061] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeEoLe91GAVgUfhPVDHfzgAAAEc"]
[Fri Apr 17 02:19:29.003205 2026] [:error] [pid 43385:tid 43412] [client 20.220.15.7:5045] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeEoMcnIxkJaUI8KNs4veAAAABY"]
[Fri Apr 17 02:19:30.466400 2026] [:error] [pid 43482:tid 43493] [client 20.220.15.7:5029] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeEoMj9SZnuKxlHrct20XQAAAMk"]
[Fri Apr 17 02:19:32.674068 2026] [:error] [pid 43386:tid 43428] [client 20.220.15.7:5020] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeEoNO91GAVgUfhPVDHf1gAAAEg"]
[Fri Apr 17 02:19:37.215629 2026] [:error] [pid 11692:tid 11714] [client 20.220.15.7:5096] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aeEoOc1AYuhm4BZwKNokBwAAAhE"]
[Fri Apr 17 02:19:40.179671 2026] [:error] [pid 43387:tid 43454] [client 20.220.15.7:5054] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-signup.php"] [unique_id "aeEoPCBNsONqHxWTakVKiAAAAIQ"]
[Fri Apr 17 02:19:58.417553 2026] [:error] [pid 43386:tid 43437] [client 20.220.15.7:5017] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ty.php"] [unique_id "aeEoTu91GAVgUfhPVDHgEAAAAFE"]
[Fri Apr 17 02:20:03.245045 2026] [:error] [pid 43482:tid 43490] [client 20.220.15.7:5004] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ty.php"] [unique_id "aeEoUz9SZnuKxlHrct20gwAAAMY"]
[Fri Apr 17 02:20:06.554301 2026] [:error] [pid 11854:tid 11873] [client 20.220.15.7:5002] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ty.php"] [unique_id "aeEoVtxJCSIaqP1XSdaiMgAAAlA"]
[Fri Apr 17 02:20:12.226416 2026] [:error] [pid 43482:tid 43484] [client 20.220.15.7:4975] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/%E2%80%89goods.php"] [unique_id "aeEoXD9SZnuKxlHrct20kAAAAMA"]
[Fri Apr 17 02:20:28.349087 2026] [:error] [pid 43386:tid 43422] [client 20.220.15.7:5113] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/%E2%80%89goods.php"] [unique_id "aeEobO91GAVgUfhPVDHgVgAAAEI"]
[Fri Apr 17 02:21:06.862806 2026] [:error] [pid 3245:tid 3269] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Fri Apr 17 02:21:07.079311 2026] [:error] [pid 3245:tid 3268] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri Apr 17 02:21:07.287802 2026] [:error] [pid 3245:tid 3273] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Apr 17 02:21:07.744095 2026] [:error] [pid 3245:tid 3264] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Apr 17 02:21:08.219043 2026] [:error] [pid 3245:tid 3266] [client 20.220.15.7:5040] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeEolKESOMTHVLs-uFDcTgAAAQQ"]
[Fri Apr 17 02:21:14.926895 2026] [:error] [pid 43482:tid 43508] [client 20.220.15.7:5002] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeEomj9SZnuKxlHrct21AwAAANg"]
[Fri Apr 17 02:21:20.254194 2026] [:error] [pid 3245:tid 3284] [client 20.220.15.7:4882] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeEooKESOMTHVLs-uFDcUQAAARY"]
[Fri Apr 17 02:21:21.875931 2026] [:error] [pid 43386:tid 43432] [client 20.220.15.7:5084] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeEooe91GAVgUfhPVDHg6QAAAEw"]
[Fri Apr 17 02:21:23.601072 2026] [:error] [pid 26480:tid 26494] [client 20.220.15.7:5088] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/privacy.php"] [unique_id "aeEoowwLDJKTQNfarA2L1QAAAcw"]
[Fri Apr 17 02:21:24.714904 2026] [:error] [pid 43482:tid 43507] [client 20.220.15.7:5007] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/privacy.php"] [unique_id "aeEopD9SZnuKxlHrct21WwAAANc"]
[Fri Apr 17 02:21:25.811260 2026] [:error] [pid 43387:tid 43470] [client 20.220.15.7:5068] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/privacy.php"] [unique_id "aeEopSBNsONqHxWTakVK6AAAAJE"]
[Fri Apr 17 02:21:28.325839 2026] [:error] [pid 43482:tid 43489] [client 20.220.15.7:5001] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/privacy.php"] [unique_id "aeEoqD9SZnuKxlHrct21awAAAMU"]
[Fri Apr 17 02:21:31.084628 2026] [:error] [pid 43482:tid 43502] [client 20.220.15.7:4957] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-conffg.php"] [unique_id "aeEoqz9SZnuKxlHrct21cwAAANI"]
[Fri Apr 17 02:21:34.070220 2026] [:error] [pid 43482:tid 43486] [client 20.220.15.7:5016] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-conffg.php"] [unique_id "aeEorj9SZnuKxlHrct21ewAAAMI"]
[Fri Apr 17 02:21:39.716107 2026] [:error] [pid 43386:tid 43442] [client 20.220.15.7:5052] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-conffg.php"] [unique_id "aeEos-91GAVgUfhPVDHhcQAAAFU"]
[Fri Apr 17 02:21:41.644119 2026] [:error] [pid 43386:tid 43426] [client 20.220.15.7:5092] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-conffg.php"] [unique_id "aeEote91GAVgUfhPVDHhdQAAAEY"]
[Fri Apr 17 02:21:45.715027 2026] [:error] [pid 3245:tid 3263] [client 20.220.15.7:4937] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bb.php"] [unique_id "aeEouaESOMTHVLs-uFDcYAAAAQE"]
[Fri Apr 17 02:21:47.387510 2026] [:error] [pid 26102:tid 26128] [client 20.220.15.7:5099] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bb.php"] [unique_id "aeEou_127aFqw6ALdngfswAAAZc"]
[Fri Apr 17 02:21:48.976571 2026] [:error] [pid 43386:tid 43426] [client 20.220.15.7:5005] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bb.php"] [unique_id "aeEovO91GAVgUfhPVDHhgQAAAEY"]
[Fri Apr 17 02:21:51.708077 2026] [:error] [pid 11692:tid 11701] [client 20.220.15.7:4959] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bb.php"] [unique_id "aeEov81AYuhm4BZwKNokYAAAAgQ"]
[Fri Apr 17 02:21:53.292969 2026] [:error] [pid 11692:tid 11721] [client 20.220.15.7:5093] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lf.php"] [unique_id "aeEowc1AYuhm4BZwKNokZgAAAhg"]
[Fri Apr 17 02:21:54.452095 2026] [:error] [pid 3245:tid 3282] [client 20.220.15.7:5108] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lf.php"] [unique_id "aeEowqESOMTHVLs-uFDcZgAAARQ"]
[Fri Apr 17 02:21:55.160348 2026] [:error] [pid 3245:tid 3267] [client 20.220.15.7:5019] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lf.php"] [unique_id "aeEow6ESOMTHVLs-uFDcaAAAAQU"]
[Fri Apr 17 02:21:57.146964 2026] [:error] [pid 43387:tid 43453] [client 20.220.15.7:5090] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lf.php"] [unique_id "aeEoxSBNsONqHxWTakVK-wAAAIM"]
[Fri Apr 17 02:21:58.545618 2026] [:error] [pid 43482:tid 43504] [client 20.220.15.7:4985] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/WSO.php"] [unique_id "aeEoxj9SZnuKxlHrct21rQAAANQ"]
[Fri Apr 17 02:21:59.726441 2026] [:error] [pid 43386:tid 43421] [client 20.220.15.7:5117] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/WSO.php"] [unique_id "aeEox-91GAVgUfhPVDHhjwAAAEE"]
[Fri Apr 17 02:22:00.472286 2026] [:error] [pid 43482:tid 43503] [client 20.220.15.7:5041] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/WSO.php"] [unique_id "aeEoyD9SZnuKxlHrct21tgAAANM"]
[Fri Apr 17 02:22:01.236915 2026] [:error] [pid 43387:tid 43467] [client 20.220.15.7:5112] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/WSO.php"] [unique_id "aeEoySBNsONqHxWTakVK_wAAAI4"]
[Fri Apr 17 02:22:03.039773 2026] [:error] [pid 26480:tid 26496] [client 20.220.15.7:4979] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hello.php"] [unique_id "aeEoywwLDJKTQNfarA2MEQAAAc4"]
[Fri Apr 17 02:22:06.613819 2026] [:error] [pid 3245:tid 3277] [client 20.220.15.7:5103] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hello.php"] [unique_id "aeEozqESOMTHVLs-uFDcaQAAAQ8"]
[Fri Apr 17 02:22:10.505221 2026] [:error] [pid 43386:tid 43422] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Fri Apr 17 02:22:10.832806 2026] [:error] [pid 43386:tid 43442] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 17 02:22:11.255767 2026] [:error] [pid 43386:tid 43424] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/if.php
[Fri Apr 17 02:22:11.470893 2026] [:error] [pid 43386:tid 43430] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/mrjn.php
[Fri Apr 17 02:22:11.692025 2026] [:error] [pid 43386:tid 43425] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/kn.php
[Fri Apr 17 02:22:11.906459 2026] [:error] [pid 43386:tid 43438] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/3301.php
[Fri Apr 17 02:22:12.155138 2026] [:error] [pid 43386:tid 43436] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/alex.php
[Fri Apr 17 02:22:12.371946 2026] [:error] [pid 43386:tid 43426] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/mailer.php
[Fri Apr 17 02:22:12.589286 2026] [:error] [pid 43386:tid 43432] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/anone.php
[Fri Apr 17 02:22:12.911570 2026] [:error] [pid 43386:tid 43445] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configer.php
[Fri Apr 17 02:22:13.128750 2026] [:error] [pid 43386:tid 43428] [client 20.220.15.7:4936] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ad.php
[Fri Apr 17 02:22:13.340863 2026] [:error] [pid 43386:tid 43443] [client 20.220.15.7:4936] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/send.php"] [unique_id "aeEo1e91GAVgUfhPVDHhrwAAAFY"]
[Fri Apr 17 02:22:14.710524 2026] [:error] [pid 43385:tid 43405] [client 20.220.15.7:4929] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/send.php"] [unique_id "aeEo1snIxkJaUI8KNs4wIwAAABA"]
[Fri Apr 17 02:22:16.374719 2026] [:error] [pid 43386:tid 43430] [client 20.220.15.7:4961] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/send.php"] [unique_id "aeEo2O91GAVgUfhPVDHhtAAAAEo"]
[Fri Apr 17 02:22:17.457195 2026] [:error] [pid 43386:tid 43441] [client 20.220.15.7:5010] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/send.php"] [unique_id "aeEo2e91GAVgUfhPVDHhtwAAAFQ"]
[Fri Apr 17 02:22:18.891136 2026] [:error] [pid 43386:tid 43428] [client 20.220.15.7:5009] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "aeEo2u91GAVgUfhPVDHhuwAAAEg"]
[Fri Apr 17 02:22:20.082732 2026] [:error] [pid 43387:tid 43468] [client 20.220.15.7:4995] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "aeEo3CBNsONqHxWTakVLEQAAAI8"]
[Fri Apr 17 02:22:22.041864 2026] [:error] [pid 43385:tid 43400] [client 20.220.15.7:5034] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "aeEo3snIxkJaUI8KNs4wJgAAAAs"]
[Fri Apr 17 02:22:23.839339 2026] [:error] [pid 4086:tid 4109] [client 20.220.15.7:4997] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3.php"] [unique_id "aeEo31lz7gxl_exM0FpPBQAAAVU"]
[Fri Apr 17 02:22:25.943887 2026] [:error] [pid 43387:tid 43467] [client 20.220.15.7:5028] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp-cache.php"] [unique_id "aeEo4SBNsONqHxWTakVLJQAAAI4"]
[Fri Apr 17 02:22:28.890128 2026] [:error] [pid 26480:tid 26493] [client 20.220.15.7:5098] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp-cache.php"] [unique_id "aeEo5AwLDJKTQNfarA2MFgAAAcs"]
[Fri Apr 17 02:22:30.431879 2026] [:error] [pid 43482:tid 43502] [client 20.220.15.7:4881] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp-cache.php"] [unique_id "aeEo5j9SZnuKxlHrct21ywAAANI"]
[Fri Apr 17 02:22:33.087392 2026] [:error] [pid 26480:tid 26491] [client 20.220.15.7:4933] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.wp-cache.php"] [unique_id "aeEo6QwLDJKTQNfarA2MGAAAAck"]
[Fri Apr 17 02:22:35.737026 2026] [:error] [pid 11854:tid 11859] [client 20.220.15.7:4946] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendmail.php"] [unique_id "aeEo69xJCSIaqP1XSdaihwAAAkI"]
[Fri Apr 17 02:22:38.679017 2026] [:error] [pid 43386:tid 43445] [client 20.220.15.7:4934] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendmail.php"] [unique_id "aeEo7u91GAVgUfhPVDHhzgAAAFg"]
[Fri Apr 17 02:22:39.688148 2026] [:error] [pid 4086:tid 4106] [client 20.220.15.7:5101] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendmail.php"] [unique_id "aeEo71lz7gxl_exM0FpPBwAAAVI"]
[Fri Apr 17 02:22:40.385892 2026] [:error] [pid 43387:tid 43471] [client 20.220.15.7:4998] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sendmail.php"] [unique_id "aeEo8CBNsONqHxWTakVLRgAAAJI"]
[Fri Apr 17 02:22:42.719320 2026] [:error] [pid 11854:tid 11857] [client 20.220.15.7:5118] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rahma.php"] [unique_id "aeEo8txJCSIaqP1XSdaijAAAAkA"]
[Fri Apr 17 02:22:46.002830 2026] [:error] [pid 3245:tid 3268] [client 20.220.15.7:5011] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rahma.php"] [unique_id "aeEo9qESOMTHVLs-uFDcbwAAAQY"]
[Fri Apr 17 02:22:47.619329 2026] [:error] [pid 43385:tid 43392] [client 20.220.15.7:4992] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rahma.php"] [unique_id "aeEo98nIxkJaUI8KNs4wKwAAAAM"]
[Fri Apr 17 02:22:48.938528 2026] [:error] [pid 26480:tid 26491] [client 20.220.15.7:5097] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rahma.php"] [unique_id "aeEo-AwLDJKTQNfarA2MNgAAAck"]
[Fri Apr 17 02:22:50.143438 2026] [:error] [pid 43482:tid 43503] [client 20.220.15.7:5022] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nasgor.php"] [unique_id "aeEo-j9SZnuKxlHrct215AAAANM"]
[Fri Apr 17 02:22:52.518250 2026] [:error] [pid 43386:tid 43439] [client 20.220.15.7:5015] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nasgor.php"] [unique_id "aeEo_O91GAVgUfhPVDHh3AAAAFM"]
[Fri Apr 17 02:22:54.732427 2026] [:error] [pid 43387:tid 43460] [client 20.220.15.7:5087] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nasgor.php"] [unique_id "aeEo_iBNsONqHxWTakVLXQAAAIk"]
[Fri Apr 17 02:22:57.156596 2026] [:error] [pid 26480:tid 26500] [client 20.220.15.7:5077] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nasgor.php"] [unique_id "aeEpAQwLDJKTQNfarA2MTgAAAdI"]
[Fri Apr 17 02:22:58.832295 2026] [:error] [pid 43386:tid 43429] [client 20.220.15.7:4870] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-confirm.php"] [unique_id "aeEpAu91GAVgUfhPVDHh-AAAAEk"]
[Fri Apr 17 02:23:05.159468 2026] [:error] [pid 43482:tid 43495] [client 20.220.15.7:5027] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-confirm.php"] [unique_id "aeEpCT9SZnuKxlHrct219gAAAMs"]
[Fri Apr 17 02:24:46.605306 2026] [:error] [pid 43482:tid 43503] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Fri Apr 17 02:24:46.843835 2026] [:error] [pid 43482:tid 43490] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Apr 17 02:24:47.117723 2026] [:error] [pid 43482:tid 43508] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-one.php
[Fri Apr 17 02:24:47.340483 2026] [:error] [pid 43482:tid 43486] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/alexus.php
[Fri Apr 17 02:24:47.554875 2026] [:error] [pid 43482:tid 43504] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/wso1337.php
[Fri Apr 17 02:24:47.803306 2026] [:error] [pid 43482:tid 43484] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Fri Apr 17 02:24:48.075060 2026] [:error] [pid 43482:tid 43503] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/it.php
[Fri Apr 17 02:24:48.290636 2026] [:error] [pid 43482:tid 43496] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/kiss.php
[Fri Apr 17 02:24:49.720184 2026] [:error] [pid 43482:tid 43500] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Fri Apr 17 02:24:50.481510 2026] [:error] [pid 43482:tid 43507] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/cms.php
[Fri Apr 17 02:24:51.594619 2026] [:error] [pid 43482:tid 43507] [client 20.220.15.7:5013] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-uploads.php
[Fri Apr 17 02:24:51.826376 2026] [:error] [pid 43482:tid 43499] [client 20.220.15.7:5013] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Gel.php"] [unique_id "aeEpcz9SZnuKxlHrct22vAAAAM8"]
[Fri Apr 17 02:24:54.763789 2026] [:error] [pid 26480:tid 26500] [client 20.220.15.7:5062] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Gel.php"] [unique_id "aeEpdgwLDJKTQNfarA2NJAAAAdI"]
[Fri Apr 17 02:24:56.903674 2026] [:error] [pid 43387:tid 43459] [client 20.220.15.7:5073] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Gel.php"] [unique_id "aeEpeCBNsONqHxWTakVL6QAAAIg"]
[Fri Apr 17 02:25:00.264404 2026] [:error] [pid 43385:tid 43407] [client 20.220.15.7:5110] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Gel.php"] [unique_id "aeEpfMnIxkJaUI8KNs4woQAAABI"]
[Fri Apr 17 02:25:04.087182 2026] [:error] [pid 3245:tid 3282] [client 20.220.15.7:5115] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/41.php"] [unique_id "aeEpgKESOMTHVLs-uFDcvAAAARQ"]
[Fri Apr 17 02:25:07.187018 2026] [:error] [pid 3245:tid 3262] [client 20.220.15.7:5071] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/41.php"] [unique_id "aeEpg6ESOMTHVLs-uFDcvgAAAQA"]
[Fri Apr 17 02:25:10.291971 2026] [:error] [pid 43482:tid 43492] [client 20.220.15.7:4954] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/41.php"] [unique_id "aeEphj9SZnuKxlHrct224QAAAMg"]
[Fri Apr 17 02:25:12.804037 2026] [:error] [pid 43482:tid 43489] [client 20.220.15.7:4873] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/41.php"] [unique_id "aeEpiD9SZnuKxlHrct225wAAAMU"]
[Fri Apr 17 02:25:16.309200 2026] [:error] [pid 4086:tid 4100] [client 20.220.15.7:5075] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4price.php"] [unique_id "aeEpjFlz7gxl_exM0FpPQQAAAUw"]
[Fri Apr 17 02:25:18.345597 2026] [:error] [pid 43482:tid 43504] [client 20.220.15.7:5086] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4price.php"] [unique_id "aeEpjj9SZnuKxlHrct229AAAANQ"]
[Fri Apr 17 02:25:22.211694 2026] [:error] [pid 26102:tid 26121] [client 20.220.15.7:5000] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4price.php"] [unique_id "aeEpkv127aFqw6ALdnggFQAAAZA"]
[Fri Apr 17 02:25:27.896844 2026] [:error] [pid 11854:tid 11872] [client 20.220.15.7:5094] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/4price.php"] [unique_id "aeEpl9xJCSIaqP1XSdai2gAAAk8"]
[Fri Apr 17 02:25:32.061553 2026] [:error] [pid 43386:tid 43437] [client 20.220.15.7:5006] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.fk.php"] [unique_id "aeEpnO91GAVgUfhPVDHiugAAAFE"]
[Fri Apr 17 02:25:35.080201 2026] [:error] [pid 26480:tid 26497] [client 20.220.15.7:5079] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.fk.php"] [unique_id "aeEpnwwLDJKTQNfarA2NMwAAAc8"]
[Fri Apr 17 02:25:38.161659 2026] [:error] [pid 43386:tid 43425] [client 20.220.15.7:5021] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.fk.php"] [unique_id "aeEpou91GAVgUfhPVDHiywAAAEU"]
[Fri Apr 17 02:25:39.027652 2026] [:error] [pid 43386:tid 43434] [client 20.220.15.7:5084] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/.fk.php"] [unique_id "aeEpo-91GAVgUfhPVDHi1QAAAE4"]
[Fri Apr 17 02:25:41.496561 2026] [:error] [pid 11692:tid 11709] [client 20.220.15.7:4953] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Sendemail.php"] [unique_id "aeEppc1AYuhm4BZwKNok7AAAAgw"]
[Fri Apr 17 02:25:44.318904 2026] [:error] [pid 26102:tid 26117] [client 20.220.15.7:5059] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Sendemail.php"] [unique_id "aeEpqP127aFqw6ALdnggJAAAAYw"]
[Fri Apr 17 02:25:50.359310 2026] [:error] [pid 43387:tid 43450] [client 20.220.15.7:5026] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Sendemail.php"] [unique_id "aeEpriBNsONqHxWTakVMHwAAAII"]
[Fri Apr 17 02:25:51.417114 2026] [:error] [pid 11692:tid 11707] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/Sendemail.php
[Fri Apr 17 02:25:51.689553 2026] [:error] [pid 11692:tid 11712] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Apr 17 02:25:51.899194 2026] [:error] [pid 11692:tid 11713] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/olu.php
[Fri Apr 17 02:25:52.554635 2026] [:error] [pid 11692:tid 11703] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Fri Apr 17 02:25:52.919439 2026] [:error] [pid 11692:tid 11718] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/alexusmailer 2.0.php
[Fri Apr 17 02:25:53.129174 2026] [:error] [pid 11692:tid 11706] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/rss.php
[Fri Apr 17 02:25:53.567274 2026] [:error] [pid 11692:tid 11698] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Fri Apr 17 02:25:54.836701 2026] [:error] [pid 11692:tid 11698] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/wso2.php
[Fri Apr 17 02:25:55.046011 2026] [:error] [pid 11692:tid 11705] [client 20.220.15.7:5040] File does not exist: /usr/local/apache/htdocs/suspended-page/wso1.php
[Fri Apr 17 02:25:55.265472 2026] [:error] [pid 11692:tid 11700] [client 20.220.15.7:5040] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/olux.php"] [unique_id "aeEps81AYuhm4BZwKNok-QAAAgM"]
[Fri Apr 17 02:25:56.702785 2026] [:error] [pid 43482:tid 43490] [client 20.220.15.7:5064] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/olux.php"] [unique_id "aeEptD9SZnuKxlHrct23MgAAAMY"]
[Fri Apr 17 02:25:58.488165 2026] [:error] [pid 4086:tid 4095] [client 20.220.15.7:5056] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/olux.php"] [unique_id "aeEptllz7gxl_exM0FpPbgAAAUc"]
[Fri Apr 17 02:25:59.591979 2026] [:error] [pid 3245:tid 3272] [client 20.220.15.7:5007] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/olux.php"] [unique_id "aeEpt6ESOMTHVLs-uFDdCQAAAQo"]
[Fri Apr 17 02:26:01.097657 2026] [:error] [pid 26480:tid 26497] [client 20.220.15.7:4996] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aeEpuQwLDJKTQNfarA2NQwAAAc8"]
[Fri Apr 17 02:26:02.072442 2026] [:error] [pid 43387:tid 43457] [client 20.220.15.7:5070] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aeEpuiBNsONqHxWTakVMPAAAAIY"]
[Fri Apr 17 02:26:04.118580 2026] [:error] [pid 4086:tid 4113] [client 20.220.15.7:5004] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aeEpvFlz7gxl_exM0FpPcwAAAVg"]
[Fri Apr 17 02:26:07.025750 2026] [:error] [pid 26480:tid 26500] [client 20.220.15.7:5060] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-info.php"] [unique_id "aeEpvwwLDJKTQNfarA2NRgAAAdI"]
[Fri Apr 17 02:26:10.036430 2026] [:error] [pid 26102:tid 26120] [client 20.220.15.7:5065] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xl.php"] [unique_id "aeEpwv127aFqw6ALdnggOwAAAY8"]
[Fri Apr 17 02:26:15.750950 2026] [:error] [pid 43386:tid 43426] [client 20.220.15.7:4943] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xl.php"] [unique_id "aeEpx-91GAVgUfhPVDHjAgAAAEY"]
[Fri Apr 17 02:26:16.717151 2026] [:error] [pid 11854:tid 11863] [client 20.220.15.7:4941] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xl.php"] [unique_id "aeEpyNxJCSIaqP1XSdai-wAAAkY"]
[Fri Apr 17 02:26:19.231618 2026] [:error] [pid 43482:tid 43503] [client 20.220.15.7:4935] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xl.php"] [unique_id "aeEpyz9SZnuKxlHrct23SAAAANM"]
[Fri Apr 17 02:26:21.865339 2026] [:error] [pid 43385:tid 43398] [client 20.220.15.7:5093] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-confiig.php"] [unique_id "aeEpzcnIxkJaUI8KNs4xPQAAAAk"]
[Fri Apr 17 02:26:24.240928 2026] [:error] [pid 43385:tid 43405] [client 20.220.15.7:5005] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-confiig.php"] [unique_id "aeEp0MnIxkJaUI8KNs4xQAAAABA"]
[Fri Apr 17 02:26:26.337437 2026] [:error] [pid 43482:tid 43491] [client 20.220.15.7:5066] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-confiig.php"] [unique_id "aeEp0j9SZnuKxlHrct23XwAAAMc"]
[Fri Apr 17 02:26:27.695511 2026] [:error] [pid 26102:tid 26123] [client 20.220.15.7:5099] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-confiig.php"] [unique_id "aeEp0_127aFqw6ALdnggVQAAAZI"]
[Fri Apr 17 02:26:29.857657 2026] [:error] [pid 26102:tid 26120] [client 20.220.15.7:4951] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file-manager.php"] [unique_id "aeEp1f127aFqw6ALdnggXgAAAY8"]
[Fri Apr 17 02:26:32.332152 2026] [:error] [pid 26102:tid 26106] [client 20.220.15.7:5095] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file-manager.php"] [unique_id "aeEp2P127aFqw6ALdnggbAAAAYE"]
[Fri Apr 17 02:26:33.521607 2026] [:error] [pid 26480:tid 26495] [client 20.220.15.7:5089] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file-manager.php"] [unique_id "aeEp2QwLDJKTQNfarA2NSQAAAc0"]
[Fri Apr 17 02:26:34.811081 2026] [:error] [pid 43385:tid 43397] [client 20.220.15.7:5049] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file-manager.php"] [unique_id "aeEp2snIxkJaUI8KNs4xUgAAAAg"]
[Fri Apr 17 02:26:35.949985 2026] [:error] [pid 43385:tid 43402] [client 20.220.15.7:5044] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploader.php"] [unique_id "aeEp28nIxkJaUI8KNs4xWAAAAA0"]
[Fri Apr 17 02:26:39.706826 2026] [:error] [pid 43386:tid 43424] [client 20.220.15.7:5108] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploader.php"] [unique_id "aeEp3-91GAVgUfhPVDHjJQAAAEQ"]
[Fri Apr 17 02:26:44.143903 2026] [:error] [pid 43387:tid 43475] [client 20.220.15.7:5069] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uploader.php"] [unique_id "aeEp5CBNsONqHxWTakVMSQAAAJY"]
[Fri Apr 17 02:26:54.523330 2026] [:error] [pid 43386:tid 43438] [client 20.220.15.7:5105] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/leafmailer.php"] [unique_id "aeEp7u91GAVgUfhPVDHjQgAAAFI"]
[Fri Apr 17 02:26:57.410699 2026] [:error] [pid 43387:tid 43475] [client 20.220.15.7:5106] File does not exist: /usr/local/apache/htdocs/suspended-page/leafmailer.php
[Fri Apr 17 02:26:57.852004 2026] [:error] [pid 43387:tid 43477] [client 20.220.15.7:5106] File does not exist: /usr/local/apache/htdocs/suspended-page/date.php
[Fri Apr 17 02:26:59.352508 2026] [:error] [pid 43387:tid 43470] [client 20.220.15.7:5106] File does not exist: /usr/local/apache/htdocs/suspended-page/pomo.php
[Fri Apr 17 02:27:00.862609 2026] [:error] [pid 43387:tid 43470] [client 20.220.15.7:5106] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 17 02:27:04.627211 2026] [:error] [pid 43387:tid 43476] [client 20.220.15.7:5106] File does not exist: /usr/local/apache/htdocs/suspended-page/pluginfile.php
[Fri Apr 17 02:27:05.056186 2026] [:error] [pid 43387:tid 43474] [client 20.220.15.7:5106] File does not exist: /usr/local/apache/htdocs/suspended-page/version.php
[Fri Apr 17 02:27:06.882612 2026] [:error] [pid 43387:tid 43450] [client 20.220.15.7:5106] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeEp-iBNsONqHxWTakVMfQAAAII"]
[Fri Apr 17 02:27:08.672334 2026] [:error] [pid 43386:tid 43433] [client 20.220.15.7:5080] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeEp_O91GAVgUfhPVDHjfAAAAE0"]
[Fri Apr 17 02:27:12.106441 2026] [:error] [pid 43386:tid 43438] [client 20.220.15.7:5008] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeEqAO91GAVgUfhPVDHjjwAAAFI"]
[Fri Apr 17 02:27:13.899306 2026] [:error] [pid 26102:tid 26126] [client 20.220.15.7:5109] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cgiag/mycgia/lib/weblib.php"] [unique_id "aeEqAf127aFqw6ALdnggigAAAZU"]
[Fri Apr 17 02:27:17.202274 2026] [:error] [pid 11854:tid 11857] [client 20.220.15.7:4946] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "aeEqBdxJCSIaqP1XSdajNAAAAkA"]
[Fri Apr 17 02:27:18.443153 2026] [:error] [pid 26480:tid 26485] [client 20.220.15.7:5085] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "aeEqBgwLDJKTQNfarA2NogAAAcM"]
[Fri Apr 17 02:27:20.076421 2026] [:error] [pid 43386:tid 43437] [client 20.220.15.7:5020] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "aeEqCO91GAVgUfhPVDHjogAAAFE"]
[Fri Apr 17 02:27:22.254688 2026] [:error] [pid 43387:tid 43469] [client 20.220.15.7:5029] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bless.php"] [unique_id "aeEqCiBNsONqHxWTakVMiQAAAJA"]
[Fri Apr 17 02:27:23.989206 2026] [:error] [pid 11854:tid 11877] [client 20.220.15.7:5119] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php."] [unique_id "aeEqC9xJCSIaqP1XSdajRAAAAlQ"]
[Fri Apr 17 02:27:27.190285 2026] [:error] [pid 4086:tid 4104] [client 20.220.15.7:5016] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php."] [unique_id "aeEqD1lz7gxl_exM0FpPpAAAAVA"]
[Fri Apr 17 02:27:29.771209 2026] [:error] [pid 43387:tid 43473] [client 20.220.15.7:5077] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php."] [unique_id "aeEqESBNsONqHxWTakVMjgAAAJQ"]
[Fri Apr 17 02:27:36.361373 2026] [:error] [pid 4086:tid 4098] [client 20.220.15.7:5104] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin.php."] [unique_id "aeEqGFlz7gxl_exM0FpPrQAAAUo"]
[Fri Apr 17 02:27:40.135488 2026] [:error] [pid 43386:tid 43443] [client 20.220.15.7:5010] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aeEqHO91GAVgUfhPVDHjvwAAAFY"]
[Fri Apr 17 02:27:42.146026 2026] [:error] [pid 43386:tid 43443] [client 20.220.15.7:5043] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aeEqHu91GAVgUfhPVDHj0QAAAFY"]
[Fri Apr 17 02:27:44.328121 2026] [:error] [pid 3245:tid 3273] [client 20.220.15.7:4866] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aeEqIKESOMTHVLs-uFDdZgAAAQs"]
[Fri Apr 17 02:27:45.789831 2026] [:error] [pid 43482:tid 43501] [client 20.220.15.7:5002] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/flower.php"] [unique_id "aeEqIT9SZnuKxlHrct23-QAAANE"]
[Fri Apr 17 02:27:47.820613 2026] [:error] [pid 3245:tid 3263] [client 20.220.15.7:5032] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEqI6ESOMTHVLs-uFDdbgAAAQE"]
[Fri Apr 17 02:27:51.016421 2026] [:error] [pid 26480:tid 26493] [client 20.220.15.7:5009] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEqJwwLDJKTQNfarA2NvQAAAcs"]
[Fri Apr 17 02:27:57.521012 2026] [:error] [pid 4086:tid 4096] [client 20.220.15.7:5053] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEqLVlz7gxl_exM0FpPuAAAAUg"]
[Fri Apr 17 02:27:59.928837 2026] [:error] [pid 43385:tid 43390] [client 20.220.15.7:5074] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEqL8nIxkJaUI8KNs4xpgAAAAE"]
[Fri Apr 17 02:28:05.789828 2026] [:error] [pid 43386:tid 43424] [client 20.220.15.7:4945] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeEqNe91GAVgUfhPVDHkJwAAAEQ"]
[Fri Apr 17 02:28:16.285151 2026] [:error] [pid 43482:tid 43500] [client 20.220.15.7:4997] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Apr 17 02:28:20.421954 2026] [:error] [pid 43386:tid 43432] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Apr 17 02:28:20.635875 2026] [:error] [pid 43386:tid 43445] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Apr 17 02:28:21.743269 2026] [:error] [pid 43386:tid 43444] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Apr 17 02:28:21.957698 2026] [:error] [pid 43386:tid 43420] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Apr 17 02:28:22.172455 2026] [:error] [pid 43386:tid 43439] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/aw.php
[Fri Apr 17 02:28:22.389312 2026] [:error] [pid 43386:tid 43427] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 17 02:28:22.625679 2026] [:error] [pid 43386:tid 43441] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 17 02:28:22.841174 2026] [:error] [pid 43386:tid 43429] [client 20.220.15.7:5083] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Fri Apr 17 02:28:23.300084 2026] [:error] [pid 43386:tid 43445] [client 20.220.15.7:5083] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/13.php"] [unique_id "aeEqR-91GAVgUfhPVDHkagAAAFg"]
[Fri Apr 17 02:28:29.439810 2026] [:error] [pid 43387:tid 43459] [client 20.220.15.7:5113] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/13.php"] [unique_id "aeEqTSBNsONqHxWTakVMuAAAAIg"]
[Fri Apr 17 02:28:34.597731 2026] [:error] [pid 26480:tid 26487] [client 20.220.15.7:5012] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/13.php"] [unique_id "aeEqUgwLDJKTQNfarA2OGAAAAcU"]
[Fri Apr 17 02:28:42.176820 2026] [:error] [pid 43386:tid 43426] [client 20.220.15.7:5041] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aeEqWu91GAVgUfhPVDHkqwAAAEY"]
[Fri Apr 17 02:28:47.782353 2026] [:error] [pid 3245:tid 3272] [client 20.220.15.7:5078] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aeEqX6ESOMTHVLs-uFDdpgAAAQo"]
[Fri Apr 17 02:28:49.813543 2026] [:error] [pid 43387:tid 43474] [client 20.220.15.7:4997] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aeEqYSBNsONqHxWTakVMzgAAAJU"]
[Fri Apr 17 02:28:51.331764 2026] [:error] [pid 43386:tid 43444] [client 20.220.15.7:5090] [client 20.220.15.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aeEqY-91GAVgUfhPVDHksQAAAFc"]
[Fri Apr 17 02:29:29.504960 2026] [:error] [pid 4086:tid 4104] [client 20.220.15.7:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Apr 17 02:29:29.718956 2026] [:error] [pid 4086:tid 4100] [client 20.220.15.7:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Fri Apr 17 02:29:29.939182 2026] [:error] [pid 4086:tid 4103] [client 20.220.15.7:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/wi.php
[Fri Apr 17 02:29:30.158615 2026] [:error] [pid 4086:tid 4112] [client 20.220.15.7:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Fri Apr 17 02:29:30.423046 2026] [:error] [pid 4086:tid 4099] [client 20.220.15.7:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Fri Apr 17 02:29:30.672024 2026] [:error] [pid 4086:tid 4097] [client 20.220.15.7:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Apr 17 04:12:52.378565 2026] [:error] [pid 9152:tid 9208] [client 209.38.89.62:58422] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFCxJJYca8I3TNCwIfS9AAAAFI"]
[Fri Apr 17 04:12:52.444326 2026] [:error] [pid 9263:tid 9284] [client 209.38.89.62:58426] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFCxBP68VyHNvj1e56V1QAAANM"]
[Fri Apr 17 04:12:52.585594 2026] [:error] [pid 9152:tid 9198] [client 209.38.89.62:58428] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFCxJJYca8I3TNCwIfS9QAAAEg"]
[Fri Apr 17 04:12:52.743502 2026] [:error] [pid 9151:tid 9163] [client 209.38.89.62:58430] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFCxMhTVuRPkua22vRmvgAAAAI"]
[Fri Apr 17 04:12:52.799945 2026] [:error] [pid 9263:tid 9271] [client 209.38.89.62:58444] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFCxBP68VyHNvj1e56V1gAAAMY"]
[Fri Apr 17 04:12:52.864602 2026] [:error] [pid 9263:tid 9280] [client 209.38.89.62:58456] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFCxBP68VyHNvj1e56V1wAAAM8"]
[Fri Apr 17 04:12:52.904593 2026] [:error] [pid 9151:tid 9165] [client 209.38.89.62:58472] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFCxMhTVuRPkua22vRmvwAAAAQ"]
[Fri Apr 17 04:12:52.952509 2026] [:error] [pid 9151:tid 9184] [client 209.38.89.62:58482] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFCxMhTVuRPkua22vRmwAAAABc"]
[Fri Apr 17 04:12:53.197994 2026] [:error] [pid 9151:tid 9174] [client 209.38.89.62:58486] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFCxchTVuRPkua22vRmwQAAAA0"]
[Fri Apr 17 04:12:53.288811 2026] [:error] [pid 9151:tid 9182] [client 209.38.89.62:58488] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFCxchTVuRPkua22vRmwgAAABU"]
[Fri Apr 17 04:12:53.358511 2026] [:error] [pid 9151:tid 9179] [client 209.38.89.62:58492] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFCxchTVuRPkua22vRmwwAAABI"]
[Fri Apr 17 04:12:53.477651 2026] [:error] [pid 9152:tid 9203] [client 209.38.89.62:58504] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFCxZJYca8I3TNCwIfS9gAAAE0"]
[Fri Apr 17 04:12:53.634448 2026] [:error] [pid 9152:tid 9197] [client 209.38.89.62:58518] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFCxZJYca8I3TNCwIfS9wAAAEc"]
[Fri Apr 17 07:45:12.319427 2026] [:error] [pid 9153:tid 9242] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Fri Apr 17 07:45:12.562142 2026] [:error] [pid 9153:tid 9239] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Fri Apr 17 07:45:12.806882 2026] [:error] [pid 9153:tid 9223] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Fri Apr 17 07:45:13.054942 2026] [:error] [pid 9153:tid 9227] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Fri Apr 17 07:45:13.317406 2026] [:error] [pid 9153:tid 9226] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Fri Apr 17 07:45:13.577825 2026] [:error] [pid 9153:tid 9232] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Fri Apr 17 07:45:13.822753 2026] [:error] [pid 9153:tid 9233] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Fri Apr 17 07:45:14.071856 2026] [:error] [pid 9153:tid 9238] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Fri Apr 17 07:45:14.313880 2026] [:error] [pid 9153:tid 9224] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Fri Apr 17 07:45:14.555952 2026] [:error] [pid 9153:tid 9219] [client 158.158.112.230:12278] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Fri Apr 17 07:45:14.963223 2026] [:error] [pid 9153:tid 9230] [client 158.158.112.230:12278] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF0iuMHGxkTZX3c45djegAAAIw"]
[Fri Apr 17 07:45:15.814688 2026] [:error] [pid 34273:tid 34285] [client 158.158.112.230:12171] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF0i2uQDW686mK3dgEjWwAAAYo"]
[Fri Apr 17 07:45:16.304327 2026] [:error] [pid 25010:tid 25035] [client 158.158.112.230:12284] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF0jI-7kkf42RarqQ3uGAAAAVY"]
[Fri Apr 17 07:45:16.841914 2026] [:error] [pid 9152:tid 9197] [client 158.158.112.230:12262] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeF0jJJYca8I3TNCwIdNTgAAAEc"]
[Fri Apr 17 07:45:17.366048 2026] [:error] [pid 25010:tid 25037] [client 158.158.112.230:12239] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeF0jY-7kkf42RarqQ3uHQAAAVg"]
[Fri Apr 17 07:45:17.965489 2026] [:error] [pid 9151:tid 9175] [client 158.158.112.230:12165] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeF0jchTVuRPkua22vTNqwAAAA4"]
[Fri Apr 17 07:45:18.521998 2026] [:error] [pid 9151:tid 9179] [client 158.158.112.230:12280] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeF0jshTVuRPkua22vTNsgAAABI"]
[Fri Apr 17 07:45:19.228223 2026] [:error] [pid 9151:tid 9177] [client 158.158.112.230:12281] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeF0j8hTVuRPkua22vTNuQAAABA"]
[Fri Apr 17 07:45:19.833028 2026] [:error] [pid 9151:tid 9168] [client 158.158.112.230:12175] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeF0j8hTVuRPkua22vTNvQAAAAc"]
[Fri Apr 17 07:45:20.919336 2026] [:error] [pid 9152:tid 9198] [client 158.158.112.230:12269] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeF0kJJYca8I3TNCwIdNTwAAAEg"]
[Fri Apr 17 07:45:21.472941 2026] [:error] [pid 9152:tid 9194] [client 158.158.112.230:12271] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeF0kZJYca8I3TNCwIdNUQAAAEQ"]
[Fri Apr 17 07:45:22.114948 2026] [:error] [pid 9152:tid 9211] [client 158.158.112.230:12166] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeF0kpJYca8I3TNCwIdNUwAAAFU"]
[Fri Apr 17 07:45:22.882964 2026] [:error] [pid 34273:tid 34282] [client 158.158.112.230:12234] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeF0kmuQDW686mK3dgEjgwAAAYc"]
[Fri Apr 17 07:45:23.599541 2026] [:error] [pid 34273:tid 34286] [client 158.158.112.230:12230] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeF0k2uQDW686mK3dgEjiQAAAYs"]
[Fri Apr 17 07:45:24.549062 2026] [:error] [pid 9153:tid 9228] [client 158.158.112.230:12101] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeF0lOMHGxkTZX3c45djfQAAAIo"]
[Fri Apr 17 07:45:25.782982 2026] [:error] [pid 34273:tid 34296] [client 158.158.112.230:12285] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeF0lWuQDW686mK3dgEjlQAAAZU"]
[Fri Apr 17 07:45:26.284545 2026] [:error] [pid 34273:tid 34298] [client 158.158.112.230:12237] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeF0lmuQDW686mK3dgEjmAAAAZc"]
[Fri Apr 17 07:45:26.933911 2026] [:error] [pid 34273:tid 34291] [client 158.158.112.230:12253] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeF0lmuQDW686mK3dgEjnQAAAZA"]
[Fri Apr 17 07:45:27.751000 2026] [:error] [pid 34273:tid 34280] [client 158.158.112.230:12167] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeF0l2uQDW686mK3dgEjpAAAAYU"]
[Fri Apr 17 07:45:28.973630 2026] [:error] [pid 34273:tid 34298] [client 158.158.112.230:12180] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeF0mGuQDW686mK3dgEjrgAAAZc"]
[Fri Apr 17 07:45:30.029998 2026] [:error] [pid 9152:tid 9208] [client 158.158.112.230:12177] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeF0mpJYca8I3TNCwIdNXAAAAFI"]
[Fri Apr 17 07:45:32.009684 2026] [:error] [pid 9153:tid 9234] [client 158.158.112.230:12220] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeF0nOMHGxkTZX3c45djgQAAAJA"]
[Fri Apr 17 07:45:33.905082 2026] [:error] [pid 34273:tid 34298] [client 158.158.112.230:12274] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeF0nWuQDW686mK3dgEjxQAAAZc"]
[Fri Apr 17 07:45:35.330051 2026] [:error] [pid 34273:tid 34287] [client 158.158.112.230:12225] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeF0n2uQDW686mK3dgEj1gAAAYw"]
[Fri Apr 17 07:45:36.490468 2026] [:error] [pid 9153:tid 9237] [client 158.158.112.230:12279] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeF0oOMHGxkTZX3c45djiQAAAJM"]
[Fri Apr 17 07:45:40.207251 2026] [:error] [pid 25010:tid 25025] [client 158.158.112.230:12191] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeF0pI-7kkf42RarqQ3uJgAAAUw"]
[Fri Apr 17 07:45:43.140333 2026] [:error] [pid 25010:tid 25033] [client 158.158.112.230:12245] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeF0p4-7kkf42RarqQ3uKAAAAVQ"]
[Fri Apr 17 07:45:44.331177 2026] [:error] [pid 9152:tid 9193] [client 158.158.112.230:12208] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeF0qJJYca8I3TNCwIdNaAAAAEM"]
[Fri Apr 17 07:45:45.455195 2026] [:error] [pid 9152:tid 9206] [client 158.158.112.230:12260] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeF0qZJYca8I3TNCwIdNawAAAFA"]
[Fri Apr 17 07:45:46.243185 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12236] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeF0qmuQDW686mK3dgEj_wAAAZg"]
[Fri Apr 17 07:45:47.121445 2026] [:error] [pid 34273:tid 34284] [client 158.158.112.230:12236] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeF0q2uQDW686mK3dgEkAQAAAYk"]
[Fri Apr 17 07:45:47.969922 2026] [:error] [pid 34273:tid 34296] [client 158.158.112.230:12184] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeF0q2uQDW686mK3dgEkBAAAAZU"]
[Fri Apr 17 07:45:49.231839 2026] [:error] [pid 51878:tid 51897] [client 158.158.112.230:12235] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/RIP.php"] [unique_id "aeF0rUnQhUtMbw9EsgbR5AAAARE"]
[Fri Apr 17 07:45:50.623048 2026] [:error] [pid 25010:tid 25014] [client 158.158.112.230:12227] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/RIP.php"] [unique_id "aeF0ro-7kkf42RarqQ3uLAAAAUE"]
[Fri Apr 17 07:45:51.670590 2026] [:error] [pid 34273:tid 34289] [client 158.158.112.230:12241] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/RIP.php"] [unique_id "aeF0r2uQDW686mK3dgEkCwAAAY4"]
[Fri Apr 17 07:45:52.363298 2026] [:error] [pid 34273:tid 34288] [client 158.158.112.230:12254] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/RIP.php"] [unique_id "aeF0sGuQDW686mK3dgEkDgAAAY0"]
[Fri Apr 17 07:45:52.983672 2026] [:error] [pid 25010:tid 25024] [client 158.158.112.230:12178] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "aeF0sI-7kkf42RarqQ3uLgAAAUs"]
[Fri Apr 17 07:45:53.591561 2026] [:error] [pid 25010:tid 25019] [client 158.158.112.230:12162] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "aeF0sY-7kkf42RarqQ3uMAAAAUY"]
[Fri Apr 17 07:45:54.173855 2026] [:error] [pid 9152:tid 9191] [client 158.158.112.230:12174] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "aeF0spJYca8I3TNCwIdNcwAAAEE"]
[Fri Apr 17 07:45:54.807885 2026] [:error] [pid 9152:tid 9204] [client 158.158.112.230:12229] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/no18.php"] [unique_id "aeF0spJYca8I3TNCwIdNdgAAAE4"]
[Fri Apr 17 07:45:55.380287 2026] [:error] [pid 9152:tid 9212] [client 158.158.112.230:12187] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeF0s5JYca8I3TNCwIdNeAAAAFY"]
[Fri Apr 17 07:45:56.011659 2026] [:error] [pid 9152:tid 9209] [client 158.158.112.230:12179] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeF0tJJYca8I3TNCwIdNegAAAFM"]
[Fri Apr 17 07:45:56.687881 2026] [:error] [pid 9152:tid 9206] [client 158.158.112.230:12181] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeF0tJJYca8I3TNCwIdNfgAAAFA"]
[Fri Apr 17 07:45:57.330573 2026] [:error] [pid 51878:tid 51884] [client 158.158.112.230:12164] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeF0tUnQhUtMbw9EsgbR6AAAAQQ"]
[Fri Apr 17 07:45:58.061529 2026] [:error] [pid 25010:tid 25016] [client 158.158.112.230:12185] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeF0to-7kkf42RarqQ3uNwAAAUM"]
[Fri Apr 17 07:45:58.636121 2026] [:error] [pid 9152:tid 9203] [client 158.158.112.230:12259] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeF0tpJYca8I3TNCwIdNgwAAAE0"]
[Fri Apr 17 07:45:59.300347 2026] [:error] [pid 25010:tid 25019] [client 158.158.112.230:12212] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeF0t4-7kkf42RarqQ3uQQAAAUY"]
[Fri Apr 17 07:45:59.959035 2026] [:error] [pid 25010:tid 25013] [client 158.158.112.230:12243] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeF0t4-7kkf42RarqQ3uRAAAAUA"]
[Fri Apr 17 07:46:00.681545 2026] [:error] [pid 34273:tid 34288] [client 158.158.112.230:12232] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeF0uGuQDW686mK3dgEkHwAAAY0"]
[Fri Apr 17 07:46:01.232482 2026] [:error] [pid 9151:tid 9179] [client 158.158.112.230:12113] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeF0uchTVuRPkua22vTN2QAAABI"]
[Fri Apr 17 07:46:01.863008 2026] [:error] [pid 34273:tid 34287] [client 158.158.112.230:12268] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeF0uWuQDW686mK3dgEkIwAAAYw"]
[Fri Apr 17 07:46:02.619839 2026] [:error] [pid 9151:tid 9177] [client 158.158.112.230:12231] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeF0ushTVuRPkua22vTN2wAAABA"]
[Fri Apr 17 07:46:03.688885 2026] [:error] [pid 9151:tid 9166] [client 158.158.112.230:12275] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeF0u8hTVuRPkua22vTN3wAAAAU"]
[Fri Apr 17 07:46:04.748312 2026] [:error] [pid 9151:tid 9163] [client 158.158.112.230:12107] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeF0vMhTVuRPkua22vTN5QAAAAI"]
[Fri Apr 17 07:46:05.557057 2026] [:error] [pid 9153:tid 9222] [client 158.158.112.230:12188] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeF0veMHGxkTZX3c45dj0wAAAIQ"]
[Fri Apr 17 07:46:06.096622 2026] [:error] [pid 34273:tid 34279] [client 158.158.112.230:12215] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeF0vmuQDW686mK3dgEkLQAAAYQ"]
[Fri Apr 17 07:46:06.666057 2026] [:error] [pid 9152:tid 9200] [client 158.158.112.230:12168] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeF0vpJYca8I3TNCwIdNkgAAAEo"]
[Fri Apr 17 07:46:07.320282 2026] [:error] [pid 25010:tid 25017] [client 158.158.112.230:12246] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeF0v4-7kkf42RarqQ3uSgAAAUQ"]
[Fri Apr 17 07:46:08.125597 2026] [:error] [pid 34273:tid 34289] [client 158.158.112.230:12264] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeF0wGuQDW686mK3dgEkMQAAAY4"]
[Fri Apr 17 07:46:08.688362 2026] [:error] [pid 25010:tid 25022] [client 158.158.112.230:12283] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeF0wI-7kkf42RarqQ3uTQAAAUk"]
[Fri Apr 17 07:46:09.167846 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12189] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeF0wWuQDW686mK3dgEkNwAAAZg"]
[Fri Apr 17 07:46:09.696154 2026] [:error] [pid 34273:tid 34286] [client 158.158.112.230:12266] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeF0wWuQDW686mK3dgEkOQAAAYs"]
[Fri Apr 17 07:46:10.280682 2026] [:error] [pid 25010:tid 25030] [client 158.158.112.230:12190] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeF0wo-7kkf42RarqQ3uTgAAAVE"]
[Fri Apr 17 07:46:11.344037 2026] [:error] [pid 25010:tid 25034] [client 158.158.112.230:12240] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeF0w4-7kkf42RarqQ3uUgAAAVU"]
[Fri Apr 17 07:46:12.287145 2026] [:error] [pid 9263:tid 9274] [client 158.158.112.230:12120] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeF0xBP68VyHNvj1e55G8AAAAMk"]
[Fri Apr 17 07:46:12.873384 2026] [:error] [pid 25010:tid 25028] [client 158.158.112.230:12173] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeF0xI-7kkf42RarqQ3uVgAAAU8"]
[Fri Apr 17 07:46:13.539686 2026] [:error] [pid 9152:tid 9201] [client 158.158.112.230:12192] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeF0xZJYca8I3TNCwIdNmwAAAEs"]
[Fri Apr 17 07:46:14.697802 2026] [:error] [pid 9152:tid 9200] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Fri Apr 17 07:46:14.940818 2026] [:error] [pid 9152:tid 9192] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Fri Apr 17 07:46:15.188971 2026] [:error] [pid 9152:tid 9197] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Fri Apr 17 07:46:15.449875 2026] [:error] [pid 9152:tid 9198] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Fri Apr 17 07:46:15.709065 2026] [:error] [pid 9152:tid 9190] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Fri Apr 17 07:46:15.952839 2026] [:error] [pid 9152:tid 9204] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Fri Apr 17 07:46:16.197895 2026] [:error] [pid 9152:tid 9207] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Fri Apr 17 07:46:16.457477 2026] [:error] [pid 9152:tid 9206] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/wxeyc.php
[Fri Apr 17 07:46:16.742654 2026] [:error] [pid 9152:tid 9199] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Fri Apr 17 07:46:16.991190 2026] [:error] [pid 9152:tid 9203] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri Apr 17 07:46:17.271580 2026] [:error] [pid 9152:tid 9192] [client 158.158.112.230:12128] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Fri Apr 17 07:46:17.510882 2026] [:error] [pid 9152:tid 9201] [client 158.158.112.230:12128] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeF0yZJYca8I3TNCwIdNuQAAAEs"]
[Fri Apr 17 07:46:18.144382 2026] [:error] [pid 9152:tid 9197] [client 158.158.112.230:12261] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeF0ypJYca8I3TNCwIdNugAAAEc"]
[Fri Apr 17 07:46:19.071118 2026] [:error] [pid 9151:tid 9170] [client 158.158.112.230:12276] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeF0y8hTVuRPkua22vTN8AAAAAk"]
[Fri Apr 17 07:46:19.801799 2026] [:error] [pid 9152:tid 9194] [client 158.158.112.230:12270] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeF0y5JYca8I3TNCwIdNwwAAAEQ"]
[Fri Apr 17 07:46:20.378291 2026] [:error] [pid 25010:tid 25029] [client 158.158.112.230:12257] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sde.php"] [unique_id "aeF0zI-7kkf42RarqQ3uYwAAAVA"]
[Fri Apr 17 07:46:21.026440 2026] [:error] [pid 9263:tid 9283] [client 158.158.112.230:12233] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sde.php"] [unique_id "aeF0zRP68VyHNvj1e55G9QAAANI"]
[Fri Apr 17 07:46:21.618883 2026] [:error] [pid 51878:tid 51901] [client 158.158.112.230:12176] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sde.php"] [unique_id "aeF0zUnQhUtMbw9EsgbR9wAAARU"]
[Fri Apr 17 07:46:22.516568 2026] [:error] [pid 9153:tid 9221] [client 158.158.112.230:12170] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sde.php"] [unique_id "aeF0zuMHGxkTZX3c45dj3gAAAIM"]
[Fri Apr 17 07:46:23.066304 2026] [:error] [pid 9152:tid 9204] [client 158.158.112.230:12055] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpb.php"] [unique_id "aeF0z5JYca8I3TNCwIdNzQAAAE4"]
[Fri Apr 17 07:46:23.856407 2026] [:error] [pid 34273:tid 34287] [client 158.158.112.230:12199] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpb.php"] [unique_id "aeF0z2uQDW686mK3dgEkVgAAAYw"]
[Fri Apr 17 07:46:24.511965 2026] [:error] [pid 51878:tid 51881] [client 158.158.112.230:12193] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpb.php"] [unique_id "aeF00EnQhUtMbw9EsgbR-QAAAQE"]
[Fri Apr 17 07:46:25.099941 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12273] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpb.php"] [unique_id "aeF00WuQDW686mK3dgEkWwAAAZg"]
[Fri Apr 17 07:46:25.982319 2026] [:error] [pid 9152:tid 9214] [client 158.158.112.230:12160] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeF00ZJYca8I3TNCwIdN0QAAAFg"]
[Fri Apr 17 07:46:26.730341 2026] [:error] [pid 9151:tid 9180] [client 158.158.112.230:12214] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeF00shTVuRPkua22vTN9gAAABM"]
[Fri Apr 17 07:46:27.596890 2026] [:error] [pid 25010:tid 25017] [client 158.158.112.230:12105] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeF004-7kkf42RarqQ3ufwAAAUQ"]
[Fri Apr 17 07:46:28.934537 2026] [:error] [pid 25010:tid 25020] [client 158.158.112.230:12272] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeF01I-7kkf42RarqQ3uhAAAAUc"]
[Fri Apr 17 07:46:29.553178 2026] [:error] [pid 9153:tid 9222] [client 158.158.112.230:12263] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeF01eMHGxkTZX3c45dj5QAAAIQ"]
[Fri Apr 17 07:46:30.240344 2026] [:error] [pid 25010:tid 25033] [client 158.158.112.230:12255] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeF01o-7kkf42RarqQ3ujAAAAVQ"]
[Fri Apr 17 07:46:31.232196 2026] [:error] [pid 9152:tid 9193] [client 158.158.112.230:12250] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeF015JYca8I3TNCwIdN4wAAAEM"]
[Fri Apr 17 07:46:31.830073 2026] [:error] [pid 9153:tid 9231] [client 158.158.112.230:12137] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeF01-MHGxkTZX3c45dj5gAAAI0"]
[Fri Apr 17 07:46:32.378856 2026] [:error] [pid 51878:tid 51885] [client 158.158.112.230:12222] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeF02EnQhUtMbw9EsgbR_wAAAQU"]
[Fri Apr 17 07:46:33.207060 2026] [:error] [pid 9153:tid 9226] [client 158.158.112.230:12248] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeF02eMHGxkTZX3c45dj5wAAAIg"]
[Fri Apr 17 07:46:33.913710 2026] [:error] [pid 9152:tid 9204] [client 158.158.112.230:12183] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeF02ZJYca8I3TNCwIdN8QAAAE4"]
[Fri Apr 17 07:46:34.424548 2026] [:error] [pid 9152:tid 9212] [client 158.158.112.230:12043] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeF02pJYca8I3TNCwIdN9wAAAFY"]
[Fri Apr 17 07:46:34.910441 2026] [:error] [pid 9152:tid 9206] [client 158.158.112.230:12109] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeF02pJYca8I3TNCwIdN-AAAAFA"]
[Fri Apr 17 07:46:35.436604 2026] [:error] [pid 9151:tid 9174] [client 158.158.112.230:12256] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeF028hTVuRPkua22vTOAwAAAA0"]
[Fri Apr 17 07:46:36.056614 2026] [:error] [pid 25010:tid 25029] [client 158.158.112.230:12108] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeF03I-7kkf42RarqQ3ukwAAAVA"]
[Fri Apr 17 07:46:36.557138 2026] [:error] [pid 34273:tid 34280] [client 158.158.112.230:12209] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "aeF03GuQDW686mK3dgEkYQAAAYU"]
[Fri Apr 17 07:46:37.077669 2026] [:error] [pid 34273:tid 34285] [client 158.158.112.230:12135] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeF03WuQDW686mK3dgEkZQAAAYo"]
[Fri Apr 17 07:46:37.696773 2026] [:error] [pid 9152:tid 9197] [client 158.158.112.230:12251] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeF03ZJYca8I3TNCwIdOAAAAAEc"]
[Fri Apr 17 07:46:38.561908 2026] [:error] [pid 9152:tid 9193] [client 158.158.112.230:12201] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeF03pJYca8I3TNCwIdOBAAAAEM"]
[Fri Apr 17 07:46:39.711651 2026] [:error] [pid 9153:tid 9223] [client 158.158.112.230:12056] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeF03-MHGxkTZX3c45dj6QAAAIU"]
[Fri Apr 17 07:46:40.951181 2026] [:error] [pid 9152:tid 9196] [client 158.158.112.230:12252] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lb.php"] [unique_id "aeF04JJYca8I3TNCwIdODgAAAEY"]
[Fri Apr 17 07:46:42.034338 2026] [:error] [pid 25010:tid 25018] [client 158.158.112.230:12127] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lb.php"] [unique_id "aeF04o-7kkf42RarqQ3ulgAAAUU"]
[Fri Apr 17 07:46:42.666739 2026] [:error] [pid 25010:tid 25025] [client 158.158.112.230:12142] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lb.php"] [unique_id "aeF04o-7kkf42RarqQ3umAAAAUw"]
[Fri Apr 17 07:46:43.218744 2026] [:error] [pid 9152:tid 9190] [client 158.158.112.230:12221] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lb.php"] [unique_id "aeF045JYca8I3TNCwIdOGwAAAEA"]
[Fri Apr 17 07:46:43.956308 2026] [:error] [pid 51878:tid 51880] [client 158.158.112.230:12144] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aeF040nQhUtMbw9EsgbSCQAAAQA"]
[Fri Apr 17 07:46:44.550468 2026] [:error] [pid 25010:tid 25021] [client 158.158.112.230:12198] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aeF05I-7kkf42RarqQ3umQAAAUg"]
[Fri Apr 17 07:46:45.113015 2026] [:error] [pid 25010:tid 25028] [client 158.158.112.230:12249] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aeF05Y-7kkf42RarqQ3ungAAAU8"]
[Fri Apr 17 07:46:45.629697 2026] [:error] [pid 9152:tid 9207] [client 158.158.112.230:12100] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aeF05ZJYca8I3TNCwIdOIwAAAFE"]
[Fri Apr 17 07:46:46.226126 2026] [:error] [pid 51878:tid 51891] [client 158.158.112.230:12196] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "aeF05knQhUtMbw9EsgbSDgAAAQs"]
[Fri Apr 17 07:46:46.936692 2026] [:error] [pid 25010:tid 25027] [client 158.158.112.230:12104] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "aeF05o-7kkf42RarqQ3uogAAAU4"]
[Fri Apr 17 07:46:47.606005 2026] [:error] [pid 9151:tid 9179] [client 158.158.112.230:12129] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "aeF058hTVuRPkua22vTODgAAABI"]
[Fri Apr 17 07:46:48.110321 2026] [:error] [pid 9151:tid 9173] [client 158.158.112.230:12050] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/menu.php"] [unique_id "aeF06MhTVuRPkua22vTOEAAAAAw"]
[Fri Apr 17 07:46:48.689707 2026] [:error] [pid 9153:tid 9233] [client 158.158.112.230:12194] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeF06OMHGxkTZX3c45dj7AAAAI8"]
[Fri Apr 17 07:46:49.183434 2026] [:error] [pid 51878:tid 51894] [client 158.158.112.230:12203] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeF06UnQhUtMbw9EsgbSFQAAAQ4"]
[Fri Apr 17 07:46:49.678555 2026] [:error] [pid 25010:tid 25026] [client 158.158.112.230:12133] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeF06Y-7kkf42RarqQ3upQAAAU0"]
[Fri Apr 17 07:46:50.214918 2026] [:error] [pid 34273:tid 34276] [client 158.158.112.230:12223] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "aeF06muQDW686mK3dgEkbQAAAYE"]
[Fri Apr 17 07:46:50.878167 2026] [:error] [pid 9152:tid 9211] [client 158.158.112.230:12202] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeF06pJYca8I3TNCwIdOJwAAAFU"]
[Fri Apr 17 07:46:51.760635 2026] [:error] [pid 9263:tid 9279] [client 158.158.112.230:12157] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeF06xP68VyHNvj1e55HBwAAAM4"]
[Fri Apr 17 07:46:52.503702 2026] [:error] [pid 9152:tid 9198] [client 158.158.112.230:12146] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeF07JJYca8I3TNCwIdOLQAAAEg"]
[Fri Apr 17 07:46:53.302380 2026] [:error] [pid 9153:tid 9238] [client 158.158.112.230:12032] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeF07eMHGxkTZX3c45dj9QAAAJQ"]
[Fri Apr 17 07:46:54.044824 2026] [:error] [pid 34273:tid 34296] [client 158.158.112.230:12110] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeF07muQDW686mK3dgEkdAAAAZU"]
[Fri Apr 17 07:46:55.001691 2026] [:error] [pid 9151:tid 9161] [client 158.158.112.230:12117] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeF078hTVuRPkua22vTOGgAAAAA"]
[Fri Apr 17 07:46:55.821326 2026] [:error] [pid 34273:tid 34275] [client 158.158.112.230:12211] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeF072uQDW686mK3dgEkdwAAAYA"]
[Fri Apr 17 07:46:56.646462 2026] [:error] [pid 51878:tid 51891] [client 158.158.112.230:12122] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeF08EnQhUtMbw9EsgbSIAAAAQs"]
[Fri Apr 17 07:46:57.299573 2026] [:error] [pid 9263:tid 9275] [client 158.158.112.230:12163] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeF08RP68VyHNvj1e55HDQAAAMo"]
[Fri Apr 17 07:46:58.105857 2026] [:error] [pid 25010:tid 25031] [client 158.158.112.230:12118] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeF08o-7kkf42RarqQ3uswAAAVI"]
[Fri Apr 17 07:46:58.709702 2026] [:error] [pid 9152:tid 9205] [client 158.158.112.230:12204] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeF08pJYca8I3TNCwIdONgAAAE8"]
[Fri Apr 17 07:46:59.394043 2026] [:error] [pid 25010:tid 25020] [client 158.158.112.230:12149] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "aeF084-7kkf42RarqQ3uugAAAUc"]
[Fri Apr 17 07:46:59.945825 2026] [:error] [pid 25010:tid 25018] [client 158.158.112.230:12124] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeF084-7kkf42RarqQ3uvQAAAUU"]
[Fri Apr 17 07:47:00.600437 2026] [:error] [pid 51878:tid 51895] [client 158.158.112.230:12155] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeF09EnQhUtMbw9EsgbSKQAAAQ8"]
[Fri Apr 17 07:47:01.323177 2026] [:error] [pid 9153:tid 9233] [client 158.158.112.230:12205] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeF09eMHGxkTZX3c45dkAQAAAI8"]
[Fri Apr 17 07:47:02.174998 2026] [:error] [pid 9152:tid 9201] [client 158.158.112.230:12040] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeF09pJYca8I3TNCwIdOQQAAAEs"]
[Fri Apr 17 07:47:03.147439 2026] [:error] [pid 9263:tid 9270] [client 158.158.112.230:12161] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeF09xP68VyHNvj1e55HEwAAAMU"]
[Fri Apr 17 07:47:03.797439 2026] [:error] [pid 9152:tid 9212] [client 158.158.112.230:12169] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeF095JYca8I3TNCwIdORQAAAFY"]
[Fri Apr 17 07:47:04.924299 2026] [:error] [pid 9152:tid 9213] [client 158.158.112.230:12216] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeF0-JJYca8I3TNCwIdOSgAAAFc"]
[Fri Apr 17 07:47:05.777428 2026] [:error] [pid 34273:tid 34290] [client 158.158.112.230:12156] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeF0-WuQDW686mK3dgEkgAAAAY8"]
[Fri Apr 17 07:47:06.358459 2026] [:error] [pid 25010:tid 25017] [client 158.158.112.230:12123] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeF0-o-7kkf42RarqQ3uyAAAAUQ"]
[Fri Apr 17 07:47:07.164828 2026] [:error] [pid 25010:tid 25015] [client 158.158.112.230:12267] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeF0-4-7kkf42RarqQ3uywAAAUI"]
[Fri Apr 17 07:47:07.753379 2026] [:error] [pid 9263:tid 9284] [client 158.158.112.230:12102] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeF0-xP68VyHNvj1e55HGQAAANM"]
[Fri Apr 17 07:47:08.359319 2026] [:error] [pid 34273:tid 34288] [client 158.158.112.230:12195] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeF0_GuQDW686mK3dgEkgwAAAY0"]
[Fri Apr 17 07:47:09.018293 2026] [:error] [pid 25010:tid 25033] [client 158.158.112.230:12097] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeF0_Y-7kkf42RarqQ3u0QAAAVQ"]
[Fri Apr 17 07:47:09.818984 2026] [:error] [pid 34273:tid 34297] [client 158.158.112.230:11972] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeF0_WuQDW686mK3dgEkhgAAAZY"]
[Fri Apr 17 07:47:10.403857 2026] [:error] [pid 9153:tid 9237] [client 158.158.112.230:12207] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeF0_uMHGxkTZX3c45dkBQAAAJM"]
[Fri Apr 17 07:47:11.031617 2026] [:error] [pid 9153:tid 9221] [client 158.158.112.230:12139] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeF0_-MHGxkTZX3c45dkCAAAAIM"]
[Fri Apr 17 07:47:11.749732 2026] [:error] [pid 9153:tid 9218] [client 158.158.112.230:12277] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeF0_-MHGxkTZX3c45dkDAAAAIA"]
[Fri Apr 17 07:47:12.795131 2026] [:error] [pid 51878:tid 51892] [client 158.158.112.230:12044] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeF1AEnQhUtMbw9EsgbSNQAAAQw"]
[Fri Apr 17 07:47:13.589818 2026] [:error] [pid 9151:tid 9161] [client 158.158.112.230:12103] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeF1AchTVuRPkua22vTOKQAAAAA"]
[Fri Apr 17 07:47:15.783468 2026] [:error] [pid 34273:tid 34290] [client 158.158.112.230:12287] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeF1A2uQDW686mK3dgEkjwAAAY8"]
[Fri Apr 17 07:47:18.942375 2026] [:error] [pid 34273:tid 34294] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/hanyatersenyum.php
[Fri Apr 17 07:47:19.194291 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php
[Fri Apr 17 07:47:19.457525 2026] [:error] [pid 34273:tid 34282] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/upll22.php
[Fri Apr 17 07:47:19.735360 2026] [:error] [pid 34273:tid 34295] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 17 07:47:20.145924 2026] [:error] [pid 34273:tid 34298] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Fri Apr 17 07:47:20.414951 2026] [:error] [pid 34273:tid 34279] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Fri Apr 17 07:47:20.663031 2026] [:error] [pid 34273:tid 34278] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/pm90apbv3v5fvgkbguyiCdefault.php
[Fri Apr 17 07:47:20.912058 2026] [:error] [pid 34273:tid 34285] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Fri Apr 17 07:47:21.159531 2026] [:error] [pid 34273:tid 34297] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Fri Apr 17 07:47:21.408197 2026] [:error] [pid 34273:tid 34291] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/6xBAm3vODE05BSzkJZRAws.php
[Fri Apr 17 07:47:21.650666 2026] [:error] [pid 34273:tid 34293] [client 158.158.112.230:12094] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 17 07:47:22.065511 2026] [:error] [pid 34273:tid 34275] [client 158.158.112.230:12094] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1CmuQDW686mK3dgEkrQAAAYA"]
[Fri Apr 17 07:47:22.840055 2026] [:error] [pid 51878:tid 51897] [client 158.158.112.230:12112] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1CknQhUtMbw9EsgbSOQAAARE"]
[Fri Apr 17 07:47:23.613601 2026] [:error] [pid 34273:tid 34279] [client 158.158.112.230:12126] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1C2uQDW686mK3dgEkswAAAYQ"]
[Fri Apr 17 07:47:24.169192 2026] [:error] [pid 51878:tid 51880] [client 158.158.112.230:12153] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1DEnQhUtMbw9EsgbSPAAAAQA"]
[Fri Apr 17 07:47:24.721150 2026] [:error] [pid 34273:tid 34289] [client 158.158.112.230:12138] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeF1DGuQDW686mK3dgEktgAAAY4"]
[Fri Apr 17 07:47:25.621508 2026] [:error] [pid 34273:tid 34283] [client 158.158.112.230:12054] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeF1DWuQDW686mK3dgEkvgAAAYg"]
[Fri Apr 17 07:47:26.294597 2026] [:error] [pid 34273:tid 34295] [client 158.158.112.230:12065] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeF1DmuQDW686mK3dgEkwwAAAZQ"]
[Fri Apr 17 07:47:26.802753 2026] [:error] [pid 9263:tid 9285] [client 158.158.112.230:12172] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeF1DhP68VyHNvj1e55HKgAAANQ"]
[Fri Apr 17 07:47:27.514562 2026] [:error] [pid 51878:tid 51887] [client 158.158.112.230:12076] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeF1D0nQhUtMbw9EsgbSPQAAAQc"]
[Fri Apr 17 07:47:28.101145 2026] [:error] [pid 34273:tid 34289] [client 158.158.112.230:12182] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeF1EGuQDW686mK3dgEkywAAAY4"]
[Fri Apr 17 07:47:29.518348 2026] [:error] [pid 9152:tid 9198] [client 158.158.112.230:12049] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeF1EZJYca8I3TNCwIdOWwAAAEg"]
[Fri Apr 17 07:47:30.206889 2026] [:error] [pid 34273:tid 34287] [client 158.158.112.230:12099] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeF1EmuQDW686mK3dgEkzwAAAYw"]
[Fri Apr 17 07:47:31.157715 2026] [:error] [pid 9153:tid 9219] [client 158.158.112.230:12079] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeF1E-MHGxkTZX3c45dkFQAAAIE"]
[Fri Apr 17 07:47:32.020900 2026] [:error] [pid 25010:tid 25021] [client 158.158.112.230:12213] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeF1FI-7kkf42RarqQ3u7wAAAUg"]
[Fri Apr 17 07:47:32.763404 2026] [:error] [pid 9151:tid 9163] [client 158.158.112.230:12228] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeF1FMhTVuRPkua22vTOLgAAAAI"]
[Fri Apr 17 07:47:33.835468 2026] [:error] [pid 9152:tid 9208] [client 158.158.112.230:12265] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeF1FZJYca8I3TNCwIdOYgAAAFI"]
[Fri Apr 17 07:47:34.583960 2026] [:error] [pid 34273:tid 34279] [client 158.158.112.230:12061] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aeF1FmuQDW686mK3dgEk1QAAAYQ"]
[Fri Apr 17 07:47:36.040610 2026] [:error] [pid 25010:tid 25020] [client 158.158.112.230:12141] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aeF1GI-7kkf42RarqQ3u9QAAAUc"]
[Fri Apr 17 07:47:37.148682 2026] [:error] [pid 9263:tid 9265] [client 158.158.112.230:12071] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aeF1GRP68VyHNvj1e55HOgAAAMA"]
[Fri Apr 17 07:47:38.332850 2026] [:error] [pid 34273:tid 34292] [client 158.158.112.230:11971] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aeF1GmuQDW686mK3dgEk1wAAAZE"]
[Fri Apr 17 07:47:41.807462 2026] [:error] [pid 9152:tid 9209] [client 158.158.112.230:11978] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeF1HZJYca8I3TNCwIdOZwAAAFM"]
[Fri Apr 17 07:47:50.766471 2026] [:error] [pid 51878:tid 51896] [client 158.158.112.230:12091] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeF1JknQhUtMbw9EsgbSWwAAARA"]
[Fri Apr 17 07:47:52.995118 2026] [:error] [pid 9153:tid 9225] [client 158.158.112.230:12186] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeF1KOMHGxkTZX3c45dkKgAAAIc"]
[Fri Apr 17 07:47:53.900668 2026] [:error] [pid 9152:tid 9200] [client 158.158.112.230:11993] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeF1KZJYca8I3TNCwIdOdgAAAEo"]
[Fri Apr 17 07:47:54.690539 2026] [:error] [pid 9152:tid 9192] [client 158.158.112.230:12038] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeF1KpJYca8I3TNCwIdOegAAAEI"]
[Fri Apr 17 07:47:55.779179 2026] [:error] [pid 25010:tid 25029] [client 158.158.112.230:12130] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeF1K4-7kkf42RarqQ3vHAAAAVA"]
[Fri Apr 17 07:47:56.382561 2026] [:error] [pid 9153:tid 9220] [client 158.158.112.230:12158] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeF1LOMHGxkTZX3c45dkMAAAAII"]
[Fri Apr 17 07:47:57.102703 2026] [:error] [pid 9153:tid 9223] [client 158.158.112.230:12206] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeF1LeMHGxkTZX3c45dkNAAAAIU"]
[Fri Apr 17 07:47:57.676451 2026] [:error] [pid 9153:tid 9227] [client 158.158.112.230:12039] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1LeMHGxkTZX3c45dkNQAAAIk"]
[Fri Apr 17 07:47:58.200974 2026] [:error] [pid 9152:tid 9210] [client 158.158.112.230:12098] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1LpJYca8I3TNCwIdOiAAAAFQ"]
[Fri Apr 17 07:47:58.732140 2026] [:error] [pid 9152:tid 9202] [client 158.158.112.230:12131] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1LpJYca8I3TNCwIdOjwAAAEw"]
[Fri Apr 17 07:47:59.475167 2026] [:error] [pid 25010:tid 25023] [client 158.158.112.230:12152] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1L4-7kkf42RarqQ3vHwAAAUo"]
[Fri Apr 17 07:48:00.433597 2026] [:error] [pid 34273:tid 34283] [client 158.158.112.230:12145] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aeF1MGuQDW686mK3dgElIQAAAYg"]
[Fri Apr 17 07:48:01.047244 2026] [:error] [pid 34273:tid 34289] [client 158.158.112.230:11984] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aeF1MWuQDW686mK3dgElJQAAAY4"]
[Fri Apr 17 07:48:01.572818 2026] [:error] [pid 9153:tid 9229] [client 158.158.112.230:12197] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aeF1MeMHGxkTZX3c45dkPQAAAIs"]
[Fri Apr 17 07:48:02.141000 2026] [:error] [pid 34273:tid 34278] [client 158.158.112.230:12058] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aeF1MmuQDW686mK3dgElKgAAAYM"]
[Fri Apr 17 07:48:02.784592 2026] [:error] [pid 9152:tid 9213] [client 158.158.112.230:12154] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1MpJYca8I3TNCwIdOlwAAAFc"]
[Fri Apr 17 07:48:03.343086 2026] [:error] [pid 34273:tid 34280] [client 158.158.112.230:12111] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1M2uQDW686mK3dgElLwAAAYU"]
[Fri Apr 17 07:48:04.111254 2026] [:error] [pid 51878:tid 51887] [client 158.158.112.230:12121] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1NEnQhUtMbw9EsgbSYwAAAQc"]
[Fri Apr 17 07:48:05.233196 2026] [:error] [pid 9263:tid 9273] [client 158.158.112.230:12115] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1NRP68VyHNvj1e55HWQAAAMg"]
[Fri Apr 17 07:48:06.357246 2026] [:error] [pid 34273:tid 34283] [client 158.158.112.230:12070] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeF1NmuQDW686mK3dgElMwAAAYg"]
[Fri Apr 17 07:48:07.471455 2026] [:error] [pid 34273:tid 34284] [client 158.158.112.230:12041] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeF1N2uQDW686mK3dgElOwAAAYk"]
[Fri Apr 17 07:48:08.390931 2026] [:error] [pid 9153:tid 9234] [client 158.158.112.230:12053] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeF1OOMHGxkTZX3c45dkQQAAAJA"]
[Fri Apr 17 07:48:09.163523 2026] [:error] [pid 9151:tid 9161] [client 158.158.112.230:12051] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeF1OchTVuRPkua22vTOTAAAAAA"]
[Fri Apr 17 07:48:10.117538 2026] [:error] [pid 9152:tid 9199] [client 158.158.112.230:12090] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeF1OpJYca8I3TNCwIdOpgAAAEk"]
[Fri Apr 17 07:48:11.217484 2026] [:error] [pid 9152:tid 9197] [client 158.158.112.230:12151] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeF1O5JYca8I3TNCwIdOrAAAAEc"]
[Fri Apr 17 07:48:12.245251 2026] [:error] [pid 9263:tid 9285] [client 158.158.112.230:11983] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeF1PBP68VyHNvj1e55HbAAAANQ"]
[Fri Apr 17 07:48:13.224547 2026] [:error] [pid 51878:tid 51881] [client 158.158.112.230:12132] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeF1PUnQhUtMbw9EsgbSagAAAQE"]
[Fri Apr 17 07:48:14.045370 2026] [:error] [pid 34273:tid 34294] [client 158.158.112.230:12082] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aeF1PmuQDW686mK3dgElSgAAAZM"]
[Fri Apr 17 07:48:15.882897 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12258] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aeF1P2uQDW686mK3dgElTwAAAZg"]
[Fri Apr 17 07:48:16.463080 2026] [:error] [pid 9263:tid 9275] [client 158.158.112.230:12086] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aeF1QBP68VyHNvj1e55HcwAAAMo"]
[Fri Apr 17 07:48:17.567499 2026] [:error] [pid 9263:tid 9268] [client 158.158.112.230:12020] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aeF1QRP68VyHNvj1e55HdQAAAMM"]
[Fri Apr 17 07:48:18.558971 2026] [:error] [pid 9152:tid 9191] [client 158.158.112.230:12035] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aeF1QpJYca8I3TNCwIdOvAAAAEE"]
[Fri Apr 17 07:48:19.696605 2026] [:error] [pid 9152:tid 9208] [client 158.158.112.230:12112] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aeF1Q5JYca8I3TNCwIdOwQAAAFI"]
[Fri Apr 17 07:48:20.399760 2026] [:error] [pid 34273:tid 34285] [client 158.158.112.230:12013] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aeF1RGuQDW686mK3dgElcAAAAYo"]
[Fri Apr 17 07:48:21.251474 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 17 07:48:21.513673 2026] [:error] [pid 34273:tid 34288] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 17 07:48:21.758574 2026] [:error] [pid 34273:tid 34287] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 17 07:48:22.004487 2026] [:error] [pid 34273:tid 34285] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Fri Apr 17 07:48:22.465192 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 17 07:48:22.707608 2026] [:error] [pid 34273:tid 34293] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 17 07:48:23.000166 2026] [:error] [pid 34273:tid 34298] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Apr 17 07:48:23.259056 2026] [:error] [pid 34273:tid 34294] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Apr 17 07:48:23.506525 2026] [:error] [pid 34273:tid 34276] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 17 07:48:23.749940 2026] [:error] [pid 34273:tid 34285] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Fri Apr 17 07:48:23.992315 2026] [:error] [pid 34273:tid 34291] [client 158.158.112.230:12059] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 17 07:48:24.478946 2026] [:error] [pid 34273:tid 34277] [client 158.158.112.230:12059] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeF1SGuQDW686mK3dgEllwAAAYI"]
[Fri Apr 17 07:48:25.220645 2026] [:error] [pid 25010:tid 25036] [client 158.158.112.230:12205] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeF1SY-7kkf42RarqQ3vLAAAAVc"]
[Fri Apr 17 07:48:25.872366 2026] [:error] [pid 34273:tid 34293] [client 158.158.112.230:12219] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeF1SWuQDW686mK3dgElnwAAAZI"]
[Fri Apr 17 07:48:26.527436 2026] [:error] [pid 9151:tid 9181] [client 158.158.112.230:12052] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeF1SshTVuRPkua22vTOUgAAABQ"]
[Fri Apr 17 07:48:27.318589 2026] [:error] [pid 34273:tid 34282] [client 158.158.112.230:12045] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib.php"] [unique_id "aeF1S2uQDW686mK3dgElpwAAAYc"]
[Fri Apr 17 07:48:27.918415 2026] [:error] [pid 34273:tid 34292] [client 158.158.112.230:12210] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib.php"] [unique_id "aeF1S2uQDW686mK3dgElqwAAAZE"]
[Fri Apr 17 07:48:28.551045 2026] [:error] [pid 9152:tid 9204] [client 158.158.112.230:12074] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib.php"] [unique_id "aeF1TJJYca8I3TNCwIdOxwAAAE4"]
[Fri Apr 17 07:48:29.047592 2026] [:error] [pid 9153:tid 9228] [client 158.158.112.230:12247] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib.php"] [unique_id "aeF1TeMHGxkTZX3c45dkYgAAAIo"]
[Fri Apr 17 07:48:29.611991 2026] [:error] [pid 9151:tid 9184] [client 158.158.112.230:12106] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeF1TchTVuRPkua22vTOVAAAABc"]
[Fri Apr 17 07:48:30.187710 2026] [:error] [pid 9153:tid 9227] [client 158.158.112.230:12140] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeF1TuMHGxkTZX3c45dkaAAAAIk"]
[Fri Apr 17 07:48:30.728892 2026] [:error] [pid 9153:tid 9233] [client 158.158.112.230:12147] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeF1TuMHGxkTZX3c45dkawAAAI8"]
[Fri Apr 17 07:48:31.308855 2026] [:error] [pid 9153:tid 9242] [client 158.158.112.230:12200] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeF1T-MHGxkTZX3c45dkbAAAAJg"]
[Fri Apr 17 07:48:31.957548 2026] [:error] [pid 9152:tid 9207] [client 158.158.112.230:11988] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1T5JYca8I3TNCwIdOyQAAAFE"]
[Fri Apr 17 07:48:32.601004 2026] [:error] [pid 9152:tid 9211] [client 158.158.112.230:12070] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1UJJYca8I3TNCwIdOywAAAFU"]
[Fri Apr 17 07:48:33.095852 2026] [:error] [pid 9153:tid 9219] [client 158.158.112.230:12046] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1UeMHGxkTZX3c45dkdAAAAIE"]
[Fri Apr 17 07:48:33.802287 2026] [:error] [pid 9263:tid 9273] [client 158.158.112.230:11982] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aeF1URP68VyHNvj1e55HewAAAMg"]
[Fri Apr 17 07:48:34.353895 2026] [:error] [pid 25010:tid 25023] [client 158.158.112.230:12244] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeF1Uo-7kkf42RarqQ3vMQAAAUo"]
[Fri Apr 17 07:48:35.039779 2026] [:error] [pid 34273:tid 34293] [client 158.158.112.230:12068] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeF1U2uQDW686mK3dgElzAAAAZI"]
[Fri Apr 17 07:48:35.840030 2026] [:error] [pid 9151:tid 9170] [client 158.158.112.230:11968] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeF1U8hTVuRPkua22vTOWQAAAAk"]
[Fri Apr 17 07:48:36.401883 2026] [:error] [pid 9151:tid 9177] [client 158.158.112.230:12096] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeF1VMhTVuRPkua22vTOWgAAABA"]
[Fri Apr 17 07:48:37.213901 2026] [:error] [pid 9153:tid 9223] [client 158.158.112.230:12119] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeF1VeMHGxkTZX3c45dkegAAAIU"]
[Fri Apr 17 07:48:37.879401 2026] [:error] [pid 9263:tid 9281] [client 158.158.112.230:12078] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeF1VRP68VyHNvj1e55HgAAAANA"]
[Fri Apr 17 07:48:38.530177 2026] [:error] [pid 9263:tid 9285] [client 158.158.112.230:12134] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeF1VhP68VyHNvj1e55HggAAANQ"]
[Fri Apr 17 07:48:39.067872 2026] [:error] [pid 51878:tid 51904] [client 158.158.112.230:12004] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeF1V0nQhUtMbw9EsgbSegAAARg"]
[Fri Apr 17 07:48:39.635658 2026] [:error] [pid 25010:tid 25034] [client 158.158.112.230:12085] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1V4-7kkf42RarqQ3vNAAAAVU"]
[Fri Apr 17 07:48:40.344639 2026] [:error] [pid 9151:tid 9172] [client 158.158.112.230:12217] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1WMhTVuRPkua22vTOXwAAAAs"]
[Fri Apr 17 07:48:41.002396 2026] [:error] [pid 9263:tid 9269] [client 158.158.112.230:12238] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1WRP68VyHNvj1e55HhgAAAMQ"]
[Fri Apr 17 07:48:41.761364 2026] [:error] [pid 9151:tid 9168] [client 158.158.112.230:11996] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeF1WchTVuRPkua22vTOYQAAAAc"]
[Fri Apr 17 07:48:43.175734 2026] [:error] [pid 9152:tid 9192] [client 158.158.112.230:12125] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeF1W5JYca8I3TNCwIdO0AAAAEI"]
[Fri Apr 17 07:48:44.511948 2026] [:error] [pid 25010:tid 25013] [client 158.158.112.230:12048] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeF1XI-7kkf42RarqQ3vOQAAAUA"]
[Fri Apr 17 07:48:45.346066 2026] [:error] [pid 9152:tid 9201] [client 158.158.112.230:11980] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeF1XZJYca8I3TNCwIdO1AAAAEs"]
[Fri Apr 17 07:48:45.996406 2026] [:error] [pid 34273:tid 34285] [client 158.158.112.230:12114] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeF1XWuQDW686mK3dgEl7wAAAYo"]
[Fri Apr 17 07:48:46.766519 2026] [:error] [pid 9152:tid 9213] [client 158.158.112.230:12057] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeF1XpJYca8I3TNCwIdO1QAAAFc"]
[Fri Apr 17 07:48:47.460007 2026] [:error] [pid 9153:tid 9225] [client 158.158.112.230:12092] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeF1X-MHGxkTZX3c45dkgAAAAIc"]
[Fri Apr 17 07:48:48.474703 2026] [:error] [pid 9152:tid 9195] [client 158.158.112.230:12116] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeF1YJJYca8I3TNCwIdO1gAAAEU"]
[Fri Apr 17 07:48:49.613103 2026] [:error] [pid 51878:tid 51890] [client 158.158.112.230:12150] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeF1YUnQhUtMbw9EsgbSfgAAAQo"]
[Fri Apr 17 07:48:50.678629 2026] [:error] [pid 25010:tid 25031] [client 158.158.112.230:12087] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeF1Yo-7kkf42RarqQ3vPgAAAVI"]
[Fri Apr 17 07:48:52.145914 2026] [:error] [pid 34273:tid 34292] [client 158.158.112.230:12069] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeF1ZGuQDW686mK3dgEl8gAAAZE"]
[Fri Apr 17 07:48:53.157226 2026] [:error] [pid 9151:tid 9171] [client 158.158.112.230:12024] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeF1ZchTVuRPkua22vTOZQAAAAo"]
[Fri Apr 17 07:48:54.293988 2026] [:error] [pid 9151:tid 9163] [client 158.158.112.230:12073] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeF1ZshTVuRPkua22vTOZgAAAAI"]
[Fri Apr 17 07:48:55.248872 2026] [:error] [pid 25010:tid 25027] [client 158.158.112.230:11989] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeF1Z4-7kkf42RarqQ3vQAAAAU4"]
[Fri Apr 17 07:48:55.971450 2026] [:error] [pid 51878:tid 51895] [client 158.158.112.230:12062] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeF1Z0nQhUtMbw9EsgbShgAAAQ8"]
[Fri Apr 17 07:48:56.990488 2026] [:error] [pid 25010:tid 25023] [client 158.158.112.230:12286] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeF1aI-7kkf42RarqQ3vQwAAAUo"]
[Fri Apr 17 07:48:58.266864 2026] [:error] [pid 25010:tid 25025] [client 158.158.112.230:12010] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeF1ao-7kkf42RarqQ3vSAAAAUw"]
[Fri Apr 17 07:48:59.371546 2026] [:error] [pid 9151:tid 9184] [client 158.158.112.230:12001] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aeF1a8hTVuRPkua22vTOagAAABc"]
[Fri Apr 17 07:49:00.156267 2026] [:error] [pid 9151:tid 9167] [client 158.158.112.230:12143] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aeF1bMhTVuRPkua22vTObAAAAAY"]
[Fri Apr 17 07:49:00.902506 2026] [:error] [pid 9152:tid 9203] [client 158.158.112.230:11926] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aeF1bJJYca8I3TNCwIdO4QAAAE0"]
[Fri Apr 17 07:49:02.464375 2026] [:error] [pid 9151:tid 9179] [client 158.158.112.230:12218] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/torsa1.php"] [unique_id "aeF1bshTVuRPkua22vTOcgAAABI"]
[Fri Apr 17 07:49:03.009038 2026] [:error] [pid 25010:tid 25032] [client 158.158.112.230:11969] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeF1b4-7kkf42RarqQ3vTwAAAVM"]
[Fri Apr 17 07:49:03.595559 2026] [:error] [pid 34273:tid 34286] [client 158.158.112.230:11999] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeF1b2uQDW686mK3dgEl9QAAAYs"]
[Fri Apr 17 07:49:04.704702 2026] [:error] [pid 9151:tid 9174] [client 158.158.112.230:12009] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeF1cMhTVuRPkua22vTOdQAAAA0"]
[Fri Apr 17 07:49:05.380306 2026] [:error] [pid 34273:tid 34295] [client 158.158.112.230:12282] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeF1cWuQDW686mK3dgEl-wAAAZQ"]
[Fri Apr 17 07:49:06.007662 2026] [:error] [pid 9152:tid 9202] [client 158.158.112.230:12066] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeF1cpJYca8I3TNCwIdO4wAAAEw"]
[Fri Apr 17 07:49:07.150626 2026] [:error] [pid 9263:tid 9276] [client 158.158.112.230:12055] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeF1cxP68VyHNvj1e55HkQAAAMs"]
[Fri Apr 17 07:49:08.622226 2026] [:error] [pid 9263:tid 9265] [client 158.158.112.230:12000] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeF1dBP68VyHNvj1e55HlAAAAMA"]
[Fri Apr 17 07:49:09.677621 2026] [:error] [pid 9153:tid 9234] [client 158.158.112.230:12042] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeF1deMHGxkTZX3c45dkkAAAAJA"]
[Fri Apr 17 07:49:10.470779 2026] [:error] [pid 34273:tid 34290] [client 158.158.112.230:12075] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF1dmuQDW686mK3dgEmAwAAAY8"]
[Fri Apr 17 07:49:11.142218 2026] [:error] [pid 34273:tid 34299] [client 158.158.112.230:12015] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF1d2uQDW686mK3dgEmBQAAAZg"]
[Fri Apr 17 07:49:12.099824 2026] [:error] [pid 51878:tid 51885] [client 158.158.112.230:12015] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF1eEnQhUtMbw9EsgbSjAAAAQU"]
[Fri Apr 17 07:49:13.114640 2026] [:error] [pid 51878:tid 51891] [client 158.158.112.230:11987] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeF1eUnQhUtMbw9EsgbSjQAAAQs"]
[Fri Apr 17 07:49:14.028764 2026] [:error] [pid 34273:tid 34297] [client 158.158.112.230:12021] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeF1emuQDW686mK3dgEmCAAAAZY"]
[Fri Apr 17 07:49:14.691687 2026] [:error] [pid 34273:tid 34291] [client 158.158.112.230:12036] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeF1emuQDW686mK3dgEmCwAAAZA"]
[Fri Apr 17 07:49:15.299086 2026] [:error] [pid 34273:tid 34280] [client 158.158.112.230:12121] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeF1e2uQDW686mK3dgEmDwAAAYU"]
[Fri Apr 17 07:49:15.888862 2026] [:error] [pid 9153:tid 9225] [client 158.158.112.230:12029] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeF1e-MHGxkTZX3c45dklAAAAIc"]
[Fri Apr 17 07:49:16.512023 2026] [:error] [pid 51878:tid 51892] [client 158.158.112.230:12159] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeF1fEnQhUtMbw9EsgbSkAAAAQw"]
[Fri Apr 17 07:49:17.134480 2026] [:error] [pid 9153:tid 9218] [client 158.158.112.230:11905] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeF1feMHGxkTZX3c45dklgAAAIA"]
[Fri Apr 17 07:49:17.723393 2026] [:error] [pid 9153:tid 9221] [client 158.158.112.230:11912] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeF1feMHGxkTZX3c45dkmgAAAIM"]
[Fri Apr 17 07:49:18.280517 2026] [:error] [pid 34273:tid 34293] [client 158.158.112.230:11990] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeF1fmuQDW686mK3dgEmFQAAAZI"]
[Fri Apr 17 07:49:18.985232 2026] [:error] [pid 34273:tid 34295] [client 158.158.112.230:11943] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new3.php"] [unique_id "aeF1fmuQDW686mK3dgEmGAAAAZQ"]
[Fri Apr 17 07:49:19.663084 2026] [:error] [pid 9153:tid 9231] [client 158.158.112.230:11940] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new3.php"] [unique_id "aeF1f-MHGxkTZX3c45dkoQAAAI0"]
[Fri Apr 17 07:49:20.340595 2026] [:error] [pid 34273:tid 34294] [client 158.158.112.230:12011] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new3.php"] [unique_id "aeF1gGuQDW686mK3dgEmHAAAAZM"]
[Fri Apr 17 07:49:21.205749 2026] [:error] [pid 25010:tid 25019] [client 158.158.112.230:12030] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new3.php"] [unique_id "aeF1gY-7kkf42RarqQ3vVQAAAUY"]
[Fri Apr 17 07:49:22.088839 2026] [:error] [pid 34273:tid 34282] [client 158.158.112.230:12093] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nw.php"] [unique_id "aeF1gmuQDW686mK3dgEmHgAAAYc"]
[Fri Apr 17 07:49:22.785806 2026] [:error] [pid 25010:tid 25017] [client 158.158.112.230:12016] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/nw.php"] [unique_id "aeF1go-7kkf42RarqQ3vWAAAAUQ"]
[Fri Apr 17 07:49:23.393254 2026] [:error] [pid 9153:tid 9241] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Fri Apr 17 07:49:23.637932 2026] [:error] [pid 9153:tid 9218] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 17 07:49:23.893752 2026] [:error] [pid 9153:tid 9219] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 17 07:49:24.136207 2026] [:error] [pid 9153:tid 9236] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Fri Apr 17 07:49:24.378119 2026] [:error] [pid 9153:tid 9228] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Fri Apr 17 07:49:24.672933 2026] [:error] [pid 9153:tid 9238] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Fri Apr 17 07:49:25.666627 2026] [:error] [pid 9153:tid 9237] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 17 07:49:25.911533 2026] [:error] [pid 9153:tid 9231] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 17 07:49:26.169956 2026] [:error] [pid 9153:tid 9239] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Apr 17 07:49:26.526888 2026] [:error] [pid 9153:tid 9234] [client 158.158.112.230:12047] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Fri Apr 17 07:49:26.766423 2026] [:error] [pid 9153:tid 9226] [client 158.158.112.230:12047] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1huMHGxkTZX3c45dksgAAAIg"]
[Fri Apr 17 07:49:29.135139 2026] [:error] [pid 9152:tid 9200] [client 158.158.112.230:12166] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1iZJYca8I3TNCwIdPAgAAAEo"]
[Fri Apr 17 07:49:30.703431 2026] [:error] [pid 9152:tid 9194] [client 158.158.112.230:12063] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1ipJYca8I3TNCwIdPBwAAAEQ"]
[Fri Apr 17 07:49:32.656522 2026] [:error] [pid 34273:tid 34291] [client 158.158.112.230:12148] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/motu.php"] [unique_id "aeF1jGuQDW686mK3dgEmNAAAAZA"]
[Fri Apr 17 07:49:33.465427 2026] [:error] [pid 9152:tid 9199] [client 158.158.112.230:12284] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeF1jZJYca8I3TNCwIdPDgAAAEk"]
[Fri Apr 17 07:49:34.511188 2026] [:error] [pid 9152:tid 9197] [client 158.158.112.230:12080] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeF1jpJYca8I3TNCwIdPEAAAAEc"]
[Fri Apr 17 07:49:35.679905 2026] [:error] [pid 9263:tid 9281] [client 158.158.112.230:11934] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeF1jxP68VyHNvj1e55HpQAAANA"]
[Fri Apr 17 07:49:37.036828 2026] [:error] [pid 9153:tid 9225] [client 158.158.112.230:12014] [client 158.158.112.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeF1keMHGxkTZX3c45dktwAAAIc"]
[Fri Apr 17 08:44:11.099085 2026] [:error] [pid 9153:tid 9228] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Fri Apr 17 08:44:11.342442 2026] [:error] [pid 9153:tid 9222] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 17 08:44:11.588494 2026] [:error] [pid 9153:tid 9235] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Fri Apr 17 08:44:11.832308 2026] [:error] [pid 9153:tid 9237] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Fri Apr 17 08:44:12.081019 2026] [:error] [pid 9153:tid 9223] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/str_replace.php
[Fri Apr 17 08:44:12.332377 2026] [:error] [pid 9153:tid 9240] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/Hd.php
[Fri Apr 17 08:44:12.575168 2026] [:error] [pid 9153:tid 9233] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/maint.php
[Fri Apr 17 08:44:12.820491 2026] [:error] [pid 9153:tid 9238] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/nosaSq.php
[Fri Apr 17 08:44:13.066634 2026] [:error] [pid 9153:tid 9224] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-oembed-beta.php
[Fri Apr 17 08:44:13.309084 2026] [:error] [pid 9153:tid 9231] [client 158.158.41.185:20605] File does not exist: /usr/local/apache/htdocs/suspended-page/tentang_rmol.php
[Fri Apr 17 08:44:13.551999 2026] [:error] [pid 9153:tid 9230] [client 158.158.41.185:20605] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aeGCXeMHGxkTZX3c45eBYgAAAIw"]
[Fri Apr 17 08:44:14.035547 2026] [:error] [pid 25010:tid 25022] [client 158.158.41.185:9140] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aeGCXo-7kkf42RarqQ0HHQAAAUk"]
[Fri Apr 17 08:44:14.563051 2026] [:error] [pid 9151:tid 9183] [client 158.158.41.185:1388] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aeGCXshTVuRPkua22vTgLQAAABY"]
[Fri Apr 17 08:44:15.042682 2026] [:error] [pid 51878:tid 51883] [client 158.158.41.185:14020] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "aeGCX0nQhUtMbw9EsgbhwAAAAQM"]
[Fri Apr 17 08:44:15.539417 2026] [:error] [pid 9153:tid 9239] [client 158.158.41.185:14484] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeGCX-MHGxkTZX3c45eBawAAAJU"]
[Fri Apr 17 08:44:16.028860 2026] [:error] [pid 51878:tid 51881] [client 158.158.41.185:26524] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeGCYEnQhUtMbw9EsgbhxQAAAQE"]
[Fri Apr 17 08:44:16.515104 2026] [:error] [pid 9152:tid 9212] [client 158.158.41.185:1385] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeGCYJJYca8I3TNCwId6EgAAAFY"]
[Fri Apr 17 08:44:17.002669 2026] [:error] [pid 51878:tid 51882] [client 158.158.41.185:1403] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/block-template-utils.php"] [unique_id "aeGCYUnQhUtMbw9EsgbhxwAAAQI"]
[Fri Apr 17 08:44:17.482374 2026] [:error] [pid 34273:tid 34277] [client 158.158.41.185:1081] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/14.php"] [unique_id "aeGCYWuQDW686mK3dgFRzwAAAYI"]
[Fri Apr 17 08:44:17.960311 2026] [:error] [pid 9152:tid 9200] [client 158.158.41.185:9626] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/14.php"] [unique_id "aeGCYZJYca8I3TNCwId6IgAAAEo"]
[Fri Apr 17 08:44:18.449380 2026] [:error] [pid 9151:tid 9185] [client 158.158.41.185:14036] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/14.php"] [unique_id "aeGCYshTVuRPkua22vTgOAAAABg"]
[Fri Apr 17 08:44:18.970737 2026] [:error] [pid 9152:tid 9195] [client 158.158.41.185:26132] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/14.php"] [unique_id "aeGCYpJYca8I3TNCwId6JwAAAEU"]
[Fri Apr 17 08:44:19.449781 2026] [:error] [pid 9153:tid 9232] [client 158.158.41.185:1398] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeGCY-MHGxkTZX3c45eBcAAAAI4"]
[Fri Apr 17 08:44:19.947199 2026] [:error] [pid 9152:tid 9193] [client 158.158.41.185:16023] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeGCY5JYca8I3TNCwId6KQAAAEM"]
[Fri Apr 17 08:44:20.451930 2026] [:error] [pid 34273:tid 34276] [client 158.158.41.185:16051] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeGCZGuQDW686mK3dgFR2QAAAYE"]
[Fri Apr 17 08:44:20.962881 2026] [:error] [pid 9151:tid 9184] [client 158.158.41.185:16470] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update_with_pics.php"] [unique_id "aeGCZMhTVuRPkua22vTgRAAAABc"]
[Fri Apr 17 08:44:21.454714 2026] [:error] [pid 9152:tid 9203] [client 158.158.41.185:25634] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date-object.php"] [unique_id "aeGCZZJYca8I3TNCwId6LwAAAE0"]
[Fri Apr 17 08:44:21.943698 2026] [:error] [pid 34273:tid 34289] [client 158.158.41.185:16025] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date-object.php"] [unique_id "aeGCZWuQDW686mK3dgFR3wAAAY4"]
[Fri Apr 17 08:44:22.431398 2026] [:error] [pid 51878:tid 51900] [client 158.158.41.185:26174] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date-object.php"] [unique_id "aeGCZknQhUtMbw9Esgbh1QAAARQ"]
[Fri Apr 17 08:44:22.913432 2026] [:error] [pid 51878:tid 51894] [client 158.158.41.185:15301] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/date-object.php"] [unique_id "aeGCZknQhUtMbw9Esgbh2wAAAQ4"]
[Fri Apr 17 08:44:23.394772 2026] [:error] [pid 9153:tid 9233] [client 158.158.41.185:9142] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w-1.php"] [unique_id "aeGCZ-MHGxkTZX3c45eBgAAAAI8"]
[Fri Apr 17 08:44:23.885894 2026] [:error] [pid 9152:tid 9191] [client 158.158.41.185:8639] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w-1.php"] [unique_id "aeGCZ5JYca8I3TNCwId6SAAAAEE"]
[Fri Apr 17 08:44:24.388553 2026] [:error] [pid 9151:tid 9161] [client 158.158.41.185:10128] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w-1.php"] [unique_id "aeGCaMhTVuRPkua22vTgTwAAAAA"]
[Fri Apr 17 08:44:24.875156 2026] [:error] [pid 51878:tid 51885] [client 158.158.41.185:9913] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w-1.php"] [unique_id "aeGCaEnQhUtMbw9Esgbh4wAAAQU"]
[Fri Apr 17 08:44:25.364857 2026] [:error] [pid 51878:tid 51902] [client 158.158.41.185:12755] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aeGCaUnQhUtMbw9Esgbh5gAAARY"]
[Fri Apr 17 08:44:25.849691 2026] [:error] [pid 51878:tid 51900] [client 158.158.41.185:15335] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aeGCaUnQhUtMbw9Esgbh6wAAARQ"]
[Fri Apr 17 08:44:26.331559 2026] [:error] [pid 25010:tid 25036] [client 158.158.41.185:9100] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aeGCao-7kkf42RarqQ0HOwAAAVc"]
[Fri Apr 17 08:44:26.838205 2026] [:error] [pid 25010:tid 25021] [client 158.158.41.185:1084] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "aeGCao-7kkf42RarqQ0HPQAAAUg"]
[Fri Apr 17 08:44:27.324640 2026] [:error] [pid 34273:tid 34281] [client 158.158.41.185:10427] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbh.php"] [unique_id "aeGCa2uQDW686mK3dgFR-AAAAYY"]
[Fri Apr 17 08:44:27.832561 2026] [:error] [pid 34273:tid 34280] [client 158.158.41.185:14490] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbh.php"] [unique_id "aeGCa2uQDW686mK3dgFR-QAAAYU"]
[Fri Apr 17 08:44:28.332677 2026] [:error] [pid 34273:tid 34299] [client 158.158.41.185:9871] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbh.php"] [unique_id "aeGCbGuQDW686mK3dgFR-wAAAZg"]
[Fri Apr 17 08:44:28.845634 2026] [:error] [pid 25010:tid 25026] [client 158.158.41.185:9892] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bbh.php"] [unique_id "aeGCbI-7kkf42RarqQ0HQAAAAU0"]
[Fri Apr 17 08:44:29.354690 2026] [:error] [pid 9152:tid 9213] [client 158.158.41.185:9619] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aeGCbZJYca8I3TNCwId6UAAAAFc"]
[Fri Apr 17 08:44:29.888645 2026] [:error] [pid 25010:tid 25016] [client 158.158.41.185:12736] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aeGCbY-7kkf42RarqQ0HQQAAAUM"]
[Fri Apr 17 08:44:30.383312 2026] [:error] [pid 34273:tid 34284] [client 158.158.41.185:26545] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aeGCbmuQDW686mK3dgFSBAAAAYk"]
[Fri Apr 17 08:44:30.968742 2026] [:error] [pid 9263:tid 9285] [client 158.158.41.185:15275] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gool.php"] [unique_id "aeGCbhP68VyHNvj1e55WXwAAANQ"]
[Fri Apr 17 08:44:31.478658 2026] [:error] [pid 25010:tid 25014] [client 158.158.41.185:10403] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeGCb4-7kkf42RarqQ0HRAAAAUE"]
[Fri Apr 17 08:44:31.998720 2026] [:error] [pid 25010:tid 25025] [client 158.158.41.185:17393] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeGCb4-7kkf42RarqQ0HRgAAAUw"]
[Fri Apr 17 08:44:32.489704 2026] [:error] [pid 9152:tid 9192] [client 158.158.41.185:8590] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeGCcJJYca8I3TNCwId6WgAAAEI"]
[Fri Apr 17 08:44:32.975982 2026] [:error] [pid 9152:tid 9210] [client 158.158.41.185:1085] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeGCcJJYca8I3TNCwId6XQAAAFQ"]
[Fri Apr 17 08:44:33.477872 2026] [:error] [pid 9151:tid 9164] [client 158.158.41.185:52118] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeGCcchTVuRPkua22vTgagAAAAM"]
[Fri Apr 17 08:44:34.018732 2026] [:error] [pid 34273:tid 34283] [client 158.158.41.185:25628] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeGCcmuQDW686mK3dgFSHQAAAYg"]
[Fri Apr 17 08:44:34.586808 2026] [:error] [pid 34273:tid 34286] [client 158.158.41.185:52146] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeGCcmuQDW686mK3dgFSIgAAAYs"]
[Fri Apr 17 08:44:35.166451 2026] [:error] [pid 9151:tid 9176] [client 158.158.41.185:26512] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeGCc8hTVuRPkua22vTgbAAAAA8"]
[Fri Apr 17 08:44:35.742280 2026] [:error] [pid 25010:tid 25035] [client 158.158.41.185:8620] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeGCc4-7kkf42RarqQ0HUAAAAVY"]
[Fri Apr 17 08:44:36.273701 2026] [:error] [pid 25010:tid 25016] [client 158.158.41.185:16007] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeGCdI-7kkf42RarqQ0HVgAAAUM"]
[Fri Apr 17 08:44:36.818762 2026] [:error] [pid 25010:tid 25024] [client 158.158.41.185:8619] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeGCdI-7kkf42RarqQ0HWwAAAUs"]
[Fri Apr 17 08:44:37.369308 2026] [:error] [pid 9151:tid 9173] [client 158.158.41.185:26497] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeGCdchTVuRPkua22vTgcgAAAAw"]
[Fri Apr 17 08:44:37.934449 2026] [:error] [pid 34273:tid 34278] [client 158.158.41.185:8608] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpputty.php"] [unique_id "aeGCdWuQDW686mK3dgFSQAAAAYM"]
[Fri Apr 17 08:44:38.499301 2026] [:error] [pid 34273:tid 34285] [client 158.158.41.185:9121] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpputty.php"] [unique_id "aeGCdmuQDW686mK3dgFSSgAAAYo"]
[Fri Apr 17 08:44:39.027898 2026] [:error] [pid 9152:tid 9198] [client 158.158.41.185:17377] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpputty.php"] [unique_id "aeGCd5JYca8I3TNCwId6dQAAAEg"]
[Fri Apr 17 08:44:39.558467 2026] [:error] [pid 25010:tid 25014] [client 158.158.41.185:9662] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpputty.php"] [unique_id "aeGCd4-7kkf42RarqQ0HagAAAUE"]
[Fri Apr 17 08:44:40.040619 2026] [:error] [pid 9152:tid 9192] [client 158.158.41.185:10381] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dodo.php"] [unique_id "aeGCeJJYca8I3TNCwId6fgAAAEI"]
[Fri Apr 17 08:44:40.567757 2026] [:error] [pid 9151:tid 9177] [client 158.158.41.185:9650] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dodo.php"] [unique_id "aeGCeMhTVuRPkua22vTgfwAAABA"]
[Fri Apr 17 08:44:41.092966 2026] [:error] [pid 9152:tid 9201] [client 158.158.41.185:26514] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dodo.php"] [unique_id "aeGCeZJYca8I3TNCwId6iAAAAEs"]
[Fri Apr 17 08:44:41.609981 2026] [:error] [pid 9151:tid 9168] [client 158.158.41.185:9634] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dodo.php"] [unique_id "aeGCechTVuRPkua22vTggQAAAAc"]
[Fri Apr 17 08:44:42.134977 2026] [:error] [pid 9152:tid 9207] [client 158.158.41.185:21606] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeGCepJYca8I3TNCwId6kQAAAFE"]
[Fri Apr 17 08:44:42.732406 2026] [:error] [pid 9153:tid 9226] [client 158.158.41.185:15244] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeGCeuMHGxkTZX3c45eBkwAAAIg"]
[Fri Apr 17 08:44:43.243696 2026] [:error] [pid 9152:tid 9196] [client 158.158.41.185:25616] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeGCe5JYca8I3TNCwId6lgAAAEY"]
[Fri Apr 17 08:44:43.736671 2026] [:error] [pid 9153:tid 9218] [client 158.158.41.185:26553] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-post-data.php"] [unique_id "aeGCe-MHGxkTZX3c45eBnAAAAIA"]
[Fri Apr 17 08:44:44.214122 2026] [:error] [pid 9152:tid 9214] [client 158.158.41.185:21603] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeGCfJJYca8I3TNCwId6ngAAAFg"]
[Fri Apr 17 08:44:44.739077 2026] [:error] [pid 9153:tid 9240] [client 158.158.41.185:26552] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeGCfOMHGxkTZX3c45eBoQAAAJY"]
[Fri Apr 17 08:44:45.226324 2026] [:error] [pid 34273:tid 34289] [client 158.158.41.185:26531] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeGCfWuQDW686mK3dgFSXAAAAY4"]
[Fri Apr 17 08:44:45.743782 2026] [:error] [pid 9151:tid 9174] [client 158.158.41.185:9112] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeGCfchTVuRPkua22vTgiwAAAA0"]
[Fri Apr 17 08:44:46.230029 2026] [:error] [pid 9153:tid 9229] [client 158.158.41.185:10704] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Marvins.php"] [unique_id "aeGCfuMHGxkTZX3c45eBpAAAAIs"]
[Fri Apr 17 08:44:46.709834 2026] [:error] [pid 9153:tid 9224] [client 158.158.41.185:10750] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Marvins.php"] [unique_id "aeGCfuMHGxkTZX3c45eBpQAAAIY"]
[Fri Apr 17 08:44:47.189387 2026] [:error] [pid 34273:tid 34299] [client 158.158.41.185:12743] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Marvins.php"] [unique_id "aeGCf2uQDW686mK3dgFSXwAAAZg"]
[Fri Apr 17 08:44:47.674850 2026] [:error] [pid 34273:tid 34288] [client 158.158.41.185:52155] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Marvins.php"] [unique_id "aeGCf2uQDW686mK3dgFSYQAAAY0"]
[Fri Apr 17 08:44:48.154936 2026] [:error] [pid 34273:tid 34283] [client 158.158.41.185:52143] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aeGCgGuQDW686mK3dgFSYwAAAYg"]
[Fri Apr 17 08:44:48.634839 2026] [:error] [pid 9152:tid 9195] [client 158.158.41.185:8659] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aeGCgJJYca8I3TNCwId60QAAAEU"]
[Fri Apr 17 08:44:49.117618 2026] [:error] [pid 9152:tid 9196] [client 158.158.41.185:52109] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aeGCgZJYca8I3TNCwId62AAAAEY"]
[Fri Apr 17 08:44:49.608491 2026] [:error] [pid 9153:tid 9224] [client 158.158.41.185:10743] [client 158.158.41.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/astab.php"] [unique_id "aeGCgeMHGxkTZX3c45eBtwAAAIY"]
[Fri Apr 17 09:17:17.019991 2026] [:error] [pid 9153:tid 9224] [client 117.33.163.216:42318] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeGKHeMHGxkTZX3c45eURwAAAIY"]
[Fri Apr 17 12:49:16.427046 2026] [:error] [pid 51878:tid 51887] [client 88.151.33.7:26630] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aeG7zEnQhUtMbw9EsgYIcAAAAQc"]
[Fri Apr 17 12:49:16.488814 2026] [:error] [pid 9153:tid 9231] [client 88.151.33.7:26668] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aeG7zOMHGxkTZX3c45fELwAAAI0"]
[Fri Apr 17 12:49:16.488963 2026] [:error] [pid 34273:tid 34280] [client 88.151.33.7:26664] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aeG7zGuQDW686mK3dgG03wAAAYU"]
[Fri Apr 17 12:49:16.490971 2026] [:error] [pid 51878:tid 51893] [client 88.151.33.7:26670] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aeG7zEnQhUtMbw9EsgYIcQAAAQ0"]
[Fri Apr 17 12:49:16.492651 2026] [:error] [pid 51878:tid 51898] [client 88.151.33.7:26686] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/laravel/.env"] [unique_id "aeG7zEnQhUtMbw9EsgYIcgAAARI"]
[Fri Apr 17 12:49:16.492964 2026] [:error] [pid 9153:tid 9236] [client 88.151.33.7:26674] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aeG7zOMHGxkTZX3c45fEMAAAAJI"]
[Fri Apr 17 12:49:16.493646 2026] [:error] [pid 51878:tid 51894] [client 88.151.33.7:26642] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aeG7zEnQhUtMbw9EsgYIcwAAAQ4"]
[Fri Apr 17 12:49:16.494491 2026] [:error] [pid 61523:tid 61553] [client 88.151.33.7:26650] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aeG7zMOaH-Pgc7WEf4MpIwAAAcs"]
[Fri Apr 17 12:49:16.494964 2026] [:error] [pid 51878:tid 51896] [client 88.151.33.7:26678] [client 88.151.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "aeG7zEnQhUtMbw9EsgYIdQAAARA"]
[Fri Apr 17 15:39:19.134854 2026] [:error] [pid 9151:tid 9185] [client 106.54.62.156:49608] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeHjp8hTVuRPkua22vQa1gAAABg"]
[Fri Apr 17 16:53:31.975941 2026] [:error] [pid 34273:tid 34276] [client 43.157.179.227:38980] [client 43.157.179.227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeH1C2uQDW686mK3dgHa4AAAAYE"]
[Fri Apr 17 18:46:09.419135 2026] [:error] [pid 9263:tid 9282] [client 43.128.67.187:35052] [client 43.128.67.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeIPcRP68VyHNvj1e54SYQAAANE"]
[Fri Apr 17 20:00:00.562464 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Apr 17 20:00:00.813739 2026] [:error] [pid 51878:tid 51882] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Fri Apr 17 20:00:01.065389 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Fri Apr 17 20:00:01.329622 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Fri Apr 17 20:00:01.604354 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/nDHHF.php
[Fri Apr 17 20:00:01.973062 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/xmff.php
[Fri Apr 17 20:00:02.227498 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/ktfow.php
[Fri Apr 17 20:00:02.479475 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/stun.php
[Fri Apr 17 20:00:02.731981 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Fri Apr 17 20:00:02.982922 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:57304] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Fri Apr 17 20:00:03.242106 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:57304] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeIgw0nQhUtMbw9EsgZyZgAAARY"]
[Fri Apr 17 20:00:04.562177 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:57297] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeIgxEnQhUtMbw9EsgZybAAAARc"]
[Fri Apr 17 20:00:05.290430 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:42671] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeIgxUnQhUtMbw9EsgZybwAAARg"]
[Fri Apr 17 20:00:06.740122 2026] [:error] [pid 51878:tid 51885] [client 74.234.56.128:59919] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeIgxknQhUtMbw9EsgZycwAAAQU"]
[Fri Apr 17 20:00:08.460446 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:63911] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aeIgyEnQhUtMbw9EsgZyewAAARc"]
[Fri Apr 17 20:00:09.714181 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:57299] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aeIgyUnQhUtMbw9EsgZyiAAAARY"]
[Fri Apr 17 20:00:10.833899 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:57341] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aeIgyknQhUtMbw9EsgZyjQAAARc"]
[Fri Apr 17 20:00:12.192569 2026] [:error] [pid 34273:tid 34283] [client 74.234.56.128:63886] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/C1.php"] [unique_id "aeIgzGuQDW686mK3dgH49QAAAYg"]
[Fri Apr 17 20:00:13.353121 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:60347] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b35.php"] [unique_id "aeIgzcOaH-Pgc7WEf4OzegAAAcY"]
[Fri Apr 17 20:00:14.444314 2026] [:error] [pid 51878:tid 51885] [client 74.234.56.128:42670] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b35.php"] [unique_id "aeIgzknQhUtMbw9EsgZymQAAAQU"]
[Fri Apr 17 20:00:15.389075 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:65258] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b35.php"] [unique_id "aeIgz8OaH-Pgc7WEf4OzfAAAAdA"]
[Fri Apr 17 20:00:16.308115 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:59931] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b35.php"] [unique_id "aeIg0BP68VyHNvj1e54lIAAAANE"]
[Fri Apr 17 20:00:17.444950 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:42675] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "aeIg0cOaH-Pgc7WEf4OzfgAAAcA"]
[Fri Apr 17 20:00:18.284849 2026] [:error] [pid 9152:tid 9190] [client 74.234.56.128:62013] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "aeIg0pJYca8I3TNCwIdNyQAAAEA"]
[Fri Apr 17 20:00:18.853983 2026] [:error] [pid 9263:tid 9283] [client 74.234.56.128:45720] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "aeIg0hP68VyHNvj1e54lIQAAANI"]
[Fri Apr 17 20:00:19.644404 2026] [:error] [pid 34273:tid 34275] [client 74.234.56.128:57330] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "aeIg02uQDW686mK3dgH4-AAAAYA"]
[Fri Apr 17 20:00:20.415171 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:25555] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-un.php"] [unique_id "aeIg1JJYca8I3TNCwIdNzQAAAFM"]
[Fri Apr 17 20:00:21.671670 2026] [:error] [pid 34273:tid 34294] [client 74.234.56.128:57303] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-un.php"] [unique_id "aeIg1WuQDW686mK3dgH4-gAAAZM"]
[Fri Apr 17 20:00:22.776077 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:42678] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-un.php"] [unique_id "aeIg1hP68VyHNvj1e54lJQAAAMw"]
[Fri Apr 17 20:00:24.474972 2026] [:error] [pid 51878:tid 51885] [client 74.234.56.128:65230] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-un.php"] [unique_id "aeIg2EnQhUtMbw9EsgZypAAAAQU"]
[Fri Apr 17 20:00:25.705628 2026] [:error] [pid 25010:tid 25014] [client 74.234.56.128:60332] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeIg2Y-7kkf42RarqQ1sRwAAAUE"]
[Fri Apr 17 20:00:26.646955 2026] [:error] [pid 34273:tid 34282] [client 74.234.56.128:61988] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeIg2muQDW686mK3dgH4_AAAAYc"]
[Fri Apr 17 20:00:27.883431 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:57295] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeIg2xP68VyHNvj1e54lJwAAANQ"]
[Fri Apr 17 20:00:28.907025 2026] [:error] [pid 9263:tid 9269] [client 74.234.56.128:57283] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeIg3BP68VyHNvj1e54lKwAAAMQ"]
[Fri Apr 17 20:00:30.032920 2026] [:error] [pid 34273:tid 34291] [client 74.234.56.128:59652] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "aeIg3muQDW686mK3dgH5BAAAAZA"]
[Fri Apr 17 20:00:31.117474 2026] [:error] [pid 34273:tid 34295] [client 74.234.56.128:45716] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "aeIg32uQDW686mK3dgH5BgAAAZQ"]
[Fri Apr 17 20:00:31.824906 2026] [:error] [pid 34273:tid 34293] [client 74.234.56.128:63918] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "aeIg32uQDW686mK3dgH5CwAAAZI"]
[Fri Apr 17 20:00:33.603867 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:25570] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "aeIg4cOaH-Pgc7WEf4OzjQAAAdA"]
[Fri Apr 17 20:00:34.622554 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:59947] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aeIg4knQhUtMbw9EsgZytwAAARg"]
[Fri Apr 17 20:00:36.203884 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:42685] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aeIg5EnQhUtMbw9EsgZywQAAARU"]
[Fri Apr 17 20:00:37.444690 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:65260] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aeIg5RP68VyHNvj1e54lMgAAAMc"]
[Fri Apr 17 20:00:38.164603 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:65268] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "aeIg5pJYca8I3TNCwIdN2AAAAFI"]
[Fri Apr 17 20:00:39.206640 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:59925] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeIg58OaH-Pgc7WEf4OzkAAAAdg"]
[Fri Apr 17 20:00:40.015917 2026] [:error] [pid 51878:tid 51886] [client 74.234.56.128:42659] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeIg6EnQhUtMbw9EsgZyxwAAAQY"]
[Fri Apr 17 20:00:41.515642 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:65275] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeIg6UnQhUtMbw9EsgZy0QAAARg"]
[Fri Apr 17 20:00:42.496210 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:25556] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeIg6hP68VyHNvj1e54lOwAAANU"]
[Fri Apr 17 20:00:43.787708 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:65255] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eterezrezt.php"] [unique_id "aeIg60nQhUtMbw9EsgZy1AAAARE"]
[Fri Apr 17 20:00:45.542090 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:59704] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eterezrezt.php"] [unique_id "aeIg7RP68VyHNvj1e54lQwAAAMw"]
[Fri Apr 17 20:00:46.439298 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:60302] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eterezrezt.php"] [unique_id "aeIg7hP68VyHNvj1e54lRgAAAM0"]
[Fri Apr 17 20:00:48.492993 2026] [:error] [pid 51878:tid 51892] [client 74.234.56.128:59701] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eterezrezt.php"] [unique_id "aeIg8EnQhUtMbw9EsgZy2gAAAQw"]
[Fri Apr 17 20:00:50.690773 2026] [:error] [pid 51878:tid 51882] [client 74.234.56.128:60316] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeIg8knQhUtMbw9EsgZy4AAAAQI"]
[Fri Apr 17 20:00:51.540444 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:59944] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeIg88OaH-Pgc7WEf4OzlwAAAc0"]
[Fri Apr 17 20:00:52.273845 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:42662] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeIg9MOaH-Pgc7WEf4OznAAAAdI"]
[Fri Apr 17 20:00:53.155003 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:45735] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeIg9cOaH-Pgc7WEf4OzowAAAcU"]
[Fri Apr 17 20:00:54.039713 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:59661] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeIg9knQhUtMbw9EsgZy5gAAAQA"]
[Fri Apr 17 20:00:54.862711 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:57334] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeIg9pJYca8I3TNCwIdN3wAAAE0"]
[Fri Apr 17 20:00:55.471099 2026] [:error] [pid 9151:tid 9167] [client 74.234.56.128:60327] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeIg98hTVuRPkua22vQ1TQAAAAY"]
[Fri Apr 17 20:00:56.225989 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:25575] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeIg-EnQhUtMbw9EsgZy6wAAAQ8"]
[Fri Apr 17 20:00:56.871930 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:63888] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeIg-OMHGxkTZX3c45f-0QAAAIk"]
[Fri Apr 17 20:00:57.621653 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:45730] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeIg-UnQhUtMbw9EsgZy7wAAAQk"]
[Fri Apr 17 20:00:58.206889 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:59957] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeIg-knQhUtMbw9EsgZy8gAAARI"]
[Fri Apr 17 20:00:59.412491 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:57308] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeIg-8OaH-Pgc7WEf4OzqwAAAcY"]
[Fri Apr 17 20:01:00.218923 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:25592] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeIg_JJYca8I3TNCwIdN4wAAAFc"]
[Fri Apr 17 20:01:00.817993 2026] [:error] [pid 61523:tid 61558] [client 74.234.56.128:45735] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeIg_MOaH-Pgc7WEf4OzrAAAAdA"]
[Fri Apr 17 20:01:01.534873 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:59695] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeIg_WuQDW686mK3dgH5FwAAAYU"]
[Fri Apr 17 20:01:02.312581 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Fri Apr 17 20:01:02.592070 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Fri Apr 17 20:01:02.867725 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Apr 17 20:01:03.132329 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Fri Apr 17 20:01:03.464821 2026] [:error] [pid 61523:tid 61550] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Fri Apr 17 20:01:03.729412 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/nwflm.php
[Fri Apr 17 20:01:04.054987 2026] [:error] [pid 61523:tid 61563] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 17 20:01:04.335866 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Fri Apr 17 20:01:04.610377 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Fri Apr 17 20:01:04.875505 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Fri Apr 17 20:01:05.139273 2026] [:error] [pid 61523:tid 61551] [client 74.234.56.128:60309] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Fri Apr 17 20:01:05.400560 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:60309] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeIhAcOaH-Pgc7WEf4OzwgAAAdI"]
[Fri Apr 17 20:01:06.095569 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:59700] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeIhApJYca8I3TNCwIdN5gAAAFg"]
[Fri Apr 17 20:01:06.797285 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:61995] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeIhApJYca8I3TNCwIdN6AAAAFA"]
[Fri Apr 17 20:01:07.341294 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:25597] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "aeIhA8OaH-Pgc7WEf4OzygAAAdY"]
[Fri Apr 17 20:01:07.915949 2026] [:error] [pid 9153:tid 9218] [client 74.234.56.128:65261] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeIhA-MHGxkTZX3c45f-1gAAAIA"]
[Fri Apr 17 20:01:08.625185 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:44696] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeIhBMOaH-Pgc7WEf4OzzgAAAdM"]
[Fri Apr 17 20:01:09.415694 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:42653] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeIhBcOaH-Pgc7WEf4Oz0QAAAcM"]
[Fri Apr 17 20:01:10.431999 2026] [:error] [pid 9152:tid 9192] [client 74.234.56.128:61991] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "aeIhBpJYca8I3TNCwIdN6gAAAEI"]
[Fri Apr 17 20:01:11.198291 2026] [:error] [pid 34273:tid 34286] [client 74.234.56.128:59906] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeIhB2uQDW686mK3dgH5GgAAAYs"]
[Fri Apr 17 20:01:11.903331 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:57342] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeIhB-MHGxkTZX3c45f-3QAAAI4"]
[Fri Apr 17 20:01:12.740948 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:59673] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeIhCJJYca8I3TNCwIdN6wAAAFI"]
[Fri Apr 17 20:01:13.632988 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:57289] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "aeIhCcOaH-Pgc7WEf4Oz2QAAAdY"]
[Fri Apr 17 20:01:15.000385 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:25569] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeIhChP68VyHNvj1e54lXwAAANE"]
[Fri Apr 17 20:01:16.424824 2026] [:error] [pid 9153:tid 9230] [client 74.234.56.128:45697] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeIhDOMHGxkTZX3c45f-4AAAAIw"]
[Fri Apr 17 20:01:17.363982 2026] [:error] [pid 9153:tid 9226] [client 74.234.56.128:60310] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeIhDeMHGxkTZX3c45f-4QAAAIg"]
[Fri Apr 17 20:01:18.265189 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:60300] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeIhDsOaH-Pgc7WEf4Oz4gAAAdI"]
[Fri Apr 17 20:01:19.164026 2026] [:error] [pid 9153:tid 9229] [client 74.234.56.128:60345] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeIhD-MHGxkTZX3c45f-6AAAAIs"]
[Fri Apr 17 20:01:20.003559 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:65249] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeIhEEnQhUtMbw9EsgZzBAAAAQ4"]
[Fri Apr 17 20:01:21.007151 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:45732] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeIhEUnQhUtMbw9EsgZzCAAAAQc"]
[Fri Apr 17 20:01:21.977477 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:62007] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeIhEZJYca8I3TNCwIdN8wAAAEE"]
[Fri Apr 17 20:01:23.303896 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:57282] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeIhE0nQhUtMbw9EsgZzDAAAAQg"]
[Fri Apr 17 20:01:24.399014 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:57313] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeIhFBP68VyHNvj1e54lZQAAAMg"]
[Fri Apr 17 20:01:25.490964 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:60349] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeIhFUnQhUtMbw9EsgZzDwAAAQ8"]
[Fri Apr 17 20:01:26.531088 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:45756] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeIhFknQhUtMbw9EsgZzFAAAARE"]
[Fri Apr 17 20:01:27.089400 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:59681] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeIhF0nQhUtMbw9EsgZzFwAAAQ4"]
[Fri Apr 17 20:01:28.138246 2026] [:error] [pid 51878:tid 51881] [client 74.234.56.128:44727] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeIhGEnQhUtMbw9EsgZzHAAAAQE"]
[Fri Apr 17 20:01:29.007810 2026] [:error] [pid 51878:tid 51886] [client 74.234.56.128:42673] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeIhGUnQhUtMbw9EsgZzHgAAAQY"]
[Fri Apr 17 20:01:29.738154 2026] [:error] [pid 9153:tid 9237] [client 74.234.56.128:42649] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeIhGeMHGxkTZX3c45f-8gAAAJM"]
[Fri Apr 17 20:01:30.443028 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:65221] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeIhGhP68VyHNvj1e54lbQAAAM4"]
[Fri Apr 17 20:01:31.177819 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:25571] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeIhGxP68VyHNvj1e54lcAAAANg"]
[Fri Apr 17 20:01:31.786793 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:25585] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeIhGxP68VyHNvj1e54lcQAAAMc"]
[Fri Apr 17 20:01:32.387756 2026] [:error] [pid 25010:tid 25033] [client 74.234.56.128:42628] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "aeIhHI-7kkf42RarqQ1sXQAAAVQ"]
[Fri Apr 17 20:01:33.122663 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:63919] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeIhHZJYca8I3TNCwIdN_AAAAFI"]
[Fri Apr 17 20:01:33.763686 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:25574] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeIhHZJYca8I3TNCwIdN_QAAAEc"]
[Fri Apr 17 20:01:34.715027 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:59908] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeIhHpJYca8I3TNCwIdN_gAAAEk"]
[Fri Apr 17 20:01:35.393010 2026] [:error] [pid 25010:tid 25026] [client 74.234.56.128:57311] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeIhH4-7kkf42RarqQ1sZgAAAU0"]
[Fri Apr 17 20:01:36.302181 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:45729] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeIhIMOaH-Pgc7WEf4Oz_AAAAc0"]
[Fri Apr 17 20:01:36.854354 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:61980] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeIhIMOaH-Pgc7WEf4O0AwAAAcQ"]
[Fri Apr 17 20:01:37.458643 2026] [:error] [pid 25010:tid 25017] [client 74.234.56.128:63997] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeIhIY-7kkf42RarqQ1sZwAAAUQ"]
[Fri Apr 17 20:01:38.184991 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:47510] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeIhIsOaH-Pgc7WEf4O0DQAAAdg"]
[Fri Apr 17 20:01:39.062028 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:63885] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeIhI8OaH-Pgc7WEf4O0EgAAAcc"]
[Fri Apr 17 20:01:39.802741 2026] [:error] [pid 61523:tid 61543] [client 74.234.56.128:63922] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeIhI8OaH-Pgc7WEf4O0GgAAAcE"]
[Fri Apr 17 20:01:40.989047 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:42666] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeIhJMOaH-Pgc7WEf4O0IQAAAc4"]
[Fri Apr 17 20:01:41.893963 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:59662] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeIhJUnQhUtMbw9EsgZzPwAAARE"]
[Fri Apr 17 20:01:43.047085 2026] [:error] [pid 34273:tid 34287] [client 74.234.56.128:42630] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeIhJ2uQDW686mK3dgH5JwAAAYw"]
[Fri Apr 17 20:01:45.197779 2026] [:error] [pid 51878:tid 51885] [client 74.234.56.128:44694] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeIhKUnQhUtMbw9EsgZzRgAAAQU"]
[Fri Apr 17 20:01:46.810960 2026] [:error] [pid 9153:tid 9242] [client 74.234.56.128:65246] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeIhKuMHGxkTZX3c45f_AwAAAJg"]
[Fri Apr 17 20:01:48.453251 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:45749] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeIhLEnQhUtMbw9EsgZzTAAAARI"]
[Fri Apr 17 20:01:51.742226 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:59697] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeIhL0nQhUtMbw9EsgZzVwAAARc"]
[Fri Apr 17 20:01:55.400637 2026] [:error] [pid 51878:tid 51890] [client 74.234.56.128:60323] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeIhM0nQhUtMbw9EsgZzXgAAAQo"]
[Fri Apr 17 20:01:56.553229 2026] [:error] [pid 9151:tid 9184] [client 74.234.56.128:60312] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeIhNMhTVuRPkua22vQ1agAAABc"]
[Fri Apr 17 20:01:57.972505 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:47526] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeIhNUnQhUtMbw9EsgZzZgAAARI"]
[Fri Apr 17 20:01:59.222028 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:59710] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeIhN8OaH-Pgc7WEf4O0ZgAAAcM"]
[Fri Apr 17 20:02:00.528890 2026] [:error] [pid 9153:tid 9225] [client 74.234.56.128:61959] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeIhOOMHGxkTZX3c45f_CAAAAIc"]
[Fri Apr 17 20:02:02.902709 2026] [:error] [pid 9151:tid 9178] [client 74.234.56.128:25580] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeIhOshTVuRPkua22vQ1bgAAABE"]
[Fri Apr 17 20:02:04.518733 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:63989] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeIhPOMHGxkTZX3c45f_DgAAAI4"]
[Fri Apr 17 20:02:05.493610 2026] [:error] [pid 9153:tid 9233] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Fri Apr 17 20:02:05.748127 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 17 20:02:06.000627 2026] [:error] [pid 9153:tid 9240] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 17 20:02:06.266525 2026] [:error] [pid 9153:tid 9223] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 17 20:02:06.518832 2026] [:error] [pid 9153:tid 9229] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 17 20:02:07.023865 2026] [:error] [pid 9153:tid 9218] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Fri Apr 17 20:02:07.405083 2026] [:error] [pid 9153:tid 9222] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 17 20:02:07.658052 2026] [:error] [pid 9153:tid 9237] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Fri Apr 17 20:02:07.913512 2026] [:error] [pid 9153:tid 9236] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Fri Apr 17 20:02:08.176385 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:53225] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 17 20:02:08.425724 2026] [:error] [pid 9153:tid 9239] [client 74.234.56.128:53225] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeIhQOMHGxkTZX3c45f_JAAAAJU"]
[Fri Apr 17 20:02:09.231350 2026] [:error] [pid 34273:tid 34277] [client 74.234.56.128:4183] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeIhQWuQDW686mK3dgH5NQAAAYI"]
[Fri Apr 17 20:02:10.184858 2026] [:error] [pid 9151:tid 9174] [client 74.234.56.128:55095] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeIhQshTVuRPkua22vQ1dAAAAA0"]
[Fri Apr 17 20:02:10.850140 2026] [:error] [pid 9151:tid 9169] [client 74.234.56.128:55054] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeIhQshTVuRPkua22vQ1dQAAAAg"]
[Fri Apr 17 20:02:11.762318 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:54775] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeIhQ0nQhUtMbw9EsgZzcgAAARU"]
[Fri Apr 17 20:02:12.499410 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:63901] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeIhRMOaH-Pgc7WEf4O0mwAAAdY"]
[Fri Apr 17 20:02:13.437136 2026] [:error] [pid 9151:tid 9164] [client 74.234.56.128:48834] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeIhRchTVuRPkua22vQ1dwAAAAM"]
[Fri Apr 17 20:02:15.205880 2026] [:error] [pid 34273:tid 34285] [client 74.234.56.128:54771] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "aeIhR2uQDW686mK3dgH5OgAAAYo"]
[Fri Apr 17 20:02:17.239769 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:51094] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeIhSRP68VyHNvj1e54lhAAAANQ"]
[Fri Apr 17 20:02:18.094619 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:4780] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeIhSknQhUtMbw9EsgZzeQAAARQ"]
[Fri Apr 17 20:02:18.799449 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:55101] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeIhSknQhUtMbw9EsgZzewAAAQQ"]
[Fri Apr 17 20:02:20.761580 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:62726] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "aeIhTEnQhUtMbw9EsgZzfwAAARU"]
[Fri Apr 17 20:02:21.448518 2026] [:error] [pid 9152:tid 9213] [client 74.234.56.128:4777] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeIhTZJYca8I3TNCwIdONAAAAFc"]
[Fri Apr 17 20:02:23.372051 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:4410] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeIhT5JYca8I3TNCwIdONQAAAEY"]
[Fri Apr 17 20:02:24.876880 2026] [:error] [pid 9153:tid 9224] [client 74.234.56.128:4381] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeIhUOMHGxkTZX3c45f_JgAAAIY"]
[Fri Apr 17 20:02:26.368557 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:56215] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeIhUhP68VyHNvj1e54ljwAAANE"]
[Fri Apr 17 20:02:27.675672 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:36840] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeIhU8OaH-Pgc7WEf4O0zAAAAdE"]
[Fri Apr 17 20:02:29.209150 2026] [:error] [pid 51878:tid 51880] [client 74.234.56.128:46475] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeIhVUnQhUtMbw9EsgZzkwAAAQA"]
[Fri Apr 17 20:02:30.608672 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:58917] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeIhVsOaH-Pgc7WEf4O00AAAAc4"]
[Fri Apr 17 20:02:32.049268 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:65336] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeIhWBP68VyHNvj1e54llwAAAMw"]
[Fri Apr 17 20:02:33.433805 2026] [:error] [pid 9152:tid 9199] [client 74.234.56.128:58918] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeIhWZJYca8I3TNCwIdOPAAAAEk"]
[Fri Apr 17 20:02:34.925768 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:59312] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeIhWknQhUtMbw9EsgZznQAAAQk"]
[Fri Apr 17 20:02:35.883302 2026] [:error] [pid 9153:tid 9239] [client 74.234.56.128:65288] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeIhW-MHGxkTZX3c45f_MgAAAJU"]
[Fri Apr 17 20:02:36.773373 2026] [:error] [pid 9153:tid 9240] [client 74.234.56.128:65292] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "aeIhXOMHGxkTZX3c45f_NgAAAJY"]
[Fri Apr 17 20:02:37.366085 2026] [:error] [pid 9151:tid 9166] [client 74.234.56.128:55389] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeIhXchTVuRPkua22vQ1fAAAAAU"]
[Fri Apr 17 20:02:38.148985 2026] [:error] [pid 9153:tid 9223] [client 74.234.56.128:49892] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeIhXuMHGxkTZX3c45f_OAAAAIU"]
[Fri Apr 17 20:02:38.833019 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:57824] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeIhXpJYca8I3TNCwIdORgAAAEE"]
[Fri Apr 17 20:02:39.396488 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:55407] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeIhX5JYca8I3TNCwIdOSAAAAEY"]
[Fri Apr 17 20:02:40.408263 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:48255] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeIhYMOaH-Pgc7WEf4O03QAAAcU"]
[Fri Apr 17 20:02:41.121813 2026] [:error] [pid 9151:tid 9173] [client 74.234.56.128:45813] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeIhYchTVuRPkua22vQ1ggAAAAw"]
[Fri Apr 17 20:02:41.726441 2026] [:error] [pid 9153:tid 9232] [client 74.234.56.128:4313] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeIhYeMHGxkTZX3c45f_PwAAAI4"]
[Fri Apr 17 20:02:42.248043 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:4288] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aeIhYknQhUtMbw9EsgZzoQAAARg"]
[Fri Apr 17 20:02:42.949698 2026] [:error] [pid 51878:tid 51890] [client 74.234.56.128:57829] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeIhYknQhUtMbw9EsgZzowAAAQo"]
[Fri Apr 17 20:02:44.024218 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:45806] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeIhZEnQhUtMbw9EsgZzpwAAARY"]
[Fri Apr 17 20:02:44.906735 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:5086] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeIhZMOaH-Pgc7WEf4O04QAAAdQ"]
[Fri Apr 17 20:02:45.776649 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:34204] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "aeIhZRP68VyHNvj1e54lowAAANY"]
[Fri Apr 17 20:02:46.597428 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:45805] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeIhZhP68VyHNvj1e54lpgAAAMg"]
[Fri Apr 17 20:02:47.368130 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:45808] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeIhZxP68VyHNvj1e54lqAAAAMw"]
[Fri Apr 17 20:02:48.120291 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:49818] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeIhaMOaH-Pgc7WEf4O05gAAAc4"]
[Fri Apr 17 20:02:48.910276 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:34181] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeIhaBP68VyHNvj1e54lrgAAAMM"]
[Fri Apr 17 20:02:49.539901 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:34232] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIhaUnQhUtMbw9EsgZzsQAAARg"]
[Fri Apr 17 20:02:50.290361 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:34196] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIhauMHGxkTZX3c45f_SgAAAJc"]
[Fri Apr 17 20:02:50.926261 2026] [:error] [pid 9152:tid 9200] [client 74.234.56.128:46475] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIhapJYca8I3TNCwIdOTQAAAEo"]
[Fri Apr 17 20:02:51.578527 2026] [:error] [pid 9151:tid 9173] [client 74.234.56.128:5008] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIha8hTVuRPkua22vQ1iAAAAAw"]
[Fri Apr 17 20:02:52.152080 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:47608] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeIhbGuQDW686mK3dgH5SgAAAYU"]
[Fri Apr 17 20:02:52.718064 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:58305] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeIhbEnQhUtMbw9EsgZztAAAARQ"]
[Fri Apr 17 20:02:53.474612 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:45271] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeIhbUnQhUtMbw9EsgZzuQAAARA"]
[Fri Apr 17 20:02:54.054339 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:28130] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeIhbsOaH-Pgc7WEf4O07QAAAcA"]
[Fri Apr 17 20:02:55.074458 2026] [:error] [pid 9151:tid 9174] [client 74.234.56.128:58335] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeIhb8hTVuRPkua22vQ1jAAAAA0"]
[Fri Apr 17 20:02:56.345270 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:54680] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeIhcBP68VyHNvj1e54ltQAAANM"]
[Fri Apr 17 20:02:57.391197 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:58338] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeIhcWuQDW686mK3dgH5TwAAAYM"]
[Fri Apr 17 20:02:59.572090 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:45273] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeIhc0nQhUtMbw9EsgZzxAAAAQM"]
[Fri Apr 17 20:03:01.048141 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:45302] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeIhdcOaH-Pgc7WEf4O08gAAAc0"]
[Fri Apr 17 20:03:02.247514 2026] [:error] [pid 51878:tid 51903] [client 74.234.56.128:16481] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeIhdknQhUtMbw9EsgZz1AAAARc"]
[Fri Apr 17 20:03:03.824914 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:28126] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeIhd0nQhUtMbw9EsgZz2gAAAQQ"]
[Fri Apr 17 20:03:05.589481 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:5011] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeIheRP68VyHNvj1e54lwgAAANg"]
[Fri Apr 17 20:03:09.603283 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Fri Apr 17 20:03:09.872916 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Fri Apr 17 20:03:10.156811 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Apr 17 20:03:10.479366 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 17 20:03:11.018365 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 17 20:03:11.306297 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 17 20:03:11.584042 2026] [:error] [pid 9263:tid 9273] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Fri Apr 17 20:03:11.861010 2026] [:error] [pid 9263:tid 9278] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 17 20:03:12.182632 2026] [:error] [pid 9263:tid 9285] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 17 20:03:12.451512 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:50232] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Apr 17 20:03:12.717660 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:50232] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeIhgBP68VyHNvj1e54l3wAAAMM"]
[Fri Apr 17 20:03:14.387084 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:16461] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeIhgknQhUtMbw9EsgZz9AAAAQc"]
[Fri Apr 17 20:03:15.258107 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:50181] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeIhg2uQDW686mK3dgH5YAAAAYM"]
[Fri Apr 17 20:03:17.121899 2026] [:error] [pid 51878:tid 51899] [client 74.234.56.128:49431] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeIhhUnQhUtMbw9EsgZ0CAAAARM"]
[Fri Apr 17 20:03:17.873737 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:50230] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIhhcOaH-Pgc7WEf4O1CAAAAc4"]
[Fri Apr 17 20:03:18.517679 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:52193] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIhhsOaH-Pgc7WEf4O1CwAAAcc"]
[Fri Apr 17 20:03:19.406513 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:49461] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIhh8OaH-Pgc7WEf4O1DAAAAcs"]
[Fri Apr 17 20:03:20.132946 2026] [:error] [pid 25010:tid 25013] [client 74.234.56.128:52167] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIhiI-7kkf42RarqQ1siAAAAUA"]
[Fri Apr 17 20:03:20.766825 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:16482] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeIhiJJYca8I3TNCwIdOYgAAAEE"]
[Fri Apr 17 20:03:21.394058 2026] [:error] [pid 9153:tid 9238] [client 74.234.56.128:4582] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeIhieMHGxkTZX3c45f_VAAAAJQ"]
[Fri Apr 17 20:03:22.235889 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:4600] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeIhipJYca8I3TNCwIdOZQAAAFg"]
[Fri Apr 17 20:03:23.014553 2026] [:error] [pid 9153:tid 9234] [client 74.234.56.128:50293] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeIhi-MHGxkTZX3c45f_VQAAAJA"]
[Fri Apr 17 20:03:23.714557 2026] [:error] [pid 25010:tid 25032] [client 74.234.56.128:50204] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeIhi4-7kkf42RarqQ1sigAAAVM"]
[Fri Apr 17 20:03:24.402572 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:4579] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeIhjMOaH-Pgc7WEf4O1EwAAAcA"]
[Fri Apr 17 20:03:25.320968 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:4457] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeIhjcOaH-Pgc7WEf4O1FAAAAc0"]
[Fri Apr 17 20:03:25.921604 2026] [:error] [pid 9263:tid 9280] [client 74.234.56.128:50297] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeIhjRP68VyHNvj1e54l7wAAAM8"]
[Fri Apr 17 20:03:26.506295 2026] [:error] [pid 25010:tid 25035] [client 74.234.56.128:4566] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aeIhjo-7kkf42RarqQ1sjQAAAVY"]
[Fri Apr 17 20:03:27.156119 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:50194] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aeIhj5JYca8I3TNCwIdObQAAAEg"]
[Fri Apr 17 20:03:27.856034 2026] [:error] [pid 61523:tid 61543] [client 74.234.56.128:4605] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aeIhj8OaH-Pgc7WEf4O1GAAAAcE"]
[Fri Apr 17 20:03:28.418835 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:52207] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "aeIhkMOaH-Pgc7WEf4O1GwAAAco"]
[Fri Apr 17 20:03:29.021749 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:60999] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aeIhkZJYca8I3TNCwIdOdgAAAEQ"]
[Fri Apr 17 20:03:29.638918 2026] [:error] [pid 9151:tid 9181] [client 74.234.56.128:61054] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aeIhkchTVuRPkua22vQ1twAAABQ"]
[Fri Apr 17 20:03:30.283735 2026] [:error] [pid 9152:tid 9202] [client 74.234.56.128:16489] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aeIhkpJYca8I3TNCwIdOewAAAEw"]
[Fri Apr 17 20:03:31.119361 2026] [:error] [pid 9263:tid 9272] [client 74.234.56.128:4622] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plss3.php"] [unique_id "aeIhkxP68VyHNvj1e54l9QAAAMc"]
[Fri Apr 17 20:03:31.728942 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:52200] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aeIhkxP68VyHNvj1e54l-gAAAMw"]
[Fri Apr 17 20:03:32.429194 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:16508] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aeIhlJJYca8I3TNCwIdOggAAAEE"]
[Fri Apr 17 20:03:33.193315 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:61039] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aeIhlZJYca8I3TNCwIdOhgAAAEQ"]
[Fri Apr 17 20:03:33.819745 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:47027] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "aeIhlUnQhUtMbw9EsgZ0UQAAAQ8"]
[Fri Apr 17 20:03:34.874801 2026] [:error] [pid 51878:tid 51885] [client 74.234.56.128:50202] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeIhlknQhUtMbw9EsgZ0VwAAAQU"]
[Fri Apr 17 20:03:35.691315 2026] [:error] [pid 51878:tid 51881] [client 74.234.56.128:4611] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeIhl0nQhUtMbw9EsgZ0XAAAAQE"]
[Fri Apr 17 20:03:36.972826 2026] [:error] [pid 9153:tid 9234] [client 74.234.56.128:50300] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeIhmOMHGxkTZX3c45f_ZAAAAJA"]
[Fri Apr 17 20:03:37.561674 2026] [:error] [pid 61523:tid 61543] [client 74.234.56.128:50210] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeIhmcOaH-Pgc7WEf4O1KQAAAcE"]
[Fri Apr 17 20:03:38.186020 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:16474] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeIhmpJYca8I3TNCwIdOkAAAAEU"]
[Fri Apr 17 20:03:39.241895 2026] [:error] [pid 61523:tid 61559] [client 74.234.56.128:49816] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeIhm8OaH-Pgc7WEf4O1LQAAAdE"]
[Fri Apr 17 20:03:40.106612 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:50247] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeIhnBP68VyHNvj1e54l_gAAAMM"]
[Fri Apr 17 20:03:40.961579 2026] [:error] [pid 51878:tid 51882] [client 74.234.56.128:4604] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeIhnEnQhUtMbw9EsgZ0eAAAAQI"]
[Fri Apr 17 20:03:41.822655 2026] [:error] [pid 9152:tid 9205] [client 74.234.56.128:4474] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeIhnZJYca8I3TNCwIdOlgAAAE8"]
[Fri Apr 17 20:03:43.937356 2026] [:error] [pid 51878:tid 51882] [client 74.234.56.128:61025] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeIhn0nQhUtMbw9EsgZ0iAAAAQI"]
[Fri Apr 17 20:03:44.688553 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:16501] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeIhoBP68VyHNvj1e54mBQAAANc"]
[Fri Apr 17 20:03:45.509614 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:4472] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeIhocOaH-Pgc7WEf4O1NQAAAdQ"]
[Fri Apr 17 20:03:46.368146 2026] [:error] [pid 61523:tid 61563] [client 74.234.56.128:49423] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aeIhosOaH-Pgc7WEf4O1OgAAAdU"]
[Fri Apr 17 20:03:47.009607 2026] [:error] [pid 34273:tid 34289] [client 74.234.56.128:16511] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aeIho2uQDW686mK3dgH5cQAAAY4"]
[Fri Apr 17 20:03:47.829826 2026] [:error] [pid 51878:tid 51892] [client 74.234.56.128:49417] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aeIho0nQhUtMbw9EsgZ0kAAAAQw"]
[Fri Apr 17 20:03:48.599403 2026] [:error] [pid 61523:tid 61554] [client 74.234.56.128:52201] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "aeIhpMOaH-Pgc7WEf4O1PAAAAcw"]
[Fri Apr 17 20:03:49.491555 2026] [:error] [pid 61523:tid 61562] [client 74.234.56.128:50267] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeIhpcOaH-Pgc7WEf4O1QQAAAdQ"]
[Fri Apr 17 20:03:50.296948 2026] [:error] [pid 34273:tid 34295] [client 74.234.56.128:59870] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeIhpmuQDW686mK3dgH5dAAAAZQ"]
[Fri Apr 17 20:03:51.351062 2026] [:error] [pid 51878:tid 51898] [client 74.234.56.128:46999] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeIhp0nQhUtMbw9EsgZ0oQAAARI"]
[Fri Apr 17 20:03:52.447275 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:49455] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeIhqJJYca8I3TNCwIdOnAAAAFg"]
[Fri Apr 17 20:03:53.128557 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:50215] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeIhqZJYca8I3TNCwIdOnwAAAEQ"]
[Fri Apr 17 20:03:53.793225 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:16510] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeIhqUnQhUtMbw9EsgZ0qAAAAQs"]
[Fri Apr 17 20:03:54.393348 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:16506] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeIhqsOaH-Pgc7WEf4O1SgAAAdg"]
[Fri Apr 17 20:03:55.360420 2026] [:error] [pid 34273:tid 34287] [client 74.234.56.128:4441] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "aeIhq2uQDW686mK3dgH5dQAAAYw"]
[Fri Apr 17 20:03:56.383008 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:50187] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeIhrMOaH-Pgc7WEf4O1TQAAAcQ"]
[Fri Apr 17 20:03:57.065524 2026] [:error] [pid 9263:tid 9277] [client 74.234.56.128:16483] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeIhrRP68VyHNvj1e54mFAAAAMw"]
[Fri Apr 17 20:03:57.931133 2026] [:error] [pid 9152:tid 9207] [client 74.234.56.128:52183] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeIhrZJYca8I3TNCwIdOqwAAAFE"]
[Fri Apr 17 20:03:58.960775 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:4565] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeIhrpJYca8I3TNCwIdOrQAAAEY"]
[Fri Apr 17 20:03:59.622716 2026] [:error] [pid 34273:tid 34292] [client 74.234.56.128:49453] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeIhr2uQDW686mK3dgH5dgAAAZE"]
[Fri Apr 17 20:04:00.823477 2026] [:error] [pid 9151:tid 9171] [client 74.234.56.128:16494] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeIhsMhTVuRPkua22vQ1vgAAAAo"]
[Fri Apr 17 20:04:01.978762 2026] [:error] [pid 9263:tid 9284] [client 74.234.56.128:16467] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeIhsRP68VyHNvj1e54mFgAAANM"]
[Fri Apr 17 20:04:03.108048 2026] [:error] [pid 9153:tid 9231] [client 74.234.56.128:4632] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeIhs-MHGxkTZX3c45f_cwAAAI0"]
[Fri Apr 17 20:04:03.792179 2026] [:error] [pid 9152:tid 9204] [client 74.234.56.128:50191] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeIhs5JYca8I3TNCwIdOugAAAE4"]
[Fri Apr 17 20:04:04.466992 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:4431] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeIhtBP68VyHNvj1e54mGwAAAMo"]
[Fri Apr 17 20:04:05.172810 2026] [:error] [pid 9263:tid 9271] [client 74.234.56.128:4588] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeIhtRP68VyHNvj1e54mHwAAAMY"]
[Fri Apr 17 20:04:06.280108 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:46979] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeIhthP68VyHNvj1e54mIwAAAMs"]
[Fri Apr 17 20:04:07.489468 2026] [:error] [pid 9263:tid 9267] [client 74.234.56.128:49416] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeIhtxP68VyHNvj1e54mJgAAAMI"]
[Fri Apr 17 20:04:08.186803 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:54716] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeIhuMOaH-Pgc7WEf4O1XQAAAcc"]
[Fri Apr 17 20:04:09.076736 2026] [:error] [pid 61523:tid 61555] [client 74.234.56.128:4478] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeIhucOaH-Pgc7WEf4O1ZgAAAc0"]
[Fri Apr 17 20:04:09.763521 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:50185] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeIhuUnQhUtMbw9EsgZ0uQAAAQ8"]
[Fri Apr 17 20:04:10.516185 2026] [:error] [pid 9153:tid 9226] [client 74.234.56.128:60998] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aeIhuuMHGxkTZX3c45f_ewAAAIg"]
[Fri Apr 17 20:04:11.211620 2026] [:error] [pid 25010:tid 25022] [client 74.234.56.128:50238] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aeIhu4-7kkf42RarqQ1sowAAAUk"]
[Fri Apr 17 20:04:11.894432 2026] [:error] [pid 25010:tid 25028] [client 74.234.56.128:47028] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "aeIhu4-7kkf42RarqQ1spwAAAU8"]
[Fri Apr 17 20:04:12.472338 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Apr 17 20:04:12.724573 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 17 20:04:12.976963 2026] [:error] [pid 9152:tid 9191] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 17 20:04:13.488500 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Fri Apr 17 20:04:13.995002 2026] [:error] [pid 9152:tid 9206] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Fri Apr 17 20:04:14.248412 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Fri Apr 17 20:04:14.507603 2026] [:error] [pid 9152:tid 9202] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Fri Apr 17 20:04:14.760155 2026] [:error] [pid 9152:tid 9209] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Fri Apr 17 20:04:15.013584 2026] [:error] [pid 9152:tid 9194] [client 74.234.56.128:28110] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Fri Apr 17 20:04:15.316854 2026] [:error] [pid 9152:tid 9203] [client 74.234.56.128:28110] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeIhv5JYca8I3TNCwIdO5wAAAE0"]
[Fri Apr 17 20:04:16.110727 2026] [:error] [pid 9263:tid 9276] [client 74.234.56.128:61036] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeIhwBP68VyHNvj1e54mLQAAAMs"]
[Fri Apr 17 20:04:16.986860 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:52181] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeIhwBP68VyHNvj1e54mMAAAANc"]
[Fri Apr 17 20:04:17.889991 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:50205] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeIhwUnQhUtMbw9EsgZ0xAAAAQQ"]
[Fri Apr 17 20:04:18.654332 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:49413] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeIhwknQhUtMbw9EsgZ0ygAAAQc"]
[Fri Apr 17 20:04:19.517055 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:52196] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeIhw0nQhUtMbw9EsgZ00gAAAQk"]
[Fri Apr 17 20:04:20.297391 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:49465] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeIhxJJYca8I3TNCwIdO7gAAAEg"]
[Fri Apr 17 20:04:21.227169 2026] [:error] [pid 61523:tid 61541] [client 74.234.56.128:4654] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeIhxcOaH-Pgc7WEf4O1hQAAAcA"]
[Fri Apr 17 20:04:21.845938 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:50282] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeIhxRP68VyHNvj1e54mNQAAAM4"]
[Fri Apr 17 20:04:22.508963 2026] [:error] [pid 25010:tid 25017] [client 74.234.56.128:4479] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeIhxo-7kkf42RarqQ1sugAAAUQ"]
[Fri Apr 17 20:04:23.388906 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:4453] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeIhx0nQhUtMbw9EsgZ04gAAAQg"]
[Fri Apr 17 20:04:24.032293 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:28124] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeIhyMOaH-Pgc7WEf4O1kAAAAcc"]
[Fri Apr 17 20:04:24.722406 2026] [:error] [pid 9151:tid 9171] [client 74.234.56.128:47012] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeIhyMhTVuRPkua22vQ12AAAAAo"]
[Fri Apr 17 20:04:25.372484 2026] [:error] [pid 9263:tid 9286] [client 74.234.56.128:47008] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeIhyRP68VyHNvj1e54mPwAAANU"]
[Fri Apr 17 20:04:26.156511 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:50302] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeIhyknQhUtMbw9EsgZ06QAAAQ8"]
[Fri Apr 17 20:04:26.773215 2026] [:error] [pid 9151:tid 9172] [client 74.234.56.128:4471] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeIhyshTVuRPkua22vQ12gAAAAs"]
[Fri Apr 17 20:04:27.438801 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:47002] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeIhy0nQhUtMbw9EsgZ06wAAAQM"]
[Fri Apr 17 20:04:28.118594 2026] [:error] [pid 9153:tid 9240] [client 74.234.56.128:4646] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeIhzOMHGxkTZX3c45f_lQAAAJY"]
[Fri Apr 17 20:04:28.817919 2026] [:error] [pid 9152:tid 9212] [client 74.234.56.128:4546] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeIhzJJYca8I3TNCwIdO9AAAAFY"]
[Fri Apr 17 20:04:29.690895 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:49454] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeIhzZJYca8I3TNCwIdO9wAAAEc"]
[Fri Apr 17 20:04:30.629054 2026] [:error] [pid 9263:tid 9281] [client 74.234.56.128:16491] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeIhzhP68VyHNvj1e54mRQAAANA"]
[Fri Apr 17 20:04:31.381245 2026] [:error] [pid 9263:tid 9289] [client 74.234.56.128:4464] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeIhzxP68VyHNvj1e54mTAAAANg"]
[Fri Apr 17 20:04:32.400572 2026] [:error] [pid 9152:tid 9198] [client 74.234.56.128:4421] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeIh0JJYca8I3TNCwIdO_AAAAEg"]
[Fri Apr 17 20:04:33.221497 2026] [:error] [pid 25010:tid 25026] [client 74.234.56.128:50183] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeIh0Y-7kkf42RarqQ1sxwAAAU0"]
[Fri Apr 17 20:04:34.257461 2026] [:error] [pid 9153:tid 9231] [client 74.234.56.128:50277] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIh0uMHGxkTZX3c45f_mgAAAI0"]
[Fri Apr 17 20:04:35.572707 2026] [:error] [pid 9151:tid 9167] [client 74.234.56.128:4429] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIh08hTVuRPkua22vQ15QAAAAY"]
[Fri Apr 17 20:04:36.726641 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:4467] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIh1EnQhUtMbw9EsgZ0-AAAARA"]
[Fri Apr 17 20:04:37.654414 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:4583] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeIh1UnQhUtMbw9EsgZ0_AAAAQQ"]
[Fri Apr 17 20:04:38.492484 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:47036] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeIh1sOaH-Pgc7WEf4O1pgAAAcs"]
[Fri Apr 17 20:04:39.339515 2026] [:error] [pid 61523:tid 61552] [client 74.234.56.128:49427] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeIh18OaH-Pgc7WEf4O1qgAAAco"]
[Fri Apr 17 20:04:40.233121 2026] [:error] [pid 34273:tid 34295] [client 74.234.56.128:46976] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeIh2GuQDW686mK3dgH5igAAAZQ"]
[Fri Apr 17 20:04:41.046734 2026] [:error] [pid 34273:tid 34288] [client 74.234.56.128:4669] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeIh2WuQDW686mK3dgH5kQAAAY0"]
[Fri Apr 17 20:04:41.627383 2026] [:error] [pid 34273:tid 34280] [client 74.234.56.128:4631] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIh2WuQDW686mK3dgH5lAAAAYU"]
[Fri Apr 17 20:04:42.253854 2026] [:error] [pid 9152:tid 9214] [client 74.234.56.128:4461] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIh2pJYca8I3TNCwIdPCwAAAFg"]
[Fri Apr 17 20:04:43.145410 2026] [:error] [pid 25010:tid 25029] [client 74.234.56.128:49452] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIh24-7kkf42RarqQ1sywAAAVA"]
[Fri Apr 17 20:04:44.013515 2026] [:error] [pid 9152:tid 9210] [client 74.234.56.128:60996] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeIh3JJYca8I3TNCwIdPIQAAAFQ"]
[Fri Apr 17 20:04:44.990341 2026] [:error] [pid 9152:tid 9196] [client 74.234.56.128:4587] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeIh3JJYca8I3TNCwIdPJgAAAEY"]
[Fri Apr 17 20:04:45.617640 2026] [:error] [pid 34273:tid 34289] [client 74.234.56.128:49420] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeIh3WuQDW686mK3dgH5mQAAAY4"]
[Fri Apr 17 20:04:46.125472 2026] [:error] [pid 51878:tid 51893] [client 74.234.56.128:4643] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeIh3knQhUtMbw9EsgZ1EAAAAQ0"]
[Fri Apr 17 20:04:46.729277 2026] [:error] [pid 51878:tid 51883] [client 74.234.56.128:50220] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeIh3knQhUtMbw9EsgZ1FAAAAQM"]
[Fri Apr 17 20:04:47.366852 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:52171] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aeIh30nQhUtMbw9EsgZ1GAAAAQs"]
[Fri Apr 17 20:04:48.023784 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:52187] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aeIh4EnQhUtMbw9EsgZ1HAAAARE"]
[Fri Apr 17 20:04:48.679744 2026] [:error] [pid 9151:tid 9163] [client 74.234.56.128:50295] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aeIh4MhTVuRPkua22vQ16wAAAAI"]
[Fri Apr 17 20:04:49.469232 2026] [:error] [pid 51878:tid 51904] [client 74.234.56.128:4597] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "aeIh4UnQhUtMbw9EsgZ1IAAAARg"]
[Fri Apr 17 20:04:50.127491 2026] [:error] [pid 51878:tid 51884] [client 74.234.56.128:50253] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeIh4knQhUtMbw9EsgZ1JQAAAQQ"]
[Fri Apr 17 20:04:50.830771 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:4417] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeIh4knQhUtMbw9EsgZ1KQAAAQ4"]
[Fri Apr 17 20:04:51.677163 2026] [:error] [pid 9153:tid 9227] [client 74.234.56.128:4459] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeIh4-MHGxkTZX3c45f_oAAAAIk"]
[Fri Apr 17 20:04:52.713500 2026] [:error] [pid 51878:tid 51896] [client 74.234.56.128:50199] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeIh5EnQhUtMbw9EsgZ1MQAAARA"]
[Fri Apr 17 20:04:53.457703 2026] [:error] [pid 51878:tid 51900] [client 74.234.56.128:47013] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aeIh5UnQhUtMbw9EsgZ1NwAAARQ"]
[Fri Apr 17 20:04:54.349246 2026] [:error] [pid 51878:tid 51894] [client 74.234.56.128:52198] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aeIh5knQhUtMbw9EsgZ1PQAAAQ4"]
[Fri Apr 17 20:04:55.145874 2026] [:error] [pid 51878:tid 51887] [client 74.234.56.128:61037] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aeIh50nQhUtMbw9EsgZ1QAAAAQc"]
[Fri Apr 17 20:04:55.941632 2026] [:error] [pid 9152:tid 9197] [client 74.234.56.128:16464] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "aeIh55JYca8I3TNCwIdPLwAAAEc"]
[Fri Apr 17 20:04:57.463510 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:4659] [client 74.234.56.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeIh6UnQhUtMbw9EsgZ1TwAAAQ8"]
[Fri Apr 17 20:04:58.443579 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:47035] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeIh6sOaH-Pgc7WEf4O1vQAAAcI"]
[Fri Apr 17 20:04:59.811630 2026] [:error] [pid 61523:tid 61547] [client 74.234.56.128:46993] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeIh68OaH-Pgc7WEf4O1xQAAAcU"]
[Fri Apr 17 20:05:00.467826 2026] [:error] [pid 9153:tid 9229] [client 74.234.56.128:4660] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeIh7OMHGxkTZX3c45f_ogAAAIs"]
[Fri Apr 17 20:05:01.106723 2026] [:error] [pid 9151:tid 9178] [client 74.234.56.128:4560] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeIh7chTVuRPkua22vQ17QAAABE"]
[Fri Apr 17 20:05:02.312443 2026] [:error] [pid 25010:tid 25016] [client 74.234.56.128:49436] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeIh7o-7kkf42RarqQ1s4gAAAUM"]
[Fri Apr 17 20:05:03.607969 2026] [:error] [pid 9153:tid 9221] [client 74.234.56.128:4569] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeIh7-MHGxkTZX3c45f_qAAAAIM"]
[Fri Apr 17 20:05:05.910773 2026] [:error] [pid 51878:tid 51897] [client 74.234.56.128:49446] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeIh8UnQhUtMbw9EsgZ1cgAAARE"]
[Fri Apr 17 20:05:07.644285 2026] [:error] [pid 51878:tid 51889] [client 74.234.56.128:50248] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeIh80nQhUtMbw9EsgZ1egAAAQk"]
[Fri Apr 17 20:05:09.140099 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:46988] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeIh9RP68VyHNvj1e54mdAAAAMo"]
[Fri Apr 17 20:05:10.432603 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:4592] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeIh9sOaH-Pgc7WEf4O1zgAAAdg"]
[Fri Apr 17 20:05:11.585754 2026] [:error] [pid 61523:tid 61553] [client 74.234.56.128:50180] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeIh98OaH-Pgc7WEf4O11AAAAcs"]
[Fri Apr 17 20:05:12.460806 2026] [:error] [pid 9151:tid 9172] [client 74.234.56.128:4435] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeIh-MhTVuRPkua22vQ17wAAAAs"]
[Fri Apr 17 20:05:13.179149 2026] [:error] [pid 61523:tid 61556] [client 74.234.56.128:50257] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeIh-cOaH-Pgc7WEf4O13QAAAc4"]
[Fri Apr 17 20:05:14.285436 2026] [:error] [pid 61523:tid 61566] [client 74.234.56.128:51595] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeIh-sOaH-Pgc7WEf4O14gAAAdg"]
[Fri Apr 17 20:05:15.387197 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 17 20:05:15.656010 2026] [:error] [pid 9153:tid 9231] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Fri Apr 17 20:05:15.925726 2026] [:error] [pid 9153:tid 9236] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Fri Apr 17 20:05:16.203164 2026] [:error] [pid 9153:tid 9242] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Apr 17 20:05:16.472497 2026] [:error] [pid 9153:tid 9220] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Fri Apr 17 20:05:17.021726 2026] [:error] [pid 9153:tid 9221] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Fri Apr 17 20:05:17.579816 2026] [:error] [pid 9153:tid 9218] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Fri Apr 17 20:05:17.860359 2026] [:error] [pid 9153:tid 9226] [client 74.234.56.128:50197] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Fri Apr 17 20:05:18.126559 2026] [:error] [pid 9153:tid 9237] [client 74.234.56.128:50197] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeIh_uMHGxkTZX3c45f_vgAAAJM"]
[Fri Apr 17 20:05:19.176169 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:50188] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeIh_8OaH-Pgc7WEf4O18QAAAdM"]
[Fri Apr 17 20:05:20.067967 2026] [:error] [pid 25010:tid 25027] [client 74.234.56.128:4544] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeIiAI-7kkf42RarqQ1s8gAAAU4"]
[Fri Apr 17 20:05:20.937516 2026] [:error] [pid 51878:tid 51890] [client 74.234.56.128:51619] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeIiAEnQhUtMbw9EsgZ1rgAAAQo"]
[Fri Apr 17 20:05:21.952346 2026] [:error] [pid 9153:tid 9224] [client 74.234.56.128:63501] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeIiAeMHGxkTZX3c45f_wgAAAIY"]
[Fri Apr 17 20:05:23.585852 2026] [:error] [pid 9152:tid 9195] [client 74.234.56.128:60992] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeIiA5JYca8I3TNCwIdPRwAAAEU"]
[Fri Apr 17 20:05:25.324499 2026] [:error] [pid 34273:tid 34290] [client 74.234.56.128:4637] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeIiBWuQDW686mK3dgH5qAAAAY8"]
[Fri Apr 17 20:05:26.748963 2026] [:error] [pid 9152:tid 9212] [client 74.234.56.128:63151] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeIiBpJYca8I3TNCwIdPTQAAAFY"]
[Fri Apr 17 20:05:27.936046 2026] [:error] [pid 51878:tid 51885] [client 74.234.56.128:63108] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeIiB0nQhUtMbw9EsgZ1tQAAAQU"]
[Fri Apr 17 20:05:28.973525 2026] [:error] [pid 9153:tid 9219] [client 74.234.56.128:4635] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeIiCOMHGxkTZX3c45f_xgAAAIE"]
[Fri Apr 17 20:05:30.165637 2026] [:error] [pid 9152:tid 9193] [client 74.234.56.128:61019] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeIiCpJYca8I3TNCwIdPWAAAAEM"]
[Fri Apr 17 20:05:31.879646 2026] [:error] [pid 61523:tid 61564] [client 74.234.56.128:4607] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeIiC8OaH-Pgc7WEf4O2BQAAAdY"]
[Fri Apr 17 20:05:33.281372 2026] [:error] [pid 9263:tid 9288] [client 74.234.56.128:64271] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeIiDRP68VyHNvj1e54mogAAANc"]
[Fri Apr 17 20:05:34.367173 2026] [:error] [pid 9263:tid 9282] [client 74.234.56.128:64314] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeIiDhP68VyHNvj1e54mqwAAANE"]
[Fri Apr 17 20:05:35.150673 2026] [:error] [pid 61523:tid 61560] [client 74.234.56.128:51606] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeIiD8OaH-Pgc7WEf4O2BgAAAdI"]
[Fri Apr 17 20:05:36.051610 2026] [:error] [pid 9151:tid 9176] [client 74.234.56.128:63149] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "aeIiEMhTVuRPkua22vQ1_QAAAA8"]
[Fri Apr 17 20:05:36.688401 2026] [:error] [pid 61523:tid 61561] [client 74.234.56.128:64683] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeIiEMOaH-Pgc7WEf4O2CgAAAdM"]
[Fri Apr 17 20:05:37.927753 2026] [:error] [pid 51878:tid 51895] [client 74.234.56.128:49458] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeIiEUnQhUtMbw9EsgZ1vQAAAQ8"]
[Fri Apr 17 20:05:39.417787 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:63167] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeIiE0nQhUtMbw9EsgZ1xwAAAQs"]
[Fri Apr 17 20:05:40.779803 2026] [:error] [pid 51878:tid 51890] [client 74.234.56.128:64644] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeIiFEnQhUtMbw9EsgZ1zgAAAQo"]
[Fri Apr 17 20:05:42.652776 2026] [:error] [pid 51878:tid 51891] [client 74.234.56.128:44121] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeIiFknQhUtMbw9EsgZ2AwAAAQs"]
[Fri Apr 17 20:05:43.740775 2026] [:error] [pid 51878:tid 51893] [client 74.234.56.128:41167] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeIiF0nQhUtMbw9EsgZ2DgAAAQ0"]
[Fri Apr 17 20:05:44.923702 2026] [:error] [pid 34273:tid 34278] [client 74.234.56.128:50233] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeIiGGuQDW686mK3dgH5wwAAAYM"]
[Fri Apr 17 20:05:45.791123 2026] [:error] [pid 25010:tid 25015] [client 74.234.56.128:64687] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeIiGY-7kkf42RarqQ1tGAAAAUI"]
[Fri Apr 17 20:05:46.724329 2026] [:error] [pid 9263:tid 9268] [client 74.234.56.128:64679] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeIiGhP68VyHNvj1e54myQAAAMM"]
[Fri Apr 17 20:05:47.541543 2026] [:error] [pid 9263:tid 9279] [client 74.234.56.128:64645] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeIiGxP68VyHNvj1e54mzQAAAM4"]
[Fri Apr 17 20:05:48.248144 2026] [:error] [pid 9263:tid 9287] [client 74.234.56.128:51646] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeIiHBP68VyHNvj1e54mzwAAANY"]
[Fri Apr 17 20:05:49.081708 2026] [:error] [pid 9263:tid 9275] [client 74.234.56.128:64310] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "aeIiHRP68VyHNvj1e54m0gAAAMo"]
[Fri Apr 17 20:05:50.120159 2026] [:error] [pid 51878:tid 51888] [client 74.234.56.128:63189] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeIiHknQhUtMbw9EsgZ2HQAAAQg"]
[Fri Apr 17 20:05:53.217802 2026] [:error] [pid 51878:tid 51893] [client 74.234.56.128:41170] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeIiIUnQhUtMbw9EsgZ2JgAAAQ0"]
[Fri Apr 17 20:05:54.879094 2026] [:error] [pid 9151:tid 9169] [client 74.234.56.128:41193] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeIiIshTVuRPkua22vQ2AwAAAAg"]
[Fri Apr 17 20:05:56.145336 2026] [:error] [pid 51878:tid 51901] [client 74.234.56.128:55332] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "aeIiJEnQhUtMbw9EsgZ2LAAAARU"]
[Fri Apr 17 20:05:57.823126 2026] [:error] [pid 9152:tid 9201] [client 74.234.56.128:41117] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeIiJZJYca8I3TNCwIdPeAAAAEs"]
[Fri Apr 17 20:05:58.758572 2026] [:error] [pid 25010:tid 25018] [client 74.234.56.128:62030] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeIiJo-7kkf42RarqQ1tIQAAAUU"]
[Fri Apr 17 20:05:59.790171 2026] [:error] [pid 9152:tid 9208] [client 74.234.56.128:4861] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeIiJ5JYca8I3TNCwIdPegAAAFI"]
[Fri Apr 17 20:06:00.522319 2026] [:error] [pid 9151:tid 9182] [client 74.234.56.128:62056] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeIiKMhTVuRPkua22vQ2BgAAABU"]
[Fri Apr 17 20:06:01.574908 2026] [:error] [pid 34273:tid 34283] [client 74.234.56.128:4125] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeIiKWuQDW686mK3dgH5yAAAAYg"]
[Fri Apr 17 20:06:02.713757 2026] [:error] [pid 9151:tid 9165] [client 74.234.56.128:55345] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeIiKshTVuRPkua22vQ2CAAAAAQ"]
[Fri Apr 17 20:06:03.677173 2026] [:error] [pid 9153:tid 9228] [client 74.234.56.128:62034] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeIiK-MHGxkTZX3c45f_5QAAAIo"]
[Fri Apr 17 20:06:05.488662 2026] [:error] [pid 9153:tid 9241] [client 74.234.56.128:55158] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeIiLeMHGxkTZX3c45f_5wAAAJc"]
[Fri Apr 17 20:06:10.387263 2026] [:error] [pid 9263:tid 9266] [client 74.234.56.128:53634] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aeIiMhP68VyHNvj1e54m4QAAAME"]
[Fri Apr 17 20:06:12.356320 2026] [:error] [pid 51878:tid 51902] [client 74.234.56.128:58844] [client 74.234.56.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vee.php"] [unique_id "aeIiNEnQhUtMbw9EsgZ2RgAAARY"]
[Fri Apr 17 20:06:17.662717 2026] [:error] [pid 61523:tid 61546] [client 74.234.56.128:47076] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Fri Apr 17 20:06:17.931949 2026] [:error] [pid 61523:tid 61548] [client 74.234.56.128:47076] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Fri Apr 17 20:06:18.222306 2026] [:error] [pid 61523:tid 61549] [client 74.234.56.128:47076] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 17 20:06:18.492645 2026] [:error] [pid 61523:tid 61544] [client 74.234.56.128:47076] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 17 20:06:18.761965 2026] [:error] [pid 61523:tid 61545] [client 74.234.56.128:47076] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 17 22:09:17.264178 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Fri Apr 17 22:09:17.514249 2026] [:error] [pid 9263:tid 9271] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_py4mE1XY.php
[Fri Apr 17 22:09:17.797143 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Apr 17 22:09:18.036339 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Fri Apr 17 22:09:18.294874 2026] [:error] [pid 9263:tid 9276] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Apr 17 22:09:18.582273 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/defeg.php
[Fri Apr 17 22:09:18.937800 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/C1.php
[Fri Apr 17 22:09:19.261117 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/bfasb.php
[Fri Apr 17 22:09:19.502194 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/clcdu.php
[Fri Apr 17 22:09:19.779539 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64906] File does not exist: /usr/local/apache/htdocs/suspended-page/dgmry.php
[Fri Apr 17 22:09:20.015161 2026] [:error] [pid 9263:tid 9271] [client 20.19.188.213:64906] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeI_EBP68VyHNvj1e55pJQAAAMY"]
[Fri Apr 17 22:09:20.683806 2026] [:error] [pid 34273:tid 34293] [client 20.19.188.213:64974] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeI_EGuQDW686mK3dgEYwQAAAZI"]
[Fri Apr 17 22:09:21.329825 2026] [:error] [pid 9151:tid 9161] [client 20.19.188.213:65527] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeI_EchTVuRPkua22vRKOAAAAAA"]
[Fri Apr 17 22:09:22.086913 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:64342] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeI_EhP68VyHNvj1e55pLQAAANY"]
[Fri Apr 17 22:09:22.980330 2026] [:error] [pid 25010:tid 25013] [client 20.19.188.213:64968] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeI_Eo-7kkf42RarqQ2E5AAAAUA"]
[Fri Apr 17 22:09:23.599959 2026] [:error] [pid 51878:tid 51884] [client 20.19.188.213:64930] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeI_E0nQhUtMbw9Esga55gAAAQQ"]
[Fri Apr 17 22:09:24.210929 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:65455] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeI_FBP68VyHNvj1e55pOAAAAM0"]
[Fri Apr 17 22:09:24.973337 2026] [:error] [pid 9152:tid 9192] [client 20.19.188.213:64992] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeI_FJJYca8I3TNCwId1CQAAAEI"]
[Fri Apr 17 22:09:25.875864 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:64964] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeI_FRP68VyHNvj1e55pPgAAAMA"]
[Fri Apr 17 22:09:26.518594 2026] [:error] [pid 61523:tid 61546] [client 20.19.188.213:65457] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeI_FsOaH-Pgc7WEf4PqngAAAcQ"]
[Fri Apr 17 22:09:27.022798 2026] [:error] [pid 9152:tid 9197] [client 20.19.188.213:65446] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeI_F5JYca8I3TNCwId1CgAAAEc"]
[Fri Apr 17 22:09:27.566444 2026] [:error] [pid 9152:tid 9213] [client 20.19.188.213:65414] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeI_F5JYca8I3TNCwId1DQAAAFc"]
[Fri Apr 17 22:09:28.130611 2026] [:error] [pid 25010:tid 25037] [client 20.19.188.213:64986] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeI_GI-7kkf42RarqQ2E5QAAAVg"]
[Fri Apr 17 22:09:28.723947 2026] [:error] [pid 9152:tid 9195] [client 20.19.188.213:65001] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeI_GJJYca8I3TNCwId1EgAAAEU"]
[Fri Apr 17 22:09:29.492924 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:65009] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeI_GUnQhUtMbw9Esga5_wAAAQ0"]
[Fri Apr 17 22:09:30.193685 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:64931] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeI_GsOaH-Pgc7WEf4PqowAAAdg"]
[Fri Apr 17 22:09:31.039390 2026] [:error] [pid 51878:tid 51881] [client 20.19.188.213:64937] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeI_G0nQhUtMbw9Esga6BAAAAQE"]
[Fri Apr 17 22:09:31.883863 2026] [:error] [pid 61523:tid 61544] [client 20.19.188.213:64982] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeI_G8OaH-Pgc7WEf4PqqwAAAcI"]
[Fri Apr 17 22:09:32.431083 2026] [:error] [pid 25010:tid 25031] [client 20.19.188.213:64924] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeI_HI-7kkf42RarqQ2E7AAAAVI"]
[Fri Apr 17 22:09:32.999388 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:64944] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeI_HOMHGxkTZX3c45cYqwAAAJQ"]
[Fri Apr 17 22:09:33.565040 2026] [:error] [pid 34273:tid 34277] [client 20.19.188.213:64984] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeI_HWuQDW686mK3dgEYzQAAAYI"]
[Fri Apr 17 22:09:34.111044 2026] [:error] [pid 61523:tid 61546] [client 20.19.188.213:65500] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeI_HsOaH-Pgc7WEf4PqrQAAAcQ"]
[Fri Apr 17 22:09:35.167426 2026] [:error] [pid 34273:tid 34293] [client 20.19.188.213:65421] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeI_H2uQDW686mK3dgEYzwAAAZI"]
[Fri Apr 17 22:09:35.994830 2026] [:error] [pid 34273:tid 34289] [client 20.19.188.213:65415] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeI_H2uQDW686mK3dgEY0QAAAY4"]
[Fri Apr 17 22:09:36.684380 2026] [:error] [pid 51878:tid 51888] [client 122.51.236.174:43454] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeI_IEnQhUtMbw9Esga6CwAAAQg"]
[Fri Apr 17 22:09:36.792366 2026] [:error] [pid 9152:tid 9200] [client 20.19.188.213:65456] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeI_IJJYca8I3TNCwId1FQAAAEo"]
[Fri Apr 17 22:09:37.473188 2026] [:error] [pid 34273:tid 34283] [client 20.19.188.213:65431] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeI_IWuQDW686mK3dgEY0gAAAYg"]
[Fri Apr 17 22:09:38.433962 2026] [:error] [pid 9153:tid 9233] [client 20.19.188.213:64945] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeI_IuMHGxkTZX3c45cYsAAAAI8"]
[Fri Apr 17 22:09:39.562596 2026] [:error] [pid 9152:tid 9208] [client 20.19.188.213:64337] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeI_I5JYca8I3TNCwId1FgAAAFI"]
[Fri Apr 17 22:09:40.588740 2026] [:error] [pid 9153:tid 9225] [client 20.19.188.213:64905] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeI_JOMHGxkTZX3c45cYuQAAAIc"]
[Fri Apr 17 22:09:41.132785 2026] [:error] [pid 34273:tid 34299] [client 20.19.188.213:64918] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeI_JWuQDW686mK3dgEY1QAAAZg"]
[Fri Apr 17 22:09:41.996048 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:65416] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeI_JeMHGxkTZX3c45cYvAAAAJQ"]
[Fri Apr 17 22:09:42.773873 2026] [:error] [pid 9151:tid 9179] [client 20.19.188.213:65012] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeI_JshTVuRPkua22vRKSAAAABI"]
[Fri Apr 17 22:09:43.511602 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:65445] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aeI_J8OaH-Pgc7WEf4PquQAAAcc"]
[Fri Apr 17 22:09:44.409591 2026] [:error] [pid 34273:tid 34293] [client 20.19.188.213:65524] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aeI_KGuQDW686mK3dgEY3AAAAZI"]
[Fri Apr 17 22:09:45.260874 2026] [:error] [pid 61523:tid 61543] [client 20.19.188.213:64919] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aeI_KcOaH-Pgc7WEf4PqugAAAcE"]
[Fri Apr 17 22:09:46.373859 2026] [:error] [pid 9152:tid 9213] [client 20.19.188.213:65432] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "aeI_KpJYca8I3TNCwId1HAAAAFc"]
[Fri Apr 17 22:09:46.976408 2026] [:error] [pid 9151:tid 9165] [client 20.19.188.213:65498] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/106.php"] [unique_id "aeI_KshTVuRPkua22vRKSgAAAAQ"]
[Fri Apr 17 22:09:47.542183 2026] [:error] [pid 9153:tid 9240] [client 20.19.188.213:65440] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/106.php"] [unique_id "aeI_K-MHGxkTZX3c45cYyQAAAJY"]
[Fri Apr 17 22:09:48.180694 2026] [:error] [pid 9152:tid 9212] [client 20.19.188.213:65011] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/106.php"] [unique_id "aeI_LJJYca8I3TNCwId1HgAAAFY"]
[Fri Apr 17 22:09:49.636324 2026] [:error] [pid 61523:tid 61558] [client 20.19.188.213:65442] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/106.php"] [unique_id "aeI_LcOaH-Pgc7WEf4PqwAAAAdA"]
[Fri Apr 17 22:09:50.337917 2026] [:error] [pid 61523:tid 61564] [client 20.19.188.213:65000] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeI_LsOaH-Pgc7WEf4PqwgAAAdY"]
[Fri Apr 17 22:09:50.929782 2026] [:error] [pid 9152:tid 9204] [client 20.19.188.213:65453] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeI_LpJYca8I3TNCwId1JAAAAE4"]
[Fri Apr 17 22:09:51.798165 2026] [:error] [pid 61523:tid 61554] [client 20.19.188.213:65501] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeI_L8OaH-Pgc7WEf4PqwwAAAcw"]
[Fri Apr 17 22:09:52.499518 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:64900] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeI_MOMHGxkTZX3c45cY0AAAAJQ"]
[Fri Apr 17 22:09:53.509582 2026] [:error] [pid 9152:tid 9213] [client 20.19.188.213:65461] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aeI_MZJYca8I3TNCwId1LQAAAFc"]
[Fri Apr 17 22:09:54.021167 2026] [:error] [pid 34273:tid 34275] [client 20.19.188.213:63714] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aeI_MmuQDW686mK3dgEY7QAAAYA"]
[Fri Apr 17 22:09:54.858613 2026] [:error] [pid 9152:tid 9205] [client 20.19.188.213:65003] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aeI_MpJYca8I3TNCwId1MwAAAE8"]
[Fri Apr 17 22:09:55.611168 2026] [:error] [pid 9153:tid 9226] [client 20.19.188.213:65020] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "aeI_M-MHGxkTZX3c45cY1QAAAIg"]
[Fri Apr 17 22:09:56.314771 2026] [:error] [pid 34273:tid 34287] [client 20.19.188.213:64285] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aeI_NGuQDW686mK3dgEY8QAAAYw"]
[Fri Apr 17 22:09:56.958613 2026] [:error] [pid 51878:tid 51898] [client 20.19.188.213:63708] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aeI_NEnQhUtMbw9Esga6DwAAARI"]
[Fri Apr 17 22:09:57.524201 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:65512] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aeI_NZJYca8I3TNCwId1OwAAAFE"]
[Fri Apr 17 22:09:58.025355 2026] [:error] [pid 51878:tid 51895] [client 20.19.188.213:64329] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aeI_NknQhUtMbw9Esga6EwAAAQ8"]
[Fri Apr 17 22:09:58.721786 2026] [:error] [pid 51878:tid 51882] [client 20.19.188.213:64952] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/41.php"] [unique_id "aeI_NknQhUtMbw9Esga6FgAAAQI"]
[Fri Apr 17 22:09:59.615346 2026] [:error] [pid 34273:tid 34294] [client 20.19.188.213:64961] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/41.php"] [unique_id "aeI_N2uQDW686mK3dgEY-QAAAZM"]
[Fri Apr 17 22:10:00.351364 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:65526] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/41.php"] [unique_id "aeI_OMOaH-Pgc7WEf4Pq1gAAAc0"]
[Fri Apr 17 22:10:00.951750 2026] [:error] [pid 9263:tid 9273] [client 20.19.188.213:64970] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/41.php"] [unique_id "aeI_OBP68VyHNvj1e55pWwAAAMg"]
[Fri Apr 17 22:10:01.697614 2026] [:error] [pid 9263:tid 9283] [client 20.19.188.213:64923] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aeI_ORP68VyHNvj1e55pXgAAANI"]
[Fri Apr 17 22:10:02.312567 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:65506] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aeI_OhP68VyHNvj1e55pXwAAANE"]
[Fri Apr 17 22:10:02.928279 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:64260] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aeI_OknQhUtMbw9Esga6HwAAAQ4"]
[Fri Apr 17 22:10:03.686901 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:64370] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aeI_O2uQDW686mK3dgEY_AAAAYU"]
[Fri Apr 17 22:10:04.278129 2026] [:error] [pid 51878:tid 51882] [client 20.19.188.213:65418] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aeI_PEnQhUtMbw9Esga6IQAAAQI"]
[Fri Apr 17 22:10:04.830907 2026] [:error] [pid 51878:tid 51885] [client 20.19.188.213:65519] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aeI_PEnQhUtMbw9Esga6IgAAAQU"]
[Fri Apr 17 22:10:05.416042 2026] [:error] [pid 34273:tid 34295] [client 20.19.188.213:65441] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aeI_PWuQDW686mK3dgEZBQAAAZQ"]
[Fri Apr 17 22:10:05.936274 2026] [:error] [pid 9151:tid 9168] [client 20.19.188.213:65458] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "aeI_PchTVuRPkua22vRKUgAAAAc"]
[Fri Apr 17 22:10:06.475874 2026] [:error] [pid 9152:tid 9209] [client 20.19.188.213:64378] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aeI_PpJYca8I3TNCwId1RgAAAFM"]
[Fri Apr 17 22:10:07.082681 2026] [:error] [pid 51878:tid 51900] [client 20.19.188.213:63689] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aeI_P0nQhUtMbw9Esga6JQAAARQ"]
[Fri Apr 17 22:10:07.651978 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:64996] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aeI_PxP68VyHNvj1e55pZQAAANg"]
[Fri Apr 17 22:10:08.238982 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:65502] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "aeI_QMOaH-Pgc7WEf4Pq3gAAAcc"]
[Fri Apr 17 22:10:09.569422 2026] [:error] [pid 61523:tid 61563] [client 20.19.188.213:64917] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeI_QcOaH-Pgc7WEf4Pq3wAAAdU"]
[Fri Apr 17 22:10:10.223341 2026] [:error] [pid 51878:tid 51887] [client 20.19.188.213:64950] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeI_QknQhUtMbw9Esga6JwAAAQc"]
[Fri Apr 17 22:10:11.205170 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:65014] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeI_QxP68VyHNvj1e55pcAAAANc"]
[Fri Apr 17 22:10:11.843667 2026] [:error] [pid 9152:tid 9214] [client 20.19.188.213:65475] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeI_Q5JYca8I3TNCwId1TAAAAFg"]
[Fri Apr 17 22:10:12.476377 2026] [:error] [pid 51878:tid 51882] [client 20.19.188.213:64946] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeI_REnQhUtMbw9Esga6LQAAAQI"]
[Fri Apr 17 22:10:13.274114 2026] [:error] [pid 9263:tid 9274] [client 20.19.188.213:65420] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeI_RRP68VyHNvj1e55pcgAAAMk"]
[Fri Apr 17 22:10:14.187994 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:64969] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeI_RhP68VyHNvj1e55pdgAAANQ"]
[Fri Apr 17 22:10:15.034361 2026] [:error] [pid 9263:tid 9286] [client 20.19.188.213:64927] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeI_RxP68VyHNvj1e55pewAAANU"]
[Fri Apr 17 22:10:16.619727 2026] [:error] [pid 61523:tid 61548] [client 20.19.188.213:65429] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws53.php"] [unique_id "aeI_SMOaH-Pgc7WEf4Pq4wAAAcY"]
[Fri Apr 17 22:10:17.725422 2026] [:error] [pid 51878:tid 51880] [client 20.19.188.213:64915] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws53.php"] [unique_id "aeI_SUnQhUtMbw9Esga6NQAAAQA"]
[Fri Apr 17 22:10:18.701121 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:64978] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws53.php"] [unique_id "aeI_SknQhUtMbw9Esga6OgAAAQ0"]
[Fri Apr 17 22:10:19.221336 2026] [:error] [pid 34273:tid 34293] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/ws53.php
[Fri Apr 17 22:10:19.460716 2026] [:error] [pid 34273:tid 34298] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/ws56.php
[Fri Apr 17 22:10:19.699095 2026] [:error] [pid 34273:tid 34286] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/ws58.php
[Fri Apr 17 22:10:19.937108 2026] [:error] [pid 34273:tid 34275] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/ws59.php
[Fri Apr 17 22:10:20.175720 2026] [:error] [pid 34273:tid 34299] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_O1JFaUaF.php
[Fri Apr 17 22:10:20.420424 2026] [:error] [pid 34273:tid 34289] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Fri Apr 17 22:10:20.659165 2026] [:error] [pid 34273:tid 34279] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Fri Apr 17 22:10:20.897700 2026] [:error] [pid 34273:tid 34297] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Fri Apr 17 22:10:21.179671 2026] [:error] [pid 34273:tid 34288] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/iov.php
[Fri Apr 17 22:10:21.418124 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/jodohghi.php
[Fri Apr 17 22:10:21.656564 2026] [:error] [pid 34273:tid 34285] [client 20.19.188.213:64989] File does not exist: /usr/local/apache/htdocs/suspended-page/lmlwpbmm.php
[Fri Apr 17 22:10:21.926708 2026] [:error] [pid 34273:tid 34276] [client 20.19.188.213:64989] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "aeI_TWuQDW686mK3dgEZTwAAAYE"]
[Fri Apr 17 22:10:22.454389 2026] [:error] [pid 51878:tid 51887] [client 20.19.188.213:65451] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "aeI_TknQhUtMbw9Esga6SAAAAQc"]
[Fri Apr 17 22:10:23.030716 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64907] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "aeI_TxP68VyHNvj1e55pigAAAMQ"]
[Fri Apr 17 22:10:23.602790 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:63636] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "aeI_T0nQhUtMbw9Esga6SgAAAQ0"]
[Fri Apr 17 22:10:24.329619 2026] [:error] [pid 34273:tid 34297] [client 20.19.188.213:65010] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeI_UGuQDW686mK3dgEZWgAAAZY"]
[Fri Apr 17 22:10:25.658250 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:64376] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeI_UcOaH-Pgc7WEf4Pq7AAAAdg"]
[Fri Apr 17 22:10:26.554474 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:65516] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeI_UsOaH-Pgc7WEf4Pq7QAAAco"]
[Fri Apr 17 22:10:27.058940 2026] [:error] [pid 9152:tid 9201] [client 20.19.188.213:64312] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeI_U5JYca8I3TNCwId1YAAAAEs"]
[Fri Apr 17 22:10:27.609924 2026] [:error] [pid 9263:tid 9271] [client 20.19.188.213:65506] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeI_UxP68VyHNvj1e55pkgAAAMY"]
[Fri Apr 17 22:10:28.188793 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:64902] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeI_VBP68VyHNvj1e55plgAAANY"]
[Fri Apr 17 22:10:28.837585 2026] [:error] [pid 9152:tid 9193] [client 20.19.188.213:65497] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeI_VJJYca8I3TNCwId1ZAAAAEM"]
[Fri Apr 17 22:10:29.417278 2026] [:error] [pid 9152:tid 9199] [client 20.19.188.213:65409] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeI_VZJYca8I3TNCwId1ZwAAAEk"]
[Fri Apr 17 22:10:30.058492 2026] [:error] [pid 34273:tid 34297] [client 20.19.188.213:64344] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abhjr.php"] [unique_id "aeI_VmuQDW686mK3dgEZbQAAAZY"]
[Fri Apr 17 22:10:30.571435 2026] [:error] [pid 9151:tid 9183] [client 20.19.188.213:64345] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abhjr.php"] [unique_id "aeI_VshTVuRPkua22vRKWAAAABY"]
[Fri Apr 17 22:10:31.108935 2026] [:error] [pid 9152:tid 9206] [client 20.19.188.213:65465] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abhjr.php"] [unique_id "aeI_V5JYca8I3TNCwId1agAAAFA"]
[Fri Apr 17 22:10:31.631592 2026] [:error] [pid 9151:tid 9178] [client 20.19.188.213:64256] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abhjr.php"] [unique_id "aeI_V8hTVuRPkua22vRKWQAAABE"]
[Fri Apr 17 22:10:32.293285 2026] [:error] [pid 9151:tid 9166] [client 20.19.188.213:64374] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeI_WMhTVuRPkua22vRKWwAAAAU"]
[Fri Apr 17 22:10:32.840897 2026] [:error] [pid 9151:tid 9182] [client 20.19.188.213:64910] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeI_WMhTVuRPkua22vRKXAAAABU"]
[Fri Apr 17 22:10:33.588635 2026] [:error] [pid 9152:tid 9202] [client 20.19.188.213:64914] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeI_WZJYca8I3TNCwId1eQAAAEw"]
[Fri Apr 17 22:10:34.154180 2026] [:error] [pid 9152:tid 9204] [client 20.19.188.213:64341] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeI_WpJYca8I3TNCwId1fQAAAE4"]
[Fri Apr 17 22:10:34.765462 2026] [:error] [pid 9151:tid 9175] [client 20.19.188.213:64997] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeI_WshTVuRPkua22vRKXwAAAA4"]
[Fri Apr 17 22:10:35.240182 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:65434] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeI_WxP68VyHNvj1e55powAAANQ"]
[Fri Apr 17 22:10:35.841703 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:64988] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeI_WxP68VyHNvj1e55ppwAAAME"]
[Fri Apr 17 22:10:36.419641 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:64966] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeI_XEnQhUtMbw9Esga6WAAAARA"]
[Fri Apr 17 22:10:37.083837 2026] [:error] [pid 9153:tid 9218] [client 20.19.188.213:64335] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeI_XeMHGxkTZX3c45cY7gAAAIA"]
[Fri Apr 17 22:10:37.641455 2026] [:error] [pid 9153:tid 9227] [client 20.19.188.213:64941] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeI_XeMHGxkTZX3c45cY8AAAAIk"]
[Fri Apr 17 22:10:38.476480 2026] [:error] [pid 9151:tid 9164] [client 20.19.188.213:64942] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeI_XshTVuRPkua22vRKYAAAAAM"]
[Fri Apr 17 22:10:39.110838 2026] [:error] [pid 9153:tid 9222] [client 20.19.188.213:65487] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeI_X-MHGxkTZX3c45cY8wAAAIQ"]
[Fri Apr 17 22:10:40.054904 2026] [:error] [pid 9153:tid 9224] [client 20.19.188.213:65494] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeI_YOMHGxkTZX3c45cY9QAAAIY"]
[Fri Apr 17 22:10:41.682458 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:64374] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeI_YZJYca8I3TNCwId1jwAAAFE"]
[Fri Apr 17 22:10:43.312244 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:65468] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeI_YxP68VyHNvj1e55pvAAAANc"]
[Fri Apr 17 22:10:43.866430 2026] [:error] [pid 9153:tid 9234] [client 20.19.188.213:65477] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeI_Y-MHGxkTZX3c45cY-wAAAJA"]
[Fri Apr 17 22:10:44.495069 2026] [:error] [pid 25010:tid 25024] [client 20.19.188.213:65513] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeI_ZI-7kkf42RarqQ2FCwAAAUs"]
[Fri Apr 17 22:10:45.123745 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:64935] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeI_ZRP68VyHNvj1e55pxAAAANE"]
[Fri Apr 17 22:10:45.753609 2026] [:error] [pid 9153:tid 9237] [client 20.19.188.213:64973] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeI_ZeMHGxkTZX3c45cZAwAAAJM"]
[Fri Apr 17 22:10:46.549926 2026] [:error] [pid 9152:tid 9195] [client 20.19.188.213:64339] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeI_ZpJYca8I3TNCwId1kwAAAEU"]
[Fri Apr 17 22:10:47.093946 2026] [:error] [pid 51878:tid 51888] [client 20.19.188.213:65021] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeI_Z0nQhUtMbw9Esga6awAAAQg"]
[Fri Apr 17 22:10:47.842380 2026] [:error] [pid 9152:tid 9208] [client 20.19.188.213:65422] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeI_Z5JYca8I3TNCwId1lwAAAFI"]
[Fri Apr 17 22:10:48.433206 2026] [:error] [pid 9151:tid 9169] [client 20.19.188.213:65509] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeI_aMhTVuRPkua22vRKeAAAAAg"]
[Fri Apr 17 22:10:49.016356 2026] [:error] [pid 9263:tid 9284] [client 20.19.188.213:64295] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeI_aRP68VyHNvj1e55p1AAAANM"]
[Fri Apr 17 22:10:49.568281 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:64972] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aeI_aUnQhUtMbw9Esga6nAAAARg"]
[Fri Apr 17 22:10:50.122270 2026] [:error] [pid 51878:tid 51892] [client 20.19.188.213:63705] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aeI_aknQhUtMbw9Esga6owAAAQw"]
[Fri Apr 17 22:10:50.716651 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:65411] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aeI_ahP68VyHNvj1e55p2QAAANE"]
[Fri Apr 17 22:10:51.212729 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:65425] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bykdo.php"] [unique_id "aeI_axP68VyHNvj1e55p3wAAANQ"]
[Fri Apr 17 22:10:51.696301 2026] [:error] [pid 9151:tid 9175] [client 20.19.188.213:64293] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeI_a8hTVuRPkua22vRKggAAAA4"]
[Fri Apr 17 22:10:52.198723 2026] [:error] [pid 34273:tid 34288] [client 20.19.188.213:65006] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeI_bGuQDW686mK3dgEZlAAAAY0"]
[Fri Apr 17 22:10:52.742044 2026] [:error] [pid 51878:tid 51880] [client 20.19.188.213:63698] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeI_bEnQhUtMbw9Esga6sAAAAQA"]
[Fri Apr 17 22:10:53.224170 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:63704] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeI_bWuQDW686mK3dgEZlwAAAYU"]
[Fri Apr 17 22:10:53.815552 2026] [:error] [pid 9151:tid 9162] [client 20.19.188.213:65013] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeI_bchTVuRPkua22vRKgwAAAAE"]
[Fri Apr 17 22:10:54.370315 2026] [:error] [pid 25010:tid 25015] [client 20.19.188.213:64949] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeI_bo-7kkf42RarqQ2FEgAAAUI"]
[Fri Apr 17 22:10:54.848444 2026] [:error] [pid 9153:tid 9222] [client 20.19.188.213:64268] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeI_buMHGxkTZX3c45cZJgAAAIQ"]
[Fri Apr 17 22:10:55.412190 2026] [:error] [pid 61523:tid 61560] [client 20.19.188.213:64275] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeI_b8OaH-Pgc7WEf4Pq-wAAAdI"]
[Fri Apr 17 22:10:55.910107 2026] [:error] [pid 25010:tid 25022] [client 20.19.188.213:65469] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeI_b4-7kkf42RarqQ2FFgAAAUk"]
[Fri Apr 17 22:10:56.493076 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:65476] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeI_cBP68VyHNvj1e55p6AAAAM4"]
[Fri Apr 17 22:10:57.098891 2026] [:error] [pid 61523:tid 61541] [client 20.19.188.213:64334] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeI_ccOaH-Pgc7WEf4PrAgAAAcA"]
[Fri Apr 17 22:10:57.658295 2026] [:error] [pid 34273:tid 34298] [client 20.19.188.213:64366] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeI_cWuQDW686mK3dgEZngAAAZc"]
[Fri Apr 17 22:10:58.235891 2026] [:error] [pid 34273:tid 34275] [client 20.19.188.213:65417] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aeI_cmuQDW686mK3dgEZogAAAYA"]
[Fri Apr 17 22:10:58.869926 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64904] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aeI_chP68VyHNvj1e55p6wAAAMQ"]
[Fri Apr 17 22:10:59.452400 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:64920] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aeI_c0nQhUtMbw9Esga6ugAAAQY"]
[Fri Apr 17 22:11:02.309137 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:64991] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/click.php"] [unique_id "aeI_dhP68VyHNvj1e55p7wAAAMM"]
[Fri Apr 17 22:11:03.236477 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:64899] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctjpseby.php"] [unique_id "aeI_dxP68VyHNvj1e55p8QAAANQ"]
[Fri Apr 17 22:11:03.801889 2026] [:error] [pid 51878:tid 51882] [client 20.19.188.213:65514] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctjpseby.php"] [unique_id "aeI_d0nQhUtMbw9Esga6wgAAAQI"]
[Fri Apr 17 22:11:04.766709 2026] [:error] [pid 61523:tid 61561] [client 20.19.188.213:65437] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctjpseby.php"] [unique_id "aeI_eMOaH-Pgc7WEf4PrBwAAAdM"]
[Fri Apr 17 22:11:05.877985 2026] [:error] [pid 61523:tid 61554] [client 20.19.188.213:63674] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctjpseby.php"] [unique_id "aeI_ecOaH-Pgc7WEf4PrCQAAAcw"]
[Fri Apr 17 22:11:07.253247 2026] [:error] [pid 9153:tid 9239] [client 20.19.188.213:65430] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aeI_e-MHGxkTZX3c45cZLgAAAJU"]
[Fri Apr 17 22:11:08.215854 2026] [:error] [pid 9152:tid 9212] [client 20.19.188.213:64995] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aeI_fJJYca8I3TNCwId1ugAAAFY"]
[Fri Apr 17 22:11:09.192778 2026] [:error] [pid 34273:tid 34282] [client 20.19.188.213:65522] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aeI_fWuQDW686mK3dgEZwwAAAYc"]
[Fri Apr 17 22:11:10.261597 2026] [:error] [pid 9152:tid 9193] [client 20.19.188.213:64358] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cxxuv.php"] [unique_id "aeI_fpJYca8I3TNCwId1vwAAAEM"]
[Fri Apr 17 22:11:11.326537 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:65019] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dawvg.php"] [unique_id "aeI_f0nQhUtMbw9Esga6ywAAAQ0"]
[Fri Apr 17 22:11:12.373214 2026] [:error] [pid 25010:tid 25022] [client 20.19.188.213:64354] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dawvg.php"] [unique_id "aeI_gI-7kkf42RarqQ2FJwAAAUk"]
[Fri Apr 17 22:11:13.746714 2026] [:error] [pid 51878:tid 51902] [client 20.19.188.213:63712] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dawvg.php"] [unique_id "aeI_gUnQhUtMbw9Esga61AAAARY"]
[Fri Apr 17 22:11:14.696751 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:64322] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dawvg.php"] [unique_id "aeI_gknQhUtMbw9Esga63AAAAQ0"]
[Fri Apr 17 22:11:15.219150 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:64976] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeI_g0nQhUtMbw9Esga63wAAAQo"]
[Fri Apr 17 22:11:15.984222 2026] [:error] [pid 61523:tid 61556] [client 20.19.188.213:63062] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeI_g8OaH-Pgc7WEf4PrHQAAAc4"]
[Fri Apr 17 22:11:16.611221 2026] [:error] [pid 9152:tid 9195] [client 20.19.188.213:63680] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeI_hJJYca8I3TNCwId1xQAAAEU"]
[Fri Apr 17 22:11:17.278110 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:64929] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeI_hRP68VyHNvj1e55qCgAAAMM"]
[Fri Apr 17 22:11:17.926417 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:64291] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diayd.php"] [unique_id "aeI_hUnQhUtMbw9Esga67wAAARc"]
[Fri Apr 17 22:11:18.440018 2026] [:error] [pid 61523:tid 61565] [client 20.19.188.213:64922] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diayd.php"] [unique_id "aeI_hsOaH-Pgc7WEf4PrIgAAAdc"]
[Fri Apr 17 22:11:18.976098 2026] [:error] [pid 9151:tid 9173] [client 20.19.188.213:65523] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diayd.php"] [unique_id "aeI_hshTVuRPkua22vRKiwAAAAw"]
[Fri Apr 17 22:11:19.801447 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:64324] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diayd.php"] [unique_id "aeI_h-MHGxkTZX3c45cZNQAAAJQ"]
[Fri Apr 17 22:11:20.353497 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:65470] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeI_iBP68VyHNvj1e55qDgAAAMw"]
[Fri Apr 17 22:11:21.064501 2026] [:error] [pid 25010:tid 25029] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/dljpy.php
[Fri Apr 17 22:11:21.319974 2026] [:error] [pid 25010:tid 25036] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/dqagu.php
[Fri Apr 17 22:11:21.562565 2026] [:error] [pid 25010:tid 25014] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/druqr.php
[Fri Apr 17 22:11:21.835364 2026] [:error] [pid 25010:tid 25021] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/dyxbc.php
[Fri Apr 17 22:11:22.162415 2026] [:error] [pid 25010:tid 25020] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/eapjf.php
[Fri Apr 17 22:11:22.400243 2026] [:error] [pid 25010:tid 25035] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/ebuom.php
[Fri Apr 17 22:11:22.637605 2026] [:error] [pid 25010:tid 25023] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/emcgm.php
[Fri Apr 17 22:11:22.876251 2026] [:error] [pid 25010:tid 25030] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/euocu.php
[Fri Apr 17 22:11:23.114725 2026] [:error] [pid 25010:tid 25015] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Apr 17 22:11:23.372757 2026] [:error] [pid 25010:tid 25016] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/frdyx.php
[Fri Apr 17 22:11:23.627284 2026] [:error] [pid 25010:tid 25022] [client 20.19.188.213:64294] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Fri Apr 17 22:11:23.862094 2026] [:error] [pid 25010:tid 25037] [client 20.19.188.213:64294] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeI_i4-7kkf42RarqQ2FOQAAAVg"]
[Fri Apr 17 22:11:24.460764 2026] [:error] [pid 9151:tid 9166] [client 20.19.188.213:64258] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeI_jMhTVuRPkua22vRKjQAAAAU"]
[Fri Apr 17 22:11:25.054013 2026] [:error] [pid 25010:tid 25026] [client 20.19.188.213:63670] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeI_jY-7kkf42RarqQ2FPgAAAU0"]
[Fri Apr 17 22:11:25.717793 2026] [:error] [pid 61523:tid 61557] [client 20.19.188.213:65466] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeI_jcOaH-Pgc7WEf4PrLgAAAc8"]
[Fri Apr 17 22:11:26.407409 2026] [:error] [pid 61523:tid 61560] [client 20.19.188.213:64299] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeI_jsOaH-Pgc7WEf4PrMgAAAdI"]
[Fri Apr 17 22:11:27.064249 2026] [:error] [pid 9151:tid 9171] [client 20.19.188.213:65017] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeI_j8hTVuRPkua22vRKkAAAAAo"]
[Fri Apr 17 22:11:27.784118 2026] [:error] [pid 9151:tid 9170] [client 20.19.188.213:64993] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeI_j8hTVuRPkua22vRKlAAAAAk"]
[Fri Apr 17 22:11:28.377250 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:64999] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeI_kBP68VyHNvj1e55qEwAAANE"]
[Fri Apr 17 22:11:29.067150 2026] [:error] [pid 61523:tid 61543] [client 20.19.188.213:65484] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeI_kcOaH-Pgc7WEf4PrNgAAAcE"]
[Fri Apr 17 22:11:29.891813 2026] [:error] [pid 9151:tid 9181] [client 20.19.188.213:64903] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeI_kchTVuRPkua22vRKlwAAABQ"]
[Fri Apr 17 22:11:30.562981 2026] [:error] [pid 61523:tid 61541] [client 20.19.188.213:64332] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeI_ksOaH-Pgc7WEf4PrOwAAAcA"]
[Fri Apr 17 22:11:31.098108 2026] [:error] [pid 61523:tid 61564] [client 20.19.188.213:64964] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeI_k8OaH-Pgc7WEf4PrPQAAAdY"]
[Fri Apr 17 22:11:31.599412 2026] [:error] [pid 9151:tid 9176] [client 20.19.188.213:64321] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeI_k8hTVuRPkua22vRKmgAAAA8"]
[Fri Apr 17 22:11:32.113731 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:65472] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeI_lBP68VyHNvj1e55qFwAAAMw"]
[Fri Apr 17 22:11:32.620030 2026] [:error] [pid 61523:tid 61553] [client 20.19.188.213:64957] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeI_lMOaH-Pgc7WEf4PrQwAAAcs"]
[Fri Apr 17 22:11:33.144560 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:65007] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeI_lWuQDW686mK3dgEZ5gAAAYU"]
[Fri Apr 17 22:11:33.661284 2026] [:error] [pid 34273:tid 34281] [client 20.19.188.213:64357] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeI_lWuQDW686mK3dgEZ6AAAAYY"]
[Fri Apr 17 22:11:34.198608 2026] [:error] [pid 9151:tid 9162] [client 20.19.188.213:64912] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeI_lshTVuRPkua22vRKngAAAAE"]
[Fri Apr 17 22:11:34.838286 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:63683] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeI_lhP68VyHNvj1e55qHwAAANY"]
[Fri Apr 17 22:11:35.406052 2026] [:error] [pid 9263:tid 9271] [client 20.19.188.213:64287] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeI_lxP68VyHNvj1e55qIwAAAMY"]
[Fri Apr 17 22:11:35.892687 2026] [:error] [pid 9153:tid 9242] [client 20.19.188.213:64261] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeI_l-MHGxkTZX3c45cZQgAAAJg"]
[Fri Apr 17 22:11:36.513661 2026] [:error] [pid 9152:tid 9213] [client 20.19.188.213:64360] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeI_mJJYca8I3TNCwId11AAAAFc"]
[Fri Apr 17 22:11:37.028968 2026] [:error] [pid 9263:tid 9286] [client 20.19.188.213:65004] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeI_mRP68VyHNvj1e55qLQAAANU"]
[Fri Apr 17 22:11:37.602205 2026] [:error] [pid 61523:tid 61562] [client 20.19.188.213:63697] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeI_mcOaH-Pgc7WEf4PrUAAAAdQ"]
[Fri Apr 17 22:11:38.299420 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:64959] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeI_mknQhUtMbw9Esga6_QAAARc"]
[Fri Apr 17 22:11:38.938000 2026] [:error] [pid 51878:tid 51895] [client 20.19.188.213:63687] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeI_mknQhUtMbw9Esga7AgAAAQ8"]
[Fri Apr 17 22:11:39.496857 2026] [:error] [pid 51878:tid 51885] [client 20.19.188.213:63696] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeI_m0nQhUtMbw9Esga7BQAAAQU"]
[Fri Apr 17 22:11:40.047589 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:64896] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeI_nEnQhUtMbw9Esga7CwAAARA"]
[Fri Apr 17 22:11:40.551816 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:63050] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeI_nEnQhUtMbw9Esga7DgAAAQ4"]
[Fri Apr 17 22:11:41.140220 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:63654] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeI_nZJYca8I3TNCwId11wAAAFE"]
[Fri Apr 17 22:11:41.650680 2026] [:error] [pid 9152:tid 9211] [client 20.19.188.213:62439] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeI_nZJYca8I3TNCwId12AAAAFU"]
[Fri Apr 17 22:11:42.642133 2026] [:error] [pid 9263:tid 9273] [client 20.19.188.213:64913] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeI_nhP68VyHNvj1e55qMwAAAMg"]
[Fri Apr 17 22:11:43.298068 2026] [:error] [pid 9153:tid 9239] [client 20.19.188.213:65478] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeI_n-MHGxkTZX3c45cZSQAAAJU"]
[Fri Apr 17 22:11:44.263391 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:65520] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeI_oBP68VyHNvj1e55qOwAAANE"]
[Fri Apr 17 22:11:45.867970 2026] [:error] [pid 9263:tid 9273] [client 20.19.188.213:64998] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeI_oRP68VyHNvj1e55qQwAAAMg"]
[Fri Apr 17 22:11:47.134654 2026] [:error] [pid 9152:tid 9210] [client 20.19.188.213:64330] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeI_o5JYca8I3TNCwId12QAAAFQ"]
[Fri Apr 17 22:11:48.852115 2026] [:error] [pid 61523:tid 61563] [client 20.19.188.213:63662] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeI_pMOaH-Pgc7WEf4PrWwAAAdU"]
[Fri Apr 17 22:11:51.905283 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:65473] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeI_p0nQhUtMbw9Esga7IwAAAQ0"]
[Fri Apr 17 22:11:53.729915 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:65496] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeI_qRP68VyHNvj1e55qUgAAAMw"]
[Fri Apr 17 22:11:55.124680 2026] [:error] [pid 9153:tid 9226] [client 20.19.188.213:64916] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeI_q-MHGxkTZX3c45cZTAAAAIg"]
[Fri Apr 17 22:11:56.020706 2026] [:error] [pid 9151:tid 9170] [client 20.19.188.213:64350] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeI_rMhTVuRPkua22vRKqQAAAAk"]
[Fri Apr 17 22:11:58.422587 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:64313] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeI_rpJYca8I3TNCwId14wAAAFE"]
[Fri Apr 17 22:11:59.547442 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:63638] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeI_rxP68VyHNvj1e55qYQAAANE"]
[Fri Apr 17 22:12:00.728972 2026] [:error] [pid 34273:tid 34287] [client 20.19.188.213:64953] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeI_sGuQDW686mK3dgEaDAAAAYw"]
[Fri Apr 17 22:12:01.498028 2026] [:error] [pid 61523:tid 61561] [client 20.19.188.213:64373] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kagug.php"] [unique_id "aeI_scOaH-Pgc7WEf4PrbAAAAdM"]
[Fri Apr 17 22:12:02.242307 2026] [:error] [pid 9152:tid 9204] [client 20.19.188.213:63032] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kagug.php"] [unique_id "aeI_spJYca8I3TNCwId15wAAAE4"]
[Fri Apr 17 22:12:03.228107 2026] [:error] [pid 25010:tid 25026] [client 20.19.188.213:65471] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kagug.php"] [unique_id "aeI_s4-7kkf42RarqQ2FUgAAAU0"]
[Fri Apr 17 22:12:04.408948 2026] [:error] [pid 9152:tid 9199] [client 20.19.188.213:64908] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kagug.php"] [unique_id "aeI_tJJYca8I3TNCwId18wAAAEk"]
[Fri Apr 17 22:12:05.470986 2026] [:error] [pid 9152:tid 9206] [client 20.19.188.213:64980] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kandw.php"] [unique_id "aeI_tZJYca8I3TNCwId1-gAAAFA"]
[Fri Apr 17 22:12:06.552044 2026] [:error] [pid 9152:tid 9201] [client 20.19.188.213:64333] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kandw.php"] [unique_id "aeI_tpJYca8I3TNCwId1_QAAAEs"]
[Fri Apr 17 22:12:07.370639 2026] [:error] [pid 34273:tid 34299] [client 20.19.188.213:64977] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kandw.php"] [unique_id "aeI_t2uQDW686mK3dgEaEgAAAZg"]
[Fri Apr 17 22:12:08.402833 2026] [:error] [pid 51878:tid 51891] [client 20.19.188.213:64382] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kandw.php"] [unique_id "aeI_uEnQhUtMbw9Esga7LQAAAQs"]
[Fri Apr 17 22:12:08.956800 2026] [:error] [pid 51878:tid 51881] [client 20.19.188.213:64948] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeI_uEnQhUtMbw9Esga7MQAAAQE"]
[Fri Apr 17 22:12:09.562860 2026] [:error] [pid 61523:tid 61543] [client 20.19.188.213:64283] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeI_ucOaH-Pgc7WEf4PrdwAAAcE"]
[Fri Apr 17 22:12:10.434951 2026] [:error] [pid 51878:tid 51901] [client 20.19.188.213:65412] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeI_uknQhUtMbw9Esga7OQAAARU"]
[Fri Apr 17 22:12:11.008029 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:64362] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeI_u0nQhUtMbw9Esga7PAAAARg"]
[Fri Apr 17 22:12:11.502746 2026] [:error] [pid 51878:tid 51900] [client 20.19.188.213:65510] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeI_u0nQhUtMbw9Esga7PwAAARQ"]
[Fri Apr 17 22:12:12.134467 2026] [:error] [pid 61523:tid 61558] [client 20.19.188.213:65490] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeI_vMOaH-Pgc7WEf4PrggAAAdA"]
[Fri Apr 17 22:12:12.734278 2026] [:error] [pid 34273:tid 34287] [client 20.19.188.213:64954] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeI_vGuQDW686mK3dgEaGAAAAYw"]
[Fri Apr 17 22:12:13.278659 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:63686] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeI_vcOaH-Pgc7WEf4PriQAAAc0"]
[Fri Apr 17 22:12:13.848558 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:65449] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeI_vRP68VyHNvj1e55qdQAAAM0"]
[Fri Apr 17 22:12:14.509907 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:64940] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeI_vhP68VyHNvj1e55qdwAAANQ"]
[Fri Apr 17 22:12:15.038041 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:64328] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeI_v-MHGxkTZX3c45cZVwAAAJQ"]
[Fri Apr 17 22:12:15.646647 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:63722] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeI_vxP68VyHNvj1e55qeAAAAMU"]
[Fri Apr 17 22:12:16.218171 2026] [:error] [pid 9152:tid 9193] [client 20.19.188.213:63740] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeI_wJJYca8I3TNCwId2DgAAAEM"]
[Fri Apr 17 22:12:16.933098 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:65464] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeI_wEnQhUtMbw9Esga7SwAAAQo"]
[Fri Apr 17 22:12:17.636689 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:63635] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeI_wRP68VyHNvj1e55qfgAAAMA"]
[Fri Apr 17 22:12:18.227931 2026] [:error] [pid 9153:tid 9220] [client 20.19.188.213:65517] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeI_wuMHGxkTZX3c45cZWgAAAII"]
[Fri Apr 17 22:12:18.810598 2026] [:error] [pid 9263:tid 9286] [client 20.19.188.213:65521] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtogs.php"] [unique_id "aeI_whP68VyHNvj1e55qgQAAANU"]
[Fri Apr 17 22:12:19.581993 2026] [:error] [pid 9151:tid 9169] [client 20.19.188.213:64356] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtogs.php"] [unique_id "aeI_w8hTVuRPkua22vRKrwAAAAg"]
[Fri Apr 17 22:12:20.155426 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:64938] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtogs.php"] [unique_id "aeI_xBP68VyHNvj1e55qhwAAAMo"]
[Fri Apr 17 22:12:20.701179 2026] [:error] [pid 9263:tid 9280] [client 20.19.188.213:64383] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtogs.php"] [unique_id "aeI_xBP68VyHNvj1e55qigAAAM8"]
[Fri Apr 17 22:12:21.246647 2026] [:error] [pid 25010:tid 25031] [client 20.19.188.213:65460] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xbbih.php"] [unique_id "aeI_xY-7kkf42RarqQ2FVwAAAVI"]
[Fri Apr 17 22:12:21.815507 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:64963] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xbbih.php"] [unique_id "aeI_xUnQhUtMbw9Esga7WwAAARc"]
[Fri Apr 17 22:12:22.559846 2026] [:error] [pid 9153:tid 9239] [client 20.19.188.213:65450] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xbbih.php"] [unique_id "aeI_xuMHGxkTZX3c45cZWwAAAJU"]
[Fri Apr 17 22:12:23.199883 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/xbbih.php
[Fri Apr 17 22:12:23.600970 2026] [:error] [pid 9263:tid 9276] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/xcakx.php
[Fri Apr 17 22:12:23.840474 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/xjgdw.php
[Fri Apr 17 22:12:24.245687 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/xopgt.php
[Fri Apr 17 22:12:24.492331 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/xsjtz.php
[Fri Apr 17 22:12:24.929085 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/zvinn.php
[Fri Apr 17 22:12:25.545090 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/balin.php
[Fri Apr 17 22:12:25.802469 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/0x19493QU8ZQ.php
[Fri Apr 17 22:12:26.040591 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/13ede.php
[Fri Apr 17 22:12:26.277957 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/akhvg.php
[Fri Apr 17 22:12:26.579968 2026] [:error] [pid 9263:tid 9281] [client 20.19.188.213:64259] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Fri Apr 17 22:12:26.817642 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:64259] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "aeI_yhP68VyHNvj1e55qpAAAAMA"]
[Fri Apr 17 22:12:27.979632 2026] [:error] [pid 9153:tid 9223] [client 20.19.188.213:63729] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "aeI_y-MHGxkTZX3c45cZXwAAAIU"]
[Fri Apr 17 22:12:28.715419 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:63734] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "aeI_zEnQhUtMbw9Esga7cAAAARc"]
[Fri Apr 17 22:12:29.947160 2026] [:error] [pid 9263:tid 9281] [client 20.19.188.213:64975] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "aeI_zRP68VyHNvj1e55qrwAAANA"]
[Fri Apr 17 22:12:32.011598 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:65499] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aeI_0BP68VyHNvj1e55qtAAAAMo"]
[Fri Apr 17 22:12:32.954447 2026] [:error] [pid 9152:tid 9190] [client 20.19.188.213:64981] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aeI_0JJYca8I3TNCwId2KAAAAEA"]
[Fri Apr 17 22:12:34.669208 2026] [:error] [pid 25010:tid 25031] [client 20.19.188.213:64934] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aeI_0o-7kkf42RarqQ2FZgAAAVI"]
[Fri Apr 17 22:12:35.612053 2026] [:error] [pid 9263:tid 9274] [client 20.19.188.213:65504] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aeI_0xP68VyHNvj1e55qwQAAAMk"]
[Fri Apr 17 22:12:36.412515 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:64909] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aeI_1MOaH-Pgc7WEf4ProwAAAcc"]
[Fri Apr 17 22:12:37.350193 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:65022] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aeI_1RP68VyHNvj1e55qxgAAAMw"]
[Fri Apr 17 22:12:38.432598 2026] [:error] [pid 61523:tid 61560] [client 20.19.188.213:64921] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aeI_1sOaH-Pgc7WEf4PrpQAAAdI"]
[Fri Apr 17 22:12:39.240686 2026] [:error] [pid 61523:tid 61563] [client 20.19.188.213:64994] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "aeI_18OaH-Pgc7WEf4PrqAAAAdU"]
[Fri Apr 17 22:12:39.835112 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:64967] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeI_1xP68VyHNvj1e55qzAAAAM0"]
[Fri Apr 17 22:12:40.676214 2026] [:error] [pid 9152:tid 9211] [client 20.19.188.213:65518] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeI_2JJYca8I3TNCwId2LwAAAFU"]
[Fri Apr 17 22:12:41.313199 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:63692] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeI_2RP68VyHNvj1e55q1AAAANQ"]
[Fri Apr 17 22:12:42.107403 2026] [:error] [pid 9263:tid 9284] [client 20.19.188.213:63664] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fetch.php"] [unique_id "aeI_2hP68VyHNvj1e55q2AAAANM"]
[Fri Apr 17 22:12:42.993154 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:65435] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeI_2knQhUtMbw9Esga7hQAAAQ0"]
[Fri Apr 17 22:12:43.986057 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:64264] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeI_2xP68VyHNvj1e55q5AAAANY"]
[Fri Apr 17 22:12:45.023353 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:64317] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeI_3cOaH-Pgc7WEf4PrrgAAAcc"]
[Fri Apr 17 22:12:45.698508 2026] [:error] [pid 61523:tid 61559] [client 20.19.188.213:64990] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeI_3cOaH-Pgc7WEf4PrsgAAAdE"]
[Fri Apr 17 22:12:46.361396 2026] [:error] [pid 9263:tid 9280] [client 20.19.188.213:65486] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeI_3hP68VyHNvj1e55q6wAAAM8"]
[Fri Apr 17 22:12:47.179949 2026] [:error] [pid 61523:tid 61558] [client 20.19.188.213:63640] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeI_38OaH-Pgc7WEf4PrtwAAAdA"]
[Fri Apr 17 22:12:48.034139 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:60304] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeI_4BP68VyHNvj1e55q-wAAANg"]
[Fri Apr 17 22:12:49.430417 2026] [:error] [pid 61523:tid 61562] [client 20.19.188.213:63691] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin_bkp.php"] [unique_id "aeI_4cOaH-Pgc7WEf4PrvAAAAdQ"]
[Fri Apr 17 22:12:50.528377 2026] [:error] [pid 51878:tid 51899] [client 20.19.188.213:65002] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeI_4knQhUtMbw9Esga7qwAAARM"]
[Fri Apr 17 22:12:51.887822 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:64911] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeI_48OaH-Pgc7WEf4PrvQAAAcc"]
[Fri Apr 17 22:12:52.726536 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:64943] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeI_5BP68VyHNvj1e55rAQAAAMw"]
[Fri Apr 17 22:12:53.954405 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:64898] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeI_5WuQDW686mK3dgEaKwAAAYU"]
[Fri Apr 17 22:12:54.782838 2026] [:error] [pid 9152:tid 9210] [client 20.19.188.213:63666] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeI_5pJYca8I3TNCwId2OwAAAFQ"]
[Fri Apr 17 22:12:55.739583 2026] [:error] [pid 9151:tid 9180] [client 20.19.188.213:63632] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeI_58hTVuRPkua22vRKugAAABM"]
[Fri Apr 17 22:12:56.468926 2026] [:error] [pid 9263:tid 9271] [client 20.19.188.213:65426] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeI_6BP68VyHNvj1e55rCwAAAMY"]
[Fri Apr 17 22:12:58.129893 2026] [:error] [pid 9153:tid 9240] [client 20.19.188.213:63639] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeI_6uMHGxkTZX3c45cZdAAAAJY"]
[Fri Apr 17 22:12:59.990014 2026] [:error] [pid 9153:tid 9221] [client 20.19.188.213:63693] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aeI_6-MHGxkTZX3c45cZfQAAAIM"]
[Fri Apr 17 22:13:00.760573 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:65443] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aeI_7BP68VyHNvj1e55rIQAAANc"]
[Fri Apr 17 22:13:01.416200 2026] [:error] [pid 9153:tid 9232] [client 20.19.188.213:63630] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aeI_7eMHGxkTZX3c45cZfwAAAI4"]
[Fri Apr 17 22:13:02.009878 2026] [:error] [pid 9263:tid 9274] [client 20.19.188.213:64926] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abalqdol.php"] [unique_id "aeI_7hP68VyHNvj1e55rKQAAAMk"]
[Fri Apr 17 22:13:07.803514 2026] [:error] [pid 9152:tid 9191] [client 20.19.188.213:64301] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeI_85JYca8I3TNCwId2VgAAAEE"]
[Fri Apr 17 22:13:08.806322 2026] [:error] [pid 9151:tid 9176] [client 20.19.188.213:63671] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeI_9MhTVuRPkua22vRKvQAAAA8"]
[Fri Apr 17 22:13:09.393536 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:64971] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeI_9cOaH-Pgc7WEf4PrzQAAAdg"]
[Fri Apr 17 22:13:09.978554 2026] [:error] [pid 51878:tid 51880] [client 20.19.188.213:64327] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aqotrjkg.php"] [unique_id "aeI_9UnQhUtMbw9Esga7xwAAAQA"]
[Fri Apr 17 22:13:10.738562 2026] [:error] [pid 9152:tid 9195] [client 20.19.188.213:63735] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhigtouj.php"] [unique_id "aeI_9pJYca8I3TNCwId2XAAAAEU"]
[Fri Apr 17 22:13:11.358685 2026] [:error] [pid 9152:tid 9192] [client 20.19.188.213:65525] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhigtouj.php"] [unique_id "aeI_95JYca8I3TNCwId2XQAAAEI"]
[Fri Apr 17 22:13:12.111261 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:64933] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhigtouj.php"] [unique_id "aeI_-EnQhUtMbw9Esga7zwAAARg"]
[Fri Apr 17 22:13:12.703877 2026] [:error] [pid 9152:tid 9196] [client 20.19.188.213:63616] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhigtouj.php"] [unique_id "aeI_-JJYca8I3TNCwId2YAAAAEY"]
[Fri Apr 17 22:13:13.495873 2026] [:error] [pid 9151:tid 9166] [client 20.19.188.213:63699] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeI_-chTVuRPkua22vRKvwAAAAU"]
[Fri Apr 17 22:13:14.016777 2026] [:error] [pid 9153:tid 9230] [client 20.19.188.213:64297] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeI_-uMHGxkTZX3c45cZkgAAAIw"]
[Fri Apr 17 22:13:14.623952 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:64267] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeI_-hP68VyHNvj1e55rRQAAAMo"]
[Fri Apr 17 22:13:15.299621 2026] [:error] [pid 9151:tid 9173] [client 20.19.188.213:64364] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeI_-8hTVuRPkua22vRKxQAAAAw"]
[Fri Apr 17 22:13:15.935845 2026] [:error] [pid 9151:tid 9170] [client 20.19.188.213:64346] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeI_-8hTVuRPkua22vRKyAAAAAk"]
[Fri Apr 17 22:13:16.649421 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:63723] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeI__MOaH-Pgc7WEf4Pr5gAAAco"]
[Fri Apr 17 22:13:17.393590 2026] [:error] [pid 34273:tid 34276] [client 20.19.188.213:63023] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeI__WuQDW686mK3dgEaQgAAAYE"]
[Fri Apr 17 22:13:18.081196 2026] [:error] [pid 61523:tid 61553] [client 20.19.188.213:63047] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeI__sOaH-Pgc7WEf4Pr6QAAAcs"]
[Fri Apr 17 22:13:18.897117 2026] [:error] [pid 9153:tid 9235] [client 20.19.188.213:64263] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeI__uMHGxkTZX3c45cZlgAAAJE"]
[Fri Apr 17 22:13:19.803435 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:64310] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeI__0nQhUtMbw9Esga71AAAAQ4"]
[Fri Apr 17 22:13:20.791737 2026] [:error] [pid 9152:tid 9195] [client 20.19.188.213:64901] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeJAAJJYca8I3TNCwId2bwAAAEU"]
[Fri Apr 17 22:13:21.475747 2026] [:error] [pid 9152:tid 9196] [client 20.19.188.213:64348] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeJAAZJYca8I3TNCwId2cQAAAEY"]
[Fri Apr 17 22:13:22.449391 2026] [:error] [pid 25010:tid 25026] [client 20.19.188.213:65408] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggddssvl.php"] [unique_id "aeJAAo-7kkf42RarqQ2FgwAAAU0"]
[Fri Apr 17 22:13:23.832657 2026] [:error] [pid 9152:tid 9198] [client 20.19.188.213:64279] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggddssvl.php"] [unique_id "aeJAA5JYca8I3TNCwId2dAAAAEg"]
[Fri Apr 17 22:13:24.602674 2026] [:error] [pid 9152:tid 9194] [client 20.19.188.213:65503] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggddssvl.php"] [unique_id "aeJABJJYca8I3TNCwId2eAAAAEQ"]
[Fri Apr 17 22:13:25.495981 2026] [:error] [pid 25010:tid 25034] [client 20.19.188.213:63676] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggddssvl.php"] [unique_id "aeJABY-7kkf42RarqQ2FhgAAAVU"]
[Fri Apr 17 22:13:26.556600 2026] [:error] [pid 25010:tid 25029] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajckrrj.php
[Fri Apr 17 22:13:26.795745 2026] [:error] [pid 25010:tid 25036] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajelmxf.php
[Fri Apr 17 22:13:27.194474 2026] [:error] [pid 25010:tid 25022] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajkgsbb.php
[Fri Apr 17 22:13:27.514269 2026] [:error] [pid 25010:tid 25037] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Fri Apr 17 22:13:27.756155 2026] [:error] [pid 25010:tid 25014] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Apr 17 22:13:28.460736 2026] [:error] [pid 25010:tid 25024] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/0xD.php
[Fri Apr 17 22:13:28.723048 2026] [:error] [pid 25010:tid 25018] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Fri Apr 17 22:13:28.977376 2026] [:error] [pid 25010:tid 25032] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Fri Apr 17 22:13:29.548852 2026] [:error] [pid 25010:tid 25035] [client 20.19.188.213:63721] File does not exist: /usr/local/apache/htdocs/suspended-page/xigmltad.php
[Fri Apr 17 22:13:29.807826 2026] [:error] [pid 25010:tid 25031] [client 20.19.188.213:63721] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aeJACY-7kkf42RarqQ2FlwAAAVI"]
[Fri Apr 17 22:13:30.517175 2026] [:error] [pid 9263:tid 9273] [client 20.19.188.213:65018] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aeJAChP68VyHNvj1e55rVAAAAMg"]
[Fri Apr 17 22:13:31.629343 2026] [:error] [pid 9153:tid 9218] [client 20.19.188.213:64932] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aeJAC-MHGxkTZX3c45cZngAAAIA"]
[Fri Apr 17 22:13:32.708951 2026] [:error] [pid 9152:tid 9205] [client 20.19.188.213:63040] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aeJADJJYca8I3TNCwId2hQAAAE8"]
[Fri Apr 17 22:13:33.449041 2026] [:error] [pid 9152:tid 9202] [client 20.19.188.213:65452] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJADZJYca8I3TNCwId2iQAAAEw"]
[Fri Apr 17 22:13:34.023799 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:64314] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJADhP68VyHNvj1e55rYQAAANY"]
[Fri Apr 17 22:13:34.773018 2026] [:error] [pid 9263:tid 9281] [client 20.19.188.213:61953] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJADhP68VyHNvj1e55rZwAAANA"]
[Fri Apr 17 22:13:35.374550 2026] [:error] [pid 34273:tid 34275] [client 20.19.188.213:65413] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeJAD2uQDW686mK3dgEaYgAAAYA"]
[Fri Apr 17 22:13:36.006597 2026] [:error] [pid 34273:tid 34293] [client 20.19.188.213:64340] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad.php"] [unique_id "aeJAEGuQDW686mK3dgEaZAAAAZI"]
[Fri Apr 17 22:13:36.531967 2026] [:error] [pid 51878:tid 51901] [client 20.19.188.213:63672] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad.php"] [unique_id "aeJAEEnQhUtMbw9Esga77AAAARU"]
[Fri Apr 17 22:13:37.111092 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:63709] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad.php"] [unique_id "aeJAEUnQhUtMbw9Esga77gAAAQ4"]
[Fri Apr 17 22:13:37.876194 2026] [:error] [pid 34273:tid 34285] [client 20.19.188.213:64305] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad.php"] [unique_id "aeJAEWuQDW686mK3dgEaawAAAYo"]
[Fri Apr 17 22:13:38.654968 2026] [:error] [pid 9153:tid 9235] [client 20.19.188.213:63056] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aeJAEuMHGxkTZX3c45cZogAAAJE"]
[Fri Apr 17 22:13:39.179382 2026] [:error] [pid 61523:tid 61560] [client 20.19.188.213:64974] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aeJAE8OaH-Pgc7WEf4Pr8QAAAdI"]
[Fri Apr 17 22:13:39.892770 2026] [:error] [pid 9152:tid 9190] [client 20.19.188.213:64290] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aeJAE5JYca8I3TNCwId2kAAAAEA"]
[Fri Apr 17 22:13:40.410437 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:64958] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws77.php"] [unique_id "aeJAFBP68VyHNvj1e55reAAAANE"]
[Fri Apr 17 22:13:41.203368 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:64897] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeJAFRP68VyHNvj1e55rfAAAAMM"]
[Fri Apr 17 22:13:41.870456 2026] [:error] [pid 9263:tid 9276] [client 20.19.188.213:64257] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeJAFRP68VyHNvj1e55rfgAAAMs"]
[Fri Apr 17 22:13:42.615074 2026] [:error] [pid 34273:tid 34292] [client 20.19.188.213:62979] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeJAFmuQDW686mK3dgEadAAAAZE"]
[Fri Apr 17 22:13:43.176531 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:64944] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeJAFxP68VyHNvj1e55rhAAAANE"]
[Fri Apr 17 22:13:43.698620 2026] [:error] [pid 9152:tid 9213] [client 20.19.188.213:65491] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJAF5JYca8I3TNCwId2lQAAAFc"]
[Fri Apr 17 22:13:44.267882 2026] [:error] [pid 9152:tid 9191] [client 20.19.188.213:65438] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJAGJJYca8I3TNCwId2lwAAAEE"]
[Fri Apr 17 22:13:44.804271 2026] [:error] [pid 9152:tid 9197] [client 20.19.188.213:63706] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJAGJJYca8I3TNCwId2nAAAAEc"]
[Fri Apr 17 22:13:45.452003 2026] [:error] [pid 51878:tid 51902] [client 20.19.188.213:65414] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeJAGUnQhUtMbw9Esga79gAAARY"]
[Fri Apr 17 22:13:46.066610 2026] [:error] [pid 9151:tid 9168] [client 20.19.188.213:62431] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aeJAGshTVuRPkua22vRK1AAAAAc"]
[Fri Apr 17 22:13:46.720671 2026] [:error] [pid 9152:tid 9208] [client 20.19.188.213:65457] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aeJAGpJYca8I3TNCwId2nwAAAFI"]
[Fri Apr 17 22:13:47.367324 2026] [:error] [pid 51878:tid 51892] [client 20.19.188.213:64338] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aeJAG0nQhUtMbw9Esga7_QAAAQw"]
[Fri Apr 17 22:13:48.002959 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:62986] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aeJAHEnQhUtMbw9Esga8AAAAARg"]
[Fri Apr 17 22:13:48.752105 2026] [:error] [pid 9153:tid 9240] [client 20.19.188.213:65005] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeJAHOMHGxkTZX3c45cZqgAAAJY"]
[Fri Apr 17 22:13:49.415139 2026] [:error] [pid 9151:tid 9165] [client 20.19.188.213:65001] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeJAHchTVuRPkua22vRK2AAAAAQ"]
[Fri Apr 17 22:13:49.949313 2026] [:error] [pid 9152:tid 9209] [client 20.19.188.213:64950] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeJAHZJYca8I3TNCwId2ogAAAFM"]
[Fri Apr 17 22:13:50.589102 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:63741] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeJAHhP68VyHNvj1e55rmgAAAMc"]
[Fri Apr 17 22:13:51.311998 2026] [:error] [pid 9151:tid 9166] [client 20.19.188.213:60307] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeJAH8hTVuRPkua22vRK3AAAAAU"]
[Fri Apr 17 22:13:51.818131 2026] [:error] [pid 61523:tid 61554] [client 20.19.188.213:65421] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeJAH8OaH-Pgc7WEf4PsAgAAAcw"]
[Fri Apr 17 22:13:52.483343 2026] [:error] [pid 61523:tid 61564] [client 20.19.188.213:64296] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeJAIMOaH-Pgc7WEf4PsBQAAAdY"]
[Fri Apr 17 22:13:53.141897 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:64272] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeJAIRP68VyHNvj1e55roAAAAMI"]
[Fri Apr 17 22:13:53.808196 2026] [:error] [pid 9263:tid 9280] [client 20.19.188.213:64307] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeJAIRP68VyHNvj1e55rogAAAM8"]
[Fri Apr 17 22:13:54.447751 2026] [:error] [pid 9151:tid 9174] [client 20.19.188.213:64381] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeJAIshTVuRPkua22vRK3gAAAA0"]
[Fri Apr 17 22:13:55.054512 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:64355] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeJAIxP68VyHNvj1e55rqAAAAMw"]
[Fri Apr 17 22:13:55.593723 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:64310] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeJAIxP68VyHNvj1e55rqgAAAME"]
[Fri Apr 17 22:13:56.284983 2026] [:error] [pid 9153:tid 9223] [client 20.19.188.213:64304] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeJAJOMHGxkTZX3c45cZtAAAAIU"]
[Fri Apr 17 22:13:56.865357 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:65463] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeJAJBP68VyHNvj1e55rrgAAAMU"]
[Fri Apr 17 22:13:57.574089 2026] [:error] [pid 34273:tid 34299] [client 20.19.188.213:64309] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeJAJWuQDW686mK3dgEaegAAAZg"]
[Fri Apr 17 22:13:58.246726 2026] [:error] [pid 61523:tid 61546] [client 20.19.188.213:64369] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeJAJsOaH-Pgc7WEf4PsBwAAAcQ"]
[Fri Apr 17 22:13:58.775495 2026] [:error] [pid 9151:tid 9180] [client 20.19.188.213:64928] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aeJAJshTVuRPkua22vRK4gAAABM"]
[Fri Apr 17 22:13:59.599813 2026] [:error] [pid 34273:tid 34279] [client 20.19.188.213:64968] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aeJAJ2uQDW686mK3dgEagQAAAYQ"]
[Fri Apr 17 22:14:00.286088 2026] [:error] [pid 34273:tid 34288] [client 20.19.188.213:63087] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aeJAKGuQDW686mK3dgEaggAAAY0"]
[Fri Apr 17 22:14:00.834536 2026] [:error] [pid 9153:tid 9219] [client 20.19.188.213:65491] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdf.php"] [unique_id "aeJAKOMHGxkTZX3c45cZvgAAAIE"]
[Fri Apr 17 22:14:01.400013 2026] [:error] [pid 51878:tid 51891] [client 20.19.188.213:65008] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeJAKUnQhUtMbw9Esga8CAAAAQs"]
[Fri Apr 17 22:14:02.002890 2026] [:error] [pid 9153:tid 9241] [client 20.19.188.213:63688] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeJAKuMHGxkTZX3c45cZwQAAAJc"]
[Fri Apr 17 22:14:02.592538 2026] [:error] [pid 9151:tid 9161] [client 20.19.188.213:65012] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeJAKshTVuRPkua22vRK6AAAAAA"]
[Fri Apr 17 22:14:03.142284 2026] [:error] [pid 34273:tid 34291] [client 20.19.188.213:65489] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeJAK2uQDW686mK3dgEahAAAAZA"]
[Fri Apr 17 22:14:03.654726 2026] [:error] [pid 9152:tid 9211] [client 20.19.188.213:64368] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aeJAK5JYca8I3TNCwId2vAAAAFU"]
[Fri Apr 17 22:14:04.479035 2026] [:error] [pid 9153:tid 9242] [client 20.19.188.213:62405] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aeJALOMHGxkTZX3c45cZxQAAAJg"]
[Fri Apr 17 22:14:05.034810 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:63629] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aeJALRP68VyHNvj1e55rswAAAME"]
[Fri Apr 17 22:14:05.811016 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:65483] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aeJALRP68VyHNvj1e55rtwAAAMQ"]
[Fri Apr 17 22:14:06.385892 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:63644] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zyjhr.php"] [unique_id "aeJALknQhUtMbw9Esga8FgAAARA"]
[Fri Apr 17 22:14:06.914612 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:65446] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zyjhr.php"] [unique_id "aeJALhP68VyHNvj1e55ruwAAANg"]
[Fri Apr 17 22:14:07.444668 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:63650] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zyjhr.php"] [unique_id "aeJALxP68VyHNvj1e55rvgAAANc"]
[Fri Apr 17 22:14:08.256723 2026] [:error] [pid 9151:tid 9174] [client 20.19.188.213:64302] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zyjhr.php"] [unique_id "aeJAMMhTVuRPkua22vRK6wAAAA0"]
[Fri Apr 17 22:14:08.913543 2026] [:error] [pid 9152:tid 9209] [client 20.19.188.213:64947] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeJAMJJYca8I3TNCwId2wQAAAFM"]
[Fri Apr 17 22:14:09.419108 2026] [:error] [pid 9152:tid 9212] [client 20.19.188.213:64970] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeJAMZJYca8I3TNCwId2wgAAAFY"]
[Fri Apr 17 22:14:10.011699 2026] [:error] [pid 9152:tid 9190] [client 20.19.188.213:63069] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeJAMpJYca8I3TNCwId2xwAAAEA"]
[Fri Apr 17 22:14:10.656977 2026] [:error] [pid 9263:tid 9281] [client 20.19.188.213:63665] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeJAMhP68VyHNvj1e55ryAAAANA"]
[Fri Apr 17 22:14:11.147460 2026] [:error] [pid 51878:tid 51889] [client 20.19.188.213:64365] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeJAM0nQhUtMbw9Esga8HgAAAQk"]
[Fri Apr 17 22:14:11.627083 2026] [:error] [pid 51878:tid 51881] [client 20.19.188.213:64918] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeJAM0nQhUtMbw9Esga8IQAAAQE"]
[Fri Apr 17 22:14:12.198495 2026] [:error] [pid 51878:tid 51880] [client 20.19.188.213:65419] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeJANEnQhUtMbw9Esga8JAAAAQA"]
[Fri Apr 17 22:14:12.748659 2026] [:error] [pid 9151:tid 9162] [client 20.19.188.213:65436] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeJANMhTVuRPkua22vRK7wAAAAE"]
[Fri Apr 17 22:14:13.303727 2026] [:error] [pid 34273:tid 34288] [client 20.19.188.213:65524] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeJANWuQDW686mK3dgEajwAAAY0"]
[Fri Apr 17 22:14:13.909169 2026] [:error] [pid 34273:tid 34284] [client 20.19.188.213:64331] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeJANWuQDW686mK3dgEakwAAAYk"]
[Fri Apr 17 22:14:14.398903 2026] [:error] [pid 34273:tid 34296] [client 20.19.188.213:63738] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeJANmuQDW686mK3dgEalwAAAZU"]
[Fri Apr 17 22:14:14.879542 2026] [:error] [pid 9153:tid 9237] [client 20.19.188.213:64329] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeJANuMHGxkTZX3c45cZ0QAAAJM"]
[Fri Apr 17 22:14:15.487437 2026] [:error] [pid 9153:tid 9234] [client 20.19.188.213:64992] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp5.php"] [unique_id "aeJAN-MHGxkTZX3c45cZ1gAAAJA"]
[Fri Apr 17 22:14:16.027547 2026] [:error] [pid 34273:tid 34299] [client 20.19.188.213:64931] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp5.php"] [unique_id "aeJAOGuQDW686mK3dgEanwAAAZg"]
[Fri Apr 17 22:14:16.693668 2026] [:error] [pid 34273:tid 34282] [client 20.19.188.213:64925] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp5.php"] [unique_id "aeJAOGuQDW686mK3dgEaoAAAAYc"]
[Fri Apr 17 22:14:17.283360 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:62401] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp5.php"] [unique_id "aeJAORP68VyHNvj1e55rzwAAAMM"]
[Fri Apr 17 22:14:17.790170 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:64349] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aeJAORP68VyHNvj1e55r0QAAAM4"]
[Fri Apr 17 22:14:18.423406 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:63707] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aeJAOsOaH-Pgc7WEf4PsGAAAAco"]
[Fri Apr 17 22:14:18.932178 2026] [:error] [pid 9151:tid 9165] [client 20.19.188.213:65495] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aeJAOshTVuRPkua22vRK8wAAAAQ"]
[Fri Apr 17 22:14:19.496353 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:64945] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aeJAOxP68VyHNvj1e55r1gAAAMA"]
[Fri Apr 17 22:14:20.114293 2026] [:error] [pid 61523:tid 61558] [client 20.19.188.213:64308] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeJAPMOaH-Pgc7WEf4PsGwAAAdA"]
[Fri Apr 17 22:14:20.872933 2026] [:error] [pid 9152:tid 9191] [client 20.19.188.213:64983] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeJAPJJYca8I3TNCwId20QAAAEE"]
[Fri Apr 17 22:14:21.702651 2026] [:error] [pid 61523:tid 61564] [client 20.19.188.213:62990] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeJAPcOaH-Pgc7WEf4PsIAAAAdY"]
[Fri Apr 17 22:14:22.498823 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:64319] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeJAPknQhUtMbw9Esga8MQAAARg"]
[Fri Apr 17 22:14:22.999338 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:65439] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeJAPhP68VyHNvj1e55r2gAAAM0"]
[Fri Apr 17 22:14:23.515188 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:65508] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeJAPxP68VyHNvj1e55r2wAAANc"]
[Fri Apr 17 22:14:24.163880 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:62408] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeJAQEnQhUtMbw9Esga8NwAAAQ0"]
[Fri Apr 17 22:14:24.701673 2026] [:error] [pid 9152:tid 9203] [client 20.19.188.213:65481] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeJAQJJYca8I3TNCwId23wAAAE0"]
[Fri Apr 17 22:14:25.192287 2026] [:error] [pid 61523:tid 61546] [client 20.19.188.213:65444] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeJAQcOaH-Pgc7WEf4PsJgAAAcQ"]
[Fri Apr 17 22:14:25.846204 2026] [:error] [pid 34273:tid 34281] [client 20.19.188.213:64915] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeJAQWuQDW686mK3dgEarwAAAYY"]
[Fri Apr 17 22:14:26.405145 2026] [:error] [pid 9263:tid 9273] [client 20.19.188.213:65423] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeJAQhP68VyHNvj1e55r5QAAAMg"]
[Fri Apr 17 22:14:26.903114 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:65432] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeJAQhP68VyHNvj1e55r6QAAANQ"]
[Fri Apr 17 22:14:27.457413 2026] [:error] [pid 61523:tid 61558] [client 20.19.188.213:63618] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/intall.php"] [unique_id "aeJAQ8OaH-Pgc7WEf4PsLQAAAdA"]
[Fri Apr 17 22:14:28.171953 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:64285] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/intall.php"] [unique_id "aeJAREnQhUtMbw9Esga8OQAAAQY"]
[Fri Apr 17 22:14:28.948549 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:63089] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/intall.php"] [unique_id "aeJARBP68VyHNvj1e55r9AAAAMU"]
[Fri Apr 17 22:14:29.857219 2026] [:error] [pid 61523:tid 61563] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/intall.php
[Fri Apr 17 22:14:30.395250 2026] [:error] [pid 61523:tid 61545] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Fri Apr 17 22:14:30.637854 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Fri Apr 17 22:14:30.945687 2026] [:error] [pid 61523:tid 61559] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Fri Apr 17 22:14:31.186696 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Fri Apr 17 22:14:31.428506 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/camara.php
[Fri Apr 17 22:14:31.724579 2026] [:error] [pid 61523:tid 61548] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Fri Apr 17 22:14:31.963280 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Fri Apr 17 22:14:32.205122 2026] [:error] [pid 61523:tid 61560] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 17 22:14:32.452924 2026] [:error] [pid 61523:tid 61563] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/\xe3\x81\xae.php
[Fri Apr 17 22:14:32.695776 2026] [:error] [pid 61523:tid 61545] [client 20.19.188.213:63700] File does not exist: /usr/local/apache/htdocs/suspended-page/xtsr.php
[Fri Apr 17 22:14:32.930764 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:63700] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeJASMOaH-Pgc7WEf4PsRQAAAc0"]
[Fri Apr 17 22:14:33.735461 2026] [:error] [pid 34273:tid 34296] [client 20.19.188.213:64325] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeJASWuQDW686mK3dgEauQAAAZU"]
[Fri Apr 17 22:14:34.428732 2026] [:error] [pid 9153:tid 9224] [client 20.19.188.213:65016] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeJASuMHGxkTZX3c45cZ5QAAAIY"]
[Fri Apr 17 22:14:35.000984 2026] [:error] [pid 9151:tid 9177] [client 20.19.188.213:62999] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeJASshTVuRPkua22vRK-AAAABA"]
[Fri Apr 17 22:14:35.776324 2026] [:error] [pid 25010:tid 25016] [client 20.19.188.213:65474] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeJAS4-7kkf42RarqQ2FyAAAAUM"]
[Fri Apr 17 22:14:36.353590 2026] [:error] [pid 25010:tid 25022] [client 20.19.188.213:64902] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeJATI-7kkf42RarqQ2FzAAAAUk"]
[Fri Apr 17 22:14:36.883304 2026] [:error] [pid 25010:tid 25017] [client 20.19.188.213:63711] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeJATI-7kkf42RarqQ2FzgAAAUQ"]
[Fri Apr 17 22:14:37.386024 2026] [:error] [pid 9263:tid 9284] [client 20.19.188.213:64955] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeJATRP68VyHNvj1e55sAwAAANM"]
[Fri Apr 17 22:14:37.970273 2026] [:error] [pid 25010:tid 25037] [client 20.19.188.213:64292] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeJATY-7kkf42RarqQ2F0AAAAVg"]
[Fri Apr 17 22:14:38.469102 2026] [:error] [pid 9263:tid 9281] [client 20.19.188.213:63681] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeJAThP68VyHNvj1e55sCQAAANA"]
[Fri Apr 17 22:14:39.161922 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:60297] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeJATxP68VyHNvj1e55sDAAAAME"]
[Fri Apr 17 22:14:39.796249 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:63635] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeJATxP68VyHNvj1e55sFAAAAMI"]
[Fri Apr 17 22:14:40.293271 2026] [:error] [pid 61523:tid 61544] [client 20.19.188.213:64927] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "aeJAUMOaH-Pgc7WEf4PsSQAAAcI"]
[Fri Apr 17 22:14:41.910843 2026] [:error] [pid 9153:tid 9226] [client 20.19.188.213:63658] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "aeJAUeMHGxkTZX3c45cZ6wAAAIg"]
[Fri Apr 17 22:14:42.829185 2026] [:error] [pid 9153:tid 9222] [client 20.19.188.213:63048] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "aeJAUuMHGxkTZX3c45cZ7QAAAIQ"]
[Fri Apr 17 22:14:44.432163 2026] [:error] [pid 51878:tid 51882] [client 20.19.188.213:64320] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "aeJAVEnQhUtMbw9Esga8SgAAAQI"]
[Fri Apr 17 22:14:45.519831 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:65409] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aeJAVcOaH-Pgc7WEf4PsVgAAAcc"]
[Fri Apr 17 22:14:48.208327 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:64266] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aeJAWBP68VyHNvj1e55sKAAAAMA"]
[Fri Apr 17 22:14:49.318063 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:63677] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aeJAWRP68VyHNvj1e55sMAAAAMw"]
[Fri Apr 17 22:14:50.381532 2026] [:error] [pid 51878:tid 51892] [client 20.19.188.213:63695] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aeJAWknQhUtMbw9Esga8VgAAAQw"]
[Fri Apr 17 22:14:51.856520 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:63055] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeJAW0nQhUtMbw9Esga8XAAAARc"]
[Fri Apr 17 22:14:52.967932 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:64941] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeJAXEnQhUtMbw9Esga8YgAAAQ0"]
[Fri Apr 17 22:14:53.594948 2026] [:error] [pid 25010:tid 25024] [client 20.19.188.213:64298] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeJAXY-7kkf42RarqQ2F7AAAAUs"]
[Fri Apr 17 22:14:54.421245 2026] [:error] [pid 61523:tid 61541] [client 20.19.188.213:63624] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeJAXsOaH-Pgc7WEf4PsZgAAAcA"]
[Fri Apr 17 22:14:54.917116 2026] [:error] [pid 34273:tid 34277] [client 20.19.188.213:64269] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "aeJAXmuQDW686mK3dgEaxAAAAYI"]
[Fri Apr 17 22:14:55.457011 2026] [:error] [pid 9263:tid 9286] [client 20.19.188.213:65424] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "aeJAXxP68VyHNvj1e55sOQAAANU"]
[Fri Apr 17 22:14:56.151152 2026] [:error] [pid 9263:tid 9273] [client 20.19.188.213:63079] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "aeJAYBP68VyHNvj1e55sPAAAAMg"]
[Fri Apr 17 22:14:56.670141 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:64265] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "aeJAYEnQhUtMbw9Esga8bwAAARc"]
[Fri Apr 17 22:14:57.253799 2026] [:error] [pid 25010:tid 25030] [client 20.19.188.213:65513] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeJAYY-7kkf42RarqQ2F8AAAAVE"]
[Fri Apr 17 22:14:57.848573 2026] [:error] [pid 61523:tid 61548] [client 20.19.188.213:65021] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeJAYcOaH-Pgc7WEf4PsbgAAAcY"]
[Fri Apr 17 22:14:58.474822 2026] [:error] [pid 34273:tid 34294] [client 20.19.188.213:64952] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeJAYmuQDW686mK3dgEayQAAAZM"]
[Fri Apr 17 22:14:59.034562 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:64337] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeJAYxP68VyHNvj1e55sRAAAANg"]
[Fri Apr 17 22:14:59.565398 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:63021] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeJAYxP68VyHNvj1e55sSQAAANc"]
[Fri Apr 17 22:15:00.144275 2026] [:error] [pid 9151:tid 9184] [client 20.19.188.213:65418] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeJAZMhTVuRPkua22vRK-gAAABc"]
[Fri Apr 17 22:15:00.660955 2026] [:error] [pid 61523:tid 61543] [client 20.19.188.213:65453] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeJAZMOaH-Pgc7WEf4PsdAAAAcE"]
[Fri Apr 17 22:15:01.181940 2026] [:error] [pid 34273:tid 34283] [client 20.19.188.213:64962] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeJAZWuQDW686mK3dgEazAAAAYg"]
[Fri Apr 17 22:15:01.734326 2026] [:error] [pid 25010:tid 25033] [client 20.19.188.213:64906] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeJAZY-7kkf42RarqQ2F8wAAAVQ"]
[Fri Apr 17 22:15:02.244073 2026] [:error] [pid 9151:tid 9163] [client 20.19.188.213:65501] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeJAZshTVuRPkua22vRK-wAAAAI"]
[Fri Apr 17 22:15:02.755991 2026] [:error] [pid 9151:tid 9162] [client 20.19.188.213:65498] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeJAZshTVuRPkua22vRK_AAAAAE"]
[Fri Apr 17 22:15:03.516670 2026] [:error] [pid 25010:tid 25018] [client 20.19.188.213:64367] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeJAZ4-7kkf42RarqQ2F9gAAAUU"]
[Fri Apr 17 22:15:04.208474 2026] [:error] [pid 9153:tid 9231] [client 20.19.188.213:64377] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeJAaOMHGxkTZX3c45cZ-AAAAI0"]
[Fri Apr 17 22:15:04.693283 2026] [:error] [pid 9153:tid 9239] [client 20.19.188.213:65507] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeJAaOMHGxkTZX3c45cZ_AAAAJU"]
[Fri Apr 17 22:15:05.203944 2026] [:error] [pid 34273:tid 34296] [client 20.19.188.213:64960] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeJAaWuQDW686mK3dgEa0AAAAZU"]
[Fri Apr 17 22:15:05.710132 2026] [:error] [pid 9153:tid 9234] [client 20.19.188.213:65469] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeJAaeMHGxkTZX3c45caAQAAAJA"]
[Fri Apr 17 22:15:06.272994 2026] [:error] [pid 61523:tid 61551] [client 20.19.188.213:65465] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aeJAasOaH-Pgc7WEf4PsfgAAAck"]
[Fri Apr 17 22:15:06.818695 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:63702] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aeJAahP68VyHNvj1e55sXgAAAME"]
[Fri Apr 17 22:15:07.711043 2026] [:error] [pid 9151:tid 9180] [client 20.19.188.213:65003] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aeJAa8hTVuRPkua22vRLAQAAABM"]
[Fri Apr 17 22:15:09.857536 2026] [:error] [pid 9151:tid 9166] [client 20.19.188.213:64306] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aeJAbchTVuRPkua22vRLAwAAAAU"]
[Fri Apr 17 22:15:10.619634 2026] [:error] [pid 9153:tid 9218] [client 20.19.188.213:65011] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeJAbuMHGxkTZX3c45caCgAAAIA"]
[Fri Apr 17 22:15:11.169578 2026] [:error] [pid 34273:tid 34284] [client 20.19.188.213:63727] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeJAb2uQDW686mK3dgEa2QAAAYk"]
[Fri Apr 17 22:15:11.719982 2026] [:error] [pid 34273:tid 34291] [client 20.19.188.213:65515] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeJAb2uQDW686mK3dgEa3QAAAZA"]
[Fri Apr 17 22:15:12.378667 2026] [:error] [pid 61523:tid 61558] [client 20.19.188.213:63636] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeJAcMOaH-Pgc7WEf4PsggAAAdA"]
[Fri Apr 17 22:15:13.005001 2026] [:error] [pid 9151:tid 9162] [client 20.19.188.213:63673] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeJAcchTVuRPkua22vRLDwAAAAE"]
[Fri Apr 17 22:15:13.619074 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:65488] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeJAcRP68VyHNvj1e55sZQAAAM4"]
[Fri Apr 17 22:15:14.217422 2026] [:error] [pid 61523:tid 61551] [client 20.19.188.213:62406] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeJAcsOaH-Pgc7WEf4PshQAAAck"]
[Fri Apr 17 22:15:14.777933 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:64336] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeJAchP68VyHNvj1e55sbAAAANE"]
[Fri Apr 17 22:15:15.316017 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:63067] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeJAcxP68VyHNvj1e55sbgAAAM0"]
[Fri Apr 17 22:15:15.970457 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:63677] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeJAcxP68VyHNvj1e55scgAAAMU"]
[Fri Apr 17 22:15:16.476383 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:65020] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeJAdMOaH-Pgc7WEf4PsjgAAAdg"]
[Fri Apr 17 22:15:16.967497 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:63073] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeJAdBP68VyHNvj1e55sdQAAANQ"]
[Fri Apr 17 22:15:17.487019 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:64969] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeJAdRP68VyHNvj1e55seAAAANc"]
[Fri Apr 17 22:15:18.023217 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:65023] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeJAdhP68VyHNvj1e55sewAAAM4"]
[Fri Apr 17 22:15:18.495416 2026] [:error] [pid 51878:tid 51891] [client 20.19.188.213:65006] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeJAdknQhUtMbw9Esga8igAAAQs"]
[Fri Apr 17 22:15:18.973116 2026] [:error] [pid 9152:tid 9208] [client 20.19.188.213:64979] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeJAdpJYca8I3TNCwId27QAAAFI"]
[Fri Apr 17 22:15:19.461026 2026] [:error] [pid 61523:tid 61564] [client 20.19.188.213:64282] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeJAd8OaH-Pgc7WEf4PsmAAAAdY"]
[Fri Apr 17 22:15:20.097567 2026] [:error] [pid 61523:tid 61553] [client 20.19.188.213:65493] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeJAeMOaH-Pgc7WEf4PsnwAAAcs"]
[Fri Apr 17 22:15:21.349929 2026] [:error] [pid 9153:tid 9228] [client 20.19.188.213:64284] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeJAeeMHGxkTZX3c45caIQAAAIo"]
[Fri Apr 17 22:15:21.954112 2026] [:error] [pid 9151:tid 9174] [client 20.19.188.213:64271] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeJAechTVuRPkua22vRLGwAAAA0"]
[Fri Apr 17 22:15:22.515537 2026] [:error] [pid 51878:tid 51895] [client 20.19.188.213:63649] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeJAeknQhUtMbw9Esga8kAAAAQ8"]
[Fri Apr 17 22:15:23.006851 2026] [:error] [pid 51878:tid 51881] [client 20.19.188.213:64334] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeJAe0nQhUtMbw9Esga8kwAAAQE"]
[Fri Apr 17 22:15:23.629878 2026] [:error] [pid 51878:tid 51882] [client 20.19.188.213:65494] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeJAe0nQhUtMbw9Esga8lQAAAQI"]
[Fri Apr 17 22:15:24.172853 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:63719] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeJAfGuQDW686mK3dgEbBwAAAYU"]
[Fri Apr 17 22:15:24.689471 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:65422] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aeJAfBP68VyHNvj1e55skwAAAME"]
[Fri Apr 17 22:15:25.205568 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:63042] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aeJAfRP68VyHNvj1e55slQAAANE"]
[Fri Apr 17 22:15:25.704989 2026] [:error] [pid 9152:tid 9214] [client 20.19.188.213:62405] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aeJAfZJYca8I3TNCwId28gAAAFg"]
[Fri Apr 17 22:15:26.252055 2026] [:error] [pid 9152:tid 9190] [client 20.19.188.213:64289] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aeJAfpJYca8I3TNCwId28wAAAEA"]
[Fri Apr 17 22:15:26.792112 2026] [:error] [pid 34273:tid 34286] [client 20.19.188.213:65427] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeJAfmuQDW686mK3dgEbDAAAAYs"]
[Fri Apr 17 22:15:27.347035 2026] [:error] [pid 34273:tid 34282] [client 20.19.188.213:64942] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeJAf2uQDW686mK3dgEbDQAAAYc"]
[Fri Apr 17 22:15:27.898468 2026] [:error] [pid 9153:tid 9233] [client 20.19.188.213:64924] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeJAf-MHGxkTZX3c45caJgAAAI8"]
[Fri Apr 17 22:15:28.393518 2026] [:error] [pid 9151:tid 9161] [client 20.19.188.213:62404] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeJAgMhTVuRPkua22vRLIwAAAAA"]
[Fri Apr 17 22:15:29.003804 2026] [:error] [pid 9152:tid 9194] [client 20.19.188.213:63653] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeJAgZJYca8I3TNCwId2-wAAAEQ"]
[Fri Apr 17 22:15:29.570377 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:63066] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeJAgRP68VyHNvj1e55spAAAAMU"]
[Fri Apr 17 22:15:30.085906 2026] [:error] [pid 34273:tid 34296] [client 20.19.188.213:64946] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeJAgmuQDW686mK3dgEbFAAAAZU"]
[Fri Apr 17 22:15:30.557860 2026] [:error] [pid 51878:tid 51891] [client 20.19.188.213:63005] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeJAgknQhUtMbw9Esga8oQAAAQs"]
[Fri Apr 17 22:15:31.034913 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:63645] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeJAgxP68VyHNvj1e55sqQAAANg"]
[Fri Apr 17 22:15:31.513390 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:65466] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeJAg0nQhUtMbw9Esga8pgAAARA"]
[Fri Apr 17 22:15:32.046345 2026] [:error] [pid 9151:tid 9174] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tot.php
[Fri Apr 17 22:15:32.285554 2026] [:error] [pid 9151:tid 9179] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tap.php
[Fri Apr 17 22:15:32.524585 2026] [:error] [pid 9151:tid 9162] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/vrhiw.php
[Fri Apr 17 22:15:32.763572 2026] [:error] [pid 9151:tid 9180] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/qqjki.php
[Fri Apr 17 22:15:33.002469 2026] [:error] [pid 9151:tid 9168] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Fri Apr 17 22:15:33.285126 2026] [:error] [pid 9151:tid 9163] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Fri Apr 17 22:15:33.524336 2026] [:error] [pid 9151:tid 9165] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Fri Apr 17 22:15:33.761668 2026] [:error] [pid 9151:tid 9171] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Fri Apr 17 22:15:34.000275 2026] [:error] [pid 9151:tid 9182] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Fri Apr 17 22:15:34.238809 2026] [:error] [pid 9151:tid 9161] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Fri Apr 17 22:15:34.476165 2026] [:error] [pid 9151:tid 9167] [client 20.19.188.213:63641] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 17 22:15:34.711826 2026] [:error] [pid 9151:tid 9178] [client 20.19.188.213:63641] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aeJAhshTVuRPkua22vRLNwAAABE"]
[Fri Apr 17 22:15:35.201732 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:64930] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aeJAh0nQhUtMbw9Esga8qwAAAQo"]
[Fri Apr 17 22:15:35.687393 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:60344] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aeJAhxP68VyHNvj1e55ssgAAAMw"]
[Fri Apr 17 22:15:36.206451 2026] [:error] [pid 51878:tid 51898] [client 20.19.188.213:63631] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aeJAiEnQhUtMbw9Esga8rgAAARI"]
[Fri Apr 17 22:15:36.679947 2026] [:error] [pid 9152:tid 9193] [client 20.19.188.213:65456] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeJAiJJYca8I3TNCwId3BAAAAEM"]
[Fri Apr 17 22:15:37.177296 2026] [:error] [pid 9263:tid 9284] [client 20.19.188.213:64982] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeJAiRP68VyHNvj1e55stwAAANM"]
[Fri Apr 17 22:15:37.670090 2026] [:error] [pid 9263:tid 9274] [client 20.19.188.213:64899] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeJAiRP68VyHNvj1e55svAAAAMk"]
[Fri Apr 17 22:15:38.277327 2026] [:error] [pid 25010:tid 25020] [client 20.19.188.213:63730] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeJAio-7kkf42RarqQ2GCAAAAUc"]
[Fri Apr 17 22:15:38.774420 2026] [:error] [pid 61523:tid 61563] [client 20.19.188.213:65523] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeJAisOaH-Pgc7WEf4PsrgAAAdU"]
[Fri Apr 17 22:15:39.375263 2026] [:error] [pid 61523:tid 61557] [client 20.19.188.213:64937] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeJAi8OaH-Pgc7WEf4PssQAAAc8"]
[Fri Apr 17 22:15:39.962322 2026] [:error] [pid 9152:tid 9206] [client 20.19.188.213:63043] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeJAi5JYca8I3TNCwId3CgAAAFA"]
[Fri Apr 17 22:15:40.515621 2026] [:error] [pid 9152:tid 9214] [client 20.19.188.213:64341] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeJAjJJYca8I3TNCwId3DgAAAFg"]
[Fri Apr 17 22:15:41.106656 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:64973] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJAjZJYca8I3TNCwId3EQAAAFE"]
[Fri Apr 17 22:15:41.629874 2026] [:error] [pid 25010:tid 25034] [client 20.19.188.213:63616] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJAjY-7kkf42RarqQ2GDAAAAVU"]
[Fri Apr 17 22:15:42.117834 2026] [:error] [pid 51878:tid 51895] [client 20.19.188.213:63077] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJAjknQhUtMbw9Esga8swAAAQ8"]
[Fri Apr 17 22:15:42.592943 2026] [:error] [pid 25010:tid 25021] [client 20.19.188.213:64288] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJAjo-7kkf42RarqQ2GDgAAAUg"]
[Fri Apr 17 22:15:43.086075 2026] [:error] [pid 25010:tid 25033] [client 20.19.188.213:63651] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJAj4-7kkf42RarqQ2GEAAAAVQ"]
[Fri Apr 17 22:15:43.573054 2026] [:error] [pid 9152:tid 9209] [client 20.19.188.213:64363] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJAj5JYca8I3TNCwId3FAAAAFM"]
[Fri Apr 17 22:15:44.059516 2026] [:error] [pid 9151:tid 9182] [client 20.19.188.213:63028] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJAkMhTVuRPkua22vRLPQAAABU"]
[Fri Apr 17 22:15:44.560530 2026] [:error] [pid 9152:tid 9194] [client 20.19.188.213:63716] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJAkJJYca8I3TNCwId3FgAAAEQ"]
[Fri Apr 17 22:15:45.051417 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:64317] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeJAkeMHGxkTZX3c45caMwAAAJI"]
[Fri Apr 17 22:15:45.561322 2026] [:error] [pid 9153:tid 9231] [client 20.19.188.213:65506] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeJAkeMHGxkTZX3c45caNQAAAI0"]
[Fri Apr 17 22:15:46.111063 2026] [:error] [pid 9152:tid 9201] [client 20.19.188.213:63652] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeJAkpJYca8I3TNCwId3GAAAAEs"]
[Fri Apr 17 22:15:46.742547 2026] [:error] [pid 9152:tid 9200] [client 20.19.188.213:60309] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aeJAkpJYca8I3TNCwId3HwAAAEo"]
[Fri Apr 17 22:15:47.331406 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:63628] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "aeJAk8OaH-Pgc7WEf4PssgAAAdg"]
[Fri Apr 17 22:15:47.801557 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:63663] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "aeJAk8OaH-Pgc7WEf4PstgAAAcc"]
[Fri Apr 17 22:15:48.337982 2026] [:error] [pid 61523:tid 61561] [client 20.19.188.213:65448] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "aeJAlMOaH-Pgc7WEf4PsvQAAAdM"]
[Fri Apr 17 22:15:48.865895 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:64281] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h2.php"] [unique_id "aeJAlOMHGxkTZX3c45caOwAAAJI"]
[Fri Apr 17 22:15:49.477438 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:64344] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJAlRP68VyHNvj1e55szQAAAMM"]
[Fri Apr 17 22:15:50.152113 2026] [:error] [pid 25010:tid 25030] [client 20.19.188.213:63667] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJAlo-7kkf42RarqQ2GHQAAAVE"]
[Fri Apr 17 22:15:50.729457 2026] [:error] [pid 61523:tid 61564] [client 20.19.188.213:65497] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJAlsOaH-Pgc7WEf4PsvwAAAdY"]
[Fri Apr 17 22:15:51.264002 2026] [:error] [pid 9152:tid 9191] [client 20.19.188.213:64993] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJAl5JYca8I3TNCwId3JAAAAEE"]
[Fri Apr 17 22:15:51.778100 2026] [:error] [pid 9152:tid 9203] [client 20.19.188.213:64989] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aeJAl5JYca8I3TNCwId3JwAAAE0"]
[Fri Apr 17 22:15:52.512856 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64324] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aeJAmBP68VyHNvj1e55s1gAAAMQ"]
[Fri Apr 17 22:15:53.338413 2026] [:error] [pid 61523:tid 61550] [client 20.19.188.213:65492] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aeJAmcOaH-Pgc7WEf4PswgAAAcg"]
[Fri Apr 17 22:15:53.839550 2026] [:error] [pid 51878:tid 51884] [client 20.19.188.213:65479] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aeJAmUnQhUtMbw9Esga8uQAAAQQ"]
[Fri Apr 17 22:15:54.389884 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:64984] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJAmknQhUtMbw9Esga8wAAAARA"]
[Fri Apr 17 22:15:54.931726 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:64996] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJAmhP68VyHNvj1e55s4QAAAMI"]
[Fri Apr 17 22:15:55.452202 2026] [:error] [pid 61523:tid 61551] [client 20.19.188.213:63045] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJAm8OaH-Pgc7WEf4PsxQAAAck"]
[Fri Apr 17 22:15:56.004145 2026] [:error] [pid 9263:tid 9274] [client 20.19.188.213:64323] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJAnBP68VyHNvj1e55s5wAAAMk"]
[Fri Apr 17 22:15:56.782368 2026] [:error] [pid 9151:tid 9161] [client 20.19.188.213:64988] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "aeJAnMhTVuRPkua22vRLRwAAAAA"]
[Fri Apr 17 22:15:57.597787 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:63634] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "aeJAnUnQhUtMbw9Esga8ywAAARc"]
[Fri Apr 17 22:15:58.197945 2026] [:error] [pid 9153:tid 9229] [client 20.19.188.213:65477] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "aeJAnuMHGxkTZX3c45caSAAAAIs"]
[Fri Apr 17 22:15:58.795586 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:65485] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "aeJAnuMHGxkTZX3c45caSgAAAJQ"]
[Fri Apr 17 22:15:59.329765 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:63017] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeJAn-MHGxkTZX3c45caTAAAAJI"]
[Fri Apr 17 22:15:59.894856 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:63704] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeJAn5JYca8I3TNCwId3LwAAAFE"]
[Fri Apr 17 22:16:00.455336 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:64936] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeJAoBP68VyHNvj1e55s6gAAAMo"]
[Fri Apr 17 22:16:00.979910 2026] [:error] [pid 9152:tid 9202] [client 20.19.188.213:64905] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeJAoJJYca8I3TNCwId3NAAAAEw"]
[Fri Apr 17 22:16:01.506384 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:64919] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aeJAoRP68VyHNvj1e55s6wAAANc"]
[Fri Apr 17 22:16:01.979823 2026] [:error] [pid 34273:tid 34286] [client 20.19.188.213:65441] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aeJAoWuQDW686mK3dgEbLAAAAYs"]
[Fri Apr 17 22:16:02.563755 2026] [:error] [pid 61523:tid 61550] [client 20.19.188.213:63668] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aeJAosOaH-Pgc7WEf4PsyAAAAcg"]
[Fri Apr 17 22:16:03.059047 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:64354] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "aeJAo8OaH-Pgc7WEf4PsygAAAc0"]
[Fri Apr 17 22:16:03.608386 2026] [:error] [pid 61523:tid 61541] [client 20.19.188.213:62982] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeJAo8OaH-Pgc7WEf4PszAAAAcA"]
[Fri Apr 17 22:16:04.094701 2026] [:error] [pid 9153:tid 9219] [client 20.19.188.213:64999] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeJApOMHGxkTZX3c45caUwAAAIE"]
[Fri Apr 17 22:16:04.622006 2026] [:error] [pid 25010:tid 25023] [client 20.19.188.213:65467] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeJApI-7kkf42RarqQ2GJAAAAUo"]
[Fri Apr 17 22:16:05.462387 2026] [:error] [pid 25010:tid 25022] [client 20.19.188.213:64951] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeJApY-7kkf42RarqQ2GJQAAAUk"]
[Fri Apr 17 22:16:05.964085 2026] [:error] [pid 61523:tid 61543] [client 20.19.188.213:65415] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aeJApcOaH-Pgc7WEf4Ps0wAAAcE"]
[Fri Apr 17 22:16:06.467092 2026] [:error] [pid 9263:tid 9280] [client 20.19.188.213:63086] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aeJAphP68VyHNvj1e55s-AAAAM8"]
[Fri Apr 17 22:16:06.969219 2026] [:error] [pid 61523:tid 61551] [client 20.19.188.213:65500] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aeJApsOaH-Pgc7WEf4Ps1wAAAck"]
[Fri Apr 17 22:16:07.503950 2026] [:error] [pid 34273:tid 34287] [client 20.19.188.213:64330] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aeJAp2uQDW686mK3dgEbLwAAAYw"]
[Fri Apr 17 22:16:08.053491 2026] [:error] [pid 9263:tid 9273] [client 20.19.188.213:65013] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeJAqBP68VyHNvj1e55s-QAAAMg"]
[Fri Apr 17 22:16:08.599160 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:60322] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeJAqBP68VyHNvj1e55s_wAAAMU"]
[Fri Apr 17 22:16:09.144746 2026] [:error] [pid 25010:tid 25027] [client 20.19.188.213:63643] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeJAqY-7kkf42RarqQ2GKAAAAU4"]
[Fri Apr 17 22:16:09.654225 2026] [:error] [pid 61523:tid 61556] [client 20.19.188.213:65454] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeJAqcOaH-Pgc7WEf4Ps2QAAAc4"]
[Fri Apr 17 22:16:10.170726 2026] [:error] [pid 9152:tid 9203] [client 20.19.188.213:65440] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeJAqpJYca8I3TNCwId3PAAAAE0"]
[Fri Apr 17 22:16:10.762831 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:60294] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeJAqhP68VyHNvj1e55tBgAAAME"]
[Fri Apr 17 22:16:11.282999 2026] [:error] [pid 9152:tid 9199] [client 20.19.188.213:64912] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeJAq5JYca8I3TNCwId3PQAAAEk"]
[Fri Apr 17 22:16:11.904662 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:65433] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeJAqxP68VyHNvj1e55tDQAAANc"]
[Fri Apr 17 22:16:12.405048 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:64956] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeJArBP68VyHNvj1e55tEAAAAMU"]
[Fri Apr 17 22:16:12.917227 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:64278] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeJArGuQDW686mK3dgEbNQAAAYU"]
[Fri Apr 17 22:16:13.603912 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:64382] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeJArRP68VyHNvj1e55tFwAAAM0"]
[Fri Apr 17 22:16:14.117802 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:60332] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeJArhP68VyHNvj1e55tHAAAAMI"]
[Fri Apr 17 22:16:14.663057 2026] [:error] [pid 34273:tid 34292] [client 20.19.188.213:65014] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeJArmuQDW686mK3dgEbNwAAAZE"]
[Fri Apr 17 22:16:15.269751 2026] [:error] [pid 9152:tid 9202] [client 20.19.188.213:64987] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeJAr5JYca8I3TNCwId3PwAAAEw"]
[Fri Apr 17 22:16:15.868380 2026] [:error] [pid 9263:tid 9287] [client 20.19.188.213:64953] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeJArxP68VyHNvj1e55tIgAAANY"]
[Fri Apr 17 22:16:16.390690 2026] [:error] [pid 9152:tid 9190] [client 20.19.188.213:65451] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeJAsJJYca8I3TNCwId3QQAAAEA"]
[Fri Apr 17 22:16:17.157961 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:64332] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aeJAsRP68VyHNvj1e55tJAAAAMc"]
[Fri Apr 17 22:16:17.692693 2026] [:error] [pid 9152:tid 9196] [client 20.19.188.213:63099] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aeJAsZJYca8I3TNCwId3QgAAAEY"]
[Fri Apr 17 22:16:18.181375 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:63050] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aeJAssOaH-Pgc7WEf4Ps3AAAAcc"]
[Fri Apr 17 22:16:18.922871 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:63622] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "aeJAshP68VyHNvj1e55tNAAAANc"]
[Fri Apr 17 22:16:19.414324 2026] [:error] [pid 9263:tid 9283] [client 20.19.188.213:63060] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeJAsxP68VyHNvj1e55tNwAAANI"]
[Fri Apr 17 22:16:19.942048 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:63620] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeJAsxP68VyHNvj1e55tPAAAANg"]
[Fri Apr 17 22:16:20.462405 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:64376] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeJAtBP68VyHNvj1e55tQAAAAM0"]
[Fri Apr 17 22:16:21.285558 2026] [:error] [pid 9152:tid 9214] [client 20.19.188.213:65472] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "aeJAtZJYca8I3TNCwId3RQAAAFg"]
[Fri Apr 17 22:16:21.770431 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:63708] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeJAtUnQhUtMbw9Esga82QAAAQY"]
[Fri Apr 17 22:16:22.391832 2026] [:error] [pid 9263:tid 9283] [client 20.19.188.213:64929] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeJAthP68VyHNvj1e55tRAAAANI"]
[Fri Apr 17 22:16:22.907046 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:65429] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeJAthP68VyHNvj1e55tRQAAAMw"]
[Fri Apr 17 22:16:23.469512 2026] [:error] [pid 61523:tid 61561] [client 20.19.188.213:64370] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeJAt8OaH-Pgc7WEf4Ps3wAAAdM"]
[Fri Apr 17 22:16:24.015674 2026] [:error] [pid 9152:tid 9212] [client 20.19.188.213:64339] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJAuJJYca8I3TNCwId3SAAAAFY"]
[Fri Apr 17 22:16:24.569363 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:63697] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJAuBP68VyHNvj1e55tTgAAANg"]
[Fri Apr 17 22:16:25.114325 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:63661] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJAuRP68VyHNvj1e55tUgAAAM0"]
[Fri Apr 17 22:16:25.619219 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:63019] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJAuRP68VyHNvj1e55tVgAAAME"]
[Fri Apr 17 22:16:26.153446 2026] [:error] [pid 51878:tid 51883] [client 20.19.188.213:63740] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeJAuknQhUtMbw9Esga84QAAAQM"]
[Fri Apr 17 22:16:26.717602 2026] [:error] [pid 9153:tid 9232] [client 20.19.188.213:63684] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeJAuuMHGxkTZX3c45caYAAAAI4"]
[Fri Apr 17 22:16:27.240680 2026] [:error] [pid 9153:tid 9224] [client 20.19.188.213:64917] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeJAu-MHGxkTZX3c45caYQAAAIY"]
[Fri Apr 17 22:16:28.039150 2026] [:error] [pid 61523:tid 61558] [client 20.19.188.213:64371] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxfyf.php"] [unique_id "aeJAvMOaH-Pgc7WEf4Ps4wAAAdA"]
[Fri Apr 17 22:16:28.549950 2026] [:error] [pid 9151:tid 9177] [client 20.19.188.213:64295] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeJAvMhTVuRPkua22vRLUwAAABA"]
[Fri Apr 17 22:16:29.076391 2026] [:error] [pid 9151:tid 9181] [client 20.19.188.213:64335] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeJAvchTVuRPkua22vRLVAAAABQ"]
[Fri Apr 17 22:16:29.552557 2026] [:error] [pid 25010:tid 25029] [client 20.19.188.213:63686] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeJAvY-7kkf42RarqQ2GMAAAAVA"]
[Fri Apr 17 22:16:30.300066 2026] [:error] [pid 9152:tid 9192] [client 20.19.188.213:64957] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "aeJAvpJYca8I3TNCwId3UAAAAEI"]
[Fri Apr 17 22:16:30.816291 2026] [:error] [pid 25010:tid 25036] [client 20.19.188.213:64922] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeJAvo-7kkf42RarqQ2GMgAAAVc"]
[Fri Apr 17 22:16:31.394953 2026] [:error] [pid 9153:tid 9220] [client 20.19.188.213:65416] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeJAv-MHGxkTZX3c45caZgAAAII"]
[Fri Apr 17 22:16:32.232048 2026] [:error] [pid 51878:tid 51883] [client 20.19.188.213:60298] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeJAwEnQhUtMbw9Esga86QAAAQM"]
[Fri Apr 17 22:16:32.793130 2026] [:error] [pid 34273:tid 34275] [client 20.19.188.213:64914] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "aeJAwGuQDW686mK3dgEbPQAAAYA"]
[Fri Apr 17 22:16:33.265751 2026] [:error] [pid 61523:tid 61565] [client 20.19.188.213:64356] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aeJAwcOaH-Pgc7WEf4Ps6AAAAdc"]
[Fri Apr 17 22:16:33.801042 2026] [:error] [pid 61523:tid 61545] [client 20.19.188.213:65487] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aeJAwcOaH-Pgc7WEf4Ps6gAAAcM"]
[Fri Apr 17 22:16:34.281015 2026] [:error] [pid 9153:tid 9241] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Fri Apr 17 22:16:35.198366 2026] [:error] [pid 9153:tid 9241] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/2ksm17n.php
[Fri Apr 17 22:16:35.450917 2026] [:error] [pid 9153:tid 9225] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Fri Apr 17 22:16:35.688973 2026] [:error] [pid 9153:tid 9223] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 17 22:16:35.933120 2026] [:error] [pid 9153:tid 9229] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 17 22:16:36.246735 2026] [:error] [pid 9153:tid 9230] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Fri Apr 17 22:16:36.490043 2026] [:error] [pid 9153:tid 9222] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 17 22:16:36.728895 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Fri Apr 17 22:16:36.968054 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 17 22:16:37.484417 2026] [:error] [pid 9153:tid 9232] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/a6.php
[Fri Apr 17 22:16:37.732181 2026] [:error] [pid 9153:tid 9224] [client 20.19.188.213:63619] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 17 22:16:38.068414 2026] [:error] [pid 9153:tid 9226] [client 20.19.188.213:63619] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeJAxuMHGxkTZX3c45cadgAAAIg"]
[Fri Apr 17 22:16:38.585537 2026] [:error] [pid 61523:tid 61559] [client 20.19.188.213:64373] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeJAxsOaH-Pgc7WEf4Ps_gAAAdE"]
[Fri Apr 17 22:16:39.110885 2026] [:error] [pid 9151:tid 9162] [client 20.19.188.213:62402] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeJAx8hTVuRPkua22vRLWQAAAAE"]
[Fri Apr 17 22:16:39.623723 2026] [:error] [pid 9151:tid 9163] [client 20.19.188.213:65434] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeJAx8hTVuRPkua22vRLWgAAAAI"]
[Fri Apr 17 22:16:40.144726 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:61949] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeJAyEnQhUtMbw9Esga9AAAAARg"]
[Fri Apr 17 22:16:40.648163 2026] [:error] [pid 34273:tid 34286] [client 20.19.188.213:63091] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeJAyGuQDW686mK3dgEbRAAAAYs"]
[Fri Apr 17 22:16:41.204743 2026] [:error] [pid 34273:tid 34277] [client 20.19.188.213:65519] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeJAyWuQDW686mK3dgEbRwAAAYI"]
[Fri Apr 17 22:16:41.744796 2026] [:error] [pid 34273:tid 34290] [client 20.19.188.213:64322] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeJAyWuQDW686mK3dgEbSQAAAY8"]
[Fri Apr 17 22:16:42.798117 2026] [:error] [pid 9151:tid 9177] [client 20.19.188.213:65000] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeJAyshTVuRPkua22vRLXAAAABA"]
[Fri Apr 17 22:16:43.828388 2026] [:error] [pid 9152:tid 9195] [client 20.19.188.213:64312] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeJAy5JYca8I3TNCwId3WQAAAEU"]
[Fri Apr 17 22:16:44.493745 2026] [:error] [pid 51878:tid 51884] [client 20.19.188.213:64338] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeJAzEnQhUtMbw9Esga9FAAAAQQ"]
[Fri Apr 17 22:16:45.061990 2026] [:error] [pid 61523:tid 61553] [client 20.19.188.213:63701] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeJAzcOaH-Pgc7WEf4PtBgAAAcs"]
[Fri Apr 17 22:16:45.622772 2026] [:error] [pid 51878:tid 51901] [client 20.19.188.213:65522] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeJAzUnQhUtMbw9Esga9GQAAARU"]
[Fri Apr 17 22:16:46.367558 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:65442] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeJAzsOaH-Pgc7WEf4PtDQAAAdg"]
[Fri Apr 17 22:16:46.977824 2026] [:error] [pid 9152:tid 9196] [client 20.19.188.213:64896] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeJAzpJYca8I3TNCwId3XAAAAEY"]
[Fri Apr 17 22:16:47.513250 2026] [:error] [pid 9151:tid 9173] [client 20.19.188.213:65015] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeJAz8hTVuRPkua22vRLXwAAAAw"]
[Fri Apr 17 22:16:48.068512 2026] [:error] [pid 9153:tid 9218] [client 20.19.188.213:64328] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeJA0OMHGxkTZX3c45cafQAAAIA"]
[Fri Apr 17 22:16:48.649967 2026] [:error] [pid 25010:tid 25034] [client 20.19.188.213:65461] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeJA0I-7kkf42RarqQ2GQwAAAVU"]
[Fri Apr 17 22:16:49.372182 2026] [:error] [pid 61523:tid 61547] [client 20.19.188.213:65431] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeJA0cOaH-Pgc7WEf4PtEwAAAcU"]
[Fri Apr 17 22:16:49.992345 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:65505] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeJA0eMHGxkTZX3c45cagAAAAJQ"]
[Fri Apr 17 22:16:50.811683 2026] [:error] [pid 9153:tid 9235] [client 20.19.188.213:64964] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeJA0uMHGxkTZX3c45caiAAAAJE"]
[Fri Apr 17 22:16:51.335982 2026] [:error] [pid 9152:tid 9194] [client 20.19.188.213:64923] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeJA05JYca8I3TNCwId3cQAAAEQ"]
[Fri Apr 17 22:16:52.041838 2026] [:error] [pid 9153:tid 9221] [client 20.19.188.213:63625] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeJA1OMHGxkTZX3c45caiwAAAIM"]
[Fri Apr 17 22:16:52.641082 2026] [:error] [pid 9152:tid 9193] [client 20.19.188.213:65022] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeJA1JJYca8I3TNCwId3dwAAAEM"]
[Fri Apr 17 22:16:53.723437 2026] [:error] [pid 9151:tid 9170] [client 20.19.188.213:65471] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeJA1chTVuRPkua22vRLYAAAAAk"]
[Fri Apr 17 22:16:54.655713 2026] [:error] [pid 9151:tid 9174] [client 20.19.188.213:65019] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeJA1shTVuRPkua22vRLYgAAAA0"]
[Fri Apr 17 22:16:55.413528 2026] [:error] [pid 34273:tid 34276] [client 20.19.188.213:63713] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeJA12uQDW686mK3dgEbXgAAAYE"]
[Fri Apr 17 22:16:56.105672 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:64326] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeJA2MOaH-Pgc7WEf4PtGwAAAco"]
[Fri Apr 17 22:16:56.786658 2026] [:error] [pid 61523:tid 61556] [client 20.19.188.213:65511] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "aeJA2MOaH-Pgc7WEf4PtHAAAAc4"]
[Fri Apr 17 22:16:57.528338 2026] [:error] [pid 51878:tid 51884] [client 20.19.188.213:64345] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "aeJA2UnQhUtMbw9Esga9UgAAAQQ"]
[Fri Apr 17 22:16:58.106613 2026] [:error] [pid 51878:tid 51897] [client 20.19.188.213:64986] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "aeJA2knQhUtMbw9Esga9WgAAARE"]
[Fri Apr 17 22:16:59.049953 2026] [:error] [pid 51878:tid 51891] [client 20.19.188.213:64997] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/only.php"] [unique_id "aeJA20nQhUtMbw9Esga9YQAAAQs"]
[Fri Apr 17 22:16:59.836736 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:65527] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeJA20nQhUtMbw9Esga9ZwAAAQ4"]
[Fri Apr 17 22:17:00.458776 2026] [:error] [pid 61523:tid 61545] [client 20.19.188.213:64966] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeJA3MOaH-Pgc7WEf4PtHQAAAcM"]
[Fri Apr 17 22:17:01.003006 2026] [:error] [pid 34273:tid 34288] [client 20.19.188.213:64300] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeJA3WuQDW686mK3dgEbYwAAAY0"]
[Fri Apr 17 22:17:01.818364 2026] [:error] [pid 34273:tid 34283] [client 20.19.188.213:64343] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeJA3WuQDW686mK3dgEbZwAAAYg"]
[Fri Apr 17 22:17:02.686352 2026] [:error] [pid 51878:tid 51889] [client 20.19.188.213:61963] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeJA3knQhUtMbw9Esga9egAAAQk"]
[Fri Apr 17 22:17:03.322517 2026] [:error] [pid 34273:tid 34298] [client 20.19.188.213:65502] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeJA32uQDW686mK3dgEbaQAAAZc"]
[Fri Apr 17 22:17:03.957873 2026] [:error] [pid 9153:tid 9237] [client 20.19.188.213:60337] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeJA3-MHGxkTZX3c45calwAAAJM"]
[Fri Apr 17 22:17:04.729775 2026] [:error] [pid 34273:tid 34276] [client 20.19.188.213:64995] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeJA4GuQDW686mK3dgEbagAAAYE"]
[Fri Apr 17 22:17:05.703855 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:63097] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeJA4cOaH-Pgc7WEf4PtKQAAAco"]
[Fri Apr 17 22:17:06.287554 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:65411] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeJA4knQhUtMbw9Esga9gQAAAQY"]
[Fri Apr 17 22:17:06.913561 2026] [:error] [pid 61523:tid 61544] [client 20.19.188.213:65007] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeJA4sOaH-Pgc7WEf4PtKgAAAcI"]
[Fri Apr 17 22:17:07.449554 2026] [:error] [pid 61523:tid 61553] [client 20.19.188.213:64999] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeJA48OaH-Pgc7WEf4PtKwAAAcs"]
[Fri Apr 17 22:17:08.018794 2026] [:error] [pid 9151:tid 9166] [client 20.19.188.213:65470] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aeJA5MhTVuRPkua22vRLbAAAAAU"]
[Fri Apr 17 22:17:08.592677 2026] [:error] [pid 61523:tid 61563] [client 20.19.188.213:65518] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aeJA5MOaH-Pgc7WEf4PtMAAAAdU"]
[Fri Apr 17 22:17:09.613546 2026] [:error] [pid 9152:tid 9209] [client 20.19.188.213:65475] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aeJA5ZJYca8I3TNCwId3fgAAAFM"]
[Fri Apr 17 22:17:17.581409 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:64274] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Okxob.php"] [unique_id "aeJA7UnQhUtMbw9Esga9igAAAQ4"]
[Fri Apr 17 22:17:26.470727 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:62980] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "aeJA9knQhUtMbw9Esga9lAAAAQo"]
[Fri Apr 17 22:18:33.722125 2026] [:error] [pid 9152:tid 9212] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 17 22:18:33.977652 2026] [:error] [pid 9152:tid 9192] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Fri Apr 17 22:18:34.509382 2026] [:error] [pid 9152:tid 9191] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Fri Apr 17 22:18:34.746845 2026] [:error] [pid 9152:tid 9195] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Fri Apr 17 22:18:34.985170 2026] [:error] [pid 9152:tid 9209] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/tdsaz.php
[Fri Apr 17 22:18:35.319073 2026] [:error] [pid 9152:tid 9204] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/ynjli.php
[Fri Apr 17 22:18:35.586920 2026] [:error] [pid 9152:tid 9199] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 17 22:18:35.828781 2026] [:error] [pid 9152:tid 9211] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/rogsa.php
[Fri Apr 17 22:18:36.096518 2026] [:error] [pid 9152:tid 9214] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Fri Apr 17 22:18:36.347105 2026] [:error] [pid 9152:tid 9193] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/new3.php
[Fri Apr 17 22:18:36.592370 2026] [:error] [pid 9152:tid 9210] [client 20.19.188.213:64932] File does not exist: /usr/local/apache/htdocs/suspended-page/0yellow.php
[Fri Apr 17 22:18:36.851770 2026] [:error] [pid 9152:tid 9213] [client 20.19.188.213:64932] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJBPJJYca8I3TNCwId4XQAAAFc"]
[Fri Apr 17 22:18:37.418058 2026] [:error] [pid 9153:tid 9222] [client 20.19.188.213:64915] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJBPeMHGxkTZX3c45cayQAAAIQ"]
[Fri Apr 17 22:18:37.915899 2026] [:error] [pid 25010:tid 25025] [client 20.19.188.213:64374] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJBPY-7kkf42RarqQ2GsgAAAUw"]
[Fri Apr 17 22:18:38.480828 2026] [:error] [pid 25010:tid 25027] [client 20.19.188.213:63738] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeJBPo-7kkf42RarqQ2GtQAAAU4"]
[Fri Apr 17 22:18:39.011646 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:65468] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeJBPxP68VyHNvj1e55t4gAAAME"]
[Fri Apr 17 22:18:39.644909 2026] [:error] [pid 9153:tid 9225] [client 20.19.188.213:65489] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeJBP-MHGxkTZX3c45caywAAAIc"]
[Fri Apr 17 22:18:40.951031 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64950] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeJBQBP68VyHNvj1e55t6QAAAMQ"]
[Fri Apr 17 22:18:41.853687 2026] [:error] [pid 61523:tid 61541] [client 20.19.188.213:65005] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeJBQcOaH-Pgc7WEf4Pt9AAAAcA"]
[Fri Apr 17 22:18:42.505627 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:64975] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aeJBQhP68VyHNvj1e55t8wAAAME"]
[Fri Apr 17 22:18:43.053497 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:64383] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aeJBQ0nQhUtMbw9Esga-xQAAAQ4"]
[Fri Apr 17 22:18:43.571646 2026] [:error] [pid 51878:tid 51898] [client 20.19.188.213:65002] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aeJBQ0nQhUtMbw9Esga-yAAAARI"]
[Fri Apr 17 22:18:44.293459 2026] [:error] [pid 51878:tid 51893] [client 20.19.188.213:65016] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aeJBREnQhUtMbw9Esga-zAAAAQ0"]
[Fri Apr 17 22:18:44.870391 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:64918] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeJBRBP68VyHNvj1e55t9wAAAMc"]
[Fri Apr 17 22:18:45.917036 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:64939] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeJBRRP68VyHNvj1e55t-AAAAMM"]
[Fri Apr 17 22:18:46.670955 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:65455] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeJBRsOaH-Pgc7WEf4Pt-QAAAco"]
[Fri Apr 17 22:18:47.647072 2026] [:error] [pid 61523:tid 61559] [client 20.19.188.213:65463] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeJBR8OaH-Pgc7WEf4PuAAAAAdE"]
[Fri Apr 17 22:18:48.371794 2026] [:error] [pid 9152:tid 9211] [client 20.19.188.213:65480] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeJBSJJYca8I3TNCwId4ZQAAAFU"]
[Fri Apr 17 22:18:49.245631 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:64331] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeJBSRP68VyHNvj1e55t_gAAANg"]
[Fri Apr 17 22:18:50.138973 2026] [:error] [pid 9151:tid 9179] [client 20.19.188.213:64933] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeJBSshTVuRPkua22vRLzgAAABI"]
[Fri Apr 17 22:18:50.695801 2026] [:error] [pid 61523:tid 61565] [client 20.19.188.213:64298] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeJBSsOaH-Pgc7WEf4PuAgAAAdc"]
[Fri Apr 17 22:18:51.323827 2026] [:error] [pid 61523:tid 61551] [client 20.19.188.213:64302] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeJBS8OaH-Pgc7WEf4PuBgAAAck"]
[Fri Apr 17 22:18:51.949225 2026] [:error] [pid 34273:tid 34277] [client 20.19.188.213:63688] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeJBS2uQDW686mK3dgEbxQAAAYI"]
[Fri Apr 17 22:18:52.937873 2026] [:error] [pid 9263:tid 9284] [client 20.19.188.213:63689] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeJBTBP68VyHNvj1e55uAAAAANM"]
[Fri Apr 17 22:18:53.683494 2026] [:error] [pid 9153:tid 9223] [client 20.19.188.213:65483] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeJBTeMHGxkTZX3c45ca2AAAAIU"]
[Fri Apr 17 22:18:54.544114 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:64362] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeJBTknQhUtMbw9Esga-5AAAAQ4"]
[Fri Apr 17 22:18:55.209203 2026] [:error] [pid 51878:tid 51887] [client 20.19.188.213:65018] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeJBT0nQhUtMbw9Esga-6gAAAQc"]
[Fri Apr 17 22:18:56.050663 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:64954] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeJBUBP68VyHNvj1e55uAgAAAM4"]
[Fri Apr 17 22:18:56.995488 2026] [:error] [pid 51878:tid 51899] [client 20.19.188.213:64926] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeJBUEnQhUtMbw9Esga-8gAAARM"]
[Fri Apr 17 22:18:57.861981 2026] [:error] [pid 34273:tid 34278] [client 20.19.188.213:65482] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "aeJBUWuQDW686mK3dgEbywAAAYM"]
[Fri Apr 17 22:18:58.681785 2026] [:error] [pid 9151:tid 9164] [client 20.19.188.213:65008] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "aeJBUshTVuRPkua22vRL3QAAAAM"]
[Fri Apr 17 22:18:59.228265 2026] [:error] [pid 51878:tid 51898] [client 20.19.188.213:64911] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "aeJBU0nQhUtMbw9Esga--AAAARI"]
[Fri Apr 17 22:19:00.117133 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:64333] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "aeJBVBP68VyHNvj1e55uBgAAANE"]
[Fri Apr 17 22:19:01.119889 2026] [:error] [pid 51878:tid 51881] [client 20.19.188.213:65017] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeJBVUnQhUtMbw9Esga-_gAAAQE"]
[Fri Apr 17 22:19:01.921091 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:65424] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeJBVRP68VyHNvj1e55uCgAAAMo"]
[Fri Apr 17 22:19:02.922760 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:64303] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeJBVknQhUtMbw9Esga_BAAAARA"]
[Fri Apr 17 22:19:03.710520 2026] [:error] [pid 25010:tid 25035] [client 20.19.188.213:65413] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeJBV4-7kkf42RarqQ2GzAAAAVY"]
[Fri Apr 17 22:19:04.519593 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:64967] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeJBWEnQhUtMbw9Esga_CAAAAQo"]
[Fri Apr 17 22:19:06.313678 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:63717] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeJBWpJYca8I3TNCwId4dgAAAFE"]
[Fri Apr 17 22:19:07.943253 2026] [:error] [pid 9263:tid 9289] [client 20.19.188.213:64272] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeJBWxP68VyHNvj1e55uGgAAANg"]
[Fri Apr 17 22:19:09.468272 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:64907] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeJBXUnQhUtMbw9Esga_EAAAARA"]
[Fri Apr 17 22:19:10.268933 2026] [:error] [pid 61523:tid 61554] [client 20.19.188.213:64337] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeJBXsOaH-Pgc7WEf4PuFwAAAcw"]
[Fri Apr 17 22:19:11.068140 2026] [:error] [pid 9152:tid 9194] [client 20.19.188.213:64904] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeJBX5JYca8I3TNCwId4hAAAAEQ"]
[Fri Apr 17 22:19:11.727485 2026] [:error] [pid 9152:tid 9214] [client 20.19.188.213:64998] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeJBX5JYca8I3TNCwId4hgAAAFg"]
[Fri Apr 17 22:19:12.354401 2026] [:error] [pid 34273:tid 34282] [client 20.19.188.213:65478] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeJBYGuQDW686mK3dgEb1AAAAYc"]
[Fri Apr 17 22:19:13.182304 2026] [:error] [pid 34273:tid 34299] [client 20.19.188.213:64360] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeJBYWuQDW686mK3dgEb1wAAAZg"]
[Fri Apr 17 22:19:13.902045 2026] [:error] [pid 9153:tid 9242] [client 20.19.188.213:64943] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeJBYeMHGxkTZX3c45ca4QAAAJg"]
[Fri Apr 17 22:19:14.588751 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:64941] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeJBYuMHGxkTZX3c45ca4wAAAJI"]
[Fri Apr 17 22:19:15.210501 2026] [:error] [pid 34273:tid 34295] [client 20.19.188.213:64947] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeJBY2uQDW686mK3dgEb4AAAAZQ"]
[Fri Apr 17 22:19:15.967427 2026] [:error] [pid 9152:tid 9194] [client 20.19.188.213:64955] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "aeJBY5JYca8I3TNCwId4kgAAAEQ"]
[Fri Apr 17 22:19:16.591793 2026] [:error] [pid 25010:tid 25018] [client 20.19.188.213:65436] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "aeJBZI-7kkf42RarqQ2G0AAAAUU"]
[Fri Apr 17 22:19:17.483590 2026] [:error] [pid 9153:tid 9220] [client 20.19.188.213:64304] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "aeJBZeMHGxkTZX3c45ca6wAAAII"]
[Fri Apr 17 22:19:18.223480 2026] [:error] [pid 51878:tid 51888] [client 20.19.188.213:64327] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "aeJBZknQhUtMbw9Esga_EgAAAQg"]
[Fri Apr 17 22:19:18.942148 2026] [:error] [pid 61523:tid 61554] [client 20.19.188.213:65515] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeJBZsOaH-Pgc7WEf4PuIQAAAcw"]
[Fri Apr 17 22:19:19.619683 2026] [:error] [pid 61523:tid 61557] [client 20.19.188.213:64959] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeJBZ8OaH-Pgc7WEf4PuIwAAAc8"]
[Fri Apr 17 22:19:20.375643 2026] [:error] [pid 9153:tid 9225] [client 20.19.188.213:65446] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeJBaOMHGxkTZX3c45ca8QAAAIc"]
[Fri Apr 17 22:19:21.067479 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:64901] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeJBaUnQhUtMbw9Esga_FgAAAQY"]
[Fri Apr 17 22:19:22.237363 2026] [:error] [pid 9153:tid 9230] [client 20.19.188.213:65524] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeJBauMHGxkTZX3c45ca9AAAAIw"]
[Fri Apr 17 22:19:22.956684 2026] [:error] [pid 51878:tid 51882] [client 20.19.188.213:64260] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeJBaknQhUtMbw9Esga_HwAAAQI"]
[Fri Apr 17 22:19:23.814346 2026] [:error] [pid 51878:tid 51884] [client 20.19.188.213:64935] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeJBa0nQhUtMbw9Esga_IQAAAQQ"]
[Fri Apr 17 22:19:24.536721 2026] [:error] [pid 61523:tid 61556] [client 20.19.188.213:65445] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeJBbMOaH-Pgc7WEf4PuLQAAAc4"]
[Fri Apr 17 22:19:26.244353 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:65476] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeJBbsOaH-Pgc7WEf4PuLwAAAc0"]
[Fri Apr 17 22:19:28.496871 2026] [:error] [pid 9153:tid 9233] [client 20.19.188.213:65425] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeJBcOMHGxkTZX3c45cbAAAAAI8"]
[Fri Apr 17 22:19:31.123600 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:63065] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeJBc-MHGxkTZX3c45cbBQAAAJI"]
[Fri Apr 17 22:19:33.384881 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:65414] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeJBdRP68VyHNvj1e55uSQAAAMc"]
[Fri Apr 17 22:19:35.121060 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:65490] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "aeJBdxP68VyHNvj1e55uTgAAAMQ"]
[Fri Apr 17 22:19:35.804475 2026] [:error] [pid 61523:tid 61566] [client 20.19.188.213:65504] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/RIP.php"] [unique_id "aeJBd8OaH-Pgc7WEf4PuNQAAAdg"]
[Fri Apr 17 22:19:36.377163 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Fri Apr 17 22:19:36.650221 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 17 22:19:36.945726 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 17 22:19:37.203106 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Fri Apr 17 22:19:37.442881 2026] [:error] [pid 9263:tid 9274] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/BhqKs28Cw94.php
[Fri Apr 17 22:19:37.684079 2026] [:error] [pid 9263:tid 9276] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/beerd.php
[Fri Apr 17 22:19:38.010645 2026] [:error] [pid 9263:tid 9280] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/3Cr1w6dfjTK.php
[Fri Apr 17 22:19:38.328125 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Fri Apr 17 22:19:38.578771 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/oircv.php
[Fri Apr 17 22:19:38.821745 2026] [:error] [pid 9263:tid 9283] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Fri Apr 17 22:19:39.068207 2026] [:error] [pid 9263:tid 9281] [client 20.19.188.213:65526] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Fri Apr 17 22:19:39.463653 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:65526] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeJBexP68VyHNvj1e55ubwAAAMo"]
[Fri Apr 17 22:19:40.078622 2026] [:error] [pid 61523:tid 61551] [client 20.19.188.213:64962] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeJBfMOaH-Pgc7WEf4PuOQAAAck"]
[Fri Apr 17 22:19:40.746181 2026] [:error] [pid 9152:tid 9214] [client 20.19.188.213:64974] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeJBfJJYca8I3TNCwId4rQAAAFg"]
[Fri Apr 17 22:19:41.509937 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:64979] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeJBfRP68VyHNvj1e55udwAAAM4"]
[Fri Apr 17 22:19:42.362699 2026] [:error] [pid 9151:tid 9170] [client 20.19.188.213:64361] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeJBfshTVuRPkua22vRL3gAAAAk"]
[Fri Apr 17 22:19:43.370858 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:65510] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeJBfxP68VyHNvj1e55ufQAAAMo"]
[Fri Apr 17 22:19:44.530733 2026] [:error] [pid 61523:tid 61557] [client 20.19.188.213:65491] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeJBgMOaH-Pgc7WEf4PuSQAAAc8"]
[Fri Apr 17 22:19:45.517938 2026] [:error] [pid 25010:tid 25028] [client 20.19.188.213:65488] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeJBgY-7kkf42RarqQ2G4QAAAU8"]
[Fri Apr 17 22:19:46.122801 2026] [:error] [pid 9153:tid 9239] [client 20.19.188.213:65460] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeJBguMHGxkTZX3c45cbFgAAAJU"]
[Fri Apr 17 22:19:46.808453 2026] [:error] [pid 25010:tid 25034] [client 20.19.188.213:64994] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeJBgo-7kkf42RarqQ2G6QAAAVU"]
[Fri Apr 17 22:19:47.511013 2026] [:error] [pid 25010:tid 25017] [client 20.19.188.213:65453] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeJBg4-7kkf42RarqQ2G7AAAAUQ"]
[Fri Apr 17 22:19:48.250062 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:64899] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeJBhBP68VyHNvj1e55ugQAAAMA"]
[Fri Apr 17 22:19:49.311383 2026] [:error] [pid 51878:tid 51892] [client 20.19.188.213:64346] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeJBhUnQhUtMbw9Esga_OgAAAQw"]
[Fri Apr 17 22:19:50.182130 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:65508] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeJBhhP68VyHNvj1e55uhgAAAMI"]
[Fri Apr 17 22:19:50.842692 2026] [:error] [pid 25010:tid 25023] [client 20.19.188.213:64985] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeJBho-7kkf42RarqQ2G7wAAAUo"]
[Fri Apr 17 22:19:51.556831 2026] [:error] [pid 9263:tid 9282] [client 20.19.188.213:64321] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeJBhxP68VyHNvj1e55uiQAAANE"]
[Fri Apr 17 22:19:52.217469 2026] [:error] [pid 9153:tid 9241] [client 20.19.188.213:64377] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "aeJBiOMHGxkTZX3c45cbHAAAAJc"]
[Fri Apr 17 22:19:52.924511 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:64938] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "aeJBiEnQhUtMbw9Esga_QAAAARc"]
[Fri Apr 17 22:19:53.451228 2026] [:error] [pid 9263:tid 9266] [client 20.19.188.213:64315] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "aeJBiRP68VyHNvj1e55ujQAAAME"]
[Fri Apr 17 22:19:54.216278 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:63723] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "aeJBiknQhUtMbw9Esga_RAAAAQY"]
[Fri Apr 17 22:19:56.562848 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:63052] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeJBjBP68VyHNvj1e55ukQAAAMM"]
[Fri Apr 17 22:20:01.806078 2026] [:error] [pid 34273:tid 34277] [client 20.19.188.213:63720] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeJBkWuQDW686mK3dgEb9wAAAYI"]
[Fri Apr 17 22:20:05.603667 2026] [:error] [pid 9153:tid 9222] [client 20.19.188.213:64913] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeJBleMHGxkTZX3c45cbIgAAAIQ"]
[Fri Apr 17 22:20:06.957139 2026] [:error] [pid 9151:tid 9173] [client 20.19.188.213:64256] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeJBlshTVuRPkua22vRL5wAAAAw"]
[Fri Apr 17 22:20:08.010613 2026] [:error] [pid 9263:tid 9279] [client 20.19.188.213:64900] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aeJBmBP68VyHNvj1e55unAAAAM4"]
[Fri Apr 17 22:20:08.899437 2026] [:error] [pid 9263:tid 9268] [client 20.19.188.213:63681] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aeJBmBP68VyHNvj1e55uoAAAAMM"]
[Fri Apr 17 22:20:10.035038 2026] [:error] [pid 51878:tid 51902] [client 20.19.188.213:65421] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aeJBmknQhUtMbw9Esga_XgAAARY"]
[Fri Apr 17 22:20:10.970170 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:64329] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aeJBmknQhUtMbw9Esga_YQAAAQ4"]
[Fri Apr 17 22:20:11.715005 2026] [:error] [pid 51878:tid 51884] [client 20.19.188.213:64906] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeJBm0nQhUtMbw9Esga_ZAAAAQQ"]
[Fri Apr 17 22:20:12.539837 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:63687] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeJBnEnQhUtMbw9Esga_ZgAAAQo"]
[Fri Apr 17 22:20:13.396984 2026] [:error] [pid 51878:tid 51902] [client 20.19.188.213:64916] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeJBnUnQhUtMbw9Esga_awAAARY"]
[Fri Apr 17 22:20:14.480039 2026] [:error] [pid 9153:tid 9238] [client 20.19.188.213:65021] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeJBnuMHGxkTZX3c45cbJAAAAJQ"]
[Fri Apr 17 22:20:15.203004 2026] [:error] [pid 61523:tid 61550] [client 20.19.188.213:64368] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeJBn8OaH-Pgc7WEf4PuXwAAAcg"]
[Fri Apr 17 22:20:15.865027 2026] [:error] [pid 61523:tid 61549] [client 20.19.188.213:65422] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeJBn8OaH-Pgc7WEf4PuYAAAAcc"]
[Fri Apr 17 22:20:17.346378 2026] [:error] [pid 34273:tid 34283] [client 20.19.188.213:64958] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeJBoWuQDW686mK3dgEcBwAAAYg"]
[Fri Apr 17 22:20:19.064919 2026] [:error] [pid 51878:tid 51880] [client 20.19.188.213:65435] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Spow_SRw.php"] [unique_id "aeJBo0nQhUtMbw9Esga_egAAAQA"]
[Fri Apr 17 22:20:20.285279 2026] [:error] [pid 9263:tid 9288] [client 20.19.188.213:65512] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeJBpBP68VyHNvj1e55uqAAAANc"]
[Fri Apr 17 22:20:21.218604 2026] [:error] [pid 61523:tid 61564] [client 20.19.188.213:63712] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeJBpcOaH-Pgc7WEf4PuZgAAAdY"]
[Fri Apr 17 22:20:22.563859 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:64378] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeJBphP68VyHNvj1e55urAAAAMU"]
[Fri Apr 17 22:20:23.876932 2026] [:error] [pid 51878:tid 51901] [client 20.19.188.213:64996] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeJBp0nQhUtMbw9Esga_gwAAARU"]
[Fri Apr 17 22:20:24.892744 2026] [:error] [pid 34273:tid 34276] [client 20.19.188.213:63726] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeJBqGuQDW686mK3dgEcDgAAAYE"]
[Fri Apr 17 22:20:25.634113 2026] [:error] [pid 25010:tid 25015] [client 20.19.188.213:64931] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeJBqY-7kkf42RarqQ2G_gAAAUI"]
[Fri Apr 17 22:20:26.398145 2026] [:error] [pid 9263:tid 9286] [client 20.19.188.213:63660] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeJBqhP68VyHNvj1e55uuQAAANU"]
[Fri Apr 17 22:20:27.974075 2026] [:error] [pid 25010:tid 25037] [client 20.19.188.213:65408] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blqjs.php"] [unique_id "aeJBq4-7kkf42RarqQ2HAwAAAVg"]
[Fri Apr 17 22:20:28.897910 2026] [:error] [pid 9151:tid 9177] [client 20.19.188.213:65513] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeJBrMhTVuRPkua22vRL8wAAABA"]
[Fri Apr 17 22:20:29.771159 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:65474] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeJBreMHGxkTZX3c45cbLAAAAJI"]
[Fri Apr 17 22:20:30.564932 2026] [:error] [pid 9153:tid 9242] [client 20.19.188.213:64946] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeJBruMHGxkTZX3c45cbLwAAAJg"]
[Fri Apr 17 22:20:31.215931 2026] [:error] [pid 61523:tid 61546] [client 20.19.188.213:64344] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeJBr8OaH-Pgc7WEf4PubgAAAcQ"]
[Fri Apr 17 22:20:32.109547 2026] [:error] [pid 61523:tid 61541] [client 20.19.188.213:64325] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeJBsMOaH-Pgc7WEf4PucgAAAcA"]
[Fri Apr 17 22:20:33.218344 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:64260] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeJBsUnQhUtMbw9Esga_jwAAARg"]
[Fri Apr 17 22:20:44.708680 2026] [:error] [pid 34273:tid 34291] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/iindv.php
[Fri Apr 17 22:20:44.946361 2026] [:error] [pid 34273:tid 34282] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Fri Apr 17 22:20:45.184475 2026] [:error] [pid 34273:tid 34297] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Fri Apr 17 22:20:45.422565 2026] [:error] [pid 34273:tid 34284] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/wxeyc.php
[Fri Apr 17 22:20:45.674348 2026] [:error] [pid 34273:tid 34293] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/xxiviLDIot.php
[Fri Apr 17 22:20:45.938162 2026] [:error] [pid 34273:tid 34299] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Fri Apr 17 22:20:46.176194 2026] [:error] [pid 34273:tid 34283] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Fri Apr 17 22:20:46.563717 2026] [:error] [pid 34273:tid 34280] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/sde.php
[Fri Apr 17 22:20:46.924421 2026] [:error] [pid 34273:tid 34285] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/cdn3.php
[Fri Apr 17 22:20:47.165599 2026] [:error] [pid 34273:tid 34290] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Fri Apr 17 22:20:47.565531 2026] [:error] [pid 34273:tid 34279] [client 20.19.188.213:65451] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-220.php
[Fri Apr 17 22:20:47.801130 2026] [:error] [pid 34273:tid 34291] [client 20.19.188.213:65451] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJBv2uQDW686mK3dgEcKAAAAZA"]
[Fri Apr 17 22:20:48.729912 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:64283] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJBwMOaH-Pgc7WEf4PuhQAAAc0"]
[Fri Apr 17 22:20:49.789592 2026] [:error] [pid 61523:tid 61552] [client 20.19.188.213:64334] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJBwcOaH-Pgc7WEf4PuhwAAAco"]
[Fri Apr 17 22:20:50.736683 2026] [:error] [pid 61523:tid 61544] [client 20.19.188.213:65433] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJBwsOaH-Pgc7WEf4PuigAAAcI"]
[Fri Apr 17 22:20:51.442271 2026] [:error] [pid 25010:tid 25026] [client 20.19.188.213:64952] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeJBw4-7kkf42RarqQ2HFQAAAU0"]
[Fri Apr 17 22:20:52.682760 2026] [:error] [pid 25010:tid 25021] [client 20.19.188.213:64970] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeJBxI-7kkf42RarqQ2HGAAAAUg"]
[Fri Apr 17 22:20:53.790005 2026] [:error] [pid 9263:tid 9265] [client 20.19.188.213:64944] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeJBxRP68VyHNvj1e55uzwAAAMA"]
[Fri Apr 17 22:20:55.003361 2026] [:error] [pid 25010:tid 25029] [client 20.19.188.213:63699] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeJBx4-7kkf42RarqQ2HHwAAAVA"]
[Fri Apr 17 22:20:55.902830 2026] [:error] [pid 61523:tid 61557] [client 20.19.188.213:64905] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJBx8OaH-Pgc7WEf4PujgAAAc8"]
[Fri Apr 17 22:20:57.019534 2026] [:error] [pid 51878:tid 51895] [client 20.19.188.213:64310] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJByUnQhUtMbw9Esga_rgAAAQ8"]
[Fri Apr 17 22:20:58.121984 2026] [:error] [pid 9263:tid 9275] [client 20.19.188.213:64960] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJByhP68VyHNvj1e55u0wAAAMo"]
[Fri Apr 17 22:20:59.689285 2026] [:error] [pid 61523:tid 61562] [client 20.19.188.213:64363] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJBy8OaH-Pgc7WEf4PukgAAAdQ"]
[Fri Apr 17 22:21:00.572814 2026] [:error] [pid 9152:tid 9208] [client 20.19.188.213:65496] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeJBzJJYca8I3TNCwId4zgAAAFI"]
[Fri Apr 17 22:21:01.237747 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:65521] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeJBzUnQhUtMbw9Esga_tAAAAQo"]
[Fri Apr 17 22:21:02.684798 2026] [:error] [pid 9151:tid 9167] [client 20.19.188.213:65467] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeJBzshTVuRPkua22vRMDQAAAAY"]
[Fri Apr 17 22:21:03.409507 2026] [:error] [pid 9153:tid 9229] [client 20.19.188.213:65461] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeJBz-MHGxkTZX3c45cbQAAAAIs"]
[Fri Apr 17 22:21:04.096108 2026] [:error] [pid 9151:tid 9177] [client 20.19.188.213:63051] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeJB0MhTVuRPkua22vRMEgAAABA"]
[Fri Apr 17 22:21:07.533229 2026] [:error] [pid 9153:tid 9221] [client 20.19.188.213:64278] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeJB0-MHGxkTZX3c45cbRwAAAIM"]
[Fri Apr 17 22:21:08.393560 2026] [:error] [pid 51878:tid 51900] [client 20.19.188.213:65469] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeJB1EnQhUtMbw9Esga_tgAAARQ"]
[Fri Apr 17 22:21:09.413193 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:65004] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeJB1RP68VyHNvj1e55u3AAAANQ"]
[Fri Apr 17 22:21:10.451061 2026] [:error] [pid 9153:tid 9236] [client 20.19.188.213:63692] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeJB1uMHGxkTZX3c45cbSgAAAJI"]
[Fri Apr 17 22:21:11.696360 2026] [:error] [pid 25010:tid 25021] [client 20.19.188.213:65019] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeJB14-7kkf42RarqQ2HLQAAAUg"]
[Fri Apr 17 22:21:13.770175 2026] [:error] [pid 9153:tid 9224] [client 20.19.188.213:64956] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeJB2eMHGxkTZX3c45cbTwAAAIY"]
[Fri Apr 17 22:21:15.255778 2026] [:error] [pid 25010:tid 25034] [client 20.19.188.213:65006] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeJB24-7kkf42RarqQ2HLwAAAVU"]
[Fri Apr 17 22:21:16.084897 2026] [:error] [pid 9263:tid 9278] [client 20.19.188.213:65428] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeJB3BP68VyHNvj1e55u4gAAAM0"]
[Fri Apr 17 22:21:17.413732 2026] [:error] [pid 9151:tid 9175] [client 20.19.188.213:64896] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeJB3chTVuRPkua22vRMHwAAAA4"]
[Fri Apr 17 22:21:18.256943 2026] [:error] [pid 51878:tid 51891] [client 20.19.188.213:63622] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeJB3knQhUtMbw9Esga_wwAAAQs"]
[Fri Apr 17 22:21:19.442467 2026] [:error] [pid 25010:tid 25030] [client 20.19.188.213:65465] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeJB34-7kkf42RarqQ2HMQAAAVE"]
[Fri Apr 17 22:21:21.944476 2026] [:error] [pid 25010:tid 25029] [client 20.19.188.213:64262] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aeJB4Y-7kkf42RarqQ2HMgAAAVA"]
[Fri Apr 17 22:21:23.442349 2026] [:error] [pid 9151:tid 9161] [client 20.19.188.213:65493] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aeJB48hTVuRPkua22vRMKgAAAAA"]
[Fri Apr 17 22:21:25.211975 2026] [:error] [pid 34273:tid 34285] [client 20.19.188.213:64999] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aeJB5WuQDW686mK3dgEcOwAAAYo"]
[Fri Apr 17 22:21:26.000173 2026] [:error] [pid 34273:tid 34278] [client 20.19.188.213:65432] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aeJB5WuQDW686mK3dgEcPgAAAYM"]
[Fri Apr 17 22:21:26.898186 2026] [:error] [pid 9263:tid 9272] [client 20.19.188.213:62978] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeJB5hP68VyHNvj1e55u6AAAAMc"]
[Fri Apr 17 22:21:28.299395 2026] [:error] [pid 51878:tid 51904] [client 20.19.188.213:64977] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeJB6EnQhUtMbw9Esga_ygAAARg"]
[Fri Apr 17 22:21:29.554502 2026] [:error] [pid 9263:tid 9285] [client 20.19.188.213:65431] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeJB6RP68VyHNvj1e55u6wAAANQ"]
[Fri Apr 17 22:21:31.102319 2026] [:error] [pid 9152:tid 9200] [client 20.19.188.213:63078] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeJB65JYca8I3TNCwId42AAAAEo"]
[Fri Apr 17 22:21:32.604819 2026] [:error] [pid 9263:tid 9280] [client 20.19.188.213:64350] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJB7BP68VyHNvj1e55u8gAAAM8"]
[Fri Apr 17 22:21:34.037658 2026] [:error] [pid 9263:tid 9270] [client 20.19.188.213:64266] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJB7hP68VyHNvj1e55u9AAAAMU"]
[Fri Apr 17 22:21:34.601246 2026] [:error] [pid 9152:tid 9194] [client 20.19.188.213:65456] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJB7pJYca8I3TNCwId43AAAAEQ"]
[Fri Apr 17 22:21:35.255998 2026] [:error] [pid 9151:tid 9177] [client 20.19.188.213:64983] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJB78hTVuRPkua22vRMNwAAABA"]
[Fri Apr 17 22:21:36.336729 2026] [:error] [pid 34273:tid 34287] [client 20.19.188.213:64903] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJB8GuQDW686mK3dgEcQgAAAYw"]
[Fri Apr 17 22:21:37.489207 2026] [:error] [pid 9263:tid 9271] [client 20.19.188.213:63691] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJB8RP68VyHNvj1e55u-QAAAMY"]
[Fri Apr 17 22:21:38.419129 2026] [:error] [pid 9263:tid 9267] [client 20.19.188.213:64937] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJB8hP68VyHNvj1e55u_QAAAMI"]
[Fri Apr 17 22:21:40.049697 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:63094] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJB9BP68VyHNvj1e55vBAAAAMQ"]
[Fri Apr 17 22:21:41.133811 2026] [:error] [pid 9263:tid 9280] [client 20.19.188.213:63683] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJB9RP68VyHNvj1e55vCgAAAM8"]
[Fri Apr 17 22:21:43.281970 2026] [:error] [pid 9263:tid 9286] [client 20.19.188.213:64969] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJB9xP68VyHNvj1e55vEgAAANU"]
[Fri Apr 17 22:21:44.101763 2026] [:error] [pid 9263:tid 9271] [client 20.19.188.213:65437] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJB-BP68VyHNvj1e55vEwAAAMY"]
[Fri Apr 17 22:21:44.776049 2026] [:error] [pid 34273:tid 34278] [client 20.19.188.213:65471] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJB-GuQDW686mK3dgEcRgAAAYM"]
[Fri Apr 17 22:21:46.322132 2026] [:error] [pid 9263:tid 9274] [client 20.19.188.213:64963] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oco.php"] [unique_id "aeJB-hP68VyHNvj1e55vGgAAAMk"]
[Fri Apr 17 22:21:47.904764 2026] [:error] [pid 51878:tid 51903] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/oco.php
[Fri Apr 17 22:21:48.158017 2026] [:error] [pid 51878:tid 51897] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/ogr.php
[Fri Apr 17 22:21:48.401514 2026] [:error] [pid 51878:tid 51889] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/oti.php
[Fri Apr 17 22:21:48.656729 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-124.php
[Fri Apr 17 22:21:48.959720 2026] [:error] [pid 51878:tid 51888] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Fri Apr 17 22:21:49.203554 2026] [:error] [pid 51878:tid 51895] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Fri Apr 17 22:21:49.480198 2026] [:error] [pid 51878:tid 51890] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Fri Apr 17 22:21:49.727753 2026] [:error] [pid 51878:tid 51896] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/fss.php
[Fri Apr 17 22:21:50.029487 2026] [:error] [pid 51878:tid 51894] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Fri Apr 17 22:21:50.286540 2026] [:error] [pid 51878:tid 51901] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Fri Apr 17 22:21:50.911154 2026] [:error] [pid 51878:tid 51892] [client 20.19.188.213:64940] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Fri Apr 17 22:21:51.146842 2026] [:error] [pid 51878:tid 51899] [client 20.19.188.213:64940] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeJB_0nQhUtMbw9Esga_6wAAARM"]
[Fri Apr 17 22:21:52.193346 2026] [:error] [pid 9263:tid 9277] [client 20.19.188.213:64340] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeJCABP68VyHNvj1e55vLAAAAMw"]
[Fri Apr 17 22:21:53.157513 2026] [:error] [pid 61523:tid 61557] [client 20.19.188.213:65475] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeJCAcOaH-Pgc7WEf4PusAAAAc8"]
[Fri Apr 17 22:21:54.101153 2026] [:error] [pid 61523:tid 61555] [client 20.19.188.213:64908] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeJCAsOaH-Pgc7WEf4PutQAAAc0"]
[Fri Apr 17 22:21:54.834783 2026] [:error] [pid 25010:tid 25018] [client 20.19.188.213:64299] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeJCAo-7kkf42RarqQ2HNwAAAUU"]
[Fri Apr 17 22:21:56.012207 2026] [:error] [pid 9263:tid 9283] [client 20.19.188.213:64988] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeJCBBP68VyHNvj1e55vOQAAANI"]
[Fri Apr 17 22:21:56.909735 2026] [:error] [pid 9152:tid 9202] [client 20.19.188.213:64982] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeJCBJJYca8I3TNCwId47gAAAEw"]
[Fri Apr 17 22:21:57.712620 2026] [:error] [pid 34273:tid 34281] [client 20.19.188.213:64919] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeJCBWuQDW686mK3dgEcSQAAAYY"]
[Fri Apr 17 22:21:58.554411 2026] [:error] [pid 25010:tid 25013] [client 20.19.188.213:64897] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeJCBo-7kkf42RarqQ2HOwAAAUA"]
[Fri Apr 17 22:21:59.639486 2026] [:error] [pid 51878:tid 51886] [client 20.19.188.213:65427] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeJCB0nQhUtMbw9Esga_7AAAAQY"]
[Fri Apr 17 22:22:00.702642 2026] [:error] [pid 34273:tid 34297] [client 20.19.188.213:64920] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeJCCGuQDW686mK3dgEcSgAAAZY"]
[Fri Apr 17 22:22:01.486303 2026] [:error] [pid 25010:tid 25018] [client 20.19.188.213:63694] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcvejtpr.php"] [unique_id "aeJCCY-7kkf42RarqQ2HRQAAAUU"]
[Fri Apr 17 22:22:02.309375 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:64957] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeJCChP68VyHNvj1e55vXQAAAMQ"]
[Fri Apr 17 22:22:02.826086 2026] [:error] [pid 9152:tid 9207] [client 20.19.188.213:65011] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeJCCpJYca8I3TNCwId5BQAAAFE"]
[Fri Apr 17 22:22:03.396376 2026] [:error] [pid 9151:tid 9184] [client 20.19.188.213:65481] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeJCC8hTVuRPkua22vRMPwAAABc"]
[Fri Apr 17 22:22:04.369396 2026] [:error] [pid 9263:tid 9269] [client 20.19.188.213:63669] [client 20.19.188.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeJCDBP68VyHNvj1e55vZgAAAMQ"]
[Sat Apr 18 01:54:32.094054 2026] [:error] [pid 59042:tid 59068] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 01:54:32.330734 2026] [:error] [pid 59042:tid 59055] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 01:54:32.587481 2026] [:error] [pid 59042:tid 59067] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 01:54:32.921644 2026] [:error] [pid 59042:tid 59051] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sat Apr 18 01:54:33.174658 2026] [:error] [pid 59042:tid 59048] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 18 01:54:33.411697 2026] [:error] [pid 59042:tid 59053] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sat Apr 18 01:54:33.662889 2026] [:error] [pid 59042:tid 59065] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Apr 18 01:54:33.911990 2026] [:error] [pid 59042:tid 59068] [client 20.203.143.130:65285] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat Apr 18 01:54:34.168013 2026] [:error] [pid 59042:tid 59050] [client 20.203.143.130:65285] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeJz2p6p5oql0UklEBJZ0gAAAAM"]
[Sat Apr 18 01:54:34.699110 2026] [:error] [pid 59044:tid 59124] [client 20.203.143.130:65399] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sat Apr 18 01:54:34.941879 2026] [:error] [pid 59044:tid 59112] [client 20.203.143.130:65399] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Apr 18 01:54:35.235887 2026] [:error] [pid 59044:tid 59106] [client 20.203.143.130:65399] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeJz2wFamkFyEtD_SMHFqgAAAIU"]
[Sat Apr 18 01:54:35.862285 2026] [:error] [pid 59042:tid 59065] [client 20.203.143.130:65292] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeJz256p5oql0UklEBJZ2QAAABI"]
[Sat Apr 18 01:54:36.433964 2026] [:error] [pid 42442:tid 42461] [client 20.203.143.130:65325] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeJz3D4PBGqL_yqPJ8k7OAAAARE"]
[Sat Apr 18 01:54:37.081983 2026] [:error] [pid 42442:tid 42467] [client 20.203.143.130:65329] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeJz3T4PBGqL_yqPJ8k7OQAAARc"]
[Sat Apr 18 01:54:37.693808 2026] [:error] [pid 59136:tid 59139] [client 20.203.143.130:65390] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeJz3SaoiUyiIR3EhLXCHQAAAMA"]
[Sat Apr 18 01:54:38.385803 2026] [:error] [pid 63702:tid 63737] [client 20.203.143.130:64868] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeJz3sTL05PWYsKqTEYcTgAAAUA"]
[Sat Apr 18 01:54:38.992230 2026] [:error] [pid 59136:tid 59156] [client 20.203.143.130:65295] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeJz3iaoiUyiIR3EhLXCIAAAANE"]
[Sat Apr 18 01:54:39.473400 2026] [:error] [pid 42442:tid 42456] [client 20.203.143.130:36996] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeJz3z4PBGqL_yqPJ8k7QAAAAQw"]
[Sat Apr 18 01:54:40.028049 2026] [:error] [pid 59042:tid 59055] [client 20.203.143.130:4358] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeJz4J6p5oql0UklEBJZ7QAAAAg"]
[Sat Apr 18 01:54:40.677448 2026] [:error] [pid 59043:tid 59077] [client 20.203.143.130:4387] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeJz4IRtUGE9SfUh2wwYnwAAAEM"]
[Sat Apr 18 01:54:41.197803 2026] [:error] [pid 42442:tid 42454] [client 20.203.143.130:64852] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeJz4T4PBGqL_yqPJ8k7QwAAAQo"]
[Sat Apr 18 01:54:41.919323 2026] [:error] [pid 63702:tid 63747] [client 20.203.143.130:64839] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeJz4cTL05PWYsKqTEYcVwAAAUg"]
[Sat Apr 18 01:54:42.655625 2026] [:error] [pid 59044:tid 59109] [client 20.203.143.130:4399] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeJz4gFamkFyEtD_SMHFqwAAAIg"]
[Sat Apr 18 01:54:43.421784 2026] [:error] [pid 59043:tid 59075] [client 20.203.143.130:65317] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeJz44RtUGE9SfUh2wwYoQAAAEE"]
[Sat Apr 18 01:54:44.010824 2026] [:error] [pid 63702:tid 63755] [client 20.203.143.130:37006] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeJz5MTL05PWYsKqTEYcWwAAAU4"]
[Sat Apr 18 01:54:44.609510 2026] [:error] [pid 59136:tid 59161] [client 20.203.143.130:65400] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeJz5CaoiUyiIR3EhLXCIQAAANY"]
[Sat Apr 18 01:54:45.227584 2026] [:error] [pid 63702:tid 63764] [client 20.203.143.130:65332] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeJz5cTL05PWYsKqTEYcXwAAAVc"]
[Sat Apr 18 01:54:45.824433 2026] [:error] [pid 63702:tid 63747] [client 20.203.143.130:4359] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeJz5cTL05PWYsKqTEYcYgAAAUg"]
[Sat Apr 18 01:54:46.800342 2026] [:error] [pid 59042:tid 59069] [client 20.203.143.130:65406] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeJz5p6p5oql0UklEBJaAgAAABY"]
[Sat Apr 18 01:54:47.605369 2026] [:error] [pid 59043:tid 59086] [client 20.203.143.130:4368] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeJz54RtUGE9SfUh2wwYpwAAAEw"]
[Sat Apr 18 01:54:48.524686 2026] [:error] [pid 42442:tid 42467] [client 20.203.143.130:65383] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeJz6D4PBGqL_yqPJ8k7VQAAARc"]
[Sat Apr 18 01:54:49.142913 2026] [:error] [pid 59042:tid 59067] [client 20.203.143.130:65314] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeJz6Z6p5oql0UklEBJaBQAAABQ"]
[Sat Apr 18 01:54:49.876383 2026] [:error] [pid 59042:tid 59047] [client 20.203.143.130:64835] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeJz6Z6p5oql0UklEBJaBwAAAAA"]
[Sat Apr 18 01:54:50.505187 2026] [:error] [pid 42442:tid 42445] [client 20.203.143.130:65283] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeJz6j4PBGqL_yqPJ8k7WgAAAQE"]
[Sat Apr 18 01:54:51.243194 2026] [:error] [pid 63702:tid 63755] [client 20.203.143.130:64836] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeJz68TL05PWYsKqTEYcZwAAAU4"]
[Sat Apr 18 01:54:52.003599 2026] [:error] [pid 59044:tid 59101] [client 20.203.143.130:65379] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeJz7AFamkFyEtD_SMHFrQAAAIA"]
[Sat Apr 18 01:54:52.666997 2026] [:error] [pid 42442:tid 42444] [client 20.203.143.130:64860] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeJz7D4PBGqL_yqPJ8k7XwAAAQA"]
[Sat Apr 18 01:54:53.735521 2026] [:error] [pid 42442:tid 42459] [client 20.203.143.130:37045] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeJz7T4PBGqL_yqPJ8k7YwAAAQ8"]
[Sat Apr 18 01:54:54.658157 2026] [:error] [pid 59043:tid 59094] [client 20.203.143.130:65293] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeJz7oRtUGE9SfUh2wwYqAAAAFQ"]
[Sat Apr 18 01:54:55.304225 2026] [:error] [pid 59043:tid 59082] [client 20.203.143.130:4371] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeJz74RtUGE9SfUh2wwYqQAAAEg"]
[Sat Apr 18 01:54:55.873318 2026] [:error] [pid 59044:tid 59123] [client 20.203.143.130:65290] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeJz7wFamkFyEtD_SMHFrwAAAJY"]
[Sat Apr 18 01:54:56.536454 2026] [:error] [pid 59043:tid 59093] [client 20.203.143.130:64826] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeJz8IRtUGE9SfUh2wwYqwAAAFM"]
[Sat Apr 18 01:54:57.142996 2026] [:error] [pid 42442:tid 42458] [client 20.203.143.130:65280] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeJz8T4PBGqL_yqPJ8k7agAAAQ4"]
[Sat Apr 18 01:54:57.710625 2026] [:error] [pid 42442:tid 42461] [client 20.203.143.130:37028] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeJz8T4PBGqL_yqPJ8k7bQAAARE"]
[Sat Apr 18 01:54:58.402331 2026] [:error] [pid 42442:tid 42462] [client 20.203.143.130:37000] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeJz8j4PBGqL_yqPJ8k7bwAAARI"]
[Sat Apr 18 01:54:58.936155 2026] [:error] [pid 42442:tid 42459] [client 20.203.143.130:37030] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeJz8j4PBGqL_yqPJ8k7cAAAAQ8"]
[Sat Apr 18 01:54:59.933201 2026] [:error] [pid 42442:tid 42445] [client 20.203.143.130:64849] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeJz8z4PBGqL_yqPJ8k7cgAAAQE"]
[Sat Apr 18 01:55:01.548515 2026] [:error] [pid 42442:tid 42463] [client 20.203.143.130:37012] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeJz9T4PBGqL_yqPJ8k7dwAAARM"]
[Sat Apr 18 01:55:04.225346 2026] [:error] [pid 42442:tid 42459] [client 20.203.143.130:37052] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeJz-D4PBGqL_yqPJ8k7fgAAAQ8"]
[Sat Apr 18 01:55:05.559484 2026] [:error] [pid 59043:tid 59096] [client 20.203.143.130:64859] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeJz-YRtUGE9SfUh2wwYrQAAAFY"]
[Sat Apr 18 01:55:07.161874 2026] [:error] [pid 59042:tid 59070] [client 20.203.143.130:65373] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJz-56p5oql0UklEBJaEgAAABc"]
[Sat Apr 18 01:55:09.693984 2026] [:error] [pid 59042:tid 59052] [client 20.203.143.130:65334] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJz_Z6p5oql0UklEBJaGAAAAAU"]
[Sat Apr 18 01:55:11.713886 2026] [:error] [pid 59043:tid 59089] [client 20.203.143.130:65364] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJz_4RtUGE9SfUh2wwYsgAAAE8"]
[Sat Apr 18 01:55:13.529091 2026] [:error] [pid 59044:tid 59113] [client 20.203.143.130:4370] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeJ0AQFamkFyEtD_SMHFtgAAAIw"]
[Sat Apr 18 01:55:14.738745 2026] [:error] [pid 59044:tid 59109] [client 20.203.143.130:65302] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeJ0AgFamkFyEtD_SMHFuAAAAIg"]
[Sat Apr 18 01:55:15.884428 2026] [:error] [pid 59042:tid 59064] [client 20.203.143.130:65391] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeJ0A56p5oql0UklEBJaIgAAABE"]
[Sat Apr 18 01:55:16.985424 2026] [:error] [pid 59044:tid 59120] [client 20.203.143.130:65356] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeJ0BAFamkFyEtD_SMHFvAAAAJM"]
[Sat Apr 18 01:55:18.198068 2026] [:error] [pid 42442:tid 42450] [client 20.203.143.130:65391] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeJ0Bj4PBGqL_yqPJ8k7nQAAAQY"]
[Sat Apr 18 01:55:19.359278 2026] [:error] [pid 42442:tid 42449] [client 20.203.143.130:65289] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeJ0Bz4PBGqL_yqPJ8k7oAAAAQU"]
[Sat Apr 18 01:55:20.457962 2026] [:error] [pid 59042:tid 59051] [client 20.203.143.130:65287] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeJ0CJ6p5oql0UklEBJaJgAAAAQ"]
[Sat Apr 18 01:55:21.835984 2026] [:error] [pid 59136:tid 59152] [client 20.203.143.130:65352] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeJ0CSaoiUyiIR3EhLXCIwAAAM0"]
[Sat Apr 18 01:55:22.668890 2026] [:error] [pid 59044:tid 59110] [client 20.203.143.130:4398] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeJ0CgFamkFyEtD_SMHFwQAAAIk"]
[Sat Apr 18 01:55:23.713643 2026] [:error] [pid 59136:tid 59160] [client 20.203.143.130:64335] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny"] [unique_id "aeJ0CyaoiUyiIR3EhLXCJQAAANU"]
[Sat Apr 18 01:55:24.475439 2026] [:error] [pid 42442:tid 42453] [client 20.203.143.130:65291] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny"] [unique_id "aeJ0DD4PBGqL_yqPJ8k7pgAAAQk"]
[Sat Apr 18 01:55:25.333172 2026] [:error] [pid 59136:tid 59147] [client 20.203.143.130:65321] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny"] [unique_id "aeJ0DSaoiUyiIR3EhLXCJwAAAMg"]
[Sat Apr 18 01:55:25.898440 2026] [:error] [pid 59042:tid 59047] [client 20.203.143.130:37005] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny"] [unique_id "aeJ0DZ6p5oql0UklEBJaKQAAAAA"]
[Sat Apr 18 01:55:27.068386 2026] [:error] [pid 59136:tid 59141] [client 20.203.143.130:65378] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aeJ0DyaoiUyiIR3EhLXCKAAAAMI"]
[Sat Apr 18 01:55:28.084053 2026] [:error] [pid 59043:tid 59081] [client 20.203.143.130:64817] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJ0EIRtUGE9SfUh2wwYxAAAAEc"]
[Sat Apr 18 01:55:29.302658 2026] [:error] [pid 59042:tid 59065] [client 20.203.143.130:65374] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJ0EZ6p5oql0UklEBJaLAAAABI"]
[Sat Apr 18 01:55:30.588597 2026] [:error] [pid 63702:tid 63750] [client 20.203.143.130:65332] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeJ0EsTL05PWYsKqTEYcbQAAAUo"]
[Sat Apr 18 01:55:31.436309 2026] [:error] [pid 63702:tid 63760] [client 20.203.143.130:65308] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJ0E8TL05PWYsKqTEYcbgAAAVM"]
[Sat Apr 18 01:55:32.052115 2026] [:error] [pid 63702:tid 63744] [client 20.203.143.130:65346] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJ0FMTL05PWYsKqTEYccgAAAUU"]
[Sat Apr 18 01:55:32.879510 2026] [:error] [pid 59043:tid 59075] [client 20.203.143.130:64854] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeJ0FIRtUGE9SfUh2wwYyQAAAEE"]
[Sat Apr 18 01:55:34.524812 2026] [:error] [pid 63702:tid 63741] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Sat Apr 18 01:55:34.803387 2026] [:error] [pid 63702:tid 63763] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 18 01:55:35.073655 2026] [:error] [pid 63702:tid 63753] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 18 01:55:35.356382 2026] [:error] [pid 63702:tid 63755] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Sat Apr 18 01:55:35.640414 2026] [:error] [pid 63702:tid 63765] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat Apr 18 01:55:35.910544 2026] [:error] [pid 63702:tid 63757] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Sat Apr 18 01:55:36.386069 2026] [:error] [pid 63702:tid 63764] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat Apr 18 01:55:36.669103 2026] [:error] [pid 63702:tid 63754] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sat Apr 18 01:55:36.942194 2026] [:error] [pid 63702:tid 63758] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 18 01:55:37.212726 2026] [:error] [pid 63702:tid 63749] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sat Apr 18 01:55:37.482720 2026] [:error] [pid 63702:tid 63743] [client 20.203.143.130:65305] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat Apr 18 01:55:37.770355 2026] [:error] [pid 63702:tid 63750] [client 20.203.143.130:65305] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ0GcTL05PWYsKqTEYcggAAAUo"]
[Sat Apr 18 01:55:38.793043 2026] [:error] [pid 42442:tid 42458] [client 20.203.143.130:64806] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ0Gj4PBGqL_yqPJ8k7rwAAAQ4"]
[Sat Apr 18 01:55:39.830661 2026] [:error] [pid 59044:tid 59122] [client 20.203.143.130:64784] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ0GwFamkFyEtD_SMHFyAAAAJU"]
[Sat Apr 18 01:55:41.542472 2026] [:error] [pid 59044:tid 59102] [client 20.203.143.130:36995] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeJ0HQFamkFyEtD_SMHFyQAAAIE"]
[Sat Apr 18 01:55:42.409408 2026] [:error] [pid 59044:tid 59104] [client 20.203.143.130:64844] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeJ0HgFamkFyEtD_SMHFygAAAIM"]
[Sat Apr 18 01:55:43.360390 2026] [:error] [pid 59044:tid 59115] [client 20.203.143.130:37043] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeJ0HwFamkFyEtD_SMHFywAAAI4"]
[Sat Apr 18 01:55:44.126015 2026] [:error] [pid 59044:tid 59125] [client 20.203.143.130:65403] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeJ0IAFamkFyEtD_SMHFzAAAAJg"]
[Sat Apr 18 01:55:44.878709 2026] [:error] [pid 59044:tid 59101] [client 20.203.143.130:64862] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeJ0IAFamkFyEtD_SMHFzwAAAIA"]
[Sat Apr 18 01:55:45.903854 2026] [:error] [pid 63702:tid 63755] [client 20.203.143.130:64825] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJ0IcTL05PWYsKqTEYciAAAAU4"]
[Sat Apr 18 01:55:46.451814 2026] [:error] [pid 59136:tid 59156] [client 20.203.143.130:64793] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJ0IiaoiUyiIR3EhLXCNwAAANE"]
[Sat Apr 18 01:55:47.211984 2026] [:error] [pid 42442:tid 42455] [client 20.203.143.130:65322] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJ0Iz4PBGqL_yqPJ8k7twAAAQs"]
[Sat Apr 18 01:55:47.990674 2026] [:error] [pid 42442:tid 42454] [client 20.203.143.130:4413] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeJ0Iz4PBGqL_yqPJ8k7ugAAAQo"]
[Sat Apr 18 01:55:48.856143 2026] [:error] [pid 42442:tid 42449] [client 20.203.143.130:65366] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeJ0JD4PBGqL_yqPJ8k7vgAAAQU"]
[Sat Apr 18 01:55:49.541172 2026] [:error] [pid 42442:tid 42446] [client 20.203.143.130:64259] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeJ0JT4PBGqL_yqPJ8k7wAAAAQI"]
[Sat Apr 18 01:55:50.133914 2026] [:error] [pid 42442:tid 42444] [client 20.203.143.130:37021] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeJ0Jj4PBGqL_yqPJ8k7wwAAAQA"]
[Sat Apr 18 01:55:50.726154 2026] [:error] [pid 42442:tid 42461] [client 20.203.143.130:65351] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeJ0Jj4PBGqL_yqPJ8k7xAAAARE"]
[Sat Apr 18 01:55:51.510439 2026] [:error] [pid 42442:tid 42462] [client 20.203.143.130:4372] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "aeJ0Jz4PBGqL_yqPJ8k7xwAAARI"]
[Sat Apr 18 01:55:52.466997 2026] [:error] [pid 59042:tid 59053] [client 20.203.143.130:65316] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "aeJ0KJ6p5oql0UklEBJaQQAAAAY"]
[Sat Apr 18 01:55:53.235150 2026] [:error] [pid 59136:tid 59155] [client 20.203.143.130:4409] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "aeJ0KSaoiUyiIR3EhLXCOQAAANA"]
[Sat Apr 18 01:55:53.944735 2026] [:error] [pid 59042:tid 59067] [client 20.203.143.130:65335] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "aeJ0KZ6p5oql0UklEBJaQwAAABQ"]
[Sat Apr 18 01:55:54.476519 2026] [:error] [pid 42442:tid 42447] [client 20.203.143.130:64887] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJ0Kj4PBGqL_yqPJ8k7ygAAAQM"]
[Sat Apr 18 01:55:55.193037 2026] [:error] [pid 63702:tid 63751] [client 20.203.143.130:64847] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJ0K8TL05PWYsKqTEYcjwAAAUs"]
[Sat Apr 18 01:55:55.894111 2026] [:error] [pid 59136:tid 59152] [client 20.203.143.130:64863] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJ0KyaoiUyiIR3EhLXCPQAAAM0"]
[Sat Apr 18 01:55:56.487192 2026] [:error] [pid 42442:tid 42458] [client 20.203.143.130:4403] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeJ0LD4PBGqL_yqPJ8k7zQAAAQ4"]
[Sat Apr 18 01:55:57.216728 2026] [:error] [pid 42442:tid 42464] [client 20.203.143.130:37017] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeJ0LT4PBGqL_yqPJ8k7zwAAARQ"]
[Sat Apr 18 01:55:58.028885 2026] [:error] [pid 59042:tid 59071] [client 20.203.143.130:64370] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeJ0Lp6p5oql0UklEBJaRgAAABg"]
[Sat Apr 18 01:55:58.630943 2026] [:error] [pid 63702:tid 63740] [client 20.203.143.130:65370] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeJ0LsTL05PWYsKqTEYckgAAAUI"]
[Sat Apr 18 01:55:59.473716 2026] [:error] [pid 63702:tid 63761] [client 20.203.143.130:4412] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeJ0L8TL05PWYsKqTEYclwAAAVQ"]
[Sat Apr 18 01:56:00.154247 2026] [:error] [pid 42442:tid 42456] [client 20.203.143.130:65298] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ0MD4PBGqL_yqPJ8k70QAAAQw"]
[Sat Apr 18 01:56:00.893482 2026] [:error] [pid 42442:tid 42466] [client 20.203.143.130:64783] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ0MD4PBGqL_yqPJ8k70wAAARY"]
[Sat Apr 18 01:56:01.815322 2026] [:error] [pid 63702:tid 63743] [client 20.203.143.130:65404] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ0McTL05PWYsKqTEYcnQAAAUQ"]
[Sat Apr 18 01:56:02.559959 2026] [:error] [pid 63702:tid 63741] [client 20.203.143.130:37051] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeJ0MsTL05PWYsKqTEYcoQAAAUM"]
[Sat Apr 18 01:56:03.348367 2026] [:error] [pid 63702:tid 63745] [client 20.203.143.130:65392] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJ0M8TL05PWYsKqTEYcpQAAAUY"]
[Sat Apr 18 01:56:04.294111 2026] [:error] [pid 63702:tid 63760] [client 20.203.143.130:64874] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJ0NMTL05PWYsKqTEYcqQAAAVM"]
[Sat Apr 18 01:56:05.311228 2026] [:error] [pid 63702:tid 63761] [client 20.203.143.130:65384] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJ0NcTL05PWYsKqTEYcrQAAAVQ"]
[Sat Apr 18 01:56:07.168768 2026] [:error] [pid 59136:tid 59155] [client 20.203.143.130:4352] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeJ0NyaoiUyiIR3EhLXCRQAAANA"]
[Sat Apr 18 01:56:07.942045 2026] [:error] [pid 42442:tid 42454] [client 20.203.143.130:37042] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aeJ0Nz4PBGqL_yqPJ8k71gAAAQo"]
[Sat Apr 18 01:56:08.881780 2026] [:error] [pid 42442:tid 42447] [client 20.203.143.130:64874] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aeJ0OD4PBGqL_yqPJ8k72gAAAQM"]
[Sat Apr 18 01:56:09.867561 2026] [:error] [pid 59042:tid 59069] [client 20.203.143.130:4354] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aeJ0OZ6p5oql0UklEBJaTQAAABY"]
[Sat Apr 18 01:56:10.923971 2026] [:error] [pid 59044:tid 59107] [client 20.203.143.130:37026] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdktk.php"] [unique_id "aeJ0OgFamkFyEtD_SMHF2wAAAIY"]
[Sat Apr 18 01:56:12.450840 2026] [:error] [pid 59136:tid 59142] [client 20.203.143.130:64277] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v5.php"] [unique_id "aeJ0PCaoiUyiIR3EhLXCSAAAAMM"]
[Sat Apr 18 01:56:13.969660 2026] [:error] [pid 42442:tid 42445] [client 20.203.143.130:4388] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v5.php"] [unique_id "aeJ0PT4PBGqL_yqPJ8k78AAAAQE"]
[Sat Apr 18 01:56:15.612382 2026] [:error] [pid 59044:tid 59103] [client 20.203.143.130:64332] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v5.php"] [unique_id "aeJ0PwFamkFyEtD_SMHF3QAAAII"]
[Sat Apr 18 01:56:17.255321 2026] [:error] [pid 59042:tid 59054] [client 20.203.143.130:36994] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v5.php"] [unique_id "aeJ0QZ6p5oql0UklEBJaVgAAAAc"]
[Sat Apr 18 01:56:18.718020 2026] [:error] [pid 59042:tid 59069] [client 20.203.143.130:64796] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJ0Qp6p5oql0UklEBJaWwAAABY"]
[Sat Apr 18 01:56:20.626106 2026] [:error] [pid 59042:tid 59049] [client 20.203.143.130:65382] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJ0RJ6p5oql0UklEBJaXwAAAAI"]
[Sat Apr 18 01:56:21.552575 2026] [:error] [pid 63702:tid 63758] [client 20.203.143.130:64827] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJ0RcTL05PWYsKqTEYcvAAAAVE"]
[Sat Apr 18 01:56:22.893331 2026] [:error] [pid 59042:tid 59062] [client 20.203.143.130:65387] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeJ0Rp6p5oql0UklEBJaYgAAAA8"]
[Sat Apr 18 01:56:23.656375 2026] [:error] [pid 59043:tid 59074] [client 20.203.143.130:37002] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJ0R4RtUGE9SfUh2wwY2AAAAEA"]
[Sat Apr 18 01:56:24.542939 2026] [:error] [pid 63702:tid 63762] [client 20.203.143.130:65397] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJ0SMTL05PWYsKqTEYcxQAAAVU"]
[Sat Apr 18 01:56:25.705586 2026] [:error] [pid 42442:tid 42445] [client 20.203.143.130:64871] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJ0ST4PBGqL_yqPJ8k8AAAAAQE"]
[Sat Apr 18 01:56:27.047651 2026] [:error] [pid 63702:tid 63737] [client 20.203.143.130:65349] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeJ0S8TL05PWYsKqTEYcyQAAAUA"]
[Sat Apr 18 01:56:28.449415 2026] [:error] [pid 63702:tid 63750] [client 20.203.143.130:4364] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeJ0TMTL05PWYsKqTEYcywAAAUo"]
[Sat Apr 18 01:56:29.621142 2026] [:error] [pid 42442:tid 42448] [client 20.203.143.130:65327] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeJ0TT4PBGqL_yqPJ8k8AwAAAQQ"]
[Sat Apr 18 01:56:30.438635 2026] [:error] [pid 42442:tid 42451] [client 20.203.143.130:4393] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeJ0Tj4PBGqL_yqPJ8k8BQAAAQc"]
[Sat Apr 18 01:56:31.369444 2026] [:error] [pid 42442:tid 42463] [client 20.203.143.130:64353] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeJ0Tz4PBGqL_yqPJ8k8BwAAARM"]
[Sat Apr 18 01:56:32.219809 2026] [:error] [pid 42442:tid 42454] [client 20.203.143.130:65328] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeJ0UD4PBGqL_yqPJ8k8CwAAAQo"]
[Sat Apr 18 01:56:33.023103 2026] [:error] [pid 59043:tid 59077] [client 20.203.143.130:37041] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeJ0UYRtUGE9SfUh2wwY4AAAAEM"]
[Sat Apr 18 01:56:34.171208 2026] [:error] [pid 59136:tid 59153] [client 20.203.143.130:64857] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeJ0UiaoiUyiIR3EhLXCVQAAAM4"]
[Sat Apr 18 01:56:35.446954 2026] [:error] [pid 59042:tid 59050] [client 20.203.143.130:65389] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeJ0U56p5oql0UklEBJadQAAAAM"]
[Sat Apr 18 01:56:36.411197 2026] [:error] [pid 42442:tid 42464] [client 20.203.143.130:36992] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "aeJ0VD4PBGqL_yqPJ8k8FAAAARQ"]
[Sat Apr 18 01:56:37.219646 2026] [:error] [pid 59043:tid 59079] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat Apr 18 01:56:37.458031 2026] [:error] [pid 59043:tid 59090] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Sat Apr 18 01:56:37.697024 2026] [:error] [pid 59043:tid 59089] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat Apr 18 01:56:37.945537 2026] [:error] [pid 59043:tid 59078] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Sat Apr 18 01:56:38.307294 2026] [:error] [pid 59043:tid 59088] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Sat Apr 18 01:56:38.546228 2026] [:error] [pid 59043:tid 59086] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat Apr 18 01:56:38.785708 2026] [:error] [pid 59043:tid 59076] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Sat Apr 18 01:56:39.025335 2026] [:error] [pid 59043:tid 59081] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Apr 18 01:56:39.266471 2026] [:error] [pid 59043:tid 59080] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Sat Apr 18 01:56:39.506728 2026] [:error] [pid 59043:tid 59096] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/qqa.php
[Sat Apr 18 01:56:39.898232 2026] [:error] [pid 59043:tid 59082] [client 20.203.143.130:37040] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 18 01:56:40.143854 2026] [:error] [pid 59043:tid 59093] [client 20.203.143.130:37040] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aeJ0WIRtUGE9SfUh2wwY9AAAAFM"]
[Sat Apr 18 01:56:41.217936 2026] [:error] [pid 59043:tid 59077] [client 20.203.143.130:63982] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aeJ0WYRtUGE9SfUh2wwY-AAAAEM"]
[Sat Apr 18 01:56:42.941630 2026] [:error] [pid 59043:tid 59089] [client 20.203.143.130:37017] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aeJ0WoRtUGE9SfUh2wwY-gAAAE8"]
[Sat Apr 18 01:56:44.184845 2026] [:error] [pid 59136:tid 59152] [client 20.203.143.130:36999] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ga.php"] [unique_id "aeJ0XCaoiUyiIR3EhLXCZAAAAM0"]
[Sat Apr 18 01:56:45.190538 2026] [:error] [pid 59043:tid 59093] [client 20.203.143.130:4365] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aeJ0XYRtUGE9SfUh2wwZAgAAAFM"]
[Sat Apr 18 01:56:46.597604 2026] [:error] [pid 63702:tid 63754] [client 20.203.143.130:64850] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aeJ0XsTL05PWYsKqTEYc5wAAAU0"]
[Sat Apr 18 01:56:47.997360 2026] [:error] [pid 59044:tid 59122] [client 20.203.143.130:4388] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aeJ0XwFamkFyEtD_SMHF8gAAAJU"]
[Sat Apr 18 01:56:49.163779 2026] [:error] [pid 59043:tid 59098] [client 20.203.143.130:65282] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xozx.php"] [unique_id "aeJ0YYRtUGE9SfUh2wwZBQAAAFg"]
[Sat Apr 18 01:56:50.500226 2026] [:error] [pid 59043:tid 59074] [client 20.203.143.130:37011] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeJ0YoRtUGE9SfUh2wwZCAAAAEA"]
[Sat Apr 18 01:56:51.575741 2026] [:error] [pid 59043:tid 59093] [client 20.203.143.130:36997] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeJ0Y4RtUGE9SfUh2wwZDAAAAFM"]
[Sat Apr 18 01:56:52.730799 2026] [:error] [pid 63702:tid 63756] [client 20.203.143.130:65344] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeJ0ZMTL05PWYsKqTEYc_AAAAU8"]
[Sat Apr 18 01:56:54.215177 2026] [:error] [pid 63702:tid 63737] [client 20.203.143.130:65386] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeJ0ZsTL05PWYsKqTEYdAQAAAUA"]
[Sat Apr 18 01:56:54.783756 2026] [:error] [pid 42442:tid 42468] [client 20.203.143.130:37034] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeJ0Zj4PBGqL_yqPJ8k8HQAAARg"]
[Sat Apr 18 01:56:56.567554 2026] [:error] [pid 59136:tid 59152] [client 20.203.143.130:65367] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeJ0aCaoiUyiIR3EhLXCdQAAAM0"]
[Sat Apr 18 01:56:57.624109 2026] [:error] [pid 59044:tid 59103] [client 20.203.143.130:4360] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeJ0aQFamkFyEtD_SMHF9QAAAII"]
[Sat Apr 18 01:56:58.411382 2026] [:error] [pid 59044:tid 59105] [client 20.203.143.130:65297] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeJ0agFamkFyEtD_SMHF-AAAAIQ"]
[Sat Apr 18 01:56:59.331424 2026] [:error] [pid 42442:tid 42468] [client 20.203.143.130:37024] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeJ0az4PBGqL_yqPJ8k8JgAAARg"]
[Sat Apr 18 01:57:00.899292 2026] [:error] [pid 42442:tid 42447] [client 20.203.143.130:65330] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeJ0bD4PBGqL_yqPJ8k8LQAAAQM"]
[Sat Apr 18 01:57:01.640746 2026] [:error] [pid 42442:tid 42458] [client 20.203.143.130:64840] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeJ0bT4PBGqL_yqPJ8k8LwAAAQ4"]
[Sat Apr 18 01:57:02.611209 2026] [:error] [pid 59044:tid 59111] [client 20.203.143.130:64809] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeJ0bgFamkFyEtD_SMHF_gAAAIo"]
[Sat Apr 18 01:57:03.330407 2026] [:error] [pid 42442:tid 42451] [client 20.203.143.130:37044] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeJ0bz4PBGqL_yqPJ8k8OAAAAQc"]
[Sat Apr 18 01:57:04.324137 2026] [:error] [pid 59044:tid 59125] [client 20.203.143.130:4377] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeJ0cAFamkFyEtD_SMHF_wAAAJg"]
[Sat Apr 18 01:57:05.111507 2026] [:error] [pid 42442:tid 42465] [client 20.203.143.130:64886] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeJ0cT4PBGqL_yqPJ8k8PwAAARU"]
[Sat Apr 18 01:57:06.042961 2026] [:error] [pid 59044:tid 59108] [client 20.203.143.130:37033] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeJ0cgFamkFyEtD_SMHGAgAAAIc"]
[Sat Apr 18 01:57:07.324888 2026] [:error] [pid 42442:tid 42448] [client 20.203.143.130:65368] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lo.php"] [unique_id "aeJ0cz4PBGqL_yqPJ8k8RQAAAQQ"]
[Sat Apr 18 01:57:08.435748 2026] [:error] [pid 63702:tid 63755] [client 20.203.143.130:65300] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lo.php"] [unique_id "aeJ0dMTL05PWYsKqTEYdGAAAAU4"]
[Sat Apr 18 01:57:09.306511 2026] [:error] [pid 63702:tid 63750] [client 20.203.143.130:65393] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lo.php"] [unique_id "aeJ0dcTL05PWYsKqTEYdGwAAAUo"]
[Sat Apr 18 01:57:10.391127 2026] [:error] [pid 59042:tid 59059] [client 20.203.143.130:64382] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-lo.php"] [unique_id "aeJ0dp6p5oql0UklEBJaiwAAAAw"]
[Sat Apr 18 01:57:11.031615 2026] [:error] [pid 42442:tid 42456] [client 20.203.143.130:65396] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeJ0dz4PBGqL_yqPJ8k8SgAAAQw"]
[Sat Apr 18 01:57:11.851297 2026] [:error] [pid 42442:tid 42450] [client 20.203.143.130:37013] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeJ0dz4PBGqL_yqPJ8k8TAAAAQY"]
[Sat Apr 18 01:57:13.080362 2026] [:error] [pid 42442:tid 42462] [client 20.203.143.130:64833] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeJ0eT4PBGqL_yqPJ8k8TgAAARI"]
[Sat Apr 18 01:57:14.092791 2026] [:error] [pid 63702:tid 63755] [client 20.203.143.130:64832] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeJ0esTL05PWYsKqTEYdJwAAAU4"]
[Sat Apr 18 01:57:15.608033 2026] [:error] [pid 59136:tid 59160] [client 20.203.143.130:4356] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ipv6.php"] [unique_id "aeJ0eyaoiUyiIR3EhLXCewAAANU"]
[Sat Apr 18 01:57:16.942537 2026] [:error] [pid 59042:tid 59050] [client 20.203.143.130:64849] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ipv6.php"] [unique_id "aeJ0fJ6p5oql0UklEBJakgAAAAM"]
[Sat Apr 18 01:57:18.605897 2026] [:error] [pid 59044:tid 59111] [client 20.203.143.130:64848] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ipv6.php"] [unique_id "aeJ0fgFamkFyEtD_SMHGDgAAAIo"]
[Sat Apr 18 01:57:19.892025 2026] [:error] [pid 63702:tid 63744] [client 20.203.143.130:65388] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ipv6.php"] [unique_id "aeJ0f8TL05PWYsKqTEYdKwAAAUU"]
[Sat Apr 18 01:57:21.206885 2026] [:error] [pid 59042:tid 59062] [client 20.203.143.130:65315] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJ0gZ6p5oql0UklEBJalwAAAA8"]
[Sat Apr 18 01:57:22.848225 2026] [:error] [pid 59044:tid 59122] [client 20.203.143.130:37014] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJ0ggFamkFyEtD_SMHGFAAAAJU"]
[Sat Apr 18 01:57:23.935228 2026] [:error] [pid 59042:tid 59065] [client 20.203.143.130:64876] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJ0g56p5oql0UklEBJamwAAABI"]
[Sat Apr 18 01:57:24.599848 2026] [:error] [pid 42442:tid 42466] [client 20.203.143.130:65365] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeJ0hD4PBGqL_yqPJ8k8WgAAARY"]
[Sat Apr 18 01:57:25.369058 2026] [:error] [pid 63702:tid 63762] [client 20.203.143.130:64363] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJ0hcTL05PWYsKqTEYdLQAAAVU"]
[Sat Apr 18 01:57:26.159415 2026] [:error] [pid 42442:tid 42448] [client 20.203.143.130:64787] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJ0hj4PBGqL_yqPJ8k8ZAAAAQQ"]
[Sat Apr 18 01:57:26.926698 2026] [:error] [pid 42442:tid 42459] [client 20.203.143.130:37046] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJ0hj4PBGqL_yqPJ8k8awAAAQ8"]
[Sat Apr 18 01:57:27.535298 2026] [:error] [pid 59042:tid 59052] [client 20.203.143.130:36993] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeJ0h56p5oql0UklEBJaogAAAAU"]
[Sat Apr 18 01:57:28.156566 2026] [:error] [pid 59042:tid 59051] [client 20.203.143.130:64828] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJ0iJ6p5oql0UklEBJapQAAAAQ"]
[Sat Apr 18 01:57:28.916927 2026] [:error] [pid 59042:tid 59049] [client 20.203.143.130:65362] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJ0iJ6p5oql0UklEBJapwAAAAI"]
[Sat Apr 18 01:57:29.628762 2026] [:error] [pid 59136:tid 59162] [client 20.203.143.130:64867] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJ0iSaoiUyiIR3EhLXCggAAANc"]
[Sat Apr 18 01:57:30.346680 2026] [:error] [pid 59043:tid 59098] [client 20.203.143.130:65306] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeJ0ioRtUGE9SfUh2wwZPQAAAFg"]
[Sat Apr 18 01:57:31.090411 2026] [:error] [pid 59044:tid 59101] [client 20.203.143.130:65340] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJ0iwFamkFyEtD_SMHGHwAAAIA"]
[Sat Apr 18 01:57:32.139316 2026] [:error] [pid 59044:tid 59125] [client 20.203.143.130:65301] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJ0jAFamkFyEtD_SMHGIAAAAJg"]
[Sat Apr 18 01:57:32.927746 2026] [:error] [pid 59043:tid 59076] [client 20.203.143.130:37032] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJ0jIRtUGE9SfUh2wwZRQAAAEI"]
[Sat Apr 18 01:57:34.010523 2026] [:error] [pid 59136:tid 59142] [client 20.203.143.130:37053] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeJ0jiaoiUyiIR3EhLXChwAAAMM"]
[Sat Apr 18 01:57:35.161810 2026] [:error] [pid 59043:tid 59081] [client 20.203.143.130:4379] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJ0j4RtUGE9SfUh2wwZSQAAAEc"]
[Sat Apr 18 01:57:36.093105 2026] [:error] [pid 42442:tid 42468] [client 20.203.143.130:37020] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJ0kD4PBGqL_yqPJ8k8dAAAARg"]
[Sat Apr 18 01:57:36.936820 2026] [:error] [pid 42442:tid 42466] [client 20.203.143.130:65377] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJ0kD4PBGqL_yqPJ8k8dwAAARY"]
[Sat Apr 18 01:57:38.798380 2026] [:error] [pid 63702:tid 63759] [client 20.203.143.130:65371] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeJ0ksTL05PWYsKqTEYdMgAAAVI"]
[Sat Apr 18 01:57:39.730027 2026] [:error] [pid 63702:tid 63753] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Sat Apr 18 01:57:40.023200 2026] [:error] [pid 63702:tid 63751] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Sat Apr 18 01:57:40.261399 2026] [:error] [pid 63702:tid 63755] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Apr 18 01:57:40.499502 2026] [:error] [pid 63702:tid 63761] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 01:57:40.844262 2026] [:error] [pid 63702:tid 63740] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Sat Apr 18 01:57:41.082525 2026] [:error] [pid 63702:tid 63750] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sat Apr 18 01:57:41.451186 2026] [:error] [pid 63702:tid 63763] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Sat Apr 18 01:57:41.689862 2026] [:error] [pid 63702:tid 63754] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 18 01:57:41.955346 2026] [:error] [pid 63702:tid 63758] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sat Apr 18 01:57:42.195819 2026] [:error] [pid 63702:tid 63764] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat Apr 18 01:57:42.539588 2026] [:error] [pid 63702:tid 63756] [client 20.203.143.130:65347] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sat Apr 18 01:57:42.796233 2026] [:error] [pid 63702:tid 63745] [client 20.203.143.130:65347] [client 20.203.143.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeJ0lsTL05PWYsKqTEYdQQAAAUY"]
[Sat Apr 18 01:57:43.564817 2026] [:error] [pid 59042:tid 59065] [client 20.203.143.130:64824] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeJ0l56p5oql0UklEBJatQAAABI"]
[Sat Apr 18 01:57:44.512999 2026] [:error] [pid 59136:tid 59140] [client 20.203.143.130:64295] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeJ0mCaoiUyiIR3EhLXCkgAAAME"]
[Sat Apr 18 01:57:45.484640 2026] [:error] [pid 59042:tid 59054] [client 20.203.143.130:64879] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeJ0mZ6p5oql0UklEBJatwAAAAc"]
[Sat Apr 18 01:57:46.668963 2026] [:error] [pid 59042:tid 59050] [client 20.203.143.130:37049] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeJ0mp6p5oql0UklEBJauQAAAAM"]
[Sat Apr 18 01:57:47.605930 2026] [:error] [pid 63702:tid 63753] [client 20.203.143.130:4355] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeJ0m8TL05PWYsKqTEYdRwAAAUw"]
[Sat Apr 18 01:57:48.745064 2026] [:error] [pid 63702:tid 63763] [client 20.203.143.130:64865] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeJ0nMTL05PWYsKqTEYdSAAAAVY"]
[Sat Apr 18 01:57:50.144574 2026] [:error] [pid 59042:tid 59051] [client 20.203.143.130:65405] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeJ0np6p5oql0UklEBJavgAAAAQ"]
[Sat Apr 18 01:57:51.984020 2026] [:error] [pid 59136:tid 59150] [client 20.203.143.130:65284] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeJ0nyaoiUyiIR3EhLXCnwAAAMs"]
[Sat Apr 18 01:57:53.194937 2026] [:error] [pid 59042:tid 59049] [client 20.203.143.130:64284] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeJ0oZ6p5oql0UklEBJawQAAAAI"]
[Sat Apr 18 01:57:53.983956 2026] [:error] [pid 59042:tid 59060] [client 20.203.143.130:65296] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeJ0oZ6p5oql0UklEBJawwAAAA0"]
[Sat Apr 18 01:57:54.660810 2026] [:error] [pid 63702:tid 63764] [client 20.203.143.130:64263] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeJ0osTL05PWYsKqTEYdTAAAAVc"]
[Sat Apr 18 01:57:55.589687 2026] [:error] [pid 59042:tid 59047] [client 20.203.143.130:64873] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeJ0o56p5oql0UklEBJaxgAAAAA"]
[Sat Apr 18 01:57:56.408347 2026] [:error] [pid 59043:tid 59094] [client 20.203.143.130:65299] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeJ0pIRtUGE9SfUh2wwZTwAAAFQ"]
[Sat Apr 18 01:57:57.441022 2026] [:error] [pid 59043:tid 59077] [client 20.203.143.130:37048] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeJ0pYRtUGE9SfUh2wwZUQAAAEM"]
[Sat Apr 18 01:57:58.805158 2026] [:error] [pid 42442:tid 42458] [client 20.203.143.130:64311] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeJ0pj4PBGqL_yqPJ8k8swAAAQ4"]
[Sat Apr 18 01:57:59.955862 2026] [:error] [pid 59043:tid 59090] [client 20.203.143.130:64795] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeJ0p4RtUGE9SfUh2wwZVgAAAFA"]
[Sat Apr 18 01:58:00.810812 2026] [:error] [pid 59044:tid 59104] [client 20.203.143.130:64337] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeJ0qAFamkFyEtD_SMHGQwAAAIM"]
[Sat Apr 18 01:58:01.547509 2026] [:error] [pid 59044:tid 59105] [client 20.203.143.130:4386] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeJ0qQFamkFyEtD_SMHGRwAAAIQ"]
[Sat Apr 18 01:58:02.876640 2026] [:error] [pid 63702:tid 63754] [client 20.203.143.130:64256] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeJ0qsTL05PWYsKqTEYdVwAAAU0"]
[Sat Apr 18 01:58:04.699892 2026] [:error] [pid 42442:tid 42467] [client 20.203.143.130:4392] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeJ0rD4PBGqL_yqPJ8k8wAAAARc"]
[Sat Apr 18 01:58:09.219898 2026] [:error] [pid 42442:tid 42467] [client 20.203.143.130:65361] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeJ0sT4PBGqL_yqPJ8k80AAAARc"]
[Sat Apr 18 01:58:10.137308 2026] [:error] [pid 59136:tid 59159] [client 20.203.143.130:64781] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeJ0siaoiUyiIR3EhLXCsAAAANQ"]
[Sat Apr 18 01:58:11.733137 2026] [:error] [pid 42442:tid 42446] [client 20.203.143.130:65401] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeJ0sz4PBGqL_yqPJ8k82QAAAQI"]
[Sat Apr 18 01:58:12.927107 2026] [:error] [pid 42442:tid 42457] [client 20.203.143.130:64268] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJ0tD4PBGqL_yqPJ8k83wAAAQ0"]
[Sat Apr 18 01:58:13.700076 2026] [:error] [pid 59042:tid 59069] [client 20.203.143.130:65376] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJ0tZ6p5oql0UklEBJa2wAAABY"]
[Sat Apr 18 01:58:14.585116 2026] [:error] [pid 42442:tid 42466] [client 20.203.143.130:64838] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJ0tj4PBGqL_yqPJ8k86AAAARY"]
[Sat Apr 18 01:58:15.784514 2026] [:error] [pid 42442:tid 42454] [client 20.203.143.130:4373] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeJ0tz4PBGqL_yqPJ8k86gAAAQo"]
[Sat Apr 18 01:58:17.080957 2026] [:error] [pid 63702:tid 63751] [client 20.203.143.130:4376] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeJ0ucTL05PWYsKqTEYdcAAAAUs"]
[Sat Apr 18 01:58:17.874630 2026] [:error] [pid 59044:tid 59104] [client 20.203.143.130:37027] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeJ0uQFamkFyEtD_SMHGVQAAAIM"]
[Sat Apr 18 01:58:19.175709 2026] [:error] [pid 59042:tid 59047] [client 20.203.143.130:65336] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeJ0u56p5oql0UklEBJa3wAAAAA"]
[Sat Apr 18 01:58:20.598684 2026] [:error] [pid 42442:tid 42453] [client 20.203.143.130:64311] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeJ0vD4PBGqL_yqPJ8k9BQAAAQk"]
[Sat Apr 18 01:58:21.567316 2026] [:error] [pid 42442:tid 42452] [client 20.203.143.130:64362] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ0vT4PBGqL_yqPJ8k9CQAAAQg"]
[Sat Apr 18 01:58:22.357799 2026] [:error] [pid 42442:tid 42450] [client 20.203.143.130:64813] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ0vj4PBGqL_yqPJ8k9EQAAAQY"]
[Sat Apr 18 01:58:23.272670 2026] [:error] [pid 42442:tid 42458] [client 20.203.143.130:64334] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ0vz4PBGqL_yqPJ8k9HQAAAQ4"]
[Sat Apr 18 01:58:24.172593 2026] [:error] [pid 63702:tid 63756] [client 20.203.143.130:37018] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aeJ0wMTL05PWYsKqTEYdeAAAAU8"]
[Sat Apr 18 01:58:25.834029 2026] [:error] [pid 59136:tid 59152] [client 20.203.143.130:37055] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aeJ0wSaoiUyiIR3EhLXCvAAAAM0"]
[Sat Apr 18 01:58:26.715074 2026] [:error] [pid 59044:tid 59101] [client 20.203.143.130:65350] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aeJ0wgFamkFyEtD_SMHGXwAAAIA"]
[Sat Apr 18 01:58:28.379639 2026] [:error] [pid 42442:tid 42467] [client 20.203.143.130:64281] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aeJ0xD4PBGqL_yqPJ8k9LAAAARc"]
[Sat Apr 18 01:58:30.148926 2026] [:error] [pid 63702:tid 63764] [client 20.203.143.130:64885] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e7.php"] [unique_id "aeJ0xsTL05PWYsKqTEYdhgAAAVc"]
[Sat Apr 18 01:58:31.772692 2026] [:error] [pid 42442:tid 42466] [client 20.203.143.130:64275] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aeJ0xz4PBGqL_yqPJ8k9OgAAARY"]
[Sat Apr 18 01:58:32.753150 2026] [:error] [pid 59043:tid 59090] [client 20.203.143.130:4402] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aeJ0yIRtUGE9SfUh2wwZaAAAAFA"]
[Sat Apr 18 01:58:33.980363 2026] [:error] [pid 42442:tid 42449] [client 20.203.143.130:64855] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aeJ0yT4PBGqL_yqPJ8k9QAAAAQU"]
[Sat Apr 18 01:58:35.608502 2026] [:error] [pid 59042:tid 59062] [client 20.203.143.130:65381] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aeJ0y56p5oql0UklEBJa7wAAAA8"]
[Sat Apr 18 01:58:36.734306 2026] [:error] [pid 42442:tid 42457] [client 20.203.143.130:64851] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeJ0zD4PBGqL_yqPJ8k9UAAAAQ0"]
[Sat Apr 18 01:58:40.225837 2026] [:error] [pid 59044:tid 59110] [client 20.203.143.130:65333] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeJ00AFamkFyEtD_SMHGcwAAAIk"]
[Sat Apr 18 01:58:41.200351 2026] [:error] [pid 63702:tid 63760] [client 20.203.143.130:64294] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeJ00cTL05PWYsKqTEYdnAAAAVM"]
[Sat Apr 18 01:58:42.239184 2026] [:error] [pid 42442:tid 42445] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sat Apr 18 01:58:42.476131 2026] [:error] [pid 42442:tid 42453] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 18 01:58:42.714772 2026] [:error] [pid 42442:tid 42450] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 18 01:58:42.959482 2026] [:error] [pid 42442:tid 42451] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 18 01:58:43.327617 2026] [:error] [pid 42442:tid 42466] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Apr 18 01:58:43.580832 2026] [:error] [pid 42442:tid 42448] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Sat Apr 18 01:58:43.833507 2026] [:error] [pid 42442:tid 42464] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Sat Apr 18 01:58:44.081562 2026] [:error] [pid 42442:tid 42455] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Sat Apr 18 01:58:44.326941 2026] [:error] [pid 42442:tid 42462] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sat Apr 18 01:58:44.564874 2026] [:error] [pid 42442:tid 42461] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Apr 18 01:58:44.892465 2026] [:error] [pid 42442:tid 42459] [client 20.203.143.130:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 18 01:58:45.126677 2026] [:error] [pid 42442:tid 42460] [client 20.203.143.130:64270] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeJ01T4PBGqL_yqPJ8k9bAAAARA"]
[Sat Apr 18 01:58:45.784736 2026] [:error] [pid 59136:tid 59139] [client 20.203.143.130:37018] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeJ01SaoiUyiIR3EhLXC1QAAAMA"]
[Sat Apr 18 01:58:47.452495 2026] [:error] [pid 63702:tid 63740] [client 20.203.143.130:64271] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeJ018TL05PWYsKqTEYdpwAAAUI"]
[Sat Apr 18 01:58:48.331905 2026] [:error] [pid 59136:tid 59162] [client 20.203.143.130:64280] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeJ02CaoiUyiIR3EhLXC3AAAANc"]
[Sat Apr 18 01:58:49.110363 2026] [:error] [pid 63702:tid 63760] [client 20.203.143.130:65399] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ02cTL05PWYsKqTEYdrQAAAVM"]
[Sat Apr 18 01:58:49.766383 2026] [:error] [pid 42442:tid 42444] [client 20.203.143.130:37015] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ02T4PBGqL_yqPJ8k9bQAAAQA"]
[Sat Apr 18 01:58:50.424115 2026] [:error] [pid 42442:tid 42450] [client 20.203.143.130:64326] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ02j4PBGqL_yqPJ8k9bgAAAQY"]
[Sat Apr 18 01:58:51.035608 2026] [:error] [pid 59042:tid 59061] [client 20.203.143.130:64324] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeJ0256p5oql0UklEBJa_AAAAA4"]
[Sat Apr 18 01:58:51.688651 2026] [:error] [pid 59044:tid 59101] [client 20.203.143.130:64823] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ02wFamkFyEtD_SMHGgQAAAIA"]
[Sat Apr 18 01:58:52.314017 2026] [:error] [pid 59136:tid 59142] [client 20.203.143.130:64769] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ03CaoiUyiIR3EhLXC4gAAAMM"]
[Sat Apr 18 01:58:53.074652 2026] [:error] [pid 63702:tid 63741] [client 20.203.143.130:64341] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ03cTL05PWYsKqTEYdtwAAAUM"]
[Sat Apr 18 01:58:53.703497 2026] [:error] [pid 63702:tid 63761] [client 20.203.143.130:65326] [client 20.203.143.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeJ03cTL05PWYsKqTEYduQAAAVQ"]
[Sat Apr 18 04:25:55.044695 2026] [:error] [pid 9864:tid 9929] [client 1.15.52.154:45748] [client 1.15.52.154] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeKXU4CFeowknfXHM7kR4wAAAFc"]
[Sat Apr 18 04:57:10.102202 2026] [:error] [pid 9970:tid 9993] [client 35.212.245.158:44648] [client 35.212.245.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aeKepiYdRLRhVmaIMx2epwAAANM"]
[Sat Apr 18 04:57:38.184530 2026] [:error] [pid 9864:tid 9917] [client 35.212.245.158:36464] [client 35.212.245.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aeKewoCFeowknfXHM7kgGgAAAEs"]
[Sat Apr 18 04:58:03.600569 2026] [:error] [pid 9865:tid 9947] [client 35.212.245.158:37498] [client 35.212.245.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "aeKe26zb5knECIY-C-iLUQAAAIo"]
[Sat Apr 18 04:58:43.149556 2026] [:error] [pid 9970:tid 9989] [client 35.212.245.158:39848] [client 35.212.245.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/core/.env"] [unique_id "aeKfAyYdRLRhVmaIMx2fSQAAAM8"]
[Sat Apr 18 04:59:03.806734 2026] [:error] [pid 9865:tid 9939] [client 35.212.245.158:41504] [client 35.212.245.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/backend/.env"] [unique_id "aeKfF6zb5knECIY-C-iLgwAAAII"]
[Sat Apr 18 04:59:48.901807 2026] [:error] [pid 9864:tid 9913] [client 35.212.245.158:46228] [client 35.212.245.158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/server/.env"] [unique_id "aeKfRICFeowknfXHM7kgnAAAAEc"]
[Sat Apr 18 06:01:04.593187 2026] [:error] [pid 9970:tid 9975] [client 129.159.56.14:55480] [client 129.159.56.14] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aeKtoCYdRLRhVmaIMx3PKwAAAME"]
[Sat Apr 18 07:15:01.382648 2026] [:error] [pid 9865:tid 9960] [client 43.135.182.95:58564] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeK-9azb5knECIY-C-jEnQAAAJc"]
[Sat Apr 18 08:57:37.602092 2026] [:error] [pid 9865:tid 9939] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 18 08:57:37.859021 2026] [:error] [pid 9865:tid 9941] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 18 08:57:38.116183 2026] [:error] [pid 9865:tid 9957] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 18 08:57:38.373011 2026] [:error] [pid 9865:tid 9954] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 18 08:57:38.630456 2026] [:error] [pid 9865:tid 9948] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat Apr 18 08:57:39.160021 2026] [:error] [pid 9865:tid 9956] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 18 08:57:39.418754 2026] [:error] [pid 9865:tid 9958] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sat Apr 18 08:57:39.675961 2026] [:error] [pid 9865:tid 9939] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 18 08:57:39.931692 2026] [:error] [pid 9865:tid 9941] [client 20.215.248.211:17464] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Sat Apr 18 08:57:40.187490 2026] [:error] [pid 9865:tid 9957] [client 20.215.248.211:17464] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeLXBKzb5knECIY-C-jcrAAAAJQ"]
[Sat Apr 18 08:57:40.700930 2026] [:error] [pid 9865:tid 9946] [client 20.215.248.211:17440] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeLXBKzb5knECIY-C-jcrgAAAIk"]
[Sat Apr 18 08:57:41.209669 2026] [:error] [pid 9863:tid 9894] [client 20.215.248.211:17471] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeLXBTjjiypiFrTucbI1pgAAABU"]
[Sat Apr 18 08:57:41.718933 2026] [:error] [pid 34288:tid 34312] [client 20.215.248.211:17416] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeLXBeTIiy__PtiLmplRogAAAZQ"]
[Sat Apr 18 08:57:42.242493 2026] [:error] [pid 9865:tid 9961] [client 20.215.248.211:17459] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeLXBqzb5knECIY-C-jctQAAAJg"]
[Sat Apr 18 08:57:42.754409 2026] [:error] [pid 34288:tid 34314] [client 20.215.248.211:17458] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeLXBuTIiy__PtiLmplRpQAAAZY"]
[Sat Apr 18 08:57:43.268892 2026] [:error] [pid 34288:tid 34299] [client 20.215.248.211:40098] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeLXB-TIiy__PtiLmplRpwAAAYc"]
[Sat Apr 18 08:57:43.787211 2026] [:error] [pid 34290:tid 34323] [client 20.215.248.211:40077] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeLXBxqX6WpmmAXOBi98pgAAAcQ"]
[Sat Apr 18 08:57:44.295015 2026] [:error] [pid 34290:tid 34333] [client 20.215.248.211:40079] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeLXCBqX6WpmmAXOBi98qQAAAc4"]
[Sat Apr 18 08:57:44.803743 2026] [:error] [pid 9970:tid 9976] [client 20.215.248.211:40096] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeLXCCYdRLRhVmaIMx0R6wAAAMI"]
[Sat Apr 18 08:57:45.315817 2026] [:error] [pid 9865:tid 9959] [client 20.215.248.211:17433] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeLXCazb5knECIY-C-jcugAAAJY"]
[Sat Apr 18 08:57:45.869059 2026] [:error] [pid 9865:tid 9937] [client 20.215.248.211:17469] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kj.php"] [unique_id "aeLXCazb5knECIY-C-jcvwAAAIA"]
[Sat Apr 18 08:57:46.377712 2026] [:error] [pid 34288:tid 34303] [client 20.215.248.211:17411] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeLXCuTIiy__PtiLmplRqQAAAYs"]
[Sat Apr 18 08:57:46.898885 2026] [:error] [pid 9970:tid 9996] [client 20.215.248.211:17450] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeLXCiYdRLRhVmaIMx0R9gAAANY"]
[Sat Apr 18 08:57:47.407594 2026] [:error] [pid 34288:tid 34311] [client 20.215.248.211:40076] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeLXC-TIiy__PtiLmplRqgAAAZM"]
[Sat Apr 18 08:57:47.923417 2026] [:error] [pid 34288:tid 34294] [client 20.215.248.211:40089] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeLXC-TIiy__PtiLmplRrAAAAYI"]
[Sat Apr 18 08:57:48.431152 2026] [:error] [pid 9865:tid 9939] [client 20.215.248.211:17420] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeLXDKzb5knECIY-C-jczQAAAII"]
[Sat Apr 18 08:57:48.984283 2026] [:error] [pid 9863:tid 9892] [client 20.215.248.211:17421] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeLXDDjjiypiFrTucbI1rwAAABM"]
[Sat Apr 18 08:57:49.501903 2026] [:error] [pid 9863:tid 9885] [client 20.215.248.211:17465] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeLXDTjjiypiFrTucbI1sgAAAAw"]
[Sat Apr 18 08:57:50.036889 2026] [:error] [pid 9865:tid 9958] [client 20.215.248.211:17430] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeLXDqzb5knECIY-C-jc0AAAAJU"]
[Sat Apr 18 08:57:50.555841 2026] [:error] [pid 9865:tid 9955] [client 20.215.248.211:17456] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeLXDqzb5knECIY-C-jc0wAAAJI"]
[Sat Apr 18 08:57:51.096479 2026] [:error] [pid 34237:tid 34253] [client 20.215.248.211:17415] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeLXDxBmX4Wq5a6rxfbwTgAAAU4"]
[Sat Apr 18 08:57:51.605875 2026] [:error] [pid 9864:tid 9906] [client 20.215.248.211:40086] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeLXD4CFeowknfXHM7lfUgAAAEE"]
[Sat Apr 18 08:57:52.125611 2026] [:error] [pid 9865:tid 9951] [client 20.215.248.211:17462] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeLXEKzb5knECIY-C-jc2AAAAI4"]
[Sat Apr 18 08:57:52.639956 2026] [:error] [pid 13023:tid 13029] [client 20.215.248.211:17432] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeLXEP1e7hG8DAeABB9TwgAAAQQ"]
[Sat Apr 18 08:57:53.153748 2026] [:error] [pid 34290:tid 34333] [client 20.215.248.211:17445] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeLXERqX6WpmmAXOBi98sAAAAc4"]
[Sat Apr 18 08:57:53.663022 2026] [:error] [pid 34288:tid 34306] [client 20.215.248.211:40084] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeLXEeTIiy__PtiLmplRtAAAAY4"]
[Sat Apr 18 08:57:54.173638 2026] [:error] [pid 9864:tid 9915] [client 20.215.248.211:40112] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeLXEoCFeowknfXHM7lfWgAAAEk"]
[Sat Apr 18 08:57:54.681870 2026] [:error] [pid 13023:tid 13032] [client 20.215.248.211:40090] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeLXEv1e7hG8DAeABB9TxgAAAQc"]
[Sat Apr 18 08:57:55.206918 2026] [:error] [pid 13023:tid 13035] [client 20.215.248.211:17442] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeLXE_1e7hG8DAeABB9TygAAAQo"]
[Sat Apr 18 08:57:55.719021 2026] [:error] [pid 34237:tid 34250] [client 20.215.248.211:17428] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeLXExBmX4Wq5a6rxfbwVAAAAUs"]
[Sat Apr 18 08:57:56.230345 2026] [:error] [pid 9865:tid 9958] [client 20.215.248.211:40105] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeLXFKzb5knECIY-C-jc3QAAAJU"]
[Sat Apr 18 08:57:56.740714 2026] [:error] [pid 9865:tid 9948] [client 20.215.248.211:17423] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLXFKzb5knECIY-C-jc4AAAAIs"]
[Sat Apr 18 08:57:57.290137 2026] [:error] [pid 13023:tid 13044] [client 20.215.248.211:17468] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLXFf1e7hG8DAeABB9T2QAAARM"]
[Sat Apr 18 08:57:57.799499 2026] [:error] [pid 34237:tid 34248] [client 20.215.248.211:17435] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLXFRBmX4Wq5a6rxfbwVwAAAUk"]
[Sat Apr 18 08:57:58.314105 2026] [:error] [pid 34237:tid 34262] [client 20.215.248.211:17408] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeLXFhBmX4Wq5a6rxfbwWgAAAVc"]
[Sat Apr 18 08:57:58.824794 2026] [:error] [pid 34288:tid 34311] [client 20.215.248.211:40081] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLXFuTIiy__PtiLmplRugAAAZM"]
[Sat Apr 18 08:57:59.357793 2026] [:error] [pid 34288:tid 34309] [client 20.215.248.211:17453] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLXF-TIiy__PtiLmplRvQAAAZE"]
[Sat Apr 18 08:57:59.891529 2026] [:error] [pid 34288:tid 34306] [client 20.215.248.211:17441] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLXF-TIiy__PtiLmplRwQAAAY4"]
[Sat Apr 18 08:58:00.446029 2026] [:error] [pid 34288:tid 34308] [client 20.215.248.211:40103] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeLXGOTIiy__PtiLmplRyQAAAZA"]
[Sat Apr 18 08:58:00.958461 2026] [:error] [pid 34288:tid 34299] [client 20.215.248.211:40070] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeLXGOTIiy__PtiLmplRywAAAYc"]
[Sat Apr 18 08:58:01.467156 2026] [:error] [pid 34288:tid 34295] [client 20.215.248.211:40065] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeLXGeTIiy__PtiLmplRzQAAAYM"]
[Sat Apr 18 08:58:01.986595 2026] [:error] [pid 34288:tid 34294] [client 20.215.248.211:17422] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeLXGeTIiy__PtiLmplR0AAAAYI"]
[Sat Apr 18 08:58:02.494261 2026] [:error] [pid 34288:tid 34309] [client 20.215.248.211:40102] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeLXGuTIiy__PtiLmplR0wAAAZE"]
[Sat Apr 18 08:58:03.004175 2026] [:error] [pid 34288:tid 34310] [client 20.215.248.211:40071] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeLXG-TIiy__PtiLmplR1AAAAZI"]
[Sat Apr 18 08:58:03.512642 2026] [:error] [pid 34290:tid 34341] [client 20.215.248.211:40099] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeLXGxqX6WpmmAXOBi98ugAAAdY"]
[Sat Apr 18 08:58:04.022476 2026] [:error] [pid 34288:tid 34305] [client 20.215.248.211:40109] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeLXHOTIiy__PtiLmplR2AAAAY0"]
[Sat Apr 18 08:58:04.533811 2026] [:error] [pid 34288:tid 34316] [client 20.215.248.211:40106] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "aeLXHOTIiy__PtiLmplR4AAAAZg"]
[Sat Apr 18 08:58:05.043286 2026] [:error] [pid 9970:tid 9985] [client 20.215.248.211:17459] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeLXHSYdRLRhVmaIMx0SDAAAAMs"]
[Sat Apr 18 08:58:05.559467 2026] [:error] [pid 9865:tid 9952] [client 20.215.248.211:17470] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeLXHazb5knECIY-C-jc8wAAAI8"]
[Sat Apr 18 08:58:06.078850 2026] [:error] [pid 34288:tid 34313] [client 20.215.248.211:41238] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeLXHuTIiy__PtiLmplR7AAAAZU"]
[Sat Apr 18 08:58:06.594008 2026] [:error] [pid 34288:tid 34296] [client 20.215.248.211:40126] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aeLXHuTIiy__PtiLmplR8QAAAYQ"]
[Sat Apr 18 08:58:07.121845 2026] [:error] [pid 9865:tid 9960] [client 20.215.248.211:40116] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeLXH6zb5knECIY-C-jc_gAAAJc"]
[Sat Apr 18 08:58:07.645971 2026] [:error] [pid 34288:tid 34306] [client 20.215.248.211:40118] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeLXH-TIiy__PtiLmplR-AAAAY4"]
[Sat Apr 18 08:58:08.174663 2026] [:error] [pid 9864:tid 9906] [client 20.215.248.211:40086] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeLXIICFeowknfXHM7lfYQAAAEE"]
[Sat Apr 18 08:58:08.688720 2026] [:error] [pid 34237:tid 34252] [client 20.215.248.211:17414] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeLXIBBmX4Wq5a6rxfbwYAAAAU0"]
[Sat Apr 18 08:58:09.217907 2026] [:error] [pid 34237:tid 34242] [client 20.215.248.211:17452] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeLXIRBmX4Wq5a6rxfbwYQAAAUM"]
[Sat Apr 18 08:58:09.728712 2026] [:error] [pid 13023:tid 13033] [client 20.215.248.211:41258] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeLXIf1e7hG8DAeABB9T9AAAAQg"]
[Sat Apr 18 08:58:10.245366 2026] [:error] [pid 13023:tid 13042] [client 20.215.248.211:40074] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeLXIv1e7hG8DAeABB9T9gAAARE"]
[Sat Apr 18 08:58:10.754549 2026] [:error] [pid 34290:tid 34339] [client 20.215.248.211:41233] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeLXIhqX6WpmmAXOBi98xAAAAdQ"]
[Sat Apr 18 08:58:11.282302 2026] [:error] [pid 9865:tid 9946] [client 20.215.248.211:40066] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeLXI6zb5knECIY-C-jdCwAAAIk"]
[Sat Apr 18 08:58:11.796704 2026] [:error] [pid 9865:tid 9960] [client 20.215.248.211:40067] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeLXI6zb5knECIY-C-jdEAAAAJc"]
[Sat Apr 18 08:58:12.313779 2026] [:error] [pid 9864:tid 9929] [client 20.215.248.211:40100] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeLXJICFeowknfXHM7lfZQAAAFc"]
[Sat Apr 18 08:58:12.830442 2026] [:error] [pid 9970:tid 9975] [client 20.215.248.211:17434] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeLXJCYdRLRhVmaIMx0SFQAAAME"]
[Sat Apr 18 08:58:13.342662 2026] [:error] [pid 34237:tid 34258] [client 20.215.248.211:17451] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeLXJRBmX4Wq5a6rxfbwZgAAAVM"]
[Sat Apr 18 08:58:14.003003 2026] [:error] [pid 34288:tid 34310] [client 20.215.248.211:40095] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeLXJuTIiy__PtiLmplSBwAAAZI"]
[Sat Apr 18 08:58:14.517757 2026] [:error] [pid 34288:tid 34306] [client 20.215.248.211:41218] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeLXJuTIiy__PtiLmplSCwAAAY4"]
[Sat Apr 18 08:58:15.062539 2026] [:error] [pid 34290:tid 34324] [client 20.215.248.211:17446] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeLXJxqX6WpmmAXOBi98zAAAAcU"]
[Sat Apr 18 08:58:15.578295 2026] [:error] [pid 13023:tid 13048] [client 20.215.248.211:17409] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeLXJ_1e7hG8DAeABB9T_gAAARc"]
[Sat Apr 18 08:58:16.089395 2026] [:error] [pid 9865:tid 9938] [client 20.215.248.211:41230] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeLXKKzb5knECIY-C-jdFgAAAIE"]
[Sat Apr 18 08:58:16.697180 2026] [:error] [pid 34290:tid 34320] [client 20.215.248.211:41220] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeLXKBqX6WpmmAXOBi980AAAAcE"]
[Sat Apr 18 08:58:17.232961 2026] [:error] [pid 9865:tid 9951] [client 20.215.248.211:40082] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeLXKazb5knECIY-C-jdFwAAAI4"]
[Sat Apr 18 08:58:17.787194 2026] [:error] [pid 34288:tid 34316] [client 20.215.248.211:17439] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeLXKeTIiy__PtiLmplSFAAAAZg"]
[Sat Apr 18 08:58:18.420062 2026] [:error] [pid 9865:tid 9948] [client 20.215.248.211:40073] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeLXKqzb5knECIY-C-jdIQAAAIs"]
[Sat Apr 18 08:58:19.032696 2026] [:error] [pid 9865:tid 9956] [client 20.215.248.211:40117] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeLXK6zb5knECIY-C-jdKQAAAJM"]
[Sat Apr 18 08:58:19.602399 2026] [:error] [pid 9865:tid 9939] [client 20.215.248.211:17429] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeLXK6zb5knECIY-C-jdMAAAAII"]
[Sat Apr 18 08:58:20.256149 2026] [:error] [pid 13023:tid 13033] [client 20.215.248.211:41223] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeLXLP1e7hG8DAeABB9UBQAAAQg"]
[Sat Apr 18 08:58:20.940408 2026] [:error] [pid 34237:tid 34246] [client 20.215.248.211:41243] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeLXLBBmX4Wq5a6rxfbwcQAAAUc"]
[Sat Apr 18 08:58:21.676349 2026] [:error] [pid 34237:tid 34257] [client 20.215.248.211:40097] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeLXLRBmX4Wq5a6rxfbwdQAAAVI"]
[Sat Apr 18 08:58:23.064075 2026] [:error] [pid 9863:tid 9879] [client 20.215.248.211:40108] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeLXLzjjiypiFrTucbI1wwAAAAY"]
[Sat Apr 18 08:58:23.720043 2026] [:error] [pid 9863:tid 9890] [client 20.215.248.211:40113] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeLXLzjjiypiFrTucbI1xQAAABE"]
[Sat Apr 18 08:58:24.396305 2026] [:error] [pid 9865:tid 9954] [client 20.215.248.211:41248] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeLXMKzb5knECIY-C-jdNAAAAJE"]
[Sat Apr 18 08:58:24.936245 2026] [:error] [pid 9970:tid 9975] [client 20.215.248.211:17455] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeLXMCYdRLRhVmaIMx0SJAAAAME"]
[Sat Apr 18 08:58:25.450433 2026] [:error] [pid 34290:tid 34319] [client 20.215.248.211:40075] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeLXMRqX6WpmmAXOBi981QAAAcA"]
[Sat Apr 18 08:58:25.998477 2026] [:error] [pid 34290:tid 34335] [client 20.215.248.211:17449] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeLXMRqX6WpmmAXOBi981wAAAdA"]
[Sat Apr 18 08:58:26.509794 2026] [:error] [pid 13023:tid 13048] [client 20.215.248.211:40088] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeLXMv1e7hG8DAeABB9UGwAAARc"]
[Sat Apr 18 08:58:27.020160 2026] [:error] [pid 13023:tid 13042] [client 20.215.248.211:12257] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeLXM_1e7hG8DAeABB9UHgAAARE"]
[Sat Apr 18 08:58:27.567952 2026] [:error] [pid 34288:tid 34312] [client 20.215.248.211:17410] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeLXM-TIiy__PtiLmplSGgAAAZQ"]
[Sat Apr 18 08:58:28.080327 2026] [:error] [pid 9863:tid 9893] [client 20.215.248.211:40080] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeLXNDjjiypiFrTucbI10gAAABQ"]
[Sat Apr 18 08:58:28.640731 2026] [:error] [pid 9863:tid 9888] [client 20.215.248.211:17463] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeLXNDjjiypiFrTucbI10wAAAA8"]
[Sat Apr 18 08:58:29.152749 2026] [:error] [pid 9865:tid 9956] [client 20.215.248.211:17466] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeLXNazb5knECIY-C-jdOAAAAJM"]
[Sat Apr 18 08:58:29.670007 2026] [:error] [pid 9865:tid 9957] [client 20.215.248.211:17460] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeLXNazb5knECIY-C-jdQAAAAJQ"]
[Sat Apr 18 08:58:30.317440 2026] [:error] [pid 9970:tid 9991] [client 20.215.248.211:41254] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeLXNiYdRLRhVmaIMx0SMgAAANE"]
[Sat Apr 18 08:58:30.843521 2026] [:error] [pid 34288:tid 34294] [client 20.215.248.211:40085] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeLXNuTIiy__PtiLmplSIgAAAYI"]
[Sat Apr 18 08:58:31.358571 2026] [:error] [pid 34288:tid 34306] [client 20.215.248.211:12265] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeLXN-TIiy__PtiLmplSJgAAAY4"]
[Sat Apr 18 08:58:31.901436 2026] [:error] [pid 34288:tid 34303] [client 20.215.248.211:41240] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeLXN-TIiy__PtiLmplSLAAAAYs"]
[Sat Apr 18 08:58:32.455563 2026] [:error] [pid 13023:tid 13032] [client 20.215.248.211:17436] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLXOP1e7hG8DAeABB9UIwAAAQc"]
[Sat Apr 18 08:58:32.983424 2026] [:error] [pid 34288:tid 34301] [client 20.215.248.211:41265] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLXOOTIiy__PtiLmplSLgAAAYk"]
[Sat Apr 18 08:58:33.510645 2026] [:error] [pid 9864:tid 9925] [client 20.215.248.211:41273] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLXOYCFeowknfXHM7lffQAAAFM"]
[Sat Apr 18 08:58:34.048554 2026] [:error] [pid 9970:tid 9984] [client 20.215.248.211:41217] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeLXOiYdRLRhVmaIMx0SPQAAAMo"]
[Sat Apr 18 08:58:34.603109 2026] [:error] [pid 34237:tid 34253] [client 20.215.248.211:17457] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLXOhBmX4Wq5a6rxfbwiAAAAU4"]
[Sat Apr 18 08:58:35.232345 2026] [:error] [pid 9865:tid 9952] [client 20.215.248.211:12237] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLXO6zb5knECIY-C-jdSAAAAI8"]
[Sat Apr 18 08:58:35.760957 2026] [:error] [pid 9865:tid 9947] [client 20.215.248.211:40072] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLXO6zb5knECIY-C-jdSQAAAIo"]
[Sat Apr 18 08:58:36.290337 2026] [:error] [pid 9864:tid 9927] [client 20.215.248.211:41257] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeLXPICFeowknfXHM7lfggAAAFU"]
[Sat Apr 18 08:58:36.850131 2026] [:error] [pid 9970:tid 9988] [client 20.215.248.211:40107] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aeLXPCYdRLRhVmaIMx0SRgAAAM4"]
[Sat Apr 18 08:58:37.559987 2026] [:error] [pid 9863:tid 9897] [client 20.215.248.211:12163] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aeLXPTjjiypiFrTucbI11gAAABg"]
[Sat Apr 18 08:58:38.121942 2026] [:error] [pid 13023:tid 13041] [client 20.215.248.211:40121] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aeLXPv1e7hG8DAeABB9UKQAAARA"]
[Sat Apr 18 08:58:38.691841 2026] [:error] [pid 9865:tid 9955] [client 20.215.248.211:41272] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "aeLXPqzb5knECIY-C-jdTgAAAJI"]
[Sat Apr 18 08:58:39.827843 2026] [:error] [pid 9865:tid 9938] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sat Apr 18 08:58:40.383500 2026] [:error] [pid 9865:tid 9949] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat Apr 18 08:58:40.653172 2026] [:error] [pid 9865:tid 9958] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sat Apr 18 08:58:40.923375 2026] [:error] [pid 9865:tid 9950] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Sat Apr 18 08:58:41.181529 2026] [:error] [pid 9865:tid 9957] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Apr 18 08:58:41.439106 2026] [:error] [pid 9865:tid 9959] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Apr 18 08:58:41.703155 2026] [:error] [pid 9865:tid 9953] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Apr 18 08:58:41.971867 2026] [:error] [pid 9865:tid 9941] [client 20.215.248.211:40068] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sat Apr 18 08:58:42.226436 2026] [:error] [pid 9865:tid 9948] [client 20.215.248.211:40068] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeLXQqzb5knECIY-C-jdZQAAAIs"]
[Sat Apr 18 08:58:42.772305 2026] [:error] [pid 9864:tid 9914] [client 20.215.248.211:41253] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeLXQoCFeowknfXHM7lfkQAAAEg"]
[Sat Apr 18 08:58:43.441432 2026] [:error] [pid 9865:tid 9942] [client 20.215.248.211:41216] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeLXQ6zb5knECIY-C-jdZwAAAIU"]
[Sat Apr 18 08:58:44.032635 2026] [:error] [pid 9970:tid 9987] [client 20.215.248.211:17424] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeLXRCYdRLRhVmaIMx0SWAAAAM0"]
[Sat Apr 18 08:58:44.601195 2026] [:error] [pid 34237:tid 34240] [client 20.215.248.211:41227] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeLXRBBmX4Wq5a6rxfbwkwAAAUE"]
[Sat Apr 18 08:58:45.168670 2026] [:error] [pid 34237:tid 34263] [client 20.215.248.211:12243] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeLXRRBmX4Wq5a6rxfbwlgAAAVg"]
[Sat Apr 18 08:58:45.775053 2026] [:error] [pid 34237:tid 34260] [client 20.215.248.211:41250] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeLXRRBmX4Wq5a6rxfbwmQAAAVU"]
[Sat Apr 18 08:58:46.327357 2026] [:error] [pid 34237:tid 34259] [client 20.215.248.211:41237] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboutc.php"] [unique_id "aeLXRhBmX4Wq5a6rxfbwmwAAAVQ"]
[Sat Apr 18 08:58:46.900028 2026] [:error] [pid 34290:tid 34339] [client 20.215.248.211:17444] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeLXRhqX6WpmmAXOBi988QAAAdQ"]
[Sat Apr 18 08:58:47.433002 2026] [:error] [pid 9970:tid 9974] [client 20.215.248.211:41246] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeLXRyYdRLRhVmaIMx0SYAAAAMA"]
[Sat Apr 18 08:58:47.966661 2026] [:error] [pid 9863:tid 9877] [client 20.215.248.211:40092] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeLXRzjjiypiFrTucbI13wAAAAQ"]
[Sat Apr 18 08:58:48.679006 2026] [:error] [pid 13023:tid 13038] [client 20.215.248.211:41228] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeLXSP1e7hG8DAeABB9UOgAAAQ0"]
[Sat Apr 18 08:58:49.364613 2026] [:error] [pid 34288:tid 34304] [client 20.215.248.211:40127] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeLXSeTIiy__PtiLmplSQAAAAYw"]
[Sat Apr 18 08:58:50.198041 2026] [:error] [pid 9863:tid 9874] [client 20.215.248.211:40111] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeLXSjjjiypiFrTucbI14wAAAAE"]
[Sat Apr 18 08:58:50.825808 2026] [:error] [pid 9865:tid 9948] [client 20.215.248.211:40093] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeLXSqzb5knECIY-C-jdcgAAAIs"]
[Sat Apr 18 08:58:51.894213 2026] [:error] [pid 9970:tid 9990] [client 20.215.248.211:17418] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeLXSyYdRLRhVmaIMx0SYQAAANA"]
[Sat Apr 18 08:58:52.548095 2026] [:error] [pid 9863:tid 9889] [client 20.215.248.211:40078] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLXTDjjiypiFrTucbI15AAAABA"]
[Sat Apr 18 08:58:53.187989 2026] [:error] [pid 9863:tid 9895] [client 20.215.248.211:12236] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLXTTjjiypiFrTucbI15QAAABY"]
[Sat Apr 18 08:58:53.807755 2026] [:error] [pid 34237:tid 34244] [client 20.215.248.211:17443] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLXTRBmX4Wq5a6rxfbwpwAAAUU"]
[Sat Apr 18 08:58:54.427435 2026] [:error] [pid 34237:tid 34262] [client 20.215.248.211:40083] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeLXThBmX4Wq5a6rxfbwqQAAAVc"]
[Sat Apr 18 08:58:55.070569 2026] [:error] [pid 13023:tid 13037] [client 20.215.248.211:17448] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeLXT_1e7hG8DAeABB9UQAAAAQw"]
[Sat Apr 18 08:58:56.199719 2026] [:error] [pid 9865:tid 9939] [client 20.215.248.211:40124] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeLXUKzb5knECIY-C-jdfwAAAII"]
[Sat Apr 18 08:58:56.776928 2026] [:error] [pid 9865:tid 9956] [client 20.215.248.211:17467] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeLXUKzb5knECIY-C-jdgQAAAJM"]
[Sat Apr 18 08:58:57.404282 2026] [:error] [pid 9864:tid 9908] [client 20.215.248.211:40091] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeLXUYCFeowknfXHM7lfqgAAAEM"]
[Sat Apr 18 08:58:58.100678 2026] [:error] [pid 9864:tid 9922] [client 20.215.248.211:41231] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLXUoCFeowknfXHM7lfrgAAAFA"]
[Sat Apr 18 08:58:58.905933 2026] [:error] [pid 9864:tid 9913] [client 20.215.248.211:12229] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLXUoCFeowknfXHM7lfswAAAEc"]
[Sat Apr 18 08:58:59.614660 2026] [:error] [pid 34290:tid 34325] [client 20.215.248.211:41279] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLXUxqX6WpmmAXOBi98_wAAAcY"]
[Sat Apr 18 08:59:00.218187 2026] [:error] [pid 9864:tid 9908] [client 20.215.248.211:41224] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeLXVICFeowknfXHM7lftgAAAEM"]
[Sat Apr 18 08:59:00.756525 2026] [:error] [pid 9865:tid 9949] [client 20.215.248.211:40125] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeLXVKzb5knECIY-C-jdgwAAAIw"]
[Sat Apr 18 08:59:01.286613 2026] [:error] [pid 9865:tid 9958] [client 20.215.248.211:41219] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeLXVazb5knECIY-C-jdhAAAAJU"]
[Sat Apr 18 08:59:01.862962 2026] [:error] [pid 34290:tid 34326] [client 20.215.248.211:41244] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeLXVRqX6WpmmAXOBi99BQAAAcc"]
[Sat Apr 18 08:59:02.466357 2026] [:error] [pid 34237:tid 34251] [client 20.215.248.211:12253] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeLXVhBmX4Wq5a6rxfbwtgAAAUw"]
[Sat Apr 18 08:59:03.019400 2026] [:error] [pid 9865:tid 9960] [client 20.215.248.211:40069] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeLXV6zb5knECIY-C-jdjQAAAJc"]
[Sat Apr 18 08:59:03.577452 2026] [:error] [pid 34237:tid 34245] [client 20.215.248.211:41278] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeLXVxBmX4Wq5a6rxfbwvAAAAUY"]
[Sat Apr 18 08:59:04.109665 2026] [:error] [pid 13023:tid 13041] [client 20.215.248.211:12283] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeLXWP1e7hG8DAeABB9UZQAAARA"]
[Sat Apr 18 08:59:04.639759 2026] [:error] [pid 13023:tid 13039] [client 20.215.248.211:40114] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeLXWP1e7hG8DAeABB9UbAAAAQ4"]
[Sat Apr 18 08:59:05.169221 2026] [:error] [pid 9865:tid 9938] [client 20.215.248.211:41247] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeLXWazb5knECIY-C-jdlgAAAIE"]
[Sat Apr 18 08:59:05.921947 2026] [:error] [pid 9865:tid 9954] [client 20.215.248.211:40119] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeLXWazb5knECIY-C-jdngAAAJE"]
[Sat Apr 18 08:59:06.434566 2026] [:error] [pid 34237:tid 34247] [client 20.215.248.211:17447] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeLXWhBmX4Wq5a6rxfbw2AAAAUg"]
[Sat Apr 18 08:59:06.949179 2026] [:error] [pid 9864:tid 9907] [client 20.215.248.211:41256] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeLXWoCFeowknfXHM7lfvgAAAEI"]
[Sat Apr 18 08:59:07.476840 2026] [:error] [pid 9970:tid 9977] [client 20.215.248.211:40110] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeLXWyYdRLRhVmaIMx0SbQAAAMM"]
[Sat Apr 18 08:59:08.007370 2026] [:error] [pid 9865:tid 9937] [client 20.215.248.211:17412] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeLXXKzb5knECIY-C-jdqgAAAIA"]
[Sat Apr 18 08:59:08.574736 2026] [:error] [pid 9970:tid 9986] [client 20.215.248.211:41252] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeLXXCYdRLRhVmaIMx0SeQAAAMw"]
[Sat Apr 18 08:59:09.128646 2026] [:error] [pid 34288:tid 34297] [client 20.215.248.211:41255] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeLXXeTIiy__PtiLmplScAAAAYU"]
[Sat Apr 18 08:59:09.660300 2026] [:error] [pid 34288:tid 34308] [client 20.215.248.211:12173] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLXXeTIiy__PtiLmplSdAAAAZA"]
[Sat Apr 18 08:59:10.174014 2026] [:error] [pid 9864:tid 9926] [client 20.215.248.211:40122] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLXXoCFeowknfXHM7lfxgAAAFQ"]
[Sat Apr 18 08:59:10.702749 2026] [:error] [pid 9863:tid 9895] [client 20.215.248.211:12226] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLXXjjjiypiFrTucbI19QAAABY"]
[Sat Apr 18 08:59:11.240982 2026] [:error] [pid 34290:tid 34340] [client 20.215.248.211:41271] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeLXXxqX6WpmmAXOBi99EgAAAdU"]
[Sat Apr 18 08:59:11.803354 2026] [:error] [pid 34237:tid 34242] [client 20.215.248.211:12285] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeLXXxBmX4Wq5a6rxfbw4QAAAUM"]
[Sat Apr 18 08:59:12.324093 2026] [:error] [pid 9970:tid 9974] [client 20.215.248.211:41274] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeLXYCYdRLRhVmaIMx0ShgAAAMA"]
[Sat Apr 18 08:59:12.852713 2026] [:error] [pid 9865:tid 9951] [client 20.215.248.211:17454] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeLXYKzb5knECIY-C-jdrgAAAI4"]
[Sat Apr 18 08:59:13.371205 2026] [:error] [pid 9864:tid 9917] [client 20.215.248.211:41275] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeLXYYCFeowknfXHM7lfzwAAAEs"]
[Sat Apr 18 08:59:14.021992 2026] [:error] [pid 34288:tid 34297] [client 20.215.248.211:41270] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXYuTIiy__PtiLmplShQAAAYU"]
[Sat Apr 18 08:59:14.566189 2026] [:error] [pid 34288:tid 34298] [client 20.215.248.211:41263] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXYuTIiy__PtiLmplShwAAAYY"]
[Sat Apr 18 08:59:15.179412 2026] [:error] [pid 9863:tid 9887] [client 20.215.248.211:12174] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXYzjjiypiFrTucbI1-wAAAA4"]
[Sat Apr 18 08:59:15.729489 2026] [:error] [pid 9865:tid 9944] [client 20.215.248.211:41235] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeLXY6zb5knECIY-C-jdswAAAIc"]
[Sat Apr 18 08:59:16.302537 2026] [:error] [pid 13023:tid 13042] [client 20.215.248.211:12230] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLXZP1e7hG8DAeABB9UggAAARE"]
[Sat Apr 18 08:59:16.865322 2026] [:error] [pid 13023:tid 13030] [client 20.215.248.211:17426] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLXZP1e7hG8DAeABB9UhgAAAQU"]
[Sat Apr 18 08:59:17.505720 2026] [:error] [pid 9865:tid 9958] [client 20.215.248.211:41260] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLXZazb5knECIY-C-jdtQAAAJU"]
[Sat Apr 18 08:59:18.223496 2026] [:error] [pid 34288:tid 34303] [client 20.215.248.211:41261] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeLXZuTIiy__PtiLmplSkwAAAYs"]
[Sat Apr 18 08:59:19.084050 2026] [:error] [pid 9970:tid 9997] [client 20.215.248.211:41266] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLXZyYdRLRhVmaIMx0SiwAAANc"]
[Sat Apr 18 08:59:19.751546 2026] [:error] [pid 9865:tid 9953] [client 20.215.248.211:12261] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLXZ6zb5knECIY-C-jdvQAAAJA"]
[Sat Apr 18 08:59:20.370158 2026] [:error] [pid 9865:tid 9960] [client 20.215.248.211:12227] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLXaKzb5knECIY-C-jdwgAAAJc"]
[Sat Apr 18 08:59:20.924755 2026] [:error] [pid 9865:tid 9950] [client 20.215.248.211:12287] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeLXaKzb5knECIY-C-jdxgAAAI0"]
[Sat Apr 18 08:59:21.658053 2026] [:error] [pid 9865:tid 9955] [client 20.215.248.211:41242] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeLXaazb5knECIY-C-jdywAAAJI"]
[Sat Apr 18 08:59:22.266926 2026] [:error] [pid 34237:tid 34261] [client 20.215.248.211:41222] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeLXahBmX4Wq5a6rxfbw9AAAAVY"]
[Sat Apr 18 08:59:22.884423 2026] [:error] [pid 9865:tid 9942] [client 20.215.248.211:12225] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeLXaqzb5knECIY-C-jd1QAAAIU"]
[Sat Apr 18 08:59:23.544157 2026] [:error] [pid 9865:tid 9950] [client 20.215.248.211:41276] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeLXa6zb5knECIY-C-jd3AAAAI0"]
[Sat Apr 18 08:59:24.103753 2026] [:error] [pid 9865:tid 9952] [client 20.215.248.211:41234] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeLXbKzb5knECIY-C-jd4wAAAI8"]
[Sat Apr 18 08:59:24.743308 2026] [:error] [pid 34288:tid 34302] [client 20.215.248.211:12161] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeLXbOTIiy__PtiLmplSlwAAAYo"]
[Sat Apr 18 08:59:25.398780 2026] [:error] [pid 34288:tid 34296] [client 20.215.248.211:12263] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeLXbeTIiy__PtiLmplSmgAAAYQ"]
[Sat Apr 18 08:59:25.985353 2026] [:error] [pid 34288:tid 34303] [client 20.215.248.211:12162] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "aeLXbeTIiy__PtiLmplSnwAAAYs"]
[Sat Apr 18 08:59:26.715633 2026] [:error] [pid 9864:tid 9923] [client 20.215.248.211:41241] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeLXboCFeowknfXHM7lf4gAAAFE"]
[Sat Apr 18 08:59:27.503094 2026] [:error] [pid 9864:tid 9926] [client 20.215.248.211:12277] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeLXb4CFeowknfXHM7lf4wAAAFQ"]
[Sat Apr 18 08:59:28.147443 2026] [:error] [pid 13023:tid 13039] [client 20.215.248.211:12198] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeLXcP1e7hG8DAeABB9UngAAAQ4"]
[Sat Apr 18 08:59:28.790855 2026] [:error] [pid 9863:tid 9887] [client 20.215.248.211:12178] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeLXcDjjiypiFrTucbI2CAAAAA4"]
[Sat Apr 18 08:59:29.503763 2026] [:error] [pid 9863:tid 9888] [client 20.215.248.211:12251] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeLXcTjjiypiFrTucbI2CgAAAA8"]
[Sat Apr 18 08:59:30.151512 2026] [:error] [pid 13023:tid 13037] [client 20.215.248.211:12258] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeLXcv1e7hG8DAeABB9UpAAAAQw"]
[Sat Apr 18 08:59:30.912946 2026] [:error] [pid 9865:tid 9941] [client 20.215.248.211:41249] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeLXcqzb5knECIY-C-jd6wAAAIQ"]
[Sat Apr 18 08:59:31.537071 2026] [:error] [pid 34290:tid 34337] [client 20.215.248.211:40094] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeLXcxqX6WpmmAXOBi99GwAAAdI"]
[Sat Apr 18 08:59:32.206467 2026] [:error] [pid 13023:tid 13027] [client 20.215.248.211:41269] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLXdP1e7hG8DAeABB9UrQAAAQI"]
[Sat Apr 18 08:59:33.053276 2026] [:error] [pid 9970:tid 9994] [client 20.215.248.211:12233] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLXdSYdRLRhVmaIMx0SqwAAANQ"]
[Sat Apr 18 08:59:33.747870 2026] [:error] [pid 13023:tid 13036] [client 20.215.248.211:17425] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLXdf1e7hG8DAeABB9UtwAAAQs"]
[Sat Apr 18 08:59:34.629880 2026] [:error] [pid 34288:tid 34292] [client 20.215.248.211:41225] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeLXduTIiy__PtiLmplS3QAAAYA"]
[Sat Apr 18 08:59:35.359389 2026] [:error] [pid 13023:tid 13033] [client 20.215.248.211:12276] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeLXd_1e7hG8DAeABB9UvAAAAQg"]
[Sat Apr 18 08:59:36.013203 2026] [:error] [pid 13023:tid 13031] [client 20.215.248.211:12273] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeLXeP1e7hG8DAeABB9UzQAAAQY"]
[Sat Apr 18 08:59:36.595105 2026] [:error] [pid 34288:tid 34295] [client 20.215.248.211:40120] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeLXeOTIiy__PtiLmplS6wAAAYM"]
[Sat Apr 18 08:59:37.260415 2026] [:error] [pid 34290:tid 34324] [client 20.215.248.211:41245] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "aeLXeRqX6WpmmAXOBi99IAAAAcU"]
[Sat Apr 18 08:59:38.153613 2026] [:error] [pid 34237:tid 34259] [client 20.215.248.211:12194] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeLXehBmX4Wq5a6rxfbw_QAAAVQ"]
[Sat Apr 18 08:59:39.038304 2026] [:error] [pid 9863:tid 9887] [client 20.215.248.211:12269] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeLXezjjiypiFrTucbI2LwAAAA4"]
[Sat Apr 18 08:59:39.751368 2026] [:error] [pid 13023:tid 13033] [client 20.215.248.211:17461] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeLXe_1e7hG8DAeABB9U2AAAAQg"]
[Sat Apr 18 08:59:40.474189 2026] [:error] [pid 9865:tid 9959] [client 20.215.248.211:17427] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeLXfKzb5knECIY-C-jeDgAAAJY"]
[Sat Apr 18 08:59:41.020853 2026] [:error] [pid 9865:tid 9947] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 18 08:59:41.279022 2026] [:error] [pid 9865:tid 9954] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 18 08:59:41.583477 2026] [:error] [pid 9865:tid 9937] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sat Apr 18 08:59:41.840810 2026] [:error] [pid 9865:tid 9939] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sat Apr 18 08:59:42.098611 2026] [:error] [pid 9865:tid 9943] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat Apr 18 08:59:42.356474 2026] [:error] [pid 9865:tid 9945] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Sat Apr 18 08:59:42.614571 2026] [:error] [pid 9865:tid 9944] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Sat Apr 18 08:59:42.872332 2026] [:error] [pid 9865:tid 9951] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Sat Apr 18 08:59:43.134682 2026] [:error] [pid 9865:tid 9941] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat Apr 18 08:59:43.393868 2026] [:error] [pid 9865:tid 9937] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sat Apr 18 08:59:43.653774 2026] [:error] [pid 9865:tid 9952] [client 20.215.248.211:12177] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Sat Apr 18 08:59:43.908081 2026] [:error] [pid 9865:tid 9958] [client 20.215.248.211:12177] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLXf6zb5knECIY-C-jeOwAAAJU"]
[Sat Apr 18 08:59:44.484633 2026] [:error] [pid 34237:tid 34249] [client 20.215.248.211:12179] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLXgBBmX4Wq5a6rxfbxCAAAAUo"]
[Sat Apr 18 08:59:45.032809 2026] [:error] [pid 9970:tid 9975] [client 20.215.248.211:41277] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLXgSYdRLRhVmaIMx0SuQAAAME"]
[Sat Apr 18 08:59:45.671247 2026] [:error] [pid 9970:tid 9987] [client 20.215.248.211:12272] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeLXgSYdRLRhVmaIMx0SvAAAAM0"]
[Sat Apr 18 08:59:46.206222 2026] [:error] [pid 34290:tid 34327] [client 20.215.248.211:40115] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLXghqX6WpmmAXOBi99KgAAAcg"]
[Sat Apr 18 08:59:46.744302 2026] [:error] [pid 13023:tid 13049] [client 20.215.248.211:41232] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLXgv1e7hG8DAeABB9U4QAAARg"]
[Sat Apr 18 08:59:47.262994 2026] [:error] [pid 34290:tid 34323] [client 20.215.248.211:41264] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLXgxqX6WpmmAXOBi99KwAAAcQ"]
[Sat Apr 18 08:59:47.818547 2026] [:error] [pid 13023:tid 13030] [client 20.215.248.211:41268] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeLXg_1e7hG8DAeABB9U5AAAAQU"]
[Sat Apr 18 08:59:48.329919 2026] [:error] [pid 9865:tid 9961] [client 20.215.248.211:12286] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeLXhKzb5knECIY-C-jeagAAAJg"]
[Sat Apr 18 08:59:48.858635 2026] [:error] [pid 9863:tid 9884] [client 20.215.248.211:12245] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeLXhDjjiypiFrTucbI2RQAAAAs"]
[Sat Apr 18 08:59:49.373451 2026] [:error] [pid 34237:tid 34259] [client 20.215.248.211:41267] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeLXhRBmX4Wq5a6rxfbxDQAAAVQ"]
[Sat Apr 18 08:59:49.973778 2026] [:error] [pid 34237:tid 34247] [client 20.215.248.211:12200] [client 20.215.248.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeLXhRBmX4Wq5a6rxfbxEAAAAUg"]
[Sat Apr 18 08:59:50.486597 2026] [:error] [pid 9865:tid 9959] [client 20.215.248.211:41259] [client 20.215.248.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aeLXhqzb5knECIY-C-jeggAAAJY"]
[Sat Apr 18 11:06:41.112089 2026] [:error] [pid 13023:tid 13032] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/left-sidebar.php
[Sat Apr 18 11:06:41.385535 2026] [:error] [pid 13023:tid 13035] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Sat Apr 18 11:06:41.658840 2026] [:error] [pid 13023:tid 13028] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/tk.php
[Sat Apr 18 11:06:41.925468 2026] [:error] [pid 13023:tid 13043] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 18 11:06:42.204583 2026] [:error] [pid 13023:tid 13034] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 18 11:06:42.471647 2026] [:error] [pid 13023:tid 13031] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/sd.php
[Sat Apr 18 11:06:42.754177 2026] [:error] [pid 13023:tid 13036] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Apr 18 11:06:43.302917 2026] [:error] [pid 13023:tid 13037] [client 20.91.129.11:58273] File does not exist: /usr/local/apache/htdocs/suspended-page/w3llstore.php
[Sat Apr 18 11:06:43.832184 2026] [:error] [pid 13023:tid 13042] [client 20.91.129.11:58273] [client 20.91.129.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeL1Q_1e7hG8DAeABB-C6gAAARE"]
[Sat Apr 18 11:06:46.404265 2026] [:error] [pid 34237:tid 34242] [client 20.91.129.11:61458] [client 20.91.129.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeL1RhBmX4Wq5a6rxfYepQAAAUM"]
[Sat Apr 18 11:06:49.569933 2026] [:error] [pid 9970:tid 9990] [client 20.91.129.11:43277] [client 20.91.129.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeL1SSYdRLRhVmaIMx04BAAAANA"]
[Sat Apr 18 11:06:53.755913 2026] [:error] [pid 9864:tid 9906] [client 20.91.129.11:57573] [client 20.91.129.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeL1TYCFeowknfXHM7l0jAAAAEE"]
[Sat Apr 18 15:12:06.715399 2026] [:error] [pid 9865:tid 9943] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Apr 18 15:12:08.108216 2026] [:error] [pid 9865:tid 9943] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Apr 18 15:12:08.276750 2026] [:error] [pid 9865:tid 9959] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Apr 18 15:12:08.384413 2026] [:error] [pid 9865:tid 9942] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Apr 18 15:12:08.719243 2026] [:error] [pid 9865:tid 9952] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 15:12:08.845493 2026] [:error] [pid 9865:tid 9953] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 18 15:12:08.988361 2026] [:error] [pid 9865:tid 9961] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 18 15:12:09.094301 2026] [:error] [pid 9865:tid 9951] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Apr 18 15:12:09.295366 2026] [:error] [pid 9865:tid 9955] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Apr 18 15:12:09.399606 2026] [:error] [pid 9865:tid 9956] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Apr 18 15:12:09.498671 2026] [:error] [pid 9865:tid 9946] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 18 15:12:09.615742 2026] [:error] [pid 9865:tid 9958] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Apr 18 15:12:09.734407 2026] [:error] [pid 9865:tid 9957] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Apr 18 15:12:09.834086 2026] [:error] [pid 9865:tid 9948] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Apr 18 15:12:09.933231 2026] [:error] [pid 9865:tid 9954] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Apr 18 15:12:10.029911 2026] [:error] [pid 9865:tid 9961] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 18 15:12:10.149385 2026] [:error] [pid 9865:tid 9941] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Apr 18 15:12:10.252586 2026] [:error] [pid 9865:tid 9945] [client 194.5.82.136:23365] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 18 15:12:11.898327 2026] [:error] [pid 9865:tid 9949] [client 194.5.82.136:23365] [client 194.5.82.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeMuy6zb5knECIY-C-hE0AAAAIw"]
[Sat Apr 18 15:12:12.515360 2026] [:error] [pid 9865:tid 9947] [client 194.5.82.132:23223] [client 194.5.82.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeMuzKzb5knECIY-C-hE1gAAAIo"]
[Sat Apr 18 15:12:13.119217 2026] [:error] [pid 9865:tid 9940] [client 194.5.82.116:36407] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 15:12:13.482032 2026] [:error] [pid 9865:tid 9961] [client 194.5.82.116:36407] [client 194.5.82.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeMuzazb5knECIY-C-hE4AAAAJg"]
[Sat Apr 18 15:12:13.886466 2026] [:error] [pid 9864:tid 9916] [client 194.5.82.111:42433] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Apr 18 15:12:14.002326 2026] [:error] [pid 9864:tid 9910] [client 194.5.82.111:42433] [client 194.5.82.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeMuzoCFeowknfXHM7m9MwAAAEU"]
[Sat Apr 18 15:12:14.332682 2026] [:error] [pid 9864:tid 9907] [client 194.5.82.170:28493] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Apr 18 15:12:16.316054 2026] [:error] [pid 9864:tid 9909] [client 194.5.82.170:28493] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeMu0ICFeowknfXHM7m9PAAAAEQ"]
[Sat Apr 18 15:12:16.612648 2026] [:error] [pid 9865:tid 9961] [client 194.5.82.140:50643] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeMu0Kzb5knECIY-C-hE6wAAAJg"]
[Sat Apr 18 15:12:16.854326 2026] [:error] [pid 9865:tid 9937] [client 194.5.82.159:61645] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeMu0Kzb5knECIY-C-hE7QAAAIA"]
[Sat Apr 18 15:12:17.063399 2026] [:error] [pid 34237:tid 34263] [client 194.5.82.160:63223] [client 194.5.82.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeMu0RBmX4Wq5a6rxfY-iwAAAVg"]
[Sat Apr 18 15:12:17.257985 2026] [:error] [pid 9864:tid 9922] [client 194.5.82.135:35405] [client 194.5.82.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeMu0YCFeowknfXHM7m9QAAAAFA"]
[Sat Apr 18 15:12:17.488727 2026] [:error] [pid 9864:tid 9925] [client 194.5.82.146:54615] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeMu0YCFeowknfXHM7m9QQAAAFM"]
[Sat Apr 18 15:12:17.789578 2026] [:error] [pid 34237:tid 34246] [client 194.5.82.146:58851] [client 194.5.82.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeMu0RBmX4Wq5a6rxfY-jgAAAUc"]
[Sat Apr 18 15:12:17.981918 2026] [:error] [pid 34290:tid 34320] [client 194.5.82.150:50817] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Apr 18 15:12:18.190391 2026] [:error] [pid 34290:tid 34330] [client 194.5.82.150:50817] [client 194.5.82.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aeMu0hqX6WpmmAXOBi_JIwAAAcs"]
[Sat Apr 18 15:12:18.672959 2026] [:error] [pid 9970:tid 9995] [client 194.5.82.170:60025] [client 194.5.82.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeMu0iYdRLRhVmaIMx1t_gAAANU"]
[Sat Apr 18 15:12:19.044474 2026] [:error] [pid 13023:tid 13039] [client 194.5.82.140:29845] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeMu0_1e7hG8DAeABB_FbwAAAQ4"]
[Sat Apr 18 15:12:19.320031 2026] [:error] [pid 9970:tid 9981] [client 194.5.82.159:20719] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Apr 18 15:12:19.435413 2026] [:error] [pid 9970:tid 9990] [client 194.5.82.159:20719] [client 194.5.82.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeMu0yYdRLRhVmaIMx1uAgAAANA"]
[Sat Apr 18 15:12:19.668050 2026] [:error] [pid 9970:tid 9982] [client 194.5.82.162:22399] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Apr 18 15:12:20.094418 2026] [:error] [pid 9970:tid 9994] [client 194.5.82.162:22399] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Apr 18 15:12:20.436986 2026] [:error] [pid 9970:tid 9979] [client 194.5.82.162:22399] [client 194.5.82.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeMu1CYdRLRhVmaIMx1uDAAAAMU"]
[Sat Apr 18 15:12:41.123296 2026] [autoindex:error] [pid 9970:tid 9992] [client 194.5.82.128:34737] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 18 16:11:57.541649 2026] [:error] [pid 9863:tid 9878] [client 34.145.85.172:57485] [client 34.145.85.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.145.85.172, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeM8zTjjiypiFrTucbKqaAAAAAU"]
[Sat Apr 18 16:11:57.545776 2026] [:error] [pid 9863:tid 9878] [client 34.145.85.172:57485] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 18 16:11:59.849745 2026] [:error] [pid 9863:tid 9887] [client 34.145.85.172:57485] [client 34.145.85.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aeM8zzjjiypiFrTucbKqeAAAAA4"]
[Sat Apr 18 16:12:00.218202 2026] [:error] [pid 9865:tid 9958] [client 34.145.85.172:56784] [client 34.145.85.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aeM80Kzb5knECIY-C-hTtgAAAJU"]
[Sat Apr 18 16:12:00.611926 2026] [:error] [pid 9865:tid 9942] [client 34.145.85.172:51654] [client 34.145.85.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aeM80Kzb5knECIY-C-hTuAAAAIU"]
[Sat Apr 18 16:12:00.981954 2026] [:error] [pid 9865:tid 9937] [client 34.145.85.172:49842] [client 34.145.85.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aeM80Kzb5knECIY-C-hTuwAAAIA"]
[Sat Apr 18 16:12:01.338711 2026] [:error] [pid 9865:tid 9951] [client 34.145.85.172:59665] [client 34.145.85.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aeM80azb5knECIY-C-hTvAAAAI4"]
[Sat Apr 18 16:12:01.708704 2026] [:error] [pid 9863:tid 9886] [client 34.145.85.172:58509] [client 34.145.85.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aeM80TjjiypiFrTucbKqegAAAA0"]
[Sat Apr 18 16:12:02.106975 2026] [:error] [pid 9970:tid 9989] [client 34.145.85.172:49441] [client 34.145.85.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aeM80iYdRLRhVmaIMx16WAAAAM8"]
[Sat Apr 18 21:10:48.527616 2026] [:error] [pid 9864:tid 9909] [client 43.135.145.73:39158] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeOC2ICFeowknfXHM7kkTgAAAEQ"]
[Sat Apr 18 21:58:28.996283 2026] [:error] [pid 32677:tid 32688] [client 213.35.105.89:60147] [client 213.35.105.89] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aeOOBBngmUE3LdC-wP7oXgAAAkg"]
[Sat Apr 18 23:50:36.972744 2026] [:error] [pid 9864:tid 9905] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Sat Apr 18 23:50:37.245897 2026] [:error] [pid 9864:tid 9913] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sat Apr 18 23:50:37.505430 2026] [:error] [pid 9864:tid 9919] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 18 23:50:37.763645 2026] [:error] [pid 9864:tid 9907] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 18 23:50:38.027629 2026] [:error] [pid 9864:tid 9918] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/file-kikikoko.php
[Sat Apr 18 23:50:38.288111 2026] [:error] [pid 9864:tid 9925] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Sat Apr 18 23:50:38.609647 2026] [:error] [pid 9864:tid 9906] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Sat Apr 18 23:50:38.867350 2026] [:error] [pid 9864:tid 9912] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/sad821.php
[Sat Apr 18 23:50:39.133081 2026] [:error] [pid 9864:tid 9922] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8210.php
[Sat Apr 18 23:50:39.417783 2026] [:error] [pid 9864:tid 9921] [client 20.215.251.188:7124] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sat Apr 18 23:50:39.680568 2026] [:error] [pid 9864:tid 9920] [client 20.215.251.188:7124] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeOoT4CFeowknfXHM7k7ygAAAE4"]
[Sat Apr 18 23:50:40.900166 2026] [:error] [pid 32647:tid 32674] [client 20.215.251.188:6694] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeOoUEkxooM0iRo6e545RAAAAhg"]
[Sat Apr 18 23:50:42.544223 2026] [:error] [pid 9865:tid 9951] [client 20.215.251.188:6660] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeOoUqzb5knECIY-C-izJQAAAI4"]
[Sat Apr 18 23:50:43.615744 2026] [:error] [pid 32677:tid 32684] [client 20.215.251.188:6684] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeOoUxngmUE3LdC-wP77BQAAAkQ"]
[Sat Apr 18 23:50:44.717652 2026] [:error] [pid 13023:tid 13042] [client 20.215.251.188:6656] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeOoVP1e7hG8DAeABB9WlwAAARE"]
[Sat Apr 18 23:50:45.648641 2026] [:error] [pid 32677:tid 32693] [client 20.215.251.188:7120] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeOoVRngmUE3LdC-wP77CgAAAk0"]
[Sat Apr 18 23:50:46.550580 2026] [:error] [pid 9864:tid 9916] [client 20.215.251.188:7107] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeOoVoCFeowknfXHM7k7zAAAAEo"]
[Sat Apr 18 23:50:47.405626 2026] [:error] [pid 32677:tid 32683] [client 20.215.251.188:6669] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeOoVxngmUE3LdC-wP77EQAAAkM"]
[Sat Apr 18 23:50:48.751326 2026] [:error] [pid 9863:tid 9896] [client 20.215.251.188:7128] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeOoWDjjiypiFrTucbLe_AAAABc"]
[Sat Apr 18 23:50:50.389166 2026] [:error] [pid 32647:tid 32669] [client 20.215.251.188:7041] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeOoWkkxooM0iRo6e545RgAAAhM"]
[Sat Apr 18 23:50:51.636328 2026] [:error] [pid 9864:tid 9929] [client 20.215.251.188:6658] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeOoW4CFeowknfXHM7k7zQAAAFc"]
[Sat Apr 18 23:50:53.986705 2026] [:error] [pid 13023:tid 13037] [client 20.215.251.188:7105] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeOoXf1e7hG8DAeABB9WnAAAAQw"]
[Sat Apr 18 23:50:55.370646 2026] [:error] [pid 13023:tid 13025] [client 20.215.251.188:7111] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeOoX_1e7hG8DAeABB9WoQAAAQA"]
[Sat Apr 18 23:50:56.738980 2026] [:error] [pid 9865:tid 9957] [client 20.215.251.188:6709] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeOoYKzb5knECIY-C-izPQAAAJQ"]
[Sat Apr 18 23:50:58.575830 2026] [:error] [pid 9863:tid 9875] [client 20.215.251.188:7110] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeOoYjjjiypiFrTucbLfAwAAAAI"]
[Sat Apr 18 23:51:00.652741 2026] [:error] [pid 32678:tid 32712] [client 20.215.251.188:6670] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeOoZBUlAXU_ZWUu5y8enwAAAoU"]
[Sat Apr 18 23:51:03.756762 2026] [:error] [pid 13023:tid 13037] [client 20.215.251.188:6687] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeOoZ_1e7hG8DAeABB9WsQAAAQw"]
[Sat Apr 18 23:51:04.761200 2026] [:error] [pid 13023:tid 13032] [client 20.215.251.188:6717] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeOoaP1e7hG8DAeABB9WsgAAAQc"]
[Sat Apr 18 23:51:05.723151 2026] [:error] [pid 9864:tid 9917] [client 20.215.251.188:6700] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeOoaYCFeowknfXHM7k70gAAAEs"]
[Sat Apr 18 23:51:07.678951 2026] [:error] [pid 32677:tid 32702] [client 20.215.251.188:6692] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeOoaxngmUE3LdC-wP77GQAAAlY"]
[Sat Apr 18 23:51:11.321297 2026] [:error] [pid 9864:tid 9918] [client 20.215.251.188:7144] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeOob4CFeowknfXHM7k70wAAAEw"]
[Sat Apr 18 23:51:13.133252 2026] [:error] [pid 32678:tid 32711] [client 20.215.251.188:6671] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeOocRUlAXU_ZWUu5y8eowAAAoQ"]
[Sat Apr 18 23:51:14.288991 2026] [:error] [pid 9970:tid 9978] [client 20.215.251.188:6716] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeOociYdRLRhVmaIMx37WwAAAMQ"]
[Sat Apr 18 23:51:15.564708 2026] [:error] [pid 13023:tid 13035] [client 20.215.251.188:7160] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeOoc_1e7hG8DAeABB9WwQAAAQo"]
[Sat Apr 18 23:51:16.790068 2026] [:error] [pid 9970:tid 9984] [client 20.215.251.188:6663] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeOodCYdRLRhVmaIMx37XQAAAMo"]
[Sat Apr 18 23:51:17.764606 2026] [:error] [pid 32678:tid 32713] [client 20.215.251.188:7131] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeOodRUlAXU_ZWUu5y8epgAAAoY"]
[Sat Apr 18 23:51:18.631952 2026] [:error] [pid 13023:tid 13031] [client 20.215.251.188:6681] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeOodv1e7hG8DAeABB9WyQAAAQY"]
[Sat Apr 18 23:51:19.245130 2026] [:error] [pid 32678:tid 32707] [client 20.215.251.188:7146] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeOodxUlAXU_ZWUu5y8erAAAAoA"]
[Sat Apr 18 23:51:19.968428 2026] [:error] [pid 32678:tid 32727] [client 20.215.251.188:6668] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeOodxUlAXU_ZWUu5y8erwAAApQ"]
[Sat Apr 18 23:51:21.166520 2026] [:error] [pid 13023:tid 13041] [client 20.215.251.188:6685] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeOoef1e7hG8DAeABB9WywAAARA"]
[Sat Apr 18 23:51:21.825057 2026] [:error] [pid 13023:tid 13048] [client 20.215.251.188:6675] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeOoef1e7hG8DAeABB9WzQAAARc"]
[Sat Apr 18 23:51:22.790475 2026] [:error] [pid 13023:tid 13047] [client 20.215.251.188:6657] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeOoev1e7hG8DAeABB9W0QAAARY"]
[Sat Apr 18 23:51:24.121280 2026] [:error] [pid 9970:tid 9985] [client 20.215.251.188:6713] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeOofCYdRLRhVmaIMx37ZAAAAMs"]
[Sat Apr 18 23:51:24.920715 2026] [:error] [pid 9970:tid 9975] [client 20.215.251.188:6664] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeOofCYdRLRhVmaIMx37ZQAAAME"]
[Sat Apr 18 23:51:26.940675 2026] [:error] [pid 32678:tid 32726] [client 20.215.251.188:7119] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeOofhUlAXU_ZWUu5y8etwAAApM"]
[Sat Apr 18 23:51:27.935569 2026] [:error] [pid 32678:tid 32719] [client 20.215.251.188:7118] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeOofxUlAXU_ZWUu5y8euQAAAow"]
[Sat Apr 18 23:51:28.836149 2026] [:error] [pid 9863:tid 9891] [client 20.215.251.188:6710] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeOogDjjiypiFrTucbLfCQAAABI"]
[Sat Apr 18 23:51:30.257578 2026] [:error] [pid 9970:tid 9988] [client 20.215.251.188:7072] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeOogiYdRLRhVmaIMx37bAAAAM4"]
[Sat Apr 18 23:51:31.295818 2026] [:error] [pid 9970:tid 9997] [client 20.215.251.188:6693] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeOogyYdRLRhVmaIMx37cAAAANc"]
[Sat Apr 18 23:51:32.673830 2026] [:error] [pid 9970:tid 9988] [client 20.215.251.188:7112] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeOohCYdRLRhVmaIMx37eAAAAM4"]
[Sat Apr 18 23:51:34.542738 2026] [:error] [pid 9864:tid 9909] [client 20.215.251.188:6667] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeOohoCFeowknfXHM7k73wAAAEQ"]
[Sat Apr 18 23:51:35.738071 2026] [:error] [pid 9865:tid 9946] [client 20.215.251.188:7132] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeOoh6zb5knECIY-C-izRQAAAIk"]
[Sat Apr 18 23:51:36.594246 2026] [:error] [pid 13023:tid 13048] [client 20.215.251.188:6696] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeOoiP1e7hG8DAeABB9W1QAAARc"]
[Sat Apr 18 23:51:37.205696 2026] [:error] [pid 13023:tid 13038] [client 20.215.251.188:6677] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeOoif1e7hG8DAeABB9W1wAAAQ0"]
[Sat Apr 18 23:51:37.934537 2026] [:error] [pid 9864:tid 9914] [client 20.215.251.188:6688] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aeOoiYCFeowknfXHM7k74wAAAEg"]
[Sat Apr 18 23:51:38.526949 2026] [:error] [pid 9864:tid 9928] [client 20.215.251.188:6673] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aeOoioCFeowknfXHM7k75QAAAFY"]
[Sat Apr 18 23:51:39.244894 2026] [:error] [pid 9864:tid 9905] [client 20.215.251.188:6695] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Sat Apr 18 23:51:39.509464 2026] [:error] [pid 9864:tid 9918] [client 20.215.251.188:6695] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Sat Apr 18 23:51:39.795856 2026] [:error] [pid 9864:tid 9907] [client 20.215.251.188:6695] [client 20.215.251.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aeOoi4CFeowknfXHM7k76wAAAEI"]
[Sat Apr 18 23:51:40.652766 2026] [:error] [pid 9864:tid 9916] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 18 23:51:40.961166 2026] [:error] [pid 9864:tid 9908] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 18 23:51:41.219010 2026] [:error] [pid 9864:tid 9912] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sat Apr 18 23:51:41.477578 2026] [:error] [pid 9864:tid 9914] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sat Apr 18 23:51:41.747440 2026] [:error] [pid 9864:tid 9928] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sat Apr 18 23:51:42.005224 2026] [:error] [pid 9864:tid 9910] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 23:51:42.264218 2026] [:error] [pid 9864:tid 9905] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Sat Apr 18 23:51:42.521795 2026] [:error] [pid 9864:tid 9918] [client 20.215.251.188:7148] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 18 23:51:42.786837 2026] [:error] [pid 9864:tid 9907] [client 20.215.251.188:7148] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeOojoCFeowknfXHM7k7-QAAAEI"]
[Sat Apr 18 23:51:44.218702 2026] [:error] [pid 9865:tid 9954] [client 20.215.251.188:6689] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeOokKzb5knECIY-C-izRgAAAJE"]
[Sat Apr 18 23:51:45.352950 2026] [:error] [pid 32678:tid 32718] [client 20.215.251.188:7134] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeOokRUlAXU_ZWUu5y8evQAAAos"]
[Sat Apr 18 23:51:46.060053 2026] [:error] [pid 9864:tid 9915] [client 20.215.251.188:7141] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeOokoCFeowknfXHM7k7_AAAAEk"]
[Sat Apr 18 23:51:47.230989 2026] [:error] [pid 34290:tid 34334] [client 20.215.251.188:6701] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeOokxqX6WpmmAXOBi8yuwAAAc8"]
[Sat Apr 18 23:51:48.381491 2026] [:error] [pid 32678:tid 32717] [client 20.215.251.188:7059] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeOolBUlAXU_ZWUu5y8eygAAAoo"]
[Sat Apr 18 23:51:49.231032 2026] [:error] [pid 32678:tid 32718] [client 20.215.251.188:6682] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeOolRUlAXU_ZWUu5y8e0AAAAos"]
[Sat Apr 18 23:51:50.105346 2026] [:error] [pid 9970:tid 9994] [client 20.215.251.188:6719] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeOoliYdRLRhVmaIMx37hAAAANQ"]
[Sat Apr 18 23:51:51.531762 2026] [:error] [pid 34290:tid 34330] [client 20.215.251.188:7055] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeOolxqX6WpmmAXOBi8yvQAAAcs"]
[Sat Apr 18 23:51:52.233527 2026] [:error] [pid 9864:tid 9922] [client 20.215.251.188:7150] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeOomICFeowknfXHM7k8AQAAAFA"]
[Sat Apr 18 23:51:53.577161 2026] [:error] [pid 9864:tid 9916] [client 20.215.251.188:6711] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeOomYCFeowknfXHM7k8BAAAAEo"]
[Sat Apr 18 23:51:54.782055 2026] [:error] [pid 34290:tid 34322] [client 20.215.251.188:6698] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeOomhqX6WpmmAXOBi8yvgAAAcM"]
[Sat Apr 18 23:51:55.610053 2026] [:error] [pid 32677:tid 32684] [client 20.215.251.188:7158] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeOomxngmUE3LdC-wP77JgAAAkQ"]
[Sat Apr 18 23:51:57.103292 2026] [:error] [pid 9970:tid 9974] [client 20.215.251.188:6690] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeOonSYdRLRhVmaIMx37hQAAAMA"]
[Sat Apr 18 23:51:59.341434 2026] [:error] [pid 9864:tid 9918] [client 20.215.251.188:7049] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeOon4CFeowknfXHM7k8DAAAAEw"]
[Sat Apr 18 23:52:01.076270 2026] [:error] [pid 13023:tid 13039] [client 20.215.251.188:7071] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeOoof1e7hG8DAeABB9W2wAAAQ4"]
[Sat Apr 18 23:52:02.218397 2026] [:error] [pid 9970:tid 9976] [client 20.215.251.188:7142] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeOooiYdRLRhVmaIMx37hwAAAMI"]
[Sat Apr 18 23:52:02.942043 2026] [:error] [pid 13023:tid 13026] [client 20.215.251.188:7077] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeOoov1e7hG8DAeABB9W3QAAAQE"]
[Sat Apr 18 23:52:03.743359 2026] [:error] [pid 13023:tid 13044] [client 20.215.251.188:6683] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeOoo_1e7hG8DAeABB9W3wAAARM"]
[Sat Apr 18 23:52:05.044611 2026] [:error] [pid 9970:tid 9992] [client 20.215.251.188:7157] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeOopSYdRLRhVmaIMx37iwAAANI"]
[Sat Apr 18 23:52:05.647106 2026] [:error] [pid 9864:tid 9924] [client 20.215.251.188:6702] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeOopYCFeowknfXHM7k8EQAAAFI"]
[Sat Apr 18 23:52:06.613787 2026] [:error] [pid 9863:tid 9891] [client 20.215.251.188:7121] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeOopjjjiypiFrTucbLfIwAAABI"]
[Sat Apr 18 23:52:07.623375 2026] [:error] [pid 34290:tid 34319] [client 20.215.251.188:7042] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeOopxqX6WpmmAXOBi8yxgAAAcA"]
[Sat Apr 18 23:52:08.939865 2026] [:error] [pid 9864:tid 9909] [client 20.215.251.188:7064] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeOoqICFeowknfXHM7k8EgAAAEQ"]
[Sat Apr 18 23:52:12.261557 2026] [:error] [pid 32677:tid 32690] [client 20.215.251.188:7067] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeOorBngmUE3LdC-wP77MAAAAko"]
[Sat Apr 18 23:52:13.963169 2026] [:error] [pid 13023:tid 13046] [client 20.215.251.188:7139] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeOorf1e7hG8DAeABB9W6wAAARU"]
[Sat Apr 18 23:52:14.898356 2026] [:error] [pid 32647:tid 32654] [client 20.215.251.188:6679] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeOorkkxooM0iRo6e545WAAAAgQ"]
[Sat Apr 18 23:52:16.485844 2026] [:error] [pid 9970:tid 9978] [client 20.215.251.188:6712] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeOosCYdRLRhVmaIMx37lAAAAMQ"]
[Sat Apr 18 23:52:17.329217 2026] [:error] [pid 9970:tid 9985] [client 20.215.251.188:7074] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeOosSYdRLRhVmaIMx37mAAAAMs"]
[Sat Apr 18 23:52:18.391443 2026] [:error] [pid 9970:tid 9987] [client 20.215.251.188:6665] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeOosiYdRLRhVmaIMx37mgAAAM0"]
[Sat Apr 18 23:52:19.815963 2026] [:error] [pid 32647:tid 32663] [client 20.215.251.188:6703] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeOos0kxooM0iRo6e545WwAAAg0"]
[Sat Apr 18 23:52:21.375111 2026] [:error] [pid 34290:tid 34341] [client 20.215.251.188:6697] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeOotRqX6WpmmAXOBi8yzwAAAdY"]
[Sat Apr 18 23:52:22.097249 2026] [:error] [pid 32647:tid 32662] [client 20.215.251.188:7114] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeOotkkxooM0iRo6e545XwAAAgw"]
[Sat Apr 18 23:52:23.508816 2026] [:error] [pid 32647:tid 32655] [client 20.215.251.188:6705] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeOot0kxooM0iRo6e545YgAAAgU"]
[Sat Apr 18 23:52:24.653207 2026] [:error] [pid 13023:tid 13045] [client 20.215.251.188:6686] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeOouP1e7hG8DAeABB9W-AAAARQ"]
[Sat Apr 18 23:52:25.893074 2026] [:error] [pid 9864:tid 9914] [client 20.215.251.188:7106] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeOouYCFeowknfXHM7k8HQAAAEg"]
[Sat Apr 18 23:52:29.148117 2026] [:error] [pid 9970:tid 9984] [client 20.215.251.188:7149] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aeOovSYdRLRhVmaIMx37tQAAAMo"]
[Sat Apr 18 23:52:30.047960 2026] [:error] [pid 32678:tid 32723] [client 20.215.251.188:7007] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aeOovhUlAXU_ZWUu5y8e6AAAApA"]
[Sat Apr 18 23:52:31.060028 2026] [:error] [pid 9865:tid 9945] [client 20.215.251.188:7084] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aeOov6zb5knECIY-C-izUQAAAIg"]
[Sat Apr 18 23:52:35.999154 2026] [:error] [pid 34288:tid 34299] [client 20.215.251.188:6676] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "aeOow-TIiy__PtiLmpniqQAAAYc"]
[Sat Apr 18 23:52:40.122560 2026] [:error] [pid 32677:tid 32699] [client 20.215.251.188:7050] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aeOoyBngmUE3LdC-wP77OAAAAlM"]
[Sat Apr 18 23:52:42.469744 2026] [:error] [pid 32677:tid 32697] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Apr 18 23:52:43.084754 2026] [:error] [pid 32677:tid 32689] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 23:52:43.357117 2026] [:error] [pid 32677:tid 32691] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sat Apr 18 23:52:43.614856 2026] [:error] [pid 32677:tid 32693] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Sat Apr 18 23:52:43.885745 2026] [:error] [pid 32677:tid 32694] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 18 23:52:44.154105 2026] [:error] [pid 32677:tid 32683] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 18 23:52:44.412123 2026] [:error] [pid 32677:tid 32681] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 23:52:44.716905 2026] [:error] [pid 32677:tid 32688] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sat Apr 18 23:52:44.974389 2026] [:error] [pid 32677:tid 32680] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat Apr 18 23:52:45.231686 2026] [:error] [pid 32677:tid 32686] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat Apr 18 23:52:45.494056 2026] [:error] [pid 32677:tid 32704] [client 20.215.251.188:6707] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Sat Apr 18 23:52:45.781371 2026] [:error] [pid 32677:tid 32702] [client 20.215.251.188:6707] [client 20.215.251.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeOozRngmUE3LdC-wP77SAAAAlY"]
[Sat Apr 18 23:52:47.987469 2026] [:error] [pid 9970:tid 9986] [client 20.215.251.188:7164] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeOozyYdRLRhVmaIMx37yQAAAMw"]
[Sat Apr 18 23:52:50.545804 2026] [:error] [pid 9865:tid 9960] [client 20.215.251.188:7161] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeOo0qzb5knECIY-C-izZgAAAJc"]
[Sat Apr 18 23:52:51.687843 2026] [:error] [pid 9970:tid 9993] [client 20.215.251.188:7060] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeOo0yYdRLRhVmaIMx37zQAAANM"]
[Sat Apr 18 23:52:52.526159 2026] [:error] [pid 9970:tid 9983] [client 20.215.251.188:7051] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeOo1CYdRLRhVmaIMx370AAAAMk"]
[Sat Apr 18 23:52:54.019070 2026] [:error] [pid 9864:tid 9928] [client 20.215.251.188:6982] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeOo1oCFeowknfXHM7k8MAAAAFY"]
[Sat Apr 18 23:52:55.316048 2026] [:error] [pid 9864:tid 9919] [client 20.215.251.188:7115] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeOo14CFeowknfXHM7k8MgAAAE0"]
[Sat Apr 18 23:52:56.071603 2026] [:error] [pid 9970:tid 9983] [client 20.215.251.188:7043] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeOo2CYdRLRhVmaIMx372AAAAMk"]
[Sat Apr 18 23:52:57.863183 2026] [:error] [pid 9863:tid 9895] [client 20.215.251.188:7070] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeOo2TjjiypiFrTucbLfMQAAABY"]
[Sat Apr 18 23:52:59.028249 2026] [:error] [pid 9970:tid 9997] [client 20.215.251.188:6718] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeOo2yYdRLRhVmaIMx374AAAANc"]
[Sat Apr 18 23:53:00.362992 2026] [:error] [pid 9865:tid 9948] [client 20.215.251.188:6980] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeOo3Kzb5knECIY-C-izawAAAIs"]
[Sat Apr 18 23:53:01.859729 2026] [:error] [pid 32678:tid 32717] [client 20.215.251.188:7056] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeOo3RUlAXU_ZWUu5y8e_AAAAoo"]
[Sat Apr 18 23:53:02.970735 2026] [:error] [pid 9863:tid 9878] [client 20.215.251.188:6976] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeOo3jjjiypiFrTucbLfNAAAAAU"]
[Sat Apr 18 23:53:04.631508 2026] [:error] [pid 9970:tid 9990] [client 20.215.251.188:7123] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeOo4CYdRLRhVmaIMx375gAAANA"]
[Sat Apr 18 23:53:06.484342 2026] [:error] [pid 9865:tid 9942] [client 20.215.251.188:6659] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeOo4qzb5knECIY-C-izdwAAAIU"]
[Sat Apr 18 23:53:08.297150 2026] [:error] [pid 9970:tid 9987] [client 20.215.251.188:7126] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeOo5CYdRLRhVmaIMx378AAAAM0"]
[Sat Apr 18 23:53:09.627979 2026] [:error] [pid 9865:tid 9960] [client 20.215.251.188:7062] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeOo5azb5knECIY-C-izfgAAAJc"]
[Sat Apr 18 23:53:10.591817 2026] [:error] [pid 32677:tid 32686] [client 20.215.251.188:7152] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeOo5hngmUE3LdC-wP77TAAAAkY"]
[Sat Apr 18 23:53:11.281552 2026] [:error] [pid 13023:tid 13030] [client 20.215.251.188:6680] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeOo5_1e7hG8DAeABB9XCAAAAQU"]
[Sat Apr 18 23:53:11.946119 2026] [:error] [pid 34288:tid 34309] [client 20.215.251.188:7040] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeOo5-TIiy__PtiLmpnitQAAAZE"]
[Sat Apr 18 23:53:12.654300 2026] [:error] [pid 9864:tid 9929] [client 20.215.251.188:7113] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeOo6ICFeowknfXHM7k8NgAAAFc"]
[Sat Apr 18 23:53:13.717942 2026] [:error] [pid 32647:tid 32654] [client 20.215.251.188:7145] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeOo6UkxooM0iRo6e545fwAAAgQ"]
[Sat Apr 18 23:53:14.313598 2026] [:error] [pid 9863:tid 9888] [client 20.215.251.188:7133] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeOo6jjjiypiFrTucbLfNgAAAA8"]
[Sat Apr 18 23:53:15.081040 2026] [:error] [pid 9864:tid 9913] [client 20.215.251.188:7162] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeOo64CFeowknfXHM7k8NwAAAEc"]
[Sat Apr 18 23:53:16.153661 2026] [:error] [pid 9970:tid 9980] [client 20.215.251.188:7108] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeOo7CYdRLRhVmaIMx38BgAAAMY"]
[Sat Apr 18 23:53:17.640977 2026] [:error] [pid 32647:tid 32666] [client 20.215.251.188:6691] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeOo7UkxooM0iRo6e545gAAAAhA"]
[Sat Apr 18 23:53:18.483598 2026] [:error] [pid 9970:tid 9982] [client 20.215.251.188:6714] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeOo7iYdRLRhVmaIMx38GQAAAMg"]
[Sat Apr 18 23:53:19.057715 2026] [:error] [pid 9970:tid 9977] [client 20.215.251.188:6979] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeOo7yYdRLRhVmaIMx38HAAAAMM"]
[Sat Apr 18 23:53:19.593195 2026] [:error] [pid 9970:tid 9997] [client 20.215.251.188:6706] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aeOo7yYdRLRhVmaIMx38IgAAANc"]
[Sat Apr 18 23:53:20.214138 2026] [:error] [pid 9970:tid 9982] [client 20.215.251.188:7154] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeOo8CYdRLRhVmaIMx38KAAAAMg"]
[Sat Apr 18 23:53:20.950421 2026] [:error] [pid 9970:tid 9996] [client 20.215.251.188:7054] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeOo8CYdRLRhVmaIMx38LwAAANY"]
[Sat Apr 18 23:53:21.998166 2026] [:error] [pid 13023:tid 13041] [client 20.215.251.188:7096] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeOo8f1e7hG8DAeABB9XFAAAARA"]
[Sat Apr 18 23:53:22.892471 2026] [:error] [pid 13023:tid 13028] [client 20.215.251.188:6708] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeOo8v1e7hG8DAeABB9XFQAAAQM"]
[Sat Apr 18 23:53:23.531640 2026] [:error] [pid 13023:tid 13032] [client 20.215.251.188:7130] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeOo8_1e7hG8DAeABB9XFwAAAQc"]
[Sat Apr 18 23:53:24.162110 2026] [:error] [pid 13023:tid 13035] [client 20.215.251.188:7104] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeOo9P1e7hG8DAeABB9XGQAAAQo"]
[Sat Apr 18 23:53:24.881192 2026] [:error] [pid 9865:tid 9950] [client 20.215.251.188:7127] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeOo9Kzb5knECIY-C-izjQAAAI0"]
[Sat Apr 18 23:53:25.466292 2026] [:error] [pid 9970:tid 9981] [client 20.215.251.188:7079] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeOo9SYdRLRhVmaIMx38QwAAAMc"]
[Sat Apr 18 23:53:26.105923 2026] [:error] [pid 9970:tid 9976] [client 20.215.251.188:7155] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeOo9iYdRLRhVmaIMx38RgAAAMI"]
[Sat Apr 18 23:53:26.806250 2026] [:error] [pid 9970:tid 9987] [client 20.215.251.188:7159] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeOo9iYdRLRhVmaIMx38SgAAAM0"]
[Sat Apr 18 23:53:27.467830 2026] [:error] [pid 13023:tid 13045] [client 20.215.251.188:6995] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeOo9_1e7hG8DAeABB9XHQAAARQ"]
[Sat Apr 18 23:53:28.063510 2026] [:error] [pid 9970:tid 9984] [client 20.215.251.188:6715] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeOo-CYdRLRhVmaIMx38TAAAAMo"]
[Sat Apr 18 23:53:28.634848 2026] [:error] [pid 9970:tid 9976] [client 20.215.251.188:7094] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeOo-CYdRLRhVmaIMx38TwAAAMI"]
[Sat Apr 18 23:53:29.305186 2026] [:error] [pid 9970:tid 9994] [client 20.215.251.188:7109] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeOo-SYdRLRhVmaIMx38UAAAANQ"]
[Sat Apr 18 23:53:29.939668 2026] [:error] [pid 32678:tid 32731] [client 20.215.251.188:7000] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeOo-RUlAXU_ZWUu5y8fCwAAApg"]
[Sat Apr 18 23:53:30.636105 2026] [:error] [pid 32677:tid 32692] [client 20.215.251.188:6699] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeOo-hngmUE3LdC-wP77WwAAAkw"]
[Sat Apr 18 23:53:31.496315 2026] [:error] [pid 9865:tid 9939] [client 20.215.251.188:7023] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeOo-6zb5knECIY-C-izkAAAAII"]
[Sat Apr 18 23:53:33.016816 2026] [:error] [pid 9970:tid 9976] [client 20.215.251.188:6924] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeOo_SYdRLRhVmaIMx38VgAAAMI"]
[Sat Apr 18 23:53:34.923438 2026] [:error] [pid 13023:tid 13037] [client 20.215.251.188:7089] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeOo_v1e7hG8DAeABB9XJgAAAQw"]
[Sat Apr 18 23:53:39.071959 2026] [:error] [pid 9970:tid 9998] [client 20.215.251.188:7081] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeOpAyYdRLRhVmaIMx38ZgAAANg"]
[Sat Apr 18 23:53:40.361920 2026] [:error] [pid 9864:tid 9925] [client 20.215.251.188:7163] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeOpBICFeowknfXHM7k8PwAAAFM"]
[Sat Apr 18 23:53:41.438322 2026] [:error] [pid 9970:tid 9994] [client 20.215.251.188:6988] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeOpBSYdRLRhVmaIMx38agAAANQ"]
[Sat Apr 18 23:53:42.672929 2026] [:error] [pid 32678:tid 32722] [client 20.215.251.188:7052] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeOpBhUlAXU_ZWUu5y8fEAAAAo8"]
[Sat Apr 18 23:53:43.593729 2026] [:error] [pid 32647:tid 32650] [client 20.215.251.188:6977] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeOpB0kxooM0iRo6e545igAAAgA"]
[Sat Apr 18 23:53:44.693219 2026] [:error] [pid 9970:tid 9987] [client 20.215.251.188:7083] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aeOpCCYdRLRhVmaIMx38bwAAAM0"]
[Sat Apr 18 23:53:45.839581 2026] [:error] [pid 9970:tid 9993] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Apr 18 23:53:46.096939 2026] [:error] [pid 9970:tid 9996] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat Apr 18 23:53:46.366757 2026] [:error] [pid 9970:tid 9975] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 23:53:46.624784 2026] [:error] [pid 9970:tid 9997] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sat Apr 18 23:53:46.882162 2026] [:error] [pid 9970:tid 9989] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sat Apr 18 23:53:47.148766 2026] [:error] [pid 9970:tid 9994] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 23:53:47.419859 2026] [:error] [pid 9970:tid 9982] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sat Apr 18 23:53:47.677636 2026] [:error] [pid 9970:tid 9980] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Apr 18 23:53:47.949775 2026] [:error] [pid 9970:tid 9976] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Sat Apr 18 23:53:48.216763 2026] [:error] [pid 9970:tid 9985] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Sat Apr 18 23:53:48.474523 2026] [:error] [pid 9970:tid 9981] [client 20.215.251.188:7015] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Sat Apr 18 23:53:48.870132 2026] [:error] [pid 9970:tid 9990] [client 20.215.251.188:7015] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeOpDCYdRLRhVmaIMx38fQAAANA"]
[Sat Apr 18 23:53:49.506487 2026] [:error] [pid 13023:tid 13032] [client 20.215.251.188:7129] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeOpDf1e7hG8DAeABB9XMQAAAQc"]
[Sat Apr 18 23:53:50.152297 2026] [:error] [pid 9970:tid 9979] [client 20.215.251.188:7082] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeOpDiYdRLRhVmaIMx38fwAAAMU"]
[Sat Apr 18 23:53:50.793937 2026] [:error] [pid 9970:tid 9987] [client 20.215.251.188:7116] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeOpDiYdRLRhVmaIMx38gAAAAM0"]
[Sat Apr 18 23:53:51.575380 2026] [:error] [pid 9970:tid 9992] [client 20.215.251.188:7143] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gz.php"] [unique_id "aeOpDyYdRLRhVmaIMx38gQAAANI"]
[Sat Apr 18 23:53:52.231615 2026] [:error] [pid 34288:tid 34315] [client 20.215.251.188:6704] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gz.php"] [unique_id "aeOpEOTIiy__PtiLmpnivgAAAZc"]
[Sat Apr 18 23:53:53.237205 2026] [:error] [pid 9970:tid 9996] [client 20.215.251.188:7138] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gz.php"] [unique_id "aeOpESYdRLRhVmaIMx38hgAAANY"]
[Sat Apr 18 23:54:05.992539 2026] [:error] [pid 32677:tid 32687] [client 20.215.251.188:7125] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeOpHRngmUE3LdC-wP77awAAAkc"]
[Sat Apr 18 23:54:07.366337 2026] [:error] [pid 9970:tid 9997] [client 20.215.251.188:7075] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeOpHyYdRLRhVmaIMx38pAAAANc"]
[Sat Apr 18 23:54:08.727309 2026] [:error] [pid 9864:tid 9926] [client 20.215.251.188:7044] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeOpIICFeowknfXHM7k8QAAAAFQ"]
[Sat Apr 18 23:54:09.877874 2026] [:error] [pid 34290:tid 34327] [client 20.215.251.188:6666] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeOpIRqX6WpmmAXOBi8y_AAAAcg"]
[Sat Apr 18 23:54:10.849505 2026] [:error] [pid 9864:tid 9929] [client 20.215.251.188:7036] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeOpIoCFeowknfXHM7k8RAAAAFc"]
[Sat Apr 18 23:54:11.893505 2026] [:error] [pid 32677:tid 32700] [client 20.215.251.188:7014] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeOpIxngmUE3LdC-wP77bwAAAlQ"]
[Sat Apr 18 23:54:12.677460 2026] [:error] [pid 34290:tid 34328] [client 20.215.251.188:7147] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeOpJBqX6WpmmAXOBi8y_QAAAck"]
[Sat Apr 18 23:54:14.574281 2026] [:error] [pid 9970:tid 9983] [client 20.215.251.188:7151] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeOpJiYdRLRhVmaIMx38ugAAAMk"]
[Sat Apr 18 23:54:15.519084 2026] [:error] [pid 34288:tid 34314] [client 20.215.251.188:7122] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeOpJ-TIiy__PtiLmpniwgAAAZY"]
[Sat Apr 18 23:54:16.925870 2026] [:error] [pid 34290:tid 34321] [client 20.215.251.188:7098] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeOpKBqX6WpmmAXOBi8y_gAAAcI"]
[Sat Apr 18 23:54:18.586179 2026] [:error] [pid 9865:tid 9960] [client 20.215.251.188:6928] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeOpKqzb5knECIY-C-izuAAAAJc"]
[Sat Apr 18 23:54:19.251251 2026] [:error] [pid 9970:tid 9990] [client 20.215.251.188:7068] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeOpKyYdRLRhVmaIMx38wAAAANA"]
[Sat Apr 18 23:54:20.012881 2026] [:error] [pid 13023:tid 13031] [client 20.215.251.188:7137] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeOpLP1e7hG8DAeABB9XPAAAAQY"]
[Sat Apr 18 23:54:20.899434 2026] [:error] [pid 32647:tid 32662] [client 20.215.251.188:6987] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeOpLEkxooM0iRo6e545mAAAAgw"]
[Sat Apr 18 23:54:22.404801 2026] [:error] [pid 9863:tid 9889] [client 20.215.251.188:7117] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeOpLjjjiypiFrTucbLfYgAAABA"]
[Sat Apr 18 23:54:23.575284 2026] [:error] [pid 13023:tid 13035] [client 20.215.251.188:7156] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeOpL_1e7hG8DAeABB9XQAAAAQo"]
[Sat Apr 18 23:54:24.998206 2026] [:error] [pid 9863:tid 9881] [client 20.215.251.188:7135] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeOpMDjjiypiFrTucbLfZQAAAAg"]
[Sat Apr 18 23:54:25.893065 2026] [:error] [pid 9865:tid 9945] [client 20.215.251.188:7046] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeOpMazb5knECIY-C-iz1AAAAIg"]
[Sat Apr 18 23:54:26.913045 2026] [:error] [pid 34290:tid 34334] [client 20.215.251.188:7167] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeOpMhqX6WpmmAXOBi8zBwAAAc8"]
[Sat Apr 18 23:54:27.671398 2026] [:error] [pid 13023:tid 13044] [client 20.215.251.188:7065] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeOpM_1e7hG8DAeABB9XRAAAARM"]
[Sat Apr 18 23:54:28.402139 2026] [:error] [pid 13023:tid 13033] [client 20.215.251.188:7003] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOpNP1e7hG8DAeABB9XRgAAAQg"]
[Sat Apr 18 23:54:29.223941 2026] [:error] [pid 9863:tid 9892] [client 20.215.251.188:6972] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOpNTjjiypiFrTucbLfaAAAABM"]
[Sat Apr 18 23:54:30.487515 2026] [:error] [pid 9863:tid 9874] [client 20.215.251.188:6661] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOpNjjjiypiFrTucbLfbAAAAAE"]
[Sat Apr 18 23:54:31.164078 2026] [:error] [pid 34290:tid 34324] [client 20.215.251.188:6989] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeOpNxqX6WpmmAXOBi8zDQAAAcU"]
[Sat Apr 18 23:54:32.124014 2026] [:error] [pid 9970:tid 9998] [client 20.215.251.188:7048] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeOpOCYdRLRhVmaIMx38zQAAANg"]
[Sat Apr 18 23:54:33.436497 2026] [:error] [pid 9865:tid 9939] [client 20.215.251.188:7069] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeOpOazb5knECIY-C-iz1wAAAII"]
[Sat Apr 18 23:54:35.204605 2026] [:error] [pid 9970:tid 9980] [client 20.215.251.188:6931] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeOpOyYdRLRhVmaIMx380QAAAMY"]
[Sat Apr 18 23:54:36.555879 2026] [:error] [pid 13023:tid 13026] [client 20.215.251.188:7086] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeOpPP1e7hG8DAeABB9XTAAAAQE"]
[Sat Apr 18 23:54:38.132265 2026] [:error] [pid 9865:tid 9941] [client 20.215.251.188:7092] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeOpPqzb5knECIY-C-iz2gAAAIQ"]
[Sat Apr 18 23:54:39.360419 2026] [:error] [pid 13023:tid 13044] [client 20.215.251.188:7106] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeOpP_1e7hG8DAeABB9XUAAAARM"]
[Sat Apr 18 23:54:40.142801 2026] [:error] [pid 9970:tid 9997] [client 20.215.251.188:7103] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeOpQCYdRLRhVmaIMx383wAAANc"]
[Sat Apr 18 23:54:40.967447 2026] [:error] [pid 32647:tid 32654] [client 20.215.251.188:7095] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeOpQEkxooM0iRo6e545oAAAAgQ"]
[Sat Apr 18 23:54:42.345624 2026] [:error] [pid 9970:tid 9983] [client 20.215.251.188:6917] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeOpQiYdRLRhVmaIMx385QAAAMk"]
[Sat Apr 18 23:54:43.320938 2026] [:error] [pid 9970:tid 9986] [client 20.215.251.188:7166] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeOpQyYdRLRhVmaIMx386AAAAMw"]
[Sat Apr 18 23:54:44.310894 2026] [:error] [pid 9970:tid 9981] [client 20.215.251.188:6985] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeOpRCYdRLRhVmaIMx386wAAAMc"]
[Sat Apr 18 23:54:45.020292 2026] [:error] [pid 9865:tid 9947] [client 20.215.251.188:7035] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeOpRazb5knECIY-C-iz4AAAAIo"]
[Sat Apr 18 23:54:46.826307 2026] [:error] [pid 9864:tid 9912] [client 20.215.251.188:7078] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeOpRoCFeowknfXHM7k8TwAAAEY"]
[Sat Apr 18 23:54:47.879374 2026] [:error] [pid 9864:tid 9905] [client 20.215.251.188:7097] [client 20.215.251.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeOpR4CFeowknfXHM7k8UgAAAEA"]
[Sat Apr 18 23:54:49.076586 2026] [:error] [pid 32647:tid 32652] [client 20.215.251.188:6678] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 18 23:54:49.340669 2026] [:error] [pid 32647:tid 32660] [client 20.215.251.188:6678] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Sat Apr 18 23:54:49.598999 2026] [:error] [pid 32647:tid 32655] [client 20.215.251.188:6678] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Sat Apr 18 23:54:49.861568 2026] [:error] [pid 32647:tid 32656] [client 20.215.251.188:6678] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Sun Apr 19 03:03:01.953105 2026] [:error] [pid 41277:tid 41281] [client 103.125.235.24:30889] [client 103.125.235.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.125.235.24, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aePVZUH3ayszMLZYflsL4wAAAYI"]
[Sun Apr 19 03:03:01.958450 2026] [:error] [pid 41277:tid 41281] [client 103.125.235.24:30889] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 19 03:16:58.398345 2026] [:error] [pid 41277:tid 41295] [client 45.132.115.91:42655] [client 45.132.115.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.115.91, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aePYqkH3ayszMLZYflsQWAAAAZA"]
[Sun Apr 19 03:16:58.403537 2026] [:error] [pid 41277:tid 41295] [client 45.132.115.91:42655] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Apr 19 05:38:38.207934 2026] [:error] [pid 47775:tid 47863] [client 51.44.12.213:59088] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aeP53rmztjlk9tsmoexx2gAAAJQ"]
[Sun Apr 19 05:38:40.083509 2026] [:error] [pid 47773:tid 47839] [client 51.44.12.213:59090] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aeP54OiBHdnCJDuPq9BU0gAAAFc"]
[Sun Apr 19 05:38:41.274250 2026] [:error] [pid 47772:tid 47805] [client 51.44.12.213:60456] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aeP54Yc0L16cb4smAz-fPAAAABA"]
[Sun Apr 19 05:38:42.542462 2026] [:error] [pid 47886:tid 47896] [client 51.44.12.213:60460] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aeP54kSe8yiyuPrD7yPsOAAAAMg"]
[Sun Apr 19 05:38:43.771607 2026] [:error] [pid 47775:tid 47846] [client 51.44.12.213:60470] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aeP547mztjlk9tsmoexx4wAAAIM"]
[Sun Apr 19 05:38:45.038209 2026] [:error] [pid 15765:tid 15865] [client 51.44.12.213:60480] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aeP55fRqinw-W5EwQ76DXAAAAow"]
[Sun Apr 19 05:38:46.152419 2026] [:error] [pid 15764:tid 15851] [client 51.44.12.213:60486] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aeP55mLL_sqdSHoVp-TrYgAAAlg"]
[Sun Apr 19 05:38:47.463287 2026] [:error] [pid 15764:tid 15838] [client 51.44.12.213:60492] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aeP552LL_sqdSHoVp-TrYwAAAkw"]
[Sun Apr 19 05:38:48.718411 2026] [:error] [pid 47886:tid 47907] [client 51.44.12.213:60494] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aeP56ESe8yiyuPrD7yPsQQAAANM"]
[Sun Apr 19 05:38:50.189857 2026] [:error] [pid 47773:tid 47821] [client 51.44.12.213:60502] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aeP56uiBHdnCJDuPq9BU3QAAAEU"]
[Sun Apr 19 05:38:51.367202 2026] [:error] [pid 15765:tid 15857] [client 51.44.12.213:47264] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aeP56_Rqinw-W5EwQ76DYwAAAoQ"]
[Sun Apr 19 05:38:52.611992 2026] [:error] [pid 47773:tid 47825] [client 51.44.12.213:47266] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aeP57OiBHdnCJDuPq9BU3wAAAEk"]
[Sun Apr 19 05:38:53.927330 2026] [:error] [pid 15764:tid 15830] [client 51.44.12.213:47272] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.sample"] [unique_id "aeP57WLL_sqdSHoVp-TrawAAAkQ"]
[Sun Apr 19 05:38:55.153761 2026] [:error] [pid 15694:tid 15737] [client 51.44.12.213:47282] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aeP577imB-jol1fwqAq7WgAAAYs"]
[Sun Apr 19 05:38:56.226932 2026] [:error] [pid 15763:tid 15816] [client 51.44.12.213:47296] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "aeP58LMXv1Y1THOoxaAjjwAAAhQ"]
[Sun Apr 19 05:38:57.613440 2026] [:error] [pid 47772:tid 47811] [client 51.44.12.213:47302] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod"] [unique_id "aeP58Yc0L16cb4smAz-fUQAAABY"]
[Sun Apr 19 05:38:58.865341 2026] [:error] [pid 47775:tid 47854] [client 51.44.12.213:47312] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.stage"] [unique_id "aeP58rmztjlk9tsmoexyDQAAAIs"]
[Sun Apr 19 05:39:00.131886 2026] [:error] [pid 47773:tid 47817] [client 51.44.12.213:47326] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.ci"] [unique_id "aeP59OiBHdnCJDuPq9BU8gAAAEE"]
[Sun Apr 19 05:39:04.055635 2026] [:error] [pid 47775:tid 47856] [client 51.44.12.213:36204] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "aeP5-Lmztjlk9tsmoexyDgAAAI0"]
[Sun Apr 19 05:39:05.390029 2026] [:error] [pid 47773:tid 47823] [client 51.44.12.213:36212] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.live"] [unique_id "aeP5-eiBHdnCJDuPq9BVAwAAAEc"]
[Sun Apr 19 05:39:06.618064 2026] [:error] [pid 47775:tid 47850] [client 51.44.12.213:36224] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.preprod"] [unique_id "aeP5-rmztjlk9tsmoexyFQAAAIc"]
[Sun Apr 19 05:39:08.084038 2026] [:error] [pid 15693:tid 15719] [client 51.44.12.213:36228] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.uat"] [unique_id "aeP5_MNMD-ccazQlTskV7wAAAVc"]
[Sun Apr 19 05:39:09.301194 2026] [:error] [pid 15693:tid 15710] [client 51.44.12.213:36232] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dist"] [unique_id "aeP5_cNMD-ccazQlTskV8gAAAU4"]
[Sun Apr 19 05:39:10.667919 2026] [:error] [pid 47773:tid 47830] [client 51.44.12.213:36240] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.swp"] [unique_id "aeP5_uiBHdnCJDuPq9BVBAAAAE4"]
[Sun Apr 19 05:39:11.939788 2026] [:error] [pid 47886:tid 47902] [client 51.44.12.213:35466] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env~"] [unique_id "aeP5_0Se8yiyuPrD7yPsXgAAAM4"]
[Sun Apr 19 05:39:13.485502 2026] [:error] [pid 15760:tid 15792] [client 51.44.12.213:35478] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aeP6AfSdD_XHQMJ_ISsY6AAAAdg"]
[Sun Apr 19 05:39:14.679563 2026] [:error] [pid 47772:tid 47803] [client 51.44.12.213:35484] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/apps/.env"] [unique_id "aeP6Aoc0L16cb4smAz-fVgAAAA4"]
[Sun Apr 19 05:39:15.990665 2026] [:error] [pid 15694:tid 15744] [client 51.44.12.213:35488] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aeP6A7imB-jol1fwqAq7bQAAAZI"]
[Sun Apr 19 05:39:20.928887 2026] [:error] [pid 47775:tid 47860] [client 51.44.12.213:35504] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/site/.env"] [unique_id "aeP6CLmztjlk9tsmoexyHAAAAJE"]
[Sun Apr 19 05:39:22.114748 2026] [:error] [pid 47773:tid 47833] [client 51.44.12.213:34440] [client 51.44.12.213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.env"] [unique_id "aeP6CuiBHdnCJDuPq9BVCAAAAFE"]
[Sun Apr 19 05:41:54.034899 2026] [:error] [pid 47886:tid 47893] [client 182.44.12.37:35645] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeP6okSe8yiyuPrD7yPtLwAAAMU"]
[Sun Apr 19 06:52:34.469083 2026] [:error] [pid 15760:tid 15787] [client 43.130.40.120:34326] [client 43.130.40.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeQLMvSdD_XHQMJ_ISsigQAAAdM"]
[Sun Apr 19 09:56:45.260642 2026] [:error] [pid 15764:tid 15829] [client 148.230.123.64:55320] [client 148.230.123.64] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aeQ2XWLL_sqdSHoVp-QqnQAAAkM"]
[Sun Apr 19 10:27:56.760605 2026] [:error] [pid 15763:tid 15807] [client 2.57.122.202:39958] [client 2.57.122.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/index"] [unique_id "aeQ9rLMXv1Y1THOoxaBkOAAAAgs"]
[Sun Apr 19 10:27:57.363016 2026] [:error] [pid 15764:tid 15829] [client 2.57.122.202:45154] [client 2.57.122.202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/index"] [unique_id "aeQ9rWLL_sqdSHoVp-Qx-AAAAkM"]
[Sun Apr 19 11:31:00.808605 2026] [:error] [pid 15764:tid 15845] [client 43.165.67.57:38746] [client 43.165.67.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeRMdGLL_sqdSHoVp-RMRQAAAlM"]
[Sun Apr 19 12:02:35.763086 2026] [:error] [pid 47772:tid 47799] [client 114.80.36.40:57016] [client 114.80.36.40] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeRT24c0L16cb4smAz8m8wAAAAo"]
[Sun Apr 19 18:07:07.166122 2026] [:error] [pid 15764:tid 15829] [client 43.173.1.69:40950] [client 43.173.1.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeSpS2LL_sqdSHoVp-TNKQAAAkM"]
[Sun Apr 19 18:36:27.694456 2026] [:error] [pid 47775:tid 47852] [client 119.96.24.54:59794] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeSwK7mztjlk9tsmoez5sAAAAIk"]
[Sun Apr 19 20:13:29.822873 2026] [:error] [pid 15760:tid 15781] [client 43.166.128.86:33578] [client 43.166.128.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeTG6fSdD_XHQMJ_ISsCmgAAAc0"]
[Sun Apr 19 21:26:20.980346 2026] [:error] [pid 47772:tid 47804] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Sun Apr 19 21:26:21.245609 2026] [:error] [pid 47772:tid 47812] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Sun Apr 19 21:26:21.509777 2026] [:error] [pid 47772:tid 47805] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/rogsa.php
[Sun Apr 19 21:26:21.773705 2026] [:error] [pid 47772:tid 47789] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/xbbih.php
[Sun Apr 19 21:26:22.049308 2026] [:error] [pid 47772:tid 47802] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/qqjki.php
[Sun Apr 19 21:26:22.314401 2026] [:error] [pid 47772:tid 47809] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tot.php
[Sun Apr 19 21:26:22.583708 2026] [:error] [pid 47772:tid 47799] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/0xD.php
[Sun Apr 19 21:26:22.868727 2026] [:error] [pid 47772:tid 47796] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sun Apr 19 21:26:23.160428 2026] [:error] [pid 47772:tid 47790] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sun Apr 19 21:26:23.424654 2026] [:error] [pid 47772:tid 47797] [client 20.238.42.169:65190] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Sun Apr 19 21:26:23.811547 2026] [:error] [pid 47772:tid 47793] [client 20.238.42.169:65190] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeTX_4c0L16cb4smAz--rQAAAAQ"]
[Sun Apr 19 21:26:25.433565 2026] [:error] [pid 47773:tid 47839] [client 20.238.42.169:65182] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeTYAeiBHdnCJDuPq9BD0wAAAFc"]
[Sun Apr 19 21:26:27.683097 2026] [:error] [pid 47773:tid 47817] [client 20.238.42.169:65117] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeTYA-iBHdnCJDuPq9BD2gAAAEE"]
[Sun Apr 19 21:26:28.632766 2026] [:error] [pid 47775:tid 47855] [client 20.238.42.169:65166] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeTYBLmztjlk9tsmoewV9QAAAIw"]
[Sun Apr 19 21:26:29.609297 2026] [:error] [pid 15764:tid 15841] [client 20.238.42.169:65118] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeTYBWLL_sqdSHoVp-QWdAAAAk8"]
[Sun Apr 19 21:26:30.709655 2026] [:error] [pid 15764:tid 15836] [client 20.238.42.169:65093] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeTYBmLL_sqdSHoVp-QWegAAAko"]
[Sun Apr 19 21:26:31.637614 2026] [:error] [pid 15764:tid 15846] [client 20.238.42.169:65188] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeTYB2LL_sqdSHoVp-QWfgAAAlQ"]
[Sun Apr 19 21:26:32.536583 2026] [:error] [pid 15764:tid 15844] [client 20.238.42.169:65098] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeTYCGLL_sqdSHoVp-QWgQAAAlI"]
[Sun Apr 19 21:26:33.502822 2026] [:error] [pid 15764:tid 15836] [client 20.238.42.169:65186] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeTYCWLL_sqdSHoVp-QWhwAAAko"]
[Sun Apr 19 21:26:34.310753 2026] [:error] [pid 15694:tid 15740] [client 20.238.42.169:65192] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeTYCrimB-jol1fwqAoOCgAAAY4"]
[Sun Apr 19 21:26:35.107744 2026] [:error] [pid 47886:tid 47901] [client 20.238.42.169:65106] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeTYC0Se8yiyuPrD7yN4TAAAAM0"]
[Sun Apr 19 21:26:36.113745 2026] [:error] [pid 47772:tid 47807] [client 20.238.42.169:65210] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeTYDIc0L16cb4smAz--tgAAABI"]
[Sun Apr 19 21:26:38.164033 2026] [:error] [pid 47772:tid 47804] [client 20.238.42.169:65187] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeTYDoc0L16cb4smAz--uAAAAA8"]
[Sun Apr 19 21:26:39.822993 2026] [:error] [pid 15764:tid 15843] [client 20.238.42.169:65215] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeTYD2LL_sqdSHoVp-QWkAAAAlE"]
[Sun Apr 19 21:26:41.654418 2026] [:error] [pid 47772:tid 47813] [client 20.238.42.169:65181] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeTYEYc0L16cb4smAz--wQAAABg"]
[Sun Apr 19 21:26:42.797885 2026] [:error] [pid 15693:tid 15720] [client 20.238.42.169:65169] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeTYEsNMD-ccazQlTslbbwAAAVg"]
[Sun Apr 19 21:26:44.467686 2026] [:error] [pid 47886:tid 47908] [client 20.238.42.169:65201] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeTYFESe8yiyuPrD7yN4VAAAANQ"]
[Sun Apr 19 21:26:47.665252 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:65113] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeTYF_SdD_XHQMJ_ISswLwAAAcY"]
[Sun Apr 19 21:26:48.654976 2026] [:error] [pid 15760:tid 15778] [client 20.238.42.169:65162] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeTYGPSdD_XHQMJ_ISswMQAAAco"]
[Sun Apr 19 21:26:49.497009 2026] [:error] [pid 15765:tid 15870] [client 20.238.42.169:65196] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "aeTYGfRqinw-W5EwQ7772AAAApE"]
[Sun Apr 19 21:26:51.222634 2026] [:error] [pid 47772:tid 47789] [client 20.238.42.169:65112] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeTYG4c0L16cb4smAz--1AAAAAA"]
[Sun Apr 19 21:26:52.994838 2026] [:error] [pid 15764:tid 15846] [client 20.238.42.169:65185] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeTYHGLL_sqdSHoVp-QWvAAAAlQ"]
[Sun Apr 19 21:26:54.083916 2026] [:error] [pid 47772:tid 47792] [client 20.238.42.169:65168] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeTYHoc0L16cb4smAz--2gAAAAM"]
[Sun Apr 19 21:26:55.469702 2026] [:error] [pid 47772:tid 47794] [client 20.238.42.169:12235] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yee.php"] [unique_id "aeTYH4c0L16cb4smAz--3wAAAAU"]
[Sun Apr 19 21:26:58.683616 2026] [:error] [pid 47772:tid 47796] [client 20.238.42.169:65198] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "aeTYIoc0L16cb4smAz--5AAAAAc"]
[Sun Apr 19 21:26:59.775896 2026] [:error] [pid 15760:tid 15789] [client 20.238.42.169:65144] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "aeTYI_SdD_XHQMJ_ISswSQAAAdU"]
[Sun Apr 19 21:27:00.955314 2026] [:error] [pid 15763:tid 15803] [client 20.238.42.169:65173] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "aeTYJLMXv1Y1THOoxaD6dgAAAgc"]
[Sun Apr 19 21:27:02.426795 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:65163] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "aeTYJvSdD_XHQMJ_ISswTwAAAcE"]
[Sun Apr 19 21:27:03.540142 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65205] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeTYJ_SdD_XHQMJ_ISswUgAAAc8"]
[Sun Apr 19 21:27:04.437976 2026] [:error] [pid 15764:tid 15830] [client 20.238.42.169:65124] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeTYKGLL_sqdSHoVp-QWzgAAAkQ"]
[Sun Apr 19 21:27:07.049933 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:65101] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeTYK_SdD_XHQMJ_ISswYgAAAcE"]
[Sun Apr 19 21:27:11.408587 2026] [:error] [pid 47772:tid 47792] [client 20.238.42.169:65105] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeTYL4c0L16cb4smAz-_AAAAAAM"]
[Sun Apr 19 21:27:16.783970 2026] [:error] [pid 15764:tid 15837] [client 20.238.42.169:65203] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dgmry.php"] [unique_id "aeTYNGLL_sqdSHoVp-QXIAAAAks"]
[Sun Apr 19 21:27:19.688022 2026] [:error] [pid 15693:tid 15712] [client 20.238.42.169:12247] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dgmry.php"] [unique_id "aeTYN8NMD-ccazQlTslbfAAAAVA"]
[Sun Apr 19 21:27:20.810643 2026] [:error] [pid 47773:tid 47826] [client 20.238.42.169:65159] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dgmry.php"] [unique_id "aeTYOOiBHdnCJDuPq9BEDQAAAEo"]
[Sun Apr 19 21:27:21.968805 2026] [:error] [pid 15764:tid 15832] [client 20.238.42.169:65202] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dgmry.php"] [unique_id "aeTYOWLL_sqdSHoVp-QXPwAAAkY"]
[Sun Apr 19 21:27:25.081576 2026] [:error] [pid 47773:tid 47824] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/itlvk.php
[Sun Apr 19 21:27:25.506570 2026] [:error] [pid 47773:tid 47816] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Sun Apr 19 21:27:25.777190 2026] [:error] [pid 47773:tid 47829] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajelmxf.php
[Sun Apr 19 21:27:26.190705 2026] [:error] [pid 47773:tid 47839] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Sun Apr 19 21:27:26.708872 2026] [:error] [pid 47773:tid 47818] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Sun Apr 19 21:27:26.980923 2026] [:error] [pid 47773:tid 47823] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/clcdu.php
[Sun Apr 19 21:27:27.429000 2026] [:error] [pid 47773:tid 47836] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/kandw.php
[Sun Apr 19 21:27:27.699265 2026] [:error] [pid 47773:tid 47840] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/wcvejtpr.php
[Sun Apr 19 21:27:27.970825 2026] [:error] [pid 47773:tid 47827] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Sun Apr 19 21:27:28.269809 2026] [:error] [pid 47773:tid 47828] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/ppxhp.php
[Sun Apr 19 21:27:28.694677 2026] [:error] [pid 47773:tid 47820] [client 20.238.42.169:65213] File does not exist: /usr/local/apache/htdocs/suspended-page/dichku.php
[Sun Apr 19 21:27:29.050565 2026] [:error] [pid 47773:tid 47830] [client 20.238.42.169:65213] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeTYQeiBHdnCJDuPq9BELQAAAE4"]
[Sun Apr 19 21:27:30.209215 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65096] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeTYQvSdD_XHQMJ_ISswzwAAAc8"]
[Sun Apr 19 21:27:33.007100 2026] [:error] [pid 47772:tid 47796] [client 20.238.42.169:65158] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeTYRYc0L16cb4smAz-_CwAAAAc"]
[Sun Apr 19 21:27:34.813262 2026] [:error] [pid 47886:tid 47889] [client 20.238.42.169:65141] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeTYRkSe8yiyuPrD7yN4bwAAAME"]
[Sun Apr 19 21:27:36.199192 2026] [:error] [pid 47772:tid 47794] [client 20.238.42.169:65107] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeTYSIc0L16cb4smAz-_FAAAAAU"]
[Sun Apr 19 21:27:37.316181 2026] [:error] [pid 15694:tid 15723] [client 20.238.42.169:12270] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeTYSbimB-jol1fwqAoONwAAAYA"]
[Sun Apr 19 21:27:38.036153 2026] [:error] [pid 47773:tid 47825] [client 20.238.42.169:65116] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeTYSuiBHdnCJDuPq9BENAAAAEk"]
[Sun Apr 19 21:27:39.825636 2026] [:error] [pid 15765:tid 15866] [client 20.238.42.169:65089] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeTYS_Rqinw-W5EwQ7777wAAAo0"]
[Sun Apr 19 21:27:41.158413 2026] [:error] [pid 15760:tid 15787] [client 20.238.42.169:12237] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeTYTfSdD_XHQMJ_ISsxEgAAAdM"]
[Sun Apr 19 21:27:42.463435 2026] [:error] [pid 15765:tid 15876] [client 20.238.42.169:65191] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeTYTvRqinw-W5EwQ7778gAAApc"]
[Sun Apr 19 21:27:44.563559 2026] [:error] [pid 47772:tid 47796] [client 20.238.42.169:65193] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeTYUIc0L16cb4smAz-_JQAAAAc"]
[Sun Apr 19 21:27:45.646326 2026] [:error] [pid 15763:tid 15804] [client 20.238.42.169:65151] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "aeTYUbMXv1Y1THOoxaD6kwAAAgg"]
[Sun Apr 19 21:27:46.629295 2026] [:error] [pid 47772:tid 47804] [client 20.238.42.169:12233] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeTYUoc0L16cb4smAz-_KQAAAA8"]
[Sun Apr 19 21:27:50.852399 2026] [:error] [pid 47772:tid 47800] [client 20.238.42.169:65123] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeTYVoc0L16cb4smAz-_MgAAAAs"]
[Sun Apr 19 21:27:52.230700 2026] [:error] [pid 15764:tid 15840] [client 20.238.42.169:12182] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeTYWGLL_sqdSHoVp-QXfQAAAk4"]
[Sun Apr 19 21:27:53.923046 2026] [:error] [pid 15764:tid 15847] [client 20.238.42.169:65115] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeTYWWLL_sqdSHoVp-QXgQAAAlU"]
[Sun Apr 19 21:27:55.610326 2026] [:error] [pid 47772:tid 47811] [client 20.238.42.169:12245] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeTYW4c0L16cb4smAz-_RQAAABY"]
[Sun Apr 19 21:27:58.325554 2026] [:error] [pid 15764:tid 15826] [client 20.238.42.169:12240] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeTYXmLL_sqdSHoVp-QXjwAAAkA"]
[Sun Apr 19 21:28:01.127677 2026] [:error] [pid 15765:tid 15870] [client 20.238.42.169:12261] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeTYYfRqinw-W5EwQ778BgAAApE"]
[Sun Apr 19 21:28:03.320838 2026] [:error] [pid 15764:tid 15850] [client 20.238.42.169:65160] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeTYY2LL_sqdSHoVp-QXmwAAAlc"]
[Sun Apr 19 21:28:07.730059 2026] [:error] [pid 47775:tid 47851] [client 20.238.42.169:65114] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeTYZ7mztjlk9tsmoewWHwAAAIg"]
[Sun Apr 19 21:28:09.656075 2026] [:error] [pid 47886:tid 47911] [client 20.238.42.169:65094] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeTYaUSe8yiyuPrD7yN4egAAANc"]
[Sun Apr 19 21:28:11.912249 2026] [:error] [pid 47773:tid 47825] [client 20.238.42.169:12284] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeTYa-iBHdnCJDuPq9BETgAAAEk"]
[Sun Apr 19 21:28:13.214031 2026] [:error] [pid 47886:tid 47906] [client 20.238.42.169:65104] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeTYbUSe8yiyuPrD7yN4gQAAANI"]
[Sun Apr 19 21:28:15.993361 2026] [:error] [pid 47886:tid 47912] [client 20.238.42.169:65164] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeTYb0Se8yiyuPrD7yN4igAAANg"]
[Sun Apr 19 21:28:17.444208 2026] [:error] [pid 15694:tid 15749] [client 20.238.42.169:12274] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeTYcbimB-jol1fwqAoOhwAAAZc"]
[Sun Apr 19 21:28:18.863426 2026] [:error] [pid 15760:tid 15789] [client 20.238.42.169:65184] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeTYcvSdD_XHQMJ_ISsxOQAAAdU"]
[Sun Apr 19 21:28:22.650121 2026] [:error] [pid 47886:tid 47894] [client 20.238.42.169:65110] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeTYdkSe8yiyuPrD7yN4lAAAAMY"]
[Sun Apr 19 21:28:24.367821 2026] [:error] [pid 47775:tid 47852] [client 20.238.42.169:12257] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeTYeLmztjlk9tsmoewWQQAAAIk"]
[Sun Apr 19 21:28:27.180702 2026] [:error] [pid 47886:tid 47903] [client 20.238.42.169:65100] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeTYe0Se8yiyuPrD7yN4lwAAAM8"]
[Sun Apr 19 21:28:28.928946 2026] [:error] [pid 47772:tid 47808] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_O1JFaUaF.php
[Sun Apr 19 21:28:29.193777 2026] [:error] [pid 47772:tid 47792] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/vopxx.php
[Sun Apr 19 21:28:29.471714 2026] [:error] [pid 47772:tid 47796] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/ebuom.php
[Sun Apr 19 21:28:29.742198 2026] [:error] [pid 47772:tid 47793] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Sun Apr 19 21:28:30.028177 2026] [:error] [pid 47772:tid 47789] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/jvtsa.php
[Sun Apr 19 21:28:30.291783 2026] [:error] [pid 47772:tid 47807] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/rkiea.php
[Sun Apr 19 21:28:30.576712 2026] [:error] [pid 47772:tid 47799] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/xtsr.php
[Sun Apr 19 21:28:30.854014 2026] [:error] [pid 47772:tid 47800] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/lp5.php
[Sun Apr 19 21:28:31.117669 2026] [:error] [pid 47772:tid 47791] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/beerd.php
[Sun Apr 19 21:28:31.381594 2026] [:error] [pid 47772:tid 47790] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sun Apr 19 21:28:31.647794 2026] [:error] [pid 47772:tid 47811] [client 20.238.42.169:12249] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sun Apr 19 21:28:31.946390 2026] [:error] [pid 47772:tid 47813] [client 20.238.42.169:12249] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeTYf4c0L16cb4smAz-_lgAAABg"]
[Sun Apr 19 21:28:33.634007 2026] [:error] [pid 15764:tid 15846] [client 20.238.42.169:12252] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeTYgWLL_sqdSHoVp-QXvAAAAlQ"]
[Sun Apr 19 21:28:39.632070 2026] [:error] [pid 47772:tid 47797] [client 20.238.42.169:65091] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeTYh4c0L16cb4smAz-_qAAAAAg"]
[Sun Apr 19 21:28:41.706333 2026] [:error] [pid 47775:tid 47855] [client 20.238.42.169:65199] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeTYibmztjlk9tsmoewWSgAAAIw"]
[Sun Apr 19 21:28:43.448460 2026] [:error] [pid 15760:tid 15790] [client 20.238.42.169:65204] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeTYi_SdD_XHQMJ_ISsxaAAAAdY"]
[Sun Apr 19 21:28:45.248047 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:12224] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeTYjfSdD_XHQMJ_ISsxawAAAck"]
[Sun Apr 19 21:28:47.990826 2026] [:error] [pid 47773:tid 47835] [client 20.238.42.169:65145] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeTYj-iBHdnCJDuPq9BEfQAAAFM"]
[Sun Apr 19 21:28:49.466526 2026] [:error] [pid 47772:tid 47809] [client 20.238.42.169:65119] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeTYkYc0L16cb4smAz-_wwAAABQ"]
[Sun Apr 19 21:28:51.852996 2026] [:error] [pid 15760:tid 15779] [client 20.238.42.169:65132] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeTYk_SdD_XHQMJ_ISsxdQAAAcs"]
[Sun Apr 19 21:28:52.954793 2026] [:error] [pid 47775:tid 47854] [client 20.238.42.169:65131] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeTYlLmztjlk9tsmoewWWgAAAIs"]
[Sun Apr 19 21:28:55.281200 2026] [:error] [pid 47886:tid 47897] [client 20.238.42.169:65208] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeTYl0Se8yiyuPrD7yN4pgAAAMk"]
[Sun Apr 19 21:28:56.856919 2026] [:error] [pid 15763:tid 15799] [client 20.238.42.169:65172] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckk.php"] [unique_id "aeTYmLMXv1Y1THOoxaD63gAAAgM"]
[Sun Apr 19 21:28:57.660334 2026] [:error] [pid 47772:tid 47809] [client 20.238.42.169:12283] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws58.php"] [unique_id "aeTYmYc0L16cb4smAz-_xwAAABQ"]
[Sun Apr 19 21:28:58.694903 2026] [:error] [pid 15765:tid 15867] [client 20.238.42.169:65099] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws58.php"] [unique_id "aeTYmvRqinw-W5EwQ778FwAAAo4"]
[Sun Apr 19 21:29:00.041948 2026] [:error] [pid 15764:tid 15834] [client 20.238.42.169:12255] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws58.php"] [unique_id "aeTYnGLL_sqdSHoVp-QYCAAAAkg"]
[Sun Apr 19 21:29:02.296684 2026] [:error] [pid 47772:tid 47801] [client 20.238.42.169:12225] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws58.php"] [unique_id "aeTYnoc0L16cb4smAz-_1wAAAAw"]
[Sun Apr 19 21:29:03.685060 2026] [:error] [pid 47772:tid 47810] [client 20.238.42.169:65122] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eapjf.php"] [unique_id "aeTYn4c0L16cb4smAz-_5QAAABU"]
[Sun Apr 19 21:29:05.466878 2026] [:error] [pid 15765:tid 15858] [client 20.238.42.169:65212] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eapjf.php"] [unique_id "aeTYofRqinw-W5EwQ778GAAAAoU"]
[Sun Apr 19 21:29:07.571415 2026] [:error] [pid 15764:tid 15827] [client 20.238.42.169:65103] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eapjf.php"] [unique_id "aeTYo2LL_sqdSHoVp-QYEwAAAkE"]
[Sun Apr 19 21:29:08.980043 2026] [:error] [pid 15760:tid 15782] [client 20.238.42.169:12171] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eapjf.php"] [unique_id "aeTYpPSdD_XHQMJ_ISsxmwAAAc4"]
[Sun Apr 19 21:29:10.051636 2026] [:error] [pid 47775:tid 47859] [client 20.238.42.169:12258] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeTYprmztjlk9tsmoewWdgAAAJA"]
[Sun Apr 19 21:29:14.592967 2026] [:error] [pid 15760:tid 15768] [client 20.238.42.169:12271] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeTYqvSdD_XHQMJ_ISsxsQAAAcA"]
[Sun Apr 19 21:29:15.574835 2026] [:error] [pid 15763:tid 15802] [client 20.238.42.169:12242] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeTYq7MXv1Y1THOoxaD67QAAAgY"]
[Sun Apr 19 21:29:17.777355 2026] [:error] [pid 15760:tid 15784] [client 20.238.42.169:65120] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeTYrfSdD_XHQMJ_ISsxtwAAAdA"]
[Sun Apr 19 21:29:28.735988 2026] [:error] [pid 47775:tid 47848] [client 20.238.42.169:65176] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kagug.php"] [unique_id "aeTYuLmztjlk9tsmoewWgwAAAIU"]
[Sun Apr 19 21:29:30.222383 2026] [:error] [pid 15760:tid 15770] [client 20.238.42.169:65137] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kagug.php"] [unique_id "aeTYuvSdD_XHQMJ_ISsxzwAAAcI"]
[Sun Apr 19 21:29:32.532661 2026] [:error] [pid 15760:tid 15788] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/kagug.php
[Sun Apr 19 21:29:33.196347 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/byueb.php
[Sun Apr 19 21:29:33.516599 2026] [:error] [pid 15760:tid 15775] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/abalqdol.php
[Sun Apr 19 21:29:33.792404 2026] [:error] [pid 15760:tid 15770] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-942.php
[Sun Apr 19 21:29:34.044517 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Sun Apr 19 21:29:34.296000 2026] [:error] [pid 15760:tid 15781] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/C1.php
[Sun Apr 19 21:29:34.703406 2026] [:error] [pid 15760:tid 15778] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/xsjtz.php
[Sun Apr 19 21:29:34.962159 2026] [:error] [pid 15760:tid 15792] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/wxeyc.php
[Sun Apr 19 21:29:35.215365 2026] [:error] [pid 15760:tid 15782] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/akhvg.php
[Sun Apr 19 21:29:35.467302 2026] [:error] [pid 15760:tid 15779] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/home.php
[Sun Apr 19 21:29:35.727430 2026] [:error] [pid 15760:tid 15787] [client 20.238.42.169:65158] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Sun Apr 19 21:29:35.998176 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65158] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "aeTYv_SdD_XHQMJ_ISsx7QAAAc8"]
[Sun Apr 19 21:29:37.240091 2026] [:error] [pid 15764:tid 15847] [client 20.238.42.169:65090] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "aeTYwWLL_sqdSHoVp-QYbwAAAlU"]
[Sun Apr 19 21:29:38.153287 2026] [:error] [pid 47775:tid 47847] [client 20.238.42.169:65102] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "aeTYwrmztjlk9tsmoewWmQAAAIQ"]
[Sun Apr 19 21:29:39.895250 2026] [:error] [pid 15760:tid 15779] [client 20.238.42.169:12238] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hfles.php"] [unique_id "aeTYw_SdD_XHQMJ_ISsx9QAAAcs"]
[Sun Apr 19 21:29:41.285879 2026] [:error] [pid 15764:tid 15839] [client 20.238.42.169:65129] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeTYxWLL_sqdSHoVp-QYdwAAAk0"]
[Sun Apr 19 21:29:42.637649 2026] [:error] [pid 47773:tid 47832] [client 20.238.42.169:12188] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeTYxuiBHdnCJDuPq9BErAAAAFA"]
[Sun Apr 19 21:29:43.975661 2026] [:error] [pid 15763:tid 15796] [client 20.238.42.169:65135] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeTYx7MXv1Y1THOoxaD7FAAAAgA"]
[Sun Apr 19 21:29:47.664791 2026] [:error] [pid 47775:tid 47853] [client 20.238.42.169:65126] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeTYy7mztjlk9tsmoewWoQAAAIo"]
[Sun Apr 19 21:29:49.262416 2026] [:error] [pid 47773:tid 47838] [client 20.238.42.169:65111] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeTYzeiBHdnCJDuPq9BEtAAAAFY"]
[Sun Apr 19 21:29:50.507494 2026] [:error] [pid 47775:tid 47850] [client 20.238.42.169:65125] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeTYzrmztjlk9tsmoewWowAAAIc"]
[Sun Apr 19 21:29:53.724310 2026] [:error] [pid 47772:tid 47803] [client 20.238.42.169:65165] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeTY0Yc0L16cb4smAz_AOQAAAA4"]
[Sun Apr 19 21:29:56.536941 2026] [:error] [pid 15763:tid 15802] [client 20.238.42.169:12212] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeTY1LMXv1Y1THOoxaD7KQAAAgY"]
[Sun Apr 19 21:30:00.314284 2026] [:error] [pid 15763:tid 15818] [client 20.238.42.169:65161] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeTY2LMXv1Y1THOoxaD7NgAAAhY"]
[Sun Apr 19 21:30:03.224763 2026] [:error] [pid 15764:tid 15836] [client 20.238.42.169:65121] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeTY22LL_sqdSHoVp-QYqQAAAko"]
[Sun Apr 19 21:30:04.763991 2026] [:error] [pid 15760:tid 15773] [client 20.238.42.169:65194] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeTY3PSdD_XHQMJ_ISsyIAAAAcU"]
[Sun Apr 19 21:30:06.233069 2026] [:error] [pid 15764:tid 15827] [client 20.238.42.169:65177] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeTY3mLL_sqdSHoVp-QYwQAAAkE"]
[Sun Apr 19 21:30:10.985488 2026] [:error] [pid 15760:tid 15788] [client 20.238.42.169:65127] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeTY4vSdD_XHQMJ_ISsyRQAAAdQ"]
[Sun Apr 19 21:30:12.847992 2026] [:error] [pid 15763:tid 15820] [client 20.238.42.169:65180] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeTY5LMXv1Y1THOoxaD7cgAAAhg"]
[Sun Apr 19 21:30:14.084112 2026] [:error] [pid 47886:tid 47908] [client 20.238.42.169:65143] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeTY5kSe8yiyuPrD7yN44wAAANQ"]
[Sun Apr 19 21:30:16.508005 2026] [:error] [pid 15760:tid 15792] [client 20.238.42.169:12281] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awdld.php"] [unique_id "aeTY6PSdD_XHQMJ_ISsyUQAAAdg"]
[Sun Apr 19 21:30:18.975487 2026] [:error] [pid 15764:tid 15833] [client 20.238.42.169:12259] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeTY6mLL_sqdSHoVp-QY7wAAAkc"]
[Sun Apr 19 21:30:21.308701 2026] [:error] [pid 15760:tid 15775] [client 20.238.42.169:12276] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeTY7fSdD_XHQMJ_ISsyjQAAAcc"]
[Sun Apr 19 21:30:24.323154 2026] [:error] [pid 47772:tid 47801] [client 20.238.42.169:65174] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeTY8Ic0L16cb4smAz_AUwAAAAw"]
[Sun Apr 19 21:30:26.938775 2026] [:error] [pid 15693:tid 15708] [client 20.238.42.169:65146] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Geforce.php"] [unique_id "aeTY8sNMD-ccazQlTslcFwAAAUw"]
[Sun Apr 19 21:30:30.168988 2026] [:error] [pid 47775:tid 47847] [client 20.238.42.169:65170] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkogn.php"] [unique_id "aeTY9rmztjlk9tsmoewWwQAAAIQ"]
[Sun Apr 19 21:30:31.366362 2026] [:error] [pid 15763:tid 15817] [client 20.238.42.169:12177] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkogn.php"] [unique_id "aeTY97MXv1Y1THOoxaD7fQAAAhU"]
[Sun Apr 19 21:30:32.413535 2026] [:error] [pid 47772:tid 47812] [client 20.238.42.169:65155] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkogn.php"] [unique_id "aeTY-Ic0L16cb4smAz_AYgAAABc"]
[Sun Apr 19 21:30:37.805478 2026] [:error] [pid 47772:tid 47807] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sun Apr 19 21:30:38.071034 2026] [:error] [pid 47772:tid 47791] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Sun Apr 19 21:30:38.337567 2026] [:error] [pid 47772:tid 47793] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Sun Apr 19 21:30:38.601309 2026] [:error] [pid 47772:tid 47797] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Sun Apr 19 21:30:38.908436 2026] [:error] [pid 47772:tid 47800] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/ctjpseby.php
[Sun Apr 19 21:30:39.302869 2026] [:error] [pid 47772:tid 47802] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/fss.php
[Sun Apr 19 21:30:39.658169 2026] [:error] [pid 47772:tid 47796] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php
[Sun Apr 19 21:30:40.031628 2026] [:error] [pid 47772:tid 47813] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/abpxrnwe.php
[Sun Apr 19 21:30:40.331676 2026] [:error] [pid 47772:tid 47810] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/ynjli.php
[Sun Apr 19 21:30:40.628554 2026] [:error] [pid 47772:tid 47801] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Sun Apr 19 21:30:40.991393 2026] [:error] [pid 47772:tid 47809] [client 20.238.42.169:12246] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Sun Apr 19 21:30:41.251526 2026] [:error] [pid 47772:tid 47812] [client 20.238.42.169:12246] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTZAYc0L16cb4smAz_AgQAAABc"]
[Sun Apr 19 21:30:43.086375 2026] [:error] [pid 47772:tid 47793] [client 20.238.42.169:12243] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTZA4c0L16cb4smAz_AhQAAAAQ"]
[Sun Apr 19 21:30:44.185159 2026] [:error] [pid 47773:tid 47820] [client 20.238.42.169:65093] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTZBOiBHdnCJDuPq9BE2gAAAEQ"]
[Sun Apr 19 21:30:45.513374 2026] [:error] [pid 15764:tid 15835] [client 20.238.42.169:65195] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeTZBWLL_sqdSHoVp-QZDgAAAkk"]
[Sun Apr 19 21:30:47.019154 2026] [:error] [pid 47773:tid 47832] [client 20.238.42.169:65182] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeTZB-iBHdnCJDuPq9BE3gAAAFA"]
[Sun Apr 19 21:30:48.897724 2026] [:error] [pid 47886:tid 47908] [client 20.238.42.169:12234] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeTZCESe8yiyuPrD7yN5DwAAANQ"]
[Sun Apr 19 21:30:52.568372 2026] [:error] [pid 15693:tid 15701] [client 20.238.42.169:65214] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeTZDMNMD-ccazQlTslcGgAAAUU"]
[Sun Apr 19 21:30:55.171314 2026] [:error] [pid 47775:tid 47850] [client 20.238.42.169:65201] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-moonka.php"] [unique_id "aeTZD7mztjlk9tsmoewW0QAAAIc"]
[Sun Apr 19 21:30:56.374920 2026] [:error] [pid 15760:tid 15772] [client 20.238.42.169:65156] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "aeTZEPSdD_XHQMJ_ISszIwAAAcQ"]
[Sun Apr 19 21:30:57.480614 2026] [:error] [pid 15760:tid 15775] [client 20.238.42.169:12254] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "aeTZEfSdD_XHQMJ_ISszLwAAAcc"]
[Sun Apr 19 21:30:59.509511 2026] [:error] [pid 15763:tid 15808] [client 20.238.42.169:12278] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "aeTZE7MXv1Y1THOoxaD7kwAAAgw"]
[Sun Apr 19 21:31:07.174586 2026] [:error] [pid 47772:tid 47812] [client 20.238.42.169:65186] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "aeTZG4c0L16cb4smAz_ApQAAABc"]
[Sun Apr 19 21:31:10.018176 2026] [:error] [pid 15763:tid 15804] [client 20.238.42.169:65118] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeTZHrMXv1Y1THOoxaD7ngAAAgg"]
[Sun Apr 19 21:31:14.080898 2026] [:error] [pid 15763:tid 15812] [client 20.238.42.169:12223] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeTZIrMXv1Y1THOoxaD7rgAAAhA"]
[Sun Apr 19 21:31:15.339916 2026] [:error] [pid 15765:tid 15873] [client 20.238.42.169:65168] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeTZI_Rqinw-W5EwQ778OwAAApQ"]
[Sun Apr 19 21:31:16.297556 2026] [:error] [pid 47775:tid 47857] [client 20.238.42.169:65152] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tap.php"] [unique_id "aeTZJLmztjlk9tsmoewW2wAAAI4"]
[Sun Apr 19 21:31:19.599678 2026] [:error] [pid 47775:tid 47855] [client 20.238.42.169:65183] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeTZJ7mztjlk9tsmoewW3wAAAIw"]
[Sun Apr 19 21:31:21.923443 2026] [:error] [pid 47773:tid 47822] [client 20.238.42.169:12178] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeTZKeiBHdnCJDuPq9BFBwAAAEY"]
[Sun Apr 19 21:31:24.241244 2026] [:error] [pid 47772:tid 47813] [client 20.238.42.169:65189] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeTZLIc0L16cb4smAz_AxQAAABg"]
[Sun Apr 19 21:31:25.886015 2026] [:error] [pid 15763:tid 15813] [client 20.238.42.169:12109] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeTZLbMXv1Y1THOoxaD78gAAAhE"]
[Sun Apr 19 21:31:27.158534 2026] [:error] [pid 15763:tid 15801] [client 20.238.42.169:65112] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeTZL7MXv1Y1THOoxaD79wAAAgU"]
[Sun Apr 19 21:31:28.305080 2026] [:error] [pid 47772:tid 47790] [client 20.238.42.169:65166] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeTZMIc0L16cb4smAz_AzAAAAAE"]
[Sun Apr 19 21:31:36.957792 2026] [:error] [pid 47775:tid 47865] [client 20.238.42.169:65171] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeTZOLmztjlk9tsmoewW-gAAAJY"]
[Sun Apr 19 21:31:38.917916 2026] [:error] [pid 15760:tid 15775] [client 20.238.42.169:12280] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeTZOvSdD_XHQMJ_ISsztQAAAcc"]
[Sun Apr 19 21:31:48.316303 2026] [:error] [pid 15760:tid 15770] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/cdn3.php
[Sun Apr 19 21:31:48.606525 2026] [:error] [pid 15760:tid 15781] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/cjndd.php
[Sun Apr 19 21:31:48.890651 2026] [:error] [pid 15760:tid 15790] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sun Apr 19 21:31:49.154513 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Sun Apr 19 21:31:49.420169 2026] [:error] [pid 15760:tid 15771] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Sun Apr 19 21:31:49.704741 2026] [:error] [pid 15760:tid 15788] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Sun Apr 19 21:31:49.986693 2026] [:error] [pid 15760:tid 15779] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sun Apr 19 21:31:50.278148 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Sun Apr 19 21:31:50.917178 2026] [:error] [pid 15760:tid 15770] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_py4mE1XY.php
[Sun Apr 19 21:31:51.180750 2026] [:error] [pid 15760:tid 15780] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/ccrheegr.php
[Sun Apr 19 21:31:51.445259 2026] [:error] [pid 15760:tid 15772] [client 20.238.42.169:65157] File does not exist: /usr/local/apache/htdocs/suspended-page/ws73.php
[Sun Apr 19 21:31:51.840081 2026] [:error] [pid 15760:tid 15781] [client 20.238.42.169:65157] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeTZR_SdD_XHQMJ_ISszzwAAAc0"]
[Sun Apr 19 21:31:54.038352 2026] [:error] [pid 15765:tid 15867] [client 20.238.42.169:65088] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeTZSvRqinw-W5EwQ778bAAAAo4"]
[Sun Apr 19 21:31:56.156284 2026] [:error] [pid 47773:tid 47827] [client 20.238.42.169:65095] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeTZTOiBHdnCJDuPq9BFLQAAAEs"]
[Sun Apr 19 21:31:57.495914 2026] [:error] [pid 15764:tid 15834] [client 20.238.42.169:65200] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sh.php"] [unique_id "aeTZTWLL_sqdSHoVp-QZ2gAAAkg"]
[Sun Apr 19 21:32:00.578892 2026] [:error] [pid 47773:tid 47825] [client 20.238.42.169:65139] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeTZUOiBHdnCJDuPq9BFLwAAAEk"]
[Sun Apr 19 21:32:02.054739 2026] [:error] [pid 15763:tid 15807] [client 20.238.42.169:12190] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeTZUrMXv1Y1THOoxaD8IQAAAgs"]
[Sun Apr 19 21:32:04.154521 2026] [:error] [pid 15764:tid 15842] [client 20.238.42.169:12241] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeTZVGLL_sqdSHoVp-QZ-QAAAlA"]
[Sun Apr 19 21:32:05.068331 2026] [:error] [pid 47773:tid 47819] [client 20.238.42.169:65185] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wcoiw.php"] [unique_id "aeTZVeiBHdnCJDuPq9BFNwAAAEM"]
[Sun Apr 19 21:32:07.253832 2026] [:error] [pid 15764:tid 15840] [client 20.238.42.169:12268] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeTZV2LL_sqdSHoVp-QaBwAAAk4"]
[Sun Apr 19 21:32:10.011716 2026] [:error] [pid 47773:tid 47816] [client 20.238.42.169:65209] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeTZWuiBHdnCJDuPq9BFQQAAAEA"]
[Sun Apr 19 21:32:11.668122 2026] [:error] [pid 15760:tid 15768] [client 20.238.42.169:65108] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeTZW_SdD_XHQMJ_ISsz4QAAAcA"]
[Sun Apr 19 21:32:13.808819 2026] [:error] [pid 15763:tid 15820] [client 20.238.42.169:65098] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeTZXbMXv1Y1THOoxaD8LQAAAhg"]
[Sun Apr 19 21:32:14.979564 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:12167] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeTZXvSdD_XHQMJ_ISsz5gAAAck"]
[Sun Apr 19 21:32:18.744919 2026] [:error] [pid 47775:tid 47844] [client 20.238.42.169:65207] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeTZYrmztjlk9tsmoewXJQAAAIE"]
[Sun Apr 19 21:32:19.963486 2026] [:error] [pid 15764:tid 15843] [client 20.238.42.169:65190] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeTZY2LL_sqdSHoVp-QaJwAAAlE"]
[Sun Apr 19 21:32:21.813939 2026] [:error] [pid 47772:tid 47805] [client 20.238.42.169:65109] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeTZZYc0L16cb4smAz_BNgAAABA"]
[Sun Apr 19 21:32:23.903409 2026] [:error] [pid 47775:tid 47856] [client 20.238.42.169:12227] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeTZZ7mztjlk9tsmoewXLAAAAI0"]
[Sun Apr 19 21:32:24.938143 2026] [:error] [pid 47775:tid 47863] [client 20.238.42.169:65164] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeTZaLmztjlk9tsmoewXLQAAAJQ"]
[Sun Apr 19 21:32:26.113594 2026] [:error] [pid 15763:tid 15813] [client 20.238.42.169:65101] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeTZarMXv1Y1THOoxaD8QAAAAhE"]
[Sun Apr 19 21:32:29.315502 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:65196] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeTZbfSdD_XHQMJ_ISsz9gAAAcE"]
[Sun Apr 19 21:32:30.595106 2026] [:error] [pid 15764:tid 15838] [client 20.238.42.169:65184] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws56.php"] [unique_id "aeTZbmLL_sqdSHoVp-QaPAAAAkw"]
[Sun Apr 19 21:32:34.255179 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:65167] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws56.php"] [unique_id "aeTZcvSdD_XHQMJ_ISsz-gAAAcY"]
[Sun Apr 19 21:32:35.294481 2026] [:error] [pid 15764:tid 15835] [client 20.238.42.169:12273] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws56.php"] [unique_id "aeTZc2LL_sqdSHoVp-QaPgAAAkk"]
[Sun Apr 19 21:32:38.093761 2026] [:error] [pid 47772:tid 47790] [client 20.238.42.169:65144] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws56.php"] [unique_id "aeTZdoc0L16cb4smAz_BTwAAAAE"]
[Sun Apr 19 21:32:42.320348 2026] [:error] [pid 15760:tid 15776] [client 20.238.42.169:65133] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeTZevSdD_XHQMJ_ISs0DQAAAcg"]
[Sun Apr 19 21:32:44.417027 2026] [:error] [pid 15760:tid 15782] [client 20.238.42.169:65140] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeTZfPSdD_XHQMJ_ISs0FQAAAc4"]
[Sun Apr 19 21:32:47.553799 2026] [:error] [pid 47775:tid 47850] [client 20.238.42.169:65110] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeTZf7mztjlk9tsmoewXQQAAAIc"]
[Sun Apr 19 21:32:49.841888 2026] [:error] [pid 15764:tid 15836] [client 20.238.42.169:12165] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blnux.php"] [unique_id "aeTZgWLL_sqdSHoVp-QaXgAAAko"]
[Sun Apr 19 21:32:52.153496 2026] [:error] [pid 15764:tid 15844] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/zu.php
[Sun Apr 19 21:32:52.408025 2026] [:error] [pid 15764:tid 15850] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/gedim.php
[Sun Apr 19 21:32:52.668694 2026] [:error] [pid 15764:tid 15841] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/ardsw.php
[Sun Apr 19 21:32:53.157418 2026] [:error] [pid 15764:tid 15827] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/coiuz.php
[Sun Apr 19 21:32:53.864893 2026] [:error] [pid 15764:tid 15842] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/ogr.php
[Sun Apr 19 21:32:54.151891 2026] [:error] [pid 15764:tid 15830] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Sun Apr 19 21:32:54.451932 2026] [:error] [pid 15764:tid 15840] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sun Apr 19 21:32:54.709920 2026] [:error] [pid 15764:tid 15829] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Sun Apr 19 21:32:55.190547 2026] [:error] [pid 15764:tid 15845] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/iov.php
[Sun Apr 19 21:32:55.841459 2026] [:error] [pid 15764:tid 15848] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/frdyx.php
[Sun Apr 19 21:32:56.258711 2026] [:error] [pid 15764:tid 15826] [client 20.238.42.169:65115] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Sun Apr 19 21:32:56.536602 2026] [:error] [pid 15764:tid 15841] [client 20.238.42.169:65115] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeTZiGLL_sqdSHoVp-QadAAAAk8"]
[Sun Apr 19 21:33:02.191630 2026] [:error] [pid 15764:tid 15844] [client 20.238.42.169:65096] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeTZjmLL_sqdSHoVp-QaegAAAlI"]
[Sun Apr 19 21:33:05.004996 2026] [:error] [pid 47775:tid 47846] [client 20.238.42.169:65204] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeTZkbmztjlk9tsmoewXhwAAAIM"]
[Sun Apr 19 21:33:07.761850 2026] [:error] [pid 47775:tid 47864] [client 20.238.42.169:12274] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeTZk7mztjlk9tsmoewXiwAAAJU"]
[Sun Apr 19 21:33:09.329476 2026] [:error] [pid 47773:tid 47832] [client 20.238.42.169:12232] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeTZleiBHdnCJDuPq9BFZQAAAFA"]
[Sun Apr 19 21:33:12.063519 2026] [:error] [pid 15760:tid 15780] [client 20.238.42.169:65211] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeTZmPSdD_XHQMJ_ISs0XgAAAcw"]
[Sun Apr 19 21:33:13.536812 2026] [:error] [pid 47772:tid 47809] [client 20.238.42.169:65212] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeTZmYc0L16cb4smAz_BdAAAABQ"]
[Sun Apr 19 21:33:15.121011 2026] [:error] [pid 47773:tid 47830] [client 20.238.42.169:12253] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeTZm-iBHdnCJDuPq9BFbgAAAE4"]
[Sun Apr 19 21:33:17.059166 2026] [:error] [pid 15760:tid 15788] [client 20.238.42.169:65179] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeTZnfSdD_XHQMJ_ISs0cAAAAdQ"]
[Sun Apr 19 21:33:17.956433 2026] [:error] [pid 15760:tid 15786] [client 20.238.42.169:65154] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeTZnfSdD_XHQMJ_ISs0eAAAAdI"]
[Sun Apr 19 21:33:21.033742 2026] [:error] [pid 15763:tid 15809] [client 20.238.42.169:12251] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeTZobMXv1Y1THOoxaD8XAAAAg0"]
[Sun Apr 19 21:33:22.427585 2026] [:error] [pid 15694:tid 15734] [client 20.238.42.169:65148] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeTZorimB-jol1fwqAoPYwAAAYg"]
[Sun Apr 19 21:33:24.050288 2026] [:error] [pid 15760:tid 15776] [client 20.238.42.169:65104] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeTZpPSdD_XHQMJ_ISs0lgAAAcg"]
[Sun Apr 19 21:33:25.200668 2026] [:error] [pid 15760:tid 15792] [client 20.238.42.169:65116] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeTZpfSdD_XHQMJ_ISs0nQAAAdg"]
[Sun Apr 19 21:33:26.179433 2026] [:error] [pid 15764:tid 15836] [client 20.238.42.169:65173] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeTZpmLL_sqdSHoVp-QarQAAAko"]
[Sun Apr 19 21:33:27.169833 2026] [:error] [pid 15764:tid 15833] [client 20.238.42.169:12267] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dyxbc.php"] [unique_id "aeTZp2LL_sqdSHoVp-QaswAAAkc"]
[Sun Apr 19 21:33:29.337921 2026] [:error] [pid 47772:tid 47811] [client 20.238.42.169:12250] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeTZqYc0L16cb4smAz_BggAAABY"]
[Sun Apr 19 21:33:31.073773 2026] [:error] [pid 47772:tid 47806] [client 20.238.42.169:65106] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeTZq4c0L16cb4smAz_BiAAAABE"]
[Sun Apr 19 21:33:32.335388 2026] [:error] [pid 47886:tid 47906] [client 20.238.42.169:12160] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeTZrESe8yiyuPrD7yN5awAAANI"]
[Sun Apr 19 21:33:33.597167 2026] [:error] [pid 15694:tid 15730] [client 20.238.42.169:12248] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeTZrbimB-jol1fwqAoPZgAAAYQ"]
[Sun Apr 19 21:33:34.405734 2026] [:error] [pid 47772:tid 47811] [client 20.238.42.169:12263] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeTZroc0L16cb4smAz_BkwAAABY"]
[Sun Apr 19 21:33:35.437894 2026] [:error] [pid 47775:tid 47852] [client 20.238.42.169:65210] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeTZr7mztjlk9tsmoewXngAAAIk"]
[Sun Apr 19 21:33:36.901903 2026] [:error] [pid 47773:tid 47831] [client 20.238.42.169:65199] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeTZsOiBHdnCJDuPq9BFfwAAAE8"]
[Sun Apr 19 21:33:38.320179 2026] [:error] [pid 15764:tid 15845] [client 20.238.42.169:12235] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeTZsmLL_sqdSHoVp-QaygAAAlM"]
[Sun Apr 19 21:33:39.632503 2026] [:error] [pid 47775:tid 47848] [client 20.238.42.169:65192] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeTZs7mztjlk9tsmoewXowAAAIU"]
[Sun Apr 19 21:33:40.670969 2026] [:error] [pid 47773:tid 47817] [client 20.238.42.169:12275] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeTZtOiBHdnCJDuPq9BFhAAAAEE"]
[Sun Apr 19 21:33:42.373600 2026] [:error] [pid 15760:tid 15770] [client 20.238.42.169:65188] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeTZtvSdD_XHQMJ_ISs0yQAAAcI"]
[Sun Apr 19 21:33:44.439180 2026] [:error] [pid 15760:tid 15771] [client 20.238.42.169:12217] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeTZuPSdD_XHQMJ_ISs0zgAAAcM"]
[Sun Apr 19 21:33:47.313669 2026] [:error] [pid 15764:tid 15829] [client 20.238.42.169:65163] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aeTZu2LL_sqdSHoVp-Qa2AAAAkM"]
[Sun Apr 19 21:33:48.032462 2026] [:error] [pid 47773:tid 47836] [client 20.238.42.169:12175] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aeTZvOiBHdnCJDuPq9BFhwAAAFQ"]
[Sun Apr 19 21:33:49.303687 2026] [:error] [pid 15693:tid 15718] [client 20.238.42.169:65092] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aeTZvcNMD-ccazQlTslcTQAAAVY"]
[Sun Apr 19 21:33:50.473133 2026] [:error] [pid 15694:tid 15736] [client 20.238.42.169:65178] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "aeTZvrimB-jol1fwqAoPeAAAAYo"]
[Sun Apr 19 21:33:51.871347 2026] [:error] [pid 15760:tid 15790] [client 20.238.42.169:65206] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "aeTZv_SdD_XHQMJ_ISs05AAAAdY"]
[Sun Apr 19 21:33:52.925690 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65176] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "aeTZwPSdD_XHQMJ_ISs07wAAAc8"]
[Sun Apr 19 21:33:55.234184 2026] [:error] [pid 47772:tid 47808] [client 20.238.42.169:65126] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "aeTZw4c0L16cb4smAz_BogAAABM"]
[Sun Apr 19 21:33:58.188702 2026] [:error] [pid 15760:tid 15791] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Sun Apr 19 21:33:58.441530 2026] [:error] [pid 15760:tid 15784] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/0yellow.php
[Sun Apr 19 21:33:58.802430 2026] [:error] [pid 15760:tid 15787] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Sun Apr 19 21:33:59.055287 2026] [:error] [pid 15760:tid 15788] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sun Apr 19 21:33:59.433360 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sun Apr 19 21:33:59.685908 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Sun Apr 19 21:33:59.939392 2026] [:error] [pid 15760:tid 15784] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/abhjr.php
[Sun Apr 19 21:34:00.294689 2026] [:error] [pid 15760:tid 15785] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Sun Apr 19 21:34:00.753376 2026] [:error] [pid 15760:tid 15787] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sun Apr 19 21:34:01.022567 2026] [:error] [pid 15760:tid 15779] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Sun Apr 19 21:34:01.276415 2026] [:error] [pid 15760:tid 15788] [client 20.238.42.169:12262] File does not exist: /usr/local/apache/htdocs/suspended-page/bootstrap.php
[Sun Apr 19 21:34:01.526432 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:12262] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeTZyfSdD_XHQMJ_ISs1HAAAAcE"]
[Sun Apr 19 21:34:02.781006 2026] [:error] [pid 15763:tid 15802] [client 20.238.42.169:65198] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeTZyrMXv1Y1THOoxaD8jgAAAgY"]
[Sun Apr 19 21:34:05.091956 2026] [:error] [pid 47775:tid 47866] [client 20.238.42.169:65111] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeTZzbmztjlk9tsmoewXvgAAAJc"]
[Sun Apr 19 21:34:08.898122 2026] [:error] [pid 15694:tid 15747] [client 20.238.42.169:65172] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeTZ0LimB-jol1fwqAoPfAAAAZU"]
[Sun Apr 19 21:34:10.347345 2026] [:error] [pid 47775:tid 47849] [client 20.238.42.169:65175] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeTZ0rmztjlk9tsmoewXywAAAIY"]
[Sun Apr 19 21:34:11.416036 2026] [:error] [pid 47772:tid 47798] [client 20.238.42.169:65102] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeTZ04c0L16cb4smAz_B3AAAAAk"]
[Sun Apr 19 21:34:14.043148 2026] [:error] [pid 47886:tid 47912] [client 20.238.42.169:65132] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeTZ1kSe8yiyuPrD7yN5lwAAANg"]
[Sun Apr 19 21:34:15.403675 2026] [:error] [pid 15764:tid 15826] [client 20.238.42.169:65090] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rgjrq.php"] [unique_id "aeTZ12LL_sqdSHoVp-QbDgAAAkA"]
[Sun Apr 19 21:34:16.446363 2026] [:error] [pid 15764:tid 15836] [client 20.238.42.169:12226] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeTZ2GLL_sqdSHoVp-QbEAAAAko"]
[Sun Apr 19 21:34:17.558155 2026] [:error] [pid 15760:tid 15778] [client 20.238.42.169:65145] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeTZ2fSdD_XHQMJ_ISs1YAAAAco"]
[Sun Apr 19 21:34:18.511638 2026] [:error] [pid 15764:tid 15851] [client 20.238.42.169:65103] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeTZ2mLL_sqdSHoVp-QbGAAAAlg"]
[Sun Apr 19 21:34:19.578941 2026] [:error] [pid 15763:tid 15796] [client 20.238.42.169:65202] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/isvqf.php"] [unique_id "aeTZ27MXv1Y1THOoxaD8ngAAAgA"]
[Sun Apr 19 21:34:21.393248 2026] [:error] [pid 15764:tid 15842] [client 20.238.42.169:65120] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeTZ3WLL_sqdSHoVp-QbGgAAAlA"]
[Sun Apr 19 21:34:22.284519 2026] [:error] [pid 47772:tid 47798] [client 20.238.42.169:65114] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeTZ3oc0L16cb4smAz_B_AAAAAk"]
[Sun Apr 19 21:34:23.641623 2026] [:error] [pid 47773:tid 47830] [client 20.238.42.169:65097] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeTZ3-iBHdnCJDuPq9BFtAAAAE4"]
[Sun Apr 19 21:34:24.805390 2026] [:error] [pid 47772:tid 47804] [client 20.238.42.169:65100] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeTZ4Ic0L16cb4smAz_CAwAAAA8"]
[Sun Apr 19 21:34:26.491365 2026] [:error] [pid 15693:tid 15719] [client 20.238.42.169:65177] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeTZ4sNMD-ccazQlTslcZQAAAVc"]
[Sun Apr 19 21:34:27.442428 2026] [:error] [pid 15765:tid 15860] [client 20.238.42.169:12206] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeTZ4_Rqinw-W5EwQ778mgAAAoc"]
[Sun Apr 19 21:34:28.900120 2026] [:error] [pid 47772:tid 47806] [client 20.238.42.169:65215] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeTZ5Ic0L16cb4smAz_CFgAAABE"]
[Sun Apr 19 21:34:30.151972 2026] [:error] [pid 15763:tid 15812] [client 20.238.42.169:65135] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeTZ5rMXv1Y1THOoxaD8qgAAAhA"]
[Sun Apr 19 21:34:31.037118 2026] [:error] [pid 47886:tid 47898] [client 20.238.42.169:12228] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeTZ50Se8yiyuPrD7yN5nwAAAMo"]
[Sun Apr 19 21:34:31.847711 2026] [:error] [pid 47773:tid 47840] [client 20.238.42.169:65113] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeTZ5-iBHdnCJDuPq9BFugAAAFg"]
[Sun Apr 19 21:34:33.224502 2026] [:error] [pid 15763:tid 15811] [client 20.238.42.169:12230] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeTZ6bMXv1Y1THOoxaD8swAAAg8"]
[Sun Apr 19 21:34:35.182419 2026] [:error] [pid 15694:tid 15738] [client 20.238.42.169:65122] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeTZ67imB-jol1fwqAoPiQAAAYw"]
[Sun Apr 19 21:34:36.177776 2026] [:error] [pid 15763:tid 15803] [client 20.238.42.169:12179] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeTZ7LMXv1Y1THOoxaD8vAAAAgc"]
[Sun Apr 19 21:34:37.323836 2026] [:error] [pid 15763:tid 15801] [client 20.238.42.169:12200] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeTZ7bMXv1Y1THOoxaD8wAAAAgU"]
[Sun Apr 19 21:34:38.224332 2026] [:error] [pid 15763:tid 15802] [client 20.238.42.169:65153] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeTZ7rMXv1Y1THOoxaD8xAAAAgY"]
[Sun Apr 19 21:34:39.481123 2026] [:error] [pid 15765:tid 15867] [client 20.238.42.169:65197] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeTZ7_Rqinw-W5EwQ778qgAAAo4"]
[Sun Apr 19 21:34:41.226009 2026] [:error] [pid 15763:tid 15811] [client 20.238.42.169:65119] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeTZ8bMXv1Y1THOoxaD82AAAAg8"]
[Sun Apr 19 21:34:42.156494 2026] [:error] [pid 15763:tid 15802] [client 20.238.42.169:12239] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeTZ8rMXv1Y1THOoxaD84wAAAgY"]
[Sun Apr 19 21:34:43.526456 2026] [:error] [pid 15763:tid 15805] [client 20.238.42.169:12186] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeTZ87MXv1Y1THOoxaD87AAAAgk"]
[Sun Apr 19 21:34:44.684652 2026] [:error] [pid 47886:tid 47908] [client 20.238.42.169:12249] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atfis.php"] [unique_id "aeTZ9ESe8yiyuPrD7yN5rAAAANQ"]
[Sun Apr 19 21:34:46.186587 2026] [:error] [pid 15693:tid 15699] [client 20.238.42.169:12184] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeTZ9sNMD-ccazQlTslcawAAAUM"]
[Sun Apr 19 21:34:47.370954 2026] [:error] [pid 47886:tid 47898] [client 20.238.42.169:12242] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeTZ90Se8yiyuPrD7yN5sAAAAMo"]
[Sun Apr 19 21:34:49.397011 2026] [:error] [pid 47773:tid 47837] [client 20.238.42.169:65193] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeTZ-eiBHdnCJDuPq9BF0QAAAFU"]
[Sun Apr 19 21:34:50.722711 2026] [:error] [pid 15760:tid 15770] [client 20.238.42.169:65089] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeTZ-vSdD_XHQMJ_ISs1mwAAAcI"]
[Sun Apr 19 21:34:51.744921 2026] [:error] [pid 15765:tid 15875] [client 20.238.42.169:12264] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeTZ-_Rqinw-W5EwQ778tQAAApY"]
[Sun Apr 19 21:34:52.795919 2026] [:error] [pid 15764:tid 15832] [client 20.238.42.169:65141] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeTZ_GLL_sqdSHoVp-QbKAAAAkY"]
[Sun Apr 19 21:34:53.996830 2026] [:error] [pid 15764:tid 15850] [client 20.238.42.169:65213] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeTZ_WLL_sqdSHoVp-QbMgAAAlc"]
[Sun Apr 19 21:34:55.371889 2026] [:error] [pid 15763:tid 15817] [client 20.238.42.169:12236] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeTZ_7MXv1Y1THOoxaD9FwAAAhU"]
[Sun Apr 19 21:34:56.173377 2026] [:error] [pid 15760:tid 15778] [client 20.238.42.169:65182] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeTaAPSdD_XHQMJ_ISs1oAAAAco"]
[Sun Apr 19 21:34:58.052125 2026] [:error] [pid 15763:tid 15817] [client 20.238.42.169:12225] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeTaArMXv1Y1THOoxaD9JwAAAhU"]
[Sun Apr 19 21:35:00.897302 2026] [:error] [pid 15764:tid 15830] [client 20.238.42.169:12169] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeTaBGLL_sqdSHoVp-QbQgAAAkQ"]
[Sun Apr 19 21:35:03.131417 2026] [:error] [pid 15765:tid 15853] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sun Apr 19 21:35:03.383756 2026] [:error] [pid 15765:tid 15868] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Sun Apr 19 21:35:03.636459 2026] [:error] [pid 15765:tid 15862] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/junvh.php
[Sun Apr 19 21:35:03.890429 2026] [:error] [pid 15765:tid 15863] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Apr 19 21:35:04.146551 2026] [:error] [pid 15765:tid 15871] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sun Apr 19 21:35:05.482423 2026] [:error] [pid 15765:tid 15871] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Sun Apr 19 21:35:05.736740 2026] [:error] [pid 15765:tid 15867] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/kbfr.php
[Sun Apr 19 21:35:05.989878 2026] [:error] [pid 15765:tid 15857] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/oco.php
[Sun Apr 19 21:35:06.260206 2026] [:error] [pid 15765:tid 15872] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Sun Apr 19 21:35:06.513795 2026] [:error] [pid 15765:tid 15874] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/azpaq.php
[Sun Apr 19 21:35:06.766856 2026] [:error] [pid 15765:tid 15864] [client 20.238.42.169:12242] File does not exist: /usr/local/apache/htdocs/suspended-page/fssxwoyh.php
[Sun Apr 19 21:35:07.017277 2026] [:error] [pid 15765:tid 15869] [client 20.238.42.169:12242] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeTaC_Rqinw-W5EwQ778zgAAApA"]
[Sun Apr 19 21:35:08.206139 2026] [:error] [pid 47773:tid 47831] [client 20.238.42.169:65124] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeTaDOiBHdnCJDuPq9BF8gAAAE8"]
[Sun Apr 19 21:35:09.146193 2026] [:error] [pid 15760:tid 15772] [client 20.238.42.169:65125] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeTaDfSdD_XHQMJ_ISs1uQAAAcQ"]
[Sun Apr 19 21:35:10.304697 2026] [:error] [pid 15764:tid 15843] [client 20.238.42.169:65143] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bivvw.php"] [unique_id "aeTaDmLL_sqdSHoVp-QbRgAAAlE"]
[Sun Apr 19 21:35:12.080738 2026] [:error] [pid 15763:tid 15806] [client 20.238.42.169:12244] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeTaELMXv1Y1THOoxaD9SAAAAgo"]
[Sun Apr 19 21:35:13.238768 2026] [:error] [pid 15764:tid 15848] [client 20.238.42.169:65123] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeTaEWLL_sqdSHoVp-QbTQAAAlY"]
[Sun Apr 19 21:35:14.159440 2026] [:error] [pid 15764:tid 15834] [client 20.238.42.169:65137] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeTaEmLL_sqdSHoVp-QbUQAAAkg"]
[Sun Apr 19 21:35:15.019292 2026] [:error] [pid 15760:tid 15779] [client 20.238.42.169:65158] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bxhnfdgd.php"] [unique_id "aeTaE_SdD_XHQMJ_ISs10gAAAcs"]
[Sun Apr 19 21:35:16.321067 2026] [:error] [pid 15764:tid 15840] [client 20.238.42.169:65129] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeTaFGLL_sqdSHoVp-QbVQAAAk4"]
[Sun Apr 19 21:35:17.100873 2026] [:error] [pid 15760:tid 15790] [client 20.238.42.169:12097] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeTaFfSdD_XHQMJ_ISs12AAAAdY"]
[Sun Apr 19 21:35:18.156333 2026] [:error] [pid 47775:tid 47850] [client 20.238.42.169:65203] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeTaFrmztjlk9tsmoewYJwAAAIc"]
[Sun Apr 19 21:35:19.348330 2026] [:error] [pid 15760:tid 15776] [client 20.238.42.169:65149] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeTaF_SdD_XHQMJ_ISs14AAAAcg"]
[Sun Apr 19 21:35:21.680936 2026] [:error] [pid 47886:tid 47903] [client 20.238.42.169:65128] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeTaGUSe8yiyuPrD7yN5wwAAAM8"]
[Sun Apr 19 21:35:23.527344 2026] [:error] [pid 15764:tid 15850] [client 20.238.42.169:65121] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeTaG2LL_sqdSHoVp-QbYQAAAlc"]
[Sun Apr 19 21:35:24.590717 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:12258] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeTaHPSdD_XHQMJ_ISs1-QAAAc8"]
[Sun Apr 19 21:35:26.355183 2026] [:error] [pid 15763:tid 15803] [client 20.238.42.169:65142] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "aeTaHrMXv1Y1THOoxaD9XQAAAgc"]
[Sun Apr 19 21:35:27.972220 2026] [:error] [pid 47772:tid 47791] [client 20.238.42.169:12182] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeTaH4c0L16cb4smAz_COwAAAAI"]
[Sun Apr 19 21:35:31.754484 2026] [:error] [pid 47772:tid 47810] [client 20.238.42.169:12286] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeTaI4c0L16cb4smAz_CUAAAABU"]
[Sun Apr 19 21:35:34.564948 2026] [:error] [pid 15764:tid 15826] [client 20.238.42.169:12161] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeTaJmLL_sqdSHoVp-QbdQAAAkA"]
[Sun Apr 19 21:35:35.587330 2026] [:error] [pid 15764:tid 15834] [client 20.238.42.169:65170] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibano.php"] [unique_id "aeTaJ2LL_sqdSHoVp-QbewAAAkg"]
[Sun Apr 19 21:35:37.314036 2026] [:error] [pid 15764:tid 15847] [client 20.238.42.169:65130] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeTaKWLL_sqdSHoVp-QbgwAAAlU"]
[Sun Apr 19 21:35:38.749426 2026] [:error] [pid 15760:tid 15771] [client 20.238.42.169:12240] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeTaKvSdD_XHQMJ_ISs2JAAAAcM"]
[Sun Apr 19 21:35:41.654278 2026] [:error] [pid 15693:tid 15702] [client 20.238.42.169:12231] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeTaLcNMD-ccazQlTslcewAAAUY"]
[Sun Apr 19 21:35:43.075096 2026] [:error] [pid 15764:tid 15829] [client 20.238.42.169:12276] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeTaL2LL_sqdSHoVp-QbjQAAAkM"]
[Sun Apr 19 21:35:44.218039 2026] [:error] [pid 15760:tid 15782] [client 20.238.42.169:65180] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeTaMPSdD_XHQMJ_ISs2NwAAAc4"]
[Sun Apr 19 21:35:45.874463 2026] [:error] [pid 15694:tid 15732] [client 20.238.42.169:12281] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeTaMbimB-jol1fwqAoPmwAAAYY"]
[Sun Apr 19 21:35:47.003796 2026] [:error] [pid 15760:tid 15781] [client 20.238.42.169:65094] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeTaM_SdD_XHQMJ_ISs2QwAAAc0"]
[Sun Apr 19 21:35:50.739638 2026] [:error] [pid 15763:tid 15813] [client 20.238.42.169:65152] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeTaNrMXv1Y1THOoxaD9dAAAAhE"]
[Sun Apr 19 21:35:51.670427 2026] [:error] [pid 15694:tid 15744] [client 20.238.42.169:65117] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeTaN7imB-jol1fwqAoPpwAAAZI"]
[Sun Apr 19 21:35:53.750676 2026] [:error] [pid 15760:tid 15785] [client 20.238.42.169:12282] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeTaOfSdD_XHQMJ_ISs2VgAAAdE"]
[Sun Apr 19 21:35:55.156114 2026] [:error] [pid 15694:tid 15746] [client 20.238.42.169:12277] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeTaO7imB-jol1fwqAoPqwAAAZQ"]
[Sun Apr 19 21:35:56.276083 2026] [:error] [pid 15693:tid 15701] [client 20.238.42.169:12197] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gi.php"] [unique_id "aeTaPMNMD-ccazQlTslcfQAAAUU"]
[Sun Apr 19 21:35:59.977822 2026] [:error] [pid 15764:tid 15840] [client 20.238.42.169:12172] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diayd.php"] [unique_id "aeTaP2LL_sqdSHoVp-QbnQAAAk4"]
[Sun Apr 19 21:36:01.168277 2026] [:error] [pid 15760:tid 15786] [client 20.238.42.169:65180] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diayd.php"] [unique_id "aeTaQfSdD_XHQMJ_ISs2fAAAAdI"]
[Sun Apr 19 21:36:04.578292 2026] [:error] [pid 47886:tid 47911] [client 20.238.42.169:65191] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/diayd.php"] [unique_id "aeTaRESe8yiyuPrD7yN50QAAANc"]
[Sun Apr 19 21:36:06.353342 2026] [:error] [pid 47772:tid 47792] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/diayd.php
[Sun Apr 19 21:36:06.976466 2026] [:error] [pid 47772:tid 47800] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/emcgm.php
[Sun Apr 19 21:36:07.247382 2026] [:error] [pid 47772:tid 47811] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Apr 19 21:36:08.866036 2026] [:error] [pid 47772:tid 47811] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Apr 19 21:36:09.138848 2026] [:error] [pid 47772:tid 47806] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/dawvg.php
[Sun Apr 19 21:36:09.394407 2026] [:error] [pid 47772:tid 47798] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-220.php
[Sun Apr 19 21:36:09.879546 2026] [:error] [pid 47772:tid 47796] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/bykdo.php
[Sun Apr 19 21:36:10.155246 2026] [:error] [pid 47772:tid 47795] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Sun Apr 19 21:36:10.631459 2026] [:error] [pid 47772:tid 47802] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/repurify.php
[Sun Apr 19 21:36:10.916283 2026] [:error] [pid 47772:tid 47789] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/uujuu.php
[Sun Apr 19 21:36:11.509489 2026] [:error] [pid 47772:tid 47789] [client 20.238.42.169:65105] File does not exist: /usr/local/apache/htdocs/suspended-page/sad.php
[Sun Apr 19 21:36:11.782956 2026] [:error] [pid 47772:tid 47799] [client 20.238.42.169:65105] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeTaS4c0L16cb4smAz_CggAAAAo"]
[Sun Apr 19 21:36:12.960344 2026] [:error] [pid 15765:tid 15872] [client 20.238.42.169:65118] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeTaTPRqinw-W5EwQ7789gAAApM"]
[Sun Apr 19 21:36:14.137615 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65181] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeTaTvSdD_XHQMJ_ISs2jgAAAc8"]
[Sun Apr 19 21:36:15.658125 2026] [:error] [pid 15764:tid 15850] [client 20.238.42.169:65169] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeTaT2LL_sqdSHoVp-Qb1QAAAlc"]
[Sun Apr 19 21:36:16.863116 2026] [:error] [pid 47775:tid 47844] [client 20.238.42.169:65200] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeTaULmztjlk9tsmoewYUAAAAIE"]
[Sun Apr 19 21:36:19.492101 2026] [:error] [pid 47773:tid 47833] [client 20.238.42.169:12224] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeTaU-iBHdnCJDuPq9BGJQAAAFE"]
[Sun Apr 19 21:36:21.167951 2026] [:error] [pid 15693:tid 15713] [client 20.238.42.169:65159] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeTaVcNMD-ccazQlTslchQAAAVE"]
[Sun Apr 19 21:36:22.529211 2026] [:error] [pid 15765:tid 15875] [client 20.238.42.169:65091] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "aeTaVvRqinw-W5EwQ778_wAAApY"]
[Sun Apr 19 21:36:24.254969 2026] [:error] [pid 47775:tid 47850] [client 20.238.42.169:65209] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeTaWLmztjlk9tsmoewYXQAAAIc"]
[Sun Apr 19 21:36:26.000961 2026] [:error] [pid 47772:tid 47793] [client 20.238.42.169:65156] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeTaWoc0L16cb4smAz_ClAAAAAQ"]
[Sun Apr 19 21:36:27.162976 2026] [:error] [pid 15765:tid 15863] [client 20.238.42.169:65186] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeTaW_Rqinw-W5EwQ779CgAAAoo"]
[Sun Apr 19 21:36:28.325719 2026] [:error] [pid 15764:tid 15838] [client 20.238.42.169:12257] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "aeTaXGLL_sqdSHoVp-Qb9gAAAkw"]
[Sun Apr 19 21:36:29.725951 2026] [:error] [pid 15760:tid 15775] [client 20.238.42.169:12166] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeTaXfSdD_XHQMJ_ISs2oQAAAcc"]
[Sun Apr 19 21:36:30.677448 2026] [:error] [pid 15760:tid 15781] [client 20.238.42.169:12241] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeTaXvSdD_XHQMJ_ISs2rAAAAc0"]
[Sun Apr 19 21:36:31.846490 2026] [:error] [pid 15764:tid 15850] [client 20.238.42.169:12287] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeTaX2LL_sqdSHoVp-QcAQAAAlc"]
[Sun Apr 19 21:36:33.964565 2026] [:error] [pid 15760:tid 15776] [client 20.238.42.169:12155] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "aeTaYfSdD_XHQMJ_ISs2twAAAcg"]
[Sun Apr 19 21:36:35.791479 2026] [:error] [pid 15764:tid 15831] [client 20.238.42.169:65093] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "aeTaY2LL_sqdSHoVp-QcDAAAAkU"]
[Sun Apr 19 21:36:37.501274 2026] [:error] [pid 15765:tid 15866] [client 20.238.42.169:65184] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "aeTaZfRqinw-W5EwQ779EQAAAo0"]
[Sun Apr 19 21:36:38.472764 2026] [:error] [pid 47772:tid 47810] [client 20.238.42.169:12245] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "aeTaZoc0L16cb4smAz_CoQAAABU"]
[Sun Apr 19 21:36:39.422015 2026] [:error] [pid 47772:tid 47813] [client 20.238.42.169:65112] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new3.php"] [unique_id "aeTaZ4c0L16cb4smAz_CqgAAABg"]
[Sun Apr 19 21:36:40.413472 2026] [:error] [pid 47772:tid 47805] [client 20.238.42.169:12207] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeTaaIc0L16cb4smAz_CrwAAABA"]
[Sun Apr 19 21:36:41.839624 2026] [:error] [pid 47772:tid 47795] [client 20.238.42.169:12167] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeTaaYc0L16cb4smAz_CuQAAAAY"]
[Sun Apr 19 21:36:42.745141 2026] [:error] [pid 47775:tid 47856] [client 20.238.42.169:65205] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeTaarmztjlk9tsmoewYaAAAAI0"]
[Sun Apr 19 21:36:43.704143 2026] [:error] [pid 15760:tid 15782] [client 20.238.42.169:65139] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tdsaz.php"] [unique_id "aeTaa_SdD_XHQMJ_ISs22QAAAc4"]
[Sun Apr 19 21:36:45.370162 2026] [:error] [pid 47886:tid 47901] [client 20.238.42.169:12135] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeTabUSe8yiyuPrD7yN59QAAAM0"]
[Sun Apr 19 21:36:46.904962 2026] [:error] [pid 15763:tid 15808] [client 20.238.42.169:12278] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeTabrMXv1Y1THOoxaD91wAAAgw"]
[Sun Apr 19 21:36:48.226338 2026] [:error] [pid 47772:tid 47794] [client 20.238.42.169:65190] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeTacIc0L16cb4smAz_C0QAAAAU"]
[Sun Apr 19 21:36:49.679645 2026] [:error] [pid 47886:tid 47889] [client 20.238.42.169:65157] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeTacUSe8yiyuPrD7yN5-gAAAME"]
[Sun Apr 19 21:36:51.255283 2026] [:error] [pid 47772:tid 47806] [client 20.238.42.169:65195] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeTac4c0L16cb4smAz_C0wAAABE"]
[Sun Apr 19 21:36:53.445446 2026] [:error] [pid 15764:tid 15830] [client 20.238.42.169:65214] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeTadWLL_sqdSHoVp-QcHwAAAkQ"]
[Sun Apr 19 21:36:55.718850 2026] [:error] [pid 15760:tid 15786] [client 20.238.42.169:65131] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeTad_SdD_XHQMJ_ISs3AQAAAdI"]
[Sun Apr 19 21:36:57.967469 2026] [:error] [pid 15763:tid 15809] [client 20.238.42.169:65185] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeTaebMXv1Y1THOoxaD96gAAAg0"]
[Sun Apr 19 21:37:02.720083 2026] [:error] [pid 15760:tid 15778] [client 20.238.42.169:65160] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeTafvSdD_XHQMJ_ISs3DwAAAco"]
[Sun Apr 19 21:37:09.731672 2026] [:error] [pid 15760:tid 15792] [client 20.238.42.169:12269] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeTahfSdD_XHQMJ_ISs3LwAAAdg"]
[Sun Apr 19 21:37:11.891634 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/kaduu.php
[Sun Apr 19 21:37:12.226010 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-124.php
[Sun Apr 19 21:37:12.479526 2026] [:error] [pid 15760:tid 15780] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/ggddssvl.php
[Sun Apr 19 21:37:12.733245 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/aqotrjkg.php
[Sun Apr 19 21:37:12.983500 2026] [:error] [pid 15760:tid 15785] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Apr 19 21:37:13.407436 2026] [:error] [pid 15760:tid 15779] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/jodohghi.php
[Sun Apr 19 21:37:13.860847 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/intall.php
[Sun Apr 19 21:37:14.115544 2026] [:error] [pid 15760:tid 15791] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Sun Apr 19 21:37:14.555602 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/ws53.php
[Sun Apr 19 21:37:14.808083 2026] [:error] [pid 15760:tid 15776] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/anczg.php
[Sun Apr 19 21:37:15.083969 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:65099] File does not exist: /usr/local/apache/htdocs/suspended-page/bfasb.php
[Sun Apr 19 21:37:15.339953 2026] [:error] [pid 15760:tid 15785] [client 20.238.42.169:65099] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xopgt.php"] [unique_id "aeTai_SdD_XHQMJ_ISs3bwAAAdE"]
[Sun Apr 19 21:37:16.754382 2026] [:error] [pid 47772:tid 47808] [client 20.238.42.169:12255] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xopgt.php"] [unique_id "aeTajIc0L16cb4smAz_C5wAAABM"]
[Sun Apr 19 21:37:20.050426 2026] [:error] [pid 15763:tid 15817] [client 20.238.42.169:12174] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xopgt.php"] [unique_id "aeTakLMXv1Y1THOoxaD9_QAAAhU"]
[Sun Apr 19 21:37:21.792484 2026] [:error] [pid 15693:tid 15713] [client 20.238.42.169:65194] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xopgt.php"] [unique_id "aeTakcNMD-ccazQlTslcqQAAAVE"]
[Sun Apr 19 21:37:22.993430 2026] [:error] [pid 15760:tid 15790] [client 20.238.42.169:12208] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeTakvSdD_XHQMJ_ISs3fAAAAdY"]
[Sun Apr 19 21:37:23.868587 2026] [:error] [pid 47772:tid 47789] [client 20.238.42.169:65101] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeTak4c0L16cb4smAz_C9QAAAAA"]
[Sun Apr 19 21:37:25.410092 2026] [:error] [pid 15760:tid 15788] [client 20.238.42.169:12285] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeTalfSdD_XHQMJ_ISs3hQAAAdQ"]
[Sun Apr 19 21:37:26.863803 2026] [:error] [pid 47773:tid 47830] [client 20.238.42.169:65109] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "aeTaluiBHdnCJDuPq9BGfgAAAE4"]
[Sun Apr 19 21:37:29.264851 2026] [:error] [pid 47886:tid 47902] [client 20.238.42.169:65107] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeTamUSe8yiyuPrD7yN6FgAAAM4"]
[Sun Apr 19 21:37:31.525952 2026] [:error] [pid 15764:tid 15833] [client 20.238.42.169:65095] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeTam2LL_sqdSHoVp-QcjAAAAkc"]
[Sun Apr 19 21:37:33.052845 2026] [:error] [pid 15693:tid 15707] [client 20.238.42.169:65171] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeTancNMD-ccazQlTslcqgAAAUs"]
[Sun Apr 19 21:37:35.228948 2026] [:error] [pid 47773:tid 47827] [client 20.238.42.169:65104] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeTan-iBHdnCJDuPq9BGlAAAAEs"]
[Sun Apr 19 21:37:38.166373 2026] [:error] [pid 15763:tid 15819] [client 20.238.42.169:12259] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeTaorMXv1Y1THOoxaD-FgAAAhc"]
[Sun Apr 19 21:37:41.523100 2026] [:error] [pid 47775:tid 47849] [client 20.238.42.169:65088] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeTapbmztjlk9tsmoewYhgAAAIY"]
[Sun Apr 19 21:37:44.651406 2026] [:error] [pid 47775:tid 47864] [client 20.238.42.169:12233] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeTaqLmztjlk9tsmoewYigAAAJU"]
[Sun Apr 19 21:37:47.890614 2026] [:error] [pid 15763:tid 15806] [client 20.238.42.169:65096] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeTaq7MXv1Y1THOoxaD-IwAAAgo"]
[Sun Apr 19 21:37:50.283563 2026] [:error] [pid 15760:tid 15785] [client 20.238.42.169:65154] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeTarvSdD_XHQMJ_ISs3rgAAAdE"]
[Sun Apr 19 21:38:10.092833 2026] [:error] [pid 15764:tid 15837] [client 20.238.42.169:65116] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aeTawmLL_sqdSHoVp-Qc2QAAAks"]
[Sun Apr 19 21:38:13.963981 2026] [:error] [pid 15760:tid 15787] [client 20.238.42.169:12178] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/csv.php"] [unique_id "aeTaxfSdD_XHQMJ_ISs31gAAAdM"]
[Sun Apr 19 21:38:17.134291 2026] [:error] [pid 47773:tid 47839] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php
[Sun Apr 19 21:38:17.612306 2026] [:error] [pid 47773:tid 47823] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/2ksm17n.php
[Sun Apr 19 21:38:17.894891 2026] [:error] [pid 47773:tid 47840] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 19 21:38:18.163868 2026] [:error] [pid 47773:tid 47821] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sun Apr 19 21:38:18.453940 2026] [:error] [pid 47773:tid 47818] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sun Apr 19 21:38:19.311533 2026] [:error] [pid 47773:tid 47836] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/13ede.php
[Sun Apr 19 21:38:19.580146 2026] [:error] [pid 47773:tid 47830] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Sun Apr 19 21:38:19.849512 2026] [:error] [pid 47773:tid 47835] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/hnphq.php
[Sun Apr 19 21:38:20.123519 2026] [:error] [pid 47773:tid 47825] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/wdf.php
[Sun Apr 19 21:38:20.392471 2026] [:error] [pid 47773:tid 47833] [client 20.238.42.169:65126] File does not exist: /usr/local/apache/htdocs/suspended-page/ifrea.php
[Sun Apr 19 21:38:20.700297 2026] [:error] [pid 47773:tid 47837] [client 20.238.42.169:65126] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeTazOiBHdnCJDuPq9BG4gAAAFU"]
[Sun Apr 19 21:38:22.965713 2026] [:error] [pid 15764:tid 15848] [client 20.238.42.169:65201] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeTazmLL_sqdSHoVp-QdAAAAAlY"]
[Sun Apr 19 21:38:27.581795 2026] [:error] [pid 15764:tid 15845] [client 20.238.42.169:65168] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeTa02LL_sqdSHoVp-QdFwAAAlM"]
[Sun Apr 19 21:38:33.470283 2026] [:error] [pid 15760:tid 15791] [client 20.238.42.169:65189] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "aeTa2fSdD_XHQMJ_ISs4DAAAAdc"]
[Sun Apr 19 21:38:35.223095 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:65208] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeTa2_SdD_XHQMJ_ISs4EQAAAck"]
[Sun Apr 19 21:38:40.673815 2026] [:error] [pid 15760:tid 15791] [client 20.238.42.169:65196] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeTa4PSdD_XHQMJ_ISs4LgAAAdc"]
[Sun Apr 19 21:38:42.318783 2026] [:error] [pid 47772:tid 47790] [client 20.238.42.169:12121] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeTa4oc0L16cb4smAz_DXwAAAAE"]
[Sun Apr 19 21:38:47.085050 2026] [:error] [pid 15763:tid 15799] [client 20.238.42.169:65202] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "aeTa57MXv1Y1THOoxaD-eAAAAgM"]
[Sun Apr 19 21:38:51.754227 2026] [:error] [pid 15760:tid 15772] [client 20.238.42.169:65119] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeTa6_SdD_XHQMJ_ISs4OgAAAcQ"]
[Sun Apr 19 21:38:56.480783 2026] [:error] [pid 15760:tid 15790] [client 20.238.42.169:65204] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeTa8PSdD_XHQMJ_ISs4UAAAAdY"]
[Sun Apr 19 21:38:58.168465 2026] [:error] [pid 15763:tid 15801] [client 20.238.42.169:12284] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeTa8rMXv1Y1THOoxaD-kQAAAgU"]
[Sun Apr 19 21:38:59.789983 2026] [:error] [pid 15764:tid 15839] [client 20.238.42.169:65122] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hhxc.php"] [unique_id "aeTa82LL_sqdSHoVp-QdKgAAAk0"]
[Sun Apr 19 21:39:11.754411 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:65100] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vrhiw.php"] [unique_id "aeTa__SdD_XHQMJ_ISs4ogAAAck"]
[Sun Apr 19 21:39:14.665876 2026] [:error] [pid 15763:tid 15807] [client 20.238.42.169:65110] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vrhiw.php"] [unique_id "aeTbArMXv1Y1THOoxaD-rwAAAgs"]
[Sun Apr 19 21:39:17.040945 2026] [:error] [pid 15763:tid 15812] [client 20.238.42.169:65187] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeTbBbMXv1Y1THOoxaD-tAAAAhA"]
[Sun Apr 19 21:39:19.602421 2026] [:error] [pid 15763:tid 15819] [client 20.238.42.169:65177] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeTbB7MXv1Y1THOoxaD-ugAAAhc"]
[Sun Apr 19 21:39:21.534115 2026] [:error] [pid 47886:tid 47904] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/9EaklzMysJ.php
[Sun Apr 19 21:39:21.823891 2026] [:error] [pid 47886:tid 47890] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Sun Apr 19 21:39:22.084012 2026] [:error] [pid 47886:tid 47892] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Sun Apr 19 21:39:22.335501 2026] [:error] [pid 47886:tid 47895] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Sun Apr 19 21:39:22.587366 2026] [:error] [pid 47886:tid 47888] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Sun Apr 19 21:39:22.837749 2026] [:error] [pid 47886:tid 47900] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/zz8.php
[Sun Apr 19 21:39:23.232283 2026] [:error] [pid 47886:tid 47901] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 19 21:39:23.520464 2026] [:error] [pid 47886:tid 47908] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/a6.php
[Sun Apr 19 21:39:23.829280 2026] [:error] [pid 47886:tid 47899] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajkgsbb.php
[Sun Apr 19 21:39:24.080149 2026] [:error] [pid 47886:tid 47891] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/euocu.php
[Sun Apr 19 21:39:24.331324 2026] [:error] [pid 47886:tid 47906] [client 20.238.42.169:65192] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-denmono.php
[Sun Apr 19 21:39:24.583923 2026] [:error] [pid 47886:tid 47897] [client 20.238.42.169:65192] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeTbDESe8yiyuPrD7yN6cAAAAMk"]
[Sun Apr 19 21:39:29.400807 2026] [:error] [pid 15764:tid 15841] [client 20.238.42.169:65115] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeTbEWLL_sqdSHoVp-QdWgAAAk8"]
[Sun Apr 19 21:39:35.811061 2026] [:error] [pid 15764:tid 15827] [client 20.238.42.169:65143] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeTbF2LL_sqdSHoVp-QddQAAAkE"]
[Sun Apr 19 21:39:43.652065 2026] [:error] [pid 15693:tid 15716] [client 20.238.42.169:65210] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeTbH8NMD-ccazQlTslc2wAAAVQ"]
[Sun Apr 19 21:39:46.416498 2026] [:error] [pid 15760:tid 15781] [client 20.238.42.169:65123] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeTbIvSdD_XHQMJ_ISs5GQAAAc0"]
[Sun Apr 19 21:39:49.073287 2026] [:error] [pid 47772:tid 47806] [client 20.238.42.169:65130] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeTbJYc0L16cb4smAz_DtQAAABE"]
[Sun Apr 19 21:39:51.060390 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65211] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeTbJ_SdD_XHQMJ_ISs5LwAAAc8"]
[Sun Apr 19 21:39:53.349939 2026] [:error] [pid 47886:tid 47890] [client 20.238.42.169:65174] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeTbKUSe8yiyuPrD7yN6mQAAAMI"]
[Sun Apr 19 21:39:55.027016 2026] [:error] [pid 47886:tid 47903] [client 20.238.42.169:65129] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeTbK0Se8yiyuPrD7yN6nAAAAM8"]
[Sun Apr 19 21:39:59.380136 2026] [:error] [pid 15764:tid 15828] [client 20.238.42.169:65163] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeTbL2LL_sqdSHoVp-QdjwAAAkI"]
[Sun Apr 19 21:40:01.607350 2026] [:error] [pid 47772:tid 47800] [client 20.238.42.169:65120] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeTbMYc0L16cb4smAz_D1QAAAAs"]
[Sun Apr 19 21:40:04.322913 2026] [:error] [pid 15763:tid 15806] [client 20.238.42.169:65124] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeTbNLMXv1Y1THOoxaD-3AAAAgo"]
[Sun Apr 19 21:40:07.318583 2026] [:error] [pid 15765:tid 15862] [client 20.238.42.169:65136] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeTbN_Rqinw-W5EwQ7790QAAAok"]
[Sun Apr 19 21:40:08.212999 2026] [:error] [pid 47773:tid 47818] [client 20.238.42.169:12275] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeTbOOiBHdnCJDuPq9BHEgAAAEI"]
[Sun Apr 19 21:40:09.548935 2026] [:error] [pid 47772:tid 47812] [client 20.238.42.169:65162] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeTbOYc0L16cb4smAz_D6AAAABc"]
[Sun Apr 19 21:40:13.836525 2026] [:error] [pid 15693:tid 15716] [client 20.238.42.169:65179] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeTbPcNMD-ccazQlTslc5AAAAVQ"]
[Sun Apr 19 21:40:17.754253 2026] [:error] [pid 15765:tid 15867] [client 20.238.42.169:65153] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeTbQfRqinw-W5EwQ7791QAAAo4"]
[Sun Apr 19 21:40:20.194126 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:65133] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeTbRPSdD_XHQMJ_ISs5oQAAAcE"]
[Sun Apr 19 21:40:21.880344 2026] [:error] [pid 15760:tid 15783] [client 20.238.42.169:65090] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeTbRfSdD_XHQMJ_ISs5rAAAAc8"]
[Sun Apr 19 21:40:25.222915 2026] [:error] [pid 15760:tid 15769] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/161dfd072f.php
[Sun Apr 19 21:40:25.834666 2026] [:error] [pid 15760:tid 15777] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/iindv.php
[Sun Apr 19 21:40:26.233693 2026] [:error] [pid 15760:tid 15775] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajckrrj.php
[Sun Apr 19 21:40:26.487768 2026] [:error] [pid 15760:tid 15791] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/106.php
[Sun Apr 19 21:40:26.933988 2026] [:error] [pid 15760:tid 15786] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/xcakx.php
[Sun Apr 19 21:40:27.187130 2026] [:error] [pid 15760:tid 15782] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Sun Apr 19 21:40:27.441276 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/bhigtouj.php
[Sun Apr 19 21:40:27.720983 2026] [:error] [pid 15760:tid 15784] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/zyjhr.php
[Sun Apr 19 21:40:28.039008 2026] [:error] [pid 15760:tid 15770] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/vhwwnrnmqc.php
[Sun Apr 19 21:40:28.324863 2026] [:error] [pid 15760:tid 15775] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/wtogs.php
[Sun Apr 19 21:40:28.577898 2026] [:error] [pid 15760:tid 15791] [client 20.238.42.169:65118] File does not exist: /usr/local/apache/htdocs/suspended-page/blqjs.php
[Sun Apr 19 21:40:28.831014 2026] [:error] [pid 15760:tid 15789] [client 20.238.42.169:65118] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeTbTPSdD_XHQMJ_ISs5zQAAAdU"]
[Sun Apr 19 21:40:29.584968 2026] [:error] [pid 47772:tid 47802] [client 20.238.42.169:65089] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeTbTYc0L16cb4smAz_EEwAAAA0"]
[Sun Apr 19 21:40:33.087012 2026] [:error] [pid 47773:tid 47837] [client 20.238.42.169:65092] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeTbUeiBHdnCJDuPq9BHKAAAAFU"]
[Sun Apr 19 21:40:38.297635 2026] [:error] [pid 47772:tid 47812] [client 20.238.42.169:65105] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "aeTbVoc0L16cb4smAz_EJQAAABc"]
[Sun Apr 19 21:40:39.859276 2026] [:error] [pid 15760:tid 15774] [client 20.238.42.169:65215] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeTbV_SdD_XHQMJ_ISs59wAAAcY"]
[Sun Apr 19 21:40:41.999453 2026] [:error] [pid 15765:tid 15865] [client 20.238.42.169:12268] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeTbWfRqinw-W5EwQ7794QAAAow"]
[Sun Apr 19 21:40:43.875504 2026] [:error] [pid 47886:tid 47897] [client 20.238.42.169:65148] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeTbW0Se8yiyuPrD7yN6tgAAAMk"]
[Sun Apr 19 21:40:46.073306 2026] [:error] [pid 15765:tid 15858] [client 20.238.42.169:65198] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fyflv.php"] [unique_id "aeTbXvRqinw-W5EwQ7795QAAAoU"]
[Sun Apr 19 21:40:47.480414 2026] [:error] [pid 15693:tid 15713] [client 20.238.42.169:12281] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeTbX8NMD-ccazQlTslc_AAAAVE"]
[Sun Apr 19 21:40:48.654509 2026] [:error] [pid 15765:tid 15872] [client 20.238.42.169:12226] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeTbYPRqinw-W5EwQ7797QAAApM"]
[Sun Apr 19 21:40:50.535175 2026] [:error] [pid 15764:tid 15844] [client 20.238.42.169:12097] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeTbYmLL_sqdSHoVp-Qd0QAAAlI"]
[Sun Apr 19 21:40:54.495807 2026] [:error] [pid 15763:tid 15799] [client 20.238.42.169:65188] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeTbZrMXv1Y1THOoxaD-_wAAAgM"]
[Sun Apr 19 21:40:55.596051 2026] [:error] [pid 15760:tid 15784] [client 20.238.42.169:65093] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeTbZ_SdD_XHQMJ_ISs6EQAAAdA"]
[Sun Apr 19 21:40:57.304371 2026] [:error] [pid 15763:tid 15806] [client 20.238.42.169:12254] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeTbabMXv1Y1THOoxaD_BAAAAgo"]
[Sun Apr 19 21:40:59.162690 2026] [:error] [pid 47772:tid 47810] [client 20.238.42.169:65182] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeTba4c0L16cb4smAz_ERQAAABU"]
[Sun Apr 19 21:41:01.817110 2026] [:error] [pid 47772:tid 47789] [client 20.238.42.169:65214] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeTbbYc0L16cb4smAz_ESAAAAAA"]
[Sun Apr 19 21:41:04.429244 2026] [:error] [pid 15760:tid 15778] [client 20.238.42.169:65139] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aeTbcPSdD_XHQMJ_ISs6HgAAAco"]
[Sun Apr 19 21:41:06.397396 2026] [:error] [pid 47772:tid 47812] [client 20.238.42.169:65180] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aeTbcoc0L16cb4smAz_ETAAAABc"]
[Sun Apr 19 21:41:07.379678 2026] [:error] [pid 15763:tid 15797] [client 20.238.42.169:12225] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aeTbc7MXv1Y1THOoxaD_HQAAAgE"]
[Sun Apr 19 21:41:08.591662 2026] [:error] [pid 15763:tid 15803] [client 20.238.42.169:12248] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ne2026.php"] [unique_id "aeTbdLMXv1Y1THOoxaD_IwAAAgc"]
[Sun Apr 19 21:41:10.038424 2026] [:error] [pid 15763:tid 15819] [client 20.238.42.169:65175] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeTbdrMXv1Y1THOoxaD_LAAAAhc"]
[Sun Apr 19 21:41:11.306325 2026] [:error] [pid 15763:tid 15811] [client 20.238.42.169:65091] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeTbd7MXv1Y1THOoxaD_LgAAAg8"]
[Sun Apr 19 21:41:13.623492 2026] [:error] [pid 15760:tid 15772] [client 20.238.42.169:65212] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeTbefSdD_XHQMJ_ISs6LQAAAcQ"]
[Sun Apr 19 21:41:14.551593 2026] [:error] [pid 47775:tid 47864] [client 20.238.42.169:65172] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeTbermztjlk9tsmoewY7AAAAJU"]
[Sun Apr 19 21:41:17.431396 2026] [:error] [pid 15763:tid 15799] [client 20.238.42.169:65176] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeTbfbMXv1Y1THOoxaD_PwAAAgM"]
[Sun Apr 19 21:41:21.002309 2026] [:error] [pid 15760:tid 15791] [client 20.238.42.169:65097] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeTbgfSdD_XHQMJ_ISs6SQAAAdc"]
[Sun Apr 19 21:41:21.850841 2026] [:error] [pid 15760:tid 15789] [client 20.238.42.169:65106] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeTbgfSdD_XHQMJ_ISs6TwAAAdU"]
[Sun Apr 19 21:41:23.653713 2026] [:error] [pid 15760:tid 15771] [client 20.238.42.169:65186] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luyuc.php"] [unique_id "aeTbg_SdD_XHQMJ_ISs6VgAAAcM"]
[Sun Apr 19 21:41:25.970890 2026] [:error] [pid 15764:tid 15841] [client 20.238.42.169:65167] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aeTbhWLL_sqdSHoVp-Qd8wAAAk8"]
[Sun Apr 19 21:41:28.046007 2026] [:error] [pid 15764:tid 15827] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Sun Apr 19 21:41:28.749463 2026] [:error] [pid 15764:tid 15827] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/balin.php
[Sun Apr 19 21:41:30.343456 2026] [:error] [pid 15764:tid 15827] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Sun Apr 19 21:41:30.601845 2026] [:error] [pid 15764:tid 15839] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/cxxuv.php
[Sun Apr 19 21:41:30.852700 2026] [:error] [pid 15764:tid 15842] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/cgi-bin_bkp.php
[Sun Apr 19 21:41:31.106321 2026] [:error] [pid 15764:tid 15828] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sun Apr 19 21:41:31.365183 2026] [:error] [pid 15764:tid 15829] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/druqr.php
[Sun Apr 19 21:41:31.617210 2026] [:error] [pid 15764:tid 15841] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Sun Apr 19 21:41:31.868848 2026] [:error] [pid 15764:tid 15834] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Sun Apr 19 21:41:32.204962 2026] [:error] [pid 15764:tid 15836] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/dhjqs.php
[Sun Apr 19 21:41:32.464335 2026] [:error] [pid 15764:tid 15832] [client 20.238.42.169:12230] File does not exist: /usr/local/apache/htdocs/suspended-page/41.php
[Sun Apr 19 21:41:34.000092 2026] [:error] [pid 15764:tid 15832] [client 20.238.42.169:12230] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeTbjWLL_sqdSHoVp-QeEwAAAkY"]
[Sun Apr 19 21:41:35.431173 2026] [:error] [pid 15760:tid 15792] [client 20.238.42.169:12282] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeTbj_SdD_XHQMJ_ISs6fQAAAdg"]
[Sun Apr 19 21:41:38.676293 2026] [:error] [pid 15694:tid 15745] [client 20.238.42.169:65209] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeTbkrimB-jol1fwqAoQEgAAAZM"]
[Sun Apr 19 21:41:40.186974 2026] [:error] [pid 15763:tid 15809] [client 20.238.42.169:65149] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/green.php"] [unique_id "aeTblLMXv1Y1THOoxaD_UQAAAg0"]
[Sun Apr 19 21:41:42.073231 2026] [:error] [pid 47773:tid 47832] [client 20.238.42.169:12286] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeTbluiBHdnCJDuPq9BHRQAAAFA"]
[Sun Apr 19 21:41:43.367249 2026] [:error] [pid 47775:tid 47852] [client 20.238.42.169:12245] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeTbl7mztjlk9tsmoewZFAAAAIk"]
[Sun Apr 19 21:41:44.904830 2026] [:error] [pid 15760:tid 15785] [client 20.238.42.169:12267] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeTbmPSdD_XHQMJ_ISs6hQAAAdE"]
[Sun Apr 19 21:41:46.259047 2026] [:error] [pid 15764:tid 15837] [client 20.238.42.169:65121] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeTbmmLL_sqdSHoVp-QeHAAAAks"]
[Sun Apr 19 21:41:48.398760 2026] [:error] [pid 15764:tid 15851] [client 20.238.42.169:12239] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeTbnGLL_sqdSHoVp-QeIgAAAlg"]
[Sun Apr 19 21:41:50.124427 2026] [:error] [pid 47775:tid 47861] [client 20.238.42.169:65140] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeTbnrmztjlk9tsmoewZHQAAAJI"]
[Sun Apr 19 21:41:52.500997 2026] [:error] [pid 15764:tid 15839] [client 20.238.42.169:65193] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeTboGLL_sqdSHoVp-QeKwAAAk0"]
[Sun Apr 19 21:41:54.115441 2026] [:error] [pid 47772:tid 47809] [client 20.238.42.169:12269] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeTbooc0L16cb4smAz_EZQAAABQ"]
[Sun Apr 19 21:41:57.200090 2026] [:error] [pid 47772:tid 47801] [client 20.238.42.169:65127] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeTbpYc0L16cb4smAz_EaQAAAAw"]
[Sun Apr 19 21:42:00.375593 2026] [:error] [pid 15760:tid 15785] [client 20.238.42.169:65213] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeTbqPSdD_XHQMJ_ISs6xAAAAdE"]
[Sun Apr 19 21:42:02.167890 2026] [:error] [pid 15760:tid 15771] [client 20.238.42.169:65203] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeTbqvSdD_XHQMJ_ISs6ygAAAcM"]
[Sun Apr 19 21:42:06.963611 2026] [:error] [pid 47775:tid 47855] [client 20.238.42.169:65207] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeTbrrmztjlk9tsmoewZNQAAAIw"]
[Sun Apr 19 21:42:12.494194 2026] [:error] [pid 15763:tid 15796] [client 20.238.42.169:65178] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeTbtLMXv1Y1THOoxaD_eQAAAgA"]
[Sun Apr 19 21:42:13.572141 2026] [:error] [pid 47772:tid 47805] [client 20.238.42.169:12227] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeTbtYc0L16cb4smAz_EgwAAABA"]
[Sun Apr 19 21:42:15.095928 2026] [:error] [pid 15760:tid 15773] [client 20.238.42.169:12266] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeTbt_SdD_XHQMJ_ISs6zwAAAcU"]
[Sun Apr 19 21:42:16.962711 2026] [:error] [pid 47775:tid 47843] [client 20.238.42.169:65164] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeTbuLmztjlk9tsmoewZQgAAAIA"]
[Sun Apr 19 21:42:19.462522 2026] [:error] [pid 47772:tid 47791] [client 20.238.42.169:65190] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeTbu4c0L16cb4smAz_EmgAAAAI"]
[Sun Apr 19 21:42:23.266505 2026] [:error] [pid 47772:tid 47802] [client 20.238.42.169:65111] [client 20.238.42.169] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeTbv4c0L16cb4smAz_EpAAAAA0"]
[Sun Apr 19 21:42:47.295571 2026] [:error] [pid 15765:tid 15877] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/maintura.php
[Sun Apr 19 21:42:47.584701 2026] [:error] [pid 15765:tid 15875] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/lclnqiii.php
[Sun Apr 19 21:42:47.839153 2026] [:error] [pid 15765:tid 15857] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Sun Apr 19 21:42:48.118093 2026] [:error] [pid 15765:tid 15874] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/3Cr1w6dfjTK.php
[Sun Apr 19 21:42:48.394892 2026] [:error] [pid 15765:tid 15869] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/uazsl.php
[Sun Apr 19 21:42:48.784008 2026] [:error] [pid 15765:tid 15853] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/mjq.php
[Sun Apr 19 21:42:49.450147 2026] [:error] [pid 15765:tid 15872] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/bypltspd.php
[Sun Apr 19 21:42:49.703769 2026] [:error] [pid 15765:tid 15867] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Sun Apr 19 21:42:49.985113 2026] [:error] [pid 15765:tid 15866] [client 20.238.42.169:12236] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sun Apr 19 22:50:50.432190 2026] [:error] [pid 15763:tid 15819] [client 146.70.194.222:46354] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeTryrMXv1Y1THOoxaATKwAAAhc"]
[Sun Apr 19 22:50:50.953579 2026] [:error] [pid 15764:tid 15838] [client 146.70.194.222:47234] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeTrymLL_sqdSHoVp-Q6bQAAAkw"]
[Mon Apr 20 01:57:58.766771 2026] [:error] [pid 47775:tid 47846] [client 43.131.36.84:35998] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeUXprmztjlk9tsmoexEeQAAAIM"]
[Mon Apr 20 03:30:30.254755 2026] [:error] [pid 34231:tid 34310] [client 79.224.166.237:50394] [client 79.224.166.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 79.224.166.237, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeUtVqk4tPvTXewQb48_eQAAAIw"]
[Mon Apr 20 03:30:30.260288 2026] [:error] [pid 34231:tid 34310] [client 79.224.166.237:50394] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 20 05:35:32.249439 2026] [:error] [pid 64440:tid 64452] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Apr 20 05:35:32.493394 2026] [:error] [pid 64440:tid 64447] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/oh.php
[Mon Apr 20 05:35:32.741664 2026] [:error] [pid 64440:tid 64456] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/lim.php
[Mon Apr 20 05:35:32.994366 2026] [:error] [pid 64440:tid 64445] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/hex.php
[Mon Apr 20 05:35:33.480020 2026] [:error] [pid 64440:tid 64457] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/gezdjgie.php
[Mon Apr 20 05:35:33.715531 2026] [:error] [pid 64440:tid 64454] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Mon Apr 20 05:35:33.951464 2026] [:error] [pid 64440:tid 64451] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Apr 20 05:35:34.203304 2026] [:error] [pid 64440:tid 64461] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Mon Apr 20 05:35:34.453101 2026] [:error] [pid 64440:tid 64448] [client 72.146.41.143:12096] File does not exist: /usr/local/apache/htdocs/suspended-page/just2.php
[Mon Apr 20 05:35:34.686500 2026] [:error] [pid 64440:tid 64452] [client 72.146.41.143:12096] [client 72.146.41.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aeVKptkVUvTgp8p7mrPl6gAAAMk"]
[Mon Apr 20 05:35:47.096796 2026] [:error] [pid 48101:tid 48114] [client 72.146.41.143:19149] [client 72.146.41.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aeVKs_IgenNbs2bVQGsTDwAAAYo"]
[Mon Apr 20 05:35:54.773822 2026] [:error] [pid 64334:tid 64426] [client 72.146.41.143:19137] [client 72.146.41.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "aeVKusNh9IxxDqsrPyOVfwAAAJc"]
[Mon Apr 20 05:36:04.262282 2026] [:error] [pid 64332:tid 64366] [client 72.146.41.143:13307] [client 72.146.41.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeVKxMAQ57uMKAVSYEn0JAAAABg"]
[Mon Apr 20 05:36:52.608389 2026] [:error] [pid 64333:tid 64398] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/owrlfoa.php
[Mon Apr 20 05:36:52.844635 2026] [:error] [pid 64333:tid 64385] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Mon Apr 20 05:36:53.080974 2026] [:error] [pid 64333:tid 64400] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Mon Apr 20 05:36:53.373122 2026] [:error] [pid 64333:tid 64379] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/bx.php
[Mon Apr 20 05:36:53.621785 2026] [:error] [pid 64333:tid 64384] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Apr 20 05:36:54.416090 2026] [:error] [pid 64333:tid 64378] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Mon Apr 20 05:36:54.652024 2026] [:error] [pid 64333:tid 64392] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/afggdg.php
[Mon Apr 20 05:36:55.012317 2026] [:error] [pid 64333:tid 64383] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Apr 20 05:36:55.251969 2026] [:error] [pid 64333:tid 64388] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the1.php
[Mon Apr 20 05:36:55.491624 2026] [:error] [pid 64333:tid 64398] [client 72.146.41.143:19215] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Mon Apr 20 06:00:44.542548 2026] [:error] [pid 47779:tid 47786] [client 43.156.232.190:49166] [client 43.156.232.190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeVQjIahGl1n9UkmcNju3AAAAUU"]
[Mon Apr 20 07:03:28.455251 2026] [:error] [pid 64333:tid 64400] [client 182.42.105.144:42535] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeVfQHZav9wH8wxMd_tjDgAAAFg"]
[Mon Apr 20 08:00:27.828637 2026] [:error] [pid 64332:tid 64349] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Mon Apr 20 08:00:28.069525 2026] [:error] [pid 64332:tid 64351] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Mon Apr 20 08:00:28.308992 2026] [:error] [pid 64332:tid 64358] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Mon Apr 20 08:00:28.549742 2026] [:error] [pid 64332:tid 64354] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Mon Apr 20 08:00:28.869091 2026] [:error] [pid 64332:tid 64354] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211022.php
[Mon Apr 20 08:00:29.110819 2026] [:error] [pid 64332:tid 64347] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Mon Apr 20 08:00:29.350053 2026] [:error] [pid 64332:tid 64346] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/cs.php
[Mon Apr 20 08:00:29.590510 2026] [:error] [pid 64332:tid 64345] [client 20.203.252.230:7516] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Mon Apr 20 10:57:26.648942 2026] [:error] [pid 11350:tid 11379] [client 43.165.70.220:54810] [client 43.165.70.220] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeWWFv4EoMBgOJuJnT0LhAAAABQ"]
[Mon Apr 20 12:09:44.673101 2026] [:error] [pid 11350:tid 11367] [client 43.131.45.213:47920] [client 43.131.45.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeWnCP4EoMBgOJuJnT0e8wAAAAg"]
[Mon Apr 20 13:32:28.916778 2026] [:error] [pid 11352:tid 11427] [client 103.65.237.216:53652] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "aeW6bGl10mhMSfJ7ir9zQgAAAI0"]
[Mon Apr 20 13:32:29.301446 2026] [:error] [pid 11350:tid 11364] [client 103.65.237.216:53700] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aeW6bf4EoMBgOJuJnT0tawAAAAU"]
[Mon Apr 20 14:27:12.460931 2026] [:error] [pid 11350:tid 11359] [client 49.51.52.250:33738] [client 49.51.52.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeXHQP4EoMBgOJuJnT02VwAAAAA"]
[Mon Apr 20 18:03:27.303036 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Mon Apr 20 18:03:27.543212 2026] [:error] [pid 11441:tid 11451] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/wtogs.php
[Mon Apr 20 18:03:27.811976 2026] [:error] [pid 11441:tid 11453] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Mon Apr 20 18:03:28.072475 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Mon Apr 20 18:03:28.433202 2026] [:error] [pid 11441:tid 11443] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Mon Apr 20 18:03:28.671590 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/2nzyHnOkEg.php
[Mon Apr 20 18:03:28.916720 2026] [:error] [pid 11441:tid 11457] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Mon Apr 20 18:03:29.156464 2026] [:error] [pid 11441:tid 11464] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Mon Apr 20 18:03:29.422504 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/wcoiw.php
[Mon Apr 20 18:03:29.731346 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:4085] File does not exist: /usr/local/apache/htdocs/suspended-page/3Cr1w6dfjTK.php
[Mon Apr 20 18:03:30.059975 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:4085] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwdgl.php"] [unique_id "aeX58sixByFUvmh319BizwAAAMc"]
[Mon Apr 20 18:03:30.869002 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:4076] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwdgl.php"] [unique_id "aeX58h3y7MHq1iB0qYqF7gAAAUU"]
[Mon Apr 20 18:03:31.718508 2026] [:error] [pid 42014:tid 42020] [client 172.161.76.204:4079] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwdgl.php"] [unique_id "aeX588ek-00-ZI0f1Npe6QAAAQQ"]
[Mon Apr 20 18:03:32.803733 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4036] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wwdgl.php"] [unique_id "aeX59B3y7MHq1iB0qYqF9AAAAUQ"]
[Mon Apr 20 18:03:34.656112 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:4061] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "aeX59sixByFUvmh319Bi3wAAAMc"]
[Mon Apr 20 18:03:35.486362 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:4062] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "aeX598ixByFUvmh319Bi4QAAAMU"]
[Mon Apr 20 18:03:36.641093 2026] [:error] [pid 42014:tid 42025] [client 172.161.76.204:3976] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "aeX5-Mek-00-ZI0f1Npe7wAAAQk"]
[Mon Apr 20 18:03:37.329114 2026] [:error] [pid 11441:tid 11453] [client 172.161.76.204:3987] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0yellow.php"] [unique_id "aeX5-cixByFUvmh319Bi5wAAAMo"]
[Mon Apr 20 18:03:39.062735 2026] [:error] [pid 11351:tid 11394] [client 172.161.76.204:4057] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeX5-wN8Z1-vktaI_tO8dAAAAEc"]
[Mon Apr 20 18:03:48.421691 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:4053] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeX6BMixByFUvmh319BjCgAAANI"]
[Mon Apr 20 18:03:50.627555 2026] [:error] [pid 6928:tid 6933] [client 172.161.76.204:4092] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeX6Bh3y7MHq1iB0qYqGGQAAAUM"]
[Mon Apr 20 18:03:51.816440 2026] [:error] [pid 6928:tid 6938] [client 172.161.76.204:4051] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "aeX6Bx3y7MHq1iB0qYqGHQAAAUg"]
[Mon Apr 20 18:03:53.720888 2026] [:error] [pid 42014:tid 42028] [client 172.161.76.204:3978] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeX6Ccek-00-ZI0f1Npe_AAAAQw"]
[Mon Apr 20 18:03:56.463728 2026] [:error] [pid 11441:tid 11464] [client 172.161.76.204:4083] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeX6DMixByFUvmh319BjHQAAANU"]
[Mon Apr 20 18:03:58.737978 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4005] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeX6Dh3y7MHq1iB0qYqGZgAAAUQ"]
[Mon Apr 20 18:03:59.708994 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:4047] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "aeX6D8ixByFUvmh319BjIgAAAMM"]
[Mon Apr 20 18:04:00.750392 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:4068] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeX6EB3y7MHq1iB0qYqGbQAAAUw"]
[Mon Apr 20 18:04:02.502081 2026] [:error] [pid 42014:tid 42033] [client 172.161.76.204:4094] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeX6Esek-00-ZI0f1NpfCgAAARE"]
[Mon Apr 20 18:04:03.346565 2026] [:error] [pid 11350:tid 11379] [client 172.161.76.204:3968] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeX6E_4EoMBgOJuJnT1a8gAAABQ"]
[Mon Apr 20 18:04:04.354967 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3983] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cjndd.php"] [unique_id "aeX6FMixByFUvmh319BjLAAAAMU"]
[Mon Apr 20 18:04:05.390197 2026] [:error] [pid 11441:tid 11451] [client 172.161.76.204:3922] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcakx.php"] [unique_id "aeX6FcixByFUvmh319BjMAAAAMg"]
[Mon Apr 20 18:04:06.458312 2026] [:error] [pid 11441:tid 11455] [client 172.161.76.204:3985] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcakx.php"] [unique_id "aeX6FsixByFUvmh319BjNgAAAMw"]
[Mon Apr 20 18:04:07.155675 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4029] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcakx.php"] [unique_id "aeX6F8ixByFUvmh319BjPQAAANc"]
[Mon Apr 20 18:04:07.956870 2026] [:error] [pid 11441:tid 11455] [client 172.161.76.204:3980] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xcakx.php"] [unique_id "aeX6F8ixByFUvmh319BjQgAAAMw"]
[Mon Apr 20 18:04:09.212299 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4071] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeX6GcixByFUvmh319BjSQAAANc"]
[Mon Apr 20 18:04:10.194421 2026] [:error] [pid 42014:tid 42025] [client 172.161.76.204:3907] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeX6Gsek-00-ZI0f1NpfFgAAAQk"]
[Mon Apr 20 18:04:11.833746 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:4086] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeX6G8ixByFUvmh319BjUAAAANI"]
[Mon Apr 20 18:04:12.744721 2026] [:error] [pid 42014:tid 42022] [client 172.161.76.204:4033] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zu.php"] [unique_id "aeX6HMek-00-ZI0f1NpfHAAAAQY"]
[Mon Apr 20 18:04:13.919037 2026] [:error] [pid 42014:tid 42040] [client 172.161.76.204:4064] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeX6Hcek-00-ZI0f1NpfHwAAARg"]
[Mon Apr 20 18:04:14.888426 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:4065] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeX6HsixByFUvmh319BjVQAAAME"]
[Mon Apr 20 18:04:15.593152 2026] [:error] [pid 11441:tid 11458] [client 172.161.76.204:4054] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeX6H8ixByFUvmh319BjWAAAAM8"]
[Mon Apr 20 18:04:16.283974 2026] [:error] [pid 11352:tid 11417] [client 172.161.76.204:3972] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dqagu.php"] [unique_id "aeX6IGl10mhMSfJ7ir-6ZQAAAIM"]
[Mon Apr 20 18:04:16.960946 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:4012] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "aeX6IMixByFUvmh319BjXQAAAMU"]
[Mon Apr 20 18:04:17.746920 2026] [:error] [pid 11350:tid 11360] [client 172.161.76.204:4009] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "aeX6If4EoMBgOJuJnT1a9wAAAAE"]
[Mon Apr 20 18:04:18.656099 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4058] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "aeX6IsixByFUvmh319BjZAAAANc"]
[Mon Apr 20 18:04:20.405866 2026] [:error] [pid 42014:tid 42025] [client 172.161.76.204:3990] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wxeyc.php"] [unique_id "aeX6JMek-00-ZI0f1NpfLAAAAQk"]
[Mon Apr 20 18:04:21.644745 2026] [:error] [pid 42014:tid 42016] [client 172.161.76.204:3969] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeX6Jcek-00-ZI0f1NpfLQAAAQA"]
[Mon Apr 20 18:04:22.439463 2026] [:error] [pid 11352:tid 11432] [client 172.161.76.204:3977] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeX6Jml10mhMSfJ7ir-6cQAAAJI"]
[Mon Apr 20 18:04:23.264099 2026] [:error] [pid 6928:tid 6938] [client 172.161.76.204:4084] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeX6Jx3y7MHq1iB0qYqGggAAAUg"]
[Mon Apr 20 18:04:24.115947 2026] [:error] [pid 11350:tid 11364] [client 172.161.76.204:4072] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fssxwoyh.php"] [unique_id "aeX6KP4EoMBgOJuJnT1a_gAAAAU"]
[Mon Apr 20 18:04:25.040148 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:4069] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeX6KR3y7MHq1iB0qYqGhgAAAUU"]
[Mon Apr 20 18:04:25.987563 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:4067] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeX6KcixByFUvmh319BjcwAAAM0"]
[Mon Apr 20 18:04:26.985031 2026] [:error] [pid 6928:tid 6947] [client 172.161.76.204:3937] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeX6Kh3y7MHq1iB0qYqGjgAAAVE"]
[Mon Apr 20 18:04:28.346859 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:4077] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mjq.php"] [unique_id "aeX6LMixByFUvmh319BjdgAAAMU"]
[Mon Apr 20 18:04:29.849044 2026] [:error] [pid 6928:tid 6952] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Mon Apr 20 18:04:30.294540 2026] [:error] [pid 6928:tid 6952] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/blqjs.php
[Mon Apr 20 18:04:30.570723 2026] [:error] [pid 6928:tid 6937] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Mon Apr 20 18:04:30.831711 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/ibano.php
[Mon Apr 20 18:04:31.118433 2026] [:error] [pid 6928:tid 6949] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/intall.php
[Mon Apr 20 18:04:31.358563 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tap.php
[Mon Apr 20 18:04:31.611070 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/diayd.php
[Mon Apr 20 18:04:31.875910 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Mon Apr 20 18:04:32.158175 2026] [:error] [pid 6928:tid 6940] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/xopgt.php
[Mon Apr 20 18:04:33.114394 2026] [:error] [pid 6928:tid 6938] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Mon Apr 20 18:04:33.354427 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4050] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Mon Apr 20 18:04:33.590199 2026] [:error] [pid 6928:tid 6944] [client 172.161.76.204:4050] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeX6MR3y7MHq1iB0qYqGsgAAAU4"]
[Mon Apr 20 18:04:35.097298 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:4048] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeX6Mx3y7MHq1iB0qYqGtgAAAVQ"]
[Mon Apr 20 18:04:36.920393 2026] [:error] [pid 11352:tid 11416] [client 172.161.76.204:3974] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeX6NGl10mhMSfJ7ir-6dQAAAII"]
[Mon Apr 20 18:04:38.448686 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:3904] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ccv.php"] [unique_id "aeX6Nml10mhMSfJ7ir-6egAAAJQ"]
[Mon Apr 20 18:04:40.248100 2026] [:error] [pid 11352:tid 11438] [client 172.161.76.204:4019] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeX6OGl10mhMSfJ7ir-6fQAAAJg"]
[Mon Apr 20 18:04:41.111980 2026] [:error] [pid 11352:tid 11437] [client 172.161.76.204:4059] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeX6OWl10mhMSfJ7ir-6fwAAAJc"]
[Mon Apr 20 18:04:43.085880 2026] [:error] [pid 42014:tid 42036] [client 172.161.76.204:4090] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeX6O8ek-00-ZI0f1NpfQQAAARQ"]
[Mon Apr 20 18:04:43.925711 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:4089] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byueb.php"] [unique_id "aeX6O8ixByFUvmh319BjkQAAAME"]
[Mon Apr 20 18:04:44.525431 2026] [:error] [pid 6928:tid 6940] [client 172.161.76.204:4010] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeX6PB3y7MHq1iB0qYqGxQAAAUo"]
[Mon Apr 20 18:04:46.041394 2026] [:error] [pid 11441:tid 11458] [client 172.161.76.204:4038] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeX6PsixByFUvmh319BjlgAAAM8"]
[Mon Apr 20 18:04:46.667679 2026] [:error] [pid 42014:tid 42028] [client 172.161.76.204:4060] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeX6Psek-00-ZI0f1NpfTgAAAQw"]
[Mon Apr 20 18:04:47.645603 2026] [:error] [pid 42014:tid 42031] [client 172.161.76.204:3973] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenium4.php"] [unique_id "aeX6P8ek-00-ZI0f1NpfVQAAAQ8"]
[Mon Apr 20 18:04:48.793004 2026] [:error] [pid 42014:tid 42026] [client 172.161.76.204:4055] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeX6QMek-00-ZI0f1NpfXQAAAQo"]
[Mon Apr 20 18:04:49.859038 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:4025] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeX6QR3y7MHq1iB0qYqGzwAAAUU"]
[Mon Apr 20 18:04:50.890495 2026] [:error] [pid 6928:tid 6940] [client 172.161.76.204:3905] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeX6Qh3y7MHq1iB0qYqG1AAAAUo"]
[Mon Apr 20 18:04:51.874483 2026] [:error] [pid 11350:tid 11359] [client 172.161.76.204:3979] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jvtsa.php"] [unique_id "aeX6Q_4EoMBgOJuJnT1bMAAAAAA"]
[Mon Apr 20 18:04:52.693550 2026] [:error] [pid 11350:tid 11383] [client 172.161.76.204:3915] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeX6RP4EoMBgOJuJnT1bNAAAABg"]
[Mon Apr 20 18:04:54.173840 2026] [:error] [pid 11352:tid 11423] [client 172.161.76.204:4066] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeX6Rml10mhMSfJ7ir-6hgAAAIk"]
[Mon Apr 20 18:04:55.330488 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:4082] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeX6R8ixByFUvmh319BjpwAAANA"]
[Mon Apr 20 18:04:56.559694 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:4093] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeX6SB3y7MHq1iB0qYqG3QAAAVQ"]
[Mon Apr 20 18:04:57.641821 2026] [:error] [pid 42014:tid 42037] [client 172.161.76.204:3984] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeX6Scek-00-ZI0f1NpfYgAAARU"]
[Mon Apr 20 18:04:58.776008 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4030] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeX6SsixByFUvmh319BjrQAAAMs"]
[Mon Apr 20 18:05:00.131465 2026] [:error] [pid 11352:tid 11414] [client 172.161.76.204:3975] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeX6TGl10mhMSfJ7ir-6jwAAAIA"]
[Mon Apr 20 18:05:01.367713 2026] [:error] [pid 11352:tid 11431] [client 172.161.76.204:4028] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeX6TWl10mhMSfJ7ir-6kQAAAJE"]
[Mon Apr 20 18:05:02.641302 2026] [:error] [pid 11352:tid 11419] [client 172.161.76.204:3998] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aeX6Tml10mhMSfJ7ir-6kgAAAIU"]
[Mon Apr 20 18:05:03.761351 2026] [:error] [pid 11350:tid 11377] [client 172.161.76.204:4095] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aeX6T_4EoMBgOJuJnT1bRQAAABI"]
[Mon Apr 20 18:05:05.437252 2026] [:error] [pid 11352:tid 11427] [client 172.161.76.204:4088] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aeX6UWl10mhMSfJ7ir-6nwAAAI0"]
[Mon Apr 20 18:05:06.750018 2026] [:error] [pid 11352:tid 11417] [client 172.161.76.204:3992] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "aeX6Uml10mhMSfJ7ir-6pAAAAIM"]
[Mon Apr 20 18:05:07.877176 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:3981] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeX6U8ixByFUvmh319BjsAAAAM0"]
[Mon Apr 20 18:05:08.997456 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4022] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeX6VB3y7MHq1iB0qYqG6gAAAUQ"]
[Mon Apr 20 18:05:09.933278 2026] [:error] [pid 42014:tid 42031] [client 172.161.76.204:3913] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeX6Vcek-00-ZI0f1NpfZwAAAQ8"]
[Mon Apr 20 18:05:11.265126 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:3986] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeX6Vx3y7MHq1iB0qYqG8AAAAVc"]
[Mon Apr 20 18:05:12.326622 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:3911] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xbbih.php"] [unique_id "aeX6WMixByFUvmh319BjuwAAAMc"]
[Mon Apr 20 18:05:14.424920 2026] [:error] [pid 6928:tid 6937] [client 172.161.76.204:3852] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xbbih.php"] [unique_id "aeX6Wh3y7MHq1iB0qYqG_QAAAUc"]
[Mon Apr 20 18:05:16.016856 2026] [:error] [pid 11351:tid 11390] [client 172.161.76.204:3982] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xbbih.php"] [unique_id "aeX6XAN8Z1-vktaI_tO9HwAAAEM"]
[Mon Apr 20 18:05:17.841439 2026] [:error] [pid 11441:tid 11449] [client 172.161.76.204:4074] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xbbih.php"] [unique_id "aeX6XcixByFUvmh319BjwAAAAMY"]
[Mon Apr 20 18:05:20.223998 2026] [:error] [pid 11352:tid 11437] [client 172.161.76.204:3926] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeX6YGl10mhMSfJ7ir-6rwAAAJc"]
[Mon Apr 20 18:05:22.066782 2026] [:error] [pid 11350:tid 11362] [client 172.161.76.204:4075] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeX6Yv4EoMBgOJuJnT1bVgAAAAM"]
[Mon Apr 20 18:05:24.525820 2026] [:error] [pid 11350:tid 11369] [client 172.161.76.204:4021] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeX6ZP4EoMBgOJuJnT1bWAAAAAo"]
[Mon Apr 20 18:05:26.973293 2026] [:error] [pid 11351:tid 11400] [client 172.161.76.204:4041] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beerd.php"] [unique_id "aeX6ZgN8Z1-vktaI_tO9MAAAAE0"]
[Mon Apr 20 18:05:30.274922 2026] [:error] [pid 11441:tid 11457] [client 172.161.76.204:4011] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lp6.php"] [unique_id "aeX6asixByFUvmh319Bj1QAAAM4"]
[Mon Apr 20 18:05:33.704736 2026] [:error] [pid 11351:tid 11404] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Mon Apr 20 18:05:33.944182 2026] [:error] [pid 11351:tid 11406] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/hfles.php
[Mon Apr 20 18:05:34.282000 2026] [:error] [pid 11351:tid 11397] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Mon Apr 20 18:05:34.522250 2026] [:error] [pid 11351:tid 11407] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/wcvejtpr.php
[Mon Apr 20 18:05:34.776827 2026] [:error] [pid 11351:tid 11394] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/awdld.php
[Mon Apr 20 18:05:35.021782 2026] [:error] [pid 11351:tid 11396] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/qqjki.php
[Mon Apr 20 18:05:35.372020 2026] [:error] [pid 11351:tid 11402] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Mon Apr 20 18:05:35.759184 2026] [:error] [pid 11351:tid 11390] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/ckk.php
[Mon Apr 20 18:05:35.998274 2026] [:error] [pid 11351:tid 11404] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Mon Apr 20 18:05:36.240493 2026] [:error] [pid 11351:tid 11406] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/ws58.php
[Mon Apr 20 18:05:36.479553 2026] [:error] [pid 11351:tid 11400] [client 172.161.76.204:4024] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Mon Apr 20 18:05:36.723898 2026] [:error] [pid 11351:tid 11403] [client 172.161.76.204:4024] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeX6cAN8Z1-vktaI_tO9TwAAAFA"]
[Mon Apr 20 18:05:37.402578 2026] [:error] [pid 42014:tid 42031] [client 172.161.76.204:4016] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeX6ccek-00-ZI0f1NpfiAAAAQ8"]
[Mon Apr 20 18:05:39.081078 2026] [:error] [pid 42014:tid 42022] [client 172.161.76.204:3936] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeX6c8ek-00-ZI0f1NpfigAAAQY"]
[Mon Apr 20 18:05:40.638749 2026] [:error] [pid 11352:tid 11420] [client 172.161.76.204:3994] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xjgdw.php"] [unique_id "aeX6dGl10mhMSfJ7ir-6yQAAAIY"]
[Mon Apr 20 18:05:41.885395 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:3930] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeX6dR3y7MHq1iB0qYqHEwAAAUU"]
[Mon Apr 20 18:05:43.751142 2026] [:error] [pid 6928:tid 6941] [client 172.161.76.204:3999] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeX6dx3y7MHq1iB0qYqHGAAAAUs"]
[Mon Apr 20 18:05:45.266874 2026] [:error] [pid 42014:tid 42017] [client 172.161.76.204:4020] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeX6ecek-00-ZI0f1NpflQAAAQE"]
[Mon Apr 20 18:05:47.412544 2026] [:error] [pid 11350:tid 11365] [client 172.161.76.204:4008] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_O1JFaUaF.php"] [unique_id "aeX6e_4EoMBgOJuJnT1biQAAAAY"]
[Mon Apr 20 18:05:48.411125 2026] [:error] [pid 11352:tid 11433] [client 172.161.76.204:4000] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeX6fGl10mhMSfJ7ir-63gAAAJM"]
[Mon Apr 20 18:05:50.433805 2026] [:error] [pid 6928:tid 6937] [client 172.161.76.204:3924] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeX6fh3y7MHq1iB0qYqHIQAAAUc"]
[Mon Apr 20 18:05:52.496168 2026] [:error] [pid 6928:tid 6941] [client 172.161.76.204:4040] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeX6gB3y7MHq1iB0qYqHJAAAAUs"]
[Mon Apr 20 18:05:53.759324 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:4070] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeX6gcixByFUvmh319Bj2gAAAME"]
[Mon Apr 20 18:05:54.725175 2026] [:error] [pid 11441:tid 11458] [client 172.161.76.204:3908] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aeX6gsixByFUvmh319Bj3QAAAM8"]
[Mon Apr 20 18:05:59.057525 2026] [:error] [pid 11352:tid 11429] [client 172.161.76.204:4007] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c4.php"] [unique_id "aeX6h2l10mhMSfJ7ir-66AAAAI8"]
[Mon Apr 20 18:06:18.520500 2026] [:error] [pid 6928:tid 6931] [client 172.161.76.204:3932] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeX6mh3y7MHq1iB0qYqHYwAAAUE"]
[Mon Apr 20 18:06:20.928159 2026] [:error] [pid 11351:tid 11409] [client 172.161.76.204:4006] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeX6nAN8Z1-vktaI_tO9bQAAAFY"]
[Mon Apr 20 18:06:22.104842 2026] [:error] [pid 11350:tid 11366] [client 172.161.76.204:4039] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeX6nv4EoMBgOJuJnT1bngAAAAc"]
[Mon Apr 20 18:06:22.927447 2026] [:error] [pid 11352:tid 11435] [client 172.161.76.204:4002] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lclnqiii.php"] [unique_id "aeX6nml10mhMSfJ7ir-68QAAAJU"]
[Mon Apr 20 18:06:24.428591 2026] [:error] [pid 42014:tid 42037] [client 172.161.76.204:4080] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeX6oMek-00-ZI0f1NpfugAAARU"]
[Mon Apr 20 18:06:25.279383 2026] [:error] [pid 11351:tid 11404] [client 172.161.76.204:3882] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeX6oQN8Z1-vktaI_tO9cAAAAFE"]
[Mon Apr 20 18:06:26.434020 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:3946] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeX6osixByFUvmh319BkCwAAANg"]
[Mon Apr 20 18:06:27.096489 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:3848] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maintura.php"] [unique_id "aeX6o8ixByFUvmh319BkDAAAANY"]
[Mon Apr 20 18:06:27.651651 2026] [:error] [pid 11441:tid 11460] [client 172.161.76.204:4046] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeX6o8ixByFUvmh319BkEAAAANE"]
[Mon Apr 20 18:06:28.854440 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:4001] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeX6pMixByFUvmh319BkGAAAAMM"]
[Mon Apr 20 18:06:29.532094 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:3954] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeX6pcixByFUvmh319BkHQAAANY"]
[Mon Apr 20 18:06:31.592514 2026] [:error] [pid 11441:tid 11458] [client 172.161.76.204:4003] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/itlvk.php"] [unique_id "aeX6p8ixByFUvmh319BkJQAAAM8"]
[Mon Apr 20 18:06:32.974713 2026] [:error] [pid 11352:tid 11420] [client 172.161.76.204:3953] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeX6qGl10mhMSfJ7ir-6-gAAAIY"]
[Mon Apr 20 18:06:34.497098 2026] [:error] [pid 11352:tid 11430] [client 172.161.76.204:4035] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeX6qml10mhMSfJ7ir-6_AAAAJA"]
[Mon Apr 20 18:06:35.577371 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:4087] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dljpy.php"] [unique_id "aeX6q8ixByFUvmh319BkKQAAAMM"]
[Mon Apr 20 18:06:38.019384 2026] [:error] [pid 11441:tid 11453] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/dljpy.php
[Mon Apr 20 18:06:38.280105 2026] [:error] [pid 11441:tid 11460] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Mon Apr 20 18:06:38.652135 2026] [:error] [pid 11441:tid 11449] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/only.php
[Mon Apr 20 18:06:38.891063 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Mon Apr 20 18:06:39.142633 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Mon Apr 20 18:06:39.424013 2026] [:error] [pid 11441:tid 11445] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Mon Apr 20 18:06:39.788479 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Mon Apr 20 18:06:40.054498 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/ynjli.php
[Mon Apr 20 18:06:40.349042 2026] [:error] [pid 11441:tid 11464] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/bykdo.php
[Mon Apr 20 18:06:40.803932 2026] [:error] [pid 11441:tid 11449] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Mon Apr 20 18:06:41.068056 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:4034] File does not exist: /usr/local/apache/htdocs/suspended-page/BhqKs28Cw94.php
[Mon Apr 20 18:06:41.329029 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4034] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/balin.php"] [unique_id "aeX6scixByFUvmh319BkTQAAAMs"]
[Mon Apr 20 18:06:42.465164 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:3944] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/balin.php"] [unique_id "aeX6sh3y7MHq1iB0qYqHcQAAAUU"]
[Mon Apr 20 18:06:44.523102 2026] [:error] [pid 6928:tid 6940] [client 172.161.76.204:3928] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/balin.php"] [unique_id "aeX6tB3y7MHq1iB0qYqHdQAAAUo"]
[Mon Apr 20 18:06:46.115007 2026] [:error] [pid 11350:tid 11380] [client 172.161.76.204:3993] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/balin.php"] [unique_id "aeX6tv4EoMBgOJuJnT1bsAAAABU"]
[Mon Apr 20 18:06:47.380087 2026] [:error] [pid 11350:tid 11363] [client 172.161.76.204:4014] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeX6t_4EoMBgOJuJnT1btQAAAAQ"]
[Mon Apr 20 18:06:48.259319 2026] [:error] [pid 11351:tid 11400] [client 172.161.76.204:3866] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeX6uAN8Z1-vktaI_tO9gAAAAE0"]
[Mon Apr 20 18:06:49.516035 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:3957] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeX6uR3y7MHq1iB0qYqHegAAAVc"]
[Mon Apr 20 18:06:50.834452 2026] [:error] [pid 11441:tid 11455] [client 172.161.76.204:3840] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zvinn.php"] [unique_id "aeX6usixByFUvmh319BkXQAAAMw"]
[Mon Apr 20 18:06:51.589381 2026] [:error] [pid 11352:tid 11422] [client 172.161.76.204:4063] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeX6u2l10mhMSfJ7ir-7DQAAAIg"]
[Mon Apr 20 18:06:52.362797 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:3988] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeX6vMixByFUvmh319BkYQAAANQ"]
[Mon Apr 20 18:06:53.194131 2026] [:error] [pid 11441:tid 11452] [client 172.161.76.204:4049] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeX6vcixByFUvmh319BkYgAAAMk"]
[Mon Apr 20 18:06:54.402887 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:3970] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nc4.php"] [unique_id "aeX6vsixByFUvmh319BkaAAAAM0"]
[Mon Apr 20 18:06:55.078862 2026] [:error] [pid 11441:tid 11443] [client 172.161.76.204:3960] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aeX6v8ixByFUvmh319BkbAAAAMA"]
[Mon Apr 20 18:06:56.682251 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:3995] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aeX6wMek-00-ZI0f1Npf0wAAAQs"]
[Mon Apr 20 18:06:57.461207 2026] [:error] [pid 11351:tid 11395] [client 172.161.76.204:3935] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aeX6wQN8Z1-vktaI_tO9mAAAAEg"]
[Mon Apr 20 18:06:58.455559 2026] [:error] [pid 11351:tid 11408] [client 172.161.76.204:3997] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clcdu.php"] [unique_id "aeX6wgN8Z1-vktaI_tO9nAAAAFU"]
[Mon Apr 20 18:06:59.083363 2026] [:error] [pid 42014:tid 42040] [client 172.161.76.204:3912] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeX6w8ek-00-ZI0f1Npf1QAAARg"]
[Mon Apr 20 18:06:59.977339 2026] [:error] [pid 6928:tid 6944] [client 172.161.76.204:3879] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeX6wx3y7MHq1iB0qYqHhwAAAU4"]
[Mon Apr 20 18:07:00.788452 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:3961] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeX6xMixByFUvmh319BkcQAAANc"]
[Mon Apr 20 18:07:01.429816 2026] [:error] [pid 11351:tid 11390] [client 172.161.76.204:4018] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfun.php"] [unique_id "aeX6xQN8Z1-vktaI_tO9pAAAAEM"]
[Mon Apr 20 18:07:01.978505 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3991] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeX6xcixByFUvmh319BkcwAAAMU"]
[Mon Apr 20 18:07:03.058467 2026] [:error] [pid 11352:tid 11425] [client 172.161.76.204:4015] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeX6x2l10mhMSfJ7ir-7FQAAAIs"]
[Mon Apr 20 18:07:03.875824 2026] [:error] [pid 11350:tid 11373] [client 172.161.76.204:4056] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeX6x_4EoMBgOJuJnT1bvwAAAA4"]
[Mon Apr 20 18:07:05.507775 2026] [:error] [pid 11441:tid 11464] [client 172.161.76.204:3996] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buc.php"] [unique_id "aeX6ycixByFUvmh319BkdgAAANU"]
[Mon Apr 20 18:07:06.580057 2026] [:error] [pid 11351:tid 11405] [client 172.161.76.204:3942] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeX6ygN8Z1-vktaI_tO9qgAAAFI"]
[Mon Apr 20 18:07:08.380712 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:3938] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeX6zMixByFUvmh319BkeAAAANA"]
[Mon Apr 20 18:07:09.495753 2026] [:error] [pid 11352:tid 11418] [client 172.161.76.204:4004] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeX6zWl10mhMSfJ7ir-7HAAAAIQ"]
[Mon Apr 20 18:07:11.491959 2026] [:error] [pid 11352:tid 11428] [client 172.161.76.204:3955] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uazsl.php"] [unique_id "aeX6z2l10mhMSfJ7ir-7JAAAAI4"]
[Mon Apr 20 18:07:13.194151 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:3929] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeX60cixByFUvmh319BkhgAAANg"]
[Mon Apr 20 18:07:15.140774 2026] [:error] [pid 11351:tid 11410] [client 172.161.76.204:3919] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeX60wN8Z1-vktaI_tO9tAAAAFc"]
[Mon Apr 20 18:07:16.808883 2026] [:error] [pid 42014:tid 42025] [client 172.161.76.204:3956] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeX61Mek-00-ZI0f1Npf6QAAAQk"]
[Mon Apr 20 18:07:17.736771 2026] [:error] [pid 11351:tid 11388] [client 172.161.76.204:3931] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rkiea.php"] [unique_id "aeX61QN8Z1-vktaI_tO9wAAAAEE"]
[Mon Apr 20 18:07:19.495842 2026] [:error] [pid 42014:tid 42020] [client 172.161.76.204:4091] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeX618ek-00-ZI0f1Npf7wAAAQQ"]
[Mon Apr 20 18:07:20.842505 2026] [:error] [pid 11351:tid 11397] [client 172.161.76.204:3909] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeX62AN8Z1-vktaI_tO9xQAAAEo"]
[Mon Apr 20 18:07:22.567634 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:3949] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeX62sixByFUvmh319BkjQAAANM"]
[Mon Apr 20 18:07:23.187783 2026] [:error] [pid 11351:tid 11407] [client 172.161.76.204:3854] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "aeX62wN8Z1-vktaI_tO9ygAAAFQ"]
[Mon Apr 20 18:07:23.963125 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:3863] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeX628ek-00-ZI0f1Npf_AAAARM"]
[Mon Apr 20 18:07:24.600382 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4017] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeX63MixByFUvmh319BkkgAAAMs"]
[Mon Apr 20 18:07:25.577932 2026] [:error] [pid 6928:tid 6932] [client 172.161.76.204:3967] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeX63R3y7MHq1iB0qYqHnAAAAUI"]
[Mon Apr 20 18:07:26.738515 2026] [:error] [pid 11441:tid 11453] [client 172.161.76.204:3941] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kbfr.php"] [unique_id "aeX63sixByFUvmh319BklAAAAMo"]
[Mon Apr 20 18:07:28.961508 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:3889] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeX64MixByFUvmh319BkmQAAAME"]
[Mon Apr 20 18:07:30.876880 2026] [:error] [pid 11350:tid 11372] [client 172.161.76.204:3943] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeX64v4EoMBgOJuJnT1b1gAAAA0"]
[Mon Apr 20 18:07:32.507501 2026] [:error] [pid 6928:tid 6945] [client 172.161.76.204:3971] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeX65B3y7MHq1iB0qYqHqwAAAU8"]
[Mon Apr 20 18:07:33.833060 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:3871] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccrheegr.php"] [unique_id "aeX65cixByFUvmh319BkoQAAAMs"]
[Mon Apr 20 18:07:35.856630 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:4013] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeX658ixByFUvmh319BkpQAAANQ"]
[Mon Apr 20 18:07:37.279861 2026] [:error] [pid 11352:tid 11421] [client 172.161.76.204:3899] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeX66Wl10mhMSfJ7ir-7LAAAAIc"]
[Mon Apr 20 18:07:39.375531 2026] [:error] [pid 11351:tid 11389] [client 172.161.76.204:3845] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeX66wN8Z1-vktaI_tO95AAAAEI"]
[Mon Apr 20 18:07:40.642989 2026] [:error] [pid 11441:tid 11452] [client 172.161.76.204:3917] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "aeX67MixByFUvmh319BksAAAAMk"]
[Mon Apr 20 18:07:42.621919 2026] [:error] [pid 6928:tid 6944] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/ws56.php
[Mon Apr 20 18:07:42.861054 2026] [:error] [pid 6928:tid 6951] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/cgi-bin_bkp.php
[Mon Apr 20 18:07:43.099870 2026] [:error] [pid 6928:tid 6933] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/aqotrjkg.php
[Mon Apr 20 18:07:43.443009 2026] [:error] [pid 6928:tid 6943] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Mon Apr 20 18:07:43.770547 2026] [:error] [pid 6928:tid 6931] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/kagug.php
[Mon Apr 20 18:07:44.424645 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Mon Apr 20 18:07:44.870473 2026] [:error] [pid 6928:tid 6946] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/kandw.php
[Mon Apr 20 18:07:45.150514 2026] [:error] [pid 6928:tid 6949] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/C1.php
[Mon Apr 20 18:07:45.467883 2026] [:error] [pid 6928:tid 6952] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/yee.php
[Mon Apr 20 18:07:45.846708 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/luyuc.php
[Mon Apr 20 18:07:46.209704 2026] [:error] [pid 6928:tid 6948] [client 172.161.76.204:3872] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Apr 20 18:07:46.471876 2026] [:error] [pid 6928:tid 6940] [client 172.161.76.204:3872] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeX68h3y7MHq1iB0qYqHxQAAAUo"]
[Mon Apr 20 18:07:47.425284 2026] [:error] [pid 11351:tid 11406] [client 172.161.76.204:3947] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeX68wN8Z1-vktaI_tO95wAAAFM"]
[Mon Apr 20 18:07:48.644555 2026] [:error] [pid 42014:tid 42017] [client 172.161.76.204:3851] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeX69Mek-00-ZI0f1NpgEgAAAQE"]
[Mon Apr 20 18:07:49.830368 2026] [:error] [pid 42014:tid 42030] [client 172.161.76.204:3846] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/krntz.php"] [unique_id "aeX69cek-00-ZI0f1NpgEwAAAQ4"]
[Mon Apr 20 18:07:50.715766 2026] [:error] [pid 11351:tid 11401] [client 172.161.76.204:3925] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeX69gN8Z1-vktaI_tO97gAAAE4"]
[Mon Apr 20 18:07:52.960832 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4079] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeX6-MixByFUvmh319BkzAAAANc"]
[Mon Apr 20 18:07:55.339025 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:3927] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeX6-x3y7MHq1iB0qYqHzgAAAUA"]
[Mon Apr 20 18:07:56.259564 2026] [:error] [pid 6928:tid 6952] [client 172.161.76.204:4037] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/161dfd072f.php"] [unique_id "aeX6_B3y7MHq1iB0qYqH0gAAAVY"]
[Mon Apr 20 18:07:58.194997 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:3858] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeX6_sixByFUvmh319Bk3AAAANQ"]
[Mon Apr 20 18:07:58.979565 2026] [:error] [pid 6928:tid 6944] [client 172.161.76.204:3799] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeX6_h3y7MHq1iB0qYqH1QAAAU4"]
[Mon Apr 20 18:07:59.868906 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:3952] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeX6_8ixByFUvmh319Bk5QAAANA"]
[Mon Apr 20 18:08:02.039768 2026] [:error] [pid 11351:tid 11399] [client 172.161.76.204:3812] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vopxx.php"] [unique_id "aeX7AgN8Z1-vktaI_tO97wAAAEw"]
[Mon Apr 20 18:08:03.097470 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:3880] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeX7Ax3y7MHq1iB0qYqH3AAAAUQ"]
[Mon Apr 20 18:08:03.820774 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:3870] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeX7Ax3y7MHq1iB0qYqH3wAAAUw"]
[Mon Apr 20 18:08:04.920088 2026] [:error] [pid 11351:tid 11397] [client 172.161.76.204:3945] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeX7BAN8Z1-vktaI_tO99wAAAEo"]
[Mon Apr 20 18:08:05.963790 2026] [:error] [pid 11351:tid 11391] [client 172.161.76.204:3862] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws59.php"] [unique_id "aeX7BQN8Z1-vktaI_tO9-AAAAEQ"]
[Mon Apr 20 18:08:07.795178 2026] [:error] [pid 6928:tid 6951] [client 172.161.76.204:3887] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeX7Bx3y7MHq1iB0qYqH6gAAAVU"]
[Mon Apr 20 18:08:09.789745 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:3916] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeX7CWl10mhMSfJ7ir-7SQAAAJQ"]
[Mon Apr 20 18:08:11.331284 2026] [:error] [pid 11350:tid 11381] [client 172.161.76.204:3778] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeX7C_4EoMBgOJuJnT1b6QAAABY"]
[Mon Apr 20 18:08:14.245050 2026] [:error] [pid 42014:tid 42031] [client 172.161.76.204:3983] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gkojz.php"] [unique_id "aeX7Dsek-00-ZI0f1NpgKAAAAQ8"]
[Mon Apr 20 18:08:26.692987 2026] [:error] [pid 11351:tid 11396] [client 172.161.76.204:4058] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeX7GgN8Z1-vktaI_tO-DgAAAEk"]
[Mon Apr 20 18:08:34.129067 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:4032] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeX7IsixByFUvmh319BlMwAAANQ"]
[Mon Apr 20 18:08:36.836804 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:3976] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeX7JMixByFUvmh319BlaAAAANc"]
[Mon Apr 20 18:08:38.052097 2026] [:error] [pid 42014:tid 42023] [client 172.161.76.204:4081] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeX7Jsek-00-ZI0f1NpgNwAAAQc"]
[Mon Apr 20 18:08:39.282281 2026] [:error] [pid 11441:tid 11449] [client 172.161.76.204:3980] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeX7J8ixByFUvmh319BlegAAAMY"]
[Mon Apr 20 18:08:40.169357 2026] [:error] [pid 11441:tid 11443] [client 172.161.76.204:4047] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeX7KMixByFUvmh319BlfQAAAMA"]
[Mon Apr 20 18:08:41.319901 2026] [:error] [pid 6928:tid 6943] [client 172.161.76.204:4083] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeX7KR3y7MHq1iB0qYqIEQAAAU0"]
[Mon Apr 20 18:08:42.135723 2026] [:error] [pid 6928:tid 6946] [client 172.161.76.204:4029] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeX7Kh3y7MHq1iB0qYqIEgAAAVA"]
[Mon Apr 20 18:08:43.359532 2026] [:error] [pid 11352:tid 11436] [client 172.161.76.204:3987] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gbhyv.php"] [unique_id "aeX7K2l10mhMSfJ7ir-7fQAAAJY"]
[Mon Apr 20 18:08:44.442856 2026] [:error] [pid 11350:tid 11362] [client 172.161.76.204:4092] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upll22.php"] [unique_id "aeX7LP4EoMBgOJuJnT1cGAAAAAM"]
[Mon Apr 20 18:08:46.275543 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/upll22.php
[Mon Apr 20 18:08:46.514446 2026] [:error] [pid 11441:tid 11445] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/tdsaz.php
[Mon Apr 20 18:08:46.782958 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/isvqf.php
[Mon Apr 20 18:08:47.102575 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Mon Apr 20 18:08:47.344720 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/atfis.php
[Mon Apr 20 18:08:47.691326 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/xtsr.php
[Mon Apr 20 18:08:48.047310 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/ckmtelzy.php
[Mon Apr 20 18:08:48.357785 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/abalqdol.php
[Mon Apr 20 18:08:48.728638 2026] [:error] [pid 11441:tid 11449] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/rgjrq.php
[Mon Apr 20 18:08:48.985380 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/emcgm.php
[Mon Apr 20 18:08:49.228735 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:4033] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Mon Apr 20 18:08:49.891112 2026] [:error] [pid 11441:tid 11445] [client 172.161.76.204:4033] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeX7McixByFUvmh319BlmgAAAMI"]
[Mon Apr 20 18:08:51.138888 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:4042] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeX7M8ek-00-ZI0f1NpgRgAAAQs"]
[Mon Apr 20 18:08:53.485689 2026] [:error] [pid 11352:tid 11438] [client 172.161.76.204:3977] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeX7NWl10mhMSfJ7ir-7hQAAAJg"]
[Mon Apr 20 18:08:54.532856 2026] [:error] [pid 11352:tid 11418] [client 172.161.76.204:4059] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeX7Nml10mhMSfJ7ir-7hgAAAIQ"]
[Mon Apr 20 18:08:55.235800 2026] [:error] [pid 11352:tid 11419] [client 172.161.76.204:3895] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeX7N2l10mhMSfJ7ir-7igAAAIU"]
[Mon Apr 20 18:08:56.003449 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:4076] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeX7OMixByFUvmh319BlpAAAAMc"]
[Mon Apr 20 18:08:56.637464 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:3940] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeX7OMixByFUvmh319BlqAAAANg"]
[Mon Apr 20 18:08:57.737546 2026] [:error] [pid 11351:tid 11410] [client 172.161.76.204:4010] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jtfocpif.php"] [unique_id "aeX7OQN8Z1-vktaI_tO-RQAAAFc"]
[Mon Apr 20 18:08:59.406309 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:3974] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeX7O8ixByFUvmh319BlrQAAANI"]
[Mon Apr 20 18:09:00.282867 2026] [:error] [pid 11441:tid 11455] [client 172.161.76.204:4089] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeX7PMixByFUvmh319BlswAAAMw"]
[Mon Apr 20 18:09:01.192846 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:4061] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeX7PcixByFUvmh319BltgAAANM"]
[Mon Apr 20 18:09:02.815685 2026] [:error] [pid 42014:tid 42039] [client 172.161.76.204:3923] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vaza.php"] [unique_id "aeX7Psek-00-ZI0f1NpgTAAAARc"]
[Mon Apr 20 18:09:03.443416 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:4065] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeX7P2l10mhMSfJ7ir-7jwAAAJQ"]
[Mon Apr 20 18:09:05.063928 2026] [:error] [pid 11441:tid 11458] [client 172.161.76.204:3920] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeX7QcixByFUvmh319BlyAAAAM8"]
[Mon Apr 20 18:09:05.682510 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:3985] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeX7QR3y7MHq1iB0qYqILwAAAUQ"]
[Mon Apr 20 18:09:06.519716 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:3990] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-denmono.php"] [unique_id "aeX7Qh3y7MHq1iB0qYqIMwAAAUw"]
[Mon Apr 20 18:09:07.135069 2026] [:error] [pid 6928:tid 6940] [client 172.161.76.204:3847] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeX7Qx3y7MHq1iB0qYqIOAAAAUo"]
[Mon Apr 20 18:09:07.767023 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:4093] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeX7Q8ek-00-ZI0f1NpgTwAAAQs"]
[Mon Apr 20 18:09:08.964504 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3850] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeX7RMixByFUvmh319Bl0AAAAMU"]
[Mon Apr 20 18:09:09.791739 2026] [:error] [pid 11350:tid 11371] [client 172.161.76.204:4084] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l10n.php"] [unique_id "aeX7Rf4EoMBgOJuJnT1cJgAAAAw"]
[Mon Apr 20 18:09:10.614461 2026] [:error] [pid 11350:tid 11368] [client 172.161.76.204:4051] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fss.php"] [unique_id "aeX7Rv4EoMBgOJuJnT1cJwAAAAk"]
[Mon Apr 20 18:09:11.169652 2026] [:error] [pid 42014:tid 42028] [client 172.161.76.204:4055] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fss.php"] [unique_id "aeX7R8ek-00-ZI0f1NpgVQAAAQw"]
[Mon Apr 20 18:09:12.018167 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4044] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fss.php"] [unique_id "aeX7SB3y7MHq1iB0qYqIQAAAAUQ"]
[Mon Apr 20 18:09:13.064254 2026] [:error] [pid 6928:tid 6936] [client 172.161.76.204:3939] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fss.php"] [unique_id "aeX7SR3y7MHq1iB0qYqIQwAAAUY"]
[Mon Apr 20 18:09:14.212612 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4073] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeX7SsixByFUvmh319Bl3QAAAMs"]
[Mon Apr 20 18:09:14.982458 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:3987] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeX7SsixByFUvmh319Bl4AAAAM0"]
[Mon Apr 20 18:09:15.682139 2026] [:error] [pid 11350:tid 11381] [client 172.161.76.204:3857] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeX7S_4EoMBgOJuJnT1cKwAAABY"]
[Mon Apr 20 18:09:16.442048 2026] [:error] [pid 11441:tid 11458] [client 172.161.76.204:4019] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/anczg.php"] [unique_id "aeX7TMixByFUvmh319Bl5gAAAM8"]
[Mon Apr 20 18:09:17.322269 2026] [:error] [pid 6928:tid 6939] [client 172.161.76.204:3913] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebuom.php"] [unique_id "aeX7TR3y7MHq1iB0qYqISAAAAUk"]
[Mon Apr 20 18:09:17.957897 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:4031] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebuom.php"] [unique_id "aeX7TR3y7MHq1iB0qYqISQAAAVc"]
[Mon Apr 20 18:09:18.584700 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:4050] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebuom.php"] [unique_id "aeX7Th3y7MHq1iB0qYqISwAAAUU"]
[Mon Apr 20 18:09:19.444841 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4022] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ebuom.php"] [unique_id "aeX7T8ixByFUvmh319Bl7gAAAMs"]
[Mon Apr 20 18:09:20.250066 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4094] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeX7UB3y7MHq1iB0qYqIUgAAAUQ"]
[Mon Apr 20 18:09:20.838748 2026] [:error] [pid 42014:tid 42020] [client 172.161.76.204:4054] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeX7UMek-00-ZI0f1NpgYAAAAQQ"]
[Mon Apr 20 18:09:21.550156 2026] [:error] [pid 11350:tid 11374] [client 172.161.76.204:4072] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeX7Uf4EoMBgOJuJnT1cMQAAAA8"]
[Mon Apr 20 18:09:22.204718 2026] [:error] [pid 11352:tid 11425] [client 172.161.76.204:3933] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zz8.php"] [unique_id "aeX7Uml10mhMSfJ7ir-7nwAAAIs"]
[Mon Apr 20 18:09:22.782189 2026] [:error] [pid 6928:tid 6948] [client 172.161.76.204:3981] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeX7Uh3y7MHq1iB0qYqIWwAAAVI"]
[Mon Apr 20 18:09:23.366788 2026] [:error] [pid 11351:tid 11395] [client 172.161.76.204:3859] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeX7UwN8Z1-vktaI_tO-WQAAAEg"]
[Mon Apr 20 18:09:24.304991 2026] [:error] [pid 11352:tid 11427] [client 172.161.76.204:4066] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeX7VGl10mhMSfJ7ir-7owAAAI0"]
[Mon Apr 20 18:09:25.256375 2026] [:error] [pid 11352:tid 11415] [client 172.161.76.204:3910] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/utchiha_py4mE1XY.php"] [unique_id "aeX7VWl10mhMSfJ7ir-7pgAAAIE"]
[Mon Apr 20 18:09:26.225771 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:3922] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeX7Vh3y7MHq1iB0qYqIYAAAAUQ"]
[Mon Apr 20 18:09:27.035764 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:3969] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeX7Vx3y7MHq1iB0qYqIYgAAAUU"]
[Mon Apr 20 18:09:28.225444 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:3998] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeX7WB3y7MHq1iB0qYqIZgAAAVQ"]
[Mon Apr 20 18:09:29.075388 2026] [:error] [pid 42014:tid 42021] [client 172.161.76.204:3804] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sde.php"] [unique_id "aeX7Wcek-00-ZI0f1NpgaAAAAQU"]
[Mon Apr 20 18:09:30.139829 2026] [:error] [pid 42014:tid 42020] [client 172.161.76.204:4077] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeX7Wsek-00-ZI0f1NpgawAAAQQ"]
[Mon Apr 20 18:09:31.260970 2026] [:error] [pid 42014:tid 42029] [client 172.161.76.204:4048] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeX7W8ek-00-ZI0f1NpgbwAAAQ0"]
[Mon Apr 20 18:09:32.643834 2026] [:error] [pid 6928:tid 6946] [client 172.161.76.204:4023] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeX7XB3y7MHq1iB0qYqIcQAAAVA"]
[Mon Apr 20 18:09:34.677537 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4086] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sale.php"] [unique_id "aeX7XsixByFUvmh319Bl-gAAANc"]
[Mon Apr 20 18:09:35.671661 2026] [:error] [pid 11350:tid 11365] [client 172.161.76.204:3891] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeX7X_4EoMBgOJuJnT1cOQAAAAY"]
[Mon Apr 20 18:09:36.646015 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:3853] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeX7YB3y7MHq1iB0qYqIdgAAAVc"]
[Mon Apr 20 18:09:37.489192 2026] [:error] [pid 11352:tid 11426] [client 172.161.76.204:4038] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeX7YWl10mhMSfJ7ir-7tAAAAIw"]
[Mon Apr 20 18:09:38.991064 2026] [:error] [pid 11351:tid 11389] [client 172.161.76.204:4075] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oircv.php"] [unique_id "aeX7YgN8Z1-vktaI_tO-aQAAAEI"]
[Mon Apr 20 18:09:39.846081 2026] [:error] [pid 6928:tid 6945] [client 172.161.76.204:4005] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeX7Yx3y7MHq1iB0qYqIgAAAAU8"]
[Mon Apr 20 18:09:40.575211 2026] [:error] [pid 6928:tid 6951] [client 172.161.76.204:4027] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeX7ZB3y7MHq1iB0qYqIhAAAAVU"]
[Mon Apr 20 18:09:41.424837 2026] [:error] [pid 42014:tid 42019] [client 172.161.76.204:4088] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeX7Zcek-00-ZI0f1NpgeAAAAQM"]
[Mon Apr 20 18:09:42.244427 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:4074] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coiuz.php"] [unique_id "aeX7ZsixByFUvmh319BmAgAAAMQ"]
[Mon Apr 20 18:09:43.057574 2026] [:error] [pid 42014:tid 42020] [client 172.161.76.204:3883] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeX7Z8ek-00-ZI0f1NpgegAAAQQ"]
[Mon Apr 20 18:09:44.045888 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:3950] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeX7aMixByFUvmh319BmBAAAAM0"]
[Mon Apr 20 18:09:45.188754 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:3864] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeX7aR3y7MHq1iB0qYqIjgAAAVc"]
[Mon Apr 20 18:09:46.674985 2026] [:error] [pid 6928:tid 6931] [client 172.161.76.204:3911] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a8.php"] [unique_id "aeX7ah3y7MHq1iB0qYqIjwAAAUE"]
[Mon Apr 20 18:09:47.418654 2026] [:error] [pid 11441:tid 11457] [client 172.161.76.204:3975] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akhvg.php"] [unique_id "aeX7a8ixByFUvmh319BmCwAAAM4"]
[Mon Apr 20 18:09:48.617949 2026] [:error] [pid 11351:tid 11403] [client 172.161.76.204:4069] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/akhvg.php"] [unique_id "aeX7bAN8Z1-vktaI_tO-cAAAAFA"]
[Mon Apr 20 18:09:49.619733 2026] [:error] [pid 42014:tid 42032] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/akhvg.php
[Mon Apr 20 18:09:49.868855 2026] [:error] [pid 42014:tid 42016] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/2ksm17n.php
[Mon Apr 20 18:09:50.116264 2026] [:error] [pid 42014:tid 42019] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/aa21.php
[Mon Apr 20 18:09:51.580467 2026] [:error] [pid 42014:tid 42024] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Mon Apr 20 18:09:51.866455 2026] [:error] [pid 42014:tid 42034] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/zyjhr.php
[Mon Apr 20 18:09:52.369611 2026] [:error] [pid 42014:tid 42033] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/gi.php
[Mon Apr 20 18:09:52.644145 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Mon Apr 20 18:09:52.891109 2026] [:error] [pid 42014:tid 42039] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Mon Apr 20 18:09:53.136092 2026] [:error] [pid 42014:tid 42037] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Mon Apr 20 18:09:53.377648 2026] [:error] [pid 42014:tid 42017] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/bivvw.php
[Mon Apr 20 18:09:53.639896 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:3790] File does not exist: /usr/local/apache/htdocs/suspended-page/new3.php
[Mon Apr 20 18:09:55.131900 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:3790] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/frdyx.php"] [unique_id "aeX7c8ek-00-ZI0f1NpglwAAAQs"]
[Mon Apr 20 18:09:55.910214 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:4095] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/frdyx.php"] [unique_id "aeX7c8ixByFUvmh319BmHgAAAMc"]
[Mon Apr 20 18:09:58.200808 2026] [:error] [pid 11351:tid 11387] [client 172.161.76.204:3816] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/frdyx.php"] [unique_id "aeX7dgN8Z1-vktaI_tO-dgAAAEA"]
[Mon Apr 20 18:09:59.425437 2026] [:error] [pid 42014:tid 42021] [client 172.161.76.204:3979] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/frdyx.php"] [unique_id "aeX7d8ek-00-ZI0f1NpgugAAAQU"]
[Mon Apr 20 18:10:01.034840 2026] [:error] [pid 6928:tid 6936] [client 172.161.76.204:4030] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeX7eR3y7MHq1iB0qYqIlwAAAUY"]
[Mon Apr 20 18:10:01.960898 2026] [:error] [pid 42014:tid 42032] [client 172.161.76.204:3989] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeX7ecek-00-ZI0f1NpgyAAAARA"]
[Mon Apr 20 18:10:03.104836 2026] [:error] [pid 11350:tid 11370] [client 172.161.76.204:4041] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeX7e_4EoMBgOJuJnT1cRwAAAAs"]
[Mon Apr 20 18:10:04.135972 2026] [:error] [pid 11350:tid 11368] [client 172.161.76.204:4040] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/whtrq.php"] [unique_id "aeX7fP4EoMBgOJuJnT1cSAAAAAk"]
[Mon Apr 20 18:10:05.048157 2026] [:error] [pid 11351:tid 11402] [client 172.161.76.204:3884] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeX7fQN8Z1-vktaI_tO-ngAAAE8"]
[Mon Apr 20 18:10:05.834871 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:4043] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeX7fcixByFUvmh319BmpQAAANA"]
[Mon Apr 20 18:10:06.485140 2026] [:error] [pid 11351:tid 11388] [client 172.161.76.204:4040] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeX7fgN8Z1-vktaI_tO-nwAAAEE"]
[Mon Apr 20 18:10:07.197639 2026] [:error] [pid 6928:tid 6952] [client 172.161.76.204:3881] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxl.php"] [unique_id "aeX7fx3y7MHq1iB0qYqImwAAAVY"]
[Mon Apr 20 18:10:07.750432 2026] [:error] [pid 42014:tid 42037] [client 172.161.76.204:3978] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeX7f8ek-00-ZI0f1NpgzgAAARU"]
[Mon Apr 20 18:10:09.035359 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:3972] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeX7gcixByFUvmh319BmqgAAAME"]
[Mon Apr 20 18:10:09.945723 2026] [:error] [pid 6928:tid 6947] [client 172.161.76.204:3897] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeX7gR3y7MHq1iB0qYqIowAAAVE"]
[Mon Apr 20 18:10:11.448978 2026] [:error] [pid 6928:tid 6933] [client 172.161.76.204:4053] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abpxrnwe.php"] [unique_id "aeX7gx3y7MHq1iB0qYqIqgAAAUM"]
[Mon Apr 20 18:10:12.108931 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:3915] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeX7hMek-00-ZI0f1Npg0wAAAQs"]
[Mon Apr 20 18:10:13.558329 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:4082] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeX7hcixByFUvmh319BmsgAAANA"]
[Mon Apr 20 18:10:14.431580 2026] [:error] [pid 11352:tid 11433] [client 172.161.76.204:3986] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeX7hml10mhMSfJ7ir-7xwAAAJM"]
[Mon Apr 20 18:10:15.256110 2026] [:error] [pid 11441:tid 11443] [client 172.161.76.204:3963] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "aeX7h8ixByFUvmh319BmtwAAAMA"]
[Mon Apr 20 18:10:15.969293 2026] [:error] [pid 11350:tid 11368] [client 172.161.76.204:3860] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeX7h_4EoMBgOJuJnT1cTwAAAAk"]
[Mon Apr 20 18:10:16.525840 2026] [:error] [pid 42014:tid 42016] [client 172.161.76.204:3958] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeX7iMek-00-ZI0f1Npg3QAAAQA"]
[Mon Apr 20 18:10:17.143853 2026] [:error] [pid 42014:tid 42018] [client 172.161.76.204:3868] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeX7icek-00-ZI0f1Npg4AAAAQI"]
[Mon Apr 20 18:10:17.705383 2026] [:error] [pid 11441:tid 11449] [client 172.161.76.204:4068] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tot.php"] [unique_id "aeX7icixByFUvmh319BmuwAAAMY"]
[Mon Apr 20 18:10:18.654051 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:3992] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeX7isixByFUvmh319BmvwAAANg"]
[Mon Apr 20 18:10:19.622755 2026] [:error] [pid 11441:tid 11460] [client 172.161.76.204:4052] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeX7i8ixByFUvmh319BmwAAAANE"]
[Mon Apr 20 18:10:20.708288 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4008] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeX7jMixByFUvmh319BmxAAAAMs"]
[Mon Apr 20 18:10:21.560638 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:3842] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-220.php"] [unique_id "aeX7jcek-00-ZI0f1Npg5AAAARM"]
[Mon Apr 20 18:10:22.360000 2026] [:error] [pid 42014:tid 42026] [client 172.161.76.204:3908] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeX7jsek-00-ZI0f1Npg5QAAAQo"]
[Mon Apr 20 18:10:23.166258 2026] [:error] [pid 42014:tid 42034] [client 172.161.76.204:4036] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeX7j8ek-00-ZI0f1Npg5wAAARI"]
[Mon Apr 20 18:10:23.670708 2026] [:error] [pid 42014:tid 42021] [client 172.161.76.204:4062] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeX7j8ek-00-ZI0f1Npg6QAAAQU"]
[Mon Apr 20 18:10:25.293594 2026] [:error] [pid 42014:tid 42036] [client 172.161.76.204:3999] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/azpaq.php"] [unique_id "aeX7kcek-00-ZI0f1Npg7gAAARQ"]
[Mon Apr 20 18:10:25.884079 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:3869] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeX7kcek-00-ZI0f1Npg8gAAARM"]
[Mon Apr 20 18:10:27.772926 2026] [:error] [pid 6928:tid 6949] [client 172.161.76.204:3937] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeX7kx3y7MHq1iB0qYqIrQAAAVM"]
[Mon Apr 20 18:10:28.763841 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3968] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeX7lMixByFUvmh319Bm0wAAAMU"]
[Mon Apr 20 18:10:29.357105 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:3818] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bclms.php"] [unique_id "aeX7lcixByFUvmh319Bm1gAAANM"]
[Mon Apr 20 18:10:30.071219 2026] [:error] [pid 42014:tid 42019] [client 172.161.76.204:4064] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dgmry.php"] [unique_id "aeX7lsek-00-ZI0f1NphBwAAAQM"]
[Mon Apr 20 18:10:30.743368 2026] [:error] [pid 11352:tid 11416] [client 172.161.76.204:3787] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dgmry.php"] [unique_id "aeX7lml10mhMSfJ7ir-73AAAAII"]
[Mon Apr 20 18:10:31.424979 2026] [:error] [pid 11352:tid 11418] [client 172.161.76.204:4039] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dgmry.php"] [unique_id "aeX7l2l10mhMSfJ7ir-74gAAAIQ"]
[Mon Apr 20 18:10:48.386088 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:3951] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeX7qMixByFUvmh319Bm4wAAANA"]
[Mon Apr 20 18:10:55.251847 2026] [:error] [pid 11351:tid 11398] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Mon Apr 20 18:10:55.493868 2026] [:error] [pid 11351:tid 11389] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php
[Mon Apr 20 18:10:56.022584 2026] [:error] [pid 11351:tid 11403] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/dyxbc.php
[Mon Apr 20 18:10:56.318466 2026] [:error] [pid 11351:tid 11411] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Mon Apr 20 18:10:56.867097 2026] [:error] [pid 11351:tid 11388] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/cxxuv.php
[Mon Apr 20 18:10:57.119541 2026] [:error] [pid 11351:tid 11409] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/lp5.php
[Mon Apr 20 18:10:57.540650 2026] [:error] [pid 11351:tid 11394] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Mon Apr 20 18:10:57.813939 2026] [:error] [pid 11351:tid 11410] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/bxhnfdgd.php
[Mon Apr 20 18:10:58.183825 2026] [:error] [pid 11351:tid 11397] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Mon Apr 20 18:10:58.425851 2026] [:error] [pid 11351:tid 11392] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/ctjpseby.php
[Mon Apr 20 18:10:58.667751 2026] [:error] [pid 11351:tid 11401] [client 172.161.76.204:3748] File does not exist: /usr/local/apache/htdocs/suspended-page/assacc.php
[Mon Apr 20 18:10:59.010445 2026] [:error] [pid 11351:tid 11402] [client 172.161.76.204:3748] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeX7swN8Z1-vktaI_tO-zgAAAE8"]
[Mon Apr 20 18:11:00.461376 2026] [:error] [pid 11352:tid 11427] [client 172.161.76.204:3957] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeX7tGl10mhMSfJ7ir-7_wAAAI0"]
[Mon Apr 20 18:11:02.153006 2026] [:error] [pid 11352:tid 11416] [client 172.161.76.204:3780] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeX7tml10mhMSfJ7ir-8AAAAAII"]
[Mon Apr 20 18:11:02.892579 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:4067] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "aeX7tsixByFUvmh319BnAgAAANI"]
[Mon Apr 20 18:11:04.529824 2026] [:error] [pid 6928:tid 6954] [client 172.161.76.204:4085] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeX7uB3y7MHq1iB0qYqI1AAAAVg"]
[Mon Apr 20 18:11:05.126902 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:3912] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeX7uR3y7MHq1iB0qYqI1gAAAUA"]
[Mon Apr 20 18:11:06.360075 2026] [:error] [pid 42014:tid 42032] [client 172.161.76.204:4024] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeX7usek-00-ZI0f1NphJgAAARA"]
[Mon Apr 20 18:11:06.912941 2026] [:error] [pid 11352:tid 11433] [client 172.161.76.204:3948] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ardsw.php"] [unique_id "aeX7uml10mhMSfJ7ir-8CAAAAJM"]
[Mon Apr 20 18:11:07.639925 2026] [:error] [pid 11352:tid 11430] [client 172.161.76.204:3856] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeX7u2l10mhMSfJ7ir-8CgAAAJA"]
[Mon Apr 20 18:11:08.310295 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:4026] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeX7vMixByFUvmh319BnBgAAAMQ"]
[Mon Apr 20 18:11:09.317057 2026] [:error] [pid 11350:tid 11374] [client 172.161.76.204:4014] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeX7vf4EoMBgOJuJnT1cdgAAAA8"]
[Mon Apr 20 18:11:10.871035 2026] [:error] [pid 11441:tid 11452] [client 172.161.76.204:4001] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b7cdb465.php"] [unique_id "aeX7vsixByFUvmh319BnCQAAAMk"]
[Mon Apr 20 18:11:12.077347 2026] [:error] [pid 11441:tid 11451] [client 172.161.76.204:4071] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeX7wMixByFUvmh319BnEgAAAMg"]
[Mon Apr 20 18:11:15.441725 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:3848] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeX7w8ixByFUvmh319BnHAAAANQ"]
[Mon Apr 20 18:11:16.561922 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:4056] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeX7xB3y7MHq1iB0qYqI7AAAAUw"]
[Mon Apr 20 18:11:17.783126 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:3982] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/home.php"] [unique_id "aeX7xcixByFUvmh319BnIgAAANg"]
[Mon Apr 20 18:11:19.056454 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:3984] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeX7x8ixByFUvmh319BnKQAAAMc"]
[Mon Apr 20 18:11:19.897880 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:4012] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeX7x2l10mhMSfJ7ir-8EgAAAJQ"]
[Mon Apr 20 18:11:20.612461 2026] [:error] [pid 11350:tid 11377] [client 172.161.76.204:4025] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeX7yP4EoMBgOJuJnT1cggAAABI"]
[Mon Apr 20 18:11:21.345300 2026] [:error] [pid 11350:tid 11383] [client 172.161.76.204:4078] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeX7yf4EoMBgOJuJnT1chAAAABg"]
[Mon Apr 20 18:11:21.908768 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:4070] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeX7ycixByFUvmh319BnLAAAAMs"]
[Mon Apr 20 18:11:22.796225 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:4009] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeX7ysixByFUvmh319BnLQAAANY"]
[Mon Apr 20 18:11:23.685383 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:3932] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeX7y8ixByFUvmh319BnMQAAANM"]
[Mon Apr 20 18:11:24.300495 2026] [:error] [pid 42014:tid 42019] [client 172.161.76.204:4049] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gedim.php"] [unique_id "aeX7zMek-00-ZI0f1NphNgAAAQM"]
[Mon Apr 20 18:11:25.118686 2026] [:error] [pid 11441:tid 11464] [client 172.161.76.204:3991] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeX7zcixByFUvmh319BnNAAAANU"]
[Mon Apr 20 18:11:25.649879 2026] [:error] [pid 11441:tid 11449] [client 172.161.76.204:4057] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeX7zcixByFUvmh319BnOAAAAMY"]
[Mon Apr 20 18:11:26.239001 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:3995] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeX7zsixByFUvmh319BnOgAAAMM"]
[Mon Apr 20 18:11:27.020461 2026] [:error] [pid 42014:tid 42039] [client 172.161.76.204:4091] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kduhq.php"] [unique_id "aeX7z8ek-00-ZI0f1NphOwAAARc"]
[Mon Apr 20 18:11:28.069416 2026] [:error] [pid 42014:tid 42034] [client 172.161.76.204:3973] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeX70Mek-00-ZI0f1NphPwAAARI"]
[Mon Apr 20 18:11:29.250675 2026] [:error] [pid 11352:tid 11421] [client 172.161.76.204:3997] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeX70Wl10mhMSfJ7ir-8GgAAAIc"]
[Mon Apr 20 18:11:29.875222 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:3720] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeX70cixByFUvmh319BnQgAAANg"]
[Mon Apr 20 18:11:30.615182 2026] [:error] [pid 11352:tid 11419] [client 172.161.76.204:4087] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "aeX70ml10mhMSfJ7ir-8HQAAAIU"]
[Mon Apr 20 18:11:31.277139 2026] [:error] [pid 11441:tid 11445] [client 172.161.76.204:3962] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeX708ixByFUvmh319BnRQAAAMI"]
[Mon Apr 20 18:11:31.912067 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:4046] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeX708ixByFUvmh319BnRwAAAME"]
[Mon Apr 20 18:11:32.534155 2026] [:error] [pid 11441:tid 11452] [client 172.161.76.204:3934] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeX71MixByFUvmh319BnSQAAAMk"]
[Mon Apr 20 18:11:33.230398 2026] [:error] [pid 11351:tid 11393] [client 172.161.76.204:3919] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/junvh.php"] [unique_id "aeX71QN8Z1-vktaI_tO-4wAAAEY"]
[Mon Apr 20 18:11:34.128719 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:4035] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeX71h3y7MHq1iB0qYqI9wAAAUw"]
[Mon Apr 20 18:11:35.045915 2026] [:error] [pid 42014:tid 42039] [client 172.161.76.204:4007] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeX718ek-00-ZI0f1NphRwAAARc"]
[Mon Apr 20 18:11:36.360846 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:3954] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeX72MixByFUvmh319BnTgAAAMM"]
[Mon Apr 20 18:11:36.947192 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:3797] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX1.php"] [unique_id "aeX72MixByFUvmh319BnUAAAAME"]
[Mon Apr 20 18:11:37.799058 2026] [:error] [pid 11351:tid 11395] [client 172.161.76.204:3878] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeX72QN8Z1-vktaI_tO-7AAAAEg"]
[Mon Apr 20 18:11:38.329940 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:3930] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeX72sixByFUvmh319BnVwAAANY"]
[Mon Apr 20 18:11:39.157403 2026] [:error] [pid 11441:tid 11451] [client 172.161.76.204:3921] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeX728ixByFUvmh319BnWgAAAMg"]
[Mon Apr 20 18:11:39.772932 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:3994] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "aeX728ixByFUvmh319BnXgAAANI"]
[Mon Apr 20 18:11:40.531249 2026] [:error] [pid 11441:tid 11453] [client 172.161.76.204:4006] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeX73MixByFUvmh319BnYwAAAMo"]
[Mon Apr 20 18:11:41.218886 2026] [:error] [pid 11351:tid 11392] [client 172.161.76.204:3843] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeX73QN8Z1-vktaI_tO-8AAAAEU"]
[Mon Apr 20 18:11:41.992816 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:3926] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeX73cek-00-ZI0f1NphWgAAAQs"]
[Mon Apr 20 18:11:42.817166 2026] [:error] [pid 11352:tid 11425] [client 172.161.76.204:4000] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dhjqs.php"] [unique_id "aeX73ml10mhMSfJ7ir-8KgAAAIs"]
[Mon Apr 20 18:11:43.502449 2026] [:error] [pid 11351:tid 11390] [client 172.161.76.204:3971] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeX73wN8Z1-vktaI_tO-8wAAAEM"]
[Mon Apr 20 18:11:44.392506 2026] [:error] [pid 11351:tid 11393] [client 172.161.76.204:4018] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeX74AN8Z1-vktaI_tO-9AAAAEY"]
[Mon Apr 20 18:11:45.104436 2026] [:error] [pid 6928:tid 6951] [client 172.161.76.204:3909] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeX74R3y7MHq1iB0qYqI-QAAAVU"]
[Mon Apr 20 18:11:45.637387 2026] [:error] [pid 11441:tid 11452] [client 172.161.76.204:3901] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "aeX74cixByFUvmh319BnbgAAAMk"]
[Mon Apr 20 18:11:46.414610 2026] [:error] [pid 42014:tid 42030] [client 172.161.76.204:3906] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aeX74sek-00-ZI0f1NphcQAAAQ4"]
[Mon Apr 20 18:11:46.946999 2026] [:error] [pid 11441:tid 11444] [client 172.161.76.204:4060] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aeX74sixByFUvmh319BncwAAAME"]
[Mon Apr 20 18:11:47.630654 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:3996] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aeX748ixByFUvmh319BneAAAANI"]
[Mon Apr 20 18:11:48.224106 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:4011] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13ede.php"] [unique_id "aeX75MixByFUvmh319BnewAAAMU"]
[Mon Apr 20 18:11:48.869489 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:3880] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeX75MixByFUvmh319BnfgAAANc"]
[Mon Apr 20 18:11:50.035890 2026] [:error] [pid 11351:tid 11395] [client 172.161.76.204:3789] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeX75gN8Z1-vktaI_tO--gAAAEg"]
[Mon Apr 20 18:11:51.005740 2026] [:error] [pid 42014:tid 42019] [client 172.161.76.204:3849] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeX758ek-00-ZI0f1NphdwAAAQM"]
[Mon Apr 20 18:11:51.747404 2026] [:error] [pid 11350:tid 11360] [client 172.161.76.204:3845] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xigmltad.php"] [unique_id "aeX75_4EoMBgOJuJnT1cmAAAAAE"]
[Mon Apr 20 18:11:52.449693 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:3929] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-124.php"] [unique_id "aeX76MixByFUvmh319BnjgAAANI"]
[Mon Apr 20 18:11:53.002537 2026] [:error] [pid 6928:tid 6949] [client 172.161.76.204:3960] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-124.php"] [unique_id "aeX76R3y7MHq1iB0qYqJAwAAAVM"]
[Mon Apr 20 18:11:53.875383 2026] [:error] [pid 11351:tid 11396] [client 172.161.76.204:3864] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-124.php"] [unique_id "aeX76QN8Z1-vktaI_tO-_gAAAEk"]
[Mon Apr 20 18:11:54.477479 2026] [:error] [pid 11352:tid 11425] [client 172.161.76.204:4020] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-124.php"] [unique_id "aeX76ml10mhMSfJ7ir-8MwAAAIs"]
[Mon Apr 20 18:11:55.251443 2026] [:error] [pid 11350:tid 11359] [client 172.161.76.204:3904] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeX76_4EoMBgOJuJnT1cngAAAAA"]
[Mon Apr 20 18:11:56.045508 2026] [:error] [pid 6928:tid 6936] [client 172.161.76.204:3914] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeX77B3y7MHq1iB0qYqJBQAAAUY"]
[Mon Apr 20 18:11:56.588400 2026] [:error] [pid 11352:tid 11422] [client 172.161.76.204:3918] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeX77Gl10mhMSfJ7ir-8NgAAAIg"]
[Mon Apr 20 18:11:57.177828 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:3949] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeX77cixByFUvmh319BnlgAAAMs"]
[Mon Apr 20 18:11:57.747703 2026] [:error] [pid 6928:tid 6933] [client 172.161.76.204:3863] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/106.php"] [unique_id "aeX77R3y7MHq1iB0qYqJBgAAAUM"]
[Mon Apr 20 18:11:58.482337 2026] [:error] [pid 42014:tid 42034] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/106.php
[Mon Apr 20 18:11:58.759741 2026] [:error] [pid 42014:tid 42020] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Mon Apr 20 18:11:59.105476 2026] [:error] [pid 42014:tid 42030] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/ggddssvl.php
[Mon Apr 20 18:11:59.392069 2026] [:error] [pid 42014:tid 42038] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/a6.php
[Mon Apr 20 18:11:59.631172 2026] [:error] [pid 42014:tid 42031] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Mon Apr 20 18:11:59.900655 2026] [:error] [pid 42014:tid 42022] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/wdf.php
[Mon Apr 20 18:12:00.162348 2026] [:error] [pid 42014:tid 42033] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Mon Apr 20 18:12:00.428629 2026] [:error] [pid 42014:tid 42023] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Mon Apr 20 18:12:00.679139 2026] [:error] [pid 42014:tid 42018] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/Okxob.php
[Mon Apr 20 18:12:00.923760 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/sad.php
[Mon Apr 20 18:12:01.204290 2026] [:error] [pid 42014:tid 42029] [client 172.161.76.204:4079] File does not exist: /usr/local/apache/htdocs/suspended-page/vrhiw.php
[Mon Apr 20 18:12:01.439804 2026] [:error] [pid 42014:tid 42024] [client 172.161.76.204:4079] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeX78cek-00-ZI0f1NphjQAAAQg"]
[Mon Apr 20 18:12:01.988121 2026] [:error] [pid 11352:tid 11421] [client 172.161.76.204:3882] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeX78Wl10mhMSfJ7ir-8OwAAAIc"]
[Mon Apr 20 18:12:02.770499 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:3965] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeX78h3y7MHq1iB0qYqJDgAAAUA"]
[Mon Apr 20 18:12:03.760474 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:3964] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kaduu.php"] [unique_id "aeX78x3y7MHq1iB0qYqJEgAAAVQ"]
[Mon Apr 20 18:12:04.628479 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:3899] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeX79MixByFUvmh319BnnwAAANc"]
[Mon Apr 20 18:12:05.271404 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:3846] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeX79cixByFUvmh319BnowAAANg"]
[Mon Apr 20 18:12:05.816314 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:4063] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeX79cixByFUvmh319BnpQAAANA"]
[Mon Apr 20 18:12:06.310840 2026] [:error] [pid 11441:tid 11460] [client 172.161.76.204:3873] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ifrea.php"] [unique_id "aeX79sixByFUvmh319BnpwAAANE"]
[Mon Apr 20 18:12:06.795494 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:3852] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfasb.php"] [unique_id "aeX79sixByFUvmh319BnqQAAANQ"]
[Mon Apr 20 18:12:07.581023 2026] [:error] [pid 11441:tid 11451] [client 172.161.76.204:3927] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfasb.php"] [unique_id "aeX798ixByFUvmh319BnqgAAAMg"]
[Mon Apr 20 18:12:08.276389 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:4016] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfasb.php"] [unique_id "aeX7-Gl10mhMSfJ7ir-8PwAAAJQ"]
[Mon Apr 20 18:12:08.876609 2026] [:error] [pid 42014:tid 42022] [client 172.161.76.204:3896] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfasb.php"] [unique_id "aeX7-Mek-00-ZI0f1NphjwAAAQY"]
[Mon Apr 20 18:12:11.341559 2026] [:error] [pid 42014:tid 42018] [client 172.161.76.204:3874] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws53.php"] [unique_id "aeX7-8ek-00-ZI0f1NphkQAAAQI"]
[Mon Apr 20 18:12:12.018203 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3802] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws53.php"] [unique_id "aeX7_MixByFUvmh319BnuAAAAMU"]
[Mon Apr 20 18:12:12.499514 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:3970] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws53.php"] [unique_id "aeX7_MixByFUvmh319BnuQAAAMQ"]
[Mon Apr 20 18:12:13.250744 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:3993] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws53.php"] [unique_id "aeX7_cixByFUvmh319BnvAAAAMM"]
[Mon Apr 20 18:12:14.114455 2026] [:error] [pid 11350:tid 11377] [client 172.161.76.204:3822] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeX7_v4EoMBgOJuJnT1cpgAAABI"]
[Mon Apr 20 18:12:15.029045 2026] [:error] [pid 11441:tid 11463] [client 43.135.186.135:45578] [client 43.135.186.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeX7_8ixByFUvmh319BnwAAAANQ"]
[Mon Apr 20 18:12:15.205833 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:3784] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeX7_8ixByFUvmh319BnxQAAANA"]
[Mon Apr 20 18:12:15.913320 2026] [:error] [pid 11441:tid 11452] [client 172.161.76.204:3798] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeX7_8ixByFUvmh319BnyAAAAMk"]
[Mon Apr 20 18:12:16.557311 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:4003] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc2.php"] [unique_id "aeX8AMixByFUvmh319BnzgAAANM"]
[Mon Apr 20 18:12:17.308173 2026] [:error] [pid 11350:tid 11383] [client 172.161.76.204:3898] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeX8Af4EoMBgOJuJnT1cpwAAABg"]
[Mon Apr 20 18:12:18.042902 2026] [:error] [pid 11350:tid 11379] [client 172.161.76.204:3959] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeX8Av4EoMBgOJuJnT1cqQAAABQ"]
[Mon Apr 20 18:12:18.706986 2026] [:error] [pid 11350:tid 11366] [client 172.161.76.204:3905] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeX8Av4EoMBgOJuJnT1crAAAAAc"]
[Mon Apr 20 18:12:19.529684 2026] [:error] [pid 11350:tid 11360] [client 172.161.76.204:3791] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x123.php"] [unique_id "aeX8A_4EoMBgOJuJnT1crQAAAAE"]
[Mon Apr 20 18:12:20.621586 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:4090] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeX8BB3y7MHq1iB0qYqJHgAAAUw"]
[Mon Apr 20 18:12:21.364136 2026] [:error] [pid 11350:tid 11382] [client 172.161.76.204:3817] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeX8Bf4EoMBgOJuJnT1crwAAABc"]
[Mon Apr 20 18:12:21.888557 2026] [:error] [pid 6928:tid 6944] [client 172.161.76.204:3947] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeX8BR3y7MHq1iB0qYqJIAAAAU4"]
[Mon Apr 20 18:12:22.754958 2026] [:error] [pid 6928:tid 6945] [client 172.161.76.204:3955] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dichku.php"] [unique_id "aeX8Bh3y7MHq1iB0qYqJIwAAAU8"]
[Mon Apr 20 18:12:23.290320 2026] [:error] [pid 11352:tid 11438] [client 172.161.76.204:3716] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeX8B2l10mhMSfJ7ir-8SgAAAJg"]
[Mon Apr 20 18:12:23.952185 2026] [:error] [pid 11350:tid 11377] [client 172.161.76.204:3838] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeX8B_4EoMBgOJuJnT1ctgAAABI"]
[Mon Apr 20 18:12:24.453654 2026] [:error] [pid 11350:tid 11369] [client 172.161.76.204:3876] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeX8CP4EoMBgOJuJnT1ctwAAAAo"]
[Mon Apr 20 18:12:25.183294 2026] [:error] [pid 11352:tid 11416] [client 172.161.76.204:3935] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uujuu.php"] [unique_id "aeX8CWl10mhMSfJ7ir-8UAAAAII"]
[Mon Apr 20 18:12:26.046730 2026] [:error] [pid 42014:tid 42033] [client 172.161.76.204:3924] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeX8Csek-00-ZI0f1NphmgAAARE"]
[Mon Apr 20 18:12:26.752726 2026] [:error] [pid 11441:tid 11466] [client 172.161.76.204:4002] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeX8CsixByFUvmh319Bn1QAAANc"]
[Mon Apr 20 18:12:27.285076 2026] [:error] [pid 6928:tid 6937] [client 172.161.76.204:4037] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeX8Cx3y7MHq1iB0qYqJKgAAAUc"]
[Mon Apr 20 18:12:27.785591 2026] [:error] [pid 11441:tid 11459] [client 172.161.76.204:3886] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/camara.php"] [unique_id "aeX8C8ixByFUvmh319Bn2QAAANA"]
[Mon Apr 20 18:12:28.658955 2026] [:error] [pid 11352:tid 11419] [client 172.161.76.204:3925] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeX8DGl10mhMSfJ7ir-8UwAAAIU"]
[Mon Apr 20 18:12:29.641543 2026] [:error] [pid 11352:tid 11417] [client 172.161.76.204:4015] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeX8DWl10mhMSfJ7ir-8VAAAAIM"]
[Mon Apr 20 18:12:30.382149 2026] [:error] [pid 11352:tid 11414] [client 172.161.76.204:3928] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeX8Dml10mhMSfJ7ir-8VgAAAIA"]
[Mon Apr 20 18:12:30.900881 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:4034] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fwtoa.php"] [unique_id "aeX8DsixByFUvmh319Bn5wAAAMM"]
[Mon Apr 20 18:12:31.645998 2026] [:error] [pid 11441:tid 11454] [client 172.161.76.204:3877] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeX8D8ixByFUvmh319Bn8wAAAMs"]
[Mon Apr 20 18:12:32.180106 2026] [:error] [pid 42014:tid 42016] [client 172.161.76.204:3744] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeX8EMek-00-ZI0f1NphogAAAQA"]
[Mon Apr 20 18:12:32.807481 2026] [:error] [pid 11441:tid 11464] [client 172.161.76.204:3967] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeX8EMixByFUvmh319BoBwAAANU"]
[Mon Apr 20 18:12:33.680436 2026] [:error] [pid 11352:tid 11427] [client 172.161.76.204:3793] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iindv.php"] [unique_id "aeX8EWl10mhMSfJ7ir-8WQAAAI0"]
[Mon Apr 20 18:12:34.636456 2026] [:error] [pid 42014:tid 42023] [client 172.161.76.204:3854] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeX8Esek-00-ZI0f1NphqQAAAQc"]
[Mon Apr 20 18:12:35.292156 2026] [:error] [pid 11351:tid 11403] [client 172.161.76.204:3800] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeX8EwN8Z1-vktaI_tO_GwAAAFA"]
[Mon Apr 20 18:12:36.406812 2026] [:error] [pid 11352:tid 11431] [client 172.161.76.204:3717] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeX8FGl10mhMSfJ7ir-8WwAAAJE"]
[Mon Apr 20 18:12:37.502667 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3828] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/trx24.php"] [unique_id "aeX8FcixByFUvmh319BoIAAAAMU"]
[Mon Apr 20 18:12:40.447332 2026] [:error] [pid 11352:tid 11430] [client 172.161.76.204:3943] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xD.php"] [unique_id "aeX8GGl10mhMSfJ7ir-8YAAAAJA"]
[Mon Apr 20 18:12:41.060179 2026] [:error] [pid 11352:tid 11437] [client 172.161.76.204:3819] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xD.php"] [unique_id "aeX8GWl10mhMSfJ7ir-8YgAAAJc"]
[Mon Apr 20 18:12:41.854242 2026] [:error] [pid 11441:tid 11446] [client 172.161.76.204:4017] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xD.php"] [unique_id "aeX8GcixByFUvmh319BoNQAAAMM"]
[Mon Apr 20 18:12:42.494351 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:3942] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0xD.php"] [unique_id "aeX8GsixByFUvmh319BoOAAAANY"]
[Mon Apr 20 18:12:43.107935 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3945] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeX8G8ixByFUvmh319BoOgAAAMU"]
[Mon Apr 20 18:12:43.986743 2026] [:error] [pid 11351:tid 11391] [client 172.161.76.204:3862] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeX8GwN8Z1-vktaI_tO_IAAAAEQ"]
[Mon Apr 20 18:12:44.591538 2026] [:error] [pid 11351:tid 11408] [client 172.161.76.204:4080] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeX8HAN8Z1-vktaI_tO_JAAAAFU"]
[Mon Apr 20 18:12:45.149893 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:3890] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeX8HcixByFUvmh319BoQQAAAMQ"]
[Mon Apr 20 18:12:45.840029 2026] [:error] [pid 11350:tid 11381] [client 172.161.76.204:3851] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeX8Hf4EoMBgOJuJnT1cwgAAABY"]
[Mon Apr 20 18:12:46.418532 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:3956] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeX8Hsek-00-ZI0f1NphxQAAARM"]
[Mon Apr 20 18:12:46.966742 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:3813] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeX8HsixByFUvmh319BoRgAAAM0"]
[Mon Apr 20 18:12:48.047797 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:3892] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "aeX8IB3y7MHq1iB0qYqJUgAAAVc"]
[Mon Apr 20 18:12:48.596168 2026] [:error] [pid 42014:tid 42038] [client 172.161.76.204:3885] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeX8IMek-00-ZI0f1NphxwAAARY"]
[Mon Apr 20 18:12:49.300376 2026] [:error] [pid 6928:tid 6937] [client 172.161.76.204:3777] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeX8IR3y7MHq1iB0qYqJVAAAAUc"]
[Mon Apr 20 18:12:50.097171 2026] [:error] [pid 42014:tid 42023] [client 172.161.76.204:3961] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeX8Isek-00-ZI0f1NphywAAAQc"]
[Mon Apr 20 18:12:50.732815 2026] [:error] [pid 42014:tid 42018] [client 172.161.76.204:4004] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeX8Isek-00-ZI0f1NphzgAAAQI"]
[Mon Apr 20 18:12:51.332143 2026] [:error] [pid 11441:tid 11448] [client 172.161.76.204:3779] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeX8I8ixByFUvmh319BoWAAAAMU"]
[Mon Apr 20 18:12:51.889971 2026] [:error] [pid 42014:tid 42037] [client 172.161.76.204:3803] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeX8I8ek-00-ZI0f1Nph0wAAARU"]
[Mon Apr 20 18:12:52.739020 2026] [:error] [pid 11351:tid 11399] [client 172.161.76.204:4021] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeX8JAN8Z1-vktaI_tO_JwAAAEw"]
[Mon Apr 20 18:12:53.537582 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:3888] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sts.php"] [unique_id "aeX8JcixByFUvmh319BoWgAAANQ"]
[Mon Apr 20 18:12:54.101109 2026] [:error] [pid 11351:tid 11408] [client 172.161.76.204:4092] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeX8JgN8Z1-vktaI_tO_LAAAAFU"]
[Mon Apr 20 18:12:54.589547 2026] [:error] [pid 6928:tid 6931] [client 172.161.76.204:3796] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeX8Jh3y7MHq1iB0qYqJWwAAAUE"]
[Mon Apr 20 18:12:55.182206 2026] [:error] [pid 11352:tid 11414] [client 172.161.76.204:3870] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeX8J2l10mhMSfJ7ir-8awAAAIA"]
[Mon Apr 20 18:12:55.854308 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:3840] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeX8J8ixByFUvmh319BoXwAAAM0"]
[Mon Apr 20 18:12:56.603226 2026] [:error] [pid 11441:tid 11460] [client 172.161.76.204:3737] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeX8KMixByFUvmh319BoZgAAANE"]
[Mon Apr 20 18:12:57.128910 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:4033] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeX8KcixByFUvmh319BoawAAANY"]
[Mon Apr 20 18:12:57.692095 2026] [:error] [pid 11350:tid 11380] [client 172.161.76.204:3988] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeX8Kf4EoMBgOJuJnT1cyAAAABU"]
[Mon Apr 20 18:12:58.242312 2026] [:error] [pid 11350:tid 11368] [client 172.161.76.204:3806] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/defeg.php"] [unique_id "aeX8Kv4EoMBgOJuJnT1cygAAAAk"]
[Mon Apr 20 18:12:58.874815 2026] [:error] [pid 11350:tid 11372] [client 172.161.76.204:3867] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/euocu.php"] [unique_id "aeX8Kv4EoMBgOJuJnT1cywAAAA0"]
[Mon Apr 20 18:12:59.409575 2026] [:error] [pid 11350:tid 11371] [client 172.161.76.204:3836] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/euocu.php"] [unique_id "aeX8K_4EoMBgOJuJnT1czgAAAAw"]
[Mon Apr 20 18:12:59.928353 2026] [:error] [pid 11351:tid 11401] [client 172.161.76.204:3907] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/euocu.php"] [unique_id "aeX8KwN8Z1-vktaI_tO_MAAAAE4"]
[Mon Apr 20 18:13:00.967307 2026] [:error] [pid 11350:tid 11374] [client 172.161.76.204:3953] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/euocu.php"] [unique_id "aeX8LP4EoMBgOJuJnT1c1AAAAA8"]
[Mon Apr 20 18:13:01.508519 2026] [:error] [pid 11351:tid 11388] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Apr 20 18:13:01.747499 2026] [:error] [pid 11351:tid 11396] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-moonka.php
[Mon Apr 20 18:13:02.012152 2026] [:error] [pid 11351:tid 11399] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/dawvg.php
[Mon Apr 20 18:13:02.265214 2026] [:error] [pid 11351:tid 11391] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/hhxc.php
[Mon Apr 20 18:13:02.541723 2026] [:error] [pid 11351:tid 11390] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/bhigtouj.php
[Mon Apr 20 18:13:02.782022 2026] [:error] [pid 11351:tid 11400] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Mon Apr 20 18:13:03.208859 2026] [:error] [pid 11351:tid 11387] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Mon Apr 20 18:13:03.448799 2026] [:error] [pid 11351:tid 11407] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/41.php
[Mon Apr 20 18:13:03.689913 2026] [:error] [pid 11351:tid 11393] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/xsjtz.php
[Mon Apr 20 18:13:03.930730 2026] [:error] [pid 11351:tid 11408] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Mon Apr 20 18:13:05.455196 2026] [:error] [pid 11351:tid 11408] [client 172.161.76.204:3785] File does not exist: /usr/local/apache/htdocs/suspended-page/oco.php
[Mon Apr 20 18:13:05.694927 2026] [:error] [pid 11351:tid 11389] [client 172.161.76.204:3785] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rogsa.php"] [unique_id "aeX8MQN8Z1-vktaI_tO_PgAAAEI"]
[Mon Apr 20 18:13:06.263166 2026] [:error] [pid 11352:tid 11435] [client 172.161.76.204:3863] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rogsa.php"] [unique_id "aeX8Mml10mhMSfJ7ir-8fQAAAJU"]
[Mon Apr 20 18:13:06.895794 2026] [:error] [pid 11352:tid 11424] [client 172.161.76.204:3900] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rogsa.php"] [unique_id "aeX8Mml10mhMSfJ7ir-8fgAAAIo"]
[Mon Apr 20 18:13:08.064208 2026] [:error] [pid 42014:tid 42022] [client 172.161.76.204:4089] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rogsa.php"] [unique_id "aeX8NMek-00-ZI0f1Nph3wAAAQY"]
[Mon Apr 20 18:13:08.578657 2026] [:error] [pid 11441:tid 11455] [client 172.161.76.204:3781] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeX8NMixByFUvmh319BofAAAAMw"]
[Mon Apr 20 18:13:09.058807 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:4059] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeX8NcixByFUvmh319BofwAAAM0"]
[Mon Apr 20 18:13:09.549382 2026] [:error] [pid 11441:tid 11458] [client 172.161.76.204:4028] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeX8NcixByFUvmh319BogwAAAM8"]
[Mon Apr 20 18:13:10.064834 2026] [:error] [pid 11350:tid 11381] [client 172.161.76.204:3976] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jctyd.php"] [unique_id "aeX8Nv4EoMBgOJuJnT1c2AAAABY"]
[Mon Apr 20 18:13:10.567529 2026] [:error] [pid 11350:tid 11359] [client 172.161.76.204:3783] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeX8Nv4EoMBgOJuJnT1c2gAAAAA"]
[Mon Apr 20 18:13:11.567911 2026] [:error] [pid 11352:tid 11420] [client 172.161.76.204:3827] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeX8N2l10mhMSfJ7ir-8hAAAAIY"]
[Mon Apr 20 18:13:12.044869 2026] [:error] [pid 11352:tid 11435] [client 172.161.76.204:3920] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeX8OGl10mhMSfJ7ir-8hQAAAJU"]
[Mon Apr 20 18:13:12.560654 2026] [:error] [pid 11351:tid 11388] [client 172.161.76.204:4042] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypltspd.php"] [unique_id "aeX8OAN8Z1-vktaI_tO_RAAAAEE"]
[Mon Apr 20 18:13:13.081146 2026] [:error] [pid 11351:tid 11396] [client 172.161.76.204:4047] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeX8OQN8Z1-vktaI_tO_RQAAAEk"]
[Mon Apr 20 18:13:13.849688 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:3944] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeX8OWl10mhMSfJ7ir-8iQAAAJQ"]
[Mon Apr 20 18:13:14.514429 2026] [:error] [pid 11351:tid 11391] [client 172.161.76.204:4065] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeX8OgN8Z1-vktaI_tO_RwAAAEQ"]
[Mon Apr 20 18:13:15.026091 2026] [:error] [pid 11351:tid 11400] [client 172.161.76.204:3983] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pass4.php"] [unique_id "aeX8OwN8Z1-vktaI_tO_SAAAAE0"]
[Mon Apr 20 18:13:15.691237 2026] [:error] [pid 11350:tid 11374] [client 172.161.76.204:4076] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeX8O_4EoMBgOJuJnT1c3AAAAA8"]
[Mon Apr 20 18:13:16.198748 2026] [:error] [pid 11351:tid 11405] [client 172.161.76.204:4029] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeX8PAN8Z1-vktaI_tO_TQAAAFI"]
[Mon Apr 20 18:13:16.686618 2026] [:error] [pid 11351:tid 11392] [client 172.161.76.204:3894] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeX8PAN8Z1-vktaI_tO_TgAAAEU"]
[Mon Apr 20 18:13:17.315070 2026] [:error] [pid 6928:tid 6931] [client 172.161.76.204:3966] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eursi.php"] [unique_id "aeX8PR3y7MHq1iB0qYqJfQAAAUE"]
[Mon Apr 20 18:13:17.848843 2026] [:error] [pid 11350:tid 11378] [client 172.161.76.204:4081] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogr.php"] [unique_id "aeX8Pf4EoMBgOJuJnT1c3wAAABM"]
[Mon Apr 20 18:13:18.370651 2026] [:error] [pid 42014:tid 42016] [client 172.161.76.204:4061] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogr.php"] [unique_id "aeX8Psek-00-ZI0f1Nph5wAAAQA"]
[Mon Apr 20 18:13:19.059270 2026] [:error] [pid 6928:tid 6949] [client 172.161.76.204:3941] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogr.php"] [unique_id "aeX8Px3y7MHq1iB0qYqJfwAAAVM"]
[Mon Apr 20 18:13:19.661296 2026] [:error] [pid 6928:tid 6947] [client 172.161.76.204:3866] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ogr.php"] [unique_id "aeX8Px3y7MHq1iB0qYqJgQAAAVE"]
[Mon Apr 20 18:13:20.268803 2026] [:error] [pid 42014:tid 42030] [client 172.161.76.204:3974] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeX8QMek-00-ZI0f1Nph6wAAAQ4"]
[Mon Apr 20 18:13:20.925854 2026] [:error] [pid 11351:tid 11399] [client 172.161.76.204:3821] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeX8QAN8Z1-vktaI_tO_VAAAAEw"]
[Mon Apr 20 18:13:21.651177 2026] [:error] [pid 6928:tid 6941] [client 172.161.76.204:3831] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeX8QR3y7MHq1iB0qYqJgwAAAUs"]
[Mon Apr 20 18:13:22.260149 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:4038] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jlex.php"] [unique_id "aeX8QsixByFUvmh319BoiwAAAMQ"]
[Mon Apr 20 18:13:22.973942 2026] [:error] [pid 42014:tid 42037] [client 172.161.76.204:3825] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeX8Qsek-00-ZI0f1Nph9AAAARU"]
[Mon Apr 20 18:13:24.024212 2026] [:error] [pid 11351:tid 11411] [client 172.161.76.204:3923] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeX8RAN8Z1-vktaI_tO_VwAAAFg"]
[Mon Apr 20 18:13:24.630571 2026] [:error] [pid 11351:tid 11410] [client 172.161.76.204:3788] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeX8RAN8Z1-vktaI_tO_WAAAAFc"]
[Mon Apr 20 18:13:25.278128 2026] [:error] [pid 11351:tid 11397] [client 172.161.76.204:4073] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeX8RQN8Z1-vktaI_tO_WgAAAEo"]
[Mon Apr 20 18:13:25.935230 2026] [:error] [pid 11352:tid 11431] [client 172.161.76.204:3755] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeX8RWl10mhMSfJ7ir-8kAAAAJE"]
[Mon Apr 20 18:13:26.597022 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:3801] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeX8Rh3y7MHq1iB0qYqJhQAAAUA"]
[Mon Apr 20 18:13:27.390581 2026] [:error] [pid 11441:tid 11443] [client 172.161.76.204:3776] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeX8R8ixByFUvmh319BokgAAAMA"]
[Mon Apr 20 18:13:28.135322 2026] [:error] [pid 11350:tid 11371] [client 172.161.76.204:3977] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-942.php"] [unique_id "aeX8SP4EoMBgOJuJnT1c6wAAAAw"]
[Mon Apr 20 18:13:29.189047 2026] [:error] [pid 11352:tid 11437] [client 172.161.76.204:4022] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeX8SWl10mhMSfJ7ir-8kwAAAJc"]
[Mon Apr 20 18:13:29.751835 2026] [:error] [pid 11352:tid 11414] [client 172.161.76.204:4010] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeX8SWl10mhMSfJ7ir-8lgAAAIA"]
[Mon Apr 20 18:13:30.322500 2026] [:error] [pid 11352:tid 11427] [client 172.161.76.204:3987] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeX8Sml10mhMSfJ7ir-8lwAAAI0"]
[Mon Apr 20 18:13:31.159206 2026] [:error] [pid 11351:tid 11389] [client 172.161.76.204:4013] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/repurify.php"] [unique_id "aeX8SwN8Z1-vktaI_tO_YwAAAEI"]
[Mon Apr 20 18:13:31.796669 2026] [:error] [pid 11351:tid 11405] [client 172.161.76.204:4094] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeX8SwN8Z1-vktaI_tO_ZQAAAFI"]
[Mon Apr 20 18:13:32.612796 2026] [:error] [pid 11441:tid 11465] [client 172.161.76.204:3778] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeX8TMixByFUvmh319BolwAAANY"]
[Mon Apr 20 18:13:33.632277 2026] [:error] [pid 6928:tid 6941] [client 172.161.76.204:4093] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeX8TR3y7MHq1iB0qYqJjQAAAUs"]
[Mon Apr 20 18:13:34.372848 2026] [:error] [pid 6928:tid 6943] [client 172.161.76.204:3762] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "aeX8Th3y7MHq1iB0qYqJjwAAAU0"]
[Mon Apr 20 18:13:35.242648 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:3980] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeX8Tx3y7MHq1iB0qYqJkQAAAUw"]
[Mon Apr 20 18:13:35.798680 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:4072] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeX8Tx3y7MHq1iB0qYqJkwAAAUA"]
[Mon Apr 20 18:13:36.546345 2026] [:error] [pid 11441:tid 11455] [client 172.161.76.204:3895] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeX8UMixByFUvmh319BooAAAAMw"]
[Mon Apr 20 18:13:37.110914 2026] [:error] [pid 11352:tid 11420] [client 172.161.76.204:4044] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeX8UWl10mhMSfJ7ir-8nwAAAIY"]
[Mon Apr 20 18:13:38.032057 2026] [:error] [pid 11352:tid 11421] [client 172.161.76.204:3981] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeX8Uml10mhMSfJ7ir-8oQAAAIc"]
[Mon Apr 20 18:13:38.554014 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:3724] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeX8UsixByFUvmh319BoogAAAMc"]
[Mon Apr 20 18:13:39.491811 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:3730] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeX8U2l10mhMSfJ7ir-8pQAAAJQ"]
[Mon Apr 20 18:13:40.016229 2026] [:error] [pid 11352:tid 11436] [client 172.161.76.204:3939] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws73.php"] [unique_id "aeX8VGl10mhMSfJ7ir-8pwAAAJY"]
[Mon Apr 20 18:13:40.607014 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:4045] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeX8VMixByFUvmh319BopgAAANI"]
[Mon Apr 20 18:13:41.156787 2026] [:error] [pid 11351:tid 11407] [client 172.161.76.204:3910] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeX8VQN8Z1-vktaI_tO_aAAAAFQ"]
[Mon Apr 20 18:13:41.828706 2026] [:error] [pid 11351:tid 11406] [client 172.161.76.204:4031] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeX8VQN8Z1-vktaI_tO_aQAAAFM"]
[Mon Apr 20 18:13:42.625812 2026] [:error] [pid 11441:tid 11463] [client 172.161.76.204:3823] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hnphq.php"] [unique_id "aeX8VsixByFUvmh319BoqwAAANQ"]
[Mon Apr 20 18:13:43.220305 2026] [:error] [pid 11352:tid 11416] [client 172.161.76.204:3903] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeX8V2l10mhMSfJ7ir-8qwAAAII"]
[Mon Apr 20 18:13:43.929749 2026] [:error] [pid 11352:tid 11423] [client 172.161.76.204:3841] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeX8V2l10mhMSfJ7ir-8rAAAAIk"]
[Mon Apr 20 18:13:45.145882 2026] [:error] [pid 11441:tid 11461] [client 172.161.76.204:3850] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeX8WcixByFUvmh319BosAAAANI"]
[Mon Apr 20 18:13:46.385407 2026] [:error] [pid 6928:tid 6938] [client 172.161.76.204:3931] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/HLA-dd.php"] [unique_id "aeX8Wh3y7MHq1iB0qYqJnAAAAUg"]
[Mon Apr 20 18:13:47.971594 2026] [:error] [pid 42014:tid 42027] [client 172.161.76.204:3765] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeX8W8ek-00-ZI0f1Nph_wAAAQs"]
[Mon Apr 20 18:13:48.889767 2026] [:error] [pid 11352:tid 11437] [client 172.161.76.204:3731] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeX8XGl10mhMSfJ7ir-8rgAAAJc"]
[Mon Apr 20 18:13:51.915166 2026] [:error] [pid 11352:tid 11417] [client 172.161.76.204:3858] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeX8X2l10mhMSfJ7ir-8sQAAAIM"]
[Mon Apr 20 18:13:53.920235 2026] [:error] [pid 11352:tid 11426] [client 172.161.76.204:3875] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdn3.php"] [unique_id "aeX8YWl10mhMSfJ7ir-8sgAAAIw"]
[Mon Apr 20 18:13:55.505513 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:3917] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeX8Yx3y7MHq1iB0qYqJqgAAAUw"]
[Mon Apr 20 18:13:56.256627 2026] [:error] [pid 6928:tid 6949] [client 172.161.76.204:4069] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeX8ZB3y7MHq1iB0qYqJrQAAAVM"]
[Mon Apr 20 18:13:57.676494 2026] [:error] [pid 11352:tid 11438] [client 172.161.76.204:4066] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeX8ZWl10mhMSfJ7ir-8tgAAAJg"]
[Mon Apr 20 18:13:58.360699 2026] [:error] [pid 11352:tid 11424] [client 172.161.76.204:3847] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeX8Zml10mhMSfJ7ir-8twAAAIo"]
[Mon Apr 20 18:13:58.887928 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:4084] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeX8ZsixByFUvmh319BoyQAAAMQ"]
[Mon Apr 20 18:14:00.266890 2026] [:error] [pid 11351:tid 11397] [client 172.161.76.204:4088] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeX8aAN8Z1-vktaI_tO_eAAAAEo"]
[Mon Apr 20 18:14:01.208159 2026] [:error] [pid 11441:tid 11456] [client 172.161.76.204:3985] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeX8acixByFUvmh319Bo0AAAAM0"]
[Mon Apr 20 18:14:02.940215 2026] [:error] [pid 6928:tid 6947] [client 172.161.76.204:3871] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeX8ah3y7MHq1iB0qYqJtgAAAVE"]
[Mon Apr 20 18:14:04.042464 2026] [:error] [pid 6928:tid 6933] [client 172.161.76.204:4048] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeX8bB3y7MHq1iB0qYqJugAAAUM"]
[Mon Apr 20 18:14:04.969542 2026] [:error] [pid 11441:tid 11451] [client 172.161.76.204:3891] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeX8bMixByFUvmh319Bo2QAAAMg"]
[Mon Apr 20 18:14:06.305328 2026] [:error] [pid 6928:tid 6940] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/0x19493QU8ZQ.php
[Mon Apr 20 18:14:06.574399 2026] [:error] [pid 6928:tid 6939] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/druqr.php
[Mon Apr 20 18:14:06.816715 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/ovajckrrj.php
[Mon Apr 20 18:14:07.293063 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Mon Apr 20 18:14:07.677074 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Mon Apr 20 18:14:08.111111 2026] [:error] [pid 6928:tid 6941] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Mon Apr 20 18:14:08.360877 2026] [:error] [pid 6928:tid 6937] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/eapjf.php
[Mon Apr 20 18:14:09.300865 2026] [:error] [pid 6928:tid 6950] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Mon Apr 20 18:14:09.544654 2026] [:error] [pid 6928:tid 6949] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Mon Apr 20 18:14:09.803171 2026] [:error] [pid 6928:tid 6942] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/abhjr.php
[Mon Apr 20 18:14:10.068771 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:4074] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Mon Apr 20 18:14:10.520342 2026] [:error] [pid 6928:tid 6948] [client 172.161.76.204:4074] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeX8ch3y7MHq1iB0qYqJ0QAAAVI"]
[Mon Apr 20 18:14:11.513026 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:4086] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeX8c8ek-00-ZI0f1NpiBQAAARM"]
[Mon Apr 20 18:14:12.980688 2026] [:error] [pid 11441:tid 11447] [client 172.161.76.204:3974] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeX8dMixByFUvmh319Bo5QAAAMQ"]
[Mon Apr 20 18:14:14.770965 2026] [:error] [pid 42014:tid 42026] [client 172.161.76.204:3826] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/baixy.php"] [unique_id "aeX8dsek-00-ZI0f1NpiBgAAAQo"]
[Mon Apr 20 18:14:16.196726 2026] [:error] [pid 11352:tid 11425] [client 172.161.76.204:3812] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeX8eGl10mhMSfJ7ir-81gAAAIs"]
[Mon Apr 20 18:14:17.107248 2026] [:error] [pid 11350:tid 11364] [client 172.161.76.204:3975] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeX8ef4EoMBgOJuJnT1c9QAAAAU"]
[Mon Apr 20 18:14:17.895352 2026] [:error] [pid 11441:tid 11453] [client 172.161.76.204:4032] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeX8ecixByFUvmh319Bo-gAAAMo"]
[Mon Apr 20 18:14:19.372982 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:3950] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "aeX8e8ixByFUvmh319BpAAAAAMc"]
[Mon Apr 20 18:14:20.027945 2026] [:error] [pid 11351:tid 11389] [client 172.161.76.204:3829] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeX8fAN8Z1-vktaI_tO_lwAAAEI"]
[Mon Apr 20 18:14:20.713443 2026] [:error] [pid 11441:tid 11460] [client 172.161.76.204:4095] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeX8fMixByFUvmh319BpBgAAANE"]
[Mon Apr 20 18:14:21.796758 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:3922] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeX8fcixByFUvmh319BpCQAAAMc"]
[Mon Apr 20 18:14:22.605686 2026] [:error] [pid 6928:tid 6951] [client 172.161.76.204:4054] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oti.php"] [unique_id "aeX8fh3y7MHq1iB0qYqJ2AAAAVU"]
[Mon Apr 20 18:14:23.449600 2026] [:error] [pid 42014:tid 42032] [client 172.161.76.204:3969] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeX8f8ek-00-ZI0f1NpiFQAAARA"]
[Mon Apr 20 18:14:24.613393 2026] [:error] [pid 42014:tid 42035] [client 172.161.76.204:4019] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeX8gMek-00-ZI0f1NpiGgAAARM"]
[Mon Apr 20 18:14:25.525385 2026] [:error] [pid 6928:tid 6953] [client 172.161.76.204:3990] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeX8gR3y7MHq1iB0qYqJ3gAAAVc"]
[Mon Apr 20 18:14:26.126778 2026] [:error] [pid 11351:tid 11391] [client 172.161.76.204:3938] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jnhddqyz.php"] [unique_id "aeX8ggN8Z1-vktaI_tO_nAAAAEQ"]
[Mon Apr 20 18:14:27.260806 2026] [:error] [pid 11352:tid 11434] [client 172.161.76.204:3986] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeX8g2l10mhMSfJ7ir-82wAAAJQ"]
[Mon Apr 20 18:14:28.916412 2026] [:error] [pid 11350:tid 11365] [client 172.161.76.204:3733] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeX8hP4EoMBgOJuJnT1dAAAAAAY"]
[Mon Apr 20 18:14:30.087554 2026] [:error] [pid 11351:tid 11402] [client 172.161.76.204:3816] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeX8hgN8Z1-vktaI_tO_nwAAAE8"]
[Mon Apr 20 18:14:31.270446 2026] [:error] [pid 42014:tid 42034] [client 172.161.76.204:3889] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "aeX8h8ek-00-ZI0f1NpiKwAAARI"]
[Mon Apr 20 18:14:32.264692 2026] [:error] [pid 42014:tid 42028] [client 172.161.76.204:4083] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeX8iMek-00-ZI0f1NpiMAAAAQw"]
[Mon Apr 20 18:14:33.300616 2026] [:error] [pid 42014:tid 42040] [client 172.161.76.204:4005] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeX8icek-00-ZI0f1NpiPgAAARg"]
[Mon Apr 20 18:14:35.606602 2026] [:error] [pid 6928:tid 6934] [client 172.161.76.204:3844] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeX8ix3y7MHq1iB0qYqJ5gAAAUQ"]
[Mon Apr 20 18:14:36.772737 2026] [:error] [pid 11441:tid 11453] [client 172.161.76.204:3879] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/SS72_kKKjT.php"] [unique_id "aeX8jMixByFUvmh319BpDwAAAMo"]
[Mon Apr 20 18:14:37.770719 2026] [:error] [pid 11350:tid 11362] [client 172.161.76.204:4053] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeX8jf4EoMBgOJuJnT1dEgAAAAM"]
[Mon Apr 20 18:14:39.857216 2026] [:error] [pid 6928:tid 6935] [client 172.161.76.204:3884] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeX8jx3y7MHq1iB0qYqJ6QAAAUU"]
[Mon Apr 20 18:14:40.802916 2026] [:error] [pid 11352:tid 11418] [client 172.161.76.204:3979] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeX8kGl10mhMSfJ7ir-85AAAAIQ"]
[Mon Apr 20 18:14:41.745925 2026] [:error] [pid 11441:tid 11450] [client 172.161.76.204:4077] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeX8kcixByFUvmh319BpFwAAAMc"]
[Mon Apr 20 18:14:42.384020 2026] [:error] [pid 6928:tid 6939] [client 172.161.76.204:3897] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "aeX8kh3y7MHq1iB0qYqJ7AAAAUk"]
[Mon Apr 20 18:14:43.094307 2026] [:error] [pid 11352:tid 11415] [client 172.161.76.204:3978] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "aeX8k2l10mhMSfJ7ir-86QAAAIE"]
[Mon Apr 20 18:14:43.909084 2026] [:error] [pid 42014:tid 42020] [client 172.161.76.204:4068] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "aeX8k8ek-00-ZI0f1NpieQAAAQQ"]
[Mon Apr 20 18:14:44.677621 2026] [:error] [pid 42014:tid 42034] [client 172.161.76.204:3979] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "aeX8lMek-00-ZI0f1NpifgAAARI"]
[Mon Apr 20 18:14:46.060688 2026] [:error] [pid 11352:tid 11431] [client 172.161.76.204:3668] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeX8lml10mhMSfJ7ir-87wAAAJE"]
[Mon Apr 20 18:14:47.099072 2026] [:error] [pid 11352:tid 11414] [client 172.161.76.204:4023] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeX8l2l10mhMSfJ7ir-88AAAAIA"]
[Mon Apr 20 18:14:48.853912 2026] [:error] [pid 11441:tid 11467] [client 172.161.76.204:4008] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeX8mMixByFUvmh319BpKAAAANg"]
[Mon Apr 20 18:14:49.989133 2026] [:error] [pid 11441:tid 11462] [client 172.161.76.204:3810] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lmlwpbmm.php"] [unique_id "aeX8mcixByFUvmh319BpLAAAANM"]
[Mon Apr 20 18:14:50.971109 2026] [:error] [pid 11350:tid 11370] [client 172.161.76.204:4082] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeX8mv4EoMBgOJuJnT1dGQAAAAs"]
[Mon Apr 20 18:14:53.042517 2026] [:error] [pid 6928:tid 6939] [client 172.161.76.204:3963] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeX8nR3y7MHq1iB0qYqJ-QAAAUk"]
[Mon Apr 20 18:14:56.766605 2026] [:error] [pid 6928:tid 6930] [client 172.161.76.204:3832] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeX8oB3y7MHq1iB0qYqKCgAAAUA"]
[Mon Apr 20 18:14:59.246579 2026] [:error] [pid 11351:tid 11401] [client 172.161.76.204:3750] [client 172.161.76.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ppxhp.php"] [unique_id "aeX8owN8Z1-vktaI_tO_zwAAAE4"]
[Mon Apr 20 19:37:04.076316 2026] [:error] [pid 11494:tid 11505] [client 182.44.2.148:60685] [client 182.44.2.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeYP4Mgko5iFiE8YoyTL-wAAAYk"]
[Mon Apr 20 20:18:05.668843 2026] [:error] [pid 11350:tid 11371] [client 43.135.144.81:50680] [client 43.135.144.81] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeYZff4EoMBgOJuJnT2i-wAAAAw"]
[Mon Apr 20 22:15:49.854111 2026] [:error] [pid 11351:tid 11388] [client 212.100.64.254:54948] [client 212.100.64.254] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 212.100.64.254, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeY1FQN8Z1-vktaI_tMiugAAAEE"]
[Mon Apr 20 22:15:49.859434 2026] [:error] [pid 11351:tid 11388] [client 212.100.64.254:54948] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 20 23:57:36.917110 2026] [:error] [pid 11351:tid 11400] [client 43.157.168.43:58802] [client 43.157.168.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeZM8AN8Z1-vktaI_tNX2gAAAE0"]
[Tue Apr 21 04:00:19.116011 2026] [:error] [pid 35322:tid 35376] [client 8.228.127.190:47048] [client 8.228.127.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aeaF06PoAfV40BTfVKxoXAAAAJM"]
[Tue Apr 21 04:00:29.883246 2026] [:error] [pid 4822:tid 4839] [client 185.194.178.46:44111] [client 185.194.178.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.46, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeaF3SAteFQFwS_23Jl_XAAAAU0"]
[Tue Apr 21 04:00:29.888838 2026] [:error] [pid 4822:tid 4839] [client 185.194.178.46:44111] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 05:43:20.904927 2026] [:error] [pid 4777:tid 4792] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Tue Apr 21 05:43:21.194744 2026] [:error] [pid 4777:tid 4807] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Tue Apr 21 05:43:21.488821 2026] [:error] [pid 4777:tid 4808] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Tue Apr 21 05:43:21.778314 2026] [:error] [pid 4777:tid 4801] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Tue Apr 21 05:43:22.069866 2026] [:error] [pid 4777:tid 4803] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Tue Apr 21 05:43:22.359018 2026] [:error] [pid 4777:tid 4811] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue Apr 21 05:43:22.938194 2026] [:error] [pid 4777:tid 4812] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Tue Apr 21 05:43:23.227940 2026] [:error] [pid 4777:tid 4795] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Tue Apr 21 05:43:23.516534 2026] [:error] [pid 4777:tid 4809] [client 74.248.148.69:16910] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Apr 21 05:43:23.802848 2026] [:error] [pid 4777:tid 4808] [client 74.248.148.69:16910] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aead-6xXur6bykKyLZQTzgAAARQ"]
[Tue Apr 21 05:43:24.440563 2026] [:error] [pid 35321:tid 35393] [client 74.248.148.69:16964] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aead_DeHLhVUuu8cVXxJqQAAAEk"]
[Tue Apr 21 05:43:24.961435 2026] [:error] [pid 4777:tid 4790] [client 74.248.148.69:17005] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aead_KxXur6bykKyLZQTzwAAAQI"]
[Tue Apr 21 05:43:25.538386 2026] [:error] [pid 35322:tid 35376] [client 74.248.148.69:17021] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aead_aPoAfV40BTfVKx35gAAAJM"]
[Tue Apr 21 05:43:26.060674 2026] [:error] [pid 35322:tid 35361] [client 74.248.148.69:16898] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aead_qPoAfV40BTfVKx36QAAAIQ"]
[Tue Apr 21 05:43:26.633842 2026] [:error] [pid 5377:tid 5394] [client 74.248.148.69:16987] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aead_rBKychFlrHBdvsN7QAAAcg"]
[Tue Apr 21 05:43:27.233972 2026] [:error] [pid 5377:tid 5400] [client 74.248.148.69:16970] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aead_7BKychFlrHBdvsN7gAAAc4"]
[Tue Apr 21 05:43:27.756806 2026] [:error] [pid 35322:tid 35372] [client 74.248.148.69:16896] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "aead_6PoAfV40BTfVKx37QAAAI8"]
[Tue Apr 21 05:43:28.338671 2026] [:error] [pid 35321:tid 35403] [client 74.248.148.69:16986] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeaeADeHLhVUuu8cVXxJrAAAAFM"]
[Tue Apr 21 05:43:28.922509 2026] [:error] [pid 35321:tid 35387] [client 74.248.148.69:16979] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeaeADeHLhVUuu8cVXxJrgAAAEM"]
[Tue Apr 21 05:43:29.711274 2026] [:error] [pid 4777:tid 4794] [client 74.248.148.69:16980] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeaeAaxXur6bykKyLZQT1QAAAQY"]
[Tue Apr 21 05:43:30.232705 2026] [:error] [pid 35321:tid 35391] [client 74.248.148.69:17019] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeaeAjeHLhVUuu8cVXxJrwAAAEc"]
[Tue Apr 21 05:43:30.746688 2026] [:error] [pid 4823:tid 4867] [client 74.248.148.69:16899] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeaeAvc8mke3PfHqsxGKDwAAAY4"]
[Tue Apr 21 05:43:31.342661 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:16969] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeaeA7BKychFlrHBdvsN8gAAAcA"]
[Tue Apr 21 05:43:31.894529 2026] [:error] [pid 4823:tid 4855] [client 74.248.148.69:17015] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeaeA_c8mke3PfHqsxGKEgAAAYI"]
[Tue Apr 21 05:43:32.456401 2026] [:error] [pid 4823:tid 4872] [client 74.248.148.69:17018] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tt.php"] [unique_id "aeaeBPc8mke3PfHqsxGKFwAAAZM"]
[Tue Apr 21 05:43:33.018042 2026] [:error] [pid 4823:tid 4853] [client 74.248.148.69:16847] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeaeBfc8mke3PfHqsxGKGgAAAYA"]
[Tue Apr 21 05:43:33.547637 2026] [:error] [pid 35322:tid 35376] [client 74.248.148.69:17020] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeaeBaPoAfV40BTfVKx38QAAAJM"]
[Tue Apr 21 05:43:34.099284 2026] [:error] [pid 35322:tid 35360] [client 74.248.148.69:16994] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeaeBqPoAfV40BTfVKx38wAAAIM"]
[Tue Apr 21 05:43:34.682968 2026] [:error] [pid 35320:tid 35331] [client 74.248.148.69:16904] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "aeaeBoJW6fdXWO6agMF_3gAAAAE"]
[Tue Apr 21 05:43:35.240133 2026] [:error] [pid 4823:tid 4871] [client 74.248.148.69:16897] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeaeB_c8mke3PfHqsxGKIAAAAZI"]
[Tue Apr 21 05:43:35.869842 2026] [:error] [pid 4823:tid 4855] [client 74.248.148.69:16982] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeaeB_c8mke3PfHqsxGKJQAAAYI"]
[Tue Apr 21 05:43:36.382993 2026] [:error] [pid 4823:tid 4858] [client 74.248.148.69:16907] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeaeCPc8mke3PfHqsxGKKQAAAYU"]
[Tue Apr 21 05:43:36.915826 2026] [:error] [pid 35321:tid 35401] [client 74.248.148.69:17006] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeaeCDeHLhVUuu8cVXxJtAAAAFE"]
[Tue Apr 21 05:43:37.498055 2026] [:error] [pid 35320:tid 35330] [client 74.248.148.69:16971] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeaeCYJW6fdXWO6agMF_4gAAAAA"]
[Tue Apr 21 05:43:38.055680 2026] [:error] [pid 35320:tid 35345] [client 74.248.148.69:16905] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeaeCoJW6fdXWO6agMF_5wAAAA8"]
[Tue Apr 21 05:43:38.652117 2026] [:error] [pid 35320:tid 35333] [client 74.248.148.69:16832] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeaeCoJW6fdXWO6agMF_7AAAAAM"]
[Tue Apr 21 05:43:39.320942 2026] [:error] [pid 35320:tid 35354] [client 74.248.148.69:16990] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aeaeC4JW6fdXWO6agMF_7wAAABg"]
[Tue Apr 21 05:43:39.903331 2026] [:error] [pid 5377:tid 5394] [client 74.248.148.69:16908] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aeaeC7BKychFlrHBdvsOBgAAAcg"]
[Tue Apr 21 05:43:40.422593 2026] [:error] [pid 5377:tid 5410] [client 74.248.148.69:17002] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aeaeDLBKychFlrHBdvsOCQAAAdg"]
[Tue Apr 21 05:43:41.110820 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:17012] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aeaeDbBKychFlrHBdvsODwAAAcA"]
[Tue Apr 21 05:43:41.712162 2026] [:error] [pid 4823:tid 4871] [client 74.248.148.69:17022] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "aeaeDfc8mke3PfHqsxGKSQAAAZI"]
[Tue Apr 21 05:43:42.294533 2026] [:error] [pid 35320:tid 35353] [client 74.248.148.69:16981] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeaeDoJW6fdXWO6agMF_9AAAABc"]
[Tue Apr 21 05:43:42.929878 2026] [:error] [pid 35321:tid 35392] [client 74.248.148.69:16962] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeaeDjeHLhVUuu8cVXxJtgAAAEg"]
[Tue Apr 21 05:43:43.506185 2026] [:error] [pid 4822:tid 4829] [client 74.248.148.69:16919] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeaeDyAteFQFwS_23JmalwAAAUM"]
[Tue Apr 21 05:43:44.016848 2026] [:error] [pid 35320:tid 35350] [client 74.248.148.69:16915] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeaeEIJW6fdXWO6agMF_9QAAABQ"]
[Tue Apr 21 05:43:44.551638 2026] [:error] [pid 35321:tid 35403] [client 74.248.148.69:16991] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeaeEDeHLhVUuu8cVXxJuAAAAFM"]
[Tue Apr 21 05:43:45.072638 2026] [:error] [pid 35415:tid 35444] [client 74.248.148.69:17003] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeaeEUiqDinI4_22zzj4mgAAANE"]
[Tue Apr 21 05:43:45.631994 2026] [:error] [pid 35415:tid 35447] [client 74.248.148.69:16974] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeaeEUiqDinI4_22zzj4mwAAANQ"]
[Tue Apr 21 05:43:46.187778 2026] [:error] [pid 4777:tid 4803] [client 74.248.148.69:16985] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bmi.php"] [unique_id "aeaeEqxXur6bykKyLZQT5gAAAQ8"]
[Tue Apr 21 05:43:46.719584 2026] [:error] [pid 35321:tid 35405] [client 74.248.148.69:16935] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeaeEjeHLhVUuu8cVXxJuwAAAFU"]
[Tue Apr 21 05:43:47.252584 2026] [:error] [pid 4822:tid 4827] [client 74.248.148.69:17004] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeaeEyAteFQFwS_23JmanAAAAUE"]
[Tue Apr 21 05:43:47.833950 2026] [:error] [pid 35321:tid 35402] [client 74.248.148.69:16978] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeaeEzeHLhVUuu8cVXxJvAAAAFI"]
[Tue Apr 21 05:43:48.391582 2026] [:error] [pid 35322:tid 35367] [client 74.248.148.69:16901] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aeaeFKPoAfV40BTfVKx39gAAAIo"]
[Tue Apr 21 05:43:48.937996 2026] [:error] [pid 35320:tid 35332] [client 74.248.148.69:16906] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeaeFIJW6fdXWO6agMF_-AAAAAI"]
[Tue Apr 21 05:43:49.519610 2026] [:error] [pid 35415:tid 35437] [client 74.248.148.69:16999] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeaeFUiqDinI4_22zzj4ngAAAMo"]
[Tue Apr 21 05:43:50.059843 2026] [:error] [pid 35321:tid 35394] [client 74.248.148.69:16992] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeaeFjeHLhVUuu8cVXxJvQAAAEo"]
[Tue Apr 21 05:43:50.630290 2026] [:error] [pid 35320:tid 35343] [client 74.248.148.69:16909] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeaeFoJW6fdXWO6agMF_-gAAAA0"]
[Tue Apr 21 05:43:51.162152 2026] [:error] [pid 35320:tid 35331] [client 74.248.148.69:16913] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeaeF4JW6fdXWO6agMF__AAAAAE"]
[Tue Apr 21 05:43:51.677453 2026] [:error] [pid 4823:tid 4873] [client 74.248.148.69:16853] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeaeF_c8mke3PfHqsxGKUAAAAZQ"]
[Tue Apr 21 05:43:52.374735 2026] [:error] [pid 5377:tid 5406] [client 74.248.148.69:17016] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeaeGLBKychFlrHBdvsOEQAAAdQ"]
[Tue Apr 21 05:43:52.986800 2026] [:error] [pid 5377:tid 5387] [client 74.248.148.69:16857] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aeaeGLBKychFlrHBdvsOEgAAAcE"]
[Tue Apr 21 05:43:53.611229 2026] [:error] [pid 35320:tid 35348] [client 74.248.148.69:16917] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeaeGYJW6fdXWO6agMGAAgAAABI"]
[Tue Apr 21 05:43:54.207133 2026] [:error] [pid 4777:tid 4794] [client 74.248.148.69:16955] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeaeGqxXur6bykKyLZQT6QAAAQY"]
[Tue Apr 21 05:43:54.901920 2026] [:error] [pid 4777:tid 4797] [client 74.248.148.69:16872] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeaeGqxXur6bykKyLZQT6gAAAQk"]
[Tue Apr 21 05:43:55.781295 2026] [:error] [pid 5377:tid 5402] [client 74.248.148.69:16938] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "aeaeG7BKychFlrHBdvsOFgAAAdA"]
[Tue Apr 21 05:43:56.342065 2026] [:error] [pid 5377:tid 5408] [client 74.248.148.69:16911] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeaeHLBKychFlrHBdvsOFwAAAdY"]
[Tue Apr 21 05:43:56.917018 2026] [:error] [pid 4777:tid 4807] [client 74.248.148.69:16933] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeaeHKxXur6bykKyLZQT7gAAARM"]
[Tue Apr 21 05:43:57.564309 2026] [:error] [pid 4822:tid 4846] [client 74.248.148.69:16968] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeaeHSAteFQFwS_23JmangAAAVQ"]
[Tue Apr 21 05:43:58.283942 2026] [:error] [pid 5377:tid 5388] [client 74.248.148.69:16983] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin-install.php"] [unique_id "aeaeHrBKychFlrHBdvsOGgAAAcI"]
[Tue Apr 21 05:43:58.886605 2026] [:error] [pid 35320:tid 35332] [client 74.248.148.69:16833] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeaeHoJW6fdXWO6agMGADQAAAAI"]
[Tue Apr 21 05:43:59.477152 2026] [:error] [pid 4823:tid 4874] [client 74.248.148.69:16958] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeaeH_c8mke3PfHqsxGKVAAAAZU"]
[Tue Apr 21 05:44:00.031492 2026] [:error] [pid 5377:tid 5398] [client 74.248.148.69:16947] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeaeILBKychFlrHBdvsOHQAAAcw"]
[Tue Apr 21 05:44:00.603776 2026] [:error] [pid 5377:tid 5393] [client 74.248.148.69:16972] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeaeILBKychFlrHBdvsOHgAAAcc"]
[Tue Apr 21 05:44:01.189537 2026] [:error] [pid 35415:tid 35438] [client 74.248.148.69:16937] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeaeIUiqDinI4_22zzj4owAAAMs"]
[Tue Apr 21 05:44:01.819003 2026] [:error] [pid 35321:tid 35406] [client 74.248.148.69:17014] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeaeITeHLhVUuu8cVXxJwQAAAFY"]
[Tue Apr 21 05:44:02.368073 2026] [:error] [pid 35415:tid 35428] [client 74.248.148.69:16941] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeaeIkiqDinI4_22zzj4pAAAAME"]
[Tue Apr 21 05:44:02.975149 2026] [:error] [pid 35321:tid 35408] [client 74.248.148.69:16998] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeaeIjeHLhVUuu8cVXxJwgAAAFg"]
[Tue Apr 21 05:44:03.546579 2026] [:error] [pid 5377:tid 5387] [client 74.248.148.69:17001] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeaeI7BKychFlrHBdvsOIQAAAcE"]
[Tue Apr 21 05:44:04.140135 2026] [:error] [pid 5377:tid 5390] [client 74.248.148.69:16922] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeaeJLBKychFlrHBdvsOIgAAAcQ"]
[Tue Apr 21 05:44:04.716032 2026] [:error] [pid 5377:tid 5404] [client 74.248.148.69:16976] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeaeJLBKychFlrHBdvsOIwAAAdI"]
[Tue Apr 21 05:44:05.314942 2026] [:error] [pid 35415:tid 35445] [client 74.248.148.69:17011] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "aeaeJUiqDinI4_22zzj4pwAAANI"]
[Tue Apr 21 05:44:05.902460 2026] [:error] [pid 35320:tid 35331] [client 74.248.148.69:16988] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeaeJYJW6fdXWO6agMGADwAAAAE"]
[Tue Apr 21 05:44:06.500633 2026] [:error] [pid 35321:tid 35401] [client 74.248.148.69:16931] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeaeJjeHLhVUuu8cVXxJxQAAAFE"]
[Tue Apr 21 05:44:07.183558 2026] [:error] [pid 35320:tid 35349] [client 74.248.148.69:16956] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeaeJ4JW6fdXWO6agMGAEgAAABM"]
[Tue Apr 21 05:44:07.809152 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:16954] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "aeaeJ7BKychFlrHBdvsOJQAAAcA"]
[Tue Apr 21 05:44:08.443529 2026] [:error] [pid 4823:tid 4870] [client 74.248.148.69:16902] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeaeKPc8mke3PfHqsxGKWAAAAZE"]
[Tue Apr 21 05:44:09.088740 2026] [:error] [pid 4777:tid 4789] [client 74.248.148.69:16895] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeaeKaxXur6bykKyLZQT_wAAAQE"]
[Tue Apr 21 05:44:09.629830 2026] [:error] [pid 4777:tid 4803] [client 74.248.148.69:16944] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeaeKaxXur6bykKyLZQUAAAAAQ8"]
[Tue Apr 21 05:44:10.188309 2026] [:error] [pid 35320:tid 35338] [client 74.248.148.69:16940] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "aeaeKoJW6fdXWO6agMGAGAAAAAg"]
[Tue Apr 21 05:44:10.796579 2026] [:error] [pid 4777:tid 4802] [client 74.248.148.69:16865] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeaeKqxXur6bykKyLZQUAgAAAQ4"]
[Tue Apr 21 05:44:11.350081 2026] [:error] [pid 35320:tid 35350] [client 74.248.148.69:17000] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeaeK4JW6fdXWO6agMGAHAAAABQ"]
[Tue Apr 21 05:44:11.926608 2026] [:error] [pid 35321:tid 35390] [client 74.248.148.69:16903] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeaeKzeHLhVUuu8cVXxJxwAAAEY"]
[Tue Apr 21 05:44:12.513214 2026] [:error] [pid 4777:tid 4806] [client 74.248.148.69:16977] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeaeLKxXur6bykKyLZQUAwAAARI"]
[Tue Apr 21 05:44:13.071678 2026] [:error] [pid 4823:tid 4876] [client 74.248.148.69:16914] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeaeLfc8mke3PfHqsxGKXQAAAZc"]
[Tue Apr 21 05:44:13.629690 2026] [:error] [pid 35320:tid 35335] [client 74.248.148.69:16949] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeaeLYJW6fdXWO6agMGAIQAAAAU"]
[Tue Apr 21 05:44:14.241722 2026] [:error] [pid 4777:tid 4811] [client 74.248.148.69:16916] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeaeLqxXur6bykKyLZQUBQAAARc"]
[Tue Apr 21 05:44:14.766619 2026] [:error] [pid 4823:tid 4855] [client 74.248.148.69:16925] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws48.php"] [unique_id "aeaeLvc8mke3PfHqsxGKZAAAAYI"]
[Tue Apr 21 05:44:15.338481 2026] [:error] [pid 35322:tid 35364] [client 74.248.148.69:16934] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeaeL6PoAfV40BTfVKx4EAAAAIc"]
[Tue Apr 21 05:44:15.850492 2026] [:error] [pid 4777:tid 4801] [client 74.248.148.69:16858] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeaeL6xXur6bykKyLZQUCAAAAQ0"]
[Tue Apr 21 05:44:16.415529 2026] [:error] [pid 5377:tid 5407] [client 74.248.148.69:16876] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeaeMLBKychFlrHBdvsOJwAAAdU"]
[Tue Apr 21 05:44:17.000730 2026] [:error] [pid 5377:tid 5397] [client 74.248.148.69:16966] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeaeMLBKychFlrHBdvsOKgAAAcs"]
[Tue Apr 21 05:44:17.556645 2026] [:error] [pid 4823:tid 4868] [client 74.248.148.69:16912] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeaeMfc8mke3PfHqsxGKaQAAAY8"]
[Tue Apr 21 05:44:18.097524 2026] [:error] [pid 5377:tid 5409] [client 74.248.148.69:16936] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeaeMrBKychFlrHBdvsOLAAAAdc"]
[Tue Apr 21 05:44:18.647463 2026] [:error] [pid 35322:tid 35357] [client 74.248.148.69:16856] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeaeMqPoAfV40BTfVKx4EQAAAIA"]
[Tue Apr 21 05:44:19.202531 2026] [:error] [pid 5377:tid 5399] [client 74.248.148.69:17008] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeaeM7BKychFlrHBdvsOLwAAAc0"]
[Tue Apr 21 05:44:19.715409 2026] [:error] [pid 4822:tid 4843] [client 74.248.148.69:16780] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeaeMyAteFQFwS_23JmaowAAAVE"]
[Tue Apr 21 05:44:20.228035 2026] [:error] [pid 5377:tid 5398] [client 74.248.148.69:16930] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeaeNLBKychFlrHBdvsOMQAAAcw"]
[Tue Apr 21 05:44:20.738728 2026] [:error] [pid 35322:tid 35359] [client 74.248.148.69:17009] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeaeNKPoAfV40BTfVKx4EgAAAII"]
[Tue Apr 21 05:44:21.250594 2026] [:error] [pid 4823:tid 4860] [client 74.248.148.69:16834] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeaeNfc8mke3PfHqsxGKbAAAAYc"]
[Tue Apr 21 05:44:21.761048 2026] [:error] [pid 4823:tid 4853] [client 74.248.148.69:16860] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aeaeNfc8mke3PfHqsxGKbgAAAYA"]
[Tue Apr 21 05:44:22.316584 2026] [:error] [pid 35322:tid 35376] [client 74.248.148.69:16967] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aeaeNqPoAfV40BTfVKx4EwAAAJM"]
[Tue Apr 21 05:44:22.899986 2026] [:error] [pid 5377:tid 5391] [client 74.248.148.69:16973] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "aeaeNrBKychFlrHBdvsOMgAAAcU"]
[Tue Apr 21 05:44:23.456987 2026] [:error] [pid 35322:tid 35373] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Tue Apr 21 05:44:23.719738 2026] [:error] [pid 35322:tid 35361] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Tue Apr 21 05:44:23.979525 2026] [:error] [pid 35322:tid 35362] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Tue Apr 21 05:44:24.237375 2026] [:error] [pid 35322:tid 35360] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Tue Apr 21 05:44:24.496008 2026] [:error] [pid 35322:tid 35378] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Tue Apr 21 05:44:24.754839 2026] [:error] [pid 35322:tid 35363] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Apr 21 05:44:25.017150 2026] [:error] [pid 35322:tid 35372] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Tue Apr 21 05:44:25.277554 2026] [:error] [pid 35322:tid 35367] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Tue Apr 21 05:44:25.541918 2026] [:error] [pid 35322:tid 35365] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Apr 21 05:44:25.800740 2026] [:error] [pid 35322:tid 35358] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Tue Apr 21 05:44:26.080683 2026] [:error] [pid 35322:tid 35377] [client 74.248.148.69:16996] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Tue Apr 21 05:44:26.336126 2026] [:error] [pid 35322:tid 35369] [client 74.248.148.69:16996] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeaeOqPoAfV40BTfVKx4HwAAAIw"]
[Tue Apr 21 05:44:26.961337 2026] [:error] [pid 4823:tid 4862] [client 74.248.148.69:16773] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeaeOvc8mke3PfHqsxGKcgAAAYk"]
[Tue Apr 21 05:44:27.553122 2026] [:error] [pid 5377:tid 5388] [client 74.248.148.69:16926] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeaeO7BKychFlrHBdvsOOgAAAcI"]
[Tue Apr 21 05:44:28.138346 2026] [:error] [pid 5377:tid 5408] [client 74.248.148.69:16861] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "aeaePLBKychFlrHBdvsOPAAAAdY"]
[Tue Apr 21 05:44:28.691797 2026] [:error] [pid 35415:tid 35447] [client 74.248.148.69:16893] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeaePEiqDinI4_22zzj4qQAAANQ"]
[Tue Apr 21 05:44:29.292334 2026] [:error] [pid 35320:tid 35342] [client 74.248.148.69:16848] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeaePYJW6fdXWO6agMGAJgAAAAw"]
[Tue Apr 21 05:44:29.910841 2026] [:error] [pid 4823:tid 4866] [client 74.248.148.69:16928] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeaePfc8mke3PfHqsxGKegAAAY0"]
[Tue Apr 21 05:44:30.423179 2026] [:error] [pid 4823:tid 4860] [client 74.248.148.69:16790] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeaePvc8mke3PfHqsxGKfwAAAYc"]
[Tue Apr 21 05:44:30.961546 2026] [:error] [pid 4823:tid 4871] [client 74.248.148.69:17013] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeaePvc8mke3PfHqsxGKhQAAAZI"]
[Tue Apr 21 05:44:31.519982 2026] [:error] [pid 4822:tid 4827] [client 74.248.148.69:16862] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeaePyAteFQFwS_23JmapQAAAUE"]
[Tue Apr 21 05:44:32.035295 2026] [:error] [pid 4823:tid 4855] [client 74.248.148.69:16924] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeaeQPc8mke3PfHqsxGKhwAAAYI"]
[Tue Apr 21 05:44:32.569279 2026] [:error] [pid 4823:tid 4874] [client 74.248.148.69:16818] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "aeaeQPc8mke3PfHqsxGKiAAAAZU"]
[Tue Apr 21 05:44:33.082940 2026] [:error] [pid 4823:tid 4868] [client 74.248.148.69:17017] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeaeQfc8mke3PfHqsxGKiQAAAY8"]
[Tue Apr 21 05:44:33.630678 2026] [:error] [pid 4823:tid 4866] [client 74.248.148.69:16770] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeaeQfc8mke3PfHqsxGKiwAAAY0"]
[Tue Apr 21 05:44:34.234666 2026] [:error] [pid 4823:tid 4876] [client 74.248.148.69:16975] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeaeQvc8mke3PfHqsxGKjQAAAZc"]
[Tue Apr 21 05:44:34.820007 2026] [:error] [pid 4822:tid 4830] [client 74.248.148.69:16852] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeaeQiAteFQFwS_23JmapwAAAUQ"]
[Tue Apr 21 05:44:35.517273 2026] [:error] [pid 4822:tid 4850] [client 74.248.148.69:16927] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeaeQyAteFQFwS_23JmaqAAAAVg"]
[Tue Apr 21 05:44:36.081589 2026] [:error] [pid 4823:tid 4855] [client 74.248.148.69:16866] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeaeRPc8mke3PfHqsxGKkQAAAYI"]
[Tue Apr 21 05:44:36.615142 2026] [:error] [pid 5377:tid 5397] [client 74.248.148.69:16951] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeaeRLBKychFlrHBdvsOQQAAAcs"]
[Tue Apr 21 05:44:37.169335 2026] [:error] [pid 5377:tid 5408] [client 74.248.148.69:16793] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeaeRbBKychFlrHBdvsORAAAAdY"]
[Tue Apr 21 05:44:37.715205 2026] [:error] [pid 4823:tid 4868] [client 74.248.148.69:16932] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeaeRfc8mke3PfHqsxGKlAAAAY8"]
[Tue Apr 21 05:44:38.344784 2026] [:error] [pid 5377:tid 5396] [client 74.248.148.69:16920] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeaeRrBKychFlrHBdvsORgAAAco"]
[Tue Apr 21 05:44:38.880050 2026] [:error] [pid 4777:tid 4810] [client 74.248.148.69:16841] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeaeRqxXur6bykKyLZQUEQAAARY"]
[Tue Apr 21 05:44:39.523046 2026] [:error] [pid 35322:tid 35374] [client 74.248.148.69:16943] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "aeaeR6PoAfV40BTfVKx4IAAAAJE"]
[Tue Apr 21 05:44:40.124230 2026] [:error] [pid 5377:tid 5401] [client 74.248.148.69:16961] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aeaeSLBKychFlrHBdvsOSgAAAc8"]
[Tue Apr 21 05:44:40.642776 2026] [:error] [pid 4822:tid 4832] [client 74.248.148.69:16997] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aeaeSCAteFQFwS_23JmaqQAAAUY"]
[Tue Apr 21 05:44:41.177573 2026] [:error] [pid 35415:tid 35442] [client 74.248.148.69:16995] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aeaeSUiqDinI4_22zzj4rAAAAM8"]
[Tue Apr 21 05:44:41.741501 2026] [:error] [pid 4823:tid 4873] [client 74.248.148.69:16772] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "aeaeSfc8mke3PfHqsxGKlwAAAZQ"]
[Tue Apr 21 05:44:42.300690 2026] [:error] [pid 4822:tid 4848] [client 74.248.148.69:16783] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeSiAteFQFwS_23JmaqgAAAVY"]
[Tue Apr 21 05:44:42.912272 2026] [:error] [pid 4823:tid 4855] [client 74.248.148.69:16963] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeSvc8mke3PfHqsxGKmwAAAYI"]
[Tue Apr 21 05:44:43.588373 2026] [:error] [pid 4823:tid 4853] [client 74.248.148.69:16787] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeS_c8mke3PfHqsxGKnQAAAYA"]
[Tue Apr 21 05:44:44.311458 2026] [:error] [pid 4823:tid 4859] [client 74.248.148.69:16950] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeTPc8mke3PfHqsxGKngAAAYY"]
[Tue Apr 21 05:44:45.013446 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:16867] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeaeTbBKychFlrHBdvsOTQAAAcA"]
[Tue Apr 21 05:44:45.731071 2026] [:error] [pid 35320:tid 35342] [client 74.248.148.69:16959] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeaeTYJW6fdXWO6agMGAMgAAAAw"]
[Tue Apr 21 05:44:46.570386 2026] [:error] [pid 4823:tid 4870] [client 74.248.148.69:16875] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeaeTvc8mke3PfHqsxGKoAAAAZE"]
[Tue Apr 21 05:44:47.183182 2026] [:error] [pid 4823:tid 4866] [client 74.248.148.69:16845] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aeaeT_c8mke3PfHqsxGKogAAAY0"]
[Tue Apr 21 05:44:47.708018 2026] [:error] [pid 4823:tid 4858] [client 74.248.148.69:16854] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeaeT_c8mke3PfHqsxGKowAAAYU"]
[Tue Apr 21 05:44:48.247939 2026] [:error] [pid 35322:tid 35375] [client 74.248.148.69:16945] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeaeUKPoAfV40BTfVKx4IQAAAJI"]
[Tue Apr 21 05:44:48.865375 2026] [:error] [pid 4823:tid 4854] [client 74.248.148.69:16711] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeaeUPc8mke3PfHqsxGKpQAAAYE"]
[Tue Apr 21 05:44:49.435738 2026] [:error] [pid 5377:tid 5397] [client 74.248.148.69:17010] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "aeaeUbBKychFlrHBdvsOTgAAAcs"]
[Tue Apr 21 05:44:49.965011 2026] [:error] [pid 4823:tid 4877] [client 74.248.148.69:16849] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aeaeUfc8mke3PfHqsxGKpwAAAZg"]
[Tue Apr 21 05:44:50.667823 2026] [:error] [pid 4823:tid 4869] [client 74.248.148.69:16814] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aeaeUvc8mke3PfHqsxGKqAAAAZA"]
[Tue Apr 21 05:44:51.251403 2026] [:error] [pid 5377:tid 5388] [client 74.248.148.69:16953] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aeaeU7BKychFlrHBdvsOTwAAAcI"]
[Tue Apr 21 05:44:51.815844 2026] [:error] [pid 5377:tid 5408] [client 74.248.148.69:16993] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "aeaeU7BKychFlrHBdvsOUAAAAdY"]
[Tue Apr 21 05:44:52.383608 2026] [:error] [pid 5377:tid 5409] [client 74.248.148.69:16883] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeaeVLBKychFlrHBdvsOUQAAAdc"]
[Tue Apr 21 05:44:52.901418 2026] [:error] [pid 5377:tid 5407] [client 74.248.148.69:16891] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeaeVLBKychFlrHBdvsOUgAAAdU"]
[Tue Apr 21 05:44:53.411826 2026] [:error] [pid 4822:tid 4831] [client 74.248.148.69:16874] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeaeVSAteFQFwS_23JmarQAAAUU"]
[Tue Apr 21 05:44:53.980734 2026] [:error] [pid 5377:tid 5399] [client 74.248.148.69:16918] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeaeVbBKychFlrHBdvsOVAAAAc0"]
[Tue Apr 21 05:44:54.547715 2026] [:error] [pid 4822:tid 4844] [client 74.248.148.69:16952] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeaeViAteFQFwS_23JmargAAAVI"]
[Tue Apr 21 05:44:55.075646 2026] [:error] [pid 35321:tid 35386] [client 74.248.148.69:16880] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeaeVzeHLhVUuu8cVXxJ0gAAAEI"]
[Tue Apr 21 05:44:55.725152 2026] [:error] [pid 5377:tid 5403] [client 74.248.148.69:16836] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeaeV7BKychFlrHBdvsOVgAAAdE"]
[Tue Apr 21 05:44:56.388196 2026] [:error] [pid 5377:tid 5389] [client 74.248.148.69:16805] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aeaeWLBKychFlrHBdvsOWAAAAcM"]
[Tue Apr 21 05:44:57.019789 2026] [:error] [pid 35415:tid 35440] [client 74.248.148.69:16843] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeaeWUiqDinI4_22zzj4rgAAAM0"]
[Tue Apr 21 05:44:57.577332 2026] [:error] [pid 4822:tid 4846] [client 74.248.148.69:16946] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeaeWSAteFQFwS_23JmarwAAAVQ"]
[Tue Apr 21 05:44:58.101436 2026] [:error] [pid 4822:tid 4841] [client 74.248.148.69:16835] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeaeWiAteFQFwS_23JmasAAAAU8"]
[Tue Apr 21 05:44:58.653034 2026] [:error] [pid 4823:tid 4868] [client 74.248.148.69:16774] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeaeWvc8mke3PfHqsxGKrQAAAY8"]
[Tue Apr 21 05:44:59.261809 2026] [:error] [pid 4823:tid 4872] [client 74.248.148.69:16768] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "aeaeW_c8mke3PfHqsxGKrgAAAZM"]
[Tue Apr 21 05:44:59.849078 2026] [:error] [pid 5377:tid 5391] [client 74.248.148.69:16840] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "aeaeW7BKychFlrHBdvsOWgAAAcU"]
[Tue Apr 21 05:45:00.484051 2026] [:error] [pid 35415:tid 35429] [client 74.248.148.69:16719] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "aeaeXEiqDinI4_22zzj4rwAAAMI"]
[Tue Apr 21 05:45:01.034929 2026] [:error] [pid 35321:tid 35389] [client 74.248.148.69:16879] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/900.php"] [unique_id "aeaeXTeHLhVUuu8cVXxJ1QAAAEU"]
[Tue Apr 21 05:45:01.575417 2026] [:error] [pid 35415:tid 35434] [client 74.248.148.69:16838] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeXUiqDinI4_22zzj4sAAAAMc"]
[Tue Apr 21 05:45:02.329959 2026] [:error] [pid 4822:tid 4843] [client 74.248.148.69:16921] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeXiAteFQFwS_23JmasgAAAVE"]
[Tue Apr 21 05:45:02.900830 2026] [:error] [pid 5377:tid 5404] [client 74.248.148.69:16810] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeXrBKychFlrHBdvsOXQAAAdI"]
[Tue Apr 21 05:45:03.515852 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:16809] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeaeX7BKychFlrHBdvsOXwAAAcA"]
[Tue Apr 21 05:45:04.066657 2026] [:error] [pid 4822:tid 4839] [client 74.248.148.69:16786] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jk.php"] [unique_id "aeaeYCAteFQFwS_23JmaswAAAU0"]
[Tue Apr 21 05:45:04.610196 2026] [:error] [pid 35322:tid 35366] [client 74.248.148.69:16776] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jk.php"] [unique_id "aeaeYKPoAfV40BTfVKx4JAAAAIk"]
[Tue Apr 21 05:45:05.148844 2026] [:error] [pid 4822:tid 4842] [client 74.248.148.69:16923] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jk.php"] [unique_id "aeaeYSAteFQFwS_23JmatgAAAVA"]
[Tue Apr 21 05:45:05.666383 2026] [:error] [pid 4823:tid 4874] [client 74.248.148.69:16878] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jk.php"] [unique_id "aeaeYfc8mke3PfHqsxGKsQAAAZU"]
[Tue Apr 21 05:45:06.233844 2026] [:error] [pid 4823:tid 4876] [client 74.248.148.69:16846] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeaeYvc8mke3PfHqsxGKsgAAAZc"]
[Tue Apr 21 05:45:06.789937 2026] [:error] [pid 4822:tid 4827] [client 74.248.148.69:16884] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeaeYiAteFQFwS_23JmatwAAAUE"]
[Tue Apr 21 05:45:07.403867 2026] [:error] [pid 5377:tid 5407] [client 74.248.148.69:16864] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeaeY7BKychFlrHBdvsOYQAAAdU"]
[Tue Apr 21 05:45:08.007834 2026] [:error] [pid 35320:tid 35332] [client 74.248.148.69:16799] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeaeZIJW6fdXWO6agMGANAAAAAI"]
[Tue Apr 21 05:45:08.697805 2026] [:error] [pid 4823:tid 4854] [client 74.248.148.69:16831] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeaeZPc8mke3PfHqsxGKtQAAAYE"]
[Tue Apr 21 05:45:09.230794 2026] [:error] [pid 4823:tid 4857] [client 74.248.148.69:16900] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeaeZfc8mke3PfHqsxGKtgAAAYQ"]
[Tue Apr 21 05:45:09.773706 2026] [:error] [pid 4823:tid 4869] [client 74.248.148.69:16742] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeaeZfc8mke3PfHqsxGKuAAAAZA"]
[Tue Apr 21 05:45:10.294065 2026] [:error] [pid 4822:tid 4850] [client 74.248.148.69:16784] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeaeZiAteFQFwS_23JmauQAAAVg"]
[Tue Apr 21 05:45:10.823736 2026] [:error] [pid 4822:tid 4840] [client 74.248.148.69:17023] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeaeZiAteFQFwS_23JmaugAAAU4"]
[Tue Apr 21 05:45:11.458585 2026] [:error] [pid 35321:tid 35400] [client 74.248.148.69:16830] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeaeZzeHLhVUuu8cVXxJ1wAAAFA"]
[Tue Apr 21 05:45:12.114956 2026] [:error] [pid 35321:tid 35387] [client 74.248.148.69:16889] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeaeaDeHLhVUuu8cVXxJ2AAAAEM"]
[Tue Apr 21 05:45:12.734303 2026] [:error] [pid 4823:tid 4862] [client 74.248.148.69:16781] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeaeaPc8mke3PfHqsxGKwAAAAYk"]
[Tue Apr 21 05:45:13.324473 2026] [:error] [pid 4823:tid 4865] [client 74.248.148.69:16806] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeaeafc8mke3PfHqsxGKwgAAAYw"]
[Tue Apr 21 05:45:13.884879 2026] [:error] [pid 35320:tid 35353] [client 74.248.148.69:16989] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeaeaYJW6fdXWO6agMGAOAAAABc"]
[Tue Apr 21 05:45:14.430647 2026] [:error] [pid 5377:tid 5410] [client 74.248.148.69:16855] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeaearBKychFlrHBdvsOZQAAAdg"]
[Tue Apr 21 05:45:14.958850 2026] [:error] [pid 35320:tid 35348] [client 74.248.148.69:16837] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeaeaoJW6fdXWO6agMGAOgAAABI"]
[Tue Apr 21 05:45:15.542927 2026] [:error] [pid 5377:tid 5395] [client 74.248.148.69:16839] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeaea7BKychFlrHBdvsOaAAAAck"]
[Tue Apr 21 05:45:16.084193 2026] [:error] [pid 5377:tid 5387] [client 74.248.148.69:16965] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeaebLBKychFlrHBdvsOagAAAcE"]
[Tue Apr 21 05:45:16.864804 2026] [:error] [pid 4823:tid 4856] [client 74.248.148.69:16706] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeaebPc8mke3PfHqsxGKxQAAAYM"]
[Tue Apr 21 05:45:17.610268 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:16869] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeaebbBKychFlrHBdvsObQAAAcA"]
[Tue Apr 21 05:45:18.261146 2026] [:error] [pid 5377:tid 5388] [client 74.248.148.69:16881] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeaebrBKychFlrHBdvsObgAAAcI"]
[Tue Apr 21 05:45:18.828596 2026] [:error] [pid 4823:tid 4875] [client 74.248.148.69:16868] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeaebvc8mke3PfHqsxGKxwAAAZY"]
[Tue Apr 21 05:45:19.408811 2026] [:error] [pid 4823:tid 4868] [client 74.248.148.69:16890] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeaeb_c8mke3PfHqsxGKyQAAAY8"]
[Tue Apr 21 05:45:19.950441 2026] [:error] [pid 4823:tid 4876] [client 74.248.148.69:16950] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeaeb_c8mke3PfHqsxGKywAAAZc"]
[Tue Apr 21 05:45:20.583493 2026] [:error] [pid 5377:tid 5387] [client 74.248.148.69:16844] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeaecLBKychFlrHBdvsOcgAAAcE"]
[Tue Apr 21 05:45:21.208673 2026] [:error] [pid 4823:tid 4854] [client 74.248.148.69:16808] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeaecfc8mke3PfHqsxGKzwAAAYE"]
[Tue Apr 21 05:45:21.850619 2026] [:error] [pid 5377:tid 5405] [client 74.248.148.69:16892] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeaecbBKychFlrHBdvsOdgAAAdM"]
[Tue Apr 21 05:45:22.408826 2026] [:error] [pid 4777:tid 4793] [client 74.248.148.69:16871] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeaecqxXur6bykKyLZQUGQAAAQU"]
[Tue Apr 21 05:45:22.918339 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:16939] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeaecrBKychFlrHBdvsOdwAAAcA"]
[Tue Apr 21 05:45:23.457509 2026] [:error] [pid 5377:tid 5388] [client 74.248.148.69:16942] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeaec7BKychFlrHBdvsOewAAAcI"]
[Tue Apr 21 05:45:24.036976 2026] [:error] [pid 5377:tid 5407] [client 74.248.148.69:16811] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeaedLBKychFlrHBdvsOfAAAAdU"]
[Tue Apr 21 05:45:24.638111 2026] [:error] [pid 5377:tid 5396] [client 74.248.148.69:16729] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "aeaedLBKychFlrHBdvsOfgAAAco"]
[Tue Apr 21 05:45:25.200224 2026] [:error] [pid 35322:tid 35368] [client 74.248.148.69:16885] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adoms.php"] [unique_id "aeaedaPoAfV40BTfVKx4JgAAAIs"]
[Tue Apr 21 05:45:25.790312 2026] [:error] [pid 4822:tid 4837] [client 74.248.148.69:16796] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adoms.php"] [unique_id "aeaedSAteFQFwS_23JmauwAAAUs"]
[Tue Apr 21 05:45:26.337636 2026] [:error] [pid 4777:tid 4808] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/adoms.php
[Tue Apr 21 05:45:26.805395 2026] [:error] [pid 4777:tid 4808] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Tue Apr 21 05:45:27.063778 2026] [:error] [pid 4777:tid 4789] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Tue Apr 21 05:45:27.336837 2026] [:error] [pid 4777:tid 4803] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Apr 21 05:45:27.606029 2026] [:error] [pid 4777:tid 4796] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Tue Apr 21 05:45:28.130722 2026] [:error] [pid 4777:tid 4790] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Tue Apr 21 05:45:28.396146 2026] [:error] [pid 4777:tid 4800] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Tue Apr 21 05:45:28.656635 2026] [:error] [pid 4777:tid 4804] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Tue Apr 21 05:45:28.930807 2026] [:error] [pid 4777:tid 4806] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Tue Apr 21 05:45:29.193072 2026] [:error] [pid 4777:tid 4811] [client 74.248.148.69:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Tue Apr 21 05:45:29.448005 2026] [:error] [pid 4777:tid 4810] [client 74.248.148.69:16782] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeaeeaxXur6bykKyLZQUJQAAARY"]
[Tue Apr 21 05:45:29.982624 2026] [:error] [pid 5377:tid 5395] [client 74.248.148.69:16870] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeaeebBKychFlrHBdvsOfwAAAck"]
[Tue Apr 21 05:45:30.592221 2026] [:error] [pid 5377:tid 5390] [client 74.248.148.69:17007] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeaeerBKychFlrHBdvsOgQAAAcQ"]
[Tue Apr 21 05:45:31.168398 2026] [:error] [pid 4823:tid 4876] [client 74.248.148.69:16877] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeaee_c8mke3PfHqsxGK2AAAAZc"]
[Tue Apr 21 05:45:31.735862 2026] [:error] [pid 4777:tid 4791] [client 74.248.148.69:16887] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeaee6xXur6bykKyLZQUJwAAAQM"]
[Tue Apr 21 05:45:32.281579 2026] [:error] [pid 4777:tid 4795] [client 74.248.148.69:16886] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeaefKxXur6bykKyLZQUKAAAAQc"]
[Tue Apr 21 05:45:32.815904 2026] [:error] [pid 35320:tid 35333] [client 74.248.148.69:16826] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeaefIJW6fdXWO6agMGAQAAAAAM"]
[Tue Apr 21 05:45:33.366594 2026] [:error] [pid 4822:tid 4836] [client 74.248.148.69:16777] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeaefSAteFQFwS_23JmavAAAAUo"]
[Tue Apr 21 05:45:33.949761 2026] [:error] [pid 35320:tid 35340] [client 74.248.148.69:16803] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeaefYJW6fdXWO6agMGAQgAAAAo"]
[Tue Apr 21 05:45:34.546361 2026] [:error] [pid 5377:tid 5392] [client 74.248.148.69:16795] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeaefrBKychFlrHBdvsOhgAAAcY"]
[Tue Apr 21 05:45:35.141499 2026] [:error] [pid 35320:tid 35339] [client 74.248.148.69:16746] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeaef4JW6fdXWO6agMGAQwAAAAk"]
[Tue Apr 21 05:45:35.700088 2026] [:error] [pid 4822:tid 4831] [client 74.248.148.69:16842] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "aeaefyAteFQFwS_23JmavQAAAUU"]
[Tue Apr 21 05:45:36.237710 2026] [:error] [pid 4822:tid 4844] [client 74.248.148.69:16850] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeaegCAteFQFwS_23JmavgAAAVI"]
[Tue Apr 21 05:45:36.790614 2026] [:error] [pid 4822:tid 4841] [client 74.248.148.69:16929] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeaegCAteFQFwS_23JmavwAAAU8"]
[Tue Apr 21 05:45:37.330121 2026] [:error] [pid 4822:tid 4849] [client 74.248.148.69:16779] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeaegSAteFQFwS_23JmawQAAAVc"]
[Tue Apr 21 05:45:37.878962 2026] [:error] [pid 5377:tid 5410] [client 74.248.148.69:16863] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeaegbBKychFlrHBdvsOigAAAdg"]
[Tue Apr 21 05:45:38.436082 2026] [:error] [pid 35320:tid 35349] [client 74.248.148.69:16822] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeaegoJW6fdXWO6agMGARwAAABM"]
[Tue Apr 21 05:45:38.999452 2026] [:error] [pid 5377:tid 5391] [client 74.248.148.69:16824] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeaegrBKychFlrHBdvsOjQAAAcU"]
[Tue Apr 21 05:45:39.511975 2026] [:error] [pid 5377:tid 5389] [client 74.248.148.69:16823] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeaeg7BKychFlrHBdvsOjgAAAcM"]
[Tue Apr 21 05:45:40.061213 2026] [:error] [pid 4822:tid 4833] [client 74.248.148.69:16710] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aeaehCAteFQFwS_23JmawwAAAUc"]
[Tue Apr 21 05:45:40.620891 2026] [:error] [pid 4822:tid 4843] [client 74.248.148.69:16743] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeaehCAteFQFwS_23JmaxAAAAVE"]
[Tue Apr 21 05:45:41.170775 2026] [:error] [pid 35321:tid 35391] [client 74.248.148.69:16804] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeaehTeHLhVUuu8cVXxJ2gAAAEc"]
[Tue Apr 21 05:45:41.740081 2026] [:error] [pid 5377:tid 5398] [client 74.248.148.69:16888] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeaehbBKychFlrHBdvsOkAAAAcw"]
[Tue Apr 21 05:45:42.307754 2026] [:error] [pid 35321:tid 35399] [client 74.248.148.69:16894] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aeaehjeHLhVUuu8cVXxJ2wAAAE8"]
[Tue Apr 21 05:45:42.899580 2026] [:error] [pid 5377:tid 5388] [client 74.248.148.69:16816] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeaehrBKychFlrHBdvsOkQAAAcI"]
[Tue Apr 21 05:45:43.478776 2026] [:error] [pid 4822:tid 4839] [client 74.248.148.69:16728] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeaehyAteFQFwS_23JmaxQAAAU0"]
[Tue Apr 21 05:45:44.058329 2026] [:error] [pid 5377:tid 5400] [client 74.248.148.69:16813] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeaeiLBKychFlrHBdvsOkwAAAc4"]
[Tue Apr 21 05:45:44.599306 2026] [:error] [pid 35320:tid 35342] [client 74.248.148.69:16764] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mk.php"] [unique_id "aeaeiIJW6fdXWO6agMGASQAAAAw"]
[Tue Apr 21 05:45:45.146965 2026] [:error] [pid 35320:tid 35346] [client 74.248.148.69:16815] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeaeiYJW6fdXWO6agMGASgAAABA"]
[Tue Apr 21 05:45:45.686720 2026] [:error] [pid 5377:tid 5407] [client 74.248.148.69:16653] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeaeibBKychFlrHBdvsOlAAAAdU"]
[Tue Apr 21 05:45:46.248614 2026] [:error] [pid 5377:tid 5396] [client 74.248.148.69:16791] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeaeirBKychFlrHBdvsOlgAAAco"]
[Tue Apr 21 05:45:46.798708 2026] [:error] [pid 5377:tid 5410] [client 74.248.148.69:16821] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeaeirBKychFlrHBdvsOmQAAAdg"]
[Tue Apr 21 05:45:47.350316 2026] [:error] [pid 5377:tid 5408] [client 74.248.148.69:16733] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeaei7BKychFlrHBdvsOnAAAAdY"]
[Tue Apr 21 05:45:47.922341 2026] [:error] [pid 4777:tid 4797] [client 74.248.148.69:16802] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeaei6xXur6bykKyLZQULAAAAQk"]
[Tue Apr 21 05:45:48.490576 2026] [:error] [pid 5377:tid 5389] [client 74.248.148.69:16714] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeaejLBKychFlrHBdvsOnwAAAcM"]
[Tue Apr 21 05:45:49.071802 2026] [:error] [pid 35415:tid 35449] [client 74.248.148.69:16769] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "aeaejUiqDinI4_22zzj4tQAAANY"]
[Tue Apr 21 05:45:49.628954 2026] [:error] [pid 5377:tid 5386] [client 74.248.148.69:16741] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeaejbBKychFlrHBdvsOoAAAAcA"]
[Tue Apr 21 05:45:50.198521 2026] [:error] [pid 35415:tid 35445] [client 74.248.148.69:16797] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeaejkiqDinI4_22zzj4twAAANI"]
[Tue Apr 21 05:45:50.746701 2026] [:error] [pid 35415:tid 35439] [client 74.248.148.69:16829] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeaejkiqDinI4_22zzj4uQAAAMw"]
[Tue Apr 21 05:45:51.293170 2026] [:error] [pid 5377:tid 5400] [client 74.248.148.69:16801] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/retu11.PhP7"] [unique_id "aeaej7BKychFlrHBdvsOowAAAc4"]
[Tue Apr 21 05:45:51.873601 2026] [:error] [pid 35322:tid 35361] [client 74.248.148.69:16727] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeaej6PoAfV40BTfVKx4KAAAAIQ"]
[Tue Apr 21 05:45:52.415846 2026] [:error] [pid 4777:tid 4803] [client 74.248.148.69:16751] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeaekKxXur6bykKyLZQULwAAAQ8"]
[Tue Apr 21 05:45:52.967706 2026] [:error] [pid 4777:tid 4800] [client 74.248.148.69:16723] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeaekKxXur6bykKyLZQUMQAAAQw"]
[Tue Apr 21 05:45:53.521196 2026] [:error] [pid 35322:tid 35362] [client 74.248.148.69:16744] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aeaekaPoAfV40BTfVKx4KQAAAIU"]
[Tue Apr 21 05:45:54.111839 2026] [:error] [pid 35415:tid 35440] [client 74.248.148.69:16828] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeaekkiqDinI4_22zzj4vgAAAM0"]
[Tue Apr 21 05:45:54.678022 2026] [:error] [pid 35322:tid 35360] [client 74.248.148.69:16738] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeaekqPoAfV40BTfVKx4KgAAAIM"]
[Tue Apr 21 05:45:55.204248 2026] [:error] [pid 4777:tid 4791] [client 74.248.148.69:16711] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeaek6xXur6bykKyLZQUNQAAAQM"]
[Tue Apr 21 05:45:55.712753 2026] [:error] [pid 35322:tid 35378] [client 74.248.148.69:16671] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeaek6PoAfV40BTfVKx4KwAAAJU"]
[Tue Apr 21 05:45:56.233303 2026] [:error] [pid 35322:tid 35367] [client 74.248.148.69:16704] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeaelKPoAfV40BTfVKx4LQAAAIo"]
[Tue Apr 21 05:45:56.766101 2026] [:error] [pid 35322:tid 35358] [client 74.248.148.69:16984] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeaelKPoAfV40BTfVKx4LgAAAIE"]
[Tue Apr 21 05:45:57.292410 2026] [:error] [pid 5377:tid 5387] [client 74.248.148.69:16708] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeaelbBKychFlrHBdvsOpgAAAcE"]
[Tue Apr 21 05:45:57.860016 2026] [:error] [pid 5377:tid 5389] [client 74.248.148.69:16807] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoo.php"] [unique_id "aeaelbBKychFlrHBdvsOqAAAAcM"]
[Tue Apr 21 05:45:58.459812 2026] [:error] [pid 4822:tid 4834] [client 74.248.148.69:16646] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admlo.php"] [unique_id "aeaeliAteFQFwS_23JmayAAAAUg"]
[Tue Apr 21 05:45:59.070999 2026] [:error] [pid 4777:tid 4794] [client 74.248.148.69:16759] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admlo.php"] [unique_id "aeael6xXur6bykKyLZQUOAAAAQY"]
[Tue Apr 21 05:45:59.597440 2026] [:error] [pid 4822:tid 4848] [client 74.248.148.69:16715] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admlo.php"] [unique_id "aeaelyAteFQFwS_23JmaywAAAVY"]
[Tue Apr 21 05:46:00.133299 2026] [:error] [pid 35415:tid 35435] [client 74.248.148.69:16748] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admlo.php"] [unique_id "aeaemEiqDinI4_22zzj4wQAAAMg"]
[Tue Apr 21 05:46:00.645859 2026] [:error] [pid 35320:tid 35344] [client 74.248.148.69:16656] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gcqoa.php"] [unique_id "aeaemIJW6fdXWO6agMGATAAAAA4"]
[Tue Apr 21 05:46:01.254680 2026] [:error] [pid 35320:tid 35354] [client 74.248.148.69:16747] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gcqoa.php"] [unique_id "aeaemYJW6fdXWO6agMGATQAAABg"]
[Tue Apr 21 05:46:01.765965 2026] [:error] [pid 4822:tid 4840] [client 74.248.148.69:16677] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gcqoa.php"] [unique_id "aeaemSAteFQFwS_23JmazAAAAU4"]
[Tue Apr 21 05:46:02.341877 2026] [:error] [pid 4777:tid 4806] [client 74.248.148.69:16817] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gcqoa.php"] [unique_id "aeaemqxXur6bykKyLZQUOgAAARI"]
[Tue Apr 21 05:46:02.908302 2026] [:error] [pid 5377:tid 5404] [client 74.248.148.69:16761] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeaemrBKychFlrHBdvsOrQAAAdI"]
[Tue Apr 21 05:46:03.456383 2026] [:error] [pid 35320:tid 35330] [client 74.248.148.69:16752] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeaem4JW6fdXWO6agMGATgAAAAA"]
[Tue Apr 21 05:46:04.039709 2026] [:error] [pid 4822:tid 4844] [client 74.248.148.69:16798] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeaenCAteFQFwS_23JmazgAAAVI"]
[Tue Apr 21 05:46:04.651428 2026] [:error] [pid 35320:tid 35340] [client 74.248.148.69:16763] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeaenIJW6fdXWO6agMGATwAAAAo"]
[Tue Apr 21 05:46:05.323908 2026] [:error] [pid 35320:tid 35332] [client 74.248.148.69:16859] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeaenYJW6fdXWO6agMGAUQAAAAI"]
[Tue Apr 21 05:46:05.923308 2026] [:error] [pid 35320:tid 35331] [client 74.248.148.69:16730] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeaenYJW6fdXWO6agMGAUwAAAAE"]
[Tue Apr 21 05:46:06.477848 2026] [:error] [pid 35320:tid 35353] [client 74.248.148.69:16724] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeaenoJW6fdXWO6agMGAVQAAABc"]
[Tue Apr 21 05:46:07.022314 2026] [:error] [pid 35320:tid 35341] [client 74.248.148.69:16760] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/b.php"] [unique_id "aeaen4JW6fdXWO6agMGAVgAAAAs"]
[Tue Apr 21 05:46:07.585875 2026] [:error] [pid 35320:tid 35349] [client 74.248.148.69:16767] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeaen4JW6fdXWO6agMGAWAAAABM"]
[Tue Apr 21 05:46:08.104561 2026] [:error] [pid 35320:tid 35345] [client 74.248.148.69:16775] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeaeoIJW6fdXWO6agMGAWQAAAA8"]
[Tue Apr 21 05:46:08.681742 2026] [:error] [pid 4822:tid 4829] [client 74.248.148.69:16694] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeaeoCAteFQFwS_23Jma0AAAAUM"]
[Tue Apr 21 05:46:09.276709 2026] [:error] [pid 35321:tid 35405] [client 74.248.148.69:16750] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aeaeoTeHLhVUuu8cVXxJ4gAAAFU"]
[Tue Apr 21 05:46:09.855511 2026] [:error] [pid 35321:tid 35402] [client 74.248.148.69:16582] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aeaeoTeHLhVUuu8cVXxJ5AAAAFI"]
[Tue Apr 21 05:46:10.620324 2026] [:error] [pid 35321:tid 35396] [client 74.248.148.69:16700] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aeaeojeHLhVUuu8cVXxJ5QAAAEw"]
[Tue Apr 21 05:46:11.321597 2026] [:error] [pid 5377:tid 5398] [client 74.248.148.69:16720] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aeaeo7BKychFlrHBdvsOtAAAAcw"]
[Tue Apr 21 05:46:12.176123 2026] [:error] [pid 35320:tid 35333] [client 74.248.148.69:16948] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aeaepIJW6fdXWO6agMGAXwAAAAM"]
[Tue Apr 21 05:46:12.787518 2026] [:error] [pid 4823:tid 4876] [client 74.248.148.69:16680] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeaepPc8mke3PfHqsxGK5AAAAZc"]
[Tue Apr 21 05:46:13.578046 2026] [:error] [pid 4823:tid 4868] [client 74.248.148.69:16778] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeaepfc8mke3PfHqsxGK5QAAAY8"]
[Tue Apr 21 05:46:14.532692 2026] [:error] [pid 4823:tid 4864] [client 74.248.148.69:16669] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeaepvc8mke3PfHqsxGK6AAAAYs"]
[Tue Apr 21 05:46:15.233139 2026] [:error] [pid 4823:tid 4854] [client 74.248.148.69:16679] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "aeaep_c8mke3PfHqsxGK6gAAAYE"]
[Tue Apr 21 05:46:15.775039 2026] [:error] [pid 35321:tid 35385] [client 74.248.148.69:16789] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeaepzeHLhVUuu8cVXxJ5wAAAEE"]
[Tue Apr 21 05:46:16.555716 2026] [:error] [pid 5377:tid 5407] [client 74.248.148.69:16722] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeaeqLBKychFlrHBdvsOtwAAAdU"]
[Tue Apr 21 05:46:17.240299 2026] [:error] [pid 35320:tid 35341] [client 74.248.148.69:16785] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeaeqYJW6fdXWO6agMGAYAAAAAs"]
[Tue Apr 21 05:46:17.944116 2026] [:error] [pid 4777:tid 4799] [client 74.248.148.69:16684] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aeaeqaxXur6bykKyLZQUPwAAAQs"]
[Tue Apr 21 05:46:18.572576 2026] [:error] [pid 35321:tid 35408] [client 74.248.148.69:16664] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeaeqjeHLhVUuu8cVXxJ6AAAAFg"]
[Tue Apr 21 05:46:19.205619 2026] [:error] [pid 35321:tid 35388] [client 74.248.148.69:16740] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeaeqzeHLhVUuu8cVXxJ6QAAAEQ"]
[Tue Apr 21 05:46:19.866346 2026] [:error] [pid 4822:tid 4834] [client 74.248.148.69:16691] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeaeqyAteFQFwS_23Jma1AAAAUg"]
[Tue Apr 21 05:46:20.500706 2026] [:error] [pid 35321:tid 35395] [client 74.248.148.69:16794] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccs.php"] [unique_id "aeaerDeHLhVUuu8cVXxJ6gAAAEs"]
[Tue Apr 21 05:46:21.047335 2026] [:error] [pid 35320:tid 35349] [client 74.248.148.69:16882] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeaerYJW6fdXWO6agMGAYQAAABM"]
[Tue Apr 21 05:46:21.723323 2026] [:error] [pid 35415:tid 35441] [client 74.248.148.69:16579] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeaerUiqDinI4_22zzj4wwAAAM4"]
[Tue Apr 21 05:46:22.380370 2026] [:error] [pid 35320:tid 35337] [client 74.248.148.69:16873] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeaeroJW6fdXWO6agMGAZAAAAAc"]
[Tue Apr 21 05:46:23.011756 2026] [:error] [pid 35320:tid 35334] [client 74.248.148.69:16827] [client 74.248.148.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/first.php"] [unique_id "aeaer4JW6fdXWO6agMGAZQAAAAQ"]
[Tue Apr 21 06:53:55.610482 2026] [:error] [pid 4822:tid 4828] [client 161.132.49.90:60814] [client 161.132.49.90] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 161.132.49.90, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeaugyAteFQFwS_23JmlNwAAAUI"]
[Tue Apr 21 06:53:55.614214 2026] [:error] [pid 4822:tid 4828] [client 161.132.49.90:60814] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 06:53:56.039490 2026] [:error] [pid 4823:tid 4860] [client 161.132.49.90:60816] [client 161.132.49.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.132.49.90, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeauhPc8mke3PfHqsxGi_gAAAYc"]
[Tue Apr 21 06:53:56.045150 2026] [:error] [pid 4823:tid 4860] [client 161.132.49.90:60816] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 06:54:00.046425 2026] [:error] [pid 5377:tid 5399] [client 44.201.112.191:40956] [client 44.201.112.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 44.201.112.191, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aeauiLBKychFlrHBdvsgDwAAAc0"]
[Tue Apr 21 06:54:00.052868 2026] [:error] [pid 5377:tid 5399] [client 44.201.112.191:40956] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 06:54:00.364732 2026] [:error] [pid 5377:tid 5388] [client 44.201.112.191:40970] [client 44.201.112.191] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 44.201.112.191, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeauiLBKychFlrHBdvsgEAAAAcI"]
[Tue Apr 21 06:54:00.368698 2026] [:error] [pid 5377:tid 5388] [client 44.201.112.191:40970] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 07:48:22.605851 2026] [:error] [pid 4822:tid 4845] [client 110.166.71.39:57537] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aea7RiAteFQFwS_23Jmv2gAAAVM"]
[Tue Apr 21 13:58:55.907269 2026] [:error] [pid 35415:tid 35438] [client 180.110.203.108:39202] [client 180.110.203.108] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aecSH0iqDinI4_22zzg2ZgAAAMs"]
[Tue Apr 21 14:24:54.777301 2026] [:error] [pid 5377:tid 5390] [client 54.193.20.53:56506] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aecYNrBKychFlrHBdvuw_AAAAcQ"]
[Tue Apr 21 14:24:55.610368 2026] [:error] [pid 4777:tid 4810] [client 54.193.20.53:56516] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aecYN6xXur6bykKyLZRqZwAAARY"]
[Tue Apr 21 14:24:56.277180 2026] [:error] [pid 4777:tid 4803] [client 54.193.20.53:56530] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "aecYOKxXur6bykKyLZRqbAAAAQ8"]
[Tue Apr 21 14:24:56.966416 2026] [:error] [pid 5377:tid 5403] [client 54.193.20.53:56544] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "aecYOLBKychFlrHBdvuxEgAAAdE"]
[Tue Apr 21 14:24:57.624954 2026] [:error] [pid 35320:tid 35338] [client 54.193.20.53:56556] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.staging"] [unique_id "aecYOYJW6fdXWO6agMH2hwAAAAg"]
[Tue Apr 21 14:24:58.292648 2026] [:error] [pid 4777:tid 4793] [client 54.193.20.53:56570] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "aecYOqxXur6bykKyLZRqeAAAAQU"]
[Tue Apr 21 14:24:58.953748 2026] [:error] [pid 4822:tid 4835] [client 54.193.20.53:56572] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.test"] [unique_id "aecYOiAteFQFwS_23JltEQAAAUk"]
[Tue Apr 21 14:24:59.608641 2026] [:error] [pid 35322:tid 35364] [client 54.193.20.53:56456] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.remote"] [unique_id "aecYO6PoAfV40BTfVKysAAAAAIc"]
[Tue Apr 21 14:25:00.270985 2026] [:error] [pid 35415:tid 35441] [client 54.193.20.53:56470] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "aecYPEiqDinI4_22zzg9XgAAAM4"]
[Tue Apr 21 14:25:00.930367 2026] [:error] [pid 35415:tid 35450] [client 54.193.20.53:56482] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "aecYPEiqDinI4_22zzg9XwAAANc"]
[Tue Apr 21 14:25:01.589607 2026] [:error] [pid 35321:tid 35396] [client 54.193.20.53:56490] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "aecYPTeHLhVUuu8cVXyE9QAAAEw"]
[Tue Apr 21 14:25:02.252939 2026] [:error] [pid 4822:tid 4833] [client 54.193.20.53:56504] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "aecYPiAteFQFwS_23JltGQAAAUc"]
[Tue Apr 21 14:25:02.915521 2026] [:error] [pid 4823:tid 4865] [client 54.193.20.53:56508] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "aecYPvc8mke3PfHqsxF24QAAAYw"]
[Tue Apr 21 14:25:03.574392 2026] [:error] [pid 4823:tid 4870] [client 54.193.20.53:56516] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "aecYP_c8mke3PfHqsxF25AAAAZE"]
[Tue Apr 21 14:25:04.225670 2026] [:error] [pid 35415:tid 35445] [client 54.193.20.53:56524] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.prod"] [unique_id "aecYQEiqDinI4_22zzg9YwAAANI"]
[Tue Apr 21 14:25:04.887715 2026] [:error] [pid 35321:tid 35404] [client 54.193.20.53:56530] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.stage"] [unique_id "aecYQDeHLhVUuu8cVXyE-wAAAFQ"]
[Tue Apr 21 14:25:05.554018 2026] [:error] [pid 35320:tid 35331] [client 54.193.20.53:56538] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.ci"] [unique_id "aecYQYJW6fdXWO6agMH2nwAAAAE"]
[Tue Apr 21 14:25:06.221010 2026] [:error] [pid 4823:tid 4869] [client 54.193.20.53:56548] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "aecYQvc8mke3PfHqsxF28QAAAZA"]
[Tue Apr 21 14:25:06.885692 2026] [:error] [pid 4822:tid 4835] [client 54.193.20.53:56554] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.live"] [unique_id "aecYQiAteFQFwS_23JltLgAAAUk"]
[Tue Apr 21 14:25:07.543093 2026] [:error] [pid 4822:tid 4836] [client 54.193.20.53:56560] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.preprod"] [unique_id "aecYQyAteFQFwS_23JltOAAAAUo"]
[Tue Apr 21 14:25:08.227806 2026] [:error] [pid 35415:tid 35449] [client 54.193.20.53:56570] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.uat"] [unique_id "aecYREiqDinI4_22zzg9ZgAAANY"]
[Tue Apr 21 14:25:08.887025 2026] [:error] [pid 4777:tid 4801] [client 54.193.20.53:56582] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dist"] [unique_id "aecYRKxXur6bykKyLZRqsgAAAQ0"]
[Tue Apr 21 14:25:09.552397 2026] [:error] [pid 35322:tid 35363] [client 54.193.20.53:40984] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.swp"] [unique_id "aecYRaPoAfV40BTfVKysIQAAAIY"]
[Tue Apr 21 14:25:10.210116 2026] [:error] [pid 4822:tid 4842] [client 54.193.20.53:40988] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env~"] [unique_id "aecYRiAteFQFwS_23JltPwAAAVA"]
[Tue Apr 21 14:25:10.872662 2026] [:error] [pid 35320:tid 35344] [client 54.193.20.53:40990] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "aecYRoJW6fdXWO6agMH2ogAAAA4"]
[Tue Apr 21 14:25:11.535380 2026] [:error] [pid 4777:tid 4790] [client 54.193.20.53:40994] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/apps/.env"] [unique_id "aecYR6xXur6bykKyLZRqxAAAAQI"]
[Tue Apr 21 14:25:12.197095 2026] [:error] [pid 35321:tid 35394] [client 54.193.20.53:41010] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "aecYSDeHLhVUuu8cVXyFCQAAAEo"]
[Tue Apr 21 14:25:12.856637 2026] [:error] [pid 35320:tid 35343] [client 54.193.20.53:41020] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/web/.env"] [unique_id "aecYSIJW6fdXWO6agMH2pwAAAA0"]
[Tue Apr 21 14:25:13.514696 2026] [:error] [pid 35321:tid 35390] [client 54.193.20.53:41022] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/site/.env"] [unique_id "aecYSTeHLhVUuu8cVXyFDAAAAEY"]
[Tue Apr 21 14:25:14.167445 2026] [:error] [pid 35321:tid 35407] [client 54.193.20.53:41024] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.env"] [unique_id "aecYSjeHLhVUuu8cVXyFDgAAAFc"]
[Tue Apr 21 14:25:14.828004 2026] [:error] [pid 35321:tid 35406] [client 54.193.20.53:41032] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "aecYSjeHLhVUuu8cVXyFDwAAAFY"]
[Tue Apr 21 14:25:15.486953 2026] [:error] [pid 5377:tid 5403] [client 54.193.20.53:41048] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "aecYS7BKychFlrHBdvuxdAAAAdE"]
[Tue Apr 21 14:25:16.146840 2026] [:error] [pid 35415:tid 35447] [client 54.193.20.53:41056] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/server/.env"] [unique_id "aecYTEiqDinI4_22zzg9gAAAANQ"]
[Tue Apr 21 14:25:16.799525 2026] [:error] [pid 35322:tid 35374] [client 54.193.20.53:41068] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/frontend/.env"] [unique_id "aecYTKPoAfV40BTfVKysJwAAAJE"]
[Tue Apr 21 14:25:17.460967 2026] [:error] [pid 5377:tid 5391] [client 54.193.20.53:41082] [client 54.193.20.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/src/.env"] [unique_id "aecYTbBKychFlrHBdvuxdwAAAcU"]
[Tue Apr 21 14:51:16.456080 2026] [:error] [pid 5377:tid 5392] [client 49.51.36.179:37194] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeceZLBKychFlrHBdvvBuwAAAcY"]
[Tue Apr 21 15:14:23.579997 2026] [:error] [pid 4822:tid 4844] [client 54.83.115.19:54906] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aecjzyAteFQFwS_23JmkdwAAAVI"]
[Tue Apr 21 15:14:24.649442 2026] [:error] [pid 35320:tid 35336] [client 54.83.115.19:36066] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "aecj0IJW6fdXWO6agMEK9wAAAAY"]
[Tue Apr 21 15:14:25.490335 2026] [:error] [pid 35322:tid 35377] [client 54.83.115.19:36072] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "aecj0aPoAfV40BTfVKy0gAAAAJQ"]
[Tue Apr 21 15:14:26.330050 2026] [:error] [pid 4822:tid 4838] [client 54.83.115.19:36082] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "aecj0iAteFQFwS_23JmkiwAAAUw"]
[Tue Apr 21 15:14:27.176714 2026] [:error] [pid 4777:tid 4804] [client 54.83.115.19:36084] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.staging"] [unique_id "aecj06xXur6bykKyLZR4YAAAARA"]
[Tue Apr 21 15:14:28.019086 2026] [:error] [pid 4823:tid 4853] [client 54.83.115.19:36086] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "aecj1Pc8mke3PfHqsxGdrAAAAYA"]
[Tue Apr 21 15:14:28.859882 2026] [:error] [pid 4823:tid 4856] [client 54.83.115.19:36092] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.test"] [unique_id "aecj1Pc8mke3PfHqsxGdswAAAYM"]
[Tue Apr 21 15:14:29.703550 2026] [:error] [pid 35415:tid 35451] [client 54.83.115.19:36102] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.remote"] [unique_id "aecj1UiqDinI4_22zzhJdwAAANg"]
[Tue Apr 21 15:14:30.643852 2026] [:error] [pid 4822:tid 4850] [client 54.83.115.19:36106] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "aecj1iAteFQFwS_23JmklgAAAVg"]
[Tue Apr 21 15:14:31.488920 2026] [:error] [pid 4822:tid 4839] [client 54.83.115.19:36122] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.backup"] [unique_id "aecj1yAteFQFwS_23JmkmQAAAU0"]
[Tue Apr 21 15:14:32.328698 2026] [:error] [pid 4822:tid 4826] [client 54.83.115.19:36130] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.save"] [unique_id "aecj2CAteFQFwS_23JmknAAAAUA"]
[Tue Apr 21 15:14:33.168921 2026] [:error] [pid 35322:tid 35378] [client 54.83.115.19:36134] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.old"] [unique_id "aecj2aPoAfV40BTfVKy0hQAAAJU"]
[Tue Apr 21 15:14:34.016932 2026] [:error] [pid 5377:tid 5402] [client 54.83.115.19:52040] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.sample"] [unique_id "aecj2rBKychFlrHBdvvOhwAAAdA"]
[Tue Apr 21 15:14:34.861429 2026] [:error] [pid 4823:tid 4867] [client 54.83.115.19:52048] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.example"] [unique_id "aecj2vc8mke3PfHqsxGdwQAAAY4"]
[Tue Apr 21 15:14:35.783977 2026] [:error] [pid 4822:tid 4838] [client 54.83.115.19:52056] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dev"] [unique_id "aecj2yAteFQFwS_23JmksAAAAUw"]
[Tue Apr 21 15:14:36.625802 2026] [:error] [pid 4822:tid 4844] [client 54.83.115.19:52062] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.prod"] [unique_id "aecj3CAteFQFwS_23JmktQAAAVI"]
[Tue Apr 21 15:14:37.473550 2026] [:error] [pid 4822:tid 4831] [client 54.83.115.19:52070] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.stage"] [unique_id "aecj3SAteFQFwS_23JmkwQAAAUU"]
[Tue Apr 21 15:14:38.320350 2026] [:error] [pid 5377:tid 5394] [client 54.83.115.19:52078] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.ci"] [unique_id "aecj3rBKychFlrHBdvvOlgAAAcg"]
[Tue Apr 21 15:14:39.170346 2026] [:error] [pid 4777:tid 4803] [client 54.83.115.19:52094] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.docker"] [unique_id "aecj36xXur6bykKyLZR4aAAAAQ8"]
[Tue Apr 21 15:14:40.043571 2026] [:error] [pid 4823:tid 4856] [client 54.83.115.19:52096] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.live"] [unique_id "aecj4Pc8mke3PfHqsxGdzwAAAYM"]
[Tue Apr 21 15:14:40.899101 2026] [:error] [pid 4823:tid 4854] [client 54.83.115.19:52104] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.preprod"] [unique_id "aecj4Pc8mke3PfHqsxGd0gAAAYE"]
[Tue Apr 21 15:14:41.749698 2026] [:error] [pid 4822:tid 4842] [client 54.83.115.19:52108] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.uat"] [unique_id "aecj4SAteFQFwS_23JmkzAAAAVA"]
[Tue Apr 21 15:14:42.610131 2026] [:error] [pid 4822:tid 4845] [client 54.83.115.19:52114] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dist"] [unique_id "aecj4iAteFQFwS_23Jmk1QAAAVM"]
[Tue Apr 21 15:14:43.451791 2026] [:error] [pid 35321:tid 35401] [client 54.83.115.19:52116] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.swp"] [unique_id "aecj4zeHLhVUuu8cVXyN1wAAAFE"]
[Tue Apr 21 15:14:44.298578 2026] [:error] [pid 4823:tid 4877] [client 54.83.115.19:53164] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env~"] [unique_id "aecj5Pc8mke3PfHqsxGd3gAAAZg"]
[Tue Apr 21 15:14:45.145782 2026] [:error] [pid 4822:tid 4830] [client 54.83.115.19:53166] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/app/.env"] [unique_id "aecj5SAteFQFwS_23Jmk3QAAAUQ"]
[Tue Apr 21 15:14:45.986756 2026] [:error] [pid 4822:tid 4827] [client 54.83.115.19:53182] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/apps/.env"] [unique_id "aecj5SAteFQFwS_23Jmk3gAAAUE"]
[Tue Apr 21 15:14:46.832873 2026] [:error] [pid 5377:tid 5405] [client 54.83.115.19:53194] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/api/.env"] [unique_id "aecj5rBKychFlrHBdvvOxgAAAdM"]
[Tue Apr 21 15:14:47.680175 2026] [:error] [pid 5377:tid 5397] [client 54.83.115.19:53202] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/web/.env"] [unique_id "aecj57BKychFlrHBdvvOzgAAAcs"]
[Tue Apr 21 15:14:48.532860 2026] [:error] [pid 4822:tid 4830] [client 54.83.115.19:53204] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/site/.env"] [unique_id "aecj6CAteFQFwS_23Jmk5wAAAUQ"]
[Tue Apr 21 15:14:49.382704 2026] [:error] [pid 4822:tid 4826] [client 54.83.115.19:53212] [client 54.83.115.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/public/.env"] [unique_id "aecj6SAteFQFwS_23Jmk7QAAAUA"]
[Tue Apr 21 15:35:44.126558 2026] [:error] [pid 4777:tid 4807] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 21 15:35:44.403582 2026] [:error] [pid 4777:tid 4811] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Apr 21 15:35:44.712142 2026] [:error] [pid 4777:tid 4789] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 21 15:35:44.993287 2026] [:error] [pid 4777:tid 4805] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Apr 21 15:35:45.300416 2026] [:error] [pid 4777:tid 4791] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Tue Apr 21 15:35:45.586556 2026] [:error] [pid 4777:tid 4799] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Apr 21 15:35:45.869126 2026] [:error] [pid 4777:tid 4808] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 21 15:35:46.168706 2026] [:error] [pid 4777:tid 4795] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 21 15:35:46.448447 2026] [:error] [pid 4777:tid 4797] [client 45.86.200.216:47295] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Apr 21 15:35:46.733177 2026] [:error] [pid 4777:tid 4791] [client 45.86.200.216:47295] [client 45.86.200.216] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aeco0qxXur6bykKyLZSElAAAAQM"]
[Tue Apr 21 15:35:48.360972 2026] [:error] [pid 5377:tid 5387] [client 45.86.200.215:35499] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 21 15:35:48.632142 2026] [:error] [pid 5377:tid 5401] [client 45.86.200.215:35499] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "aeco1LBKychFlrHBdvvirwAAAc8"]
[Tue Apr 21 15:35:49.236685 2026] [:error] [pid 53731:tid 53741] [client 185.82.72.206:40369] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Tue Apr 21 15:35:49.510390 2026] [:error] [pid 53731:tid 53753] [client 185.82.72.206:40369] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Apr 21 15:35:49.786700 2026] [:error] [pid 53731:tid 53746] [client 185.82.72.206:40369] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Apr 21 15:35:50.066624 2026] [:error] [pid 53731:tid 53756] [client 185.82.72.206:40369] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 21 15:35:50.367527 2026] [:error] [pid 53731:tid 53739] [client 185.82.72.206:40369] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Apr 21 15:35:50.660760 2026] [:error] [pid 53731:tid 53749] [client 185.82.72.206:40369] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aeco1l2I9THUR-bRVGzYhAAAAg4"]
[Tue Apr 21 15:35:51.215274 2026] [:error] [pid 35321:tid 35386] [client 45.86.200.245:46233] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Apr 21 15:35:51.529346 2026] [:error] [pid 35321:tid 35397] [client 45.86.200.245:46233] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Apr 21 15:35:51.796147 2026] [:error] [pid 35321:tid 35399] [client 45.86.200.245:46233] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Apr 21 15:35:52.068109 2026] [:error] [pid 35321:tid 35384] [client 45.86.200.245:46233] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Apr 21 15:35:52.344325 2026] [:error] [pid 35321:tid 35388] [client 45.86.200.245:46233] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Apr 21 15:35:52.665295 2026] [:error] [pid 35321:tid 35387] [client 45.86.200.245:46233] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 21 15:35:52.940549 2026] [:error] [pid 35321:tid 35394] [client 45.86.200.245:46233] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Tue Apr 21 15:35:53.213310 2026] [:error] [pid 35321:tid 35399] [client 45.86.200.245:46233] [client 45.86.200.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeco2TeHLhVUuu8cVXyjCAAAAE8"]
[Tue Apr 21 15:35:54.827110 2026] [:error] [pid 35321:tid 35403] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Apr 21 15:35:55.098579 2026] [:error] [pid 35321:tid 35392] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Apr 21 15:35:55.380672 2026] [:error] [pid 35321:tid 35403] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 21 15:35:55.659610 2026] [:error] [pid 35321:tid 35394] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Tue Apr 21 15:35:55.931006 2026] [:error] [pid 35321:tid 35386] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Tue Apr 21 15:35:56.202344 2026] [:error] [pid 35321:tid 35391] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Apr 21 15:35:56.484129 2026] [:error] [pid 35321:tid 35397] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Apr 21 15:35:56.768274 2026] [:error] [pid 35321:tid 35387] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Tue Apr 21 15:35:57.054834 2026] [:error] [pid 35321:tid 35388] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Tue Apr 21 15:35:57.344494 2026] [:error] [pid 35321:tid 35392] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue Apr 21 15:35:57.629287 2026] [:error] [pid 35321:tid 35394] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue Apr 21 15:35:57.910785 2026] [:error] [pid 35321:tid 35392] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php
[Tue Apr 21 15:36:16.343486 2026] [:error] [pid 35321:tid 35392] [client 45.86.200.246:52499] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Tue Apr 21 16:34:45.518490 2026] [:error] [pid 54080:tid 54102] [client 49.36.67.17:54491] [client 49.36.67.17] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.67.17, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aec2pYzEbQHHxtmWbaZ0-AAAAtQ"]
[Tue Apr 21 16:34:45.524853 2026] [:error] [pid 54080:tid 54102] [client 49.36.67.17:54491] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 17:28:57.034515 2026] [:error] [pid 53731:tid 53748] [client 170.64.234.177:57281] [client 170.64.234.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.234.177, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aedDWV2I9THUR-bRVGwQ2wAAAg0"]
[Tue Apr 21 17:28:57.038393 2026] [:error] [pid 53731:tid 53748] [client 170.64.234.177:57281] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 17:36:14.363583 2026] [:error] [pid 53731:tid 53758] [client 43.135.36.201:53350] [client 43.135.36.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aedFDl2I9THUR-bRVGwXygAAAhY"]
[Tue Apr 21 17:42:20.547872 2026] [:error] [pid 35321:tid 35387] [client 34.187.251.172:58770] [client 34.187.251.172] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.187.251.172, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aedGfDeHLhVUuu8cVXwDgwAAAEM"]
[Tue Apr 21 17:42:20.553550 2026] [:error] [pid 35321:tid 35387] [client 34.187.251.172:58770] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 17:42:22.519305 2026] [:error] [pid 35321:tid 35394] [client 34.187.251.172:58770] [client 34.187.251.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aedGfjeHLhVUuu8cVXwDlwAAAEo"]
[Tue Apr 21 17:42:22.895629 2026] [:error] [pid 35320:tid 35331] [client 34.187.251.172:54263] [client 34.187.251.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aedGfoJW6fdXWO6agMFbUwAAAAE"]
[Tue Apr 21 17:42:23.264745 2026] [:error] [pid 35321:tid 35386] [client 34.187.251.172:54119] [client 34.187.251.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aedGfzeHLhVUuu8cVXwDmgAAAEI"]
[Tue Apr 21 17:42:23.614785 2026] [:error] [pid 53832:tid 53838] [client 34.187.251.172:56631] [client 34.187.251.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aedGf9zkuxsE_OhM9UJKlgAAAkM"]
[Tue Apr 21 17:42:24.022028 2026] [:error] [pid 35321:tid 35388] [client 34.187.251.172:51382] [client 34.187.251.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aedGgDeHLhVUuu8cVXwDngAAAEQ"]
[Tue Apr 21 17:42:24.368570 2026] [:error] [pid 35320:tid 35350] [client 34.187.251.172:52308] [client 34.187.251.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aedGgIJW6fdXWO6agMFbWgAAABQ"]
[Tue Apr 21 17:42:24.780844 2026] [:error] [pid 53832:tid 53839] [client 34.187.251.172:60343] [client 34.187.251.172] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aedGgNzkuxsE_OhM9UJKmgAAAkQ"]
[Tue Apr 21 19:15:49.128462 2026] [:error] [pid 35320:tid 35342] [client 134.199.213.232:58381] [client 134.199.213.232] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 134.199.213.232, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aedcZYJW6fdXWO6agMGOrwAAAAw"]
[Tue Apr 21 19:15:49.131800 2026] [:error] [pid 35320:tid 35342] [client 134.199.213.232:58381] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 20:48:17.114360 2026] [:error] [pid 54080:tid 54088] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Tue Apr 21 20:48:17.375654 2026] [:error] [pid 54080:tid 54105] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue Apr 21 20:48:17.642508 2026] [:error] [pid 54080:tid 54097] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Tue Apr 21 20:48:17.903579 2026] [:error] [pid 54080:tid 54092] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Tue Apr 21 20:48:18.165698 2026] [:error] [pid 54080:tid 54083] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Tue Apr 21 20:48:18.428270 2026] [:error] [pid 54080:tid 54106] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Tue Apr 21 20:48:18.953439 2026] [:error] [pid 54080:tid 54095] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Apr 21 20:48:19.214623 2026] [:error] [pid 54080:tid 54096] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Tue Apr 21 20:48:19.479747 2026] [:error] [pid 54080:tid 54088] [client 20.216.164.137:50205] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Tue Apr 21 20:48:19.767785 2026] [:error] [pid 54080:tid 54090] [client 20.216.164.137:50205] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aedyE4zEbQHHxtmWbaa3QQAAAsg"]
[Tue Apr 21 20:48:20.957627 2026] [:error] [pid 35321:tid 35405] [client 20.216.164.137:18908] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aedyFDeHLhVUuu8cVXyZswAAAFU"]
[Tue Apr 21 20:48:22.149407 2026] [:error] [pid 35321:tid 35403] [client 20.216.164.137:35171] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aedyFjeHLhVUuu8cVXyZuAAAAFM"]
[Tue Apr 21 20:48:23.809179 2026] [:error] [pid 53731:tid 53755] [client 20.216.164.137:24490] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "aedyF12I9THUR-bRVGxjdwAAAhM"]
[Tue Apr 21 20:48:25.107800 2026] [:error] [pid 53731:tid 53750] [client 20.216.164.137:38964] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aedyGV2I9THUR-bRVGxjewAAAg8"]
[Tue Apr 21 20:48:26.424011 2026] [:error] [pid 35320:tid 35344] [client 20.216.164.137:4148] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aedyGoJW6fdXWO6agMG9KAAAAA4"]
[Tue Apr 21 20:48:28.277494 2026] [:error] [pid 35321:tid 35388] [client 20.216.164.137:38969] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aedyHDeHLhVUuu8cVXyZyAAAAEQ"]
[Tue Apr 21 20:48:29.800873 2026] [:error] [pid 35321:tid 35385] [client 20.216.164.137:4158] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aedyHTeHLhVUuu8cVXyZ0QAAAEE"]
[Tue Apr 21 20:48:30.696952 2026] [:error] [pid 35320:tid 35351] [client 20.216.164.137:19365] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aedyHoJW6fdXWO6agMG9MQAAABU"]
[Tue Apr 21 20:48:32.394403 2026] [:error] [pid 35321:tid 35407] [client 20.216.164.137:19375] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aedyIDeHLhVUuu8cVXyZ2AAAAFc"]
[Tue Apr 21 20:48:33.965655 2026] [:error] [pid 35321:tid 35401] [client 20.216.164.137:35981] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aedyITeHLhVUuu8cVXyZ3gAAAFE"]
[Tue Apr 21 20:48:35.185514 2026] [:error] [pid 53832:tid 53835] [client 20.216.164.137:23116] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "aedyI9zkuxsE_OhM9UJqfQAAAkA"]
[Tue Apr 21 20:48:36.595325 2026] [:error] [pid 35320:tid 35331] [client 20.216.164.137:39741] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aedyJIJW6fdXWO6agMG9NwAAAAE"]
[Tue Apr 21 20:48:38.761992 2026] [:error] [pid 35320:tid 35333] [client 20.216.164.137:19364] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aedyJoJW6fdXWO6agMG9PQAAAAM"]
[Tue Apr 21 20:48:40.661638 2026] [:error] [pid 35321:tid 35392] [client 20.216.164.137:23133] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aedyKDeHLhVUuu8cVXyZ9wAAAEg"]
[Tue Apr 21 20:48:43.169487 2026] [:error] [pid 35320:tid 35334] [client 20.216.164.137:24480] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aedyK4JW6fdXWO6agMG9UAAAAAQ"]
[Tue Apr 21 20:48:46.496994 2026] [:error] [pid 53731:tid 53753] [client 20.216.164.137:18895] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aedyLl2I9THUR-bRVGxjigAAAhE"]
[Tue Apr 21 20:48:48.047972 2026] [:error] [pid 53731:tid 53739] [client 20.216.164.137:4828] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aedyMF2I9THUR-bRVGxjkgAAAgQ"]
[Tue Apr 21 20:48:49.369923 2026] [:error] [pid 53978:tid 53989] [client 20.216.164.137:43666] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aedyMZ1ivsR4hcOSQbYfYwAAAok"]
[Tue Apr 21 20:48:50.294428 2026] [:error] [pid 53978:tid 53993] [client 20.216.164.137:20328] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "aedyMp1ivsR4hcOSQbYfZwAAAo0"]
[Tue Apr 21 20:48:53.179359 2026] [:error] [pid 53731:tid 53735] [client 20.216.164.137:50296] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aedyNV2I9THUR-bRVGxjpgAAAgA"]
[Tue Apr 21 20:48:54.964327 2026] [:error] [pid 35321:tid 35407] [client 20.216.164.137:4819] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aedyNjeHLhVUuu8cVXyaDAAAAFc"]
[Tue Apr 21 20:48:56.990060 2026] [:error] [pid 35321:tid 35408] [client 20.216.164.137:26867] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aedyODeHLhVUuu8cVXyaEwAAAFg"]
[Tue Apr 21 20:48:57.952329 2026] [:error] [pid 53731:tid 53736] [client 20.216.164.137:24475] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "aedyOV2I9THUR-bRVGxjqwAAAgE"]
[Tue Apr 21 20:48:59.491058 2026] [:error] [pid 35321:tid 35397] [client 20.216.164.137:35969] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aedyOzeHLhVUuu8cVXyaHQAAAE0"]
[Tue Apr 21 20:49:00.391469 2026] [:error] [pid 35320:tid 35330] [client 20.216.164.137:26324] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aedyPIJW6fdXWO6agMG9ZgAAAAA"]
[Tue Apr 21 20:49:01.819961 2026] [:error] [pid 35320:tid 35335] [client 20.216.164.137:19816] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aedyPYJW6fdXWO6agMG9bgAAAAU"]
[Tue Apr 21 20:49:04.638733 2026] [:error] [pid 53832:tid 53852] [client 20.216.164.137:26360] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "aedyQNzkuxsE_OhM9UJqhQAAAlE"]
[Tue Apr 21 20:49:06.344939 2026] [:error] [pid 35321:tid 35384] [client 20.216.164.137:27088] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aedyQjeHLhVUuu8cVXyaSgAAAEA"]
[Tue Apr 21 20:49:07.591431 2026] [:error] [pid 53731:tid 53747] [client 20.216.164.137:50295] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aedyQ12I9THUR-bRVGxjvgAAAgw"]
[Tue Apr 21 20:49:09.299680 2026] [:error] [pid 35321:tid 35384] [client 20.216.164.137:24474] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aedyRTeHLhVUuu8cVXyaVwAAAEA"]
[Tue Apr 21 20:49:10.685799 2026] [:error] [pid 35320:tid 35352] [client 20.216.164.137:19095] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aedyRoJW6fdXWO6agMG9ewAAABY"]
[Tue Apr 21 20:49:12.545405 2026] [:error] [pid 35320:tid 35330] [client 20.216.164.137:19785] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aedySIJW6fdXWO6agMG9hQAAAAA"]
[Tue Apr 21 20:49:14.135279 2026] [:error] [pid 35321:tid 35390] [client 20.216.164.137:50249] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aedySjeHLhVUuu8cVXyaawAAAEY"]
[Tue Apr 21 20:49:15.661461 2026] [:error] [pid 53978:tid 53981] [client 20.216.164.137:19793] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aedyS51ivsR4hcOSQbYfewAAAoE"]
[Tue Apr 21 20:49:18.614182 2026] [:error] [pid 35321:tid 35404] [client 20.216.164.137:4859] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "aedyTjeHLhVUuu8cVXyagQAAAFQ"]
[Tue Apr 21 20:49:20.727473 2026] [:error] [pid 35321:tid 35401] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Tue Apr 21 20:49:20.967554 2026] [:error] [pid 35321:tid 35393] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Tue Apr 21 20:49:21.869689 2026] [:error] [pid 35321:tid 35393] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Tue Apr 21 20:49:22.111251 2026] [:error] [pid 35321:tid 35397] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 21 20:49:22.354803 2026] [:error] [pid 35321:tid 35389] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Tue Apr 21 20:49:22.643935 2026] [:error] [pid 35321:tid 35388] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Tue Apr 21 20:49:22.884659 2026] [:error] [pid 35321:tid 35406] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Tue Apr 21 20:49:23.371719 2026] [:error] [pid 35321:tid 35401] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Tue Apr 21 20:49:23.624606 2026] [:error] [pid 35321:tid 35385] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Tue Apr 21 20:49:23.864035 2026] [:error] [pid 35321:tid 35404] [client 20.216.164.137:36093] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue Apr 21 20:49:24.295320 2026] [:error] [pid 35321:tid 35404] [client 20.216.164.137:36093] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aedyVDeHLhVUuu8cVXyapAAAAFQ"]
[Tue Apr 21 20:49:25.592439 2026] [:error] [pid 35321:tid 35392] [client 20.216.164.137:28063] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aedyVTeHLhVUuu8cVXyaqgAAAEg"]
[Tue Apr 21 20:49:26.766841 2026] [:error] [pid 53731:tid 53735] [client 20.216.164.137:22713] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aedyVl2I9THUR-bRVGxj1gAAAgA"]
[Tue Apr 21 20:49:28.006373 2026] [:error] [pid 35321:tid 35408] [client 20.216.164.137:21777] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aedyWDeHLhVUuu8cVXyatAAAAFg"]
[Tue Apr 21 20:49:29.335880 2026] [:error] [pid 53978:tid 53997] [client 20.216.164.137:27131] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aedyWZ1ivsR4hcOSQbYfgwAAApE"]
[Tue Apr 21 20:49:30.370640 2026] [:error] [pid 53832:tid 53845] [client 20.216.164.137:18330] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aedyWtzkuxsE_OhM9UJqigAAAko"]
[Tue Apr 21 20:49:31.701975 2026] [:error] [pid 35321:tid 35402] [client 20.216.164.137:18838] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aedyWzeHLhVUuu8cVXyaxgAAAFI"]
[Tue Apr 21 20:49:34.235938 2026] [:error] [pid 35321:tid 35407] [client 20.216.164.137:18254] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "aedyXjeHLhVUuu8cVXya0gAAAFc"]
[Tue Apr 21 20:49:36.902261 2026] [:error] [pid 35415:tid 35445] [client 20.216.164.137:20791] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aedyYEiqDinI4_22zzh0IgAAANI"]
[Tue Apr 21 20:49:38.760356 2026] [:error] [pid 35320:tid 35340] [client 20.216.164.137:4951] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aedyYoJW6fdXWO6agMG9ygAAAAo"]
[Tue Apr 21 20:49:40.604406 2026] [:error] [pid 53978:tid 53990] [client 20.216.164.137:18649] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aedyZJ1ivsR4hcOSQbYfjAAAAoo"]
[Tue Apr 21 20:49:42.113586 2026] [:error] [pid 35320:tid 35345] [client 20.216.164.137:18248] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aedyZoJW6fdXWO6agMG92wAAAA8"]
[Tue Apr 21 20:49:43.935117 2026] [:error] [pid 35320:tid 35338] [client 20.216.164.137:4943] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aedyZ4JW6fdXWO6agMG95wAAAAg"]
[Tue Apr 21 20:49:44.852174 2026] [:error] [pid 53731:tid 53759] [client 20.216.164.137:22157] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aedyaF2I9THUR-bRVGxj6gAAAhc"]
[Tue Apr 21 20:49:45.964565 2026] [:error] [pid 53978:tid 54003] [client 20.216.164.137:25550] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aedyaZ1ivsR4hcOSQbYflAAAApc"]
[Tue Apr 21 20:49:47.852222 2026] [:error] [pid 54080:tid 54102] [client 20.216.164.137:50846] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "aedya4zEbQHHxtmWbaa3mQAAAtQ"]
[Tue Apr 21 20:49:49.949509 2026] [:error] [pid 35321:tid 35384] [client 20.216.164.137:22149] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aedybTeHLhVUuu8cVXybAAAAAEA"]
[Tue Apr 21 20:49:53.490660 2026] [:error] [pid 53978:tid 53983] [client 20.216.164.137:30122] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aedycZ1ivsR4hcOSQbYfmgAAAoM"]
[Tue Apr 21 20:49:55.216974 2026] [:error] [pid 35320:tid 35341] [client 20.216.164.137:50874] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aedyc4JW6fdXWO6agMG-DgAAAAs"]
[Tue Apr 21 20:49:56.367446 2026] [:error] [pid 35320:tid 35333] [client 20.216.164.137:35500] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "aedydIJW6fdXWO6agMG-EwAAAAM"]
[Tue Apr 21 20:49:58.667151 2026] [:error] [pid 53731:tid 53754] [client 20.216.164.137:18252] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aedydl2I9THUR-bRVGxj8QAAAhI"]
[Tue Apr 21 20:50:00.857540 2026] [:error] [pid 35321:tid 35390] [client 20.216.164.137:36594] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aedyeDeHLhVUuu8cVXybKgAAAEY"]
[Tue Apr 21 20:50:02.117765 2026] [:error] [pid 53978:tid 53995] [client 20.216.164.137:20747] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aedyep1ivsR4hcOSQbYfowAAAo8"]
[Tue Apr 21 20:50:03.014216 2026] [:error] [pid 35321:tid 35392] [client 20.216.164.137:28651] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aedyezeHLhVUuu8cVXybMwAAAEg"]
[Tue Apr 21 20:50:03.710793 2026] [:error] [pid 35321:tid 35402] [client 20.216.164.137:22155] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aedyezeHLhVUuu8cVXybPQAAAFI"]
[Tue Apr 21 20:50:05.060741 2026] [:error] [pid 35320:tid 35352] [client 20.216.164.137:44319] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aedyfYJW6fdXWO6agMG-FwAAABY"]
[Tue Apr 21 20:50:06.651583 2026] [:error] [pid 53978:tid 53982] [client 20.216.164.137:18684] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aedyfp1ivsR4hcOSQbYfpgAAAoI"]
[Tue Apr 21 20:50:09.706413 2026] [:error] [pid 53978:tid 54000] [client 20.216.164.137:32037] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aedygZ1ivsR4hcOSQbYfrAAAApQ"]
[Tue Apr 21 20:50:10.573133 2026] [:error] [pid 53731:tid 53735] [client 20.216.164.137:50828] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aedygl2I9THUR-bRVGxj9AAAAgA"]
[Tue Apr 21 20:50:11.309190 2026] [:error] [pid 35320:tid 35330] [client 20.216.164.137:36603] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aedyg4JW6fdXWO6agMG-GQAAAAA"]
[Tue Apr 21 20:50:15.753126 2026] [:error] [pid 54080:tid 54106] [client 20.216.164.137:4939] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aedyh4zEbQHHxtmWbaa3qAAAAtg"]
[Tue Apr 21 20:50:17.922672 2026] [:error] [pid 54080:tid 54083] [client 20.216.164.137:28632] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "aedyiYzEbQHHxtmWbaa3qwAAAsE"]
[Tue Apr 21 20:50:20.327181 2026] [:error] [pid 54080:tid 54090] [client 20.216.164.137:30116] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aedyjIzEbQHHxtmWbaa3rQAAAsg"]
[Tue Apr 21 20:50:22.179327 2026] [:error] [pid 35320:tid 35344] [client 20.216.164.137:28655] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "aedyjoJW6fdXWO6agMG-RgAAAA4"]
[Tue Apr 21 20:50:22.705969 2026] [:error] [pid 35415:tid 35438] [client 35.188.155.130:64998] [client 35.188.155.130] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.188.155.130, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aedyjkiqDinI4_22zzh0LwAAAMs"]
[Tue Apr 21 20:50:22.710878 2026] [:error] [pid 35415:tid 35438] [client 35.188.155.130:64998] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 20:50:23.317284 2026] [:error] [pid 35321:tid 35393] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Apr 21 20:50:23.559256 2026] [:error] [pid 35321:tid 35406] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Tue Apr 21 20:50:23.797047 2026] [:error] [pid 35321:tid 35387] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Apr 21 20:50:24.045387 2026] [:error] [pid 35321:tid 35397] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Tue Apr 21 20:50:24.284037 2026] [:error] [pid 35321:tid 35391] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Tue Apr 21 20:50:24.630316 2026] [:error] [pid 35321:tid 35384] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Apr 21 20:50:24.876092 2026] [:error] [pid 35321:tid 35388] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Tue Apr 21 20:50:25.114598 2026] [:error] [pid 35321:tid 35399] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Tue Apr 21 20:50:25.373183 2026] [:error] [pid 35321:tid 35402] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Tue Apr 21 20:50:25.694041 2026] [:error] [pid 35415:tid 35434] [client 35.188.155.130:64998] [client 35.188.155.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aedykUiqDinI4_22zzh0OgAAAMc"]
[Tue Apr 21 20:50:25.850866 2026] [:error] [pid 35321:tid 35396] [client 20.216.164.137:25143] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Tue Apr 21 20:50:26.091244 2026] [:error] [pid 35321:tid 35390] [client 20.216.164.137:25143] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aedykjeHLhVUuu8cVXybggAAAEY"]
[Tue Apr 21 20:50:26.420334 2026] [:error] [pid 35321:tid 35386] [client 35.188.155.130:63213] [client 35.188.155.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aedykjeHLhVUuu8cVXybhQAAAEI"]
[Tue Apr 21 20:50:27.241869 2026] [:error] [pid 35321:tid 35400] [client 35.188.155.130:60849] [client 35.188.155.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aedykzeHLhVUuu8cVXybiQAAAFA"]
[Tue Apr 21 20:50:27.714099 2026] [:error] [pid 53731:tid 53753] [client 20.216.164.137:38656] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aedyk12I9THUR-bRVGxj-gAAAhE"]
[Tue Apr 21 20:50:28.422000 2026] [:error] [pid 35320:tid 35353] [client 35.188.155.130:56820] [client 35.188.155.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aedylIJW6fdXWO6agMG-dAAAABc"]
[Tue Apr 21 20:50:29.620890 2026] [:error] [pid 35322:tid 35370] [client 20.216.164.137:28620] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aedylaPoAfV40BTfVKzcDgAAAI0"]
[Tue Apr 21 20:50:30.044500 2026] [:error] [pid 35320:tid 35344] [client 35.188.155.130:59472] [client 35.188.155.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aedyloJW6fdXWO6agMG-eQAAAA4"]
[Tue Apr 21 20:50:31.598539 2026] [:error] [pid 35320:tid 35340] [client 35.188.155.130:60732] [client 35.188.155.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aedyl4JW6fdXWO6agMG-fwAAAAo"]
[Tue Apr 21 20:50:31.871625 2026] [:error] [pid 35320:tid 35339] [client 20.216.164.137:20758] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "aedyl4JW6fdXWO6agMG-gAAAAAk"]
[Tue Apr 21 20:50:32.375225 2026] [:error] [pid 35320:tid 35346] [client 35.188.155.130:55665] [client 35.188.155.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aedymIJW6fdXWO6agMG-ggAAABA"]
[Tue Apr 21 20:50:39.102062 2026] [:error] [pid 53731:tid 53748] [client 20.216.164.137:40307] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aedyn12I9THUR-bRVGxkDQAAAg0"]
[Tue Apr 21 20:50:44.191533 2026] [:error] [pid 35320:tid 35334] [client 20.216.164.137:19997] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aedypIJW6fdXWO6agMG-4QAAAAQ"]
[Tue Apr 21 20:50:46.846135 2026] [:error] [pid 35320:tid 35330] [client 20.216.164.137:25583] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "aedypoJW6fdXWO6agMG-6wAAAAA"]
[Tue Apr 21 20:50:48.861386 2026] [:error] [pid 35320:tid 35340] [client 20.216.164.137:24526] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aedyqIJW6fdXWO6agMG-8gAAAAo"]
[Tue Apr 21 20:50:52.588795 2026] [:error] [pid 54080:tid 54092] [client 20.216.164.137:35517] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aedyrIzEbQHHxtmWbaa3twAAAso"]
[Tue Apr 21 20:50:54.394199 2026] [:error] [pid 35321:tid 35394] [client 20.216.164.137:25569] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aedyrjeHLhVUuu8cVXyb6gAAAEo"]
[Tue Apr 21 20:50:55.730847 2026] [:error] [pid 35321:tid 35400] [client 20.216.164.137:50876] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "aedyrzeHLhVUuu8cVXyb8AAAAFA"]
[Tue Apr 21 20:50:56.547284 2026] [:error] [pid 53832:tid 53858] [client 20.216.164.137:36571] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aedysNzkuxsE_OhM9UJqqQAAAlc"]
[Tue Apr 21 20:50:57.863020 2026] [:error] [pid 53731:tid 53739] [client 20.216.164.137:37892] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aedysV2I9THUR-bRVGxkhwAAAgQ"]
[Tue Apr 21 20:51:01.154379 2026] [:error] [pid 53731:tid 53750] [client 20.216.164.137:19591] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aedytV2I9THUR-bRVGxkjAAAAg8"]
[Tue Apr 21 20:51:03.966890 2026] [:error] [pid 4823:tid 4874] [client 20.216.164.137:21771] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aedyt_c8mke3PfHqsxH-tgAAAZU"]
[Tue Apr 21 20:51:05.522299 2026] [:error] [pid 53832:tid 53846] [client 20.216.164.137:19166] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "aedyudzkuxsE_OhM9UJqrQAAAks"]
[Tue Apr 21 20:51:06.912483 2026] [:error] [pid 35415:tid 35446] [client 20.216.164.137:17775] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "aedyukiqDinI4_22zzh0PAAAANM"]
[Tue Apr 21 20:51:08.771148 2026] [:error] [pid 53832:tid 53840] [client 20.216.164.137:28044] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "aedyvNzkuxsE_OhM9UJqsgAAAkU"]
[Tue Apr 21 20:51:10.248000 2026] [:error] [pid 53731:tid 53750] [client 20.216.164.137:39729] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "aedyvl2I9THUR-bRVGxkmQAAAg8"]
[Tue Apr 21 20:51:12.874599 2026] [:error] [pid 53731:tid 53752] [client 20.216.164.137:23894] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aedywF2I9THUR-bRVGxkngAAAhA"]
[Tue Apr 21 20:51:13.698084 2026] [:error] [pid 35321:tid 35400] [client 20.216.164.137:23926] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aedywTeHLhVUuu8cVXyb_AAAAFA"]
[Tue Apr 21 20:51:14.721196 2026] [:error] [pid 53731:tid 53744] [client 20.216.164.137:24900] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aedywl2I9THUR-bRVGxkpQAAAgk"]
[Tue Apr 21 20:51:15.847635 2026] [:error] [pid 53731:tid 53753] [client 20.216.164.137:27609] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "aedyw12I9THUR-bRVGxkqAAAAhE"]
[Tue Apr 21 20:51:16.828653 2026] [:error] [pid 53731:tid 53749] [client 20.216.164.137:23918] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aedyxF2I9THUR-bRVGxkrQAAAg4"]
[Tue Apr 21 20:51:17.689389 2026] [:error] [pid 4777:tid 4806] [client 20.216.164.137:31112] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aedyxaxXur6bykKyLZSq4gAAARI"]
[Tue Apr 21 20:51:19.874869 2026] [:error] [pid 53832:tid 53849] [client 20.216.164.137:37952] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aedyx9zkuxsE_OhM9UJqtAAAAk4"]
[Tue Apr 21 20:51:21.273692 2026] [:error] [pid 53731:tid 53756] [client 20.216.164.137:21458] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "aedyyV2I9THUR-bRVGxktAAAAhQ"]
[Tue Apr 21 20:51:22.717057 2026] [:error] [pid 4777:tid 4789] [client 20.216.164.137:21459] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aedyyqxXur6bykKyLZSq4wAAAQE"]
[Tue Apr 21 20:51:23.681289 2026] [:error] [pid 35321:tid 35408] [client 20.216.164.137:21466] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aedyyzeHLhVUuu8cVXycCAAAAFg"]
[Tue Apr 21 20:51:25.206592 2026] [:error] [pid 35321:tid 35394] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Tue Apr 21 20:51:25.445864 2026] [:error] [pid 35321:tid 35408] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Tue Apr 21 20:51:25.695796 2026] [:error] [pid 35321:tid 35387] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Tue Apr 21 20:51:25.935041 2026] [:error] [pid 35321:tid 35400] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Tue Apr 21 20:51:26.174163 2026] [:error] [pid 35321:tid 35391] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Tue Apr 21 20:51:26.412441 2026] [:error] [pid 35321:tid 35395] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/xltt.php
[Tue Apr 21 20:51:26.651516 2026] [:error] [pid 35321:tid 35404] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Tue Apr 21 20:51:26.924622 2026] [:error] [pid 35321:tid 35388] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Tue Apr 21 20:51:27.183942 2026] [:error] [pid 35321:tid 35389] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Tue Apr 21 20:51:27.423424 2026] [:error] [pid 35321:tid 35398] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Tue Apr 21 20:51:27.662914 2026] [:error] [pid 35321:tid 35387] [client 20.216.164.137:26617] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue Apr 21 20:51:27.899255 2026] [:error] [pid 35321:tid 35401] [client 20.216.164.137:26617] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aedyzzeHLhVUuu8cVXycLQAAAFE"]
[Tue Apr 21 20:51:30.058682 2026] [:error] [pid 35321:tid 35393] [client 20.216.164.137:4384] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aedy0jeHLhVUuu8cVXycNwAAAEk"]
[Tue Apr 21 20:51:31.197265 2026] [:error] [pid 35320:tid 35338] [client 20.216.164.137:21500] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aedy04JW6fdXWO6agMG_MAAAAAg"]
[Tue Apr 21 20:51:33.914975 2026] [:error] [pid 35320:tid 35352] [client 20.216.164.137:21440] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "aedy1YJW6fdXWO6agMG_OgAAABY"]
[Tue Apr 21 20:51:36.367246 2026] [:error] [pid 53832:tid 53835] [client 20.216.164.137:38290] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aedy2NzkuxsE_OhM9UJquwAAAkA"]
[Tue Apr 21 20:51:37.552150 2026] [:error] [pid 53832:tid 53836] [client 20.216.164.137:24944] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aedy2dzkuxsE_OhM9UJqvgAAAkE"]
[Tue Apr 21 20:51:39.475428 2026] [:error] [pid 35321:tid 35408] [client 20.216.164.137:43713] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aedy2zeHLhVUuu8cVXycXAAAAFg"]
[Tue Apr 21 20:51:41.427091 2026] [:error] [pid 35321:tid 35385] [client 20.216.164.137:37022] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "aedy3TeHLhVUuu8cVXycdQAAAEE"]
[Tue Apr 21 20:51:42.637982 2026] [:error] [pid 53978:tid 53996] [client 20.216.164.137:43771] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aedy3p1ivsR4hcOSQbYf6AAAApA"]
[Tue Apr 21 20:51:44.315339 2026] [:error] [pid 35320:tid 35338] [client 20.216.164.137:38325] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aedy4IJW6fdXWO6agMG_QgAAAAg"]
[Tue Apr 21 20:51:45.590109 2026] [:error] [pid 35320:tid 35350] [client 20.216.164.137:38343] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aedy4YJW6fdXWO6agMG_SgAAABQ"]
[Tue Apr 21 20:51:47.097093 2026] [:error] [pid 35320:tid 35347] [client 20.216.164.137:24845] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aedy44JW6fdXWO6agMG_TwAAABE"]
[Tue Apr 21 20:51:48.163634 2026] [:error] [pid 35320:tid 35343] [client 20.216.164.137:20528] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aedy5IJW6fdXWO6agMG_UgAAAA0"]
[Tue Apr 21 20:51:49.928857 2026] [:error] [pid 53731:tid 53753] [client 20.216.164.137:4165] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aedy5V2I9THUR-bRVGxkxgAAAhE"]
[Tue Apr 21 20:51:53.173599 2026] [:error] [pid 35320:tid 35339] [client 20.216.164.137:44984] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aedy6YJW6fdXWO6agMG_XAAAAAk"]
[Tue Apr 21 20:51:54.392985 2026] [:error] [pid 53978:tid 53995] [client 20.216.164.137:17445] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aedy6p1ivsR4hcOSQbYf7gAAAo8"]
[Tue Apr 21 20:51:55.549172 2026] [:error] [pid 35320:tid 35338] [client 20.216.164.137:27545] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aedy64JW6fdXWO6agMG_YAAAAAg"]
[Tue Apr 21 20:51:57.773038 2026] [:error] [pid 53978:tid 53989] [client 20.216.164.137:18115] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aedy7Z1ivsR4hcOSQbYf8QAAAok"]
[Tue Apr 21 20:51:59.598600 2026] [:error] [pid 54080:tid 54093] [client 20.216.164.137:17462] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aedy74zEbQHHxtmWbaa3ygAAAss"]
[Tue Apr 21 20:52:01.238117 2026] [:error] [pid 35321:tid 35402] [client 20.216.164.137:17450] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aedy8TeHLhVUuu8cVXycywAAAFI"]
[Tue Apr 21 20:52:01.993762 2026] [:error] [pid 35321:tid 35403] [client 20.216.164.137:17995] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "aedy8TeHLhVUuu8cVXyczAAAAFM"]
[Tue Apr 21 20:52:03.903892 2026] [:error] [pid 35320:tid 35352] [client 20.216.164.137:18045] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "aedy84JW6fdXWO6agMG_cwAAABY"]
[Tue Apr 21 20:52:05.090454 2026] [:error] [pid 35320:tid 35350] [client 20.216.164.137:26524] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "aedy9YJW6fdXWO6agMG_dgAAABQ"]
[Tue Apr 21 20:52:06.984345 2026] [:error] [pid 53731:tid 53746] [client 20.216.164.137:17525] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "aedy9l2I9THUR-bRVGxkygAAAgs"]
[Tue Apr 21 20:52:08.900363 2026] [:error] [pid 35321:tid 35398] [client 20.216.164.137:17229] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aedy-DeHLhVUuu8cVXyc2gAAAE4"]
[Tue Apr 21 20:52:10.988441 2026] [:error] [pid 35321:tid 35387] [client 20.216.164.137:23452] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aedy-jeHLhVUuu8cVXyc5AAAAEM"]
[Tue Apr 21 20:52:12.481576 2026] [:error] [pid 53978:tid 53988] [client 20.216.164.137:26536] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aedy_J1ivsR4hcOSQbYf-QAAAog"]
[Tue Apr 21 20:52:13.560618 2026] [:error] [pid 35320:tid 35335] [client 20.216.164.137:35535] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "aedy_YJW6fdXWO6agMG_hwAAAAU"]
[Tue Apr 21 20:52:14.312407 2026] [:error] [pid 54080:tid 54094] [client 20.216.164.137:26503] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aedy_ozEbQHHxtmWbaa3zwAAAsw"]
[Tue Apr 21 20:52:16.064901 2026] [:error] [pid 35321:tid 35406] [client 20.216.164.137:17482] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aedzADeHLhVUuu8cVXyc7gAAAFY"]
[Tue Apr 21 20:52:16.865643 2026] [:error] [pid 35321:tid 35388] [client 20.216.164.137:21016] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aedzADeHLhVUuu8cVXyc8AAAAEQ"]
[Tue Apr 21 20:52:18.223351 2026] [:error] [pid 35321:tid 35389] [client 20.216.164.137:23485] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "aedzAjeHLhVUuu8cVXyc-gAAAEU"]
[Tue Apr 21 20:52:20.255769 2026] [:error] [pid 35320:tid 35354] [client 20.216.164.137:23464] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "aedzBIJW6fdXWO6agMG_kQAAABg"]
[Tue Apr 21 20:52:23.795852 2026] [:error] [pid 35320:tid 35345] [client 20.216.164.137:37064] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "aedzB4JW6fdXWO6agMG_lQAAAA8"]
[Tue Apr 21 20:52:25.529232 2026] [:error] [pid 35320:tid 35342] [client 20.216.164.137:37057] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "aedzCYJW6fdXWO6agMG_mQAAAAw"]
[Tue Apr 21 20:52:26.939321 2026] [:error] [pid 35321:tid 35392] [client 20.216.164.137:19455] [client 20.216.164.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "aedzCjeHLhVUuu8cVXydEAAAAEg"]
[Tue Apr 21 20:52:27.931910 2026] [:error] [pid 35321:tid 35404] [client 20.216.164.137:21023] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Tue Apr 21 20:52:28.219931 2026] [:error] [pid 35321:tid 35394] [client 20.216.164.137:21023] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Apr 21 20:52:28.465423 2026] [:error] [pid 35321:tid 35389] [client 20.216.164.137:21023] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 21 20:52:28.750946 2026] [:error] [pid 35321:tid 35401] [client 20.216.164.137:21023] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Tue Apr 21 20:52:29.015474 2026] [:error] [pid 35321:tid 35407] [client 20.216.164.137:21023] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Tue Apr 21 20:52:29.265815 2026] [:error] [pid 35321:tid 35403] [client 20.216.164.137:21023] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Tue Apr 21 20:52:29.505517 2026] [:error] [pid 35321:tid 35408] [client 20.216.164.137:21023] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue Apr 21 22:02:38.291450 2026] [:error] [pid 53731:tid 53739] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Tue Apr 21 22:02:38.533659 2026] [:error] [pid 53731:tid 53738] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Tue Apr 21 22:02:38.783428 2026] [:error] [pid 53731:tid 53755] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/xminie.php
[Tue Apr 21 22:02:39.025381 2026] [:error] [pid 53731:tid 53759] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue Apr 21 22:02:39.264894 2026] [:error] [pid 53731:tid 53760] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/x=34.php
[Tue Apr 21 22:02:39.504895 2026] [:error] [pid 53731:tid 53739] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Tue Apr 21 22:02:39.761280 2026] [:error] [pid 53731:tid 53758] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Tue Apr 21 22:02:40.013127 2026] [:error] [pid 53731:tid 53752] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Tue Apr 21 22:02:40.254316 2026] [:error] [pid 53731:tid 53745] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Tue Apr 21 22:02:40.517140 2026] [:error] [pid 53731:tid 53740] [client 20.250.25.241:8163] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Tue Apr 21 22:02:40.753432 2026] [:error] [pid 53731:tid 53737] [client 20.250.25.241:8163] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeeDgF2I9THUR-bRVGyA-wAAAgI"]
[Tue Apr 21 22:02:41.301593 2026] [:error] [pid 53731:tid 53747] [client 20.250.25.241:8158] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeeDgV2I9THUR-bRVGyA_wAAAgw"]
[Tue Apr 21 22:02:41.810716 2026] [:error] [pid 35320:tid 35354] [client 20.250.25.241:8135] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeeDgYJW6fdXWO6agMHoJwAAABg"]
[Tue Apr 21 22:02:42.414519 2026] [:error] [pid 53832:tid 53851] [client 20.250.25.241:8080] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeeDgtzkuxsE_OhM9UJ24wAAAlA"]
[Tue Apr 21 22:02:42.998187 2026] [:error] [pid 53978:tid 53998] [client 20.250.25.241:8071] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeeDgp1ivsR4hcOSQbYznwAAApI"]
[Tue Apr 21 22:02:43.778349 2026] [:error] [pid 35321:tid 35406] [client 20.250.25.241:8142] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeeDgzeHLhVUuu8cVXzVyQAAAFY"]
[Tue Apr 21 22:02:44.550760 2026] [:error] [pid 4777:tid 4791] [client 20.250.25.241:8074] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeeDhKxXur6bykKyLZSx7QAAAQM"]
[Tue Apr 21 22:02:45.664121 2026] [:error] [pid 4823:tid 4856] [client 20.250.25.241:8172] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeeDhfc8mke3PfHqsxEHZwAAAYM"]
[Tue Apr 21 22:02:46.804656 2026] [:error] [pid 35321:tid 35397] [client 20.250.25.241:8138] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeeDhjeHLhVUuu8cVXzVzAAAAE0"]
[Tue Apr 21 22:02:47.953075 2026] [:error] [pid 35415:tid 35432] [client 20.250.25.241:8156] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeeDh0iqDinI4_22zzh6JQAAAMU"]
[Tue Apr 21 22:02:49.062033 2026] [:error] [pid 4777:tid 4807] [client 20.250.25.241:8081] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeeDiaxXur6bykKyLZSx8wAAARM"]
[Tue Apr 21 22:02:50.019877 2026] [:error] [pid 54080:tid 54099] [client 20.250.25.241:8154] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeeDiozEbQHHxtmWbabIyAAAAtE"]
[Tue Apr 21 22:02:50.521183 2026] [:error] [pid 4777:tid 4795] [client 20.250.25.241:8179] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeeDiqxXur6bykKyLZSx9QAAAQc"]
[Tue Apr 21 22:02:51.565103 2026] [:error] [pid 53731:tid 53736] [client 20.250.25.241:8155] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeeDi12I9THUR-bRVGyBCQAAAgE"]
[Tue Apr 21 22:02:53.819684 2026] [:error] [pid 35321:tid 35384] [client 20.250.25.241:8189] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeeDjTeHLhVUuu8cVXzV1gAAAEA"]
[Tue Apr 21 22:02:55.033037 2026] [:error] [pid 35321:tid 35387] [client 20.250.25.241:8088] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeeDjzeHLhVUuu8cVXzV3AAAAEM"]
[Tue Apr 21 22:02:55.665221 2026] [:error] [pid 35321:tid 35396] [client 20.250.25.241:8152] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeeDjzeHLhVUuu8cVXzV3gAAAEw"]
[Tue Apr 21 22:02:56.701155 2026] [:error] [pid 35321:tid 35384] [client 20.250.25.241:8131] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeeDkDeHLhVUuu8cVXzV5AAAAEA"]
[Tue Apr 21 22:02:57.621751 2026] [:error] [pid 35321:tid 35386] [client 20.250.25.241:8073] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeeDkTeHLhVUuu8cVXzV6AAAAEI"]
[Tue Apr 21 22:02:58.251698 2026] [:error] [pid 35321:tid 35388] [client 20.250.25.241:8186] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeeDkjeHLhVUuu8cVXzV6gAAAEQ"]
[Tue Apr 21 22:02:58.893466 2026] [:error] [pid 35321:tid 35406] [client 20.250.25.241:8129] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeeDkjeHLhVUuu8cVXzV7gAAAFY"]
[Tue Apr 21 22:02:59.706231 2026] [:error] [pid 53731:tid 53760] [client 20.250.25.241:8152] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeeDk12I9THUR-bRVGyBDQAAAhg"]
[Tue Apr 21 22:03:00.299093 2026] [:error] [pid 35321:tid 35395] [client 20.250.25.241:8064] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeeDlDeHLhVUuu8cVXzV8QAAAEs"]
[Tue Apr 21 22:03:01.493773 2026] [:error] [pid 35321:tid 35389] [client 20.250.25.241:8027] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeeDlTeHLhVUuu8cVXzV9AAAAEU"]
[Tue Apr 21 22:03:02.464782 2026] [:error] [pid 35321:tid 35384] [client 20.250.25.241:8133] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeeDljeHLhVUuu8cVXzV9wAAAEA"]
[Tue Apr 21 22:03:03.649334 2026] [:error] [pid 35321:tid 35404] [client 20.250.25.241:8150] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeeDlzeHLhVUuu8cVXzV-wAAAFQ"]
[Tue Apr 21 22:03:04.311024 2026] [:error] [pid 53978:tid 53989] [client 20.250.25.241:8191] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeeDmJ1ivsR4hcOSQbYzvAAAAok"]
[Tue Apr 21 22:03:04.921848 2026] [:error] [pid 53978:tid 53985] [client 20.250.25.241:8184] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeeDmJ1ivsR4hcOSQbYzvQAAAoU"]
[Tue Apr 21 22:03:05.785217 2026] [:error] [pid 4777:tid 4789] [client 20.250.25.241:8134] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeDmaxXur6bykKyLZSx9wAAAQE"]
[Tue Apr 21 22:03:06.345782 2026] [:error] [pid 35320:tid 35349] [client 20.250.25.241:8166] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeDmoJW6fdXWO6agMHoQgAAABM"]
[Tue Apr 21 22:03:07.139724 2026] [:error] [pid 35320:tid 35337] [client 20.250.25.241:8173] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeDm4JW6fdXWO6agMHoQwAAAAc"]
[Tue Apr 21 22:03:07.757797 2026] [:error] [pid 35321:tid 35398] [client 20.250.25.241:8096] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeeDmzeHLhVUuu8cVXzWAgAAAE4"]
[Tue Apr 21 22:03:08.567428 2026] [:error] [pid 35415:tid 35427] [client 20.250.25.241:8182] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "aeeDnEiqDinI4_22zzh6KgAAAMA"]
[Tue Apr 21 22:03:09.318135 2026] [:error] [pid 4777:tid 4790] [client 20.250.25.241:8162] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "aeeDnaxXur6bykKyLZSx-AAAAQI"]
[Tue Apr 21 22:03:10.138777 2026] [:error] [pid 35320:tid 35342] [client 20.250.25.241:8165] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "aeeDnoJW6fdXWO6agMHoTAAAAAw"]
[Tue Apr 21 22:03:10.982625 2026] [:error] [pid 53731:tid 53738] [client 20.250.25.241:8078] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "aeeDnl2I9THUR-bRVGyBFwAAAgM"]
[Tue Apr 21 22:03:11.458662 2026] [:error] [pid 53731:tid 53750] [client 20.250.25.241:8070] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeeDn12I9THUR-bRVGyBGgAAAg8"]
[Tue Apr 21 22:03:12.017426 2026] [:error] [pid 35320:tid 35335] [client 20.250.25.241:8104] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeeDoIJW6fdXWO6agMHoUwAAAAU"]
[Tue Apr 21 22:03:12.875977 2026] [:error] [pid 35321:tid 35399] [client 20.250.25.241:8181] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeeDoDeHLhVUuu8cVXzWCAAAAE8"]
[Tue Apr 21 22:03:13.471109 2026] [:error] [pid 53731:tid 53747] [client 20.250.25.241:8139] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeeDoV2I9THUR-bRVGyBHAAAAgw"]
[Tue Apr 21 22:03:14.058885 2026] [:error] [pid 35320:tid 35331] [client 20.250.25.241:8147] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aeeDooJW6fdXWO6agMHoWgAAAAE"]
[Tue Apr 21 22:03:14.609684 2026] [:error] [pid 35321:tid 35405] [client 20.250.25.241:8004] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aeeDojeHLhVUuu8cVXzWDQAAAFU"]
[Tue Apr 21 22:03:15.538095 2026] [:error] [pid 35321:tid 35401] [client 20.250.25.241:8183] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aeeDozeHLhVUuu8cVXzWEgAAAFE"]
[Tue Apr 21 22:03:16.168658 2026] [:error] [pid 53978:tid 53999] [client 20.250.25.241:8020] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aeeDpJ1ivsR4hcOSQbYzyQAAApM"]
[Tue Apr 21 22:03:16.960861 2026] [:error] [pid 53832:tid 53858] [client 20.250.25.241:8084] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aeeDpNzkuxsE_OhM9UJ27AAAAlc"]
[Tue Apr 21 22:03:17.515690 2026] [:error] [pid 35321:tid 35398] [client 20.250.25.241:8032] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aeeDpTeHLhVUuu8cVXzWFgAAAE4"]
[Tue Apr 21 22:03:18.032125 2026] [:error] [pid 53978:tid 54000] [client 20.250.25.241:8168] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aeeDpp1ivsR4hcOSQbYzzQAAApQ"]
[Tue Apr 21 22:03:18.784005 2026] [:error] [pid 35320:tid 35351] [client 20.250.25.241:8153] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aeeDpoJW6fdXWO6agMHoYgAAABU"]
[Tue Apr 21 22:03:19.380140 2026] [:error] [pid 35321:tid 35399] [client 20.250.25.241:8145] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeDpzeHLhVUuu8cVXzWHAAAAE8"]
[Tue Apr 21 22:03:20.290265 2026] [:error] [pid 35321:tid 35386] [client 20.250.25.241:8002] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeDqDeHLhVUuu8cVXzWHwAAAEI"]
[Tue Apr 21 22:03:22.783476 2026] [:error] [pid 35321:tid 35397] [client 20.250.25.241:8111] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeDqjeHLhVUuu8cVXzWKwAAAE0"]
[Tue Apr 21 22:03:24.575465 2026] [:error] [pid 35321:tid 35403] [client 20.250.25.241:8130] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeeDrDeHLhVUuu8cVXzWNwAAAFM"]
[Tue Apr 21 22:03:26.491548 2026] [:error] [pid 35321:tid 35405] [client 20.250.25.241:8015] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeeDrjeHLhVUuu8cVXzWTwAAAFU"]
[Tue Apr 21 22:03:27.552389 2026] [:error] [pid 54080:tid 54100] [client 20.250.25.241:8116] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeeDr4zEbQHHxtmWbabI2QAAAtI"]
[Tue Apr 21 22:03:29.632428 2026] [:error] [pid 35321:tid 35407] [client 20.250.25.241:8157] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeeDsTeHLhVUuu8cVXzWZAAAAFc"]
[Tue Apr 21 22:03:31.101315 2026] [:error] [pid 35320:tid 35336] [client 20.250.25.241:8106] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "aeeDs4JW6fdXWO6agMHobAAAAAY"]
[Tue Apr 21 22:03:31.890133 2026] [:error] [pid 53832:tid 53850] [client 20.250.25.241:8100] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeeDs9zkuxsE_OhM9UJ28QAAAk8"]
[Tue Apr 21 22:03:33.132580 2026] [:error] [pid 35321:tid 35385] [client 20.250.25.241:8141] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeeDtTeHLhVUuu8cVXzWdgAAAEE"]
[Tue Apr 21 22:03:34.470295 2026] [:error] [pid 35320:tid 35339] [client 20.250.25.241:8021] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeeDtoJW6fdXWO6agMHocgAAAAk"]
[Tue Apr 21 22:03:35.619934 2026] [:error] [pid 35321:tid 35407] [client 20.250.25.241:8086] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "aeeDtzeHLhVUuu8cVXzWhAAAAFc"]
[Tue Apr 21 22:03:36.292244 2026] [:error] [pid 35321:tid 35390] [client 20.250.25.241:8090] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeeDuDeHLhVUuu8cVXzWjAAAAEY"]
[Tue Apr 21 22:03:37.267987 2026] [:error] [pid 53731:tid 53741] [client 20.250.25.241:8001] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeeDuV2I9THUR-bRVGyBOQAAAgY"]
[Tue Apr 21 22:03:37.997799 2026] [:error] [pid 53731:tid 53748] [client 20.250.25.241:8190] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeeDuV2I9THUR-bRVGyBOwAAAg0"]
[Tue Apr 21 22:03:38.765116 2026] [:error] [pid 53731:tid 53740] [client 20.250.25.241:8085] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeeDul2I9THUR-bRVGyBQQAAAgU"]
[Tue Apr 21 22:03:39.544009 2026] [:error] [pid 53731:tid 53739] [client 20.250.25.241:8089] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "aeeDu12I9THUR-bRVGyBRAAAAgQ"]
[Tue Apr 21 22:03:40.253186 2026] [:error] [pid 35321:tid 35397] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Tue Apr 21 22:03:40.590937 2026] [:error] [pid 35321:tid 35406] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue Apr 21 22:03:40.960425 2026] [:error] [pid 35321:tid 35398] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Tue Apr 21 22:03:41.356886 2026] [:error] [pid 35321:tid 35404] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Apr 21 22:03:41.675729 2026] [:error] [pid 35321:tid 35394] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Tue Apr 21 22:03:41.922854 2026] [:error] [pid 35321:tid 35400] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Tue Apr 21 22:03:42.255678 2026] [:error] [pid 35321:tid 35407] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Tue Apr 21 22:03:42.553467 2026] [:error] [pid 35321:tid 35384] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue Apr 21 22:03:42.794997 2026] [:error] [pid 35321:tid 35391] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Tue Apr 21 22:03:43.109182 2026] [:error] [pid 35321:tid 35397] [client 20.250.25.241:8083] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Tue Apr 21 22:03:43.345532 2026] [:error] [pid 35321:tid 35398] [client 20.250.25.241:8083] [client 20.250.25.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aeeDvzeHLhVUuu8cVXzWsgAAAE4"]
[Tue Apr 21 22:03:44.039464 2026] [:error] [pid 53731:tid 53760] [client 20.250.25.241:8075] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 21 22:03:44.277255 2026] [:error] [pid 53731:tid 53744] [client 20.250.25.241:8075] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeDwF2I9THUR-bRVGyBRgAAAgk"]
[Tue Apr 21 22:03:44.860721 2026] [:error] [pid 53832:tid 53851] [client 20.250.25.241:8113] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeDwNzkuxsE_OhM9UJ28wAAAlA"]
[Tue Apr 21 22:03:45.378414 2026] [:error] [pid 35320:tid 35342] [client 20.250.25.241:8188] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeDwYJW6fdXWO6agMHokAAAAAw"]
[Tue Apr 21 22:03:46.485489 2026] [:error] [pid 4823:tid 4855] [client 20.250.25.241:8187] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeDwvc8mke3PfHqsxEHewAAAYI"]
[Tue Apr 21 22:03:47.969903 2026] [:error] [pid 35321:tid 35405] [client 20.250.25.241:8176] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeeDwzeHLhVUuu8cVXzWxAAAAFU"]
[Tue Apr 21 22:03:48.666570 2026] [:error] [pid 35321:tid 35402] [client 20.250.25.241:8140] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeeDxDeHLhVUuu8cVXzWywAAAFI"]
[Tue Apr 21 22:03:49.355605 2026] [:error] [pid 35321:tid 35384] [client 20.250.25.241:8105] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeeDxTeHLhVUuu8cVXzW0AAAAEA"]
[Tue Apr 21 22:03:50.054537 2026] [:error] [pid 35321:tid 35403] [client 20.250.25.241:8048] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeeDxjeHLhVUuu8cVXzW1gAAAFM"]
[Tue Apr 21 22:03:50.553797 2026] [:error] [pid 35321:tid 35408] [client 20.250.25.241:8164] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeeDxjeHLhVUuu8cVXzW2QAAAFg"]
[Tue Apr 21 22:03:51.086047 2026] [:error] [pid 35321:tid 35401] [client 20.250.25.241:8011] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeeDxzeHLhVUuu8cVXzW3gAAAFE"]
[Tue Apr 21 22:03:52.586283 2026] [:error] [pid 35321:tid 35399] [client 20.250.25.241:8082] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeeDyDeHLhVUuu8cVXzW6gAAAE8"]
[Tue Apr 21 22:03:53.345409 2026] [:error] [pid 53731:tid 53759] [client 20.250.25.241:8148] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeeDyV2I9THUR-bRVGyBTQAAAhc"]
[Tue Apr 21 22:03:54.095436 2026] [:error] [pid 4823:tid 4861] [client 20.250.25.241:7944] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeeDyvc8mke3PfHqsxEHfgAAAYg"]
[Tue Apr 21 22:03:55.023225 2026] [:error] [pid 53731:tid 53736] [client 20.250.25.241:8072] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeeDy12I9THUR-bRVGyBUQAAAgE"]
[Tue Apr 21 22:03:55.982935 2026] [:error] [pid 35320:tid 35330] [client 20.250.25.241:8120] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeeDy4JW6fdXWO6agMHolQAAAAA"]
[Tue Apr 21 22:03:56.563436 2026] [:error] [pid 35320:tid 35343] [client 20.250.25.241:8077] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeeDzIJW6fdXWO6agMHomQAAAA0"]
[Tue Apr 21 22:03:57.136645 2026] [:error] [pid 35320:tid 35353] [client 20.250.25.241:8171] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeeDzYJW6fdXWO6agMHomwAAABc"]
[Tue Apr 21 22:03:57.803417 2026] [:error] [pid 53731:tid 53758] [client 20.250.25.241:8091] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeeDzV2I9THUR-bRVGyBWAAAAhY"]
[Tue Apr 21 22:03:58.588939 2026] [:error] [pid 53731:tid 53759] [client 20.250.25.241:7947] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeeDzl2I9THUR-bRVGyBYAAAAhc"]
[Tue Apr 21 22:03:59.701581 2026] [:error] [pid 53731:tid 53749] [client 20.250.25.241:8149] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeeDz12I9THUR-bRVGyBYgAAAg4"]
[Tue Apr 21 22:04:00.407549 2026] [:error] [pid 35320:tid 35336] [client 20.250.25.241:8174] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeeD0IJW6fdXWO6agMHonwAAAAY"]
[Tue Apr 21 22:04:01.308636 2026] [:error] [pid 53978:tid 53980] [client 20.250.25.241:8009] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeeD0Z1ivsR4hcOSQbYz5wAAAoA"]
[Tue Apr 21 22:04:01.969876 2026] [:error] [pid 53978:tid 53984] [client 20.250.25.241:8028] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeeD0Z1ivsR4hcOSQbYz6AAAAoQ"]
[Tue Apr 21 22:04:02.692306 2026] [:error] [pid 53978:tid 53996] [client 20.250.25.241:8170] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeeD0p1ivsR4hcOSQbYz7QAAApA"]
[Tue Apr 21 22:04:03.667808 2026] [:error] [pid 53978:tid 53991] [client 20.250.25.241:8146] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeeD051ivsR4hcOSQbYz8gAAAos"]
[Tue Apr 21 22:04:04.528057 2026] [:error] [pid 53978:tid 53994] [client 20.250.25.241:8144] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeeD1J1ivsR4hcOSQbYz9QAAAo4"]
[Tue Apr 21 22:04:05.443671 2026] [:error] [pid 35321:tid 35392] [client 20.250.25.241:8097] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeeD1TeHLhVUuu8cVXzW-wAAAEg"]
[Tue Apr 21 22:04:06.784739 2026] [:error] [pid 35320:tid 35348] [client 20.250.25.241:8093] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "aeeD1oJW6fdXWO6agMHoowAAABI"]
[Tue Apr 21 22:04:07.785586 2026] [:error] [pid 35320:tid 35343] [client 20.250.25.241:8042] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeeD14JW6fdXWO6agMHoqAAAAA0"]
[Tue Apr 21 22:04:08.545293 2026] [:error] [pid 35321:tid 35403] [client 20.250.25.241:8159] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeeD2DeHLhVUuu8cVXzXCgAAAFM"]
[Tue Apr 21 22:04:09.439686 2026] [:error] [pid 35321:tid 35395] [client 20.250.25.241:8109] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeeD2TeHLhVUuu8cVXzXDQAAAEs"]
[Tue Apr 21 22:04:09.997013 2026] [:error] [pid 35321:tid 35402] [client 20.250.25.241:8119] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeeD2TeHLhVUuu8cVXzXEwAAAFI"]
[Tue Apr 21 22:04:10.987484 2026] [:error] [pid 35321:tid 35396] [client 20.250.25.241:8030] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeeD2jeHLhVUuu8cVXzXGgAAAEw"]
[Tue Apr 21 22:04:11.957063 2026] [:error] [pid 35321:tid 35387] [client 20.250.25.241:8079] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeeD2zeHLhVUuu8cVXzXIwAAAEM"]
[Tue Apr 21 22:04:13.164572 2026] [:error] [pid 35320:tid 35342] [client 20.250.25.241:8180] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeeD3YJW6fdXWO6agMHosgAAAAw"]
[Tue Apr 21 22:04:22.491283 2026] [:error] [pid 35320:tid 35331] [client 20.250.25.241:8067] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeeD5oJW6fdXWO6agMHoywAAAAE"]
[Tue Apr 21 22:04:28.974606 2026] [:error] [pid 35320:tid 35351] [client 20.250.25.241:8177] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeeD7IJW6fdXWO6agMHo0gAAABU"]
[Tue Apr 21 22:04:31.334035 2026] [:error] [pid 4823:tid 4870] [client 20.250.25.241:8055] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeeD7_c8mke3PfHqsxEHhQAAAZE"]
[Tue Apr 21 22:04:32.370971 2026] [:error] [pid 35321:tid 35397] [client 20.250.25.241:8014] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeeD8DeHLhVUuu8cVXzXaAAAAE0"]
[Tue Apr 21 22:04:32.944091 2026] [:error] [pid 35321:tid 35405] [client 20.250.25.241:8005] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "aeeD8DeHLhVUuu8cVXzXawAAAFU"]
[Tue Apr 21 22:04:33.613703 2026] [:error] [pid 35321:tid 35408] [client 20.250.25.241:8178] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeeD8TeHLhVUuu8cVXzXcgAAAFg"]
[Tue Apr 21 22:04:34.236043 2026] [:error] [pid 4777:tid 4807] [client 20.250.25.241:7942] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeeD8qxXur6bykKyLZSyBgAAARM"]
[Tue Apr 21 22:04:34.869790 2026] [:error] [pid 53978:tid 53989] [client 20.250.25.241:8115] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeeD8p1ivsR4hcOSQbY0EQAAAok"]
[Tue Apr 21 22:04:35.574172 2026] [:error] [pid 53978:tid 53993] [client 20.250.25.241:8127] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "aeeD851ivsR4hcOSQbY0EwAAAo0"]
[Tue Apr 21 22:04:36.229902 2026] [:error] [pid 53978:tid 53994] [client 20.250.25.241:8098] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeeD9J1ivsR4hcOSQbY0FgAAAo4"]
[Tue Apr 21 22:04:36.727562 2026] [:error] [pid 53731:tid 53744] [client 20.250.25.241:8124] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeeD9F2I9THUR-bRVGyBcwAAAgk"]
[Tue Apr 21 22:04:37.257955 2026] [:error] [pid 53832:tid 53845] [client 20.250.25.241:8126] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeeD9dzkuxsE_OhM9UJ3GAAAAko"]
[Tue Apr 21 22:04:37.859763 2026] [:error] [pid 53832:tid 53850] [client 20.250.25.241:8095] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "aeeD9dzkuxsE_OhM9UJ3GQAAAk8"]
[Tue Apr 21 22:04:38.569029 2026] [:error] [pid 53731:tid 53754] [client 20.250.25.241:8092] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeeD9l2I9THUR-bRVGyBdwAAAhI"]
[Tue Apr 21 22:04:39.229776 2026] [:error] [pid 54080:tid 54102] [client 20.250.25.241:8108] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeeD94zEbQHHxtmWbabI-AAAAtQ"]
[Tue Apr 21 22:04:40.082145 2026] [:error] [pid 35320:tid 35330] [client 20.250.25.241:8008] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeeD-IJW6fdXWO6agMHo1wAAAAA"]
[Tue Apr 21 22:04:40.564410 2026] [:error] [pid 35320:tid 35331] [client 20.250.25.241:8007] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xynz.php"] [unique_id "aeeD-IJW6fdXWO6agMHo2QAAAAE"]
[Tue Apr 21 22:04:41.120245 2026] [:error] [pid 35320:tid 35338] [client 20.250.25.241:8035] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeeD-YJW6fdXWO6agMHo3AAAAAg"]
[Tue Apr 21 22:04:41.817414 2026] [:error] [pid 4777:tid 4795] [client 20.250.25.241:8034] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeeD-axXur6bykKyLZSyBwAAAQc"]
[Tue Apr 21 22:04:42.299021 2026] [:error] [pid 35320:tid 35345] [client 20.250.25.241:8054] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeeD-oJW6fdXWO6agMHo4AAAAA8"]
[Tue Apr 21 22:04:42.820723 2026] [:error] [pid 35320:tid 35350] [client 20.250.25.241:8114] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeeD-oJW6fdXWO6agMHo4wAAABQ"]
[Tue Apr 21 22:04:43.629535 2026] [:error] [pid 4777:tid 4797] [client 20.250.25.241:8167] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "aeeD-6xXur6bykKyLZSyCAAAAQk"]
[Tue Apr 21 22:04:44.151435 2026] [:error] [pid 35320:tid 35346] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Tue Apr 21 22:04:44.416361 2026] [:error] [pid 35320:tid 35354] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Tue Apr 21 22:04:44.658856 2026] [:error] [pid 35320:tid 35343] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Tue Apr 21 22:04:45.044395 2026] [:error] [pid 35320:tid 35352] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Tue Apr 21 22:04:45.303146 2026] [:error] [pid 35320:tid 35349] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Apr 21 22:04:45.543927 2026] [:error] [pid 35320:tid 35337] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Tue Apr 21 22:04:45.783119 2026] [:error] [pid 35320:tid 35339] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Tue Apr 21 22:04:46.022625 2026] [:error] [pid 35320:tid 35336] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 21 22:04:46.261654 2026] [:error] [pid 35320:tid 35354] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 21 22:04:46.501071 2026] [:error] [pid 35320:tid 35335] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Tue Apr 21 22:04:46.767936 2026] [:error] [pid 35320:tid 35342] [client 20.250.25.241:8069] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue Apr 21 22:04:47.003762 2026] [:error] [pid 35320:tid 35353] [client 20.250.25.241:8069] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeeD_4JW6fdXWO6agMHpAwAAABc"]
[Tue Apr 21 22:04:47.882102 2026] [:error] [pid 35320:tid 35336] [client 20.250.25.241:8049] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeeD_4JW6fdXWO6agMHpCQAAAAY"]
[Tue Apr 21 22:04:48.904249 2026] [:error] [pid 35320:tid 35346] [client 20.250.25.241:8016] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeeEAIJW6fdXWO6agMHpDwAAABA"]
[Tue Apr 21 22:04:50.323392 2026] [:error] [pid 35320:tid 35334] [client 20.250.25.241:8175] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeeEAoJW6fdXWO6agMHpFAAAAAQ"]
[Tue Apr 21 22:04:51.554623 2026] [:error] [pid 35321:tid 35404] [client 20.250.25.241:8068] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeeEAzeHLhVUuu8cVXzXjQAAAFQ"]
[Tue Apr 21 22:04:52.507155 2026] [:error] [pid 35320:tid 35341] [client 20.250.25.241:8000] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeeEBIJW6fdXWO6agMHpGwAAAAs"]
[Tue Apr 21 22:04:53.891062 2026] [:error] [pid 35320:tid 35335] [client 20.250.25.241:7889] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeeEBYJW6fdXWO6agMHpHgAAAAU"]
[Tue Apr 21 22:04:55.769934 2026] [:error] [pid 53731:tid 53742] [client 20.250.25.241:8023] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeeEB12I9THUR-bRVGyBhQAAAgc"]
[Tue Apr 21 22:04:56.635673 2026] [:error] [pid 35321:tid 35400] [client 20.250.25.241:7955] [client 20.250.25.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeeECDeHLhVUuu8cVXzXlgAAAFA"]
[Tue Apr 21 22:04:57.327770 2026] [:error] [pid 35321:tid 35386] [client 20.250.25.241:8066] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeeECTeHLhVUuu8cVXzXmgAAAEI"]
[Tue Apr 21 22:04:58.377779 2026] [:error] [pid 35321:tid 35406] [client 20.250.25.241:8038] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeeECjeHLhVUuu8cVXzXoAAAAFY"]
[Tue Apr 21 22:04:59.613626 2026] [:error] [pid 53978:tid 53993] [client 20.250.25.241:8161] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeeEC51ivsR4hcOSQbY0JQAAAo0"]
[Tue Apr 21 22:05:00.769386 2026] [:error] [pid 53731:tid 53737] [client 20.250.25.241:8103] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeeEDF2I9THUR-bRVGyBiwAAAgI"]
[Tue Apr 21 22:05:01.627116 2026] [:error] [pid 53731:tid 53735] [client 20.250.25.241:8003] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeeEDV2I9THUR-bRVGyBjAAAAgA"]
[Tue Apr 21 22:05:03.083419 2026] [:error] [pid 35320:tid 35330] [client 20.250.25.241:8065] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeeED4JW6fdXWO6agMHpMQAAAAA"]
[Tue Apr 21 22:05:04.241415 2026] [:error] [pid 35321:tid 35393] [client 20.250.25.241:8043] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeeEEDeHLhVUuu8cVXzXsAAAAEk"]
[Tue Apr 21 22:05:05.252260 2026] [:error] [pid 35321:tid 35400] [client 20.250.25.241:8017] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeeEETeHLhVUuu8cVXzXugAAAFA"]
[Tue Apr 21 22:05:05.775076 2026] [:error] [pid 35321:tid 35391] [client 20.250.25.241:8037] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeeEETeHLhVUuu8cVXzXvgAAAEc"]
[Tue Apr 21 22:05:06.396721 2026] [:error] [pid 35321:tid 35407] [client 20.250.25.241:7875] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeeEEjeHLhVUuu8cVXzXwwAAAFc"]
[Tue Apr 21 22:05:06.990028 2026] [:error] [pid 53731:tid 53744] [client 20.250.25.241:8024] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeeEEl2I9THUR-bRVGyBkQAAAgk"]
[Tue Apr 21 22:05:07.583991 2026] [:error] [pid 35320:tid 35352] [client 20.250.25.241:8107] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeeEE4JW6fdXWO6agMHpNQAAABY"]
[Tue Apr 21 22:05:08.071698 2026] [:error] [pid 54080:tid 54098] [client 20.250.25.241:7936] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeeEFIzEbQHHxtmWbabJDAAAAtA"]
[Tue Apr 21 22:05:08.554578 2026] [:error] [pid 4823:tid 4859] [client 20.250.25.241:8036] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeeEFPc8mke3PfHqsxEHigAAAYY"]
[Tue Apr 21 22:05:09.213404 2026] [:error] [pid 35321:tid 35396] [client 20.250.25.241:7946] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeeEFTeHLhVUuu8cVXzXzgAAAEw"]
[Tue Apr 21 22:05:09.819471 2026] [:error] [pid 53978:tid 53996] [client 20.250.25.241:7949] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeeEFZ1ivsR4hcOSQbY0MAAAApA"]
[Tue Apr 21 22:05:10.670795 2026] [:error] [pid 35320:tid 35345] [client 20.250.25.241:7967] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeeEFoJW6fdXWO6agMHpOAAAAA8"]
[Tue Apr 21 22:05:11.151304 2026] [:error] [pid 53978:tid 54004] [client 20.250.25.241:7952] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeeEF51ivsR4hcOSQbY0NAAAApg"]
[Tue Apr 21 22:05:11.700137 2026] [:error] [pid 35415:tid 35443] [client 20.250.25.241:8040] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeeEF0iqDinI4_22zzh6NQAAANA"]
[Tue Apr 21 22:05:12.607438 2026] [:error] [pid 53832:tid 53847] [client 20.250.25.241:8122] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeeEGNzkuxsE_OhM9UJ3IAAAAkw"]
[Tue Apr 21 22:05:13.346842 2026] [:error] [pid 4777:tid 4806] [client 20.250.25.241:8118] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeeEGaxXur6bykKyLZSyDQAAARI"]
[Tue Apr 21 22:05:14.312156 2026] [:error] [pid 53978:tid 53989] [client 20.250.25.241:8128] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeeEGp1ivsR4hcOSQbY0OQAAAok"]
[Tue Apr 21 22:05:14.793128 2026] [:error] [pid 53978:tid 53998] [client 20.250.25.241:8076] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeeEGp1ivsR4hcOSQbY0OgAAApI"]
[Tue Apr 21 22:05:15.338519 2026] [:error] [pid 53731:tid 53756] [client 20.250.25.241:7882] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeeEG12I9THUR-bRVGyBoAAAAhQ"]
[Tue Apr 21 22:05:15.888424 2026] [:error] [pid 35415:tid 35442] [client 20.250.25.241:7939] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeeEG0iqDinI4_22zzh6OgAAAM8"]
[Tue Apr 21 22:05:16.863126 2026] [:error] [pid 53832:tid 53859] [client 20.250.25.241:8102] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeeEHNzkuxsE_OhM9UJ3JAAAAlg"]
[Tue Apr 21 22:05:17.947554 2026] [:error] [pid 35320:tid 35335] [client 20.250.25.241:7941] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeeEHYJW6fdXWO6agMHpPgAAAAU"]
[Tue Apr 21 22:05:19.099012 2026] [:error] [pid 35321:tid 35388] [client 20.250.25.241:7943] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeeEHzeHLhVUuu8cVXzX6gAAAEQ"]
[Tue Apr 21 22:05:20.100772 2026] [:error] [pid 53978:tid 53995] [client 20.250.25.241:8010] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeeEIJ1ivsR4hcOSQbY0UQAAAo8"]
[Tue Apr 21 22:05:21.387759 2026] [:error] [pid 35321:tid 35403] [client 20.250.25.241:8046] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeeEITeHLhVUuu8cVXzX8QAAAFM"]
[Tue Apr 21 22:05:22.384913 2026] [:error] [pid 53731:tid 53737] [client 20.250.25.241:8039] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeeEIl2I9THUR-bRVGyBwAAAAgI"]
[Tue Apr 21 22:05:23.782408 2026] [:error] [pid 53978:tid 53982] [client 20.250.25.241:8031] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "aeeEI51ivsR4hcOSQbY0VwAAAoI"]
[Tue Apr 21 22:05:24.633367 2026] [:error] [pid 53978:tid 53985] [client 20.250.25.241:8033] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeeEJJ1ivsR4hcOSQbY0WQAAAoU"]
[Tue Apr 21 22:05:25.214182 2026] [:error] [pid 35320:tid 35350] [client 20.250.25.241:8125] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeeEJYJW6fdXWO6agMHpQwAAABQ"]
[Tue Apr 21 22:05:25.961615 2026] [:error] [pid 35320:tid 35340] [client 20.250.25.241:8121] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeeEJYJW6fdXWO6agMHpRQAAAAo"]
[Tue Apr 21 22:05:26.441320 2026] [:error] [pid 35320:tid 35337] [client 20.250.25.241:7945] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws57.php"] [unique_id "aeeEJoJW6fdXWO6agMHpSAAAAAc"]
[Tue Apr 21 22:05:27.095113 2026] [:error] [pid 53832:tid 53841] [client 20.250.25.241:8050] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeeEJ9zkuxsE_OhM9UJ3KQAAAkY"]
[Tue Apr 21 22:05:27.787969 2026] [:error] [pid 35415:tid 35447] [client 20.250.25.241:7950] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeeEJ0iqDinI4_22zzh6QgAAANQ"]
[Tue Apr 21 22:05:28.415310 2026] [:error] [pid 35320:tid 35333] [client 20.250.25.241:8045] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeeEKIJW6fdXWO6agMHpTwAAAAM"]
[Tue Apr 21 22:05:29.003975 2026] [:error] [pid 53832:tid 53852] [client 20.250.25.241:8160] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws86.php"] [unique_id "aeeEKdzkuxsE_OhM9UJ3KwAAAlE"]
[Tue Apr 21 22:05:29.505288 2026] [:error] [pid 53832:tid 53848] [client 20.250.25.241:8045] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeeEKdzkuxsE_OhM9UJ3LAAAAk0"]
[Tue Apr 21 22:05:30.014088 2026] [:error] [pid 35321:tid 35406] [client 20.250.25.241:8047] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeeEKjeHLhVUuu8cVXzYAgAAAFY"]
[Tue Apr 21 22:05:30.567766 2026] [:error] [pid 54080:tid 54101] [client 20.250.25.241:8169] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeeEKozEbQHHxtmWbabJFQAAAtM"]
[Tue Apr 21 22:05:31.076496 2026] [:error] [pid 35320:tid 35331] [client 20.250.25.241:7985] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "aeeEK4JW6fdXWO6agMHpUQAAAAE"]
[Tue Apr 21 22:05:31.635927 2026] [:error] [pid 53832:tid 53847] [client 20.250.25.241:7938] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeeEK9zkuxsE_OhM9UJ3MAAAAkw"]
[Tue Apr 21 22:05:32.712141 2026] [:error] [pid 35321:tid 35392] [client 20.250.25.241:7872] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeeELDeHLhVUuu8cVXzYEAAAAEg"]
[Tue Apr 21 22:05:33.194029 2026] [:error] [pid 35321:tid 35405] [client 20.250.25.241:7970] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeeELTeHLhVUuu8cVXzYFQAAAFU"]
[Tue Apr 21 22:05:33.670712 2026] [:error] [pid 35321:tid 35386] [client 20.250.25.241:7960] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "aeeELTeHLhVUuu8cVXzYGQAAAEI"]
[Tue Apr 21 22:05:34.309352 2026] [:error] [pid 35321:tid 35402] [client 20.250.25.241:7979] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aeeELjeHLhVUuu8cVXzYHQAAAFI"]
[Tue Apr 21 22:05:34.857272 2026] [:error] [pid 35320:tid 35345] [client 20.250.25.241:8061] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aeeELoJW6fdXWO6agMHpVQAAAA8"]
[Tue Apr 21 22:05:35.351532 2026] [:error] [pid 4823:tid 4867] [client 20.250.25.241:7954] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aeeEL_c8mke3PfHqsxEHkQAAAY4"]
[Tue Apr 21 22:05:35.892050 2026] [:error] [pid 35320:tid 35336] [client 20.250.25.241:7986] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "aeeEL4JW6fdXWO6agMHpWgAAAAY"]
[Tue Apr 21 22:05:36.687678 2026] [:error] [pid 35322:tid 35358] [client 20.250.25.241:7982] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aeeEMKPoAfV40BTfVKzgsAAAAIE"]
[Tue Apr 21 22:05:37.256861 2026] [:error] [pid 35320:tid 35353] [client 20.250.25.241:8051] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aeeEMYJW6fdXWO6agMHpXQAAABc"]
[Tue Apr 21 22:05:37.977545 2026] [:error] [pid 35321:tid 35408] [client 20.250.25.241:8057] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aeeEMTeHLhVUuu8cVXzYKAAAAFg"]
[Tue Apr 21 22:05:38.760108 2026] [:error] [pid 35321:tid 35394] [client 20.250.25.241:8006] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "aeeEMjeHLhVUuu8cVXzYKwAAAEo"]
[Tue Apr 21 22:05:39.243019 2026] [:error] [pid 53731:tid 53744] [client 20.250.25.241:8117] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeeEM12I9THUR-bRVGyB0AAAAgk"]
[Tue Apr 21 22:05:39.744866 2026] [:error] [pid 53832:tid 53850] [client 20.250.25.241:8143] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeeEM9zkuxsE_OhM9UJ3PQAAAk8"]
[Tue Apr 21 22:05:40.494678 2026] [:error] [pid 35320:tid 35340] [client 20.250.25.241:7969] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeeENIJW6fdXWO6agMHpYQAAAAo"]
[Tue Apr 21 22:05:41.265299 2026] [:error] [pid 54080:tid 54104] [client 20.250.25.241:7882] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeeENYzEbQHHxtmWbabJHgAAAtY"]
[Tue Apr 21 22:05:42.525537 2026] [:error] [pid 53731:tid 53737] [client 20.250.25.241:8058] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeeENl2I9THUR-bRVGyB3QAAAgI"]
[Tue Apr 21 22:05:43.171268 2026] [:error] [pid 4823:tid 4860] [client 20.250.25.241:7992] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeeEN_c8mke3PfHqsxEHlwAAAYc"]
[Tue Apr 21 22:05:43.989845 2026] [:error] [pid 35321:tid 35408] [client 20.250.25.241:8012] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeeENzeHLhVUuu8cVXzYOwAAAFg"]
[Tue Apr 21 22:05:44.766083 2026] [:error] [pid 54080:tid 54091] [client 20.250.25.241:8013] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maxro.php"] [unique_id "aeeEOIzEbQHHxtmWbabJJgAAAsk"]
[Tue Apr 21 22:05:45.269856 2026] [:error] [pid 53731:tid 53754] [client 20.250.25.241:8019] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "aeeEOV2I9THUR-bRVGyB7AAAAhI"]
[Tue Apr 21 22:05:45.851283 2026] [:error] [pid 35322:tid 35371] [client 20.250.25.241:7974] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "aeeEOaPoAfV40BTfVKzgtAAAAI4"]
[Tue Apr 21 22:05:46.686624 2026] [:error] [pid 35320:tid 35334] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Tue Apr 21 22:05:46.926552 2026] [:error] [pid 35320:tid 35352] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Tue Apr 21 22:05:47.165147 2026] [:error] [pid 35320:tid 35335] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 21 22:05:47.415328 2026] [:error] [pid 35320:tid 35346] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Tue Apr 21 22:05:47.654058 2026] [:error] [pid 35320:tid 35331] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Tue Apr 21 22:05:47.976435 2026] [:error] [pid 35320:tid 35344] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny2.php
[Tue Apr 21 22:05:48.266915 2026] [:error] [pid 35320:tid 35353] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Tue Apr 21 22:05:48.531599 2026] [:error] [pid 35320:tid 35354] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Tue Apr 21 22:05:48.849159 2026] [:error] [pid 35320:tid 35350] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Tue Apr 21 22:05:49.095282 2026] [:error] [pid 35320:tid 35340] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Tue Apr 21 22:05:49.341299 2026] [:error] [pid 35320:tid 35351] [client 20.250.25.241:7953] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Tue Apr 21 22:05:49.577538 2026] [:error] [pid 35320:tid 35348] [client 20.250.25.241:7953] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeeEPYJW6fdXWO6agMHpdwAAABI"]
[Tue Apr 21 22:05:50.219480 2026] [:error] [pid 35322:tid 35357] [client 20.250.25.241:7989] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeeEPqPoAfV40BTfVKzgtQAAAIA"]
[Tue Apr 21 22:05:50.902791 2026] [:error] [pid 35321:tid 35386] [client 20.250.25.241:8110] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeeEPjeHLhVUuu8cVXzYSwAAAEI"]
[Tue Apr 21 22:05:52.051362 2026] [:error] [pid 53978:tid 53998] [client 20.250.25.241:7990] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeeEQJ1ivsR4hcOSQbY0YgAAApI"]
[Tue Apr 21 22:05:53.377647 2026] [:error] [pid 4823:tid 4868] [client 20.250.25.241:7958] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeeEQfc8mke3PfHqsxEHngAAAY8"]
[Tue Apr 21 22:05:56.556463 2026] [:error] [pid 4777:tid 4803] [client 20.250.25.241:7899] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeeERKxXur6bykKyLZSyJwAAAQ8"]
[Tue Apr 21 22:05:58.738958 2026] [:error] [pid 4777:tid 4795] [client 20.250.25.241:7959] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeeERqxXur6bykKyLZSyKAAAAQc"]
[Tue Apr 21 22:05:59.274379 2026] [:error] [pid 35321:tid 35407] [client 20.250.25.241:7886] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeeERzeHLhVUuu8cVXzYXAAAAFc"]
[Tue Apr 21 22:06:00.130710 2026] [:error] [pid 35321:tid 35408] [client 20.250.25.241:7904] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeeESDeHLhVUuu8cVXzYXgAAAFg"]
[Tue Apr 21 22:06:00.678791 2026] [:error] [pid 4777:tid 4792] [client 20.250.25.241:8087] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeeESKxXur6bykKyLZSyMQAAAQQ"]
[Tue Apr 21 22:06:01.605601 2026] [:error] [pid 35320:tid 35338] [client 20.250.25.241:7968] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeeESYJW6fdXWO6agMHpeAAAAAg"]
[Tue Apr 21 22:06:02.686925 2026] [:error] [pid 35320:tid 35336] [client 20.250.25.241:8094] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeeESoJW6fdXWO6agMHpegAAAAY"]
[Tue Apr 21 22:06:03.626034 2026] [:error] [pid 35320:tid 35341] [client 20.250.25.241:7957] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeeES4JW6fdXWO6agMHpfgAAAAs"]
[Tue Apr 21 22:06:04.125345 2026] [:error] [pid 35320:tid 35353] [client 20.250.25.241:7913] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeeETIJW6fdXWO6agMHpggAAABc"]
[Tue Apr 21 22:06:04.730945 2026] [:error] [pid 35320:tid 35330] [client 20.250.25.241:8060] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeeETIJW6fdXWO6agMHpiQAAAAA"]
[Tue Apr 21 22:06:05.550655 2026] [:error] [pid 35320:tid 35352] [client 20.250.25.241:7885] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeeETYJW6fdXWO6agMHpkAAAABY"]
[Tue Apr 21 22:06:06.189505 2026] [:error] [pid 35320:tid 35353] [client 20.250.25.241:7978] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeeEToJW6fdXWO6agMHplAAAABc"]
[Tue Apr 21 22:06:06.769129 2026] [:error] [pid 35320:tid 35346] [client 20.250.25.241:8044] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeeEToJW6fdXWO6agMHpmgAAABA"]
[Tue Apr 21 22:06:07.417714 2026] [:error] [pid 54080:tid 54091] [client 20.250.25.241:8026] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeeET4zEbQHHxtmWbabJSQAAAsk"]
[Tue Apr 21 22:06:07.960956 2026] [:error] [pid 54080:tid 54085] [client 20.250.25.241:7962] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeeET4zEbQHHxtmWbabJSgAAAsM"]
[Tue Apr 21 22:06:08.648828 2026] [:error] [pid 35415:tid 35431] [client 20.250.25.241:7898] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeEUEiqDinI4_22zzh6UQAAAMQ"]
[Tue Apr 21 22:06:09.762775 2026] [:error] [pid 35321:tid 35407] [client 20.250.25.241:7980] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeEUTeHLhVUuu8cVXzYawAAAFc"]
[Tue Apr 21 22:06:10.456517 2026] [:error] [pid 35320:tid 35343] [client 20.250.25.241:7878] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeEUoJW6fdXWO6agMHppwAAAA0"]
[Tue Apr 21 22:06:10.980281 2026] [:error] [pid 35321:tid 35404] [client 20.250.25.241:7887] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeeEUjeHLhVUuu8cVXzYbAAAAFQ"]
[Tue Apr 21 22:06:11.689560 2026] [:error] [pid 35321:tid 35387] [client 20.250.25.241:7987] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeeEUzeHLhVUuu8cVXzYcAAAAEM"]
[Tue Apr 21 22:06:12.273492 2026] [:error] [pid 35320:tid 35344] [client 20.250.25.241:8151] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeeEVIJW6fdXWO6agMHpqgAAAA4"]
[Tue Apr 21 22:06:12.811688 2026] [:error] [pid 53978:tid 53993] [client 20.250.25.241:8062] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeeEVJ1ivsR4hcOSQbY0ZwAAAo0"]
[Tue Apr 21 22:06:13.368391 2026] [:error] [pid 35321:tid 35390] [client 20.250.25.241:7894] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeeEVTeHLhVUuu8cVXzYcwAAAEY"]
[Tue Apr 21 22:06:14.146525 2026] [:error] [pid 53978:tid 54002] [client 20.250.25.241:8112] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeeEVp1ivsR4hcOSQbY0aQAAApY"]
[Tue Apr 21 22:06:14.751458 2026] [:error] [pid 53731:tid 53758] [client 20.250.25.241:7934] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeeEVl2I9THUR-bRVGyB-QAAAhY"]
[Tue Apr 21 22:06:16.551708 2026] [:error] [pid 54080:tid 54100] [client 20.250.25.241:7956] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeeEWIzEbQHHxtmWbabJUQAAAtI"]
[Tue Apr 21 22:06:18.150837 2026] [:error] [pid 35321:tid 35408] [client 20.250.25.241:8052] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeeEWjeHLhVUuu8cVXzYfgAAAFg"]
[Tue Apr 21 22:06:20.967136 2026] [:error] [pid 35321:tid 35404] [client 20.250.25.241:7896] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeeEXDeHLhVUuu8cVXzYiQAAAFQ"]
[Tue Apr 21 22:06:22.496837 2026] [:error] [pid 54080:tid 54097] [client 20.250.25.241:8063] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeeEXozEbQHHxtmWbabJXgAAAs8"]
[Tue Apr 21 22:06:23.624570 2026] [:error] [pid 35320:tid 35346] [client 20.250.25.241:8101] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeeEX4JW6fdXWO6agMHpvwAAABA"]
[Tue Apr 21 22:06:25.071480 2026] [:error] [pid 53978:tid 53984] [client 20.250.25.241:8119] [client 20.250.25.241] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp-image.php"] [unique_id "aeeEYZ1ivsR4hcOSQbY0awAAAoQ"]
[Tue Apr 21 23:49:20.228470 2026] [:error] [pid 35320:tid 35341] [client 129.226.93.214:41534] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeecgIJW6fdXWO6agMExbwAAAAs"]
[Wed Apr 22 02:52:04.743839 2026] [:error] [pid 53832:tid 53835] [client 14.215.163.132:38606] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aefHVNzkuxsE_OhM9UKnrgAAAkA"]
[Wed Apr 22 06:15:17.845555 2026] [:error] [pid 21683:tid 21751] [client 43.135.115.233:51582] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aef29VZBWT-0diZyYyaOJwAAAIE"]
[Wed Apr 22 10:29:32.806165 2026] [:error] [pid 31756:tid 31802] [client 43.154.140.188:40242] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aegyjN_WbkXbHaEfhd0LOQAAAko"]
[Wed Apr 22 17:16:56.218768 2026] [:error] [pid 6250:tid 6272] [client 170.106.8.20:40156] [client 170.106.8.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeiSCA-iZeQkqmQVfj7UaQAAAFI"]
[Wed Apr 22 19:29:37.459316 2026] [:error] [pid 9085:tid 9105] [client 129.226.93.214:33212] [client 129.226.93.214] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeixId-_-or9vQnlWno4XgAAAVI"]
[Wed Apr 22 19:47:14.422067 2026] [:error] [pid 6251:tid 6292] [client 43.159.130.67:33896] [client 43.159.130.67] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aei1QisFAzbyObL-SQ5ycgAAAIc"]
[Wed Apr 22 21:58:05.946596 2026] [:error] [pid 23776:tid 23793] [client 49.233.45.47:33446] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aejT7bRExf-1pAbSeJsOGAAAAY8"]
[Wed Apr 22 23:32:54.387948 2026] [:error] [pid 6250:tid 6264] [client 43.135.135.57:53308] [client 43.135.135.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aejqJg-iZeQkqmQVfj4xBQAAAEo"]
[Thu Apr 23 00:19:02.899469 2026] [:error] [pid 6250:tid 6263] [client 140.213.179.24:50270] [client 140.213.179.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 140.213.179.24, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aej09g-iZeQkqmQVfj453AAAAEk"]
[Thu Apr 23 00:19:02.907072 2026] [:error] [pid 6250:tid 6263] [client 140.213.179.24:50270] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 23 02:16:05.153301 2026] [:error] [pid 6384:tid 6398] [client 43.130.3.122:57718] [client 43.130.3.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aekQZT58M3t15ICeWHXeXgAAAMs"]
[Thu Apr 23 03:06:41.474835 2026] [:error] [pid 9085:tid 9106] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Thu Apr 23 03:06:41.720868 2026] [:error] [pid 9085:tid 9089] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Thu Apr 23 03:06:41.963981 2026] [:error] [pid 9085:tid 9099] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Thu Apr 23 03:06:42.203865 2026] [:error] [pid 9085:tid 9105] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Thu Apr 23 03:06:42.443442 2026] [:error] [pid 9085:tid 9111] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Thu Apr 23 03:06:42.694243 2026] [:error] [pid 9085:tid 9104] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Apr 23 03:06:43.183286 2026] [:error] [pid 9085:tid 9092] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Thu Apr 23 03:06:43.424152 2026] [:error] [pid 9085:tid 9093] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Thu Apr 23 03:06:43.662347 2026] [:error] [pid 9085:tid 9091] [client 20.216.138.65:11211] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu Apr 23 03:06:43.897596 2026] [:error] [pid 9085:tid 9108] [client 20.216.138.65:11211] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aekcQ9-_-or9vQnlWnpbbAAAAVU"]
[Thu Apr 23 03:06:44.555488 2026] [:error] [pid 23776:tid 23788] [client 20.216.138.65:11255] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aekcRLRExf-1pAbSeJt1BwAAAYo"]
[Thu Apr 23 03:06:45.365859 2026] [:error] [pid 6384:tid 6393] [client 20.216.138.65:11206] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aekcRT58M3t15ICeWHXvWwAAAMY"]
[Thu Apr 23 03:06:46.087488 2026] [:error] [pid 6344:tid 6373] [client 20.216.138.65:11203] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aekcRkDOTF-pkQnDeUlQ_QAAABg"]
[Thu Apr 23 03:06:46.656146 2026] [:error] [pid 23776:tid 23785] [client 20.216.138.65:11225] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aekcRrRExf-1pAbSeJt1CwAAAYc"]
[Thu Apr 23 03:06:47.351705 2026] [:error] [pid 6251:tid 6305] [client 20.216.138.65:11215] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aekcRysFAzbyObL-SQ60bAAAAJQ"]
[Thu Apr 23 03:06:48.164303 2026] [:error] [pid 23776:tid 23779] [client 20.216.138.65:11208] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aekcSLRExf-1pAbSeJt1DQAAAYE"]
[Thu Apr 23 03:06:48.744700 2026] [:error] [pid 9085:tid 9109] [client 20.216.138.65:11153] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aekcSN-_-or9vQnlWnpbcgAAAVY"]
[Thu Apr 23 03:06:49.383843 2026] [:error] [pid 9085:tid 9101] [client 20.216.138.65:11250] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aekcSd-_-or9vQnlWnpbcwAAAU4"]
[Thu Apr 23 03:06:50.039016 2026] [:error] [pid 9085:tid 9107] [client 20.216.138.65:11151] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aekcSt-_-or9vQnlWnpbdgAAAVQ"]
[Thu Apr 23 03:06:50.626090 2026] [:error] [pid 6251:tid 6289] [client 20.216.138.65:11220] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aekcSisFAzbyObL-SQ60cQAAAIQ"]
[Thu Apr 23 03:06:51.193386 2026] [:error] [pid 9085:tid 9110] [client 20.216.138.65:11091] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aekcS9-_-or9vQnlWnpbegAAAVc"]
[Thu Apr 23 03:06:52.040879 2026] [:error] [pid 6344:tid 6353] [client 20.216.138.65:11229] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aekcTEDOTF-pkQnDeUlQ_gAAAAQ"]
[Thu Apr 23 03:06:52.794577 2026] [:error] [pid 23776:tid 23791] [client 20.216.138.65:11175] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aekcTLRExf-1pAbSeJt1DgAAAY0"]
[Thu Apr 23 03:06:53.608309 2026] [:error] [pid 6250:tid 6274] [client 20.216.138.65:11143] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aekcTQ-iZeQkqmQVfj5W3AAAAFQ"]
[Thu Apr 23 03:06:54.272502 2026] [:error] [pid 9085:tid 9111] [client 20.216.138.65:11249] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aekcTt-_-or9vQnlWnpbggAAAVg"]
[Thu Apr 23 03:06:54.923652 2026] [:error] [pid 6250:tid 6269] [client 20.216.138.65:11244] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aekcTg-iZeQkqmQVfj5W3QAAAE8"]
[Thu Apr 23 03:06:55.553685 2026] [:error] [pid 6250:tid 6261] [client 20.216.138.65:11171] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aekcTw-iZeQkqmQVfj5W3gAAAEc"]
[Thu Apr 23 03:06:57.001265 2026] [:error] [pid 6344:tid 6363] [client 20.216.138.65:11221] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aekcUUDOTF-pkQnDeUlRAQAAAA4"]
[Thu Apr 23 03:06:57.852742 2026] [:error] [pid 9085:tid 9093] [client 20.216.138.65:11216] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aekcUd-_-or9vQnlWnpbiAAAAUY"]
[Thu Apr 23 03:06:59.034670 2026] [:error] [pid 9085:tid 9097] [client 20.216.138.65:11246] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aekcU9-_-or9vQnlWnpbiwAAAUo"]
[Thu Apr 23 03:07:00.086789 2026] [:error] [pid 9085:tid 9102] [client 20.216.138.65:11165] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aekcVN-_-or9vQnlWnpbjwAAAU8"]
[Thu Apr 23 03:07:01.288787 2026] [:error] [pid 6384:tid 6404] [client 20.216.138.65:11248] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aekcVT58M3t15ICeWHXvYgAAANE"]
[Thu Apr 23 03:07:03.274666 2026] [:error] [pid 9085:tid 9105] [client 20.216.138.65:11149] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aekcV9-_-or9vQnlWnpbkgAAAVI"]
[Thu Apr 23 03:07:04.290826 2026] [:error] [pid 23776:tid 23792] [client 20.216.138.65:11213] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aekcWLRExf-1pAbSeJt1EQAAAY4"]
[Thu Apr 23 03:07:04.906372 2026] [:error] [pid 6384:tid 6391] [client 20.216.138.65:11202] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aekcWD58M3t15ICeWHXvbAAAAMQ"]
[Thu Apr 23 03:07:06.068478 2026] [:error] [pid 6344:tid 6354] [client 20.216.138.65:11136] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aekcWkDOTF-pkQnDeUlRAwAAAAU"]
[Thu Apr 23 03:07:07.609726 2026] [:error] [pid 6252:tid 6335] [client 20.216.138.65:11209] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aekcW-tGYuiYb1nWBpSNXQAAARc"]
[Thu Apr 23 03:07:09.437728 2026] [:error] [pid 6251:tid 6301] [client 20.216.138.65:11150] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aekcXSsFAzbyObL-SQ60eAAAAJA"]
[Thu Apr 23 03:07:10.478545 2026] [:error] [pid 6250:tid 6265] [client 20.216.138.65:11156] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aekcXg-iZeQkqmQVfj5W4gAAAEs"]
[Thu Apr 23 03:07:11.892620 2026] [:error] [pid 6344:tid 6358] [client 20.216.138.65:11085] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aekcX0DOTF-pkQnDeUlRBgAAAAk"]
[Thu Apr 23 03:07:13.714941 2026] [:error] [pid 9085:tid 9102] [client 20.216.138.65:11200] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aekcYd-_-or9vQnlWnpbmgAAAU8"]
[Thu Apr 23 03:07:14.508001 2026] [:error] [pid 6384:tid 6399] [client 20.216.138.65:11137] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aekcYj58M3t15ICeWHXvdAAAAMw"]
[Thu Apr 23 03:07:15.289413 2026] [:error] [pid 9085:tid 9105] [client 20.216.138.65:11157] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aekcY9-_-or9vQnlWnpbnAAAAVI"]
[Thu Apr 23 03:07:16.227332 2026] [:error] [pid 23776:tid 23791] [client 20.216.138.65:11259] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aekcZLRExf-1pAbSeJt1IgAAAY0"]
[Thu Apr 23 03:07:17.301363 2026] [:error] [pid 6344:tid 6351] [client 20.216.138.65:11210] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aekcZUDOTF-pkQnDeUlRCQAAAAI"]
[Thu Apr 23 03:07:17.910822 2026] [:error] [pid 6384:tid 6397] [client 20.216.138.65:11262] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bmi.php"] [unique_id "aekcZT58M3t15ICeWHXvdwAAAMo"]
[Thu Apr 23 03:07:18.510478 2026] [:error] [pid 9085:tid 9100] [client 20.216.138.65:11223] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bmi.php"] [unique_id "aekcZt-_-or9vQnlWnpbqAAAAU0"]
[Thu Apr 23 03:07:19.124204 2026] [:error] [pid 6384:tid 6391] [client 20.216.138.65:11162] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bmi.php"] [unique_id "aekcZz58M3t15ICeWHXveAAAAMQ"]
[Thu Apr 23 03:07:19.815934 2026] [:error] [pid 6384:tid 6410] [client 20.216.138.65:11242] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bmi.php"] [unique_id "aekcZz58M3t15ICeWHXvegAAANc"]
[Thu Apr 23 03:07:20.728737 2026] [:error] [pid 6384:tid 6396] [client 20.216.138.65:11080] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byypas.php"] [unique_id "aekcaD58M3t15ICeWHXvewAAAMk"]
[Thu Apr 23 03:07:21.408359 2026] [:error] [pid 23776:tid 23799] [client 20.216.138.65:11207] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byypas.php"] [unique_id "aekcabRExf-1pAbSeJt1KAAAAZU"]
[Thu Apr 23 03:07:22.363458 2026] [:error] [pid 6252:tid 6336] [client 20.216.138.65:11222] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byypas.php"] [unique_id "aekcautGYuiYb1nWBpSNYgAAARg"]
[Thu Apr 23 03:07:23.096900 2026] [:error] [pid 6384:tid 6400] [client 20.216.138.65:11231] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/byypas.php"] [unique_id "aekcaz58M3t15ICeWHXvfQAAAM0"]
[Thu Apr 23 03:07:24.325168 2026] [:error] [pid 9085:tid 9089] [client 20.216.138.65:11237] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aekcbN-_-or9vQnlWnpbrwAAAUI"]
[Thu Apr 23 03:07:25.118135 2026] [:error] [pid 9085:tid 9104] [client 20.216.138.65:11140] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aekcbd-_-or9vQnlWnpbtAAAAVE"]
[Thu Apr 23 03:07:26.228070 2026] [:error] [pid 9085:tid 9110] [client 20.216.138.65:11141] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aekcbt-_-or9vQnlWnpbugAAAVc"]
[Thu Apr 23 03:07:27.465410 2026] [:error] [pid 9085:tid 9108] [client 20.216.138.65:11148] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aekcb9-_-or9vQnlWnpbvgAAAVU"]
[Thu Apr 23 03:07:27.655430 2026] [:error] [pid 9085:tid 9104] [client 20.216.138.65:11140] [client 20.216.138.65] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "15.235.98.174_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "www.dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "aekcbd-_-or9vQnlWnpbtAAAAVE"]
[Thu Apr 23 03:07:29.013777 2026] [:error] [pid 6250:tid 6274] [client 20.216.138.65:11145] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aekccQ-iZeQkqmQVfj5W6AAAAFQ"]
[Thu Apr 23 03:07:30.734233 2026] [:error] [pid 9085:tid 9110] [client 20.216.138.65:11233] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aekcct-_-or9vQnlWnpbywAAAVc"]
[Thu Apr 23 03:07:32.369271 2026] [:error] [pid 23776:tid 23788] [client 20.216.138.65:11139] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aekcdLRExf-1pAbSeJt1MgAAAYo"]
[Thu Apr 23 03:07:33.296676 2026] [:error] [pid 23776:tid 23785] [client 20.216.138.65:11181] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-png.php"] [unique_id "aekcdbRExf-1pAbSeJt1NQAAAYc"]
[Thu Apr 23 03:07:34.299976 2026] [:error] [pid 23776:tid 23779] [client 20.216.138.65:11234] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aekcdrRExf-1pAbSeJt1NgAAAYE"]
[Thu Apr 23 03:07:36.432640 2026] [:error] [pid 6251:tid 6292] [client 20.216.138.65:11133] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aekceCsFAzbyObL-SQ60fgAAAIc"]
[Thu Apr 23 03:07:38.426111 2026] [:error] [pid 6252:tid 6321] [client 20.216.138.65:11147] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aekceutGYuiYb1nWBpSNZwAAAQk"]
[Thu Apr 23 03:07:39.264787 2026] [:error] [pid 23776:tid 23797] [client 20.216.138.65:11218] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wen.php"] [unique_id "aekce7RExf-1pAbSeJt1OQAAAZM"]
[Thu Apr 23 03:07:40.793113 2026] [:error] [pid 9085:tid 9096] [client 20.216.138.65:11161] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugin-install.php"] [unique_id "aekcfN-_-or9vQnlWnpb4wAAAUk"]
[Thu Apr 23 03:07:41.606307 2026] [:error] [pid 6384:tid 6411] [client 20.216.138.65:11146] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugin-install.php"] [unique_id "aekcfT58M3t15ICeWHXvjAAAANg"]
[Thu Apr 23 03:07:42.654896 2026] [:error] [pid 6251:tid 6285] [client 20.216.138.65:11090] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugin-install.php"] [unique_id "aekcfisFAzbyObL-SQ60ggAAAIA"]
[Thu Apr 23 03:07:43.513251 2026] [:error] [pid 23776:tid 23779] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Apr 23 03:07:43.999078 2026] [:error] [pid 23776:tid 23784] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Thu Apr 23 03:07:44.239102 2026] [:error] [pid 23776:tid 23801] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Thu Apr 23 03:07:44.485488 2026] [:error] [pid 23776:tid 23781] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 23 03:07:44.724628 2026] [:error] [pid 23776:tid 23782] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 03:07:45.332382 2026] [:error] [pid 23776:tid 23778] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/ws48.php
[Thu Apr 23 03:07:45.571419 2026] [:error] [pid 23776:tid 23800] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 23 03:07:45.826272 2026] [:error] [pid 23776:tid 23780] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Thu Apr 23 03:07:46.075951 2026] [:error] [pid 23776:tid 23786] [client 20.216.138.65:11205] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Thu Apr 23 03:07:46.312158 2026] [:error] [pid 23776:tid 23795] [client 20.216.138.65:11205] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "aekcgrRExf-1pAbSeJt1UwAAAZE"]
[Thu Apr 23 03:07:47.753081 2026] [:error] [pid 6344:tid 6373] [client 20.216.138.65:11214] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "aekcg0DOTF-pkQnDeUlRLgAAABg"]
[Thu Apr 23 03:07:48.651308 2026] [:error] [pid 23776:tid 23790] [client 20.216.138.65:11226] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "aekchLRExf-1pAbSeJt1VAAAAYw"]
[Thu Apr 23 03:07:49.576252 2026] [:error] [pid 9085:tid 9094] [client 20.216.138.65:11163] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "aekchd-_-or9vQnlWnpb_gAAAUc"]
[Thu Apr 23 03:07:50.585084 2026] [:error] [pid 23776:tid 23787] [client 20.216.138.65:11189] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eetu.php"] [unique_id "aekchrRExf-1pAbSeJt1WAAAAYk"]
[Thu Apr 23 03:07:51.138809 2026] [:error] [pid 23776:tid 23798] [client 20.216.138.65:11196] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eetu.php"] [unique_id "aekch7RExf-1pAbSeJt1WQAAAZQ"]
[Thu Apr 23 03:07:52.444434 2026] [:error] [pid 9085:tid 9108] [client 20.216.138.65:11183] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eetu.php"] [unique_id "aekciN-_-or9vQnlWnpcBQAAAVU"]
[Thu Apr 23 03:07:54.156299 2026] [:error] [pid 6344:tid 6358] [client 20.216.138.65:11169] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/eetu.php"] [unique_id "aekcikDOTF-pkQnDeUlRNAAAAAk"]
[Thu Apr 23 03:07:55.932339 2026] [:error] [pid 9085:tid 9110] [client 20.216.138.65:11260] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws66.php"] [unique_id "aekci9-_-or9vQnlWnpcEwAAAVc"]
[Thu Apr 23 03:07:56.821743 2026] [:error] [pid 9085:tid 9108] [client 20.216.138.65:11227] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws66.php"] [unique_id "aekcjN-_-or9vQnlWnpcGAAAAVU"]
[Thu Apr 23 03:07:58.839518 2026] [:error] [pid 9085:tid 9091] [client 20.216.138.65:11099] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws66.php"] [unique_id "aekcjt-_-or9vQnlWnpcIwAAAUQ"]
[Thu Apr 23 03:08:00.190331 2026] [:error] [pid 23776:tid 23779] [client 20.216.138.65:11077] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws66.php"] [unique_id "aekckLRExf-1pAbSeJt1XQAAAYE"]
[Thu Apr 23 03:08:01.505402 2026] [:error] [pid 6384:tid 6405] [client 20.216.138.65:11251] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aekckT58M3t15ICeWHXvmwAAANI"]
[Thu Apr 23 03:08:02.636300 2026] [:error] [pid 23776:tid 23785] [client 20.216.138.65:11107] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aekckrRExf-1pAbSeJt1YQAAAYc"]
[Thu Apr 23 03:08:03.979794 2026] [:error] [pid 6384:tid 6393] [client 20.216.138.65:11201] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aekckz58M3t15ICeWHXvowAAAMY"]
[Thu Apr 23 03:08:05.161647 2026] [:error] [pid 23776:tid 23778] [client 20.216.138.65:11258] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/file61.php"] [unique_id "aekclbRExf-1pAbSeJt1ZQAAAYA"]
[Thu Apr 23 03:08:05.846757 2026] [:error] [pid 9085:tid 9091] [client 20.216.138.65:11239] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asd.php"] [unique_id "aekcld-_-or9vQnlWnpcOAAAAUQ"]
[Thu Apr 23 03:08:06.757969 2026] [:error] [pid 9085:tid 9090] [client 20.216.138.65:11178] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asd.php"] [unique_id "aekclt-_-or9vQnlWnpcPQAAAUM"]
[Thu Apr 23 03:08:07.607812 2026] [:error] [pid 23776:tid 23786] [client 20.216.138.65:11086] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asd.php"] [unique_id "aekcl7RExf-1pAbSeJt1ZwAAAYg"]
[Thu Apr 23 03:08:08.245048 2026] [:error] [pid 9085:tid 9089] [client 20.216.138.65:11177] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asd.php"] [unique_id "aekcmN-_-or9vQnlWnpcQQAAAUI"]
[Thu Apr 23 03:08:09.141668 2026] [:error] [pid 6251:tid 6305] [client 20.216.138.65:11256] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aekcmSsFAzbyObL-SQ60igAAAJQ"]
[Thu Apr 23 03:08:10.203998 2026] [:error] [pid 6384:tid 6410] [client 20.216.138.65:11212] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aekcmj58M3t15ICeWHXvtQAAANc"]
[Thu Apr 23 03:08:10.958363 2026] [:error] [pid 6250:tid 6278] [client 20.216.138.65:11204] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aekcmg-iZeQkqmQVfj5W8wAAAFg"]
[Thu Apr 23 03:08:11.619740 2026] [:error] [pid 6384:tid 6398] [client 20.216.138.65:11013] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/xx.php"] [unique_id "aekcmz58M3t15ICeWHXvvAAAAMs"]
[Thu Apr 23 03:08:12.824527 2026] [:error] [pid 23776:tid 23784] [client 20.216.138.65:11185] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "aekcnLRExf-1pAbSeJt1bwAAAYY"]
[Thu Apr 23 03:08:13.523858 2026] [:error] [pid 6344:tid 6364] [client 20.216.138.65:11103] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "aekcnUDOTF-pkQnDeUlRSQAAAA8"]
[Thu Apr 23 03:08:14.931464 2026] [:error] [pid 9085:tid 9089] [client 20.216.138.65:11168] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "aekcnt-_-or9vQnlWnpcTAAAAUI"]
[Thu Apr 23 03:08:16.132634 2026] [:error] [pid 9085:tid 9087] [client 20.216.138.65:11179] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a5.php"] [unique_id "aekcoN-_-or9vQnlWnpcVAAAAUA"]
[Thu Apr 23 03:08:17.276690 2026] [:error] [pid 9085:tid 9089] [client 20.216.138.65:11228] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aekcod-_-or9vQnlWnpcXQAAAUI"]
[Thu Apr 23 03:08:18.312034 2026] [:error] [pid 6250:tid 6254] [client 20.216.138.65:11108] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aekcog-iZeQkqmQVfj5W-wAAAEA"]
[Thu Apr 23 03:08:19.115204 2026] [:error] [pid 6252:tid 6324] [client 20.216.138.65:11073] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aekco-tGYuiYb1nWBpSNbwAAAQw"]
[Thu Apr 23 03:08:20.059055 2026] [:error] [pid 9085:tid 9098] [client 20.216.138.65:11142] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cu.php"] [unique_id "aekcpN-_-or9vQnlWnpcYgAAAUs"]
[Thu Apr 23 03:08:20.824757 2026] [:error] [pid 9085:tid 9088] [client 20.216.138.65:11247] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aekcpN-_-or9vQnlWnpcZQAAAUE"]
[Thu Apr 23 03:08:21.782614 2026] [:error] [pid 9085:tid 9092] [client 20.216.138.65:11160] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aekcpd-_-or9vQnlWnpcagAAAUU"]
[Thu Apr 23 03:08:22.592880 2026] [:error] [pid 9085:tid 9093] [client 20.216.138.65:11245] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aekcpt-_-or9vQnlWnpcawAAAUY"]
[Thu Apr 23 03:08:23.563314 2026] [:error] [pid 9085:tid 9088] [client 20.216.138.65:11238] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/amax.php"] [unique_id "aekcp9-_-or9vQnlWnpcbgAAAUE"]
[Thu Apr 23 03:08:25.023941 2026] [:error] [pid 6344:tid 6362] [client 20.216.138.65:11236] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mh.php"] [unique_id "aekcqUDOTF-pkQnDeUlRWQAAAA0"]
[Thu Apr 23 03:08:27.346086 2026] [:error] [pid 6384:tid 6405] [client 20.216.138.65:11263] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mh.php"] [unique_id "aekcqz58M3t15ICeWHXv6AAAANI"]
[Thu Apr 23 03:08:28.437400 2026] [:error] [pid 6384:tid 6394] [client 20.216.138.65:11092] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mh.php"] [unique_id "aekcrD58M3t15ICeWHXv7gAAAMc"]
[Thu Apr 23 03:08:29.034122 2026] [:error] [pid 6384:tid 6398] [client 20.216.138.65:11166] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mh.php"] [unique_id "aekcrT58M3t15ICeWHXv8gAAAMs"]
[Thu Apr 23 03:08:29.616967 2026] [:error] [pid 23776:tid 23792] [client 20.216.138.65:11198] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "aekcrbRExf-1pAbSeJt1eAAAAY4"]
[Thu Apr 23 03:08:30.171338 2026] [:error] [pid 9085:tid 9088] [client 20.216.138.65:11106] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "aekcrt-_-or9vQnlWnpceQAAAUE"]
[Thu Apr 23 03:08:30.846071 2026] [:error] [pid 23776:tid 23782] [client 20.216.138.65:11115] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "aekcrrRExf-1pAbSeJt1fQAAAYQ"]
[Thu Apr 23 03:08:31.494757 2026] [:error] [pid 23776:tid 23786] [client 20.216.138.65:11187] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "aekcr7RExf-1pAbSeJt1ggAAAYg"]
[Thu Apr 23 03:08:33.179619 2026] [:error] [pid 6252:tid 6334] [client 20.216.138.65:11193] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "aekcsetGYuiYb1nWBpSNdwAAARY"]
[Thu Apr 23 03:08:35.552912 2026] [:error] [pid 9085:tid 9105] [client 20.216.138.65:11138] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "aekcs9-_-or9vQnlWnpcfQAAAVI"]
[Thu Apr 23 03:08:39.367429 2026] [:error] [pid 6344:tid 6349] [client 20.216.138.65:11110] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "aekct0DOTF-pkQnDeUlRagAAAAA"]
[Thu Apr 23 03:08:40.920649 2026] [:error] [pid 6384:tid 6387] [client 20.216.138.65:11122] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "aekcuD58M3t15ICeWHXwBgAAAMA"]
[Thu Apr 23 03:08:43.454219 2026] [:error] [pid 6344:tid 6364] [client 20.216.138.65:11232] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aekcu0DOTF-pkQnDeUlRcgAAAA8"]
[Thu Apr 23 03:08:44.759186 2026] [:error] [pid 6384:tid 6393] [client 20.216.138.65:11190] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aekcvD58M3t15ICeWHXwDwAAAMY"]
[Thu Apr 23 03:08:45.946854 2026] [:error] [pid 6384:tid 6401] [client 20.216.138.65:11195] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aekcvT58M3t15ICeWHXwGAAAAM4"]
[Thu Apr 23 03:08:48.066120 2026] [:error] [pid 6344:tid 6363] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 03:08:48.332016 2026] [:error] [pid 6344:tid 6349] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Thu Apr 23 03:08:48.600361 2026] [:error] [pid 6344:tid 6369] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Thu Apr 23 03:08:49.146196 2026] [:error] [pid 6344:tid 6351] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Thu Apr 23 03:08:49.432837 2026] [:error] [pid 6344:tid 6358] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/tymn.php
[Thu Apr 23 03:08:49.720557 2026] [:error] [pid 6344:tid 6371] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 03:08:49.986708 2026] [:error] [pid 6344:tid 6355] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Apr 23 03:08:50.277674 2026] [:error] [pid 6344:tid 6366] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Thu Apr 23 03:08:50.545457 2026] [:error] [pid 6344:tid 6365] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Thu Apr 23 03:08:50.813474 2026] [:error] [pid 6344:tid 6367] [client 20.216.138.65:11100] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-atom.php
[Thu Apr 23 03:08:51.077920 2026] [:error] [pid 6344:tid 6352] [client 20.216.138.65:11100] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aekcw0DOTF-pkQnDeUlRgAAAAAM"]
[Thu Apr 23 03:08:52.183852 2026] [:error] [pid 23776:tid 23789] [client 20.216.138.65:11094] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aekcxLRExf-1pAbSeJt1ogAAAYs"]
[Thu Apr 23 03:08:53.041908 2026] [:error] [pid 23776:tid 23798] [client 20.216.138.65:11241] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aekcxbRExf-1pAbSeJt1pQAAAZQ"]
[Thu Apr 23 03:08:54.003643 2026] [:error] [pid 9085:tid 9089] [client 20.216.138.65:11084] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "aekcxt-_-or9vQnlWnpcvAAAAUI"]
[Thu Apr 23 03:08:54.867813 2026] [:error] [pid 23776:tid 23778] [client 20.216.138.65:11135] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/press.php"] [unique_id "aekcxrRExf-1pAbSeJt1qAAAAYA"]
[Thu Apr 23 03:08:55.681741 2026] [:error] [pid 23776:tid 23793] [client 20.216.138.65:11243] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/press.php"] [unique_id "aekcx7RExf-1pAbSeJt1qQAAAY8"]
[Thu Apr 23 03:08:56.535249 2026] [:error] [pid 23776:tid 23799] [client 20.216.138.65:11012] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/press.php"] [unique_id "aekcyLRExf-1pAbSeJt1qwAAAZU"]
[Thu Apr 23 03:08:57.116353 2026] [:error] [pid 6344:tid 6361] [client 20.216.138.65:11261] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/press.php"] [unique_id "aekcyUDOTF-pkQnDeUlRhQAAAAw"]
[Thu Apr 23 03:08:58.596131 2026] [:error] [pid 23776:tid 23786] [client 20.216.138.65:11194] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/900.php"] [unique_id "aekcyrRExf-1pAbSeJt1rgAAAYg"]
[Thu Apr 23 03:08:59.709708 2026] [:error] [pid 6344:tid 6349] [client 20.216.138.65:11081] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/900.php"] [unique_id "aekcy0DOTF-pkQnDeUlRhwAAAAA"]
[Thu Apr 23 03:09:01.203515 2026] [:error] [pid 6344:tid 6372] [client 20.216.138.65:11125] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/900.php"] [unique_id "aekczUDOTF-pkQnDeUlRiQAAABc"]
[Thu Apr 23 03:09:03.621854 2026] [:error] [pid 6384:tid 6402] [client 20.216.138.65:11197] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/900.php"] [unique_id "aekczz58M3t15ICeWHXwKgAAAM8"]
[Thu Apr 23 03:09:06.594605 2026] [:error] [pid 9085:tid 9089] [client 20.216.138.65:11131] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekc0t-_-or9vQnlWnpc1gAAAUI"]
[Thu Apr 23 03:09:08.943623 2026] [:error] [pid 6252:tid 6328] [client 20.216.138.65:11111] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekc1OtGYuiYb1nWBpSNewAAARA"]
[Thu Apr 23 03:09:10.756321 2026] [:error] [pid 6250:tid 6270] [client 20.216.138.65:11093] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekc1g-iZeQkqmQVfj5XHwAAAFA"]
[Thu Apr 23 03:09:12.241728 2026] [:error] [pid 23776:tid 23800] [client 20.216.138.65:11019] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "aekc2LRExf-1pAbSeJt1tgAAAZY"]
[Thu Apr 23 03:09:14.059703 2026] [:error] [pid 6384:tid 6410] [client 20.216.138.65:11025] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aekc2j58M3t15ICeWHXwMQAAANc"]
[Thu Apr 23 03:09:15.998439 2026] [:error] [pid 6252:tid 6335] [client 20.216.138.65:11038] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aekc2-tGYuiYb1nWBpSNfgAAARc"]
[Thu Apr 23 03:09:18.382590 2026] [:error] [pid 6252:tid 6332] [client 20.216.138.65:11240] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aekc3utGYuiYb1nWBpSNgwAAARQ"]
[Thu Apr 23 03:09:20.294493 2026] [:error] [pid 9085:tid 9106] [client 20.216.138.65:11184] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aekc4N-_-or9vQnlWnpc4gAAAVM"]
[Thu Apr 23 03:09:20.990047 2026] [:error] [pid 9085:tid 9099] [client 20.216.138.65:11173] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aekc4N-_-or9vQnlWnpc5gAAAUw"]
[Thu Apr 23 03:09:21.999622 2026] [:error] [pid 9085:tid 9087] [client 20.216.138.65:11120] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aekc4d-_-or9vQnlWnpc6wAAAUA"]
[Thu Apr 23 03:09:22.653297 2026] [:error] [pid 9085:tid 9093] [client 20.216.138.65:11087] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aekc4t-_-or9vQnlWnpc7wAAAUY"]
[Thu Apr 23 03:09:23.362875 2026] [:error] [pid 9085:tid 9095] [client 20.216.138.65:11011] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aekc49-_-or9vQnlWnpc8AAAAUg"]
[Thu Apr 23 03:09:24.076718 2026] [:error] [pid 9085:tid 9090] [client 20.216.138.65:11009] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aekc5N-_-or9vQnlWnpc9gAAAUM"]
[Thu Apr 23 03:09:25.968007 2026] [:error] [pid 6251:tid 6305] [client 20.216.138.65:11117] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aekc5SsFAzbyObL-SQ60-wAAAJQ"]
[Thu Apr 23 03:09:27.501020 2026] [:error] [pid 9085:tid 9095] [client 20.216.138.65:11257] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aekc59-_-or9vQnlWnpc_AAAAUg"]
[Thu Apr 23 03:09:28.634797 2026] [:error] [pid 6344:tid 6355] [client 20.216.138.65:10955] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aekc6EDOTF-pkQnDeUlRnQAAAAY"]
[Thu Apr 23 03:09:29.666783 2026] [:error] [pid 9085:tid 9094] [client 20.216.138.65:11158] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mini.php"] [unique_id "aekc6d-_-or9vQnlWnpdAgAAAUc"]
[Thu Apr 23 03:09:30.695395 2026] [:error] [pid 9085:tid 9092] [client 20.216.138.65:11152] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mini.php"] [unique_id "aekc6t-_-or9vQnlWnpdBQAAAUU"]
[Thu Apr 23 03:09:31.510225 2026] [:error] [pid 6251:tid 6287] [client 20.216.138.65:11252] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mini.php"] [unique_id "aekc6ysFAzbyObL-SQ60_AAAAII"]
[Thu Apr 23 03:09:33.241561 2026] [:error] [pid 9085:tid 9093] [client 20.216.138.65:11172] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mini.php"] [unique_id "aekc7d-_-or9vQnlWnpdCwAAAUY"]
[Thu Apr 23 03:09:34.661458 2026] [:error] [pid 6344:tid 6371] [client 20.216.138.65:11097] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aekc7kDOTF-pkQnDeUlRngAAABY"]
[Thu Apr 23 03:09:36.574469 2026] [:error] [pid 6344:tid 6366] [client 20.216.138.65:11068] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aekc8EDOTF-pkQnDeUlRoAAAABE"]
[Thu Apr 23 03:09:39.274467 2026] [:error] [pid 9085:tid 9100] [client 20.216.138.65:11186] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aekc89-_-or9vQnlWnpdGwAAAU0"]
[Thu Apr 23 03:09:43.103326 2026] [:error] [pid 6384:tid 6405] [client 20.216.138.65:11192] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aekc9z58M3t15ICeWHXwUQAAANI"]
[Thu Apr 23 03:09:46.149743 2026] [:error] [pid 6384:tid 6397] [client 20.216.138.65:11254] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mode.php"] [unique_id "aekc-j58M3t15ICeWHXwVgAAAMo"]
[Thu Apr 23 03:09:48.435392 2026] [:error] [pid 9085:tid 9097] [client 20.216.138.65:11191] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mode.php"] [unique_id "aekc_N-_-or9vQnlWnpdMwAAAUo"]
[Thu Apr 23 03:09:49.489231 2026] [:error] [pid 23776:tid 23789] [client 20.216.138.65:11015] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mode.php"] [unique_id "aekc_bRExf-1pAbSeJt2EQAAAYs"]
[Thu Apr 23 03:09:50.357241 2026] [:error] [pid 9085:tid 9110] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Thu Apr 23 03:09:50.595522 2026] [:error] [pid 9085:tid 9092] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 23 03:09:50.834575 2026] [:error] [pid 9085:tid 9098] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Thu Apr 23 03:09:51.075099 2026] [:error] [pid 9085:tid 9101] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Thu Apr 23 03:09:51.329024 2026] [:error] [pid 9085:tid 9109] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/adoms.php
[Thu Apr 23 03:09:51.567731 2026] [:error] [pid 9085:tid 9093] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Thu Apr 23 03:09:51.917996 2026] [:error] [pid 9085:tid 9100] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Thu Apr 23 03:09:52.157894 2026] [:error] [pid 9085:tid 9111] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Thu Apr 23 03:09:52.589495 2026] [:error] [pid 9085:tid 9098] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Thu Apr 23 03:09:53.276866 2026] [:error] [pid 9085:tid 9101] [client 20.216.138.65:11089] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Thu Apr 23 03:09:53.511936 2026] [:error] [pid 9085:tid 9102] [client 20.216.138.65:11089] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gaza.php"] [unique_id "aekdAd-_-or9vQnlWnpdTwAAAU8"]
[Thu Apr 23 03:09:54.045365 2026] [:error] [pid 6384:tid 6387] [client 20.216.138.65:11235] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gaza.php"] [unique_id "aekdAj58M3t15ICeWHXwYQAAAMA"]
[Thu Apr 23 03:09:54.729415 2026] [:error] [pid 6250:tid 6263] [client 20.216.138.65:11048] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gaza.php"] [unique_id "aekdAg-iZeQkqmQVfj5XNAAAAEk"]
[Thu Apr 23 03:09:55.281998 2026] [:error] [pid 23776:tid 23799] [client 20.216.138.65:11124] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gaza.php"] [unique_id "aekdA7RExf-1pAbSeJt2MgAAAZU"]
[Thu Apr 23 03:09:56.127092 2026] [:error] [pid 9085:tid 9110] [client 20.216.138.65:11023] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aekdBN-_-or9vQnlWnpdUAAAAVc"]
[Thu Apr 23 03:09:56.826585 2026] [:error] [pid 6252:tid 6312] [client 20.216.138.65:11164] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aekdBOtGYuiYb1nWBpSNlAAAAQA"]
[Thu Apr 23 03:09:57.622497 2026] [:error] [pid 23776:tid 23780] [client 20.216.138.65:11022] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aekdBbRExf-1pAbSeJt2OgAAAYI"]
[Thu Apr 23 03:09:58.218932 2026] [:error] [pid 23776:tid 23796] [client 20.216.138.65:11096] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aekdBrRExf-1pAbSeJt2PAAAAZI"]
[Thu Apr 23 03:09:59.478489 2026] [:error] [pid 23776:tid 23784] [client 20.216.138.65:11037] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aekdB7RExf-1pAbSeJt2QgAAAYY"]
[Thu Apr 23 03:10:00.211587 2026] [:error] [pid 6250:tid 6257] [client 20.216.138.65:11062] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aekdCA-iZeQkqmQVfj5XOwAAAEM"]
[Thu Apr 23 03:10:00.803610 2026] [:error] [pid 6250:tid 6261] [client 20.216.138.65:10982] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aekdCA-iZeQkqmQVfj5XPgAAAEc"]
[Thu Apr 23 03:10:01.651329 2026] [:error] [pid 9085:tid 9097] [client 20.216.138.65:11176] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aekdCd-_-or9vQnlWnpdWQAAAUo"]
[Thu Apr 23 03:10:02.890558 2026] [:error] [pid 23776:tid 23797] [client 20.216.138.65:11063] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aekdCrRExf-1pAbSeJt2SwAAAZM"]
[Thu Apr 23 03:10:03.722803 2026] [:error] [pid 6384:tid 6394] [client 20.216.138.65:11123] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aekdCz58M3t15ICeWHXwbwAAAMc"]
[Thu Apr 23 03:10:04.981365 2026] [:error] [pid 6344:tid 6369] [client 20.216.138.65:11044] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aekdDEDOTF-pkQnDeUlR8QAAABQ"]
[Thu Apr 23 03:10:05.807968 2026] [:error] [pid 6344:tid 6356] [client 20.216.138.65:11083] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aekdDUDOTF-pkQnDeUlR8wAAAAc"]
[Thu Apr 23 03:10:06.791524 2026] [:error] [pid 6344:tid 6366] [client 20.216.138.65:11000] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aekdDkDOTF-pkQnDeUlR9wAAABE"]
[Thu Apr 23 03:10:07.323323 2026] [:error] [pid 6344:tid 6370] [client 20.216.138.65:11114] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aekdD0DOTF-pkQnDeUlR-wAAABU"]
[Thu Apr 23 03:10:07.844967 2026] [:error] [pid 23776:tid 23779] [client 20.216.138.65:11074] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aekdD7RExf-1pAbSeJt2VAAAAYE"]
[Thu Apr 23 03:10:08.440660 2026] [:error] [pid 9085:tid 9111] [client 20.216.138.65:11020] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aekdEN-_-or9vQnlWnpdcwAAAVg"]
[Thu Apr 23 03:10:10.349661 2026] [:error] [pid 6384:tid 6389] [client 20.216.138.65:11130] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aekdEj58M3t15ICeWHXwgQAAAMI"]
[Thu Apr 23 03:10:11.198938 2026] [:error] [pid 6384:tid 6390] [client 20.216.138.65:11082] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aekdEz58M3t15ICeWHXwgwAAAMM"]
[Thu Apr 23 03:10:12.748675 2026] [:error] [pid 23776:tid 23796] [client 20.216.138.65:11042] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aekdFLRExf-1pAbSeJt2XgAAAZI"]
[Thu Apr 23 03:10:13.763987 2026] [:error] [pid 9085:tid 9102] [client 20.216.138.65:11119] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aekdFd-_-or9vQnlWnpdiAAAAU8"]
[Thu Apr 23 03:10:14.648735 2026] [:error] [pid 6384:tid 6400] [client 20.216.138.65:11102] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aekdFj58M3t15ICeWHXwhwAAAM0"]
[Thu Apr 23 03:10:15.573937 2026] [:error] [pid 6251:tid 6304] [client 20.216.138.65:11069] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aekdFysFAzbyObL-SQ60_wAAAJM"]
[Thu Apr 23 03:10:16.685459 2026] [:error] [pid 6251:tid 6285] [client 20.216.138.65:11033] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aekdGCsFAzbyObL-SQ61AAAAAIA"]
[Thu Apr 23 03:10:17.505535 2026] [:error] [pid 6250:tid 6271] [client 20.216.138.65:11118] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aekdGQ-iZeQkqmQVfj5XSwAAAFE"]
[Thu Apr 23 03:10:18.363016 2026] [:error] [pid 6251:tid 6300] [client 20.216.138.65:10976] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aekdGisFAzbyObL-SQ61BAAAAI8"]
[Thu Apr 23 03:10:19.642404 2026] [:error] [pid 9085:tid 9100] [client 20.216.138.65:11155] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aekdG9-_-or9vQnlWnpdnAAAAU0"]
[Thu Apr 23 03:10:20.717567 2026] [:error] [pid 9085:tid 9099] [client 20.216.138.65:11170] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aekdHN-_-or9vQnlWnpdoQAAAUw"]
[Thu Apr 23 03:10:21.387678 2026] [:error] [pid 9085:tid 9093] [client 20.216.138.65:11101] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aekdHd-_-or9vQnlWnpdpgAAAUY"]
[Thu Apr 23 03:10:22.141598 2026] [:error] [pid 6344:tid 6370] [client 20.216.138.65:11047] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aekdHkDOTF-pkQnDeUlSHwAAABU"]
[Thu Apr 23 03:10:22.890442 2026] [:error] [pid 6344:tid 6365] [client 20.216.138.65:11159] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aekdHkDOTF-pkQnDeUlSIgAAABA"]
[Thu Apr 23 03:10:23.646587 2026] [:error] [pid 6250:tid 6266] [client 20.216.138.65:11035] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aekdHw-iZeQkqmQVfj5XVgAAAEw"]
[Thu Apr 23 03:10:24.509067 2026] [:error] [pid 6384:tid 6411] [client 20.216.138.65:11144] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aekdID58M3t15ICeWHXwkAAAANg"]
[Thu Apr 23 03:10:25.262020 2026] [:error] [pid 6384:tid 6392] [client 20.216.138.65:11182] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aekdIT58M3t15ICeWHXwkwAAAMU"]
[Thu Apr 23 03:10:26.153119 2026] [:error] [pid 23776:tid 23802] [client 20.216.138.65:10944] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aekdIrRExf-1pAbSeJt2YgAAAZg"]
[Thu Apr 23 03:10:26.880981 2026] [:error] [pid 6384:tid 6393] [client 20.216.138.65:11224] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aekdIj58M3t15ICeWHXwmQAAAMY"]
[Thu Apr 23 03:10:27.799865 2026] [:error] [pid 9085:tid 9111] [client 20.216.138.65:11076] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aekdI9-_-or9vQnlWnpdtgAAAVg"]
[Thu Apr 23 03:10:28.818065 2026] [:error] [pid 6344:tid 6349] [client 20.216.138.65:10987] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mk.php"] [unique_id "aekdJEDOTF-pkQnDeUlSLQAAAAA"]
[Thu Apr 23 03:10:29.617182 2026] [:error] [pid 9085:tid 9105] [client 20.216.138.65:11079] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mk.php"] [unique_id "aekdJd-_-or9vQnlWnpdvAAAAVI"]
[Thu Apr 23 03:10:30.377099 2026] [:error] [pid 6384:tid 6400] [client 20.216.138.65:11054] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mk.php"] [unique_id "aekdJj58M3t15ICeWHXwogAAAM0"]
[Thu Apr 23 03:10:31.046715 2026] [:error] [pid 9085:tid 9108] [client 20.216.138.65:11180] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mk.php"] [unique_id "aekdJ9-_-or9vQnlWnpdwQAAAVU"]
[Thu Apr 23 03:10:32.269056 2026] [:error] [pid 23776:tid 23794] [client 20.216.138.65:11073] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "aekdKLRExf-1pAbSeJt2agAAAZA"]
[Thu Apr 23 03:10:33.095689 2026] [:error] [pid 6252:tid 6321] [client 20.216.138.65:11127] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "aekdKetGYuiYb1nWBpSNogAAAQk"]
[Thu Apr 23 03:10:34.519824 2026] [:error] [pid 6251:tid 6306] [client 20.216.138.65:11219] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "aekdKisFAzbyObL-SQ61CwAAAJU"]
[Thu Apr 23 03:10:35.354580 2026] [:error] [pid 23776:tid 23782] [client 20.216.138.65:11055] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gettest.php"] [unique_id "aekdK7RExf-1pAbSeJt2awAAAYQ"]
[Thu Apr 23 03:10:36.226648 2026] [:error] [pid 23776:tid 23799] [client 20.216.138.65:11113] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/a4.php"] [unique_id "aekdLLRExf-1pAbSeJt2bwAAAZU"]
[Thu Apr 23 03:10:47.479272 2026] [:error] [pid 39543:tid 39552] [client 20.216.138.65:11222] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rip.php"] [unique_id "aekdN_qaq-lq_H7LgCqvUAAAAAU"]
[Thu Apr 23 03:10:49.470672 2026] [:error] [pid 39545:tid 39607] [client 20.216.138.65:11167] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rip.php"] [unique_id "aekdOSoD1NPGiQYlmZALFAAAAIQ"]
[Thu Apr 23 03:10:50.951715 2026] [:error] [pid 39545:tid 39617] [client 20.216.138.65:11010] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rip.php"] [unique_id "aekdOioD1NPGiQYlmZALGwAAAI4"]
[Thu Apr 23 03:10:52.158762 2026] [:error] [pid 39545:tid 39621] [client 20.216.138.65:10971] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/rip.php"] [unique_id "aekdPCoD1NPGiQYlmZALHQAAAJI"]
[Thu Apr 23 03:10:53.440102 2026] [:error] [pid 39629:tid 39645] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 23 03:10:53.838598 2026] [:error] [pid 39629:tid 39646] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Thu Apr 23 03:10:54.120473 2026] [:error] [pid 39629:tid 39649] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Thu Apr 23 03:10:54.398100 2026] [:error] [pid 39629:tid 39652] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Thu Apr 23 03:10:54.673434 2026] [:error] [pid 39629:tid 39631] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu Apr 23 03:10:54.949358 2026] [:error] [pid 39629:tid 39633] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 23 03:10:59.526402 2026] [:error] [pid 39629:tid 39647] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Thu Apr 23 03:10:59.801386 2026] [:error] [pid 39629:tid 39648] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-api.php
[Thu Apr 23 03:11:00.077678 2026] [:error] [pid 39629:tid 39635] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Apr 23 03:11:00.421706 2026] [:error] [pid 39629:tid 39654] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 23 03:11:00.725600 2026] [:error] [pid 39629:tid 39638] [client 20.216.138.65:11253] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Thu Apr 23 03:11:00.997758 2026] [:error] [pid 39629:tid 39631] [client 20.216.138.65:11253] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aekdRCcSH5I1CwR8XpgepQAAAMA"]
[Thu Apr 23 03:11:01.632127 2026] [:error] [pid 39629:tid 39634] [client 20.216.138.65:11098] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aekdRScSH5I1CwR8XpgepgAAAMM"]
[Thu Apr 23 03:11:04.700433 2026] [:error] [pid 39791:tid 39799] [client 20.216.138.65:11153] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aekdSAcR4ZFEPgwUkRowcQAAAAU"]
[Thu Apr 23 03:11:05.602636 2026] [:error] [pid 39792:tid 39821] [client 20.216.138.65:11091] [client 20.216.138.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aekdSe6T89qD_dRKX78gnQAAAEA"]
[Thu Apr 23 06:44:10.225935 2026] [:error] [pid 25635:tid 25662] [client 43.135.179.51:57576] [client 43.135.179.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aelPOsRxv6UsgRGKB3K2jQAAARc"]
[Thu Apr 23 07:16:22.211899 2026] [:error] [pid 64967:tid 64971] [client 43.155.195.141:36468] [client 43.155.195.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aelWxoAV4GfOOdX8Qzr5yAAAAYI"]
[Thu Apr 23 07:21:31.367577 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 07:21:31.707824 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 07:21:32.387223 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 07:21:32.714742 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 07:21:33.198378 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 07:21:33.552661 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 07:21:33.885699 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 07:21:35.036295 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 07:21:35.993299 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 07:21:36.340658 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 07:21:36.729534 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 07:21:37.059683 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 07:21:37.433901 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 07:21:37.743426 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 07:21:38.436528 2026] [:error] [pid 42972:tid 43022] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 07:21:38.761524 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 07:21:39.115747 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 07:21:39.440320 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.121:43571] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 07:21:44.135848 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.121:43571] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYCMOAb-3sOknsk4cUDwAAAFI"]
[Thu Apr 23 07:21:45.777357 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.123:53179] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYCZXyGZJFeAIDWtlNkgAAAUk"]
[Thu Apr 23 07:21:47.508054 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.124:26535] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 07:21:48.595977 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.124:26535] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYDG6I0QqmmmLTHE3Q0AAAAJg"]
[Thu Apr 23 07:21:51.239892 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.142:30517] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 07:21:52.228341 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.142:30517] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYEJXyGZJFeAIDWtlNyQAAAVM"]
[Thu Apr 23 07:21:58.401623 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.113:40145] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 07:22:02.174664 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.113:40145] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYGpXyGZJFeAIDWtlOIwAAAVg"]
[Thu Apr 23 07:22:03.053042 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.121:61581] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYG4V5EysYcTLjmwjnUgAAAdQ"]
[Thu Apr 23 07:22:03.639002 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.143:39443] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYG76vRb9j6psK2ZaBlwAAAhg"]
[Thu Apr 23 07:22:04.307224 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.113:45579] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYHL6vRb9j6psK2ZaBqAAAAhY"]
[Thu Apr 23 07:22:04.935802 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.117:29445] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYHDC5hrvNXosL83K-MgAAAMI"]
[Thu Apr 23 07:22:05.551132 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.137:26003] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYHb6vRb9j6psK2ZaB0wAAAg4"]
[Thu Apr 23 07:22:06.506282 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.114:22575] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYHsRxv6UsgRGKB3LXgQAAAQY"]
[Thu Apr 23 07:22:07.139034 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.136:25597] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 07:22:07.827624 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.136:25597] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aelYHzC5hrvNXosL83K-cwAAAMA"]
[Thu Apr 23 07:22:09.288004 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.115:23959] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYIYV5EysYcTLjmwjn4AAAAcg"]
[Thu Apr 23 07:22:10.207896 2026] [:error] [pid 42973:tid 43059] [client 89.251.0.151:21143] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYIm6I0QqmmmLTHE3RZwAAAJA"]
[Thu Apr 23 07:22:10.806766 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.131:59073] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 07:22:11.103262 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.131:59073] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYIzC5hrvNXosL83K-nQAAAMg"]
[Thu Apr 23 07:22:11.708635 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.142:39369] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 07:22:12.633069 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.142:39369] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 07:22:13.571795 2026] [:error] [pid 25635:tid 25659] [client 89.251.0.142:39369] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYJcRxv6UsgRGKB3LX3wAAARQ"]
[Thu Apr 23 07:22:14.199330 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.151:30197] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 07:22:14.516686 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.151:30197] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYJr6vRb9j6psK2ZaCtgAAAgw"]
[Thu Apr 23 07:22:15.112748 2026] [:error] [pid 42973:tid 43045] [client 89.251.0.137:39913] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 07:22:15.758819 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.137:39913] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYJ26I0QqmmmLTHE3RnQAAAJc"]
[Thu Apr 23 07:22:16.699988 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.132:36863] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYKJXyGZJFeAIDWtlO1AAAAVQ"]
[Thu Apr 23 07:22:17.653517 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.119:37385] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 07:22:17.979696 2026] [:error] [pid 42973:tid 43052] [client 89.251.0.119:37385] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 07:22:18.634942 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.119:37385] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelYKm6I0QqmmmLTHE3RwAAAAJQ"]
[Thu Apr 23 07:22:19.622847 2026] [:error] [pid 25635:tid 25650] [client 89.251.0.148:29901] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYK8Rxv6UsgRGKB3LYGgAAAQs"]
[Thu Apr 23 07:22:20.559170 2026] [:error] [pid 25635:tid 25650] [client 89.251.0.148:58093] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYLMRxv6UsgRGKB3LYKAAAAQs"]
[Thu Apr 23 07:22:21.149635 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.133:34745] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelYLYV5EysYcTLjmwjocQAAAdA"]
[Thu Apr 23 07:22:21.846050 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.121:50861] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelYLcRxv6UsgRGKB3LYPAAAARE"]
[Thu Apr 23 07:22:23.138981 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.117:56673] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 07:22:23.483023 2026] [:error] [pid 42973:tid 43047] [client 89.251.0.117:56673] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelYL26I0QqmmmLTHE3R8QAAAIQ"]
[Thu Apr 23 07:22:24.103709 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.117:40419] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelYMDC5hrvNXosL83K_IgAAAMo"]
[Thu Apr 23 07:22:25.715842 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.147:59849] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelYMYV5EysYcTLjmwjomQAAAdY"]
[Thu Apr 23 07:22:27.096979 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.142:59629] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 23 07:22:27.739914 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.142:59629] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 23 07:22:29.310742 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.142:59629] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelYNcOAb-3sOknsk4cU8QAAAFA"]
[Thu Apr 23 07:22:31.498941 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.121:31567] [client 89.251.0.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.121, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelYN76vRb9j6psK2ZaD3QAAAhI"]
[Thu Apr 23 07:22:31.874115 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.121:31567] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 23 07:22:33.571128 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.121:31567] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 23 07:22:34.005129 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.121:31567] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 23 07:22:36.105426 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.121:31567] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelYPL6vRb9j6psK2ZaEWQAAAhA"]
[Thu Apr 23 07:22:37.337590 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.138:20857] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 23 07:22:37.755834 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.138:20857] [client 89.251.0.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.138, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelYPb6vRb9j6psK2ZaEegAAAhA"]
[Thu Apr 23 07:22:38.427168 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.138:20857] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelYPr6vRb9j6psK2ZaEjQAAAgs"]
[Thu Apr 23 07:22:40.404525 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.132:41055] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 23 07:22:41.112036 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.132:41055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 23 07:22:41.785703 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.132:41055] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelYQZXyGZJFeAIDWtlPnAAAAVA"]
[Thu Apr 23 07:22:42.444159 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.148:31869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 23 07:22:43.526852 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.148:31869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 23 07:22:44.191536 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.148:31869] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 23 07:22:44.820309 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.148:31869] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 23 07:22:45.081301 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.148:31869] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelYRb6vRb9j6psK2ZaFBwAAAhA"]
[Thu Apr 23 07:22:45.743200 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.126:48539] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 23 07:22:46.031021 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.126:48539] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 23 07:22:46.370781 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.126:48539] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelYRoV5EysYcTLjmwjpswAAAdc"]
[Thu Apr 23 07:22:47.388656 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.124:37177] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 23 07:22:48.023253 2026] [:error] [pid 42973:tid 43064] [client 89.251.0.124:37177] [client 89.251.0.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.124, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelYSG6I0QqmmmLTHE3TLAAAAJU"]
[Thu Apr 23 07:22:48.342915 2026] [:error] [pid 42973:tid 43061] [client 89.251.0.124:37177] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelYSG6I0QqmmmLTHE3TLwAAAJI"]
[Thu Apr 23 07:22:52.366084 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.151:47423] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 23 07:22:54.420794 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.151:47423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 23 07:22:54.822290 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.151:47423] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelYToV5EysYcTLjmwjqQQAAAco"]
[Thu Apr 23 07:22:55.435663 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.123:53687] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 23 07:22:56.373657 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.123:53687] [client 89.251.0.123] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.123, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelYUL6vRb9j6psK2ZaFywAAAgg"]
[Thu Apr 23 07:22:56.694584 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.123:53687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 23 07:22:57.003817 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.123:53687] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 23 07:22:57.026505 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.123:53687] [client 89.251.0.123] ModSecurity: collection_store: Failed to access DBM file "/tmp/ip": Resource deadlock avoided [hostname "dbservices.com.au"] [uri "/index.html"] [unique_id "aelYUL6vRb9j6psK2ZaF3gAAAgE"]
[Thu Apr 23 07:22:57.970035 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.146:47019] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 23 07:22:58.300740 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.146:47019] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelYUoV5EysYcTLjmwjqdAAAAc0"]
[Thu Apr 23 07:22:58.950817 2026] [:error] [pid 25635:tid 25658] [client 89.251.0.124:58363] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 23 07:22:59.249300 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.124:58363] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelYU8Rxv6UsgRGKB3LZqwAAAQQ"]
[Thu Apr 23 07:23:00.273289 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.135:50331] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 23 07:23:00.632863 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.135:50331] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelYVIAV4GfOOdX8QzoJcgAAAYk"]
[Thu Apr 23 07:23:02.047605 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.114:30155] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 23 07:23:02.466576 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.114:30155] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelYVr6vRb9j6psK2ZaGUgAAAg4"]
[Thu Apr 23 07:23:03.344663 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.124:47801] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelYV5XyGZJFeAIDWtlQlAAAAVU"]
[Thu Apr 23 07:23:13.591015 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.138:53311] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 23 07:23:46.275457 2026] [autoindex:error] [pid 59700:tid 59710] [client 89.251.0.150:52445] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:23:51.800879 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.127:20609] [client 89.251.0.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aelYh76vRb9j6psK2ZaLpwAAAhc"]
[Thu Apr 23 07:23:53.276825 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.147:47975] [client 89.251.0.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aelYicOAb-3sOknsk4cYFAAAAFQ"]
[Thu Apr 23 07:24:12.102264 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.144:37673] [client 89.251.0.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/news_event/"] [unique_id "aelYnL6vRb9j6psK2ZaNwgAAAg0"]
[Thu Apr 23 07:24:18.172877 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.134:27513] [client 89.251.0.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/includes/"] [unique_id "aelYooAV4GfOOdX8QzoLywAAAY4"]
[Thu Apr 23 07:24:37.687864 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.144:46409] [client 89.251.0.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/interactivity-api/"] [unique_id "aelYtTC5hrvNXosL83LD_wAAAM8"]
[Thu Apr 23 07:24:39.309498 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.131:55551] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/hideo/"] [unique_id "aelYt4AV4GfOOdX8QzoNUgAAAYA"]
[Thu Apr 23 07:25:24.743387 2026] [:error] [pid 64998:tid 65015] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 07:25:25.038005 2026] [:error] [pid 64998:tid 65010] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 07:25:25.329642 2026] [:error] [pid 64998:tid 65013] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 07:25:25.622630 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 07:25:25.940046 2026] [:error] [pid 64998:tid 65012] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 07:25:26.266066 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 07:25:26.558552 2026] [:error] [pid 64998:tid 65024] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 07:25:26.871054 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 07:25:27.590180 2026] [:error] [pid 64998:tid 65011] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 07:25:27.954932 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 07:25:28.261463 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 07:25:28.646414 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 07:25:28.949088 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 07:25:29.528976 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 07:25:29.838753 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 07:25:30.131598 2026] [:error] [pid 64998:tid 65006] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 07:25:30.445510 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 07:25:30.746790 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.186:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 07:25:35.503006 2026] [:error] [pid 64998:tid 65019] [client 185.192.71.186:27305] [client 185.192.71.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelY74V5EysYcTLjmwjyEwAAAdE"]
[Thu Apr 23 07:25:37.044167 2026] [:error] [pid 64998:tid 65013] [client 185.192.71.205:38383] [client 185.192.71.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelY8YV5EysYcTLjmwjyTAAAAcs"]
[Thu Apr 23 07:25:38.745395 2026] [:error] [pid 43083:tid 43103] [client 185.92.25.73:25169] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 07:25:39.648378 2026] [:error] [pid 43083:tid 43106] [client 185.92.25.73:25169] [client 185.92.25.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelY8zC5hrvNXosL83LGogAAANU"]
[Thu Apr 23 07:25:40.805253 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.203:40125] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 07:25:41.205059 2026] [:error] [pid 42971:tid 42987] [client 185.192.71.203:40125] [client 185.192.71.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelY9TEP2_5RswrH8bGk9wAAAAE"]
[Thu Apr 23 07:25:42.109872 2026] [:error] [pid 25635:tid 25662] [client 185.92.25.71:58045] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 07:25:43.548670 2026] [:error] [pid 25635:tid 25656] [client 185.92.25.71:58045] [client 185.92.25.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelY98Rxv6UsgRGKB3LfuAAAARE"]
[Thu Apr 23 07:25:44.446188 2026] [:error] [pid 42972:tid 43028] [client 185.92.25.67:31607] [client 185.92.25.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelY-MOAb-3sOknsk4cc6AAAAEw"]
[Thu Apr 23 07:25:45.002786 2026] [:error] [pid 43083:tid 43103] [client 185.192.71.202:39807] [client 185.192.71.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelY-TC5hrvNXosL83LG4AAAANI"]
[Thu Apr 23 07:25:45.617024 2026] [:error] [pid 65000:tid 65032] [client 91.230.225.143:39511] [client 91.230.225.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelY-b6vRb9j6psK2ZaUegAAAgM"]
[Thu Apr 23 07:25:46.180854 2026] [:error] [pid 59700:tid 59713] [client 185.92.25.69:23299] [client 185.92.25.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelY-pXyGZJFeAIDWtlVuwAAAUs"]
[Thu Apr 23 07:25:46.767137 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.137:31513] [client 91.230.225.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelY-r6vRb9j6psK2ZaUnAAAAgA"]
[Thu Apr 23 07:25:47.748113 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.139:47043] [client 91.230.225.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelY-8Rxv6UsgRGKB3LfywAAAQw"]
[Thu Apr 23 07:25:49.064574 2026] [:error] [pid 59700:tid 59711] [client 185.92.25.67:36259] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 07:25:49.695363 2026] [:error] [pid 59700:tid 59723] [client 185.92.25.67:36259] [client 185.92.25.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "aelY_ZXyGZJFeAIDWtlV1AAAAVU"]
[Thu Apr 23 07:25:50.864766 2026] [:error] [pid 42973:tid 43052] [client 185.92.25.78:31631] [client 185.92.25.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelY_m6I0QqmmmLTHE3YqAAAAIk"]
[Thu Apr 23 07:25:52.791761 2026] [:error] [pid 65000:tid 65037] [client 185.192.71.197:20129] [client 185.192.71.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelZAL6vRb9j6psK2ZaU_QAAAgQ"]
[Thu Apr 23 07:25:53.383222 2026] [:error] [pid 43083:tid 43095] [client 185.92.25.75:60595] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 07:25:53.797956 2026] [:error] [pid 43083:tid 43099] [client 185.92.25.75:60595] [client 185.92.25.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelZATC5hrvNXosL83LHFAAAAM4"]
[Thu Apr 23 07:25:54.523034 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.135:57237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 07:25:55.492198 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.135:57237] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 07:25:56.509394 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.135:57237] [client 91.230.225.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelZBIV5EysYcTLjmwjzSgAAAcU"]
[Thu Apr 23 07:25:57.160300 2026] [:error] [pid 64998:tid 65024] [client 185.92.25.72:42991] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 07:25:57.553211 2026] [:error] [pid 64998:tid 65025] [client 185.92.25.72:42991] [client 185.92.25.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelZBYV5EysYcTLjmwjzVwAAAdc"]
[Thu Apr 23 07:25:58.109843 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.141:53925] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 07:25:58.804377 2026] [:error] [pid 65000:tid 65029] [client 91.230.225.141:53925] [client 91.230.225.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelZBr6vRb9j6psK2ZaVSgAAAgA"]
[Thu Apr 23 07:25:59.681961 2026] [:error] [pid 59700:tid 59710] [client 185.92.25.132:52895] [client 185.92.25.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelZB5XyGZJFeAIDWtlWQwAAAUg"]
[Thu Apr 23 07:26:00.572518 2026] [:error] [pid 42973:tid 43067] [client 185.192.71.194:20789] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 07:26:01.038733 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.194:20789] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 07:26:01.755502 2026] [:error] [pid 42973:tid 43059] [client 185.192.71.194:20789] [client 185.192.71.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelZCW6I0QqmmmLTHE3Y1wAAAJA"]
[Thu Apr 23 07:26:02.624022 2026] [:error] [pid 64967:tid 64978] [client 91.230.225.140:37705] [client 91.230.225.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelZCoAV4GfOOdX8QzoQeAAAAYk"]
[Thu Apr 23 07:26:03.530108 2026] [:error] [pid 42971:tid 43001] [client 185.192.71.190:41513] [client 185.192.71.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelZCzEP2_5RswrH8bGmEgAAAA8"]
[Thu Apr 23 07:26:04.168351 2026] [:error] [pid 65000:tid 65057] [client 185.92.25.71:38371] [client 185.92.25.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelZDL6vRb9j6psK2ZaVbAAAAhg"]
[Thu Apr 23 07:26:04.887555 2026] [:error] [pid 25635:tid 25656] [client 185.192.71.190:44967] [client 185.192.71.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelZDMRxv6UsgRGKB3LgLwAAARE"]
[Thu Apr 23 07:26:06.226767 2026] [:error] [pid 65000:tid 65054] [client 185.192.71.195:62621] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 07:26:06.507272 2026] [:error] [pid 65000:tid 65053] [client 185.192.71.195:62621] [client 185.192.71.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelZDr6vRb9j6psK2ZaVigAAAhQ"]
[Thu Apr 23 07:26:07.083401 2026] [:error] [pid 65000:tid 65047] [client 185.192.71.191:47805] [client 185.192.71.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelZD76vRb9j6psK2ZaVlgAAAg4"]
[Thu Apr 23 07:26:07.772429 2026] [:error] [pid 25635:tid 25642] [client 185.92.25.67:58795] [client 185.92.25.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelZD8Rxv6UsgRGKB3LgSgAAAQM"]
[Thu Apr 23 07:26:09.025474 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.192:25821] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 23 07:26:09.636390 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.192:25821] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 23 07:26:10.867191 2026] [:error] [pid 59700:tid 59702] [client 185.192.71.192:25821] [client 185.192.71.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelZEpXyGZJFeAIDWtlWtQAAAUA"]
[Thu Apr 23 07:26:12.368596 2026] [:error] [pid 65000:tid 65029] [client 185.92.25.73:23541] [client 185.92.25.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.73, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelZFL6vRb9j6psK2ZaVxwAAAgA"]
[Thu Apr 23 07:26:12.681762 2026] [:error] [pid 65000:tid 65037] [client 185.92.25.73:23541] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 23 07:26:14.112173 2026] [:error] [pid 65000:tid 65048] [client 185.92.25.73:23541] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 23 07:26:14.438719 2026] [:error] [pid 65000:tid 65053] [client 185.92.25.73:23541] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 23 07:26:15.942298 2026] [:error] [pid 65000:tid 65046] [client 185.92.25.73:23541] [client 185.92.25.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelZF76vRb9j6psK2ZaV6AAAAg0"]
[Thu Apr 23 07:26:16.851458 2026] [:error] [pid 64998:tid 65017] [client 185.92.25.66:63743] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 23 07:26:20.595791 2026] [:error] [pid 64998:tid 65017] [client 185.92.25.66:63743] [client 185.92.25.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.66, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelZHIV5EysYcTLjmwjz5QAAAc8"]
[Thu Apr 23 07:26:21.175695 2026] [:error] [pid 64998:tid 65011] [client 185.92.25.66:63743] [client 185.92.25.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelZHYV5EysYcTLjmwjz8QAAAck"]
[Thu Apr 23 07:26:22.922366 2026] [:error] [pid 42971:tid 42996] [client 185.192.71.190:64873] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 23 07:26:23.536433 2026] [:error] [pid 42971:tid 42991] [client 185.192.71.190:64873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 23 07:26:24.093821 2026] [:error] [pid 42971:tid 42986] [client 185.192.71.190:64873] [client 185.192.71.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelZIDEP2_5RswrH8bGnKwAAAAA"]
[Thu Apr 23 07:26:25.034117 2026] [:error] [pid 25635:tid 25653] [client 91.230.225.143:34359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 23 07:26:25.908296 2026] [:error] [pid 25635:tid 25645] [client 91.230.225.143:34359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 23 07:26:26.495158 2026] [:error] [pid 25635:tid 25657] [client 91.230.225.143:34359] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 23 07:26:27.159587 2026] [:error] [pid 25635:tid 25647] [client 91.230.225.143:34359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 23 07:26:27.441621 2026] [:error] [pid 25635:tid 25649] [client 91.230.225.143:34359] [client 91.230.225.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelZI8Rxv6UsgRGKB3LgngAAAQo"]
[Thu Apr 23 07:26:28.020928 2026] [:error] [pid 42973:tid 43044] [client 185.192.71.187:58803] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 23 07:26:28.315035 2026] [:error] [pid 42973:tid 43049] [client 185.192.71.187:58803] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 23 07:26:28.613071 2026] [:error] [pid 42973:tid 43059] [client 185.192.71.187:58803] [client 185.192.71.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelZJG6I0QqmmmLTHE3ZkQAAAJA"]
[Thu Apr 23 07:26:29.512292 2026] [:error] [pid 42972:tid 43026] [client 185.92.25.65:37389] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 23 07:26:30.127312 2026] [:error] [pid 42972:tid 43019] [client 185.92.25.65:37389] [client 185.92.25.65] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.65, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelZJsOAb-3sOknsk4ceXAAAAEM"]
[Thu Apr 23 07:26:30.495382 2026] [:error] [pid 42972:tid 43031] [client 185.92.25.65:37389] [client 185.92.25.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelZJsOAb-3sOknsk4ceXgAAAE8"]
[Thu Apr 23 07:26:34.165333 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.196:49681] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 23 07:26:36.169319 2026] [:error] [pid 64998:tid 65002] [client 185.192.71.196:49681] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 23 07:26:40.371868 2026] [:error] [pid 64998:tid 65002] [client 185.192.71.196:49681] [client 185.192.71.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelZMIV5EysYcTLjmwj0eAAAAcA"]
[Thu Apr 23 07:26:40.921002 2026] [:error] [pid 64967:tid 64982] [client 185.92.25.64:43465] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 23 07:26:41.758560 2026] [:error] [pid 64967:tid 64988] [client 185.92.25.64:43465] [client 185.92.25.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.92.25.64, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelZMYAV4GfOOdX8QzoRzwAAAZM"]
[Thu Apr 23 07:26:42.077685 2026] [:error] [pid 64967:tid 64982] [client 185.92.25.64:43465] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 23 07:26:42.366184 2026] [:error] [pid 64967:tid 64973] [client 185.92.25.64:43465] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 23 07:26:42.670607 2026] [:error] [pid 64967:tid 64989] [client 185.92.25.64:43465] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 23 07:26:42.987050 2026] [:error] [pid 64967:tid 64969] [client 185.92.25.64:43465] [client 185.92.25.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelZMoAV4GfOOdX8QzoR1QAAAYA"]
[Thu Apr 23 07:26:43.647649 2026] [:error] [pid 43083:tid 43108] [client 185.192.71.194:27717] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 23 07:26:43.937312 2026] [:error] [pid 43083:tid 43096] [client 185.192.71.194:27717] [client 185.192.71.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelZMzC5hrvNXosL83LIpwAAAMs"]
[Thu Apr 23 07:26:44.764571 2026] [:error] [pid 42971:tid 43006] [client 185.92.25.77:48031] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 23 07:26:45.067600 2026] [:error] [pid 42971:tid 43006] [client 185.92.25.77:48031] [client 185.92.25.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelZNTEP2_5RswrH8bGohwAAABQ"]
[Thu Apr 23 07:26:46.270837 2026] [:error] [pid 43083:tid 43106] [client 91.230.225.137:34043] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 23 07:26:46.572052 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.137:34043] [client 91.230.225.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelZNjC5hrvNXosL83LI2QAAAMU"]
[Thu Apr 23 07:26:47.221393 2026] [:error] [pid 64967:tid 64987] [client 185.192.71.191:49903] [client 185.192.71.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelZN4AV4GfOOdX8QzoR6gAAAZI"]
[Thu Apr 23 07:26:51.588047 2026] [:error] [pid 42971:tid 42986] [client 185.92.25.75:62957] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 23 07:26:51.861940 2026] [:error] [pid 42971:tid 43004] [client 185.92.25.75:62957] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 23 07:26:53.008056 2026] [:error] [pid 42971:tid 43007] [client 185.92.25.75:62957] [client 185.92.25.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelZPTEP2_5RswrH8bGpHAAAABU"]
[Thu Apr 23 07:26:53.934435 2026] [:error] [pid 64998:tid 65009] [client 185.92.25.77:46063] [client 185.92.25.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelZPYV5EysYcTLjmwj1VAAAAcc"]
[Thu Apr 23 07:26:55.658373 2026] [:error] [pid 59700:tid 59722] [client 185.192.71.191:56081] [client 185.192.71.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelZP5XyGZJFeAIDWtlYwAAAAVQ"]
[Thu Apr 23 07:26:56.264871 2026] [:error] [pid 43083:tid 43086] [client 185.92.25.66:24829] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 23 07:26:56.857319 2026] [:error] [pid 43083:tid 43097] [client 185.92.25.66:24829] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 23 07:26:57.180696 2026] [:error] [pid 43083:tid 43098] [client 185.92.25.66:24829] [client 185.92.25.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelZQTC5hrvNXosL83LJKAAAAM0"]
[Thu Apr 23 07:26:57.788258 2026] [:error] [pid 64998:tid 65003] [client 185.192.71.203:65373] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 23 07:26:58.383653 2026] [:error] [pid 64998:tid 65010] [client 185.192.71.203:65373] [client 185.192.71.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelZQoV5EysYcTLjmwj1gAAAAcg"]
[Thu Apr 23 07:26:59.825925 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.143:50105] [client 91.230.225.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelZQ4V5EysYcTLjmwj1lQAAAcg"]
[Thu Apr 23 07:27:01.862483 2026] [:error] [pid 42972:tid 43030] [client 185.192.71.193:59651] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 23 07:27:02.818979 2026] [:error] [pid 42972:tid 43017] [client 185.192.71.193:59651] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 07:27:03.466889 2026] [:error] [pid 42972:tid 43040] [client 185.192.71.193:59651] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 23 07:27:03.761112 2026] [:error] [pid 42972:tid 43036] [client 185.192.71.193:59651] [client 185.192.71.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelZR8OAb-3sOknsk4cfcQAAAFQ"]
[Thu Apr 23 07:27:04.370733 2026] [:error] [pid 43083:tid 43091] [client 91.230.225.137:34187] [client 91.230.225.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelZSDC5hrvNXosL83LJxAAAAMY"]
[Thu Apr 23 07:27:04.984099 2026] [:error] [pid 64998:tid 65009] [client 185.92.25.65:35049] [client 185.92.25.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelZSIV5EysYcTLjmwj1tAAAAcc"]
[Thu Apr 23 07:27:05.589047 2026] [:error] [pid 59700:tid 59721] [client 91.230.225.146:56863] [client 91.230.225.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelZSZXyGZJFeAIDWtlY7QAAAVM"]
[Thu Apr 23 07:27:06.195455 2026] [:error] [pid 59700:tid 59723] [client 185.192.71.203:30605] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 23 07:27:06.539118 2026] [:error] [pid 59700:tid 59712] [client 185.192.71.203:30605] [client 185.192.71.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelZSpXyGZJFeAIDWtlY9QAAAUo"]
[Thu Apr 23 07:27:07.269447 2026] [:error] [pid 65000:tid 65054] [client 185.92.25.68:63951] [client 185.92.25.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelZS76vRb9j6psK2ZaX6gAAAhU"]
[Thu Apr 23 07:27:07.821483 2026] [:error] [pid 64998:tid 65017] [client 185.192.71.194:58771] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 23 07:27:08.543424 2026] [:error] [pid 64998:tid 65012] [client 185.192.71.194:58771] [client 185.192.71.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelZTIV5EysYcTLjmwj16QAAAco"]
[Thu Apr 23 07:27:09.088141 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.141:54127] [client 91.230.225.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelZTTC5hrvNXosL83LKDgAAAMk"]
[Thu Apr 23 07:27:09.631775 2026] [:error] [pid 42972:tid 43030] [client 185.192.71.187:44205] [client 185.192.71.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelZTcOAb-3sOknsk4cfqAAAAE4"]
[Thu Apr 23 07:27:48.097950 2026] [autoindex:error] [pid 42972:tid 43022] [client 91.230.225.143:31499] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 09:56:38.832973 2026] [:error] [pid 25635:tid 25662] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 09:56:39.109054 2026] [:error] [pid 25635:tid 25649] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 09:56:39.397368 2026] [:error] [pid 25635:tid 25660] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 09:56:39.708541 2026] [:error] [pid 25635:tid 25663] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 09:56:39.980879 2026] [:error] [pid 25635:tid 25652] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 09:56:40.263363 2026] [:error] [pid 25635:tid 25656] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 09:56:40.536623 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 09:56:40.822081 2026] [:error] [pid 25635:tid 25642] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 09:56:41.395883 2026] [:error] [pid 25635:tid 25660] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 09:56:41.680920 2026] [:error] [pid 25635:tid 25663] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 09:56:41.957559 2026] [:error] [pid 25635:tid 25639] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 09:56:42.232079 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 09:56:42.509610 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 09:56:42.784123 2026] [:error] [pid 25635:tid 25661] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 09:56:43.065935 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 09:56:43.338554 2026] [:error] [pid 25635:tid 25655] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 09:56:43.613618 2026] [:error] [pid 25635:tid 25658] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 09:56:43.918148 2026] [:error] [pid 25635:tid 25650] [client 91.230.225.206:64159] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 09:56:47.904157 2026] [:error] [pid 25635:tid 25639] [client 91.230.225.206:64159] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael8X8Rxv6UsgRGKB3L-HwAAAQA"]
[Thu Apr 23 09:56:49.334369 2026] [:error] [pid 65000:tid 65029] [client 185.192.71.40:50237] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael8Yb6vRb9j6psK2ZYDOAAAAgA"]
[Thu Apr 23 09:56:57.376898 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.21:47595] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 09:56:58.371044 2026] [:error] [pid 64998:tid 65012] [client 185.192.71.21:47595] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael8aoV5EysYcTLjmwiBzgAAAco"]
[Thu Apr 23 09:57:07.530633 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.34:50813] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 09:57:07.877253 2026] [:error] [pid 64998:tid 65004] [client 185.192.71.34:50813] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael8c4V5EysYcTLjmwiCRAAAAcI"]
[Thu Apr 23 09:57:09.298885 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.13:30671] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 09:57:10.702267 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.13:30671] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael8dr6vRb9j6psK2ZYEFgAAAhc"]
[Thu Apr 23 09:57:11.547069 2026] [:error] [pid 64967:tid 64970] [client 91.230.225.18:52947] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael8d4AV4GfOOdX8Qzo1FwAAAYE"]
[Thu Apr 23 09:57:12.086017 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.208:57225] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael8eL6vRb9j6psK2ZYEPwAAAhU"]
[Thu Apr 23 09:57:12.646284 2026] [:error] [pid 43083:tid 43107] [client 91.230.225.19:29319] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael8eDC5hrvNXosL83IbwQAAANY"]
[Thu Apr 23 09:57:13.201738 2026] [:error] [pid 64967:tid 64977] [client 91.230.225.202:30207] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael8eYAV4GfOOdX8Qzo1IwAAAYg"]
[Thu Apr 23 09:57:13.755750 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.201:32073] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael8eZXyGZJFeAIDWtmX4wAAAU4"]
[Thu Apr 23 09:57:14.576045 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.21:56441] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael8eoAV4GfOOdX8Qzo1MAAAAYA"]
[Thu Apr 23 09:57:15.145712 2026] [:error] [pid 43083:tid 43102] [client 185.192.71.30:29415] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 09:57:15.737953 2026] [:error] [pid 43083:tid 43088] [client 185.192.71.30:29415] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "ael8ezC5hrvNXosL83IcAgAAAMM"]
[Thu Apr 23 09:57:16.957470 2026] [:error] [pid 42973:tid 43060] [client 91.230.225.204:31517] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael8fG6I0QqmmmLTHE32CAAAAJE"]
[Thu Apr 23 09:57:17.791256 2026] [:error] [pid 42971:tid 43008] [client 185.192.71.26:39515] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael8fTEP2_5RswrH8bHe8AAAABY"]
[Thu Apr 23 09:57:18.375325 2026] [:error] [pid 42971:tid 43008] [client 185.192.71.32:42247] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 09:57:18.654824 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.32:42247] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael8fjEP2_5RswrH8bHfBQAAAA4"]
[Thu Apr 23 09:57:20.280631 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.201:39365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 09:57:21.116524 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.201:39365] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 09:57:21.948366 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.201:39365] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael8gYV5EysYcTLjmwiDngAAAcc"]
[Thu Apr 23 09:57:22.529200 2026] [:error] [pid 25635:tid 25655] [client 91.230.225.16:24201] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 09:57:22.801661 2026] [:error] [pid 25635:tid 25642] [client 91.230.225.16:24201] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael8gsRxv6UsgRGKB3L_lwAAAQM"]
[Thu Apr 23 09:57:23.364006 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.195:25723] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 09:57:23.952454 2026] [:error] [pid 42972:tid 43019] [client 91.230.225.195:25723] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael8g8OAb-3sOknsk4dJlAAAAEM"]
[Thu Apr 23 09:57:24.835134 2026] [:error] [pid 42971:tid 43000] [client 91.230.225.13:38013] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael8hDEP2_5RswrH8bHfWQAAAA4"]
[Thu Apr 23 09:57:25.668831 2026] [:error] [pid 64998:tid 65024] [client 185.192.71.40:27351] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 09:57:25.940574 2026] [:error] [pid 64998:tid 65015] [client 185.192.71.40:27351] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 09:57:26.492997 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.40:27351] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael8hoV5EysYcTLjmwiEEAAAAcw"]
[Thu Apr 23 09:57:27.344165 2026] [:error] [pid 25635:tid 25651] [client 91.230.225.198:60737] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael8h8Rxv6UsgRGKB3L_rAAAAQw"]
[Thu Apr 23 09:57:28.190264 2026] [:error] [pid 64998:tid 65007] [client 185.192.71.35:52271] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael8iIV5EysYcTLjmwiELgAAAcU"]
[Thu Apr 23 09:57:29.773302 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.40:27499] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael8iTEP2_5RswrH8bHfiQAAAAg"]
[Thu Apr 23 09:57:30.302019 2026] [:error] [pid 42973:tid 43062] [client 185.192.71.23:29247] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael8im6I0QqmmmLTHE32sAAAAJM"]
[Thu Apr 23 09:57:31.412975 2026] [:error] [pid 59700:tid 59712] [client 91.230.225.209:28791] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 09:57:31.690346 2026] [:error] [pid 59700:tid 59704] [client 91.230.225.209:28791] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael8i5XyGZJFeAIDWtmZAAAAAUI"]
[Thu Apr 23 09:57:32.230983 2026] [:error] [pid 64967:tid 64990] [client 185.192.71.38:41757] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael8jIAV4GfOOdX8Qzo1zQAAAZU"]
[Thu Apr 23 09:57:32.766113 2026] [:error] [pid 65000:tid 65044] [client 91.230.225.203:54189] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael8jL6vRb9j6psK2ZYFdgAAAgs"]
[Thu Apr 23 09:57:33.885075 2026] [:error] [pid 42971:tid 42991] [client 91.230.225.209:26139] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 23 09:57:34.457780 2026] [:error] [pid 42971:tid 43002] [client 91.230.225.209:26139] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 23 09:57:35.580056 2026] [:error] [pid 42971:tid 42999] [client 91.230.225.209:26139] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael8jzEP2_5RswrH8bHf6AAAAA0"]
[Thu Apr 23 09:57:36.965878 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.13:56347] [client 91.230.225.13] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.13, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael8kDC5hrvNXosL83IdSQAAAM8"]
[Thu Apr 23 09:57:37.258869 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.13:56347] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 23 09:57:38.693840 2026] [:error] [pid 43083:tid 43093] [client 91.230.225.13:56347] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 23 09:57:38.968118 2026] [:error] [pid 43083:tid 43107] [client 91.230.225.13:56347] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 23 09:57:40.357132 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.13:56347] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael8lDC5hrvNXosL83IdfAAAAMU"]
[Thu Apr 23 09:57:41.173556 2026] [:error] [pid 64967:tid 64988] [client 91.230.225.204:37203] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 23 09:57:41.443624 2026] [:error] [pid 64967:tid 64981] [client 91.230.225.204:37203] [client 91.230.225.204] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.204, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael8lYAV4GfOOdX8Qzo2LAAAAYw"]
[Thu Apr 23 09:57:44.952660 2026] [:error] [pid 64967:tid 64991] [client 91.230.225.204:37203] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael8mIAV4GfOOdX8Qzo2agAAAZY"]
[Thu Apr 23 09:57:46.612045 2026] [:error] [pid 25635:tid 25657] [client 185.192.71.32:28473] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 23 09:57:47.166405 2026] [:error] [pid 25635:tid 25659] [client 185.192.71.32:28473] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 23 09:57:47.728507 2026] [:error] [pid 25635:tid 25655] [client 185.192.71.32:28473] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael8m8Rxv6UsgRGKB3IArgAAARA"]
[Thu Apr 23 09:57:48.301944 2026] [:error] [pid 42972:tid 43039] [client 185.192.71.40:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 23 09:57:49.167566 2026] [:error] [pid 42972:tid 43017] [client 185.192.71.40:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 23 09:57:49.730161 2026] [:error] [pid 42972:tid 43026] [client 185.192.71.40:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 23 09:57:50.334982 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.40:60133] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 23 09:57:50.625044 2026] [:error] [pid 42972:tid 43018] [client 185.192.71.40:60133] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael8nsOAb-3sOknsk4dLWwAAAEI"]
[Thu Apr 23 09:57:51.172343 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.12:57635] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 23 09:57:51.451893 2026] [:error] [pid 42973:tid 43065] [client 91.230.225.12:57635] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 23 09:57:51.727608 2026] [:error] [pid 42973:tid 43050] [client 91.230.225.12:57635] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael8n26I0QqmmmLTHE334QAAAIc"]
[Thu Apr 23 09:57:52.618474 2026] [:error] [pid 65000:tid 65049] [client 185.192.71.37:21121] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 23 09:57:53.164359 2026] [:error] [pid 65000:tid 65051] [client 185.192.71.37:21121] [client 185.192.71.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.37, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael8ob6vRb9j6psK2ZYG4wAAAhI"]
[Thu Apr 23 09:57:53.467401 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.37:21121] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael8ob6vRb9j6psK2ZYG7gAAAhc"]
[Thu Apr 23 09:57:56.909425 2026] [:error] [pid 25635:tid 25639] [client 185.192.71.36:29269] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 23 09:57:58.634366 2026] [:error] [pid 25635:tid 25645] [client 185.192.71.36:29269] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 23 09:57:58.903123 2026] [:error] [pid 25635:tid 25654] [client 185.192.71.36:29269] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael8psRxv6UsgRGKB3IBTgAAAQ8"]
[Thu Apr 23 09:57:59.459085 2026] [:error] [pid 42973:tid 43050] [client 91.230.225.12:25511] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 23 09:58:00.326293 2026] [:error] [pid 42973:tid 43052] [client 91.230.225.12:25511] [client 91.230.225.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.12, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael8qG6I0QqmmmLTHE34OQAAAIk"]
[Thu Apr 23 09:58:00.622281 2026] [:error] [pid 42973:tid 43046] [client 91.230.225.12:25511] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 23 09:58:00.898581 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.12:25511] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 23 09:58:01.180319 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.12:25511] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 23 09:58:01.457695 2026] [:error] [pid 42973:tid 43046] [client 91.230.225.12:25511] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael8qW6I0QqmmmLTHE34TgAAAIM"]
[Thu Apr 23 09:58:03.082770 2026] [:error] [pid 42972:tid 43020] [client 91.230.225.20:42869] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 23 09:58:03.362909 2026] [:error] [pid 42972:tid 43038] [client 91.230.225.20:42869] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael8q8OAb-3sOknsk4dLzwAAAFY"]
[Thu Apr 23 09:58:04.197962 2026] [:error] [pid 43083:tid 43091] [client 185.92.25.114:46033] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 23 09:58:04.469332 2026] [:error] [pid 43083:tid 43090] [client 185.92.25.114:46033] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael8rDC5hrvNXosL83IekgAAAMU"]
[Thu Apr 23 09:58:05.555183 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.197:53933] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 23 09:58:05.824574 2026] [:error] [pid 64998:tid 65008] [client 91.230.225.197:53933] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael8rYV5EysYcTLjmwiGxgAAAcY"]
[Thu Apr 23 09:58:06.353223 2026] [:error] [pid 42972:tid 43034] [client 185.192.71.36:54413] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael8rsOAb-3sOknsk4dL7wAAAFI"]
[Thu Apr 23 09:58:06.893874 2026] [:error] [pid 65000:tid 65052] [client 185.192.71.33:62751] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 23 09:58:07.165760 2026] [:error] [pid 65000:tid 65030] [client 185.192.71.33:62751] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 23 09:58:08.283515 2026] [:error] [pid 65000:tid 65053] [client 185.192.71.33:62751] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael8sL6vRb9j6psK2ZYHqAAAAhQ"]
[Thu Apr 23 09:58:09.098909 2026] [:error] [pid 42971:tid 42990] [client 91.230.225.206:42933] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael8sTEP2_5RswrH8bHhYgAAAAQ"]
[Thu Apr 23 09:58:11.618061 2026] [:error] [pid 42972:tid 43027] [client 185.192.71.34:47711] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ael8s8OAb-3sOknsk4dMFwAAAEs"]
[Thu Apr 23 09:58:12.169640 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.16:23875] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 23 09:58:12.721988 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.16:23875] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 23 09:58:12.991335 2026] [:error] [pid 65000:tid 65055] [client 91.230.225.16:23875] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael8tL6vRb9j6psK2ZYHywAAAhY"]
[Thu Apr 23 09:58:13.537987 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.24:55439] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 23 09:58:14.089019 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.24:55439] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/click.php"] [unique_id "ael8toV5EysYcTLjmwiHcwAAAcY"]
[Thu Apr 23 09:58:15.447377 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.196:41435] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael8t76vRb9j6psK2ZYH7AAAAhE"]
[Thu Apr 23 09:58:16.293487 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.23:21925] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 23 09:58:17.188129 2026] [:error] [pid 43083:tid 43095] [client 91.230.225.23:21925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 09:58:17.765742 2026] [:error] [pid 43083:tid 43104] [client 91.230.225.23:21925] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 23 09:58:18.041104 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.23:21925] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael8ujC5hrvNXosL83IfTgAAAMk"]
[Thu Apr 23 09:58:19.658518 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.36:27609] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael8u4V5EysYcTLjmwiHrgAAAcM"]
[Thu Apr 23 09:58:20.201896 2026] [:error] [pid 42971:tid 42996] [client 185.192.71.37:22893] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael8vDEP2_5RswrH8bHhzQAAAAo"]
[Thu Apr 23 09:58:20.743053 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.203:42945] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael8vMRxv6UsgRGKB3ICaQAAAQ8"]
[Thu Apr 23 09:58:21.279000 2026] [:error] [pid 43083:tid 43097] [client 91.230.225.10:37381] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 23 09:58:21.550121 2026] [:error] [pid 43083:tid 43106] [client 91.230.225.10:37381] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael8vTC5hrvNXosL83IfjQAAANU"]
[Thu Apr 23 09:58:22.090982 2026] [:error] [pid 42971:tid 43005] [client 185.92.25.113:41351] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael8vjEP2_5RswrH8bHh3gAAABM"]
[Thu Apr 23 09:58:22.646876 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.40:62573] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 23 09:58:23.202337 2026] [:error] [pid 64998:tid 65007] [client 185.192.71.40:62573] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael8v4V5EysYcTLjmwiHzwAAAcU"]
[Thu Apr 23 09:58:23.743871 2026] [:error] [pid 65000:tid 65051] [client 91.230.225.11:44325] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael8v76vRb9j6psK2ZYIOAAAAhI"]
[Thu Apr 23 09:58:24.289993 2026] [:error] [pid 25635:tid 25660] [client 91.230.225.18:42697] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael8wMRxv6UsgRGKB3ICnQAAARU"]
[Thu Apr 23 09:58:24.827667 2026] [:error] [pid 65000:tid 65057] [client 91.230.225.197:31403] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael8wL6vRb9j6psK2ZYIVgAAAhg"]
[Thu Apr 23 09:58:25.638419 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.207:42205] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael8wcOAb-3sOknsk4dMlwAAAEE"]
[Thu Apr 23 09:58:26.748440 2026] [:error] [pid 42971:tid 42989] [client 91.230.225.21:42157] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael8wjEP2_5RswrH8bHh-QAAAAM"]
[Thu Apr 23 09:58:27.298580 2026] [:error] [pid 65000:tid 65052] [client 185.192.71.23:37111] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 23 09:58:28.123326 2026] [:error] [pid 65000:tid 65055] [client 185.192.71.23:37111] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Apr 23 09:58:28.413825 2026] [:error] [pid 65000:tid 65031] [client 185.192.71.23:37111] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael8xL6vRb9j6psK2ZYInwAAAgI"]
[Thu Apr 23 09:58:30.343301 2026] [:error] [pid 25635:tid 25647] [client 91.230.225.16:58421] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 23 09:58:30.613326 2026] [:error] [pid 25635:tid 25659] [client 91.230.225.16:58421] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 23 09:58:31.988827 2026] [:error] [pid 25635:tid 25648] [client 91.230.225.16:58421] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ael8x8Rxv6UsgRGKB3IDNQAAAQk"]
[Thu Apr 23 09:58:33.361736 2026] [:error] [pid 59700:tid 59719] [client 185.192.71.21:51541] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael8yZXyGZJFeAIDWtmb9gAAAVE"]
[Thu Apr 23 09:58:33.913441 2026] [:error] [pid 64967:tid 64984] [client 185.192.71.29:49431] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael8yYAV4GfOOdX8Qzo4AwAAAY8"]
[Thu Apr 23 09:58:35.584059 2026] [:error] [pid 64998:tid 65016] [client 185.192.71.32:24003] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael8y4V5EysYcTLjmwiIVQAAAc4"]
[Thu Apr 23 09:58:36.685023 2026] [:error] [pid 42972:tid 43032] [client 91.230.225.11:35023] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 23 09:58:36.963723 2026] [:error] [pid 42972:tid 43033] [client 91.230.225.11:35023] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Apr 23 09:58:37.236903 2026] [:error] [pid 42972:tid 43039] [client 91.230.225.11:35023] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Apr 23 09:58:37.517823 2026] [:error] [pid 42972:tid 43027] [client 91.230.225.11:35023] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Apr 23 09:58:38.884180 2026] [:error] [pid 42972:tid 43029] [client 91.230.225.11:35023] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael8zsOAb-3sOknsk4dM9gAAAE0"]
[Thu Apr 23 09:58:39.427088 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.202:24773] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael8z26I0QqmmmLTHE356wAAAJc"]
[Thu Apr 23 09:58:39.974018 2026] [:error] [pid 64998:tid 65004] [client 185.192.71.31:21721] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael8z4V5EysYcTLjmwiItAAAAcI"]
[Thu Apr 23 09:58:40.534613 2026] [:error] [pid 59700:tid 59725] [client 91.230.225.21:54349] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael80JXyGZJFeAIDWtmcJgAAAVc"]
[Thu Apr 23 09:58:41.082398 2026] [:error] [pid 64967:tid 64978] [client 91.230.225.20:29191] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael80YAV4GfOOdX8Qzo4WgAAAYk"]
[Thu Apr 23 09:58:41.639295 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.12:36605] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael80YV5EysYcTLjmwiI0AAAAcM"]
[Thu Apr 23 09:58:42.446327 2026] [:error] [pid 65000:tid 65052] [client 185.92.25.114:21339] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael80r6vRb9j6psK2ZYJFgAAAhM"]
[Thu Apr 23 09:58:42.978463 2026] [:error] [pid 43083:tid 43090] [client 185.192.71.30:52299] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael80jC5hrvNXosL83IgYAAAAMU"]
[Thu Apr 23 09:58:43.515531 2026] [:error] [pid 65000:tid 65040] [client 185.192.71.29:23395] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael8076vRb9j6psK2ZYJGwAAAgc"]
[Thu Apr 23 09:58:44.065741 2026] [:error] [pid 42971:tid 43008] [client 185.192.71.22:49129] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael81DEP2_5RswrH8bHisAAAABY"]
[Thu Apr 23 09:58:45.161767 2026] [:error] [pid 42971:tid 42991] [client 185.192.71.35:43131] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael81TEP2_5RswrH8bHivAAAAAU"]
[Thu Apr 23 09:58:45.982704 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.38:55073] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael81YV5EysYcTLjmwiJAgAAAcc"]
[Thu Apr 23 09:58:46.537058 2026] [:error] [pid 65000:tid 65053] [client 185.192.71.34:51225] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 23 09:58:47.082328 2026] [:error] [pid 65000:tid 65054] [client 185.192.71.34:51225] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael8176vRb9j6psK2ZYJNgAAAhU"]
[Thu Apr 23 09:58:48.164547 2026] [:error] [pid 43083:tid 43094] [client 91.230.225.12:47995] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ael82DC5hrvNXosL83IgpgAAAMk"]
[Thu Apr 23 09:58:49.303789 2026] [:error] [pid 64967:tid 64989] [client 185.192.71.36:33151] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Apr 23 09:58:49.585907 2026] [:error] [pid 64967:tid 64981] [client 185.192.71.36:33151] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael82YAV4GfOOdX8Qzo4vQAAAYw"]
[Thu Apr 23 09:58:50.440422 2026] [:error] [pid 59700:tid 59706] [client 185.192.71.29:31845] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 23 09:58:50.719715 2026] [:error] [pid 59700:tid 59721] [client 185.192.71.29:31845] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 23 09:58:51.007027 2026] [:error] [pid 59700:tid 59709] [client 185.192.71.29:31845] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Apr 23 09:58:51.290270 2026] [:error] [pid 59700:tid 59712] [client 185.192.71.29:31845] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael825XyGZJFeAIDWtmclAAAAUo"]
[Thu Apr 23 09:58:51.864937 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.17:31597] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 23 09:58:52.143185 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.17:31597] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ael83IV5EysYcTLjmwiJRwAAAdI"]
[Thu Apr 23 09:58:53.229138 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.24:22129] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 23 09:58:53.511162 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.24:22129] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 23 09:58:53.782502 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.24:22129] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Apr 23 09:58:55.160849 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.24:22129] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 23 09:58:55.432600 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.24:22129] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 23 09:58:55.984802 2026] [:error] [pid 64998:tid 65019] [client 91.230.225.24:22129] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Apr 23 09:58:56.885343 2026] [:error] [pid 64998:tid 65023] [client 91.230.225.24:22129] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 23 09:58:57.157250 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.24:22129] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael84YV5EysYcTLjmwiJrAAAAck"]
[Thu Apr 23 09:58:57.725076 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.203:33203] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael84YV5EysYcTLjmwiJtgAAAck"]
[Thu Apr 23 09:58:58.271397 2026] [:error] [pid 64967:tid 64973] [client 91.230.225.203:31627] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 23 09:58:58.895636 2026] [:error] [pid 64967:tid 64973] [client 91.230.225.203:31627] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael84oAV4GfOOdX8Qzo5ZgAAAYQ"]
[Thu Apr 23 09:58:59.714554 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.19:43809] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 23 09:58:59.983955 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.19:43809] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael8426I0QqmmmLTHE37JwAAAJc"]
[Thu Apr 23 09:59:01.654842 2026] [:error] [pid 59700:tid 59707] [client 91.230.225.22:25577] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael85ZXyGZJFeAIDWtmdBAAAAUU"]
[Thu Apr 23 09:59:09.575130 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.21:37995] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael87YV5EysYcTLjmwiKUQAAAcs"]
[Thu Apr 23 09:59:10.129702 2026] [:error] [pid 64998:tid 65010] [client 185.192.71.33:23517] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "ael87oV5EysYcTLjmwiKVQAAAcg"]
[Thu Apr 23 09:59:11.533278 2026] [:error] [pid 64967:tid 64972] [client 91.230.225.22:24753] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 23 09:59:12.068414 2026] [:error] [pid 64967:tid 64990] [client 91.230.225.22:24753] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael88IAV4GfOOdX8Qzo56wAAAZU"]
[Thu Apr 23 09:59:14.057179 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.205:39557] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Apr 23 09:59:14.619636 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.205:39557] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/function.php"] [unique_id "ael88oAV4GfOOdX8Qzo6GgAAAYA"]
[Thu Apr 23 09:59:15.185820 2026] [:error] [pid 25635:tid 25648] [client 91.230.225.201:47313] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ael888Rxv6UsgRGKB3IErgAAAQk"]
[Thu Apr 23 09:59:16.003136 2026] [:error] [pid 65000:tid 65043] [client 185.192.71.34:56413] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 23 09:59:16.278431 2026] [:error] [pid 65000:tid 65029] [client 185.192.71.34:56413] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael89L6vRb9j6psK2ZYKMwAAAgA"]
[Thu Apr 23 09:59:16.813833 2026] [:error] [pid 64998:tid 65016] [client 185.192.71.32:26019] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael89IV5EysYcTLjmwiKuAAAAc4"]
[Thu Apr 23 09:59:17.923925 2026] [:error] [pid 42971:tid 43006] [client 91.230.225.17:23733] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 23 09:59:18.203515 2026] [:error] [pid 42971:tid 42993] [client 91.230.225.17:23733] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 23 09:59:18.750816 2026] [:error] [pid 42971:tid 43001] [client 91.230.225.17:23733] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 23 09:59:19.310913 2026] [:error] [pid 42971:tid 42996] [client 91.230.225.17:23733] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ael89zEP2_5RswrH8bHjwwAAAAo"]
[Thu Apr 23 09:59:19.847125 2026] [:error] [pid 42971:tid 42993] [client 91.230.225.209:47665] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael89zEP2_5RswrH8bHjxgAAAAc"]
[Thu Apr 23 09:59:21.217507 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.23:61141] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 23 09:59:21.487633 2026] [:error] [pid 59700:tid 59707] [client 185.192.71.23:61141] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "ael8-ZXyGZJFeAIDWtmeNQAAAUU"]
[Thu Apr 23 09:59:22.036139 2026] [:error] [pid 42973:tid 43064] [client 91.230.225.23:60477] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael8-m6I0QqmmmLTHE371wAAAJU"]
[Thu Apr 23 09:59:22.597191 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.14:25327] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael8-sOAb-3sOknsk4dOpAAAAEk"]
[Thu Apr 23 09:59:24.251295 2026] [:error] [pid 25635:tid 25639] [client 91.230.225.200:28807] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 23 09:59:24.520056 2026] [:error] [pid 25635:tid 25652] [client 91.230.225.200:28807] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael8_MRxv6UsgRGKB3IE8gAAAQ0"]
[Thu Apr 23 09:59:25.335790 2026] [:error] [pid 42972:tid 43037] [client 185.192.71.29:46557] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael8_cOAb-3sOknsk4dOvQAAAFU"]
[Thu Apr 23 09:59:26.880155 2026] [:error] [pid 42972:tid 43033] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 23 09:59:27.154067 2026] [:error] [pid 42972:tid 43036] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 23 09:59:27.716095 2026] [:error] [pid 42972:tid 43027] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 23 09:59:28.834105 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.196:43897] [client 91.230.225.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.196, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/js/wp-login.php"] [unique_id "ael9AMOAb-3sOknsk4dO1AAAAEI"]
[Thu Apr 23 09:59:29.395270 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Apr 23 09:59:29.674549 2026] [:error] [pid 42972:tid 43036] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Apr 23 09:59:29.950521 2026] [:error] [pid 42972:tid 43033] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Apr 23 09:59:30.503096 2026] [:error] [pid 42972:tid 43026] [client 91.230.225.196:43897] [client 91.230.225.196] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.196, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael9AsOAb-3sOknsk4dO5wAAAEo"]
[Thu Apr 23 09:59:31.393989 2026] [:error] [pid 42972:tid 43035] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 23 09:59:31.682319 2026] [:error] [pid 42972:tid 43036] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Apr 23 09:59:32.242803 2026] [:error] [pid 42972:tid 43036] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Apr 23 09:59:32.829391 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 23 09:59:33.683768 2026] [:error] [pid 42972:tid 43025] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Apr 23 09:59:35.967337 2026] [:error] [pid 42972:tid 43028] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 23 09:59:36.242180 2026] [:error] [pid 42972:tid 43016] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 23 09:59:37.667999 2026] [:error] [pid 42972:tid 43037] [client 91.230.225.196:43897] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 23 09:59:38.216954 2026] [:error] [pid 42972:tid 43033] [client 91.230.225.196:43897] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ael9CsOAb-3sOknsk4dPIwAAAFE"]
[Thu Apr 23 09:59:39.331132 2026] [:error] [pid 42972:tid 43028] [client 91.230.225.14:28987] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 23 09:59:39.602816 2026] [:error] [pid 42972:tid 43016] [client 91.230.225.14:28987] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael9C8OAb-3sOknsk4dPKAAAAEA"]
[Thu Apr 23 09:59:41.560129 2026] [:error] [pid 42971:tid 43004] [client 91.230.225.196:58307] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 23 09:59:41.827955 2026] [:error] [pid 42971:tid 42999] [client 91.230.225.196:58307] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael9DTEP2_5RswrH8bHklQAAAA0"]
[Thu Apr 23 09:59:45.551067 2026] [:error] [pid 42973:tid 43061] [client 91.230.225.196:22309] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 23 09:59:46.102280 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.196:22309] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 23 09:59:46.651306 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.196:22309] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 23 09:59:46.927831 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.196:22309] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Apr 23 09:59:47.811174 2026] [:error] [pid 42973:tid 43061] [client 185.192.71.25:24161] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael9E26I0QqmmmLTHE38egAAAJI"]
[Thu Apr 23 09:59:48.382665 2026] [:error] [pid 65000:tid 65029] [client 185.192.71.33:60349] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 23 09:59:48.659803 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.33:60349] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 23 09:59:48.935965 2026] [:error] [pid 65000:tid 65037] [client 185.192.71.33:60349] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael9FL6vRb9j6psK2ZYL1gAAAgQ"]
[Thu Apr 23 09:59:49.741211 2026] [:error] [pid 42973:tid 43066] [client 185.192.71.23:41323] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael9FW6I0QqmmmLTHE38iwAAAJc"]
[Thu Apr 23 09:59:50.560495 2026] [:error] [pid 64998:tid 65024] [client 91.230.225.196:27305] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 23 09:59:51.385722 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.196:27305] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Apr 23 09:59:51.682662 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.196:27305] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Apr 23 09:59:51.955433 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.196:27305] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael9F4V5EysYcTLjmwiMQgAAAcs"]
[Thu Apr 23 09:59:52.492403 2026] [:error] [pid 42971:tid 42994] [client 91.230.225.201:39833] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael9GDEP2_5RswrH8bHk7gAAAAg"]
[Thu Apr 23 09:59:54.400013 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.22:62763] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 23 09:59:54.941864 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.22:62763] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael9GjEP2_5RswrH8bHlHAAAAA4"]
[Thu Apr 23 09:59:55.799750 2026] [:error] [pid 43083:tid 43087] [client 91.230.225.205:57387] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "ael9GzC5hrvNXosL83IjoQAAAMI"]
[Thu Apr 23 09:59:56.628789 2026] [:error] [pid 64967:tid 64993] [client 185.192.71.39:33285] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 23 09:59:56.908293 2026] [:error] [pid 64967:tid 64989] [client 185.192.71.39:33285] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 23 09:59:57.180422 2026] [:error] [pid 64967:tid 64969] [client 185.192.71.39:33285] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael9HYAV4GfOOdX8Qzo8DgAAAYA"]
[Thu Apr 23 09:59:57.999133 2026] [:error] [pid 42973:tid 43057] [client 91.230.225.20:49651] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 23 09:59:58.272946 2026] [:error] [pid 42973:tid 43062] [client 91.230.225.20:49651] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Apr 23 09:59:58.818291 2026] [:error] [pid 42973:tid 43062] [client 91.230.225.20:49651] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 23 10:00:04.838379 2026] [:error] [pid 64998:tid 65003] [client 185.192.71.27:41943] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael9JIV5EysYcTLjmwiMogAAAcE"]
[Thu Apr 23 10:00:05.448623 2026] [:error] [pid 43083:tid 43097] [client 91.230.225.199:58845] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Apr 23 10:00:06.316965 2026] [:error] [pid 43083:tid 43096] [client 91.230.225.199:58845] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael9JjC5hrvNXosL83IkPgAAAMs"]
[Thu Apr 23 10:00:07.154082 2026] [:error] [pid 65000:tid 65051] [client 185.192.71.25:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Apr 23 10:00:07.990875 2026] [:error] [pid 65000:tid 65049] [client 185.192.71.25:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 23 10:00:08.266941 2026] [:error] [pid 65000:tid 65041] [client 185.192.71.25:39813] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Apr 23 10:00:08.821356 2026] [:error] [pid 65000:tid 65040] [client 185.192.71.25:39813] [client 185.192.71.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.25, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ael9KL6vRb9j6psK2ZYMwwAAAgc"]
[Thu Apr 23 10:00:12.699030 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.25:39813] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ael9LL6vRb9j6psK2ZYNAAAAAhc"]
[Thu Apr 23 10:00:13.279650 2026] [:error] [pid 64967:tid 64985] [client 91.230.225.13:46741] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Apr 23 10:00:13.845801 2026] [:error] [pid 64967:tid 64985] [client 91.230.225.13:46741] [client 91.230.225.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ael9LYAV4GfOOdX8Qzo8fQAAAZA"]
[Thu Apr 23 10:00:14.384266 2026] [:error] [pid 42973:tid 43049] [client 91.230.225.17:38321] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 23 10:00:14.961551 2026] [:error] [pid 42973:tid 43051] [client 91.230.225.17:38321] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 23 10:00:15.509279 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.17:38321] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ael9L26I0QqmmmLTHE39dAAAAJc"]
[Thu Apr 23 10:00:16.391321 2026] [:error] [pid 42971:tid 42988] [client 91.230.225.198:43473] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 23 10:00:16.680500 2026] [:error] [pid 42971:tid 42988] [client 91.230.225.198:43473] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 23 10:00:16.961363 2026] [:error] [pid 42971:tid 42994] [client 91.230.225.198:43473] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ael9MDEP2_5RswrH8bHl2wAAAAg"]
[Thu Apr 23 10:00:17.544204 2026] [:error] [pid 59700:tid 59708] [client 185.192.71.22:29411] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ael9MZXyGZJFeAIDWtmftgAAAUY"]
[Thu Apr 23 10:00:18.087186 2026] [:error] [pid 42972:tid 43032] [client 91.230.225.200:46175] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Apr 23 10:00:18.380663 2026] [:error] [pid 42972:tid 43039] [client 91.230.225.200:46175] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 23 10:00:18.927734 2026] [:error] [pid 42972:tid 43032] [client 91.230.225.200:46175] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ael9MsOAb-3sOknsk4dQjQAAAFA"]
[Thu Apr 23 10:00:19.487075 2026] [:error] [pid 42971:tid 43009] [client 91.230.225.205:41689] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 23 10:00:20.061071 2026] [:error] [pid 42971:tid 42986] [client 91.230.225.205:41689] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Apr 23 10:00:20.337584 2026] [:error] [pid 42971:tid 43006] [client 91.230.225.205:41689] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ael9NDEP2_5RswrH8bHmCwAAABQ"]
[Thu Apr 23 10:00:21.152020 2026] [:error] [pid 42971:tid 42988] [client 91.230.225.18:34701] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/db.php"] [unique_id "ael9NTEP2_5RswrH8bHmFwAAAAI"]
[Thu Apr 23 10:00:21.775292 2026] [:error] [pid 25635:tid 25643] [client 185.92.25.113:52569] [client 185.92.25.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ael9NcRxv6UsgRGKB3IGIAAAAQQ"]
[Thu Apr 23 10:00:22.309843 2026] [:error] [pid 43083:tid 43109] [client 185.92.25.114:46937] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ael9NjC5hrvNXosL83Ik7AAAANg"]
[Thu Apr 23 10:00:22.856612 2026] [:error] [pid 64998:tid 65018] [client 91.230.225.198:60115] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ael9NoV5EysYcTLjmwiNGgAAAdA"]
[Thu Apr 23 10:00:23.403785 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.21:35411] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ael9N4V5EysYcTLjmwiNJgAAAdc"]
[Thu Apr 23 10:00:23.943958 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.26:57037] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ael9N4V5EysYcTLjmwiNMQAAAdc"]
[Thu Apr 23 10:00:25.073383 2026] [:error] [pid 42973:tid 43057] [client 91.230.225.24:60021] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ael9OW6I0QqmmmLTHE39ywAAAI4"]
[Thu Apr 23 10:00:25.610389 2026] [:error] [pid 64998:tid 65002] [client 91.230.225.198:27315] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ael9OYV5EysYcTLjmwiNXwAAAcA"]
[Thu Apr 23 10:00:26.161611 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.21:63013] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ael9OoV5EysYcTLjmwiNeQAAAcM"]
[Thu Apr 23 10:00:26.710447 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.23:59965] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ael9OoV5EysYcTLjmwiNjQAAAcc"]
[Thu Apr 23 10:00:27.251355 2026] [:error] [pid 42973:tid 43046] [client 185.192.71.25:28473] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ael9O26I0QqmmmLTHE392gAAAIM"]
[Thu Apr 23 10:00:27.800376 2026] [:error] [pid 59700:tid 59703] [client 185.192.71.25:37323] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Apr 23 10:00:28.627387 2026] [:error] [pid 59700:tid 59708] [client 185.192.71.25:37323] [client 185.192.71.25] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.25, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ael9PJXyGZJFeAIDWtmf9QAAAUY"]
[Thu Apr 23 10:00:30.008379 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.25:37323] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ael9PpXyGZJFeAIDWtmf-gAAAVA"]
[Thu Apr 23 10:00:31.262301 2026] [:error] [pid 59700:tid 59708] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Apr 23 10:00:31.555457 2026] [:error] [pid 59700:tid 59726] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Apr 23 10:00:32.683805 2026] [:error] [pid 59700:tid 59708] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Apr 23 10:00:32.964317 2026] [:error] [pid 59700:tid 59719] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Apr 23 10:00:34.094740 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Apr 23 10:00:34.379753 2026] [:error] [pid 59700:tid 59719] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Apr 23 10:00:34.668542 2026] [:error] [pid 59700:tid 59702] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Apr 23 10:00:34.940953 2026] [:error] [pid 59700:tid 59722] [client 91.230.225.196:20111] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Apr 23 10:00:35.214487 2026] [:error] [pid 59700:tid 59709] [client 91.230.225.196:20111] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ael9Q5XyGZJFeAIDWtmgHgAAAUc"]
[Thu Apr 23 10:00:35.756098 2026] [:error] [pid 64967:tid 64980] [client 91.230.225.11:33239] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ael9Q4AV4GfOOdX8Qzo8uAAAAYs"]
[Thu Apr 23 10:00:36.315304 2026] [:error] [pid 42973:tid 43058] [client 185.192.71.27:62007] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ael9RG6I0QqmmmLTHE3-NAAAAI8"]
[Thu Apr 23 10:00:37.269172 2026] [:error] [pid 43083:tid 43095] [client 91.230.225.204:34779] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Apr 23 10:00:37.565418 2026] [:error] [pid 43083:tid 43102] [client 91.230.225.204:34779] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Apr 23 10:00:38.157971 2026] [:error] [pid 43083:tid 43096] [client 91.230.225.204:34779] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Apr 23 10:00:38.727869 2026] [:error] [pid 43083:tid 43088] [client 91.230.225.204:34779] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ael9RjC5hrvNXosL83IleQAAAMM"]
[Thu Apr 23 10:00:39.282067 2026] [:error] [pid 64998:tid 65010] [client 91.230.225.16:53243] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ael9R4V5EysYcTLjmwiOTQAAAcg"]
[Thu Apr 23 10:00:39.831694 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.18:59781] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ael9RzC5hrvNXosL83IlfgAAANI"]
[Thu Apr 23 10:00:41.607617 2026] [:error] [pid 59700:tid 59703] [client 91.230.225.19:50461] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ael9SZXyGZJFeAIDWtmgXAAAAUE"]
[Thu Apr 23 10:00:42.422389 2026] [:error] [pid 46953:tid 46966] [client 185.192.71.24:63493] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ael9SknlpdHh-P6wKbrOEgAAAko"]
[Thu Apr 23 10:00:43.632427 2026] [:error] [pid 42973:tid 43065] [client 185.192.71.31:60339] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ael9S26I0QqmmmLTHE3-WQAAAJY"]
[Thu Apr 23 10:00:47.327091 2026] [:error] [pid 43083:tid 43095] [client 185.192.71.40:27461] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ael9TzC5hrvNXosL83IlrwAAAMo"]
[Thu Apr 23 10:00:47.871418 2026] [:error] [pid 59700:tid 59702] [client 91.230.225.16:55761] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Apr 23 10:00:48.143846 2026] [:error] [pid 59700:tid 59715] [client 91.230.225.16:55761] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/about.php"] [unique_id "ael9UJXyGZJFeAIDWtmggQAAAU0"]
[Thu Apr 23 10:00:49.299246 2026] [:error] [pid 65000:tid 65030] [client 185.192.71.38:50287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Apr 23 10:00:50.138210 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.38:50287] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 23 10:00:50.413436 2026] [:error] [pid 65000:tid 65050] [client 185.192.71.38:50287] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "ael9Ur6vRb9j6psK2ZYOwQAAAhE"]
[Thu Apr 23 10:00:51.558126 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.209:53857] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ael9U76vRb9j6psK2ZYOzwAAAhE"]
[Thu Apr 23 10:00:53.284792 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.11:55105] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ael9VYV5EysYcTLjmwiO4AAAAdI"]
[Thu Apr 23 10:00:55.056352 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.21:40589] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ael9V26I0QqmmmLTHE3-9wAAAII"]
[Thu Apr 23 10:00:56.222719 2026] [:error] [pid 64967:tid 64986] [client 185.192.71.24:40551] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Apr 23 10:00:56.506687 2026] [:error] [pid 64967:tid 64972] [client 185.192.71.24:40551] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ael9WIAV4GfOOdX8Qzo88QAAAYM"]
[Thu Apr 23 10:00:57.373904 2026] [:error] [pid 46953:tid 46976] [client 185.92.25.114:24055] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ael9WUnlpdHh-P6wKbrOjAAAAlQ"]
[Thu Apr 23 10:00:59.787164 2026] [:error] [pid 42971:tid 42987] [client 91.230.225.20:55235] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ael9WzEP2_5RswrH8bHmswAAAAE"]
[Thu Apr 23 10:01:00.673327 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.26:27177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Apr 23 10:01:01.832443 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.26:27177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Apr 23 10:01:03.902784 2026] [:error] [pid 64998:tid 65022] [client 185.192.71.26:27177] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ael9X4V5EysYcTLjmwiPPQAAAdQ"]
[Thu Apr 23 10:01:05.174568 2026] [:error] [pid 42973:tid 43056] [client 91.230.225.205:60307] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Apr 23 10:01:05.738787 2026] [:error] [pid 42973:tid 43043] [client 91.230.225.205:60307] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael9YW6I0QqmmmLTHE3_bgAAAIA"]
[Thu Apr 23 10:01:06.336543 2026] [:error] [pid 65000:tid 65040] [client 185.192.71.32:51363] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ael9Yr6vRb9j6psK2ZYPJAAAAgc"]
[Thu Apr 23 10:01:07.170884 2026] [:error] [pid 42973:tid 43052] [client 185.192.71.28:30767] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ael9Y26I0QqmmmLTHE3_dwAAAIk"]
[Thu Apr 23 10:01:11.722175 2026] [:error] [pid 43083:tid 43093] [client 185.92.25.114:37797] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "ael9ZzC5hrvNXosL83ImXwAAAMg"]
[Thu Apr 23 10:01:12.359912 2026] [:error] [pid 25635:tid 25654] [client 91.230.225.10:64057] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ael9aMRxv6UsgRGKB3IGvgAAAQ8"]
[Thu Apr 23 10:01:13.192272 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.32:25419] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Apr 23 10:01:14.890358 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.32:25419] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "ael9aoV5EysYcTLjmwiPegAAAdI"]
[Thu Apr 23 10:01:19.491028 2026] [:error] [pid 65000:tid 65039] [client 91.230.225.18:44081] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "ael9b76vRb9j6psK2ZYPkgAAAgY"]
[Thu Apr 23 10:01:20.043049 2026] [:error] [pid 42973:tid 43059] [client 91.230.225.10:20495] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "ael9cG6I0QqmmmLTHE3_mgAAAJA"]
[Thu Apr 23 10:01:20.882525 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.205:23303] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 23 10:01:21.162411 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.205:23303] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ael9cb6vRb9j6psK2ZYPpAAAAgg"]
[Thu Apr 23 10:01:52.086155 2026] [:error] [pid 42973:tid 43061] [client 91.230.225.198:51433] [client 91.230.225.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "ael9kG6I0QqmmmLTHE0AlgAAAJI"]
[Thu Apr 23 10:01:59.559539 2026] [autoindex:error] [pid 42971:tid 43009] [client 91.230.225.209:54017] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 14:29:06.361772 2026] [:error] [pid 42973:tid 43058] [client 101.32.244.128:53120] [client 101.32.244.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aem8Mm6I0QqmmmLTHE2NPAAAAI8"]
[Thu Apr 23 16:42:42.826690 2026] [:error] [pid 42972:tid 43026] [client 129.226.193.122:34806] [client 129.226.193.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aenbgsOAb-3sOknsk4fVWgAAAEo"]
[Thu Apr 23 17:57:41.784569 2026] [:error] [pid 64998:tid 65004] [client 122.183.33.160:17419] [client 122.183.33.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 122.183.33.160, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aentFYV5EysYcTLjmwgTAAAAAcI"]
[Thu Apr 23 17:57:41.790262 2026] [:error] [pid 64998:tid 65004] [client 122.183.33.160:17419] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 23 19:58:28.482147 2026] [:error] [pid 64998:tid 65015] [client 43.166.248.219:38516] [client 43.166.248.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeoJZIV5EysYcTLjmwhLKwAAAc0"]
[Thu Apr 23 20:21:08.043050 2026] [:error] [pid 46953:tid 46974] [client 43.153.7.191:58178] [client 43.153.7.191] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeoOtEnlpdHh-P6wKboufgAAAlI"]
[Thu Apr 23 20:45:08.274698 2026] [:error] [pid 42972:tid 43025] [client 94.247.172.129:3716] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeoUVMOAb-3sOknsk4crRAAAAEk"]
[Thu Apr 23 20:56:55.256537 2026] [:error] [pid 42972:tid 43033] [client 43.134.114.37:51408] [client 43.134.114.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aeoXF8OAb-3sOknsk4cwrgAAAFE"]
[Thu Apr 23 21:13:44.537551 2026] [:error] [pid 65000:tid 65040] [client 74.248.17.200:52255] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Thu Apr 23 21:13:44.816286 2026] [:error] [pid 65000:tid 65046] [client 74.248.17.200:52255] File does not exist: /usr/local/apache/htdocs/suspended-page/485.php
[Thu Apr 23 21:13:45.075422 2026] [:error] [pid 65000:tid 65029] [client 74.248.17.200:52255] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Thu Apr 23 21:13:45.335278 2026] [:error] [pid 65000:tid 65053] [client 74.248.17.200:52255] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Thu Apr 23 21:13:45.594455 2026] [:error] [pid 65000:tid 65049] [client 74.248.17.200:52255] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu Apr 23 21:13:45.868921 2026] [:error] [pid 65000:tid 65049] [client 74.248.17.200:52255] File does not exist: /usr/local/apache/htdocs/suspended-page/xminie.php
[Thu Apr 23 21:13:47.584440 2026] [:error] [pid 65000:tid 65049] [client 74.248.17.200:52255] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeobC76vRb9j6psK2ZZ9gAAAAhA"]
[Thu Apr 23 21:13:48.504577 2026] [:error] [pid 64998:tid 65020] [client 74.248.17.200:52279] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeobDIV5EysYcTLjmwh0xAAAAdI"]
[Thu Apr 23 21:13:49.541038 2026] [:error] [pid 46953:tid 46971] [client 74.248.17.200:48161] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeobDUnlpdHh-P6wKbo2XAAAAk8"]
[Thu Apr 23 21:13:50.305399 2026] [:error] [pid 42972:tid 43024] [client 74.248.17.200:3638] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeobDsOAb-3sOknsk4c3pQAAAEg"]
[Thu Apr 23 21:13:50.991904 2026] [:error] [pid 65000:tid 65055] [client 74.248.17.200:35431] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x=34.php"] [unique_id "aeobDr6vRb9j6psK2ZZ9kwAAAhY"]
[Thu Apr 23 21:13:51.855998 2026] [:error] [pid 59700:tid 59716] [client 74.248.17.200:52230] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x=34.php"] [unique_id "aeobD5XyGZJFeAIDWtkm9QAAAU4"]
[Thu Apr 23 21:13:52.999906 2026] [:error] [pid 65000:tid 65054] [client 74.248.17.200:35433] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x=34.php"] [unique_id "aeobEL6vRb9j6psK2ZZ9mAAAAhU"]
[Thu Apr 23 21:13:53.825378 2026] [:error] [pid 59700:tid 59714] [client 74.248.17.200:33612] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x=34.php"] [unique_id "aeobEZXyGZJFeAIDWtkm9gAAAUw"]
[Thu Apr 23 21:13:55.036940 2026] [:error] [pid 46953:tid 46957] [client 74.248.17.200:65071] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "aeobE0nlpdHh-P6wKbo2YQAAAkE"]
[Thu Apr 23 21:13:55.883005 2026] [:error] [pid 64998:tid 65003] [client 74.248.17.200:35451] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "aeobE4V5EysYcTLjmwh05QAAAcE"]
[Thu Apr 23 21:13:56.722837 2026] [:error] [pid 42972:tid 43020] [client 74.248.17.200:65034] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "aeobFMOAb-3sOknsk4c3tQAAAEQ"]
[Thu Apr 23 21:13:57.686508 2026] [:error] [pid 64998:tid 65021] [client 74.248.17.200:65028] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "aeobFYV5EysYcTLjmwh07gAAAdM"]
[Thu Apr 23 21:13:58.664289 2026] [:error] [pid 59700:tid 59712] [client 74.248.17.200:59652] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeobFpXyGZJFeAIDWtkm-QAAAUo"]
[Thu Apr 23 21:13:59.801289 2026] [:error] [pid 43083:tid 43105] [client 74.248.17.200:48138] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeobFzC5hrvNXosL83J2zQAAANQ"]
[Thu Apr 23 21:14:00.815861 2026] [:error] [pid 25635:tid 25663] [client 74.248.17.200:65030] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeobGMRxv6UsgRGKB3Iy1wAAARg"]
[Thu Apr 23 21:14:01.933373 2026] [:error] [pid 42971:tid 42994] [client 74.248.17.200:35413] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "aeobGTEP2_5RswrH8bEpjAAAAAg"]
[Thu Apr 23 21:14:02.777778 2026] [:error] [pid 42971:tid 43007] [client 74.248.17.200:48154] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxa.php"] [unique_id "aeobGjEP2_5RswrH8bEpjwAAABU"]
[Thu Apr 23 21:14:03.586421 2026] [:error] [pid 25635:tid 25652] [client 74.248.17.200:35401] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxa.php"] [unique_id "aeobG8Rxv6UsgRGKB3Iy2wAAAQ0"]
[Thu Apr 23 21:14:04.686582 2026] [:error] [pid 46953:tid 46967] [client 74.248.17.200:39684] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxa.php"] [unique_id "aeobHEnlpdHh-P6wKbo2aAAAAks"]
[Thu Apr 23 21:14:05.732698 2026] [:error] [pid 65000:tid 65048] [client 74.248.17.200:3607] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxa.php"] [unique_id "aeobHb6vRb9j6psK2ZZ9tgAAAg8"]
[Thu Apr 23 21:14:06.875784 2026] [:error] [pid 59700:tid 59716] [client 74.248.17.200:35452] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeobHpXyGZJFeAIDWtknBQAAAU4"]
[Thu Apr 23 21:14:07.977595 2026] [:error] [pid 42972:tid 43019] [client 74.248.17.200:53006] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeobH8OAb-3sOknsk4c30gAAAEM"]
[Thu Apr 23 21:14:08.728352 2026] [:error] [pid 42973:tid 43066] [client 74.248.17.200:3754] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeobIG6I0QqmmmLTHE0XYQAAAJc"]
[Thu Apr 23 21:14:11.186438 2026] [:error] [pid 64998:tid 65012] [client 74.248.17.200:3724] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aeobI4V5EysYcTLjmwh1EgAAAco"]
[Thu Apr 23 21:14:12.223657 2026] [:error] [pid 65000:tid 65037] [client 74.248.17.200:65096] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxcs.php"] [unique_id "aeobJL6vRb9j6psK2ZZ9wAAAAgQ"]
[Thu Apr 23 21:14:13.099162 2026] [:error] [pid 64998:tid 65009] [client 74.248.17.200:31997] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxcs.php"] [unique_id "aeobJYV5EysYcTLjmwh1GgAAAcc"]
[Thu Apr 23 21:14:14.093823 2026] [:error] [pid 59700:tid 59706] [client 74.248.17.200:58399] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxcs.php"] [unique_id "aeobJpXyGZJFeAIDWtknDAAAAUQ"]
[Thu Apr 23 21:14:15.296927 2026] [:error] [pid 65000:tid 65044] [client 74.248.17.200:37291] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxcs.php"] [unique_id "aeobJ76vRb9j6psK2ZZ9yAAAAgs"]
[Thu Apr 23 21:14:16.763099 2026] [:error] [pid 64967:tid 64978] [client 74.248.17.200:41782] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeobKIAV4GfOOdX8Qzp0QQAAAYk"]
[Thu Apr 23 21:14:18.208499 2026] [:error] [pid 43083:tid 43085] [client 74.248.17.200:53725] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeobKjC5hrvNXosL83J23wAAAMA"]
[Thu Apr 23 21:14:18.877568 2026] [:error] [pid 42972:tid 43028] [client 74.248.17.200:44208] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeobKsOAb-3sOknsk4c38QAAAEw"]
[Thu Apr 23 21:14:19.629102 2026] [:error] [pid 43083:tid 43091] [client 74.248.17.200:57911] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "aeobKzC5hrvNXosL83J24AAAAMY"]
[Thu Apr 23 21:14:21.130224 2026] [:error] [pid 43083:tid 43100] [client 74.248.17.200:44213] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeobLTC5hrvNXosL83J25wAAAM8"]
[Thu Apr 23 21:14:22.213178 2026] [:error] [pid 65000:tid 65051] [client 74.248.17.200:46984] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeobLr6vRb9j6psK2ZZ9zwAAAhI"]
[Thu Apr 23 21:14:23.015125 2026] [:error] [pid 59700:tid 59718] [client 74.248.17.200:36633] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeobL5XyGZJFeAIDWtknFAAAAVA"]
[Thu Apr 23 21:14:23.841303 2026] [:error] [pid 64998:tid 65012] [client 74.248.17.200:33599] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "aeobL4V5EysYcTLjmwh1LgAAAco"]
[Thu Apr 23 21:14:24.692586 2026] [:error] [pid 42972:tid 43033] [client 74.248.17.200:33580] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeobMMOAb-3sOknsk4c4FgAAAFE"]
[Thu Apr 23 21:14:26.338481 2026] [:error] [pid 65000:tid 65039] [client 74.248.17.200:29672] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeobMr6vRb9j6psK2ZZ95gAAAgY"]
[Thu Apr 23 21:14:27.320032 2026] [:error] [pid 46953:tid 46965] [client 74.248.17.200:46998] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeobM0nlpdHh-P6wKbo2ogAAAkk"]
[Thu Apr 23 21:14:28.259151 2026] [:error] [pid 65000:tid 65049] [client 74.248.17.200:50950] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "aeobNL6vRb9j6psK2ZZ99gAAAhA"]
[Thu Apr 23 21:14:28.969081 2026] [:error] [pid 65000:tid 65048] [client 74.248.17.200:33542] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeobNL6vRb9j6psK2ZZ9_gAAAg8"]
[Thu Apr 23 21:14:29.773458 2026] [:error] [pid 64998:tid 65019] [client 74.248.17.200:61278] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeobNYV5EysYcTLjmwh1QQAAAdE"]
[Thu Apr 23 21:14:30.491508 2026] [:error] [pid 64998:tid 65021] [client 74.248.17.200:29598] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeobNoV5EysYcTLjmwh1RwAAAdM"]
[Thu Apr 23 21:14:31.289361 2026] [:error] [pid 42971:tid 43008] [client 74.248.17.200:29586] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "aeobNzEP2_5RswrH8bEpugAAABY"]
[Thu Apr 23 21:14:32.492286 2026] [:error] [pid 64998:tid 65019] [client 74.248.17.200:33590] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeobOIV5EysYcTLjmwh1UwAAAdE"]
[Thu Apr 23 21:14:33.357817 2026] [:error] [pid 59700:tid 59712] [client 74.248.17.200:61264] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeobOZXyGZJFeAIDWtknIAAAAUo"]
[Thu Apr 23 21:14:34.195656 2026] [:error] [pid 43083:tid 43092] [client 74.248.17.200:29029] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeobOjC5hrvNXosL83J28QAAAMc"]
[Thu Apr 23 21:14:34.909313 2026] [:error] [pid 46953:tid 46956] [client 74.248.17.200:50971] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeobOknlpdHh-P6wKbo2rwAAAkA"]
[Thu Apr 23 21:14:35.810285 2026] [:error] [pid 65000:tid 65032] [client 74.248.17.200:32889] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeobO76vRb9j6psK2ZZ-FwAAAgM"]
[Thu Apr 23 21:14:36.711055 2026] [:error] [pid 43083:tid 43100] [client 74.248.17.200:47649] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeobPDC5hrvNXosL83J28gAAAM8"]
[Thu Apr 23 21:14:37.436953 2026] [:error] [pid 43083:tid 43109] [client 74.248.17.200:44204] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeobPTC5hrvNXosL83J29gAAANg"]
[Thu Apr 23 21:14:38.170537 2026] [:error] [pid 42973:tid 43066] [client 74.248.17.200:3282] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "aeobPm6I0QqmmmLTHE0XjwAAAJc"]
[Thu Apr 23 21:14:38.903974 2026] [:error] [pid 42971:tid 42991] [client 74.248.17.200:48103] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeobPjEP2_5RswrH8bEpwwAAAAU"]
[Thu Apr 23 21:14:39.604276 2026] [:error] [pid 42971:tid 42990] [client 74.248.17.200:47570] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeobPzEP2_5RswrH8bEpxgAAAAQ"]
[Thu Apr 23 21:14:40.390553 2026] [:error] [pid 42973:tid 43048] [client 74.248.17.200:44812] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeobQG6I0QqmmmLTHE0XkwAAAIU"]
[Thu Apr 23 21:14:41.391281 2026] [:error] [pid 42972:tid 43036] [client 74.248.17.200:61306] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeobQcOAb-3sOknsk4c4SQAAAFQ"]
[Thu Apr 23 21:14:42.419611 2026] [:error] [pid 42972:tid 43035] [client 74.248.17.200:61256] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeobQsOAb-3sOknsk4c4UwAAAFM"]
[Thu Apr 23 21:14:43.419023 2026] [:error] [pid 42972:tid 43033] [client 74.248.17.200:50946] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeobQ8OAb-3sOknsk4c4WAAAAFE"]
[Thu Apr 23 21:14:44.319456 2026] [:error] [pid 64998:tid 65022] [client 74.248.17.200:47555] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeobRIV5EysYcTLjmwh1XwAAAdQ"]
[Thu Apr 23 21:14:45.572968 2026] [:error] [pid 46953:tid 46962] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Thu Apr 23 21:14:45.867046 2026] [:error] [pid 46953:tid 46974] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Thu Apr 23 21:14:46.169773 2026] [:error] [pid 46953:tid 46971] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 23 21:14:46.462533 2026] [:error] [pid 46953:tid 46972] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/sad821.php
[Thu Apr 23 21:14:46.775178 2026] [:error] [pid 46953:tid 46965] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/sad8210.php
[Thu Apr 23 21:14:47.077151 2026] [:error] [pid 46953:tid 46959] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Thu Apr 23 21:14:48.451108 2026] [:error] [pid 46953:tid 46959] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Thu Apr 23 21:14:48.744849 2026] [:error] [pid 46953:tid 46973] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Thu Apr 23 21:14:49.039765 2026] [:error] [pid 46953:tid 46976] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Thu Apr 23 21:14:49.334520 2026] [:error] [pid 46953:tid 46978] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Thu Apr 23 21:14:49.630043 2026] [:error] [pid 46953:tid 46974] [client 74.248.17.200:32838] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 21:14:49.921648 2026] [:error] [pid 46953:tid 46964] [client 74.248.17.200:32838] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeobSUnlpdHh-P6wKbo23gAAAkg"]
[Thu Apr 23 21:14:50.686986 2026] [:error] [pid 64967:tid 64971] [client 74.248.17.200:32449] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeobSoAV4GfOOdX8Qzp0SgAAAYI"]
[Thu Apr 23 21:14:51.559424 2026] [:error] [pid 65000:tid 65049] [client 74.248.17.200:23063] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeobS76vRb9j6psK2ZZ-RQAAAhA"]
[Thu Apr 23 21:14:52.647566 2026] [:error] [pid 42973:tid 43066] [client 74.248.17.200:47577] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "aeobTG6I0QqmmmLTHE0XsQAAAJc"]
[Thu Apr 23 21:14:53.739744 2026] [:error] [pid 65000:tid 65052] [client 74.248.17.200:50560] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeobTb6vRb9j6psK2ZZ-UQAAAhM"]
[Thu Apr 23 21:14:54.920745 2026] [:error] [pid 65000:tid 65048] [client 74.248.17.200:3301] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeobTr6vRb9j6psK2ZZ-YAAAAg8"]
[Thu Apr 23 21:14:55.639185 2026] [:error] [pid 65000:tid 65040] [client 74.248.17.200:52652] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeobT76vRb9j6psK2ZZ-ZQAAAgc"]
[Thu Apr 23 21:14:56.281344 2026] [:error] [pid 65000:tid 65042] [client 74.248.17.200:40410] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeobUL6vRb9j6psK2ZZ-awAAAgk"]
[Thu Apr 23 21:14:57.247544 2026] [:error] [pid 64998:tid 65014] [client 74.248.17.200:3308] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeobUYV5EysYcTLjmwh1cwAAAcw"]
[Thu Apr 23 21:14:58.144669 2026] [:error] [pid 42973:tid 43062] [client 74.248.17.200:36583] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeobUm6I0QqmmmLTHE0XvgAAAJM"]
[Thu Apr 23 21:14:59.007459 2026] [:error] [pid 42973:tid 43047] [client 74.248.17.200:32503] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeobU26I0QqmmmLTHE0XxQAAAIQ"]
[Thu Apr 23 21:14:59.991110 2026] [:error] [pid 46953:tid 46956] [client 74.248.17.200:50606] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeobU0nlpdHh-P6wKbo24wAAAkA"]
[Thu Apr 23 21:15:00.900593 2026] [:error] [pid 65000:tid 65031] [client 74.248.17.200:36571] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeobVL6vRb9j6psK2ZZ-jwAAAgI"]
[Thu Apr 23 21:15:01.574429 2026] [:error] [pid 42971:tid 43007] [client 74.248.17.200:33216] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeobVTEP2_5RswrH8bEp0gAAABU"]
[Thu Apr 23 21:15:02.859794 2026] [:error] [pid 42973:tid 43054] [client 74.248.17.200:50579] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeobVm6I0QqmmmLTHE0X3QAAAIs"]
[Thu Apr 23 21:15:03.729824 2026] [:error] [pid 43083:tid 43105] [client 74.248.17.200:55041] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "aeobVzC5hrvNXosL83J3DgAAANQ"]
[Thu Apr 23 21:15:04.642977 2026] [:error] [pid 42972:tid 43029] [client 74.248.17.200:55058] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeobWMOAb-3sOknsk4c4iQAAAE0"]
[Thu Apr 23 21:15:05.700428 2026] [:error] [pid 65000:tid 65043] [client 74.248.17.200:55083] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeobWb6vRb9j6psK2ZZ-pQAAAgo"]
[Thu Apr 23 21:15:06.956806 2026] [:error] [pid 64998:tid 65006] [client 74.248.17.200:32461] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeobWoV5EysYcTLjmwh1gQAAAcQ"]
[Thu Apr 23 21:15:07.694552 2026] [:error] [pid 42972:tid 43031] [client 74.248.17.200:3850] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeobW8OAb-3sOknsk4c4oAAAAE8"]
[Thu Apr 23 21:15:08.900500 2026] [:error] [pid 42972:tid 43028] [client 74.248.17.200:61226] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeobXMOAb-3sOknsk4c4rQAAAEw"]
[Thu Apr 23 21:15:09.563137 2026] [:error] [pid 65000:tid 65030] [client 74.248.17.200:49726] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeobXb6vRb9j6psK2ZZ-swAAAgE"]
[Thu Apr 23 21:15:10.401328 2026] [:error] [pid 46953:tid 46966] [client 74.248.17.200:32497] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeobXknlpdHh-P6wKbo26wAAAko"]
[Thu Apr 23 21:15:11.267550 2026] [:error] [pid 65000:tid 65046] [client 74.248.17.200:55067] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "aeobX76vRb9j6psK2ZZ-uwAAAg0"]
[Thu Apr 23 21:15:12.044690 2026] [:error] [pid 65000:tid 65057] [client 74.248.17.200:61245] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aeobYL6vRb9j6psK2ZZ-vgAAAhg"]
[Thu Apr 23 21:15:12.868816 2026] [:error] [pid 43083:tid 43092] [client 74.248.17.200:55044] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aeobYDC5hrvNXosL83J3EQAAAMc"]
[Thu Apr 23 21:15:13.660134 2026] [:error] [pid 65000:tid 65029] [client 74.248.17.200:30615] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aeobYb6vRb9j6psK2ZZ-yQAAAgA"]
[Thu Apr 23 21:15:14.212478 2026] [:error] [pid 65000:tid 65038] [client 74.248.17.200:41055] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "aeobYr6vRb9j6psK2ZZ-zQAAAgU"]
[Thu Apr 23 21:15:14.917598 2026] [:error] [pid 59700:tid 59704] [client 74.248.17.200:61212] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeobYpXyGZJFeAIDWtknQgAAAUI"]
[Thu Apr 23 21:15:16.069370 2026] [:error] [pid 42973:tid 43059] [client 74.248.17.200:55072] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeobZG6I0QqmmmLTHE0X9gAAAJA"]
[Thu Apr 23 21:15:16.677164 2026] [:error] [pid 42973:tid 43051] [client 74.248.17.200:41039] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeobZG6I0QqmmmLTHE0X_QAAAIg"]
[Thu Apr 23 21:15:17.488455 2026] [:error] [pid 42973:tid 43052] [client 74.248.17.200:61626] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r2.php"] [unique_id "aeobZW6I0QqmmmLTHE0YAQAAAIk"]
[Thu Apr 23 21:15:18.294863 2026] [:error] [pid 65000:tid 65056] [client 74.248.17.200:3143] [client 74.248.17.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "aeobZr6vRb9j6psK2ZZ-4QAAAhc"]
[Thu Apr 23 21:15:19.546715 2026] [:error] [pid 25635:tid 25654] [client 74.248.17.200:46377] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeobZ8Rxv6UsgRGKB3IzFgAAAQ8"]
[Thu Apr 23 21:15:20.275376 2026] [:error] [pid 65000:tid 65049] [client 74.248.17.200:40502] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeobaL6vRb9j6psK2ZZ-5QAAAhA"]
[Thu Apr 23 21:15:21.165580 2026] [:error] [pid 65000:tid 65055] [client 74.248.17.200:41049] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeobab6vRb9j6psK2ZZ-7AAAAhY"]
[Thu Apr 23 21:15:22.221213 2026] [:error] [pid 64967:tid 64972] [client 74.248.17.200:41047] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeobaoAV4GfOOdX8Qzp0WgAAAYM"]
[Thu Apr 23 21:15:22.893796 2026] [:error] [pid 64998:tid 65026] [client 74.248.17.200:40504] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeobaoV5EysYcTLjmwh1pwAAAdg"]
[Thu Apr 23 21:15:24.454051 2026] [:error] [pid 65000:tid 65031] [client 74.248.17.200:55736] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeobbL6vRb9j6psK2ZZ-9QAAAgI"]
[Thu Apr 23 21:15:25.645618 2026] [:error] [pid 43083:tid 43086] [client 74.248.17.200:3171] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeobbTC5hrvNXosL83J3GQAAAME"]
[Thu Apr 23 21:15:26.972949 2026] [:error] [pid 65000:tid 65046] [client 74.248.17.200:55716] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeobbr6vRb9j6psK2ZZ-_gAAAg0"]
[Thu Apr 23 21:15:28.153611 2026] [:error] [pid 42972:tid 43020] [client 74.248.17.200:37229] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeobcMOAb-3sOknsk4c46QAAAEQ"]
[Thu Apr 23 21:15:29.232629 2026] [:error] [pid 42971:tid 43004] [client 74.248.17.200:3186] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeobcTEP2_5RswrH8bEp5AAAABI"]
[Thu Apr 23 21:15:30.489403 2026] [:error] [pid 64967:tid 64989] [client 74.248.17.200:41053] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeobcoAV4GfOOdX8Qzp0XgAAAZQ"]
[Thu Apr 23 21:15:31.758314 2026] [:error] [pid 65000:tid 65031] [client 74.248.17.200:41027] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeobc76vRb9j6psK2ZZ_FAAAAgI"]
[Thu Apr 23 21:15:32.744160 2026] [:error] [pid 42973:tid 43058] [client 74.248.17.200:59623] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeobdG6I0QqmmmLTHE0YMgAAAI8"]
[Thu Apr 23 21:15:33.573389 2026] [:error] [pid 42972:tid 43036] [client 74.248.17.200:3142] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeobdcOAb-3sOknsk4c4_gAAAFQ"]
[Thu Apr 23 21:15:35.130502 2026] [:error] [pid 42972:tid 43036] [client 74.248.17.200:49238] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeobd8OAb-3sOknsk4c5EQAAAFQ"]
[Thu Apr 23 21:15:36.467020 2026] [:error] [pid 65000:tid 65039] [client 74.248.17.200:46375] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "aeobeL6vRb9j6psK2ZZ_MQAAAgY"]
[Thu Apr 23 21:15:37.109757 2026] [:error] [pid 59700:tid 59712] [client 74.248.17.200:46362] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeobeZXyGZJFeAIDWtknbAAAAUo"]
[Thu Apr 23 21:15:38.617023 2026] [:error] [pid 59700:tid 59722] [client 74.248.17.200:49217] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeobepXyGZJFeAIDWtknbwAAAVQ"]
[Thu Apr 23 21:15:39.860510 2026] [:error] [pid 42972:tid 43029] [client 74.248.17.200:49268] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeobe8OAb-3sOknsk4c5JwAAAE0"]
[Thu Apr 23 21:15:40.684717 2026] [:error] [pid 43083:tid 43100] [client 74.248.17.200:37228] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeobfDC5hrvNXosL83J3IgAAAM8"]
[Thu Apr 23 21:15:41.817287 2026] [:error] [pid 42973:tid 43055] [client 74.248.17.200:37208] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeobfW6I0QqmmmLTHE0YQwAAAIw"]
[Thu Apr 23 21:15:42.464977 2026] [:error] [pid 65000:tid 65037] [client 74.248.17.200:3136] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeobfr6vRb9j6psK2ZZ_RQAAAgQ"]
[Thu Apr 23 21:15:43.140120 2026] [:error] [pid 64998:tid 65003] [client 74.248.17.200:37196] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeobf4V5EysYcTLjmwh2IgAAAcE"]
[Thu Apr 23 21:15:43.856778 2026] [:error] [pid 64998:tid 65018] [client 74.248.17.200:34220] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/config.php"] [unique_id "aeobf4V5EysYcTLjmwh2KAAAAdA"]
[Thu Apr 23 21:15:44.867295 2026] [:error] [pid 46953:tid 46971] [client 74.248.17.200:52223] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeobgEnlpdHh-P6wKbo3BwAAAk8"]
[Thu Apr 23 21:15:45.796907 2026] [:error] [pid 65000:tid 65039] [client 74.248.17.200:34197] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeobgb6vRb9j6psK2ZZ_TQAAAgY"]
[Thu Apr 23 21:15:46.711275 2026] [:error] [pid 43083:tid 43108] [client 74.248.17.200:52165] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeobgjC5hrvNXosL83J3JwAAANc"]
[Thu Apr 23 21:15:48.812220 2026] [:error] [pid 65000:tid 65054] [client 74.248.17.200:46346] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "aeobhL6vRb9j6psK2ZZ_XwAAAhU"]
[Thu Apr 23 21:15:49.488154 2026] [:error] [pid 65000:tid 65052] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu Apr 23 21:15:49.794553 2026] [:error] [pid 65000:tid 65042] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Thu Apr 23 21:15:50.097635 2026] [:error] [pid 65000:tid 65047] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Thu Apr 23 21:15:50.399316 2026] [:error] [pid 65000:tid 65055] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Thu Apr 23 21:15:50.704287 2026] [:error] [pid 65000:tid 65029] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Thu Apr 23 21:15:51.007605 2026] [:error] [pid 65000:tid 65056] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Thu Apr 23 21:15:51.316612 2026] [:error] [pid 65000:tid 65048] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/xynz.php
[Thu Apr 23 21:15:51.934311 2026] [:error] [pid 65000:tid 65050] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Thu Apr 23 21:15:52.246107 2026] [:error] [pid 65000:tid 65043] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Apr 23 21:15:52.555500 2026] [:error] [pid 65000:tid 65041] [client 74.248.17.200:46356] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Thu Apr 23 21:15:52.853872 2026] [:error] [pid 65000:tid 65037] [client 74.248.17.200:46356] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aeobiL6vRb9j6psK2ZZ_fwAAAgQ"]
[Thu Apr 23 21:15:53.621371 2026] [:error] [pid 42972:tid 43034] [client 74.248.17.200:37244] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aeobicOAb-3sOknsk4c5ZgAAAFI"]
[Thu Apr 23 21:15:54.365093 2026] [:error] [pid 42973:tid 43061] [client 74.248.17.200:52163] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aeobim6I0QqmmmLTHE0YXAAAAJI"]
[Thu Apr 23 21:15:55.260815 2026] [:error] [pid 65000:tid 65052] [client 74.248.17.200:52216] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "aeobi76vRb9j6psK2ZZ_iQAAAhM"]
[Thu Apr 23 21:15:55.904325 2026] [:error] [pid 46953:tid 46973] [client 74.248.17.200:59629] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeobi0nlpdHh-P6wKbo3EgAAAlE"]
[Thu Apr 23 21:15:57.244772 2026] [:error] [pid 42972:tid 43034] [client 74.248.17.200:40473] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeobjcOAb-3sOknsk4c5cgAAAFI"]
[Thu Apr 23 21:15:57.956951 2026] [:error] [pid 64998:tid 65018] [client 74.248.17.200:34195] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeobjYV5EysYcTLjmwh2hwAAAdA"]
[Thu Apr 23 21:15:58.835676 2026] [:error] [pid 42972:tid 43031] [client 74.248.17.200:34194] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeobjsOAb-3sOknsk4c5dwAAAE8"]
[Thu Apr 23 21:15:59.906980 2026] [:error] [pid 42972:tid 43025] [client 74.248.17.200:40495] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/view.php"] [unique_id "aeobj8OAb-3sOknsk4c5fQAAAEk"]
[Thu Apr 23 21:16:00.897654 2026] [:error] [pid 42973:tid 43066] [client 74.248.17.200:52193] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/view.php"] [unique_id "aeobkG6I0QqmmmLTHE0YaAAAAJc"]
[Thu Apr 23 21:16:01.772688 2026] [:error] [pid 42972:tid 43037] [client 74.248.17.200:49246] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/view.php"] [unique_id "aeobkcOAb-3sOknsk4c5hAAAAFU"]
[Thu Apr 23 21:16:02.826098 2026] [:error] [pid 59700:tid 59704] [client 74.248.17.200:30620] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/view.php"] [unique_id "aeobkpXyGZJFeAIDWtknkgAAAUI"]
[Thu Apr 23 21:16:03.528547 2026] [:error] [pid 64998:tid 65012] [client 74.248.17.200:59641] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeobk4V5EysYcTLjmwh2mAAAAco"]
[Thu Apr 23 21:16:04.652087 2026] [:error] [pid 42973:tid 43051] [client 74.248.17.200:55690] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeoblG6I0QqmmmLTHE0YbgAAAIg"]
[Thu Apr 23 21:16:05.553665 2026] [:error] [pid 42973:tid 43057] [client 74.248.17.200:35958] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeoblW6I0QqmmmLTHE0YdQAAAI4"]
[Thu Apr 23 21:16:06.633701 2026] [:error] [pid 64998:tid 65010] [client 74.248.17.200:46362] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeobloV5EysYcTLjmwh2oQAAAcg"]
[Thu Apr 23 21:16:07.932523 2026] [:error] [pid 65000:tid 65030] [client 74.248.17.200:40509] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeobl76vRb9j6psK2ZZ_twAAAgE"]
[Thu Apr 23 21:16:09.538907 2026] [:error] [pid 65000:tid 65049] [client 74.248.17.200:52204] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeobmb6vRb9j6psK2ZZ_vgAAAhA"]
[Thu Apr 23 21:16:10.782236 2026] [:error] [pid 42971:tid 42999] [client 74.248.17.200:34189] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeobmjEP2_5RswrH8bEqBQAAAA0"]
[Thu Apr 23 21:16:11.656347 2026] [:error] [pid 65000:tid 65057] [client 74.248.17.200:52164] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "aeobm76vRb9j6psK2ZZ_xQAAAhg"]
[Thu Apr 23 21:16:12.680935 2026] [:error] [pid 64967:tid 64984] [client 74.248.17.200:52191] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeobnIAV4GfOOdX8Qzp0gAAAAY8"]
[Thu Apr 23 21:16:13.914200 2026] [:error] [pid 42971:tid 43007] [client 74.248.17.200:3971] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeobnTEP2_5RswrH8bEqBgAAABU"]
[Thu Apr 23 21:16:15.202285 2026] [:error] [pid 65000:tid 65045] [client 74.248.17.200:55684] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeobn76vRb9j6psK2ZZ_1gAAAgw"]
[Thu Apr 23 21:16:16.031523 2026] [:error] [pid 64998:tid 65024] [client 74.248.17.200:34221] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "aeoboIV5EysYcTLjmwh2xwAAAdY"]
[Thu Apr 23 21:16:16.994603 2026] [:error] [pid 64998:tid 65025] [client 74.248.17.200:14897] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeoboIV5EysYcTLjmwh2zAAAAdc"]
[Thu Apr 23 21:16:17.914789 2026] [:error] [pid 42973:tid 43062] [client 74.248.17.200:34203] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeoboW6I0QqmmmLTHE0YkwAAAJM"]
[Thu Apr 23 21:16:18.713874 2026] [:error] [pid 59700:tid 59717] [client 74.248.17.200:58312] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeobopXyGZJFeAIDWtknnAAAAU8"]
[Thu Apr 23 21:16:19.708587 2026] [:error] [pid 42973:tid 43050] [client 74.248.17.200:14855] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "aeobo26I0QqmmmLTHE0YnAAAAIc"]
[Thu Apr 23 21:16:20.459055 2026] [:error] [pid 43083:tid 43087] [client 74.248.17.200:34153] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeobpDC5hrvNXosL83J3NwAAAMI"]
[Thu Apr 23 21:16:21.218952 2026] [:error] [pid 65000:tid 65031] [client 74.248.17.200:59619] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeobpb6vRb9j6psK2ZZ_7AAAAgI"]
[Thu Apr 23 21:16:22.166890 2026] [:error] [pid 42972:tid 43026] [client 74.248.17.200:55733] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeobpsOAb-3sOknsk4c5mwAAAEo"]
[Thu Apr 23 21:16:22.917583 2026] [:error] [pid 46953:tid 46959] [client 74.248.17.200:34136] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeobpknlpdHh-P6wKbo3KgAAAkM"]
[Thu Apr 23 21:16:23.960203 2026] [:error] [pid 42972:tid 43033] [client 74.248.17.200:51617] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeobp8OAb-3sOknsk4c5pAAAAFE"]
[Thu Apr 23 21:16:24.903329 2026] [:error] [pid 42973:tid 43043] [client 74.248.17.200:30613] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeobqG6I0QqmmmLTHE0YqAAAAIA"]
[Thu Apr 23 21:16:26.132211 2026] [:error] [pid 42972:tid 43036] [client 74.248.17.200:55740] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeobqsOAb-3sOknsk4c5pwAAAFQ"]
[Thu Apr 23 21:16:27.405607 2026] [:error] [pid 42972:tid 43017] [client 74.248.17.200:58340] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelio1.php"] [unique_id "aeobq8OAb-3sOknsk4c5rgAAAEE"]
[Thu Apr 23 21:16:28.181761 2026] [:error] [pid 42972:tid 43034] [client 74.248.17.200:34214] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeobrMOAb-3sOknsk4c5tgAAAFI"]
[Thu Apr 23 21:16:28.994503 2026] [:error] [pid 65000:tid 65052] [client 74.248.17.200:62050] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeobrL6vRb9j6psK2ZZ__AAAAhM"]
[Thu Apr 23 21:16:29.800652 2026] [:error] [pid 65000:tid 65047] [client 74.248.17.200:37937] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeobrb6vRb9j6psK2ZaACQAAAg4"]
[Thu Apr 23 21:16:30.590709 2026] [:error] [pid 65000:tid 65029] [client 74.248.17.200:34148] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws82.php"] [unique_id "aeobrr6vRb9j6psK2ZaADwAAAgA"]
[Thu Apr 23 21:16:31.639296 2026] [:error] [pid 59700:tid 59708] [client 74.248.17.200:51634] [client 74.248.17.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeobr5XyGZJFeAIDWtknvgAAAUY"]
[Thu Apr 23 21:16:32.975756 2026] [:error] [pid 42971:tid 43009] [client 74.248.17.200:52604] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeobsDEP2_5RswrH8bEqGAAAABc"]
[Thu Apr 23 21:16:33.918029 2026] [:error] [pid 65000:tid 65030] [client 74.248.17.200:51586] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeobsb6vRb9j6psK2ZaAFgAAAgE"]
[Thu Apr 23 21:16:34.652441 2026] [:error] [pid 42971:tid 42997] [client 74.248.17.200:62055] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeobsjEP2_5RswrH8bEqHAAAAAs"]
[Thu Apr 23 21:16:35.393905 2026] [:error] [pid 59700:tid 59723] [client 74.248.17.200:62485] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "aeobs5XyGZJFeAIDWtknxAAAAVU"]
[Thu Apr 23 21:16:36.106333 2026] [:error] [pid 42972:tid 43026] [client 74.248.17.200:51623] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeobtMOAb-3sOknsk4c5xAAAAEo"]
[Thu Apr 23 21:16:37.119513 2026] [:error] [pid 43083:tid 43087] [client 74.248.17.200:62025] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeobtTC5hrvNXosL83J3RgAAAMI"]
[Thu Apr 23 21:16:37.845583 2026] [:error] [pid 42971:tid 43005] [client 74.248.17.200:62521] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeobtTEP2_5RswrH8bEqHwAAABM"]
[Thu Apr 23 21:16:38.700927 2026] [:error] [pid 42973:tid 43061] [client 74.248.17.200:34177] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "aeobtm6I0QqmmmLTHE0YxQAAAJI"]
[Thu Apr 23 21:16:39.356909 2026] [:error] [pid 64967:tid 64974] [client 74.248.17.200:58366] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeobt4AV4GfOOdX8Qzp0ngAAAYU"]
[Thu Apr 23 21:16:40.130697 2026] [:error] [pid 64998:tid 65023] [client 74.248.17.200:34133] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeobuIV5EysYcTLjmwh3AAAAAdU"]
[Thu Apr 23 21:16:40.789247 2026] [:error] [pid 46953:tid 46968] [client 74.248.17.200:14853] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeobuEnlpdHh-P6wKbo3PAAAAkw"]
[Thu Apr 23 21:16:41.650373 2026] [:error] [pid 42973:tid 43066] [client 74.248.17.200:35959] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "aeobuW6I0QqmmmLTHE0Y0AAAAJc"]
[Thu Apr 23 21:16:42.408681 2026] [:error] [pid 42973:tid 43045] [client 74.248.17.200:49337] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeobum6I0QqmmmLTHE0Y0wAAAII"]
[Thu Apr 23 21:16:43.230162 2026] [:error] [pid 46953:tid 46978] [client 74.248.17.200:52212] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeobu0nlpdHh-P6wKbo3QQAAAlU"]
[Thu Apr 23 21:16:44.051478 2026] [:error] [pid 65000:tid 65057] [client 74.248.17.200:34176] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeobvL6vRb9j6psK2ZaAMwAAAhg"]
[Thu Apr 23 21:16:44.690152 2026] [:error] [pid 42972:tid 43018] [client 74.248.17.200:51646] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeobvMOAb-3sOknsk4c5xgAAAEI"]
[Thu Apr 23 21:16:45.391885 2026] [:error] [pid 65000:tid 65040] [client 74.248.17.200:42893] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeobvb6vRb9j6psK2ZaANwAAAgc"]
[Thu Apr 23 21:16:46.093622 2026] [:error] [pid 25635:tid 25651] [client 74.248.17.200:30694] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeobvsRxv6UsgRGKB3IzQAAAAQw"]
[Thu Apr 23 21:16:46.657909 2026] [:error] [pid 42973:tid 43053] [client 74.248.17.200:37842] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeobvm6I0QqmmmLTHE0Y3AAAAIo"]
[Thu Apr 23 21:16:47.277197 2026] [:error] [pid 59700:tid 59718] [client 74.248.17.200:37850] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/state.php"] [unique_id "aeobv5XyGZJFeAIDWtkn0gAAAVA"]
[Thu Apr 23 21:16:47.999190 2026] [:error] [pid 43083:tid 43105] [client 74.248.17.200:49338] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeobvzC5hrvNXosL83J3TgAAANQ"]
[Thu Apr 23 21:16:48.687660 2026] [:error] [pid 64967:tid 64970] [client 74.248.17.200:62053] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeobwIAV4GfOOdX8Qzp0qgAAAYE"]
[Thu Apr 23 21:16:49.427962 2026] [:error] [pid 46953:tid 46973] [client 74.248.17.200:37843] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeobwUnlpdHh-P6wKbo3TQAAAlE"]
[Thu Apr 23 21:16:50.079710 2026] [:error] [pid 46953:tid 46961] [client 74.248.17.200:28969] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "aeobwknlpdHh-P6wKbo3TgAAAkU"]
[Thu Apr 23 21:16:50.816046 2026] [:error] [pid 65000:tid 65039] [client 74.248.17.200:49284] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeobwr6vRb9j6psK2ZaASAAAAgY"]
[Thu Apr 23 21:16:51.962606 2026] [:error] [pid 46953:tid 46979] [client 74.248.17.200:55133] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "aeobw0nlpdHh-P6wKbo3UwAAAlY"]
[Thu Apr 23 21:16:53.014375 2026] [:error] [pid 43083:tid 43092] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Thu Apr 23 21:16:53.308278 2026] [:error] [pid 43083:tid 43099] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Thu Apr 23 21:16:53.606612 2026] [:error] [pid 43083:tid 43097] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Thu Apr 23 21:16:53.909109 2026] [:error] [pid 43083:tid 43109] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Thu Apr 23 21:16:54.205888 2026] [:error] [pid 43083:tid 43095] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Thu Apr 23 21:16:54.500105 2026] [:error] [pid 43083:tid 43087] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Thu Apr 23 21:16:54.820612 2026] [:error] [pid 43083:tid 43094] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu Apr 23 21:16:55.132811 2026] [:error] [pid 43083:tid 43100] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Thu Apr 23 21:16:55.428045 2026] [:error] [pid 43083:tid 43108] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 21:16:55.733906 2026] [:error] [pid 43083:tid 43098] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Thu Apr 23 21:16:56.131822 2026] [:error] [pid 43083:tid 43093] [client 74.248.17.200:28976] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 23 21:16:56.423312 2026] [:error] [pid 43083:tid 43102] [client 74.248.17.200:28976] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeobyDC5hrvNXosL83J3XgAAANE"]
[Thu Apr 23 21:16:57.228028 2026] [:error] [pid 59700:tid 59706] [client 74.248.17.200:44099] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeobyZXyGZJFeAIDWtkn2AAAAUQ"]
[Thu Apr 23 21:16:58.286584 2026] [:error] [pid 46953:tid 46973] [client 74.248.17.200:39027] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeobyknlpdHh-P6wKbo3XQAAAlE"]
[Thu Apr 23 21:16:58.905426 2026] [:error] [pid 43083:tid 43090] [client 74.248.17.200:32778] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "aeobyjC5hrvNXosL83J3YgAAAMU"]
[Thu Apr 23 21:16:59.569772 2026] [:error] [pid 64998:tid 65026] [client 74.248.17.200:3817] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeoby4V5EysYcTLjmwh3GQAAAdg"]
[Thu Apr 23 21:17:00.292508 2026] [:error] [pid 46953:tid 46962] [client 74.248.17.200:3385] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeobzEnlpdHh-P6wKbo3YwAAAkY"]
[Thu Apr 23 21:17:01.392719 2026] [:error] [pid 64998:tid 65002] [client 74.248.17.200:34808] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeobzYV5EysYcTLjmwh3HwAAAcA"]
[Thu Apr 23 21:17:02.271531 2026] [:error] [pid 65000:tid 65050] [client 74.248.17.200:30125] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "aeobzr6vRb9j6psK2ZaAWAAAAhE"]
[Thu Apr 23 21:17:02.871188 2026] [:error] [pid 65000:tid 65042] [client 74.248.17.200:58987] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/areak1.php"] [unique_id "aeobzr6vRb9j6psK2ZaAWwAAAgk"]
[Thu Apr 23 21:17:03.892394 2026] [:error] [pid 64998:tid 65026] [client 74.248.17.200:3526] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/areak1.php"] [unique_id "aeobz4V5EysYcTLjmwh3LQAAAdg"]
[Thu Apr 23 21:17:04.703476 2026] [:error] [pid 64998:tid 65014] [client 74.248.17.200:32825] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/areak1.php"] [unique_id "aeob0IV5EysYcTLjmwh3LwAAAcw"]
[Thu Apr 23 21:17:05.386887 2026] [:error] [pid 42971:tid 43008] [client 74.248.17.200:3389] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/areak1.php"] [unique_id "aeob0TEP2_5RswrH8bEqJwAAABY"]
[Thu Apr 23 21:17:06.419975 2026] [:error] [pid 65000:tid 65038] [client 74.248.17.200:3444] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "aeob0r6vRb9j6psK2ZaAZAAAAgU"]
[Thu Apr 23 21:17:07.173993 2026] [:error] [pid 64998:tid 65024] [client 74.248.17.200:58986] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "aeob04V5EysYcTLjmwh3PgAAAdY"]
[Thu Apr 23 21:17:08.301952 2026] [:error] [pid 25635:tid 25640] [client 74.248.17.200:3394] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "aeob1MRxv6UsgRGKB3IzVgAAAQE"]
[Thu Apr 23 21:17:09.327922 2026] [:error] [pid 42973:tid 43062] [client 74.248.17.200:39006] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "aeob1W6I0QqmmmLTHE0Y9gAAAJM"]
[Thu Apr 23 21:17:10.793111 2026] [:error] [pid 42971:tid 43001] [client 74.248.17.200:39002] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeob1jEP2_5RswrH8bEqMgAAAA8"]
[Thu Apr 23 21:17:12.034178 2026] [:error] [pid 42972:tid 43039] [client 74.248.17.200:58970] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeob2MOAb-3sOknsk4c56QAAAFc"]
[Thu Apr 23 21:17:12.745530 2026] [:error] [pid 64998:tid 65013] [client 74.248.17.200:44104] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeob2IV5EysYcTLjmwh3VwAAAcs"]
[Thu Apr 23 21:17:13.688112 2026] [:error] [pid 42972:tid 43020] [client 74.248.17.200:3415] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "aeob2cOAb-3sOknsk4c57AAAAEQ"]
[Thu Apr 23 21:17:14.413174 2026] [:error] [pid 25635:tid 25659] [client 74.248.17.200:39019] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeob2sRxv6UsgRGKB3IzWAAAARQ"]
[Thu Apr 23 21:17:15.095585 2026] [:error] [pid 43083:tid 43094] [client 74.248.17.200:41116] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeob2zC5hrvNXosL83J3aQAAAMk"]
[Thu Apr 23 21:17:15.862645 2026] [:error] [pid 59700:tid 59720] [client 74.248.17.200:41147] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeob25XyGZJFeAIDWtkn3QAAAVI"]
[Thu Apr 23 21:17:16.537150 2026] [:error] [pid 64998:tid 65020] [client 74.248.17.200:58979] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "aeob3IV5EysYcTLjmwh3cQAAAdI"]
[Thu Apr 23 21:17:17.255616 2026] [:error] [pid 65000:tid 65053] [client 74.248.17.200:44759] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gz.php"] [unique_id "aeob3b6vRb9j6psK2ZaAcgAAAhQ"]
[Thu Apr 23 21:17:18.056590 2026] [:error] [pid 64998:tid 65024] [client 74.248.17.200:28964] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gz.php"] [unique_id "aeob3oV5EysYcTLjmwh3fAAAAdY"]
[Thu Apr 23 21:17:18.773549 2026] [:error] [pid 64998:tid 65023] [client 74.248.17.200:39023] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gz.php"] [unique_id "aeob3oV5EysYcTLjmwh3ggAAAdU"]
[Thu Apr 23 21:17:19.677298 2026] [:error] [pid 64998:tid 65011] [client 74.248.17.200:37849] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gz.php"] [unique_id "aeob34V5EysYcTLjmwh3jAAAAck"]
[Thu Apr 23 21:17:20.436178 2026] [:error] [pid 43083:tid 43098] [client 74.248.17.200:50190] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeob4DC5hrvNXosL83J3bAAAAM0"]
[Thu Apr 23 21:17:21.190165 2026] [:error] [pid 65000:tid 65056] [client 74.248.17.200:62467] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeob4b6vRb9j6psK2ZaAdwAAAhc"]
[Thu Apr 23 21:17:22.253120 2026] [:error] [pid 65000:tid 65055] [client 74.248.17.200:55154] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeob4r6vRb9j6psK2ZaAfAAAAhY"]
[Thu Apr 23 21:17:23.335066 2026] [:error] [pid 42973:tid 43046] [client 74.248.17.200:62490] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "aeob426I0QqmmmLTHE0Y-AAAAIM"]
[Thu Apr 23 21:17:23.988545 2026] [:error] [pid 43083:tid 43096] [client 74.248.17.200:14909] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeob4zC5hrvNXosL83J3bgAAAMs"]
[Thu Apr 23 21:17:24.793142 2026] [:error] [pid 64998:tid 65026] [client 74.248.17.200:34155] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeob5IV5EysYcTLjmwh3rAAAAdg"]
[Thu Apr 23 21:17:25.603926 2026] [:error] [pid 64998:tid 65016] [client 74.248.17.200:59645] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeob5YV5EysYcTLjmwh3tAAAAc4"]
[Thu Apr 23 21:17:26.422802 2026] [:error] [pid 42972:tid 43035] [client 74.248.17.200:40458] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "aeob5sOAb-3sOknsk4c5-gAAAFM"]
[Thu Apr 23 21:17:27.087491 2026] [:error] [pid 59700:tid 59713] [client 74.248.17.200:55697] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeob55XyGZJFeAIDWtkn4gAAAUs"]
[Thu Apr 23 21:17:27.964945 2026] [:error] [pid 46953:tid 46960] [client 74.248.17.200:40501] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeob50nlpdHh-P6wKbo3eQAAAkQ"]
[Thu Apr 23 21:17:28.993275 2026] [:error] [pid 25635:tid 25646] [client 74.248.17.200:41061] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeob6MRxv6UsgRGKB3IzYgAAAQc"]
[Thu Apr 23 21:17:30.481095 2026] [:error] [pid 65000:tid 65040] [client 74.248.17.200:49234] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "aeob6r6vRb9j6psK2ZaAlAAAAgc"]
[Thu Apr 23 21:17:31.158517 2026] [:error] [pid 42973:tid 43056] [client 74.248.17.200:59592] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeob626I0QqmmmLTHE0ZAQAAAI0"]
[Thu Apr 23 21:17:31.737002 2026] [:error] [pid 65000:tid 65029] [client 74.248.17.200:61192] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeob676vRb9j6psK2ZaAzwAAAgA"]
[Thu Apr 23 21:17:32.398055 2026] [:error] [pid 65000:tid 65051] [client 74.248.17.200:3978] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeob7L6vRb9j6psK2ZaA-wAAAhI"]
[Thu Apr 23 21:17:33.055188 2026] [:error] [pid 65000:tid 65046] [client 74.248.17.200:49719] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws68.php"] [unique_id "aeob7b6vRb9j6psK2ZaBBgAAAg0"]
[Thu Apr 23 21:17:33.608594 2026] [:error] [pid 65000:tid 65056] [client 74.248.17.200:40494] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeob7b6vRb9j6psK2ZaBCAAAAhc"]
[Thu Apr 23 21:17:34.359950 2026] [:error] [pid 64998:tid 65006] [client 74.248.17.200:49688] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeob7oV5EysYcTLjmwh38AAAAcQ"]
[Thu Apr 23 21:17:35.122464 2026] [:error] [pid 65000:tid 65053] [client 74.248.17.200:3992] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeob776vRb9j6psK2ZaBEwAAAhQ"]
[Thu Apr 23 21:17:36.036735 2026] [:error] [pid 65000:tid 65031] [client 74.248.17.200:40486] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "aeob8L6vRb9j6psK2ZaBFwAAAgI"]
[Thu Apr 23 21:17:36.660168 2026] [:error] [pid 64967:tid 64986] [client 74.248.17.200:37246] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeob8IAV4GfOOdX8Qzp05wAAAZE"]
[Thu Apr 23 21:17:37.380764 2026] [:error] [pid 25635:tid 25642] [client 74.248.17.200:49225] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeob8cRxv6UsgRGKB3IzYwAAAQM"]
[Thu Apr 23 21:17:38.115846 2026] [:error] [pid 65000:tid 65052] [client 74.248.17.200:40462] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeob8r6vRb9j6psK2ZaBIgAAAhM"]
[Thu Apr 23 21:17:39.276398 2026] [:error] [pid 65000:tid 65031] [client 74.248.17.200:61229] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "aeob876vRb9j6psK2ZaBKwAAAgI"]
[Thu Apr 23 21:17:40.055321 2026] [:error] [pid 65000:tid 65042] [client 74.248.17.200:49700] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeob9L6vRb9j6psK2ZaBLgAAAgk"]
[Thu Apr 23 21:17:40.639266 2026] [:error] [pid 65000:tid 65030] [client 74.248.17.200:40508] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeob9L6vRb9j6psK2ZaBMQAAAgE"]
[Thu Apr 23 21:17:41.450498 2026] [:error] [pid 42973:tid 43058] [client 74.248.17.200:41058] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeob9W6I0QqmmmLTHE0ZIgAAAI8"]
[Thu Apr 23 21:17:42.434464 2026] [:error] [pid 64998:tid 65009] [client 74.248.17.200:55102] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "aeob9oV5EysYcTLjmwh3_AAAAcc"]
[Thu Apr 23 21:17:43.354094 2026] [:error] [pid 64998:tid 65026] [client 74.248.17.200:46399] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeob94V5EysYcTLjmwh3_wAAAdg"]
[Thu Apr 23 21:17:44.044642 2026] [:error] [pid 65000:tid 65045] [client 74.248.17.200:40474] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeob-L6vRb9j6psK2ZaBPgAAAgw"]
[Thu Apr 23 21:17:45.563177 2026] [:error] [pid 42972:tid 43016] [client 74.248.17.200:37220] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeob-cOAb-3sOknsk4c6DwAAAEA"]
[Thu Apr 23 21:17:47.425681 2026] [:error] [pid 64998:tid 65019] [client 74.248.17.200:61242] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "aeob-4V5EysYcTLjmwh4AgAAAdE"]
[Thu Apr 23 21:17:48.081403 2026] [:error] [pid 64998:tid 65003] [client 74.248.17.200:30641] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeob_IV5EysYcTLjmwh4BgAAAcE"]
[Thu Apr 23 21:17:48.962879 2026] [:error] [pid 42972:tid 43026] [client 74.248.17.200:3158] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeob_MOAb-3sOknsk4c6FAAAAEo"]
[Thu Apr 23 21:17:49.919027 2026] [:error] [pid 42972:tid 43029] [client 74.248.17.200:4028] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeob_cOAb-3sOknsk4c6FwAAAE0"]
[Thu Apr 23 21:17:50.747951 2026] [:error] [pid 42973:tid 43056] [client 74.248.17.200:30642] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeob_m6I0QqmmmLTHE0ZKwAAAI0"]
[Thu Apr 23 21:17:51.555480 2026] [:error] [pid 42972:tid 43022] [client 74.248.17.200:37208] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeob_8OAb-3sOknsk4c6GgAAAEY"]
[Thu Apr 23 21:17:52.266300 2026] [:error] [pid 43083:tid 43104] [client 74.248.17.200:40492] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeocADC5hrvNXosL83J3lAAAANM"]
[Thu Apr 23 21:17:53.076788 2026] [:error] [pid 64998:tid 65004] [client 74.248.17.200:37186] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeocAYV5EysYcTLjmwh4CgAAAcI"]
[Thu Apr 23 21:17:53.719420 2026] [:error] [pid 46953:tid 46975] [client 74.248.17.200:40496] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws84.php"] [unique_id "aeocAUnlpdHh-P6wKbo3ogAAAlM"]
[Thu Apr 23 21:17:54.384489 2026] [:error] [pid 64998:tid 65007] [client 74.248.17.200:37239] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeocAoV5EysYcTLjmwh4DgAAAcU"]
[Thu Apr 23 21:17:55.120877 2026] [:error] [pid 42973:tid 43048] [client 74.248.17.200:30605] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeocA26I0QqmmmLTHE0ZNAAAAIU"]
[Thu Apr 23 21:17:55.900367 2026] [:error] [pid 64998:tid 65003] [client 74.248.17.200:61232] [client 74.248.17.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws61.php"] [unique_id "aeocA4V5EysYcTLjmwh4EgAAAcE"]
[Thu Apr 23 21:17:56.701029 2026] [:error] [pid 42973:tid 43060] [client 74.248.17.200:49722] File does not exist: /usr/local/apache/htdocs/suspended-page/ws61.php
[Thu Apr 23 21:17:56.965077 2026] [:error] [pid 42973:tid 43066] [client 74.248.17.200:49722] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Thu Apr 23 21:31:18.311798 2026] [:error] [pid 65000:tid 65049] [client 43.156.18.240:43892] [client 43.156.18.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeofJr6vRb9j6psK2ZaO7AAAAhA"]
[Thu Apr 23 23:01:20.306583 2026] [:error] [pid 46953:tid 46961] [client 170.106.160.90:38040] [client 170.106.160.90] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeo0QEnlpdHh-P6wKbpLbwAAAkU"]
[Thu Apr 23 23:51:17.688776 2026] [:error] [pid 64998:tid 65026] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 23:51:17.875991 2026] [:error] [pid 64998:tid 65009] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 23:51:18.036883 2026] [:error] [pid 64998:tid 65017] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 23:51:18.203768 2026] [:error] [pid 64998:tid 65016] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 23:51:18.369794 2026] [:error] [pid 64998:tid 65019] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 23:51:18.531880 2026] [:error] [pid 64998:tid 65004] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 23:51:18.699043 2026] [:error] [pid 64998:tid 65006] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 23:51:18.864959 2026] [:error] [pid 64998:tid 65017] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 23:51:19.188115 2026] [:error] [pid 64998:tid 65024] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 23:51:19.354882 2026] [:error] [pid 64998:tid 65026] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 23:51:19.516716 2026] [:error] [pid 64998:tid 65017] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 23:51:19.682782 2026] [:error] [pid 64998:tid 65004] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 23:51:19.848604 2026] [:error] [pid 64998:tid 65006] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 23:51:20.013760 2026] [:error] [pid 64998:tid 65019] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 23:51:20.183931 2026] [:error] [pid 64998:tid 65008] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 23:51:20.346330 2026] [:error] [pid 64998:tid 65017] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 23:51:20.514186 2026] [:error] [pid 64998:tid 65026] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 23:51:20.683120 2026] [:error] [pid 64998:tid 65017] [client 173.239.218.37:26681] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 23:51:22.992597 2026] [:error] [pid 64998:tid 65019] [client 173.239.218.37:26681] [client 173.239.218.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeo_-oV5EysYcTLjmwjVsQAAAdE"]
[Thu Apr 23 23:51:49.543541 2026] [autoindex:error] [pid 46953:tid 46981] [client 173.239.218.54:62745] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Apr 24 04:23:13.025685 2026] [:error] [pid 52129:tid 52144] [client 68.221.139.118:27388] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Fri Apr 24 04:23:13.270041 2026] [:error] [pid 52129:tid 52135] [client 68.221.139.118:27388] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 24 04:23:13.511858 2026] [:error] [pid 52129:tid 52157] [client 68.221.139.118:27388] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Fri Apr 24 04:23:13.754010 2026] [:error] [pid 52129:tid 52155] [client 68.221.139.118:27388] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Fri Apr 24 04:23:14.000601 2026] [:error] [pid 52129:tid 52138] [client 68.221.139.118:27388] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Apr 24 04:23:14.244556 2026] [:error] [pid 52129:tid 52146] [client 68.221.139.118:27388] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 24 04:23:14.490071 2026] [:error] [pid 52129:tid 52154] [client 68.221.139.118:27388] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Apr 24 06:12:44.136393 2026] [:error] [pid 19200:tid 19228] [client 130.193.230.27:59599] [client 130.193.230.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.193.230.27, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeqZXDQ--M3-tsKAnhGhKAAAANQ"]
[Fri Apr 24 06:12:44.146382 2026] [:error] [pid 19200:tid 19228] [client 130.193.230.27:59599] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 24 06:22:10.219371 2026] [:error] [pid 52129:tid 52146] [client 106.119.167.146:36206] [client 106.119.167.146] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeqbkuKCZKf8_u2LKiBuiwAAAQ0"]
[Fri Apr 24 06:22:14.754206 2026] [:error] [pid 19200:tid 19211] [client 20.100.190.36:39129] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 06:22:15.203536 2026] [:error] [pid 19200:tid 19219] [client 20.100.190.36:39129] [client 20.100.190.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeqblzQ--M3-tsKAnhGmJwAAAMs"]
[Fri Apr 24 06:22:17.806201 2026] [:error] [pid 52129:tid 52154] [client 20.100.190.36:34826] [client 20.100.190.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeqbmeKCZKf8_u2LKiBuqgAAARU"]
[Fri Apr 24 06:22:25.136338 2026] [:error] [pid 19200:tid 19232] [client 20.100.190.36:42948] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Fri Apr 24 06:22:25.402209 2026] [:error] [pid 19200:tid 19211] [client 20.100.190.36:42948] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Fri Apr 24 06:22:25.667543 2026] [:error] [pid 19200:tid 19217] [client 20.100.190.36:42948] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 24 06:22:26.007986 2026] [:error] [pid 19200:tid 19228] [client 20.100.190.36:42948] File does not exist: /usr/local/apache/htdocs/suspended-page/xr.php
[Fri Apr 24 06:22:26.275580 2026] [:error] [pid 19200:tid 19213] [client 20.100.190.36:42948] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Apr 24 06:22:26.822086 2026] [:error] [pid 19200:tid 19214] [client 20.100.190.36:42948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Fri Apr 24 06:22:27.087510 2026] [:error] [pid 19200:tid 19226] [client 20.100.190.36:42948] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Apr 24 06:22:27.355635 2026] [:error] [pid 19200:tid 19217] [client 20.100.190.36:42948] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeqbozQ--M3-tsKAnhGmWQAAAMk"]
[Fri Apr 24 06:22:35.236563 2026] [:error] [pid 19200:tid 19223] [client 20.100.190.36:33455] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeqbqzQ--M3-tsKAnhGmdgAAAM8"]
[Fri Apr 24 06:22:41.072001 2026] [:error] [pid 19102:tid 19188] [client 20.100.190.36:43493] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "aeqbsQDSgrbLEZbkqD7MMwAAAJg"]
[Fri Apr 24 06:22:45.884300 2026] [:error] [pid 52129:tid 52140] [client 20.100.190.36:44209] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeqbteKCZKf8_u2LKiBvOAAAAQc"]
[Fri Apr 24 06:22:48.030871 2026] [:error] [pid 52129:tid 52140] [client 20.100.190.36:42348] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeqbuOKCZKf8_u2LKiBvSgAAAQc"]
[Fri Apr 24 06:22:53.558142 2026] [:error] [pid 19200:tid 19220] [client 20.100.190.36:42426] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeqbvTQ--M3-tsKAnhGmoQAAAMw"]
[Fri Apr 24 06:22:55.340147 2026] [:error] [pid 52129:tid 52157] [client 20.100.190.36:34082] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "aeqbv-KCZKf8_u2LKiBvdQAAARg"]
[Fri Apr 24 06:22:56.181827 2026] [:error] [pid 52129:tid 52133] [client 20.100.190.36:38986] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "aeqbwOKCZKf8_u2LKiBvfAAAAQA"]
[Fri Apr 24 06:22:57.962632 2026] [:error] [pid 19200:tid 19208] [client 20.100.190.36:35991] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "aeqbwTQ--M3-tsKAnhGmuQAAAMA"]
[Fri Apr 24 06:22:58.921208 2026] [:error] [pid 19102:tid 19166] [client 20.100.190.36:42399] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "aeqbwgDSgrbLEZbkqD7MYwAAAII"]
[Fri Apr 24 06:23:00.812901 2026] [:error] [pid 19101:tid 19148] [client 20.100.190.36:43789] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/export.php"] [unique_id "aeqbxGAHj9bEvrTgbO3USAAAAEs"]
[Fri Apr 24 06:23:01.687542 2026] [:error] [pid 19200:tid 19221] [client 20.100.190.36:32972] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aeqbxTQ--M3-tsKAnhGmwgAAAM0"]
[Fri Apr 24 06:23:04.434800 2026] [:error] [pid 19200:tid 19222] [client 20.100.190.36:32994] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aeqbyDQ--M3-tsKAnhGm5wAAAM4"]
[Fri Apr 24 06:23:05.381370 2026] [:error] [pid 19102:tid 19165] [client 20.100.190.36:39013] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aeqbyQDSgrbLEZbkqD7McgAAAIE"]
[Fri Apr 24 06:23:06.239157 2026] [:error] [pid 52129:tid 52147] [client 20.100.190.36:41121] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "aeqbyuKCZKf8_u2LKiBvugAAAQ4"]
[Fri Apr 24 06:23:09.100645 2026] [:error] [pid 19200:tid 19211] [client 20.100.190.36:36019] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aeqbzTQ--M3-tsKAnhGnDAAAAMM"]
[Fri Apr 24 06:23:10.489533 2026] [:error] [pid 19102:tid 19179] [client 20.100.190.36:43901] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aeqbzgDSgrbLEZbkqD7MgwAAAI8"]
[Fri Apr 24 06:23:11.557409 2026] [:error] [pid 52129:tid 52141] [client 20.100.190.36:10155] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aeqbz-KCZKf8_u2LKiBv4gAAAQg"]
[Fri Apr 24 06:23:12.745513 2026] [:error] [pid 19102:tid 19171] [client 20.100.190.36:9785] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdn.php"] [unique_id "aeqb0ADSgrbLEZbkqD7MjgAAAIc"]
[Fri Apr 24 06:23:13.958439 2026] [:error] [pid 19102:tid 19186] [client 20.100.190.36:41437] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeqb0QDSgrbLEZbkqD7MmQAAAJY"]
[Fri Apr 24 06:23:15.864441 2026] [:error] [pid 19200:tid 19209] [client 20.100.190.36:36012] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeqb0zQ--M3-tsKAnhGnOgAAAME"]
[Fri Apr 24 06:23:17.044532 2026] [:error] [pid 19102:tid 19178] [client 20.100.190.36:41427] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeqb1QDSgrbLEZbkqD7MqgAAAI4"]
[Fri Apr 24 06:23:18.008059 2026] [:error] [pid 19102:tid 19188] [client 20.100.190.36:40574] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bootstrap.php"] [unique_id "aeqb1gDSgrbLEZbkqD7MsAAAAJg"]
[Fri Apr 24 06:23:18.796571 2026] [:error] [pid 52129:tid 52150] [client 20.100.190.36:44602] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeqb1uKCZKf8_u2LKiBv6QAAARE"]
[Fri Apr 24 06:23:19.713414 2026] [:error] [pid 19200:tid 19225] [client 20.100.190.36:41458] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeqb1zQ--M3-tsKAnhGnRAAAANE"]
[Fri Apr 24 06:23:21.375662 2026] [:error] [pid 19102:tid 19178] [client 20.100.190.36:40559] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeqb2QDSgrbLEZbkqD7MvwAAAI4"]
[Fri Apr 24 06:23:22.851966 2026] [:error] [pid 52129:tid 52133] [client 20.100.190.36:14247] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws66.php"] [unique_id "aeqb2uKCZKf8_u2LKiBv7wAAAQA"]
[Fri Apr 24 06:23:24.365289 2026] [:error] [pid 19102:tid 19166] [client 20.100.190.36:10146] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeqb3ADSgrbLEZbkqD7MxgAAAII"]
[Fri Apr 24 06:23:25.096328 2026] [:error] [pid 52129:tid 52139] [client 20.100.190.36:42459] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeqb3eKCZKf8_u2LKiBv-AAAAQY"]
[Fri Apr 24 06:23:26.214821 2026] [:error] [pid 52129:tid 52156] [client 20.100.190.36:35176] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeqb3uKCZKf8_u2LKiBv_wAAARc"]
[Fri Apr 24 06:23:26.883107 2026] [:error] [pid 52129:tid 52148] [client 20.100.190.36:41112] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "aeqb3uKCZKf8_u2LKiBwBwAAAQ8"]
[Fri Apr 24 06:23:27.710682 2026] [:error] [pid 52129:tid 52157] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Fri Apr 24 06:23:27.974689 2026] [:error] [pid 52129:tid 52133] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 24 06:23:28.252277 2026] [:error] [pid 52129:tid 52153] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 24 06:23:28.516045 2026] [:error] [pid 52129:tid 52139] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri Apr 24 06:23:28.795880 2026] [:error] [pid 52129:tid 52141] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-style.php
[Fri Apr 24 06:23:29.061374 2026] [:error] [pid 52129:tid 52155] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Fri Apr 24 06:23:29.593733 2026] [:error] [pid 52129:tid 52136] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 24 06:23:29.858178 2026] [:error] [pid 52129:tid 52148] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 24 06:23:30.123206 2026] [:error] [pid 52129:tid 52152] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/easy.php
[Fri Apr 24 06:23:30.412762 2026] [:error] [pid 52129:tid 52157] [client 20.100.190.36:34513] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Fri Apr 24 06:23:30.695601 2026] [:error] [pid 52129:tid 52147] [client 20.100.190.36:34513] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeqb4uKCZKf8_u2LKiBwKAAAAQ4"]
[Fri Apr 24 06:23:31.239951 2026] [:error] [pid 52129:tid 52133] [client 20.100.190.36:34530] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeqb4-KCZKf8_u2LKiBwMAAAAQA"]
[Fri Apr 24 06:23:31.816529 2026] [:error] [pid 52129:tid 52150] [client 20.100.190.36:35190] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeqb4-KCZKf8_u2LKiBwNQAAARE"]
[Fri Apr 24 06:23:32.380504 2026] [:error] [pid 52129:tid 52139] [client 20.100.190.36:41108] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "aeqb5OKCZKf8_u2LKiBwNwAAAQY"]
[Fri Apr 24 06:23:32.907961 2026] [:error] [pid 52129:tid 52152] [client 20.100.190.36:43423] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a332.php"] [unique_id "aeqb5OKCZKf8_u2LKiBwPAAAARM"]
[Fri Apr 24 06:23:33.440279 2026] [:error] [pid 19100:tid 19134] [client 20.100.190.36:9784] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a332.php"] [unique_id "aeqb5bF_hzQs4CqbifcPewAAABg"]
[Fri Apr 24 06:23:33.996866 2026] [:error] [pid 19100:tid 19129] [client 20.100.190.36:40982] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a332.php"] [unique_id "aeqb5bF_hzQs4CqbifcPfgAAABM"]
[Fri Apr 24 06:23:34.559914 2026] [:error] [pid 19101:tid 19159] [client 20.100.190.36:43394] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a332.php"] [unique_id "aeqb5mAHj9bEvrTgbO3UhgAAAFY"]
[Fri Apr 24 06:23:35.151098 2026] [:error] [pid 19200:tid 19209] [client 20.100.190.36:9748] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aeqb5zQ--M3-tsKAnhGnYAAAAME"]
[Fri Apr 24 06:23:35.706347 2026] [:error] [pid 19101:tid 19142] [client 20.100.190.36:32971] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aeqb52AHj9bEvrTgbO3UigAAAEU"]
[Fri Apr 24 06:23:36.281878 2026] [:error] [pid 19102:tid 19184] [client 20.100.190.36:44572] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aeqb6ADSgrbLEZbkqD7M4QAAAJQ"]
[Fri Apr 24 06:23:36.896502 2026] [:error] [pid 52129:tid 52150] [client 20.100.190.36:9744] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aeqb6OKCZKf8_u2LKiBwRAAAARE"]
[Fri Apr 24 06:23:37.446738 2026] [:error] [pid 52129:tid 52144] [client 20.100.190.36:37972] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeqb6eKCZKf8_u2LKiBwSQAAAQs"]
[Fri Apr 24 06:23:38.024663 2026] [:error] [pid 19200:tid 19228] [client 20.100.190.36:41131] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeqb6jQ--M3-tsKAnhGnYwAAANQ"]
[Fri Apr 24 06:23:38.596569 2026] [:error] [pid 19100:tid 19121] [client 20.100.190.36:43034] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeqb6rF_hzQs4CqbifcPiwAAAAs"]
[Fri Apr 24 06:23:39.162244 2026] [:error] [pid 19100:tid 19126] [client 20.100.190.36:41124] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "aeqb67F_hzQs4CqbifcPkQAAABA"]
[Fri Apr 24 06:23:39.733323 2026] [:error] [pid 19100:tid 19122] [client 20.100.190.36:39046] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeqb67F_hzQs4CqbifcPmAAAAAw"]
[Fri Apr 24 06:23:40.305195 2026] [:error] [pid 19102:tid 19167] [client 20.100.190.36:44574] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeqb7ADSgrbLEZbkqD7M5wAAAIM"]
[Fri Apr 24 06:23:40.863315 2026] [:error] [pid 19100:tid 19110] [client 20.100.190.36:35988] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeqb7LF_hzQs4CqbifcPnAAAAAE"]
[Fri Apr 24 06:23:41.473878 2026] [:error] [pid 19200:tid 19227] [client 20.100.190.36:39050] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "aeqb7TQ--M3-tsKAnhGnaAAAANM"]
[Fri Apr 24 06:23:42.041581 2026] [:error] [pid 19101:tid 19141] [client 20.100.190.36:39057] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aeqb7mAHj9bEvrTgbO3UkQAAAEQ"]
[Fri Apr 24 06:23:42.695609 2026] [:error] [pid 52129:tid 52149] [client 20.100.190.36:40970] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aeqb7uKCZKf8_u2LKiBwVgAAARA"]
[Fri Apr 24 06:23:43.255637 2026] [:error] [pid 19101:tid 19144] [client 20.100.190.36:43067] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aeqb72AHj9bEvrTgbO3UkgAAAEc"]
[Fri Apr 24 06:23:43.839153 2026] [:error] [pid 52129:tid 52141] [client 20.100.190.36:32978] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "aeqb7-KCZKf8_u2LKiBwXAAAAQg"]
[Fri Apr 24 06:23:44.489155 2026] [:error] [pid 19101:tid 19152] [client 20.100.190.36:10173] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeqb8GAHj9bEvrTgbO3UlAAAAE8"]
[Fri Apr 24 06:23:45.117657 2026] [:error] [pid 19100:tid 19116] [client 20.100.190.36:38786] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeqb8bF_hzQs4CqbifcPqQAAAAc"]
[Fri Apr 24 06:23:45.689317 2026] [:error] [pid 19200:tid 19224] [client 20.100.190.36:41132] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeqb8TQ--M3-tsKAnhGnbQAAANA"]
[Fri Apr 24 06:23:46.281717 2026] [:error] [pid 52129:tid 52146] [client 20.100.190.36:36005] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "aeqb8uKCZKf8_u2LKiBwZQAAAQ0"]
[Fri Apr 24 06:23:46.850030 2026] [:error] [pid 52129:tid 52141] [client 20.100.190.36:40536] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeqb8uKCZKf8_u2LKiBwZwAAAQg"]
[Fri Apr 24 06:23:47.433154 2026] [:error] [pid 52129:tid 52144] [client 20.100.190.36:34559] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeqb8-KCZKf8_u2LKiBwawAAAQs"]
[Fri Apr 24 06:23:48.052581 2026] [:error] [pid 19200:tid 19215] [client 20.100.190.36:33000] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeqb9DQ--M3-tsKAnhGncQAAAMc"]
[Fri Apr 24 06:23:48.593783 2026] [:error] [pid 19101:tid 19150] [client 20.100.190.36:43396] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "aeqb9GAHj9bEvrTgbO3UmQAAAE0"]
[Fri Apr 24 06:23:49.187369 2026] [:error] [pid 52129:tid 52141] [client 20.100.190.36:36011] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aeqb9eKCZKf8_u2LKiBwdAAAAQg"]
[Fri Apr 24 06:23:49.760060 2026] [:error] [pid 19100:tid 19120] [client 20.100.190.36:40961] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aeqb9bF_hzQs4CqbifcPrgAAAAo"]
[Fri Apr 24 06:23:50.323890 2026] [:error] [pid 52129:tid 52147] [client 20.100.190.36:41107] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aeqb9uKCZKf8_u2LKiBwegAAAQ4"]
[Fri Apr 24 06:23:50.974757 2026] [:error] [pid 19102:tid 19164] [client 20.100.190.36:43060] [client 20.100.190.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "aeqb9gDSgrbLEZbkqD7M_AAAAIA"]
[Fri Apr 24 07:28:23.393765 2026] [:error] [pid 52129:tid 52147] [client 43.157.53.115:33102] [client 43.157.53.115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeqrF-KCZKf8_u2LKiCysAAAAQ4"]
[Fri Apr 24 09:59:40.057098 2026] [:error] [pid 19200:tid 19211] [client 43.128.73.132:51306] [client 43.128.73.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aerOjDQ--M3-tsKAnhFRhQAAAMM"]
[Fri Apr 24 10:32:05.915030 2026] [:error] [pid 22114:tid 22140] [client 194.26.192.182:59937] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aerWJYAuWGz3WlMQjodp8wAAARc"]
[Fri Apr 24 10:32:06.431391 2026] [:error] [pid 17720:tid 17772] [client 194.26.192.182:60238] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aerWJuhlUs6BS3Ng7_WoWQAAANI"]
[Fri Apr 24 10:32:06.941751 2026] [:error] [pid 17720:tid 17769] [client 194.26.192.182:60512] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aerWJuhlUs6BS3Ng7_WoWwAAAM8"]
[Fri Apr 24 10:32:07.444675 2026] [:error] [pid 17808:tid 17811] [client 194.26.192.182:60983] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aerWJ-arbOEFI8qshvI8gwAAAEE"]
[Fri Apr 24 10:32:08.010199 2026] [:error] [pid 22114:tid 22117] [client 194.26.192.182:61355] [client 194.26.192.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aerWKIAuWGz3WlMQjodqZgAAAQA"]
[Fri Apr 24 10:33:55.157856 2026] [:error] [pid 17720:tid 17755] [client 43.134.5.186:47938] [client 43.134.5.186] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aerWk-hlUs6BS3Ng7_WpuAAAAME"]
[Fri Apr 24 11:04:41.789592 2026] [:error] [pid 17808:tid 17829] [client 43.156.225.86:51330] [client 43.156.225.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aerdyearbOEFI8qshvJGFgAAAFM"]
[Fri Apr 24 11:35:57.719169 2026] [:error] [pid 17720:tid 17767] [client 101.32.239.179:52632] [client 101.32.239.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aerlHehlUs6BS3Ng7_XDCQAAAM0"]
[Fri Apr 24 12:07:58.489436 2026] [:error] [pid 22114:tid 22140] [client 129.226.146.42:39340] [client 129.226.146.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aersnoAuWGz3WlMQjoePyQAAARc"]
[Fri Apr 24 12:40:33.682669 2026] [:error] [pid 17719:tid 17729] [client 129.226.193.122:43858] [client 129.226.193.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aer0QcTZ9gzEyL1BkPoZewAAAII"]
[Fri Apr 24 12:49:48.020815 2026] [:error] [pid 17720:tid 17754] [client 182.44.12.37:52228] [client 182.44.12.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aer2bOhlUs6BS3Ng7_Xf3gAAAMA"]
[Fri Apr 24 12:57:42.034569 2026] [:error] [pid 17721:tid 17797] [client 43.166.136.202:55870] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aer4RuFXXkLeyDnfk_-z7QAAABA"]
[Fri Apr 24 13:14:02.517978 2026] [:error] [pid 17720:tid 17768] [client 43.156.122.201:54644] [client 43.156.122.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aer8GuhlUs6BS3Ng7_XlMAAAAM4"]
[Fri Apr 24 14:39:23.775179 2026] [:error] [pid 17719:tid 17750] [client 43.153.205.132:38320] [client 43.153.205.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aesQG8TZ9gzEyL1BkPpZTQAAAJc"]
[Fri Apr 24 15:10:07.009766 2026] [:error] [pid 14531:tid 14536] [client 43.156.114.184:51580] [client 43.156.114.184] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aesXT3fLU2gw-6KR-GZbuQAAAUM"]
[Fri Apr 24 15:42:19.787430 2026] [:error] [pid 17720:tid 17763] [client 43.134.178.104:41936] [client 43.134.178.104] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aese2-hlUs6BS3Ng7_UMgwAAAMk"]
[Fri Apr 24 15:50:55.189306 2026] [:error] [pid 17808:tid 17814] [client 43.133.66.51:52508] [client 43.133.66.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aesg3-arbOEFI8qshvLBpwAAAEQ"]
[Fri Apr 24 16:05:21.672335 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri Apr 24 16:05:21.974147 2026] [:error] [pid 17720:tid 17778] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Fri Apr 24 16:05:22.389733 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 24 16:05:22.691032 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lacoto.php
[Fri Apr 24 16:05:22.996055 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Fri Apr 24 16:05:23.396680 2026] [:error] [pid 17720:tid 17757] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Fri Apr 24 16:05:24.585191 2026] [:error] [pid 17720:tid 17757] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Fri Apr 24 16:05:24.998756 2026] [:error] [pid 17720:tid 17764] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-X1s2e6h3p7.php
[Fri Apr 24 16:05:27.078726 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Fri Apr 24 16:05:27.380636 2026] [:error] [pid 17720:tid 17769] [client 20.107.212.3:14873] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Fri Apr 24 16:05:27.742824 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:14873] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aeskR-hlUs6BS3Ng7_UYCQAAANE"]
[Fri Apr 24 16:05:29.692976 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:33951] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aeskSearbOEFI8qshvLHZQAAAE4"]
[Fri Apr 24 16:05:31.184482 2026] [:error] [pid 17721:tid 17791] [client 20.107.212.3:33933] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aeskS-FXXkLeyDnfk__zhwAAAAo"]
[Fri Apr 24 16:05:32.317819 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:37938] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "aeskTHfLU2gw-6KR-GZvJgAAAUI"]
[Fri Apr 24 16:05:34.942946 2026] [:error] [pid 22114:tid 22124] [client 20.107.212.3:14165] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj11.php"] [unique_id "aeskToAuWGz3WlMQjoe6EwAAAQc"]
[Fri Apr 24 16:05:37.766279 2026] [:error] [pid 14531:tid 14538] [client 20.107.212.3:53072] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj11.php"] [unique_id "aeskUXfLU2gw-6KR-GZvMgAAAUU"]
[Fri Apr 24 16:05:39.248018 2026] [:error] [pid 17808:tid 17814] [client 20.107.212.3:15207] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj11.php"] [unique_id "aeskU-arbOEFI8qshvLHeQAAAEQ"]
[Fri Apr 24 16:05:43.502189 2026] [:error] [pid 17721:tid 17790] [client 20.107.212.3:42814] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aj11.php"] [unique_id "aeskV-FXXkLeyDnfk__zmAAAAAk"]
[Fri Apr 24 16:05:44.672855 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:51139] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "aeskWOhlUs6BS3Ng7_UYQgAAAMg"]
[Fri Apr 24 16:05:46.839599 2026] [:error] [pid 17808:tid 17822] [client 20.107.212.3:53820] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "aeskWuarbOEFI8qshvLHhwAAAEw"]
[Fri Apr 24 16:05:49.863712 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:52542] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "aeskXehlUs6BS3Ng7_UYWwAAAMA"]
[Fri Apr 24 16:05:52.052864 2026] [:error] [pid 17720:tid 17778] [client 20.107.212.3:31272] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "aeskYOhlUs6BS3Ng7_UYZQAAANg"]
[Fri Apr 24 16:05:53.641185 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:52422] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeskYehlUs6BS3Ng7_UYcAAAANA"]
[Fri Apr 24 16:05:58.580143 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:6131] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeskZuhlUs6BS3Ng7_UYeAAAAMk"]
[Fri Apr 24 16:05:59.791876 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:13940] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeskZ-hlUs6BS3Ng7_UYgwAAANE"]
[Fri Apr 24 16:06:01.855917 2026] [:error] [pid 14531:tid 14552] [client 20.107.212.3:43831] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xroot.php"] [unique_id "aeskaXfLU2gw-6KR-GZvbQAAAVM"]
[Fri Apr 24 16:06:03.076930 2026] [:error] [pid 17808:tid 17818] [client 20.107.212.3:17713] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeska-arbOEFI8qshvLHngAAAEg"]
[Fri Apr 24 16:06:04.685520 2026] [:error] [pid 17808:tid 17810] [client 20.107.212.3:20324] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeskbOarbOEFI8qshvLHoQAAAEA"]
[Fri Apr 24 16:06:06.036207 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:5277] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeskbuhlUs6BS3Ng7_UYlQAAAMU"]
[Fri Apr 24 16:06:11.994879 2026] [:error] [pid 14531:tid 14543] [client 20.107.212.3:14616] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tea.php"] [unique_id "aeskc3fLU2gw-6KR-GZvggAAAUo"]
[Fri Apr 24 16:06:13.144682 2026] [:error] [pid 17719:tid 17741] [client 20.107.212.3:25899] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "aeskdcTZ9gzEyL1BkPptfQAAAI4"]
[Fri Apr 24 16:06:14.621075 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:38858] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "aeskduhlUs6BS3Ng7_UYsAAAAMc"]
[Fri Apr 24 16:06:15.937882 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:38860] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "aeskd-arbOEFI8qshvLHtQAAAEc"]
[Fri Apr 24 16:06:17.587618 2026] [:error] [pid 17719:tid 17744] [client 20.107.212.3:14652] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "aeskecTZ9gzEyL1BkPpthAAAAJE"]
[Fri Apr 24 16:06:20.295900 2026] [:error] [pid 22114:tid 22122] [client 20.107.212.3:24519] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeskfIAuWGz3WlMQjoe6MgAAAQU"]
[Fri Apr 24 16:06:28.996081 2026] [:error] [pid 17720:tid 17773] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Fri Apr 24 16:06:29.456352 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Fri Apr 24 16:06:30.027414 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Fri Apr 24 16:06:30.432649 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Fri Apr 24 16:06:30.786182 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 24 16:06:31.039055 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Fri Apr 24 16:06:31.406259 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Fri Apr 24 16:06:31.701737 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/qhupyoon.php
[Fri Apr 24 16:06:32.087393 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 24 16:06:32.670920 2026] [:error] [pid 17720:tid 17778] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Fri Apr 24 16:06:33.279511 2026] [:error] [pid 17720:tid 17778] [client 20.107.212.3:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/6ap7e.php
[Fri Apr 24 16:06:34.237137 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:38867] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeskiuhlUs6BS3Ng7_UY5QAAANU"]
[Fri Apr 24 16:06:37.744056 2026] [:error] [pid 17808:tid 17816] [client 20.107.212.3:24525] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeskjearbOEFI8qshvLIHgAAAEY"]
[Fri Apr 24 16:06:41.982539 2026] [:error] [pid 17721:tid 17783] [client 20.107.212.3:38853] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeskkeFXXkLeyDnfk__zzQAAAAI"]
[Fri Apr 24 16:06:42.869457 2026] [:error] [pid 14531:tid 14550] [client 20.107.212.3:5311] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "aeskknfLU2gw-6KR-GZwOwAAAVE"]
[Fri Apr 24 16:06:44.264227 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:38872] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aesklOhlUs6BS3Ng7_UZGQAAANI"]
[Fri Apr 24 16:06:45.345587 2026] [:error] [pid 17720:tid 17776] [client 20.107.212.3:34030] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aesklehlUs6BS3Ng7_UZJAAAANY"]
[Fri Apr 24 16:06:46.575389 2026] [:error] [pid 17808:tid 17825] [client 20.107.212.3:15632] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeskluarbOEFI8qshvLIRAAAAE8"]
[Fri Apr 24 16:06:47.582492 2026] [:error] [pid 14531:tid 14540] [client 20.107.212.3:45195] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "aeskl3fLU2gw-6KR-GZwPwAAAUc"]
[Fri Apr 24 16:06:48.679530 2026] [:error] [pid 17720:tid 17757] [client 20.107.212.3:15643] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeskmOhlUs6BS3Ng7_UZPAAAAMM"]
[Fri Apr 24 16:06:49.397043 2026] [:error] [pid 14531:tid 14551] [client 20.107.212.3:24534] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeskmXfLU2gw-6KR-GZwQQAAAVI"]
[Fri Apr 24 16:06:50.612445 2026] [:error] [pid 17721:tid 17803] [client 20.107.212.3:34016] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aeskmuFXXkLeyDnfk__z1gAAABY"]
[Fri Apr 24 16:06:53.332039 2026] [:error] [pid 17808:tid 17832] [client 20.107.212.3:55663] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "aesknearbOEFI8qshvLIYgAAAFY"]
[Fri Apr 24 16:06:55.634492 2026] [:error] [pid 17721:tid 17795] [client 20.107.212.3:5177] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeskn-FXXkLeyDnfk__z3wAAAA4"]
[Fri Apr 24 16:06:58.086498 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:41658] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeskouhlUs6BS3Ng7_UZcAAAAMQ"]
[Fri Apr 24 16:06:59.695484 2026] [:error] [pid 17721:tid 17782] [client 20.107.212.3:14954] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aesko-FXXkLeyDnfk__z5gAAAAE"]
[Fri Apr 24 16:07:02.583777 2026] [:error] [pid 17808:tid 17812] [client 20.107.212.3:26889] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "aeskpuarbOEFI8qshvLIcAAAAEI"]
[Fri Apr 24 16:07:04.872325 2026] [:error] [pid 14531:tid 14554] [client 20.107.212.3:21451] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeskqHfLU2gw-6KR-GZwoQAAAVU"]
[Fri Apr 24 16:07:06.933881 2026] [:error] [pid 17719:tid 17738] [client 20.107.212.3:55646] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeskqsTZ9gzEyL1BkPpt0gAAAIs"]
[Fri Apr 24 16:07:08.665915 2026] [:error] [pid 17719:tid 17740] [client 20.107.212.3:5170] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeskrMTZ9gzEyL1BkPpt1AAAAI0"]
[Fri Apr 24 16:07:09.965133 2026] [:error] [pid 17808:tid 17823] [client 20.107.212.3:17021] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "aeskrearbOEFI8qshvLIkgAAAE0"]
[Fri Apr 24 16:07:11.446455 2026] [:error] [pid 17721:tid 17803] [client 20.107.212.3:17508] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atkno.php"] [unique_id "aeskr-FXXkLeyDnfk__z-AAAABY"]
[Fri Apr 24 16:07:12.870810 2026] [:error] [pid 14531:tid 14541] [client 20.107.212.3:54412] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atkno.php"] [unique_id "aesksHfLU2gw-6KR-GZwrQAAAUg"]
[Fri Apr 24 16:07:15.033677 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:16435] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atkno.php"] [unique_id "aesks-arbOEFI8qshvLIqQAAAE4"]
[Fri Apr 24 16:07:19.167253 2026] [:error] [pid 17808:tid 17826] [client 20.107.212.3:24508] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atkno.php"] [unique_id "aeskt-arbOEFI8qshvLIwQAAAFA"]
[Fri Apr 24 16:07:25.624311 2026] [:error] [pid 14531:tid 14536] [client 20.107.212.3:41580] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "aeskvXfLU2gw-6KR-GZw2AAAAUM"]
[Fri Apr 24 16:07:28.328826 2026] [:error] [pid 17720:tid 17767] [client 20.107.212.3:35038] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "aeskwOhlUs6BS3Ng7_UZtAAAAM0"]
[Fri Apr 24 16:07:55.377142 2026] [:error] [pid 22114:tid 22134] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Fri Apr 24 16:07:55.694399 2026] [:error] [pid 22114:tid 22139] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Fri Apr 24 16:07:56.009372 2026] [:error] [pid 22114:tid 22125] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Fri Apr 24 16:07:56.323593 2026] [:error] [pid 22114:tid 22133] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Fri Apr 24 16:07:56.637928 2026] [:error] [pid 22114:tid 22135] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/ptanf.php
[Fri Apr 24 16:07:56.977565 2026] [:error] [pid 22114:tid 22131] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Fri Apr 24 16:07:57.315966 2026] [:error] [pid 22114:tid 22118] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Fri Apr 24 16:07:57.645589 2026] [:error] [pid 22114:tid 22132] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Fri Apr 24 16:07:57.960648 2026] [:error] [pid 22114:tid 22124] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Fri Apr 24 16:07:59.099515 2026] [:error] [pid 22114:tid 22126] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Fri Apr 24 16:07:59.415743 2026] [:error] [pid 22114:tid 22125] [client 20.107.212.3:21445] File does not exist: /usr/local/apache/htdocs/suspended-page/index0.php
[Fri Apr 24 16:07:59.727633 2026] [:error] [pid 22114:tid 22133] [client 20.107.212.3:21445] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aesk34AuWGz3WlMQjoe6zQAAARA"]
[Fri Apr 24 16:08:01.706506 2026] [:error] [pid 14531:tid 14540] [client 20.107.212.3:21460] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aesk4XfLU2gw-6KR-GZxGwAAAUc"]
[Fri Apr 24 16:08:03.053755 2026] [:error] [pid 17721:tid 17790] [client 20.107.212.3:43320] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aesk4-FXXkLeyDnfk__0PAAAAAk"]
[Fri Apr 24 16:08:04.943463 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:19537] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-01ul.php"] [unique_id "aesk5OhlUs6BS3Ng7_UaFwAAAMk"]
[Fri Apr 24 16:08:06.503238 2026] [:error] [pid 17719:tid 17733] [client 20.107.212.3:6042] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aesk5sTZ9gzEyL1BkPpuOgAAAIY"]
[Fri Apr 24 16:08:10.754509 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:36706] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aesk6uhlUs6BS3Ng7_UaLgAAAMc"]
[Fri Apr 24 16:08:12.523922 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:46932] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aesk7OhlUs6BS3Ng7_UaMQAAANQ"]
[Fri Apr 24 16:08:16.682003 2026] [:error] [pid 22114:tid 22132] [client 20.107.212.3:46947] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/e3.php"] [unique_id "aesk8IAuWGz3WlMQjoe62QAAAQ8"]
[Fri Apr 24 16:08:18.953158 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:21958] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fkohd.php"] [unique_id "aesk8uhlUs6BS3Ng7_UaNQAAAME"]
[Fri Apr 24 16:08:22.174538 2026] [:error] [pid 14531:tid 14552] [client 20.107.212.3:5932] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fkohd.php"] [unique_id "aesk9nfLU2gw-6KR-GZxOAAAAVM"]
[Fri Apr 24 16:08:22.967344 2026] [:error] [pid 22114:tid 22123] [client 20.107.212.3:22510] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fkohd.php"] [unique_id "aesk9oAuWGz3WlMQjoe64QAAAQY"]
[Fri Apr 24 16:08:25.557544 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:46959] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fkohd.php"] [unique_id "aesk-ehlUs6BS3Ng7_UaRgAAAMw"]
[Fri Apr 24 16:08:26.906833 2026] [:error] [pid 17719:tid 17733] [client 20.107.212.3:5911] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aesk-sTZ9gzEyL1BkPpuUgAAAIY"]
[Fri Apr 24 16:08:29.055479 2026] [:error] [pid 17808:tid 17830] [client 20.107.212.3:54380] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aesk_earbOEFI8qshvLJbwAAAFQ"]
[Fri Apr 24 16:08:34.387826 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:45749] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aeslAnfLU2gw-6KR-GZxWAAAAUI"]
[Fri Apr 24 16:08:36.460755 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:46942] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "aeslBOhlUs6BS3Ng7_UaWAAAAMg"]
[Fri Apr 24 16:08:44.795794 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:46443] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeslDOhlUs6BS3Ng7_UacwAAANc"]
[Fri Apr 24 16:08:45.558829 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:17164] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeslDehlUs6BS3Ng7_UaegAAAMU"]
[Fri Apr 24 16:08:47.374777 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:46420] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeslD-arbOEFI8qshvLJpgAAAEc"]
[Fri Apr 24 16:08:48.664080 2026] [:error] [pid 17720:tid 17778] [client 20.107.212.3:19554] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "aeslEOhlUs6BS3Ng7_UahQAAANg"]
[Fri Apr 24 16:08:50.717788 2026] [:error] [pid 14531:tid 14545] [client 20.107.212.3:54395] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "aeslEnfLU2gw-6KR-GZxegAAAUw"]
[Fri Apr 24 16:08:52.590113 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:37866] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "aeslFOhlUs6BS3Ng7_UalwAAAMA"]
[Fri Apr 24 16:08:53.742534 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:15110] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "aeslFehlUs6BS3Ng7_UanQAAAMw"]
[Fri Apr 24 16:08:55.014350 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:15145] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "aeslF-hlUs6BS3Ng7_UanwAAAMg"]
[Fri Apr 24 16:08:57.032046 2026] [:error] [pid 17720:tid 17757] [client 20.107.212.3:25416] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aeslGehlUs6BS3Ng7_UapAAAAMM"]
[Fri Apr 24 16:08:58.380349 2026] [:error] [pid 14531:tid 14555] [client 20.107.212.3:25451] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "aeslGnfLU2gw-6KR-GZxiwAAAVY"]
[Fri Apr 24 16:09:00.278254 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Fri Apr 24 16:09:00.729417 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/masks.php
[Fri Apr 24 16:09:01.069536 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Fri Apr 24 16:09:01.454337 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Fri Apr 24 16:09:01.731060 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Fri Apr 24 16:09:02.007729 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Fri Apr 24 16:09:02.504398 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/wpconf.php
[Fri Apr 24 16:09:02.936424 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Apr 24 16:09:03.273877 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-zx.php
[Fri Apr 24 16:09:03.550134 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Fri Apr 24 16:09:03.836463 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:25460] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Fri Apr 24 16:09:04.144271 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:25460] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeslIOhlUs6BS3Ng7_UazAAAAMk"]
[Fri Apr 24 16:09:06.057390 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:25428] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeslIuhlUs6BS3Ng7_Ua1wAAAMQ"]
[Fri Apr 24 16:09:07.010193 2026] [:error] [pid 22114:tid 22120] [client 20.107.212.3:6039] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeslI4AuWGz3WlMQjoe6-QAAAQM"]
[Fri Apr 24 16:09:12.833308 2026] [:error] [pid 17719:tid 17741] [client 20.107.212.3:29529] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "aeslKMTZ9gzEyL1BkPpupQAAAI4"]
[Fri Apr 24 16:09:15.330366 2026] [:error] [pid 17719:tid 17737] [client 20.107.212.3:6065] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeslK8TZ9gzEyL1BkPpurQAAAIo"]
[Fri Apr 24 16:09:16.828052 2026] [:error] [pid 17719:tid 17749] [client 20.107.212.3:46912] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeslLMTZ9gzEyL1BkPpuswAAAJY"]
[Fri Apr 24 16:09:19.593092 2026] [:error] [pid 14531:tid 14546] [client 20.107.212.3:27526] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeslL3fLU2gw-6KR-GZyCgAAAU0"]
[Fri Apr 24 16:09:20.808473 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:37274] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jodohghi.php"] [unique_id "aeslMOhlUs6BS3Ng7_UbBwAAANQ"]
[Fri Apr 24 16:09:22.420586 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:14364] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rendi59.php"] [unique_id "aeslMuhlUs6BS3Ng7_UbCwAAANU"]
[Fri Apr 24 16:09:24.442914 2026] [:error] [pid 22114:tid 22123] [client 20.107.212.3:5493] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rendi59.php"] [unique_id "aeslNIAuWGz3WlMQjoe6_AAAAQY"]
[Fri Apr 24 16:09:28.139281 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:37882] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rendi59.php"] [unique_id "aeslOOhlUs6BS3Ng7_UbKAAAAMk"]
[Fri Apr 24 16:09:29.322906 2026] [:error] [pid 17719:tid 17745] [client 20.107.212.3:5359] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rendi59.php"] [unique_id "aeslOcTZ9gzEyL1BkPpuwQAAAJI"]
[Fri Apr 24 16:09:32.428065 2026] [:error] [pid 17720:tid 17766] [client 20.107.212.3:5868] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rivasqup.php"] [unique_id "aeslPOhlUs6BS3Ng7_UbTAAAAMw"]
[Fri Apr 24 16:09:34.449604 2026] [:error] [pid 17720:tid 17776] [client 20.107.212.3:37831] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rivasqup.php"] [unique_id "aeslPuhlUs6BS3Ng7_UbXwAAANY"]
[Fri Apr 24 16:09:35.684311 2026] [:error] [pid 17721:tid 17799] [client 20.107.212.3:19526] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rivasqup.php"] [unique_id "aeslP-FXXkLeyDnfk__0twAAABI"]
[Fri Apr 24 16:09:36.528591 2026] [:error] [pid 17719:tid 17736] [client 20.107.212.3:53163] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rivasqup.php"] [unique_id "aeslQMTZ9gzEyL1BkPpuxwAAAIk"]
[Fri Apr 24 16:09:37.690604 2026] [:error] [pid 14531:tid 14544] [client 20.107.212.3:37830] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeslQXfLU2gw-6KR-GZyGAAAAUs"]
[Fri Apr 24 16:09:39.103364 2026] [:error] [pid 14531:tid 14543] [client 20.107.212.3:14378] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeslQ3fLU2gw-6KR-GZyGwAAAUo"]
[Fri Apr 24 16:09:40.829529 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:14361] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeslROhlUs6BS3Ng7_UbfgAAANA"]
[Fri Apr 24 16:09:43.007749 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:53137] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mga.php"] [unique_id "aeslR-hlUs6BS3Ng7_UbggAAANE"]
[Fri Apr 24 16:09:43.973202 2026] [:error] [pid 17721:tid 17799] [client 20.107.212.3:27539] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dshtv.php"] [unique_id "aeslR-FXXkLeyDnfk__0yAAAABI"]
[Fri Apr 24 16:09:47.467351 2026] [:error] [pid 17719:tid 17741] [client 20.107.212.3:24989] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dshtv.php"] [unique_id "aeslS8TZ9gzEyL1BkPpu6wAAAI4"]
[Fri Apr 24 16:09:48.834251 2026] [:error] [pid 17720:tid 17768] [client 20.107.212.3:27625] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dshtv.php"] [unique_id "aeslTOhlUs6BS3Ng7_UbhwAAAM4"]
[Fri Apr 24 16:09:50.667068 2026] [:error] [pid 17808:tid 17811] [client 20.107.212.3:48958] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dshtv.php"] [unique_id "aeslTuarbOEFI8qshvLKUQAAAEE"]
[Fri Apr 24 16:09:51.598814 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:18393] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sym403.php"] [unique_id "aeslT-arbOEFI8qshvLKWAAAAE4"]
[Fri Apr 24 16:09:52.964901 2026] [:error] [pid 22114:tid 22121] [client 20.107.212.3:19110] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sym403.php"] [unique_id "aeslUIAuWGz3WlMQjoe7EwAAAQQ"]
[Fri Apr 24 16:09:53.647912 2026] [:error] [pid 14531:tid 14542] [client 20.107.212.3:19145] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sym403.php"] [unique_id "aeslUXfLU2gw-6KR-GZyKgAAAUk"]
[Fri Apr 24 16:09:57.057498 2026] [:error] [pid 14531:tid 14548] [client 20.107.212.3:51786] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sym403.php"] [unique_id "aeslVXfLU2gw-6KR-GZyNQAAAU8"]
[Fri Apr 24 16:10:01.038661 2026] [:error] [pid 14531:tid 14543] [client 20.107.212.3:27596] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/temp1.php"] [unique_id "aeslWXfLU2gw-6KR-GZyUwAAAUo"]
[Fri Apr 24 16:11:15.586514 2026] [:error] [pid 17808:tid 17811] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 24 16:11:16.126547 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Fri Apr 24 16:11:16.415926 2026] [:error] [pid 17808:tid 17823] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/bbny.php
[Fri Apr 24 16:11:16.895193 2026] [:error] [pid 17808:tid 17816] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Fri Apr 24 16:11:17.276700 2026] [:error] [pid 17808:tid 17821] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/zhw.php
[Fri Apr 24 16:11:17.616011 2026] [:error] [pid 17808:tid 17833] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Fri Apr 24 16:11:17.979639 2026] [:error] [pid 17808:tid 17818] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Fri Apr 24 16:11:18.371786 2026] [:error] [pid 17808:tid 17831] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/lov.php
[Fri Apr 24 16:11:18.726158 2026] [:error] [pid 17808:tid 17816] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/knw.php
[Fri Apr 24 16:11:19.034827 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Fri Apr 24 16:11:19.408501 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:28278] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Fri Apr 24 16:11:20.520161 2026] [:error] [pid 17808:tid 17818] [client 20.107.212.3:28278] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aeslqOarbOEFI8qshvLLdgAAAEg"]
[Fri Apr 24 16:11:23.680109 2026] [:error] [pid 14531:tid 14545] [client 20.107.212.3:47457] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aeslq3fLU2gw-6KR-GZzHgAAAUw"]
[Fri Apr 24 16:11:25.143057 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:47437] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aeslrehlUs6BS3Ng7_Uc0QAAAMg"]
[Fri Apr 24 16:11:28.573603 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:28181] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "aeslsOhlUs6BS3Ng7_Uc2AAAANI"]
[Fri Apr 24 16:11:30.886477 2026] [:error] [pid 22114:tid 22137] [client 20.107.212.3:28163] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aeslsoAuWGz3WlMQjoe7fQAAARQ"]
[Fri Apr 24 16:11:32.872376 2026] [:error] [pid 22114:tid 22128] [client 20.107.212.3:13951] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aesltIAuWGz3WlMQjoe7ggAAAQs"]
[Fri Apr 24 16:11:34.986745 2026] [:error] [pid 17808:tid 17826] [client 20.107.212.3:28286] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aesltuarbOEFI8qshvLLfAAAAFA"]
[Fri Apr 24 16:11:37.422252 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:13909] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "aesluehlUs6BS3Ng7_UdFAAAANQ"]
[Fri Apr 24 16:11:38.769179 2026] [:error] [pid 14531:tid 14557] [client 20.107.212.3:28170] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "aeslunfLU2gw-6KR-GZzLAAAAVg"]
[Fri Apr 24 16:11:42.388636 2026] [:error] [pid 17808:tid 17823] [client 20.107.212.3:28241] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "aeslvuarbOEFI8qshvLLhgAAAE0"]
[Fri Apr 24 16:11:43.712728 2026] [:error] [pid 17719:tid 17741] [client 20.107.212.3:49978] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "aeslv8TZ9gzEyL1BkPpvNgAAAI4"]
[Fri Apr 24 16:11:48.272972 2026] [:error] [pid 17808:tid 17829] [client 20.107.212.3:49960] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "aeslxOarbOEFI8qshvLLjwAAAFM"]
[Fri Apr 24 16:11:51.064077 2026] [:error] [pid 17719:tid 17744] [client 20.107.212.3:57019] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aeslx8TZ9gzEyL1BkPpvOwAAAJE"]
[Fri Apr 24 16:11:56.686645 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:30092] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aeslzOarbOEFI8qshvLLngAAAE4"]
[Fri Apr 24 16:11:59.682879 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:13861] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "aeslz-hlUs6BS3Ng7_UdTgAAAMU"]
[Fri Apr 24 16:12:05.076833 2026] [:error] [pid 17808:tid 17811] [client 20.107.212.3:46848] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "aesl1earbOEFI8qshvLLrQAAAEE"]
[Fri Apr 24 16:12:06.754967 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:21049] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "aesl1uarbOEFI8qshvLLswAAAEc"]
[Fri Apr 24 16:12:07.974760 2026] [:error] [pid 17720:tid 17757] [client 20.107.212.3:53757] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "aesl1-hlUs6BS3Ng7_UdXgAAAMM"]
[Fri Apr 24 16:12:09.603631 2026] [:error] [pid 14531:tid 14537] [client 20.107.212.3:29440] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "aesl2XfLU2gw-6KR-GZzVAAAAUQ"]
[Fri Apr 24 16:12:12.075801 2026] [:error] [pid 17721:tid 17801] [client 20.107.212.3:32326] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aesl3OFXXkLeyDnfk__1fQAAABQ"]
[Fri Apr 24 16:12:12.930118 2026] [:error] [pid 17808:tid 17813] [client 20.107.212.3:42177] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aesl3OarbOEFI8qshvLLwwAAAEM"]
[Fri Apr 24 16:12:14.938823 2026] [:error] [pid 22114:tid 22129] [client 20.107.212.3:6124] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aesl3oAuWGz3WlMQjoe7oAAAAQw"]
[Fri Apr 24 16:12:16.049622 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:17668] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "aesl4OarbOEFI8qshvLLzwAAAEc"]
[Fri Apr 24 16:12:17.317402 2026] [:error] [pid 17808:tid 17816] [client 20.107.212.3:32861] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filefuns.php"] [unique_id "aesl4earbOEFI8qshvLL0QAAAEY"]
[Fri Apr 24 16:12:18.421041 2026] [:error] [pid 17808:tid 17830] [client 20.107.212.3:20992] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filefuns.php"] [unique_id "aesl4uarbOEFI8qshvLL1gAAAFQ"]
[Fri Apr 24 16:12:21.097505 2026] [:error] [pid 17808:tid 17812] [client 20.107.212.3:20639] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Fri Apr 24 16:12:21.386610 2026] [:error] [pid 17808:tid 17833] [client 20.107.212.3:20639] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Fri Apr 24 16:12:21.645054 2026] [:error] [pid 17808:tid 17834] [client 20.107.212.3:20639] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Fri Apr 24 16:12:21.938365 2026] [:error] [pid 17808:tid 17825] [client 20.107.212.3:20639] [client 20.107.212.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "aesl5earbOEFI8qshvLL5AAAAE8"]
[Fri Apr 24 16:12:23.239196 2026] [:error] [pid 14531:tid 14554] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Fri Apr 24 16:12:23.556351 2026] [:error] [pid 14531:tid 14534] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Fri Apr 24 16:12:23.998359 2026] [:error] [pid 14531:tid 14546] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Fri Apr 24 16:12:24.470936 2026] [:error] [pid 14531:tid 14533] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/file-kikikoko.php
[Fri Apr 24 16:12:25.034903 2026] [:error] [pid 14531:tid 14546] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Fri Apr 24 16:12:25.382830 2026] [:error] [pid 14531:tid 14544] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/tramuibs.php
[Fri Apr 24 16:12:25.791426 2026] [:error] [pid 14531:tid 14547] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Fri Apr 24 16:12:26.110607 2026] [:error] [pid 14531:tid 14549] [client 20.107.212.3:17671] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Fri Apr 24 16:12:26.448614 2026] [:error] [pid 14531:tid 14540] [client 20.107.212.3:17671] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bpxrn.php"] [unique_id "aesl6nfLU2gw-6KR-GZziQAAAUc"]
[Fri Apr 24 16:12:29.656961 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:25074] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bpxrn.php"] [unique_id "aesl7ehlUs6BS3Ng7_UdhQAAANc"]
[Fri Apr 24 16:12:32.557325 2026] [:error] [pid 17721:tid 17783] [client 20.107.212.3:5652] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bpxrn.php"] [unique_id "aesl8OFXXkLeyDnfk__1qAAAAAI"]
[Fri Apr 24 16:12:33.958589 2026] [:error] [pid 17721:tid 17805] [client 20.107.212.3:24507] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bpxrn.php"] [unique_id "aesl8eFXXkLeyDnfk__1qQAAABg"]
[Fri Apr 24 16:12:37.620591 2026] [:error] [pid 17719:tid 17740] [client 20.107.212.3:24475] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aesl9cTZ9gzEyL1BkPpvWwAAAI0"]
[Fri Apr 24 16:12:40.404135 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:5397] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aesl-OhlUs6BS3Ng7_UdmAAAAMk"]
[Fri Apr 24 16:12:42.311425 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:59513] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aesl-uhlUs6BS3Ng7_UdowAAANE"]
[Fri Apr 24 16:12:44.225655 2026] [:error] [pid 17721:tid 17802] [client 20.107.212.3:18705] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "aesl_OFXXkLeyDnfk__1ugAAABU"]
[Fri Apr 24 16:12:45.614430 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:34010] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "aesl_ehlUs6BS3Ng7_UdrQAAAMA"]
[Fri Apr 24 16:12:46.919141 2026] [:error] [pid 17720:tid 17773] [client 20.107.212.3:34008] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "aesl_uhlUs6BS3Ng7_UdsgAAANM"]
[Fri Apr 24 16:12:47.901618 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:51217] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "aesl_-hlUs6BS3Ng7_UdtgAAAMc"]
[Fri Apr 24 16:12:49.149870 2026] [:error] [pid 17808:tid 17829] [client 20.107.212.3:5293] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "aesmAearbOEFI8qshvLL9AAAAFM"]
[Fri Apr 24 16:12:49.850629 2026] [:error] [pid 17808:tid 17819] [client 20.107.212.3:20628] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "aesmAearbOEFI8qshvLL9gAAAEk"]
[Fri Apr 24 16:12:51.190509 2026] [:error] [pid 17808:tid 17831] [client 20.107.212.3:51240] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "aesmA-arbOEFI8qshvLL_AAAAFU"]
[Fri Apr 24 16:12:52.970725 2026] [:error] [pid 17808:tid 17824] [client 20.107.212.3:16135] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "aesmBOarbOEFI8qshvLMBAAAAE4"]
[Fri Apr 24 16:12:55.157096 2026] [:error] [pid 17808:tid 17817] [client 20.107.212.3:59572] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "aesmB-arbOEFI8qshvLMDwAAAEc"]
[Fri Apr 24 16:12:56.346419 2026] [:error] [pid 17808:tid 17820] [client 20.107.212.3:16180] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aesmCOarbOEFI8qshvLMEgAAAEo"]
[Fri Apr 24 16:12:57.910065 2026] [:error] [pid 17808:tid 17821] [client 20.107.212.3:5686] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aesmCearbOEFI8qshvLMFwAAAEs"]
[Fri Apr 24 16:13:00.552795 2026] [:error] [pid 17721:tid 17802] [client 20.107.212.3:49388] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aesmDOFXXkLeyDnfk__1wQAAABU"]
[Fri Apr 24 16:13:02.073012 2026] [:error] [pid 17720:tid 17762] [client 20.107.212.3:20314] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bojcdooq.php"] [unique_id "aesmDuhlUs6BS3Ng7_Ud1AAAAMg"]
[Fri Apr 24 16:13:04.823106 2026] [:error] [pid 17808:tid 17829] [client 20.107.212.3:18700] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "aesmEOarbOEFI8qshvLMGgAAAFM"]
[Fri Apr 24 16:13:06.431091 2026] [:error] [pid 22114:tid 22141] [client 20.107.212.3:5675] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "aesmEoAuWGz3WlMQjoe7vQAAARg"]
[Fri Apr 24 16:13:09.114350 2026] [:error] [pid 17719:tid 17744] [client 20.107.212.3:47992] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "aesmFcTZ9gzEyL1BkPpveAAAAJE"]
[Fri Apr 24 16:13:10.932513 2026] [:error] [pid 17719:tid 17730] [client 20.107.212.3:16933] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "aesmFsTZ9gzEyL1BkPpvfwAAAIM"]
[Fri Apr 24 16:13:11.851105 2026] [:error] [pid 17719:tid 17735] [client 20.107.212.3:55693] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "aesmF8TZ9gzEyL1BkPpvgwAAAIg"]
[Fri Apr 24 16:13:25.881378 2026] [:error] [pid 14531:tid 14534] [client 20.107.212.3:16130] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/133.php"] [unique_id "aesmJXfLU2gw-6KR-GZzxwAAAUE"]
[Fri Apr 24 16:13:54.274939 2026] [:error] [pid 22114:tid 22119] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/jq.php
[Fri Apr 24 16:13:54.648495 2026] [:error] [pid 22114:tid 22120] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/cro.php
[Fri Apr 24 16:13:55.469641 2026] [:error] [pid 22114:tid 22121] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/wwx.php
[Fri Apr 24 16:13:55.773221 2026] [:error] [pid 22114:tid 22129] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Fri Apr 24 16:13:56.168037 2026] [:error] [pid 22114:tid 22117] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/blox.php
[Fri Apr 24 16:13:56.421555 2026] [:error] [pid 22114:tid 22139] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php
[Fri Apr 24 16:13:56.685695 2026] [:error] [pid 22114:tid 22126] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Fri Apr 24 16:13:57.132652 2026] [:error] [pid 22114:tid 22126] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/cdxadmin.php
[Fri Apr 24 16:13:57.523594 2026] [:error] [pid 22114:tid 22138] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/dfre.php
[Fri Apr 24 16:13:57.776731 2026] [:error] [pid 22114:tid 22134] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Fri Apr 24 16:13:58.030681 2026] [:error] [pid 22114:tid 22123] [client 20.107.212.3:45256] File does not exist: /usr/local/apache/htdocs/suspended-page/shorw.php
[Fri Apr 24 16:13:58.317110 2026] [:error] [pid 22114:tid 22130] [client 20.107.212.3:45256] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "aesmRoAuWGz3WlMQjoe76gAAAQ0"]
[Fri Apr 24 16:14:05.828247 2026] [:error] [pid 17721:tid 17789] [client 20.107.212.3:17457] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "aesmTeFXXkLeyDnfk__1-wAAAAg"]
[Fri Apr 24 16:14:11.384513 2026] [:error] [pid 17808:tid 17821] [client 20.107.212.3:23978] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shelp.php"] [unique_id "aesmU-arbOEFI8qshvLMewAAAEs"]
[Fri Apr 24 16:14:15.391506 2026] [:error] [pid 17721:tid 17796] [client 20.107.212.3:20329] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seyv.php"] [unique_id "aesmV-FXXkLeyDnfk__2CAAAAA8"]
[Fri Apr 24 16:14:17.378431 2026] [:error] [pid 17721:tid 17804] [client 20.107.212.3:55003] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seyv.php"] [unique_id "aesmWeFXXkLeyDnfk__2CwAAABc"]
[Fri Apr 24 16:14:22.777534 2026] [:error] [pid 22114:tid 22123] [client 20.107.212.3:57585] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seyv.php"] [unique_id "aesmXoAuWGz3WlMQjoe8AAAAAQY"]
[Fri Apr 24 16:14:24.527045 2026] [:error] [pid 14531:tid 14545] [client 20.107.212.3:5211] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seyv.php"] [unique_id "aesmYHfLU2gw-6KR-GZ0BgAAAUw"]
[Fri Apr 24 16:14:27.753393 2026] [:error] [pid 17808:tid 17833] [client 20.107.212.3:5742] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aesmY-arbOEFI8qshvLMgwAAAFc"]
[Fri Apr 24 16:14:29.863506 2026] [:error] [pid 17720:tid 17776] [client 20.107.212.3:5670] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aesmZehlUs6BS3Ng7_UePQAAANY"]
[Fri Apr 24 16:14:33.066116 2026] [:error] [pid 17808:tid 17826] [client 20.107.212.3:18702] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aesmaearbOEFI8qshvLMiAAAAFA"]
[Fri Apr 24 16:14:34.903081 2026] [:error] [pid 17720:tid 17769] [client 20.107.212.3:42756] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad821.php"] [unique_id "aesmauhlUs6BS3Ng7_UeSgAAAM8"]
[Fri Apr 24 16:14:36.299284 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:47951] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aesmbOhlUs6BS3Ng7_UeUQAAANU"]
[Fri Apr 24 16:14:37.847704 2026] [:error] [pid 22114:tid 22122] [client 20.107.212.3:23468] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aesmbYAuWGz3WlMQjoe8BgAAAQU"]
[Fri Apr 24 16:14:39.085921 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:24549] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aesmb-hlUs6BS3Ng7_UeWgAAAMU"]
[Fri Apr 24 16:14:42.707526 2026] [:error] [pid 17808:tid 17832] [client 20.107.212.3:45265] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8210.php"] [unique_id "aesmcuarbOEFI8qshvLMkwAAAFY"]
[Fri Apr 24 16:14:43.599592 2026] [:error] [pid 22114:tid 22140] [client 20.107.212.3:25962] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aesmc4AuWGz3WlMQjoe8CgAAARc"]
[Fri Apr 24 16:14:45.393953 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:16217] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aesmdehlUs6BS3Ng7_UecgAAANQ"]
[Fri Apr 24 16:14:46.834048 2026] [:error] [pid 22114:tid 22139] [client 20.107.212.3:57558] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aesmdoAuWGz3WlMQjoe8DgAAARY"]
[Fri Apr 24 16:14:48.560455 2026] [:error] [pid 17721:tid 17798] [client 20.107.212.3:16924] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sad8rd1.php"] [unique_id "aesmeOFXXkLeyDnfk__2LwAAABE"]
[Fri Apr 24 16:14:49.678584 2026] [:error] [pid 17719:tid 17746] [client 20.107.212.3:16454] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saxzgf5.php"] [unique_id "aesmecTZ9gzEyL1BkPpvzwAAAJM"]
[Fri Apr 24 16:14:50.656575 2026] [:error] [pid 22114:tid 22122] [client 20.107.212.3:14459] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saxzgf5.php"] [unique_id "aesmeoAuWGz3WlMQjoe8EQAAAQU"]
[Fri Apr 24 16:14:51.679801 2026] [:error] [pid 14531:tid 14556] [client 20.107.212.3:24517] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saxzgf5.php"] [unique_id "aesme3fLU2gw-6KR-GZ0FwAAAVc"]
[Fri Apr 24 16:14:52.338564 2026] [:error] [pid 17721:tid 17785] [client 20.107.212.3:47953] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saxzgf5.php"] [unique_id "aesmfOFXXkLeyDnfk__2RQAAAAQ"]
[Fri Apr 24 16:14:53.964714 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:24567] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saxzw9t.php"] [unique_id "aesmfehlUs6BS3Ng7_UepgAAAME"]
[Fri Apr 24 16:14:55.754596 2026] [:error] [pid 17808:tid 17821] [client 20.107.212.3:16406] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saxzw9t.php"] [unique_id "aesmf-arbOEFI8qshvLMogAAAEs"]
[Fri Apr 24 16:14:56.812024 2026] [:error] [pid 14531:tid 14553] [client 20.107.212.3:16203] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saxzw9t.php"] [unique_id "aesmgHfLU2gw-6KR-GZ0HQAAAVQ"]
[Fri Apr 24 16:14:58.152100 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzw9t.php
[Fri Apr 24 16:14:58.503743 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/sder5252u.php
[Fri Apr 24 16:14:58.807115 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/sderty5u.php
[Fri Apr 24 16:14:59.108136 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/hilk.php
[Fri Apr 24 16:14:59.461586 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/miso.php
[Fri Apr 24 16:14:59.887682 2026] [:error] [pid 17720:tid 17773] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Fri Apr 24 16:15:00.232639 2026] [:error] [pid 17720:tid 17756] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/checkout.php
[Fri Apr 24 16:15:00.592319 2026] [:error] [pid 17720:tid 17776] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/fictioner.php
[Fri Apr 24 16:15:00.965793 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Fri Apr 24 16:15:01.409899 2026] [:error] [pid 17720:tid 17759] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Fri Apr 24 16:15:01.790644 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:15619] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Fri Apr 24 16:15:02.291542 2026] [:error] [pid 17720:tid 17755] [client 20.107.212.3:15619] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aesmhuhlUs6BS3Ng7_UezwAAAME"]
[Fri Apr 24 16:15:03.647707 2026] [:error] [pid 14531:tid 14545] [client 20.107.212.3:24564] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aesmh3fLU2gw-6KR-GZ0JwAAAUw"]
[Fri Apr 24 16:15:04.340935 2026] [:error] [pid 17719:tid 17745] [client 20.107.212.3:45275] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aesmiMTZ9gzEyL1BkPpv3wAAAJI"]
[Fri Apr 24 16:15:05.513281 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:53804] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "aesmiehlUs6BS3Ng7_Ue3AAAAMQ"]
[Fri Apr 24 16:15:06.545544 2026] [:error] [pid 14531:tid 14540] [client 20.107.212.3:5745] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/redixsx.php"] [unique_id "aesminfLU2gw-6KR-GZ0KwAAAUc"]
[Fri Apr 24 16:15:08.309700 2026] [:error] [pid 14531:tid 14557] [client 20.107.212.3:15635] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/redixsx.php"] [unique_id "aesmjHfLU2gw-6KR-GZ0LgAAAVg"]
[Fri Apr 24 16:15:09.459849 2026] [:error] [pid 17720:tid 17754] [client 20.107.212.3:45295] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/redixsx.php"] [unique_id "aesmjehlUs6BS3Ng7_Ue5QAAAMA"]
[Fri Apr 24 16:15:10.582450 2026] [:error] [pid 17720:tid 17770] [client 20.107.212.3:14118] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/redixsx.php"] [unique_id "aesmjuhlUs6BS3Ng7_Ue7AAAANA"]
[Fri Apr 24 16:15:11.620619 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:5699] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aesmj-hlUs6BS3Ng7_Ue8AAAAMc"]
[Fri Apr 24 16:15:12.833018 2026] [:error] [pid 17808:tid 17812] [client 20.107.212.3:5540] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aesmkOarbOEFI8qshvLMrwAAAEI"]
[Fri Apr 24 16:15:14.044051 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:26970] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aesmkuhlUs6BS3Ng7_Ue9AAAANU"]
[Fri Apr 24 16:15:15.021160 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:15616] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "aesmk-hlUs6BS3Ng7_Ue-QAAAMc"]
[Fri Apr 24 16:15:15.685016 2026] [:error] [pid 17720:tid 17772] [client 20.107.212.3:44760] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "aesmk-hlUs6BS3Ng7_Ue_QAAANI"]
[Fri Apr 24 16:15:16.914132 2026] [:error] [pid 17719:tid 17740] [client 20.107.212.3:16465] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "aesmlMTZ9gzEyL1BkPpv5gAAAI0"]
[Fri Apr 24 16:15:18.719815 2026] [:error] [pid 17808:tid 17822] [client 20.107.212.3:16419] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "aesmluarbOEFI8qshvLMuwAAAEw"]
[Fri Apr 24 16:15:19.822650 2026] [:error] [pid 17721:tid 17792] [client 20.107.212.3:16691] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "aesml-FXXkLeyDnfk__2XAAAAAs"]
[Fri Apr 24 16:15:20.890535 2026] [:error] [pid 17720:tid 17767] [client 20.107.212.3:16465] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/67.php"] [unique_id "aesmmOhlUs6BS3Ng7_UfCQAAAM0"]
[Fri Apr 24 16:15:23.163995 2026] [:error] [pid 14531:tid 14539] [client 20.107.212.3:53793] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/67.php"] [unique_id "aesmm3fLU2gw-6KR-GZ0NAAAAUY"]
[Fri Apr 24 16:15:24.080200 2026] [:error] [pid 17720:tid 17763] [client 20.107.212.3:18033] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/67.php"] [unique_id "aesmnOhlUs6BS3Ng7_UfDgAAAMk"]
[Fri Apr 24 16:15:25.089144 2026] [:error] [pid 17719:tid 17748] [client 20.107.212.3:15657] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/67.php"] [unique_id "aesmncTZ9gzEyL1BkPpv7AAAAJU"]
[Fri Apr 24 16:15:26.864300 2026] [:error] [pid 17721:tid 17788] [client 20.107.212.3:44772] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1mrX.php"] [unique_id "aesmnuFXXkLeyDnfk__2ZAAAAAc"]
[Fri Apr 24 16:15:29.252807 2026] [:error] [pid 14531:tid 14548] [client 20.107.212.3:18809] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1mrX.php"] [unique_id "aesmoXfLU2gw-6KR-GZ0NwAAAU8"]
[Fri Apr 24 16:15:30.935174 2026] [:error] [pid 14531:tid 14553] [client 20.107.212.3:14632] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1mrX.php"] [unique_id "aesmonfLU2gw-6KR-GZ0OwAAAVQ"]
[Fri Apr 24 16:15:31.662320 2026] [:error] [pid 17720:tid 17761] [client 20.107.212.3:58840] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1mrX.php"] [unique_id "aesmo-hlUs6BS3Ng7_UfGgAAAMc"]
[Fri Apr 24 16:15:32.566404 2026] [:error] [pid 17720:tid 17758] [client 20.107.212.3:26947] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x402.php"] [unique_id "aesmpOhlUs6BS3Ng7_UfHQAAAMQ"]
[Fri Apr 24 16:15:35.294006 2026] [:error] [pid 17721:tid 17789] [client 20.107.212.3:38879] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x402.php"] [unique_id "aesmp-FXXkLeyDnfk__2fwAAAAg"]
[Fri Apr 24 16:15:36.181607 2026] [:error] [pid 17720:tid 17777] [client 20.107.212.3:16475] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x402.php"] [unique_id "aesmqOhlUs6BS3Ng7_UfKAAAANc"]
[Fri Apr 24 16:15:37.242122 2026] [:error] [pid 22114:tid 22131] [client 20.107.212.3:37896] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x402.php"] [unique_id "aesmqYAuWGz3WlMQjoe8KgAAAQ4"]
[Fri Apr 24 16:15:37.951410 2026] [:error] [pid 14531:tid 14534] [client 20.107.212.3:14607] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/485.php"] [unique_id "aesmqXfLU2gw-6KR-GZ0SAAAAUE"]
[Fri Apr 24 16:15:38.596685 2026] [:error] [pid 14531:tid 14549] [client 20.107.212.3:16681] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/485.php"] [unique_id "aesmqnfLU2gw-6KR-GZ0SQAAAVA"]
[Fri Apr 24 16:15:39.368734 2026] [:error] [pid 14531:tid 14556] [client 20.107.212.3:17998] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/485.php"] [unique_id "aesmq3fLU2gw-6KR-GZ0TAAAAVc"]
[Fri Apr 24 16:15:41.526838 2026] [:error] [pid 17808:tid 17822] [client 20.107.212.3:49418] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/485.php"] [unique_id "aesmrearbOEFI8qshvLMyQAAAEw"]
[Fri Apr 24 16:15:44.537957 2026] [:error] [pid 14531:tid 14535] [client 20.107.212.3:16435] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aesmsHfLU2gw-6KR-GZ0WQAAAUI"]
[Fri Apr 24 16:15:49.620002 2026] [:error] [pid 17720:tid 17771] [client 20.107.212.3:26982] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aesmtehlUs6BS3Ng7_UfMAAAANE"]
[Fri Apr 24 16:15:51.231167 2026] [:error] [pid 17808:tid 17829] [client 20.107.212.3:24011] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aesmt-arbOEFI8qshvLMzgAAAFM"]
[Fri Apr 24 16:15:53.578208 2026] [:error] [pid 17720:tid 17775] [client 20.107.212.3:16460] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aesmuehlUs6BS3Ng7_UfQAAAANU"]
[Fri Apr 24 16:16:00.930407 2026] [:error] [pid 17720:tid 17774] [client 20.107.212.3:15644] [client 20.107.212.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aesmwOhlUs6BS3Ng7_UfZAAAANQ"]
[Fri Apr 24 16:16:43.312827 2026] [:error] [pid 17720:tid 17774] [client 43.156.127.60:44566] [client 43.156.127.60] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aesm6-hlUs6BS3Ng7_Uf4wAAANQ"]
[Fri Apr 24 17:29:11.623856 2026] [:error] [pid 17720:tid 17775] [client 43.133.54.83:53266] [client 43.133.54.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aes35-hlUs6BS3Ng7_VLiQAAANU"]
[Fri Apr 24 17:58:37.767747 2026] [:error] [pid 22114:tid 22131] [client 34.58.239.158:52230] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aes-zYAuWGz3WlMQjofRbAAAAQ4"]
[Fri Apr 24 17:58:38.376333 2026] [:error] [pid 4177:tid 4192] [client 34.58.239.158:55154] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aes-zn2asKnvdrSe0x6mjQAAAYc"]
[Fri Apr 24 18:17:04.853551 2026] [:error] [pid 17808:tid 17831] [client 40.89.191.154:6416] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetDIOarbOEFI8qshvIBxAAAAFU"]
[Fri Apr 24 18:17:05.394113 2026] [:error] [pid 17808:tid 17813] [client 40.89.191.154:6431] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetDIearbOEFI8qshvIBygAAAEM"]
[Fri Apr 24 18:17:06.199670 2026] [:error] [pid 17808:tid 17827] [client 40.89.191.154:4794] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetDIuarbOEFI8qshvIB1AAAAFE"]
[Fri Apr 24 18:17:07.148792 2026] [:error] [pid 17719:tid 17737] [client 40.89.191.154:25817] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aetDI8TZ9gzEyL1BkPqJgAAAAIo"]
[Fri Apr 24 20:54:35.229358 2026] [:error] [pid 4177:tid 4186] [client 207.246.81.54:64452] [client 207.246.81.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.246.81.54, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "aetoC32asKnvdrSe0x4RGQAAAYE"], referer: https://www.google.com
[Fri Apr 24 20:54:35.233989 2026] [:error] [pid 4177:tid 4186] [client 207.246.81.54:64452] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com
[Fri Apr 24 21:01:16.781545 2026] [:error] [pid 17808:tid 17819] [client 207.246.81.54:64245] [client 207.246.81.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.246.81.54, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp/wp-login.php"] [unique_id "aetpnOarbOEFI8qshvI7egAAAEk"], referer: https://www.google.com
[Fri Apr 24 21:07:48.217071 2026] [:error] [pid 4177:tid 4188] [client 207.246.81.54:63950] [client 207.246.81.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 207.246.81.54, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aetrJH2asKnvdrSe0x4aMAAAAYM"], referer: https://www.google.com
[Fri Apr 24 23:17:09.479861 2026] [:error] [pid 17721:tid 17805] [client 43.153.73.200:54056] [client 43.153.73.200] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aeuJdeFXXkLeyDnfk_9hHAAAABg"]
[Sat Apr 25 00:56:31.068455 2026] [:error] [pid 42792:tid 42833] [client 103.203.135.43:24142] [client 103.203.135.43] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.203.135.43, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aeugv9Ni9qR4GtafpfHSMgAAAgs"]
[Sat Apr 25 00:56:31.073288 2026] [:error] [pid 42792:tid 42833] [client 103.203.135.43:24142] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 25 00:56:48.517527 2026] [:error] [pid 42791:tid 42806] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Sat Apr 25 00:56:48.828957 2026] [:error] [pid 42791:tid 42802] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Apr 25 00:56:49.131690 2026] [:error] [pid 42791:tid 42809] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Sat Apr 25 00:56:49.428017 2026] [:error] [pid 42791:tid 42817] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Sat Apr 25 00:56:49.722928 2026] [:error] [pid 42791:tid 42801] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Apr 25 00:56:50.019397 2026] [:error] [pid 42791:tid 42819] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 25 00:56:50.328585 2026] [:error] [pid 42791:tid 42800] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Apr 25 00:56:50.623302 2026] [:error] [pid 42791:tid 42810] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/envs.php
[Sat Apr 25 00:56:50.917715 2026] [:error] [pid 42791:tid 42808] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plugins.php
[Sat Apr 25 00:56:51.212724 2026] [:error] [pid 42791:tid 42796] [client 74.248.149.197:4951] File does not exist: /usr/local/apache/htdocs/suspended-page/keys.php
[Sat Apr 25 00:56:51.503600 2026] [:error] [pid 42791:tid 42807] [client 74.248.149.197:4951] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pinfo.php"] [unique_id "aeug07KmN9doraCEWKXlaAAAAcw"]
[Sat Apr 25 00:56:52.107221 2026] [:error] [pid 14989:tid 15014] [client 74.248.149.197:38963] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pinfo.php"] [unique_id "aeug1HhRYjsAsZTO4EOJxgAAABc"]
[Sat Apr 25 00:56:53.034287 2026] [:error] [pid 42792:tid 42834] [client 74.248.149.197:4950] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pinfo.php"] [unique_id "aeug1dNi9qR4GtafpfHSbQAAAgw"]
[Sat Apr 25 00:56:53.684746 2026] [:error] [pid 14989:tid 15009] [client 74.248.149.197:39872] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pinfo.php"] [unique_id "aeug1XhRYjsAsZTO4EOJyAAAABI"]
[Sat Apr 25 00:56:54.498028 2026] [:error] [pid 14989:tid 14992] [client 74.248.149.197:4698] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/litespeed.php"] [unique_id "aeug1nhRYjsAsZTO4EOJzgAAAAE"]
[Sat Apr 25 00:56:55.093863 2026] [:error] [pid 14989:tid 15003] [client 74.248.149.197:42274] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/litespeed.php"] [unique_id "aeug13hRYjsAsZTO4EOJ1QAAAAw"]
[Sat Apr 25 00:56:56.202003 2026] [:error] [pid 14989:tid 14997] [client 74.248.149.197:4198] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/litespeed.php"] [unique_id "aeug2HhRYjsAsZTO4EOJ2wAAAAY"]
[Sat Apr 25 00:56:56.949178 2026] [:error] [pid 42755:tid 42769] [client 74.248.149.197:42280] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/litespeed.php"] [unique_id "aeug2NH7__k0j6aa603-mQAAAIw"]
[Sat Apr 25 00:56:58.125138 2026] [:error] [pid 42792:tid 42833] [client 74.248.149.197:4207] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environments.php"] [unique_id "aeug2tNi9qR4GtafpfHSbgAAAgs"]
[Sat Apr 25 00:56:59.115423 2026] [:error] [pid 42755:tid 42780] [client 74.248.149.197:39909] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environments.php"] [unique_id "aeug29H7__k0j6aa603-ogAAAJc"]
[Sat Apr 25 00:56:59.839532 2026] [:error] [pid 14989:tid 15009] [client 74.248.149.197:38970] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environments.php"] [unique_id "aeug23hRYjsAsZTO4EOJ4gAAABI"]
[Sat Apr 25 00:57:00.351511 2026] [:error] [pid 42755:tid 42757] [client 74.248.149.197:4688] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environments.php"] [unique_id "aeug3NH7__k0j6aa603-pAAAAIA"]
[Sat Apr 25 00:57:00.874833 2026] [:error] [pid 42852:tid 42879] [client 74.248.149.197:4675] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raf.php"] [unique_id "aeug3DMEwxhhak_EhMKGwAAAAlg"]
[Sat Apr 25 00:57:01.577604 2026] [:error] [pid 42755:tid 42766] [client 74.248.149.197:4735] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raf.php"] [unique_id "aeug3dH7__k0j6aa603-pgAAAIk"]
[Sat Apr 25 00:57:02.097620 2026] [:error] [pid 42755:tid 42774] [client 74.248.149.197:4956] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raf.php"] [unique_id "aeug3tH7__k0j6aa603-qQAAAJE"]
[Sat Apr 25 00:57:02.798068 2026] [:error] [pid 42852:tid 42876] [client 74.248.149.197:4483] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/raf.php"] [unique_id "aeug3jMEwxhhak_EhMKGxAAAAlU"]
[Sat Apr 25 00:57:03.308114 2026] [:error] [pid 42792:tid 42843] [client 74.248.149.197:38945] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeug39Ni9qR4GtafpfHSdAAAAhU"]
[Sat Apr 25 00:57:03.886720 2026] [:error] [pid 42755:tid 42762] [client 74.248.149.197:42302] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeug39H7__k0j6aa603-swAAAIU"]
[Sat Apr 25 00:57:04.518902 2026] [:error] [pid 42852:tid 42866] [client 74.248.149.197:4588] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeug4DMEwxhhak_EhMKGyAAAAks"]
[Sat Apr 25 00:57:05.203096 2026] [:error] [pid 42755:tid 42767] [client 74.248.149.197:41500] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "aeug4dH7__k0j6aa603-vgAAAIo"]
[Sat Apr 25 00:57:05.869413 2026] [:error] [pid 14989:tid 15012] [client 74.248.149.197:4156] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infos.php"] [unique_id "aeug4XhRYjsAsZTO4EOJ8QAAABU"]
[Sat Apr 25 00:57:06.536466 2026] [:error] [pid 42755:tid 42775] [client 74.248.149.197:42278] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infos.php"] [unique_id "aeug4tH7__k0j6aa603-wgAAAJI"]
[Sat Apr 25 00:57:07.606170 2026] [:error] [pid 42852:tid 42872] [client 74.248.149.197:42296] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infos.php"] [unique_id "aeug4zMEwxhhak_EhMKGywAAAlE"]
[Sat Apr 25 00:57:08.174540 2026] [:error] [pid 42852:tid 42859] [client 74.248.149.197:39935] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infos.php"] [unique_id "aeug5DMEwxhhak_EhMKGzQAAAkQ"]
[Sat Apr 25 00:57:08.774250 2026] [:error] [pid 14989:tid 15000] [client 74.248.149.197:4620] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.php"] [unique_id "aeug5HhRYjsAsZTO4EOJ-QAAAAk"]
[Sat Apr 25 00:57:09.560745 2026] [:error] [pid 42852:tid 42865] [client 74.248.149.197:4968] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.php"] [unique_id "aeug5TMEwxhhak_EhMKG0QAAAko"]
[Sat Apr 25 00:57:10.271060 2026] [:error] [pid 42792:tid 42828] [client 74.248.149.197:4672] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.php"] [unique_id "aeug5tNi9qR4GtafpfHSegAAAgY"]
[Sat Apr 25 00:57:10.829611 2026] [:error] [pid 42852:tid 42861] [client 74.248.149.197:4991] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aws.php"] [unique_id "aeug5jMEwxhhak_EhMKG1QAAAkY"]
[Sat Apr 25 00:57:11.474633 2026] [:error] [pid 42792:tid 42830] [client 74.248.149.197:4147] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/embed.php"] [unique_id "aeug59Ni9qR4GtafpfHSfwAAAgg"]
[Sat Apr 25 00:57:12.047430 2026] [:error] [pid 42792:tid 42844] [client 74.248.149.197:41274] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/embed.php"] [unique_id "aeug6NNi9qR4GtafpfHSgAAAAhY"]
[Sat Apr 25 00:57:12.602425 2026] [:error] [pid 42852:tid 42866] [client 74.248.149.197:4190] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/embed.php"] [unique_id "aeug6DMEwxhhak_EhMKG2gAAAks"]
[Sat Apr 25 00:57:13.191405 2026] [:error] [pid 42852:tid 42869] [client 74.248.149.197:4614] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/embed.php"] [unique_id "aeug6TMEwxhhak_EhMKG2wAAAk4"]
[Sat Apr 25 00:57:13.753597 2026] [:error] [pid 42755:tid 42762] [client 74.248.149.197:4179] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stat.php"] [unique_id "aeug6dH7__k0j6aa603-ywAAAIU"]
[Sat Apr 25 00:57:14.311145 2026] [:error] [pid 14989:tid 14996] [client 74.248.149.197:41273] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stat.php"] [unique_id "aeug6nhRYjsAsZTO4EOKBAAAAAU"]
[Sat Apr 25 00:57:14.893514 2026] [:error] [pid 42852:tid 42865] [client 74.248.149.197:42255] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stat.php"] [unique_id "aeug6jMEwxhhak_EhMKG3wAAAko"]
[Sat Apr 25 00:57:15.562955 2026] [:error] [pid 42791:tid 42798] [client 74.248.149.197:41007] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/stat.php"] [unique_id "aeug67KmN9doraCEWKXlhgAAAcM"]
[Sat Apr 25 00:57:16.162073 2026] [:error] [pid 42852:tid 42867] [client 74.248.149.197:4155] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup.php"] [unique_id "aeug7DMEwxhhak_EhMKG6AAAAkw"]
[Sat Apr 25 00:57:17.122337 2026] [:error] [pid 42791:tid 42812] [client 74.248.149.197:42288] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup.php"] [unique_id "aeug7bKmN9doraCEWKXliwAAAdE"]
[Sat Apr 25 00:57:17.672169 2026] [:error] [pid 42791:tid 42801] [client 74.248.149.197:4626] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup.php"] [unique_id "aeug7bKmN9doraCEWKXljAAAAcY"]
[Sat Apr 25 00:57:18.241445 2026] [:error] [pid 42792:tid 42822] [client 74.248.149.197:41235] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/setup.php"] [unique_id "aeug7tNi9qR4GtafpfHSiQAAAgA"]
[Sat Apr 25 00:57:19.065079 2026] [:error] [pid 42791:tid 42814] [client 74.248.149.197:4678] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/development.php"] [unique_id "aeug77KmN9doraCEWKXljgAAAdM"]
[Sat Apr 25 00:57:20.234528 2026] [:error] [pid 42792:tid 42825] [client 74.248.149.197:4149] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/development.php"] [unique_id "aeug8NNi9qR4GtafpfHSkAAAAgM"]
[Sat Apr 25 00:57:20.934406 2026] [:error] [pid 14989:tid 15012] [client 74.248.149.197:39875] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/development.php"] [unique_id "aeug8HhRYjsAsZTO4EOKDgAAABU"]
[Sat Apr 25 00:57:21.947079 2026] [:error] [pid 14989:tid 14993] [client 74.248.149.197:4120] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/development.php"] [unique_id "aeug8XhRYjsAsZTO4EOKEwAAAAI"]
[Sat Apr 25 00:57:23.731158 2026] [:error] [pid 42852:tid 42859] [client 74.248.149.197:4932] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aeug8zMEwxhhak_EhMKG9QAAAkQ"]
[Sat Apr 25 00:57:24.339049 2026] [:error] [pid 14989:tid 14998] [client 74.248.149.197:4965] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aeug9HhRYjsAsZTO4EOKGgAAAAc"]
[Sat Apr 25 00:57:24.981736 2026] [:error] [pid 14989:tid 14993] [client 74.248.149.197:39900] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aeug9HhRYjsAsZTO4EOKHwAAAAI"]
[Sat Apr 25 00:57:25.644906 2026] [:error] [pid 14989:tid 15008] [client 74.248.149.197:38955] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/environment.php"] [unique_id "aeug9XhRYjsAsZTO4EOKIAAAABE"]
[Sat Apr 25 00:57:26.199649 2026] [:error] [pid 14989:tid 15003] [client 74.248.149.197:4733] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db_config.php"] [unique_id "aeug9nhRYjsAsZTO4EOKIgAAAAw"]
[Sat Apr 25 00:57:26.737556 2026] [:error] [pid 42755:tid 42757] [client 74.248.149.197:39917] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db_config.php"] [unique_id "aeug9tH7__k0j6aa603-1wAAAIA"]
[Sat Apr 25 00:57:27.317645 2026] [:error] [pid 42791:tid 42796] [client 74.248.149.197:38931] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db_config.php"] [unique_id "aeug97KmN9doraCEWKXllAAAAcE"]
[Sat Apr 25 00:57:27.905074 2026] [:error] [pid 42852:tid 42857] [client 74.248.149.197:38927] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db_config.php"] [unique_id "aeug9zMEwxhhak_EhMKG9wAAAkI"]
[Sat Apr 25 00:57:28.519863 2026] [:error] [pid 42852:tid 42862] [client 74.248.149.197:42285] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeug-DMEwxhhak_EhMKG-QAAAkc"]
[Sat Apr 25 00:57:29.082686 2026] [:error] [pid 42791:tid 42804] [client 74.248.149.197:4937] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeug-bKmN9doraCEWKXlmQAAAck"]
[Sat Apr 25 00:57:29.790166 2026] [:error] [pid 14989:tid 15009] [client 74.248.149.197:42267] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeug-XhRYjsAsZTO4EOKMwAAABI"]
[Sat Apr 25 00:57:30.342287 2026] [:error] [pid 14989:tid 15012] [client 74.248.149.197:39386] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeug-nhRYjsAsZTO4EOKNgAAABU"]
[Sat Apr 25 00:57:30.866713 2026] [:error] [pid 14989:tid 15006] [client 74.248.149.197:4619] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/deploy.php"] [unique_id "aeug-nhRYjsAsZTO4EOKOQAAAA8"]
[Sat Apr 25 00:57:31.424918 2026] [:error] [pid 14989:tid 14999] [client 74.248.149.197:41260] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/deploy.php"] [unique_id "aeug-3hRYjsAsZTO4EOKOwAAAAg"]
[Sat Apr 25 00:57:32.027507 2026] [:error] [pid 42852:tid 42878] [client 74.248.149.197:4515] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/deploy.php"] [unique_id "aeug_DMEwxhhak_EhMKHAQAAAlc"]
[Sat Apr 25 00:57:32.733156 2026] [:error] [pid 14989:tid 15009] [client 74.248.149.197:39876] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/deploy.php"] [unique_id "aeug_HhRYjsAsZTO4EOKPQAAABI"]
[Sat Apr 25 00:57:33.433596 2026] [:error] [pid 42792:tid 42825] [client 74.248.149.197:39385] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/apis.php"] [unique_id "aeug_dNi9qR4GtafpfHSlwAAAgM"]
[Sat Apr 25 00:57:34.065157 2026] [:error] [pid 42852:tid 42859] [client 74.248.149.197:42263] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/apis.php"] [unique_id "aeug_jMEwxhhak_EhMKHBAAAAkQ"]
[Sat Apr 25 00:57:34.612186 2026] [:error] [pid 14989:tid 15004] [client 74.248.149.197:38921] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/apis.php"] [unique_id "aeug_nhRYjsAsZTO4EOKRAAAAA0"]
[Sat Apr 25 00:57:35.256097 2026] [:error] [pid 42755:tid 42762] [client 74.248.149.197:39364] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/apis.php"] [unique_id "aeug_9H7__k0j6aa603-8gAAAIU"]
[Sat Apr 25 00:57:35.864350 2026] [:error] [pid 14989:tid 15007] [client 74.248.149.197:4976] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asdf.php"] [unique_id "aeug_3hRYjsAsZTO4EOKTAAAABA"]
[Sat Apr 25 00:57:36.478613 2026] [:error] [pid 42791:tid 42808] [client 74.248.149.197:39884] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asdf.php"] [unique_id "aeuhALKmN9doraCEWKXlnQAAAc0"]
[Sat Apr 25 00:57:37.040152 2026] [:error] [pid 14989:tid 15009] [client 74.248.149.197:4119] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asdf.php"] [unique_id "aeuhAXhRYjsAsZTO4EOKVgAAABI"]
[Sat Apr 25 00:57:37.670155 2026] [:error] [pid 42852:tid 42861] [client 74.248.149.197:38934] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asdf.php"] [unique_id "aeuhATMEwxhhak_EhMKHCgAAAkY"]
[Sat Apr 25 00:57:38.469693 2026] [:error] [pid 14989:tid 15008] [client 74.248.149.197:4948] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeuhAnhRYjsAsZTO4EOKWgAAABE"]
[Sat Apr 25 00:57:39.405959 2026] [:error] [pid 14989:tid 14995] [client 74.248.149.197:4565] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeuhA3hRYjsAsZTO4EOKXgAAAAQ"]
[Sat Apr 25 00:57:40.239400 2026] [:error] [pid 42792:tid 42822] [client 74.248.149.197:4172] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeuhBNNi9qR4GtafpfHSrgAAAgA"]
[Sat Apr 25 00:57:41.207021 2026] [:error] [pid 14989:tid 14991] [client 74.248.149.197:4667] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1100.php"] [unique_id "aeuhBXhRYjsAsZTO4EOKYgAAAAA"]
[Sat Apr 25 00:57:41.872124 2026] [:error] [pid 42791:tid 42797] [client 74.248.149.197:4146] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/._info.php"] [unique_id "aeuhBbKmN9doraCEWKXlowAAAcI"]
[Sat Apr 25 00:57:42.474399 2026] [:error] [pid 42792:tid 42828] [client 74.248.149.197:4507] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/._info.php"] [unique_id "aeuhBtNi9qR4GtafpfHSsQAAAgY"]
[Sat Apr 25 00:57:43.067795 2026] [:error] [pid 42791:tid 42819] [client 74.248.149.197:42245] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/._info.php"] [unique_id "aeuhB7KmN9doraCEWKXlpgAAAdg"]
[Sat Apr 25 00:57:43.680903 2026] [:error] [pid 14989:tid 15007] [client 74.248.149.197:4587] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/._info.php"] [unique_id "aeuhB3hRYjsAsZTO4EOKbAAAABA"]
[Sat Apr 25 00:57:44.309996 2026] [:error] [pid 42792:tid 42839] [client 74.248.149.197:4615] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_flag.php"] [unique_id "aeuhCNNi9qR4GtafpfHStgAAAhE"]
[Sat Apr 25 00:57:45.045195 2026] [:error] [pid 42791:tid 42811] [client 74.248.149.197:39369] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_flag.php"] [unique_id "aeuhCbKmN9doraCEWKXlqwAAAdA"]
[Sat Apr 25 00:57:45.745102 2026] [:error] [pid 42792:tid 42836] [client 74.248.149.197:4660] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_flag.php"] [unique_id "aeuhCdNi9qR4GtafpfHSvAAAAg4"]
[Sat Apr 25 00:57:46.550115 2026] [:error] [pid 42792:tid 42823] [client 74.248.149.197:4661] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php_flag.php"] [unique_id "aeuhCtNi9qR4GtafpfHSwAAAAgE"]
[Sat Apr 25 00:57:47.363155 2026] [:error] [pid 42852:tid 42866] [client 74.248.149.197:42300] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test_info4.php"] [unique_id "aeuhCzMEwxhhak_EhMKHFQAAAks"]
[Sat Apr 25 00:57:48.288383 2026] [:error] [pid 14989:tid 15012] [client 74.248.149.197:4516] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test_info4.php"] [unique_id "aeuhDHhRYjsAsZTO4EOKfAAAABU"]
[Sat Apr 25 00:57:49.038896 2026] [:error] [pid 42791:tid 42815] [client 74.248.149.197:39375] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test_info4.php"] [unique_id "aeuhDbKmN9doraCEWKXlrwAAAdQ"]
[Sat Apr 25 00:57:49.853152 2026] [:error] [pid 42852:tid 42873] [client 74.248.149.197:4104] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test_info4.php"] [unique_id "aeuhDTMEwxhhak_EhMKHGwAAAlI"]
[Sat Apr 25 00:57:50.801517 2026] [:error] [pid 42791:tid 42814] [client 74.248.149.197:40465] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeuhDrKmN9doraCEWKXlsQAAAdM"]
[Sat Apr 25 00:57:51.527905 2026] [:error] [pid 42852:tid 42863] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/test_phpinfo2.php
[Sat Apr 25 00:57:51.787288 2026] [:error] [pid 42852:tid 42860] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/HsFPDcD.php
[Sat Apr 25 00:57:52.063865 2026] [:error] [pid 42852:tid 42867] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/config.inc.php
[Sat Apr 25 00:57:52.321723 2026] [:error] [pid 42852:tid 42869] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/phpversion.php
[Sat Apr 25 00:57:52.597535 2026] [:error] [pid 42852:tid 42873] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/asus.php
[Sat Apr 25 00:57:52.875546 2026] [:error] [pid 42852:tid 42857] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Sat Apr 25 00:57:53.152154 2026] [:error] [pid 42852:tid 42877] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Sat Apr 25 00:57:53.411907 2026] [:error] [pid 42852:tid 42856] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/profmanage.php
[Sat Apr 25 00:57:53.670441 2026] [:error] [pid 42852:tid 42872] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/makecvs.php
[Sat Apr 25 00:57:53.930312 2026] [:error] [pid 42852:tid 42861] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/phpreleaseinfo.php
[Sat Apr 25 00:57:54.197068 2026] [:error] [pid 42852:tid 42863] [client 74.248.149.197:4638] File does not exist: /usr/local/apache/htdocs/suspended-page/configuration.php
[Sat Apr 25 00:57:54.451669 2026] [:error] [pid 42852:tid 42858] [client 74.248.149.197:4638] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ay.php"] [unique_id "aeuhEjMEwxhhak_EhMKHMQAAAkM"]
[Sat Apr 25 00:57:55.582764 2026] [:error] [pid 42852:tid 42865] [client 74.248.149.197:42298] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ay.php"] [unique_id "aeuhEzMEwxhhak_EhMKHNAAAAko"]
[Sat Apr 25 00:57:56.522021 2026] [:error] [pid 42755:tid 42760] [client 74.248.149.197:4596] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ay.php"] [unique_id "aeuhFNH7__k0j6aa603_CAAAAIM"]
[Sat Apr 25 00:57:57.961689 2026] [:error] [pid 42852:tid 42857] [client 74.248.149.197:38920] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ay.php"] [unique_id "aeuhFTMEwxhhak_EhMKHOAAAAkI"]
[Sat Apr 25 00:58:00.158754 2026] [:error] [pid 42791:tid 42800] [client 74.248.149.197:4650] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkvkjguw.php"] [unique_id "aeuhGLKmN9doraCEWKXlzQAAAcU"]
[Sat Apr 25 00:58:01.820786 2026] [:error] [pid 42852:tid 42869] [client 74.248.149.197:4151] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkvkjguw.php"] [unique_id "aeuhGTMEwxhhak_EhMKHQgAAAk4"]
[Sat Apr 25 00:58:02.573672 2026] [:error] [pid 42755:tid 42772] [client 74.248.149.197:4561] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkvkjguw.php"] [unique_id "aeuhGtH7__k0j6aa603_GwAAAI8"]
[Sat Apr 25 00:58:03.242332 2026] [:error] [pid 42792:tid 42830] [client 74.248.149.197:4196] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hkvkjguw.php"] [unique_id "aeuhG9Ni9qR4GtafpfHS2wAAAgg"]
[Sat Apr 25 00:58:03.900152 2026] [:error] [pid 42792:tid 42822] [client 74.248.149.197:41516] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Black.php"] [unique_id "aeuhG9Ni9qR4GtafpfHS3gAAAgA"]
[Sat Apr 25 00:58:04.482971 2026] [:error] [pid 14989:tid 14998] [client 74.248.149.197:42242] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Black.php"] [unique_id "aeuhHHhRYjsAsZTO4EOKpAAAAAc"]
[Sat Apr 25 00:58:05.060730 2026] [:error] [pid 14989:tid 14996] [client 74.248.149.197:39696] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Black.php"] [unique_id "aeuhHXhRYjsAsZTO4EOKpgAAAAU"]
[Sat Apr 25 00:58:05.639955 2026] [:error] [pid 14989:tid 15011] [client 74.248.149.197:4521] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Black.php"] [unique_id "aeuhHXhRYjsAsZTO4EOKqAAAABQ"]
[Sat Apr 25 00:58:06.217778 2026] [:error] [pid 14989:tid 15012] [client 74.248.149.197:41251] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeuhHnhRYjsAsZTO4EOKrAAAABU"]
[Sat Apr 25 00:58:06.740461 2026] [:error] [pid 14989:tid 14992] [client 74.248.149.197:39362] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeuhHnhRYjsAsZTO4EOKrwAAAAE"]
[Sat Apr 25 00:58:07.289656 2026] [:error] [pid 14989:tid 15014] [client 74.248.149.197:4144] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeuhH3hRYjsAsZTO4EOKsgAAABc"]
[Sat Apr 25 00:58:07.888570 2026] [:error] [pid 14989:tid 15015] [client 74.248.149.197:4511] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/infoinfo.php"] [unique_id "aeuhH3hRYjsAsZTO4EOKuAAAABg"]
[Sat Apr 25 01:13:30.590615 2026] [:error] [pid 42852:tid 42855] [client 154.58.229.82:43310] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "aeukujMEwxhhak_EhMKOYAAAAkA"]
[Sat Apr 25 01:13:30.591159 2026] [:error] [pid 42852:tid 42859] [client 154.58.229.82:43294] [client 154.58.229.82] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "aeukujMEwxhhak_EhMKOYQAAAkQ"]
[Sat Apr 25 03:17:35.229578 2026] [:error] [pid 28786:tid 28812] [client 125.94.144.102:52187] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aevBz9mKAVQi4GwijepSEQAAAZc"]
[Sat Apr 25 07:40:31.713616 2026] [:error] [pid 44425:tid 44450] [client 170.106.37.134:49810] [client 170.106.37.134] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aev_byUl-VlItvY2tR8kowAAANc"]
[Sat Apr 25 09:55:05.777385 2026] [:error] [pid 44425:tid 44441] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Sat Apr 25 09:55:06.050385 2026] [:error] [pid 44425:tid 44440] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sat Apr 25 09:55:06.321848 2026] [:error] [pid 44425:tid 44437] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Sat Apr 25 09:55:06.634479 2026] [:error] [pid 44425:tid 44447] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sat Apr 25 09:55:06.906274 2026] [:error] [pid 44425:tid 44445] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Sat Apr 25 09:55:07.175679 2026] [:error] [pid 44425:tid 44443] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 25 09:55:07.707028 2026] [:error] [pid 44425:tid 44431] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sat Apr 25 09:55:07.968697 2026] [:error] [pid 44425:tid 44436] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Sat Apr 25 09:55:08.231498 2026] [:error] [pid 44425:tid 44434] [client 20.100.197.186:9471] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Apr 25 09:55:08.498310 2026] [:error] [pid 44425:tid 44439] [client 20.100.197.186:9471] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aewe_CUl-VlItvY2tR9NUQAAAMw"]
[Sat Apr 25 09:55:09.478654 2026] [:error] [pid 44321:tid 44389] [client 20.100.197.186:59815] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aewe_Y1b5lV-asWa_Y5akgAAAIY"]
[Sat Apr 25 09:55:10.641836 2026] [:error] [pid 44319:tid 44351] [client 20.100.197.186:35922] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aewe_szJPAVLUb2pWtJzgQAAABY"]
[Sat Apr 25 09:55:11.338044 2026] [:error] [pid 44320:tid 44380] [client 20.100.197.186:22844] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/166.php"] [unique_id "aewe_zmFqSpku_dij8iaWAAAAFg"]
[Sat Apr 25 09:55:12.031104 2026] [:error] [pid 44321:tid 44385] [client 20.100.197.186:46331] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aewfAI1b5lV-asWa_Y5alwAAAII"]
[Sat Apr 25 09:55:12.798004 2026] [:error] [pid 44425:tid 44434] [client 20.100.197.186:9844] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aewfACUl-VlItvY2tR9NWgAAAMc"]
[Sat Apr 25 09:55:13.568279 2026] [:error] [pid 44321:tid 44404] [client 20.100.197.186:49090] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aewfAY1b5lV-asWa_Y5amwAAAJU"]
[Sat Apr 25 09:55:14.172664 2026] [:error] [pid 44425:tid 44438] [client 20.100.197.186:46312] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/term.php"] [unique_id "aewfAiUl-VlItvY2tR9NYgAAAMs"]
[Sat Apr 25 09:55:15.115937 2026] [:error] [pid 44320:tid 44358] [client 20.100.197.186:9457] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aewfAzmFqSpku_dij8iaXAAAAEI"]
[Sat Apr 25 09:55:16.859940 2026] [:error] [pid 44319:tid 44330] [client 20.100.197.186:5124] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aewfBMzJPAVLUb2pWtJzlwAAAAE"]
[Sat Apr 25 09:55:17.643092 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:20695] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aewfBTxw_Zq74vWdjmmSBgAAAQE"]
[Sat Apr 25 09:55:18.718333 2026] [:error] [pid 44425:tid 44433] [client 20.100.197.186:46284] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/666.php"] [unique_id "aewfBiUl-VlItvY2tR9NZgAAAMY"]
[Sat Apr 25 09:55:19.677781 2026] [:error] [pid 46083:tid 46096] [client 20.100.197.186:6936] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aewfBzxw_Zq74vWdjmmSDAAAAQk"]
[Sat Apr 25 09:55:20.751832 2026] [:error] [pid 44321:tid 44384] [client 20.100.197.186:19591] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aewfCI1b5lV-asWa_Y5aoAAAAIE"]
[Sat Apr 25 09:55:22.101895 2026] [:error] [pid 44320:tid 44359] [client 20.100.197.186:58477] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aewfCjmFqSpku_dij8iacAAAAEM"]
[Sat Apr 25 09:55:23.340656 2026] [:error] [pid 46083:tid 46090] [client 20.100.197.186:15953] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tt.php"] [unique_id "aewfCzxw_Zq74vWdjmmSFwAAAQM"]
[Sat Apr 25 09:55:25.187844 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:21107] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aewfDTxw_Zq74vWdjmmSfwAAARU"]
[Sat Apr 25 09:55:32.790610 2026] [:error] [pid 44321:tid 44403] [client 20.100.197.186:8277] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aewfFI1b5lV-asWa_Y5azwAAAJQ"]
[Sat Apr 25 09:55:35.427857 2026] [:error] [pid 46083:tid 46098] [client 20.100.197.186:17891] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aewfFzxw_Zq74vWdjmmSrgAAAQs"]
[Sat Apr 25 09:55:37.056581 2026] [:error] [pid 44321:tid 44401] [client 20.100.197.186:30821] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/sid3.php"] [unique_id "aewfGY1b5lV-asWa_Y5a1AAAAJI"]
[Sat Apr 25 09:55:41.003009 2026] [:error] [pid 44425:tid 44431] [client 20.100.197.186:17865] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aewfHSUl-VlItvY2tR9NgAAAAMQ"]
[Sat Apr 25 09:55:42.450296 2026] [:error] [pid 44319:tid 44333] [client 20.100.197.186:15952] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aewfHszJPAVLUb2pWtJzzAAAAAQ"]
[Sat Apr 25 09:55:45.229681 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:44072] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aewfITxw_Zq74vWdjmmSvgAAARU"]
[Sat Apr 25 09:55:48.485909 2026] [:error] [pid 46083:tid 46090] [client 20.100.197.186:10805] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/66.php"] [unique_id "aewfJDxw_Zq74vWdjmmSwwAAAQM"]
[Sat Apr 25 09:55:50.517547 2026] [:error] [pid 46083:tid 46098] [client 20.100.197.186:44085] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aewfJjxw_Zq74vWdjmmSyQAAAQs"]
[Sat Apr 25 09:55:52.754129 2026] [:error] [pid 44320:tid 44375] [client 20.100.197.186:58108] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aewfKDmFqSpku_dij8iavQAAAFM"]
[Sat Apr 25 09:55:53.558864 2026] [:error] [pid 44319:tid 44329] [client 20.100.197.186:6097] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aewfKczJPAVLUb2pWtJz2AAAAAA"]
[Sat Apr 25 09:55:54.488532 2026] [:error] [pid 46083:tid 46097] [client 20.100.197.186:7582] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-the.php"] [unique_id "aewfKjxw_Zq74vWdjmmS2AAAAQo"]
[Sat Apr 25 09:55:55.754195 2026] [:error] [pid 44319:tid 44334] [client 20.100.197.186:14093] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aewfK8zJPAVLUb2pWtJz2QAAAAU"]
[Sat Apr 25 09:55:56.920195 2026] [:error] [pid 44320:tid 44377] [client 20.100.197.186:6992] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aewfLDmFqSpku_dij8iazQAAAFU"]
[Sat Apr 25 09:55:59.181185 2026] [:error] [pid 44321:tid 44386] [client 20.100.197.186:65499] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aewfL41b5lV-asWa_Y5a-wAAAIM"]
[Sat Apr 25 09:56:01.806757 2026] [:error] [pid 44319:tid 44344] [client 20.100.197.186:7018] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jga.php"] [unique_id "aewfMczJPAVLUb2pWtJz3QAAAA8"]
[Sat Apr 25 09:56:04.397394 2026] [:error] [pid 44320:tid 44367] [client 20.100.197.186:17003] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aewfNDmFqSpku_dij8ia3AAAAEs"]
[Sat Apr 25 09:56:06.415059 2026] [:error] [pid 44319:tid 44337] [client 20.100.197.186:33025] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "aewfNszJPAVLUb2pWtJz4wAAAAg"]
[Sat Apr 25 09:56:11.145165 2026] [:error] [pid 44425:tid 44433] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sat Apr 25 09:56:11.417080 2026] [:error] [pid 44425:tid 44429] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Sat Apr 25 09:56:11.679168 2026] [:error] [pid 44425:tid 44441] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sat Apr 25 09:56:12.204121 2026] [:error] [pid 44425:tid 44428] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat Apr 25 09:56:12.466829 2026] [:error] [pid 44425:tid 44436] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sat Apr 25 09:56:12.729660 2026] [:error] [pid 44425:tid 44445] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sat Apr 25 09:56:13.253216 2026] [:error] [pid 44425:tid 44432] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Sat Apr 25 09:56:13.516047 2026] [:error] [pid 44425:tid 44431] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Apr 25 09:56:13.778587 2026] [:error] [pid 44425:tid 44449] [client 20.100.197.186:41179] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Apr 25 09:56:14.057483 2026] [:error] [pid 44425:tid 44427] [client 20.100.197.186:41179] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aewfPiUl-VlItvY2tR9NpwAAAMA"]
[Sat Apr 25 09:56:15.444645 2026] [:error] [pid 44425:tid 44440] [client 20.100.197.186:31625] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aewfPyUl-VlItvY2tR9NqwAAAM0"]
[Sat Apr 25 09:56:19.652965 2026] [:error] [pid 44321:tid 44404] [client 20.100.197.186:49190] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aewfQ41b5lV-asWa_Y5bIAAAAJU"]
[Sat Apr 25 09:56:21.117768 2026] [:error] [pid 44425:tid 44450] [client 20.100.197.186:10309] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/new.php"] [unique_id "aewfRSUl-VlItvY2tR9NsAAAANc"]
[Sat Apr 25 09:56:22.809033 2026] [:error] [pid 44425:tid 44440] [client 20.100.197.186:36637] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewfRiUl-VlItvY2tR9NtQAAAM0"]
[Sat Apr 25 09:56:23.808453 2026] [:error] [pid 44320:tid 44377] [client 20.100.197.186:44843] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewfRzmFqSpku_dij8ia7wAAAFU"]
[Sat Apr 25 09:56:25.056151 2026] [:error] [pid 46083:tid 46101] [client 20.100.197.186:8750] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewfSTxw_Zq74vWdjmmTCQAAAQ4"]
[Sat Apr 25 09:56:25.799958 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:42254] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aewfSTxw_Zq74vWdjmmTCgAAARU"]
[Sat Apr 25 09:56:27.305683 2026] [:error] [pid 44320:tid 44363] [client 20.100.197.186:18805] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws48.php"] [unique_id "aewfSzmFqSpku_dij8ia9wAAAEc"]
[Sat Apr 25 09:56:28.188938 2026] [:error] [pid 44425:tid 44446] [client 20.100.197.186:31676] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws48.php"] [unique_id "aewfTCUl-VlItvY2tR9NvgAAANM"]
[Sat Apr 25 09:56:35.541178 2026] [:error] [pid 46083:tid 46104] [client 20.100.197.186:44838] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws48.php"] [unique_id "aewfUzxw_Zq74vWdjmmTVgAAARE"]
[Sat Apr 25 09:56:37.167562 2026] [:error] [pid 44321:tid 44404] [client 20.100.197.186:35421] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws48.php"] [unique_id "aewfVY1b5lV-asWa_Y5bNwAAAJU"]
[Sat Apr 25 09:56:38.544544 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:42907] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "aewfVjxw_Zq74vWdjmmTWwAAARg"]
[Sat Apr 25 09:56:46.509799 2026] [:error] [pid 44425:tid 44435] [client 20.100.197.186:9140] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "aewfXiUl-VlItvY2tR9N7QAAAMg"]
[Sat Apr 25 09:56:47.342107 2026] [:error] [pid 44425:tid 44442] [client 20.100.197.186:42932] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "aewfXyUl-VlItvY2tR9N8wAAAM8"]
[Sat Apr 25 09:56:47.961676 2026] [:error] [pid 44425:tid 44444] [client 20.100.197.186:42889] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/8.php"] [unique_id "aewfXyUl-VlItvY2tR9N9gAAANE"]
[Sat Apr 25 09:56:48.631605 2026] [:error] [pid 46083:tid 46097] [client 20.100.197.186:19271] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dass.php"] [unique_id "aewfYDxw_Zq74vWdjmmTdQAAAQo"]
[Sat Apr 25 09:56:51.597317 2026] [:error] [pid 46083:tid 46089] [client 20.100.197.186:41104] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dass.php"] [unique_id "aewfYzxw_Zq74vWdjmmTfAAAAQI"]
[Sat Apr 25 09:56:52.995949 2026] [:error] [pid 44425:tid 44440] [client 20.100.197.186:10830] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dass.php"] [unique_id "aewfZCUl-VlItvY2tR9N-wAAAM0"]
[Sat Apr 25 09:56:53.761710 2026] [:error] [pid 44321:tid 44394] [client 20.100.197.186:19282] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dass.php"] [unique_id "aewfZY1b5lV-asWa_Y5bRwAAAIs"]
[Sat Apr 25 09:56:55.362968 2026] [:error] [pid 44425:tid 44446] [client 20.100.197.186:41117] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aewfZyUl-VlItvY2tR9OAQAAANM"]
[Sat Apr 25 09:56:57.033270 2026] [:error] [pid 46083:tid 46108] [client 20.100.197.186:22882] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aewfaTxw_Zq74vWdjmmTjAAAARQ"]
[Sat Apr 25 09:57:03.721984 2026] [:error] [pid 44320:tid 44370] [client 20.100.197.186:47030] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aewfbzmFqSpku_dij8ibJwAAAE4"]
[Sat Apr 25 09:57:05.873008 2026] [:error] [pid 44321:tid 44396] [client 20.100.197.186:19269] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aewfcY1b5lV-asWa_Y5bVAAAAI0"]
[Sat Apr 25 09:57:07.127893 2026] [:error] [pid 46083:tid 46107] [client 20.100.197.186:19708] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "aewfczxw_Zq74vWdjmmTtwAAARM"]
[Sat Apr 25 09:57:08.608432 2026] [:error] [pid 46083:tid 46096] [client 20.100.197.186:5963] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "aewfdDxw_Zq74vWdjmmTuQAAAQk"]
[Sat Apr 25 09:57:11.915359 2026] [:error] [pid 46083:tid 46103] [client 20.100.197.186:47024] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ok.php"] [unique_id "aewfdzxw_Zq74vWdjmmTwQAAARA"]
[Sat Apr 25 09:57:13.781404 2026] [:error] [pid 44320:tid 44378] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat Apr 25 09:57:14.045812 2026] [:error] [pid 44320:tid 44376] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat Apr 25 09:57:14.309088 2026] [:error] [pid 44320:tid 44379] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 25 09:57:14.573544 2026] [:error] [pid 44320:tid 44374] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat Apr 25 09:57:14.844681 2026] [:error] [pid 44320:tid 44371] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Sat Apr 25 09:57:15.123267 2026] [:error] [pid 44320:tid 44366] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Apr 25 09:57:15.389559 2026] [:error] [pid 44320:tid 44372] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Apr 25 09:57:15.652501 2026] [:error] [pid 44320:tid 44358] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat Apr 25 09:57:15.915793 2026] [:error] [pid 44320:tid 44375] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 25 09:57:16.183568 2026] [:error] [pid 44320:tid 44357] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat Apr 25 09:57:16.455652 2026] [:error] [pid 44320:tid 44376] [client 20.100.197.186:19671] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Sat Apr 25 09:57:16.720476 2026] [:error] [pid 44320:tid 44379] [client 20.100.197.186:19671] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "aewffDmFqSpku_dij8ibRgAAAFc"]
[Sat Apr 25 09:57:20.733540 2026] [:error] [pid 44321:tid 44387] [client 20.100.197.186:50230] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "aewfgI1b5lV-asWa_Y5baQAAAIQ"]
[Sat Apr 25 09:57:31.084300 2026] [:error] [pid 44319:tid 44337] [client 20.100.197.186:42215] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/abc.php"] [unique_id "aewfi8zJPAVLUb2pWtJ0RQAAAAg"]
[Sat Apr 25 09:57:35.224154 2026] [:error] [pid 44425:tid 44427] [client 20.100.197.186:26860] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aewfjyUl-VlItvY2tR9OLQAAAMA"]
[Sat Apr 25 09:57:38.574783 2026] [:error] [pid 46083:tid 46091] [client 20.100.197.186:12768] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aewfkjxw_Zq74vWdjmmT6AAAAQQ"]
[Sat Apr 25 09:57:41.933787 2026] [:error] [pid 44321:tid 44394] [client 20.100.197.186:7671] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aewflY1b5lV-asWa_Y5beQAAAIs"]
[Sat Apr 25 09:57:43.351990 2026] [:error] [pid 44319:tid 44340] [client 20.100.197.186:7654] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/inputs.php"] [unique_id "aewfl8zJPAVLUb2pWtJ0UgAAAAs"]
[Sat Apr 25 09:57:45.174318 2026] [:error] [pid 44425:tid 44448] [client 20.100.197.186:36705] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bnm.php"] [unique_id "aewfmSUl-VlItvY2tR9OPAAAANU"]
[Sat Apr 25 09:57:47.312304 2026] [:error] [pid 44320:tid 44380] [client 20.100.197.186:5591] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bnm.php"] [unique_id "aewfmzmFqSpku_dij8ibYgAAAFg"]
[Sat Apr 25 09:57:50.820767 2026] [:error] [pid 44425:tid 44430] [client 20.100.197.186:36714] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bnm.php"] [unique_id "aewfniUl-VlItvY2tR9OQQAAAMM"]
[Sat Apr 25 09:57:52.775601 2026] [:error] [pid 44321:tid 44384] [client 20.100.197.186:36677] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bnm.php"] [unique_id "aewfoI1b5lV-asWa_Y5biAAAAIE"]
[Sat Apr 25 09:57:53.533442 2026] [:error] [pid 44321:tid 44388] [client 20.100.197.186:12787] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aewfoY1b5lV-asWa_Y5bjgAAAIU"]
[Sat Apr 25 09:57:55.178459 2026] [:error] [pid 44425:tid 44448] [client 20.100.197.186:15087] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aewfoyUl-VlItvY2tR9ORwAAANU"]
[Sat Apr 25 09:57:57.467690 2026] [:error] [pid 44320:tid 44380] [client 20.100.197.186:50112] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aewfpTmFqSpku_dij8ibagAAAFg"]
[Sat Apr 25 09:57:58.325775 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:21008] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws80.php"] [unique_id "aewfpjxw_Zq74vWdjmmUEgAAAQc"]
[Sat Apr 25 09:57:59.536798 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:8822] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewfpzxw_Zq74vWdjmmUGwAAAQw"]
[Sat Apr 25 09:58:01.575555 2026] [:error] [pid 44320:tid 44364] [client 20.100.197.186:6069] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewfqTmFqSpku_dij8ibcwAAAEg"]
[Sat Apr 25 09:58:03.133165 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:20995] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewfqzxw_Zq74vWdjmmUJAAAARg"]
[Sat Apr 25 09:58:05.264957 2026] [:error] [pid 44321:tid 44387] [client 20.100.197.186:56484] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aewfrY1b5lV-asWa_Y5brQAAAIQ"]
[Sat Apr 25 09:58:06.607864 2026] [:error] [pid 46083:tid 46111] [client 20.100.197.186:56464] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/s.php"] [unique_id "aewfrjxw_Zq74vWdjmmUMQAAARc"]
[Sat Apr 25 09:58:15.215771 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:8786] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/s.php"] [unique_id "aewftzxw_Zq74vWdjmmUQQAAARg"]
[Sat Apr 25 09:58:17.218355 2026] [:error] [pid 46083:tid 46111] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Sat Apr 25 09:58:17.522415 2026] [:error] [pid 46083:tid 46091] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/tymn.php
[Sat Apr 25 09:58:17.807454 2026] [:error] [pid 46083:tid 46105] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Apr 25 09:58:18.091261 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sat Apr 25 09:58:18.377641 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sat Apr 25 09:58:18.663581 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sat Apr 25 09:58:18.948959 2026] [:error] [pid 46083:tid 46098] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-atom.php
[Sat Apr 25 09:58:19.235681 2026] [:error] [pid 46083:tid 46095] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 09:58:19.529551 2026] [:error] [pid 46083:tid 46108] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat Apr 25 09:58:19.813516 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Sat Apr 25 09:58:20.107038 2026] [:error] [pid 46083:tid 46087] [client 20.100.197.186:53581] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Apr 25 09:58:20.389630 2026] [:error] [pid 46083:tid 46098] [client 20.100.197.186:53581] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aewfvDxw_Zq74vWdjmmUZwAAAQs"]
[Sat Apr 25 09:58:21.660810 2026] [:error] [pid 44425:tid 44450] [client 20.100.197.186:58821] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aewfvSUl-VlItvY2tR9OcwAAANc"]
[Sat Apr 25 09:58:23.839631 2026] [:error] [pid 44320:tid 44378] [client 20.100.197.186:23227] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aewfvzmFqSpku_dij8ibhgAAAFY"]
[Sat Apr 25 09:58:26.583741 2026] [:error] [pid 44425:tid 44431] [client 20.100.197.186:17319] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jk.php"] [unique_id "aewfwiUl-VlItvY2tR9OegAAAMQ"]
[Sat Apr 25 09:58:27.862446 2026] [:error] [pid 44319:tid 44338] [client 20.100.197.186:9354] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aewfw8zJPAVLUb2pWtJ0XwAAAAk"]
[Sat Apr 25 09:58:29.931922 2026] [:error] [pid 44321:tid 44386] [client 20.100.197.186:38604] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aewfxY1b5lV-asWa_Y5b0QAAAIM"]
[Sat Apr 25 09:58:30.930977 2026] [:error] [pid 46083:tid 46105] [client 20.100.197.186:25612] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aewfxjxw_Zq74vWdjmmUjQAAARI"]
[Sat Apr 25 09:58:32.312836 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:8812] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dx.php"] [unique_id "aewfyDxw_Zq74vWdjmmUkQAAAQw"]
[Sat Apr 25 09:58:34.604110 2026] [:error] [pid 44321:tid 44405] [client 20.100.197.186:59517] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aewfyo1b5lV-asWa_Y5b1AAAAJY"]
[Sat Apr 25 09:58:36.492149 2026] [:error] [pid 44425:tid 44427] [client 20.100.197.186:24862] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aewfzCUl-VlItvY2tR9OhQAAAMA"]
[Sat Apr 25 09:58:38.167574 2026] [:error] [pid 44321:tid 44397] [client 20.100.197.186:30808] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aewfzo1b5lV-asWa_Y5b3QAAAI4"]
[Sat Apr 25 09:58:42.419981 2026] [:error] [pid 44425:tid 44436] [client 20.100.197.186:61406] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aa.php"] [unique_id "aewf0iUl-VlItvY2tR9OiQAAAMk"]
[Sat Apr 25 09:58:45.770458 2026] [:error] [pid 44321:tid 44392] [client 20.100.197.186:43989] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mini.php"] [unique_id "aewf1Y1b5lV-asWa_Y5b7AAAAIk"]
[Sat Apr 25 09:58:48.176452 2026] [:error] [pid 44319:tid 44345] [client 20.100.197.186:43993] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mini.php"] [unique_id "aewf2MzJPAVLUb2pWtJ0cQAAABA"]
[Sat Apr 25 09:58:51.960625 2026] [:error] [pid 46083:tid 46098] [client 20.100.197.186:43971] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mini.php"] [unique_id "aewf2zxw_Zq74vWdjmmUzwAAAQs"]
[Sat Apr 25 09:59:00.189923 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:5880] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aewf5Dxw_Zq74vWdjmmU5AAAARU"]
[Sat Apr 25 09:59:01.736094 2026] [:error] [pid 46083:tid 46107] [client 20.100.197.186:29671] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aewf5Txw_Zq74vWdjmmU6AAAARM"]
[Sat Apr 25 09:59:06.088946 2026] [:error] [pid 46083:tid 46091] [client 20.100.197.186:30771] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aewf6jxw_Zq74vWdjmmU7gAAAQQ"]
[Sat Apr 25 09:59:09.786719 2026] [:error] [pid 44425:tid 44427] [client 20.100.197.186:61420] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fs.php"] [unique_id "aewf7SUl-VlItvY2tR9OoAAAAMA"]
[Sat Apr 25 09:59:11.970830 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:21729] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mode.php"] [unique_id "aewf7zxw_Zq74vWdjmmU8QAAAQY"]
[Sat Apr 25 09:59:12.939698 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:13637] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mode.php"] [unique_id "aewf8Dxw_Zq74vWdjmmU9AAAAQw"]
[Sat Apr 25 09:59:15.508983 2026] [:error] [pid 46083:tid 46109] [client 20.100.197.186:30142] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mode.php"] [unique_id "aewf8zxw_Zq74vWdjmmU-QAAARU"]
[Sat Apr 25 09:59:16.786493 2026] [:error] [pid 44425:tid 44439] [client 20.100.197.186:13653] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mode.php"] [unique_id "aewf9CUl-VlItvY2tR9OpQAAAMw"]
[Sat Apr 25 09:59:21.008167 2026] [:error] [pid 44321:tid 44404] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 25 09:59:21.271980 2026] [:error] [pid 44321:tid 44394] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sat Apr 25 09:59:21.545257 2026] [:error] [pid 44321:tid 44386] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat Apr 25 09:59:21.808785 2026] [:error] [pid 44321:tid 44390] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/adoms.php
[Sat Apr 25 09:59:22.072412 2026] [:error] [pid 44321:tid 44389] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Sat Apr 25 09:59:23.178036 2026] [:error] [pid 44321:tid 44389] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 25 09:59:23.443580 2026] [:error] [pid 44321:tid 44392] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 25 09:59:23.727079 2026] [:error] [pid 44321:tid 44403] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Apr 25 09:59:24.252423 2026] [:error] [pid 44321:tid 44405] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sat Apr 25 09:59:24.513672 2026] [:error] [pid 44321:tid 44391] [client 20.100.197.186:5646] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Sat Apr 25 09:59:24.774465 2026] [:error] [pid 44321:tid 44398] [client 20.100.197.186:5646] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aewf_I1b5lV-asWa_Y5cGAAAAI8"]
[Sat Apr 25 09:59:26.219967 2026] [:error] [pid 46083:tid 46100] [client 20.100.197.186:9798] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aewf_jxw_Zq74vWdjmmVRAAAAQ0"]
[Sat Apr 25 09:59:27.247729 2026] [:error] [pid 44321:tid 44393] [client 20.100.197.186:46955] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aewf_41b5lV-asWa_Y5cGwAAAIo"]
[Sat Apr 25 09:59:29.394558 2026] [:error] [pid 44425:tid 44439] [client 20.100.197.186:9798] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kj.php"] [unique_id "aewgASUl-VlItvY2tR9O3wAAAMw"]
[Sat Apr 25 09:59:30.450534 2026] [:error] [pid 44321:tid 44384] [client 20.100.197.186:43984] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aewgAo1b5lV-asWa_Y5cHgAAAIE"]
[Sat Apr 25 09:59:32.952093 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:60374] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aewgBDxw_Zq74vWdjmmVUgAAAQc"]
[Sat Apr 25 09:59:36.515207 2026] [:error] [pid 44320:tid 44379] [client 20.100.197.186:39357] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aewgCDmFqSpku_dij8ib1QAAAFc"]
[Sat Apr 25 09:59:37.645537 2026] [:error] [pid 46083:tid 46097] [client 20.100.197.186:42854] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/aboute.php"] [unique_id "aewgCTxw_Zq74vWdjmmVYQAAAQo"]
[Sat Apr 25 09:59:39.492398 2026] [:error] [pid 44320:tid 44368] [client 20.100.197.186:5227] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aewgCzmFqSpku_dij8ib2AAAAEw"]
[Sat Apr 25 09:59:42.248657 2026] [:error] [pid 44425:tid 44447] [client 20.100.197.186:15909] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aewgDiUl-VlItvY2tR9O5wAAANQ"]
[Sat Apr 25 09:59:44.187785 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:58439] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aewgEDxw_Zq74vWdjmmVbQAAAQE"]
[Sat Apr 25 09:59:45.389454 2026] [:error] [pid 46083:tid 46090] [client 20.100.197.186:32490] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ws82.php"] [unique_id "aewgETxw_Zq74vWdjmmVcwAAAQM"]
[Sat Apr 25 09:59:46.339604 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:61342] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aewgEjxw_Zq74vWdjmmVeAAAAQc"]
[Sat Apr 25 09:59:47.853123 2026] [:error] [pid 44321:tid 44392] [client 20.100.197.186:37227] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aewgE41b5lV-asWa_Y5cKwAAAIk"]
[Sat Apr 25 09:59:49.905263 2026] [:error] [pid 44425:tid 44431] [client 20.100.197.186:49138] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aewgFSUl-VlItvY2tR9O8AAAAMQ"]
[Sat Apr 25 09:59:50.692746 2026] [:error] [pid 44319:tid 44344] [client 20.100.197.186:19626] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/edit.php"] [unique_id "aewgFszJPAVLUb2pWtJ0jAAAAA8"]
[Sat Apr 25 09:59:51.556301 2026] [:error] [pid 46083:tid 46089] [client 20.100.197.186:32506] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewgFzxw_Zq74vWdjmmVfQAAAQI"]
[Sat Apr 25 09:59:52.758778 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:20697] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewgGDxw_Zq74vWdjmmVgQAAARg"]
[Sat Apr 25 09:59:53.692317 2026] [:error] [pid 46083:tid 46110] [client 20.100.197.186:16921] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewgGTxw_Zq74vWdjmmVhAAAARY"]
[Sat Apr 25 09:59:54.803458 2026] [:error] [pid 44319:tid 44332] [client 20.100.197.186:5650] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/yw5bi63u.php"] [unique_id "aewgGszJPAVLUb2pWtJ0jgAAAAM"]
[Sat Apr 25 09:59:55.578381 2026] [:error] [pid 44425:tid 44438] [client 20.100.197.186:15503] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aewgGyUl-VlItvY2tR9O9gAAAMs"]
[Sat Apr 25 09:59:59.900541 2026] [:error] [pid 44319:tid 44342] [client 20.100.197.186:19634] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aewgH8zJPAVLUb2pWtJ0jwAAAA0"]
[Sat Apr 25 10:00:01.739965 2026] [:error] [pid 44425:tid 44443] [client 20.100.197.186:58482] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aewgISUl-VlItvY2tR9PAgAAANA"]
[Sat Apr 25 10:00:03.039942 2026] [:error] [pid 46083:tid 46100] [client 20.100.197.186:58488] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tool.php"] [unique_id "aewgIzxw_Zq74vWdjmmVjwAAAQ0"]
[Sat Apr 25 10:00:04.624357 2026] [:error] [pid 44425:tid 44430] [client 20.100.197.186:8284] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aewgJCUl-VlItvY2tR9PBAAAAMM"]
[Sat Apr 25 10:00:07.010706 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:15970] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aewgJzxw_Zq74vWdjmmVkwAAARg"]
[Sat Apr 25 10:00:08.993975 2026] [:error] [pid 44321:tid 44390] [client 20.100.197.186:65482] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aewgKI1b5lV-asWa_Y5cRAAAAIc"]
[Sat Apr 25 10:00:10.639629 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:8546] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aewgKjxw_Zq74vWdjmmVnAAAAQc"]
[Sat Apr 25 10:00:14.228140 2026] [:error] [pid 44425:tid 44436] [client 20.100.197.186:58073] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aewgLiUl-VlItvY2tR9PGgAAAMk"]
[Sat Apr 25 10:00:17.002339 2026] [:error] [pid 46083:tid 46102] [client 20.100.197.186:40571] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aewgMTxw_Zq74vWdjmmVrgAAAQ8"]
[Sat Apr 25 10:00:18.886182 2026] [:error] [pid 46083:tid 46087] [client 20.100.197.186:6139] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aewgMjxw_Zq74vWdjmmVtgAAAQA"]
[Sat Apr 25 10:00:20.129954 2026] [:error] [pid 44321:tid 44394] [client 20.100.197.186:57599] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-good.php"] [unique_id "aewgNI1b5lV-asWa_Y5cWQAAAIs"]
[Sat Apr 25 10:00:23.817666 2026] [:error] [pid 44425:tid 44444] [client 20.100.197.186:58103] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "aewgNyUl-VlItvY2tR9PJAAAANE"]
[Sat Apr 25 10:00:27.494822 2026] [:error] [pid 46083:tid 46098] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sat Apr 25 10:00:27.759794 2026] [:error] [pid 46083:tid 46090] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/mk.php
[Sat Apr 25 10:00:28.022301 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sat Apr 25 10:00:28.296430 2026] [:error] [pid 46083:tid 46110] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 25 10:00:28.821559 2026] [:error] [pid 46083:tid 46093] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Apr 25 10:00:29.083847 2026] [:error] [pid 46083:tid 46095] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 25 10:00:29.346737 2026] [:error] [pid 46083:tid 46094] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sat Apr 25 10:00:29.610497 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Sat Apr 25 10:00:29.875627 2026] [:error] [pid 46083:tid 46101] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Sat Apr 25 10:00:30.138631 2026] [:error] [pid 46083:tid 46087] [client 20.100.197.186:57595] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Apr 25 10:00:30.410573 2026] [:error] [pid 46083:tid 46088] [client 20.100.197.186:57595] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aewgPjxw_Zq74vWdjmmV2AAAAQE"]
[Sat Apr 25 10:00:32.058090 2026] [:error] [pid 44319:tid 44332] [client 20.100.197.186:33028] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aewgQMzJPAVLUb2pWtJ0nAAAAAM"]
[Sat Apr 25 10:00:33.473557 2026] [:error] [pid 44319:tid 44347] [client 20.100.197.186:20609] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aewgQczJPAVLUb2pWtJ0nQAAABI"]
[Sat Apr 25 10:00:35.688996 2026] [:error] [pid 44425:tid 44451] [client 20.100.197.186:44067] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/b.php"] [unique_id "aewgQyUl-VlItvY2tR9PMwAAANg"]
[Sat Apr 25 10:00:38.069068 2026] [:error] [pid 46083:tid 46099] [client 20.100.197.186:24234] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aewgRjxw_Zq74vWdjmmV4QAAAQw"]
[Sat Apr 25 10:00:39.663002 2026] [:error] [pid 44425:tid 44434] [client 20.100.197.186:19206] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aewgRyUl-VlItvY2tR9POQAAAMc"]
[Sat Apr 25 10:00:41.107988 2026] [:error] [pid 46083:tid 46112] [client 20.100.197.186:49155] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aewgSTxw_Zq74vWdjmmV6QAAARg"]
[Sat Apr 25 10:00:42.425996 2026] [:error] [pid 44319:tid 44350] [client 20.100.197.186:17016] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "aewgSszJPAVLUb2pWtJ0oAAAABU"]
[Sat Apr 25 10:00:43.478729 2026] [:error] [pid 44319:tid 44352] [client 20.100.197.186:41203] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aewgS8zJPAVLUb2pWtJ0oQAAABc"]
[Sat Apr 25 10:00:44.229012 2026] [:error] [pid 46083:tid 46110] [client 20.100.197.186:17020] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aewgTDxw_Zq74vWdjmmV8QAAARY"]
[Sat Apr 25 10:00:46.313095 2026] [:error] [pid 44319:tid 44339] [client 20.100.197.186:27210] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aewgTszJPAVLUb2pWtJ0owAAAAo"]
[Sat Apr 25 10:00:50.020190 2026] [:error] [pid 44319:tid 44346] [client 20.100.197.186:37842] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-class-api.php"] [unique_id "aewgUszJPAVLUb2pWtJ0pgAAABE"]
[Sat Apr 25 10:00:51.807926 2026] [:error] [pid 44319:tid 44334] [client 20.100.197.186:8711] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aewgU8zJPAVLUb2pWtJ0pwAAAAU"]
[Sat Apr 25 10:00:53.864265 2026] [:error] [pid 44320:tid 44371] [client 20.100.197.186:27221] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aewgVTmFqSpku_dij8ib-AAAAE8"]
[Sat Apr 25 10:00:55.391542 2026] [:error] [pid 44320:tid 44363] [client 20.100.197.186:10248] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aewgVzmFqSpku_dij8ib-gAAAEc"]
[Sat Apr 25 10:00:57.185304 2026] [:error] [pid 44321:tid 44395] [client 20.100.197.186:31646] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/bolt.php"] [unique_id "aewgWY1b5lV-asWa_Y5cvQAAAIw"]
[Sat Apr 25 10:00:58.315648 2026] [:error] [pid 44321:tid 44384] [client 20.100.197.186:9143] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aewgWo1b5lV-asWa_Y5cwAAAAIE"]
[Sat Apr 25 10:01:00.093063 2026] [:error] [pid 44319:tid 44340] [client 20.100.197.186:18397] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aewgXMzJPAVLUb2pWtJ0tQAAAAs"]
[Sat Apr 25 10:01:02.821362 2026] [:error] [pid 44319:tid 44353] [client 20.100.197.186:55093] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aewgXszJPAVLUb2pWtJ0ugAAABg"]
[Sat Apr 25 10:01:04.611131 2026] [:error] [pid 44321:tid 44403] [client 20.100.197.186:55746] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/gifclass.php"] [unique_id "aewgYI1b5lV-asWa_Y5cxQAAAJQ"]
[Sat Apr 25 10:01:06.904902 2026] [:error] [pid 44320:tid 44364] [client 20.100.197.186:17846] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccs.php"] [unique_id "aewgYjmFqSpku_dij8icAgAAAEg"]
[Sat Apr 25 10:01:08.510231 2026] [:error] [pid 44425:tid 44450] [client 20.100.197.186:13088] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccs.php"] [unique_id "aewgZCUl-VlItvY2tR9PXQAAANc"]
[Sat Apr 25 10:01:11.324864 2026] [:error] [pid 44320:tid 44373] [client 20.100.197.186:18417] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccs.php"] [unique_id "aewgZzmFqSpku_dij8icCgAAAFE"]
[Sat Apr 25 10:01:16.119647 2026] [:error] [pid 46083:tid 46089] [client 20.100.197.186:55805] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ccs.php"] [unique_id "aewgbDxw_Zq74vWdjmmWFgAAAQI"]
[Sat Apr 25 10:01:17.728996 2026] [:error] [pid 46083:tid 46103] [client 20.100.197.186:28948] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aewgbTxw_Zq74vWdjmmWGwAAARA"]
[Sat Apr 25 10:01:20.632413 2026] [:error] [pid 44321:tid 44400] [client 20.100.197.186:5393] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aewgcI1b5lV-asWa_Y5c1gAAAJE"]
[Sat Apr 25 10:01:22.081820 2026] [:error] [pid 44321:tid 44403] [client 20.100.197.186:9167] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aewgco1b5lV-asWa_Y5c2gAAAJQ"]
[Sat Apr 25 10:01:23.536674 2026] [:error] [pid 44319:tid 44335] [client 20.100.197.186:26112] [client 20.100.197.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/first.php"] [unique_id "aewgc8zJPAVLUb2pWtJ0xQAAAAY"]
[Sat Apr 25 12:15:26.966113 2026] [:error] [pid 44425:tid 44432] [client 43.157.95.239:34306] [client 43.157.95.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aew_3iUl-VlItvY2tR936wAAAMU"]
[Sat Apr 25 16:22:51.238544 2026] [:error] [pid 46083:tid 46107] [client 182.42.111.156:59223] [client 182.42.111.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aex52zxw_Zq74vWdjmkKfgAAARM"]
[Sat Apr 25 19:55:36.163151 2026] [:error] [pid 16107:tid 16140] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/file0.php
[Sat Apr 25 19:55:36.412003 2026] [:error] [pid 16107:tid 16144] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/t3s.php
[Sat Apr 25 19:55:36.689541 2026] [:error] [pid 16107:tid 16161] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu.php
[Sat Apr 25 19:55:36.927775 2026] [:error] [pid 16107:tid 16153] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/uwa.php
[Sat Apr 25 19:55:37.166495 2026] [:error] [pid 16107:tid 16157] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/crgio.php
[Sat Apr 25 19:55:37.425430 2026] [:error] [pid 16107:tid 16160] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Apr 25 19:55:37.703473 2026] [:error] [pid 16107:tid 16149] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sat Apr 25 19:55:37.980869 2026] [:error] [pid 16107:tid 16151] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Sat Apr 25 19:55:38.219807 2026] [:error] [pid 16107:tid 16150] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Sat Apr 25 19:55:38.467572 2026] [:error] [pid 16107:tid 16144] [client 20.199.101.230:57663] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Sat Apr 25 19:55:38.743964 2026] [:error] [pid 16107:tid 16148] [client 20.199.101.230:57663] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "aeyrutIfF7Hy3tw0sYSFfgAAAIs"]
[Sat Apr 25 19:55:39.807058 2026] [:error] [pid 16108:tid 16187] [client 20.199.101.230:56679] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "aeyru4bPF4HSQDj6WrmHEQAAANU"]
[Sat Apr 25 19:55:40.464038 2026] [:error] [pid 16106:tid 16124] [client 20.199.101.230:54465] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "aeyrvCGjdEsrWF7e-7M5YwAAAE4"]
[Sat Apr 25 19:55:41.333865 2026] [:error] [pid 16106:tid 16123] [client 20.199.101.230:65313] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "aeyrvSGjdEsrWF7e-7M5ZwAAAE0"]
[Sat Apr 25 19:55:42.613448 2026] [:error] [pid 16195:tid 16217] [client 20.199.101.230:61608] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "aeyrvjVPLvrpvXaNQOkomwAAABM"]
[Sat Apr 25 19:55:43.598695 2026] [:error] [pid 16108:tid 16181] [client 20.199.101.230:56715] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "aeyrv4bPF4HSQDj6WrmHJAAAAM8"]
[Sat Apr 25 19:55:45.007552 2026] [:error] [pid 16108:tid 16186] [client 20.199.101.230:55738] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "aeyrwYbPF4HSQDj6WrmHKwAAANQ"]
[Sat Apr 25 19:55:46.200875 2026] [:error] [pid 16108:tid 16178] [client 20.199.101.230:56717] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "aeyrwobPF4HSQDj6WrmHMAAAAMw"]
[Sat Apr 25 19:55:47.182590 2026] [:error] [pid 16195:tid 16201] [client 20.199.101.230:60206] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeyrwzVPLvrpvXaNQOkonwAAAAM"]
[Sat Apr 25 19:55:47.946358 2026] [:error] [pid 16106:tid 16122] [client 20.199.101.230:60129] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeyrwyGjdEsrWF7e-7M5cQAAAEw"]
[Sat Apr 25 19:55:48.857149 2026] [:error] [pid 16106:tid 16116] [client 20.199.101.230:65333] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeyrxCGjdEsrWF7e-7M5cgAAAEY"]
[Sat Apr 25 19:55:49.734217 2026] [:error] [pid 16106:tid 16130] [client 20.199.101.230:61600] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "aeyrxSGjdEsrWF7e-7M5dAAAAFQ"]
[Sat Apr 25 19:55:50.767662 2026] [:error] [pid 16107:tid 16152] [client 20.199.101.230:56711] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "aeyrxtIfF7Hy3tw0sYSFigAAAI8"]
[Sat Apr 25 19:55:52.048029 2026] [:error] [pid 29049:tid 29074] [client 20.199.101.230:61619] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "aeyryCfsWHIvmg63qcWEmgAAARc"]
[Sat Apr 25 19:55:53.851878 2026] [:error] [pid 16108:tid 16184] [client 20.199.101.230:56759] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "aeyryYbPF4HSQDj6WrmHQAAAANI"]
[Sat Apr 25 19:55:54.600029 2026] [:error] [pid 16108:tid 16182] [client 20.199.101.230:55807] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "aeyryobPF4HSQDj6WrmHQwAAANA"]
[Sat Apr 25 19:55:55.490529 2026] [:error] [pid 16106:tid 16111] [client 20.199.101.230:56734] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aeyryyGjdEsrWF7e-7M5fQAAAEE"]
[Sat Apr 25 19:55:56.076312 2026] [:error] [pid 16106:tid 16121] [client 20.199.101.230:56729] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aeyrzCGjdEsrWF7e-7M5gAAAAEs"]
[Sat Apr 25 19:55:57.601341 2026] [:error] [pid 29049:tid 29066] [client 20.199.101.230:58491] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aeyrzSfsWHIvmg63qcWEowAAAQ8"]
[Sat Apr 25 19:55:58.225307 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:56693] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aeyrzobPF4HSQDj6WrmHRwAAAME"]
[Sat Apr 25 19:55:59.521020 2026] [:error] [pid 29049:tid 29060] [client 20.199.101.230:56740] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "aeyrzyfsWHIvmg63qcWEpwAAAQk"]
[Sat Apr 25 19:56:01.093423 2026] [:error] [pid 16107:tid 16155] [client 20.199.101.230:55681] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "aeyr0dIfF7Hy3tw0sYSFlgAAAJI"]
[Sat Apr 25 19:56:01.713177 2026] [:error] [pid 16106:tid 16123] [client 20.199.101.230:65311] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "aeyr0SGjdEsrWF7e-7M5jQAAAE0"]
[Sat Apr 25 19:56:02.586516 2026] [:error] [pid 16107:tid 16160] [client 20.199.101.230:60112] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "aeyr0tIfF7Hy3tw0sYSFmgAAAJc"]
[Sat Apr 25 19:56:03.285050 2026] [:error] [pid 16107:tid 16149] [client 20.199.101.230:56762] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeyr09IfF7Hy3tw0sYSFnAAAAIw"]
[Sat Apr 25 19:56:05.262978 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:61674] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeyr1YbPF4HSQDj6WrmHVwAAAMs"]
[Sat Apr 25 19:56:06.506043 2026] [:error] [pid 16195:tid 16198] [client 20.199.101.230:58745] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeyr1jVPLvrpvXaNQOkorwAAAAA"]
[Sat Apr 25 19:56:08.971956 2026] [:error] [pid 16107:tid 16152] [client 20.199.101.230:60163] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeyr2NIfF7Hy3tw0sYSFqgAAAI8"]
[Sat Apr 25 19:56:10.007253 2026] [:error] [pid 16195:tid 16207] [client 20.199.101.230:57467] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "aeyr2jVPLvrpvXaNQOkoswAAAAk"]
[Sat Apr 25 19:56:10.635188 2026] [:error] [pid 16107:tid 16157] [client 20.199.101.230:60168] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "aeyr2tIfF7Hy3tw0sYSFtgAAAJQ"]
[Sat Apr 25 19:56:12.423409 2026] [:error] [pid 16108:tid 16180] [client 20.199.101.230:65310] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "aeyr3IbPF4HSQDj6WrmHZAAAAM4"]
[Sat Apr 25 19:56:14.203230 2026] [:error] [pid 16108:tid 16187] [client 20.199.101.230:60215] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "aeyr3obPF4HSQDj6WrmHZgAAANU"]
[Sat Apr 25 19:56:15.542007 2026] [:error] [pid 16107:tid 16161] [client 20.199.101.230:60153] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "aeyr39IfF7Hy3tw0sYSFxQAAAJg"]
[Sat Apr 25 19:56:16.213568 2026] [:error] [pid 29049:tid 29073] [client 20.199.101.230:58494] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "aeyr4CfsWHIvmg63qcWEyQAAARY"]
[Sat Apr 25 19:56:16.949194 2026] [:error] [pid 29049:tid 29063] [client 20.199.101.230:57628] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "aeyr4CfsWHIvmg63qcWEzQAAAQw"]
[Sat Apr 25 19:56:17.845681 2026] [:error] [pid 16107:tid 16154] [client 20.199.101.230:56678] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "aeyr4dIfF7Hy3tw0sYSFzAAAAJE"]
[Sat Apr 25 19:56:18.771463 2026] [:error] [pid 16195:tid 16205] [client 20.199.101.230:58702] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no20.php"] [unique_id "aeyr4jVPLvrpvXaNQOkowwAAAAc"]
[Sat Apr 25 19:56:19.734929 2026] [:error] [pid 29049:tid 29070] [client 20.199.101.230:58717] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no20.php"] [unique_id "aeyr4yfsWHIvmg63qcWE0wAAARM"]
[Sat Apr 25 19:56:20.803781 2026] [:error] [pid 16108:tid 16176] [client 20.199.101.230:58490] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no20.php"] [unique_id "aeyr5IbPF4HSQDj6WrmHbwAAAMo"]
[Sat Apr 25 19:56:22.894450 2026] [:error] [pid 16108:tid 16173] [client 20.199.101.230:61571] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no20.php"] [unique_id "aeyr5obPF4HSQDj6WrmHeQAAAMc"]
[Sat Apr 25 19:56:23.671480 2026] [:error] [pid 29049:tid 29071] [client 20.199.101.230:56751] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-alone.php"] [unique_id "aeyr5yfsWHIvmg63qcWE1QAAARQ"]
[Sat Apr 25 19:56:24.875046 2026] [:error] [pid 16107:tid 16159] [client 20.199.101.230:61682] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-alone.php"] [unique_id "aeyr6NIfF7Hy3tw0sYSF2AAAAJY"]
[Sat Apr 25 19:56:27.780586 2026] [:error] [pid 16108:tid 16175] [client 20.199.101.230:58692] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-alone.php"] [unique_id "aeyr64bPF4HSQDj6WrmHfwAAAMk"]
[Sat Apr 25 19:56:29.403583 2026] [:error] [pid 29049:tid 29059] [client 20.199.101.230:58473] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-alone.php"] [unique_id "aeyr7SfsWHIvmg63qcWE3QAAAQg"]
[Sat Apr 25 19:56:30.469286 2026] [:error] [pid 16106:tid 16113] [client 20.199.101.230:61676] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasnu.php"] [unique_id "aeyr7iGjdEsrWF7e-7M5kwAAAEM"]
[Sat Apr 25 19:56:32.505960 2026] [:error] [pid 16195:tid 16214] [client 20.199.101.230:56706] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasnu.php"] [unique_id "aeyr8DVPLvrpvXaNQOko2AAAABA"]
[Sat Apr 25 19:56:35.241152 2026] [:error] [pid 16108:tid 16173] [client 20.199.101.230:57636] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasnu.php"] [unique_id "aeyr84bPF4HSQDj6WrmHlAAAAMc"]
[Sat Apr 25 19:56:36.779292 2026] [:error] [pid 16195:tid 16209] [client 20.199.101.230:56641] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasnu.php"] [unique_id "aeyr9DVPLvrpvXaNQOko2gAAAAs"]
[Sat Apr 25 19:56:39.157720 2026] [:error] [pid 16107:tid 16155] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sat Apr 25 19:56:39.413129 2026] [:error] [pid 16107:tid 16156] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Sat Apr 25 19:56:39.700124 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Sat Apr 25 19:56:40.595159 2026] [:error] [pid 16107:tid 16139] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Sat Apr 25 19:56:40.862742 2026] [:error] [pid 16107:tid 16151] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Sat Apr 25 19:56:41.360004 2026] [:error] [pid 16107:tid 16148] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Sat Apr 25 19:56:41.611890 2026] [:error] [pid 16107:tid 16156] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/ref.php
[Sat Apr 25 19:56:41.850535 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Sat Apr 25 19:56:44.233088 2026] [:error] [pid 16107:tid 16147] [client 20.199.101.230:55803] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Apr 25 19:56:44.964743 2026] [:error] [pid 16107:tid 16147] [client 20.199.101.230:55803] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "aeyr_NIfF7Hy3tw0sYSGBgAAAIo"]
[Sat Apr 25 19:56:45.936283 2026] [:error] [pid 16106:tid 16128] [client 20.199.101.230:65326] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "aeyr_SGjdEsrWF7e-7M5oAAAAFI"]
[Sat Apr 25 19:56:46.581321 2026] [:error] [pid 16107:tid 16161] [client 20.199.101.230:60152] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "aeyr_tIfF7Hy3tw0sYSGCwAAAJg"]
[Sat Apr 25 19:56:47.899908 2026] [:error] [pid 16107:tid 16147] [client 20.199.101.230:55686] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "aeyr_9IfF7Hy3tw0sYSGEQAAAIo"]
[Sat Apr 25 19:56:48.955217 2026] [:error] [pid 29049:tid 29067] [client 20.199.101.230:55796] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeysACfsWHIvmg63qcWE8gAAARA"]
[Sat Apr 25 19:56:50.256039 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:65304] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeysAobPF4HSQDj6WrmHygAAAMs"]
[Sat Apr 25 19:56:51.460819 2026] [:error] [pid 29049:tid 29063] [client 20.199.101.230:61640] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeysAyfsWHIvmg63qcWE9QAAAQw"]
[Sat Apr 25 19:56:52.189648 2026] [:error] [pid 16108:tid 16185] [client 20.199.101.230:60202] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "aeysBIbPF4HSQDj6WrmH2AAAANM"]
[Sat Apr 25 19:56:53.264034 2026] [:error] [pid 16107:tid 16143] [client 20.199.101.230:56736] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeysBdIfF7Hy3tw0sYSGGAAAAIY"]
[Sat Apr 25 19:56:53.899195 2026] [:error] [pid 16107:tid 16152] [client 20.199.101.230:57460] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeysBdIfF7Hy3tw0sYSGHAAAAI8"]
[Sat Apr 25 19:56:54.887639 2026] [:error] [pid 16107:tid 16147] [client 20.199.101.230:56763] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeysBtIfF7Hy3tw0sYSGHQAAAIo"]
[Sat Apr 25 19:56:55.946726 2026] [:error] [pid 16106:tid 16130] [client 20.199.101.230:58437] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "aeysByGjdEsrWF7e-7M5swAAAFQ"]
[Sat Apr 25 19:56:57.045541 2026] [:error] [pid 16108:tid 16184] [client 20.199.101.230:61683] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeysCYbPF4HSQDj6WrmH3QAAANI"]
[Sat Apr 25 19:56:58.248140 2026] [:error] [pid 29049:tid 29067] [client 20.199.101.230:58448] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeysCifsWHIvmg63qcWFAgAAARA"]
[Sat Apr 25 19:56:59.342156 2026] [:error] [pid 16106:tid 16111] [client 20.199.101.230:58716] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeysCyGjdEsrWF7e-7M5uwAAAEE"]
[Sat Apr 25 19:57:00.974695 2026] [:error] [pid 16108:tid 16179] [client 20.199.101.230:58714] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeysDIbPF4HSQDj6WrmH5gAAAM0"]
[Sat Apr 25 19:57:03.453183 2026] [:error] [pid 16107:tid 16161] [client 20.199.101.230:57450] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysD9IfF7Hy3tw0sYSGMwAAAJg"]
[Sat Apr 25 19:57:04.322073 2026] [:error] [pid 16108:tid 16178] [client 20.199.101.230:51471] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysEIbPF4HSQDj6WrmH8wAAAMw"]
[Sat Apr 25 19:57:05.075605 2026] [:error] [pid 16108:tid 16173] [client 20.199.101.230:58477] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysEYbPF4HSQDj6WrmH-wAAAMc"]
[Sat Apr 25 19:57:05.941317 2026] [:error] [pid 29049:tid 29063] [client 20.199.101.230:61605] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysESfsWHIvmg63qcWFCgAAAQw"]
[Sat Apr 25 19:57:06.612878 2026] [:error] [pid 29049:tid 29066] [client 20.199.101.230:53401] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeysEifsWHIvmg63qcWFDwAAAQ8"]
[Sat Apr 25 19:57:07.125196 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:65331] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeysE4bPF4HSQDj6WrmIBAAAAME"]
[Sat Apr 25 19:57:07.957903 2026] [:error] [pid 16107:tid 16151] [client 20.199.101.230:60191] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeysE9IfF7Hy3tw0sYSGPAAAAI4"]
[Sat Apr 25 19:57:09.216479 2026] [:error] [pid 16108:tid 16178] [client 20.199.101.230:55798] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "aeysFYbPF4HSQDj6WrmIBgAAAMw"]
[Sat Apr 25 19:57:09.942833 2026] [:error] [pid 16108:tid 16190] [client 20.199.101.230:65309] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeysFYbPF4HSQDj6WrmIDQAAANg"]
[Sat Apr 25 19:57:10.702420 2026] [:error] [pid 16107:tid 16144] [client 20.199.101.230:60180] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeysFtIfF7Hy3tw0sYSGQgAAAIc"]
[Sat Apr 25 19:57:11.576054 2026] [:error] [pid 16106:tid 16127] [client 20.199.101.230:56737] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeysFyGjdEsrWF7e-7M5wQAAAFE"]
[Sat Apr 25 19:57:12.209396 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:58474] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "aeysGCGjdEsrWF7e-7M5xAAAAEI"]
[Sat Apr 25 19:57:12.889066 2026] [:error] [pid 16106:tid 16122] [client 20.199.101.230:60104] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeysGCGjdEsrWF7e-7M5xwAAAEw"]
[Sat Apr 25 19:57:14.056099 2026] [:error] [pid 29049:tid 29061] [client 20.199.101.230:61569] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeysGifsWHIvmg63qcWFFgAAAQo"]
[Sat Apr 25 19:57:14.736765 2026] [:error] [pid 29049:tid 29066] [client 20.199.101.230:61643] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeysGifsWHIvmg63qcWFHAAAAQ8"]
[Sat Apr 25 19:57:15.256939 2026] [:error] [pid 16107:tid 16137] [client 20.199.101.230:55693] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "aeysG9IfF7Hy3tw0sYSGSQAAAIA"]
[Sat Apr 25 19:57:16.243408 2026] [:error] [pid 29049:tid 29057] [client 20.199.101.230:56735] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeysHCfsWHIvmg63qcWFIAAAAQY"]
[Sat Apr 25 19:57:16.881157 2026] [:error] [pid 29049:tid 29067] [client 20.199.101.230:56756] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeysHCfsWHIvmg63qcWFIgAAARA"]
[Sat Apr 25 19:57:18.524645 2026] [:error] [pid 16107:tid 16153] [client 20.199.101.230:65307] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeysHtIfF7Hy3tw0sYSGVAAAAJA"]
[Sat Apr 25 19:57:19.291041 2026] [:error] [pid 29049:tid 29058] [client 20.199.101.230:53281] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "aeysHyfsWHIvmg63qcWFKwAAAQc"]
[Sat Apr 25 19:57:20.349448 2026] [:error] [pid 16107:tid 16139] [client 20.199.101.230:57445] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeysINIfF7Hy3tw0sYSGXAAAAII"]
[Sat Apr 25 19:57:21.426615 2026] [:error] [pid 16108:tid 16189] [client 20.199.101.230:57414] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeysIYbPF4HSQDj6WrmIFwAAANc"]
[Sat Apr 25 19:57:22.360989 2026] [:error] [pid 16107:tid 16141] [client 20.199.101.230:61694] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeysItIfF7Hy3tw0sYSGZAAAAIQ"]
[Sat Apr 25 19:57:22.942380 2026] [:error] [pid 16108:tid 16180] [client 20.199.101.230:65332] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "aeysIobPF4HSQDj6WrmIGwAAAM4"]
[Sat Apr 25 19:57:24.352313 2026] [:error] [pid 16107:tid 16154] [client 20.199.101.230:55789] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeysJNIfF7Hy3tw0sYSGaAAAAJE"]
[Sat Apr 25 19:57:25.350674 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:60107] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeysJdIfF7Hy3tw0sYSGbAAAAIg"]
[Sat Apr 25 19:57:26.027816 2026] [:error] [pid 16106:tid 16128] [client 20.199.101.230:56682] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeysJiGjdEsrWF7e-7M50wAAAFI"]
[Sat Apr 25 19:57:27.261904 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:58735] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "aeysJ4bPF4HSQDj6WrmIKAAAAMs"]
[Sat Apr 25 19:57:28.253720 2026] [:error] [pid 29049:tid 29064] [client 20.199.101.230:60198] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysKCfsWHIvmg63qcWFPwAAAQ0"]
[Sat Apr 25 19:57:29.684976 2026] [:error] [pid 29049:tid 29062] [client 20.199.101.230:60115] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysKSfsWHIvmg63qcWFQgAAAQs"]
[Sat Apr 25 19:57:31.042610 2026] [:error] [pid 16106:tid 16123] [client 20.199.101.230:65303] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysKyGjdEsrWF7e-7M52gAAAE0"]
[Sat Apr 25 19:57:31.922737 2026] [:error] [pid 16107:tid 16147] [client 20.199.101.230:60171] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "aeysK9IfF7Hy3tw0sYSGegAAAIo"]
[Sat Apr 25 19:57:32.868276 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:65328] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeysLNIfF7Hy3tw0sYSGfQAAAIg"]
[Sat Apr 25 19:57:33.647546 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:56653] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeysLYbPF4HSQDj6WrmIRwAAAME"]
[Sat Apr 25 19:57:34.425786 2026] [:error] [pid 16108:tid 16187] [client 20.199.101.230:60174] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeysLobPF4HSQDj6WrmITAAAANU"]
[Sat Apr 25 19:57:35.178649 2026] [:error] [pid 16108:tid 16183] [client 20.199.101.230:58743] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "aeysL4bPF4HSQDj6WrmIUAAAANE"]
[Sat Apr 25 19:57:35.893947 2026] [:error] [pid 16195:tid 16211] [client 20.199.101.230:56663] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeysLzVPLvrpvXaNQOkpBAAAAA0"]
[Sat Apr 25 19:57:37.425563 2026] [:error] [pid 29049:tid 29057] [client 20.199.101.230:60184] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeysMSfsWHIvmg63qcWFSAAAAQY"]
[Sat Apr 25 19:57:38.494110 2026] [:error] [pid 29049:tid 29072] [client 20.199.101.230:57440] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeysMifsWHIvmg63qcWFSwAAARU"]
[Sat Apr 25 19:57:39.098657 2026] [:error] [pid 29049:tid 29062] [client 20.199.101.230:56724] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "aeysMyfsWHIvmg63qcWFTwAAAQs"]
[Sat Apr 25 19:57:39.711684 2026] [:error] [pid 29049:tid 29053] [client 20.199.101.230:61590] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeysMyfsWHIvmg63qcWFUAAAAQI"]
[Sat Apr 25 19:57:40.559599 2026] [:error] [pid 16106:tid 16127] [client 20.199.101.230:56760] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeysNCGjdEsrWF7e-7M57gAAAFE"]
[Sat Apr 25 19:57:41.456744 2026] [:error] [pid 16106:tid 16114] [client 20.199.101.230:61688] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeysNSGjdEsrWF7e-7M58gAAAEQ"]
[Sat Apr 25 19:57:42.122883 2026] [:error] [pid 16106:tid 16131] [client 20.199.101.230:56695] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "aeysNiGjdEsrWF7e-7M59QAAAFU"]
[Sat Apr 25 19:57:43.247437 2026] [:error] [pid 16106:tid 16132] [client 20.199.101.230:61653] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "aeysNyGjdEsrWF7e-7M5-QAAAFY"]
[Sat Apr 25 19:57:43.970324 2026] [:error] [pid 16108:tid 16187] [client 20.199.101.230:60126] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "aeysN4bPF4HSQDj6WrmIVgAAANU"]
[Sat Apr 25 19:57:45.082469 2026] [:error] [pid 16106:tid 16128] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Sat Apr 25 19:57:45.399864 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Sat Apr 25 19:57:45.814567 2026] [:error] [pid 16106:tid 16120] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Apr 25 19:57:46.107362 2026] [:error] [pid 16106:tid 16119] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat Apr 25 19:57:46.723508 2026] [:error] [pid 16106:tid 16117] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat Apr 25 19:57:47.053931 2026] [:error] [pid 16106:tid 16116] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Apr 25 19:57:47.382416 2026] [:error] [pid 16106:tid 16131] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Sat Apr 25 19:57:47.669758 2026] [:error] [pid 16106:tid 16127] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sat Apr 25 19:57:47.934777 2026] [:error] [pid 16106:tid 16128] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 25 19:57:48.234002 2026] [:error] [pid 16106:tid 16114] [client 20.199.101.230:61679] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 25 19:57:48.496817 2026] [:error] [pid 16106:tid 16125] [client 20.199.101.230:61679] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeysPCGjdEsrWF7e-7M6FQAAAE8"]
[Sat Apr 25 19:57:49.290699 2026] [:error] [pid 16195:tid 16201] [client 20.199.101.230:56727] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeysPTVPLvrpvXaNQOkpEQAAAAM"]
[Sat Apr 25 19:57:50.097956 2026] [:error] [pid 16195:tid 16206] [client 20.199.101.230:56655] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeysPjVPLvrpvXaNQOkpEgAAAAg"]
[Sat Apr 25 19:57:50.847657 2026] [:error] [pid 16195:tid 16219] [client 20.199.101.230:61690] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "aeysPjVPLvrpvXaNQOkpFAAAABU"]
[Sat Apr 25 19:57:52.050074 2026] [:error] [pid 16107:tid 16159] [client 20.199.101.230:58741] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeysQNIfF7Hy3tw0sYSGkwAAAJY"]
[Sat Apr 25 19:57:53.113953 2026] [:error] [pid 16108:tid 16187] [client 20.199.101.230:61582] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeysQYbPF4HSQDj6WrmIewAAANU"]
[Sat Apr 25 19:57:54.118748 2026] [:error] [pid 16108:tid 16179] [client 20.199.101.230:56688] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeysQobPF4HSQDj6WrmIfwAAAM0"]
[Sat Apr 25 19:57:54.980231 2026] [:error] [pid 16108:tid 16176] [client 20.199.101.230:58445] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "aeysQobPF4HSQDj6WrmIggAAAMo"]
[Sat Apr 25 19:57:56.230638 2026] [:error] [pid 16108:tid 16183] [client 20.199.101.230:57612] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeysRIbPF4HSQDj6WrmIiAAAANE"]
[Sat Apr 25 19:57:57.176086 2026] [:error] [pid 29049:tid 29057] [client 20.199.101.230:55771] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeysRSfsWHIvmg63qcWFaQAAAQY"]
[Sat Apr 25 19:57:57.979943 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:57622] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeysRYbPF4HSQDj6WrmIiwAAAME"]
[Sat Apr 25 19:57:58.663352 2026] [:error] [pid 16108:tid 16166] [client 20.199.101.230:58707] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "aeysRobPF4HSQDj6WrmIjQAAAMI"]
[Sat Apr 25 19:57:59.267596 2026] [:error] [pid 16108:tid 16183] [client 20.199.101.230:60208] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "aeysR4bPF4HSQDj6WrmIkQAAANE"]
[Sat Apr 25 19:58:00.114377 2026] [:error] [pid 16107:tid 16139] [client 20.199.101.230:55702] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "aeysSNIfF7Hy3tw0sYSGqAAAAII"]
[Sat Apr 25 19:58:00.768085 2026] [:error] [pid 29049:tid 29065] [client 20.199.101.230:60193] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "aeysSCfsWHIvmg63qcWFcgAAAQ4"]
[Sat Apr 25 19:58:01.686900 2026] [:error] [pid 29049:tid 29062] [client 20.199.101.230:65302] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "aeysSSfsWHIvmg63qcWFdAAAAQs"]
[Sat Apr 25 19:58:02.459852 2026] [:error] [pid 16107:tid 16160] [client 20.199.101.230:55762] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aeysStIfF7Hy3tw0sYSGrQAAAJc"]
[Sat Apr 25 19:58:03.153003 2026] [:error] [pid 16195:tid 16205] [client 20.199.101.230:56644] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aeysSzVPLvrpvXaNQOkpJAAAAAc"]
[Sat Apr 25 19:58:03.724746 2026] [:error] [pid 16108:tid 16182] [client 20.199.101.230:60221] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aeysS4bPF4HSQDj6WrmIogAAANA"]
[Sat Apr 25 19:58:04.573046 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:61575] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "aeysTIbPF4HSQDj6WrmIpQAAAMs"]
[Sat Apr 25 19:58:05.344946 2026] [:error] [pid 16107:tid 16157] [client 20.199.101.230:51468] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "aeysTdIfF7Hy3tw0sYSGtQAAAJQ"]
[Sat Apr 25 19:58:06.041515 2026] [:error] [pid 29049:tid 29065] [client 20.199.101.230:60177] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "aeysTifsWHIvmg63qcWFfgAAAQ4"]
[Sat Apr 25 19:58:07.090017 2026] [:error] [pid 16108:tid 16189] [client 20.199.101.230:61675] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "aeysT4bPF4HSQDj6WrmIsgAAANc"]
[Sat Apr 25 19:58:11.897577 2026] [:error] [pid 29049:tid 29053] [client 20.199.101.230:58705] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "aeysUyfsWHIvmg63qcWFjwAAAQI"]
[Sat Apr 25 19:58:53.720939 2026] [:error] [pid 16108:tid 16179] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sat Apr 25 19:58:53.962085 2026] [:error] [pid 16108:tid 16180] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sat Apr 25 19:58:54.232266 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Sat Apr 25 19:58:54.564692 2026] [:error] [pid 16108:tid 16189] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 25 19:58:54.853492 2026] [:error] [pid 16108:tid 16175] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Sat Apr 25 19:58:55.130051 2026] [:error] [pid 16108:tid 16166] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Sat Apr 25 19:58:55.454557 2026] [:error] [pid 16108:tid 16190] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat Apr 25 19:58:55.693367 2026] [:error] [pid 16108:tid 16174] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat Apr 25 19:58:55.936863 2026] [:error] [pid 16108:tid 16185] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 25 19:58:56.174793 2026] [:error] [pid 16108:tid 16164] [client 20.199.101.230:57456] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sat Apr 25 19:58:56.409618 2026] [:error] [pid 16108:tid 16170] [client 20.199.101.230:57456] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeysgIbPF4HSQDj6WrmJXgAAAMY"]
[Sat Apr 25 19:58:57.285242 2026] [:error] [pid 16108:tid 16186] [client 20.199.101.230:58736] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeysgYbPF4HSQDj6WrmJXwAAANQ"]
[Sat Apr 25 19:58:58.040933 2026] [:error] [pid 16107:tid 16152] [client 20.199.101.230:58459] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeysgtIfF7Hy3tw0sYSHIwAAAI8"]
[Sat Apr 25 19:58:58.636544 2026] [:error] [pid 16195:tid 16216] [client 20.199.101.230:60159] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "aeysgjVPLvrpvXaNQOkpWQAAABI"]
[Sat Apr 25 19:58:59.332310 2026] [:error] [pid 16195:tid 16218] [client 20.199.101.230:56696] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeysgzVPLvrpvXaNQOkpWwAAABQ"]
[Sat Apr 25 19:59:00.349889 2026] [:error] [pid 16195:tid 16202] [client 20.199.101.230:61634] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeyshDVPLvrpvXaNQOkpXgAAAAQ"]
[Sat Apr 25 19:59:00.947476 2026] [:error] [pid 29049:tid 29072] [client 20.199.101.230:58747] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeyshCfsWHIvmg63qcWF0QAAARU"]
[Sat Apr 25 19:59:01.649926 2026] [:error] [pid 16107:tid 16139] [client 20.199.101.230:53285] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "aeyshdIfF7Hy3tw0sYSHKQAAAII"]
[Sat Apr 25 19:59:02.569882 2026] [:error] [pid 16108:tid 16179] [client 20.199.101.230:60103] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeyshobPF4HSQDj6WrmJbAAAAM0"]
[Sat Apr 25 19:59:03.230549 2026] [:error] [pid 16108:tid 16188] [client 20.199.101.230:58742] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeysh4bPF4HSQDj6WrmJcAAAANY"]
[Sat Apr 25 19:59:05.528967 2026] [:error] [pid 16107:tid 16160] [client 20.199.101.230:51525] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeysidIfF7Hy3tw0sYSHMQAAAJc"]
[Sat Apr 25 19:59:06.357363 2026] [:error] [pid 16108:tid 16185] [client 20.199.101.230:53436] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "aeysiobPF4HSQDj6WrmJdwAAANM"]
[Sat Apr 25 19:59:07.600771 2026] [:error] [pid 29049:tid 29059] [client 20.199.101.230:55684] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeysiyfsWHIvmg63qcWF2AAAAQg"]
[Sat Apr 25 19:59:08.325703 2026] [:error] [pid 16195:tid 16200] [client 20.199.101.230:61613] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeysjDVPLvrpvXaNQOkpZQAAAAI"]
[Sat Apr 25 19:59:10.516868 2026] [:error] [pid 16195:tid 16202] [client 20.199.101.230:60170] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeysjjVPLvrpvXaNQOkpZwAAAAQ"]
[Sat Apr 25 19:59:11.159004 2026] [:error] [pid 29049:tid 29061] [client 20.199.101.230:55721] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "aeysjyfsWHIvmg63qcWF3AAAAQo"]
[Sat Apr 25 19:59:11.940487 2026] [:error] [pid 29049:tid 29058] [client 20.199.101.230:57438] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeysjyfsWHIvmg63qcWF3wAAAQc"]
[Sat Apr 25 19:59:12.792387 2026] [:error] [pid 16107:tid 16154] [client 20.199.101.230:61585] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeyskNIfF7Hy3tw0sYSHQAAAAJE"]
[Sat Apr 25 19:59:13.444025 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:55680] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeyskSGjdEsrWF7e-7M6dAAAAEI"]
[Sat Apr 25 19:59:14.245322 2026] [:error] [pid 16195:tid 16219] [client 20.199.101.230:53428] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "aeyskjVPLvrpvXaNQOkpawAAABU"]
[Sat Apr 25 19:59:15.018563 2026] [:error] [pid 29049:tid 29057] [client 20.199.101.230:61669] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeyskyfsWHIvmg63qcWF4AAAAQY"]
[Sat Apr 25 19:59:15.790059 2026] [:error] [pid 16106:tid 16110] [client 20.199.101.230:55784] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeyskyGjdEsrWF7e-7M6dwAAAEA"]
[Sat Apr 25 19:59:16.373656 2026] [:error] [pid 29049:tid 29056] [client 20.199.101.230:65321] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeyslCfsWHIvmg63qcWF4wAAAQU"]
[Sat Apr 25 19:59:17.042601 2026] [:error] [pid 16108:tid 16187] [client 20.199.101.230:56746] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "aeyslYbPF4HSQDj6WrmJjAAAANU"]
[Sat Apr 25 19:59:17.686823 2026] [:error] [pid 16107:tid 16154] [client 20.199.101.230:57423] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeysldIfF7Hy3tw0sYSHSwAAAJE"]
[Sat Apr 25 19:59:18.236571 2026] [:error] [pid 29049:tid 29053] [client 20.199.101.230:55715] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeyslifsWHIvmg63qcWF5gAAAQI"]
[Sat Apr 25 19:59:18.846504 2026] [:error] [pid 16195:tid 16216] [client 20.199.101.230:65330] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeysljVPLvrpvXaNQOkpcgAAABI"]
[Sat Apr 25 19:59:19.477578 2026] [:error] [pid 16107:tid 16143] [client 20.199.101.230:65292] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "aeysl9IfF7Hy3tw0sYSHUQAAAIY"]
[Sat Apr 25 19:59:20.110243 2026] [:error] [pid 16107:tid 16146] [client 20.199.101.230:58471] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeysmNIfF7Hy3tw0sYSHUwAAAIk"]
[Sat Apr 25 19:59:20.692980 2026] [:error] [pid 16195:tid 16215] [client 20.199.101.230:55719] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeysmDVPLvrpvXaNQOkpeQAAABE"]
[Sat Apr 25 19:59:21.254101 2026] [:error] [pid 16107:tid 16137] [client 20.199.101.230:56671] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeysmdIfF7Hy3tw0sYSHVgAAAIA"]
[Sat Apr 25 19:59:21.885418 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:55688] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeysmYbPF4HSQDj6WrmJlgAAAMs"]
[Sat Apr 25 19:59:22.907419 2026] [:error] [pid 16108:tid 16180] [client 20.199.101.230:56699] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeysmobPF4HSQDj6WrmJmgAAAM4"]
[Sat Apr 25 19:59:23.695224 2026] [:error] [pid 16195:tid 16200] [client 20.199.101.230:57437] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeysmzVPLvrpvXaNQOkpgAAAAAI"]
[Sat Apr 25 19:59:24.334532 2026] [:error] [pid 16106:tid 16126] [client 20.199.101.230:52194] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeysnCGjdEsrWF7e-7M6fgAAAFA"]
[Sat Apr 25 19:59:24.892084 2026] [:error] [pid 16106:tid 16120] [client 20.199.101.230:56752] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "aeysnCGjdEsrWF7e-7M6gAAAAEo"]
[Sat Apr 25 19:59:26.005924 2026] [:error] [pid 16107:tid 16139] [client 20.199.101.230:61687] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeysntIfF7Hy3tw0sYSHXgAAAII"]
[Sat Apr 25 19:59:27.110006 2026] [:error] [pid 16195:tid 16215] [client 20.199.101.230:61577] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeysnzVPLvrpvXaNQOkphAAAABE"]
[Sat Apr 25 19:59:27.794867 2026] [:error] [pid 16195:tid 16208] [client 20.199.101.230:55761] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeysnzVPLvrpvXaNQOkpiAAAAAo"]
[Sat Apr 25 19:59:28.362747 2026] [:error] [pid 16107:tid 16157] [client 20.199.101.230:61606] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "aeysoNIfF7Hy3tw0sYSHYwAAAJQ"]
[Sat Apr 25 19:59:29.090498 2026] [:error] [pid 16108:tid 16190] [client 20.199.101.230:56647] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeysoYbPF4HSQDj6WrmJrgAAANg"]
[Sat Apr 25 19:59:30.470275 2026] [:error] [pid 16107:tid 16138] [client 20.199.101.230:61673] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeysotIfF7Hy3tw0sYSHawAAAIE"]
[Sat Apr 25 19:59:31.136966 2026] [:error] [pid 16106:tid 16129] [client 20.199.101.230:57422] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeysoyGjdEsrWF7e-7M6iAAAAFM"]
[Sat Apr 25 19:59:31.778529 2026] [:error] [pid 16106:tid 16117] [client 20.199.101.230:58458] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "aeysoyGjdEsrWF7e-7M6jgAAAEc"]
[Sat Apr 25 19:59:32.347771 2026] [:error] [pid 16195:tid 16222] [client 20.199.101.230:65338] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeyspDVPLvrpvXaNQOkpjgAAABg"]
[Sat Apr 25 19:59:32.898105 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:57647] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeyspCGjdEsrWF7e-7M6lwAAAEI"]
[Sat Apr 25 19:59:33.559158 2026] [:error] [pid 16108:tid 16180] [client 20.199.101.230:61637] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeyspYbPF4HSQDj6WrmJvQAAAM4"]
[Sat Apr 25 19:59:34.329126 2026] [:error] [pid 16195:tid 16215] [client 20.199.101.230:56703] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "aeyspjVPLvrpvXaNQOkpkQAAABE"]
[Sat Apr 25 19:59:34.956487 2026] [:error] [pid 16195:tid 16203] [client 20.199.101.230:65337] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeyspjVPLvrpvXaNQOkplAAAAAU"]
[Sat Apr 25 19:59:36.117058 2026] [:error] [pid 29049:tid 29054] [client 20.199.101.230:57432] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeysqCfsWHIvmg63qcWF7QAAAQM"]
[Sat Apr 25 19:59:36.727005 2026] [:error] [pid 16106:tid 16133] [client 20.199.101.230:56680] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeysqCGjdEsrWF7e-7M6mgAAAFc"]
[Sat Apr 25 19:59:37.844380 2026] [:error] [pid 16106:tid 16123] [client 20.199.101.230:60195] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "aeysqSGjdEsrWF7e-7M6mwAAAE0"]
[Sat Apr 25 19:59:38.635396 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:56709] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeysqtIfF7Hy3tw0sYSHcQAAAIg"]
[Sat Apr 25 19:59:39.442657 2026] [:error] [pid 16108:tid 16178] [client 20.199.101.230:55691] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeysq4bPF4HSQDj6WrmJ0QAAAMw"]
[Sat Apr 25 19:59:39.998496 2026] [:error] [pid 16107:tid 16137] [client 20.199.101.230:61598] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeysq9IfF7Hy3tw0sYSHcgAAAIA"]
[Sat Apr 25 19:59:40.486539 2026] [:error] [pid 16106:tid 16115] [client 20.199.101.230:60216] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "aeysrCGjdEsrWF7e-7M6oAAAAEU"]
[Sat Apr 25 19:59:41.246950 2026] [:error] [pid 16107:tid 16158] [client 20.199.101.230:60127] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeysrdIfF7Hy3tw0sYSHdwAAAJU"]
[Sat Apr 25 19:59:42.122290 2026] [:error] [pid 16106:tid 16126] [client 20.199.101.230:57447] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeysriGjdEsrWF7e-7M6pQAAAFA"]
[Sat Apr 25 19:59:42.703319 2026] [:error] [pid 29049:tid 29060] [client 20.199.101.230:65293] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeysrifsWHIvmg63qcWF_wAAAQk"]
[Sat Apr 25 19:59:43.812167 2026] [:error] [pid 29049:tid 29075] [client 20.199.101.230:60125] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeysryfsWHIvmg63qcWGCAAAARg"]
[Sat Apr 25 19:59:44.566467 2026] [:error] [pid 16108:tid 16178] [client 20.199.101.230:61652] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyssIbPF4HSQDj6WrmJ2wAAAMw"]
[Sat Apr 25 19:59:45.208965 2026] [:error] [pid 16108:tid 16170] [client 20.199.101.230:58481] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyssYbPF4HSQDj6WrmJ3QAAAMY"]
[Sat Apr 25 19:59:45.876375 2026] [:error] [pid 16108:tid 16176] [client 20.199.101.230:60201] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyssYbPF4HSQDj6WrmJ4AAAAMo"]
[Sat Apr 25 19:59:46.707694 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:58476] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeyssiGjdEsrWF7e-7M6zgAAAEI"]
[Sat Apr 25 19:59:47.304352 2026] [:error] [pid 16108:tid 16184] [client 20.199.101.230:55770] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeyss4bPF4HSQDj6WrmJ5wAAANI"]
[Sat Apr 25 19:59:47.920086 2026] [:error] [pid 16195:tid 16202] [client 20.199.101.230:61589] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeysszVPLvrpvXaNQOkpogAAAAQ"]
[Sat Apr 25 19:59:48.558454 2026] [:error] [pid 16108:tid 16190] [client 20.199.101.230:50176] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeystIbPF4HSQDj6WrmJ7QAAANg"]
[Sat Apr 25 19:59:49.149357 2026] [:error] [pid 16108:tid 16189] [client 20.199.101.230:55746] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "aeystYbPF4HSQDj6WrmJ7wAAANc"]
[Sat Apr 25 19:59:51.142584 2026] [:error] [pid 16108:tid 16188] [client 20.199.101.230:58457] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeyst4bPF4HSQDj6WrmJ9QAAANY"]
[Sat Apr 25 19:59:52.008530 2026] [:error] [pid 16106:tid 16123] [client 20.199.101.230:55740] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeysuCGjdEsrWF7e-7M67wAAAE0"]
[Sat Apr 25 19:59:52.651891 2026] [:error] [pid 16108:tid 16185] [client 20.199.101.230:57439] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeysuIbPF4HSQDj6WrmJ_gAAANM"]
[Sat Apr 25 19:59:53.494057 2026] [:error] [pid 29049:tid 29056] [client 20.199.101.230:54489] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "aeysuSfsWHIvmg63qcWGPgAAAQU"]
[Sat Apr 25 19:59:54.083833 2026] [:error] [pid 29049:tid 29059] [client 20.199.101.230:60218] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeysuifsWHIvmg63qcWGQAAAAQg"]
[Sat Apr 25 19:59:54.739929 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:57444] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeysuobPF4HSQDj6WrmKBgAAAMs"]
[Sat Apr 25 19:59:55.378273 2026] [:error] [pid 16108:tid 16178] [client 20.199.101.230:60120] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeysu4bPF4HSQDj6WrmKCwAAAMw"]
[Sat Apr 25 19:59:55.913674 2026] [:error] [pid 16108:tid 16170] [client 20.199.101.230:57629] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeysu4bPF4HSQDj6WrmKDgAAAMY"]
[Sat Apr 25 19:59:56.688954 2026] [:error] [pid 29049:tid 29069] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sat Apr 25 19:59:56.980335 2026] [:error] [pid 29049:tid 29057] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Apr 25 19:59:57.833291 2026] [:error] [pid 29049:tid 29062] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 19:59:58.170013 2026] [:error] [pid 29049:tid 29075] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 25 19:59:58.446918 2026] [:error] [pid 29049:tid 29061] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Apr 25 19:59:58.691910 2026] [:error] [pid 29049:tid 29053] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 19:59:58.931662 2026] [:error] [pid 29049:tid 29058] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Apr 25 19:59:59.476989 2026] [:error] [pid 29049:tid 29073] [client 20.199.101.230:55791] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat Apr 25 19:59:59.732985 2026] [:error] [pid 29049:tid 29066] [client 20.199.101.230:55791] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeysvyfsWHIvmg63qcWGWAAAAQ8"]
[Sat Apr 25 20:00:00.332177 2026] [:error] [pid 16107:tid 16140] [client 20.199.101.230:58495] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeyswNIfF7Hy3tw0sYSH_QAAAIM"]
[Sat Apr 25 20:00:01.846413 2026] [:error] [pid 16107:tid 16149] [client 20.199.101.230:58696] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeyswdIfF7Hy3tw0sYSIAQAAAIw"]
[Sat Apr 25 20:00:02.610013 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:57657] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeyswiGjdEsrWF7e-7M6-QAAAEI"]
[Sat Apr 25 20:00:03.553158 2026] [:error] [pid 16195:tid 16212] [client 20.199.101.230:61647] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeyswzVPLvrpvXaNQOkpugAAAA4"]
[Sat Apr 25 20:00:04.284083 2026] [:error] [pid 16106:tid 16113] [client 20.199.101.230:57658] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeysxCGjdEsrWF7e-7M6_QAAAEM"]
[Sat Apr 25 20:00:05.260780 2026] [:error] [pid 16107:tid 16153] [client 20.199.101.230:58461] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeysxdIfF7Hy3tw0sYSICAAAAJA"]
[Sat Apr 25 20:00:05.908188 2026] [:error] [pid 16108:tid 16176] [client 20.199.101.230:57650] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "aeysxYbPF4HSQDj6WrmKKwAAAMo"]
[Sat Apr 25 20:00:06.494564 2026] [:error] [pid 16107:tid 16155] [client 20.199.101.230:57658] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeysxtIfF7Hy3tw0sYSICwAAAJI"]
[Sat Apr 25 20:00:07.216734 2026] [:error] [pid 16106:tid 16132] [client 20.199.101.230:56661] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeysxyGjdEsrWF7e-7M7AgAAAFY"]
[Sat Apr 25 20:00:07.937620 2026] [:error] [pid 16106:tid 16116] [client 20.199.101.230:61602] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeysxyGjdEsrWF7e-7M7BQAAAEY"]
[Sat Apr 25 20:00:09.525183 2026] [:error] [pid 29049:tid 29071] [client 20.199.101.230:56729] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "aeysySfsWHIvmg63qcWGYAAAARQ"]
[Sat Apr 25 20:00:10.188917 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:56747] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeysyobPF4HSQDj6WrmKMAAAAMs"]
[Sat Apr 25 20:00:10.744760 2026] [:error] [pid 29049:tid 29054] [client 20.199.101.230:60112] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeysyifsWHIvmg63qcWGYwAAAQM"]
[Sat Apr 25 20:00:11.499559 2026] [:error] [pid 16106:tid 16127] [client 20.199.101.230:56733] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeysyyGjdEsrWF7e-7M7BwAAAFE"]
[Sat Apr 25 20:00:12.500262 2026] [:error] [pid 16107:tid 16156] [client 20.199.101.230:52189] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeyszNIfF7Hy3tw0sYSIGwAAAJM"]
[Sat Apr 25 20:00:13.128842 2026] [:error] [pid 16107:tid 16150] [client 20.199.101.230:60206] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeyszdIfF7Hy3tw0sYSIHQAAAI0"]
[Sat Apr 25 20:00:13.834949 2026] [:error] [pid 16107:tid 16138] [client 20.199.101.230:55775] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeyszdIfF7Hy3tw0sYSIIAAAAIE"]
[Sat Apr 25 20:00:14.479475 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:61594] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeysztIfF7Hy3tw0sYSIIwAAAIg"]
[Sat Apr 25 20:00:15.121683 2026] [:error] [pid 16107:tid 16140] [client 20.199.101.230:58731] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeysz9IfF7Hy3tw0sYSIJgAAAIM"]
[Sat Apr 25 20:00:15.855783 2026] [:error] [pid 16195:tid 16208] [client 20.199.101.230:56730] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeyszzVPLvrpvXaNQOkpyAAAAAo"]
[Sat Apr 25 20:00:16.840501 2026] [:error] [pid 16195:tid 16217] [client 20.199.101.230:51544] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeys0DVPLvrpvXaNQOkpywAAABM"]
[Sat Apr 25 20:00:18.046019 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:55690] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeys0tIfF7Hy3tw0sYSINgAAAIg"]
[Sat Apr 25 20:00:18.904333 2026] [:error] [pid 29049:tid 29051] [client 20.199.101.230:57429] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeys0ifsWHIvmg63qcWGaQAAAQA"]
[Sat Apr 25 20:00:20.518334 2026] [:error] [pid 16108:tid 16174] [client 20.199.101.230:58434] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeys1IbPF4HSQDj6WrmKPQAAAMg"]
[Sat Apr 25 20:00:21.334655 2026] [:error] [pid 16107:tid 16141] [client 20.199.101.230:52210] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeys1dIfF7Hy3tw0sYSISgAAAIQ"]
[Sat Apr 25 20:00:22.237578 2026] [:error] [pid 16108:tid 16173] [client 20.199.101.230:56728] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeys1obPF4HSQDj6WrmKQgAAAMc"]
[Sat Apr 25 20:00:23.572137 2026] [:error] [pid 29049:tid 29057] [client 20.199.101.230:57459] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeys1yfsWHIvmg63qcWGcwAAAQY"]
[Sat Apr 25 20:00:24.536049 2026] [:error] [pid 29049:tid 29070] [client 20.199.101.230:61695] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeys2CfsWHIvmg63qcWGdQAAARM"]
[Sat Apr 25 20:00:25.142563 2026] [:error] [pid 16106:tid 16116] [client 20.199.101.230:61654] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeys2SGjdEsrWF7e-7M7CAAAAEY"]
[Sat Apr 25 20:00:26.694918 2026] [:error] [pid 16108:tid 16189] [client 20.199.101.230:61658] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeys2obPF4HSQDj6WrmKYgAAANc"]
[Sat Apr 25 20:00:27.525927 2026] [:error] [pid 16108:tid 16183] [client 20.199.101.230:58479] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "aeys24bPF4HSQDj6WrmKZAAAANE"]
[Sat Apr 25 20:00:28.788754 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:58694] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeys3CGjdEsrWF7e-7M7CgAAAEI"]
[Sat Apr 25 20:00:29.580724 2026] [:error] [pid 16108:tid 16179] [client 20.199.101.230:61579] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeys3YbPF4HSQDj6WrmKbQAAAM0"]
[Sat Apr 25 20:00:31.192833 2026] [:error] [pid 16107:tid 16148] [client 20.199.101.230:65343] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeys39IfF7Hy3tw0sYSIdAAAAIs"]
[Sat Apr 25 20:00:32.197513 2026] [:error] [pid 16195:tid 16213] [client 20.199.101.230:58468] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeys4DVPLvrpvXaNQOkp-QAAAA8"]
[Sat Apr 25 20:00:34.964172 2026] [:error] [pid 16108:tid 16175] [client 20.199.101.230:65283] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeys4obPF4HSQDj6WrmKfgAAAMk"]
[Sat Apr 25 20:00:36.913847 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:56661] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeys5IbPF4HSQDj6WrmKhgAAAME"]
[Sat Apr 25 20:00:40.244300 2026] [:error] [pid 16108:tid 16164] [client 20.199.101.230:61642] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeys6IbPF4HSQDj6WrmKqQAAAMA"]
[Sat Apr 25 20:00:41.578296 2026] [:error] [pid 16195:tid 16215] [client 20.199.101.230:65305] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "aeys6TVPLvrpvXaNQOkqBAAAABE"]
[Sat Apr 25 20:00:42.947747 2026] [:error] [pid 16106:tid 16121] [client 20.199.101.230:60194] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeys6iGjdEsrWF7e-7M7FQAAAEs"]
[Sat Apr 25 20:00:43.815795 2026] [:error] [pid 16106:tid 16116] [client 20.199.101.230:60106] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeys6yGjdEsrWF7e-7M7GAAAAEY"]
[Sat Apr 25 20:00:45.309654 2026] [:error] [pid 16106:tid 16113] [client 20.199.101.230:55733] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeys7SGjdEsrWF7e-7M7HAAAAEM"]
[Sat Apr 25 20:00:47.139674 2026] [:error] [pid 16107:tid 16141] [client 20.199.101.230:55685] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeys79IfF7Hy3tw0sYSIowAAAIQ"]
[Sat Apr 25 20:00:47.989036 2026] [:error] [pid 29049:tid 29058] [client 20.199.101.230:55716] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeys7yfsWHIvmg63qcWGjQAAAQc"]
[Sat Apr 25 20:00:48.858900 2026] [:error] [pid 16107:tid 16151] [client 20.199.101.230:60172] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeys8NIfF7Hy3tw0sYSIpAAAAI4"]
[Sat Apr 25 20:00:49.789483 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:61617] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeys8YbPF4HSQDj6WrmLCQAAAME"]
[Sat Apr 25 20:00:50.897849 2026] [:error] [pid 16107:tid 16154] [client 20.199.101.230:54484] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "aeys8tIfF7Hy3tw0sYSIrAAAAJE"]
[Sat Apr 25 20:00:52.215408 2026] [:error] [pid 16107:tid 16147] [client 20.199.101.230:56743] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeys9NIfF7Hy3tw0sYSIsQAAAIo"]
[Sat Apr 25 20:00:57.121134 2026] [:error] [pid 29049:tid 29058] [client 20.199.101.230:55795] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "aeys-SfsWHIvmg63qcWGpwAAAQc"]
[Sat Apr 25 20:01:22.121152 2026] [:error] [pid 16108:tid 16173] [client 20.199.101.230:55782] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Apr 25 20:01:34.629586 2026] [:error] [pid 16107:tid 16155] [client 20.199.101.230:58717] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat Apr 25 20:01:35.254161 2026] [:error] [pid 16107:tid 16144] [client 20.199.101.230:58717] [client 20.199.101.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeytH9IfF7Hy3tw0sYSJXgAAAIc"]
[Sat Apr 25 20:01:36.591075 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:55778] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 25 20:01:37.549520 2026] [:error] [pid 16108:tid 16170] [client 20.199.101.230:55778] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Apr 25 20:01:37.928151 2026] [:error] [pid 16108:tid 16173] [client 20.199.101.230:55778] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sat Apr 25 20:01:38.227178 2026] [:error] [pid 16108:tid 16169] [client 20.199.101.230:55778] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sat Apr 25 20:01:38.556470 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:55778] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Sat Apr 25 20:01:39.134446 2026] [:error] [pid 16108:tid 16187] [client 20.199.101.230:55778] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeytI4bPF4HSQDj6WrmMlAAAANU"]
[Sat Apr 25 20:01:40.121738 2026] [:error] [pid 16195:tid 16209] [client 20.199.101.230:55687] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeytJDVPLvrpvXaNQOkqZAAAAAs"]
[Sat Apr 25 20:01:40.922338 2026] [:error] [pid 16107:tid 16158] [client 20.199.101.230:60116] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeytJNIfF7Hy3tw0sYSJYQAAAJU"]
[Sat Apr 25 20:01:41.783785 2026] [:error] [pid 16107:tid 16150] [client 20.199.101.230:55798] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "aeytJdIfF7Hy3tw0sYSJYgAAAI0"]
[Sat Apr 25 20:01:43.689641 2026] [:error] [pid 16108:tid 16181] [client 20.199.101.230:55772] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeytJ4bPF4HSQDj6WrmMlgAAAM8"]
[Sat Apr 25 20:01:45.891312 2026] [:error] [pid 16108:tid 16179] [client 20.199.101.230:60105] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeytKYbPF4HSQDj6WrmMmgAAAM0"]
[Sat Apr 25 20:01:46.678055 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:55786] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeytKobPF4HSQDj6WrmMngAAAME"]
[Sat Apr 25 20:01:47.842418 2026] [:error] [pid 16107:tid 16154] [client 20.199.101.230:65307] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeytK9IfF7Hy3tw0sYSJagAAAJE"]
[Sat Apr 25 20:01:48.658570 2026] [:error] [pid 16108:tid 16177] [client 20.199.101.230:58749] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeytLIbPF4HSQDj6WrmMogAAAMs"]
[Sat Apr 25 20:01:51.005730 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:57418] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeytL4bPF4HSQDj6WrmMpgAAAME"]
[Sat Apr 25 20:01:51.649869 2026] [:error] [pid 16107:tid 16153] [client 20.199.101.230:58433] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeytL9IfF7Hy3tw0sYSJcgAAAJA"]
[Sat Apr 25 20:01:52.326821 2026] [:error] [pid 16107:tid 16159] [client 20.199.101.230:60142] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "aeytMNIfF7Hy3tw0sYSJdAAAAJY"]
[Sat Apr 25 20:01:52.919594 2026] [:error] [pid 16195:tid 16208] [client 20.199.101.230:52272] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeytMDVPLvrpvXaNQOkqbwAAAAo"]
[Sat Apr 25 20:01:53.481655 2026] [:error] [pid 16108:tid 16182] [client 20.199.101.230:55759] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeytMYbPF4HSQDj6WrmMrQAAANA"]
[Sat Apr 25 20:01:54.016397 2026] [:error] [pid 29049:tid 29053] [client 20.199.101.230:61572] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeytMifsWHIvmg63qcWHJwAAAQI"]
[Sat Apr 25 20:01:54.533779 2026] [:error] [pid 29049:tid 29060] [client 20.199.101.230:58711] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "aeytMifsWHIvmg63qcWHKAAAAQk"]
[Sat Apr 25 20:01:55.721751 2026] [:error] [pid 29049:tid 29066] [client 20.199.101.230:61570] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeytMyfsWHIvmg63qcWHKwAAAQ8"]
[Sat Apr 25 20:01:56.310837 2026] [:error] [pid 16107:tid 16149] [client 20.199.101.230:56666] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeytNNIfF7Hy3tw0sYSJeAAAAIw"]
[Sat Apr 25 20:01:57.889207 2026] [:error] [pid 16108:tid 16182] [client 20.199.101.230:60106] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeytNYbPF4HSQDj6WrmMsgAAANA"]
[Sat Apr 25 20:01:58.496343 2026] [:error] [pid 29049:tid 29068] [client 20.199.101.230:56759] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "aeytNifsWHIvmg63qcWHLgAAARE"]
[Sat Apr 25 20:02:00.074937 2026] [:error] [pid 16108:tid 16180] [client 20.199.101.230:61664] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeytOIbPF4HSQDj6WrmMtgAAAM4"]
[Sat Apr 25 20:02:00.825019 2026] [:error] [pid 16195:tid 16198] [client 20.199.101.230:51527] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeytODVPLvrpvXaNQOkqdAAAAAA"]
[Sat Apr 25 20:02:01.596032 2026] [:error] [pid 16107:tid 16139] [client 20.199.101.230:55731] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeytOdIfF7Hy3tw0sYSJggAAAII"]
[Sat Apr 25 20:02:02.334918 2026] [:error] [pid 16107:tid 16146] [client 20.199.101.230:60126] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "aeytOtIfF7Hy3tw0sYSJhAAAAIk"]
[Sat Apr 25 20:02:04.008575 2026] [:error] [pid 16106:tid 16116] [client 20.199.101.230:55805] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeytPCGjdEsrWF7e-7M7hwAAAEY"]
[Sat Apr 25 20:02:05.269608 2026] [:error] [pid 16107:tid 16140] [client 20.199.101.230:57471] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeytPdIfF7Hy3tw0sYSJiQAAAIM"]
[Sat Apr 25 20:02:06.855507 2026] [:error] [pid 29049:tid 29057] [client 20.199.101.230:65314] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeytPifsWHIvmg63qcWHNgAAAQY"]
[Sat Apr 25 20:02:07.795857 2026] [:error] [pid 16107:tid 16155] [client 20.199.101.230:60184] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "aeytP9IfF7Hy3tw0sYSJiwAAAJI"]
[Sat Apr 25 20:02:08.502071 2026] [:error] [pid 29049:tid 29052] [client 20.199.101.230:58713] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeytQCfsWHIvmg63qcWHOAAAAQE"]
[Sat Apr 25 20:02:09.233360 2026] [:error] [pid 16107:tid 16144] [client 20.199.101.230:61587] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeytQdIfF7Hy3tw0sYSJjAAAAIc"]
[Sat Apr 25 20:02:10.047543 2026] [:error] [pid 29049:tid 29064] [client 20.199.101.230:55707] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeytQifsWHIvmg63qcWHPAAAAQ0"]
[Sat Apr 25 20:02:10.736072 2026] [:error] [pid 29049:tid 29056] [client 20.199.101.230:57434] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "aeytQifsWHIvmg63qcWHPgAAAQU"]
[Sat Apr 25 20:02:11.326432 2026] [:error] [pid 16106:tid 16112] [client 20.199.101.230:60205] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aeytQyGjdEsrWF7e-7M7kQAAAEI"]
[Sat Apr 25 20:02:11.890202 2026] [:error] [pid 16106:tid 16130] [client 20.199.101.230:57659] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aeytQyGjdEsrWF7e-7M7kgAAAFQ"]
[Sat Apr 25 20:02:12.602538 2026] [:error] [pid 16107:tid 16137] [client 20.199.101.230:56760] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aeytRNIfF7Hy3tw0sYSJkQAAAIA"]
[Sat Apr 25 20:02:13.813603 2026] [:error] [pid 16106:tid 16119] [client 20.199.101.230:65296] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "aeytRSGjdEsrWF7e-7M7lQAAAEk"]
[Sat Apr 25 20:02:14.529657 2026] [:error] [pid 16107:tid 16139] [client 20.199.101.230:60210] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeytRtIfF7Hy3tw0sYSJkwAAAII"]
[Sat Apr 25 20:02:15.308855 2026] [:error] [pid 16107:tid 16142] [client 20.199.101.230:61651] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeytR9IfF7Hy3tw0sYSJlQAAAIU"]
[Sat Apr 25 20:02:15.858829 2026] [:error] [pid 16107:tid 16149] [client 20.199.101.230:57414] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeytR9IfF7Hy3tw0sYSJlgAAAIw"]
[Sat Apr 25 20:02:16.448319 2026] [:error] [pid 16107:tid 16157] [client 20.199.101.230:55800] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "aeytSNIfF7Hy3tw0sYSJmgAAAJQ"]
[Sat Apr 25 20:02:17.288208 2026] [:error] [pid 16107:tid 16145] [client 20.199.101.230:55764] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeytSdIfF7Hy3tw0sYSJnAAAAIg"]
[Sat Apr 25 20:02:17.881987 2026] [:error] [pid 29049:tid 29075] [client 20.199.101.230:56704] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeytSSfsWHIvmg63qcWHSQAAARg"]
[Sat Apr 25 20:02:18.459402 2026] [:error] [pid 16107:tid 16137] [client 20.199.101.230:58720] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeytStIfF7Hy3tw0sYSJnwAAAIA"]
[Sat Apr 25 20:02:19.563522 2026] [:error] [pid 29049:tid 29060] [client 20.199.101.230:51579] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "aeytSyfsWHIvmg63qcWHTwAAAQk"]
[Sat Apr 25 20:02:20.104658 2026] [:error] [pid 16107:tid 16155] [client 20.199.101.230:60173] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeytTNIfF7Hy3tw0sYSJogAAAJI"]
[Sat Apr 25 20:02:20.834057 2026] [:error] [pid 16106:tid 16116] [client 20.199.101.230:60214] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeytTCGjdEsrWF7e-7M7nAAAAEY"]
[Sat Apr 25 20:02:21.433203 2026] [:error] [pid 16106:tid 16113] [client 20.199.101.230:61604] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeytTSGjdEsrWF7e-7M7nQAAAEM"]
[Sat Apr 25 20:02:22.135378 2026] [:error] [pid 29049:tid 29062] [client 20.199.101.230:57465] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "aeytTifsWHIvmg63qcWHUwAAAQs"]
[Sat Apr 25 20:02:22.943625 2026] [:error] [pid 16108:tid 16180] [client 20.199.101.230:60111] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeytTobPF4HSQDj6WrmMwQAAAM4"]
[Sat Apr 25 20:02:23.474228 2026] [:error] [pid 29049:tid 29052] [client 20.199.101.230:52193] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeytTyfsWHIvmg63qcWHVwAAAQE"]
[Sat Apr 25 20:02:24.242197 2026] [:error] [pid 16195:tid 16201] [client 20.199.101.230:53252] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeytUDVPLvrpvXaNQOkqjwAAAAM"]
[Sat Apr 25 20:02:24.747489 2026] [:error] [pid 16108:tid 16167] [client 20.199.101.230:58745] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "aeytUIbPF4HSQDj6WrmMwwAAAMM"]
[Sat Apr 25 20:02:25.365458 2026] [:error] [pid 16108:tid 16184] [client 20.199.101.230:55709] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeytUYbPF4HSQDj6WrmMxQAAANI"]
[Sat Apr 25 20:02:25.899734 2026] [:error] [pid 16108:tid 16165] [client 20.199.101.230:58719] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeytUYbPF4HSQDj6WrmMyAAAAME"]
[Sat Apr 25 20:02:26.502182 2026] [:error] [pid 16108:tid 16164] [client 20.199.101.230:55739] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeytUobPF4HSQDj6WrmMzAAAAMA"]
[Sat Apr 25 20:02:27.132606 2026] [:error] [pid 16108:tid 16166] [client 20.199.101.230:60144] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeytU4bPF4HSQDj6WrmMzgAAAMI"]
[Sat Apr 25 20:02:28.192200 2026] [:error] [pid 29049:tid 29058] [client 20.199.101.230:53257] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeytVCfsWHIvmg63qcWHXAAAAQc"]
[Sat Apr 25 20:02:28.783709 2026] [:error] [pid 16108:tid 16175] [client 20.199.101.230:56750] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeytVIbPF4HSQDj6WrmM1QAAAMk"]
[Sat Apr 25 20:02:29.384868 2026] [:error] [pid 16107:tid 16161] [client 20.199.101.230:60182] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeytVdIfF7Hy3tw0sYSJqwAAAJg"]
[Sat Apr 25 20:02:30.195067 2026] [:error] [pid 16107:tid 16141] [client 20.199.101.230:58737] [client 20.199.101.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "aeytVtIfF7Hy3tw0sYSJrQAAAIQ"]
[Sat Apr 25 21:01:53.933761 2026] [:error] [pid 3212:tid 3219] [client 43.135.140.225:40958] [client 43.135.140.225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aey7Qfg-28TY8_YLtUcmMgAAAQU"]
[Sat Apr 25 21:41:49.373155 2026] [:error] [pid 59896:tid 59914] [client 187.87.229.204:54332] [client 187.87.229.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.87.229.204, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aezEnbLLzhtkd-OXUgD6bQAAAE4"]
[Sat Apr 25 21:41:49.378176 2026] [:error] [pid 59896:tid 59914] [client 187.87.229.204:54332] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 25 23:27:52.113092 2026] [:error] [pid 3212:tid 3225] [client 182.44.9.147:40782] [client 182.44.9.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aezdePg-28TY8_YLtUd2vwAAAQs"]
[Sun Apr 26 05:14:39.385753 2026] [:error] [pid 41906:tid 41919] [client 151.241.100.57:40386] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "ae0uvz3-0A3lxw9OXoDxQwAAAYs"]
[Sun Apr 26 05:14:39.891009 2026] [:error] [pid 41906:tid 41932] [client 151.241.100.57:40404] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "ae0uvz3-0A3lxw9OXoDxSgAAAZg"]
[Sun Apr 26 05:14:39.891395 2026] [:error] [pid 41906:tid 41931] [client 151.241.100.57:40398] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "ae0uvz3-0A3lxw9OXoDxSAAAAZc"]
[Sun Apr 26 05:14:39.894558 2026] [:error] [pid 41906:tid 41915] [client 151.241.100.57:40420] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php.bak"] [unique_id "ae0uvz3-0A3lxw9OXoDxTgAAAYc"]
[Sun Apr 26 05:14:39.894681 2026] [:error] [pid 8390:tid 8460] [client 151.241.100.57:40482] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "ae0uv4GPtFK_i9p5yxQF8AAAAIk"]
[Sun Apr 26 05:14:39.894787 2026] [:error] [pid 41906:tid 41909] [client 151.241.100.57:40466] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "ae0uvz3-0A3lxw9OXoDxTwAAAYE"]
[Sun Apr 26 05:14:39.895159 2026] [:error] [pid 8390:tid 8456] [client 151.241.100.57:40492] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php"] [unique_id "ae0uv4GPtFK_i9p5yxQF8QAAAIU"]
[Sun Apr 26 05:14:40.047315 2026] [:error] [pid 8390:tid 8452] [client 151.241.100.57:40518] [client 151.241.100.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "ae0uwIGPtFK_i9p5yxQF8wAAAIE"]
[Sun Apr 26 05:14:41.696841 2026] [:error] [pid 8390:tid 8451] [client 151.241.100.57:40588] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwYGPtFK_i9p5yxQF-AAAAIA"]
[Sun Apr 26 05:14:41.851610 2026] [:error] [pid 41906:tid 41914] [client 151.241.100.57:40538] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwT3-0A3lxw9OXoDxZAAAAYY"]
[Sun Apr 26 05:14:42.006100 2026] [:error] [pid 31273:tid 31346] [client 151.241.100.57:40574] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwvhcNJEGrATcuEeyzgAAAUg"]
[Sun Apr 26 05:14:42.161011 2026] [:error] [pid 41906:tid 41928] [client 151.241.100.57:40576] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwj3-0A3lxw9OXoDxaAAAAZQ"]
[Sun Apr 26 05:14:42.315371 2026] [:error] [pid 41906:tid 41919] [client 151.241.100.57:40452] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwj3-0A3lxw9OXoDxaQAAAYs"]
[Sun Apr 26 05:14:42.469849 2026] [:error] [pid 41906:tid 41921] [client 151.241.100.57:40436] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwj3-0A3lxw9OXoDxbAAAAY0"]
[Sun Apr 26 05:14:42.623791 2026] [:error] [pid 41906:tid 41922] [client 151.241.100.57:40494] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwj3-0A3lxw9OXoDxbgAAAY4"]
[Sun Apr 26 05:14:42.778360 2026] [:error] [pid 8491:tid 8499] [client 151.241.100.57:40524] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwiq7I7e6CJooQM2BjQAAAMA"]
[Sun Apr 26 05:14:42.932821 2026] [:error] [pid 41906:tid 41914] [client 151.241.100.57:40406] [client 151.241.100.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amplify/team-provider-info.json"] [unique_id "ae0uwj3-0A3lxw9OXoDxcAAAAYY"]
[Sun Apr 26 07:36:25.057514 2026] [:error] [pid 22572:tid 22583] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Sun Apr 26 07:36:25.308610 2026] [:error] [pid 22572:tid 22596] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Sun Apr 26 07:36:25.552049 2026] [:error] [pid 22572:tid 22599] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun Apr 26 07:36:25.801932 2026] [:error] [pid 22572:tid 22593] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/AxAo.php
[Sun Apr 26 07:36:26.048560 2026] [:error] [pid 22572:tid 22588] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/siln.php
[Sun Apr 26 07:36:26.284667 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun Apr 26 07:36:26.521603 2026] [:error] [pid 22572:tid 22582] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Sun Apr 26 07:36:26.757973 2026] [:error] [pid 22572:tid 22585] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/raw.php
[Sun Apr 26 07:36:26.993300 2026] [:error] [pid 22572:tid 22580] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/puvil.php
[Sun Apr 26 07:36:27.228382 2026] [:error] [pid 22572:tid 22592] [client 172.213.240.210:11657] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun Apr 26 07:36:27.460010 2026] [:error] [pid 22572:tid 22597] [client 172.213.240.210:11657] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "ae1P-9XOViWCFU-pZzB0cgAAAVM"]
[Sun Apr 26 07:36:27.924763 2026] [:error] [pid 8383:tid 8416] [client 172.213.240.210:11761] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "ae1P-9Fa2S3EsATMdWPPewAAABM"]
[Sun Apr 26 07:36:28.391055 2026] [:error] [pid 22572:tid 22591] [client 172.213.240.210:11731] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "ae1P_NXOViWCFU-pZzB0dQAAAU0"]
[Sun Apr 26 07:36:28.872217 2026] [:error] [pid 8385:tid 8434] [client 172.213.240.210:11713] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmpls.php"] [unique_id "ae1P_DOy7_J84Wx3-oxzOwAAAEo"]
[Sun Apr 26 07:36:29.339528 2026] [:error] [pid 8491:tid 8505] [client 172.213.240.210:11744] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "ae1P_Sq7I7e6CJooQM2rRQAAAMY"]
[Sun Apr 26 07:36:29.822940 2026] [:error] [pid 8491:tid 8508] [client 172.213.240.210:11747] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "ae1P_Sq7I7e6CJooQM2rRgAAAMk"]
[Sun Apr 26 07:36:30.362910 2026] [:error] [pid 16515:tid 16524] [client 172.213.240.210:11658] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "ae1P_ltDrUmgHSvpuLzLVgAAAkY"]
[Sun Apr 26 07:36:30.876331 2026] [:error] [pid 16515:tid 16522] [client 172.213.240.210:11732] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3.php"] [unique_id "ae1P_ltDrUmgHSvpuLzLVwAAAkQ"]
[Sun Apr 26 07:36:31.342361 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11758] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ae1P_9XOViWCFU-pZzB0eAAAAUk"]
[Sun Apr 26 07:36:31.827265 2026] [:error] [pid 8491:tid 8514] [client 172.213.240.210:11655] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ae1P_yq7I7e6CJooQM2rSwAAAM8"]
[Sun Apr 26 07:36:32.313179 2026] [:error] [pid 22572:tid 22599] [client 172.213.240.210:11749] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ae1QANXOViWCFU-pZzB0egAAAVU"]
[Sun Apr 26 07:36:32.790873 2026] [:error] [pid 16515:tid 16526] [client 172.213.240.210:11696] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-aaa.php"] [unique_id "ae1QAFtDrUmgHSvpuLzLWQAAAkg"]
[Sun Apr 26 07:36:33.275300 2026] [:error] [pid 8383:tid 8402] [client 172.213.240.210:11738] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae1QAdFa2S3EsATMdWPPiAAAAAU"]
[Sun Apr 26 07:36:33.806014 2026] [:error] [pid 13137:tid 13144] [client 172.213.240.210:11755] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae1QAd0RB4J0o4h5neHlwwAAAgQ"]
[Sun Apr 26 07:36:34.270906 2026] [:error] [pid 16515:tid 16527] [client 172.213.240.210:11759] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae1QAltDrUmgHSvpuLzLXAAAAkk"]
[Sun Apr 26 07:36:34.745989 2026] [:error] [pid 13137:tid 13142] [client 172.213.240.210:11662] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ae1QAt0RB4J0o4h5neHlxgAAAgI"]
[Sun Apr 26 07:36:35.220294 2026] [:error] [pid 13197:tid 13244] [client 172.213.240.210:11774] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ae1QA93kktFKdSxTrBuUEwAAAsw"]
[Sun Apr 26 07:36:35.699310 2026] [:error] [pid 8491:tid 8510] [client 172.213.240.210:11772] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ae1QAyq7I7e6CJooQM2rUQAAAMs"]
[Sun Apr 26 07:36:36.164029 2026] [:error] [pid 8491:tid 8513] [client 172.213.240.210:11740] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ae1QBCq7I7e6CJooQM2rUgAAAM4"]
[Sun Apr 26 07:36:36.633901 2026] [:error] [pid 22572:tid 22602] [client 172.213.240.210:11705] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mo.php"] [unique_id "ae1QBNXOViWCFU-pZzB0fwAAAVg"]
[Sun Apr 26 07:36:37.109337 2026] [:error] [pid 22572:tid 22580] [client 172.213.240.210:11712] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ae1QBdXOViWCFU-pZzB0ggAAAUI"]
[Sun Apr 26 07:36:37.652346 2026] [:error] [pid 8390:tid 8455] [client 172.213.240.210:11667] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ae1QBYGPtFK_i9p5yxQrjwAAAIQ"]
[Sun Apr 26 07:36:38.142340 2026] [:error] [pid 22573:tid 22607] [client 172.213.240.210:11760] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ae1QBnB3EmQlD4yKUt8iSgAAAYE"]
[Sun Apr 26 07:36:38.665730 2026] [:error] [pid 8491:tid 8512] [client 172.213.240.210:11725] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file5.php"] [unique_id "ae1QBiq7I7e6CJooQM2rUwAAAM0"]
[Sun Apr 26 07:36:39.150581 2026] [:error] [pid 8383:tid 8401] [client 172.213.240.210:11689] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xrm.php"] [unique_id "ae1QB9Fa2S3EsATMdWPPjAAAAAQ"]
[Sun Apr 26 07:36:39.621921 2026] [:error] [pid 13137:tid 13143] [client 172.213.240.210:11733] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xrm.php"] [unique_id "ae1QB90RB4J0o4h5neHlywAAAgM"]
[Sun Apr 26 07:36:40.087607 2026] [:error] [pid 13137:tid 13152] [client 172.213.240.210:11659] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xrm.php"] [unique_id "ae1QCN0RB4J0o4h5neHlzQAAAgs"]
[Sun Apr 26 07:36:40.594166 2026] [:error] [pid 8383:tid 8413] [client 172.213.240.210:11773] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xrm.php"] [unique_id "ae1QCNFa2S3EsATMdWPPjQAAABA"]
[Sun Apr 26 07:36:41.071159 2026] [:error] [pid 8383:tid 8421] [client 172.213.240.210:11602] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "ae1QCdFa2S3EsATMdWPPjwAAABg"]
[Sun Apr 26 07:36:41.570086 2026] [:error] [pid 13137:tid 13165] [client 172.213.240.210:11766] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "ae1QCd0RB4J0o4h5neHlzgAAAhg"]
[Sun Apr 26 07:36:42.035518 2026] [:error] [pid 8491:tid 8515] [client 172.213.240.210:11671] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "ae1QCiq7I7e6CJooQM2rVgAAANA"]
[Sun Apr 26 07:36:42.506606 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11723] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "ae1QCnB3EmQlD4yKUt8iZgAAAZM"]
[Sun Apr 26 07:36:42.999366 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:11735] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "ae1QCnB3EmQlD4yKUt8iaAAAAZI"]
[Sun Apr 26 07:36:43.479484 2026] [:error] [pid 22572:tid 22584] [client 172.213.240.210:11619] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "ae1QC9XOViWCFU-pZzB0vAAAAUY"]
[Sun Apr 26 07:36:43.957550 2026] [:error] [pid 22572:tid 22602] [client 172.213.240.210:11627] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "ae1QC9XOViWCFU-pZzB0xQAAAVg"]
[Sun Apr 26 07:36:44.425113 2026] [:error] [pid 22573:tid 22617] [client 172.213.240.210:11741] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wdone1.php"] [unique_id "ae1QDHB3EmQlD4yKUt8iawAAAYo"]
[Sun Apr 26 07:36:44.891993 2026] [:error] [pid 13137:tid 13155] [client 172.213.240.210:11687] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "ae1QDN0RB4J0o4h5neHl0QAAAg4"]
[Sun Apr 26 07:36:45.357101 2026] [:error] [pid 16515:tid 16521] [client 172.213.240.210:11636] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "ae1QDVtDrUmgHSvpuLzLYAAAAkM"]
[Sun Apr 26 07:36:45.852961 2026] [:error] [pid 22572:tid 22594] [client 172.213.240.210:11751] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "ae1QDdXOViWCFU-pZzB0ygAAAVA"]
[Sun Apr 26 07:36:46.317893 2026] [:error] [pid 13137:tid 13157] [client 172.213.240.210:11652] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "ae1QDt0RB4J0o4h5neHl0gAAAhA"]
[Sun Apr 26 07:36:46.788070 2026] [:error] [pid 8383:tid 8397] [client 172.213.240.210:11734] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "ae1QDtFa2S3EsATMdWPPlAAAAAA"]
[Sun Apr 26 07:36:47.260778 2026] [:error] [pid 8383:tid 8418] [client 172.213.240.210:11592] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "ae1QD9Fa2S3EsATMdWPPlgAAABU"]
[Sun Apr 26 07:36:47.738755 2026] [:error] [pid 16574:tid 16608] [client 172.213.240.210:11649] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "ae1QD35MsX8wRQr99nb-HwAAA0Q"]
[Sun Apr 26 07:36:48.250189 2026] [:error] [pid 16574:tid 16641] [client 172.213.240.210:11664] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "ae1QEH5MsX8wRQr99nb-IAAAA1c"]
[Sun Apr 26 07:36:48.750824 2026] [:error] [pid 16515:tid 16539] [client 172.213.240.210:11724] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ae1QEFtDrUmgHSvpuLzLZwAAAlU"]
[Sun Apr 26 07:36:49.243066 2026] [:error] [pid 16515:tid 16533] [client 172.213.240.210:11736] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ae1QEVtDrUmgHSvpuLzLagAAAk8"]
[Sun Apr 26 07:36:49.870355 2026] [:error] [pid 8390:tid 8463] [client 172.213.240.210:11663] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ae1QEYGPtFK_i9p5yxQr2AAAAIw"]
[Sun Apr 26 07:36:50.337163 2026] [:error] [pid 22572:tid 22601] [client 172.213.240.210:11587] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blox.php"] [unique_id "ae1QEtXOViWCFU-pZzB0zAAAAVc"]
[Sun Apr 26 07:36:50.808579 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11684] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ae1QEtXOViWCFU-pZzB0zQAAAUk"]
[Sun Apr 26 07:36:51.276495 2026] [:error] [pid 16574:tid 16627] [client 172.213.240.210:11727] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ae1QE35MsX8wRQr99nb-IQAAA1A"]
[Sun Apr 26 07:36:51.781458 2026] [:error] [pid 22573:tid 22621] [client 172.213.240.210:11718] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ae1QE3B3EmQlD4yKUt8idQAAAY4"]
[Sun Apr 26 07:36:52.366284 2026] [:error] [pid 13197:tid 13251] [client 172.213.240.210:11660] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ae1QFN3kktFKdSxTrBuUGQAAAtM"]
[Sun Apr 26 07:36:52.862912 2026] [:error] [pid 16574:tid 16643] [client 172.213.240.210:11714] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ae1QFH5MsX8wRQr99nb-IwAAA1g"]
[Sun Apr 26 07:36:53.352163 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11701] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ae1QFXB3EmQlD4yKUt8idgAAAZY"]
[Sun Apr 26 07:36:53.824439 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11739] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ae1QFXB3EmQlD4yKUt8idwAAAZg"]
[Sun Apr 26 07:36:54.300891 2026] [:error] [pid 22572:tid 22602] [client 172.213.240.210:11697] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwso.php"] [unique_id "ae1QFtXOViWCFU-pZzB00wAAAVg"]
[Sun Apr 26 07:36:54.796050 2026] [:error] [pid 16574:tid 16616] [client 172.213.240.210:11680] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "ae1QFn5MsX8wRQr99nb-JQAAA0s"]
[Sun Apr 26 07:36:55.276941 2026] [:error] [pid 22572:tid 22585] [client 172.213.240.210:11765] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "ae1QF9XOViWCFU-pZzB01AAAAUc"]
[Sun Apr 26 07:36:55.743124 2026] [:error] [pid 22572:tid 22580] [client 172.213.240.210:11605] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "ae1QF9XOViWCFU-pZzB01gAAAUI"]
[Sun Apr 26 07:36:56.237030 2026] [:error] [pid 22572:tid 22581] [client 172.213.240.210:11729] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gelap.php"] [unique_id "ae1QGNXOViWCFU-pZzB02AAAAUM"]
[Sun Apr 26 07:36:56.719429 2026] [:error] [pid 22573:tid 22618] [client 172.213.240.210:11748] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "ae1QGHB3EmQlD4yKUt8iegAAAYs"]
[Sun Apr 26 07:36:57.193299 2026] [:error] [pid 8390:tid 8458] [client 172.213.240.210:11715] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "ae1QGYGPtFK_i9p5yxQr3AAAAIc"]
[Sun Apr 26 07:36:57.673622 2026] [:error] [pid 22573:tid 22623] [client 172.213.240.210:11754] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "ae1QGXB3EmQlD4yKUt8ifgAAAZA"]
[Sun Apr 26 07:36:58.150033 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11745] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1vx.php"] [unique_id "ae1QGnB3EmQlD4yKUt8igQAAAZc"]
[Sun Apr 26 07:36:58.632030 2026] [:error] [pid 8385:tid 8427] [client 172.213.240.210:11728] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ae1QGjOy7_J84Wx3-oxzTQAAAEM"]
[Sun Apr 26 07:36:59.122501 2026] [:error] [pid 13137:tid 13147] [client 172.213.240.210:11770] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ae1QG90RB4J0o4h5neHl1gAAAgc"]
[Sun Apr 26 07:36:59.604387 2026] [:error] [pid 8385:tid 8438] [client 172.213.240.210:11594] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ae1QGzOy7_J84Wx3-oxzTwAAAE4"]
[Sun Apr 26 07:37:00.101875 2026] [:error] [pid 8383:tid 8401] [client 172.213.240.210:11703] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "ae1QHNFa2S3EsATMdWPPoAAAAAQ"]
[Sun Apr 26 07:37:00.569298 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11704] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1QHHB3EmQlD4yKUt8ihAAAAYw"]
[Sun Apr 26 07:37:01.048118 2026] [:error] [pid 22573:tid 22616] [client 172.213.240.210:11742] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1QHXB3EmQlD4yKUt8ihQAAAYk"]
[Sun Apr 26 07:37:01.534020 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11762] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1QHXB3EmQlD4yKUt8iiAAAAZY"]
[Sun Apr 26 07:37:02.027109 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11719] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1QHnB3EmQlD4yKUt8iigAAAZM"]
[Sun Apr 26 07:37:02.500550 2026] [:error] [pid 22573:tid 22622] [client 172.213.240.210:11683] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae1QHnB3EmQlD4yKUt8ijAAAAY8"]
[Sun Apr 26 07:37:02.983744 2026] [:error] [pid 22572:tid 22602] [client 172.213.240.210:11763] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae1QHtXOViWCFU-pZzB03gAAAVg"]
[Sun Apr 26 07:37:03.452443 2026] [:error] [pid 8491:tid 8511] [client 172.213.240.210:11752] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae1QHyq7I7e6CJooQM2rXQAAAMw"]
[Sun Apr 26 07:37:03.939747 2026] [:error] [pid 8385:tid 8445] [client 172.213.240.210:11681] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ae1QHzOy7_J84Wx3-oxzUAAAAFU"]
[Sun Apr 26 07:37:04.408135 2026] [:error] [pid 22572:tid 22581] [client 172.213.240.210:11709] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oylki.php"] [unique_id "ae1QINXOViWCFU-pZzB04QAAAUM"]
[Sun Apr 26 07:37:04.874154 2026] [:error] [pid 22573:tid 22606] [client 172.213.240.210:11669] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oylki.php"] [unique_id "ae1QIHB3EmQlD4yKUt8ijwAAAYA"]
[Sun Apr 26 07:37:05.385636 2026] [:error] [pid 8390:tid 8463] [client 172.213.240.210:11769] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oylki.php"] [unique_id "ae1QIYGPtFK_i9p5yxQr7AAAAIw"]
[Sun Apr 26 07:37:05.856492 2026] [:error] [pid 8390:tid 8452] [client 172.213.240.210:11591] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/oylki.php"] [unique_id "ae1QIYGPtFK_i9p5yxQr7wAAAIE"]
[Sun Apr 26 07:37:06.339522 2026] [:error] [pid 22573:tid 22628] [client 172.213.240.210:11756] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about25.php"] [unique_id "ae1QInB3EmQlD4yKUt8ikQAAAZU"]
[Sun Apr 26 07:37:06.812746 2026] [:error] [pid 22573:tid 22615] [client 172.213.240.210:11625] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about25.php"] [unique_id "ae1QInB3EmQlD4yKUt8ikwAAAYg"]
[Sun Apr 26 07:37:07.277544 2026] [:error] [pid 13197:tid 13252] [client 172.213.240.210:11730] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about25.php"] [unique_id "ae1QI93kktFKdSxTrBuUHgAAAtQ"]
[Sun Apr 26 07:37:07.759525 2026] [:error] [pid 22573:tid 22610] [client 172.213.240.210:11585] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about25.php"] [unique_id "ae1QI3B3EmQlD4yKUt8imAAAAYQ"]
[Sun Apr 26 07:37:08.240121 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11668] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "ae1QJHB3EmQlD4yKUt8inAAAAZY"]
[Sun Apr 26 07:37:08.751423 2026] [:error] [pid 8390:tid 8462] [client 172.213.240.210:11692] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "ae1QJIGPtFK_i9p5yxQr8QAAAIs"]
[Sun Apr 26 07:37:09.229719 2026] [:error] [pid 8385:tid 8428] [client 172.213.240.210:11611] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "ae1QJTOy7_J84Wx3-oxzUwAAAEQ"]
[Sun Apr 26 07:37:09.702883 2026] [:error] [pid 22573:tid 22618] [client 172.213.240.210:11676] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/path.php"] [unique_id "ae1QJXB3EmQlD4yKUt8ioQAAAYs"]
[Sun Apr 26 07:37:10.211761 2026] [:error] [pid 22573:tid 22613] [client 172.213.240.210:11593] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ae1QJnB3EmQlD4yKUt8ipAAAAYc"]
[Sun Apr 26 07:37:10.683119 2026] [:error] [pid 13137:tid 13165] [client 172.213.240.210:11654] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ae1QJt0RB4J0o4h5neHl2wAAAhg"]
[Sun Apr 26 07:37:11.155734 2026] [:error] [pid 22573:tid 22623] [client 172.213.240.210:11661] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ae1QJ3B3EmQlD4yKUt8ipQAAAZA"]
[Sun Apr 26 07:37:11.640882 2026] [:error] [pid 22573:tid 22617] [client 172.213.240.210:11707] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/r4f_1.php"] [unique_id "ae1QJ3B3EmQlD4yKUt8ipgAAAYo"]
[Sun Apr 26 07:37:12.121158 2026] [:error] [pid 22573:tid 22620] [client 172.213.240.210:11673] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ae1QKHB3EmQlD4yKUt8iqgAAAY0"]
[Sun Apr 26 07:37:12.593631 2026] [:error] [pid 8491:tid 8502] [client 172.213.240.210:11607] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ae1QKCq7I7e6CJooQM2rXwAAAMM"]
[Sun Apr 26 07:37:13.060729 2026] [:error] [pid 13137:tid 13153] [client 172.213.240.210:11682] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ae1QKd0RB4J0o4h5neHl5AAAAgw"]
[Sun Apr 26 07:37:13.544695 2026] [:error] [pid 13137:tid 13154] [client 172.213.240.210:11601] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "ae1QKd0RB4J0o4h5neHl6QAAAg0"]
[Sun Apr 26 07:37:14.077765 2026] [:error] [pid 22573:tid 22608] [client 172.213.240.210:11600] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/33.php"] [unique_id "ae1QKnB3EmQlD4yKUt8irQAAAYI"]
[Sun Apr 26 07:37:14.548324 2026] [:error] [pid 22572:tid 22589] [client 172.213.240.210:11678] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/33.php"] [unique_id "ae1QKtXOViWCFU-pZzB04wAAAUs"]
[Sun Apr 26 07:37:15.052736 2026] [:error] [pid 16515:tid 16525] [client 172.213.240.210:11677] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/33.php"] [unique_id "ae1QK1tDrUmgHSvpuLzLdgAAAkc"]
[Sun Apr 26 07:37:15.524114 2026] [:error] [pid 22573:tid 22616] [client 172.213.240.210:11651] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/33.php"] [unique_id "ae1QK3B3EmQlD4yKUt8isAAAAYk"]
[Sun Apr 26 07:37:16.025811 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11750] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ae1QLHB3EmQlD4yKUt8isgAAAZg"]
[Sun Apr 26 07:37:16.527714 2026] [:error] [pid 8390:tid 8460] [client 172.213.240.210:11584] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ae1QLIGPtFK_i9p5yxQr9wAAAIk"]
[Sun Apr 26 07:37:17.002105 2026] [:error] [pid 22573:tid 22622] [client 172.213.240.210:11628] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ae1QLXB3EmQlD4yKUt8iuAAAAY8"]
[Sun Apr 26 07:37:17.479426 2026] [:error] [pid 13137:tid 13140] [client 172.213.240.210:11588] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "ae1QLd0RB4J0o4h5neHl7gAAAgA"]
[Sun Apr 26 07:37:17.994524 2026] [:error] [pid 22572:tid 22582] [client 172.213.240.210:11609] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "ae1QLdXOViWCFU-pZzB05AAAAUQ"]
[Sun Apr 26 07:37:18.476175 2026] [:error] [pid 22573:tid 22620] [client 172.213.240.210:11650] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "ae1QLnB3EmQlD4yKUt8ivQAAAY0"]
[Sun Apr 26 07:37:18.952655 2026] [:error] [pid 8390:tid 8474] [client 172.213.240.210:11768] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "ae1QLoGPtFK_i9p5yxQr_AAAAJc"]
[Sun Apr 26 07:37:19.437165 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11688] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "ae1QL3B3EmQlD4yKUt8iygAAAZM"]
[Sun Apr 26 07:37:19.952259 2026] [:error] [pid 22572:tid 22599] [client 172.213.240.210:11541] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "ae1QL9XOViWCFU-pZzB06QAAAVU"]
[Sun Apr 26 07:37:20.444356 2026] [:error] [pid 22572:tid 22583] [client 172.213.240.210:11604] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "ae1QMNXOViWCFU-pZzB06gAAAUU"]
[Sun Apr 26 07:37:20.927455 2026] [:error] [pid 22572:tid 22596] [client 172.213.240.210:11666] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "ae1QMNXOViWCFU-pZzB07QAAAVI"]
[Sun Apr 26 07:37:21.392859 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11702] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "ae1QMXB3EmQlD4yKUt8i6gAAAYw"]
[Sun Apr 26 07:37:21.866557 2026] [:error] [pid 16515:tid 16541] [client 172.213.240.210:11767] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ae1QMVtDrUmgHSvpuLzLeQAAAlc"]
[Sun Apr 26 07:37:22.480989 2026] [:error] [pid 22572:tid 22584] [client 172.213.240.210:11643] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ae1QMtXOViWCFU-pZzB08AAAAUY"]
[Sun Apr 26 07:37:22.961584 2026] [:error] [pid 13137:tid 13160] [client 172.213.240.210:11612] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ae1QMt0RB4J0o4h5neHmBgAAAhM"]
[Sun Apr 26 07:37:23.437053 2026] [:error] [pid 22573:tid 22609] [client 172.213.240.210:11597] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zxin.php"] [unique_id "ae1QM3B3EmQlD4yKUt8jAQAAAYM"]
[Sun Apr 26 07:37:23.928329 2026] [:error] [pid 16574:tid 16639] [client 172.213.240.210:11726] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "ae1QM35MsX8wRQr99nb-KgAAA1Y"]
[Sun Apr 26 07:37:24.407767 2026] [:error] [pid 16574:tid 16612] [client 172.213.240.210:11746] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "ae1QNH5MsX8wRQr99nb-KwAAA0g"]
[Sun Apr 26 07:37:24.967785 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:11771] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "ae1QNHB3EmQlD4yKUt8jBAAAAZI"]
[Sun Apr 26 07:37:25.501419 2026] [:error] [pid 16515:tid 16519] [client 172.213.240.210:11637] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dropdown.php"] [unique_id "ae1QNVtDrUmgHSvpuLzLegAAAkE"]
[Sun Apr 26 07:37:25.982105 2026] [:error] [pid 8383:tid 8407] [client 172.213.240.210:11535] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-at.php"] [unique_id "ae1QNdFa2S3EsATMdWPPpQAAAAo"]
[Sun Apr 26 07:37:26.471638 2026] [:error] [pid 8383:tid 8397] [client 172.213.240.210:11674] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-at.php"] [unique_id "ae1QNtFa2S3EsATMdWPPpwAAAAA"]
[Sun Apr 26 07:37:26.937538 2026] [:error] [pid 8385:tid 8446] [client 172.213.240.210:11550] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-at.php"] [unique_id "ae1QNjOy7_J84Wx3-oxzYwAAAFY"]
[Sun Apr 26 07:37:27.422122 2026] [:error] [pid 8390:tid 8461] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Sun Apr 26 07:37:27.658963 2026] [:error] [pid 8390:tid 8464] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/hk.php
[Sun Apr 26 07:37:27.907533 2026] [:error] [pid 8390:tid 8469] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/lco.php
[Sun Apr 26 07:37:28.149141 2026] [:error] [pid 8390:tid 8457] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/fun.php
[Sun Apr 26 07:37:28.386488 2026] [:error] [pid 8390:tid 8459] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sun Apr 26 07:37:28.622474 2026] [:error] [pid 8390:tid 8473] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/huyaa.php
[Sun Apr 26 07:37:28.859046 2026] [:error] [pid 8390:tid 8451] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Sun Apr 26 07:37:29.104723 2026] [:error] [pid 8390:tid 8455] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 26 07:37:29.340969 2026] [:error] [pid 8390:tid 8474] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Sun Apr 26 07:37:29.595803 2026] [:error] [pid 8390:tid 8466] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/X57.php
[Sun Apr 26 07:37:29.831609 2026] [:error] [pid 8390:tid 8467] [client 172.213.240.210:11640] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sun Apr 26 07:37:30.064740 2026] [:error] [pid 8390:tid 8456] [client 172.213.240.210:11640] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ae1QOoGPtFK_i9p5yxQsJAAAAIU"]
[Sun Apr 26 07:37:30.538702 2026] [:error] [pid 16515:tid 16540] [client 172.213.240.210:11521] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ae1QOltDrUmgHSvpuLzLgAAAAlY"]
[Sun Apr 26 07:37:31.007106 2026] [:error] [pid 8383:tid 8400] [client 172.213.240.210:11575] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ae1QO9Fa2S3EsATMdWPPqAAAAAM"]
[Sun Apr 26 07:37:31.519750 2026] [:error] [pid 8491:tid 8519] [client 172.213.240.210:11743] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "ae1QOyq7I7e6CJooQM2ragAAANQ"]
[Sun Apr 26 07:37:32.013105 2026] [:error] [pid 13197:tid 13231] [client 172.213.240.210:11639] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ae1QPN3kktFKdSxTrBuUJAAAAsA"]
[Sun Apr 26 07:37:32.481684 2026] [:error] [pid 8390:tid 8465] [client 172.213.240.210:11622] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ae1QPIGPtFK_i9p5yxQsJQAAAI4"]
[Sun Apr 26 07:37:32.970453 2026] [:error] [pid 22572:tid 22585] [client 172.213.240.210:11672] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ae1QPNXOViWCFU-pZzB1BAAAAUc"]
[Sun Apr 26 07:37:33.437124 2026] [:error] [pid 16515:tid 16531] [client 172.213.240.210:11665] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "ae1QPVtDrUmgHSvpuLzLggAAAk0"]
[Sun Apr 26 07:37:33.939046 2026] [:error] [pid 16515:tid 16542] [client 172.213.240.210:11535] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file4.php"] [unique_id "ae1QPVtDrUmgHSvpuLzLgwAAAlg"]
[Sun Apr 26 07:37:34.430392 2026] [:error] [pid 16574:tid 16619] [client 172.213.240.210:11644] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file4.php"] [unique_id "ae1QPn5MsX8wRQr99nb-LAAAA0w"]
[Sun Apr 26 07:37:34.902807 2026] [:error] [pid 8385:tid 8431] [client 172.213.240.210:11606] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file4.php"] [unique_id "ae1QPjOy7_J84Wx3-oxzZgAAAEc"]
[Sun Apr 26 07:37:35.368437 2026] [:error] [pid 8390:tid 8458] [client 172.213.240.210:11646] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file4.php"] [unique_id "ae1QP4GPtFK_i9p5yxQsJwAAAIc"]
[Sun Apr 26 07:37:35.864076 2026] [:error] [pid 8390:tid 8462] [client 172.213.240.210:11574] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "ae1QP4GPtFK_i9p5yxQsKAAAAIs"]
[Sun Apr 26 07:37:36.383297 2026] [:error] [pid 8383:tid 8404] [client 172.213.240.210:11554] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "ae1QQNFa2S3EsATMdWPPrAAAAAc"]
[Sun Apr 26 07:37:36.857689 2026] [:error] [pid 8390:tid 8471] [client 172.213.240.210:11670] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "ae1QQIGPtFK_i9p5yxQsKQAAAJQ"]
[Sun Apr 26 07:37:37.329227 2026] [:error] [pid 13197:tid 13254] [client 172.213.240.210:11469] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "ae1QQd3kktFKdSxTrBuUJgAAAtY"]
[Sun Apr 26 07:37:37.820395 2026] [:error] [pid 8385:tid 8430] [client 172.213.240.210:11598] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "ae1QQTOy7_J84Wx3-oxzaAAAAEY"]
[Sun Apr 26 07:37:38.375864 2026] [:error] [pid 8390:tid 8463] [client 172.213.240.210:11529] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "ae1QQoGPtFK_i9p5yxQsLAAAAIw"]
[Sun Apr 26 07:37:38.867173 2026] [:error] [pid 8390:tid 8453] [client 172.213.240.210:11679] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "ae1QQoGPtFK_i9p5yxQsLgAAAII"]
[Sun Apr 26 07:37:39.335739 2026] [:error] [pid 8383:tid 8402] [client 172.213.240.210:11648] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/usep.php"] [unique_id "ae1QQ9Fa2S3EsATMdWPPsAAAAAU"]
[Sun Apr 26 07:37:39.860726 2026] [:error] [pid 8383:tid 8401] [client 172.213.240.210:11670] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ae1QQ9Fa2S3EsATMdWPPsgAAAAQ"]
[Sun Apr 26 07:37:40.327831 2026] [:error] [pid 8385:tid 8442] [client 172.213.240.210:11775] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ae1QRDOy7_J84Wx3-oxzaQAAAFI"]
[Sun Apr 26 07:37:40.818862 2026] [:error] [pid 8383:tid 8413] [client 172.213.240.210:11690] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ae1QRNFa2S3EsATMdWPPtAAAABA"]
[Sun Apr 26 07:37:41.284723 2026] [:error] [pid 13137:tid 13158] [client 172.213.240.210:11764] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ae1QRd0RB4J0o4h5neHmFwAAAhE"]
[Sun Apr 26 07:37:41.791013 2026] [:error] [pid 13137:tid 13156] [client 172.213.240.210:11699] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ae1QRd0RB4J0o4h5neHmGgAAAg8"]
[Sun Apr 26 07:37:42.274132 2026] [:error] [pid 8491:tid 8516] [client 172.213.240.210:11632] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ae1QRiq7I7e6CJooQM2rbgAAANE"]
[Sun Apr 26 07:37:42.788315 2026] [:error] [pid 22573:tid 22620] [client 172.213.240.210:11596] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ae1QRnB3EmQlD4yKUt8jIQAAAY0"]
[Sun Apr 26 07:37:43.276872 2026] [:error] [pid 8390:tid 8460] [client 172.213.240.210:11616] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v4.php"] [unique_id "ae1QR4GPtFK_i9p5yxQsLwAAAIk"]
[Sun Apr 26 07:37:43.762999 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:11561] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp4.php"] [unique_id "ae1QR3B3EmQlD4yKUt8jJQAAAZI"]
[Sun Apr 26 07:37:44.308469 2026] [:error] [pid 8491:tid 8509] [client 172.213.240.210:11610] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp4.php"] [unique_id "ae1QSCq7I7e6CJooQM2rcAAAAMo"]
[Sun Apr 26 07:37:44.779923 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11691] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp4.php"] [unique_id "ae1QSHB3EmQlD4yKUt8jKgAAAZc"]
[Sun Apr 26 07:37:45.270553 2026] [:error] [pid 22573:tid 22615] [client 172.213.240.210:11465] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp4.php"] [unique_id "ae1QSXB3EmQlD4yKUt8jLAAAAYg"]
[Sun Apr 26 07:37:45.763089 2026] [:error] [pid 22573:tid 22612] [client 172.213.240.210:11552] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1QSXB3EmQlD4yKUt8jMAAAAYY"]
[Sun Apr 26 07:37:46.276527 2026] [:error] [pid 13197:tid 13237] [client 172.213.240.210:11710] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1QSt3kktFKdSxTrBuUKgAAAsY"]
[Sun Apr 26 07:37:46.763865 2026] [:error] [pid 13137:tid 13164] [client 172.213.240.210:11603] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1QSt0RB4J0o4h5neHmHAAAAhc"]
[Sun Apr 26 07:37:47.359296 2026] [:error] [pid 22573:tid 22622] [client 172.213.240.210:11656] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1QS3B3EmQlD4yKUt8jNwAAAY8"]
[Sun Apr 26 07:37:47.839585 2026] [:error] [pid 22573:tid 22623] [client 172.213.240.210:11618] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "ae1QS3B3EmQlD4yKUt8jOQAAAZA"]
[Sun Apr 26 07:37:48.364078 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11532] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "ae1QTNXOViWCFU-pZzB1DwAAAUk"]
[Sun Apr 26 07:37:48.834330 2026] [:error] [pid 16574:tid 16633] [client 172.213.240.210:11642] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "ae1QTH5MsX8wRQr99nb-MAAAA1M"]
[Sun Apr 26 07:37:49.312565 2026] [:error] [pid 16515:tid 16536] [client 172.213.240.210:11617] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mamzi.php"] [unique_id "ae1QTVtDrUmgHSvpuLzLiAAAAlI"]
[Sun Apr 26 07:37:50.029094 2026] [:error] [pid 8390:tid 8455] [client 172.213.240.210:11520] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "ae1QToGPtFK_i9p5yxQsMgAAAIQ"]
[Sun Apr 26 07:37:50.536547 2026] [:error] [pid 8390:tid 8456] [client 172.213.240.210:11531] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "ae1QToGPtFK_i9p5yxQsNAAAAIU"]
[Sun Apr 26 07:37:51.066929 2026] [:error] [pid 8390:tid 8468] [client 172.213.240.210:11586] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "ae1QT4GPtFK_i9p5yxQsNwAAAJE"]
[Sun Apr 26 07:37:51.573426 2026] [:error] [pid 22573:tid 22611] [client 172.213.240.210:11590] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpls.php"] [unique_id "ae1QT3B3EmQlD4yKUt8jPAAAAYU"]
[Sun Apr 26 07:37:52.061708 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11721] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "ae1QUHB3EmQlD4yKUt8jPgAAAYw"]
[Sun Apr 26 07:37:52.534145 2026] [:error] [pid 22573:tid 22608] [client 172.213.240.210:11523] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "ae1QUHB3EmQlD4yKUt8jQQAAAYI"]
[Sun Apr 26 07:37:53.029320 2026] [:error] [pid 22573:tid 22609] [client 172.213.240.210:11698] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "ae1QUXB3EmQlD4yKUt8jQgAAAYM"]
[Sun Apr 26 07:37:53.578568 2026] [:error] [pid 22573:tid 22622] [client 172.213.240.210:11543] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xrp.php"] [unique_id "ae1QUXB3EmQlD4yKUt8jRQAAAY8"]
[Sun Apr 26 07:37:54.108550 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:11630] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ae1QUnB3EmQlD4yKUt8jRgAAAZI"]
[Sun Apr 26 07:37:54.607468 2026] [:error] [pid 22573:tid 22618] [client 172.213.240.210:11547] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ae1QUnB3EmQlD4yKUt8jSQAAAYs"]
[Sun Apr 26 07:37:55.110589 2026] [:error] [pid 22572:tid 22588] [client 172.213.240.210:11533] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ae1QU9XOViWCFU-pZzB1EwAAAUo"]
[Sun Apr 26 07:37:55.615039 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11526] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v2.php"] [unique_id "ae1QU3B3EmQlD4yKUt8jTQAAAZg"]
[Sun Apr 26 07:37:56.112616 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11653] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-acc.php"] [unique_id "ae1QVHB3EmQlD4yKUt8jUAAAAYw"]
[Sun Apr 26 07:37:56.733562 2026] [:error] [pid 22573:tid 22608] [client 172.213.240.210:11638] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-acc.php"] [unique_id "ae1QVHB3EmQlD4yKUt8jUwAAAYI"]
[Sun Apr 26 07:37:57.265180 2026] [:error] [pid 22573:tid 22621] [client 172.213.240.210:11700] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-acc.php"] [unique_id "ae1QVXB3EmQlD4yKUt8jVgAAAY4"]
[Sun Apr 26 07:37:57.830005 2026] [:error] [pid 22573:tid 22613] [client 172.213.240.210:11528] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-acc.php"] [unique_id "ae1QVXB3EmQlD4yKUt8jWgAAAYc"]
[Sun Apr 26 07:37:58.300153 2026] [:error] [pid 8491:tid 8507] [client 172.213.240.210:11537] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ae1QViq7I7e6CJooQM2rcwAAAMg"]
[Sun Apr 26 07:37:58.763398 2026] [:error] [pid 16515:tid 16539] [client 172.213.240.210:11536] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ae1QVltDrUmgHSvpuLzLiwAAAlU"]
[Sun Apr 26 07:37:59.250016 2026] [:error] [pid 16515:tid 16528] [client 172.213.240.210:11757] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ae1QV1tDrUmgHSvpuLzLjAAAAko"]
[Sun Apr 26 07:37:59.718043 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11626] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ae1QV3B3EmQlD4yKUt8jXwAAAZg"]
[Sun Apr 26 07:38:00.188924 2026] [:error] [pid 22572:tid 22589] [client 172.213.240.210:11624] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "ae1QWNXOViWCFU-pZzB1FgAAAUs"]
[Sun Apr 26 07:38:00.674121 2026] [:error] [pid 16515:tid 16520] [client 172.213.240.210:11722] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "ae1QWFtDrUmgHSvpuLzLjQAAAkI"]
[Sun Apr 26 07:38:01.192576 2026] [:error] [pid 13197:tid 13249] [client 172.213.240.210:11579] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "ae1QWd3kktFKdSxTrBuULgAAAtE"]
[Sun Apr 26 07:38:01.673956 2026] [:error] [pid 22573:tid 22624] [client 172.213.240.210:11569] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/031.php"] [unique_id "ae1QWXB3EmQlD4yKUt8jYgAAAZE"]
[Sun Apr 26 07:38:02.169692 2026] [:error] [pid 16574:tid 16611] [client 172.213.240.210:11564] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae1QWn5MsX8wRQr99nb-MwAAA0c"]
[Sun Apr 26 07:38:02.647759 2026] [:error] [pid 22573:tid 22609] [client 172.213.240.210:11459] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae1QWnB3EmQlD4yKUt8jZgAAAYM"]
[Sun Apr 26 07:38:03.279810 2026] [:error] [pid 22572:tid 22597] [client 172.213.240.210:11635] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae1QW9XOViWCFU-pZzB1GAAAAVM"]
[Sun Apr 26 07:38:03.792523 2026] [:error] [pid 16515:tid 16519] [client 172.213.240.210:11711] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae1QW1tDrUmgHSvpuLzLkQAAAkE"]
[Sun Apr 26 07:38:04.283556 2026] [:error] [pid 8383:tid 8417] [client 172.213.240.210:11462] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "ae1QXNFa2S3EsATMdWPPtgAAABQ"]
[Sun Apr 26 07:38:04.763113 2026] [:error] [pid 16574:tid 16606] [client 172.213.240.210:11493] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "ae1QXH5MsX8wRQr99nb-NQAAA0I"]
[Sun Apr 26 07:38:05.230487 2026] [:error] [pid 22572:tid 22586] [client 172.213.240.210:11510] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "ae1QXdXOViWCFU-pZzB1GQAAAUg"]
[Sun Apr 26 07:38:05.739180 2026] [:error] [pid 16574:tid 16613] [client 172.213.240.210:11495] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xx.php"] [unique_id "ae1QXX5MsX8wRQr99nb-NgAAA0k"]
[Sun Apr 26 07:38:06.225062 2026] [:error] [pid 22572:tid 22592] [client 172.213.240.210:11470] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "ae1QXtXOViWCFU-pZzB1GwAAAU4"]
[Sun Apr 26 07:38:06.784447 2026] [:error] [pid 22572:tid 22591] [client 172.213.240.210:11472] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "ae1QXtXOViWCFU-pZzB1HgAAAU0"]
[Sun Apr 26 07:38:07.253877 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11555] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "ae1QX9XOViWCFU-pZzB1IgAAAVQ"]
[Sun Apr 26 07:38:07.740308 2026] [:error] [pid 8385:tid 8432] [client 172.213.240.210:11456] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/testo.php"] [unique_id "ae1QXzOy7_J84Wx3-oxzbgAAAEg"]
[Sun Apr 26 07:38:08.208060 2026] [:error] [pid 22572:tid 22581] [client 172.213.240.210:11488] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/row.php"] [unique_id "ae1QYNXOViWCFU-pZzB1JgAAAUM"]
[Sun Apr 26 07:38:08.693318 2026] [:error] [pid 8385:tid 8446] [client 172.213.240.210:11589] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/row.php"] [unique_id "ae1QYDOy7_J84Wx3-oxzcQAAAFY"]
[Sun Apr 26 07:38:09.184684 2026] [:error] [pid 13197:tid 13233] [client 172.213.240.210:11633] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/row.php"] [unique_id "ae1QYd3kktFKdSxTrBuUMwAAAsI"]
[Sun Apr 26 07:38:09.650191 2026] [:error] [pid 22573:tid 22606] [client 172.213.240.210:11631] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/row.php"] [unique_id "ae1QYXB3EmQlD4yKUt8jaQAAAYA"]
[Sun Apr 26 07:38:10.117703 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11525] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "ae1QYnB3EmQlD4yKUt8jbQAAAZg"]
[Sun Apr 26 07:38:10.601764 2026] [:error] [pid 8390:tid 8475] [client 172.213.240.210:11695] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "ae1QYoGPtFK_i9p5yxQsQQAAAJg"]
[Sun Apr 26 07:38:11.112425 2026] [:error] [pid 8385:tid 8434] [client 172.213.240.210:11549] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "ae1QYzOy7_J84Wx3-oxzcwAAAEo"]
[Sun Apr 26 07:38:11.605770 2026] [:error] [pid 8385:tid 8426] [client 172.213.240.210:11534] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/555.php"] [unique_id "ae1QYzOy7_J84Wx3-oxzdQAAAEI"]
[Sun Apr 26 07:38:12.116097 2026] [:error] [pid 13197:tid 13254] [client 172.213.240.210:11496] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ae1QZN3kktFKdSxTrBuUNAAAAtY"]
[Sun Apr 26 07:38:12.592544 2026] [:error] [pid 13137:tid 13141] [client 172.213.240.210:11579] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ae1QZN0RB4J0o4h5neHmJQAAAgE"]
[Sun Apr 26 07:38:13.086369 2026] [:error] [pid 13137:tid 13144] [client 172.213.240.210:11479] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ae1QZd0RB4J0o4h5neHmKQAAAgQ"]
[Sun Apr 26 07:38:13.565725 2026] [:error] [pid 8383:tid 8407] [client 172.213.240.210:11540] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-conflg.php"] [unique_id "ae1QZdFa2S3EsATMdWPPuAAAAAo"]
[Sun Apr 26 07:38:14.034594 2026] [:error] [pid 8385:tid 8429] [client 172.213.240.210:11559] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "ae1QZjOy7_J84Wx3-oxzegAAAEU"]
[Sun Apr 26 07:38:14.515971 2026] [:error] [pid 16574:tid 16619] [client 172.213.240.210:11706] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "ae1QZn5MsX8wRQr99nb-PAAAA0w"]
[Sun Apr 26 07:38:15.003867 2026] [:error] [pid 8385:tid 8444] [client 172.213.240.210:11753] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "ae1QZzOy7_J84Wx3-oxzewAAAFQ"]
[Sun Apr 26 07:38:15.479799 2026] [:error] [pid 8383:tid 8400] [client 172.213.240.210:11498] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xqq.php"] [unique_id "ae1QZ9Fa2S3EsATMdWPPugAAAAM"]
[Sun Apr 26 07:38:15.956718 2026] [:error] [pid 22572:tid 22582] [client 172.213.240.210:11716] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "ae1QZ9XOViWCFU-pZzB1NwAAAUQ"]
[Sun Apr 26 07:38:16.445341 2026] [:error] [pid 16574:tid 16623] [client 172.213.240.210:11501] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "ae1QaH5MsX8wRQr99nb-PgAAA04"]
[Sun Apr 26 07:38:16.938667 2026] [:error] [pid 16574:tid 16610] [client 172.213.240.210:11538] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "ae1QaH5MsX8wRQr99nb-QAAAA0Y"]
[Sun Apr 26 07:38:17.442552 2026] [:error] [pid 16574:tid 16607] [client 172.213.240.210:11494] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jmfi2.php"] [unique_id "ae1QaX5MsX8wRQr99nb-QgAAA0M"]
[Sun Apr 26 07:38:17.926689 2026] [:error] [pid 22572:tid 22595] [client 172.213.240.210:11468] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae1QadXOViWCFU-pZzB1OAAAAVE"]
[Sun Apr 26 07:38:18.458199 2026] [:error] [pid 13197:tid 13241] [client 172.213.240.210:11613] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae1Qat3kktFKdSxTrBuUPwAAAso"]
[Sun Apr 26 07:38:18.934135 2026] [:error] [pid 22572:tid 22586] [client 172.213.240.210:11576] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae1QatXOViWCFU-pZzB1PAAAAUg"]
[Sun Apr 26 07:38:19.406681 2026] [:error] [pid 13197:tid 13246] [client 172.213.240.210:11556] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-Blogs.php"] [unique_id "ae1Qa93kktFKdSxTrBuUQwAAAs4"]
[Sun Apr 26 07:38:19.907337 2026] [:error] [pid 13197:tid 13239] [client 172.213.240.210:11542] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "ae1Qa93kktFKdSxTrBuURwAAAsg"]
[Sun Apr 26 07:38:20.375187 2026] [:error] [pid 13197:tid 13244] [client 172.213.240.210:11571] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "ae1QbN3kktFKdSxTrBuUSAAAAsw"]
[Sun Apr 26 07:38:20.903188 2026] [:error] [pid 16574:tid 16633] [client 172.213.240.210:11570] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "ae1QbH5MsX8wRQr99nb-RAAAA1M"]
[Sun Apr 26 07:38:21.367560 2026] [:error] [pid 8491:tid 8500] [client 172.213.240.210:11686] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "ae1QbSq7I7e6CJooQM2reQAAAME"]
[Sun Apr 26 07:38:21.844621 2026] [:error] [pid 16515:tid 16540] [client 172.213.240.210:11693] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ae1QbVtDrUmgHSvpuLzLkwAAAlY"]
[Sun Apr 26 07:38:22.321645 2026] [:error] [pid 13137:tid 13157] [client 172.213.240.210:11485] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ae1Qbt0RB4J0o4h5neHmLQAAAhA"]
[Sun Apr 26 07:38:22.828915 2026] [:error] [pid 22572:tid 22590] [client 172.213.240.210:11614] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ae1QbtXOViWCFU-pZzB1QgAAAUw"]
[Sun Apr 26 07:38:23.310228 2026] [:error] [pid 22572:tid 22588] [client 172.213.240.210:11708] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mds.php"] [unique_id "ae1Qb9XOViWCFU-pZzB1RQAAAUo"]
[Sun Apr 26 07:38:23.819100 2026] [:error] [pid 22572:tid 22602] [client 172.213.240.210:11482] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hey.php"] [unique_id "ae1Qb9XOViWCFU-pZzB1SQAAAVg"]
[Sun Apr 26 07:38:24.374863 2026] [:error] [pid 22572:tid 22591] [client 172.213.240.210:11481] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hey.php"] [unique_id "ae1QcNXOViWCFU-pZzB1UAAAAU0"]
[Sun Apr 26 07:38:24.853777 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11566] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hey.php"] [unique_id "ae1QcNXOViWCFU-pZzB1VAAAAVQ"]
[Sun Apr 26 07:38:25.336580 2026] [:error] [pid 22572:tid 22588] [client 172.213.240.210:11620] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hey.php"] [unique_id "ae1QcdXOViWCFU-pZzB1WQAAAUo"]
[Sun Apr 26 07:38:25.844912 2026] [:error] [pid 8491:tid 8499] [client 172.213.240.210:11568] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "ae1QcSq7I7e6CJooQM2rfgAAAMA"]
[Sun Apr 26 07:38:26.324164 2026] [:error] [pid 8491:tid 8516] [client 172.213.240.210:11466] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "ae1Qciq7I7e6CJooQM2rfwAAANE"]
[Sun Apr 26 07:38:26.859572 2026] [:error] [pid 8491:tid 8509] [client 172.213.240.210:11582] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "ae1Qciq7I7e6CJooQM2rgQAAAMo"]
[Sun Apr 26 07:38:27.338898 2026] [:error] [pid 8491:tid 8504] [client 172.213.240.210:11567] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "ae1Qcyq7I7e6CJooQM2rggAAAMU"]
[Sun Apr 26 07:38:27.817209 2026] [:error] [pid 8491:tid 8507] [client 172.213.240.210:11544] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "ae1Qcyq7I7e6CJooQM2rgwAAAMg"]
[Sun Apr 26 07:38:28.306863 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11497] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "ae1QdHB3EmQlD4yKUt8jegAAAZY"]
[Sun Apr 26 07:38:28.799401 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11476] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "ae1QdNXOViWCFU-pZzB1YwAAAUk"]
[Sun Apr 26 07:38:29.314169 2026] [:error] [pid 22572:tid 22582] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sun Apr 26 07:38:29.555338 2026] [:error] [pid 22572:tid 22595] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/bdroot.php
[Sun Apr 26 07:38:29.820895 2026] [:error] [pid 22572:tid 22594] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/class-config.php
[Sun Apr 26 07:38:30.058519 2026] [:error] [pid 22572:tid 22599] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun Apr 26 07:38:30.304267 2026] [:error] [pid 22572:tid 22593] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Sun Apr 26 07:38:30.552940 2026] [:error] [pid 22572:tid 22592] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sun Apr 26 07:38:30.794776 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Sun Apr 26 07:38:32.461636 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sun Apr 26 07:38:32.718552 2026] [:error] [pid 22572:tid 22594] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun Apr 26 07:38:32.988185 2026] [:error] [pid 22572:tid 22578] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/hans.php
[Sun Apr 26 07:38:33.226145 2026] [:error] [pid 22572:tid 22580] [client 172.213.240.210:11500] File does not exist: /usr/local/apache/htdocs/suspended-page/lgr.php
[Sun Apr 26 07:38:33.468081 2026] [:error] [pid 22572:tid 22597] [client 172.213.240.210:11500] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ae1QedXOViWCFU-pZzB1fwAAAVM"]
[Sun Apr 26 07:38:33.965103 2026] [:error] [pid 8390:tid 8466] [client 172.213.240.210:11480] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ae1QeYGPtFK_i9p5yxQsSwAAAI8"]
[Sun Apr 26 07:38:34.463685 2026] [:error] [pid 13137:tid 13147] [client 172.213.240.210:11675] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ae1Qet0RB4J0o4h5neHmRgAAAgc"]
[Sun Apr 26 07:38:34.937991 2026] [:error] [pid 22572:tid 22579] [client 172.213.240.210:11563] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an7.php"] [unique_id "ae1QetXOViWCFU-pZzB1hAAAAUE"]
[Sun Apr 26 07:38:35.503714 2026] [:error] [pid 22572:tid 22593] [client 172.213.240.210:11573] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "ae1Qe9XOViWCFU-pZzB1igAAAU8"]
[Sun Apr 26 07:38:35.983716 2026] [:error] [pid 13197:tid 13256] [client 172.213.240.210:11483] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "ae1Qe93kktFKdSxTrBuUVwAAAtg"]
[Sun Apr 26 07:38:36.470795 2026] [:error] [pid 13197:tid 13245] [client 172.213.240.210:11595] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "ae1QfN3kktFKdSxTrBuUWQAAAs0"]
[Sun Apr 26 07:38:36.940864 2026] [:error] [pid 16574:tid 16625] [client 172.213.240.210:11408] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file1.php"] [unique_id "ae1QfH5MsX8wRQr99nb-TQAAA08"]
[Sun Apr 26 07:38:37.432456 2026] [:error] [pid 13197:tid 13237] [client 172.213.240.210:11737] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "ae1Qfd3kktFKdSxTrBuUYgAAAsY"]
[Sun Apr 26 07:38:37.908650 2026] [:error] [pid 22572:tid 22592] [client 172.213.240.210:11629] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "ae1QfdXOViWCFU-pZzB1jwAAAU4"]
[Sun Apr 26 07:38:38.377738 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11463] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "ae1QftXOViWCFU-pZzB1kQAAAVQ"]
[Sun Apr 26 07:38:38.874757 2026] [:error] [pid 8385:tid 8436] [client 172.213.240.210:11634] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/luxe.php"] [unique_id "ae1QfjOy7_J84Wx3-oxzfgAAAEw"]
[Sun Apr 26 07:38:39.358137 2026] [:error] [pid 16574:tid 16605] [client 172.213.240.210:11558] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_ok.php"] [unique_id "ae1Qf35MsX8wRQr99nb-TgAAA0E"]
[Sun Apr 26 07:38:39.828424 2026] [:error] [pid 22573:tid 22609] [client 172.213.240.210:11486] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_ok.php"] [unique_id "ae1Qf3B3EmQlD4yKUt8jigAAAYM"]
[Sun Apr 26 07:38:40.323597 2026] [:error] [pid 22573:tid 22620] [client 172.213.240.210:11608] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_ok.php"] [unique_id "ae1QgHB3EmQlD4yKUt8jjwAAAY0"]
[Sun Apr 26 07:38:40.802148 2026] [:error] [pid 8390:tid 8451] [client 172.213.240.210:11473] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp_ok.php"] [unique_id "ae1QgIGPtFK_i9p5yxQsTwAAAIA"]
[Sun Apr 26 07:38:41.283132 2026] [:error] [pid 13197:tid 13231] [client 172.213.240.210:11577] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae1Qgd3kktFKdSxTrBuUggAAAsA"]
[Sun Apr 26 07:38:41.762354 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11557] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae1QgdXOViWCFU-pZzB1lwAAAUk"]
[Sun Apr 26 07:38:42.246175 2026] [:error] [pid 13137:tid 13153] [client 172.213.240.210:11411] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae1Qgt0RB4J0o4h5neHmSQAAAgw"]
[Sun Apr 26 07:38:42.738683 2026] [:error] [pid 8390:tid 8456] [client 172.213.240.210:11572] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ae1QgoGPtFK_i9p5yxQsUgAAAIU"]
[Sun Apr 26 07:38:43.225968 2026] [:error] [pid 8390:tid 8472] [client 172.213.240.210:11647] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ae1Qg4GPtFK_i9p5yxQsVAAAAJU"]
[Sun Apr 26 07:38:43.700064 2026] [:error] [pid 13137:tid 13158] [client 172.213.240.210:11492] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ae1Qg90RB4J0o4h5neHmTQAAAhE"]
[Sun Apr 26 07:38:44.180305 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11516] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ae1QhNXOViWCFU-pZzB1mQAAAVQ"]
[Sun Apr 26 07:38:44.666521 2026] [:error] [pid 8390:tid 8473] [client 172.213.240.210:11522] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inde.php"] [unique_id "ae1QhIGPtFK_i9p5yxQsYgAAAJY"]
[Sun Apr 26 07:38:45.140279 2026] [:error] [pid 8390:tid 8474] [client 172.213.240.210:11615] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "ae1QhYGPtFK_i9p5yxQsagAAAJc"]
[Sun Apr 26 07:38:45.618849 2026] [:error] [pid 22573:tid 22624] [client 172.213.240.210:11433] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "ae1QhXB3EmQlD4yKUt8jnAAAAZE"]
[Sun Apr 26 07:38:46.090521 2026] [:error] [pid 22572:tid 22583] [client 172.213.240.210:11524] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "ae1QhtXOViWCFU-pZzB1mwAAAUU"]
[Sun Apr 26 07:38:46.592774 2026] [:error] [pid 8390:tid 8475] [client 172.213.240.210:11417] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xtt.php"] [unique_id "ae1QhoGPtFK_i9p5yxQsgQAAAJg"]
[Sun Apr 26 07:38:47.101542 2026] [:error] [pid 22573:tid 22621] [client 172.213.240.210:11512] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae1Qh3B3EmQlD4yKUt8jngAAAY4"]
[Sun Apr 26 07:38:47.584502 2026] [:error] [pid 22573:tid 22617] [client 172.213.240.210:11551] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae1Qh3B3EmQlD4yKUt8joAAAAYo"]
[Sun Apr 26 07:38:48.063905 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11507] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae1QiHB3EmQlD4yKUt8joQAAAYw"]
[Sun Apr 26 07:38:48.529590 2026] [:error] [pid 8385:tid 8437] [client 172.213.240.210:11565] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae1QiDOy7_J84Wx3-oxzfwAAAE0"]
[Sun Apr 26 07:38:49.038414 2026] [:error] [pid 22573:tid 22616] [client 172.213.240.210:11621] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "ae1QiXB3EmQlD4yKUt8jpQAAAYk"]
[Sun Apr 26 07:38:49.523178 2026] [:error] [pid 13197:tid 13248] [client 172.213.240.210:11457] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "ae1Qid3kktFKdSxTrBuUhgAAAtA"]
[Sun Apr 26 07:38:49.995855 2026] [:error] [pid 22573:tid 22612] [client 172.213.240.210:11509] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "ae1QiXB3EmQlD4yKUt8jqAAAAYY"]
[Sun Apr 26 07:38:50.464743 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11474] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "ae1QinB3EmQlD4yKUt8jrAAAAZc"]
[Sun Apr 26 07:38:50.966000 2026] [:error] [pid 8390:tid 8453] [client 172.213.240.210:11560] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "ae1QioGPtFK_i9p5yxQsiAAAAII"]
[Sun Apr 26 07:38:51.436454 2026] [:error] [pid 16574:tid 16619] [client 172.213.240.210:11530] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "ae1Qi35MsX8wRQr99nb-XwAAA0w"]
[Sun Apr 26 07:38:51.914482 2026] [:error] [pid 22572:tid 22599] [client 172.213.240.210:11694] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "ae1Qi9XOViWCFU-pZzB1ogAAAVU"]
[Sun Apr 26 07:38:52.393611 2026] [:error] [pid 8390:tid 8472] [client 172.213.240.210:11545] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zicgg.php"] [unique_id "ae1QjIGPtFK_i9p5yxQsigAAAJU"]
[Sun Apr 26 07:38:52.862853 2026] [:error] [pid 8390:tid 8470] [client 172.213.240.210:11394] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "ae1QjIGPtFK_i9p5yxQsjAAAAJM"]
[Sun Apr 26 07:38:53.333503 2026] [:error] [pid 13137:tid 13164] [client 172.213.240.210:11460] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "ae1Qjd0RB4J0o4h5neHmfAAAAhc"]
[Sun Apr 26 07:38:53.800003 2026] [:error] [pid 22572:tid 22586] [client 172.213.240.210:11548] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "ae1QjdXOViWCFU-pZzB1qQAAAUg"]
[Sun Apr 26 07:38:54.287113 2026] [:error] [pid 22572:tid 22579] [client 172.213.240.210:11599] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pouhg.php"] [unique_id "ae1QjtXOViWCFU-pZzB1rwAAAUE"]
[Sun Apr 26 07:38:54.825098 2026] [:error] [pid 16515:tid 16534] [client 172.213.240.210:11562] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "ae1QjltDrUmgHSvpuLzLqwAAAlA"]
[Sun Apr 26 07:38:55.318537 2026] [:error] [pid 22572:tid 22578] [client 172.213.240.210:11438] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "ae1Qj9XOViWCFU-pZzB1swAAAUA"]
[Sun Apr 26 07:38:55.797708 2026] [:error] [pid 22572:tid 22586] [client 172.213.240.210:11508] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "ae1Qj9XOViWCFU-pZzB1tAAAAUg"]
[Sun Apr 26 07:38:56.284868 2026] [:error] [pid 8491:tid 8504] [client 172.213.240.210:11406] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file88.php"] [unique_id "ae1QkCq7I7e6CJooQM2rqAAAAMU"]
[Sun Apr 26 07:38:56.773348 2026] [:error] [pid 8383:tid 8411] [client 172.213.240.210:11580] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenon1337.php"] [unique_id "ae1QkNFa2S3EsATMdWPPygAAAA4"]
[Sun Apr 26 07:38:57.432384 2026] [:error] [pid 8491:tid 8502] [client 172.213.240.210:11449] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenon1337.php"] [unique_id "ae1QkSq7I7e6CJooQM2rqgAAAMM"]
[Sun Apr 26 07:38:57.959351 2026] [:error] [pid 13137:tid 13163] [client 172.213.240.210:11400] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenon1337.php"] [unique_id "ae1Qkd0RB4J0o4h5neHmfwAAAhY"]
[Sun Apr 26 07:38:58.502832 2026] [:error] [pid 8390:tid 8473] [client 172.213.240.210:11641] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xenon1337.php"] [unique_id "ae1QkoGPtFK_i9p5yxQslAAAAJY"]
[Sun Apr 26 07:38:58.985096 2026] [:error] [pid 13137:tid 13157] [client 172.213.240.210:11439] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "ae1Qkt0RB4J0o4h5neHmgAAAAhA"]
[Sun Apr 26 07:38:59.460594 2026] [:error] [pid 13137:tid 13147] [client 172.213.240.210:11717] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "ae1Qk90RB4J0o4h5neHmgQAAAgc"]
[Sun Apr 26 07:38:59.956730 2026] [:error] [pid 13137:tid 13160] [client 172.213.240.210:11477] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "ae1Qk90RB4J0o4h5neHmgwAAAhM"]
[Sun Apr 26 07:39:00.461265 2026] [:error] [pid 8491:tid 8510] [client 172.213.240.210:11546] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "ae1QlCq7I7e6CJooQM2rrgAAAMs"]
[Sun Apr 26 07:39:00.929722 2026] [:error] [pid 13137:tid 13152] [client 172.213.240.210:11393] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ae1QlN0RB4J0o4h5neHmhAAAAgs"]
[Sun Apr 26 07:39:01.418636 2026] [:error] [pid 16515:tid 16542] [client 172.213.240.210:11332] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ae1QlVtDrUmgHSvpuLzLrgAAAlg"]
[Sun Apr 26 07:39:01.896684 2026] [:error] [pid 16515:tid 16521] [client 172.213.240.210:11483] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ae1QlVtDrUmgHSvpuLzLrwAAAkM"]
[Sun Apr 26 07:39:02.382670 2026] [:error] [pid 16515:tid 16532] [client 172.213.240.210:11645] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ae1QlltDrUmgHSvpuLzLsAAAAk4"]
[Sun Apr 26 07:39:02.880584 2026] [:error] [pid 13137:tid 13156] [client 172.213.240.210:11397] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1Qlt0RB4J0o4h5neHmigAAAg8"]
[Sun Apr 26 07:39:03.393672 2026] [:error] [pid 8491:tid 8515] [client 172.213.240.210:11420] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1Qlyq7I7e6CJooQM2rsQAAANA"]
[Sun Apr 26 07:39:03.859125 2026] [:error] [pid 16515:tid 16536] [client 172.213.240.210:11340] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1Ql1tDrUmgHSvpuLzLtAAAAlI"]
[Sun Apr 26 07:39:04.325928 2026] [:error] [pid 8385:tid 8429] [client 172.213.240.210:11505] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "ae1QmDOy7_J84Wx3-oxzhgAAAEU"]
[Sun Apr 26 07:39:04.793497 2026] [:error] [pid 8385:tid 8443] [client 172.213.240.210:11329] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "ae1QmDOy7_J84Wx3-oxzhwAAAFM"]
[Sun Apr 26 07:39:05.287592 2026] [:error] [pid 22573:tid 22618] [client 172.213.240.210:11467] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "ae1QmXB3EmQlD4yKUt8j4QAAAYs"]
[Sun Apr 26 07:39:05.774086 2026] [:error] [pid 13137:tid 13142] [client 172.213.240.210:11458] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "ae1Qmd0RB4J0o4h5neHmjgAAAgI"]
[Sun Apr 26 07:39:06.311337 2026] [:error] [pid 22573:tid 22606] [client 172.213.240.210:11623] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cache.php"] [unique_id "ae1QmnB3EmQlD4yKUt8j-gAAAYA"]
[Sun Apr 26 07:39:06.782587 2026] [:error] [pid 8385:tid 8444] [client 172.213.240.210:11403] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ae1QmjOy7_J84Wx3-oxziAAAAFQ"]
[Sun Apr 26 07:39:07.250481 2026] [:error] [pid 8383:tid 8403] [client 172.213.240.210:11418] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ae1Qm9Fa2S3EsATMdWPP2QAAAAY"]
[Sun Apr 26 07:39:07.718441 2026] [:error] [pid 8390:tid 8465] [client 172.213.240.210:11503] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ae1Qm4GPtFK_i9p5yxQsmQAAAI4"]
[Sun Apr 26 07:39:08.211127 2026] [:error] [pid 16515:tid 16538] [client 172.213.240.210:11491] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error.php"] [unique_id "ae1QnFtDrUmgHSvpuLzLtwAAAlQ"]
[Sun Apr 26 07:39:08.726690 2026] [:error] [pid 8390:tid 8474] [client 172.213.240.210:11432] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ae1QnIGPtFK_i9p5yxQsmwAAAJc"]
[Sun Apr 26 07:39:09.198061 2026] [:error] [pid 22572:tid 22602] [client 172.213.240.210:11452] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ae1QndXOViWCFU-pZzB1xwAAAVg"]
[Sun Apr 26 07:39:09.686862 2026] [:error] [pid 8390:tid 8458] [client 172.213.240.210:11518] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ae1QnYGPtFK_i9p5yxQsngAAAIc"]
[Sun Apr 26 07:39:10.157339 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11351] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "ae1QnnB3EmQlD4yKUt8kAQAAAZc"]
[Sun Apr 26 07:39:10.647777 2026] [:error] [pid 8390:tid 8471] [client 172.213.240.210:11475] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "ae1QnoGPtFK_i9p5yxQsnwAAAJQ"]
[Sun Apr 26 07:39:11.229091 2026] [:error] [pid 8383:tid 8397] [client 172.213.240.210:11422] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "ae1Qn9Fa2S3EsATMdWPP4QAAAAA"]
[Sun Apr 26 07:39:11.725472 2026] [:error] [pid 16574:tid 16625] [client 172.213.240.210:11519] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "ae1Qn35MsX8wRQr99nb-ZAAAA08"]
[Sun Apr 26 07:39:12.207963 2026] [:error] [pid 8385:tid 8447] [client 172.213.240.210:11338] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cvrvk.php"] [unique_id "ae1QoDOy7_J84Wx3-oxzkAAAAFc"]
[Sun Apr 26 07:39:12.692224 2026] [:error] [pid 8390:tid 8454] [client 172.213.240.210:11511] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "ae1QoIGPtFK_i9p5yxQsoQAAAIM"]
[Sun Apr 26 07:39:13.201829 2026] [:error] [pid 8390:tid 8461] [client 172.213.240.210:11350] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "ae1QoYGPtFK_i9p5yxQspAAAAIo"]
[Sun Apr 26 07:39:13.680207 2026] [:error] [pid 8385:tid 8436] [client 172.213.240.210:11395] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "ae1QoTOy7_J84Wx3-oxzkgAAAEw"]
[Sun Apr 26 07:39:14.197650 2026] [:error] [pid 8385:tid 8437] [client 172.213.240.210:11434] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "ae1QojOy7_J84Wx3-oxzkwAAAE0"]
[Sun Apr 26 07:39:14.701190 2026] [:error] [pid 16515:tid 16529] [client 172.213.240.210:11337] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ae1QoltDrUmgHSvpuLzLvQAAAks"]
[Sun Apr 26 07:39:15.223727 2026] [:error] [pid 13137:tid 13144] [client 172.213.240.210:11448] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ae1Qo90RB4J0o4h5neHmnAAAAgQ"]
[Sun Apr 26 07:39:15.704623 2026] [:error] [pid 22572:tid 22600] [client 172.213.240.210:11430] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ae1Qo9XOViWCFU-pZzB1zgAAAVY"]
[Sun Apr 26 07:39:16.342478 2026] [:error] [pid 13137:tid 13145] [client 172.213.240.210:11280] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ae1QpN0RB4J0o4h5neHmpwAAAgU"]
[Sun Apr 26 07:39:16.833781 2026] [:error] [pid 8390:tid 8451] [client 172.213.240.210:11490] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "ae1QpIGPtFK_i9p5yxQsqwAAAIA"]
[Sun Apr 26 07:39:17.308683 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11409] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "ae1QpdXOViWCFU-pZzB10AAAAVQ"]
[Sun Apr 26 07:39:17.794245 2026] [:error] [pid 8385:tid 8441] [client 172.213.240.210:11451] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "ae1QpTOy7_J84Wx3-oxzlQAAAFE"]
[Sun Apr 26 07:39:18.291706 2026] [:error] [pid 16574:tid 16605] [client 172.213.240.210:11410] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hello.php"] [unique_id "ae1Qpn5MsX8wRQr99nb-ZQAAA0E"]
[Sun Apr 26 07:39:18.833598 2026] [:error] [pid 8385:tid 8433] [client 172.213.240.210:11513] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae1QpjOy7_J84Wx3-oxzlgAAAEk"]
[Sun Apr 26 07:39:19.348450 2026] [:error] [pid 22572:tid 22579] [client 172.213.240.210:11461] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae1Qp9XOViWCFU-pZzB10wAAAUE"]
[Sun Apr 26 07:39:19.815691 2026] [:error] [pid 13137:tid 13155] [client 172.213.240.210:11720] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae1Qp90RB4J0o4h5neHmsQAAAg4"]
[Sun Apr 26 07:39:20.289494 2026] [:error] [pid 8390:tid 8455] [client 172.213.240.210:11443] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links-opml.php"] [unique_id "ae1QqIGPtFK_i9p5yxQsrwAAAIQ"]
[Sun Apr 26 07:39:20.755000 2026] [:error] [pid 8390:tid 8475] [client 172.213.240.210:11499] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ae1QqIGPtFK_i9p5yxQssQAAAJg"]
[Sun Apr 26 07:39:21.229707 2026] [:error] [pid 8390:tid 8452] [client 172.213.240.210:11539] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ae1QqYGPtFK_i9p5yxQstAAAAIE"]
[Sun Apr 26 07:39:21.746702 2026] [:error] [pid 8491:tid 8501] [client 172.213.240.210:11414] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ae1QqSq7I7e6CJooQM2rtwAAAMI"]
[Sun Apr 26 07:39:22.215802 2026] [:error] [pid 8390:tid 8464] [client 172.213.240.210:11398] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ae1QqoGPtFK_i9p5yxQstwAAAI0"]
[Sun Apr 26 07:39:22.693168 2026] [:error] [pid 8491:tid 8508] [client 172.213.240.210:11442] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae1Qqiq7I7e6CJooQM2ruQAAAMk"]
[Sun Apr 26 07:39:23.160632 2026] [:error] [pid 8491:tid 8514] [client 172.213.240.210:11583] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae1Qqyq7I7e6CJooQM2ruwAAAM8"]
[Sun Apr 26 07:39:23.631581 2026] [:error] [pid 8383:tid 8402] [client 172.213.240.210:11484] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae1Qq9Fa2S3EsATMdWPP6QAAAAU"]
[Sun Apr 26 07:39:24.106070 2026] [:error] [pid 8390:tid 8461] [client 172.213.240.210:11581] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae1QrIGPtFK_i9p5yxQsuQAAAIo"]
[Sun Apr 26 07:39:24.593840 2026] [:error] [pid 8390:tid 8460] [client 172.213.240.210:11419] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "ae1QrIGPtFK_i9p5yxQsvQAAAIk"]
[Sun Apr 26 07:39:25.061043 2026] [:error] [pid 16515:tid 16532] [client 172.213.240.210:11504] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "ae1QrVtDrUmgHSvpuLzLwwAAAk4"]
[Sun Apr 26 07:39:25.542196 2026] [:error] [pid 16515:tid 16530] [client 172.213.240.210:11345] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "ae1QrVtDrUmgHSvpuLzLxgAAAkw"]
[Sun Apr 26 07:39:26.049996 2026] [:error] [pid 16574:tid 16614] [client 172.213.240.210:11517] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shellalfa.php"] [unique_id "ae1Qrn5MsX8wRQr99nb-bAAAA0o"]
[Sun Apr 26 07:39:26.612348 2026] [:error] [pid 16515:tid 16528] [client 172.213.240.210:11454] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae1QrltDrUmgHSvpuLzLywAAAko"]
[Sun Apr 26 07:39:29.697424 2026] [:error] [pid 8491:tid 8513] [client 172.213.240.210:11464] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae1QsSq7I7e6CJooQM2rwgAAAM4"]
[Sun Apr 26 07:39:30.167232 2026] [:error] [pid 16515:tid 16538] [client 172.213.240.210:11270] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae1QsltDrUmgHSvpuLzL5AAAAlQ"]
[Sun Apr 26 07:39:30.657050 2026] [:error] [pid 16515:tid 16540] [client 172.213.240.210:11423] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae1QsltDrUmgHSvpuLzL6gAAAlY"]
[Sun Apr 26 07:39:31.127539 2026] [:error] [pid 22572:tid 22599] [client 172.213.240.210:11339] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae1Qs9XOViWCFU-pZzB12AAAAVU"]
[Sun Apr 26 07:39:31.607985 2026] [:error] [pid 16574:tid 16637] [client 172.213.240.210:11352] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae1Qs35MsX8wRQr99nb-cAAAA1U"]
[Sun Apr 26 07:39:32.098602 2026] [:error] [pid 16515:tid 16530] [client 172.213.240.210:11431] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae1QtFtDrUmgHSvpuLzL8QAAAkw"]
[Sun Apr 26 07:39:32.590860 2026] [:error] [pid 8491:tid 8516] [client 172.213.240.210:11553] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae1QtCq7I7e6CJooQM2ryAAAANE"]
[Sun Apr 26 07:39:33.075586 2026] [:error] [pid 13197:tid 13252] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/shelp.php
[Sun Apr 26 07:39:33.324659 2026] [:error] [pid 13197:tid 13253] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Sun Apr 26 07:39:33.572982 2026] [:error] [pid 13197:tid 13249] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Sun Apr 26 07:39:33.822933 2026] [:error] [pid 13197:tid 13236] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Sun Apr 26 07:39:34.059321 2026] [:error] [pid 13197:tid 13240] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun Apr 26 07:39:34.300331 2026] [:error] [pid 13197:tid 13246] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sun Apr 26 07:39:34.535898 2026] [:error] [pid 13197:tid 13244] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sun Apr 26 07:39:34.778817 2026] [:error] [pid 13197:tid 13231] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sun Apr 26 07:39:35.038736 2026] [:error] [pid 13197:tid 13233] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/mws.php
[Sun Apr 26 07:39:35.274707 2026] [:error] [pid 13197:tid 13256] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Sun Apr 26 07:39:35.511045 2026] [:error] [pid 13197:tid 13245] [client 172.213.240.210:11416] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sun Apr 26 07:39:35.743041 2026] [:error] [pid 13197:tid 13239] [client 172.213.240.210:11416] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ae1Qt93kktFKdSxTrBuUmAAAAsg"]
[Sun Apr 26 07:39:36.226695 2026] [:error] [pid 8390:tid 8472] [client 172.213.240.210:11404] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ae1QuIGPtFK_i9p5yxQswgAAAJU"]
[Sun Apr 26 07:39:36.693818 2026] [:error] [pid 22573:tid 22624] [client 172.213.240.210:11425] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ae1QuHB3EmQlD4yKUt8kEQAAAZE"]
[Sun Apr 26 07:39:37.166127 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11399] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "ae1QuXB3EmQlD4yKUt8kEgAAAZg"]
[Sun Apr 26 07:39:37.650512 2026] [:error] [pid 16574:tid 16619] [client 172.213.240.210:11437] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ae1QuX5MsX8wRQr99nb-cwAAA0w"]
[Sun Apr 26 07:39:38.126650 2026] [:error] [pid 22573:tid 22620] [client 172.213.240.210:11440] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ae1QunB3EmQlD4yKUt8kFAAAAY0"]
[Sun Apr 26 07:39:38.592451 2026] [:error] [pid 8390:tid 8467] [client 172.213.240.210:11471] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ae1QuoGPtFK_i9p5yxQsyQAAAJA"]
[Sun Apr 26 07:39:39.057831 2026] [:error] [pid 13197:tid 13242] [client 172.213.240.210:11435] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ae1Qu93kktFKdSxTrBuUmQAAAss"]
[Sun Apr 26 07:39:39.526719 2026] [:error] [pid 8491:tid 8516] [client 172.213.240.210:11388] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "ae1Quyq7I7e6CJooQM2r1wAAANE"]
[Sun Apr 26 07:39:40.021474 2026] [:error] [pid 8491:tid 8519] [client 172.213.240.210:11426] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "ae1QvCq7I7e6CJooQM2r2QAAANQ"]
[Sun Apr 26 07:39:40.496030 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11362] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "ae1QvHB3EmQlD4yKUt8kGQAAAZY"]
[Sun Apr 26 07:39:40.978792 2026] [:error] [pid 8385:tid 8435] [client 172.213.240.210:11342] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/06.php"] [unique_id "ae1QvDOy7_J84Wx3-oxzogAAAEs"]
[Sun Apr 26 07:39:41.444305 2026] [:error] [pid 16574:tid 16633] [client 172.213.240.210:11384] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell20211028.php"] [unique_id "ae1QvX5MsX8wRQr99nb-fAAAA1M"]
[Sun Apr 26 07:39:41.908222 2026] [:error] [pid 16574:tid 16627] [client 172.213.240.210:11578] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell20211028.php"] [unique_id "ae1QvX5MsX8wRQr99nb-fwAAA1A"]
[Sun Apr 26 07:39:42.389218 2026] [:error] [pid 8385:tid 8448] [client 172.213.240.210:11347] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell20211028.php"] [unique_id "ae1QvjOy7_J84Wx3-oxzowAAAFg"]
[Sun Apr 26 07:39:42.877003 2026] [:error] [pid 22573:tid 22628] [client 172.213.240.210:11444] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell20211028.php"] [unique_id "ae1QvnB3EmQlD4yKUt8kHQAAAZU"]
[Sun Apr 26 07:39:43.346984 2026] [:error] [pid 22573:tid 22627] [client 172.213.240.210:11487] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "ae1Qv3B3EmQlD4yKUt8kIgAAAZQ"]
[Sun Apr 26 07:39:43.827698 2026] [:error] [pid 22573:tid 22622] [client 172.213.240.210:11401] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "ae1Qv3B3EmQlD4yKUt8kJgAAAY8"]
[Sun Apr 26 07:39:44.295716 2026] [:error] [pid 22573:tid 22616] [client 172.213.240.210:11346] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "ae1QwHB3EmQlD4yKUt8kLQAAAYk"]
[Sun Apr 26 07:39:44.792442 2026] [:error] [pid 8390:tid 8456] [client 172.213.240.210:11265] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/owl.php"] [unique_id "ae1QwIGPtFK_i9p5yxQszgAAAIU"]
[Sun Apr 26 07:39:45.264092 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11424] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "ae1QwdXOViWCFU-pZzB14QAAAVQ"]
[Sun Apr 26 07:39:45.729762 2026] [:error] [pid 22572:tid 22579] [client 172.213.240.210:11421] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "ae1QwdXOViWCFU-pZzB15QAAAUE"]
[Sun Apr 26 07:39:46.202716 2026] [:error] [pid 22573:tid 22612] [client 172.213.240.210:11506] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "ae1QwnB3EmQlD4yKUt8kOQAAAYY"]
[Sun Apr 26 07:39:46.711707 2026] [:error] [pid 8390:tid 8457] [client 172.213.240.210:11527] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "ae1QwoGPtFK_i9p5yxQszwAAAIY"]
[Sun Apr 26 07:39:47.202939 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11450] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "ae1Qw3B3EmQlD4yKUt8kPgAAAZc"]
[Sun Apr 26 07:39:47.692857 2026] [:error] [pid 22573:tid 22611] [client 172.213.240.210:11374] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "ae1Qw3B3EmQlD4yKUt8kQQAAAYU"]
[Sun Apr 26 07:39:48.168535 2026] [:error] [pid 8390:tid 8464] [client 172.213.240.210:11354] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "ae1QxIGPtFK_i9p5yxQs0wAAAI0"]
[Sun Apr 26 07:39:48.642539 2026] [:error] [pid 22573:tid 22609] [client 172.213.240.210:11446] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file59.php"] [unique_id "ae1QxHB3EmQlD4yKUt8kSQAAAYM"]
[Sun Apr 26 07:39:49.126017 2026] [:error] [pid 13137:tid 13163] [client 172.213.240.210:11366] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "ae1Qxd0RB4J0o4h5neHmvAAAAhY"]
[Sun Apr 26 07:39:49.636886 2026] [:error] [pid 8383:tid 8404] [client 172.213.240.210:11381] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "ae1QxdFa2S3EsATMdWPP9gAAAAc"]
[Sun Apr 26 07:39:50.105061 2026] [:error] [pid 8491:tid 8506] [client 172.213.240.210:11268] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "ae1Qxiq7I7e6CJooQM2r3AAAAMc"]
[Sun Apr 26 07:39:50.591471 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:11264] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "ae1QxnB3EmQlD4yKUt8kVAAAAZI"]
[Sun Apr 26 07:39:51.090776 2026] [:error] [pid 22573:tid 22607] [client 172.213.240.210:11331] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ae1Qx3B3EmQlD4yKUt8kVwAAAYE"]
[Sun Apr 26 07:39:51.575251 2026] [:error] [pid 22573:tid 22610] [client 172.213.240.210:11272] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ae1Qx3B3EmQlD4yKUt8kWgAAAYQ"]
[Sun Apr 26 07:39:52.141126 2026] [:error] [pid 8491:tid 8505] [client 172.213.240.210:11370] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ae1QyCq7I7e6CJooQM2r3gAAAMY"]
[Sun Apr 26 07:39:52.679909 2026] [:error] [pid 13197:tid 13240] [client 172.213.240.210:11413] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "ae1QyN3kktFKdSxTrBuUqQAAAsk"]
[Sun Apr 26 07:39:53.189409 2026] [:error] [pid 8491:tid 8499] [client 172.213.240.210:11353] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clirp.php"] [unique_id "ae1QySq7I7e6CJooQM2r4gAAAMA"]
[Sun Apr 26 07:39:53.659870 2026] [:error] [pid 8491:tid 8520] [client 172.213.240.210:11445] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clirp.php"] [unique_id "ae1QySq7I7e6CJooQM2r4wAAANU"]
[Sun Apr 26 07:39:54.165944 2026] [:error] [pid 13197:tid 13247] [client 172.213.240.210:11383] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clirp.php"] [unique_id "ae1Qyt3kktFKdSxTrBuUswAAAs8"]
[Sun Apr 26 07:39:54.647043 2026] [:error] [pid 13197:tid 13248] [client 172.213.240.210:11427] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clirp.php"] [unique_id "ae1Qyt3kktFKdSxTrBuUtgAAAtA"]
[Sun Apr 26 07:39:55.126851 2026] [:error] [pid 13197:tid 13241] [client 172.213.240.210:11336] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ae1Qy93kktFKdSxTrBuUuQAAAso"]
[Sun Apr 26 07:39:55.602522 2026] [:error] [pid 8390:tid 8466] [client 172.213.240.210:11441] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ae1Qy4GPtFK_i9p5yxQs1QAAAI8"]
[Sun Apr 26 07:39:56.070398 2026] [:error] [pid 8390:tid 8469] [client 172.213.240.210:11343] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ae1QzIGPtFK_i9p5yxQs2AAAAJI"]
[Sun Apr 26 07:39:56.579578 2026] [:error] [pid 8390:tid 8453] [client 172.213.240.210:11365] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "ae1QzIGPtFK_i9p5yxQs2QAAAII"]
[Sun Apr 26 07:39:57.060310 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:11382] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "ae1QzXB3EmQlD4yKUt8kXgAAAZI"]
[Sun Apr 26 07:39:57.648139 2026] [:error] [pid 13137:tid 13153] [client 172.213.240.210:11436] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "ae1Qzd0RB4J0o4h5neHmwwAAAgw"]
[Sun Apr 26 07:39:58.139826 2026] [:error] [pid 8383:tid 8413] [client 172.213.240.210:11515] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "ae1QztFa2S3EsATMdWPP_wAAABA"]
[Sun Apr 26 07:39:58.617950 2026] [:error] [pid 8491:tid 8509] [client 172.213.240.210:11330] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "ae1Qziq7I7e6CJooQM2r7AAAAMo"]
[Sun Apr 26 07:39:59.103580 2026] [:error] [pid 13197:tid 13246] [client 172.213.240.210:11412] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ae1Qz93kktFKdSxTrBuU0AAAAs4"]
[Sun Apr 26 07:39:59.590665 2026] [:error] [pid 13137:tid 13155] [client 172.213.240.210:11369] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ae1Qz90RB4J0o4h5neHmxgAAAg4"]
[Sun Apr 26 07:40:00.088374 2026] [:error] [pid 8390:tid 8470] [client 172.213.240.210:11328] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ae1Q0IGPtFK_i9p5yxQs3gAAAJM"]
[Sun Apr 26 07:40:00.622227 2026] [:error] [pid 13137:tid 13143] [client 172.213.240.210:10963] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lo.php"] [unique_id "ae1Q0N0RB4J0o4h5neHmyQAAAgM"]
[Sun Apr 26 07:40:01.092013 2026] [:error] [pid 13197:tid 13231] [client 172.213.240.210:11357] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae1Q0d3kktFKdSxTrBuU2QAAAsA"]
[Sun Apr 26 07:40:01.568359 2026] [:error] [pid 13137:tid 13161] [client 172.213.240.210:11367] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae1Q0d0RB4J0o4h5neHmygAAAhQ"]
[Sun Apr 26 07:40:02.037596 2026] [:error] [pid 13137:tid 13149] [client 172.213.240.210:11285] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae1Q0t0RB4J0o4h5neHmzAAAAgk"]
[Sun Apr 26 07:40:02.510612 2026] [:error] [pid 22573:tid 22606] [client 172.213.240.210:11371] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae1Q0nB3EmQlD4yKUt8kZAAAAYA"]
[Sun Apr 26 07:40:03.002140 2026] [:error] [pid 13197:tid 13250] [client 172.213.240.210:11277] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "ae1Q093kktFKdSxTrBuU4wAAAtI"]
[Sun Apr 26 07:40:03.471029 2026] [:error] [pid 8390:tid 8472] [client 172.213.240.210:11273] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "ae1Q04GPtFK_i9p5yxQs5gAAAJU"]
[Sun Apr 26 07:40:03.940421 2026] [:error] [pid 22573:tid 22610] [client 172.213.240.210:11407] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "ae1Q03B3EmQlD4yKUt8kZwAAAYQ"]
[Sun Apr 26 07:40:04.413901 2026] [:error] [pid 16515:tid 16537] [client 172.213.240.210:11363] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "ae1Q1FtDrUmgHSvpuLzMRgAAAlM"]
[Sun Apr 26 07:40:04.892561 2026] [:error] [pid 8491:tid 8513] [client 172.213.240.210:11290] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae1Q1Cq7I7e6CJooQM2r7wAAAM4"]
[Sun Apr 26 07:40:05.360006 2026] [:error] [pid 13137:tid 13160] [client 172.213.240.210:11621] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae1Q1d0RB4J0o4h5neHm0wAAAhM"]
[Sun Apr 26 07:40:05.836151 2026] [:error] [pid 13137:tid 13159] [client 172.213.240.210:11269] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae1Q1d0RB4J0o4h5neHm1QAAAhI"]
[Sun Apr 26 07:40:06.304003 2026] [:error] [pid 8390:tid 8473] [client 172.213.240.210:11402] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "ae1Q1oGPtFK_i9p5yxQs8QAAAJY"]
[Sun Apr 26 07:40:06.785891 2026] [:error] [pid 13197:tid 13237] [client 172.213.240.210:11455] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "ae1Q1t3kktFKdSxTrBuU9QAAAsY"]
[Sun Apr 26 07:40:07.256835 2026] [:error] [pid 8383:tid 8400] [client 172.213.240.210:11387] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "ae1Q19Fa2S3EsATMdWPQBQAAAAM"]
[Sun Apr 26 07:40:07.724824 2026] [:error] [pid 8491:tid 8524] [client 172.213.240.210:11379] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "ae1Q1yq7I7e6CJooQM2r8AAAANg"]
[Sun Apr 26 07:40:08.204258 2026] [:error] [pid 13197:tid 13240] [client 172.213.240.210:11364] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "ae1Q2N3kktFKdSxTrBuU_gAAAsk"]
[Sun Apr 26 07:40:08.670635 2026] [:error] [pid 8385:tid 8447] [client 172.213.240.210:11514] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ae1Q2DOy7_J84Wx3-oxzpQAAAFc"]
[Sun Apr 26 07:40:09.195172 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11360] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ae1Q2XB3EmQlD4yKUt8kawAAAZc"]
[Sun Apr 26 07:40:09.665825 2026] [:error] [pid 22572:tid 22579] [client 172.213.240.210:11694] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ae1Q2dXOViWCFU-pZzB18AAAAUE"]
[Sun Apr 26 07:40:10.151616 2026] [:error] [pid 22572:tid 22601] [client 172.213.240.210:11489] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "ae1Q2tXOViWCFU-pZzB19QAAAVc"]
[Sun Apr 26 07:40:10.628665 2026] [:error] [pid 22573:tid 22611] [client 172.213.240.210:11309] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cliner.php"] [unique_id "ae1Q2nB3EmQlD4yKUt8kbQAAAYU"]
[Sun Apr 26 07:40:11.149173 2026] [:error] [pid 8390:tid 8453] [client 172.213.240.210:11341] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cliner.php"] [unique_id "ae1Q24GPtFK_i9p5yxQtBQAAAII"]
[Sun Apr 26 07:40:11.614362 2026] [:error] [pid 22572:tid 22582] [client 172.213.240.210:11396] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cliner.php"] [unique_id "ae1Q29XOViWCFU-pZzB1_AAAAUQ"]
[Sun Apr 26 07:40:12.124128 2026] [:error] [pid 13197:tid 13252] [client 172.213.240.210:11333] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-cliner.php"] [unique_id "ae1Q3N3kktFKdSxTrBuVEAAAAtQ"]
[Sun Apr 26 07:40:12.596428 2026] [:error] [pid 8383:tid 8415] [client 172.213.240.210:11324] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ae1Q3NFa2S3EsATMdWPQBwAAABI"]
[Sun Apr 26 07:40:13.078864 2026] [:error] [pid 8390:tid 8452] [client 172.213.240.210:11380] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ae1Q3YGPtFK_i9p5yxQtBgAAAIE"]
[Sun Apr 26 07:40:13.571160 2026] [:error] [pid 8390:tid 8454] [client 172.213.240.210:11428] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ae1Q3YGPtFK_i9p5yxQtBwAAAIM"]
[Sun Apr 26 07:40:14.052615 2026] [:error] [pid 8390:tid 8470] [client 172.213.240.210:11282] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v3.php"] [unique_id "ae1Q3oGPtFK_i9p5yxQtCQAAAJM"]
[Sun Apr 26 07:40:14.524410 2026] [:error] [pid 22573:tid 22607] [client 172.213.240.210:11298] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ae1Q3nB3EmQlD4yKUt8kcgAAAYE"]
[Sun Apr 26 07:40:14.990290 2026] [:error] [pid 22573:tid 22621] [client 172.213.240.210:11349] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ae1Q3nB3EmQlD4yKUt8kdQAAAY4"]
[Sun Apr 26 07:40:15.465915 2026] [:error] [pid 22573:tid 22612] [client 172.213.240.210:11389] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ae1Q33B3EmQlD4yKUt8kdwAAAYY"]
[Sun Apr 26 07:40:15.946146 2026] [:error] [pid 13137:tid 13143] [client 172.213.240.210:11335] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "ae1Q390RB4J0o4h5neHm2QAAAgM"]
[Sun Apr 26 07:40:16.423545 2026] [:error] [pid 8491:tid 8510] [client 172.213.240.210:11287] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ae1Q4Cq7I7e6CJooQM2r8gAAAMs"]
[Sun Apr 26 07:40:16.898344 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11267] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ae1Q4HB3EmQlD4yKUt8kfAAAAZM"]
[Sun Apr 26 07:40:17.384868 2026] [:error] [pid 8491:tid 8499] [client 172.213.240.210:11392] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ae1Q4Sq7I7e6CJooQM2r8wAAAMA"]
[Sun Apr 26 07:40:17.863146 2026] [:error] [pid 8383:tid 8401] [client 172.213.240.210:11361] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "ae1Q4dFa2S3EsATMdWPQEAAAAAQ"]
[Sun Apr 26 07:40:18.348912 2026] [:error] [pid 22572:tid 22593] [client 172.213.240.210:11293] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae1Q4tXOViWCFU-pZzB1_gAAAU8"]
[Sun Apr 26 07:40:18.986793 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11478] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae1Q4nB3EmQlD4yKUt8khAAAAZY"]
[Sun Apr 26 07:40:19.736563 2026] [:error] [pid 22573:tid 22617] [client 172.213.240.210:11288] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae1Q43B3EmQlD4yKUt8khwAAAYo"]
[Sun Apr 26 07:40:20.268102 2026] [:error] [pid 13197:tid 13245] [client 172.213.240.210:10948] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae1Q5N3kktFKdSxTrBuVHAAAAs0"]
[Sun Apr 26 07:40:21.087499 2026] [:error] [pid 22573:tid 22624] [client 172.213.240.210:11291] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "ae1Q5XB3EmQlD4yKUt8kiwAAAZE"]
[Sun Apr 26 07:40:21.937418 2026] [:error] [pid 13197:tid 13239] [client 172.213.240.210:11279] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "ae1Q5d3kktFKdSxTrBuVHwAAAsg"]
[Sun Apr 26 07:40:22.407291 2026] [:error] [pid 13197:tid 13255] [client 172.213.240.210:11386] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "ae1Q5t3kktFKdSxTrBuVIAAAAtc"]
[Sun Apr 26 07:40:22.900374 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11303] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/forbidals.php"] [unique_id "ae1Q5nB3EmQlD4yKUt8kjwAAAYw"]
[Sun Apr 26 07:40:23.381318 2026] [:error] [pid 8390:tid 8457] [client 172.213.240.210:11358] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "ae1Q54GPtFK_i9p5yxQtFAAAAIY"]
[Sun Apr 26 07:40:23.856592 2026] [:error] [pid 16515:tid 16526] [client 172.213.240.210:11375] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "ae1Q51tDrUmgHSvpuLzMRwAAAkg"]
[Sun Apr 26 07:40:24.332620 2026] [:error] [pid 16574:tid 16639] [client 172.213.240.210:11685] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "ae1Q6H5MsX8wRQr99nb-hAAAA1Y"]
[Sun Apr 26 07:40:24.811302 2026] [:error] [pid 8390:tid 8461] [client 172.213.240.210:11581] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "ae1Q6IGPtFK_i9p5yxQtFQAAAIo"]
[Sun Apr 26 07:40:25.299525 2026] [:error] [pid 13137:tid 13157] [client 172.213.240.210:11276] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xm.php"] [unique_id "ae1Q6d0RB4J0o4h5neHm4QAAAhA"]
[Sun Apr 26 07:40:25.775490 2026] [:error] [pid 22573:tid 22621] [client 172.213.240.210:11283] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xm.php"] [unique_id "ae1Q6XB3EmQlD4yKUt8kmAAAAY4"]
[Sun Apr 26 07:40:26.250069 2026] [:error] [pid 22572:tid 22579] [client 172.213.240.210:11278] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xm.php"] [unique_id "ae1Q6tXOViWCFU-pZzB2AAAAAUE"]
[Sun Apr 26 07:40:26.743201 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11286] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xm.php"] [unique_id "ae1Q6nB3EmQlD4yKUt8knAAAAZM"]
[Sun Apr 26 07:40:27.213046 2026] [:error] [pid 8390:tid 8453] [client 172.213.240.210:11447] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "ae1Q64GPtFK_i9p5yxQtFwAAAII"]
[Sun Apr 26 07:40:27.678081 2026] [:error] [pid 8390:tid 8459] [client 172.213.240.210:11275] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "ae1Q64GPtFK_i9p5yxQtGQAAAIg"]
[Sun Apr 26 07:40:28.163893 2026] [:error] [pid 8390:tid 8456] [client 172.213.240.210:11377] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "ae1Q7IGPtFK_i9p5yxQtHQAAAIU"]
[Sun Apr 26 07:40:28.638655 2026] [:error] [pid 8390:tid 8473] [client 172.213.240.210:11292] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cc13.php"] [unique_id "ae1Q7IGPtFK_i9p5yxQtHwAAAJY"]
[Sun Apr 26 07:40:29.103683 2026] [:error] [pid 16515:tid 16521] [client 172.213.240.210:11405] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ae1Q7VtDrUmgHSvpuLzMSgAAAkM"]
[Sun Apr 26 07:40:29.578076 2026] [:error] [pid 22572:tid 22588] [client 172.213.240.210:10995] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ae1Q7dXOViWCFU-pZzB2AQAAAUo"]
[Sun Apr 26 07:40:30.081291 2026] [:error] [pid 8390:tid 8475] [client 172.213.240.210:10955] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ae1Q7oGPtFK_i9p5yxQtJQAAAJg"]
[Sun Apr 26 07:40:30.546906 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:10971] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "ae1Q7nB3EmQlD4yKUt8kngAAAZI"]
[Sun Apr 26 07:40:31.018008 2026] [:error] [pid 13197:tid 13237] [client 172.213.240.210:11321] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "ae1Q793kktFKdSxTrBuVIwAAAsY"]
[Sun Apr 26 07:40:31.505015 2026] [:error] [pid 8390:tid 8466] [client 172.213.240.210:11307] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "ae1Q74GPtFK_i9p5yxQtJwAAAI8"]
[Sun Apr 26 07:40:32.005720 2026] [:error] [pid 22573:tid 22612] [client 172.213.240.210:11301] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "ae1Q8HB3EmQlD4yKUt8kowAAAYY"]
[Sun Apr 26 07:40:32.476622 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11323] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "ae1Q8HB3EmQlD4yKUt8kpgAAAZY"]
[Sun Apr 26 07:40:32.968104 2026] [:error] [pid 8390:tid 8459] [client 172.213.240.210:11218] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "ae1Q8IGPtFK_i9p5yxQtKgAAAIg"]
[Sun Apr 26 07:40:33.443763 2026] [:error] [pid 22573:tid 22608] [client 172.213.240.210:10997] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "ae1Q8XB3EmQlD4yKUt8kqQAAAYI"]
[Sun Apr 26 07:40:33.950769 2026] [:error] [pid 8390:tid 8468] [client 172.213.240.210:11308] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "ae1Q8YGPtFK_i9p5yxQtKwAAAJE"]
[Sun Apr 26 07:40:34.433038 2026] [:error] [pid 8385:tid 8445] [client 172.213.240.210:11311] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asas.php"] [unique_id "ae1Q8jOy7_J84Wx3-oxzsQAAAFU"]
[Sun Apr 26 07:40:34.900842 2026] [:error] [pid 16574:tid 16637] [client 172.213.240.210:11453] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class19.php"] [unique_id "ae1Q8n5MsX8wRQr99nb-hQAAA1U"]
[Sun Apr 26 07:40:35.371995 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Apr 26 07:40:36.851132 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Sun Apr 26 07:40:37.086856 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/wuasr.php
[Sun Apr 26 07:40:37.322533 2026] [:error] [pid 22573:tid 22611] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Sun Apr 26 07:40:37.559444 2026] [:error] [pid 22573:tid 22627] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Sun Apr 26 07:40:37.810179 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sun Apr 26 07:40:38.046296 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sun Apr 26 07:40:38.289286 2026] [:error] [pid 22573:tid 22617] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/fileas.php
[Sun Apr 26 07:40:38.556410 2026] [:error] [pid 22573:tid 22606] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Sun Apr 26 07:40:38.804758 2026] [:error] [pid 22573:tid 22613] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Sun Apr 26 07:40:39.041038 2026] [:error] [pid 22573:tid 22612] [client 172.213.240.210:11348] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Sun Apr 26 07:40:39.273845 2026] [:error] [pid 22573:tid 22607] [client 172.213.240.210:11348] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "ae1Q93B3EmQlD4yKUt8kugAAAYE"]
[Sun Apr 26 07:40:39.746905 2026] [:error] [pid 22573:tid 22624] [client 172.213.240.210:11758] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "ae1Q93B3EmQlD4yKUt8kvAAAAZE"]
[Sun Apr 26 07:40:40.239661 2026] [:error] [pid 22573:tid 22618] [client 172.213.240.210:10962] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "ae1Q-HB3EmQlD4yKUt8kvgAAAYs"]
[Sun Apr 26 07:40:40.715990 2026] [:error] [pid 8491:tid 8509] [client 172.213.240.210:11281] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "ae1Q-Cq7I7e6CJooQM2r-AAAAMo"]
[Sun Apr 26 07:40:41.201517 2026] [:error] [pid 13197:tid 13245] [client 172.213.240.210:11274] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx10.php"] [unique_id "ae1Q-d3kktFKdSxTrBuVLwAAAs0"]
[Sun Apr 26 07:40:41.686647 2026] [:error] [pid 8383:tid 8400] [client 172.213.240.210:11658] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx10.php"] [unique_id "ae1Q-dFa2S3EsATMdWPQGQAAAAM"]
[Sun Apr 26 07:40:42.154530 2026] [:error] [pid 22573:tid 22617] [client 172.213.240.210:11761] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx10.php"] [unique_id "ae1Q-nB3EmQlD4yKUt8kxgAAAYo"]
[Sun Apr 26 07:40:42.621934 2026] [:error] [pid 8491:tid 8504] [client 172.213.240.210:11312] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx10.php"] [unique_id "ae1Q-iq7I7e6CJooQM2r-gAAAMU"]
[Sun Apr 26 07:40:43.140256 2026] [:error] [pid 22573:tid 22607] [client 172.213.240.210:11738] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "ae1Q-3B3EmQlD4yKUt8kygAAAYE"]
[Sun Apr 26 07:40:43.635329 2026] [:error] [pid 22573:tid 22610] [client 172.213.240.210:11609] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "ae1Q-3B3EmQlD4yKUt8kywAAAYQ"]
[Sun Apr 26 07:40:44.101147 2026] [:error] [pid 8390:tid 8467] [client 172.213.240.210:11313] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "ae1Q_IGPtFK_i9p5yxQtLwAAAJA"]
[Sun Apr 26 07:40:44.585621 2026] [:error] [pid 8390:tid 8457] [client 172.213.240.210:11391] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xml.php"] [unique_id "ae1Q_IGPtFK_i9p5yxQtMAAAAIY"]
[Sun Apr 26 07:40:45.054025 2026] [:error] [pid 8383:tid 8418] [client 172.213.240.210:10961] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "ae1Q_dFa2S3EsATMdWPQGwAAABU"]
[Sun Apr 26 07:40:45.531792 2026] [:error] [pid 13197:tid 13239] [client 172.213.240.210:11657] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "ae1Q_d3kktFKdSxTrBuVMAAAAsg"]
[Sun Apr 26 07:40:46.018750 2026] [:error] [pid 13197:tid 13251] [client 172.213.240.210:11731] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "ae1Q_t3kktFKdSxTrBuVMwAAAtM"]
[Sun Apr 26 07:40:46.505093 2026] [:error] [pid 16574:tid 16623] [client 172.213.240.210:11000] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moon3.php"] [unique_id "ae1Q_n5MsX8wRQr99nb-igAAA04"]
[Sun Apr 26 07:40:46.979809 2026] [:error] [pid 16574:tid 16610] [client 172.213.240.210:11760] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "ae1Q_n5MsX8wRQr99nb-iwAAA0Y"]
[Sun Apr 26 07:40:47.489333 2026] [:error] [pid 8383:tid 8405] [client 172.213.240.210:11747] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "ae1Q_9Fa2S3EsATMdWPQHAAAAAg"]
[Sun Apr 26 07:40:47.977019 2026] [:error] [pid 8390:tid 8469] [client 172.213.240.210:11667] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "ae1Q_4GPtFK_i9p5yxQtMQAAAJI"]
[Sun Apr 26 07:40:48.465488 2026] [:error] [pid 22573:tid 22627] [client 172.213.240.210:11662] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/db.php"] [unique_id "ae1RAHB3EmQlD4yKUt8kzQAAAZQ"]
[Sun Apr 26 07:40:48.934034 2026] [:error] [pid 22573:tid 22619] [client 172.213.240.210:11659] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "ae1RAHB3EmQlD4yKUt8kzgAAAYw"]
[Sun Apr 26 07:40:49.410490 2026] [:error] [pid 22573:tid 22631] [client 172.213.240.210:11317] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "ae1RAXB3EmQlD4yKUt8k0AAAAZg"]
[Sun Apr 26 07:40:49.903411 2026] [:error] [pid 8383:tid 8402] [client 172.213.240.210:11774] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "ae1RAdFa2S3EsATMdWPQHgAAAAU"]
[Sun Apr 26 07:40:50.380421 2026] [:error] [pid 16574:tid 16608] [client 172.213.240.210:11376] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "ae1RAn5MsX8wRQr99nb-jAAAA0Q"]
[Sun Apr 26 07:40:50.847884 2026] [:error] [pid 16515:tid 16541] [client 172.213.240.210:10998] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "ae1RAltDrUmgHSvpuLzMWgAAAlc"]
[Sun Apr 26 07:40:51.322091 2026] [:error] [pid 8383:tid 8420] [client 172.213.240.210:11733] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "ae1RA9Fa2S3EsATMdWPQIQAAABc"]
[Sun Apr 26 07:40:51.794820 2026] [:error] [pid 8383:tid 8419] [client 172.213.240.210:10973] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "ae1RA9Fa2S3EsATMdWPQIgAAABY"]
[Sun Apr 26 07:40:52.269270 2026] [:error] [pid 16515:tid 16523] [client 172.213.240.210:11705] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "ae1RBFtDrUmgHSvpuLzMWwAAAkU"]
[Sun Apr 26 07:40:52.751050 2026] [:error] [pid 8491:tid 8506] [client 172.213.240.210:10944] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "ae1RBCq7I7e6CJooQM2sDAAAAMc"]
[Sun Apr 26 07:40:53.221112 2026] [:error] [pid 8385:tid 8439] [client 172.213.240.210:11368] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "ae1RBTOy7_J84Wx3-oxztAAAAE8"]
[Sun Apr 26 07:40:53.693674 2026] [:error] [pid 8491:tid 8505] [client 172.213.240.210:11376] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "ae1RBSq7I7e6CJooQM2sDQAAAMY"]
[Sun Apr 26 07:40:54.177703 2026] [:error] [pid 8385:tid 8441] [client 172.213.240.210:11652] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tox.php"] [unique_id "ae1RBjOy7_J84Wx3-oxztQAAAFE"]
[Sun Apr 26 07:40:54.656577 2026] [:error] [pid 16574:tid 16627] [client 172.213.240.210:11289] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "ae1RBn5MsX8wRQr99nb-kAAAA1A"]
[Sun Apr 26 07:40:55.143505 2026] [:error] [pid 16515:tid 16522] [client 172.213.240.210:11356] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "ae1RB1tDrUmgHSvpuLzMXAAAAkQ"]
[Sun Apr 26 07:40:55.631951 2026] [:error] [pid 22572:tid 22595] [client 172.213.240.210:11735] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "ae1RB9XOViWCFU-pZzB2BgAAAVE"]
[Sun Apr 26 07:40:56.107320 2026] [:error] [pid 22572:tid 22592] [client 172.213.240.210:10975] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packed.php"] [unique_id "ae1RCNXOViWCFU-pZzB2CgAAAU4"]
[Sun Apr 26 07:40:56.573197 2026] [:error] [pid 22572:tid 22582] [client 172.213.240.210:11734] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ae1RCNXOViWCFU-pZzB2DAAAAUQ"]
[Sun Apr 26 07:40:57.062325 2026] [:error] [pid 8390:tid 8454] [client 172.213.240.210:11724] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ae1RCYGPtFK_i9p5yxQtNwAAAIM"]
[Sun Apr 26 07:40:57.535288 2026] [:error] [pid 8390:tid 8468] [client 172.213.240.210:11725] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ae1RCYGPtFK_i9p5yxQtOwAAAJE"]
[Sun Apr 26 07:40:58.001489 2026] [:error] [pid 22573:tid 22629] [client 172.213.240.210:11741] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib.php"] [unique_id "ae1RCnB3EmQlD4yKUt8k0wAAAZY"]
[Sun Apr 26 07:40:58.468102 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11751] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ae1RCnB3EmQlD4yKUt8k2AAAAZM"]
[Sun Apr 26 07:40:58.941852 2026] [:error] [pid 22572:tid 22579] [client 172.213.240.210:10950] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ae1RCtXOViWCFU-pZzB2EwAAAUE"]
[Sun Apr 26 07:40:59.408892 2026] [:error] [pid 16574:tid 16616] [client 172.213.240.210:11723] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ae1RC35MsX8wRQr99nb-kQAAA0s"]
[Sun Apr 26 07:40:59.884983 2026] [:error] [pid 16574:tid 16606] [client 172.213.240.210:11660] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccu.php"] [unique_id "ae1RC35MsX8wRQr99nb-lAAAA0I"]
[Sun Apr 26 07:41:00.376434 2026] [:error] [pid 8491:tid 8499] [client 172.213.240.210:10947] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "ae1RDCq7I7e6CJooQM2sEAAAAMA"]
[Sun Apr 26 07:41:00.886826 2026] [:error] [pid 8383:tid 8409] [client 172.213.240.210:11319] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "ae1RDNFa2S3EsATMdWPQJQAAAAw"]
[Sun Apr 26 07:41:01.405746 2026] [:error] [pid 8383:tid 8400] [client 172.213.240.210:11718] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "ae1RDdFa2S3EsATMdWPQJgAAAAM"]
[Sun Apr 26 07:41:01.923158 2026] [:error] [pid 22572:tid 22587] [client 172.213.240.210:11732] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ffile.php"] [unique_id "ae1RDdXOViWCFU-pZzB2FQAAAUk"]
[Sun Apr 26 07:41:02.401287 2026] [:error] [pid 22572:tid 22593] [client 172.213.240.210:10980] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "ae1RDtXOViWCFU-pZzB2IgAAAU8"]
[Sun Apr 26 07:41:02.869797 2026] [:error] [pid 22573:tid 22630] [client 172.213.240.210:11429] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "ae1RDnB3EmQlD4yKUt8k_QAAAZc"]
[Sun Apr 26 07:41:03.334963 2026] [:error] [pid 22573:tid 22625] [client 172.213.240.210:11749] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "ae1RD3B3EmQlD4yKUt8k_gAAAZI"]
[Sun Apr 26 07:41:03.808211 2026] [:error] [pid 22573:tid 22613] [client 172.213.240.210:11002] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.1.php"] [unique_id "ae1RD3B3EmQlD4yKUt8lAAAAAYc"]
[Sun Apr 26 07:41:04.302249 2026] [:error] [pid 13137:tid 13151] [client 172.213.240.210:11007] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "ae1REN0RB4J0o4h5neHm_gAAAgo"]
[Sun Apr 26 07:41:04.872150 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11649] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "ae1RENXOViWCFU-pZzB2JgAAAVQ"]
[Sun Apr 26 07:41:05.360789 2026] [:error] [pid 22572:tid 22584] [client 172.213.240.210:11306] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "ae1REdXOViWCFU-pZzB2KAAAAUY"]
[Sun Apr 26 07:41:05.834588 2026] [:error] [pid 22572:tid 22594] [client 172.213.240.210:11605] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "ae1REdXOViWCFU-pZzB2KgAAAVA"]
[Sun Apr 26 07:41:06.331361 2026] [:error] [pid 16515:tid 16526] [client 172.213.240.210:11663] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/academy.php"] [unique_id "ae1REltDrUmgHSvpuLzMYwAAAkg"]
[Sun Apr 26 07:41:06.805043 2026] [:error] [pid 16515:tid 16534] [client 172.213.240.210:10949] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/academy.php"] [unique_id "ae1REltDrUmgHSvpuLzMZQAAAlA"]
[Sun Apr 26 07:41:07.310967 2026] [:error] [pid 16574:tid 16637] [client 172.213.240.210:10976] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/academy.php"] [unique_id "ae1RE35MsX8wRQr99nb-lwAAA1U"]
[Sun Apr 26 07:41:07.789504 2026] [:error] [pid 22572:tid 22582] [client 172.213.240.210:11459] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/academy.php"] [unique_id "ae1RE9XOViWCFU-pZzB2MgAAAUQ"]
[Sun Apr 26 07:41:08.266738 2026] [:error] [pid 8385:tid 8437] [client 172.213.240.210:11373] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xml.php"] [unique_id "ae1RFDOy7_J84Wx3-oxzxAAAAE0"]
[Sun Apr 26 07:41:08.759330 2026] [:error] [pid 8390:tid 8464] [client 172.213.240.210:11684] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xml.php"] [unique_id "ae1RFIGPtFK_i9p5yxQtQAAAAI0"]
[Sun Apr 26 07:41:09.313021 2026] [:error] [pid 22572:tid 22597] [client 172.213.240.210:11742] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xml.php"] [unique_id "ae1RFdXOViWCFU-pZzB2NAAAAVM"]
[Sun Apr 26 07:41:09.777768 2026] [:error] [pid 8390:tid 8467] [client 172.213.240.210:11745] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xml.php"] [unique_id "ae1RFYGPtFK_i9p5yxQtQgAAAJA"]
[Sun Apr 26 07:41:10.270948 2026] [:error] [pid 22572:tid 22581] [client 172.213.240.210:11003] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ae1RFtXOViWCFU-pZzB2NwAAAUM"]
[Sun Apr 26 07:41:10.744678 2026] [:error] [pid 8383:tid 8416] [client 172.213.240.210:11553] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ae1RFtFa2S3EsATMdWPQhwAAABM"]
[Sun Apr 26 07:41:11.232413 2026] [:error] [pid 8491:tid 8507] [client 172.213.240.210:11713] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ae1RFyq7I7e6CJooQM2sEQAAAMg"]
[Sun Apr 26 07:41:11.738194 2026] [:error] [pid 8383:tid 8418] [client 172.213.240.210:11294] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "ae1RF9Fa2S3EsATMdWPQigAAABU"]
[Sun Apr 26 07:41:12.233974 2026] [:error] [pid 8390:tid 8463] [client 172.213.240.210:10999] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ae1RGIGPtFK_i9p5yxQtRgAAAIw"]
[Sun Apr 26 07:41:12.729923 2026] [:error] [pid 8390:tid 8454] [client 172.213.240.210:11314] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ae1RGIGPtFK_i9p5yxQtSAAAAIM"]
[Sun Apr 26 07:41:13.211200 2026] [:error] [pid 22573:tid 22628] [client 172.213.240.210:11305] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ae1RGXB3EmQlD4yKUt8lCQAAAZU"]
[Sun Apr 26 07:41:13.696545 2026] [:error] [pid 8385:tid 8430] [client 172.213.240.210:11297] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ae1RGTOy7_J84Wx3-oxzyAAAAEY"]
[Sun Apr 26 07:41:14.180332 2026] [:error] [pid 22572:tid 22601] [client 172.213.240.210:11334] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ae1RGtXOViWCFU-pZzB2OQAAAVc"]
[Sun Apr 26 07:41:14.676132 2026] [:error] [pid 8390:tid 8455] [client 172.213.240.210:11704] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ae1RGoGPtFK_i9p5yxQtTwAAAIQ"]
[Sun Apr 26 07:41:15.153369 2026] [:error] [pid 22573:tid 22617] [client 172.213.240.210:11606] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ae1RG3B3EmQlD4yKUt8lDgAAAYo"]
[Sun Apr 26 07:41:15.641172 2026] [:error] [pid 22573:tid 22623] [client 172.213.240.210:10953] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "ae1RG3B3EmQlD4yKUt8lEAAAAZA"]
[Sun Apr 26 07:41:16.124711 2026] [:error] [pid 22573:tid 22621] [client 172.213.240.210:11692] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ae1RHHB3EmQlD4yKUt8lEwAAAY4"]
[Sun Apr 26 07:41:16.592087 2026] [:error] [pid 22573:tid 22626] [client 172.213.240.210:11770] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ae1RHHB3EmQlD4yKUt8lFQAAAZM"]
[Sun Apr 26 07:41:17.069414 2026] [:error] [pid 16515:tid 16541] [client 172.213.240.210:11773] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ae1RHVtDrUmgHSvpuLzMaAAAAlc"]
[Sun Apr 26 07:41:17.632088 2026] [:error] [pid 13197:tid 13239] [client 172.213.240.210:11591] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ae1RHd3kktFKdSxTrBuVPwAAAsg"]
[Sun Apr 26 07:41:18.138703 2026] [:error] [pid 8385:tid 8438] [client 172.213.240.210:11729] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "ae1RHjOy7_J84Wx3-oxzyQAAAE4"]
[Sun Apr 26 07:41:18.617859 2026] [:error] [pid 13197:tid 13247] [client 172.213.240.210:11592] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "ae1RHt3kktFKdSxTrBuVQAAAAs8"]
[Sun Apr 26 07:41:19.112777 2026] [:error] [pid 22572:tid 22578] [client 172.213.240.210:11754] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "ae1RH9XOViWCFU-pZzB2QAAAAUA"]
[Sun Apr 26 07:41:19.589645 2026] [:error] [pid 8491:tid 8512] [client 172.213.240.210:11719] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "ae1RHyq7I7e6CJooQM2sEgAAAM0"]
[Sun Apr 26 07:41:20.070432 2026] [:error] [pid 22572:tid 22598] [client 172.213.240.210:11318] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "ae1RINXOViWCFU-pZzB2QgAAAVQ"]
[Sun Apr 26 07:41:20.542108 2026] [:error] [pid 22573:tid 22612] [client 172.213.240.210:11669] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "ae1RIHB3EmQlD4yKUt8lGAAAAYY"]
[Sun Apr 26 07:41:21.029691 2026] [:error] [pid 22573:tid 22608] [client 172.213.240.210:11756] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "ae1RIXB3EmQlD4yKUt8lGgAAAYI"]
[Sun Apr 26 07:41:21.503689 2026] [:error] [pid 8385:tid 8426] [client 172.213.240.210:10964] [client 172.213.240.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "ae1RITOy7_J84Wx3-oxzywAAAEI"]
[Sun Apr 26 10:08:16.267653 2026] [:error] [pid 8383:tid 8405] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Apr 26 10:08:16.512812 2026] [:error] [pid 8383:tid 8403] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Apr 26 10:08:16.934025 2026] [:error] [pid 8383:tid 8415] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Apr 26 10:08:17.228401 2026] [:error] [pid 8383:tid 8408] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sun Apr 26 10:08:17.437785 2026] [:error] [pid 8383:tid 8400] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 10:08:17.647689 2026] [:error] [pid 8383:tid 8412] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sun Apr 26 10:08:17.856304 2026] [:error] [pid 8383:tid 8402] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Sun Apr 26 10:08:18.649567 2026] [:error] [pid 8383:tid 8419] [client 20.151.116.9:37999] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 26 10:08:18.856391 2026] [:error] [pid 8383:tid 8415] [client 20.151.116.9:37999] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "ae1zktFa2S3EsATMdWPdWQAAABI"]
[Sun Apr 26 10:08:35.738543 2026] [:error] [pid 8390:tid 8470] [client 20.151.116.9:51273] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "ae1zo4GPtFK_i9p5yxRyigAAAJM"]
[Sun Apr 26 10:08:38.214570 2026] [:error] [pid 16515:tid 16521] [client 20.151.116.9:45043] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "ae1zpltDrUmgHSvpuLznIwAAAkM"]
[Sun Apr 26 10:08:40.150183 2026] [:error] [pid 22573:tid 22619] [client 20.151.116.9:45005] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "ae1zqHB3EmQlD4yKUt9WYwAAAYw"]
[Sun Apr 26 10:08:41.373880 2026] [:error] [pid 8390:tid 8457] [client 20.151.116.9:37972] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "ae1zqYGPtFK_i9p5yxRynQAAAIY"]
[Sun Apr 26 10:08:42.301220 2026] [:error] [pid 13197:tid 13235] [client 20.151.116.9:53437] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "ae1zqt3kktFKdSxTrBuk-QAAAsQ"]
[Sun Apr 26 10:08:43.165098 2026] [:error] [pid 8385:tid 8425] [client 20.151.116.9:37996] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "ae1zqzOy7_J84Wx3-oyJvwAAAEE"]
[Sun Apr 26 10:08:44.081108 2026] [:error] [pid 8385:tid 8437] [client 20.151.116.9:37983] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "ae1zrDOy7_J84Wx3-oyJwgAAAE0"]
[Sun Apr 26 10:08:44.723786 2026] [:error] [pid 16515:tid 16538] [client 20.151.116.9:59848] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "ae1zrFtDrUmgHSvpuLznMwAAAlQ"]
[Sun Apr 26 10:08:45.295677 2026] [:error] [pid 8385:tid 8448] [client 20.151.116.9:59852] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1zrTOy7_J84Wx3-oyJxQAAAFg"]
[Sun Apr 26 10:08:45.963311 2026] [:error] [pid 8385:tid 8438] [client 20.151.116.9:59870] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1zrTOy7_J84Wx3-oyJygAAAE4"]
[Sun Apr 26 10:08:46.494136 2026] [:error] [pid 13137:tid 13145] [client 20.151.116.9:38000] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1zrt0RB4J0o4h5neEKFQAAAgU"]
[Sun Apr 26 10:08:48.070408 2026] [:error] [pid 8390:tid 8458] [client 20.151.116.9:51303] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "ae1zsIGPtFK_i9p5yxRypQAAAIc"]
[Sun Apr 26 10:08:49.584937 2026] [:error] [pid 13197:tid 13256] [client 20.151.116.9:53377] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "ae1zsd3kktFKdSxTrBuk_AAAAtg"]
[Sun Apr 26 10:08:50.590950 2026] [:error] [pid 16515:tid 16539] [client 20.151.116.9:45033] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "ae1zsltDrUmgHSvpuLznQAAAAlU"]
[Sun Apr 26 10:08:51.828628 2026] [:error] [pid 22573:tid 22623] [client 20.151.116.9:58992] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "ae1zs3B3EmQlD4yKUt9WaAAAAZA"]
[Sun Apr 26 10:08:53.145153 2026] [:error] [pid 22573:tid 22619] [client 20.151.116.9:53416] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "ae1ztXB3EmQlD4yKUt9WbAAAAYw"]
[Sun Apr 26 10:08:54.236789 2026] [:error] [pid 8390:tid 8468] [client 20.151.116.9:52555] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "ae1ztoGPtFK_i9p5yxRyygAAAJE"]
[Sun Apr 26 10:08:55.389542 2026] [:error] [pid 8491:tid 8519] [client 20.151.116.9:52578] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "ae1ztyq7I7e6CJooQM3ACAAAANQ"]
[Sun Apr 26 10:08:56.246901 2026] [:error] [pid 8491:tid 8513] [client 20.151.116.9:45041] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "ae1zuCq7I7e6CJooQM3ADQAAAM4"]
[Sun Apr 26 10:08:57.730169 2026] [:error] [pid 22572:tid 22596] [client 20.151.116.9:52606] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "ae1zudXOViWCFU-pZzCeGwAAAVI"]
[Sun Apr 26 10:09:00.078861 2026] [:error] [pid 8390:tid 8471] [client 20.151.116.9:59002] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "ae1zvIGPtFK_i9p5yxRy3gAAAJQ"]
[Sun Apr 26 10:09:01.353363 2026] [:error] [pid 22573:tid 22613] [client 20.151.116.9:51299] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "ae1zvXB3EmQlD4yKUt9WcQAAAYc"]
[Sun Apr 26 10:09:02.147873 2026] [:error] [pid 22572:tid 22596] [client 20.151.116.9:52591] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "ae1zvtXOViWCFU-pZzCeKAAAAVI"]
[Sun Apr 26 10:09:02.913070 2026] [:error] [pid 16515:tid 16535] [client 20.151.116.9:52564] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "ae1zvltDrUmgHSvpuLznSgAAAlE"]
[Sun Apr 26 10:09:03.584249 2026] [:error] [pid 8390:tid 8472] [client 20.151.116.9:44999] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ae1zv4GPtFK_i9p5yxRy6QAAAJU"]
[Sun Apr 26 10:09:04.867380 2026] [:error] [pid 22572:tid 22580] [client 20.151.116.9:59842] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ae1zwNXOViWCFU-pZzCeLwAAAUI"]
[Sun Apr 26 10:09:05.568276 2026] [:error] [pid 16574:tid 16633] [client 20.151.116.9:52599] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ae1zwX5MsX8wRQr99nYLEgAAA1M"]
[Sun Apr 26 10:09:06.305647 2026] [:error] [pid 22572:tid 22584] [client 20.151.116.9:45018] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ae1zwtXOViWCFU-pZzCeMQAAAUY"]
[Sun Apr 26 10:09:07.182584 2026] [:error] [pid 13137:tid 13157] [client 20.151.116.9:59849] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "ae1zw90RB4J0o4h5neEKKQAAAhA"]
[Sun Apr 26 10:09:07.883678 2026] [:error] [pid 16515:tid 16520] [client 20.151.116.9:45025] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "ae1zw1tDrUmgHSvpuLznUQAAAkI"]
[Sun Apr 26 10:09:08.823050 2026] [:error] [pid 22573:tid 22619] [client 20.151.116.9:59858] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "ae1zxHB3EmQlD4yKUt9WdwAAAYw"]
[Sun Apr 26 10:09:10.502031 2026] [:error] [pid 8390:tid 8465] [client 20.151.116.9:44513] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "ae1zxoGPtFK_i9p5yxRy-gAAAI4"]
[Sun Apr 26 10:09:12.532197 2026] [:error] [pid 13137:tid 13141] [client 20.151.116.9:37964] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ae1zyN0RB4J0o4h5neEKLwAAAgE"]
[Sun Apr 26 10:09:13.708870 2026] [:error] [pid 13197:tid 13237] [client 20.151.116.9:44495] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ae1zyd3kktFKdSxTrBulCQAAAsY"]
[Sun Apr 26 10:09:15.868703 2026] [:error] [pid 8390:tid 8469] [client 20.151.116.9:37977] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ae1zy4GPtFK_i9p5yxRzGgAAAJI"]
[Sun Apr 26 10:09:17.730859 2026] [:error] [pid 8390:tid 8472] [client 20.151.116.9:58986] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "ae1zzYGPtFK_i9p5yxRzIQAAAJU"]
[Sun Apr 26 10:09:19.189071 2026] [:error] [pid 22572:tid 22602] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Sun Apr 26 10:09:19.496631 2026] [:error] [pid 22572:tid 22585] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Sun Apr 26 10:09:19.715714 2026] [:error] [pid 22572:tid 22595] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Sun Apr 26 10:09:20.043424 2026] [:error] [pid 22572:tid 22587] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Sun Apr 26 10:09:21.312452 2026] [:error] [pid 22572:tid 22587] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sun Apr 26 10:09:21.636028 2026] [:error] [pid 22572:tid 22584] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sun Apr 26 10:09:21.848976 2026] [:error] [pid 22572:tid 22594] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Apr 26 10:09:22.575801 2026] [:error] [pid 22572:tid 22596] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Apr 26 10:09:22.830446 2026] [:error] [pid 22572:tid 22585] [client 20.151.116.9:52583] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Apr 26 10:09:23.039143 2026] [:error] [pid 22572:tid 22595] [client 20.151.116.9:52583] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1z09XOViWCFU-pZzCeWgAAAVE"]
[Sun Apr 26 10:09:24.180628 2026] [:error] [pid 22572:tid 22598] [client 20.151.116.9:44487] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1z1NXOViWCFU-pZzCeXAAAAVQ"]
[Sun Apr 26 10:09:24.895825 2026] [:error] [pid 22572:tid 22594] [client 20.151.116.9:59886] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1z1NXOViWCFU-pZzCeZQAAAVA"]
[Sun Apr 26 10:09:26.417967 2026] [:error] [pid 22572:tid 22591] [client 20.151.116.9:38005] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "ae1z1tXOViWCFU-pZzCecQAAAU0"]
[Sun Apr 26 10:09:27.742156 2026] [:error] [pid 13137:tid 13163] [client 20.151.116.9:45055] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ae1z190RB4J0o4h5neEKPAAAAhY"]
[Sun Apr 26 10:09:29.433004 2026] [:error] [pid 22573:tid 22631] [client 20.151.116.9:37971] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ae1z2XB3EmQlD4yKUt9WkwAAAZg"]
[Sun Apr 26 10:09:30.319282 2026] [:error] [pid 16515:tid 16533] [client 20.151.116.9:52579] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ae1z2ltDrUmgHSvpuLznYQAAAk8"]
[Sun Apr 26 10:09:32.803197 2026] [:error] [pid 8390:tid 8464] [client 20.151.116.9:58999] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ae1z3IGPtFK_i9p5yxRzYAAAAI0"]
[Sun Apr 26 10:09:34.274603 2026] [:error] [pid 8390:tid 8456] [client 20.151.116.9:59007] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z3oGPtFK_i9p5yxRzdQAAAIU"]
[Sun Apr 26 10:09:35.950399 2026] [:error] [pid 8390:tid 8453] [client 20.151.116.9:51292] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z34GPtFK_i9p5yxRzzAAAAII"]
[Sun Apr 26 10:09:38.515872 2026] [:error] [pid 8390:tid 8470] [client 20.151.116.9:53413] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z4oGPtFK_i9p5yxRz-gAAAJM"]
[Sun Apr 26 10:09:39.463589 2026] [:error] [pid 16515:tid 16524] [client 20.151.116.9:58979] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z41tDrUmgHSvpuLznZAAAAkY"]
[Sun Apr 26 10:09:40.156641 2026] [:error] [pid 8390:tid 8460] [client 20.151.116.9:37953] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z5IGPtFK_i9p5yxR0CAAAAIk"]
[Sun Apr 26 10:09:40.627208 2026] [:error] [pid 22572:tid 22592] [client 20.151.116.9:53408] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z5NXOViWCFU-pZzCeiwAAAU4"]
[Sun Apr 26 10:09:41.635979 2026] [:error] [pid 16515:tid 16541] [client 20.151.116.9:59840] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z5VtDrUmgHSvpuLznZgAAAlc"]
[Sun Apr 26 10:09:42.087202 2026] [:error] [pid 8385:tid 8443] [client 20.151.116.9:44520] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z5jOy7_J84Wx3-oyJ8QAAAFM"]
[Sun Apr 26 10:09:42.834494 2026] [:error] [pid 8390:tid 8472] [client 20.151.116.9:37939] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ae1z5oGPtFK_i9p5yxR0DwAAAJU"]
[Sun Apr 26 10:09:43.515873 2026] [:error] [pid 22573:tid 22615] [client 20.151.116.9:51270] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z53B3EmQlD4yKUt9WngAAAYg"]
[Sun Apr 26 10:09:44.331749 2026] [:error] [pid 22573:tid 22619] [client 20.151.116.9:52604] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z6HB3EmQlD4yKUt9WoQAAAYw"]
[Sun Apr 26 10:09:45.173392 2026] [:error] [pid 8390:tid 8451] [client 20.151.116.9:45011] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z6YGPtFK_i9p5yxR0FwAAAIA"]
[Sun Apr 26 10:09:45.764134 2026] [:error] [pid 8390:tid 8462] [client 20.151.116.9:58961] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "ae1z6YGPtFK_i9p5yxR0GwAAAIs"]
[Sun Apr 26 10:09:46.505133 2026] [:error] [pid 13197:tid 13233] [client 20.151.116.9:58956] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ae1z6t3kktFKdSxTrBulEwAAAsI"]
[Sun Apr 26 10:09:47.332465 2026] [:error] [pid 16515:tid 16542] [client 20.151.116.9:37981] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ae1z61tDrUmgHSvpuLznbAAAAlg"]
[Sun Apr 26 10:09:48.125121 2026] [:error] [pid 22573:tid 22616] [client 20.151.116.9:37924] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ae1z7HB3EmQlD4yKUt9WqAAAAYk"]
[Sun Apr 26 10:09:49.145725 2026] [:error] [pid 22573:tid 22628] [client 20.151.116.9:58973] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "ae1z7XB3EmQlD4yKUt9WqgAAAZU"]
[Sun Apr 26 10:09:49.676950 2026] [:error] [pid 8390:tid 8462] [client 20.151.116.9:52561] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae1z7YGPtFK_i9p5yxR0LgAAAIs"]
[Sun Apr 26 10:09:50.254833 2026] [:error] [pid 8385:tid 8442] [client 20.151.116.9:51268] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae1z7jOy7_J84Wx3-oyJ-QAAAFI"]
[Sun Apr 26 10:09:51.091276 2026] [:error] [pid 22572:tid 22587] [client 20.151.116.9:40969] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae1z79XOViWCFU-pZzCenAAAAUk"]
[Sun Apr 26 10:09:51.523278 2026] [:error] [pid 22573:tid 22613] [client 20.151.116.9:60354] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae1z73B3EmQlD4yKUt9WrAAAAYc"]
[Sun Apr 26 10:09:51.985646 2026] [:error] [pid 8385:tid 8431] [client 20.151.116.9:37957] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1z7zOy7_J84Wx3-oyJ_QAAAEc"]
[Sun Apr 26 10:09:52.789670 2026] [:error] [pid 13137:tid 13159] [client 20.151.116.9:58964] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1z8N0RB4J0o4h5neEKTAAAAhI"]
[Sun Apr 26 10:09:53.698447 2026] [:error] [pid 22573:tid 22619] [client 20.151.116.9:51276] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1z8XB3EmQlD4yKUt9WsAAAAYw"]
[Sun Apr 26 10:09:54.165390 2026] [:error] [pid 13137:tid 13151] [client 20.151.116.9:51290] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "ae1z8t0RB4J0o4h5neEKTQAAAgo"]
[Sun Apr 26 10:09:54.666058 2026] [:error] [pid 13137:tid 13153] [client 20.151.116.9:45010] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ae1z8t0RB4J0o4h5neEKUQAAAgw"]
[Sun Apr 26 10:09:55.251200 2026] [:error] [pid 8390:tid 8472] [client 20.151.116.9:36668] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ae1z84GPtFK_i9p5yxR0QwAAAJU"]
[Sun Apr 26 10:09:55.752677 2026] [:error] [pid 8390:tid 8452] [client 20.151.116.9:53381] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ae1z84GPtFK_i9p5yxR0SAAAAIE"]
[Sun Apr 26 10:09:56.202192 2026] [:error] [pid 8385:tid 8443] [client 20.151.116.9:51286] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ae1z9DOy7_J84Wx3-oyKAgAAAFM"]
[Sun Apr 26 10:09:56.875543 2026] [:error] [pid 22572:tid 22584] [client 20.151.116.9:52580] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z9NXOViWCFU-pZzCeoQAAAUY"]
[Sun Apr 26 10:09:57.318351 2026] [:error] [pid 22572:tid 22583] [client 20.151.116.9:38014] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z9dXOViWCFU-pZzCeowAAAUU"]
[Sun Apr 26 10:09:57.957837 2026] [:error] [pid 22573:tid 22616] [client 20.151.116.9:37952] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z9XB3EmQlD4yKUt9WtQAAAYk"]
[Sun Apr 26 10:09:58.733108 2026] [:error] [pid 22573:tid 22613] [client 20.151.116.9:37994] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "ae1z9nB3EmQlD4yKUt9WuAAAAYc"]
[Sun Apr 26 10:09:59.499867 2026] [:error] [pid 8390:tid 8472] [client 20.151.116.9:60361] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ae1z94GPtFK_i9p5yxR0TAAAAJU"]
[Sun Apr 26 10:10:00.227580 2026] [:error] [pid 8390:tid 8462] [client 20.151.116.9:44531] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ae1z-IGPtFK_i9p5yxR0TgAAAIs"]
[Sun Apr 26 10:10:00.853575 2026] [:error] [pid 16515:tid 16535] [client 20.151.116.9:44517] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ae1z-FtDrUmgHSvpuLznlgAAAlE"]
[Sun Apr 26 10:10:01.380616 2026] [:error] [pid 13137:tid 13158] [client 20.151.116.9:52545] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "ae1z-d0RB4J0o4h5neEKXwAAAhE"]
[Sun Apr 26 10:10:01.909939 2026] [:error] [pid 8390:tid 8469] [client 20.151.116.9:59900] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "ae1z-YGPtFK_i9p5yxR0UQAAAJI"]
[Sun Apr 26 10:10:02.386374 2026] [:error] [pid 16515:tid 16534] [client 20.151.116.9:60355] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "ae1z-ltDrUmgHSvpuLznmgAAAlA"]
[Sun Apr 26 10:10:03.529885 2026] [:error] [pid 13137:tid 13164] [client 20.151.116.9:58945] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "ae1z-90RB4J0o4h5neEKYQAAAhc"]
[Sun Apr 26 10:10:04.101014 2026] [:error] [pid 22572:tid 22578] [client 20.151.116.9:45050] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "ae1z_NXOViWCFU-pZzCeswAAAUA"]
[Sun Apr 26 10:10:04.956945 2026] [:error] [pid 8491:tid 8520] [client 20.151.116.9:40974] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "ae1z_Cq7I7e6CJooQM3APwAAANU"]
[Sun Apr 26 10:10:05.622494 2026] [:error] [pid 8491:tid 8507] [client 20.151.116.9:51317] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "ae1z_Sq7I7e6CJooQM3AQAAAAMg"]
[Sun Apr 26 10:10:06.072838 2026] [:error] [pid 22573:tid 22607] [client 20.151.116.9:58995] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "ae1z_nB3EmQlD4yKUt9WyQAAAYE"]
[Sun Apr 26 10:10:06.511789 2026] [:error] [pid 16515:tid 16523] [client 20.151.116.9:53427] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "ae1z_ltDrUmgHSvpuLznoAAAAkU"]
[Sun Apr 26 10:10:07.051974 2026] [:error] [pid 16515:tid 16531] [client 20.151.116.9:52552] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae1z_1tDrUmgHSvpuLznowAAAk0"]
[Sun Apr 26 10:10:07.570090 2026] [:error] [pid 16515:tid 16532] [client 20.151.116.9:52484] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae1z_1tDrUmgHSvpuLznpgAAAk4"]
[Sun Apr 26 10:10:08.148466 2026] [:error] [pid 22573:tid 22627] [client 20.151.116.9:59882] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae10AHB3EmQlD4yKUt9WzwAAAZQ"]
[Sun Apr 26 10:10:08.817679 2026] [:error] [pid 8491:tid 8500] [client 20.151.116.9:51300] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ae10ACq7I7e6CJooQM3ARAAAAME"]
[Sun Apr 26 10:10:10.093617 2026] [:error] [pid 13197:tid 13248] [client 20.151.116.9:53414] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae10At3kktFKdSxTrBulGwAAAtA"]
[Sun Apr 26 10:10:10.710170 2026] [:error] [pid 13197:tid 13254] [client 20.151.116.9:44507] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae10At3kktFKdSxTrBulHQAAAtY"]
[Sun Apr 26 10:10:11.595751 2026] [:error] [pid 22573:tid 22618] [client 20.151.116.9:52601] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae10A3B3EmQlD4yKUt9W2AAAAYs"]
[Sun Apr 26 10:10:12.886739 2026] [:error] [pid 13197:tid 13237] [client 20.151.116.9:51296] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "ae10BN3kktFKdSxTrBulJQAAAsY"]
[Sun Apr 26 10:10:15.763738 2026] [:error] [pid 8491:tid 8515] [client 20.151.116.9:45052] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ae10Byq7I7e6CJooQM3AUQAAANA"]
[Sun Apr 26 10:10:17.444082 2026] [:error] [pid 8390:tid 8454] [client 20.151.116.9:44527] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ae10CYGPtFK_i9p5yxR0XgAAAIM"]
[Sun Apr 26 10:10:18.944099 2026] [:error] [pid 8390:tid 8453] [client 20.151.116.9:58954] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ae10CoGPtFK_i9p5yxR0ZAAAAII"]
[Sun Apr 26 10:10:19.753641 2026] [:error] [pid 8390:tid 8473] [client 20.151.116.9:45054] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "ae10C4GPtFK_i9p5yxR0ZQAAAJY"]
[Sun Apr 26 10:10:21.012935 2026] [:error] [pid 8383:tid 8406] [client 20.151.116.9:44511] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae10DdFa2S3EsATMdWPdgwAAAAk"]
[Sun Apr 26 10:10:21.937109 2026] [:error] [pid 16515:tid 16520] [client 20.151.116.9:51318] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "ae10DVtDrUmgHSvpuLznzgAAAkI"]
[Sun Apr 26 10:10:22.934753 2026] [:error] [pid 16515:tid 16528] [client 20.151.116.9:51294] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Apr 26 10:10:23.144782 2026] [:error] [pid 16515:tid 16540] [client 20.151.116.9:51294] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 26 10:10:23.372266 2026] [:error] [pid 16515:tid 16537] [client 20.151.116.9:51294] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Apr 26 10:10:23.599624 2026] [:error] [pid 16515:tid 16538] [client 20.151.116.9:51294] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sun Apr 26 10:10:24.657423 2026] [:error] [pid 16515:tid 16523] [client 20.151.116.9:51294] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Apr 26 10:10:24.867824 2026] [:error] [pid 16515:tid 16535] [client 20.151.116.9:51294] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sun Apr 26 10:10:25.576196 2026] [:error] [pid 16515:tid 16529] [client 20.151.116.9:51294] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae10EVtDrUmgHSvpuLzn4QAAAks"]
[Sun Apr 26 10:10:26.656942 2026] [:error] [pid 8385:tid 8442] [client 20.151.116.9:44506] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae10EjOy7_J84Wx3-oyKHQAAAFI"]
[Sun Apr 26 10:10:27.349554 2026] [:error] [pid 13197:tid 13241] [client 20.151.116.9:52590] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae10E93kktFKdSxTrBulLwAAAso"]
[Sun Apr 26 10:10:28.163341 2026] [:error] [pid 8491:tid 8508] [client 20.151.116.9:58982] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "ae10FCq7I7e6CJooQM3AVwAAAMk"]
[Sun Apr 26 10:10:29.522385 2026] [:error] [pid 8385:tid 8431] [client 20.151.116.9:59841] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "ae10FTOy7_J84Wx3-oyKIQAAAEc"]
[Sun Apr 26 10:10:30.617132 2026] [:error] [pid 8385:tid 8433] [client 20.151.116.9:58926] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "ae10FjOy7_J84Wx3-oyKJAAAAEk"]
[Sun Apr 26 10:10:31.425400 2026] [:error] [pid 13197:tid 13250] [client 20.151.116.9:45024] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "ae10F93kktFKdSxTrBulNgAAAtI"]
[Sun Apr 26 10:10:32.345007 2026] [:error] [pid 8390:tid 8475] [client 20.151.116.9:51284] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "ae10GIGPtFK_i9p5yxR0hgAAAJg"]
[Sun Apr 26 10:10:33.351652 2026] [:error] [pid 22572:tid 22580] [client 20.151.116.9:60387] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae10GdXOViWCFU-pZzCexAAAAUI"]
[Sun Apr 26 10:10:34.144877 2026] [:error] [pid 8383:tid 8404] [client 20.151.116.9:37989] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae10GtFa2S3EsATMdWPdigAAAAc"]
[Sun Apr 26 10:10:35.163140 2026] [:error] [pid 22573:tid 22631] [client 20.151.116.9:37982] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae10G3B3EmQlD4yKUt9XCAAAAZg"]
[Sun Apr 26 10:10:35.970150 2026] [:error] [pid 13197:tid 13242] [client 20.151.116.9:59874] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ae10G93kktFKdSxTrBulPgAAAss"]
[Sun Apr 26 10:10:36.507438 2026] [:error] [pid 22572:tid 22588] [client 20.151.116.9:53397] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "ae10HNXOViWCFU-pZzCeywAAAUo"]
[Sun Apr 26 10:10:37.669989 2026] [:error] [pid 8390:tid 8473] [client 20.151.116.9:59874] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "ae10HYGPtFK_i9p5yxR0kAAAAJY"]
[Sun Apr 26 10:10:38.236100 2026] [:error] [pid 13137:tid 13165] [client 20.151.116.9:58991] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "ae10Ht0RB4J0o4h5neEKeQAAAhg"]
[Sun Apr 26 10:10:39.136288 2026] [:error] [pid 13137:tid 13146] [client 20.151.116.9:53400] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "ae10H90RB4J0o4h5neEKfQAAAgY"]
[Sun Apr 26 10:10:40.270383 2026] [:error] [pid 13197:tid 13250] [client 20.151.116.9:51321] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae10IN3kktFKdSxTrBulQQAAAtI"]
[Sun Apr 26 10:10:41.803141 2026] [:error] [pid 13137:tid 13156] [client 20.151.116.9:58998] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae10Id0RB4J0o4h5neEKgwAAAg8"]
[Sun Apr 26 10:10:43.784864 2026] [:error] [pid 16574:tid 16612] [client 20.151.116.9:53438] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae10I35MsX8wRQr99nYLOgAAA0g"]
[Sun Apr 26 10:10:44.596468 2026] [:error] [pid 13137:tid 13157] [client 20.151.116.9:58996] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ae10JN0RB4J0o4h5neEKiAAAAhA"]
[Sun Apr 26 10:10:45.256720 2026] [:error] [pid 13197:tid 13235] [client 20.151.116.9:59888] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ae10Jd3kktFKdSxTrBulSgAAAsQ"]
[Sun Apr 26 10:10:46.496948 2026] [:error] [pid 8491:tid 8513] [client 20.151.116.9:44540] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ae10Jiq7I7e6CJooQM3AdAAAAM4"]
[Sun Apr 26 10:10:47.742939 2026] [:error] [pid 8390:tid 8467] [client 20.151.116.9:44518] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ae10J4GPtFK_i9p5yxR0nwAAAJA"]
[Sun Apr 26 10:10:48.541060 2026] [:error] [pid 8390:tid 8460] [client 20.151.116.9:51264] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "ae10KIGPtFK_i9p5yxR0pQAAAIk"]
[Sun Apr 26 10:10:49.288640 2026] [:error] [pid 22573:tid 22620] [client 20.151.116.9:53429] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "ae10KXB3EmQlD4yKUt9XHwAAAY0"]
[Sun Apr 26 10:10:50.154460 2026] [:error] [pid 16515:tid 16542] [client 20.151.116.9:53404] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "ae10KltDrUmgHSvpuLzn7AAAAlg"]
[Sun Apr 26 10:10:51.004032 2026] [:error] [pid 8390:tid 8464] [client 20.151.116.9:51267] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "ae10K4GPtFK_i9p5yxR0rgAAAI0"]
[Sun Apr 26 10:10:51.740778 2026] [:error] [pid 13197:tid 13242] [client 20.151.116.9:37915] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "ae10K93kktFKdSxTrBulWAAAAss"]
[Sun Apr 26 10:10:53.445686 2026] [:error] [pid 13137:tid 13148] [client 20.151.116.9:53404] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "ae10Ld0RB4J0o4h5neEKjAAAAgg"]
[Sun Apr 26 10:10:54.875334 2026] [:error] [pid 8390:tid 8458] [client 20.151.116.9:59878] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "ae10LoGPtFK_i9p5yxR0wgAAAIc"]
[Sun Apr 26 10:10:56.279797 2026] [:error] [pid 8383:tid 8403] [client 20.151.116.9:37945] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "ae10MNFa2S3EsATMdWPdlAAAAAY"]
[Sun Apr 26 10:10:58.939582 2026] [:error] [pid 8390:tid 8471] [client 20.151.116.9:37960] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byp.php"] [unique_id "ae10MoGPtFK_i9p5yxR0zgAAAJQ"]
[Sun Apr 26 10:11:00.522673 2026] [:error] [pid 22573:tid 22622] [client 20.151.116.9:37993] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae10NHB3EmQlD4yKUt9XJgAAAY8"]
[Sun Apr 26 10:11:01.480702 2026] [:error] [pid 16574:tid 16605] [client 20.151.116.9:59859] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae10NX5MsX8wRQr99nYLTgAAA0E"]
[Sun Apr 26 10:11:04.206732 2026] [:error] [pid 16515:tid 16533] [client 20.151.116.9:51326] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae10OFtDrUmgHSvpuLzoBAAAAk8"]
[Sun Apr 26 10:11:05.308860 2026] [:error] [pid 13137:tid 13164] [client 20.151.116.9:51281] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "ae10Od0RB4J0o4h5neEKlwAAAhc"]
[Sun Apr 26 10:11:07.286867 2026] [:error] [pid 16515:tid 16527] [client 20.151.116.9:52569] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ae10O1tDrUmgHSvpuLzoCwAAAkk"]
[Sun Apr 26 10:11:09.299483 2026] [:error] [pid 8390:tid 8452] [client 20.151.116.9:37970] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ae10PYGPtFK_i9p5yxR04gAAAIE"]
[Sun Apr 26 10:11:10.501542 2026] [:error] [pid 22572:tid 22580] [client 20.151.116.9:52544] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ae10PtXOViWCFU-pZzCe3AAAAUI"]
[Sun Apr 26 10:11:12.206524 2026] [:error] [pid 16515:tid 16526] [client 20.151.116.9:59857] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/index.php"] [unique_id "ae10QFtDrUmgHSvpuLzoDQAAAkg"]
[Sun Apr 26 10:11:14.313424 2026] [:error] [pid 8491:tid 8503] [client 20.151.116.9:51287] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae10Qiq7I7e6CJooQM3AlAAAAMQ"]
[Sun Apr 26 10:11:15.210896 2026] [:error] [pid 13197:tid 13238] [client 20.151.116.9:59003] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae10Q93kktFKdSxTrBulaQAAAsc"]
[Sun Apr 26 10:11:15.897200 2026] [:error] [pid 13197:tid 13249] [client 20.151.116.9:44992] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae10Q93kktFKdSxTrBulawAAAtE"]
[Sun Apr 26 10:11:16.580554 2026] [:error] [pid 22573:tid 22623] [client 20.151.116.9:53389] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "ae10RHB3EmQlD4yKUt9XLgAAAZA"]
[Sun Apr 26 10:11:17.294000 2026] [:error] [pid 16574:tid 16625] [client 20.151.116.9:59000] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae10RX5MsX8wRQr99nYLYgAAA08"]
[Sun Apr 26 10:11:18.119930 2026] [:error] [pid 8383:tid 8416] [client 20.151.116.9:58975] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae10RtFa2S3EsATMdWPdpAAAABM"]
[Sun Apr 26 10:11:19.001797 2026] [:error] [pid 8491:tid 8505] [client 20.151.116.9:45046] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae10Ryq7I7e6CJooQM3AowAAAMY"]
[Sun Apr 26 10:11:19.738894 2026] [:error] [pid 8390:tid 8460] [client 20.151.116.9:59889] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/about.php"] [unique_id "ae10R4GPtFK_i9p5yxR06AAAAIk"]
[Sun Apr 26 10:11:20.458300 2026] [:error] [pid 22572:tid 22587] [client 20.151.116.9:44481] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "ae10SNXOViWCFU-pZzCe6gAAAUk"]
[Sun Apr 26 10:11:21.273507 2026] [:error] [pid 13197:tid 13236] [client 20.151.116.9:38001] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "ae10Sd3kktFKdSxTrBuldQAAAsU"]
[Sun Apr 26 10:11:22.845377 2026] [:error] [pid 8491:tid 8507] [client 20.151.116.9:59894] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "ae10Siq7I7e6CJooQM3AqgAAAMg"]
[Sun Apr 26 10:11:23.648110 2026] [:error] [pid 16574:tid 16611] [client 20.151.116.9:37906] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gmo.php"] [unique_id "ae10S35MsX8wRQr99nYLcQAAA0c"]
[Sun Apr 26 10:11:24.249939 2026] [:error] [pid 16574:tid 16604] [client 20.151.116.9:37978] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ae10TH5MsX8wRQr99nYLcwAAA0A"]
[Sun Apr 26 10:11:25.490041 2026] [:error] [pid 13197:tid 13246] [client 20.151.116.9:59869] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "ae10Td3kktFKdSxTrBulhgAAAs4"]
[Sun Apr 26 10:11:27.632537 2026] [:error] [pid 8385:tid 8430] [client 20.151.116.9:52490] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "ae10TzOy7_J84Wx3-oyKQQAAAEY"]
[Sun Apr 26 10:11:31.753775 2026] [:error] [pid 22572:tid 22587] [client 20.151.116.9:22211] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ae10U9XOViWCFU-pZzCe9AAAAUk"]
[Sun Apr 26 10:11:36.431170 2026] [:error] [pid 16574:tid 16627] [client 20.151.116.9:53382] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Sun Apr 26 10:11:37.700732 2026] [:error] [pid 16574:tid 16616] [client 20.151.116.9:53382] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Apr 26 10:11:38.565365 2026] [:error] [pid 16574:tid 16614] [client 20.151.116.9:53382] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "ae10Wn5MsX8wRQr99nYLkQAAA0o"]
[Sun Apr 26 10:11:42.201749 2026] [:error] [pid 16515:tid 16522] [client 20.151.116.9:51288] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "ae10XltDrUmgHSvpuLzoHwAAAkQ"]
[Sun Apr 26 10:11:43.966826 2026] [:error] [pid 22572:tid 22578] [client 20.151.116.9:58978] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "ae10X9XOViWCFU-pZzCe_AAAAUA"]
[Sun Apr 26 10:11:44.750038 2026] [:error] [pid 13137:tid 13158] [client 20.151.116.9:59868] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "ae10YN0RB4J0o4h5neEKvQAAAhE"]
[Sun Apr 26 10:11:46.040977 2026] [:error] [pid 8491:tid 8509] [client 20.151.116.9:59864] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae10Yiq7I7e6CJooQM3AtQAAAMo"]
[Sun Apr 26 10:11:47.058162 2026] [:error] [pid 8383:tid 8418] [client 20.151.116.9:44533] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae10Y9Fa2S3EsATMdWPdvgAAABU"]
[Sun Apr 26 10:11:47.854107 2026] [:error] [pid 8390:tid 8470] [client 20.151.116.9:51302] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae10Y4GPtFK_i9p5yxR1OAAAAJM"]
[Sun Apr 26 10:11:48.533673 2026] [:error] [pid 22573:tid 22609] [client 20.151.116.9:58984] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "ae10ZHB3EmQlD4yKUt9XWgAAAYM"]
[Sun Apr 26 10:11:49.246605 2026] [:error] [pid 22573:tid 22621] [client 20.151.116.9:45040] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae10ZXB3EmQlD4yKUt9XXAAAAY4"]
[Sun Apr 26 10:11:50.321296 2026] [:error] [pid 13137:tid 13164] [client 20.151.116.9:44538] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae10Zt0RB4J0o4h5neEKxQAAAhc"]
[Sun Apr 26 10:11:51.266634 2026] [:error] [pid 22573:tid 22622] [client 20.151.116.9:37986] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae10Z3B3EmQlD4yKUt9XagAAAY8"]
[Sun Apr 26 10:11:51.939950 2026] [:error] [pid 8390:tid 8465] [client 20.151.116.9:52562] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ae10Z4GPtFK_i9p5yxR1QQAAAI4"]
[Sun Apr 26 10:11:52.740136 2026] [:error] [pid 16515:tid 16541] [client 20.151.116.9:37974] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae10aFtDrUmgHSvpuLzoLwAAAlc"]
[Sun Apr 26 10:11:53.636263 2026] [:error] [pid 22572:tid 22597] [client 20.151.116.9:45029] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae10adXOViWCFU-pZzCfBwAAAVM"]
[Sun Apr 26 10:11:54.258688 2026] [:error] [pid 13137:tid 13159] [client 20.151.116.9:37961] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae10at0RB4J0o4h5neEKygAAAhI"]
[Sun Apr 26 10:11:55.950871 2026] [:error] [pid 22572:tid 22578] [client 20.151.116.9:40960] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "ae10a9XOViWCFU-pZzCfDAAAAUA"]
[Sun Apr 26 10:11:56.797401 2026] [:error] [pid 8491:tid 8519] [client 20.151.116.9:45013] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ae10bCq7I7e6CJooQM3AvwAAANQ"]
[Sun Apr 26 10:11:58.121968 2026] [:error] [pid 8390:tid 8458] [client 20.151.116.9:36612] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ae10boGPtFK_i9p5yxR1UgAAAIc"]
[Sun Apr 26 10:11:58.919038 2026] [:error] [pid 16574:tid 16639] [client 20.151.116.9:53430] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ae10bn5MsX8wRQr99nYLmAAAA1Y"]
[Sun Apr 26 10:11:59.832631 2026] [:error] [pid 22572:tid 22585] [client 20.151.116.9:41003] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ae10b9XOViWCFU-pZzCfFwAAAUc"]
[Sun Apr 26 10:12:02.026825 2026] [:error] [pid 22572:tid 22589] [client 20.151.116.9:52594] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ae10ctXOViWCFU-pZzCfJQAAAUs"]
[Sun Apr 26 10:12:03.082754 2026] [:error] [pid 16515:tid 16532] [client 20.151.116.9:45049] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ae10c1tDrUmgHSvpuLzoOgAAAk4"]
[Sun Apr 26 10:12:03.699575 2026] [:error] [pid 16515:tid 16533] [client 20.151.116.9:59880] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ae10c1tDrUmgHSvpuLzoPQAAAk8"]
[Sun Apr 26 10:12:05.257023 2026] [:error] [pid 22572:tid 22590] [client 20.151.116.9:53417] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ae10ddXOViWCFU-pZzCfKAAAAUw"]
[Sun Apr 26 10:12:07.469801 2026] [:error] [pid 22573:tid 22628] [client 20.151.116.9:59902] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ae10d3B3EmQlD4yKUt9XgwAAAZU"]
[Sun Apr 26 10:12:09.145328 2026] [:error] [pid 8383:tid 8408] [client 20.151.116.9:45000] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae10edFa2S3EsATMdWPdwwAAAAs"]
[Sun Apr 26 10:12:10.601611 2026] [:error] [pid 22573:tid 22607] [client 20.151.116.9:51275] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae10enB3EmQlD4yKUt9XjQAAAYE"]
[Sun Apr 26 10:12:12.209990 2026] [:error] [pid 8390:tid 8455] [client 20.151.116.9:45031] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae10fIGPtFK_i9p5yxR1iwAAAIQ"]
[Sun Apr 26 10:12:14.696183 2026] [:error] [pid 8390:tid 8457] [client 20.151.116.9:37894] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/admin.php"] [unique_id "ae10foGPtFK_i9p5yxR1mQAAAIY"]
[Sun Apr 26 10:12:16.610041 2026] [:error] [pid 8383:tid 8413] [client 20.151.116.9:52549] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae10gNFa2S3EsATMdWPdxwAAABA"]
[Sun Apr 26 10:12:18.519033 2026] [:error] [pid 8385:tid 8444] [client 20.151.116.9:44485] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae10gjOy7_J84Wx3-oyKXgAAAFQ"]
[Sun Apr 26 10:12:19.426163 2026] [:error] [pid 16515:tid 16529] [client 20.151.116.9:44503] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae10g1tDrUmgHSvpuLzodQAAAks"]
[Sun Apr 26 10:12:20.185293 2026] [:error] [pid 8390:tid 8454] [client 20.151.116.9:60366] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae10hIGPtFK_i9p5yxR1qwAAAIM"]
[Sun Apr 26 10:12:21.090155 2026] [:error] [pid 8390:tid 8460] [client 20.151.116.9:37890] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae10hYGPtFK_i9p5yxR1sgAAAIk"]
[Sun Apr 26 10:12:22.448150 2026] [:error] [pid 8390:tid 8469] [client 20.151.116.9:44543] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae10hoGPtFK_i9p5yxR1uwAAAJI"]
[Sun Apr 26 10:12:24.213384 2026] [:error] [pid 13197:tid 13252] [client 20.151.116.9:45006] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae10iN3kktFKdSxTrBulogAAAtQ"]
[Sun Apr 26 10:12:25.731597 2026] [:error] [pid 22573:tid 22612] [client 20.151.116.9:22233] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ae10iXB3EmQlD4yKUt9XnwAAAYY"]
[Sun Apr 26 10:12:28.855309 2026] [:error] [pid 8491:tid 8512] [client 20.151.116.9:58893] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae10jCq7I7e6CJooQM3A7wAAAM0"]
[Sun Apr 26 10:12:30.311778 2026] [:error] [pid 8390:tid 8459] [client 20.151.116.9:60381] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae10joGPtFK_i9p5yxR13gAAAIg"]
[Sun Apr 26 10:12:31.948655 2026] [:error] [pid 13197:tid 13235] [client 20.151.116.9:40990] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae10j93kktFKdSxTrBulqwAAAsQ"]
[Sun Apr 26 10:12:34.977320 2026] [:error] [pid 8390:tid 8466] [client 20.151.116.9:51266] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "ae10koGPtFK_i9p5yxR19gAAAI8"]
[Sun Apr 26 10:12:36.344397 2026] [:error] [pid 22573:tid 22618] [client 20.151.116.9:58990] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/log.php"] [unique_id "ae10lHB3EmQlD4yKUt9XvQAAAYs"]
[Sun Apr 26 10:12:41.876185 2026] [:error] [pid 22572:tid 22589] [client 20.151.116.9:60400] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Apr 26 10:12:42.085754 2026] [:error] [pid 22572:tid 22582] [client 20.151.116.9:60400] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Sun Apr 26 10:12:42.291816 2026] [:error] [pid 22572:tid 22583] [client 20.151.116.9:60400] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ae10mtXOViWCFU-pZzCfYAAAAUU"]
[Sun Apr 26 10:12:54.652970 2026] [:error] [pid 8491:tid 8504] [client 20.151.116.9:53378] [client 20.151.116.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "ae10piq7I7e6CJooQM3BBwAAAMU"]
[Sun Apr 26 10:13:08.841891 2026] [:error] [pid 13137:tid 13154] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Apr 26 10:13:09.050732 2026] [:error] [pid 13137:tid 13156] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Apr 26 10:13:09.267452 2026] [:error] [pid 13137:tid 13142] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Sun Apr 26 10:13:09.479703 2026] [:error] [pid 13137:tid 13162] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Sun Apr 26 10:13:09.688096 2026] [:error] [pid 13137:tid 13152] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Sun Apr 26 10:13:09.898082 2026] [:error] [pid 13137:tid 13155] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sun Apr 26 10:13:10.130246 2026] [:error] [pid 13137:tid 13149] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Sun Apr 26 10:13:10.354326 2026] [:error] [pid 13137:tid 13151] [client 20.151.116.9:53406] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Sun Apr 26 10:13:10.597436 2026] [:error] [pid 13137:tid 13140] [client 20.151.116.9:53406] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ae10tt0RB4J0o4h5neELgQAAAgA"]
[Sun Apr 26 10:13:17.408599 2026] [:error] [pid 13137:tid 13144] [client 20.151.116.9:52598] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ae10vd0RB4J0o4h5neELjwAAAgQ"]
[Sun Apr 26 10:13:21.826515 2026] [:error] [pid 22572:tid 22593] [client 20.151.116.9:38011] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "ae10wdXOViWCFU-pZzCfvQAAAU8"]
[Sun Apr 26 10:13:27.565585 2026] [:error] [pid 13197:tid 13240] [client 20.151.116.9:44480] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "ae10x93kktFKdSxTrBul3AAAAsk"]
[Sun Apr 26 10:13:29.166982 2026] [:error] [pid 22573:tid 22612] [client 20.151.116.9:59885] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "ae10yXB3EmQlD4yKUt9YLgAAAYY"]
[Sun Apr 26 10:13:30.110337 2026] [:error] [pid 8390:tid 8469] [client 20.151.116.9:58946] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "ae10yoGPtFK_i9p5yxR2XwAAAJI"]
[Sun Apr 26 10:13:32.031716 2026] [:error] [pid 8491:tid 8510] [client 20.151.116.9:59850] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "ae10zCq7I7e6CJooQM3BTQAAAMs"]
[Sun Apr 26 10:13:33.623133 2026] [:error] [pid 16515:tid 16533] [client 20.151.116.9:37973] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "ae10zVtDrUmgHSvpuLzowQAAAk8"]
[Sun Apr 26 10:13:34.736697 2026] [:error] [pid 8390:tid 8462] [client 20.151.116.9:52570] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "ae10zoGPtFK_i9p5yxR2ZAAAAIs"]
[Sun Apr 26 10:13:36.072779 2026] [:error] [pid 22573:tid 22625] [client 20.151.116.9:37969] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "ae100HB3EmQlD4yKUt9YTwAAAZI"]
[Sun Apr 26 10:13:37.381342 2026] [:error] [pid 8390:tid 8451] [client 20.151.116.9:38013] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ar.php"] [unique_id "ae100YGPtFK_i9p5yxR2bwAAAIA"]
[Sun Apr 26 10:13:38.639888 2026] [:error] [pid 8383:tid 8412] [client 20.151.116.9:40966] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "ae100tFa2S3EsATMdWPd9wAAAA8"]
[Sun Apr 26 10:13:39.412285 2026] [:error] [pid 16574:tid 16643] [client 20.151.116.9:37990] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "ae10035MsX8wRQr99nYL6gAAA1g"]
[Sun Apr 26 10:13:40.395604 2026] [:error] [pid 13137:tid 13142] [client 20.151.116.9:37965] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "ae101N0RB4J0o4h5neELnAAAAgI"]
[Sun Apr 26 10:13:41.060119 2026] [:error] [pid 8383:tid 8418] [client 20.151.116.9:58949] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "ae101dFa2S3EsATMdWPeAQAAABU"]
[Sun Apr 26 10:13:42.016750 2026] [:error] [pid 13197:tid 13233] [client 20.151.116.9:53403] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ae101t3kktFKdSxTrBul4QAAAsI"]
[Sun Apr 26 10:13:42.861146 2026] [:error] [pid 8390:tid 8458] [client 20.151.116.9:58999] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ae101oGPtFK_i9p5yxR2hQAAAIc"]
[Sun Apr 26 10:13:43.742331 2026] [:error] [pid 16574:tid 16611] [client 20.151.116.9:44514] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ae10135MsX8wRQr99nYL7gAAA0c"]
[Sun Apr 26 10:13:44.805036 2026] [:error] [pid 8491:tid 8512] [client 20.151.116.9:38008] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "ae102Cq7I7e6CJooQM3BVQAAAM0"]
[Sun Apr 26 10:13:47.368006 2026] [:error] [pid 22573:tid 22622] [client 20.151.116.9:52587] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "ae1023B3EmQlD4yKUt9YbQAAAY8"]
[Sun Apr 26 10:13:47.929384 2026] [:error] [pid 16515:tid 16537] [client 20.151.116.9:59844] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "ae1021tDrUmgHSvpuLzozAAAAlM"]
[Sun Apr 26 10:13:49.309283 2026] [:error] [pid 13137:tid 13146] [client 20.151.116.9:53419] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "ae103d0RB4J0o4h5neELqwAAAgY"]
[Sun Apr 26 10:13:54.198048 2026] [:error] [pid 16574:tid 16641] [client 20.151.116.9:52567] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass4.php"] [unique_id "ae104n5MsX8wRQr99nYL_gAAA1c"]
[Sun Apr 26 10:13:57.055735 2026] [:error] [pid 16515:tid 16521] [client 20.151.116.9:37954] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "ae105VtDrUmgHSvpuLzo1QAAAkM"]
[Sun Apr 26 10:13:58.714028 2026] [:error] [pid 22572:tid 22583] [client 20.151.116.9:59843] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "ae105tXOViWCFU-pZzCf-wAAAUU"]
[Sun Apr 26 10:13:59.492042 2026] [:error] [pid 8385:tid 8426] [client 20.151.116.9:59895] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "ae105zOy7_J84Wx3-oyKvAAAAEI"]
[Sun Apr 26 10:14:00.341543 2026] [:error] [pid 22573:tid 22620] [client 20.151.116.9:45036] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2clas.php"] [unique_id "ae106HB3EmQlD4yKUt9YlwAAAY0"]
[Sun Apr 26 10:14:01.314916 2026] [:error] [pid 22572:tid 22601] [client 20.151.116.9:51279] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "ae106dXOViWCFU-pZzCgAgAAAVc"]
[Sun Apr 26 10:14:01.987532 2026] [:error] [pid 22573:tid 22618] [client 20.151.116.9:53431] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "ae106XB3EmQlD4yKUt9YnwAAAYs"]
[Sun Apr 26 10:14:03.466983 2026] [:error] [pid 8390:tid 8457] [client 20.151.116.9:45022] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "ae1064GPtFK_i9p5yxR2xAAAAIY"]
[Sun Apr 26 10:14:05.012102 2026] [:error] [pid 8383:tid 8400] [client 20.151.116.9:60367] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ave.php"] [unique_id "ae107dFa2S3EsATMdWPeEgAAAAM"]
[Sun Apr 26 10:14:06.416887 2026] [:error] [pid 16515:tid 16526] [client 20.151.116.9:44995] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "ae107ltDrUmgHSvpuLzo4QAAAkg"]
[Sun Apr 26 10:14:08.365985 2026] [:error] [pid 8390:tid 8463] [client 20.151.116.9:37928] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wrt.php"] [unique_id "ae108IGPtFK_i9p5yxR2yQAAAIw"]
[Sun Apr 26 10:14:10.262597 2026] [:error] [pid 8491:tid 8500] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Sun Apr 26 10:14:10.473375 2026] [:error] [pid 8491:tid 8508] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Sun Apr 26 10:14:10.682860 2026] [:error] [pid 8491:tid 8503] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sun Apr 26 10:14:10.918412 2026] [:error] [pid 8491:tid 8520] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Sun Apr 26 10:14:11.129176 2026] [:error] [pid 8491:tid 8516] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Sun Apr 26 10:14:11.374403 2026] [:error] [pid 8491:tid 8517] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 26 10:14:11.813970 2026] [:error] [pid 8491:tid 8515] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/nox.php
[Sun Apr 26 10:14:12.024605 2026] [:error] [pid 8491:tid 8510] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sun Apr 26 10:14:12.700606 2026] [:error] [pid 8491:tid 8511] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Apr 26 10:14:13.490374 2026] [:error] [pid 8491:tid 8500] [client 20.151.116.9:52548] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Sun Apr 26 10:14:13.696792 2026] [:error] [pid 8491:tid 8508] [client 20.151.116.9:52548] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "ae109Sq7I7e6CJooQM3BiQAAAMk"]
[Sun Apr 26 10:14:15.864944 2026] [:error] [pid 8390:tid 8468] [client 20.151.116.9:44491] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "ae1094GPtFK_i9p5yxR23gAAAJE"]
[Sun Apr 26 10:14:17.400505 2026] [:error] [pid 22573:tid 22626] [client 20.151.116.9:44517] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "ae10-XB3EmQlD4yKUt9YtQAAAZM"]
[Sun Apr 26 10:14:19.029383 2026] [:error] [pid 16515:tid 16539] [client 20.151.116.9:58936] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "ae10-1tDrUmgHSvpuLzo7gAAAlU"]
[Sun Apr 26 10:14:20.566588 2026] [:error] [pid 8390:tid 8474] [client 20.151.116.9:37901] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae10_IGPtFK_i9p5yxR27gAAAJc"]
[Sun Apr 26 10:14:23.576506 2026] [:error] [pid 22572:tid 22599] [client 20.151.116.9:59851] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae10_9XOViWCFU-pZzCgLgAAAVU"]
[Sun Apr 26 10:14:25.199249 2026] [:error] [pid 13137:tid 13164] [client 20.151.116.9:51312] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae11Ad0RB4J0o4h5neELxgAAAhc"]
[Sun Apr 26 10:14:28.347516 2026] [:error] [pid 16515:tid 16532] [client 20.151.116.9:37891] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "ae11BFtDrUmgHSvpuLzo9wAAAk4"]
[Sun Apr 26 10:14:32.830693 2026] [:error] [pid 8390:tid 8472] [client 20.151.116.9:53390] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "ae11CIGPtFK_i9p5yxR3AwAAAJU"]
[Sun Apr 26 10:14:36.659023 2026] [:error] [pid 13137:tid 13153] [client 20.151.116.9:51289] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "ae11DN0RB4J0o4h5neELzAAAAgw"]
[Sun Apr 26 10:14:37.377631 2026] [:error] [pid 8383:tid 8407] [client 20.151.116.9:44525] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "ae11DdFa2S3EsATMdWPeLQAAAAo"]
[Sun Apr 26 10:14:38.648859 2026] [:error] [pid 22572:tid 22589] [client 20.151.116.9:45039] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "ae11DtXOViWCFU-pZzCgPwAAAUs"]
[Sun Apr 26 10:14:39.739591 2026] [:error] [pid 22572:tid 22579] [client 20.151.116.9:58970] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae11D9XOViWCFU-pZzCgRQAAAUE"]
[Sun Apr 26 10:14:40.635272 2026] [:error] [pid 8385:tid 8425] [client 20.151.116.9:51305] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae11EDOy7_J84Wx3-oyLBAAAAEE"]
[Sun Apr 26 10:14:42.128424 2026] [:error] [pid 16574:tid 16633] [client 20.151.116.9:58910] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae11En5MsX8wRQr99nYMJQAAA1M"]
[Sun Apr 26 10:14:43.187097 2026] [:error] [pid 13197:tid 13235] [client 20.151.116.9:58967] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "ae11E93kktFKdSxTrBul-wAAAsQ"]
[Sun Apr 26 10:14:44.163048 2026] [:error] [pid 22572:tid 22595] [client 20.151.116.9:59006] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "ae11FNXOViWCFU-pZzCgTwAAAVE"]
[Sun Apr 26 10:14:46.013228 2026] [:error] [pid 16515:tid 16533] [client 20.151.116.9:52583] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "ae11FltDrUmgHSvpuLzpCAAAAk8"]
[Sun Apr 26 10:14:46.834712 2026] [:error] [pid 16515:tid 16534] [client 20.151.116.9:58979] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "ae11FltDrUmgHSvpuLzpCQAAAlA"]
[Sun Apr 26 10:14:48.302553 2026] [:error] [pid 8385:tid 8435] [client 20.151.116.9:45048] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "ae11GDOy7_J84Wx3-oyLHgAAAEs"]
[Sun Apr 26 10:14:49.228291 2026] [:error] [pid 16515:tid 16542] [client 20.151.116.9:45038] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "ae11GVtDrUmgHSvpuLzpDAAAAlg"]
[Sun Apr 26 10:14:50.165723 2026] [:error] [pid 16515:tid 16521] [client 20.151.116.9:52601] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "ae11GltDrUmgHSvpuLzpDgAAAkM"]
[Sun Apr 26 10:14:51.788646 2026] [:error] [pid 13137:tid 13141] [client 20.151.116.9:38009] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "ae11G90RB4J0o4h5neEL0gAAAgE"]
[Sun Apr 26 10:14:54.419463 2026] [:error] [pid 13137:tid 13161] [client 20.151.116.9:45034] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file9.php"] [unique_id "ae11Ht0RB4J0o4h5neEL1QAAAhQ"]
[Sun Apr 26 10:15:00.100565 2026] [:error] [pid 8383:tid 8400] [client 20.151.116.9:44499] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "ae11JNFa2S3EsATMdWPeMQAAAAM"]
[Sun Apr 26 10:15:03.763078 2026] [:error] [pid 8385:tid 8446] [client 20.151.116.9:45017] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "ae11JzOy7_J84Wx3-oyLKQAAAFY"]
[Sun Apr 26 10:15:07.503749 2026] [:error] [pid 16515:tid 16540] [client 20.151.116.9:44493] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ac.php"] [unique_id "ae11K1tDrUmgHSvpuLzpagAAAlY"]
[Sun Apr 26 10:15:12.782502 2026] [:error] [pid 8385:tid 8446] [client 20.151.116.9:45043] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "ae11MDOy7_J84Wx3-oyLOwAAAFY"]
[Sun Apr 26 10:15:15.921408 2026] [:error] [pid 13197:tid 13238] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sun Apr 26 10:15:16.133418 2026] [:error] [pid 13197:tid 13233] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Sun Apr 26 10:15:16.342145 2026] [:error] [pid 13197:tid 13245] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Sun Apr 26 10:15:16.553662 2026] [:error] [pid 13197:tid 13253] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Sun Apr 26 10:15:16.764299 2026] [:error] [pid 13197:tid 13239] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Sun Apr 26 10:15:16.972605 2026] [:error] [pid 13197:tid 13254] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Sun Apr 26 10:15:17.182791 2026] [:error] [pid 13197:tid 13242] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sun Apr 26 10:15:17.424963 2026] [:error] [pid 13197:tid 13234] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Sun Apr 26 10:15:17.632995 2026] [:error] [pid 13197:tid 13248] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Sun Apr 26 10:15:17.844638 2026] [:error] [pid 13197:tid 13232] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Sun Apr 26 10:15:18.055903 2026] [:error] [pid 13197:tid 13246] [client 20.151.116.9:53428] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Sun Apr 26 10:15:18.269132 2026] [:error] [pid 13197:tid 13256] [client 20.151.116.9:53428] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ae11Nt3kktFKdSxTrBumNgAAAtg"]
[Sun Apr 26 10:15:29.054310 2026] [:error] [pid 22573:tid 22630] [client 20.151.116.9:51310] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ae11QXB3EmQlD4yKUt9Y6QAAAZc"]
[Sun Apr 26 10:16:11.286795 2026] [:error] [pid 22572:tid 22588] [client 20.151.116.9:51304] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "ae11a9XOViWCFU-pZzCgsgAAAUo"]
[Sun Apr 26 10:16:16.088204 2026] [:error] [pid 22572:tid 22580] [client 20.151.116.9:59865] [client 20.151.116.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "ae11cNXOViWCFU-pZzCguAAAAUI"]
[Sun Apr 26 10:16:21.706425 2026] [:error] [pid 8390:tid 8462] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sun Apr 26 10:16:21.917390 2026] [:error] [pid 8390:tid 8460] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sun Apr 26 10:16:22.904352 2026] [:error] [pid 8390:tid 8473] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 26 10:16:23.126845 2026] [:error] [pid 8390:tid 8455] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sun Apr 26 10:16:23.337647 2026] [:error] [pid 8390:tid 8474] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sun Apr 26 10:16:23.560257 2026] [:error] [pid 8390:tid 8454] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/sites.php
[Sun Apr 26 10:16:23.780456 2026] [:error] [pid 8390:tid 8467] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Apr 26 10:16:24.004441 2026] [:error] [pid 8390:tid 8461] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Apr 26 10:16:24.231075 2026] [:error] [pid 8390:tid 8463] [client 20.151.116.9:59877] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Apr 26 10:43:45.033970 2026] [:error] [pid 13137:tid 13152] [client 193.202.81.31:19243] [client 193.202.81.31] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dbservices.com.au"] [uri "/s3cmd.ini"] [unique_id "ae174d0RB4J0o4h5neEWPAAAAgs"]
[Sun Apr 26 12:52:43.009402 2026] [:error] [pid 8390:tid 8461] [client 49.7.227.204:51050] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ae2aG4GPtFK_i9p5yxTDdAAAAIo"]
[Sun Apr 26 15:39:19.528150 2026] [:error] [pid 13197:tid 13251] [client 170.106.113.235:36510] [client 170.106.113.235] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ae3BJ93kktFKdSxTrBvA1gAAAtM"]
[Sun Apr 26 19:42:06.961388 2026] [:error] [pid 8491:tid 8523] [client 203.96.168.101:26881] [client 203.96.168.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.96.168.101, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ae36Diq7I7e6CJooQM376gAAANc"]
[Sun Apr 26 19:42:06.966836 2026] [:error] [pid 8491:tid 8523] [client 203.96.168.101:26881] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 26 19:45:56.765543 2026] [:error] [pid 13137:tid 13152] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sun Apr 26 19:45:57.002575 2026] [:error] [pid 13137:tid 13147] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/ox.php
[Sun Apr 26 19:45:57.422659 2026] [:error] [pid 13137:tid 13149] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Sun Apr 26 19:45:57.659909 2026] [:error] [pid 13137:tid 13159] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Apr 26 19:45:57.896660 2026] [:error] [pid 13137:tid 13140] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Apr 26 19:45:58.155595 2026] [:error] [pid 13137:tid 13144] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sun Apr 26 19:45:58.393834 2026] [:error] [pid 13137:tid 13145] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Sun Apr 26 19:45:58.660672 2026] [:error] [pid 13137:tid 13154] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sun Apr 26 19:45:58.896571 2026] [:error] [pid 13137:tid 13143] [client 4.232.184.88:7281] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sun Apr 26 19:45:59.596982 2026] [:error] [pid 13137:tid 13153] [client 4.232.184.88:7281] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ae36990RB4J0o4h5neFwTAAAAgw"]
[Sun Apr 26 19:46:02.410193 2026] [:error] [pid 8385:tid 8427] [client 4.232.184.88:7587] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ae36-jOy7_J84Wx3-ozOjgAAAEM"]
[Sun Apr 26 19:46:05.125548 2026] [:error] [pid 8390:tid 8474] [client 4.232.184.88:58700] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ae36_YGPtFK_i9p5yxRVGQAAAJc"]
[Sun Apr 26 19:46:06.911723 2026] [:error] [pid 8491:tid 8512] [client 4.232.184.88:7566] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ae36_iq7I7e6CJooQM38SQAAAM0"]
[Sun Apr 26 19:46:08.635683 2026] [:error] [pid 8390:tid 8475] [client 4.232.184.88:58743] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "ae37AIGPtFK_i9p5yxRVIAAAAJg"]
[Sun Apr 26 19:46:10.652845 2026] [:error] [pid 8385:tid 8433] [client 4.232.184.88:7282] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "ae37AjOy7_J84Wx3-ozOmAAAAEk"]
[Sun Apr 26 19:46:11.508810 2026] [:error] [pid 8385:tid 8427] [client 4.232.184.88:61844] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "ae37AzOy7_J84Wx3-ozOmgAAAEM"]
[Sun Apr 26 19:46:15.056479 2026] [:error] [pid 16515:tid 16523] [client 4.232.184.88:7293] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "ae37B1tDrUmgHSvpuLw9NgAAAkU"]
[Sun Apr 26 19:46:19.466213 2026] [:error] [pid 8385:tid 8443] [client 4.232.184.88:58740] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "ae37CzOy7_J84Wx3-ozOpQAAAFM"]
[Sun Apr 26 19:46:38.365382 2026] [:error] [pid 8383:tid 8397] [client 4.232.184.88:52265] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ae37HtFa2S3EsATMdWNFoAAAAAA"]
[Sun Apr 26 19:46:50.612426 2026] [:error] [pid 16574:tid 16612] [client 4.232.184.88:61824] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "ae37Kn5MsX8wRQr99nY0PwAAA0g"]
[Sun Apr 26 19:47:00.738105 2026] [:error] [pid 8491:tid 8503] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sun Apr 26 19:47:01.018833 2026] [:error] [pid 8491:tid 8518] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Sun Apr 26 19:47:01.288786 2026] [:error] [pid 8491:tid 8519] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Apr 26 19:47:01.558793 2026] [:error] [pid 8491:tid 8501] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sun Apr 26 19:47:01.846651 2026] [:error] [pid 8491:tid 8513] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sun Apr 26 19:47:02.117886 2026] [:error] [pid 8491:tid 8504] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sun Apr 26 19:47:02.388627 2026] [:error] [pid 8491:tid 8508] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sun Apr 26 19:47:02.659782 2026] [:error] [pid 8491:tid 8515] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sun Apr 26 19:47:02.929089 2026] [:error] [pid 8491:tid 8506] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Sun Apr 26 19:47:03.207498 2026] [:error] [pid 8491:tid 8524] [client 4.232.184.88:7246] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sun Apr 26 19:47:03.473579 2026] [:error] [pid 8491:tid 8505] [client 4.232.184.88:7246] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ae37Nyq7I7e6CJooQM38dgAAAMY"]
[Sun Apr 26 19:47:04.297855 2026] [:error] [pid 22573:tid 22621] [client 4.232.184.88:52280] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ae37OHB3EmQlD4yKUt_1HQAAAY4"]
[Sun Apr 26 19:47:05.222354 2026] [:error] [pid 8383:tid 8400] [client 4.232.184.88:58692] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ae37OdFa2S3EsATMdWNFuAAAAAM"]
[Sun Apr 26 19:47:05.907517 2026] [:error] [pid 8390:tid 8462] [client 4.232.184.88:7560] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ae37OYGPtFK_i9p5yxRVewAAAIs"]
[Sun Apr 26 19:47:06.514872 2026] [:error] [pid 8383:tid 8409] [client 4.232.184.88:52240] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ae37OtFa2S3EsATMdWNFvgAAAAw"]
[Sun Apr 26 19:47:07.157944 2026] [:error] [pid 22573:tid 22627] [client 4.232.184.88:7261] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ae37O3B3EmQlD4yKUt_1HgAAAZQ"]
[Sun Apr 26 19:47:07.717273 2026] [:error] [pid 16515:tid 16538] [client 4.232.184.88:52271] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ae37O1tDrUmgHSvpuLw9hQAAAlQ"]
[Sun Apr 26 19:47:08.543646 2026] [:error] [pid 22573:tid 22626] [client 4.232.184.88:52235] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "ae37PHB3EmQlD4yKUt_1IAAAAZM"]
[Sun Apr 26 19:47:09.716565 2026] [:error] [pid 8390:tid 8474] [client 4.232.184.88:7553] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ae37PYGPtFK_i9p5yxRVhgAAAJc"]
[Sun Apr 26 19:47:12.496045 2026] [:error] [pid 8390:tid 8473] [client 4.232.184.88:7591] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ae37QIGPtFK_i9p5yxRVjgAAAJY"]
[Sun Apr 26 19:47:14.185319 2026] [:error] [pid 22572:tid 22598] [client 4.232.184.88:58695] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ae37QtXOViWCFU-pZzAgygAAAVQ"]
[Sun Apr 26 19:47:16.454345 2026] [:error] [pid 13137:tid 13161] [client 4.232.184.88:7256] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ae37RN0RB4J0o4h5neFweAAAAhQ"]
[Sun Apr 26 19:47:18.767396 2026] [:error] [pid 8491:tid 8509] [client 4.232.184.88:7503] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ae37Riq7I7e6CJooQM38gwAAAMo"]
[Sun Apr 26 19:47:22.779914 2026] [:error] [pid 8385:tid 8434] [client 4.232.184.88:52264] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ae37SjOy7_J84Wx3-ozO1gAAAEo"]
[Sun Apr 26 19:47:27.371578 2026] [:error] [pid 22572:tid 22588] [client 4.232.184.88:7536] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ae37T9XOViWCFU-pZzAg5QAAAUo"]
[Sun Apr 26 19:47:28.712824 2026] [:error] [pid 22573:tid 22625] [client 4.232.184.88:7235] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ae37UHB3EmQlD4yKUt_1RQAAAZI"]
[Sun Apr 26 19:47:29.393020 2026] [:error] [pid 22572:tid 22582] [client 4.232.184.88:61863] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae37UdXOViWCFU-pZzAg6gAAAUQ"]
[Sun Apr 26 19:47:29.952513 2026] [:error] [pid 16574:tid 16614] [client 4.232.184.88:7588] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae37UX5MsX8wRQr99nY0TwAAA0o"]
[Sun Apr 26 19:47:30.676710 2026] [:error] [pid 22572:tid 22579] [client 4.232.184.88:7500] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae37UtXOViWCFU-pZzAg7QAAAUE"]
[Sun Apr 26 19:47:31.262959 2026] [:error] [pid 22572:tid 22578] [client 4.232.184.88:61877] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae37U9XOViWCFU-pZzAg8QAAAUA"]
[Sun Apr 26 19:47:31.985039 2026] [:error] [pid 22573:tid 22629] [client 4.232.184.88:61845] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "ae37U3B3EmQlD4yKUt_1TwAAAZY"]
[Sun Apr 26 19:47:32.731289 2026] [:error] [pid 22572:tid 22594] [client 4.232.184.88:52251] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "ae37VNXOViWCFU-pZzAg9wAAAVA"]
[Sun Apr 26 19:47:33.615711 2026] [:error] [pid 8383:tid 8407] [client 4.232.184.88:61876] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "ae37VdFa2S3EsATMdWNF1gAAAAo"]
[Sun Apr 26 19:47:34.452309 2026] [:error] [pid 8383:tid 8406] [client 4.232.184.88:7593] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "ae37VtFa2S3EsATMdWNF1wAAAAk"]
[Sun Apr 26 19:47:35.295711 2026] [:error] [pid 13137:tid 13144] [client 4.232.184.88:7252] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ae37V90RB4J0o4h5neFwgwAAAgQ"]
[Sun Apr 26 19:47:36.523016 2026] [:error] [pid 22573:tid 22623] [client 4.232.184.88:52266] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ae37WHB3EmQlD4yKUt_1WwAAAZA"]
[Sun Apr 26 19:47:38.398893 2026] [:error] [pid 13137:tid 13160] [client 4.232.184.88:58751] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ae37Wt0RB4J0o4h5neFwiAAAAhM"]
[Sun Apr 26 19:47:40.359069 2026] [:error] [pid 8390:tid 8459] [client 4.232.184.88:7236] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ae37XIGPtFK_i9p5yxRVxwAAAIg"]
[Sun Apr 26 19:47:42.012934 2026] [:error] [pid 13137:tid 13140] [client 4.232.184.88:7533] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "ae37Xt0RB4J0o4h5neFwjwAAAgA"]
[Sun Apr 26 19:47:45.086504 2026] [:error] [pid 8491:tid 8501] [client 4.232.184.88:7271] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "ae37YSq7I7e6CJooQM38kgAAAMI"]
[Sun Apr 26 19:47:50.769453 2026] [:error] [pid 13137:tid 13148] [client 4.232.184.88:7506] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "ae37Zt0RB4J0o4h5neFwoAAAAgg"]
[Sun Apr 26 19:48:03.009396 2026] [:error] [pid 16515:tid 16529] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 26 19:48:03.275421 2026] [:error] [pid 16515:tid 16536] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Sun Apr 26 19:48:03.533051 2026] [:error] [pid 16515:tid 16539] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sun Apr 26 19:48:03.768608 2026] [:error] [pid 16515:tid 16534] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Sun Apr 26 19:48:04.014166 2026] [:error] [pid 16515:tid 16535] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sun Apr 26 19:48:04.259150 2026] [:error] [pid 16515:tid 16524] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 26 19:48:04.524455 2026] [:error] [pid 16515:tid 16541] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sun Apr 26 19:48:04.781283 2026] [:error] [pid 16515:tid 16525] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sun Apr 26 19:48:05.064437 2026] [:error] [pid 16515:tid 16521] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun Apr 26 19:48:05.316846 2026] [:error] [pid 16515:tid 16540] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sun Apr 26 19:48:05.552396 2026] [:error] [pid 16515:tid 16542] [client 4.232.184.88:58749] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sun Apr 26 19:48:05.802359 2026] [:error] [pid 16515:tid 16537] [client 4.232.184.88:58749] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ae37dVtDrUmgHSvpuLw9rAAAAlM"]
[Sun Apr 26 19:48:19.467813 2026] [:error] [pid 22572:tid 22587] [client 4.232.184.88:7498] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ae37g9XOViWCFU-pZzAhMwAAAUk"]
[Sun Apr 26 19:48:22.991292 2026] [:error] [pid 16515:tid 16534] [client 4.232.184.88:7527] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ae37hltDrUmgHSvpuLw9rgAAAlA"]
[Sun Apr 26 19:48:26.393462 2026] [:error] [pid 8383:tid 8409] [client 4.232.184.88:52249] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ae37itFa2S3EsATMdWNGPQAAAAw"]
[Sun Apr 26 19:48:32.267401 2026] [:error] [pid 8383:tid 8406] [client 4.232.184.88:52269] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ae37kNFa2S3EsATMdWNGQQAAAAk"]
[Sun Apr 26 19:48:36.003820 2026] [:error] [pid 8383:tid 8404] [client 4.232.184.88:49685] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ae37lNFa2S3EsATMdWNGRwAAAAc"]
[Sun Apr 26 19:48:40.024862 2026] [:error] [pid 13137:tid 13165] [client 4.232.184.88:58735] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ae37mN0RB4J0o4h5neFxAwAAAhg"]
[Sun Apr 26 19:48:42.580329 2026] [:error] [pid 8383:tid 8411] [client 4.232.184.88:7492] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ae37mtFa2S3EsATMdWNGWwAAAA4"]
[Sun Apr 26 19:48:43.373079 2026] [:error] [pid 13197:tid 13251] [client 4.232.184.88:58696] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ae37m93kktFKdSxTrBvTzwAAAtM"]
[Sun Apr 26 19:48:45.021975 2026] [:error] [pid 8390:tid 8469] [client 4.232.184.88:49693] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "ae37nYGPtFK_i9p5yxRWkwAAAJI"]
[Sun Apr 26 19:48:45.816625 2026] [:error] [pid 8390:tid 8462] [client 4.232.184.88:52273] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "ae37nYGPtFK_i9p5yxRWlwAAAIs"]
[Sun Apr 26 19:48:46.664109 2026] [:error] [pid 8390:tid 8454] [client 4.232.184.88:54190] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "ae37noGPtFK_i9p5yxRWnwAAAIM"]
[Sun Apr 26 19:48:47.289801 2026] [:error] [pid 8383:tid 8416] [client 4.232.184.88:49666] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "ae37n9Fa2S3EsATMdWNGXwAAABM"]
[Sun Apr 26 19:48:48.235432 2026] [:error] [pid 8390:tid 8465] [client 4.232.184.88:54149] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/koiy.php"] [unique_id "ae37oIGPtFK_i9p5yxRWpgAAAI4"]
[Sun Apr 26 19:48:48.820772 2026] [:error] [pid 8383:tid 8401] [client 4.232.184.88:54186] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ae37oNFa2S3EsATMdWNGYwAAAAQ"]
[Sun Apr 26 19:48:49.443279 2026] [:error] [pid 22572:tid 22602] [client 4.232.184.88:61829] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ae37odXOViWCFU-pZzAhfgAAAVg"]
[Sun Apr 26 19:48:50.094115 2026] [:error] [pid 8385:tid 8436] [client 4.232.184.88:49674] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ae37ojOy7_J84Wx3-ozO-QAAAEw"]
[Sun Apr 26 19:48:50.716320 2026] [:error] [pid 8390:tid 8459] [client 4.232.184.88:54161] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ae37ooGPtFK_i9p5yxRWqgAAAIg"]
[Sun Apr 26 19:48:51.322705 2026] [:error] [pid 16574:tid 16610] [client 4.232.184.88:58741] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae37o35MsX8wRQr99nY0eQAAA0Y"]
[Sun Apr 26 19:48:51.907760 2026] [:error] [pid 13197:tid 13249] [client 4.232.184.88:54190] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae37o93kktFKdSxTrBvT0gAAAtE"]
[Sun Apr 26 19:48:52.709156 2026] [:error] [pid 8383:tid 8406] [client 4.232.184.88:49726] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae37pNFa2S3EsATMdWNGZgAAAAk"]
[Sun Apr 26 19:48:53.780472 2026] [:error] [pid 8383:tid 8420] [client 4.232.184.88:7363] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "ae37pdFa2S3EsATMdWNGaQAAABc"]
[Sun Apr 26 19:48:54.354506 2026] [:error] [pid 8383:tid 8419] [client 4.232.184.88:7499] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "ae37ptFa2S3EsATMdWNGbQAAABY"]
[Sun Apr 26 19:48:55.004195 2026] [:error] [pid 13197:tid 13234] [client 4.232.184.88:61826] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "ae37p93kktFKdSxTrBvT2QAAAsM"]
[Sun Apr 26 19:48:55.599548 2026] [:error] [pid 8385:tid 8441] [client 4.232.184.88:52247] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "ae37pzOy7_J84Wx3-ozPAgAAAFE"]
[Sun Apr 26 19:48:56.217817 2026] [:error] [pid 22572:tid 22588] [client 4.232.184.88:58721] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "ae37qNXOViWCFU-pZzAhhgAAAUo"]
[Sun Apr 26 19:48:56.844877 2026] [:error] [pid 13197:tid 13233] [client 4.232.184.88:49706] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ae37qN3kktFKdSxTrBvT3wAAAsI"]
[Sun Apr 26 19:48:57.392388 2026] [:error] [pid 13137:tid 13153] [client 4.232.184.88:58733] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ae37qd0RB4J0o4h5neFxCQAAAgw"]
[Sun Apr 26 19:48:57.918915 2026] [:error] [pid 22572:tid 22598] [client 4.232.184.88:58714] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ae37qdXOViWCFU-pZzAhiAAAAVQ"]
[Sun Apr 26 19:48:58.669590 2026] [:error] [pid 13197:tid 13253] [client 4.232.184.88:52275] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ae37qt3kktFKdSxTrBvT5gAAAtU"]
[Sun Apr 26 19:48:59.196709 2026] [:error] [pid 8383:tid 8412] [client 4.232.184.88:7518] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ae37q9Fa2S3EsATMdWNGdQAAAA8"]
[Sun Apr 26 19:49:01.679776 2026] [:error] [pid 8383:tid 8414] [client 4.232.184.88:61839] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ae37rdFa2S3EsATMdWNGfQAAABE"]
[Sun Apr 26 19:49:02.505702 2026] [:error] [pid 8385:tid 8445] [client 4.232.184.88:49710] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ae37rjOy7_J84Wx3-ozPBgAAAFU"]
[Sun Apr 26 19:49:04.187458 2026] [:error] [pid 22572:tid 22582] [client 4.232.184.88:54197] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "ae37sNXOViWCFU-pZzAhigAAAUQ"]
[Sun Apr 26 19:49:06.544989 2026] [:error] [pid 22572:tid 22592] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun Apr 26 19:49:06.783678 2026] [:error] [pid 22572:tid 22589] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sun Apr 26 19:49:07.028973 2026] [:error] [pid 22572:tid 22587] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sun Apr 26 19:49:07.275337 2026] [:error] [pid 22572:tid 22586] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sun Apr 26 19:49:07.526044 2026] [:error] [pid 22572:tid 22593] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Sun Apr 26 19:49:07.763667 2026] [:error] [pid 22572:tid 22583] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sun Apr 26 19:49:08.010607 2026] [:error] [pid 22572:tid 22601] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sun Apr 26 19:49:08.260433 2026] [:error] [pid 22572:tid 22596] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Sun Apr 26 19:49:08.496409 2026] [:error] [pid 22572:tid 22595] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Sun Apr 26 19:49:08.736576 2026] [:error] [pid 22572:tid 22579] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Sun Apr 26 19:49:08.977815 2026] [:error] [pid 22572:tid 22584] [client 4.232.184.88:49714] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sun Apr 26 19:49:09.214827 2026] [:error] [pid 22572:tid 22591] [client 4.232.184.88:49714] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ae37tdXOViWCFU-pZzAhmAAAAU0"]
[Sun Apr 26 19:49:12.927714 2026] [:error] [pid 8383:tid 8416] [client 4.232.184.88:54199] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ae37uNFa2S3EsATMdWNGpAAAABM"]
[Sun Apr 26 19:49:18.420406 2026] [:error] [pid 8383:tid 8404] [client 4.232.184.88:61864] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ae37vtFa2S3EsATMdWNGrQAAAAc"]
[Sun Apr 26 19:49:20.902740 2026] [:error] [pid 13197:tid 13253] [client 4.232.184.88:7522] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ae37wN3kktFKdSxTrBvT8QAAAtU"]
[Sun Apr 26 19:49:21.877847 2026] [:error] [pid 8390:tid 8459] [client 4.232.184.88:49669] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "ae37wYGPtFK_i9p5yxRWuwAAAIg"]
[Sun Apr 26 19:49:22.617214 2026] [:error] [pid 16574:tid 16604] [client 4.232.184.88:58716] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "ae37wn5MsX8wRQr99nY0fQAAA0A"]
[Sun Apr 26 19:49:23.198395 2026] [:error] [pid 8390:tid 8454] [client 4.232.184.88:7373] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "ae37w4GPtFK_i9p5yxRWvwAAAIM"]
[Sun Apr 26 19:49:23.997693 2026] [:error] [pid 8390:tid 8465] [client 4.232.184.88:52246] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "ae37w4GPtFK_i9p5yxRWxgAAAI4"]
[Sun Apr 26 19:49:24.963709 2026] [:error] [pid 8390:tid 8452] [client 4.232.184.88:52226] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ae37xIGPtFK_i9p5yxRWyQAAAIE"]
[Sun Apr 26 19:49:25.514353 2026] [:error] [pid 22573:tid 22631] [client 4.232.184.88:54182] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ae37xXB3EmQlD4yKUt_1vQAAAZg"]
[Sun Apr 26 19:49:26.034624 2026] [:error] [pid 22573:tid 22619] [client 4.232.184.88:58708] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ae37xnB3EmQlD4yKUt_1wQAAAYw"]
[Sun Apr 26 19:49:27.141724 2026] [:error] [pid 8385:tid 8446] [client 4.232.184.88:54145] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ae37xzOy7_J84Wx3-ozPLwAAAFY"]
[Sun Apr 26 19:49:27.743011 2026] [:error] [pid 8390:tid 8464] [client 4.232.184.88:61869] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "ae37x4GPtFK_i9p5yxRWzwAAAI0"]
[Sun Apr 26 19:49:28.861430 2026] [:error] [pid 8383:tid 8411] [client 4.232.184.88:58710] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "ae37yNFa2S3EsATMdWNGyQAAAA4"]
[Sun Apr 26 19:49:29.393636 2026] [:error] [pid 8390:tid 8469] [client 4.232.184.88:49671] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "ae37yYGPtFK_i9p5yxRW1QAAAJI"]
[Sun Apr 26 19:49:29.901520 2026] [:error] [pid 16515:tid 16540] [client 4.232.184.88:61853] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "ae37yVtDrUmgHSvpuLw9zgAAAlY"]
[Sun Apr 26 19:49:30.489648 2026] [:error] [pid 13137:tid 13140] [client 4.232.184.88:61878] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ae37yt0RB4J0o4h5neFxMAAAAgA"]
[Sun Apr 26 19:49:31.147643 2026] [:error] [pid 13137:tid 13142] [client 4.232.184.88:7280] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ae37y90RB4J0o4h5neFxMgAAAgI"]
[Sun Apr 26 19:49:31.797543 2026] [:error] [pid 22572:tid 22597] [client 4.232.184.88:58736] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ae37y9XOViWCFU-pZzAhoQAAAVM"]
[Sun Apr 26 19:49:32.699073 2026] [:error] [pid 8383:tid 8397] [client 4.232.184.88:49668] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ae37zNFa2S3EsATMdWNG1gAAAAA"]
[Sun Apr 26 19:49:33.318397 2026] [:error] [pid 8383:tid 8409] [client 4.232.184.88:52258] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae37zdFa2S3EsATMdWNG3AAAAAw"]
[Sun Apr 26 19:49:34.304359 2026] [:error] [pid 22573:tid 22620] [client 4.232.184.88:52255] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae37znB3EmQlD4yKUt_1yQAAAY0"]
[Sun Apr 26 19:49:35.763651 2026] [:error] [pid 8390:tid 8453] [client 4.232.184.88:47802] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae37z4GPtFK_i9p5yxRW5AAAAII"]
[Sun Apr 26 19:49:36.835962 2026] [:error] [pid 13137:tid 13141] [client 4.232.184.88:61871] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "ae370N0RB4J0o4h5neFxNQAAAgE"]
[Sun Apr 26 19:49:37.647847 2026] [:error] [pid 22572:tid 22583] [client 4.232.184.88:52274] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "ae370dXOViWCFU-pZzAhrQAAAUU"]
[Sun Apr 26 19:49:39.391289 2026] [:error] [pid 8390:tid 8452] [client 4.232.184.88:58719] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "ae3704GPtFK_i9p5yxRW5wAAAIE"]
[Sun Apr 26 19:49:44.360833 2026] [:error] [pid 22573:tid 22619] [client 4.232.184.88:61855] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "ae372HB3EmQlD4yKUt_12wAAAYw"]
[Sun Apr 26 19:49:48.239709 2026] [:error] [pid 16515:tid 16526] [client 4.232.184.88:7493] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "ae373FtDrUmgHSvpuLw92wAAAkg"]
[Sun Apr 26 19:49:52.058715 2026] [:error] [pid 8383:tid 8421] [client 4.232.184.88:49723] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ae374NFa2S3EsATMdWNHEwAAABg"]
[Sun Apr 26 19:49:54.182440 2026] [:error] [pid 13197:tid 13244] [client 4.232.184.88:54147] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ae374t3kktFKdSxTrBvT_wAAAsw"]
[Sun Apr 26 19:49:55.629661 2026] [:error] [pid 16515:tid 16538] [client 4.232.184.88:58722] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ae3741tDrUmgHSvpuLw95QAAAlQ"]
[Sun Apr 26 19:49:56.987341 2026] [:error] [pid 8390:tid 8464] [client 4.232.184.88:54159] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "ae375IGPtFK_i9p5yxRW_AAAAI0"]
[Sun Apr 26 19:49:57.745931 2026] [:error] [pid 13197:tid 13241] [client 4.232.184.88:61828] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae375d3kktFKdSxTrBvUAAAAAso"]
[Sun Apr 26 19:49:59.534042 2026] [:error] [pid 16515:tid 16536] [client 4.232.184.88:61883] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae3751tDrUmgHSvpuLw95gAAAlI"]
[Sun Apr 26 19:50:01.617569 2026] [:error] [pid 13197:tid 13239] [client 4.232.184.88:58697] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae376d3kktFKdSxTrBvUCQAAAsg"]
[Sun Apr 26 19:50:02.886751 2026] [:error] [pid 22572:tid 22591] [client 4.232.184.88:54155] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "ae376tXOViWCFU-pZzAhtQAAAU0"]
[Sun Apr 26 19:50:04.640331 2026] [:error] [pid 8383:tid 8397] [client 4.232.184.88:7532] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ae377NFa2S3EsATMdWNHJwAAAAA"]
[Sun Apr 26 19:50:05.852894 2026] [:error] [pid 8383:tid 8419] [client 4.232.184.88:49681] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ae377dFa2S3EsATMdWNHKwAAABY"]
[Sun Apr 26 19:50:06.742265 2026] [:error] [pid 22573:tid 22610] [client 4.232.184.88:58731] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "ae377nB3EmQlD4yKUt_1-AAAAYQ"]
[Sun Apr 26 19:50:08.478893 2026] [:error] [pid 22572:tid 22581] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sun Apr 26 19:50:08.745605 2026] [:error] [pid 22572:tid 22582] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 26 19:50:09.010711 2026] [:error] [pid 22572:tid 22599] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Sun Apr 26 19:50:09.277047 2026] [:error] [pid 22572:tid 22589] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sun Apr 26 19:50:09.555245 2026] [:error] [pid 22572:tid 22587] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Sun Apr 26 19:50:09.821082 2026] [:error] [pid 22572:tid 22586] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Sun Apr 26 19:50:10.095104 2026] [:error] [pid 22572:tid 22593] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Sun Apr 26 19:50:10.359977 2026] [:error] [pid 22572:tid 22583] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sun Apr 26 19:50:10.626507 2026] [:error] [pid 22572:tid 22596] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun Apr 26 19:50:10.907137 2026] [:error] [pid 22572:tid 22579] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sun Apr 26 19:50:11.172947 2026] [:error] [pid 22572:tid 22591] [client 4.232.184.88:52242] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sun Apr 26 19:50:11.435710 2026] [:error] [pid 22572:tid 22584] [client 4.232.184.88:52242] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "ae3789XOViWCFU-pZzAhyQAAAUY"]
[Sun Apr 26 19:50:12.208047 2026] [:error] [pid 13137:tid 13148] [client 4.232.184.88:7595] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "ae379N0RB4J0o4h5neFxPQAAAgg"]
[Sun Apr 26 19:50:13.362187 2026] [:error] [pid 22573:tid 22629] [client 4.232.184.88:7488] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "ae379XB3EmQlD4yKUt_1-wAAAZY"]
[Sun Apr 26 19:50:15.241749 2026] [:error] [pid 8383:tid 8420] [client 4.232.184.88:58694] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "ae3799Fa2S3EsATMdWNHTQAAABc"]
[Sun Apr 26 19:50:17.933602 2026] [:error] [pid 16515:tid 16522] [client 4.232.184.88:7547] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ae37-VtDrUmgHSvpuLw98AAAAkQ"]
[Sun Apr 26 19:50:19.932899 2026] [:error] [pid 8383:tid 8408] [client 4.232.184.88:7233] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ae37-9Fa2S3EsATMdWNHWgAAAAs"]
[Sun Apr 26 19:50:20.481648 2026] [:error] [pid 8390:tid 8463] [client 4.232.184.88:7255] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ae37_IGPtFK_i9p5yxRXNwAAAIw"]
[Sun Apr 26 19:50:22.194680 2026] [:error] [pid 8390:tid 8467] [client 4.232.184.88:49694] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "ae37_oGPtFK_i9p5yxRXPgAAAJA"]
[Sun Apr 26 19:50:25.035767 2026] [:error] [pid 8383:tid 8418] [client 4.232.184.88:54184] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ae38AdFa2S3EsATMdWNHagAAABU"]
[Sun Apr 26 19:50:26.390100 2026] [:error] [pid 22572:tid 22601] [client 4.232.184.88:7257] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ae38AtXOViWCFU-pZzAhzwAAAVc"]
[Sun Apr 26 19:50:27.936546 2026] [:error] [pid 13197:tid 13247] [client 4.232.184.88:58698] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ae38A93kktFKdSxTrBvUDwAAAs8"]
[Sun Apr 26 19:50:29.798555 2026] [:error] [pid 8491:tid 8512] [client 4.232.184.88:7284] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "ae38BSq7I7e6CJooQM386wAAAM0"]
[Sun Apr 26 19:50:31.534786 2026] [:error] [pid 8390:tid 8452] [client 4.232.184.88:58727] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "ae38B4GPtFK_i9p5yxRXTQAAAIE"]
[Sun Apr 26 19:50:37.204943 2026] [:error] [pid 22573:tid 22630] [client 4.232.184.88:49690] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "ae38DXB3EmQlD4yKUt_2EgAAAZc"]
[Sun Apr 26 19:50:38.661727 2026] [:error] [pid 16515:tid 16520] [client 4.232.184.88:49691] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "ae38DltDrUmgHSvpuLw9-AAAAkI"]
[Sun Apr 26 19:50:39.418545 2026] [:error] [pid 16574:tid 16610] [client 4.232.184.88:54173] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "ae38D35MsX8wRQr99nY0jQAAA0Y"]
[Sun Apr 26 19:50:40.198726 2026] [:error] [pid 8385:tid 8439] [client 4.232.184.88:58734] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae38EDOy7_J84Wx3-ozPUgAAAE8"]
[Sun Apr 26 19:50:40.963171 2026] [:error] [pid 22573:tid 22618] [client 4.232.184.88:49676] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae38EHB3EmQlD4yKUt_2JwAAAYs"]
[Sun Apr 26 19:50:42.077052 2026] [:error] [pid 8385:tid 8425] [client 4.232.184.88:49717] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae38EjOy7_J84Wx3-ozPVAAAAEE"]
[Sun Apr 26 19:50:42.708791 2026] [:error] [pid 8383:tid 8421] [client 4.232.184.88:61848] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ae38EtFa2S3EsATMdWNHfwAAABg"]
[Sun Apr 26 19:50:43.241918 2026] [:error] [pid 8383:tid 8400] [client 4.232.184.88:58691] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "ae38E9Fa2S3EsATMdWNHggAAAAM"]
[Sun Apr 26 19:50:44.308516 2026] [:error] [pid 8390:tid 8475] [client 4.232.184.88:7364] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "ae38FIGPtFK_i9p5yxRXawAAAJg"]
[Sun Apr 26 19:50:45.310117 2026] [:error] [pid 8491:tid 8508] [client 4.232.184.88:54179] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "ae38FSq7I7e6CJooQM389QAAAMk"]
[Sun Apr 26 19:50:45.821190 2026] [:error] [pid 8390:tid 8455] [client 4.232.184.88:52233] [client 4.232.184.88] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "ae38FYGPtFK_i9p5yxRXcQAAAIQ"]
[Sun Apr 26 20:00:23.774918 2026] [:error] [pid 16574:tid 16606] [client 49.235.136.28:49326] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ae3-V35MsX8wRQr99nY1EgAAA0I"]
[Sun Apr 26 23:17:16.555114 2026] [:error] [pid 22572:tid 22593] [client 43.159.140.236:43854] [client 43.159.140.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ae4sfNXOViWCFU-pZzBK3wAAAU8"]
[Mon Apr 27 03:41:49.446560 2026] [:error] [pid 20169:tid 20254] [client 89.163.146.197:52676] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "ae5qfdYTSNS52VFhNr9QLAAAAFU"], referer: www.google.com
[Mon Apr 27 04:32:24.221358 2026] [:error] [pid 22646:tid 22698] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Mon Apr 27 04:32:24.409394 2026] [:error] [pid 22646:tid 22695] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/asus.php
[Mon Apr 27 04:32:24.600108 2026] [:error] [pid 22646:tid 22693] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/environment.php
[Mon Apr 27 04:32:24.788952 2026] [:error] [pid 22646:tid 22687] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Mon Apr 27 04:32:24.977599 2026] [:error] [pid 22646:tid 22703] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/aws.php
[Mon Apr 27 04:32:25.166565 2026] [:error] [pid 22646:tid 22707] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Mon Apr 27 04:32:25.355029 2026] [:error] [pid 22646:tid 22705] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Mon Apr 27 04:32:25.546055 2026] [:error] [pid 22646:tid 22690] [client 172.212.217.10:36350] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Mon Apr 27 07:33:54.692973 2026] [:error] [pid 36489:tid 36525] [client 43.153.192.98:44732] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ae6g4o6sRkW8OfGv18q2WwAAAEQ"]
[Mon Apr 27 09:03:47.517573 2026] [:error] [pid 6972:tid 7041] [client 182.44.67.97:51312] [client 182.44.67.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ae618-JniPbCiT6NuKfFRAAAAU0"]
[Mon Apr 27 13:15:55.103743 2026] [:error] [pid 62511:tid 62595] [client 43.128.103.68:47300] [client 43.128.103.68] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ae7xC7BjE-jhU4FY4HhqPgAAAVU"]
[Mon Apr 27 13:51:53.008986 2026] [:error] [pid 62509:tid 62527] [client 34.55.86.97:52292] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75edwtbauadMz70GGE4QAAAIs"]
[Mon Apr 27 15:38:19.346659 2026] [:error] [pid 41010:tid 41042] [client 114.96.103.33:55434] [client 114.96.103.33] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ae8Sazc-oOrM_e97_4DnvQAAAcA"]
[Mon Apr 27 16:19:02.359466 2026] [:error] [pid 41011:tid 41088] [client 202.142.167.226:12964] [client 202.142.167.226] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 202.142.167.226, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ae8b9gsl5QfsSXIdF6EbbAAAAhM"]
[Mon Apr 27 16:19:02.364509 2026] [:error] [pid 41011:tid 41088] [client 202.142.167.226:12964] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 27 22:22:06.861382 2026] [:error] [pid 13465:tid 13501] [client 182.43.70.143:48795] [client 182.43.70.143] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ae9xDv19I-6GBJQxn_jBbAAAAEY"]
[Tue Apr 28 00:14:28.248362 2026] [:error] [pid 31555:tid 31566] [client 43.135.145.77:52688] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ae-LZLJDZf3DNaSMAJ2d2gAAAAk"]
[Tue Apr 28 00:23:10.445495 2026] [:error] [pid 48914:tid 48940] [client 52.172.142.96:7370] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 28 00:23:10.765541 2026] [:error] [pid 48914:tid 48925] [client 52.172.142.96:7370] [client 52.172.142.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.172.142.96, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae-NbnwuHR_nwT9alH8HaQAAAUg"]
[Tue Apr 28 00:23:10.917731 2026] [:error] [pid 48914:tid 48918] [client 52.172.142.96:7370] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Tue Apr 28 00:23:11.517158 2026] [:error] [pid 48914:tid 48919] [client 52.172.142.96:7370] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Tue Apr 28 00:23:11.964569 2026] [:error] [pid 48914:tid 48932] [client 52.172.142.96:7370] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Apr 28 00:23:12.110113 2026] [:error] [pid 48914:tid 48926] [client 52.172.142.96:7370] [client 52.172.142.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-NcHwuHR_nwT9alH8HdgAAAUk"]
[Tue Apr 28 00:23:12.671552 2026] [:error] [pid 48914:tid 48941] [client 52.172.142.96:4877] [client 52.172.142.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-NcHwuHR_nwT9alH8HeQAAAVg"]
[Tue Apr 28 00:23:13.247682 2026] [:error] [pid 13465:tid 13505] [client 52.172.142.96:4196] [client 52.172.142.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-Ncf19I-6GBJQxn_jdPAAAAEo"]
[Tue Apr 28 00:23:13.825676 2026] [:error] [pid 48914:tid 48932] [client 52.172.142.96:7405] [client 52.172.142.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae-NcXwuHR_nwT9alH8HfQAAAU8"]
[Tue Apr 28 04:53:34.493828 2026] [:error] [pid 14686:tid 14691] [client 110.166.71.39:41829] [client 110.166.71.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ae_Mzu-YPF1Xm7uiWQ4T1gAAAMI"]
[Tue Apr 28 05:32:20.063578 2026] [:error] [pid 14578:tid 14632] [client 43.157.150.69:49804] [client 43.157.150.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ae_V5Ongo3AwIJgfSHH5owAAAFM"]
[Tue Apr 28 07:57:21.377964 2026] [:error] [pid 33864:tid 33887] [client 20.239.192.136:15288] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 28 07:57:21.634091 2026] [:error] [pid 33864:tid 33872] [client 20.239.192.136:15288] [client 20.239.192.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.239.192.136, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ae_34TXchLGZ4QggCsmHQQAAAIY"]
[Tue Apr 28 07:57:21.764533 2026] [:error] [pid 33864:tid 33870] [client 20.239.192.136:15288] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Tue Apr 28 07:57:22.261337 2026] [:error] [pid 33864:tid 33868] [client 20.239.192.136:15288] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Tue Apr 28 07:57:22.623824 2026] [:error] [pid 33864:tid 33890] [client 20.239.192.136:15288] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Tue Apr 28 07:57:22.754537 2026] [:error] [pid 33864:tid 33874] [client 20.239.192.136:15288] [client 20.239.192.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_34jXchLGZ4QggCsmHUAAAAIg"]
[Tue Apr 28 07:57:23.293574 2026] [:error] [pid 33777:tid 33845] [client 20.239.192.136:14614] [client 20.239.192.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_347XUCFWqmordGGLMsQAAAQo"]
[Tue Apr 28 07:57:23.845545 2026] [:error] [pid 33864:tid 33881] [client 20.239.192.136:7638] [client 20.239.192.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_34zXchLGZ4QggCsmHUwAAAI8"]
[Tue Apr 28 07:57:24.392221 2026] [:error] [pid 33777:tid 33855] [client 20.239.192.136:15252] [client 20.239.192.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "ae_35LXUCFWqmordGGLMsgAAARQ"]
[Tue Apr 28 08:38:32.834343 2026] [:error] [pid 33864:tid 33881] [client 43.154.140.188:55012] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afABiDXchLGZ4QggCsmXbwAAAI8"]
[Tue Apr 28 11:08:25.224605 2026] [:error] [pid 50889:tid 50914] [client 36.111.67.189:53425] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afAkqYzszBr00txEzGjCuAAAABY"]
[Tue Apr 28 14:19:58.513593 2026] [:error] [pid 33864:tid 33878] [client 43.134.165.242:43278] [client 43.134.165.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afBRjjXchLGZ4QggCsniawAAAIw"]
[Tue Apr 28 16:29:23.945625 2026] [:error] [pid 2741:tid 2746] [client 43.157.82.252:46086] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afBv4_p92FeOz1h6ILy1GQAAAUA"]
[Tue Apr 28 16:33:16.857030 2026] [:error] [pid 33775:tid 33803] [client 104.207.34.76:30489] [client 104.207.34.76] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dbservices.com.au"] [uri "/s3cmd.ini"] [unique_id "afBwzJsYOcoQrq88YbUUZAAAANg"]
[Tue Apr 28 18:34:45.406211 2026] [:error] [pid 33864:tid 33869] [client 101.32.244.128:51884] [client 101.32.244.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afCNRTXchLGZ4QggCskMwAAAAIM"]
[Tue Apr 28 19:05:33.487611 2026] [:error] [pid 33777:tid 33859] [client 43.134.114.37:47634] [client 43.134.114.37] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afCUfbXUCFWqmordGGLBwAAAARg"]
[Tue Apr 28 19:35:12.403968 2026] [:error] [pid 33864:tid 33883] [client 43.130.125.193:51606] [client 43.130.125.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afCbcDXchLGZ4QggCskXTQAAAJE"]
[Tue Apr 28 20:09:52.583686 2026] [:error] [pid 33775:tid 33789] [client 43.163.107.243:35344] [client 43.163.107.243] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afCjkJsYOcoQrq88YbUsEAAAAMo"]
[Tue Apr 28 20:41:53.551731 2026] [:error] [pid 2741:tid 2749] [client 43.156.51.128:59034] [client 43.156.51.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afCrEfp92FeOz1h6ILz3oAAAAUM"]
[Tue Apr 28 21:07:52.424378 2026] [:error] [pid 50889:tid 50892] [client 49.51.183.84:53740] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afCxKIzszBr00txEzGhP6QAAAAA"]
[Tue Apr 28 21:14:33.995555 2026] [:error] [pid 33777:tid 33846] [client 129.226.94.18:60084] [client 129.226.94.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afCyubXUCFWqmordGGL0vAAAAQs"]
[Tue Apr 28 22:31:20.242115 2026] [:error] [pid 33864:tid 33867] [client 20.220.234.220:24353] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 28 22:31:20.567262 2026] [:error] [pid 33864:tid 33885] [client 20.220.234.220:24353] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Apr 28 22:31:23.714278 2026] [:error] [pid 33864:tid 33879] [client 20.220.234.220:24353] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Apr 28 22:31:23.954262 2026] [:error] [pid 33864:tid 33875] [client 20.220.234.220:24353] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 28 22:31:24.445452 2026] [:error] [pid 33864:tid 33882] [client 20.220.234.220:24353] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Apr 28 22:31:24.695853 2026] [:error] [pid 33864:tid 33870] [client 20.220.234.220:24353] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 28 22:31:26.056463 2026] [:error] [pid 33864:tid 33883] [client 20.220.234.220:24353] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Apr 28 22:31:30.270430 2026] [:error] [pid 33864:tid 33872] [client 20.220.234.220:24353] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afDEwjXchLGZ4QggCsk2sgAAAIY"]
[Tue Apr 28 22:31:30.909570 2026] [:error] [pid 33777:tid 33856] [client 20.220.234.220:61911] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afDEwrXUCFWqmordGGIS_QAAARU"]
[Tue Apr 28 22:31:31.634604 2026] [:error] [pid 2741:tid 2759] [client 20.220.234.220:24380] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afDEw_p92FeOz1h6ILwW9wAAAU0"]
[Tue Apr 28 22:31:32.764985 2026] [:error] [pid 33777:tid 33852] [client 20.220.234.220:24336] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afDExLXUCFWqmordGGIS_gAAARE"]
[Tue Apr 28 22:31:33.753971 2026] [:error] [pid 33864:tid 33878] [client 20.220.234.220:58008] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afDExTXchLGZ4QggCsk2swAAAIw"]
[Tue Apr 28 22:31:36.477798 2026] [:error] [pid 33864:tid 33873] [client 20.220.234.220:24325] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afDEyDXchLGZ4QggCsk2twAAAIc"]
[Tue Apr 28 22:31:40.709592 2026] [:error] [pid 33777:tid 33853] [client 20.220.234.220:24351] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afDEzLXUCFWqmordGGITCAAAARI"]
[Tue Apr 28 22:31:43.072877 2026] [:error] [pid 33777:tid 33851] [client 20.220.234.220:24335] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afDEz7XUCFWqmordGGITCgAAARA"]
[Tue Apr 28 22:31:50.062430 2026] [:error] [pid 33777:tid 33848] [client 20.220.234.220:58025] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "afDE1rXUCFWqmordGGITDwAAAQ0"]
[Tue Apr 28 22:31:55.025911 2026] [:error] [pid 33777:tid 33849] [client 20.220.234.220:24348] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "afDE27XUCFWqmordGGITIAAAAQ4"]
[Tue Apr 28 22:32:01.655749 2026] [:error] [pid 33777:tid 33845] [client 20.220.234.220:58028] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afDE4bXUCFWqmordGGITKAAAAQo"]
[Tue Apr 28 22:32:05.245629 2026] [:error] [pid 33777:tid 33853] [client 20.220.234.220:24375] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afDE5bXUCFWqmordGGITMAAAARI"]
[Tue Apr 28 22:32:11.055215 2026] [:error] [pid 50889:tid 50897] [client 20.220.234.220:61901] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afDE64zszBr00txEzGhkFgAAAAU"]
[Tue Apr 28 22:32:21.980099 2026] [:error] [pid 33777:tid 33838] [client 20.220.234.220:24352] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "afDE9bXUCFWqmordGGITQAAAAQM"]
[Tue Apr 28 22:32:25.228030 2026] [:error] [pid 33775:tid 33795] [client 20.220.234.220:24341] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "afDE-ZsYOcoQrq88YbU77wAAANA"]
[Tue Apr 28 22:32:27.307194 2026] [:error] [pid 33777:tid 33842] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conf.php
[Tue Apr 28 22:32:27.787405 2026] [:error] [pid 33777:tid 33853] [client 20.220.234.220:61912] [client 20.220.234.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.234.220, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "afDE-7XUCFWqmordGGITUAAAARI"]
[Tue Apr 28 22:32:27.790725 2026] [:error] [pid 33777:tid 33853] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 28 22:32:28.031035 2026] [:error] [pid 33777:tid 33858] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Tue Apr 28 22:32:28.275199 2026] [:error] [pid 33777:tid 33844] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Apr 28 22:32:28.514604 2026] [:error] [pid 33777:tid 33836] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Apr 28 22:32:28.764287 2026] [:error] [pid 33777:tid 33847] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Apr 28 22:32:29.006389 2026] [:error] [pid 33777:tid 33852] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 28 22:32:29.291938 2026] [:error] [pid 33777:tid 33845] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Apr 28 22:32:29.549037 2026] [:error] [pid 33777:tid 33858] [client 20.220.234.220:61912] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 28 22:32:29.833997 2026] [:error] [pid 33777:tid 33844] [client 20.220.234.220:61912] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afDE_bXUCFWqmordGGITYgAAAQk"]
[Tue Apr 28 22:32:35.464575 2026] [:error] [pid 33864:tid 33879] [client 20.220.234.220:58002] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afDFAzXchLGZ4QggCsk2-wAAAI0"]
[Tue Apr 28 22:32:38.048171 2026] [:error] [pid 2741:tid 2747] [client 20.220.234.220:61930] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afDFBvp92FeOz1h6ILwXHwAAAUE"]
[Tue Apr 28 22:32:40.944363 2026] [:error] [pid 33776:tid 33814] [client 20.220.234.220:58016] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afDFCF-bEJ2CKP3iKABItwAAAEY"]
[Tue Apr 28 22:32:45.159672 2026] [:error] [pid 2741:tid 2758] [client 20.220.234.220:24354] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afDFDfp92FeOz1h6ILwXKgAAAUw"]
[Tue Apr 28 22:32:50.123598 2026] [:error] [pid 2741:tid 2765] [client 20.220.234.220:24377] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afDFEvp92FeOz1h6ILwXLgAAAVM"]
[Tue Apr 28 22:32:52.416296 2026] [:error] [pid 33864:tid 33871] [client 20.220.234.220:58019] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afDFFDXchLGZ4QggCsk3CQAAAIU"]
[Tue Apr 28 22:32:55.153299 2026] [:error] [pid 33777:tid 33836] [client 20.220.234.220:61889] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afDFF7XUCFWqmordGGITiAAAAQE"]
[Tue Apr 28 22:32:56.521176 2026] [:error] [pid 33777:tid 33851] [client 20.220.234.220:61917] [client 20.220.234.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afDFGLXUCFWqmordGGITjQAAARA"]
[Tue Apr 28 23:53:32.705072 2026] [:error] [pid 33864:tid 33888] [client 49.51.132.100:46906] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afDX_DXchLGZ4QggCslETgAAAJY"]
[Wed Apr 29 02:36:00.740105 2026] [:error] [pid 33775:tid 33786] [client 5.189.187.165:43052] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Wed Apr 29 02:36:04.984430 2026] [:error] [pid 33776:tid 33823] [client 5.189.187.165:49832] [client 5.189.187.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "afD-FF-bEJ2CKP3iKABmtQAAAE8"]
[Wed Apr 29 02:36:06.168290 2026] [:error] [pid 35342:tid 35358] [client 5.189.187.165:49844] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Apr 29 02:36:17.871167 2026] [:error] [pid 35342:tid 35356] [client 74.244.187.247:56826] [client 74.244.187.247] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 74.244.187.247, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afD-Ie7D5-OXGLQYxO79JQAAAww"]
[Wed Apr 29 02:36:17.880840 2026] [:error] [pid 35342:tid 35356] [client 74.244.187.247:56826] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 29 04:33:18.232356 2026] [:error] [pid 56863:tid 56880] [client 104.207.53.203:48487] [client 104.207.53.203] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".ini"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/s3cmd.ini"] [unique_id "afEZjmQQTEnvYCOsiwLESwAAAM8"]
[Wed Apr 29 06:46:57.118720 2026] [:error] [pid 56863:tid 56866] [client 34.35.82.188:46154] [client 34.35.82.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "afE44WQQTEnvYCOsiwLbEwAAAME"]
[Wed Apr 29 06:46:57.187334 2026] [:error] [pid 40343:tid 40372] [client 34.35.82.188:46156] [client 34.35.82.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "afE44WiaWCZjSxz2ZNtwhgAAAZg"]
[Wed Apr 29 06:46:58.292063 2026] [:error] [pid 56863:tid 56871] [client 34.35.82.188:46162] [client 34.35.82.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "afE44mQQTEnvYCOsiwLbFAAAAMY"]
[Wed Apr 29 06:46:58.417063 2026] [:error] [pid 40344:tid 40391] [client 34.35.82.188:46174] [client 34.35.82.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "afE44p_iiwb4cHXz-Jr-6QAAAdA"]
[Wed Apr 29 06:46:58.437581 2026] [:error] [pid 40343:tid 40359] [client 34.35.82.188:46180] [client 34.35.82.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "afE44miaWCZjSxz2ZNtwiQAAAYs"]
[Wed Apr 29 06:54:46.060564 2026] [:error] [pid 40344:tid 40393] [client 36.41.75.167:53894] [client 36.41.75.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afE6tp_iiwb4cHXz-JoBGAAAAdI"]
[Wed Apr 29 08:31:39.114837 2026] [:error] [pid 56756:tid 56815] [client 43.130.150.80:54314] [client 43.130.150.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afFRa3Di78vq-l2wwMwcpwAAAFc"]
[Wed Apr 29 09:59:52.266817 2026] [:error] [pid 52292:tid 52340] [client 129.226.83.4:55318] [client 129.226.83.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afFmGBq6POOrkcVw80vcCQAAAJI"]
[Wed Apr 29 10:31:37.935985 2026] [:error] [pid 61628:tid 61634] [client 129.226.95.137:51900] [client 129.226.95.137] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afFtifXzdLVcrP-YPZgKxQAAAME"]
[Wed Apr 29 13:11:39.842635 2026] [:error] [pid 61540:tid 61573] [client 129.226.213.145:40544] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afGTC-Q8cJB7pQslzIezWgAAAIA"]
[Wed Apr 29 14:47:13.973529 2026] [:error] [pid 45054:tid 45071] [client 43.153.19.83:49084] [client 43.153.19.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afGpcYtL6SUL31r23c-WQgAAAo8"]
[Wed Apr 29 15:28:26.290876 2026] [:error] [pid 44860:tid 44862] [client 45.119.85.39:57166] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGzGkQ82el2g7ESJ16G4QAAAkA"], referer: https://www.google.com
[Wed Apr 29 15:28:26.290967 2026] [:error] [pid 44860:tid 44862] [client 45.119.85.39:57166] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 68"] [hostname "dbservices.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGzGkQ82el2g7ESJ16G4QAAAkA"], referer: https://www.google.com
[Wed Apr 29 15:48:23.409374 2026] [:error] [pid 45054:tid 45076] [client 45.119.85.39:54515] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3x4tL6SUL31r23c-lVgAAApQ"], referer: https://www.google.com
[Wed Apr 29 15:48:23.409480 2026] [:error] [pid 45054:tid 45076] [client 45.119.85.39:54515] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 242"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3x4tL6SUL31r23c-lVgAAApQ"], referer: https://www.google.com
[Wed Apr 29 18:03:28.587505 2026] [:error] [pid 45085:tid 45101] [client 43.134.49.216:50428] [client 43.134.49.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afHXcNS7eNjgd8gD6ZwMxAAAAs4"]
[Wed Apr 29 19:43:41.971542 2026] [:error] [pid 44860:tid 44862] [client 162.14.109.170:49372] [client 162.14.109.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afHu7UQ82el2g7ESJ16nwAAAAkA"]
[Wed Apr 29 19:50:04.735087 2026] [:error] [pid 22901:tid 22912] [client 119.28.100.145:41548] [client 119.28.100.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afHwbBvfVEXI-f42iRRgZAAAAQk"]
[Wed Apr 29 22:19:45.662555 2026] [:error] [pid 21138:tid 21207] [client 154.160.16.224:24034] [client 154.160.16.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.160.16.224, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afITgZuzwUiyMeUnp338jwAAAQo"]
[Wed Apr 29 22:19:45.664602 2026] [:error] [pid 21138:tid 21199] [client 154.160.16.224:24035] [client 154.160.16.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.160.16.224, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afITgZuzwUiyMeUnp338kAAAAQI"]
[Wed Apr 29 22:19:45.668052 2026] [:error] [pid 21138:tid 21207] [client 154.160.16.224:24034] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 29 22:19:45.668962 2026] [:error] [pid 21138:tid 21199] [client 154.160.16.224:24035] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 29 23:24:44.203796 2026] [:error] [pid 21138:tid 21220] [client 43.130.116.87:51404] [client 43.130.116.87] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afIivJuzwUiyMeUnp30MZgAAARc"]
[Thu Apr 30 01:50:52.753338 2026] [:error] [pid 21138:tid 21220] [client 43.165.2.110:42680] [client 43.165.2.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afJE_JuzwUiyMeUnp303JQAAARc"]
[Thu Apr 30 06:28:47.585608 2026] [:error] [pid 18111:tid 18141] [client 49.51.183.84:57780] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afKGH2ctLbxB7Q1_oK2BsQAAABM"]
[Thu Apr 30 10:57:31.596765 2026] [:error] [pid 18111:tid 18146] [client 23.94.182.56:52534] [client 23.94.182.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "afLFG2ctLbxB7Q1_oK3MdwAAABg"]
[Thu Apr 30 13:55:32.879075 2026] [:error] [pid 53641:tid 53659] [client 43.155.162.41:40100] [client 43.155.162.41] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afLu1GC119wja3QGeAHFkgAAAYc"]
[Thu Apr 30 16:15:58.142212 2026] [:error] [pid 18111:tid 18122] [client 43.134.141.244:47986] [client 43.134.141.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afMPvmctLbxB7Q1_oK05JAAAAAA"]
[Thu Apr 30 16:27:27.949856 2026] [:error] [pid 53641:tid 53665] [client 80.114.33.24:60350] [client 80.114.33.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 80.114.33.24, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afMSb2C119wja3QGeAHwMQAAAY0"]
[Thu Apr 30 16:27:27.958062 2026] [:error] [pid 53641:tid 53665] [client 80.114.33.24:60350] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 30 17:38:51.312696 2026] [:error] [pid 39910:tid 39936] [client 43.134.49.216:58866] [client 43.134.49.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afMjK9tf04xYDlbRUOD2wwAAABY"]
[Thu Apr 30 19:25:52.433857 2026] [:error] [pid 6456:tid 6459] [client 175.27.163.171:39432] [client 175.27.163.171] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afM8QEOBwsDodnkJK5xEgwAAAEE"]
[Thu Apr 30 20:03:30.409683 2026] [:error] [pid 6456:tid 6466] [client 119.28.177.175:40468] [client 119.28.177.175] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afNFEkOBwsDodnkJK5xT8AAAAEg"]
[Thu Apr 30 22:14:14.165253 2026] [:error] [pid 6456:tid 6479] [client 43.155.157.239:48790] [client 43.155.157.239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afNjtkOBwsDodnkJK5x4MAAAAFU"]
[Fri May 01 00:46:36.724981 2026] [:error] [pid 6456:tid 6464] [client 8.228.1.191:43402] [client 8.228.1.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "afOHbEOBwsDodnkJK5ydVAAAAEY"]
[Fri May 01 05:12:22.745637 2026] [:error] [pid 5976:tid 5986] [client 43.131.36.84:35720] [client 43.131.36.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afPFtrbCb0ye2WjKldd11gAAAQY"]
[Fri May 01 07:32:21.402772 2026] [:error] [pid 6045:tid 6075] [client 175.27.171.245:57210] [client 175.27.171.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afPmhT4a1vLt_qHgXBS2RAAAAVQ"]
[Fri May 01 09:35:30.663731 2026] [:error] [pid 5976:tid 5983] [client 43.166.130.123:49626] [client 43.166.130.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afQDYrbCb0ye2WjKldenwgAAAQM"]
[Fri May 01 11:53:50.692464 2026] [:error] [pid 33791:tid 33796] [client 43.130.40.120:53010] [client 43.130.40.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afQjzm9ixd-moLycM9A2MAAAAAI"]
[Fri May 01 12:24:24.791945 2026] [:error] [pid 25085:tid 25094] [client 60.224.18.115:58213] [client 60.224.18.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 60.224.18.115, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afQq-PuD8fWRiE0RX0GSqAAAAUM"]
[Fri May 01 12:24:24.801546 2026] [:error] [pid 25085:tid 25094] [client 60.224.18.115:58213] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 01 13:10:55.652182 2026] [:error] [pid 25085:tid 25114] [client 34.142.17.52:58066] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri May 01 13:10:55.707552 2026] [:error] [pid 25085:tid 25097] [client 34.142.17.52:58170] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php~"] [unique_id "afQ13_uD8fWRiE0RX0GgMgAAAUY"]
[Fri May 01 13:10:55.711430 2026] [:error] [pid 25085:tid 25104] [client 34.142.17.52:58164] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php.bak"] [unique_id "afQ13_uD8fWRiE0RX0GgMwAAAU0"]
[Fri May 01 13:10:55.716313 2026] [:error] [pid 33791:tid 33807] [client 34.142.17.52:58188] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.old" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.old"] [unique_id "afQ1329ixd-moLycM9BdFAAAAA0"]
[Fri May 01 13:10:55.727267 2026] [:error] [pid 25085:tid 25102] [client 34.142.17.52:58194] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.txt" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.txt"] [unique_id "afQ13_uD8fWRiE0RX0GgNAAAAUs"]
[Fri May 01 13:10:55.735303 2026] [:error] [pid 25085:tid 25109] [client 34.142.17.52:58210] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.bak"] [unique_id "afQ13_uD8fWRiE0RX0GgNQAAAVI"]
[Fri May 01 13:10:55.748829 2026] [:error] [pid 24996:tid 25034] [client 34.142.17.52:58234] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/parameters.yml" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/config/parameters.yml"] [unique_id "afQ13yDBq9mMfUWQQeoGAwAAAIY"]
[Fri May 01 13:10:55.830881 2026] [:error] [pid 24997:tid 25077] [client 34.142.17.52:58350] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sites/default/settings.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sites/default/settings.php"] [unique_id "afQ13_OkHa4ScY5oo8xPgAAAANU"]
[Fri May 01 13:10:55.832484 2026] [:error] [pid 24996:tid 25031] [client 34.142.17.52:58364] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "afQ13yDBq9mMfUWQQeoGDQAAAIM"]
[Fri May 01 13:10:55.950774 2026] [:error] [pid 24996:tid 25053] [client 34.142.17.52:58402] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Fri May 01 13:10:56.053069 2026] [:error] [pid 24996:tid 25040] [client 34.142.17.52:58430] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Fri May 01 13:10:56.059089 2026] [:error] [pid 24997:tid 25079] [client 34.142.17.52:58440] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Fri May 01 13:10:56.175803 2026] [:error] [pid 24997:tid 25073] [client 34.142.17.52:58450] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/.config/gcloud/credentials.db"] [unique_id "afQ14POkHa4ScY5oo8xPhwAAANE"]
[Fri May 01 13:10:56.653137 2026] [:error] [pid 33791:tid 33802] [client 34.142.17.52:58458] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/server.key"] [unique_id "afQ14G9ixd-moLycM9BdFQAAAAg"]
[Fri May 01 13:10:56.667131 2026] [:error] [pid 33791:tid 33799] [client 34.142.17.52:58466] [client 34.142.17.52] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/private.key"] [unique_id "afQ14G9ixd-moLycM9BdFgAAAAU"]
[Fri May 01 16:10:45.457813 2026] [:error] [pid 24995:tid 25020] [client 43.135.115.233:57158] [client 43.135.115.233] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afRgBedJG9WB_Q_ne0uOYwAAAFU"]
[Fri May 01 18:04:31.865102 2026] [:error] [pid 25085:tid 25093] [client 34.138.204.104:58431] [client 34.138.204.104] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.204.104, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afR6r_uD8fWRiE0RX0HqLwAAAUI"]
[Fri May 01 18:04:31.869636 2026] [:error] [pid 25085:tid 25093] [client 34.138.204.104:58431] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 01 18:04:34.516726 2026] [:error] [pid 25085:tid 25093] [client 34.138.204.104:58431] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afR6svuD8fWRiE0RX0HqPwAAAUI"]
[Fri May 01 18:04:35.011406 2026] [:error] [pid 25085:tid 25114] [client 34.138.204.104:59820] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afR6s_uD8fWRiE0RX0HqQAAAAVc"]
[Fri May 01 18:04:35.529097 2026] [:error] [pid 33791:tid 33799] [client 34.138.204.104:54062] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afR6s29ixd-moLycM9DcdAAAAAU"]
[Fri May 01 18:04:36.043667 2026] [:error] [pid 33791:tid 33815] [client 34.138.204.104:51741] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afR6tG9ixd-moLycM9DcdQAAABU"]
[Fri May 01 18:04:36.588613 2026] [:error] [pid 24996:tid 25038] [client 34.138.204.104:63435] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afR6tCDBq9mMfUWQQepCuQAAAIo"]
[Fri May 01 18:04:37.011891 2026] [:error] [pid 33791:tid 33804] [client 34.138.204.104:56550] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afR6tW9ixd-moLycM9DcdwAAAAo"]
[Fri May 01 18:04:37.433251 2026] [:error] [pid 24995:tid 25016] [client 34.138.204.104:59478] [client 34.138.204.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afR6tedJG9WB_Q_ne0ue8AAAAFE"]
[Fri May 01 20:16:49.283345 2026] [:error] [pid 24995:tid 25012] [client 162.14.81.106:42812] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afSZsedJG9WB_Q_ne0uwuAAAAE0"]
[Fri May 01 22:14:14.826898 2026] [:error] [pid 50214:tid 50223] [client 43.157.170.13:35336] [client 43.157.170.13] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afS1Nos0pgrtfZkbhjNx8gAAAYU"]
[Sat May 02 00:28:45.784271 2026] [:error] [pid 33791:tid 33794] [client 43.159.149.56:60336] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afTUvW9ixd-moLycM9BccgAAAAA"]
[Sat May 02 04:44:37.480642 2026] [:error] [pid 22846:tid 22858] [client 185.213.174.35:54914] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "afUQtYm1Ms03Mfhp3aaQpAAAAQo"]
[Sat May 02 04:44:37.480675 2026] [:error] [pid 22846:tid 22860] [client 185.213.174.35:54898] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "afUQtYm1Ms03Mfhp3aaQpQAAAQw"]
[Sat May 02 04:44:37.481645 2026] [:error] [pid 22846:tid 22851] [client 185.213.174.35:54922] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "afUQtYm1Ms03Mfhp3aaQpgAAAQM"]
[Sat May 02 04:44:37.485124 2026] [:error] [pid 53540:tid 53551] [client 185.213.174.35:55020] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "afUQtdQYV6qJFftBNymeewAAAMk"]
[Sat May 02 04:44:37.485356 2026] [:error] [pid 53540:tid 53558] [client 185.213.174.35:54950] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "afUQtdQYV6qJFftBNymefAAAANA"]
[Sat May 02 04:44:37.486648 2026] [:error] [pid 53434:tid 53461] [client 185.213.174.35:54890] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "afUQte9BXmRQcbfsxly-fAAAABI"]
[Sat May 02 04:44:38.756972 2026] [:error] [pid 53435:tid 53486] [client 185.213.174.35:55148] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "afUQtoDmp7_z8QkjSzMEOQAAAE4"]
[Sat May 02 04:44:38.758650 2026] [:error] [pid 53435:tid 53472] [client 185.213.174.35:55126] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.php~"] [unique_id "afUQtoDmp7_z8QkjSzMEOgAAAEA"]
[Sat May 02 04:44:38.767873 2026] [:error] [pid 53435:tid 53485] [client 185.213.174.35:55006] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/public/.env"] [unique_id "afUQtoDmp7_z8QkjSzMEPwAAAE0"]
[Sat May 02 04:44:38.768724 2026] [:error] [pid 53435:tid 53481] [client 185.213.174.35:55110] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dbservices.com.au|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/terraform.tfstate.backup"] [unique_id "afUQtoDmp7_z8QkjSzMEPgAAAEk"]
[Sat May 02 04:44:38.769029 2026] [:error] [pid 53436:tid 53504] [client 185.213.174.35:54974] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.example"] [unique_id "afUQtq9N0xp8fccVM0AruwAAAIU"]
[Sat May 02 04:44:38.769207 2026] [:error] [pid 53435:tid 53487] [client 185.213.174.35:55138] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/wp-config.bak"] [unique_id "afUQtoDmp7_z8QkjSzMEQAAAAE8"]
[Sat May 02 04:44:38.769863 2026] [:error] [pid 53436:tid 53519] [client 185.213.174.35:55004] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "afUQtq9N0xp8fccVM0ArvAAAAJQ"]
[Sat May 02 04:44:38.772281 2026] [:error] [pid 22846:tid 22853] [client 185.213.174.35:54992] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "afUQtom1Ms03Mfhp3aaQqQAAAQU"]
[Sat May 02 04:44:38.773191 2026] [:error] [pid 53540:tid 53549] [client 185.213.174.35:55010] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "afUQttQYV6qJFftBNymefwAAAMc"]
[Sat May 02 04:44:38.774418 2026] [:error] [pid 53540:tid 53555] [client 185.213.174.35:54960] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.bak"] [unique_id "afUQttQYV6qJFftBNymefgAAAM0"]
[Sat May 02 04:44:38.775512 2026] [:error] [pid 53435:tid 53493] [client 185.213.174.35:54934] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "afUQtoDmp7_z8QkjSzMERAAAAFU"]
[Sat May 02 04:44:38.775939 2026] [:error] [pid 53435:tid 53488] [client 185.213.174.35:54932] [client 185.213.174.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "afUQtoDmp7_z8QkjSzMERQAAAFA"]
[Sat May 02 07:40:08.909991 2026] [:error] [pid 53435:tid 53475] [client 43.162.103.213:59436] [client 43.162.103.213] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afU52IDmp7_z8QkjSzNC7wAAAEM"]
[Sat May 02 08:39:48.298750 2026] [:error] [pid 21339:tid 21365] [client 106.54.62.156:56174] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afVH1AN2KhHZavn0Te1hkQAAAZg"]
[Sat May 02 15:50:51.163469 2026] [:error] [pid 11894:tid 11898] [client 162.62.213.165:59962] [client 162.62.213.165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afWs2zHh6DQF1tkXIKy2wgAAAUE"]
[Sat May 02 18:11:24.318870 2026] [:error] [pid 52012:tid 52091] [client 43.164.196.244:55714] [client 43.164.196.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afXNzEzSWr-8cpS83mhywAAAA04"]
[Sat May 02 22:28:48.175895 2026] [:error] [pid 53436:tid 53516] [client 31.56.209.67:55521] [client 31.56.209.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.56.209.67, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "afYKIK9N0xp8fccVM0DbpgAAAJE"], referer: https://www.bing.com/
[Sat May 02 22:28:48.179492 2026] [:error] [pid 53436:tid 53516] [client 31.56.209.67:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.bing.com/
[Sat May 02 22:28:48.733828 2026] [:error] [pid 52012:tid 52079] [client 31.56.209.67:60544] [client 31.56.209.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.56.209.67, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "afYKIEzSWr-8cpS83mjL3QAAA0I"], referer: https://www.google.com/search?q=wordpress
[Sat May 02 22:28:48.737517 2026] [:error] [pid 52012:tid 52079] [client 31.56.209.67:60544] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/search?q=wordpress
[Sun May 03 00:54:58.165346 2026] [:error] [pid 53434:tid 53451] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun May 03 00:54:58.356087 2026] [:error] [pid 53434:tid 53464] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sun May 03 00:54:58.545330 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Sun May 03 00:54:58.735551 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Sun May 03 00:54:58.924560 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Sun May 03 00:54:59.115449 2026] [:error] [pid 53434:tid 53443] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Sun May 03 00:54:59.306434 2026] [:error] [pid 53434:tid 53465] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/locales.php
[Sun May 03 00:54:59.495343 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun May 03 00:54:59.685591 2026] [:error] [pid 53434:tid 53456] [client 172.173.121.85:64099] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Sun May 03 00:55:00.627860 2026] [:error] [pid 53434:tid 53462] [client 172.173.121.85:64099] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYsZO9BXmRQcbfsxlyxqwAAABM"]
[Sun May 03 00:55:01.007754 2026] [:error] [pid 51917:tid 51924] [client 172.173.121.85:64047] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYsZa7wZviJ7BgcCi9vhwAAAcU"]
[Sun May 03 00:55:01.397353 2026] [:error] [pid 51917:tid 51927] [client 172.173.121.85:64055] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYsZa7wZviJ7BgcCi9viAAAAcg"]
[Sun May 03 00:55:01.772118 2026] [:error] [pid 53435:tid 53475] [client 172.173.121.85:64115] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYsZYDmp7_z8QkjSzMI7wAAAEM"]
[Sun May 03 00:55:02.152062 2026] [:error] [pid 51950:tid 51985] [client 172.173.121.85:64045] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYsZooBJzYZ3RKUhdiEegAAAkU"]
[Sun May 03 00:55:02.545684 2026] [:error] [pid 51950:tid 51999] [client 172.173.121.85:64097] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYsZooBJzYZ3RKUhdiEewAAAlM"]
[Sun May 03 00:55:02.933626 2026] [:error] [pid 22846:tid 22859] [client 172.173.121.85:64114] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYsZom1Ms03Mfhp3aYRqAAAAQs"]
[Sun May 03 00:55:03.308501 2026] [:error] [pid 52124:tid 52129] [client 172.173.121.85:64063] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYsZzjabaZ9NMm8eQubNgAAA4A"]
[Sun May 03 00:55:03.686767 2026] [:error] [pid 51950:tid 51988] [client 172.173.121.85:64000] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYsZ4oBJzYZ3RKUhdiEfQAAAkg"]
[Sun May 03 00:55:04.062367 2026] [:error] [pid 53436:tid 53507] [client 172.173.121.85:55105] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYsaK9N0xp8fccVM0DqagAAAIg"]
[Sun May 03 00:55:04.448092 2026] [:error] [pid 11894:tid 11900] [client 172.173.121.85:64092] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYsaDHh6DQF1tkXIKz2RgAAAUM"]
[Sun May 03 00:55:04.822106 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:64013] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYsaIDmp7_z8QkjSzMI9AAAAE4"]
[Sun May 03 00:55:05.209482 2026] [:error] [pid 53435:tid 53481] [client 172.173.121.85:64024] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYsaYDmp7_z8QkjSzMI9gAAAEk"]
[Sun May 03 00:55:05.587458 2026] [:error] [pid 51917:tid 51926] [client 172.173.121.85:64069] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYsaa7wZviJ7BgcCi9viwAAAcc"]
[Sun May 03 00:55:05.961557 2026] [:error] [pid 51917:tid 51938] [client 172.173.121.85:64119] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYsaa7wZviJ7BgcCi9vjQAAAdM"]
[Sun May 03 00:55:06.338363 2026] [:error] [pid 52124:tid 52146] [client 172.173.121.85:64058] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYsajjabaZ9NMm8eQubOAAAA5E"]
[Sun May 03 00:55:06.723063 2026] [:error] [pid 53435:tid 53495] [client 172.173.121.85:64103] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYsaoDmp7_z8QkjSzMI-wAAAFc"]
[Sun May 03 00:55:07.093852 2026] [:error] [pid 53436:tid 53523] [client 172.173.121.85:64085] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYsa69N0xp8fccVM0DqawAAAJg"]
[Sun May 03 00:55:07.471440 2026] [:error] [pid 53435:tid 53475] [client 172.173.121.85:64121] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYsa4Dmp7_z8QkjSzMI_AAAAEM"]
[Sun May 03 00:55:07.857015 2026] [:error] [pid 53435:tid 53472] [client 172.173.121.85:64122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYsa4Dmp7_z8QkjSzMI_QAAAEA"]
[Sun May 03 00:55:08.232746 2026] [:error] [pid 53435:tid 53479] [client 172.173.121.85:64004] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYsbIDmp7_z8QkjSzMI_wAAAEc"]
[Sun May 03 00:55:08.609398 2026] [:error] [pid 22846:tid 22867] [client 172.173.121.85:64042] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYsbIm1Ms03Mfhp3aYRtAAAARM"]
[Sun May 03 00:55:08.981778 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:64021] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYsbEzSWr-8cpS83mgLowAAA1U"]
[Sun May 03 00:55:09.356321 2026] [:error] [pid 51950:tid 51991] [client 172.173.121.85:64081] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYsbYoBJzYZ3RKUhdiEhgAAAks"]
[Sun May 03 00:55:09.735391 2026] [:error] [pid 53435:tid 53473] [client 172.173.121.85:64084] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYsbYDmp7_z8QkjSzMJBQAAAEE"]
[Sun May 03 00:55:10.106296 2026] [:error] [pid 11894:tid 11909] [client 172.173.121.85:64016] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYsbjHh6DQF1tkXIKz2SgAAAUw"]
[Sun May 03 00:55:10.482021 2026] [:error] [pid 52010:tid 52053] [client 172.173.121.85:64053] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYsbgiR6wohDtdeJMBdQwAAAso"]
[Sun May 03 00:55:10.863715 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:64067] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYsboDmp7_z8QkjSzMJBgAAAEQ"]
[Sun May 03 00:55:11.238460 2026] [:error] [pid 51950:tid 51984] [client 172.173.121.85:64096] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYsb4oBJzYZ3RKUhdiEiwAAAkQ"]
[Sun May 03 00:55:11.611797 2026] [:error] [pid 51950:tid 52004] [client 172.173.121.85:64112] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYsb4oBJzYZ3RKUhdiEjQAAAlg"]
[Sun May 03 00:55:11.999420 2026] [:error] [pid 53436:tid 53503] [client 172.173.121.85:64030] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYsb69N0xp8fccVM0DqdAAAAIQ"]
[Sun May 03 00:55:12.384166 2026] [:error] [pid 51950:tid 52001] [client 172.173.121.85:64109] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYscIoBJzYZ3RKUhdiEkAAAAlU"]
[Sun May 03 00:55:12.769315 2026] [:error] [pid 22846:tid 22853] [client 172.173.121.85:55062] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYscIm1Ms03Mfhp3aYRvQAAAQU"]
[Sun May 03 00:55:13.148104 2026] [:error] [pid 53435:tid 53490] [client 172.173.121.85:64072] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYscYDmp7_z8QkjSzMJBwAAAFI"]
[Sun May 03 00:55:13.530185 2026] [:error] [pid 11894:tid 11898] [client 172.173.121.85:64008] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYscTHh6DQF1tkXIKz2TgAAAUE"]
[Sun May 03 00:55:13.954646 2026] [:error] [pid 51950:tid 51997] [client 172.173.121.85:55113] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYscYoBJzYZ3RKUhdiEkwAAAlE"]
[Sun May 03 00:55:14.335120 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:64086] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYsckzSWr-8cpS83mgLpgAAA0Y"]
[Sun May 03 00:55:14.713782 2026] [:error] [pid 51950:tid 51995] [client 172.173.121.85:55061] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYscooBJzYZ3RKUhdiElQAAAk8"]
[Sun May 03 00:55:15.087936 2026] [:error] [pid 22846:tid 22849] [client 172.173.121.85:64046] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYsc4m1Ms03Mfhp3aYRvgAAAQE"]
[Sun May 03 00:55:15.468597 2026] [:error] [pid 11894:tid 11902] [client 172.173.121.85:64036] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYsczHh6DQF1tkXIKz2TwAAAUU"]
[Sun May 03 00:55:15.851911 2026] [:error] [pid 51917:tid 51930] [client 172.173.121.85:55117] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYsc67wZviJ7BgcCi9vkwAAAcs"]
[Sun May 03 00:55:16.227368 2026] [:error] [pid 51950:tid 51984] [client 172.173.121.85:55112] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYsdIoBJzYZ3RKUhdiElgAAAkQ"]
[Sun May 03 00:55:16.605133 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:64051] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYsdO9BXmRQcbfsxlyxsAAAABg"]
[Sun May 03 00:55:16.991900 2026] [:error] [pid 53434:tid 53444] [client 172.173.121.85:55118] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYsdO9BXmRQcbfsxlyxsQAAAAE"]
[Sun May 03 00:55:17.367020 2026] [:error] [pid 53435:tid 53474] [client 172.173.121.85:64052] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYsdYDmp7_z8QkjSzMJCAAAAEI"]
[Sun May 03 00:55:17.759895 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:64118] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYsdYDmp7_z8QkjSzMJCgAAAE4"]
[Sun May 03 00:55:18.134908 2026] [:error] [pid 53434:tid 53445] [client 172.173.121.85:55133] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYsdu9BXmRQcbfsxlyxswAAAAI"]
[Sun May 03 00:55:18.518684 2026] [:error] [pid 53434:tid 53462] [client 172.173.121.85:55127] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYsdu9BXmRQcbfsxlyxtAAAABM"]
[Sun May 03 00:55:18.903365 2026] [:error] [pid 11894:tid 11903] [client 172.173.121.85:64048] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYsdjHh6DQF1tkXIKz2UAAAAUY"]
[Sun May 03 00:55:19.279479 2026] [:error] [pid 51917:tid 51934] [client 172.173.121.85:55115] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYsd67wZviJ7BgcCi9vlAAAAc8"]
[Sun May 03 00:55:19.668067 2026] [:error] [pid 53435:tid 53492] [client 172.173.121.85:64064] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYsd4Dmp7_z8QkjSzMJDQAAAFQ"]
[Sun May 03 00:55:20.058921 2026] [:error] [pid 53435:tid 53480] [client 172.173.121.85:55065] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYseIDmp7_z8QkjSzMJDgAAAEg"]
[Sun May 03 00:55:20.440427 2026] [:error] [pid 53435:tid 53491] [client 172.173.121.85:64032] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYseIDmp7_z8QkjSzMJEQAAAFM"]
[Sun May 03 00:55:20.827879 2026] [:error] [pid 53435:tid 53489] [client 172.173.121.85:64108] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYseIDmp7_z8QkjSzMJEwAAAFE"]
[Sun May 03 00:55:21.204916 2026] [:error] [pid 52010:tid 52047] [client 172.173.121.85:55126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYseQiR6wohDtdeJMBdRAAAAsQ"]
[Sun May 03 00:55:21.581558 2026] [:error] [pid 51950:tid 51997] [client 172.173.121.85:64005] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYseYoBJzYZ3RKUhdiEmwAAAlE"]
[Sun May 03 00:55:21.960156 2026] [:error] [pid 51950:tid 51991] [client 172.173.121.85:64111] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYseYoBJzYZ3RKUhdiEnQAAAks"]
[Sun May 03 00:55:22.339700 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:64077] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYsegiR6wohDtdeJMBdRgAAAs8"]
[Sun May 03 00:55:22.713360 2026] [:error] [pid 51950:tid 51990] [client 172.173.121.85:64102] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYseooBJzYZ3RKUhdiEoQAAAko"]
[Sun May 03 00:55:23.088911 2026] [:error] [pid 53434:tid 53451] [client 172.173.121.85:64041] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYse-9BXmRQcbfsxlyxuwAAAAg"]
[Sun May 03 00:55:23.472877 2026] [:error] [pid 51917:tid 51937] [client 172.173.121.85:55124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYse67wZviJ7BgcCi9vlgAAAdI"]
[Sun May 03 00:55:23.848430 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:64093] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYse0zSWr-8cpS83mgLtAAAA0w"]
[Sun May 03 00:55:24.228643 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:64095] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYsfEzSWr-8cpS83mgLtwAAA1U"]
[Sun May 03 00:55:24.606416 2026] [:error] [pid 53435:tid 53475] [client 172.173.121.85:64124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYsfIDmp7_z8QkjSzMJFgAAAEM"]
[Sun May 03 00:55:24.980856 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:55043] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYsfIDmp7_z8QkjSzMJFwAAAEo"]
[Sun May 03 00:55:25.372950 2026] [:error] [pid 22846:tid 22872] [client 172.173.121.85:64002] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYsfYm1Ms03Mfhp3aYRwQAAARg"]
[Sun May 03 00:55:25.751774 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:64078] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYsfYDmp7_z8QkjSzMJGwAAAE4"]
[Sun May 03 00:55:26.130093 2026] [:error] [pid 52012:tid 52090] [client 172.173.121.85:55104] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYsfkzSWr-8cpS83mgLugAAA00"]
[Sun May 03 00:55:26.506813 2026] [:error] [pid 52010:tid 52049] [client 172.173.121.85:55107] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYsfgiR6wohDtdeJMBdSgAAAsY"]
[Sun May 03 00:55:26.885061 2026] [:error] [pid 51950:tid 51989] [client 172.173.121.85:64033] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYsfooBJzYZ3RKUhdiEqQAAAkk"]
[Sun May 03 00:55:27.260193 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:64015] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYsf0zSWr-8cpS83mgLvwAAA1I"]
[Sun May 03 00:55:27.639412 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:55102] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYsf0zSWr-8cpS83mgLwQAAA0Y"]
[Sun May 03 00:55:28.025336 2026] [:error] [pid 52010:tid 52051] [client 172.173.121.85:55150] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYsgAiR6wohDtdeJMBdSwAAAsg"]
[Sun May 03 00:55:28.396125 2026] [:error] [pid 52124:tid 52131] [client 172.173.121.85:64075] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYsgDjabaZ9NMm8eQubRgAAA4I"]
[Sun May 03 00:55:28.768535 2026] [:error] [pid 52010:tid 52044] [client 172.173.121.85:55142] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYsgAiR6wohDtdeJMBdTwAAAsE"]
[Sun May 03 00:55:29.146927 2026] [:error] [pid 53436:tid 53512] [client 172.173.121.85:64010] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYsga9N0xp8fccVM0DqeAAAAI0"]
[Sun May 03 00:55:29.521031 2026] [:error] [pid 52010:tid 52066] [client 172.173.121.85:64113] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYsgQiR6wohDtdeJMBdUgAAAtc"]
[Sun May 03 00:55:29.897368 2026] [:error] [pid 53434:tid 53453] [client 172.173.121.85:54208] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYsge9BXmRQcbfsxlyxvAAAAAo"]
[Sun May 03 00:55:30.272876 2026] [:error] [pid 53434:tid 53456] [client 172.173.121.85:64026] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYsgu9BXmRQcbfsxlyxvQAAAA0"]
[Sun May 03 00:55:30.646641 2026] [:error] [pid 51917:tid 51939] [client 172.173.121.85:55157] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYsgq7wZviJ7BgcCi9vmAAAAdQ"]
[Sun May 03 00:55:31.025509 2026] [:error] [pid 52012:tid 52085] [client 172.173.121.85:55091] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYsg0zSWr-8cpS83mgLxAAAA0g"]
[Sun May 03 00:55:31.402943 2026] [:error] [pid 51917:tid 51922] [client 172.173.121.85:55056] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYsg67wZviJ7BgcCi9vmgAAAcM"]
[Sun May 03 00:55:31.785122 2026] [:error] [pid 51950:tid 51984] [client 172.173.121.85:64031] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYsg4oBJzYZ3RKUhdiEsQAAAkQ"]
[Sun May 03 00:55:32.162890 2026] [:error] [pid 53436:tid 53517] [client 172.173.121.85:64070] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYshK9N0xp8fccVM0DqeQAAAJI"]
[Sun May 03 00:55:32.538676 2026] [:error] [pid 22846:tid 22866] [client 172.173.121.85:64110] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYshIm1Ms03Mfhp3aYRxgAAARI"]
[Sun May 03 00:55:32.915525 2026] [:error] [pid 53434:tid 53445] [client 172.173.121.85:64057] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYshO9BXmRQcbfsxlyxvwAAAAI"]
[Sun May 03 00:55:33.289035 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:55129] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYshe9BXmRQcbfsxlyxwAAAABQ"]
[Sun May 03 00:55:33.663962 2026] [:error] [pid 52012:tid 52075] [client 172.173.121.85:55046] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYshUzSWr-8cpS83mgLxQAAA0A"]
[Sun May 03 00:55:34.042159 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:64037] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYshoDmp7_z8QkjSzMJHAAAAEY"]
[Sun May 03 00:55:34.426030 2026] [:error] [pid 51950:tid 51995] [client 172.173.121.85:64028] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYshooBJzYZ3RKUhdiEtAAAAk8"]
[Sun May 03 00:55:34.806741 2026] [:error] [pid 51950:tid 51981] [client 172.173.121.85:64116] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYshooBJzYZ3RKUhdiEtQAAAkE"]
[Sun May 03 00:55:35.194502 2026] [:error] [pid 51917:tid 51934] [client 172.173.121.85:64001] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYsh67wZviJ7BgcCi9vqQAAAc8"]
[Sun May 03 00:55:35.575585 2026] [:error] [pid 51950:tid 51982] [client 172.173.121.85:64056] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYsh4oBJzYZ3RKUhdiEtwAAAkI"]
[Sun May 03 00:55:35.958467 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:64104] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYsh4oBJzYZ3RKUhdiEuAAAAlI"]
[Sun May 03 00:55:36.339009 2026] [:error] [pid 53436:tid 53501] [client 172.173.121.85:64105] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYsiK9N0xp8fccVM0DqfAAAAII"]
[Sun May 03 00:55:36.721148 2026] [:error] [pid 53434:tid 53454] [client 172.173.121.85:55108] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYsiO9BXmRQcbfsxlyxwgAAAAs"]
[Sun May 03 00:55:37.091780 2026] [:error] [pid 51950:tid 51984] [client 172.173.121.85:64049] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYsiYoBJzYZ3RKUhdiEugAAAkQ"]
[Sun May 03 00:55:37.465324 2026] [:error] [pid 51950:tid 51980] [client 172.173.121.85:64080] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYsiYoBJzYZ3RKUhdiEuwAAAkA"]
[Sun May 03 00:55:37.838950 2026] [:error] [pid 51917:tid 51942] [client 172.173.121.85:55044] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYsia7wZviJ7BgcCi9vrQAAAdc"]
[Sun May 03 00:55:38.218128 2026] [:error] [pid 22846:tid 22869] [client 172.173.121.85:64023] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYsiom1Ms03Mfhp3aYRxwAAARU"]
[Sun May 03 00:55:38.588915 2026] [:error] [pid 11894:tid 11901] [client 172.173.121.85:55106] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYsijHh6DQF1tkXIKz2VQAAAUQ"]
[Sun May 03 00:55:38.964954 2026] [:error] [pid 11894:tid 11917] [client 172.173.121.85:64054] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYsijHh6DQF1tkXIKz2VgAAAVQ"]
[Sun May 03 00:55:39.349360 2026] [:error] [pid 53434:tid 53460] [client 172.173.121.85:55141] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYsi-9BXmRQcbfsxlyxxwAAABE"]
[Sun May 03 00:55:39.721934 2026] [:error] [pid 51917:tid 51936] [client 172.173.121.85:64087] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYsi67wZviJ7BgcCi9vrwAAAdE"]
[Sun May 03 00:55:40.092999 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:64066] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYsjO9BXmRQcbfsxlyxywAAAA8"]
[Sun May 03 00:55:40.469203 2026] [:error] [pid 51917:tid 51939] [client 172.173.121.85:64044] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYsjK7wZviJ7BgcCi9vsAAAAdQ"]
[Sun May 03 00:55:40.848644 2026] [:error] [pid 51950:tid 51982] [client 172.173.121.85:64035] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYsjIoBJzYZ3RKUhdiEwQAAAkI"]
[Sun May 03 00:55:41.239454 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:55145] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYsjYoBJzYZ3RKUhdiEwgAAAlI"]
[Sun May 03 00:55:41.615410 2026] [:error] [pid 51950:tid 51985] [client 172.173.121.85:64100] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYsjYoBJzYZ3RKUhdiExAAAAkU"]
[Sun May 03 00:55:41.988120 2026] [:error] [pid 51950:tid 51994] [client 172.173.121.85:64071] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYsjYoBJzYZ3RKUhdiExQAAAk4"]
[Sun May 03 00:55:42.366301 2026] [:error] [pid 53436:tid 53521] [client 172.173.121.85:55052] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYsjq9N0xp8fccVM0DqfgAAAJY"]
[Sun May 03 00:55:42.737442 2026] [:error] [pid 51950:tid 51993] [client 172.173.121.85:55160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYsjooBJzYZ3RKUhdiEzAAAAk0"]
[Sun May 03 00:55:43.113346 2026] [:error] [pid 51950:tid 51996] [client 172.173.121.85:55099] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYsj4oBJzYZ3RKUhdiEzQAAAlA"]
[Sun May 03 00:55:43.495641 2026] [:error] [pid 51950:tid 51990] [client 172.173.121.85:64079] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYsj4oBJzYZ3RKUhdiEzwAAAko"]
[Sun May 03 00:55:43.867830 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:55116] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYsj4oBJzYZ3RKUhdiE0QAAAlI"]
[Sun May 03 00:55:44.241186 2026] [:error] [pid 52012:tid 52091] [client 172.173.121.85:55131] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYskEzSWr-8cpS83mgLxwAAA04"]
[Sun May 03 00:55:44.615732 2026] [:error] [pid 51917:tid 51920] [client 172.173.121.85:55110] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYskK7wZviJ7BgcCi9vsQAAAcE"]
[Sun May 03 00:55:44.993457 2026] [:error] [pid 53436:tid 53503] [client 172.173.121.85:55166] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYskK9N0xp8fccVM0DqfwAAAIQ"]
[Sun May 03 00:55:45.376038 2026] [:error] [pid 53434:tid 53447] [client 172.173.121.85:55132] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYske9BXmRQcbfsxlyxzwAAAAQ"]
[Sun May 03 00:55:45.755219 2026] [:error] [pid 51917:tid 51928] [client 172.173.121.85:64107] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYska7wZviJ7BgcCi9vsgAAAck"]
[Sun May 03 00:55:46.130199 2026] [:error] [pid 53434:tid 53450] [client 172.173.121.85:55081] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYsku9BXmRQcbfsxlyx0wAAAAc"]
[Sun May 03 00:55:46.506302 2026] [:error] [pid 51950:tid 52003] [client 172.173.121.85:55092] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYskooBJzYZ3RKUhdiE1QAAAlc"]
[Sun May 03 00:55:46.878970 2026] [:error] [pid 52010:tid 52067] [client 172.173.121.85:64022] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYskgiR6wohDtdeJMBdVwAAAtg"]
[Sun May 03 00:55:47.253281 2026] [:error] [pid 52010:tid 52066] [client 172.173.121.85:55066] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYskwiR6wohDtdeJMBdWAAAAtc"]
[Sun May 03 00:55:47.631702 2026] [:error] [pid 51917:tid 51924] [client 172.173.121.85:55158] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYsk67wZviJ7BgcCi9vtgAAAcU"]
[Sun May 03 00:55:48.012296 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:55123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYslEzSWr-8cpS83mgLywAAA0k"]
[Sun May 03 00:55:48.395710 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:64085] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYslEzSWr-8cpS83mgLzQAAA1E"]
[Sun May 03 00:55:48.770200 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:64006] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYslEzSWr-8cpS83mgL0AAAA0c"]
[Sun May 03 00:55:49.146310 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:55111] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYslUzSWr-8cpS83mgL0QAAA0w"]
[Sun May 03 00:55:49.533715 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:64065] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYslUzSWr-8cpS83mgL2QAAA0E"]
[Sun May 03 00:55:49.907148 2026] [:error] [pid 52010:tid 52053] [client 172.173.121.85:64088] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYslQiR6wohDtdeJMBdXgAAAso"]
[Sun May 03 00:55:50.284604 2026] [:error] [pid 52010:tid 52057] [client 172.173.121.85:54220] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYslgiR6wohDtdeJMBdYAAAAs4"]
[Sun May 03 00:55:50.663282 2026] [:error] [pid 51917:tid 51927] [client 172.173.121.85:64003] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYslq7wZviJ7BgcCi9vtwAAAcg"]
[Sun May 03 00:55:51.035825 2026] [:error] [pid 51917:tid 51934] [client 172.173.121.85:54165] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYsl67wZviJ7BgcCi9vuAAAAc8"]
[Sun May 03 00:55:51.415436 2026] [:error] [pid 11894:tid 11904] [client 172.173.121.85:64125] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYslzHh6DQF1tkXIKz2WAAAAUc"]
[Sun May 03 00:55:51.787959 2026] [:error] [pid 52124:tid 52135] [client 172.173.121.85:55125] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYslzjabaZ9NMm8eQubSgAAA4Y"]
[Sun May 03 00:55:52.161189 2026] [:error] [pid 51917:tid 51926] [client 172.173.121.85:64023] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYsmK7wZviJ7BgcCi9vugAAAcc"]
[Sun May 03 00:55:52.543952 2026] [:error] [pid 52010:tid 52059] [client 172.173.121.85:55084] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYsmAiR6wohDtdeJMBdYwAAAtA"]
[Sun May 03 00:55:52.923279 2026] [:error] [pid 22846:tid 22851] [client 172.173.121.85:64098] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYsmIm1Ms03Mfhp3aYRygAAAQM"]
[Sun May 03 00:55:53.297525 2026] [:error] [pid 11894:tid 11898] [client 172.173.121.85:55119] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYsmTHh6DQF1tkXIKz2WgAAAUE"]
[Sun May 03 00:55:53.674426 2026] [:error] [pid 53435:tid 53492] [client 172.173.121.85:55128] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYsmYDmp7_z8QkjSzMJIQAAAFQ"]
[Sun May 03 00:55:54.050411 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:54246] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYsmgiR6wohDtdeJMBdZgAAAtI"]
[Sun May 03 00:55:54.431755 2026] [:error] [pid 52124:tid 52143] [client 172.173.121.85:64020] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYsmjjabaZ9NMm8eQubTQAAA44"]
[Sun May 03 00:55:54.807799 2026] [:error] [pid 51917:tid 51925] [client 172.173.121.85:55156] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYsmq7wZviJ7BgcCi9vvgAAAcY"]
[Sun May 03 00:55:55.189381 2026] [:error] [pid 52010:tid 52067] [client 172.173.121.85:55083] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYsmwiR6wohDtdeJMBdaAAAAtg"]
[Sun May 03 00:55:55.563113 2026] [:error] [pid 51917:tid 51933] [client 172.173.121.85:64011] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYsm67wZviJ7BgcCi9vwAAAAc4"]
[Sun May 03 00:55:55.936429 2026] [:error] [pid 51917:tid 51919] [client 172.173.121.85:64012] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYsm67wZviJ7BgcCi9vwQAAAcA"]
[Sun May 03 00:55:56.309210 2026] [:error] [pid 53436:tid 53505] [client 172.173.121.85:55076] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYsnK9N0xp8fccVM0DqiQAAAIY"]
[Sun May 03 00:55:56.682530 2026] [:error] [pid 52012:tid 52101] [client 172.173.121.85:64089] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYsnEzSWr-8cpS83mgL3wAAA1c"]
[Sun May 03 00:55:57.063953 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:64018] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYsne9BXmRQcbfsxlyx3AAAAA8"]
[Sun May 03 00:55:57.453143 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:55063] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYsnUzSWr-8cpS83mgL4QAAA0k"]
[Sun May 03 00:55:57.830183 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:54228] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYsnUzSWr-8cpS83mgL4wAAA1E"]
[Sun May 03 00:55:58.203677 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:64076] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afYsnkzSWr-8cpS83mgL5QAAA0U"]
[Sun May 03 00:55:58.579125 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:55051] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afYsnkzSWr-8cpS83mgL5gAAA0M"]
[Sun May 03 00:55:58.960010 2026] [:error] [pid 52010:tid 52053] [client 172.173.121.85:55040] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afYsngiR6wohDtdeJMBdbAAAAso"]
[Sun May 03 00:55:59.343889 2026] [:error] [pid 51917:tid 51920] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun May 03 00:55:59.532627 2026] [:error] [pid 51917:tid 51928] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun May 03 00:55:59.721292 2026] [:error] [pid 51917:tid 51923] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/tea.php
[Sun May 03 00:55:59.909629 2026] [:error] [pid 51917:tid 51927] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Sun May 03 00:56:00.098772 2026] [:error] [pid 51917:tid 51937] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun May 03 00:56:00.301251 2026] [:error] [pid 51917:tid 51926] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun May 03 00:56:00.491326 2026] [:error] [pid 51917:tid 51930] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun May 03 00:56:00.680022 2026] [:error] [pid 51917:tid 51925] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun May 03 00:56:00.869363 2026] [:error] [pid 51917:tid 51922] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sun May 03 00:56:01.057560 2026] [:error] [pid 51917:tid 51940] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Sun May 03 00:56:01.246139 2026] [:error] [pid 51917:tid 51921] [client 172.173.121.85:54211] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Sun May 03 00:56:01.431970 2026] [:error] [pid 51917:tid 51943] [client 172.173.121.85:54211] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYsoa7wZviJ7BgcCi9v1AAAAdg"]
[Sun May 03 00:56:01.805890 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:64101] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYsoUzSWr-8cpS83mgL7AAAA1U"]
[Sun May 03 00:56:02.182858 2026] [:error] [pid 52124:tid 52140] [client 172.173.121.85:64038] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYsojjabaZ9NMm8eQubTwAAA4s"]
[Sun May 03 00:56:02.565861 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:54209] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYsokzSWr-8cpS83mgL7QAAA0o"]
[Sun May 03 00:56:02.939737 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:55055] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYsokzSWr-8cpS83mgL7gAAA0E"]
[Sun May 03 00:56:03.333623 2026] [:error] [pid 52012:tid 52097] [client 172.173.121.85:64073] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYso0zSWr-8cpS83mgL8AAAA1Q"]
[Sun May 03 00:56:03.713979 2026] [:error] [pid 51917:tid 51928] [client 172.173.121.85:55058] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYso67wZviJ7BgcCi9v1wAAAck"]
[Sun May 03 00:56:04.087900 2026] [:error] [pid 11894:tid 11908] [client 172.173.121.85:55149] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYspDHh6DQF1tkXIKz2YgAAAUs"]
[Sun May 03 00:56:04.463439 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:64019] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYspO9BXmRQcbfsxlyx3QAAABg"]
[Sun May 03 00:56:04.856321 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:55155] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYspEzSWr-8cpS83mgL8wAAA1E"]
[Sun May 03 00:56:05.237695 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:55121] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYspUzSWr-8cpS83mgL9AAAA0Y"]
[Sun May 03 00:56:05.631577 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:55122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYspUzSWr-8cpS83mgL9gAAA0s"]
[Sun May 03 00:56:06.005487 2026] [:error] [pid 52010:tid 52059] [client 172.173.121.85:55048] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYspgiR6wohDtdeJMBdbwAAAtA"]
[Sun May 03 00:56:06.379519 2026] [:error] [pid 51917:tid 51939] [client 172.173.121.85:55153] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYspq7wZviJ7BgcCi9v2QAAAdQ"]
[Sun May 03 00:56:06.753456 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:64106] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYspkzSWr-8cpS83mgL-gAAA0o"]
[Sun May 03 00:56:07.123792 2026] [:error] [pid 53435:tid 53473] [client 172.173.121.85:55135] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYsp4Dmp7_z8QkjSzMJJgAAAEE"]
[Sun May 03 00:56:07.498568 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:64090] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYsp0zSWr-8cpS83mgL-wAAA0E"]
[Sun May 03 00:56:07.878970 2026] [:error] [pid 53435:tid 53493] [client 172.173.121.85:64034] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYsp4Dmp7_z8QkjSzMJKwAAAFU"]
[Sun May 03 00:56:08.255840 2026] [:error] [pid 52012:tid 52090] [client 172.173.121.85:64068] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYsqEzSWr-8cpS83mgL_QAAA00"]
[Sun May 03 00:56:08.630348 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:64029] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYsqIDmp7_z8QkjSzMJLAAAAEY"]
[Sun May 03 00:56:09.005867 2026] [:error] [pid 53435:tid 53488] [client 172.173.121.85:55167] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYsqYDmp7_z8QkjSzMJLQAAAFA"]
[Sun May 03 00:56:09.382542 2026] [:error] [pid 51950:tid 51986] [client 172.173.121.85:55070] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYsqYoBJzYZ3RKUhdiE1gAAAkY"]
[Sun May 03 00:56:09.778459 2026] [:error] [pid 53435:tid 53474] [client 172.173.121.85:55109] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYsqYDmp7_z8QkjSzMJMQAAAEI"]
[Sun May 03 00:56:10.153740 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:64014] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYsqkzSWr-8cpS83mgMAAAAA0M"]
[Sun May 03 00:56:10.525908 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:55050] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYsqoDmp7_z8QkjSzMJMwAAAE4"]
[Sun May 03 00:56:10.904963 2026] [:error] [pid 53436:tid 53523] [client 172.173.121.85:55064] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYsqq9N0xp8fccVM0DqjAAAAJg"]
[Sun May 03 00:56:11.286200 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:55134] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYsq0zSWr-8cpS83mgMAwAAA0s"]
[Sun May 03 00:56:11.672642 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:55120] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYsqwiR6wohDtdeJMBdcgAAAtI"]
[Sun May 03 00:56:12.049156 2026] [:error] [pid 53435:tid 53481] [client 172.173.121.85:64043] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYsrIDmp7_z8QkjSzMJNAAAAEk"]
[Sun May 03 00:56:12.431793 2026] [:error] [pid 52010:tid 52062] [client 172.173.121.85:64009] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYsrAiR6wohDtdeJMBddwAAAtM"]
[Sun May 03 00:56:12.819057 2026] [:error] [pid 51950:tid 52001] [client 172.173.121.85:54214] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYsrIoBJzYZ3RKUhdiE2QAAAlU"]
[Sun May 03 00:56:13.193906 2026] [:error] [pid 11894:tid 11910] [client 172.173.121.85:55138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYsrTHh6DQF1tkXIKz2agAAAU0"]
[Sun May 03 00:56:13.568785 2026] [:error] [pid 11894:tid 11921] [client 172.173.121.85:64082] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYsrTHh6DQF1tkXIKz2awAAAVg"]
[Sun May 03 00:56:13.946938 2026] [:error] [pid 11894:tid 11907] [client 172.173.121.85:64120] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYsrTHh6DQF1tkXIKz2bQAAAUo"]
[Sun May 03 00:56:14.324871 2026] [:error] [pid 51950:tid 52004] [client 172.173.121.85:55140] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYsrooBJzYZ3RKUhdiE3AAAAlg"]
[Sun May 03 00:56:14.704519 2026] [:error] [pid 11894:tid 11916] [client 172.173.121.85:54226] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYsrjHh6DQF1tkXIKz2bgAAAVM"]
[Sun May 03 00:56:15.082150 2026] [:error] [pid 51950:tid 51992] [client 172.173.121.85:54270] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYsr4oBJzYZ3RKUhdiE3wAAAkw"]
[Sun May 03 00:56:15.458135 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:64007] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYsr0zSWr-8cpS83mgMBQAAA0E"]
[Sun May 03 00:56:15.837783 2026] [:error] [pid 52012:tid 52090] [client 172.173.121.85:55090] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYsr0zSWr-8cpS83mgMBwAAA00"]
[Sun May 03 00:56:16.212105 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:64039] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYssEzSWr-8cpS83mgMCQAAA1I"]
[Sun May 03 00:56:16.586623 2026] [:error] [pid 51950:tid 51999] [client 172.173.121.85:55130] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYssIoBJzYZ3RKUhdiE4QAAAlM"]
[Sun May 03 00:56:16.971503 2026] [:error] [pid 51950:tid 51996] [client 172.173.121.85:54229] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYssIoBJzYZ3RKUhdiE4gAAAlA"]
[Sun May 03 00:56:17.346797 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:55082] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYssUzSWr-8cpS83mgMDQAAA0c"]
[Sun May 03 00:56:17.721548 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:54255] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYssUzSWr-8cpS83mgMDgAAA0s"]
[Sun May 03 00:56:18.092193 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:64059] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYsskzSWr-8cpS83mgMDwAAA0U"]
[Sun May 03 00:56:18.467024 2026] [:error] [pid 52012:tid 52085] [client 172.173.121.85:54162] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYsskzSWr-8cpS83mgMEgAAA0g"]
[Sun May 03 00:56:18.850770 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:55154] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYsskzSWr-8cpS83mgMFgAAA1A"]
[Sun May 03 00:56:19.224221 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:55077] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYss4Dmp7_z8QkjSzMJNQAAAE4"]
[Sun May 03 00:56:19.596863 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:64123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYss0zSWr-8cpS83mgMGwAAA0k"]
[Sun May 03 00:56:19.984432 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:64025] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYss0zSWr-8cpS83mgMHgAAA0s"]
[Sun May 03 00:56:20.360907 2026] [:error] [pid 52010:tid 52063] [client 172.173.121.85:55060] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYstAiR6wohDtdeJMBdfAAAAtQ"]
[Sun May 03 00:56:20.743198 2026] [:error] [pid 52010:tid 52044] [client 172.173.121.85:64027] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYstAiR6wohDtdeJMBdfwAAAsE"]
[Sun May 03 00:56:21.119563 2026] [:error] [pid 51917:tid 51927] [client 172.173.121.85:55148] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYsta7wZviJ7BgcCi9v2wAAAcg"]
[Sun May 03 00:56:21.493110 2026] [:error] [pid 52124:tid 52151] [client 172.173.121.85:54210] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYstTjabaZ9NMm8eQubUwAAA5Y"]
[Sun May 03 00:56:21.865132 2026] [:error] [pid 53435:tid 53481] [client 172.173.121.85:55098] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYstYDmp7_z8QkjSzMJOAAAAEk"]
[Sun May 03 00:56:22.244677 2026] [:error] [pid 22846:tid 22859] [client 172.173.121.85:55072] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYstom1Ms03Mfhp3aYRzgAAAQs"]
[Sun May 03 00:56:22.620750 2026] [:error] [pid 52012:tid 52096] [client 172.173.121.85:54248] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYstkzSWr-8cpS83mgMJgAAA1M"]
[Sun May 03 00:56:23.008477 2026] [:error] [pid 53434:tid 53453] [client 172.173.121.85:54264] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYst-9BXmRQcbfsxlyx6wAAAAo"]
[Sun May 03 00:56:23.384742 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:55045] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYst0zSWr-8cpS83mgMKgAAA0M"]
[Sun May 03 00:56:23.762205 2026] [:error] [pid 51917:tid 51937] [client 172.173.121.85:55139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYst67wZviJ7BgcCi9v3AAAAdI"]
[Sun May 03 00:56:24.138580 2026] [:error] [pid 52012:tid 52101] [client 172.173.121.85:55086] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYsuEzSWr-8cpS83mgMMAAAA1c"]
[Sun May 03 00:56:24.517463 2026] [:error] [pid 53434:tid 53445] [client 172.173.121.85:55155] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYsuO9BXmRQcbfsxlyx7AAAAAI"]
[Sun May 03 00:56:24.892692 2026] [:error] [pid 52010:tid 52056] [client 172.173.121.85:54190] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYsuAiR6wohDtdeJMBdgwAAAs0"]
[Sun May 03 00:56:25.268176 2026] [:error] [pid 52010:tid 52048] [client 172.173.121.85:55088] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYsuQiR6wohDtdeJMBdhAAAAsU"]
[Sun May 03 00:56:25.644855 2026] [:error] [pid 52010:tid 52043] [client 172.173.121.85:54240] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYsuQiR6wohDtdeJMBdhgAAAsA"]
[Sun May 03 00:56:26.035445 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:54204] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYsugiR6wohDtdeJMBdiAAAAtU"]
[Sun May 03 00:56:26.413353 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:55114] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYsuoDmp7_z8QkjSzMJOgAAAE8"]
[Sun May 03 00:56:26.805776 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:54267] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYsugiR6wohDtdeJMBdjAAAAs8"]
[Sun May 03 00:56:27.185231 2026] [:error] [pid 52012:tid 52096] [client 172.173.121.85:55143] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYsu0zSWr-8cpS83mgMNgAAA1M"]
[Sun May 03 00:56:27.569138 2026] [:error] [pid 11894:tid 11915] [client 172.173.121.85:55047] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYsuzHh6DQF1tkXIKz2cgAAAVI"]
[Sun May 03 00:56:27.951990 2026] [:error] [pid 11894:tid 11911] [client 172.173.121.85:64060] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYsuzHh6DQF1tkXIKz2cwAAAU4"]
[Sun May 03 00:56:28.326448 2026] [:error] [pid 52010:tid 52050] [client 172.173.121.85:54199] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYsvAiR6wohDtdeJMBdjQAAAsc"]
[Sun May 03 00:56:28.697205 2026] [:error] [pid 52124:tid 52135] [client 172.173.121.85:54152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYsvDjabaZ9NMm8eQubVgAAA4Y"]
[Sun May 03 00:56:29.080339 2026] [:error] [pid 52010:tid 52044] [client 172.173.121.85:55152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYsvQiR6wohDtdeJMBdjgAAAsE"]
[Sun May 03 00:56:29.457687 2026] [:error] [pid 53434:tid 53454] [client 172.173.121.85:54160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYsve9BXmRQcbfsxlyx7gAAAAs"]
[Sun May 03 00:56:29.843873 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:54145] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYsve9BXmRQcbfsxlyx7wAAABc"]
[Sun May 03 00:56:30.225574 2026] [:error] [pid 22846:tid 22850] [client 172.173.121.85:54224] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYsvom1Ms03Mfhp3aYRzwAAAQI"]
[Sun May 03 00:56:30.599228 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:55053] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYsvgiR6wohDtdeJMBdkQAAAtI"]
[Sun May 03 00:56:30.978135 2026] [:error] [pid 52124:tid 52143] [client 172.173.121.85:55080] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYsvjjabaZ9NMm8eQubWQAAA44"]
[Sun May 03 00:56:31.365491 2026] [:error] [pid 51950:tid 51991] [client 172.173.121.85:64017] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYsv4oBJzYZ3RKUhdiE7AAAAks"]
[Sun May 03 00:56:31.738908 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:64127] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYsv-9BXmRQcbfsxlyx8wAAAA4"]
[Sun May 03 00:56:32.128316 2026] [:error] [pid 53435:tid 53472] [client 172.173.121.85:55089] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYswIDmp7_z8QkjSzMJOwAAAEA"]
[Sun May 03 00:56:32.505787 2026] [:error] [pid 51950:tid 51981] [client 172.173.121.85:55079] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYswIoBJzYZ3RKUhdiE7QAAAkE"]
[Sun May 03 00:56:32.879340 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:54245] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYswEzSWr-8cpS83mgMOgAAA0Q"]
[Sun May 03 00:56:33.261335 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:54249] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYswUzSWr-8cpS83mgMOwAAA0U"]
[Sun May 03 00:56:33.640624 2026] [:error] [pid 51950:tid 51980] [client 172.173.121.85:55165] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYswYoBJzYZ3RKUhdiE7gAAAkA"]
[Sun May 03 00:56:34.011864 2026] [:error] [pid 11894:tid 11913] [client 172.173.121.85:54254] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYswjHh6DQF1tkXIKz2dwAAAVA"]
[Sun May 03 00:56:34.398039 2026] [:error] [pid 53435:tid 53491] [client 172.173.121.85:54217] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYswoDmp7_z8QkjSzMJPQAAAFM"]
[Sun May 03 00:56:34.770493 2026] [:error] [pid 53435:tid 53485] [client 172.173.121.85:54197] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYswoDmp7_z8QkjSzMJPgAAAE0"]
[Sun May 03 00:56:35.146475 2026] [:error] [pid 53435:tid 53473] [client 172.173.121.85:54227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYsw4Dmp7_z8QkjSzMJPwAAAEE"]
[Sun May 03 00:56:35.533641 2026] [:error] [pid 53434:tid 53462] [client 172.173.121.85:54239] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYsw-9BXmRQcbfsxlyx_wAAABM"]
[Sun May 03 00:56:35.934180 2026] [:error] [pid 53436:tid 53506] [client 172.173.121.85:54155] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYsw69N0xp8fccVM0DqjgAAAIc"]
[Sun May 03 00:56:36.320108 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:55097] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYsxIDmp7_z8QkjSzMJQQAAAEQ"]
[Sun May 03 00:56:36.696774 2026] [:error] [pid 52012:tid 52099] [client 172.173.121.85:55101] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYsxEzSWr-8cpS83mgMPAAAA1Y"]
[Sun May 03 00:56:37.081266 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:64091] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYsxUzSWr-8cpS83mgMPgAAA1E"]
[Sun May 03 00:56:37.458441 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:55146] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYsxUzSWr-8cpS83mgMPwAAA0Y"]
[Sun May 03 00:56:37.835889 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:54223] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYsxUzSWr-8cpS83mgMQQAAA0s"]
[Sun May 03 00:56:38.220936 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:55144] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYsxoDmp7_z8QkjSzMJQgAAAEY"]
[Sun May 03 00:56:38.599652 2026] [:error] [pid 52012:tid 52092] [client 172.173.121.85:53596] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYsxkzSWr-8cpS83mgMRAAAA08"]
[Sun May 03 00:56:38.976811 2026] [:error] [pid 51917:tid 51931] [client 172.173.121.85:54234] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYsxq7wZviJ7BgcCi9v4AAAAcw"]
[Sun May 03 00:56:39.370521 2026] [:error] [pid 51917:tid 51933] [client 172.173.121.85:54147] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYsx67wZviJ7BgcCi9v4wAAAc4"]
[Sun May 03 00:56:39.748689 2026] [:error] [pid 53435:tid 53484] [client 172.173.121.85:54241] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYsx4Dmp7_z8QkjSzMJRwAAAEw"]
[Sun May 03 00:56:40.121788 2026] [:error] [pid 22846:tid 22866] [client 172.173.121.85:54176] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYsyIm1Ms03Mfhp3aYR0QAAARI"]
[Sun May 03 00:56:40.497005 2026] [:error] [pid 53435:tid 53481] [client 172.173.121.85:64094] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYsyIDmp7_z8QkjSzMJSQAAAEk"]
[Sun May 03 00:56:40.869304 2026] [:error] [pid 53435:tid 53483] [client 172.173.121.85:54144] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYsyIDmp7_z8QkjSzMJTQAAAEs"]
[Sun May 03 00:56:41.250894 2026] [:error] [pid 52010:tid 52054] [client 172.173.121.85:53594] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYsyQiR6wohDtdeJMBdmQAAAss"]
[Sun May 03 00:56:41.628285 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:55151] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYsyYoBJzYZ3RKUhdiE8QAAAlI"]
[Sun May 03 00:56:42.006128 2026] [:error] [pid 51950:tid 51987] [client 172.173.121.85:55136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYsyooBJzYZ3RKUhdiE8gAAAkc"]
[Sun May 03 00:56:42.388559 2026] [:error] [pid 52010:tid 52049] [client 172.173.121.85:54178] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYsygiR6wohDtdeJMBdmwAAAsY"]
[Sun May 03 00:56:42.767654 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:54194] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYsyoDmp7_z8QkjSzMJTwAAAEo"]
[Sun May 03 00:56:43.148572 2026] [:error] [pid 11894:tid 11906] [client 172.173.121.85:55147] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYsyzHh6DQF1tkXIKz2eQAAAUk"]
[Sun May 03 00:56:43.523442 2026] [:error] [pid 51917:tid 51943] [client 172.173.121.85:54244] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYsy67wZviJ7BgcCi9v6QAAAdg"]
[Sun May 03 00:56:43.899892 2026] [:error] [pid 51917:tid 51936] [client 172.173.121.85:54183] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYsy67wZviJ7BgcCi9v6gAAAdE"]
[Sun May 03 00:56:44.275064 2026] [:error] [pid 53435:tid 53483] [client 172.173.121.85:54148] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYszIDmp7_z8QkjSzMJVAAAAEs"]
[Sun May 03 00:56:44.651485 2026] [:error] [pid 52012:tid 52090] [client 172.173.121.85:54167] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYszEzSWr-8cpS83mgMRwAAA00"]
[Sun May 03 00:56:45.037153 2026] [:error] [pid 52012:tid 52096] [client 172.173.121.85:54261] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYszUzSWr-8cpS83mgMSQAAA1M"]
[Sun May 03 00:56:45.432376 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:54232] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYszUzSWr-8cpS83mgMSgAAA0U"]
[Sun May 03 00:56:45.810393 2026] [:error] [pid 53435:tid 53472] [client 172.173.121.85:55078] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYszYDmp7_z8QkjSzMJVwAAAEA"]
[Sun May 03 00:56:46.182280 2026] [:error] [pid 52012:tid 52099] [client 172.173.121.85:55162] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYszkzSWr-8cpS83mgMTwAAA1Y"]
[Sun May 03 00:56:46.554838 2026] [:error] [pid 22846:tid 22855] [client 172.173.121.85:64062] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYszom1Ms03Mfhp3aYR1QAAAQc"]
[Sun May 03 00:56:46.943451 2026] [:error] [pid 52124:tid 52135] [client 172.173.121.85:55041] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYszjjabaZ9NMm8eQubXQAAA4Y"]
[Sun May 03 00:56:47.316753 2026] [:error] [pid 52124:tid 52138] [client 172.173.121.85:54238] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYszzjabaZ9NMm8eQubXgAAA4k"]
[Sun May 03 00:56:47.697502 2026] [:error] [pid 51950:tid 52001] [client 172.173.121.85:53571] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYsz4oBJzYZ3RKUhdiE9gAAAlU"]
[Sun May 03 00:56:48.076673 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:54166] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYs0IDmp7_z8QkjSzMJWQAAAEQ"]
[Sun May 03 00:56:48.454861 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:55054] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYs0IDmp7_z8QkjSzMJWgAAAEo"]
[Sun May 03 00:56:48.832673 2026] [:error] [pid 11894:tid 11917] [client 172.173.121.85:55161] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYs0DHh6DQF1tkXIKz2egAAAVQ"]
[Sun May 03 00:56:49.207291 2026] [:error] [pid 11894:tid 11904] [client 172.173.121.85:54182] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYs0THh6DQF1tkXIKz2ewAAAUc"]
[Sun May 03 00:56:49.606782 2026] [:error] [pid 53436:tid 53521] [client 172.173.121.85:55074] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYs0a9N0xp8fccVM0DqkwAAAJY"]
[Sun May 03 00:56:49.990774 2026] [:error] [pid 53435:tid 53496] [client 172.173.121.85:54216] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYs0YDmp7_z8QkjSzMJXwAAAFg"]
[Sun May 03 00:56:50.369057 2026] [:error] [pid 53435:tid 53480] [client 172.173.121.85:55042] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYs0oDmp7_z8QkjSzMJYAAAAEg"]
[Sun May 03 00:56:50.752349 2026] [:error] [pid 53435:tid 53495] [client 172.173.121.85:55085] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYs0oDmp7_z8QkjSzMJYQAAAFc"]
[Sun May 03 00:56:51.124438 2026] [:error] [pid 52012:tid 52102] [client 172.173.121.85:64083] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYs00zSWr-8cpS83mgMUwAAA1g"]
[Sun May 03 00:56:51.498361 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:53586] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYs0-9BXmRQcbfsxlyyDAAAABc"]
[Sun May 03 00:56:51.871705 2026] [:error] [pid 52010:tid 52050] [client 172.173.121.85:54265] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYs0wiR6wohDtdeJMBdnQAAAsc"]
[Sun May 03 00:56:52.246153 2026] [:error] [pid 52012:tid 52075] [client 172.173.121.85:55103] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYs1EzSWr-8cpS83mgMVwAAA0A"]
[Sun May 03 00:56:52.633311 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:64050] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYs1IDmp7_z8QkjSzMJZgAAAEo"]
[Sun May 03 00:56:53.008703 2026] [:error] [pid 52010:tid 52067] [client 172.173.121.85:54161] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYs1QiR6wohDtdeJMBdnwAAAtg"]
[Sun May 03 00:56:53.385974 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:54219] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYs1UzSWr-8cpS83mgMWQAAA0U"]
[Sun May 03 00:56:53.759114 2026] [:error] [pid 53435:tid 53496] [client 172.173.121.85:54235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYs1YDmp7_z8QkjSzMJawAAAFg"]
[Sun May 03 00:56:54.129752 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:64072] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYs1oDmp7_z8QkjSzMJbAAAAE8"]
[Sun May 03 00:56:54.517891 2026] [:error] [pid 51950:tid 51989] [client 172.173.121.85:55049] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs1ooBJzYZ3RKUhdiE-QAAAkk"]
[Sun May 03 00:56:54.903806 2026] [:error] [pid 52010:tid 52043] [client 172.173.121.85:64074] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs1giR6wohDtdeJMBdogAAAsA"]
[Sun May 03 00:56:55.276681 2026] [:error] [pid 53436:tid 53515] [client 172.173.121.85:54206] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs169N0xp8fccVM0DqlQAAAJA"]
[Sun May 03 00:56:55.727961 2026] [:error] [pid 51950:tid 51983] [client 172.173.121.85:53606] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs14oBJzYZ3RKUhdiE-wAAAkM"]
[Sun May 03 00:56:56.099377 2026] [:error] [pid 52010:tid 52045] [client 172.173.121.85:53610] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYs2AiR6wohDtdeJMBdowAAAsI"]
[Sun May 03 00:56:56.633579 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:54268] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYs2EzSWr-8cpS83mgMWwAAA1U"]
[Sun May 03 00:56:57.005742 2026] [:error] [pid 52012:tid 52102] [client 172.173.121.85:54153] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYs2UzSWr-8cpS83mgMXQAAA1g"]
[Sun May 03 00:56:57.377955 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:54215] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYs2UzSWr-8cpS83mgMYQAAA0M"]
[Sun May 03 00:56:57.806546 2026] [:error] [pid 52012:tid 52079] [client 172.173.121.85:53605] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYs2UzSWr-8cpS83mgMYwAAA0I"]
[Sun May 03 00:56:58.178511 2026] [:error] [pid 52012:tid 52099] [client 172.173.121.85:54195] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYs2kzSWr-8cpS83mgMaAAAA1Y"]
[Sun May 03 00:56:58.565733 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:54193] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYs2kzSWr-8cpS83mgMawAAA0k"]
[Sun May 03 00:56:58.946214 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:54162] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYs2u9BXmRQcbfsxlyyDwAAAA4"]
[Sun May 03 00:56:59.324810 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:55093] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "afYs2-9BXmRQcbfsxlyyEAAAABg"]
[Sun May 03 00:56:59.723271 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:54263] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "afYs20zSWr-8cpS83mgMbwAAA0M"]
[Sun May 03 00:57:00.095282 2026] [:error] [pid 53434:tid 53461] [client 172.173.121.85:55068] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "afYs3O9BXmRQcbfsxlyyFAAAABI"]
[Sun May 03 00:57:00.470776 2026] [:error] [pid 52012:tid 52097] [client 172.173.121.85:53570] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "afYs3EzSWr-8cpS83mgMcQAAA1Q"]
[Sun May 03 00:57:00.869635 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:54221] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afYs3EzSWr-8cpS83mgMcwAAA0U"]
[Sun May 03 00:57:01.256287 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:54250] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun May 03 00:57:01.643412 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:54250] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun May 03 00:57:01.834488 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:54250] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun May 03 00:57:02.404915 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:54250] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun May 03 00:57:02.596733 2026] [:error] [pid 52012:tid 52097] [client 172.173.121.85:54250] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun May 03 00:57:02.801734 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:54250] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun May 03 00:57:02.992663 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:54250] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun May 03 00:57:03.371360 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:54250] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYs30zSWr-8cpS83mgMgwAAA0c"]
[Sun May 03 00:57:03.747218 2026] [:error] [pid 53435:tid 53494] [client 172.173.121.85:54191] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYs34Dmp7_z8QkjSzMJcwAAAFY"]
[Sun May 03 00:57:04.118785 2026] [:error] [pid 53435:tid 53472] [client 172.173.121.85:55138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYs4IDmp7_z8QkjSzMJdwAAAEA"]
[Sun May 03 00:57:04.497150 2026] [:error] [pid 53435:tid 53488] [client 172.173.121.85:54233] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYs4IDmp7_z8QkjSzMJfAAAAFA"]
[Sun May 03 00:57:04.871326 2026] [:error] [pid 53435:tid 53475] [client 172.173.121.85:54236] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYs4IDmp7_z8QkjSzMJfgAAAEM"]
[Sun May 03 00:57:05.246675 2026] [:error] [pid 51950:tid 52000] [client 172.173.121.85:54181] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYs4YoBJzYZ3RKUhdiFAAAAAlQ"]
[Sun May 03 00:57:05.619807 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:53576] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYs4UzSWr-8cpS83mgMhAAAA0w"]
[Sun May 03 00:57:06.008903 2026] [:error] [pid 52124:tid 52145] [client 172.173.121.85:55067] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYs4jjabaZ9NMm8eQubYQAAA5A"]
[Sun May 03 00:57:06.384466 2026] [:error] [pid 52010:tid 52063] [client 172.173.121.85:54178] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYs4giR6wohDtdeJMBdqAAAAtQ"]
[Sun May 03 00:57:06.762645 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:54243] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYs4kzSWr-8cpS83mgMhwAAA1A"]
[Sun May 03 00:57:07.135576 2026] [:error] [pid 51950:tid 51984] [client 172.173.121.85:55100] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYs44oBJzYZ3RKUhdiFBAAAAkQ"]
[Sun May 03 00:57:07.519512 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:53626] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYs4-9BXmRQcbfsxlyyFwAAABQ"]
[Sun May 03 00:57:07.899013 2026] [:error] [pid 51917:tid 51921] [client 172.173.121.85:53561] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYs467wZviJ7BgcCi9v8AAAAcI"]
[Sun May 03 00:57:08.284614 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:54189] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYs5EzSWr-8cpS83mgMjgAAA0s"]
[Sun May 03 00:57:08.666857 2026] [:error] [pid 53435:tid 53480] [client 172.173.121.85:54200] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYs5IDmp7_z8QkjSzMJgwAAAEg"]
[Sun May 03 00:57:09.047788 2026] [:error] [pid 51917:tid 51936] [client 172.173.121.85:55059] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYs5a7wZviJ7BgcCi9v8gAAAdE"]
[Sun May 03 00:57:09.420163 2026] [:error] [pid 51950:tid 51981] [client 172.173.121.85:54230] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYs5YoBJzYZ3RKUhdiFBQAAAkE"]
[Sun May 03 00:57:09.801942 2026] [:error] [pid 11894:tid 11903] [client 172.173.121.85:53568] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYs5THh6DQF1tkXIKz2fwAAAUY"]
[Sun May 03 00:57:10.184751 2026] [:error] [pid 11894:tid 11902] [client 172.173.121.85:53550] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYs5jHh6DQF1tkXIKz2gAAAAUU"]
[Sun May 03 00:57:10.558961 2026] [:error] [pid 11894:tid 11919] [client 172.173.121.85:54156] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYs5jHh6DQF1tkXIKz2gQAAAVY"]
[Sun May 03 00:57:10.934818 2026] [:error] [pid 52010:tid 52066] [client 172.173.121.85:54201] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYs5giR6wohDtdeJMBdrAAAAtc"]
[Sun May 03 00:57:11.330760 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:54179] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYs50zSWr-8cpS83mgMkAAAA0Q"]
[Sun May 03 00:57:11.704232 2026] [:error] [pid 51917:tid 51927] [client 172.173.121.85:53525] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYs567wZviJ7BgcCi9v-AAAAcg"]
[Sun May 03 00:57:12.079470 2026] [:error] [pid 51950:tid 51982] [client 172.173.121.85:53609] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYs6IoBJzYZ3RKUhdiFCAAAAkI"]
[Sun May 03 00:57:12.457990 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:54252] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYs6EzSWr-8cpS83mgMkQAAA0k"]
[Sun May 03 00:57:12.831747 2026] [:error] [pid 22846:tid 22866] [client 172.173.121.85:53537] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYs6Im1Ms03Mfhp3aYR2wAAARI"]
[Sun May 03 00:57:13.203065 2026] [:error] [pid 53434:tid 53446] [client 172.173.121.85:54186] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYs6e9BXmRQcbfsxlyyGQAAAAM"]
[Sun May 03 00:57:13.577196 2026] [:error] [pid 53436:tid 53522] [client 172.173.121.85:64126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYs6a9N0xp8fccVM0DqnAAAAJc"]
[Sun May 03 00:57:13.953967 2026] [:error] [pid 53435:tid 53477] [client 172.173.121.85:54237] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYs6YDmp7_z8QkjSzMJiQAAAEU"]
[Sun May 03 00:57:14.328392 2026] [:error] [pid 11894:tid 11899] [client 172.173.121.85:54177] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYs6jHh6DQF1tkXIKz2hAAAAUI"]
[Sun May 03 00:57:14.704815 2026] [:error] [pid 51917:tid 51934] [client 172.173.121.85:54174] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYs6q7wZviJ7BgcCi9v_AAAAc8"]
[Sun May 03 00:57:15.075924 2026] [:error] [pid 53436:tid 53502] [client 172.173.121.85:54262] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYs669N0xp8fccVM0DqngAAAIM"]
[Sun May 03 00:57:15.454288 2026] [:error] [pid 11894:tid 11916] [client 172.173.121.85:54247] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYs6zHh6DQF1tkXIKz2hwAAAVM"]
[Sun May 03 00:57:15.827349 2026] [:error] [pid 52010:tid 52049] [client 172.173.121.85:54225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYs6wiR6wohDtdeJMBdsgAAAsY"]
[Sun May 03 00:57:16.201191 2026] [:error] [pid 51917:tid 51919] [client 172.173.121.85:54266] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYs7K7wZviJ7BgcCi9v_QAAAcA"]
[Sun May 03 00:57:16.582339 2026] [:error] [pid 53434:tid 53452] [client 172.173.121.85:54168] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYs7O9BXmRQcbfsxlyyGwAAAAk"]
[Sun May 03 00:57:16.958089 2026] [:error] [pid 11894:tid 11917] [client 172.173.121.85:53601] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYs7DHh6DQF1tkXIKz2iQAAAVQ"]
[Sun May 03 00:57:17.335215 2026] [:error] [pid 52010:tid 52047] [client 172.173.121.85:53517] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYs7QiR6wohDtdeJMBdtAAAAsQ"]
[Sun May 03 00:57:17.714834 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:55057] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYs7e9BXmRQcbfsxlyyHgAAABg"]
[Sun May 03 00:57:18.085996 2026] [:error] [pid 53435:tid 53483] [client 172.173.121.85:54173] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYs7oDmp7_z8QkjSzMJiwAAAEs"]
[Sun May 03 00:57:18.473412 2026] [:error] [pid 52010:tid 52050] [client 172.173.121.85:53530] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYs7giR6wohDtdeJMBdtgAAAsc"]
[Sun May 03 00:57:18.853482 2026] [:error] [pid 53435:tid 53479] [client 172.173.121.85:54170] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYs7oDmp7_z8QkjSzMJjQAAAEc"]
[Sun May 03 00:57:19.228471 2026] [:error] [pid 53435:tid 53472] [client 172.173.121.85:54205] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYs74Dmp7_z8QkjSzMJjwAAAEA"]
[Sun May 03 00:57:19.603386 2026] [:error] [pid 53435:tid 53477] [client 172.173.121.85:54154] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYs74Dmp7_z8QkjSzMJlAAAAEU"]
[Sun May 03 00:57:19.985998 2026] [:error] [pid 53435:tid 53481] [client 172.173.121.85:53620] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYs74Dmp7_z8QkjSzMJlwAAAEk"]
[Sun May 03 00:57:20.361406 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:53578] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYs8IDmp7_z8QkjSzMJmwAAAE4"]
[Sun May 03 00:57:20.736846 2026] [:error] [pid 53435:tid 53491] [client 172.173.121.85:53592] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYs8IDmp7_z8QkjSzMJngAAAFM"]
[Sun May 03 00:57:21.108019 2026] [:error] [pid 51950:tid 52003] [client 172.173.121.85:55094] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYs8YoBJzYZ3RKUhdiFCQAAAlc"]
[Sun May 03 00:57:21.483065 2026] [:error] [pid 52010:tid 52043] [client 172.173.121.85:53628] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYs8QiR6wohDtdeJMBdugAAAsA"]
[Sun May 03 00:57:21.861980 2026] [:error] [pid 22846:tid 22849] [client 172.173.121.85:53613] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYs8Ym1Ms03Mfhp3aYR4wAAAQE"]
[Sun May 03 00:57:22.236591 2026] [:error] [pid 52010:tid 52057] [client 172.173.121.85:64117] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYs8giR6wohDtdeJMBduwAAAs4"]
[Sun May 03 00:57:22.609985 2026] [:error] [pid 11894:tid 11903] [client 172.173.121.85:54150] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYs8jHh6DQF1tkXIKz2jAAAAUY"]
[Sun May 03 00:57:22.985840 2026] [:error] [pid 11894:tid 11919] [client 172.173.121.85:53625] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs8jHh6DQF1tkXIKz2jQAAAVY"]
[Sun May 03 00:57:23.360976 2026] [:error] [pid 51917:tid 51927] [client 172.173.121.85:54158] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs867wZviJ7BgcCi9wAgAAAcg"]
[Sun May 03 00:57:23.736716 2026] [:error] [pid 11894:tid 11910] [client 172.173.121.85:54157] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs8zHh6DQF1tkXIKz2jwAAAU0"]
[Sun May 03 00:57:24.109906 2026] [:error] [pid 53435:tid 53475] [client 172.173.121.85:53529] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYs9IDmp7_z8QkjSzMJoAAAAEM"]
[Sun May 03 00:57:24.499050 2026] [:error] [pid 51950:tid 51993] [client 172.173.121.85:53504] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYs9IoBJzYZ3RKUhdiFDgAAAk0"]
[Sun May 03 00:57:24.879815 2026] [:error] [pid 53434:tid 53464] [client 172.173.121.85:53542] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYs9O9BXmRQcbfsxlyyIwAAABU"]
[Sun May 03 00:57:25.253814 2026] [:error] [pid 22846:tid 22871] [client 172.173.121.85:53559] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYs9Ym1Ms03Mfhp3aYR5wAAARc"]
[Sun May 03 00:57:25.644678 2026] [:error] [pid 52010:tid 52059] [client 172.173.121.85:53624] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYs9QiR6wohDtdeJMBdwwAAAtA"]
[Sun May 03 00:57:26.021914 2026] [:error] [pid 53435:tid 53484] [client 172.173.121.85:53557] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYs9oDmp7_z8QkjSzMJoQAAAEw"]
[Sun May 03 00:57:26.408956 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:55073] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYs9kzSWr-8cpS83mgMmAAAA1I"]
[Sun May 03 00:57:26.793542 2026] [:error] [pid 53435:tid 53488] [client 172.173.121.85:54256] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYs9oDmp7_z8QkjSzMJogAAAFA"]
[Sun May 03 00:57:27.169416 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:53089] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYs94Dmp7_z8QkjSzMJowAAAEY"]
[Sun May 03 00:57:27.553749 2026] [:error] [pid 52010:tid 52053] [client 172.173.121.85:53072] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYs9wiR6wohDtdeJMBdzQAAAso"]
[Sun May 03 00:57:27.935812 2026] [:error] [pid 53435:tid 53493] [client 172.173.121.85:53512] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYs94Dmp7_z8QkjSzMJqAAAAFU"]
[Sun May 03 00:57:28.313346 2026] [:error] [pid 52010:tid 52046] [client 172.173.121.85:53513] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYs-AiR6wohDtdeJMBdzwAAAsM"]
[Sun May 03 00:57:28.690865 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:54242] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYs-IDmp7_z8QkjSzMJrAAAAE8"]
[Sun May 03 00:57:29.063038 2026] [:error] [pid 53435:tid 53489] [client 172.173.121.85:55137] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYs-YDmp7_z8QkjSzMJrwAAAFE"]
[Sun May 03 00:57:29.441251 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:55159] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYs-YDmp7_z8QkjSzMJsAAAAEQ"]
[Sun May 03 00:57:29.818663 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:55087] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYs-YDmp7_z8QkjSzMJswAAAEo"]
[Sun May 03 00:57:30.198499 2026] [:error] [pid 53435:tid 53474] [client 172.173.121.85:53617] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYs-oDmp7_z8QkjSzMJtQAAAEI"]
[Sun May 03 00:57:30.580655 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:54196] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afYs-oDmp7_z8QkjSzMJtwAAAE4"]
[Sun May 03 00:57:30.957003 2026] [:error] [pid 52012:tid 52096] [client 172.173.121.85:53584] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afYs-kzSWr-8cpS83mgMngAAA1M"]
[Sun May 03 00:57:31.343549 2026] [:error] [pid 53435:tid 53485] [client 172.173.121.85:54184] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afYs-4Dmp7_z8QkjSzMJvQAAAE0"]
[Sun May 03 00:57:31.721370 2026] [:error] [pid 53435:tid 53492] [client 172.173.121.85:53595] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afYs-4Dmp7_z8QkjSzMJvwAAAFQ"]
[Sun May 03 00:57:32.092642 2026] [:error] [pid 52124:tid 52141] [client 172.173.121.85:54207] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYs_DjabaZ9NMm8eQubYwAAA4w"]
[Sun May 03 00:57:32.475554 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:53510] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYs_IDmp7_z8QkjSzMJwgAAAEQ"]
[Sun May 03 00:57:32.847500 2026] [:error] [pid 53434:tid 53448] [client 172.173.121.85:53573] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYs_O9BXmRQcbfsxlyyJwAAAAU"]
[Sun May 03 00:57:33.220934 2026] [:error] [pid 52010:tid 52056] [client 172.173.121.85:64061] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYs_QiR6wohDtdeJMBd0QAAAs0"]
[Sun May 03 00:57:33.595290 2026] [:error] [pid 52012:tid 52075] [client 172.173.121.85:55071] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYs_UzSWr-8cpS83mgMpgAAA0A"]
[Sun May 03 00:57:33.970193 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:54149] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYs_UzSWr-8cpS83mgMqAAAA1U"]
[Sun May 03 00:57:34.343200 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:54151] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYs_oDmp7_z8QkjSzMJyQAAAEQ"]
[Sun May 03 00:57:34.719907 2026] [:error] [pid 53435:tid 53490] [client 172.173.121.85:54259] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYs_oDmp7_z8QkjSzMJywAAAFI"]
[Sun May 03 00:57:35.093090 2026] [:error] [pid 52124:tid 52147] [client 172.173.121.85:54146] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYs_zjabaZ9NMm8eQubZAAAA5I"]
[Sun May 03 00:57:35.466204 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:54198] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYs_0zSWr-8cpS83mgMrwAAA0M"]
[Sun May 03 00:57:35.842394 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:53061] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYs_0zSWr-8cpS83mgMswAAA0U"]
[Sun May 03 00:57:36.215487 2026] [:error] [pid 52012:tid 52102] [client 172.173.121.85:53507] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYtAEzSWr-8cpS83mgMtwAAA1g"]
[Sun May 03 00:57:36.604964 2026] [:error] [pid 52012:tid 52101] [client 172.173.121.85:64106] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYtAEzSWr-8cpS83mgMuwAAA1c"]
[Sun May 03 00:57:36.993019 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:55069] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYtAEzSWr-8cpS83mgMvwAAA1A"]
[Sun May 03 00:57:37.372419 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:53589] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYtAUzSWr-8cpS83mgMxAAAA1E"]
[Sun May 03 00:57:37.804590 2026] [:error] [pid 53435:tid 53494] [client 172.173.121.85:54222] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYtAYDmp7_z8QkjSzMJ0AAAAFY"]
[Sun May 03 00:57:38.201464 2026] [:error] [pid 53435:tid 53492] [client 172.173.121.85:53526] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYtAoDmp7_z8QkjSzMJ0wAAAFQ"]
[Sun May 03 00:57:38.592942 2026] [:error] [pid 53435:tid 53493] [client 172.173.121.85:53619] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYtAoDmp7_z8QkjSzMJ1wAAAFU"]
[Sun May 03 00:57:39.019333 2026] [:error] [pid 52012:tid 52099] [client 172.173.121.85:54257] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYtA0zSWr-8cpS83mgMzQAAA1Y"]
[Sun May 03 00:57:39.434116 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:64061] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYtA0zSWr-8cpS83mgM0AAAA0k"]
[Sun May 03 00:57:39.821533 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:53604] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYtA0zSWr-8cpS83mgM0gAAA0M"]
[Sun May 03 00:57:40.257793 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:53524] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYtBEzSWr-8cpS83mgM1QAAA0o"]
[Sun May 03 00:57:40.669458 2026] [:error] [pid 53434:tid 53446] [client 172.173.121.85:53058] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYtBO9BXmRQcbfsxlyyKAAAAAM"]
[Sun May 03 00:57:41.097648 2026] [:error] [pid 22846:tid 22849] [client 172.173.121.85:53572] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYtBYm1Ms03Mfhp3aYR7AAAAQE"]
[Sun May 03 00:57:41.645478 2026] [:error] [pid 11894:tid 11920] [client 172.173.121.85:54187] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYtBTHh6DQF1tkXIKz2kgAAAVc"]
[Sun May 03 00:57:42.101160 2026] [:error] [pid 53434:tid 53447] [client 172.173.121.85:53524] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYtBu9BXmRQcbfsxlyyKQAAAAQ"]
[Sun May 03 00:57:42.479998 2026] [:error] [pid 53434:tid 53450] [client 172.173.121.85:54269] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYtBu9BXmRQcbfsxlyyKgAAAAc"]
[Sun May 03 00:57:42.869548 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:53516] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYtBu9BXmRQcbfsxlyyLAAAABg"]
[Sun May 03 00:57:43.248165 2026] [:error] [pid 22846:tid 22872] [client 172.173.121.85:64103] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYtB4m1Ms03Mfhp3aYR7wAAARg"]
[Sun May 03 00:57:43.624481 2026] [:error] [pid 52012:tid 52079] [client 172.173.121.85:54172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYtB0zSWr-8cpS83mgM2gAAA0I"]
[Sun May 03 00:57:44.015979 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:53591] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYtCEzSWr-8cpS83mgM2wAAA0M"]
[Sun May 03 00:57:44.403745 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:54251] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYtCIDmp7_z8QkjSzMJ3QAAAE4"]
[Sun May 03 00:57:44.785556 2026] [:error] [pid 51950:tid 52004] [client 172.173.121.85:55096] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYtCIoBJzYZ3RKUhdiFFgAAAlg"]
[Sun May 03 00:57:45.157024 2026] [:error] [pid 51950:tid 52001] [client 172.173.121.85:53534] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYtCYoBJzYZ3RKUhdiFGAAAAlU"]
[Sun May 03 00:57:45.530564 2026] [:error] [pid 52010:tid 52052] [client 172.173.121.85:53043] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYtCQiR6wohDtdeJMBd1AAAAsk"]
[Sun May 03 00:57:45.935815 2026] [:error] [pid 53435:tid 53492] [client 172.173.121.85:53618] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYtCYDmp7_z8QkjSzMJ3wAAAFQ"]
[Sun May 03 00:57:46.313289 2026] [:error] [pid 53435:tid 53489] [client 172.173.121.85:53590] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYtCoDmp7_z8QkjSzMJ4gAAAFE"]
[Sun May 03 00:57:46.687569 2026] [:error] [pid 52010:tid 52063] [client 172.173.121.85:53587] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYtCgiR6wohDtdeJMBd1gAAAtQ"]
[Sun May 03 00:57:47.069309 2026] [:error] [pid 52010:tid 52060] [client 172.173.121.85:53549] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYtCwiR6wohDtdeJMBd2AAAAtE"]
[Sun May 03 00:57:47.445847 2026] [:error] [pid 53434:tid 53453] [client 172.173.121.85:53552] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYtC-9BXmRQcbfsxlyyLwAAAAo"]
[Sun May 03 00:57:47.837610 2026] [:error] [pid 53434:tid 53460] [client 172.173.121.85:53608] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYtC-9BXmRQcbfsxlyyMAAAABE"]
[Sun May 03 00:57:48.215864 2026] [:error] [pid 53436:tid 53517] [client 172.173.121.85:53511] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYtDK9N0xp8fccVM0DqogAAAJI"]
[Sun May 03 00:57:48.598251 2026] [:error] [pid 53436:tid 53522] [client 172.173.121.85:53100] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYtDK9N0xp8fccVM0DqowAAAJc"]
[Sun May 03 00:57:48.976660 2026] [:error] [pid 52010:tid 52051] [client 172.173.121.85:53065] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYtDAiR6wohDtdeJMBd2wAAAsg"]
[Sun May 03 00:57:49.349052 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:54260] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYtDQiR6wohDtdeJMBd3AAAAtI"]
[Sun May 03 00:57:49.725117 2026] [:error] [pid 52124:tid 52149] [client 172.173.121.85:53523] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYtDTjabaZ9NMm8eQubZQAAA5Q"]
[Sun May 03 00:57:50.099348 2026] [:error] [pid 51950:tid 51999] [client 172.173.121.85:53580] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYtDooBJzYZ3RKUhdiFHgAAAlM"]
[Sun May 03 00:57:50.476033 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:53602] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYtDkzSWr-8cpS83mgM4gAAA0M"]
[Sun May 03 00:57:50.854363 2026] [:error] [pid 53435:tid 53493] [client 172.173.121.85:53082] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYtDoDmp7_z8QkjSzMJ5AAAAFU"]
[Sun May 03 00:57:51.233984 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:55075] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYtD0zSWr-8cpS83mgM5gAAA0Y"]
[Sun May 03 00:57:51.608021 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:53556] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYtD0zSWr-8cpS83mgM6gAAA1E"]
[Sun May 03 00:57:51.986296 2026] [:error] [pid 51950:tid 51990] [client 172.173.121.85:54202] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYtD4oBJzYZ3RKUhdiFHwAAAko"]
[Sun May 03 00:57:52.367202 2026] [:error] [pid 53435:tid 53480] [client 172.173.121.85:53014] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYtEIDmp7_z8QkjSzMJ5QAAAEg"]
[Sun May 03 00:57:52.741291 2026] [:error] [pid 22846:tid 22856] [client 172.173.121.85:53544] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYtEIm1Ms03Mfhp3aYR8QAAAQg"]
[Sun May 03 00:57:53.112921 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:64040] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYtEYDmp7_z8QkjSzMJ6gAAAEY"]
[Sun May 03 00:57:53.489621 2026] [:error] [pid 53435:tid 53473] [client 172.173.121.85:54159] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYtEYDmp7_z8QkjSzMJ7QAAAEE"]
[Sun May 03 00:57:53.861931 2026] [:error] [pid 53435:tid 53477] [client 172.173.121.85:53096] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYtEYDmp7_z8QkjSzMJ8AAAAEU"]
[Sun May 03 00:57:54.240644 2026] [:error] [pid 52012:tid 52096] [client 172.173.121.85:53615] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYtEkzSWr-8cpS83mgM8gAAA1M"]
[Sun May 03 00:57:54.614288 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:54180] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYtEu9BXmRQcbfsxlyyNQAAABc"]
[Sun May 03 00:57:54.986642 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:53522] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYtEkzSWr-8cpS83mgM8wAAA1I"]
[Sun May 03 00:57:55.362174 2026] [:error] [pid 51950:tid 52002] [client 172.173.121.85:53622] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYtE4oBJzYZ3RKUhdiFIAAAAlY"]
[Sun May 03 00:57:55.739721 2026] [:error] [pid 53435:tid 53472] [client 172.173.121.85:53023] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYtE4Dmp7_z8QkjSzMJ-AAAAEA"]
[Sun May 03 00:57:56.110154 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:53614] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYtFAiR6wohDtdeJMBd4wAAAtU"]
[Sun May 03 00:57:56.481955 2026] [:error] [pid 53435:tid 53488] [client 172.173.121.85:53607] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYtFIDmp7_z8QkjSzMJ_AAAAFA"]
[Sun May 03 00:57:56.855456 2026] [:error] [pid 53435:tid 53489] [client 172.173.121.85:53037] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYtFIDmp7_z8QkjSzMJ_wAAAFE"]
[Sun May 03 00:57:57.234033 2026] [:error] [pid 52010:tid 52050] [client 172.173.121.85:52997] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYtFQiR6wohDtdeJMBd5QAAAsc"]
[Sun May 03 00:57:57.606504 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:20044] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYtFQiR6wohDtdeJMBd5gAAAs8"]
[Sun May 03 00:57:57.981875 2026] [:error] [pid 52010:tid 52051] [client 172.173.121.85:53611] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYtFQiR6wohDtdeJMBd5wAAAsg"]
[Sun May 03 00:57:58.360312 2026] [:error] [pid 51917:tid 51936] [client 172.173.121.85:53598] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYtFq7wZviJ7BgcCi9wDAAAAdE"]
[Sun May 03 00:57:58.742485 2026] [:error] [pid 53436:tid 53513] [client 172.173.121.85:54213] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYtFq9N0xp8fccVM0DqpwAAAI4"]
[Sun May 03 00:57:59.113584 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:54175] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYtF4Dmp7_z8QkjSzMKBAAAAEY"]
[Sun May 03 00:57:59.490643 2026] [:error] [pid 11894:tid 11914] [client 172.173.121.85:53068] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYtFzHh6DQF1tkXIKz2lAAAAVE"]
[Sun May 03 00:57:59.863640 2026] [:error] [pid 52010:tid 52056] [client 172.173.121.85:54231] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "afYtFwiR6wohDtdeJMBd6wAAAs0"]
[Sun May 03 00:58:00.243123 2026] [:error] [pid 52124:tid 52142] [client 172.173.121.85:53519] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "afYtGDjabaZ9NMm8eQubawAAA40"]
[Sun May 03 00:58:00.620900 2026] [:error] [pid 51950:tid 51988] [client 172.173.121.85:53518] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "afYtGIoBJzYZ3RKUhdiFIwAAAkg"]
[Sun May 03 00:58:00.995097 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:53026] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "afYtGO9BXmRQcbfsxlyyOAAAAA4"]
[Sun May 03 00:58:01.379051 2026] [:error] [pid 53436:tid 53518] [client 172.173.121.85:53631] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "afYtGa9N0xp8fccVM0DqrQAAAJM"]
[Sun May 03 00:58:01.756448 2026] [:error] [pid 11894:tid 11915] [client 172.173.121.85:53597] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "afYtGTHh6DQF1tkXIKz2lwAAAVI"]
[Sun May 03 00:58:02.131123 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:53508] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "afYtGkzSWr-8cpS83mgM9gAAA0E"]
[Sun May 03 00:58:02.503486 2026] [:error] [pid 51950:tid 51999] [client 172.173.121.85:53024] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file21.php"] [unique_id "afYtGooBJzYZ3RKUhdiFJQAAAlM"]
[Sun May 03 00:58:02.890144 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:53071] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afYtGkzSWr-8cpS83mgM-gAAA1E"]
[Sun May 03 00:58:03.279037 2026] [:error] [pid 51950:tid 51989] [client 172.173.121.85:53095] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Sun May 03 00:58:03.470727 2026] [:error] [pid 51950:tid 51995] [client 172.173.121.85:53095] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sun May 03 00:58:03.662599 2026] [:error] [pid 51950:tid 51991] [client 172.173.121.85:53095] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun May 03 00:58:04.045495 2026] [:error] [pid 51950:tid 51983] [client 172.173.121.85:53095] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun May 03 01:00:29.026098 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun May 03 01:00:29.219185 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sun May 03 01:00:29.410987 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Sun May 03 01:00:29.603372 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Sun May 03 01:00:29.794317 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Sun May 03 01:00:29.985276 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Sun May 03 01:00:30.176744 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/locales.php
[Sun May 03 01:00:30.367933 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun May 03 01:00:30.559973 2026] [:error] [pid 52012:tid 52075] [client 172.173.121.85:63977] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Sun May 03 01:00:30.938873 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:63977] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYtrkzSWr-8cpS83mgNrgAAA0o"]
[Sun May 03 01:00:31.315868 2026] [:error] [pid 51950:tid 52000] [client 172.173.121.85:63978] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYtr4oBJzYZ3RKUhdiFhAAAAlQ"]
[Sun May 03 01:00:31.699984 2026] [:error] [pid 11894:tid 11900] [client 172.173.121.85:64848] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYtrzHh6DQF1tkXIKz2xgAAAUM"]
[Sun May 03 01:00:32.081367 2026] [:error] [pid 53434:tid 53459] [client 172.173.121.85:65181] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afYtsO9BXmRQcbfsxlyyigAAABA"]
[Sun May 03 01:00:32.465132 2026] [:error] [pid 51917:tid 51939] [client 172.173.121.85:63959] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYtsK7wZviJ7BgcCi9wNwAAAdQ"]
[Sun May 03 01:00:32.838144 2026] [:error] [pid 11894:tid 11921] [client 172.173.121.85:64813] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYtsDHh6DQF1tkXIKz2xwAAAVg"]
[Sun May 03 01:00:33.213374 2026] [:error] [pid 53436:tid 53516] [client 172.173.121.85:64786] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYtsa9N0xp8fccVM0Dq3QAAAJE"]
[Sun May 03 01:00:33.586127 2026] [:error] [pid 53435:tid 53485] [client 172.173.121.85:64776] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afYtsYDmp7_z8QkjSzMKqAAAAE0"]
[Sun May 03 01:00:33.966709 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:63984] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYtse9BXmRQcbfsxlyyjgAAABQ"]
[Sun May 03 01:00:34.354891 2026] [:error] [pid 53435:tid 53490] [client 172.173.121.85:64840] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYtsoDmp7_z8QkjSzMKqwAAAFI"]
[Sun May 03 01:00:34.730713 2026] [:error] [pid 51917:tid 51919] [client 172.173.121.85:64864] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYtsq7wZviJ7BgcCi9wOgAAAcA"]
[Sun May 03 01:00:35.107737 2026] [:error] [pid 53434:tid 53452] [client 172.173.121.85:63950] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afYts-9BXmRQcbfsxlyyjwAAAAk"]
[Sun May 03 01:00:35.487329 2026] [:error] [pid 53435:tid 53495] [client 172.173.121.85:63953] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYts4Dmp7_z8QkjSzMKrgAAAFc"]
[Sun May 03 01:00:35.864735 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:64831] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYts4Dmp7_z8QkjSzMKsAAAAE8"]
[Sun May 03 01:00:36.253687 2026] [:error] [pid 11894:tid 11908] [client 172.173.121.85:64790] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYttDHh6DQF1tkXIKz2yAAAAUs"]
[Sun May 03 01:00:36.638017 2026] [:error] [pid 53435:tid 53492] [client 172.173.121.85:64815] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.admin.php"] [unique_id "afYttIDmp7_z8QkjSzMKtAAAAFQ"]
[Sun May 03 01:00:37.023854 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:62660] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYttYDmp7_z8QkjSzMKtQAAAE4"]
[Sun May 03 01:00:37.411755 2026] [:error] [pid 52124:tid 52137] [client 172.173.121.85:63954] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYttTjabaZ9NMm8eQubjwAAA4g"]
[Sun May 03 01:00:37.784703 2026] [:error] [pid 51917:tid 51936] [client 172.173.121.85:65213] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYtta7wZviJ7BgcCi9wPQAAAdE"]
[Sun May 03 01:00:38.166889 2026] [:error] [pid 52124:tid 52135] [client 172.173.121.85:65274] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sw.php"] [unique_id "afYttjjabaZ9NMm8eQubkAAAA4Y"]
[Sun May 03 01:00:38.542441 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:65237] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYttkzSWr-8cpS83mgNsAAAA1A"]
[Sun May 03 01:00:38.932369 2026] [:error] [pid 53435:tid 53477] [client 172.173.121.85:65212] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYttoDmp7_z8QkjSzMKuAAAAEU"]
[Sun May 03 01:00:39.314612 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:64893] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYtt-9BXmRQcbfsxlyykQAAABc"]
[Sun May 03 01:00:39.692547 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:65206] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afYtt0zSWr-8cpS83mgNswAAA0w"]
[Sun May 03 01:00:40.089702 2026] [:error] [pid 53434:tid 53449] [client 172.173.121.85:64862] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYtuO9BXmRQcbfsxlyykgAAAAY"]
[Sun May 03 01:00:40.466388 2026] [:error] [pid 11894:tid 11911] [client 172.173.121.85:65177] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYtuDHh6DQF1tkXIKz2zgAAAU4"]
[Sun May 03 01:00:40.843292 2026] [:error] [pid 11894:tid 11899] [client 172.173.121.85:63940] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYtuDHh6DQF1tkXIKz2zwAAAUI"]
[Sun May 03 01:00:41.223995 2026] [:error] [pid 11894:tid 11910] [client 172.173.121.85:64814] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afYtuTHh6DQF1tkXIKz20AAAAU0"]
[Sun May 03 01:00:41.600177 2026] [:error] [pid 53436:tid 53511] [client 172.173.121.85:65156] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYtua9N0xp8fccVM0Dq3gAAAIw"]
[Sun May 03 01:00:41.977245 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:65172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYtuQiR6wohDtdeJMBefQAAAtI"]
[Sun May 03 01:00:42.372587 2026] [:error] [pid 51950:tid 51982] [client 172.173.121.85:65211] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYtuooBJzYZ3RKUhdiFiwAAAkI"]
[Sun May 03 01:00:42.744903 2026] [:error] [pid 51950:tid 51997] [client 172.173.121.85:64869] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "afYtuooBJzYZ3RKUhdiFjgAAAlE"]
[Sun May 03 01:00:43.123499 2026] [:error] [pid 53436:tid 53503] [client 172.173.121.85:63948] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYtu69N0xp8fccVM0Dq3wAAAIQ"]
[Sun May 03 01:00:43.502586 2026] [:error] [pid 53436:tid 53520] [client 172.173.121.85:65231] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYtu69N0xp8fccVM0Dq4AAAAJU"]
[Sun May 03 01:00:43.875193 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:65221] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYtu4oBJzYZ3RKUhdiFlAAAAlI"]
[Sun May 03 01:00:44.251441 2026] [:error] [pid 22846:tid 22863] [client 172.173.121.85:64853] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afYtvIm1Ms03Mfhp3aYSHwAAAQ8"]
[Sun May 03 01:00:44.625990 2026] [:error] [pid 52010:tid 52054] [client 172.173.121.85:65193] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYtvAiR6wohDtdeJMBefwAAAss"]
[Sun May 03 01:00:45.003901 2026] [:error] [pid 22846:tid 22852] [client 172.173.121.85:65157] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYtvYm1Ms03Mfhp3aYSIAAAAQQ"]
[Sun May 03 01:00:45.383072 2026] [:error] [pid 51950:tid 51983] [client 172.173.121.85:65208] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYtvYoBJzYZ3RKUhdiFlwAAAkM"]
[Sun May 03 01:00:45.756937 2026] [:error] [pid 51950:tid 51995] [client 172.173.121.85:64770] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afYtvYoBJzYZ3RKUhdiFmAAAAk8"]
[Sun May 03 01:00:46.137080 2026] [:error] [pid 53435:tid 53496] [client 172.173.121.85:63967] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYtvoDmp7_z8QkjSzMKwwAAAFg"]
[Sun May 03 01:00:46.515545 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:65244] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYtvkzSWr-8cpS83mgNtgAAA1E"]
[Sun May 03 01:00:46.890948 2026] [:error] [pid 52010:tid 52048] [client 172.173.121.85:65277] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYtvgiR6wohDtdeJMBegQAAAsU"]
[Sun May 03 01:00:47.265255 2026] [:error] [pid 53434:tid 53453] [client 172.173.121.85:63944] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afYtv-9BXmRQcbfsxlyylAAAAAo"]
[Sun May 03 01:00:47.650990 2026] [:error] [pid 53434:tid 53455] [client 172.173.121.85:64788] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYtv-9BXmRQcbfsxlyylgAAAAw"]
[Sun May 03 01:00:48.024779 2026] [:error] [pid 53436:tid 53499] [client 172.173.121.85:63878] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYtwK9N0xp8fccVM0Dq5AAAAIA"]
[Sun May 03 01:00:48.397825 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:63956] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYtwEzSWr-8cpS83mgNtwAAA0Q"]
[Sun May 03 01:00:48.780288 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:63968] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afYtwIoBJzYZ3RKUhdiFnQAAAlI"]
[Sun May 03 01:00:49.156501 2026] [:error] [pid 11894:tid 11909] [client 172.173.121.85:64800] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYtwTHh6DQF1tkXIKz21AAAAUw"]
[Sun May 03 01:00:49.543101 2026] [:error] [pid 53436:tid 53501] [client 172.173.121.85:65164] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYtwa9N0xp8fccVM0Dq5gAAAII"]
[Sun May 03 01:00:49.918104 2026] [:error] [pid 22846:tid 22859] [client 172.173.121.85:64821] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYtwYm1Ms03Mfhp3aYSIwAAAQs"]
[Sun May 03 01:00:50.310903 2026] [:error] [pid 22846:tid 22865] [client 172.173.121.85:64817] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afYtwom1Ms03Mfhp3aYSJAAAARE"]
[Sun May 03 01:00:50.683806 2026] [:error] [pid 52010:tid 52060] [client 172.173.121.85:65197] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYtwgiR6wohDtdeJMBegwAAAtE"]
[Sun May 03 01:00:51.059518 2026] [:error] [pid 51950:tid 52004] [client 172.173.121.85:63905] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYtw4oBJzYZ3RKUhdiFogAAAlg"]
[Sun May 03 01:00:51.435976 2026] [:error] [pid 51950:tid 51990] [client 172.173.121.85:64845] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYtw4oBJzYZ3RKUhdiFowAAAko"]
[Sun May 03 01:00:51.813903 2026] [:error] [pid 51950:tid 51994] [client 172.173.121.85:64870] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ref.php"] [unique_id "afYtw4oBJzYZ3RKUhdiFpAAAAk4"]
[Sun May 03 01:00:52.193858 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:63876] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYtxIDmp7_z8QkjSzMKxQAAAEo"]
[Sun May 03 01:00:52.573284 2026] [:error] [pid 51950:tid 52000] [client 172.173.121.85:63560] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYtxIoBJzYZ3RKUhdiFqQAAAlQ"]
[Sun May 03 01:00:52.972232 2026] [:error] [pid 22846:tid 22860] [client 172.173.121.85:64856] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYtxIm1Ms03Mfhp3aYSJgAAAQw"]
[Sun May 03 01:00:53.349334 2026] [:error] [pid 51950:tid 51993] [client 172.173.121.85:64807] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afYtxYoBJzYZ3RKUhdiFrAAAAk0"]
[Sun May 03 01:00:53.723003 2026] [:error] [pid 51917:tid 51935] [client 172.173.121.85:63961] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYtxa7wZviJ7BgcCi9wQQAAAdA"]
[Sun May 03 01:00:54.094652 2026] [:error] [pid 53436:tid 53521] [client 172.173.121.85:63939] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYtxq9N0xp8fccVM0Dq6QAAAJY"]
[Sun May 03 01:00:54.468576 2026] [:error] [pid 53436:tid 53513] [client 172.173.121.85:63889] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYtxq9N0xp8fccVM0Dq6wAAAI4"]
[Sun May 03 01:00:54.847916 2026] [:error] [pid 11894:tid 11920] [client 172.173.121.85:64859] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afYtxjHh6DQF1tkXIKz21QAAAVc"]
[Sun May 03 01:00:55.223173 2026] [:error] [pid 51917:tid 51933] [client 172.173.121.85:62657] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYtx67wZviJ7BgcCi9wQwAAAc4"]
[Sun May 03 01:00:55.595219 2026] [:error] [pid 53436:tid 53503] [client 172.173.121.85:62656] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYtx69N0xp8fccVM0Dq7QAAAIQ"]
[Sun May 03 01:00:55.976000 2026] [:error] [pid 11894:tid 11912] [client 172.173.121.85:63965] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYtxzHh6DQF1tkXIKz21wAAAU8"]
[Sun May 03 01:00:56.350534 2026] [:error] [pid 11894:tid 11901] [client 172.173.121.85:64801] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afYtyDHh6DQF1tkXIKz22QAAAUQ"]
[Sun May 03 01:00:56.732943 2026] [:error] [pid 52124:tid 52147] [client 172.173.121.85:63885] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYtyDjabaZ9NMm8eQublAAAA5I"]
[Sun May 03 01:00:57.115107 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:63972] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYtyQiR6wohDtdeJMBehAAAAtU"]
[Sun May 03 01:00:57.491132 2026] [:error] [pid 11894:tid 11897] [client 172.173.121.85:63549] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYtyTHh6DQF1tkXIKz23QAAAUA"]
[Sun May 03 01:00:57.873671 2026] [:error] [pid 53434:tid 53464] [client 172.173.121.85:64799] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afYtye9BXmRQcbfsxlyynQAAABU"]
[Sun May 03 01:00:58.245138 2026] [:error] [pid 11894:tid 11911] [client 172.173.121.85:64785] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYtyjHh6DQF1tkXIKz23gAAAU4"]
[Sun May 03 01:00:58.619497 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:63489] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYtyoDmp7_z8QkjSzMKxgAAAE8"]
[Sun May 03 01:00:58.998607 2026] [:error] [pid 51917:tid 51940] [client 172.173.121.85:63537] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYtyq7wZviJ7BgcCi9wSAAAAdU"]
[Sun May 03 01:00:59.375996 2026] [:error] [pid 52010:tid 52067] [client 172.173.121.85:64890] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Xx.php"] [unique_id "afYtywiR6wohDtdeJMBehQAAAtg"]
[Sun May 03 01:00:59.756708 2026] [:error] [pid 51950:tid 51986] [client 172.173.121.85:64777] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYty4oBJzYZ3RKUhdiFrwAAAkY"]
[Sun May 03 01:01:00.135381 2026] [:error] [pid 53436:tid 53502] [client 172.173.121.85:64804] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYtzK9N0xp8fccVM0Dq8QAAAIM"]
[Sun May 03 01:01:00.521783 2026] [:error] [pid 53436:tid 53505] [client 172.173.121.85:63884] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYtzK9N0xp8fccVM0Dq8gAAAIY"]
[Sun May 03 01:01:00.915961 2026] [:error] [pid 53436:tid 53521] [client 172.173.121.85:65239] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmini.php"] [unique_id "afYtzK9N0xp8fccVM0Dq8wAAAJY"]
[Sun May 03 01:01:01.314871 2026] [:error] [pid 53436:tid 53518] [client 172.173.121.85:63534] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYtza9N0xp8fccVM0Dq9AAAAJM"]
[Sun May 03 01:01:01.695578 2026] [:error] [pid 53434:tid 53455] [client 172.173.121.85:63893] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYtze9BXmRQcbfsxlyyoAAAAAw"]
[Sun May 03 01:01:02.072062 2026] [:error] [pid 52010:tid 52043] [client 172.173.121.85:65220] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYtzgiR6wohDtdeJMBehwAAAsA"]
[Sun May 03 01:01:02.461869 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:62700] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afYtzgiR6wohDtdeJMBeiQAAAs8"]
[Sun May 03 01:01:02.861570 2026] [:error] [pid 52010:tid 52063] [client 172.173.121.85:64889] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYtzgiR6wohDtdeJMBejAAAAtQ"]
[Sun May 03 01:01:03.245973 2026] [:error] [pid 52010:tid 52055] [client 172.173.121.85:63552] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYtzwiR6wohDtdeJMBejgAAAsw"]
[Sun May 03 01:01:03.628067 2026] [:error] [pid 51950:tid 51995] [client 172.173.121.85:65262] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYtz4oBJzYZ3RKUhdiFsAAAAk8"]
[Sun May 03 01:01:04.012675 2026] [:error] [pid 22846:tid 22861] [client 172.173.121.85:65259] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afYt0Im1Ms03Mfhp3aYSKAAAAQ0"]
[Sun May 03 01:01:04.400093 2026] [:error] [pid 51950:tid 51988] [client 172.173.121.85:64803] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt0IoBJzYZ3RKUhdiFsQAAAkg"]
[Sun May 03 01:01:04.794858 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:64812] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt0O9BXmRQcbfsxlyypAAAAA8"]
[Sun May 03 01:01:05.173500 2026] [:error] [pid 53435:tid 53489] [client 172.173.121.85:63951] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt0YDmp7_z8QkjSzMKxwAAAFE"]
[Sun May 03 01:01:05.548853 2026] [:error] [pid 11894:tid 11909] [client 172.173.121.85:63971] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt0THh6DQF1tkXIKz24QAAAUw"]
[Sun May 03 01:01:05.928482 2026] [:error] [pid 51917:tid 51924] [client 172.173.121.85:64871] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYt0a7wZviJ7BgcCi9wTQAAAcU"]
[Sun May 03 01:01:06.305025 2026] [:error] [pid 11894:tid 11898] [client 172.173.121.85:65267] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYt0jHh6DQF1tkXIKz25QAAAUE"]
[Sun May 03 01:01:06.681850 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:64784] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYt0u9BXmRQcbfsxlyypwAAABg"]
[Sun May 03 01:01:07.059607 2026] [:error] [pid 53435:tid 53473] [client 172.173.121.85:64792] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afYt04Dmp7_z8QkjSzMKyQAAAEE"]
[Sun May 03 01:01:07.437541 2026] [:error] [pid 53435:tid 53491] [client 172.173.121.85:65203] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYt04Dmp7_z8QkjSzMKygAAAFM"]
[Sun May 03 01:01:07.815093 2026] [:error] [pid 51917:tid 51922] [client 172.173.121.85:65174] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYt067wZviJ7BgcCi9wTgAAAcM"]
[Sun May 03 01:01:08.199516 2026] [:error] [pid 51917:tid 51935] [client 172.173.121.85:65170] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYt1K7wZviJ7BgcCi9wTwAAAdA"]
[Sun May 03 01:01:08.569849 2026] [:error] [pid 52012:tid 52096] [client 172.173.121.85:65245] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afYt1EzSWr-8cpS83mgNvAAAA1M"]
[Sun May 03 01:01:08.955032 2026] [:error] [pid 22846:tid 22862] [client 172.173.121.85:63946] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYt1Im1Ms03Mfhp3aYSKgAAAQ4"]
[Sun May 03 01:01:09.335289 2026] [:error] [pid 53436:tid 53519] [client 172.173.121.85:64895] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYt1a9N0xp8fccVM0Dq9gAAAJQ"]
[Sun May 03 01:01:09.708354 2026] [:error] [pid 51917:tid 51932] [client 172.173.121.85:65182] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYt1a7wZviJ7BgcCi9wUAAAAc0"]
[Sun May 03 01:01:10.081765 2026] [:error] [pid 53434:tid 53444] [client 172.173.121.85:65268] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afYt1u9BXmRQcbfsxlyyrAAAAAE"]
[Sun May 03 01:01:10.467174 2026] [:error] [pid 52124:tid 52143] [client 172.173.121.85:65195] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYt1jjabaZ9NMm8eQublgAAA44"]
[Sun May 03 01:01:10.855923 2026] [:error] [pid 11894:tid 11899] [client 172.173.121.85:62670] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYt1jHh6DQF1tkXIKz26wAAAUI"]
[Sun May 03 01:01:11.236700 2026] [:error] [pid 51917:tid 51933] [client 172.173.121.85:65199] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYt167wZviJ7BgcCi9wUQAAAc4"]
[Sun May 03 01:01:11.611498 2026] [:error] [pid 53436:tid 53509] [client 172.173.121.85:63979] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afYt169N0xp8fccVM0Dq-AAAAIo"]
[Sun May 03 01:01:12.007485 2026] [:error] [pid 51917:tid 51931] [client 172.173.121.85:64774] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYt2K7wZviJ7BgcCi9wUgAAAcw"]
[Sun May 03 01:01:12.385682 2026] [:error] [pid 52124:tid 52150] [client 172.173.121.85:63908] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYt2DjabaZ9NMm8eQubmgAAA5U"]
[Sun May 03 01:01:12.772862 2026] [:error] [pid 53434:tid 53461] [client 172.173.121.85:62690] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYt2O9BXmRQcbfsxlyyrwAAABI"]
[Sun May 03 01:01:13.173304 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:65233] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afYt2e9BXmRQcbfsxlyysAAAAA4"]
[Sun May 03 01:01:13.548212 2026] [:error] [pid 51917:tid 51925] [client 172.173.121.85:64865] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYt2a7wZviJ7BgcCi9wVAAAAcY"]
[Sun May 03 01:01:13.925897 2026] [:error] [pid 52124:tid 52140] [client 172.173.121.85:62643] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYt2TjabaZ9NMm8eQuboAAAA4s"]
[Sun May 03 01:01:14.317774 2026] [:error] [pid 51917:tid 51919] [client 172.173.121.85:65263] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYt2q7wZviJ7BgcCi9wVQAAAcA"]
[Sun May 03 01:01:14.704945 2026] [:error] [pid 52124:tid 52145] [client 172.173.121.85:63898] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "afYt2jjabaZ9NMm8eQubpAAAA5A"]
[Sun May 03 01:01:15.092146 2026] [:error] [pid 52124:tid 52146] [client 172.173.121.85:65201] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt2zjabaZ9NMm8eQubpQAAA5E"]
[Sun May 03 01:01:15.479522 2026] [:error] [pid 51917:tid 51941] [client 172.173.121.85:64866] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt267wZviJ7BgcCi9wVgAAAdY"]
[Sun May 03 01:01:15.861801 2026] [:error] [pid 52012:tid 52092] [client 172.173.121.85:65158] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt20zSWr-8cpS83mgNvQAAA08"]
[Sun May 03 01:01:16.242869 2026] [:error] [pid 53435:tid 53484] [client 172.173.121.85:64860] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afYt3IDmp7_z8QkjSzMKzwAAAEw"]
[Sun May 03 01:01:16.621233 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:63964] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYt3AiR6wohDtdeJMBelwAAAtI"]
[Sun May 03 01:01:17.013899 2026] [:error] [pid 53435:tid 53490] [client 172.173.121.85:65160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYt3YDmp7_z8QkjSzMK0QAAAFI"]
[Sun May 03 01:01:17.392859 2026] [:error] [pid 52010:tid 52048] [client 172.173.121.85:63966] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYt3QiR6wohDtdeJMBemQAAAsU"]
[Sun May 03 01:01:17.775616 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:64836] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afYt3YDmp7_z8QkjSzMK1QAAAE8"]
[Sun May 03 01:01:18.166359 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:62625] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYt3kzSWr-8cpS83mgNwQAAA1A"]
[Sun May 03 01:01:18.536649 2026] [:error] [pid 52010:tid 52066] [client 172.173.121.85:64795] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYt3giR6wohDtdeJMBemgAAAtc"]
[Sun May 03 01:01:18.916268 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:63924] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYt3oDmp7_z8QkjSzMK2gAAAE4"]
[Sun May 03 01:01:19.308424 2026] [:error] [pid 53435:tid 53488] [client 172.173.121.85:64818] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afYt34Dmp7_z8QkjSzMK2wAAAFA"]
[Sun May 03 01:01:19.684717 2026] [:error] [pid 51950:tid 51997] [client 172.173.121.85:64783] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYt34oBJzYZ3RKUhdiFtgAAAlE"]
[Sun May 03 01:01:20.070832 2026] [:error] [pid 53435:tid 53475] [client 172.173.121.85:65168] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYt4IDmp7_z8QkjSzMK3gAAAEM"]
[Sun May 03 01:01:20.447002 2026] [:error] [pid 52010:tid 52051] [client 172.173.121.85:64867] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYt4AiR6wohDtdeJMBenQAAAsg"]
[Sun May 03 01:01:20.822900 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:64825] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afYt4EzSWr-8cpS83mgNxQAAA0M"]
[Sun May 03 01:01:21.202444 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:63576] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYt4UzSWr-8cpS83mgNxgAAA0c"]
[Sun May 03 01:01:21.582611 2026] [:error] [pid 52010:tid 52050] [client 172.173.121.85:63504] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYt4QiR6wohDtdeJMBenwAAAsc"]
[Sun May 03 01:01:21.956624 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:63872] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYt4e9BXmRQcbfsxlyytAAAAA8"]
[Sun May 03 01:01:22.340823 2026] [:error] [pid 51950:tid 52000] [client 172.173.121.85:63909] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afYt4ooBJzYZ3RKUhdiFtwAAAlQ"]
[Sun May 03 01:01:22.724321 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:63539] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYt4kzSWr-8cpS83mgNygAAA0Q"]
[Sun May 03 01:01:23.101961 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:63546] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYt4wiR6wohDtdeJMBeoAAAAs8"]
[Sun May 03 01:01:23.505021 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:63932] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYt4-9BXmRQcbfsxlyytgAAABg"]
[Sun May 03 01:01:23.880452 2026] [:error] [pid 53434:tid 53454] [client 172.173.121.85:63943] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afYt4-9BXmRQcbfsxlyyuQAAAAs"]
[Sun May 03 01:01:24.278462 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:65257] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYt5EzSWr-8cpS83mgNzAAAA0E"]
[Sun May 03 01:01:24.666636 2026] [:error] [pid 53434:tid 53445] [client 172.173.121.85:64857] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYt5O9BXmRQcbfsxlyyvQAAAAI"]
[Sun May 03 01:01:25.058132 2026] [:error] [pid 53434:tid 53464] [client 172.173.121.85:63932] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYt5e9BXmRQcbfsxlyyvwAAABU"]
[Sun May 03 01:01:25.439469 2026] [:error] [pid 53434:tid 53460] [client 172.173.121.85:63553] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afYt5e9BXmRQcbfsxlyywgAAABE"]
[Sun May 03 01:01:25.815953 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:65265] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYt5UzSWr-8cpS83mgNzQAAA0o"]
[Sun May 03 01:01:26.197941 2026] [:error] [pid 53434:tid 53451] [client 172.173.121.85:64850] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYt5u9BXmRQcbfsxlyyxAAAAAg"]
[Sun May 03 01:01:26.573444 2026] [:error] [pid 52012:tid 52096] [client 172.173.121.85:63986] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYt5kzSWr-8cpS83mgNzwAAA1M"]
[Sun May 03 01:01:26.955961 2026] [:error] [pid 52010:tid 52052] [client 172.173.121.85:62642] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afYt5giR6wohDtdeJMBeowAAAsk"]
[Sun May 03 01:01:27.334774 2026] [:error] [pid 53436:tid 53503] [client 172.173.121.85:63916] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYt569N0xp8fccVM0Dq_wAAAIQ"]
[Sun May 03 01:01:27.724570 2026] [:error] [pid 53435:tid 53484] [client 172.173.121.85:65225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYt54Dmp7_z8QkjSzMK5QAAAEw"]
[Sun May 03 01:01:28.119415 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:63554] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYt6EzSWr-8cpS83mgN0gAAA0w"]
[Sun May 03 01:01:28.492293 2026] [:error] [pid 51950:tid 51993] [client 172.173.121.85:63505] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afYt6IoBJzYZ3RKUhdiFuQAAAk0"]
[Sun May 03 01:01:28.874550 2026] [:error] [pid 22846:tid 22849] [client 172.173.121.85:62619] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afYt6Im1Ms03Mfhp3aYSLwAAAQE"]
[Sun May 03 01:01:29.261154 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:63982] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afYt6UzSWr-8cpS83mgN1wAAA0s"]
[Sun May 03 01:01:29.654388 2026] [:error] [pid 53436:tid 53520] [client 172.173.121.85:64798] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afYt6a9N0xp8fccVM0DrAAAAAJU"]
[Sun May 03 01:01:30.033304 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun May 03 01:01:30.222277 2026] [:error] [pid 53434:tid 53450] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun May 03 01:01:30.410717 2026] [:error] [pid 53434:tid 53460] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/tea.php
[Sun May 03 01:01:30.599149 2026] [:error] [pid 53434:tid 53448] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Sun May 03 01:01:30.791294 2026] [:error] [pid 53434:tid 53443] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun May 03 01:01:30.979117 2026] [:error] [pid 53434:tid 53455] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun May 03 01:01:31.169815 2026] [:error] [pid 53434:tid 53446] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun May 03 01:01:31.359363 2026] [:error] [pid 53434:tid 53456] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun May 03 01:01:31.547229 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sun May 03 01:01:31.736022 2026] [:error] [pid 53434:tid 53452] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Sun May 03 01:01:31.924588 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:63942] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Sun May 03 01:01:32.110475 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:63942] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYt7O9BXmRQcbfsxlyy2QAAAA4"]
[Sun May 03 01:01:32.487296 2026] [:error] [pid 53435:tid 53479] [client 172.173.121.85:63936] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYt7IDmp7_z8QkjSzMK8QAAAEc"]
[Sun May 03 01:01:32.875476 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:64829] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYt7EzSWr-8cpS83mgN3QAAA0U"]
[Sun May 03 01:01:33.247165 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:65273] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afYt7QiR6wohDtdeJMBepAAAAtI"]
[Sun May 03 01:01:33.631726 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:65243] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYt7UzSWr-8cpS83mgN4AAAA0M"]
[Sun May 03 01:01:34.007111 2026] [:error] [pid 53434:tid 53445] [client 172.173.121.85:64874] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYt7u9BXmRQcbfsxlyy2wAAAAI"]
[Sun May 03 01:01:34.384990 2026] [:error] [pid 51950:tid 51981] [client 172.173.121.85:65251] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYt7ooBJzYZ3RKUhdiFvgAAAkE"]
[Sun May 03 01:01:34.768976 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:62713] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/9.php"] [unique_id "afYt7kzSWr-8cpS83mgN5wAAA0o"]
[Sun May 03 01:01:35.149943 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:63913] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYt70zSWr-8cpS83mgN6QAAA1U"]
[Sun May 03 01:01:35.524996 2026] [:error] [pid 52010:tid 52054] [client 172.173.121.85:65256] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYt7wiR6wohDtdeJMBepgAAAss"]
[Sun May 03 01:01:35.900424 2026] [:error] [pid 52010:tid 52059] [client 172.173.121.85:62678] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYt7wiR6wohDtdeJMBepwAAAtA"]
[Sun May 03 01:01:36.277867 2026] [:error] [pid 51917:tid 51932] [client 172.173.121.85:64830] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/10.php"] [unique_id "afYt8K7wZviJ7BgcCi9wXQAAAc0"]
[Sun May 03 01:01:36.649878 2026] [:error] [pid 52010:tid 52060] [client 172.173.121.85:65192] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYt8AiR6wohDtdeJMBeqQAAAtE"]
[Sun May 03 01:01:37.026615 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:64809] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYt8QiR6wohDtdeJMBerAAAAtU"]
[Sun May 03 01:01:37.412177 2026] [:error] [pid 53434:tid 53448] [client 172.173.121.85:63506] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYt8e9BXmRQcbfsxlyy3wAAAAU"]
[Sun May 03 01:01:37.787924 2026] [:error] [pid 52010:tid 52050] [client 172.173.121.85:65235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afYt8QiR6wohDtdeJMBerwAAAsc"]
[Sun May 03 01:01:38.175607 2026] [:error] [pid 53435:tid 53473] [client 172.173.121.85:63559] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYt8oDmp7_z8QkjSzMK9AAAAEE"]
[Sun May 03 01:01:38.546645 2026] [:error] [pid 11894:tid 11921] [client 172.173.121.85:63931] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYt8jHh6DQF1tkXIKz27wAAAVg"]
[Sun May 03 01:01:38.921926 2026] [:error] [pid 52010:tid 52067] [client 172.173.121.85:62695] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYt8giR6wohDtdeJMBesgAAAtg"]
[Sun May 03 01:01:39.294979 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:65159] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afYt80zSWr-8cpS83mgN7wAAA0E"]
[Sun May 03 01:01:39.673042 2026] [:error] [pid 53434:tid 53451] [client 172.173.121.85:62681] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYt8-9BXmRQcbfsxlyy4AAAAAg"]
[Sun May 03 01:01:40.056252 2026] [:error] [pid 52012:tid 52097] [client 172.173.121.85:64894] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYt9EzSWr-8cpS83mgN8gAAA1Q"]
[Sun May 03 01:01:40.426964 2026] [:error] [pid 53436:tid 53519] [client 172.173.121.85:63976] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYt9K9N0xp8fccVM0DrAQAAAJQ"]
[Sun May 03 01:01:40.800503 2026] [:error] [pid 52010:tid 52052] [client 172.173.121.85:64858] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35_S.php"] [unique_id "afYt9AiR6wohDtdeJMBetAAAAsk"]
[Sun May 03 01:01:41.177802 2026] [:error] [pid 52010:tid 52045] [client 172.173.121.85:65216] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYt9QiR6wohDtdeJMBetQAAAsI"]
[Sun May 03 01:01:41.554810 2026] [:error] [pid 52010:tid 52048] [client 172.173.121.85:62292] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYt9QiR6wohDtdeJMBeuAAAAsU"]
[Sun May 03 01:01:41.945434 2026] [:error] [pid 52012:tid 52102] [client 172.173.121.85:64773] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYt9UzSWr-8cpS83mgN9QAAA1g"]
[Sun May 03 01:01:42.326104 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:64794] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afYt9kzSWr-8cpS83mgN9wAAA0Q"]
[Sun May 03 01:01:42.704807 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:65204] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYt9kzSWr-8cpS83mgN-QAAA0E"]
[Sun May 03 01:01:43.081733 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:64846] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYt9wiR6wohDtdeJMBevAAAAs8"]
[Sun May 03 01:01:43.458251 2026] [:error] [pid 22846:tid 22850] [client 172.173.121.85:64842] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYt94m1Ms03Mfhp3aYSMAAAAQI"]
[Sun May 03 01:01:43.846371 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:65247] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/111.php"] [unique_id "afYt9wiR6wohDtdeJMBevgAAAtI"]
[Sun May 03 01:01:44.239431 2026] [:error] [pid 11894:tid 11915] [client 172.173.121.85:64877] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYt-DHh6DQF1tkXIKz28gAAAVI"]
[Sun May 03 01:01:44.622105 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:62600] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYt-IDmp7_z8QkjSzMK_AAAAE8"]
[Sun May 03 01:01:45.006903 2026] [:error] [pid 52010:tid 52060] [client 172.173.121.85:65234] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYt-QiR6wohDtdeJMBewwAAAtE"]
[Sun May 03 01:01:45.407470 2026] [:error] [pid 22846:tid 22871] [client 172.173.121.85:64820] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1.php"] [unique_id "afYt-Ym1Ms03Mfhp3aYSMQAAARc"]
[Sun May 03 01:01:45.784961 2026] [:error] [pid 53436:tid 53506] [client 172.173.121.85:65224] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYt-a9N0xp8fccVM0DrAgAAAIc"]
[Sun May 03 01:01:46.157812 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:65214] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYt-giR6wohDtdeJMBexQAAAtU"]
[Sun May 03 01:01:46.528842 2026] [:error] [pid 52010:tid 52044] [client 172.173.121.85:63988] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYt-giR6wohDtdeJMBeyAAAAsE"]
[Sun May 03 01:01:46.906160 2026] [:error] [pid 52010:tid 52066] [client 172.173.121.85:62664] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aligk.php"] [unique_id "afYt-giR6wohDtdeJMBeygAAAtc"]
[Sun May 03 01:01:47.289908 2026] [:error] [pid 52010:tid 52043] [client 172.173.121.85:65193] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYt-wiR6wohDtdeJMBezAAAAsA"]
[Sun May 03 01:01:47.679628 2026] [:error] [pid 52010:tid 52048] [client 172.173.121.85:63495] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYt-wiR6wohDtdeJMBezwAAAsU"]
[Sun May 03 01:01:48.053067 2026] [:error] [pid 52010:tid 52059] [client 172.173.121.85:65226] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYt_AiR6wohDtdeJMBe0AAAAtA"]
[Sun May 03 01:01:48.450210 2026] [:error] [pid 11894:tid 11910] [client 172.173.121.85:65152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byrgo.php"] [unique_id "afYt_DHh6DQF1tkXIKz29AAAAU0"]
[Sun May 03 01:01:48.825033 2026] [:error] [pid 52010:tid 52047] [client 172.173.121.85:65200] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYt_AiR6wohDtdeJMBe1QAAAsQ"]
[Sun May 03 01:01:49.199428 2026] [:error] [pid 52010:tid 52056] [client 172.173.121.85:63882] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYt_QiR6wohDtdeJMBe2AAAAs0"]
[Sun May 03 01:01:49.582786 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:65253] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYt_QiR6wohDtdeJMBe2gAAAtI"]
[Sun May 03 01:01:49.963339 2026] [:error] [pid 11894:tid 11919] [client 172.173.121.85:63985] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwpg.php"] [unique_id "afYt_THh6DQF1tkXIKz29gAAAVY"]
[Sun May 03 01:01:50.358067 2026] [:error] [pid 52010:tid 52049] [client 172.173.121.85:63892] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYt_giR6wohDtdeJMBe4AAAAsY"]
[Sun May 03 01:01:50.737157 2026] [:error] [pid 51950:tid 52001] [client 172.173.121.85:64837] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYt_ooBJzYZ3RKUhdiFwAAAAlU"]
[Sun May 03 01:01:51.112018 2026] [:error] [pid 51950:tid 52002] [client 172.173.121.85:62675] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYt_4oBJzYZ3RKUhdiFwQAAAlY"]
[Sun May 03 01:01:51.488673 2026] [:error] [pid 53436:tid 53499] [client 172.173.121.85:63987] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ass.php"] [unique_id "afYt_69N0xp8fccVM0DrBAAAAIA"]
[Sun May 03 01:01:51.873955 2026] [:error] [pid 51950:tid 51994] [client 172.173.121.85:63519] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYt_4oBJzYZ3RKUhdiFwwAAAk4"]
[Sun May 03 01:01:52.248571 2026] [:error] [pid 52124:tid 52153] [client 172.173.121.85:65202] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYuADjabaZ9NMm8eQubrQAAA5g"]
[Sun May 03 01:01:52.622738 2026] [:error] [pid 53436:tid 53512] [client 172.173.121.85:63941] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYuAK9N0xp8fccVM0DrBwAAAI0"]
[Sun May 03 01:01:53.000194 2026] [:error] [pid 52124:tid 52136] [client 172.173.121.85:63919] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afYuADjabaZ9NMm8eQubrgAAA4c"]
[Sun May 03 01:01:53.387857 2026] [:error] [pid 52124:tid 52143] [client 172.173.121.85:64806] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYuATjabaZ9NMm8eQubrwAAA44"]
[Sun May 03 01:01:53.780223 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:65276] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYuAe9BXmRQcbfsxlyy5QAAAA4"]
[Sun May 03 01:01:54.155467 2026] [:error] [pid 53434:tid 53445] [client 172.173.121.85:65236] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYuAu9BXmRQcbfsxlyy5gAAAAI"]
[Sun May 03 01:01:54.531088 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:64791] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afYuAu9BXmRQcbfsxlyy6QAAABc"]
[Sun May 03 01:01:54.908597 2026] [:error] [pid 11894:tid 11917] [client 172.173.121.85:63497] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYuAjHh6DQF1tkXIKz2-AAAAVQ"]
[Sun May 03 01:01:55.287581 2026] [:error] [pid 11894:tid 11918] [client 172.173.121.85:65155] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYuAzHh6DQF1tkXIKz2-gAAAVU"]
[Sun May 03 01:01:55.661437 2026] [:error] [pid 22846:tid 22868] [client 172.173.121.85:63613] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYuA4m1Ms03Mfhp3aYSNwAAARQ"]
[Sun May 03 01:01:56.063579 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:64868] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afYuBIoBJzYZ3RKUhdiFygAAAlI"]
[Sun May 03 01:01:56.447141 2026] [:error] [pid 51917:tid 51938] [client 172.173.121.85:63962] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYuBK7wZviJ7BgcCi9wZgAAAdM"]
[Sun May 03 01:01:56.831993 2026] [:error] [pid 53435:tid 53496] [client 172.173.121.85:63569] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYuBIDmp7_z8QkjSzMLAAAAAFg"]
[Sun May 03 01:01:57.212992 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:63489] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYuBYDmp7_z8QkjSzMLAQAAAEY"]
[Sun May 03 01:01:57.598166 2026] [:error] [pid 52010:tid 52063] [client 172.173.121.85:64772] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afYuBQiR6wohDtdeJMBe5QAAAtQ"]
[Sun May 03 01:01:57.975472 2026] [:error] [pid 53434:tid 53447] [client 172.173.121.85:65240] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYuBe9BXmRQcbfsxlyy7AAAAAQ"]
[Sun May 03 01:01:58.349941 2026] [:error] [pid 53435:tid 53493] [client 172.173.121.85:65162] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYuBoDmp7_z8QkjSzMLAgAAAFU"]
[Sun May 03 01:01:58.727540 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:63895] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYuBkzSWr-8cpS83mgOBwAAA0o"]
[Sun May 03 01:01:59.101952 2026] [:error] [pid 53434:tid 53448] [client 172.173.121.85:64823] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afYuB-9BXmRQcbfsxlyy7QAAAAU"]
[Sun May 03 01:01:59.482156 2026] [:error] [pid 53434:tid 53459] [client 172.173.121.85:63998] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYuB-9BXmRQcbfsxlyy7gAAABA"]
[Sun May 03 01:01:59.862488 2026] [:error] [pid 53436:tid 53515] [client 172.173.121.85:65270] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYuB69N0xp8fccVM0DrDAAAAJA"]
[Sun May 03 01:02:00.253497 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:63928] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYuCEzSWr-8cpS83mgODAAAA0U"]
[Sun May 03 01:02:00.633136 2026] [:error] [pid 52012:tid 52090] [client 172.173.121.85:64824] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afYuCEzSWr-8cpS83mgODwAAA00"]
[Sun May 03 01:02:01.014594 2026] [:error] [pid 53435:tid 53485] [client 172.173.121.85:63980] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYuCYDmp7_z8QkjSzMLBAAAAE0"]
[Sun May 03 01:02:01.396430 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:62682] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYuCUzSWr-8cpS83mgOEwAAA1U"]
[Sun May 03 01:02:01.794638 2026] [:error] [pid 52124:tid 52130] [client 172.173.121.85:65222] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYuCTjabaZ9NMm8eQubtAAAA4E"]
[Sun May 03 01:02:02.186385 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:63931] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afYuCkzSWr-8cpS83mgOGgAAA0Y"]
[Sun May 03 01:02:02.561939 2026] [:error] [pid 52010:tid 52067] [client 172.173.121.85:63579] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuCgiR6wohDtdeJMBe5gAAAtg"]
[Sun May 03 01:02:02.941841 2026] [:error] [pid 52010:tid 52049] [client 172.173.121.85:63995] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuCgiR6wohDtdeJMBe5wAAAsY"]
[Sun May 03 01:02:03.376356 2026] [:error] [pid 52010:tid 52065] [client 172.173.121.85:64816] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuCwiR6wohDtdeJMBe6QAAAtY"]
[Sun May 03 01:02:03.757288 2026] [:error] [pid 52124:tid 52141] [client 172.173.121.85:65209] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuCzjabaZ9NMm8eQubtgAAA4w"]
[Sun May 03 01:02:04.139894 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:64854] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYuDEzSWr-8cpS83mgOHwAAA1A"]
[Sun May 03 01:02:04.532407 2026] [:error] [pid 51950:tid 51993] [client 172.173.121.85:63999] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYuDIoBJzYZ3RKUhdiF0gAAAk0"]
[Sun May 03 01:02:04.929631 2026] [:error] [pid 52124:tid 52146] [client 172.173.121.85:63947] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYuDDjabaZ9NMm8eQubtwAAA5E"]
[Sun May 03 01:02:05.309820 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:62693] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "afYuDe9BXmRQcbfsxlyy8QAAABQ"]
[Sun May 03 01:02:05.683602 2026] [:error] [pid 53436:tid 53519] [client 172.173.121.85:64882] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYuDa9N0xp8fccVM0DrDgAAAJQ"]
[Sun May 03 01:02:06.062370 2026] [:error] [pid 52012:tid 52075] [client 172.173.121.85:64892] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYuDkzSWr-8cpS83mgOJQAAA0A"]
[Sun May 03 01:02:06.462418 2026] [:error] [pid 52012:tid 52090] [client 172.173.121.85:65228] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYuDkzSWr-8cpS83mgOJgAAA00"]
[Sun May 03 01:02:06.843528 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:63949] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afYuDkzSWr-8cpS83mgOJwAAA1A"]
[Sun May 03 01:02:07.218924 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:64832] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYuD0zSWr-8cpS83mgOKQAAA0M"]
[Sun May 03 01:02:07.598742 2026] [:error] [pid 52012:tid 52091] [client 172.173.121.85:62658] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYuD0zSWr-8cpS83mgOLAAAA04"]
[Sun May 03 01:02:07.975399 2026] [:error] [pid 52010:tid 52047] [client 172.173.121.85:64852] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYuDwiR6wohDtdeJMBe7gAAAsQ"]
[Sun May 03 01:02:08.352340 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:62711] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afYuEEzSWr-8cpS83mgOMAAAA0E"]
[Sun May 03 01:02:08.729862 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:63901] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYuEAiR6wohDtdeJMBe7wAAAs8"]
[Sun May 03 01:02:09.109693 2026] [:error] [pid 53434:tid 53444] [client 172.173.121.85:63582] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYuEe9BXmRQcbfsxlyy9wAAAAE"]
[Sun May 03 01:02:09.491475 2026] [:error] [pid 51950:tid 51981] [client 172.173.121.85:63908] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYuEYoBJzYZ3RKUhdiF1QAAAkE"]
[Sun May 03 01:02:09.871860 2026] [:error] [pid 51950:tid 51983] [client 172.173.121.85:64879] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afYuEYoBJzYZ3RKUhdiF1gAAAkM"]
[Sun May 03 01:02:10.247747 2026] [:error] [pid 51917:tid 51934] [client 172.173.121.85:65279] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYuEq7wZviJ7BgcCi9wZwAAAc8"]
[Sun May 03 01:02:10.643540 2026] [:error] [pid 52012:tid 52091] [client 172.173.121.85:63926] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYuEkzSWr-8cpS83mgONAAAA04"]
[Sun May 03 01:02:11.019998 2026] [:error] [pid 11894:tid 11912] [client 172.173.121.85:64797] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYuEzHh6DQF1tkXIKz2_AAAAU8"]
[Sun May 03 01:02:11.396167 2026] [:error] [pid 51917:tid 51922] [client 172.173.121.85:63945] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a2.php"] [unique_id "afYuE67wZviJ7BgcCi9waAAAAcM"]
[Sun May 03 01:02:11.779649 2026] [:error] [pid 51917:tid 51935] [client 172.173.121.85:63557] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYuE67wZviJ7BgcCi9waQAAAdA"]
[Sun May 03 01:02:12.163504 2026] [:error] [pid 51917:tid 51931] [client 172.173.121.85:64779] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYuFK7wZviJ7BgcCi9wawAAAcw"]
[Sun May 03 01:02:12.534502 2026] [:error] [pid 51917:tid 51933] [client 172.173.121.85:63875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYuFK7wZviJ7BgcCi9wbQAAAc4"]
[Sun May 03 01:02:12.912967 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:65198] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afYuFIDmp7_z8QkjSzMLCAAAAE8"]
[Sun May 03 01:02:13.306496 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:63989] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYuFYDmp7_z8QkjSzMLCwAAAEQ"]
[Sun May 03 01:02:13.679435 2026] [:error] [pid 53435:tid 53477] [client 172.173.121.85:63525] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYuFYDmp7_z8QkjSzMLDAAAAEU"]
[Sun May 03 01:02:14.062496 2026] [:error] [pid 52010:tid 52044] [client 172.173.121.85:62235] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYuFgiR6wohDtdeJMBe9AAAAsE"]
[Sun May 03 01:02:14.436968 2026] [:error] [pid 52010:tid 52052] [client 172.173.121.85:65178] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afYuFgiR6wohDtdeJMBe9QAAAsk"]
[Sun May 03 01:02:14.818224 2026] [:error] [pid 11894:tid 11906] [client 172.173.121.85:65173] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYuFjHh6DQF1tkXIKz2_gAAAUk"]
[Sun May 03 01:02:15.197835 2026] [:error] [pid 52010:tid 52054] [client 172.173.121.85:65169] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYuFwiR6wohDtdeJMBe-QAAAss"]
[Sun May 03 01:02:15.580388 2026] [:error] [pid 52010:tid 52061] [client 172.173.121.85:63535] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYuFwiR6wohDtdeJMBe_AAAAtI"]
[Sun May 03 01:02:15.967137 2026] [:error] [pid 52010:tid 52050] [client 172.173.121.85:63589] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afYuFwiR6wohDtdeJMBe_wAAAsc"]
[Sun May 03 01:02:16.349769 2026] [:error] [pid 22846:tid 22862] [client 172.173.121.85:65248] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYuGIm1Ms03Mfhp3aYSPQAAAQ4"]
[Sun May 03 01:02:16.731317 2026] [:error] [pid 51950:tid 51982] [client 172.173.121.85:64872] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYuGIoBJzYZ3RKUhdiF2gAAAkI"]
[Sun May 03 01:02:17.120797 2026] [:error] [pid 51950:tid 52003] [client 172.173.121.85:65241] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYuGYoBJzYZ3RKUhdiF2wAAAlc"]
[Sun May 03 01:02:17.513185 2026] [:error] [pid 52124:tid 52150] [client 172.173.121.85:63920] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "afYuGTjabaZ9NMm8eQubuwAAA5U"]
[Sun May 03 01:02:17.895651 2026] [:error] [pid 52010:tid 52067] [client 172.173.121.85:64810] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYuGQiR6wohDtdeJMBfAgAAAtg"]
[Sun May 03 01:02:18.278545 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:64863] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYuGkzSWr-8cpS83mgOOAAAA0c"]
[Sun May 03 01:02:18.655576 2026] [:error] [pid 52012:tid 52101] [client 172.173.121.85:64822] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYuGkzSWr-8cpS83mgOOQAAA1c"]
[Sun May 03 01:02:19.039465 2026] [:error] [pid 52012:tid 52085] [client 172.173.121.85:65210] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afYuG0zSWr-8cpS83mgOOwAAA0g"]
[Sun May 03 01:02:19.418839 2026] [:error] [pid 52010:tid 52043] [client 172.173.121.85:65238] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYuGwiR6wohDtdeJMBfBAAAAsA"]
[Sun May 03 01:02:19.799175 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:63969] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYuGwiR6wohDtdeJMBfBgAAAs8"]
[Sun May 03 01:02:20.172531 2026] [:error] [pid 51950:tid 51997] [client 172.173.121.85:63512] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYuHIoBJzYZ3RKUhdiF4QAAAlE"]
[Sun May 03 01:02:20.543381 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:65188] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ol.php"] [unique_id "afYuHIDmp7_z8QkjSzMLEAAAAE8"]
[Sun May 03 01:02:20.917034 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:62290] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYuHIDmp7_z8QkjSzMLEgAAAEQ"]
[Sun May 03 01:02:21.291905 2026] [:error] [pid 53435:tid 53494] [client 172.173.121.85:63536] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYuHYDmp7_z8QkjSzMLFAAAAFY"]
[Sun May 03 01:02:21.665055 2026] [:error] [pid 53435:tid 53483] [client 172.173.121.85:65219] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYuHYDmp7_z8QkjSzMLGQAAAEs"]
[Sun May 03 01:02:22.042052 2026] [:error] [pid 53435:tid 53479] [client 172.173.121.85:64833] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afYuHoDmp7_z8QkjSzMLGgAAAEc"]
[Sun May 03 01:02:22.431425 2026] [:error] [pid 53434:tid 53456] [client 172.173.121.85:64787] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYuHu9BXmRQcbfsxlyy-wAAAA0"]
[Sun May 03 01:02:22.805613 2026] [:error] [pid 51950:tid 51999] [client 172.173.121.85:63906] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYuHooBJzYZ3RKUhdiF5AAAAlM"]
[Sun May 03 01:02:23.198266 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:63502] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYuH-9BXmRQcbfsxlyy_QAAABQ"]
[Sun May 03 01:02:23.569361 2026] [:error] [pid 51950:tid 51981] [client 172.173.121.85:63991] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afYuH4oBJzYZ3RKUhdiF5gAAAkE"]
[Sun May 03 01:02:23.947563 2026] [:error] [pid 53436:tid 53523] [client 172.173.121.85:64849] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYuH69N0xp8fccVM0DrEQAAAJg"]
[Sun May 03 01:02:24.324937 2026] [:error] [pid 53434:tid 53454] [client 172.173.121.85:63914] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYuIO9BXmRQcbfsxlyzAQAAAAs"]
[Sun May 03 01:02:24.700763 2026] [:error] [pid 51917:tid 51927] [client 172.173.121.85:62281] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYuIK7wZviJ7BgcCi9wbgAAAcg"]
[Sun May 03 01:02:25.078429 2026] [:error] [pid 53436:tid 53505] [client 172.173.121.85:64775] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afYuIa9N0xp8fccVM0DrEwAAAIY"]
[Sun May 03 01:02:25.451207 2026] [:error] [pid 53434:tid 53460] [client 172.173.121.85:64876] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuIe9BXmRQcbfsxlyzAwAAABE"]
[Sun May 03 01:02:25.828913 2026] [:error] [pid 53434:tid 53448] [client 172.173.121.85:64875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuIe9BXmRQcbfsxlyzBgAAAAU"]
[Sun May 03 01:02:26.202952 2026] [:error] [pid 53434:tid 53465] [client 172.173.121.85:63572] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuIu9BXmRQcbfsxlyzCAAAABY"]
[Sun May 03 01:02:26.581494 2026] [:error] [pid 11894:tid 11918] [client 172.173.121.85:64769] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuIjHh6DQF1tkXIKz3BAAAAVU"]
[Sun May 03 01:02:26.959134 2026] [:error] [pid 51950:tid 51992] [client 172.173.121.85:63528] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYuIooBJzYZ3RKUhdiF7AAAAkw"]
[Sun May 03 01:02:27.333250 2026] [:error] [pid 11894:tid 11898] [client 172.173.121.85:63500] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYuIzHh6DQF1tkXIKz3BgAAAUE"]
[Sun May 03 01:02:27.711713 2026] [:error] [pid 11894:tid 11912] [client 172.173.121.85:63580] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYuIzHh6DQF1tkXIKz3CQAAAU8"]
[Sun May 03 01:02:28.084164 2026] [:error] [pid 11894:tid 11897] [client 172.173.121.85:64819] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afYuJDHh6DQF1tkXIKz3CgAAAUA"]
[Sun May 03 01:02:28.462339 2026] [:error] [pid 52010:tid 52051] [client 172.173.121.85:63983] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYuJAiR6wohDtdeJMBfCAAAAsg"]
[Sun May 03 01:02:28.844265 2026] [:error] [pid 52124:tid 52151] [client 172.173.121.85:64887] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYuJDjabaZ9NMm8eQubvAAAA5Y"]
[Sun May 03 01:02:29.225830 2026] [:error] [pid 53435:tid 53487] [client 172.173.121.85:63575] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYuJYDmp7_z8QkjSzMLHAAAAE8"]
[Sun May 03 01:02:29.602344 2026] [:error] [pid 53435:tid 53490] [client 172.173.121.85:65186] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afYuJYDmp7_z8QkjSzMLHQAAAFI"]
[Sun May 03 01:02:29.978928 2026] [:error] [pid 52010:tid 52063] [client 172.173.121.85:64834] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "afYuJQiR6wohDtdeJMBfCwAAAtQ"]
[Sun May 03 01:02:30.353117 2026] [:error] [pid 53434:tid 53451] [client 172.173.121.85:63911] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "afYuJu9BXmRQcbfsxlyzCwAAAAg"]
[Sun May 03 01:02:30.734547 2026] [:error] [pid 53436:tid 53513] [client 172.173.121.85:65272] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "afYuJq9N0xp8fccVM0DrFQAAAI4"]
[Sun May 03 01:02:31.118375 2026] [:error] [pid 53434:tid 53452] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sun May 03 01:02:31.309177 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun May 03 01:02:31.691918 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun May 03 01:02:31.883112 2026] [:error] [pid 53434:tid 53444] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun May 03 01:02:32.455985 2026] [:error] [pid 53434:tid 53443] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun May 03 01:02:32.647138 2026] [:error] [pid 53434:tid 53447] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun May 03 01:02:32.838548 2026] [:error] [pid 53434:tid 53446] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun May 03 01:02:33.030385 2026] [:error] [pid 53434:tid 53451] [client 172.173.121.85:62310] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun May 03 01:02:33.218515 2026] [:error] [pid 53434:tid 53467] [client 172.173.121.85:62310] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afYuKe9BXmRQcbfsxlyzGQAAABg"]
[Sun May 03 01:02:33.605784 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:64789] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afYuKe9BXmRQcbfsxlyzGgAAABQ"]
[Sun May 03 01:02:33.980462 2026] [:error] [pid 52010:tid 52052] [client 172.173.121.85:64878] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afYuKQiR6wohDtdeJMBfEQAAAsk"]
[Sun May 03 01:02:34.356095 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:63490] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afYuKgiR6wohDtdeJMBfFAAAAtU"]
[Sun May 03 01:02:34.738582 2026] [:error] [pid 53434:tid 53457] [client 172.173.121.85:63605] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYuKu9BXmRQcbfsxlyzGwAAAA4"]
[Sun May 03 01:02:35.115708 2026] [:error] [pid 52010:tid 52051] [client 172.173.121.85:63973] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYuKwiR6wohDtdeJMBfFgAAAsg"]
[Sun May 03 01:02:35.491856 2026] [:error] [pid 22846:tid 22863] [client 172.173.121.85:64838] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYuK4m1Ms03Mfhp3aYSQgAAAQ8"]
[Sun May 03 01:02:35.866585 2026] [:error] [pid 53434:tid 53461] [client 172.173.121.85:63524] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afYuK-9BXmRQcbfsxlyzHAAAABI"]
[Sun May 03 01:02:36.250179 2026] [:error] [pid 53434:tid 53460] [client 172.173.121.85:62607] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuLO9BXmRQcbfsxlyzHQAAABE"]
[Sun May 03 01:02:36.628241 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:63891] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuLO9BXmRQcbfsxlyzHgAAAA8"]
[Sun May 03 01:02:37.001188 2026] [:error] [pid 53434:tid 53466] [client 172.173.121.85:65179] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuLe9BXmRQcbfsxlyzIQAAABc"]
[Sun May 03 01:02:37.387183 2026] [:error] [pid 53435:tid 53481] [client 172.173.121.85:63899] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuLYDmp7_z8QkjSzMLIQAAAEk"]
[Sun May 03 01:02:37.764208 2026] [:error] [pid 53435:tid 53491] [client 172.173.121.85:63540] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYuLYDmp7_z8QkjSzMLIgAAAFM"]
[Sun May 03 01:02:38.146319 2026] [:error] [pid 53435:tid 53492] [client 172.173.121.85:65154] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYuLoDmp7_z8QkjSzMLJAAAAFQ"]
[Sun May 03 01:02:38.525448 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:62254] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYuLoDmp7_z8QkjSzMLJQAAAEo"]
[Sun May 03 01:02:38.916512 2026] [:error] [pid 53435:tid 53478] [client 172.173.121.85:62712] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we.php"] [unique_id "afYuLoDmp7_z8QkjSzMLJwAAAEY"]
[Sun May 03 01:02:39.296522 2026] [:error] [pid 53434:tid 53443] [client 172.173.121.85:63594] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYuL-9BXmRQcbfsxlyzJAAAAAA"]
[Sun May 03 01:02:39.683147 2026] [:error] [pid 53435:tid 53496] [client 172.173.121.85:62609] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYuL4Dmp7_z8QkjSzMLKAAAAFg"]
[Sun May 03 01:02:40.060434 2026] [:error] [pid 53435:tid 53495] [client 172.173.121.85:63492] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYuMIDmp7_z8QkjSzMLKgAAAFc"]
[Sun May 03 01:02:40.438061 2026] [:error] [pid 53435:tid 53484] [client 172.173.121.85:62669] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "afYuMIDmp7_z8QkjSzMLKwAAAEw"]
[Sun May 03 01:02:40.819174 2026] [:error] [pid 53435:tid 53490] [client 172.173.121.85:65154] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYuMIDmp7_z8QkjSzMLLgAAAFI"]
[Sun May 03 01:02:41.197923 2026] [:error] [pid 53435:tid 53494] [client 172.173.121.85:63567] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYuMYDmp7_z8QkjSzMLMAAAAFY"]
[Sun May 03 01:02:41.587965 2026] [:error] [pid 52010:tid 52045] [client 172.173.121.85:63915] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYuMQiR6wohDtdeJMBfHQAAAsI"]
[Sun May 03 01:02:41.973343 2026] [:error] [pid 53434:tid 53463] [client 172.173.121.85:65165] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin1.php"] [unique_id "afYuMe9BXmRQcbfsxlyzJwAAABQ"]
[Sun May 03 01:02:42.358206 2026] [:error] [pid 53435:tid 53472] [client 172.173.121.85:64844] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYuMoDmp7_z8QkjSzMLNAAAAEA"]
[Sun May 03 01:02:42.733790 2026] [:error] [pid 53435:tid 53483] [client 172.173.121.85:63541] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYuMoDmp7_z8QkjSzMLNQAAAEs"]
[Sun May 03 01:02:43.127821 2026] [:error] [pid 53435:tid 53479] [client 172.173.121.85:63545] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYuM4Dmp7_z8QkjSzMLNwAAAEc"]
[Sun May 03 01:02:43.519273 2026] [:error] [pid 51917:tid 51942] [client 172.173.121.85:63531] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afYuM67wZviJ7BgcCi9wcgAAAdc"]
[Sun May 03 01:02:43.895551 2026] [:error] [pid 53434:tid 53444] [client 172.173.121.85:65269] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYuM-9BXmRQcbfsxlyzKgAAAAE"]
[Sun May 03 01:02:44.276112 2026] [:error] [pid 53436:tid 53501] [client 172.173.121.85:63494] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYuNK9N0xp8fccVM0DrGgAAAII"]
[Sun May 03 01:02:44.656996 2026] [:error] [pid 11894:tid 11913] [client 172.173.121.85:63989] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYuNDHh6DQF1tkXIKz3GQAAAVA"]
[Sun May 03 01:02:45.029308 2026] [:error] [pid 51950:tid 52004] [client 172.173.121.85:64886] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afYuNYoBJzYZ3RKUhdiF8AAAAlg"]
[Sun May 03 01:02:45.405629 2026] [:error] [pid 51950:tid 51993] [client 172.173.121.85:65254] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYuNYoBJzYZ3RKUhdiF8QAAAk0"]
[Sun May 03 01:02:45.785051 2026] [:error] [pid 51950:tid 51991] [client 172.173.121.85:62302] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYuNYoBJzYZ3RKUhdiF8gAAAks"]
[Sun May 03 01:02:46.156636 2026] [:error] [pid 52124:tid 52140] [client 172.173.121.85:62696] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYuNjjabaZ9NMm8eQubwAAAA4s"]
[Sun May 03 01:02:46.534195 2026] [:error] [pid 52124:tid 52130] [client 172.173.121.85:63996] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afYuNjjabaZ9NMm8eQubwQAAA4E"]
[Sun May 03 01:02:46.909974 2026] [:error] [pid 51950:tid 51998] [client 172.173.121.85:65196] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYuNooBJzYZ3RKUhdiF9AAAAlI"]
[Sun May 03 01:02:47.301317 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:63515] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYuN0zSWr-8cpS83mgOQgAAA0w"]
[Sun May 03 01:02:47.682404 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:63499] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYuN0zSWr-8cpS83mgOQwAAA0E"]
[Sun May 03 01:02:48.063567 2026] [:error] [pid 52012:tid 52079] [client 172.173.121.85:62227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afYuOEzSWr-8cpS83mgORwAAA0I"]
[Sun May 03 01:02:48.445921 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:63963] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYuOEzSWr-8cpS83mgOSAAAA0U"]
[Sun May 03 01:02:48.827620 2026] [:error] [pid 22846:tid 22848] [client 172.173.121.85:62268] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYuOIm1Ms03Mfhp3aYSRwAAAQA"]
[Sun May 03 01:02:49.205009 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:62601] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYuOUzSWr-8cpS83mgOSgAAA0Y"]
[Sun May 03 01:02:49.591125 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:63904] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afYuOUzSWr-8cpS83mgOTQAAA0s"]
[Sun May 03 01:02:49.976701 2026] [:error] [pid 53436:tid 53505] [client 172.173.121.85:64883] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYuOa9N0xp8fccVM0DrHAAAAIY"]
[Sun May 03 01:02:50.387090 2026] [:error] [pid 51950:tid 51988] [client 172.173.121.85:62320] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYuOooBJzYZ3RKUhdiF-QAAAkg"]
[Sun May 03 01:02:50.785931 2026] [:error] [pid 22846:tid 22857] [client 172.173.121.85:63888] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYuOom1Ms03Mfhp3aYSSAAAAQk"]
[Sun May 03 01:02:51.165294 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:63507] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afYuO0zSWr-8cpS83mgOTwAAA1E"]
[Sun May 03 01:02:51.536741 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:65261] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuO0zSWr-8cpS83mgOUAAAA0o"]
[Sun May 03 01:02:51.920987 2026] [:error] [pid 52012:tid 52091] [client 172.173.121.85:64880] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuO0zSWr-8cpS83mgOUQAAA04"]
[Sun May 03 01:02:52.298638 2026] [:error] [pid 53436:tid 53521] [client 172.173.121.85:65255] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuPK9N0xp8fccVM0DrHQAAAJY"]
[Sun May 03 01:02:52.674492 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:65264] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afYuPEzSWr-8cpS83mgOUwAAA0w"]
[Sun May 03 01:02:53.055900 2026] [:error] [pid 52012:tid 52079] [client 172.173.121.85:63599] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYuPUzSWr-8cpS83mgOVgAAA0I"]
[Sun May 03 01:02:53.437428 2026] [:error] [pid 11894:tid 11903] [client 172.173.121.85:63615] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYuPTHh6DQF1tkXIKz3GgAAAUY"]
[Sun May 03 01:02:53.820498 2026] [:error] [pid 11894:tid 11919] [client 172.173.121.85:63600] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYuPTHh6DQF1tkXIKz3GwAAAVY"]
[Sun May 03 01:02:54.208690 2026] [:error] [pid 53436:tid 53514] [client 172.173.121.85:63938] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afYuPq9N0xp8fccVM0DrHgAAAI8"]
[Sun May 03 01:02:54.581376 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:65278] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuPgiR6wohDtdeJMBfJAAAAs8"]
[Sun May 03 01:02:54.970977 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:65271] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuPkzSWr-8cpS83mgOWgAAA1E"]
[Sun May 03 01:02:55.348053 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:64827] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuP0zSWr-8cpS83mgOWwAAA0Q"]
[Sun May 03 01:02:55.737415 2026] [:error] [pid 51917:tid 51929] [client 172.173.121.85:63595] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afYuP67wZviJ7BgcCi9wfAAAAco"]
[Sun May 03 01:02:56.121800 2026] [:error] [pid 51917:tid 51942] [client 172.173.121.85:63970] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYuQK7wZviJ7BgcCi9wfQAAAdc"]
[Sun May 03 01:02:56.498292 2026] [:error] [pid 52124:tid 52146] [client 172.173.121.85:64802] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYuQDjabaZ9NMm8eQubwwAAA5E"]
[Sun May 03 01:02:56.904945 2026] [:error] [pid 53434:tid 53452] [client 172.173.121.85:62227] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYuQO9BXmRQcbfsxlyzLQAAAAk"]
[Sun May 03 01:02:57.297659 2026] [:error] [pid 52012:tid 52102] [client 172.173.121.85:62260] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afYuQUzSWr-8cpS83mgOXAAAA1g"]
[Sun May 03 01:02:57.673563 2026] [:error] [pid 52012:tid 52083] [client 172.173.121.85:63526] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYuQUzSWr-8cpS83mgOXQAAA0Y"]
[Sun May 03 01:02:58.078306 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:63590] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYuQkzSWr-8cpS83mgOYAAAA1U"]
[Sun May 03 01:02:58.488343 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:63927] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYuQkzSWr-8cpS83mgOYgAAA1I"]
[Sun May 03 01:02:58.881672 2026] [:error] [pid 52012:tid 52087] [client 172.173.121.85:65189] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fi.php"] [unique_id "afYuQkzSWr-8cpS83mgOZAAAA0o"]
[Sun May 03 01:02:59.276033 2026] [:error] [pid 52012:tid 52091] [client 172.173.121.85:63488] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYuQ0zSWr-8cpS83mgOZQAAA04"]
[Sun May 03 01:02:59.665137 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:63981] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYuQ0zSWr-8cpS83mgOZwAAA0w"]
[Sun May 03 01:03:00.043313 2026] [:error] [pid 52012:tid 52079] [client 172.173.121.85:63930] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYuREzSWr-8cpS83mgOaQAAA0I"]
[Sun May 03 01:03:00.460789 2026] [:error] [pid 52010:tid 52047] [client 172.173.121.85:62637] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afYuRAiR6wohDtdeJMBfKgAAAsQ"]
[Sun May 03 01:03:00.838510 2026] [:error] [pid 53436:tid 53503] [client 172.173.121.85:65166] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYuRK9N0xp8fccVM0DrIgAAAIQ"]
[Sun May 03 01:03:01.226030 2026] [:error] [pid 51950:tid 51989] [client 172.173.121.85:62628] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYuRYoBJzYZ3RKUhdiF-wAAAkk"]
[Sun May 03 01:03:01.605363 2026] [:error] [pid 52010:tid 52055] [client 172.173.121.85:63933] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYuRQiR6wohDtdeJMBfKwAAAsw"]
[Sun May 03 01:03:01.981337 2026] [:error] [pid 51950:tid 52000] [client 172.173.121.85:64771] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afYuRYoBJzYZ3RKUhdiF_gAAAlQ"]
[Sun May 03 01:03:02.370960 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:62688] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afYuRkzSWr-8cpS83mgOagAAA0k"]
[Sun May 03 01:03:02.754154 2026] [:error] [pid 51950:tid 51990] [client 172.173.121.85:63607] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afYuRooBJzYZ3RKUhdiGAQAAAko"]
[Sun May 03 01:03:03.132755 2026] [:error] [pid 22846:tid 22865] [client 172.173.121.85:64778] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afYuR4m1Ms03Mfhp3aYSTgAAARE"]
[Sun May 03 01:03:03.542267 2026] [:error] [pid 11894:tid 11907] [client 172.173.121.85:62604] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afYuRzHh6DQF1tkXIKz3HgAAAUo"]
[Sun May 03 01:03:03.920715 2026] [:error] [pid 51917:tid 51923] [client 172.173.121.85:63957] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afYuR67wZviJ7BgcCi9wgAAAAcQ"]
[Sun May 03 01:03:04.334487 2026] [:error] [pid 11894:tid 11908] [client 172.173.121.85:62692] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYuSDHh6DQF1tkXIKz3HwAAAUs"]
[Sun May 03 01:03:04.740401 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:65185] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYuSAiR6wohDtdeJMBfLAAAAtU"]
[Sun May 03 01:03:05.121273 2026] [:error] [pid 51950:tid 51995] [client 172.173.121.85:62277] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYuSYoBJzYZ3RKUhdiGBAAAAk8"]
[Sun May 03 01:03:05.522195 2026] [:error] [pid 51950:tid 51994] [client 172.173.121.85:62671] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afYuSYoBJzYZ3RKUhdiGBwAAAk4"]
[Sun May 03 01:03:05.901066 2026] [:error] [pid 22846:tid 22871] [client 172.173.121.85:63608] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYuSYm1Ms03Mfhp3aYSUAAAARc"]
[Sun May 03 01:03:06.282112 2026] [:error] [pid 53435:tid 53474] [client 172.173.121.85:63880] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYuSoDmp7_z8QkjSzMLPQAAAEI"]
[Sun May 03 01:03:06.684255 2026] [:error] [pid 52012:tid 52089] [client 172.173.121.85:62649] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYuSkzSWr-8cpS83mgOawAAA0w"]
[Sun May 03 01:03:07.078210 2026] [:error] [pid 51917:tid 51925] [client 172.173.121.85:62684] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afYuS67wZviJ7BgcCi9wgQAAAcY"]
[Sun May 03 01:03:07.506737 2026] [:error] [pid 11894:tid 11912] [client 172.173.121.85:63992] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYuSzHh6DQF1tkXIKz3IAAAAU8"]
[Sun May 03 01:03:07.885825 2026] [:error] [pid 51917:tid 51943] [client 172.173.121.85:62225] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYuS67wZviJ7BgcCi9wgwAAAdg"]
[Sun May 03 01:03:08.264354 2026] [:error] [pid 51950:tid 51992] [client 172.173.121.85:63935] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYuTIoBJzYZ3RKUhdiGCwAAAkw"]
[Sun May 03 01:03:08.687021 2026] [:error] [pid 11894:tid 11901] [client 172.173.121.85:63997] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "afYuTDHh6DQF1tkXIKz3IQAAAUQ"]
[Sun May 03 01:03:09.102187 2026] [:error] [pid 51917:tid 51942] [client 172.173.121.85:62679] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYuTa7wZviJ7BgcCi9whwAAAdc"]
[Sun May 03 01:03:09.500971 2026] [:error] [pid 52012:tid 52079] [client 172.173.121.85:63562] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYuTUzSWr-8cpS83mgObgAAA0I"]
[Sun May 03 01:03:09.905133 2026] [:error] [pid 11894:tid 11906] [client 172.173.121.85:63501] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYuTTHh6DQF1tkXIKz3IgAAAUk"]
[Sun May 03 01:03:10.281670 2026] [:error] [pid 53436:tid 53500] [client 172.173.121.85:63960] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev.php"] [unique_id "afYuTq9N0xp8fccVM0DrJwAAAIE"]
[Sun May 03 01:03:10.693073 2026] [:error] [pid 53435:tid 53476] [client 172.173.121.85:63596] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYuToDmp7_z8QkjSzMLPwAAAEQ"]
[Sun May 03 01:03:11.067792 2026] [:error] [pid 52012:tid 52098] [client 172.173.121.85:64828] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYuT0zSWr-8cpS83mgOcQAAA1U"]
[Sun May 03 01:03:11.449772 2026] [:error] [pid 53435:tid 53473] [client 172.173.121.85:64780] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYuT4Dmp7_z8QkjSzMLQgAAAEE"]
[Sun May 03 01:03:11.840246 2026] [:error] [pid 53435:tid 53475] [client 172.173.121.85:62226] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afYuT4Dmp7_z8QkjSzMLRAAAAEM"]
[Sun May 03 01:03:12.246984 2026] [:error] [pid 53434:tid 53453] [client 172.173.121.85:65258] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYuUO9BXmRQcbfsxlyzNQAAAAo"]
[Sun May 03 01:03:12.635659 2026] [:error] [pid 53434:tid 53455] [client 172.173.121.85:63583] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYuUO9BXmRQcbfsxlyzNgAAAAw"]
[Sun May 03 01:03:13.034040 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:63609] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYuUUzSWr-8cpS83mgOcwAAA1I"]
[Sun May 03 01:03:13.417851 2026] [:error] [pid 53436:tid 53521] [client 172.173.121.85:64885] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afYuUa9N0xp8fccVM0DrKQAAAJY"]
[Sun May 03 01:03:13.815954 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:63556] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYuUUzSWr-8cpS83mgOdQAAA0Q"]
[Sun May 03 01:03:14.189848 2026] [:error] [pid 53435:tid 53481] [client 172.173.121.85:63982] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYuUoDmp7_z8QkjSzMLSQAAAEk"]
[Sun May 03 01:03:14.561175 2026] [:error] [pid 22846:tid 22868] [client 172.173.121.85:63597] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYuUom1Ms03Mfhp3aYSUwAAARQ"]
[Sun May 03 01:03:14.961581 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:62635] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afYuUoDmp7_z8QkjSzMLSwAAAEo"]
[Sun May 03 01:03:15.340899 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:64835] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYuU0zSWr-8cpS83mgOegAAA0E"]
[Sun May 03 01:03:15.716395 2026] [:error] [pid 52012:tid 52102] [client 172.173.121.85:63610] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYuU0zSWr-8cpS83mgOewAAA1g"]
[Sun May 03 01:03:16.096926 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:63886] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYuVEzSWr-8cpS83mgOfgAAA0M"]
[Sun May 03 01:03:16.501070 2026] [:error] [pid 52012:tid 52084] [client 172.173.121.85:65153] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afYuVEzSWr-8cpS83mgOgAAAA0c"]
[Sun May 03 01:03:16.880754 2026] [:error] [pid 53435:tid 53474] [client 172.173.121.85:62620] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYuVIDmp7_z8QkjSzMLUAAAAEI"]
[Sun May 03 01:03:17.263178 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:63879] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYuVUzSWr-8cpS83mgOhAAAA1I"]
[Sun May 03 01:03:17.634023 2026] [:error] [pid 52012:tid 52085] [client 172.173.121.85:62670] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYuVUzSWr-8cpS83mgOhgAAA0g"]
[Sun May 03 01:03:18.014033 2026] [:error] [pid 52012:tid 52099] [client 172.173.121.85:65249] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afYuVkzSWr-8cpS83mgOiAAAA1Y"]
[Sun May 03 01:03:18.392508 2026] [:error] [pid 22846:tid 22853] [client 172.173.121.85:62683] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYuVom1Ms03Mfhp3aYSVQAAAQU"]
[Sun May 03 01:03:18.771483 2026] [:error] [pid 53435:tid 53482] [client 172.173.121.85:61548] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYuVoDmp7_z8QkjSzMLVQAAAEo"]
[Sun May 03 01:03:19.150243 2026] [:error] [pid 53435:tid 53486] [client 172.173.121.85:62232] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYuV4Dmp7_z8QkjSzMLVgAAAE4"]
[Sun May 03 01:03:19.528519 2026] [:error] [pid 53435:tid 53491] [client 172.173.121.85:62278] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afYuV4Dmp7_z8QkjSzMLWAAAAFM"]
[Sun May 03 01:03:19.905520 2026] [:error] [pid 53435:tid 53488] [client 172.173.121.85:62666] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYuV4Dmp7_z8QkjSzMLWgAAAFA"]
[Sun May 03 01:03:20.294137 2026] [:error] [pid 53434:tid 53461] [client 172.173.121.85:63603] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYuWO9BXmRQcbfsxlyzOgAAABI"]
[Sun May 03 01:03:20.675703 2026] [:error] [pid 52010:tid 52062] [client 172.173.121.85:62706] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYuWAiR6wohDtdeJMBfMQAAAtM"]
[Sun May 03 01:03:21.058766 2026] [:error] [pid 52012:tid 52099] [client 172.173.121.85:63551] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axx.php"] [unique_id "afYuWUzSWr-8cpS83mgOkgAAA1Y"]
[Sun May 03 01:03:21.445120 2026] [:error] [pid 52010:tid 52063] [client 172.173.121.85:63896] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYuWQiR6wohDtdeJMBfMwAAAtQ"]
[Sun May 03 01:03:21.822099 2026] [:error] [pid 52012:tid 52078] [client 172.173.121.85:63897] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYuWUzSWr-8cpS83mgOlAAAA0E"]
[Sun May 03 01:03:22.217134 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:63975] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYuWkzSWr-8cpS83mgOmQAAA0M"]
[Sun May 03 01:03:22.733116 2026] [:error] [pid 11894:tid 11913] [client 172.173.121.85:64826] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfashell.php"] [unique_id "afYuWjHh6DQF1tkXIKz3JwAAAVA"]
[Sun May 03 01:03:23.293531 2026] [:error] [pid 52010:tid 52047] [client 172.173.121.85:28490] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYuWwiR6wohDtdeJMBfNAAAAsQ"]
[Sun May 03 01:03:23.690084 2026] [:error] [pid 53434:tid 53458] [client 172.173.121.85:28487] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYuW-9BXmRQcbfsxlyzOwAAAA8"]
[Sun May 03 01:03:24.070758 2026] [:error] [pid 53434:tid 53449] [client 172.173.121.85:63565] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYuXO9BXmRQcbfsxlyzPQAAAAY"]
[Sun May 03 01:03:24.446042 2026] [:error] [pid 52010:tid 52044] [client 172.173.121.85:63604] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afYuXAiR6wohDtdeJMBfNgAAAsE"]
[Sun May 03 01:03:24.831769 2026] [:error] [pid 52012:tid 52097] [client 172.173.121.85:63558] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYuXEzSWr-8cpS83mgOnQAAA1Q"]
[Sun May 03 01:03:25.232165 2026] [:error] [pid 53434:tid 53453] [client 172.173.121.85:63943] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYuXe9BXmRQcbfsxlyzQgAAAAo"]
[Sun May 03 01:03:25.615102 2026] [:error] [pid 11894:tid 11907] [client 172.173.121.85:65190] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYuXTHh6DQF1tkXIKz3KQAAAUo"]
[Sun May 03 01:03:26.035603 2026] [:error] [pid 52124:tid 52142] [client 172.173.121.85:28527] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afYuXjjabaZ9NMm8eQubxgAAA40"]
[Sun May 03 01:03:26.411135 2026] [:error] [pid 52124:tid 52138] [client 172.173.121.85:64811] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYuXjjabaZ9NMm8eQubxwAAA4k"]
[Sun May 03 01:03:26.825747 2026] [:error] [pid 22846:tid 22871] [client 172.173.121.85:28476] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYuXom1Ms03Mfhp3aYSVwAAARc"]
[Sun May 03 01:03:27.204669 2026] [:error] [pid 22846:tid 22860] [client 172.173.121.85:63547] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYuX4m1Ms03Mfhp3aYSWAAAAQw"]
[Sun May 03 01:03:27.580831 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:28443] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afYuX0zSWr-8cpS83mgOngAAA1E"]
[Sun May 03 01:03:27.981046 2026] [:error] [pid 52012:tid 52075] [client 172.173.121.85:61047] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYuX0zSWr-8cpS83mgOnwAAA0A"]
[Sun May 03 01:03:28.373036 2026] [:error] [pid 52012:tid 52082] [client 172.173.121.85:61032] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYuYEzSWr-8cpS83mgOowAAA0U"]
[Sun May 03 01:03:28.762356 2026] [:error] [pid 51950:tid 51980] [client 172.173.121.85:64781] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYuYIoBJzYZ3RKUhdiGDAAAAkA"]
[Sun May 03 01:03:29.150080 2026] [:error] [pid 52012:tid 52080] [client 172.173.121.85:63570] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/g.php"] [unique_id "afYuYUzSWr-8cpS83mgOpgAAA0M"]
[Sun May 03 01:03:29.522108 2026] [:error] [pid 52010:tid 52064] [client 172.173.121.85:28446] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuYQiR6wohDtdeJMBfOQAAAtU"]
[Sun May 03 01:03:29.933430 2026] [:error] [pid 51917:tid 51925] [client 172.173.121.85:63578] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuYa7wZviJ7BgcCi9wigAAAcY"]
[Sun May 03 01:03:30.368292 2026] [:error] [pid 52010:tid 52058] [client 172.173.121.85:62241] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuYgiR6wohDtdeJMBfOwAAAs8"]
[Sun May 03 01:03:30.751089 2026] [:error] [pid 52012:tid 52095] [client 172.173.121.85:63509] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afYuYkzSWr-8cpS83mgOpwAAA1I"]
[Sun May 03 01:03:31.146160 2026] [:error] [pid 11894:tid 11909] [client 172.173.121.85:28468] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYuYzHh6DQF1tkXIKz3LQAAAUw"]
[Sun May 03 01:03:31.526503 2026] [:error] [pid 52012:tid 52094] [client 172.173.121.85:62633] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYuY0zSWr-8cpS83mgOqAAAA1E"]
[Sun May 03 01:03:31.926620 2026] [:error] [pid 53434:tid 53461] [client 172.173.121.85:62272] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYuY-9BXmRQcbfsxlyzTAAAABI"]
[Sun May 03 01:03:32.325441 2026] [:error] [pid 52124:tid 52131] [client 172.173.121.85:28510] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afYuZDjabaZ9NMm8eQub0gAAA4I"]
[Sun May 03 01:03:32.709117 2026] [:error] [pid 52010:tid 52059] [client 172.173.121.85:64873] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ew.php"] [unique_id "afYuZAiR6wohDtdeJMBfPgAAAtA"]
[Sun May 03 01:03:33.098278 2026] [:error] [pid 52012:tid 52097] [client 172.173.121.85:28466] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Sun May 03 01:03:33.289024 2026] [:error] [pid 52012:tid 52093] [client 172.173.121.85:28466] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Sun May 03 01:03:33.481016 2026] [:error] [pid 52012:tid 52088] [client 172.173.121.85:28466] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Sun May 03 01:03:33.672414 2026] [:error] [pid 52012:tid 52086] [client 172.173.121.85:28466] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sun May 03 01:03:33.863312 2026] [:error] [pid 52012:tid 52081] [client 172.173.121.85:28466] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun May 03 01:03:34.245262 2026] [:error] [pid 52012:tid 52092] [client 172.173.121.85:28466] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun May 03 01:26:19.468182 2026] [:error] [pid 11894:tid 11913] [client 185.198.240.139:22181] [client 185.198.240.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afYzuzHh6DQF1tkXIKz5cQAAAVA"]
[Sun May 03 04:01:40.918426 2026] [:error] [pid 40638:tid 40698] [client 34.129.147.165:50092] [client 34.129.147.165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "afZYJPh3VcFjJ7H1mBaMOwAAAFg"]
[Sun May 03 06:02:21.890707 2026] [:error] [pid 37130:tid 37229] [client 70.77.124.202:59589] [client 70.77.124.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.77.124.202, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afZ0baIu7bmXKXicRk8aaAAAAJA"]
[Sun May 03 06:02:21.898711 2026] [:error] [pid 37130:tid 37229] [client 70.77.124.202:59589] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 03 10:36:08.544690 2026] [:error] [pid 37126:tid 37175] [client 172.173.121.85:51162] File does not exist: /usr/local/apache/htdocs/suspended-page/about8.php
[Sun May 03 10:36:08.733843 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:51162] File does not exist: /usr/local/apache/htdocs/suspended-page/bdroot.php
[Sun May 03 10:36:08.926982 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:51162] File does not exist: /usr/local/apache/htdocs/suspended-page/olik.php
[Sun May 03 10:36:09.119024 2026] [:error] [pid 37126:tid 37174] [client 172.173.121.85:51162] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Sun May 03 10:36:09.333453 2026] [:error] [pid 37126:tid 37167] [client 172.173.121.85:51162] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Sun May 03 10:36:09.721374 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:51162] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afa0mfR_A42N-LtDyrvvMQAAAA0"]
[Sun May 03 10:36:10.101526 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:51101] File does not exist: /usr/local/apache/htdocs/suspended-page/atika.php
[Sun May 03 10:36:10.293681 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:51101] File does not exist: /usr/local/apache/htdocs/suspended-page/xxl.php
[Sun May 03 10:36:10.484868 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:51101] File does not exist: /usr/local/apache/htdocs/suspended-page/uploat.php
[Sun May 03 10:36:10.674775 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:51101] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Sun May 03 10:36:10.860740 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:51101] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afa0mjhvYFGNwhnPamqhmAAAAQY"]
[Sun May 03 10:36:11.260511 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:51165] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afa0m0HBbBLrXh6PBuu7JAAAAVY"]
[Sun May 03 10:36:11.668664 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:51107] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afa0mzSujTvwdzEkjSf7fgAAAYY"]
[Sun May 03 10:36:12.090814 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:51073] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afa0nEHBbBLrXh6PBuu7JQAAAVM"]
[Sun May 03 10:36:12.629935 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:51187] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afa0nDhvYFGNwhnPamqhngAAARI"]
[Sun May 03 10:36:13.084765 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:51182] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afa0nUHBbBLrXh6PBuu7JwAAAUw"]
[Sun May 03 10:36:13.497667 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:51097] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afa0nTSujTvwdzEkjSf7gAAAAYc"]
[Sun May 03 10:36:14.000421 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:51087] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afa0nUHBbBLrXh6PBuu7KQAAAVg"]
[Sun May 03 10:36:14.377781 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:51176] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afa0nqIu7bmXKXicRk9J8AAAAIw"]
[Sun May 03 10:36:14.773896 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:51081] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afa0nkHBbBLrXh6PBuu7KgAAAUQ"]
[Sun May 03 10:36:15.362788 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:51094] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afa0n0HBbBLrXh6PBuu7KwAAAU0"]
[Sun May 03 10:36:15.738193 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:51116] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afa0n_8khJXb5O5aWVX4wQAAAEI"]
[Sun May 03 10:36:16.200293 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:51163] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afa0oP8khJXb5O5aWVX4wwAAAFU"]
[Sun May 03 10:36:16.591067 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:51098] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afa0oEHBbBLrXh6PBuu7LwAAAUU"]
[Sun May 03 10:36:17.058136 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:51149] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afa0of8khJXb5O5aWVX4xgAAAEo"]
[Sun May 03 10:36:17.440218 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:36875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afa0oUHBbBLrXh6PBuu7MQAAAUA"]
[Sun May 03 10:36:17.862801 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:51199] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afa0oUHBbBLrXh6PBuu7MgAAAUM"]
[Sun May 03 10:36:18.358321 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:51166] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afa0okHBbBLrXh6PBuu7NQAAAVQ"]
[Sun May 03 10:36:18.802400 2026] [:error] [pid 40386:tid 40399] [client 172.173.121.85:51111] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afa0olHJDYRXUf3IbRTxJQAAAMs"]
[Sun May 03 10:36:19.186173 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:36987] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afa0o_8khJXb5O5aWVX4ygAAAEc"]
[Sun May 03 10:36:19.578634 2026] [:error] [pid 37127:tid 37188] [client 172.173.121.85:51185] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afa0o_8khJXb5O5aWVX4zAAAAEQ"]
[Sun May 03 10:36:20.158135 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:51168] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afa0pEHBbBLrXh6PBuu7OQAAAUw"]
[Sun May 03 10:36:20.711227 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:51171] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afa0pP8khJXb5O5aWVX4zwAAAEI"]
[Sun May 03 10:36:21.154511 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:51099] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afa0pUHBbBLrXh6PBuu7OgAAAUQ"]
[Sun May 03 10:36:21.601150 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:51190] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afa0pUHBbBLrXh6PBuu7PAAAAUA"]
[Sun May 03 10:36:22.081555 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:51104] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afa0pjhvYFGNwhnPamqhqAAAARY"]
[Sun May 03 10:36:22.571639 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:51083] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afa0pkHBbBLrXh6PBuu7QAAAAU4"]
[Sun May 03 10:36:22.974527 2026] [:error] [pid 40386:tid 40391] [client 172.173.121.85:51180] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afa0plHJDYRXUf3IbRTxJgAAAMM"]
[Sun May 03 10:36:23.447433 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:51181] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afa0pzSujTvwdzEkjSf7hQAAAY4"]
[Sun May 03 10:36:23.903745 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:51195] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afa0pzSujTvwdzEkjSf7iAAAAYs"]
[Sun May 03 10:36:24.316673 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:51178] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afa0qFHJDYRXUf3IbRTxKAAAAMU"]
[Sun May 03 10:36:24.707853 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:51198] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afa0qFHJDYRXUf3IbRTxKwAAAMQ"]
[Sun May 03 10:36:25.255463 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:51137] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afa0qVHJDYRXUf3IbRTxLgAAAMA"]
[Sun May 03 10:36:25.648687 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:51095] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afa0qfR_A42N-LtDyrvvNQAAAAM"]
[Sun May 03 10:36:26.053064 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:51188] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afa0qjSujTvwdzEkjSf7igAAAYU"]
[Sun May 03 10:36:26.446999 2026] [:error] [pid 37130:tid 37230] [client 172.173.121.85:51143] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afa0qqIu7bmXKXicRk9J8wAAAJE"]
[Sun May 03 10:36:26.903518 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:51141] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afa0qjhvYFGNwhnPamqhrAAAAQw"]
[Sun May 03 10:36:27.317333 2026] [:error] [pid 37130:tid 37232] [client 172.173.121.85:36948] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afa0q6Iu7bmXKXicRk9J9QAAAJM"]
[Sun May 03 10:36:27.844931 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:51148] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afa0q0HBbBLrXh6PBuu7QwAAAVc"]
[Sun May 03 10:36:28.262272 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:51120] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afa0rEHBbBLrXh6PBuu7RQAAAVE"]
[Sun May 03 10:36:28.640163 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:36935] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afa0rKIu7bmXKXicRk9J9gAAAIY"]
[Sun May 03 10:36:29.193708 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:51105] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afa0rThvYFGNwhnPamqhsQAAAQ4"]
[Sun May 03 10:36:29.650857 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:51100] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afa0rThvYFGNwhnPamqhswAAARQ"]
[Sun May 03 10:36:30.040770 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:51091] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afa0rqIu7bmXKXicRk9J-QAAAI0"]
[Sun May 03 10:36:30.460190 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:36932] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afa0rkHBbBLrXh6PBuu7RwAAAVA"]
[Sun May 03 10:36:30.837819 2026] [:error] [pid 40456:tid 40476] [client 172.173.121.85:51089] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afa0rjSujTvwdzEkjSf7kAAAAZI"]
[Sun May 03 10:36:31.221245 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:51090] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afa0rzhvYFGNwhnPamqhtwAAARY"]
[Sun May 03 10:36:31.685277 2026] [:error] [pid 37126:tid 37169] [client 172.173.121.85:51129] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afa0r_R_A42N-LtDyrvvOQAAABA"]
[Sun May 03 10:36:32.087148 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:51092] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afa0sDhvYFGNwhnPamqhuwAAAQU"]
[Sun May 03 10:36:32.528806 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:51114] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afa0sDSujTvwdzEkjSf7mAAAAYY"]
[Sun May 03 10:36:32.954252 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:51192] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afa0sEHBbBLrXh6PBuu7SgAAAU0"]
[Sun May 03 10:36:33.341671 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:36936] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afa0sUHBbBLrXh6PBuu7TQAAAUE"]
[Sun May 03 10:36:33.788085 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:36882] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afa0sUHBbBLrXh6PBuu7TwAAAU4"]
[Sun May 03 10:36:34.350841 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:51139] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afa0skHBbBLrXh6PBuu7UgAAAVM"]
[Sun May 03 10:36:34.816067 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:36919] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afa0skHBbBLrXh6PBuu7VQAAAVA"]
[Sun May 03 10:36:35.285305 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:51177] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afa0s_8khJXb5O5aWVX46QAAAEc"]
[Sun May 03 10:36:35.809385 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:51160] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afa0szhvYFGNwhnPamqhywAAAQY"]
[Sun May 03 10:36:36.209136 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:51170] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afa0tDhvYFGNwhnPamqhzgAAARI"]
[Sun May 03 10:36:36.666036 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:51175] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afa0tEHBbBLrXh6PBuu7WwAAAU4"]
[Sun May 03 10:36:37.120901 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:51184] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afa0tThvYFGNwhnPamqh0QAAARU"]
[Sun May 03 10:36:37.533270 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:51167] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afa0tThvYFGNwhnPamqh1QAAAQA"]
[Sun May 03 10:36:37.933881 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:51106] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afa0tUHBbBLrXh6PBuu7XwAAAVM"]
[Sun May 03 10:36:38.360577 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:51144] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afa0tkHBbBLrXh6PBuu7YgAAAUY"]
[Sun May 03 10:36:38.735714 2026] [:error] [pid 40386:tid 40397] [client 172.173.121.85:51108] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afa0tlHJDYRXUf3IbRTxMwAAAMk"]
[Sun May 03 10:36:39.254644 2026] [:error] [pid 40386:tid 40409] [client 172.173.121.85:36876] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "afa0t1HJDYRXUf3IbRTxNQAAANU"]
[Sun May 03 10:36:39.680613 2026] [:error] [pid 40386:tid 40403] [client 172.173.121.85:51085] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "afa0t1HJDYRXUf3IbRTxOAAAAM8"]
[Sun May 03 10:36:40.112652 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:51124] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "afa0uDSujTvwdzEkjSf7qAAAAYU"]
[Sun May 03 10:36:40.623114 2026] [:error] [pid 37127:tid 37202] [client 172.173.121.85:36970] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "afa0uP8khJXb5O5aWVX47QAAAFE"]
[Sun May 03 10:36:40.997200 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:51172] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afa0uDhvYFGNwhnPamqh2wAAAQM"]
[Sun May 03 10:36:41.426398 2026] [:error] [pid 37127:tid 37198] [client 172.173.121.85:51133] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afa0uf8khJXb5O5aWVX47gAAAE0"]
[Sun May 03 10:36:41.855372 2026] [:error] [pid 40456:tid 40479] [client 172.173.121.85:36939] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afa0uTSujTvwdzEkjSf7rAAAAZU"]
[Sun May 03 10:36:42.279842 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:51088] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afa0uqIu7bmXKXicRk9KEAAAAJA"]
[Sun May 03 10:36:42.680098 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:51136] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afa0uv8khJXb5O5aWVX48gAAAEM"]
[Sun May 03 10:36:43.284827 2026] [:error] [pid 40456:tid 40468] [client 172.173.121.85:51197] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afa0uzSujTvwdzEkjSf7rwAAAYo"]
[Sun May 03 10:36:43.723584 2026] [:error] [pid 37130:tid 37228] [client 172.173.121.85:51196] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afa0u6Iu7bmXKXicRk9KFAAAAI8"]
[Sun May 03 10:36:44.137720 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:36952] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afa0vDSujTvwdzEkjSf7sgAAAZg"]
[Sun May 03 10:36:44.541489 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:51146] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afa0vEHBbBLrXh6PBuu7ZgAAAU0"]
[Sun May 03 10:36:44.924725 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:36943] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afa0vEHBbBLrXh6PBuu7ZwAAAVc"]
[Sun May 03 10:36:45.395120 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:51089] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afa0vfR_A42N-LtDyrvvWwAAAAQ"]
[Sun May 03 10:36:45.808345 2026] [:error] [pid 37126:tid 37164] [client 172.173.121.85:51126] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afa0vfR_A42N-LtDyrvvXgAAAAs"]
[Sun May 03 10:36:46.334722 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:36881] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afa0vv8khJXb5O5aWVX49gAAAEk"]
[Sun May 03 10:36:47.075016 2026] [:error] [pid 40386:tid 40411] [client 172.173.121.85:36916] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afa0v1HJDYRXUf3IbRTxQAAAANc"]
[Sun May 03 10:36:47.541367 2026] [:error] [pid 37127:tid 37185] [client 172.173.121.85:36938] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afa0v_8khJXb5O5aWVX4-AAAAEE"]
[Sun May 03 10:36:48.045416 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:36972] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afa0wEHBbBLrXh6PBuu7aQAAAUU"]
[Sun May 03 10:36:48.519408 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:51074] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afa0wDSujTvwdzEkjSf7twAAAYw"]
[Sun May 03 10:36:48.957765 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:51080] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afa0wKIu7bmXKXicRk9KGAAAAIY"]
[Sun May 03 10:36:49.418179 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:36956] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afa0waIu7bmXKXicRk9KGQAAAI0"]
[Sun May 03 10:36:49.988600 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:51119] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afa0wTSujTvwdzEkjSf7uwAAAZg"]
[Sun May 03 10:36:50.376124 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:51135] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afa0wjSujTvwdzEkjSf7vgAAAYk"]
[Sun May 03 10:36:50.795512 2026] [:error] [pid 40456:tid 40461] [client 172.173.121.85:36963] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afa0wjSujTvwdzEkjSf7vwAAAYM"]
[Sun May 03 10:36:51.201215 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:51110] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afa0w6Iu7bmXKXicRk9KHQAAAIA"]
[Sun May 03 10:36:51.618167 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:51134] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afa0wzSujTvwdzEkjSf7wAAAAZY"]
[Sun May 03 10:36:52.102062 2026] [:error] [pid 40456:tid 40465] [client 172.173.121.85:51103] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afa0xDSujTvwdzEkjSf7wgAAAYc"]
[Sun May 03 10:36:52.556375 2026] [:error] [pid 40456:tid 40473] [client 172.173.121.85:51076] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afa0xDSujTvwdzEkjSf7xQAAAY8"]
[Sun May 03 10:36:53.072312 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:36944] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afa0xUHBbBLrXh6PBuu7bAAAAUI"]
[Sun May 03 10:36:53.490483 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:36906] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afa0xUHBbBLrXh6PBuu7bgAAAUg"]
[Sun May 03 10:36:53.878115 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:51174] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afa0xUHBbBLrXh6PBuu7cQAAAVM"]
[Sun May 03 10:36:54.539669 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:36953] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afa0xkHBbBLrXh6PBuu7dAAAAVY"]
[Sun May 03 10:36:55.053378 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:51140] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afa0xzSujTvwdzEkjSf7ygAAAZg"]
[Sun May 03 10:37:20.150745 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/no20.php
[Sun May 03 10:37:20.370596 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/yasnu.php
[Sun May 03 10:37:20.565359 2026] [:error] [pid 37130:tid 37224] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sun May 03 10:37:20.756911 2026] [:error] [pid 37130:tid 37228] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Sun May 03 10:37:20.945360 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Sun May 03 10:37:21.536022 2026] [:error] [pid 37130:tid 37237] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Sun May 03 10:37:21.727422 2026] [:error] [pid 37130:tid 37230] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Sun May 03 10:37:21.923266 2026] [:error] [pid 37130:tid 37231] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Sun May 03 10:37:22.113253 2026] [:error] [pid 37130:tid 37227] [client 172.173.121.85:36908] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sun May 03 10:37:22.299869 2026] [:error] [pid 37130:tid 37232] [client 172.173.121.85:36908] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afa04qIu7bmXKXicRk9KOgAAAJM"]
[Sun May 03 10:37:22.741842 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:36909] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afa04kHBbBLrXh6PBuu73AAAAVM"]
[Sun May 03 10:37:23.253419 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:36942] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afa04zSujTvwdzEkjSf7-gAAAY0"]
[Sun May 03 10:37:23.745520 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:51122] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afa040HBbBLrXh6PBuu74QAAAUo"]
[Sun May 03 10:37:24.154558 2026] [:error] [pid 37126:tid 37165] [client 172.173.121.85:51147] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afa05PR_A42N-LtDyrvvZwAAAAw"]
[Sun May 03 10:37:24.632402 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:51130] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afa05EHBbBLrXh6PBuu75gAAAUE"]
[Sun May 03 10:37:25.049605 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:36883] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afa05fR_A42N-LtDyrvvawAAABM"]
[Sun May 03 10:37:25.482100 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:51113] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afa05ThvYFGNwhnPamqiHgAAAQo"]
[Sun May 03 10:37:25.884514 2026] [:error] [pid 37130:tid 37233] [client 172.173.121.85:36917] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afa05aIu7bmXKXicRk9KPwAAAJQ"]
[Sun May 03 10:37:26.527110 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:51078] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afa05jhvYFGNwhnPamqiIQAAAQU"]
[Sun May 03 10:37:27.072732 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:36966] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afa05zhvYFGNwhnPamqiJAAAAQM"]
[Sun May 03 10:37:27.517484 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:51173] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afa05zhvYFGNwhnPamqiKgAAARY"]
[Sun May 03 10:37:28.032913 2026] [:error] [pid 37130:tid 37221] [client 172.173.121.85:51131] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afa06KIu7bmXKXicRk9KRAAAAIg"]
[Sun May 03 10:37:28.420064 2026] [:error] [pid 37130:tid 37231] [client 172.173.121.85:51132] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afa06KIu7bmXKXicRk9KRgAAAJI"]
[Sun May 03 10:37:28.814810 2026] [:error] [pid 37130:tid 37217] [client 172.173.121.85:51079] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afa06KIu7bmXKXicRk9KSAAAAIQ"]
[Sun May 03 10:37:29.492013 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:51075] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afa06VHJDYRXUf3IbRTxVgAAAMQ"]
[Sun May 03 10:37:29.879903 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:36922] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afa06UHBbBLrXh6PBuu7_QAAAVY"]
[Sun May 03 10:37:31.001228 2026] [:error] [pid 37130:tid 37216] [client 172.173.121.85:36867] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afa066Iu7bmXKXicRk9KTQAAAIM"]
[Sun May 03 10:37:31.395881 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:51191] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afa066Iu7bmXKXicRk9KTwAAAIc"]
[Sun May 03 10:37:31.884167 2026] [:error] [pid 37127:tid 37206] [client 172.173.121.85:36874] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afa06_8khJXb5O5aWVX5CgAAAFQ"]
[Sun May 03 10:37:32.350897 2026] [:error] [pid 40386:tid 40403] [client 172.173.121.85:36873] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afa07FHJDYRXUf3IbRTxWwAAAM8"]
[Sun May 03 10:37:32.724659 2026] [:error] [pid 40386:tid 40402] [client 172.173.121.85:51157] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afa07FHJDYRXUf3IbRTxXAAAAM4"]
[Sun May 03 10:37:33.696317 2026] [:error] [pid 37127:tid 37198] [client 172.173.121.85:36937] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afa07f8khJXb5O5aWVX5DAAAAE0"]
[Sun May 03 10:37:34.748744 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:51152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afa07v8khJXb5O5aWVX5EAAAAEM"]
[Sun May 03 10:37:35.835766 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:36894] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa07zSujTvwdzEkjSf8BQAAAYQ"]
[Sun May 03 10:37:36.291116 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:51159] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa08DSujTvwdzEkjSf8BwAAAYg"]
[Sun May 03 10:37:36.724278 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:36934] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa08DSujTvwdzEkjSf8CQAAAYk"]
[Sun May 03 10:37:37.234805 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:51086] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa08f8khJXb5O5aWVX5EgAAAE8"]
[Sun May 03 10:37:37.619653 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:36934] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afa08ThvYFGNwhnPamqiNwAAAQY"]
[Sun May 03 10:37:38.050316 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:36946] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afa08v8khJXb5O5aWVX5FAAAAEc"]
[Sun May 03 10:37:38.438527 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:36983] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afa08jhvYFGNwhnPamqiOQAAAQM"]
[Sun May 03 10:37:38.860891 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:36914] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afa08jhvYFGNwhnPamqiOgAAARE"]
[Sun May 03 10:37:39.256512 2026] [:error] [pid 37126:tid 37173] [client 172.173.121.85:36985] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afa08_R_A42N-LtDyrvvcwAAABQ"]
[Sun May 03 10:37:39.769855 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:28881] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afa08zhvYFGNwhnPamqiPAAAARU"]
[Sun May 03 10:37:41.308888 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:51125] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afa09TSujTvwdzEkjSf8DgAAAY0"]
[Sun May 03 10:37:42.420952 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:51082] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afa09vR_A42N-LtDyrvveQAAABc"]
[Sun May 03 10:37:42.870823 2026] [:error] [pid 37126:tid 37160] [client 172.173.121.85:51118] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afa09vR_A42N-LtDyrvvegAAAAc"]
[Sun May 03 10:37:43.310984 2026] [:error] [pid 37246:tid 37265] [client 172.173.121.85:36981] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afa09zhvYFGNwhnPamqiQwAAAQ8"]
[Sun May 03 10:37:43.858513 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:36989] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afa09zhvYFGNwhnPamqiRQAAARI"]
[Sun May 03 10:37:44.466287 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:51153] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afa0-DhvYFGNwhnPamqiRwAAAQY"]
[Sun May 03 10:37:44.871540 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:28892] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afa0-DhvYFGNwhnPamqiTAAAAQc"]
[Sun May 03 10:37:45.293951 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:51128] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afa0-ThvYFGNwhnPamqiTwAAARI"]
[Sun May 03 10:37:45.700062 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:36930] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afa0-TSujTvwdzEkjSf8EwAAAZE"]
[Sun May 03 10:37:46.107366 2026] [:error] [pid 37127:tid 37199] [client 172.173.121.85:51072] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afa0-v8khJXb5O5aWVX5GQAAAE4"]
[Sun May 03 10:37:46.507762 2026] [:error] [pid 40386:tid 40389] [client 172.173.121.85:51112] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afa0-lHJDYRXUf3IbRTxagAAAME"]
[Sun May 03 10:37:46.960158 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:28874] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afa0-lHJDYRXUf3IbRTxbAAAAMQ"]
[Sun May 03 10:37:47.348158 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:36902] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afa0-_8khJXb5O5aWVX5HAAAAEM"]
[Sun May 03 10:37:47.774115 2026] [:error] [pid 40386:tid 40395] [client 172.173.121.85:36931] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afa0-1HJDYRXUf3IbRTxbgAAAMc"]
[Sun May 03 10:37:48.160609 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:36911] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa0_FHJDYRXUf3IbRTxbwAAAMU"]
[Sun May 03 10:37:48.610865 2026] [:error] [pid 37127:tid 37208] [client 172.173.121.85:36967] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa0_P8khJXb5O5aWVX5HwAAAFY"]
[Sun May 03 10:37:48.994169 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:51158] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa0_P8khJXb5O5aWVX5IAAAAEk"]
[Sun May 03 10:37:49.386822 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:28871] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afa0_f8khJXb5O5aWVX5JgAAAFI"]
[Sun May 03 10:37:49.912795 2026] [:error] [pid 37127:tid 37209] [client 172.173.121.85:36958] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afa0_f8khJXb5O5aWVX5KAAAAFc"]
[Sun May 03 10:37:50.331914 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:51115] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afa0_v8khJXb5O5aWVX5KwAAAFU"]
[Sun May 03 10:37:50.731446 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:36990] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afa0_v8khJXb5O5aWVX5LgAAAEI"]
[Sun May 03 10:37:51.129563 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:51189] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afa0_1HJDYRXUf3IbRTxcQAAAMA"]
[Sun May 03 10:37:51.507030 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:51155] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afa0_0HBbBLrXh6PBuu8EwAAAUA"]
[Sun May 03 10:37:51.890500 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:51117] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afa0_0HBbBLrXh6PBuu8FQAAAUM"]
[Sun May 03 10:37:52.356411 2026] [:error] [pid 37127:tid 37196] [client 172.173.121.85:36968] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afa1AP8khJXb5O5aWVX5MwAAAEw"]
[Sun May 03 10:37:52.771256 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:36988] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afa1ADhvYFGNwhnPamqiVAAAARQ"]
[Sun May 03 10:37:53.207636 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:36878] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afa1ATSujTvwdzEkjSf8FwAAAYY"]
[Sun May 03 10:37:53.669006 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:51093] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afa1ATSujTvwdzEkjSf8GQAAAYk"]
[Sun May 03 10:37:54.165306 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:51154] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afa1AkHBbBLrXh6PBuu8GgAAAVY"]
[Sun May 03 10:37:55.444792 2026] [:error] [pid 37127:tid 37210] [client 172.173.121.85:36895] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afa1A_8khJXb5O5aWVX5NAAAAFg"]
[Sun May 03 10:37:55.881758 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:36950] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afa1AzSujTvwdzEkjSf8HgAAAZQ"]
[Sun May 03 10:37:56.520167 2026] [:error] [pid 40386:tid 40398] [client 172.173.121.85:36975] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afa1BFHJDYRXUf3IbRTxcgAAAMo"]
[Sun May 03 10:37:56.960339 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:36884] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afa1BEHBbBLrXh6PBuu8HgAAAUo"]
[Sun May 03 10:37:57.409880 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:36974] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afa1BUHBbBLrXh6PBuu8HwAAAUI"]
[Sun May 03 10:37:57.790094 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:51193] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afa1BUHBbBLrXh6PBuu8IQAAAVU"]
[Sun May 03 10:37:58.245607 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:36951] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afa1BjhvYFGNwhnPamqiVgAAAQc"]
[Sun May 03 10:37:58.734707 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:36933] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afa1BjSujTvwdzEkjSf8IAAAAY0"]
[Sun May 03 10:37:59.125535 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:36891] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afa1BzhvYFGNwhnPamqiWAAAARI"]
[Sun May 03 10:37:59.504218 2026] [:error] [pid 37246:tid 37253] [client 172.173.121.85:36899] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afa1BzhvYFGNwhnPamqiWwAAAQU"]
[Sun May 03 10:37:59.917026 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:36869] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afa1BzhvYFGNwhnPamqiXAAAARA"]
[Sun May 03 10:38:00.335056 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:51186] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afa1CDhvYFGNwhnPamqiXgAAAQM"]
[Sun May 03 10:38:00.845999 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:36896] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afa1CEHBbBLrXh6PBuu8JwAAAVU"]
[Sun May 03 10:38:01.280675 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:51138] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afa1CThvYFGNwhnPamqiYAAAAQ0"]
[Sun May 03 10:38:01.663328 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:36945] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afa1CTSujTvwdzEkjSf8IwAAAYA"]
[Sun May 03 10:38:02.081446 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:51121] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afa1CjSujTvwdzEkjSf8JAAAAYk"]
[Sun May 03 10:38:02.470521 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:36941] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afa1CjSujTvwdzEkjSf8JgAAAYg"]
[Sun May 03 10:38:02.900155 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:28916] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeaq.php"] [unique_id "afa1CjhvYFGNwhnPamqiYQAAARg"]
[Sun May 03 10:38:03.353134 2026] [:error] [pid 37126:tid 37177] [client 172.173.121.85:36961] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeaq.php"] [unique_id "afa1C_R_A42N-LtDyrvviwAAABg"]
[Sun May 03 10:38:03.865361 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:36978] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeaq.php"] [unique_id "afa1CzSujTvwdzEkjSf8LAAAAYs"]
[Sun May 03 10:38:04.272937 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:51145] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xeaq.php"] [unique_id "afa1DDhvYFGNwhnPamqiYgAAARU"]
[Sun May 03 10:38:04.691427 2026] [:error] [pid 37126:tid 37175] [client 172.173.121.85:36924] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up2.php"] [unique_id "afa1DPR_A42N-LtDyrvvkAAAABY"]
[Sun May 03 10:38:05.141586 2026] [:error] [pid 37130:tid 37231] [client 172.173.121.85:28917] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up2.php"] [unique_id "afa1DaIu7bmXKXicRk9KWAAAAJI"]
[Sun May 03 10:38:05.619274 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:51156] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up2.php"] [unique_id "afa1DUHBbBLrXh6PBuu8NAAAAUw"]
[Sun May 03 10:38:06.122024 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:51096] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up2.php"] [unique_id "afa1DkHBbBLrXh6PBuu8NwAAAVY"]
[Sun May 03 10:38:06.598343 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:36887] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afa1DkHBbBLrXh6PBuu8OwAAAUg"]
[Sun May 03 10:38:06.971493 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:36964] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afa1DkHBbBLrXh6PBuu8PAAAAVg"]
[Sun May 03 10:38:07.354620 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:36962] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afa1D0HBbBLrXh6PBuu8PwAAAUE"]
[Sun May 03 10:38:07.737713 2026] [:error] [pid 37126:tid 37164] [client 172.173.121.85:36928] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afa1D_R_A42N-LtDyrvvnAAAAAs"]
[Sun May 03 10:38:08.145024 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:36915] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afa1EKIu7bmXKXicRk9KWgAAAIY"]
[Sun May 03 10:38:08.543119 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:28833] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afa1EDhvYFGNwhnPamqiZgAAARI"]
[Sun May 03 10:38:09.403011 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:36929] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afa1EUHBbBLrXh6PBuu8RQAAAUk"]
[Sun May 03 10:38:09.794543 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:51109] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afa1EUHBbBLrXh6PBuu8RgAAAVY"]
[Sun May 03 10:38:10.214415 2026] [:error] [pid 37246:tid 37266] [client 172.173.121.85:36959] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afa1EjhvYFGNwhnPamqiaQAAARA"]
[Sun May 03 10:38:10.590137 2026] [:error] [pid 37126:tid 37172] [client 172.173.121.85:36865] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afa1EvR_A42N-LtDyrvvnwAAABM"]
[Sun May 03 10:38:10.992188 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:36918] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afa1EjhvYFGNwhnPamqiagAAAQY"]
[Sun May 03 10:38:11.450940 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:51169] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afa1EzhvYFGNwhnPamqibAAAARU"]
[Sun May 03 10:38:11.831230 2026] [:error] [pid 37246:tid 37261] [client 172.173.121.85:36984] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afa1EzhvYFGNwhnPamqibgAAAQs"]
[Sun May 03 10:38:12.297390 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:51084] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afa1FP8khJXb5O5aWVX5OgAAAEk"]
[Sun May 03 10:38:12.732760 2026] [:error] [pid 37130:tid 37226] [client 172.173.121.85:36949] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afa1FKIu7bmXKXicRk9KYAAAAI0"]
[Sun May 03 10:38:13.216319 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:36957] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afa1FTSujTvwdzEkjSf8TAAAAYI"]
[Sun May 03 10:38:13.636202 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:28804] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afa1Ff8khJXb5O5aWVX5PAAAAFM"]
[Sun May 03 10:38:14.102747 2026] [:error] [pid 37130:tid 37216] [client 172.173.121.85:28836] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afa1FqIu7bmXKXicRk9KYQAAAIM"]
[Sun May 03 10:38:14.570770 2026] [:error] [pid 37127:tid 37190] [client 172.173.121.85:36912] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afa1Fv8khJXb5O5aWVX5PwAAAEY"]
[Sun May 03 10:38:14.993920 2026] [:error] [pid 37130:tid 37225] [client 172.173.121.85:36969] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afa1FqIu7bmXKXicRk9KZAAAAIw"]
[Sun May 03 10:38:15.449184 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:51123] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afa1F_8khJXb5O5aWVX5QAAAAFI"]
[Sun May 03 10:38:16.303813 2026] [:error] [pid 37246:tid 37252] [client 172.173.121.85:51179] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afa1GDhvYFGNwhnPamqicwAAAQQ"]
[Sun May 03 10:38:16.856199 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:36897] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afa1GDhvYFGNwhnPamqidQAAAQo"]
[Sun May 03 10:38:17.264323 2026] [:error] [pid 37127:tid 37185] [client 172.173.121.85:36986] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afa1Gf8khJXb5O5aWVX5QQAAAEE"]
[Sun May 03 10:38:17.674563 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:36947] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afa1GTSujTvwdzEkjSf8UwAAAYs"]
[Sun May 03 10:38:18.118481 2026] [:error] [pid 37246:tid 37269] [client 172.173.121.85:36900] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afa1GjhvYFGNwhnPamqieAAAARM"]
[Sun May 03 10:38:19.612959 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:36991] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afa1GzhvYFGNwhnPamqifAAAAQE"]
[Sun May 03 10:38:20.144910 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:28806] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afa1HEHBbBLrXh6PBuu8TAAAAUg"]
[Sun May 03 10:38:20.542037 2026] [:error] [pid 37246:tid 37268] [client 172.173.121.85:36920] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afa1HDhvYFGNwhnPamqifwAAARI"]
[Sun May 03 10:38:20.968212 2026] [:error] [pid 37246:tid 37273] [client 172.173.121.85:36965] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afa1HDhvYFGNwhnPamqigAAAARc"]
[Sun May 03 10:38:21.498178 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:28889] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afa1HThvYFGNwhnPamqigwAAAQY"]
[Sun May 03 10:38:22.040636 2026] [:error] [pid 37126:tid 37168] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun May 03 10:38:22.230047 2026] [:error] [pid 37126:tid 37151] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun May 03 10:38:22.490810 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun May 03 10:38:22.723128 2026] [:error] [pid 37126:tid 37158] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sun May 03 10:38:22.988519 2026] [:error] [pid 37126:tid 37167] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Sun May 03 10:38:23.177453 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Sun May 03 10:38:23.368029 2026] [:error] [pid 37126:tid 37176] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Sun May 03 10:38:23.558777 2026] [:error] [pid 37126:tid 37152] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Sun May 03 10:38:23.747621 2026] [:error] [pid 37126:tid 37174] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun May 03 10:38:23.943711 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:28890] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun May 03 10:38:24.342956 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:28890] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afa1IPR_A42N-LtDyrvvsQAAAAQ"]
[Sun May 03 10:38:24.963157 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:28902] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afa1IEHBbBLrXh6PBuu8WQAAAVg"]
[Sun May 03 10:38:25.508315 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:36980] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afa1IUHBbBLrXh6PBuu8XAAAAUw"]
[Sun May 03 10:38:26.254299 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:51194] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afa1IkHBbBLrXh6PBuu8YwAAAUk"]
[Sun May 03 10:38:26.726047 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:28876] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afa1IqIu7bmXKXicRk9KZgAAAIE"]
[Sun May 03 10:38:27.133806 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:36898] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afa1I0HBbBLrXh6PBuu8ZQAAAVQ"]
[Sun May 03 10:38:27.591951 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:28896] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afa1I0HBbBLrXh6PBuu8ZgAAAUo"]
[Sun May 03 10:38:28.004964 2026] [:error] [pid 40456:tid 40481] [client 172.173.121.85:28897] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afa1JDSujTvwdzEkjSf8WgAAAZc"]
[Sun May 03 10:38:28.467224 2026] [:error] [pid 37126:tid 37165] [client 172.173.121.85:51161] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afa1JPR_A42N-LtDyrvvsgAAAAw"]
[Sun May 03 10:38:28.897158 2026] [:error] [pid 37126:tid 37171] [client 172.173.121.85:28908] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afa1JPR_A42N-LtDyrvvswAAABI"]
[Sun May 03 10:38:29.344467 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:36879] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afa1JUHBbBLrXh6PBuu8agAAAUA"]
[Sun May 03 10:38:29.997132 2026] [:error] [pid 37246:tid 37273] [client 172.173.121.85:28904] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "afa1JThvYFGNwhnPamqiigAAARc"]
[Sun May 03 10:38:31.059379 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:28852] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afa1JzhvYFGNwhnPamqijAAAAQY"]
[Sun May 03 10:38:31.583375 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:36971] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afa1JzhvYFGNwhnPamqijgAAAQM"]
[Sun May 03 10:38:31.993264 2026] [:error] [pid 37127:tid 37185] [client 172.173.121.85:28861] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afa1J_8khJXb5O5aWVX5SAAAAEE"]
[Sun May 03 10:38:32.491655 2026] [:error] [pid 37246:tid 37263] [client 172.173.121.85:36982] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fine.php"] [unique_id "afa1KDhvYFGNwhnPamqikAAAAQ0"]
[Sun May 03 10:38:36.183844 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:28801] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afa1LDSujTvwdzEkjSf8ZAAAAYs"]
[Sun May 03 10:38:36.626385 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:28842] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afa1LDSujTvwdzEkjSf8ZwAAAZQ"]
[Sun May 03 10:38:37.018022 2026] [:error] [pid 40386:tid 40395] [client 172.173.121.85:36907] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afa1LVHJDYRXUf3IbRTxdwAAAMc"]
[Sun May 03 10:38:37.647369 2026] [:error] [pid 37130:tid 37236] [client 172.173.121.85:28915] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afa1LaIu7bmXKXicRk9KagAAAJc"]
[Sun May 03 10:38:38.684589 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:28816] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afa1LjhvYFGNwhnPamqikgAAAQw"]
[Sun May 03 10:38:39.145841 2026] [:error] [pid 37126:tid 37160] [client 172.173.121.85:36925] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afa1L_R_A42N-LtDyrvvtQAAAAc"]
[Sun May 03 10:38:39.634725 2026] [:error] [pid 37246:tid 37252] [client 172.173.121.85:28878] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afa1LzhvYFGNwhnPamqilQAAAQQ"]
[Sun May 03 10:38:40.063318 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:36977] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afa1MDSujTvwdzEkjSf8bgAAAYk"]
[Sun May 03 10:38:40.957979 2026] [:error] [pid 37130:tid 37216] [client 172.173.121.85:28825] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afa1MKIu7bmXKXicRk9KawAAAIM"]
[Sun May 03 10:38:41.369736 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:51127] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afa1Mf8khJXb5O5aWVX5UQAAAEA"]
[Sun May 03 10:38:41.762664 2026] [:error] [pid 40456:tid 40466] [client 172.173.121.85:28886] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afa1MTSujTvwdzEkjSf8cQAAAYg"]
[Sun May 03 10:38:42.175512 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:28880] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afa1MkHBbBLrXh6PBuu8cgAAAVI"]
[Sun May 03 10:38:42.636701 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:25815] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afa1MkHBbBLrXh6PBuu8cwAAAUc"]
[Sun May 03 10:38:43.017280 2026] [:error] [pid 40386:tid 40388] [client 172.173.121.85:36864] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afa1M1HJDYRXUf3IbRTxegAAAMA"]
[Sun May 03 10:38:43.414136 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:51150] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afa1MzhvYFGNwhnPamqimAAAAQM"]
[Sun May 03 10:38:43.796902 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:28879] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afa1M0HBbBLrXh6PBuu8dQAAAVM"]
[Sun May 03 10:38:44.413996 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:36973] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afa1NEHBbBLrXh6PBuu8dwAAAVQ"]
[Sun May 03 10:38:44.800520 2026] [:error] [pid 40422:tid 40428] [client 172.173.121.85:51183] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afa1NEHBbBLrXh6PBuu8eAAAAUI"]
[Sun May 03 10:38:45.222842 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:36872] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afa1NUHBbBLrXh6PBuu8egAAAVY"]
[Sun May 03 10:38:45.678319 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:28870] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afa1NThvYFGNwhnPamqimwAAARU"]
[Sun May 03 10:38:46.196966 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:36893] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afa1NkHBbBLrXh6PBuu8fAAAAUs"]
[Sun May 03 10:38:46.620645 2026] [:error] [pid 40422:tid 40450] [client 172.173.121.85:28888] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afa1NkHBbBLrXh6PBuu8fgAAAVg"]
[Sun May 03 10:38:47.007584 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:36979] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afa1N6Iu7bmXKXicRk9KbgAAAJA"]
[Sun May 03 10:38:47.389517 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:36889] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afa1N0HBbBLrXh6PBuu8ggAAAUM"]
[Sun May 03 10:38:47.776208 2026] [:error] [pid 37127:tid 37202] [client 172.173.121.85:36940] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afa1N_8khJXb5O5aWVX5VQAAAFE"]
[Sun May 03 10:38:48.211305 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:36954] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afa1OEHBbBLrXh6PBuu8hgAAAUQ"]
[Sun May 03 10:38:48.587075 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:25808] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afa1OEHBbBLrXh6PBuu8hwAAAUA"]
[Sun May 03 10:38:49.147651 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:36877] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afa1OUHBbBLrXh6PBuu8iQAAAVM"]
[Sun May 03 10:38:49.587165 2026] [:error] [pid 40456:tid 40462] [client 172.173.121.85:28891] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afa1OTSujTvwdzEkjSf8dAAAAYQ"]
[Sun May 03 10:38:50.008494 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:28832] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afa1OkHBbBLrXh6PBuu8jAAAAUY"]
[Sun May 03 10:38:50.466197 2026] [:error] [pid 37246:tid 37273] [client 172.173.121.85:28827] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afa1OjhvYFGNwhnPamqinwAAARc"]
[Sun May 03 10:38:51.084842 2026] [:error] [pid 37127:tid 37188] [client 172.173.121.85:28914] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afa1O_8khJXb5O5aWVX5VgAAAEQ"]
[Sun May 03 10:38:51.549557 2026] [:error] [pid 37127:tid 37207] [client 172.173.121.85:28920] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afa1O_8khJXb5O5aWVX5VwAAAFU"]
[Sun May 03 10:38:51.991511 2026] [:error] [pid 40456:tid 40470] [client 172.173.121.85:51102] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afa1OzSujTvwdzEkjSf8eQAAAYw"]
[Sun May 03 10:38:52.404195 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:28840] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afa1PEHBbBLrXh6PBuu8jwAAAUo"]
[Sun May 03 10:38:52.790024 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:36886] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afa1PDSujTvwdzEkjSf8fAAAAYI"]
[Sun May 03 10:38:53.262456 2026] [:error] [pid 40456:tid 40482] [client 172.173.121.85:28864] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afa1PTSujTvwdzEkjSf8fQAAAZg"]
[Sun May 03 10:38:53.666619 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:36905] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afa1PUHBbBLrXh6PBuu8kgAAAUk"]
[Sun May 03 10:38:54.045500 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:28913] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afa1PkHBbBLrXh6PBuu8kwAAAVU"]
[Sun May 03 10:38:54.732578 2026] [:error] [pid 40422:tid 40442] [client 172.173.121.85:28805] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afa1PkHBbBLrXh6PBuu8lQAAAVA"]
[Sun May 03 10:38:55.189329 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:36868] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afa1P_R_A42N-LtDyrvvugAAAA0"]
[Sun May 03 10:38:55.597369 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:28812] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afa1P0HBbBLrXh6PBuu8mQAAAUc"]
[Sun May 03 10:38:56.079561 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:28850] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afa1QEHBbBLrXh6PBuu8nQAAAVE"]
[Sun May 03 10:38:56.509710 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:28882] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afa1QEHBbBLrXh6PBuu8nwAAAUk"]
[Sun May 03 10:38:57.231552 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:28807] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afa1QTSujTvwdzEkjSf8fwAAAYU"]
[Sun May 03 10:38:57.654134 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:28873] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afa1QUHBbBLrXh6PBuu8ogAAAUg"]
[Sun May 03 10:38:58.029385 2026] [:error] [pid 37126:tid 37169] [client 172.173.121.85:25819] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afa1QvR_A42N-LtDyrvvuwAAABA"]
[Sun May 03 10:38:58.416778 2026] [:error] [pid 37130:tid 37235] [client 172.173.121.85:51151] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afa1QqIu7bmXKXicRk9KcQAAAJY"]
[Sun May 03 10:38:58.970410 2026] [:error] [pid 37127:tid 37193] [client 172.173.121.85:36870] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afa1Qv8khJXb5O5aWVX5XAAAAEk"]
[Sun May 03 10:38:59.346920 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:25816] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afa1Q0HBbBLrXh6PBuu8pgAAAUw"]
[Sun May 03 10:38:59.836061 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:36926] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afa1Q0HBbBLrXh6PBuu8qAAAAVI"]
[Sun May 03 10:39:00.300609 2026] [:error] [pid 37126:tid 37161] [client 172.173.121.85:28802] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afa1RPR_A42N-LtDyrvvvAAAAAg"]
[Sun May 03 10:39:00.747013 2026] [:error] [pid 40456:tid 40475] [client 172.173.121.85:28865] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afa1RDSujTvwdzEkjSf8gAAAAZE"]
[Sun May 03 10:39:01.132516 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:28868] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afa1RUHBbBLrXh6PBuu8rAAAAUk"]
[Sun May 03 10:39:01.523508 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:28841] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afa1RUHBbBLrXh6PBuu8rQAAAUM"]
[Sun May 03 10:39:01.918161 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:28885] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afa1RUHBbBLrXh6PBuu8sAAAAUg"]
[Sun May 03 10:39:02.303090 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:28927] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afa1Rv8khJXb5O5aWVX5XgAAAE8"]
[Sun May 03 10:39:02.716747 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:28912] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afa1RkHBbBLrXh6PBuu8sQAAAVI"]
[Sun May 03 10:39:03.157764 2026] [:error] [pid 37130:tid 37214] [client 172.173.121.85:28901] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afa1R6Iu7bmXKXicRk9KdAAAAIE"]
[Sun May 03 10:39:03.605943 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:36903] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afa1R6Iu7bmXKXicRk9KdQAAAIY"]
[Sun May 03 10:39:04.036049 2026] [:error] [pid 40386:tid 40392] [client 172.173.121.85:28835] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1SFHJDYRXUf3IbRTxhAAAAMQ"]
[Sun May 03 10:39:04.462359 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:28834] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1SFHJDYRXUf3IbRTxhgAAAMU"]
[Sun May 03 10:39:05.025604 2026] [:error] [pid 37126:tid 37165] [client 172.173.121.85:36890] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1SfR_A42N-LtDyrvvwAAAAAw"]
[Sun May 03 10:39:05.515610 2026] [:error] [pid 37126:tid 37177] [client 172.173.121.85:51077] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1SfR_A42N-LtDyrvvwQAAABg"]
[Sun May 03 10:39:05.964455 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:28922] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afa1SUHBbBLrXh6PBuu8twAAAUo"]
[Sun May 03 10:39:06.495762 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:28811] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afa1SkHBbBLrXh6PBuu8ugAAAUw"]
[Sun May 03 10:39:07.036044 2026] [:error] [pid 37127:tid 37206] [client 172.173.121.85:28841] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afa1S_8khJXb5O5aWVX5YQAAAFQ"]
[Sun May 03 10:39:07.427142 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:36901] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afa1SzhvYFGNwhnPamqipwAAARE"]
[Sun May 03 10:39:07.804735 2026] [:error] [pid 37126:tid 37168] [client 172.173.121.85:28851] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afa1S_R_A42N-LtDyrvvwwAAAA8"]
[Sun May 03 10:39:08.307877 2026] [:error] [pid 40422:tid 40432] [client 172.173.121.85:36976] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afa1TEHBbBLrXh6PBuu8vwAAAUY"]
[Sun May 03 10:39:08.739809 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:36921] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afa1TEHBbBLrXh6PBuu8wQAAAUs"]
[Sun May 03 10:39:09.148573 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:28906] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afa1TUHBbBLrXh6PBuu8xgAAAUw"]
[Sun May 03 10:39:09.543534 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:28919] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afa1TUHBbBLrXh6PBuu8yAAAAUE"]
[Sun May 03 10:39:09.950923 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:36913] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afa1TUHBbBLrXh6PBuu8ygAAAU4"]
[Sun May 03 10:39:10.367930 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:25796] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afa1TkHBbBLrXh6PBuu8ywAAAVY"]
[Sun May 03 10:39:10.762847 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:28819] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afa1TkHBbBLrXh6PBuu8zAAAAVQ"]
[Sun May 03 10:39:11.326929 2026] [:error] [pid 40456:tid 40481] [client 172.173.121.85:28887] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afa1TzSujTvwdzEkjSf8hAAAAZc"]
[Sun May 03 10:39:11.730943 2026] [:error] [pid 40422:tid 40430] [client 172.173.121.85:28866] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afa1T0HBbBLrXh6PBuu80AAAAUQ"]
[Sun May 03 10:39:12.109030 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:28803] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afa1UEHBbBLrXh6PBuu80wAAAUM"]
[Sun May 03 10:39:12.484403 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:25824] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afa1UDhvYFGNwhnPamqirwAAARQ"]
[Sun May 03 10:39:12.879693 2026] [:error] [pid 40422:tid 40434] [client 172.173.121.85:28883] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afa1UEHBbBLrXh6PBuu81QAAAUg"]
[Sun May 03 10:39:13.315693 2026] [:error] [pid 37126:tid 37156] [client 172.173.121.85:36923] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afa1UfR_A42N-LtDyrvvxQAAAAM"]
[Sun May 03 10:39:13.841833 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:28820] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afa1UTSujTvwdzEkjSf8hQAAAYk"]
[Sun May 03 10:39:14.540864 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:28800] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afa1UjhvYFGNwhnPamqisQAAAQ4"]
[Sun May 03 10:39:14.921988 2026] [:error] [pid 40456:tid 40464] [client 172.173.121.85:51142] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afa1UjSujTvwdzEkjSf8hwAAAYY"]
[Sun May 03 10:39:15.373658 2026] [:error] [pid 37127:tid 37190] [client 172.173.121.85:25807] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afa1U_8khJXb5O5aWVX5ZQAAAEY"]
[Sun May 03 10:39:15.893047 2026] [:error] [pid 37127:tid 37192] [client 172.173.121.85:36960] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afa1U_8khJXb5O5aWVX5aAAAAEg"]
[Sun May 03 10:39:16.317855 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:28814] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afa1VEHBbBLrXh6PBuu84AAAAVU"]
[Sun May 03 10:39:16.699883 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:28810] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afa1VP8khJXb5O5aWVX5awAAAE8"]
[Sun May 03 10:39:17.143770 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:28877] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afa1VThvYFGNwhnPamqisgAAARE"]
[Sun May 03 10:39:17.568846 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:25818] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afa1VThvYFGNwhnPamqiswAAAQo"]
[Sun May 03 10:39:18.256609 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:36892] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afa1VlHJDYRXUf3IbRTxiQAAANM"]
[Sun May 03 10:39:18.873369 2026] [:error] [pid 40456:tid 40473] [client 172.173.121.85:28911] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afa1VjSujTvwdzEkjSf8igAAAY8"]
[Sun May 03 10:39:19.878372 2026] [:error] [pid 40386:tid 40394] [client 172.173.121.85:51152] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afa1V1HJDYRXUf3IbRTxiwAAAMY"]
[Sun May 03 10:39:30.866347 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Sun May 03 10:39:31.183976 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun May 03 10:39:31.436901 2026] [:error] [pid 37127:tid 37190] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun May 03 10:39:31.698791 2026] [:error] [pid 37127:tid 37203] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun May 03 10:39:31.957898 2026] [:error] [pid 37127:tid 37194] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun May 03 10:39:32.480354 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sun May 03 10:39:32.922592 2026] [:error] [pid 37127:tid 37208] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun May 03 10:39:33.160351 2026] [:error] [pid 37127:tid 37196] [client 172.173.121.85:28875] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Sun May 03 10:39:33.363373 2026] [:error] [pid 37127:tid 37198] [client 172.173.121.85:28875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afa1Zf8khJXb5O5aWVX5ewAAAE0"]
[Sun May 03 10:39:43.182802 2026] [:error] [pid 40422:tid 40437] [client 172.173.121.85:28918] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afa1b0HBbBLrXh6PBuu9AAAAAUs"]
[Sun May 03 10:39:43.770384 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:25793] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afa1b0HBbBLrXh6PBuu9AwAAAU4"]
[Sun May 03 10:39:44.200161 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:28837] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afa1cDSujTvwdzEkjSf8mwAAAYs"]
[Sun May 03 10:39:44.654657 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:25840] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afa1cEHBbBLrXh6PBuu9BgAAAVU"]
[Sun May 03 10:39:45.075136 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:28905] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afa1cUHBbBLrXh6PBuu9BwAAAVI"]
[Sun May 03 10:39:47.827971 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:28849] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afa1c0HBbBLrXh6PBuu9EwAAAUM"]
[Sun May 03 10:39:48.258713 2026] [:error] [pid 40422:tid 40436] [client 172.173.121.85:28813] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afa1dEHBbBLrXh6PBuu9FgAAAUo"]
[Sun May 03 10:39:48.671140 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:28907] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afa1dPR_A42N-LtDyrvvzAAAABE"]
[Sun May 03 10:39:49.071768 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:36885] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afa1dTSujTvwdzEkjSf8nwAAAZY"]
[Sun May 03 10:39:49.588723 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:28909] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afa1dThvYFGNwhnPamqi3AAAAQA"]
[Sun May 03 10:39:49.981851 2026] [:error] [pid 37246:tid 37255] [client 172.173.121.85:28884] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afa1dThvYFGNwhnPamqi3gAAAQc"]
[Sun May 03 10:39:50.622043 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:28845] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afa1dkHBbBLrXh6PBuu9GQAAAU0"]
[Sun May 03 10:39:51.183806 2026] [:error] [pid 37246:tid 37264] [client 172.173.121.85:25812] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afa1dzhvYFGNwhnPamqi3wAAAQ4"]
[Sun May 03 10:39:52.346254 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:28924] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afa1eDSujTvwdzEkjSf8owAAAYE"]
[Sun May 03 10:39:52.720820 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:25805] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "afa1eDhvYFGNwhnPamqi4gAAAQE"]
[Sun May 03 10:39:53.114960 2026] [:error] [pid 40456:tid 40478] [client 172.173.121.85:25830] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afa1eTSujTvwdzEkjSf8pwAAAZQ"]
[Sun May 03 10:39:53.504714 2026] [:error] [pid 40422:tid 40431] [client 172.173.121.85:28893] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afa1eUHBbBLrXh6PBuu9IgAAAUU"]
[Sun May 03 10:39:53.958488 2026] [:error] [pid 40456:tid 40480] [client 172.173.121.85:28826] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afa1eTSujTvwdzEkjSf8qgAAAZY"]
[Sun May 03 10:39:54.351270 2026] [:error] [pid 40422:tid 40447] [client 172.173.121.85:28910] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "afa1ekHBbBLrXh6PBuu9JQAAAVU"]
[Sun May 03 10:39:54.835902 2026] [:error] [pid 40422:tid 40427] [client 172.173.121.85:28831] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afa1ekHBbBLrXh6PBuu9KQAAAUE"]
[Sun May 03 10:39:55.496491 2026] [:error] [pid 40422:tid 40443] [client 172.173.121.85:25841] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afa1e0HBbBLrXh6PBuu9LQAAAVE"]
[Sun May 03 10:39:56.079649 2026] [:error] [pid 40422:tid 40445] [client 172.173.121.85:36866] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afa1fEHBbBLrXh6PBuu9MAAAAVM"]
[Sun May 03 10:39:56.733845 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:28846] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afa1fDSujTvwdzEkjSf8rwAAAY0"]
[Sun May 03 10:39:57.155620 2026] [:error] [pid 40422:tid 40444] [client 172.173.121.85:28853] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afa1fUHBbBLrXh6PBuu9MgAAAVI"]
[Sun May 03 10:39:57.644424 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:25827] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afa1fUHBbBLrXh6PBuu9NAAAAVc"]
[Sun May 03 10:39:58.209860 2026] [:error] [pid 40386:tid 40405] [client 172.173.121.85:26567] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afa1flHJDYRXUf3IbRTxlwAAANE"]
[Sun May 03 10:39:58.625123 2026] [:error] [pid 37246:tid 37249] [client 172.173.121.85:28823] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fe5.php"] [unique_id "afa1fjhvYFGNwhnPamqi6gAAAQE"]
[Sun May 03 10:39:59.119506 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:25846] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afa1fzhvYFGNwhnPamqi6wAAARE"]
[Sun May 03 10:39:59.562717 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:28821] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afa1fzSujTvwdzEkjSf8sQAAAY4"]
[Sun May 03 10:40:00.039303 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:25795] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afa1gDhvYFGNwhnPamqi7wAAARY"]
[Sun May 03 10:40:00.501047 2026] [:error] [pid 37246:tid 37271] [client 172.173.121.85:25802] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afa1gDhvYFGNwhnPamqi8AAAARU"]
[Sun May 03 10:40:00.888382 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:28900] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1gDhvYFGNwhnPamqi8gAAAQA"]
[Sun May 03 10:40:01.401577 2026] [:error] [pid 37246:tid 37259] [client 172.173.121.85:51182] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1gThvYFGNwhnPamqi9AAAAQo"]
[Sun May 03 10:40:01.825580 2026] [:error] [pid 40386:tid 40399] [client 172.173.121.85:28843] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1gVHJDYRXUf3IbRTxmwAAAMs"]
[Sun May 03 10:40:02.247182 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:36904] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afa1gvR_A42N-LtDyrvv0AAAAAQ"]
[Sun May 03 10:40:02.696939 2026] [:error] [pid 37126:tid 37169] [client 172.173.121.85:36955] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afa1gvR_A42N-LtDyrvv0wAAABA"]
[Sun May 03 10:40:03.089310 2026] [:error] [pid 37126:tid 37162] [client 172.173.121.85:28859] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afa1g_R_A42N-LtDyrvv1QAAAAk"]
[Sun May 03 10:40:03.546147 2026] [:error] [pid 40456:tid 40460] [client 172.173.121.85:26573] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afa1gzSujTvwdzEkjSf8tQAAAYI"]
[Sun May 03 10:40:04.000206 2026] [:error] [pid 37127:tid 37187] [client 172.173.121.85:25811] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afa1g_8khJXb5O5aWVX5iQAAAEM"]
[Sun May 03 10:40:04.472313 2026] [:error] [pid 40386:tid 40401] [client 172.173.121.85:28809] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afa1hFHJDYRXUf3IbRTxnwAAAM0"]
[Sun May 03 10:40:04.935556 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:28898] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afa1hP8khJXb5O5aWVX5igAAAEI"]
[Sun May 03 10:40:05.349759 2026] [:error] [pid 37246:tid 37274] [client 172.173.121.85:25800] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afa1hThvYFGNwhnPamqi-AAAARg"]
[Sun May 03 10:40:05.802383 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:28867] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afa1hf8khJXb5O5aWVX5jQAAAEc"]
[Sun May 03 10:40:06.348104 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:28822] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afa1hqIu7bmXKXicRk9KhgAAAIY"]
[Sun May 03 10:40:06.782353 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:36880] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afa1hv8khJXb5O5aWVX5kQAAAEA"]
[Sun May 03 10:40:07.240571 2026] [:error] [pid 40386:tid 40390] [client 172.173.121.85:25837] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afa1h1HJDYRXUf3IbRTxogAAAMI"]
[Sun May 03 10:40:07.712493 2026] [:error] [pid 37246:tid 37248] [client 172.173.121.85:28838] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afa1hzhvYFGNwhnPamqi-gAAAQA"]
[Sun May 03 10:40:08.091567 2026] [:error] [pid 40386:tid 40394] [client 172.173.121.85:25845] [client 172.173.121.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afa1iFHJDYRXUf3IbRTxowAAAMY"]
[Sun May 03 10:40:08.539608 2026] [:error] [pid 37126:tid 37175] [client 172.173.121.85:28926] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afa1iPR_A42N-LtDyrvv1wAAABY"]
[Sun May 03 10:40:09.037568 2026] [:error] [pid 37130:tid 37227] [client 172.173.121.85:25792] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afa1iaIu7bmXKXicRk9KiQAAAI4"]
[Sun May 03 10:40:09.469728 2026] [:error] [pid 40386:tid 40393] [client 172.173.121.85:25853] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afa1iVHJDYRXUf3IbRTxpgAAAMU"]
[Sun May 03 10:40:09.950256 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:25810] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afa1ifR_A42N-LtDyrvv2QAAABE"]
[Sun May 03 10:40:10.399272 2026] [:error] [pid 37126:tid 37151] [client 172.173.121.85:25852] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afa1ivR_A42N-LtDyrvv2gAAAAA"]
[Sun May 03 10:40:10.858842 2026] [:error] [pid 37130:tid 37220] [client 172.173.121.85:28817] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afa1iqIu7bmXKXicRk9KiwAAAIc"]
[Sun May 03 10:40:11.256645 2026] [:error] [pid 37130:tid 37229] [client 172.173.121.85:28858] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afa1i6Iu7bmXKXicRk9KjgAAAJA"]
[Sun May 03 10:40:11.627638 2026] [:error] [pid 37130:tid 37224] [client 172.173.121.85:25667] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afa1i6Iu7bmXKXicRk9KkQAAAIs"]
[Sun May 03 10:40:12.088682 2026] [:error] [pid 37130:tid 37228] [client 172.173.121.85:28899] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afa1jKIu7bmXKXicRk9KkwAAAI8"]
[Sun May 03 10:40:12.547760 2026] [:error] [pid 37130:tid 37213] [client 172.173.121.85:25799] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afa1jKIu7bmXKXicRk9KlAAAAIA"]
[Sun May 03 10:40:12.978396 2026] [:error] [pid 40456:tid 40472] [client 172.173.121.85:25687] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afa1jDSujTvwdzEkjSf8twAAAY4"]
[Sun May 03 10:40:13.411567 2026] [:error] [pid 37126:tid 37157] [client 172.173.121.85:25804] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afa1jfR_A42N-LtDyrvv4AAAAAQ"]
[Sun May 03 10:40:13.975317 2026] [:error] [pid 40456:tid 40458] [client 172.173.121.85:25830] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afa1jTSujTvwdzEkjSf8uQAAAYA"]
[Sun May 03 10:40:14.373953 2026] [:error] [pid 37127:tid 37200] [client 172.173.121.85:25814] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afa1jv8khJXb5O5aWVX5mgAAAE8"]
[Sun May 03 10:40:14.904139 2026] [:error] [pid 37130:tid 37235] [client 172.173.121.85:25829] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afa1jqIu7bmXKXicRk9KmAAAAJY"]
[Sun May 03 10:40:15.284078 2026] [:error] [pid 37127:tid 37206] [client 172.173.121.85:25714] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afa1j_8khJXb5O5aWVX5nAAAAFQ"]
[Sun May 03 10:40:15.734719 2026] [:error] [pid 37130:tid 37219] [client 172.173.121.85:28862] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afa1j6Iu7bmXKXicRk9KmQAAAIY"]
[Sun May 03 10:40:16.164310 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:36871] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afa1kDSujTvwdzEkjSf8vAAAAYU"]
[Sun May 03 10:40:16.543851 2026] [:error] [pid 40456:tid 40474] [client 172.173.121.85:28830] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afa1kDSujTvwdzEkjSf8vQAAAZA"]
[Sun May 03 10:40:16.929061 2026] [:error] [pid 37127:tid 37205] [client 172.173.121.85:25665] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afa1kP8khJXb5O5aWVX5oAAAAFM"]
[Sun May 03 10:40:17.409056 2026] [:error] [pid 37246:tid 37267] [client 172.173.121.85:28844] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afa1kThvYFGNwhnPamqi_QAAARE"]
[Sun May 03 10:40:17.908796 2026] [:error] [pid 37127:tid 37191] [client 172.173.121.85:25803] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afa1kf8khJXb5O5aWVX5owAAAEc"]
[Sun May 03 10:40:18.292821 2026] [:error] [pid 40386:tid 40407] [client 172.173.121.85:28905] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afa1klHJDYRXUf3IbRTxqQAAANM"]
[Sun May 03 10:40:18.677772 2026] [:error] [pid 37126:tid 37170] [client 172.173.121.85:25794] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afa1kvR_A42N-LtDyrvv4gAAABE"]
[Sun May 03 10:40:19.099528 2026] [:error] [pid 40386:tid 40412] [client 172.173.121.85:51134] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afa1k1HJDYRXUf3IbRTxqwAAANg"]
[Sun May 03 10:40:19.500796 2026] [:error] [pid 40422:tid 40440] [client 172.173.121.85:25722] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afa1k0HBbBLrXh6PBuu9QAAAAU4"]
[Sun May 03 10:40:20.043084 2026] [:error] [pid 40422:tid 40446] [client 172.173.121.85:28815] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afa1lEHBbBLrXh6PBuu9QwAAAVQ"]
[Sun May 03 10:40:20.498923 2026] [:error] [pid 37127:tid 37184] [client 172.173.121.85:25822] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afa1lP8khJXb5O5aWVX5pQAAAEA"]
[Sun May 03 10:40:20.919602 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:25707] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afa1lPR_A42N-LtDyrvv4wAAAAI"]
[Sun May 03 10:40:21.324511 2026] [:error] [pid 37246:tid 37251] [client 172.173.121.85:25855] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afa1lThvYFGNwhnPamqjAwAAAQM"]
[Sun May 03 10:40:21.772010 2026] [:error] [pid 40456:tid 40481] [client 172.173.121.85:51187] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afa1lTSujTvwdzEkjSf8wwAAAZc"]
[Sun May 03 10:40:22.190830 2026] [:error] [pid 37246:tid 37272] [client 172.173.121.85:28925] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afa1ljhvYFGNwhnPamqjBQAAARY"]
[Sun May 03 10:40:22.644322 2026] [:error] [pid 37127:tid 37186] [client 172.173.121.85:36953] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afa1lv8khJXb5O5aWVX5qgAAAEI"]
[Sun May 03 10:40:23.220745 2026] [:error] [pid 37246:tid 37270] [client 172.173.121.85:25854] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afa1lzhvYFGNwhnPamqjBgAAARQ"]
[Sun May 03 10:40:23.623404 2026] [:error] [pid 37246:tid 37254] [client 172.173.121.85:25834] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afa1lzhvYFGNwhnPamqjBwAAAQY"]
[Sun May 03 10:40:24.038671 2026] [:error] [pid 37246:tid 37257] [client 172.173.121.85:28808] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afa1mDhvYFGNwhnPamqjCAAAAQk"]
[Sun May 03 10:40:24.476975 2026] [:error] [pid 37126:tid 37166] [client 172.173.121.85:25689] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afa1mPR_A42N-LtDyrvv6QAAAA0"]
[Sun May 03 10:40:24.964632 2026] [:error] [pid 40422:tid 40449] [client 172.173.121.85:28847] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afa1mEHBbBLrXh6PBuu9TAAAAVc"]
[Sun May 03 10:40:25.462287 2026] [:error] [pid 40386:tid 40404] [client 172.173.121.85:25817] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afa1mVHJDYRXUf3IbRTxrAAAANA"]
[Sun May 03 10:40:25.856475 2026] [:error] [pid 40422:tid 40426] [client 172.173.121.85:36875] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afa1mUHBbBLrXh6PBuu9UAAAAUA"]
[Sun May 03 10:40:26.246321 2026] [:error] [pid 37130:tid 37233] [client 172.173.121.85:25685] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afa1mqIu7bmXKXicRk9KmgAAAJQ"]
[Sun May 03 10:40:26.624992 2026] [:error] [pid 40422:tid 40441] [client 172.173.121.85:26560] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afa1mkHBbBLrXh6PBuu9UwAAAU8"]
[Sun May 03 10:40:27.387169 2026] [:error] [pid 40422:tid 40429] [client 172.173.121.85:25691] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afa1m0HBbBLrXh6PBuu9WAAAAUM"]
[Sun May 03 10:40:28.006100 2026] [:error] [pid 40386:tid 40405] [client 172.173.121.85:25851] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afa1nFHJDYRXUf3IbRTxrQAAANE"]
[Sun May 03 10:40:28.393565 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:25664] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afa1nDSujTvwdzEkjSf8xwAAAYU"]
[Sun May 03 10:40:28.793109 2026] [:error] [pid 40422:tid 40448] [client 172.173.121.85:51097] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afa1nEHBbBLrXh6PBuu9XwAAAVY"]
[Sun May 03 10:40:29.222367 2026] [:error] [pid 40422:tid 40433] [client 172.173.121.85:28903] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afa1nUHBbBLrXh6PBuu9YAAAAUc"]
[Sun May 03 10:40:29.605183 2026] [:error] [pid 37130:tid 37221] [client 172.173.121.85:28869] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afa1naIu7bmXKXicRk9KnQAAAIg"]
[Sun May 03 10:40:29.992579 2026] [:error] [pid 37126:tid 37160] [client 172.173.121.85:25708] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afa1nfR_A42N-LtDyrvv7AAAAAc"]
[Sun May 03 10:40:30.424932 2026] [:error] [pid 37246:tid 37262] [client 172.173.121.85:28895] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afa1njhvYFGNwhnPamqjDQAAAQw"]
[Sun May 03 10:40:30.838446 2026] [:error] [pid 40422:tid 40435] [client 172.173.121.85:25715] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afa1nkHBbBLrXh6PBuu9ZQAAAUk"]
[Sun May 03 10:40:31.257311 2026] [:error] [pid 40422:tid 40438] [client 172.173.121.85:25669] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afa1n0HBbBLrXh6PBuu9ZwAAAUw"]
[Sun May 03 10:40:31.684660 2026] [:error] [pid 37130:tid 37237] [client 172.173.121.85:51101] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afa1n6Iu7bmXKXicRk9KngAAAJg"]
[Sun May 03 10:40:32.124810 2026] [:error] [pid 37126:tid 37153] [client 172.173.121.85:25694] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afa1oPR_A42N-LtDyrvv7QAAAAI"]
[Sun May 03 10:40:32.559217 2026] [:error] [pid 40422:tid 40439] [client 172.173.121.85:51181] [client 172.173.121.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afa1oEHBbBLrXh6PBuu9agAAAU0"]
[Sun May 03 10:40:33.211648 2026] [:error] [pid 40456:tid 40471] [client 172.173.121.85:51188] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Sun May 03 10:40:33.416056 2026] [:error] [pid 40456:tid 40467] [client 172.173.121.85:51188] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun May 03 10:40:33.611819 2026] [:error] [pid 40456:tid 40469] [client 172.173.121.85:51188] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Sun May 03 10:40:33.804023 2026] [:error] [pid 40456:tid 40473] [client 172.173.121.85:51188] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sun May 03 10:40:33.993809 2026] [:error] [pid 40456:tid 40459] [client 172.173.121.85:51188] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun May 03 10:40:34.417640 2026] [:error] [pid 40456:tid 40463] [client 172.173.121.85:51188] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun May 03 13:15:10.231471 2026] [:error] [pid 40422:tid 40447] [client 101.33.81.73:49608] [client 101.33.81.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afbZ3kHBbBLrXh6PBuvxpQAAAVU"]
[Sun May 03 18:21:46.076777 2026] [:error] [pid 34432:tid 34446] [client 145.239.10.137:38976] File does not exist: /usr/local/apache/htdocs/suspended-page/data2.php, referer: http://dbservices.com.au/data2.php
[Sun May 03 22:32:16.224339 2026] [:error] [pid 37126:tid 37159] [client 43.140.247.223:59338] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afdccPR_A42N-LtDyrtSiAAAAAY"]
[Mon May 04 00:01:55.950086 2026] [:error] [pid 37130:tid 37225] [client 34.116.138.183:60172] [client 34.116.138.183] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "afdxc6Iu7bmXKXicRk-bygAAAIw"]
[Mon May 04 01:38:19.309790 2026] [:error] [pid 40456:tid 40471] [client 43.154.140.188:40504] [client 43.154.140.188] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afeICzSujTvwdzEkjSdyJwAAAY0"]
[Mon May 04 04:23:09.090813 2026] [:error] [pid 58625:tid 58649] [client 43.130.139.177:40500] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afeurfZfjPGFqq6KSLn43AAAARU"]
[Mon May 04 06:14:28.219909 2026] [:error] [pid 57048:tid 57140] [client 91.217.249.205:31491] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Mon May 04 08:34:42.485011 2026] [:error] [pid 12051:tid 12059] [client 43.130.14.245:44914] [client 43.130.14.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "affpourVB-w_PyOHK6k9rgAAAUY"]
[Mon May 04 10:40:09.421696 2026] [:error] [pid 33186:tid 33204] [client 49.234.192.248:44584] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afgHCbqlqe0DcmBS9VwF3AAAAA8"]
[Mon May 04 11:01:15.313947 2026] [:error] [pid 12022:tid 12038] [client 145.239.10.137:55438] File does not exist: /usr/local/apache/htdocs/suspended-page/tina.php, referer: http://dbservices.com.au/tina.php
[Mon May 04 11:01:27.895032 2026] [:error] [pid 33186:tid 33189] [client 150.109.46.88:50864] [client 150.109.46.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afgMB7qlqe0DcmBS9VwUvgAAAAA"]
[Mon May 04 14:59:24.673285 2026] [:error] [pid 53161:tid 53226] [client 49.51.253.83:52690] [client 49.51.253.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afhDzE5l1qgo2JEi65l_RwAAAEk"]
[Mon May 04 15:45:07.476217 2026] [:error] [pid 3341:tid 3346] [client 136.107.232.91:51655] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afhOg09o3_LordU0wW7qigAAAII"]
[Mon May 04 15:45:07.917732 2026] [:error] [pid 61044:tid 61112] [client 136.107.232.91:54438] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afhOg0w8w2zZZXI6H1tmPQAAAAo"]
[Mon May 04 15:45:08.349463 2026] [:error] [pid 61044:tid 61118] [client 136.107.232.91:57351] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOhEw8w2zZZXI6H1tmWAAAABA"]
[Mon May 04 17:18:15.136788 2026] [:error] [pid 32471:tid 32486] [client 43.135.211.148:34910] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afhkV3mjpb9EYq6AqhIeLgAAAQw"]
[Mon May 04 20:24:08.487216 2026] [:error] [pid 32471:tid 32481] [client 34.24.211.32:53395] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afiP6Hmjpb9EYq6AqhJVDwAAAQc"]
[Mon May 04 20:24:08.978955 2026] [:error] [pid 3341:tid 3365] [client 34.24.211.32:57336] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afiP6E9o3_LordU0wW5SsgAAAJU"]
[Mon May 04 20:24:09.478440 2026] [:error] [pid 61043:tid 61081] [client 34.24.211.32:57928] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP6Z8-LwtfURjiAbC9UgAAAEY"]
[Mon May 04 21:03:54.084742 2026] [:error] [pid 61044:tid 61122] [client 43.166.242.189:51678] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afiZOkw8w2zZZXI6H1ufIwAAABQ"]
[Mon May 04 22:47:08.462224 2026] [:error] [pid 61044:tid 61108] [client 34.118.13.200:59248] [client 34.118.13.200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "afixbEw8w2zZZXI6H1uvPAAAAAY"]
[Mon May 04 23:11:50.594713 2026] [:error] [pid 61042:tid 61054] [client 43.157.191.20:52032] [client 43.157.191.20] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afi3NknAPPS1fjubA9Rr_gAAAMg"]
[Mon May 04 23:41:09.555718 2026] [:error] [pid 61150:tid 61176] [client 175.27.171.245:37382] [client 175.27.171.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afi-Fe8QXWVLiwIGVpelxgAAAVc"]
[Tue May 05 02:53:48.191509 2026] [:error] [pid 32471:tid 32490] [client 130.25.96.79:50372] [client 130.25.96.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.25.96.79, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afjrPHmjpb9EYq6AqhLIhQAAARA"]
[Tue May 05 02:53:48.196655 2026] [:error] [pid 32471:tid 32490] [client 130.25.96.79:50372] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 05 03:15:03.950102 2026] [:error] [pid 61042:tid 61058] [client 43.164.3.182:40112] [client 43.164.3.182] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afjwN0nAPPS1fjubA9SM-AAAAMw"]
[Tue May 05 04:47:20.366249 2026] [:error] [pid 39072:tid 39123] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Tue May 05 04:47:20.616648 2026] [:error] [pid 39072:tid 39116] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Tue May 05 04:47:20.864949 2026] [:error] [pid 39072:tid 39112] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-api.php
[Tue May 05 04:47:21.117851 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-atom.php
[Tue May 05 04:47:21.496612 2026] [:error] [pid 39072:tid 39124] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Tue May 05 04:47:21.743907 2026] [:error] [pid 39072:tid 39109] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue May 05 04:47:21.991518 2026] [:error] [pid 39072:tid 39113] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xmlsia.php
[Tue May 05 04:47:22.479447 2026] [:error] [pid 39072:tid 39110] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-inic3.php
[Tue May 05 04:47:22.735569 2026] [:error] [pid 39072:tid 39111] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Tue May 05 04:47:23.005753 2026] [:error] [pid 39072:tid 39129] [client 4.204.197.96:43105] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Tue May 05 04:47:23.251159 2026] [:error] [pid 39072:tid 39125] [client 4.204.197.96:43105] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "afkF2_olSHl4aAnrIovQswAAAFI"]
[Tue May 05 04:47:26.051219 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:43129] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "afkF3jaPrgTaiOD_15smNwAAAMU"]
[Tue May 05 04:47:27.843991 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:43076] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "afkF3zaPrgTaiOD_15smOwAAAMw"]
[Tue May 05 04:47:30.077347 2026] [:error] [pid 39071:tid 39084] [client 4.204.197.96:43128] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "afkF4ovmnRMz9gRzix1PawAAAAQ"]
[Tue May 05 04:47:30.651142 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:43119] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afkF4jaPrgTaiOD_15smQQAAAMU"]
[Tue May 05 04:47:31.387303 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:43104] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afkF4_0kT1BNjk46BkcLfQAAAJg"]
[Tue May 05 04:47:32.751485 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:43123] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afkF5DaPrgTaiOD_15smQwAAAMA"]
[Tue May 05 04:47:34.156437 2026] [:error] [pid 39071:tid 39080] [client 4.204.197.96:43089] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-firewall.php"] [unique_id "afkF5ovmnRMz9gRzix1PbgAAAAA"]
[Tue May 05 04:47:35.484494 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:43079] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "afkF5yepFwKgA_SKOHigZQAAAQs"]
[Tue May 05 04:47:36.264858 2026] [:error] [pid 39178:tid 39201] [client 4.204.197.96:43100] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "afkF6DaPrgTaiOD_15smRgAAANU"]
[Tue May 05 04:47:37.686459 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:43080] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "afkF6SepFwKgA_SKOHigagAAAQU"]
[Tue May 05 04:47:38.650141 2026] [:error] [pid 41055:tid 41080] [client 4.204.197.96:43120] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "afkF6iepFwKgA_SKOHigbwAAARY"]
[Tue May 05 04:47:39.969954 2026] [:error] [pid 39071:tid 39095] [client 4.204.197.96:43127] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "afkF64vmnRMz9gRzix1PcwAAAA8"]
[Tue May 05 04:47:42.194522 2026] [:error] [pid 39071:tid 39080] [client 4.204.197.96:43014] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "afkF7ovmnRMz9gRzix1PdgAAAAA"]
[Tue May 05 04:47:46.754696 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:43124] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "afkF8iepFwKgA_SKOHiggAAAARM"]
[Tue May 05 04:47:51.302717 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:43131] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ah25.php"] [unique_id "afkF9_olSHl4aAnrIovQwQAAAFM"]
[Tue May 05 04:47:54.905747 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:43112] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "afkF-iepFwKgA_SKOHigiwAAAQo"]
[Tue May 05 04:47:56.673131 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:43095] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "afkF_CepFwKgA_SKOHigjQAAAQI"]
[Tue May 05 04:47:59.017944 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:43132] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "afkF_zaPrgTaiOD_15smUwAAANE"]
[Tue May 05 04:48:00.389415 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:43088] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "afkGACepFwKgA_SKOHigkgAAARM"]
[Tue May 05 04:48:02.549988 2026] [:error] [pid 41055:tid 41069] [client 4.204.197.96:43026] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afkGAiepFwKgA_SKOHiglQAAAQs"]
[Tue May 05 04:48:03.703873 2026] [:error] [pid 39072:tid 39130] [client 4.204.197.96:43025] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afkGA_olSHl4aAnrIovQwwAAAFc"]
[Tue May 05 04:48:04.497970 2026] [:error] [pid 39178:tid 39183] [client 4.204.197.96:43027] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afkGBDaPrgTaiOD_15smYQAAAMM"]
[Tue May 05 04:48:06.089584 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:43102] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afkGBjaPrgTaiOD_15smZQAAANY"]
[Tue May 05 04:48:07.668728 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:42712] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afkGBzaPrgTaiOD_15smZgAAAM4"]
[Tue May 05 04:48:09.427713 2026] [:error] [pid 41055:tid 41067] [client 4.204.197.96:43011] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afkGCSepFwKgA_SKOHigmgAAAQk"]
[Tue May 05 04:48:10.333764 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:43017] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afkGCjaPrgTaiOD_15smagAAAMU"]
[Tue May 05 04:48:11.993538 2026] [:error] [pid 39178:tid 39200] [client 4.204.197.96:43024] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afkGCzaPrgTaiOD_15smbwAAANQ"]
[Tue May 05 04:48:13.580702 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:43099] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-slss.php"] [unique_id "afkGDfolSHl4aAnrIovQxQAAAFQ"]
[Tue May 05 04:48:15.372696 2026] [:error] [pid 39071:tid 39097] [client 4.204.197.96:43130] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-slss.php"] [unique_id "afkGD4vmnRMz9gRzix1PgwAAABE"]
[Tue May 05 04:48:17.086669 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:43047] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-slss.php"] [unique_id "afkGEfolSHl4aAnrIovQzAAAAFM"]
[Tue May 05 04:48:17.817076 2026] [:error] [pid 41055:tid 41058] [client 4.204.197.96:43028] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-slss.php"] [unique_id "afkGESepFwKgA_SKOHignQAAAQA"]
[Tue May 05 04:48:18.980392 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:43086] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "afkGEjaPrgTaiOD_15smcQAAAMg"]
[Tue May 05 04:48:22.530168 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:43010] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file30.php"] [unique_id "afkGFjaPrgTaiOD_15smcwAAANI"]
[Tue May 05 04:48:23.974350 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Tue May 05 04:48:24.191040 2026] [:error] [pid 41055:tid 41067] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Tue May 05 04:48:24.407197 2026] [:error] [pid 41055:tid 41073] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Tue May 05 04:48:24.648400 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Tue May 05 04:48:25.079932 2026] [:error] [pid 41055:tid 41081] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Tue May 05 04:48:25.294902 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue May 05 04:48:25.714538 2026] [:error] [pid 41055:tid 41076] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Tue May 05 04:48:25.935496 2026] [:error] [pid 41055:tid 41066] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Tue May 05 04:48:26.159365 2026] [:error] [pid 41055:tid 41065] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/asas.php
[Tue May 05 04:48:26.383358 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:43042] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Tue May 05 04:48:26.748945 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:43042] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afkGGiepFwKgA_SKOHigsQAAAQo"]
[Tue May 05 04:48:27.672780 2026] [:error] [pid 39073:tid 39149] [client 4.204.197.96:43033] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afkGG_0kT1BNjk46BkcLnAAAAI8"]
[Tue May 05 04:48:29.161263 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:43121] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afkGHf0kT1BNjk46BkcLoAAAAIo"]
[Tue May 05 04:48:30.263172 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:43094] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afkGHiepFwKgA_SKOHigswAAARU"]
[Tue May 05 04:48:31.187930 2026] [:error] [pid 39073:tid 39147] [client 4.204.197.96:43106] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adoms.php"] [unique_id "afkGH_0kT1BNjk46BkcLogAAAI0"]
[Tue May 05 04:48:32.565019 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:43090] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adoms.php"] [unique_id "afkGICepFwKgA_SKOHigugAAAQo"]
[Tue May 05 04:48:33.825701 2026] [:error] [pid 39073:tid 39148] [client 4.204.197.96:43016] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adoms.php"] [unique_id "afkGIf0kT1BNjk46BkcLpAAAAI4"]
[Tue May 05 04:48:34.721830 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:43015] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adoms.php"] [unique_id "afkGIvolSHl4aAnrIovQ0QAAAFM"]
[Tue May 05 04:48:36.273333 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:43035] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "afkGJCepFwKgA_SKOHigvwAAARU"]
[Tue May 05 04:48:37.720938 2026] [:error] [pid 39073:tid 39135] [client 4.204.197.96:43056] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "afkGJf0kT1BNjk46BkcLqwAAAIE"]
[Tue May 05 04:48:38.767183 2026] [:error] [pid 39073:tid 39141] [client 4.204.197.96:43122] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "afkGJv0kT1BNjk46BkcLrQAAAIc"]
[Tue May 05 04:48:40.390899 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:42696] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymn.php"] [unique_id "afkGKDaPrgTaiOD_15smfQAAAMI"]
[Tue May 05 04:48:42.041208 2026] [:error] [pid 39072:tid 39121] [client 4.204.197.96:43068] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "afkGKvolSHl4aAnrIovQ1QAAAE4"]
[Tue May 05 04:48:43.168352 2026] [:error] [pid 39071:tid 39083] [client 4.204.197.96:43009] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "afkGK4vmnRMz9gRzix1PkwAAAAM"]
[Tue May 05 04:48:44.393060 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:43064] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "afkGLDaPrgTaiOD_15smgQAAAMY"]
[Tue May 05 04:48:46.233015 2026] [:error] [pid 39071:tid 39089] [client 4.204.197.96:42699] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/eetu.php"] [unique_id "afkGLovmnRMz9gRzix1PlwAAAAk"]
[Tue May 05 04:48:46.862965 2026] [:error] [pid 39178:tid 39183] [client 4.204.197.96:43055] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afkGLjaPrgTaiOD_15smhwAAAMM"]
[Tue May 05 04:48:48.702338 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:43096] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afkGMDaPrgTaiOD_15smjwAAAMY"]
[Tue May 05 04:48:49.990718 2026] [:error] [pid 41055:tid 41072] [client 4.204.197.96:43067] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afkGMSepFwKgA_SKOHigwgAAAQ4"]
[Tue May 05 04:48:53.152903 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:43071] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afkGNTaPrgTaiOD_15smmQAAAMY"]
[Tue May 05 04:48:54.559779 2026] [:error] [pid 39073:tid 39154] [client 4.204.197.96:43008] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkGNv0kT1BNjk46BkcLtAAAAJQ"]
[Tue May 05 04:48:55.272415 2026] [:error] [pid 39073:tid 39144] [client 4.204.197.96:43082] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkGN_0kT1BNjk46BkcLtgAAAIo"]
[Tue May 05 04:48:56.041318 2026] [:error] [pid 41055:tid 41082] [client 4.204.197.96:43078] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkGOCepFwKgA_SKOHigxQAAARg"]
[Tue May 05 04:48:56.891573 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:43022] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kikikoko.php"] [unique_id "afkGODaPrgTaiOD_15smnQAAAMc"]
[Tue May 05 04:48:59.250281 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:43030] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "afkGOzaPrgTaiOD_15smogAAANM"]
[Tue May 05 04:49:01.968247 2026] [:error] [pid 39071:tid 39102] [client 4.204.197.96:43054] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "afkGPYvmnRMz9gRzix1PnAAAABY"]
[Tue May 05 04:49:03.198442 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:43114] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "afkGP_olSHl4aAnrIovQ2wAAAFM"]
[Tue May 05 04:49:05.066755 2026] [:error] [pid 39072:tid 39118] [client 4.204.197.96:43037] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "afkGQfolSHl4aAnrIovQ3AAAAEs"]
[Tue May 05 04:49:06.841395 2026] [:error] [pid 39071:tid 39095] [client 4.204.197.96:43103] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "afkGQovmnRMz9gRzix1PoQAAAA8"]
[Tue May 05 04:49:11.500932 2026] [:error] [pid 39178:tid 39193] [client 4.204.197.96:43049] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "afkGRzaPrgTaiOD_15snBwAAAM0"]
[Tue May 05 04:49:12.264097 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:43113] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "afkGSDaPrgTaiOD_15snCwAAAM8"]
[Tue May 05 04:49:13.106701 2026] [:error] [pid 41055:tid 41074] [client 4.204.197.96:42724] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xx.php"] [unique_id "afkGSSepFwKgA_SKOHig0QAAARA"]
[Tue May 05 04:49:19.204093 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:43045] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "afkGTzaPrgTaiOD_15snGwAAAMw"]
[Tue May 05 04:49:20.218627 2026] [:error] [pid 39073:tid 39140] [client 4.204.197.96:43109] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "afkGUP0kT1BNjk46BkcLwAAAAIY"]
[Tue May 05 04:49:22.086605 2026] [:error] [pid 39071:tid 39090] [client 4.204.197.96:43110] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "afkGUovmnRMz9gRzix1PpQAAAAo"]
[Tue May 05 04:49:23.253731 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:42720] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Jcrop.php"] [unique_id "afkGUzaPrgTaiOD_15snJwAAANA"]
[Tue May 05 04:49:24.408790 2026] [:error] [pid 39178:tid 39185] [client 4.204.197.96:42691] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "afkGVDaPrgTaiOD_15snLAAAAMU"]
[Tue May 05 04:49:25.360493 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:43066] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "afkGVTaPrgTaiOD_15snMAAAAMI"]
[Tue May 05 04:49:26.593656 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Tue May 05 04:49:26.805313 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue May 05 04:49:27.017532 2026] [:error] [pid 39178:tid 39184] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue May 05 04:49:27.376247 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/jk.php
[Tue May 05 04:49:27.605772 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Tue May 05 04:49:27.817933 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Tue May 05 04:49:28.048014 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Tue May 05 04:49:28.268626 2026] [:error] [pid 39178:tid 39188] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Tue May 05 04:49:28.479968 2026] [:error] [pid 39178:tid 39199] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue May 05 04:49:28.837643 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Tue May 05 04:49:30.186515 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43085] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-bonbon.php
[Tue May 05 04:49:33.414145 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43085] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/at.php"] [unique_id "afkGXTaPrgTaiOD_15snRQAAAME"]
[Tue May 05 04:49:39.442540 2026] [:error] [pid 39178:tid 39189] [client 4.204.197.96:43031] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/at.php"] [unique_id "afkGYzaPrgTaiOD_15snUwAAAMk"]
[Tue May 05 04:49:41.567136 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:42706] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/at.php"] [unique_id "afkGZSepFwKgA_SKOHihDAAAAQU"]
[Tue May 05 04:49:45.195346 2026] [:error] [pid 39073:tid 39151] [client 4.204.197.96:42710] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/at.php"] [unique_id "afkGaf0kT1BNjk46BkcL5AAAAJE"]
[Tue May 05 04:49:48.536034 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:43108] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "afkGbCepFwKgA_SKOHihEgAAAQI"]
[Tue May 05 04:49:50.517652 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:43134] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "afkGbv0kT1BNjk46BkcL7gAAAII"]
[Tue May 05 04:49:51.205097 2026] [:error] [pid 39073:tid 39137] [client 4.204.197.96:42693] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "afkGb_0kT1BNjk46BkcL7wAAAIM"]
[Tue May 05 04:49:52.494812 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:43020] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rithin.php"] [unique_id "afkGcCepFwKgA_SKOHihHQAAAQ0"]
[Tue May 05 04:49:54.690424 2026] [:error] [pid 39072:tid 39121] [client 4.204.197.96:43059] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afkGcvolSHl4aAnrIovQ-QAAAE4"]
[Tue May 05 04:49:55.583185 2026] [:error] [pid 39178:tid 39192] [client 4.204.197.96:43126] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afkGczaPrgTaiOD_15snYgAAAMw"]
[Tue May 05 04:49:56.572642 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:43111] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afkGdDaPrgTaiOD_15snZQAAAM4"]
[Tue May 05 04:49:57.991444 2026] [:error] [pid 39178:tid 39191] [client 4.204.197.96:42719] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afkGdTaPrgTaiOD_15snagAAAMs"]
[Tue May 05 04:49:59.036497 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:42723] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wuasr.php"] [unique_id "afkGdzaPrgTaiOD_15snbAAAANA"]
[Tue May 05 04:49:59.974449 2026] [:error] [pid 39072:tid 39118] [client 4.204.197.96:42741] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wuasr.php"] [unique_id "afkGd_olSHl4aAnrIovQ_QAAAEs"]
[Tue May 05 04:50:01.471502 2026] [:error] [pid 39178:tid 39201] [client 4.204.197.96:42747] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wuasr.php"] [unique_id "afkGeTaPrgTaiOD_15sncgAAANU"]
[Tue May 05 04:50:02.396963 2026] [:error] [pid 39073:tid 39156] [client 4.204.197.96:43018] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wuasr.php"] [unique_id "afkGev0kT1BNjk46BkcL-gAAAJY"]
[Tue May 05 04:50:05.250060 2026] [:error] [pid 39072:tid 39119] [client 4.204.197.96:42705] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "afkGffolSHl4aAnrIovREQAAAEw"]
[Tue May 05 04:50:08.000924 2026] [:error] [pid 39178:tid 39182] [client 4.204.197.96:43097] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "afkGgDaPrgTaiOD_15snpwAAAMI"]
[Tue May 05 04:50:10.038588 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:43062] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "afkGgjaPrgTaiOD_15snqwAAANI"]
[Tue May 05 04:50:10.828517 2026] [:error] [pid 41055:tid 41081] [client 4.204.197.96:43023] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/revealability.php"] [unique_id "afkGgiepFwKgA_SKOHihJwAAARc"]
[Tue May 05 04:50:12.141768 2026] [:error] [pid 41055:tid 41076] [client 4.204.197.96:42740] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "afkGhCepFwKgA_SKOHihKgAAARI"]
[Tue May 05 04:50:13.508635 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:42703] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "afkGhTaPrgTaiOD_15snswAAAM4"]
[Tue May 05 04:50:14.454590 2026] [:error] [pid 39073:tid 39157] [client 4.204.197.96:43101] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "afkGhv0kT1BNjk46BkcMGAAAAJc"]
[Tue May 05 04:50:16.473093 2026] [:error] [pid 41055:tid 41071] [client 4.204.197.96:43070] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wolv2.php"] [unique_id "afkGiCepFwKgA_SKOHihLAAAAQ0"]
[Tue May 05 04:50:18.090965 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:43115] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "afkGiv0kT1BNjk46BkcMHAAAAIU"]
[Tue May 05 04:50:24.463431 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:43043] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "afkGkCepFwKgA_SKOHihNgAAARE"]
[Tue May 05 04:50:25.527432 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:42744] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "afkGkf0kT1BNjk46BkcMKAAAAIw"]
[Tue May 05 04:50:29.918519 2026] [:error] [pid 39071:tid 39084] [client 4.204.197.96:43075] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/iov.php"] [unique_id "afkGlYvmnRMz9gRzix1PvAAAAAQ"]
[Tue May 05 04:50:34.486418 2026] [:error] [pid 39071:tid 39086] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Tue May 05 04:50:34.717166 2026] [:error] [pid 39071:tid 39091] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Tue May 05 04:50:34.944076 2026] [:error] [pid 39071:tid 39101] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue May 05 04:50:35.304787 2026] [:error] [pid 39071:tid 39099] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Tue May 05 04:50:35.516532 2026] [:error] [pid 39071:tid 39092] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Tue May 05 04:50:35.744917 2026] [:error] [pid 39071:tid 39090] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Tue May 05 04:50:36.281698 2026] [:error] [pid 39071:tid 39096] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Tue May 05 04:50:36.491476 2026] [:error] [pid 39071:tid 39082] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue May 05 04:50:36.722635 2026] [:error] [pid 39071:tid 39095] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/forbidals.php
[Tue May 05 04:50:36.947019 2026] [:error] [pid 39071:tid 39104] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Tue May 05 04:50:37.326993 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:43040] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Tue May 05 04:50:37.546142 2026] [:error] [pid 39071:tid 39085] [client 4.204.197.96:43040] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "afkGnYvmnRMz9gRzix1PzwAAAAU"]
[Tue May 05 04:50:38.803535 2026] [:error] [pid 39178:tid 39197] [client 4.204.197.96:43093] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "afkGnjaPrgTaiOD_15snzQAAANE"]
[Tue May 05 04:50:40.732275 2026] [:error] [pid 39178:tid 39183] [client 4.204.197.96:43034] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "afkGoDaPrgTaiOD_15sn0QAAAMM"]
[Tue May 05 04:50:44.876157 2026] [:error] [pid 39072:tid 39115] [client 4.204.197.96:42718] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-db.php"] [unique_id "afkGpPolSHl4aAnrIovRIQAAAEg"]
[Tue May 05 04:50:46.457526 2026] [:error] [pid 39072:tid 39124] [client 4.204.197.96:42709] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "afkGpvolSHl4aAnrIovRIgAAAFE"]
[Tue May 05 04:50:49.121498 2026] [:error] [pid 39072:tid 39111] [client 4.204.197.96:43012] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "afkGqfolSHl4aAnrIovRJAAAAEQ"]
[Tue May 05 04:50:50.638423 2026] [:error] [pid 39072:tid 39129] [client 4.204.197.96:42737] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "afkGqvolSHl4aAnrIovRKAAAAFY"]
[Tue May 05 04:50:52.594634 2026] [:error] [pid 39072:tid 39118] [client 4.204.197.96:43038] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "afkGrPolSHl4aAnrIovRKgAAAEs"]
[Tue May 05 04:51:04.764553 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:43083] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "afkGuDaPrgTaiOD_15sn6wAAANI"]
[Tue May 05 04:51:06.608798 2026] [:error] [pid 41055:tid 41082] [client 4.204.197.96:43098] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "afkGuiepFwKgA_SKOHihYgAAARg"]
[Tue May 05 04:51:12.008360 2026] [:error] [pid 39071:tid 39104] [client 4.204.197.96:42695] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "afkGwIvmnRMz9gRzix1P3QAAABg"]
[Tue May 05 04:51:15.591348 2026] [:error] [pid 39071:tid 39085] [client 4.204.197.96:42734] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "afkGw4vmnRMz9gRzix1P3wAAAAU"]
[Tue May 05 04:51:18.818087 2026] [:error] [pid 39178:tid 39200] [client 4.204.197.96:43029] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "afkGxjaPrgTaiOD_15sn9QAAANQ"]
[Tue May 05 04:51:24.032241 2026] [:error] [pid 41055:tid 41073] [client 4.204.197.96:43091] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ouh.php"] [unique_id "afkGzCepFwKgA_SKOHihbwAAAQ8"]
[Tue May 05 04:51:27.702464 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:42697] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afkGzyepFwKgA_SKOHihegAAARQ"]
[Tue May 05 04:51:29.645492 2026] [:error] [pid 41055:tid 41079] [client 4.204.197.96:43061] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afkG0SepFwKgA_SKOHihgAAAARU"]
[Tue May 05 04:51:30.979637 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:43039] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afkG0v0kT1BNjk46BkcMewAAAIw"]
[Tue May 05 04:51:32.229956 2026] [:error] [pid 39071:tid 39086] [client 4.204.197.96:43044] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afkG1IvmnRMz9gRzix1QCQAAAAY"]
[Tue May 05 04:51:33.044250 2026] [:error] [pid 39071:tid 39100] [client 4.204.197.96:42701] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "afkG1YvmnRMz9gRzix1QDAAAABQ"]
[Tue May 05 04:51:35.872970 2026] [:error] [pid 39071:tid 39099] [client 4.204.197.96:42949] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sko.php"] [unique_id "afkG14vmnRMz9gRzix1QFQAAABM"]
[Tue May 05 04:51:38.358849 2026] [:error] [pid 41055:tid 41062] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/sko.php
[Tue May 05 04:51:38.576408 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Tue May 05 04:51:38.788672 2026] [:error] [pid 41055:tid 41074] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cliner.php
[Tue May 05 04:51:39.000766 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sx10.php
[Tue May 05 04:51:39.215160 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Tue May 05 04:51:39.430295 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue May 05 04:51:39.646757 2026] [:error] [pid 41055:tid 41058] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/cc13.php
[Tue May 05 04:51:39.858959 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/fileas.php
[Tue May 05 04:51:40.101414 2026] [:error] [pid 41055:tid 41066] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue May 05 04:51:40.413527 2026] [:error] [pid 41055:tid 41061] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Tue May 05 04:51:40.627976 2026] [:error] [pid 41055:tid 41076] [client 4.204.197.96:42952] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Tue May 05 04:51:40.873419 2026] [:error] [pid 41055:tid 41062] [client 4.204.197.96:42952] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "afkG3CepFwKgA_SKOHihoQAAAQQ"]
[Tue May 05 04:51:41.467662 2026] [:error] [pid 39073:tid 39154] [client 4.204.197.96:43117] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "afkG3f0kT1BNjk46BkcMgwAAAJQ"]
[Tue May 05 04:51:42.220392 2026] [:error] [pid 39073:tid 39135] [client 4.204.197.96:42980] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "afkG3v0kT1BNjk46BkcMhAAAAIE"]
[Tue May 05 04:51:43.270682 2026] [:error] [pid 41055:tid 41067] [client 4.204.197.96:42717] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wkdec.php"] [unique_id "afkG3yepFwKgA_SKOHihogAAAQk"]
[Tue May 05 04:51:45.250289 2026] [:error] [pid 41055:tid 41077] [client 4.204.197.96:43060] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afkG4SepFwKgA_SKOHihpAAAARM"]
[Tue May 05 04:51:46.422765 2026] [:error] [pid 39072:tid 39115] [client 4.204.197.96:43041] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afkG4volSHl4aAnrIovRRgAAAEg"]
[Tue May 05 04:51:47.332499 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:43092] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afkG4zaPrgTaiOD_15soLgAAAM8"]
[Tue May 05 04:51:48.681808 2026] [:error] [pid 41055:tid 41078] [client 4.204.197.96:43074] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afkG5CepFwKgA_SKOHihpQAAARQ"]
[Tue May 05 04:51:49.507312 2026] [:error] [pid 39073:tid 39157] [client 4.204.197.96:42967] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afkG5f0kT1BNjk46BkcMhwAAAJc"]
[Tue May 05 04:51:50.139634 2026] [:error] [pid 41055:tid 41081] [client 4.204.197.96:43013] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afkG5iepFwKgA_SKOHihqAAAARc"]
[Tue May 05 04:51:51.120382 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:42692] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afkG5zaPrgTaiOD_15soNAAAAME"]
[Tue May 05 04:51:52.721927 2026] [:error] [pid 39072:tid 39131] [client 4.204.197.96:42697] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afkG6PolSHl4aAnrIovRSgAAAFg"]
[Tue May 05 04:51:54.686543 2026] [:error] [pid 39178:tid 39196] [client 4.204.197.96:43120] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "afkG6jaPrgTaiOD_15soOgAAANA"]
[Tue May 05 04:51:55.345822 2026] [:error] [pid 39073:tid 39147] [client 4.204.197.96:43123] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "afkG6_0kT1BNjk46BkcMjQAAAI0"]
[Tue May 05 04:51:56.955127 2026] [:error] [pid 39071:tid 39097] [client 4.204.197.96:42958] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "afkG7IvmnRMz9gRzix1QHQAAABE"]
[Tue May 05 04:51:58.899835 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:43104] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xy.php"] [unique_id "afkG7jaPrgTaiOD_15soQAAAANY"]
[Tue May 05 04:52:00.379143 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:43124] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "afkG8DaPrgTaiOD_15soRAAAAM8"]
[Tue May 05 04:52:02.022047 2026] [:error] [pid 39073:tid 39156] [client 4.204.197.96:42885] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "afkG8v0kT1BNjk46BkcMlgAAAJY"]
[Tue May 05 04:52:04.964502 2026] [:error] [pid 41055:tid 41062] [client 4.204.197.96:42727] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "afkG9CepFwKgA_SKOHihtQAAAQQ"]
[Tue May 05 04:52:05.791307 2026] [:error] [pid 39178:tid 39200] [client 4.204.197.96:42707] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/opts.php"] [unique_id "afkG9TaPrgTaiOD_15soTgAAANQ"]
[Tue May 05 04:52:06.974966 2026] [:error] [pid 39072:tid 39118] [client 4.204.197.96:43131] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "afkG9volSHl4aAnrIovRUwAAAEs"]
[Tue May 05 04:52:09.787486 2026] [:error] [pid 39072:tid 39123] [client 4.204.197.96:43095] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "afkG-folSHl4aAnrIovRWQAAAFA"]
[Tue May 05 04:52:11.024750 2026] [:error] [pid 39071:tid 39084] [client 4.204.197.96:43089] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "afkG-4vmnRMz9gRzix1QIgAAAAQ"]
[Tue May 05 04:52:12.553416 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:42955] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yellow.php"] [unique_id "afkG_CepFwKgA_SKOHihugAAAQI"]
[Tue May 05 04:52:13.164423 2026] [:error] [pid 39071:tid 39093] [client 4.204.197.96:43125] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "afkG_YvmnRMz9gRzix1QJAAAAA0"]
[Tue May 05 04:52:15.163931 2026] [:error] [pid 41055:tid 41061] [client 4.204.197.96:42694] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "afkG_yepFwKgA_SKOHihvgAAAQM"]
[Tue May 05 04:52:16.630241 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43057] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "afkHADaPrgTaiOD_15soVgAAAME"]
[Tue May 05 04:52:18.708783 2026] [:error] [pid 41055:tid 41065] [client 4.204.197.96:43069] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hook.php"] [unique_id "afkHAiepFwKgA_SKOHihxAAAAQc"]
[Tue May 05 04:52:22.469934 2026] [:error] [pid 39072:tid 39115] [client 4.204.197.96:42726] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/racs3.php"] [unique_id "afkHBvolSHl4aAnrIovRZAAAAEg"]
[Tue May 05 04:52:24.604977 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43021] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/racs3.php"] [unique_id "afkHCDaPrgTaiOD_15soXgAAAME"]
[Tue May 05 04:52:26.967985 2026] [:error] [pid 41055:tid 41058] [client 4.204.197.96:43087] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/racs3.php"] [unique_id "afkHCiepFwKgA_SKOHihzAAAAQA"]
[Tue May 05 04:52:29.427858 2026] [:error] [pid 39073:tid 39158] [client 4.204.197.96:43053] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/racs3.php"] [unique_id "afkHDf0kT1BNjk46BkcMmQAAAJg"]
[Tue May 05 04:52:30.515499 2026] [:error] [pid 39071:tid 39101] [client 4.204.197.96:43081] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "afkHDovmnRMz9gRzix1QLwAAABU"]
[Tue May 05 04:52:31.913444 2026] [:error] [pid 41055:tid 41070] [client 4.204.197.96:43107] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "afkHDyepFwKgA_SKOHih0QAAAQw"]
[Tue May 05 04:52:33.004421 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:43050] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "afkHETaPrgTaiOD_15sobAAAAM4"]
[Tue May 05 04:52:35.058555 2026] [:error] [pid 39178:tid 39190] [client 4.204.197.96:43019] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zzkhe.php"] [unique_id "afkHEzaPrgTaiOD_15socQAAAMo"]
[Tue May 05 04:52:37.620224 2026] [:error] [pid 39073:tid 39150] [client 4.204.197.96:42739] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "afkHFf0kT1BNjk46BkcMowAAAJA"]
[Tue May 05 04:52:39.166300 2026] [:error] [pid 39178:tid 39193] [client 4.204.197.96:42700] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "afkHFzaPrgTaiOD_15sodwAAAM0"]
[Tue May 05 04:52:39.769210 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:43024] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/samll.php"] [unique_id "afkHFyepFwKgA_SKOHih1wAAAQo"]
[Tue May 05 04:52:41.410475 2026] [:error] [pid 39072:tid 39112] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Tue May 05 04:52:41.620242 2026] [:error] [pid 39072:tid 39107] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Tue May 05 04:52:41.843119 2026] [:error] [pid 39072:tid 39117] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xml.php
[Tue May 05 04:52:42.069746 2026] [:error] [pid 39072:tid 39108] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/xinder.php
[Tue May 05 04:52:42.279451 2026] [:error] [pid 39072:tid 39113] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue May 05 04:52:42.495562 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/academy.php
[Tue May 05 04:52:42.715122 2026] [:error] [pid 39072:tid 39124] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/owl.php
[Tue May 05 04:52:42.956507 2026] [:error] [pid 39072:tid 39111] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Tue May 05 04:52:43.365075 2026] [:error] [pid 39072:tid 39128] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xm.php
[Tue May 05 04:52:43.582489 2026] [:error] [pid 39072:tid 39126] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/do.php
[Tue May 05 04:52:43.804217 2026] [:error] [pid 39072:tid 39119] [client 4.204.197.96:42730] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Tue May 05 04:52:44.010191 2026] [:error] [pid 39072:tid 39130] [client 4.204.197.96:42730] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "afkHHPolSHl4aAnrIovReQAAAFc"]
[Tue May 05 04:52:47.787392 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:43132] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "afkHHzaPrgTaiOD_15sohgAAAMc"]
[Tue May 05 04:52:52.062591 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:42944] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "afkHJP0kT1BNjk46BkcMrgAAAII"]
[Tue May 05 04:52:53.405552 2026] [:error] [pid 39071:tid 39104] [client 4.204.197.96:43112] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "afkHJYvmnRMz9gRzix1QPgAAABg"]
[Tue May 05 04:52:55.957120 2026] [:error] [pid 41055:tid 41060] [client 4.204.197.96:43026] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasfu.php"] [unique_id "afkHJyepFwKgA_SKOHih5QAAAQI"]
[Tue May 05 04:53:02.320643 2026] [:error] [pid 39178:tid 39203] [client 4.204.197.96:42994] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasfu.php"] [unique_id "afkHLjaPrgTaiOD_15solwAAANc"]
[Tue May 05 04:53:04.010327 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:42696] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasfu.php"] [unique_id "afkHMDaPrgTaiOD_15somgAAAMY"]
[Tue May 05 04:53:05.388835 2026] [:error] [pid 39073:tid 39151] [client 4.204.197.96:42960] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yasfu.php"] [unique_id "afkHMf0kT1BNjk46BkcMtgAAAJE"]
[Tue May 05 04:53:06.485819 2026] [:error] [pid 41055:tid 41064] [client 4.204.197.96:43128] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "afkHMiepFwKgA_SKOHih7AAAAQY"]
[Tue May 05 04:53:07.325808 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:42721] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "afkHMzaPrgTaiOD_15sooAAAANI"]
[Tue May 05 04:53:08.170819 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:43129] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "afkHNDaPrgTaiOD_15soogAAANg"]
[Tue May 05 04:53:08.961973 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:43096] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "afkHNDaPrgTaiOD_15sopwAAAM4"]
[Tue May 05 04:53:09.933168 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43028] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "afkHNTaPrgTaiOD_15soqgAAAME"]
[Tue May 05 04:53:10.919197 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:42698] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "afkHNjaPrgTaiOD_15sorAAAAMA"]
[Tue May 05 04:53:11.676568 2026] [:error] [pid 39071:tid 39083] [client 4.204.197.96:43135] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "afkHN4vmnRMz9gRzix1QPwAAAAM"]
[Tue May 05 04:53:12.928567 2026] [:error] [pid 39071:tid 39102] [client 4.204.197.96:42704] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-update.php"] [unique_id "afkHOIvmnRMz9gRzix1QQgAAABY"]
[Tue May 05 04:53:14.074129 2026] [:error] [pid 39071:tid 39098] [client 4.204.197.96:43133] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "afkHOovmnRMz9gRzix1QRQAAABI"]
[Tue May 05 04:53:16.287972 2026] [:error] [pid 39072:tid 39116] [client 4.204.197.96:42722] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "afkHPPolSHl4aAnrIovRmAAAAEk"]
[Tue May 05 04:53:17.512368 2026] [:error] [pid 39071:tid 39089] [client 4.204.197.96:42725] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "afkHPYvmnRMz9gRzix1QSwAAAAk"]
[Tue May 05 04:53:19.094475 2026] [:error] [pid 39072:tid 39127] [client 4.204.197.96:43068] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ok.php"] [unique_id "afkHP_olSHl4aAnrIovRmgAAAFQ"]
[Tue May 05 04:53:20.962918 2026] [:error] [pid 39071:tid 39094] [client 4.204.197.96:43105] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "afkHQIvmnRMz9gRzix1QUAAAAA4"]
[Tue May 05 04:53:22.326876 2026] [:error] [pid 41055:tid 41073] [client 4.204.197.96:42893] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "afkHQiepFwKgA_SKOHih_AAAAQ8"]
[Tue May 05 04:53:24.039279 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:43032] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "afkHRP0kT1BNjk46BkcMxAAAAIg"]
[Tue May 05 04:53:25.310080 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:42690] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lala.php"] [unique_id "afkHRTaPrgTaiOD_15sowQAAAM4"]
[Tue May 05 04:53:34.395818 2026] [:error] [pid 39178:tid 39190] [client 4.204.197.96:43003] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell20211028.php"] [unique_id "afkHTjaPrgTaiOD_15so5gAAAMo"]
[Tue May 05 04:53:37.841128 2026] [:error] [pid 41055:tid 41067] [client 4.204.197.96:43052] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell20211028.php"] [unique_id "afkHUSepFwKgA_SKOHiiDAAAAQk"]
[Tue May 05 04:53:41.910113 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:43077] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clirp.php"] [unique_id "afkHVYvmnRMz9gRzix1QYgAAAAg"]
[Tue May 05 04:53:42.490987 2026] [:error] [pid 39073:tid 39138] [client 4.204.197.96:43106] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clirp.php"] [unique_id "afkHVv0kT1BNjk46BkcM0wAAAIQ"]
[Tue May 05 04:53:44.205734 2026] [:error] [pid 39073:tid 39153] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/clirp.php
[Tue May 05 04:53:44.421770 2026] [:error] [pid 39073:tid 39135] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/rendi59.php
[Tue May 05 04:53:44.643604 2026] [:error] [pid 39073:tid 39136] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Tue May 05 04:53:44.852324 2026] [:error] [pid 39073:tid 39148] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Tue May 05 04:53:45.070747 2026] [:error] [pid 39073:tid 39143] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Tue May 05 04:53:45.644481 2026] [:error] [pid 39073:tid 39140] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/ccu.php
[Tue May 05 04:53:45.949642 2026] [:error] [pid 39073:tid 39141] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Tue May 05 04:53:46.195027 2026] [:error] [pid 39073:tid 39139] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aaa.php
[Tue May 05 04:53:46.405014 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kd4xalrg7m.php
[Tue May 05 04:53:46.614493 2026] [:error] [pid 39073:tid 39134] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue May 05 04:53:46.824752 2026] [:error] [pid 39073:tid 39154] [client 4.204.197.96:43080] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xrm.php
[Tue May 05 04:53:47.030384 2026] [:error] [pid 39073:tid 39153] [client 4.204.197.96:43080] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afkHW_0kT1BNjk46BkcM7wAAAJM"]
[Tue May 05 04:53:49.247578 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:43016] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afkHXf0kT1BNjk46BkcM8wAAAIg"]
[Tue May 05 04:53:53.618608 2026] [:error] [pid 39178:tid 39186] [client 4.204.197.96:43017] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afkHYTaPrgTaiOD_15so-gAAAMY"]
[Tue May 05 04:53:56.968206 2026] [:error] [pid 39178:tid 39187] [client 4.204.197.96:42731] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-asudo.php"] [unique_id "afkHZDaPrgTaiOD_15spAwAAAMc"]
[Tue May 05 04:53:58.122172 2026] [:error] [pid 39072:tid 39109] [client 4.204.197.96:42741] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "afkHZvolSHl4aAnrIovRxQAAAEI"]
[Tue May 05 04:53:59.621955 2026] [:error] [pid 41055:tid 41058] [client 4.204.197.96:43011] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "afkHZyepFwKgA_SKOHiiOQAAAQA"]
[Tue May 05 04:54:01.446602 2026] [:error] [pid 41055:tid 41063] [client 4.204.197.96:43110] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "afkHaSepFwKgA_SKOHiiPAAAAQU"]
[Tue May 05 04:54:03.416113 2026] [:error] [pid 39072:tid 39130] [client 4.204.197.96:42708] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file3.php"] [unique_id "afkHa_olSHl4aAnrIovRyAAAAFc"]
[Tue May 05 04:54:04.815381 2026] [:error] [pid 39073:tid 39142] [client 4.204.197.96:43059] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "afkHbP0kT1BNjk46BkcNDAAAAIg"]
[Tue May 05 04:54:05.458227 2026] [:error] [pid 39178:tid 39194] [client 4.204.197.96:43014] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "afkHbTaPrgTaiOD_15spCQAAAM4"]
[Tue May 05 04:54:06.999785 2026] [:error] [pid 41055:tid 41065] [client 4.204.197.96:43025] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "afkHbiepFwKgA_SKOHiiRwAAAQc"]
[Tue May 05 04:54:08.262079 2026] [:error] [pid 39072:tid 39114] [client 4.204.197.96:43048] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/G-In.php"] [unique_id "afkHcPolSHl4aAnrIovR0AAAAEc"]
[Tue May 05 04:54:09.936114 2026] [:error] [pid 39072:tid 39131] [client 4.204.197.96:43099] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "afkHcfolSHl4aAnrIovR1AAAAFg"]
[Tue May 05 04:54:14.240785 2026] [:error] [pid 39178:tid 39204] [client 4.204.197.96:43103] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-gr.php"] [unique_id "afkHdjaPrgTaiOD_15spJAAAANg"]
[Tue May 05 04:54:25.426572 2026] [:error] [pid 39178:tid 39198] [client 4.204.197.96:42964] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "afkHgTaPrgTaiOD_15spSQAAANI"]
[Tue May 05 04:54:28.097023 2026] [:error] [pid 39178:tid 39195] [client 4.204.197.96:42973] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "afkHhDaPrgTaiOD_15spUAAAAM8"]
[Tue May 05 04:54:31.987452 2026] [:error] [pid 39071:tid 39099] [client 4.204.197.96:43015] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "afkHh4vmnRMz9gRzix1QiAAAABM"]
[Tue May 05 04:54:33.494151 2026] [:error] [pid 39178:tid 39180] [client 4.204.197.96:43070] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mans.php"] [unique_id "afkHiTaPrgTaiOD_15spVgAAAMA"]
[Tue May 05 04:54:46.289747 2026] [:error] [pid 39071:tid 39081] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Tue May 05 04:54:46.498803 2026] [:error] [pid 39071:tid 39090] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Tue May 05 04:54:46.708178 2026] [:error] [pid 39071:tid 39099] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-acc.php
[Tue May 05 04:54:46.919047 2026] [:error] [pid 39071:tid 39093] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue May 05 04:54:47.127905 2026] [:error] [pid 39071:tid 39083] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xx.php
[Tue May 05 04:54:47.614138 2026] [:error] [pid 39071:tid 39097] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Tue May 05 04:54:47.832306 2026] [:error] [pid 39071:tid 39084] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue May 05 04:54:48.041941 2026] [:error] [pid 39071:tid 39080] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Tue May 05 04:54:48.481886 2026] [:error] [pid 39071:tid 39088] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_ok.php
[Tue May 05 04:54:48.955032 2026] [:error] [pid 39071:tid 39098] [client 4.204.197.96:43134] File does not exist: /usr/local/apache/htdocs/suspended-page/file88.php
[Tue May 05 04:54:49.160899 2026] [:error] [pid 39071:tid 39101] [client 4.204.197.96:43134] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "afkHmYvmnRMz9gRzix1QqgAAABU"]
[Tue May 05 04:54:51.785316 2026] [:error] [pid 39072:tid 39115] [client 4.204.197.96:43108] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "afkHm_olSHl4aAnrIovR_wAAAEg"]
[Tue May 05 04:54:53.356055 2026] [:error] [pid 41055:tid 41075] [client 4.204.197.96:43058] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "afkHnSepFwKgA_SKOHiilwAAARE"]
[Tue May 05 04:54:54.208964 2026] [:error] [pid 39073:tid 39148] [client 4.204.197.96:43046] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file32.php"] [unique_id "afkHnv0kT1BNjk46BkcNPQAAAI4"]
[Tue May 05 04:54:55.186602 2026] [:error] [pid 39071:tid 39080] [client 4.204.197.96:43076] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "afkHn4vmnRMz9gRzix1QuAAAAAA"]
[Tue May 05 04:54:56.981910 2026] [:error] [pid 41055:tid 41080] [client 4.204.197.96:42693] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "afkHoCepFwKgA_SKOHiioQAAARY"]
[Tue May 05 04:54:58.492564 2026] [:error] [pid 39073:tid 39146] [client 4.204.197.96:43023] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "afkHov0kT1BNjk46BkcNRAAAAIw"]
[Tue May 05 04:55:00.985196 2026] [:error] [pid 39178:tid 39202] [client 4.204.197.96:43097] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-wp.php"] [unique_id "afkHpDaPrgTaiOD_15sppQAAANY"]
[Tue May 05 04:55:05.626963 2026] [:error] [pid 39073:tid 39135] [client 4.204.197.96:43118] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afkHqf0kT1BNjk46BkcNXQAAAIE"]
[Tue May 05 04:55:10.701594 2026] [:error] [pid 41055:tid 41068] [client 4.204.197.96:43038] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afkHriepFwKgA_SKOHiiuQAAAQo"]
[Tue May 05 04:55:11.825149 2026] [:error] [pid 39071:tid 39098] [client 4.204.197.96:43018] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afkHr4vmnRMz9gRzix1QyAAAABI"]
[Tue May 05 04:55:12.653826 2026] [:error] [pid 39178:tid 39181] [client 4.204.197.96:43009] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afkHsDaPrgTaiOD_15spsQAAAME"]
[Tue May 05 10:08:24.956949 2026] [:error] [pid 39071:tid 39096] [client 43.162.95.192:46546] [client 43.162.95.192] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aflRGIvmnRMz9gRzix36UwAAABA"]
[Tue May 05 11:29:49.683536 2026] [:error] [pid 25835:tid 25857] [client 162.14.66.219:56760] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aflkLVDT5nGJyh1439xJAAAAARQ"]
[Tue May 05 12:16:38.938623 2026] [:error] [pid 25743:tid 25747] [client 43.166.224.244:54620] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aflvJm-PCMRhF5DdUnN91AAAAAA"]
[Tue May 05 12:23:39.642929 2026] [:error] [pid 25745:tid 25821] [client 216.81.248.217:36658] [client 216.81.248.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aflwy5sd7hb7vrvCNBnh8wAAANQ"]
[Tue May 05 16:26:48.730298 2026] [:error] [pid 25744:tid 25775] [client 119.28.89.249:57122] [client 119.28.89.249] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afmpyCR8IuyzjkW06OO7zAAAAIE"]
[Tue May 05 18:42:35.394394 2026] [:error] [pid 25744:tid 25790] [client 43.167.236.228:34992] [client 43.167.236.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afnJmyR8IuyzjkW06OPYRQAAAJA"]
[Tue May 05 22:06:17.206499 2026] [:error] [pid 2324:tid 2345] [client 194.62.107.79:44721] [client 194.62.107.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "afn5WWqe2hrcI52A1HygkgAAAVM"]
[Tue May 05 22:20:20.103162 2026] [:error] [pid 2324:tid 2331] [client 43.165.167.69:59920] [client 43.165.167.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afn8pGqe2hrcI52A1HykTAAAAUU"]
[Tue May 05 22:50:23.036274 2026] [:error] [pid 2324:tid 2344] [client 86.148.185.19:55821] [client 86.148.185.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.148.185.19, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afoDr2qe2hrcI52A1HytzgAAAVI"]
[Tue May 05 22:50:23.041140 2026] [:error] [pid 2324:tid 2344] [client 86.148.185.19:55821] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 06 00:26:47.385204 2026] [:error] [pid 25743:tid 25759] [client 124.156.225.181:59898] [client 124.156.225.181] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afoaR2-PCMRhF5DdUnMk1wAAAAw"]
[Wed May 06 04:50:34.377714 2026] [:error] [pid 48867:tid 48889] [client 170.106.11.141:58336] [client 170.106.11.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afpYGlZQ-8ZcCbMZPy73AQAAANM"]
[Wed May 06 07:47:05.577674 2026] [:error] [pid 9659:tid 9754] [client 46.185.135.93:62946] [client 46.185.135.93] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 46.185.135.93, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afqBefwJnWjd8JHpBts7OAAAANQ"]
[Wed May 06 07:47:05.583251 2026] [:error] [pid 9659:tid 9754] [client 46.185.135.93:62946] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 06 10:16:50.215187 2026] [:error] [pid 9789:tid 9807] [client 104.248.174.178:56716] [client 104.248.174.178] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.248.174.178, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "afqkkj_YStPJSCHPkUUjKAAAAFA"]
[Wed May 06 10:16:50.219336 2026] [:error] [pid 9789:tid 9807] [client 104.248.174.178:56716] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 10:27:34.793869 2026] [:error] [pid 9789:tid 9791] [client 159.65.117.193:61734] [client 159.65.117.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.117.193, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "afqnFj_YStPJSCHPkUUltAAAAEA"]
[Wed May 06 10:27:34.798840 2026] [:error] [pid 9789:tid 9791] [client 159.65.117.193:61734] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 10:33:42.161081 2026] [:error] [pid 9664:tid 9774] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Wed May 06 10:33:42.371558 2026] [:error] [pid 9664:tid 9778] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed May 06 10:33:43.044207 2026] [:error] [pid 9664:tid 9773] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Wed May 06 10:33:43.263493 2026] [:error] [pid 9664:tid 9763] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Wed May 06 10:33:43.474422 2026] [:error] [pid 9664:tid 9762] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 06 10:33:43.747883 2026] [:error] [pid 9664:tid 9784] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Wed May 06 10:33:43.957547 2026] [:error] [pid 9664:tid 9765] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Wed May 06 10:33:44.379843 2026] [:error] [pid 9664:tid 9777] [client 20.151.0.198:15696] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Wed May 06 10:33:44.586891 2026] [:error] [pid 9664:tid 9781] [client 20.151.0.198:15696] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "afqoiAH4OZbrg1SjsBPzLAAAAJM"]
[Wed May 06 10:33:45.300457 2026] [:error] [pid 13443:tid 13461] [client 20.151.0.198:15716] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "afqoiQCyfZallDmsQrdzvgAAAVA"]
[Wed May 06 10:33:46.480033 2026] [:error] [pid 13443:tid 13457] [client 20.151.0.198:16330] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "afqoigCyfZallDmsQrdzwwAAAUw"]
[Wed May 06 10:33:47.633722 2026] [:error] [pid 13414:tid 13430] [client 20.151.0.198:15680] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx1.php"] [unique_id "afqoi0uJQpWjVpJTu_npzwAAAQ4"]
[Wed May 06 10:33:48.483921 2026] [:error] [pid 63810:tid 63814] [client 20.151.0.198:15714] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "afqojHpnbsN9Zf6i5IEXowAAAYA"]
[Wed May 06 10:33:50.275632 2026] [:error] [pid 9664:tid 9785] [client 20.151.0.198:15728] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "afqojgH4OZbrg1SjsBPzLwAAAJc"]
[Wed May 06 10:33:51.920649 2026] [:error] [pid 13414:tid 13424] [client 20.151.0.198:15700] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "afqoj0uJQpWjVpJTu_np0QAAAQg"]
[Wed May 06 10:33:52.754054 2026] [:error] [pid 9653:tid 9710] [client 20.151.0.198:15723] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xv.php"] [unique_id "afqokKhJ49Xc4dqq0B5sSQAAAAw"]
[Wed May 06 10:33:53.440998 2026] [:error] [pid 9653:tid 9707] [client 20.151.0.198:15736] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "afqokahJ49Xc4dqq0B5sSgAAAAk"]
[Wed May 06 10:33:54.331169 2026] [:error] [pid 9653:tid 9713] [client 20.151.0.198:16336] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "afqokqhJ49Xc4dqq0B5sSwAAAA8"]
[Wed May 06 10:33:55.304379 2026] [:error] [pid 9653:tid 9709] [client 20.151.0.198:16339] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "afqok6hJ49Xc4dqq0B5sTQAAAAs"]
[Wed May 06 10:33:56.472677 2026] [:error] [pid 9659:tid 9739] [client 20.151.0.198:15712] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x56.php"] [unique_id "afqolPwJnWjd8JHpBttQYQAAAMU"]
[Wed May 06 10:33:57.788473 2026] [:error] [pid 13414:tid 13431] [client 20.151.0.198:15731] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "afqolUuJQpWjVpJTu_np1QAAAQ8"]
[Wed May 06 10:33:58.757877 2026] [:error] [pid 9659:tid 9743] [client 20.151.0.198:15726] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "afqolvwJnWjd8JHpBttQYgAAAMk"]
[Wed May 06 10:34:00.365884 2026] [:error] [pid 13443:tid 13464] [client 20.151.0.198:15701] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "afqomACyfZallDmsQrdz2QAAAVM"]
[Wed May 06 10:34:01.544394 2026] [:error] [pid 13443:tid 13459] [client 20.151.0.198:16328] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htaccess.php"] [unique_id "afqomQCyfZallDmsQrdz5gAAAU4"]
[Wed May 06 10:34:02.777776 2026] [:error] [pid 9653:tid 9719] [client 20.151.0.198:15692] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "afqomqhJ49Xc4dqq0B5sVQAAABU"]
[Wed May 06 10:34:03.716134 2026] [:error] [pid 9659:tid 9742] [client 20.151.0.198:16343] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "afqom_wJnWjd8JHpBttQZQAAAMg"]
[Wed May 06 10:34:05.430929 2026] [:error] [pid 63810:tid 63819] [client 20.151.0.198:15681] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "afqonXpnbsN9Zf6i5IEXvAAAAYU"]
[Wed May 06 10:34:07.312637 2026] [:error] [pid 13414:tid 13423] [client 20.151.0.198:15705] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/readme.php"] [unique_id "afqon0uJQpWjVpJTu_np2gAAAQc"]
[Wed May 06 10:34:08.579687 2026] [:error] [pid 63810:tid 63826] [client 20.151.0.198:15687] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "afqooHpnbsN9Zf6i5IEXwQAAAYw"]
[Wed May 06 10:34:09.827692 2026] [:error] [pid 13443:tid 13453] [client 20.151.0.198:15738] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "afqooQCyfZallDmsQrdz8wAAAUg"]
[Wed May 06 10:34:11.661112 2026] [:error] [pid 63810:tid 63824] [client 20.151.0.198:15721] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "afqoo3pnbsN9Zf6i5IEXxAAAAYo"]
[Wed May 06 10:34:14.015132 2026] [:error] [pid 9664:tid 9775] [client 20.151.0.198:15742] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x50.php"] [unique_id "afqopgH4OZbrg1SjsBPzaAAAAI0"]
[Wed May 06 10:34:15.360669 2026] [:error] [pid 9789:tid 9792] [client 20.151.0.198:15689] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "afqopz_YStPJSCHPkUUovwAAAEE"]
[Wed May 06 10:34:16.694998 2026] [:error] [pid 9653:tid 9720] [client 20.151.0.198:15682] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "afqoqKhJ49Xc4dqq0B5sZAAAABY"]
[Wed May 06 10:34:20.218040 2026] [:error] [pid 13443:tid 13460] [client 20.151.0.198:15734] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "afqorACyfZallDmsQrd0HgAAAU8"]
[Wed May 06 10:34:22.576149 2026] [:error] [pid 9789:tid 9812] [client 20.151.0.198:15713] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fv.php"] [unique_id "afqorj_YStPJSCHPkUUoyAAAAFU"]
[Wed May 06 10:34:24.288036 2026] [:error] [pid 9653:tid 9715] [client 20.151.0.198:16337] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "afqosKhJ49Xc4dqq0B5saAAAABE"]
[Wed May 06 10:34:25.645618 2026] [:error] [pid 9789:tid 9813] [client 20.151.0.198:16334] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "afqosT_YStPJSCHPkUUoywAAAFY"]
[Wed May 06 10:34:26.662917 2026] [:error] [pid 9789:tid 9804] [client 20.151.0.198:16320] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "afqosj_YStPJSCHPkUUozQAAAE0"]
[Wed May 06 10:34:27.609532 2026] [:error] [pid 13443:tid 13462] [client 20.151.0.198:15703] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "afqoswCyfZallDmsQrd0IQAAAVE"]
[Wed May 06 10:34:28.266476 2026] [:error] [pid 9789:tid 9791] [client 20.151.0.198:15699] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "afqotD_YStPJSCHPkUUozwAAAEA"]
[Wed May 06 10:34:28.950549 2026] [:error] [pid 13443:tid 13446] [client 20.151.0.198:16355] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "afqotACyfZallDmsQrd0IwAAAUE"]
[Wed May 06 10:34:29.824001 2026] [:error] [pid 63810:tid 63821] [client 20.151.0.198:15730] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "afqotXpnbsN9Zf6i5IEX1wAAAYc"]
[Wed May 06 10:34:30.725704 2026] [:error] [pid 9659:tid 9745] [client 20.151.0.198:16288] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lsd.php"] [unique_id "afqotvwJnWjd8JHpBttQawAAAMs"]
[Wed May 06 10:34:32.893830 2026] [:error] [pid 13414:tid 13436] [client 20.151.0.198:15718] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afqouEuJQpWjVpJTu_np4QAAARQ"]
[Wed May 06 10:34:34.637973 2026] [:error] [pid 13414:tid 13439] [client 20.151.0.198:16322] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afqoukuJQpWjVpJTu_np4wAAARc"]
[Wed May 06 10:34:38.746139 2026] [:error] [pid 13443:tid 13454] [client 20.151.0.198:16357] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afqovgCyfZallDmsQrd0KQAAAUk"]
[Wed May 06 10:34:39.610449 2026] [:error] [pid 63810:tid 63822] [client 20.151.0.198:15719] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afqov3pnbsN9Zf6i5IEX2wAAAYg"]
[Wed May 06 10:34:40.071394 2026] [:error] [pid 9664:tid 9778] [client 20.151.0.198:15686] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "afqowAH4OZbrg1SjsBPzeAAAAJA"]
[Wed May 06 10:34:41.589469 2026] [:error] [pid 13443:tid 13452] [client 20.151.0.198:15741] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "afqowQCyfZallDmsQrd0LAAAAUc"]
[Wed May 06 10:34:42.407458 2026] [:error] [pid 63810:tid 63814] [client 20.151.0.198:15715] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wsd.php"] [unique_id "afqownpnbsN9Zf6i5IEX3QAAAYA"]
[Wed May 06 10:34:44.151635 2026] [:error] [pid 63810:tid 63830] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Wed May 06 10:34:44.368784 2026] [:error] [pid 63810:tid 63816] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Wed May 06 10:34:44.587038 2026] [:error] [pid 63810:tid 63835] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Wed May 06 10:34:44.815801 2026] [:error] [pid 63810:tid 63836] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Wed May 06 10:34:45.046397 2026] [:error] [pid 63810:tid 63819] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed May 06 10:34:45.262620 2026] [:error] [pid 63810:tid 63815] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Wed May 06 10:34:45.487782 2026] [:error] [pid 63810:tid 63817] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed May 06 10:34:46.496717 2026] [:error] [pid 63810:tid 63820] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Wed May 06 10:34:46.711018 2026] [:error] [pid 63810:tid 63825] [client 20.151.0.198:16363] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Wed May 06 10:34:46.930881 2026] [:error] [pid 63810:tid 63824] [client 20.151.0.198:16363] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "afqoxnpnbsN9Zf6i5IEX7AAAAYo"]
[Wed May 06 10:34:48.438946 2026] [:error] [pid 9789:tid 9794] [client 20.151.0.198:15740] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "afqoyD_YStPJSCHPkUUo0gAAAEM"]
[Wed May 06 10:34:49.364314 2026] [:error] [pid 13443:tid 13452] [client 20.151.0.198:15733] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "afqoyQCyfZallDmsQrd0NQAAAUc"]
[Wed May 06 10:34:51.512353 2026] [:error] [pid 9789:tid 9815] [client 20.151.0.198:15698] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lv.php"] [unique_id "afqoyz_YStPJSCHPkUUo1gAAAFg"]
[Wed May 06 10:34:53.786612 2026] [:error] [pid 13443:tid 13457] [client 20.151.0.198:16350] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afqozQCyfZallDmsQrd0NgAAAUw"]
[Wed May 06 10:34:55.663948 2026] [:error] [pid 9664:tid 9764] [client 20.151.0.198:15694] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afqozwH4OZbrg1SjsBPzhQAAAII"]
[Wed May 06 10:34:57.455638 2026] [:error] [pid 13443:tid 13468] [client 20.151.0.198:15683] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afqo0QCyfZallDmsQrd0RAAAAVc"]
[Wed May 06 10:34:58.637028 2026] [:error] [pid 9653:tid 9701] [client 20.151.0.198:16271] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afqo0qhJ49Xc4dqq0B5sdgAAAAM"]
[Wed May 06 10:34:59.914508 2026] [:error] [pid 13443:tid 13466] [client 20.151.0.198:16326] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "afqo0wCyfZallDmsQrd0SAAAAVU"]
[Wed May 06 10:35:01.558206 2026] [:error] [pid 13443:tid 13445] [client 20.151.0.198:16331] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "afqo1QCyfZallDmsQrd0TwAAAUA"]
[Wed May 06 10:35:03.592969 2026] [:error] [pid 13443:tid 13463] [client 20.151.0.198:16335] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "afqo1wCyfZallDmsQrd0VAAAAVI"]
[Wed May 06 10:35:05.227166 2026] [:error] [pid 63810:tid 63819] [client 20.151.0.198:16332] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css.php"] [unique_id "afqo2XpnbsN9Zf6i5IEX8gAAAYU"]
[Wed May 06 10:35:06.333878 2026] [:error] [pid 13443:tid 13457] [client 20.151.0.198:16264] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo2gCyfZallDmsQrd0VgAAAUw"]
[Wed May 06 10:35:07.671624 2026] [:error] [pid 63810:tid 63817] [client 20.151.0.198:16260] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo23pnbsN9Zf6i5IEX9QAAAYM"]
[Wed May 06 10:35:08.507301 2026] [:error] [pid 13443:tid 13461] [client 20.151.0.198:16321] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo3ACyfZallDmsQrd0VwAAAVA"]
[Wed May 06 10:35:10.304585 2026] [:error] [pid 9789:tid 9807] [client 20.151.0.198:16327] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo3j_YStPJSCHPkUUo4AAAAFA"]
[Wed May 06 10:35:11.689687 2026] [:error] [pid 63810:tid 63820] [client 20.151.0.198:15702] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afqo33pnbsN9Zf6i5IEX9gAAAYY"]
[Wed May 06 10:35:12.499307 2026] [:error] [pid 63810:tid 63829] [client 20.151.0.198:15735] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo4HpnbsN9Zf6i5IEX-AAAAY8"]
[Wed May 06 10:35:13.163192 2026] [:error] [pid 63810:tid 63814] [client 20.151.0.198:16329] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo4XpnbsN9Zf6i5IEX-QAAAYA"]
[Wed May 06 10:35:14.846284 2026] [:error] [pid 63810:tid 63837] [client 20.151.0.198:16325] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo4npnbsN9Zf6i5IEX-gAAAZc"]
[Wed May 06 10:35:16.748401 2026] [:error] [pid 13443:tid 13451] [client 20.151.0.198:16372] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afqo5ACyfZallDmsQrd0WQAAAUY"]
[Wed May 06 10:35:20.505927 2026] [:error] [pid 13443:tid 13469] [client 20.151.0.198:15717] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afqo6ACyfZallDmsQrd0YgAAAVg"]
[Wed May 06 10:35:22.819364 2026] [:error] [pid 9653:tid 9716] [client 20.151.0.198:15710] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afqo6qhJ49Xc4dqq0B5segAAABI"]
[Wed May 06 10:35:24.735584 2026] [:error] [pid 63810:tid 63825] [client 20.151.0.198:16268] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afqo7HpnbsN9Zf6i5IEYAwAAAYs"]
[Wed May 06 10:35:26.090798 2026] [:error] [pid 9653:tid 9722] [client 20.151.0.198:16360] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afqo7qhJ49Xc4dqq0B5sfQAAABg"]
[Wed May 06 10:35:27.725054 2026] [:error] [pid 13443:tid 13465] [client 20.151.0.198:16269] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqo7wCyfZallDmsQrd0aQAAAVQ"]
[Wed May 06 10:35:29.532130 2026] [:error] [pid 9659:tid 9746] [client 20.151.0.198:16361] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqo8fwJnWjd8JHpBttQcgAAAMw"]
[Wed May 06 10:35:30.515726 2026] [:error] [pid 13414:tid 13423] [client 20.151.0.198:16349] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqo8kuJQpWjVpJTu_np6wAAAQc"]
[Wed May 06 10:35:31.937173 2026] [:error] [pid 63810:tid 63833] [client 20.151.0.198:16257] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqo83pnbsN9Zf6i5IEYFQAAAZM"]
[Wed May 06 10:35:34.140098 2026] [:error] [pid 9789:tid 9812] [client 20.151.0.198:15691] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afqo9j_YStPJSCHPkUUo5AAAAFU"]
[Wed May 06 10:35:34.890721 2026] [:error] [pid 63810:tid 63831] [client 20.151.0.198:16267] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afqo9npnbsN9Zf6i5IEYJwAAAZE"]
[Wed May 06 10:35:36.788813 2026] [:error] [pid 9659:tid 9749] [client 20.151.0.198:15720] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afqo-PwJnWjd8JHpBttQfQAAAM8"]
[Wed May 06 10:35:38.925407 2026] [:error] [pid 13443:tid 13457] [client 20.151.0.198:16333] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afqo-gCyfZallDmsQrd0bAAAAUw"]
[Wed May 06 10:35:41.083620 2026] [:error] [pid 9664:tid 9783] [client 20.151.0.198:16346] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afqo_QH4OZbrg1SjsBPznQAAAJU"]
[Wed May 06 10:35:41.973452 2026] [:error] [pid 9659:tid 9746] [client 20.151.0.198:15633] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afqo_fwJnWjd8JHpBttQiAAAAMw"]
[Wed May 06 10:35:43.775198 2026] [:error] [pid 13443:tid 13467] [client 20.151.0.198:15685] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afqo_wCyfZallDmsQrd0bwAAAVY"]
[Wed May 06 10:35:45.042580 2026] [:error] [pid 13443:tid 13447] [client 20.151.0.198:16374] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afqpAQCyfZallDmsQrd0cgAAAUI"]
[Wed May 06 10:35:47.827651 2026] [:error] [pid 13443:tid 13463] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed May 06 10:35:48.143469 2026] [:error] [pid 13443:tid 13457] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed May 06 10:35:49.771092 2026] [:error] [pid 13443:tid 13448] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 06 10:35:50.187915 2026] [:error] [pid 13443:tid 13447] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed May 06 10:35:50.429303 2026] [:error] [pid 13443:tid 13458] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed May 06 10:35:50.637326 2026] [:error] [pid 13443:tid 13455] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Wed May 06 10:35:50.848512 2026] [:error] [pid 13443:tid 13452] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed May 06 10:35:51.060573 2026] [:error] [pid 13443:tid 13464] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed May 06 10:35:51.268826 2026] [:error] [pid 13443:tid 13454] [client 20.151.0.198:16323] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed May 06 10:35:51.503220 2026] [:error] [pid 13443:tid 13469] [client 20.151.0.198:16323] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "afqpBwCyfZallDmsQrd0jQAAAVg"]
[Wed May 06 10:35:53.135351 2026] [:error] [pid 13443:tid 13461] [client 20.151.0.198:16303] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "afqpCQCyfZallDmsQrd0kQAAAVA"]
[Wed May 06 10:35:55.166149 2026] [:error] [pid 9789:tid 9812] [client 20.151.0.198:16344] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "afqpCz_YStPJSCHPkUUo8gAAAFU"]
[Wed May 06 10:35:56.422991 2026] [:error] [pid 63810:tid 63836] [client 20.151.0.198:16279] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "afqpDHpnbsN9Zf6i5IEYQQAAAZY"]
[Wed May 06 10:35:58.638195 2026] [:error] [pid 13414:tid 13437] [client 20.151.0.198:15727] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "afqpDkuJQpWjVpJTu_nqFgAAARU"]
[Wed May 06 10:36:00.457840 2026] [:error] [pid 63810:tid 63826] [client 20.151.0.198:16290] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "afqpEHpnbsN9Zf6i5IEYRwAAAYw"]
[Wed May 06 10:36:01.018760 2026] [:error] [pid 9664:tid 9786] [client 20.151.0.198:16341] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "afqpEQH4OZbrg1SjsBPzoQAAAJg"]
[Wed May 06 10:36:01.552795 2026] [:error] [pid 63810:tid 63829] [client 20.151.0.198:16380] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "afqpEXpnbsN9Zf6i5IEYSQAAAY8"]
[Wed May 06 10:36:02.519803 2026] [:error] [pid 9789:tid 9808] [client 20.151.0.198:15737] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "afqpEj_YStPJSCHPkUUo_wAAAFE"]
[Wed May 06 10:36:03.721878 2026] [:error] [pid 9789:tid 9799] [client 20.151.0.198:16285] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "afqpEz_YStPJSCHPkUUpAgAAAEg"]
[Wed May 06 10:36:04.875339 2026] [:error] [pid 63810:tid 63816] [client 20.151.0.198:15704] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "afqpFHpnbsN9Zf6i5IEYTQAAAYI"]
[Wed May 06 10:36:06.024344 2026] [:error] [pid 9789:tid 9796] [client 20.151.0.198:15709] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "afqpFj_YStPJSCHPkUUpAwAAAEU"]
[Wed May 06 10:36:09.436873 2026] [:error] [pid 9659:tid 9758] [client 20.151.0.198:16274] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "afqpGfwJnWjd8JHpBttQmAAAANg"]
[Wed May 06 10:36:10.908340 2026] [:error] [pid 9664:tid 9776] [client 20.151.0.198:16356] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "afqpGgH4OZbrg1SjsBPzowAAAI4"]
[Wed May 06 10:36:15.885453 2026] [:error] [pid 9789:tid 9793] [client 20.151.0.198:16358] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "afqpHz_YStPJSCHPkUUpBAAAAEI"]
[Wed May 06 10:36:18.097875 2026] [:error] [pid 9789:tid 9802] [client 20.151.0.198:15708] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "afqpIj_YStPJSCHPkUUpBwAAAEs"]
[Wed May 06 10:36:19.812791 2026] [:error] [pid 13443:tid 13452] [client 20.151.0.198:15693] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "afqpIwCyfZallDmsQrd0nQAAAUc"]
[Wed May 06 10:36:20.437100 2026] [:error] [pid 13443:tid 13464] [client 20.151.0.198:16259] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "afqpJACyfZallDmsQrd0nwAAAVM"]
[Wed May 06 10:36:21.976167 2026] [:error] [pid 9659:tid 9741] [client 20.151.0.198:16382] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "afqpJfwJnWjd8JHpBttQmgAAAMc"]
[Wed May 06 10:36:23.096268 2026] [:error] [pid 13414:tid 13426] [client 20.151.0.198:16371] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/manager.php"] [unique_id "afqpJ0uJQpWjVpJTu_nqGwAAAQo"]
[Wed May 06 10:36:23.776468 2026] [:error] [pid 13414:tid 13420] [client 20.151.0.198:16266] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "afqpJ0uJQpWjVpJTu_nqHAAAAQQ"]
[Wed May 06 10:36:24.666786 2026] [:error] [pid 13414:tid 13438] [client 20.151.0.198:16282] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "afqpKEuJQpWjVpJTu_nqHQAAARY"]
[Wed May 06 10:36:25.524025 2026] [:error] [pid 9789:tid 9806] [client 20.151.0.198:15629] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "afqpKT_YStPJSCHPkUUpCgAAAE8"]
[Wed May 06 10:36:26.590676 2026] [:error] [pid 9789:tid 9805] [client 20.151.0.198:15729] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/item.php"] [unique_id "afqpKj_YStPJSCHPkUUpCwAAAE4"]
[Wed May 06 10:36:27.625679 2026] [:error] [pid 9659:tid 9737] [client 20.151.0.198:16296] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afqpK_wJnWjd8JHpBttQoAAAAMM"]
[Wed May 06 10:36:28.449473 2026] [:error] [pid 9653:tid 9703] [client 20.151.0.198:16377] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afqpLKhJ49Xc4dqq0B5sowAAAAU"]
[Wed May 06 10:36:29.539617 2026] [:error] [pid 9653:tid 9712] [client 20.151.0.198:16273] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afqpLahJ49Xc4dqq0B5spQAAAA4"]
[Wed May 06 10:36:30.480387 2026] [:error] [pid 9789:tid 9813] [client 20.151.0.198:16369] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afqpLj_YStPJSCHPkUUpEQAAAFY"]
[Wed May 06 10:36:31.220462 2026] [:error] [pid 9789:tid 9791] [client 20.151.0.198:16345] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqpLz_YStPJSCHPkUUpEgAAAEA"]
[Wed May 06 10:36:32.587434 2026] [:error] [pid 9789:tid 9804] [client 20.151.0.198:15649] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqpMD_YStPJSCHPkUUpEwAAAE0"]
[Wed May 06 10:36:33.534148 2026] [:error] [pid 9664:tid 9773] [client 20.151.0.198:15707] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqpMQH4OZbrg1SjsBPzpAAAAIs"]
[Wed May 06 10:36:34.344358 2026] [:error] [pid 9664:tid 9780] [client 20.151.0.198:16313] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/404.php"] [unique_id "afqpMgH4OZbrg1SjsBPzpgAAAJI"]
[Wed May 06 10:36:35.142693 2026] [:error] [pid 9659:tid 9748] [client 20.151.0.198:16314] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "afqpM_wJnWjd8JHpBttQpgAAAM4"]
[Wed May 06 10:36:36.261050 2026] [:error] [pid 9653:tid 9713] [client 20.151.0.198:15624] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "afqpNKhJ49Xc4dqq0B5srQAAAA8"]
[Wed May 06 10:36:37.175366 2026] [:error] [pid 63810:tid 63824] [client 20.151.0.198:15697] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "afqpNXpnbsN9Zf6i5IEYTwAAAYo"]
[Wed May 06 10:36:37.769121 2026] [:error] [pid 63810:tid 63826] [client 20.151.0.198:15628] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail.php"] [unique_id "afqpNXpnbsN9Zf6i5IEYUAAAAYw"]
[Wed May 06 10:36:38.382057 2026] [:error] [pid 63810:tid 63819] [client 20.151.0.198:16378] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afqpNnpnbsN9Zf6i5IEYUQAAAYU"]
[Wed May 06 10:36:39.078690 2026] [:error] [pid 9653:tid 9698] [client 20.151.0.198:16298] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afqpN6hJ49Xc4dqq0B5stQAAAAA"]
[Wed May 06 10:36:41.485409 2026] [:error] [pid 9789:tid 9792] [client 20.151.0.198:15743] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afqpOT_YStPJSCHPkUUpHQAAAEE"]
[Wed May 06 10:36:41.950493 2026] [:error] [pid 63810:tid 63832] [client 20.151.0.198:16347] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afqpOXpnbsN9Zf6i5IEYVAAAAZI"]
[Wed May 06 10:36:44.104947 2026] [:error] [pid 13443:tid 13468] [client 20.151.0.198:16258] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "afqpPACyfZallDmsQrd0oQAAAVc"]
[Wed May 06 10:36:45.334336 2026] [:error] [pid 13443:tid 13457] [client 20.151.0.198:16272] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "afqpPQCyfZallDmsQrd0ogAAAUw"]
[Wed May 06 10:36:46.251361 2026] [:error] [pid 9653:tid 9713] [client 20.151.0.198:15706] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "afqpPqhJ49Xc4dqq0B5swgAAAA8"]
[Wed May 06 10:36:47.952070 2026] [:error] [pid 13443:tid 13447] [client 20.151.0.198:16335] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sx.php"] [unique_id "afqpPwCyfZallDmsQrd0pgAAAUI"]
[Wed May 06 10:36:49.062481 2026] [:error] [pid 63810:tid 63821] [client 20.151.0.198:16292] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "afqpQXpnbsN9Zf6i5IEYWgAAAYc"]
[Wed May 06 10:36:50.074056 2026] [:error] [pid 63810:tid 63831] [client 20.151.0.198:15659] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "afqpQnpnbsN9Zf6i5IEYXAAAAZE"]
[Wed May 06 10:36:51.331614 2026] [:error] [pid 9789:tid 9802] [client 20.151.0.198:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed May 06 10:36:51.546198 2026] [:error] [pid 9789:tid 9814] [client 20.151.0.198:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed May 06 10:36:51.758356 2026] [:error] [pid 9789:tid 9811] [client 20.151.0.198:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed May 06 10:36:51.974698 2026] [:error] [pid 9789:tid 9797] [client 20.151.0.198:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Wed May 06 10:36:53.035187 2026] [:error] [pid 9789:tid 9806] [client 20.151.0.198:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Wed May 06 10:36:53.251130 2026] [:error] [pid 9789:tid 9798] [client 20.151.0.198:16359] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afqpRT_YStPJSCHPkUUpOAAAAEc"]
[Wed May 06 10:36:55.029760 2026] [:error] [pid 9653:tid 9709] [client 20.151.0.198:15739] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "afqpR6hJ49Xc4dqq0B5szQAAAAs"]
[Wed May 06 10:36:56.292662 2026] [:error] [pid 9664:tid 9773] [client 20.151.0.198:15732] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afqpSAH4OZbrg1SjsBPzsAAAAIs"]
[Wed May 06 10:36:58.033990 2026] [:error] [pid 9653:tid 9705] [client 20.151.0.198:16383] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afqpSqhJ49Xc4dqq0B5szwAAAAc"]
[Wed May 06 10:36:59.422051 2026] [:error] [pid 9789:tid 9802] [client 20.151.0.198:16287] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afqpSz_YStPJSCHPkUUpOwAAAEs"]
[Wed May 06 10:37:00.503473 2026] [:error] [pid 9664:tid 9765] [client 20.151.0.198:15657] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afqpTAH4OZbrg1SjsBPzvwAAAIM"]
[Wed May 06 10:37:01.513136 2026] [:error] [pid 9789:tid 9811] [client 20.151.0.198:16308] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afqpTT_YStPJSCHPkUUpPAAAAFQ"]
[Wed May 06 10:37:02.464281 2026] [:error] [pid 13443:tid 13459] [client 20.151.0.198:15711] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afqpTgCyfZallDmsQrd0sgAAAU4"]
[Wed May 06 10:37:03.170690 2026] [:error] [pid 13414:tid 13418] [client 20.151.0.198:16294] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afqpT0uJQpWjVpJTu_nqaAAAAQI"]
[Wed May 06 10:37:03.845993 2026] [:error] [pid 13414:tid 13423] [client 20.151.0.198:16261] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afqpT0uJQpWjVpJTu_nqagAAAQc"]
[Wed May 06 10:37:05.101372 2026] [:error] [pid 9659:tid 9736] [client 20.151.0.198:16324] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afqpUfwJnWjd8JHpBttQwwAAAMI"]
[Wed May 06 10:37:06.228062 2026] [:error] [pid 9789:tid 9808] [client 20.151.0.198:16291] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afqpUj_YStPJSCHPkUUpPgAAAFE"]
[Wed May 06 10:37:07.858767 2026] [:error] [pid 9789:tid 9795] [client 20.151.0.198:16263] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afqpUz_YStPJSCHPkUUpQAAAAEQ"]
[Wed May 06 10:37:09.774266 2026] [:error] [pid 9659:tid 9734] [client 20.151.0.198:16275] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afqpVfwJnWjd8JHpBttQxwAAAMA"]
[Wed May 06 10:37:10.598442 2026] [:error] [pid 9789:tid 9815] [client 20.151.0.198:16306] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "afqpVj_YStPJSCHPkUUpQgAAAFg"]
[Wed May 06 10:37:11.159980 2026] [:error] [pid 9653:tid 9713] [client 20.151.0.198:16364] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "afqpV6hJ49Xc4dqq0B5s2QAAAA8"]
[Wed May 06 10:37:11.938371 2026] [:error] [pid 9653:tid 9707] [client 20.151.0.198:15626] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "afqpV6hJ49Xc4dqq0B5s3AAAAAk"]
[Wed May 06 10:37:12.598465 2026] [:error] [pid 63810:tid 63835] [client 20.151.0.198:16262] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "afqpWHpnbsN9Zf6i5IEYcAAAAZU"]
[Wed May 06 10:37:13.487364 2026] [:error] [pid 9653:tid 9703] [client 20.151.0.198:16280] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "afqpWahJ49Xc4dqq0B5s3wAAAAU"]
[Wed May 06 10:37:14.239116 2026] [:error] [pid 9789:tid 9814] [client 20.151.0.198:15636] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "afqpWj_YStPJSCHPkUUpRwAAAFc"]
[Wed May 06 10:37:15.348526 2026] [:error] [pid 13414:tid 13428] [client 20.151.0.198:16256] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "afqpW0uJQpWjVpJTu_nqpAAAAQw"]
[Wed May 06 10:37:16.359999 2026] [:error] [pid 9653:tid 9699] [client 20.151.0.198:15658] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "afqpXKhJ49Xc4dqq0B5s4AAAAAE"]
[Wed May 06 10:37:16.901000 2026] [:error] [pid 63810:tid 63817] [client 20.151.0.198:15621] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "afqpXHpnbsN9Zf6i5IEYcgAAAYM"]
[Wed May 06 10:37:18.561303 2026] [:error] [pid 9653:tid 9717] [client 20.151.0.198:16286] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww1.php"] [unique_id "afqpXqhJ49Xc4dqq0B5s4QAAABM"]
[Wed May 06 10:37:20.251527 2026] [:error] [pid 63810:tid 63814] [client 20.151.0.198:16340] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "afqpYHpnbsN9Zf6i5IEYdAAAAYA"]
[Wed May 06 10:37:23.513454 2026] [:error] [pid 9664:tid 9775] [client 20.151.0.198:15688] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "afqpYwH4OZbrg1SjsBPzxgAAAI0"]
[Wed May 06 10:37:25.625183 2026] [:error] [pid 9653:tid 9703] [client 20.151.0.198:15667] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "afqpZahJ49Xc4dqq0B5s6gAAAAU"]
[Wed May 06 10:37:27.112948 2026] [:error] [pid 9664:tid 9778] [client 20.151.0.198:16381] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/function.php"] [unique_id "afqpZwH4OZbrg1SjsBPzygAAAJA"]
[Wed May 06 10:37:28.362366 2026] [:error] [pid 63810:tid 63822] [client 20.151.0.198:16300] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "afqpaHpnbsN9Zf6i5IEYeAAAAYg"]
[Wed May 06 10:37:30.823547 2026] [:error] [pid 63810:tid 63835] [client 20.151.0.198:16304] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "afqpanpnbsN9Zf6i5IEYegAAAZU"]
[Wed May 06 10:37:33.129989 2026] [:error] [pid 13414:tid 13435] [client 20.151.0.198:15638] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "afqpbUuJQpWjVpJTu_nqpQAAARM"]
[Wed May 06 10:37:34.314277 2026] [:error] [pid 9789:tid 9813] [client 20.151.0.198:16353] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/function.php"] [unique_id "afqpbj_YStPJSCHPkUUpTQAAAFY"]
[Wed May 06 10:37:36.100218 2026] [:error] [pid 9789:tid 9802] [client 20.151.0.198:15684] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "afqpcD_YStPJSCHPkUUpTgAAAEs"]
[Wed May 06 10:37:36.969901 2026] [:error] [pid 9789:tid 9791] [client 20.151.0.198:16277] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "afqpcD_YStPJSCHPkUUpUQAAAEA"]
[Wed May 06 10:37:38.404646 2026] [:error] [pid 13443:tid 13452] [client 20.151.0.198:16307] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "afqpcgCyfZallDmsQrd0uAAAAUc"]
[Wed May 06 10:37:40.332131 2026] [:error] [pid 9789:tid 9802] [client 20.151.0.198:16315] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "afqpdD_YStPJSCHPkUUpYQAAAEs"]
[Wed May 06 10:37:42.752988 2026] [:error] [pid 9789:tid 9805] [client 20.151.0.198:15656] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "afqpdj_YStPJSCHPkUUpYwAAAE4"]
[Wed May 06 10:37:46.818915 2026] [:error] [pid 13414:tid 13421] [client 20.151.0.198:15668] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "afqpekuJQpWjVpJTu_nqqwAAAQU"]
[Wed May 06 10:37:50.172938 2026] [:error] [pid 13414:tid 13427] [client 20.151.0.198:15616] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "afqpfkuJQpWjVpJTu_nqtgAAAQs"]
[Wed May 06 10:37:52.701161 2026] [:error] [pid 63810:tid 63829] [client 20.151.0.198:15640] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "afqpgHpnbsN9Zf6i5IEYkAAAAY8"]
[Wed May 06 10:37:55.352186 2026] [:error] [pid 9789:tid 9796] [client 20.151.0.198:15553] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/security.php"] [unique_id "afqpgz_YStPJSCHPkUUpbQAAAEU"]
[Wed May 06 10:37:57.327180 2026] [:error] [pid 9789:tid 9810] [client 20.151.0.198:16348] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Wed May 06 10:37:58.188736 2026] [:error] [pid 9789:tid 9807] [client 20.151.0.198:16348] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afqphj_YStPJSCHPkUUpdAAAAFA"]
[Wed May 06 10:38:01.348488 2026] [:error] [pid 9789:tid 9797] [client 20.151.0.198:16376] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afqpiT_YStPJSCHPkUUpfwAAAEY"]
[Wed May 06 10:38:02.547532 2026] [:error] [pid 13443:tid 13466] [client 20.151.0.198:15655] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afqpigCyfZallDmsQrd0wgAAAVU"]
[Wed May 06 10:38:03.728407 2026] [:error] [pid 13414:tid 13439] [client 20.151.0.198:16351] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afqpi0uJQpWjVpJTu_nq7gAAARc"]
[Wed May 06 10:38:04.569608 2026] [:error] [pid 13443:tid 13455] [client 20.151.0.198:16367] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afqpjACyfZallDmsQrd0xAAAAUo"]
[Wed May 06 10:38:06.134940 2026] [:error] [pid 9653:tid 9716] [client 20.151.0.198:15736] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afqpjqhJ49Xc4dqq0B5s7AAAABI"]
[Wed May 06 10:38:07.489502 2026] [:error] [pid 63810:tid 63838] [client 20.151.0.198:16370] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afqpj3pnbsN9Zf6i5IEYmQAAAZg"]
[Wed May 06 10:38:08.814173 2026] [:error] [pid 63810:tid 63831] [client 20.151.0.198:15568] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afqpkHpnbsN9Zf6i5IEYnAAAAZE"]
[Wed May 06 10:38:10.066891 2026] [:error] [pid 63810:tid 63829] [client 20.151.0.198:15623] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless5.php"] [unique_id "afqpknpnbsN9Zf6i5IEYnQAAAY8"]
[Wed May 06 10:38:12.580399 2026] [:error] [pid 9659:tid 9741] [client 20.151.0.198:15620] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "afqplPwJnWjd8JHpBttRMQAAAMc"]
[Wed May 06 10:38:14.873179 2026] [:error] [pid 13443:tid 13461] [client 20.151.0.198:15731] [client 20.151.0.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "afqplgCyfZallDmsQrd00wAAAVA"]
[Wed May 06 10:38:17.995458 2026] [:error] [pid 9664:tid 9763] [client 20.151.0.198:16354] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "afqpmQH4OZbrg1SjsBPz4QAAAIE"]
[Wed May 06 10:38:19.199530 2026] [:error] [pid 13443:tid 13454] [client 20.151.0.198:15676] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "afqpmwCyfZallDmsQrd03gAAAUk"]
[Wed May 06 10:38:20.887225 2026] [:error] [pid 13443:tid 13463] [client 20.151.0.198:16305] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "afqpnACyfZallDmsQrd04QAAAVI"]
[Wed May 06 10:38:21.471639 2026] [:error] [pid 13414:tid 13433] [client 20.151.0.198:16295] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afqpnUuJQpWjVpJTu_nq8AAAARE"]
[Wed May 06 10:38:23.229076 2026] [:error] [pid 13443:tid 13458] [client 20.151.0.198:16330] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afqpnwCyfZallDmsQrd05QAAAU0"]
[Wed May 06 10:38:25.431457 2026] [:error] [pid 9789:tid 9802] [client 20.151.0.198:15700] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afqpoT_YStPJSCHPkUUpgwAAAEs"]
[Wed May 06 10:38:27.339721 2026] [:error] [pid 13443:tid 13450] [client 20.151.0.198:15646] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afqpowCyfZallDmsQrd06gAAAUU"]
[Wed May 06 10:38:29.589353 2026] [:error] [pid 557:tid 560] [client 20.151.0.198:15716] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "afqppTZjFR8Vd8ce80AQigAAAkE"]
[Wed May 06 10:38:30.445542 2026] [:error] [pid 63810:tid 63820] [client 20.151.0.198:16342] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "afqppnpnbsN9Zf6i5IEYuAAAAYY"]
[Wed May 06 10:38:32.262170 2026] [:error] [pid 9653:tid 9702] [client 20.151.0.198:15641] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "afqpqKhJ49Xc4dqq0B5tDgAAAAQ"]
[Wed May 06 10:38:33.369470 2026] [:error] [pid 9789:tid 9815] [client 20.151.0.198:15728] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o1.php"] [unique_id "afqpqT_YStPJSCHPkUUpmwAAAFg"]
[Wed May 06 10:38:34.579245 2026] [:error] [pid 482:tid 510] [client 20.151.0.198:15645] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "afqpqsxs8HOc_nWgOW638QAAAdg"]
[Wed May 06 10:38:36.035144 2026] [:error] [pid 557:tid 564] [client 20.151.0.198:15696] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "afqprDZjFR8Vd8ce80AQiwAAAkU"]
[Wed May 06 10:38:37.660431 2026] [:error] [pid 9653:tid 9709] [client 20.151.0.198:15617] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "afqprahJ49Xc4dqq0B5tGAAAAAs"]
[Wed May 06 10:38:38.941883 2026] [:error] [pid 557:tid 566] [client 20.151.0.198:15738] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/juuuu.php"] [unique_id "afqprjZjFR8Vd8ce80AQjAAAAkc"]
[Wed May 06 10:38:40.295867 2026] [:error] [pid 9653:tid 9722] [client 20.151.0.198:16270] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "afqpsKhJ49Xc4dqq0B5tGwAAABg"]
[Wed May 06 10:38:41.434004 2026] [:error] [pid 9653:tid 9699] [client 20.151.0.198:15673] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "afqpsahJ49Xc4dqq0B5tHgAAAAE"]
[Wed May 06 10:38:43.895874 2026] [:error] [pid 9653:tid 9708] [client 20.151.0.198:16319] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "afqps6hJ49Xc4dqq0B5tJQAAAAo"]
[Wed May 06 10:38:44.474170 2026] [:error] [pid 9664:tid 9781] [client 20.151.0.198:16334] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ha.php"] [unique_id "afqptAH4OZbrg1SjsBPz-wAAAJM"]
[Wed May 06 10:38:45.364205 2026] [:error] [pid 9789:tid 9794] [client 20.151.0.198:15635] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "afqptT_YStPJSCHPkUUpoQAAAEM"]
[Wed May 06 10:38:46.395819 2026] [:error] [pid 9789:tid 9804] [client 20.151.0.198:15644] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "afqptj_YStPJSCHPkUUpogAAAE0"]
[Wed May 06 10:38:47.925874 2026] [:error] [pid 9789:tid 9799] [client 20.151.0.198:16337] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "afqptz_YStPJSCHPkUUppgAAAEg"]
[Wed May 06 10:38:48.796561 2026] [:error] [pid 9653:tid 9712] [client 20.151.0.198:15627] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "afqpuKhJ49Xc4dqq0B5tKwAAAA4"]
[Wed May 06 10:38:49.624659 2026] [:error] [pid 9653:tid 9709] [client 20.151.0.198:15689] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "afqpuahJ49Xc4dqq0B5tLQAAAAs"]
[Wed May 06 10:38:50.858966 2026] [:error] [pid 9653:tid 9703] [client 20.151.0.198:16338] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "afqpuqhJ49Xc4dqq0B5taQAAAAU"]
[Wed May 06 10:38:52.094718 2026] [:error] [pid 9789:tid 9801] [client 20.151.0.198:15666] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "afqpvD_YStPJSCHPkUUprQAAAEo"]
[Wed May 06 10:38:52.837884 2026] [:error] [pid 9653:tid 9707] [client 20.151.0.198:16357] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/we2.php"] [unique_id "afqpvKhJ49Xc4dqq0B5trQAAAAk"]
[Wed May 06 10:38:53.703281 2026] [:error] [pid 9653:tid 9707] [client 20.151.0.198:15726] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "afqpvahJ49Xc4dqq0B5txAAAAAk"]
[Wed May 06 10:38:54.254083 2026] [:error] [pid 63810:tid 63817] [client 20.151.0.198:15742] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "afqpvnpnbsN9Zf6i5IEYuwAAAYM"]
[Wed May 06 10:38:54.853808 2026] [:error] [pid 13414:tid 13422] [client 20.151.0.198:15682] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "afqpvkuJQpWjVpJTu_nrEAAAAQY"]
[Wed May 06 10:38:55.803577 2026] [:error] [pid 9653:tid 9708] [client 20.151.0.198:15625] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/04.php"] [unique_id "afqpv6hJ49Xc4dqq0B5t0QAAAAo"]
[Wed May 06 10:38:57.597049 2026] [:error] [pid 557:tid 560] [client 20.151.0.198:15686] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "afqpwTZjFR8Vd8ce80AQjwAAAkE"]
[Wed May 06 10:38:58.440799 2026] [:error] [pid 9653:tid 9702] [client 20.151.0.198:15725] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "afqpwqhJ49Xc4dqq0B5t1gAAAAQ"]
[Wed May 06 10:38:59.090249 2026] [:error] [pid 9789:tid 9798] [client 20.151.0.198:15630] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "afqpwz_YStPJSCHPkUUpswAAAEc"]
[Wed May 06 10:39:00.009349 2026] [:error] [pid 13414:tid 13419] [client 20.151.0.198:15721] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/333.php"] [unique_id "afqpxEuJQpWjVpJTu_nrEQAAAQM"]
[Wed May 06 10:39:00.794993 2026] [:error] [pid 9664:tid 9764] [client 20.151.0.198:16373] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/520.php"] [unique_id "afqpxAH4OZbrg1SjsBP0BgAAAII"]
[Wed May 06 10:39:02.288672 2026] [:error] [pid 482:tid 490] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Wed May 06 10:39:02.504312 2026] [:error] [pid 482:tid 491] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Wed May 06 10:39:02.715751 2026] [:error] [pid 482:tid 496] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Wed May 06 10:39:02.925270 2026] [:error] [pid 482:tid 486] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed May 06 10:39:03.135123 2026] [:error] [pid 482:tid 501] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Wed May 06 10:39:03.772612 2026] [:error] [pid 482:tid 488] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Wed May 06 10:39:03.985529 2026] [:error] [pid 482:tid 495] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Wed May 06 10:39:04.202714 2026] [:error] [pid 482:tid 494] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Wed May 06 10:39:04.414032 2026] [:error] [pid 482:tid 504] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Wed May 06 10:39:04.624750 2026] [:error] [pid 482:tid 489] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Wed May 06 10:39:04.840961 2026] [:error] [pid 482:tid 510] [client 20.151.0.198:15670] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Wed May 06 10:39:05.047916 2026] [:error] [pid 482:tid 497] [client 20.151.0.198:15670] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "afqpycxs8HOc_nWgOW64BAAAAc0"]
[Wed May 06 10:39:05.961924 2026] [:error] [pid 9653:tid 9707] [client 20.151.0.198:15631] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "afqpyahJ49Xc4dqq0B5t3QAAAAk"]
[Wed May 06 10:39:07.216325 2026] [:error] [pid 13414:tid 13436] [client 20.151.0.198:15701] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "afqpy0uJQpWjVpJTu_nrFwAAARQ"]
[Wed May 06 10:39:08.429710 2026] [:error] [pid 9653:tid 9716] [client 20.151.0.198:15607] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file7.php"] [unique_id "afqpzKhJ49Xc4dqq0B5t3wAAABI"]
[Wed May 06 10:39:10.776617 2026] [:error] [pid 9653:tid 9705] [client 20.151.0.198:15712] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "afqpzqhJ49Xc4dqq0B5t4gAAAAc"]
[Wed May 06 10:39:11.800973 2026] [:error] [pid 9664:tid 9763] [client 20.151.0.198:15566] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "afqpzwH4OZbrg1SjsBP0EAAAAIE"]
[Wed May 06 10:39:13.678535 2026] [:error] [pid 9659:tid 9757] [client 20.151.0.198:16352] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "afqp0fwJnWjd8JHpBttRXAAAANc"]
[Wed May 06 10:39:15.224598 2026] [:error] [pid 63810:tid 63833] [client 20.151.0.198:16328] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "afqp03pnbsN9Zf6i5IEYxwAAAZM"]
[Wed May 06 10:39:17.035140 2026] [:error] [pid 9789:tid 9799] [client 20.151.0.198:16343] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afqp1T_YStPJSCHPkUUpvQAAAEg"]
[Wed May 06 10:39:18.355307 2026] [:error] [pid 9789:tid 9792] [client 20.151.0.198:16320] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afqp1j_YStPJSCHPkUUpvgAAAEE"]
[Wed May 06 10:39:20.149393 2026] [:error] [pid 482:tid 487] [client 20.151.0.198:15558] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afqp2Mxs8HOc_nWgOW64BwAAAcM"]
[Wed May 06 10:39:21.484678 2026] [:error] [pid 9659:tid 9735] [client 20.151.0.198:15615] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afqp2fwJnWjd8JHpBttRYQAAAME"]
[Wed May 06 10:39:22.177992 2026] [:error] [pid 63810:tid 63825] [client 20.151.0.198:15619] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "afqp2npnbsN9Zf6i5IEYywAAAYs"]
[Wed May 06 10:39:23.736698 2026] [:error] [pid 557:tid 564] [client 20.151.0.198:16312] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "afqp2zZjFR8Vd8ce80AQkwAAAkU"]
[Wed May 06 10:39:24.804315 2026] [:error] [pid 9789:tid 9809] [client 20.151.0.198:16339] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "afqp3D_YStPJSCHPkUUpwgAAAFI"]
[Wed May 06 10:39:26.225611 2026] [:error] [pid 9664:tid 9778] [client 20.151.0.198:15687] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nox.php"] [unique_id "afqp3gH4OZbrg1SjsBP0IQAAAJA"]
[Wed May 06 10:39:26.923324 2026] [:error] [pid 13443:tid 13456] [client 20.151.0.198:15564] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afqp3gCyfZallDmsQrd1EgAAAUs"]
[Wed May 06 10:39:28.317124 2026] [:error] [pid 9664:tid 9775] [client 20.151.0.198:15695] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afqp4AH4OZbrg1SjsBP0IwAAAI0"]
[Wed May 06 10:39:29.347285 2026] [:error] [pid 9664:tid 9777] [client 20.151.0.198:16327] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afqp4QH4OZbrg1SjsBP0JAAAAI8"]
[Wed May 06 10:39:30.771179 2026] [:error] [pid 9653:tid 9708] [client 20.151.0.198:16368] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afqp4qhJ49Xc4dqq0B5t6gAAAAo"]
[Wed May 06 10:39:33.119853 2026] [:error] [pid 9789:tid 9804] [client 20.151.0.198:15734] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "afqp5T_YStPJSCHPkUUpyQAAAE0"]
[Wed May 06 10:39:34.579929 2026] [:error] [pid 9789:tid 9791] [client 20.151.0.198:16297] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "afqp5j_YStPJSCHPkUUpywAAAEA"]
[Wed May 06 10:39:35.778435 2026] [:error] [pid 9789:tid 9799] [client 20.151.0.198:16310] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "afqp5z_YStPJSCHPkUUpzgAAAEg"]
[Wed May 06 10:39:37.103565 2026] [:error] [pid 9789:tid 9792] [client 20.151.0.198:15567] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "afqp6T_YStPJSCHPkUUp0QAAAEE"]
[Wed May 06 10:39:38.232880 2026] [:error] [pid 63810:tid 63821] [client 20.151.0.198:16332] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "afqp6npnbsN9Zf6i5IEY0gAAAYc"]
[Wed May 06 10:39:39.020309 2026] [:error] [pid 9789:tid 9809] [client 20.151.0.198:15698] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "afqp6z_YStPJSCHPkUUp1AAAAFI"]
[Wed May 06 10:39:40.420780 2026] [:error] [pid 9653:tid 9710] [client 20.151.0.198:15647] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "afqp7KhJ49Xc4dqq0B5t9AAAAAw"]
[Wed May 06 10:39:41.694690 2026] [:error] [pid 9653:tid 9713] [client 20.151.0.198:15713] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class9.php"] [unique_id "afqp7ahJ49Xc4dqq0B5t-AAAAA8"]
[Wed May 06 10:39:43.531470 2026] [:error] [pid 9789:tid 9813] [client 20.151.0.198:15714] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "afqp7z_YStPJSCHPkUUp1gAAAFY"]
[Wed May 06 10:39:45.471957 2026] [:error] [pid 9653:tid 9714] [client 20.151.0.198:15651] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "afqp8ahJ49Xc4dqq0B5t_wAAABA"]
[Wed May 06 10:39:48.044492 2026] [:error] [pid 9653:tid 9710] [client 20.151.0.198:16194] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "afqp9KhJ49Xc4dqq0B5uCAAAAAw"]
[Wed May 06 10:39:49.745031 2026] [:error] [pid 13414:tid 13422] [client 20.151.0.198:16260] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/la.php"] [unique_id "afqp9UuJQpWjVpJTu_nrNAAAAQY"]
[Wed May 06 10:39:52.533621 2026] [:error] [pid 9653:tid 9712] [client 20.151.0.198:15633] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "afqp-KhJ49Xc4dqq0B5uDwAAAA4"]
[Wed May 06 10:39:53.890596 2026] [:error] [pid 9653:tid 9711] [client 20.151.0.198:15685] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "afqp-ahJ49Xc4dqq0B5uFgAAAA0"]
[Wed May 06 10:39:54.682525 2026] [:error] [pid 482:tid 508] [client 20.151.0.198:15663] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "afqp-sxs8HOc_nWgOW64CgAAAdY"]
[Wed May 06 10:39:55.757378 2026] [:error] [pid 9659:tid 9749] [client 20.151.0.198:16372] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bless11.php"] [unique_id "afqp-_wJnWjd8JHpBttRcAAAAM8"]
[Wed May 06 10:39:57.389247 2026] [:error] [pid 9659:tid 9746] [client 20.151.0.198:15702] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "afqp_fwJnWjd8JHpBttRcgAAAMw"]
[Wed May 06 10:39:58.464459 2026] [:error] [pid 482:tid 500] [client 20.151.0.198:15583] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "afqp_sxs8HOc_nWgOW64CwAAAdA"]
[Wed May 06 10:39:59.012028 2026] [:error] [pid 9659:tid 9750] [client 20.151.0.198:15720] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "afqp__wJnWjd8JHpBttRcwAAANA"]
[Wed May 06 10:40:00.221034 2026] [:error] [pid 9653:tid 9718] [client 20.151.0.198:16302] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "afqqAKhJ49Xc4dqq0B5uHQAAABQ"]
[Wed May 06 10:40:00.880457 2026] [:error] [pid 9789:tid 9813] [client 20.151.0.198:16363] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "afqqAD_YStPJSCHPkUUp3QAAAFY"]
[Wed May 06 10:40:02.713727 2026] [:error] [pid 9659:tid 9747] [client 20.151.0.198:15719] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "afqqAvwJnWjd8JHpBttRdgAAAM0"]
[Wed May 06 10:40:03.222347 2026] [:error] [pid 9653:tid 9700] [client 20.151.0.198:16322] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "afqqA6hJ49Xc4dqq0B5uIAAAAAI"]
[Wed May 06 10:40:03.908073 2026] [:error] [pid 9653:tid 9714] [client 20.151.0.198:16329] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ton.php"] [unique_id "afqqA6hJ49Xc4dqq0B5uIQAAABA"]
[Wed May 06 10:40:04.861391 2026] [:error] [pid 9653:tid 9703] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Wed May 06 10:40:05.071474 2026] [:error] [pid 9653:tid 9713] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Wed May 06 10:40:05.380872 2026] [:error] [pid 9653:tid 9715] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Wed May 06 10:40:05.593638 2026] [:error] [pid 9653:tid 9721] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Wed May 06 10:40:05.802484 2026] [:error] [pid 9653:tid 9702] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Wed May 06 10:40:06.014270 2026] [:error] [pid 9653:tid 9717] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Wed May 06 10:40:06.221615 2026] [:error] [pid 9653:tid 9705] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/xaz.php
[Wed May 06 10:40:06.430778 2026] [:error] [pid 9653:tid 9718] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Wed May 06 10:40:06.639313 2026] [:error] [pid 9653:tid 9710] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Wed May 06 10:40:06.851503 2026] [:error] [pid 9653:tid 9706] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Wed May 06 10:40:07.083221 2026] [:error] [pid 9653:tid 9719] [client 20.151.0.198:16362] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Wed May 06 10:40:07.303790 2026] [:error] [pid 9653:tid 9720] [client 20.151.0.198:16362] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "afqqB6hJ49Xc4dqq0B5uMQAAABY"]
[Wed May 06 10:40:12.694694 2026] [:error] [pid 592:tid 599] [client 20.151.0.198:16276] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "afqqDJiX28mb6xLi2PyBUQAAAoM"]
[Wed May 06 10:40:15.240573 2026] [:error] [pid 13443:tid 13456] [client 20.151.0.198:15737] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "afqqDwCyfZallDmsQrd1GwAAAUs"]
[Wed May 06 10:40:16.386875 2026] [:error] [pid 9789:tid 9791] [client 20.151.0.198:16278] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/galex.php"] [unique_id "afqqED_YStPJSCHPkUUp8QAAAEA"]
[Wed May 06 10:40:17.811640 2026] [:error] [pid 9789:tid 9808] [client 20.151.0.198:15681] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "afqqET_YStPJSCHPkUUp9gAAAFE"]
[Wed May 06 10:40:20.180683 2026] [:error] [pid 9789:tid 9791] [client 20.151.0.198:16380] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "afqqFD_YStPJSCHPkUUp-QAAAEA"]
[Wed May 06 10:40:21.603477 2026] [:error] [pid 9659:tid 9752] [client 20.151.0.198:15648] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "afqqFfwJnWjd8JHpBttRhwAAANI"]
[Wed May 06 10:40:24.106832 2026] [:error] [pid 9789:tid 9794] [client 20.151.0.198:15571] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xb.php"] [unique_id "afqqGD_YStPJSCHPkUUp_wAAAEM"]
[Wed May 06 10:40:26.617509 2026] [:error] [pid 9653:tid 9703] [client 20.151.0.198:16344] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "afqqGqhJ49Xc4dqq0B5uRgAAAAU"]
[Wed May 06 10:40:28.313095 2026] [:error] [pid 9653:tid 9718] [client 20.151.0.198:16346] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "afqqHKhJ49Xc4dqq0B5uTQAAABQ"]
[Wed May 06 10:40:30.015931 2026] [:error] [pid 9789:tid 9808] [client 20.151.0.198:16326] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "afqqHj_YStPJSCHPkUUqRAAAAFE"]
[Wed May 06 10:40:32.355543 2026] [:error] [pid 9664:tid 9781] [client 20.151.0.198:15691] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ova.php"] [unique_id "afqqIAH4OZbrg1SjsBP0NAAAAJM"]
[Wed May 06 10:40:34.652108 2026] [:error] [pid 9789:tid 9794] [client 20.151.0.198:16317] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "afqqIj_YStPJSCHPkUUqUgAAAEM"]
[Wed May 06 10:40:36.299400 2026] [:error] [pid 9653:tid 9722] [client 20.151.0.198:15703] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "afqqJKhJ49Xc4dqq0B5uXgAAABg"]
[Wed May 06 10:40:39.491627 2026] [:error] [pid 482:tid 487] [client 20.151.0.198:15637] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "afqqJ8xs8HOc_nWgOW64EgAAAcM"]
[Wed May 06 10:40:41.391165 2026] [:error] [pid 9653:tid 9717] [client 20.151.0.198:16257] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "afqqKahJ49Xc4dqq0B5uZwAAABM"]
[Wed May 06 10:40:43.202362 2026] [:error] [pid 9789:tid 9791] [client 20.151.0.198:16333] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afqqKz_YStPJSCHPkUUqVwAAAEA"]
[Wed May 06 10:40:45.449009 2026] [:error] [pid 9653:tid 9713] [client 20.151.0.198:16345] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afqqLahJ49Xc4dqq0B5ubAAAAA8"]
[Wed May 06 10:40:46.090529 2026] [:error] [pid 9653:tid 9714] [client 20.151.0.198:15740] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afqqLqhJ49Xc4dqq0B5ubQAAABA"]
[Wed May 06 10:40:46.952450 2026] [:error] [pid 9789:tid 9811] [client 20.151.0.198:15735] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afqqLj_YStPJSCHPkUUqWQAAAFQ"]
[Wed May 06 10:40:47.950876 2026] [:error] [pid 9659:tid 9750] [client 20.151.0.198:15697] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webindex.php"] [unique_id "afqqL_wJnWjd8JHpBttRkwAAANA"]
[Wed May 06 10:40:48.667219 2026] [:error] [pid 9789:tid 9808] [client 20.151.0.198:15741] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webindex.php"] [unique_id "afqqMD_YStPJSCHPkUUqWwAAAFE"]
[Wed May 06 10:40:49.475724 2026] [:error] [pid 557:tid 577] [client 20.151.0.198:15579] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webindex.php"] [unique_id "afqqMTZjFR8Vd8ce80AQrAAAAlI"]
[Wed May 06 10:40:50.647627 2026] [:error] [pid 9653:tid 9704] [client 20.151.0.198:15694] [client 20.151.0.198] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webindex.php"] [unique_id "afqqMqhJ49Xc4dqq0B5uiwAAAAY"]
[Wed May 06 12:12:56.228484 2026] [:error] [pid 482:tid 498] [client 146.56.199.139:37792] [client 146.56.199.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afq_yMxs8HOc_nWgOW7U2QAAAc4"]
[Wed May 06 12:56:09.005582 2026] [:error] [pid 9653:tid 9712] [client 35.228.105.240:44370] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "afrJ6ahJ49Xc4dqq0B6M3wAAAA4"]
[Wed May 06 12:56:09.234391 2026] [:error] [pid 557:tid 559] [client 35.228.105.240:44376] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev.local"] [unique_id "afrJ6TZjFR8Vd8ce80AVqAAAAkA"]
[Wed May 06 12:56:09.291018 2026] [:error] [pid 9653:tid 9706] [client 35.228.105.240:44380] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "afrJ6ahJ49Xc4dqq0B6M5gAAAAg"]
[Wed May 06 12:56:09.296339 2026] [:error] [pid 9653:tid 9711] [client 35.228.105.240:44388] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "afrJ6ahJ49Xc4dqq0B6M5wAAAA0"]
[Wed May 06 12:56:09.328429 2026] [:error] [pid 13443:tid 13445] [client 35.228.105.240:44398] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env.local"] [unique_id "afrJ6QCyfZallDmsQrd8WQAAAUA"]
[Wed May 06 12:56:09.368194 2026] [:error] [pid 13443:tid 13452] [client 35.228.105.240:44414] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/admin/.env"] [unique_id "afrJ6QCyfZallDmsQrd8WgAAAUc"]
[Wed May 06 12:56:09.374828 2026] [:error] [pid 9653:tid 9715] [client 35.228.105.240:44430] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.dev"] [unique_id "afrJ6ahJ49Xc4dqq0B6M6AAAABE"]
[Wed May 06 12:56:09.474701 2026] [:error] [pid 9653:tid 9719] [client 35.228.105.240:44434] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development.local"] [unique_id "afrJ6ahJ49Xc4dqq0B6M6QAAABU"]
[Wed May 06 12:56:09.605408 2026] [:error] [pid 9659:tid 9738] [client 35.228.105.240:44446] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.docker"] [unique_id "afrJ6fwJnWjd8JHpBttdvgAAAMQ"]
[Wed May 06 12:56:09.718330 2026] [:error] [pid 9789:tid 9813] [client 35.228.105.240:44458] [client 35.228.105.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "afrJ6T_YStPJSCHPkUVBVgAAAFY"]
[Wed May 06 14:11:43.092314 2026] [:error] [pid 592:tid 618] [client 43.135.183.82:60616] [client 43.135.183.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afrbn5iX28mb6xLi2PyPjAAAApM"]
[Wed May 06 14:24:35.269548 2026] [:error] [pid 9659:tid 9749] [client 43.128.89.111:33012] [client 43.128.89.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afreo_wJnWjd8JHpBttnzQAAAM8"]
[Wed May 06 14:56:52.389755 2026] [:error] [pid 9659:tid 9745] [client 124.156.200.223:47744] [client 124.156.200.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afrmNPwJnWjd8JHpBttr9wAAAMs"]
[Wed May 06 15:30:22.477936 2026] [:error] [pid 9653:tid 9709] [client 43.156.225.86:35760] [client 43.156.225.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afruDqhJ49Xc4dqq0B63KwAAAAs"]
[Wed May 06 16:13:08.497970 2026] [:error] [pid 13443:tid 13446] [client 119.28.100.145:57508] [client 119.28.100.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afr4FACyfZallDmsQreJQwAAAUE"]
[Wed May 06 17:16:32.919533 2026] [:error] [pid 9664:tid 9786] [client 43.156.122.201:38990] [client 43.156.122.201] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afsG8AH4OZbrg1SjsBMsEQAAAJg"]
[Wed May 06 18:10:23.624263 2026] [:error] [pid 9653:tid 9711] [client 43.167.245.18:44528] [client 43.167.245.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afsTj6hJ49Xc4dqq0B7hKAAAAA0"]
[Wed May 06 18:16:24.573671 2026] [:error] [pid 9653:tid 9715] [client 170.106.8.38:37690] [client 170.106.8.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afsU-KhJ49Xc4dqq0B7jKQAAABE"]
[Wed May 06 19:14:03.392771 2026] [:error] [pid 13414:tid 13430] [client 129.226.214.57:36174] [client 129.226.214.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afsie0uJQpWjVpJTu_kW_gAAAQ4"]
[Wed May 06 19:53:16.671519 2026] [:error] [pid 592:tid 610] [client 43.159.57.144:42956] [client 43.159.57.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afsrrJiX28mb6xLi2PyqTwAAAo4"]
[Wed May 06 20:26:34.057886 2026] [:error] [pid 13443:tid 13452] [client 43.160.219.206:49160] [client 43.160.219.206] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afszegCyfZallDmsQreZoQAAAUc"]
[Wed May 06 20:46:29.602963 2026] [:error] [pid 592:tid 621] [client 43.130.68.105:56302] [client 43.130.68.105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afs4JZiX28mb6xLi2Pyt1AAAApY"]
[Thu May 07 00:14:47.214590 2026] [:error] [pid 9653:tid 9712] [client 62.164.177.15:52670] File does not exist: /usr/local/apache/htdocs/suspended-page/unzipper.php
[Thu May 07 00:15:22.526044 2026] [:error] [pid 13443:tid 13468] [client 43.166.255.122:54280] [client 43.166.255.122] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aftpGgCyfZallDmsQrer4QAAAVc"]
[Thu May 07 01:08:14.139365 2026] [:error] [pid 9659:tid 9735] [client 43.138.68.113:58292] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aft1fvwJnWjd8JHpBtuyIQAAAME"]
[Thu May 07 03:01:42.093170 2026] [:error] [pid 9664:tid 9765] [client 170.106.180.153:43014] [client 170.106.180.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afuQFgH4OZbrg1SjsBOSfgAAAIM"]
[Thu May 07 03:16:20.396397 2026] [:error] [pid 9653:tid 9709] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu May 07 03:16:20.608040 2026] [:error] [pid 9653:tid 9717] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/ox.php
[Thu May 07 03:16:20.818760 2026] [:error] [pid 9653:tid 9702] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/htto.php
[Thu May 07 03:16:21.029011 2026] [:error] [pid 9653:tid 9710] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Thu May 07 03:16:21.243435 2026] [:error] [pid 9653:tid 9700] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu May 07 03:16:21.452791 2026] [:error] [pid 9653:tid 9699] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Thu May 07 03:16:21.661954 2026] [:error] [pid 9653:tid 9714] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Thu May 07 03:16:21.873630 2026] [:error] [pid 9653:tid 9705] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu May 07 03:16:22.082622 2026] [:error] [pid 9653:tid 9701] [client 4.206.17.23:33517] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Thu May 07 03:16:22.499590 2026] [:error] [pid 9653:tid 9706] [client 4.206.17.23:33517] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "afuThqhJ49Xc4dqq0B6OkwAAAAg"]
[Thu May 07 03:16:22.912634 2026] [:error] [pid 9664:tid 9771] [client 4.206.17.23:33499] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "afuThgH4OZbrg1SjsBOXxgAAAIk"]
[Thu May 07 03:16:23.325802 2026] [:error] [pid 9664:tid 9784] [client 4.206.17.23:33505] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "afuThwH4OZbrg1SjsBOXxwAAAJY"]
[Thu May 07 03:16:23.749192 2026] [:error] [pid 13414:tid 13430] [client 4.206.17.23:33474] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "afuTh0uJQpWjVpJTu_lKlQAAAQ4"]
[Thu May 07 03:16:24.171502 2026] [:error] [pid 13414:tid 13422] [client 4.206.17.23:33532] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "afuTiEuJQpWjVpJTu_lKmAAAAQY"]
[Thu May 07 03:16:24.583398 2026] [:error] [pid 9653:tid 9710] [client 4.206.17.23:33486] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "afuTiKhJ49Xc4dqq0B6OmgAAAAw"]
[Thu May 07 03:16:25.001460 2026] [:error] [pid 9653:tid 9716] [client 4.206.17.23:33487] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "afuTiahJ49Xc4dqq0B6OnQAAABI"]
[Thu May 07 03:16:25.416907 2026] [:error] [pid 9653:tid 9701] [client 4.206.17.23:33728] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "afuTiahJ49Xc4dqq0B6OngAAAAM"]
[Thu May 07 03:16:25.853817 2026] [:error] [pid 9659:tid 9753] [client 4.206.17.23:33490] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "afuTifwJnWjd8JHpBtvGDgAAANM"]
[Thu May 07 03:16:26.276307 2026] [:error] [pid 9659:tid 9752] [client 4.206.17.23:33478] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "afuTivwJnWjd8JHpBtvGDwAAANI"]
[Thu May 07 03:16:26.723997 2026] [:error] [pid 9659:tid 9735] [client 4.206.17.23:33534] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "afuTivwJnWjd8JHpBtvGEAAAAME"]
[Thu May 07 03:16:27.154508 2026] [:error] [pid 557:tid 562] [client 4.206.17.23:33475] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "afuTizZjFR8Vd8ce80BIqgAAAkM"]
[Thu May 07 03:16:27.573720 2026] [:error] [pid 13443:tid 13453] [client 4.206.17.23:33498] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "afuTiwCyfZallDmsQre-DgAAAUg"]
[Thu May 07 03:16:27.993467 2026] [:error] [pid 9664:tid 9775] [client 4.206.17.23:33531] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "afuTiwH4OZbrg1SjsBOXyQAAAI0"]
[Thu May 07 03:16:28.412892 2026] [:error] [pid 482:tid 487] [client 4.206.17.23:33477] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "afuTjMxs8HOc_nWgOW62TQAAAcM"]
[Thu May 07 03:16:28.831961 2026] [:error] [pid 9659:tid 9734] [client 4.206.17.23:33502] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wziar1.php"] [unique_id "afuTjPwJnWjd8JHpBtvGFQAAAMA"]
[Thu May 07 03:16:29.252744 2026] [:error] [pid 592:tid 606] [client 4.206.17.23:33674] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afuTjZiX28mb6xLi2PzTiQAAAoo"]
[Thu May 07 03:16:29.671997 2026] [:error] [pid 592:tid 615] [client 4.206.17.23:33780] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afuTjZiX28mb6xLi2PzTiwAAApE"]
[Thu May 07 03:16:30.088717 2026] [:error] [pid 13414:tid 13431] [client 4.206.17.23:33529] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afuTjkuJQpWjVpJTu_lKngAAAQ8"]
[Thu May 07 03:16:30.501978 2026] [:error] [pid 592:tid 604] [client 4.206.17.23:33492] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "afuTjpiX28mb6xLi2PzTkAAAAog"]
[Thu May 07 03:16:30.919784 2026] [:error] [pid 13414:tid 13433] [client 4.206.17.23:33483] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "afuTjkuJQpWjVpJTu_lKoQAAARE"]
[Thu May 07 03:16:31.331055 2026] [:error] [pid 9653:tid 9709] [client 4.206.17.23:33521] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "afuTj6hJ49Xc4dqq0B6OqAAAAAs"]
[Thu May 07 03:16:31.747930 2026] [:error] [pid 9659:tid 9753] [client 4.206.17.23:33513] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "afuTj_wJnWjd8JHpBtvGGQAAANM"]
[Thu May 07 03:16:32.166719 2026] [:error] [pid 9653:tid 9710] [client 4.206.17.23:33730] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "afuTkKhJ49Xc4dqq0B6OrQAAAAw"]
[Thu May 07 03:16:32.590437 2026] [:error] [pid 9653:tid 9716] [client 4.206.17.23:33484] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afuTkKhJ49Xc4dqq0B6OsAAAABI"]
[Thu May 07 03:16:33.009945 2026] [:error] [pid 63810:tid 63825] [client 4.206.17.23:33734] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afuTkXpnbsN9Zf6i5IFbawAAAYs"]
[Thu May 07 03:16:33.419899 2026] [:error] [pid 9653:tid 9720] [client 4.206.17.23:33504] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afuTkahJ49Xc4dqq0B6OtQAAABY"]
[Thu May 07 03:16:33.839890 2026] [:error] [pid 592:tid 621] [client 4.206.17.23:33732] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "afuTkZiX28mb6xLi2PzTkwAAApY"]
[Thu May 07 03:16:34.261731 2026] [:error] [pid 592:tid 602] [client 4.206.17.23:33526] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afuTkpiX28mb6xLi2PzTlQAAAoY"]
[Thu May 07 03:16:34.691811 2026] [:error] [pid 592:tid 601] [client 4.206.17.23:33665] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afuTkpiX28mb6xLi2PzTmAAAAoU"]
[Thu May 07 03:16:35.125322 2026] [:error] [pid 9659:tid 9740] [client 4.206.17.23:33753] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afuTk_wJnWjd8JHpBtvGJAAAAMY"]
[Thu May 07 03:16:35.543543 2026] [:error] [pid 9664:tid 9778] [client 4.206.17.23:33528] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "afuTkwH4OZbrg1SjsBOXzQAAAJA"]
[Thu May 07 03:16:35.966367 2026] [:error] [pid 9659:tid 9754] [client 4.206.17.23:33496] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "afuTk_wJnWjd8JHpBtvGJgAAANQ"]
[Thu May 07 03:16:36.381611 2026] [:error] [pid 9653:tid 9700] [client 4.206.17.23:33745] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "afuTlKhJ49Xc4dqq0B6OuwAAAAI"]
[Thu May 07 03:16:36.810321 2026] [:error] [pid 9664:tid 9776] [client 4.206.17.23:33744] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "afuTlAH4OZbrg1SjsBOXzwAAAI4"]
[Thu May 07 03:16:37.223546 2026] [:error] [pid 9659:tid 9750] [client 4.206.17.23:33485] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "afuTlfwJnWjd8JHpBtvGKAAAANA"]
[Thu May 07 03:16:37.647541 2026] [:error] [pid 9664:tid 9779] [client 4.206.17.23:33786] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "afuTlQH4OZbrg1SjsBOX1gAAAJE"]
[Thu May 07 03:16:38.064972 2026] [:error] [pid 9664:tid 9762] [client 4.206.17.23:33494] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "afuTlgH4OZbrg1SjsBOX2AAAAIA"]
[Thu May 07 03:16:38.487649 2026] [:error] [pid 13414:tid 13429] [client 4.206.17.23:33507] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "afuTlkuJQpWjVpJTu_lKqgAAAQ0"]
[Thu May 07 03:16:38.913340 2026] [:error] [pid 9664:tid 9768] [client 4.206.17.23:33736] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "afuTlgH4OZbrg1SjsBOX3gAAAIY"]
[Thu May 07 03:16:39.332713 2026] [:error] [pid 63810:tid 63816] [client 4.206.17.23:33776] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afuTl3pnbsN9Zf6i5IFbbQAAAYI"]
[Thu May 07 03:16:39.752114 2026] [:error] [pid 9659:tid 9746] [client 4.206.17.23:33523] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afuTl_wJnWjd8JHpBtvGKgAAAMw"]
[Thu May 07 03:16:40.167072 2026] [:error] [pid 9659:tid 9738] [client 4.206.17.23:33501] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afuTmPwJnWjd8JHpBtvGLAAAAMQ"]
[Thu May 07 03:16:40.582711 2026] [:error] [pid 9659:tid 9755] [client 4.206.17.23:33763] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afuTmPwJnWjd8JHpBtvGLQAAANU"]
[Thu May 07 03:16:41.003765 2026] [:error] [pid 9659:tid 9742] [client 4.206.17.23:33500] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "afuTmfwJnWjd8JHpBtvGLgAAAMg"]
[Thu May 07 03:16:41.415286 2026] [:error] [pid 9789:tid 9807] [client 4.206.17.23:33774] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "afuTmT_YStPJSCHPkUXlngAAAFA"]
[Thu May 07 03:16:41.838277 2026] [:error] [pid 9789:tid 9800] [client 4.206.17.23:33480] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "afuTmT_YStPJSCHPkUXloAAAAEk"]
[Thu May 07 03:16:42.250315 2026] [:error] [pid 9789:tid 9792] [client 4.206.17.23:33514] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "afuTmj_YStPJSCHPkUXlpAAAAEE"]
[Thu May 07 03:16:42.667058 2026] [:error] [pid 13443:tid 13455] [client 4.206.17.23:33482] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afuTmgCyfZallDmsQre-EwAAAUo"]
[Thu May 07 03:16:43.111286 2026] [:error] [pid 13414:tid 13435] [client 4.206.17.23:33746] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afuTm0uJQpWjVpJTu_lKsQAAARM"]
[Thu May 07 03:16:43.525224 2026] [:error] [pid 13414:tid 13430] [client 4.206.17.23:33668] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afuTm0uJQpWjVpJTu_lKswAAAQ4"]
[Thu May 07 03:16:43.939045 2026] [:error] [pid 9664:tid 9775] [client 4.206.17.23:33771] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afuTmwH4OZbrg1SjsBOX7wAAAI0"]
[Thu May 07 03:16:44.352568 2026] [:error] [pid 9664:tid 9769] [client 4.206.17.23:33672] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "afuTnAH4OZbrg1SjsBOX8gAAAIc"]
[Thu May 07 03:16:44.770191 2026] [:error] [pid 9653:tid 9716] [client 4.206.17.23:33511] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "afuTnKhJ49Xc4dqq0B6OxwAAABI"]
[Thu May 07 03:16:45.193572 2026] [:error] [pid 482:tid 490] [client 4.206.17.23:33515] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "afuTncxs8HOc_nWgOW62XAAAAcY"]
[Thu May 07 03:16:45.631194 2026] [:error] [pid 9789:tid 9802] [client 4.206.17.23:33777] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/auth.php"] [unique_id "afuTnT_YStPJSCHPkUXlqAAAAEs"]
[Thu May 07 03:16:46.071412 2026] [:error] [pid 13443:tid 13461] [client 4.206.17.23:33533] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afuTngCyfZallDmsQre-FgAAAVA"]
[Thu May 07 03:16:46.490565 2026] [:error] [pid 9653:tid 9706] [client 4.206.17.23:33503] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afuTnqhJ49Xc4dqq0B6OzQAAAAg"]
[Thu May 07 03:16:46.904902 2026] [:error] [pid 9653:tid 9715] [client 4.206.17.23:33768] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afuTnqhJ49Xc4dqq0B6OzgAAABE"]
[Thu May 07 03:16:47.333301 2026] [:error] [pid 592:tid 605] [client 4.206.17.23:33729] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afuTn5iX28mb6xLi2PzToAAAAok"]
[Thu May 07 03:16:47.756853 2026] [:error] [pid 9653:tid 9717] [client 4.206.17.23:33735] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afuTn6hJ49Xc4dqq0B6O0AAAABM"]
[Thu May 07 03:16:48.186925 2026] [:error] [pid 557:tid 561] [client 4.206.17.23:33527] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afuToDZjFR8Vd8ce80BIvQAAAkI"]
[Thu May 07 03:16:48.606452 2026] [:error] [pid 13414:tid 13436] [client 4.206.17.23:33754] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afuToEuJQpWjVpJTu_lKtAAAARQ"]
[Thu May 07 03:16:49.023734 2026] [:error] [pid 482:tid 486] [client 4.206.17.23:33761] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afuTocxs8HOc_nWgOW62YwAAAcI"]
[Thu May 07 03:16:49.497113 2026] [:error] [pid 9653:tid 9710] [client 4.206.17.23:33520] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "afuToahJ49Xc4dqq0B6O1QAAAAw"]
[Thu May 07 03:16:49.915849 2026] [:error] [pid 482:tid 509] [client 4.206.17.23:33782] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "afuTocxs8HOc_nWgOW62ZwAAAdc"]
[Thu May 07 03:16:50.328219 2026] [:error] [pid 9789:tid 9810] [client 4.206.17.23:33518] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "afuToj_YStPJSCHPkUXlqQAAAFM"]
[Thu May 07 03:16:50.749351 2026] [:error] [pid 482:tid 501] [client 4.206.17.23:33742] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-png.php"] [unique_id "afuTosxs8HOc_nWgOW62agAAAdE"]
[Thu May 07 03:16:51.165143 2026] [:error] [pid 9659:tid 9735] [client 4.206.17.23:33489] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afuTo_wJnWjd8JHpBtvGNQAAAME"]
[Thu May 07 03:16:51.577111 2026] [:error] [pid 9653:tid 9716] [client 4.206.17.23:33769] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afuTo6hJ49Xc4dqq0B6O2AAAABI"]
[Thu May 07 03:16:51.993788 2026] [:error] [pid 9789:tid 9808] [client 4.206.17.23:33741] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afuToz_YStPJSCHPkUXlrAAAAFE"]
[Thu May 07 03:16:52.406125 2026] [:error] [pid 9664:tid 9762] [client 4.206.17.23:33784] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afuTpAH4OZbrg1SjsBOX-AAAAIA"]
[Thu May 07 03:16:52.823142 2026] [:error] [pid 592:tid 606] [client 4.206.17.23:33760] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afuTpJiX28mb6xLi2PzTpQAAAoo"]
[Thu May 07 03:16:53.246738 2026] [:error] [pid 9659:tid 9747] [client 4.206.17.23:33783] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afuTpfwJnWjd8JHpBtvGPQAAAM0"]
[Thu May 07 03:16:53.661174 2026] [:error] [pid 9789:tid 9796] [client 4.206.17.23:33733] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afuTpT_YStPJSCHPkUXlsgAAAEU"]
[Thu May 07 03:16:54.079765 2026] [:error] [pid 9664:tid 9778] [client 4.206.17.23:33670] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afuTpgH4OZbrg1SjsBOX-gAAAJA"]
[Thu May 07 03:16:54.491124 2026] [:error] [pid 9664:tid 9770] [client 4.206.17.23:33764] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afuTpgH4OZbrg1SjsBOX_QAAAIg"]
[Thu May 07 03:16:54.915961 2026] [:error] [pid 9789:tid 9813] [client 4.206.17.23:33522] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afuTpj_YStPJSCHPkUXltgAAAFY"]
[Thu May 07 03:16:55.329512 2026] [:error] [pid 9664:tid 9786] [client 4.206.17.23:33472] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afuTpwH4OZbrg1SjsBOYAQAAAJg"]
[Thu May 07 03:16:55.741813 2026] [:error] [pid 13414:tid 13423] [client 4.206.17.23:33748] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "afuTp0uJQpWjVpJTu_lKuAAAAQc"]
[Thu May 07 03:16:56.153826 2026] [:error] [pid 9653:tid 9706] [client 4.206.17.23:33512] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "afuTqKhJ49Xc4dqq0B6O2gAAAAg"]
[Thu May 07 03:16:56.571801 2026] [:error] [pid 9664:tid 9784] [client 4.206.17.23:33535] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "afuTqAH4OZbrg1SjsBOYBAAAAJY"]
[Thu May 07 03:16:56.993590 2026] [:error] [pid 9789:tid 9810] [client 4.206.17.23:33524] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "afuTqD_YStPJSCHPkUXlvgAAAFM"]
[Thu May 07 03:16:57.404675 2026] [:error] [pid 9659:tid 9739] [client 4.206.17.23:33669] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "afuTqfwJnWjd8JHpBtvGTgAAAMU"]
[Thu May 07 03:16:57.837922 2026] [:error] [pid 9659:tid 9750] [client 4.206.17.23:33731] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "afuTqfwJnWjd8JHpBtvGTwAAANA"]
[Thu May 07 03:16:58.260701 2026] [:error] [pid 63810:tid 63822] [client 4.206.17.23:33699] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "afuTqnpnbsN9Zf6i5IFbcAAAAYg"]
[Thu May 07 03:16:58.685441 2026] [:error] [pid 9664:tid 9783] [client 4.206.17.23:33495] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "afuTqgH4OZbrg1SjsBOYBgAAAJU"]
[Thu May 07 03:16:59.107626 2026] [:error] [pid 13414:tid 13416] [client 4.206.17.23:33497] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "afuTq0uJQpWjVpJTu_lKugAAAQA"]
[Thu May 07 03:16:59.525272 2026] [:error] [pid 13414:tid 13426] [client 4.206.17.23:33530] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "afuTq0uJQpWjVpJTu_lKvAAAAQo"]
[Thu May 07 03:16:59.942823 2026] [:error] [pid 9789:tid 9796] [client 4.206.17.23:33737] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "afuTqz_YStPJSCHPkUXlwgAAAEU"]
[Thu May 07 03:17:00.355140 2026] [:error] [pid 9653:tid 9710] [client 4.206.17.23:33705] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "afuTrKhJ49Xc4dqq0B6O3wAAAAw"]
[Thu May 07 03:17:00.781681 2026] [:error] [pid 9653:tid 9700] [client 4.206.17.23:33767] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "afuTrKhJ49Xc4dqq0B6O4QAAAAI"]
[Thu May 07 03:17:01.200643 2026] [:error] [pid 63810:tid 63832] [client 4.206.17.23:33675] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "afuTrXpnbsN9Zf6i5IFbdwAAAZI"]
[Thu May 07 03:17:01.616525 2026] [:error] [pid 9653:tid 9705] [client 4.206.17.23:33519] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "afuTrahJ49Xc4dqq0B6O5AAAAAc"]
[Thu May 07 03:17:02.040097 2026] [:error] [pid 482:tid 488] [client 4.206.17.23:33679] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "afuTrsxs8HOc_nWgOW62fQAAAcQ"]
[Thu May 07 03:17:02.457959 2026] [:error] [pid 13414:tid 13420] [client 4.206.17.23:33766] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "afuTrkuJQpWjVpJTu_lKvgAAAQQ"]
[Thu May 07 03:17:02.878195 2026] [:error] [pid 592:tid 601] [client 4.206.17.23:33775] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "afuTrpiX28mb6xLi2PzTrAAAAoU"]
[Thu May 07 03:17:03.291112 2026] [:error] [pid 592:tid 600] [client 4.206.17.23:33772] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "afuTr5iX28mb6xLi2PzTrQAAAoQ"]
[Thu May 07 03:17:03.719926 2026] [:error] [pid 63810:tid 63834] [client 4.206.17.23:33508] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "afuTr3pnbsN9Zf6i5IFbeAAAAZQ"]
[Thu May 07 03:17:04.136766 2026] [:error] [pid 9659:tid 9756] [client 4.206.17.23:33516] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "afuTsPwJnWjd8JHpBtvGWgAAANY"]
[Thu May 07 03:17:04.550339 2026] [:error] [pid 9659:tid 9740] [client 4.206.17.23:33708] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "afuTsPwJnWjd8JHpBtvGXAAAAMY"]
[Thu May 07 03:17:04.963224 2026] [:error] [pid 9659:tid 9754] [client 4.206.17.23:33473] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "afuTsPwJnWjd8JHpBtvGXgAAANQ"]
[Thu May 07 03:17:05.377938 2026] [:error] [pid 9664:tid 9768] [client 4.206.17.23:33691] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "afuTsQH4OZbrg1SjsBOYCAAAAIY"]
[Thu May 07 03:17:05.806001 2026] [:error] [pid 9664:tid 9765] [client 4.206.17.23:33704] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "afuTsQH4OZbrg1SjsBOYDAAAAIM"]
[Thu May 07 03:17:06.242790 2026] [:error] [pid 482:tid 504] [client 4.206.17.23:33729] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "afuTssxs8HOc_nWgOW62gwAAAdQ"]
[Thu May 07 03:17:06.664377 2026] [:error] [pid 9664:tid 9770] [client 4.206.17.23:33684] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "afuTsgH4OZbrg1SjsBOYDQAAAIg"]
[Thu May 07 03:17:07.083623 2026] [:error] [pid 9789:tid 9796] [client 4.206.17.23:33667] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "afuTsz_YStPJSCHPkUXlzQAAAEU"]
[Thu May 07 03:17:07.502166 2026] [:error] [pid 482:tid 495] [client 4.206.17.23:33479] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "afuTs8xs8HOc_nWgOW62hwAAAcs"]
[Thu May 07 03:17:07.928044 2026] [:error] [pid 482:tid 492] [client 4.206.17.23:33689] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afuTs8xs8HOc_nWgOW62iAAAAcg"]
[Thu May 07 03:17:08.363270 2026] [:error] [pid 13443:tid 13456] [client 4.206.17.23:33481] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afuTtACyfZallDmsQre-HgAAAUs"]
[Thu May 07 03:17:08.782657 2026] [:error] [pid 9664:tid 9782] [client 4.206.17.23:33739] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afuTtAH4OZbrg1SjsBOYEAAAAJQ"]
[Thu May 07 03:17:09.205492 2026] [:error] [pid 9653:tid 9715] [client 4.206.17.23:33790] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "afuTtahJ49Xc4dqq0B6O9QAAABE"]
[Thu May 07 03:17:09.621277 2026] [:error] [pid 482:tid 510] [client 4.206.17.23:33694] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "afuTtcxs8HOc_nWgOW62jwAAAdg"]
[Thu May 07 03:17:10.038602 2026] [:error] [pid 482:tid 509] [client 4.206.17.23:33632] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "afuTtsxs8HOc_nWgOW62lAAAAdc"]
[Thu May 07 03:17:10.459440 2026] [:error] [pid 13414:tid 13425] [client 4.206.17.23:33683] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "afuTtkuJQpWjVpJTu_lKwwAAAQk"]
[Thu May 07 03:17:10.874807 2026] [:error] [pid 13443:tid 13452] [client 4.206.17.23:33779] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "afuTtgCyfZallDmsQre-IgAAAUc"]
[Thu May 07 03:17:11.294116 2026] [:error] [pid 9653:tid 9718] [client 4.206.17.23:33677] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuTt6hJ49Xc4dqq0B6O-AAAABQ"]
[Thu May 07 03:17:11.711687 2026] [:error] [pid 13414:tid 13436] [client 4.206.17.23:33759] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuTt0uJQpWjVpJTu_lKyAAAARQ"]
[Thu May 07 03:17:12.151552 2026] [:error] [pid 482:tid 484] [client 4.206.17.23:33785] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuTuMxs8HOc_nWgOW62lwAAAcA"]
[Thu May 07 03:17:12.599724 2026] [:error] [pid 9659:tid 9745] [client 4.206.17.23:33618] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuTuPwJnWjd8JHpBtvGaAAAAMs"]
[Thu May 07 03:17:13.026662 2026] [:error] [pid 13414:tid 13417] [client 4.206.17.23:33488] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "afuTuUuJQpWjVpJTu_lKygAAAQE"]
[Thu May 07 03:17:13.439173 2026] [:error] [pid 9789:tid 9795] [client 4.206.17.23:33613] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "afuTuT_YStPJSCHPkUXl0gAAAEQ"]
[Thu May 07 03:17:13.874789 2026] [:error] [pid 9664:tid 9783] [client 4.206.17.23:33752] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "afuTuQH4OZbrg1SjsBOYFwAAAJU"]
[Thu May 07 03:17:14.290975 2026] [:error] [pid 13443:tid 13460] [client 4.206.17.23:33711] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rip.php"] [unique_id "afuTugCyfZallDmsQre-JQAAAU8"]
[Thu May 07 03:17:14.718671 2026] [:error] [pid 9653:tid 9705] [client 4.206.17.23:33695] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "afuTuqhJ49Xc4dqq0B6O_gAAAAc"]
[Thu May 07 03:17:15.137226 2026] [:error] [pid 9664:tid 9781] [client 4.206.17.23:33788] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "afuTuwH4OZbrg1SjsBOYGgAAAJM"]
[Thu May 07 03:17:15.563647 2026] [:error] [pid 9664:tid 9767] [client 4.206.17.23:33750] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "afuTuwH4OZbrg1SjsBOYHAAAAIU"]
[Thu May 07 03:17:15.987803 2026] [:error] [pid 9664:tid 9773] [client 4.206.17.23:33687] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gptsh.php"] [unique_id "afuTuwH4OZbrg1SjsBOYHwAAAIs"]
[Thu May 07 03:17:16.407923 2026] [:error] [pid 9664:tid 9766] [client 4.206.17.23:33773] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afuTvAH4OZbrg1SjsBOYIQAAAIQ"]
[Thu May 07 03:17:16.865453 2026] [:error] [pid 9653:tid 9706] [client 4.206.17.23:33609] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afuTvKhJ49Xc4dqq0B6PBAAAAAg"]
[Thu May 07 03:17:17.291842 2026] [:error] [pid 592:tid 603] [client 4.206.17.23:33610] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afuTvZiX28mb6xLi2PzTwAAAAoc"]
[Thu May 07 03:17:17.717869 2026] [:error] [pid 13443:tid 13456] [client 4.206.17.23:33686] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "afuTvQCyfZallDmsQre-MAAAAUs"]
[Thu May 07 03:17:18.146811 2026] [:error] [pid 9789:tid 9800] [client 4.206.17.23:33765] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuTvj_YStPJSCHPkUXl1AAAAEk"]
[Thu May 07 03:17:18.560009 2026] [:error] [pid 592:tid 612] [client 4.206.17.23:33656] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuTvpiX28mb6xLi2PzTwQAAApA"]
[Thu May 07 03:17:18.978659 2026] [:error] [pid 9789:tid 9796] [client 4.206.17.23:33671] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuTvj_YStPJSCHPkUXl2QAAAEU"]
[Thu May 07 03:17:19.392037 2026] [:error] [pid 9789:tid 9803] [client 4.206.17.23:33644] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuTvz_YStPJSCHPkUXl2wAAAEw"]
[Thu May 07 03:17:19.807169 2026] [:error] [pid 9664:tid 9775] [client 4.206.17.23:33738] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afuTvwH4OZbrg1SjsBOYJQAAAI0"]
[Thu May 07 03:17:20.220268 2026] [:error] [pid 13414:tid 13433] [client 4.206.17.23:33789] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afuTwEuJQpWjVpJTu_lK0wAAARE"]
[Thu May 07 03:17:20.647006 2026] [:error] [pid 9664:tid 9783] [client 4.206.17.23:33743] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afuTwAH4OZbrg1SjsBOYKwAAAJU"]
[Thu May 07 03:17:21.073140 2026] [:error] [pid 13443:tid 13469] [client 4.206.17.23:33607] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afuTwQCyfZallDmsQre-NwAAAVg"]
[Thu May 07 03:17:21.489272 2026] [:error] [pid 9664:tid 9764] [client 4.206.17.23:33692] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "afuTwQH4OZbrg1SjsBOYLwAAAII"]
[Thu May 07 03:17:21.898931 2026] [:error] [pid 9664:tid 9767] [client 4.206.17.23:33682] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "afuTwQH4OZbrg1SjsBOYMAAAAIU"]
[Thu May 07 03:17:22.315002 2026] [:error] [pid 9789:tid 9815] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu May 07 03:17:22.524039 2026] [:error] [pid 9789:tid 9802] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Thu May 07 03:17:22.732880 2026] [:error] [pid 9789:tid 9804] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Thu May 07 03:17:22.947766 2026] [:error] [pid 9789:tid 9808] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Thu May 07 03:17:23.364197 2026] [:error] [pid 9789:tid 9805] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu May 07 03:17:23.572874 2026] [:error] [pid 9789:tid 9807] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Thu May 07 03:17:23.781646 2026] [:error] [pid 9789:tid 9795] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu May 07 03:17:23.992654 2026] [:error] [pid 9789:tid 9791] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu May 07 03:17:24.201353 2026] [:error] [pid 9789:tid 9814] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu May 07 03:17:24.410617 2026] [:error] [pid 9789:tid 9792] [client 4.206.17.23:33714] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Thu May 07 03:17:25.655337 2026] [:error] [pid 9789:tid 9792] [client 4.206.17.23:33714] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "afuTxT_YStPJSCHPkUXl9wAAAEE"]
[Thu May 07 03:17:26.079069 2026] [:error] [pid 13443:tid 13448] [client 4.206.17.23:33509] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "afuTxgCyfZallDmsQre-PQAAAUM"]
[Thu May 07 03:17:26.495673 2026] [:error] [pid 9789:tid 9808] [client 4.206.17.23:33740] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "afuTxj_YStPJSCHPkUXl-QAAAFE"]
[Thu May 07 03:17:26.909562 2026] [:error] [pid 9664:tid 9780] [client 4.206.17.23:33676] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Cap.php"] [unique_id "afuTxgH4OZbrg1SjsBOYQwAAAJI"]
[Thu May 07 03:17:27.327814 2026] [:error] [pid 9789:tid 9812] [client 4.206.17.23:33638] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "afuTxz_YStPJSCHPkUXl-gAAAFU"]
[Thu May 07 03:17:27.741921 2026] [:error] [pid 9664:tid 9778] [client 4.206.17.23:33690] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "afuTxwH4OZbrg1SjsBOYRAAAAJA"]
[Thu May 07 03:17:28.168881 2026] [:error] [pid 9664:tid 9785] [client 4.206.17.23:33698] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "afuTyAH4OZbrg1SjsBOYRwAAAJc"]
[Thu May 07 03:17:28.580881 2026] [:error] [pid 9789:tid 9793] [client 4.206.17.23:33680] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tfm.php"] [unique_id "afuTyD_YStPJSCHPkUXl_gAAAEI"]
[Thu May 07 03:17:29.007271 2026] [:error] [pid 9653:tid 9712] [client 4.206.17.23:33713] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afuTyahJ49Xc4dqq0B6PHQAAAA4"]
[Thu May 07 03:17:29.426348 2026] [:error] [pid 9653:tid 9715] [client 4.206.17.23:33623] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afuTyahJ49Xc4dqq0B6PHwAAABE"]
[Thu May 07 03:17:29.842133 2026] [:error] [pid 9664:tid 9786] [client 4.206.17.23:33697] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afuTyQH4OZbrg1SjsBOYSgAAAJg"]
[Thu May 07 03:17:30.288581 2026] [:error] [pid 9664:tid 9780] [client 4.206.17.23:33747] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afuTygH4OZbrg1SjsBOYTAAAAJI"]
[Thu May 07 03:17:30.708128 2026] [:error] [pid 482:tid 500] [client 4.206.17.23:33546] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "afuTysxs8HOc_nWgOW62mwAAAdA"]
[Thu May 07 03:17:31.134319 2026] [:error] [pid 13443:tid 13464] [client 4.206.17.23:33770] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "afuTywCyfZallDmsQre-PgAAAVM"]
[Thu May 07 03:17:31.556985 2026] [:error] [pid 63810:tid 63830] [client 4.206.17.23:33664] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "afuTy3pnbsN9Zf6i5IFbegAAAZA"]
[Thu May 07 03:17:31.984077 2026] [:error] [pid 557:tid 578] [client 4.206.17.23:33787] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t00l.php"] [unique_id "afuTyzZjFR8Vd8ce80BIzAAAAlM"]
[Thu May 07 03:17:32.403962 2026] [:error] [pid 482:tid 509] [client 4.206.17.23:33688] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "afuTzMxs8HOc_nWgOW62nAAAAdc"]
[Thu May 07 03:17:32.817134 2026] [:error] [pid 482:tid 486] [client 4.206.17.23:33762] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "afuTzMxs8HOc_nWgOW62nQAAAcI"]
[Thu May 07 03:17:33.231867 2026] [:error] [pid 9664:tid 9777] [client 4.206.17.23:33540] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "afuTzQH4OZbrg1SjsBOYTgAAAI8"]
[Thu May 07 03:17:33.646894 2026] [:error] [pid 9664:tid 9779] [client 4.206.17.23:33781] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "afuTzQH4OZbrg1SjsBOYUQAAAJE"]
[Thu May 07 03:17:34.063154 2026] [:error] [pid 9659:tid 9737] [client 4.206.17.23:33537] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "afuTzvwJnWjd8JHpBtvGbgAAAMM"]
[Thu May 07 03:17:34.476012 2026] [:error] [pid 557:tid 564] [client 4.206.17.23:33726] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "afuTzjZjFR8Vd8ce80BIzQAAAkU"]
[Thu May 07 03:17:34.891042 2026] [:error] [pid 9664:tid 9764] [client 4.206.17.23:33643] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "afuTzgH4OZbrg1SjsBOYUwAAAII"]
[Thu May 07 03:17:35.305488 2026] [:error] [pid 63810:tid 63818] [client 4.206.17.23:33696] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "afuTz3pnbsN9Zf6i5IFbfAAAAYQ"]
[Thu May 07 03:17:35.717553 2026] [:error] [pid 592:tid 608] [client 4.206.17.23:33757] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afuTz5iX28mb6xLi2PzTxwAAAow"]
[Thu May 07 03:17:36.128885 2026] [:error] [pid 592:tid 615] [client 4.206.17.23:33476] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afuT0JiX28mb6xLi2PzTyAAAApE"]
[Thu May 07 03:17:36.541003 2026] [:error] [pid 9664:tid 9786] [client 4.206.17.23:33666] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afuT0AH4OZbrg1SjsBOYVgAAAJg"]
[Thu May 07 03:17:36.953552 2026] [:error] [pid 9789:tid 9795] [client 4.206.17.23:33751] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "afuT0D_YStPJSCHPkUXmCQAAAEQ"]
[Thu May 07 03:17:37.366359 2026] [:error] [pid 482:tid 504] [client 4.206.17.23:33709] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afuT0cxs8HOc_nWgOW62oAAAAdQ"]
[Thu May 07 03:17:37.781384 2026] [:error] [pid 13414:tid 13419] [client 4.206.17.23:33608] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afuT0UuJQpWjVpJTu_lK1QAAAQM"]
[Thu May 07 03:17:38.194668 2026] [:error] [pid 9664:tid 9766] [client 4.206.17.23:33612] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afuT0gH4OZbrg1SjsBOYWAAAAIQ"]
[Thu May 07 03:17:38.613010 2026] [:error] [pid 13443:tid 13467] [client 4.206.17.23:33601] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afuT0gCyfZallDmsQre-QwAAAVY"]
[Thu May 07 03:17:39.030725 2026] [:error] [pid 9653:tid 9721] [client 4.206.17.23:33621] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afuT06hJ49Xc4dqq0B6PKgAAABc"]
[Thu May 07 03:17:39.450666 2026] [:error] [pid 482:tid 497] [client 4.206.17.23:33661] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afuT08xs8HOc_nWgOW62ogAAAc0"]
[Thu May 07 03:17:39.892386 2026] [:error] [pid 9664:tid 9777] [client 4.206.17.23:33719] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afuT0wH4OZbrg1SjsBOYWgAAAI8"]
[Thu May 07 03:17:40.369417 2026] [:error] [pid 9664:tid 9782] [client 4.206.17.23:33625] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afuT1AH4OZbrg1SjsBOYXQAAAJQ"]
[Thu May 07 03:17:40.785577 2026] [:error] [pid 9789:tid 9813] [client 4.206.17.23:33615] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afuT1D_YStPJSCHPkUXmDgAAAFY"]
[Thu May 07 03:17:41.238122 2026] [:error] [pid 9664:tid 9764] [client 4.206.17.23:33603] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afuT1QH4OZbrg1SjsBOYXwAAAII"]
[Thu May 07 03:17:41.693438 2026] [:error] [pid 9664:tid 9786] [client 4.206.17.23:33611] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afuT1QH4OZbrg1SjsBOYYAAAAJg"]
[Thu May 07 03:17:42.108006 2026] [:error] [pid 9664:tid 9784] [client 4.206.17.23:33727] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afuT1gH4OZbrg1SjsBOYZAAAAJY"]
[Thu May 07 03:17:42.541418 2026] [:error] [pid 9664:tid 9778] [client 4.206.17.23:33564] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afuT1gH4OZbrg1SjsBOYZQAAAJA"]
[Thu May 07 03:17:42.954764 2026] [:error] [pid 482:tid 493] [client 4.206.17.23:33662] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afuT1sxs8HOc_nWgOW62pwAAAck"]
[Thu May 07 03:17:43.369536 2026] [:error] [pid 9789:tid 9815] [client 4.206.17.23:33525] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afuT1z_YStPJSCHPkUXmEwAAAFg"]
[Thu May 07 03:17:43.781485 2026] [:error] [pid 63810:tid 63817] [client 4.206.17.23:33701] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afuT13pnbsN9Zf6i5IFbfwAAAYM"]
[Thu May 07 03:17:44.197966 2026] [:error] [pid 9664:tid 9769] [client 4.206.17.23:33493] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "afuT2AH4OZbrg1SjsBOYagAAAIc"]
[Thu May 07 03:17:44.623795 2026] [:error] [pid 9664:tid 9764] [client 4.206.17.23:33592] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "afuT2AH4OZbrg1SjsBOYawAAAII"]
[Thu May 07 03:17:45.045538 2026] [:error] [pid 9789:tid 9808] [client 4.206.17.23:33706] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "afuT2T_YStPJSCHPkUXmFwAAAFE"]
[Thu May 07 03:17:45.463161 2026] [:error] [pid 9789:tid 9794] [client 4.206.17.23:33673] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "afuT2T_YStPJSCHPkUXmGAAAAEM"]
[Thu May 07 03:17:45.877135 2026] [:error] [pid 63810:tid 63838] [client 4.206.17.23:33755] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afuT2XpnbsN9Zf6i5IFbgAAAAZg"]
[Thu May 07 03:17:46.296139 2026] [:error] [pid 9664:tid 9780] [client 4.206.17.23:33723] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afuT2gH4OZbrg1SjsBOYbgAAAJI"]
[Thu May 07 03:17:46.716364 2026] [:error] [pid 9659:tid 9738] [client 4.206.17.23:33685] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afuT2vwJnWjd8JHpBtvGbwAAAMQ"]
[Thu May 07 03:17:47.127916 2026] [:error] [pid 9664:tid 9784] [client 4.206.17.23:33551] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afuT2wH4OZbrg1SjsBOYcQAAAJY"]
[Thu May 07 03:17:47.544937 2026] [:error] [pid 482:tid 496] [client 4.206.17.23:33606] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afuT28xs8HOc_nWgOW62rAAAAcw"]
[Thu May 07 03:17:47.954810 2026] [:error] [pid 9664:tid 9762] [client 4.206.17.23:33602] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afuT2wH4OZbrg1SjsBOYcgAAAIA"]
[Thu May 07 03:17:48.372344 2026] [:error] [pid 482:tid 495] [client 4.206.17.23:33756] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afuT3Mxs8HOc_nWgOW62rgAAAcs"]
[Thu May 07 03:17:48.801892 2026] [:error] [pid 9664:tid 9767] [client 4.206.17.23:33631] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afuT3AH4OZbrg1SjsBOYdAAAAIU"]
[Thu May 07 03:17:49.214616 2026] [:error] [pid 9789:tid 9800] [client 4.206.17.23:33672] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "afuT3T_YStPJSCHPkUXmHwAAAEk"]
[Thu May 07 03:17:49.625924 2026] [:error] [pid 592:tid 599] [client 4.206.17.23:33712] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "afuT3ZiX28mb6xLi2PzTygAAAoM"]
[Thu May 07 03:17:50.055463 2026] [:error] [pid 9664:tid 9777] [client 4.206.17.23:33626] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "afuT3gH4OZbrg1SjsBOYdgAAAI8"]
[Thu May 07 03:17:50.490878 2026] [:error] [pid 9664:tid 9773] [client 4.206.17.23:33648] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8573.php"] [unique_id "afuT3gH4OZbrg1SjsBOYeAAAAIs"]
[Thu May 07 03:17:50.906073 2026] [:error] [pid 9664:tid 9786] [client 4.206.17.23:33506] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuT3gH4OZbrg1SjsBOYegAAAJg"]
[Thu May 07 03:17:51.333802 2026] [:error] [pid 9664:tid 9763] [client 4.206.17.23:33758] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuT3wH4OZbrg1SjsBOYewAAAIE"]
[Thu May 07 03:17:51.752842 2026] [:error] [pid 9664:tid 9766] [client 4.206.17.23:33578] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuT3wH4OZbrg1SjsBOYfgAAAIQ"]
[Thu May 07 03:17:52.180165 2026] [:error] [pid 9664:tid 9778] [client 4.206.17.23:33553] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afuT4AH4OZbrg1SjsBOYgAAAAJA"]
[Thu May 07 03:17:52.597078 2026] [:error] [pid 13414:tid 13416] [client 4.206.17.23:33548] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "afuT4EuJQpWjVpJTu_lK2AAAAQA"]
[Thu May 07 03:17:53.013610 2026] [:error] [pid 482:tid 500] [client 4.206.17.23:33650] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "afuT4cxs8HOc_nWgOW62sgAAAdA"]
[Thu May 07 03:17:53.427576 2026] [:error] [pid 9664:tid 9783] [client 4.206.17.23:33778] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "afuT4QH4OZbrg1SjsBOYhAAAAJU"]
[Thu May 07 03:17:53.846652 2026] [:error] [pid 9664:tid 9786] [client 4.206.17.23:33678] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "afuT4QH4OZbrg1SjsBOYiAAAAJg"]
[Thu May 07 03:17:54.274459 2026] [:error] [pid 63810:tid 63834] [client 4.206.17.23:33702] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "afuT4npnbsN9Zf6i5IFbggAAAZQ"]
[Thu May 07 03:17:54.694017 2026] [:error] [pid 482:tid 494] [client 4.206.17.23:33555] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "afuT4sxs8HOc_nWgOW62tgAAAco"]
[Thu May 07 03:17:55.115438 2026] [:error] [pid 482:tid 497] [client 4.206.17.23:33413] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "afuT48xs8HOc_nWgOW62uAAAAc0"]
[Thu May 07 03:17:55.532076 2026] [:error] [pid 9664:tid 9768] [client 4.206.17.23:33541] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "afuT4wH4OZbrg1SjsBOYjAAAAIY"]
[Thu May 07 03:17:55.947637 2026] [:error] [pid 482:tid 508] [client 4.206.17.23:33653] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "afuT48xs8HOc_nWgOW62uwAAAdY"]
[Thu May 07 03:17:56.363011 2026] [:error] [pid 13414:tid 13426] [client 4.206.17.23:33604] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "afuT5EuJQpWjVpJTu_lK3AAAAQo"]
[Thu May 07 03:17:56.791585 2026] [:error] [pid 63810:tid 63825] [client 4.206.17.23:33427] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "afuT5HpnbsN9Zf6i5IFbhQAAAYs"]
[Thu May 07 03:17:57.210538 2026] [:error] [pid 9653:tid 9698] [client 4.206.17.23:33681] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "afuT5ahJ49Xc4dqq0B6PLQAAAAA"]
[Thu May 07 03:17:57.629069 2026] [:error] [pid 482:tid 499] [client 4.206.17.23:33536] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "afuT5cxs8HOc_nWgOW62wgAAAc8"]
[Thu May 07 03:17:58.063249 2026] [:error] [pid 482:tid 509] [client 4.206.17.23:33654] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "afuT5sxs8HOc_nWgOW62xgAAAdc"]
[Thu May 07 03:17:58.482839 2026] [:error] [pid 482:tid 504] [client 4.206.17.23:33600] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "afuT5sxs8HOc_nWgOW62yQAAAdQ"]
[Thu May 07 03:17:58.904010 2026] [:error] [pid 9659:tid 9744] [client 4.206.17.23:33588] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "afuT5vwJnWjd8JHpBtvGcwAAAMo"]
[Thu May 07 03:17:59.316263 2026] [:error] [pid 482:tid 492] [client 4.206.17.23:33703] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "afuT58xs8HOc_nWgOW620AAAAcg"]
[Thu May 07 03:17:59.728323 2026] [:error] [pid 9653:tid 9703] [client 4.206.17.23:33614] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "afuT56hJ49Xc4dqq0B6PMQAAAAU"]
[Thu May 07 03:18:00.139563 2026] [:error] [pid 482:tid 500] [client 4.206.17.23:33718] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "afuT6Mxs8HOc_nWgOW622AAAAdA"]
[Thu May 07 03:18:00.551942 2026] [:error] [pid 9659:tid 9756] [client 4.206.17.23:33634] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "afuT6PwJnWjd8JHpBtvGdAAAANY"]
[Thu May 07 03:18:00.971193 2026] [:error] [pid 9659:tid 9734] [client 4.206.17.23:33633] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "afuT6PwJnWjd8JHpBtvGdQAAAMA"]
[Thu May 07 03:18:01.386199 2026] [:error] [pid 9789:tid 9814] [client 4.206.17.23:33720] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "afuT6T_YStPJSCHPkUXmJwAAAFc"]
[Thu May 07 03:18:01.798461 2026] [:error] [pid 9789:tid 9811] [client 4.206.17.23:33658] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "afuT6T_YStPJSCHPkUXmKAAAAFQ"]
[Thu May 07 03:18:02.217152 2026] [:error] [pid 13414:tid 13419] [client 4.206.17.23:33639] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fsjzs.php"] [unique_id "afuT6kuJQpWjVpJTu_lK5AAAAQM"]
[Thu May 07 03:18:02.634653 2026] [:error] [pid 9653:tid 9704] [client 4.206.17.23:33693] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "afuT6qhJ49Xc4dqq0B6PMwAAAAY"]
[Thu May 07 03:18:03.045834 2026] [:error] [pid 482:tid 496] [client 4.206.17.23:33791] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "afuT68xs8HOc_nWgOW626wAAAcw"]
[Thu May 07 03:18:03.457326 2026] [:error] [pid 63810:tid 63833] [client 4.206.17.23:33749] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "afuT63pnbsN9Zf6i5IFbhwAAAZM"]
[Thu May 07 03:18:03.869210 2026] [:error] [pid 592:tid 597] [client 4.206.17.23:33663] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "afuT65iX28mb6xLi2PzTzgAAAoE"]
[Thu May 07 03:18:04.288712 2026] [:error] [pid 9789:tid 9815] [client 4.206.17.23:33637] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "afuT7D_YStPJSCHPkUXmLQAAAFg"]
[Thu May 07 03:18:04.702728 2026] [:error] [pid 63810:tid 63829] [client 4.206.17.23:33725] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "afuT7HpnbsN9Zf6i5IFbiAAAAY8"]
[Thu May 07 03:18:05.116656 2026] [:error] [pid 592:tid 618] [client 4.206.17.23:33721] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "afuT7ZiX28mb6xLi2PzT0AAAApM"]
[Thu May 07 03:18:05.530479 2026] [:error] [pid 9653:tid 9700] [client 4.206.17.23:33707] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "afuT7ahJ49Xc4dqq0B6POQAAAAI"]
[Thu May 07 03:18:05.941575 2026] [:error] [pid 9789:tid 9809] [client 4.206.17.23:33544] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "afuT7T_YStPJSCHPkUXmLwAAAFI"]
[Thu May 07 03:18:06.366660 2026] [:error] [pid 557:tid 579] [client 4.206.17.23:33640] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "afuT7jZjFR8Vd8ce80BI0QAAAlQ"]
[Thu May 07 03:18:06.781979 2026] [:error] [pid 13443:tid 13450] [client 4.206.17.23:33700] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "afuT7gCyfZallDmsQre-SAAAAUU"]
[Thu May 07 03:18:07.192885 2026] [:error] [pid 13443:tid 13459] [client 4.206.17.23:33646] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "afuT7wCyfZallDmsQre-SgAAAU4"]
[Thu May 07 03:18:07.615693 2026] [:error] [pid 13414:tid 13423] [client 4.206.17.23:33617] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afuT70uJQpWjVpJTu_lK5wAAAQc"]
[Thu May 07 03:18:08.026912 2026] [:error] [pid 482:tid 486] [client 4.206.17.23:33589] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afuT8Mxs8HOc_nWgOW63DAAAAcI"]
[Thu May 07 03:18:08.451075 2026] [:error] [pid 9653:tid 9712] [client 4.206.17.23:33583] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afuT8KhJ49Xc4dqq0B6PPQAAAA4"]
[Thu May 07 03:18:08.865314 2026] [:error] [pid 9653:tid 9718] [client 4.206.17.23:33567] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afuT8KhJ49Xc4dqq0B6PQAAAABQ"]
[Thu May 07 03:18:09.280720 2026] [:error] [pid 9653:tid 9717] [client 4.206.17.23:33545] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afuT8ahJ49Xc4dqq0B6PRAAAABM"]
[Thu May 07 03:18:09.694153 2026] [:error] [pid 482:tid 508] [client 4.206.17.23:33580] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afuT8cxs8HOc_nWgOW63FgAAAdY"]
[Thu May 07 03:18:10.105198 2026] [:error] [pid 592:tid 606] [client 4.206.17.23:33542] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afuT8piX28mb6xLi2PzT0gAAAoo"]
[Thu May 07 03:18:10.527141 2026] [:error] [pid 482:tid 493] [client 4.206.17.23:33627] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afuT8sxs8HOc_nWgOW63HQAAAck"]
[Thu May 07 03:18:10.938295 2026] [:error] [pid 13414:tid 13426] [client 4.206.17.23:33628] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "afuT8kuJQpWjVpJTu_lK6AAAAQo"]
[Thu May 07 03:18:11.351287 2026] [:error] [pid 13414:tid 13439] [client 4.206.17.23:33642] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "afuT80uJQpWjVpJTu_lK6QAAARc"]
[Thu May 07 03:18:11.768137 2026] [:error] [pid 9789:tid 9813] [client 4.206.17.23:33418] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "afuT8z_YStPJSCHPkUXmMAAAAFY"]
[Thu May 07 03:18:12.181217 2026] [:error] [pid 13414:tid 13438] [client 4.206.17.23:33431] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ai.php"] [unique_id "afuT9EuJQpWjVpJTu_lK6gAAARY"]
[Thu May 07 03:18:12.597547 2026] [:error] [pid 482:tid 484] [client 4.206.17.23:33411] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "afuT9Mxs8HOc_nWgOW63KQAAAcA"]
[Thu May 07 03:18:13.016193 2026] [:error] [pid 9659:tid 9753] [client 4.206.17.23:33710] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "afuT9fwJnWjd8JHpBtvGegAAANM"]
[Thu May 07 03:18:13.429510 2026] [:error] [pid 592:tid 620] [client 4.206.17.23:33587] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "afuT9ZiX28mb6xLi2PzT1QAAApU"]
[Thu May 07 03:18:13.846822 2026] [:error] [pid 9653:tid 9722] [client 4.206.17.23:33636] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "afuT9ahJ49Xc4dqq0B6PSQAAABg"]
[Thu May 07 03:18:14.272464 2026] [:error] [pid 9653:tid 9715] [client 4.206.17.23:33539] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "afuT9qhJ49Xc4dqq0B6PSgAAABE"]
[Thu May 07 03:18:14.703343 2026] [:error] [pid 9653:tid 9703] [client 4.206.17.23:33597] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "afuT9qhJ49Xc4dqq0B6PTAAAAAU"]
[Thu May 07 03:18:15.117506 2026] [:error] [pid 13443:tid 13447] [client 4.206.17.23:33563] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "afuT9wCyfZallDmsQre-TwAAAUI"]
[Thu May 07 03:18:15.538383 2026] [:error] [pid 13414:tid 13418] [client 4.206.17.23:33569] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "afuT90uJQpWjVpJTu_lK7gAAAQI"]
[Thu May 07 03:18:15.950107 2026] [:error] [pid 13414:tid 13425] [client 4.206.17.23:33652] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afuT90uJQpWjVpJTu_lK8QAAAQk"]
[Thu May 07 03:18:16.365124 2026] [:error] [pid 482:tid 498] [client 4.206.17.23:33438] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afuT-Mxs8HOc_nWgOW63OAAAAc4"]
[Thu May 07 03:18:16.784607 2026] [:error] [pid 482:tid 504] [client 4.206.17.23:33585] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afuT-Mxs8HOc_nWgOW63OgAAAdQ"]
[Thu May 07 03:18:17.206700 2026] [:error] [pid 482:tid 497] [client 4.206.17.23:33616] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afuT-cxs8HOc_nWgOW63OwAAAc0"]
[Thu May 07 03:18:17.622799 2026] [:error] [pid 9653:tid 9713] [client 4.206.17.23:33660] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afuT-ahJ49Xc4dqq0B6PTgAAAA8"]
[Thu May 07 03:18:18.035379 2026] [:error] [pid 13414:tid 13436] [client 4.206.17.23:33574] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afuT-kuJQpWjVpJTu_lK9QAAARQ"]
[Thu May 07 03:18:18.449898 2026] [:error] [pid 9653:tid 9708] [client 4.206.17.23:33412] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afuT-qhJ49Xc4dqq0B6PUwAAAAo"]
[Thu May 07 03:18:18.870344 2026] [:error] [pid 482:tid 502] [client 4.206.17.23:33595] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afuT-sxs8HOc_nWgOW63PwAAAdI"]
[Thu May 07 03:18:19.284878 2026] [:error] [pid 592:tid 612] [client 4.206.17.23:33554] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "afuT-5iX28mb6xLi2PzT2QAAApA"]
[Thu May 07 03:18:19.724030 2026] [:error] [pid 482:tid 501] [client 4.206.17.23:33420] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "afuT-8xs8HOc_nWgOW63QAAAAdE"]
[Thu May 07 03:18:20.134155 2026] [:error] [pid 63810:tid 63837] [client 4.206.17.23:33619] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "afuT_HpnbsN9Zf6i5IFbigAAAZc"]
[Thu May 07 03:18:20.554025 2026] [:error] [pid 482:tid 485] [client 4.206.17.23:33605] [client 4.206.17.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "afuT_Mxs8HOc_nWgOW63QwAAAcE"]
[Thu May 07 03:20:39.380107 2026] [:error] [pid 9653:tid 9715] [client 43.159.47.35:51336] [client 43.159.47.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afuUh6hJ49Xc4dqq0B6QRAAAABE"]
[Thu May 07 04:26:48.739658 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/nyan.php
[Thu May 07 04:26:48.970844 2026] [:error] [pid 29710:tid 29733] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-k7djufwez2.php
[Thu May 07 04:26:49.224707 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Thu May 07 04:26:49.480479 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 07 04:26:49.733010 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Thu May 07 04:26:51.229835 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Thu May 07 04:26:51.438247 2026] [:error] [pid 29710:tid 29735] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu May 07 04:26:51.660011 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Thu May 07 04:26:51.884732 2026] [:error] [pid 29710:tid 29726] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/3369.php
[Thu May 07 04:26:52.108947 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:64401] File does not exist: /usr/local/apache/htdocs/suspended-page/dostshell.php
[Thu May 07 04:26:52.340234 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:64401] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afukDP0atTQld9Y2ht-5NwAAAMo"]
[Thu May 07 04:26:52.778778 2026] [:error] [pid 29606:tid 29654] [client 20.104.207.18:64423] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afukDBR5HjZ1PlSAiKtM_QAAAE0"]
[Thu May 07 04:26:53.233939 2026] [:error] [pid 29606:tid 29642] [client 20.104.207.18:64424] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afukDRR5HjZ1PlSAiKtNBAAAAEE"]
[Thu May 07 04:26:53.668304 2026] [:error] [pid 29606:tid 29650] [client 20.104.207.18:64385] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoper1.php"] [unique_id "afukDRR5HjZ1PlSAiKtNCQAAAEk"]
[Thu May 07 04:26:54.098469 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:64391] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index0.php"] [unique_id "afukDv0atTQld9Y2ht-5PAAAAM8"]
[Thu May 07 04:26:54.530611 2026] [:error] [pid 29605:tid 29636] [client 20.104.207.18:64406] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index0.php"] [unique_id "afukDonxrTjETioEY0TMCwAAABY"]
[Thu May 07 04:26:55.019679 2026] [:error] [pid 29605:tid 29615] [client 20.104.207.18:64407] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index0.php"] [unique_id "afukD4nxrTjETioEY0TMDAAAAAE"]
[Thu May 07 04:26:55.498159 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:64439] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index0.php"] [unique_id "afukD_0atTQld9Y2ht-5RAAAANg"]
[Thu May 07 04:26:55.974021 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64421] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "afukD_0atTQld9Y2ht-5SAAAAMw"]
[Thu May 07 04:26:56.401940 2026] [:error] [pid 29605:tid 29625] [client 20.104.207.18:64445] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "afukEInxrTjETioEY0TMDQAAAAs"]
[Thu May 07 04:26:56.832578 2026] [:error] [pid 29607:tid 29674] [client 20.104.207.18:64394] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "afukEKbP7TJOAh7WSUNNOgAAAIY"]
[Thu May 07 04:26:57.284806 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:64475] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "afukEf0atTQld9Y2ht-5VgAAAMo"]
[Thu May 07 04:26:57.751875 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:64489] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "afukEf0atTQld9Y2ht-5WwAAANM"]
[Thu May 07 04:26:58.240806 2026] [:error] [pid 29605:tid 29633] [client 20.104.207.18:64397] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "afukEonxrTjETioEY0TMDwAAABM"]
[Thu May 07 04:26:58.686448 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:64418] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "afukEqbP7TJOAh7WSUNNPwAAAII"]
[Thu May 07 04:26:59.110900 2026] [:error] [pid 29606:tid 29646] [client 20.104.207.18:64502] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "afukExR5HjZ1PlSAiKtNDQAAAEU"]
[Thu May 07 04:26:59.626513 2026] [:error] [pid 29607:tid 29672] [client 20.104.207.18:64478] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "afukE6bP7TJOAh7WSUNNQgAAAIQ"]
[Thu May 07 04:27:00.088495 2026] [:error] [pid 29606:tid 29662] [client 20.104.207.18:64412] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "afukFBR5HjZ1PlSAiKtNEQAAAFU"]
[Thu May 07 04:27:00.558038 2026] [:error] [pid 29607:tid 29687] [client 20.104.207.18:63697] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "afukFKbP7TJOAh7WSUNNRwAAAJM"]
[Thu May 07 04:27:00.975811 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:64484] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zogy1.php"] [unique_id "afukFP0atTQld9Y2ht-5YAAAAMM"]
[Thu May 07 04:27:01.389844 2026] [:error] [pid 29710:tid 29730] [client 20.104.207.18:64403] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "afukFf0atTQld9Y2ht-5ZAAAANI"]
[Thu May 07 04:27:01.801251 2026] [:error] [pid 29607:tid 29673] [client 20.104.207.18:64449] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "afukFabP7TJOAh7WSUNNTAAAAIU"]
[Thu May 07 04:27:02.245005 2026] [:error] [pid 29605:tid 29619] [client 20.104.207.18:64498] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "afukFonxrTjETioEY0TMGQAAAAU"]
[Thu May 07 04:27:02.710630 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:64486] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/19.php"] [unique_id "afukFqbP7TJOAh7WSUNNUQAAAII"]
[Thu May 07 04:27:03.184132 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:64468] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afukFxR5HjZ1PlSAiKtNGAAAAEo"]
[Thu May 07 04:27:03.609426 2026] [:error] [pid 29607:tid 29691] [client 20.104.207.18:64491] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afukF6bP7TJOAh7WSUNNVgAAAJc"]
[Thu May 07 04:27:04.053906 2026] [:error] [pid 29605:tid 29631] [client 20.104.207.18:64497] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afukGInxrTjETioEY0TMHQAAABE"]
[Thu May 07 04:27:04.505901 2026] [:error] [pid 29606:tid 29654] [client 20.104.207.18:64500] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afukGBR5HjZ1PlSAiKtNHgAAAE0"]
[Thu May 07 04:27:04.984739 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64443] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afukGP0atTQld9Y2ht-5aAAAAMw"]
[Thu May 07 04:27:05.407754 2026] [:error] [pid 29607:tid 29679] [client 20.104.207.18:64506] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afukGabP7TJOAh7WSUNNYQAAAIs"]
[Thu May 07 04:27:05.854286 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:63712] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afukGf0atTQld9Y2ht-5awAAAMc"]
[Thu May 07 04:27:06.301697 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:63715] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w.php"] [unique_id "afukGv0atTQld9Y2ht-5bAAAANM"]
[Thu May 07 04:27:06.720224 2026] [:error] [pid 29605:tid 29620] [client 20.104.207.18:63698] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afukGonxrTjETioEY0TMIAAAAAY"]
[Thu May 07 04:27:07.188332 2026] [:error] [pid 29606:tid 29653] [client 20.104.207.18:64488] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afukGxR5HjZ1PlSAiKtNLQAAAEw"]
[Thu May 07 04:27:07.649194 2026] [:error] [pid 29607:tid 29684] [client 20.104.207.18:64392] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afukG6bP7TJOAh7WSUNNZwAAAJA"]
[Thu May 07 04:27:08.123586 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:64485] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws78.php"] [unique_id "afukHP0atTQld9Y2ht-5dAAAAMA"]
[Thu May 07 04:27:08.593203 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:64481] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afukHP0atTQld9Y2ht-5dgAAAMY"]
[Thu May 07 04:27:09.008431 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:64453] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "afukHf0atTQld9Y2ht-5eQAAAMM"]
[Thu May 07 04:27:09.458882 2026] [:error] [pid 29607:tid 29691] [client 20.104.207.18:63681] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afukHabP7TJOAh7WSUNNbgAAAJc"]
[Thu May 07 04:27:09.935138 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64411] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afukHf0atTQld9Y2ht-5ewAAAMw"]
[Thu May 07 04:27:10.407420 2026] [:error] [pid 29607:tid 29683] [client 20.104.207.18:64477] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afukHqbP7TJOAh7WSUNNcgAAAI8"]
[Thu May 07 04:27:10.818602 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:64480] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afukHv0atTQld9Y2ht-5gAAAAMg"]
[Thu May 07 04:27:11.260292 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:64511] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afukH_0atTQld9Y2ht-5ggAAAME"]
[Thu May 07 04:27:11.723286 2026] [:error] [pid 29605:tid 29629] [client 20.104.207.18:64457] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afukH4nxrTjETioEY0TMJAAAAA8"]
[Thu May 07 04:27:12.194780 2026] [:error] [pid 29605:tid 29628] [client 20.104.207.18:63723] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afukIInxrTjETioEY0TMJQAAAA4"]
[Thu May 07 04:27:12.640182 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:64404] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cdxadmin.php"] [unique_id "afukIKbP7TJOAh7WSUNNdwAAAJQ"]
[Thu May 07 04:27:13.071744 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:64490] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "afukIRR5HjZ1PlSAiKtNRgAAAEs"]
[Thu May 07 04:27:13.509829 2026] [:error] [pid 29607:tid 29680] [client 20.104.207.18:63623] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "afukIabP7TJOAh7WSUNNeAAAAIw"]
[Thu May 07 04:27:13.933274 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:63646] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "afukIRR5HjZ1PlSAiKtNSgAAAEQ"]
[Thu May 07 04:27:14.369837 2026] [:error] [pid 29607:tid 29668] [client 20.104.207.18:64389] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko.php"] [unique_id "afukIqbP7TJOAh7WSUNNgAAAAIA"]
[Thu May 07 04:27:14.834199 2026] [:error] [pid 29606:tid 29646] [client 20.104.207.18:63691] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afukIhR5HjZ1PlSAiKtNUAAAAEU"]
[Thu May 07 04:27:15.313061 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:64456] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afukIxR5HjZ1PlSAiKtNVAAAAFQ"]
[Thu May 07 04:27:15.776508 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:64387] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afukI_0atTQld9Y2ht-5iwAAANY"]
[Thu May 07 04:27:16.194076 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:64409] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "afukJP0atTQld9Y2ht-5jwAAAMg"]
[Thu May 07 04:27:16.630706 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:64384] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afukJBR5HjZ1PlSAiKtNWAAAAEs"]
[Thu May 07 04:27:17.125328 2026] [:error] [pid 29606:tid 29649] [client 20.104.207.18:64410] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afukJRR5HjZ1PlSAiKtNXAAAAEg"]
[Thu May 07 04:27:17.585075 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:64469] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afukJRR5HjZ1PlSAiKtNYgAAAFQ"]
[Thu May 07 04:27:17.998240 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:64460] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "afukJRR5HjZ1PlSAiKtNZwAAAEs"]
[Thu May 07 04:27:18.420654 2026] [:error] [pid 29606:tid 29647] [client 20.104.207.18:64507] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afukJhR5HjZ1PlSAiKtNawAAAEY"]
[Thu May 07 04:27:18.833419 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:64509] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afukJv0atTQld9Y2ht-5kwAAAMs"]
[Thu May 07 04:27:19.281865 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:64472] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afukJ_0atTQld9Y2ht-5lQAAANg"]
[Thu May 07 04:27:19.735922 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:64417] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afukJ_0atTQld9Y2ht-5mQAAAMo"]
[Thu May 07 04:27:20.193671 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:64419] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afukKP0atTQld9Y2ht-5mgAAAMY"]
[Thu May 07 04:27:20.621703 2026] [:error] [pid 29605:tid 29626] [client 20.104.207.18:64487] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afukKInxrTjETioEY0TMLgAAAAw"]
[Thu May 07 04:27:21.086159 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:64510] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afukKf0atTQld9Y2ht-5nAAAANY"]
[Thu May 07 04:27:21.550482 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:64415] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afukKf0atTQld9Y2ht-5oQAAAMc"]
[Thu May 07 04:27:22.007851 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:63688] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afukKv0atTQld9Y2ht-5pQAAAMk"]
[Thu May 07 04:27:22.431171 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:63701] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afukKv0atTQld9Y2ht-5qAAAAMU"]
[Thu May 07 04:27:22.857015 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:64448] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afukKv0atTQld9Y2ht-5qQAAAMA"]
[Thu May 07 04:27:23.335294 2026] [:error] [pid 29605:tid 29628] [client 20.104.207.18:64408] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tiroto.php"] [unique_id "afukK4nxrTjETioEY0TMNgAAAA4"]
[Thu May 07 04:27:23.838777 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64501] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "afukK_0atTQld9Y2ht-5rwAAAMw"]
[Thu May 07 04:27:24.270128 2026] [:error] [pid 29606:tid 29643] [client 20.104.207.18:64495] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "afukLBR5HjZ1PlSAiKtNegAAAEI"]
[Thu May 07 04:27:24.686374 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:64493] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "afukLBR5HjZ1PlSAiKtNfgAAAE4"]
[Thu May 07 04:27:25.135270 2026] [:error] [pid 29606:tid 29653] [client 20.104.207.18:64427] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "afukLRR5HjZ1PlSAiKtNggAAAEw"]
[Thu May 07 04:27:25.578896 2026] [:error] [pid 29606:tid 29663] [client 20.104.207.18:63716] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "afukLRR5HjZ1PlSAiKtNhQAAAFY"]
[Thu May 07 04:27:26.011431 2026] [:error] [pid 29605:tid 29619] [client 20.104.207.18:63720] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "afukLonxrTjETioEY0TMOAAAAAU"]
[Thu May 07 04:27:26.450511 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:64505] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "afukLv0atTQld9Y2ht-5twAAAMA"]
[Thu May 07 04:27:26.911333 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:64450] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "afukLv0atTQld9Y2ht-5uwAAAMc"]
[Thu May 07 04:27:27.400671 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:63728] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afukL_0atTQld9Y2ht-5vgAAAMY"]
[Thu May 07 04:27:27.848890 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:64393] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afukL_0atTQld9Y2ht-5xgAAAMs"]
[Thu May 07 04:27:28.284192 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:64454] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afukMP0atTQld9Y2ht-5ygAAAMo"]
[Thu May 07 04:27:28.763304 2026] [:error] [pid 29605:tid 29632] [client 20.104.207.18:63736] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afukMInxrTjETioEY0TMQAAAABI"]
[Thu May 07 04:27:29.232302 2026] [:error] [pid 29606:tid 29662] [client 20.104.207.18:64482] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afukMRR5HjZ1PlSAiKtNjAAAAFU"]
[Thu May 07 04:27:29.692351 2026] [:error] [pid 29605:tid 29615] [client 20.104.207.18:64425] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afukMYnxrTjETioEY0TMQwAAAAE"]
[Thu May 07 04:27:30.151614 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:63621] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afukMhR5HjZ1PlSAiKtNkgAAAFQ"]
[Thu May 07 04:27:30.576822 2026] [:error] [pid 29605:tid 29619] [client 20.104.207.18:63617] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "afukMonxrTjETioEY0TMSAAAAAU"]
[Thu May 07 04:27:31.032191 2026] [:error] [pid 29606:tid 29642] [client 20.104.207.18:64492] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "afukMxR5HjZ1PlSAiKtNmQAAAEE"]
[Thu May 07 04:27:31.492395 2026] [:error] [pid 29605:tid 29630] [client 20.104.207.18:64440] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "afukM4nxrTjETioEY0TMTgAAABA"]
[Thu May 07 04:27:31.905450 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:64430] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "afukMxR5HjZ1PlSAiKtNngAAAEo"]
[Thu May 07 04:27:32.344766 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:64447] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mifta.php"] [unique_id "afukNP0atTQld9Y2ht-51AAAAME"]
[Thu May 07 04:27:32.780142 2026] [:error] [pid 29605:tid 29633] [client 20.104.207.18:63684] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afukNInxrTjETioEY0TMUgAAABM"]
[Thu May 07 04:27:33.204748 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:64504] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "afukNf0atTQld9Y2ht-53QAAAM8"]
[Thu May 07 04:27:33.632850 2026] [:error] [pid 29710:tid 29733] [client 20.104.207.18:64442] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "afukNf0atTQld9Y2ht-53wAAANU"]
[Thu May 07 04:27:34.052737 2026] [:error] [pid 29607:tid 29671] [client 20.104.207.18:64499] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "afukNqbP7TJOAh7WSUNNnQAAAIM"]
[Thu May 07 04:27:34.513915 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:64494] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afukNqbP7TJOAh7WSUNNoQAAAJU"]
[Thu May 07 04:27:35.007480 2026] [:error] [pid 29605:tid 29635] [client 20.104.207.18:24326] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afukN4nxrTjETioEY0TMVAAAABU"]
[Thu May 07 04:27:35.484393 2026] [:error] [pid 29606:tid 29642] [client 20.104.207.18:64431] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afukNxR5HjZ1PlSAiKtNowAAAEE"]
[Thu May 07 04:27:35.945303 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:64400] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afukN6bP7TJOAh7WSUNNpQAAAIg"]
[Thu May 07 04:27:36.399872 2026] [:error] [pid 29605:tid 29624] [client 20.104.207.18:64476] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "afukOInxrTjETioEY0TMWQAAAAo"]
[Thu May 07 04:27:36.829791 2026] [:error] [pid 29605:tid 29628] [client 20.104.207.18:63651] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "afukOInxrTjETioEY0TMWwAAAA4"]
[Thu May 07 04:27:37.262763 2026] [:error] [pid 29607:tid 29683] [client 20.104.207.18:63727] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "afukOabP7TJOAh7WSUNNqwAAAI8"]
[Thu May 07 04:27:37.681078 2026] [:error] [pid 29607:tid 29687] [client 20.104.207.18:64470] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "afukOabP7TJOAh7WSUNNsAAAAJM"]
[Thu May 07 04:27:38.117300 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:64432] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afukOv0atTQld9Y2ht-56QAAAMA"]
[Thu May 07 04:27:38.527640 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:64465] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afukOhR5HjZ1PlSAiKtNqAAAAEo"]
[Thu May 07 04:27:38.942436 2026] [:error] [pid 29605:tid 29615] [client 20.104.207.18:64473] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afukOonxrTjETioEY0TMYwAAAAE"]
[Thu May 07 04:27:39.385611 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:64436] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afukO6bP7TJOAh7WSUNNugAAAJQ"]
[Thu May 07 04:27:39.879972 2026] [:error] [pid 29710:tid 29730] [client 20.104.207.18:64396] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afukO_0atTQld9Y2ht-57gAAANI"]
[Thu May 07 04:27:40.335482 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:64483] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afukPBR5HjZ1PlSAiKtNqwAAAEs"]
[Thu May 07 04:27:40.763034 2026] [:error] [pid 29605:tid 29634] [client 20.104.207.18:63725] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afukPInxrTjETioEY0TMZQAAABQ"]
[Thu May 07 04:27:41.214569 2026] [:error] [pid 29710:tid 29727] [client 20.104.207.18:63624] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afukPf0atTQld9Y2ht-58wAAAM8"]
[Thu May 07 04:27:41.673831 2026] [:error] [pid 29605:tid 29618] [client 20.104.207.18:63706] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afukPYnxrTjETioEY0TMaQAAAAQ"]
[Thu May 07 04:27:42.133583 2026] [:error] [pid 29605:tid 29623] [client 20.104.207.18:24331] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afukPonxrTjETioEY0TMagAAAAk"]
[Thu May 07 04:27:42.548216 2026] [:error] [pid 29605:tid 29630] [client 20.104.207.18:63707] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afukPonxrTjETioEY0TMbAAAABA"]
[Thu May 07 04:27:42.971888 2026] [:error] [pid 29607:tid 29680] [client 20.104.207.18:63616] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afukPqbP7TJOAh7WSUNNxwAAAIw"]
[Thu May 07 04:27:43.398172 2026] [:error] [pid 29607:tid 29683] [client 20.104.207.18:63687] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afukP6bP7TJOAh7WSUNNygAAAI8"]
[Thu May 07 04:27:43.810587 2026] [:error] [pid 29607:tid 29686] [client 20.104.207.18:64428] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afukP6bP7TJOAh7WSUNNywAAAJI"]
[Thu May 07 04:27:44.235340 2026] [:error] [pid 29607:tid 29687] [client 20.104.207.18:64479] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afukQKbP7TJOAh7WSUNNzQAAAJM"]
[Thu May 07 04:27:44.654438 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:63705] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "afukQBR5HjZ1PlSAiKtNrQAAAEQ"]
[Thu May 07 04:27:45.086329 2026] [:error] [pid 29710:tid 29725] [client 20.104.207.18:63708] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "afukQf0atTQld9Y2ht-59wAAAM0"]
[Thu May 07 04:27:45.515488 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:63726] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "afukQf0atTQld9Y2ht-5-AAAAMk"]
[Thu May 07 04:27:45.973765 2026] [:error] [pid 29606:tid 29650] [client 20.104.207.18:63638] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "afukQRR5HjZ1PlSAiKtNsgAAAEk"]
[Thu May 07 04:27:46.490031 2026] [:error] [pid 29606:tid 29656] [client 20.104.207.18:64464] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "afukQhR5HjZ1PlSAiKtNswAAAE8"]
[Thu May 07 04:27:46.970251 2026] [:error] [pid 29605:tid 29634] [client 20.104.207.18:64395] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "afukQonxrTjETioEY0TMeAAAABQ"]
[Thu May 07 04:27:47.394404 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:64386] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "afukQ_0atTQld9Y2ht-5_AAAAMY"]
[Thu May 07 04:27:47.814536 2026] [:error] [pid 29605:tid 29625] [client 20.104.207.18:63741] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "afukQ4nxrTjETioEY0TMeQAAAAs"]
[Thu May 07 04:27:48.256018 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:63676] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "afukRKbP7TJOAh7WSUNN2gAAAJQ"]
[Thu May 07 04:27:48.682274 2026] [:error] [pid 29607:tid 29668] [client 20.104.207.18:63664] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "afukRKbP7TJOAh7WSUNN4QAAAIA"]
[Thu May 07 04:27:49.156799 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:63700] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "afukRf0atTQld9Y2ht-5_gAAAMo"]
[Thu May 07 04:27:49.584750 2026] [:error] [pid 29605:tid 29628] [client 20.104.207.18:63680] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "afukRYnxrTjETioEY0TMfwAAAA4"]
[Thu May 07 04:27:50.013115 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:63618] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "afukRqbP7TJOAh7WSUNN5AAAAIg"]
[Thu May 07 04:27:50.480351 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:63730] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afukRv0atTQld9Y2ht-6AwAAANM"]
[Thu May 07 04:27:50.906663 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:64398] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afukRhR5HjZ1PlSAiKtNwQAAAEQ"]
[Thu May 07 04:27:51.344853 2026] [:error] [pid 29605:tid 29624] [client 20.104.207.18:63642] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afukR4nxrTjETioEY0TMiQAAAAo"]
[Thu May 07 04:27:51.834964 2026] [:error] [pid 29605:tid 29632] [client 20.104.207.18:64471] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "afukR4nxrTjETioEY0TMjwAAABI"]
[Thu May 07 04:27:52.334092 2026] [:error] [pid 29606:tid 29658] [client 20.104.207.18:63670] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "afukSBR5HjZ1PlSAiKtNxAAAAFE"]
[Thu May 07 04:27:52.839479 2026] [:error] [pid 29605:tid 29638] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu May 07 04:27:53.051360 2026] [:error] [pid 29605:tid 29635] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/s1.php
[Thu May 07 04:27:53.872036 2026] [:error] [pid 29605:tid 29635] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Thu May 07 04:27:54.081064 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Thu May 07 04:27:54.291569 2026] [:error] [pid 29605:tid 29625] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Thu May 07 04:27:54.499705 2026] [:error] [pid 29605:tid 29618] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/aj11.php
[Thu May 07 04:27:54.713755 2026] [:error] [pid 29605:tid 29622] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu May 07 04:27:54.937050 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Thu May 07 04:27:55.173247 2026] [:error] [pid 29605:tid 29628] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Thu May 07 04:27:55.412066 2026] [:error] [pid 29605:tid 29632] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu May 07 04:27:55.652656 2026] [:error] [pid 29605:tid 29626] [client 20.104.207.18:63653] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu May 07 04:27:55.888333 2026] [:error] [pid 29605:tid 29623] [client 20.104.207.18:63653] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "afukS4nxrTjETioEY0TMowAAAAk"]
[Thu May 07 04:27:56.348613 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:63735] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "afukTBR5HjZ1PlSAiKtNyAAAAE4"]
[Thu May 07 04:27:56.772730 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:63693] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "afukTKbP7TJOAh7WSUNN8AAAAJU"]
[Thu May 07 04:27:57.278305 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64434] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "afukTf0atTQld9Y2ht-6FQAAAMw"]
[Thu May 07 04:27:57.768869 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:24372] [client 20.104.207.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "afukTabP7TJOAh7WSUNN9AAAAII"]
[Thu May 07 04:27:58.199870 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:64435] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "afukTqbP7TJOAh7WSUNN-AAAAJQ"]
[Thu May 07 04:27:58.660263 2026] [:error] [pid 29607:tid 29690] [client 20.104.207.18:64399] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "afukTqbP7TJOAh7WSUNN_AAAAJY"]
[Thu May 07 04:27:59.153712 2026] [:error] [pid 29607:tid 29679] [client 20.104.207.18:63627] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "afukT6bP7TJOAh7WSUNOAAAAAIs"]
[Thu May 07 04:27:59.582005 2026] [:error] [pid 29607:tid 29692] [client 20.104.207.18:64422] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "afukT6bP7TJOAh7WSUNOBAAAAJg"]
[Thu May 07 04:28:00.000032 2026] [:error] [pid 29607:tid 29683] [client 20.104.207.18:64438] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "afukT6bP7TJOAh7WSUNOBgAAAI8"]
[Thu May 07 04:28:00.434296 2026] [:error] [pid 29607:tid 29671] [client 20.104.207.18:63696] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "afukUKbP7TJOAh7WSUNOCQAAAIM"]
[Thu May 07 04:28:00.935896 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:63710] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws85.php"] [unique_id "afukUKbP7TJOAh7WSUNOCwAAAIg"]
[Thu May 07 04:28:01.373401 2026] [:error] [pid 29607:tid 29668] [client 20.104.207.18:64441] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afukUabP7TJOAh7WSUNODgAAAIA"]
[Thu May 07 04:28:01.794718 2026] [:error] [pid 29606:tid 29659] [client 20.104.207.18:64414] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afukURR5HjZ1PlSAiKtN0gAAAFI"]
[Thu May 07 04:28:02.238731 2026] [:error] [pid 29607:tid 29675] [client 20.104.207.18:63622] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afukUqbP7TJOAh7WSUNOEgAAAIc"]
[Thu May 07 04:28:02.685784 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:24334] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "afukUv0atTQld9Y2ht-6JgAAANY"]
[Thu May 07 04:28:03.182825 2026] [:error] [pid 29606:tid 29644] [client 20.104.207.18:63743] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "afukUxR5HjZ1PlSAiKtN1wAAAEM"]
[Thu May 07 04:28:03.628341 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:63661] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "afukU_0atTQld9Y2ht-6KgAAAMU"]
[Thu May 07 04:28:04.057271 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:63628] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "afukVBR5HjZ1PlSAiKtN2gAAAE4"]
[Thu May 07 04:28:04.483100 2026] [:error] [pid 29710:tid 29714] [client 20.104.207.18:64420] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "afukVP0atTQld9Y2ht-6LQAAAMI"]
[Thu May 07 04:28:04.897730 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:63652] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afukVBR5HjZ1PlSAiKtN3gAAAFA"]
[Thu May 07 04:28:05.313138 2026] [:error] [pid 29606:tid 29647] [client 20.104.207.18:64402] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afukVRR5HjZ1PlSAiKtN4AAAAEY"]
[Thu May 07 04:28:05.730838 2026] [:error] [pid 29605:tid 29616] [client 20.104.207.18:63656] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afukVYnxrTjETioEY0TMrAAAAAI"]
[Thu May 07 04:28:06.142092 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:63732] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afukVv0atTQld9Y2ht-6MQAAAMQ"]
[Thu May 07 04:28:06.560483 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:63667] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "afukVv0atTQld9Y2ht-6NAAAAMU"]
[Thu May 07 04:28:07.038460 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:63633] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "afukV_0atTQld9Y2ht-6OAAAAMc"]
[Thu May 07 04:28:07.519877 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:63648] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "afukVxR5HjZ1PlSAiKtN5QAAAEQ"]
[Thu May 07 04:28:07.989942 2026] [:error] [pid 29606:tid 29656] [client 20.104.207.18:64451] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dass.php"] [unique_id "afukVxR5HjZ1PlSAiKtN6AAAAE8"]
[Thu May 07 04:28:08.410062 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:64444] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afukWP0atTQld9Y2ht-6QQAAAMk"]
[Thu May 07 04:28:08.863775 2026] [:error] [pid 29605:tid 29622] [client 20.104.207.18:24322] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afukWInxrTjETioEY0TMsgAAAAg"]
[Thu May 07 04:28:09.336958 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:64437] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afukWf0atTQld9Y2ht-6RgAAAMc"]
[Thu May 07 04:28:09.793613 2026] [:error] [pid 29605:tid 29619] [client 20.104.207.18:24376] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afukWYnxrTjETioEY0TMuAAAAAU"]
[Thu May 07 04:28:10.239453 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:64452] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "afukWhR5HjZ1PlSAiKtN7wAAAFA"]
[Thu May 07 04:28:10.684999 2026] [:error] [pid 29606:tid 29646] [client 20.104.207.18:64446] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "afukWhR5HjZ1PlSAiKtN9AAAAEU"]
[Thu May 07 04:28:11.165673 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:64467] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "afukW_0atTQld9Y2ht-6SQAAANY"]
[Thu May 07 04:28:11.620010 2026] [:error] [pid 29605:tid 29632] [client 20.104.207.18:24323] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "afukW4nxrTjETioEY0TMxAAAABI"]
[Thu May 07 04:28:12.107209 2026] [:error] [pid 29606:tid 29653] [client 20.104.207.18:63739] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "afukXBR5HjZ1PlSAiKtN-AAAAEw"]
[Thu May 07 04:28:12.558851 2026] [:error] [pid 29605:tid 29615] [client 20.104.207.18:24288] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "afukXInxrTjETioEY0TMyAAAAAE"]
[Thu May 07 04:28:13.007657 2026] [:error] [pid 29606:tid 29663] [client 20.104.207.18:24351] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "afukXRR5HjZ1PlSAiKtN-gAAAFY"]
[Thu May 07 04:28:13.497558 2026] [:error] [pid 29605:tid 29626] [client 20.104.207.18:63709] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ganja.php"] [unique_id "afukXYnxrTjETioEY0TMygAAAAw"]
[Thu May 07 04:28:13.946752 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:63640] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "afukXRR5HjZ1PlSAiKtN_gAAAEs"]
[Thu May 07 04:28:14.429067 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:63737] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "afukXv0atTQld9Y2ht-6WQAAAMk"]
[Thu May 07 04:28:14.878371 2026] [:error] [pid 29710:tid 29728] [client 20.104.207.18:63682] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "afukXv0atTQld9Y2ht-6XgAAANA"]
[Thu May 07 04:28:15.329153 2026] [:error] [pid 29607:tid 29673] [client 20.104.207.18:24292] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "afukX6bP7TJOAh7WSUNOHAAAAIU"]
[Thu May 07 04:28:15.762085 2026] [:error] [pid 29605:tid 29627] [client 20.104.207.18:63685] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "afukX4nxrTjETioEY0TMzwAAAA0"]
[Thu May 07 04:28:16.248476 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:63699] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "afukYP0atTQld9Y2ht-6aQAAANM"]
[Thu May 07 04:28:16.725304 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:63686] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "afukYP0atTQld9Y2ht-6bwAAAMA"]
[Thu May 07 04:28:17.197391 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:63714] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/card.php"] [unique_id "afukYf0atTQld9Y2ht-6dAAAAMo"]
[Thu May 07 04:28:17.639350 2026] [:error] [pid 29605:tid 29633] [client 20.104.207.18:24346] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afukYYnxrTjETioEY0TM0wAAABM"]
[Thu May 07 04:28:18.058071 2026] [:error] [pid 29607:tid 29692] [client 20.104.207.18:63724] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afukYqbP7TJOAh7WSUNOIAAAAJg"]
[Thu May 07 04:28:18.497820 2026] [:error] [pid 29606:tid 29648] [client 20.104.207.18:63626] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afukYhR5HjZ1PlSAiKtOBQAAAEc"]
[Thu May 07 04:28:18.934582 2026] [:error] [pid 29605:tid 29631] [client 20.104.207.18:63639] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "afukYonxrTjETioEY0TM1wAAABE"]
[Thu May 07 04:28:19.401348 2026] [:error] [pid 29605:tid 29634] [client 20.104.207.18:63683] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "afukY4nxrTjETioEY0TM2AAAABQ"]
[Thu May 07 04:28:19.947923 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:63734] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "afukY_0atTQld9Y2ht-6lQAAAMg"]
[Thu May 07 04:28:20.423035 2026] [:error] [pid 29605:tid 29629] [client 20.104.207.18:24321] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "afukZInxrTjETioEY0TM2wAAAA8"]
[Thu May 07 04:28:20.855159 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64405] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "afukZP0atTQld9Y2ht-6ogAAAMw"]
[Thu May 07 04:28:21.350748 2026] [:error] [pid 29607:tid 29686] [client 20.104.207.18:63679] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "afukZabP7TJOAh7WSUNOJAAAAJI"]
[Thu May 07 04:28:21.804585 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:63647] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "afukZf0atTQld9Y2ht-6rAAAAMA"]
[Thu May 07 04:28:22.224999 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:63620] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "afukZv0atTQld9Y2ht-6swAAAMg"]
[Thu May 07 04:28:22.649576 2026] [:error] [pid 29710:tid 29725] [client 20.104.207.18:63742] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "afukZv0atTQld9Y2ht-6uAAAAM0"]
[Thu May 07 04:28:23.062916 2026] [:error] [pid 29605:tid 29617] [client 20.104.207.18:63690] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "afukZ4nxrTjETioEY0TM5AAAAAM"]
[Thu May 07 04:28:23.492276 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:63619] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "afukZ_0atTQld9Y2ht-6wQAAANY"]
[Thu May 07 04:28:23.930779 2026] [:error] [pid 29710:tid 29735] [client 20.104.207.18:63704] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "afukZ_0atTQld9Y2ht-6xgAAANc"]
[Thu May 07 04:28:24.350504 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:63645] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "afukaP0atTQld9Y2ht-6ywAAAMA"]
[Thu May 07 04:28:24.777766 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:63717] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "afukaP0atTQld9Y2ht-60QAAAMg"]
[Thu May 07 04:28:25.256101 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:64461] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "afukaf0atTQld9Y2ht-61wAAAME"]
[Thu May 07 04:28:25.750611 2026] [:error] [pid 29606:tid 29658] [client 20.104.207.18:63666] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "afukaRR5HjZ1PlSAiKtOCgAAAFE"]
[Thu May 07 04:28:26.217561 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:64388] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/img.php"] [unique_id "afukaonxrTjETioEY0TM6wAAAAc"]
[Thu May 07 04:28:26.657738 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:24297] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afukav0atTQld9Y2ht-64gAAANY"]
[Thu May 07 04:28:27.118657 2026] [:error] [pid 29607:tid 29681] [client 20.104.207.18:63674] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afuka6bP7TJOAh7WSUNOKwAAAI0"]
[Thu May 07 04:28:27.567724 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:63630] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afuka_0atTQld9Y2ht-66gAAAMA"]
[Thu May 07 04:28:27.989108 2026] [:error] [pid 29605:tid 29636] [client 20.104.207.18:63702] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afuka4nxrTjETioEY0TM7gAAABY"]
[Thu May 07 04:28:28.427071 2026] [:error] [pid 29710:tid 29736] [client 20.104.207.18:63718] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afukbP0atTQld9Y2ht-68wAAANg"]
[Thu May 07 04:28:28.920764 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:64416] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afukbInxrTjETioEY0TM8gAAABc"]
[Thu May 07 04:28:29.386209 2026] [:error] [pid 29607:tid 29685] [client 20.104.207.18:63668] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afukbabP7TJOAh7WSUNOLAAAAJE"]
[Thu May 07 04:28:29.803158 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64455] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "afukbf0atTQld9Y2ht-6_gAAAMw"]
[Thu May 07 04:28:30.234347 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:63729] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "afukbv0atTQld9Y2ht-7AwAAAME"]
[Thu May 07 04:28:30.655301 2026] [:error] [pid 29607:tid 29692] [client 20.104.207.18:63695] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "afukbqbP7TJOAh7WSUNOLwAAAJg"]
[Thu May 07 04:28:31.071725 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:64503] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "afukb4nxrTjETioEY0TM9QAAAAc"]
[Thu May 07 04:28:31.500091 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64474] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "afukb_0atTQld9Y2ht-7DgAAAMw"]
[Thu May 07 04:28:31.915596 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:24268] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "afukb_0atTQld9Y2ht-7EgAAANY"]
[Thu May 07 04:28:32.328920 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:24367] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "afukcP0atTQld9Y2ht-7FgAAAMQ"]
[Thu May 07 04:28:32.742530 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:63713] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "afukcP0atTQld9Y2ht-7HAAAAMw"]
[Thu May 07 04:28:33.154795 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:63665] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "afukcf0atTQld9Y2ht-7IAAAAMk"]
[Thu May 07 04:28:33.567944 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:63659] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "afukcabP7TJOAh7WSUNOMgAAAIg"]
[Thu May 07 04:28:33.987583 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:24330] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "afukcabP7TJOAh7WSUNONAAAAJQ"]
[Thu May 07 04:28:34.414413 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:24348] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "afukcv0atTQld9Y2ht-7LgAAAMs"]
[Thu May 07 04:28:34.838552 2026] [:error] [pid 29607:tid 29677] [client 20.104.207.18:63740] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "afukcqbP7TJOAh7WSUNOOQAAAIk"]
[Thu May 07 04:28:35.256954 2026] [:error] [pid 29605:tid 29626] [client 20.104.207.18:63636] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "afukc4nxrTjETioEY0TM-AAAAAw"]
[Thu May 07 04:28:35.714569 2026] [:error] [pid 29607:tid 29679] [client 20.104.207.18:63644] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "afukc6bP7TJOAh7WSUNOPAAAAIs"]
[Thu May 07 04:28:36.145863 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:24332] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "afukdInxrTjETioEY0TM_AAAABc"]
[Thu May 07 04:28:36.574925 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:63721] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "afukdBR5HjZ1PlSAiKtOGwAAAEo"]
[Thu May 07 04:28:36.997121 2026] [:error] [pid 29607:tid 29686] [client 20.104.207.18:24365] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "afukdKbP7TJOAh7WSUNOQQAAAJI"]
[Thu May 07 04:28:37.454887 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:24344] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "afukdf0atTQld9Y2ht-7NAAAAMY"]
[Thu May 07 04:28:37.894838 2026] [:error] [pid 29607:tid 29687] [client 20.104.207.18:63731] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "afukdabP7TJOAh7WSUNORgAAAJM"]
[Thu May 07 04:28:38.346466 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:24350] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "afukdv0atTQld9Y2ht-7NgAAAMM"]
[Thu May 07 04:28:38.786824 2026] [:error] [pid 29607:tid 29675] [client 20.104.207.18:24339] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "afukdqbP7TJOAh7WSUNOSwAAAIc"]
[Thu May 07 04:28:39.209206 2026] [:error] [pid 29607:tid 29673] [client 20.104.207.18:64462] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "afukd6bP7TJOAh7WSUNOTAAAAIU"]
[Thu May 07 04:28:39.656969 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:64433] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "afukdxR5HjZ1PlSAiKtOJAAAAEs"]
[Thu May 07 04:28:40.087712 2026] [:error] [pid 29606:tid 29655] [client 20.104.207.18:63669] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "afukeBR5HjZ1PlSAiKtOJgAAAE4"]
[Thu May 07 04:28:40.515524 2026] [:error] [pid 29606:tid 29649] [client 20.104.207.18:64390] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afukeBR5HjZ1PlSAiKtOKAAAAEg"]
[Thu May 07 04:28:40.972465 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:24269] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afukeP0atTQld9Y2ht-7OQAAAMs"]
[Thu May 07 04:28:41.395347 2026] [:error] [pid 29710:tid 29729] [client 20.104.207.18:24340] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afukef0atTQld9Y2ht-7PQAAANE"]
[Thu May 07 04:28:41.897944 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:24260] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afukef0atTQld9Y2ht-7QAAAAME"]
[Thu May 07 04:28:42.664569 2026] [:error] [pid 29606:tid 29662] [client 20.104.207.18:64429] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afukehR5HjZ1PlSAiKtOLwAAAFU"]
[Thu May 07 04:28:43.164487 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:63625] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afuke_0atTQld9Y2ht-7RgAAAMQ"]
[Thu May 07 04:28:43.687897 2026] [:error] [pid 29710:tid 29735] [client 20.104.207.18:63677] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afuke_0atTQld9Y2ht-7SQAAANc"]
[Thu May 07 04:28:44.290475 2026] [:error] [pid 29605:tid 29614] [client 20.104.207.18:24317] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "afukfInxrTjETioEY0TNHgAAAAA"]
[Thu May 07 04:28:44.829251 2026] [:error] [pid 29605:tid 29634] [client 20.104.207.18:24338] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afukfInxrTjETioEY0TNJQAAABQ"]
[Thu May 07 04:28:45.391867 2026] [:error] [pid 29607:tid 29688] [client 20.104.207.18:63733] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afukfabP7TJOAh7WSUNOTwAAAJQ"]
[Thu May 07 04:28:45.866506 2026] [:error] [pid 29605:tid 29632] [client 20.104.207.18:24325] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afukfYnxrTjETioEY0TNLwAAABI"]
[Thu May 07 04:28:46.346841 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:63722] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afukfonxrTjETioEY0TNMwAAAAc"]
[Thu May 07 04:28:46.948495 2026] [:error] [pid 29607:tid 29689] [client 20.104.207.18:63641] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afukfqbP7TJOAh7WSUNOVAAAAJU"]
[Thu May 07 04:28:47.403637 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:24370] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afukf_0atTQld9Y2ht-7UAAAAMQ"]
[Thu May 07 04:28:47.843001 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:64432] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afukf_0atTQld9Y2ht-7UgAAAMk"]
[Thu May 07 04:28:48.368424 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:24352] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "afukgInxrTjETioEY0TNQAAAABc"]
[Thu May 07 04:28:48.821799 2026] [:error] [pid 29606:tid 29647] [client 20.104.207.18:63694] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "afukgBR5HjZ1PlSAiKtOPgAAAEY"]
[Thu May 07 04:28:49.248077 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:24347] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "afukgabP7TJOAh7WSUNOWQAAAII"]
[Thu May 07 04:28:49.671680 2026] [:error] [pid 29605:tid 29621] [client 20.104.207.18:24349] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "afukgYnxrTjETioEY0TNSgAAAAc"]
[Thu May 07 04:28:50.120085 2026] [:error] [pid 29605:tid 29617] [client 20.104.207.18:63658] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "afukgonxrTjETioEY0TNTgAAAAM"]
[Thu May 07 04:28:50.582179 2026] [:error] [pid 29605:tid 29616] [client 20.104.207.18:64413] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afukgonxrTjETioEY0TNUwAAAAI"]
[Thu May 07 04:28:51.009301 2026] [:error] [pid 29605:tid 29625] [client 20.104.207.18:63649] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afukg4nxrTjETioEY0TNWAAAAAs"]
[Thu May 07 04:28:51.452453 2026] [:error] [pid 29606:tid 29662] [client 20.104.207.18:64496] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afukgxR5HjZ1PlSAiKtOTAAAAFU"]
[Thu May 07 04:28:51.899465 2026] [:error] [pid 29606:tid 29661] [client 20.104.207.18:63657] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "afukgxR5HjZ1PlSAiKtOTgAAAFQ"]
[Thu May 07 04:28:52.334678 2026] [:error] [pid 29607:tid 29675] [client 20.104.207.18:24075] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "afukhKbP7TJOAh7WSUNOZAAAAIc"]
[Thu May 07 04:28:52.756747 2026] [:error] [pid 29605:tid 29624] [client 20.104.207.18:64463] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "afukhInxrTjETioEY0TNZQAAAAo"]
[Thu May 07 04:28:53.180931 2026] [:error] [pid 29605:tid 29625] [client 20.104.207.18:24089] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "afukhYnxrTjETioEY0TNagAAAAs"]
[Thu May 07 04:28:53.615279 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:63629] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "afukhRR5HjZ1PlSAiKtOVAAAAFA"]
[Thu May 07 04:28:54.033145 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:24355] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admlo.php"] [unique_id "afukhv0atTQld9Y2ht-7WQAAANM"]
[Thu May 07 04:28:54.463045 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:24256] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admlo.php"] [unique_id "afukhv0atTQld9Y2ht-7XQAAANY"]
[Thu May 07 04:28:54.913046 2026] [:error] [pid 29607:tid 29676] [client 20.104.207.18:24270] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admlo.php"] [unique_id "afukhqbP7TJOAh7WSUNObAAAAIg"]
[Thu May 07 04:28:55.349708 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Thu May 07 04:28:55.557805 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Thu May 07 04:28:55.770389 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/x=34.php
[Thu May 07 04:28:55.978203 2026] [:error] [pid 29710:tid 29716] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/tramuibs.php
[Thu May 07 04:28:56.188255 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Thu May 07 04:28:56.423289 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 07 04:28:56.631246 2026] [:error] [pid 29710:tid 29724] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Thu May 07 04:28:56.839521 2026] [:error] [pid 29710:tid 29733] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu May 07 04:28:57.048550 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Thu May 07 04:28:57.259367 2026] [:error] [pid 29710:tid 29729] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Thu May 07 04:28:57.466499 2026] [:error] [pid 29710:tid 29734] [client 20.104.207.18:64508] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Thu May 07 04:28:57.671795 2026] [:error] [pid 29710:tid 29732] [client 20.104.207.18:64508] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "afukif0atTQld9Y2ht-7dgAAANQ"]
[Thu May 07 04:28:58.090344 2026] [:error] [pid 29710:tid 29722] [client 20.104.207.18:24335] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "afukiv0atTQld9Y2ht-7egAAAMo"]
[Thu May 07 04:28:58.502952 2026] [:error] [pid 29710:tid 29725] [client 20.104.207.18:24296] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "afukiv0atTQld9Y2ht-7fQAAAM0"]
[Thu May 07 04:28:58.917904 2026] [:error] [pid 29605:tid 29623] [client 20.104.207.18:63643] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son1.php"] [unique_id "afukionxrTjETioEY0TNjwAAAAk"]
[Thu May 07 04:28:59.331131 2026] [:error] [pid 29605:tid 29630] [client 20.104.207.18:64426] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "afuki4nxrTjETioEY0TNkgAAABA"]
[Thu May 07 04:28:59.756898 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:24341] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "afuki_0atTQld9Y2ht-7igAAAMk"]
[Thu May 07 04:29:00.170130 2026] [:error] [pid 29710:tid 29726] [client 20.104.207.18:24320] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "afukjP0atTQld9Y2ht-7kAAAAM4"]
[Thu May 07 04:29:00.590362 2026] [:error] [pid 29710:tid 29729] [client 20.104.207.18:24302] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ggb.php"] [unique_id "afukjP0atTQld9Y2ht-7lAAAANE"]
[Thu May 07 04:29:01.021650 2026] [:error] [pid 29605:tid 29633] [client 20.104.207.18:24359] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afukjYnxrTjETioEY0TNmAAAABM"]
[Thu May 07 04:29:01.439332 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:63738] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afukjabP7TJOAh7WSUNOgAAAAII"]
[Thu May 07 04:29:01.855197 2026] [:error] [pid 29605:tid 29635] [client 20.104.207.18:64466] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afukjYnxrTjETioEY0TNmgAAABU"]
[Thu May 07 04:29:02.271037 2026] [:error] [pid 29710:tid 29731] [client 20.104.207.18:24265] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amxloxxr.php"] [unique_id "afukjv0atTQld9Y2ht-7ngAAANM"]
[Thu May 07 04:29:02.692431 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:24342] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "afukjv0atTQld9Y2ht-7nwAAAMU"]
[Thu May 07 04:29:03.120083 2026] [:error] [pid 29607:tid 29668] [client 20.104.207.18:24377] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "afukj6bP7TJOAh7WSUNOlQAAAIA"]
[Thu May 07 04:29:03.533243 2026] [:error] [pid 29710:tid 29725] [client 20.104.207.18:63637] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "afukj_0atTQld9Y2ht-7owAAAM0"]
[Thu May 07 04:29:03.949713 2026] [:error] [pid 29607:tid 29682] [client 20.104.207.18:63654] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "afukj6bP7TJOAh7WSUNOnQAAAI4"]
[Thu May 07 04:29:04.366813 2026] [:error] [pid 29607:tid 29670] [client 20.104.207.18:24345] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afukkKbP7TJOAh7WSUNOowAAAII"]
[Thu May 07 04:29:04.787196 2026] [:error] [pid 29607:tid 29671] [client 20.104.207.18:63672] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afukkKbP7TJOAh7WSUNOqAAAAIM"]
[Thu May 07 04:29:05.215509 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:24382] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afukkf0atTQld9Y2ht-7rAAAAMk"]
[Thu May 07 04:29:05.634749 2026] [:error] [pid 29607:tid 29684] [client 20.104.207.18:24284] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "afukkabP7TJOAh7WSUNOsAAAAJA"]
[Thu May 07 04:29:06.059248 2026] [:error] [pid 29607:tid 29674] [client 20.104.207.18:24274] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afukkqbP7TJOAh7WSUNOtgAAAIY"]
[Thu May 07 04:29:06.482130 2026] [:error] [pid 29606:tid 29665] [client 20.104.207.18:63719] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afukkhR5HjZ1PlSAiKtOaAAAAFg"]
[Thu May 07 04:29:06.895389 2026] [:error] [pid 29606:tid 29654] [client 20.104.207.18:63678] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afukkhR5HjZ1PlSAiKtObAAAAE0"]
[Thu May 07 04:29:07.340336 2026] [:error] [pid 29607:tid 29686] [client 20.104.207.18:24303] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rh.php"] [unique_id "afukk6bP7TJOAh7WSUNOwgAAAJI"]
[Thu May 07 04:29:07.769920 2026] [:error] [pid 29606:tid 29647] [client 20.104.207.18:24289] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "afukkxR5HjZ1PlSAiKtObgAAAEY"]
[Thu May 07 04:29:08.205344 2026] [:error] [pid 29606:tid 29659] [client 20.104.207.18:24258] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "afuklBR5HjZ1PlSAiKtOcAAAAFI"]
[Thu May 07 04:29:08.646120 2026] [:error] [pid 29710:tid 29714] [client 20.104.207.18:24020] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "afuklP0atTQld9Y2ht-7tQAAAMI"]
[Thu May 07 04:29:09.073643 2026] [:error] [pid 29710:tid 29718] [client 20.104.207.18:63673] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/99.php"] [unique_id "afuklf0atTQld9Y2ht-7uQAAAMY"]
[Thu May 07 04:29:09.504310 2026] [:error] [pid 29710:tid 29723] [client 20.104.207.18:24333] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "afuklf0atTQld9Y2ht-7vQAAAMs"]
[Thu May 07 04:29:09.920409 2026] [:error] [pid 29710:tid 29733] [client 20.104.207.18:63703] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "afuklf0atTQld9Y2ht-7wAAAANU"]
[Thu May 07 04:29:10.338530 2026] [:error] [pid 29710:tid 29714] [client 20.104.207.18:24337] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "afuklv0atTQld9Y2ht-7xAAAAMI"]
[Thu May 07 04:29:10.777544 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:63692] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/layout.php"] [unique_id "afuklhR5HjZ1PlSAiKtOcQAAAEQ"]
[Thu May 07 04:29:11.195058 2026] [:error] [pid 29606:tid 29657] [client 20.104.207.18:24271] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "afuklxR5HjZ1PlSAiKtOcwAAAFA"]
[Thu May 07 04:29:11.633422 2026] [:error] [pid 29605:tid 29625] [client 20.104.207.18:63689] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "afukl4nxrTjETioEY0TNqQAAAAs"]
[Thu May 07 04:29:12.059925 2026] [:error] [pid 29606:tid 29652] [client 20.104.207.18:24307] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "afukmBR5HjZ1PlSAiKtOdwAAAEs"]
[Thu May 07 04:29:12.525844 2026] [:error] [pid 29606:tid 29665] [client 20.104.207.18:64459] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "afukmBR5HjZ1PlSAiKtOeAAAAFg"]
[Thu May 07 04:29:12.941902 2026] [:error] [pid 29606:tid 29651] [client 20.104.207.18:24361] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "afukmBR5HjZ1PlSAiKtOewAAAEo"]
[Thu May 07 04:29:13.365047 2026] [:error] [pid 29606:tid 29647] [client 20.104.207.18:63711] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "afukmRR5HjZ1PlSAiKtOfAAAAEY"]
[Thu May 07 04:29:13.792687 2026] [:error] [pid 29710:tid 29721] [client 20.104.207.18:24300] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "afukmf0atTQld9Y2ht-7zQAAAMk"]
[Thu May 07 04:29:14.210149 2026] [:error] [pid 29605:tid 29638] [client 20.104.207.18:24324] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "afukmonxrTjETioEY0TNsgAAABg"]
[Thu May 07 04:29:14.662099 2026] [:error] [pid 29710:tid 29732] [client 20.104.207.18:63650] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "afukmv0atTQld9Y2ht-7zwAAANQ"]
[Thu May 07 04:29:15.087542 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:24259] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "afukmxR5HjZ1PlSAiKtOgAAAAEQ"]
[Thu May 07 04:29:15.533882 2026] [:error] [pid 29606:tid 29641] [client 20.104.207.18:24308] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "afukmxR5HjZ1PlSAiKtOhAAAAEA"]
[Thu May 07 04:29:15.962708 2026] [:error] [pid 29606:tid 29644] [client 20.104.207.18:24299] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "afukmxR5HjZ1PlSAiKtOiAAAAEM"]
[Thu May 07 04:29:16.389857 2026] [:error] [pid 29605:tid 29626] [client 20.104.207.18:24086] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afuknInxrTjETioEY0TNtAAAAAw"]
[Thu May 07 04:29:16.809853 2026] [:error] [pid 29606:tid 29664] [client 20.104.207.18:24379] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afuknBR5HjZ1PlSAiKtOjAAAAFc"]
[Thu May 07 04:29:17.220354 2026] [:error] [pid 29607:tid 29683] [client 20.104.207.18:24353] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afuknabP7TJOAh7WSUNPBgAAAI8"]
[Thu May 07 04:29:17.645476 2026] [:error] [pid 29605:tid 29629] [client 20.104.207.18:63635] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afuknYnxrTjETioEY0TNtgAAAA8"]
[Thu May 07 04:29:18.061012 2026] [:error] [pid 29710:tid 29713] [client 20.104.207.18:63631] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "afuknv0atTQld9Y2ht-70gAAAME"]
[Thu May 07 04:29:18.480348 2026] [:error] [pid 29606:tid 29645] [client 20.104.207.18:24099] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "afuknhR5HjZ1PlSAiKtOkQAAAEQ"]
[Thu May 07 04:29:18.897110 2026] [:error] [pid 29710:tid 29715] [client 20.104.207.18:24327] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "afuknv0atTQld9Y2ht-72gAAAMM"]
[Thu May 07 04:29:19.320891 2026] [:error] [pid 29605:tid 29637] [client 20.104.207.18:24272] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "afukn4nxrTjETioEY0TNuAAAABc"]
[Thu May 07 04:29:19.780348 2026] [:error] [pid 29605:tid 29614] [client 20.104.207.18:24016] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afukn4nxrTjETioEY0TNuwAAAAA"]
[Thu May 07 04:29:20.201704 2026] [:error] [pid 29606:tid 29641] [client 20.104.207.18:63663] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afukoBR5HjZ1PlSAiKtOkwAAAEA"]
[Thu May 07 04:29:20.623611 2026] [:error] [pid 29710:tid 29719] [client 20.104.207.18:24280] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afukoP0atTQld9Y2ht-74wAAAMc"]
[Thu May 07 04:29:21.044522 2026] [:error] [pid 29710:tid 29712] [client 20.104.207.18:63660] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afukof0atTQld9Y2ht-75gAAAMA"]
[Thu May 07 04:29:21.470074 2026] [:error] [pid 29605:tid 29638] [client 20.104.207.18:24358] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "afukoYnxrTjETioEY0TNvgAAABg"]
[Thu May 07 04:29:21.908870 2026] [:error] [pid 29710:tid 29717] [client 20.104.207.18:24078] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "afukof0atTQld9Y2ht-76gAAAMU"]
[Thu May 07 04:29:22.346061 2026] [:error] [pid 29607:tid 29679] [client 20.104.207.18:24115] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "afukoqbP7TJOAh7WSUNPDgAAAIs"]
[Thu May 07 04:29:22.800609 2026] [:error] [pid 29710:tid 29720] [client 20.104.207.18:24360] [client 20.104.207.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xfile25.php"] [unique_id "afukov0atTQld9Y2ht-78AAAAMg"]
[Thu May 07 04:44:33.433291 2026] [:error] [pid 29606:tid 29663] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Thu May 07 04:44:34.295428 2026] [:error] [pid 29606:tid 29645] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu May 07 04:44:34.607154 2026] [:error] [pid 29606:tid 29647] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/mac.php
[Thu May 07 04:44:34.878229 2026] [:error] [pid 29606:tid 29658] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/hayuk.php
[Thu May 07 04:44:35.075318 2026] [:error] [pid 29606:tid 29641] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-files.php
[Thu May 07 04:44:35.264481 2026] [:error] [pid 29606:tid 29653] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Thu May 07 04:44:35.533347 2026] [:error] [pid 29606:tid 29657] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php
[Thu May 07 04:44:35.768915 2026] [:error] [pid 29606:tid 29644] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/momo.php
[Thu May 07 04:44:36.063173 2026] [:error] [pid 29606:tid 29655] [client 20.9.31.235:42480] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Thu May 07 04:44:36.495544 2026] [:error] [pid 29606:tid 29664] [client 20.9.31.235:42480] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuoNBR5HjZ1PlSAiKtTewAAAFc"]
[Thu May 07 04:44:37.118416 2026] [:error] [pid 29607:tid 29671] [client 20.9.31.235:43549] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuoNabP7TJOAh7WSUNVYAAAAIM"]
[Thu May 07 04:44:37.708976 2026] [:error] [pid 29605:tid 29628] [client 20.9.31.235:39684] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuoNYnxrTjETioEY0TTcQAAAA4"]
[Thu May 07 04:44:38.282814 2026] [:error] [pid 29605:tid 29623] [client 20.9.31.235:41098] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuoNonxrTjETioEY0TTcwAAAAk"]
[Thu May 07 04:44:38.990219 2026] [:error] [pid 29607:tid 29674] [client 20.9.31.235:34063] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "afuoNqbP7TJOAh7WSUNVZQAAAIY"]
[Thu May 07 04:44:39.938388 2026] [:error] [pid 29607:tid 29679] [client 20.9.31.235:43542] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "afuoN6bP7TJOAh7WSUNVaAAAAIs"]
[Thu May 07 04:44:40.564019 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:41817] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "afuoOKbP7TJOAh7WSUNVagAAAJc"]
[Thu May 07 04:44:41.449803 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:41851] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "afuoOYnxrTjETioEY0TTdgAAAAs"]
[Thu May 07 04:44:42.145435 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:41143] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "afuoOqbP7TJOAh7WSUNVbQAAAJg"]
[Thu May 07 04:44:43.751276 2026] [:error] [pid 29607:tid 29682] [client 20.9.31.235:41853] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "afuoO6bP7TJOAh7WSUNVbwAAAI4"]
[Thu May 07 04:44:45.048613 2026] [:error] [pid 29605:tid 29620] [client 20.9.31.235:34109] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "afuoPYnxrTjETioEY0TTfAAAAAY"]
[Thu May 07 04:44:47.573343 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:42396] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "afuoP6bP7TJOAh7WSUNVdQAAAJg"]
[Thu May 07 04:44:48.758700 2026] [:error] [pid 29607:tid 29683] [client 20.9.31.235:41099] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuoQKbP7TJOAh7WSUNVeQAAAI8"]
[Thu May 07 04:44:49.832596 2026] [:error] [pid 29607:tid 29669] [client 20.9.31.235:42458] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuoQabP7TJOAh7WSUNVfAAAAIE"]
[Thu May 07 04:44:52.203143 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:39710] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuoRP0atTQld9Y2ht_F2gAAAM0"]
[Thu May 07 04:44:53.258245 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:42428] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afuoRf0atTQld9Y2ht_F3gAAAMQ"]
[Thu May 07 04:44:54.343769 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:42462] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afuoRv0atTQld9Y2ht_F4QAAANc"]
[Thu May 07 04:44:55.629713 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:42487] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afuoR_0atTQld9Y2ht_F4wAAANA"]
[Thu May 07 04:44:57.802945 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:42495] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afuoSabP7TJOAh7WSUNVgwAAAJY"]
[Thu May 07 04:44:59.049036 2026] [:error] [pid 29710:tid 29718] [client 20.9.31.235:42373] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afuoS_0atTQld9Y2ht_F7AAAAMY"]
[Thu May 07 04:45:00.207732 2026] [:error] [pid 29606:tid 29656] [client 20.9.31.235:41128] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afuoTBR5HjZ1PlSAiKtTkQAAAE8"]
[Thu May 07 04:45:01.393910 2026] [:error] [pid 29607:tid 29671] [client 20.9.31.235:42472] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afuoTabP7TJOAh7WSUNViAAAAIM"]
[Thu May 07 04:45:02.420145 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:42383] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afuoTqbP7TJOAh7WSUNVjAAAAJA"]
[Thu May 07 04:45:03.808605 2026] [:error] [pid 29607:tid 29679] [client 20.9.31.235:39719] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afuoT6bP7TJOAh7WSUNVkQAAAIs"]
[Thu May 07 04:45:04.428078 2026] [:error] [pid 29605:tid 29622] [client 20.9.31.235:41843] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afuoUInxrTjETioEY0TTgQAAAAg"]
[Thu May 07 04:45:05.527879 2026] [:error] [pid 29607:tid 29680] [client 20.9.31.235:41117] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afuoUabP7TJOAh7WSUNVlgAAAIw"]
[Thu May 07 04:45:06.781270 2026] [:error] [pid 29607:tid 29683] [client 20.9.31.235:41113] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afuoUqbP7TJOAh7WSUNVmAAAAI8"]
[Thu May 07 04:45:07.750724 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:41117] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afuoUxR5HjZ1PlSAiKtTmQAAAEI"]
[Thu May 07 04:45:08.914962 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:41126] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afuoVInxrTjETioEY0TThwAAAAA"]
[Thu May 07 04:45:10.377662 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:42435] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afuoVqbP7TJOAh7WSUNVoQAAAIU"]
[Thu May 07 04:45:12.073791 2026] [:error] [pid 29607:tid 29675] [client 20.9.31.235:41145] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afuoWKbP7TJOAh7WSUNVpAAAAIc"]
[Thu May 07 04:45:13.777693 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:39688] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "afuoWf0atTQld9Y2ht_F-gAAAM0"]
[Thu May 07 04:45:15.206519 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:45458] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afuoW6bP7TJOAh7WSUNVqAAAAIU"]
[Thu May 07 04:45:16.388402 2026] [:error] [pid 29607:tid 29670] [client 20.9.31.235:41854] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afuoXKbP7TJOAh7WSUNVqwAAAII"]
[Thu May 07 04:45:16.919272 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:42440] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afuoXP0atTQld9Y2ht_GAgAAAME"]
[Thu May 07 04:45:17.451867 2026] [:error] [pid 29607:tid 29686] [client 20.9.31.235:39729] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "afuoXabP7TJOAh7WSUNVrwAAAJI"]
[Thu May 07 04:45:18.084616 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:41150] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "afuoXv0atTQld9Y2ht_GBgAAANc"]
[Thu May 07 04:45:18.801050 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:43538] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "afuoXv0atTQld9Y2ht_GCgAAAMA"]
[Thu May 07 04:45:19.291442 2026] [:error] [pid 29710:tid 29730] [client 20.9.31.235:41804] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "afuoX_0atTQld9Y2ht_GDQAAANI"]
[Thu May 07 04:45:19.929399 2026] [:error] [pid 29606:tid 29641] [client 20.9.31.235:41799] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "afuoXxR5HjZ1PlSAiKtTpAAAAEA"]
[Thu May 07 04:45:20.769918 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:39701] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afuoYP0atTQld9Y2ht_GEgAAANA"]
[Thu May 07 04:45:22.394394 2026] [:error] [pid 29710:tid 29732] [client 20.9.31.235:34083] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afuoYv0atTQld9Y2ht_GFQAAANQ"]
[Thu May 07 04:45:22.952837 2026] [:error] [pid 29607:tid 29685] [client 20.9.31.235:34067] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afuoYqbP7TJOAh7WSUNVtAAAAJE"]
[Thu May 07 04:45:24.160779 2026] [:error] [pid 29607:tid 29687] [client 20.9.31.235:43550] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afuoZKbP7TJOAh7WSUNVtgAAAJM"]
[Thu May 07 04:45:24.968852 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:42469] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afuoZP0atTQld9Y2ht_GGgAAAMs"]
[Thu May 07 04:45:25.781651 2026] [:error] [pid 29605:tid 29616] [client 20.9.31.235:41819] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afuoZYnxrTjETioEY0TTkQAAAAI"]
[Thu May 07 04:45:26.668725 2026] [:error] [pid 29605:tid 29619] [client 20.9.31.235:39702] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afuoZonxrTjETioEY0TTkwAAAAU"]
[Thu May 07 04:45:28.194415 2026] [:error] [pid 29710:tid 29727] [client 20.9.31.235:43532] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afuoaP0atTQld9Y2ht_GHwAAAM8"]
[Thu May 07 04:45:29.585663 2026] [:error] [pid 29710:tid 29714] [client 20.9.31.235:42418] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afuoaf0atTQld9Y2ht_GJAAAAMI"]
[Thu May 07 04:45:32.062438 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:42420] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afuobInxrTjETioEY0TTmwAAAAA"]
[Thu May 07 04:45:33.541197 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:42436] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afuobf0atTQld9Y2ht_GLwAAANA"]
[Thu May 07 04:45:35.651748 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:39732] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afuob_0atTQld9Y2ht_GOQAAANA"]
[Thu May 07 04:45:37.094640 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:42377] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Thu May 07 04:45:37.500249 2026] [:error] [pid 29710:tid 29730] [client 20.9.31.235:42377] [client 20.9.31.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afuocf0atTQld9Y2ht_GQAAAANI"]
[Thu May 07 04:45:38.054593 2026] [:error] [pid 29606:tid 29654] [client 20.9.31.235:42477] File does not exist: /usr/local/apache/htdocs/suspended-page/xxl.php
[Thu May 07 04:45:38.485739 2026] [:error] [pid 29606:tid 29653] [client 20.9.31.235:42477] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Thu May 07 04:45:38.685966 2026] [:error] [pid 29606:tid 29648] [client 20.9.31.235:42477] File does not exist: /usr/local/apache/htdocs/suspended-page/bob.php
[Thu May 07 04:45:38.916446 2026] [:error] [pid 29606:tid 29646] [client 20.9.31.235:42477] File does not exist: /usr/local/apache/htdocs/suspended-page/spawns.php
[Thu May 07 04:45:39.105444 2026] [:error] [pid 29606:tid 29655] [client 20.9.31.235:42477] File does not exist: /usr/local/apache/htdocs/suspended-page/t3s.php
[Thu May 07 04:45:40.032087 2026] [:error] [pid 29606:tid 29656] [client 20.9.31.235:42477] File does not exist: /usr/local/apache/htdocs/suspended-page/configuration.php
[Thu May 07 04:45:40.345925 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:42477] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuodBR5HjZ1PlSAiKtTuAAAAEI"]
[Thu May 07 04:45:40.963711 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:45473] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuodP0atTQld9Y2ht_GRgAAAMQ"]
[Thu May 07 04:45:41.574524 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:34053] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuodabP7TJOAh7WSUNV0QAAAIk"]
[Thu May 07 04:45:42.255771 2026] [:error] [pid 29710:tid 29719] [client 20.9.31.235:34089] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afuodv0atTQld9Y2ht_GSQAAAMc"]
[Thu May 07 04:45:42.810075 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:42441] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afuodonxrTjETioEY0TTpwAAAAs"]
[Thu May 07 04:45:43.524973 2026] [:error] [pid 29710:tid 29732] [client 20.9.31.235:42391] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afuod_0atTQld9Y2ht_GTAAAANQ"]
[Thu May 07 04:45:43.980753 2026] [:error] [pid 29710:tid 29715] [client 20.9.31.235:39709] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afuod_0atTQld9Y2ht_GTwAAAMM"]
[Thu May 07 04:45:44.503526 2026] [:error] [pid 29710:tid 29730] [client 20.9.31.235:41144] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afuoeP0atTQld9Y2ht_GUAAAANI"]
[Thu May 07 04:45:45.011948 2026] [:error] [pid 29607:tid 29668] [client 20.9.31.235:41855] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afuoeabP7TJOAh7WSUNV2AAAAIA"]
[Thu May 07 04:45:45.743917 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:42370] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afuoef0atTQld9Y2ht_GUQAAAMQ"]
[Thu May 07 04:45:46.253069 2026] [:error] [pid 29607:tid 29674] [client 20.9.31.235:34079] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afuoeqbP7TJOAh7WSUNV2wAAAIY"]
[Thu May 07 04:45:46.720886 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:39717] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afuoev0atTQld9Y2ht_GUwAAANA"]
[Thu May 07 04:45:47.217071 2026] [:error] [pid 29710:tid 29726] [client 20.9.31.235:39680] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afuoe_0atTQld9Y2ht_GVQAAAM4"]
[Thu May 07 04:45:48.006698 2026] [:error] [pid 29607:tid 29687] [client 20.9.31.235:34071] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afuofKbP7TJOAh7WSUNV3wAAAJM"]
[Thu May 07 04:45:48.649050 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:45457] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afuofP0atTQld9Y2ht_GWwAAAMo"]
[Thu May 07 04:45:49.787144 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:42448] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afuoff0atTQld9Y2ht_GXgAAAMQ"]
[Thu May 07 04:45:50.713545 2026] [:error] [pid 29605:tid 29638] [client 20.9.31.235:39682] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afuofonxrTjETioEY0TTsAAAABg"]
[Thu May 07 04:45:51.484093 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:45456] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afuof_0atTQld9Y2ht_GYwAAAMk"]
[Thu May 07 04:45:54.776300 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:34090] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afuogonxrTjETioEY0TTvgAAAAs"]
[Thu May 07 04:45:55.465588 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:42380] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afuog_0atTQld9Y2ht_GbgAAAME"]
[Thu May 07 04:45:55.921541 2026] [:error] [pid 29710:tid 29731] [client 20.9.31.235:41123] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afuog_0atTQld9Y2ht_GcgAAANM"]
[Thu May 07 04:45:56.426089 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:43581] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afuohP0atTQld9Y2ht_GdgAAAMs"]
[Thu May 07 04:45:57.613475 2026] [:error] [pid 29605:tid 29626] [client 20.9.31.235:39703] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afuohYnxrTjETioEY0TTwwAAAAw"]
[Thu May 07 04:45:59.363813 2026] [:error] [pid 29710:tid 29730] [client 20.9.31.235:42493] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afuoh_0atTQld9Y2ht_GgQAAANI"]
[Thu May 07 04:46:00.211279 2026] [:error] [pid 29710:tid 29717] [client 20.9.31.235:39708] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuoiP0atTQld9Y2ht_GiQAAAMU"]
[Thu May 07 04:46:00.925685 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:43579] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuoiP0atTQld9Y2ht_GjwAAANE"]
[Thu May 07 04:46:01.923941 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:38561] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuoif0atTQld9Y2ht_GlgAAAM0"]
[Thu May 07 04:46:02.714468 2026] [:error] [pid 29607:tid 29675] [client 20.9.31.235:34095] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "afuoiqbP7TJOAh7WSUNV6gAAAIc"]
[Thu May 07 04:46:04.591770 2026] [:error] [pid 29607:tid 29686] [client 20.9.31.235:42490] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afuojKbP7TJOAh7WSUNV7wAAAJI"]
[Thu May 07 04:46:05.077072 2026] [:error] [pid 29710:tid 29714] [client 20.9.31.235:42384] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afuojf0atTQld9Y2ht_GnwAAAMI"]
[Thu May 07 04:46:05.673806 2026] [:error] [pid 29607:tid 29671] [client 20.9.31.235:42470] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afuojabP7TJOAh7WSUNV8AAAAIM"]
[Thu May 07 04:46:06.276912 2026] [:error] [pid 29606:tid 29662] [client 20.9.31.235:38553] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afuojhR5HjZ1PlSAiKtTxwAAAFU"]
[Thu May 07 04:46:07.240033 2026] [:error] [pid 29605:tid 29635] [client 20.9.31.235:41831] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afuoj4nxrTjETioEY0TT0QAAABU"]
[Thu May 07 04:46:07.700813 2026] [:error] [pid 29606:tid 29657] [client 20.9.31.235:42444] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afuojxR5HjZ1PlSAiKtTzQAAAFA"]
[Thu May 07 04:46:08.177788 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:43540] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afuokInxrTjETioEY0TT1AAAAAs"]
[Thu May 07 04:46:08.894872 2026] [:error] [pid 29607:tid 29683] [client 20.9.31.235:39726] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afuokKbP7TJOAh7WSUNV9gAAAI8"]
[Thu May 07 04:46:09.334395 2026] [:error] [pid 29605:tid 29624] [client 20.9.31.235:45453] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class892.php"] [unique_id "afuokYnxrTjETioEY0TT1wAAAAo"]
[Thu May 07 04:46:09.748553 2026] [:error] [pid 29605:tid 29634] [client 20.9.31.235:34077] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class892.php"] [unique_id "afuokYnxrTjETioEY0TT2QAAABQ"]
[Thu May 07 04:46:10.168539 2026] [:error] [pid 29606:tid 29658] [client 20.9.31.235:34059] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class892.php"] [unique_id "afuokhR5HjZ1PlSAiKtT0QAAAFE"]
[Thu May 07 04:46:10.616426 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:41796] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class892.php"] [unique_id "afuokhR5HjZ1PlSAiKtT0wAAAEI"]
[Thu May 07 04:46:11.143036 2026] [:error] [pid 29605:tid 29626] [client 20.9.31.235:39690] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afuok4nxrTjETioEY0TT4AAAAAw"]
[Thu May 07 04:46:11.950413 2026] [:error] [pid 29605:tid 29627] [client 20.9.31.235:41116] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afuok4nxrTjETioEY0TT5QAAAA0"]
[Thu May 07 04:46:12.507183 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:42452] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afuolInxrTjETioEY0TT6AAAAAA"]
[Thu May 07 04:46:12.996299 2026] [:error] [pid 29605:tid 29618] [client 20.9.31.235:43522] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/locales.php"] [unique_id "afuolInxrTjETioEY0TT6QAAAAQ"]
[Thu May 07 04:46:13.516716 2026] [:error] [pid 29606:tid 29664] [client 20.9.31.235:40481] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuolRR5HjZ1PlSAiKtT2QAAAFc"]
[Thu May 07 04:46:14.171982 2026] [:error] [pid 29605:tid 29626] [client 20.9.31.235:42386] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuolonxrTjETioEY0TT7gAAAAw"]
[Thu May 07 04:46:14.871766 2026] [:error] [pid 29606:tid 29658] [client 20.9.31.235:41793] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuolhR5HjZ1PlSAiKtT3QAAAFE"]
[Thu May 07 04:46:15.294508 2026] [:error] [pid 29607:tid 29682] [client 20.9.31.235:45449] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "afuol6bP7TJOAh7WSUNV_AAAAI4"]
[Thu May 07 04:46:15.973959 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:41795] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afuol4nxrTjETioEY0TT8QAAAAs"]
[Thu May 07 04:46:16.465072 2026] [:error] [pid 29606:tid 29649] [client 20.9.31.235:43548] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afuomBR5HjZ1PlSAiKtT5wAAAEg"]
[Thu May 07 04:46:16.947294 2026] [:error] [pid 29607:tid 29676] [client 20.9.31.235:34070] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afuomKbP7TJOAh7WSUNV_wAAAIg"]
[Thu May 07 04:46:17.385391 2026] [:error] [pid 29607:tid 29672] [client 20.9.31.235:43568] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "afuomabP7TJOAh7WSUNWAgAAAIQ"]
[Thu May 07 04:46:17.779286 2026] [:error] [pid 29605:tid 29619] [client 20.9.31.235:42401] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuomYnxrTjETioEY0TT9QAAAAU"]
[Thu May 07 04:46:18.319934 2026] [:error] [pid 29605:tid 29622] [client 20.9.31.235:42374] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuomonxrTjETioEY0TT9wAAAAg"]
[Thu May 07 04:46:19.012827 2026] [:error] [pid 29605:tid 29628] [client 20.9.31.235:42489] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuom4nxrTjETioEY0TT-QAAAA4"]
[Thu May 07 04:46:20.064809 2026] [:error] [pid 29605:tid 29631] [client 20.9.31.235:41807] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "afuonInxrTjETioEY0TT_AAAABE"]
[Thu May 07 04:46:20.675295 2026] [:error] [pid 29606:tid 29657] [client 20.9.31.235:41123] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afuonBR5HjZ1PlSAiKtT8gAAAFA"]
[Thu May 07 04:46:21.693347 2026] [:error] [pid 29605:tid 29618] [client 20.9.31.235:34085] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afuonYnxrTjETioEY0TUAAAAAAQ"]
[Thu May 07 04:46:22.484530 2026] [:error] [pid 29605:tid 29633] [client 20.9.31.235:41095] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afuononxrTjETioEY0TUBQAAABM"]
[Thu May 07 04:46:23.991494 2026] [:error] [pid 29606:tid 29651] [client 20.9.31.235:42455] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "afuonxR5HjZ1PlSAiKtT-gAAAEo"]
[Thu May 07 04:46:24.647600 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:41090] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuooP0atTQld9Y2ht_GrQAAAMw"]
[Thu May 07 04:46:25.689503 2026] [:error] [pid 29607:tid 29685] [client 20.9.31.235:38532] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuooabP7TJOAh7WSUNWCgAAAJE"]
[Thu May 07 04:46:26.417378 2026] [:error] [pid 29605:tid 29630] [client 20.9.31.235:43543] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuooonxrTjETioEY0TUCwAAABA"]
[Thu May 07 04:46:28.053994 2026] [:error] [pid 29710:tid 29718] [client 20.9.31.235:41813] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afuopP0atTQld9Y2ht_GtgAAAMY"]
[Thu May 07 04:46:30.433704 2026] [:error] [pid 29710:tid 29719] [client 20.9.31.235:42406] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afuopv0atTQld9Y2ht_GvwAAAMc"]
[Thu May 07 04:46:32.617769 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:29280] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afuoqKbP7TJOAh7WSUNWFQAAAJQ"]
[Thu May 07 04:46:33.888838 2026] [:error] [pid 29607:tid 29685] [client 20.9.31.235:43577] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afuoqabP7TJOAh7WSUNWGQAAAJE"]
[Thu May 07 04:46:35.106564 2026] [:error] [pid 29710:tid 29730] [client 20.9.31.235:42486] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "afuoq_0atTQld9Y2ht_GzAAAANI"]
[Thu May 07 04:46:36.615191 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:41096] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afuorP0atTQld9Y2ht_G1wAAANU"]
[Thu May 07 04:46:39.910980 2026] [:error] [pid 29710:tid 29726] [client 20.9.31.235:43573] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "afuor_0atTQld9Y2ht_G5wAAAM4"]
[Thu May 07 04:46:40.614465 2026] [:error] [pid 29710:tid 29731] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Thu May 07 04:46:40.819929 2026] [:error] [pid 29710:tid 29732] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/no20.php
[Thu May 07 04:46:41.009958 2026] [:error] [pid 29710:tid 29734] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/yasnu.php
[Thu May 07 04:46:41.206509 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Thu May 07 04:46:41.410768 2026] [:error] [pid 29710:tid 29714] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Thu May 07 04:46:42.061067 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Thu May 07 04:46:42.248961 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Thu May 07 04:46:42.478188 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Thu May 07 04:46:42.669560 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:39727] File does not exist: /usr/local/apache/htdocs/suspended-page/ktfow.php
[Thu May 07 04:46:42.855118 2026] [:error] [pid 29710:tid 29731] [client 20.9.31.235:39727] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afuosv0atTQld9Y2ht_G-gAAANM"]
[Thu May 07 04:46:43.483701 2026] [:error] [pid 29710:tid 29734] [client 20.9.31.235:39043] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afuos_0atTQld9Y2ht_G_QAAANY"]
[Thu May 07 04:46:44.464100 2026] [:error] [pid 29606:tid 29641] [client 20.9.31.235:43563] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afuotBR5HjZ1PlSAiKtUJQAAAEA"]
[Thu May 07 04:46:44.967825 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:29278] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afuotP0atTQld9Y2ht_HAQAAAMA"]
[Thu May 07 04:46:45.933014 2026] [:error] [pid 29606:tid 29656] [client 20.9.31.235:45471] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afuotRR5HjZ1PlSAiKtUKwAAAE8"]
[Thu May 07 04:46:47.127909 2026] [:error] [pid 29710:tid 29727] [client 20.9.31.235:43525] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afuot_0atTQld9Y2ht_HDwAAAM8"]
[Thu May 07 04:46:48.905000 2026] [:error] [pid 29710:tid 29714] [client 20.9.31.235:39801] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afuouP0atTQld9Y2ht_HFwAAAMI"]
[Thu May 07 04:46:50.141336 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:43536] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afuouv0atTQld9Y2ht_HIAAAANA"]
[Thu May 07 04:46:52.266832 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:40453] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuovP0atTQld9Y2ht_HLQAAAME"]
[Thu May 07 04:46:53.642949 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:41120] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuovabP7TJOAh7WSUNWKAAAAIU"]
[Thu May 07 04:46:55.350837 2026] [:error] [pid 29710:tid 29726] [client 20.9.31.235:42471] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuov_0atTQld9Y2ht_HOQAAAM4"]
[Thu May 07 04:46:56.704158 2026] [:error] [pid 29607:tid 29687] [client 20.9.31.235:42444] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afuowKbP7TJOAh7WSUNWLgAAAJM"]
[Thu May 07 04:46:57.302205 2026] [:error] [pid 29605:tid 29630] [client 20.9.31.235:29248] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuowYnxrTjETioEY0TUGgAAABA"]
[Thu May 07 04:46:57.767742 2026] [:error] [pid 29606:tid 29661] [client 20.9.31.235:39093] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuowRR5HjZ1PlSAiKtUOAAAAFQ"]
[Thu May 07 04:46:58.278119 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:42481] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuowqbP7TJOAh7WSUNWMQAAAJc"]
[Thu May 07 04:46:58.810552 2026] [:error] [pid 29606:tid 29650] [client 20.9.31.235:43527] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuowhR5HjZ1PlSAiKtUPAAAAEk"]
[Thu May 07 04:46:59.342899 2026] [:error] [pid 29607:tid 29668] [client 20.9.31.235:42425] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afuow6bP7TJOAh7WSUNWMwAAAIA"]
[Thu May 07 04:46:59.847707 2026] [:error] [pid 29607:tid 29678] [client 20.9.31.235:45483] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afuow6bP7TJOAh7WSUNWNQAAAIo"]
[Thu May 07 04:47:00.604036 2026] [:error] [pid 29605:tid 29633] [client 20.9.31.235:45462] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afuoxInxrTjETioEY0TUHwAAABM"]
[Thu May 07 04:47:01.186656 2026] [:error] [pid 29607:tid 29669] [client 20.9.31.235:41092] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afuoxabP7TJOAh7WSUNWOwAAAIE"]
[Thu May 07 04:47:01.752349 2026] [:error] [pid 29605:tid 29635] [client 20.9.31.235:43582] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afuoxYnxrTjETioEY0TUIwAAABU"]
[Thu May 07 04:47:02.172159 2026] [:error] [pid 29605:tid 29638] [client 20.9.31.235:34088] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afuoxonxrTjETioEY0TUJQAAABg"]
[Thu May 07 04:47:02.889029 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:42432] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afuoxv0atTQld9Y2ht_HPQAAAMQ"]
[Thu May 07 04:47:03.621997 2026] [:error] [pid 29607:tid 29678] [client 20.9.31.235:43524] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afuox6bP7TJOAh7WSUNWPQAAAIo"]
[Thu May 07 04:47:04.240882 2026] [:error] [pid 29606:tid 29645] [client 20.9.31.235:42450] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afuoyBR5HjZ1PlSAiKtUPwAAAEQ"]
[Thu May 07 04:47:04.889296 2026] [:error] [pid 29606:tid 29642] [client 20.9.31.235:42393] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afuoyBR5HjZ1PlSAiKtUQAAAAEE"]
[Thu May 07 04:47:05.514699 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:41847] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afuoyabP7TJOAh7WSUNWRAAAAJg"]
[Thu May 07 04:47:06.195322 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:39739] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afuoyhR5HjZ1PlSAiKtUQgAAAFI"]
[Thu May 07 04:47:06.676321 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:41836] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afuoyv0atTQld9Y2ht_HSQAAANA"]
[Thu May 07 04:47:07.407416 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:39735] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afuoy_0atTQld9Y2ht_HTAAAAMQ"]
[Thu May 07 04:47:07.967076 2026] [:error] [pid 29710:tid 29726] [client 20.9.31.235:41846] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afuoy_0atTQld9Y2ht_HUAAAAM4"]
[Thu May 07 04:47:09.472895 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:41121] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afuozabP7TJOAh7WSUNWSAAAAJg"]
[Thu May 07 04:47:14.856399 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:42486] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afuo0qbP7TJOAh7WSUNWVQAAAJA"]
[Thu May 07 04:47:17.020383 2026] [:error] [pid 29607:tid 29682] [client 20.9.31.235:41141] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afuo1abP7TJOAh7WSUNWWgAAAI4"]
[Thu May 07 04:47:17.812905 2026] [:error] [pid 29606:tid 29665] [client 20.9.31.235:43530] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afuo1RR5HjZ1PlSAiKtUUwAAAFg"]
[Thu May 07 04:47:18.543727 2026] [:error] [pid 29606:tid 29650] [client 20.9.31.235:41802] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afuo1hR5HjZ1PlSAiKtUVQAAAEk"]
[Thu May 07 04:47:21.857067 2026] [:error] [pid 29710:tid 29736] [client 20.9.31.235:39713] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuo2f0atTQld9Y2ht_HZQAAANg"]
[Thu May 07 04:47:22.455763 2026] [:error] [pid 29606:tid 29644] [client 20.9.31.235:42465] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuo2hR5HjZ1PlSAiKtUVwAAAEM"]
[Thu May 07 04:47:23.456927 2026] [:error] [pid 29605:tid 29617] [client 20.9.31.235:41118] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuo24nxrTjETioEY0TULQAAAAM"]
[Thu May 07 04:47:25.442055 2026] [:error] [pid 29605:tid 29618] [client 20.9.31.235:42389] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afuo3YnxrTjETioEY0TULwAAAAQ"]
[Thu May 07 04:47:26.179076 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:40460] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afuo3v0atTQld9Y2ht_HbQAAANc"]
[Thu May 07 04:47:27.213505 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:42459] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afuo3_0atTQld9Y2ht_HcQAAAME"]
[Thu May 07 04:47:27.775616 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:42381] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afuo3_0atTQld9Y2ht_HcwAAAMo"]
[Thu May 07 04:47:28.709278 2026] [:error] [pid 29710:tid 29720] [client 20.9.31.235:34086] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afuo4P0atTQld9Y2ht_HdgAAAMg"]
[Thu May 07 04:47:29.189192 2026] [:error] [pid 29606:tid 29663] [client 20.9.31.235:34051] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afuo4RR5HjZ1PlSAiKtUXAAAAFY"]
[Thu May 07 04:47:29.795461 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:42422] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afuo4YnxrTjETioEY0TUMQAAAAA"]
[Thu May 07 04:47:30.332927 2026] [:error] [pid 29606:tid 29648] [client 20.9.31.235:42443] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afuo4hR5HjZ1PlSAiKtUXgAAAEc"]
[Thu May 07 04:47:30.925300 2026] [:error] [pid 29606:tid 29665] [client 20.9.31.235:43556] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afuo4hR5HjZ1PlSAiKtUYgAAAFg"]
[Thu May 07 04:47:31.595815 2026] [:error] [pid 29606:tid 29652] [client 20.9.31.235:41809] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afuo4xR5HjZ1PlSAiKtUYwAAAEs"]
[Thu May 07 04:47:32.117787 2026] [:error] [pid 29605:tid 29620] [client 20.9.31.235:41089] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afuo5InxrTjETioEY0TUMwAAAAY"]
[Thu May 07 04:47:32.711067 2026] [:error] [pid 29607:tid 29675] [client 20.9.31.235:39736] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afuo5KbP7TJOAh7WSUNWfwAAAIc"]
[Thu May 07 04:47:33.272603 2026] [:error] [pid 29710:tid 29732] [client 20.9.31.235:41125] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afuo5f0atTQld9Y2ht_HmgAAANQ"]
[Thu May 07 04:47:33.833995 2026] [:error] [pid 29607:tid 29670] [client 20.9.31.235:34057] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afuo5abP7TJOAh7WSUNWhgAAAII"]
[Thu May 07 04:47:34.398857 2026] [:error] [pid 29607:tid 29678] [client 20.9.31.235:42469] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afuo5qbP7TJOAh7WSUNWiAAAAIo"]
[Thu May 07 04:47:34.964893 2026] [:error] [pid 29606:tid 29662] [client 20.9.31.235:41842] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afuo5hR5HjZ1PlSAiKtUawAAAFU"]
[Thu May 07 04:47:35.672905 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:42430] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afuo5_0atTQld9Y2ht_HzwAAAME"]
[Thu May 07 04:47:36.448936 2026] [:error] [pid 29605:tid 29638] [client 20.9.31.235:42446] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afuo6InxrTjETioEY0TUNgAAABg"]
[Thu May 07 04:47:36.960132 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:40464] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afuo6P0atTQld9Y2ht_H7QAAAMk"]
[Thu May 07 04:47:37.583762 2026] [:error] [pid 29605:tid 29627] [client 20.9.31.235:45460] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afuo6YnxrTjETioEY0TUNwAAAA0"]
[Thu May 07 04:47:38.179549 2026] [:error] [pid 29710:tid 29726] [client 20.9.31.235:40454] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afuo6v0atTQld9Y2ht_ICgAAAM4"]
[Thu May 07 04:47:40.094090 2026] [:error] [pid 29606:tid 29653] [client 20.9.31.235:43539] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afuo7BR5HjZ1PlSAiKtUbQAAAEw"]
[Thu May 07 04:47:41.256874 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:40480] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afuo7f0atTQld9Y2ht_IPQAAAME"]
[Thu May 07 04:47:41.867769 2026] [:error] [pid 29710:tid 29719] [client 20.9.31.235:34084] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afuo7f0atTQld9Y2ht_IQAAAAMc"]
[Thu May 07 04:47:42.572095 2026] [:error] [pid 29710:tid 29715] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/tews.php
[Thu May 07 04:47:42.790798 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/moshou.php
[Thu May 07 04:47:43.024269 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Thu May 07 04:47:43.272770 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Thu May 07 04:47:43.737470 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu May 07 04:47:44.010513 2026] [:error] [pid 29710:tid 29717] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu May 07 04:47:44.218115 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Thu May 07 04:47:44.440499 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Thu May 07 04:47:44.642615 2026] [:error] [pid 29710:tid 29730] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu May 07 04:47:44.834136 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:41823] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu May 07 04:47:45.125736 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:41823] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "afuo8f0atTQld9Y2ht_IbwAAAMs"]
[Thu May 07 04:47:45.733071 2026] [:error] [pid 29607:tid 29670] [client 20.9.31.235:42369] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "afuo8abP7TJOAh7WSUNWrQAAAII"]
[Thu May 07 04:47:46.339417 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:41798] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "afuo8onxrTjETioEY0TUPgAAAAA"]
[Thu May 07 04:47:47.919597 2026] [:error] [pid 29605:tid 29633] [client 20.9.31.235:41797] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "afuo84nxrTjETioEY0TUPwAAABM"]
[Thu May 07 04:47:48.498454 2026] [:error] [pid 29710:tid 29736] [client 20.9.31.235:42410] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "afuo9P0atTQld9Y2ht_IhAAAANg"]
[Thu May 07 04:47:49.096315 2026] [:error] [pid 29710:tid 29715] [client 20.9.31.235:39687] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "afuo9f0atTQld9Y2ht_IhQAAAMM"]
[Thu May 07 04:47:49.801430 2026] [:error] [pid 29710:tid 29729] [client 20.9.31.235:41841] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "afuo9f0atTQld9Y2ht_IhwAAANE"]
[Thu May 07 04:47:50.549445 2026] [:error] [pid 29607:tid 29674] [client 20.9.31.235:29282] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3.php"] [unique_id "afuo9qbP7TJOAh7WSUNWswAAAIY"]
[Thu May 07 04:47:51.418233 2026] [:error] [pid 29607:tid 29680] [client 20.9.31.235:29296] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "afuo96bP7TJOAh7WSUNWtAAAAIw"]
[Thu May 07 04:47:52.044815 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:45444] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "afuo-P0atTQld9Y2ht_IjgAAAMw"]
[Thu May 07 04:47:53.655870 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:41834] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "afuo-abP7TJOAh7WSUNWuAAAAJg"]
[Thu May 07 04:47:54.501380 2026] [:error] [pid 29607:tid 29670] [client 20.9.31.235:38560] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4.php"] [unique_id "afuo-qbP7TJOAh7WSUNWuwAAAII"]
[Thu May 07 04:47:55.283696 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:39738] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "afuo-_0atTQld9Y2ht_IkQAAANU"]
[Thu May 07 04:47:56.898123 2026] [:error] [pid 29605:tid 29634] [client 20.9.31.235:42407] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "afuo_InxrTjETioEY0TURgAAABQ"]
[Thu May 07 04:47:58.154645 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:41131] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "afuo_v0atTQld9Y2ht_IqwAAANA"]
[Thu May 07 04:47:59.272995 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:42453] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5.php"] [unique_id "afuo_xR5HjZ1PlSAiKtUiQAAAFI"]
[Thu May 07 04:48:00.263982 2026] [:error] [pid 29606:tid 29644] [client 20.9.31.235:41142] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afupABR5HjZ1PlSAiKtUigAAAEM"]
[Thu May 07 04:48:01.422017 2026] [:error] [pid 29710:tid 29728] [client 20.9.31.235:41130] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afupAf0atTQld9Y2ht_IvQAAANA"]
[Thu May 07 04:48:02.307408 2026] [:error] [pid 29606:tid 29651] [client 20.9.31.235:41104] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afupAhR5HjZ1PlSAiKtUjAAAAEo"]
[Thu May 07 04:48:03.646232 2026] [:error] [pid 29710:tid 29733] [client 20.9.31.235:45454] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/6.php"] [unique_id "afupA_0atTQld9Y2ht_IwgAAANU"]
[Thu May 07 04:48:05.552757 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:29273] [client 20.9.31.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/nss.php"] [unique_id "afupBf0atTQld9Y2ht_IxwAAAMA"]
[Thu May 07 04:48:07.313205 2026] [:error] [pid 29606:tid 29653] [client 20.9.31.235:43560] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afupBxR5HjZ1PlSAiKtUkAAAAEw"]
[Thu May 07 04:48:09.224776 2026] [:error] [pid 29606:tid 29651] [client 20.9.31.235:43551] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afupCRR5HjZ1PlSAiKtUlQAAAEo"]
[Thu May 07 04:48:10.040136 2026] [:error] [pid 29710:tid 29736] [client 20.9.31.235:41112] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afupCv0atTQld9Y2ht_I2gAAANg"]
[Thu May 07 04:48:12.546487 2026] [:error] [pid 29605:tid 29625] [client 20.9.31.235:41818] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "afupDInxrTjETioEY0TUTwAAAAs"]
[Thu May 07 04:48:13.383415 2026] [:error] [pid 29606:tid 29653] [client 20.9.31.235:39696] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afupDRR5HjZ1PlSAiKtUmwAAAEw"]
[Thu May 07 04:48:13.906967 2026] [:error] [pid 29606:tid 29649] [client 20.9.31.235:42385] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afupDRR5HjZ1PlSAiKtUngAAAEg"]
[Thu May 07 04:48:15.321732 2026] [:error] [pid 29606:tid 29652] [client 20.9.31.235:45447] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afupDxR5HjZ1PlSAiKtUpQAAAEs"]
[Thu May 07 04:48:16.367856 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:41122] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "afupEKbP7TJOAh7WSUNW3QAAAIk"]
[Thu May 07 04:48:17.748365 2026] [:error] [pid 29710:tid 29715] [client 20.9.31.235:41850] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afupEf0atTQld9Y2ht_I9AAAAMM"]
[Thu May 07 04:48:19.513665 2026] [:error] [pid 29605:tid 29631] [client 20.9.31.235:42476] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afupE4nxrTjETioEY0TUUgAAABE"]
[Thu May 07 04:48:23.916125 2026] [:error] [pid 29710:tid 29712] [client 20.9.31.235:42372] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afupF_0atTQld9Y2ht_JBwAAAMA"]
[Thu May 07 04:48:25.108296 2026] [:error] [pid 29710:tid 29716] [client 20.9.31.235:42368] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afupGf0atTQld9Y2ht_JCgAAAMQ"]
[Thu May 07 04:48:26.739583 2026] [:error] [pid 29710:tid 29735] [client 20.9.31.235:42417] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afupGv0atTQld9Y2ht_JEgAAANc"]
[Thu May 07 04:48:27.587778 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:41800] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afupG6bP7TJOAh7WSUNW8AAAAJA"]
[Thu May 07 04:48:28.544420 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:45518] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afupHKbP7TJOAh7WSUNW9gAAAJc"]
[Thu May 07 04:48:29.256502 2026] [:error] [pid 29607:tid 29682] [client 20.9.31.235:34066] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afupHabP7TJOAh7WSUNW-AAAAI4"]
[Thu May 07 04:48:30.915193 2026] [:error] [pid 29606:tid 29662] [client 20.9.31.235:41832] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afupHhR5HjZ1PlSAiKtUtwAAAFU"]
[Thu May 07 04:48:31.700007 2026] [:error] [pid 29607:tid 29675] [client 20.9.31.235:41134] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afupH6bP7TJOAh7WSUNXBgAAAIc"]
[Thu May 07 04:48:32.386423 2026] [:error] [pid 29606:tid 29644] [client 20.9.31.235:41827] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afupIBR5HjZ1PlSAiKtUvAAAAEM"]
[Thu May 07 04:48:33.052123 2026] [:error] [pid 29605:tid 29635] [client 20.9.31.235:43537] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afupIYnxrTjETioEY0TUXwAAABU"]
[Thu May 07 04:48:33.576219 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:39707] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afupIabP7TJOAh7WSUNXDwAAAJQ"]
[Thu May 07 04:48:34.877075 2026] [:error] [pid 29606:tid 29642] [client 20.9.31.235:34060] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afupIhR5HjZ1PlSAiKtUxgAAAEE"]
[Thu May 07 04:48:35.471525 2026] [:error] [pid 29606:tid 29656] [client 20.9.31.235:29254] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afupIxR5HjZ1PlSAiKtUyAAAAE8"]
[Thu May 07 04:48:36.148324 2026] [:error] [pid 29607:tid 29678] [client 20.9.31.235:40475] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afupJKbP7TJOAh7WSUNXFQAAAIo"]
[Thu May 07 04:48:36.660215 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:41097] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afupJP0atTQld9Y2ht_JJwAAAMk"]
[Thu May 07 04:48:37.148129 2026] [:error] [pid 29710:tid 29723] [client 20.9.31.235:34078] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afupJf0atTQld9Y2ht_JKwAAAMs"]
[Thu May 07 04:48:38.067950 2026] [:error] [pid 29710:tid 29719] [client 20.9.31.235:41820] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afupJv0atTQld9Y2ht_JLwAAAMc"]
[Thu May 07 04:48:39.958517 2026] [:error] [pid 29606:tid 29645] [client 20.9.31.235:45455] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afupJxR5HjZ1PlSAiKtUyQAAAEQ"]
[Thu May 07 04:48:42.718083 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:45443] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afupKoPEZE1565sDGnwIAgAAAQg"]
[Thu May 07 04:48:45.109697 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu May 07 04:48:45.506298 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Thu May 07 04:48:45.957674 2026] [:error] [pid 4539:tid 4563] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Thu May 07 04:48:46.283279 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Thu May 07 04:48:46.482721 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Thu May 07 04:48:46.733716 2026] [:error] [pid 4539:tid 4543] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu May 07 04:48:47.006809 2026] [:error] [pid 4539:tid 4544] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu May 07 04:48:47.523037 2026] [:error] [pid 4539:tid 4553] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Thu May 07 04:48:47.814049 2026] [:error] [pid 4539:tid 4550] [client 20.9.31.235:41115] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Thu May 07 04:48:48.046496 2026] [:error] [pid 4539:tid 4556] [client 20.9.31.235:41115] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afupMIPEZE1565sDGnwIIAAAAQ8"]
[Thu May 07 04:48:48.648460 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:39681] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afupMKbP7TJOAh7WSUNXLgAAAJA"]
[Thu May 07 04:48:51.941293 2026] [:error] [pid 4539:tid 4561] [client 20.9.31.235:45511] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afupM4PEZE1565sDGnwIMwAAARQ"]
[Thu May 07 04:48:55.856805 2026] [:error] [pid 29710:tid 29715] [client 20.9.31.235:41824] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afupN_0atTQld9Y2ht_JfwAAAMM"]
[Thu May 07 04:48:56.989649 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:45466] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupOIPEZE1565sDGnwIPgAAARg"]
[Thu May 07 04:48:57.653986 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:41110] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupOabP7TJOAh7WSUNXPAAAAJY"]
[Thu May 07 04:48:58.905544 2026] [:error] [pid 29710:tid 29734] [client 20.9.31.235:42479] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupOv0atTQld9Y2ht_JrwAAANY"]
[Thu May 07 04:49:00.479446 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:43574] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupPBR5HjZ1PlSAiKtVCAAAAFI"]
[Thu May 07 04:49:01.887050 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:39720] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afupPabP7TJOAh7WSUNXTQAAAJA"]
[Thu May 07 04:49:03.156312 2026] [:error] [pid 29710:tid 29727] [client 20.9.31.235:45475] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afupP_0atTQld9Y2ht_J4gAAAM8"]
[Thu May 07 04:49:03.932076 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:41107] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afupP6bP7TJOAh7WSUNXVQAAAIU"]
[Thu May 07 04:49:05.090249 2026] [:error] [pid 29605:tid 29629] [client 20.9.31.235:39704] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afupQYnxrTjETioEY0TUhAAAAA8"]
[Thu May 07 04:49:05.884072 2026] [:error] [pid 4539:tid 4565] [client 20.9.31.235:43535] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afupQYPEZE1565sDGnwIZwAAARg"]
[Thu May 07 04:49:06.653522 2026] [:error] [pid 29605:tid 29627] [client 20.9.31.235:42373] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afupQonxrTjETioEY0TUhgAAAA0"]
[Thu May 07 04:49:07.311248 2026] [:error] [pid 29605:tid 29636] [client 20.9.31.235:34048] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afupQ4nxrTjETioEY0TUiAAAABY"]
[Thu May 07 04:49:07.887574 2026] [:error] [pid 4539:tid 4547] [client 20.9.31.235:41148] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afupQ4PEZE1565sDGnwIbQAAAQY"]
[Thu May 07 04:49:08.466736 2026] [:error] [pid 29605:tid 29632] [client 20.9.31.235:39715] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afupRInxrTjETioEY0TUiwAAABI"]
[Thu May 07 04:49:08.986527 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:45469] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afupRIPEZE1565sDGnwIcgAAARA"]
[Thu May 07 04:49:09.466873 2026] [:error] [pid 29607:tid 29670] [client 20.9.31.235:39090] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afupRabP7TJOAh7WSUNXXQAAAII"]
[Thu May 07 04:49:10.210358 2026] [:error] [pid 29607:tid 29676] [client 20.9.31.235:42424] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afupRqbP7TJOAh7WSUNXYQAAAIg"]
[Thu May 07 04:49:10.707735 2026] [:error] [pid 29607:tid 29686] [client 20.9.31.235:41101] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afupRqbP7TJOAh7WSUNXZQAAAJI"]
[Thu May 07 04:49:11.421821 2026] [:error] [pid 29710:tid 29732] [client 20.9.31.235:43570] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afupR_0atTQld9Y2ht_J-AAAANQ"]
[Thu May 07 04:49:11.931015 2026] [:error] [pid 29606:tid 29662] [client 20.9.31.235:42375] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afupRxR5HjZ1PlSAiKtVGAAAAFU"]
[Thu May 07 04:49:12.469393 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:29294] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afupSIPEZE1565sDGnwIfAAAAQU"]
[Thu May 07 04:49:13.073852 2026] [:error] [pid 29710:tid 29736] [client 20.9.31.235:42457] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afupSf0atTQld9Y2ht_J_wAAANg"]
[Thu May 07 04:49:13.685214 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:41830] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afupSf0atTQld9Y2ht_KBAAAAMo"]
[Thu May 07 04:49:14.190854 2026] [:error] [pid 29605:tid 29628] [client 20.9.31.235:41151] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afupSonxrTjETioEY0TUlAAAAA4"]
[Thu May 07 04:49:14.825959 2026] [:error] [pid 29605:tid 29636] [client 20.9.31.235:43541] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afupSonxrTjETioEY0TUlQAAABY"]
[Thu May 07 04:49:15.348099 2026] [:error] [pid 29607:tid 29688] [client 20.9.31.235:29303] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afupS6bP7TJOAh7WSUNXbAAAAJQ"]
[Thu May 07 04:49:15.854683 2026] [:error] [pid 4539:tid 4562] [client 20.9.31.235:29253] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afupS4PEZE1565sDGnwIgAAAARU"]
[Thu May 07 04:49:16.779276 2026] [:error] [pid 29605:tid 29617] [client 20.9.31.235:41814] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afupTInxrTjETioEY0TUmQAAAAM"]
[Thu May 07 04:49:17.315895 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:45467] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afupTf0atTQld9Y2ht_KDAAAAMk"]
[Thu May 07 04:49:17.895699 2026] [:error] [pid 29607:tid 29668] [client 20.9.31.235:34080] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afupTabP7TJOAh7WSUNXdQAAAIA"]
[Thu May 07 04:49:19.043970 2026] [:error] [pid 29606:tid 29657] [client 20.9.31.235:29265] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afupTxR5HjZ1PlSAiKtVIQAAAFA"]
[Thu May 07 04:49:19.789072 2026] [:error] [pid 29606:tid 29646] [client 20.9.31.235:40491] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afupTxR5HjZ1PlSAiKtVIwAAAEU"]
[Thu May 07 04:49:20.554146 2026] [:error] [pid 4539:tid 4558] [client 20.9.31.235:39721] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afupUIPEZE1565sDGnwIiQAAARE"]
[Thu May 07 04:49:21.017625 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:29274] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afupUYPEZE1565sDGnwIiwAAAQ4"]
[Thu May 07 04:49:22.117747 2026] [:error] [pid 29607:tid 29672] [client 20.9.31.235:39689] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afupUqbP7TJOAh7WSUNXfgAAAIQ"]
[Thu May 07 04:49:22.771757 2026] [:error] [pid 29606:tid 29663] [client 20.9.31.235:34111] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afupUhR5HjZ1PlSAiKtVLQAAAFY"]
[Thu May 07 04:49:23.687250 2026] [:error] [pid 29607:tid 29679] [client 20.9.31.235:34110] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afupU6bP7TJOAh7WSUNXgAAAAIs"]
[Thu May 07 04:49:25.034718 2026] [:error] [pid 29605:tid 29626] [client 20.9.31.235:38535] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afupVYnxrTjETioEY0TUnwAAAAw"]
[Thu May 07 04:49:25.581094 2026] [:error] [pid 4539:tid 4541] [client 20.9.31.235:38537] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afupVYPEZE1565sDGnwIjgAAAQA"]
[Thu May 07 04:49:26.423934 2026] [:error] [pid 29607:tid 29671] [client 20.9.31.235:42412] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afupVqbP7TJOAh7WSUNXgwAAAIM"]
[Thu May 07 04:49:27.120758 2026] [:error] [pid 4539:tid 4550] [client 20.9.31.235:39070] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afupV4PEZE1565sDGnwImQAAAQk"]
[Thu May 07 04:49:28.016358 2026] [:error] [pid 4539:tid 4544] [client 20.9.31.235:41127] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afupWIPEZE1565sDGnwInAAAAQM"]
[Thu May 07 04:49:29.784544 2026] [:error] [pid 29605:tid 29633] [client 20.9.31.235:43544] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afupWYnxrTjETioEY0TUogAAABM"]
[Thu May 07 04:49:31.331181 2026] [:error] [pid 29606:tid 29643] [client 20.9.31.235:38555] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afupWxR5HjZ1PlSAiKtVQQAAAEI"]
[Thu May 07 04:49:31.877458 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:45491] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afupW6bP7TJOAh7WSUNXkwAAAJc"]
[Thu May 07 04:49:32.578140 2026] [:error] [pid 29710:tid 29722] [client 20.9.31.235:39063] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afupXP0atTQld9Y2ht_KFwAAAMo"]
[Thu May 07 04:49:33.220973 2026] [:error] [pid 29710:tid 29718] [client 20.9.31.235:40468] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afupXf0atTQld9Y2ht_KGQAAAMY"]
[Thu May 07 04:49:39.422020 2026] [:error] [pid 29607:tid 29687] [client 20.9.31.235:41840] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afupY6bP7TJOAh7WSUNXngAAAJM"]
[Thu May 07 04:49:40.818098 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:41145] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afupZP0atTQld9Y2ht_KNQAAAM0"]
[Thu May 07 04:49:41.892957 2026] [:error] [pid 4539:tid 4553] [client 20.9.31.235:34094] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afupZYPEZE1565sDGnwItQAAAQw"]
[Thu May 07 04:49:42.422347 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:42413] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afupZqbP7TJOAh7WSUNXqwAAAJc"]
[Thu May 07 04:49:43.302438 2026] [:error] [pid 4539:tid 4555] [client 20.9.31.235:41837] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afupZ4PEZE1565sDGnwItgAAAQ4"]
[Thu May 07 04:49:44.130555 2026] [:error] [pid 29605:tid 29618] [client 20.9.31.235:40493] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afupaInxrTjETioEY0TUqwAAAAQ"]
[Thu May 07 04:49:44.963034 2026] [:error] [pid 4539:tid 4563] [client 20.9.31.235:43577] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afupaIPEZE1565sDGnwIuAAAARY"]
[Thu May 07 04:49:45.560938 2026] [:error] [pid 29710:tid 29724] [client 20.9.31.235:34067] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afupaf0atTQld9Y2ht_KOwAAAMw"]
[Thu May 07 04:49:46.694630 2026] [:error] [pid 29605:tid 29623] [client 20.9.31.235:34110] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afupaonxrTjETioEY0TUrAAAAAk"]
[Thu May 07 04:49:47.945962 2026] [:error] [pid 29607:tid 29680] [client 20.9.31.235:42484] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Thu May 07 04:49:48.138890 2026] [:error] [pid 29607:tid 29686] [client 20.9.31.235:42484] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu May 07 04:49:48.333479 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:42484] File does not exist: /usr/local/apache/htdocs/suspended-page/pwnd.php
[Thu May 07 04:49:48.761868 2026] [:error] [pid 29607:tid 29678] [client 20.9.31.235:42484] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Thu May 07 04:49:49.615971 2026] [:error] [pid 29607:tid 29672] [client 20.9.31.235:42484] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu May 07 04:49:50.163209 2026] [:error] [pid 29607:tid 29675] [client 20.9.31.235:42484] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Thu May 07 04:49:50.524118 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:42484] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afupbqbP7TJOAh7WSUNX4QAAAJc"]
[Thu May 07 04:49:51.703762 2026] [:error] [pid 29607:tid 29684] [client 20.9.31.235:42411] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afupb6bP7TJOAh7WSUNX4wAAAJA"]
[Thu May 07 04:49:52.917478 2026] [:error] [pid 29710:tid 29725] [client 20.9.31.235:39792] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afupcP0atTQld9Y2ht_KUAAAAM0"]
[Thu May 07 04:49:55.766114 2026] [:error] [pid 29710:tid 29715] [client 20.9.31.235:42404] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afupc_0atTQld9Y2ht_KWAAAAMM"]
[Thu May 07 04:49:57.369982 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:42451] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupdabP7TJOAh7WSUNX8AAAAJY"]
[Thu May 07 04:49:59.186769 2026] [:error] [pid 29710:tid 29721] [client 20.9.31.235:42377] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupd_0atTQld9Y2ht_KZAAAAMk"]
[Thu May 07 04:49:59.997844 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:43557] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupd_0atTQld9Y2ht_KZgAAAME"]
[Thu May 07 04:50:00.871701 2026] [:error] [pid 29605:tid 29627] [client 20.9.31.235:39083] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afupeInxrTjETioEY0TUvAAAAA0"]
[Thu May 07 04:50:01.851208 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:44800] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afupeYnxrTjETioEY0TUwwAAAAA"]
[Thu May 07 04:50:05.004972 2026] [:error] [pid 29606:tid 29656] [client 20.9.31.235:39683] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afupfRR5HjZ1PlSAiKtVWwAAAE8"]
[Thu May 07 04:50:05.538818 2026] [:error] [pid 29606:tid 29662] [client 20.9.31.235:42491] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afupfRR5HjZ1PlSAiKtVXgAAAFU"]
[Thu May 07 04:50:07.063483 2026] [:error] [pid 29710:tid 29713] [client 20.9.31.235:45464] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afupf_0atTQld9Y2ht_KdQAAAME"]
[Thu May 07 04:50:07.752836 2026] [:error] [pid 29710:tid 29736] [client 20.9.31.235:34063] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afupf_0atTQld9Y2ht_KeAAAANg"]
[Thu May 07 04:50:08.694429 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:41816] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afupgIPEZE1565sDGnwI4AAAAQU"]
[Thu May 07 04:50:09.449828 2026] [:error] [pid 4539:tid 4554] [client 20.9.31.235:34073] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afupgYPEZE1565sDGnwI5wAAAQ0"]
[Thu May 07 04:50:10.278365 2026] [:error] [pid 29606:tid 29660] [client 20.9.31.235:39709] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afupghR5HjZ1PlSAiKtVZQAAAFM"]
[Thu May 07 04:50:11.500333 2026] [:error] [pid 29606:tid 29652] [client 20.9.31.235:43576] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afupgxR5HjZ1PlSAiKtVaQAAAEs"]
[Thu May 07 04:50:12.075882 2026] [:error] [pid 29606:tid 29646] [client 20.9.31.235:45530] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afuphBR5HjZ1PlSAiKtVagAAAEU"]
[Thu May 07 04:50:14.315145 2026] [:error] [pid 29606:tid 29660] [client 20.9.31.235:39789] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afuphhR5HjZ1PlSAiKtVdgAAAFM"]
[Thu May 07 04:50:18.183608 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:38581] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afupioPEZE1565sDGnwI-gAAAQg"]
[Thu May 07 04:50:21.121829 2026] [:error] [pid 4539:tid 4546] [client 20.9.31.235:43562] [client 20.9.31.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afupjYPEZE1565sDGnwJAQAAAQU"]
[Thu May 07 04:50:27.157878 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:41113] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afupk6bP7TJOAh7WSUNYHgAAAJY"]
[Thu May 07 04:50:28.595191 2026] [:error] [pid 29605:tid 29620] [client 20.9.31.235:45465] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afuplInxrTjETioEY0TU2QAAAAY"]
[Thu May 07 04:50:30.660673 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:41821] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afuplqbP7TJOAh7WSUNYLgAAAJY"]
[Thu May 07 04:50:32.651640 2026] [:error] [pid 4539:tid 4557] [client 20.9.31.235:42454] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afupmIPEZE1565sDGnwJIQAAARA"]
[Thu May 07 04:50:34.843598 2026] [:error] [pid 4539:tid 4554] [client 20.9.31.235:34100] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afupmoPEZE1565sDGnwJKQAAAQ0"]
[Thu May 07 04:50:42.588539 2026] [:error] [pid 29710:tid 29732] [client 20.9.31.235:41137] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afupov0atTQld9Y2ht_KrgAAANQ"]
[Thu May 07 04:50:48.289805 2026] [:error] [pid 29605:tid 29637] [client 20.9.31.235:41853] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afupqInxrTjETioEY0TU-QAAABc"]
[Thu May 07 04:50:50.447378 2026] [:error] [pid 29607:tid 29692] [client 20.9.31.235:41099] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Thu May 07 04:50:50.660507 2026] [:error] [pid 29607:tid 29677] [client 20.9.31.235:41099] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Thu May 07 04:50:50.958065 2026] [:error] [pid 29607:tid 29686] [client 20.9.31.235:41099] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-widgets.php
[Thu May 07 04:50:51.336446 2026] [:error] [pid 29607:tid 29691] [client 20.9.31.235:41099] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu May 07 04:50:51.807378 2026] [:error] [pid 29607:tid 29679] [client 20.9.31.235:41099] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Thu May 07 04:50:52.576804 2026] [:error] [pid 29607:tid 29669] [client 20.9.31.235:41099] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu May 07 04:50:52.763305 2026] [:error] [pid 29607:tid 29674] [client 20.9.31.235:41099] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "afuprKbP7TJOAh7WSUNYagAAAIY"]
[Thu May 07 04:50:53.351246 2026] [:error] [pid 29607:tid 29689] [client 20.9.31.235:41105] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "afuprabP7TJOAh7WSUNYbgAAAJU"]
[Thu May 07 04:50:53.853477 2026] [:error] [pid 29605:tid 29618] [client 20.9.31.235:34095] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "afuprYnxrTjETioEY0TVCgAAAAQ"]
[Thu May 07 04:50:54.622250 2026] [:error] [pid 29606:tid 29652] [client 20.9.31.235:41795] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "afuprhR5HjZ1PlSAiKtV2gAAAEs"]
[Thu May 07 04:50:55.893737 2026] [:error] [pid 29607:tid 29674] [client 20.9.31.235:29291] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afupr6bP7TJOAh7WSUNYegAAAIY"]
[Thu May 07 04:50:56.884129 2026] [:error] [pid 29607:tid 29673] [client 20.9.31.235:34099] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afupsKbP7TJOAh7WSUNYgQAAAIU"]
[Thu May 07 04:50:57.508480 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:41839] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afupsYnxrTjETioEY0TVEAAAAAA"]
[Thu May 07 04:50:58.400440 2026] [:error] [pid 29710:tid 29720] [client 20.9.31.235:39726] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afupsv0atTQld9Y2ht_KtwAAAMg"]
[Thu May 07 04:50:59.631119 2026] [:error] [pid 29606:tid 29647] [client 20.9.31.235:43529] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afupsxR5HjZ1PlSAiKtV6QAAAEY"]
[Thu May 07 04:51:00.143016 2026] [:error] [pid 4539:tid 4552] [client 20.9.31.235:42470] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afuptIPEZE1565sDGnwJawAAAQs"]
[Thu May 07 04:51:00.937098 2026] [:error] [pid 29605:tid 29619] [client 20.9.31.235:41817] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afuptInxrTjETioEY0TVFAAAAAU"]
[Thu May 07 04:51:01.970822 2026] [:error] [pid 29606:tid 29652] [client 20.9.31.235:41805] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afuptRR5HjZ1PlSAiKtV7QAAAEs"]
[Thu May 07 04:51:02.794912 2026] [:error] [pid 4539:tid 4544] [client 20.9.31.235:38530] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afuptoPEZE1565sDGnwJdQAAAQM"]
[Thu May 07 04:51:03.714395 2026] [:error] [pid 29607:tid 29690] [client 20.9.31.235:43536] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afupt6bP7TJOAh7WSUNYhQAAAJY"]
[Thu May 07 04:51:14.447604 2026] [:error] [pid 4539:tid 4549] [client 20.9.31.235:43553] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afupwoPEZE1565sDGnwJrwAAAQg"]
[Thu May 07 04:51:15.662092 2026] [:error] [pid 4539:tid 4563] [client 20.9.31.235:42456] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "afupw4PEZE1565sDGnwJtgAAARY"]
[Thu May 07 04:51:18.313247 2026] [:error] [pid 29606:tid 29660] [client 20.9.31.235:34096] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afupxhR5HjZ1PlSAiKtWEgAAAFM"]
[Thu May 07 04:51:22.015900 2026] [:error] [pid 29606:tid 29656] [client 20.9.31.235:43545] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afupyhR5HjZ1PlSAiKtWIQAAAE8"]
[Thu May 07 04:51:22.877362 2026] [:error] [pid 29605:tid 29620] [client 20.9.31.235:29307] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afupyonxrTjETioEY0TVNgAAAAY"]
[Thu May 07 04:51:23.705721 2026] [:error] [pid 29605:tid 29633] [client 20.9.31.235:39760] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afupy4nxrTjETioEY0TVPQAAABM"]
[Thu May 07 04:51:24.256684 2026] [:error] [pid 4539:tid 4545] [client 20.9.31.235:41121] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afupzIPEZE1565sDGnwJyQAAAQQ"]
[Thu May 07 04:51:24.779738 2026] [:error] [pid 4539:tid 4550] [client 20.9.31.235:43579] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afupzIPEZE1565sDGnwJygAAAQk"]
[Thu May 07 04:51:25.206373 2026] [:error] [pid 4539:tid 4564] [client 20.9.31.235:43563] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afupzYPEZE1565sDGnwJzQAAARc"]
[Thu May 07 04:51:26.040984 2026] [:error] [pid 4539:tid 4542] [client 20.9.31.235:42396] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afupzoPEZE1565sDGnwJzwAAAQE"]
[Thu May 07 04:51:26.567778 2026] [:error] [pid 29710:tid 29730] [client 20.9.31.235:42485] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "afupzv0atTQld9Y2ht_LBgAAANI"]
[Thu May 07 04:51:28.057765 2026] [:error] [pid 29606:tid 29661] [client 20.9.31.235:34050] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "afup0BR5HjZ1PlSAiKtWLgAAAFQ"]
[Thu May 07 04:51:28.972284 2026] [:error] [pid 29605:tid 29614] [client 20.9.31.235:43581] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "afup0InxrTjETioEY0TVVAAAAAA"]
[Thu May 07 04:51:29.651759 2026] [:error] [pid 4539:tid 4559] [client 20.9.31.235:34049] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mws.php"] [unique_id "afup0YPEZE1565sDGnwJ2QAAARI"]
[Thu May 07 04:51:30.533579 2026] [:error] [pid 29710:tid 29714] [client 20.9.31.235:42390] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "afup0v0atTQld9Y2ht_LEAAAAMI"]
[Thu May 07 04:51:31.092387 2026] [:error] [pid 29710:tid 29727] [client 20.9.31.235:42494] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "afup0_0atTQld9Y2ht_LEwAAAM8"]
[Thu May 07 04:51:33.896603 2026] [:error] [pid 4539:tid 4542] [client 20.9.31.235:39730] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "afup1YPEZE1565sDGnwJ5gAAAQE"]
[Thu May 07 04:51:35.398551 2026] [:error] [pid 29606:tid 29659] [client 20.9.31.235:42458] [client 20.9.31.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "afup1xR5HjZ1PlSAiKtWNgAAAFI"]
[Thu May 07 05:57:08.636349 2026] [:error] [pid 29607:tid 29687] [client 173.239.214.186:59425] [client 173.239.214.186] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dbservices.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afu5NKbP7TJOAh7WSUNtPQAAAJM"]
[Thu May 07 07:33:00.344084 2026] [:error] [pid 29607:tid 29674] [client 49.51.132.100:50918] [client 49.51.132.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afvPrKbP7TJOAh7WSUONnAAAAIY"]
[Thu May 07 07:56:38.309369 2026] [:error] [pid 29710:tid 29736] [client 20.43.20.252:11147] File does not exist: /usr/local/apache/htdocs/suspended-page/pwn.php
[Thu May 07 07:56:38.519047 2026] [:error] [pid 29710:tid 29718] [client 20.43.20.252:11147] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu May 07 07:56:38.728290 2026] [:error] [pid 29710:tid 29716] [client 20.43.20.252:11147] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Thu May 07 07:56:38.939070 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:11147] File does not exist: /usr/local/apache/htdocs/suspended-page/.info.php
[Thu May 07 07:56:39.147297 2026] [:error] [pid 29710:tid 29723] [client 20.43.20.252:11147] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Thu May 07 07:56:39.356984 2026] [:error] [pid 29710:tid 29720] [client 20.43.20.252:11147] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "afvVN_0atTQld9Y2ht8VPQAAAMg"]
[Thu May 07 07:56:40.191549 2026] [:error] [pid 29606:tid 29660] [client 20.43.20.252:11227] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/120f9.php"] [unique_id "afvVOBR5HjZ1PlSAiKuHeAAAAFM"]
[Thu May 07 07:56:42.196619 2026] [:error] [pid 4539:tid 4543] [client 20.43.20.252:11240] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/sitemaps/admin.php"] [unique_id "afvVOoPEZE1565sDGnx31wAAAQI"]
[Thu May 07 07:56:42.615897 2026] [:error] [pid 29607:tid 29682] [client 20.43.20.252:11225] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afvVOqbP7TJOAh7WSUOW1QAAAI4"]
[Thu May 07 07:56:43.040997 2026] [:error] [pid 29606:tid 29658] [client 20.43.20.252:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu May 07 07:56:43.461378 2026] [:error] [pid 29606:tid 29655] [client 20.43.20.252:11241] File does not exist: /usr/local/apache/htdocs/suspended-page/nij.php
[Thu May 07 07:56:43.668059 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:11241] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "afvVOxR5HjZ1PlSAiKuHggAAAEE"]
[Thu May 07 07:56:44.086423 2026] [:error] [pid 29607:tid 29673] [client 20.43.20.252:11152] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "afvVPKbP7TJOAh7WSUOW2gAAAIU"]
[Thu May 07 07:56:44.505451 2026] [:error] [pid 29710:tid 29719] [client 20.43.20.252:11205] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "afvVPP0atTQld9Y2ht8VQAAAAMc"]
[Thu May 07 07:56:44.931066 2026] [:error] [pid 29605:tid 29614] [client 20.43.20.252:11250] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/to.php"] [unique_id "afvVPInxrTjETioEY0QBDgAAAAA"]
[Thu May 07 07:56:45.358003 2026] [:error] [pid 29605:tid 29619] [client 20.43.20.252:11156] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvVPYnxrTjETioEY0QBEQAAAAU"]
[Thu May 07 07:56:45.785567 2026] [:error] [pid 29710:tid 29733] [client 20.43.20.252:11141] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvVPf0atTQld9Y2ht8VQgAAANU"]
[Thu May 07 07:56:46.197772 2026] [:error] [pid 29606:tid 29656] [client 20.43.20.252:11258] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvVPhR5HjZ1PlSAiKuHhgAAAE8"]
[Thu May 07 07:56:46.608606 2026] [:error] [pid 29605:tid 29633] [client 20.43.20.252:11136] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "afvVPonxrTjETioEY0QBGAAAABM"]
[Thu May 07 07:56:47.041401 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:11094] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afvVP4PEZE1565sDGnx32AAAAQY"]
[Thu May 07 07:56:47.460610 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:11239] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afvVP4PEZE1565sDGnx32QAAAQM"]
[Thu May 07 07:56:47.890905 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:11243] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afvVP4PEZE1565sDGnx32wAAARQ"]
[Thu May 07 07:56:48.314695 2026] [:error] [pid 29605:tid 29637] [client 20.43.20.252:11221] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "afvVQInxrTjETioEY0QBHAAAABc"]
[Thu May 07 07:56:48.730798 2026] [:error] [pid 29710:tid 29712] [client 20.43.20.252:11183] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afvVQP0atTQld9Y2ht8VQwAAAMA"]
[Thu May 07 07:56:49.151360 2026] [:error] [pid 29710:tid 29728] [client 20.43.20.252:11218] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afvVQf0atTQld9Y2ht8VRAAAANA"]
[Thu May 07 07:56:49.564633 2026] [:error] [pid 29710:tid 29717] [client 20.43.20.252:11213] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afvVQf0atTQld9Y2ht8VRQAAAMU"]
[Thu May 07 07:56:50.000669 2026] [:error] [pid 29710:tid 29726] [client 20.43.20.252:11228] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "afvVQf0atTQld9Y2ht8VRwAAAM4"]
[Thu May 07 07:56:50.435952 2026] [:error] [pid 29710:tid 29715] [client 20.43.20.252:11164] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afvVQv0atTQld9Y2ht8VSQAAAMM"]
[Thu May 07 07:56:50.854175 2026] [:error] [pid 29710:tid 29718] [client 20.43.20.252:11252] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afvVQv0atTQld9Y2ht8VSgAAAMY"]
[Thu May 07 07:56:51.264612 2026] [:error] [pid 29607:tid 29668] [client 20.43.20.252:11234] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afvVQ6bP7TJOAh7WSUOW3QAAAIA"]
[Thu May 07 07:56:51.679577 2026] [:error] [pid 29710:tid 29731] [client 20.43.20.252:11202] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "afvVQ_0atTQld9Y2ht8VSwAAANM"]
[Thu May 07 07:56:52.094128 2026] [:error] [pid 29607:tid 29672] [client 20.43.20.252:11231] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xstelth.php"] [unique_id "afvVRKbP7TJOAh7WSUOW4AAAAIQ"]
[Thu May 07 07:56:52.515465 2026] [:error] [pid 29607:tid 29671] [client 20.43.20.252:11222] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xstelth.php"] [unique_id "afvVRKbP7TJOAh7WSUOW4gAAAIM"]
[Thu May 07 07:56:52.954885 2026] [:error] [pid 29607:tid 29686] [client 20.43.20.252:11246] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xstelth.php"] [unique_id "afvVRKbP7TJOAh7WSUOW4wAAAJI"]
[Thu May 07 07:56:53.372969 2026] [:error] [pid 29607:tid 29684] [client 20.43.20.252:11245] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xstelth.php"] [unique_id "afvVRabP7TJOAh7WSUOW5AAAAJA"]
[Thu May 07 07:56:53.790893 2026] [:error] [pid 29605:tid 29626] [client 20.43.20.252:11259] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chslgui.php"] [unique_id "afvVRYnxrTjETioEY0QBHwAAAAw"]
[Thu May 07 07:56:54.220217 2026] [:error] [pid 29605:tid 29630] [client 20.43.20.252:11244] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chslgui.php"] [unique_id "afvVRonxrTjETioEY0QBIAAAABA"]
[Thu May 07 07:56:54.648315 2026] [:error] [pid 29710:tid 29720] [client 20.43.20.252:11204] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chslgui.php"] [unique_id "afvVRv0atTQld9Y2ht8VTgAAAMg"]
[Thu May 07 07:56:55.063569 2026] [:error] [pid 29607:tid 29675] [client 20.43.20.252:11249] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chslgui.php"] [unique_id "afvVR6bP7TJOAh7WSUOW6AAAAIc"]
[Thu May 07 07:56:55.476472 2026] [:error] [pid 29605:tid 29635] [client 20.43.20.252:11215] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/499.php"] [unique_id "afvVR4nxrTjETioEY0QBIgAAABU"]
[Thu May 07 07:56:55.891121 2026] [:error] [pid 29607:tid 29689] [client 20.43.20.252:11184] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/499.php"] [unique_id "afvVR6bP7TJOAh7WSUOW6QAAAJU"]
[Thu May 07 07:56:56.307905 2026] [:error] [pid 29607:tid 29676] [client 20.43.20.252:11260] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/499.php"] [unique_id "afvVSKbP7TJOAh7WSUOW7AAAAIg"]
[Thu May 07 07:56:56.725638 2026] [:error] [pid 29607:tid 29670] [client 20.43.20.252:11251] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/499.php"] [unique_id "afvVSKbP7TJOAh7WSUOW7QAAAII"]
[Thu May 07 07:56:57.174585 2026] [:error] [pid 29606:tid 29655] [client 20.43.20.252:11223] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afvVSRR5HjZ1PlSAiKuHigAAAE4"]
[Thu May 07 07:56:57.590006 2026] [:error] [pid 29607:tid 29690] [client 20.43.20.252:11072] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afvVSabP7TJOAh7WSUOW8AAAAJY"]
[Thu May 07 07:56:58.003350 2026] [:error] [pid 29607:tid 29668] [client 20.43.20.252:11229] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afvVSqbP7TJOAh7WSUOW8gAAAIA"]
[Thu May 07 07:56:58.431403 2026] [:error] [pid 29605:tid 29614] [client 20.43.20.252:11242] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "afvVSonxrTjETioEY0QBJAAAAAA"]
[Thu May 07 07:56:58.847051 2026] [:error] [pid 29605:tid 29634] [client 20.43.20.252:11160] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gay.php"] [unique_id "afvVSonxrTjETioEY0QBJQAAABQ"]
[Thu May 07 07:56:59.265075 2026] [:error] [pid 29605:tid 29615] [client 20.43.20.252:11253] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gay.php"] [unique_id "afvVS4nxrTjETioEY0QBJgAAAAE"]
[Thu May 07 07:56:59.679225 2026] [:error] [pid 4539:tid 4548] [client 20.43.20.252:11247] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gay.php"] [unique_id "afvVS4PEZE1565sDGnx33gAAAQc"]
[Thu May 07 07:57:00.089821 2026] [:error] [pid 29606:tid 29644] [client 20.43.20.252:11182] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gay.php"] [unique_id "afvVTBR5HjZ1PlSAiKuHjAAAAEM"]
[Thu May 07 07:57:00.504371 2026] [:error] [pid 29605:tid 29628] [client 20.43.20.252:11158] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afvVTInxrTjETioEY0QBJwAAAA4"]
[Thu May 07 07:57:00.935455 2026] [:error] [pid 29607:tid 29682] [client 20.43.20.252:11138] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afvVTKbP7TJOAh7WSUOW9gAAAI4"]
[Thu May 07 07:57:01.348555 2026] [:error] [pid 29710:tid 29719] [client 20.43.20.252:11144] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afvVTf0atTQld9Y2ht8VUwAAAMc"]
[Thu May 07 07:57:01.766571 2026] [:error] [pid 29607:tid 29689] [client 20.43.20.252:11230] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "afvVTabP7TJOAh7WSUOW-QAAAJU"]
[Thu May 07 07:57:02.179804 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:11226] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/white.php"] [unique_id "afvVToPEZE1565sDGnx34AAAARU"]
[Thu May 07 07:57:02.592575 2026] [:error] [pid 4539:tid 4554] [client 20.43.20.252:11257] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/white.php"] [unique_id "afvVToPEZE1565sDGnx34gAAAQ0"]
[Thu May 07 07:57:03.006584 2026] [:error] [pid 29605:tid 29632] [client 20.43.20.252:11236] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/white.php"] [unique_id "afvVT4nxrTjETioEY0QBKgAAABI"]
[Thu May 07 07:57:03.427831 2026] [:error] [pid 29710:tid 29728] [client 20.43.20.252:11254] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/white.php"] [unique_id "afvVT_0atTQld9Y2ht8VVwAAANA"]
[Thu May 07 07:57:03.857226 2026] [:error] [pid 29710:tid 29717] [client 20.43.20.252:11073] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdroot.php"] [unique_id "afvVT_0atTQld9Y2ht8VWAAAAMU"]
[Thu May 07 07:57:04.300458 2026] [:error] [pid 29710:tid 29734] [client 20.43.20.252:11148] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdroot.php"] [unique_id "afvVUP0atTQld9Y2ht8VWQAAANY"]
[Thu May 07 07:57:04.725803 2026] [:error] [pid 29606:tid 29643] [client 20.43.20.252:11081] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdroot.php"] [unique_id "afvVUBR5HjZ1PlSAiKuHjwAAAEI"]
[Thu May 07 07:57:05.153294 2026] [:error] [pid 29710:tid 29726] [client 20.43.20.252:11170] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bdroot.php"] [unique_id "afvVUf0atTQld9Y2ht8VWgAAAM4"]
[Thu May 07 07:57:05.567718 2026] [:error] [pid 4539:tid 4545] [client 20.43.20.252:11140] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afvVUYPEZE1565sDGnx35wAAAQQ"]
[Thu May 07 07:57:05.990127 2026] [:error] [pid 29606:tid 29645] [client 20.43.20.252:11212] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afvVURR5HjZ1PlSAiKuHkQAAAEQ"]
[Thu May 07 07:57:06.408225 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:11248] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afvVUoPEZE1565sDGnx36wAAARE"]
[Thu May 07 07:57:06.821282 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:11080] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/olik.php"] [unique_id "afvVUoPEZE1565sDGnx37QAAAQY"]
[Thu May 07 07:57:07.237338 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:11190] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afvVU4PEZE1565sDGnx38AAAAQU"]
[Thu May 07 07:57:07.667855 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:11262] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afvVU4PEZE1565sDGnx38gAAAQs"]
[Thu May 07 07:57:08.080989 2026] [:error] [pid 4539:tid 4548] [client 20.43.20.252:11217] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afvVVIPEZE1565sDGnx39AAAAQc"]
[Thu May 07 07:57:08.501039 2026] [:error] [pid 4539:tid 4541] [client 20.43.20.252:11146] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/h.php"] [unique_id "afvVVIPEZE1565sDGnx39wAAAQA"]
[Thu May 07 07:57:08.918658 2026] [:error] [pid 4539:tid 4559] [client 20.43.20.252:11211] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afvVVIPEZE1565sDGnx3-QAAARI"]
[Thu May 07 07:57:09.329838 2026] [:error] [pid 29605:tid 29623] [client 20.43.20.252:11145] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afvVVYnxrTjETioEY0QBLQAAAAk"]
[Thu May 07 07:57:09.742429 2026] [:error] [pid 29605:tid 29621] [client 20.43.20.252:11167] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afvVVYnxrTjETioEY0QBLwAAAAc"]
[Thu May 07 07:57:10.163527 2026] [:error] [pid 29605:tid 29616] [client 20.43.20.252:11088] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cong.php"] [unique_id "afvVVonxrTjETioEY0QBMgAAAAI"]
[Thu May 07 07:57:10.583821 2026] [:error] [pid 29710:tid 29715] [client 20.43.20.252:11235] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "afvVVv0atTQld9Y2ht8VXAAAAMM"]
[Thu May 07 07:57:11.017725 2026] [:error] [pid 29710:tid 29731] [client 20.43.20.252:11237] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "afvVV_0atTQld9Y2ht8VXgAAANM"]
[Thu May 07 07:57:11.436439 2026] [:error] [pid 29710:tid 29716] [client 20.43.20.252:11154] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "afvVV_0atTQld9Y2ht8VXwAAAMQ"]
[Thu May 07 07:57:11.854882 2026] [:error] [pid 29710:tid 29720] [client 20.43.20.252:11161] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/about.php"] [unique_id "afvVV_0atTQld9Y2ht8VYgAAAMg"]
[Thu May 07 07:57:12.270685 2026] [:error] [pid 29710:tid 29729] [client 20.43.20.252:11169] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afvVWP0atTQld9Y2ht8VYwAAANE"]
[Thu May 07 07:57:12.689569 2026] [:error] [pid 29710:tid 29721] [client 20.43.20.252:11220] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxl.php"] [unique_id "afvVWP0atTQld9Y2ht8VZgAAAMk"]
[Thu May 07 07:57:13.122666 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:11255] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxl.php"] [unique_id "afvVWYPEZE1565sDGnx3-wAAAQw"]
[Thu May 07 07:57:13.543287 2026] [:error] [pid 29710:tid 29712] [client 20.43.20.252:11168] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxl.php"] [unique_id "afvVWf0atTQld9Y2ht8VaQAAAMA"]
[Thu May 07 07:57:14.003427 2026] [:error] [pid 29605:tid 29619] [client 20.43.20.252:11099] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxml.php"] [unique_id "afvVWonxrTjETioEY0QBOAAAAAU"]
[Thu May 07 07:57:14.437395 2026] [:error] [pid 29605:tid 29628] [client 20.43.20.252:11173] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxml.php"] [unique_id "afvVWonxrTjETioEY0QBOQAAAA4"]
[Thu May 07 07:57:14.855844 2026] [:error] [pid 29605:tid 29620] [client 20.43.20.252:11139] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxml.php"] [unique_id "afvVWonxrTjETioEY0QBOwAAAAY"]
[Thu May 07 07:57:15.271936 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:11207] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpxml.php"] [unique_id "afvVW_0atTQld9Y2ht8VbgAAANQ"]
[Thu May 07 07:57:15.684071 2026] [:error] [pid 4539:tid 4551] [client 20.43.20.252:11224] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afvVW4PEZE1565sDGnx3_QAAAQo"]
[Thu May 07 07:57:16.095678 2026] [:error] [pid 29710:tid 29736] [client 20.43.20.252:11078] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afvVXP0atTQld9Y2ht8VbwAAANg"]
[Thu May 07 07:57:16.508938 2026] [:error] [pid 29607:tid 29687] [client 20.43.20.252:11173] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afvVXKbP7TJOAh7WSUOW_gAAAJM"]
[Thu May 07 07:57:16.925671 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:11175] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "afvVXIPEZE1565sDGnx4AQAAAQE"]
[Thu May 07 07:57:17.341939 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:11171] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afvVXYPEZE1565sDGnx4BAAAAQs"]
[Thu May 07 07:57:17.769992 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:11153] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afvVXYPEZE1565sDGnx4BwAAARc"]
[Thu May 07 07:57:18.193356 2026] [:error] [pid 29710:tid 29715] [client 20.43.20.252:11149] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afvVXv0atTQld9Y2ht8VcAAAAMM"]
[Thu May 07 07:57:18.619067 2026] [:error] [pid 4539:tid 4554] [client 20.43.20.252:11142] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/spawns.php"] [unique_id "afvVXoPEZE1565sDGnx4CgAAAQ0"]
[Thu May 07 07:57:19.037916 2026] [:error] [pid 29710:tid 29731] [client 20.43.20.252:11019] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afvVX_0atTQld9Y2ht8VcQAAANM"]
[Thu May 07 07:57:19.460448 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:11150] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afvVX6bP7TJOAh7WSUOXAQAAAJg"]
[Thu May 07 07:57:19.886244 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:11084] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afvVXxR5HjZ1PlSAiKuHmwAAAEE"]
[Thu May 07 07:57:20.309039 2026] [:error] [pid 29606:tid 29646] [client 20.43.20.252:11263] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t3s.php"] [unique_id "afvVYBR5HjZ1PlSAiKuHnQAAAEU"]
[Thu May 07 07:57:20.727777 2026] [:error] [pid 29607:tid 29686] [client 20.43.20.252:11216] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afvVYKbP7TJOAh7WSUOXBAAAAJI"]
[Thu May 07 07:57:21.148451 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:11104] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afvVYYPEZE1565sDGnx4EQAAAQs"]
[Thu May 07 07:57:21.562451 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:11233] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afvVYYPEZE1565sDGnx4EgAAARc"]
[Thu May 07 07:57:21.977694 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:11157] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "afvVYYPEZE1565sDGnx4EwAAARU"]
[Thu May 07 07:57:22.410807 2026] [:error] [pid 29606:tid 29644] [client 20.43.20.252:11137] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afvVYhR5HjZ1PlSAiKuHngAAAEM"]
[Thu May 07 07:57:22.830169 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:11129] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afvVYoPEZE1565sDGnx4FQAAAQg"]
[Thu May 07 07:57:23.259372 2026] [:error] [pid 29606:tid 29657] [client 20.43.20.252:11176] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afvVYxR5HjZ1PlSAiKuHoAAAAFA"]
[Thu May 07 07:57:23.681901 2026] [:error] [pid 4539:tid 4565] [client 20.43.20.252:11232] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x/"] [unique_id "afvVY4PEZE1565sDGnx4FwAAARg"]
[Thu May 07 07:57:24.131652 2026] [:error] [pid 29710:tid 29725] [client 20.43.20.252:11151] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afvVZP0atTQld9Y2ht8VdAAAAM0"]
[Thu May 07 07:57:24.571084 2026] [:error] [pid 29710:tid 29730] [client 20.43.20.252:11101] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afvVZP0atTQld9Y2ht8VdgAAANI"]
[Thu May 07 07:57:24.984339 2026] [:error] [pid 29605:tid 29621] [client 20.43.20.252:11195] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afvVZInxrTjETioEY0QBPwAAAAc"]
[Thu May 07 07:57:25.396076 2026] [:error] [pid 4539:tid 4543] [client 20.43.20.252:11185] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "afvVZYPEZE1565sDGnx4GgAAAQI"]
[Thu May 07 07:57:25.825668 2026] [:error] [pid 4539:tid 4551] [client 20.43.20.252:11256] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afvVZYPEZE1565sDGnx4HQAAAQo"]
[Thu May 07 07:57:26.253902 2026] [:error] [pid 4539:tid 4555] [client 20.43.20.252:11188] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afvVZoPEZE1565sDGnx4HgAAAQ4"]
[Thu May 07 07:57:26.665913 2026] [:error] [pid 29710:tid 29719] [client 20.43.20.252:11206] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afvVZv0atTQld9Y2ht8VeQAAAMc"]
[Thu May 07 07:57:27.078083 2026] [:error] [pid 29710:tid 29728] [client 20.43.20.252:11178] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/configuration.php"] [unique_id "afvVZ_0atTQld9Y2ht8VfAAAANA"]
[Thu May 07 07:57:27.517444 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:11165] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afvVZ4PEZE1565sDGnx4HwAAAQY"]
[Thu May 07 07:57:27.932785 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:11093] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afvVZ4PEZE1565sDGnx4IgAAAQE"]
[Thu May 07 07:57:28.369409 2026] [:error] [pid 29606:tid 29645] [client 20.43.20.252:11196] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afvVaBR5HjZ1PlSAiKuHogAAAEQ"]
[Thu May 07 07:57:28.782756 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:11143] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "afvVaIPEZE1565sDGnx4JwAAAQg"]
[Thu May 07 07:57:29.196177 2026] [:error] [pid 29605:tid 29616] [client 20.43.20.252:11079] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afvVaYnxrTjETioEY0QBQQAAAAI"]
[Thu May 07 07:57:29.611421 2026] [:error] [pid 29607:tid 29683] [client 20.43.20.252:11163] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afvVaabP7TJOAh7WSUOXCQAAAI8"]
[Thu May 07 07:57:30.030217 2026] [:error] [pid 4539:tid 4565] [client 20.43.20.252:11166] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afvVaoPEZE1565sDGnx4KAAAARg"]
[Thu May 07 07:57:30.448747 2026] [:error] [pid 29710:tid 29734] [client 20.43.20.252:11155] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "afvVav0atTQld9Y2ht8VfgAAANY"]
[Thu May 07 07:57:30.863702 2026] [:error] [pid 29606:tid 29652] [client 20.43.20.252:11193] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afvVahR5HjZ1PlSAiKuHpgAAAEs"]
[Thu May 07 07:57:31.291589 2026] [:error] [pid 29607:tid 29691] [client 20.43.20.252:11010] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afvVa6bP7TJOAh7WSUOXCwAAAJc"]
[Thu May 07 07:57:31.714288 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:11090] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afvVa4PEZE1565sDGnx4KwAAARY"]
[Thu May 07 07:57:32.126618 2026] [:error] [pid 29710:tid 29727] [client 20.43.20.252:11261] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "afvVbP0atTQld9Y2ht8VfwAAAM8"]
[Thu May 07 07:57:32.545624 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:11238] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afvVbP0atTQld9Y2ht8VgAAAANQ"]
[Thu May 07 07:57:32.984954 2026] [:error] [pid 29710:tid 29726] [client 20.43.20.252:11106] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afvVbP0atTQld9Y2ht8VgQAAAM4"]
[Thu May 07 07:57:33.396923 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:11076] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afvVbYPEZE1565sDGnx4LwAAAQM"]
[Thu May 07 07:57:33.814194 2026] [:error] [pid 29710:tid 29736] [client 20.43.20.252:11082] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "afvVbf0atTQld9Y2ht8VggAAANg"]
[Thu May 07 07:57:34.245786 2026] [:error] [pid 29710:tid 29731] [client 20.43.20.252:11085] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afvVbv0atTQld9Y2ht8VhAAAANM"]
[Thu May 07 07:57:34.666190 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:11208] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afvVboPEZE1565sDGnx4MQAAARQ"]
[Thu May 07 07:57:35.077871 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:11124] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afvVb4PEZE1565sDGnx4NAAAARU"]
[Thu May 07 07:57:35.495014 2026] [:error] [pid 4539:tid 4550] [client 20.43.20.252:11198] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "afvVb4PEZE1565sDGnx4NwAAAQk"]
[Thu May 07 07:57:35.911688 2026] [:error] [pid 29605:tid 29635] [client 20.43.20.252:11122] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afvVb4nxrTjETioEY0QBRAAAABU"]
[Thu May 07 07:57:36.332834 2026] [:error] [pid 29605:tid 29624] [client 20.43.20.252:11192] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afvVcInxrTjETioEY0QBRQAAAAo"]
[Thu May 07 07:57:36.762030 2026] [:error] [pid 29606:tid 29658] [client 20.43.20.252:11012] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afvVcBR5HjZ1PlSAiKuHrAAAAFE"]
[Thu May 07 07:57:37.200159 2026] [:error] [pid 29710:tid 29724] [client 20.43.20.252:11049] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "afvVcf0atTQld9Y2ht8VhgAAAMw"]
[Thu May 07 07:57:37.619169 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:11199] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afvVcf0atTQld9Y2ht8VhwAAAMo"]
[Thu May 07 07:57:38.039106 2026] [:error] [pid 4539:tid 4545] [client 20.43.20.252:11125] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afvVcoPEZE1565sDGnx4OgAAAQQ"]
[Thu May 07 07:57:38.474981 2026] [:error] [pid 29710:tid 29720] [client 20.43.20.252:11113] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afvVcv0atTQld9Y2ht8ViQAAAMg"]
[Thu May 07 07:57:38.890577 2026] [:error] [pid 29710:tid 29713] [client 20.43.20.252:11133] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "afvVcv0atTQld9Y2ht8ViwAAAME"]
[Thu May 07 07:57:39.328511 2026] [:error] [pid 29710:tid 29714] [client 20.43.20.252:11177] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afvVc_0atTQld9Y2ht8VjQAAAMI"]
[Thu May 07 07:57:39.743149 2026] [:error] [pid 29710:tid 29719] [client 20.43.20.252:11036] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afvVc_0atTQld9Y2ht8VkAAAAMc"]
[Thu May 07 07:57:40.164254 2026] [:error] [pid 29606:tid 29654] [client 20.43.20.252:11162] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afvVdBR5HjZ1PlSAiKuHrwAAAE0"]
[Thu May 07 07:57:40.575722 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:11102] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "afvVdIPEZE1565sDGnx4PAAAARE"]
[Thu May 07 07:57:41.005674 2026] [:error] [pid 4539:tid 4551] [client 20.43.20.252:11095] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afvVdYPEZE1565sDGnx4PQAAAQo"]
[Thu May 07 07:57:41.453651 2026] [:error] [pid 4539:tid 4555] [client 20.43.20.252:11186] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afvVdYPEZE1565sDGnx4PgAAAQ4"]
[Thu May 07 07:57:41.877454 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:11009] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afvVdf0atTQld9Y2ht8VlQAAANQ"]
[Thu May 07 07:57:42.302727 2026] [:error] [pid 29607:tid 29680] [client 20.43.20.252:11132] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "afvVdqbP7TJOAh7WSUOXFAAAAIw"]
[Thu May 07 07:57:42.740197 2026] [:error] [pid 29606:tid 29644] [client 20.43.20.252:11121] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "afvVdhR5HjZ1PlSAiKuHsgAAAEM"]
[Thu May 07 07:57:43.158833 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:11112] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Thu May 07 07:57:43.372708 2026] [:error] [pid 29607:tid 29669] [client 20.43.20.252:11112] File does not exist: /usr/local/apache/htdocs/suspended-page/locales.php
[Thu May 07 07:57:43.584133 2026] [:error] [pid 29607:tid 29668] [client 20.43.20.252:11112] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu May 07 07:57:43.796935 2026] [:error] [pid 29607:tid 29686] [client 20.43.20.252:11112] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Thu May 07 07:57:44.870073 2026] [:error] [pid 29607:tid 29689] [client 20.43.20.252:11112] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Thu May 07 07:57:45.080499 2026] [:error] [pid 29607:tid 29671] [client 20.43.20.252:11112] File does not exist: /usr/local/apache/htdocs/suspended-page/no20.php
[Thu May 07 07:57:45.292321 2026] [:error] [pid 29607:tid 29683] [client 20.43.20.252:11112] File does not exist: /usr/local/apache/htdocs/suspended-page/yasnu.php
[Thu May 07 07:57:45.500268 2026] [:error] [pid 29607:tid 29675] [client 20.43.20.252:11112] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "afvVeabP7TJOAh7WSUOXIgAAAIc"]
[Thu May 07 07:57:45.918688 2026] [:error] [pid 29606:tid 29652] [client 20.43.20.252:11087] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "afvVeRR5HjZ1PlSAiKuHugAAAEs"]
[Thu May 07 07:57:46.334884 2026] [:error] [pid 29607:tid 29691] [client 20.43.20.252:11086] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "afvVeqbP7TJOAh7WSUOXIwAAAJc"]
[Thu May 07 07:57:46.750322 2026] [:error] [pid 29607:tid 29676] [client 20.43.20.252:11209] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "afvVeqbP7TJOAh7WSUOXJAAAAIg"]
[Thu May 07 07:57:47.170345 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:11110] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afvVe4PEZE1565sDGnx4PwAAAQY"]
[Thu May 07 07:57:47.590375 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:11103] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afvVe4PEZE1565sDGnx4QQAAARQ"]
[Thu May 07 07:57:48.016374 2026] [:error] [pid 4539:tid 4541] [client 20.43.20.252:11044] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afvVfIPEZE1565sDGnx4RAAAAQA"]
[Thu May 07 07:57:48.455049 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:11118] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vuln.php"] [unique_id "afvVfIPEZE1565sDGnx4RQAAAQg"]
[Thu May 07 07:57:48.867141 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:11074] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afvVfIPEZE1565sDGnx4RwAAARA"]
[Thu May 07 07:57:49.297213 2026] [:error] [pid 4539:tid 4559] [client 20.43.20.252:11174] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afvVfYPEZE1565sDGnx4SAAAARI"]
[Thu May 07 07:57:49.717106 2026] [:error] [pid 4539:tid 4545] [client 20.43.20.252:11187] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afvVfYPEZE1565sDGnx4SQAAAQQ"]
[Thu May 07 07:57:50.141276 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:11201] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "afvVfoPEZE1565sDGnx4TAAAARY"]
[Thu May 07 07:57:50.555169 2026] [:error] [pid 29607:tid 29668] [client 20.43.20.252:11038] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afvVfqbP7TJOAh7WSUOXKwAAAIA"]
[Thu May 07 07:57:50.968418 2026] [:error] [pid 4539:tid 4555] [client 20.43.20.252:11035] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afvVfoPEZE1565sDGnx4TgAAAQ4"]
[Thu May 07 07:57:51.388364 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:11063] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afvVf4PEZE1565sDGnx4UAAAAQE"]
[Thu May 07 07:57:51.825665 2026] [:error] [pid 29607:tid 29684] [client 20.43.20.252:11027] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afvVf6bP7TJOAh7WSUOXLAAAAJA"]
[Thu May 07 07:57:52.238481 2026] [:error] [pid 29710:tid 29721] [client 20.43.20.252:11092] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afvVgP0atTQld9Y2ht8VnAAAAMk"]
[Thu May 07 07:57:52.659898 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:11128] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afvVgIPEZE1565sDGnx4UwAAAQg"]
[Thu May 07 07:57:53.084315 2026] [:error] [pid 4539:tid 4550] [client 20.43.20.252:11057] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afvVgYPEZE1565sDGnx4VAAAAQk"]
[Thu May 07 07:57:53.497995 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:11123] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afvVgYPEZE1565sDGnx4VgAAARA"]
[Thu May 07 07:57:53.927057 2026] [:error] [pid 29607:tid 29687] [client 20.43.20.252:11197] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afvVgabP7TJOAh7WSUOXLgAAAJM"]
[Thu May 07 07:57:54.358674 2026] [:error] [pid 29607:tid 29683] [client 20.43.20.252:11181] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afvVgqbP7TJOAh7WSUOXLwAAAI8"]
[Thu May 07 07:57:54.774478 2026] [:error] [pid 4539:tid 4559] [client 20.43.20.252:11116] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afvVgoPEZE1565sDGnx4VwAAARI"]
[Thu May 07 07:57:55.196074 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:11107] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class-bda.php"] [unique_id "afvVgxR5HjZ1PlSAiKuHwgAAAEE"]
[Thu May 07 07:57:55.611127 2026] [:error] [pid 29605:tid 29617] [client 20.43.20.252:11219] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afvVg4nxrTjETioEY0QBUQAAAAM"]
[Thu May 07 07:57:56.026011 2026] [:error] [pid 29607:tid 29691] [client 20.43.20.252:11126] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afvVhKbP7TJOAh7WSUOXMgAAAJc"]
[Thu May 07 07:57:56.442148 2026] [:error] [pid 29606:tid 29655] [client 20.43.20.252:11022] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afvVhBR5HjZ1PlSAiKuHwwAAAE4"]
[Thu May 07 07:57:56.866161 2026] [:error] [pid 29605:tid 29631] [client 20.43.20.252:11179] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bhm.php"] [unique_id "afvVhInxrTjETioEY0QBUwAAABE"]
[Thu May 07 07:57:57.285868 2026] [:error] [pid 29710:tid 29735] [client 20.43.20.252:11097] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afvVhf0atTQld9Y2ht8VoQAAANc"]
[Thu May 07 07:57:57.699646 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:11117] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afvVhYPEZE1565sDGnx4WQAAARY"]
[Thu May 07 07:57:58.150628 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:11089] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afvVhoPEZE1565sDGnx4WgAAAQU"]
[Thu May 07 07:57:58.570586 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:10953] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "afvVhoPEZE1565sDGnx4XAAAARM"]
[Thu May 07 07:57:58.995252 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:11083] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "afvVhoPEZE1565sDGnx4XgAAARE"]
[Thu May 07 07:57:59.422789 2026] [:error] [pid 29607:tid 29688] [client 20.43.20.252:11066] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "afvVh6bP7TJOAh7WSUOXNAAAAJQ"]
[Thu May 07 07:57:59.843657 2026] [:error] [pid 4539:tid 4556] [client 20.43.20.252:11172] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "afvVh4PEZE1565sDGnx4YAAAAQ8"]
[Thu May 07 07:58:00.259889 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:11061] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goat.php"] [unique_id "afvViIPEZE1565sDGnx4YwAAAQE"]
[Thu May 07 07:58:00.681117 2026] [:error] [pid 29607:tid 29680] [client 20.43.20.252:11180] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afvViKbP7TJOAh7WSUOXNgAAAIw"]
[Thu May 07 07:58:01.108506 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:10945] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afvViYPEZE1565sDGnx4ZQAAAQs"]
[Thu May 07 07:58:01.527936 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:11028] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afvViYPEZE1565sDGnx4aAAAAQg"]
[Thu May 07 07:58:01.944539 2026] [:error] [pid 29710:tid 29734] [client 20.43.20.252:10946] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-xme.php"] [unique_id "afvVif0atTQld9Y2ht8VpAAAANY"]
[Thu May 07 07:58:02.356146 2026] [:error] [pid 29607:tid 29678] [client 20.43.20.252:11015] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afvViqbP7TJOAh7WSUOXOgAAAIo"]
[Thu May 07 07:58:02.778398 2026] [:error] [pid 29607:tid 29677] [client 20.43.20.252:11060] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afvViqbP7TJOAh7WSUOXOwAAAIk"]
[Thu May 07 07:58:03.195734 2026] [:error] [pid 29607:tid 29687] [client 20.43.20.252:10983] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afvVi6bP7TJOAh7WSUOXPgAAAJM"]
[Thu May 07 07:58:03.620862 2026] [:error] [pid 29606:tid 29657] [client 20.43.20.252:11159] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminer.php"] [unique_id "afvVixR5HjZ1PlSAiKuHyAAAAFA"]
[Thu May 07 07:58:04.038445 2026] [:error] [pid 4539:tid 4559] [client 20.43.20.252:11194] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afvVjIPEZE1565sDGnx4awAAARI"]
[Thu May 07 07:58:04.454270 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:10964] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afvVjIPEZE1565sDGnx4bQAAAQU"]
[Thu May 07 07:58:04.872890 2026] [:error] [pid 4539:tid 4554] [client 20.43.20.252:11120] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afvVjIPEZE1565sDGnx4bwAAAQ0"]
[Thu May 07 07:58:05.290757 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:10977] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ktfow.php"] [unique_id "afvVjYPEZE1565sDGnx4cgAAAQY"]
[Thu May 07 07:58:05.731158 2026] [:error] [pid 29606:tid 29650] [client 20.43.20.252:11064] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afvVjRR5HjZ1PlSAiKuHyQAAAEk"]
[Thu May 07 07:58:06.156729 2026] [:error] [pid 29607:tid 29676] [client 20.43.20.252:11114] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afvVjqbP7TJOAh7WSUOXQwAAAIg"]
[Thu May 07 07:58:06.581836 2026] [:error] [pid 29710:tid 29715] [client 20.43.20.252:11053] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afvVjv0atTQld9Y2ht8VpwAAAMM"]
[Thu May 07 07:58:06.998294 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:11098] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mode.php"] [unique_id "afvVjoPEZE1565sDGnx4dgAAAQs"]
[Thu May 07 07:58:07.422498 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:11068] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afvVj4PEZE1565sDGnx4dwAAARc"]
[Thu May 07 07:58:07.842224 2026] [:error] [pid 29606:tid 29645] [client 20.43.20.252:11020] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afvVjxR5HjZ1PlSAiKuHygAAAEQ"]
[Thu May 07 07:58:08.263181 2026] [:error] [pid 29606:tid 29663] [client 20.43.20.252:11045] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afvVkBR5HjZ1PlSAiKuHzAAAAFY"]
[Thu May 07 07:58:08.683744 2026] [:error] [pid 29606:tid 29652] [client 20.43.20.252:11059] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "afvVkBR5HjZ1PlSAiKuHzgAAAEs"]
[Thu May 07 07:58:09.100161 2026] [:error] [pid 29606:tid 29651] [client 20.43.20.252:11100] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afvVkRR5HjZ1PlSAiKuHzwAAAEo"]
[Thu May 07 07:58:09.534113 2026] [:error] [pid 29605:tid 29637] [client 20.43.20.252:11131] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afvVkYnxrTjETioEY0QBWAAAABc"]
[Thu May 07 07:58:09.948562 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:11013] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afvVkYPEZE1565sDGnx4eQAAAQg"]
[Thu May 07 07:58:10.365348 2026] [:error] [pid 29607:tid 29668] [client 20.43.20.252:11023] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afvVkqbP7TJOAh7WSUOXRwAAAIA"]
[Thu May 07 07:58:10.776749 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:11043] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVkoPEZE1565sDGnx4egAAARA"]
[Thu May 07 07:58:11.195224 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:11032] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVk4PEZE1565sDGnx4ewAAAQM"]
[Thu May 07 07:58:11.620499 2026] [:error] [pid 4539:tid 4543] [client 20.43.20.252:11115] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVk4PEZE1565sDGnx4fQAAAQI"]
[Thu May 07 07:58:12.034185 2026] [:error] [pid 29607:tid 29672] [client 20.43.20.252:11075] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVlKbP7TJOAh7WSUOXTQAAAIQ"]
[Thu May 07 07:58:12.445805 2026] [:error] [pid 29605:tid 29624] [client 20.43.20.252:11224] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afvVlInxrTjETioEY0QBWwAAAAo"]
[Thu May 07 07:58:12.860420 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:10982] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afvVlIPEZE1565sDGnx4gQAAARM"]
[Thu May 07 07:58:13.281998 2026] [:error] [pid 4539:tid 4565] [client 20.43.20.252:11017] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afvVlYPEZE1565sDGnx4hgAAARg"]
[Thu May 07 07:58:13.706164 2026] [:error] [pid 29605:tid 29630] [client 20.43.20.252:11008] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amdin.php"] [unique_id "afvVlYnxrTjETioEY0QBXAAAABA"]
[Thu May 07 07:58:14.144762 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:10956] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afvVloPEZE1565sDGnx4hwAAARQ"]
[Thu May 07 07:58:14.569850 2026] [:error] [pid 29607:tid 29674] [client 20.43.20.252:11200] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afvVlqbP7TJOAh7WSUOXVAAAAIY"]
[Thu May 07 07:58:14.992006 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:11191] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afvVloPEZE1565sDGnx4igAAARc"]
[Thu May 07 07:58:15.418627 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:10926] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/huya.php"] [unique_id "afvVl4PEZE1565sDGnx4jAAAARA"]
[Thu May 07 07:58:15.843169 2026] [:error] [pid 29607:tid 29686] [client 20.43.20.252:10957] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afvVl6bP7TJOAh7WSUOXVQAAAJI"]
[Thu May 07 07:58:16.279631 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:11014] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afvVmIPEZE1565sDGnx4kgAAARM"]
[Thu May 07 07:58:16.738489 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:11203] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afvVmIPEZE1565sDGnx4mQAAAQE"]
[Thu May 07 07:58:17.187171 2026] [:error] [pid 29605:tid 29615] [client 20.43.20.252:10973] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/puc.php"] [unique_id "afvVmYnxrTjETioEY0QBYAAAAAE"]
[Thu May 07 07:58:17.607086 2026] [:error] [pid 29605:tid 29619] [client 20.43.20.252:11041] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afvVmYnxrTjETioEY0QBYQAAAAU"]
[Thu May 07 07:58:18.059845 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:10954] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afvVmoPEZE1565sDGnx4qQAAARE"]
[Thu May 07 07:58:18.608592 2026] [:error] [pid 29710:tid 29734] [client 20.43.20.252:11109] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afvVmv0atTQld9Y2ht8VtAAAANY"]
[Thu May 07 07:58:19.070297 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:10995] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "afvVm_0atTQld9Y2ht8VtgAAANQ"]
[Thu May 07 07:58:19.501232 2026] [:error] [pid 29607:tid 29675] [client 20.43.20.252:10971] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afvVm6bP7TJOAh7WSUOXVgAAAIc"]
[Thu May 07 07:58:19.916771 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:11055] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afvVm4PEZE1565sDGnx4rwAAAQw"]
[Thu May 07 07:58:20.335100 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:10955] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afvVnIPEZE1565sDGnx4sQAAARQ"]
[Thu May 07 07:58:20.755891 2026] [:error] [pid 4539:tid 4548] [client 20.43.20.252:11067] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ewp.php"] [unique_id "afvVnIPEZE1565sDGnx4swAAAQc"]
[Thu May 07 07:58:21.192539 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:10912] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVnYPEZE1565sDGnx4tgAAAQg"]
[Thu May 07 07:58:21.615760 2026] [:error] [pid 4539:tid 4543] [client 20.43.20.252:10966] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVnYPEZE1565sDGnx4uQAAAQI"]
[Thu May 07 07:58:22.060055 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:11026] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVnoPEZE1565sDGnx4uwAAARY"]
[Thu May 07 07:58:22.484330 2026] [:error] [pid 29605:tid 29636] [client 20.43.20.252:10899] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dx.php"] [unique_id "afvVnonxrTjETioEY0QBagAAABY"]
[Thu May 07 07:58:22.900891 2026] [:error] [pid 29710:tid 29720] [client 20.43.20.252:11018] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afvVnv0atTQld9Y2ht8VuwAAAMg"]
[Thu May 07 07:58:23.329296 2026] [:error] [pid 29607:tid 29669] [client 20.43.20.252:10952] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afvVn6bP7TJOAh7WSUOXWwAAAIE"]
[Thu May 07 07:58:23.750302 2026] [:error] [pid 4539:tid 4555] [client 20.43.20.252:10994] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afvVn4PEZE1565sDGnx4vgAAAQ4"]
[Thu May 07 07:58:24.173558 2026] [:error] [pid 29605:tid 29628] [client 20.43.20.252:11069] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "afvVoInxrTjETioEY0QBcQAAAA4"]
[Thu May 07 07:58:24.614963 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:11077] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afvVoIPEZE1565sDGnx4vwAAAQw"]
[Thu May 07 07:58:25.034246 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:10968] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afvVoYPEZE1565sDGnx4wQAAARQ"]
[Thu May 07 07:58:25.450639 2026] [:error] [pid 4539:tid 4548] [client 20.43.20.252:10969] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afvVoYPEZE1565sDGnx4wwAAAQc"]
[Thu May 07 07:58:25.876577 2026] [:error] [pid 29710:tid 29718] [client 20.43.20.252:11046] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "afvVof0atTQld9Y2ht8VvAAAAMY"]
[Thu May 07 07:58:26.296530 2026] [:error] [pid 29710:tid 29714] [client 20.43.20.252:10963] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afvVov0atTQld9Y2ht8VvwAAAMI"]
[Thu May 07 07:58:26.712550 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:11007] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afvVooPEZE1565sDGnx4yAAAAQM"]
[Thu May 07 07:58:27.160820 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:10950] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afvVo6bP7TJOAh7WSUOXXwAAAJg"]
[Thu May 07 07:58:27.581905 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:11105] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "afvVo_0atTQld9Y2ht8VwAAAAMo"]
[Thu May 07 07:58:28.002124 2026] [:error] [pid 29606:tid 29645] [client 20.43.20.252:10908] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afvVpBR5HjZ1PlSAiKuH7AAAAEQ"]
[Thu May 07 07:58:28.416200 2026] [:error] [pid 29710:tid 29712] [client 20.43.20.252:11025] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afvVpP0atTQld9Y2ht8VxAAAAMA"]
[Thu May 07 07:58:28.834430 2026] [:error] [pid 29605:tid 29635] [client 20.43.20.252:10987] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afvVpInxrTjETioEY0QBfAAAABU"]
[Thu May 07 07:58:29.263349 2026] [:error] [pid 4539:tid 4565] [client 20.43.20.252:11071] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/popo.php"] [unique_id "afvVpYPEZE1565sDGnx4ygAAARg"]
[Thu May 07 07:58:29.680840 2026] [:error] [pid 29607:tid 29689] [client 20.43.20.252:11108] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afvVpabP7TJOAh7WSUOXZAAAAJU"]
[Thu May 07 07:58:30.094530 2026] [:error] [pid 29607:tid 29671] [client 20.43.20.252:11096] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afvVpqbP7TJOAh7WSUOXZgAAAIM"]
[Thu May 07 07:58:30.516053 2026] [:error] [pid 4539:tid 4550] [client 20.43.20.252:11051] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afvVpoPEZE1565sDGnx4zwAAAQk"]
[Thu May 07 07:58:30.936105 2026] [:error] [pid 29710:tid 29717] [client 20.43.20.252:11021] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/13.php"] [unique_id "afvVpv0atTQld9Y2ht8VyQAAAMU"]
[Thu May 07 07:58:31.360803 2026] [:error] [pid 29606:tid 29663] [client 20.43.20.252:10912] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afvVpxR5HjZ1PlSAiKuH7gAAAFY"]
[Thu May 07 07:58:31.773364 2026] [:error] [pid 29605:tid 29633] [client 20.43.20.252:11070] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afvVp4nxrTjETioEY0QBfgAAABM"]
[Thu May 07 07:58:32.185284 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:11058] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afvVqIPEZE1565sDGnx40gAAARU"]
[Thu May 07 07:58:32.599032 2026] [:error] [pid 29607:tid 29685] [client 20.43.20.252:10975] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tews.php"] [unique_id "afvVqKbP7TJOAh7WSUOXaQAAAJE"]
[Thu May 07 07:58:33.011521 2026] [:error] [pid 29710:tid 29727] [client 20.43.20.252:10958] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afvVqf0atTQld9Y2ht8V0QAAAM8"]
[Thu May 07 07:58:33.427103 2026] [:error] [pid 29605:tid 29621] [client 20.43.20.252:10996] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afvVqYnxrTjETioEY0QBgAAAAAc"]
[Thu May 07 07:58:33.839119 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:11030] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afvVqYPEZE1565sDGnx41QAAAQw"]
[Thu May 07 07:58:34.265877 2026] [:error] [pid 29607:tid 29676] [client 20.43.20.252:11214] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/moshou.php"] [unique_id "afvVqqbP7TJOAh7WSUOXawAAAIg"]
[Thu May 07 07:58:34.687166 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:10944] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afvVqv0atTQld9Y2ht8V1AAAAMo"]
[Thu May 07 07:58:35.101837 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:10976] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afvVq4PEZE1565sDGnx42wAAAQM"]
[Thu May 07 07:58:35.554617 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:10881] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afvVq4PEZE1565sDGnx43AAAARY"]
[Thu May 07 07:58:35.965528 2026] [:error] [pid 29606:tid 29651] [client 20.43.20.252:11119] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "afvVqxR5HjZ1PlSAiKuH8QAAAEo"]
[Thu May 07 07:58:36.398605 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:11050] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afvVrIPEZE1565sDGnx43wAAARM"]
[Thu May 07 07:58:36.815751 2026] [:error] [pid 29607:tid 29669] [client 20.43.20.252:11091] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afvVrKbP7TJOAh7WSUOXbwAAAIE"]
[Thu May 07 07:58:37.232568 2026] [:error] [pid 29710:tid 29712] [client 20.43.20.252:11024] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afvVrf0atTQld9Y2ht8V1wAAAMA"]
[Thu May 07 07:58:37.658883 2026] [:error] [pid 4539:tid 4559] [client 20.43.20.252:10947] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "afvVrYPEZE1565sDGnx44wAAARI"]
[Thu May 07 07:58:38.076553 2026] [:error] [pid 29605:tid 29632] [client 20.43.20.252:11130] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afvVronxrTjETioEY0QBggAAABI"]
[Thu May 07 07:58:38.489893 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:11037] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afvVrqbP7TJOAh7WSUOXcwAAAJg"]
[Thu May 07 07:58:38.902577 2026] [:error] [pid 29606:tid 29662] [client 20.43.20.252:10965] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afvVrhR5HjZ1PlSAiKuH9QAAAFU"]
[Thu May 07 07:58:39.321023 2026] [:error] [pid 29605:tid 29629] [client 20.43.20.252:10893] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "afvVr4nxrTjETioEY0QBhQAAAA8"]
[Thu May 07 07:58:39.740764 2026] [:error] [pid 29606:tid 29665] [client 20.43.20.252:11127] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afvVrxR5HjZ1PlSAiKuH9gAAAFg"]
[Thu May 07 07:58:40.162027 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:11034] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afvVsIPEZE1565sDGnx46gAAAQs"]
[Thu May 07 07:58:40.576640 2026] [:error] [pid 29607:tid 29682] [client 20.43.20.252:11133] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afvVsKbP7TJOAh7WSUOXdQAAAI4"]
[Thu May 07 07:58:40.989508 2026] [:error] [pid 29607:tid 29679] [client 20.43.20.252:11047] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "afvVsKbP7TJOAh7WSUOXegAAAIs"]
[Thu May 07 07:58:41.402771 2026] [:error] [pid 29607:tid 29686] [client 20.43.20.252:10895] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afvVsabP7TJOAh7WSUOXfAAAAJI"]
[Thu May 07 07:58:41.845760 2026] [:error] [pid 29606:tid 29653] [client 20.43.20.252:10985] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afvVsRR5HjZ1PlSAiKuH9wAAAEw"]
[Thu May 07 07:58:42.268021 2026] [:error] [pid 29607:tid 29676] [client 20.43.20.252:11056] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afvVsqbP7TJOAh7WSUOXfgAAAIg"]
[Thu May 07 07:58:42.686962 2026] [:error] [pid 29606:tid 29658] [client 20.43.20.252:10920] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "afvVshR5HjZ1PlSAiKuH-QAAAFE"]
[Thu May 07 07:58:43.099297 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:10986] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afvVs4PEZE1565sDGnx48AAAAQY"]
[Thu May 07 07:58:43.520648 2026] [:error] [pid 29607:tid 29683] [client 20.43.20.252:10837] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afvVs6bP7TJOAh7WSUOXfwAAAI8"]
[Thu May 07 07:58:43.932111 2026] [:error] [pid 4539:tid 4554] [client 20.43.20.252:11002] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afvVs4PEZE1565sDGnx49QAAAQ0"]
[Thu May 07 07:58:44.362578 2026] [:error] [pid 29605:tid 29626] [client 20.43.20.252:10894] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "afvVtInxrTjETioEY0QBigAAAAw"]
[Thu May 07 07:58:44.775219 2026] [:error] [pid 29606:tid 29659] [client 20.43.20.252:10882] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "afvVtBR5HjZ1PlSAiKuH_AAAAFI"]
[Thu May 07 07:58:45.194681 2026] [:error] [pid 29606:tid 29650] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Thu May 07 07:58:45.406057 2026] [:error] [pid 29606:tid 29644] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu May 07 07:58:45.615138 2026] [:error] [pid 29606:tid 29656] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu May 07 07:58:45.828675 2026] [:error] [pid 29606:tid 29641] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu May 07 07:58:46.037976 2026] [:error] [pid 29606:tid 29651] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Thu May 07 07:58:46.248691 2026] [:error] [pid 29606:tid 29648] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Thu May 07 07:58:46.460386 2026] [:error] [pid 29606:tid 29647] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Thu May 07 07:58:46.669397 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Thu May 07 07:58:46.878095 2026] [:error] [pid 29606:tid 29658] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/cjfuns.php
[Thu May 07 07:58:47.087436 2026] [:error] [pid 29606:tid 29661] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu May 07 07:58:47.298599 2026] [:error] [pid 29606:tid 29657] [client 20.43.20.252:10979] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu May 07 07:58:47.504480 2026] [:error] [pid 29606:tid 29656] [client 20.43.20.252:10979] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afvVtxR5HjZ1PlSAiKuIGAAAAE8"]
[Thu May 07 07:58:47.922235 2026] [:error] [pid 4539:tid 4555] [client 20.43.20.252:11031] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afvVt4PEZE1565sDGnx4-QAAAQ4"]
[Thu May 07 07:58:48.343463 2026] [:error] [pid 29605:tid 29619] [client 20.43.20.252:10913] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afvVuInxrTjETioEY0QBjQAAAAU"]
[Thu May 07 07:58:48.771373 2026] [:error] [pid 29605:tid 29624] [client 20.43.20.252:11000] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afvVuInxrTjETioEY0QBjgAAAAo"]
[Thu May 07 07:58:49.189895 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:11065] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afvVuYPEZE1565sDGnx4-gAAARU"]
[Thu May 07 07:58:49.605332 2026] [:error] [pid 29605:tid 29630] [client 20.43.20.252:10972] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afvVuYnxrTjETioEY0QBjwAAABA"]
[Thu May 07 07:58:50.054458 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:10888] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afvVuoPEZE1565sDGnx4_AAAAQE"]
[Thu May 07 07:58:50.476271 2026] [:error] [pid 29607:tid 29685] [client 20.43.20.252:11011] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "afvVuqbP7TJOAh7WSUOXjwAAAJE"]
[Thu May 07 07:58:50.905052 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:11016] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afvVuoPEZE1565sDGnx4_gAAARQ"]
[Thu May 07 07:58:51.331761 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:11029] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afvVu4PEZE1565sDGnx5AAAAAQs"]
[Thu May 07 07:58:51.748689 2026] [:error] [pid 29710:tid 29715] [client 20.43.20.252:10840] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afvVu_0atTQld9Y2ht8V-AAAAMM"]
[Thu May 07 07:58:52.181138 2026] [:error] [pid 29607:tid 29687] [client 20.43.20.252:11054] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "afvVvKbP7TJOAh7WSUOXlAAAAJM"]
[Thu May 07 07:58:52.603034 2026] [:error] [pid 29605:tid 29615] [client 20.43.20.252:10959] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afvVvInxrTjETioEY0QBkgAAAAE"]
[Thu May 07 07:58:53.018738 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:10907] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afvVvYPEZE1565sDGnx5AQAAAQU"]
[Thu May 07 07:58:53.436321 2026] [:error] [pid 29710:tid 29713] [client 20.43.20.252:11048] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afvVvf0atTQld9Y2ht8V_QAAAME"]
[Thu May 07 07:58:53.854554 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:10903] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "afvVvYPEZE1565sDGnx5AwAAARA"]
[Thu May 07 07:58:54.283511 2026] [:error] [pid 29710:tid 29716] [client 20.43.20.252:10967] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afvVvv0atTQld9Y2ht8WAgAAAMQ"]
[Thu May 07 07:58:54.708759 2026] [:error] [pid 29606:tid 29643] [client 20.43.20.252:11135] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afvVvhR5HjZ1PlSAiKuIKAAAAEI"]
[Thu May 07 07:58:55.126095 2026] [:error] [pid 29605:tid 29621] [client 20.43.20.252:10970] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afvVv4nxrTjETioEY0QBlQAAAAc"]
[Thu May 07 07:58:55.541675 2026] [:error] [pid 29710:tid 29730] [client 20.43.20.252:10929] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "afvVv_0atTQld9Y2ht8WBQAAANI"]
[Thu May 07 07:58:55.957100 2026] [:error] [pid 29710:tid 29733] [client 20.43.20.252:10911] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afvVv_0atTQld9Y2ht8WBgAAANU"]
[Thu May 07 07:58:56.371842 2026] [:error] [pid 29607:tid 29670] [client 20.43.20.252:11052] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afvVwKbP7TJOAh7WSUOXlgAAAII"]
[Thu May 07 07:58:56.801722 2026] [:error] [pid 29606:tid 29647] [client 20.43.20.252:11111] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afvVwBR5HjZ1PlSAiKuILAAAAEY"]
[Thu May 07 07:58:57.215131 2026] [:error] [pid 29606:tid 29658] [client 20.43.20.252:10993] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "afvVwRR5HjZ1PlSAiKuILwAAAFE"]
[Thu May 07 07:58:57.647040 2026] [:error] [pid 29606:tid 29661] [client 20.43.20.252:10880] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afvVwRR5HjZ1PlSAiKuIMQAAAFQ"]
[Thu May 07 07:58:58.059736 2026] [:error] [pid 29710:tid 29736] [client 20.43.20.252:10981] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afvVwv0atTQld9Y2ht8WCwAAANg"]
[Thu May 07 07:58:58.485930 2026] [:error] [pid 29605:tid 29636] [client 20.43.20.252:10898] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afvVwonxrTjETioEY0QBmgAAABY"]
[Thu May 07 07:58:58.913529 2026] [:error] [pid 29605:tid 29616] [client 20.43.20.252:11011] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "afvVwonxrTjETioEY0QBnAAAAAI"]
[Thu May 07 07:58:59.339523 2026] [:error] [pid 29606:tid 29654] [client 20.43.20.252:11040] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afvVwxR5HjZ1PlSAiKuIMwAAAE0"]
[Thu May 07 07:58:59.767037 2026] [:error] [pid 29710:tid 29714] [client 20.43.20.252:10997] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afvVw_0atTQld9Y2ht8WDQAAAMI"]
[Thu May 07 07:59:00.183091 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:10891] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afvVxP0atTQld9Y2ht8WDgAAAMo"]
[Thu May 07 07:59:00.609328 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:10978] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classgoto24.php"] [unique_id "afvVxIPEZE1565sDGnx5CAAAARM"]
[Thu May 07 07:59:01.039143 2026] [:error] [pid 29710:tid 29718] [client 20.43.20.252:10906] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afvVxf0atTQld9Y2ht8WEAAAAMY"]
[Thu May 07 07:59:01.476884 2026] [:error] [pid 29606:tid 29650] [client 20.43.20.252:10892] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afvVxRR5HjZ1PlSAiKuINgAAAEk"]
[Thu May 07 07:59:01.913940 2026] [:error] [pid 29607:tid 29677] [client 20.43.20.252:10896] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afvVxabP7TJOAh7WSUOXmwAAAIk"]
[Thu May 07 07:59:02.331875 2026] [:error] [pid 29607:tid 29684] [client 20.43.20.252:10962] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no1.php"] [unique_id "afvVxqbP7TJOAh7WSUOXngAAAJA"]
[Thu May 07 07:59:02.747541 2026] [:error] [pid 29606:tid 29663] [client 20.43.20.252:10942] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afvVxhR5HjZ1PlSAiKuIOAAAAFY"]
[Thu May 07 07:59:03.165451 2026] [:error] [pid 29607:tid 29691] [client 20.43.20.252:10886] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afvVx6bP7TJOAh7WSUOXoQAAAJc"]
[Thu May 07 07:59:03.585382 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:10858] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afvVx4PEZE1565sDGnx5DQAAARU"]
[Thu May 07 07:59:04.004966 2026] [:error] [pid 29606:tid 29643] [client 20.43.20.252:10902] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "afvVyBR5HjZ1PlSAiKuIOgAAAEI"]
[Thu May 07 07:59:04.417616 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:10960] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afvVyIPEZE1565sDGnx5FAAAAQU"]
[Thu May 07 07:59:04.833037 2026] [:error] [pid 29607:tid 29681] [client 20.43.20.252:10834] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afvVyKbP7TJOAh7WSUOXogAAAI0"]
[Thu May 07 07:59:05.263345 2026] [:error] [pid 29607:tid 29688] [client 20.43.20.252:10980] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afvVyabP7TJOAh7WSUOXpQAAAJQ"]
[Thu May 07 07:59:05.691864 2026] [:error] [pid 29606:tid 29660] [client 20.43.20.252:11124] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "afvVyRR5HjZ1PlSAiKuIPAAAAFM"]
[Thu May 07 07:59:06.103148 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:10981] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afvVyoPEZE1565sDGnx5HQAAARY"]
[Thu May 07 07:59:06.522395 2026] [:error] [pid 29607:tid 29680] [client 20.43.20.252:10845] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afvVyqbP7TJOAh7WSUOXqgAAAIw"]
[Thu May 07 07:59:06.936283 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:10940] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afvVyoPEZE1565sDGnx5JgAAAQw"]
[Thu May 07 07:59:07.359675 2026] [:error] [pid 29607:tid 29678] [client 20.43.20.252:10984] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "afvVy6bP7TJOAh7WSUOXrQAAAIo"]
[Thu May 07 07:59:07.799103 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:10932] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afvVy4PEZE1565sDGnx5KwAAARA"]
[Thu May 07 07:59:08.213884 2026] [:error] [pid 29605:tid 29628] [client 20.43.20.252:10990] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afvVzInxrTjETioEY0QBpQAAAA4"]
[Thu May 07 07:59:08.636631 2026] [:error] [pid 29605:tid 29620] [client 20.43.20.252:10901] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afvVzInxrTjETioEY0QBpwAAAAY"]
[Thu May 07 07:59:09.074987 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:11039] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "afvVzYPEZE1565sDGnx5MwAAARM"]
[Thu May 07 07:59:09.497381 2026] [:error] [pid 29710:tid 29714] [client 20.43.20.252:10885] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvVzf0atTQld9Y2ht8WHwAAAMI"]
[Thu May 07 07:59:09.911293 2026] [:error] [pid 29710:tid 29718] [client 20.43.20.252:10917] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvVzf0atTQld9Y2ht8WJAAAAMY"]
[Thu May 07 07:59:10.336314 2026] [:error] [pid 29710:tid 29726] [client 20.43.20.252:10949] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvVzv0atTQld9Y2ht8WKAAAAM4"]
[Thu May 07 07:59:10.756476 2026] [:error] [pid 29606:tid 29661] [client 20.43.20.252:10897] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvVzhR5HjZ1PlSAiKuIQgAAAFQ"]
[Thu May 07 07:59:11.181646 2026] [:error] [pid 29606:tid 29648] [client 20.43.20.252:10933] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afvVzxR5HjZ1PlSAiKuIRAAAAEc"]
[Thu May 07 07:59:11.612113 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:11005] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afvVz4PEZE1565sDGnx5OgAAARQ"]
[Thu May 07 07:59:12.031362 2026] [:error] [pid 29607:tid 29690] [client 20.43.20.252:10879] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afvV0KbP7TJOAh7WSUOXuAAAAJY"]
[Thu May 07 07:59:12.454202 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:10848] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "afvV0IPEZE1565sDGnx5PgAAAQU"]
[Thu May 07 07:59:12.878983 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:11042] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afvV0KbP7TJOAh7WSUOXvAAAAJg"]
[Thu May 07 07:59:13.296433 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:10850] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afvV0YPEZE1565sDGnx5QAAAAQM"]
[Thu May 07 07:59:13.715695 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:10951] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afvV0YPEZE1565sDGnx5QgAAAQE"]
[Thu May 07 07:59:14.150997 2026] [:error] [pid 29607:tid 29681] [client 20.43.20.252:10829] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f6.php"] [unique_id "afvV0qbP7TJOAh7WSUOXxAAAAI0"]
[Thu May 07 07:59:14.577044 2026] [:error] [pid 29607:tid 29682] [client 20.43.20.252:10998] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afvV0qbP7TJOAh7WSUOXyQAAAI4"]
[Thu May 07 07:59:15.012310 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:11003] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afvV06bP7TJOAh7WSUOXzgAAAJg"]
[Thu May 07 07:59:15.431718 2026] [:error] [pid 29606:tid 29650] [client 20.43.20.252:10832] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afvV0xR5HjZ1PlSAiKuIRwAAAEk"]
[Thu May 07 07:59:15.850533 2026] [:error] [pid 29605:tid 29635] [client 20.43.20.252:10887] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "afvV04nxrTjETioEY0QBsQAAABU"]
[Thu May 07 07:59:16.284838 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:10883] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afvV1IPEZE1565sDGnx5SQAAARE"]
[Thu May 07 07:59:16.723064 2026] [:error] [pid 29605:tid 29619] [client 20.43.20.252:11033] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afvV1InxrTjETioEY0QBswAAAAU"]
[Thu May 07 07:59:17.138922 2026] [:error] [pid 29607:tid 29688] [client 20.43.20.252:10833] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afvV1abP7TJOAh7WSUOX3QAAAJQ"]
[Thu May 07 07:59:17.561010 2026] [:error] [pid 29605:tid 29633] [client 20.43.20.252:10890] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "afvV1YnxrTjETioEY0QBtgAAABM"]
[Thu May 07 07:59:18.009557 2026] [:error] [pid 29607:tid 29675] [client 20.43.20.252:10992] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afvV1qbP7TJOAh7WSUOX5AAAAIc"]
[Thu May 07 07:59:18.440933 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:10948] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afvV1oPEZE1565sDGnx5TQAAAQs"]
[Thu May 07 07:59:18.882140 2026] [:error] [pid 4539:tid 4546] [client 20.43.20.252:11004] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afvV1oPEZE1565sDGnx5TgAAAQU"]
[Thu May 07 07:59:19.301634 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:10786] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "afvV14PEZE1565sDGnx5TwAAAQg"]
[Thu May 07 07:59:19.727062 2026] [:error] [pid 29607:tid 29688] [client 20.43.20.252:10922] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvV16bP7TJOAh7WSUOX7wAAAJQ"]
[Thu May 07 07:59:20.147812 2026] [:error] [pid 29606:tid 29652] [client 20.43.20.252:10988] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvV2BR5HjZ1PlSAiKuITwAAAEs"]
[Thu May 07 07:59:20.577676 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:10931] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvV2IPEZE1565sDGnx5UQAAARc"]
[Thu May 07 07:59:21.003279 2026] [:error] [pid 29607:tid 29686] [client 20.43.20.252:10884] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afvV2abP7TJOAh7WSUOX9wAAAJI"]
[Thu May 07 07:59:21.435142 2026] [:error] [pid 4539:tid 4543] [client 20.43.20.252:10915] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afvV2YPEZE1565sDGnx5VAAAAQI"]
[Thu May 07 07:59:21.859661 2026] [:error] [pid 4539:tid 4557] [client 20.43.20.252:10974] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afvV2YPEZE1565sDGnx5WAAAARA"]
[Thu May 07 07:59:22.310111 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:10991] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afvV2oPEZE1565sDGnx5WwAAARE"]
[Thu May 07 07:59:22.724647 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:10904] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-act.php"] [unique_id "afvV2oPEZE1565sDGnx5XQAAARY"]
[Thu May 07 07:59:23.141200 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:10827] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afvV2_0atTQld9Y2ht8WLQAAANQ"]
[Thu May 07 07:59:23.558787 2026] [:error] [pid 29606:tid 29647] [client 20.43.20.252:10936] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afvV2xR5HjZ1PlSAiKuIUgAAAEY"]
[Thu May 07 07:59:23.980861 2026] [:error] [pid 29607:tid 29684] [client 20.43.20.252:10928] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afvV26bP7TJOAh7WSUOYCQAAAJA"]
[Thu May 07 07:59:24.416566 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:10821] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "afvV3BR5HjZ1PlSAiKuIVAAAAEE"]
[Thu May 07 07:59:24.835216 2026] [:error] [pid 29606:tid 29649] [client 20.43.20.252:11189] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afvV3BR5HjZ1PlSAiKuIVgAAAEg"]
[Thu May 07 07:59:25.271620 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:10927] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afvV3YPEZE1565sDGnx5ZQAAARQ"]
[Thu May 07 07:59:25.711041 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:10820] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afvV3YPEZE1565sDGnx5aAAAAQY"]
[Thu May 07 07:59:26.136637 2026] [:error] [pid 4539:tid 4551] [client 20.43.20.252:10816] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afvV3oPEZE1565sDGnx5agAAAQo"]
[Thu May 07 07:59:26.559719 2026] [:error] [pid 29710:tid 29712] [client 20.43.20.252:10921] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afvV3v0atTQld9Y2ht8WMgAAAMA"]
[Thu May 07 07:59:26.985108 2026] [:error] [pid 4539:tid 4551] [client 20.43.20.252:10916] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afvV3oPEZE1565sDGnx5gQAAAQo"]
[Thu May 07 07:59:27.437021 2026] [:error] [pid 29607:tid 29669] [client 20.43.20.252:10859] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afvV36bP7TJOAh7WSUOYKAAAAIE"]
[Thu May 07 07:59:27.857365 2026] [:error] [pid 4539:tid 4548] [client 20.43.20.252:11006] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sbhu.php"] [unique_id "afvV34PEZE1565sDGnx5pAAAAQc"]
[Thu May 07 07:59:28.285978 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:10776] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afvV4IPEZE1565sDGnx5pgAAAQs"]
[Thu May 07 07:59:28.732993 2026] [:error] [pid 4539:tid 4543] [client 20.43.20.252:10943] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afvV4IPEZE1565sDGnx5qQAAAQI"]
[Thu May 07 07:59:29.178776 2026] [:error] [pid 4539:tid 4555] [client 20.43.20.252:10867] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afvV4YPEZE1565sDGnx5rgAAAQ4"]
[Thu May 07 07:59:29.609682 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:10851] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "afvV4YPEZE1565sDGnx5sQAAAQw"]
[Thu May 07 07:59:30.041222 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:10961] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afvV4oPEZE1565sDGnx5tAAAARE"]
[Thu May 07 07:59:30.460002 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:10889] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afvV4oPEZE1565sDGnx5uAAAAQM"]
[Thu May 07 07:59:30.887932 2026] [:error] [pid 29710:tid 29727] [client 20.43.20.252:10989] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afvV4v0atTQld9Y2ht8WZAAAAM8"]
[Thu May 07 07:59:31.333328 2026] [:error] [pid 29605:tid 29637] [client 20.43.20.252:10819] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afvV44nxrTjETioEY0QBxgAAABc"]
[Thu May 07 07:59:31.764048 2026] [:error] [pid 29710:tid 29735] [client 20.43.20.252:10941] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvV4_0atTQld9Y2ht8WZgAAANc"]
[Thu May 07 07:59:32.183294 2026] [:error] [pid 29607:tid 29688] [client 20.43.20.252:10828] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvV5KbP7TJOAh7WSUOYRgAAAJQ"]
[Thu May 07 07:59:32.597693 2026] [:error] [pid 29606:tid 29656] [client 20.43.20.252:10918] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvV5BR5HjZ1PlSAiKuIdgAAAE8"]
[Thu May 07 07:59:33.016350 2026] [:error] [pid 4539:tid 4561] [client 20.43.20.252:10822] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "afvV5YPEZE1565sDGnx5vQAAARQ"]
[Thu May 07 07:59:33.429217 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:10759] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "afvV5YPEZE1565sDGnx5vgAAARc"]
[Thu May 07 07:59:33.842596 2026] [:error] [pid 29607:tid 29672] [client 20.43.20.252:10799] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "afvV5abP7TJOAh7WSUOYVQAAAIQ"]
[Thu May 07 07:59:34.261335 2026] [:error] [pid 29607:tid 29682] [client 20.43.20.252:10863] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "afvV5qbP7TJOAh7WSUOYWwAAAI4"]
[Thu May 07 07:59:34.727910 2026] [:error] [pid 29710:tid 29736] [client 20.43.20.252:10871] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8xyz.php"] [unique_id "afvV5v0atTQld9Y2ht8WaQAAANg"]
[Thu May 07 07:59:35.188012 2026] [:error] [pid 4539:tid 4555] [client 20.43.20.252:10843] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afvV54PEZE1565sDGnx5wAAAAQ4"]
[Thu May 07 07:59:35.614225 2026] [:error] [pid 4539:tid 4559] [client 20.43.20.252:10781] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afvV54PEZE1565sDGnx5xQAAARI"]
[Thu May 07 07:59:36.029462 2026] [:error] [pid 29606:tid 29652] [client 20.43.20.252:10999] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afvV6BR5HjZ1PlSAiKuIegAAAEs"]
[Thu May 07 07:59:36.445039 2026] [:error] [pid 4539:tid 4541] [client 20.43.20.252:10812] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "afvV6IPEZE1565sDGnx5yQAAAQA"]
[Thu May 07 07:59:36.877052 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:10752] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afvV6IPEZE1565sDGnx5zwAAAQg"]
[Thu May 07 07:59:37.300821 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:10919] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afvV6YPEZE1565sDGnx51QAAARM"]
[Thu May 07 07:59:37.715649 2026] [:error] [pid 29710:tid 29715] [client 20.43.20.252:11062] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afvV6f0atTQld9Y2ht8WbwAAAMM"]
[Thu May 07 07:59:38.142891 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:10824] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "afvV6v0atTQld9Y2ht8WcQAAANQ"]
[Thu May 07 07:59:38.555284 2026] [:error] [pid 29607:tid 29672] [client 20.43.20.252:10870] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afvV6qbP7TJOAh7WSUOYYwAAAIQ"]
[Thu May 07 07:59:38.979335 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:10934] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afvV6v0atTQld9Y2ht8WdAAAAMo"]
[Thu May 07 07:59:39.404620 2026] [:error] [pid 29710:tid 29721] [client 20.43.20.252:10923] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afvV6_0atTQld9Y2ht8WdgAAAMk"]
[Thu May 07 07:59:39.840933 2026] [:error] [pid 29607:tid 29687] [client 20.43.20.252:10756] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "afvV66bP7TJOAh7WSUOYZgAAAJM"]
[Thu May 07 07:59:40.260017 2026] [:error] [pid 29605:tid 29616] [client 20.43.20.252:10823] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afvV7InxrTjETioEY0QB0QAAAAI"]
[Thu May 07 07:59:40.678295 2026] [:error] [pid 29605:tid 29625] [client 20.43.20.252:11134] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afvV7InxrTjETioEY0QB0wAAAAs"]
[Thu May 07 07:59:41.096136 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:10765] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afvV7YPEZE1565sDGnx55gAAAQw"]
[Thu May 07 07:59:41.515501 2026] [:error] [pid 29710:tid 29733] [client 20.43.20.252:10900] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "afvV7f0atTQld9Y2ht8WfAAAANU"]
[Thu May 07 07:59:41.960974 2026] [:error] [pid 4539:tid 4550] [client 20.43.20.252:10854] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afvV7YPEZE1565sDGnx56wAAAQk"]
[Thu May 07 07:59:42.403955 2026] [:error] [pid 4539:tid 4548] [client 20.43.20.252:10852] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afvV7oPEZE1565sDGnx57wAAAQc"]
[Thu May 07 07:59:42.822503 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:11210] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afvV7oPEZE1565sDGnx58QAAAQE"]
[Thu May 07 07:59:43.249288 2026] [:error] [pid 29607:tid 29682] [client 20.43.20.252:10801] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afvV76bP7TJOAh7WSUOYaAAAAI4"]
[Thu May 07 07:59:43.674815 2026] [:error] [pid 29607:tid 29680] [client 20.43.20.252:10815] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afvV76bP7TJOAh7WSUOYagAAAIw"]
[Thu May 07 07:59:44.091756 2026] [:error] [pid 29607:tid 29676] [client 20.43.20.252:10878] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afvV8KbP7TJOAh7WSUOYbAAAAIg"]
[Thu May 07 07:59:44.537457 2026] [:error] [pid 29606:tid 29663] [client 20.43.20.252:10960] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afvV8BR5HjZ1PlSAiKuIogAAAFY"]
[Thu May 07 07:59:44.952672 2026] [:error] [pid 29607:tid 29684] [client 20.43.20.252:10910] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fff.php"] [unique_id "afvV8KbP7TJOAh7WSUOYbwAAAJA"]
[Thu May 07 07:59:45.377145 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:10796] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvV8YPEZE1565sDGnx59QAAAQg"]
[Thu May 07 07:59:45.790817 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:10872] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvV8YPEZE1565sDGnx59wAAARU"]
[Thu May 07 07:59:46.233640 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:10860] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvV8oPEZE1565sDGnx5-QAAARc"]
[Thu May 07 07:59:46.655110 2026] [:error] [pid 29710:tid 29735] [client 20.43.20.252:10853] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvV8v0atTQld9Y2ht8WiAAAANc"]
[Thu May 07 07:59:47.079705 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:10924] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu May 07 07:59:47.292703 2026] [:error] [pid 29606:tid 29661] [client 20.43.20.252:10924] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Thu May 07 07:59:47.718298 2026] [:error] [pid 29606:tid 29650] [client 20.43.20.252:10924] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Thu May 07 07:59:48.388954 2026] [:error] [pid 29606:tid 29655] [client 20.43.20.252:10924] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu May 07 07:59:48.816340 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:10924] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Thu May 07 07:59:49.253256 2026] [:error] [pid 29606:tid 29648] [client 20.43.20.252:10924] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 07 07:59:49.462791 2026] [:error] [pid 29606:tid 29659] [client 20.43.20.252:10924] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afvV9RR5HjZ1PlSAiKuIzwAAAFI"]
[Thu May 07 07:59:49.878203 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:10847] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afvV9f0atTQld9Y2ht8WlwAAAMo"]
[Thu May 07 07:59:50.311496 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:10844] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afvV9oPEZE1565sDGnx6AgAAAQE"]
[Thu May 07 07:59:50.780951 2026] [:error] [pid 4539:tid 4545] [client 20.43.20.252:10939] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "afvV9oPEZE1565sDGnx6BAAAAQQ"]
[Thu May 07 07:59:51.227425 2026] [:error] [pid 29710:tid 29731] [client 20.43.20.252:10864] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afvV9_0atTQld9Y2ht8WnQAAANM"]
[Thu May 07 07:59:51.642825 2026] [:error] [pid 4539:tid 4551] [client 20.43.20.252:10873] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afvV94PEZE1565sDGnx6CgAAAQo"]
[Thu May 07 07:59:52.053735 2026] [:error] [pid 29710:tid 29713] [client 20.43.20.252:10787] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afvV-P0atTQld9Y2ht8WnwAAAME"]
[Thu May 07 07:59:52.473910 2026] [:error] [pid 29605:tid 29626] [client 20.43.20.252:11001] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "afvV-InxrTjETioEY0QB6QAAAAw"]
[Thu May 07 07:59:52.890965 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:10836] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afvV-BR5HjZ1PlSAiKuI4QAAAEE"]
[Thu May 07 07:59:53.332895 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:10938] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afvV-YPEZE1565sDGnx6DAAAARc"]
[Thu May 07 07:59:53.753583 2026] [:error] [pid 29710:tid 29716] [client 20.43.20.252:10773] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afvV-f0atTQld9Y2ht8WqQAAAMQ"]
[Thu May 07 07:59:54.170566 2026] [:error] [pid 4539:tid 4559] [client 20.43.20.252:10760] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/f35.php"] [unique_id "afvV-oPEZE1565sDGnx6DgAAARI"]
[Thu May 07 07:59:54.624230 2026] [:error] [pid 29710:tid 29735] [client 20.43.20.252:10876] [client 20.43.20.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afvV-v0atTQld9Y2ht8WrAAAANc"]
[Thu May 07 07:59:55.074282 2026] [:error] [pid 29710:tid 29736] [client 20.43.20.252:10780] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afvV-_0atTQld9Y2ht8WrwAAANg"]
[Thu May 07 07:59:55.502723 2026] [:error] [pid 4539:tid 4550] [client 20.43.20.252:10788] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afvV-4PEZE1565sDGnx6DwAAAQk"]
[Thu May 07 07:59:55.917683 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:10791] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "afvV-4PEZE1565sDGnx6EQAAARY"]
[Thu May 07 07:59:56.382096 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:10835] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afvV_P0atTQld9Y2ht8WtgAAANQ"]
[Thu May 07 07:59:56.834195 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:10830] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afvV_IPEZE1565sDGnx6FQAAAQE"]
[Thu May 07 07:59:57.279971 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:10633] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afvV_YPEZE1565sDGnx6GAAAAQM"]
[Thu May 07 07:59:57.732164 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:10849] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afvV_YPEZE1565sDGnx6HAAAAQs"]
[Thu May 07 07:59:58.151301 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:10831] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afvV_oPEZE1565sDGnx6HgAAARU"]
[Thu May 07 07:59:58.592966 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:10868] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afvV_oPEZE1565sDGnx6IAAAAQY"]
[Thu May 07 07:59:59.014886 2026] [:error] [pid 29605:tid 29621] [client 20.43.20.252:10758] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afvV_4nxrTjETioEY0QB7wAAAAc"]
[Thu May 07 07:59:59.449844 2026] [:error] [pid 29605:tid 29636] [client 20.43.20.252:10842] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "afvV_4nxrTjETioEY0QB9QAAABY"]
[Thu May 07 07:59:59.863524 2026] [:error] [pid 29605:tid 29623] [client 20.43.20.252:10905] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afvV_4nxrTjETioEY0QB-QAAAAk"]
[Thu May 07 08:00:00.289444 2026] [:error] [pid 29710:tid 29721] [client 20.43.20.252:10762] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afvWAP0atTQld9Y2ht8WwAAAAMk"]
[Thu May 07 08:00:00.712338 2026] [:error] [pid 29607:tid 29676] [client 20.43.20.252:11061] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afvWAKbP7TJOAh7WSUOYewAAAIg"]
[Thu May 07 08:00:01.156410 2026] [:error] [pid 29605:tid 29627] [client 20.43.20.252:10777] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "afvWAYnxrTjETioEY0QB_gAAAA0"]
[Thu May 07 08:00:01.605574 2026] [:error] [pid 4539:tid 4565] [client 20.43.20.252:10814] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afvWAYPEZE1565sDGnx6LAAAARg"]
[Thu May 07 08:00:02.034416 2026] [:error] [pid 29607:tid 29689] [client 20.43.20.252:10774] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afvWAqbP7TJOAh7WSUOYfwAAAJU"]
[Thu May 07 08:00:02.481571 2026] [:error] [pid 4539:tid 4552] [client 20.43.20.252:10861] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afvWAoPEZE1565sDGnx6LgAAAQs"]
[Thu May 07 08:00:02.965411 2026] [:error] [pid 29607:tid 29673] [client 20.43.20.252:10764] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/in.php"] [unique_id "afvWAqbP7TJOAh7WSUOYgQAAAIU"]
[Thu May 07 08:00:03.409495 2026] [:error] [pid 4539:tid 4560] [client 20.43.20.252:10914] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afvWA4PEZE1565sDGnx6NQAAARM"]
[Thu May 07 08:00:03.834507 2026] [:error] [pid 29607:tid 29671] [client 20.43.20.252:10698] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afvWA6bP7TJOAh7WSUOYhAAAAIM"]
[Thu May 07 08:00:04.246811 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:10857] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afvWBIPEZE1565sDGnx6OQAAARc"]
[Thu May 07 08:00:04.666478 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:10782] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gssdd.php"] [unique_id "afvWBKbP7TJOAh7WSUOYhQAAAJg"]
[Thu May 07 08:00:05.112606 2026] [:error] [pid 29710:tid 29722] [client 20.43.20.252:10691] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afvWBf0atTQld9Y2ht8WxgAAAMo"]
[Thu May 07 08:00:05.560504 2026] [:error] [pid 29710:tid 29734] [client 20.43.20.252:10783] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afvWBf0atTQld9Y2ht8WygAAANY"]
[Thu May 07 08:00:05.991277 2026] [:error] [pid 4539:tid 4548] [client 20.43.20.252:10817] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afvWBYPEZE1565sDGnx6PAAAAQc"]
[Thu May 07 08:00:06.421983 2026] [:error] [pid 29606:tid 29644] [client 20.43.20.252:10856] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afvWBhR5HjZ1PlSAiKuI8AAAAEM"]
[Thu May 07 08:00:06.835368 2026] [:error] [pid 29710:tid 29723] [client 20.43.20.252:10690] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afvWBv0atTQld9Y2ht8WzQAAAMs"]
[Thu May 07 08:00:07.253123 2026] [:error] [pid 29606:tid 29642] [client 20.43.20.252:10930] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afvWBxR5HjZ1PlSAiKuI8gAAAEE"]
[Thu May 07 08:00:07.681622 2026] [:error] [pid 29710:tid 29726] [client 20.43.20.252:10741] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afvWB_0atTQld9Y2ht8WzwAAAM4"]
[Thu May 07 08:00:08.094614 2026] [:error] [pid 29606:tid 29659] [client 20.43.20.252:10769] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bs1.php"] [unique_id "afvWCBR5HjZ1PlSAiKuI-AAAAFI"]
[Thu May 07 08:00:08.513707 2026] [:error] [pid 29606:tid 29645] [client 20.43.20.252:10935] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvWCBR5HjZ1PlSAiKuI-gAAAEQ"]
[Thu May 07 08:00:08.935857 2026] [:error] [pid 29606:tid 29656] [client 20.43.20.252:10707] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvWCBR5HjZ1PlSAiKuI-wAAAE8"]
[Thu May 07 08:00:09.363982 2026] [:error] [pid 4539:tid 4564] [client 20.43.20.252:10877] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvWCYPEZE1565sDGnx6QgAAARc"]
[Thu May 07 08:00:09.814801 2026] [:error] [pid 29605:tid 29623] [client 20.43.20.252:10719] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afvWCYnxrTjETioEY0QCBgAAAAk"]
[Thu May 07 08:00:10.266614 2026] [:error] [pid 4539:tid 4541] [client 20.43.20.252:10755] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afvWCoPEZE1565sDGnx6RgAAAQA"]
[Thu May 07 08:00:10.677966 2026] [:error] [pid 4539:tid 4542] [client 20.43.20.252:10722] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afvWCoPEZE1565sDGnx6SQAAAQE"]
[Thu May 07 08:00:11.089208 2026] [:error] [pid 29710:tid 29732] [client 20.43.20.252:10810] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afvWC_0atTQld9Y2ht8W1QAAANQ"]
[Thu May 07 08:00:11.513563 2026] [:error] [pid 29710:tid 29718] [client 20.43.20.252:10846] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "afvWC_0atTQld9Y2ht8W2QAAAMY"]
[Thu May 07 08:00:11.945514 2026] [:error] [pid 29606:tid 29646] [client 20.43.20.252:10740] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afvWCxR5HjZ1PlSAiKuI_QAAAEU"]
[Thu May 07 08:00:12.357707 2026] [:error] [pid 29710:tid 29712] [client 20.43.20.252:10712] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afvWDP0atTQld9Y2ht8W3AAAAMA"]
[Thu May 07 08:00:12.778552 2026] [:error] [pid 4539:tid 4547] [client 20.43.20.252:10865] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afvWDIPEZE1565sDGnx6TwAAAQY"]
[Thu May 07 08:00:13.194384 2026] [:error] [pid 29710:tid 29730] [client 20.43.20.252:10804] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file48.php"] [unique_id "afvWDf0atTQld9Y2ht8W4QAAANI"]
[Thu May 07 08:00:13.638083 2026] [:error] [pid 4539:tid 4543] [client 20.43.20.252:10706] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvWDYPEZE1565sDGnx6VgAAAQI"]
[Thu May 07 08:00:14.080728 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:10875] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvWDqbP7TJOAh7WSUOYmAAAAJg"]
[Thu May 07 08:00:14.491609 2026] [:error] [pid 4539:tid 4563] [client 20.43.20.252:10770] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvWDoPEZE1565sDGnx6XgAAARY"]
[Thu May 07 08:00:14.908342 2026] [:error] [pid 29605:tid 29616] [client 20.43.20.252:10925] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "afvWDonxrTjETioEY0QCCAAAAAI"]
[Thu May 07 08:00:15.381635 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:10909] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afvWD4PEZE1565sDGnx6YQAAAQg"]
[Thu May 07 08:00:15.826056 2026] [:error] [pid 4539:tid 4553] [client 20.43.20.252:10702] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afvWD4PEZE1565sDGnx6YwAAAQw"]
[Thu May 07 08:00:16.269411 2026] [:error] [pid 29606:tid 29664] [client 20.43.20.252:10826] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afvWEBR5HjZ1PlSAiKuI_gAAAFc"]
[Thu May 07 08:00:16.722952 2026] [:error] [pid 29607:tid 29683] [client 20.43.20.252:10809] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "afvWEKbP7TJOAh7WSUOYnQAAAI8"]
[Thu May 07 08:00:17.165449 2026] [:error] [pid 29607:tid 29691] [client 20.43.20.252:10793] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afvWEabP7TJOAh7WSUOYoQAAAJc"]
[Thu May 07 08:00:17.578866 2026] [:error] [pid 29607:tid 29688] [client 20.43.20.252:10802] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afvWEabP7TJOAh7WSUOYowAAAJQ"]
[Thu May 07 08:00:17.995208 2026] [:error] [pid 29607:tid 29684] [client 20.43.20.252:10694] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afvWEabP7TJOAh7WSUOYpQAAAJA"]
[Thu May 07 08:00:18.418329 2026] [:error] [pid 29607:tid 29679] [client 20.43.20.252:10720] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "afvWEqbP7TJOAh7WSUOYpgAAAIs"]
[Thu May 07 08:00:18.843214 2026] [:error] [pid 29607:tid 29671] [client 20.43.20.252:10784] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afvWEqbP7TJOAh7WSUOYpwAAAIM"]
[Thu May 07 08:00:19.267802 2026] [:error] [pid 29606:tid 29661] [client 20.43.20.252:10771] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afvWExR5HjZ1PlSAiKuJAgAAAFQ"]
[Thu May 07 08:00:19.691324 2026] [:error] [pid 29607:tid 29674] [client 20.43.20.252:10795] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afvWE6bP7TJOAh7WSUOYqgAAAIY"]
[Thu May 07 08:00:20.110341 2026] [:error] [pid 29710:tid 29717] [client 20.43.20.252:10744] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "afvWFP0atTQld9Y2ht8W5wAAAMU"]
[Thu May 07 08:00:20.531963 2026] [:error] [pid 4539:tid 4544] [client 20.43.20.252:10785] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afvWFIPEZE1565sDGnx6bQAAAQM"]
[Thu May 07 08:00:20.953575 2026] [:error] [pid 29710:tid 29734] [client 20.43.20.252:10631] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afvWFP0atTQld9Y2ht8W6wAAANY"]
[Thu May 07 08:00:21.371372 2026] [:error] [pid 4539:tid 4562] [client 20.43.20.252:10838] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afvWFYPEZE1565sDGnx6cQAAARU"]
[Thu May 07 08:00:21.793557 2026] [:error] [pid 29607:tid 29678] [client 20.43.20.252:10807] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "afvWFabP7TJOAh7WSUOYrAAAAIo"]
[Thu May 07 08:00:22.204160 2026] [:error] [pid 4539:tid 4558] [client 20.43.20.252:10757] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "afvWFoPEZE1565sDGnx6dQAAARE"]
[Thu May 07 08:00:22.619577 2026] [:error] [pid 29607:tid 29680] [client 20.43.20.252:10693] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "afvWFqbP7TJOAh7WSUOYsAAAAIw"]
[Thu May 07 08:00:23.033335 2026] [:error] [pid 29607:tid 29688] [client 20.43.20.252:10841] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "afvWF6bP7TJOAh7WSUOYsQAAAJQ"]
[Thu May 07 08:00:23.492040 2026] [:error] [pid 29607:tid 29684] [client 20.43.20.252:10798] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file18.php"] [unique_id "afvWF6bP7TJOAh7WSUOYtQAAAJA"]
[Thu May 07 08:00:23.946116 2026] [:error] [pid 29607:tid 29685] [client 20.43.20.252:10724] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvWF6bP7TJOAh7WSUOYtgAAAJE"]
[Thu May 07 08:00:24.375631 2026] [:error] [pid 29607:tid 29689] [client 20.43.20.252:10775] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvWGKbP7TJOAh7WSUOYuQAAAJU"]
[Thu May 07 08:00:24.790287 2026] [:error] [pid 29607:tid 29670] [client 20.43.20.252:10797] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvWGKbP7TJOAh7WSUOYvAAAAII"]
[Thu May 07 08:00:25.210725 2026] [:error] [pid 29607:tid 29692] [client 20.43.20.252:10726] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afvWGabP7TJOAh7WSUOYvQAAAJg"]
[Thu May 07 08:00:25.629521 2026] [:error] [pid 4539:tid 4549] [client 20.43.20.252:10733] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afvWGYPEZE1565sDGnx6fAAAAQg"]
[Thu May 07 08:00:26.042144 2026] [:error] [pid 29607:tid 29678] [client 20.43.20.252:10700] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afvWGqbP7TJOAh7WSUOYwAAAAIo"]
[Thu May 07 08:00:26.457506 2026] [:error] [pid 29607:tid 29683] [client 20.43.20.252:10806] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afvWGqbP7TJOAh7WSUOYwQAAAI8"]
[Thu May 07 08:00:26.883392 2026] [:error] [pid 29607:tid 29682] [client 20.43.20.252:10790] [client 20.43.20.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "afvWGqbP7TJOAh7WSUOYwwAAAI4"]
[Thu May 07 10:14:41.920051 2026] [:error] [pid 56064:tid 56091] [client 43.159.145.149:54488] [client 43.159.145.149] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afv1kSsGkZZUEf_7QCMSgQAAABY"]
[Thu May 07 13:42:37.942703 2026] [:error] [pid 56064:tid 56090] [client 43.133.36.219:43092] [client 43.133.36.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afwmTSsGkZZUEf_7QCMxMwAAABU"]
[Thu May 07 13:42:39.475813 2026] [:error] [pid 56056:tid 56059] [client 34.29.233.167:60884] [client 34.29.233.167] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.29.233.167, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afwmTwMt_VAuBmZ2nR90BgAAAUE"]
[Thu May 07 13:42:39.479667 2026] [:error] [pid 56056:tid 56059] [client 34.29.233.167:60884] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 13:42:41.690866 2026] [:error] [pid 56056:tid 56187] [client 34.29.233.167:60884] [client 34.29.233.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afwmUQMt_VAuBmZ2nR90EwAAAVU"]
[Thu May 07 13:42:42.479937 2026] [:error] [pid 1143:tid 1147] [client 34.29.233.167:63524] [client 34.29.233.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afwmUpb7qeI8X5VYRr6UcAAAAQI"]
[Thu May 07 13:42:43.101326 2026] [:error] [pid 56056:tid 56068] [client 34.29.233.167:62417] [client 34.29.233.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afwmUwMt_VAuBmZ2nR90FgAAAUc"]
[Thu May 07 13:42:44.170126 2026] [:error] [pid 1143:tid 1168] [client 34.29.233.167:56407] [client 34.29.233.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afwmVJb7qeI8X5VYRr6UcwAAARc"]
[Thu May 07 13:42:44.964251 2026] [:error] [pid 56056:tid 56185] [client 34.29.233.167:54981] [client 34.29.233.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afwmVAMt_VAuBmZ2nR90FwAAAVM"]
[Thu May 07 13:42:46.234131 2026] [:error] [pid 56056:tid 56151] [client 34.29.233.167:58258] [client 34.29.233.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afwmVgMt_VAuBmZ2nR90GQAAAUs"]
[Thu May 07 13:42:47.352597 2026] [:error] [pid 56056:tid 56149] [client 34.29.233.167:52490] [client 34.29.233.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afwmVwMt_VAuBmZ2nR90HAAAAUo"]
[Thu May 07 14:28:22.193328 2026] [:error] [pid 15630:tid 15675] [client 43.159.148.221:46972] [client 43.159.148.221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afwxBnTithRAi4821quB0gAAAI8"]
[Thu May 07 15:33:20.528456 2026] [:error] [pid 15629:tid 15646] [client 103.178.142.81:61873] [client 103.178.142.81] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.178.142.81, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afxAQPrIJCALdUrO43lZVAAAAA0"]
[Thu May 07 15:33:20.533688 2026] [:error] [pid 15629:tid 15646] [client 103.178.142.81:61873] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 17:05:50.905106 2026] [:error] [pid 15630:tid 15680] [client 43.166.245.120:51070] [client 43.166.245.120] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afxV7nTithRAi4821qudrwAAAJQ"]
[Thu May 07 17:35:05.638800 2026] [:error] [pid 28098:tid 28119] [client 129.226.210.142:56520] [client 129.226.210.142] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afxcycvhwfljlt8trSq3eQAAAFM"]
[Thu May 07 17:41:56.701849 2026] [:error] [pid 15715:tid 15736] [client 34.86.88.108:57363] [client 34.86.88.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.86.88.108, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afxeZCY4dZsLOttMkcd_oAAAARA"]
[Thu May 07 17:41:56.705861 2026] [:error] [pid 15715:tid 15736] [client 34.86.88.108:57363] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 17:42:00.465086 2026] [:error] [pid 15715:tid 15721] [client 34.86.88.108:57363] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afxeaCY4dZsLOttMkcd_sAAAAQQ"]
[Thu May 07 17:42:01.104926 2026] [:error] [pid 28098:tid 28108] [client 34.86.88.108:58969] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxeacvhwfljlt8trSq8BAAAAEg"]
[Thu May 07 17:42:01.792731 2026] [:error] [pid 28098:tid 28119] [client 34.86.88.108:54621] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxeacvhwfljlt8trSq8BQAAAFM"]
[Thu May 07 17:42:02.565957 2026] [:error] [pid 15629:tid 15651] [client 34.86.88.108:60563] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxeavrIJCALdUrO43lnywAAABI"]
[Thu May 07 17:42:03.446865 2026] [:error] [pid 15631:tid 15711] [client 34.86.88.108:51592] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxea3vP1GkPUuuLfqUlOwAAANg"]
[Thu May 07 17:42:04.280664 2026] [:error] [pid 15630:tid 15672] [client 34.86.88.108:51309] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxebHTithRAi4821quhggAAAIw"]
[Thu May 07 17:42:05.099108 2026] [:error] [pid 15630:tid 15661] [client 34.86.88.108:55157] [client 34.86.88.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxebXTithRAi4821quhgwAAAIE"]
[Thu May 07 17:43:02.173200 2026] [:error] [pid 28098:tid 28120] [client 34.30.134.154:57943] [client 34.30.134.154] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.134.154, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "afxepsvhwfljlt8trSq8LgAAAFQ"]
[Thu May 07 17:43:02.177278 2026] [:error] [pid 28098:tid 28120] [client 34.30.134.154:57943] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 17:43:04.895133 2026] [:error] [pid 28098:tid 28109] [client 34.30.134.154:57943] [client 34.30.134.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afxeqMvhwfljlt8trSq8OQAAAEk"]
[Thu May 07 17:43:05.544591 2026] [:error] [pid 28098:tid 28117] [client 34.30.134.154:63725] [client 34.30.134.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxeqcvhwfljlt8trSq8OgAAAFE"]
[Thu May 07 17:43:06.258331 2026] [:error] [pid 28098:tid 28122] [client 34.30.134.154:59683] [client 34.30.134.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxeqsvhwfljlt8trSq8OwAAAFY"]
[Thu May 07 17:43:06.757212 2026] [:error] [pid 15715:tid 15723] [client 34.30.134.154:52710] [client 34.30.134.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxeqiY4dZsLOttMkcd_2AAAAQY"]
[Thu May 07 17:43:07.485002 2026] [:error] [pid 28098:tid 28121] [client 34.30.134.154:50937] [client 34.30.134.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxeq8vhwfljlt8trSq8PQAAAFU"]
[Thu May 07 17:43:08.223580 2026] [:error] [pid 28098:tid 28124] [client 34.30.134.154:50957] [client 34.30.134.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxerMvhwfljlt8trSq8PgAAAFg"]
[Thu May 07 17:43:08.865311 2026] [:error] [pid 28098:tid 28107] [client 34.30.134.154:54903] [client 34.30.134.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxerMvhwfljlt8trSq8PwAAAEc"]
[Thu May 07 21:06:01.852623 2026] [:error] [pid 28098:tid 28109] [client 43.130.16.212:38768] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afyOOcvhwfljlt8trSoAAwAAAEk"]
[Thu May 07 23:18:09.577361 2026] [:error] [pid 15630:tid 15674] [client 158.173.67.93:63197] [client 158.173.67.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "afytMXTithRAi4821qvVDgAAAI4"]
[Fri May 08 04:17:23.013331 2026] [:error] [pid 51009:tid 51082] [client 43.163.104.54:48714] [client 43.163.104.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "afzzU-B0GbUWhxgzX9V_dAAAAIY"]
[Fri May 08 04:53:43.846432 2026] [:error] [pid 51113:tid 51130] [client 34.100.253.85:53630] [client 34.100.253.85] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "afz710Qfs7sWtqkpQIfyrQAAAM8"]
[Fri May 08 05:35:20.966921 2026] [:error] [pid 34318:tid 34328] [client 43.134.5.250:47064] [client 43.134.5.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af0FmMr3guirgJiKhzBRjQAAAQg"]
[Fri May 08 06:30:27.853100 2026] [:error] [pid 51008:tid 51058] [client 34.32.66.104:47036] [client 34.32.66.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "af0Sg3B58C2Y1tgLtuITUgAAAEk"]
[Fri May 08 10:55:06.616536 2026] [:error] [pid 51113:tid 51125] [client 103.156.164.22:20564] [client 103.156.164.22] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.156.164.22, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "af1QikQfs7sWtqkpQIdIowAAAMo"]
[Fri May 08 10:55:06.621289 2026] [:error] [pid 51113:tid 51125] [client 103.156.164.22:20564] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 13:15:11.436531 2026] [:error] [pid 51007:tid 51028] [client 43.140.247.223:35366] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af1xX1MagSGstWKyzzW4jgAAAAY"]
[Fri May 08 13:55:42.104047 2026] [:error] [pid 61317:tid 61332] [client 43.157.188.74:49750] [client 43.157.188.74] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af163s-fFk_CedOCOYuDgwAAAUw"]
[Fri May 08 14:55:00.133233 2026] [:error] [pid 61355:tid 61382] [client 43.134.49.216:57926] [client 43.134.49.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "af2IxPkhJTi30CBXmMlX3gAAAZU"]
[Fri May 08 15:28:56.862492 2026] [:error] [pid 61356:tid 61405] [client 34.122.144.100:50628] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "af2QuIx3vpB8oWhUq2M0_AAAAdE"]
[Fri May 08 15:28:57.236041 2026] [:error] [pid 61355:tid 61364] [client 34.122.144.100:54048] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af2QufkhJTi30CBXmMlergAAAYM"]
[Fri May 08 15:28:57.693071 2026] [:error] [pid 51008:tid 51072] [client 34.122.144.100:64515] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "af2QuXB58C2Y1tgLtuJztAAAAFc"]
[Fri May 08 15:28:58.076183 2026] [:error] [pid 51009:tid 51079] [client 34.122.144.100:61053] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "af2QuuB0GbUWhxgzX9X4uwAAAIM"]
[Fri May 08 15:28:58.524241 2026] [:error] [pid 51009:tid 51099] [client 34.122.144.100:60241] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "af2QuuB0GbUWhxgzX9X4zQAAAJc"]
[Fri May 08 15:28:58.914560 2026] [:error] [pid 51008:tid 51067] [client 34.122.144.100:52823] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "af2QunB58C2Y1tgLtuJzuwAAAFI"]
[Fri May 08 15:28:59.301538 2026] [:error] [pid 51009:tid 51081] [client 34.122.144.100:56826] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "af2Qu-B0GbUWhxgzX9X45gAAAIU"]
[Fri May 08 15:28:59.751722 2026] [:error] [pid 51008:tid 51068] [client 34.122.144.100:52829] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "af2Qu3B58C2Y1tgLtuJzxgAAAFM"]
[Fri May 08 15:29:00.203893 2026] [:error] [pid 61355:tid 61377] [client 34.122.144.100:63083] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "af2QvPkhJTi30CBXmMle2QAAAZA"]
[Fri May 08 15:29:00.703176 2026] [:error] [pid 51007:tid 51024] [client 34.122.144.100:52628] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "af2QvFMagSGstWKyzzXHzgAAAAI"]
[Fri May 08 15:29:01.186103 2026] [:error] [pid 61355:tid 61377] [client 34.122.144.100:57728] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "af2QvfkhJTi30CBXmMle6QAAAZA"]
[Fri May 08 17:58:53.231508 2026] [:error] [pid 34318:tid 34333] [client 162.62.213.187:42826] [client 162.62.213.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "af2z3cr3guirgJiKhzDIHwAAAQ0"]
[Fri May 08 20:11:42.978078 2026] [:error] [pid 61356:tid 61411] [client 13.79.87.25:1119] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri May 08 20:11:43.245023 2026] [:error] [pid 61356:tid 61402] [client 13.79.87.25:1119] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri May 08 20:11:43.512691 2026] [:error] [pid 61356:tid 61392] [client 13.79.87.25:1119] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri May 08 20:11:43.780156 2026] [:error] [pid 61356:tid 61395] [client 13.79.87.25:1119] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri May 08 20:11:44.047037 2026] [:error] [pid 61356:tid 61391] [client 13.79.87.25:1119] File does not exist: /usr/local/apache/htdocs/suspended-page/mac.php
[Fri May 08 21:19:28.232684 2026] [:error] [pid 61356:tid 61397] [client 34.133.194.185:62865] [client 34.133.194.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.133.194.185, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "af3i4Ix3vpB8oWhUq2PC-AAAAck"]
[Fri May 08 21:19:28.237692 2026] [:error] [pid 61356:tid 61397] [client 34.133.194.185:62865] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 21:19:32.087434 2026] [:error] [pid 61356:tid 61391] [client 34.133.194.185:62865] [client 34.133.194.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "af3i5Ix3vpB8oWhUq2PDCQAAAcM"]
[Fri May 08 21:19:32.511399 2026] [:error] [pid 61317:tid 61344] [client 34.133.194.185:61231] [client 34.133.194.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "af3i5M-fFk_CedOCOYvStwAAAVg"]
[Fri May 08 21:19:32.968194 2026] [:error] [pid 34318:tid 34340] [client 34.133.194.185:63594] [client 34.133.194.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "af3i5Mr3guirgJiKhzDg3AAAARQ"]
[Fri May 08 21:19:33.432404 2026] [:error] [pid 51009:tid 51076] [client 34.133.194.185:65356] [client 34.133.194.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af3i5eB0GbUWhxgzX9VLiwAAAIA"]
[Fri May 08 21:19:33.851827 2026] [:error] [pid 61355:tid 61373] [client 34.133.194.185:55649] [client 34.133.194.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "af3i5fkhJTi30CBXmMnAnwAAAYw"]
[Fri May 08 21:19:34.403891 2026] [:error] [pid 51009:tid 51088] [client 34.133.194.185:54750] [client 34.133.194.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "af3i5uB0GbUWhxgzX9VLjAAAAIw"]
[Fri May 08 21:19:34.821250 2026] [:error] [pid 51009:tid 51095] [client 34.133.194.185:49876] [client 34.133.194.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "af3i5uB0GbUWhxgzX9VLjgAAAJM"]
[Sat May 09 00:56:05.466696 2026] [:error] [pid 61355:tid 61384] [client 142.248.80.245:12856] [client 142.248.80.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "af4VpfkhJTi30CBXmMkS6wAAAZc"]
[Sat May 09 00:56:05.473672 2026] [:error] [pid 51008:tid 51052] [client 142.248.80.245:26304] [client 142.248.80.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "af4VpXB58C2Y1tgLtuLOmwAAAEM"]
[Sat May 09 00:56:05.473844 2026] [:error] [pid 61355:tid 61369] [client 142.248.80.245:26324] [client 142.248.80.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "af4VpfkhJTi30CBXmMkS7QAAAYg"]
[Sat May 09 00:56:05.474367 2026] [:error] [pid 61355:tid 61383] [client 142.248.80.245:26320] [client 142.248.80.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "af4VpfkhJTi30CBXmMkS7gAAAZY"]
[Sat May 09 00:56:05.474583 2026] [:error] [pid 61355:tid 61369] [client 142.248.80.245:26332] [client 142.248.80.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "af4VpfkhJTi30CBXmMkS7wAAAYg"]
[Sat May 09 00:56:05.475458 2026] [:error] [pid 61355:tid 61371] [client 142.248.80.245:26338] [client 142.248.80.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "af4VpfkhJTi30CBXmMkS8QAAAYo"]
[Sat May 09 01:23:49.541860 2026] [:error] [pid 51009:tid 51093] [client 13.204.255.203:57312] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "af4cJeB0GbUWhxgzX9WNxAAAAJE"]
[Sat May 09 01:23:50.347655 2026] [:error] [pid 34318:tid 34340] [client 13.204.255.203:57318] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4cJsr3guirgJiKhzAB_wAAARQ"]
[Sat May 09 01:23:50.977793 2026] [:error] [pid 61356:tid 61412] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 01:23:51.138519 2026] [:error] [pid 61356:tid 61408] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 01:23:51.300454 2026] [:error] [pid 61356:tid 61406] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 01:23:51.460547 2026] [:error] [pid 61356:tid 61410] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 01:23:51.621267 2026] [:error] [pid 61356:tid 61394] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sat May 09 01:23:53.231113 2026] [:error] [pid 61356:tid 61394] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sat May 09 01:23:53.390894 2026] [:error] [pid 61356:tid 61408] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat May 09 01:23:53.710439 2026] [:error] [pid 61356:tid 61410] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat May 09 01:23:53.869988 2026] [:error] [pid 61356:tid 61391] [client 13.204.255.203:57332] File does not exist: /usr/local/apache/htdocs/suspended-page/debug.php
[Sat May 09 01:23:54.186302 2026] [:error] [pid 61356:tid 61389] [client 13.204.255.203:57332] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4cKox3vpB8oWhUq2Mi1QAAAcE"]
[Sat May 09 01:23:54.817420 2026] [:error] [pid 51009:tid 51094] [client 13.204.255.203:49046] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4cKuB0GbUWhxgzX9WNzgAAAJI"]
[Sat May 09 01:23:55.448021 2026] [:error] [pid 61356:tid 61409] [client 13.204.255.203:49062] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4cK4x3vpB8oWhUq2Mi2AAAAdU"]
[Sat May 09 01:23:56.083795 2026] [:error] [pid 51007:tid 51037] [client 13.204.255.203:49076] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4cLFMagSGstWKyzzUYgAAAAA8"]
[Sat May 09 01:23:56.718191 2026] [:error] [pid 51113:tid 51138] [client 13.204.255.203:49092] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4cLEQfs7sWtqkpQIeZ2AAAANc"]
[Sat May 09 01:23:57.345059 2026] [:error] [pid 61356:tid 61389] [client 13.204.255.203:49096] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info"] [unique_id "af4cLYx3vpB8oWhUq2Mi4QAAAcE"]
[Sat May 09 01:23:57.969290 2026] [:error] [pid 51009:tid 51090] [client 13.204.255.203:49104] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/php-info.php"] [unique_id "af4cLeB0GbUWhxgzX9WN0AAAAI4"]
[Sat May 09 01:23:58.604141 2026] [:error] [pid 51009:tid 51078] [client 13.204.255.203:49120] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpversion.php"] [unique_id "af4cLuB0GbUWhxgzX9WN0wAAAII"]
[Sat May 09 01:23:59.230764 2026] [:error] [pid 51009:tid 51084] [client 13.204.255.203:49134] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/_phpinfo.php"] [unique_id "af4cL-B0GbUWhxgzX9WN1QAAAIg"]
[Sat May 09 01:23:59.861040 2026] [:error] [pid 51009:tid 51091] [client 13.204.255.203:49138] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4cL-B0GbUWhxgzX9WN1wAAAI8"]
[Sat May 09 01:24:00.494528 2026] [:error] [pid 61355:tid 61383] [client 13.204.255.203:49154] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/server-info.php"] [unique_id "af4cMPkhJTi30CBXmMkoxwAAAZY"]
[Sat May 09 01:24:01.123611 2026] [:error] [pid 51009:tid 51097] [client 13.204.255.203:49166] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/server-status.php"] [unique_id "af4cMeB0GbUWhxgzX9WN2wAAAJU"]
[Sat May 09 01:24:01.755069 2026] [:error] [pid 61317:tid 61321] [client 13.204.255.203:49182] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4cMc-fFk_CedOCOYsJEwAAAUE"]
[Sat May 09 01:24:02.392656 2026] [:error] [pid 61317:tid 61322] [client 13.204.255.203:49192] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/_environment"] [unique_id "af4cMs-fFk_CedOCOYsJFgAAAUI"]
[Sat May 09 01:24:03.034874 2026] [:error] [pid 61317:tid 61339] [client 13.204.255.203:49204] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4cM8-fFk_CedOCOYsJGQAAAVM"]
[Sat May 09 01:24:03.667600 2026] [:error] [pid 61355:tid 61362] [client 13.204.255.203:60470] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4cM_khJTi30CBXmMko1AAAAYE"]
[Sat May 09 01:24:04.300791 2026] [:error] [pid 51007:tid 51046] [client 13.204.255.203:60474] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4cNFMagSGstWKyzzUYhQAAABg"]
[Sat May 09 01:24:04.931915 2026] [:error] [pid 51007:tid 51024] [client 13.204.255.203:60484] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4cNFMagSGstWKyzzUYiAAAAAI"]
[Sat May 09 01:24:05.563969 2026] [:error] [pid 61355:tid 61361] [client 13.204.255.203:60494] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4cNfkhJTi30CBXmMko9AAAAYA"]
[Sat May 09 01:24:06.197663 2026] [:error] [pid 51007:tid 51045] [client 13.204.255.203:60496] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4cNlMagSGstWKyzzUYjwAAABc"]
[Sat May 09 01:24:06.824858 2026] [:error] [pid 61355:tid 61368] [client 13.204.255.203:60502] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4cNvkhJTi30CBXmMkpDwAAAYc"]
[Sat May 09 01:24:07.455738 2026] [:error] [pid 51008:tid 51063] [client 13.204.255.203:60506] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4cN3B58C2Y1tgLtuLYSQAAAE4"]
[Sat May 09 01:24:08.080708 2026] [:error] [pid 61355:tid 61373] [client 13.204.255.203:60518] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo.php~"] [unique_id "af4cOPkhJTi30CBXmMkpFwAAAYw"]
[Sat May 09 01:24:08.711189 2026] [:error] [pid 51009:tid 51093] [client 13.204.255.203:60520] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/info.php.bak"] [unique_id "af4cOOB0GbUWhxgzX9WN5QAAAJE"]
[Sat May 09 01:24:09.344101 2026] [:error] [pid 61355:tid 61377] [client 13.204.255.203:60524] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4cOfkhJTi30CBXmMkpKwAAAZA"]
[Sat May 09 01:24:09.975663 2026] [:error] [pid 61355:tid 61383] [client 13.204.255.203:60536] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4cOfkhJTi30CBXmMkpNQAAAZY"]
[Sat May 09 01:24:10.607838 2026] [:error] [pid 51009:tid 51090] [client 13.204.255.203:60552] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4cOuB0GbUWhxgzX9WN6gAAAI4"]
[Sat May 09 01:24:11.239272 2026] [:error] [pid 51008:tid 51062] [client 13.204.255.203:60554] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4cO3B58C2Y1tgLtuLYTwAAAE0"]
[Sat May 09 01:24:11.889856 2026] [:error] [pid 61356:tid 61409] [client 13.204.255.203:60560] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4cO4x3vpB8oWhUq2MjCgAAAdU"]
[Sat May 09 01:24:12.515782 2026] [:error] [pid 51009:tid 51085] [client 13.204.255.203:60574] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4cPOB0GbUWhxgzX9WN7QAAAIk"]
[Sat May 09 01:24:13.146028 2026] [:error] [pid 61355:tid 61378] [client 13.204.255.203:60580] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4cPfkhJTi30CBXmMkpRwAAAZE"]
[Sat May 09 01:24:13.773353 2026] [:error] [pid 51009:tid 51100] [client 13.204.255.203:45682] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4cPeB0GbUWhxgzX9WN9gAAAJg"]
[Sat May 09 01:24:14.402928 2026] [:error] [pid 61356:tid 61401] [client 13.204.255.203:45692] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4cPox3vpB8oWhUq2MjGQAAAc0"]
[Sat May 09 01:24:15.030451 2026] [:error] [pid 61355:tid 61383] [client 13.204.255.203:45708] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4cP_khJTi30CBXmMkpVQAAAZY"]
[Sat May 09 01:24:15.660519 2026] [:error] [pid 51009:tid 51099] [client 13.204.255.203:45716] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4cP-B0GbUWhxgzX9WN_wAAAJc"]
[Sat May 09 01:24:16.288867 2026] [:error] [pid 51009:tid 51085] [client 13.204.255.203:45718] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4cQOB0GbUWhxgzX9WOBAAAAIk"]
[Sat May 09 01:24:16.919701 2026] [:error] [pid 61355:tid 61381] [client 13.204.255.203:45724] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4cQPkhJTi30CBXmMkpYQAAAZQ"]
[Sat May 09 01:24:17.550190 2026] [:error] [pid 61355:tid 61382] [client 13.204.255.203:45736] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4cQfkhJTi30CBXmMkpawAAAZU"]
[Sat May 09 01:24:18.181024 2026] [:error] [pid 61317:tid 61330] [client 13.204.255.203:45746] [client 13.204.255.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4cQs-fFk_CedOCOYsJSAAAAUo"]
[Sat May 09 01:53:00.153656 2026] [:error] [pid 61355:tid 61385] [client 34.242.120.180:60460] [client 34.242.120.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "af4i_PkhJTi30CBXmMlFTQAAAZg"]
[Sat May 09 01:53:01.456533 2026] [:error] [pid 61356:tid 61398] [client 34.242.120.180:60472] [client 34.242.120.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4i_Yx3vpB8oWhUq2M05wAAAco"]
[Sat May 09 01:53:02.484279 2026] [:error] [pid 61355:tid 61367] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 01:53:03.960685 2026] [:error] [pid 61355:tid 61375] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 01:53:04.222829 2026] [:error] [pid 61355:tid 61369] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 01:53:04.481722 2026] [:error] [pid 61355:tid 61382] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 01:53:04.740619 2026] [:error] [pid 61355:tid 61378] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sat May 09 01:53:05.000658 2026] [:error] [pid 61355:tid 61384] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sat May 09 01:53:05.259618 2026] [:error] [pid 61355:tid 61362] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat May 09 01:53:05.780710 2026] [:error] [pid 61355:tid 61373] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat May 09 01:53:06.039515 2026] [:error] [pid 61355:tid 61379] [client 34.242.120.180:60480] File does not exist: /usr/local/apache/htdocs/suspended-page/debug.php
[Sat May 09 01:53:06.557508 2026] [:error] [pid 61355:tid 61385] [client 34.242.120.180:60480] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4jAvkhJTi30CBXmMlFXAAAAZg"]
[Sat May 09 01:53:07.842332 2026] [:error] [pid 34318:tid 34341] [client 34.242.120.180:59702] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4jA8r3guirgJiKhzAHqwAAARU"]
[Sat May 09 01:53:08.874294 2026] [:error] [pid 51007:tid 51026] [client 34.242.120.180:59710] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4jBFMagSGstWKyzzUgNgAAAAQ"]
[Sat May 09 01:53:09.902649 2026] [:error] [pid 61355:tid 61367] [client 34.242.120.180:59718] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4jBfkhJTi30CBXmMlFYwAAAYY"]
[Sat May 09 01:53:10.932642 2026] [:error] [pid 61356:tid 61401] [client 34.242.120.180:59734] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4jBox3vpB8oWhUq2M08QAAAc0"]
[Sat May 09 01:53:11.960685 2026] [:error] [pid 51008:tid 51065] [client 34.242.120.180:59748] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info"] [unique_id "af4jB3B58C2Y1tgLtuLg9gAAAFA"]
[Sat May 09 01:53:12.991961 2026] [:error] [pid 51113:tid 51119] [client 34.242.120.180:59758] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php-info.php"] [unique_id "af4jCEQfs7sWtqkpQIeeigAAAMQ"]
[Sat May 09 01:53:14.018193 2026] [:error] [pid 51009:tid 51079] [client 34.242.120.180:58058] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpversion.php"] [unique_id "af4jCuB0GbUWhxgzX9Wc4QAAAIM"]
[Sat May 09 01:53:15.047083 2026] [:error] [pid 51008:tid 51069] [client 34.242.120.180:58060] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_phpinfo.php"] [unique_id "af4jC3B58C2Y1tgLtuLhAgAAAFQ"]
[Sat May 09 01:53:16.076472 2026] [:error] [pid 51008:tid 51062] [client 34.242.120.180:58076] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4jDHB58C2Y1tgLtuLhCAAAAE0"]
[Sat May 09 01:53:17.098033 2026] [:error] [pid 61356:tid 61411] [client 34.242.120.180:58082] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server-info.php"] [unique_id "af4jDYx3vpB8oWhUq2M09QAAAdc"]
[Sat May 09 01:53:18.124287 2026] [:error] [pid 61356:tid 61393] [client 34.242.120.180:58086] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/server-status.php"] [unique_id "af4jDox3vpB8oWhUq2M0-QAAAcU"]
[Sat May 09 01:53:19.161280 2026] [:error] [pid 61317:tid 61325] [client 34.242.120.180:58096] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4jD8-fFk_CedOCOYsTyAAAAUU"]
[Sat May 09 01:53:20.195323 2026] [:error] [pid 61317:tid 61335] [client 34.242.120.180:58098] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/_environment"] [unique_id "af4jEM-fFk_CedOCOYsTygAAAU8"]
[Sat May 09 01:53:21.227712 2026] [:error] [pid 61356:tid 61401] [client 34.242.120.180:58110] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4jEYx3vpB8oWhUq2M1AgAAAc0"]
[Sat May 09 01:53:22.254316 2026] [:error] [pid 34318:tid 34337] [client 34.242.120.180:58122] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4jEsr3guirgJiKhzAH6AAAARE"]
[Sat May 09 01:53:23.280483 2026] [:error] [pid 61355:tid 61381] [client 34.242.120.180:44940] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4jE_khJTi30CBXmMlFZwAAAZQ"]
[Sat May 09 01:53:24.314635 2026] [:error] [pid 61355:tid 61377] [client 34.242.120.180:44950] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4jFPkhJTi30CBXmMlFbAAAAZA"]
[Sat May 09 01:53:25.342881 2026] [:error] [pid 51113:tid 51117] [client 34.242.120.180:44962] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4jFUQfs7sWtqkpQIeejQAAAMI"]
[Sat May 09 01:53:26.365848 2026] [:error] [pid 61356:tid 61407] [client 34.242.120.180:44974] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4jFox3vpB8oWhUq2M1CQAAAdM"]
[Sat May 09 01:53:27.398551 2026] [:error] [pid 51009:tid 51096] [client 34.242.120.180:44990] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4jF-B0GbUWhxgzX9Wc7QAAAJQ"]
[Sat May 09 01:53:28.427965 2026] [:error] [pid 51007:tid 51041] [client 34.242.120.180:44992] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4jGFMagSGstWKyzzUgQwAAABM"]
[Sat May 09 01:53:29.456013 2026] [:error] [pid 61355:tid 61362] [client 34.242.120.180:45006] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php~"] [unique_id "af4jGfkhJTi30CBXmMlFcAAAAYE"]
[Sat May 09 01:53:30.493340 2026] [:error] [pid 61355:tid 61385] [client 34.242.120.180:45014] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php.bak"] [unique_id "af4jGvkhJTi30CBXmMlFdAAAAZg"]
[Sat May 09 01:53:31.539176 2026] [:error] [pid 51113:tid 51134] [client 34.242.120.180:45026] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4jG0Qfs7sWtqkpQIeejwAAANM"]
[Sat May 09 01:53:32.572345 2026] [:error] [pid 61317:tid 61339] [client 34.242.120.180:45040] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4jHM-fFk_CedOCOYsTzQAAAVM"]
[Sat May 09 01:53:33.618836 2026] [:error] [pid 51007:tid 51046] [client 34.242.120.180:55848] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4jHVMagSGstWKyzzUgSAAAABg"]
[Sat May 09 01:53:34.646722 2026] [:error] [pid 61355:tid 61364] [client 34.242.120.180:55860] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4jHvkhJTi30CBXmMlFegAAAYM"]
[Sat May 09 01:53:35.689467 2026] [:error] [pid 51008:tid 51064] [client 34.242.120.180:55876] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4jH3B58C2Y1tgLtuLhRAAAAE8"]
[Sat May 09 01:53:36.717493 2026] [:error] [pid 61317:tid 61334] [client 34.242.120.180:55892] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4jIM-fFk_CedOCOYsT0AAAAU4"]
[Sat May 09 01:53:37.744837 2026] [:error] [pid 51007:tid 51025] [client 34.242.120.180:55894] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4jIVMagSGstWKyzzUgTgAAAAM"]
[Sat May 09 01:53:38.777824 2026] [:error] [pid 51009:tid 51098] [client 34.242.120.180:55906] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4jIuB0GbUWhxgzX9Wc9wAAAJY"]
[Sat May 09 01:53:39.809873 2026] [:error] [pid 61355:tid 61372] [client 34.242.120.180:55918] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4jI_khJTi30CBXmMlFhAAAAYs"]
[Sat May 09 01:53:40.837147 2026] [:error] [pid 51009:tid 51100] [client 34.242.120.180:55930] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4jJOB0GbUWhxgzX9Wc_QAAAJg"]
[Sat May 09 01:53:41.861980 2026] [:error] [pid 61356:tid 61398] [client 34.242.120.180:55936] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4jJYx3vpB8oWhUq2M1GwAAAco"]
[Sat May 09 01:53:42.887061 2026] [:error] [pid 61356:tid 61388] [client 34.242.120.180:55942] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4jJox3vpB8oWhUq2M1HgAAAcA"]
[Sat May 09 01:53:43.921097 2026] [:error] [pid 61355:tid 61367] [client 34.242.120.180:38802] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4jJ_khJTi30CBXmMlFkQAAAYY"]
[Sat May 09 01:53:44.948164 2026] [:error] [pid 61355:tid 61373] [client 34.242.120.180:38816] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4jKPkhJTi30CBXmMlFmAAAAYw"]
[Sat May 09 01:53:45.974217 2026] [:error] [pid 61355:tid 61385] [client 34.242.120.180:38828] [client 34.242.120.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4jKfkhJTi30CBXmMlFnAAAAZg"]
[Sat May 09 03:54:24.743201 2026] [:error] [pid 36204:tid 36245] [client 34.50.121.45:33342] [client 34.50.121.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "af4_cLeqVewMy0ybiioMkgAAAEA"]
[Sat May 09 04:00:18.097569 2026] [:error] [pid 9186:tid 9227] [client 45.92.229.131:49787] [client 45.92.229.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.131, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "af5A0hW4eFOEw1mKOgJe_AAAAEE"]
[Sat May 09 04:00:18.100788 2026] [:error] [pid 9186:tid 9227] [client 45.92.229.131:49787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat May 09 04:10:42.737784 2026] [:error] [pid 9833:tid 9845] [client 13.204.255.203:45708] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "af5DQiM9JmxIS0KGZUAfHwAAAYc"]
[Sat May 09 04:10:43.537767 2026] [:error] [pid 9186:tid 9249] [client 13.204.255.203:45712] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "af5DQxW4eFOEw1mKOgJhHAAAAFc"]
[Sat May 09 04:10:44.172134 2026] [:error] [pid 9293:tid 9297] [client 13.204.255.203:32944] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "af5DRJR__qEzV5O6Z2OMqwAAAMA"]
[Sat May 09 04:10:44.801985 2026] [:error] [pid 9293:tid 9320] [client 13.204.255.203:32960] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "af5DRJR__qEzV5O6Z2OMrQAAANc"]
[Sat May 09 04:10:45.434380 2026] [:error] [pid 9760:tid 9790] [client 13.204.255.203:32974] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.staging"] [unique_id "af5DRWIkCp-C_fh0s7L13gAAAVg"]
[Sat May 09 04:10:46.066935 2026] [:error] [pid 9760:tid 9768] [client 13.204.255.203:32986] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "af5DRmIkCp-C_fh0s7L14wAAAUI"]
[Sat May 09 04:10:46.708075 2026] [:error] [pid 9833:tid 9854] [client 13.204.255.203:32996] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.test"] [unique_id "af5DRiM9JmxIS0KGZUAfIgAAAZA"]
[Sat May 09 04:10:47.336055 2026] [:error] [pid 9184:tid 9212] [client 13.204.255.203:33004] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.remote"] [unique_id "af5DR4jfODqb_i0Fm99MegAAAA8"]
[Sat May 09 04:10:47.980923 2026] [:error] [pid 9833:tid 9848] [client 13.204.255.203:33006] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "af5DRyM9JmxIS0KGZUAfJgAAAYo"]
[Sat May 09 04:10:48.612661 2026] [:error] [pid 9760:tid 9777] [client 13.204.255.203:33008] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.backup"] [unique_id "af5DSGIkCp-C_fh0s7L15gAAAUs"]
[Sat May 09 04:10:49.288974 2026] [:error] [pid 9186:tid 9228] [client 13.204.255.203:33020] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.save"] [unique_id "af5DSRW4eFOEw1mKOgJhKgAAAEI"]
[Sat May 09 04:10:49.920366 2026] [:error] [pid 9186:tid 9226] [client 13.204.255.203:33034] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.old"] [unique_id "af5DSRW4eFOEw1mKOgJhLQAAAEA"]
[Sat May 09 04:10:50.551252 2026] [:error] [pid 9833:tid 9838] [client 13.204.255.203:33042] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.sample"] [unique_id "af5DSiM9JmxIS0KGZUAfLAAAAYA"]
[Sat May 09 04:10:51.185609 2026] [:error] [pid 9833:tid 9840] [client 13.204.255.203:33044] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.example"] [unique_id "af5DSyM9JmxIS0KGZUAfLQAAAYI"]
[Sat May 09 04:10:51.811124 2026] [:error] [pid 9760:tid 9780] [client 13.204.255.203:33056] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dev"] [unique_id "af5DS2IkCp-C_fh0s7L16AAAAU4"]
[Sat May 09 04:10:52.443287 2026] [:error] [pid 9833:tid 9842] [client 13.204.255.203:33070] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.prod"] [unique_id "af5DTCM9JmxIS0KGZUAfLgAAAYQ"]
[Sat May 09 04:10:53.071335 2026] [:error] [pid 9186:tid 9234] [client 13.204.255.203:33074] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.stage"] [unique_id "af5DTRW4eFOEw1mKOgJhOgAAAEg"]
[Sat May 09 04:10:53.697873 2026] [:error] [pid 9187:tid 9259] [client 13.204.255.203:57850] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.ci"] [unique_id "af5DTRC7An6gkXsRsaG85gAAAIY"]
[Sat May 09 04:10:54.322811 2026] [:error] [pid 9187:tid 9266] [client 13.204.255.203:57862] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.docker"] [unique_id "af5DThC7An6gkXsRsaG86gAAAI0"]
[Sat May 09 04:10:54.954723 2026] [:error] [pid 9186:tid 9231] [client 13.204.255.203:57876] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.live"] [unique_id "af5DThW4eFOEw1mKOgJhQAAAAEU"]
[Sat May 09 04:10:55.587507 2026] [:error] [pid 9833:tid 9862] [client 13.204.255.203:57884] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.preprod"] [unique_id "af5DTyM9JmxIS0KGZUAfMgAAAZg"]
[Sat May 09 04:10:56.216274 2026] [:error] [pid 9293:tid 9300] [client 13.204.255.203:57886] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.uat"] [unique_id "af5DUJR__qEzV5O6Z2OMxAAAAMM"]
[Sat May 09 04:10:56.842865 2026] [:error] [pid 9663:tid 9666] [client 13.204.255.203:57892] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dist"] [unique_id "af5DUJcWIu01SCxbjwus1AAAAQA"]
[Sat May 09 04:10:57.468422 2026] [:error] [pid 9920:tid 9944] [client 13.204.255.203:57896] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.swp"] [unique_id "af5DUUxitGYhlzgZb5Y6igAAAdY"]
[Sat May 09 04:10:58.094776 2026] [:error] [pid 9920:tid 9926] [client 13.204.255.203:57912] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env~"] [unique_id "af5DUkxitGYhlzgZb5Y6iwAAAcQ"]
[Sat May 09 04:10:58.719361 2026] [:error] [pid 9293:tid 9321] [client 13.204.255.203:57918] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env1"] [unique_id "af5DUpR__qEzV5O6Z2OMzQAAANg"]
[Sat May 09 04:10:59.345624 2026] [:error] [pid 9293:tid 9300] [client 13.204.255.203:57934] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env2"] [unique_id "af5DU5R__qEzV5O6Z2OM0QAAAMM"]
[Sat May 09 04:10:59.977861 2026] [:error] [pid 9833:tid 9841] [client 13.204.255.203:57936] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env_copy"] [unique_id "af5DUyM9JmxIS0KGZUAfNwAAAYM"]
[Sat May 09 04:11:00.610965 2026] [:error] [pid 9293:tid 9313] [client 13.204.255.203:57938] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.txt"] [unique_id "af5DVJR__qEzV5O6Z2OM2gAAANA"]
[Sat May 09 04:11:01.239889 2026] [:error] [pid 9833:tid 9852] [client 13.204.255.203:57954] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.json"] [unique_id "af5DVSM9JmxIS0KGZUAfOQAAAY4"]
[Sat May 09 04:11:01.864547 2026] [:error] [pid 9760:tid 9779] [client 13.204.255.203:57962] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.yaml"] [unique_id "af5DVWIkCp-C_fh0s7L19QAAAU0"]
[Sat May 09 04:11:02.493978 2026] [:error] [pid 9186:tid 9229] [client 13.204.255.203:57964] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.yml"] [unique_id "af5DVhW4eFOEw1mKOgJhUwAAAEM"]
[Sat May 09 04:11:03.121450 2026] [:error] [pid 9293:tid 9309] [client 13.204.255.203:57966] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/app/.env"] [unique_id "af5DV5R__qEzV5O6Z2OM3wAAAMw"]
[Sat May 09 04:11:03.751512 2026] [:error] [pid 9187:tid 9255] [client 13.204.255.203:48422] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/apps/.env"] [unique_id "af5DVxC7An6gkXsRsaG9KgAAAII"]
[Sat May 09 04:11:04.383526 2026] [:error] [pid 9833:tid 9862] [client 13.204.255.203:48438] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/api/.env"] [unique_id "af5DWCM9JmxIS0KGZUAfPQAAAZg"]
[Sat May 09 04:11:05.011894 2026] [:error] [pid 9663:tid 9686] [client 13.204.255.203:48454] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/web/.env"] [unique_id "af5DWZcWIu01SCxbjwus4gAAARQ"]
[Sat May 09 04:11:05.637608 2026] [:error] [pid 9186:tid 9250] [client 13.204.255.203:48466] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/site/.env"] [unique_id "af5DWRW4eFOEw1mKOgJhWAAAAFg"]
[Sat May 09 04:11:06.277069 2026] [:error] [pid 9833:tid 9861] [client 13.204.255.203:48474] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/public/.env"] [unique_id "af5DWiM9JmxIS0KGZUAfQgAAAZc"]
[Sat May 09 04:11:06.910571 2026] [:error] [pid 9293:tid 9317] [client 13.204.255.203:48486] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/admin/.env"] [unique_id "af5DWpR__qEzV5O6Z2OM5AAAANQ"]
[Sat May 09 04:11:07.539761 2026] [:error] [pid 9293:tid 9315] [client 13.204.255.203:48490] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/backend/.env"] [unique_id "af5DW5R__qEzV5O6Z2OM6gAAANI"]
[Sat May 09 04:11:08.166044 2026] [:error] [pid 9186:tid 9247] [client 13.204.255.203:48498] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/server/.env"] [unique_id "af5DXBW4eFOEw1mKOgJhWgAAAFU"]
[Sat May 09 04:11:08.796068 2026] [:error] [pid 9920:tid 9922] [client 13.204.255.203:48504] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/frontend/.env"] [unique_id "af5DXExitGYhlzgZb5Y6lAAAAcA"]
[Sat May 09 04:11:09.429427 2026] [:error] [pid 9760:tid 9769] [client 13.204.255.203:48516] [client 13.204.255.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/src/.env"] [unique_id "af5DXWIkCp-C_fh0s7L1_AAAAUM"]
[Sat May 09 05:27:19.638143 2026] [:error] [pid 9293:tid 9308] [client 49.51.47.100:52444] [client 49.51.47.100] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af5VN5R__qEzV5O6Z2O_CQAAAMs"]
[Sat May 09 05:57:19.096439 2026] [:error] [pid 9833:tid 9839] [client 178.175.37.219:55139] [client 178.175.37.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.175.37.219, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "af5cPyM9JmxIS0KGZUA0ZwAAAYE"]
[Sat May 09 05:57:19.102140 2026] [:error] [pid 9833:tid 9839] [client 178.175.37.219:55139] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 06:00:34.179119 2026] [:error] [pid 9920:tid 9924] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sat May 09 06:00:34.463181 2026] [:error] [pid 9920:tid 9938] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat May 09 06:00:34.747454 2026] [:error] [pid 9920:tid 9946] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/wsc.php
[Sat May 09 06:00:35.031418 2026] [:error] [pid 9920:tid 9927] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/bngv.php
[Sat May 09 06:00:35.315297 2026] [:error] [pid 9920:tid 9939] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/xl9.php
[Sat May 09 06:00:35.600085 2026] [:error] [pid 9920:tid 9935] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/cibai.php
[Sat May 09 06:00:35.883341 2026] [:error] [pid 9920:tid 9934] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/mmp.php
[Sat May 09 06:00:36.167298 2026] [:error] [pid 9920:tid 9928] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/doo.php
[Sat May 09 06:00:36.452915 2026] [:error] [pid 9920:tid 9929] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sat May 09 06:00:36.738860 2026] [:error] [pid 9920:tid 9926] [client 20.123.33.13:17751] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat May 09 06:00:37.019408 2026] [:error] [pid 9920:tid 9923] [client 20.123.33.13:17751] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5dBUxitGYhlzgZb5ZflgAAAcE"]
[Sat May 09 06:00:37.900124 2026] [:error] [pid 9920:tid 9945] [client 20.123.33.13:2791] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5dBUxitGYhlzgZb5ZfmAAAAdc"]
[Sat May 09 06:00:38.451344 2026] [:error] [pid 9663:tid 9668] [client 20.123.33.13:2789] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5dBpcWIu01SCxbjwvLDAAAAQI"]
[Sat May 09 06:00:38.990576 2026] [:error] [pid 9920:tid 9940] [client 20.123.33.13:10105] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5dBkxitGYhlzgZb5ZfmQAAAdI"]
[Sat May 09 06:00:39.557344 2026] [:error] [pid 9760:tid 9770] [client 20.123.33.13:2300] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5dB2IkCp-C_fh0s7IItQAAAUQ"]
[Sat May 09 06:00:40.076957 2026] [:error] [pid 9187:tid 9261] [client 20.123.33.13:17079] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5dCBC7An6gkXsRsaHqNwAAAIg"]
[Sat May 09 06:00:40.576367 2026] [:error] [pid 9293:tid 9299] [client 20.123.33.13:3357] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5dCJR__qEzV5O6Z2PN9wAAAMI"]
[Sat May 09 06:00:41.080294 2026] [:error] [pid 9293:tid 9300] [client 20.123.33.13:18680] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5dCZR__qEzV5O6Z2PN-QAAAMM"]
[Sat May 09 06:00:41.607960 2026] [:error] [pid 9833:tid 9858] [client 20.123.33.13:14061] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5dCSM9JmxIS0KGZUA03wAAAZQ"]
[Sat May 09 06:00:42.172436 2026] [:error] [pid 9833:tid 9845] [client 20.123.33.13:13239] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5dCiM9JmxIS0KGZUA04QAAAYc"]
[Sat May 09 06:00:42.718661 2026] [:error] [pid 9920:tid 9925] [client 20.123.33.13:5491] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5dCkxitGYhlzgZb5ZfngAAAcM"]
[Sat May 09 06:00:43.263390 2026] [:error] [pid 9833:tid 9853] [client 20.123.33.13:13197] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5dCyM9JmxIS0KGZUA05QAAAY8"]
[Sat May 09 06:00:43.802519 2026] [:error] [pid 9920:tid 9940] [client 20.123.33.13:3377] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5dC0xitGYhlzgZb5ZfowAAAdI"]
[Sat May 09 06:00:44.305863 2026] [:error] [pid 9920:tid 9941] [client 20.123.33.13:10055] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5dDExitGYhlzgZb5ZfpgAAAdM"]
[Sat May 09 06:00:44.806121 2026] [:error] [pid 9833:tid 9851] [client 20.123.33.13:14029] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5dDCM9JmxIS0KGZUA05gAAAY0"]
[Sat May 09 06:00:45.322768 2026] [:error] [pid 9184:tid 9208] [client 20.123.33.13:6915] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5dDYjfODqb_i0Fm99bvQAAAAs"]
[Sat May 09 06:00:45.844786 2026] [:error] [pid 9186:tid 9246] [client 20.123.33.13:15523] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5dDRW4eFOEw1mKOgJ6pwAAAFQ"]
[Sat May 09 06:00:46.390170 2026] [:error] [pid 9186:tid 9235] [client 20.123.33.13:14072] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5dDhW4eFOEw1mKOgJ6qgAAAEk"]
[Sat May 09 06:00:46.950896 2026] [:error] [pid 9187:tid 9266] [client 20.123.33.13:15280] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5dDhC7An6gkXsRsaHqPAAAAI0"]
[Sat May 09 06:00:47.509954 2026] [:error] [pid 9833:tid 9840] [client 20.123.33.13:10057] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5dDyM9JmxIS0KGZUA06AAAAYI"]
[Sat May 09 06:00:48.034988 2026] [:error] [pid 9186:tid 9239] [client 20.123.33.13:14706] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5dEBW4eFOEw1mKOgJ6rQAAAE0"]
[Sat May 09 06:00:48.585794 2026] [:error] [pid 9663:tid 9675] [client 20.123.33.13:17779] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5dEJcWIu01SCxbjwvLDwAAAQk"]
[Sat May 09 06:00:49.108154 2026] [:error] [pid 9663:tid 9679] [client 20.123.33.13:8577] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5dEZcWIu01SCxbjwvLEAAAAQ0"]
[Sat May 09 06:00:49.649636 2026] [:error] [pid 9187:tid 9267] [client 20.123.33.13:7858] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5dERC7An6gkXsRsaHqQAAAAI4"]
[Sat May 09 06:00:50.184252 2026] [:error] [pid 9663:tid 9683] [client 20.123.33.13:3358] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5dEpcWIu01SCxbjwvLEwAAARE"]
[Sat May 09 06:00:50.706298 2026] [:error] [pid 9184:tid 9210] [client 20.123.33.13:17209] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5dEojfODqb_i0Fm99bxAAAAA0"]
[Sat May 09 06:00:51.274803 2026] [:error] [pid 9663:tid 9690] [client 20.123.33.13:12978] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5dE5cWIu01SCxbjwvLFgAAARg"]
[Sat May 09 06:00:51.790591 2026] [:error] [pid 9293:tid 9311] [client 20.123.33.13:1975] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5dE5R__qEzV5O6Z2POBQAAAM4"]
[Sat May 09 06:00:52.318092 2026] [:error] [pid 9920:tid 9936] [client 20.123.33.13:15292] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5dFExitGYhlzgZb5Zf1QAAAc4"]
[Sat May 09 06:00:52.835792 2026] [:error] [pid 9293:tid 9320] [client 20.123.33.13:2272] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5dFJR__qEzV5O6Z2POCQAAANc"]
[Sat May 09 06:00:53.397907 2026] [:error] [pid 9293:tid 9307] [client 20.123.33.13:17028] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5dFZR__qEzV5O6Z2POCwAAAMo"]
[Sat May 09 06:00:53.933339 2026] [:error] [pid 9293:tid 9316] [client 20.123.33.13:17074] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5dFZR__qEzV5O6Z2PODgAAANM"]
[Sat May 09 06:00:54.469546 2026] [:error] [pid 9187:tid 9256] [client 20.123.33.13:15243] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5dFhC7An6gkXsRsaHqXwAAAIM"]
[Sat May 09 06:00:55.020664 2026] [:error] [pid 9293:tid 9298] [client 20.123.33.13:18686] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5dF5R__qEzV5O6Z2POEgAAAME"]
[Sat May 09 06:00:55.575877 2026] [:error] [pid 9186:tid 9232] [client 20.123.33.13:9751] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5dFxW4eFOEw1mKOgJ6sQAAAEY"]
[Sat May 09 06:00:56.103527 2026] [:error] [pid 9187:tid 9275] [client 20.123.33.13:6135] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5dGBC7An6gkXsRsaHqYgAAAJY"]
[Sat May 09 06:00:56.619632 2026] [:error] [pid 9293:tid 9299] [client 20.123.33.13:18627] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5dGJR__qEzV5O6Z2POFAAAAMI"]
[Sat May 09 06:00:57.157560 2026] [:error] [pid 9293:tid 9307] [client 20.123.33.13:15281] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5dGZR__qEzV5O6Z2POGgAAAMo"]
[Sat May 09 06:00:57.706603 2026] [:error] [pid 9293:tid 9313] [client 20.123.33.13:9267] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5dGZR__qEzV5O6Z2POHQAAANA"]
[Sat May 09 06:00:58.239816 2026] [:error] [pid 9663:tid 9688] [client 20.123.33.13:14030] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5dGpcWIu01SCxbjwvLGgAAARY"]
[Sat May 09 06:00:58.783433 2026] [:error] [pid 9186:tid 9249] [client 20.123.33.13:13667] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5dGhW4eFOEw1mKOgJ6tAAAAFc"]
[Sat May 09 06:00:59.312571 2026] [:error] [pid 9187:tid 9260] [client 20.123.33.13:6081] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5dGxC7An6gkXsRsaHqZwAAAIc"]
[Sat May 09 06:00:59.875069 2026] [:error] [pid 9920:tid 9943] [client 20.123.33.13:5058] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5dG0xitGYhlzgZb5Zf3AAAAdU"]
[Sat May 09 06:01:00.404827 2026] [:error] [pid 9187:tid 9255] [client 20.123.33.13:5455] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5dHBC7An6gkXsRsaHqaQAAAII"]
[Sat May 09 06:01:00.943205 2026] [:error] [pid 9293:tid 9308] [client 20.123.33.13:15541] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5dHJR__qEzV5O6Z2POIQAAAMs"]
[Sat May 09 06:01:01.444963 2026] [:error] [pid 9663:tid 9679] [client 20.123.33.13:9236] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5dHZcWIu01SCxbjwvLHwAAAQ0"]
[Sat May 09 06:01:01.962599 2026] [:error] [pid 9293:tid 9304] [client 20.123.33.13:17192] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5dHZR__qEzV5O6Z2POJQAAAMc"]
[Sat May 09 06:01:02.479959 2026] [:error] [pid 9760:tid 9780] [client 20.123.33.13:17164] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5dHmIkCp-C_fh0s7IItwAAAU4"]
[Sat May 09 06:01:03.019474 2026] [:error] [pid 9920:tid 9926] [client 20.123.33.13:10712] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5dH0xitGYhlzgZb5Zf3wAAAcQ"]
[Sat May 09 06:01:03.566752 2026] [:error] [pid 9293:tid 9316] [client 20.123.33.13:9242] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5dH5R__qEzV5O6Z2POKgAAANM"]
[Sat May 09 06:01:04.066437 2026] [:error] [pid 9293:tid 9304] [client 20.123.33.13:10086] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5dIJR__qEzV5O6Z2POLgAAAMc"]
[Sat May 09 06:01:04.572586 2026] [:error] [pid 9293:tid 9314] [client 20.123.33.13:14058] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5dIJR__qEzV5O6Z2POMQAAANE"]
[Sat May 09 06:01:05.091583 2026] [:error] [pid 9293:tid 9303] [client 20.123.33.13:5449] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5dIZR__qEzV5O6Z2PONAAAAMY"]
[Sat May 09 06:01:05.651953 2026] [:error] [pid 9293:tid 9315] [client 20.123.33.13:9265] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5dIZR__qEzV5O6Z2PONwAAANI"]
[Sat May 09 06:01:06.178986 2026] [:error] [pid 9293:tid 9309] [client 20.123.33.13:14053] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5dIpR__qEzV5O6Z2POOQAAAMw"]
[Sat May 09 06:01:06.700923 2026] [:error] [pid 9920:tid 9936] [client 20.123.33.13:14712] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5dIkxitGYhlzgZb5Zf4QAAAc4"]
[Sat May 09 06:01:07.201711 2026] [:error] [pid 9920:tid 9939] [client 20.123.33.13:5476] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5dI0xitGYhlzgZb5Zf4gAAAdE"]
[Sat May 09 06:01:07.757063 2026] [:error] [pid 9293:tid 9310] [client 20.123.33.13:7349] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5dI5R__qEzV5O6Z2POQgAAAM0"]
[Sat May 09 06:01:08.274459 2026] [:error] [pid 9293:tid 9299] [client 20.123.33.13:7359] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5dJJR__qEzV5O6Z2PORgAAAMI"]
[Sat May 09 06:01:08.801874 2026] [:error] [pid 9833:tid 9842] [client 20.123.33.13:12537] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5dJCM9JmxIS0KGZUA08gAAAYQ"]
[Sat May 09 06:01:09.300834 2026] [:error] [pid 9920:tid 9944] [client 20.123.33.13:17057] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5dJUxitGYhlzgZb5Zf4wAAAdY"]
[Sat May 09 06:01:09.824865 2026] [:error] [pid 9186:tid 9228] [client 20.123.33.13:17349] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5dJRW4eFOEw1mKOgJ6twAAAEI"]
[Sat May 09 06:01:10.343932 2026] [:error] [pid 9293:tid 9300] [client 20.123.33.13:2409] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5dJpR__qEzV5O6Z2POTQAAAMM"]
[Sat May 09 06:01:10.894425 2026] [:error] [pid 9293:tid 9311] [client 20.123.33.13:15136] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5dJpR__qEzV5O6Z2POTwAAAM4"]
[Sat May 09 06:01:11.457151 2026] [:error] [pid 9293:tid 9317] [client 20.123.33.13:9768] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5dJ5R__qEzV5O6Z2POUgAAANQ"]
[Sat May 09 06:01:11.971926 2026] [:error] [pid 9293:tid 9314] [client 20.123.33.13:2423] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5dJ5R__qEzV5O6Z2POVQAAANE"]
[Sat May 09 06:01:12.487045 2026] [:error] [pid 9663:tid 9670] [client 20.123.33.13:17056] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5dKJcWIu01SCxbjwvLIQAAAQQ"]
[Sat May 09 06:01:13.047924 2026] [:error] [pid 9293:tid 9309] [client 20.123.33.13:10098] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5dKZR__qEzV5O6Z2POWgAAAMw"]
[Sat May 09 06:01:13.578272 2026] [:error] [pid 9293:tid 9301] [client 20.123.33.13:10079] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5dKZR__qEzV5O6Z2POWwAAAMQ"]
[Sat May 09 06:01:14.101726 2026] [:error] [pid 9186:tid 9236] [client 20.123.33.13:15008] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5dKhW4eFOEw1mKOgJ6uwAAAEo"]
[Sat May 09 06:01:14.635949 2026] [:error] [pid 9760:tid 9769] [client 20.123.33.13:6142] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5dKmIkCp-C_fh0s7IIugAAAUM"]
[Sat May 09 06:01:15.173475 2026] [:error] [pid 9663:tid 9672] [client 20.123.33.13:16097] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5dK5cWIu01SCxbjwvLJAAAAQY"]
[Sat May 09 06:01:15.724536 2026] [:error] [pid 9187:tid 9260] [client 20.123.33.13:15165] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5dKxC7An6gkXsRsaHqbQAAAIc"]
[Sat May 09 06:01:16.258242 2026] [:error] [pid 9187:tid 9257] [client 20.123.33.13:17474] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5dLBC7An6gkXsRsaHqbwAAAIQ"]
[Sat May 09 06:01:16.779616 2026] [:error] [pid 9920:tid 9938] [client 20.123.33.13:10739] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5dLExitGYhlzgZb5Zf5wAAAdA"]
[Sat May 09 06:01:17.316809 2026] [:error] [pid 9663:tid 9679] [client 20.123.33.13:14711] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5dLZcWIu01SCxbjwvLJgAAAQ0"]
[Sat May 09 06:01:17.837777 2026] [:error] [pid 9186:tid 9247] [client 20.123.33.13:5101] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5dLRW4eFOEw1mKOgJ6vgAAAFU"]
[Sat May 09 06:01:18.367819 2026] [:error] [pid 9833:tid 9855] [client 20.123.33.13:3382] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5dLiM9JmxIS0KGZUA09gAAAZE"]
[Sat May 09 06:01:18.886521 2026] [:error] [pid 9293:tid 9303] [client 20.123.33.13:16067] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5dLpR__qEzV5O6Z2POXwAAAMY"]
[Sat May 09 06:01:19.446054 2026] [:error] [pid 9186:tid 9229] [client 20.123.33.13:8285] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5dLxW4eFOEw1mKOgJ6wAAAAEM"]
[Sat May 09 06:01:19.964952 2026] [:error] [pid 9293:tid 9310] [client 20.123.33.13:2421] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5dL5R__qEzV5O6Z2POYgAAAM0"]
[Sat May 09 06:01:20.470382 2026] [:error] [pid 9186:tid 9227] [client 20.123.33.13:10097] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5dMBW4eFOEw1mKOgJ6wwAAAEE"]
[Sat May 09 06:01:21.006524 2026] [:error] [pid 9293:tid 9298] [client 20.123.33.13:17054] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5dMZR__qEzV5O6Z2POYwAAAME"]
[Sat May 09 06:01:21.516577 2026] [:error] [pid 9833:tid 9858] [client 20.123.33.13:9255] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5dMSM9JmxIS0KGZUA0-AAAAZQ"]
[Sat May 09 06:01:22.020821 2026] [:error] [pid 9186:tid 9228] [client 20.123.33.13:7342] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5dMhW4eFOEw1mKOgJ6xgAAAEI"]
[Sat May 09 06:01:22.523321 2026] [:error] [pid 9186:tid 9244] [client 20.123.33.13:5454] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5dMhW4eFOEw1mKOgJ6yAAAAFI"]
[Sat May 09 06:01:23.099948 2026] [:error] [pid 9920:tid 9934] [client 20.123.33.13:5080] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5dM0xitGYhlzgZb5Zf6gAAAcw"]
[Sat May 09 06:01:23.676537 2026] [:error] [pid 9920:tid 9929] [client 20.123.33.13:17722] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5dM0xitGYhlzgZb5Zf7AAAAcc"]
[Sat May 09 06:01:24.197709 2026] [:error] [pid 9293:tid 9317] [client 20.123.33.13:17669] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5dNJR__qEzV5O6Z2POaAAAANQ"]
[Sat May 09 06:01:24.840666 2026] [:error] [pid 9293:tid 9301] [client 20.123.33.13:7343] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5dNJR__qEzV5O6Z2POawAAAMQ"]
[Sat May 09 06:01:25.380085 2026] [:error] [pid 9833:tid 9854] [client 20.123.33.13:13636] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5dNSM9JmxIS0KGZUA0_AAAAZA"]
[Sat May 09 06:01:25.916945 2026] [:error] [pid 9833:tid 9851] [client 20.123.33.13:17357] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5dNSM9JmxIS0KGZUA0_QAAAY0"]
[Sat May 09 06:01:26.471494 2026] [:error] [pid 9920:tid 9930] [client 20.123.33.13:17527] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5dNkxitGYhlzgZb5Zf-wAAAcg"]
[Sat May 09 06:01:26.999884 2026] [:error] [pid 9663:tid 9681] [client 20.123.33.13:7694] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5dNpcWIu01SCxbjwvLLgAAAQ8"]
[Sat May 09 06:01:27.500180 2026] [:error] [pid 9187:tid 9263] [client 20.123.33.13:3889] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5dNxC7An6gkXsRsaHqdgAAAIo"]
[Sat May 09 06:01:28.023549 2026] [:error] [pid 9663:tid 9680] [client 20.123.33.13:10714] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5dOJcWIu01SCxbjwvLMQAAAQ4"]
[Sat May 09 06:01:28.550142 2026] [:error] [pid 9920:tid 9939] [client 20.123.33.13:12977] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5dOExitGYhlzgZb5ZgAwAAAdE"]
[Sat May 09 06:01:29.082693 2026] [:error] [pid 9920:tid 9942] [client 20.123.33.13:10072] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5dOUxitGYhlzgZb5ZgBQAAAdQ"]
[Sat May 09 06:01:29.603774 2026] [:error] [pid 9920:tid 9944] [client 20.123.33.13:2417] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5dOUxitGYhlzgZb5ZgCAAAAdY"]
[Sat May 09 06:01:30.112750 2026] [:error] [pid 9663:tid 9685] [client 20.123.33.13:12420] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5dOpcWIu01SCxbjwvLMgAAARM"]
[Sat May 09 06:01:30.614464 2026] [:error] [pid 9663:tid 9686] [client 20.123.33.13:5451] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5dOpcWIu01SCxbjwvLMwAAARQ"]
[Sat May 09 06:01:31.155496 2026] [:error] [pid 9187:tid 9259] [client 20.123.33.13:17062] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5dOxC7An6gkXsRsaHqewAAAIY"]
[Sat May 09 06:01:31.698508 2026] [:error] [pid 9184:tid 9201] [client 20.123.33.13:3857] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5dO4jfODqb_i0Fm99b0AAAAAQ"]
[Sat May 09 06:01:32.226901 2026] [:error] [pid 9187:tid 9274] [client 20.123.33.13:8295] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5dPBC7An6gkXsRsaHqfQAAAJU"]
[Sat May 09 06:01:32.745960 2026] [:error] [pid 9184:tid 9215] [client 20.123.33.13:5067] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5dPIjfODqb_i0Fm99b0QAAABI"]
[Sat May 09 06:01:33.265509 2026] [:error] [pid 9293:tid 9306] [client 20.123.33.13:12610] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5dPZR__qEzV5O6Z2POcQAAAMk"]
[Sat May 09 06:01:33.807117 2026] [:error] [pid 9186:tid 9241] [client 20.123.33.13:17363] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5dPRW4eFOEw1mKOgJ6zwAAAE8"]
[Sat May 09 06:01:34.323921 2026] [:error] [pid 9293:tid 9304] [client 20.123.33.13:3531] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5dPpR__qEzV5O6Z2POdAAAAMc"]
[Sat May 09 06:01:34.865902 2026] [:error] [pid 9186:tid 9249] [client 20.123.33.13:10734] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "af5dPhW4eFOEw1mKOgJ60AAAAFc"]
[Sat May 09 06:01:35.369512 2026] [:error] [pid 9187:tid 9263] [client 20.123.33.13:3890] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "af5dPxC7An6gkXsRsaHqgQAAAIo"]
[Sat May 09 06:01:35.897454 2026] [:error] [pid 9184:tid 9203] [client 20.123.33.13:6554] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "af5dP4jfODqb_i0Fm99b0gAAAAY"]
[Sat May 09 06:01:36.657036 2026] [:error] [pid 9186:tid 9232] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/acip.php
[Sat May 09 06:01:37.165472 2026] [:error] [pid 9186:tid 9228] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Sat May 09 06:01:37.420103 2026] [:error] [pid 9186:tid 9244] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/rujgeote.php
[Sat May 09 06:01:37.675633 2026] [:error] [pid 9186:tid 9233] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/mamzi.php
[Sat May 09 06:01:37.950471 2026] [:error] [pid 9186:tid 9236] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Sat May 09 06:01:38.208142 2026] [:error] [pid 9186:tid 9230] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/rrr.php
[Sat May 09 06:01:38.462554 2026] [:error] [pid 9186:tid 9240] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat May 09 06:01:38.719584 2026] [:error] [pid 9186:tid 9237] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Sat May 09 06:01:38.973321 2026] [:error] [pid 9186:tid 9247] [client 20.123.33.13:17744] File does not exist: /usr/local/apache/htdocs/suspended-page/22name.php
[Sat May 09 06:01:39.224044 2026] [:error] [pid 9186:tid 9229] [client 20.123.33.13:17744] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5dQxW4eFOEw1mKOgJ63QAAAEM"]
[Sat May 09 06:01:39.728347 2026] [:error] [pid 9184:tid 9210] [client 20.123.33.13:12445] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5dQ4jfODqb_i0Fm99b1QAAAA0"]
[Sat May 09 06:01:40.278060 2026] [:error] [pid 9184:tid 9207] [client 20.123.33.13:16115] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5dRIjfODqb_i0Fm99b1gAAAAo"]
[Sat May 09 06:01:40.844631 2026] [:error] [pid 9187:tid 9254] [client 20.123.33.13:7700] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5dRBC7An6gkXsRsaHqhwAAAIE"]
[Sat May 09 06:01:41.398842 2026] [:error] [pid 9186:tid 9241] [client 20.123.33.13:16111] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5dRRW4eFOEw1mKOgJ64AAAAE8"]
[Sat May 09 06:01:41.930446 2026] [:error] [pid 9186:tid 9231] [client 20.123.33.13:7897] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5dRRW4eFOEw1mKOgJ64gAAAEU"]
[Sat May 09 06:01:42.468927 2026] [:error] [pid 9187:tid 9276] [client 20.123.33.13:12469] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5dRhC7An6gkXsRsaHqiwAAAJc"]
[Sat May 09 06:01:43.042949 2026] [:error] [pid 9760:tid 9790] [client 20.123.33.13:6572] [client 20.123.33.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5dR2IkCp-C_fh0s7IIyAAAAVg"]
[Sat May 09 06:23:41.805605 2026] [:error] [pid 9293:tid 9313] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sat May 09 06:23:42.065595 2026] [:error] [pid 9293:tid 9300] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat May 09 06:23:42.318494 2026] [:error] [pid 9293:tid 9319] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/wsc.php
[Sat May 09 06:23:42.571737 2026] [:error] [pid 9293:tid 9317] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/bngv.php
[Sat May 09 06:23:42.824696 2026] [:error] [pid 9293:tid 9308] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/xl9.php
[Sat May 09 06:23:43.077048 2026] [:error] [pid 9293:tid 9300] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/cibai.php
[Sat May 09 06:23:43.329437 2026] [:error] [pid 9293:tid 9297] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/mmp.php
[Sat May 09 06:23:43.593816 2026] [:error] [pid 9293:tid 9320] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/doo.php
[Sat May 09 06:23:43.844589 2026] [:error] [pid 9293:tid 9306] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sat May 09 06:23:44.098555 2026] [:error] [pid 9293:tid 9307] [client 20.166.9.204:18016] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat May 09 06:23:44.348096 2026] [:error] [pid 9293:tid 9311] [client 20.166.9.204:18016] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5icJR__qEzV5O6Z2PXGgAAAM4"]
[Sat May 09 06:23:45.248502 2026] [:error] [pid 9293:tid 9317] [client 20.166.9.204:1218] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5icZR__qEzV5O6Z2PXHQAAANQ"]
[Sat May 09 06:23:46.076183 2026] [:error] [pid 9293:tid 9318] [client 20.166.9.204:1227] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5icpR__qEzV5O6Z2PXHwAAANU"]
[Sat May 09 06:23:46.630901 2026] [:error] [pid 9293:tid 9314] [client 20.166.9.204:16208] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "af5icpR__qEzV5O6Z2PXIgAAANE"]
[Sat May 09 06:23:47.168901 2026] [:error] [pid 9186:tid 9231] [client 20.166.9.204:1705] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5icxW4eFOEw1mKOgJ93gAAAEU"]
[Sat May 09 06:23:47.681857 2026] [:error] [pid 9187:tid 9265] [client 20.166.9.204:18011] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5icxC7An6gkXsRsaHw7AAAAIw"]
[Sat May 09 06:23:48.211271 2026] [:error] [pid 9187:tid 9259] [client 20.166.9.204:9169] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5idBC7An6gkXsRsaHw7wAAAIY"]
[Sat May 09 06:23:48.755504 2026] [:error] [pid 9186:tid 9232] [client 20.166.9.204:4256] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-tymanage.php"] [unique_id "af5idBW4eFOEw1mKOgJ93wAAAEY"]
[Sat May 09 06:23:49.290181 2026] [:error] [pid 9187:tid 9257] [client 20.166.9.204:15087] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5idRC7An6gkXsRsaHw8wAAAIQ"]
[Sat May 09 06:23:49.834831 2026] [:error] [pid 9186:tid 9228] [client 20.166.9.204:10301] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5idRW4eFOEw1mKOgJ94QAAAEI"]
[Sat May 09 06:23:50.352315 2026] [:error] [pid 9186:tid 9238] [client 20.166.9.204:18168] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5idhW4eFOEw1mKOgJ94wAAAEw"]
[Sat May 09 06:23:50.869924 2026] [:error] [pid 9760:tid 9766] [client 20.166.9.204:17060] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws88.php"] [unique_id "af5idmIkCp-C_fh0s7ILEAAAAUA"]
[Sat May 09 06:23:51.396511 2026] [:error] [pid 9186:tid 9242] [client 20.166.9.204:18614] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5idxW4eFOEw1mKOgJ95AAAAFA"]
[Sat May 09 06:23:51.945226 2026] [:error] [pid 9186:tid 9250] [client 20.166.9.204:4899] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5idxW4eFOEw1mKOgJ95QAAAFg"]
[Sat May 09 06:23:52.465313 2026] [:error] [pid 9187:tid 9258] [client 20.166.9.204:17467] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5ieBC7An6gkXsRsaHw-QAAAIU"]
[Sat May 09 06:23:52.984304 2026] [:error] [pid 9760:tid 9789] [client 20.166.9.204:16251] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/r.php"] [unique_id "af5ieGIkCp-C_fh0s7ILGAAAAVc"]
[Sat May 09 06:23:53.504154 2026] [:error] [pid 9760:tid 9778] [client 20.166.9.204:7075] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5ieWIkCp-C_fh0s7ILGgAAAUw"]
[Sat May 09 06:23:54.019969 2026] [:error] [pid 9920:tid 9934] [client 20.166.9.204:4921] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5iekxitGYhlzgZb5ZkgwAAAcw"]
[Sat May 09 06:23:54.543279 2026] [:error] [pid 9920:tid 9938] [client 20.166.9.204:18615] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5iekxitGYhlzgZb5ZkhAAAAdA"]
[Sat May 09 06:23:55.088257 2026] [:error] [pid 9920:tid 9945] [client 20.166.9.204:18326] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yas.php"] [unique_id "af5ie0xitGYhlzgZb5ZkhwAAAdc"]
[Sat May 09 06:23:55.652585 2026] [:error] [pid 9186:tid 9230] [client 20.166.9.204:13698] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5iexW4eFOEw1mKOgJ96QAAAEQ"]
[Sat May 09 06:23:56.176648 2026] [:error] [pid 9920:tid 9944] [client 20.166.9.204:17439] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5ifExitGYhlzgZb5ZkiwAAAdY"]
[Sat May 09 06:23:56.758598 2026] [:error] [pid 9663:tid 9689] [client 20.166.9.204:14840] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5ifJcWIu01SCxbjwvPcAAAARc"]
[Sat May 09 06:23:57.346182 2026] [:error] [pid 9293:tid 9305] [client 20.166.9.204:18575] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tymi.php"] [unique_id "af5ifZR__qEzV5O6Z2PXJgAAAMg"]
[Sat May 09 06:23:57.897463 2026] [:error] [pid 9920:tid 9931] [client 20.166.9.204:17054] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5ifUxitGYhlzgZb5ZkjgAAAck"]
[Sat May 09 06:23:58.442801 2026] [:error] [pid 9187:tid 9253] [client 20.166.9.204:14836] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5ifhC7An6gkXsRsaHw_wAAAIA"]
[Sat May 09 06:23:58.993770 2026] [:error] [pid 9184:tid 9206] [client 20.166.9.204:15076] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5ifojfODqb_i0Fm99d6wAAAAk"]
[Sat May 09 06:23:59.568267 2026] [:error] [pid 9187:tid 9264] [client 20.166.9.204:14001] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lolz.php"] [unique_id "af5ifxC7An6gkXsRsaHxAAAAAIs"]
[Sat May 09 06:24:00.128387 2026] [:error] [pid 9663:tid 9683] [client 20.166.9.204:4894] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5igJcWIu01SCxbjwvPdQAAARE"]
[Sat May 09 06:24:00.696622 2026] [:error] [pid 9184:tid 9213] [client 20.166.9.204:10690] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5igIjfODqb_i0Fm99d7wAAABA"]
[Sat May 09 06:24:01.256077 2026] [:error] [pid 9184:tid 9202] [client 20.166.9.204:6550] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5igYjfODqb_i0Fm99d8AAAAAU"]
[Sat May 09 06:24:01.822097 2026] [:error] [pid 9920:tid 9922] [client 20.166.9.204:16228] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd67.php"] [unique_id "af5igUxitGYhlzgZb5ZkkgAAAcA"]
[Sat May 09 06:24:02.365720 2026] [:error] [pid 9833:tid 9855] [client 20.166.9.204:7068] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5igiM9JmxIS0KGZUA3twAAAZE"]
[Sat May 09 06:24:02.930881 2026] [:error] [pid 9833:tid 9840] [client 20.166.9.204:16247] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5igiM9JmxIS0KGZUA3uQAAAYI"]
[Sat May 09 06:24:03.471095 2026] [:error] [pid 9833:tid 9843] [client 20.166.9.204:18004] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5igyM9JmxIS0KGZUA3vQAAAYU"]
[Sat May 09 06:24:04.024695 2026] [:error] [pid 9833:tid 9839] [client 20.166.9.204:14809] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/i6z19N.php"] [unique_id "af5ihCM9JmxIS0KGZUA3vgAAAYE"]
[Sat May 09 06:24:04.589411 2026] [:error] [pid 9184:tid 9220] [client 20.166.9.204:14796] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5ihIjfODqb_i0Fm99d9QAAABc"]
[Sat May 09 06:24:05.140649 2026] [:error] [pid 9663:tid 9687] [client 20.166.9.204:10269] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5ihZcWIu01SCxbjwvPegAAARU"]
[Sat May 09 06:24:05.640606 2026] [:error] [pid 9663:tid 9670] [client 20.166.9.204:11840] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5ihZcWIu01SCxbjwvPfQAAAQQ"]
[Sat May 09 06:24:06.143038 2026] [:error] [pid 9187:tid 9262] [client 20.166.9.204:10258] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clque.php"] [unique_id "af5ihhC7An6gkXsRsaHxBgAAAIk"]
[Sat May 09 06:24:06.674760 2026] [:error] [pid 9760:tid 9776] [client 20.166.9.204:6925] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5ihmIkCp-C_fh0s7ILIAAAAUo"]
[Sat May 09 06:24:07.198463 2026] [:error] [pid 9293:tid 9316] [client 20.166.9.204:3106] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5ih5R__qEzV5O6Z2PXKgAAANM"]
[Sat May 09 06:24:07.733226 2026] [:error] [pid 9187:tid 9257] [client 20.166.9.204:3125] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5ihxC7An6gkXsRsaHxBwAAAIQ"]
[Sat May 09 06:24:08.277584 2026] [:error] [pid 9186:tid 9234] [client 20.166.9.204:16217] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-ver.php"] [unique_id "af5iiBW4eFOEw1mKOgJ97gAAAEg"]
[Sat May 09 06:24:08.839501 2026] [:error] [pid 9187:tid 9255] [client 20.166.9.204:13954] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5iiBC7An6gkXsRsaHxCQAAAII"]
[Sat May 09 06:24:09.359624 2026] [:error] [pid 9186:tid 9240] [client 20.166.9.204:17437] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5iiRW4eFOEw1mKOgJ97wAAAE4"]
[Sat May 09 06:24:09.895095 2026] [:error] [pid 9663:tid 9690] [client 20.166.9.204:14811] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5iiZcWIu01SCxbjwvPgAAAARg"]
[Sat May 09 06:24:10.438449 2026] [:error] [pid 9293:tid 9297] [client 20.166.9.204:15040] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wert.php"] [unique_id "af5iipR__qEzV5O6Z2PXMgAAAMA"]
[Sat May 09 06:24:10.956011 2026] [:error] [pid 9186:tid 9239] [client 20.166.9.204:18356] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5iihW4eFOEw1mKOgJ99AAAAE0"]
[Sat May 09 06:24:11.472104 2026] [:error] [pid 9186:tid 9233] [client 20.166.9.204:18605] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5iixW4eFOEw1mKOgJ99QAAAEc"]
[Sat May 09 06:24:11.987736 2026] [:error] [pid 9293:tid 9305] [client 20.166.9.204:11602] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5ii5R__qEzV5O6Z2PXNQAAAMg"]
[Sat May 09 06:24:12.535606 2026] [:error] [pid 9920:tid 9934] [client 20.166.9.204:18014] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "af5ijExitGYhlzgZb5ZkmQAAAcw"]
[Sat May 09 06:24:13.087771 2026] [:error] [pid 9293:tid 9307] [client 20.166.9.204:17446] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5ijZR__qEzV5O6Z2PXOwAAAMo"]
[Sat May 09 06:24:13.647146 2026] [:error] [pid 9920:tid 9945] [client 20.166.9.204:6308] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5ijUxitGYhlzgZb5ZkmwAAAdc"]
[Sat May 09 06:24:14.209329 2026] [:error] [pid 9833:tid 9860] [client 20.166.9.204:2557] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5ijiM9JmxIS0KGZUA3wAAAAZY"]
[Sat May 09 06:24:14.774001 2026] [:error] [pid 9187:tid 9254] [client 20.166.9.204:11625] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "af5ijhC7An6gkXsRsaHxDwAAAIE"]
[Sat May 09 06:24:15.311447 2026] [:error] [pid 9833:tid 9858] [client 20.166.9.204:10629] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5ijyM9JmxIS0KGZUA3wQAAAZQ"]
[Sat May 09 06:24:15.871937 2026] [:error] [pid 9663:tid 9687] [client 20.166.9.204:14819] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5ij5cWIu01SCxbjwvPgwAAARU"]
[Sat May 09 06:24:16.431152 2026] [:error] [pid 9184:tid 9217] [client 20.166.9.204:10660] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5ikIjfODqb_i0Fm99d9gAAABQ"]
[Sat May 09 06:24:17.009026 2026] [:error] [pid 9293:tid 9313] [client 20.166.9.204:16224] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xslclbn.php"] [unique_id "af5ikZR__qEzV5O6Z2PXcwAAANA"]
[Sat May 09 06:24:17.580154 2026] [:error] [pid 9187:tid 9274] [client 20.166.9.204:3122] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5ikRC7An6gkXsRsaHxHAAAAJU"]
[Sat May 09 06:24:18.139892 2026] [:error] [pid 9187:tid 9267] [client 20.166.9.204:18017] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5ikhC7An6gkXsRsaHxHQAAAI4"]
[Sat May 09 06:24:18.694559 2026] [:error] [pid 9184:tid 9213] [client 20.166.9.204:17984] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5ikojfODqb_i0Fm99d-AAAABA"]
[Sat May 09 06:24:19.262314 2026] [:error] [pid 9187:tid 9265] [client 20.166.9.204:10274] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/less.php"] [unique_id "af5ikxC7An6gkXsRsaHxJAAAAIw"]
[Sat May 09 06:24:19.788149 2026] [:error] [pid 9760:tid 9766] [client 20.166.9.204:9194] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5ik2IkCp-C_fh0s7ILJwAAAUA"]
[Sat May 09 06:24:20.304581 2026] [:error] [pid 9663:tid 9682] [client 20.166.9.204:10298] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5ilJcWIu01SCxbjwvPiAAAARA"]
[Sat May 09 06:24:20.821602 2026] [:error] [pid 9184:tid 9197] [client 20.166.9.204:16238] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5ilIjfODqb_i0Fm99d-QAAAAA"]
[Sat May 09 06:24:21.324886 2026] [:error] [pid 9184:tid 9205] [client 20.166.9.204:9765] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albrt.php"] [unique_id "af5ilYjfODqb_i0Fm99d-gAAAAg"]
[Sat May 09 06:24:21.854707 2026] [:error] [pid 9293:tid 9310] [client 20.166.9.204:7312] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5ilZR__qEzV5O6Z2PXfgAAAM0"]
[Sat May 09 06:24:22.421823 2026] [:error] [pid 9187:tid 9253] [client 20.166.9.204:7051] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5ilhC7An6gkXsRsaHxLwAAAIA"]
[Sat May 09 06:24:22.972673 2026] [:error] [pid 9187:tid 9264] [client 20.166.9.204:18337] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5ilhC7An6gkXsRsaHxMwAAAIs"]
[Sat May 09 06:24:23.497463 2026] [:error] [pid 9920:tid 9922] [client 20.166.9.204:1514] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "af5il0xitGYhlzgZb5ZkpAAAAcA"]
[Sat May 09 06:24:24.012127 2026] [:error] [pid 9184:tid 9221] [client 20.166.9.204:17995] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5imIjfODqb_i0Fm99d-wAAABg"]
[Sat May 09 06:24:24.560808 2026] [:error] [pid 9663:tid 9672] [client 20.166.9.204:16708] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5imJcWIu01SCxbjwvPigAAAQY"]
[Sat May 09 06:24:25.079160 2026] [:error] [pid 9187:tid 9271] [client 20.166.9.204:17428] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5imRC7An6gkXsRsaHxOgAAAJI"]
[Sat May 09 06:24:25.578911 2026] [:error] [pid 9186:tid 9243] [client 20.166.9.204:3129] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/an8.php"] [unique_id "af5imRW4eFOEw1mKOgJ9_gAAAFE"]
[Sat May 09 06:24:26.105537 2026] [:error] [pid 9187:tid 9257] [client 20.166.9.204:17028] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5imhC7An6gkXsRsaHxPQAAAIQ"]
[Sat May 09 06:24:26.654102 2026] [:error] [pid 9663:tid 9684] [client 20.166.9.204:7332] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5impcWIu01SCxbjwvPiwAAARI"]
[Sat May 09 06:24:27.170658 2026] [:error] [pid 9293:tid 9307] [client 20.166.9.204:4274] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5im5R__qEzV5O6Z2PXggAAAMo"]
[Sat May 09 06:24:27.687454 2026] [:error] [pid 9293:tid 9309] [client 20.166.9.204:2536] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "af5im5R__qEzV5O6Z2PXhAAAAMw"]
[Sat May 09 06:24:28.230622 2026] [:error] [pid 9187:tid 9263] [client 20.166.9.204:18331] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5inBC7An6gkXsRsaHxQAAAAIo"]
[Sat May 09 06:24:28.779789 2026] [:error] [pid 9293:tid 9297] [client 20.166.9.204:3130] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5inJR__qEzV5O6Z2PXiQAAAMA"]
[Sat May 09 06:24:29.297846 2026] [:error] [pid 9293:tid 9304] [client 20.166.9.204:10440] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5inZR__qEzV5O6Z2PXigAAAMc"]
[Sat May 09 06:24:29.815308 2026] [:error] [pid 9760:tid 9777] [client 20.166.9.204:1512] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zwq.php"] [unique_id "af5inWIkCp-C_fh0s7ILKwAAAUs"]
[Sat May 09 06:24:30.347643 2026] [:error] [pid 9663:tid 9680] [client 20.166.9.204:6280] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5inpcWIu01SCxbjwvPjQAAAQ4"]
[Sat May 09 06:24:30.886426 2026] [:error] [pid 9920:tid 9945] [client 20.166.9.204:16756] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5inkxitGYhlzgZb5ZksgAAAdc"]
[Sat May 09 06:24:31.413265 2026] [:error] [pid 9920:tid 9929] [client 20.166.9.204:17049] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5in0xitGYhlzgZb5ZkswAAAcc"]
[Sat May 09 06:24:31.912872 2026] [:error] [pid 9663:tid 9687] [client 20.166.9.204:10636] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new4.php"] [unique_id "af5in5cWIu01SCxbjwvPjwAAARU"]
[Sat May 09 06:24:32.438755 2026] [:error] [pid 9293:tid 9316] [client 20.166.9.204:14834] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5ioJR__qEzV5O6Z2PXkAAAANM"]
[Sat May 09 06:24:32.974949 2026] [:error] [pid 9833:tid 9853] [client 20.166.9.204:10272] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5ioCM9JmxIS0KGZUA3xQAAAY8"]
[Sat May 09 06:24:33.474949 2026] [:error] [pid 9833:tid 9841] [client 20.166.9.204:16760] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5ioSM9JmxIS0KGZUA3xgAAAYM"]
[Sat May 09 06:24:33.975081 2026] [:error] [pid 9293:tid 9303] [client 20.166.9.204:16211] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/55.php"] [unique_id "af5ioZR__qEzV5O6Z2PXkQAAAMY"]
[Sat May 09 06:24:34.491005 2026] [:error] [pid 9293:tid 9305] [client 20.166.9.204:17071] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5iopR__qEzV5O6Z2PXkwAAAMg"]
[Sat May 09 06:24:35.025232 2026] [:error] [pid 9293:tid 9306] [client 20.166.9.204:4255] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5io5R__qEzV5O6Z2PXlgAAAMk"]
[Sat May 09 06:24:35.589355 2026] [:error] [pid 9663:tid 9666] [client 20.166.9.204:10241] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5io5cWIu01SCxbjwvPkwAAAQA"]
[Sat May 09 06:24:36.134929 2026] [:error] [pid 9184:tid 9219] [client 20.166.9.204:2546] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ups.php"] [unique_id "af5ipIjfODqb_i0Fm99d_gAAABY"]
[Sat May 09 06:24:36.659547 2026] [:error] [pid 9186:tid 9234] [client 20.166.9.204:2510] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5ipBW4eFOEw1mKOgJ-CQAAAEg"]
[Sat May 09 06:24:37.207628 2026] [:error] [pid 9187:tid 9260] [client 20.166.9.204:2499] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5ipRC7An6gkXsRsaHxQgAAAIc"]
[Sat May 09 06:24:37.729228 2026] [:error] [pid 9293:tid 9309] [client 20.166.9.204:13094] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5ipZR__qEzV5O6Z2PXmQAAAMw"]
[Sat May 09 06:24:38.296095 2026] [:error] [pid 9293:tid 9304] [client 20.166.9.204:1520] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-demomav.php"] [unique_id "af5ippR__qEzV5O6Z2PXnAAAAMc"]
[Sat May 09 06:24:38.821842 2026] [:error] [pid 9186:tid 9244] [client 20.166.9.204:6368] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5iphW4eFOEw1mKOgJ-DgAAAFI"]
[Sat May 09 06:24:39.340773 2026] [:error] [pid 9186:tid 9237] [client 20.166.9.204:15056] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5ipxW4eFOEw1mKOgJ-DwAAAEs"]
[Sat May 09 06:24:39.906411 2026] [:error] [pid 9663:tid 9674] [client 20.166.9.204:18364] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5ip5cWIu01SCxbjwvPlQAAAQg"]
[Sat May 09 06:24:40.456677 2026] [:error] [pid 9663:tid 9669] [client 20.166.9.204:3978] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/greateb.php"] [unique_id "af5iqJcWIu01SCxbjwvPlwAAAQM"]
[Sat May 09 06:24:40.961344 2026] [:error] [pid 9186:tid 9229] [client 20.166.9.204:15897] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5iqBW4eFOEw1mKOgJ-EQAAAEM"]
[Sat May 09 06:24:41.494408 2026] [:error] [pid 9920:tid 9939] [client 20.166.9.204:13077] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5iqUxitGYhlzgZb5ZkvAAAAdE"]
[Sat May 09 06:24:42.032603 2026] [:error] [pid 9920:tid 9922] [client 20.166.9.204:18056] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5iqkxitGYhlzgZb5ZkvQAAAcA"]
[Sat May 09 06:24:42.532614 2026] [:error] [pid 9663:tid 9683] [client 20.166.9.204:5869] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/co.php"] [unique_id "af5iqpcWIu01SCxbjwvPnAAAARE"]
[Sat May 09 06:24:43.061137 2026] [:error] [pid 9920:tid 9931] [client 20.166.9.204:11863] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "af5iq0xitGYhlzgZb5ZkwAAAAck"]
[Sat May 09 06:24:43.600635 2026] [:error] [pid 9920:tid 9940] [client 20.166.9.204:16706] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/shlo.php"] [unique_id "af5iq0xitGYhlzgZb5ZkwgAAAdI"]
[Sat May 09 06:24:44.425934 2026] [:error] [pid 9760:tid 9776] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/acip.php
[Sat May 09 06:24:44.974001 2026] [:error] [pid 9760:tid 9778] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Sat May 09 06:24:45.242218 2026] [:error] [pid 9760:tid 9777] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/rujgeote.php
[Sat May 09 06:24:45.511303 2026] [:error] [pid 9760:tid 9785] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/mamzi.php
[Sat May 09 06:24:45.779244 2026] [:error] [pid 9760:tid 9787] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/kaza.php
[Sat May 09 06:24:46.046354 2026] [:error] [pid 9760:tid 9786] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/rrr.php
[Sat May 09 06:24:46.313331 2026] [:error] [pid 9760:tid 9782] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Sat May 09 06:24:46.579283 2026] [:error] [pid 9760:tid 9771] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Sat May 09 06:24:46.846510 2026] [:error] [pid 9760:tid 9783] [client 20.166.9.204:14601] File does not exist: /usr/local/apache/htdocs/suspended-page/22name.php
[Sat May 09 06:24:47.111486 2026] [:error] [pid 9760:tid 9790] [client 20.166.9.204:14601] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5ir2IkCp-C_fh0s7ILPwAAAVg"]
[Sat May 09 06:24:47.610187 2026] [:error] [pid 9187:tid 9268] [client 20.166.9.204:15896] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5irxC7An6gkXsRsaHxRAAAAI8"]
[Sat May 09 06:24:48.109397 2026] [:error] [pid 9833:tid 9848] [client 20.166.9.204:3456] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5isCM9JmxIS0KGZUA3zAAAAYo"]
[Sat May 09 06:24:48.624159 2026] [:error] [pid 9760:tid 9766] [client 20.166.9.204:10956] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "af5isGIkCp-C_fh0s7ILQAAAAUA"]
[Sat May 09 06:24:49.148001 2026] [:error] [pid 9187:tid 9263] [client 20.166.9.204:5877] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5isRC7An6gkXsRsaHxSAAAAIo"]
[Sat May 09 06:24:49.679633 2026] [:error] [pid 9920:tid 9932] [client 20.166.9.204:13100] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5isUxitGYhlzgZb5ZkyQAAAco"]
[Sat May 09 06:24:50.197201 2026] [:error] [pid 9293:tid 9321] [client 20.166.9.204:9238] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5ispR__qEzV5O6Z2PXpQAAANg"]
[Sat May 09 06:24:50.731451 2026] [:error] [pid 9293:tid 9314] [client 20.166.9.204:12543] [client 20.166.9.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "af5ispR__qEzV5O6Z2PXpwAAANE"]
[Sat May 09 07:10:40.785067 2026] [:error] [pid 9920:tid 9923] [client 172.212.190.20:53089] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 09 07:10:40.976129 2026] [:error] [pid 9920:tid 9935] [client 172.212.190.20:53089] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 09 07:10:41.364680 2026] [:error] [pid 9920:tid 9924] [client 172.212.190.20:53089] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 09 07:10:41.554337 2026] [:error] [pid 9920:tid 9938] [client 172.212.190.20:53089] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 09 07:10:41.932997 2026] [:error] [pid 9920:tid 9942] [client 172.212.190.20:53089] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 09 07:10:42.125175 2026] [:error] [pid 9920:tid 9929] [client 172.212.190.20:53089] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 09 07:10:42.314360 2026] [:error] [pid 9920:tid 9925] [client 172.212.190.20:53089] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 09 07:10:42.690942 2026] [:error] [pid 9920:tid 9945] [client 172.212.190.20:53089] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5tckxitGYhlzgZb5ZxNwAAAdc"]
[Sat May 09 07:10:43.438100 2026] [:error] [pid 9186:tid 9233] [client 172.212.190.20:62645] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5tcxW4eFOEw1mKOgKF-gAAAEc"]
[Sat May 09 07:10:44.205378 2026] [:error] [pid 9293:tid 9312] [client 172.212.190.20:57222] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5tdJR__qEzV5O6Z2PqAQAAAM8"]
[Sat May 09 07:10:44.955019 2026] [:error] [pid 9187:tid 9271] [client 172.212.190.20:61910] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af5tdBC7An6gkXsRsaH_BwAAAJI"]
[Sat May 09 12:11:18.671529 2026] [:error] [pid 9663:tid 9686] [client 43.159.47.35:39136] [client 43.159.47.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "af6z5pcWIu01SCxbjwsVrwAAARQ"]
[Sat May 09 14:19:47.825152 2026] [:error] [pid 9186:tid 9245] [client 43.138.68.113:48044] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af7SAxW4eFOEw1mKOgLHSwAAAFM"]
[Sat May 09 15:07:38.023056 2026] [:error] [pid 9187:tid 9268] [client 43.135.182.95:48458] [client 43.135.182.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af7dOhC7An6gkXsRsaGSYwAAAI8"]
[Sat May 09 16:31:48.571491 2026] [:error] [pid 9663:tid 9666] [client 13.212.23.80:55836] [client 13.212.23.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.212.23.80, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "af7w9JcWIu01SCxbjws_wwAAAQA"]
[Sat May 09 16:31:48.574373 2026] [:error] [pid 9663:tid 9666] [client 13.212.23.80:55836] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat May 09 16:31:50.682783 2026] [:error] [pid 9920:tid 9946] [client 13.212.23.80:55842] [client 13.212.23.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 13.212.23.80, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "af7w9kxitGYhlzgZb5bu_QAAAdg"]
[Sat May 09 16:31:50.687246 2026] [:error] [pid 9920:tid 9946] [client 13.212.23.80:55842] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat May 09 18:43:27.341201 2026] [:error] [pid 9293:tid 9320] [client 194.62.107.239:53201] [client 194.62.107.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "af8Pz5R__qEzV5O6Z2PXmAAAANc"]
[Sat May 09 19:23:08.832066 2026] [:error] [pid 9184:tid 9206] [client 43.153.102.138:40260] [client 43.153.102.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "af8ZHIjfODqb_i0Fm9-mOgAAAAk"]
[Sun May 10 01:07:09.600487 2026] [:error] [pid 62831:tid 62843] [client 43.134.5.250:58010] [client 43.134.5.250] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af9pveYBNqNhtZ_l7qBhYQAAAAo"]
[Sun May 10 03:13:53.044176 2026] [:error] [pid 62831:tid 62846] [client 119.91.20.139:35326] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "af-HceYBNqNhtZ_l7qCDsQAAAA0"]
[Sun May 10 03:51:44.456279 2026] [:error] [pid 62910:tid 62918] [client 43.130.139.177:44722] [client 43.130.139.177] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "af-QUN5YAy_h5VqgWqhGFgAAAMY"]
[Sun May 10 04:26:06.151936 2026] [:error] [pid 32915:tid 32936] [client 211.57.149.147:12073] [client 211.57.149.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.57.149.147, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "af-YXjg8EIe76RX8AUZ7SQAAARA"]
[Sun May 10 04:26:06.159274 2026] [:error] [pid 32915:tid 32936] [client 211.57.149.147:12073] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 10 07:31:47.144278 2026] [:error] [pid 46417:tid 46426] [client 43.159.135.203:56562] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "af_D42Inm7mhwgbe48ZcwQAAAQc"]
[Sun May 10 11:07:48.172127 2026] [:error] [pid 52634:tid 52643] [client 129.226.93.97:39526] [client 129.226.93.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "af_2hNwp8XoWCwFb54C8VQAAAMU"]
[Sun May 10 15:16:57.010819 2026] [:error] [pid 52634:tid 52644] [client 122.51.236.174:47180] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agAw6dwp8XoWCwFb54ABWQAAAMY"]
[Sun May 10 18:44:40.636539 2026] [:error] [pid 16136:tid 16138] [client 185.12.44.163:40288] [client 185.12.44.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "agBhmEOBGdmCMnPX0MfkyAAAAIA"]
[Sun May 10 18:44:52.856076 2026] [:error] [pid 16136:tid 16140] [client 45.141.215.56:15402] [client 45.141.215.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "agBhpEOBGdmCMnPX0MfkzgAAAII"]
[Sun May 10 18:45:01.646027 2026] [:error] [pid 16136:tid 16151] [client 2.58.56.92:50334] [client 2.58.56.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.dbservices.com.au"] [uri "/.DS_Store"] [unique_id "agBhrUOBGdmCMnPX0Mfk1QAAAI0"]
[Sun May 10 21:01:38.598487 2026] [:error] [pid 16136:tid 16140] [client 43.166.136.24:57282] [client 43.166.136.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agCBskOBGdmCMnPX0Mf_wAAAAII"]
[Sun May 10 21:14:32.218989 2026] [:error] [pid 16096:tid 16114] [client 43.159.47.35:57466] [client 43.159.47.35] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agCEuK8wyxcrT50p9kvbzQAAAE0"]
[Sun May 10 22:21:50.992030 2026] [:error] [pid 16136:tid 16143] [client 206.189.91.190:57470] [client 206.189.91.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "agCUfkOBGdmCMnPX0McK7QAAAIU"]
[Sun May 10 23:01:41.692330 2026] [:error] [pid 16096:tid 16110] [client 20.5.8.136:58889] [client 20.5.8.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uploads/"] [unique_id "agCd1a8wyxcrT50p9kvpnQAAAEk"], referer: binance.com
[Sun May 10 23:01:50.045750 2026] [:error] [pid 16096:tid 16115] [client 20.5.8.136:59512] [client 20.5.8.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/images/"] [unique_id "agCd3q8wyxcrT50p9kvpogAAAE4"], referer: binance.com
[Sun May 10 23:02:00.508470 2026] [:error] [pid 16136:tid 16146] [client 20.5.8.136:60339] [client 20.5.8.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/files/"] [unique_id "agCd6EOBGdmCMnPX0McRnQAAAIg"], referer: binance.com
[Sun May 10 23:46:02.405775 2026] [:error] [pid 16096:tid 16103] [client 36.37.209.184:52629] [client 36.37.209.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "agCoOq8wyxcrT50p9kvuZgAAAEI"]
[Sun May 10 23:46:26.878457 2026] [:error] [pid 16096:tid 16107] [client 43.130.101.151:51568] [client 43.130.101.151] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agCoUq8wyxcrT50p9kvubAAAAEY"]
[Mon May 11 01:18:17.185857 2026] [:error] [pid 16096:tid 16110] [client 35.203.105.112:37884] [client 35.203.105.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "agC92a8wyxcrT50p9kv0zgAAAEk"]
[Mon May 11 03:16:24.834082 2026] [:error] [pid 37030:tid 37052] [client 158.173.67.102:39195] [client 158.173.67.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agDZiJrBzfXWwKkDkdbiRgAAANQ"]
[Mon May 11 03:16:25.346001 2026] [:error] [pid 16096:tid 16122] [client 158.173.67.135:46721] [client 158.173.67.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agDZia8wyxcrT50p9kv9nAAAAFU"]
[Mon May 11 03:16:25.881436 2026] [:error] [pid 16136:tid 16148] [client 158.173.67.90:52555] [client 158.173.67.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agDZiUOBGdmCMnPX0McrHAAAAIo"]
[Mon May 11 03:16:26.395009 2026] [:error] [pid 16096:tid 16113] [client 158.173.67.60:50595] [client 158.173.67.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agDZiq8wyxcrT50p9kv9uwAAAEw"]
[Mon May 11 03:16:26.906829 2026] [:error] [pid 16038:tid 16073] [client 158.173.67.175:54811] [client 158.173.67.175] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agDZik4hf5Tcsfa2scKQhgAAAYU"]
[Mon May 11 04:59:14.705204 2026] [:error] [pid 65260:tid 65316] [client 187.95.235.27:8675] [client 187.95.235.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.95.235.27, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agDxojqbzwIHjP6Y_3FstgAAAFQ"]
[Mon May 11 04:59:14.710806 2026] [:error] [pid 65260:tid 65316] [client 187.95.235.27:8675] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon May 11 05:05:01.810114 2026] [:error] [pid 65260:tid 65306] [client 187.95.235.27:7291] [client 187.95.235.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.95.235.27, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agDy_TqbzwIHjP6Y_3FtuQAAAEo"]
[Mon May 11 05:05:01.814886 2026] [:error] [pid 65260:tid 65306] [client 187.95.235.27:7291] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon May 11 05:15:52.280641 2026] [:error] [pid 65261:tid 65323] [client 43.135.133.241:55952] [client 43.135.133.241] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agD1iJu_9uQJeFrcOsswcgAAAIA"]
[Mon May 11 07:23:32.057821 2026] [:error] [pid 35052:tid 35078] [client 129.226.93.97:47598] [client 129.226.93.97] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agETdOHjpNNnFJrMXu2KMgAAAVc"]
[Mon May 11 07:59:36.784003 2026] [:error] [pid 65259:tid 65281] [client 34.175.175.1:46044] [client 34.175.175.1] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "agEb6APsXLnMa32ma5BcpAAAAA0"]
[Mon May 11 13:09:02.321550 2026] [:error] [pid 65261:tid 65343] [client 142.93.128.117:54334] [client 142.93.128.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/members"] [unique_id "agFkbpu_9uQJeFrcOstpEQAAAJQ"]
[Mon May 11 14:39:20.291154 2026] [:error] [pid 58750:tid 58761] [client 62.171.188.7:60908] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mDBVaNG3wJtPBU-OcgAAAUk"]
[Mon May 11 14:39:20.292688 2026] [:error] [pid 58616:tid 58668] [client 62.171.188.7:60914] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mNnsbeF5ioCAecjPFQAAANY"]
[Mon May 11 14:39:20.293874 2026] [:error] [pid 58750:tid 58764] [client 62.171.188.7:60892] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mDBVaNG3wJtPBU-OcwAAAUw"]
[Mon May 11 14:39:20.384744 2026] [:error] [pid 58750:tid 58769] [client 62.171.188.7:60912] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mDBVaNG3wJtPBU-OdwAAAVE"]
[Mon May 11 14:39:20.387672 2026] [:error] [pid 58677:tid 58693] [client 62.171.188.7:60944] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mBasRhyteIXf1RUyuwAAAIU"]
[Mon May 11 14:39:20.403589 2026] [:error] [pid 58677:tid 58689] [client 62.171.188.7:60924] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mBasRhyteIXf1RUyvAAAAIE"]
[Mon May 11 14:39:20.408413 2026] [:error] [pid 58750:tid 58752] [client 62.171.188.7:60974] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mDBVaNG3wJtPBU-OeAAAAUA"]
[Mon May 11 14:39:20.409110 2026] [:error] [pid 58750:tid 58762] [client 62.171.188.7:60928] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mDBVaNG3wJtPBU-OeQAAAUo"]
[Mon May 11 14:39:20.487318 2026] [:error] [pid 58677:tid 58695] [client 62.171.188.7:60930] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mBasRhyteIXf1RUyvQAAAIc"]
[Mon May 11 14:39:20.497412 2026] [:error] [pid 58750:tid 58759] [client 62.171.188.7:60960] [client 62.171.188.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "agF5mDBVaNG3wJtPBU-OewAAAUc"]
[Mon May 11 15:54:15.399060 2026] [:error] [pid 4645:tid 4653] [client 49.51.36.179:55696] [client 49.51.36.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agGLJ3y4dxn8-Cx5vOWMFwAAAEU"]
[Mon May 11 17:01:07.544029 2026] [:error] [pid 4685:tid 4692] [client 34.17.23.193:52068] [client 34.17.23.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "agGa03wrjbU4NZilCZ_JowAAAQQ"]
[Mon May 11 21:56:50.860200 2026] [:error] [pid 58677:tid 58699] [client 43.163.84.198:57804] [client 43.163.84.198] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agHgIhasRhyteIXf1RVy-QAAAIs"]
[Tue May 12 00:45:08.264424 2026] [:error] [pid 58677:tid 58711] [client 119.28.100.145:60388] [client 119.28.100.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agIHlBasRhyteIXf1RWHiwAAAJc"]
[Tue May 12 01:15:56.420633 2026] [:error] [pid 4685:tid 4699] [client 104.28.162.26:36685] [client 104.28.162.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.28.162.26, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agIOzHwrjbU4NZilCZ88ngAAAQs"]
[Tue May 12 01:15:56.708333 2026] [:error] [pid 4685:tid 4699] [client 104.28.162.26:36685] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 12 02:43:19.371304 2026] [:error] [pid 58677:tid 58692] [client 43.165.167.72:38526] [client 43.165.167.72] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agIjRxasRhyteIXf1RWTNgAAAIQ"]
[Tue May 12 05:58:42.197499 2026] [:error] [pid 39957:tid 39998] [client 43.135.211.148:38196] [client 43.135.211.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agJREuAfHHyq0DBh5BL4LgAAAEY"]
[Tue May 12 07:37:20.829557 2026] [:error] [pid 39958:tid 40041] [client 43.132.214.228:55330] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agJoMOVI9FVDxXB2Xxg0AwAAAJY"]
[Tue May 12 07:37:25.512601 2026] [:error] [pid 39957:tid 40008] [client 149.102.230.119:9002] [client 149.102.230.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agJoNeAfHHyq0DBh5BIAlwAAAFA"]
[Tue May 12 07:37:26.604700 2026] [:error] [pid 39958:tid 40043] [client 149.102.230.117:9002] [client 149.102.230.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agJoNuVI9FVDxXB2Xxg0FAAAAJg"]
[Tue May 12 07:37:27.650106 2026] [:error] [pid 39958:tid 40028] [client 149.102.230.117:9004] [client 149.102.230.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agJoN-VI9FVDxXB2Xxg0FQAAAIk"]
[Tue May 12 10:33:31.558880 2026] [:error] [pid 42143:tid 42162] [client 43.153.10.83:50360] [client 43.153.10.83] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agKRe0S2WmK92iCO2L2SvgAAAU8"]
[Tue May 12 14:57:25.633519 2026] [:error] [pid 42143:tid 42148] [client 43.134.57.179:58344] [client 43.134.57.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agLPVUS2WmK92iCO2L3fzQAAAUE"]
[Tue May 12 16:42:40.339140 2026] [:error] [pid 42143:tid 42148] [client 43.133.139.6:47520] [client 43.133.139.6] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agLoAES2WmK92iCO2L32EAAAAUE"]
[Tue May 12 16:45:53.249900 2026] [:error] [pid 39957:tid 39996] [client 49.235.136.28:41020] [client 49.235.136.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agLoweAfHHyq0DBh5BJfDAAAAEQ"]
[Tue May 12 19:27:53.893416 2026] [:error] [pid 39958:tid 40021] [client 43.155.129.131:54932] [client 43.155.129.131] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agMOueVI9FVDxXB2Xxh6EQAAAII"]
[Wed May 13 01:35:06.159328 2026] [:error] [pid 42143:tid 42169] [client 141.98.11.120:59901] [client 141.98.11.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agNkykS2WmK92iCO2L1R1wAAAVY"], referer: binance.com
[Wed May 13 04:40:23.463909 2026] [:error] [pid 23887:tid 23905] [client 91.92.241.188:56564] [client 91.92.241.188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "agOQN9SKmvZJZkXBFDDevAAAAMo"]
[Wed May 13 05:12:07.761808 2026] [:error] [pid 23780:tid 23799] [client 49.233.45.47:59496] [client 49.233.45.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agOXp3XgOibPjrXgeTA6JQAAAAU"]
[Wed May 13 10:12:00.978682 2026] [:error] [pid 23787:tid 23862] [client 43.166.240.231:47140] [client 43.166.240.231] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agPd8B1cs5wE7VT6wirI5gAAAI4"]
[Wed May 13 12:48:14.369096 2026] [:error] [pid 23887:tid 23919] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Wed May 13 12:48:14.682930 2026] [:error] [pid 23887:tid 23903] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/xenon1337.php
[Wed May 13 12:48:14.994644 2026] [:error] [pid 23887:tid 23895] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/LDEFxj.php
[Wed May 13 12:48:15.307002 2026] [:error] [pid 23887:tid 23902] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/206.php
[Wed May 13 12:48:15.619992 2026] [:error] [pid 23887:tid 23913] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/zero.php
[Wed May 13 12:48:15.936445 2026] [:error] [pid 23887:tid 23918] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/koala.php
[Wed May 13 12:48:16.248103 2026] [:error] [pid 23887:tid 23911] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/mac.php
[Wed May 13 12:48:16.559941 2026] [:error] [pid 23887:tid 23898] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/hayuk.php
[Wed May 13 12:48:16.884583 2026] [:error] [pid 23887:tid 23907] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/0d.php
[Wed May 13 12:48:17.349295 2026] [:error] [pid 23887:tid 23912] [client 20.226.103.253:25272] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Wed May 13 12:48:17.658570 2026] [:error] [pid 23887:tid 23906] [client 20.226.103.253:25272] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp3.php"] [unique_id "agQCkdSKmvZJZkXBFDB42wAAAMs"]
[Wed May 13 12:48:18.492094 2026] [:error] [pid 27332:tid 27341] [client 20.226.103.253:25270] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp3.php"] [unique_id "agQCko6Y5F_V9bmyC4Z_gAAAAUc"]
[Wed May 13 12:48:19.391677 2026] [:error] [pid 27332:tid 27353] [client 20.226.103.253:25169] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp3.php"] [unique_id "agQCk46Y5F_V9bmyC4Z_hgAAAVM"]
[Wed May 13 12:48:20.518299 2026] [:error] [pid 27332:tid 27354] [client 20.226.103.253:25161] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp3.php"] [unique_id "agQClI6Y5F_V9bmyC4Z_jgAAAVQ"]
[Wed May 13 12:48:22.337597 2026] [:error] [pid 3259:tid 3266] [client 20.226.103.253:25230] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/birlingsless.php"] [unique_id "agQCluWJB4YwcPVLeArzFQAAAQU"]
[Wed May 13 12:48:23.621499 2026] [:error] [pid 27332:tid 27355] [client 20.226.103.253:25269] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/birlingsless.php"] [unique_id "agQCl46Y5F_V9bmyC4Z_owAAAVU"]
[Wed May 13 12:48:24.514710 2026] [:error] [pid 27332:tid 27356] [client 20.226.103.253:25162] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/birlingsless.php"] [unique_id "agQCmI6Y5F_V9bmyC4Z_qQAAAVY"]
[Wed May 13 12:48:25.886701 2026] [:error] [pid 27332:tid 27338] [client 20.226.103.253:25241] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/birlingsless.php"] [unique_id "agQCmY6Y5F_V9bmyC4Z_tQAAAUQ"]
[Wed May 13 12:48:27.284581 2026] [:error] [pid 23780:tid 23795] [client 20.226.103.253:25236] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unvouc.php"] [unique_id "agQCm3XgOibPjrXgeTBy7QAAAAE"]
[Wed May 13 12:48:28.389211 2026] [:error] [pid 23782:tid 23833] [client 20.226.103.253:25273] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unvouc.php"] [unique_id "agQCnCBrKFYHXUGnR-q4VQAAAEw"]
[Wed May 13 12:48:29.857784 2026] [:error] [pid 23780:tid 23817] [client 20.226.103.253:25243] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unvouc.php"] [unique_id "agQCnXXgOibPjrXgeTBy-gAAABc"]
[Wed May 13 12:48:31.999599 2026] [:error] [pid 27332:tid 27356] [client 20.226.103.253:25221] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/unvouc.php"] [unique_id "agQCn46Y5F_V9bmyC4Z_zAAAAVY"]
[Wed May 13 12:48:34.569775 2026] [:error] [pid 23787:tid 23856] [client 20.226.103.253:25247] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agQCoh1cs5wE7VT6wiruNgAAAIg"]
[Wed May 13 12:48:35.587019 2026] [:error] [pid 23787:tid 23860] [client 20.226.103.253:25274] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agQCox1cs5wE7VT6wiruOgAAAIw"]
[Wed May 13 12:48:36.398645 2026] [:error] [pid 27332:tid 27344] [client 20.226.103.253:25173] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agQCpI6Y5F_V9bmyC4Z_1QAAAUo"]
[Wed May 13 12:48:37.164881 2026] [:error] [pid 3259:tid 3261] [client 20.226.103.253:25276] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agQCpeWJB4YwcPVLeArzOwAAAQA"]
[Wed May 13 12:48:38.172176 2026] [:error] [pid 23887:tid 23905] [client 20.226.103.253:25238] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agQCptSKmvZJZkXBFDB46AAAAMo"]
[Wed May 13 12:48:39.058349 2026] [:error] [pid 23787:tid 23868] [client 20.226.103.253:25165] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agQCpx1cs5wE7VT6wiruQwAAAJQ"]
[Wed May 13 12:48:40.025379 2026] [:error] [pid 23787:tid 23858] [client 20.226.103.253:25175] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agQCqB1cs5wE7VT6wiruSQAAAIo"]
[Wed May 13 12:48:41.081603 2026] [:error] [pid 27332:tid 27344] [client 20.226.103.253:25198] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/post-comments-form/"] [unique_id "agQCqY6Y5F_V9bmyC4Z_4gAAAUo"]
[Wed May 13 12:48:42.119842 2026] [:error] [pid 23887:tid 23896] [client 20.226.103.253:25160] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agQCqtSKmvZJZkXBFDB46gAAAME"]
[Wed May 13 12:48:43.144160 2026] [:error] [pid 23787:tid 23850] [client 20.226.103.253:25254] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agQCqx1cs5wE7VT6wiruTQAAAII"]
[Wed May 13 12:48:43.827881 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25172] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agQCq46Y5F_V9bmyC4Z_5wAAAUA"]
[Wed May 13 12:48:44.713101 2026] [:error] [pid 27332:tid 27350] [client 20.226.103.253:25249] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/"] [unique_id "agQCrI6Y5F_V9bmyC4Z_6gAAAVA"]
[Wed May 13 12:48:45.583151 2026] [:error] [pid 23782:tid 23844] [client 20.226.103.253:25159] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "agQCrSBrKFYHXUGnR-q4YgAAAFc"]
[Wed May 13 12:48:46.474151 2026] [:error] [pid 27332:tid 27344] [client 20.226.103.253:25279] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "agQCro6Y5F_V9bmyC4Z_8QAAAUo"]
[Wed May 13 12:48:47.267606 2026] [:error] [pid 23887:tid 23903] [client 20.226.103.253:25108] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "agQCr9SKmvZJZkXBFDB47gAAAMg"]
[Wed May 13 12:48:47.985095 2026] [:error] [pid 23782:tid 23833] [client 20.226.103.253:25213] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-links.php"] [unique_id "agQCryBrKFYHXUGnR-q4YwAAAEw"]
[Wed May 13 12:48:48.716796 2026] [:error] [pid 27332:tid 27343] [client 20.226.103.253:25277] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agQCsI6Y5F_V9bmyC4Z_9QAAAUk"]
[Wed May 13 12:48:49.452621 2026] [:error] [pid 27332:tid 27354] [client 20.226.103.253:25237] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agQCsY6Y5F_V9bmyC4Z_-AAAAVQ"]
[Wed May 13 12:48:50.248867 2026] [:error] [pid 23787:tid 23852] [client 20.226.103.253:25261] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agQCsh1cs5wE7VT6wiruUwAAAIQ"]
[Wed May 13 12:48:50.943094 2026] [:error] [pid 3259:tid 3268] [client 20.226.103.253:25188] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/wp-info.php"] [unique_id "agQCsuWJB4YwcPVLeArzRAAAAQc"]
[Wed May 13 12:48:51.738721 2026] [:error] [pid 3259:tid 3279] [client 20.226.103.253:25156] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agQCs-WJB4YwcPVLeArzSgAAARI"]
[Wed May 13 12:48:52.592793 2026] [:error] [pid 3259:tid 3285] [client 20.226.103.253:25275] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agQCtOWJB4YwcPVLeArzUQAAARg"]
[Wed May 13 12:48:53.271161 2026] [:error] [pid 23787:tid 23862] [client 20.226.103.253:25152] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agQCtR1cs5wE7VT6wiruVQAAAI4"]
[Wed May 13 12:48:54.028598 2026] [:error] [pid 3259:tid 3276] [client 20.226.103.253:25259] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "agQCtuWJB4YwcPVLeArzVwAAAQ8"]
[Wed May 13 12:48:54.770661 2026] [:error] [pid 23887:tid 23898] [client 20.226.103.253:25166] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "agQCttSKmvZJZkXBFDB49AAAAMM"]
[Wed May 13 12:48:55.757732 2026] [:error] [pid 23787:tid 23865] [client 20.226.103.253:25265] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "agQCtx1cs5wE7VT6wiruVwAAAJE"]
[Wed May 13 12:48:56.562136 2026] [:error] [pid 23887:tid 23905] [client 20.226.103.253:25226] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "agQCuNSKmvZJZkXBFDB49gAAAMo"]
[Wed May 13 12:48:57.650274 2026] [:error] [pid 3259:tid 3280] [client 20.226.103.253:25117] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/half.php"] [unique_id "agQCueWJB4YwcPVLeArzXQAAARM"]
[Wed May 13 12:48:58.729468 2026] [:error] [pid 27332:tid 27354] [client 20.226.103.253:25248] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "agQCuo6Y5F_V9bmyC4aABwAAAVQ"]
[Wed May 13 12:48:59.648313 2026] [:error] [pid 27332:tid 27352] [client 20.226.103.253:25093] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "agQCu46Y5F_V9bmyC4aAFgAAAVI"]
[Wed May 13 12:49:00.509376 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25231] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "agQCvI6Y5F_V9bmyC4aAHQAAAUA"]
[Wed May 13 12:49:01.286396 2026] [:error] [pid 27332:tid 27353] [client 20.226.103.253:25239] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2P.php"] [unique_id "agQCvY6Y5F_V9bmyC4aAIQAAAVM"]
[Wed May 13 12:49:02.056191 2026] [:error] [pid 23782:tid 23845] [client 20.226.103.253:25179] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "agQCviBrKFYHXUGnR-q4ZgAAAFg"]
[Wed May 13 12:49:03.134061 2026] [:error] [pid 23787:tid 23866] [client 20.226.103.253:25153] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "agQCvx1cs5wE7VT6wirufgAAAJI"]
[Wed May 13 12:49:04.062004 2026] [:error] [pid 23782:tid 23843] [client 20.226.103.253:25171] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "agQCwCBrKFYHXUGnR-q4ZwAAAFY"]
[Wed May 13 12:49:04.832785 2026] [:error] [pid 23782:tid 23839] [client 20.226.103.253:25233] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tires.php"] [unique_id "agQCwCBrKFYHXUGnR-q4agAAAFI"]
[Wed May 13 12:49:05.534129 2026] [:error] [pid 27332:tid 27351] [client 20.226.103.253:25186] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agQCwY6Y5F_V9bmyC4aAJwAAAVE"]
[Wed May 13 12:49:06.422766 2026] [:error] [pid 23787:tid 23862] [client 20.226.103.253:25092] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agQCwh1cs5wE7VT6wirugQAAAI4"]
[Wed May 13 12:49:07.274690 2026] [:error] [pid 23780:tid 23807] [client 20.226.103.253:25266] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agQCw3XgOibPjrXgeTBzDAAAAA0"]
[Wed May 13 12:49:08.149586 2026] [:error] [pid 23787:tid 23857] [client 20.226.103.253:25255] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agQCxB1cs5wE7VT6wirugwAAAIk"]
[Wed May 13 12:49:08.966416 2026] [:error] [pid 23780:tid 23818] [client 20.226.103.253:25218] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agQCxHXgOibPjrXgeTBzDgAAABg"]
[Wed May 13 12:49:09.762054 2026] [:error] [pid 23782:tid 23836] [client 20.226.103.253:25212] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agQCxSBrKFYHXUGnR-q4bQAAAE8"]
[Wed May 13 12:49:11.074111 2026] [:error] [pid 27332:tid 27357] [client 20.226.103.253:25191] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agQCx46Y5F_V9bmyC4aALQAAAVc"]
[Wed May 13 12:49:11.887317 2026] [:error] [pid 23787:tid 23868] [client 20.226.103.253:25206] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wordpress/wp-admin/maint/"] [unique_id "agQCxx1cs5wE7VT6wiruhgAAAJQ"]
[Wed May 13 12:49:12.858322 2026] [:error] [pid 23782:tid 23838] [client 20.226.103.253:25245] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agQCyCBrKFYHXUGnR-q4cAAAAFE"]
[Wed May 13 12:49:13.729480 2026] [:error] [pid 23887:tid 23911] [client 20.226.103.253:25182] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agQCydSKmvZJZkXBFDB4_gAAANA"]
[Wed May 13 12:49:14.551798 2026] [:error] [pid 23887:tid 23915] [client 20.226.103.253:25168] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agQCytSKmvZJZkXBFDB4_wAAANQ"]
[Wed May 13 12:49:15.392295 2026] [:error] [pid 23780:tid 23808] [client 20.226.103.253:25264] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agQCy3XgOibPjrXgeTBzEgAAAA4"]
[Wed May 13 12:49:16.201380 2026] [:error] [pid 23887:tid 23905] [client 20.226.103.253:25240] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "agQCzNSKmvZJZkXBFDB5AgAAAMo"]
[Wed May 13 12:49:16.900955 2026] [:error] [pid 3259:tid 3284] [client 20.226.103.253:25192] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/like.php"] [unique_id "agQCzOWJB4YwcPVLeArzgQAAARc"]
[Wed May 13 12:49:17.768722 2026] [:error] [pid 23782:tid 23829] [client 20.226.103.253:25229] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Wed May 13 12:49:18.082603 2026] [:error] [pid 23782:tid 23840] [client 20.226.103.253:25229] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Wed May 13 12:49:18.827480 2026] [:error] [pid 23782:tid 23826] [client 20.226.103.253:25229] [client 20.226.103.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "agQCziBrKFYHXUGnR-q4dgAAAEU"]
[Wed May 13 12:49:19.505558 2026] [:error] [pid 27332:tid 27350] [client 20.226.103.253:25258] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Wed May 13 12:49:19.878109 2026] [:error] [pid 27332:tid 27356] [client 20.226.103.253:25258] File does not exist: /usr/local/apache/htdocs/suspended-page/bob.php
[Wed May 13 12:49:20.206848 2026] [:error] [pid 27332:tid 27353] [client 20.226.103.253:25258] File does not exist: /usr/local/apache/htdocs/suspended-page/spawns.php
[Wed May 13 12:49:20.688004 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25258] File does not exist: /usr/local/apache/htdocs/suspended-page/t3s.php
[Wed May 13 12:49:22.421732 2026] [:error] [pid 27332:tid 27345] [client 20.226.103.253:25258] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "agQC0o6Y5F_V9bmyC4aAPwAAAUs"]
[Wed May 13 12:49:23.298099 2026] [:error] [pid 23787:tid 23863] [client 20.226.103.253:25178] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "agQC0x1cs5wE7VT6wiruiQAAAI8"]
[Wed May 13 12:49:24.155372 2026] [:error] [pid 23887:tid 23906] [client 20.226.103.253:25235] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "agQC1NSKmvZJZkXBFDB5BQAAAMs"]
[Wed May 13 12:49:25.144878 2026] [:error] [pid 23887:tid 23916] [client 20.226.103.253:25202] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwu.php"] [unique_id "agQC1dSKmvZJZkXBFDB5BwAAANU"]
[Wed May 13 12:49:26.375393 2026] [:error] [pid 23887:tid 23919] [client 20.226.103.253:25278] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "agQC1tSKmvZJZkXBFDB5CQAAANg"]
[Wed May 13 12:49:27.835604 2026] [:error] [pid 3259:tid 3276] [client 20.226.103.253:25189] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "agQC1-WJB4YwcPVLeArzhgAAAQ8"]
[Wed May 13 12:49:29.144214 2026] [:error] [pid 27332:tid 27357] [client 20.226.103.253:25098] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "agQC2Y6Y5F_V9bmyC4aATgAAAVc"]
[Wed May 13 12:49:30.153615 2026] [:error] [pid 23782:tid 23828] [client 20.226.103.253:25267] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uwa.php"] [unique_id "agQC2iBrKFYHXUGnR-q4fAAAAEc"]
[Wed May 13 12:49:30.876931 2026] [:error] [pid 3259:tid 3265] [client 20.226.103.253:25271] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "agQC2uWJB4YwcPVLeArzhwAAAQQ"]
[Wed May 13 12:49:31.876170 2026] [:error] [pid 23887:tid 23915] [client 20.226.103.253:25167] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "agQC29SKmvZJZkXBFDB5DgAAANQ"]
[Wed May 13 12:49:32.784545 2026] [:error] [pid 23787:tid 23871] [client 20.226.103.253:25107] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "agQC3B1cs5wE7VT6wirujQAAAJc"]
[Wed May 13 12:49:33.901401 2026] [:error] [pid 23782:tid 23830] [client 20.226.103.253:25146] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/crgio.php"] [unique_id "agQC3SBrKFYHXUGnR-q4fQAAAEk"]
[Wed May 13 12:49:34.616865 2026] [:error] [pid 27332:tid 27351] [client 20.226.103.253:25105] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "agQC3o6Y5F_V9bmyC4aAVQAAAVE"]
[Wed May 13 12:49:35.337899 2026] [:error] [pid 27332:tid 27337] [client 20.226.103.253:25164] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "agQC346Y5F_V9bmyC4aAVwAAAUM"]
[Wed May 13 12:49:36.220897 2026] [:error] [pid 27332:tid 27353] [client 20.226.103.253:25246] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "agQC4I6Y5F_V9bmyC4aAWAAAAVM"]
[Wed May 13 12:49:37.090158 2026] [:error] [pid 23887:tid 23917] [client 20.226.103.253:25088] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/geforce.php"] [unique_id "agQC4dSKmvZJZkXBFDB5EgAAANY"]
[Wed May 13 12:49:37.812824 2026] [:error] [pid 23887:tid 23896] [client 20.226.103.253:25125] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agQC4dSKmvZJZkXBFDB5FAAAAME"]
[Wed May 13 12:49:38.902916 2026] [:error] [pid 27332:tid 27342] [client 20.226.103.253:25209] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agQC4o6Y5F_V9bmyC4aAWgAAAUg"]
[Wed May 13 12:49:39.586246 2026] [:error] [pid 27332:tid 27336] [client 20.226.103.253:25176] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agQC446Y5F_V9bmyC4aAXgAAAUI"]
[Wed May 13 12:49:40.258542 2026] [:error] [pid 3259:tid 3279] [client 20.226.103.253:25163] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agQC5OWJB4YwcPVLeArzjAAAARI"]
[Wed May 13 12:49:40.917721 2026] [:error] [pid 3259:tid 3261] [client 20.226.103.253:25158] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agQC5OWJB4YwcPVLeArzjQAAAQA"]
[Wed May 13 12:49:41.717898 2026] [:error] [pid 27332:tid 27350] [client 20.226.103.253:25199] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agQC5Y6Y5F_V9bmyC4aAYwAAAVA"]
[Wed May 13 12:49:42.446885 2026] [:error] [pid 23887:tid 23908] [client 20.226.103.253:25180] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agQC5tSKmvZJZkXBFDB5FgAAAM0"]
[Wed May 13 12:49:43.115872 2026] [:error] [pid 3259:tid 3285] [client 20.226.103.253:25256] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "agQC5-WJB4YwcPVLeArzjgAAARg"]
[Wed May 13 12:49:43.879757 2026] [:error] [pid 23887:tid 23919] [client 20.226.103.253:25097] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "agQC59SKmvZJZkXBFDB5GQAAANg"]
[Wed May 13 12:49:44.657018 2026] [:error] [pid 23887:tid 23909] [client 20.226.103.253:25134] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "agQC6NSKmvZJZkXBFDB5HAAAAM4"]
[Wed May 13 12:49:45.375550 2026] [:error] [pid 23780:tid 23794] [client 20.226.103.253:25103] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "agQC6XXgOibPjrXgeTBzFgAAAAA"]
[Wed May 13 12:49:46.360496 2026] [:error] [pid 23887:tid 23911] [client 20.226.103.253:25111] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.sghb.php"] [unique_id "agQC6tSKmvZJZkXBFDB5IgAAANA"]
[Wed May 13 12:49:47.380902 2026] [:error] [pid 3259:tid 3281] [client 20.226.103.253:25253] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "agQC6-WJB4YwcPVLeArzkgAAARQ"]
[Wed May 13 12:49:48.278029 2026] [:error] [pid 3259:tid 3267] [client 20.226.103.253:25114] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "agQC7OWJB4YwcPVLeArzlQAAAQY"]
[Wed May 13 12:49:49.733555 2026] [:error] [pid 23780:tid 23806] [client 20.226.103.253:25118] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "agQC7XXgOibPjrXgeTBzGQAAAAw"]
[Wed May 13 12:49:50.537881 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25130] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zoko.php"] [unique_id "agQC7o6Y5F_V9bmyC4aAaQAAAUA"]
[Wed May 13 12:49:51.593950 2026] [:error] [pid 27332:tid 27342] [client 20.226.103.253:25215] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "agQC746Y5F_V9bmyC4aAbwAAAUg"]
[Wed May 13 12:49:52.442495 2026] [:error] [pid 23787:tid 23868] [client 20.226.103.253:25119] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "agQC8B1cs5wE7VT6wirulgAAAJQ"]
[Wed May 13 12:49:53.307332 2026] [:error] [pid 27332:tid 27356] [client 20.226.103.253:25030] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "agQC8Y6Y5F_V9bmyC4aAcgAAAVY"]
[Wed May 13 12:49:54.140956 2026] [:error] [pid 23887:tid 23902] [client 20.226.103.253:25174] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "agQC8tSKmvZJZkXBFDB5LAAAAMc"]
[Wed May 13 12:49:55.000079 2026] [:error] [pid 27332:tid 27354] [client 20.226.103.253:25244] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "agQC8o6Y5F_V9bmyC4aAdAAAAVQ"]
[Wed May 13 12:49:55.713756 2026] [:error] [pid 23782:tid 23843] [client 20.226.103.253:25142] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "agQC8yBrKFYHXUGnR-q4gwAAAFY"]
[Wed May 13 12:49:57.116789 2026] [:error] [pid 23887:tid 23905] [client 20.226.103.253:25225] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "agQC9dSKmvZJZkXBFDB5LwAAAMo"]
[Wed May 13 12:49:57.950366 2026] [:error] [pid 23887:tid 23907] [client 20.226.103.253:25089] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pucci.php"] [unique_id "agQC9dSKmvZJZkXBFDB5MAAAAMw"]
[Wed May 13 12:49:58.619603 2026] [:error] [pid 23787:tid 23849] [client 20.226.103.253:25185] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agQC9h1cs5wE7VT6wirumAAAAIE"]
[Wed May 13 12:49:59.452468 2026] [:error] [pid 27332:tid 27349] [client 20.226.103.253:25268] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agQC946Y5F_V9bmyC4aAewAAAU8"]
[Wed May 13 12:50:00.359341 2026] [:error] [pid 23780:tid 23795] [client 20.226.103.253:25145] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agQC-HXgOibPjrXgeTBzHgAAAAE"]
[Wed May 13 12:50:01.220968 2026] [:error] [pid 23887:tid 23896] [client 20.226.103.253:25227] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "agQC-dSKmvZJZkXBFDB5MwAAAME"]
[Wed May 13 12:50:01.988517 2026] [:error] [pid 23787:tid 23872] [client 20.226.103.253:25141] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "agQC-R1cs5wE7VT6wirunAAAAJg"]
[Wed May 13 12:50:02.963295 2026] [:error] [pid 3259:tid 3285] [client 20.226.103.253:25036] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "agQC-uWJB4YwcPVLeArzngAAARg"]
[Wed May 13 12:50:03.944978 2026] [:error] [pid 27332:tid 27355] [client 20.226.103.253:25214] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "agQC-46Y5F_V9bmyC4aAgwAAAVU"]
[Wed May 13 12:50:04.676058 2026] [:error] [pid 27332:tid 27353] [client 20.226.103.253:25177] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.dj/index.php"] [unique_id "agQC_I6Y5F_V9bmyC4aAhwAAAVM"]
[Wed May 13 12:50:05.587590 2026] [:error] [pid 27332:tid 27339] [client 20.226.103.253:25222] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agQC_Y6Y5F_V9bmyC4aAiAAAAUU"]
[Wed May 13 12:50:06.465921 2026] [:error] [pid 23782:tid 23828] [client 20.226.103.253:25210] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agQC_iBrKFYHXUGnR-q4iAAAAEc"]
[Wed May 13 12:50:07.293726 2026] [:error] [pid 23780:tid 23796] [client 20.226.103.253:25211] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agQC_3XgOibPjrXgeTBzIgAAAAI"]
[Wed May 13 12:50:08.257176 2026] [:error] [pid 23787:tid 23862] [client 20.226.103.253:25203] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "agQDAB1cs5wE7VT6wiruoAAAAI4"]
[Wed May 13 12:50:09.168345 2026] [:error] [pid 23887:tid 23913] [client 20.226.103.253:25196] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "agQDAdSKmvZJZkXBFDB5OQAAANI"]
[Wed May 13 12:50:10.179292 2026] [:error] [pid 27332:tid 27348] [client 20.226.103.253:25157] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "agQDAo6Y5F_V9bmyC4aAjAAAAU4"]
[Wed May 13 12:50:11.062796 2026] [:error] [pid 27332:tid 27351] [client 20.226.103.253:25059] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "agQDA46Y5F_V9bmyC4aAkAAAAVE"]
[Wed May 13 12:50:11.901915 2026] [:error] [pid 23887:tid 23895] [client 20.226.103.253:25204] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.tmb/"] [unique_id "agQDA9SKmvZJZkXBFDB5OwAAAMA"]
[Wed May 13 12:50:12.683846 2026] [:error] [pid 23780:tid 23806] [client 20.226.103.253:25027] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agQDBHXgOibPjrXgeTBzJAAAAAw"]
[Wed May 13 12:50:13.516972 2026] [:error] [pid 3259:tid 3284] [client 20.226.103.253:25257] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agQDBeWJB4YwcPVLeArzoQAAARc"]
[Wed May 13 12:50:14.204669 2026] [:error] [pid 23887:tid 23911] [client 20.226.103.253:25181] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agQDBtSKmvZJZkXBFDB5PQAAANA"]
[Wed May 13 12:50:15.177972 2026] [:error] [pid 23780:tid 23805] [client 20.226.103.253:25131] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agQDB3XgOibPjrXgeTBzJwAAAAs"]
[Wed May 13 12:50:16.337983 2026] [:error] [pid 23887:tid 23898] [client 20.226.103.253:25195] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "agQDCNSKmvZJZkXBFDB5PgAAAMM"]
[Wed May 13 12:50:17.283471 2026] [:error] [pid 3259:tid 3263] [client 20.226.103.253:25180] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "agQDCeWJB4YwcPVLeArzogAAAQI"]
[Wed May 13 12:50:18.100087 2026] [:error] [pid 3259:tid 3271] [client 20.226.103.253:25140] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "agQDCuWJB4YwcPVLeArzowAAAQo"]
[Wed May 13 12:50:18.838583 2026] [:error] [pid 3259:tid 3267] [client 20.226.103.253:25190] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sl.php"] [unique_id "agQDCuWJB4YwcPVLeArzpQAAAQY"]
[Wed May 13 12:50:19.598076 2026] [:error] [pid 23782:tid 23822] [client 20.226.103.253:25121] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "agQDCyBrKFYHXUGnR-q4kgAAAEE"]
[Wed May 13 12:50:20.324561 2026] [:error] [pid 23780:tid 23817] [client 20.226.103.253:25133] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-temp.php"] [unique_id "agQDDHXgOibPjrXgeTBzKAAAABc"]
[Wed May 13 12:50:21.273495 2026] [:error] [pid 3259:tid 3262] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Wed May 13 12:50:21.904639 2026] [:error] [pid 3259:tid 3265] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Wed May 13 12:50:22.270196 2026] [:error] [pid 3259:tid 3270] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Wed May 13 12:50:23.011706 2026] [:error] [pid 3259:tid 3278] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Wed May 13 12:50:23.325974 2026] [:error] [pid 3259:tid 3277] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Wed May 13 12:50:23.637647 2026] [:error] [pid 3259:tid 3268] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed May 13 12:50:23.949720 2026] [:error] [pid 3259:tid 3273] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Wed May 13 12:50:24.263285 2026] [:error] [pid 3259:tid 3279] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Wed May 13 12:50:24.591990 2026] [:error] [pid 3259:tid 3274] [client 20.226.103.253:25111] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Wed May 13 12:50:24.900205 2026] [:error] [pid 3259:tid 3266] [client 20.226.103.253:25111] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agQDEOWJB4YwcPVLeArzsQAAAQU"]
[Wed May 13 12:50:25.773624 2026] [:error] [pid 3259:tid 3261] [client 20.226.103.253:25170] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agQDEeWJB4YwcPVLeArzswAAAQA"]
[Wed May 13 12:50:26.547948 2026] [:error] [pid 23780:tid 23801] [client 20.226.103.253:25262] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agQDEnXgOibPjrXgeTBzKQAAAAc"]
[Wed May 13 12:50:27.341651 2026] [:error] [pid 3259:tid 3275] [client 20.226.103.253:25252] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agQDE-WJB4YwcPVLeArztgAAAQ4"]
[Wed May 13 12:50:28.655257 2026] [:error] [pid 3259:tid 3283] [client 20.226.103.253:25102] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agQDFOWJB4YwcPVLeArztwAAARY"]
[Wed May 13 12:50:29.488355 2026] [:error] [pid 3259:tid 3263] [client 20.226.103.253:25219] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agQDFeWJB4YwcPVLeArzuQAAAQI"]
[Wed May 13 12:50:30.379145 2026] [:error] [pid 23782:tid 23824] [client 20.226.103.253:25109] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agQDFiBrKFYHXUGnR-q4mwAAAEM"]
[Wed May 13 12:50:31.330783 2026] [:error] [pid 3259:tid 3280] [client 20.226.103.253:25096] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/"] [unique_id "agQDF-WJB4YwcPVLeArzvAAAARM"]
[Wed May 13 12:50:32.072276 2026] [:error] [pid 23782:tid 23840] [client 20.226.103.253:25115] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agQDGCBrKFYHXUGnR-q4nQAAAFM"]
[Wed May 13 12:50:33.256680 2026] [:error] [pid 3259:tid 3277] [client 20.226.103.253:25263] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agQDGeWJB4YwcPVLeArzwAAAARA"]
[Wed May 13 12:50:34.124996 2026] [:error] [pid 23887:tid 23909] [client 20.226.103.253:25143] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agQDGtSKmvZJZkXBFDB5RgAAAM4"]
[Wed May 13 12:50:34.939017 2026] [:error] [pid 23887:tid 23914] [client 20.226.103.253:25120] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agQDGtSKmvZJZkXBFDB5RwAAANM"]
[Wed May 13 12:50:35.666130 2026] [:error] [pid 23887:tid 23899] [client 20.226.103.253:25138] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agQDG9SKmvZJZkXBFDB5SQAAAMQ"]
[Wed May 13 12:50:36.517574 2026] [:error] [pid 23887:tid 23902] [client 20.226.103.253:25095] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agQDHNSKmvZJZkXBFDB5TAAAAMc"]
[Wed May 13 12:50:37.364326 2026] [:error] [pid 23782:tid 23831] [client 20.226.103.253:25220] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agQDHSBrKFYHXUGnR-q4oAAAAEo"]
[Wed May 13 12:50:38.156551 2026] [:error] [pid 23782:tid 23841] [client 20.226.103.253:25148] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agQDHiBrKFYHXUGnR-q4owAAAFQ"]
[Wed May 13 12:50:39.111598 2026] [:error] [pid 23780:tid 23818] [client 20.226.103.253:25101] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "agQDH3XgOibPjrXgeTBzLQAAABg"]
[Wed May 13 12:50:39.821496 2026] [:error] [pid 23787:tid 23863] [client 20.226.103.253:25048] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "agQDHx1cs5wE7VT6wirupgAAAI8"]
[Wed May 13 12:50:40.760429 2026] [:error] [pid 23787:tid 23867] [client 20.226.103.253:25091] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "agQDIB1cs5wE7VT6wirupwAAAJM"]
[Wed May 13 12:50:41.481125 2026] [:error] [pid 3259:tid 3283] [client 20.226.103.253:25090] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/seo.php"] [unique_id "agQDIeWJB4YwcPVLeArzxgAAARY"]
[Wed May 13 12:50:42.356335 2026] [:error] [pid 27332:tid 27345] [client 20.226.103.253:25056] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agQDIo6Y5F_V9bmyC4aAnQAAAUs"]
[Wed May 13 12:50:43.105524 2026] [:error] [pid 23782:tid 23836] [client 20.226.103.253:25074] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agQDIyBrKFYHXUGnR-q4qQAAAE8"]
[Wed May 13 12:50:43.882757 2026] [:error] [pid 23782:tid 23833] [client 20.226.103.253:25216] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agQDIyBrKFYHXUGnR-q4qgAAAEw"]
[Wed May 13 12:50:44.697476 2026] [:error] [pid 23782:tid 23826] [client 20.226.103.253:25025] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agQDJCBrKFYHXUGnR-q4rAAAAEU"]
[Wed May 13 12:50:45.539198 2026] [:error] [pid 27332:tid 27343] [client 20.226.103.253:25224] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agQDJY6Y5F_V9bmyC4aAowAAAUk"]
[Wed May 13 12:50:46.539942 2026] [:error] [pid 23782:tid 23845] [client 20.226.103.253:25071] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agQDJiBrKFYHXUGnR-q4rQAAAFg"]
[Wed May 13 12:50:47.376835 2026] [:error] [pid 23780:tid 23808] [client 20.226.103.253:25028] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agQDJ3XgOibPjrXgeTBzMAAAAA4"]
[Wed May 13 12:50:48.202206 2026] [:error] [pid 23787:tid 23852] [client 20.226.103.253:25044] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agQDKB1cs5wE7VT6wiruqwAAAIQ"]
[Wed May 13 12:50:48.927159 2026] [:error] [pid 23887:tid 23910] [client 20.226.103.253:25100] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agQDKNSKmvZJZkXBFDB5UQAAAM8"]
[Wed May 13 12:50:49.768662 2026] [:error] [pid 23887:tid 23908] [client 20.226.103.253:24972] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agQDKdSKmvZJZkXBFDB5VAAAAM0"]
[Wed May 13 12:50:50.564545 2026] [:error] [pid 3259:tid 3272] [client 20.226.103.253:25154] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agQDKuWJB4YwcPVLeArz1wAAAQs"]
[Wed May 13 12:50:51.297488 2026] [:error] [pid 23787:tid 23862] [client 20.226.103.253:25116] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agQDKx1cs5wE7VT6wirurAAAAI4"]
[Wed May 13 12:50:51.997363 2026] [:error] [pid 23787:tid 23857] [client 20.226.103.253:25060] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agQDKx1cs5wE7VT6wirurQAAAIk"]
[Wed May 13 12:50:52.949689 2026] [:error] [pid 23782:tid 23841] [client 20.226.103.253:25054] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agQDLCBrKFYHXUGnR-q4sAAAAFQ"]
[Wed May 13 12:50:53.696467 2026] [:error] [pid 23887:tid 23897] [client 20.226.103.253:25155] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agQDLdSKmvZJZkXBFDB5VwAAAMI"]
[Wed May 13 12:50:54.428648 2026] [:error] [pid 3259:tid 3279] [client 20.226.103.253:25260] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agQDLuWJB4YwcPVLeArz2AAAARI"]
[Wed May 13 12:50:55.316651 2026] [:error] [pid 27332:tid 27346] [client 20.226.103.253:25132] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agQDL46Y5F_V9bmyC4aAuQAAAUw"]
[Wed May 13 12:50:56.848663 2026] [:error] [pid 3259:tid 3270] [client 20.226.103.253:25194] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agQDMOWJB4YwcPVLeArz3AAAAQk"]
[Wed May 13 12:50:57.884309 2026] [:error] [pid 23780:tid 23812] [client 20.226.103.253:25050] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agQDMXXgOibPjrXgeTBzNwAAABI"]
[Wed May 13 12:50:59.170330 2026] [:error] [pid 23780:tid 23798] [client 20.226.103.253:25070] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agQDM3XgOibPjrXgeTBzOgAAAAQ"]
[Wed May 13 12:50:59.950997 2026] [:error] [pid 23887:tid 23918] [client 20.226.103.253:25187] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "agQDM9SKmvZJZkXBFDB5WwAAANc"]
[Wed May 13 12:51:01.003078 2026] [:error] [pid 23780:tid 23811] [client 20.226.103.253:25043] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "agQDNXXgOibPjrXgeTBzPAAAABE"]
[Wed May 13 12:51:02.179059 2026] [:error] [pid 23787:tid 23855] [client 20.226.103.253:25147] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "agQDNh1cs5wE7VT6wiruvQAAAIc"]
[Wed May 13 12:51:03.495248 2026] [:error] [pid 23780:tid 23818] [client 20.226.103.253:25126] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "agQDN3XgOibPjrXgeTBzPwAAABg"]
[Wed May 13 12:51:04.939123 2026] [:error] [pid 23787:tid 23867] [client 20.226.103.253:24985] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agQDOB1cs5wE7VT6wiruwQAAAJM"]
[Wed May 13 12:51:06.177690 2026] [:error] [pid 23887:tid 23911] [client 20.226.103.253:25063] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agQDOtSKmvZJZkXBFDB5XgAAANA"]
[Wed May 13 12:51:06.975918 2026] [:error] [pid 23887:tid 23917] [client 20.226.103.253:25217] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agQDOtSKmvZJZkXBFDB5YQAAANY"]
[Wed May 13 12:51:07.850559 2026] [:error] [pid 3259:tid 3285] [client 20.226.103.253:25193] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agQDO-WJB4YwcPVLeArz4gAAARg"]
[Wed May 13 12:51:08.775818 2026] [:error] [pid 3259:tid 3282] [client 20.226.103.253:25234] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "agQDPOWJB4YwcPVLeArz5AAAARU"]
[Wed May 13 12:51:10.016280 2026] [:error] [pid 27332:tid 27337] [client 20.226.103.253:25061] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "agQDPo6Y5F_V9bmyC4aAzgAAAUM"]
[Wed May 13 12:51:11.018805 2026] [:error] [pid 3259:tid 3265] [client 20.226.103.253:25207] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "agQDP-WJB4YwcPVLeArz5gAAAQQ"]
[Wed May 13 12:51:12.124539 2026] [:error] [pid 3259:tid 3275] [client 20.226.103.253:25113] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xa.php"] [unique_id "agQDQOWJB4YwcPVLeArz6AAAAQ4"]
[Wed May 13 12:51:13.094692 2026] [:error] [pid 3259:tid 3273] [client 20.226.103.253:25139] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agQDQeWJB4YwcPVLeArz6gAAAQw"]
[Wed May 13 12:51:14.744989 2026] [:error] [pid 27332:tid 27339] [client 20.226.103.253:25250] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agQDQo6Y5F_V9bmyC4aA0wAAAUU"]
[Wed May 13 12:51:15.502576 2026] [:error] [pid 3259:tid 3266] [client 20.226.103.253:25104] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agQDQ-WJB4YwcPVLeArz7AAAAQU"]
[Wed May 13 12:51:16.752303 2026] [:error] [pid 3259:tid 3285] [client 20.226.103.253:25084] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agQDROWJB4YwcPVLeArz8QAAARg"]
[Wed May 13 12:51:17.839496 2026] [:error] [pid 23887:tid 23901] [client 20.226.103.253:25037] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "agQDRdSKmvZJZkXBFDB5ZQAAAMY"]
[Wed May 13 12:51:18.724067 2026] [:error] [pid 27332:tid 27346] [client 20.226.103.253:25197] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "agQDRo6Y5F_V9bmyC4aA2QAAAUw"]
[Wed May 13 12:51:19.609334 2026] [:error] [pid 23782:tid 23840] [client 20.226.103.253:25137] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "agQDRyBrKFYHXUGnR-q4twAAAFM"]
[Wed May 13 12:51:20.493103 2026] [:error] [pid 3259:tid 3275] [client 20.226.103.253:24982] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w2025.php"] [unique_id "agQDSOWJB4YwcPVLeArz-AAAAQ4"]
[Wed May 13 12:51:21.505342 2026] [:error] [pid 27332:tid 27350] [client 20.226.103.253:25032] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "agQDSY6Y5F_V9bmyC4aA3wAAAVA"]
[Wed May 13 12:51:22.261393 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25205] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "agQDSo6Y5F_V9bmyC4aA4QAAAUA"]
[Wed May 13 12:51:23.316158 2026] [:error] [pid 23887:tid 23897] [client 20.226.103.253:25184] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fvvff.php"] [unique_id "agQDS9SKmvZJZkXBFDB5ZwAAAMI"]
[Wed May 13 12:51:24.110160 2026] [:error] [pid 23787:tid 23850] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Wed May 13 12:51:24.434723 2026] [:error] [pid 23787:tid 23851] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed May 13 12:51:24.784862 2026] [:error] [pid 23787:tid 23870] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 13 12:51:25.440045 2026] [:error] [pid 23787:tid 23865] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Wed May 13 12:51:25.773663 2026] [:error] [pid 23787:tid 23854] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed May 13 12:51:26.089951 2026] [:error] [pid 23787:tid 23859] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Wed May 13 12:51:26.913916 2026] [:error] [pid 23787:tid 23858] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Wed May 13 12:51:27.229935 2026] [:error] [pid 23787:tid 23867] [client 20.226.103.253:25038] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Wed May 13 12:51:27.978099 2026] [:error] [pid 23787:tid 23853] [client 20.226.103.253:25038] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "agQDTx1cs5wE7VT6wiru1QAAAIU"]
[Wed May 13 12:51:29.394808 2026] [:error] [pid 23887:tid 23919] [client 20.226.103.253:25099] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "agQDUdSKmvZJZkXBFDB5aQAAANg"]
[Wed May 13 12:51:30.305759 2026] [:error] [pid 23780:tid 23800] [client 20.226.103.253:25242] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "agQDUnXgOibPjrXgeTBzSgAAAAY"]
[Wed May 13 12:51:31.213887 2026] [:error] [pid 23787:tid 23852] [client 20.226.103.253:25106] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog.php"] [unique_id "agQDUx1cs5wE7VT6wiru1gAAAIQ"]
[Wed May 13 12:51:32.419822 2026] [:error] [pid 3259:tid 3266] [client 20.226.103.253:25076] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agQDVOWJB4YwcPVLeAr0FAAAAQU"]
[Wed May 13 12:51:33.300760 2026] [:error] [pid 27332:tid 27339] [client 20.226.103.253:25232] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agQDVY6Y5F_V9bmyC4aA9QAAAUU"]
[Wed May 13 12:51:34.079371 2026] [:error] [pid 3259:tid 3262] [client 20.226.103.253:25201] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agQDVuWJB4YwcPVLeAr0FwAAAQE"]
[Wed May 13 12:51:35.253512 2026] [:error] [pid 23887:tid 23914] [client 20.226.103.253:25042] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "agQDV9SKmvZJZkXBFDB5awAAANM"]
[Wed May 13 12:51:36.272693 2026] [:error] [pid 23887:tid 23918] [client 20.226.103.253:24996] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agQDWNSKmvZJZkXBFDB5bgAAANc"]
[Wed May 13 12:51:37.029402 2026] [:error] [pid 27332:tid 27349] [client 20.226.103.253:24962] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agQDWY6Y5F_V9bmyC4aA-gAAAU8"]
[Wed May 13 12:51:37.844459 2026] [:error] [pid 27332:tid 27350] [client 20.226.103.253:25077] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agQDWY6Y5F_V9bmyC4aA_QAAAVA"]
[Wed May 13 12:51:38.730091 2026] [:error] [pid 23780:tid 23814] [client 20.226.103.253:25051] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/admin.php"] [unique_id "agQDWnXgOibPjrXgeTBzUQAAABQ"]
[Wed May 13 12:51:39.768656 2026] [:error] [pid 23782:tid 23840] [client 20.226.103.253:24998] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agQDWyBrKFYHXUGnR-q4vwAAAFM"]
[Wed May 13 12:51:40.598749 2026] [:error] [pid 23787:tid 23862] [client 20.226.103.253:25086] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agQDXB1cs5wE7VT6wiru2gAAAI4"]
[Wed May 13 12:51:41.454449 2026] [:error] [pid 23787:tid 23870] [client 20.226.103.253:24978] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agQDXR1cs5wE7VT6wiru3AAAAJY"]
[Wed May 13 12:51:42.565462 2026] [:error] [pid 3259:tid 3262] [client 20.226.103.253:25124] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agQDXuWJB4YwcPVLeAr0IQAAAQE"]
[Wed May 13 12:51:43.595178 2026] [:error] [pid 23782:tid 23832] [client 20.226.103.253:25110] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agQDXyBrKFYHXUGnR-q4wwAAAEs"]
[Wed May 13 12:51:44.439613 2026] [:error] [pid 27332:tid 27339] [client 20.226.103.253:25055] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agQDYI6Y5F_V9bmyC4aBBAAAAUU"]
[Wed May 13 12:51:45.307313 2026] [:error] [pid 23780:tid 23797] [client 20.226.103.253:24961] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agQDYXXgOibPjrXgeTBzVQAAAAM"]
[Wed May 13 12:51:46.267059 2026] [:error] [pid 23887:tid 23900] [client 20.226.103.253:25064] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agQDYtSKmvZJZkXBFDB5cAAAAMU"]
[Wed May 13 12:51:47.495417 2026] [:error] [pid 23887:tid 23904] [client 20.226.103.253:25024] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agQDY9SKmvZJZkXBFDB5cQAAAMk"]
[Wed May 13 12:51:48.378505 2026] [:error] [pid 3259:tid 3281] [client 20.226.103.253:25069] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agQDZOWJB4YwcPVLeAr0KAAAARQ"]
[Wed May 13 12:51:49.666948 2026] [:error] [pid 3259:tid 3262] [client 20.226.103.253:25039] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agQDZeWJB4YwcPVLeAr0LAAAAQE"]
[Wed May 13 12:51:50.565229 2026] [:error] [pid 23887:tid 23908] [client 20.226.103.253:24989] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agQDZtSKmvZJZkXBFDB5dQAAAM0"]
[Wed May 13 12:51:51.472913 2026] [:error] [pid 23887:tid 23916] [client 20.226.103.253:25033] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agQDZ9SKmvZJZkXBFDB5dwAAANU"]
[Wed May 13 12:51:52.446320 2026] [:error] [pid 23887:tid 23906] [client 20.226.103.253:25228] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agQDaNSKmvZJZkXBFDB5eQAAAMs"]
[Wed May 13 12:51:53.273780 2026] [:error] [pid 27332:tid 27350] [client 20.226.103.253:24579] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agQDaY6Y5F_V9bmyC4aBCQAAAVA"]
[Wed May 13 12:51:54.193771 2026] [:error] [pid 27332:tid 27337] [client 20.226.103.253:25151] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agQDao6Y5F_V9bmyC4aBDQAAAUM"]
[Wed May 13 12:51:55.250756 2026] [:error] [pid 23787:tid 23865] [client 20.226.103.253:24974] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agQDax1cs5wE7VT6wiru6gAAAJE"]
[Wed May 13 12:51:56.136555 2026] [:error] [pid 3259:tid 3283] [client 20.226.103.253:24979] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agQDbOWJB4YwcPVLeAr0LwAAARY"]
[Wed May 13 12:51:56.928781 2026] [:error] [pid 23887:tid 23918] [client 20.226.103.253:25017] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agQDbNSKmvZJZkXBFDB5fAAAANc"]
[Wed May 13 12:51:57.623481 2026] [:error] [pid 23782:tid 23843] [client 20.226.103.253:25016] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/index.php"] [unique_id "agQDbSBrKFYHXUGnR-q4zQAAAFY"]
[Wed May 13 12:51:58.692071 2026] [:error] [pid 27332:tid 27338] [client 20.226.103.253:25112] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agQDbo6Y5F_V9bmyC4aBFgAAAUQ"]
[Wed May 13 12:51:59.702055 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25251] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agQDb46Y5F_V9bmyC4aBGQAAAUA"]
[Wed May 13 12:52:00.451579 2026] [:error] [pid 23787:tid 23854] [client 20.226.103.253:25034] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agQDcB1cs5wE7VT6wiru7AAAAIY"]
[Wed May 13 12:52:01.492725 2026] [:error] [pid 3259:tid 3268] [client 20.226.103.253:25000] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "agQDceWJB4YwcPVLeAr0MQAAAQc"]
[Wed May 13 12:52:02.550205 2026] [:error] [pid 23887:tid 23907] [client 20.226.103.253:25006] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agQDctSKmvZJZkXBFDB5gQAAAMw"]
[Wed May 13 12:52:03.385086 2026] [:error] [pid 23780:tid 23797] [client 20.226.103.253:24587] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agQDc3XgOibPjrXgeTBzYAAAAAM"]
[Wed May 13 12:52:04.113550 2026] [:error] [pid 23787:tid 23864] [client 20.226.103.253:24995] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agQDdB1cs5wE7VT6wiru8AAAAJA"]
[Wed May 13 12:52:05.007121 2026] [:error] [pid 23787:tid 23853] [client 20.226.103.253:24576] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agQDdR1cs5wE7VT6wiru9AAAAIU"]
[Wed May 13 12:52:05.869252 2026] [:error] [pid 23887:tid 23899] [client 20.226.103.253:25046] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agQDddSKmvZJZkXBFDB5iQAAAMQ"]
[Wed May 13 12:52:06.798533 2026] [:error] [pid 23780:tid 23800] [client 20.226.103.253:24970] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agQDdnXgOibPjrXgeTBzYwAAAAY"]
[Wed May 13 12:52:08.066253 2026] [:error] [pid 23887:tid 23918] [client 20.226.103.253:25183] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agQDeNSKmvZJZkXBFDB5jwAAANc"]
[Wed May 13 12:52:09.208188 2026] [:error] [pid 23780:tid 23811] [client 20.226.103.253:25087] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/l10n/"] [unique_id "agQDeXXgOibPjrXgeTBzaAAAABE"]
[Wed May 13 12:52:10.075365 2026] [:error] [pid 27332:tid 27351] [client 20.226.103.253:25080] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agQDeo6Y5F_V9bmyC4aBHQAAAVE"]
[Wed May 13 12:52:10.911772 2026] [:error] [pid 27332:tid 27341] [client 20.226.103.253:24984] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agQDeo6Y5F_V9bmyC4aBIAAAAUc"]
[Wed May 13 12:52:12.084779 2026] [:error] [pid 23780:tid 23812] [client 20.226.103.253:25041] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agQDfHXgOibPjrXgeTBzawAAABI"]
[Wed May 13 12:52:12.826097 2026] [:error] [pid 23887:tid 23901] [client 20.226.103.253:25065] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agQDfNSKmvZJZkXBFDB5lAAAAMY"]
[Wed May 13 12:52:13.550390 2026] [:error] [pid 23787:tid 23868] [client 20.226.103.253:25265] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agQDfR1cs5wE7VT6wiru-QAAAJQ"]
[Wed May 13 12:52:14.448734 2026] [:error] [pid 23787:tid 23872] [client 20.226.103.253:25068] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agQDfh1cs5wE7VT6wiru-wAAAJg"]
[Wed May 13 12:52:15.301088 2026] [:error] [pid 23787:tid 23871] [client 20.226.103.253:25049] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agQDfx1cs5wE7VT6wiru_QAAAJc"]
[Wed May 13 12:52:16.284621 2026] [:error] [pid 27332:tid 27353] [client 20.226.103.253:24975] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agQDgI6Y5F_V9bmyC4aBIQAAAVM"]
[Wed May 13 12:52:17.052910 2026] [:error] [pid 23887:tid 23913] [client 20.226.103.253:25066] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agQDgdSKmvZJZkXBFDB5lgAAANI"]
[Wed May 13 12:52:18.423254 2026] [:error] [pid 23887:tid 23914] [client 20.226.103.253:24986] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agQDgtSKmvZJZkXBFDB5mAAAANM"]
[Wed May 13 12:52:19.328615 2026] [:error] [pid 23787:tid 23863] [client 20.226.103.253:25128] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agQDgx1cs5wE7VT6wirvAQAAAI8"]
[Wed May 13 12:52:21.168062 2026] [:error] [pid 23787:tid 23857] [client 20.226.103.253:24981] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "agQDhR1cs5wE7VT6wirvAwAAAIk"]
[Wed May 13 12:52:22.134994 2026] [:error] [pid 3259:tid 3270] [client 20.226.103.253:25122] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agQDhuWJB4YwcPVLeAr0NAAAAQk"]
[Wed May 13 12:52:23.035071 2026] [:error] [pid 3259:tid 3281] [client 20.226.103.253:24992] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agQDh-WJB4YwcPVLeAr0NQAAARQ"]
[Wed May 13 12:52:23.926616 2026] [:error] [pid 23782:tid 23835] [client 20.226.103.253:25081] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agQDhyBrKFYHXUGnR-q41gAAAE4"]
[Wed May 13 12:52:24.679669 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25085] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agQDiI6Y5F_V9bmyC4aBIwAAAUA"]
[Wed May 13 12:52:25.753085 2026] [:error] [pid 23780:tid 23817] [client 20.226.103.253:24993] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "agQDiXXgOibPjrXgeTBzcgAAABc"]
[Wed May 13 12:52:26.512980 2026] [:error] [pid 23782:tid 23840] [client 20.226.103.253:25057] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "agQDiiBrKFYHXUGnR-q41wAAAFM"]
[Wed May 13 12:52:27.418897 2026] [:error] [pid 23787:tid 23865] [client 20.226.103.253:24977] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed May 13 12:52:27.732841 2026] [:error] [pid 23787:tid 23859] [client 20.226.103.253:24977] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Wed May 13 12:52:28.367955 2026] [:error] [pid 23787:tid 23860] [client 20.226.103.253:24977] [client 20.226.103.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "agQDjB1cs5wE7VT6wirvCgAAAIw"]
[Wed May 13 12:52:29.389864 2026] [:error] [pid 23780:tid 23801] [client 20.226.103.253:25010] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed May 13 12:52:30.032740 2026] [:error] [pid 23780:tid 23803] [client 20.226.103.253:25010] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Wed May 13 12:52:31.135681 2026] [:error] [pid 23780:tid 23808] [client 20.226.103.253:25010] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed May 13 12:52:32.269629 2026] [:error] [pid 23780:tid 23809] [client 20.226.103.253:25010] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "agQDkHXgOibPjrXgeTBzfwAAAA8"]
[Wed May 13 12:52:33.049170 2026] [:error] [pid 27332:tid 27358] [client 20.226.103.253:25021] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "agQDkY6Y5F_V9bmyC4aBKgAAAVg"]
[Wed May 13 12:52:33.782323 2026] [:error] [pid 27332:tid 27355] [client 20.226.103.253:25013] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "agQDkY6Y5F_V9bmyC4aBLAAAAVU"]
[Wed May 13 12:52:34.440768 2026] [:error] [pid 23887:tid 23914] [client 20.226.103.253:24585] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "agQDktSKmvZJZkXBFDB5qQAAANM"]
[Wed May 13 12:52:38.718376 2026] [:error] [pid 23780:tid 23794] [client 20.226.103.253:24610] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agQDlnXgOibPjrXgeTBzgAAAAAA"]
[Wed May 13 12:52:39.643948 2026] [:error] [pid 3259:tid 3282] [client 20.226.103.253:25047] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agQDl-WJB4YwcPVLeAr0QwAAARU"]
[Wed May 13 12:52:40.364106 2026] [:error] [pid 3259:tid 3270] [client 20.226.103.253:25075] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agQDmOWJB4YwcPVLeAr0RQAAAQk"]
[Wed May 13 12:52:41.040304 2026] [:error] [pid 27332:tid 27345] [client 20.226.103.253:25003] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agQDmY6Y5F_V9bmyC4aBMwAAAUs"]
[Wed May 13 12:52:41.758446 2026] [:error] [pid 23782:tid 23830] [client 20.226.103.253:25272] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "agQDmSBrKFYHXUGnR-q44AAAAEk"]
[Wed May 13 12:52:42.485627 2026] [:error] [pid 3259:tid 3274] [client 20.226.103.253:24584] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "agQDmuWJB4YwcPVLeAr0SAAAAQ0"]
[Wed May 13 12:52:43.189919 2026] [:error] [pid 27332:tid 27354] [client 20.226.103.253:25053] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "agQDm46Y5F_V9bmyC4aBNgAAAVQ"]
[Wed May 13 12:52:44.053219 2026] [:error] [pid 23782:tid 23844] [client 20.226.103.253:25127] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "agQDnCBrKFYHXUGnR-q44gAAAFc"]
[Wed May 13 12:52:45.083169 2026] [:error] [pid 23887:tid 23900] [client 20.226.103.253:24577] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "agQDndSKmvZJZkXBFDB5sgAAAMU"]
[Wed May 13 12:52:46.054657 2026] [:error] [pid 23887:tid 23915] [client 20.226.103.253:25161] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "agQDntSKmvZJZkXBFDB5swAAANQ"]
[Wed May 13 12:52:48.934382 2026] [:error] [pid 23780:tid 23804] [client 20.226.103.253:25019] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "agQDoHXgOibPjrXgeTBzhwAAAAo"]
[Wed May 13 12:52:49.832259 2026] [:error] [pid 23787:tid 23867] [client 20.226.103.253:25001] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hypo.php"] [unique_id "agQDoR1cs5wE7VT6wirvEQAAAJM"]
[Wed May 13 12:52:50.936142 2026] [:error] [pid 23782:tid 23843] [client 20.226.103.253:24971] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agQDoiBrKFYHXUGnR-q45wAAAFY"]
[Wed May 13 12:52:52.133396 2026] [:error] [pid 23887:tid 23899] [client 20.226.103.253:24593] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agQDpNSKmvZJZkXBFDB5tQAAAMQ"]
[Wed May 13 12:52:53.069367 2026] [:error] [pid 27332:tid 27349] [client 20.226.103.253:25273] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agQDpY6Y5F_V9bmyC4aBRQAAAU8"]
[Wed May 13 12:52:54.058385 2026] [:error] [pid 3259:tid 3275] [client 20.226.103.253:25045] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agQDpuWJB4YwcPVLeAr0UQAAAQ4"]
[Wed May 13 12:52:54.916770 2026] [:error] [pid 23780:tid 23808] [client 20.226.103.253:25022] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agQDpnXgOibPjrXgeTBzigAAAA4"]
[Wed May 13 12:52:56.069383 2026] [:error] [pid 3259:tid 3279] [client 20.226.103.253:25094] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agQDqOWJB4YwcPVLeAr0VgAAARI"]
[Wed May 13 12:52:56.912192 2026] [:error] [pid 23787:tid 23860] [client 20.226.103.253:25172] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agQDqB1cs5wE7VT6wirvFwAAAIw"]
[Wed May 13 12:52:57.814090 2026] [:error] [pid 23887:tid 23904] [client 20.226.103.253:24711] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agQDqdSKmvZJZkXBFDB5uAAAAMk"]
[Wed May 13 12:53:00.100570 2026] [:error] [pid 23887:tid 23906] [client 20.226.103.253:25008] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agQDrNSKmvZJZkXBFDB5vgAAAMs"]
[Wed May 13 12:53:01.209529 2026] [:error] [pid 23787:tid 23863] [client 20.226.103.253:25129] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agQDrR1cs5wE7VT6wirvHQAAAI8"]
[Wed May 13 12:53:02.592304 2026] [:error] [pid 23787:tid 23857] [client 20.226.103.253:25004] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agQDrh1cs5wE7VT6wirvHwAAAIk"]
[Wed May 13 12:53:03.858215 2026] [:error] [pid 27332:tid 27345] [client 20.226.103.253:25275] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "agQDr46Y5F_V9bmyC4aBVgAAAUs"]
[Wed May 13 12:53:04.978626 2026] [:error] [pid 27332:tid 27335] [client 20.226.103.253:24964] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "agQDsI6Y5F_V9bmyC4aBXgAAAUE"]
[Wed May 13 12:53:06.167675 2026] [:error] [pid 3259:tid 3272] [client 20.226.103.253:25018] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "agQDsuWJB4YwcPVLeAr0VwAAAQs"]
[Wed May 13 12:53:06.834483 2026] [:error] [pid 27332:tid 27347] [client 20.226.103.253:25230] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "agQDso6Y5F_V9bmyC4aBZQAAAU0"]
[Wed May 13 12:53:07.745947 2026] [:error] [pid 27332:tid 27355] [client 20.226.103.253:25020] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/00.php"] [unique_id "agQDs46Y5F_V9bmyC4aBZwAAAVU"]
[Wed May 13 12:53:08.574968 2026] [:error] [pid 23780:tid 23802] [client 20.226.103.253:25277] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/als.php"] [unique_id "agQDtHXgOibPjrXgeTBzkAAAAAg"]
[Wed May 13 12:53:09.387272 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25108] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/als.php"] [unique_id "agQDtY6Y5F_V9bmyC4aBbQAAAUA"]
[Wed May 13 12:53:10.100489 2026] [:error] [pid 3259:tid 3267] [client 20.226.103.253:25160] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/als.php"] [unique_id "agQDtuWJB4YwcPVLeAr0WgAAAQY"]
[Wed May 13 12:53:10.800846 2026] [:error] [pid 23780:tid 23804] [client 20.226.103.253:25162] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/als.php"] [unique_id "agQDtnXgOibPjrXgeTBzlAAAAAo"]
[Wed May 13 12:53:11.634626 2026] [:error] [pid 23782:tid 23845] [client 20.226.103.253:25123] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pol.php"] [unique_id "agQDtyBrKFYHXUGnR-q47AAAAFg"]
[Wed May 13 12:53:12.344871 2026] [:error] [pid 23787:tid 23867] [client 20.226.103.253:25093] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pol.php"] [unique_id "agQDuB1cs5wE7VT6wirvKwAAAJM"]
[Wed May 13 12:53:13.052928 2026] [:error] [pid 3259:tid 3276] [client 20.226.103.253:25026] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pol.php"] [unique_id "agQDueWJB4YwcPVLeAr0XAAAAQ8"]
[Wed May 13 12:53:14.116334 2026] [:error] [pid 27332:tid 27358] [client 20.226.103.253:24960] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pol.php"] [unique_id "agQDuo6Y5F_V9bmyC4aBcAAAAVg"]
[Wed May 13 12:53:15.514014 2026] [:error] [pid 23780:tid 23812] [client 20.226.103.253:25231] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-amdin.php"] [unique_id "agQDu3XgOibPjrXgeTBzlgAAABI"]
[Wed May 13 12:53:16.509943 2026] [:error] [pid 23887:tid 23908] [client 20.226.103.253:25259] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-amdin.php"] [unique_id "agQDvNSKmvZJZkXBFDB5xQAAAM0"]
[Wed May 13 12:53:17.405592 2026] [:error] [pid 3259:tid 3268] [client 20.226.103.253:25270] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-amdin.php"] [unique_id "agQDveWJB4YwcPVLeAr0YAAAAQc"]
[Wed May 13 12:53:18.207127 2026] [:error] [pid 23780:tid 23810] [client 20.226.103.253:25238] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-amdin.php"] [unique_id "agQDvnXgOibPjrXgeTBzmAAAABA"]
[Wed May 13 12:53:19.019300 2026] [:error] [pid 27332:tid 27345] [client 20.226.103.253:25136] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini-type0.php"] [unique_id "agQDv46Y5F_V9bmyC4aBdQAAAUs"]
[Wed May 13 12:53:20.012711 2026] [:error] [pid 23887:tid 23906] [client 20.226.103.253:24968] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini-type0.php"] [unique_id "agQDwNSKmvZJZkXBFDB5xwAAAMs"]
[Wed May 13 12:53:21.131688 2026] [:error] [pid 23787:tid 23849] [client 20.226.103.253:25261] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini-type0.php"] [unique_id "agQDwR1cs5wE7VT6wirvMwAAAIE"]
[Wed May 13 12:53:22.320934 2026] [:error] [pid 23787:tid 23858] [client 20.226.103.253:25266] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini-type0.php"] [unique_id "agQDwh1cs5wE7VT6wirvNQAAAIo"]
[Wed May 13 12:53:23.117177 2026] [:error] [pid 23782:tid 23821] [client 20.226.103.253:25092] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agQDwyBrKFYHXUGnR-q4-AAAAEA"]
[Wed May 13 12:53:23.924533 2026] [:error] [pid 3259:tid 3281] [client 20.226.103.253:25062] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agQDw-WJB4YwcPVLeAr0ZAAAARQ"]
[Wed May 13 12:53:24.910329 2026] [:error] [pid 23780:tid 23799] [client 20.226.103.253:25233] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agQDxHXgOibPjrXgeTBzmwAAAAU"]
[Wed May 13 12:53:25.904001 2026] [:error] [pid 23787:tid 23861] [client 20.226.103.253:24990] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bypasbnget.php"] [unique_id "agQDxR1cs5wE7VT6wirvNwAAAI0"]
[Wed May 13 12:53:26.888105 2026] [:error] [pid 3259:tid 3262] [client 20.226.103.253:25218] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agQDxuWJB4YwcPVLeAr0aAAAAQE"]
[Wed May 13 12:53:28.005523 2026] [:error] [pid 23782:tid 23834] [client 20.226.103.253:24622] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agQDyCBrKFYHXUGnR-q4_gAAAE0"]
[Wed May 13 12:53:29.346249 2026] [:error] [pid 27332:tid 27348] [client 20.226.103.253:24999] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agQDyY6Y5F_V9bmyC4aBewAAAU4"]
[Wed May 13 12:53:30.067936 2026] [:error] [pid 3259:tid 3285] [client 20.226.103.253:25245] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agQDyuWJB4YwcPVLeAr0bQAAARg"]
[Wed May 13 12:53:32.061309 2026] [:error] [pid 27332:tid 27339] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Wed May 13 12:53:32.390299 2026] [:error] [pid 27332:tid 27354] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Wed May 13 12:53:32.703796 2026] [:error] [pid 27332:tid 27344] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/4PJcpMFsD8B.php
[Wed May 13 12:53:33.098023 2026] [:error] [pid 27332:tid 27337] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed May 13 12:53:33.417798 2026] [:error] [pid 27332:tid 27343] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/class.1.php
[Wed May 13 12:53:33.985437 2026] [:error] [pid 27332:tid 27352] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Wed May 13 12:53:34.303036 2026] [:error] [pid 27332:tid 27336] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/cfile.php
[Wed May 13 12:53:34.795029 2026] [:error] [pid 27332:tid 27338] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp.php
[Wed May 13 12:53:35.108391 2026] [:error] [pid 27332:tid 27348] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Wed May 13 12:53:35.423337 2026] [:error] [pid 27332:tid 27358] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/aa2.php
[Wed May 13 12:53:35.749999 2026] [:error] [pid 27332:tid 27342] [client 20.226.103.253:25156] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Wed May 13 12:53:36.115465 2026] [:error] [pid 27332:tid 27339] [client 20.226.103.253:25156] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "agQD0I6Y5F_V9bmyC4aBjQAAAUU"]
[Wed May 13 12:53:37.135437 2026] [:error] [pid 23782:tid 23842] [client 20.226.103.253:25240] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "agQD0SBrKFYHXUGnR-q5AwAAAFU"]
[Wed May 13 12:53:38.084514 2026] [:error] [pid 3259:tid 3285] [client 20.226.103.253:25221] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "agQD0uWJB4YwcPVLeAr0dwAAARg"]
[Wed May 13 12:53:39.257359 2026] [:error] [pid 3259:tid 3275] [client 20.226.103.253:24627] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ccou.php"] [unique_id "agQD0-WJB4YwcPVLeAr0egAAAQ4"]
[Wed May 13 12:53:40.445508 2026] [:error] [pid 27332:tid 27344] [client 20.226.103.253:25264] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "agQD1I6Y5F_V9bmyC4aBjwAAAUo"]
[Wed May 13 12:53:41.332038 2026] [:error] [pid 23782:tid 23822] [client 20.226.103.253:24595] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "agQD1SBrKFYHXUGnR-q5CQAAAEE"]
[Wed May 13 12:53:43.032659 2026] [:error] [pid 23782:tid 23832] [client 20.226.103.253:25135] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "agQD1yBrKFYHXUGnR-q5DAAAAEs"]
[Wed May 13 12:53:44.308675 2026] [:error] [pid 23787:tid 23854] [client 20.226.103.253:25179] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/login8.php"] [unique_id "agQD2B1cs5wE7VT6wirvQwAAAIY"]
[Wed May 13 12:53:45.486734 2026] [:error] [pid 23782:tid 23840] [client 20.226.103.253:24598] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agQD2SBrKFYHXUGnR-q5FAAAAFM"]
[Wed May 13 12:53:46.229802 2026] [:error] [pid 23787:tid 23861] [client 20.226.103.253:25249] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agQD2h1cs5wE7VT6wirvSAAAAI0"]
[Wed May 13 12:53:47.306591 2026] [:error] [pid 27332:tid 27334] [client 20.226.103.253:25235] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agQD246Y5F_V9bmyC4aBkgAAAUA"]
[Wed May 13 12:53:48.327722 2026] [:error] [pid 27332:tid 27350] [client 20.226.103.253:25239] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/3586%20b64.php"] [unique_id "agQD3I6Y5F_V9bmyC4aBlwAAAVA"]
[Wed May 13 12:53:49.427035 2026] [:error] [pid 23782:tid 23827] [client 20.226.103.253:25246] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "agQD3SBrKFYHXUGnR-q5IAAAAEY"]
[Wed May 13 12:53:50.749139 2026] [:error] [pid 27332:tid 27358] [client 20.226.103.253:25243] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "agQD3o6Y5F_V9bmyC4aBnQAAAVg"]
[Wed May 13 12:53:51.629855 2026] [:error] [pid 27332:tid 27338] [client 20.226.103.253:25168] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "agQD346Y5F_V9bmyC4aBrQAAAUQ"]
[Wed May 13 12:53:52.479307 2026] [:error] [pid 3259:tid 3263] [client 20.226.103.253:25254] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/18299.php"] [unique_id "agQD4OWJB4YwcPVLeAr0lwAAAQI"]
[Wed May 13 12:53:54.240142 2026] [:error] [pid 3259:tid 3274] [client 20.226.103.253:25146] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "agQD4uWJB4YwcPVLeAr0pgAAAQ0"]
[Wed May 13 12:53:55.097136 2026] [:error] [pid 3259:tid 3270] [client 20.226.103.253:25176] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "agQD4-WJB4YwcPVLeAr0rwAAAQk"]
[Wed May 13 12:53:55.843635 2026] [:error] [pid 3259:tid 3278] [client 20.226.103.253:24719] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "agQD4-WJB4YwcPVLeAr0tAAAARE"]
[Wed May 13 12:53:56.683150 2026] [:error] [pid 27332:tid 27344] [client 20.226.103.253:24987] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nx1.php"] [unique_id "agQD5I6Y5F_V9bmyC4aBxQAAAUo"]
[Wed May 13 12:53:57.543286 2026] [:error] [pid 3259:tid 3261] [client 20.226.103.253:25005] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Noname6.php"] [unique_id "agQD5eWJB4YwcPVLeAr0tQAAAQA"]
[Wed May 13 12:53:58.551171 2026] [:error] [pid 23887:tid 23912] [client 20.226.103.253:25267] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Noname6.php"] [unique_id "agQD5tSKmvZJZkXBFDB57AAAANE"]
[Wed May 13 12:53:59.797336 2026] [:error] [pid 27332:tid 27348] [client 20.226.103.253:25153] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Noname6.php"] [unique_id "agQD546Y5F_V9bmyC4aByQAAAU4"]
[Wed May 13 12:54:01.065195 2026] [:error] [pid 3259:tid 3282] [client 20.226.103.253:25192] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Noname6.php"] [unique_id "agQD6eWJB4YwcPVLeAr0vwAAARU"]
[Wed May 13 12:54:01.946253 2026] [:error] [pid 23887:tid 23900] [client 20.226.103.253:25279] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tia.php"] [unique_id "agQD6dSKmvZJZkXBFDB57wAAAMU"]
[Wed May 13 12:54:03.237594 2026] [:error] [pid 23887:tid 23914] [client 20.226.103.253:25171] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tia.php"] [unique_id "agQD69SKmvZJZkXBFDB58QAAANM"]
[Wed May 13 12:54:04.119042 2026] [:error] [pid 27332:tid 27340] [client 20.226.103.253:24615] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tia.php"] [unique_id "agQD7I6Y5F_V9bmyC4aB0QAAAUY"]
[Wed May 13 12:54:05.147114 2026] [:error] [pid 3259:tid 3276] [client 20.226.103.253:25253] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tia.php"] [unique_id "agQD7eWJB4YwcPVLeAr0wAAAAQ8"]
[Wed May 13 12:54:06.358362 2026] [:error] [pid 23787:tid 23861] [client 20.226.103.253:25188] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coa.php"] [unique_id "agQD7h1cs5wE7VT6wirvewAAAI0"]
[Wed May 13 12:54:07.483105 2026] [:error] [pid 23787:tid 23863] [client 20.226.103.253:24980] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coa.php"] [unique_id "agQD7x1cs5wE7VT6wirvfgAAAI8"]
[Wed May 13 12:54:08.561980 2026] [:error] [pid 3259:tid 3278] [client 20.226.103.253:25209] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coa.php"] [unique_id "agQD8OWJB4YwcPVLeAr0xgAAARE"]
[Wed May 13 12:54:09.842466 2026] [:error] [pid 3259:tid 3274] [client 20.226.103.253:25241] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/coa.php"] [unique_id "agQD8eWJB4YwcPVLeAr0ywAAAQ0"]
[Wed May 13 12:54:11.034971 2026] [:error] [pid 3259:tid 3261] [client 20.226.103.253:25212] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "agQD8-WJB4YwcPVLeAr0zwAAAQA"]
[Wed May 13 12:54:12.260395 2026] [:error] [pid 27332:tid 27336] [client 20.226.103.253:24601] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "agQD9I6Y5F_V9bmyC4aB5AAAAUI"]
[Wed May 13 12:54:13.677346 2026] [:error] [pid 23787:tid 23853] [client 20.226.103.253:25247] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "agQD9R1cs5wE7VT6wirvgQAAAIU"]
[Wed May 13 12:54:14.771586 2026] [:error] [pid 23887:tid 23903] [client 20.226.103.253:25164] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "agQD9tSKmvZJZkXBFDB5_wAAAMg"]
[Wed May 13 12:54:15.989629 2026] [:error] [pid 27332:tid 27358] [client 20.226.103.253:25169] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "agQD946Y5F_V9bmyC4aB_QAAAVg"]
[Wed May 13 12:54:17.057595 2026] [:error] [pid 23887:tid 23900] [client 20.226.103.253:25114] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "agQD-dSKmvZJZkXBFDB6AgAAAMU"]
[Wed May 13 12:54:18.186029 2026] [:error] [pid 27332:tid 27353] [client 20.226.103.253:25271] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "agQD-o6Y5F_V9bmyC4aCAwAAAVM"]
[Wed May 13 12:54:19.236831 2026] [:error] [pid 3259:tid 3272] [client 20.226.103.253:24620] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/let.php"] [unique_id "agQD--WJB4YwcPVLeAr03gAAAQs"]
[Wed May 13 12:54:20.635774 2026] [:error] [pid 27332:tid 27338] [client 20.226.103.253:25165] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w12.php"] [unique_id "agQD_I6Y5F_V9bmyC4aCCQAAAUQ"]
[Wed May 13 12:54:23.086705 2026] [:error] [pid 27332:tid 27358] [client 20.226.103.253:24588] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w12.php"] [unique_id "agQD_46Y5F_V9bmyC4aCEAAAAVg"]
[Wed May 13 12:54:24.330668 2026] [:error] [pid 27332:tid 27336] [client 20.226.103.253:25269] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w12.php"] [unique_id "agQEAI6Y5F_V9bmyC4aCGAAAAUI"]
[Wed May 13 12:54:25.905127 2026] [:error] [pid 23780:tid 23795] [client 20.226.103.253:25088] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/w12.php"] [unique_id "agQEAXXgOibPjrXgeTBzwgAAAAE"]
[Wed May 13 12:54:27.163830 2026] [:error] [pid 27332:tid 27357] [client 20.226.103.253:25131] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chati.php"] [unique_id "agQEA46Y5F_V9bmyC4aCIQAAAVc"]
[Wed May 13 12:54:32.447653 2026] [:error] [pid 23887:tid 23897] [client 20.226.103.253:25226] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chati.php"] [unique_id "agQECNSKmvZJZkXBFDB6CwAAAMI"]
[Wed May 13 12:54:33.416555 2026] [:error] [pid 3259:tid 3267] [client 20.226.103.253:25157] [client 20.226.103.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chati.php"] [unique_id "agQECeWJB4YwcPVLeAr04wAAAQY"]
[Wed May 13 12:54:35.562900 2026] [:error] [pid 23782:tid 23837] [client 20.226.103.253:25082] File does not exist: /usr/local/apache/htdocs/suspended-page/chati.php
[Wed May 13 14:58:47.301347 2026] [:error] [pid 23887:tid 23901] [client 124.156.200.4:33580] [client 124.156.200.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agQhJ9SKmvZJZkXBFDCRsAAAAMY"]
[Wed May 13 15:05:52.580926 2026] [:error] [pid 3259:tid 3271] [client 34.106.28.114:38336] [client 34.106.28.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "agQi0OWJB4YwcPVLeAoVFwAAAQo"]
[Wed May 13 16:46:29.655707 2026] [:error] [pid 27332:tid 27350] [client 43.157.46.118:41826] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agQ6ZY6Y5F_V9bmyC4bReQAAAVA"]
[Wed May 13 17:37:00.438583 2026] [:error] [pid 3259:tid 3272] [client 106.54.62.156:34034] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agRGPOWJB4YwcPVLeAoqsQAAAQs"]
[Wed May 13 21:13:40.230950 2026] [:error] [pid 12426:tid 12440] [client 43.166.128.187:50422] [client 43.166.128.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agR5BLPw24RslX3LIcYeuQAAAMw"]
[Thu May 14 00:02:48.399803 2026] [:error] [pid 12340:tid 12416] [client 43.130.131.18:46096] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agSgqMrxSPfvmN7BQjKP0gAAAJQ"]
[Thu May 14 01:26:53.499570 2026] [:error] [pid 12338:tid 12392] [client 34.66.175.86:39836] [client 34.66.175.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "agS0XcUJ87l42ffPr4wtNAAAAFc"]
[Thu May 14 01:56:58.715038 2026] [:error] [pid 17873:tid 17875] [client 43.153.208.49:35258] [client 43.153.208.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agS7avEqBQQrkyEyu_oxCAAAAQA"]
[Thu May 14 05:37:24.498918 2026] [:error] [pid 11581:tid 11613] [client 43.153.208.49:58354] [client 43.153.208.49] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agTvFP0vF48FbzpvQMWEgQAAABA"]
[Thu May 14 05:58:08.303081 2026] [:error] [pid 63033:tid 63039] [client 119.91.20.139:54524] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agTz8FMY49UWn5BpqVZRhwAAAQQ"]
[Thu May 14 07:23:04.288733 2026] [:error] [pid 47721:tid 47730] [client 119.28.122.202:42736] [client 119.28.122.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agUH2HEmh7_G0hfOa6srPgAAAYc"]
[Thu May 14 10:33:11.952782 2026] [:error] [pid 11690:tid 11723] [client 43.153.48.240:34922] [client 43.153.48.240] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agU0ZynxWuLN8Hptw8nE8gAAANg"]
[Thu May 14 12:08:42.089801 2026] [:error] [pid 47673:tid 47687] [client 43.166.136.202:53652] [client 43.166.136.202] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agVKyvCGe4cIn3sh5k3q_gAAAUw"]
[Thu May 14 13:24:07.027468 2026] [:error] [pid 47673:tid 47680] [client 34.97.167.253:57734] [client 34.97.167.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "agVcd_CGe4cIn3sh5k31aQAAAUU"]
[Thu May 14 13:24:09.697911 2026] [:error] [pid 47721:tid 47724] [client 34.97.167.253:49536] [client 34.97.167.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "agVceXEmh7_G0hfOa6uWmAAAAYE"]
[Thu May 14 15:06:30.119340 2026] [:error] [pid 11581:tid 11607] [client 43.159.61.24:51280] [client 43.159.61.24] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agV0dv0vF48FbzpvQMXFMwAAAAo"]
[Thu May 14 16:50:17.446741 2026] [:error] [pid 47721:tid 47733] [client 43.165.167.69:58498] [client 43.165.167.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agWMyXEmh7_G0hfOa6vqagAAAYo"]
[Thu May 14 19:02:57.657561 2026] [:error] [pid 11581:tid 11608] [client 146.56.199.139:53892] [client 146.56.199.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agWr4f0vF48FbzpvQMUDSgAAAAs"]
[Thu May 14 19:43:15.107364 2026] [:error] [pid 11690:tid 11712] [client 142.248.80.49:41142] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "agW1UynxWuLN8Hptw8kvWgAAAM0"]
[Thu May 14 19:43:15.109391 2026] [:error] [pid 11582:tid 11639] [client 142.248.80.49:41156] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "agW1U_uw2cmFDpGcKhAzSgAAAE4"]
[Thu May 14 19:43:15.169126 2026] [:error] [pid 11690:tid 11719] [client 142.248.80.49:41138] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "agW1UynxWuLN8Hptw8kvWwAAANQ"]
[Thu May 14 19:43:15.169827 2026] [:error] [pid 47673:tid 47686] [client 142.248.80.49:41124] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "agW1U_CGe4cIn3sh5k0m0wAAAUs"]
[Thu May 14 19:43:15.170118 2026] [:error] [pid 11690:tid 11711] [client 142.248.80.49:41108] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "agW1UynxWuLN8Hptw8kvXAAAAMw"]
[Thu May 14 19:43:15.170638 2026] [:error] [pid 11588:tid 11665] [client 142.248.80.49:41114] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "agW1U9Ur21rOixkeGKaqAgAAAI0"]
[Thu May 14 19:43:16.356825 2026] [:error] [pid 63033:tid 63035] [client 142.248.80.49:41190] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.copy"] [unique_id "agW1VFMY49UWn5BpqVb6VAAAAQA"]
[Thu May 14 19:43:16.387928 2026] [:error] [pid 63033:tid 63052] [client 142.248.80.49:41176] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "agW1VFMY49UWn5BpqVb6VQAAARE"]
[Thu May 14 19:43:16.388106 2026] [:error] [pid 63033:tid 63040] [client 142.248.80.49:41164] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "agW1VFMY49UWn5BpqVb6VgAAAQU"]
[Thu May 14 19:43:16.388750 2026] [:error] [pid 47721:tid 47724] [client 142.248.80.49:41216] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/FETCH_HEAD"] [unique_id "agW1VHEmh7_G0hfOa6sSXwAAAYE"]
[Thu May 14 19:43:16.869735 2026] [:error] [pid 47721:tid 47729] [client 142.248.80.49:41414] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.orig"] [unique_id "agW1VHEmh7_G0hfOa6sSYQAAAYY"]
[Thu May 14 19:43:16.870413 2026] [:error] [pid 47721:tid 47729] [client 142.248.80.49:41412] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.orig"] [unique_id "agW1VHEmh7_G0hfOa6sSYgAAAYY"]
[Thu May 14 19:43:16.870941 2026] [:error] [pid 47721:tid 47729] [client 142.248.80.49:41406] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.swp"] [unique_id "agW1VHEmh7_G0hfOa6sSYwAAAYY"]
[Thu May 14 19:43:16.874081 2026] [:error] [pid 47721:tid 47746] [client 142.248.80.49:41404] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production~"] [unique_id "agW1VHEmh7_G0hfOa6sSZAAAAZc"]
[Thu May 14 19:43:16.874188 2026] [:error] [pid 47721:tid 47741] [client 142.248.80.49:41398] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.save"] [unique_id "agW1VHEmh7_G0hfOa6sSZQAAAZI"]
[Thu May 14 19:43:16.876699 2026] [:error] [pid 47673:tid 47681] [client 142.248.80.49:41390] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.backup"] [unique_id "agW1VPCGe4cIn3sh5k0m1QAAAUY"]
[Thu May 14 19:43:16.879184 2026] [:error] [pid 11690:tid 11713] [client 142.248.80.49:41384] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.old"] [unique_id "agW1VCnxWuLN8Hptw8kvXgAAAM4"]
[Thu May 14 19:43:16.880142 2026] [:error] [pid 11690:tid 11704] [client 142.248.80.49:41368] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production.bak"] [unique_id "agW1VCnxWuLN8Hptw8kvXwAAAMU"]
[Thu May 14 19:43:16.881605 2026] [:error] [pid 11690:tid 11710] [client 142.248.80.49:41362] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local.copy"] [unique_id "agW1VCnxWuLN8Hptw8kvYAAAAMs"]
[Thu May 14 19:43:16.883196 2026] [:error] [pid 11690:tid 11717] [client 142.248.80.49:41340] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local.swp"] [unique_id "agW1VCnxWuLN8Hptw8kvYQAAANI"]
[Thu May 14 19:43:16.886344 2026] [:error] [pid 47721:tid 47727] [client 142.248.80.49:41346] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local.orig"] [unique_id "agW1VHEmh7_G0hfOa6sSZgAAAYQ"]
[Thu May 14 19:43:16.886781 2026] [:error] [pid 47721:tid 47732] [client 142.248.80.49:41304] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local.old"] [unique_id "agW1VHEmh7_G0hfOa6sSZwAAAYk"]
[Thu May 14 19:43:16.887065 2026] [:error] [pid 47721:tid 47723] [client 142.248.80.49:41334] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local~"] [unique_id "agW1VHEmh7_G0hfOa6sSaAAAAYA"]
[Thu May 14 19:43:16.910369 2026] [:error] [pid 47721:tid 47731] [client 142.248.80.49:41320] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local.save"] [unique_id "agW1VHEmh7_G0hfOa6sSaQAAAYg"]
[Thu May 14 19:43:16.910810 2026] [:error] [pid 47721:tid 47738] [client 142.248.80.49:41318] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local.backup"] [unique_id "agW1VHEmh7_G0hfOa6sSagAAAY8"]
[Thu May 14 19:43:16.912925 2026] [:error] [pid 47721:tid 47736] [client 142.248.80.49:41302] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local.bak"] [unique_id "agW1VHEmh7_G0hfOa6sSawAAAY0"]
[Thu May 14 19:43:16.913421 2026] [:error] [pid 11582:tid 11635] [client 142.248.80.49:41288] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.copy"] [unique_id "agW1VPuw2cmFDpGcKhAzTAAAAEo"]
[Thu May 14 19:43:16.913792 2026] [:error] [pid 11690:tid 11702] [client 142.248.80.49:41276] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.swp"] [unique_id "agW1VCnxWuLN8Hptw8kvYgAAAMM"]
[Thu May 14 19:43:16.916028 2026] [:error] [pid 47673:tid 47695] [client 142.248.80.49:41272] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env~"] [unique_id "agW1VPCGe4cIn3sh5k0m1gAAAVQ"]
[Thu May 14 19:43:16.916620 2026] [:error] [pid 11582:tid 11628] [client 142.248.80.49:41268] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.save"] [unique_id "agW1VPuw2cmFDpGcKhAzTQAAAEM"]
[Thu May 14 19:43:16.917091 2026] [:error] [pid 11690:tid 11720] [client 142.248.80.49:41264] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.backup"] [unique_id "agW1VCnxWuLN8Hptw8kvYwAAANU"]
[Thu May 14 19:43:16.925399 2026] [:error] [pid 11582:tid 11647] [client 142.248.80.49:41258] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.old"] [unique_id "agW1VPuw2cmFDpGcKhAzTgAAAFY"]
[Thu May 14 19:43:16.927582 2026] [:error] [pid 11588:tid 11666] [client 142.248.80.49:41254] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.bak"] [unique_id "agW1VNUr21rOixkeGKaqAwAAAI4"]
[Thu May 14 19:43:16.928125 2026] [:error] [pid 47673:tid 47687] [client 142.248.80.49:41238] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/logs/HEAD"] [unique_id "agW1VPCGe4cIn3sh5k0m1wAAAUw"]
[Thu May 14 19:43:16.928898 2026] [:error] [pid 11588:tid 11659] [client 142.248.80.49:41230] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/refs/heads/master"] [unique_id "agW1VNUr21rOixkeGKaqBAAAAIc"]
[Thu May 14 19:43:16.929719 2026] [:error] [pid 11690:tid 11716] [client 142.248.80.49:41222] [client 142.248.80.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/refs/heads/main"] [unique_id "agW1VCnxWuLN8Hptw8kvZAAAANE"]
[Thu May 14 22:38:27.120667 2026] [:error] [pid 11588:tid 11661] [client 161.35.60.12:62689] [client 161.35.60.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.35.60.12, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agXeY9Ur21rOixkeGKbBMAAAAIk"]
[Thu May 14 22:38:27.124682 2026] [:error] [pid 11588:tid 11661] [client 161.35.60.12:62689] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 14 22:38:29.680337 2026] [:error] [pid 11588:tid 11659] [client 161.35.60.12:62689] [client 161.35.60.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "agXeZdUr21rOixkeGKbBPQAAAIc"]
[Thu May 14 22:38:30.180443 2026] [:error] [pid 47721:tid 47732] [client 161.35.60.12:64443] [client 161.35.60.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "agXeZnEmh7_G0hfOa6syawAAAYk"]
[Thu May 14 22:38:30.679923 2026] [:error] [pid 47721:tid 47727] [client 161.35.60.12:64632] [client 161.35.60.12] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "agXeZnEmh7_G0hfOa6sybQAAAYQ"]
[Fri May 15 01:35:38.360330 2026] [:error] [pid 11582:tid 11627] [client 162.62.231.139:34456] [client 162.62.231.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agYH6vuw2cmFDpGcKhBJHQAAAEI"]
[Fri May 15 02:42:57.907730 2026] [:error] [pid 47721:tid 47738] [client 4.246.135.39:4559] [client 4.246.135.39] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 4.246.135.39, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agYXsXEmh7_G0hfOa6tWDAAAAY8"]
[Fri May 15 05:14:45.290196 2026] [:error] [pid 50531:tid 50536] [client 49.51.243.95:43898] [client 49.51.243.95] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agY7RR3WbFwE6voqGzqV6gAAAQM"]
[Fri May 15 07:43:08.866179 2026] [:error] [pid 1190:tid 1268] [client 37.139.53.198:17119] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agZeDNqiXrD7hne4gFaqUwAAAJA"]
[Fri May 15 07:43:10.152000 2026] [:error] [pid 1190:tid 1269] [client 103.227.86.39:47691] [client 103.227.86.39] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||dbservices.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "dbservices.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agZeDtqiXrD7hne4gFaqVwAAAJE"]
[Fri May 15 10:22:39.864507 2026] [:error] [pid 51234:tid 51238] [client 43.164.0.21:53130] [client 43.164.0.21] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agaDb972N9CbeiqcqgPdTQAAAUI"]
[Fri May 15 12:04:02.825934 2026] [:error] [pid 51234:tid 51249] [client 43.156.43.123:36522] [client 43.156.43.123] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agabMt72N9CbeiqcqgP8-QAAAU0"]
[Fri May 15 12:23:42.612156 2026] [:error] [pid 1190:tid 1275] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 15 12:23:42.888039 2026] [:error] [pid 1190:tid 1254] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/sx_pms.php
[Fri May 15 12:23:43.147710 2026] [:error] [pid 1190:tid 1260] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Fri May 15 12:23:43.392412 2026] [:error] [pid 1190:tid 1263] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-test.php
[Fri May 15 12:23:43.643485 2026] [:error] [pid 1190:tid 1259] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Fri May 15 12:23:43.885181 2026] [:error] [pid 1190:tid 1258] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri May 15 12:23:44.131006 2026] [:error] [pid 1190:tid 1276] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-indx.php
[Fri May 15 12:23:44.384819 2026] [:error] [pid 1190:tid 1255] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Fri May 15 12:23:44.626311 2026] [:error] [pid 1190:tid 1252] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-link-spm.php
[Fri May 15 12:23:44.870561 2026] [:error] [pid 1190:tid 1266] [client 20.151.255.144:13200] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-link-snpm.php
[Fri May 15 12:23:45.108946 2026] [:error] [pid 1190:tid 1271] [client 20.151.255.144:13200] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xminie.php"] [unique_id "agaf0dqiXrD7hne4gFbZnQAAAJM"]
[Fri May 15 12:23:49.010665 2026] [:error] [pid 1189:tid 1240] [client 20.151.255.144:13261] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xminie.php"] [unique_id "agaf1Qe36qIGegR4kcmgAQAAAE8"]
[Fri May 15 12:24:10.578596 2026] [:error] [pid 51234:tid 51246] [client 20.151.255.144:13264] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agaf6t72N9CbeiqcqgMB-QAAAUo"]
[Fri May 15 12:24:13.807187 2026] [:error] [pid 51234:tid 51248] [client 20.151.255.144:13293] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agaf7d72N9CbeiqcqgMB_AAAAUw"]
[Fri May 15 12:24:17.209777 2026] [:error] [pid 1295:tid 1318] [client 20.151.255.144:13202] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agaf8dmMhqLvs0GYixkzPQAAANQ"]
[Fri May 15 12:24:20.417325 2026] [:error] [pid 50531:tid 50539] [client 20.151.255.144:13199] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agaf9B3WbFwE6voqGzr2RQAAAQY"]
[Fri May 15 12:24:24.471718 2026] [:error] [pid 1189:tid 1232] [client 20.151.255.144:13255] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agaf-Ae36qIGegR4kcmgGwAAAEc"]
[Fri May 15 12:24:26.338187 2026] [:error] [pid 51234:tid 51257] [client 20.151.255.144:13272] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agaf-t72N9CbeiqcqgMCNQAAAVU"]
[Fri May 15 12:24:28.658061 2026] [:error] [pid 51234:tid 51242] [client 20.151.255.144:13258] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agaf_N72N9CbeiqcqgMCOQAAAUY"]
[Fri May 15 12:24:29.972711 2026] [:error] [pid 51234:tid 51241] [client 20.151.255.144:13252] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agaf_d72N9CbeiqcqgMCPAAAAUU"]
[Fri May 15 12:24:33.961017 2026] [:error] [pid 1189:tid 1238] [client 20.151.255.144:13276] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agagAQe36qIGegR4kcmgHgAAAE0"]
[Fri May 15 12:24:34.813387 2026] [:error] [pid 1190:tid 1258] [client 20.151.255.144:13195] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agagAtqiXrD7hne4gFbZxgAAAIY"]
[Fri May 15 12:24:37.688608 2026] [:error] [pid 1188:tid 1197] [client 20.151.255.144:13282] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agagBdY68iW8yuNkNzP--gAAAAA"]
[Fri May 15 12:24:40.451958 2026] [:error] [pid 51234:tid 51242] [client 20.151.255.144:13242] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "agagCN72N9CbeiqcqgMCQgAAAUY"]
[Fri May 15 12:24:41.799715 2026] [:error] [pid 51234:tid 51239] [client 20.151.255.144:13269] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "agagCd72N9CbeiqcqgMCQwAAAUM"]
[Fri May 15 12:24:43.751284 2026] [:error] [pid 51234:tid 51246] [client 20.151.255.144:13285] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "agagC972N9CbeiqcqgMCTAAAAUo"]
[Fri May 15 12:24:45.193140 2026] [:error] [pid 51234:tid 51246] [client 20.151.255.144:13306] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Fri May 15 12:25:06.805669 2026] [:error] [pid 51234:tid 51253] [client 20.151.255.144:13207] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Fri May 15 12:25:07.033805 2026] [:error] [pid 51234:tid 51260] [client 20.151.255.144:13207] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Fri May 15 12:25:07.245316 2026] [:error] [pid 51234:tid 51243] [client 20.151.255.144:13207] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Fri May 15 12:25:07.456685 2026] [:error] [pid 51234:tid 51240] [client 20.151.255.144:13207] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri May 15 12:25:10.291684 2026] [:error] [pid 51234:tid 51242] [client 20.151.255.144:13207] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 15 12:25:10.498743 2026] [:error] [pid 51234:tid 51254] [client 20.151.255.144:13207] [client 20.151.255.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "agagJt72N9CbeiqcqgMC-AAAAVI"]
[Fri May 15 12:25:16.584451 2026] [:error] [pid 1295:tid 1309] [client 20.151.255.144:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Fri May 15 12:25:16.836604 2026] [:error] [pid 1295:tid 1307] [client 20.151.255.144:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Fri May 15 12:25:17.050755 2026] [:error] [pid 1295:tid 1320] [client 20.151.255.144:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Fri May 15 12:25:17.263682 2026] [:error] [pid 1295:tid 1312] [client 20.151.255.144:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri May 15 12:25:17.477457 2026] [:error] [pid 1295:tid 1314] [client 20.151.255.144:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Fri May 15 12:25:21.037658 2026] [:error] [pid 1295:tid 1322] [client 20.151.255.144:13297] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "agagMdmMhqLvs0GYixk0BgAAANg"]
[Fri May 15 12:25:31.107988 2026] [:error] [pid 1295:tid 1299] [client 20.151.255.144:13248] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cu.php"] [unique_id "agagO9mMhqLvs0GYixk0JwAAAME"]
[Fri May 15 12:25:39.684710 2026] [:error] [pid 1189:tid 1240] [client 20.151.255.144:13184] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agagQwe36qIGegR4kcmhnQAAAE8"]
[Fri May 15 12:25:42.697652 2026] [:error] [pid 51234:tid 51260] [client 20.151.255.144:13289] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agagRt72N9CbeiqcqgMEEwAAAVg"]
[Fri May 15 12:25:45.408101 2026] [:error] [pid 1190:tid 1276] [client 20.151.255.144:13279] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agagSdqiXrD7hne4gFbaZQAAAJg"]
[Fri May 15 12:25:49.834075 2026] [:error] [pid 50531:tid 50538] [client 20.151.255.144:13307] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agagTR3WbFwE6voqGzr2_gAAAQU"]
[Fri May 15 12:25:55.309018 2026] [:error] [pid 1190:tid 1256] [client 20.151.255.144:13263] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agagU9qiXrD7hne4gFbabQAAAIQ"]
[Fri May 15 12:25:58.692440 2026] [:error] [pid 1188:tid 1219] [client 20.151.255.144:13226] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agagVtY68iW8yuNkNzP_mQAAABY"]
[Fri May 15 12:26:01.325486 2026] [:error] [pid 51234:tid 51249] [client 20.151.255.144:13237] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agagWd72N9CbeiqcqgMEjgAAAU0"]
[Fri May 15 12:26:03.366079 2026] [:error] [pid 51234:tid 51240] [client 20.151.255.144:13262] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agagW972N9CbeiqcqgMEqQAAAUQ"]
[Fri May 15 12:26:07.039145 2026] [:error] [pid 51234:tid 51258] [client 20.151.255.144:13298] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "agagX972N9CbeiqcqgMEwQAAAVY"]
[Fri May 15 12:26:10.041771 2026] [:error] [pid 1190:tid 1271] [client 20.151.255.144:13221] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "agagYtqiXrD7hne4gFbajQAAAJM"]
[Fri May 15 12:26:11.847627 2026] [:error] [pid 1188:tid 1199] [client 20.151.255.144:13273] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "agagY9Y68iW8yuNkNzP_wwAAAAI"]
[Fri May 15 12:26:13.730742 2026] [:error] [pid 51234:tid 51255] [client 20.151.255.144:13209] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "agagZd72N9CbeiqcqgMFGgAAAVM"]
[Fri May 15 12:26:15.822219 2026] [:error] [pid 50531:tid 50551] [client 20.151.255.144:13283] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "agagZx3WbFwE6voqGzr3fwAAARI"]
[Fri May 15 12:26:21.045912 2026] [:error] [pid 51234:tid 51241] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri May 15 12:26:21.285511 2026] [:error] [pid 51234:tid 51253] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Fri May 15 12:26:21.507164 2026] [:error] [pid 51234:tid 51250] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Fri May 15 12:26:21.742096 2026] [:error] [pid 51234:tid 51257] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri May 15 12:26:21.962145 2026] [:error] [pid 51234:tid 51251] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Fri May 15 12:26:22.220620 2026] [:error] [pid 51234:tid 51253] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Fri May 15 12:26:22.453090 2026] [:error] [pid 51234:tid 51250] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Fri May 15 12:26:22.685559 2026] [:error] [pid 51234:tid 51249] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri May 15 12:26:22.927089 2026] [:error] [pid 51234:tid 51237] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Fri May 15 12:26:23.137465 2026] [:error] [pid 51234:tid 51241] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/axe.php
[Fri May 15 12:26:23.386278 2026] [:error] [pid 51234:tid 51236] [client 20.151.255.144:13257] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Fri May 15 12:26:23.628984 2026] [:error] [pid 51234:tid 51249] [client 20.151.255.144:13257] [client 20.151.255.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "agagb972N9CbeiqcqgMFygAAAU0"]
[Fri May 15 13:44:32.524310 2026] [:error] [pid 9392:tid 9395] [client 106.192.71.41:63638] [client 106.192.71.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.192.71.41, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agaywNBWJIjH1U9zGfaSQwAAAQE"]
[Fri May 15 13:44:32.530673 2026] [:error] [pid 9392:tid 9395] [client 106.192.71.41:63638] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 15 19:15:16.215723 2026] [:error] [pid 30240:tid 30254] [client 43.157.43.147:53414] [client 43.157.43.147] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agcARK8ckHvaA6bpewtg8gAAAUw"]
[Fri May 15 23:27:47.349076 2026] [:error] [pid 9307:tid 9387] [client 43.159.149.56:34844] [client 43.159.149.56] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agc7cyC43jY1IRzK5VZmPQAAANY"]
[Sat May 16 01:18:11.365824 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php
[Sat May 16 01:18:11.580454 2026] [:error] [pid 30272:tid 30287] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/ight.php
[Sat May 16 01:18:11.794858 2026] [:error] [pid 30272:tid 30279] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/wpns.php
[Sat May 16 01:18:12.021291 2026] [:error] [pid 30272:tid 30276] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/er.php
[Sat May 16 01:18:12.241202 2026] [:error] [pid 30272:tid 30291] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Sat May 16 01:18:12.687145 2026] [:error] [pid 30272:tid 30289] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/getir.php
[Sat May 16 01:18:13.125600 2026] [:error] [pid 30272:tid 30278] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat May 16 01:18:13.341364 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27540] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat May 16 01:18:13.552638 2026] [:error] [pid 30272:tid 30295] [client 20.151.206.3:27540] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agdVVXvc_jSFaQ_7_wcmDgAAAZU"]
[Sat May 16 01:18:13.981091 2026] [:error] [pid 9392:tid 9416] [client 20.151.206.3:27526] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agdVVdBWJIjH1U9zGfb-6QAAARY"]
[Sat May 16 01:18:14.429009 2026] [:error] [pid 9392:tid 9405] [client 20.151.206.3:27611] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agdVVtBWJIjH1U9zGfb-6gAAAQs"]
[Sat May 16 01:18:14.868229 2026] [:error] [pid 30272:tid 30293] [client 20.151.206.3:27626] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/class.php"] [unique_id "agdVVnvc_jSFaQ_7_wcmEAAAAZM"]
[Sat May 16 01:18:15.299505 2026] [:error] [pid 9392:tid 9412] [client 20.151.206.3:27525] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agdVV9BWJIjH1U9zGfb-7QAAARI"]
[Sat May 16 01:18:15.731630 2026] [:error] [pid 9305:tid 9351] [client 20.151.206.3:27595] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agdVV95FZyBmdCM8GsGhkwAAAE0"]
[Sat May 16 01:18:16.163154 2026] [:error] [pid 30272:tid 30275] [client 20.151.206.3:27616] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agdVWHvc_jSFaQ_7_wcmEwAAAYE"]
[Sat May 16 01:18:16.590737 2026] [:error] [pid 30208:tid 30230] [client 20.151.206.3:27634] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/goods.php"] [unique_id "agdVWJmLMCJujX-JTvhOlQAAAJQ"]
[Sat May 16 01:18:17.017891 2026] [:error] [pid 30208:tid 30219] [client 20.151.206.3:27539] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agdVWZmLMCJujX-JTvhOlwAAAIk"]
[Sat May 16 01:18:17.564270 2026] [:error] [pid 9392:tid 9413] [client 20.151.206.3:27586] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agdVWdBWJIjH1U9zGfb-8AAAARM"]
[Sat May 16 01:18:18.026859 2026] [:error] [pid 9392:tid 9399] [client 20.151.206.3:27594] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agdVWtBWJIjH1U9zGfb-8QAAAQU"]
[Sat May 16 01:18:18.458482 2026] [:error] [pid 30208:tid 30213] [client 20.151.206.3:27642] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agdVWpmLMCJujX-JTvhOmgAAAIM"]
[Sat May 16 01:18:18.892380 2026] [:error] [pid 9392:tid 9396] [client 20.151.206.3:27632] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "agdVWtBWJIjH1U9zGfb-8gAAAQI"]
[Sat May 16 01:18:19.384249 2026] [:error] [pid 9305:tid 9360] [client 20.151.206.3:27628] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "agdVW95FZyBmdCM8GsGhlQAAAFY"]
[Sat May 16 01:18:20.042042 2026] [:error] [pid 9392:tid 9414] [client 20.151.206.3:27622] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "agdVXNBWJIjH1U9zGfb-9AAAARQ"]
[Sat May 16 01:18:20.596765 2026] [:error] [pid 9304:tid 9333] [client 20.151.206.3:27543] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as.php"] [unique_id "agdVXNzcINh7UFIbVoGrKAAAABc"]
[Sat May 16 01:18:21.033888 2026] [:error] [pid 30208:tid 30229] [client 20.151.206.3:27538] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "agdVXZmLMCJujX-JTvhOowAAAJM"]
[Sat May 16 01:18:21.479641 2026] [:error] [pid 9304:tid 9318] [client 20.151.206.3:27550] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "agdVXdzcINh7UFIbVoGrKQAAAAg"]
[Sat May 16 01:18:21.939109 2026] [:error] [pid 30208:tid 30214] [client 20.151.206.3:27609] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "agdVXZmLMCJujX-JTvhOpgAAAIQ"]
[Sat May 16 01:18:22.370959 2026] [:error] [pid 30208:tid 30213] [client 20.151.206.3:27619] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aw.php"] [unique_id "agdVXpmLMCJujX-JTvhOqAAAAIM"]
[Sat May 16 01:18:22.806526 2026] [:error] [pid 30272:tid 30290] [client 20.151.206.3:27640] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "agdVXnvc_jSFaQ_7_wcmFwAAAZA"]
[Sat May 16 01:18:23.242346 2026] [:error] [pid 30272:tid 30291] [client 20.151.206.3:27570] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "agdVX3vc_jSFaQ_7_wcmGAAAAZE"]
[Sat May 16 01:18:23.679918 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27633] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "agdVX3vc_jSFaQ_7_wcmGgAAAYs"]
[Sat May 16 01:18:24.116486 2026] [:error] [pid 30208:tid 30221] [client 20.151.206.3:27523] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bb.php"] [unique_id "agdVYJmLMCJujX-JTvhOqwAAAIs"]
[Sat May 16 01:18:24.649998 2026] [:error] [pid 30272:tid 30295] [client 20.151.206.3:27575] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agdVYHvc_jSFaQ_7_wcmHgAAAZU"]
[Sat May 16 01:18:25.088079 2026] [:error] [pid 30208:tid 30216] [client 20.151.206.3:27524] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agdVYZmLMCJujX-JTvhOrAAAAIY"]
[Sat May 16 01:18:25.522906 2026] [:error] [pid 30208:tid 30224] [client 20.151.206.3:27537] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agdVYZmLMCJujX-JTvhOrgAAAI4"]
[Sat May 16 01:18:25.951397 2026] [:error] [pid 9307:tid 9377] [client 20.151.206.3:27533] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agdVYSC43jY1IRzK5VZvMgAAAMw"]
[Sat May 16 01:18:26.382585 2026] [:error] [pid 9305:tid 9362] [client 20.151.206.3:27567] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agdVYt5FZyBmdCM8GsGhmwAAAFg"]
[Sat May 16 01:18:26.815898 2026] [:error] [pid 9304:tid 9313] [client 20.151.206.3:27470] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agdVYtzcINh7UFIbVoGrLQAAAAM"]
[Sat May 16 01:18:27.247466 2026] [:error] [pid 30272:tid 30275] [client 20.151.206.3:27639] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agdVY3vc_jSFaQ_7_wcmIgAAAYE"]
[Sat May 16 01:18:27.699446 2026] [:error] [pid 9392:tid 9418] [client 20.151.206.3:27535] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/222.php"] [unique_id "agdVY9BWJIjH1U9zGfb-9wAAARg"]
[Sat May 16 01:18:28.150549 2026] [:error] [pid 30272:tid 30274] [client 20.151.206.3:27565] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "agdVZHvc_jSFaQ_7_wcmJQAAAYA"]
[Sat May 16 01:18:28.606574 2026] [:error] [pid 30208:tid 30214] [client 20.151.206.3:27647] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "agdVZJmLMCJujX-JTvhOsgAAAIQ"]
[Sat May 16 01:18:29.068292 2026] [:error] [pid 9304:tid 9329] [client 20.151.206.3:27496] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "agdVZdzcINh7UFIbVoGrLgAAABM"]
[Sat May 16 01:18:29.497114 2026] [:error] [pid 30240:tid 30245] [client 20.151.206.3:27615] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test1.php"] [unique_id "agdVZa8ckHvaA6bpewuH2gAAAUM"]
[Sat May 16 01:18:29.965624 2026] [:error] [pid 30272:tid 30298] [client 20.151.206.3:27604] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "agdVZXvc_jSFaQ_7_wcmKgAAAZg"]
[Sat May 16 01:18:30.430523 2026] [:error] [pid 9305:tid 9358] [client 20.151.206.3:27590] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "agdVZt5FZyBmdCM8GsGhnQAAAFQ"]
[Sat May 16 01:18:30.915031 2026] [:error] [pid 30272:tid 30284] [client 20.151.206.3:27635] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "agdVZnvc_jSFaQ_7_wcmLAAAAYo"]
[Sat May 16 01:18:31.457038 2026] [:error] [pid 30272:tid 30293] [client 20.151.206.3:27613] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-mail.php"] [unique_id "agdVZ3vc_jSFaQ_7_wcmLgAAAZM"]
[Sat May 16 01:18:31.916510 2026] [:error] [pid 30272:tid 30281] [client 20.151.206.3:27571] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agdVZ3vc_jSFaQ_7_wcmMQAAAYc"]
[Sat May 16 01:18:32.598318 2026] [:error] [pid 9305:tid 9348] [client 20.151.206.3:27558] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agdVaN5FZyBmdCM8GsGhoAAAAEo"]
[Sat May 16 01:18:33.062681 2026] [:error] [pid 30272:tid 30274] [client 20.151.206.3:27552] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agdVaXvc_jSFaQ_7_wcmNAAAAYA"]
[Sat May 16 01:18:33.492523 2026] [:error] [pid 30272:tid 30290] [client 20.151.206.3:27593] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp.php"] [unique_id "agdVaXvc_jSFaQ_7_wcmNgAAAZA"]
[Sat May 16 01:18:33.931441 2026] [:error] [pid 9305:tid 9360] [client 20.151.206.3:27643] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agdVad5FZyBmdCM8GsGhogAAAFY"]
[Sat May 16 01:18:34.563509 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27534] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agdVanvc_jSFaQ_7_wcmOgAAAYs"]
[Sat May 16 01:18:35.001982 2026] [:error] [pid 30272:tid 30282] [client 20.151.206.3:27480] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agdVa3vc_jSFaQ_7_wcmOwAAAYg"]
[Sat May 16 01:18:35.651294 2026] [:error] [pid 9392:tid 9406] [client 20.151.206.3:27641] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php"] [unique_id "agdVa9BWJIjH1U9zGfb--gAAAQw"]
[Sat May 16 01:18:36.165949 2026] [:error] [pid 30272:tid 30280] [client 20.151.206.3:27637] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php8.php"] [unique_id "agdVbHvc_jSFaQ_7_wcmPgAAAYY"]
[Sat May 16 01:18:36.609474 2026] [:error] [pid 30208:tid 30220] [client 20.151.206.3:27606] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php8.php"] [unique_id "agdVbJmLMCJujX-JTvhOtQAAAIo"]
[Sat May 16 01:18:37.094369 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27587] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php8.php"] [unique_id "agdVbXvc_jSFaQ_7_wcmRQAAAYk"]
[Sat May 16 01:18:37.556913 2026] [:error] [pid 9392:tid 9405] [client 20.151.206.3:27601] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php8.php"] [unique_id "agdVbdBWJIjH1U9zGfb--wAAAQs"]
[Sat May 16 01:18:37.990191 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27583] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agdVbXvc_jSFaQ_7_wcmRwAAAYs"]
[Sat May 16 01:18:38.497897 2026] [:error] [pid 9305:tid 9350] [client 20.151.206.3:27528] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agdVbt5FZyBmdCM8GsGhpAAAAEw"]
[Sat May 16 01:18:38.942761 2026] [:error] [pid 9305:tid 9357] [client 20.151.206.3:27532] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agdVbt5FZyBmdCM8GsGhpQAAAFM"]
[Sat May 16 01:18:39.410655 2026] [:error] [pid 9392:tid 9404] [client 20.151.206.3:27576] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agdVb9BWJIjH1U9zGfb-_AAAAQo"]
[Sat May 16 01:18:39.842148 2026] [:error] [pid 9305:tid 9361] [client 20.151.206.3:27529] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agdVb95FZyBmdCM8GsGhpgAAAFc"]
[Sat May 16 01:18:40.279352 2026] [:error] [pid 9305:tid 9346] [client 20.151.206.3:27645] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agdVcN5FZyBmdCM8GsGhqAAAAEg"]
[Sat May 16 01:18:40.723304 2026] [:error] [pid 30272:tid 30276] [client 20.151.206.3:27603] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agdVcHvc_jSFaQ_7_wcmSQAAAYI"]
[Sat May 16 01:18:41.169934 2026] [:error] [pid 30272:tid 30293] [client 20.151.206.3:27596] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agdVcXvc_jSFaQ_7_wcmSgAAAZM"]
[Sat May 16 01:18:41.610669 2026] [:error] [pid 30272:tid 30280] [client 20.151.206.3:27614] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agdVcXvc_jSFaQ_7_wcmSwAAAYY"]
[Sat May 16 01:18:42.056700 2026] [:error] [pid 30272:tid 30296] [client 20.151.206.3:27636] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agdVcnvc_jSFaQ_7_wcmTAAAAZY"]
[Sat May 16 01:18:42.485551 2026] [:error] [pid 30272:tid 30281] [client 20.151.206.3:27521] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agdVcnvc_jSFaQ_7_wcmTgAAAYc"]
[Sat May 16 01:18:42.912163 2026] [:error] [pid 30272:tid 30275] [client 20.151.206.3:27547] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agdVcnvc_jSFaQ_7_wcmTwAAAYE"]
[Sat May 16 01:18:43.338599 2026] [:error] [pid 30272:tid 30288] [client 20.151.206.3:27618] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agdVc3vc_jSFaQ_7_wcmUAAAAY4"]
[Sat May 16 01:18:43.780094 2026] [:error] [pid 30272:tid 30274] [client 20.151.206.3:27545] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agdVc3vc_jSFaQ_7_wcmUgAAAYA"]
[Sat May 16 01:18:44.221601 2026] [:error] [pid 9307:tid 9373] [client 20.151.206.3:27630] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agdVdCC43jY1IRzK5VZvNgAAAMg"]
[Sat May 16 01:18:44.668159 2026] [:error] [pid 30272:tid 30297] [client 20.151.206.3:27620] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agdVdHvc_jSFaQ_7_wcmUwAAAZc"]
[Sat May 16 01:18:45.096005 2026] [:error] [pid 9392:tid 9412] [client 20.151.206.3:27466] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "agdVddBWJIjH1U9zGfb-_gAAARI"]
[Sat May 16 01:18:45.522782 2026] [:error] [pid 30208:tid 30221] [client 20.151.206.3:27585] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "agdVdZmLMCJujX-JTvhOtwAAAIs"]
[Sat May 16 01:18:45.950128 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27520] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "agdVdXvc_jSFaQ_7_wcmVAAAAYk"]
[Sat May 16 01:18:46.390085 2026] [:error] [pid 30208:tid 30216] [client 20.151.206.3:27536] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "agdVdpmLMCJujX-JTvhOuQAAAIY"]
[Sat May 16 01:18:46.853160 2026] [:error] [pid 30272:tid 30298] [client 20.151.206.3:27599] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agdVdnvc_jSFaQ_7_wcmVQAAAZg"]
[Sat May 16 01:18:47.284705 2026] [:error] [pid 30272:tid 30284] [client 20.151.206.3:27625] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agdVd3vc_jSFaQ_7_wcmWQAAAYo"]
[Sat May 16 01:18:47.730987 2026] [:error] [pid 30208:tid 30210] [client 20.151.206.3:27560] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agdVd5mLMCJujX-JTvhOugAAAIA"]
[Sat May 16 01:18:48.177765 2026] [:error] [pid 9304:tid 9324] [client 20.151.206.3:27600] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agdVeNzcINh7UFIbVoGrMAAAAA4"]
[Sat May 16 01:18:48.608662 2026] [:error] [pid 9305:tid 9362] [client 20.151.206.3:27551] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo/info.php"] [unique_id "agdVeN5FZyBmdCM8GsGhqgAAAFg"]
[Sat May 16 01:18:49.040452 2026] [:error] [pid 30240:tid 30258] [client 20.151.206.3:27553] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo/info.php"] [unique_id "agdVea8ckHvaA6bpewuH4gAAAVA"]
[Sat May 16 01:18:49.481639 2026] [:error] [pid 30272:tid 30293] [client 20.151.206.3:27563] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo/info.php"] [unique_id "agdVeXvc_jSFaQ_7_wcmWgAAAZM"]
[Sat May 16 01:18:49.918624 2026] [:error] [pid 30240:tid 30243] [client 20.151.206.3:27548] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpinfo/info.php"] [unique_id "agdVea8ckHvaA6bpewuH5QAAAUE"]
[Sat May 16 01:18:50.350606 2026] [:error] [pid 30240:tid 30255] [client 20.151.206.3:27624] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agdVeq8ckHvaA6bpewuH6AAAAU0"]
[Sat May 16 01:18:50.916639 2026] [:error] [pid 9392:tid 9394] [client 20.151.206.3:27561] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agdVetBWJIjH1U9zGfb-_wAAAQA"]
[Sat May 16 01:18:51.353063 2026] [:error] [pid 9392:tid 9411] [client 20.151.206.3:27554] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agdVe9BWJIjH1U9zGfb_AQAAARE"]
[Sat May 16 01:18:51.804687 2026] [:error] [pid 30240:tid 30257] [client 20.151.206.3:27469] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agdVe68ckHvaA6bpewuH6gAAAU8"]
[Sat May 16 01:18:52.238796 2026] [:error] [pid 30272:tid 30286] [client 20.151.206.3:27557] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "agdVfHvc_jSFaQ_7_wcmXAAAAYw"]
[Sat May 16 01:18:52.680445 2026] [:error] [pid 9307:tid 9387] [client 20.151.206.3:27478] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "agdVfCC43jY1IRzK5VZvOwAAANY"]
[Sat May 16 01:18:53.102956 2026] [:error] [pid 9307:tid 9386] [client 20.151.206.3:27506] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "agdVfSC43jY1IRzK5VZvPAAAANU"]
[Sat May 16 01:18:53.526048 2026] [:error] [pid 30272:tid 30288] [client 20.151.206.3:27527] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX2.php"] [unique_id "agdVfXvc_jSFaQ_7_wcmXQAAAY4"]
[Sat May 16 01:18:53.955132 2026] [:error] [pid 30272:tid 30292] [client 20.151.206.3:27602] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "agdVfXvc_jSFaQ_7_wcmXwAAAZI"]
[Sat May 16 01:18:54.396780 2026] [:error] [pid 9307:tid 9381] [client 20.151.206.3:27638] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "agdVfiC43jY1IRzK5VZvPQAAANA"]
[Sat May 16 01:18:54.857984 2026] [:error] [pid 9307:tid 9388] [client 20.151.206.3:27476] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "agdVfiC43jY1IRzK5VZvPgAAANc"]
[Sat May 16 01:18:55.292383 2026] [:error] [pid 9305:tid 9338] [client 20.151.206.3:27461] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/profile.php"] [unique_id "agdVf95FZyBmdCM8GsGhrQAAAEA"]
[Sat May 16 01:18:55.767926 2026] [:error] [pid 9307:tid 9382] [client 20.151.206.3:27490] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agdVfyC43jY1IRzK5VZvPwAAANE"]
[Sat May 16 01:18:56.213288 2026] [:error] [pid 9304:tid 9331] [client 20.151.206.3:27511] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agdVgNzcINh7UFIbVoGrMgAAABU"]
[Sat May 16 01:18:56.651291 2026] [:error] [pid 9307:tid 9374] [client 20.151.206.3:27589] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agdVgCC43jY1IRzK5VZvQAAAAMk"]
[Sat May 16 01:18:57.079154 2026] [:error] [pid 9307:tid 9376] [client 20.151.206.3:27574] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agdVgSC43jY1IRzK5VZvQQAAAMs"]
[Sat May 16 01:18:57.511613 2026] [:error] [pid 9307:tid 9377] [client 20.151.206.3:27578] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "agdVgSC43jY1IRzK5VZvQwAAAMw"]
[Sat May 16 01:18:57.968064 2026] [:error] [pid 30240:tid 30243] [client 20.151.206.3:27598] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "agdVga8ckHvaA6bpewuH8gAAAUE"]
[Sat May 16 01:18:58.396117 2026] [:error] [pid 30240:tid 30259] [client 20.151.206.3:27460] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "agdVgq8ckHvaA6bpewuH8wAAAVE"]
[Sat May 16 01:18:58.852569 2026] [:error] [pid 30208:tid 30233] [client 20.151.206.3:27482] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a4.php"] [unique_id "agdVgpmLMCJujX-JTvhOvgAAAJc"]
[Sat May 16 01:18:59.285209 2026] [:error] [pid 9307:tid 9384] [client 20.151.206.3:27579] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "agdVgyC43jY1IRzK5VZvRAAAANM"]
[Sat May 16 01:18:59.718549 2026] [:error] [pid 9307:tid 9370] [client 20.151.206.3:27101] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "agdVgyC43jY1IRzK5VZvRQAAAMU"]
[Sat May 16 01:19:00.205076 2026] [:error] [pid 30240:tid 30255] [client 20.151.206.3:27494] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "agdVhK8ckHvaA6bpewuH9gAAAU0"]
[Sat May 16 01:19:00.647500 2026] [:error] [pid 9305:tid 9348] [client 20.151.206.3:27644] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app.php"] [unique_id "agdVhN5FZyBmdCM8GsGhrwAAAEo"]
[Sat May 16 01:19:01.079376 2026] [:error] [pid 30272:tid 30290] [client 20.151.206.3:27608] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agdVhXvc_jSFaQ_7_wcmYQAAAZA"]
[Sat May 16 01:19:01.562936 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27562] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agdVhXvc_jSFaQ_7_wcmYwAAAYk"]
[Sat May 16 01:19:02.012215 2026] [:error] [pid 30272:tid 30277] [client 20.151.206.3:27572] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agdVhnvc_jSFaQ_7_wcmZAAAAYM"]
[Sat May 16 01:19:02.444415 2026] [:error] [pid 9307:tid 9367] [client 20.151.206.3:27577] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/buy.php"] [unique_id "agdVhiC43jY1IRzK5VZvRgAAAMI"]
[Sat May 16 01:19:02.902304 2026] [:error] [pid 30240:tid 30260] [client 20.151.206.3:27549] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agdVhq8ckHvaA6bpewuH-AAAAVI"]
[Sat May 16 01:19:03.384589 2026] [:error] [pid 30240:tid 30265] [client 20.151.206.3:27485] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agdVh68ckHvaA6bpewuH-QAAAVc"]
[Sat May 16 01:19:03.822977 2026] [:error] [pid 9304:tid 9330] [client 20.151.206.3:27541] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agdVh9zcINh7UFIbVoGrNAAAABQ"]
[Sat May 16 01:19:04.259741 2026] [:error] [pid 30272:tid 30282] [client 20.151.206.3:27556] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agdViHvc_jSFaQ_7_wcmZgAAAYg"]
[Sat May 16 01:19:04.716581 2026] [:error] [pid 30272:tid 30289] [client 20.151.206.3:27464] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "agdViHvc_jSFaQ_7_wcmaAAAAY8"]
[Sat May 16 01:19:05.154524 2026] [:error] [pid 30208:tid 30214] [client 20.151.206.3:27517] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "agdViZmLMCJujX-JTvhOwQAAAIQ"]
[Sat May 16 01:19:05.614929 2026] [:error] [pid 30208:tid 30217] [client 20.151.206.3:27098] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "agdViZmLMCJujX-JTvhOwwAAAIc"]
[Sat May 16 01:19:06.055823 2026] [:error] [pid 9307:tid 9383] [client 20.151.206.3:27588] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lock360.php"] [unique_id "agdViiC43jY1IRzK5VZvRwAAANI"]
[Sat May 16 01:19:06.490701 2026] [:error] [pid 9304:tid 9310] [client 20.151.206.3:27458] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "agdVitzcINh7UFIbVoGrNQAAAAA"]
[Sat May 16 01:19:06.934653 2026] [:error] [pid 9307:tid 9371] [client 20.151.206.3:27623] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "agdViiC43jY1IRzK5VZvSAAAAMY"]
[Sat May 16 01:19:07.380630 2026] [:error] [pid 9305:tid 9350] [client 20.151.206.3:27544] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "agdVi95FZyBmdCM8GsGhsgAAAEw"]
[Sat May 16 01:19:07.812997 2026] [:error] [pid 30272:tid 30294] [client 20.151.206.3:27605] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bc.php"] [unique_id "agdVi3vc_jSFaQ_7_wcmaQAAAZQ"]
[Sat May 16 01:19:08.247765 2026] [:error] [pid 30272:tid 30295] [client 20.151.206.3:27493] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agdVjHvc_jSFaQ_7_wcmagAAAZU"]
[Sat May 16 01:19:08.690743 2026] [:error] [pid 9307:tid 9388] [client 20.151.206.3:27617] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agdVjCC43jY1IRzK5VZvTwAAANc"]
[Sat May 16 01:19:09.144155 2026] [:error] [pid 30240:tid 30250] [client 20.151.206.3:27582] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agdVja8ckHvaA6bpewuH_QAAAUg"]
[Sat May 16 01:19:09.608357 2026] [:error] [pid 9304:tid 9311] [client 20.151.206.3:27584] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agdVjdzcINh7UFIbVoGrOQAAAAE"]
[Sat May 16 01:19:10.047935 2026] [:error] [pid 9307:tid 9374] [client 20.151.206.3:27075] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "agdVjiC43jY1IRzK5VZvUAAAAMk"]
[Sat May 16 01:19:10.481919 2026] [:error] [pid 30208:tid 30213] [client 20.151.206.3:27542] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "agdVjpmLMCJujX-JTvhOxAAAAIM"]
[Sat May 16 01:19:10.914983 2026] [:error] [pid 30208:tid 30222] [client 20.151.206.3:27627] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "agdVjpmLMCJujX-JTvhOxQAAAIw"]
[Sat May 16 01:19:11.359055 2026] [:error] [pid 9304:tid 9334] [client 20.151.206.3:27463] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "agdVj9zcINh7UFIbVoGrOwAAABg"]
[Sat May 16 01:19:11.839668 2026] [:error] [pid 9304:tid 9313] [client 20.151.206.3:27555] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "agdVj9zcINh7UFIbVoGrPAAAAAM"]
[Sat May 16 01:19:12.269713 2026] [:error] [pid 30272:tid 30297] [client 20.151.206.3:27418] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "agdVkHvc_jSFaQ_7_wcmbwAAAZc"]
[Sat May 16 01:19:12.696046 2026] [:error] [pid 9304:tid 9329] [client 20.151.206.3:27531] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "agdVkNzcINh7UFIbVoGrPwAAABM"]
[Sat May 16 01:19:13.133471 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sat May 16 01:19:13.352089 2026] [:error] [pid 30272:tid 30298] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat May 16 01:19:13.570594 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Sat May 16 01:19:13.788600 2026] [:error] [pid 30272:tid 30277] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/index0.php
[Sat May 16 01:19:14.008366 2026] [:error] [pid 30272:tid 30287] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kz.php
[Sat May 16 01:19:14.226976 2026] [:error] [pid 30272:tid 30282] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Sat May 16 01:19:14.447707 2026] [:error] [pid 30272:tid 30279] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat May 16 01:19:14.666960 2026] [:error] [pid 30272:tid 30295] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sat May 16 01:19:14.886874 2026] [:error] [pid 30272:tid 30280] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sat May 16 01:19:15.107428 2026] [:error] [pid 30272:tid 30296] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat May 16 01:19:15.326075 2026] [:error] [pid 30272:tid 30293] [client 20.151.206.3:27481] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat May 16 01:19:15.542003 2026] [:error] [pid 30272:tid 30281] [client 20.151.206.3:27481] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdVk3vc_jSFaQ_7_wcmfgAAAYc"]
[Sat May 16 01:19:15.971525 2026] [:error] [pid 30272:tid 30286] [client 20.151.206.3:27475] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdVk3vc_jSFaQ_7_wcmfwAAAYw"]
[Sat May 16 01:19:16.398591 2026] [:error] [pid 30272:tid 30274] [client 20.151.206.3:27522] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdVlHvc_jSFaQ_7_wcmgAAAAYA"]
[Sat May 16 01:19:16.836889 2026] [:error] [pid 30272:tid 30292] [client 20.151.206.3:27456] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "agdVlHvc_jSFaQ_7_wcmgQAAAZI"]
[Sat May 16 01:19:17.274091 2026] [:error] [pid 30272:tid 30297] [client 20.151.206.3:27472] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "agdVlXvc_jSFaQ_7_wcmggAAAZc"]
[Sat May 16 01:19:17.717394 2026] [:error] [pid 30272:tid 30290] [client 20.151.206.3:27073] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "agdVlXvc_jSFaQ_7_wcmgwAAAZA"]
[Sat May 16 01:19:18.160205 2026] [:error] [pid 30272:tid 30298] [client 20.151.206.3:27094] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "agdVlnvc_jSFaQ_7_wcmhAAAAZg"]
[Sat May 16 01:19:18.601343 2026] [:error] [pid 9304:tid 9321] [client 20.151.206.3:27479] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "agdVltzcINh7UFIbVoGrQAAAAAs"]
[Sat May 16 01:19:19.054759 2026] [:error] [pid 9392:tid 9407] [client 20.151.206.3:27629] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "agdVl9BWJIjH1U9zGfb_DQAAAQ0"]
[Sat May 16 01:19:19.503794 2026] [:error] [pid 9392:tid 9412] [client 20.151.206.3:27081] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "agdVl9BWJIjH1U9zGfb_DgAAARI"]
[Sat May 16 01:19:19.988366 2026] [:error] [pid 9392:tid 9398] [client 20.151.206.3:27467] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "agdVl9BWJIjH1U9zGfb_EAAAAQQ"]
[Sat May 16 01:19:20.500692 2026] [:error] [pid 9392:tid 9413] [client 20.151.206.3:27504] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d.php"] [unique_id "agdVmNBWJIjH1U9zGfb_EQAAARM"]
[Sat May 16 01:19:21.209773 2026] [:error] [pid 9392:tid 9400] [client 20.151.206.3:27592] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "agdVmdBWJIjH1U9zGfb_FQAAAQY"]
[Sat May 16 01:19:21.660227 2026] [:error] [pid 9392:tid 9409] [client 20.151.206.3:27581] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "agdVmdBWJIjH1U9zGfb_FwAAAQ8"]
[Sat May 16 01:19:22.283692 2026] [:error] [pid 9392:tid 9403] [client 20.151.206.3:27477] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "agdVmtBWJIjH1U9zGfb_GAAAAQk"]
[Sat May 16 01:19:22.752879 2026] [:error] [pid 9307:tid 9377] [client 20.151.206.3:27086] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xff.php"] [unique_id "agdVmiC43jY1IRzK5VZvUQAAAMw"]
[Sat May 16 01:19:23.415047 2026] [:error] [pid 9307:tid 9368] [client 20.151.206.3:27125] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agdVmyC43jY1IRzK5VZvUgAAAMM"]
[Sat May 16 01:19:24.262621 2026] [:error] [pid 9392:tid 9415] [client 20.151.206.3:27072] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agdVnNBWJIjH1U9zGfb_GQAAARU"]
[Sat May 16 01:19:24.923918 2026] [:error] [pid 9304:tid 9323] [client 20.151.206.3:27612] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agdVnNzcINh7UFIbVoGrQQAAAA0"]
[Sat May 16 01:19:25.549423 2026] [:error] [pid 30208:tid 30228] [client 20.151.206.3:27129] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "agdVnZmLMCJujX-JTvhOyQAAAJI"]
[Sat May 16 01:19:26.096856 2026] [:error] [pid 30208:tid 30210] [client 20.151.206.3:27518] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agdVnpmLMCJujX-JTvhOygAAAIA"]
[Sat May 16 01:19:26.665286 2026] [:error] [pid 30240:tid 30255] [client 20.151.206.3:27084] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agdVnq8ckHvaA6bpewuIAwAAAU0"]
[Sat May 16 01:19:27.123221 2026] [:error] [pid 9392:tid 9407] [client 20.151.206.3:27089] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agdVn9BWJIjH1U9zGfb_HAAAAQ0"]
[Sat May 16 01:19:27.554080 2026] [:error] [pid 30208:tid 30231] [client 20.151.206.3:27569] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agdVn5mLMCJujX-JTvhOywAAAJU"]
[Sat May 16 01:19:27.982426 2026] [:error] [pid 30208:tid 30227] [client 20.151.206.3:27512] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "agdVn5mLMCJujX-JTvhOzQAAAJE"]
[Sat May 16 01:19:28.429036 2026] [:error] [pid 30272:tid 30294] [client 20.151.206.3:27407] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "agdVoHvc_jSFaQ_7_wcmiAAAAZQ"]
[Sat May 16 01:19:28.861348 2026] [:error] [pid 9307:tid 9367] [client 20.151.206.3:27530] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "agdVoCC43jY1IRzK5VZvVwAAAMI"]
[Sat May 16 01:19:29.319941 2026] [:error] [pid 30272:tid 30279] [client 20.151.206.3:27076] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/son.php"] [unique_id "agdVoXvc_jSFaQ_7_wcmiQAAAYU"]
[Sat May 16 01:19:29.763734 2026] [:error] [pid 30272:tid 30295] [client 20.151.206.3:27491] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agdVoXvc_jSFaQ_7_wcmigAAAZU"]
[Sat May 16 01:19:30.208400 2026] [:error] [pid 30240:tid 30244] [client 20.151.206.3:27093] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agdVoq8ckHvaA6bpewuIBAAAAUI"]
[Sat May 16 01:19:30.642737 2026] [:error] [pid 9392:tid 9412] [client 20.151.206.3:27473] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agdVotBWJIjH1U9zGfb_HgAAARI"]
[Sat May 16 01:19:31.077777 2026] [:error] [pid 9392:tid 9398] [client 20.151.206.3:27130] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agdVo9BWJIjH1U9zGfb_IAAAAQQ"]
[Sat May 16 01:19:31.507856 2026] [:error] [pid 30208:tid 30225] [client 20.151.206.3:27116] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "agdVo5mLMCJujX-JTvhO0AAAAI8"]
[Sat May 16 01:19:31.935362 2026] [:error] [pid 9307:tid 9383] [client 20.151.206.3:27492] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "agdVoyC43jY1IRzK5VZvWAAAANI"]
[Sat May 16 01:19:32.371012 2026] [:error] [pid 30240:tid 30248] [client 20.151.206.3:27546] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "agdVpK8ckHvaA6bpewuIBQAAAUY"]
[Sat May 16 01:19:32.805989 2026] [:error] [pid 30208:tid 30223] [client 20.151.206.3:27641] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zo.php"] [unique_id "agdVpJmLMCJujX-JTvhO0QAAAI0"]
[Sat May 16 01:19:33.231050 2026] [:error] [pid 30272:tid 30280] [client 20.151.206.3:27090] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "agdVpXvc_jSFaQ_7_wcmiwAAAYY"]
[Sat May 16 01:19:33.669832 2026] [:error] [pid 9307:tid 9371] [client 20.151.206.3:27462] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "agdVpSC43jY1IRzK5VZvWQAAAMY"]
[Sat May 16 01:19:34.101639 2026] [:error] [pid 9307:tid 9386] [client 20.151.206.3:27515] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "agdVpiC43jY1IRzK5VZvWgAAANU"]
[Sat May 16 01:19:34.553494 2026] [:error] [pid 9392:tid 9401] [client 20.151.206.3:27103] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "agdVptBWJIjH1U9zGfb_JQAAAQc"]
[Sat May 16 01:19:35.077307 2026] [:error] [pid 30208:tid 30222] [client 20.151.206.3:27406] [client 20.151.206.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "agdVp5mLMCJujX-JTvhO1gAAAIw"]
[Sat May 16 01:19:35.516685 2026] [:error] [pid 9392:tid 9410] [client 20.151.206.3:27499] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "agdVp9BWJIjH1U9zGfb_LAAAARA"]
[Sat May 16 01:19:35.955358 2026] [:error] [pid 30272:tid 30286] [client 20.151.206.3:27083] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "agdVp3vc_jSFaQ_7_wcmkAAAAYw"]
[Sat May 16 01:19:36.399056 2026] [:error] [pid 9392:tid 9407] [client 20.151.206.3:27568] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "agdVqNBWJIjH1U9zGfb_LwAAAQ0"]
[Sat May 16 01:19:36.827145 2026] [:error] [pid 9307:tid 9387] [client 20.151.206.3:27509] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s1.php"] [unique_id "agdVqCC43jY1IRzK5VZvXwAAANY"]
[Sat May 16 01:19:37.291672 2026] [:error] [pid 9307:tid 9382] [client 20.151.206.3:27123] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "agdVqSC43jY1IRzK5VZvYAAAANE"]
[Sat May 16 01:19:37.774372 2026] [:error] [pid 9307:tid 9374] [client 20.151.206.3:27110] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "agdVqSC43jY1IRzK5VZvYQAAAMk"]
[Sat May 16 01:19:38.257705 2026] [:error] [pid 30272:tid 30292] [client 20.151.206.3:27503] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "agdVqnvc_jSFaQ_7_wcmkQAAAZI"]
[Sat May 16 01:19:38.712584 2026] [:error] [pid 30240:tid 30266] [client 20.151.206.3:27079] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "agdVqq8ckHvaA6bpewuICwAAAVg"]
[Sat May 16 01:19:39.156690 2026] [:error] [pid 30272:tid 30290] [client 20.151.206.3:27117] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1a.php"] [unique_id "agdVq3vc_jSFaQ_7_wcmkgAAAZA"]
[Sat May 16 01:19:39.723202 2026] [:error] [pid 30240:tid 30258] [client 20.151.206.3:27483] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1a.php"] [unique_id "agdVq68ckHvaA6bpewuIDQAAAVA"]
[Sat May 16 01:19:40.163901 2026] [:error] [pid 9307:tid 9380] [client 20.151.206.3:27080] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1a.php"] [unique_id "agdVrCC43jY1IRzK5VZvYwAAAM8"]
[Sat May 16 01:19:40.632875 2026] [:error] [pid 30240:tid 30251] [client 20.151.206.3:27487] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1a.php"] [unique_id "agdVrK8ckHvaA6bpewuIDgAAAUk"]
[Sat May 16 01:19:41.086602 2026] [:error] [pid 9305:tid 9359] [client 20.151.206.3:27115] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agdVrd5FZyBmdCM8GsGhtgAAAFU"]
[Sat May 16 01:19:41.527445 2026] [:error] [pid 30272:tid 30291] [client 20.151.206.3:27126] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agdVrXvc_jSFaQ_7_wcmkwAAAZE"]
[Sat May 16 01:19:42.005272 2026] [:error] [pid 30272:tid 30277] [client 20.151.206.3:27484] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agdVrnvc_jSFaQ_7_wcmlAAAAYM"]
[Sat May 16 01:19:42.530552 2026] [:error] [pid 30208:tid 30229] [client 20.151.206.3:27104] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agdVrpmLMCJujX-JTvhO9QAAAJM"]
[Sat May 16 01:19:42.995657 2026] [:error] [pid 30240:tid 30264] [client 20.151.206.3:27114] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agdVrq8ckHvaA6bpewuIEgAAAVY"]
[Sat May 16 01:19:43.428856 2026] [:error] [pid 30208:tid 30218] [client 20.151.206.3:27336] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agdVr5mLMCJujX-JTvhO-wAAAIg"]
[Sat May 16 01:19:43.889145 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27419] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agdVr3vc_jSFaQ_7_wcmlgAAAYs"]
[Sat May 16 01:19:44.355108 2026] [:error] [pid 9392:tid 9418] [client 20.151.206.3:27474] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agdVsNBWJIjH1U9zGfb_NgAAARg"]
[Sat May 16 01:19:44.811758 2026] [:error] [pid 9307:tid 9370] [client 20.151.206.3:27100] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "agdVsCC43jY1IRzK5VZvZAAAAMU"]
[Sat May 16 01:19:45.258541 2026] [:error] [pid 9305:tid 9345] [client 20.151.206.3:27428] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "agdVsd5FZyBmdCM8GsGhtwAAAEc"]
[Sat May 16 01:19:45.689983 2026] [:error] [pid 9392:tid 9414] [client 20.151.206.3:27516] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "agdVsdBWJIjH1U9zGfb_OAAAARQ"]
[Sat May 16 01:19:46.129453 2026] [:error] [pid 9392:tid 9408] [client 20.151.206.3:27421] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sky.php"] [unique_id "agdVstBWJIjH1U9zGfb_OQAAAQ4"]
[Sat May 16 01:19:46.568045 2026] [:error] [pid 9392:tid 9398] [client 20.151.206.3:27107] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "agdVstBWJIjH1U9zGfb_PAAAAQQ"]
[Sat May 16 01:19:46.997115 2026] [:error] [pid 9392:tid 9413] [client 20.151.206.3:27085] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "agdVstBWJIjH1U9zGfb_PQAAARM"]
[Sat May 16 01:19:47.423111 2026] [:error] [pid 9392:tid 9403] [client 20.151.206.3:27510] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "agdVs9BWJIjH1U9zGfb_PgAAAQk"]
[Sat May 16 01:19:47.878957 2026] [:error] [pid 9392:tid 9399] [client 20.151.206.3:27501] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/man.php"] [unique_id "agdVs9BWJIjH1U9zGfb_PwAAAQU"]
[Sat May 16 01:19:48.314427 2026] [:error] [pid 30272:tid 30288] [client 20.151.206.3:27519] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agdVtHvc_jSFaQ_7_wcmnAAAAY4"]
[Sat May 16 01:19:48.750374 2026] [:error] [pid 9392:tid 9405] [client 20.151.206.3:27465] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agdVtNBWJIjH1U9zGfb_RQAAAQs"]
[Sat May 16 01:19:49.179204 2026] [:error] [pid 9392:tid 9410] [client 20.151.206.3:27368] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agdVtdBWJIjH1U9zGfb_SAAAARA"]
[Sat May 16 01:19:49.637382 2026] [:error] [pid 9392:tid 9407] [client 20.151.206.3:27124] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agdVtdBWJIjH1U9zGfb_SgAAAQ0"]
[Sat May 16 01:19:50.072268 2026] [:error] [pid 30208:tid 30216] [client 20.151.206.3:27497] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agdVtpmLMCJujX-JTvhPAwAAAIY"]
[Sat May 16 01:19:50.503896 2026] [:error] [pid 9392:tid 9394] [client 20.151.206.3:27102] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agdVttBWJIjH1U9zGfb_UAAAAQA"]
[Sat May 16 01:19:50.966168 2026] [:error] [pid 30240:tid 30265] [client 20.151.206.3:27566] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agdVtq8ckHvaA6bpewuIFgAAAVc"]
[Sat May 16 01:19:51.407398 2026] [:error] [pid 9392:tid 9411] [client 20.151.206.3:27078] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7.php"] [unique_id "agdVt9BWJIjH1U9zGfb_UgAAARE"]
[Sat May 16 01:19:51.842721 2026] [:error] [pid 9307:tid 9371] [client 20.151.206.3:27468] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "agdVtyC43jY1IRzK5VZvZwAAAMY"]
[Sat May 16 01:19:52.274585 2026] [:error] [pid 9392:tid 9412] [client 20.151.206.3:27646] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "agdVuNBWJIjH1U9zGfb_VAAAARI"]
[Sat May 16 01:19:52.709103 2026] [:error] [pid 9392:tid 9401] [client 20.151.206.3:27395] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "agdVuNBWJIjH1U9zGfb_VgAAAQc"]
[Sat May 16 01:19:53.155030 2026] [:error] [pid 9392:tid 9396] [client 20.151.206.3:27403] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "agdVudBWJIjH1U9zGfb_VwAAAQI"]
[Sat May 16 01:19:53.656486 2026] [:error] [pid 9307:tid 9386] [client 20.151.206.3:27082] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "agdVuSC43jY1IRzK5VZvagAAANU"]
[Sat May 16 01:19:54.131504 2026] [:error] [pid 30208:tid 30234] [client 20.151.206.3:27132] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "agdVupmLMCJujX-JTvhPCAAAAJg"]
[Sat May 16 01:19:54.559535 2026] [:error] [pid 30240:tid 30262] [client 20.151.206.3:27398] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "agdVuq8ckHvaA6bpewuIGAAAAVQ"]
[Sat May 16 01:19:54.994286 2026] [:error] [pid 30240:tid 30266] [client 20.151.206.3:27495] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mar.php"] [unique_id "agdVuq8ckHvaA6bpewuIGgAAAVg"]
[Sat May 16 01:19:55.442479 2026] [:error] [pid 30208:tid 30215] [client 20.151.206.3:27400] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "agdVu5mLMCJujX-JTvhPCgAAAIU"]
[Sat May 16 01:19:55.906828 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27112] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "agdVu3vc_jSFaQ_7_wcmnwAAAYk"]
[Sat May 16 01:19:56.350042 2026] [:error] [pid 30208:tid 30233] [client 20.151.206.3:27121] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "agdVvJmLMCJujX-JTvhPCwAAAJc"]
[Sat May 16 01:19:56.784090 2026] [:error] [pid 9305:tid 9341] [client 20.151.206.3:27427] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/themes.php"] [unique_id "agdVvN5FZyBmdCM8GsGhuQAAAEM"]
[Sat May 16 01:19:57.225835 2026] [:error] [pid 9392:tid 9408] [client 20.151.206.3:27450] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "agdVvdBWJIjH1U9zGfb_XQAAAQ4"]
[Sat May 16 01:19:57.676941 2026] [:error] [pid 9392:tid 9418] [client 20.151.206.3:27459] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "agdVvdBWJIjH1U9zGfb_XwAAARg"]
[Sat May 16 01:19:58.151301 2026] [:error] [pid 9392:tid 9417] [client 20.151.206.3:27573] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "agdVvtBWJIjH1U9zGfb_YQAAARc"]
[Sat May 16 01:19:58.637039 2026] [:error] [pid 30208:tid 30214] [client 20.151.206.3:27425] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acp.php"] [unique_id "agdVvpmLMCJujX-JTvhPDAAAAIQ"]
[Sat May 16 01:19:59.109444 2026] [:error] [pid 9307:tid 9381] [client 20.151.206.3:27096] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "agdVvyC43jY1IRzK5VZvbQAAANA"]
[Sat May 16 01:19:59.544892 2026] [:error] [pid 30240:tid 30245] [client 20.151.206.3:27401] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "agdVv68ckHvaA6bpewuIHQAAAUM"]
[Sat May 16 01:19:59.973390 2026] [:error] [pid 30272:tid 30298] [client 20.151.206.3:27095] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "agdVv3vc_jSFaQ_7_wcmoAAAAZg"]
[Sat May 16 01:20:00.436457 2026] [:error] [pid 30272:tid 30291] [client 20.151.206.3:27120] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zdd.php"] [unique_id "agdVwHvc_jSFaQ_7_wcmoQAAAZE"]
[Sat May 16 01:20:00.859858 2026] [:error] [pid 30272:tid 30277] [client 20.151.206.3:27423] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "agdVwHvc_jSFaQ_7_wcmogAAAYM"]
[Sat May 16 01:20:01.285047 2026] [:error] [pid 9392:tid 9401] [client 20.151.206.3:27435] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "agdVwdBWJIjH1U9zGfb_ZgAAAQc"]
[Sat May 16 01:20:01.716169 2026] [:error] [pid 30272:tid 30275] [client 20.151.206.3:27580] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "agdVwXvc_jSFaQ_7_wcmpAAAAYE"]
[Sat May 16 01:20:02.147814 2026] [:error] [pid 9305:tid 9358] [client 20.151.206.3:27631] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "agdVwt5FZyBmdCM8GsGhuwAAAFQ"]
[Sat May 16 01:20:02.578252 2026] [:error] [pid 9392:tid 9403] [client 20.151.206.3:27607] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agdVwtBWJIjH1U9zGfb_aAAAAQk"]
[Sat May 16 01:20:03.014765 2026] [:error] [pid 9392:tid 9415] [client 20.151.206.3:27131] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agdVw9BWJIjH1U9zGfb_agAAARU"]
[Sat May 16 01:20:03.454652 2026] [:error] [pid 30240:tid 30259] [client 20.151.206.3:27507] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agdVw68ckHvaA6bpewuIIAAAAVE"]
[Sat May 16 01:20:03.930061 2026] [:error] [pid 30272:tid 30279] [client 20.151.206.3:27344] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sallu.php"] [unique_id "agdVw3vc_jSFaQ_7_wcmpwAAAYU"]
[Sat May 16 01:20:04.362994 2026] [:error] [pid 30208:tid 30226] [client 20.151.206.3:27420] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "agdVxJmLMCJujX-JTvhPDQAAAJA"]
[Sat May 16 01:20:04.803759 2026] [:error] [pid 9392:tid 9402] [client 20.151.206.3:27399] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "agdVxNBWJIjH1U9zGfb_awAAAQg"]
[Sat May 16 01:20:05.251214 2026] [:error] [pid 30208:tid 30222] [client 20.151.206.3:27111] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "agdVxZmLMCJujX-JTvhPDwAAAIw"]
[Sat May 16 01:20:05.724596 2026] [:error] [pid 9305:tid 9339] [client 20.151.206.3:27333] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aboute.php"] [unique_id "agdVxd5FZyBmdCM8GsGhvAAAAEE"]
[Sat May 16 01:20:06.157596 2026] [:error] [pid 30272:tid 30278] [client 20.151.206.3:27382] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "agdVxnvc_jSFaQ_7_wcmqQAAAYQ"]
[Sat May 16 01:20:06.610477 2026] [:error] [pid 30272:tid 30295] [client 20.151.206.3:27500] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "agdVxnvc_jSFaQ_7_wcmqgAAAZU"]
[Sat May 16 01:20:07.062076 2026] [:error] [pid 9304:tid 9333] [client 20.151.206.3:27118] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "agdVx9zcINh7UFIbVoGrSAAAABc"]
[Sat May 16 01:20:07.495753 2026] [:error] [pid 9304:tid 9332] [client 20.151.206.3:27513] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "agdVx9zcINh7UFIbVoGrSQAAABY"]
[Sat May 16 01:20:07.923009 2026] [:error] [pid 9392:tid 9418] [client 20.151.206.3:27452] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agdVx9BWJIjH1U9zGfb_bQAAARg"]
[Sat May 16 01:20:08.360082 2026] [:error] [pid 30208:tid 30220] [client 20.151.206.3:27346] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agdVyJmLMCJujX-JTvhPEAAAAIo"]
[Sat May 16 01:20:08.782321 2026] [:error] [pid 9392:tid 9410] [client 20.151.206.3:27483] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agdVyNBWJIjH1U9zGfb_cAAAARA"]
[Sat May 16 01:20:09.231734 2026] [:error] [pid 30272:tid 30281] [client 20.151.206.3:27409] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "agdVyXvc_jSFaQ_7_wcmrAAAAYc"]
[Sat May 16 01:20:09.734513 2026] [:error] [pid 30272:tid 30286] [client 20.151.206.3:27430] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "agdVyXvc_jSFaQ_7_wcmrQAAAYw"]
[Sat May 16 01:20:10.174261 2026] [:error] [pid 30272:tid 30276] [client 20.151.206.3:27508] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "agdVynvc_jSFaQ_7_wcmrgAAAYI"]
[Sat May 16 01:20:10.605558 2026] [:error] [pid 9392:tid 9417] [client 20.151.206.3:27108] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "agdVytBWJIjH1U9zGfb_cgAAARc"]
[Sat May 16 01:20:11.039858 2026] [:error] [pid 30272:tid 30297] [client 20.151.206.3:27498] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "agdVy3vc_jSFaQ_7_wcmrwAAAZc"]
[Sat May 16 01:20:11.478859 2026] [:error] [pid 9392:tid 9416] [client 20.151.206.3:27077] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "agdVy9BWJIjH1U9zGfb_dAAAARY"]
[Sat May 16 01:20:11.967765 2026] [:error] [pid 30272:tid 30292] [client 20.151.206.3:27119] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "agdVy3vc_jSFaQ_7_wcmsAAAAZI"]
[Sat May 16 01:20:12.405630 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27334] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "agdVzHvc_jSFaQ_7_wcmsQAAAYk"]
[Sat May 16 01:20:12.885523 2026] [:error] [pid 9304:tid 9311] [client 20.151.206.3:27088] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-class.php"] [unique_id "agdVzNzcINh7UFIbVoGrSgAAAAE"]
[Sat May 16 01:20:13.381761 2026] [:error] [pid 9304:tid 9334] [client 20.151.206.3:27367] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agdVzdzcINh7UFIbVoGrTAAAABg"]
[Sat May 16 01:20:13.832018 2026] [:error] [pid 9392:tid 9413] [client 20.151.206.3:27429] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agdVzdBWJIjH1U9zGfb_dwAAARM"]
[Sat May 16 01:20:14.270433 2026] [:error] [pid 9304:tid 9313] [client 20.151.206.3:27453] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agdVztzcINh7UFIbVoGrTQAAAAM"]
[Sat May 16 01:20:14.706830 2026] [:error] [pid 9392:tid 9403] [client 20.151.206.3:27405] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "agdVztBWJIjH1U9zGfb_eQAAAQk"]
[Sat May 16 01:20:15.141784 2026] [:error] [pid 30272:tid 30291] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Sat May 16 01:20:15.360806 2026] [:error] [pid 30272:tid 30275] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Sat May 16 01:20:15.579755 2026] [:error] [pid 30272:tid 30289] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sat May 16 01:20:15.803781 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat May 16 01:20:16.026436 2026] [:error] [pid 30272:tid 30282] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Sat May 16 01:20:16.272334 2026] [:error] [pid 30272:tid 30287] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Sat May 16 01:20:16.502523 2026] [:error] [pid 30272:tid 30284] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/ss.php
[Sat May 16 01:20:16.725049 2026] [:error] [pid 30272:tid 30294] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat May 16 01:20:17.219696 2026] [:error] [pid 30272:tid 30295] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat May 16 01:20:17.500631 2026] [:error] [pid 30272:tid 30288] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Sat May 16 01:20:17.722374 2026] [:error] [pid 30272:tid 30293] [client 20.151.206.3:27442] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sat May 16 01:20:17.943893 2026] [:error] [pid 30272:tid 30281] [client 20.151.206.3:27442] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "agdV0Xvc_jSFaQ_7_wcmvwAAAYc"]
[Sat May 16 01:20:18.376163 2026] [:error] [pid 9392:tid 9406] [client 20.151.206.3:27087] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "agdV0tBWJIjH1U9zGfb_fAAAAQw"]
[Sat May 16 01:20:18.825806 2026] [:error] [pid 9392:tid 9414] [client 20.151.206.3:27135] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "agdV0tBWJIjH1U9zGfb_fgAAARQ"]
[Sat May 16 01:20:19.287140 2026] [:error] [pid 9307:tid 9365] [client 20.151.206.3:27488] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/12.php"] [unique_id "agdV0yC43jY1IRzK5VZvdwAAAMA"]
[Sat May 16 01:20:19.729716 2026] [:error] [pid 9392:tid 9418] [client 20.151.206.3:27113] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agdV09BWJIjH1U9zGfb_fwAAARg"]
[Sat May 16 01:20:20.162042 2026] [:error] [pid 30208:tid 30217] [client 20.151.206.3:27338] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agdV1JmLMCJujX-JTvhPEwAAAIc"]
[Sat May 16 01:20:20.597426 2026] [:error] [pid 9304:tid 9320] [client 20.151.206.3:27417] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agdV1NzcINh7UFIbVoGrUQAAAAo"]
[Sat May 16 01:20:21.037221 2026] [:error] [pid 9305:tid 9348] [client 20.151.206.3:27412] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agdV1d5FZyBmdCM8GsGhvwAAAEo"]
[Sat May 16 01:20:21.490688 2026] [:error] [pid 9307:tid 9369] [client 20.151.206.3:27105] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agdV1SC43jY1IRzK5VZveQAAAMQ"]
[Sat May 16 01:20:21.958781 2026] [:error] [pid 9305:tid 9351] [client 20.151.206.3:27345] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agdV1d5FZyBmdCM8GsGhwAAAAE0"]
[Sat May 16 01:20:22.399142 2026] [:error] [pid 9307:tid 9382] [client 20.151.206.3:27455] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agdV1iC43jY1IRzK5VZvfAAAANE"]
[Sat May 16 01:20:22.845287 2026] [:error] [pid 9392:tid 9399] [client 20.151.206.3:27099] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agdV1tBWJIjH1U9zGfb_ggAAAQU"]
[Sat May 16 01:20:23.297020 2026] [:error] [pid 9392:tid 9411] [client 20.151.206.3:27356] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agdV19BWJIjH1U9zGfb_gwAAARE"]
[Sat May 16 01:20:23.730356 2026] [:error] [pid 9307:tid 9380] [client 20.151.206.3:27411] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agdV1yC43jY1IRzK5VZvfgAAAM8"]
[Sat May 16 01:20:24.156951 2026] [:error] [pid 9392:tid 9412] [client 20.151.206.3:27122] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agdV2NBWJIjH1U9zGfb_hgAAARI"]
[Sat May 16 01:20:24.621507 2026] [:error] [pid 9392:tid 9396] [client 20.151.206.3:27415] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agdV2NBWJIjH1U9zGfb_hwAAAQI"]
[Sat May 16 01:20:25.052349 2026] [:error] [pid 9307:tid 9389] [client 20.151.206.3:27514] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agdV2SC43jY1IRzK5VZvfwAAANg"]
[Sat May 16 01:20:25.787036 2026] [:error] [pid 9307:tid 9383] [client 20.151.206.3:27559] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agdV2SC43jY1IRzK5VZvgwAAANI"]
[Sat May 16 01:20:26.287696 2026] [:error] [pid 9307:tid 9379] [client 20.151.206.3:27471] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agdV2iC43jY1IRzK5VZvhAAAAM4"]
[Sat May 16 01:20:26.715200 2026] [:error] [pid 30208:tid 30224] [client 20.151.206.3:27397] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agdV2pmLMCJujX-JTvhPFAAAAI4"]
[Sat May 16 01:20:27.185307 2026] [:error] [pid 9392:tid 9401] [client 20.151.206.3:27335] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agdV29BWJIjH1U9zGfb_iAAAAQc"]
[Sat May 16 01:20:27.645687 2026] [:error] [pid 30240:tid 30262] [client 20.151.206.3:27410] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agdV268ckHvaA6bpewuIKgAAAVQ"]
[Sat May 16 01:20:28.085120 2026] [:error] [pid 9392:tid 9400] [client 20.151.206.3:27370] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agdV3NBWJIjH1U9zGfb_igAAAQY"]
[Sat May 16 01:20:28.530599 2026] [:error] [pid 9304:tid 9319] [client 20.151.206.3:27425] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agdV3NzcINh7UFIbVoGrVAAAAAk"]
[Sat May 16 01:20:28.965613 2026] [:error] [pid 30272:tid 30297] [client 20.151.206.3:27278] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agdV3Hvc_jSFaQ_7_wcmxAAAAZc"]
[Sat May 16 01:20:29.388685 2026] [:error] [pid 30272:tid 30292] [client 20.151.206.3:27393] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agdV3Xvc_jSFaQ_7_wcmxQAAAZI"]
[Sat May 16 01:20:29.836568 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27621] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agdV3Xvc_jSFaQ_7_wcmxgAAAYk"]
[Sat May 16 01:20:30.274224 2026] [:error] [pid 30208:tid 30232] [client 20.151.206.3:27380] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agdV3pmLMCJujX-JTvhPFwAAAJY"]
[Sat May 16 01:20:30.705214 2026] [:error] [pid 9305:tid 9350] [client 20.151.206.3:27438] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agdV3t5FZyBmdCM8GsGhwwAAAEw"]
[Sat May 16 01:20:31.136663 2026] [:error] [pid 30208:tid 30234] [client 20.151.206.3:27402] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agdV35mLMCJujX-JTvhPGAAAAJg"]
[Sat May 16 01:20:31.568682 2026] [:error] [pid 9305:tid 9357] [client 20.151.206.3:27097] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agdV395FZyBmdCM8GsGhxQAAAFM"]
[Sat May 16 01:20:32.007527 2026] [:error] [pid 9304:tid 9310] [client 20.151.206.3:27426] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agdV4NzcINh7UFIbVoGrVgAAAAA"]
[Sat May 16 01:20:32.440006 2026] [:error] [pid 9307:tid 9388] [client 20.151.206.3:27432] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "agdV4CC43jY1IRzK5VZvhwAAANc"]
[Sat May 16 01:20:32.871947 2026] [:error] [pid 9307:tid 9375] [client 20.151.206.3:27464] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "agdV4CC43jY1IRzK5VZviAAAAMo"]
[Sat May 16 01:20:33.305638 2026] [:error] [pid 9307:tid 9378] [client 20.151.206.3:27441] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "agdV4SC43jY1IRzK5VZvigAAAM0"]
[Sat May 16 01:20:33.734230 2026] [:error] [pid 9307:tid 9387] [client 20.151.206.3:27332] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file2.php"] [unique_id "agdV4SC43jY1IRzK5VZviwAAANY"]
[Sat May 16 01:20:34.178083 2026] [:error] [pid 9305:tid 9343] [client 20.151.206.3:27434] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agdV4t5FZyBmdCM8GsGhxwAAAEU"]
[Sat May 16 01:20:34.610187 2026] [:error] [pid 30208:tid 30212] [client 20.151.206.3:27422] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agdV4pmLMCJujX-JTvhPHAAAAII"]
[Sat May 16 01:20:35.041711 2026] [:error] [pid 9307:tid 9377] [client 20.151.206.3:27394] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agdV4yC43jY1IRzK5VZvjgAAAMw"]
[Sat May 16 01:20:35.473830 2026] [:error] [pid 9307:tid 9380] [client 20.151.206.3:27091] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agdV4yC43jY1IRzK5VZvjwAAAM8"]
[Sat May 16 01:20:35.908758 2026] [:error] [pid 30272:tid 30275] [client 20.151.206.3:27369] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agdV43vc_jSFaQ_7_wcmxwAAAYE"]
[Sat May 16 01:20:36.339681 2026] [:error] [pid 30272:tid 30289] [client 20.151.206.3:27436] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agdV5Hvc_jSFaQ_7_wcmyQAAAY8"]
[Sat May 16 01:20:36.766286 2026] [:error] [pid 9307:tid 9366] [client 20.151.206.3:27373] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agdV5CC43jY1IRzK5VZvkQAAAME"]
[Sat May 16 01:20:37.193864 2026] [:error] [pid 30272:tid 30285] [client 20.151.206.3:27364] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agdV5Xvc_jSFaQ_7_wcmygAAAYs"]
[Sat May 16 01:20:37.641880 2026] [:error] [pid 30208:tid 30218] [client 20.151.206.3:27597] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agdV5ZmLMCJujX-JTvhPHQAAAIg"]
[Sat May 16 01:20:38.092563 2026] [:error] [pid 30272:tid 30287] [client 20.151.206.3:27351] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agdV5nvc_jSFaQ_7_wcmzAAAAY0"]
[Sat May 16 01:20:38.553797 2026] [:error] [pid 9307:tid 9370] [client 20.151.206.3:27128] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agdV5iC43jY1IRzK5VZvkgAAAMU"]
[Sat May 16 01:20:38.986066 2026] [:error] [pid 30208:tid 30223] [client 20.151.206.3:27374] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agdV5pmLMCJujX-JTvhPHwAAAI0"]
[Sat May 16 01:20:39.420347 2026] [:error] [pid 30208:tid 30214] [client 20.151.206.3:27092] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "agdV55mLMCJujX-JTvhPIQAAAIQ"]
[Sat May 16 01:20:39.846143 2026] [:error] [pid 30208:tid 30226] [client 20.151.206.3:27502] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "agdV55mLMCJujX-JTvhPIgAAAJA"]
[Sat May 16 01:20:40.275483 2026] [:error] [pid 30208:tid 30222] [client 20.151.206.3:27404] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "agdV6JmLMCJujX-JTvhPIwAAAIw"]
[Sat May 16 01:20:40.728950 2026] [:error] [pid 30272:tid 30279] [client 20.151.206.3:27127] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-theme.php"] [unique_id "agdV6Hvc_jSFaQ_7_wcmzgAAAYU"]
[Sat May 16 01:20:41.175898 2026] [:error] [pid 9392:tid 9409] [client 20.151.206.3:27362] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "agdV6dBWJIjH1U9zGfb_mgAAAQ8"]
[Sat May 16 01:20:41.610708 2026] [:error] [pid 30240:tid 30247] [client 20.151.206.3:27443] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "agdV6a8ckHvaA6bpewuIMAAAAUU"]
[Sat May 16 01:20:42.037473 2026] [:error] [pid 9307:tid 9367] [client 20.151.206.3:27074] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "agdV6iC43jY1IRzK5VZvlQAAAMI"]
[Sat May 16 01:20:42.469194 2026] [:error] [pid 9307:tid 9383] [client 20.151.206.3:27275] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-file.php"] [unique_id "agdV6iC43jY1IRzK5VZvlgAAANI"]
[Sat May 16 01:20:42.910265 2026] [:error] [pid 9392:tid 9418] [client 20.151.206.3:27357] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "agdV6tBWJIjH1U9zGfb_nwAAARg"]
[Sat May 16 01:20:43.340744 2026] [:error] [pid 30272:tid 30294] [client 20.151.206.3:27505] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "agdV63vc_jSFaQ_7_wcmzwAAAZQ"]
[Sat May 16 01:20:43.783898 2026] [:error] [pid 30272:tid 30281] [client 20.151.206.3:27416] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "agdV63vc_jSFaQ_7_wcm0QAAAYc"]
[Sat May 16 01:20:44.235930 2026] [:error] [pid 30272:tid 30286] [client 20.151.206.3:27447] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/default.php"] [unique_id "agdV7Hvc_jSFaQ_7_wcm1QAAAYw"]
[Sat May 16 01:20:44.675337 2026] [:error] [pid 30240:tid 30264] [client 20.151.206.3:27134] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agdV7K8ckHvaA6bpewuINgAAAVY"]
[Sat May 16 01:20:45.143216 2026] [:error] [pid 9304:tid 9322] [client 20.151.206.3:27610] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agdV7dzcINh7UFIbVoGrVwAAAAw"]
[Sat May 16 01:20:45.577825 2026] [:error] [pid 9305:tid 9347] [client 20.151.206.3:27330] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agdV7d5FZyBmdCM8GsGhywAAAEk"]
[Sat May 16 01:20:46.041199 2026] [:error] [pid 30208:tid 30210] [client 20.151.206.3:27446] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agdV7pmLMCJujX-JTvhPKAAAAIA"]
[Sat May 16 01:20:46.495247 2026] [:error] [pid 9307:tid 9371] [client 20.151.206.3:27342] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "agdV7iC43jY1IRzK5VZvlwAAAMY"]
[Sat May 16 01:20:46.976431 2026] [:error] [pid 9307:tid 9388] [client 20.151.206.3:27448] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "agdV7iC43jY1IRzK5VZvmQAAANc"]
[Sat May 16 01:20:47.460152 2026] [:error] [pid 9307:tid 9378] [client 20.151.206.3:27331] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "agdV7yC43jY1IRzK5VZvmwAAAM0"]
[Sat May 16 01:20:47.921318 2026] [:error] [pid 30208:tid 30224] [client 20.151.206.3:27328] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins.php"] [unique_id "agdV75mLMCJujX-JTvhPKQAAAI4"]
[Sat May 16 01:20:48.387327 2026] [:error] [pid 30208:tid 30232] [client 20.151.206.3:27343] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agdV8JmLMCJujX-JTvhPKgAAAJY"]
[Sat May 16 01:20:48.868718 2026] [:error] [pid 30208:tid 30234] [client 20.151.206.3:27437] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agdV8JmLMCJujX-JTvhPLQAAAJg"]
[Sat May 16 01:20:49.305610 2026] [:error] [pid 30208:tid 30229] [client 20.151.206.3:27106] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agdV8ZmLMCJujX-JTvhPLwAAAJM"]
[Sat May 16 01:20:49.851063 2026] [:error] [pid 30208:tid 30225] [client 20.151.206.3:27363] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sf.php"] [unique_id "agdV8ZmLMCJujX-JTvhPMQAAAI8"]
[Sat May 16 01:20:50.361497 2026] [:error] [pid 9307:tid 9370] [client 20.151.206.3:27449] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agdV8iC43jY1IRzK5VZvogAAAMU"]
[Sat May 16 01:20:50.796583 2026] [:error] [pid 30208:tid 30214] [client 20.151.206.3:27313] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agdV8pmLMCJujX-JTvhPNAAAAIQ"]
[Sat May 16 01:20:51.470385 2026] [:error] [pid 30208:tid 30222] [client 20.151.206.3:27365] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agdV85mLMCJujX-JTvhPNQAAAIw"]
[Sat May 16 01:20:51.898599 2026] [:error] [pid 30208:tid 30220] [client 20.151.206.3:27396] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agdV85mLMCJujX-JTvhPNwAAAIo"]
[Sat May 16 01:20:52.346904 2026] [:error] [pid 9305:tid 9338] [client 20.151.206.3:27392] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agdV9N5FZyBmdCM8GsGhzQAAAEA"]
[Sat May 16 01:20:52.782455 2026] [:error] [pid 30272:tid 30292] [client 20.151.206.3:27286] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agdV9Hvc_jSFaQ_7_wcm2AAAAZI"]
[Sat May 16 01:20:53.241723 2026] [:error] [pid 30272:tid 30283] [client 20.151.206.3:27303] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agdV9Xvc_jSFaQ_7_wcm2QAAAYk"]
[Sat May 16 01:20:53.693957 2026] [:error] [pid 30208:tid 30216] [client 20.151.206.3:27294] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agdV9ZmLMCJujX-JTvhPOAAAAIY"]
[Sat May 16 01:20:54.164528 2026] [:error] [pid 30272:tid 30290] [client 20.151.206.3:27381] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "agdV9nvc_jSFaQ_7_wcm2gAAAZA"]
[Sat May 16 01:20:54.607965 2026] [:error] [pid 30208:tid 30217] [client 20.151.206.3:27389] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "agdV9pmLMCJujX-JTvhPOQAAAIc"]
[Sat May 16 01:20:55.050886 2026] [:error] [pid 30240:tid 30252] [client 20.151.206.3:27350] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "agdV968ckHvaA6bpewuIOgAAAUo"]
[Sat May 16 01:20:55.491126 2026] [:error] [pid 30240:tid 30266] [client 20.151.206.3:27386] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ini.php"] [unique_id "agdV968ckHvaA6bpewuIOwAAAVg"]
[Sat May 16 01:20:55.932519 2026] [:error] [pid 30240:tid 30258] [client 20.151.206.3:27308] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "agdV968ckHvaA6bpewuIPAAAAVA"]
[Sat May 16 01:20:56.375848 2026] [:error] [pid 30272:tid 30275] [client 20.151.206.3:27319] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "agdV-Hvc_jSFaQ_7_wcm2wAAAYE"]
[Sat May 16 01:20:56.826439 2026] [:error] [pid 9307:tid 9375] [client 20.151.206.3:27266] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "agdV-CC43jY1IRzK5VZvqAAAAMo"]
[Sat May 16 01:20:57.286842 2026] [:error] [pid 30208:tid 30228] [client 20.151.206.3:27133] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca4.php"] [unique_id "agdV-ZmLMCJujX-JTvhPPQAAAJI"]
[Sat May 16 01:20:57.715507 2026] [:error] [pid 9307:tid 9369] [client 20.151.206.3:27339] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agdV-SC43jY1IRzK5VZvqQAAAMQ"]
[Sat May 16 01:20:58.161803 2026] [:error] [pid 9304:tid 9333] [client 20.151.206.3:27296] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agdV-tzcINh7UFIbVoGrWwAAABc"]
[Sat May 16 01:20:58.603659 2026] [:error] [pid 30272:tid 30284] [client 20.151.206.3:27604] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agdV-nvc_jSFaQ_7_wcm3gAAAYo"]
[Sat May 16 01:20:59.049304 2026] [:error] [pid 9307:tid 9381] [client 20.151.206.3:27414] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agdV-yC43jY1IRzK5VZvqgAAANA"]
[Sat May 16 01:20:59.553061 2026] [:error] [pid 9305:tid 9351] [client 20.151.206.3:27288] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "agdV-95FZyBmdCM8GsGh0AAAAE0"]
[Sat May 16 01:20:59.990990 2026] [:error] [pid 9307:tid 9373] [client 20.151.206.3:27270] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "agdV-yC43jY1IRzK5VZvqwAAAMg"]
[Sat May 16 01:21:00.432198 2026] [:error] [pid 9307:tid 9365] [client 20.151.206.3:27431] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "agdV_CC43jY1IRzK5VZvrAAAAMA"]
[Sat May 16 01:21:00.923598 2026] [:error] [pid 9307:tid 9374] [client 20.151.206.3:27433] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-info.php"] [unique_id "agdV_CC43jY1IRzK5VZvrQAAAMk"]
[Sat May 16 01:21:01.368874 2026] [:error] [pid 9392:tid 9401] [client 20.151.206.3:27348] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agdV_dBWJIjH1U9zGfb_qwAAAQc"]
[Sat May 16 01:21:01.797822 2026] [:error] [pid 9392:tid 9395] [client 20.151.206.3:27337] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agdV_dBWJIjH1U9zGfb_rAAAAQE"]
[Sat May 16 01:21:02.224927 2026] [:error] [pid 9307:tid 9382] [client 20.151.206.3:27291] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agdV_iC43jY1IRzK5VZvrwAAANE"]
[Sat May 16 01:21:02.656210 2026] [:error] [pid 30208:tid 30219] [client 20.151.206.3:27424] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agdV_pmLMCJujX-JTvhPRAAAAIk"]
[Sat May 16 01:21:03.082414 2026] [:error] [pid 30272:tid 30279] [client 20.151.206.3:27355] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agdV_3vc_jSFaQ_7_wcm3wAAAYU"]
[Sat May 16 01:21:03.523910 2026] [:error] [pid 9392:tid 9415] [client 20.151.206.3:27318] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agdV_9BWJIjH1U9zGfb_rQAAARU"]
[Sat May 16 01:21:03.950835 2026] [:error] [pid 9304:tid 9311] [client 20.151.206.3:27388] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agdV_9zcINh7UFIbVoGrXQAAAAE"]
[Sat May 16 01:21:04.385317 2026] [:error] [pid 9305:tid 9360] [client 20.151.206.3:27293] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agdWAN5FZyBmdCM8GsGh0gAAAFY"]
[Sat May 16 01:21:04.818575 2026] [:error] [pid 30208:tid 30213] [client 20.151.206.3:27265] [client 20.151.206.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "agdWAJmLMCJujX-JTvhPSQAAAIM"]
[Sat May 16 01:21:05.252672 2026] [:error] [pid 9305:tid 9350] [client 20.151.206.3:27372] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.ph"] [unique_id "agdWAd5FZyBmdCM8GsGh0wAAAEw"]
[Sat May 16 01:21:05.697750 2026] [:error] [pid 30272:tid 30294] [client 20.151.206.3:27292] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.ph"] [unique_id "agdWAXvc_jSFaQ_7_wcm4AAAAZQ"]
[Sat May 16 01:21:06.141736 2026] [:error] [pid 30272:tid 30281] [client 20.151.206.3:27444] [client 20.151.206.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.ph"] [unique_id "agdWAnvc_jSFaQ_7_wcm4QAAAYc"]
[Sat May 16 06:27:37.579533 2026] [:error] [pid 24867:tid 24900] [client 49.51.183.84:56840] [client 49.51.183.84] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aged2SDgFLCgyKq-zmbt_gAAABM"]
[Sat May 16 08:54:45.041842 2026] [:error] [pid 24979:tid 24994] [client 43.153.123.4:55346] [client 43.153.123.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agfAVbvSFUQiwLaOL2pOJwAAAM0"]
[Sat May 16 12:09:07.021912 2026] [:error] [pid 61361:tid 61387] [client 43.153.204.189:45924] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agft45Zojzbt3jGziNkdegAAAVg"]
[Sat May 16 13:40:46.781593 2026] [:error] [pid 24869:tid 24919] [client 34.181.210.15:64785] [client 34.181.210.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.181.210.15, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aggDXuxo3FMprMltYl4rJgAAAEs"]
[Sat May 16 13:40:46.784988 2026] [:error] [pid 24869:tid 24919] [client 34.181.210.15:64785] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 16 13:40:50.682638 2026] [:error] [pid 24869:tid 24917] [client 34.181.210.15:64785] [client 34.181.210.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aggDYuxo3FMprMltYl4rMQAAAEk"]
[Sat May 16 13:40:51.139186 2026] [:error] [pid 62341:tid 62352] [client 34.181.210.15:62344] [client 34.181.210.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aggDY6nvQ59ep-XG78id6gAAAoY"]
[Sat May 16 13:40:51.587811 2026] [:error] [pid 24869:tid 24923] [client 34.181.210.15:57917] [client 34.181.210.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aggDY-xo3FMprMltYl4rMgAAAE8"]
[Sat May 16 13:40:52.218809 2026] [:error] [pid 24874:tid 24945] [client 34.181.210.15:58566] [client 34.181.210.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aggDZMiii6x3XidYGHHPpgAAAIo"]
[Sat May 16 13:40:52.752590 2026] [:error] [pid 62210:tid 62214] [client 34.181.210.15:62341] [client 34.181.210.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aggDZMjHonCA4ORo40G8AgAAAkI"]
[Sat May 16 13:40:53.316030 2026] [:error] [pid 61411:tid 61418] [client 34.181.210.15:54655] [client 34.181.210.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aggDZWVkiEwGnPL_dvHlBQAAAYU"]
[Sat May 16 13:40:54.077793 2026] [:error] [pid 61361:tid 61382] [client 34.181.210.15:59448] [client 34.181.210.15] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aggDZpZojzbt3jGziNkwSwAAAVM"]
[Sat May 16 18:30:34.592906 2026] [:error] [pid 62341:tid 62356] [client 43.157.82.252:42172] [client 43.157.82.252] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aghHSqnvQ59ep-XG78i4ngAAAoo"]
[Sat May 16 21:24:01.406866 2026] [:error] [pid 62341:tid 62354] [client 43.164.131.148:47934] [client 43.164.131.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "aghv8anvQ59ep-XG78jDjQAAAog"]
[Sun May 17 04:55:34.442076 2026] [:error] [pid 59060:tid 59077] [client 43.166.237.57:44012] [client 43.166.237.57] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agjZxvvwvq3bndkPE4m-xwAAAAg"]
[Sun May 17 08:39:55.671309 2026] [:error] [pid 36652:tid 36671] [client 43.160.219.138:42444] [client 43.160.219.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agkOWzZrzQadnZADvj8mswAAARE"]
[Sun May 17 08:40:02.796432 2026] [:error] [pid 17234:tid 17237] [client 1.12.70.96:41562] [client 1.12.70.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agkOYtJ4QOrYRCeDR2gKdAAAAUE"]
[Sun May 17 10:30:02.916207 2026] [:error] [pid 59166:tid 59182] [client 129.226.146.42:59046] [client 129.226.146.42] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agkoKk_puQ1I47_0UrjJrgAAAM4"]
[Sun May 17 11:07:47.754323 2026] [:error] [pid 59060:tid 59076] [client 118.99.107.245:49356] [client 118.99.107.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.99.107.245, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agkxA_vwvq3bndkPE4nWOQAAAAc"]
[Sun May 17 11:07:47.760657 2026] [:error] [pid 59060:tid 59076] [client 118.99.107.245:49356] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 17 13:03:23.319853 2026] [:error] [pid 59060:tid 59082] [client 192.96.159.129:63847] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "aglMG_vwvq3bndkPE4ndEAAAAA0"]
[Sun May 17 13:28:53.644171 2026] [:error] [pid 11079:tid 11100] [client 58.10.135.103:6984] [client 58.10.135.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 58.10.135.103, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "aglSFWeR3-DrxhvUqxGhXwAAAkA"]
[Sun May 17 13:28:53.649389 2026] [:error] [pid 11079:tid 11100] [client 58.10.135.103:6984] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 17 15:16:11.284593 2026] [:error] [pid 11079:tid 11116] [client 92.118.39.29:37296] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "aglrO2eR3-DrxhvUqxGzSwAAAkw"]
[Sun May 17 18:18:41.109930 2026] [:error] [pid 10784:tid 10802] [client 43.164.0.96:59336] [client 43.164.0.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agmWAWBWRlKsFkSZGxBAiQAAAYM"]
[Sun May 17 19:58:32.944352 2026] [:error] [pid 10834:tid 10852] [client 49.51.38.193:53594] [client 49.51.38.193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agmtaBISNQ_Nf83-VpqqHwAAAcY"]
[Sun May 17 21:21:15.865376 2026] [:error] [pid 59060:tid 59070] [client 101.42.46.71:33380] [client 101.42.46.71] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agnAy_vwvq3bndkPE4n2QgAAAAE"]
[Mon May 18 03:40:38.108339 2026] [:error] [pid 55127:tid 55186] [client 124.156.200.4:52218] [client 124.156.200.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agoZts8xz_rSOjC8lPIPsgAAAFU"]
[Mon May 18 05:29:30.468168 2026] [:error] [pid 63115:tid 63122] [client 150.109.21.93:43488] [client 150.109.21.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agozOuz_ApFcYdejvGfoDgAAAQU"]
[Mon May 18 09:00:15.447374 2026] [:error] [pid 36579:tid 36596] [client 43.140.247.223:36784] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agpkn1-aoZxBfgL5vDweFQAAAE4"]
[Mon May 18 11:31:29.992513 2026] [:error] [pid 36491:tid 36508] [client 194.62.107.63:43647] [client 194.62.107.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "agqIEU555B9CZb6D60l6EgAAAU0"]
[Mon May 18 14:03:15.453391 2026] [:error] [pid 36493:tid 36554] [client 43.164.190.28:39156] [client 43.164.190.28] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agqrowynkzQB5nM668qk8AAAAQU"]
[Mon May 18 15:36:47.052298 2026] [:error] [pid 36492:tid 36542] [client 170.106.140.110:56066] [client 170.106.140.110] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agrBj2CVlogrkn9m2w6tbAAAABQ"]
[Mon May 18 18:29:33.494969 2026] [:error] [pid 36579:tid 36586] [client 101.32.15.141:50904] [client 101.32.15.141] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agrqDV-aoZxBfgL5vDyGUQAAAEQ"]
[Mon May 18 20:09:05.272361 2026] [:error] [pid 36492:tid 36530] [client 196.207.187.147:58808] [client 196.207.187.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.207.187.147, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agsBYWCVlogrkn9m2w7mGAAAAAg"]
[Mon May 18 20:09:05.278572 2026] [:error] [pid 36492:tid 36530] [client 196.207.187.147:58808] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon May 18 22:19:32.323683 2026] [:error] [pid 44087:tid 44105] [client 162.14.81.106:47576] [client 162.14.81.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agsf9G5HPHbH9GK7l6z-sgAAAdA"]
[Mon May 18 22:56:12.633758 2026] [:error] [pid 36493:tid 36564] [client 101.33.55.204:38632] [client 101.33.55.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agsojAynkzQB5nM668rTNQAAAQ8"]
[Tue May 19 03:15:42.674714 2026] [:error] [pid 36491:tid 36502] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue May 19 03:15:42.986843 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/archive.php
[Tue May 19 03:15:43.299188 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Tue May 19 03:15:43.612595 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue May 19 03:15:43.924549 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue May 19 03:15:44.557863 2026] [:error] [pid 36491:tid 36507] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue May 19 03:15:44.872727 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Tue May 19 03:15:45.185597 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue May 19 03:15:45.498298 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:20478] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Tue May 19 03:15:45.807952 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:20478] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "agtlYU555B9CZb6D60kSxgAAAVg"]
[Tue May 19 03:15:46.464379 2026] [:error] [pid 44046:tid 44048] [client 20.226.60.108:57268] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "agtlYoYF4k2jfXJBXk0X8gAAAYA"]
[Tue May 19 03:15:47.115134 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:32448] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "agtlY1-aoZxBfgL5vDzAOgAAAEA"]
[Tue May 19 03:15:47.806692 2026] [:error] [pid 36492:tid 36523] [client 20.226.60.108:57243] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index.php"] [unique_id "agtlY2CVlogrkn9m2w43QgAAAAE"]
[Tue May 19 03:15:48.604516 2026] [:error] [pid 36491:tid 36516] [client 20.226.60.108:57219] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/chosen.php"] [unique_id "agtlZE555B9CZb6D60kSzQAAAVU"]
[Tue May 19 03:15:49.245608 2026] [:error] [pid 36491:tid 36496] [client 20.226.60.108:32507] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/chosen.php"] [unique_id "agtlZU555B9CZb6D60kSzwAAAUE"]
[Tue May 19 03:15:49.994484 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:10033] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/chosen.php"] [unique_id "agtlZU555B9CZb6D60kS0QAAAVQ"]
[Tue May 19 03:15:50.734100 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:46927] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/chosen.php"] [unique_id "agtlZk555B9CZb6D60kS0wAAAVI"]
[Tue May 19 03:15:51.474604 2026] [:error] [pid 36579:tid 36585] [client 20.226.60.108:34588] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/chosen.php"] [unique_id "agtlZ1-aoZxBfgL5vDzAPgAAAEM"]
[Tue May 19 03:15:52.203852 2026] [:error] [pid 36492:tid 36536] [client 20.226.60.108:9997] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/chosen.php"] [unique_id "agtlaGCVlogrkn9m2w43RgAAAA4"]
[Tue May 19 03:15:52.849338 2026] [:error] [pid 36493:tid 36558] [client 20.226.60.108:56673] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/chosen.php"] [unique_id "agtlaAynkzQB5nM668ruQQAAAQk"]
[Tue May 19 03:15:53.753972 2026] [:error] [pid 44087:tid 44109] [client 20.226.60.108:25224] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about/chosen.php"] [unique_id "agtlaW5HPHbH9GK7l6wWiAAAAdQ"]
[Tue May 19 03:15:54.503499 2026] [:error] [pid 43916:tid 43933] [client 20.226.60.108:20418] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as/chosen.php"] [unique_id "agtlatQC236p33zJJvnj0wAAAIk"]
[Tue May 19 03:15:55.207006 2026] [:error] [pid 44087:tid 44113] [client 20.226.60.108:9961] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as/chosen.php"] [unique_id "agtla25HPHbH9GK7l6wWiwAAAdc"]
[Tue May 19 03:15:55.835765 2026] [:error] [pid 36493:tid 36560] [client 20.226.60.108:38042] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as/chosen.php"] [unique_id "agtlawynkzQB5nM668ruQwAAAQs"]
[Tue May 19 03:15:56.462807 2026] [:error] [pid 36493:tid 36552] [client 20.226.60.108:34592] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/as/chosen.php"] [unique_id "agtlbAynkzQB5nM668ruRQAAAQM"]
[Tue May 19 03:15:57.122140 2026] [:error] [pid 36491:tid 36504] [client 20.226.60.108:38699] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agtlbU555B9CZb6D60kS2AAAAUk"]
[Tue May 19 03:15:57.780640 2026] [:error] [pid 44046:tid 44055] [client 20.226.60.108:57273] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agtlbYYF4k2jfXJBXk0X9wAAAYc"]
[Tue May 19 03:15:58.460761 2026] [:error] [pid 36491:tid 36518] [client 20.226.60.108:44171] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agtlbk555B9CZb6D60kS2gAAAVc"]
[Tue May 19 03:15:59.164490 2026] [:error] [pid 36492:tid 36542] [client 20.226.60.108:20421] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agtlb2CVlogrkn9m2w43UwAAABQ"]
[Tue May 19 03:15:59.817659 2026] [:error] [pid 36492:tid 36526] [client 20.226.60.108:9947] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file/chosen.php"] [unique_id "agtlb2CVlogrkn9m2w43VQAAAAQ"]
[Tue May 19 03:16:00.462944 2026] [:error] [pid 36493:tid 36565] [client 20.226.60.108:9938] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file/chosen.php"] [unique_id "agtlcAynkzQB5nM668ruSwAAARA"]
[Tue May 19 03:16:01.149906 2026] [:error] [pid 44046:tid 44072] [client 20.226.60.108:32492] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file/chosen.php"] [unique_id "agtlcYYF4k2jfXJBXk0X_gAAAZg"]
[Tue May 19 03:16:01.850843 2026] [:error] [pid 43916:tid 43948] [client 20.226.60.108:38053] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file/chosen.php"] [unique_id "agtlcdQC236p33zJJvnj2AAAAJg"]
[Tue May 19 03:16:02.500469 2026] [:error] [pid 44087:tid 44103] [client 20.226.60.108:38033] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "agtlcm5HPHbH9GK7l6wWjAAAAc4"]
[Tue May 19 03:16:03.193504 2026] [:error] [pid 44087:tid 44097] [client 20.226.60.108:25219] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "agtlc25HPHbH9GK7l6wWjQAAAcg"]
[Tue May 19 03:16:04.007303 2026] [:error] [pid 36493:tid 36568] [client 20.226.60.108:38068] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "agtldAynkzQB5nM668ruTgAAARM"]
[Tue May 19 03:16:04.655481 2026] [:error] [pid 44046:tid 44060] [client 20.226.60.108:57234] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen/chosen.php"] [unique_id "agtldIYF4k2jfXJBXk0YBgAAAYw"]
[Tue May 19 03:16:05.316648 2026] [:error] [pid 44010:tid 44020] [client 20.226.60.108:34567] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "agtldTcFUuogD3-74-aTEQAAAMg"]
[Tue May 19 03:16:05.969519 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:9932] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "agtldU555B9CZb6D60kS3gAAAVM"]
[Tue May 19 03:16:06.636697 2026] [:error] [pid 44087:tid 44105] [client 20.226.60.108:38676] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "agtldm5HPHbH9GK7l6wWjgAAAdA"]
[Tue May 19 03:16:07.330497 2026] [:error] [pid 36579:tid 36587] [client 20.226.60.108:52402] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/css/chosen.php"] [unique_id "agtld1-aoZxBfgL5vDzARAAAAEU"]
[Tue May 19 03:16:07.967782 2026] [:error] [pid 36492:tid 36537] [client 20.226.60.108:9950] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agtld2CVlogrkn9m2w43XAAAAA8"]
[Tue May 19 03:16:08.630829 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:32494] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agtleE555B9CZb6D60kS5gAAAUg"]
[Tue May 19 03:16:09.260809 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:56684] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agtleU555B9CZb6D60kS5wAAAVY"]
[Tue May 19 03:16:09.889145 2026] [:error] [pid 44046:tid 44067] [client 20.226.60.108:25235] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agtleYYF4k2jfXJBXk0YDwAAAZM"]
[Tue May 19 03:16:10.526536 2026] [:error] [pid 44046:tid 44053] [client 20.226.60.108:33978] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "agtleoYF4k2jfXJBXk0YEAAAAYU"]
[Tue May 19 03:16:11.176939 2026] [:error] [pid 36493:tid 36552] [client 20.226.60.108:34591] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "agtlewynkzQB5nM668ruUwAAAQM"]
[Tue May 19 03:16:11.802280 2026] [:error] [pid 44087:tid 44098] [client 20.226.60.108:28503] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "agtle25HPHbH9GK7l6wWjwAAAck"]
[Tue May 19 03:16:12.471569 2026] [:error] [pid 43916:tid 43935] [client 20.226.60.108:28532] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/style.php"] [unique_id "agtlfNQC236p33zJJvnj3wAAAIs"]
[Tue May 19 03:16:13.135249 2026] [:error] [pid 44010:tid 44013] [client 20.226.60.108:25223] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agtlfTcFUuogD3-74-aTEgAAAME"]
[Tue May 19 03:16:13.829853 2026] [:error] [pid 36492:tid 36535] [client 20.226.60.108:48842] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agtlfWCVlogrkn9m2w43XQAAAA0"]
[Tue May 19 03:16:14.457537 2026] [:error] [pid 36492:tid 36538] [client 20.226.60.108:9998] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agtlfmCVlogrkn9m2w43XgAAABA"]
[Tue May 19 03:16:15.083648 2026] [:error] [pid 43916:tid 43925] [client 20.226.60.108:52396] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin.php"] [unique_id "agtlf9QC236p33zJJvnj4AAAAIE"]
[Tue May 19 03:16:15.717974 2026] [:error] [pid 44087:tid 44104] [client 20.226.60.108:48889] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agtlf25HPHbH9GK7l6wWkAAAAc8"]
[Tue May 19 03:16:16.551595 2026] [:error] [pid 44046:tid 44057] [client 20.226.60.108:57217] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agtlgIYF4k2jfXJBXk0YGAAAAYk"]
[Tue May 19 03:16:17.215576 2026] [:error] [pid 36493:tid 36551] [client 20.226.60.108:33981] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agtlgQynkzQB5nM668ruVQAAAQI"]
[Tue May 19 03:16:17.838640 2026] [:error] [pid 44046:tid 44051] [client 20.226.60.108:44175] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agtlgYYF4k2jfXJBXk0YGwAAAYM"]
[Tue May 19 03:16:18.484784 2026] [:error] [pid 44046:tid 44062] [client 20.226.60.108:20605] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "agtlgoYF4k2jfXJBXk0YHgAAAY4"]
[Tue May 19 03:16:19.119228 2026] [:error] [pid 36491:tid 36511] [client 20.226.60.108:20545] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "agtlg0555B9CZb6D60kS8gAAAVA"]
[Tue May 19 03:16:19.749866 2026] [:error] [pid 36579:tid 36597] [client 20.226.60.108:32468] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "agtlg1-aoZxBfgL5vDzARgAAAE8"]
[Tue May 19 03:16:20.377250 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:44172] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "agtlhF-aoZxBfgL5vDzASAAAAEA"]
[Tue May 19 03:16:21.085470 2026] [:error] [pid 36493:tid 36563] [client 20.226.60.108:38040] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agtlhQynkzQB5nM668ruVwAAAQ4"]
[Tue May 19 03:16:21.780376 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:20460] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agtlhU555B9CZb6D60kS9AAAAUo"]
[Tue May 19 03:16:22.530460 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:20603] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agtlhk555B9CZb6D60kS9gAAAUQ"]
[Tue May 19 03:16:23.305632 2026] [:error] [pid 43916:tid 43946] [client 20.226.60.108:33972] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wk/index.php"] [unique_id "agtlh9QC236p33zJJvnj5AAAAJY"]
[Tue May 19 03:16:24.001714 2026] [:error] [pid 36579:tid 36595] [client 20.226.60.108:32460] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agtliF-aoZxBfgL5vDzATQAAAE0"]
[Tue May 19 03:16:24.811741 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:33953] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agtliE555B9CZb6D60kS-wAAAVY"]
[Tue May 19 03:16:25.490332 2026] [:error] [pid 36491:tid 36507] [client 20.226.60.108:38026] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agtliU555B9CZb6D60kS_QAAAUw"]
[Tue May 19 03:16:26.274797 2026] [:error] [pid 36493:tid 36569] [client 20.226.60.108:38049] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "agtligynkzQB5nM668ruWAAAARQ"]
[Tue May 19 03:16:26.903101 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:38673] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agtlik555B9CZb6D60kS_wAAAU0"]
[Tue May 19 03:16:27.527642 2026] [:error] [pid 44010:tid 44026] [client 20.226.60.108:20597] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agtlizcFUuogD3-74-aTFAAAAM4"]
[Tue May 19 03:16:28.263465 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:9990] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agtljGCVlogrkn9m2w43YQAAAAk"]
[Tue May 19 03:16:28.912889 2026] [:error] [pid 36493:tid 36553] [client 20.226.60.108:38659] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1.php"] [unique_id "agtljAynkzQB5nM668ruWQAAAQQ"]
[Tue May 19 03:16:29.594186 2026] [:error] [pid 36493:tid 36564] [client 20.226.60.108:10018] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agtljQynkzQB5nM668ruWwAAAQ8"]
[Tue May 19 03:16:30.294776 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:20606] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agtljk555B9CZb6D60kTAQAAAUU"]
[Tue May 19 03:16:31.043625 2026] [:error] [pid 36491:tid 36496] [client 20.226.60.108:20563] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agtlj0555B9CZb6D60kTAgAAAUE"]
[Tue May 19 03:16:31.706124 2026] [:error] [pid 44087:tid 44092] [client 20.226.60.108:44210] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alfa.php"] [unique_id "agtlj25HPHbH9GK7l6wWlQAAAcM"]
[Tue May 19 03:16:32.334625 2026] [:error] [pid 36492:tid 36530] [client 20.226.60.108:25272] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agtlkGCVlogrkn9m2w43aAAAAAg"]
[Tue May 19 03:16:32.972188 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:52404] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agtlkE555B9CZb6D60kTAwAAAVQ"]
[Tue May 19 03:16:33.601740 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:57272] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agtlkU555B9CZb6D60kTBQAAAVM"]
[Tue May 19 03:16:34.228828 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:20461] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agtlkk555B9CZb6D60kTBgAAAUs"]
[Tue May 19 03:16:34.881659 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:20562] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "agtlkk555B9CZb6D60kTCAAAAUI"]
[Tue May 19 03:16:35.586846 2026] [:error] [pid 36492:tid 36543] [client 20.226.60.108:52410] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "agtlk2CVlogrkn9m2w43agAAABU"]
[Tue May 19 03:16:36.217301 2026] [:error] [pid 36493:tid 36570] [client 20.226.60.108:33926] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "agtllAynkzQB5nM668ruXwAAARU"]
[Tue May 19 03:16:36.842435 2026] [:error] [pid 36493:tid 36572] [client 20.226.60.108:60009] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "agtllAynkzQB5nM668ruYAAAARc"]
[Tue May 19 03:16:37.502910 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:57231] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agtllU555B9CZb6D60kTCwAAAVg"]
[Tue May 19 03:16:38.230861 2026] [:error] [pid 36493:tid 36558] [client 20.226.60.108:44186] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agtllgynkzQB5nM668ruYgAAAQk"]
[Tue May 19 03:16:38.947200 2026] [:error] [pid 43916:tid 43937] [client 20.226.60.108:56694] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agtlltQC236p33zJJvnj6QAAAI0"]
[Tue May 19 03:16:39.581914 2026] [:error] [pid 36493:tid 36550] [client 20.226.60.108:52361] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agtllwynkzQB5nM668ruZgAAAQE"]
[Tue May 19 03:16:40.278306 2026] [:error] [pid 36492:tid 36533] [client 20.226.60.108:25245] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agtlmGCVlogrkn9m2w43bAAAAAs"]
[Tue May 19 03:16:40.932558 2026] [:error] [pid 36492:tid 36544] [client 20.226.60.108:44205] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agtlmGCVlogrkn9m2w43bgAAABY"]
[Tue May 19 03:16:41.592782 2026] [:error] [pid 36579:tid 36588] [client 20.226.60.108:38665] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agtlmV-aoZxBfgL5vDzAVgAAAEY"]
[Tue May 19 03:16:42.298860 2026] [:error] [pid 36579:tid 36597] [client 20.226.60.108:9994] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agtlml-aoZxBfgL5vDzAWAAAAE8"]
[Tue May 19 03:16:42.998335 2026] [:error] [pid 36492:tid 36538] [client 20.226.60.108:48848] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "agtlmmCVlogrkn9m2w43cAAAABA"]
[Tue May 19 03:16:43.639140 2026] [:error] [pid 36491:tid 36509] [client 20.226.60.108:9923] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "agtlm0555B9CZb6D60kTDgAAAU4"]
[Tue May 19 03:16:44.298972 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:38076] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "agtlnE555B9CZb6D60kTEAAAAVY"]
[Tue May 19 03:16:44.939534 2026] [:error] [pid 44010:tid 44014] [client 20.226.60.108:44164] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/"] [unique_id "agtlnDcFUuogD3-74-aTFgAAAMI"]
[Tue May 19 03:16:45.610815 2026] [:error] [pid 44087:tid 44093] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/ws54.php
[Tue May 19 03:16:45.923926 2026] [:error] [pid 44087:tid 44111] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/deepseek_d.php
[Tue May 19 03:16:46.242666 2026] [:error] [pid 44087:tid 44109] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Tue May 19 03:16:46.554293 2026] [:error] [pid 44087:tid 44102] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Tue May 19 03:16:46.865528 2026] [:error] [pid 44087:tid 44113] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue May 19 03:16:47.181334 2026] [:error] [pid 44087:tid 44106] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Tue May 19 03:16:47.496315 2026] [:error] [pid 44087:tid 44103] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/96i.php
[Tue May 19 03:16:47.808348 2026] [:error] [pid 44087:tid 44097] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue May 19 03:16:48.119506 2026] [:error] [pid 44087:tid 44104] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Tue May 19 03:16:48.743663 2026] [:error] [pid 44087:tid 44114] [client 20.226.60.108:38697] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue May 19 03:16:49.077555 2026] [:error] [pid 44087:tid 44110] [client 20.226.60.108:38697] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "agtloW5HPHbH9GK7l6wWpgAAAdU"]
[Tue May 19 03:16:49.709875 2026] [:error] [pid 36492:tid 36523] [client 20.226.60.108:25411] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "agtloWCVlogrkn9m2w43cQAAAAE"]
[Tue May 19 03:16:50.343187 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:33960] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "agtlok555B9CZb6D60kTEwAAAUA"]
[Tue May 19 03:16:50.977937 2026] [:error] [pid 43916:tid 43936] [client 20.226.60.108:52391] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "agtlotQC236p33zJJvnj6wAAAIw"]
[Tue May 19 03:16:51.625406 2026] [:error] [pid 36493:tid 36573] [client 20.226.60.108:44185] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agtlowynkzQB5nM668rucAAAARg"]
[Tue May 19 03:16:52.283226 2026] [:error] [pid 44087:tid 44108] [client 20.226.60.108:33948] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agtlpG5HPHbH9GK7l6wWpwAAAdM"]
[Tue May 19 03:16:52.904995 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:25262] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agtlpE555B9CZb6D60kTFwAAAVM"]
[Tue May 19 03:16:53.546697 2026] [:error] [pid 36579:tid 36586] [client 20.226.60.108:28530] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/info.php"] [unique_id "agtlpV-aoZxBfgL5vDzAZwAAAEQ"]
[Tue May 19 03:16:54.204464 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:25255] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agtlpk555B9CZb6D60kTGQAAAUs"]
[Tue May 19 03:16:54.891675 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:28488] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agtlpk555B9CZb6D60kTGwAAAUI"]
[Tue May 19 03:16:55.562808 2026] [:error] [pid 44087:tid 44107] [client 20.226.60.108:28514] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agtlp25HPHbH9GK7l6wWqAAAAdI"]
[Tue May 19 03:16:56.228975 2026] [:error] [pid 36491:tid 36504] [client 20.226.60.108:52384] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a.php"] [unique_id "agtlqE555B9CZb6D60kTHwAAAUk"]
[Tue May 19 03:16:56.869895 2026] [:error] [pid 36491:tid 36498] [client 20.226.60.108:33957] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agtlqE555B9CZb6D60kTIQAAAUM"]
[Tue May 19 03:16:57.525368 2026] [:error] [pid 44087:tid 44090] [client 20.226.60.108:44162] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agtlqW5HPHbH9GK7l6wWqgAAAcE"]
[Tue May 19 03:16:58.156606 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:28525] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agtlqk555B9CZb6D60kTIgAAAUA"]
[Tue May 19 03:16:58.807125 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:32450] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "agtlqmCVlogrkn9m2w43cwAAAAk"]
[Tue May 19 03:16:59.443866 2026] [:error] [pid 36492:tid 36526] [client 20.226.60.108:9995] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "agtlq2CVlogrkn9m2w43dQAAAAQ"]
[Tue May 19 03:17:00.170719 2026] [:error] [pid 36493:tid 36567] [client 20.226.60.108:32454] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "agtlrAynkzQB5nM668rudwAAARI"]
[Tue May 19 03:17:00.809512 2026] [:error] [pid 36579:tid 36593] [client 20.226.60.108:38660] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "agtlrF-aoZxBfgL5vDzAagAAAEs"]
[Tue May 19 03:17:01.545933 2026] [:error] [pid 44046:tid 44049] [client 20.226.60.108:28489] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/index.php"] [unique_id "agtlrYYF4k2jfXJBXk0YUAAAAYE"]
[Tue May 19 03:17:02.224706 2026] [:error] [pid 44010:tid 44034] [client 20.226.60.108:34565] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/controller/extension/"] [unique_id "agtlrjcFUuogD3-74-aTFwAAANY"]
[Tue May 19 03:17:02.976366 2026] [:error] [pid 44010:tid 44024] [client 20.226.60.108:48868] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/controller/extension/"] [unique_id "agtlrjcFUuogD3-74-aTGQAAAMw"]
[Tue May 19 03:17:03.747459 2026] [:error] [pid 44010:tid 44027] [client 20.226.60.108:20558] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/controller/extension/"] [unique_id "agtlrzcFUuogD3-74-aTGgAAAM8"]
[Tue May 19 03:17:04.383637 2026] [:error] [pid 43916:tid 43925] [client 20.226.60.108:44215] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/controller/extension/"] [unique_id "agtlsNQC236p33zJJvnj8AAAAIE"]
[Tue May 19 03:17:05.017006 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:9927] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wap.php"] [unique_id "agtlsU555B9CZb6D60kTJgAAAU0"]
[Tue May 19 03:17:05.641336 2026] [:error] [pid 44087:tid 44111] [client 20.226.60.108:48891] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wap.php"] [unique_id "agtlsW5HPHbH9GK7l6wWqwAAAdY"]
[Tue May 19 03:17:06.306687 2026] [:error] [pid 43916:tid 43947] [client 20.226.60.108:38028] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wap.php"] [unique_id "agtlstQC236p33zJJvnj8QAAAJc"]
[Tue May 19 03:17:06.961448 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:38036] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wap.php"] [unique_id "agtlsl-aoZxBfgL5vDzAbgAAAEA"]
[Tue May 19 03:17:07.585093 2026] [:error] [pid 36493:tid 36557] [client 20.226.60.108:25266] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp.php"] [unique_id "agtlswynkzQB5nM668ruewAAAQg"]
[Tue May 19 03:17:08.216317 2026] [:error] [pid 36492:tid 36532] [client 20.226.60.108:57962] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp.php"] [unique_id "agtltGCVlogrkn9m2w43eQAAAAo"]
[Tue May 19 03:17:08.885381 2026] [:error] [pid 36492:tid 36530] [client 20.226.60.108:32508] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp.php"] [unique_id "agtltGCVlogrkn9m2w43ewAAAAg"]
[Tue May 19 03:17:09.508733 2026] [:error] [pid 44046:tid 44067] [client 20.226.60.108:44166] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp.php"] [unique_id "agtltYYF4k2jfXJBXk0YVwAAAZM"]
[Tue May 19 03:17:10.179059 2026] [:error] [pid 44046:tid 44054] [client 20.226.60.108:32505] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "agtltoYF4k2jfXJBXk0YWQAAAYY"]
[Tue May 19 03:17:10.848441 2026] [:error] [pid 44046:tid 44048] [client 20.226.60.108:9971] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "agtltoYF4k2jfXJBXk0YWwAAAYA"]
[Tue May 19 03:17:11.476532 2026] [:error] [pid 44087:tid 44091] [client 20.226.60.108:48885] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "agtlt25HPHbH9GK7l6wWrgAAAcI"]
[Tue May 19 03:17:12.171947 2026] [:error] [pid 36493:tid 36550] [client 20.226.60.108:38029] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "agtluAynkzQB5nM668ruggAAAQE"]
[Tue May 19 03:17:12.835269 2026] [:error] [pid 36492:tid 36543] [client 20.226.60.108:28536] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agtluGCVlogrkn9m2w43fAAAABU"]
[Tue May 19 03:17:13.534596 2026] [:error] [pid 36492:tid 36533] [client 20.226.60.108:57923] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agtluWCVlogrkn9m2w43fwAAAAs"]
[Tue May 19 03:17:14.217608 2026] [:error] [pid 44087:tid 44100] [client 20.226.60.108:44183] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agtlum5HPHbH9GK7l6wWsQAAAcs"]
[Tue May 19 03:17:14.856624 2026] [:error] [pid 44087:tid 44105] [client 20.226.60.108:57938] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bolt.php"] [unique_id "agtlum5HPHbH9GK7l6wWsgAAAdA"]
[Tue May 19 03:17:15.487431 2026] [:error] [pid 36492:tid 36537] [client 20.226.60.108:56677] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agtlu2CVlogrkn9m2w43gQAAAA8"]
[Tue May 19 03:17:16.196178 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:57958] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agtlvE555B9CZb6D60kTKQAAAUI"]
[Tue May 19 03:17:16.816080 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:52394] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agtlvE555B9CZb6D60kTLAAAAUo"]
[Tue May 19 03:17:17.473359 2026] [:error] [pid 44087:tid 44094] [client 20.226.60.108:41943] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bthil.php"] [unique_id "agtlvW5HPHbH9GK7l6wWtAAAAcU"]
[Tue May 19 03:17:18.101900 2026] [:error] [pid 36493:tid 36567] [client 20.226.60.108:25460] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "agtlvgynkzQB5nM668ruiQAAARI"]
[Tue May 19 03:17:18.737828 2026] [:error] [pid 36492:tid 36546] [client 20.226.60.108:57244] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "agtlvmCVlogrkn9m2w43hgAAABg"]
[Tue May 19 03:17:19.404652 2026] [:error] [pid 36579:tid 36585] [client 20.226.60.108:38031] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "agtlv1-aoZxBfgL5vDzAcAAAAEM"]
[Tue May 19 03:17:20.028889 2026] [:error] [pid 36579:tid 36594] [client 20.226.60.108:32459] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cgi-bin/"] [unique_id "agtlwF-aoZxBfgL5vDzAcgAAAEw"]
[Tue May 19 03:17:20.701374 2026] [:error] [pid 36492:tid 36529] [client 20.226.60.108:38047] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "agtlwGCVlogrkn9m2w43iAAAAAc"]
[Tue May 19 03:17:21.443639 2026] [:error] [pid 36579:tid 36603] [client 20.226.60.108:9930] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "agtlwV-aoZxBfgL5vDzAdAAAAFU"]
[Tue May 19 03:17:22.081267 2026] [:error] [pid 36493:tid 36573] [client 20.226.60.108:38062] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "agtlwgynkzQB5nM668rujAAAARg"]
[Tue May 19 03:17:22.710926 2026] [:error] [pid 36492:tid 36527] [client 20.226.60.108:20435] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x.php"] [unique_id "agtlwmCVlogrkn9m2w43jQAAAAU"]
[Tue May 19 03:17:23.344430 2026] [:error] [pid 36492:tid 36534] [client 20.226.60.108:9937] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agtlw2CVlogrkn9m2w43jwAAAAw"]
[Tue May 19 03:17:23.970247 2026] [:error] [pid 36492:tid 36525] [client 20.226.60.108:44213] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agtlw2CVlogrkn9m2w43kwAAAAM"]
[Tue May 19 03:17:24.609576 2026] [:error] [pid 36492:tid 36540] [client 20.226.60.108:28484] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agtlxGCVlogrkn9m2w43mAAAABI"]
[Tue May 19 03:17:25.247017 2026] [:error] [pid 36492:tid 36529] [client 20.226.60.108:20417] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/index/function.php"] [unique_id "agtlxWCVlogrkn9m2w43mwAAAAc"]
[Tue May 19 03:17:25.957170 2026] [:error] [pid 44046:tid 44066] [client 20.226.60.108:44177] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agtlxYYF4k2jfXJBXk0YZwAAAZI"]
[Tue May 19 03:17:26.580171 2026] [:error] [pid 36492:tid 36528] [client 20.226.60.108:57235] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agtlxmCVlogrkn9m2w43ngAAAAY"]
[Tue May 19 03:17:27.225518 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:20588] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agtlx2CVlogrkn9m2w43ogAAAAA"]
[Tue May 19 03:17:27.880105 2026] [:error] [pid 44010:tid 44030] [client 20.226.60.108:44284] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "agtlxzcFUuogD3-74-aTIgAAANI"]
[Tue May 19 03:17:28.536177 2026] [:error] [pid 36491:tid 36518] [client 20.226.60.108:57261] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "agtlyE555B9CZb6D60kTMQAAAVc"]
[Tue May 19 03:17:29.181692 2026] [:error] [pid 36491:tid 36507] [client 20.226.60.108:52366] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "agtlyU555B9CZb6D60kTMwAAAUw"]
[Tue May 19 03:17:29.814182 2026] [:error] [pid 44010:tid 44035] [client 20.226.60.108:38067] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "agtlyTcFUuogD3-74-aTIwAAANc"]
[Tue May 19 03:17:30.494556 2026] [:error] [pid 36492:tid 36533] [client 20.226.60.108:9939] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abcd.php"] [unique_id "agtlymCVlogrkn9m2w43pQAAAAs"]
[Tue May 19 03:17:31.201007 2026] [:error] [pid 36493:tid 36559] [client 20.226.60.108:20419] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agtlywynkzQB5nM668rujQAAAQo"]
[Tue May 19 03:17:32.015002 2026] [:error] [pid 44046:tid 44054] [client 20.226.60.108:34573] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agtlzIYF4k2jfXJBXk0YbAAAAYY"]
[Tue May 19 03:17:32.692302 2026] [:error] [pid 44046:tid 44060] [client 20.226.60.108:44193] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agtlzIYF4k2jfXJBXk0YbQAAAYw"]
[Tue May 19 03:17:33.358545 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:57972] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agtlzU555B9CZb6D60kTQAAAAVY"]
[Tue May 19 03:17:33.997317 2026] [:error] [pid 36493:tid 36572] [client 20.226.60.108:59368] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "agtlzQynkzQB5nM668rujwAAARc"]
[Tue May 19 03:17:34.636082 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:37440] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "agtlzk555B9CZb6D60kTRAAAAUU"]
[Tue May 19 03:17:35.263888 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:25244] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "agtlz0555B9CZb6D60kTRwAAAUI"]
[Tue May 19 03:17:35.888686 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:9969] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "agtlz0555B9CZb6D60kTSQAAAUs"]
[Tue May 19 03:17:36.611473 2026] [:error] [pid 44087:tid 44110] [client 20.226.60.108:34619] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "agtl0G5HPHbH9GK7l6wWtgAAAdU"]
[Tue May 19 03:17:37.248653 2026] [:error] [pid 36491:tid 36502] [client 20.226.60.108:9948] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "agtl0U555B9CZb6D60kTSwAAAUc"]
[Tue May 19 03:17:38.003687 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:59334] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "agtl0k555B9CZb6D60kTTwAAAUA"]
[Tue May 19 03:17:38.751121 2026] [:error] [pid 36579:tid 36592] [client 20.226.60.108:38704] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "agtl0l-aoZxBfgL5vDzAeAAAAEo"]
[Tue May 19 03:17:39.405723 2026] [:error] [pid 36493:tid 36551] [client 20.226.60.108:28499] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "agtl0wynkzQB5nM668rukQAAAQI"]
[Tue May 19 03:17:40.039772 2026] [:error] [pid 44087:tid 44098] [client 20.226.60.108:57940] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "agtl1G5HPHbH9GK7l6wWtwAAAck"]
[Tue May 19 03:17:40.699154 2026] [:error] [pid 36579:tid 36605] [client 20.226.60.108:48878] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "agtl1F-aoZxBfgL5vDzAeQAAAFc"]
[Tue May 19 03:17:41.356437 2026] [:error] [pid 43916:tid 43925] [client 20.226.60.108:57216] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "agtl1dQC236p33zJJvnkAwAAAIE"]
[Tue May 19 03:17:42.043272 2026] [:error] [pid 36579:tid 36584] [client 20.226.60.108:57978] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agtl1l-aoZxBfgL5vDzAegAAAEI"]
[Tue May 19 03:17:42.660521 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:32467] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agtl1k555B9CZb6D60kTcAAAAVg"]
[Tue May 19 03:17:43.354556 2026] [:error] [pid 36579:tid 36604] [client 20.226.60.108:34622] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agtl11-aoZxBfgL5vDzAfAAAAFY"]
[Tue May 19 03:17:43.988082 2026] [:error] [pid 36492:tid 36527] [client 20.226.60.108:48855] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/"] [unique_id "agtl12CVlogrkn9m2w43rgAAAAU"]
[Tue May 19 03:17:44.621901 2026] [:error] [pid 36579:tid 36587] [client 20.226.60.108:32461] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "agtl2F-aoZxBfgL5vDzAfwAAAEU"]
[Tue May 19 03:17:45.261490 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:20429] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agtl2WCVlogrkn9m2w43rwAAAAA"]
[Tue May 19 03:17:45.888380 2026] [:error] [pid 36492:tid 36530] [client 20.226.60.108:14223] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agtl2WCVlogrkn9m2w43sQAAAAg"]
[Tue May 19 03:17:46.723932 2026] [:error] [pid 36492:tid 36524] [client 20.226.60.108:14208] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agtl2mCVlogrkn9m2w43sgAAAAI"]
[Tue May 19 03:17:47.458727 2026] [:error] [pid 36579:tid 36598] [client 20.226.60.108:44206] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "agtl21-aoZxBfgL5vDzAgwAAAFA"]
[Tue May 19 03:17:48.094383 2026] [:error] [pid 36492:tid 36532] [client 20.226.60.108:56649] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Tue May 19 03:17:48.417448 2026] [:error] [pid 36492:tid 36535] [client 20.226.60.108:56649] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Tue May 19 03:17:48.728944 2026] [:error] [pid 36492:tid 36537] [client 20.226.60.108:56649] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "agtl3GCVlogrkn9m2w43tgAAAA8"]
[Tue May 19 03:17:49.373825 2026] [:error] [pid 36493:tid 36571] [client 20.226.60.108:59333] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue May 19 03:17:50.315850 2026] [:error] [pid 36493:tid 36564] [client 20.226.60.108:59333] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Tue May 19 03:17:50.656964 2026] [:error] [pid 36493:tid 36565] [client 20.226.60.108:59333] File does not exist: /usr/local/apache/htdocs/suspended-page/atex1.php
[Tue May 19 03:17:50.968587 2026] [:error] [pid 36493:tid 36563] [client 20.226.60.108:59333] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Tue May 19 03:17:51.280091 2026] [:error] [pid 36493:tid 36557] [client 20.226.60.108:59333] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Tue May 19 03:17:51.590429 2026] [:error] [pid 36493:tid 36558] [client 20.226.60.108:59333] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue May 19 03:17:51.904592 2026] [:error] [pid 36493:tid 36570] [client 20.226.60.108:59333] File does not exist: /usr/local/apache/htdocs/suspended-page/sagax1.php
[Tue May 19 03:17:52.229719 2026] [:error] [pid 36493:tid 36573] [client 20.226.60.108:59333] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "agtl4AynkzQB5nM668ruogAAARg"]
[Tue May 19 03:17:52.884108 2026] [:error] [pid 36492:tid 36546] [client 20.226.60.108:20368] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "agtl4GCVlogrkn9m2w43uAAAABg"]
[Tue May 19 03:17:53.531932 2026] [:error] [pid 36492:tid 36543] [client 20.226.60.108:48847] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "agtl4WCVlogrkn9m2w43uQAAABU"]
[Tue May 19 03:17:54.156201 2026] [:error] [pid 36491:tid 36504] [client 20.226.60.108:57226] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wpc.php"] [unique_id "agtl4k555B9CZb6D60kTigAAAUk"]
[Tue May 19 03:17:54.864121 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:53720] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agtl4k555B9CZb6D60kTiwAAAU8"]
[Tue May 19 03:17:55.503304 2026] [:error] [pid 36492:tid 36529] [client 20.226.60.108:55032] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agtl42CVlogrkn9m2w43uwAAAAc"]
[Tue May 19 03:17:56.272394 2026] [:error] [pid 44046:tid 44052] [client 20.226.60.108:57983] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agtl5IYF4k2jfXJBXk0YfwAAAYQ"]
[Tue May 19 03:17:57.070623 2026] [:error] [pid 36493:tid 36559] [client 20.226.60.108:44265] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "agtl5QynkzQB5nM668ruowAAAQo"]
[Tue May 19 03:17:57.813163 2026] [:error] [pid 36579:tid 36584] [client 20.226.60.108:40669] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ncx.php"] [unique_id "agtl5V-aoZxBfgL5vDzAigAAAEI"]
[Tue May 19 03:17:58.508371 2026] [:error] [pid 43916:tid 43942] [client 20.226.60.108:14240] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ncx.php"] [unique_id "agtl5tQC236p33zJJvnkCQAAAJI"]
[Tue May 19 03:17:59.232681 2026] [:error] [pid 36579:tid 36606] [client 20.226.60.108:25227] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ncx.php"] [unique_id "agtl51-aoZxBfgL5vDzAiwAAAFg"]
[Tue May 19 03:17:59.894119 2026] [:error] [pid 44046:tid 44067] [client 20.226.60.108:24120] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ncx.php"] [unique_id "agtl54YF4k2jfXJBXk0YggAAAZM"]
[Tue May 19 03:18:00.795432 2026] [:error] [pid 36493:tid 36560] [client 20.226.60.108:20522] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agtl6AynkzQB5nM668rupQAAAQs"]
[Tue May 19 03:18:01.721074 2026] [:error] [pid 36493:tid 36568] [client 20.226.60.108:40677] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agtl6QynkzQB5nM668rupgAAARM"]
[Tue May 19 03:18:02.465982 2026] [:error] [pid 36492:tid 36536] [client 20.226.60.108:56638] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agtl6mCVlogrkn9m2w43vAAAAA4"]
[Tue May 19 03:18:03.318085 2026] [:error] [pid 36493:tid 36550] [client 20.226.60.108:35004] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "agtl6wynkzQB5nM668rupwAAAQE"]
[Tue May 19 03:18:03.959715 2026] [:error] [pid 36492:tid 36528] [client 20.226.60.108:38754] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "agtl62CVlogrkn9m2w43vgAAAAY"]
[Tue May 19 03:18:04.676227 2026] [:error] [pid 44087:tid 44089] [client 20.226.60.108:49474] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "agtl7G5HPHbH9GK7l6wWwAAAAcA"]
[Tue May 19 03:18:05.386973 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:40691] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "agtl7U555B9CZb6D60kTjwAAAUU"]
[Tue May 19 03:18:06.019910 2026] [:error] [pid 36579:tid 36602] [client 20.226.60.108:38735] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wso.php"] [unique_id "agtl7l-aoZxBfgL5vDzAkAAAAFQ"]
[Tue May 19 03:18:06.714087 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:17636] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zup.php73"] [unique_id "agtl7k555B9CZb6D60kTkAAAAUY"]
[Tue May 19 03:18:07.360931 2026] [:error] [pid 44087:tid 44095] [client 20.226.60.108:9846] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zup.php73"] [unique_id "agtl725HPHbH9GK7l6wWwQAAAcY"]
[Tue May 19 03:18:08.013580 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:9801] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zup.php73"] [unique_id "agtl8E555B9CZb6D60kTkQAAAUI"]
[Tue May 19 03:18:08.664914 2026] [:error] [pid 36491:tid 36496] [client 20.226.60.108:23561] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zup.php73"] [unique_id "agtl8E555B9CZb6D60kTkwAAAUE"]
[Tue May 19 03:18:09.337302 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:16503] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agtl8V-aoZxBfgL5vDzAkgAAAEA"]
[Tue May 19 03:18:10.151736 2026] [:error] [pid 36493:tid 36569] [client 20.226.60.108:35770] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agtl8gynkzQB5nM668ruqgAAARQ"]
[Tue May 19 03:18:10.814931 2026] [:error] [pid 43916:tid 43930] [client 20.226.60.108:9706] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agtl8tQC236p33zJJvnkCgAAAIY"]
[Tue May 19 03:18:11.457855 2026] [:error] [pid 43916:tid 43924] [client 20.226.60.108:10407] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/k.php"] [unique_id "agtl89QC236p33zJJvnkCwAAAIA"]
[Tue May 19 03:18:12.352001 2026] [:error] [pid 36579:tid 36594] [client 20.226.60.108:10368] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blink.php"] [unique_id "agtl9F-aoZxBfgL5vDzAlQAAAEw"]
[Tue May 19 03:18:13.008862 2026] [:error] [pid 36491:tid 36516] [client 20.226.60.108:61850] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blink.php"] [unique_id "agtl9U555B9CZb6D60kTlQAAAVU"]
[Tue May 19 03:18:20.068404 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:64251] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blink.php"] [unique_id "agtl_E555B9CZb6D60kTmAAAAVg"]
[Tue May 19 03:18:20.700512 2026] [:error] [pid 43916:tid 43937] [client 20.226.60.108:46268] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blink.php"] [unique_id "agtl_NQC236p33zJJvnkDAAAAI0"]
[Tue May 19 03:18:21.336864 2026] [:error] [pid 36579:tid 36587] [client 20.226.60.108:64206] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "agtl_V-aoZxBfgL5vDzAoQAAAEU"]
[Tue May 19 03:18:22.019248 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:34592] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "agtl_k555B9CZb6D60kTmQAAAUs"]
[Tue May 19 03:18:22.959968 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:34680] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "agtl_k555B9CZb6D60kTmwAAAU8"]
[Tue May 19 03:18:23.655277 2026] [:error] [pid 36579:tid 36593] [client 20.226.60.108:64237] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "agtl_1-aoZxBfgL5vDzApQAAAEs"]
[Tue May 19 03:18:24.424066 2026] [:error] [pid 36579:tid 36597] [client 20.226.60.108:10423] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "agtmAF-aoZxBfgL5vDzAqAAAAE8"]
[Tue May 19 03:18:25.099627 2026] [:error] [pid 36579:tid 36590] [client 20.226.60.108:53113] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "agtmAV-aoZxBfgL5vDzAqQAAAEg"]
[Tue May 19 03:18:25.733993 2026] [:error] [pid 36493:tid 36563] [client 20.226.60.108:33306] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "agtmAQynkzQB5nM668rurQAAAQ4"]
[Tue May 19 03:18:26.378441 2026] [:error] [pid 36492:tid 36534] [client 20.226.60.108:44884] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "agtmAmCVlogrkn9m2w43vwAAAAw"]
[Tue May 19 03:18:27.223498 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:34675] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "agtmA0555B9CZb6D60kTngAAAUY"]
[Tue May 19 03:18:27.875657 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:65185] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "agtmA0555B9CZb6D60kToAAAAUI"]
[Tue May 19 03:18:28.504128 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:10273] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "agtmBE555B9CZb6D60kToQAAAVM"]
[Tue May 19 03:18:29.180951 2026] [:error] [pid 36491:tid 36507] [client 20.226.60.108:36740] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/"] [unique_id "agtmBU555B9CZb6D60kTogAAAUw"]
[Tue May 19 03:18:29.802979 2026] [:error] [pid 36493:tid 36557] [client 20.226.60.108:32795] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "agtmBQynkzQB5nM668rusAAAAQg"]
[Tue May 19 03:18:30.452769 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:65158] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "agtmBk555B9CZb6D60kTpAAAAVQ"]
[Tue May 19 03:18:31.121138 2026] [:error] [pid 36493:tid 36570] [client 20.226.60.108:23060] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "agtmBwynkzQB5nM668rusQAAARU"]
[Tue May 19 03:18:31.885395 2026] [:error] [pid 36579:tid 36585] [client 20.226.60.108:39786] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww5.php"] [unique_id "agtmB1-aoZxBfgL5vDzArQAAAEM"]
[Tue May 19 03:18:32.829166 2026] [:error] [pid 43916:tid 43928] [client 20.226.60.108:23079] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agtmCNQC236p33zJJvnkDgAAAIQ"]
[Tue May 19 03:18:33.801003 2026] [:error] [pid 36493:tid 36560] [client 20.226.60.108:35831] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agtmCQynkzQB5nM668rutQAAAQs"]
[Tue May 19 03:18:34.685698 2026] [:error] [pid 44010:tid 44015] [client 20.226.60.108:63563] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agtmCjcFUuogD3-74-aTKQAAAMM"]
[Tue May 19 03:18:35.574714 2026] [:error] [pid 44010:tid 44024] [client 20.226.60.108:61188] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2.php"] [unique_id "agtmCzcFUuogD3-74-aTKwAAAMw"]
[Tue May 19 03:18:36.307723 2026] [:error] [pid 44010:tid 44012] [client 20.226.60.108:32168] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "agtmDDcFUuogD3-74-aTLQAAAMA"]
[Tue May 19 03:18:37.122086 2026] [:error] [pid 44010:tid 44032] [client 20.226.60.108:50784] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "agtmDTcFUuogD3-74-aTLgAAANQ"]
[Tue May 19 03:18:37.989781 2026] [:error] [pid 36493:tid 36551] [client 20.226.60.108:63600] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "agtmDQynkzQB5nM668ruuAAAAQI"]
[Tue May 19 03:18:38.693378 2026] [:error] [pid 36491:tid 36502] [client 20.226.60.108:53050] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "agtmDk555B9CZb6D60kTpQAAAUc"]
[Tue May 19 03:18:39.455137 2026] [:error] [pid 44010:tid 44023] [client 20.226.60.108:51731] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "agtmDzcFUuogD3-74-aTMAAAAMs"]
[Tue May 19 03:18:40.154444 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:63224] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "agtmEE555B9CZb6D60kTpgAAAVg"]
[Tue May 19 03:18:40.874604 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:20759] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "agtmEE555B9CZb6D60kTpwAAAUg"]
[Tue May 19 03:18:41.759483 2026] [:error] [pid 44087:tid 44099] [client 20.226.60.108:41233] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "agtmEW5HPHbH9GK7l6wWxAAAAco"]
[Tue May 19 03:18:42.965174 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:53054] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agtmEk555B9CZb6D60kTqAAAAU8"]
[Tue May 19 03:18:44.846983 2026] [:error] [pid 43916:tid 43939] [client 20.226.60.108:57888] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agtmFNQC236p33zJJvnkEQAAAI8"]
[Tue May 19 03:18:46.340100 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:41224] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agtmFk555B9CZb6D60kTrQAAAVE"]
[Tue May 19 03:18:48.065782 2026] [:error] [pid 44087:tid 44111] [client 20.226.60.108:22606] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/p.php"] [unique_id "agtmGG5HPHbH9GK7l6wWxwAAAdY"]
[Tue May 19 03:18:48.755757 2026] [:error] [pid 36493:tid 36553] [client 20.226.60.108:64713] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "agtmGAynkzQB5nM668ruvgAAAQQ"]
[Tue May 19 03:18:49.496645 2026] [:error] [pid 36493:tid 36567] [client 20.226.60.108:9868] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "agtmGQynkzQB5nM668ruvwAAARI"]
[Tue May 19 03:18:50.265259 2026] [:error] [pid 36493:tid 36563] [client 20.226.60.108:38113] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/php.php"] [unique_id "agtmGgynkzQB5nM668ruwQAAAQ4"]
[Tue May 19 03:18:51.066312 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Tue May 19 03:18:51.421194 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Tue May 19 03:18:52.064508 2026] [:error] [pid 36491:tid 36509] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/zoom1.php
[Tue May 19 03:18:52.534379 2026] [:error] [pid 36491:tid 36518] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 19 03:18:52.903101 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Tue May 19 03:18:53.214893 2026] [:error] [pid 36491:tid 36498] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue May 19 03:18:53.526526 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Tue May 19 03:18:53.837694 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Tue May 19 03:18:54.190195 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Tue May 19 03:18:54.571113 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:50064] File does not exist: /usr/local/apache/htdocs/suspended-page/vc.php
[Tue May 19 03:18:55.025608 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:50064] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "agtmH0555B9CZb6D60kTwgAAAVQ"]
[Tue May 19 03:18:55.876044 2026] [:error] [pid 44087:tid 44106] [client 20.226.60.108:46911] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "agtmH25HPHbH9GK7l6wWygAAAdE"]
[Tue May 19 03:18:56.609894 2026] [:error] [pid 44046:tid 44056] [client 20.226.60.108:17139] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "agtmIIYF4k2jfXJBXk0YjgAAAYg"]
[Tue May 19 03:18:57.541308 2026] [:error] [pid 36579:tid 36588] [client 20.226.60.108:37387] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "agtmIV-aoZxBfgL5vDzAyQAAAEY"]
[Tue May 19 03:18:58.386170 2026] [:error] [pid 44087:tid 44100] [client 20.226.60.108:59311] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agtmIm5HPHbH9GK7l6wWzAAAAcs"]
[Tue May 19 03:18:59.461072 2026] [:error] [pid 44010:tid 44030] [client 20.226.60.108:25860] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agtmIzcFUuogD3-74-aTMgAAANI"]
[Tue May 19 03:19:00.505638 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:31551] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agtmJE555B9CZb6D60kTxAAAAUQ"]
[Tue May 19 03:19:01.261932 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:46886] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core.php"] [unique_id "agtmJU555B9CZb6D60kTxwAAAUs"]
[Tue May 19 03:19:02.357046 2026] [:error] [pid 44046:tid 44048] [client 20.226.60.108:37396] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agtmJoYF4k2jfXJBXk0YkQAAAYA"]
[Tue May 19 03:19:03.459911 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:25877] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agtmJ0555B9CZb6D60kTywAAAUg"]
[Tue May 19 03:19:04.329701 2026] [:error] [pid 36492:tid 36532] [client 20.226.60.108:10578] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agtmKGCVlogrkn9m2w43wgAAAAo"]
[Tue May 19 03:19:06.279473 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:62350] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/"] [unique_id "agtmKk555B9CZb6D60kTzAAAAVE"]
[Tue May 19 03:19:07.327843 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:24599] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtmK0555B9CZb6D60kTzgAAAUI"]
[Tue May 19 03:19:08.142180 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:32468] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtmLE555B9CZb6D60kTzwAAAVI"]
[Tue May 19 03:19:09.050283 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:22566] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtmLU555B9CZb6D60kT0AAAAVM"]
[Tue May 19 03:19:10.375083 2026] [:error] [pid 36493:tid 36563] [client 20.226.60.108:31523] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "agtmLgynkzQB5nM668ruygAAAQ4"]
[Tue May 19 03:19:11.322542 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:61899] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/min.php"] [unique_id "agtmL1-aoZxBfgL5vDzA4gAAAEA"]
[Tue May 19 03:19:13.245306 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:32847] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/min.php"] [unique_id "agtmMU555B9CZb6D60kT8QAAAUA"]
[Tue May 19 03:19:14.267232 2026] [:error] [pid 36579:tid 36602] [client 20.226.60.108:25861] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/min.php"] [unique_id "agtmMl-aoZxBfgL5vDzA6wAAAFQ"]
[Tue May 19 03:19:15.008138 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:23633] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/min.php"] [unique_id "agtmM2CVlogrkn9m2w43yAAAAAk"]
[Tue May 19 03:19:15.788221 2026] [:error] [pid 36492:tid 36526] [client 20.226.60.108:23651] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "agtmM2CVlogrkn9m2w43yQAAAAQ"]
[Tue May 19 03:19:16.643716 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:20823] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "agtmNE555B9CZb6D60kUDQAAAUI"]
[Tue May 19 03:19:17.296190 2026] [:error] [pid 36492:tid 36527] [client 20.226.60.108:39724] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "agtmNWCVlogrkn9m2w43ygAAAAU"]
[Tue May 19 03:19:17.966054 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:31538] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "agtmNWCVlogrkn9m2w43zQAAAAA"]
[Tue May 19 03:19:18.961410 2026] [:error] [pid 44087:tid 44090] [client 20.226.60.108:65274] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "agtmNm5HPHbH9GK7l6wW7AAAAcE"]
[Tue May 19 03:19:19.716538 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:65264] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "agtmN0555B9CZb6D60kUEwAAAUQ"]
[Tue May 19 03:19:20.482594 2026] [:error] [pid 44010:tid 44020] [client 20.226.60.108:28416] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "agtmODcFUuogD3-74-aTMwAAAMg"]
[Tue May 19 03:19:21.311882 2026] [:error] [pid 44010:tid 44019] [client 20.226.60.108:20842] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws37.php"] [unique_id "agtmOTcFUuogD3-74-aTNQAAAMc"]
[Tue May 19 03:19:22.017937 2026] [:error] [pid 36491:tid 36511] [client 20.226.60.108:39703] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "agtmOk555B9CZb6D60kUGAAAAVA"]
[Tue May 19 03:19:23.439288 2026] [:error] [pid 44046:tid 44064] [client 20.226.60.108:23655] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "agtmO4YF4k2jfXJBXk0YlwAAAZA"]
[Tue May 19 03:19:24.181158 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:39736] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "agtmPE555B9CZb6D60kUHAAAAVQ"]
[Tue May 19 03:19:24.937818 2026] [:error] [pid 36579:tid 36595] [client 20.226.60.108:57318] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/new.php"] [unique_id "agtmPF-aoZxBfgL5vDzA_AAAAE0"]
[Tue May 19 03:19:25.834989 2026] [:error] [pid 36493:tid 36555] [client 20.226.60.108:10608] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "agtmPQynkzQB5nM668ruzgAAAQY"]
[Tue May 19 03:19:26.526649 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:17071] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "agtmPk555B9CZb6D60kUHwAAAVM"]
[Tue May 19 03:19:27.254649 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:31542] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "agtmP0555B9CZb6D60kUIAAAAVE"]
[Tue May 19 03:19:28.206558 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:57287] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "agtmQE555B9CZb6D60kUIgAAAUQ"]
[Tue May 19 03:19:29.048585 2026] [:error] [pid 36491:tid 36518] [client 20.226.60.108:35314] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/il.php"] [unique_id "agtmQU555B9CZb6D60kUIwAAAVc"]
[Tue May 19 03:19:29.743160 2026] [:error] [pid 44010:tid 44019] [client 20.226.60.108:10125] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/il.php"] [unique_id "agtmQTcFUuogD3-74-aTPwAAAMc"]
[Tue May 19 03:19:30.714673 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:65235] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/il.php"] [unique_id "agtmQk555B9CZb6D60kUJAAAAUg"]
[Tue May 19 03:19:31.505457 2026] [:error] [pid 44087:tid 44103] [client 20.226.60.108:61915] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/il.php"] [unique_id "agtmQ25HPHbH9GK7l6wW8QAAAc4"]
[Tue May 19 03:19:32.230674 2026] [:error] [pid 44087:tid 44100] [client 20.226.60.108:17046] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "agtmRG5HPHbH9GK7l6wW8gAAAcs"]
[Tue May 19 03:19:32.963827 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:61903] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "agtmRE555B9CZb6D60kUJwAAAUs"]
[Tue May 19 03:19:33.665163 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:55427] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "agtmRWCVlogrkn9m2w432QAAAAA"]
[Tue May 19 03:19:34.463247 2026] [:error] [pid 36493:tid 36571] [client 20.226.60.108:39685] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lite.php"] [unique_id "agtmRgynkzQB5nM668ru1AAAARY"]
[Tue May 19 03:19:35.259035 2026] [:error] [pid 43916:tid 43931] [client 20.226.60.108:35305] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agtmR9QC236p33zJJvnkIgAAAIc"]
[Tue May 19 03:19:36.037455 2026] [:error] [pid 44010:tid 44022] [client 20.226.60.108:45844] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agtmSDcFUuogD3-74-aTQgAAAMo"]
[Tue May 19 03:19:36.748761 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:10273] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agtmSE555B9CZb6D60kUKwAAAUU"]
[Tue May 19 03:19:37.498652 2026] [:error] [pid 36493:tid 36561] [client 20.226.60.108:61924] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/load.php"] [unique_id "agtmSQynkzQB5nM668ru2QAAAQw"]
[Tue May 19 03:19:38.157831 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:23639] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "agtmSk555B9CZb6D60kULQAAAU0"]
[Tue May 19 03:19:38.840783 2026] [:error] [pid 36579:tid 36606] [client 20.226.60.108:45834] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "agtmSl-aoZxBfgL5vDzBDgAAAFg"]
[Tue May 19 03:19:39.500702 2026] [:error] [pid 36579:tid 36602] [client 20.226.60.108:20817] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "agtmS1-aoZxBfgL5vDzBDwAAAFQ"]
[Tue May 19 03:19:40.184341 2026] [:error] [pid 44087:tid 44095] [client 20.226.60.108:35293] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/"] [unique_id "agtmTG5HPHbH9GK7l6wW9AAAAcY"]
[Tue May 19 03:19:40.830115 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:26601] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "agtmTE555B9CZb6D60kULwAAAVg"]
[Tue May 19 03:19:41.556538 2026] [:error] [pid 36493:tid 36572] [client 20.226.60.108:45880] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "agtmTQynkzQB5nM668ru3QAAARc"]
[Tue May 19 03:19:42.332936 2026] [:error] [pid 36492:tid 36539] [client 20.226.60.108:39296] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "agtmTmCVlogrkn9m2w433wAAABE"]
[Tue May 19 03:19:42.953649 2026] [:error] [pid 36492:tid 36523] [client 20.226.60.108:22534] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-themes.php"] [unique_id "agtmTmCVlogrkn9m2w434QAAAAE"]
[Tue May 19 03:19:43.685802 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:47579] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "agtmT0555B9CZb6D60kUMQAAAUI"]
[Tue May 19 03:19:44.380873 2026] [:error] [pid 44046:tid 44071] [client 20.226.60.108:39743] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "agtmUIYF4k2jfXJBXk0YowAAAZc"]
[Tue May 19 03:19:45.145842 2026] [:error] [pid 44046:tid 44060] [client 20.226.60.108:26579] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "agtmUYYF4k2jfXJBXk0YpAAAAYw"]
[Tue May 19 03:19:45.842981 2026] [:error] [pid 44046:tid 44063] [client 20.226.60.108:65255] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xda.php"] [unique_id "agtmUYYF4k2jfXJBXk0YpgAAAY8"]
[Tue May 19 03:19:46.467783 2026] [:error] [pid 36491:tid 36498] [client 20.226.60.108:39693] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.trash7206/index.php"] [unique_id "agtmUk555B9CZb6D60kUNAAAAUM"]
[Tue May 19 03:19:47.148867 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:65270] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.trash7206/index.php"] [unique_id "agtmU0555B9CZb6D60kUNgAAAUs"]
[Tue May 19 03:19:47.785497 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:39340] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.trash7206/index.php"] [unique_id "agtmU0555B9CZb6D60kUOAAAAUA"]
[Tue May 19 03:19:48.406961 2026] [:error] [pid 36493:tid 36551] [client 20.226.60.108:26622] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.trash7206/index.php"] [unique_id "agtmVAynkzQB5nM668ru4QAAAQI"]
[Tue May 19 03:19:49.121935 2026] [:error] [pid 36492:tid 36536] [client 20.226.60.108:26608] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agtmVWCVlogrkn9m2w434wAAAA4"]
[Tue May 19 03:19:49.791494 2026] [:error] [pid 44087:tid 44089] [client 20.226.60.108:33360] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agtmVW5HPHbH9GK7l6wW9gAAAcA"]
[Tue May 19 03:19:50.448216 2026] [:error] [pid 44046:tid 44061] [client 20.226.60.108:35297] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agtmVoYF4k2jfXJBXk0YqQAAAY0"]
[Tue May 19 03:19:51.078107 2026] [:error] [pid 44046:tid 44062] [client 20.226.60.108:23653] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/doc.php"] [unique_id "agtmV4YF4k2jfXJBXk0YrAAAAY4"]
[Tue May 19 03:19:51.762073 2026] [:error] [pid 44046:tid 44055] [client 20.226.60.108:39691] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/index.php"] [unique_id "agtmV4YF4k2jfXJBXk0YrgAAAYc"]
[Tue May 19 03:19:52.441493 2026] [:error] [pid 36492:tid 36541] [client 20.226.60.108:65254] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/index.php"] [unique_id "agtmWGCVlogrkn9m2w435AAAABM"]
[Tue May 19 03:19:53.111903 2026] [:error] [pid 44010:tid 44036] [client 20.226.60.108:35276] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/index.php"] [unique_id "agtmWTcFUuogD3-74-aTRgAAANg"]
[Tue May 19 03:19:53.729496 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:33362] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/index.php"] [unique_id "agtmWU555B9CZb6D60kUQAAAAUQ"]
[Tue May 19 03:19:54.369966 2026] [:error] [pid 44046:tid 44056] [client 20.226.60.108:10604] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Tue May 19 03:19:54.722173 2026] [:error] [pid 44046:tid 44054] [client 20.226.60.108:10604] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "agtmWoYF4k2jfXJBXk0YsQAAAYY"]
[Tue May 19 03:19:55.670778 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:22549] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/min.php"] [unique_id "agtmW2CVlogrkn9m2w435wAAAAA"]
[Tue May 19 03:19:56.298715 2026] [:error] [pid 36579:tid 36603] [client 20.226.60.108:35318] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue May 19 03:19:56.631925 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:35318] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/filemanager.php"] [unique_id "agtmXF-aoZxBfgL5vDzBFwAAAEA"]
[Tue May 19 03:19:57.254868 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:61925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue May 19 03:19:57.910813 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:61925] [client 20.226.60.108] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.226.60.108, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "agtmXU555B9CZb6D60kUSwAAAUo"]
[Tue May 19 03:19:57.915685 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:61925] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 19 03:19:58.229240 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:61925] File does not exist: /usr/local/apache/htdocs/suspended-page/cd.php
[Tue May 19 03:19:58.541123 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:61925] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue May 19 03:19:58.883494 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:61925] File does not exist: /usr/local/apache/htdocs/suspended-page/lu4.php
[Tue May 19 03:19:59.813928 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:61925] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "agtmX0555B9CZb6D60kUUgAAAVg"]
[Tue May 19 03:20:00.452082 2026] [:error] [pid 36492:tid 36533] [client 20.226.60.108:50064] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "agtmYGCVlogrkn9m2w436gAAAAs"]
[Tue May 19 03:20:01.097129 2026] [:error] [pid 44087:tid 44098] [client 20.226.60.108:45829] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "agtmYW5HPHbH9GK7l6wW-AAAAck"]
[Tue May 19 03:20:01.738137 2026] [:error] [pid 36492:tid 36545] [client 20.226.60.108:17057] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "agtmYWCVlogrkn9m2w436wAAABc"]
[Tue May 19 03:20:02.411304 2026] [:error] [pid 36493:tid 36566] [client 20.226.60.108:38067] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "agtmYgynkzQB5nM668ru4wAAARE"]
[Tue May 19 03:20:03.049482 2026] [:error] [pid 36492:tid 36525] [client 20.226.60.108:17084] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "agtmY2CVlogrkn9m2w437AAAAAM"]
[Tue May 19 03:20:03.687971 2026] [:error] [pid 36492:tid 36539] [client 20.226.60.108:45873] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "agtmY2CVlogrkn9m2w437QAAABE"]
[Tue May 19 03:20:04.343624 2026] [:error] [pid 44087:tid 44092] [client 20.226.60.108:34573] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "agtmZG5HPHbH9GK7l6wW-QAAAcM"]
[Tue May 19 03:20:05.283787 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:25378] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "agtmZU555B9CZb6D60kUVgAAAUY"]
[Tue May 19 03:20:05.911867 2026] [:error] [pid 44010:tid 44035] [client 20.226.60.108:65279] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "agtmZTcFUuogD3-74-aTTgAAANc"]
[Tue May 19 03:20:06.538133 2026] [:error] [pid 36493:tid 36567] [client 20.226.60.108:27817] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "agtmZgynkzQB5nM668ru5AAAARI"]
[Tue May 19 03:20:07.199142 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:45859] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ant.php"] [unique_id "agtmZ0555B9CZb6D60kUWAAAAVI"]
[Tue May 19 03:20:07.837985 2026] [:error] [pid 36493:tid 36565] [client 20.226.60.108:39333] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "agtmZwynkzQB5nM668ru5QAAARA"]
[Tue May 19 03:20:08.471579 2026] [:error] [pid 44087:tid 44108] [client 20.226.60.108:47594] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "agtmaG5HPHbH9GK7l6wW-gAAAdM"]
[Tue May 19 03:20:09.158882 2026] [:error] [pid 36579:tid 36594] [client 20.226.60.108:22560] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "agtmaV-aoZxBfgL5vDzBGAAAAEw"]
[Tue May 19 03:20:09.787177 2026] [:error] [pid 44010:tid 44029] [client 20.226.60.108:45849] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap.php"] [unique_id "agtmaTcFUuogD3-74-aTTwAAANE"]
[Tue May 19 03:20:10.553994 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:25370] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/rip.php"] [unique_id "agtmak555B9CZb6D60kUWwAAAUA"]
[Tue May 19 03:20:11.254710 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:22568] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/rip.php"] [unique_id "agtma0555B9CZb6D60kUXQAAAUo"]
[Tue May 19 03:20:11.897420 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:26567] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/rip.php"] [unique_id "agtma0555B9CZb6D60kUXgAAAUg"]
[Tue May 19 03:20:12.527944 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:10582] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/storage/rip.php"] [unique_id "agtmbE555B9CZb6D60kUYAAAAUU"]
[Tue May 19 03:20:13.156461 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:61917] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tinyfilemanager.php"] [unique_id "agtmbU555B9CZb6D60kUYQAAAU0"]
[Tue May 19 03:20:13.787485 2026] [:error] [pid 44010:tid 44022] [client 20.226.60.108:39705] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/"] [unique_id "agtmbTcFUuogD3-74-aTUwAAAMo"]
[Tue May 19 03:20:14.408600 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:47610] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/"] [unique_id "agtmbk555B9CZb6D60kUYwAAAVE"]
[Tue May 19 03:20:15.116609 2026] [:error] [pid 44046:tid 44048] [client 20.226.60.108:25912] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/"] [unique_id "agtmb4YF4k2jfXJBXk0YsgAAAYA"]
[Tue May 19 03:20:15.840954 2026] [:error] [pid 44046:tid 44058] [client 20.226.60.108:25864] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/bk/"] [unique_id "agtmb4YF4k2jfXJBXk0YswAAAYo"]
[Tue May 19 03:20:16.497974 2026] [:error] [pid 36491:tid 36507] [client 20.226.60.108:10142] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "agtmcE555B9CZb6D60kUZQAAAUw"]
[Tue May 19 03:20:17.290119 2026] [:error] [pid 36491:tid 36509] [client 20.226.60.108:62382] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "agtmcU555B9CZb6D60kUaAAAAU4"]
[Tue May 19 03:20:17.910175 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:47592] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "agtmcU555B9CZb6D60kUaQAAAUY"]
[Tue May 19 03:20:18.579261 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:10163] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/403.php"] [unique_id "agtmck555B9CZb6D60kUagAAAUI"]
[Tue May 19 03:20:19.207175 2026] [:error] [pid 36491:tid 36504] [client 20.226.60.108:32861] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agtmc0555B9CZb6D60kUbAAAAUk"]
[Tue May 19 03:20:19.872036 2026] [:error] [pid 36491:tid 36506] [client 20.226.60.108:55486] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agtmc0555B9CZb6D60kUbQAAAUs"]
[Tue May 19 03:20:21.550559 2026] [:error] [pid 44010:tid 44015] [client 20.226.60.108:62447] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agtmdTcFUuogD3-74-aTVQAAAMM"]
[Tue May 19 03:20:22.316077 2026] [:error] [pid 36492:tid 36538] [client 20.226.60.108:34014] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "agtmdmCVlogrkn9m2w438QAAABA"]
[Tue May 19 03:20:22.997923 2026] [:error] [pid 36491:tid 36496] [client 20.226.60.108:32835] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agtmdk555B9CZb6D60kUbwAAAUE"]
[Tue May 19 03:20:23.627341 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:50104] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agtmd0555B9CZb6D60kUcQAAAUo"]
[Tue May 19 03:20:24.257100 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:51789] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agtmeE555B9CZb6D60kUcgAAAVY"]
[Tue May 19 03:20:24.917759 2026] [:error] [pid 44010:tid 44032] [client 20.226.60.108:63163] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agtmeDcFUuogD3-74-aTWAAAANQ"]
[Tue May 19 03:20:25.636182 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:64716] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "agtmeU555B9CZb6D60kUdAAAAU0"]
[Tue May 19 03:20:26.264739 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:64163] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "agtmek555B9CZb6D60kUdgAAAUQ"]
[Tue May 19 03:20:26.901428 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:50784] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "agtmek555B9CZb6D60kUdwAAAVE"]
[Tue May 19 03:20:27.527858 2026] [:error] [pid 44046:tid 44050] [client 20.226.60.108:22607] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/includes/"] [unique_id "agtme4YF4k2jfXJBXk0YtAAAAYI"]
[Tue May 19 03:20:28.154410 2026] [:error] [pid 36492:tid 36536] [client 20.226.60.108:57896] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "agtmfGCVlogrkn9m2w438wAAAA4"]
[Tue May 19 03:20:28.836033 2026] [:error] [pid 44046:tid 44069] [client 20.226.60.108:57892] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "agtmfIYF4k2jfXJBXk0YtgAAAZU"]
[Tue May 19 03:20:29.508643 2026] [:error] [pid 36492:tid 36528] [client 20.226.60.108:22651] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "agtmfWCVlogrkn9m2w439AAAAAY"]
[Tue May 19 03:20:30.166429 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:32174] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/index.php"] [unique_id "agtmfmCVlogrkn9m2w439gAAAAA"]
[Tue May 19 03:20:30.787685 2026] [:error] [pid 44087:tid 44093] [client 20.226.60.108:32182] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "agtmfm5HPHbH9GK7l6wW_AAAAcQ"]
[Tue May 19 03:20:31.475415 2026] [:error] [pid 36491:tid 36498] [client 20.226.60.108:50071] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "agtmf0555B9CZb6D60kUewAAAUM"]
[Tue May 19 03:20:32.204159 2026] [:error] [pid 36579:tid 36595] [client 20.226.60.108:64128] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "agtmgF-aoZxBfgL5vDzBGwAAAE0"]
[Tue May 19 03:20:32.867372 2026] [:error] [pid 44046:tid 44064] [client 20.226.60.108:52999] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "agtmgIYF4k2jfXJBXk0YtwAAAZA"]
[Tue May 19 03:20:33.510538 2026] [:error] [pid 36492:tid 36533] [client 20.226.60.108:62430] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "agtmgWCVlogrkn9m2w43-gAAAAs"]
[Tue May 19 03:20:34.168107 2026] [:error] [pid 36491:tid 36496] [client 20.226.60.108:57903] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "agtmgk555B9CZb6D60kUgQAAAUE"]
[Tue May 19 03:20:34.852625 2026] [:error] [pid 36579:tid 36592] [client 20.226.60.108:38085] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "agtmgl-aoZxBfgL5vDzBHAAAAEo"]
[Tue May 19 03:20:35.476323 2026] [:error] [pid 36492:tid 36529] [client 20.226.60.108:64724] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "agtmg2CVlogrkn9m2w43_wAAAAc"]
[Tue May 19 03:20:36.122303 2026] [:error] [pid 36493:tid 36561] [client 20.226.60.108:50093] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "agtmhAynkzQB5nM668ru7wAAAQw"]
[Tue May 19 03:20:36.805034 2026] [:error] [pid 36493:tid 36566] [client 20.226.60.108:38116] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "agtmhAynkzQB5nM668ru8AAAARE"]
[Tue May 19 03:20:37.597925 2026] [:error] [pid 36579:tid 36593] [client 20.226.60.108:38096] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "agtmhV-aoZxBfgL5vDzBIAAAAEs"]
[Tue May 19 03:20:38.265396 2026] [:error] [pid 44046:tid 44065] [client 20.226.60.108:57911] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/"] [unique_id "agtmhoYF4k2jfXJBXk0YuAAAAZE"]
[Tue May 19 03:20:38.890129 2026] [:error] [pid 36493:tid 36567] [client 20.226.60.108:64738] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "agtmhgynkzQB5nM668ru8QAAARI"]
[Tue May 19 03:20:39.527948 2026] [:error] [pid 36493:tid 36565] [client 20.226.60.108:34024] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "agtmhwynkzQB5nM668ru8gAAARA"]
[Tue May 19 03:20:40.156872 2026] [:error] [pid 36493:tid 36570] [client 20.226.60.108:17148] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "agtmiAynkzQB5nM668ru8wAAARU"]
[Tue May 19 03:20:40.861576 2026] [:error] [pid 36579:tid 36589] [client 20.226.60.108:34032] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-trackback.php"] [unique_id "agtmiF-aoZxBfgL5vDzBIwAAAEc"]
[Tue May 19 03:20:41.566313 2026] [:error] [pid 36493:tid 36557] [client 20.226.60.108:53051] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "agtmiQynkzQB5nM668ru9QAAAQg"]
[Tue May 19 03:20:42.216135 2026] [:error] [pid 43916:tid 43927] [client 20.226.60.108:38135] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "agtmitQC236p33zJJvnkJQAAAIM"]
[Tue May 19 03:20:42.926919 2026] [:error] [pid 36492:tid 36532] [client 20.226.60.108:10138] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "agtmimCVlogrkn9m2w44BAAAAAo"]
[Tue May 19 03:20:43.563023 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:32186] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws.php"] [unique_id "agtmi1-aoZxBfgL5vDzBJQAAAEA"]
[Tue May 19 03:20:44.187927 2026] [:error] [pid 44046:tid 44062] [client 20.226.60.108:9903] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.bod/.ll/"] [unique_id "agtmjIYF4k2jfXJBXk0YugAAAY4"]
[Tue May 19 03:20:44.820806 2026] [:error] [pid 36579:tid 36584] [client 20.226.60.108:64166] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.bod/.ll/"] [unique_id "agtmjF-aoZxBfgL5vDzBKAAAAEI"]
[Tue May 19 03:20:45.617941 2026] [:error] [pid 36579:tid 36601] [client 20.226.60.108:63163] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.bod/.ll/"] [unique_id "agtmjV-aoZxBfgL5vDzBKgAAAFM"]
[Tue May 19 03:20:46.262543 2026] [:error] [pid 36579:tid 36595] [client 20.226.60.108:63132] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/.bod/.ll/"] [unique_id "agtmjl-aoZxBfgL5vDzBLAAAAE0"]
[Tue May 19 03:20:46.954943 2026] [:error] [pid 36491:tid 36516] [client 20.226.60.108:52993] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "agtmjk555B9CZb6D60kUjgAAAVU"]
[Tue May 19 03:20:47.592515 2026] [:error] [pid 44046:tid 44051] [client 20.226.60.108:51820] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "agtmj4YF4k2jfXJBXk0YuwAAAYM"]
[Tue May 19 03:20:48.228770 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:38080] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "agtmkE555B9CZb6D60kUkQAAAU0"]
[Tue May 19 03:20:48.872142 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:33987] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0.php"] [unique_id "agtmkE555B9CZb6D60kUkwAAAUA"]
[Tue May 19 03:20:49.510306 2026] [:error] [pid 36579:tid 36596] [client 20.226.60.108:9912] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "agtmkV-aoZxBfgL5vDzBMAAAAE4"]
[Tue May 19 03:20:50.236613 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:57904] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "agtmkk555B9CZb6D60kUlgAAAVQ"]
[Tue May 19 03:20:50.886035 2026] [:error] [pid 36579:tid 36589] [client 20.226.60.108:53018] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "agtmkl-aoZxBfgL5vDzBMQAAAEc"]
[Tue May 19 03:20:51.510205 2026] [:error] [pid 36491:tid 36518] [client 20.226.60.108:32189] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/1index.php"] [unique_id "agtmk0555B9CZb6D60kUmQAAAVc"]
[Tue May 19 03:20:52.138282 2026] [:error] [pid 36491:tid 36511] [client 20.226.60.108:57894] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "agtmlE555B9CZb6D60kUnAAAAVA"]
[Tue May 19 03:20:52.781126 2026] [:error] [pid 43916:tid 43928] [client 20.226.60.108:41265] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "agtmlNQC236p33zJJvnkKAAAAIQ"]
[Tue May 19 03:20:53.424646 2026] [:error] [pid 44010:tid 44021] [client 20.226.60.108:32130] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "agtmlTcFUuogD3-74-aTWwAAAMk"]
[Tue May 19 03:20:54.089962 2026] [:error] [pid 36579:tid 36585] [client 20.226.60.108:51839] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "agtmll-aoZxBfgL5vDzBNQAAAEM"]
[Tue May 19 03:20:54.730547 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:64767] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dvve.php"] [unique_id "agtmlk555B9CZb6D60kUngAAAU0"]
[Tue May 19 03:20:55.369111 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:57885] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dvve.php"] [unique_id "agtml0555B9CZb6D60kUoQAAAUA"]
[Tue May 19 03:20:56.003595 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:50084] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dvve.php"] [unique_id "agtmmE555B9CZb6D60kUowAAAUU"]
[Tue May 19 03:20:56.707754 2026] [:error] [pid 36492:tid 36538] [client 20.226.60.108:63144] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dvve.php"] [unique_id "agtmmGCVlogrkn9m2w44DQAAABA"]
[Tue May 19 03:20:57.502271 2026] [:error] [pid 36492:tid 36541] [client 20.226.60.108:53012] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "agtmmWCVlogrkn9m2w44DwAAABM"]
[Tue May 19 03:20:58.164302 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:53028] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "agtmmk555B9CZb6D60kUpgAAAVE"]
[Tue May 19 03:20:58.813434 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:41242] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "agtmmmCVlogrkn9m2w44EQAAAAA"]
[Tue May 19 03:20:59.785582 2026] [:error] [pid 36493:tid 36571] [client 20.226.60.108:9865] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Tue May 19 03:21:00.143473 2026] [:error] [pid 36493:tid 36559] [client 20.226.60.108:9865] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Tue May 19 03:21:01.411333 2026] [:error] [pid 36493:tid 36554] [client 20.226.60.108:9865] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue May 19 03:21:02.041709 2026] [:error] [pid 36493:tid 36563] [client 20.226.60.108:9865] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Tue May 19 03:21:02.380906 2026] [:error] [pid 36493:tid 36561] [client 20.226.60.108:9865] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Tue May 19 03:21:02.709912 2026] [:error] [pid 36493:tid 36566] [client 20.226.60.108:9865] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Tue May 19 03:21:03.022356 2026] [:error] [pid 36493:tid 36567] [client 20.226.60.108:9865] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca5.php"] [unique_id "agtmnwynkzQB5nM668rvBAAAARI"]
[Tue May 19 03:21:03.693009 2026] [:error] [pid 36492:tid 36539] [client 20.226.60.108:22596] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca5.php"] [unique_id "agtmn2CVlogrkn9m2w44FgAAABE"]
[Tue May 19 03:21:04.336923 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:32177] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca5.php"] [unique_id "agtmoE555B9CZb6D60kUrwAAAU0"]
[Tue May 19 03:21:05.026896 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:62431] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ca5.php"] [unique_id "agtmoU555B9CZb6D60kUsAAAAUA"]
[Tue May 19 03:21:05.663430 2026] [:error] [pid 36579:tid 36591] [client 20.226.60.108:64765] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agtmoV-aoZxBfgL5vDzBOQAAAEk"]
[Tue May 19 03:21:06.291981 2026] [:error] [pid 36492:tid 36526] [client 20.226.60.108:63154] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agtmomCVlogrkn9m2w44GgAAAAQ"]
[Tue May 19 03:21:06.932424 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:62432] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agtmok555B9CZb6D60kUtAAAAVE"]
[Tue May 19 03:21:07.605247 2026] [:error] [pid 44046:tid 44072] [client 20.226.60.108:33994] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agtmo4YF4k2jfXJBXk0YvAAAAZg"]
[Tue May 19 03:21:08.242934 2026] [:error] [pid 43916:tid 43941] [client 20.226.60.108:57896] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "agtmpNQC236p33zJJvnkLgAAAJE"]
[Tue May 19 03:21:08.866372 2026] [:error] [pid 36492:tid 36527] [client 20.226.60.108:51793] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "agtmpGCVlogrkn9m2w44GwAAAAU"]
[Tue May 19 03:21:09.603724 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:51837] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "agtmpU555B9CZb6D60kUuwAAAUI"]
[Tue May 19 03:21:10.239855 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:23633] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/radio.php"] [unique_id "agtmpk555B9CZb6D60kUvQAAAVI"]
[Tue May 19 03:21:10.969862 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:63118] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtmpk555B9CZb6D60kUwQAAAUo"]
[Tue May 19 03:21:11.644523 2026] [:error] [pid 36492:tid 36528] [client 20.226.60.108:32157] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtmp2CVlogrkn9m2w44HQAAAAY"]
[Tue May 19 03:21:12.279799 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:10172] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtmqE555B9CZb6D60kU2gAAAVQ"]
[Tue May 19 03:21:12.930714 2026] [:error] [pid 36492:tid 36532] [client 20.226.60.108:57859] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "agtmqGCVlogrkn9m2w44HwAAAAo"]
[Tue May 19 03:21:13.592923 2026] [:error] [pid 36579:tid 36588] [client 20.226.60.108:17105] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agtmqV-aoZxBfgL5vDzBPQAAAEY"]
[Tue May 19 03:21:14.296498 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:53010] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agtmqk555B9CZb6D60kU4AAAAVg"]
[Tue May 19 03:21:14.940595 2026] [:error] [pid 36579:tid 36583] [client 20.226.60.108:22608] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agtmql-aoZxBfgL5vDzBPgAAAEE"]
[Tue May 19 03:21:15.636449 2026] [:error] [pid 36491:tid 36516] [client 20.226.60.108:38142] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-signin.php"] [unique_id "agtmq0555B9CZb6D60kU4gAAAVU"]
[Tue May 19 03:21:16.277411 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:64751] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agtmrE555B9CZb6D60kU5QAAAUo"]
[Tue May 19 03:21:17.240673 2026] [:error] [pid 44046:tid 44070] [client 20.226.60.108:33984] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agtmrYYF4k2jfXJBXk0YvwAAAZY"]
[Tue May 19 03:21:17.886805 2026] [:error] [pid 44046:tid 44053] [client 20.226.60.108:41252] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agtmrYYF4k2jfXJBXk0YwAAAAYU"]
[Tue May 19 03:21:18.836781 2026] [:error] [pid 36491:tid 36518] [client 20.226.60.108:17101] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Ov-Simple1.php"] [unique_id "agtmrk555B9CZb6D60kU6QAAAVc"]
[Tue May 19 03:21:19.518065 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:57870] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/fm.php"] [unique_id "agtmr0555B9CZb6D60kU6wAAAVY"]
[Tue May 19 03:21:20.207869 2026] [:error] [pid 36492:tid 36544] [client 20.226.60.108:34006] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "agtmsGCVlogrkn9m2w44IQAAABY"]
[Tue May 19 03:21:20.906789 2026] [:error] [pid 36491:tid 36498] [client 20.226.60.108:62403] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "agtmsE555B9CZb6D60kU7QAAAUM"]
[Tue May 19 03:21:21.609207 2026] [:error] [pid 44087:tid 44098] [client 20.226.60.108:46851] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "agtmsW5HPHbH9GK7l6wXBgAAAck"]
[Tue May 19 03:21:22.335705 2026] [:error] [pid 36579:tid 36586] [client 20.226.60.108:64190] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ftde.php"] [unique_id "agtmsl-aoZxBfgL5vDzBQwAAAEQ"]
[Tue May 19 03:21:22.954597 2026] [:error] [pid 36492:tid 36535] [client 20.226.60.108:57890] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agtmsmCVlogrkn9m2w44IgAAAA0"]
[Tue May 19 03:21:23.599055 2026] [:error] [pid 44010:tid 44022] [client 20.226.60.108:46857] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agtmszcFUuogD3-74-aTYQAAAMo"]
[Tue May 19 03:21:24.350517 2026] [:error] [pid 36493:tid 36570] [client 20.226.60.108:51801] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agtmtAynkzQB5nM668rvBQAAARU"]
[Tue May 19 03:21:25.229928 2026] [:error] [pid 36492:tid 36543] [client 20.226.60.108:50069] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hplfuns.php"] [unique_id "agtmtWCVlogrkn9m2w44JAAAABU"]
[Tue May 19 03:21:25.868293 2026] [:error] [pid 36579:tid 36605] [client 20.226.60.108:62411] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "agtmtV-aoZxBfgL5vDzBSAAAAFc"]
[Tue May 19 03:21:26.542029 2026] [:error] [pid 36493:tid 36560] [client 20.226.60.108:9913] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "agtmtgynkzQB5nM668rvBgAAAQs"]
[Tue May 19 03:21:27.300508 2026] [:error] [pid 44087:tid 44102] [client 20.226.60.108:9888] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "agtmt25HPHbH9GK7l6wXCAAAAc0"]
[Tue May 19 03:21:28.115789 2026] [:error] [pid 36493:tid 36555] [client 20.226.60.108:63112] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/log.php"] [unique_id "agtmuAynkzQB5nM668rvCQAAAQY"]
[Tue May 19 03:21:28.795514 2026] [:error] [pid 44087:tid 44111] [client 20.226.60.108:32163] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agtmuG5HPHbH9GK7l6wXCwAAAdY"]
[Tue May 19 03:21:29.446154 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:41271] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agtmuWCVlogrkn9m2w44JwAAAAk"]
[Tue May 19 03:21:30.181694 2026] [:error] [pid 36492:tid 36536] [client 20.226.60.108:51797] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agtmumCVlogrkn9m2w44KwAAAA4"]
[Tue May 19 03:21:30.845196 2026] [:error] [pid 36492:tid 36525] [client 20.226.60.108:64155] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test.php"] [unique_id "agtmumCVlogrkn9m2w44LwAAAAM"]
[Tue May 19 03:21:31.542207 2026] [:error] [pid 44010:tid 44027] [client 20.226.60.108:64736] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "agtmuzcFUuogD3-74-aTZAAAAM8"]
[Tue May 19 03:21:32.238646 2026] [:error] [pid 44010:tid 44032] [client 20.226.60.108:57905] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "agtmvDcFUuogD3-74-aTZgAAANQ"]
[Tue May 19 03:21:32.886567 2026] [:error] [pid 43916:tid 43942] [client 20.226.60.108:41247] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "agtmvNQC236p33zJJvnkMQAAAJI"]
[Tue May 19 03:21:33.541055 2026] [:error] [pid 36493:tid 36562] [client 20.226.60.108:46880] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/txets.php"] [unique_id "agtmvQynkzQB5nM668rvDgAAAQ0"]
[Tue May 19 03:21:34.236141 2026] [:error] [pid 43916:tid 43924] [client 20.226.60.108:64169] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "agtmvtQC236p33zJJvnkMgAAAIA"]
[Tue May 19 03:21:34.904152 2026] [:error] [pid 43916:tid 43936] [client 20.226.60.108:38098] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "agtmvtQC236p33zJJvnkMwAAAIw"]
[Tue May 19 03:21:35.526774 2026] [:error] [pid 44087:tid 44091] [client 20.226.60.108:32164] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "agtmv25HPHbH9GK7l6wXDQAAAcI"]
[Tue May 19 03:21:36.179592 2026] [:error] [pid 36493:tid 36561] [client 20.226.60.108:9897] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin.php"] [unique_id "agtmwAynkzQB5nM668rvEAAAAQw"]
[Tue May 19 03:21:36.917488 2026] [:error] [pid 36493:tid 36566] [client 20.226.60.108:53048] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-config-sample.php"] [unique_id "agtmwAynkzQB5nM668rvEQAAARE"]
[Tue May 19 03:21:37.563379 2026] [:error] [pid 43916:tid 43938] [client 20.226.60.108:9918] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-config-sample.php"] [unique_id "agtmwdQC236p33zJJvnkNgAAAI4"]
[Tue May 19 03:21:38.211222 2026] [:error] [pid 36493:tid 36567] [client 20.226.60.108:17091] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-config-sample.php"] [unique_id "agtmwgynkzQB5nM668rvEgAAARI"]
[Tue May 19 03:21:39.093809 2026] [:error] [pid 44046:tid 44069] [client 20.226.60.108:38110] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-config-sample.php"] [unique_id "agtmw4YF4k2jfXJBXk0YxAAAAZU"]
[Tue May 19 03:21:39.723924 2026] [:error] [pid 44046:tid 44059] [client 20.226.60.108:64170] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "agtmw4YF4k2jfXJBXk0YxQAAAYs"]
[Tue May 19 03:21:40.500558 2026] [:error] [pid 36493:tid 36565] [client 20.226.60.108:22639] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "agtmxAynkzQB5nM668rvEwAAARA"]
[Tue May 19 03:21:41.135471 2026] [:error] [pid 44046:tid 44064] [client 20.226.60.108:53025] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "agtmxYYF4k2jfXJBXk0YxgAAAZA"]
[Tue May 19 03:21:41.771163 2026] [:error] [pid 36493:tid 36558] [client 20.226.60.108:53035] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/packed.php"] [unique_id "agtmxQynkzQB5nM668rvFQAAAQk"]
[Tue May 19 03:21:42.468901 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:63162] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "agtmxk555B9CZb6D60kU_AAAAU8"]
[Tue May 19 03:21:43.105435 2026] [:error] [pid 36579:tid 36605] [client 20.226.60.108:50062] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "agtmx1-aoZxBfgL5vDzBUQAAAFc"]
[Tue May 19 03:21:43.741743 2026] [:error] [pid 44010:tid 44019] [client 20.226.60.108:25889] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "agtmxzcFUuogD3-74-aTaQAAAMc"]
[Tue May 19 03:21:44.433485 2026] [:error] [pid 44046:tid 44061] [client 20.226.60.108:9883] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "agtmyIYF4k2jfXJBXk0YyAAAAY0"]
[Tue May 19 03:21:45.060151 2026] [:error] [pid 36492:tid 36538] [client 20.226.60.108:37439] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "agtmyWCVlogrkn9m2w44MQAAABA"]
[Tue May 19 03:21:45.692270 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:64723] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "agtmyWCVlogrkn9m2w44MgAAAAk"]
[Tue May 19 03:21:46.327099 2026] [:error] [pid 36491:tid 36515] [client 20.226.60.108:17110] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "agtmyk555B9CZb6D60kVAAAAAVQ"]
[Tue May 19 03:21:47.162624 2026] [:error] [pid 36492:tid 36524] [client 20.226.60.108:41279] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "agtmy2CVlogrkn9m2w44MwAAAAI"]
[Tue May 19 03:21:47.841063 2026] [:error] [pid 36492:tid 36526] [client 20.226.60.108:62343] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "agtmy2CVlogrkn9m2w44NQAAAAQ"]
[Tue May 19 03:21:48.472434 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:51806] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "agtmzE555B9CZb6D60kVAgAAAUg"]
[Tue May 19 03:21:49.118230 2026] [:error] [pid 44046:tid 44066] [client 20.226.60.108:32840] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "agtmzYYF4k2jfXJBXk0YygAAAZI"]
[Tue May 19 03:21:49.782923 2026] [:error] [pid 36579:tid 36602] [client 20.226.60.108:9909] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ahax.php"] [unique_id "agtmzV-aoZxBfgL5vDzBUgAAAFQ"]
[Tue May 19 03:21:50.521814 2026] [:error] [pid 36579:tid 36592] [client 20.226.60.108:17134] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/breads1.php"] [unique_id "agtmzl-aoZxBfgL5vDzBVAAAAEo"]
[Tue May 19 03:21:51.183618 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:34039] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/breads1.php"] [unique_id "agtmz0555B9CZb6D60kVBQAAAUQ"]
[Tue May 19 03:21:51.821063 2026] [:error] [pid 44010:tid 44026] [client 20.226.60.108:53020] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/breads1.php"] [unique_id "agtmzzcFUuogD3-74-aTawAAAM4"]
[Tue May 19 03:21:52.442604 2026] [:error] [pid 44087:tid 44095] [client 20.226.60.108:22586] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/breads1.php"] [unique_id "agtm0G5HPHbH9GK7l6wXEAAAAcY"]
[Tue May 19 03:21:53.104877 2026] [:error] [pid 36491:tid 36516] [client 20.226.60.108:46859] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/must.php"] [unique_id "agtm0U555B9CZb6D60kVDAAAAVU"]
[Tue May 19 03:21:53.744759 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:17149] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/must.php"] [unique_id "agtm0U555B9CZb6D60kVEAAAAU8"]
[Tue May 19 03:21:54.412433 2026] [:error] [pid 44010:tid 44033] [client 20.226.60.108:60579] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/must.php"] [unique_id "agtm0jcFUuogD3-74-aTbQAAANU"]
[Tue May 19 03:21:55.070835 2026] [:error] [pid 44087:tid 44105] [client 20.226.60.108:62402] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/must.php"] [unique_id "agtm025HPHbH9GK7l6wXEQAAAdA"]
[Tue May 19 03:21:55.694556 2026] [:error] [pid 36579:tid 36587] [client 20.226.60.108:22647] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "agtm01-aoZxBfgL5vDzBVgAAAEU"]
[Tue May 19 03:21:56.601203 2026] [:error] [pid 43916:tid 43946] [client 20.226.60.108:34002] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "agtm1NQC236p33zJJvnkOgAAAJY"]
[Tue May 19 03:21:57.338396 2026] [:error] [pid 44087:tid 44089] [client 20.226.60.108:33985] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "agtm1W5HPHbH9GK7l6wXEgAAAcA"]
[Tue May 19 03:21:58.064480 2026] [:error] [pid 44087:tid 44114] [client 20.226.60.108:64188] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/up.php"] [unique_id "agtm1m5HPHbH9GK7l6wXFAAAAdg"]
[Tue May 19 03:21:58.767597 2026] [:error] [pid 43916:tid 43936] [client 20.226.60.108:63161] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload.php"] [unique_id "agtm1tQC236p33zJJvnkPAAAAIw"]
[Tue May 19 03:21:59.529692 2026] [:error] [pid 36491:tid 36509] [client 20.226.60.108:10604] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload.php"] [unique_id "agtm10555B9CZb6D60kVHwAAAU4"]
[Tue May 19 03:22:00.187797 2026] [:error] [pid 36492:tid 36543] [client 20.226.60.108:64177] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload.php"] [unique_id "agtm2GCVlogrkn9m2w44OwAAABU"]
[Tue May 19 03:22:01.075057 2026] [:error] [pid 36493:tid 36569] [client 20.226.60.108:50094] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload.php"] [unique_id "agtm2QynkzQB5nM668rvGAAAARQ"]
[Tue May 19 03:22:01.713974 2026] [:error] [pid 36579:tid 36582] [client 20.226.60.108:64715] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "agtm2V-aoZxBfgL5vDzBWwAAAEA"]
[Tue May 19 03:22:03.398035 2026] [:error] [pid 43916:tid 43943] [client 20.226.60.108:57898] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Tue May 19 03:22:03.724258 2026] [:error] [pid 43916:tid 43929] [client 20.226.60.108:57898] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue May 19 03:22:04.451677 2026] [:error] [pid 43916:tid 43945] [client 20.226.60.108:57898] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue May 19 03:22:04.806616 2026] [:error] [pid 43916:tid 43933] [client 20.226.60.108:57898] File does not exist: /usr/local/apache/htdocs/suspended-page/asw.php
[Tue May 19 03:22:05.132081 2026] [:error] [pid 43916:tid 43932] [client 20.226.60.108:57898] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue May 19 03:22:05.466780 2026] [:error] [pid 43916:tid 43931] [client 20.226.60.108:57898] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Tue May 19 03:22:05.793109 2026] [:error] [pid 43916:tid 43941] [client 20.226.60.108:57898] File does not exist: /usr/local/apache/htdocs/suspended-page/mac.php
[Tue May 19 03:22:06.126188 2026] [:error] [pid 43916:tid 43944] [client 20.226.60.108:57898] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "agtm3tQC236p33zJJvnkSwAAAJQ"]
[Tue May 19 03:22:06.833933 2026] [:error] [pid 36491:tid 36498] [client 20.226.60.108:10137] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "agtm3k555B9CZb6D60kVJQAAAUM"]
[Tue May 19 03:22:07.499313 2026] [:error] [pid 36491:tid 36511] [client 20.226.60.108:63127] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "agtm30555B9CZb6D60kVKQAAAVA"]
[Tue May 19 03:22:08.135708 2026] [:error] [pid 36579:tid 36602] [client 20.226.60.108:50054] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system.php"] [unique_id "agtm4F-aoZxBfgL5vDzBXgAAAFQ"]
[Tue May 19 03:22:08.760556 2026] [:error] [pid 43916:tid 43927] [client 20.226.60.108:38138] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "agtm4NQC236p33zJJvnkTQAAAIM"]
[Tue May 19 03:22:09.527014 2026] [:error] [pid 43916:tid 43942] [client 20.226.60.108:51815] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "agtm4dQC236p33zJJvnkTgAAAJI"]
[Tue May 19 03:22:10.219918 2026] [:error] [pid 36493:tid 36571] [client 20.226.60.108:32148] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "agtm4gynkzQB5nM668rvGQAAARY"]
[Tue May 19 03:22:10.903586 2026] [:error] [pid 36579:tid 36592] [client 20.226.60.108:64764] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-access.php"] [unique_id "agtm4l-aoZxBfgL5vDzBXwAAAEo"]
[Tue May 19 03:22:11.595595 2026] [:error] [pid 36493:tid 36559] [client 20.226.60.108:62441] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agtm4wynkzQB5nM668rvGgAAAQo"]
[Tue May 19 03:22:12.371327 2026] [:error] [pid 36493:tid 36568] [client 20.226.60.108:60559] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agtm5AynkzQB5nM668rvGwAAARM"]
[Tue May 19 03:22:13.050962 2026] [:error] [pid 36579:tid 36591] [client 20.226.60.108:57868] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agtm5V-aoZxBfgL5vDzBYAAAAEk"]
[Tue May 19 03:22:13.689362 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:9859] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-load.php"] [unique_id "agtm5U555B9CZb6D60kVMwAAAUo"]
[Tue May 19 03:22:14.327861 2026] [:error] [pid 36491:tid 36514] [client 20.226.60.108:9907] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "agtm5k555B9CZb6D60kVNQAAAVM"]
[Tue May 19 03:22:15.119349 2026] [:error] [pid 36493:tid 36562] [client 20.226.60.108:55481] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "agtm5wynkzQB5nM668rvHAAAAQ0"]
[Tue May 19 03:22:15.742839 2026] [:error] [pid 44087:tid 44093] [client 20.226.60.108:37397] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "agtm525HPHbH9GK7l6wXGAAAAcQ"]
[Tue May 19 03:22:16.422482 2026] [:error] [pid 36493:tid 36554] [client 20.226.60.108:32141] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zafir1.php"] [unique_id "agtm6AynkzQB5nM668rvHQAAAQU"]
[Tue May 19 03:22:17.083273 2026] [:error] [pid 36493:tid 36551] [client 20.226.60.108:53040] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "agtm6QynkzQB5nM668rvHgAAAQI"]
[Tue May 19 03:22:18.721535 2026] [:error] [pid 36491:tid 36511] [client 20.226.60.108:51835] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "agtm6k555B9CZb6D60kVPAAAAVA"]
[Tue May 19 03:22:19.382671 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:55478] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "agtm60555B9CZb6D60kVPwAAAUU"]
[Tue May 19 03:22:20.005781 2026] [:error] [pid 36579:tid 36604] [client 20.226.60.108:9873] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "agtm7F-aoZxBfgL5vDzBYQAAAFY"]
[Tue May 19 03:22:20.648046 2026] [:error] [pid 44087:tid 44113] [client 20.226.60.108:38126] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c1.php"] [unique_id "agtm7G5HPHbH9GK7l6wXGgAAAdc"]
[Tue May 19 03:22:21.497407 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:64731] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c1.php"] [unique_id "agtm7U555B9CZb6D60kVQQAAAUY"]
[Tue May 19 03:22:22.262060 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:41269] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c1.php"] [unique_id "agtm7k555B9CZb6D60kVQgAAAUA"]
[Tue May 19 03:22:22.891281 2026] [:error] [pid 44087:tid 44103] [client 20.226.60.108:32165] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/c1.php"] [unique_id "agtm7m5HPHbH9GK7l6wXHgAAAc4"]
[Tue May 19 03:22:23.515142 2026] [:error] [pid 43916:tid 43924] [client 20.226.60.108:41260] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/root.php"] [unique_id "agtm79QC236p33zJJvnkUAAAAIA"]
[Tue May 19 03:22:24.171251 2026] [:error] [pid 43916:tid 43928] [client 20.226.60.108:62462] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/root.php"] [unique_id "agtm8NQC236p33zJJvnkUQAAAIQ"]
[Tue May 19 03:22:24.795206 2026] [:error] [pid 36493:tid 36549] [client 20.226.60.108:38088] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/root.php"] [unique_id "agtm8AynkzQB5nM668rvIwAAAQA"]
[Tue May 19 03:22:25.450337 2026] [:error] [pid 43916:tid 43929] [client 20.226.60.108:64741] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/root.php"] [unique_id "agtm8dQC236p33zJJvnkVgAAAIU"]
[Tue May 19 03:22:26.096431 2026] [:error] [pid 36579:tid 36587] [client 20.226.60.108:51778] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agtm8l-aoZxBfgL5vDzBZAAAAEU"]
[Tue May 19 03:22:26.762367 2026] [:error] [pid 44087:tid 44105] [client 20.226.60.108:32139] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agtm8m5HPHbH9GK7l6wXIAAAAdA"]
[Tue May 19 03:22:27.464497 2026] [:error] [pid 43916:tid 43939] [client 20.226.60.108:41251] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agtm89QC236p33zJJvnkWQAAAI8"]
[Tue May 19 03:22:28.201498 2026] [:error] [pid 36579:tid 36596] [client 20.226.60.108:57886] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shell.php"] [unique_id "agtm9F-aoZxBfgL5vDzBZQAAAE4"]
[Tue May 19 03:22:28.919209 2026] [:error] [pid 36493:tid 36566] [client 20.226.60.108:24606] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "agtm9AynkzQB5nM668rvJAAAARE"]
[Tue May 19 03:22:29.558051 2026] [:error] [pid 36579:tid 36583] [client 20.226.60.108:9915] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "agtm9V-aoZxBfgL5vDzBZgAAAEE"]
[Tue May 19 03:22:30.193496 2026] [:error] [pid 44010:tid 44036] [client 20.226.60.108:59314] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "agtm9jcFUuogD3-74-aTcQAAANg"]
[Tue May 19 03:22:30.838610 2026] [:error] [pid 36579:tid 36588] [client 20.226.60.108:17137] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "agtm9l-aoZxBfgL5vDzBZwAAAEY"]
[Tue May 19 03:22:31.506801 2026] [:error] [pid 44010:tid 44024] [client 20.226.60.108:58523] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agtm9zcFUuogD3-74-aTcgAAAMw"]
[Tue May 19 03:22:32.206491 2026] [:error] [pid 44010:tid 44032] [client 20.226.60.108:58518] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agtm-DcFUuogD3-74-aTcwAAANQ"]
[Tue May 19 03:22:32.833210 2026] [:error] [pid 43916:tid 43945] [client 20.226.60.108:53055] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agtm-NQC236p33zJJvnkWwAAAJU"]
[Tue May 19 03:22:33.557218 2026] [:error] [pid 36579:tid 36597] [client 20.226.60.108:57884] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-block.php"] [unique_id "agtm-V-aoZxBfgL5vDzBaQAAAE8"]
[Tue May 19 03:22:34.266149 2026] [:error] [pid 36492:tid 36545] [client 20.226.60.108:22605] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "agtm-mCVlogrkn9m2w44PAAAABc"]
[Tue May 19 03:22:34.932230 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:17126] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "agtm-k555B9CZb6D60kVSwAAAUg"]
[Tue May 19 03:22:35.568282 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:22652] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "agtm-0555B9CZb6D60kVTgAAAVE"]
[Tue May 19 03:22:36.207448 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:58547] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "agtm_E555B9CZb6D60kVUwAAAUU"]
[Tue May 19 03:22:36.910386 2026] [:error] [pid 36491:tid 36505] [client 20.226.60.108:53021] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-header-json.php"] [unique_id "agtm_E555B9CZb6D60kVXQAAAUo"]
[Tue May 19 03:22:37.699156 2026] [:error] [pid 36491:tid 36499] [client 20.226.60.108:53023] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-header-json.php"] [unique_id "agtm_U555B9CZb6D60kVZQAAAUQ"]
[Tue May 19 03:22:38.316511 2026] [:error] [pid 36579:tid 36594] [client 20.226.60.108:38094] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-header-json.php"] [unique_id "agtm_l-aoZxBfgL5vDzBbgAAAEw"]
[Tue May 19 03:22:38.941835 2026] [:error] [pid 44010:tid 44031] [client 20.226.60.108:57882] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-header-json.php"] [unique_id "agtm_jcFUuogD3-74-aTdgAAANM"]
[Tue May 19 03:22:39.596307 2026] [:error] [pid 44046:tid 44054] [client 20.226.60.108:9866] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/index.php"] [unique_id "agtm_4YF4k2jfXJBXk0Y4AAAAYY"]
[Tue May 19 03:22:40.304217 2026] [:error] [pid 44010:tid 44030] [client 20.226.60.108:32171] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zup.php"] [unique_id "agtnADcFUuogD3-74-aTeAAAANI"]
[Tue May 19 03:22:40.935180 2026] [:error] [pid 36491:tid 36511] [client 20.226.60.108:58535] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zup.php"] [unique_id "agtnAE555B9CZb6D60kVgwAAAVA"]
[Tue May 19 03:22:41.575728 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:61831] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zup.php"] [unique_id "agtnAU555B9CZb6D60kVjwAAAUI"]
[Tue May 19 03:22:42.277485 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:32135] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "agtnAmCVlogrkn9m2w44PwAAAAk"]
[Tue May 19 03:22:43.028736 2026] [:error] [pid 36492:tid 36524] [client 20.226.60.108:9874] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "agtnA2CVlogrkn9m2w44QQAAAAI"]
[Tue May 19 03:22:43.724033 2026] [:error] [pid 36492:tid 36526] [client 20.226.60.108:16438] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "agtnA2CVlogrkn9m2w44QwAAAAQ"]
[Tue May 19 03:22:44.368992 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:40649] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a9.php"] [unique_id "agtnBE555B9CZb6D60kVlgAAAVY"]
[Tue May 19 03:22:45.062831 2026] [:error] [pid 36491:tid 36495] [client 20.226.60.108:51803] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/index.php"] [unique_id "agtnBU555B9CZb6D60kVmAAAAUA"]
[Tue May 19 03:22:45.692945 2026] [:error] [pid 36491:tid 36509] [client 20.226.60.108:40666] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/index.php"] [unique_id "agtnBU555B9CZb6D60kVnAAAAU4"]
[Tue May 19 03:22:46.346092 2026] [:error] [pid 36491:tid 36516] [client 20.226.60.108:61834] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/index.php"] [unique_id "agtnBk555B9CZb6D60kVngAAAVU"]
[Tue May 19 03:22:47.004893 2026] [:error] [pid 36493:tid 36569] [client 20.226.60.108:60562] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/index.php"] [unique_id "agtnBwynkzQB5nM668rvKwAAARQ"]
[Tue May 19 03:22:47.702158 2026] [:error] [pid 36579:tid 36602] [client 20.226.60.108:20823] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "agtnB1-aoZxBfgL5vDzBcgAAAFQ"]
[Tue May 19 03:22:48.340920 2026] [:error] [pid 36492:tid 36534] [client 20.226.60.108:54298] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "agtnCGCVlogrkn9m2w44RwAAAAw"]
[Tue May 19 03:22:48.978363 2026] [:error] [pid 44087:tid 44110] [client 20.226.60.108:20509] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "agtnCG5HPHbH9GK7l6wXJAAAAdU"]
[Tue May 19 03:22:49.616740 2026] [:error] [pid 36579:tid 36591] [client 20.226.60.108:27204] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/content.php"] [unique_id "agtnCV-aoZxBfgL5vDzBdAAAAEk"]
[Tue May 19 03:22:50.240018 2026] [:error] [pid 36579:tid 36606] [client 20.226.60.108:17617] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "agtnCl-aoZxBfgL5vDzBdwAAAFg"]
[Tue May 19 03:22:50.976220 2026] [:error] [pid 44087:tid 44092] [client 20.226.60.108:20528] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "agtnCm5HPHbH9GK7l6wXJgAAAcM"]
[Tue May 19 03:22:51.612027 2026] [:error] [pid 36579:tid 36583] [client 20.226.60.108:16458] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "agtnC1-aoZxBfgL5vDzBeQAAAEE"]
[Tue May 19 03:22:52.251745 2026] [:error] [pid 36491:tid 36502] [client 20.226.60.108:53018] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gg.php"] [unique_id "agtnDE555B9CZb6D60kVpAAAAUc"]
[Tue May 19 03:22:52.974787 2026] [:error] [pid 44010:tid 44033] [client 20.226.60.108:20502] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "agtnDDcFUuogD3-74-aTgAAAANU"]
[Tue May 19 03:22:53.675734 2026] [:error] [pid 36579:tid 36594] [client 20.226.60.108:34972] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "agtnDV-aoZxBfgL5vDzBfQAAAEw"]
[Tue May 19 03:22:54.505813 2026] [:error] [pid 44046:tid 44057] [client 20.226.60.108:14247] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "agtnDoYF4k2jfXJBXk0Y5AAAAYk"]
[Tue May 19 03:22:55.167327 2026] [:error] [pid 36579:tid 36599] [client 20.226.60.108:17609] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/makeasmtp.php"] [unique_id "agtnD1-aoZxBfgL5vDzBfwAAAFE"]
[Tue May 19 03:22:55.884459 2026] [:error] [pid 36579:tid 36585] [client 20.226.60.108:15772] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/paku.php"] [unique_id "agtnD1-aoZxBfgL5vDzBgQAAAEM"]
[Tue May 19 03:22:56.657955 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:10181] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/paku.php"] [unique_id "agtnEE555B9CZb6D60kVqwAAAVg"]
[Tue May 19 03:22:57.299280 2026] [:error] [pid 44010:tid 44034] [client 20.226.60.108:34595] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/paku.php"] [unique_id "agtnETcFUuogD3-74-aTgwAAANY"]
[Tue May 19 03:22:57.947981 2026] [:error] [pid 36491:tid 36510] [client 20.226.60.108:15772] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/paku.php"] [unique_id "agtnEU555B9CZb6D60kVrQAAAU8"]
[Tue May 19 03:22:59.000075 2026] [:error] [pid 44010:tid 44024] [client 20.226.60.108:44251] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "agtnEjcFUuogD3-74-aThgAAAMw"]
[Tue May 19 03:22:59.785295 2026] [:error] [pid 36492:tid 36545] [client 20.226.60.108:56628] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "agtnE2CVlogrkn9m2w44UAAAABc"]
[Tue May 19 03:23:00.538521 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:59377] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "agtnFE555B9CZb6D60kVsQAAAUg"]
[Tue May 19 03:23:01.304880 2026] [:error] [pid 36493:tid 36562] [client 20.226.60.108:44257] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/rtx.php"] [unique_id "agtnFQynkzQB5nM668rvLQAAAQ0"]
[Tue May 19 03:23:01.973855 2026] [:error] [pid 44087:tid 44111] [client 20.226.60.108:32223] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/da222.php"] [unique_id "agtnFW5HPHbH9GK7l6wXJwAAAdY"]
[Tue May 19 03:23:02.698440 2026] [:error] [pid 36491:tid 36507] [client 20.226.60.108:59382] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/da222.php"] [unique_id "agtnFk555B9CZb6D60kVtwAAAUw"]
[Tue May 19 03:23:03.403859 2026] [:error] [pid 44046:tid 44068] [client 20.226.60.108:57930] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/da222.php"] [unique_id "agtnF4YF4k2jfXJBXk0Y5gAAAZQ"]
[Tue May 19 03:23:04.498935 2026] [:error] [pid 44010:tid 44017] [client 20.226.60.108:32222] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/update/da222.php"] [unique_id "agtnGDcFUuogD3-74-aTigAAAMU"]
[Tue May 19 03:23:06.996196 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:35244] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "agtnGk555B9CZb6D60kVvgAAAVg"]
[Tue May 19 03:23:07.633704 2026] [:error] [pid 36492:tid 36524] [client 20.226.60.108:10376] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Tue May 19 03:23:07.949288 2026] [:error] [pid 36492:tid 36540] [client 20.226.60.108:10376] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wordfence-waf.php
[Tue May 19 03:23:08.265987 2026] [:error] [pid 36492:tid 36527] [client 20.226.60.108:10376] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Tue May 19 03:23:08.591611 2026] [:error] [pid 36492:tid 36536] [client 20.226.60.108:10376] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Tue May 19 03:23:08.906206 2026] [:error] [pid 36492:tid 36542] [client 20.226.60.108:10376] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Tue May 19 03:23:09.223604 2026] [:error] [pid 36492:tid 36528] [client 20.226.60.108:10376] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Tue May 19 03:23:09.536025 2026] [:error] [pid 36492:tid 36534] [client 20.226.60.108:10376] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "agtnHWCVlogrkn9m2w44WwAAAAw"]
[Tue May 19 03:23:10.161509 2026] [:error] [pid 44010:tid 44013] [client 20.226.60.108:56659] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "agtnHjcFUuogD3-74-aTjQAAAME"]
[Tue May 19 03:23:10.836210 2026] [:error] [pid 44087:tid 44090] [client 20.226.60.108:35211] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "agtnHm5HPHbH9GK7l6wXKQAAAcE"]
[Tue May 19 03:23:11.552880 2026] [:error] [pid 44087:tid 44096] [client 20.226.60.108:31553] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/control.php"] [unique_id "agtnH25HPHbH9GK7l6wXKgAAAcc"]
[Tue May 19 03:23:12.207581 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:23232] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "agtnIE555B9CZb6D60kVvwAAAUI"]
[Tue May 19 03:23:12.846819 2026] [:error] [pid 44010:tid 44022] [client 20.226.60.108:29937] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "agtnIDcFUuogD3-74-aTkAAAAMo"]
[Tue May 19 03:23:13.537198 2026] [:error] [pid 36492:tid 36533] [client 20.226.60.108:32464] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "agtnIWCVlogrkn9m2w44XwAAAAs"]
[Tue May 19 03:23:14.394128 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:54916] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "agtnIk555B9CZb6D60kVwQAAAUg"]
[Tue May 19 03:23:15.035921 2026] [:error] [pid 44010:tid 44018] [client 20.226.60.108:58570] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agtnIzcFUuogD3-74-aTkwAAAMY"]
[Tue May 19 03:23:15.678453 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:58582] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agtnI2CVlogrkn9m2w44bgAAAAk"]
[Tue May 19 03:23:16.331342 2026] [:error] [pid 36492:tid 36525] [client 20.226.60.108:37497] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agtnJGCVlogrkn9m2w44cgAAAAM"]
[Tue May 19 03:23:17.122953 2026] [:error] [pid 36492:tid 36537] [client 20.226.60.108:58586] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agtnJWCVlogrkn9m2w44dgAAAA8"]
[Tue May 19 03:23:17.747734 2026] [:error] [pid 36492:tid 36545] [client 20.226.60.108:44189] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagax.php"] [unique_id "agtnJWCVlogrkn9m2w44fAAAABc"]
[Tue May 19 03:23:18.680493 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:32508] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagax.php"] [unique_id "agtnJk555B9CZb6D60kV-gAAAU0"]
[Tue May 19 03:23:19.416926 2026] [:error] [pid 36491:tid 36519] [client 20.226.60.108:41857] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagax.php"] [unique_id "agtnJ0555B9CZb6D60kWBQAAAVg"]
[Tue May 19 03:23:20.182004 2026] [:error] [pid 36493:tid 36552] [client 20.226.60.108:48864] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sagax.php"] [unique_id "agtnKAynkzQB5nM668rvLwAAAQM"]
[Tue May 19 03:23:20.881759 2026] [:error] [pid 36491:tid 36498] [client 20.226.60.108:61266] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor/"] [unique_id "agtnKE555B9CZb6D60kWGgAAAUM"]
[Tue May 19 03:23:21.599877 2026] [:error] [pid 36493:tid 36553] [client 20.226.60.108:25423] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor/"] [unique_id "agtnKQynkzQB5nM668rvMAAAAQQ"]
[Tue May 19 03:23:22.465155 2026] [:error] [pid 36579:tid 36595] [client 20.226.60.108:59988] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor/"] [unique_id "agtnKl-aoZxBfgL5vDzBmQAAAE0"]
[Tue May 19 03:23:23.168096 2026] [:error] [pid 36579:tid 36604] [client 20.226.60.108:38691] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vendor/"] [unique_id "agtnK1-aoZxBfgL5vDzBnAAAAFY"]
[Tue May 19 03:23:23.939125 2026] [:error] [pid 36493:tid 36549] [client 20.226.60.108:36806] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "agtnKwynkzQB5nM668rvMQAAAQA"]
[Tue May 19 03:23:24.603077 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:38686] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "agtnLE555B9CZb6D60kWIQAAAVE"]
[Tue May 19 03:23:25.261595 2026] [:error] [pid 36492:tid 36522] [client 20.226.60.108:17540] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "agtnLWCVlogrkn9m2w44ogAAAAA"]
[Tue May 19 03:23:25.990545 2026] [:error] [pid 36492:tid 36537] [client 20.226.60.108:20463] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "agtnLWCVlogrkn9m2w44pAAAAA8"]
[Tue May 19 03:23:26.861145 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:61264] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "agtnLk555B9CZb6D60kWJAAAAUY"]
[Tue May 19 03:23:27.526190 2026] [:error] [pid 36492:tid 36523] [client 20.226.60.108:61305] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "agtnL2CVlogrkn9m2w44qAAAAAE"]
[Tue May 19 03:23:28.245946 2026] [:error] [pid 44087:tid 44099] [client 20.226.60.108:41952] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "agtnMG5HPHbH9GK7l6wXLAAAAco"]
[Tue May 19 03:23:28.887696 2026] [:error] [pid 43916:tid 43943] [client 20.226.60.108:48852] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "agtnMNQC236p33zJJvnkYwAAAJM"]
[Tue May 19 03:23:29.517890 2026] [:error] [pid 36492:tid 36527] [client 20.226.60.108:41933] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "agtnMWCVlogrkn9m2w44rAAAAAU"]
[Tue May 19 03:23:30.173661 2026] [:error] [pid 36492:tid 36529] [client 20.226.60.108:27885] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "agtnMmCVlogrkn9m2w44rgAAAAc"]
[Tue May 19 03:23:30.808652 2026] [:error] [pid 44010:tid 44025] [client 20.226.60.108:20444] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "agtnMjcFUuogD3-74-aTpgAAAM0"]
[Tue May 19 03:23:31.509202 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:33969] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "agtnM0555B9CZb6D60kWKwAAAVI"]
[Tue May 19 03:23:32.463009 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:10474] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "agtnNE555B9CZb6D60kWLgAAAVE"]
[Tue May 19 03:23:33.338494 2026] [:error] [pid 36491:tid 36497] [client 20.226.60.108:17574] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "agtnNU555B9CZb6D60kWMwAAAUI"]
[Tue May 19 03:23:33.979777 2026] [:error] [pid 36491:tid 36513] [client 20.226.60.108:33975] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "agtnNU555B9CZb6D60kWOAAAAVI"]
[Tue May 19 03:23:34.747425 2026] [:error] [pid 36492:tid 36538] [client 20.226.60.108:33974] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "agtnNmCVlogrkn9m2w44wAAAABA"]
[Tue May 19 03:23:35.571681 2026] [:error] [pid 44046:tid 44049] [client 20.226.60.108:59968] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "agtnN4YF4k2jfXJBXk0Y6wAAAYE"]
[Tue May 19 03:23:36.215845 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:10489] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "agtnOE555B9CZb6D60kWUQAAAUY"]
[Tue May 19 03:23:36.867875 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:25929] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "agtnOE555B9CZb6D60kWWQAAAU0"]
[Tue May 19 03:23:37.657986 2026] [:error] [pid 36579:tid 36606] [client 20.226.60.108:48203] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/z.php"] [unique_id "agtnOV-aoZxBfgL5vDzBywAAAFg"]
[Tue May 19 03:23:38.435677 2026] [:error] [pid 44087:tid 44106] [client 20.226.60.108:15858] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agtnOm5HPHbH9GK7l6wXLQAAAdE"]
[Tue May 19 03:23:39.119574 2026] [:error] [pid 36491:tid 36516] [client 20.226.60.108:36326] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agtnO0555B9CZb6D60kWaQAAAVU"]
[Tue May 19 03:23:39.749937 2026] [:error] [pid 44010:tid 44034] [client 20.226.60.108:36310] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agtnOzcFUuogD3-74-aTpwAAANY"]
[Tue May 19 03:23:40.474865 2026] [:error] [pid 36579:tid 36584] [client 20.226.60.108:45890] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "agtnPF-aoZxBfgL5vDzB3wAAAEI"]
[Tue May 19 03:23:41.115550 2026] [:error] [pid 44087:tid 44091] [client 20.226.60.108:41934] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "agtnPW5HPHbH9GK7l6wXMQAAAcI"]
[Tue May 19 03:23:41.752159 2026] [:error] [pid 36491:tid 36504] [client 20.226.60.108:45931] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "agtnPU555B9CZb6D60kWgwAAAUk"]
[Tue May 19 03:23:42.546075 2026] [:error] [pid 44087:tid 44105] [client 20.226.60.108:36276] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "agtnPm5HPHbH9GK7l6wXMwAAAdA"]
[Tue May 19 03:23:43.222903 2026] [:error] [pid 36493:tid 36572] [client 20.226.60.108:50119] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file61.php"] [unique_id "agtnPwynkzQB5nM668rvOAAAARc"]
[Tue May 19 03:23:43.899678 2026] [:error] [pid 36492:tid 36535] [client 20.226.60.108:24668] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agtnP2CVlogrkn9m2w45GgAAAA0"]
[Tue May 19 03:23:44.559137 2026] [:error] [pid 36493:tid 36550] [client 20.226.60.108:33982] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agtnQAynkzQB5nM668rvPAAAAQE"]
[Tue May 19 03:23:45.263000 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:45909] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agtnQU555B9CZb6D60kWlQAAAUg"]
[Tue May 19 03:23:46.043944 2026] [:error] [pid 36492:tid 36545] [client 20.226.60.108:45925] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mah.php"] [unique_id "agtnQmCVlogrkn9m2w45HgAAABc"]
[Tue May 19 03:23:46.676915 2026] [:error] [pid 36579:tid 36585] [client 20.226.60.108:17544] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "agtnQl-aoZxBfgL5vDzB7gAAAEM"]
[Tue May 19 03:23:47.374285 2026] [:error] [pid 36579:tid 36598] [client 20.226.60.108:36264] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "agtnQ1-aoZxBfgL5vDzB8QAAAFA"]
[Tue May 19 03:23:48.035928 2026] [:error] [pid 36579:tid 36605] [client 20.226.60.108:45915] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "agtnRF-aoZxBfgL5vDzB8wAAAFc"]
[Tue May 19 03:23:48.665614 2026] [:error] [pid 36579:tid 36583] [client 20.226.60.108:10491] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mini.php"] [unique_id "agtnRF-aoZxBfgL5vDzB9AAAAEE"]
[Tue May 19 03:23:49.353574 2026] [:error] [pid 36579:tid 36589] [client 20.226.60.108:55996] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "agtnRV-aoZxBfgL5vDzB9wAAAEc"]
[Tue May 19 03:23:49.986212 2026] [:error] [pid 44010:tid 44032] [client 20.226.60.108:36224] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "agtnRTcFUuogD3-74-aTrAAAANQ"]
[Tue May 19 03:23:50.682881 2026] [:error] [pid 36492:tid 36523] [client 20.226.60.108:48198] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "agtnRmCVlogrkn9m2w45IQAAAAE"]
[Tue May 19 03:23:51.440952 2026] [:error] [pid 43916:tid 43947] [client 20.226.60.108:55978] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/system_log.php"] [unique_id "agtnR9QC236p33zJJvnkZwAAAJc"]
[Tue May 19 03:23:52.205464 2026] [:error] [pid 36492:tid 36531] [client 20.226.60.108:48171] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "agtnSGCVlogrkn9m2w45IgAAAAk"]
[Tue May 19 03:23:52.843868 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:24699] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "agtnSE555B9CZb6D60kWnAAAAUY"]
[Tue May 19 03:23:53.546334 2026] [:error] [pid 36491:tid 36509] [client 20.226.60.108:36344] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "agtnSU555B9CZb6D60kWngAAAU4"]
[Tue May 19 03:23:54.173079 2026] [:error] [pid 36491:tid 36503] [client 20.226.60.108:27199] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/v.php"] [unique_id "agtnSk555B9CZb6D60kWnwAAAUg"]
[Tue May 19 03:23:54.829325 2026] [:error] [pid 36491:tid 36508] [client 20.226.60.108:10541] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "agtnSk555B9CZb6D60kWowAAAU0"]
[Tue May 19 03:23:55.482726 2026] [:error] [pid 44046:tid 44061] [client 20.226.60.108:50121] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "agtnS4YF4k2jfXJBXk0Y-wAAAY0"]
[Tue May 19 03:23:56.165742 2026] [:error] [pid 36579:tid 36591] [client 20.226.60.108:50127] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "agtnTF-aoZxBfgL5vDzCAwAAAEk"]
[Tue May 19 03:23:56.798456 2026] [:error] [pid 36491:tid 36518] [client 20.226.60.108:36257] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "agtnTE555B9CZb6D60kWpgAAAVc"]
[Tue May 19 03:23:57.559020 2026] [:error] [pid 44010:tid 44031] [client 20.226.60.108:25954] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "agtnTTcFUuogD3-74-aTsAAAANM"]
[Tue May 19 03:23:58.305390 2026] [:error] [pid 44046:tid 44062] [client 20.226.60.108:15823] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "agtnToYF4k2jfXJBXk0Y_QAAAY4"]
[Tue May 19 03:23:58.999629 2026] [:error] [pid 36492:tid 36537] [client 20.226.60.108:14273] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "agtnTmCVlogrkn9m2w45JQAAAA8"]
[Tue May 19 03:23:59.645361 2026] [:error] [pid 36492:tid 36532] [client 20.226.60.108:48244] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "agtnT2CVlogrkn9m2w45JwAAAAo"]
[Tue May 19 03:24:00.323620 2026] [:error] [pid 36492:tid 36539] [client 20.226.60.108:36270] [client 20.226.60.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "dbservices.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "agtnUGCVlogrkn9m2w45KwAAABE"]
[Tue May 19 03:24:01.012714 2026] [:error] [pid 36579:tid 36588] [client 20.226.60.108:24175] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "agtnUV-aoZxBfgL5vDzCCgAAAEY"]
[Tue May 19 03:24:01.697438 2026] [:error] [pid 43916:tid 43941] [client 20.226.60.108:27175] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "agtnUdQC236p33zJJvnkagAAAJE"]
[Tue May 19 03:24:02.429229 2026] [:error] [pid 36491:tid 36501] [client 20.226.60.108:27173] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "agtnUk555B9CZb6D60kWrAAAAUY"]
[Tue May 19 03:24:03.116043 2026] [:error] [pid 36492:tid 36527] [client 20.226.60.108:39951] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-index.php"] [unique_id "agtnU2CVlogrkn9m2w45LQAAAAU"]
[Tue May 19 03:24:03.738025 2026] [:error] [pid 44046:tid 44052] [client 20.226.60.108:52470] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-index.php"] [unique_id "agtnU4YF4k2jfXJBXk0ZAgAAAYQ"]
[Tue May 19 03:24:04.400381 2026] [:error] [pid 44010:tid 44013] [client 20.226.60.108:55975] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-index.php"] [unique_id "agtnVDcFUuogD3-74-aTsgAAAME"]
[Tue May 19 03:24:05.032958 2026] [:error] [pid 36491:tid 36517] [client 20.226.60.108:29857] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-index.php"] [unique_id "agtnVU555B9CZb6D60kWsQAAAVY"]
[Tue May 19 03:24:05.690329 2026] [:error] [pid 44010:tid 44033] [client 20.226.60.108:57868] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "agtnVTcFUuogD3-74-aTswAAANU"]
[Tue May 19 03:24:06.373332 2026] [:error] [pid 36491:tid 36500] [client 20.226.60.108:53639] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "agtnVk555B9CZb6D60kWtAAAAUU"]
[Tue May 19 03:24:07.051329 2026] [:error] [pid 36491:tid 36496] [client 20.226.60.108:45926] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "agtnV0555B9CZb6D60kWtgAAAUE"]
[Tue May 19 03:24:07.733593 2026] [:error] [pid 36491:tid 36512] [client 20.226.60.108:14335] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp/wp-admin/includes/"] [unique_id "agtnV0555B9CZb6D60kWuQAAAVE"]
[Tue May 19 03:24:08.396581 2026] [:error] [pid 44010:tid 44020] [client 20.226.60.108:60620] [client 20.226.60.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agtnWDcFUuogD3-74-aTtAAAAMg"]
[Tue May 19 03:24:09.026829 2026] [:error] [pid 36579:tid 36595] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Tue May 19 03:24:09.339443 2026] [:error] [pid 36579:tid 36589] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Tue May 19 03:24:09.673052 2026] [:error] [pid 36579:tid 36590] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Tue May 19 03:24:09.986528 2026] [:error] [pid 36579:tid 36584] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Tue May 19 03:24:10.322211 2026] [:error] [pid 36579:tid 36597] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Tue May 19 03:24:10.641765 2026] [:error] [pid 36579:tid 36587] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Tue May 19 03:24:10.974791 2026] [:error] [pid 36579:tid 36602] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Tue May 19 03:24:11.287796 2026] [:error] [pid 36579:tid 36603] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue May 19 03:24:11.926800 2026] [:error] [pid 36579:tid 36591] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue May 19 03:24:12.297115 2026] [:error] [pid 36579:tid 36598] [client 20.226.60.108:14317] File does not exist: /usr/local/apache/htdocs/suspended-page/insc.php
[Tue May 19 04:46:28.945163 2026] [:error] [pid 38705:tid 38779] [client 103.65.237.216:58966] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/sftp-config.json"] [unique_id "agt6pMg5dNOZ5umN9lsM5QAAAIo"]
[Tue May 19 05:11:02.536965 2026] [:error] [pid 38697:tid 38716] [client 43.166.247.82:56252] [client 43.166.247.82] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "aguAZqXP9pP6Kgt-msSbCwAAAAE"]
[Tue May 19 09:51:20.889882 2026] [:error] [pid 38697:tid 38736] [client 129.226.209.117:46642] [client 129.226.209.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agvCGKXP9pP6Kgt-msTloAAAABU"]
[Tue May 19 12:38:40.764010 2026] [:error] [pid 46815:tid 46828] [client 43.153.204.189:59682] [client 43.153.204.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agvpUCPnRhJOmA06Lgo0CgAAAUs"]
[Tue May 19 14:03:26.944850 2026] [:error] [pid 46815:tid 46831] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue May 19 14:03:27.257424 2026] [:error] [pid 46815:tid 46819] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Tue May 19 14:03:27.567698 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Tue May 19 14:03:27.878348 2026] [:error] [pid 46815:tid 46840] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Tue May 19 14:03:28.190591 2026] [:error] [pid 46815:tid 46823] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Tue May 19 14:03:28.501363 2026] [:error] [pid 46815:tid 46839] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Tue May 19 14:03:28.812405 2026] [:error] [pid 46815:tid 46826] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Tue May 19 14:03:29.123277 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Tue May 19 14:03:29.436424 2026] [:error] [pid 46815:tid 46837] [client 20.226.17.188:3423] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Tue May 19 14:03:29.748764 2026] [:error] [pid 46815:tid 46828] [client 20.226.17.188:3423] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agv9MSPnRhJOmA06LgpKUgAAAUs"]
[Tue May 19 14:03:30.365393 2026] [:error] [pid 38705:tid 38778] [client 20.226.17.188:4020] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agv9Msg5dNOZ5umN9ltK1wAAAIk"]
[Tue May 19 14:03:30.982707 2026] [:error] [pid 46815:tid 46834] [client 20.226.17.188:4005] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agv9MiPnRhJOmA06LgpKVAAAAVE"]
[Tue May 19 14:03:31.600304 2026] [:error] [pid 38814:tid 38824] [client 20.226.17.188:4068] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blog-header.php"] [unique_id "agv9MwvkKuBwP0epzWd8wAAAAMg"]
[Tue May 19 14:03:32.218928 2026] [:error] [pid 46815:tid 46833] [client 20.226.17.188:4086] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "agv9NCPnRhJOmA06LgpKVgAAAVA"]
[Tue May 19 14:03:32.837502 2026] [:error] [pid 38697:tid 38722] [client 20.226.17.188:3413] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "agv9NKXP9pP6Kgt-msQaJwAAAAc"]
[Tue May 19 14:03:33.461206 2026] [:error] [pid 46815:tid 46829] [client 20.226.17.188:4091] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "agv9NSPnRhJOmA06LgpKWQAAAUw"]
[Tue May 19 14:03:34.078021 2026] [:error] [pid 38697:tid 38727] [client 20.226.17.188:4061] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sa.php7"] [unique_id "agv9NqXP9pP6Kgt-msQaKAAAAAw"]
[Tue May 19 14:03:34.700152 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:3990] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "agv9NiPnRhJOmA06LgpKWwAAAUQ"]
[Tue May 19 14:03:35.319312 2026] [:error] [pid 38814:tid 38832] [client 20.226.17.188:4021] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "agv9NwvkKuBwP0epzWd8wgAAANA"]
[Tue May 19 14:03:35.948680 2026] [:error] [pid 29823:tid 29857] [client 20.226.17.188:3398] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "agv9N2O09C0nAz8vRk4elgAAAdI"]
[Tue May 19 14:03:36.569146 2026] [:error] [pid 46815:tid 46826] [client 20.226.17.188:4011] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/ws49.php"] [unique_id "agv9OCPnRhJOmA06LgpKXwAAAUk"]
[Tue May 19 14:03:37.189581 2026] [:error] [pid 46815:tid 46830] [client 20.226.17.188:3971] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agv9OSPnRhJOmA06LgpKYQAAAU0"]
[Tue May 19 14:03:37.808295 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:4033] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agv9OSPnRhJOmA06LgpKYwAAAUg"]
[Tue May 19 14:03:38.426784 2026] [:error] [pid 46896:tid 46918] [client 20.226.17.188:3393] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agv9OqCHyzL3Ci9LGE1D-gAAAZQ"]
[Tue May 19 14:03:39.043126 2026] [:error] [pid 29823:tid 29853] [client 20.226.17.188:3414] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inputs.php"] [unique_id "agv9O2O09C0nAz8vRk4emAAAAc4"]
[Tue May 19 14:03:39.660364 2026] [:error] [pid 29823:tid 29841] [client 20.226.17.188:4030] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "agv9O2O09C0nAz8vRk4emQAAAcY"]
[Tue May 19 14:03:40.281323 2026] [:error] [pid 38697:tid 38726] [client 20.226.17.188:4055] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "agv9PKXP9pP6Kgt-msQaLgAAAAs"]
[Tue May 19 14:03:40.901743 2026] [:error] [pid 38697:tid 38717] [client 20.226.17.188:4063] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "agv9PKXP9pP6Kgt-msQaMgAAAAI"]
[Tue May 19 14:03:41.524748 2026] [:error] [pid 46815:tid 46833] [client 20.226.17.188:3985] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxw.php"] [unique_id "agv9PSPnRhJOmA06LgpKaQAAAVA"]
[Tue May 19 14:03:42.143984 2026] [:error] [pid 46815:tid 46841] [client 20.226.17.188:4000] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "agv9PiPnRhJOmA06LgpKagAAAVg"]
[Tue May 19 14:03:42.763734 2026] [:error] [pid 29823:tid 29855] [client 20.226.17.188:4048] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "agv9PmO09C0nAz8vRk4enAAAAdA"]
[Tue May 19 14:03:43.382425 2026] [:error] [pid 46815:tid 46824] [client 20.226.17.188:20622] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "agv9PyPnRhJOmA06LgpKbAAAAUc"]
[Tue May 19 14:03:44.003333 2026] [:error] [pid 29823:tid 29859] [client 20.226.17.188:3401] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amwxl.php"] [unique_id "agv9QGO09C0nAz8vRk4engAAAdQ"]
[Tue May 19 14:03:44.622394 2026] [:error] [pid 46896:tid 46914] [client 20.226.17.188:4044] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agv9QKCHyzL3Ci9LGE1D_gAAAZA"]
[Tue May 19 14:03:45.240394 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:3982] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agv9QSPnRhJOmA06LgpKbgAAAUQ"]
[Tue May 19 14:03:45.858038 2026] [:error] [pid 46815:tid 46827] [client 20.226.17.188:4056] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agv9QSPnRhJOmA06LgpKbwAAAUo"]
[Tue May 19 14:03:46.483980 2026] [:error] [pid 38699:tid 38755] [client 20.226.17.188:3424] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "agv9Qr--Adsw_P-dthZ4jQAAAE0"]
[Tue May 19 14:03:47.101509 2026] [:error] [pid 41573:tid 41581] [client 20.226.17.188:4003] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "agv9Qy1A2bd6JDSW9RZgdgAAAQY"]
[Tue May 19 14:03:47.735190 2026] [:error] [pid 46896:tid 46909] [client 20.226.17.188:3978] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "agv9Q6CHyzL3Ci9LGE1EBgAAAYs"]
[Tue May 19 14:03:48.356359 2026] [:error] [pid 46896:tid 46907] [client 20.226.17.188:3417] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "agv9RKCHyzL3Ci9LGE1ECgAAAYk"]
[Tue May 19 14:03:48.979991 2026] [:error] [pid 38705:tid 38775] [client 20.226.17.188:3992] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws83.php"] [unique_id "agv9RMg5dNOZ5umN9ltK3gAAAIY"]
[Tue May 19 14:03:49.600047 2026] [:error] [pid 46815:tid 46837] [client 20.226.17.188:3407] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "agv9RSPnRhJOmA06LgpKcgAAAVQ"]
[Tue May 19 14:03:50.221975 2026] [:error] [pid 46896:tid 46905] [client 20.226.17.188:4071] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "agv9RqCHyzL3Ci9LGE1EDQAAAYc"]
[Tue May 19 14:03:50.842877 2026] [:error] [pid 46815:tid 46833] [client 20.226.17.188:3974] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "agv9RiPnRhJOmA06LgpKdgAAAVA"]
[Tue May 19 14:03:51.464350 2026] [:error] [pid 29823:tid 29851] [client 20.226.17.188:3331] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/amax.php"] [unique_id "agv9R2O09C0nAz8vRk4eoQAAAcw"]
[Tue May 19 14:03:52.098542 2026] [:error] [pid 46896:tid 46917] [client 20.226.17.188:4075] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "agv9SKCHyzL3Ci9LGE1EDwAAAZM"]
[Tue May 19 14:03:52.719186 2026] [:error] [pid 38699:tid 38761] [client 20.226.17.188:3408] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "agv9SL--Adsw_P-dthZ4jwAAAFM"]
[Tue May 19 14:03:53.339683 2026] [:error] [pid 38699:tid 38751] [client 20.226.17.188:3968] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "agv9Sb--Adsw_P-dthZ4kQAAAEk"]
[Tue May 19 14:03:53.958645 2026] [:error] [pid 46815:tid 46824] [client 20.226.17.188:3330] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-104.php"] [unique_id "agv9SSPnRhJOmA06LgpKegAAAUc"]
[Tue May 19 14:03:54.578984 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:4076] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "agv9SiPnRhJOmA06LgpKfAAAAUQ"]
[Tue May 19 14:03:55.197488 2026] [:error] [pid 46815:tid 46827] [client 20.226.17.188:4069] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "agv9SyPnRhJOmA06LgpKfQAAAUo"]
[Tue May 19 14:03:55.815790 2026] [:error] [pid 38699:tid 38754] [client 20.226.17.188:4074] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "agv9S7--Adsw_P-dthZ4lgAAAEw"]
[Tue May 19 14:03:56.449816 2026] [:error] [pid 46815:tid 46826] [client 20.226.17.188:3405] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/grsiuk.php"] [unique_id "agv9TCPnRhJOmA06LgpKfgAAAUk"]
[Tue May 19 14:03:57.069872 2026] [:error] [pid 46815:tid 46822] [client 20.226.17.188:3436] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "agv9TSPnRhJOmA06LgpKfwAAAUU"]
[Tue May 19 14:03:57.688122 2026] [:error] [pid 46815:tid 46823] [client 20.226.17.188:4073] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "agv9TSPnRhJOmA06LgpKgAAAAUY"]
[Tue May 19 14:03:58.305680 2026] [:error] [pid 46896:tid 46903] [client 20.226.17.188:4064] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "agv9TqCHyzL3Ci9LGE1EGQAAAYU"]
[Tue May 19 14:03:58.924932 2026] [:error] [pid 46815:tid 46830] [client 20.226.17.188:3991] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp9.php"] [unique_id "agv9TiPnRhJOmA06LgpKggAAAU0"]
[Tue May 19 14:03:59.548006 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:4027] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agv9TyPnRhJOmA06LgpKgwAAAUg"]
[Tue May 19 14:04:00.170930 2026] [:error] [pid 46815:tid 46836] [client 20.226.17.188:3418] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agv9UCPnRhJOmA06LgpKhwAAAVM"]
[Tue May 19 14:04:00.791052 2026] [:error] [pid 46896:tid 46917] [client 20.226.17.188:3412] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agv9UKCHyzL3Ci9LGE1EGwAAAZM"]
[Tue May 19 14:04:01.408943 2026] [:error] [pid 46896:tid 46898] [client 20.226.17.188:3997] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aevly.php"] [unique_id "agv9UaCHyzL3Ci9LGE1EHgAAAYA"]
[Tue May 19 14:04:02.030310 2026] [:error] [pid 46896:tid 46908] [client 20.226.17.188:3973] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agv9UqCHyzL3Ci9LGE1EIQAAAYo"]
[Tue May 19 14:04:02.650214 2026] [:error] [pid 38699:tid 38756] [client 20.226.17.188:3328] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agv9Ur--Adsw_P-dthZ4owAAAE4"]
[Tue May 19 14:04:03.268845 2026] [:error] [pid 46896:tid 46902] [client 20.226.17.188:4042] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agv9U6CHyzL3Ci9LGE1EJgAAAYQ"]
[Tue May 19 14:04:03.906306 2026] [:error] [pid 29823:tid 29837] [client 20.226.17.188:3411] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ioxi-o.php"] [unique_id "agv9U2O09C0nAz8vRk4epwAAAcI"]
[Tue May 19 14:04:04.526715 2026] [:error] [pid 46896:tid 46922] [client 20.226.17.188:4083] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "agv9VKCHyzL3Ci9LGE1EKAAAAZg"]
[Tue May 19 14:04:05.142941 2026] [:error] [pid 46815:tid 46827] [client 20.226.17.188:4035] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "agv9VSPnRhJOmA06LgpKkAAAAUo"]
[Tue May 19 14:04:05.759717 2026] [:error] [pid 46815:tid 46822] [client 20.226.17.188:3406] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "agv9VSPnRhJOmA06LgpKkwAAAUU"]
[Tue May 19 14:04:06.376598 2026] [:error] [pid 29823:tid 29857] [client 20.226.17.188:4050] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/5b9ac.php"] [unique_id "agv9VmO09C0nAz8vRk4eqwAAAdI"]
[Tue May 19 14:04:06.995083 2026] [:error] [pid 46815:tid 46830] [client 20.226.17.188:4007] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agv9ViPnRhJOmA06LgpKlAAAAU0"]
[Tue May 19 14:04:07.612534 2026] [:error] [pid 46815:tid 46818] [client 20.226.17.188:3409] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agv9VyPnRhJOmA06LgpKlwAAAUE"]
[Tue May 19 14:04:08.238104 2026] [:error] [pid 46815:tid 46836] [client 20.226.17.188:3975] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agv9WCPnRhJOmA06LgpKmAAAAVM"]
[Tue May 19 14:04:08.858059 2026] [:error] [pid 29823:tid 29853] [client 20.226.17.188:4088] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tool.php"] [unique_id "agv9WGO09C0nAz8vRk4erQAAAc4"]
[Tue May 19 14:04:09.475750 2026] [:error] [pid 38814:tid 38829] [client 20.226.17.188:4080] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agv9WQvkKuBwP0epzWd8xwAAAM0"]
[Tue May 19 14:04:10.094675 2026] [:error] [pid 46815:tid 46820] [client 20.226.17.188:3431] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agv9WiPnRhJOmA06LgpKmQAAAUM"]
[Tue May 19 14:04:10.713178 2026] [:error] [pid 46815:tid 46838] [client 20.226.17.188:4028] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agv9WiPnRhJOmA06LgpKmwAAAVU"]
[Tue May 19 14:04:11.330070 2026] [:error] [pid 38697:tid 38738] [client 20.226.17.188:20650] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-the.php"] [unique_id "agv9W6XP9pP6Kgt-msQaOwAAABc"]
[Tue May 19 14:04:11.946139 2026] [:error] [pid 38699:tid 38758] [client 20.226.17.188:4040] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "agv9W7--Adsw_P-dthZ4pgAAAFA"]
[Tue May 19 14:04:12.571202 2026] [:error] [pid 38697:tid 38723] [client 20.226.17.188:4029] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "agv9XKXP9pP6Kgt-msQaPgAAAAg"]
[Tue May 19 14:04:13.187915 2026] [:error] [pid 38699:tid 38751] [client 20.226.17.188:4059] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "agv9Xb--Adsw_P-dthZ4pwAAAEk"]
[Tue May 19 14:04:13.807011 2026] [:error] [pid 29823:tid 29847] [client 20.226.17.188:3433] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wtiiy.php"] [unique_id "agv9XWO09C0nAz8vRk4esAAAAcg"]
[Tue May 19 14:04:14.429907 2026] [:error] [pid 29823:tid 29859] [client 20.226.17.188:3428] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agv9XmO09C0nAz8vRk4esQAAAdQ"]
[Tue May 19 14:04:15.074309 2026] [:error] [pid 38699:tid 38746] [client 20.226.17.188:3400] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agv9X7--Adsw_P-dthZ4qgAAAEQ"]
[Tue May 19 14:04:15.698591 2026] [:error] [pid 38814:tid 38828] [client 20.226.17.188:4047] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agv9XwvkKuBwP0epzWd8ygAAAMw"]
[Tue May 19 14:04:16.317062 2026] [:error] [pid 38814:tid 38837] [client 20.226.17.188:3977] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/init.php"] [unique_id "agv9YAvkKuBwP0epzWd8ywAAANU"]
[Tue May 19 14:04:16.941517 2026] [:error] [pid 46896:tid 46920] [client 20.226.17.188:3357] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "agv9YKCHyzL3Ci9LGE1ELAAAAZY"]
[Tue May 19 14:04:17.561823 2026] [:error] [pid 41573:tid 41594] [client 20.226.17.188:4078] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "agv9YS1A2bd6JDSW9RZgewAAARM"]
[Tue May 19 14:04:18.185254 2026] [:error] [pid 46815:tid 46824] [client 20.226.17.188:3333] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "agv9YiPnRhJOmA06LgpKnQAAAUc"]
[Tue May 19 14:04:18.803379 2026] [:error] [pid 46896:tid 46909] [client 20.226.17.188:3421] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp5.php"] [unique_id "agv9YqCHyzL3Ci9LGE1EMAAAAYs"]
[Tue May 19 14:04:19.422203 2026] [:error] [pid 46896:tid 46919] [client 20.226.17.188:4045] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "agv9Y6CHyzL3Ci9LGE1ENAAAAZU"]
[Tue May 19 14:04:20.039904 2026] [:error] [pid 38699:tid 38764] [client 20.226.17.188:4090] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "agv9ZL--Adsw_P-dthZ4rgAAAFY"]
[Tue May 19 14:04:20.667321 2026] [:error] [pid 41573:tid 41578] [client 20.226.17.188:4093] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "agv9ZC1A2bd6JDSW9RZggAAAAQM"]
[Tue May 19 14:04:21.286542 2026] [:error] [pid 38697:tid 38733] [client 20.226.17.188:4031] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jga.php"] [unique_id "agv9ZaXP9pP6Kgt-msQaQgAAABI"]
[Tue May 19 14:04:21.909541 2026] [:error] [pid 38699:tid 38752] [client 20.226.17.188:4094] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "agv9Zb--Adsw_P-dthZ4sAAAAEo"]
[Tue May 19 14:04:22.527634 2026] [:error] [pid 38697:tid 38715] [client 20.226.17.188:4049] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "agv9ZqXP9pP6Kgt-msQaRAAAAAA"]
[Tue May 19 14:04:23.149444 2026] [:error] [pid 38697:tid 38735] [client 20.226.17.188:4043] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "agv9Z6XP9pP6Kgt-msQaRQAAABQ"]
[Tue May 19 14:04:23.769757 2026] [:error] [pid 46815:tid 46823] [client 20.226.17.188:3454] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "agv9ZyPnRhJOmA06LgpKowAAAUY"]
[Tue May 19 14:04:24.387501 2026] [:error] [pid 46815:tid 46831] [client 20.226.17.188:3381] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "agv9aCPnRhJOmA06LgpKpAAAAU4"]
[Tue May 19 14:04:25.014821 2026] [:error] [pid 46896:tid 46910] [client 20.226.17.188:20618] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "agv9aaCHyzL3Ci9LGE1EQQAAAYw"]
[Tue May 19 14:04:25.632357 2026] [:error] [pid 46896:tid 46899] [client 20.226.17.188:4081] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "agv9aaCHyzL3Ci9LGE1ERwAAAYE"]
[Tue May 19 14:04:26.253192 2026] [:error] [pid 46896:tid 46900] [client 20.226.17.188:3416] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ajax.php"] [unique_id "agv9aqCHyzL3Ci9LGE1ESQAAAYI"]
[Tue May 19 14:04:26.870144 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:4008] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "agv9aiPnRhJOmA06LgpKyQAAAUQ"]
[Tue May 19 14:04:27.490601 2026] [:error] [pid 46815:tid 46831] [client 20.226.17.188:3419] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "agv9ayPnRhJOmA06LgpK0wAAAU4"]
[Tue May 19 14:04:28.112520 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:3339] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "agv9bCPnRhJOmA06LgpK1gAAAUg"]
[Tue May 19 14:04:28.730685 2026] [:error] [pid 46815:tid 46818] [client 20.226.17.188:3352] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx78.php"] [unique_id "agv9bCPnRhJOmA06LgpK3AAAAUE"]
[Tue May 19 14:04:29.353166 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php
[Tue May 19 14:04:29.665762 2026] [:error] [pid 46815:tid 46833] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Tue May 19 14:04:29.976731 2026] [:error] [pid 46815:tid 46838] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Tue May 19 14:04:30.288639 2026] [:error] [pid 46815:tid 46841] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Tue May 19 14:04:30.599075 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Tue May 19 14:04:30.909798 2026] [:error] [pid 46815:tid 46818] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Tue May 19 14:04:31.222731 2026] [:error] [pid 46815:tid 46820] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Tue May 19 14:04:31.535938 2026] [:error] [pid 46815:tid 46835] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue May 19 14:04:31.846957 2026] [:error] [pid 46815:tid 46838] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Tue May 19 14:04:32.159338 2026] [:error] [pid 46815:tid 46819] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue May 19 14:04:32.468661 2026] [:error] [pid 46815:tid 46831] [client 20.226.17.188:3390] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Tue May 19 14:04:32.776640 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:3390] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agv9cCPnRhJOmA06LgpK_gAAAUg"]
[Tue May 19 14:04:33.393027 2026] [:error] [pid 46815:tid 46840] [client 20.226.17.188:3995] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agv9cSPnRhJOmA06LgpLAgAAAVc"]
[Tue May 19 14:04:34.010936 2026] [:error] [pid 46815:tid 46820] [client 20.226.17.188:4062] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agv9ciPnRhJOmA06LgpLBQAAAUM"]
[Tue May 19 14:04:34.628816 2026] [:error] [pid 46896:tid 46898] [client 20.226.17.188:3369] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "agv9cqCHyzL3Ci9LGE1EXgAAAYA"]
[Tue May 19 14:04:35.248034 2026] [:error] [pid 41573:tid 41586] [client 20.226.17.188:4002] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agv9cy1A2bd6JDSW9RZggwAAAQs"]
[Tue May 19 14:04:35.866718 2026] [:error] [pid 38699:tid 38760] [client 20.226.17.188:3365] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agv9c7--Adsw_P-dthZ4sQAAAFI"]
[Tue May 19 14:04:36.495736 2026] [:error] [pid 38697:tid 38723] [client 20.226.17.188:4066] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agv9dKXP9pP6Kgt-msQaSwAAAAg"]
[Tue May 19 14:04:37.115347 2026] [:error] [pid 46896:tid 46912] [client 20.226.17.188:3387] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/666.php"] [unique_id "agv9daCHyzL3Ci9LGE1EYwAAAY4"]
[Tue May 19 14:04:37.734417 2026] [:error] [pid 41573:tid 41593] [client 20.226.17.188:3984] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "agv9dS1A2bd6JDSW9RZghAAAARI"]
[Tue May 19 14:04:38.353251 2026] [:error] [pid 46896:tid 46918] [client 20.226.17.188:3448] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "agv9dqCHyzL3Ci9LGE1EZAAAAZQ"]
[Tue May 19 14:04:38.972129 2026] [:error] [pid 46896:tid 46913] [client 20.226.17.188:4015] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "agv9dqCHyzL3Ci9LGE1EZwAAAY8"]
[Tue May 19 14:04:39.590290 2026] [:error] [pid 46896:tid 46899] [client 20.226.17.188:3984] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/saorix1.php"] [unique_id "agv9d6CHyzL3Ci9LGE1EaAAAAYE"]
[Tue May 19 14:04:40.213017 2026] [:error] [pid 46896:tid 46922] [client 20.226.17.188:4046] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "agv9eKCHyzL3Ci9LGE1EagAAAZg"]
[Tue May 19 14:04:40.833636 2026] [:error] [pid 38814:tid 38827] [client 20.226.17.188:4026] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "agv9eAvkKuBwP0epzWd8zgAAAMs"]
[Tue May 19 14:04:41.453412 2026] [:error] [pid 41573:tid 41598] [client 20.226.17.188:3372] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "agv9eS1A2bd6JDSW9RZghgAAARc"]
[Tue May 19 14:04:42.072826 2026] [:error] [pid 46896:tid 46903] [client 20.226.17.188:3427] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/packsin1.php"] [unique_id "agv9eqCHyzL3Ci9LGE1EbAAAAYU"]
[Tue May 19 14:04:42.690368 2026] [:error] [pid 38705:tid 38781] [client 20.226.17.188:4070] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "agv9esg5dNOZ5umN9ltK4wAAAIw"]
[Tue May 19 14:04:43.310008 2026] [:error] [pid 29823:tid 29855] [client 20.226.17.188:3415] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "agv9e2O09C0nAz8vRk4evgAAAdA"]
[Tue May 19 14:04:43.931587 2026] [:error] [pid 38697:tid 38726] [client 20.226.17.188:4034] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "agv9e6XP9pP6Kgt-msQaTgAAAAs"]
[Tue May 19 14:04:44.561994 2026] [:error] [pid 38697:tid 38731] [client 20.226.17.188:4025] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/menu.php"] [unique_id "agv9fKXP9pP6Kgt-msQaTwAAABA"]
[Tue May 19 14:04:45.187986 2026] [:error] [pid 38814:tid 38824] [client 20.226.17.188:3391] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "agv9fQvkKuBwP0epzWd80QAAAMg"]
[Tue May 19 14:04:45.813036 2026] [:error] [pid 46896:tid 46915] [client 20.226.17.188:3370] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "agv9faCHyzL3Ci9LGE1EbwAAAZE"]
[Tue May 19 14:04:46.435687 2026] [:error] [pid 46896:tid 46898] [client 20.226.17.188:3452] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "agv9fqCHyzL3Ci9LGE1EcAAAAYA"]
[Tue May 19 14:04:47.053601 2026] [:error] [pid 46896:tid 46920] [client 20.226.17.188:20626] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin-footer.php"] [unique_id "agv9f6CHyzL3Ci9LGE1EcQAAAZY"]
[Tue May 19 14:04:47.682097 2026] [:error] [pid 46896:tid 46914] [client 20.226.17.188:4084] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "agv9f6CHyzL3Ci9LGE1EcwAAAZA"]
[Tue May 19 14:04:48.299551 2026] [:error] [pid 46896:tid 46908] [client 20.226.17.188:3402] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "agv9gKCHyzL3Ci9LGE1EdAAAAYo"]
[Tue May 19 14:04:48.922896 2026] [:error] [pid 46815:tid 46828] [client 20.226.17.188:3976] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "agv9gCPnRhJOmA06LgpLPwAAAUs"]
[Tue May 19 14:04:49.548114 2026] [:error] [pid 46896:tid 46902] [client 20.226.17.188:3403] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/shop.php"] [unique_id "agv9gaCHyzL3Ci9LGE1EdgAAAYQ"]
[Tue May 19 14:04:50.167882 2026] [:error] [pid 46815:tid 46820] [client 20.226.17.188:30023] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "agv9giPnRhJOmA06LgpLSAAAAUM"]
[Tue May 19 14:04:50.799409 2026] [:error] [pid 46815:tid 46832] [client 20.226.17.188:3447] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "agv9giPnRhJOmA06LgpLTQAAAU8"]
[Tue May 19 14:04:51.424501 2026] [:error] [pid 46896:tid 46912] [client 20.226.17.188:20615] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "agv9g6CHyzL3Ci9LGE1EdwAAAY4"]
[Tue May 19 14:04:52.042503 2026] [:error] [pid 46896:tid 46909] [client 20.226.17.188:3449] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/maul.php"] [unique_id "agv9hKCHyzL3Ci9LGE1EeQAAAYs"]
[Tue May 19 14:04:52.660466 2026] [:error] [pid 46896:tid 46899] [client 20.226.17.188:20634] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "agv9hKCHyzL3Ci9LGE1EfAAAAYE"]
[Tue May 19 14:04:53.280487 2026] [:error] [pid 46896:tid 46921] [client 20.226.17.188:4004] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "agv9haCHyzL3Ci9LGE1EfQAAAZc"]
[Tue May 19 14:04:53.898982 2026] [:error] [pid 29823:tid 29854] [client 20.226.17.188:20649] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "agv9hWO09C0nAz8vRk4ewwAAAc8"]
[Tue May 19 14:04:54.518810 2026] [:error] [pid 29823:tid 29860] [client 20.226.17.188:4060] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-blogs.php"] [unique_id "agv9hmO09C0nAz8vRk4exgAAAdU"]
[Tue May 19 14:04:55.137407 2026] [:error] [pid 38697:tid 38735] [client 20.226.17.188:20609] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "agv9h6XP9pP6Kgt-msQaVAAAABQ"]
[Tue May 19 14:04:55.756886 2026] [:error] [pid 38705:tid 38780] [client 20.226.17.188:4067] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "agv9h8g5dNOZ5umN9ltK5QAAAIs"]
[Tue May 19 14:04:56.376065 2026] [:error] [pid 46815:tid 46837] [client 20.226.17.188:3374] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "agv9iCPnRhJOmA06LgpLZQAAAVQ"]
[Tue May 19 14:04:56.993069 2026] [:error] [pid 46896:tid 46906] [client 20.226.17.188:3996] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bjfl.php"] [unique_id "agv9iKCHyzL3Ci9LGE1EgQAAAYg"]
[Tue May 19 14:04:57.610662 2026] [:error] [pid 38705:tid 38785] [client 20.226.17.188:20633] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agv9icg5dNOZ5umN9ltK6AAAAJA"]
[Tue May 19 14:04:58.227998 2026] [:error] [pid 29823:tid 29841] [client 20.226.17.188:3395] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agv9imO09C0nAz8vRk4ezQAAAcY"]
[Tue May 19 14:04:58.846138 2026] [:error] [pid 29823:tid 29863] [client 20.226.17.188:20612] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agv9imO09C0nAz8vRk4ezgAAAdg"]
[Tue May 19 14:04:59.463679 2026] [:error] [pid 38814:tid 38833] [client 20.226.17.188:3356] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "agv9iwvkKuBwP0epzWd81wAAANE"]
[Tue May 19 14:05:00.083108 2026] [:error] [pid 38699:tid 38747] [client 20.226.17.188:30021] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "agv9jL--Adsw_P-dthZ4twAAAEU"]
[Tue May 19 14:05:00.710624 2026] [:error] [pid 38705:tid 38773] [client 20.226.17.188:4095] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "agv9jMg5dNOZ5umN9ltK8wAAAIQ"]
[Tue May 19 14:05:01.328382 2026] [:error] [pid 46896:tid 46919] [client 20.226.17.188:3340] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "agv9jaCHyzL3Ci9LGE1EiAAAAZU"]
[Tue May 19 14:05:01.948179 2026] [:error] [pid 38697:tid 38725] [client 20.226.17.188:3361] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lowpr.php"] [unique_id "agv9jaXP9pP6Kgt-msQaVgAAAAo"]
[Tue May 19 14:05:02.565464 2026] [:error] [pid 46896:tid 46918] [client 20.226.17.188:3399] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "agv9jqCHyzL3Ci9LGE1EigAAAZQ"]
[Tue May 19 14:05:03.187585 2026] [:error] [pid 46896:tid 46909] [client 20.226.17.188:3363] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "agv9j6CHyzL3Ci9LGE1EiwAAAYs"]
[Tue May 19 14:05:03.823322 2026] [:error] [pid 38697:tid 38734] [client 20.226.17.188:4032] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "agv9j6XP9pP6Kgt-msQaVwAAABM"]
[Tue May 19 14:05:04.447768 2026] [:error] [pid 38814:tid 38830] [client 20.226.17.188:3367] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/term.php"] [unique_id "agv9kAvkKuBwP0epzWd82QAAAM4"]
[Tue May 19 14:05:05.066904 2026] [:error] [pid 38814:tid 38840] [client 20.226.17.188:4089] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agv9kQvkKuBwP0epzWd82gAAANg"]
[Tue May 19 14:05:05.684484 2026] [:error] [pid 38697:tid 38730] [client 20.226.17.188:4041] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agv9kaXP9pP6Kgt-msQaWQAAAA8"]
[Tue May 19 14:05:06.310624 2026] [:error] [pid 29823:tid 29855] [client 20.226.17.188:3382] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agv9kmO09C0nAz8vRk4e0AAAAdA"]
[Tue May 19 14:05:06.933641 2026] [:error] [pid 38697:tid 38727] [client 20.226.17.188:3329] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fs.php"] [unique_id "agv9kqXP9pP6Kgt-msQaWgAAAAw"]
[Tue May 19 14:05:07.549004 2026] [:error] [pid 46896:tid 46906] [client 20.226.17.188:4016] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agv9k6CHyzL3Ci9LGE1EjwAAAYg"]
[Tue May 19 14:05:08.166016 2026] [:error] [pid 38699:tid 38758] [client 20.226.17.188:4079] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agv9lL--Adsw_P-dthZ4uAAAAFA"]
[Tue May 19 14:05:08.783206 2026] [:error] [pid 38697:tid 38718] [client 20.226.17.188:4014] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agv9lKXP9pP6Kgt-msQaWwAAAAM"]
[Tue May 19 14:05:09.400344 2026] [:error] [pid 38699:tid 38751] [client 20.226.17.188:3972] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ortasekerli1.php"] [unique_id "agv9lb--Adsw_P-dthZ4uQAAAEk"]
[Tue May 19 14:05:10.051063 2026] [:error] [pid 38697:tid 38723] [client 20.226.17.188:3993] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agv9lqXP9pP6Kgt-msQaXAAAAAg"]
[Tue May 19 14:05:10.675747 2026] [:error] [pid 41573:tid 41590] [client 20.226.17.188:3441] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agv9li1A2bd6JDSW9RZgiwAAAQ8"]
[Tue May 19 14:05:11.293863 2026] [:error] [pid 46896:tid 46915] [client 20.226.17.188:3453] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agv9l6CHyzL3Ci9LGE1EkQAAAZE"]
[Tue May 19 14:05:11.922385 2026] [:error] [pid 38814:tid 38828] [client 20.226.17.188:3378] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws80.php"] [unique_id "agv9lwvkKuBwP0epzWd83AAAAMw"]
[Tue May 19 14:05:12.545070 2026] [:error] [pid 46896:tid 46920] [client 20.226.17.188:3969] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "agv9mKCHyzL3Ci9LGE1EkgAAAZY"]
[Tue May 19 14:05:13.165466 2026] [:error] [pid 38814:tid 38831] [client 20.226.17.188:3332] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "agv9mQvkKuBwP0epzWd83QAAAM8"]
[Tue May 19 14:05:13.790951 2026] [:error] [pid 46896:tid 46904] [client 20.226.17.188:3396] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "agv9maCHyzL3Ci9LGE1ElAAAAYY"]
[Tue May 19 14:05:14.410140 2026] [:error] [pid 41573:tid 41594] [client 20.226.17.188:20670] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gk.php"] [unique_id "agv9mi1A2bd6JDSW9RZgjAAAARM"]
[Tue May 19 14:05:15.028274 2026] [:error] [pid 46896:tid 46919] [client 20.226.17.188:3432] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "agv9m6CHyzL3Ci9LGE1ElgAAAZU"]
[Tue May 19 14:05:15.662265 2026] [:error] [pid 41573:tid 41588] [client 20.226.17.188:4010] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "agv9my1A2bd6JDSW9RZgjgAAAQ0"]
[Tue May 19 14:05:16.283150 2026] [:error] [pid 38814:tid 38839] [client 20.226.17.188:3375] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "agv9nAvkKuBwP0epzWd83gAAANc"]
[Tue May 19 14:05:16.900882 2026] [:error] [pid 46896:tid 46918] [client 20.226.17.188:3358] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/varb.php"] [unique_id "agv9nKCHyzL3Ci9LGE1ElwAAAZQ"]
[Tue May 19 14:05:17.521122 2026] [:error] [pid 29823:tid 29854] [client 20.226.17.188:3383] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agv9nWO09C0nAz8vRk4e1QAAAc8"]
[Tue May 19 14:05:18.143300 2026] [:error] [pid 46896:tid 46913] [client 20.226.17.188:4006] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agv9nqCHyzL3Ci9LGE1EmAAAAY8"]
[Tue May 19 14:05:18.773214 2026] [:error] [pid 46815:tid 46829] [client 20.226.17.188:3368] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agv9niPnRhJOmA06LgpLcgAAAUw"]
[Tue May 19 14:05:19.399487 2026] [:error] [pid 38699:tid 38760] [client 20.226.17.188:3343] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "agv9n7--Adsw_P-dthZ4vwAAAFI"]
[Tue May 19 14:05:20.022785 2026] [:error] [pid 38697:tid 38737] [client 20.226.17.188:20632] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agv9oKXP9pP6Kgt-msQaYwAAABY"]
[Tue May 19 14:05:20.641451 2026] [:error] [pid 46815:tid 46817] [client 20.226.17.188:3373] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agv9oCPnRhJOmA06LgpLcwAAAUA"]
[Tue May 19 14:05:21.260610 2026] [:error] [pid 38697:tid 38736] [client 20.226.17.188:20636] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agv9oaXP9pP6Kgt-msQaZgAAABU"]
[Tue May 19 14:05:21.879404 2026] [:error] [pid 38697:tid 38732] [client 20.226.17.188:4054] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/classwithtostring.php"] [unique_id "agv9oaXP9pP6Kgt-msQaZwAAABE"]
[Tue May 19 14:05:22.499037 2026] [:error] [pid 46815:tid 46826] [client 20.226.17.188:3994] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "agv9oiPnRhJOmA06LgpLdgAAAUk"]
[Tue May 19 14:05:23.130331 2026] [:error] [pid 38697:tid 38728] [client 20.226.17.188:4092] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "agv9o6XP9pP6Kgt-msQaagAAAA0"]
[Tue May 19 14:05:23.746947 2026] [:error] [pid 29823:tid 29837] [client 20.226.17.188:20631] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "agv9o2O09C0nAz8vRk4e2wAAAcI"]
[Tue May 19 14:05:24.367961 2026] [:error] [pid 29823:tid 29838] [client 20.226.17.188:3407] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/uuu.php"] [unique_id "agv9pGO09C0nAz8vRk4e3AAAAcM"]
[Tue May 19 14:05:24.987132 2026] [:error] [pid 46815:tid 46830] [client 20.226.17.188:4036] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agv9pCPnRhJOmA06LgpLeAAAAU0"]
[Tue May 19 14:05:25.606522 2026] [:error] [pid 38697:tid 38734] [client 20.226.17.188:4022] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agv9paXP9pP6Kgt-msQabAAAABM"]
[Tue May 19 14:05:26.224353 2026] [:error] [pid 38814:tid 38836] [client 20.226.17.188:30036] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agv9pgvkKuBwP0epzWd84AAAANQ"]
[Tue May 19 14:05:26.845158 2026] [:error] [pid 38697:tid 38738] [client 20.226.17.188:3429] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-good.php"] [unique_id "agv9pqXP9pP6Kgt-msQabQAAABc"]
[Tue May 19 14:05:27.477350 2026] [:error] [pid 38697:tid 38727] [client 20.226.17.188:3410] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "agv9p6XP9pP6Kgt-msQabwAAAAw"]
[Tue May 19 14:05:28.098058 2026] [:error] [pid 38697:tid 38723] [client 20.226.17.188:3422] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "agv9qKXP9pP6Kgt-msQacAAAAAg"]
[Tue May 19 14:05:28.730208 2026] [:error] [pid 46815:tid 46836] [client 20.226.17.188:3362] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "agv9qCPnRhJOmA06LgpLeQAAAVM"]
[Tue May 19 14:05:29.349321 2026] [:error] [pid 46815:tid 46841] [client 20.226.17.188:4053] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "agv9qSPnRhJOmA06LgpLegAAAVg"]
[Tue May 19 14:05:29.967027 2026] [:error] [pid 46815:tid 46831] [client 20.226.17.188:3445] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agv9qSPnRhJOmA06LgpLewAAAU4"]
[Tue May 19 14:05:30.586554 2026] [:error] [pid 38705:tid 38769] [client 20.226.17.188:4018] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agv9qsg5dNOZ5umN9ltLEQAAAIA"]
[Tue May 19 14:05:31.204032 2026] [:error] [pid 29823:tid 29841] [client 20.226.17.188:3335] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agv9q2O09C0nAz8vRk4e3wAAAcY"]
[Tue May 19 14:05:31.822594 2026] [:error] [pid 46815:tid 46839] [client 20.226.17.188:3389] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "agv9qyPnRhJOmA06LgpLfgAAAVY"]
[Tue May 19 14:05:32.450513 2026] [:error] [pid 29823:tid 29840] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Tue May 19 14:05:32.768349 2026] [:error] [pid 29823:tid 29859] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/rzki.php
[Tue May 19 14:05:33.080963 2026] [:error] [pid 29823:tid 29835] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Tue May 19 14:05:33.394936 2026] [:error] [pid 29823:tid 29861] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/G-In.php
[Tue May 19 14:05:34.022307 2026] [:error] [pid 29823:tid 29862] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue May 19 14:05:34.335615 2026] [:error] [pid 29823:tid 29849] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Tue May 19 14:05:34.648718 2026] [:error] [pid 29823:tid 29854] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Tue May 19 14:05:34.961745 2026] [:error] [pid 29823:tid 29842] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Tue May 19 14:05:35.277610 2026] [:error] [pid 29823:tid 29848] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Tue May 19 14:05:35.592815 2026] [:error] [pid 29823:tid 29860] [client 20.226.17.188:20663] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Tue May 19 14:05:35.903002 2026] [:error] [pid 29823:tid 29836] [client 20.226.17.188:20663] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agv9r2O09C0nAz8vRk4e6wAAAcE"]
[Tue May 19 14:05:36.523009 2026] [:error] [pid 46815:tid 46817] [client 20.226.17.188:20630] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agv9sCPnRhJOmA06LgpLgwAAAUA"]
[Tue May 19 14:05:37.142574 2026] [:error] [pid 38699:tid 38766] [client 20.226.17.188:4024] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agv9sb--Adsw_P-dthZ4xwAAAFg"]
[Tue May 19 14:05:37.760328 2026] [:error] [pid 38814:tid 38825] [client 20.226.17.188:3347] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a5.php"] [unique_id "agv9sQvkKuBwP0epzWd84gAAAMk"]
[Tue May 19 14:05:38.378635 2026] [:error] [pid 29823:tid 29839] [client 20.226.17.188:20624] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "agv9smO09C0nAz8vRk4e7AAAAcQ"]
[Tue May 19 14:05:38.996954 2026] [:error] [pid 38699:tid 38746] [client 20.226.17.188:3986] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "agv9sr--Adsw_P-dthZ4yQAAAEQ"]
[Tue May 19 14:05:39.618318 2026] [:error] [pid 38699:tid 38749] [client 20.226.17.188:20629] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "agv9s7--Adsw_P-dthZ4ygAAAEc"]
[Tue May 19 14:05:40.238167 2026] [:error] [pid 29823:tid 29838] [client 20.226.17.188:20620] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/nw.php"] [unique_id "agv9tGO09C0nAz8vRk4e7QAAAcM"]
[Tue May 19 14:05:40.859026 2026] [:error] [pid 38697:tid 38717] [client 20.226.17.188:30073] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "agv9tKXP9pP6Kgt-msQacQAAAAI"]
[Tue May 19 14:05:41.477343 2026] [:error] [pid 46815:tid 46841] [client 20.226.17.188:20644] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "agv9tSPnRhJOmA06LgpLhgAAAVg"]
[Tue May 19 14:05:42.094349 2026] [:error] [pid 46815:tid 46831] [client 20.226.17.188:3371] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "agv9tiPnRhJOmA06LgpLhwAAAU4"]
[Tue May 19 14:05:42.714639 2026] [:error] [pid 41573:tid 41585] [client 20.226.17.188:20666] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/155.php"] [unique_id "agv9ti1A2bd6JDSW9RZgkwAAAQo"]
[Tue May 19 14:05:43.337896 2026] [:error] [pid 29823:tid 29850] [client 20.226.17.188:4019] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "agv9t2O09C0nAz8vRk4e7wAAAcs"]
[Tue May 19 14:05:43.957115 2026] [:error] [pid 29823:tid 29853] [client 20.226.17.188:3366] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "agv9t2O09C0nAz8vRk4e8gAAAc4"]
[Tue May 19 14:05:44.579118 2026] [:error] [pid 38705:tid 38774] [client 20.226.17.188:30042] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "agv9uMg5dNOZ5umN9ltLEwAAAIU"]
[Tue May 19 14:05:45.197519 2026] [:error] [pid 29823:tid 29863] [client 20.226.17.188:3451] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/hots.php"] [unique_id "agv9uWO09C0nAz8vRk4e8wAAAdg"]
[Tue May 19 14:05:45.821026 2026] [:error] [pid 38697:tid 38719] [client 20.226.17.188:3341] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agv9uaXP9pP6Kgt-msQadQAAAAQ"]
[Tue May 19 14:05:46.443902 2026] [:error] [pid 38697:tid 38715] [client 20.226.17.188:3455] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agv9uqXP9pP6Kgt-msQadgAAAAA"]
[Tue May 19 14:05:47.062817 2026] [:error] [pid 38697:tid 38736] [client 20.226.17.188:3397] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agv9u6XP9pP6Kgt-msQadwAAABU"]
[Tue May 19 14:05:47.683014 2026] [:error] [pid 41573:tid 41581] [client 20.226.17.188:4077] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/install.php"] [unique_id "agv9uy1A2bd6JDSW9RZglQAAAQY"]
[Tue May 19 14:05:48.300687 2026] [:error] [pid 29823:tid 29859] [client 20.226.17.188:20648] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "agv9vGO09C0nAz8vRk4e9gAAAdQ"]
[Tue May 19 14:05:48.921087 2026] [:error] [pid 38814:tid 38833] [client 20.226.17.188:3985] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "agv9vAvkKuBwP0epzWd85QAAANE"]
[Tue May 19 14:05:49.555155 2026] [:error] [pid 29823:tid 29835] [client 20.226.17.188:30025] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "agv9vWO09C0nAz8vRk4e-AAAAcA"]
[Tue May 19 14:05:50.184429 2026] [:error] [pid 38699:tid 38760] [client 20.226.17.188:3336] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sadcut1.php"] [unique_id "agv9vr--Adsw_P-dthZ4zAAAAFI"]
[Tue May 19 14:05:50.828651 2026] [:error] [pid 38705:tid 38788] [client 20.226.17.188:30046] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "agv9vsg5dNOZ5umN9ltLFwAAAJM"]
[Tue May 19 14:05:51.449198 2026] [:error] [pid 38697:tid 38734] [client 20.226.17.188:30060] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "agv9v6XP9pP6Kgt-msQafAAAABM"]
[Tue May 19 14:05:52.068985 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:3355] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "agv9wCPnRhJOmA06LgpLigAAAUQ"]
[Tue May 19 14:05:52.696402 2026] [:error] [pid 46896:tid 46906] [client 20.226.17.188:3420] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/users.php"] [unique_id "agv9wKCHyzL3Ci9LGE1EnAAAAYg"]
[Tue May 19 14:05:53.317772 2026] [:error] [pid 46896:tid 46901] [client 20.226.17.188:20639] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agv9waCHyzL3Ci9LGE1EngAAAYM"]
[Tue May 19 14:05:53.939292 2026] [:error] [pid 38697:tid 38727] [client 20.226.17.188:3379] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agv9waXP9pP6Kgt-msQafwAAAAw"]
[Tue May 19 14:05:54.557963 2026] [:error] [pid 38814:tid 38818] [client 20.226.17.188:4038] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agv9wgvkKuBwP0epzWd85gAAAMI"]
[Tue May 19 14:05:55.183167 2026] [:error] [pid 41573:tid 41596] [client 20.226.17.188:20651] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "agv9wy1A2bd6JDSW9RZglgAAARU"]
[Tue May 19 14:05:55.817409 2026] [:error] [pid 38705:tid 38772] [client 20.226.17.188:4009] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "agv9w8g5dNOZ5umN9ltLGAAAAIM"]
[Tue May 19 14:05:56.469994 2026] [:error] [pid 38697:tid 38723] [client 20.226.17.188:30076] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "agv9xKXP9pP6Kgt-msQagQAAAAg"]
[Tue May 19 14:05:57.091388 2026] [:error] [pid 46896:tid 46918] [client 20.226.17.188:3354] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "agv9xaCHyzL3Ci9LGE1EpAAAAZQ"]
[Tue May 19 14:05:57.711461 2026] [:error] [pid 46896:tid 46910] [client 20.226.17.188:3353] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "agv9xaCHyzL3Ci9LGE1EpQAAAYw"]
[Tue May 19 14:05:58.331394 2026] [:error] [pid 46815:tid 46818] [client 20.226.17.188:3373] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox.php"] [unique_id "agv9xiPnRhJOmA06LgpLiwAAAUE"]
[Tue May 19 14:05:58.960359 2026] [:error] [pid 38699:tid 38744] [client 20.226.17.188:13443] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox.php"] [unique_id "agv9xr--Adsw_P-dthZ40QAAAEI"]
[Tue May 19 14:05:59.585900 2026] [:error] [pid 38705:tid 38770] [client 20.226.17.188:20641] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox.php"] [unique_id "agv9x8g5dNOZ5umN9ltLGQAAAIE"]
[Tue May 19 14:06:00.213952 2026] [:error] [pid 38699:tid 38747] [client 20.226.17.188:4023] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ox.php"] [unique_id "agv9yL--Adsw_P-dthZ40wAAAEU"]
[Tue May 19 14:06:00.836888 2026] [:error] [pid 38705:tid 38778] [client 20.226.17.188:3979] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agv9yMg5dNOZ5umN9ltLGwAAAIk"]
[Tue May 19 14:06:01.461615 2026] [:error] [pid 38705:tid 38780] [client 20.226.17.188:30016] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agv9ycg5dNOZ5umN9ltLHAAAAIs"]
[Tue May 19 14:06:02.079956 2026] [:error] [pid 46896:tid 46900] [client 20.226.17.188:3384] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agv9yqCHyzL3Ci9LGE1EqQAAAYI"]
[Tue May 19 14:06:02.699672 2026] [:error] [pid 46896:tid 46905] [client 20.226.17.188:3385] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sid3.php"] [unique_id "agv9yqCHyzL3Ci9LGE1EqgAAAYc"]
[Tue May 19 14:06:03.357884 2026] [:error] [pid 29823:tid 29836] [client 20.226.17.188:4013] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "agv9y2O09C0nAz8vRk4e-QAAAcE"]
[Tue May 19 14:06:03.993669 2026] [:error] [pid 29823:tid 29856] [client 20.226.17.188:3981] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "agv9y2O09C0nAz8vRk4e-wAAAdE"]
[Tue May 19 14:06:04.614863 2026] [:error] [pid 38814:tid 38826] [client 20.226.17.188:3980] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "agv9zAvkKuBwP0epzWd85wAAAMo"]
[Tue May 19 14:06:05.232638 2026] [:error] [pid 46896:tid 46906] [client 20.226.17.188:13468] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drhunthq.php"] [unique_id "agv9zaCHyzL3Ci9LGE1ErQAAAYg"]
[Tue May 19 14:06:05.852080 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:30030] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agv9zSPnRhJOmA06LgpLkAAAAUg"]
[Tue May 19 14:06:06.471651 2026] [:error] [pid 46815:tid 46836] [client 20.226.17.188:4027] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agv9ziPnRhJOmA06LgpLkQAAAVM"]
[Tue May 19 14:06:07.090871 2026] [:error] [pid 46896:tid 46904] [client 20.226.17.188:4001] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agv9z6CHyzL3Ci9LGE1ErgAAAYY"]
[Tue May 19 14:06:07.714191 2026] [:error] [pid 38699:tid 38751] [client 20.226.17.188:4057] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s.php"] [unique_id "agv9z7--Adsw_P-dthZ41QAAAEk"]
[Tue May 19 14:06:08.334706 2026] [:error] [pid 38699:tid 38755] [client 20.226.17.188:3987] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "agv90L--Adsw_P-dthZ41wAAAE0"]
[Tue May 19 14:06:08.958321 2026] [:error] [pid 38699:tid 38749] [client 20.226.17.188:4087] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "agv90L--Adsw_P-dthZ42gAAAEc"]
[Tue May 19 14:06:09.589051 2026] [:error] [pid 29823:tid 29837] [client 20.226.17.188:4072] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "agv90WO09C0nAz8vRk4e_AAAAcI"]
[Tue May 19 14:06:10.208342 2026] [:error] [pid 38814:tid 38840] [client 20.226.17.188:3988] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/clss.php"] [unique_id "agv90gvkKuBwP0epzWd86QAAANg"]
[Tue May 19 14:06:10.828443 2026] [:error] [pid 38699:tid 38754] [client 20.226.17.188:3380] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "agv90r--Adsw_P-dthZ43AAAAEw"]
[Tue May 19 14:06:11.449119 2026] [:error] [pid 41573:tid 41594] [client 20.226.17.188:3364] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "agv90y1A2bd6JDSW9RZgmAAAARM"]
[Tue May 19 14:06:12.068942 2026] [:error] [pid 38705:tid 38783] [client 20.226.17.188:30043] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "agv91Mg5dNOZ5umN9ltLIAAAAI4"]
[Tue May 19 14:06:12.686195 2026] [:error] [pid 41573:tid 41578] [client 20.226.17.188:30045] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mh.php"] [unique_id "agv91C1A2bd6JDSW9RZgnQAAAQM"]
[Tue May 19 14:06:13.303193 2026] [:error] [pid 38697:tid 38729] [client 20.226.17.188:30041] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "agv91aXP9pP6Kgt-msQahAAAAA4"]
[Tue May 19 14:06:13.919627 2026] [:error] [pid 38697:tid 38732] [client 20.226.17.188:4031] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "agv91aXP9pP6Kgt-msQahgAAABE"]
[Tue May 19 14:06:14.538029 2026] [:error] [pid 29823:tid 29841] [client 20.226.17.188:3404] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "agv91mO09C0nAz8vRk4fAAAAAcY"]
[Tue May 19 14:06:15.164498 2026] [:error] [pid 46815:tid 46822] [client 20.226.17.188:4012] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wen.php"] [unique_id "agv91yPnRhJOmA06LgpLlQAAAUU"]
[Tue May 19 14:06:15.784627 2026] [:error] [pid 38699:tid 38762] [client 20.226.17.188:20623] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agv917--Adsw_P-dthZ43wAAAFQ"]
[Tue May 19 14:06:16.413277 2026] [:error] [pid 46815:tid 46821] [client 20.226.17.188:20655] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agv92CPnRhJOmA06LgpLmAAAAUQ"]
[Tue May 19 14:06:17.033662 2026] [:error] [pid 46815:tid 46832] [client 20.226.17.188:30071] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agv92SPnRhJOmA06LgpLmgAAAU8"]
[Tue May 19 14:06:17.658772 2026] [:error] [pid 46815:tid 46835] [client 20.226.17.188:20616] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/Sanskrit.php"] [unique_id "agv92SPnRhJOmA06LgpLmwAAAVI"]
[Tue May 19 14:06:18.284907 2026] [:error] [pid 46896:tid 46899] [client 20.226.17.188:65248] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "agv92qCHyzL3Ci9LGE1EswAAAYE"]
[Tue May 19 14:06:18.912870 2026] [:error] [pid 46815:tid 46824] [client 20.226.17.188:13463] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "agv92iPnRhJOmA06LgpLngAAAUc"]
[Tue May 19 14:06:19.533891 2026] [:error] [pid 46815:tid 46825] [client 20.226.17.188:20614] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "agv92yPnRhJOmA06LgpLnwAAAUg"]
[Tue May 19 14:06:20.155096 2026] [:error] [pid 38705:tid 38791] [client 20.226.17.188:20617] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gettest.php"] [unique_id "agv93Mg5dNOZ5umN9ltLIwAAAJY"]
[Tue May 19 14:06:20.790852 2026] [:error] [pid 29823:tid 29861] [client 20.226.17.188:4001] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "agv93GO09C0nAz8vRk4fAgAAAdY"]
[Tue May 19 14:06:21.411271 2026] [:error] [pid 29823:tid 29851] [client 20.226.17.188:20628] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "agv93WO09C0nAz8vRk4fAwAAAcw"]
[Tue May 19 14:06:22.028717 2026] [:error] [pid 29823:tid 29862] [client 20.226.17.188:3359] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "agv93mO09C0nAz8vRk4fBAAAAdc"]
[Tue May 19 14:06:22.647692 2026] [:error] [pid 38699:tid 38756] [client 20.226.17.188:4026] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bfil.php"] [unique_id "agv93r--Adsw_P-dthZ44QAAAE4"]
[Tue May 19 14:06:23.266174 2026] [:error] [pid 38705:tid 38770] [client 20.226.17.188:3444] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "agv938g5dNOZ5umN9ltLJQAAAIE"]
[Tue May 19 14:06:23.882475 2026] [:error] [pid 29823:tid 29854] [client 20.226.17.188:13447] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "agv932O09C0nAz8vRk4fBQAAAc8"]
[Tue May 19 14:06:24.500390 2026] [:error] [pid 46896:tid 46903] [client 20.226.17.188:3989] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "agv94KCHyzL3Ci9LGE1EtQAAAYU"]
[Tue May 19 14:06:25.137608 2026] [:error] [pid 41573:tid 41582] [client 20.226.17.188:62361] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ww.php"] [unique_id "agv94S1A2bd6JDSW9RZgngAAAQc"]
[Tue May 19 14:06:25.756282 2026] [:error] [pid 38814:tid 38823] [client 20.226.17.188:30026] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "agv94QvkKuBwP0epzWd87AAAAMc"]
[Tue May 19 14:06:26.375898 2026] [:error] [pid 29823:tid 29838] [client 20.226.17.188:13459] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "agv94mO09C0nAz8vRk4fDAAAAcM"]
[Tue May 19 14:06:26.995084 2026] [:error] [pid 41573:tid 41581] [client 20.226.17.188:20654] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "agv94i1A2bd6JDSW9RZgoAAAAQY"]
[Tue May 19 14:06:27.617825 2026] [:error] [pid 29823:tid 29841] [client 20.226.17.188:4052] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/byypas.php"] [unique_id "agv942O09C0nAz8vRk4fEAAAAcY"]
[Tue May 19 14:06:28.238246 2026] [:error] [pid 38705:tid 38776] [client 20.226.17.188:4058] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agv95Mg5dNOZ5umN9ltLJgAAAIc"]
[Tue May 19 14:06:28.858022 2026] [:error] [pid 38814:tid 38827] [client 20.226.17.188:4037] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agv95AvkKuBwP0epzWd87gAAAMs"]
[Tue May 19 14:06:29.476411 2026] [:error] [pid 38705:tid 38778] [client 20.226.17.188:13450] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agv95cg5dNOZ5umN9ltLJwAAAIk"]
[Tue May 19 14:06:30.094549 2026] [:error] [pid 38814:tid 38824] [client 20.226.17.188:20661] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "agv95gvkKuBwP0epzWd87wAAAMg"]
[Tue May 19 14:06:30.712776 2026] [:error] [pid 46896:tid 46901] [client 20.226.17.188:3349] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "agv95qCHyzL3Ci9LGE1EtwAAAYM"]
[Tue May 19 14:06:31.344711 2026] [:error] [pid 38699:tid 38761] [client 20.226.17.188:3983] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "agv957--Adsw_P-dthZ45wAAAFM"]
[Tue May 19 14:06:31.969742 2026] [:error] [pid 41573:tid 41594] [client 20.226.17.188:62363] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "agv95y1A2bd6JDSW9RZgowAAARM"]
[Tue May 19 14:06:32.588259 2026] [:error] [pid 41573:tid 41580] [client 20.226.17.188:13453] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws87.php"] [unique_id "agv96C1A2bd6JDSW9RZgpAAAAQU"]
[Tue May 19 14:06:33.206762 2026] [:error] [pid 38705:tid 38785] [client 20.226.17.188:13448] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "agv96cg5dNOZ5umN9ltLKQAAAJA"]
[Tue May 19 14:06:33.863690 2026] [:error] [pid 38814:tid 38838] [client 20.226.17.188:62363] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "agv96QvkKuBwP0epzWd88AAAANY"]
[Tue May 19 14:06:34.484328 2026] [:error] [pid 38705:tid 38783] [client 20.226.17.188:3437] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa21.php"] [unique_id "agv96sg5dNOZ5umN9ltLKwAAAI4"]
[Tue May 19 14:06:35.107825 2026] [:error] [pid 38697:tid 38724] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/aa21.php
[Tue May 19 14:06:35.419404 2026] [:error] [pid 38697:tid 38738] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Tue May 19 14:06:35.730620 2026] [:error] [pid 38697:tid 38730] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/6kDPjgFTmvS.php
[Tue May 19 14:06:36.041902 2026] [:error] [pid 38697:tid 38727] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Tue May 19 14:06:36.355347 2026] [:error] [pid 38697:tid 38718] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/sale.php
[Tue May 19 14:06:36.666650 2026] [:error] [pid 38697:tid 38723] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Tue May 19 14:06:36.978707 2026] [:error] [pid 38697:tid 38720] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/wziar1.php
[Tue May 19 14:06:37.290543 2026] [:error] [pid 38697:tid 38739] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue May 19 14:06:37.602459 2026] [:error] [pid 38697:tid 38731] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue May 19 14:06:37.914157 2026] [:error] [pid 38697:tid 38726] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Tue May 19 14:06:38.225392 2026] [:error] [pid 38697:tid 38719] [client 20.226.17.188:20660] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Tue May 19 14:06:38.533752 2026] [:error] [pid 38697:tid 38736] [client 20.226.17.188:20660] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "agv97qXP9pP6Kgt-msQalgAAABU"]
[Tue May 19 14:06:39.159523 2026] [:error] [pid 38814:tid 38833] [client 20.226.17.188:30047] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "agv97wvkKuBwP0epzWd88wAAANE"]
[Tue May 19 14:06:39.779567 2026] [:error] [pid 38705:tid 38774] [client 20.226.17.188:30055] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "agv978g5dNOZ5umN9ltLLgAAAIU"]
[Tue May 19 14:06:40.398537 2026] [:error] [pid 38705:tid 38775] [client 20.226.17.188:20611] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bo.php"] [unique_id "agv98Mg5dNOZ5umN9ltLMAAAAIY"]
[Tue May 19 14:06:41.029028 2026] [:error] [pid 38705:tid 38790] [client 20.226.17.188:13499] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "agv98cg5dNOZ5umN9ltLMQAAAJU"]
[Tue May 19 14:06:41.651044 2026] [:error] [pid 38697:tid 38733] [client 20.226.17.188:20643] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "agv98aXP9pP6Kgt-msQalwAAABI"]
[Tue May 19 14:06:42.275063 2026] [:error] [pid 38697:tid 38735] [client 20.226.17.188:13482] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "agv98qXP9pP6Kgt-msQamQAAABQ"]
[Tue May 19 14:06:42.985570 2026] [:error] [pid 29823:tid 29859] [client 20.226.17.188:13444] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/zc-243.php"] [unique_id "agv98mO09C0nAz8vRk4fJAAAAdQ"]
[Tue May 19 14:06:43.623161 2026] [:error] [pid 29823:tid 29835] [client 20.226.17.188:20646] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agv982O09C0nAz8vRk4fJgAAAcA"]
[Tue May 19 14:06:44.258731 2026] [:error] [pid 41573:tid 41591] [client 20.226.17.188:30022] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agv99C1A2bd6JDSW9RZgqAAAARA"]
[Tue May 19 14:06:44.909217 2026] [:error] [pid 38814:tid 38817] [client 20.226.17.188:30028] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agv99AvkKuBwP0epzWd89gAAAME"]
[Tue May 19 14:06:45.599682 2026] [:error] [pid 46896:tid 46904] [client 20.226.17.188:30049] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws81.php"] [unique_id "agv99aCHyzL3Ci9LGE1EuAAAAYY"]
[Tue May 19 14:06:46.281353 2026] [:error] [pid 29823:tid 29847] [client 20.226.17.188:13476] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "agv99mO09C0nAz8vRk4fKQAAAcg"]
[Tue May 19 14:06:46.924519 2026] [:error] [pid 46896:tid 46915] [client 20.226.17.188:20671] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "agv99qCHyzL3Ci9LGE1EuwAAAZE"]
[Tue May 19 14:06:47.569513 2026] [:error] [pid 46896:tid 46919] [client 20.226.17.188:3377] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "agv996CHyzL3Ci9LGE1EvAAAAZU"]
[Tue May 19 14:06:48.203103 2026] [:error] [pid 46896:tid 46918] [client 20.226.17.188:3346] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/callback.php"] [unique_id "agv9-KCHyzL3Ci9LGE1EvQAAAZQ"]
[Tue May 19 14:06:48.839514 2026] [:error] [pid 38814:tid 38825] [client 20.226.17.188:20659] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "agv9-AvkKuBwP0epzWd9AwAAAMk"]
[Tue May 19 14:06:49.519332 2026] [:error] [pid 46896:tid 46913] [client 20.226.17.188:65259] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "agv9-aCHyzL3Ci9LGE1EwAAAAY8"]
[Tue May 19 14:06:50.175158 2026] [:error] [pid 29823:tid 29849] [client 20.226.17.188:3348] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "agv9-mO09C0nAz8vRk4fLgAAAco"]
[Tue May 19 14:06:50.805291 2026] [:error] [pid 46896:tid 46899] [client 20.226.17.188:3345] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sd.php"] [unique_id "agv9-qCHyzL3Ci9LGE1EwgAAAYE"]
[Tue May 19 14:06:51.558709 2026] [:error] [pid 38697:tid 38734] [client 20.226.17.188:30040] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "agv9-6XP9pP6Kgt-msQanQAAABM"]
[Tue May 19 14:06:52.298955 2026] [:error] [pid 38814:tid 38835] [client 20.226.17.188:20619] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "agv9_AvkKuBwP0epzWd9BAAAANM"]
[Tue May 19 14:06:53.043447 2026] [:error] [pid 46815:tid 46826] [client 20.226.17.188:65250] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "agv9_SPnRhJOmA06LgpLpAAAAUk"]
[Tue May 19 14:06:53.891255 2026] [:error] [pid 46896:tid 46898] [client 20.226.17.188:20613] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gpt-sh.php"] [unique_id "agv9_aCHyzL3Ci9LGE1ExAAAAYA"]
[Tue May 19 14:06:54.819555 2026] [:error] [pid 46896:tid 46900] [client 20.226.17.188:30061] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "agv9_qCHyzL3Ci9LGE1ExQAAAYI"]
[Tue May 19 14:06:55.649428 2026] [:error] [pid 38697:tid 38724] [client 20.226.17.188:65229] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "agv9_6XP9pP6Kgt-msQangAAAAk"]
[Tue May 19 14:06:56.584590 2026] [:error] [pid 46896:tid 46916] [client 20.226.17.188:13497] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "agv-AKCHyzL3Ci9LGE1ExwAAAZI"]
[Tue May 19 14:06:57.318850 2026] [:error] [pid 29823:tid 29852] [client 20.226.17.188:30035] [client 20.226.17.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/domains.php"] [unique_id "agv-AWO09C0nAz8vRk4fNAAAAc0"]
[Tue May 19 19:08:01.205747 2026] [:error] [pid 46815:tid 46835] [client 129.226.213.145:55714] [client 129.226.213.145] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agxEkSPnRhJOmA06LgpuSgAAAVI"]
[Tue May 19 21:49:04.901730 2026] [:error] [pid 55881:tid 55895] [client 43.166.238.12:39986] [client 43.166.238.12] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agxqUO-UExma0LUC7WALVgAAAkw"]
[Tue May 19 23:22:19.852171 2026] [:error] [pid 41573:tid 41577] [client 119.28.140.106:53300] [client 119.28.140.106] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agyAKy1A2bd6JDSW9RaxUwAAAQI"]
[Tue May 19 23:26:50.388800 2026] [:error] [pid 38697:tid 38715] [client 122.51.236.174:57594] [client 122.51.236.174] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "agyBOqXP9pP6Kgt-msRjlwAAAAA"]
[Wed May 20 04:41:56.647821 2026] [:error] [pid 59245:tid 59286] [client 194.62.107.162:50819] [client 194.62.107.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "agzLFKOutR70QIZRVkTOAAAAAEY"]
[Wed May 20 07:20:29.448785 2026] [:error] [pid 57834:tid 57907] [client 43.153.205.132:36110] [client 43.153.205.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "agzwPXTOfwZ09EhqoYAEUwAAApA"]
[Wed May 20 09:19:55.796714 2026] [:error] [pid 41278:tid 41319] [client 124.156.226.179:34522] [client 124.156.226.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag0MO_WiNKASEfiGdwZxBAAAAEo"]
[Wed May 20 09:42:53.902565 2026] [:error] [pid 41364:tid 41380] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 20 09:42:54.295603 2026] [:error] [pid 41364:tid 41385] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed May 20 09:42:54.670882 2026] [:error] [pid 41364:tid 41372] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed May 20 09:42:55.047585 2026] [:error] [pid 41364:tid 41369] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed May 20 09:42:55.423009 2026] [:error] [pid 41364:tid 41386] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed May 20 09:42:55.798871 2026] [:error] [pid 41364:tid 41389] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed May 20 09:42:56.174790 2026] [:error] [pid 41364:tid 41371] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Wed May 20 09:42:56.925515 2026] [:error] [pid 41364:tid 41377] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed May 20 09:42:57.304141 2026] [:error] [pid 41364:tid 41387] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Wed May 20 09:42:57.680519 2026] [:error] [pid 41364:tid 41376] [client 20.226.79.57:15921] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed May 20 09:42:58.052765 2026] [:error] [pid 41364:tid 41373] [client 20.226.79.57:15921] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ag0RohKTmyvxtNXrN-hMogAAAIc"]
[Wed May 20 09:42:59.525268 2026] [:error] [pid 44059:tid 44061] [client 20.226.79.57:11877] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ag0RoxfFs-oSOOcyjyxsbgAAAQA"]
[Wed May 20 09:43:00.988639 2026] [:error] [pid 41364:tid 41381] [client 20.226.79.57:12324] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ag0RpBKTmyvxtNXrN-hMrAAAAI8"]
[Wed May 20 09:43:02.476489 2026] [:error] [pid 41364:tid 41377] [client 20.226.79.57:15901] [client 20.226.79.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ag0RphKTmyvxtNXrN-hMtAAAAIs"]
[Wed May 20 11:15:07.659837 2026] [:error] [pid 41279:tid 41338] [client 175.178.110.121:42260] [client 175.178.110.121] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag0nO7EFyfaehGZbt4xY3wAAAMI"]
[Wed May 20 12:12:38.142870 2026] [:error] [pid 41277:tid 41302] [client 43.159.139.164:51992] [client 43.159.139.164] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag00trTTCltJmboB5ufcXwAAABQ"]
[Wed May 20 12:23:40.783825 2026] [:error] [pid 41277:tid 41305] [client 212.30.36.107:22401] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:41.774307 2026] [:error] [pid 41364:tid 41374] [client 212.30.36.146:29071] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:42.272193 2026] [:error] [pid 7664:tid 7690] [client 212.30.36.161:58617] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:42.766895 2026] [:error] [pid 41278:tid 41313] [client 212.30.36.151:39323] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 14:34:00.217755 2026] [:error] [pid 7664:tid 7668] [client 34.46.57.55:51800] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag1V2HZ8s7o3eiqT2kvOuAAAAUE"]
[Wed May 20 14:34:00.617525 2026] [:error] [pid 7731:tid 7737] [client 34.46.57.55:53488] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag1V2H9qQlHXbkl2nEuengAAAYQ"]
[Wed May 20 14:34:01.002908 2026] [:error] [pid 41364:tid 41366] [client 34.46.57.55:53282] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2RKTmyvxtNXrN-iUuAAAAIA"]
[Wed May 20 18:18:34.054722 2026] [:error] [pid 7664:tid 7686] [client 43.133.187.11:33510] [client 43.133.187.11] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag2KenZ8s7o3eiqT2kvrCwAAAVM"]
[Wed May 20 19:29:14.238402 2026] [:error] [pid 7731:tid 7748] [client 36.83.115.234:65216] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Wed May 20 19:29:14.500556 2026] [:error] [pid 7731:tid 7746] [client 36.83.115.234:65322] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Wed May 20 19:29:15.031875 2026] [:error] [pid 7731:tid 7754] [client 36.83.115.234:55989] [client 36.83.115.234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env/.env.bak"] [unique_id "ag2bC39qQlHXbkl2nEv6zAAAAZU"]
[Wed May 20 19:29:15.304146 2026] [:error] [pid 7731:tid 7753] [client 36.83.115.234:55919] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Wed May 20 22:34:30.333376 2026] [:error] [pid 7664:tid 7689] [client 43.165.7.135:52904] [client 43.165.7.135] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag3GdnZ8s7o3eiqT2ksWBAAAAVY"]
[Thu May 21 00:08:44.639390 2026] [:error] [pid 7731:tid 7745] [client 43.138.68.113:34778] [client 43.138.68.113] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag3cjH9qQlHXbkl2nEtPtwAAAYw"]
[Thu May 21 06:43:06.757686 2026] [:error] [pid 49884:tid 49964] [client 43.133.41.88:36182] [client 43.133.41.88] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag44-q5MPpsTNNHWS6jCkwAAAJE"]
[Thu May 21 09:46:50.168098 2026] [:error] [pid 49877:tid 49902] [client 164.92.236.15:53184] [client 164.92.236.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 164.92.236.15, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ag5kChgN4MeSe4kIL9AMNAAAAA4"]
[Thu May 21 09:46:50.172956 2026] [:error] [pid 49877:tid 49902] [client 164.92.236.15:53184] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu May 21 10:49:50.156819 2026] [:error] [pid 9114:tid 9122] [client 139.59.215.9:49717] [client 139.59.215.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 139.59.215.9, incrementing brute counter"] [hostname "dbservices.com.au"] [uri "/wp-login.php"] [unique_id "ag5yzm8FiJqDBEoTvqxBVwAAAUY"]
[Thu May 21 10:49:50.161863 2026] [:error] [pid 9114:tid 9122] [client 139.59.215.9:49717] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu May 21 11:15:59.542524 2026] [:error] [pid 9157:tid 9165] [client 72.14.147.239:58740] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "ag5478GfHcLNqE8m88JQwAAAAYY"]
[Thu May 21 11:16:01.742828 2026] [:error] [pid 49884:tid 49963] [client 72.14.147.239:46952] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "ag548a5MPpsTNNHWS6giCAAAAJA"]
[Thu May 21 11:16:02.010708 2026] [:error] [pid 49884:tid 49947] [client 72.14.147.239:46974] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "ag548q5MPpsTNNHWS6giCQAAAIA"]
[Thu May 21 11:16:02.024094 2026] [:error] [pid 49884:tid 49962] [client 72.14.147.239:46976] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "ag548q5MPpsTNNHWS6giCgAAAI8"]
[Thu May 21 11:16:02.207464 2026] [:error] [pid 49884:tid 49965] [client 72.14.147.239:46994] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "ag548q5MPpsTNNHWS6giCwAAAJI"]
[Thu May 21 11:16:02.207621 2026] [:error] [pid 49884:tid 49967] [client 72.14.147.239:46980] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.development"] [unique_id "ag548q5MPpsTNNHWS6giDAAAAJQ"]
[Thu May 21 11:16:02.208186 2026] [:error] [pid 49884:tid 49970] [client 72.14.147.239:46966] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "ag548q5MPpsTNNHWS6giDQAAAJc"]
[Thu May 21 11:16:02.227199 2026] [:error] [pid 49982:tid 49998] [client 72.14.147.239:47002] [client 72.14.147.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "ag548mFwIDa5Tf8O4bZuZAAAAM4"]
[Thu May 21 11:24:58.538291 2026] [:error] [pid 9114:tid 9118] [client 43.131.32.36:34510] [client 43.131.32.36] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag57Cm8FiJqDBEoTvqxEzAAAAUI"]
[Thu May 21 11:25:24.894609 2026] [:error] [pid 49877:tid 49893] [client 43.140.247.223:51146] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag57JBgN4MeSe4kIL9AT_QAAAAU"]
[Thu May 21 13:18:04.357771 2026] [:error] [pid 49982:tid 49989] [client 43.157.174.69:54044] [client 43.157.174.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag6VjGFwIDa5Tf8O4baRvQAAAMU"]
[Thu May 21 14:29:54.751896 2026] [:error] [pid 49982:tid 49990] [client 3.235.91.146:52708] [client 3.235.91.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "ag6mYmFwIDa5Tf8O4bakmAAAAMY"]
[Thu May 21 14:47:54.203084 2026] [:error] [pid 9189:tid 9242] [client 13.61.183.217:54852] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ag6qmpvTDh1NbYizKVx1-AAAAhc"]
[Thu May 21 14:47:55.522880 2026] [:error] [pid 49982:tid 49992] [client 13.61.183.217:54866] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env"] [unique_id "ag6qm2FwIDa5Tf8O4bapwwAAAMg"]
[Thu May 21 14:47:56.566713 2026] [:error] [pid 51613:tid 51618] [client 13.61.183.217:54872] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.local"] [unique_id "ag6qnGbP0MDvqrVnwerTFQAAAQM"]
[Thu May 21 14:47:57.631275 2026] [:error] [pid 49982:tid 49999] [client 13.61.183.217:54882] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.production"] [unique_id "ag6qnWFwIDa5Tf8O4bapxgAAAM8"]
[Thu May 21 14:47:58.681879 2026] [:error] [pid 9157:tid 9180] [client 13.61.183.217:54890] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.staging"] [unique_id "ag6qnsGfHcLNqE8m88JqCQAAAZU"]
[Thu May 21 14:47:59.719308 2026] [:error] [pid 49982:tid 49991] [client 13.61.183.217:54904] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.development"] [unique_id "ag6qn2FwIDa5Tf8O4bapygAAAMc"]
[Thu May 21 14:48:00.763327 2026] [:error] [pid 49982:tid 49992] [client 13.61.183.217:54920] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.test"] [unique_id "ag6qoGFwIDa5Tf8O4bapzQAAAMg"]
[Thu May 21 14:48:01.814766 2026] [:error] [pid 49877:tid 49894] [client 13.61.183.217:51628] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.remote"] [unique_id "ag6qoRgN4MeSe4kIL9AjMwAAAAY"]
[Thu May 21 14:48:02.859157 2026] [:error] [pid 9189:tid 9220] [client 13.61.183.217:51638] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.bak"] [unique_id "ag6qopvTDh1NbYizKVx1_wAAAgE"]
[Thu May 21 14:48:03.902948 2026] [:error] [pid 9157:tid 9164] [client 13.61.183.217:51640] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.backup"] [unique_id "ag6qo8GfHcLNqE8m88JqFAAAAYU"]
[Thu May 21 14:48:04.952864 2026] [:error] [pid 49877:tid 49911] [client 13.61.183.217:51648] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.save"] [unique_id "ag6qpBgN4MeSe4kIL9AjNQAAABc"]
[Thu May 21 14:48:06.007984 2026] [:error] [pid 49877:tid 49902] [client 13.61.183.217:51662] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.old"] [unique_id "ag6qphgN4MeSe4kIL9AjNgAAAA4"]
[Thu May 21 14:48:07.046940 2026] [:error] [pid 49879:tid 49943] [client 13.61.183.217:51674] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.sample"] [unique_id "ag6qp4VqYDjFSyG2gFpERAAAAFc"]
[Thu May 21 14:48:08.091456 2026] [:error] [pid 9114:tid 9131] [client 13.61.183.217:51678] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.example"] [unique_id "ag6qqG8FiJqDBEoTvqxZ6wAAAU8"]
[Thu May 21 14:48:09.146002 2026] [:error] [pid 49982:tid 49991] [client 13.61.183.217:51690] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dev"] [unique_id "ag6qqWFwIDa5Tf8O4bap0QAAAMc"]
[Thu May 21 14:48:10.184434 2026] [:error] [pid 49982:tid 49984] [client 13.61.183.217:51696] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.prod"] [unique_id "ag6qqmFwIDa5Tf8O4bap1gAAAMA"]
[Thu May 21 14:48:11.236155 2026] [:error] [pid 9188:tid 9195] [client 13.61.183.217:42274] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.stage"] [unique_id "ag6qq7GYm6q5dNSUvA-xQgAAAcM"]
[Thu May 21 14:48:12.287858 2026] [:error] [pid 9188:tid 9193] [client 13.61.183.217:42278] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.ci"] [unique_id "ag6qrLGYm6q5dNSUvA-xRQAAAcE"]
[Thu May 21 14:48:13.327059 2026] [:error] [pid 9188:tid 9198] [client 13.61.183.217:42290] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.docker"] [unique_id "ag6qrbGYm6q5dNSUvA-xSQAAAcY"]
[Thu May 21 14:48:14.370478 2026] [:error] [pid 49884:tid 49962] [client 13.61.183.217:42292] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.live"] [unique_id "ag6qrq5MPpsTNNHWS6hypwAAAI8"]
[Thu May 21 14:48:15.413829 2026] [:error] [pid 9189:tid 9230] [client 13.61.183.217:42296] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.preprod"] [unique_id "ag6qr5vTDh1NbYizKVx2BQAAAgs"]
[Thu May 21 14:48:16.466162 2026] [:error] [pid 9189:tid 9243] [client 13.61.183.217:42304] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.uat"] [unique_id "ag6qsJvTDh1NbYizKVx2CQAAAhg"]
[Thu May 21 14:48:17.517382 2026] [:error] [pid 49982:tid 50005] [client 13.61.183.217:42316] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.dist"] [unique_id "ag6qsWFwIDa5Tf8O4bap2AAAANU"]
[Thu May 21 14:48:18.555822 2026] [:error] [pid 9157:tid 9166] [client 13.61.183.217:42328] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.swp"] [unique_id "ag6qssGfHcLNqE8m88JqNgAAAYc"]
[Thu May 21 14:48:19.607730 2026] [:error] [pid 9189:tid 9232] [client 13.61.183.217:42342] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env~"] [unique_id "ag6qs5vTDh1NbYizKVx2EQAAAg0"]
[Thu May 21 14:48:20.662755 2026] [:error] [pid 9114:tid 9123] [client 13.61.183.217:42346] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env1"] [unique_id "ag6qtG8FiJqDBEoTvqxZ8QAAAUc"]
[Thu May 21 14:48:23.311318 2026] [:error] [pid 9189:tid 9230] [client 13.61.183.217:47630] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env_copy"] [unique_id "ag6qt5vTDh1NbYizKVx2FgAAAgs"]
[Thu May 21 14:48:24.361001 2026] [:error] [pid 49982:tid 50005] [client 13.61.183.217:47640] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.txt"] [unique_id "ag6quGFwIDa5Tf8O4bap7gAAANU"]
[Thu May 21 14:48:25.401119 2026] [:error] [pid 9188:tid 9206] [client 13.61.183.217:47650] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.json"] [unique_id "ag6qubGYm6q5dNSUvA-xUQAAAc4"]
[Thu May 21 14:48:26.440222 2026] [:error] [pid 9188:tid 9213] [client 13.61.183.217:47660] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.yaml"] [unique_id "ag6qurGYm6q5dNSUvA-xVAAAAdU"]
[Thu May 21 14:48:27.488147 2026] [:error] [pid 51613:tid 51630] [client 13.61.183.217:47674] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.env.yml"] [unique_id "ag6qu2bP0MDvqrVnwerTGAAAAQ8"]
[Thu May 21 14:48:28.524524 2026] [:error] [pid 9188:tid 9209] [client 13.61.183.217:47684] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/app/.env"] [unique_id "ag6qvLGYm6q5dNSUvA-xVwAAAdE"]
[Thu May 21 14:48:29.564638 2026] [:error] [pid 51613:tid 51617] [client 13.61.183.217:47692] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/apps/.env"] [unique_id "ag6qvWbP0MDvqrVnwerTGgAAAQI"]
[Thu May 21 14:48:30.614580 2026] [:error] [pid 49884:tid 49971] [client 13.61.183.217:47698] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/api/.env"] [unique_id "ag6qvq5MPpsTNNHWS6hyuwAAAJg"]
[Thu May 21 14:48:31.661922 2026] [:error] [pid 9189:tid 9221] [client 13.61.183.217:35436] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/web/.env"] [unique_id "ag6qv5vTDh1NbYizKVx2IAAAAgI"]
[Thu May 21 14:48:32.702503 2026] [:error] [pid 49982:tid 50004] [client 13.61.183.217:35452] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/site/.env"] [unique_id "ag6qwGFwIDa5Tf8O4bap9wAAANQ"]
[Thu May 21 14:48:33.744077 2026] [:error] [pid 49884:tid 49963] [client 13.61.183.217:35468] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/public/.env"] [unique_id "ag6qwa5MPpsTNNHWS6hyvgAAAJA"]
[Thu May 21 14:48:34.786205 2026] [:error] [pid 49884:tid 49967] [client 13.61.183.217:35470] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/admin/.env"] [unique_id "ag6qwq5MPpsTNNHWS6hyxgAAAJQ"]
[Thu May 21 14:48:35.838127 2026] [:error] [pid 9189:tid 9239] [client 13.61.183.217:35478] [client 13.61.183.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/backend/.env"] [unique_id "ag6qw5vTDh1NbYizKVx2JAAAAhQ"]
[Thu May 21 16:16:17.188753 2026] [:error] [pid 51613:tid 51619] [client 101.32.239.179:45194] [client 101.32.239.179] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag6_UWbP0MDvqrVnwergnQAAAQQ"]
[Thu May 21 20:46:54.760039 2026] [:error] [pid 49884:tid 49964] [client 49.51.166.228:45644] [client 49.51.166.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag7-vq5MPpsTNNHWS6jqvAAAAJE"]
[Thu May 21 22:21:00.654063 2026] [:error] [pid 51613:tid 51624] [client 43.135.134.127:60566] [client 43.135.134.127] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag8UzGbP0MDvqrVnweoORAAAAQk"]
[Thu May 21 23:24:09.812153 2026] [:error] [pid 9189:tid 9223] [client 34.150.255.112:60912] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag8jmZvTDh1NbYizKVzVSwAAAgQ"]
[Thu May 21 23:24:10.237139 2026] [:error] [pid 49884:tid 49963] [client 34.150.255.112:51875] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXiAAAAJA"]
[Thu May 21 23:24:10.665175 2026] [:error] [pid 49884:tid 49966] [client 34.150.255.112:51145] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmq5MPpsTNNHWS6gX9gAAAJM"]
[Fri May 22 00:06:43.352381 2026] [:error] [pid 9157:tid 9179] [client 162.14.66.219:51478] [client 162.14.66.219] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag8tk8GfHcLNqE8m88KmwgAAAZQ"]
[Fri May 22 01:14:03.538373 2026] [:error] [pid 9189:tid 9233] [client 38.154.97.94:56581] [client 38.154.97.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag89W5vTDh1NbYizKVzlIwAAAg4"]
[Fri May 22 01:14:03.547921 2026] [:error] [pid 38463:tid 38658] [client 38.154.97.94:50008] [client 38.154.97.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "ag89Wx4oIQTtH1fRix0bZwAAAlQ"]
[Fri May 22 01:14:03.559837 2026] [:error] [pid 9189:tid 9239] [client 38.154.97.94:60909] [client 38.154.97.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/sitemap.xml"] [unique_id "ag89W5vTDh1NbYizKVzlJAAAAhQ"]
[Fri May 22 01:14:04.904831 2026] [:error] [pid 38463:tid 38650] [client 38.154.97.94:44512] [client 38.154.97.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/robots.txt"] [unique_id "ag89XB4oIQTtH1fRix0baQAAAkw"]
[Fri May 22 01:14:04.913954 2026] [:error] [pid 9157:tid 9167] [client 38.154.97.94:53495] [client 38.154.97.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/sitemap.xml"] [unique_id "ag89XMGfHcLNqE8m88KyAgAAAYg"]
[Fri May 22 01:14:05.517740 2026] [:error] [pid 49982:tid 49987] [client 38.154.97.94:46913] [client 38.154.97.94] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag89XWFwIDa5Tf8O4bY16QAAAMM"]
[Fri May 22 03:29:45.258962 2026] [:error] [pid 49884:tid 49967] [client 43.131.243.61:38270] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag9dKa5MPpsTNNHWS6g6_gAAAJQ"]
[Fri May 22 04:04:22.217203 2026] [:error] [pid 49480:tid 49503] [client 20.195.182.185:64242] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag9lRs7gnnlW660htkYW0wAAANU"]
[Fri May 22 04:04:23.341209 2026] [:error] [pid 49390:tid 49412] [client 20.195.182.185:64201] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag9lR0fnx7H5csWqCDAbTQAAABE"]
[Fri May 22 04:04:25.334575 2026] [:error] [pid 49392:tid 49462] [client 20.195.182.185:50320] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag9lSd6KX5mDbYUc-fvBoAAAAIw"]
[Fri May 22 04:04:26.495842 2026] [:error] [pid 49480:tid 49500] [client 20.195.182.185:17927] [client 20.195.182.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ag9lSs7gnnlW660htkYW3gAAANI"]
[Fri May 22 08:47:55.207442 2026] [:error] [pid 15585:tid 15660] [client 43.157.142.101:51288] [client 43.157.142.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag-nuyKb-vB41AF-LC1_rwAAAI0"]
[Fri May 22 10:55:22.187862 2026] [:error] [pid 15679:tid 15695] [client 119.91.20.139:36412] [client 119.91.20.139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag_Fmih8tgGc38WJ-GzFYAAAAM4"]
[Fri May 22 12:08:09.655056 2026] [:error] [pid 15583:tid 15604] [client 43.157.38.228:49444] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ag_WqXnaOncRcIm17YW9GwAAABA"]
[Fri May 22 14:11:44.187198 2026] [:error] [pid 15584:tid 15627] [client 43.166.134.47:37582] [client 43.166.134.47] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ag_zoN9Z_TVLbNEx52jnaAAAAEc"]
[Fri May 22 14:43:39.241795 2026] [:error] [pid 15584:tid 15633] [client 38.43.93.182:60478] [client 38.43.93.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "ag_7G99Z_TVLbNEx52jtkwAAAE0"]
[Fri May 22 14:43:39.242493 2026] [:error] [pid 15679:tid 15700] [client 38.43.93.182:60480] [client 38.43.93.182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "ag_7Gyh8tgGc38WJ-GwHvQAAANM"]
[Fri May 22 17:11:07.724249 2026] [:error] [pid 15584:tid 15642] [client 34.93.63.75:58999] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahAdq99Z_TVLbNEx52gLxwAAAFY"]
[Fri May 22 17:11:08.011490 2026] [:error] [pid 15584:tid 15640] [client 34.93.63.75:60256] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrN9Z_TVLbNEx52gLzgAAAFQ"]
[Fri May 22 17:11:08.304841 2026] [:error] [pid 15585:tid 15650] [client 34.93.63.75:61740] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feed/"] [unique_id "ahAdrCKb-vB41AF-LC1JQwAAAIM"]
[Fri May 22 21:22:34.018731 2026] [:error] [pid 15585:tid 15662] [client 134.199.171.224:40192] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "ahBYmiKb-vB41AF-LC2ViQAAAI8"]
[Fri May 22 21:22:34.189885 2026] [:error] [pid 58782:tid 58807] [client 134.199.171.224:53712] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "ahBYmoxsdTFafgO8vhQszwAAARc"]
[Fri May 22 21:22:34.469857 2026] [:error] [pid 15679:tid 15692] [client 134.199.171.224:40204] [client 134.199.171.224] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dbservices.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahBYmih8tgGc38WJ-GxqEwAAAMs"]
[Fri May 22 21:22:34.544861 2026] [:error] [pid 15585:tid 15660] [client 134.199.171.224:40244] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/lib/jquery-file-upload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VigAAAI0"]
[Fri May 22 21:22:34.559094 2026] [:error] [pid 15679:tid 15686] [client 134.199.171.224:40232] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/lib/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqGgAAAMU"]
[Fri May 22 21:22:34.573404 2026] [:error] [pid 15584:tid 15630] [client 134.199.171.224:40198] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/static/lib/jquery-file-upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7GQAAAEo"]
[Fri May 22 21:22:34.579152 2026] [:error] [pid 15679:tid 15696] [client 134.199.171.224:40220] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqGwAAAM8"]
[Fri May 22 21:22:34.594142 2026] [:error] [pid 15584:tid 15642] [client 134.199.171.224:40236] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7GgAAAFY"]
[Fri May 22 21:22:34.609694 2026] [:error] [pid 15679:tid 15684] [client 134.199.171.224:40204] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqHAAAAMM"]
[Fri May 22 21:22:34.645298 2026] [:error] [pid 15585:tid 15665] [client 134.199.171.224:40250] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2ViwAAAJI"]
[Fri May 22 21:22:34.646459 2026] [:error] [pid 15584:tid 15644] [client 134.199.171.224:40254] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7GwAAAFg"]
[Fri May 22 21:22:34.662115 2026] [:error] [pid 15584:tid 15631] [client 134.199.171.224:40256] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7HAAAAEs"]
[Fri May 22 21:22:34.666203 2026] [:error] [pid 15679:tid 15694] [client 134.199.171.224:40260] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqHQAAAM0"]
[Fri May 22 21:22:34.677112 2026] [:error] [pid 15585:tid 15670] [client 134.199.171.224:40264] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VjAAAAJc"]
[Fri May 22 21:22:34.677729 2026] [:error] [pid 15583:tid 15593] [client 134.199.171.224:40280] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBYmnnaOncRcIm17YUdVwAAAAU"]
[Fri May 22 21:22:34.678738 2026] [:error] [pid 15583:tid 15607] [client 134.199.171.224:40286] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahBYmnnaOncRcIm17YUdWAAAABM"]
[Fri May 22 21:22:34.685742 2026] [:error] [pid 15584:tid 15626] [client 134.199.171.224:40300] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7HQAAAEY"]
[Fri May 22 21:22:34.688853 2026] [:error] [pid 15584:tid 15640] [client 134.199.171.224:40316] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7HgAAAFQ"]
[Fri May 22 21:22:34.695847 2026] [:error] [pid 15583:tid 15605] [client 134.199.171.224:40332] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahBYmnnaOncRcIm17YUdWQAAABE"]
[Fri May 22 21:22:34.696604 2026] [:error] [pid 58813:tid 58835] [client 134.199.171.224:40348] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahBYmp6yyKWDKULhxJ2NUgAAAVM"]
[Fri May 22 21:22:34.697463 2026] [:error] [pid 58813:tid 58822] [client 134.199.171.224:40364] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahBYmp6yyKWDKULhxJ2NUwAAAUY"]
[Fri May 22 21:22:34.704369 2026] [:error] [pid 15679:tid 15704] [client 134.199.171.224:40374] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqHgAAANc"]
[Fri May 22 21:22:34.708455 2026] [:error] [pid 15584:tid 15638] [client 134.199.171.224:40378] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7HwAAAFI"]
[Fri May 22 21:22:34.718766 2026] [:error] [pid 15584:tid 15634] [client 134.199.171.224:40394] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7IAAAAE4"]
[Fri May 22 21:22:34.720782 2026] [:error] [pid 15584:tid 15636] [client 134.199.171.224:40396] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7IQAAAFA"]
[Fri May 22 21:22:34.721535 2026] [:error] [pid 15585:tid 15667] [client 134.199.171.224:40402] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VjQAAAJQ"]
[Fri May 22 21:22:34.726711 2026] [:error] [pid 15585:tid 15671] [client 134.199.171.224:40408] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VjgAAAJg"]
[Fri May 22 21:22:34.732895 2026] [:error] [pid 15585:tid 15652] [client 134.199.171.224:40420] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VjwAAAIU"]
[Fri May 22 21:22:34.738898 2026] [:error] [pid 15585:tid 15658] [client 134.199.171.224:40430] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VkAAAAIs"]
[Fri May 22 21:22:34.740361 2026] [:error] [pid 15585:tid 15654] [client 134.199.171.224:40436] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VkQAAAIc"]
[Fri May 22 21:22:34.741142 2026] [:error] [pid 15585:tid 15649] [client 134.199.171.224:40432] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VkgAAAII"]
[Fri May 22 21:22:34.749702 2026] [:error] [pid 15585:tid 15663] [client 134.199.171.224:40442] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahBYmiKb-vB41AF-LC2VkwAAAJA"]
[Fri May 22 21:22:34.752129 2026] [:error] [pid 15584:tid 15632] [client 134.199.171.224:40450] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7IgAAAEw"]
[Fri May 22 21:22:34.763203 2026] [:error] [pid 15584:tid 15628] [client 134.199.171.224:40458] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7IwAAAEg"]
[Fri May 22 21:22:34.764810 2026] [:error] [pid 15679:tid 15693] [client 134.199.171.224:40474] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqHwAAAMw"]
[Fri May 22 21:22:34.765444 2026] [:error] [pid 15679:tid 15687] [client 134.199.171.224:40482] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqIAAAAMY"]
[Fri May 22 21:22:34.781282 2026] [:error] [pid 15584:tid 15643] [client 134.199.171.224:40498] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7JAAAAFc"]
[Fri May 22 21:22:34.782016 2026] [:error] [pid 15584:tid 15641] [client 134.199.171.224:40514] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7JQAAAFU"]
[Fri May 22 21:22:34.783302 2026] [:error] [pid 15584:tid 15629] [client 134.199.171.224:40522] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7JgAAAEk"]
[Fri May 22 21:22:34.784767 2026] [:error] [pid 15584:tid 15622] [client 134.199.171.224:40534] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7JwAAAEI"]
[Fri May 22 21:22:34.824082 2026] [:error] [pid 15584:tid 15620] [client 134.199.171.224:40548] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/server/php/"] [unique_id "ahBYmt9Z_TVLbNEx52g7KAAAAEA"]
[Fri May 22 21:22:34.834471 2026] [:error] [pid 15679:tid 15701] [client 134.199.171.224:40558] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqIQAAANQ"]
[Fri May 22 21:22:34.854382 2026] [:error] [pid 15679:tid 15698] [client 134.199.171.224:40574] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqIgAAANE"]
[Fri May 22 21:22:34.864948 2026] [:error] [pid 15679:tid 15705] [client 134.199.171.224:40586] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqIwAAANg"]
[Fri May 22 21:22:34.878430 2026] [:error] [pid 58813:tid 58839] [client 134.199.171.224:40600] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahBYmp6yyKWDKULhxJ2NVAAAAVc"]
[Fri May 22 21:22:34.878963 2026] [:error] [pid 15679:tid 15682] [client 134.199.171.224:40604] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqJAAAAME"]
[Fri May 22 21:22:34.895979 2026] [:error] [pid 15679:tid 15681] [client 134.199.171.224:40608] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqJQAAAMA"]
[Fri May 22 21:22:34.897029 2026] [:error] [pid 58813:tid 58816] [client 134.199.171.224:40612] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahBYmp6yyKWDKULhxJ2NVQAAAUA"]
[Fri May 22 21:22:34.919650 2026] [:error] [pid 15679:tid 15690] [client 134.199.171.224:40626] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqJgAAAMk"]
[Fri May 22 21:22:34.922327 2026] [:error] [pid 15679:tid 15691] [client 134.199.171.224:40646] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqJwAAAMo"]
[Fri May 22 21:22:34.924103 2026] [:error] [pid 15679:tid 15683] [client 134.199.171.224:40660] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqKAAAAMI"]
[Fri May 22 21:22:34.925289 2026] [:error] [pid 15679:tid 15689] [client 134.199.171.224:40640] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqKQAAAMg"]
[Fri May 22 21:22:34.927739 2026] [:error] [pid 15679:tid 15699] [client 134.199.171.224:40674] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqKgAAANI"]
[Fri May 22 21:22:34.940545 2026] [:error] [pid 15679:tid 15702] [client 134.199.171.224:40682] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqKwAAANU"]
[Fri May 22 21:22:34.940644 2026] [:error] [pid 15679:tid 15692] [client 134.199.171.224:40686] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqLAAAAMs"]
[Fri May 22 21:22:34.964334 2026] [:error] [pid 15679:tid 15685] [client 134.199.171.224:40702] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqLQAAAMQ"]
[Fri May 22 21:22:34.964847 2026] [:error] [pid 15679:tid 15688] [client 134.199.171.224:40706] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqLgAAAMc"]
[Fri May 22 21:22:34.969793 2026] [:error] [pid 15679:tid 15703] [client 134.199.171.224:40716] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqLwAAANY"]
[Fri May 22 21:22:34.970695 2026] [:error] [pid 15679:tid 15700] [client 134.199.171.224:40720] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqMAAAANM"]
[Fri May 22 21:22:34.984887 2026] [:error] [pid 15679:tid 15695] [client 134.199.171.224:40736] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahBYmih8tgGc38WJ-GxqMQAAAM4"]
[Fri May 22 21:22:35.005837 2026] [:error] [pid 15679:tid 15686] [client 134.199.171.224:40762] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBYmyh8tgGc38WJ-GxqMgAAAMU"]
[Fri May 22 21:22:35.007443 2026] [:error] [pid 15679:tid 15696] [client 134.199.171.224:40748] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahBYmyh8tgGc38WJ-GxqMwAAAM8"]
[Fri May 22 21:22:35.013800 2026] [:error] [pid 15679:tid 15694] [client 134.199.171.224:40768] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahBYmyh8tgGc38WJ-GxqNAAAAM0"]
[Fri May 22 21:22:36.367946 2026] [:error] [pid 15584:tid 15639] [client 134.199.171.224:40218] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "ahBYnN9Z_TVLbNEx52g7KwAAAFM"]
[Fri May 22 21:22:36.474095 2026] [:error] [pid 15679:tid 15705] [client 134.199.171.224:40780] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqOAAAANg"]
[Fri May 22 21:22:36.487752 2026] [:error] [pid 15679:tid 15682] [client 134.199.171.224:40794] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqOQAAAME"]
[Fri May 22 21:22:36.495540 2026] [:error] [pid 15585:tid 15657] [client 134.199.171.224:40804] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBYnCKb-vB41AF-LC2VlAAAAIo"]
[Fri May 22 21:22:36.502517 2026] [:error] [pid 15679:tid 15682] [client 134.199.171.224:40810] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqOgAAAME"]
[Fri May 22 21:22:36.504772 2026] [:error] [pid 15679:tid 15691] [client 134.199.171.224:40828] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqOwAAAMo"]
[Fri May 22 21:22:36.506079 2026] [:error] [pid 15679:tid 15683] [client 134.199.171.224:40826] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqPAAAAMI"]
[Fri May 22 21:22:36.510568 2026] [:error] [pid 15679:tid 15689] [client 134.199.171.224:40840] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqPQAAAMg"]
[Fri May 22 21:22:36.517448 2026] [:error] [pid 15679:tid 15699] [client 134.199.171.224:40848] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqPgAAANI"]
[Fri May 22 21:22:36.520201 2026] [:error] [pid 58813:tid 58832] [client 134.199.171.224:40858] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahBYnJ6yyKWDKULhxJ2NVgAAAVA"]
[Fri May 22 21:22:36.532078 2026] [:error] [pid 15679:tid 15702] [client 134.199.171.224:40866] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqPwAAANU"]
[Fri May 22 21:22:36.536809 2026] [:error] [pid 15679:tid 15692] [client 134.199.171.224:40870] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqQAAAAMs"]
[Fri May 22 21:22:36.539120 2026] [:error] [pid 15679:tid 15685] [client 134.199.171.224:40880] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqQQAAAMQ"]
[Fri May 22 21:22:36.547206 2026] [:error] [pid 15679:tid 15688] [client 134.199.171.224:40896] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqQgAAAMc"]
[Fri May 22 21:22:36.548137 2026] [:error] [pid 15585:tid 15648] [client 134.199.171.224:40912] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/server/php/"] [unique_id "ahBYnCKb-vB41AF-LC2VlQAAAIE"]
[Fri May 22 21:22:36.549801 2026] [:error] [pid 15679:tid 15703] [client 134.199.171.224:40924] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqQwAAANY"]
[Fri May 22 21:22:36.552214 2026] [:error] [pid 15585:tid 15650] [client 134.199.171.224:40926] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VlgAAAIM"]
[Fri May 22 21:22:36.553123 2026] [:error] [pid 15679:tid 15700] [client 134.199.171.224:40928] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqRAAAANM"]
[Fri May 22 21:22:36.555292 2026] [:error] [pid 15679:tid 15695] [client 134.199.171.224:40942] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqRQAAAM4"]
[Fri May 22 21:22:36.555941 2026] [:error] [pid 58813:tid 58820] [client 134.199.171.224:40934] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahBYnJ6yyKWDKULhxJ2NVwAAAUQ"]
[Fri May 22 21:22:36.563007 2026] [:error] [pid 15679:tid 15686] [client 134.199.171.224:40954] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqRgAAAMU"]
[Fri May 22 21:22:36.565896 2026] [:error] [pid 15679:tid 15696] [client 134.199.171.224:40960] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqRwAAAM8"]
[Fri May 22 21:22:36.574385 2026] [:error] [pid 15679:tid 15694] [client 134.199.171.224:40970] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqSAAAAM0"]
[Fri May 22 21:22:36.579754 2026] [:error] [pid 15679:tid 15697] [client 134.199.171.224:40972] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqSgAAANA"]
[Fri May 22 21:22:36.583026 2026] [:error] [pid 15679:tid 15684] [client 134.199.171.224:40982] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqSwAAAMM"]
[Fri May 22 21:22:36.587224 2026] [:error] [pid 15679:tid 15704] [client 134.199.171.224:40990] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqTAAAANc"]
[Fri May 22 21:22:36.589561 2026] [:error] [pid 15679:tid 15705] [client 134.199.171.224:41000] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqTQAAANg"]
[Fri May 22 21:22:36.592100 2026] [:error] [pid 15679:tid 15690] [client 134.199.171.224:41014] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqTgAAAMk"]
[Fri May 22 21:22:36.595144 2026] [:error] [pid 15679:tid 15682] [client 134.199.171.224:41026] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqTwAAAME"]
[Fri May 22 21:22:36.596592 2026] [:error] [pid 15679:tid 15691] [client 134.199.171.224:41042] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqUAAAAMo"]
[Fri May 22 21:22:36.598750 2026] [:error] [pid 15679:tid 15689] [client 134.199.171.224:41056] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqUQAAAMg"]
[Fri May 22 21:22:36.599533 2026] [:error] [pid 15583:tid 15601] [client 134.199.171.224:41046] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdWgAAAA0"]
[Fri May 22 21:22:36.608311 2026] [:error] [pid 15679:tid 15699] [client 134.199.171.224:41060] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqUgAAANI"]
[Fri May 22 21:22:36.621965 2026] [:error] [pid 15583:tid 15612] [client 134.199.171.224:41070] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahBYnHnaOncRcIm17YUdWwAAABg"]
[Fri May 22 21:22:36.632562 2026] [:error] [pid 15679:tid 15702] [client 134.199.171.224:41072] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqUwAAANU"]
[Fri May 22 21:22:36.637578 2026] [:error] [pid 15679:tid 15692] [client 134.199.171.224:41088] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahBYnCh8tgGc38WJ-GxqVAAAAMs"]
[Fri May 22 21:22:36.640712 2026] [:error] [pid 15679:tid 15685] [client 134.199.171.224:41098] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqVQAAAMQ"]
[Fri May 22 21:22:36.704376 2026] [:error] [pid 15583:tid 15594] [client 134.199.171.224:41108] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdXAAAAAY"]
[Fri May 22 21:22:36.705640 2026] [:error] [pid 15583:tid 15609] [client 134.199.171.224:41118] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdXQAAABU"]
[Fri May 22 21:22:36.719681 2026] [:error] [pid 58813:tid 58823] [client 134.199.171.224:41130] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahBYnJ6yyKWDKULhxJ2NWAAAAUc"]
[Fri May 22 21:22:36.725846 2026] [:error] [pid 15584:tid 15633] [client 134.199.171.224:41132] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7LAAAAE0"]
[Fri May 22 21:22:36.728417 2026] [:error] [pid 15585:tid 15651] [client 134.199.171.224:41148] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VlwAAAIQ"]
[Fri May 22 21:22:36.738769 2026] [:error] [pid 15583:tid 15589] [client 134.199.171.224:41154] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdXwAAAAE"]
[Fri May 22 21:22:36.742086 2026] [:error] [pid 15583:tid 15588] [client 134.199.171.224:41152] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdYAAAAAA"]
[Fri May 22 21:22:36.751196 2026] [:error] [pid 15583:tid 15595] [client 134.199.171.224:41170] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdYQAAAAc"]
[Fri May 22 21:22:36.752300 2026] [:error] [pid 15583:tid 15591] [client 134.199.171.224:41178] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdYgAAAAM"]
[Fri May 22 21:22:36.753407 2026] [:error] [pid 15583:tid 15602] [client 134.199.171.224:41186] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdYwAAAA4"]
[Fri May 22 21:22:36.767519 2026] [:error] [pid 15583:tid 15590] [client 134.199.171.224:41188] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdZAAAAAI"]
[Fri May 22 21:22:36.769423 2026] [:error] [pid 15583:tid 15602] [client 134.199.171.224:41202] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdZQAAAA4"]
[Fri May 22 21:22:36.771262 2026] [:error] [pid 15583:tid 15598] [client 134.199.171.224:41212] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdZgAAAAo"]
[Fri May 22 21:22:36.772784 2026] [:error] [pid 15583:tid 15597] [client 134.199.171.224:41224] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdZwAAAAk"]
[Fri May 22 21:22:36.784682 2026] [:error] [pid 15585:tid 15653] [client 134.199.171.224:41228] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VmAAAAIY"]
[Fri May 22 21:22:36.787374 2026] [:error] [pid 15583:tid 15611] [client 134.199.171.224:41238] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdaAAAABc"]
[Fri May 22 21:22:36.789831 2026] [:error] [pid 58782:tid 58792] [client 134.199.171.224:41246] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahBYnIxsdTFafgO8vhQs0AAAAQg"]
[Fri May 22 21:22:36.790812 2026] [:error] [pid 58813:tid 58830] [client 134.199.171.224:41244] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahBYnJ6yyKWDKULhxJ2NWQAAAU4"]
[Fri May 22 21:22:36.791279 2026] [:error] [pid 15583:tid 15606] [client 134.199.171.224:41256] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdaQAAABI"]
[Fri May 22 21:22:36.792707 2026] [:error] [pid 15585:tid 15659] [client 134.199.171.224:41258] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VmQAAAIw"]
[Fri May 22 21:22:36.793641 2026] [:error] [pid 15679:tid 15688] [client 134.199.171.224:41264] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqVwAAAMc"]
[Fri May 22 21:22:36.798082 2026] [:error] [pid 15584:tid 15624] [client 134.199.171.224:41278] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7LQAAAEQ"]
[Fri May 22 21:22:36.809373 2026] [:error] [pid 15584:tid 15637] [client 134.199.171.224:41294] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7LgAAAFE"]
[Fri May 22 21:22:36.810151 2026] [:error] [pid 15584:tid 15635] [client 134.199.171.224:41296] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7LwAAAE8"]
[Fri May 22 21:22:36.813411 2026] [:error] [pid 15585:tid 15655] [client 134.199.171.224:41312] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VmgAAAIg"]
[Fri May 22 21:22:36.814506 2026] [:error] [pid 15679:tid 15703] [client 134.199.171.224:41322] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqWAAAANY"]
[Fri May 22 21:22:36.826942 2026] [:error] [pid 15585:tid 15669] [client 134.199.171.224:41324] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VmwAAAJY"]
[Fri May 22 21:22:36.829177 2026] [:error] [pid 15583:tid 15599] [client 134.199.171.224:41328] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdagAAAAs"]
[Fri May 22 21:22:36.830628 2026] [:error] [pid 58782:tid 58799] [client 134.199.171.224:41336] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahBYnIxsdTFafgO8vhQs0QAAAQ8"]
[Fri May 22 21:22:36.833692 2026] [:error] [pid 15584:tid 15621] [client 134.199.171.224:41350] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7MAAAAEE"]
[Fri May 22 21:22:36.834493 2026] [:error] [pid 15583:tid 15604] [client 134.199.171.224:41342] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahBYnHnaOncRcIm17YUdawAAABA"]
[Fri May 22 21:22:36.835381 2026] [:error] [pid 15584:tid 15630] [client 134.199.171.224:41364] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7MQAAAEo"]
[Fri May 22 21:22:36.852439 2026] [:error] [pid 15679:tid 15700] [client 134.199.171.224:41366] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqWgAAANM"]
[Fri May 22 21:22:36.871921 2026] [:error] [pid 15679:tid 15695] [client 134.199.171.224:41380] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqWwAAAM4"]
[Fri May 22 21:22:36.874559 2026] [:error] [pid 15585:tid 15661] [client 134.199.171.224:41396] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VnAAAAI4"]
[Fri May 22 21:22:36.876081 2026] [:error] [pid 15585:tid 15666] [client 134.199.171.224:41412] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahBYnCKb-vB41AF-LC2VnQAAAJM"]
[Fri May 22 21:22:36.935200 2026] [:error] [pid 58782:tid 58786] [client 134.199.171.224:41418] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahBYnIxsdTFafgO8vhQs0gAAAQI"]
[Fri May 22 21:22:36.956046 2026] [:error] [pid 58813:tid 58829] [client 134.199.171.224:41438] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahBYnJ6yyKWDKULhxJ2NWgAAAU0"]
[Fri May 22 21:22:36.956341 2026] [:error] [pid 58813:tid 58837] [client 134.199.171.224:41426] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahBYnJ6yyKWDKULhxJ2NWwAAAVU"]
[Fri May 22 21:22:36.960006 2026] [:error] [pid 15679:tid 15696] [client 134.199.171.224:41444] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahBYnCh8tgGc38WJ-GxqXQAAAM8"]
[Fri May 22 21:22:36.975098 2026] [:error] [pid 58813:tid 58818] [client 134.199.171.224:41460] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahBYnJ6yyKWDKULhxJ2NXAAAAUI"]
[Fri May 22 21:22:36.977312 2026] [:error] [pid 58813:tid 58819] [client 134.199.171.224:41464] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahBYnJ6yyKWDKULhxJ2NXQAAAUM"]
[Fri May 22 21:22:36.979876 2026] [:error] [pid 58813:tid 58840] [client 134.199.171.224:41470] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBYnJ6yyKWDKULhxJ2NXgAAAVg"]
[Fri May 22 21:22:36.998039 2026] [:error] [pid 15584:tid 15642] [client 134.199.171.224:41480] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7MgAAAFY"]
[Fri May 22 21:22:36.998950 2026] [:error] [pid 15584:tid 15631] [client 134.199.171.224:41486] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7MwAAAEs"]
[Fri May 22 21:22:37.000069 2026] [:error] [pid 15584:tid 15644] [client 134.199.171.224:41482] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahBYnN9Z_TVLbNEx52g7NAAAAFg"]
[Fri May 22 21:22:37.003340 2026] [:error] [pid 15584:tid 15626] [client 134.199.171.224:41502] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7NQAAAEY"]
[Fri May 22 21:22:37.006261 2026] [:error] [pid 15584:tid 15640] [client 134.199.171.224:41510] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7NgAAAFQ"]
[Fri May 22 21:22:37.016958 2026] [:error] [pid 15584:tid 15638] [client 134.199.171.224:41520] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7NwAAAFI"]
[Fri May 22 21:22:37.021535 2026] [:error] [pid 15585:tid 15660] [client 134.199.171.224:41536] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBYnSKb-vB41AF-LC2VngAAAI0"]
[Fri May 22 21:22:37.021828 2026] [:error] [pid 58813:tid 58825] [client 134.199.171.224:41528] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NXwAAAUk"]
[Fri May 22 21:22:37.041453 2026] [:error] [pid 15585:tid 15665] [client 134.199.171.224:41546] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahBYnSKb-vB41AF-LC2VnwAAAJI"]
[Fri May 22 21:22:37.042124 2026] [:error] [pid 58782:tid 58803] [client 134.199.171.224:41542] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahBYnYxsdTFafgO8vhQs0wAAARM"]
[Fri May 22 21:22:37.042780 2026] [:error] [pid 58813:tid 58817] [client 134.199.171.224:41562] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NYAAAAUE"]
[Fri May 22 21:22:37.045579 2026] [:error] [pid 15583:tid 15600] [client 134.199.171.224:41572] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahBYnXnaOncRcIm17YUdbAAAAAw"]
[Fri May 22 21:22:37.047280 2026] [:error] [pid 15583:tid 15596] [client 134.199.171.224:41588] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahBYnXnaOncRcIm17YUdbQAAAAg"]
[Fri May 22 21:22:37.058705 2026] [:error] [pid 58813:tid 58824] [client 134.199.171.224:41600] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NYQAAAUg"]
[Fri May 22 21:22:37.062697 2026] [:error] [pid 58813:tid 58821] [client 134.199.171.224:41614] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NYgAAAUU"]
[Fri May 22 21:22:37.085960 2026] [:error] [pid 58782:tid 58787] [client 134.199.171.224:41620] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahBYnYxsdTFafgO8vhQs1AAAAQM"]
[Fri May 22 21:22:37.087683 2026] [:error] [pid 58813:tid 58827] [client 134.199.171.224:41632] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NYwAAAUs"]
[Fri May 22 21:22:37.206471 2026] [:error] [pid 58782:tid 58785] [client 134.199.171.224:41636] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahBYnYxsdTFafgO8vhQs1QAAAQE"]
[Fri May 22 21:22:37.222621 2026] [:error] [pid 15585:tid 15670] [client 134.199.171.224:41648] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VoAAAAJc"]
[Fri May 22 21:22:37.232943 2026] [:error] [pid 15585:tid 15671] [client 134.199.171.224:41654] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VoQAAAJg"]
[Fri May 22 21:22:37.245669 2026] [:error] [pid 15583:tid 15593] [client 134.199.171.224:41664] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUdbgAAAAU"]
[Fri May 22 21:22:37.247169 2026] [:error] [pid 15585:tid 15652] [client 134.199.171.224:41674] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahBYnSKb-vB41AF-LC2VogAAAIU"]
[Fri May 22 21:22:37.249570 2026] [:error] [pid 15583:tid 15607] [client 134.199.171.224:41690] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUdbwAAABM"]
[Fri May 22 21:22:37.252102 2026] [:error] [pid 15583:tid 15605] [client 134.199.171.224:41698] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUdcAAAABE"]
[Fri May 22 21:22:37.259332 2026] [:error] [pid 15583:tid 15601] [client 134.199.171.224:41714] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUdcQAAAA0"]
[Fri May 22 21:22:37.265849 2026] [:error] [pid 58782:tid 58794] [client 134.199.171.224:41716] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs1gAAAQo"]
[Fri May 22 21:22:37.270461 2026] [:error] [pid 58813:tid 58833] [client 134.199.171.224:41728] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NZAAAAVE"]
[Fri May 22 21:22:37.271564 2026] [:error] [pid 58813:tid 58836] [client 134.199.171.224:41742] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NZQAAAVQ"]
[Fri May 22 21:22:37.276149 2026] [:error] [pid 15584:tid 15634] [client 134.199.171.224:41744] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7OAAAAE4"]
[Fri May 22 21:22:37.282288 2026] [:error] [pid 15585:tid 15658] [client 134.199.171.224:41754] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VowAAAIs"]
[Fri May 22 21:22:37.283840 2026] [:error] [pid 15584:tid 15636] [client 134.199.171.224:41764] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7OQAAAFA"]
[Fri May 22 21:22:37.284638 2026] [:error] [pid 15583:tid 15612] [client 134.199.171.224:41772] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUdcgAAABg"]
[Fri May 22 21:22:37.288616 2026] [:error] [pid 15679:tid 15684] [client 134.199.171.224:41774] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqXwAAAMM"]
[Fri May 22 21:22:37.289779 2026] [:error] [pid 58782:tid 58784] [client 134.199.171.224:41786] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahBYnYxsdTFafgO8vhQs1wAAAQA"]
[Fri May 22 21:22:37.292862 2026] [:error] [pid 58782:tid 58795] [client 134.199.171.224:41794] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs2AAAAQs"]
[Fri May 22 21:22:37.294997 2026] [:error] [pid 15584:tid 15632] [client 134.199.171.224:41802] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7OgAAAEw"]
[Fri May 22 21:22:37.301763 2026] [:error] [pid 15679:tid 15704] [client 134.199.171.224:41808] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqYAAAANc"]
[Fri May 22 21:22:37.308252 2026] [:error] [pid 15584:tid 15628] [client 134.199.171.224:41818] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7OwAAAEg"]
[Fri May 22 21:22:37.314702 2026] [:error] [pid 15584:tid 15643] [client 134.199.171.224:41832] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7PAAAAFc"]
[Fri May 22 21:22:37.315589 2026] [:error] [pid 15584:tid 15641] [client 134.199.171.224:41834] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7PQAAAFU"]
[Fri May 22 21:22:37.319183 2026] [:error] [pid 58782:tid 58804] [client 134.199.171.224:41848] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs2QAAARQ"]
[Fri May 22 21:22:37.324485 2026] [:error] [pid 58782:tid 58806] [client 134.199.171.224:41850] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs2gAAARY"]
[Fri May 22 21:22:37.325262 2026] [:error] [pid 15584:tid 15629] [client 134.199.171.224:41860] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7PgAAAEk"]
[Fri May 22 21:22:37.326340 2026] [:error] [pid 58782:tid 58793] [client 134.199.171.224:41866] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs2wAAAQk"]
[Fri May 22 21:22:37.332029 2026] [:error] [pid 58813:tid 58828] [client 134.199.171.224:41872] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NZgAAAUw"]
[Fri May 22 21:22:37.335053 2026] [:error] [pid 15584:tid 15622] [client 134.199.171.224:41874] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7PwAAAEI"]
[Fri May 22 21:22:37.337523 2026] [:error] [pid 15585:tid 15649] [client 134.199.171.224:41882] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VpAAAAII"]
[Fri May 22 21:22:37.344770 2026] [:error] [pid 58813:tid 58838] [client 134.199.171.224:41884] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NZwAAAVY"]
[Fri May 22 21:22:37.350005 2026] [:error] [pid 15679:tid 15705] [client 134.199.171.224:41890] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqYQAAANg"]
[Fri May 22 21:22:37.357519 2026] [:error] [pid 15679:tid 15690] [client 134.199.171.224:41894] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqYgAAAMk"]
[Fri May 22 21:22:37.366922 2026] [:error] [pid 15679:tid 15682] [client 134.199.171.224:41904] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqYwAAAME"]
[Fri May 22 21:22:37.367442 2026] [:error] [pid 15679:tid 15691] [client 134.199.171.224:41920] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqZAAAAMo"]
[Fri May 22 21:22:37.369100 2026] [:error] [pid 15679:tid 15689] [client 134.199.171.224:41936] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqZQAAAMg"]
[Fri May 22 21:22:37.457834 2026] [:error] [pid 15585:tid 15663] [client 134.199.171.224:41952] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VpQAAAJA"]
[Fri May 22 21:22:37.479094 2026] [:error] [pid 15585:tid 15647] [client 134.199.171.224:41954] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VpgAAAIA"]
[Fri May 22 21:22:37.480057 2026] [:error] [pid 15679:tid 15699] [client 134.199.171.224:41966] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqZgAAANI"]
[Fri May 22 21:22:37.487132 2026] [:error] [pid 15679:tid 15702] [client 134.199.171.224:41972] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqZwAAANU"]
[Fri May 22 21:22:37.496248 2026] [:error] [pid 58782:tid 58805] [client 134.199.171.224:41982] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs3AAAARU"]
[Fri May 22 21:22:37.496386 2026] [:error] [pid 58782:tid 58791] [client 134.199.171.224:41992] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs3QAAAQc"]
[Fri May 22 21:22:37.498810 2026] [:error] [pid 15679:tid 15692] [client 134.199.171.224:42002] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqaAAAAMs"]
[Fri May 22 21:22:37.499756 2026] [:error] [pid 15679:tid 15685] [client 134.199.171.224:42004] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqaQAAAMQ"]
[Fri May 22 21:22:37.521665 2026] [:error] [pid 15585:tid 15668] [client 134.199.171.224:42010] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VpwAAAJU"]
[Fri May 22 21:22:37.522940 2026] [:error] [pid 15585:tid 15657] [client 134.199.171.224:42026] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VqAAAAIo"]
[Fri May 22 21:22:37.526347 2026] [:error] [pid 15679:tid 15693] [client 134.199.171.224:42036] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqagAAAMw"]
[Fri May 22 21:22:37.528645 2026] [:error] [pid 15585:tid 15648] [client 134.199.171.224:42046] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VqQAAAIE"]
[Fri May 22 21:22:37.534299 2026] [:error] [pid 15679:tid 15688] [client 134.199.171.224:42050] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqawAAAMc"]
[Fri May 22 21:22:37.534706 2026] [:error] [pid 15679:tid 15703] [client 134.199.171.224:42056] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqbAAAANY"]
[Fri May 22 21:22:37.535843 2026] [:error] [pid 15679:tid 15700] [client 134.199.171.224:42062] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqbQAAANM"]
[Fri May 22 21:22:37.538858 2026] [:error] [pid 15585:tid 15650] [client 134.199.171.224:42068] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VqgAAAIM"]
[Fri May 22 21:22:37.539595 2026] [:error] [pid 15585:tid 15654] [client 134.199.171.224:42064] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VqwAAAIc"]
[Fri May 22 21:22:37.540721 2026] [:error] [pid 15585:tid 15667] [client 134.199.171.224:42098] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VrAAAAJQ"]
[Fri May 22 21:22:37.543109 2026] [:error] [pid 58782:tid 58788] [client 134.199.171.224:42104] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs3gAAAQQ"]
[Fri May 22 21:22:37.544434 2026] [:error] [pid 15679:tid 15693] [client 134.199.171.224:42084] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqbgAAAMw"]
[Fri May 22 21:22:37.568714 2026] [:error] [pid 58782:tid 58801] [client 134.199.171.224:42124] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs3wAAARE"]
[Fri May 22 21:22:37.570613 2026] [:error] [pid 58813:tid 58832] [client 134.199.171.224:42110] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NagAAAVA"]
[Fri May 22 21:22:37.571958 2026] [:error] [pid 15583:tid 15594] [client 134.199.171.224:42132] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUdcwAAAAY"]
[Fri May 22 21:22:37.573060 2026] [:error] [pid 15583:tid 15609] [client 134.199.171.224:42146] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUddAAAABU"]
[Fri May 22 21:22:37.578577 2026] [:error] [pid 58782:tid 58797] [client 134.199.171.224:42158] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs4AAAAQ0"]
[Fri May 22 21:22:37.579951 2026] [:error] [pid 58782:tid 58789] [client 134.199.171.224:42170] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs4QAAAQU"]
[Fri May 22 21:22:37.584319 2026] [:error] [pid 58782:tid 58802] [client 134.199.171.224:42172] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs4gAAARI"]
[Fri May 22 21:22:37.585031 2026] [:error] [pid 58782:tid 58801] [client 134.199.171.224:42184] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs4wAAARE"]
[Fri May 22 21:22:37.585696 2026] [:error] [pid 58782:tid 58798] [client 134.199.171.224:42194] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs5AAAAQ4"]
[Fri May 22 21:22:37.587467 2026] [:error] [pid 58782:tid 58807] [client 134.199.171.224:42204] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs5QAAARc"]
[Fri May 22 21:22:37.589036 2026] [:error] [pid 15584:tid 15620] [client 134.199.171.224:42150] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7QAAAAEA"]
[Fri May 22 21:22:37.616539 2026] [:error] [pid 58782:tid 58800] [client 134.199.171.224:42212] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs5gAAARA"]
[Fri May 22 21:22:37.620767 2026] [:error] [pid 58782:tid 58796] [client 134.199.171.224:42214] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs5wAAAQw"]
[Fri May 22 21:22:37.621757 2026] [:error] [pid 15584:tid 15625] [client 134.199.171.224:42220] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7QQAAAEU"]
[Fri May 22 21:22:37.626331 2026] [:error] [pid 58782:tid 58790] [client 134.199.171.224:42230] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs6AAAAQY"]
[Fri May 22 21:22:37.627719 2026] [:error] [pid 15679:tid 15698] [client 134.199.171.224:42246] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqbwAAANE"]
[Fri May 22 21:22:37.685050 2026] [:error] [pid 58782:tid 58792] [client 134.199.171.224:42258] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs6QAAAQg"]
[Fri May 22 21:22:37.702349 2026] [:error] [pid 58782:tid 58799] [client 134.199.171.224:42272] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs6gAAAQ8"]
[Fri May 22 21:22:37.707628 2026] [:error] [pid 58782:tid 58786] [client 134.199.171.224:42282] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs6wAAAQI"]
[Fri May 22 21:22:37.717607 2026] [:error] [pid 58782:tid 58803] [client 134.199.171.224:42292] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs7AAAARM"]
[Fri May 22 21:22:37.726323 2026] [:error] [pid 58782:tid 58787] [client 134.199.171.224:42294] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs7QAAAQM"]
[Fri May 22 21:22:37.732502 2026] [:error] [pid 58782:tid 58785] [client 134.199.171.224:42302] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs7gAAAQE"]
[Fri May 22 21:22:37.735912 2026] [:error] [pid 15583:tid 15603] [client 134.199.171.224:42306] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUddQAAAA8"]
[Fri May 22 21:22:37.743048 2026] [:error] [pid 58782:tid 58794] [client 134.199.171.224:42322] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs7wAAAQo"]
[Fri May 22 21:22:37.743756 2026] [:error] [pid 58782:tid 58784] [client 134.199.171.224:42334] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs8AAAAQA"]
[Fri May 22 21:22:37.748766 2026] [:error] [pid 58782:tid 58804] [client 134.199.171.224:42336] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs8QAAARQ"]
[Fri May 22 21:22:37.762631 2026] [:error] [pid 15584:tid 15627] [client 134.199.171.224:42342] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnd9Z_TVLbNEx52g7QgAAAEc"]
[Fri May 22 21:22:37.767978 2026] [:error] [pid 58782:tid 58806] [client 134.199.171.224:42344] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs8gAAARY"]
[Fri May 22 21:22:37.775718 2026] [:error] [pid 15679:tid 15696] [client 134.199.171.224:42360] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSh8tgGc38WJ-GxqcAAAAM8"]
[Fri May 22 21:22:37.780541 2026] [:error] [pid 58782:tid 58793] [client 134.199.171.224:42376] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs8wAAAQk"]
[Fri May 22 21:22:37.786300 2026] [:error] [pid 58813:tid 58820] [client 134.199.171.224:42392] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NawAAAUQ"]
[Fri May 22 21:22:37.787214 2026] [:error] [pid 58782:tid 58805] [client 134.199.171.224:42408] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs9AAAARU"]
[Fri May 22 21:22:37.797165 2026] [:error] [pid 58782:tid 58791] [client 134.199.171.224:42418] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnYxsdTFafgO8vhQs9QAAAQc"]
[Fri May 22 21:22:37.808424 2026] [:error] [pid 58813:tid 58831] [client 134.199.171.224:42422] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NbAAAAU8"]
[Fri May 22 21:22:37.820563 2026] [:error] [pid 15585:tid 15664] [client 134.199.171.224:42432] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VrQAAAJE"]
[Fri May 22 21:22:37.823077 2026] [:error] [pid 15585:tid 15662] [client 134.199.171.224:42444] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VrgAAAI8"]
[Fri May 22 21:22:37.827991 2026] [:error] [pid 58813:tid 58823] [client 134.199.171.224:42450] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NbQAAAUc"]
[Fri May 22 21:22:37.930621 2026] [:error] [pid 58813:tid 58837] [client 134.199.171.224:42454] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NbgAAAVU"]
[Fri May 22 21:22:37.936495 2026] [:error] [pid 58813:tid 58818] [client 134.199.171.224:42458] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnZ6yyKWDKULhxJ2NbwAAAUI"]
[Fri May 22 21:22:37.964529 2026] [:error] [pid 15585:tid 15651] [client 134.199.171.224:42460] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VrwAAAIQ"]
[Fri May 22 21:22:37.973741 2026] [:error] [pid 15585:tid 15653] [client 134.199.171.224:42474] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnSKb-vB41AF-LC2VsAAAAIY"]
[Fri May 22 21:22:37.979836 2026] [:error] [pid 15583:tid 15588] [client 134.199.171.224:42482] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUddgAAAAA"]
[Fri May 22 21:22:37.980992 2026] [:error] [pid 15583:tid 15595] [client 134.199.171.224:42498] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnXnaOncRcIm17YUddwAAAAc"]
[Fri May 22 21:22:38.007166 2026] [:error] [pid 15679:tid 15694] [client 134.199.171.224:42502] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnih8tgGc38WJ-GxqcQAAAM0"]
[Fri May 22 21:22:38.015960 2026] [:error] [pid 58782:tid 58788] [client 134.199.171.224:42506] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnoxsdTFafgO8vhQs9gAAAQQ"]
[Fri May 22 21:22:38.021689 2026] [:error] [pid 58813:tid 58819] [client 134.199.171.224:42518] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnp6yyKWDKULhxJ2NcAAAAUM"]
[Fri May 22 21:22:38.023511 2026] [:error] [pid 58782:tid 58808] [client 134.199.171.224:42520] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnoxsdTFafgO8vhQs9wAAARg"]
[Fri May 22 21:22:38.052157 2026] [:error] [pid 15583:tid 15608] [client 134.199.171.224:42530] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnnnaOncRcIm17YUdeAAAABQ"]
[Fri May 22 21:22:38.065693 2026] [:error] [pid 15583:tid 15590] [client 134.199.171.224:42534] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahBYnnnaOncRcIm17YUdeQAAAAI"]
[Fri May 22 22:36:34.624925 2026] [:error] [pid 15583:tid 15591] [client 175.27.171.245:40590] [client 175.27.171.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahBp8nnaOncRcIm17YUxEwAAAAM"]
[Sat May 23 00:15:23.553336 2026] [:error] [pid 15585:tid 15661] [client 136.113.44.109:59402] [client 136.113.44.109] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.44.109, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ahCBGyKb-vB41AF-LC27EwAAAI4"]
[Sat May 23 00:15:23.557711 2026] [:error] [pid 15585:tid 15661] [client 136.113.44.109:59402] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 23 00:15:25.968635 2026] [:error] [pid 15585:tid 15669] [client 136.113.44.109:59402] [client 136.113.44.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahCBHSKb-vB41AF-LC27HwAAAJY"]
[Sat May 23 00:15:26.408447 2026] [:error] [pid 58813:tid 58837] [client 136.113.44.109:51033] [client 136.113.44.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahCBHp6yyKWDKULhxJ2oEQAAAVU"]
[Sat May 23 00:15:27.020866 2026] [:error] [pid 15583:tid 15588] [client 136.113.44.109:51470] [client 136.113.44.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ahCBH3naOncRcIm17YVUwwAAAAA"]
[Sat May 23 00:15:27.498515 2026] [:error] [pid 15585:tid 15654] [client 136.113.44.109:61721] [client 136.113.44.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ahCBHyKb-vB41AF-LC27IAAAAIc"]
[Sat May 23 00:15:27.936162 2026] [:error] [pid 15585:tid 15647] [client 136.113.44.109:51063] [client 136.113.44.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahCBHyKb-vB41AF-LC27IQAAAIA"]
[Sat May 23 00:15:28.458318 2026] [:error] [pid 15585:tid 15660] [client 136.113.44.109:50506] [client 136.113.44.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahCBICKb-vB41AF-LC27IwAAAI0"]
[Sat May 23 00:15:28.956345 2026] [:error] [pid 15585:tid 15662] [client 136.113.44.109:57584] [client 136.113.44.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ahCBICKb-vB41AF-LC27JgAAAI8"]
[Sat May 23 00:40:38.355283 2026] [:error] [pid 15583:tid 15607] [client 43.134.100.210:47444] [client 43.134.100.210] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahCHBnnaOncRcIm17YVeagAAABM"]
[Sat May 23 02:06:42.355466 2026] [:error] [pid 58782:tid 58785] [client 147.91.216.10:60690] [client 147.91.216.10] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 147.91.216.10, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ahCbMoxsdTFafgO8vhRUTQAAAQE"]
[Sat May 23 02:06:42.359295 2026] [:error] [pid 58782:tid 58785] [client 147.91.216.10:60690] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 23 04:04:58.140487 2026] [:error] [pid 30940:tid 30956] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sat May 23 04:04:58.353941 2026] [:error] [pid 30940:tid 30970] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/bootstrap.php
[Sat May 23 04:04:58.563955 2026] [:error] [pid 30940:tid 30966] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Sat May 23 04:04:58.807967 2026] [:error] [pid 30940:tid 30958] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sat May 23 04:04:59.017583 2026] [:error] [pid 30940:tid 30963] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat May 23 04:04:59.259533 2026] [:error] [pid 30940:tid 30959] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Sat May 23 04:04:59.489446 2026] [:error] [pid 30940:tid 30949] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat May 23 04:04:59.723819 2026] [:error] [pid 30940:tid 30964] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Sat May 23 04:04:59.933842 2026] [:error] [pid 30940:tid 30967] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sat May 23 04:05:00.144221 2026] [:error] [pid 30940:tid 30973] [client 20.220.211.197:64005] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Sat May 23 04:05:00.351895 2026] [:error] [pid 30940:tid 30968] [client 20.220.211.197:64005] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahC27JqUP2XZmzp7RDph8QAAABM"]
[Sat May 23 04:05:01.103497 2026] [:error] [pid 30940:tid 30953] [client 20.220.211.197:43119] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahC27ZqUP2XZmzp7RDph8gAAAAQ"]
[Sat May 23 04:05:01.869807 2026] [:error] [pid 30940:tid 30971] [client 20.220.211.197:64740] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahC27ZqUP2XZmzp7RDph9QAAABY"]
[Sat May 23 04:05:02.555609 2026] [:error] [pid 30942:tid 31026] [client 20.220.211.197:7140] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahC27tUosz64YFiBlG2XNgAAAJc"]
[Sat May 23 04:05:03.292133 2026] [:error] [pid 30942:tid 31020] [client 20.220.211.197:44776] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "ahC279Uosz64YFiBlG2XNwAAAJE"]
[Sat May 23 04:05:03.949733 2026] [:error] [pid 30942:tid 31006] [client 20.220.211.197:7069] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "ahC279Uosz64YFiBlG2XOAAAAIM"]
[Sat May 23 04:05:04.930210 2026] [:error] [pid 30942:tid 31011] [client 20.220.211.197:64024] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "ahC28NUosz64YFiBlG2XOQAAAIg"]
[Sat May 23 04:05:05.822738 2026] [:error] [pid 30942:tid 31015] [client 20.220.211.197:64741] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit-tags.php"] [unique_id "ahC28dUosz64YFiBlG2XOwAAAIw"]
[Sat May 23 04:05:08.167072 2026] [:error] [pid 31039:tid 31059] [client 20.220.211.197:55606] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ahC29KIYDYo8WvA5zLItXgAAANI"]
[Sat May 23 04:05:09.163119 2026] [:error] [pid 31039:tid 31044] [client 20.220.211.197:64038] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ahC29aIYDYo8WvA5zLItYAAAAMM"]
[Sat May 23 04:05:11.684908 2026] [:error] [pid 31039:tid 31050] [client 20.220.211.197:55599] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ahC296IYDYo8WvA5zLItZQAAAMk"]
[Sat May 23 04:05:12.964424 2026] [:error] [pid 30942:tid 31019] [client 20.220.211.197:64709] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/motu.php"] [unique_id "ahC2-NUosz64YFiBlG2XRwAAAJA"]
[Sat May 23 04:05:14.139829 2026] [:error] [pid 30941:tid 30988] [client 20.220.211.197:64711] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ahC2-nTIgjSDhiZmvlUAggAAAEw"]
[Sat May 23 04:05:15.700298 2026] [:error] [pid 31039:tid 31046] [client 20.220.211.197:47138] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ahC2-6IYDYo8WvA5zLItbAAAAMU"]
[Sat May 23 04:05:17.295426 2026] [:error] [pid 30942:tid 31020] [client 20.220.211.197:7165] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ahC2_dUosz64YFiBlG2XTQAAAJE"]
[Sat May 23 04:05:19.190426 2026] [:error] [pid 31039:tid 31042] [client 20.220.211.197:55612] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/albin.php"] [unique_id "ahC2_6IYDYo8WvA5zLItdQAAAME"]
[Sat May 23 04:05:20.997889 2026] [:error] [pid 31039:tid 31047] [client 20.220.211.197:64023] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "ahC3AKIYDYo8WvA5zLIteAAAAMY"]
[Sat May 23 04:05:21.983527 2026] [:error] [pid 30942:tid 31017] [client 20.220.211.197:55591] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "ahC3AdUosz64YFiBlG2XTwAAAI4"]
[Sat May 23 04:05:23.159305 2026] [:error] [pid 30940:tid 30966] [client 20.220.211.197:55586] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "ahC3A5qUP2XZmzp7RDph-QAAABE"]
[Sat May 23 04:05:24.307694 2026] [:error] [pid 31039:tid 31048] [client 20.220.211.197:12359] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/fone1.php"] [unique_id "ahC3BKIYDYo8WvA5zLItgQAAAMc"]
[Sat May 23 04:05:25.077538 2026] [:error] [pid 31039:tid 31055] [client 20.220.211.197:7156] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ahC3BaIYDYo8WvA5zLIthAAAAM4"]
[Sat May 23 04:05:26.908283 2026] [:error] [pid 30940:tid 30953] [client 20.220.211.197:55557] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ahC3BpqUP2XZmzp7RDph_gAAAAQ"]
[Sat May 23 04:05:29.296081 2026] [:error] [pid 30942:tid 31026] [client 20.220.211.197:43098] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ahC3CdUosz64YFiBlG2XUQAAAJc"]
[Sat May 23 04:05:30.689922 2026] [:error] [pid 31039:tid 31057] [client 20.220.211.197:47116] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ta0ol.php"] [unique_id "ahC3CqIYDYo8WvA5zLItjQAAANA"]
[Sat May 23 04:05:32.384508 2026] [:error] [pid 31039:tid 31043] [client 20.220.211.197:7141] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "ahC3DKIYDYo8WvA5zLItlAAAAMI"]
[Sat May 23 04:05:34.564448 2026] [:error] [pid 31039:tid 31051] [client 20.220.211.197:7125] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "ahC3DqIYDYo8WvA5zLItnQAAAMo"]
[Sat May 23 04:05:36.129666 2026] [:error] [pid 31039:tid 31041] [client 20.220.211.197:43134] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "ahC3EKIYDYo8WvA5zLItogAAAMA"]
[Sat May 23 04:05:37.454113 2026] [:error] [pid 30942:tid 31018] [client 20.220.211.197:7120] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/acc.php"] [unique_id "ahC3EdUosz64YFiBlG2XUwAAAI8"]
[Sat May 23 04:05:38.381752 2026] [:error] [pid 31039:tid 31062] [client 20.220.211.197:12394] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ahC3EqIYDYo8WvA5zLItpwAAANU"]
[Sat May 23 04:05:39.640065 2026] [:error] [pid 31039:tid 31063] [client 20.220.211.197:47153] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ahC3E6IYDYo8WvA5zLItqAAAANY"]
[Sat May 23 04:05:40.694121 2026] [:error] [pid 31039:tid 31046] [client 20.220.211.197:58676] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ahC3FKIYDYo8WvA5zLItqQAAAMU"]
[Sat May 23 04:05:41.669058 2026] [:error] [pid 31039:tid 31041] [client 20.220.211.197:7072] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/htto.php"] [unique_id "ahC3FaIYDYo8WvA5zLItrAAAAMA"]
[Sat May 23 04:05:43.518700 2026] [:error] [pid 30941:tid 30991] [client 20.220.211.197:64767] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ahC3F3TIgjSDhiZmvlUAiwAAAE8"]
[Sat May 23 04:05:47.629774 2026] [:error] [pid 31039:tid 31062] [client 20.220.211.197:7062] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ahC3G6IYDYo8WvA5zLItsAAAANU"]
[Sat May 23 04:05:52.036938 2026] [:error] [pid 30942:tid 31017] [client 20.220.211.197:7082] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ahC3INUosz64YFiBlG2XWgAAAI4"]
[Sat May 23 04:05:56.226187 2026] [:error] [pid 30940:tid 30962] [client 20.220.211.197:43081] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/about.php"] [unique_id "ahC3JJqUP2XZmzp7RDpiCQAAAA0"]
[Sat May 23 04:05:58.193938 2026] [:error] [pid 30941:tid 30979] [client 20.220.211.197:55594] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "ahC3JnTIgjSDhiZmvlUAnAAAAEM"]
[Sat May 23 04:05:59.092886 2026] [:error] [pid 30942:tid 31014] [client 20.220.211.197:47165] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws75.php"] [unique_id "ahC3J9Uosz64YFiBlG2XYgAAAIs"]
[Sat May 23 04:06:00.068098 2026] [:error] [pid 30940:tid 30970] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/ws75.php
[Sat May 23 04:06:00.309734 2026] [:error] [pid 30940:tid 30963] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat May 23 04:06:00.588347 2026] [:error] [pid 30940:tid 30949] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat May 23 04:06:00.799707 2026] [:error] [pid 30940:tid 30967] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Sat May 23 04:06:01.127740 2026] [:error] [pid 30940:tid 30968] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/ws73.php
[Sat May 23 04:06:01.847087 2026] [:error] [pid 30940:tid 30961] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat May 23 04:06:02.055997 2026] [:error] [pid 30940:tid 30952] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sat May 23 04:06:03.481664 2026] [:error] [pid 30940:tid 30952] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat May 23 04:06:03.691147 2026] [:error] [pid 30940:tid 30972] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Sat May 23 04:06:03.919670 2026] [:error] [pid 30940:tid 30954] [client 20.220.211.197:64725] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat May 23 04:06:04.126205 2026] [:error] [pid 30940:tid 30955] [client 20.220.211.197:64725] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ahC3LJqUP2XZmzp7RDpiGwAAAAY"]
[Sat May 23 04:06:04.694998 2026] [:error] [pid 30941:tid 30976] [client 20.220.211.197:7075] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ahC3LHTIgjSDhiZmvlUAnQAAAEA"]
[Sat May 23 04:06:05.433392 2026] [:error] [pid 30942:tid 31008] [client 20.220.211.197:43077] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ahC3LdUosz64YFiBlG2XcAAAAIU"]
[Sat May 23 04:06:06.025970 2026] [:error] [pid 30942:tid 31007] [client 20.220.211.197:7043] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/public/vx.php"] [unique_id "ahC3LtUosz64YFiBlG2XcQAAAIQ"]
[Sat May 23 04:06:06.917039 2026] [:error] [pid 30941:tid 30997] [client 20.220.211.197:47121] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "ahC3LnTIgjSDhiZmvlUAnwAAAFU"]
[Sat May 23 04:06:07.933804 2026] [:error] [pid 31039:tid 31053] [client 20.220.211.197:46572] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "ahC3L6IYDYo8WvA5zLItvwAAAMw"]
[Sat May 23 04:06:09.389315 2026] [:error] [pid 30941:tid 30999] [client 20.220.211.197:46531] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "ahC3MXTIgjSDhiZmvlUAoQAAAFc"]
[Sat May 23 04:06:10.204259 2026] [:error] [pid 30942:tid 31008] [client 20.220.211.197:47155] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ctex1.php"] [unique_id "ahC3MtUosz64YFiBlG2XdwAAAIU"]
[Sat May 23 04:06:11.082323 2026] [:error] [pid 31039:tid 31065] [client 20.220.211.197:58679] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "ahC3M6IYDYo8WvA5zLItwgAAANg"]
[Sat May 23 04:06:12.425421 2026] [:error] [pid 30940:tid 30950] [client 20.220.211.197:7046] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "ahC3NJqUP2XZmzp7RDpiIwAAAAE"]
[Sat May 23 04:06:13.326561 2026] [:error] [pid 31039:tid 31045] [client 20.220.211.197:58637] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "ahC3NaIYDYo8WvA5zLItwwAAAMQ"]
[Sat May 23 04:06:14.641127 2026] [:error] [pid 30940:tid 30958] [client 20.220.211.197:55566] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/prosellers8.php"] [unique_id "ahC3NpqUP2XZmzp7RDpiJwAAAAk"]
[Sat May 23 04:06:15.735728 2026] [:error] [pid 30942:tid 31013] [client 20.220.211.197:55579] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ahC3N9Uosz64YFiBlG2XewAAAIo"]
[Sat May 23 04:06:16.542863 2026] [:error] [pid 30942:tid 31016] [client 20.220.211.197:58675] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ahC3ONUosz64YFiBlG2XfQAAAI0"]
[Sat May 23 04:06:17.356318 2026] [:error] [pid 30942:tid 31015] [client 20.220.211.197:55556] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ahC3OdUosz64YFiBlG2XfgAAAIw"]
[Sat May 23 04:06:18.232115 2026] [:error] [pid 30942:tid 31026] [client 20.220.211.197:7102] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xsas.php"] [unique_id "ahC3OtUosz64YFiBlG2XgQAAAJc"]
[Sat May 23 04:06:18.851763 2026] [:error] [pid 30942:tid 31012] [client 20.220.211.197:12388] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ahC3OtUosz64YFiBlG2XggAAAIk"]
[Sat May 23 04:06:19.795735 2026] [:error] [pid 30940:tid 30956] [client 20.220.211.197:12373] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ahC3O5qUP2XZmzp7RDpiKgAAAAc"]
[Sat May 23 04:06:20.584904 2026] [:error] [pid 30942:tid 31022] [client 20.220.211.197:46581] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ahC3PNUosz64YFiBlG2XhAAAAJM"]
[Sat May 23 04:06:21.345514 2026] [:error] [pid 30940:tid 30958] [client 20.220.211.197:7059] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vx.php"] [unique_id "ahC3PZqUP2XZmzp7RDpiKwAAAAk"]
[Sat May 23 04:06:22.036929 2026] [:error] [pid 30940:tid 30968] [client 20.220.211.197:12353] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahC3PpqUP2XZmzp7RDpiLAAAABM"]
[Sat May 23 04:06:22.841036 2026] [:error] [pid 30942:tid 31013] [client 20.220.211.197:55574] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahC3PtUosz64YFiBlG2XhgAAAIo"]
[Sat May 23 04:06:23.475633 2026] [:error] [pid 30940:tid 30970] [client 20.220.211.197:64728] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahC3P5qUP2XZmzp7RDpiLQAAABU"]
[Sat May 23 04:06:24.316601 2026] [:error] [pid 30942:tid 31020] [client 20.220.211.197:43129] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahC3QNUosz64YFiBlG2XiQAAAJE"]
[Sat May 23 04:06:25.491830 2026] [:error] [pid 30941:tid 30995] [client 20.220.211.197:46591] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "ahC3QXTIgjSDhiZmvlUAowAAAFM"]
[Sat May 23 04:06:26.497404 2026] [:error] [pid 30942:tid 31017] [client 20.220.211.197:64756] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "ahC3QtUosz64YFiBlG2XjQAAAI4"]
[Sat May 23 04:06:28.136358 2026] [:error] [pid 31039:tid 31062] [client 20.220.211.197:46550] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "ahC3RKIYDYo8WvA5zLItxgAAANU"]
[Sat May 23 04:06:29.000192 2026] [:error] [pid 31039:tid 31064] [client 20.220.211.197:64750] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bkyac.php"] [unique_id "ahC3RKIYDYo8WvA5zLItyQAAANc"]
[Sat May 23 04:06:30.635596 2026] [:error] [pid 31039:tid 31042] [client 20.220.211.197:47120] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "ahC3RqIYDYo8WvA5zLItzAAAAME"]
[Sat May 23 04:06:32.343492 2026] [:error] [pid 31039:tid 31045] [client 20.220.211.197:43122] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "ahC3SKIYDYo8WvA5zLItzgAAAMQ"]
[Sat May 23 04:06:33.296855 2026] [:error] [pid 31039:tid 31054] [client 20.220.211.197:58633] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "ahC3SaIYDYo8WvA5zLIt0AAAAM0"]
[Sat May 23 04:06:34.544373 2026] [:error] [pid 30942:tid 31006] [client 20.220.211.197:43100] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/userfuns.php"] [unique_id "ahC3StUosz64YFiBlG2XjwAAAIM"]
[Sat May 23 04:06:35.378120 2026] [:error] [pid 30942:tid 31011] [client 20.220.211.197:46555] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "ahC3S9Uosz64YFiBlG2XkAAAAIg"]
[Sat May 23 04:06:36.326810 2026] [:error] [pid 30942:tid 31005] [client 20.220.211.197:12354] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "ahC3TNUosz64YFiBlG2XkwAAAII"]
[Sat May 23 04:06:37.853715 2026] [:error] [pid 30942:tid 31016] [client 20.220.211.197:43099] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "ahC3TdUosz64YFiBlG2XlgAAAI0"]
[Sat May 23 04:06:38.817921 2026] [:error] [pid 31039:tid 31045] [client 20.220.211.197:12384] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7logs.php"] [unique_id "ahC3TqIYDYo8WvA5zLIt1wAAAMQ"]
[Sat May 23 04:06:39.613159 2026] [:error] [pid 31039:tid 31050] [client 20.220.211.197:43131] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "ahC3T6IYDYo8WvA5zLIt2AAAAMk"]
[Sat May 23 04:06:40.691137 2026] [:error] [pid 30942:tid 31012] [client 20.220.211.197:47107] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "ahC3UNUosz64YFiBlG2XmwAAAIk"]
[Sat May 23 04:06:41.977162 2026] [:error] [pid 31039:tid 31055] [client 20.220.211.197:46588] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "ahC3UaIYDYo8WvA5zLIt3AAAAM4"]
[Sat May 23 04:06:42.998530 2026] [:error] [pid 30942:tid 31009] [client 20.220.211.197:7099] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms.php"] [unique_id "ahC3UtUosz64YFiBlG2XnwAAAIY"]
[Sat May 23 04:06:44.970987 2026] [:error] [pid 30940:tid 30957] [client 20.220.211.197:7060] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahC3VJqUP2XZmzp7RDpiOAAAAAg"]
[Sat May 23 04:06:46.380565 2026] [:error] [pid 30940:tid 30950] [client 20.220.211.197:12381] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahC3VpqUP2XZmzp7RDpiOQAAAAE"]
[Sat May 23 04:06:47.092038 2026] [:error] [pid 30940:tid 30956] [client 20.220.211.197:7133] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahC3V5qUP2XZmzp7RDpiOwAAAAc"]
[Sat May 23 04:06:47.772918 2026] [:error] [pid 30940:tid 30966] [client 20.220.211.197:64762] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahC3V5qUP2XZmzp7RDpiPAAAABE"]
[Sat May 23 04:06:48.770741 2026] [:error] [pid 30941:tid 30997] [client 20.220.211.197:46545] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ahC3WHTIgjSDhiZmvlUAugAAAFU"]
[Sat May 23 04:06:50.774056 2026] [:error] [pid 30942:tid 31022] [client 20.220.211.197:58642] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ahC3WtUosz64YFiBlG2XoAAAAJM"]
[Sat May 23 04:06:51.682007 2026] [:error] [pid 31039:tid 31065] [client 20.220.211.197:55554] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ahC3W6IYDYo8WvA5zLIt6AAAANg"]
[Sat May 23 04:06:52.524955 2026] [:error] [pid 31039:tid 31060] [client 20.220.211.197:43122] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/66.php"] [unique_id "ahC3XKIYDYo8WvA5zLIt6QAAANM"]
[Sat May 23 04:06:53.569669 2026] [:error] [pid 31039:tid 31056] [client 20.220.211.197:64761] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "ahC3XaIYDYo8WvA5zLIt6wAAAM8"]
[Sat May 23 04:06:54.722093 2026] [:error] [pid 31039:tid 31064] [client 20.220.211.197:43072] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "ahC3XqIYDYo8WvA5zLIt7AAAANc"]
[Sat May 23 04:06:55.671114 2026] [:error] [pid 31039:tid 31042] [client 20.220.211.197:12392] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "ahC3X6IYDYo8WvA5zLIt7wAAAME"]
[Sat May 23 04:06:56.250040 2026] [:error] [pid 31039:tid 31047] [client 20.220.211.197:46539] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/166.php"] [unique_id "ahC3YKIYDYo8WvA5zLIt8AAAAMY"]
[Sat May 23 04:06:56.817200 2026] [:error] [pid 31039:tid 31059] [client 20.220.211.197:47152] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "ahC3YKIYDYo8WvA5zLIt8wAAANI"]
[Sat May 23 04:06:57.490971 2026] [:error] [pid 31039:tid 31058] [client 20.220.211.197:12413] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "ahC3YaIYDYo8WvA5zLIt9AAAANE"]
[Sat May 23 04:06:58.312390 2026] [:error] [pid 31039:tid 31061] [client 20.220.211.197:64732] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "ahC3YqIYDYo8WvA5zLIt9QAAANQ"]
[Sat May 23 04:06:59.167108 2026] [:error] [pid 30942:tid 31013] [client 20.220.211.197:7075] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cwclass.php"] [unique_id "ahC3Y9Uosz64YFiBlG2XpAAAAIo"]
[Sat May 23 04:06:59.982632 2026] [:error] [pid 31039:tid 31056] [client 20.220.211.197:46563] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ahC3Y6IYDYo8WvA5zLIt9gAAAM8"]
[Sat May 23 04:07:00.532643 2026] [:error] [pid 31039:tid 31055] [client 20.220.211.197:58665] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ahC3ZKIYDYo8WvA5zLIt9wAAAM4"]
[Sat May 23 04:07:01.132917 2026] [:error] [pid 30942:tid 31025] [client 20.220.211.197:43124] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ahC3ZdUosz64YFiBlG2XpQAAAJY"]
[Sat May 23 04:07:01.618360 2026] [:error] [pid 31039:tid 31049] [client 20.220.211.197:7088] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/0x.php"] [unique_id "ahC3ZaIYDYo8WvA5zLIt-QAAAMg"]
[Sat May 23 04:07:02.054460 2026] [:error] [pid 31039:tid 31044] [client 20.220.211.197:46549] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ahC3ZqIYDYo8WvA5zLIt-gAAAMM"]
[Sat May 23 04:07:02.555060 2026] [:error] [pid 31039:tid 31043] [client 20.220.211.197:55577] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-content/radio.php"] [unique_id "ahC3ZqIYDYo8WvA5zLIt_AAAAMI"]
[Sat May 23 04:07:03.250335 2026] [:error] [pid 30941:tid 30985] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sat May 23 04:07:03.579937 2026] [:error] [pid 30941:tid 30986] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Sat May 23 04:07:03.789379 2026] [:error] [pid 30941:tid 30979] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sat May 23 04:07:03.998758 2026] [:error] [pid 30941:tid 30980] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Sat May 23 04:07:04.211038 2026] [:error] [pid 30941:tid 30995] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Sat May 23 04:07:04.426375 2026] [:error] [pid 30941:tid 30990] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 23 04:07:04.636042 2026] [:error] [pid 30941:tid 30978] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat May 23 04:07:04.846294 2026] [:error] [pid 30941:tid 30992] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Sat May 23 04:07:05.057026 2026] [:error] [pid 30941:tid 30989] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sat May 23 04:07:05.266726 2026] [:error] [pid 30941:tid 30994] [client 20.220.211.197:47135] File does not exist: /usr/local/apache/htdocs/suspended-page/55b76.php
[Sat May 23 04:07:05.473189 2026] [:error] [pid 30941:tid 30981] [client 20.220.211.197:47135] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ahC3aXTIgjSDhiZmvlUAzAAAAEU"]
[Sat May 23 04:07:05.889606 2026] [:error] [pid 30941:tid 30991] [client 20.220.211.197:7071] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ahC3aXTIgjSDhiZmvlUAzQAAAE8"]
[Sat May 23 04:07:06.318183 2026] [:error] [pid 30942:tid 31023] [client 20.220.211.197:58678] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ahC3atUosz64YFiBlG2XpwAAAJQ"]
[Sat May 23 04:07:06.784409 2026] [:error] [pid 30942:tid 31017] [client 20.220.211.197:12383] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/elp.php"] [unique_id "ahC3atUosz64YFiBlG2XqAAAAI4"]
[Sat May 23 04:07:07.200936 2026] [:error] [pid 30942:tid 31007] [client 20.220.211.197:47114] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "ahC3a9Uosz64YFiBlG2XqgAAAIQ"]
[Sat May 23 04:07:07.774575 2026] [:error] [pid 30940:tid 30952] [client 20.220.211.197:7095] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "ahC3a5qUP2XZmzp7RDpiRAAAAAM"]
[Sat May 23 04:07:08.350742 2026] [:error] [pid 30942:tid 31004] [client 20.220.211.197:43093] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "ahC3bNUosz64YFiBlG2XrAAAAIE"]
[Sat May 23 04:07:08.797776 2026] [:error] [pid 30942:tid 31027] [client 20.220.211.197:47143] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lm15.php"] [unique_id "ahC3bNUosz64YFiBlG2XrQAAAJg"]
[Sat May 23 04:07:09.232090 2026] [:error] [pid 30942:tid 31026] [client 20.220.211.197:58638] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "ahC3bdUosz64YFiBlG2XrgAAAJc"]
[Sat May 23 04:07:09.708461 2026] [:error] [pid 30942:tid 31024] [client 20.220.211.197:64753] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "ahC3bdUosz64YFiBlG2XrwAAAJU"]
[Sat May 23 04:07:10.238318 2026] [:error] [pid 30942:tid 31019] [client 20.220.211.197:44744] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "ahC3btUosz64YFiBlG2XsAAAAJA"]
[Sat May 23 04:07:10.810603 2026] [:error] [pid 31039:tid 31052] [client 20.220.211.197:55590] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2ksm17n.php"] [unique_id "ahC3bqIYDYo8WvA5zLIuCwAAAMs"]
[Sat May 23 04:07:11.292830 2026] [:error] [pid 31039:tid 31053] [client 20.220.211.197:64734] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahC3b6IYDYo8WvA5zLIuDQAAAMw"]
[Sat May 23 04:07:11.777367 2026] [:error] [pid 31039:tid 31054] [client 20.220.211.197:7052] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahC3b6IYDYo8WvA5zLIuDwAAAM0"]
[Sat May 23 04:07:12.268942 2026] [:error] [pid 30942:tid 31009] [client 20.220.211.197:50685] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahC3cNUosz64YFiBlG2XsgAAAIY"]
[Sat May 23 04:07:14.082371 2026] [:error] [pid 31039:tid 31047] [client 20.220.211.197:42477] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahC3cqIYDYo8WvA5zLIuEgAAAMY"]
[Sat May 23 04:07:15.088291 2026] [:error] [pid 30940:tid 30960] [client 20.220.211.197:12379] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "ahC3c5qUP2XZmzp7RDpiUAAAAAs"]
[Sat May 23 04:07:15.872182 2026] [:error] [pid 30940:tid 30952] [client 20.220.211.197:43088] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "ahC3c5qUP2XZmzp7RDpiUQAAAAM"]
[Sat May 23 04:07:16.805798 2026] [:error] [pid 30940:tid 30953] [client 20.220.211.197:43107] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "ahC3dJqUP2XZmzp7RDpiVAAAAAQ"]
[Sat May 23 04:07:17.889410 2026] [:error] [pid 30941:tid 30977] [client 20.220.211.197:7070] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xper1.php"] [unique_id "ahC3dXTIgjSDhiZmvlUA0wAAAEE"]
[Sat May 23 04:07:18.469071 2026] [:error] [pid 31039:tid 31047] [client 20.220.211.197:64748] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "ahC3dqIYDYo8WvA5zLIuGQAAAMY"]
[Sat May 23 04:07:19.156782 2026] [:error] [pid 31039:tid 31048] [client 20.220.211.197:55615] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "ahC3d6IYDYo8WvA5zLIuHAAAAMc"]
[Sat May 23 04:07:19.787698 2026] [:error] [pid 30940:tid 30963] [client 20.220.211.197:64716] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "ahC3d5qUP2XZmzp7RDpiVwAAAA4"]
[Sat May 23 04:07:20.786708 2026] [:error] [pid 31039:tid 31042] [client 20.220.211.197:58632] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bnm.php"] [unique_id "ahC3eKIYDYo8WvA5zLIuIAAAAME"]
[Sat May 23 04:07:21.650420 2026] [:error] [pid 31039:tid 31043] [client 20.220.211.197:47109] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "ahC3eaIYDYo8WvA5zLIuIgAAAMI"]
[Sat May 23 04:07:22.406761 2026] [:error] [pid 31039:tid 31058] [client 20.220.211.197:58652] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "ahC3eqIYDYo8WvA5zLIuIwAAANE"]
[Sat May 23 04:07:22.880115 2026] [:error] [pid 30942:tid 31004] [client 20.220.211.197:47117] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "ahC3etUosz64YFiBlG2XuAAAAIE"]
[Sat May 23 04:07:23.676057 2026] [:error] [pid 31039:tid 31056] [client 20.220.211.197:12409] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vanda.php"] [unique_id "ahC3e6IYDYo8WvA5zLIuJgAAAM8"]
[Sat May 23 04:07:24.338525 2026] [:error] [pid 31039:tid 31060] [client 20.220.211.197:12415] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ahC3fKIYDYo8WvA5zLIuJwAAANM"]
[Sat May 23 04:07:24.877713 2026] [:error] [pid 30941:tid 30984] [client 20.220.211.197:43120] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ahC3fHTIgjSDhiZmvlUA1wAAAEg"]
[Sat May 23 04:07:25.456182 2026] [:error] [pid 31039:tid 31061] [client 20.220.211.197:58104] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ahC3faIYDYo8WvA5zLIuLAAAANQ"]
[Sat May 23 04:07:25.874370 2026] [:error] [pid 31039:tid 31058] [client 20.220.211.197:43117] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bgymj.php"] [unique_id "ahC3faIYDYo8WvA5zLIuLgAAANE"]
[Sat May 23 04:07:26.400656 2026] [:error] [pid 31039:tid 31044] [client 20.220.211.197:58684] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ahC3fqIYDYo8WvA5zLIuLwAAAMM"]
[Sat May 23 04:07:26.838701 2026] [:error] [pid 30941:tid 30999] [client 20.220.211.197:58651] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ahC3fnTIgjSDhiZmvlUA2AAAAFc"]
[Sat May 23 04:07:27.413740 2026] [:error] [pid 31039:tid 31062] [client 20.220.211.197:43121] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ahC3f6IYDYo8WvA5zLIuMAAAANU"]
[Sat May 23 04:07:27.873610 2026] [:error] [pid 31039:tid 31054] [client 20.220.211.197:12355] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tx79.php"] [unique_id "ahC3f6IYDYo8WvA5zLIuMgAAAM0"]
[Sat May 23 04:07:28.323462 2026] [:error] [pid 30941:tid 30979] [client 20.220.211.197:55582] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "ahC3gHTIgjSDhiZmvlUA2wAAAEM"]
[Sat May 23 04:07:28.804197 2026] [:error] [pid 30941:tid 30978] [client 20.220.211.197:44779] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "ahC3gHTIgjSDhiZmvlUA3AAAAEI"]
[Sat May 23 04:07:29.242178 2026] [:error] [pid 30941:tid 30992] [client 20.220.211.197:42441] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "ahC3gXTIgjSDhiZmvlUA3QAAAFA"]
[Sat May 23 04:07:30.031890 2026] [:error] [pid 30941:tid 30989] [client 20.220.211.197:7114] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asasx.php"] [unique_id "ahC3gnTIgjSDhiZmvlUA3gAAAE0"]
[Sat May 23 04:07:30.715190 2026] [:error] [pid 30941:tid 30993] [client 20.220.211.197:47141] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "ahC3gnTIgjSDhiZmvlUA4AAAAFE"]
[Sat May 23 04:07:31.669947 2026] [:error] [pid 30940:tid 30950] [client 20.220.211.197:55591] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "ahC3g5qUP2XZmzp7RDpiXgAAAAE"]
[Sat May 23 04:07:32.583779 2026] [:error] [pid 30940:tid 30962] [client 20.220.211.197:55562] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "ahC3hJqUP2XZmzp7RDpiYQAAAA0"]
[Sat May 23 04:07:33.774748 2026] [:error] [pid 30941:tid 30984] [client 20.220.211.197:46556] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lb.php"] [unique_id "ahC3hXTIgjSDhiZmvlUA5QAAAEg"]
[Sat May 23 04:07:35.106342 2026] [:error] [pid 31039:tid 31055] [client 20.220.211.197:55593] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ahC3h6IYDYo8WvA5zLIuNQAAAM4"]
[Sat May 23 04:07:36.065617 2026] [:error] [pid 31039:tid 31060] [client 20.220.211.197:46577] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ahC3iKIYDYo8WvA5zLIuNgAAANM"]
[Sat May 23 04:07:36.932768 2026] [:error] [pid 30941:tid 30980] [client 20.220.211.197:44770] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ahC3iHTIgjSDhiZmvlUA5wAAAEQ"]
[Sat May 23 04:07:38.158429 2026] [:error] [pid 30942:tid 31006] [client 20.220.211.197:12370] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abrand.php"] [unique_id "ahC3itUosz64YFiBlG2XvwAAAIM"]
[Sat May 23 04:07:38.911951 2026] [:error] [pid 31039:tid 31045] [client 20.220.211.197:58636] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "ahC3iqIYDYo8WvA5zLIuOwAAAMQ"]
[Sat May 23 04:07:40.190679 2026] [:error] [pid 30941:tid 30997] [client 20.220.211.197:47109] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "ahC3jHTIgjSDhiZmvlUA7AAAAFU"]
[Sat May 23 04:07:40.947751 2026] [:error] [pid 31039:tid 31042] [client 20.220.211.197:55569] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "ahC3jKIYDYo8WvA5zLIuRAAAAME"]
[Sat May 23 04:07:42.020948 2026] [:error] [pid 31039:tid 31048] [client 20.220.211.197:47145] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ws49.php"] [unique_id "ahC3jqIYDYo8WvA5zLIuRwAAAMc"]
[Sat May 23 04:07:43.784124 2026] [:error] [pid 30942:tid 31010] [client 20.220.211.197:12363] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ahC3j9Uosz64YFiBlG2XwQAAAIc"]
[Sat May 23 04:07:45.784116 2026] [:error] [pid 30942:tid 31015] [client 20.220.211.197:12369] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ahC3kdUosz64YFiBlG2XxQAAAIw"]
[Sat May 23 04:07:46.853797 2026] [:error] [pid 31039:tid 31061] [client 20.220.211.197:64759] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ahC3kqIYDYo8WvA5zLIuSQAAANQ"]
[Sat May 23 04:07:47.393628 2026] [:error] [pid 31039:tid 31058] [client 20.220.211.197:46554] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/abc.php"] [unique_id "ahC3k6IYDYo8WvA5zLIuSgAAANE"]
[Sat May 23 04:07:48.396088 2026] [:error] [pid 30940:tid 30961] [client 20.220.211.197:7137] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "ahC3lJqUP2XZmzp7RDpiagAAAAw"]
[Sat May 23 04:07:49.357301 2026] [:error] [pid 30942:tid 31017] [client 20.220.211.197:64056] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "ahC3ldUosz64YFiBlG2XxwAAAI4"]
[Sat May 23 04:07:50.266373 2026] [:error] [pid 30942:tid 31004] [client 20.220.211.197:64726] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "ahC3ltUosz64YFiBlG2XyAAAAIE"]
[Sat May 23 04:07:51.043050 2026] [:error] [pid 30942:tid 31022] [client 20.220.211.197:58672] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/56c53.php"] [unique_id "ahC3l9Uosz64YFiBlG2XyQAAAJM"]
[Sat May 23 04:07:51.821138 2026] [:error] [pid 30941:tid 30990] [client 20.220.211.197:42449] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "ahC3l3TIgjSDhiZmvlUBAgAAAE4"]
[Sat May 23 04:07:53.145030 2026] [:error] [pid 30940:tid 30969] [client 20.220.211.197:43076] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "ahC3mZqUP2XZmzp7RDpibQAAABQ"]
[Sat May 23 04:07:53.991527 2026] [:error] [pid 30941:tid 30986] [client 20.220.211.197:64706] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "ahC3mXTIgjSDhiZmvlUBBQAAAEo"]
[Sat May 23 04:07:54.944213 2026] [:error] [pid 30942:tid 31025] [client 20.220.211.197:64062] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/d12.php"] [unique_id "ahC3mtUosz64YFiBlG2XzgAAAJY"]
[Sat May 23 04:07:56.355743 2026] [:error] [pid 30941:tid 30997] [client 20.220.211.197:64749] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ahC3nHTIgjSDhiZmvlUBCQAAAFU"]
[Sat May 23 04:07:57.081781 2026] [:error] [pid 30942:tid 31003] [client 20.220.211.197:64730] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ahC3ndUosz64YFiBlG2XzwAAAIA"]
[Sat May 23 04:07:58.059753 2026] [:error] [pid 30941:tid 30999] [client 20.220.211.197:7121] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ahC3nnTIgjSDhiZmvlUBCwAAAFc"]
[Sat May 23 04:07:58.876903 2026] [:error] [pid 30941:tid 30988] [client 20.220.211.197:7065] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/atomlib.php"] [unique_id "ahC3nnTIgjSDhiZmvlUBDgAAAEw"]
[Sat May 23 04:08:00.078396 2026] [:error] [pid 30941:tid 30992] [client 20.220.211.197:12390] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "ahC3oHTIgjSDhiZmvlUBEAAAAFA"]
[Sat May 23 04:08:00.906973 2026] [:error] [pid 30942:tid 31026] [client 20.220.211.197:46583] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "ahC3oNUosz64YFiBlG2X0wAAAJc"]
[Sat May 23 04:08:01.826370 2026] [:error] [pid 30940:tid 30952] [client 20.220.211.197:55610] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "ahC3oZqUP2XZmzp7RDpidAAAAAM"]
[Sat May 23 04:08:03.892207 2026] [:error] [pid 31039:tid 31061] [client 20.220.211.197:43083] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/inege.php"] [unique_id "ahC3o6IYDYo8WvA5zLIuWwAAANQ"]
[Sat May 23 04:08:05.383775 2026] [:error] [pid 31039:tid 31046] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat May 23 04:08:05.607120 2026] [:error] [pid 31039:tid 31043] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat May 23 04:08:05.833055 2026] [:error] [pid 31039:tid 31051] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat May 23 04:08:06.057098 2026] [:error] [pid 31039:tid 31044] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat May 23 04:08:06.268101 2026] [:error] [pid 31039:tid 31049] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Sat May 23 04:08:06.477835 2026] [:error] [pid 31039:tid 31050] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/crgio.php
[Sat May 23 04:08:06.700979 2026] [:error] [pid 31039:tid 31059] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat May 23 04:08:06.912584 2026] [:error] [pid 31039:tid 31048] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/atkno.php
[Sat May 23 04:08:07.122287 2026] [:error] [pid 31039:tid 31047] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Sat May 23 04:08:07.353737 2026] [:error] [pid 31039:tid 31041] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/ljbluatr.php
[Sat May 23 04:08:07.563542 2026] [:error] [pid 31039:tid 31063] [client 20.220.211.197:7054] File does not exist: /usr/local/apache/htdocs/suspended-page/luuinooe.php
[Sat May 23 04:08:07.790633 2026] [:error] [pid 31039:tid 31055] [client 20.220.211.197:7054] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqdwwzge.php"] [unique_id "ahC3p6IYDYo8WvA5zLIuaQAAAM4"]
[Sat May 23 04:08:08.389284 2026] [:error] [pid 30942:tid 31023] [client 20.220.211.197:55581] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqdwwzge.php"] [unique_id "ahC3qNUosz64YFiBlG2X3wAAAJQ"]
[Sat May 23 04:08:09.380769 2026] [:error] [pid 31039:tid 31046] [client 20.220.211.197:7048] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqdwwzge.php"] [unique_id "ahC3qaIYDYo8WvA5zLIubAAAAMU"]
[Sat May 23 04:08:10.502921 2026] [:error] [pid 30941:tid 30991] [client 20.220.211.197:7040] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/qqdwwzge.php"] [unique_id "ahC3qnTIgjSDhiZmvlUBGwAAAE8"]
[Sat May 23 04:08:11.820666 2026] [:error] [pid 30941:tid 30993] [client 20.220.211.197:7067] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jid0mtxz.php"] [unique_id "ahC3q3TIgjSDhiZmvlUBHgAAAFE"]
[Sat May 23 04:08:13.238078 2026] [:error] [pid 30941:tid 30995] [client 20.220.211.197:55058] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jid0mtxz.php"] [unique_id "ahC3rXTIgjSDhiZmvlUBIgAAAFM"]
[Sat May 23 04:08:13.884914 2026] [:error] [pid 31039:tid 31060] [client 20.220.211.197:63222] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jid0mtxz.php"] [unique_id "ahC3raIYDYo8WvA5zLIudQAAANM"]
[Sat May 23 04:08:14.462293 2026] [:error] [pid 30940:tid 30968] [client 20.220.211.197:50628] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jid0mtxz.php"] [unique_id "ahC3rpqUP2XZmzp7RDpiewAAABM"]
[Sat May 23 04:08:15.072311 2026] [:error] [pid 30940:tid 30970] [client 20.220.211.197:46576] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/izgatewp.php"] [unique_id "ahC3r5qUP2XZmzp7RDpifAAAABU"]
[Sat May 23 04:08:15.629573 2026] [:error] [pid 30941:tid 30991] [client 20.220.211.197:7144] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/izgatewp.php"] [unique_id "ahC3r3TIgjSDhiZmvlUBJQAAAE8"]
[Sat May 23 04:08:16.134008 2026] [:error] [pid 30941:tid 30976] [client 20.220.211.197:64735] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/izgatewp.php"] [unique_id "ahC3sHTIgjSDhiZmvlUBJgAAAEA"]
[Sat May 23 04:08:16.644581 2026] [:error] [pid 31039:tid 31048] [client 20.220.211.197:47112] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/izgatewp.php"] [unique_id "ahC3sKIYDYo8WvA5zLIuewAAAMc"]
[Sat May 23 04:08:17.781584 2026] [:error] [pid 30942:tid 31005] [client 20.220.211.197:7110] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "ahC3sdUosz64YFiBlG2X5QAAAII"]
[Sat May 23 04:08:18.366049 2026] [:error] [pid 30941:tid 30977] [client 20.220.211.197:64721] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "ahC3snTIgjSDhiZmvlUBKAAAAEE"]
[Sat May 23 04:08:19.142225 2026] [:error] [pid 30941:tid 30995] [client 20.220.211.197:7073] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "ahC3s3TIgjSDhiZmvlUBKQAAAFM"]
[Sat May 23 04:08:20.057153 2026] [:error] [pid 30941:tid 30994] [client 20.220.211.197:63173] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gh.php"] [unique_id "ahC3tHTIgjSDhiZmvlUBKwAAAFI"]
[Sat May 23 04:08:21.000160 2026] [:error] [pid 30941:tid 30987] [client 20.220.211.197:44776] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/groupon.php"] [unique_id "ahC3tHTIgjSDhiZmvlUBLQAAAEs"]
[Sat May 23 04:08:21.645862 2026] [:error] [pid 30941:tid 30976] [client 20.220.211.197:58628] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/groupon.php"] [unique_id "ahC3tXTIgjSDhiZmvlUBLgAAAEA"]
[Sat May 23 04:08:22.184045 2026] [:error] [pid 31039:tid 31047] [client 20.220.211.197:7105] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/groupon.php"] [unique_id "ahC3tqIYDYo8WvA5zLIuigAAAMY"]
[Sat May 23 04:08:22.719455 2026] [:error] [pid 31039:tid 31043] [client 20.220.211.197:58686] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/groupon.php"] [unique_id "ahC3tqIYDYo8WvA5zLIujAAAAMI"]
[Sat May 23 04:08:23.342397 2026] [:error] [pid 30942:tid 31014] [client 20.220.211.197:43125] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ahC3t9Uosz64YFiBlG2X6AAAAIs"]
[Sat May 23 04:08:24.123849 2026] [:error] [pid 30941:tid 30990] [client 20.220.211.197:12393] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ahC3uHTIgjSDhiZmvlUBMgAAAE4"]
[Sat May 23 04:08:24.705933 2026] [:error] [pid 30941:tid 30985] [client 20.220.211.197:47110] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ahC3uHTIgjSDhiZmvlUBMwAAAEk"]
[Sat May 23 04:08:25.270596 2026] [:error] [pid 30941:tid 30984] [client 20.220.211.197:47137] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lupo.php"] [unique_id "ahC3uXTIgjSDhiZmvlUBNAAAAEg"]
[Sat May 23 04:08:26.191165 2026] [:error] [pid 30941:tid 30994] [client 20.220.211.197:47161] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "ahC3unTIgjSDhiZmvlUBNgAAAFI"]
[Sat May 23 04:08:26.987617 2026] [:error] [pid 31039:tid 31061] [client 20.220.211.197:46553] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "ahC3uqIYDYo8WvA5zLIulgAAANQ"]
[Sat May 23 04:08:27.823474 2026] [:error] [pid 30942:tid 31013] [client 20.220.211.197:55563] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "ahC3u9Uosz64YFiBlG2X7QAAAIo"]
[Sat May 23 04:08:28.524076 2026] [:error] [pid 30941:tid 30997] [client 20.220.211.197:64010] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/villain.php"] [unique_id "ahC3vHTIgjSDhiZmvlUBOgAAAFU"]
[Sat May 23 04:08:29.350669 2026] [:error] [pid 30942:tid 31009] [client 20.220.211.197:43084] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX6.php"] [unique_id "ahC3vdUosz64YFiBlG2X8QAAAIY"]
[Sat May 23 04:08:29.956982 2026] [:error] [pid 31039:tid 31045] [client 20.220.211.197:12395] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX6.php"] [unique_id "ahC3vaIYDYo8WvA5zLIunAAAAMQ"]
[Sat May 23 04:08:30.802113 2026] [:error] [pid 31039:tid 31065] [client 20.220.211.197:64764] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX6.php"] [unique_id "ahC3vqIYDYo8WvA5zLIungAAANg"]
[Sat May 23 04:08:31.478696 2026] [:error] [pid 31039:tid 31044] [client 20.220.211.197:64755] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX6.php"] [unique_id "ahC3v6IYDYo8WvA5zLIunwAAAMM"]
[Sat May 23 04:08:31.944802 2026] [:error] [pid 31039:tid 31042] [client 20.220.211.197:44745] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX7.php"] [unique_id "ahC3v6IYDYo8WvA5zLIuoAAAAME"]
[Sat May 23 04:08:32.431572 2026] [:error] [pid 30940:tid 30968] [client 20.220.211.197:64016] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX7.php"] [unique_id "ahC3wJqUP2XZmzp7RDpi1AAAABM"]
[Sat May 23 04:08:32.863963 2026] [:error] [pid 30942:tid 31027] [client 20.220.211.197:44782] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX7.php"] [unique_id "ahC3wNUosz64YFiBlG2X-AAAAJg"]
[Sat May 23 04:08:33.324865 2026] [:error] [pid 30941:tid 30988] [client 20.220.211.197:64737] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX7.php"] [unique_id "ahC3wXTIgjSDhiZmvlUBOwAAAEw"]
[Sat May 23 04:08:33.883401 2026] [:error] [pid 31039:tid 31059] [client 20.220.211.197:58657] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX4.php"] [unique_id "ahC3waIYDYo8WvA5zLIupwAAANI"]
[Sat May 23 04:08:34.365118 2026] [:error] [pid 30940:tid 30960] [client 20.220.211.197:58671] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX4.php"] [unique_id "ahC3wpqUP2XZmzp7RDpi1gAAAAs"]
[Sat May 23 04:08:34.861007 2026] [:error] [pid 31039:tid 31051] [client 20.220.211.197:64727] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX4.php"] [unique_id "ahC3wqIYDYo8WvA5zLIurAAAAMo"]
[Sat May 23 04:08:35.614223 2026] [:error] [pid 30941:tid 30983] [client 20.220.211.197:47127] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX4.php"] [unique_id "ahC3w3TIgjSDhiZmvlUBPgAAAEc"]
[Sat May 23 04:08:36.492460 2026] [:error] [pid 30941:tid 30994] [client 20.220.211.197:64757] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX5.php"] [unique_id "ahC3xHTIgjSDhiZmvlUBQAAAAFI"]
[Sat May 23 04:08:37.200798 2026] [:error] [pid 30942:tid 31027] [client 20.220.211.197:43090] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX5.php"] [unique_id "ahC3xdUosz64YFiBlG2X_wAAAJg"]
[Sat May 23 04:08:37.770050 2026] [:error] [pid 30942:tid 31019] [client 20.220.211.197:46560] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX5.php"] [unique_id "ahC3xdUosz64YFiBlG2YAwAAAJA"]
[Sat May 23 04:08:38.886560 2026] [:error] [pid 30942:tid 31011] [client 20.220.211.197:47159] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX5.php"] [unique_id "ahC3xtUosz64YFiBlG2YBgAAAIg"]
[Sat May 23 04:08:40.664514 2026] [:error] [pid 31039:tid 31054] [client 20.220.211.197:47154] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX3.php"] [unique_id "ahC3yKIYDYo8WvA5zLIusAAAAM0"]
[Sat May 23 04:08:41.801733 2026] [:error] [pid 30942:tid 31026] [client 20.220.211.197:64724] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX3.php"] [unique_id "ahC3ydUosz64YFiBlG2YBwAAAJc"]
[Sat May 23 04:08:42.891330 2026] [:error] [pid 30940:tid 30973] [client 20.220.211.197:55583] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX3.php"] [unique_id "ahC3ypqUP2XZmzp7RDpi1wAAABg"]
[Sat May 23 04:08:44.258249 2026] [:error] [pid 30941:tid 30977] [client 20.220.211.197:44799] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/CDX3.php"] [unique_id "ahC3zHTIgjSDhiZmvlUBSgAAAEE"]
[Sat May 23 04:08:46.229624 2026] [:error] [pid 30941:tid 30979] [client 20.220.211.197:58631] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wper.php"] [unique_id "ahC3znTIgjSDhiZmvlUBSwAAAEM"]
[Sat May 23 04:08:47.723142 2026] [:error] [pid 30942:tid 31025] [client 20.220.211.197:58648] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wper.php"] [unique_id "ahC3z9Uosz64YFiBlG2YDQAAAJY"]
[Sat May 23 04:08:48.847449 2026] [:error] [pid 30942:tid 31006] [client 20.220.211.197:55603] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wper.php"] [unique_id "ahC30NUosz64YFiBlG2YDgAAAIM"]
[Sat May 23 04:08:49.694522 2026] [:error] [pid 30941:tid 30989] [client 20.220.211.197:43097] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wper.php"] [unique_id "ahC30XTIgjSDhiZmvlUBTAAAAE0"]
[Sat May 23 04:08:50.780301 2026] [:error] [pid 30940:tid 30959] [client 20.220.211.197:64026] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx9.php"] [unique_id "ahC30pqUP2XZmzp7RDpi5QAAAAo"]
[Sat May 23 04:08:51.750423 2026] [:error] [pid 30941:tid 30977] [client 20.220.211.197:55609] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx9.php"] [unique_id "ahC303TIgjSDhiZmvlUBUAAAAEE"]
[Sat May 23 04:08:52.794765 2026] [:error] [pid 30941:tid 30995] [client 20.220.211.197:12404] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx9.php"] [unique_id "ahC31HTIgjSDhiZmvlUBVgAAAFM"]
[Sat May 23 04:08:54.374580 2026] [:error] [pid 30942:tid 31022] [client 20.220.211.197:46544] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-sx9.php"] [unique_id "ahC31tUosz64YFiBlG2YEgAAAJM"]
[Sat May 23 04:08:56.024544 2026] [:error] [pid 30941:tid 30989] [client 20.220.211.197:64754] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibjnu.php"] [unique_id "ahC32HTIgjSDhiZmvlUBXAAAAE0"]
[Sat May 23 04:08:57.527483 2026] [:error] [pid 30941:tid 30977] [client 20.220.211.197:50636] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibjnu.php"] [unique_id "ahC32XTIgjSDhiZmvlUBYAAAAEE"]
[Sat May 23 04:08:59.658959 2026] [:error] [pid 31039:tid 31051] [client 20.220.211.197:55587] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibjnu.php"] [unique_id "ahC326IYDYo8WvA5zLIuwAAAAMo"]
[Sat May 23 04:09:01.442645 2026] [:error] [pid 30941:tid 30997] [client 20.220.211.197:58669] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ibjnu.php"] [unique_id "ahC33XTIgjSDhiZmvlUBZAAAAFU"]
[Sat May 23 04:09:03.450387 2026] [:error] [pid 31039:tid 31045] [client 20.220.211.197:63207] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sk25_1.php"] [unique_id "ahC336IYDYo8WvA5zLIuyAAAAMQ"]
[Sat May 23 04:09:11.414129 2026] [:error] [pid 30940:tid 30950] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Sat May 23 04:09:11.624454 2026] [:error] [pid 30940:tid 30949] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Sat May 23 04:09:12.281681 2026] [:error] [pid 30940:tid 30964] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/dgs.php
[Sat May 23 04:09:12.491911 2026] [:error] [pid 30940:tid 30963] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/xigmltad.php
[Sat May 23 04:09:12.702365 2026] [:error] [pid 30940:tid 30971] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat May 23 04:09:12.914886 2026] [:error] [pid 30940:tid 30965] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Sat May 23 04:09:13.124561 2026] [:error] [pid 30940:tid 30968] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/academy.php
[Sat May 23 04:09:13.335194 2026] [:error] [pid 30940:tid 30970] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/lco.php
[Sat May 23 04:09:13.579766 2026] [:error] [pid 30940:tid 30960] [client 20.220.211.197:58074] File does not exist: /usr/local/apache/htdocs/suspended-page/lgr.php
[Sat May 23 04:09:13.786664 2026] [:error] [pid 30940:tid 30958] [client 20.220.211.197:58074] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mac.php"] [unique_id "ahC36ZqUP2XZmzp7RDpi_gAAAAk"]
[Sat May 23 04:09:17.170493 2026] [:error] [pid 30941:tid 30979] [client 20.220.211.197:64717] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mac.php"] [unique_id "ahC37XTIgjSDhiZmvlUBcgAAAEM"]
[Sat May 23 04:09:19.145854 2026] [:error] [pid 31039:tid 31050] [client 20.220.211.197:55086] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mac.php"] [unique_id "ahC376IYDYo8WvA5zLIu1wAAAMk"]
[Sat May 23 04:09:21.570774 2026] [:error] [pid 31039:tid 31053] [client 20.220.211.197:48001] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mac.php"] [unique_id "ahC38aIYDYo8WvA5zLIu4gAAAMw"]
[Sat May 23 04:09:27.145132 2026] [:error] [pid 30942:tid 31025] [client 20.220.211.197:12398] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ahC399Uosz64YFiBlG2YNAAAAJY"]
[Sat May 23 04:09:31.795742 2026] [:error] [pid 30940:tid 30965] [client 20.220.211.197:7158] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ahC3-5qUP2XZmzp7RDpjGAAAABA"]
[Sat May 23 04:09:34.837847 2026] [:error] [pid 30940:tid 30958] [client 20.220.211.197:58668] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ahC3_pqUP2XZmzp7RDpjGwAAAAk"]
[Sat May 23 04:09:35.699709 2026] [:error] [pid 30940:tid 30949] [client 20.220.211.197:7076] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wgift1.php"] [unique_id "ahC3_5qUP2XZmzp7RDpjHAAAAAA"]
[Sat May 23 04:09:36.879812 2026] [:error] [pid 31039:tid 31051] [client 20.220.211.197:58643] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "ahC4AKIYDYo8WvA5zLIu-wAAAMo"]
[Sat May 23 04:09:39.498629 2026] [:error] [pid 31039:tid 31061] [client 20.220.211.197:42487] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "ahC4A6IYDYo8WvA5zLIvAwAAANQ"]
[Sat May 23 04:09:41.063283 2026] [:error] [pid 31039:tid 31050] [client 20.220.211.197:43119] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "ahC4BaIYDYo8WvA5zLIvCAAAAMk"]
[Sat May 23 04:09:42.587893 2026] [:error] [pid 30941:tid 30995] [client 20.220.211.197:61715] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wglum1.php"] [unique_id "ahC4BnTIgjSDhiZmvlUBkAAAAFM"]
[Sat May 23 04:09:43.285022 2026] [:error] [pid 30941:tid 30991] [client 20.220.211.197:12408] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "ahC4B3TIgjSDhiZmvlUBkwAAAE8"]
[Sat May 23 04:09:44.242069 2026] [:error] [pid 30940:tid 30955] [client 20.220.211.197:61732] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "ahC4CJqUP2XZmzp7RDpjKgAAAAY"]
[Sat May 23 04:09:45.163640 2026] [:error] [pid 30941:tid 30985] [client 20.220.211.197:61709] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "ahC4CXTIgjSDhiZmvlUBmAAAAEk"]
[Sat May 23 04:09:46.070387 2026] [:error] [pid 30941:tid 30994] [client 20.220.211.197:47153] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/awa.php"] [unique_id "ahC4CnTIgjSDhiZmvlUBmQAAAFI"]
[Sat May 23 04:09:47.421894 2026] [:error] [pid 31039:tid 31046] [client 20.220.211.197:12411] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ahC4C6IYDYo8WvA5zLIvDgAAAMU"]
[Sat May 23 04:09:48.020736 2026] [:error] [pid 31039:tid 31061] [client 20.220.211.197:7108] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ahC4DKIYDYo8WvA5zLIvDwAAANQ"]
[Sat May 23 04:09:48.564172 2026] [:error] [pid 30941:tid 30987] [client 20.220.211.197:47129] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ahC4DHTIgjSDhiZmvlUBnAAAAEs"]
[Sat May 23 04:09:49.454356 2026] [:error] [pid 30942:tid 31022] [client 20.220.211.197:47134] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/lti.php"] [unique_id "ahC4DdUosz64YFiBlG2YQgAAAJM"]
[Sat May 23 04:09:50.142878 2026] [:error] [pid 30942:tid 31006] [client 20.220.211.197:42378] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "ahC4DtUosz64YFiBlG2YRAAAAIM"]
[Sat May 23 04:09:50.763205 2026] [:error] [pid 30942:tid 31011] [client 20.220.211.197:47166] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "ahC4DtUosz64YFiBlG2YRgAAAIg"]
[Sat May 23 04:09:51.463679 2026] [:error] [pid 30942:tid 31021] [client 20.220.211.197:58670] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "ahC4D9Uosz64YFiBlG2YRwAAAJI"]
[Sat May 23 04:09:52.143681 2026] [:error] [pid 30941:tid 30991] [client 20.220.211.197:43109] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/solo1.php"] [unique_id "ahC4EHTIgjSDhiZmvlUBngAAAE8"]
[Sat May 23 04:09:52.936439 2026] [:error] [pid 30941:tid 30996] [client 20.220.211.197:61739] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "ahC4EHTIgjSDhiZmvlUBnwAAAFQ"]
[Sat May 23 04:09:53.600290 2026] [:error] [pid 30941:tid 30985] [client 20.220.211.197:59805] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "ahC4EXTIgjSDhiZmvlUBpAAAAEk"]
[Sat May 23 04:09:54.778643 2026] [:error] [pid 31039:tid 31048] [client 20.220.211.197:7165] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "ahC4EqIYDYo8WvA5zLIvFAAAAMc"]
[Sat May 23 04:09:55.466429 2026] [:error] [pid 31039:tid 31041] [client 20.220.211.197:47122] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/sxdfrt.php"] [unique_id "ahC4E6IYDYo8WvA5zLIvGAAAAMA"]
[Sat May 23 04:09:56.353393 2026] [:error] [pid 31039:tid 31059] [client 20.220.211.197:61722] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahC4FKIYDYo8WvA5zLIvGwAAANI"]
[Sat May 23 04:09:57.206471 2026] [:error] [pid 31039:tid 31053] [client 20.220.211.197:61744] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahC4FaIYDYo8WvA5zLIvIAAAAMw"]
[Sat May 23 04:09:58.469920 2026] [:error] [pid 30942:tid 31025] [client 20.220.211.197:42419] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahC4FtUosz64YFiBlG2YTwAAAJY"]
[Sat May 23 04:09:59.937729 2026] [:error] [pid 30940:tid 30965] [client 20.220.211.197:42376] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/vgtyu.php"] [unique_id "ahC4F5qUP2XZmzp7RDpjMgAAABA"]
[Sat May 23 04:10:01.666194 2026] [:error] [pid 30940:tid 30970] [client 20.220.211.197:58623] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ahC4GZqUP2XZmzp7RDpjNQAAABU"]
[Sat May 23 04:10:03.608085 2026] [:error] [pid 30942:tid 31019] [client 20.220.211.197:45266] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ahC4G9Uosz64YFiBlG2YWQAAAJA"]
[Sat May 23 04:10:05.503357 2026] [:error] [pid 30941:tid 30979] [client 20.220.211.197:6906] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ahC4HXTIgjSDhiZmvlUBpgAAAEM"]
[Sat May 23 04:10:07.550328 2026] [:error] [pid 31039:tid 31052] [client 20.220.211.197:44248] [client 20.220.211.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/kikikoko.php"] [unique_id "ahC4H6IYDYo8WvA5zLIvOAAAAMs"]
[Sat May 23 04:10:16.817866 2026] [:error] [pid 30941:tid 30976] [client 20.220.211.197:53726] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sat May 23 04:10:17.060242 2026] [:error] [pid 30941:tid 31000] [client 20.220.211.197:53726] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat May 23 04:10:17.279727 2026] [:error] [pid 30941:tid 30982] [client 20.220.211.197:53726] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sat May 23 04:10:17.522073 2026] [:error] [pid 30941:tid 30977] [client 20.220.211.197:53726] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat May 23 04:10:17.767823 2026] [:error] [pid 30941:tid 30989] [client 20.220.211.197:53726] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat May 23 06:28:38.935329 2026] [:error] [pid 30941:tid 30994] [client 8.229.78.253:42740] [client 8.229.78.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ahDYlnTIgjSDhiZmvlUjfwAAAFI"]
[Sat May 23 07:12:49.645053 2026] [:error] [pid 30940:tid 30969] [client 43.166.255.102:38944] [client 43.166.255.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahDi8ZqUP2XZmzp7RDqEgAAAABQ"]
[Sat May 23 09:31:29.587561 2026] [:error] [pid 31039:tid 31056] [client 138.249.138.2:34830] [client 138.249.138.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ahEDcaIYDYo8WvA5zLKW4QAAAM8"]
[Sat May 23 09:49:53.085588 2026] [:error] [pid 30942:tid 31007] [client 138.249.138.2:33366] [client 138.249.138.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.git/config"] [unique_id "ahEHwdUosz64YFiBlG3rfAAAAIQ"]
[Sat May 23 09:56:38.605390 2026] [:error] [pid 31039:tid 31047] [client 43.140.247.223:37470] [client 43.140.247.223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahEJVqIYDYo8WvA5zLKdXAAAAMY"]
[Sat May 23 10:30:07.137134 2026] [:error] [pid 30941:tid 30985] [client 43.130.106.18:38284] [client 43.130.106.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahERL3TIgjSDhiZmvlVN7AAAAEk"]
[Sat May 23 17:22:01.081556 2026] [:error] [pid 44296:tid 44302] [client 43.131.243.61:42800] [client 43.131.243.61] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahFxuZdrUdFI6ijvMklq1AAAAUQ"]
[Sat May 23 21:40:11.182712 2026] [:error] [pid 44326:tid 44363] [client 94.247.172.129:6461] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahGuO8yrPrcAqE-FOKKtaAAAAcg"]
[Sat May 23 22:06:49.852797 2026] [:error] [pid 30941:tid 30998] [client 49.234.192.248:49918] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahG0eXTIgjSDhiZmvlUJPAAAAFY"]
[Sat May 23 23:35:42.955109 2026] [:error] [pid 44326:tid 44371] [client 34.9.245.170:52216] [client 34.9.245.170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ahHJTsyrPrcAqE-FOKLPNQAAAdA"]
[Sun May 24 03:34:14.200947 2026] [:error] [pid 42197:tid 42204] [client 43.153.87.54:33888] [client 43.153.87.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahIBNqIG0JRyocIl2y898wAAAMU"]
[Sun May 24 04:36:51.837830 2026] [:error] [pid 58797:tid 58806] [client 185.77.20.3:56581] [client 185.77.20.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.77.20.3, incrementing ddos counter"] [hostname "dbservices.com.au"] [uri "/xmlrpc.php"] [unique_id "ahIP4_zoIKLVypLB5NgOkwAAAUY"]
[Sun May 24 04:36:51.843053 2026] [:error] [pid 58797:tid 58806] [client 185.77.20.3:56581] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 24 08:19:49.686296 2026] [:error] [pid 50872:tid 50928] [client 207.241.173.169:9044] [client 207.241.173.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env"] [unique_id "ahJEJUbX_GQ5p_34ISZmrQAAAE8"]
[Sun May 24 08:19:49.686562 2026] [:error] [pid 58918:tid 58925] [client 207.241.173.169:9080] [client 207.241.173.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/api/.env"] [unique_id "ahJEJaT5tvv40jh4HYY3jQAAAYU"]
[Sun May 24 08:19:49.686651 2026] [:error] [pid 58797:tid 58800] [client 207.241.173.169:9076] [client 207.241.173.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/app/.env"] [unique_id "ahJEJfzoIKLVypLB5NhCXAAAAUA"]
[Sun May 24 08:19:49.686802 2026] [:error] [pid 58918:tid 58939] [client 207.241.173.169:9066] [client 207.241.173.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.production"] [unique_id "ahJEJaT5tvv40jh4HYY3jgAAAZM"]
[Sun May 24 08:19:49.687332 2026] [:error] [pid 50873:tid 50956] [client 207.241.173.169:9058] [client 207.241.173.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/backend/.env"] [unique_id "ahJEJelYxsqwDcWZbhLd1QAAAJA"]
[Sun May 24 08:19:49.687618 2026] [:error] [pid 58797:tid 58807] [client 207.241.173.169:9062] [client 207.241.173.169] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbservices.com.au"] [uri "/.env.local"] [unique_id "ahJEJfzoIKLVypLB5NhCXQAAAUc"]
[Sun May 24 11:00:06.846568 2026] [:error] [pid 49689:tid 49735] [client 43.153.76.247:56014] [client 43.153.76.247] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahJptgaxiY3NxLUD97UtkgAAAJE"]
[Sun May 24 13:18:54.088336 2026] [:error] [pid 49775:tid 49784] [client 43.153.15.51:59444] [client 43.153.15.51] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahKKPovZb8G6T8WpI1hgngAAAAc"]
[Sun May 24 16:45:21.727549 2026] [:error] [pid 49688:tid 49699] [client 88.151.33.24:35382] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/HEAD"] [unique_id "ahK6oWYoQ9V6a_4pBsimbAAAAEg"]
[Sun May 24 16:45:21.728431 2026] [:error] [pid 41708:tid 41722] [client 88.151.33.24:35378] [client 88.151.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ahK6of4tQzoTxpuHBF646AAAAYw"]
[Sun May 24 19:13:55.707033 2026] [:error] [pid 49689:tid 49726] [client 43.130.131.18:35480] [client 43.130.131.18] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahLdcwaxiY3NxLUD97V7QQAAAIg"]
[Sun May 24 21:01:46.498208 2026] [:error] [pid 15835:tid 15846] [client 49.234.192.248:37500] [client 49.234.192.248] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahL2umWbknYlUM9P0qPE5AAAAAk"]
[Mon May 25 01:36:13.784571 2026] [:error] [pid 15835:tid 15861] [client 52.139.38.60:39178] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon May 25 01:36:13.995348 2026] [:error] [pid 15835:tid 15859] [client 52.139.38.60:39178] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon May 25 01:36:14.418277 2026] [:error] [pid 15835:tid 15854] [client 52.139.38.60:39178] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon May 25 01:36:14.629917 2026] [:error] [pid 15835:tid 15860] [client 52.139.38.60:39178] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 25 01:36:15.138586 2026] [:error] [pid 15835:tid 15846] [client 52.139.38.60:39178] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 25 01:36:15.351665 2026] [:error] [pid 15835:tid 15842] [client 52.139.38.60:39178] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon May 25 01:36:15.564499 2026] [:error] [pid 15835:tid 15858] [client 52.139.38.60:39178] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 25 01:36:16.083515 2026] [:error] [pid 15835:tid 15860] [client 52.139.38.60:39178] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahM3EGWbknYlUM9P0qNBRAAAABc"]
[Mon May 25 01:36:17.470417 2026] [:error] [pid 11282:tid 11343] [client 52.139.38.60:25574] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahM3Ee0bPyN3C7HZ1R_a9QAAAMM"]
[Mon May 25 01:36:19.535598 2026] [:error] [pid 11281:tid 11325] [client 52.139.38.60:25593] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahM3E5KmC9taWvA91j61NwAAAIw"]
[Mon May 25 01:36:20.918230 2026] [:error] [pid 11280:tid 11293] [client 52.139.38.60:25577] [client 52.139.38.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahM3FIRn5s7laoSxy1RBOQAAAEg"]
[Mon May 25 04:59:09.120818 2026] [:error] [pid 50423:tid 50428] [client 43.157.153.236:33294] [client 43.157.153.236] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahNmnaJWO7En4nKEQ3gWAgAAAQM"]
[Mon May 25 07:04:01.604150 2026] [:error] [pid 9303:tid 9348] [client 43.134.53.242:39094] [client 43.134.53.242] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahOD4X3bQScbssitjPRCHwAAAE4"]
[Mon May 25 07:09:18.003054 2026] [:error] [pid 21606:tid 21620] [client 104.28.214.122:38735] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFHmswdp0RYkH5t9XJjQAAAUw"]
[Mon May 25 07:09:21.743826 2026] [:error] [pid 9303:tid 9336] [client 104.28.214.122:38646] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/chosen.php"] [unique_id "ahOFIX3bQScbssitjPRD2QAAAEI"]
[Mon May 25 07:09:22.208651 2026] [:error] [pid 9304:tid 9378] [client 104.28.214.122:38765] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/file.php"] [unique_id "ahOFIuVEV2qpMC_1UzSWAQAAAJE"]
[Mon May 25 07:09:22.682738 2026] [:error] [pid 9303:tid 9340] [client 104.28.214.122:38845] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/flower.php"] [unique_id "ahOFIn3bQScbssitjPRD2wAAAEY"]
[Mon May 25 07:09:23.137394 2026] [:error] [pid 9398:tid 9416] [client 104.28.214.122:38889] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/gifclass.php"] [unique_id "ahOFI-hIu7KstzsCua-3OQAAAMw"]
[Mon May 25 07:09:30.619886 2026] [:error] [pid 9302:tid 9313] [client 104.28.214.122:20423] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/bless.php"] [unique_id "ahOFKi1RaFfTSnDQnqFbzwAAAAY"]
[Mon May 25 07:09:34.089314 2026] [:error] [pid 9304:tid 9385] [client 104.28.246.122:55503] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "dbservices.com.au"] [uri "/class-t.api.php"] [unique_id "ahOFLuVEV2qpMC_1UzSWhQAAAJg"]
[Mon May 25 07:53:58.008630 2026] [:error] [pid 62427:tid 62480] [client 1.12.70.96:56596] [client 1.12.70.96] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahOPlvMUa83fc4GDyBzsCwAAAVc"]
[Mon May 25 08:32:54.342593 2026] [:error] [pid 62427:tid 62474] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon May 25 08:32:54.561640 2026] [:error] [pid 62427:tid 62472] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/sx_pms.php
[Mon May 25 08:32:54.785812 2026] [:error] [pid 62427:tid 62458] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Mon May 25 08:32:54.994346 2026] [:error] [pid 62427:tid 62460] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-test.php
[Mon May 25 08:32:55.403994 2026] [:error] [pid 62427:tid 62478] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/like.php
[Mon May 25 08:32:55.612935 2026] [:error] [pid 62427:tid 62475] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Mon May 25 08:32:55.831591 2026] [:error] [pid 62427:tid 62468] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Mon May 25 08:32:56.046447 2026] [:error] [pid 62427:tid 62470] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-indx.php
[Mon May 25 08:32:56.397747 2026] [:error] [pid 62427:tid 62459] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Mon May 25 08:32:56.616175 2026] [:error] [pid 62427:tid 62465] [client 20.220.161.95:13287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-link-spm.php
[Mon May 25 08:32:56.822426 2026] [:error] [pid 62427:tid 62479] [client 20.220.161.95:13287] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahOYuPMUa83fc4GDyBz3LAAAAVY"]
[Mon May 25 08:32:58.015871 2026] [:error] [pid 62428:tid 62487] [client 20.220.161.95:13269] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahOYupNosGBa7mui3VSjmQAAAIM"]
[Mon May 25 08:32:58.734355 2026] [:error] [pid 62428:tid 62507] [client 20.220.161.95:13228] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahOYupNosGBa7mui3VSjmgAAAJc"]
[Mon May 25 08:32:59.232295 2026] [:error] [pid 62428:tid 62488] [client 20.220.161.95:13193] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-link-snpm.php"] [unique_id "ahOYu5NosGBa7mui3VSjmwAAAIQ"]
[Mon May 25 08:32:59.722339 2026] [:error] [pid 62515:tid 62528] [client 20.220.161.95:13282] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xminie.php"] [unique_id "ahOYuxig0_XsOwmnrv9XpQAAAMs"]
[Mon May 25 08:33:00.894928 2026] [:error] [pid 62428:tid 62491] [client 20.220.161.95:13191] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xminie.php"] [unique_id "ahOYvJNosGBa7mui3VSjngAAAIc"]
[Mon May 25 08:33:01.928685 2026] [:error] [pid 62428:tid 62494] [client 20.220.161.95:13198] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xminie.php"] [unique_id "ahOYvZNosGBa7mui3VSjoQAAAIo"]
[Mon May 25 08:33:03.453564 2026] [:error] [pid 62428:tid 62496] [client 20.220.161.95:13300] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xminie.php"] [unique_id "ahOYv5NosGBa7mui3VSjqQAAAIw"]
[Mon May 25 08:33:05.693073 2026] [:error] [pid 62427:tid 62481] [client 20.220.161.95:13202] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "ahOYwfMUa83fc4GDyBz3MQAAAVg"]
[Mon May 25 08:33:07.004208 2026] [:error] [pid 62722:tid 62741] [client 20.220.161.95:13270] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "ahOYw6M6ssnLWYf6CVBOlgAAAFE"]
[Mon May 25 08:33:08.691401 2026] [:error] [pid 62515:tid 62519] [client 20.220.161.95:13275] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "ahOYxBig0_XsOwmnrv9XqwAAAMI"]
[Mon May 25 08:33:09.604876 2026] [:error] [pid 62426:tid 62441] [client 20.220.161.95:13204] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aaa.php"] [unique_id "ahOYxUj3D3Mo8ANpTRB2LAAAAAs"]
[Mon May 25 08:33:11.199131 2026] [:error] [pid 62428:tid 62485] [client 20.220.161.95:13290] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "ahOYx5NosGBa7mui3VSjsgAAAIE"]
[Mon May 25 08:33:13.973044 2026] [:error] [pid 62722:tid 62739] [client 20.220.161.95:13286] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "ahOYyaM6ssnLWYf6CVBOogAAAE8"]
[Mon May 25 08:33:16.657280 2026] [:error] [pid 62427:tid 62457] [client 20.220.161.95:13307] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "ahOYzPMUa83fc4GDyBz3QwAAAUA"]
[Mon May 25 08:33:18.103848 2026] [:error] [pid 62426:tid 62448] [client 20.220.161.95:13241] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bal.php"] [unique_id "ahOYzkj3D3Mo8ANpTRB2NwAAABI"]
[Mon May 25 08:33:20.907509 2026] [:error] [pid 62722:tid 62739] [client 20.220.161.95:13192] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "ahOY0KM6ssnLWYf6CVBOsQAAAE8"]
[Mon May 25 08:33:22.713795 2026] [:error] [pid 62722:tid 62744] [client 20.220.161.95:13253] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "ahOY0qM6ssnLWYf6CVBOtgAAAFQ"]
[Mon May 25 08:33:25.147762 2026] [:error] [pid 62427:tid 62474] [client 20.220.161.95:13258] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "ahOY1fMUa83fc4GDyBz3RAAAAVE"]
[Mon May 25 08:33:28.055126 2026] [:error] [pid 62515:tid 62538] [client 20.220.161.95:13274] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/drykl.php"] [unique_id "ahOY2Big0_XsOwmnrv9XvgAAANU"]
[Mon May 25 08:33:28.930937 2026] [:error] [pid 62428:tid 62499] [client 20.220.161.95:13299] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ahOY2JNosGBa7mui3VSjxQAAAI8"]
[Mon May 25 08:33:30.656647 2026] [:error] [pid 62427:tid 62460] [client 20.220.161.95:13206] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ahOY2vMUa83fc4GDyBz3SAAAAUM"]
[Mon May 25 08:33:31.481678 2026] [:error] [pid 62426:tid 62449] [client 20.220.161.95:13201] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ahOY20j3D3Mo8ANpTRB2QQAAABM"]
[Mon May 25 08:33:32.760162 2026] [:error] [pid 62515:tid 62525] [client 20.220.161.95:13200] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/av.php"] [unique_id "ahOY3Big0_XsOwmnrv9XxgAAAMg"]
[Mon May 25 08:33:35.640656 2026] [:error] [pid 62426:tid 62436] [client 20.220.161.95:13185] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "ahOY30j3D3Mo8ANpTRB2SQAAAAY"]
[Mon May 25 08:33:37.266304 2026] [:error] [pid 62426:tid 62432] [client 20.220.161.95:13130] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "ahOY4Uj3D3Mo8ANpTRB2SwAAAAI"]
[Mon May 25 08:33:40.220810 2026] [:error] [pid 62515:tid 62523] [client 20.220.161.95:13281] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "ahOY5Big0_XsOwmnrv9XygAAAMY"]
[Mon May 25 08:33:42.628137 2026] [:error] [pid 62515:tid 62521] [client 20.220.161.95:13189] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/11.php"] [unique_id "ahOY5hig0_XsOwmnrv9XzAAAAMQ"]
[Mon May 25 08:33:44.527224 2026] [:error] [pid 62428:tid 62485] [client 20.220.161.95:13213] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "ahOY6JNosGBa7mui3VSjyAAAAIE"]
[Mon May 25 08:33:46.084819 2026] [:error] [pid 62428:tid 62484] [client 20.220.161.95:13295] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "ahOY6pNosGBa7mui3VSjywAAAIA"]
[Mon May 25 08:33:47.244845 2026] [:error] [pid 62722:tid 62726] [client 20.220.161.95:13255] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "ahOY66M6ssnLWYf6CVBO0wAAAEI"]
[Mon May 25 08:33:48.498768 2026] [:error] [pid 62428:tid 62487] [client 20.220.161.95:13124] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/77.php"] [unique_id "ahOY7JNosGBa7mui3VSjzwAAAIM"]
[Mon May 25 08:33:51.420347 2026] [:error] [pid 62515:tid 62532] [client 20.220.161.95:13302] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x402.php"] [unique_id "ahOY7xig0_XsOwmnrv9X0gAAAM8"]
[Mon May 25 08:33:53.044355 2026] [:error] [pid 62722:tid 62732] [client 20.220.161.95:13186] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x402.php"] [unique_id "ahOY8aM6ssnLWYf6CVBO2wAAAEg"]
[Mon May 25 08:33:54.318076 2026] [:error] [pid 62428:tid 62498] [client 20.220.161.95:13292] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/x402.php"] [unique_id "ahOY8pNosGBa7mui3VSj0QAAAI4"]
[Mon May 25 08:33:56.925420 2026] [:error] [pid 62722:tid 62726] [client 20.220.161.95:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/x402.php
[Mon May 25 08:33:57.149636 2026] [:error] [pid 62722:tid 62733] [client 20.220.161.95:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon May 25 08:33:57.366352 2026] [:error] [pid 62722:tid 62737] [client 20.220.161.95:13297] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon May 25 08:33:57.580953 2026] [:error] [pid 62722:tid 62743] [client 20.220.161.95:13297] [client 20.220.161.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "dbservices.com.au"] [uri "/tiny.php"] [unique_id "ahOY9aM6ssnLWYf6CVBO4wAAAFM"]
[Mon May 25 08:33:58.785107 2026] [:error] [pid 62722:tid 62725] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon May 25 08:33:59.043558 2026] [:error] [pid 62722:tid 62748] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Mon May 25 08:33:59.302553 2026] [:error] [pid 62722:tid 62743] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Mon May 25 08:33:59.560709 2026] [:error] [pid 62722:tid 62731] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Mon May 25 08:33:59.819648 2026] [:error] [pid 62722:tid 62741] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Mon May 25 08:34:00.107479 2026] [:error] [pid 62722:tid 62745] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Mon May 25 08:34:00.372551 2026] [:error] [pid 62722:tid 62743] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Mon May 25 08:34:00.631892 2026] [:error] [pid 62722:tid 62730] [client 20.220.161.95:13291] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Mon May 25 08:34:00.887900 2026] [:error] [pid 62722:tid 62742] [client 20.220.161.95:13291] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ahOY-KM6ssnLWYf6CVBPGQAAAFI"]
[Mon May 25 08:34:02.006224 2026] [:error] [pid 62427:tid 62466] [client 20.220.161.95:13311] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ahOY-vMUa83fc4GDyBz3WAAAAUk"]
[Mon May 25 08:34:02.798759 2026] [:error] [pid 62722:tid 62736] [client 20.220.161.95:13278] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ahOY-qM6ssnLWYf6CVBPMAAAAEw"]
[Mon May 25 08:34:03.996510 2026] [:error] [pid 62515:tid 62529] [client 20.220.161.95:13128] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ng.php"] [unique_id "ahOY-xig0_XsOwmnrv9X8QAAAMw"]
[Mon May 25 08:34:04.690361 2026] [:error] [pid 62428:tid 62500] [client 20.220.161.95:13301] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "ahOY_JNosGBa7mui3VSj7QAAAJA"]
[Mon May 25 08:34:05.713568 2026] [:error] [pid 62722:tid 62726] [client 20.220.161.95:13222] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "ahOY_aM6ssnLWYf6CVBPNwAAAEI"]
[Mon May 25 08:34:07.002931 2026] [:error] [pid 62515:tid 62536] [client 20.220.161.95:13289] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "ahOY_xig0_XsOwmnrv9X8gAAANM"]
[Mon May 25 08:34:07.923064 2026] [:error] [pid 62427:tid 62479] [client 20.220.161.95:13203] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/link.php"] [unique_id "ahOY__MUa83fc4GDyBz3XAAAAVY"]
[Mon May 25 08:34:09.147504 2026] [:error] [pid 62722:tid 62741] [client 20.220.161.95:13152] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ahOZAaM6ssnLWYf6CVBPPQAAAFE"]
[Mon May 25 08:34:09.859169 2026] [:error] [pid 62722:tid 62726] [client 20.220.161.95:13261] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ahOZAaM6ssnLWYf6CVBPQAAAAEI"]
[Mon May 25 08:34:10.498020 2026] [:error] [pid 62427:tid 62480] [client 20.220.161.95:13308] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ahOZAvMUa83fc4GDyBz3XgAAAVc"]
[Mon May 25 08:34:12.197714 2026] [:error] [pid 62515:tid 62541] [client 20.220.161.95:13211] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xxx.php"] [unique_id "ahOZBBig0_XsOwmnrv9X9AAAANg"]
[Mon May 25 08:34:13.545320 2026] [:error] [pid 62427:tid 62464] [client 20.220.161.95:13210] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahOZBfMUa83fc4GDyBz3YgAAAUc"]
[Mon May 25 08:34:15.201461 2026] [:error] [pid 62426:tid 62446] [client 20.220.161.95:13122] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahOZB0j3D3Mo8ANpTRB2fAAAABA"]
[Mon May 25 08:34:16.951967 2026] [:error] [pid 62428:tid 62507] [client 20.220.161.95:13305] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahOZCJNosGBa7mui3VSj9wAAAJc"]
[Mon May 25 08:34:17.562534 2026] [:error] [pid 62427:tid 62466] [client 20.220.161.95:13285] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/BDKR28WP.php"] [unique_id "ahOZCfMUa83fc4GDyBz3awAAAUk"]
[Mon May 25 08:34:18.174052 2026] [:error] [pid 62427:tid 62480] [client 20.220.161.95:13137] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ahOZCvMUa83fc4GDyBz3cAAAAVc"]
[Mon May 25 08:34:18.972100 2026] [:error] [pid 62515:tid 62541] [client 20.220.161.95:13266] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ahOZChig0_XsOwmnrv9YJAAAANg"]
[Mon May 25 08:34:19.703224 2026] [:error] [pid 62427:tid 62464] [client 20.220.161.95:13127] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ahOZC_MUa83fc4GDyBz3cwAAAUc"]
[Mon May 25 08:34:21.315025 2026] [:error] [pid 62722:tid 62729] [client 20.220.161.95:13184] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/edit.php"] [unique_id "ahOZDaM6ssnLWYf6CVBPkQAAAEU"]
[Mon May 25 08:34:23.226920 2026] [:error] [pid 62722:tid 62733] [client 20.220.161.95:13231] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "ahOZD6M6ssnLWYf6CVBPmQAAAEk"]
[Mon May 25 08:34:24.619321 2026] [:error] [pid 62426:tid 62454] [client 20.220.161.95:13249] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "ahOZEEj3D3Mo8ANpTRB2ggAAABg"]
[Mon May 25 08:34:28.174981 2026] [:error] [pid 62722:tid 62745] [client 20.220.161.95:13272] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "ahOZFKM6ssnLWYf6CVBPoAAAAFU"]
[Mon May 25 08:34:29.586760 2026] [:error] [pid 62426:tid 62449] [client 20.220.161.95:13257] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/pp.php"] [unique_id "ahOZFUj3D3Mo8ANpTRB2gwAAABM"]
[Mon May 25 08:34:30.385517 2026] [:error] [pid 62427:tid 62479] [client 20.220.161.95:13207] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "ahOZFvMUa83fc4GDyBz3eQAAAVY"]
[Mon May 25 08:34:31.127704 2026] [:error] [pid 62515:tid 62541] [client 20.220.161.95:13216] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "ahOZFxig0_XsOwmnrv9YMwAAANg"]
[Mon May 25 08:34:31.928836 2026] [:error] [pid 62722:tid 62730] [client 20.220.161.95:13296] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "ahOZF6M6ssnLWYf6CVBP8AAAAEY"]
[Mon May 25 08:34:32.646732 2026] [:error] [pid 62722:tid 62742] [client 20.220.161.95:13236] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/one.php"] [unique_id "ahOZGKM6ssnLWYf6CVBQEQAAAFI"]
[Mon May 25 08:34:33.246775 2026] [:error] [pid 62722:tid 62745] [client 20.220.161.95:13156] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "ahOZGaM6ssnLWYf6CVBQJwAAAFU"]
[Mon May 25 08:34:33.706348 2026] [:error] [pid 62515:tid 62521] [client 20.220.161.95:13242] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "ahOZGRig0_XsOwmnrv9YNAAAAMQ"]
[Mon May 25 08:34:34.220749 2026] [:error] [pid 62722:tid 62743] [client 20.220.161.95:13194] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "ahOZGqM6ssnLWYf6CVBQKgAAAFM"]
[Mon May 25 08:34:34.818115 2026] [:error] [pid 62722:tid 62747] [client 20.220.161.95:13136] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/error_log.php"] [unique_id "ahOZGqM6ssnLWYf6CVBQKwAAAFc"]
[Mon May 25 08:34:35.374358 2026] [:error] [pid 62428:tid 62503] [client 20.220.161.95:13262] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahOZG5NosGBa7mui3VSkBQAAAJM"]
[Mon May 25 08:34:35.905270 2026] [:error] [pid 62722:tid 62735] [client 20.220.161.95:13229] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahOZG6M6ssnLWYf6CVBQTAAAAEs"]
[Mon May 25 08:34:36.460029 2026] [:error] [pid 62722:tid 62738] [client 20.220.161.95:13060] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahOZHKM6ssnLWYf6CVBQTgAAAE4"]
[Mon May 25 08:34:37.055696 2026] [:error] [pid 62515:tid 62538] [client 20.220.161.95:13265] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a7.php"] [unique_id "ahOZHRig0_XsOwmnrv9YNQAAANU"]
[Mon May 25 08:34:37.618062 2026] [:error] [pid 62428:tid 62490] [client 20.220.161.95:13223] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "ahOZHZNosGBa7mui3VSkBwAAAIY"]
[Mon May 25 08:34:38.108376 2026] [:error] [pid 62428:tid 62498] [client 20.220.161.95:13250] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "ahOZHpNosGBa7mui3VSkCAAAAI4"]
[Mon May 25 08:34:38.754763 2026] [:error] [pid 62515:tid 62527] [client 20.220.161.95:13221] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "ahOZHhig0_XsOwmnrv9YNgAAAMo"]
[Mon May 25 08:34:39.250209 2026] [:error] [pid 62427:tid 62465] [client 20.220.161.95:13244] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/roksad1.php"] [unique_id "ahOZH_MUa83fc4GDyBz3lAAAAUg"]
[Mon May 25 08:34:39.813357 2026] [:error] [pid 62427:tid 62464] [client 20.220.161.95:13126] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axe.php"] [unique_id "ahOZH_MUa83fc4GDyBz3lgAAAUc"]
[Mon May 25 08:34:40.805126 2026] [:error] [pid 62515:tid 62532] [client 20.220.161.95:13196] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axe.php"] [unique_id "ahOZIBig0_XsOwmnrv9YOAAAAM8"]
[Mon May 25 08:34:42.517408 2026] [:error] [pid 62428:tid 62488] [client 20.220.161.95:13225] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axe.php"] [unique_id "ahOZIpNosGBa7mui3VSkDAAAAIQ"]
[Mon May 25 08:34:43.299102 2026] [:error] [pid 62515:tid 62524] [client 20.220.161.95:13288] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/axe.php"] [unique_id "ahOZIxig0_XsOwmnrv9YOgAAAMc"]
[Mon May 25 08:34:44.426890 2026] [:error] [pid 62722:tid 62733] [client 20.220.161.95:13141] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ahOZJKM6ssnLWYf6CVBQUwAAAEk"]
[Mon May 25 08:34:45.660167 2026] [:error] [pid 62515:tid 62526] [client 20.220.161.95:13306] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ahOZJRig0_XsOwmnrv9YPgAAAMk"]
[Mon May 25 08:34:48.451509 2026] [:error] [pid 62427:tid 62479] [client 20.220.161.95:13217] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ahOZKPMUa83fc4GDyBz3pQAAAVY"]
[Mon May 25 08:34:49.441614 2026] [:error] [pid 62427:tid 62477] [client 20.220.161.95:13147] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/de.php"] [unique_id "ahOZKfMUa83fc4GDyBz3pgAAAVQ"]
[Mon May 25 08:34:49.965628 2026] [:error] [pid 62722:tid 62744] [client 20.220.161.95:13243] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ahOZKaM6ssnLWYf6CVBQWQAAAFQ"]
[Mon May 25 08:34:50.661169 2026] [:error] [pid 62722:tid 62742] [client 20.220.161.95:13088] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ahOZKqM6ssnLWYf6CVBQWgAAAFI"]
[Mon May 25 08:34:51.447967 2026] [:error] [pid 62427:tid 62480] [client 20.220.161.95:13267] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ahOZK_MUa83fc4GDyBz3pwAAAVc"]
[Mon May 25 08:34:51.986735 2026] [:error] [pid 62722:tid 62725] [client 20.220.161.95:13240] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/aa.php"] [unique_id "ahOZK6M6ssnLWYf6CVBQXQAAAEE"]
[Mon May 25 08:34:52.849559 2026] [:error] [pid 62722:tid 62734] [client 20.220.161.95:13256] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ahOZLKM6ssnLWYf6CVBQXgAAAEo"]
[Mon May 25 08:34:53.416972 2026] [:error] [pid 62722:tid 62727] [client 20.220.161.95:13148] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ahOZLaM6ssnLWYf6CVBQYAAAAEM"]
[Mon May 25 08:34:54.168687 2026] [:error] [pid 62515:tid 62523] [client 20.220.161.95:13219] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ahOZLhig0_XsOwmnrv9YQQAAAMY"]
[Mon May 25 08:34:54.873447 2026] [:error] [pid 62722:tid 62739] [client 20.220.161.95:13264] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/100.php"] [unique_id "ahOZLqM6ssnLWYf6CVBQYgAAAE8"]
[Mon May 25 08:34:55.438670 2026] [:error] [pid 62426:tid 62444] [client 20.220.161.95:13129] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "ahOZL0j3D3Mo8ANpTRB2iAAAAA4"]
[Mon May 25 08:34:55.971527 2026] [:error] [pid 62722:tid 62746] [client 20.220.161.95:13251] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "ahOZL6M6ssnLWYf6CVBQZAAAAFY"]
[Mon May 25 08:34:56.971641 2026] [:error] [pid 62428:tid 62503] [client 20.220.161.95:13294] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "ahOZMJNosGBa7mui3VSkEAAAAJM"]
[Mon May 25 08:34:57.848813 2026] [:error] [pid 62428:tid 62498] [client 20.220.161.95:13303] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f5.php"] [unique_id "ahOZMZNosGBa7mui3VSkEwAAAI4"]
[Mon May 25 08:34:58.429615 2026] [:error] [pid 62427:tid 62481] [client 20.220.161.95:13271] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/view.php"] [unique_id "ahOZMvMUa83fc4GDyBz3qQAAAVg"]
[Mon May 25 08:34:59.034620 2026] [:error] [pid 62515:tid 62521] [client 20.220.161.95:13260] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/view.php"] [unique_id "ahOZMxig0_XsOwmnrv9YRAAAAMQ"]
[Mon May 25 08:35:00.007068 2026] [:error] [pid 62428:tid 62487] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php
[Mon May 25 08:35:01.160735 2026] [:error] [pid 62428:tid 62487] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Mon May 25 08:35:01.388357 2026] [:error] [pid 62428:tid 62508] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Mon May 25 08:35:01.606580 2026] [:error] [pid 62428:tid 62500] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/moshou.php
[Mon May 25 08:35:01.835333 2026] [:error] [pid 62428:tid 62491] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon May 25 08:35:02.051944 2026] [:error] [pid 62428:tid 62499] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Mon May 25 08:35:02.270147 2026] [:error] [pid 62428:tid 62497] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Mon May 25 08:35:02.490050 2026] [:error] [pid 62428:tid 62486] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Mon May 25 08:35:02.710332 2026] [:error] [pid 62428:tid 62506] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/dostshell.php
[Mon May 25 08:35:02.940728 2026] [:error] [pid 62428:tid 62504] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Mon May 25 08:35:03.167959 2026] [:error] [pid 62428:tid 62498] [client 20.220.161.95:13134] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Mon May 25 08:35:03.383268 2026] [:error] [pid 62428:tid 62490] [client 20.220.161.95:13134] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "ahOZN5NosGBa7mui3VSkQgAAAIY"]
[Mon May 25 08:35:05.775943 2026] [:error] [pid 62426:tid 62443] [client 20.220.161.95:13125] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "ahOZOUj3D3Mo8ANpTRB2oAAAAA0"]
[Mon May 25 08:35:07.326878 2026] [:error] [pid 62426:tid 62454] [client 20.220.161.95:13276] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "ahOZO0j3D3Mo8ANpTRB2pAAAABg"]
[Mon May 25 08:35:08.798572 2026] [:error] [pid 62426:tid 62432] [client 20.220.161.95:13248] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/casp1.php"] [unique_id "ahOZPEj3D3Mo8ANpTRB2qAAAAAI"]
[Mon May 25 08:35:10.507842 2026] [:error] [pid 62426:tid 62435] [client 20.220.161.95:13058] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ahOZPkj3D3Mo8ANpTRB2rAAAAAU"]
[Mon May 25 08:35:12.313178 2026] [:error] [pid 62722:tid 62731] [client 20.220.161.95:13259] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ahOZQKM6ssnLWYf6CVBQfgAAAEc"]
[Mon May 25 08:35:14.883095 2026] [:error] [pid 62428:tid 62484] [client 20.220.161.95:13177] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ahOZQpNosGBa7mui3VSkRgAAAIA"]
[Mon May 25 08:35:16.805915 2026] [:error] [pid 62428:tid 62493] [client 20.220.161.95:13188] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/a1.php"] [unique_id "ahOZRJNosGBa7mui3VSkSQAAAIk"]
[Mon May 25 08:35:18.799739 2026] [:error] [pid 62426:tid 62448] [client 20.220.161.95:13224] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahOZRkj3D3Mo8ANpTRB2rQAAABI"]
[Mon May 25 08:35:22.890818 2026] [:error] [pid 62515:tid 62530] [client 20.220.161.95:13190] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahOZShig0_XsOwmnrv9YVQAAAM0"]
[Mon May 25 08:35:25.995542 2026] [:error] [pid 62426:tid 62452] [client 20.220.161.95:13226] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahOZTUj3D3Mo8ANpTRB2xAAAABY"]
[Mon May 25 08:35:27.765986 2026] [:error] [pid 62428:tid 62500] [client 20.220.161.95:13083] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ms-edit.php"] [unique_id "ahOZT5NosGBa7mui3VSkWwAAAJA"]
[Mon May 25 08:35:30.579425 2026] [:error] [pid 62722:tid 62729] [client 20.220.161.95:13123] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahOZUqM6ssnLWYf6CVBQiwAAAEU"]
[Mon May 25 08:35:31.386957 2026] [:error] [pid 62722:tid 62747] [client 20.220.161.95:13277] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahOZU6M6ssnLWYf6CVBQjgAAAFc"]
[Mon May 25 08:35:32.082654 2026] [:error] [pid 62722:tid 62731] [client 20.220.161.95:13165] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahOZVKM6ssnLWYf6CVBQkQAAAEc"]
[Mon May 25 08:35:32.937532 2026] [:error] [pid 62515:tid 62531] [client 20.220.161.95:13205] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/8.php"] [unique_id "ahOZVBig0_XsOwmnrv9YXwAAAM4"]
[Mon May 25 08:35:34.174980 2026] [:error] [pid 62427:tid 62480] [client 20.220.161.95:13212] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ahOZVvMUa83fc4GDyBz30AAAAVc"]
[Mon May 25 08:35:35.392649 2026] [:error] [pid 62722:tid 62745] [client 20.220.161.95:13195] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ahOZV6M6ssnLWYf6CVBQmgAAAFU"]
[Mon May 25 08:35:37.014291 2026] [:error] [pid 62428:tid 62496] [client 20.220.161.95:13263] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ahOZWZNosGBa7mui3VSkYwAAAIw"]
[Mon May 25 08:35:38.344178 2026] [:error] [pid 62722:tid 62744] [client 20.220.161.95:13144] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xltt.php"] [unique_id "ahOZWqM6ssnLWYf6CVBQpgAAAFQ"]
[Mon May 25 08:35:40.286865 2026] [:error] [pid 62722:tid 62736] [client 20.220.161.95:13161] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ahOZXKM6ssnLWYf6CVBQsQAAAEw"]
[Mon May 25 08:35:43.673441 2026] [:error] [pid 62427:tid 62468] [client 20.220.161.95:13254] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ahOZX_MUa83fc4GDyBz32AAAAUs"]
[Mon May 25 08:35:45.067195 2026] [:error] [pid 62428:tid 62506] [client 20.220.161.95:13218] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ahOZYZNosGBa7mui3VSkcgAAAJY"]
[Mon May 25 08:35:46.759738 2026] [:error] [pid 62427:tid 62462] [client 20.220.161.95:13163] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/cilus.php"] [unique_id "ahOZYvMUa83fc4GDyBz33gAAAUU"]
[Mon May 25 08:35:51.219060 2026] [:error] [pid 62427:tid 62476] [client 20.220.161.95:13235] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ahOZZ_MUa83fc4GDyBz35QAAAVM"]
[Mon May 25 08:35:52.586610 2026] [:error] [pid 62427:tid 62457] [client 20.220.161.95:13246] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ahOZaPMUa83fc4GDyBz36AAAAUA"]
[Mon May 25 08:35:53.220122 2026] [:error] [pid 62427:tid 62470] [client 20.220.161.95:13227] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ahOZafMUa83fc4GDyBz38gAAAU0"]
[Mon May 25 08:35:53.826059 2026] [:error] [pid 62427:tid 62459] [client 20.220.161.95:13208] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/press.php"] [unique_id "ahOZafMUa83fc4GDyBz38wAAAUI"]
[Mon May 25 08:35:54.545148 2026] [:error] [pid 62428:tid 62497] [client 20.220.161.95:13215] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "ahOZapNosGBa7mui3VSkfwAAAI0"]
[Mon May 25 08:35:55.402383 2026] [:error] [pid 62722:tid 62724] [client 20.220.161.95:13135] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "ahOZa6M6ssnLWYf6CVBQvQAAAEA"]
[Mon May 25 08:35:56.087134 2026] [:error] [pid 62722:tid 62738] [client 20.220.161.95:13182] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "ahOZbKM6ssnLWYf6CVBQvgAAAE4"]
[Mon May 25 08:35:56.817939 2026] [:error] [pid 62428:tid 62494] [client 20.220.161.95:13239] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/file6.php"] [unique_id "ahOZbJNosGBa7mui3VSkgAAAAIo"]
[Mon May 25 08:35:58.009786 2026] [:error] [pid 62722:tid 62731] [client 20.220.161.95:13230] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "ahOZbqM6ssnLWYf6CVBQyAAAAEc"]
[Mon May 25 08:35:58.621426 2026] [:error] [pid 62428:tid 62502] [client 20.220.161.95:13172] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "ahOZbpNosGBa7mui3VSkgwAAAJI"]
[Mon May 25 08:35:59.475006 2026] [:error] [pid 62427:tid 62479] [client 20.220.161.95:13252] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "ahOZb_MUa83fc4GDyBz3_QAAAVY"]
[Mon May 25 08:36:00.279208 2026] [:error] [pid 62427:tid 62480] [client 20.220.161.95:13180] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ss.php"] [unique_id "ahOZcPMUa83fc4GDyBz3_wAAAVc"]
[Mon May 25 08:36:00.747585 2026] [:error] [pid 62428:tid 62488] [client 20.220.161.95:13140] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "ahOZcJNosGBa7mui3VSkhgAAAIQ"]
[Mon May 25 08:36:01.359318 2026] [:error] [pid 62428:tid 62485] [client 20.220.161.95:13197] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "ahOZcZNosGBa7mui3VSkhwAAAIE"]
[Mon May 25 08:36:02.056006 2026] [:error] [pid 62427:tid 62478] [client 20.220.161.95:13178] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "ahOZcvMUa83fc4GDyBz4AwAAAVU"]
[Mon May 25 08:36:02.846049 2026] [:error] [pid 62427:tid 62465] [client 20.220.161.95:13170] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/options.php"] [unique_id "ahOZcvMUa83fc4GDyBz4BgAAAUg"]
[Mon May 25 08:36:03.830928 2026] [:error] [pid 62428:tid 62489] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/min.php
[Mon May 25 08:36:04.098163 2026] [:error] [pid 62428:tid 62507] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Mon May 25 08:36:04.369000 2026] [:error] [pid 62428:tid 62501] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Mon May 25 08:36:04.632156 2026] [:error] [pid 62428:tid 62486] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Mon May 25 08:36:04.891656 2026] [:error] [pid 62428:tid 62499] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Mon May 25 08:36:05.150716 2026] [:error] [pid 62428:tid 62497] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/aj11.php
[Mon May 25 08:36:05.460841 2026] [:error] [pid 62428:tid 62494] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Mon May 25 08:36:05.742468 2026] [:error] [pid 62428:tid 62502] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Mon May 25 08:36:06.001127 2026] [:error] [pid 62428:tid 62496] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Mon May 25 08:36:06.287616 2026] [:error] [pid 62428:tid 62495] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Mon May 25 08:36:06.547431 2026] [:error] [pid 62428:tid 62493] [client 20.220.161.95:13149] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Mon May 25 08:36:06.823733 2026] [:error] [pid 62428:tid 62488] [client 20.220.161.95:13149] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "ahOZdpNosGBa7mui3VSklQAAAIQ"]
[Mon May 25 08:36:07.651774 2026] [:error] [pid 62427:tid 62463] [client 20.220.161.95:13155] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "ahOZd_MUa83fc4GDyBz4DgAAAUY"]
[Mon May 25 08:36:08.601453 2026] [:error] [pid 62722:tid 62738] [client 20.220.161.95:13187] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "ahOZeKM6ssnLWYf6CVBQ6wAAAE4"]
[Mon May 25 08:36:09.737890 2026] [:error] [pid 62722:tid 62739] [client 20.220.161.95:13310] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wps.php"] [unique_id "ahOZeaM6ssnLWYf6CVBQ7wAAAE8"]
[Mon May 25 08:36:11.938987 2026] [:error] [pid 62427:tid 62461] [client 20.220.161.95:13309] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "ahOZe_MUa83fc4GDyBz4FwAAAUQ"]
[Mon May 25 08:36:14.149432 2026] [:error] [pid 62427:tid 62475] [client 20.220.161.95:13268] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "ahOZfvMUa83fc4GDyBz4HgAAAVI"]
[Mon May 25 08:36:17.473816 2026] [:error] [pid 62428:tid 62501] [client 20.220.161.95:13245] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "ahOZgZNosGBa7mui3VSkmgAAAJE"]
[Mon May 25 08:36:19.759808 2026] [:error] [pid 62722:tid 62737] [client 20.220.161.95:13072] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/alpha.php"] [unique_id "ahOZg6M6ssnLWYf6CVBRHgAAAE0"]
[Mon May 25 08:36:20.517931 2026] [:error] [pid 62722:tid 62730] [client 20.220.161.95:13061] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "ahOZhKM6ssnLWYf6CVBRIgAAAEY"]
[Mon May 25 08:36:21.422862 2026] [:error] [pid 62722:tid 62738] [client 20.220.161.95:13214] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "ahOZhaM6ssnLWYf6CVBRKAAAAE4"]
[Mon May 25 08:36:22.644445 2026] [:error] [pid 62515:tid 62531] [client 20.220.161.95:13280] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "ahOZhhig0_XsOwmnrv9YvQAAAM4"]
[Mon May 25 08:36:23.491121 2026] [:error] [pid 62722:tid 62727] [client 20.220.161.95:13293] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/bob.php"] [unique_id "ahOZh6M6ssnLWYf6CVBRLgAAAEM"]
[Mon May 25 08:36:24.477504 2026] [:error] [pid 62722:tid 62747] [client 20.220.161.95:13132] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahOZiKM6ssnLWYf6CVBRMAAAAFc"]
[Mon May 25 08:36:25.031823 2026] [:error] [pid 62722:tid 62737] [client 20.220.161.95:13138] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahOZiaM6ssnLWYf6CVBRMwAAAE0"]
[Mon May 25 08:36:25.722108 2026] [:error] [pid 62722:tid 62746] [client 20.220.161.95:13146] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahOZiaM6ssnLWYf6CVBROAAAAFY"]
[Mon May 25 08:36:26.689174 2026] [:error] [pid 62428:tid 62507] [client 20.220.161.95:13283] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/yuzuru1.php"] [unique_id "ahOZipNosGBa7mui3VSkqgAAAJc"]
[Mon May 25 08:36:27.663414 2026] [:error] [pid 62722:tid 62732] [client 20.220.161.95:13166] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "ahOZi6M6ssnLWYf6CVBRPwAAAEg"]
[Mon May 25 08:36:29.133601 2026] [:error] [pid 62427:tid 62471] [client 20.220.161.95:13304] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "ahOZjfMUa83fc4GDyBz4JAAAAU4"]
[Mon May 25 08:36:31.044856 2026] [:error] [pid 62722:tid 62730] [client 20.220.161.95:13070] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "ahOZj6M6ssnLWYf6CVBRRgAAAEY"]
[Mon May 25 08:36:32.058778 2026] [:error] [pid 62428:tid 62484] [client 20.220.161.95:13075] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/insta.php"] [unique_id "ahOZkJNosGBa7mui3VSkqwAAAIA"]
[Mon May 25 08:36:33.050108 2026] [:error] [pid 62515:tid 62524] [client 20.220.161.95:13066] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "ahOZkRig0_XsOwmnrv9YxwAAAMc"]
[Mon May 25 08:36:34.747042 2026] [:error] [pid 62515:tid 62537] [client 20.220.161.95:13143] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "ahOZkhig0_XsOwmnrv9YyQAAANQ"]
[Mon May 25 08:36:36.388893 2026] [:error] [pid 62515:tid 62523] [client 20.220.161.95:13077] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "ahOZlBig0_XsOwmnrv9YzQAAAMY"]
[Mon May 25 08:36:37.297721 2026] [:error] [pid 62428:tid 62506] [client 20.220.161.95:13150] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-kz.php"] [unique_id "ahOZlZNosGBa7mui3VSkrAAAAJY"]
[Mon May 25 08:36:38.076138 2026] [:error] [pid 62428:tid 62491] [client 20.220.161.95:13220] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "ahOZlpNosGBa7mui3VSkrQAAAIc"]
[Mon May 25 08:36:39.167843 2026] [:error] [pid 62428:tid 62497] [client 20.220.161.95:13089] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "ahOZl5NosGBa7mui3VSkrwAAAI0"]
[Mon May 25 08:36:39.923916 2026] [:error] [pid 62722:tid 62741] [client 20.220.161.95:13247] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "ahOZl6M6ssnLWYf6CVBRTgAAAFE"]
[Mon May 25 08:36:40.597422 2026] [:error] [pid 62515:tid 62524] [client 20.220.161.95:13120] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xs.php"] [unique_id "ahOZmBig0_XsOwmnrv9Y1QAAAMc"]
[Mon May 25 08:36:41.671499 2026] [:error] [pid 62428:tid 62487] [client 20.220.161.95:13100] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ahOZmZNosGBa7mui3VSktQAAAIM"]
[Mon May 25 08:36:42.502693 2026] [:error] [pid 62722:tid 62744] [client 20.220.161.95:13094] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ahOZmqM6ssnLWYf6CVBRUQAAAFQ"]
[Mon May 25 08:36:43.669507 2026] [:error] [pid 62722:tid 62724] [client 20.220.161.95:13179] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ahOZm6M6ssnLWYf6CVBRUwAAAEA"]
[Mon May 25 08:36:44.611834 2026] [:error] [pid 62722:tid 62745] [client 20.220.161.95:13167] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2026w.php"] [unique_id "ahOZnKM6ssnLWYf6CVBRVgAAAFU"]
[Mon May 25 08:36:45.409901 2026] [:error] [pid 62428:tid 62507] [client 20.220.161.95:13174] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ahOZnZNosGBa7mui3VSkuQAAAJc"]
[Mon May 25 08:36:45.872558 2026] [:error] [pid 62722:tid 62740] [client 20.220.161.95:13151] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ahOZnaM6ssnLWYf6CVBRWAAAAFA"]
[Mon May 25 08:36:46.449807 2026] [:error] [pid 62722:tid 62748] [client 20.220.161.95:13085] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ahOZnqM6ssnLWYf6CVBRWgAAAFg"]
[Mon May 25 08:36:47.073665 2026] [:error] [pid 62427:tid 62476] [client 20.220.161.95:13145] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/f35.php"] [unique_id "ahOZn_MUa83fc4GDyBz4KwAAAVM"]
[Mon May 25 08:36:47.802015 2026] [:error] [pid 62427:tid 62480] [client 20.220.161.95:13159] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ahOZn_MUa83fc4GDyBz4LQAAAVc"]
[Mon May 25 08:36:48.368187 2026] [:error] [pid 62515:tid 62537] [client 20.220.161.95:13157] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ahOZoBig0_XsOwmnrv9Y5wAAANQ"]
[Mon May 25 08:36:49.662307 2026] [:error] [pid 62515:tid 62530] [client 20.220.161.95:13121] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ahOZoRig0_XsOwmnrv9Y6wAAAM0"]
[Mon May 25 08:36:50.329579 2026] [:error] [pid 62722:tid 62743] [client 20.220.161.95:13171] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xwx1.php"] [unique_id "ahOZoqM6ssnLWYf6CVBRWwAAAFM"]
[Mon May 25 08:36:51.207102 2026] [:error] [pid 62428:tid 62485] [client 20.220.161.95:13279] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahOZo5NosGBa7mui3VSkvAAAAIE"]
[Mon May 25 08:36:52.727261 2026] [:error] [pid 62515:tid 62540] [client 20.220.161.95:13131] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahOZpBig0_XsOwmnrv9ZCgAAANc"]
[Mon May 25 08:36:54.700080 2026] [:error] [pid 62722:tid 62744] [client 20.220.161.95:13079] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahOZpqM6ssnLWYf6CVBRuQAAAFQ"]
[Mon May 25 08:36:56.730739 2026] [:error] [pid 62515:tid 62518] [client 20.220.161.95:13238] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xmu.php"] [unique_id "ahOZqBig0_XsOwmnrv9ZHAAAAME"]
[Mon May 25 08:36:58.683376 2026] [:error] [pid 62515:tid 62537] [client 20.220.161.95:13199] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ahOZqhig0_XsOwmnrv9ZIAAAANQ"]
[Mon May 25 08:37:00.402340 2026] [:error] [pid 62426:tid 62444] [client 20.220.161.95:13176] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ahOZrEj3D3Mo8ANpTRB27wAAAA4"]
[Mon May 25 08:37:01.128813 2026] [:error] [pid 62426:tid 62448] [client 20.220.161.95:13078] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ahOZrUj3D3Mo8ANpTRB28QAAABI"]
[Mon May 25 08:37:02.259643 2026] [:error] [pid 62426:tid 62443] [client 20.220.161.95:13160] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/simple.php"] [unique_id "ahOZrkj3D3Mo8ANpTRB28wAAAA0"]
[Mon May 25 08:37:03.246651 2026] [:error] [pid 62427:tid 62475] [client 20.220.161.95:13168] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "ahOZr_MUa83fc4GDyBz4NgAAAVI"]
[Mon May 25 08:37:04.606975 2026] [:error] [pid 62427:tid 62457] [client 20.220.161.95:13056] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "ahOZsPMUa83fc4GDyBz4OQAAAUA"]
[Mon May 25 08:37:05.398451 2026] [:error] [pid 62515:tid 62537] [client 20.220.161.95:12996] [client 20.220.161.95] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/ayk.php"] [unique_id "ahOZsRig0_XsOwmnrv9ZKQAAANQ"]
[Mon May 25 08:37:06.169158 2026] [:error] [pid 62722:tid 62728] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/ayk.php
[Mon May 25 08:37:06.387345 2026] [:error] [pid 62722:tid 62748] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php
[Mon May 25 08:37:06.602025 2026] [:error] [pid 62722:tid 62744] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxml.php
[Mon May 25 08:37:06.816807 2026] [:error] [pid 62722:tid 62731] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Mon May 25 08:37:07.032927 2026] [:error] [pid 62722:tid 62742] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Mon May 25 08:37:07.314646 2026] [:error] [pid 62722:tid 62747] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Mon May 25 08:37:07.848424 2026] [:error] [pid 62722:tid 62735] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Mon May 25 08:37:08.064960 2026] [:error] [pid 62722:tid 62727] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/xstelth.php
[Mon May 25 08:37:08.289252 2026] [:error] [pid 62722:tid 62730] [client 20.220.161.95:13000] File does not exist: /usr/local/apache/htdocs/suspended-page/3369.php
[Mon May 25 09:16:55.560523 2026] [:error] [pid 62426:tid 62437] [client 52.238.197.40:55929] File does not exist: /usr/local/apache/htdocs/suspended-page/ups.php
[Mon May 25 10:58:09.292018 2026] [:error] [pid 62426:tid 62451] [client 43.130.16.212:38906] [client 43.130.16.212] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahO6wUj3D3Mo8ANpTRCVZAAAABU"]
[Mon May 25 13:40:48.595647 2026] [:error] [pid 62722:tid 62745] [client 43.164.190.124:43266] [client 43.164.190.124] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahPg4KM6ssnLWYf6CVDnFAAAAFU"]
[Mon May 25 17:21:54.575322 2026] [:error] [pid 62515:tid 62526] [client 43.136.167.197:50534] [client 43.136.167.197] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahQUshig0_XsOwmnrv_8ngAAAMk"]
[Mon May 25 18:37:53.328412 2026] [:error] [pid 62426:tid 62432] [client 43.167.157.80:60370] [client 43.167.157.80] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahQmgUj3D3Mo8ANpTRDkdgAAAAI"]
[Mon May 25 21:42:28.699628 2026] [:error] [pid 62515:tid 62535] [client 43.153.12.58:42926] [client 43.153.12.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahRRxBig0_XsOwmnrv9NfgAAANI"]
[Mon May 25 23:00:46.888994 2026] [:error] [pid 62426:tid 62441] [client 119.45.7.86:48880] [client 119.45.7.86] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahRkHkj3D3Mo8ANpTRAvHwAAAAs"]
[Tue May 26 01:32:45.443790 2026] [:error] [pid 53791:tid 53798] [client 43.166.242.189:42398] [client 43.166.242.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahSHvSCRhhNTD40Nf1VRVgAAAYU"]
[Tue May 26 03:58:08.190542 2026] [:error] [pid 20025:tid 20083] [client 101.32.208.70:55890] [client 101.32.208.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahSp0H7k8Vts-JPOkgWLoAAAAFI"]
[Tue May 26 04:38:04.695386 2026] [:error] [pid 20125:tid 20150] [client 106.54.62.156:48798] [client 106.54.62.156] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahSzLNk9jeWERFDLJc5nWwAAANc"]
[Tue May 26 04:40:01.511228 2026] [:error] [pid 20125:tid 20127] [client 134.199.171.224:45062] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ahSzodk9jeWERFDLJc5n6gAAAMA"]
[Tue May 26 04:40:01.663963 2026] [:error] [pid 20125:tid 20150] [client 134.199.171.224:37054] [client 134.199.171.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dbservices.com.au"] [uri "/.git/config"] [unique_id "ahSzodk9jeWERFDLJc5n7AAAANc"]
[Tue May 26 04:40:02.094721 2026] [:error] [pid 20026:tid 20113] [client 134.199.171.224:45134] [client 134.199.171.224] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.dbservices.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.dbservices.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahSzojXIXIr-5BZ8nR7R9AAAAJU"]
[Tue May 26 04:40:02.094966 2026] [:error] [pid 20026:tid 20113] [client 134.199.171.224:45134] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahSzojXIXIr-5BZ8nR7R9AAAAJU"]
[Tue May 26 04:40:02.097328 2026] [:error] [pid 20026:tid 20111] [client 134.199.171.224:45068] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R9QAAAJM"]
[Tue May 26 04:40:02.115001 2026] [:error] [pid 55988:tid 56014] [client 134.199.171.224:45072] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6XgAAARc"]
[Tue May 26 04:40:02.170245 2026] [:error] [pid 55988:tid 56015] [client 134.199.171.224:45116] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6XwAAARg"]
[Tue May 26 04:40:02.170569 2026] [:error] [pid 55988:tid 55996] [client 134.199.171.224:45110] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6YAAAAQU"]
[Tue May 26 04:40:02.170795 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:45090] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6YQAAARM"]
[Tue May 26 04:40:02.203459 2026] [:error] [pid 55988:tid 56006] [client 134.199.171.224:45098] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6YgAAAQ8"]
[Tue May 26 04:40:02.206960 2026] [:error] [pid 55988:tid 56000] [client 134.199.171.224:45130] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6ZAAAAQk"]
[Tue May 26 04:40:02.207154 2026] [:error] [pid 55988:tid 56005] [client 134.199.171.224:45150] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6ZQAAAQ4"]
[Tue May 26 04:40:02.207300 2026] [:error] [pid 55988:tid 56001] [client 134.199.171.224:45076] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6YwAAAQo"]
[Tue May 26 04:40:02.207484 2026] [:error] [pid 55988:tid 56003] [client 134.199.171.224:45100] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6ZgAAAQw"]
[Tue May 26 04:40:02.306700 2026] [:error] [pid 20026:tid 20107] [client 134.199.171.224:45222] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R9gAAAI8"]
[Tue May 26 04:40:02.308124 2026] [:error] [pid 55988:tid 55994] [client 134.199.171.224:45214] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6ZwAAAQM"]
[Tue May 26 04:40:02.310005 2026] [:error] [pid 20024:tid 20043] [client 134.199.171.224:45208] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8BwAAAAU"]
[Tue May 26 04:40:02.311669 2026] [:error] [pid 20024:tid 20041] [client 134.199.171.224:45162] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8CAAAAAM"]
[Tue May 26 04:40:02.312326 2026] [:error] [pid 20026:tid 20102] [client 134.199.171.224:45192] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R9wAAAIo"]
[Tue May 26 04:40:02.313347 2026] [:error] [pid 55988:tid 55995] [client 134.199.171.224:45156] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6aAAAAQQ"]
[Tue May 26 04:40:02.314741 2026] [:error] [pid 55988:tid 55991] [client 134.199.171.224:45178] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6aQAAAQA"]
[Tue May 26 04:40:02.326295 2026] [:error] [pid 20026:tid 20109] [client 134.199.171.224:45230] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R-AAAAJE"]
[Tue May 26 04:40:02.351008 2026] [:error] [pid 55988:tid 56004] [client 134.199.171.224:45236] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6agAAAQ0"]
[Tue May 26 04:40:02.354437 2026] [:error] [pid 55988:tid 56013] [client 134.199.171.224:45246] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6awAAARY"]
[Tue May 26 04:40:02.375937 2026] [:error] [pid 20024:tid 20040] [client 134.199.171.224:45244] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8CQAAAAI"]
[Tue May 26 04:40:02.395955 2026] [:error] [pid 55988:tid 55993] [client 134.199.171.224:45272] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6bAAAAQI"]
[Tue May 26 04:40:02.397013 2026] [:error] [pid 20026:tid 20103] [client 134.199.171.224:45256] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R-QAAAIs"]
[Tue May 26 04:40:02.400392 2026] [:error] [pid 20026:tid 20092] [client 134.199.171.224:45276] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R-gAAAIA"]
[Tue May 26 04:40:02.459078 2026] [:error] [pid 20026:tid 20095] [client 134.199.171.224:45288] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R-wAAAIM"]
[Tue May 26 04:40:02.459919 2026] [:error] [pid 20026:tid 20093] [client 134.199.171.224:45314] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R_AAAAIE"]
[Tue May 26 04:40:02.460996 2026] [:error] [pid 20026:tid 20108] [client 134.199.171.224:45330] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R_QAAAJA"]
[Tue May 26 04:40:02.462759 2026] [:error] [pid 20125:tid 20147] [client 134.199.171.224:45292] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSzotk9jeWERFDLJc5n7wAAANQ"]
[Tue May 26 04:40:02.462824 2026] [:error] [pid 20125:tid 20140] [client 134.199.171.224:45300] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahSzotk9jeWERFDLJc5n8AAAAM0"]
[Tue May 26 04:40:02.551121 2026] [:error] [pid 20026:tid 20094] [client 134.199.171.224:45278] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R_gAAAII"]
[Tue May 26 04:40:02.562800 2026] [:error] [pid 20026:tid 20099] [client 134.199.171.224:45368] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7R_wAAAIc"]
[Tue May 26 04:40:02.586661 2026] [:error] [pid 55988:tid 56009] [client 134.199.171.224:45378] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahSzov3kVIz2sql52sc6bQAAARI"]
[Tue May 26 04:40:02.588692 2026] [:error] [pid 20026:tid 20110] [client 134.199.171.224:45352] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SAAAAAJI"]
[Tue May 26 04:40:02.588943 2026] [:error] [pid 20026:tid 20114] [client 134.199.171.224:45342] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SAQAAAJY"]
[Tue May 26 04:40:02.639606 2026] [:error] [pid 20024:tid 20062] [client 134.199.171.224:45394] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8CgAAABg"]
[Tue May 26 04:40:02.640052 2026] [:error] [pid 20026:tid 20098] [client 134.199.171.224:45402] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SAgAAAIY"]
[Tue May 26 04:40:02.643400 2026] [:error] [pid 20024:tid 20057] [client 134.199.171.224:45382] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/upload/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8CwAAABM"]
[Tue May 26 04:40:02.660299 2026] [:error] [pid 20024:tid 20047] [client 134.199.171.224:45436] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8DAAAAAk"]
[Tue May 26 04:40:02.662756 2026] [:error] [pid 20026:tid 20096] [client 134.199.171.224:45418] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SAwAAAIQ"]
[Tue May 26 04:40:02.663075 2026] [:error] [pid 20024:tid 20053] [client 134.199.171.224:45424] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8DQAAAA8"]
[Tue May 26 04:40:02.666662 2026] [:error] [pid 20026:tid 20101] [client 134.199.171.224:45438] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SBAAAAIk"]
[Tue May 26 04:40:02.696723 2026] [:error] [pid 20024:tid 20049] [client 134.199.171.224:45440] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8DwAAAAs"]
[Tue May 26 04:40:02.728156 2026] [:error] [pid 20026:tid 20106] [client 134.199.171.224:45456] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SBQAAAI4"]
[Tue May 26 04:40:02.734624 2026] [:error] [pid 20026:tid 20116] [client 134.199.171.224:45462] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SBgAAAJg"]
[Tue May 26 04:40:02.735317 2026] [:error] [pid 20026:tid 20104] [client 134.199.171.224:45466] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SBwAAAIw"]
[Tue May 26 04:40:02.750572 2026] [:error] [pid 20026:tid 20112] [client 134.199.171.224:45482] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SCQAAAJQ"]
[Tue May 26 04:40:02.808942 2026] [:error] [pid 20026:tid 20105] [client 134.199.171.224:45484] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SCgAAAI0"]
[Tue May 26 04:40:02.826485 2026] [:error] [pid 20026:tid 20100] [client 134.199.171.224:45528] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SCwAAAIg"]
[Tue May 26 04:40:02.826735 2026] [:error] [pid 20024:tid 20060] [client 134.199.171.224:45534] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8EQAAABY"]
[Tue May 26 04:40:02.829019 2026] [:error] [pid 20024:tid 20050] [client 134.199.171.224:45512] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8EgAAAAw"]
[Tue May 26 04:40:02.830768 2026] [:error] [pid 20024:tid 20052] [client 134.199.171.224:45500] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8EwAAAA4"]
[Tue May 26 04:40:02.853568 2026] [:error] [pid 20026:tid 20113] [client 134.199.171.224:45538] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SDAAAAJU"]
[Tue May 26 04:40:02.862629 2026] [:error] [pid 20026:tid 20111] [client 134.199.171.224:45488] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SDQAAAJM"]
[Tue May 26 04:40:02.882701 2026] [:error] [pid 20024:tid 20045] [client 134.199.171.224:45546] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8FAAAAAc"]
[Tue May 26 04:40:02.887905 2026] [:error] [pid 20024:tid 20061] [client 134.199.171.224:45550] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8FQAAABc"]
[Tue May 26 04:40:02.899389 2026] [:error] [pid 20026:tid 20115] [client 134.199.171.224:45562] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahSzojXIXIr-5BZ8nR7SDgAAAJc"]
[Tue May 26 04:40:02.915397 2026] [:error] [pid 20125:tid 20139] [client 134.199.171.224:45568] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSzotk9jeWERFDLJc5n8gAAAMw"]
[Tue May 26 04:40:02.941884 2026] [:error] [pid 20125:tid 20128] [client 134.199.171.224:45578] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahSzotk9jeWERFDLJc5n8wAAAME"]
[Tue May 26 04:40:02.951460 2026] [:error] [pid 20024:tid 20054] [client 134.199.171.224:45594] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8FgAAABA"]
[Tue May 26 04:40:02.972186 2026] [:error] [pid 20024:tid 20039] [client 134.199.171.224:45596] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSzoldk7QtxEB93Npf8FwAAAAE"]
[Tue May 26 04:40:03.168470 2026] [:error] [pid 20125:tid 20143] [client 134.199.171.224:45654] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5n9AAAANA"]
[Tue May 26 04:40:03.169281 2026] [:error] [pid 55988:tid 56011] [client 134.199.171.224:45616] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6bgAAARQ"]
[Tue May 26 04:40:03.169912 2026] [:error] [pid 55988:tid 55997] [client 134.199.171.224:45618] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6bwAAAQY"]
[Tue May 26 04:40:03.170330 2026] [:error] [pid 20026:tid 20107] [client 134.199.171.224:45600] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/server/php/"] [unique_id "ahSzozXIXIr-5BZ8nR7SDwAAAI8"]
[Tue May 26 04:40:03.170879 2026] [:error] [pid 55988:tid 56012] [client 134.199.171.224:45640] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6cAAAARU"]
[Tue May 26 04:40:03.171962 2026] [:error] [pid 55988:tid 56007] [client 134.199.171.224:45632] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6cQAAARA"]
[Tue May 26 04:40:03.179390 2026] [:error] [pid 55988:tid 55999] [client 134.199.171.224:45672] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6cgAAAQg"]
[Tue May 26 04:40:03.184319 2026] [:error] [pid 20026:tid 20102] [client 134.199.171.224:45658] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahSzozXIXIr-5BZ8nR7SEAAAAIo"]
[Tue May 26 04:40:03.223941 2026] [:error] [pid 20026:tid 20109] [client 134.199.171.224:45660] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahSzozXIXIr-5BZ8nR7SEQAAAJE"]
[Tue May 26 04:40:03.264421 2026] [:error] [pid 55988:tid 56008] [client 134.199.171.224:45692] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6cwAAARE"]
[Tue May 26 04:40:03.268875 2026] [:error] [pid 20125:tid 20135] [client 134.199.171.224:45768] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5n9QAAAMg"]
[Tue May 26 04:40:03.269353 2026] [:error] [pid 55988:tid 56014] [client 134.199.171.224:45728] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6dAAAARc"]
[Tue May 26 04:40:03.269909 2026] [:error] [pid 55988:tid 55996] [client 134.199.171.224:45722] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6dQAAAQU"]
[Tue May 26 04:40:03.270657 2026] [:error] [pid 20026:tid 20092] [client 134.199.171.224:45690] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahSzozXIXIr-5BZ8nR7SEgAAAIA"]
[Tue May 26 04:40:03.272032 2026] [:error] [pid 55988:tid 56015] [client 134.199.171.224:45706] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6dgAAARg"]
[Tue May 26 04:40:03.272740 2026] [:error] [pid 55988:tid 55998] [client 134.199.171.224:45718] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6dwAAAQc"]
[Tue May 26 04:40:03.273920 2026] [:error] [pid 20125:tid 20146] [client 134.199.171.224:45678] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSzo9k9jeWERFDLJc5n9gAAANM"]
[Tue May 26 04:40:03.275105 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:45694] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahSzo9k9jeWERFDLJc5n9wAAAM8"]
[Tue May 26 04:40:03.294692 2026] [:error] [pid 20125:tid 20130] [client 134.199.171.224:45784] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahSzo9k9jeWERFDLJc5n-AAAAMM"]
[Tue May 26 04:40:03.297864 2026] [:error] [pid 20026:tid 20095] [client 134.199.171.224:45754] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahSzozXIXIr-5BZ8nR7SEwAAAIM"]
[Tue May 26 04:40:03.300948 2026] [:error] [pid 20125:tid 20131] [client 134.199.171.224:45740] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahSzo9k9jeWERFDLJc5n-QAAAMQ"]
[Tue May 26 04:40:03.339376 2026] [:error] [pid 20026:tid 20093] [client 134.199.171.224:45800] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahSzozXIXIr-5BZ8nR7SFAAAAIE"]
[Tue May 26 04:40:03.340472 2026] [:error] [pid 20026:tid 20108] [client 134.199.171.224:45804] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSzozXIXIr-5BZ8nR7SFQAAAJA"]
[Tue May 26 04:40:03.351975 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:45808] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6eAAAARM"]
[Tue May 26 04:40:03.352388 2026] [:error] [pid 55988:tid 56006] [client 134.199.171.224:45822] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6eQAAAQ8"]
[Tue May 26 04:40:03.357403 2026] [:error] [pid 20125:tid 20134] [client 134.199.171.224:45848] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahSzo9k9jeWERFDLJc5n-gAAAMc"]
[Tue May 26 04:40:03.357526 2026] [:error] [pid 20024:tid 20051] [client 134.199.171.224:45858] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSzo1dk7QtxEB93Npf8GQAAAA0"]
[Tue May 26 04:40:03.360138 2026] [:error] [pid 55988:tid 56000] [client 134.199.171.224:45836] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/server/php/"] [unique_id "ahSzo_3kVIz2sql52sc6egAAAQk"]
[Tue May 26 04:40:03.360886 2026] [:error] [pid 20125:tid 20149] [client 134.199.171.224:45838] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahSzo9k9jeWERFDLJc5n-wAAANY"]
[Tue May 26 04:40:03.388617 2026] [:error] [pid 20024:tid 20059] [client 134.199.171.224:45864] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/server/php/"] [unique_id "ahSzo1dk7QtxEB93Npf8GgAAABU"]
[Tue May 26 04:40:03.391177 2026] [:error] [pid 20024:tid 20038] [client 134.199.171.224:45872] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/server/php/"] [unique_id "ahSzo1dk7QtxEB93Npf8GwAAAAA"]
[Tue May 26 04:40:03.396026 2026] [:error] [pid 20024:tid 20048] [client 134.199.171.224:45868] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugin/server/php/"] [unique_id "ahSzo1dk7QtxEB93Npf8HAAAAAo"]
[Tue May 26 04:40:03.396408 2026] [:error] [pid 20024:tid 20058] [client 134.199.171.224:45844] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/server/php/"] [unique_id "ahSzo1dk7QtxEB93Npf8HQAAABQ"]
[Tue May 26 04:40:03.440005 2026] [:error] [pid 20024:tid 20055] [client 134.199.171.224:45894] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahSzo1dk7QtxEB93Npf8HgAAABE"]
[Tue May 26 04:40:03.441138 2026] [:error] [pid 20125:tid 20151] [client 134.199.171.224:45884] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5n_AAAANg"]
[Tue May 26 04:40:03.441186 2026] [:error] [pid 20125:tid 20127] [client 134.199.171.224:45876] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahSzo9k9jeWERFDLJc5n_QAAAMA"]
[Tue May 26 04:40:03.567340 2026] [:error] [pid 55988:tid 56001] [client 134.199.171.224:45950] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6fAAAAQo"]
[Tue May 26 04:40:03.569118 2026] [:error] [pid 55988:tid 56003] [client 134.199.171.224:45926] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6fQAAAQw"]
[Tue May 26 04:40:03.569302 2026] [:error] [pid 55988:tid 55995] [client 134.199.171.224:45918] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6fgAAAQQ"]
[Tue May 26 04:40:03.571641 2026] [:error] [pid 55988:tid 55994] [client 134.199.171.224:45924] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6fwAAAQM"]
[Tue May 26 04:40:03.571919 2026] [:error] [pid 55988:tid 55991] [client 134.199.171.224:45942] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6gAAAAQA"]
[Tue May 26 04:40:03.572565 2026] [:error] [pid 55988:tid 56004] [client 134.199.171.224:45902] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6gQAAAQ0"]
[Tue May 26 04:40:03.583963 2026] [:error] [pid 55988:tid 56013] [client 134.199.171.224:45966] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6ggAAARY"]
[Tue May 26 04:40:03.590184 2026] [:error] [pid 55988:tid 55993] [client 134.199.171.224:45980] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6gwAAAQI"]
[Tue May 26 04:40:03.591737 2026] [:error] [pid 55988:tid 56009] [client 134.199.171.224:45976] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6hAAAARI"]
[Tue May 26 04:40:03.639073 2026] [:error] [pid 55988:tid 56011] [client 134.199.171.224:46006] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6hQAAARQ"]
[Tue May 26 04:40:03.640597 2026] [:error] [pid 55988:tid 56012] [client 134.199.171.224:45990] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6hgAAARU"]
[Tue May 26 04:40:03.659767 2026] [:error] [pid 55988:tid 56007] [client 134.199.171.224:46036] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6hwAAARA"]
[Tue May 26 04:40:03.662308 2026] [:error] [pid 55988:tid 55999] [client 134.199.171.224:46092] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6iAAAAQg"]
[Tue May 26 04:40:03.675827 2026] [:error] [pid 55988:tid 56015] [client 134.199.171.224:46078] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6igAAARg"]
[Tue May 26 04:40:03.676738 2026] [:error] [pid 55988:tid 55996] [client 134.199.171.224:46022] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6iwAAAQU"]
[Tue May 26 04:40:03.677061 2026] [:error] [pid 55988:tid 55997] [client 134.199.171.224:46052] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6iQAAAQY"]
[Tue May 26 04:40:03.677604 2026] [:error] [pid 55988:tid 56014] [client 134.199.171.224:46062] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6jAAAARc"]
[Tue May 26 04:40:03.679531 2026] [:error] [pid 55988:tid 56008] [client 134.199.171.224:46104] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6jQAAARE"]
[Tue May 26 04:40:03.692903 2026] [:error] [pid 55988:tid 55998] [client 134.199.171.224:46132] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6jgAAAQc"]
[Tue May 26 04:40:03.696725 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:46136] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6jwAAARM"]
[Tue May 26 04:40:03.699109 2026] [:error] [pid 55988:tid 56006] [client 134.199.171.224:46116] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6kAAAAQ8"]
[Tue May 26 04:40:03.708848 2026] [:error] [pid 55988:tid 56000] [client 134.199.171.224:46146] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6kQAAAQk"]
[Tue May 26 04:40:03.716208 2026] [:error] [pid 55988:tid 56001] [client 134.199.171.224:46152] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6kgAAAQo"]
[Tue May 26 04:40:03.726109 2026] [:error] [pid 55988:tid 55995] [client 134.199.171.224:46226] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6kwAAAQQ"]
[Tue May 26 04:40:03.726711 2026] [:error] [pid 20125:tid 20141] [client 134.199.171.224:46162] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5n_gAAAM4"]
[Tue May 26 04:40:03.727284 2026] [:error] [pid 55988:tid 56003] [client 134.199.171.224:46178] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahSzo_3kVIz2sql52sc6lAAAAQw"]
[Tue May 26 04:40:03.728853 2026] [:error] [pid 20125:tid 20137] [client 134.199.171.224:46218] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5n_wAAAMo"]
[Tue May 26 04:40:03.733479 2026] [:error] [pid 20125:tid 20132] [client 134.199.171.224:46234] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oAAAAAMU"]
[Tue May 26 04:40:03.734331 2026] [:error] [pid 20125:tid 20145] [client 134.199.171.224:46208] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oAQAAANI"]
[Tue May 26 04:40:03.735614 2026] [:error] [pid 20125:tid 20133] [client 134.199.171.224:46192] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oAgAAAMY"]
[Tue May 26 04:40:03.817206 2026] [:error] [pid 20024:tid 20040] [client 134.199.171.224:46280] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahSzo1dk7QtxEB93Npf8HwAAAAI"]
[Tue May 26 04:40:03.820412 2026] [:error] [pid 20125:tid 20147] [client 134.199.171.224:46250] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oAwAAANQ"]
[Tue May 26 04:40:03.821191 2026] [:error] [pid 20125:tid 20133] [client 134.199.171.224:46260] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oBAAAAMY"]
[Tue May 26 04:40:03.822335 2026] [:error] [pid 20125:tid 20140] [client 134.199.171.224:46268] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oBQAAAM0"]
[Tue May 26 04:40:03.838829 2026] [:error] [pid 20026:tid 20094] [client 134.199.171.224:46286] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahSzozXIXIr-5BZ8nR7SFgAAAII"]
[Tue May 26 04:40:03.940389 2026] [:error] [pid 20125:tid 20136] [client 134.199.171.224:46312] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oBgAAAMk"]
[Tue May 26 04:40:03.940754 2026] [:error] [pid 20125:tid 20148] [client 134.199.171.224:46298] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oBwAAANU"]
[Tue May 26 04:40:03.953107 2026] [:error] [pid 20125:tid 20139] [client 134.199.171.224:46322] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oCAAAAMw"]
[Tue May 26 04:40:03.969554 2026] [:error] [pid 20125:tid 20143] [client 134.199.171.224:46324] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oCQAAANA"]
[Tue May 26 04:40:03.970212 2026] [:error] [pid 20125:tid 20128] [client 134.199.171.224:46328] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oCgAAAME"]
[Tue May 26 04:40:03.983204 2026] [:error] [pid 20125:tid 20146] [client 134.199.171.224:46354] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oCwAAANM"]
[Tue May 26 04:40:03.988543 2026] [:error] [pid 20125:tid 20128] [client 134.199.171.224:46366] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oDAAAAME"]
[Tue May 26 04:40:03.989858 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:46344] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oDgAAAM8"]
[Tue May 26 04:40:03.990399 2026] [:error] [pid 20125:tid 20135] [client 134.199.171.224:46346] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahSzo9k9jeWERFDLJc5oDQAAAMg"]
[Tue May 26 04:40:04.022908 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:46368] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahSzpNk9jeWERFDLJc5oDwAAAM8"]
[Tue May 26 04:40:04.024636 2026] [:error] [pid 20026:tid 20099] [client 134.199.171.224:46380] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahSzpDXIXIr-5BZ8nR7SFwAAAIc"]
[Tue May 26 04:40:04.037868 2026] [:error] [pid 20026:tid 20110] [client 134.199.171.224:46392] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahSzpDXIXIr-5BZ8nR7SGAAAAJI"]
[Tue May 26 04:40:04.038457 2026] [:error] [pid 20024:tid 20057] [client 134.199.171.224:46394] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahSzpFdk7QtxEB93Npf8IAAAABM"]
[Tue May 26 04:40:04.056553 2026] [:error] [pid 20024:tid 20047] [client 134.199.171.224:46416] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahSzpFdk7QtxEB93Npf8IQAAAAk"]
[Tue May 26 04:40:04.060542 2026] [:error] [pid 20125:tid 20149] [client 134.199.171.224:46406] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahSzpNk9jeWERFDLJc5oEAAAANY"]
[Tue May 26 04:40:04.061325 2026] [:error] [pid 20026:tid 20114] [client 134.199.171.224:46432] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahSzpDXIXIr-5BZ8nR7SGQAAAJY"]
[Tue May 26 04:40:04.084512 2026] [:error] [pid 20024:tid 20053] [client 134.199.171.224:46450] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahSzpFdk7QtxEB93Npf8IgAAAA8"]
[Tue May 26 04:40:04.085042 2026] [:error] [pid 20026:tid 20098] [client 134.199.171.224:46442] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahSzpDXIXIr-5BZ8nR7SGgAAAIY"]
[Tue May 26 04:40:04.112835 2026] [:error] [pid 20024:tid 20049] [client 134.199.171.224:46464] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahSzpFdk7QtxEB93Npf8IwAAAAs"]
[Tue May 26 04:40:04.113940 2026] [:error] [pid 20125:tid 20151] [client 134.199.171.224:46468] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahSzpNk9jeWERFDLJc5oEQAAANg"]
[Tue May 26 04:40:04.129470 2026] [:error] [pid 20024:tid 20060] [client 134.199.171.224:46480] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahSzpFdk7QtxEB93Npf8JAAAABY"]
[Tue May 26 04:40:04.130755 2026] [:error] [pid 20024:tid 20050] [client 134.199.171.224:46482] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahSzpFdk7QtxEB93Npf8JQAAAAw"]
[Tue May 26 04:40:04.146269 2026] [:error] [pid 20125:tid 20127] [client 134.199.171.224:46494] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahSzpNk9jeWERFDLJc5oEgAAAMA"]
[Tue May 26 04:40:05.091113 2026] [:error] [pid 20025:tid 20081] [client 134.199.171.224:46428] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTcAAAAFA"]
[Tue May 26 04:40:05.154814 2026] [:error] [pid 55988:tid 56009] [client 134.199.171.224:46496] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahSzpf3kVIz2sql52sc6lwAAARI"]
[Tue May 26 04:40:05.252837 2026] [:error] [pid 20024:tid 20052] [client 134.199.171.224:46508] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8JwAAAA4"]
[Tue May 26 04:40:05.279682 2026] [:error] [pid 20024:tid 20042] [client 134.199.171.224:46510] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8KAAAAAQ"]
[Tue May 26 04:40:05.306488 2026] [:error] [pid 20025:tid 20065] [client 134.199.171.224:46518] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTcQAAAEA"]
[Tue May 26 04:40:05.308229 2026] [:error] [pid 20025:tid 20072] [client 134.199.171.224:46520] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTcgAAAEc"]
[Tue May 26 04:40:05.311223 2026] [:error] [pid 20025:tid 20070] [client 134.199.171.224:46542] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTcwAAAEU"]
[Tue May 26 04:40:05.324309 2026] [:error] [pid 20025:tid 20068] [client 134.199.171.224:46532] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTdAAAAEM"]
[Tue May 26 04:40:05.327699 2026] [:error] [pid 20025:tid 20085] [client 134.199.171.224:46544] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTdQAAAFQ"]
[Tue May 26 04:40:05.350381 2026] [:error] [pid 20025:tid 20087] [client 134.199.171.224:46574] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTdgAAAFY"]
[Tue May 26 04:40:05.353522 2026] [:error] [pid 20025:tid 20073] [client 134.199.171.224:46570] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTdwAAAEg"]
[Tue May 26 04:40:05.353941 2026] [:error] [pid 20025:tid 20077] [client 134.199.171.224:46560] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTeAAAAEw"]
[Tue May 26 04:40:05.355018 2026] [:error] [pid 20024:tid 20045] [client 134.199.171.224:46576] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8KQAAAAc"]
[Tue May 26 04:40:05.358413 2026] [:error] [pid 20025:tid 20067] [client 134.199.171.224:46614] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTeQAAAEI"]
[Tue May 26 04:40:05.368513 2026] [:error] [pid 20025:tid 20086] [client 134.199.171.224:46592] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTegAAAFU"]
[Tue May 26 04:40:05.368938 2026] [:error] [pid 55988:tid 56011] [client 134.199.171.224:46608] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahSzpf3kVIz2sql52sc6mAAAARQ"]
[Tue May 26 04:40:05.373841 2026] [:error] [pid 55988:tid 56007] [client 134.199.171.224:46618] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6mQAAARA"]
[Tue May 26 04:40:05.375076 2026] [:error] [pid 20025:tid 20078] [client 134.199.171.224:46632] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTewAAAE0"]
[Tue May 26 04:40:05.375909 2026] [:error] [pid 55988:tid 56012] [client 134.199.171.224:46620] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6mgAAARU"]
[Tue May 26 04:40:05.391618 2026] [:error] [pid 20024:tid 20061] [client 134.199.171.224:46646] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8KgAAABc"]
[Tue May 26 04:40:05.392784 2026] [:error] [pid 20024:tid 20054] [client 134.199.171.224:46662] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8KwAAABA"]
[Tue May 26 04:40:05.402788 2026] [:error] [pid 20024:tid 20046] [client 134.199.171.224:46680] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8LAAAAAg"]
[Tue May 26 04:40:05.411054 2026] [:error] [pid 20024:tid 20039] [client 134.199.171.224:46674] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8LQAAAAE"]
[Tue May 26 04:40:05.413917 2026] [:error] [pid 55988:tid 55999] [client 134.199.171.224:46720] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6mwAAAQg"]
[Tue May 26 04:40:05.416823 2026] [:error] [pid 20024:tid 20059] [client 134.199.171.224:46702] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8LgAAABU"]
[Tue May 26 04:40:05.417510 2026] [:error] [pid 20024:tid 20038] [client 134.199.171.224:46718] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8LwAAAAA"]
[Tue May 26 04:40:05.417907 2026] [:error] [pid 20024:tid 20054] [client 134.199.171.224:46692] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpVdk7QtxEB93Npf8MAAAABA"]
[Tue May 26 04:40:05.418973 2026] [:error] [pid 55988:tid 56015] [client 134.199.171.224:46724] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahSzpf3kVIz2sql52sc6nAAAARg"]
[Tue May 26 04:40:05.446723 2026] [:error] [pid 20024:tid 20048] [client 134.199.171.224:46740] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahSzpVdk7QtxEB93Npf8MQAAAAo"]
[Tue May 26 04:40:05.447102 2026] [:error] [pid 55988:tid 55996] [client 134.199.171.224:46752] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6ngAAAQU"]
[Tue May 26 04:40:05.447134 2026] [:error] [pid 55988:tid 55997] [client 134.199.171.224:46732] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6nQAAAQY"]
[Tue May 26 04:40:05.465878 2026] [:error] [pid 20125:tid 20147] [client 134.199.171.224:46756] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oEwAAANQ"]
[Tue May 26 04:40:05.465992 2026] [:error] [pid 20025:tid 20066] [client 134.199.171.224:46774] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTfAAAAEE"]
[Tue May 26 04:40:05.467023 2026] [:error] [pid 20026:tid 20112] [client 134.199.171.224:46772] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SHAAAAJQ"]
[Tue May 26 04:40:05.468632 2026] [:error] [pid 20125:tid 20133] [client 134.199.171.224:46796] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oFAAAAMY"]
[Tue May 26 04:40:05.469132 2026] [:error] [pid 20025:tid 20088] [client 134.199.171.224:46788] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTfQAAAFc"]
[Tue May 26 04:40:05.469990 2026] [:error] [pid 20026:tid 20104] [client 134.199.171.224:46770] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SHQAAAIw"]
[Tue May 26 04:40:05.472143 2026] [:error] [pid 20026:tid 20105] [client 134.199.171.224:46810] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SHgAAAI0"]
[Tue May 26 04:40:05.551446 2026] [:error] [pid 20025:tid 20084] [client 134.199.171.224:46822] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTfgAAAFM"]
[Tue May 26 04:40:05.577271 2026] [:error] [pid 20025:tid 20079] [client 134.199.171.224:46838] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTgAAAAE4"]
[Tue May 26 04:40:05.578279 2026] [:error] [pid 20026:tid 20100] [client 134.199.171.224:46850] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SIAAAAIg"]
[Tue May 26 04:40:05.596641 2026] [:error] [pid 20125:tid 20136] [client 134.199.171.224:46852] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oFgAAAMk"]
[Tue May 26 04:40:05.600284 2026] [:error] [pid 20026:tid 20113] [client 134.199.171.224:46856] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SIQAAAJU"]
[Tue May 26 04:40:05.626040 2026] [:error] [pid 20026:tid 20111] [client 134.199.171.224:46872] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SIgAAAJM"]
[Tue May 26 04:40:05.626064 2026] [:error] [pid 20125:tid 20148] [client 134.199.171.224:46882] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oFwAAANU"]
[Tue May 26 04:40:05.634171 2026] [:error] [pid 20125:tid 20139] [client 134.199.171.224:46890] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oGAAAAMw"]
[Tue May 26 04:40:05.635137 2026] [:error] [pid 20025:tid 20083] [client 134.199.171.224:46896] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTgQAAAFI"]
[Tue May 26 04:40:05.636499 2026] [:error] [pid 55988:tid 56014] [client 134.199.171.224:46898] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6nwAAARc"]
[Tue May 26 04:40:05.637414 2026] [:error] [pid 20025:tid 20074] [client 134.199.171.224:46904] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTggAAAEk"]
[Tue May 26 04:40:05.638193 2026] [:error] [pid 55988:tid 56008] [client 134.199.171.224:46928] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6oAAAARE"]
[Tue May 26 04:40:05.639357 2026] [:error] [pid 55988:tid 55998] [client 134.199.171.224:46914] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6oQAAAQc"]
[Tue May 26 04:40:05.644399 2026] [:error] [pid 20025:tid 20076] [client 134.199.171.224:46934] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTgwAAAEs"]
[Tue May 26 04:40:05.661056 2026] [:error] [pid 55988:tid 56010] [client 134.199.171.224:46942] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahSzpf3kVIz2sql52sc6ogAAARM"]
[Tue May 26 04:40:05.666222 2026] [:error] [pid 20125:tid 20143] [client 134.199.171.224:46948] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oGQAAANA"]
[Tue May 26 04:40:05.676834 2026] [:error] [pid 20125:tid 20130] [client 134.199.171.224:46958] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oGgAAAMM"]
[Tue May 26 04:40:05.679793 2026] [:error] [pid 20025:tid 20071] [client 134.199.171.224:46970] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWThAAAAEY"]
[Tue May 26 04:40:05.681317 2026] [:error] [pid 20025:tid 20069] [client 134.199.171.224:46968] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWThQAAAEQ"]
[Tue May 26 04:40:05.685531 2026] [:error] [pid 20026:tid 20115] [client 134.199.171.224:46994] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SIwAAAJc"]
[Tue May 26 04:40:05.686182 2026] [:error] [pid 20026:tid 20107] [client 134.199.171.224:47010] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SJAAAAI8"]
[Tue May 26 04:40:05.688026 2026] [:error] [pid 20125:tid 20146] [client 134.199.171.224:46986] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oGwAAANM"]
[Tue May 26 04:40:05.688634 2026] [:error] [pid 20025:tid 20089] [client 134.199.171.224:46988] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWThgAAAFg"]
[Tue May 26 04:40:05.697963 2026] [:error] [pid 20025:tid 20080] [client 134.199.171.224:47024] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWThwAAAE8"]
[Tue May 26 04:40:05.698620 2026] [:error] [pid 20025:tid 20082] [client 134.199.171.224:47028] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTiAAAAFE"]
[Tue May 26 04:40:05.703543 2026] [:error] [pid 20025:tid 20081] [client 134.199.171.224:47040] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTiQAAAFA"]
[Tue May 26 04:40:05.712888 2026] [:error] [pid 20125:tid 20128] [client 134.199.171.224:47044] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oHAAAAME"]
[Tue May 26 04:40:05.724191 2026] [:error] [pid 20025:tid 20065] [client 134.199.171.224:47060] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTigAAAEA"]
[Tue May 26 04:40:05.727659 2026] [:error] [pid 20025:tid 20072] [client 134.199.171.224:47066] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTiwAAAEc"]
[Tue May 26 04:40:05.730676 2026] [:error] [pid 20125:tid 20131] [client 134.199.171.224:47074] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oHQAAAMQ"]
[Tue May 26 04:40:05.733426 2026] [:error] [pid 20025:tid 20070] [client 134.199.171.224:47082] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTjAAAAEU"]
[Tue May 26 04:40:05.734292 2026] [:error] [pid 20125:tid 20135] [client 134.199.171.224:47084] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oHgAAAMg"]
[Tue May 26 04:40:05.735483 2026] [:error] [pid 20025:tid 20068] [client 134.199.171.224:47100] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTjQAAAEM"]
[Tue May 26 04:40:05.743885 2026] [:error] [pid 20025:tid 20085] [client 134.199.171.224:47116] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTjgAAAFQ"]
[Tue May 26 04:40:05.759023 2026] [:error] [pid 20125:tid 20134] [client 134.199.171.224:47126] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oHwAAAMc"]
[Tue May 26 04:40:05.771138 2026] [:error] [pid 20025:tid 20087] [client 134.199.171.224:47128] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTjwAAAFY"]
[Tue May 26 04:40:05.791824 2026] [:error] [pid 20026:tid 20092] [client 134.199.171.224:47130] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SJQAAAIA"]
[Tue May 26 04:40:05.814120 2026] [:error] [pid 20025:tid 20073] [client 134.199.171.224:47132] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTkAAAAEg"]
[Tue May 26 04:40:05.829137 2026] [:error] [pid 20025:tid 20077] [client 134.199.171.224:47136] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTkQAAAEw"]
[Tue May 26 04:40:05.836469 2026] [:error] [pid 20025:tid 20067] [client 134.199.171.224:47152] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTkgAAAEI"]
[Tue May 26 04:40:05.840808 2026] [:error] [pid 20026:tid 20095] [client 134.199.171.224:47160] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SJgAAAIM"]
[Tue May 26 04:40:05.849820 2026] [:error] [pid 20026:tid 20093] [client 134.199.171.224:47162] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SJwAAAIE"]
[Tue May 26 04:40:05.852605 2026] [:error] [pid 20026:tid 20108] [client 134.199.171.224:47164] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SKAAAAJA"]
[Tue May 26 04:40:05.857754 2026] [:error] [pid 20025:tid 20086] [client 134.199.171.224:47180] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahSzpX7k8Vts-JPOkgWTkwAAAFU"]
[Tue May 26 04:40:05.871377 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:47190] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oIAAAAM8"]
[Tue May 26 04:40:05.878993 2026] [:error] [pid 20125:tid 20149] [client 134.199.171.224:47204] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oIQAAANY"]
[Tue May 26 04:40:05.882829 2026] [:error] [pid 20125:tid 20151] [client 134.199.171.224:47220] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oIgAAANg"]
[Tue May 26 04:40:05.886338 2026] [:error] [pid 20125:tid 20127] [client 134.199.171.224:47222] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oIwAAAMA"]
[Tue May 26 04:40:05.892151 2026] [:error] [pid 20125:tid 20150] [client 134.199.171.224:47224] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oJAAAANc"]
[Tue May 26 04:40:05.893942 2026] [:error] [pid 20125:tid 20141] [client 134.199.171.224:47238] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oJQAAAM4"]
[Tue May 26 04:40:05.905523 2026] [:error] [pid 20125:tid 20137] [client 134.199.171.224:47244] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oJgAAAMo"]
[Tue May 26 04:40:05.918950 2026] [:error] [pid 20026:tid 20094] [client 134.199.171.224:47252] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahSzpTXIXIr-5BZ8nR7SKQAAAII"]
[Tue May 26 04:40:05.931438 2026] [:error] [pid 20125:tid 20132] [client 134.199.171.224:47268] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oJwAAAMU"]
[Tue May 26 04:40:05.932090 2026] [:error] [pid 20125:tid 20145] [client 134.199.171.224:47270] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oKAAAANI"]
[Tue May 26 04:40:05.936318 2026] [:error] [pid 20125:tid 20144] [client 134.199.171.224:47276] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oKQAAANE"]
[Tue May 26 04:40:05.940973 2026] [:error] [pid 20125:tid 20147] [client 134.199.171.224:47288] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oKgAAANQ"]
[Tue May 26 04:40:05.984265 2026] [:error] [pid 20125:tid 20133] [client 134.199.171.224:47296] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpdk9jeWERFDLJc5oKwAAAMY"]
[Tue May 26 04:40:06.107174 2026] [:error] [pid 20125:tid 20139] [client 134.199.171.224:47306] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oLgAAAMw"]
[Tue May 26 04:40:06.131887 2026] [:error] [pid 20125:tid 20143] [client 134.199.171.224:47308] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oLwAAANA"]
[Tue May 26 04:40:06.152939 2026] [:error] [pid 20125:tid 20130] [client 134.199.171.224:47318] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oMAAAAMM"]
[Tue May 26 04:40:06.155006 2026] [:error] [pid 20125:tid 20146] [client 134.199.171.224:47328] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oMQAAANM"]
[Tue May 26 04:40:06.189062 2026] [:error] [pid 20125:tid 20131] [client 134.199.171.224:47340] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oMgAAAMQ"]
[Tue May 26 04:40:06.189717 2026] [:error] [pid 20125:tid 20128] [client 134.199.171.224:47330] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oMwAAAME"]
[Tue May 26 04:40:06.211417 2026] [:error] [pid 55988:tid 56000] [client 134.199.171.224:47356] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpv3kVIz2sql52sc6owAAAQk"]
[Tue May 26 04:40:06.214993 2026] [:error] [pid 20125:tid 20131] [client 134.199.171.224:47346] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oNAAAAMQ"]
[Tue May 26 04:40:06.243078 2026] [:error] [pid 20125:tid 20134] [client 134.199.171.224:47370] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oNQAAAMc"]
[Tue May 26 04:40:06.247974 2026] [:error] [pid 20125:tid 20142] [client 134.199.171.224:47372] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oNgAAAM8"]
[Tue May 26 04:40:06.261969 2026] [:error] [pid 55988:tid 56001] [client 134.199.171.224:47380] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzpv3kVIz2sql52sc6pAAAAQo"]
[Tue May 26 04:40:06.286457 2026] [:error] [pid 20125:tid 20149] [client 134.199.171.224:47390] [client 134.199.171.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.dbservices.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahSzptk9jeWERFDLJc5oOAAAANY"]
[Tue May 26 07:10:52.268484 2026] [:error] [pid 20024:tid 20053] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/abpxrnwe.php
[Tue May 26 07:10:52.591569 2026] [:error] [pid 20024:tid 20051] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/bhigtouj.php
[Tue May 26 07:10:52.903646 2026] [:error] [pid 20024:tid 20044] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 26 07:10:53.219612 2026] [:error] [pid 20024:tid 20061] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/devlpgmy.php
[Tue May 26 07:10:53.534276 2026] [:error] [pid 20024:tid 20047] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-skes.php
[Tue May 26 07:10:53.846252 2026] [:error] [pid 20024:tid 20059] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/GA13.php
[Tue May 26 07:10:54.158569 2026] [:error] [pid 20024:tid 20041] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/rubly.php
[Tue May 26 07:10:54.469957 2026] [:error] [pid 20024:tid 20052] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/zolando.php
[Tue May 26 07:10:54.782542 2026] [:error] [pid 20024:tid 20055] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 26 07:10:55.101209 2026] [:error] [pid 20024:tid 20046] [client 20.195.199.65:31833] File does not exist: /usr/local/apache/htdocs/suspended-page/loli.php
[Tue May 26 07:10:55.411508 2026] [:error] [pid 20024:tid 20057] [client 20.195.199.65:31833] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ahTW_1dk7QtxEB93NpcZ5QAAABM"]
[Tue May 26 07:10:56.155088 2026] [:error] [pid 55988:tid 56001] [client 20.195.199.65:31810] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ahTXAP3kVIz2sql52seAQgAAAQo"]
[Tue May 26 07:10:57.010321 2026] [:error] [pid 55988:tid 56009] [client 20.195.199.65:50129] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ahTXAf3kVIz2sql52seASAAAARI"]
[Tue May 26 07:10:57.825558 2026] [:error] [pid 55988:tid 55992] [client 20.195.199.65:61487] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/t.php"] [unique_id "ahTXAf3kVIz2sql52seAVgAAAQE"]
[Tue May 26 07:10:58.472374 2026] [:error] [pid 20125:tid 20134] [client 20.195.199.65:48941] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "ahTXAtk9jeWERFDLJc6bfQAAAMc"]
[Tue May 26 07:10:59.159368 2026] [:error] [pid 20025:tid 20075] [client 20.195.199.65:31818] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "ahTXA37k8Vts-JPOkgW1hgAAAEo"]
[Tue May 26 07:10:59.787511 2026] [:error] [pid 55988:tid 56005] [client 20.195.199.65:31812] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "ahTXA_3kVIz2sql52seAagAAAQ4"]
[Tue May 26 07:11:00.427145 2026] [:error] [pid 20026:tid 20113] [client 20.195.199.65:61480] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gecko-new.php"] [unique_id "ahTXBDXIXIr-5BZ8nR757AAAAJU"]
[Tue May 26 07:11:01.085106 2026] [:error] [pid 20125:tid 20150] [client 20.195.199.65:31829] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admi.php"] [unique_id "ahTXBdk9jeWERFDLJc6bhQAAANc"]
[Tue May 26 07:11:01.792645 2026] [:error] [pid 20026:tid 20103] [client 20.195.199.65:59157] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admi.php"] [unique_id "ahTXBTXIXIr-5BZ8nR758QAAAIs"]
[Tue May 26 07:11:02.778804 2026] [:error] [pid 20026:tid 20093] [client 20.195.199.65:61481] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admi.php"] [unique_id "ahTXBjXIXIr-5BZ8nR758wAAAIE"]
[Tue May 26 07:11:03.490408 2026] [:error] [pid 20026:tid 20109] [client 20.195.199.65:49356] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/admi.php"] [unique_id "ahTXBzXIXIr-5BZ8nR759QAAAJE"]
[Tue May 26 07:11:04.211853 2026] [:error] [pid 20025:tid 20076] [client 20.195.199.65:31839] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "ahTXCH7k8Vts-JPOkgW1igAAAEs"]
[Tue May 26 07:11:04.877118 2026] [:error] [pid 20025:tid 20075] [client 20.195.199.65:61500] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "ahTXCH7k8Vts-JPOkgW1jAAAAEo"]
[Tue May 26 07:11:05.523639 2026] [:error] [pid 20125:tid 20149] [client 20.195.199.65:61488] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "ahTXCdk9jeWERFDLJc6bjgAAANY"]
[Tue May 26 07:11:06.147417 2026] [:error] [pid 20025:tid 20087] [client 20.195.199.65:61447] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gm.php"] [unique_id "ahTXCn7k8Vts-JPOkgW1jQAAAFY"]
[Tue May 26 07:11:06.842468 2026] [:error] [pid 20026:tid 20096] [client 20.195.199.65:64386] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "ahTXCjXIXIr-5BZ8nR75-gAAAIQ"]
[Tue May 26 07:11:07.477559 2026] [:error] [pid 20125:tid 20138] [client 20.195.199.65:59152] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "ahTXC9k9jeWERFDLJc6bmAAAAMs"]
[Tue May 26 07:11:08.169120 2026] [:error] [pid 20125:tid 20134] [client 20.195.199.65:64414] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "ahTXDNk9jeWERFDLJc6bmwAAAMc"]
[Tue May 26 07:11:08.790962 2026] [:error] [pid 20026:tid 20098] [client 20.195.199.65:50113] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/xse.php"] [unique_id "ahTXDDXIXIr-5BZ8nR75_AAAAIY"]
[Tue May 26 07:11:09.411134 2026] [:error] [pid 20024:tid 20051] [client 20.195.199.65:50115] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "ahTXDVdk7QtxEB93NpcZ8gAAAA0"]
[Tue May 26 07:11:10.040986 2026] [:error] [pid 20026:tid 20108] [client 20.195.199.65:48896] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "ahTXDjXIXIr-5BZ8nR75_QAAAJA"]
[Tue May 26 07:11:10.658678 2026] [:error] [pid 20026:tid 20099] [client 20.195.199.65:48923] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "ahTXDjXIXIr-5BZ8nR75_gAAAIc"]
[Tue May 26 07:11:11.285643 2026] [:error] [pid 55988:tid 55997] [client 20.195.199.65:50121] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tin.php"] [unique_id "ahTXD_3kVIz2sql52seAdAAAAQY"]
[Tue May 26 07:11:11.904115 2026] [:error] [pid 20024:tid 20061] [client 20.195.199.65:49367] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.phps"] [unique_id "ahTXD1dk7QtxEB93NpcZ9QAAABc"]
[Tue May 26 07:11:12.534490 2026] [:error] [pid 20026:tid 20116] [client 20.195.199.65:48936] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.phps"] [unique_id "ahTXEDXIXIr-5BZ8nR76AgAAAJg"]
[Tue May 26 07:11:13.153992 2026] [:error] [pid 20125:tid 20130] [client 20.195.199.65:64385] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.phps"] [unique_id "ahTXEdk9jeWERFDLJc6boQAAAMM"]
[Tue May 26 07:11:13.935476 2026] [:error] [pid 55988:tid 56009] [client 20.195.199.65:51775] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-true.phps"] [unique_id "ahTXEf3kVIz2sql52seAiAAAARI"]
[Tue May 26 07:11:14.754116 2026] [:error] [pid 20026:tid 20101] [client 20.195.199.65:52461] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mighty2.php"] [unique_id "ahTXEjXIXIr-5BZ8nR76EgAAAIk"]
[Tue May 26 07:11:15.389223 2026] [:error] [pid 20026:tid 20097] [client 20.195.199.65:31826] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mighty2.php"] [unique_id "ahTXEzXIXIr-5BZ8nR76FQAAAIU"]
[Tue May 26 07:11:16.033478 2026] [:error] [pid 55988:tid 56013] [client 20.195.199.65:49387] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mighty2.php"] [unique_id "ahTXFP3kVIz2sql52seAmQAAARY"]
[Tue May 26 07:11:16.660095 2026] [:error] [pid 55988:tid 56007] [client 20.195.199.65:50152] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/mighty2.php"] [unique_id "ahTXFP3kVIz2sql52seAmgAAARA"]
[Tue May 26 07:11:17.289490 2026] [:error] [pid 55988:tid 56010] [client 20.195.199.65:48941] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-in.php"] [unique_id "ahTXFf3kVIz2sql52seAnAAAARM"]
[Tue May 26 07:11:17.911580 2026] [:error] [pid 55988:tid 55999] [client 20.195.199.65:51770] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-in.php"] [unique_id "ahTXFf3kVIz2sql52seAnwAAAQg"]
[Tue May 26 07:11:18.531155 2026] [:error] [pid 55988:tid 56000] [client 20.195.199.65:32821] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-in.php"] [unique_id "ahTXFv3kVIz2sql52seAowAAAQk"]
[Tue May 26 07:11:19.150419 2026] [:error] [pid 55988:tid 55996] [client 20.195.199.65:32777] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-in.php"] [unique_id "ahTXF_3kVIz2sql52seApgAAAQU"]
[Tue May 26 07:11:19.865681 2026] [:error] [pid 20024:tid 20038] [client 20.195.199.65:49372] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4kn.php"] [unique_id "ahTXF1dk7QtxEB93NpcZ_QAAAAA"]
[Tue May 26 07:11:20.484728 2026] [:error] [pid 55988:tid 56004] [client 20.195.199.65:49377] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4kn.php"] [unique_id "ahTXGP3kVIz2sql52seAqgAAAQ0"]
[Tue May 26 07:11:21.139497 2026] [:error] [pid 20025:tid 20076] [client 20.195.199.65:32001] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4kn.php"] [unique_id "ahTXGX7k8Vts-JPOkgW1mwAAAEs"]
[Tue May 26 07:11:21.778961 2026] [:error] [pid 55988:tid 56014] [client 20.195.199.65:31941] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/4kn.php"] [unique_id "ahTXGf3kVIz2sql52seArgAAARc"]
[Tue May 26 07:11:22.398788 2026] [:error] [pid 20125:tid 20148] [client 20.195.199.65:51750] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rrtx.php"] [unique_id "ahTXGtk9jeWERFDLJc6brQAAANU"]
[Tue May 26 07:11:23.019013 2026] [:error] [pid 20025:tid 20089] [client 20.195.199.65:31959] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rrtx.php"] [unique_id "ahTXG37k8Vts-JPOkgW1ngAAAFg"]
[Tue May 26 07:11:23.645330 2026] [:error] [pid 20025:tid 20087] [client 20.195.199.65:32026] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rrtx.php"] [unique_id "ahTXG37k8Vts-JPOkgW1oAAAAFY"]
[Tue May 26 07:11:24.263394 2026] [:error] [pid 55988:tid 56001] [client 20.195.199.65:31987] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-rrtx.php"] [unique_id "ahTXHP3kVIz2sql52seAswAAAQo"]
[Tue May 26 07:11:24.897640 2026] [:error] [pid 55988:tid 56013] [client 20.195.199.65:59226] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeru.php"] [unique_id "ahTXHP3kVIz2sql52seAtAAAARY"]
[Tue May 26 07:11:25.514780 2026] [:error] [pid 55988:tid 56011] [client 20.195.199.65:46149] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeru.php"] [unique_id "ahTXHf3kVIz2sql52seAuQAAARQ"]
[Tue May 26 07:11:26.137910 2026] [:error] [pid 55988:tid 56003] [client 20.195.199.65:46188] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeru.php"] [unique_id "ahTXHv3kVIz2sql52seAwAAAAQw"]
[Tue May 26 07:11:26.790601 2026] [:error] [pid 20125:tid 20132] [client 20.195.199.65:62763] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/jeru.php"] [unique_id "ahTXHtk9jeWERFDLJc6bsgAAAMU"]
[Tue May 26 07:11:27.448991 2026] [:error] [pid 20125:tid 20148] [client 20.195.199.65:62720] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l.php"] [unique_id "ahTXH9k9jeWERFDLJc6buQAAANU"]
[Tue May 26 07:11:28.083655 2026] [:error] [pid 55988:tid 55999] [client 20.195.199.65:32321] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l.php"] [unique_id "ahTXIP3kVIz2sql52seAwwAAAQg"]
[Tue May 26 07:11:28.748715 2026] [:error] [pid 20026:tid 20116] [client 20.195.199.65:56039] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l.php"] [unique_id "ahTXIDXIXIr-5BZ8nR76HwAAAJg"]
[Tue May 26 07:11:29.372473 2026] [:error] [pid 20125:tid 20140] [client 20.195.199.65:64341] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/l.php"] [unique_id "ahTXIdk9jeWERFDLJc6bwAAAAM0"]
[Tue May 26 07:11:30.004609 2026] [:error] [pid 20024:tid 20046] [client 20.195.199.65:64362] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "ahTXIldk7QtxEB93NpcaAQAAAAg"]
[Tue May 26 07:11:30.632226 2026] [:error] [pid 20125:tid 20132] [client 20.195.199.65:32254] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "ahTXItk9jeWERFDLJc6bwgAAAMU"]
[Tue May 26 07:11:31.253181 2026] [:error] [pid 20026:tid 20113] [client 20.195.199.65:58499] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "ahTXIzXIXIr-5BZ8nR76IQAAAJU"]
[Tue May 26 07:11:31.876855 2026] [:error] [pid 20125:tid 20151] [client 20.195.199.65:32326] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/no18.php"] [unique_id "ahTXI9k9jeWERFDLJc6bxQAAANg"]
[Tue May 26 07:11:32.496018 2026] [:error] [pid 20025:tid 20079] [client 20.195.199.65:58546] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ahTXJH7k8Vts-JPOkgW1qgAAAE4"]
[Tue May 26 07:11:33.130006 2026] [:error] [pid 20125:tid 20140] [client 20.195.199.65:32218] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ahTXJdk9jeWERFDLJc6bzAAAAM0"]
[Tue May 26 07:11:33.756199 2026] [:error] [pid 55988:tid 56006] [client 20.195.199.65:58526] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ahTXJf3kVIz2sql52seA1gAAAQ8"]
[Tue May 26 07:11:34.389014 2026] [:error] [pid 20026:tid 20102] [client 20.195.199.65:14815] [client 20.195.199.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wmore1.php"] [unique_id "ahTXJjXIXIr-5BZ8nR76JQAAAIo"]
[Tue May 26 08:49:41.265314 2026] [:error] [pid 20025:tid 20068] [client 49.51.141.76:49784] [client 49.51.141.76] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahTuJX7k8Vts-JPOkgXitgAAAEM"]
[Tue May 26 10:04:55.963194 2026] [:error] [pid 55988:tid 56015] [client 43.140.37.167:45880] [client 43.140.37.167] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahT_x_3kVIz2sql52se9BgAAARg"]
[Tue May 26 11:12:30.220743 2026] [:error] [pid 20125:tid 20146] [client 170.106.192.208:51968] [client 170.106.192.208] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahUPntk9jeWERFDLJc7aBQAAANM"]
[Tue May 26 14:32:07.940111 2026] [:error] [pid 20024:tid 20048] [client 43.164.197.117:46546] [client 43.164.197.117] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahU-Z1dk7QtxEB93NpdnWQAAAAo"]
[Tue May 26 15:57:30.635932 2026] [:error] [pid 20026:tid 20113] [client 124.222.230.178:57424] [client 124.222.230.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahVSajXIXIr-5BZ8nR5pOAAAAJU"]
[Tue May 26 17:05:07.656267 2026] [:error] [pid 20024:tid 20041] [client 34.11.17.55:64788] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahViQ1dk7QtxEB93NpeBnAAAAAM"]
[Tue May 26 17:05:08.084734 2026] [:error] [pid 20025:tid 20081] [client 34.11.17.55:56652] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRH7k8Vts-JPOkgXPmgAAAFA"]
[Tue May 26 17:05:08.559441 2026] [:error] [pid 20125:tid 20133] [client 34.11.17.55:59282] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/feed/"] [unique_id "ahViRNk9jeWERFDLJc4yPwAAAMY"]
[Tue May 26 17:07:07.390857 2026] [:error] [pid 20025:tid 20069] [client 43.156.44.207:43188] [client 43.156.44.207] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dbservices.com.au"] [uri "/"] [unique_id "ahViu37k8Vts-JPOkgXQiAAAAEQ"]
[Tue May 26 17:47:18.752767 2026] [:error] [pid 33887:tid 33935] [client 213.202.253.4:59413] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Tue May 26 17:47:24.218532 2026] [:error] [pid 33886:tid 33899] [client 213.202.253.4:54251] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Tue May 26 17:47:51.496878 2026] [:error] [pid 33886:tid 33900] [client 213.202.253.4:59219] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Tue May 26 17:47:57.597999 2026] [:error] [pid 33888:tid 33958] [client 213.202.253.4:64194] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php, referer: www.google.com
[Tue May 26 17:48:02.677404 2026] [:error] [pid 33887:tid 33943] [client 213.202.253.4:58650] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Tue May 26 17:48:08.273087 2026] [:error] [pid 33888:tid 33969] [client 213.202.253.4:51810] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php, referer: www.google.com
[Tue May 26 17:48:13.498204 2026] [:error] [pid 36497:tid 36510] [client 213.202.253.4:64616] File does not exist: /usr/local/apache/htdocs/suspended-page/gdftps.php, referer: www.google.com
[Tue May 26 17:48:18.172580 2026] [:error] [pid 36497:tid 36529] [client 213.202.253.4:50676] [client 213.202.253.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/gdftps.php"] [unique_id "ahVsYrjKQWM1gBmBY4iJOQAAANM"], referer: www.google.com
[Tue May 26 20:22:06.942859 2026] [:error] [pid 36497:tid 36524] [client 43.153.192.98:42806] [client 43.153.192.98] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahWQbrjKQWM1gBmBY4jj3gAAAM4"]
[Tue May 26 21:39:05.919190 2026] [:error] [pid 43701:tid 43711] [client 129.204.188.64:55752] [client 129.204.188.64] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.dbservices.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.dbservices.com.au"] [uri "/"] [unique_id "ahWieYWtVI_UGrhtwKDlngAAAUg"]
[Tue May 26 23:00:48.153639 2026] [:error] [pid 43701:tid 43715] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue May 26 23:00:48.469941 2026] [:error] [pid 43701:tid 43703] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue May 26 23:00:48.785942 2026] [:error] [pid 43701:tid 43710] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/ma.php
[Tue May 26 23:00:49.102355 2026] [:error] [pid 43701:tid 43718] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Tue May 26 23:00:49.418775 2026] [:error] [pid 43701:tid 43725] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 26 23:00:49.734062 2026] [:error] [pid 43701:tid 43716] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/ppx.php
[Tue May 26 23:00:50.049842 2026] [:error] [pid 43701:tid 43715] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue May 26 23:00:51.560327 2026] [:error] [pid 43701:tid 43715] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/filexp.php
[Tue May 26 23:00:51.875982 2026] [:error] [pid 43701:tid 43722] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/m7rpo0.php
[Tue May 26 23:00:52.201500 2026] [:error] [pid 43701:tid 43724] [client 191.232.213.243:49063] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Tue May 26 23:00:52.513819 2026] [:error] [pid 43701:tid 43711] [client 191.232.213.243:49063] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "ahW1pIWtVI_UGrhtwKA1tgAAAUg"]
[Tue May 26 23:00:53.141130 2026] [:error] [pid 33886:tid 33905] [client 191.232.213.243:65486] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "ahW1pbBYzgp5rPVdHcXGYwAAAE4"]
[Tue May 26 23:00:53.759666 2026] [:error] [pid 43701:tid 43712] [client 191.232.213.243:46932] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "ahW1pYWtVI_UGrhtwKA1uQAAAUk"]
[Tue May 26 23:00:54.378701 2026] [:error] [pid 43701:tid 43727] [client 191.232.213.243:49035] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/dr.php"] [unique_id "ahW1poWtVI_UGrhtwKA1uwAAAVg"]
[Tue May 26 23:00:55.000061 2026] [:error] [pid 33886:tid 33900] [client 191.232.213.243:46917] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7gt.php"] [unique_id "ahW1prBYzgp5rPVdHcXGZgAAAEk"]
[Tue May 26 23:00:55.633405 2026] [:error] [pid 33977:tid 34000] [client 191.232.213.243:65497] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7gt.php"] [unique_id "ahW1p-9cnSDNAU9sYPgm0AAAABQ"]
[Tue May 26 23:00:56.254694 2026] [:error] [pid 33886:tid 33906] [client 191.232.213.243:65495] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7gt.php"] [unique_id "ahW1qLBYzgp5rPVdHcXGaQAAAE8"]
[Tue May 26 23:00:56.879078 2026] [:error] [pid 33977:tid 33996] [client 191.232.213.243:46925] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/7gt.php"] [unique_id "ahW1qO9cnSDNAU9sYPgm1gAAABA"]
[Tue May 26 23:00:57.495963 2026] [:error] [pid 33977:tid 33994] [client 191.232.213.243:49030] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "ahW1qe9cnSDNAU9sYPgm2wAAAA4"]
[Tue May 26 23:00:58.118723 2026] [:error] [pid 33977:tid 33992] [client 191.232.213.243:65512] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "ahW1qu9cnSDNAU9sYPgm3gAAAAw"]
[Tue May 26 23:00:58.736349 2026] [:error] [pid 33977:tid 34002] [client 191.232.213.243:65473] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "ahW1qu9cnSDNAU9sYPgm4gAAABY"]
[Tue May 26 23:00:59.368065 2026] [:error] [pid 43701:tid 43714] [client 191.232.213.243:49058] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/2468.php"] [unique_id "ahW1q4WtVI_UGrhtwKA10QAAAUs"]
[Tue May 26 23:01:00.006719 2026] [:error] [pid 33977:tid 34003] [client 191.232.213.243:49066] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s2.php"] [unique_id "ahW1rO9cnSDNAU9sYPgm6wAAABc"]
[Tue May 26 23:01:00.628044 2026] [:error] [pid 36497:tid 36527] [client 191.232.213.243:49039] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s2.php"] [unique_id "ahW1rLjKQWM1gBmBY4hY7wAAANE"]
[Tue May 26 23:01:01.248131 2026] [:error] [pid 36497:tid 36533] [client 191.232.213.243:46913] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s2.php"] [unique_id "ahW1rbjKQWM1gBmBY4hY8QAAANc"]
[Tue May 26 23:01:01.871765 2026] [:error] [pid 33977:tid 33992] [client 191.232.213.243:46940] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/s2.php"] [unique_id "ahW1re9cnSDNAU9sYPgm9AAAAAw"]
[Tue May 26 23:01:02.494905 2026] [:error] [pid 33977:tid 33984] [client 191.232.213.243:64765] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "ahW1ru9cnSDNAU9sYPgm-gAAAAQ"]
[Tue May 26 23:01:03.116933 2026] [:error] [pid 33977:tid 33989] [client 191.232.213.243:46957] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "ahW1r-9cnSDNAU9sYPgnAAAAAAk"]
[Tue May 26 23:01:03.749343 2026] [:error] [pid 36497:tid 36523] [client 191.232.213.243:49068] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "ahW1r7jKQWM1gBmBY4hY_QAAAM0"]
[Tue May 26 23:01:04.375757 2026] [:error] [pid 36497:tid 36524] [client 191.232.213.243:46945] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/tiny2.php"] [unique_id "ahW1sLjKQWM1gBmBY4hZAgAAAM4"]
[Tue May 26 23:01:05.000431 2026] [:error] [pid 33887:tid 33936] [client 191.232.213.243:49036] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ahW1sNCOI_FV7meOxGdgOgAAAJE"]
[Tue May 26 23:01:05.679488 2026] [:error] [pid 33888:tid 33947] [client 191.232.213.243:65474] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ahW1sTqzTeoxiinZsGE22AAAAQE"]
[Tue May 26 23:01:06.304854 2026] [:error] [pid 33977:tid 33989] [client 191.232.213.243:65508] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ahW1su9cnSDNAU9sYPgnCwAAAAk"]
[Tue May 26 23:01:06.929913 2026] [:error] [pid 33887:tid 33920] [client 191.232.213.243:49067] [client 191.232.213.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "dbservices.com.au"] [uri "/asd.php"] [unique_id "ahW1stCOI_FV7meOxGdgQAAAAIE"]